# Flog Txt Version 1 # Analyzer Version: 3.2.2 # Analyzer Build Date: Jun 3 2020 08:38:37 # Log Creation Date: 15.01.2021 20:42:13.781 Process: id = "1" image_name = "b221.exe" filename = "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\b221.exe" page_root = "0x4ba77000" os_pid = "0xab4" os_integrity_level = "0x3000" os_privileges = "0x60800000" monitor_reason = "analysis_target" parent_id = "0" os_parent_pid = "0x454" cmd_line = "\"C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\B221.exe\" " cur_dir = "C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\" os_username = "XDUWTFONO\\5p5NrGJn0jS HALPmcxz" bitness = "32" os_groups = "XDUWTFONO\\Domain Users" [0x7], "Everyone" [0x7], "BUILTIN\\Administrators" [0xf], "BUILTIN\\Users" [0x7], "NT AUTHORITY\\INTERACTIVE" [0x7], "CONSOLE LOGON" [0x7], "NT AUTHORITY\\Authenticated Users" [0x7], "NT AUTHORITY\\This Organization" [0x7], "NT AUTHORITY\\Logon Session 00000000:0000eb41" [0xc0000007], "LOCAL" [0x7], "NT AUTHORITY\\NTLM Authentication" [0x7] Thread: id = 1 os_tid = 0xaa4 [0026.296] CoInitializeEx (pvReserved=0x0, dwCoInit=0x2) returned 0x0 [0027.263] GetFullPathNameW (in: lpFileName="C:\\Windows\\Microsoft.Net\\assembly\\GAC_MSIL\\System.Windows.Forms\\v4.0_4.0.0.0__b77a5c561934e089\\System.Windows.Forms.dll", nBufferLength=0x105, lpBuffer=0x31e9cc, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\Microsoft.Net\\assembly\\GAC_MSIL\\System.Windows.Forms\\v4.0_4.0.0.0__b77a5c561934e089\\System.Windows.Forms.dll", lpFilePart=0x0) returned 0x77 [0027.278] IsAppThemed () returned 0x1 [0027.281] CoTaskMemAlloc (cb=0xf0) returned 0x3960d8 [0027.281] CreateActCtxA (pActCtx=0x31eec8) returned 0x396efc [0027.343] CoTaskMemFree (pv=0x3960d8) [0027.351] RegisterClipboardFormatW (lpszFormat="WM_GETCONTROLNAME") returned 0xc16e [0027.351] RegisterClipboardFormatW (lpszFormat="WM_GETCONTROLTYPE") returned 0xc16c [0027.370] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x0 [0027.373] LoadLibraryW (lpLibFileName="comctl32.dll") returned 0x74970000 [0027.857] AdjustWindowRectEx (in: lpRect=0x31ef24, dwStyle=0x56cf0000, bMenu=0, dwExStyle=0x50001 | out: lpRect=0x31ef24) returned 1 [0027.860] GetCurrentProcess () returned 0xffffffff [0027.860] DuplicateHandle (in: hSourceProcessHandle=0xffffffff, hSourceHandle=0xfffffffe, hTargetProcessHandle=0xffffffff, lpTargetHandle=0x31ee3c, dwDesiredAccess=0x0, bInheritHandle=0, dwOptions=0x2 | out: lpTargetHandle=0x31ee3c*=0x1e8) returned 1 [0027.873] GetCurrentActCtx (in: lphActCtx=0x31ed9c | out: lphActCtx=0x31ed9c*=0x0) returned 1 [0027.873] ActivateActCtx (in: hActCtx=0x396efc, lpCookie=0x31edac | out: hActCtx=0x396efc, lpCookie=0x31edac) returned 1 [0027.873] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x0 [0027.877] LoadLibraryW (lpLibFileName="comctl32.dll") returned 0x747d0000 [0028.607] GetModuleHandleW (lpModuleName="user32.dll") returned 0x77130000 [0028.607] GetProcAddress (hModule=0x77130000, lpProcName="DefWindowProcW") returned 0x77c725dd [0028.608] GetStockObject (i=5) returned 0x1900015 [0028.623] GetModuleHandleW (lpModuleName=0x0) returned 0x1200000 [0028.626] CoTaskMemAlloc (cb=0x5c) returned 0x39aa68 [0028.627] RegisterClassW (lpWndClass=0x31ec54) returned 0xc16d [0028.627] CoTaskMemFree (pv=0x39aa68) [0028.627] GetModuleHandleW (lpModuleName=0x0) returned 0x1200000 [0028.628] CreateWindowExW (dwExStyle=0x0, lpClassName="WindowsForms10.Window.8.app.0.141b42a_r14_ad1", lpWindowName=0x0, dwStyle=0x2010000, X=0, Y=0, nWidth=0, nHeight=0, hWndParent=0xfffffffd, hMenu=0x0, hInstance=0x1200000, lpParam=0x0) returned 0x6011c [0028.628] SetWindowLongW (hWnd=0x6011c, nIndex=-4, dwNewLong=2009540061) returned 17369062 [0028.629] GetWindowLongW (hWnd=0x6011c, nIndex=-4) returned 2009540061 [0028.707] RegOpenKeyExW (in: hKey=0x80000002, lpSubKey="Software\\Microsoft\\.NETFramework", ulOptions=0x0, samDesired=0x20019, phkResult=0x31e564 | out: phkResult=0x31e564*=0x208) returned 0x0 [0028.707] RegQueryValueExW (in: hKey=0x208, lpValueName="DbgJITDebugLaunchSetting", lpReserved=0x0, lpType=0x31e584, lpData=0x0, lpcbData=0x31e580*=0x0 | out: lpType=0x31e584*=0x0, lpData=0x0, lpcbData=0x31e580*=0x0) returned 0x2 [0028.707] RegQueryValueExW (in: hKey=0x208, lpValueName="DbgManagedDebugger", lpReserved=0x0, lpType=0x31e584, lpData=0x0, lpcbData=0x31e580*=0x0 | out: lpType=0x31e584*=0x0, lpData=0x0, lpcbData=0x31e580*=0x0) returned 0x2 [0028.708] RegCloseKey (hKey=0x208) returned 0x0 [0028.709] SetWindowLongW (hWnd=0x6011c, nIndex=-4, dwNewLong=17369102) returned 2009540061 [0028.710] GetWindowLongW (hWnd=0x6011c, nIndex=-4) returned 17369102 [0028.710] GetWindowLongW (hWnd=0x6011c, nIndex=-16) returned 113311744 [0028.711] RegisterClipboardFormatW (lpszFormat="WinFormsMouseEnter") returned 0xc059 [0028.711] RegisterClipboardFormatW (lpszFormat="WinFormsUnSubclass") returned 0xc16a [0028.711] CallWindowProcW (lpPrevWndFunc=0x77c725dd, hWnd=0x6011c, Msg=0x81, wParam=0x0, lParam=0x31e830) returned 0x1 [0028.711] CallWindowProcW (lpPrevWndFunc=0x77c725dd, hWnd=0x6011c, Msg=0x83, wParam=0x0, lParam=0x31e81c) returned 0x0 [0028.711] CallWindowProcW (lpPrevWndFunc=0x77c725dd, hWnd=0x6011c, Msg=0x1, wParam=0x0, lParam=0x31e830) returned 0x0 [0028.712] GetClientRect (in: hWnd=0x6011c, lpRect=0x31e598 | out: lpRect=0x31e598) returned 1 [0028.712] GetWindowRect (in: hWnd=0x6011c, lpRect=0x31e598 | out: lpRect=0x31e598) returned 1 [0028.713] GetParent (hWnd=0x6011c) returned 0x0 [0028.713] DeactivateActCtx (dwFlags=0x0, ulCookie=0x1f7b0001) returned 1 [0028.740] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x74970000 [0028.740] AdjustWindowRectEx (in: lpRect=0x31eef0, dwStyle=0x2cf0000, bMenu=0, dwExStyle=0x50000 | out: lpRect=0x31eef0) returned 1 [0028.740] GetSystemMetrics (nIndex=59) returned 1460 [0028.740] GetSystemMetrics (nIndex=60) returned 920 [0028.740] GetSystemMetrics (nIndex=34) returned 132 [0028.740] GetSystemMetrics (nIndex=35) returned 38 [0028.741] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x74970000 [0028.741] AdjustWindowRectEx (in: lpRect=0x31edf0, dwStyle=0x2cf0000, bMenu=0, dwExStyle=0x50000 | out: lpRect=0x31edf0) returned 1 [0028.745] CreateCompatibleDC (hdc=0x0) returned 0x2a0101e3 [0028.750] GetSystemDefaultLCID () returned 0x409 [0028.751] GetStockObject (i=17) returned 0x18a0025 [0028.752] GetObjectW (in: h=0x18a0025, c=92, pv=0x31ec54 | out: pv=0x31ec54) returned 92 [0028.753] GetDC (hWnd=0x0) returned 0x50109f2 [0028.797] GdiplusStartup (in: token=0x125e68, input=0x31e220, output=0x31e270 | out: token=0x125e68, output=0x31e270) returned 0x0 [0028.817] CoTaskMemAlloc (cb=0x5c) returned 0x39aa68 [0028.818] GdipCreateFontFromLogfontW (hdc=0x50109f2, logfont=0x39aa68, font=0x31ed1c) returned 0x0 [0028.908] CoTaskMemFree (pv=0x39aa68) [0028.908] CoTaskMemAlloc (cb=0x5c) returned 0x39aa68 [0028.908] CoTaskMemFree (pv=0x39aa68) [0028.908] CoTaskMemAlloc (cb=0x5c) returned 0x39aa68 [0028.909] CoTaskMemFree (pv=0x39aa68) [0028.909] GdipGetFontUnit (font=0x4d72230, unit=0x31ece8) returned 0x0 [0028.909] GdipGetFontSize (font=0x4d72230, size=0x31ecec) returned 0x0 [0028.909] GdipGetFontStyle (font=0x4d72230, style=0x31ece4) returned 0x0 [0028.909] GdipGetFamily (font=0x4d72230, family=0x31ece0) returned 0x0 [0028.910] GdipGetFontSize (font=0x4d72230, size=0x2618584) returned 0x0 [0028.910] ReleaseDC (hWnd=0x0, hDC=0x50109f2) returned 1 [0028.910] GetDC (hWnd=0x0) returned 0x3010a19 [0028.911] GdipCreateFromHDC (hdc=0x3010a19, graphics=0x31ed08) returned 0x0 [0028.912] GdipGetDpiY (graphics=0x4c1fcf0, dpi=0x261868c) returned 0x0 [0028.912] GdipGetFontHeight (font=0x4d72230, graphics=0x4c1fcf0, height=0x31ed00) returned 0x0 [0028.912] GdipGetEmHeight (family=0x4d7f6b8, style=0, EmHeight=0x31ed08) returned 0x0 [0028.912] GdipGetLineSpacing (family=0x4d7f6b8, style=0, LineSpacing=0x31ed08) returned 0x0 [0028.912] GdipDeleteGraphics (graphics=0x4c1fcf0) returned 0x0 [0028.913] ReleaseDC (hWnd=0x0, hDC=0x3010a19) returned 1 [0028.913] GdipCreateFont (fontFamily=0x4d7f6b8, emSize=0x41040000, style=0, unit=0x3, font=0x261864c) returned 0x0 [0028.913] GdipGetFontSize (font=0x4c72940, size=0x2618650) returned 0x0 [0028.913] GdipDeleteFont (font=0x4d72230) returned 0x0 [0028.914] GetDC (hWnd=0x0) returned 0x3010a19 [0028.914] GdipCreateFromHDC (hdc=0x3010a19, graphics=0x31ed2c) returned 0x0 [0028.915] CoTaskMemAlloc (cb=0x5c) returned 0x39aa68 [0028.915] GdipGetLogFontW (font=0x4c72940, graphics=0x4c1fcf0, logfontW=0x39aa68) returned 0x0 [0028.915] CoTaskMemFree (pv=0x39aa68) [0028.915] CoTaskMemAlloc (cb=0x5c) returned 0x39aa68 [0028.915] CoTaskMemFree (pv=0x39aa68) [0028.915] CoTaskMemAlloc (cb=0x5c) returned 0x39aa68 [0028.915] CoTaskMemFree (pv=0x39aa68) [0028.915] GdipDeleteGraphics (graphics=0x4c1fcf0) returned 0x0 [0028.916] ReleaseDC (hWnd=0x0, hDC=0x3010a19) returned 1 [0028.916] CoTaskMemAlloc (cb=0x5c) returned 0x39aa68 [0028.916] CreateFontIndirectW (lplf=0x39aa68) returned 0x2d0a025c [0028.916] CoTaskMemFree (pv=0x39aa68) [0028.916] SelectObject (hdc=0x2a0101e3, h=0x2d0a025c) returned 0x18a002e [0028.916] GetTextMetricsW (in: hdc=0x2a0101e3, lptm=0x31ee38 | out: lptm=0x31ee38) returned 1 [0028.917] GetTextExtentPoint32W (in: hdc=0x2a0101e3, lpString="abcdefghijklmnopqrstuvwxyzABCDEFGHIJKLMNOPQRSTUVWXYZ", c=52, psizl=0x26188a8 | out: psizl=0x26188a8) returned 1 [0028.918] SelectObject (hdc=0x2a0101e3, h=0x18a002e) returned 0x2d0a025c [0028.922] DeleteDC (hdc=0x2a0101e3) returned 1 [0028.923] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x74970000 [0028.923] AdjustWindowRectEx (in: lpRect=0x31eba4, dwStyle=0x2cf0000, bMenu=0, dwExStyle=0x50000 | out: lpRect=0x31eba4) returned 1 [0028.923] AdjustWindowRectEx (in: lpRect=0x31edc4, dwStyle=0x2cf0000, bMenu=0, dwExStyle=0x50000 | out: lpRect=0x31edc4) returned 1 [0028.923] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x74970000 [0028.923] AdjustWindowRectEx (in: lpRect=0x31eb1c, dwStyle=0x2cf0000, bMenu=0, dwExStyle=0x50000 | out: lpRect=0x31eb1c) returned 1 [0028.923] AdjustWindowRectEx (in: lpRect=0x31ebfc, dwStyle=0x2cf0000, bMenu=0, dwExStyle=0x50000 | out: lpRect=0x31ebfc) returned 1 [0028.923] GetSystemMetrics (nIndex=34) returned 132 [0028.923] GetSystemMetrics (nIndex=35) returned 38 [0028.923] GetCurrentActCtx (in: lphActCtx=0x31ef3c | out: lphActCtx=0x31ef3c*=0x0) returned 1 [0028.923] ActivateActCtx (in: hActCtx=0x396efc, lpCookie=0x31ef4c | out: hActCtx=0x396efc, lpCookie=0x31ef4c) returned 1 [0028.926] GetCurrentActCtx (in: lphActCtx=0x31ed5c | out: lphActCtx=0x31ed5c*=0x396efc) returned 1 [0028.926] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x747d0000 [0028.926] AdjustWindowRectEx (in: lpRect=0x31ecc0, dwStyle=0x2cf0000, bMenu=0, dwExStyle=0x50000 | out: lpRect=0x31ecc0) returned 1 [0028.926] GetModuleHandleW (lpModuleName=0x0) returned 0x1200000 [0028.926] CreateWindowExW (dwExStyle=0x50000, lpClassName="WindowsForms10.Window.8.app.0.141b42a_r14_ad1", lpWindowName="notepad.exe", dwStyle=0x2cf0000, X=-2147483648, Y=-2147483648, nWidth=239, nHeight=110, hWndParent=0x0, hMenu=0x0, hInstance=0x1200000, lpParam=0x0) returned 0x50116 [0028.926] SetWindowLongW (hWnd=0x50116, nIndex=-4, dwNewLong=2009540061) returned 17369062 [0028.926] GetWindowLongW (hWnd=0x50116, nIndex=-4) returned 2009540061 [0028.926] SetWindowLongW (hWnd=0x50116, nIndex=-4, dwNewLong=17369142) returned 2009540061 [0028.926] GetWindowLongW (hWnd=0x50116, nIndex=-4) returned 17369142 [0028.926] GetWindowLongW (hWnd=0x50116, nIndex=-16) returned 114229248 [0028.927] CallWindowProcW (lpPrevWndFunc=0x77c725dd, hWnd=0x50116, Msg=0x81, wParam=0x0, lParam=0x31e7f0) returned 0x1 [0028.927] CallWindowProcW (lpPrevWndFunc=0x77c725dd, hWnd=0x50116, Msg=0x83, wParam=0x0, lParam=0x31e7dc) returned 0x0 [0029.050] CallWindowProcW (lpPrevWndFunc=0x77c725dd, hWnd=0x50116, Msg=0x1, wParam=0x0, lParam=0x31e7f0) returned 0x0 [0029.050] GetClientRect (in: hWnd=0x50116, lpRect=0x31e528 | out: lpRect=0x31e528) returned 1 [0029.050] GetWindowRect (in: hWnd=0x50116, lpRect=0x31e528 | out: lpRect=0x31e528) returned 1 [0029.050] SetWindowTextW (hWnd=0x50116, lpString="notepad.exe") returned 1 [0029.050] CallWindowProcW (lpPrevWndFunc=0x77c725dd, hWnd=0x50116, Msg=0xc, wParam=0x0, lParam=0x2617dc8) returned 0x1 [0029.067] GetUserObjectInformationA (in: hObj=0x5c, nIndex=1, pvInfo=0x2618dc4, nLength=0xc, lpnLengthNeeded=0x31e428 | out: pvInfo=0x2618dc4, lpnLengthNeeded=0x31e428) returned 1 [0029.069] SetConsoleCtrlHandler (HandlerRoutine=0x109085e, Add=1) returned 1 [0029.070] GetModuleHandleW (lpModuleName=0x0) returned 0x1200000 [0029.070] GetModuleHandleW (lpModuleName=0x0) returned 0x1200000 [0029.071] GetClassInfoW (in: hInstance=0x1200000, lpClassName=".NET-BroadcastEventWindow.4.0.0.0.141b42a.0", lpWndClass=0x2618e28 | out: lpWndClass=0x2618e28) returned 0 [0029.073] CoTaskMemAlloc (cb=0x58) returned 0x37e820 [0029.073] RegisterClassW (lpWndClass=0x31e378) returned 0xc168 [0029.073] CoTaskMemFree (pv=0x37e820) [0029.074] CreateWindowExW (dwExStyle=0x0, lpClassName=".NET-BroadcastEventWindow.4.0.0.0.141b42a.0", lpWindowName=".NET-BroadcastEventWindow.4.0.0.0.141b42a.0", dwStyle=0x80000000, X=0, Y=0, nWidth=0, nHeight=0, hWndParent=0x0, hMenu=0x0, hInstance=0x1200000, lpParam=0x0) returned 0x301e6 [0029.074] NtdllDefWindowProc_W () returned 0x0 [0029.074] NtdllDefWindowProc_W () returned 0x0 [0029.074] NtdllDefWindowProc_W () returned 0x0 [0029.074] NtdllDefWindowProc_W () returned 0x0 [0029.098] GetStartupInfoW (in: lpStartupInfo=0x2619290 | out: lpStartupInfo=0x2619290*(cb=0x44, lpReserved="", lpDesktop="WinSta0\\Default", lpTitle="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\B221.exe", dwX=0x0, dwY=0x0, dwXSize=0x0, dwYSize=0x0, dwXCountChars=0x0, dwYCountChars=0x0, dwFillAttribute=0x0, dwFlags=0x1, wShowWindow=0x1, cbReserved2=0x0, lpReserved2=0x0, hStdInput=0x0, hStdOutput=0x0, hStdError=0x0)) [0029.098] GetParent (hWnd=0x50116) returned 0x0 [0029.098] SetWindowLongW (hWnd=0x50116, nIndex=-8, dwNewLong=0) returned 0 [0029.101] GetSystemMetrics (nIndex=11) returned 32 [0029.101] GetSystemMetrics (nIndex=12) returned 32 [0029.101] GetDC (hWnd=0x0) returned 0x3010a19 [0029.101] GetDeviceCaps (hdc=0x3010a19, index=12) returned 32 [0029.102] GetDeviceCaps (hdc=0x3010a19, index=14) returned 1 [0029.102] ReleaseDC (hWnd=0x0, hDC=0x3010a19) returned 1 [0029.102] CreateIconFromResourceEx (presbits=0x261bd2c, dwResSize=0x10a8, fIcon=1, dwVer=0x30000, cxDesired=0, cyDesired=0, Flags=0x0) returned 0x8016b [0029.103] GetSystemMetrics (nIndex=49) returned 16 [0029.103] GetSystemMetrics (nIndex=50) returned 16 [0029.103] CreateIconFromResourceEx (presbits=0x261ce10, dwResSize=0x468, fIcon=1, dwVer=0x30000, cxDesired=0, cyDesired=0, Flags=0x0) returned 0x202af [0029.103] SendMessageW (hWnd=0x50116, Msg=0x80, wParam=0x0, lParam=0x202af) returned 0x0 [0029.103] CallWindowProcW (lpPrevWndFunc=0x77c725dd, hWnd=0x50116, Msg=0x80, wParam=0x0, lParam=0x202af) returned 0x0 [0029.104] SendMessageW (hWnd=0x50116, Msg=0x80, wParam=0x1, lParam=0x8016b) returned 0x0 [0029.104] CallWindowProcW (lpPrevWndFunc=0x77c725dd, hWnd=0x50116, Msg=0x80, wParam=0x1, lParam=0x8016b) returned 0x0 [0029.115] CallWindowProcW (lpPrevWndFunc=0x77c725dd, hWnd=0x50116, Msg=0x7f, wParam=0x2, lParam=0x0) returned 0x202af [0029.116] GetSystemMenu (hWnd=0x50116, bRevert=0) returned 0x30251 [0029.117] GetWindowPlacement (in: hWnd=0x50116, lpwndpl=0x31ed6c | out: lpwndpl=0x31ed6c) returned 1 [0029.117] EnableMenuItem (hMenu=0x30251, uIDEnableItem=0xf020, uEnable=0x0) returned 0 [0029.117] EnableMenuItem (hMenu=0x30251, uIDEnableItem=0xf030, uEnable=0x0) returned 0 [0029.117] EnableMenuItem (hMenu=0x30251, uIDEnableItem=0xf060, uEnable=0x0) returned 0 [0029.117] EnableMenuItem (hMenu=0x30251, uIDEnableItem=0xf120, uEnable=0x1) returned 0 [0029.117] EnableMenuItem (hMenu=0x30251, uIDEnableItem=0xf000, uEnable=0x0) returned 0 [0029.117] GetClientRect (in: hWnd=0x50116, lpRect=0x31edb0 | out: lpRect=0x31edb0) returned 1 [0029.117] GetClientRect (in: hWnd=0x50116, lpRect=0x31ed10 | out: lpRect=0x31ed10) returned 1 [0029.117] GetWindowRect (in: hWnd=0x50116, lpRect=0x31ed10 | out: lpRect=0x31ed10) returned 1 [0029.117] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x747d0000 [0029.117] GetWindowLongW (hWnd=0x50116, nIndex=-16) returned 114229248 [0029.118] GetWindowTextLengthW (hWnd=0x50116) returned 11 [0029.118] CallWindowProcW (lpPrevWndFunc=0x77c725dd, hWnd=0x50116, Msg=0xe, wParam=0x0, lParam=0x0) returned 0xb [0029.118] GetSystemMetrics (nIndex=42) returned 0 [0029.118] GetWindowTextW (in: hWnd=0x50116, lpString=0x31eca8, nMaxCount=12 | out: lpString="notepad.exe") returned 11 [0029.118] CallWindowProcW (lpPrevWndFunc=0x77c725dd, hWnd=0x50116, Msg=0xd, wParam=0xc, lParam=0x31eca8) returned 0xb [0029.119] GetWindowTextLengthW (hWnd=0x50116) returned 11 [0029.119] CallWindowProcW (lpPrevWndFunc=0x77c725dd, hWnd=0x50116, Msg=0xe, wParam=0x0, lParam=0x0) returned 0xb [0029.119] GetSystemMetrics (nIndex=42) returned 0 [0029.119] GetWindowTextW (in: hWnd=0x50116, lpString=0x31eca8, nMaxCount=12 | out: lpString="notepad.exe") returned 11 [0029.119] CallWindowProcW (lpPrevWndFunc=0x77c725dd, hWnd=0x50116, Msg=0xd, wParam=0xc, lParam=0x31eca8) returned 0xb [0029.119] GetWindowLongW (hWnd=0x50116, nIndex=-16) returned 114229248 [0029.119] GetWindowLongW (hWnd=0x50116, nIndex=-20) returned 327936 [0029.119] SetWindowLongW (hWnd=0x50116, nIndex=-16, dwNewLong=47120384) returned 114229248 [0029.119] CallWindowProcW (lpPrevWndFunc=0x77c725dd, hWnd=0x50116, Msg=0x7c, wParam=0xfffffff0, lParam=0x31ed04) returned 0x0 [0029.119] CallWindowProcW (lpPrevWndFunc=0x77c725dd, hWnd=0x50116, Msg=0x7d, wParam=0xfffffff0, lParam=0x31ed04) returned 0x0 [0029.119] SetWindowLongW (hWnd=0x50116, nIndex=-20, dwNewLong=327680) returned 327936 [0029.119] CallWindowProcW (lpPrevWndFunc=0x77c725dd, hWnd=0x50116, Msg=0x7c, wParam=0xffffffec, lParam=0x31ed04) returned 0x0 [0029.120] CallWindowProcW (lpPrevWndFunc=0x77c725dd, hWnd=0x50116, Msg=0x7d, wParam=0xffffffec, lParam=0x31ed04) returned 0x0 [0029.120] SetWindowPos (hWnd=0x50116, hWndInsertAfter=0x0, X=0, Y=0, cx=0, cy=0, uFlags=0x37) returned 1 [0029.120] CallWindowProcW (lpPrevWndFunc=0x77c725dd, hWnd=0x50116, Msg=0x46, wParam=0x0, lParam=0x31ed24) returned 0x0 [0029.120] CallWindowProcW (lpPrevWndFunc=0x77c725dd, hWnd=0x50116, Msg=0x83, wParam=0x1, lParam=0x31ecfc) returned 0x0 [0029.121] GetWindowPlacement (in: hWnd=0x50116, lpwndpl=0x31ead4 | out: lpwndpl=0x31ead4) returned 1 [0029.121] CallWindowProcW (lpPrevWndFunc=0x77c725dd, hWnd=0x50116, Msg=0x47, wParam=0x0, lParam=0x31ed24) returned 0x0 [0029.121] GetClientRect (in: hWnd=0x50116, lpRect=0x31ea84 | out: lpRect=0x31ea84) returned 1 [0029.121] GetWindowRect (in: hWnd=0x50116, lpRect=0x31ea84 | out: lpRect=0x31ea84) returned 1 [0029.122] CallWindowProcW (lpPrevWndFunc=0x77c725dd, hWnd=0x50116, Msg=0x83, wParam=0x1, lParam=0x31e908) returned 0x0 [0029.122] RedrawWindow (hWnd=0x50116, lprcUpdate=0x0, hrgnUpdate=0x0, flags=0x85) returned 1 [0029.122] GetSystemMenu (hWnd=0x50116, bRevert=0) returned 0x30251 [0029.122] GetWindowPlacement (in: hWnd=0x50116, lpwndpl=0x31ed5c | out: lpwndpl=0x31ed5c) returned 1 [0029.122] EnableMenuItem (hMenu=0x30251, uIDEnableItem=0xf020, uEnable=0x0) returned 0 [0029.122] EnableMenuItem (hMenu=0x30251, uIDEnableItem=0xf030, uEnable=0x0) returned 0 [0029.122] EnableMenuItem (hMenu=0x30251, uIDEnableItem=0xf060, uEnable=0x0) returned 0 [0029.122] EnableMenuItem (hMenu=0x30251, uIDEnableItem=0xf120, uEnable=0x1) returned 1 [0029.122] EnableMenuItem (hMenu=0x30251, uIDEnableItem=0xf000, uEnable=0x0) returned 0 [0029.123] ShowWindow (hWnd=0x50116, nCmdShow=5) returned 0 [0029.123] CallWindowProcW (lpPrevWndFunc=0x77c725dd, hWnd=0x50116, Msg=0x18, wParam=0x1, lParam=0x0) returned 0x0 [0029.123] GetWindowTextLengthW (hWnd=0x50116) returned 11 [0029.123] CallWindowProcW (lpPrevWndFunc=0x77c725dd, hWnd=0x50116, Msg=0xe, wParam=0x0, lParam=0x0) returned 0xb [0029.123] GetSystemMetrics (nIndex=42) returned 0 [0029.123] GetWindowTextW (in: hWnd=0x50116, lpString=0x31e9c8, nMaxCount=12 | out: lpString="notepad.exe") returned 11 [0029.123] CallWindowProcW (lpPrevWndFunc=0x77c725dd, hWnd=0x50116, Msg=0xd, wParam=0xc, lParam=0x31e9c8) returned 0xb [0029.137] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x747d0000 [0029.137] GetWindowLongW (hWnd=0x50116, nIndex=-16) returned 114229248 [0029.137] GetWindowTextLengthW (hWnd=0x50116) returned 11 [0029.137] CallWindowProcW (lpPrevWndFunc=0x77c725dd, hWnd=0x50116, Msg=0xe, wParam=0x0, lParam=0x0) returned 0xb [0029.137] GetSystemMetrics (nIndex=42) returned 0 [0029.137] GetWindowTextW (in: hWnd=0x50116, lpString=0x31e8c8, nMaxCount=12 | out: lpString="notepad.exe") returned 11 [0029.137] CallWindowProcW (lpPrevWndFunc=0x77c725dd, hWnd=0x50116, Msg=0xd, wParam=0xc, lParam=0x31e8c8) returned 0xb [0029.137] GetWindowTextLengthW (hWnd=0x50116) returned 11 [0029.137] CallWindowProcW (lpPrevWndFunc=0x77c725dd, hWnd=0x50116, Msg=0xe, wParam=0x0, lParam=0x0) returned 0xb [0029.137] GetSystemMetrics (nIndex=42) returned 0 [0029.137] GetWindowTextW (in: hWnd=0x50116, lpString=0x31e8c8, nMaxCount=12 | out: lpString="notepad.exe") returned 11 [0029.137] CallWindowProcW (lpPrevWndFunc=0x77c725dd, hWnd=0x50116, Msg=0xd, wParam=0xc, lParam=0x31e8c8) returned 0xb [0029.138] GetWindowLongW (hWnd=0x50116, nIndex=-16) returned 114229248 [0029.138] GetWindowLongW (hWnd=0x50116, nIndex=-20) returned 327936 [0029.138] SetWindowLongW (hWnd=0x50116, nIndex=-16, dwNewLong=315555840) returned 114229248 [0029.138] CallWindowProcW (lpPrevWndFunc=0x77c725dd, hWnd=0x50116, Msg=0x7c, wParam=0xfffffff0, lParam=0x31e924) returned 0x0 [0029.138] CallWindowProcW (lpPrevWndFunc=0x77c725dd, hWnd=0x50116, Msg=0x7d, wParam=0xfffffff0, lParam=0x31e924) returned 0x0 [0029.138] SetWindowLongW (hWnd=0x50116, nIndex=-20, dwNewLong=851968) returned 327936 [0029.138] CallWindowProcW (lpPrevWndFunc=0x77c725dd, hWnd=0x50116, Msg=0x7c, wParam=0xffffffec, lParam=0x31e924) returned 0x0 [0029.146] CallWindowProcW (lpPrevWndFunc=0x77c725dd, hWnd=0x50116, Msg=0x7d, wParam=0xffffffec, lParam=0x31e924) returned 0x0 [0029.146] SetWindowPos (hWnd=0x50116, hWndInsertAfter=0x0, X=0, Y=0, cx=0, cy=0, uFlags=0x37) returned 1 [0029.146] CallWindowProcW (lpPrevWndFunc=0x77c725dd, hWnd=0x50116, Msg=0x46, wParam=0x0, lParam=0x31e944) returned 0x0 [0029.147] CallWindowProcW (lpPrevWndFunc=0x77c725dd, hWnd=0x50116, Msg=0x83, wParam=0x1, lParam=0x31e91c) returned 0x0 [0029.147] GetWindowPlacement (in: hWnd=0x50116, lpwndpl=0x31e6f4 | out: lpwndpl=0x31e6f4) returned 1 [0029.147] CallWindowProcW (lpPrevWndFunc=0x77c725dd, hWnd=0x50116, Msg=0x47, wParam=0x0, lParam=0x31e944) returned 0x0 [0029.147] GetClientRect (in: hWnd=0x50116, lpRect=0x31e6a4 | out: lpRect=0x31e6a4) returned 1 [0029.147] GetWindowRect (in: hWnd=0x50116, lpRect=0x31e6a4 | out: lpRect=0x31e6a4) returned 1 [0029.147] RedrawWindow (hWnd=0x50116, lprcUpdate=0x0, hrgnUpdate=0x0, flags=0x85) returned 1 [0029.147] GetSystemMenu (hWnd=0x50116, bRevert=0) returned 0x30251 [0029.147] GetWindowPlacement (in: hWnd=0x50116, lpwndpl=0x31e97c | out: lpwndpl=0x31e97c) returned 1 [0029.147] EnableMenuItem (hMenu=0x30251, uIDEnableItem=0xf020, uEnable=0x0) returned 0 [0029.147] EnableMenuItem (hMenu=0x30251, uIDEnableItem=0xf030, uEnable=0x0) returned 0 [0029.147] EnableMenuItem (hMenu=0x30251, uIDEnableItem=0xf060, uEnable=0x0) returned 0 [0029.148] EnableMenuItem (hMenu=0x30251, uIDEnableItem=0xf120, uEnable=0x1) returned 1 [0029.148] EnableMenuItem (hMenu=0x30251, uIDEnableItem=0xf000, uEnable=0x0) returned 0 [0029.154] SetLayeredWindowAttributes (hwnd=0x50116, crKey=0x0, bAlpha=0x0, dwFlags=0x2) returned 1 [0029.160] GetCurrentThreadId () returned 0xaa4 [0029.166] EnumThreadWindows (dwThreadId=0xaa4, lpfn=0x10908ae, lParam=0x50116) returned 1 [0029.195] GetWindowLongW (hWnd=0x301e6, nIndex=-8) returned 0 [0029.195] GetWindowLongW (hWnd=0x50116, nIndex=-8) returned 0 [0029.195] GetWindowLongW (hWnd=0x50114, nIndex=-8) returned 327958 [0029.226] SetWindowLongW (hWnd=0x50114, nIndex=-8, dwNewLong=0) returned 327958 [0029.228] GetParent (hWnd=0x50116) returned 0x0 [0029.228] GetWindowLongW (hWnd=0x50116, nIndex=-20) returned 852224 [0029.228] DestroyWindow (hWnd=0x50116) returned 1 [0029.228] CallWindowProcW (lpPrevWndFunc=0x77c725dd, hWnd=0x50116, Msg=0x90, wParam=0x0, lParam=0x0) returned 0x0 [0029.228] CallWindowProcW (lpPrevWndFunc=0x77c725dd, hWnd=0x50116, Msg=0x46, wParam=0x0, lParam=0x31e880) returned 0x0 [0029.231] GetWindowPlacement (in: hWnd=0x50116, lpwndpl=0x31e630 | out: lpwndpl=0x31e630) returned 1 [0029.231] CallWindowProcW (lpPrevWndFunc=0x77c725dd, hWnd=0x50116, Msg=0x47, wParam=0x0, lParam=0x31e880) returned 0x0 [0029.231] GetClientRect (in: hWnd=0x50116, lpRect=0x31e5e0 | out: lpRect=0x31e5e0) returned 1 [0029.231] GetWindowRect (in: hWnd=0x50116, lpRect=0x31e5e0 | out: lpRect=0x31e5e0) returned 1 [0029.250] GetWindowTextLengthW (hWnd=0x50116) returned 11 [0029.250] CallWindowProcW (lpPrevWndFunc=0x77c725dd, hWnd=0x50116, Msg=0xe, wParam=0x0, lParam=0x0) returned 0xb [0029.250] GetSystemMetrics (nIndex=42) returned 0 [0029.250] GetWindowTextW (in: hWnd=0x50116, lpString=0x31e500, nMaxCount=12 | out: lpString="notepad.exe") returned 11 [0029.250] CallWindowProcW (lpPrevWndFunc=0x77c725dd, hWnd=0x50116, Msg=0xd, wParam=0xc, lParam=0x31e500) returned 0xb [0029.251] CallWindowProcW (lpPrevWndFunc=0x77c725dd, hWnd=0x50116, Msg=0x2, wParam=0x0, lParam=0x0) returned 0x0 [0029.251] CallWindowProcW (lpPrevWndFunc=0x77c725dd, hWnd=0x50116, Msg=0x82, wParam=0x0, lParam=0x0) returned 0x0 [0029.259] GetCurrentActCtx (in: lphActCtx=0x31e8dc | out: lphActCtx=0x31e8dc*=0x396efc) returned 1 [0029.259] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x747d0000 [0029.259] GetModuleHandleW (lpModuleName=0x0) returned 0x1200000 [0029.259] CreateWindowExW (dwExStyle=0x90000, lpClassName="WindowsForms10.Window.8.app.0.141b42a_r14_ad1", lpWindowName="notepad.exe", dwStyle=0x2cf0000, X=50, Y=50, nWidth=239, nHeight=110, hWndParent=0x0, hMenu=0x0, hInstance=0x1200000, lpParam=0x0) returned 0x30162 [0029.259] SetWindowLongW (hWnd=0x30162, nIndex=-4, dwNewLong=2009540061) returned 17369062 [0029.260] GetWindowLongW (hWnd=0x30162, nIndex=-4) returned 2009540061 [0029.260] SetWindowLongW (hWnd=0x30162, nIndex=-4, dwNewLong=17369302) returned 2009540061 [0029.260] GetWindowLongW (hWnd=0x30162, nIndex=-4) returned 17369302 [0029.260] GetWindowLongW (hWnd=0x30162, nIndex=-16) returned 114229248 [0029.260] CallWindowProcW (lpPrevWndFunc=0x77c725dd, hWnd=0x30162, Msg=0x81, wParam=0x0, lParam=0x31e370) returned 0x1 [0029.260] CallWindowProcW (lpPrevWndFunc=0x77c725dd, hWnd=0x30162, Msg=0x83, wParam=0x0, lParam=0x31e35c) returned 0x0 [0029.261] CallWindowProcW (lpPrevWndFunc=0x77c725dd, hWnd=0x30162, Msg=0x1, wParam=0x0, lParam=0x31e370) returned 0x0 [0029.261] GetClientRect (in: hWnd=0x30162, lpRect=0x31e0a8 | out: lpRect=0x31e0a8) returned 1 [0029.261] GetWindowRect (in: hWnd=0x30162, lpRect=0x31e0a8 | out: lpRect=0x31e0a8) returned 1 [0029.261] SetWindowTextW (hWnd=0x30162, lpString="notepad.exe") returned 1 [0029.261] CallWindowProcW (lpPrevWndFunc=0x77c725dd, hWnd=0x30162, Msg=0xc, wParam=0x0, lParam=0x261d880) returned 0x1 [0029.261] SetLayeredWindowAttributes (hwnd=0x30162, crKey=0x0, bAlpha=0x0, dwFlags=0x2) returned 1 [0029.262] GetStartupInfoW (in: lpStartupInfo=0x261db5c | out: lpStartupInfo=0x261db5c*(cb=0x44, lpReserved="", lpDesktop="WinSta0\\Default", lpTitle="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\B221.exe", dwX=0x0, dwY=0x0, dwXSize=0x0, dwYSize=0x0, dwXCountChars=0x0, dwYCountChars=0x0, dwFillAttribute=0x0, dwFlags=0x1, wShowWindow=0x1, cbReserved2=0x0, lpReserved2=0x0, hStdInput=0x0, hStdOutput=0x0, hStdError=0x0)) [0029.262] GetParent (hWnd=0x30162) returned 0x0 [0029.262] GetStockObject (i=5) returned 0x1900015 [0029.262] GetModuleHandleW (lpModuleName=0x0) returned 0x1200000 [0029.262] CoTaskMemAlloc (cb=0x5c) returned 0x39aa68 [0029.262] RegisterClassW (lpWndClass=0x31e7bc) returned 0xc167 [0029.263] CoTaskMemFree (pv=0x39aa68) [0029.263] GetModuleHandleW (lpModuleName=0x0) returned 0x1200000 [0029.263] CreateWindowExW (dwExStyle=0x80, lpClassName="WindowsForms10.Window.0.app.0.141b42a_r14_ad1", lpWindowName=0x0, dwStyle=0x0, X=0, Y=0, nWidth=0, nHeight=0, hWndParent=0x0, hMenu=0x0, hInstance=0x1200000, lpParam=0x0) returned 0x3015c [0029.263] SetWindowLongW (hWnd=0x3015c, nIndex=-4, dwNewLong=2009540061) returned 17369342 [0029.263] GetWindowLongW (hWnd=0x3015c, nIndex=-4) returned 2009540061 [0029.263] SetWindowLongW (hWnd=0x3015c, nIndex=-4, dwNewLong=17369382) returned 2009540061 [0029.263] GetWindowLongW (hWnd=0x3015c, nIndex=-4) returned 17369382 [0029.263] GetWindowLongW (hWnd=0x3015c, nIndex=-16) returned 79691776 [0029.264] CallWindowProcW (lpPrevWndFunc=0x77c725dd, hWnd=0x3015c, Msg=0x24, wParam=0x0, lParam=0x31e3a4) returned 0x0 [0029.264] CallWindowProcW (lpPrevWndFunc=0x77c725dd, hWnd=0x3015c, Msg=0x81, wParam=0x0, lParam=0x31e398) returned 0x1 [0029.264] CallWindowProcW (lpPrevWndFunc=0x77c725dd, hWnd=0x3015c, Msg=0x83, wParam=0x0, lParam=0x31e384) returned 0x0 [0029.265] CallWindowProcW (lpPrevWndFunc=0x77c725dd, hWnd=0x3015c, Msg=0x1, wParam=0x0, lParam=0x31e398) returned 0x0 [0029.265] SetWindowLongW (hWnd=0x30162, nIndex=-8, dwNewLong=196956) returned 0 [0029.265] SendMessageW (hWnd=0x30162, Msg=0x80, wParam=0x0, lParam=0x202af) returned 0x0 [0029.265] CallWindowProcW (lpPrevWndFunc=0x77c725dd, hWnd=0x30162, Msg=0x80, wParam=0x0, lParam=0x202af) returned 0x0 [0029.265] SendMessageW (hWnd=0x30162, Msg=0x80, wParam=0x1, lParam=0x8016b) returned 0x0 [0029.266] CallWindowProcW (lpPrevWndFunc=0x77c725dd, hWnd=0x30162, Msg=0x80, wParam=0x1, lParam=0x8016b) returned 0x0 [0029.266] CallWindowProcW (lpPrevWndFunc=0x77c725dd, hWnd=0x30162, Msg=0x7f, wParam=0x2, lParam=0x0) returned 0x202af [0029.266] GetSystemMenu (hWnd=0x30162, bRevert=0) returned 0x40251 [0029.267] GetWindowPlacement (in: hWnd=0x30162, lpwndpl=0x31e8ec | out: lpwndpl=0x31e8ec) returned 1 [0029.267] EnableMenuItem (hMenu=0x40251, uIDEnableItem=0xf020, uEnable=0x0) returned 0 [0029.267] EnableMenuItem (hMenu=0x40251, uIDEnableItem=0xf030, uEnable=0x0) returned 0 [0029.267] EnableMenuItem (hMenu=0x40251, uIDEnableItem=0xf060, uEnable=0x0) returned 0 [0029.267] EnableMenuItem (hMenu=0x40251, uIDEnableItem=0xf120, uEnable=0x1) returned 0 [0029.267] EnableMenuItem (hMenu=0x40251, uIDEnableItem=0xf000, uEnable=0x0) returned 0 [0029.267] GetClientRect (in: hWnd=0x30162, lpRect=0x31e930 | out: lpRect=0x31e930) returned 1 [0029.267] GetClientRect (in: hWnd=0x30162, lpRect=0x31e890 | out: lpRect=0x31e890) returned 1 [0029.267] GetWindowRect (in: hWnd=0x30162, lpRect=0x31e890 | out: lpRect=0x31e890) returned 1 [0029.267] SetWindowPos (hWnd=0x30162, hWndInsertAfter=0x0, X=0, Y=0, cx=0, cy=0, uFlags=0x57) returned 1 [0029.267] CallWindowProcW (lpPrevWndFunc=0x77c725dd, hWnd=0x30162, Msg=0x46, wParam=0x0, lParam=0x31e7f8) returned 0x0 [0029.271] CallWindowProcW (lpPrevWndFunc=0x77c725dd, hWnd=0x30162, Msg=0x85, wParam=0x1, lParam=0x0) returned 0x0 [0029.272] GetWindowPlacement (in: hWnd=0x30162, lpwndpl=0x31e5c0 | out: lpwndpl=0x31e5c0) returned 1 [0029.272] GetClientRect (in: hWnd=0x30162, lpRect=0x31e56c | out: lpRect=0x31e56c) returned 1 [0029.272] GetWindowTextLengthW (hWnd=0x30162) returned 11 [0029.272] CallWindowProcW (lpPrevWndFunc=0x77c725dd, hWnd=0x30162, Msg=0xe, wParam=0x0, lParam=0x0) returned 0xb [0029.272] GetSystemMetrics (nIndex=42) returned 0 [0029.272] GetWindowTextW (in: hWnd=0x30162, lpString=0x31e42c, nMaxCount=12 | out: lpString="notepad.exe") returned 11 [0029.272] CallWindowProcW (lpPrevWndFunc=0x77c725dd, hWnd=0x30162, Msg=0xd, wParam=0xc, lParam=0x31e42c) returned 0xb [0029.272] GetClientRect (in: hWnd=0x30162, lpRect=0x31e474 | out: lpRect=0x31e474) returned 1 [0029.273] GetSysColor (nIndex=10) returned 0xb4b4b4 [0029.273] GetSysColor (nIndex=2) returned 0xd1b499 [0029.273] GetSysColor (nIndex=9) returned 0x0 [0029.273] GetSysColor (nIndex=12) returned 0xababab [0029.273] GetSysColor (nIndex=15) returned 0xf0f0f0 [0029.273] GetSysColor (nIndex=20) returned 0xffffff [0029.273] GetSysColor (nIndex=16) returned 0xa0a0a0 [0029.273] GetSysColor (nIndex=15) returned 0xf0f0f0 [0029.273] GetSysColor (nIndex=16) returned 0xa0a0a0 [0029.273] GetSysColor (nIndex=21) returned 0x696969 [0029.273] GetSysColor (nIndex=22) returned 0xe3e3e3 [0029.273] GetSysColor (nIndex=20) returned 0xffffff [0029.273] GetSysColor (nIndex=18) returned 0x0 [0029.273] GetSysColor (nIndex=1) returned 0x0 [0029.273] GetSysColor (nIndex=27) returned 0xead1b9 [0029.273] GetSysColor (nIndex=28) returned 0xf2e4d7 [0029.273] GetSysColor (nIndex=17) returned 0x6d6d6d [0029.273] GetSysColor (nIndex=13) returned 0xff9933 [0029.273] GetSysColor (nIndex=14) returned 0xffffff [0029.273] GetSysColor (nIndex=26) returned 0xcc6600 [0029.273] GetSysColor (nIndex=11) returned 0xfcf7f4 [0029.273] GetSysColor (nIndex=3) returned 0xdbcdbf [0029.273] GetSysColor (nIndex=19) returned 0x544e43 [0029.274] GetSysColor (nIndex=24) returned 0xe1ffff [0029.274] GetSysColor (nIndex=23) returned 0x0 [0029.274] GetSysColor (nIndex=4) returned 0xf0f0f0 [0029.274] GetSysColor (nIndex=30) returned 0xf0f0f0 [0029.274] GetSysColor (nIndex=29) returned 0xff9933 [0029.274] GetSysColor (nIndex=7) returned 0x0 [0029.274] GetSysColor (nIndex=0) returned 0xc8c8c8 [0029.274] GetSysColor (nIndex=5) returned 0xffffff [0029.274] GetSysColor (nIndex=6) returned 0x646464 [0029.274] GetSysColor (nIndex=8) returned 0x0 [0029.275] GetSystemMetrics (nIndex=80) returned 1 [0029.277] EnumDisplayMonitors (hdc=0x0, lprcClip=0x0, lpfnEnum=0x109094e, dwData=0x0) returned 1 [0029.277] GetMonitorInfoW (in: hMonitor=0x10001, lpmi=0x31e0dc | out: lpmi=0x31e0dc) returned 1 [0029.278] CreateDCW (pwszDriver="\\\\.\\DISPLAY1", pwszDevice=0x0, pszPort=0x0, pdm=0x0) returned 0x160101a0 [0029.278] GetDeviceCaps (hdc=0x160101a0, index=12) returned 32 [0029.278] GetDeviceCaps (hdc=0x160101a0, index=14) returned 1 [0029.278] DeleteDC (hdc=0x160101a0) returned 1 [0029.278] GetCurrentObject (hdc=0x50109f2, type=0x1) returned 0x1b00017 [0029.278] GetCurrentObject (hdc=0x50109f2, type=0x2) returned 0x1900010 [0029.278] GetCurrentObject (hdc=0x50109f2, type=0x7) returned 0x705086c [0029.278] GetCurrentObject (hdc=0x50109f2, type=0x6) returned 0x18a002e [0029.279] SaveDC (hdc=0x50109f2) returned 1 [0029.279] GetNearestColor (hdc=0x50109f2, color=0xf0f0f0) returned 0xf0f0f0 [0029.280] CreateSolidBrush (color=0xf0f0f0) returned 0x2a1001b3 [0029.280] FillRect (hDC=0x50109f2, lprc=0x31e314, hbr=0x2a1001b3) returned 1 [0029.282] DeleteObject (ho=0x2a1001b3) returned 1 [0029.282] RestoreDC (hdc=0x50109f2, nSavedDC=-1) returned 1 [0029.283] GetWindowPlacement (in: hWnd=0x30162, lpwndpl=0x31e5a8 | out: lpwndpl=0x31e5a8) returned 1 [0029.283] CallWindowProcW (lpPrevWndFunc=0x77c725dd, hWnd=0x30162, Msg=0x47, wParam=0x0, lParam=0x31e7f8) returned 0x0 [0029.283] GetClientRect (in: hWnd=0x30162, lpRect=0x31e558 | out: lpRect=0x31e558) returned 1 [0029.283] GetWindowRect (in: hWnd=0x30162, lpRect=0x31e558 | out: lpRect=0x31e558) returned 1 [0029.284] CallWindowProcW (lpPrevWndFunc=0x77c725dd, hWnd=0x30162, Msg=0x83, wParam=0x1, lParam=0x31e3dc) returned 0x0 [0029.286] CallWindowProcW (lpPrevWndFunc=0x77c725dd, hWnd=0x30162, Msg=0x85, wParam=0x1, lParam=0x0) returned 0x0 [0029.288] GetWindowPlacement (in: hWnd=0x30162, lpwndpl=0x31e1cc | out: lpwndpl=0x31e1cc) returned 1 [0029.288] GetClientRect (in: hWnd=0x30162, lpRect=0x31e178 | out: lpRect=0x31e178) returned 1 [0029.288] GetWindowTextLengthW (hWnd=0x30162) returned 11 [0029.288] CallWindowProcW (lpPrevWndFunc=0x77c725dd, hWnd=0x30162, Msg=0xe, wParam=0x0, lParam=0x0) returned 0xb [0029.288] GetSystemMetrics (nIndex=42) returned 0 [0029.288] GetWindowTextW (in: hWnd=0x30162, lpString=0x31e038, nMaxCount=12 | out: lpString="notepad.exe") returned 11 [0029.288] CallWindowProcW (lpPrevWndFunc=0x77c725dd, hWnd=0x30162, Msg=0xd, wParam=0xc, lParam=0x31e038) returned 0xb [0029.288] GetClientRect (in: hWnd=0x30162, lpRect=0x31e080 | out: lpRect=0x31e080) returned 1 [0029.288] GetCurrentObject (hdc=0x70109ff, type=0x1) returned 0x1b00017 [0029.288] GetCurrentObject (hdc=0x70109ff, type=0x2) returned 0x1900010 [0029.288] GetCurrentObject (hdc=0x70109ff, type=0x7) returned 0x705086c [0029.288] GetCurrentObject (hdc=0x70109ff, type=0x6) returned 0x18a002e [0029.288] SaveDC (hdc=0x70109ff) returned 1 [0029.288] GetNearestColor (hdc=0x70109ff, color=0xf0f0f0) returned 0xf0f0f0 [0029.288] CreateSolidBrush (color=0xf0f0f0) returned 0x2b1001b3 [0029.288] FillRect (hDC=0x70109ff, lprc=0x31df20, hbr=0x2b1001b3) returned 1 [0029.288] DeleteObject (ho=0x2b1001b3) returned 1 [0029.289] RestoreDC (hdc=0x70109ff, nSavedDC=-1) returned 1 [0029.289] SetWindowLongW (hWnd=0x30162, nIndex=-8, dwNewLong=196956) returned 196956 [0029.289] SendMessageW (hWnd=0x3015c, Msg=0x80, wParam=0x1, lParam=0x8016b) returned 0x0 [0029.289] CallWindowProcW (lpPrevWndFunc=0x77c725dd, hWnd=0x3015c, Msg=0x80, wParam=0x1, lParam=0x8016b) returned 0x0 [0029.290] CallWindowProcW (lpPrevWndFunc=0x77c725dd, hWnd=0x3015c, Msg=0xd, wParam=0x104, lParam=0x10ec610) returned 0x0 [0029.290] CallWindowProcW (lpPrevWndFunc=0x77c725dd, hWnd=0x3015c, Msg=0xd, wParam=0x104, lParam=0x10ec628) returned 0x0 [0029.290] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x747d0000 [0029.290] GetWindowLongW (hWnd=0x30162, nIndex=-16) returned 382664704 [0029.290] GetWindowTextLengthW (hWnd=0x30162) returned 11 [0029.290] CallWindowProcW (lpPrevWndFunc=0x77c725dd, hWnd=0x30162, Msg=0xe, wParam=0x0, lParam=0x0) returned 0xb [0029.290] GetSystemMetrics (nIndex=42) returned 0 [0029.290] GetWindowTextW (in: hWnd=0x30162, lpString=0x31e828, nMaxCount=12 | out: lpString="notepad.exe") returned 11 [0029.290] CallWindowProcW (lpPrevWndFunc=0x77c725dd, hWnd=0x30162, Msg=0xd, wParam=0xc, lParam=0x31e828) returned 0xb [0029.290] GetWindowTextLengthW (hWnd=0x30162) returned 11 [0029.290] CallWindowProcW (lpPrevWndFunc=0x77c725dd, hWnd=0x30162, Msg=0xe, wParam=0x0, lParam=0x0) returned 0xb [0029.290] GetSystemMetrics (nIndex=42) returned 0 [0029.290] GetWindowTextW (in: hWnd=0x30162, lpString=0x31e828, nMaxCount=12 | out: lpString="notepad.exe") returned 11 [0029.290] CallWindowProcW (lpPrevWndFunc=0x77c725dd, hWnd=0x30162, Msg=0xd, wParam=0xc, lParam=0x31e828) returned 0xb [0029.291] GetWindowLongW (hWnd=0x30162, nIndex=-16) returned 382664704 [0029.291] GetWindowLongW (hWnd=0x30162, nIndex=-20) returned 590080 [0029.291] SetWindowLongW (hWnd=0x30162, nIndex=-16, dwNewLong=315555840) returned 382664704 [0029.291] CallWindowProcW (lpPrevWndFunc=0x77c725dd, hWnd=0x30162, Msg=0x7c, wParam=0xfffffff0, lParam=0x31e884) returned 0x0 [0029.291] CallWindowProcW (lpPrevWndFunc=0x77c725dd, hWnd=0x30162, Msg=0x7d, wParam=0xfffffff0, lParam=0x31e884) returned 0x0 [0029.291] SetWindowLongW (hWnd=0x30162, nIndex=-20, dwNewLong=589824) returned 590080 [0029.291] CallWindowProcW (lpPrevWndFunc=0x77c725dd, hWnd=0x30162, Msg=0x7c, wParam=0xffffffec, lParam=0x31e884) returned 0x0 [0029.291] CallWindowProcW (lpPrevWndFunc=0x77c725dd, hWnd=0x30162, Msg=0x7d, wParam=0xffffffec, lParam=0x31e884) returned 0x0 [0029.291] SetWindowPos (hWnd=0x30162, hWndInsertAfter=0x0, X=0, Y=0, cx=0, cy=0, uFlags=0x37) returned 1 [0029.291] CallWindowProcW (lpPrevWndFunc=0x77c725dd, hWnd=0x30162, Msg=0x46, wParam=0x0, lParam=0x31e8a4) returned 0x0 [0029.292] CallWindowProcW (lpPrevWndFunc=0x77c725dd, hWnd=0x30162, Msg=0x83, wParam=0x1, lParam=0x31e87c) returned 0x0 [0029.294] CallWindowProcW (lpPrevWndFunc=0x77c725dd, hWnd=0x30162, Msg=0x85, wParam=0x1, lParam=0x0) returned 0x0 [0029.296] GetWindowPlacement (in: hWnd=0x30162, lpwndpl=0x31e66c | out: lpwndpl=0x31e66c) returned 1 [0029.296] GetClientRect (in: hWnd=0x30162, lpRect=0x31e618 | out: lpRect=0x31e618) returned 1 [0029.296] GetWindowTextLengthW (hWnd=0x30162) returned 11 [0029.296] CallWindowProcW (lpPrevWndFunc=0x77c725dd, hWnd=0x30162, Msg=0xe, wParam=0x0, lParam=0x0) returned 0xb [0029.296] GetSystemMetrics (nIndex=42) returned 0 [0029.296] GetWindowTextW (in: hWnd=0x30162, lpString=0x31e4d8, nMaxCount=12 | out: lpString="notepad.exe") returned 11 [0029.296] CallWindowProcW (lpPrevWndFunc=0x77c725dd, hWnd=0x30162, Msg=0xd, wParam=0xc, lParam=0x31e4d8) returned 0xb [0029.296] GetClientRect (in: hWnd=0x30162, lpRect=0x31e520 | out: lpRect=0x31e520) returned 1 [0029.296] GetCurrentObject (hdc=0x30109ef, type=0x1) returned 0x1b00017 [0029.296] GetCurrentObject (hdc=0x30109ef, type=0x2) returned 0x1900010 [0029.296] GetCurrentObject (hdc=0x30109ef, type=0x7) returned 0x705086c [0029.296] GetCurrentObject (hdc=0x30109ef, type=0x6) returned 0x18a002e [0029.296] SaveDC (hdc=0x30109ef) returned 1 [0029.296] GetNearestColor (hdc=0x30109ef, color=0xf0f0f0) returned 0xf0f0f0 [0029.296] CreateSolidBrush (color=0xf0f0f0) returned 0x2c1001b3 [0029.296] FillRect (hDC=0x30109ef, lprc=0x31e3c0, hbr=0x2c1001b3) returned 1 [0029.296] DeleteObject (ho=0x2c1001b3) returned 1 [0029.296] RestoreDC (hdc=0x30109ef, nSavedDC=-1) returned 1 [0029.297] GetWindowPlacement (in: hWnd=0x30162, lpwndpl=0x31e654 | out: lpwndpl=0x31e654) returned 1 [0029.297] CallWindowProcW (lpPrevWndFunc=0x77c725dd, hWnd=0x30162, Msg=0x47, wParam=0x0, lParam=0x31e8a4) returned 0x0 [0029.297] GetClientRect (in: hWnd=0x30162, lpRect=0x31e604 | out: lpRect=0x31e604) returned 1 [0029.297] GetWindowRect (in: hWnd=0x30162, lpRect=0x31e604 | out: lpRect=0x31e604) returned 1 [0029.297] RedrawWindow (hWnd=0x30162, lprcUpdate=0x0, hrgnUpdate=0x0, flags=0x85) returned 1 [0029.297] GetSystemMenu (hWnd=0x30162, bRevert=0) returned 0x40251 [0029.297] GetWindowPlacement (in: hWnd=0x30162, lpwndpl=0x31e8dc | out: lpwndpl=0x31e8dc) returned 1 [0029.297] EnableMenuItem (hMenu=0x40251, uIDEnableItem=0xf020, uEnable=0x0) returned 0 [0029.297] EnableMenuItem (hMenu=0x40251, uIDEnableItem=0xf030, uEnable=0x0) returned 0 [0029.297] EnableMenuItem (hMenu=0x40251, uIDEnableItem=0xf060, uEnable=0x0) returned 0 [0029.297] EnableMenuItem (hMenu=0x40251, uIDEnableItem=0xf120, uEnable=0x1) returned 1 [0029.297] EnableMenuItem (hMenu=0x40251, uIDEnableItem=0xf000, uEnable=0x0) returned 0 [0029.298] SetWindowLongW (hWnd=0x50114, nIndex=-8, dwNewLong=196962) returned 197094 [0029.308] RegOpenKeyExW (in: hKey=0x80000001, lpSubKey="SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Run", ulOptions=0x0, samDesired=0x2001f, phkResult=0x31ea00 | out: phkResult=0x31ea00*=0x224) returned 0x0 [0029.325] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\B221.exe", nBufferLength=0x105, lpBuffer=0x31e4b0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\B221.exe", lpFilePart=0x0) returned 0x2e [0029.331] RegQueryValueExW (in: hKey=0x224, lpValueName="rundll.exe", lpReserved=0x0, lpType=0x31e9fc, lpData=0x0, lpcbData=0x31e9f8*=0x0 | out: lpType=0x31e9fc*=0x0, lpData=0x0, lpcbData=0x31e9f8*=0x0) returned 0x2 [0029.332] RegSetValueExW (in: hKey=0x224, lpValueName="rundll.exe", Reserved=0x0, dwType=0x1, lpData="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\B221.exe", cbData=0x5e | out: lpData="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\B221.exe") returned 0x0 [0029.507] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e99c) returned 1 [0029.508] GetFullPathNameW (in: lpFileName="C:\\", nBufferLength=0x105, lpBuffer=0x31e4a4, lpFilePart=0x0 | out: lpBuffer="C:\\", lpFilePart=0x0) returned 0x3 [0029.509] GetFullPathNameW (in: lpFileName="C:\\", nBufferLength=0x105, lpBuffer=0x31e478, lpFilePart=0x0 | out: lpBuffer="C:\\", lpFilePart=0x0) returned 0x3 [0029.512] FindFirstFileW (in: lpFileName="C:\\*", lpFindFileData=0x31e6c4 | out: lpFindFileData=0x31e6c4*(dwFileAttributes=0x16, ftCreationTime.dwLowDateTime=0xd29f5adc, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x2dfdd420, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x2dfdd420, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="$Recycle.Bin", cAlternateFileName="")) returned 0x3814c0 [0029.513] FindNextFileW (in: hFindFile=0x3814c0, lpFindFileData=0x31e6d4 | out: lpFindFileData=0x31e6d4*(dwFileAttributes=0x16, ftCreationTime.dwLowDateTime=0xac015040, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac30ebc0, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xac30ebc0, ftLastWriteTime.dwHighDateTime=0x1d2de32, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Boot", cAlternateFileName="")) returned 1 [0029.513] FindNextFileW (in: hFindFile=0x3814c0, lpFindFileData=0x31e6d4 | out: lpFindFileData=0x31e6d4*(dwFileAttributes=0x27, ftCreationTime.dwLowDateTime=0xac0f9880, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac0f9880, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0x84a3bb2c, ftLastWriteTime.dwHighDateTime=0x1cb892b, nFileSizeHigh=0x0, nFileSizeLow=0x5db2a, dwReserved0=0x0, dwReserved1=0x0, cFileName="bootmgr", cAlternateFileName="")) returned 1 [0029.514] FindNextFileW (in: hFindFile=0x3814c0, lpFindFileData=0x31e6d4 | out: lpFindFileData=0x31e6d4*(dwFileAttributes=0x27, ftCreationTime.dwLowDateTime=0xac54a060, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac54a060, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xac54a060, ftLastWriteTime.dwHighDateTime=0x1d2de32, nFileSizeHigh=0x0, nFileSizeLow=0x2000, dwReserved0=0x0, dwReserved1=0x0, cFileName="BOOTSECT.BAK", cAlternateFileName="")) returned 1 [0029.514] FindNextFileW (in: hFindFile=0x3814c0, lpFindFileData=0x31e6d4 | out: lpFindFileData=0x31e6d4*(dwFileAttributes=0x16, ftCreationTime.dwLowDateTime=0xcd4f5c20, ftCreationTime.dwHighDateTime=0x1d305eb, ftLastAccessTime.dwLowDateTime=0xc182c7c0, ftLastAccessTime.dwHighDateTime=0x1d3373b, ftLastWriteTime.dwLowDateTime=0xc182c7c0, ftLastWriteTime.dwHighDateTime=0x1d3373b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Config.Msi", cAlternateFileName="")) returned 1 [0029.514] FindNextFileW (in: hFindFile=0x3814c0, lpFindFileData=0x31e6d4 | out: lpFindFileData=0x31e6d4*(dwFileAttributes=0x2416, ftCreationTime.dwLowDateTime=0x307290f2, ftCreationTime.dwHighDateTime=0x1ca0441, ftLastAccessTime.dwLowDateTime=0x307290f2, ftLastAccessTime.dwHighDateTime=0x1ca0441, ftLastWriteTime.dwLowDateTime=0x307290f2, ftLastWriteTime.dwHighDateTime=0x1ca0441, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Documents and Settings", cAlternateFileName="DOCUME~1")) returned 1 [0029.514] FindNextFileW (in: hFindFile=0x3814c0, lpFindFileData=0x31e6d4 | out: lpFindFileData=0x31e6d4*(dwFileAttributes=0x2026, ftCreationTime.dwLowDateTime=0x56257dc0, ftCreationTime.dwHighDateTime=0x1d2de2a, ftLastAccessTime.dwLowDateTime=0x56257dc0, ftLastAccessTime.dwHighDateTime=0x1d2de2a, ftLastWriteTime.dwLowDateTime=0xae99ef60, ftLastWriteTime.dwHighDateTime=0x1d5e82a, nFileSizeHigh=0x0, nFileSizeLow=0x5ff9d000, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="hiberfil.sys", cAlternateFileName="")) returned 1 [0029.514] FindNextFileW (in: hFindFile=0x3814c0, lpFindFileData=0x31e6d4 | out: lpFindFileData=0x31e6d4*(dwFileAttributes=0x2013, ftCreationTime.dwLowDateTime=0xe7b42810, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xe7b42810, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xe7b42810, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="MSOCache", cAlternateFileName="")) returned 1 [0029.514] FindNextFileW (in: hFindFile=0x3814c0, lpFindFileData=0x31e6d4 | out: lpFindFileData=0x31e6d4*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0x563d4b80, ftCreationTime.dwHighDateTime=0x1d2de2a, ftLastAccessTime.dwLowDateTime=0x563d4b80, ftLastAccessTime.dwHighDateTime=0x1d2de2a, ftLastWriteTime.dwLowDateTime=0xaece4da0, ftLastWriteTime.dwHighDateTime=0x1d5e82a, nFileSizeHigh=0x0, nFileSizeLow=0x7ff7c000, dwReserved0=0x0, dwReserved1=0x0, cFileName="pagefile.sys", cAlternateFileName="")) returned 1 [0029.514] FindNextFileW (in: hFindFile=0x3814c0, lpFindFileData=0x31e6d4 | out: lpFindFileData=0x31e6d4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd72e458, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd72e458, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xfd72e458, ftLastWriteTime.dwHighDateTime=0x1ca0431, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="PerfLogs", cAlternateFileName="")) returned 1 [0029.515] FindNextFileW (in: hFindFile=0x3814c0, lpFindFileData=0x31e6d4 | out: lpFindFileData=0x31e6d4*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0xfd72e458, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xdde29c40, ftLastAccessTime.dwHighDateTime=0x1d5e82a, ftLastWriteTime.dwLowDateTime=0xdde29c40, ftLastWriteTime.dwHighDateTime=0x1d5e82a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Program Files", cAlternateFileName="PROGRA~1")) returned 1 [0029.515] FindNextFileW (in: hFindFile=0x3814c0, lpFindFileData=0x31e6d4 | out: lpFindFileData=0x31e6d4*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0xfd8ab1dc, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x10f11a30, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x10f11a30, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Program Files (x86)", cAlternateFileName="PROGRA~2")) returned 1 [0029.515] FindNextFileW (in: hFindFile=0x3814c0, lpFindFileData=0x31e6d4 | out: lpFindFileData=0x31e6d4*(dwFileAttributes=0x2012, ftCreationTime.dwLowDateTime=0xfd943744, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x803771e0, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x803771e0, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="ProgramData", cAlternateFileName="PROGRA~3")) returned 1 [0029.515] FindNextFileW (in: hFindFile=0x3814c0, lpFindFileData=0x31e6d4 | out: lpFindFileData=0x31e6d4*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0x27c09980, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x27cc8060, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x27cc8060, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Recovery", cAlternateFileName="")) returned 1 [0029.515] FindNextFileW (in: hFindFile=0x3814c0, lpFindFileData=0x31e6d4 | out: lpFindFileData=0x31e6d4*(dwFileAttributes=0x16, ftCreationTime.dwLowDateTime=0x56231c60, ftCreationTime.dwHighDateTime=0x1d2de2a, ftLastAccessTime.dwLowDateTime=0xa1602bc0, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0xa1602bc0, ftLastWriteTime.dwHighDateTime=0x1d305f1, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="System Volume Information", cAlternateFileName="SYSTEM~1")) returned 1 [0029.516] FindNextFileW (in: hFindFile=0x3814c0, lpFindFileData=0x31e6d4 | out: lpFindFileData=0x31e6d4*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0xfda01e06, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x28c670c0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x28c670c0, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Users", cAlternateFileName="")) returned 1 [0029.516] FindNextFileW (in: hFindFile=0x3814c0, lpFindFileData=0x31e6d4 | out: lpFindFileData=0x31e6d4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfdb0c77c, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x2fb4a840, ftLastAccessTime.dwHighDateTime=0x1d4d57d, ftLastWriteTime.dwLowDateTime=0x2fb4a840, ftLastWriteTime.dwHighDateTime=0x1d4d57d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Windows", cAlternateFileName="")) returned 1 [0029.516] FindNextFileW (in: hFindFile=0x3814c0, lpFindFileData=0x31e6d4 | out: lpFindFileData=0x31e6d4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfdb0c77c, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x2fb4a840, ftLastAccessTime.dwHighDateTime=0x1d4d57d, ftLastWriteTime.dwLowDateTime=0x2fb4a840, ftLastWriteTime.dwHighDateTime=0x1d4d57d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Windows", cAlternateFileName="")) returned 0 [0029.517] FindClose (in: hFindFile=0x3814c0 | out: hFindFile=0x3814c0) returned 1 [0029.517] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e95c) returned 1 [0029.517] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e968) returned 1 [0029.517] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e99c) returned 1 [0029.517] GetFullPathNameW (in: lpFileName="C:\\", nBufferLength=0x105, lpBuffer=0x31e4a4, lpFilePart=0x0 | out: lpBuffer="C:\\", lpFilePart=0x0) returned 0x3 [0029.517] GetFullPathNameW (in: lpFileName="C:\\", nBufferLength=0x105, lpBuffer=0x31e478, lpFilePart=0x0 | out: lpBuffer="C:\\", lpFilePart=0x0) returned 0x3 [0029.517] FindFirstFileW (in: lpFileName="C:\\*", lpFindFileData=0x31e6c4 | out: lpFindFileData=0x31e6c4*(dwFileAttributes=0x16, ftCreationTime.dwLowDateTime=0xd29f5adc, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x2dfdd420, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x2dfdd420, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="$Recycle.Bin", cAlternateFileName="")) returned 0x3814c0 [0029.518] FindNextFileW (in: hFindFile=0x3814c0, lpFindFileData=0x31e6d4 | out: lpFindFileData=0x31e6d4*(dwFileAttributes=0x16, ftCreationTime.dwLowDateTime=0xac015040, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac30ebc0, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xac30ebc0, ftLastWriteTime.dwHighDateTime=0x1d2de32, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Boot", cAlternateFileName="")) returned 1 [0029.518] FindNextFileW (in: hFindFile=0x3814c0, lpFindFileData=0x31e6d4 | out: lpFindFileData=0x31e6d4*(dwFileAttributes=0x27, ftCreationTime.dwLowDateTime=0xac0f9880, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac0f9880, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0x84a3bb2c, ftLastWriteTime.dwHighDateTime=0x1cb892b, nFileSizeHigh=0x0, nFileSizeLow=0x5db2a, dwReserved0=0x0, dwReserved1=0x0, cFileName="bootmgr", cAlternateFileName="")) returned 1 [0029.518] FindNextFileW (in: hFindFile=0x3814c0, lpFindFileData=0x31e6d4 | out: lpFindFileData=0x31e6d4*(dwFileAttributes=0x27, ftCreationTime.dwLowDateTime=0xac54a060, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac54a060, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xac54a060, ftLastWriteTime.dwHighDateTime=0x1d2de32, nFileSizeHigh=0x0, nFileSizeLow=0x2000, dwReserved0=0x0, dwReserved1=0x0, cFileName="BOOTSECT.BAK", cAlternateFileName="")) returned 1 [0029.518] FindNextFileW (in: hFindFile=0x3814c0, lpFindFileData=0x31e6d4 | out: lpFindFileData=0x31e6d4*(dwFileAttributes=0x16, ftCreationTime.dwLowDateTime=0xcd4f5c20, ftCreationTime.dwHighDateTime=0x1d305eb, ftLastAccessTime.dwLowDateTime=0xc182c7c0, ftLastAccessTime.dwHighDateTime=0x1d3373b, ftLastWriteTime.dwLowDateTime=0xc182c7c0, ftLastWriteTime.dwHighDateTime=0x1d3373b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Config.Msi", cAlternateFileName="")) returned 1 [0029.518] FindNextFileW (in: hFindFile=0x3814c0, lpFindFileData=0x31e6d4 | out: lpFindFileData=0x31e6d4*(dwFileAttributes=0x2416, ftCreationTime.dwLowDateTime=0x307290f2, ftCreationTime.dwHighDateTime=0x1ca0441, ftLastAccessTime.dwLowDateTime=0x307290f2, ftLastAccessTime.dwHighDateTime=0x1ca0441, ftLastWriteTime.dwLowDateTime=0x307290f2, ftLastWriteTime.dwHighDateTime=0x1ca0441, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Documents and Settings", cAlternateFileName="DOCUME~1")) returned 1 [0029.518] FindNextFileW (in: hFindFile=0x3814c0, lpFindFileData=0x31e6d4 | out: lpFindFileData=0x31e6d4*(dwFileAttributes=0x2026, ftCreationTime.dwLowDateTime=0x56257dc0, ftCreationTime.dwHighDateTime=0x1d2de2a, ftLastAccessTime.dwLowDateTime=0x56257dc0, ftLastAccessTime.dwHighDateTime=0x1d2de2a, ftLastWriteTime.dwLowDateTime=0xae99ef60, ftLastWriteTime.dwHighDateTime=0x1d5e82a, nFileSizeHigh=0x0, nFileSizeLow=0x5ff9d000, dwReserved0=0x0, dwReserved1=0x0, cFileName="hiberfil.sys", cAlternateFileName="")) returned 1 [0029.518] FindNextFileW (in: hFindFile=0x3814c0, lpFindFileData=0x31e6d4 | out: lpFindFileData=0x31e6d4*(dwFileAttributes=0x2013, ftCreationTime.dwLowDateTime=0xe7b42810, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xe7b42810, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xe7b42810, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="MSOCache", cAlternateFileName="")) returned 1 [0029.519] FindNextFileW (in: hFindFile=0x3814c0, lpFindFileData=0x31e6d4 | out: lpFindFileData=0x31e6d4*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0x563d4b80, ftCreationTime.dwHighDateTime=0x1d2de2a, ftLastAccessTime.dwLowDateTime=0x563d4b80, ftLastAccessTime.dwHighDateTime=0x1d2de2a, ftLastWriteTime.dwLowDateTime=0xaece4da0, ftLastWriteTime.dwHighDateTime=0x1d5e82a, nFileSizeHigh=0x0, nFileSizeLow=0x7ff7c000, dwReserved0=0x0, dwReserved1=0x0, cFileName="pagefile.sys", cAlternateFileName="")) returned 1 [0029.519] FindNextFileW (in: hFindFile=0x3814c0, lpFindFileData=0x31e6d4 | out: lpFindFileData=0x31e6d4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd72e458, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd72e458, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xfd72e458, ftLastWriteTime.dwHighDateTime=0x1ca0431, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="PerfLogs", cAlternateFileName="")) returned 1 [0029.519] FindNextFileW (in: hFindFile=0x3814c0, lpFindFileData=0x31e6d4 | out: lpFindFileData=0x31e6d4*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0xfd72e458, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xdde29c40, ftLastAccessTime.dwHighDateTime=0x1d5e82a, ftLastWriteTime.dwLowDateTime=0xdde29c40, ftLastWriteTime.dwHighDateTime=0x1d5e82a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Program Files", cAlternateFileName="PROGRA~1")) returned 1 [0029.519] FindNextFileW (in: hFindFile=0x3814c0, lpFindFileData=0x31e6d4 | out: lpFindFileData=0x31e6d4*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0xfd8ab1dc, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x10f11a30, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x10f11a30, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Program Files (x86)", cAlternateFileName="PROGRA~2")) returned 1 [0029.519] FindNextFileW (in: hFindFile=0x3814c0, lpFindFileData=0x31e6d4 | out: lpFindFileData=0x31e6d4*(dwFileAttributes=0x2012, ftCreationTime.dwLowDateTime=0xfd943744, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x803771e0, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x803771e0, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="ProgramData", cAlternateFileName="PROGRA~3")) returned 1 [0029.519] FindNextFileW (in: hFindFile=0x3814c0, lpFindFileData=0x31e6d4 | out: lpFindFileData=0x31e6d4*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0x27c09980, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x27cc8060, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x27cc8060, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Recovery", cAlternateFileName="")) returned 1 [0029.519] FindNextFileW (in: hFindFile=0x3814c0, lpFindFileData=0x31e6d4 | out: lpFindFileData=0x31e6d4*(dwFileAttributes=0x16, ftCreationTime.dwLowDateTime=0x56231c60, ftCreationTime.dwHighDateTime=0x1d2de2a, ftLastAccessTime.dwLowDateTime=0xa1602bc0, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0xa1602bc0, ftLastWriteTime.dwHighDateTime=0x1d305f1, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="System Volume Information", cAlternateFileName="SYSTEM~1")) returned 1 [0029.519] FindNextFileW (in: hFindFile=0x3814c0, lpFindFileData=0x31e6d4 | out: lpFindFileData=0x31e6d4*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0xfda01e06, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x28c670c0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x28c670c0, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Users", cAlternateFileName="")) returned 1 [0029.520] FindNextFileW (in: hFindFile=0x3814c0, lpFindFileData=0x31e6d4 | out: lpFindFileData=0x31e6d4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfdb0c77c, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x2fb4a840, ftLastAccessTime.dwHighDateTime=0x1d4d57d, ftLastWriteTime.dwLowDateTime=0x2fb4a840, ftLastWriteTime.dwHighDateTime=0x1d4d57d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Windows", cAlternateFileName="")) returned 1 [0029.520] FindNextFileW (in: hFindFile=0x3814c0, lpFindFileData=0x31e6d4 | out: lpFindFileData=0x31e6d4*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0029.520] FindClose (in: hFindFile=0x3814c0 | out: hFindFile=0x3814c0) returned 1 [0029.520] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e95c) returned 1 [0029.520] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e968) returned 1 [0029.523] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e924) returned 1 [0029.524] GetFullPathNameW (in: lpFileName="C:\\$Recycle.Bin", nBufferLength=0x105, lpBuffer=0x31e42c, lpFilePart=0x0 | out: lpBuffer="C:\\$Recycle.Bin", lpFilePart=0x0) returned 0xf [0029.524] GetFullPathNameW (in: lpFileName="C:\\$Recycle.Bin\\", nBufferLength=0x105, lpBuffer=0x31e400, lpFilePart=0x0 | out: lpBuffer="C:\\$Recycle.Bin\\", lpFilePart=0x0) returned 0x10 [0029.524] FindFirstFileW (in: lpFileName="C:\\$Recycle.Bin\\*", lpFindFileData=0x31e64c | out: lpFindFileData=0x31e64c*(dwFileAttributes=0x16, ftCreationTime.dwLowDateTime=0xd29f5adc, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x2dfdd420, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x2dfdd420, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3814c0 [0029.524] FindNextFileW (in: hFindFile=0x3814c0, lpFindFileData=0x31e65c | out: lpFindFileData=0x31e65c*(dwFileAttributes=0x16, ftCreationTime.dwLowDateTime=0xd29f5adc, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x2dfdd420, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x2dfdd420, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0029.524] FindNextFileW (in: hFindFile=0x3814c0, lpFindFileData=0x31e65c | out: lpFindFileData=0x31e65c*(dwFileAttributes=0x16, ftCreationTime.dwLowDateTime=0x2dfdd420, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0xb63e4b00, ftLastAccessTime.dwHighDateTime=0x1d337f4, ftLastWriteTime.dwLowDateTime=0xb63e4b00, ftLastWriteTime.dwHighDateTime=0x1d337f4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="S-1-5-21-3388679973-3930757225-3770151564-1000", cAlternateFileName="S-1-5-~1")) returned 1 [0029.524] FindNextFileW (in: hFindFile=0x3814c0, lpFindFileData=0x31e65c | out: lpFindFileData=0x31e65c*(dwFileAttributes=0x16, ftCreationTime.dwLowDateTime=0x2dfdd420, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0xb63e4b00, ftLastAccessTime.dwHighDateTime=0x1d337f4, ftLastWriteTime.dwLowDateTime=0xb63e4b00, ftLastWriteTime.dwHighDateTime=0x1d337f4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="S-1-5-21-3388679973-3930757225-3770151564-1000", cAlternateFileName="S-1-5-~1")) returned 0 [0029.524] FindClose (in: hFindFile=0x3814c0 | out: hFindFile=0x3814c0) returned 1 [0029.524] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e8e4) returned 1 [0029.524] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e8f0) returned 1 [0029.525] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e924) returned 1 [0029.525] GetFullPathNameW (in: lpFileName="C:\\$Recycle.Bin", nBufferLength=0x105, lpBuffer=0x31e42c, lpFilePart=0x0 | out: lpBuffer="C:\\$Recycle.Bin", lpFilePart=0x0) returned 0xf [0029.525] GetFullPathNameW (in: lpFileName="C:\\$Recycle.Bin\\", nBufferLength=0x105, lpBuffer=0x31e400, lpFilePart=0x0 | out: lpBuffer="C:\\$Recycle.Bin\\", lpFilePart=0x0) returned 0x10 [0029.525] FindFirstFileW (in: lpFileName="C:\\$Recycle.Bin\\*", lpFindFileData=0x31e64c | out: lpFindFileData=0x31e64c*(dwFileAttributes=0x16, ftCreationTime.dwLowDateTime=0xd29f5adc, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x2dfdd420, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x2dfdd420, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3814c0 [0029.525] FindNextFileW (in: hFindFile=0x3814c0, lpFindFileData=0x31e65c | out: lpFindFileData=0x31e65c*(dwFileAttributes=0x16, ftCreationTime.dwLowDateTime=0xd29f5adc, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x2dfdd420, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x2dfdd420, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0029.525] FindNextFileW (in: hFindFile=0x3814c0, lpFindFileData=0x31e65c | out: lpFindFileData=0x31e65c*(dwFileAttributes=0x16, ftCreationTime.dwLowDateTime=0x2dfdd420, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0xb63e4b00, ftLastAccessTime.dwHighDateTime=0x1d337f4, ftLastWriteTime.dwLowDateTime=0xb63e4b00, ftLastWriteTime.dwHighDateTime=0x1d337f4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="S-1-5-21-3388679973-3930757225-3770151564-1000", cAlternateFileName="S-1-5-~1")) returned 1 [0029.525] FindNextFileW (in: hFindFile=0x3814c0, lpFindFileData=0x31e65c | out: lpFindFileData=0x31e65c*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0029.525] FindClose (in: hFindFile=0x3814c0 | out: hFindFile=0x3814c0) returned 1 [0029.525] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e8e4) returned 1 [0029.525] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e8f0) returned 1 [0029.525] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e8ac) returned 1 [0029.525] GetFullPathNameW (in: lpFileName="C:\\$Recycle.Bin\\S-1-5-21-3388679973-3930757225-3770151564-1000", nBufferLength=0x105, lpBuffer=0x31e3b4, lpFilePart=0x0 | out: lpBuffer="C:\\$Recycle.Bin\\S-1-5-21-3388679973-3930757225-3770151564-1000", lpFilePart=0x0) returned 0x3e [0029.526] GetFullPathNameW (in: lpFileName="C:\\$Recycle.Bin\\S-1-5-21-3388679973-3930757225-3770151564-1000\\", nBufferLength=0x105, lpBuffer=0x31e388, lpFilePart=0x0 | out: lpBuffer="C:\\$Recycle.Bin\\S-1-5-21-3388679973-3930757225-3770151564-1000\\", lpFilePart=0x0) returned 0x3f [0029.526] FindFirstFileW (in: lpFileName="C:\\$Recycle.Bin\\S-1-5-21-3388679973-3930757225-3770151564-1000\\*", lpFindFileData=0x31e5d4 | out: lpFindFileData=0x31e5d4*(dwFileAttributes=0x16, ftCreationTime.dwLowDateTime=0x2dfdd420, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0xb63e4b00, ftLastAccessTime.dwHighDateTime=0x1d337f4, ftLastWriteTime.dwLowDateTime=0xb63e4b00, ftLastWriteTime.dwHighDateTime=0x1d337f4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3814c0 [0029.526] FindNextFileW (in: hFindFile=0x3814c0, lpFindFileData=0x31e5e4 | out: lpFindFileData=0x31e5e4*(dwFileAttributes=0x16, ftCreationTime.dwLowDateTime=0x2dfdd420, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0xb63e4b00, ftLastAccessTime.dwHighDateTime=0x1d337f4, ftLastWriteTime.dwLowDateTime=0xb63e4b00, ftLastWriteTime.dwHighDateTime=0x1d337f4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0029.526] FindNextFileW (in: hFindFile=0x3814c0, lpFindFileData=0x31e5e4 | out: lpFindFileData=0x31e5e4*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0x2dfdd420, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x2dfdd420, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x2dfdd420, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x81, dwReserved0=0x0, dwReserved1=0x0, cFileName="desktop.ini", cAlternateFileName="")) returned 1 [0029.526] FindNextFileW (in: hFindFile=0x3814c0, lpFindFileData=0x31e5e4 | out: lpFindFileData=0x31e5e4*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0029.526] FindClose (in: hFindFile=0x3814c0 | out: hFindFile=0x3814c0) returned 1 [0029.526] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e86c) returned 1 [0029.526] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e878) returned 1 [0029.526] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e8ac) returned 1 [0029.526] GetFullPathNameW (in: lpFileName="C:\\$Recycle.Bin\\S-1-5-21-3388679973-3930757225-3770151564-1000", nBufferLength=0x105, lpBuffer=0x31e3b4, lpFilePart=0x0 | out: lpBuffer="C:\\$Recycle.Bin\\S-1-5-21-3388679973-3930757225-3770151564-1000", lpFilePart=0x0) returned 0x3e [0029.526] GetFullPathNameW (in: lpFileName="C:\\$Recycle.Bin\\S-1-5-21-3388679973-3930757225-3770151564-1000\\", nBufferLength=0x105, lpBuffer=0x31e388, lpFilePart=0x0 | out: lpBuffer="C:\\$Recycle.Bin\\S-1-5-21-3388679973-3930757225-3770151564-1000\\", lpFilePart=0x0) returned 0x3f [0029.526] FindFirstFileW (in: lpFileName="C:\\$Recycle.Bin\\S-1-5-21-3388679973-3930757225-3770151564-1000\\*", lpFindFileData=0x31e5d4 | out: lpFindFileData=0x31e5d4*(dwFileAttributes=0x16, ftCreationTime.dwLowDateTime=0x2dfdd420, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0xb63e4b00, ftLastAccessTime.dwHighDateTime=0x1d337f4, ftLastWriteTime.dwLowDateTime=0xb63e4b00, ftLastWriteTime.dwHighDateTime=0x1d337f4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3814c0 [0029.527] FindNextFileW (in: hFindFile=0x3814c0, lpFindFileData=0x31e5e4 | out: lpFindFileData=0x31e5e4*(dwFileAttributes=0x16, ftCreationTime.dwLowDateTime=0x2dfdd420, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0xb63e4b00, ftLastAccessTime.dwHighDateTime=0x1d337f4, ftLastWriteTime.dwLowDateTime=0xb63e4b00, ftLastWriteTime.dwHighDateTime=0x1d337f4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0029.527] FindNextFileW (in: hFindFile=0x3814c0, lpFindFileData=0x31e5e4 | out: lpFindFileData=0x31e5e4*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0x2dfdd420, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x2dfdd420, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x2dfdd420, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x81, dwReserved0=0x0, dwReserved1=0x0, cFileName="desktop.ini", cAlternateFileName="")) returned 1 [0029.527] FindNextFileW (in: hFindFile=0x3814c0, lpFindFileData=0x31e5e4 | out: lpFindFileData=0x31e5e4*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0x2dfdd420, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x2dfdd420, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x2dfdd420, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x81, dwReserved0=0x0, dwReserved1=0x0, cFileName="desktop.ini", cAlternateFileName="")) returned 0 [0029.527] FindClose (in: hFindFile=0x3814c0 | out: hFindFile=0x3814c0) returned 1 [0029.527] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e86c) returned 1 [0029.527] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e878) returned 1 [0029.527] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e924) returned 1 [0029.527] GetFullPathNameW (in: lpFileName="C:\\Boot", nBufferLength=0x105, lpBuffer=0x31e42c, lpFilePart=0x0 | out: lpBuffer="C:\\Boot", lpFilePart=0x0) returned 0x7 [0029.527] GetFullPathNameW (in: lpFileName="C:\\Boot\\", nBufferLength=0x105, lpBuffer=0x31e400, lpFilePart=0x0 | out: lpBuffer="C:\\Boot\\", lpFilePart=0x0) returned 0x8 [0029.527] FindFirstFileW (in: lpFileName="C:\\Boot\\*", lpFindFileData=0x31e64c | out: lpFindFileData=0x31e64c*(dwFileAttributes=0x16, ftCreationTime.dwLowDateTime=0xac015040, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac30ebc0, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xac30ebc0, ftLastWriteTime.dwHighDateTime=0x1d2de32, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3814c0 [0029.528] FindNextFileW (in: hFindFile=0x3814c0, lpFindFileData=0x31e65c | out: lpFindFileData=0x31e65c*(dwFileAttributes=0x16, ftCreationTime.dwLowDateTime=0xac015040, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac30ebc0, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xac30ebc0, ftLastWriteTime.dwHighDateTime=0x1d2de32, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0029.528] FindNextFileW (in: hFindFile=0x3814c0, lpFindFileData=0x31e65c | out: lpFindFileData=0x31e65c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xac2e8a60, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0x90cd45e0, ftLastAccessTime.dwHighDateTime=0x1d5e82a, ftLastWriteTime.dwLowDateTime=0x90cd45e0, ftLastWriteTime.dwHighDateTime=0x1d5e82a, nFileSizeHigh=0x0, nFileSizeLow=0x6000, dwReserved0=0x0, dwReserved1=0x0, cFileName="BCD", cAlternateFileName="")) returned 1 [0029.528] FindNextFileW (in: hFindFile=0x3814c0, lpFindFileData=0x31e65c | out: lpFindFileData=0x31e65c*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0xac2e8a60, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac2e8a60, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0x9098e7a0, ftLastWriteTime.dwHighDateTime=0x1d5e82a, nFileSizeHigh=0x0, nFileSizeLow=0x5400, dwReserved0=0x0, dwReserved1=0x0, cFileName="BCD.LOG", cAlternateFileName="")) returned 1 [0029.528] FindNextFileW (in: hFindFile=0x3814c0, lpFindFileData=0x31e65c | out: lpFindFileData=0x31e65c*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0xac30ebc0, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac30ebc0, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xac30ebc0, ftLastWriteTime.dwHighDateTime=0x1d2de32, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="BCD.LOG1", cAlternateFileName="BCD~1.LOG")) returned 1 [0029.528] FindNextFileW (in: hFindFile=0x3814c0, lpFindFileData=0x31e65c | out: lpFindFileData=0x31e65c*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0xac30ebc0, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac30ebc0, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xac30ebc0, ftLastWriteTime.dwHighDateTime=0x1d2de32, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="BCD.LOG2", cAlternateFileName="BCD~2.LOG")) returned 1 [0029.528] FindNextFileW (in: hFindFile=0x3814c0, lpFindFileData=0x31e65c | out: lpFindFileData=0x31e65c*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0xac0f9880, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac0f9880, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xac0f9880, ftLastWriteTime.dwHighDateTime=0x1d2de32, nFileSizeHigh=0x0, nFileSizeLow=0x10000, dwReserved0=0x0, dwReserved1=0x0, cFileName="BOOTSTAT.DAT", cAlternateFileName="")) returned 1 [0029.528] FindNextFileW (in: hFindFile=0x3814c0, lpFindFileData=0x31e65c | out: lpFindFileData=0x31e65c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac015040, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac015040, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xac015040, ftLastWriteTime.dwHighDateTime=0x1d2de32, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="cs-CZ", cAlternateFileName="")) returned 1 [0029.529] FindNextFileW (in: hFindFile=0x3814c0, lpFindFileData=0x31e65c | out: lpFindFileData=0x31e65c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac015040, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac03b1a0, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xac03b1a0, ftLastWriteTime.dwHighDateTime=0x1d2de32, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="da-DK", cAlternateFileName="")) returned 1 [0029.529] FindNextFileW (in: hFindFile=0x3814c0, lpFindFileData=0x31e65c | out: lpFindFileData=0x31e65c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac03b1a0, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac03b1a0, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xac03b1a0, ftLastWriteTime.dwHighDateTime=0x1d2de32, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="de-DE", cAlternateFileName="")) returned 1 [0029.529] FindNextFileW (in: hFindFile=0x3814c0, lpFindFileData=0x31e65c | out: lpFindFileData=0x31e65c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac03b1a0, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac03b1a0, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xac03b1a0, ftLastWriteTime.dwHighDateTime=0x1d2de32, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="el-GR", cAlternateFileName="")) returned 1 [0029.529] FindNextFileW (in: hFindFile=0x3814c0, lpFindFileData=0x31e65c | out: lpFindFileData=0x31e65c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac03b1a0, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac03b1a0, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xac03b1a0, ftLastWriteTime.dwHighDateTime=0x1d2de32, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="en-US", cAlternateFileName="")) returned 1 [0029.529] FindNextFileW (in: hFindFile=0x3814c0, lpFindFileData=0x31e65c | out: lpFindFileData=0x31e65c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac03b1a0, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac061300, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xac061300, ftLastWriteTime.dwHighDateTime=0x1d2de32, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="es-ES", cAlternateFileName="")) returned 1 [0029.529] FindNextFileW (in: hFindFile=0x3814c0, lpFindFileData=0x31e65c | out: lpFindFileData=0x31e65c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac061300, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac061300, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xac061300, ftLastWriteTime.dwHighDateTime=0x1d2de32, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="fi-FI", cAlternateFileName="")) returned 1 [0029.529] FindNextFileW (in: hFindFile=0x3814c0, lpFindFileData=0x31e65c | out: lpFindFileData=0x31e65c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac0f9880, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac276640, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xac276640, ftLastWriteTime.dwHighDateTime=0x1d2de32, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Fonts", cAlternateFileName="")) returned 1 [0029.529] FindNextFileW (in: hFindFile=0x3814c0, lpFindFileData=0x31e65c | out: lpFindFileData=0x31e65c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac061300, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac061300, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xac061300, ftLastWriteTime.dwHighDateTime=0x1d2de32, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="fr-FR", cAlternateFileName="")) returned 1 [0029.530] FindNextFileW (in: hFindFile=0x3814c0, lpFindFileData=0x31e65c | out: lpFindFileData=0x31e65c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac061300, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac061300, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xac061300, ftLastWriteTime.dwHighDateTime=0x1d2de32, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="hu-HU", cAlternateFileName="")) returned 1 [0029.530] FindNextFileW (in: hFindFile=0x3814c0, lpFindFileData=0x31e65c | out: lpFindFileData=0x31e65c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac061300, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac061300, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xac061300, ftLastWriteTime.dwHighDateTime=0x1d2de32, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="it-IT", cAlternateFileName="")) returned 1 [0029.530] FindNextFileW (in: hFindFile=0x3814c0, lpFindFileData=0x31e65c | out: lpFindFileData=0x31e65c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac087460, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac087460, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xac087460, ftLastWriteTime.dwHighDateTime=0x1d2de32, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="ja-JP", cAlternateFileName="")) returned 1 [0029.530] FindNextFileW (in: hFindFile=0x3814c0, lpFindFileData=0x31e65c | out: lpFindFileData=0x31e65c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac087460, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac087460, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xac087460, ftLastWriteTime.dwHighDateTime=0x1d2de32, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="ko-KR", cAlternateFileName="")) returned 1 [0029.530] FindNextFileW (in: hFindFile=0x3814c0, lpFindFileData=0x31e65c | out: lpFindFileData=0x31e65c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xac087460, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac087460, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0x8bc7dbfe, ftLastWriteTime.dwHighDateTime=0x1cb892b, nFileSizeHigh=0x0, nFileSizeLow=0x76980, dwReserved0=0x0, dwReserved1=0x0, cFileName="memtest.exe", cAlternateFileName="")) returned 1 [0029.530] FindNextFileW (in: hFindFile=0x3814c0, lpFindFileData=0x31e65c | out: lpFindFileData=0x31e65c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac087460, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac0ad5c0, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xac0ad5c0, ftLastWriteTime.dwHighDateTime=0x1d2de32, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="nb-NO", cAlternateFileName="")) returned 1 [0029.530] FindNextFileW (in: hFindFile=0x3814c0, lpFindFileData=0x31e65c | out: lpFindFileData=0x31e65c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac0ad5c0, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac0ad5c0, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xac0ad5c0, ftLastWriteTime.dwHighDateTime=0x1d2de32, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="nl-NL", cAlternateFileName="")) returned 1 [0029.531] FindNextFileW (in: hFindFile=0x3814c0, lpFindFileData=0x31e65c | out: lpFindFileData=0x31e65c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac0ad5c0, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac0ad5c0, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xac0ad5c0, ftLastWriteTime.dwHighDateTime=0x1d2de32, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="pl-PL", cAlternateFileName="")) returned 1 [0029.531] FindNextFileW (in: hFindFile=0x3814c0, lpFindFileData=0x31e65c | out: lpFindFileData=0x31e65c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac0ad5c0, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac0ad5c0, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xac0ad5c0, ftLastWriteTime.dwHighDateTime=0x1d2de32, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="pt-BR", cAlternateFileName="")) returned 1 [0029.531] FindNextFileW (in: hFindFile=0x3814c0, lpFindFileData=0x31e65c | out: lpFindFileData=0x31e65c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac0d3720, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac0d3720, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xac0d3720, ftLastWriteTime.dwHighDateTime=0x1d2de32, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="pt-PT", cAlternateFileName="")) returned 1 [0029.531] FindNextFileW (in: hFindFile=0x3814c0, lpFindFileData=0x31e65c | out: lpFindFileData=0x31e65c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac0d3720, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac0d3720, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xac0d3720, ftLastWriteTime.dwHighDateTime=0x1d2de32, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="ru-RU", cAlternateFileName="")) returned 1 [0029.531] FindNextFileW (in: hFindFile=0x3814c0, lpFindFileData=0x31e65c | out: lpFindFileData=0x31e65c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac0d3720, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac0d3720, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xac0d3720, ftLastWriteTime.dwHighDateTime=0x1d2de32, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="sv-SE", cAlternateFileName="")) returned 1 [0029.531] FindNextFileW (in: hFindFile=0x3814c0, lpFindFileData=0x31e65c | out: lpFindFileData=0x31e65c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac0d3720, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac0d3720, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xac0d3720, ftLastWriteTime.dwHighDateTime=0x1d2de32, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="tr-TR", cAlternateFileName="")) returned 1 [0029.532] FindNextFileW (in: hFindFile=0x3814c0, lpFindFileData=0x31e65c | out: lpFindFileData=0x31e65c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac0d3720, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac0d3720, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xac0d3720, ftLastWriteTime.dwHighDateTime=0x1d2de32, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="zh-CN", cAlternateFileName="")) returned 1 [0029.532] FindNextFileW (in: hFindFile=0x3814c0, lpFindFileData=0x31e65c | out: lpFindFileData=0x31e65c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac0f9880, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac0f9880, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xac0f9880, ftLastWriteTime.dwHighDateTime=0x1d2de32, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="zh-HK", cAlternateFileName="")) returned 1 [0029.532] FindNextFileW (in: hFindFile=0x3814c0, lpFindFileData=0x31e65c | out: lpFindFileData=0x31e65c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac0f9880, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac0f9880, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xac0f9880, ftLastWriteTime.dwHighDateTime=0x1d2de32, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="zh-TW", cAlternateFileName="")) returned 1 [0029.532] FindNextFileW (in: hFindFile=0x3814c0, lpFindFileData=0x31e65c | out: lpFindFileData=0x31e65c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac0f9880, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac0f9880, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xac0f9880, ftLastWriteTime.dwHighDateTime=0x1d2de32, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="zh-TW", cAlternateFileName="")) returned 0 [0029.532] FindClose (in: hFindFile=0x3814c0 | out: hFindFile=0x3814c0) returned 1 [0029.532] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e8e4) returned 1 [0029.532] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e8f0) returned 1 [0029.532] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e924) returned 1 [0029.532] GetFullPathNameW (in: lpFileName="C:\\Boot", nBufferLength=0x105, lpBuffer=0x31e42c, lpFilePart=0x0 | out: lpBuffer="C:\\Boot", lpFilePart=0x0) returned 0x7 [0029.532] GetFullPathNameW (in: lpFileName="C:\\Boot\\", nBufferLength=0x105, lpBuffer=0x31e400, lpFilePart=0x0 | out: lpBuffer="C:\\Boot\\", lpFilePart=0x0) returned 0x8 [0029.532] FindFirstFileW (in: lpFileName="C:\\Boot\\*", lpFindFileData=0x31e64c | out: lpFindFileData=0x31e64c*(dwFileAttributes=0x16, ftCreationTime.dwLowDateTime=0xac015040, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac30ebc0, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xac30ebc0, ftLastWriteTime.dwHighDateTime=0x1d2de32, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3814c0 [0029.533] FindNextFileW (in: hFindFile=0x3814c0, lpFindFileData=0x31e65c | out: lpFindFileData=0x31e65c*(dwFileAttributes=0x16, ftCreationTime.dwLowDateTime=0xac015040, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac30ebc0, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xac30ebc0, ftLastWriteTime.dwHighDateTime=0x1d2de32, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0029.533] FindNextFileW (in: hFindFile=0x3814c0, lpFindFileData=0x31e65c | out: lpFindFileData=0x31e65c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xac2e8a60, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0x90cd45e0, ftLastAccessTime.dwHighDateTime=0x1d5e82a, ftLastWriteTime.dwLowDateTime=0x90cd45e0, ftLastWriteTime.dwHighDateTime=0x1d5e82a, nFileSizeHigh=0x0, nFileSizeLow=0x6000, dwReserved0=0x0, dwReserved1=0x0, cFileName="BCD", cAlternateFileName="")) returned 1 [0029.533] FindNextFileW (in: hFindFile=0x3814c0, lpFindFileData=0x31e65c | out: lpFindFileData=0x31e65c*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0xac2e8a60, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac2e8a60, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0x9098e7a0, ftLastWriteTime.dwHighDateTime=0x1d5e82a, nFileSizeHigh=0x0, nFileSizeLow=0x5400, dwReserved0=0x0, dwReserved1=0x0, cFileName="BCD.LOG", cAlternateFileName="")) returned 1 [0029.533] FindNextFileW (in: hFindFile=0x3814c0, lpFindFileData=0x31e65c | out: lpFindFileData=0x31e65c*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0xac30ebc0, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac30ebc0, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xac30ebc0, ftLastWriteTime.dwHighDateTime=0x1d2de32, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="BCD.LOG1", cAlternateFileName="BCD~1.LOG")) returned 1 [0029.533] FindNextFileW (in: hFindFile=0x3814c0, lpFindFileData=0x31e65c | out: lpFindFileData=0x31e65c*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0xac30ebc0, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac30ebc0, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xac30ebc0, ftLastWriteTime.dwHighDateTime=0x1d2de32, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="BCD.LOG2", cAlternateFileName="BCD~2.LOG")) returned 1 [0029.533] FindNextFileW (in: hFindFile=0x3814c0, lpFindFileData=0x31e65c | out: lpFindFileData=0x31e65c*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0xac0f9880, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac0f9880, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xac0f9880, ftLastWriteTime.dwHighDateTime=0x1d2de32, nFileSizeHigh=0x0, nFileSizeLow=0x10000, dwReserved0=0x0, dwReserved1=0x0, cFileName="BOOTSTAT.DAT", cAlternateFileName="")) returned 1 [0029.534] FindNextFileW (in: hFindFile=0x3814c0, lpFindFileData=0x31e65c | out: lpFindFileData=0x31e65c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac015040, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac015040, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xac015040, ftLastWriteTime.dwHighDateTime=0x1d2de32, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="cs-CZ", cAlternateFileName="")) returned 1 [0029.534] FindNextFileW (in: hFindFile=0x3814c0, lpFindFileData=0x31e65c | out: lpFindFileData=0x31e65c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac015040, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac03b1a0, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xac03b1a0, ftLastWriteTime.dwHighDateTime=0x1d2de32, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="da-DK", cAlternateFileName="")) returned 1 [0029.534] FindNextFileW (in: hFindFile=0x3814c0, lpFindFileData=0x31e65c | out: lpFindFileData=0x31e65c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac03b1a0, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac03b1a0, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xac03b1a0, ftLastWriteTime.dwHighDateTime=0x1d2de32, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="de-DE", cAlternateFileName="")) returned 1 [0029.534] FindNextFileW (in: hFindFile=0x3814c0, lpFindFileData=0x31e65c | out: lpFindFileData=0x31e65c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac03b1a0, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac03b1a0, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xac03b1a0, ftLastWriteTime.dwHighDateTime=0x1d2de32, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="el-GR", cAlternateFileName="")) returned 1 [0029.534] FindNextFileW (in: hFindFile=0x3814c0, lpFindFileData=0x31e65c | out: lpFindFileData=0x31e65c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac03b1a0, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac03b1a0, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xac03b1a0, ftLastWriteTime.dwHighDateTime=0x1d2de32, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="en-US", cAlternateFileName="")) returned 1 [0029.534] FindNextFileW (in: hFindFile=0x3814c0, lpFindFileData=0x31e65c | out: lpFindFileData=0x31e65c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac03b1a0, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac061300, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xac061300, ftLastWriteTime.dwHighDateTime=0x1d2de32, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="es-ES", cAlternateFileName="")) returned 1 [0029.534] FindNextFileW (in: hFindFile=0x3814c0, lpFindFileData=0x31e65c | out: lpFindFileData=0x31e65c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac061300, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac061300, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xac061300, ftLastWriteTime.dwHighDateTime=0x1d2de32, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="fi-FI", cAlternateFileName="")) returned 1 [0029.534] FindNextFileW (in: hFindFile=0x3814c0, lpFindFileData=0x31e65c | out: lpFindFileData=0x31e65c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac0f9880, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac276640, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xac276640, ftLastWriteTime.dwHighDateTime=0x1d2de32, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Fonts", cAlternateFileName="")) returned 1 [0029.534] FindNextFileW (in: hFindFile=0x3814c0, lpFindFileData=0x31e65c | out: lpFindFileData=0x31e65c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac061300, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac061300, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xac061300, ftLastWriteTime.dwHighDateTime=0x1d2de32, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="fr-FR", cAlternateFileName="")) returned 1 [0029.534] FindNextFileW (in: hFindFile=0x3814c0, lpFindFileData=0x31e65c | out: lpFindFileData=0x31e65c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac061300, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac061300, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xac061300, ftLastWriteTime.dwHighDateTime=0x1d2de32, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="hu-HU", cAlternateFileName="")) returned 1 [0029.535] FindNextFileW (in: hFindFile=0x3814c0, lpFindFileData=0x31e65c | out: lpFindFileData=0x31e65c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac061300, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac061300, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xac061300, ftLastWriteTime.dwHighDateTime=0x1d2de32, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="it-IT", cAlternateFileName="")) returned 1 [0029.535] FindNextFileW (in: hFindFile=0x3814c0, lpFindFileData=0x31e65c | out: lpFindFileData=0x31e65c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac087460, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac087460, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xac087460, ftLastWriteTime.dwHighDateTime=0x1d2de32, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="ja-JP", cAlternateFileName="")) returned 1 [0029.535] FindNextFileW (in: hFindFile=0x3814c0, lpFindFileData=0x31e65c | out: lpFindFileData=0x31e65c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac087460, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac087460, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xac087460, ftLastWriteTime.dwHighDateTime=0x1d2de32, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="ko-KR", cAlternateFileName="")) returned 1 [0029.535] FindNextFileW (in: hFindFile=0x3814c0, lpFindFileData=0x31e65c | out: lpFindFileData=0x31e65c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xac087460, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac087460, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0x8bc7dbfe, ftLastWriteTime.dwHighDateTime=0x1cb892b, nFileSizeHigh=0x0, nFileSizeLow=0x76980, dwReserved0=0x0, dwReserved1=0x0, cFileName="memtest.exe", cAlternateFileName="")) returned 1 [0029.535] FindNextFileW (in: hFindFile=0x3814c0, lpFindFileData=0x31e65c | out: lpFindFileData=0x31e65c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac087460, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac0ad5c0, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xac0ad5c0, ftLastWriteTime.dwHighDateTime=0x1d2de32, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="nb-NO", cAlternateFileName="")) returned 1 [0029.535] FindNextFileW (in: hFindFile=0x3814c0, lpFindFileData=0x31e65c | out: lpFindFileData=0x31e65c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac0ad5c0, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac0ad5c0, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xac0ad5c0, ftLastWriteTime.dwHighDateTime=0x1d2de32, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="nl-NL", cAlternateFileName="")) returned 1 [0029.535] FindNextFileW (in: hFindFile=0x3814c0, lpFindFileData=0x31e65c | out: lpFindFileData=0x31e65c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac0ad5c0, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac0ad5c0, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xac0ad5c0, ftLastWriteTime.dwHighDateTime=0x1d2de32, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="pl-PL", cAlternateFileName="")) returned 1 [0029.535] FindNextFileW (in: hFindFile=0x3814c0, lpFindFileData=0x31e65c | out: lpFindFileData=0x31e65c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac0ad5c0, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac0ad5c0, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xac0ad5c0, ftLastWriteTime.dwHighDateTime=0x1d2de32, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="pt-BR", cAlternateFileName="")) returned 1 [0029.536] FindNextFileW (in: hFindFile=0x3814c0, lpFindFileData=0x31e65c | out: lpFindFileData=0x31e65c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac0d3720, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac0d3720, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xac0d3720, ftLastWriteTime.dwHighDateTime=0x1d2de32, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="pt-PT", cAlternateFileName="")) returned 1 [0029.536] FindNextFileW (in: hFindFile=0x3814c0, lpFindFileData=0x31e65c | out: lpFindFileData=0x31e65c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac0d3720, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac0d3720, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xac0d3720, ftLastWriteTime.dwHighDateTime=0x1d2de32, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="ru-RU", cAlternateFileName="")) returned 1 [0029.536] FindNextFileW (in: hFindFile=0x3814c0, lpFindFileData=0x31e65c | out: lpFindFileData=0x31e65c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac0d3720, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac0d3720, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xac0d3720, ftLastWriteTime.dwHighDateTime=0x1d2de32, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="sv-SE", cAlternateFileName="")) returned 1 [0029.536] FindNextFileW (in: hFindFile=0x3814c0, lpFindFileData=0x31e65c | out: lpFindFileData=0x31e65c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac0d3720, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac0d3720, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xac0d3720, ftLastWriteTime.dwHighDateTime=0x1d2de32, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="tr-TR", cAlternateFileName="")) returned 1 [0029.536] FindNextFileW (in: hFindFile=0x3814c0, lpFindFileData=0x31e65c | out: lpFindFileData=0x31e65c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac0d3720, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac0d3720, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xac0d3720, ftLastWriteTime.dwHighDateTime=0x1d2de32, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="zh-CN", cAlternateFileName="")) returned 1 [0029.536] FindNextFileW (in: hFindFile=0x3814c0, lpFindFileData=0x31e65c | out: lpFindFileData=0x31e65c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac0f9880, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac0f9880, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xac0f9880, ftLastWriteTime.dwHighDateTime=0x1d2de32, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="zh-HK", cAlternateFileName="")) returned 1 [0029.536] FindNextFileW (in: hFindFile=0x3814c0, lpFindFileData=0x31e65c | out: lpFindFileData=0x31e65c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac0f9880, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac0f9880, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xac0f9880, ftLastWriteTime.dwHighDateTime=0x1d2de32, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="zh-TW", cAlternateFileName="")) returned 1 [0029.536] FindNextFileW (in: hFindFile=0x3814c0, lpFindFileData=0x31e65c | out: lpFindFileData=0x31e65c*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0029.536] FindClose (in: hFindFile=0x3814c0 | out: hFindFile=0x3814c0) returned 1 [0029.536] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e8e4) returned 1 [0029.536] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e8f0) returned 1 [0029.537] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e8ac) returned 1 [0029.537] GetFullPathNameW (in: lpFileName="C:\\Boot\\cs-CZ", nBufferLength=0x105, lpBuffer=0x31e3b4, lpFilePart=0x0 | out: lpBuffer="C:\\Boot\\cs-CZ", lpFilePart=0x0) returned 0xd [0029.537] GetFullPathNameW (in: lpFileName="C:\\Boot\\cs-CZ\\", nBufferLength=0x105, lpBuffer=0x31e388, lpFilePart=0x0 | out: lpBuffer="C:\\Boot\\cs-CZ\\", lpFilePart=0x0) returned 0xe [0029.537] FindFirstFileW (in: lpFileName="C:\\Boot\\cs-CZ\\*", lpFindFileData=0x31e5d4 | out: lpFindFileData=0x31e5d4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac015040, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac015040, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xac015040, ftLastWriteTime.dwHighDateTime=0x1d2de32, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3814c0 [0029.538] FindNextFileW (in: hFindFile=0x3814c0, lpFindFileData=0x31e5e4 | out: lpFindFileData=0x31e5e4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac015040, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac015040, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xac015040, ftLastWriteTime.dwHighDateTime=0x1d2de32, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0029.538] FindNextFileW (in: hFindFile=0x3814c0, lpFindFileData=0x31e5e4 | out: lpFindFileData=0x31e5e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xac015040, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac015040, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xe88a2888, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x15c50, dwReserved0=0x0, dwReserved1=0x0, cFileName="bootmgr.exe.mui", cAlternateFileName="BOOTMG~1.MUI")) returned 1 [0029.538] FindNextFileW (in: hFindFile=0x3814c0, lpFindFileData=0x31e5e4 | out: lpFindFileData=0x31e5e4*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0029.538] FindClose (in: hFindFile=0x3814c0 | out: hFindFile=0x3814c0) returned 1 [0029.538] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e86c) returned 1 [0029.538] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e878) returned 1 [0029.538] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e8ac) returned 1 [0029.538] GetFullPathNameW (in: lpFileName="C:\\Boot\\cs-CZ", nBufferLength=0x105, lpBuffer=0x31e3b4, lpFilePart=0x0 | out: lpBuffer="C:\\Boot\\cs-CZ", lpFilePart=0x0) returned 0xd [0029.538] GetFullPathNameW (in: lpFileName="C:\\Boot\\cs-CZ\\", nBufferLength=0x105, lpBuffer=0x31e388, lpFilePart=0x0 | out: lpBuffer="C:\\Boot\\cs-CZ\\", lpFilePart=0x0) returned 0xe [0029.538] FindFirstFileW (in: lpFileName="C:\\Boot\\cs-CZ\\*", lpFindFileData=0x31e5d4 | out: lpFindFileData=0x31e5d4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac015040, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac015040, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xac015040, ftLastWriteTime.dwHighDateTime=0x1d2de32, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3814c0 [0029.539] FindNextFileW (in: hFindFile=0x3814c0, lpFindFileData=0x31e5e4 | out: lpFindFileData=0x31e5e4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac015040, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac015040, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xac015040, ftLastWriteTime.dwHighDateTime=0x1d2de32, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0029.539] FindNextFileW (in: hFindFile=0x3814c0, lpFindFileData=0x31e5e4 | out: lpFindFileData=0x31e5e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xac015040, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac015040, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xe88a2888, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x15c50, dwReserved0=0x0, dwReserved1=0x0, cFileName="bootmgr.exe.mui", cAlternateFileName="BOOTMG~1.MUI")) returned 1 [0029.539] FindNextFileW (in: hFindFile=0x3814c0, lpFindFileData=0x31e5e4 | out: lpFindFileData=0x31e5e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xac015040, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac015040, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xe88a2888, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x15c50, dwReserved0=0x0, dwReserved1=0x0, cFileName="bootmgr.exe.mui", cAlternateFileName="BOOTMG~1.MUI")) returned 0 [0029.539] FindClose (in: hFindFile=0x3814c0 | out: hFindFile=0x3814c0) returned 1 [0029.539] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e86c) returned 1 [0029.539] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e878) returned 1 [0029.539] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e8ac) returned 1 [0029.539] GetFullPathNameW (in: lpFileName="C:\\Boot\\da-DK", nBufferLength=0x105, lpBuffer=0x31e3b4, lpFilePart=0x0 | out: lpBuffer="C:\\Boot\\da-DK", lpFilePart=0x0) returned 0xd [0029.539] GetFullPathNameW (in: lpFileName="C:\\Boot\\da-DK\\", nBufferLength=0x105, lpBuffer=0x31e388, lpFilePart=0x0 | out: lpBuffer="C:\\Boot\\da-DK\\", lpFilePart=0x0) returned 0xe [0029.539] FindFirstFileW (in: lpFileName="C:\\Boot\\da-DK\\*", lpFindFileData=0x31e5d4 | out: lpFindFileData=0x31e5d4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac015040, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac03b1a0, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xac03b1a0, ftLastWriteTime.dwHighDateTime=0x1d2de32, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3814c0 [0029.540] FindNextFileW (in: hFindFile=0x3814c0, lpFindFileData=0x31e5e4 | out: lpFindFileData=0x31e5e4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac015040, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac03b1a0, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xac03b1a0, ftLastWriteTime.dwHighDateTime=0x1d2de32, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0029.540] FindNextFileW (in: hFindFile=0x3814c0, lpFindFileData=0x31e5e4 | out: lpFindFileData=0x31e5e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xac03b1a0, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac03b1a0, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xe868d5aa, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x15640, dwReserved0=0x0, dwReserved1=0x0, cFileName="bootmgr.exe.mui", cAlternateFileName="BOOTMG~1.MUI")) returned 1 [0029.540] FindNextFileW (in: hFindFile=0x3814c0, lpFindFileData=0x31e5e4 | out: lpFindFileData=0x31e5e4*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0029.540] FindClose (in: hFindFile=0x3814c0 | out: hFindFile=0x3814c0) returned 1 [0029.540] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e86c) returned 1 [0029.540] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e878) returned 1 [0029.540] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e8ac) returned 1 [0029.540] GetFullPathNameW (in: lpFileName="C:\\Boot\\da-DK", nBufferLength=0x105, lpBuffer=0x31e3b4, lpFilePart=0x0 | out: lpBuffer="C:\\Boot\\da-DK", lpFilePart=0x0) returned 0xd [0029.540] GetFullPathNameW (in: lpFileName="C:\\Boot\\da-DK\\", nBufferLength=0x105, lpBuffer=0x31e388, lpFilePart=0x0 | out: lpBuffer="C:\\Boot\\da-DK\\", lpFilePart=0x0) returned 0xe [0029.540] FindFirstFileW (in: lpFileName="C:\\Boot\\da-DK\\*", lpFindFileData=0x31e5d4 | out: lpFindFileData=0x31e5d4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac015040, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac03b1a0, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xac03b1a0, ftLastWriteTime.dwHighDateTime=0x1d2de32, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3814c0 [0029.540] FindNextFileW (in: hFindFile=0x3814c0, lpFindFileData=0x31e5e4 | out: lpFindFileData=0x31e5e4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac015040, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac03b1a0, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xac03b1a0, ftLastWriteTime.dwHighDateTime=0x1d2de32, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0029.541] FindNextFileW (in: hFindFile=0x3814c0, lpFindFileData=0x31e5e4 | out: lpFindFileData=0x31e5e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xac03b1a0, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac03b1a0, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xe868d5aa, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x15640, dwReserved0=0x0, dwReserved1=0x0, cFileName="bootmgr.exe.mui", cAlternateFileName="BOOTMG~1.MUI")) returned 1 [0029.541] FindNextFileW (in: hFindFile=0x3814c0, lpFindFileData=0x31e5e4 | out: lpFindFileData=0x31e5e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xac03b1a0, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac03b1a0, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xe868d5aa, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x15640, dwReserved0=0x0, dwReserved1=0x0, cFileName="bootmgr.exe.mui", cAlternateFileName="BOOTMG~1.MUI")) returned 0 [0029.541] FindClose (in: hFindFile=0x3814c0 | out: hFindFile=0x3814c0) returned 1 [0029.541] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e86c) returned 1 [0029.541] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e878) returned 1 [0029.541] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e8ac) returned 1 [0029.541] GetFullPathNameW (in: lpFileName="C:\\Boot\\de-DE", nBufferLength=0x105, lpBuffer=0x31e3b4, lpFilePart=0x0 | out: lpBuffer="C:\\Boot\\de-DE", lpFilePart=0x0) returned 0xd [0029.541] GetFullPathNameW (in: lpFileName="C:\\Boot\\de-DE\\", nBufferLength=0x105, lpBuffer=0x31e388, lpFilePart=0x0 | out: lpBuffer="C:\\Boot\\de-DE\\", lpFilePart=0x0) returned 0xe [0029.541] FindFirstFileW (in: lpFileName="C:\\Boot\\de-DE\\*", lpFindFileData=0x31e5d4 | out: lpFindFileData=0x31e5d4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac03b1a0, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac03b1a0, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xac03b1a0, ftLastWriteTime.dwHighDateTime=0x1d2de32, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3814c0 [0029.542] FindNextFileW (in: hFindFile=0x3814c0, lpFindFileData=0x31e5e4 | out: lpFindFileData=0x31e5e4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac03b1a0, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac03b1a0, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xac03b1a0, ftLastWriteTime.dwHighDateTime=0x1d2de32, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0029.542] FindNextFileW (in: hFindFile=0x3814c0, lpFindFileData=0x31e5e4 | out: lpFindFileData=0x31e5e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xac03b1a0, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac03b1a0, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xe8132526, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x16640, dwReserved0=0x0, dwReserved1=0x0, cFileName="bootmgr.exe.mui", cAlternateFileName="BOOTMG~1.MUI")) returned 1 [0029.542] FindNextFileW (in: hFindFile=0x3814c0, lpFindFileData=0x31e5e4 | out: lpFindFileData=0x31e5e4*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0029.542] FindClose (in: hFindFile=0x3814c0 | out: hFindFile=0x3814c0) returned 1 [0029.542] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e86c) returned 1 [0029.543] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e878) returned 1 [0029.543] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e8ac) returned 1 [0029.543] GetFullPathNameW (in: lpFileName="C:\\Boot\\de-DE", nBufferLength=0x105, lpBuffer=0x31e3b4, lpFilePart=0x0 | out: lpBuffer="C:\\Boot\\de-DE", lpFilePart=0x0) returned 0xd [0029.543] GetFullPathNameW (in: lpFileName="C:\\Boot\\de-DE\\", nBufferLength=0x105, lpBuffer=0x31e388, lpFilePart=0x0 | out: lpBuffer="C:\\Boot\\de-DE\\", lpFilePart=0x0) returned 0xe [0029.543] FindFirstFileW (in: lpFileName="C:\\Boot\\de-DE\\*", lpFindFileData=0x31e5d4 | out: lpFindFileData=0x31e5d4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac03b1a0, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac03b1a0, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xac03b1a0, ftLastWriteTime.dwHighDateTime=0x1d2de32, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3814c0 [0029.543] FindNextFileW (in: hFindFile=0x3814c0, lpFindFileData=0x31e5e4 | out: lpFindFileData=0x31e5e4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac03b1a0, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac03b1a0, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xac03b1a0, ftLastWriteTime.dwHighDateTime=0x1d2de32, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0029.543] FindNextFileW (in: hFindFile=0x3814c0, lpFindFileData=0x31e5e4 | out: lpFindFileData=0x31e5e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xac03b1a0, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac03b1a0, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xe8132526, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x16640, dwReserved0=0x0, dwReserved1=0x0, cFileName="bootmgr.exe.mui", cAlternateFileName="BOOTMG~1.MUI")) returned 1 [0029.543] FindNextFileW (in: hFindFile=0x3814c0, lpFindFileData=0x31e5e4 | out: lpFindFileData=0x31e5e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xac03b1a0, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac03b1a0, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xe8132526, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x16640, dwReserved0=0x0, dwReserved1=0x0, cFileName="bootmgr.exe.mui", cAlternateFileName="BOOTMG~1.MUI")) returned 0 [0029.543] FindClose (in: hFindFile=0x3814c0 | out: hFindFile=0x3814c0) returned 1 [0029.543] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e86c) returned 1 [0029.543] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e878) returned 1 [0029.543] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e8ac) returned 1 [0029.544] GetFullPathNameW (in: lpFileName="C:\\Boot\\el-GR", nBufferLength=0x105, lpBuffer=0x31e3b4, lpFilePart=0x0 | out: lpBuffer="C:\\Boot\\el-GR", lpFilePart=0x0) returned 0xd [0029.544] GetFullPathNameW (in: lpFileName="C:\\Boot\\el-GR\\", nBufferLength=0x105, lpBuffer=0x31e388, lpFilePart=0x0 | out: lpBuffer="C:\\Boot\\el-GR\\", lpFilePart=0x0) returned 0xe [0029.544] FindFirstFileW (in: lpFileName="C:\\Boot\\el-GR\\*", lpFindFileData=0x31e5d4 | out: lpFindFileData=0x31e5d4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac03b1a0, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac03b1a0, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xac03b1a0, ftLastWriteTime.dwHighDateTime=0x1d2de32, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3814c0 [0029.544] FindNextFileW (in: hFindFile=0x3814c0, lpFindFileData=0x31e5e4 | out: lpFindFileData=0x31e5e4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac03b1a0, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac03b1a0, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xac03b1a0, ftLastWriteTime.dwHighDateTime=0x1d2de32, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0029.544] FindNextFileW (in: hFindFile=0x3814c0, lpFindFileData=0x31e5e4 | out: lpFindFileData=0x31e5e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xac03b1a0, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac03b1a0, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xea239054, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x17250, dwReserved0=0x0, dwReserved1=0x0, cFileName="bootmgr.exe.mui", cAlternateFileName="BOOTMG~1.MUI")) returned 1 [0029.544] FindNextFileW (in: hFindFile=0x3814c0, lpFindFileData=0x31e5e4 | out: lpFindFileData=0x31e5e4*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0029.544] FindClose (in: hFindFile=0x3814c0 | out: hFindFile=0x3814c0) returned 1 [0029.544] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e86c) returned 1 [0029.544] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e878) returned 1 [0029.544] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e8ac) returned 1 [0029.544] GetFullPathNameW (in: lpFileName="C:\\Boot\\el-GR", nBufferLength=0x105, lpBuffer=0x31e3b4, lpFilePart=0x0 | out: lpBuffer="C:\\Boot\\el-GR", lpFilePart=0x0) returned 0xd [0029.545] GetFullPathNameW (in: lpFileName="C:\\Boot\\el-GR\\", nBufferLength=0x105, lpBuffer=0x31e388, lpFilePart=0x0 | out: lpBuffer="C:\\Boot\\el-GR\\", lpFilePart=0x0) returned 0xe [0029.545] FindFirstFileW (in: lpFileName="C:\\Boot\\el-GR\\*", lpFindFileData=0x31e5d4 | out: lpFindFileData=0x31e5d4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac03b1a0, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac03b1a0, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xac03b1a0, ftLastWriteTime.dwHighDateTime=0x1d2de32, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3814c0 [0029.545] FindNextFileW (in: hFindFile=0x3814c0, lpFindFileData=0x31e5e4 | out: lpFindFileData=0x31e5e4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac03b1a0, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac03b1a0, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xac03b1a0, ftLastWriteTime.dwHighDateTime=0x1d2de32, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0029.545] FindNextFileW (in: hFindFile=0x3814c0, lpFindFileData=0x31e5e4 | out: lpFindFileData=0x31e5e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xac03b1a0, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac03b1a0, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xea239054, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x17250, dwReserved0=0x0, dwReserved1=0x0, cFileName="bootmgr.exe.mui", cAlternateFileName="BOOTMG~1.MUI")) returned 1 [0029.545] FindNextFileW (in: hFindFile=0x3814c0, lpFindFileData=0x31e5e4 | out: lpFindFileData=0x31e5e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xac03b1a0, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac03b1a0, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xea239054, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x17250, dwReserved0=0x0, dwReserved1=0x0, cFileName="bootmgr.exe.mui", cAlternateFileName="BOOTMG~1.MUI")) returned 0 [0029.545] FindClose (in: hFindFile=0x3814c0 | out: hFindFile=0x3814c0) returned 1 [0029.545] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e86c) returned 1 [0029.545] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e878) returned 1 [0029.545] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e8ac) returned 1 [0029.545] GetFullPathNameW (in: lpFileName="C:\\Boot\\en-US", nBufferLength=0x105, lpBuffer=0x31e3b4, lpFilePart=0x0 | out: lpBuffer="C:\\Boot\\en-US", lpFilePart=0x0) returned 0xd [0029.545] GetFullPathNameW (in: lpFileName="C:\\Boot\\en-US\\", nBufferLength=0x105, lpBuffer=0x31e388, lpFilePart=0x0 | out: lpBuffer="C:\\Boot\\en-US\\", lpFilePart=0x0) returned 0xe [0029.546] FindFirstFileW (in: lpFileName="C:\\Boot\\en-US\\*", lpFindFileData=0x31e5d4 | out: lpFindFileData=0x31e5d4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac03b1a0, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac03b1a0, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xac03b1a0, ftLastWriteTime.dwHighDateTime=0x1d2de32, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3814c0 [0029.546] FindNextFileW (in: hFindFile=0x3814c0, lpFindFileData=0x31e5e4 | out: lpFindFileData=0x31e5e4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac03b1a0, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac03b1a0, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xac03b1a0, ftLastWriteTime.dwHighDateTime=0x1d2de32, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0029.547] FindNextFileW (in: hFindFile=0x3814c0, lpFindFileData=0x31e5e4 | out: lpFindFileData=0x31e5e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xac03b1a0, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac03b1a0, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xe8216d3c, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x14c40, dwReserved0=0x0, dwReserved1=0x0, cFileName="bootmgr.exe.mui", cAlternateFileName="BOOTMG~1.MUI")) returned 1 [0029.547] FindNextFileW (in: hFindFile=0x3814c0, lpFindFileData=0x31e5e4 | out: lpFindFileData=0x31e5e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xac03b1a0, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac03b1a0, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xc3080a8, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0xaa50, dwReserved0=0x0, dwReserved1=0x0, cFileName="memtest.exe.mui", cAlternateFileName="MEMTES~1.MUI")) returned 1 [0029.547] FindNextFileW (in: hFindFile=0x3814c0, lpFindFileData=0x31e5e4 | out: lpFindFileData=0x31e5e4*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0029.547] FindClose (in: hFindFile=0x3814c0 | out: hFindFile=0x3814c0) returned 1 [0029.547] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e86c) returned 1 [0029.547] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e878) returned 1 [0029.547] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e8ac) returned 1 [0029.547] GetFullPathNameW (in: lpFileName="C:\\Boot\\en-US", nBufferLength=0x105, lpBuffer=0x31e3b4, lpFilePart=0x0 | out: lpBuffer="C:\\Boot\\en-US", lpFilePart=0x0) returned 0xd [0029.547] GetFullPathNameW (in: lpFileName="C:\\Boot\\en-US\\", nBufferLength=0x105, lpBuffer=0x31e388, lpFilePart=0x0 | out: lpBuffer="C:\\Boot\\en-US\\", lpFilePart=0x0) returned 0xe [0029.547] FindFirstFileW (in: lpFileName="C:\\Boot\\en-US\\*", lpFindFileData=0x31e5d4 | out: lpFindFileData=0x31e5d4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac03b1a0, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac03b1a0, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xac03b1a0, ftLastWriteTime.dwHighDateTime=0x1d2de32, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3814c0 [0029.547] FindNextFileW (in: hFindFile=0x3814c0, lpFindFileData=0x31e5e4 | out: lpFindFileData=0x31e5e4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac03b1a0, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac03b1a0, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xac03b1a0, ftLastWriteTime.dwHighDateTime=0x1d2de32, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0029.548] FindNextFileW (in: hFindFile=0x3814c0, lpFindFileData=0x31e5e4 | out: lpFindFileData=0x31e5e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xac03b1a0, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac03b1a0, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xe8216d3c, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x14c40, dwReserved0=0x0, dwReserved1=0x0, cFileName="bootmgr.exe.mui", cAlternateFileName="BOOTMG~1.MUI")) returned 1 [0029.548] FindNextFileW (in: hFindFile=0x3814c0, lpFindFileData=0x31e5e4 | out: lpFindFileData=0x31e5e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xac03b1a0, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac03b1a0, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xc3080a8, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0xaa50, dwReserved0=0x0, dwReserved1=0x0, cFileName="memtest.exe.mui", cAlternateFileName="MEMTES~1.MUI")) returned 1 [0029.548] FindNextFileW (in: hFindFile=0x3814c0, lpFindFileData=0x31e5e4 | out: lpFindFileData=0x31e5e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xac03b1a0, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac03b1a0, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xc3080a8, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0xaa50, dwReserved0=0x0, dwReserved1=0x0, cFileName="memtest.exe.mui", cAlternateFileName="MEMTES~1.MUI")) returned 0 [0029.548] FindClose (in: hFindFile=0x3814c0 | out: hFindFile=0x3814c0) returned 1 [0029.548] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e86c) returned 1 [0029.548] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e878) returned 1 [0029.548] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e8ac) returned 1 [0029.548] GetFullPathNameW (in: lpFileName="C:\\Boot\\es-ES", nBufferLength=0x105, lpBuffer=0x31e3b4, lpFilePart=0x0 | out: lpBuffer="C:\\Boot\\es-ES", lpFilePart=0x0) returned 0xd [0029.548] GetFullPathNameW (in: lpFileName="C:\\Boot\\es-ES\\", nBufferLength=0x105, lpBuffer=0x31e388, lpFilePart=0x0 | out: lpBuffer="C:\\Boot\\es-ES\\", lpFilePart=0x0) returned 0xe [0029.548] FindFirstFileW (in: lpFileName="C:\\Boot\\es-ES\\*", lpFindFileData=0x31e5d4 | out: lpFindFileData=0x31e5d4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac03b1a0, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac061300, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xac061300, ftLastWriteTime.dwHighDateTime=0x1d2de32, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3814c0 [0029.549] FindNextFileW (in: hFindFile=0x3814c0, lpFindFileData=0x31e5e4 | out: lpFindFileData=0x31e5e4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac03b1a0, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac061300, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xac061300, ftLastWriteTime.dwHighDateTime=0x1d2de32, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0029.549] FindNextFileW (in: hFindFile=0x3814c0, lpFindFileData=0x31e5e4 | out: lpFindFileData=0x31e5e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xac061300, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac061300, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xe84ea6d7, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x16050, dwReserved0=0x0, dwReserved1=0x0, cFileName="bootmgr.exe.mui", cAlternateFileName="BOOTMG~1.MUI")) returned 1 [0029.549] FindNextFileW (in: hFindFile=0x3814c0, lpFindFileData=0x31e5e4 | out: lpFindFileData=0x31e5e4*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0029.549] FindClose (in: hFindFile=0x3814c0 | out: hFindFile=0x3814c0) returned 1 [0029.550] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e86c) returned 1 [0029.550] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e878) returned 1 [0029.550] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e8ac) returned 1 [0029.550] GetFullPathNameW (in: lpFileName="C:\\Boot\\es-ES", nBufferLength=0x105, lpBuffer=0x31e3b4, lpFilePart=0x0 | out: lpBuffer="C:\\Boot\\es-ES", lpFilePart=0x0) returned 0xd [0029.550] GetFullPathNameW (in: lpFileName="C:\\Boot\\es-ES\\", nBufferLength=0x105, lpBuffer=0x31e388, lpFilePart=0x0 | out: lpBuffer="C:\\Boot\\es-ES\\", lpFilePart=0x0) returned 0xe [0029.550] FindFirstFileW (in: lpFileName="C:\\Boot\\es-ES\\*", lpFindFileData=0x31e5d4 | out: lpFindFileData=0x31e5d4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac03b1a0, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac061300, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xac061300, ftLastWriteTime.dwHighDateTime=0x1d2de32, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3814c0 [0029.550] FindNextFileW (in: hFindFile=0x3814c0, lpFindFileData=0x31e5e4 | out: lpFindFileData=0x31e5e4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac03b1a0, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac061300, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xac061300, ftLastWriteTime.dwHighDateTime=0x1d2de32, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0029.550] FindNextFileW (in: hFindFile=0x3814c0, lpFindFileData=0x31e5e4 | out: lpFindFileData=0x31e5e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xac061300, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac061300, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xe84ea6d7, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x16050, dwReserved0=0x0, dwReserved1=0x0, cFileName="bootmgr.exe.mui", cAlternateFileName="BOOTMG~1.MUI")) returned 1 [0029.550] FindNextFileW (in: hFindFile=0x3814c0, lpFindFileData=0x31e5e4 | out: lpFindFileData=0x31e5e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xac061300, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac061300, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xe84ea6d7, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x16050, dwReserved0=0x0, dwReserved1=0x0, cFileName="bootmgr.exe.mui", cAlternateFileName="BOOTMG~1.MUI")) returned 0 [0029.550] FindClose (in: hFindFile=0x3814c0 | out: hFindFile=0x3814c0) returned 1 [0029.550] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e86c) returned 1 [0029.550] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e878) returned 1 [0029.551] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e8ac) returned 1 [0029.551] GetFullPathNameW (in: lpFileName="C:\\Boot\\fi-FI", nBufferLength=0x105, lpBuffer=0x31e3b4, lpFilePart=0x0 | out: lpBuffer="C:\\Boot\\fi-FI", lpFilePart=0x0) returned 0xd [0029.551] GetFullPathNameW (in: lpFileName="C:\\Boot\\fi-FI\\", nBufferLength=0x105, lpBuffer=0x31e388, lpFilePart=0x0 | out: lpBuffer="C:\\Boot\\fi-FI\\", lpFilePart=0x0) returned 0xe [0029.551] FindFirstFileW (in: lpFileName="C:\\Boot\\fi-FI\\*", lpFindFileData=0x31e5d4 | out: lpFindFileData=0x31e5d4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac061300, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac061300, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xac061300, ftLastWriteTime.dwHighDateTime=0x1d2de32, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3814c0 [0029.551] FindNextFileW (in: hFindFile=0x3814c0, lpFindFileData=0x31e5e4 | out: lpFindFileData=0x31e5e4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac061300, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac061300, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xac061300, ftLastWriteTime.dwHighDateTime=0x1d2de32, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0029.551] FindNextFileW (in: hFindFile=0x3814c0, lpFindFileData=0x31e5e4 | out: lpFindFileData=0x31e5e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xac061300, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac061300, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xe836d95d, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x15c40, dwReserved0=0x0, dwReserved1=0x0, cFileName="bootmgr.exe.mui", cAlternateFileName="BOOTMG~1.MUI")) returned 1 [0029.551] FindNextFileW (in: hFindFile=0x3814c0, lpFindFileData=0x31e5e4 | out: lpFindFileData=0x31e5e4*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0029.551] FindClose (in: hFindFile=0x3814c0 | out: hFindFile=0x3814c0) returned 1 [0029.551] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e86c) returned 1 [0029.551] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e878) returned 1 [0029.551] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e8ac) returned 1 [0029.552] GetFullPathNameW (in: lpFileName="C:\\Boot\\fi-FI", nBufferLength=0x105, lpBuffer=0x31e3b4, lpFilePart=0x0 | out: lpBuffer="C:\\Boot\\fi-FI", lpFilePart=0x0) returned 0xd [0029.552] GetFullPathNameW (in: lpFileName="C:\\Boot\\fi-FI\\", nBufferLength=0x105, lpBuffer=0x31e388, lpFilePart=0x0 | out: lpBuffer="C:\\Boot\\fi-FI\\", lpFilePart=0x0) returned 0xe [0029.552] FindFirstFileW (in: lpFileName="C:\\Boot\\fi-FI\\*", lpFindFileData=0x31e5d4 | out: lpFindFileData=0x31e5d4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac061300, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac061300, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xac061300, ftLastWriteTime.dwHighDateTime=0x1d2de32, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3814c0 [0029.552] FindNextFileW (in: hFindFile=0x3814c0, lpFindFileData=0x31e5e4 | out: lpFindFileData=0x31e5e4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac061300, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac061300, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xac061300, ftLastWriteTime.dwHighDateTime=0x1d2de32, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0029.552] FindNextFileW (in: hFindFile=0x3814c0, lpFindFileData=0x31e5e4 | out: lpFindFileData=0x31e5e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xac061300, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac061300, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xe836d95d, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x15c40, dwReserved0=0x0, dwReserved1=0x0, cFileName="bootmgr.exe.mui", cAlternateFileName="BOOTMG~1.MUI")) returned 1 [0029.552] FindNextFileW (in: hFindFile=0x3814c0, lpFindFileData=0x31e5e4 | out: lpFindFileData=0x31e5e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xac061300, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac061300, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xe836d95d, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x15c40, dwReserved0=0x0, dwReserved1=0x0, cFileName="bootmgr.exe.mui", cAlternateFileName="BOOTMG~1.MUI")) returned 0 [0029.552] FindClose (in: hFindFile=0x3814c0 | out: hFindFile=0x3814c0) returned 1 [0029.552] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e86c) returned 1 [0029.552] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e878) returned 1 [0029.552] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e8ac) returned 1 [0029.552] GetFullPathNameW (in: lpFileName="C:\\Boot\\Fonts", nBufferLength=0x105, lpBuffer=0x31e3b4, lpFilePart=0x0 | out: lpBuffer="C:\\Boot\\Fonts", lpFilePart=0x0) returned 0xd [0029.552] GetFullPathNameW (in: lpFileName="C:\\Boot\\Fonts\\", nBufferLength=0x105, lpBuffer=0x31e388, lpFilePart=0x0 | out: lpBuffer="C:\\Boot\\Fonts\\", lpFilePart=0x0) returned 0xe [0029.552] FindFirstFileW (in: lpFileName="C:\\Boot\\Fonts\\*", lpFindFileData=0x31e5d4 | out: lpFindFileData=0x31e5d4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac0f9880, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac276640, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xac276640, ftLastWriteTime.dwHighDateTime=0x1d2de32, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3814c0 [0029.553] FindNextFileW (in: hFindFile=0x3814c0, lpFindFileData=0x31e5e4 | out: lpFindFileData=0x31e5e4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac0f9880, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac276640, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xac276640, ftLastWriteTime.dwHighDateTime=0x1d2de32, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0029.553] FindNextFileW (in: hFindFile=0x3814c0, lpFindFileData=0x31e5e4 | out: lpFindFileData=0x31e5e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xac0f9880, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac0f9880, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0x64c5ad69, ftLastWriteTime.dwHighDateTime=0x1c9ea0a, nFileSizeHigh=0x0, nFileSizeLow=0x385e00, dwReserved0=0x0, dwReserved1=0x0, cFileName="chs_boot.ttf", cAlternateFileName="")) returned 1 [0029.554] FindNextFileW (in: hFindFile=0x3814c0, lpFindFileData=0x31e5e4 | out: lpFindFileData=0x31e5e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xac191e00, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac191e00, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0x6505f253, ftLastWriteTime.dwHighDateTime=0x1c9ea0a, nFileSizeHigh=0x0, nFileSizeLow=0x3b27a4, dwReserved0=0x0, dwReserved1=0x0, cFileName="cht_boot.ttf", cAlternateFileName="")) returned 1 [0029.554] FindNextFileW (in: hFindFile=0x3814c0, lpFindFileData=0x31e5e4 | out: lpFindFileData=0x31e5e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xac204220, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac204220, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0x65274577, ftLastWriteTime.dwHighDateTime=0x1c9ea0a, nFileSizeHigh=0x0, nFileSizeLow=0x1e46e4, dwReserved0=0x0, dwReserved1=0x0, cFileName="jpn_boot.ttf", cAlternateFileName="")) returned 1 [0029.554] FindNextFileW (in: hFindFile=0x3814c0, lpFindFileData=0x31e5e4 | out: lpFindFileData=0x31e5e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xac22a380, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac22a380, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0x6530caef, ftLastWriteTime.dwHighDateTime=0x1c9ea0a, nFileSizeHigh=0x0, nFileSizeLow=0x242f20, dwReserved0=0x0, dwReserved1=0x0, cFileName="kor_boot.ttf", cAlternateFileName="")) returned 1 [0029.554] FindNextFileW (in: hFindFile=0x3814c0, lpFindFileData=0x31e5e4 | out: lpFindFileData=0x31e5e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xac276640, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac276640, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0x65332c4d, ftLastWriteTime.dwHighDateTime=0x1c9ea0a, nFileSizeHigh=0x0, nFileSizeLow=0xb95c, dwReserved0=0x0, dwReserved1=0x0, cFileName="wgl4_boot.ttf", cAlternateFileName="WGL4_B~1.TTF")) returned 1 [0029.554] FindNextFileW (in: hFindFile=0x3814c0, lpFindFileData=0x31e5e4 | out: lpFindFileData=0x31e5e4*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0029.554] FindClose (in: hFindFile=0x3814c0 | out: hFindFile=0x3814c0) returned 1 [0029.554] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e86c) returned 1 [0029.554] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e878) returned 1 [0029.554] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e8ac) returned 1 [0029.554] GetFullPathNameW (in: lpFileName="C:\\Boot\\Fonts", nBufferLength=0x105, lpBuffer=0x31e3b4, lpFilePart=0x0 | out: lpBuffer="C:\\Boot\\Fonts", lpFilePart=0x0) returned 0xd [0029.554] GetFullPathNameW (in: lpFileName="C:\\Boot\\Fonts\\", nBufferLength=0x105, lpBuffer=0x31e388, lpFilePart=0x0 | out: lpBuffer="C:\\Boot\\Fonts\\", lpFilePart=0x0) returned 0xe [0029.554] FindFirstFileW (in: lpFileName="C:\\Boot\\Fonts\\*", lpFindFileData=0x31e5d4 | out: lpFindFileData=0x31e5d4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac0f9880, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac276640, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xac276640, ftLastWriteTime.dwHighDateTime=0x1d2de32, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3814c0 [0029.554] FindNextFileW (in: hFindFile=0x3814c0, lpFindFileData=0x31e5e4 | out: lpFindFileData=0x31e5e4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac0f9880, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac276640, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xac276640, ftLastWriteTime.dwHighDateTime=0x1d2de32, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0029.555] FindNextFileW (in: hFindFile=0x3814c0, lpFindFileData=0x31e5e4 | out: lpFindFileData=0x31e5e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xac0f9880, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac0f9880, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0x64c5ad69, ftLastWriteTime.dwHighDateTime=0x1c9ea0a, nFileSizeHigh=0x0, nFileSizeLow=0x385e00, dwReserved0=0x0, dwReserved1=0x0, cFileName="chs_boot.ttf", cAlternateFileName="")) returned 1 [0029.555] FindNextFileW (in: hFindFile=0x3814c0, lpFindFileData=0x31e5e4 | out: lpFindFileData=0x31e5e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xac191e00, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac191e00, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0x6505f253, ftLastWriteTime.dwHighDateTime=0x1c9ea0a, nFileSizeHigh=0x0, nFileSizeLow=0x3b27a4, dwReserved0=0x0, dwReserved1=0x0, cFileName="cht_boot.ttf", cAlternateFileName="")) returned 1 [0029.555] FindNextFileW (in: hFindFile=0x3814c0, lpFindFileData=0x31e5e4 | out: lpFindFileData=0x31e5e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xac204220, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac204220, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0x65274577, ftLastWriteTime.dwHighDateTime=0x1c9ea0a, nFileSizeHigh=0x0, nFileSizeLow=0x1e46e4, dwReserved0=0x0, dwReserved1=0x0, cFileName="jpn_boot.ttf", cAlternateFileName="")) returned 1 [0029.555] FindNextFileW (in: hFindFile=0x3814c0, lpFindFileData=0x31e5e4 | out: lpFindFileData=0x31e5e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xac22a380, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac22a380, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0x6530caef, ftLastWriteTime.dwHighDateTime=0x1c9ea0a, nFileSizeHigh=0x0, nFileSizeLow=0x242f20, dwReserved0=0x0, dwReserved1=0x0, cFileName="kor_boot.ttf", cAlternateFileName="")) returned 1 [0029.555] FindNextFileW (in: hFindFile=0x3814c0, lpFindFileData=0x31e5e4 | out: lpFindFileData=0x31e5e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xac276640, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac276640, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0x65332c4d, ftLastWriteTime.dwHighDateTime=0x1c9ea0a, nFileSizeHigh=0x0, nFileSizeLow=0xb95c, dwReserved0=0x0, dwReserved1=0x0, cFileName="wgl4_boot.ttf", cAlternateFileName="WGL4_B~1.TTF")) returned 1 [0029.555] FindNextFileW (in: hFindFile=0x3814c0, lpFindFileData=0x31e5e4 | out: lpFindFileData=0x31e5e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xac276640, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac276640, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0x65332c4d, ftLastWriteTime.dwHighDateTime=0x1c9ea0a, nFileSizeHigh=0x0, nFileSizeLow=0xb95c, dwReserved0=0x0, dwReserved1=0x0, cFileName="wgl4_boot.ttf", cAlternateFileName="WGL4_B~1.TTF")) returned 0 [0029.555] FindClose (in: hFindFile=0x3814c0 | out: hFindFile=0x3814c0) returned 1 [0029.555] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e86c) returned 1 [0029.555] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e878) returned 1 [0029.555] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e8ac) returned 1 [0029.555] GetFullPathNameW (in: lpFileName="C:\\Boot\\fr-FR", nBufferLength=0x105, lpBuffer=0x31e3b4, lpFilePart=0x0 | out: lpBuffer="C:\\Boot\\fr-FR", lpFilePart=0x0) returned 0xd [0029.555] GetFullPathNameW (in: lpFileName="C:\\Boot\\fr-FR\\", nBufferLength=0x105, lpBuffer=0x31e388, lpFilePart=0x0 | out: lpBuffer="C:\\Boot\\fr-FR\\", lpFilePart=0x0) returned 0xe [0029.556] FindFirstFileW (in: lpFileName="C:\\Boot\\fr-FR\\*", lpFindFileData=0x31e5d4 | out: lpFindFileData=0x31e5d4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac061300, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac061300, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xac061300, ftLastWriteTime.dwHighDateTime=0x1d2de32, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3814c0 [0029.556] FindNextFileW (in: hFindFile=0x3814c0, lpFindFileData=0x31e5e4 | out: lpFindFileData=0x31e5e4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac061300, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac061300, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xac061300, ftLastWriteTime.dwHighDateTime=0x1d2de32, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0029.557] FindNextFileW (in: hFindFile=0x3814c0, lpFindFileData=0x31e5e4 | out: lpFindFileData=0x31e5e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xac061300, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac061300, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xe86b3703, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x16c40, dwReserved0=0x0, dwReserved1=0x0, cFileName="bootmgr.exe.mui", cAlternateFileName="BOOTMG~1.MUI")) returned 1 [0029.557] FindNextFileW (in: hFindFile=0x3814c0, lpFindFileData=0x31e5e4 | out: lpFindFileData=0x31e5e4*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0029.557] FindClose (in: hFindFile=0x3814c0 | out: hFindFile=0x3814c0) returned 1 [0029.557] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e86c) returned 1 [0029.557] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e878) returned 1 [0029.557] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e8ac) returned 1 [0029.557] GetFullPathNameW (in: lpFileName="C:\\Boot\\fr-FR", nBufferLength=0x105, lpBuffer=0x31e3b4, lpFilePart=0x0 | out: lpBuffer="C:\\Boot\\fr-FR", lpFilePart=0x0) returned 0xd [0029.557] GetFullPathNameW (in: lpFileName="C:\\Boot\\fr-FR\\", nBufferLength=0x105, lpBuffer=0x31e388, lpFilePart=0x0 | out: lpBuffer="C:\\Boot\\fr-FR\\", lpFilePart=0x0) returned 0xe [0029.557] FindFirstFileW (in: lpFileName="C:\\Boot\\fr-FR\\*", lpFindFileData=0x31e5d4 | out: lpFindFileData=0x31e5d4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac061300, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac061300, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xac061300, ftLastWriteTime.dwHighDateTime=0x1d2de32, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3814c0 [0029.557] FindNextFileW (in: hFindFile=0x3814c0, lpFindFileData=0x31e5e4 | out: lpFindFileData=0x31e5e4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac061300, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac061300, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xac061300, ftLastWriteTime.dwHighDateTime=0x1d2de32, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0029.557] FindNextFileW (in: hFindFile=0x3814c0, lpFindFileData=0x31e5e4 | out: lpFindFileData=0x31e5e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xac061300, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac061300, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xe86b3703, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x16c40, dwReserved0=0x0, dwReserved1=0x0, cFileName="bootmgr.exe.mui", cAlternateFileName="BOOTMG~1.MUI")) returned 1 [0029.557] FindNextFileW (in: hFindFile=0x3814c0, lpFindFileData=0x31e5e4 | out: lpFindFileData=0x31e5e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xac061300, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac061300, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xe86b3703, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x16c40, dwReserved0=0x0, dwReserved1=0x0, cFileName="bootmgr.exe.mui", cAlternateFileName="BOOTMG~1.MUI")) returned 0 [0029.558] FindClose (in: hFindFile=0x3814c0 | out: hFindFile=0x3814c0) returned 1 [0029.558] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e86c) returned 1 [0029.558] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e878) returned 1 [0029.558] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e8ac) returned 1 [0029.558] GetFullPathNameW (in: lpFileName="C:\\Boot\\hu-HU", nBufferLength=0x105, lpBuffer=0x31e3b4, lpFilePart=0x0 | out: lpBuffer="C:\\Boot\\hu-HU", lpFilePart=0x0) returned 0xd [0029.558] GetFullPathNameW (in: lpFileName="C:\\Boot\\hu-HU\\", nBufferLength=0x105, lpBuffer=0x31e388, lpFilePart=0x0 | out: lpBuffer="C:\\Boot\\hu-HU\\", lpFilePart=0x0) returned 0xe [0029.558] FindFirstFileW (in: lpFileName="C:\\Boot\\hu-HU\\*", lpFindFileData=0x31e5d4 | out: lpFindFileData=0x31e5d4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac061300, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac061300, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xac061300, ftLastWriteTime.dwHighDateTime=0x1d2de32, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3814c0 [0029.558] FindNextFileW (in: hFindFile=0x3814c0, lpFindFileData=0x31e5e4 | out: lpFindFileData=0x31e5e4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac061300, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac061300, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xac061300, ftLastWriteTime.dwHighDateTime=0x1d2de32, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0029.558] FindNextFileW (in: hFindFile=0x3814c0, lpFindFileData=0x31e5e4 | out: lpFindFileData=0x31e5e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xac061300, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac061300, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xe817e7d8, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x16240, dwReserved0=0x0, dwReserved1=0x0, cFileName="bootmgr.exe.mui", cAlternateFileName="BOOTMG~1.MUI")) returned 1 [0029.558] FindNextFileW (in: hFindFile=0x3814c0, lpFindFileData=0x31e5e4 | out: lpFindFileData=0x31e5e4*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0029.558] FindClose (in: hFindFile=0x3814c0 | out: hFindFile=0x3814c0) returned 1 [0029.558] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e86c) returned 1 [0029.558] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e878) returned 1 [0029.559] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e8ac) returned 1 [0029.559] GetFullPathNameW (in: lpFileName="C:\\Boot\\hu-HU", nBufferLength=0x105, lpBuffer=0x31e3b4, lpFilePart=0x0 | out: lpBuffer="C:\\Boot\\hu-HU", lpFilePart=0x0) returned 0xd [0029.559] GetFullPathNameW (in: lpFileName="C:\\Boot\\hu-HU\\", nBufferLength=0x105, lpBuffer=0x31e388, lpFilePart=0x0 | out: lpBuffer="C:\\Boot\\hu-HU\\", lpFilePart=0x0) returned 0xe [0029.559] FindFirstFileW (in: lpFileName="C:\\Boot\\hu-HU\\*", lpFindFileData=0x31e5d4 | out: lpFindFileData=0x31e5d4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac061300, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac061300, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xac061300, ftLastWriteTime.dwHighDateTime=0x1d2de32, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3814c0 [0029.559] FindNextFileW (in: hFindFile=0x3814c0, lpFindFileData=0x31e5e4 | out: lpFindFileData=0x31e5e4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac061300, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac061300, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xac061300, ftLastWriteTime.dwHighDateTime=0x1d2de32, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0029.559] FindNextFileW (in: hFindFile=0x3814c0, lpFindFileData=0x31e5e4 | out: lpFindFileData=0x31e5e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xac061300, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac061300, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xe817e7d8, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x16240, dwReserved0=0x0, dwReserved1=0x0, cFileName="bootmgr.exe.mui", cAlternateFileName="BOOTMG~1.MUI")) returned 1 [0029.559] FindNextFileW (in: hFindFile=0x3814c0, lpFindFileData=0x31e5e4 | out: lpFindFileData=0x31e5e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xac061300, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac061300, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xe817e7d8, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x16240, dwReserved0=0x0, dwReserved1=0x0, cFileName="bootmgr.exe.mui", cAlternateFileName="BOOTMG~1.MUI")) returned 0 [0029.559] FindClose (in: hFindFile=0x3814c0 | out: hFindFile=0x3814c0) returned 1 [0029.559] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e86c) returned 1 [0029.559] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e878) returned 1 [0029.559] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e8ac) returned 1 [0029.559] GetFullPathNameW (in: lpFileName="C:\\Boot\\it-IT", nBufferLength=0x105, lpBuffer=0x31e3b4, lpFilePart=0x0 | out: lpBuffer="C:\\Boot\\it-IT", lpFilePart=0x0) returned 0xd [0029.559] GetFullPathNameW (in: lpFileName="C:\\Boot\\it-IT\\", nBufferLength=0x105, lpBuffer=0x31e388, lpFilePart=0x0 | out: lpBuffer="C:\\Boot\\it-IT\\", lpFilePart=0x0) returned 0xe [0029.559] FindFirstFileW (in: lpFileName="C:\\Boot\\it-IT\\*", lpFindFileData=0x31e5d4 | out: lpFindFileData=0x31e5d4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac061300, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac061300, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xac061300, ftLastWriteTime.dwHighDateTime=0x1d2de32, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3814c0 [0029.561] FindNextFileW (in: hFindFile=0x3814c0, lpFindFileData=0x31e5e4 | out: lpFindFileData=0x31e5e4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac061300, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac061300, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xac061300, ftLastWriteTime.dwHighDateTime=0x1d2de32, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0029.561] FindNextFileW (in: hFindFile=0x3814c0, lpFindFileData=0x31e5e4 | out: lpFindFileData=0x31e5e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xac061300, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac061300, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xe9e80ea3, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x16250, dwReserved0=0x0, dwReserved1=0x0, cFileName="bootmgr.exe.mui", cAlternateFileName="BOOTMG~1.MUI")) returned 1 [0029.561] FindNextFileW (in: hFindFile=0x3814c0, lpFindFileData=0x31e5e4 | out: lpFindFileData=0x31e5e4*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0029.561] FindClose (in: hFindFile=0x3814c0 | out: hFindFile=0x3814c0) returned 1 [0029.561] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e86c) returned 1 [0029.561] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e878) returned 1 [0029.561] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e8ac) returned 1 [0029.561] GetFullPathNameW (in: lpFileName="C:\\Boot\\it-IT", nBufferLength=0x105, lpBuffer=0x31e3b4, lpFilePart=0x0 | out: lpBuffer="C:\\Boot\\it-IT", lpFilePart=0x0) returned 0xd [0029.561] GetFullPathNameW (in: lpFileName="C:\\Boot\\it-IT\\", nBufferLength=0x105, lpBuffer=0x31e388, lpFilePart=0x0 | out: lpBuffer="C:\\Boot\\it-IT\\", lpFilePart=0x0) returned 0xe [0029.561] FindFirstFileW (in: lpFileName="C:\\Boot\\it-IT\\*", lpFindFileData=0x31e5d4 | out: lpFindFileData=0x31e5d4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac061300, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac061300, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xac061300, ftLastWriteTime.dwHighDateTime=0x1d2de32, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3814c0 [0029.561] FindNextFileW (in: hFindFile=0x3814c0, lpFindFileData=0x31e5e4 | out: lpFindFileData=0x31e5e4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac061300, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac061300, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xac061300, ftLastWriteTime.dwHighDateTime=0x1d2de32, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0029.561] FindNextFileW (in: hFindFile=0x3814c0, lpFindFileData=0x31e5e4 | out: lpFindFileData=0x31e5e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xac061300, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac061300, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xe9e80ea3, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x16250, dwReserved0=0x0, dwReserved1=0x0, cFileName="bootmgr.exe.mui", cAlternateFileName="BOOTMG~1.MUI")) returned 1 [0029.562] FindNextFileW (in: hFindFile=0x3814c0, lpFindFileData=0x31e5e4 | out: lpFindFileData=0x31e5e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xac061300, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac061300, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xe9e80ea3, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x16250, dwReserved0=0x0, dwReserved1=0x0, cFileName="bootmgr.exe.mui", cAlternateFileName="BOOTMG~1.MUI")) returned 0 [0029.562] FindClose (in: hFindFile=0x3814c0 | out: hFindFile=0x3814c0) returned 1 [0029.562] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e86c) returned 1 [0029.562] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e878) returned 1 [0029.563] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e8ac) returned 1 [0029.563] GetFullPathNameW (in: lpFileName="C:\\Boot\\ja-JP", nBufferLength=0x105, lpBuffer=0x31e3b4, lpFilePart=0x0 | out: lpBuffer="C:\\Boot\\ja-JP", lpFilePart=0x0) returned 0xd [0029.563] GetFullPathNameW (in: lpFileName="C:\\Boot\\ja-JP\\", nBufferLength=0x105, lpBuffer=0x31e388, lpFilePart=0x0 | out: lpBuffer="C:\\Boot\\ja-JP\\", lpFilePart=0x0) returned 0xe [0029.563] FindFirstFileW (in: lpFileName="C:\\Boot\\ja-JP\\*", lpFindFileData=0x31e5d4 | out: lpFindFileData=0x31e5d4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac087460, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac087460, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xac087460, ftLastWriteTime.dwHighDateTime=0x1d2de32, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3814c0 [0029.563] FindNextFileW (in: hFindFile=0x3814c0, lpFindFileData=0x31e5e4 | out: lpFindFileData=0x31e5e4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac087460, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac087460, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xac087460, ftLastWriteTime.dwHighDateTime=0x1d2de32, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0029.563] FindNextFileW (in: hFindFile=0x3814c0, lpFindFileData=0x31e5e4 | out: lpFindFileData=0x31e5e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xac087460, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac087460, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xe8216d3c, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x12a40, dwReserved0=0x0, dwReserved1=0x0, cFileName="bootmgr.exe.mui", cAlternateFileName="BOOTMG~1.MUI")) returned 1 [0029.563] FindNextFileW (in: hFindFile=0x3814c0, lpFindFileData=0x31e5e4 | out: lpFindFileData=0x31e5e4*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0029.563] FindClose (in: hFindFile=0x3814c0 | out: hFindFile=0x3814c0) returned 1 [0029.563] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e86c) returned 1 [0029.563] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e878) returned 1 [0029.563] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e8ac) returned 1 [0029.563] GetFullPathNameW (in: lpFileName="C:\\Boot\\ja-JP", nBufferLength=0x105, lpBuffer=0x31e3b4, lpFilePart=0x0 | out: lpBuffer="C:\\Boot\\ja-JP", lpFilePart=0x0) returned 0xd [0029.563] GetFullPathNameW (in: lpFileName="C:\\Boot\\ja-JP\\", nBufferLength=0x105, lpBuffer=0x31e388, lpFilePart=0x0 | out: lpBuffer="C:\\Boot\\ja-JP\\", lpFilePart=0x0) returned 0xe [0029.564] FindFirstFileW (in: lpFileName="C:\\Boot\\ja-JP\\*", lpFindFileData=0x31e5d4 | out: lpFindFileData=0x31e5d4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac087460, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac087460, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xac087460, ftLastWriteTime.dwHighDateTime=0x1d2de32, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3814c0 [0029.564] FindNextFileW (in: hFindFile=0x3814c0, lpFindFileData=0x31e5e4 | out: lpFindFileData=0x31e5e4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac087460, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac087460, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xac087460, ftLastWriteTime.dwHighDateTime=0x1d2de32, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0029.564] FindNextFileW (in: hFindFile=0x3814c0, lpFindFileData=0x31e5e4 | out: lpFindFileData=0x31e5e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xac087460, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac087460, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xe8216d3c, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x12a40, dwReserved0=0x0, dwReserved1=0x0, cFileName="bootmgr.exe.mui", cAlternateFileName="BOOTMG~1.MUI")) returned 1 [0029.564] FindNextFileW (in: hFindFile=0x3814c0, lpFindFileData=0x31e5e4 | out: lpFindFileData=0x31e5e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xac087460, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac087460, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xe8216d3c, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x12a40, dwReserved0=0x0, dwReserved1=0x0, cFileName="bootmgr.exe.mui", cAlternateFileName="BOOTMG~1.MUI")) returned 0 [0029.564] FindClose (in: hFindFile=0x3814c0 | out: hFindFile=0x3814c0) returned 1 [0029.564] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e86c) returned 1 [0029.564] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e878) returned 1 [0029.564] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e8ac) returned 1 [0029.564] GetFullPathNameW (in: lpFileName="C:\\Boot\\ko-KR", nBufferLength=0x105, lpBuffer=0x31e3b4, lpFilePart=0x0 | out: lpBuffer="C:\\Boot\\ko-KR", lpFilePart=0x0) returned 0xd [0029.564] GetFullPathNameW (in: lpFileName="C:\\Boot\\ko-KR\\", nBufferLength=0x105, lpBuffer=0x31e388, lpFilePart=0x0 | out: lpBuffer="C:\\Boot\\ko-KR\\", lpFilePart=0x0) returned 0xe [0029.564] FindFirstFileW (in: lpFileName="C:\\Boot\\ko-KR\\*", lpFindFileData=0x31e5d4 | out: lpFindFileData=0x31e5d4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac087460, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac087460, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xac087460, ftLastWriteTime.dwHighDateTime=0x1d2de32, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3814c0 [0029.565] FindNextFileW (in: hFindFile=0x3814c0, lpFindFileData=0x31e5e4 | out: lpFindFileData=0x31e5e4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac087460, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac087460, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xac087460, ftLastWriteTime.dwHighDateTime=0x1d2de32, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0029.565] FindNextFileW (in: hFindFile=0x3814c0, lpFindFileData=0x31e5e4 | out: lpFindFileData=0x31e5e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xac087460, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac087460, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xe8510830, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x12650, dwReserved0=0x0, dwReserved1=0x0, cFileName="bootmgr.exe.mui", cAlternateFileName="BOOTMG~1.MUI")) returned 1 [0029.565] FindNextFileW (in: hFindFile=0x3814c0, lpFindFileData=0x31e5e4 | out: lpFindFileData=0x31e5e4*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0029.565] FindClose (in: hFindFile=0x3814c0 | out: hFindFile=0x3814c0) returned 1 [0029.565] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e86c) returned 1 [0029.566] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e878) returned 1 [0029.566] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e8ac) returned 1 [0029.566] GetFullPathNameW (in: lpFileName="C:\\Boot\\ko-KR", nBufferLength=0x105, lpBuffer=0x31e3b4, lpFilePart=0x0 | out: lpBuffer="C:\\Boot\\ko-KR", lpFilePart=0x0) returned 0xd [0029.566] GetFullPathNameW (in: lpFileName="C:\\Boot\\ko-KR\\", nBufferLength=0x105, lpBuffer=0x31e388, lpFilePart=0x0 | out: lpBuffer="C:\\Boot\\ko-KR\\", lpFilePart=0x0) returned 0xe [0029.566] FindFirstFileW (in: lpFileName="C:\\Boot\\ko-KR\\*", lpFindFileData=0x31e5d4 | out: lpFindFileData=0x31e5d4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac087460, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac087460, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xac087460, ftLastWriteTime.dwHighDateTime=0x1d2de32, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3814c0 [0029.566] FindNextFileW (in: hFindFile=0x3814c0, lpFindFileData=0x31e5e4 | out: lpFindFileData=0x31e5e4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac087460, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac087460, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xac087460, ftLastWriteTime.dwHighDateTime=0x1d2de32, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0029.566] FindNextFileW (in: hFindFile=0x3814c0, lpFindFileData=0x31e5e4 | out: lpFindFileData=0x31e5e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xac087460, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac087460, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xe8510830, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x12650, dwReserved0=0x0, dwReserved1=0x0, cFileName="bootmgr.exe.mui", cAlternateFileName="BOOTMG~1.MUI")) returned 1 [0029.566] FindNextFileW (in: hFindFile=0x3814c0, lpFindFileData=0x31e5e4 | out: lpFindFileData=0x31e5e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xac087460, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac087460, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xe8510830, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x12650, dwReserved0=0x0, dwReserved1=0x0, cFileName="bootmgr.exe.mui", cAlternateFileName="BOOTMG~1.MUI")) returned 0 [0029.566] FindClose (in: hFindFile=0x3814c0 | out: hFindFile=0x3814c0) returned 1 [0029.566] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e86c) returned 1 [0029.566] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e878) returned 1 [0029.566] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e8ac) returned 1 [0029.566] GetFullPathNameW (in: lpFileName="C:\\Boot\\nb-NO", nBufferLength=0x105, lpBuffer=0x31e3b4, lpFilePart=0x0 | out: lpBuffer="C:\\Boot\\nb-NO", lpFilePart=0x0) returned 0xd [0029.566] GetFullPathNameW (in: lpFileName="C:\\Boot\\nb-NO\\", nBufferLength=0x105, lpBuffer=0x31e388, lpFilePart=0x0 | out: lpBuffer="C:\\Boot\\nb-NO\\", lpFilePart=0x0) returned 0xe [0029.566] FindFirstFileW (in: lpFileName="C:\\Boot\\nb-NO\\*", lpFindFileData=0x31e5d4 | out: lpFindFileData=0x31e5d4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac087460, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac0ad5c0, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xac0ad5c0, ftLastWriteTime.dwHighDateTime=0x1d2de32, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3814c0 [0029.567] FindNextFileW (in: hFindFile=0x3814c0, lpFindFileData=0x31e5e4 | out: lpFindFileData=0x31e5e4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac087460, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac0ad5c0, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xac0ad5c0, ftLastWriteTime.dwHighDateTime=0x1d2de32, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0029.567] FindNextFileW (in: hFindFile=0x3814c0, lpFindFileData=0x31e5e4 | out: lpFindFileData=0x31e5e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xac0ad5c0, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac0ad5c0, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xea212efb, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x15850, dwReserved0=0x0, dwReserved1=0x0, cFileName="bootmgr.exe.mui", cAlternateFileName="BOOTMG~1.MUI")) returned 1 [0029.567] FindNextFileW (in: hFindFile=0x3814c0, lpFindFileData=0x31e5e4 | out: lpFindFileData=0x31e5e4*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0029.567] FindClose (in: hFindFile=0x3814c0 | out: hFindFile=0x3814c0) returned 1 [0029.567] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e86c) returned 1 [0029.567] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e878) returned 1 [0029.567] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e8ac) returned 1 [0029.567] GetFullPathNameW (in: lpFileName="C:\\Boot\\nb-NO", nBufferLength=0x105, lpBuffer=0x31e3b4, lpFilePart=0x0 | out: lpBuffer="C:\\Boot\\nb-NO", lpFilePart=0x0) returned 0xd [0029.567] GetFullPathNameW (in: lpFileName="C:\\Boot\\nb-NO\\", nBufferLength=0x105, lpBuffer=0x31e388, lpFilePart=0x0 | out: lpBuffer="C:\\Boot\\nb-NO\\", lpFilePart=0x0) returned 0xe [0029.567] FindFirstFileW (in: lpFileName="C:\\Boot\\nb-NO\\*", lpFindFileData=0x31e5d4 | out: lpFindFileData=0x31e5d4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac087460, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac0ad5c0, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xac0ad5c0, ftLastWriteTime.dwHighDateTime=0x1d2de32, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3814c0 [0029.568] FindNextFileW (in: hFindFile=0x3814c0, lpFindFileData=0x31e5e4 | out: lpFindFileData=0x31e5e4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac087460, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac0ad5c0, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xac0ad5c0, ftLastWriteTime.dwHighDateTime=0x1d2de32, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0029.568] FindNextFileW (in: hFindFile=0x3814c0, lpFindFileData=0x31e5e4 | out: lpFindFileData=0x31e5e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xac0ad5c0, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac0ad5c0, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xea212efb, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x15850, dwReserved0=0x0, dwReserved1=0x0, cFileName="bootmgr.exe.mui", cAlternateFileName="BOOTMG~1.MUI")) returned 1 [0029.568] FindNextFileW (in: hFindFile=0x3814c0, lpFindFileData=0x31e5e4 | out: lpFindFileData=0x31e5e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xac0ad5c0, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac0ad5c0, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xea212efb, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x15850, dwReserved0=0x0, dwReserved1=0x0, cFileName="bootmgr.exe.mui", cAlternateFileName="BOOTMG~1.MUI")) returned 0 [0029.568] FindClose (in: hFindFile=0x3814c0 | out: hFindFile=0x3814c0) returned 1 [0029.568] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e86c) returned 1 [0029.568] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e878) returned 1 [0029.568] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e8ac) returned 1 [0029.568] GetFullPathNameW (in: lpFileName="C:\\Boot\\nl-NL", nBufferLength=0x105, lpBuffer=0x31e3b4, lpFilePart=0x0 | out: lpBuffer="C:\\Boot\\nl-NL", lpFilePart=0x0) returned 0xd [0029.568] GetFullPathNameW (in: lpFileName="C:\\Boot\\nl-NL\\", nBufferLength=0x105, lpBuffer=0x31e388, lpFilePart=0x0 | out: lpBuffer="C:\\Boot\\nl-NL\\", lpFilePart=0x0) returned 0xe [0029.568] FindFirstFileW (in: lpFileName="C:\\Boot\\nl-NL\\*", lpFindFileData=0x31e5d4 | out: lpFindFileData=0x31e5d4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac0ad5c0, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac0ad5c0, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xac0ad5c0, ftLastWriteTime.dwHighDateTime=0x1d2de32, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3814c0 [0029.569] FindNextFileW (in: hFindFile=0x3814c0, lpFindFileData=0x31e5e4 | out: lpFindFileData=0x31e5e4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac0ad5c0, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac0ad5c0, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xac0ad5c0, ftLastWriteTime.dwHighDateTime=0x1d2de32, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0029.569] FindNextFileW (in: hFindFile=0x3814c0, lpFindFileData=0x31e5e4 | out: lpFindFileData=0x31e5e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xac0ad5c0, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac0ad5c0, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xe84c457e, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x16250, dwReserved0=0x0, dwReserved1=0x0, cFileName="bootmgr.exe.mui", cAlternateFileName="BOOTMG~1.MUI")) returned 1 [0029.569] FindNextFileW (in: hFindFile=0x3814c0, lpFindFileData=0x31e5e4 | out: lpFindFileData=0x31e5e4*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0029.569] FindClose (in: hFindFile=0x3814c0 | out: hFindFile=0x3814c0) returned 1 [0029.569] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e86c) returned 1 [0029.569] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e878) returned 1 [0029.569] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e8ac) returned 1 [0029.569] GetFullPathNameW (in: lpFileName="C:\\Boot\\nl-NL", nBufferLength=0x105, lpBuffer=0x31e3b4, lpFilePart=0x0 | out: lpBuffer="C:\\Boot\\nl-NL", lpFilePart=0x0) returned 0xd [0029.569] GetFullPathNameW (in: lpFileName="C:\\Boot\\nl-NL\\", nBufferLength=0x105, lpBuffer=0x31e388, lpFilePart=0x0 | out: lpBuffer="C:\\Boot\\nl-NL\\", lpFilePart=0x0) returned 0xe [0029.570] FindFirstFileW (in: lpFileName="C:\\Boot\\nl-NL\\*", lpFindFileData=0x31e5d4 | out: lpFindFileData=0x31e5d4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac0ad5c0, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac0ad5c0, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xac0ad5c0, ftLastWriteTime.dwHighDateTime=0x1d2de32, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3814c0 [0029.570] FindNextFileW (in: hFindFile=0x3814c0, lpFindFileData=0x31e5e4 | out: lpFindFileData=0x31e5e4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac0ad5c0, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac0ad5c0, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xac0ad5c0, ftLastWriteTime.dwHighDateTime=0x1d2de32, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0029.570] FindNextFileW (in: hFindFile=0x3814c0, lpFindFileData=0x31e5e4 | out: lpFindFileData=0x31e5e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xac0ad5c0, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac0ad5c0, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xe84c457e, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x16250, dwReserved0=0x0, dwReserved1=0x0, cFileName="bootmgr.exe.mui", cAlternateFileName="BOOTMG~1.MUI")) returned 1 [0029.570] FindNextFileW (in: hFindFile=0x3814c0, lpFindFileData=0x31e5e4 | out: lpFindFileData=0x31e5e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xac0ad5c0, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac0ad5c0, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xe84c457e, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x16250, dwReserved0=0x0, dwReserved1=0x0, cFileName="bootmgr.exe.mui", cAlternateFileName="BOOTMG~1.MUI")) returned 0 [0029.570] FindClose (in: hFindFile=0x3814c0 | out: hFindFile=0x3814c0) returned 1 [0029.570] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e86c) returned 1 [0029.570] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e878) returned 1 [0029.570] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e8ac) returned 1 [0029.570] GetFullPathNameW (in: lpFileName="C:\\Boot\\pl-PL", nBufferLength=0x105, lpBuffer=0x31e3b4, lpFilePart=0x0 | out: lpBuffer="C:\\Boot\\pl-PL", lpFilePart=0x0) returned 0xd [0029.570] GetFullPathNameW (in: lpFileName="C:\\Boot\\pl-PL\\", nBufferLength=0x105, lpBuffer=0x31e388, lpFilePart=0x0 | out: lpBuffer="C:\\Boot\\pl-PL\\", lpFilePart=0x0) returned 0xe [0029.570] FindFirstFileW (in: lpFileName="C:\\Boot\\pl-PL\\*", lpFindFileData=0x31e5d4 | out: lpFindFileData=0x31e5d4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac0ad5c0, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac0ad5c0, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xac0ad5c0, ftLastWriteTime.dwHighDateTime=0x1d2de32, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3814c0 [0029.571] FindNextFileW (in: hFindFile=0x3814c0, lpFindFileData=0x31e5e4 | out: lpFindFileData=0x31e5e4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac0ad5c0, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac0ad5c0, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xac0ad5c0, ftLastWriteTime.dwHighDateTime=0x1d2de32, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0029.571] FindNextFileW (in: hFindFile=0x3814c0, lpFindFileData=0x31e5e4 | out: lpFindFileData=0x31e5e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xac0ad5c0, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac0ad5c0, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xe9e5ad4a, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x16250, dwReserved0=0x0, dwReserved1=0x0, cFileName="bootmgr.exe.mui", cAlternateFileName="BOOTMG~1.MUI")) returned 1 [0029.571] FindNextFileW (in: hFindFile=0x3814c0, lpFindFileData=0x31e5e4 | out: lpFindFileData=0x31e5e4*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0029.571] FindClose (in: hFindFile=0x3814c0 | out: hFindFile=0x3814c0) returned 1 [0029.571] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e86c) returned 1 [0029.571] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e878) returned 1 [0029.571] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e8ac) returned 1 [0029.571] GetFullPathNameW (in: lpFileName="C:\\Boot\\pl-PL", nBufferLength=0x105, lpBuffer=0x31e3b4, lpFilePart=0x0 | out: lpBuffer="C:\\Boot\\pl-PL", lpFilePart=0x0) returned 0xd [0029.571] GetFullPathNameW (in: lpFileName="C:\\Boot\\pl-PL\\", nBufferLength=0x105, lpBuffer=0x31e388, lpFilePart=0x0 | out: lpBuffer="C:\\Boot\\pl-PL\\", lpFilePart=0x0) returned 0xe [0029.571] FindFirstFileW (in: lpFileName="C:\\Boot\\pl-PL\\*", lpFindFileData=0x31e5d4 | out: lpFindFileData=0x31e5d4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac0ad5c0, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac0ad5c0, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xac0ad5c0, ftLastWriteTime.dwHighDateTime=0x1d2de32, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3814c0 [0029.571] FindNextFileW (in: hFindFile=0x3814c0, lpFindFileData=0x31e5e4 | out: lpFindFileData=0x31e5e4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac0ad5c0, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac0ad5c0, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xac0ad5c0, ftLastWriteTime.dwHighDateTime=0x1d2de32, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0029.571] FindNextFileW (in: hFindFile=0x3814c0, lpFindFileData=0x31e5e4 | out: lpFindFileData=0x31e5e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xac0ad5c0, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac0ad5c0, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xe9e5ad4a, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x16250, dwReserved0=0x0, dwReserved1=0x0, cFileName="bootmgr.exe.mui", cAlternateFileName="BOOTMG~1.MUI")) returned 1 [0029.571] FindNextFileW (in: hFindFile=0x3814c0, lpFindFileData=0x31e5e4 | out: lpFindFileData=0x31e5e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xac0ad5c0, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac0ad5c0, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xe9e5ad4a, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x16250, dwReserved0=0x0, dwReserved1=0x0, cFileName="bootmgr.exe.mui", cAlternateFileName="BOOTMG~1.MUI")) returned 0 [0029.572] FindClose (in: hFindFile=0x3814c0 | out: hFindFile=0x3814c0) returned 1 [0029.572] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e86c) returned 1 [0029.572] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e878) returned 1 [0029.572] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e8ac) returned 1 [0029.572] GetFullPathNameW (in: lpFileName="C:\\Boot\\pt-BR", nBufferLength=0x105, lpBuffer=0x31e3b4, lpFilePart=0x0 | out: lpBuffer="C:\\Boot\\pt-BR", lpFilePart=0x0) returned 0xd [0029.572] GetFullPathNameW (in: lpFileName="C:\\Boot\\pt-BR\\", nBufferLength=0x105, lpBuffer=0x31e388, lpFilePart=0x0 | out: lpBuffer="C:\\Boot\\pt-BR\\", lpFilePart=0x0) returned 0xe [0029.572] FindFirstFileW (in: lpFileName="C:\\Boot\\pt-BR\\*", lpFindFileData=0x31e5d4 | out: lpFindFileData=0x31e5d4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac0ad5c0, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac0ad5c0, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xac0ad5c0, ftLastWriteTime.dwHighDateTime=0x1d2de32, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3814c0 [0029.576] FindNextFileW (in: hFindFile=0x3814c0, lpFindFileData=0x31e5e4 | out: lpFindFileData=0x31e5e4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac0ad5c0, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac0ad5c0, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xac0ad5c0, ftLastWriteTime.dwHighDateTime=0x1d2de32, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0029.576] FindNextFileW (in: hFindFile=0x3814c0, lpFindFileData=0x31e5e4 | out: lpFindFileData=0x31e5e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xac0ad5c0, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac0ad5c0, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xe83b9c0f, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x16040, dwReserved0=0x0, dwReserved1=0x0, cFileName="bootmgr.exe.mui", cAlternateFileName="BOOTMG~1.MUI")) returned 1 [0029.576] FindNextFileW (in: hFindFile=0x3814c0, lpFindFileData=0x31e5e4 | out: lpFindFileData=0x31e5e4*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0029.576] FindClose (in: hFindFile=0x3814c0 | out: hFindFile=0x3814c0) returned 1 [0029.576] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e86c) returned 1 [0029.576] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e878) returned 1 [0029.576] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e8ac) returned 1 [0029.576] GetFullPathNameW (in: lpFileName="C:\\Boot\\pt-BR", nBufferLength=0x105, lpBuffer=0x31e3b4, lpFilePart=0x0 | out: lpBuffer="C:\\Boot\\pt-BR", lpFilePart=0x0) returned 0xd [0029.576] GetFullPathNameW (in: lpFileName="C:\\Boot\\pt-BR\\", nBufferLength=0x105, lpBuffer=0x31e388, lpFilePart=0x0 | out: lpBuffer="C:\\Boot\\pt-BR\\", lpFilePart=0x0) returned 0xe [0029.576] FindFirstFileW (in: lpFileName="C:\\Boot\\pt-BR\\*", lpFindFileData=0x31e5d4 | out: lpFindFileData=0x31e5d4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac0ad5c0, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac0ad5c0, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xac0ad5c0, ftLastWriteTime.dwHighDateTime=0x1d2de32, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3814c0 [0029.576] FindNextFileW (in: hFindFile=0x3814c0, lpFindFileData=0x31e5e4 | out: lpFindFileData=0x31e5e4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac0ad5c0, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac0ad5c0, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xac0ad5c0, ftLastWriteTime.dwHighDateTime=0x1d2de32, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0029.576] FindNextFileW (in: hFindFile=0x3814c0, lpFindFileData=0x31e5e4 | out: lpFindFileData=0x31e5e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xac0ad5c0, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac0ad5c0, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xe83b9c0f, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x16040, dwReserved0=0x0, dwReserved1=0x0, cFileName="bootmgr.exe.mui", cAlternateFileName="BOOTMG~1.MUI")) returned 1 [0029.576] FindNextFileW (in: hFindFile=0x3814c0, lpFindFileData=0x31e5e4 | out: lpFindFileData=0x31e5e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xac0ad5c0, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac0ad5c0, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xe83b9c0f, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x16040, dwReserved0=0x0, dwReserved1=0x0, cFileName="bootmgr.exe.mui", cAlternateFileName="BOOTMG~1.MUI")) returned 0 [0029.577] FindClose (in: hFindFile=0x3814c0 | out: hFindFile=0x3814c0) returned 1 [0029.577] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e86c) returned 1 [0029.577] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e878) returned 1 [0029.577] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e8ac) returned 1 [0029.577] GetFullPathNameW (in: lpFileName="C:\\Boot\\pt-PT", nBufferLength=0x105, lpBuffer=0x31e3b4, lpFilePart=0x0 | out: lpBuffer="C:\\Boot\\pt-PT", lpFilePart=0x0) returned 0xd [0029.577] GetFullPathNameW (in: lpFileName="C:\\Boot\\pt-PT\\", nBufferLength=0x105, lpBuffer=0x31e388, lpFilePart=0x0 | out: lpBuffer="C:\\Boot\\pt-PT\\", lpFilePart=0x0) returned 0xe [0029.577] FindFirstFileW (in: lpFileName="C:\\Boot\\pt-PT\\*", lpFindFileData=0x31e5d4 | out: lpFindFileData=0x31e5d4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac0d3720, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac0d3720, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xac0d3720, ftLastWriteTime.dwHighDateTime=0x1d2de32, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3814c0 [0029.577] FindNextFileW (in: hFindFile=0x3814c0, lpFindFileData=0x31e5e4 | out: lpFindFileData=0x31e5e4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac0d3720, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac0d3720, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xac0d3720, ftLastWriteTime.dwHighDateTime=0x1d2de32, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0029.577] FindNextFileW (in: hFindFile=0x3814c0, lpFindFileData=0x31e5e4 | out: lpFindFileData=0x31e5e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xac0d3720, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac0d3720, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xe823ce95, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x15e40, dwReserved0=0x0, dwReserved1=0x0, cFileName="bootmgr.exe.mui", cAlternateFileName="BOOTMG~1.MUI")) returned 1 [0029.577] FindNextFileW (in: hFindFile=0x3814c0, lpFindFileData=0x31e5e4 | out: lpFindFileData=0x31e5e4*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0029.577] FindClose (in: hFindFile=0x3814c0 | out: hFindFile=0x3814c0) returned 1 [0029.577] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e86c) returned 1 [0029.577] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e878) returned 1 [0029.578] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e8ac) returned 1 [0029.578] GetFullPathNameW (in: lpFileName="C:\\Boot\\pt-PT", nBufferLength=0x105, lpBuffer=0x31e3b4, lpFilePart=0x0 | out: lpBuffer="C:\\Boot\\pt-PT", lpFilePart=0x0) returned 0xd [0029.578] GetFullPathNameW (in: lpFileName="C:\\Boot\\pt-PT\\", nBufferLength=0x105, lpBuffer=0x31e388, lpFilePart=0x0 | out: lpBuffer="C:\\Boot\\pt-PT\\", lpFilePart=0x0) returned 0xe [0029.578] FindFirstFileW (in: lpFileName="C:\\Boot\\pt-PT\\*", lpFindFileData=0x31e5d4 | out: lpFindFileData=0x31e5d4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac0d3720, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac0d3720, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xac0d3720, ftLastWriteTime.dwHighDateTime=0x1d2de32, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3814c0 [0029.578] FindNextFileW (in: hFindFile=0x3814c0, lpFindFileData=0x31e5e4 | out: lpFindFileData=0x31e5e4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac0d3720, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac0d3720, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xac0d3720, ftLastWriteTime.dwHighDateTime=0x1d2de32, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0029.578] FindNextFileW (in: hFindFile=0x3814c0, lpFindFileData=0x31e5e4 | out: lpFindFileData=0x31e5e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xac0d3720, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac0d3720, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xe823ce95, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x15e40, dwReserved0=0x0, dwReserved1=0x0, cFileName="bootmgr.exe.mui", cAlternateFileName="BOOTMG~1.MUI")) returned 1 [0029.578] FindNextFileW (in: hFindFile=0x3814c0, lpFindFileData=0x31e5e4 | out: lpFindFileData=0x31e5e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xac0d3720, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac0d3720, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xe823ce95, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x15e40, dwReserved0=0x0, dwReserved1=0x0, cFileName="bootmgr.exe.mui", cAlternateFileName="BOOTMG~1.MUI")) returned 0 [0029.578] FindClose (in: hFindFile=0x3814c0 | out: hFindFile=0x3814c0) returned 1 [0029.578] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e86c) returned 1 [0029.578] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e878) returned 1 [0029.578] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e8ac) returned 1 [0029.578] GetFullPathNameW (in: lpFileName="C:\\Boot\\ru-RU", nBufferLength=0x105, lpBuffer=0x31e3b4, lpFilePart=0x0 | out: lpBuffer="C:\\Boot\\ru-RU", lpFilePart=0x0) returned 0xd [0029.578] GetFullPathNameW (in: lpFileName="C:\\Boot\\ru-RU\\", nBufferLength=0x105, lpBuffer=0x31e388, lpFilePart=0x0 | out: lpBuffer="C:\\Boot\\ru-RU\\", lpFilePart=0x0) returned 0xe [0029.579] FindFirstFileW (in: lpFileName="C:\\Boot\\ru-RU\\*", lpFindFileData=0x31e5d4 | out: lpFindFileData=0x31e5d4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac0d3720, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac0d3720, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xac0d3720, ftLastWriteTime.dwHighDateTime=0x1d2de32, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3814c0 [0029.579] FindNextFileW (in: hFindFile=0x3814c0, lpFindFileData=0x31e5e4 | out: lpFindFileData=0x31e5e4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac0d3720, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac0d3720, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xac0d3720, ftLastWriteTime.dwHighDateTime=0x1d2de32, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0029.579] FindNextFileW (in: hFindFile=0x3814c0, lpFindFileData=0x31e5e4 | out: lpFindFileData=0x31e5e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xac0d3720, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac0d3720, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xe88a2888, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x16050, dwReserved0=0x0, dwReserved1=0x0, cFileName="bootmgr.exe.mui", cAlternateFileName="BOOTMG~1.MUI")) returned 1 [0029.579] FindNextFileW (in: hFindFile=0x3814c0, lpFindFileData=0x31e5e4 | out: lpFindFileData=0x31e5e4*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0029.580] FindClose (in: hFindFile=0x3814c0 | out: hFindFile=0x3814c0) returned 1 [0029.580] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e86c) returned 1 [0029.580] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e878) returned 1 [0029.580] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e8ac) returned 1 [0029.580] GetFullPathNameW (in: lpFileName="C:\\Boot\\ru-RU", nBufferLength=0x105, lpBuffer=0x31e3b4, lpFilePart=0x0 | out: lpBuffer="C:\\Boot\\ru-RU", lpFilePart=0x0) returned 0xd [0029.580] GetFullPathNameW (in: lpFileName="C:\\Boot\\ru-RU\\", nBufferLength=0x105, lpBuffer=0x31e388, lpFilePart=0x0 | out: lpBuffer="C:\\Boot\\ru-RU\\", lpFilePart=0x0) returned 0xe [0029.580] FindFirstFileW (in: lpFileName="C:\\Boot\\ru-RU\\*", lpFindFileData=0x31e5d4 | out: lpFindFileData=0x31e5d4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac0d3720, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac0d3720, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xac0d3720, ftLastWriteTime.dwHighDateTime=0x1d2de32, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3814c0 [0029.580] FindNextFileW (in: hFindFile=0x3814c0, lpFindFileData=0x31e5e4 | out: lpFindFileData=0x31e5e4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac0d3720, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac0d3720, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xac0d3720, ftLastWriteTime.dwHighDateTime=0x1d2de32, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0029.580] FindNextFileW (in: hFindFile=0x3814c0, lpFindFileData=0x31e5e4 | out: lpFindFileData=0x31e5e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xac0d3720, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac0d3720, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xe88a2888, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x16050, dwReserved0=0x0, dwReserved1=0x0, cFileName="bootmgr.exe.mui", cAlternateFileName="BOOTMG~1.MUI")) returned 1 [0029.580] FindNextFileW (in: hFindFile=0x3814c0, lpFindFileData=0x31e5e4 | out: lpFindFileData=0x31e5e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xac0d3720, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac0d3720, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xe88a2888, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x16050, dwReserved0=0x0, dwReserved1=0x0, cFileName="bootmgr.exe.mui", cAlternateFileName="BOOTMG~1.MUI")) returned 0 [0029.580] FindClose (in: hFindFile=0x3814c0 | out: hFindFile=0x3814c0) returned 1 [0029.580] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e86c) returned 1 [0029.580] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e878) returned 1 [0029.580] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e8ac) returned 1 [0029.580] GetFullPathNameW (in: lpFileName="C:\\Boot\\sv-SE", nBufferLength=0x105, lpBuffer=0x31e3b4, lpFilePart=0x0 | out: lpBuffer="C:\\Boot\\sv-SE", lpFilePart=0x0) returned 0xd [0029.580] GetFullPathNameW (in: lpFileName="C:\\Boot\\sv-SE\\", nBufferLength=0x105, lpBuffer=0x31e388, lpFilePart=0x0 | out: lpBuffer="C:\\Boot\\sv-SE\\", lpFilePart=0x0) returned 0xe [0029.580] FindFirstFileW (in: lpFileName="C:\\Boot\\sv-SE\\*", lpFindFileData=0x31e5d4 | out: lpFindFileData=0x31e5d4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac0d3720, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac0d3720, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xac0d3720, ftLastWriteTime.dwHighDateTime=0x1d2de32, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3814c0 [0029.581] FindNextFileW (in: hFindFile=0x3814c0, lpFindFileData=0x31e5e4 | out: lpFindFileData=0x31e5e4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac0d3720, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac0d3720, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xac0d3720, ftLastWriteTime.dwHighDateTime=0x1d2de32, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0029.581] FindNextFileW (in: hFindFile=0x3814c0, lpFindFileData=0x31e5e4 | out: lpFindFileData=0x31e5e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xac0d3720, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac0d3720, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xe868d5aa, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x15640, dwReserved0=0x0, dwReserved1=0x0, cFileName="bootmgr.exe.mui", cAlternateFileName="BOOTMG~1.MUI")) returned 1 [0029.581] FindNextFileW (in: hFindFile=0x3814c0, lpFindFileData=0x31e5e4 | out: lpFindFileData=0x31e5e4*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0029.581] FindClose (in: hFindFile=0x3814c0 | out: hFindFile=0x3814c0) returned 1 [0029.581] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e86c) returned 1 [0029.581] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e878) returned 1 [0029.581] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e8ac) returned 1 [0029.581] GetFullPathNameW (in: lpFileName="C:\\Boot\\sv-SE", nBufferLength=0x105, lpBuffer=0x31e3b4, lpFilePart=0x0 | out: lpBuffer="C:\\Boot\\sv-SE", lpFilePart=0x0) returned 0xd [0029.581] GetFullPathNameW (in: lpFileName="C:\\Boot\\sv-SE\\", nBufferLength=0x105, lpBuffer=0x31e388, lpFilePart=0x0 | out: lpBuffer="C:\\Boot\\sv-SE\\", lpFilePart=0x0) returned 0xe [0029.581] FindFirstFileW (in: lpFileName="C:\\Boot\\sv-SE\\*", lpFindFileData=0x31e5d4 | out: lpFindFileData=0x31e5d4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac0d3720, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac0d3720, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xac0d3720, ftLastWriteTime.dwHighDateTime=0x1d2de32, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3814c0 [0029.581] FindNextFileW (in: hFindFile=0x3814c0, lpFindFileData=0x31e5e4 | out: lpFindFileData=0x31e5e4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac0d3720, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac0d3720, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xac0d3720, ftLastWriteTime.dwHighDateTime=0x1d2de32, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0029.581] FindNextFileW (in: hFindFile=0x3814c0, lpFindFileData=0x31e5e4 | out: lpFindFileData=0x31e5e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xac0d3720, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac0d3720, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xe868d5aa, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x15640, dwReserved0=0x0, dwReserved1=0x0, cFileName="bootmgr.exe.mui", cAlternateFileName="BOOTMG~1.MUI")) returned 1 [0029.581] FindNextFileW (in: hFindFile=0x3814c0, lpFindFileData=0x31e5e4 | out: lpFindFileData=0x31e5e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xac0d3720, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac0d3720, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xe868d5aa, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x15640, dwReserved0=0x0, dwReserved1=0x0, cFileName="bootmgr.exe.mui", cAlternateFileName="BOOTMG~1.MUI")) returned 0 [0029.581] FindClose (in: hFindFile=0x3814c0 | out: hFindFile=0x3814c0) returned 1 [0029.581] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e86c) returned 1 [0029.581] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e878) returned 1 [0029.581] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e8ac) returned 1 [0029.581] GetFullPathNameW (in: lpFileName="C:\\Boot\\tr-TR", nBufferLength=0x105, lpBuffer=0x31e3b4, lpFilePart=0x0 | out: lpBuffer="C:\\Boot\\tr-TR", lpFilePart=0x0) returned 0xd [0029.582] GetFullPathNameW (in: lpFileName="C:\\Boot\\tr-TR\\", nBufferLength=0x105, lpBuffer=0x31e388, lpFilePart=0x0 | out: lpBuffer="C:\\Boot\\tr-TR\\", lpFilePart=0x0) returned 0xe [0029.582] FindFirstFileW (in: lpFileName="C:\\Boot\\tr-TR\\*", lpFindFileData=0x31e5d4 | out: lpFindFileData=0x31e5d4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac0d3720, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac0d3720, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xac0d3720, ftLastWriteTime.dwHighDateTime=0x1d2de32, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3814c0 [0029.582] FindNextFileW (in: hFindFile=0x3814c0, lpFindFileData=0x31e5e4 | out: lpFindFileData=0x31e5e4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac0d3720, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac0d3720, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xac0d3720, ftLastWriteTime.dwHighDateTime=0x1d2de32, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0029.582] FindNextFileW (in: hFindFile=0x3814c0, lpFindFileData=0x31e5e4 | out: lpFindFileData=0x31e5e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xac0d3720, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac0d3720, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xe8393ab6, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x15440, dwReserved0=0x0, dwReserved1=0x0, cFileName="bootmgr.exe.mui", cAlternateFileName="BOOTMG~1.MUI")) returned 1 [0029.582] FindNextFileW (in: hFindFile=0x3814c0, lpFindFileData=0x31e5e4 | out: lpFindFileData=0x31e5e4*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0029.583] FindClose (in: hFindFile=0x3814c0 | out: hFindFile=0x3814c0) returned 1 [0029.583] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e86c) returned 1 [0029.583] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e878) returned 1 [0029.583] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e8ac) returned 1 [0029.583] GetFullPathNameW (in: lpFileName="C:\\Boot\\tr-TR", nBufferLength=0x105, lpBuffer=0x31e3b4, lpFilePart=0x0 | out: lpBuffer="C:\\Boot\\tr-TR", lpFilePart=0x0) returned 0xd [0029.583] GetFullPathNameW (in: lpFileName="C:\\Boot\\tr-TR\\", nBufferLength=0x105, lpBuffer=0x31e388, lpFilePart=0x0 | out: lpBuffer="C:\\Boot\\tr-TR\\", lpFilePart=0x0) returned 0xe [0029.583] FindFirstFileW (in: lpFileName="C:\\Boot\\tr-TR\\*", lpFindFileData=0x31e5d4 | out: lpFindFileData=0x31e5d4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac0d3720, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac0d3720, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xac0d3720, ftLastWriteTime.dwHighDateTime=0x1d2de32, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3814c0 [0029.583] FindNextFileW (in: hFindFile=0x3814c0, lpFindFileData=0x31e5e4 | out: lpFindFileData=0x31e5e4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac0d3720, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac0d3720, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xac0d3720, ftLastWriteTime.dwHighDateTime=0x1d2de32, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0029.583] FindNextFileW (in: hFindFile=0x3814c0, lpFindFileData=0x31e5e4 | out: lpFindFileData=0x31e5e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xac0d3720, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac0d3720, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xe8393ab6, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x15440, dwReserved0=0x0, dwReserved1=0x0, cFileName="bootmgr.exe.mui", cAlternateFileName="BOOTMG~1.MUI")) returned 1 [0029.583] FindNextFileW (in: hFindFile=0x3814c0, lpFindFileData=0x31e5e4 | out: lpFindFileData=0x31e5e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xac0d3720, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac0d3720, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xe8393ab6, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x15440, dwReserved0=0x0, dwReserved1=0x0, cFileName="bootmgr.exe.mui", cAlternateFileName="BOOTMG~1.MUI")) returned 0 [0029.583] FindClose (in: hFindFile=0x3814c0 | out: hFindFile=0x3814c0) returned 1 [0029.583] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e86c) returned 1 [0029.583] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e878) returned 1 [0029.583] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e8ac) returned 1 [0029.583] GetFullPathNameW (in: lpFileName="C:\\Boot\\zh-CN", nBufferLength=0x105, lpBuffer=0x31e3b4, lpFilePart=0x0 | out: lpBuffer="C:\\Boot\\zh-CN", lpFilePart=0x0) returned 0xd [0029.583] GetFullPathNameW (in: lpFileName="C:\\Boot\\zh-CN\\", nBufferLength=0x105, lpBuffer=0x31e388, lpFilePart=0x0 | out: lpBuffer="C:\\Boot\\zh-CN\\", lpFilePart=0x0) returned 0xe [0029.583] FindFirstFileW (in: lpFileName="C:\\Boot\\zh-CN\\*", lpFindFileData=0x31e5d4 | out: lpFindFileData=0x31e5d4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac0d3720, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac0d3720, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xac0d3720, ftLastWriteTime.dwHighDateTime=0x1d2de32, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3814c0 [0029.584] FindNextFileW (in: hFindFile=0x3814c0, lpFindFileData=0x31e5e4 | out: lpFindFileData=0x31e5e4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac0d3720, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac0d3720, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xac0d3720, ftLastWriteTime.dwHighDateTime=0x1d2de32, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0029.584] FindNextFileW (in: hFindFile=0x3814c0, lpFindFileData=0x31e5e4 | out: lpFindFileData=0x31e5e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xac0d3720, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac0d3720, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xe8725b0e, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x11440, dwReserved0=0x0, dwReserved1=0x0, cFileName="bootmgr.exe.mui", cAlternateFileName="BOOTMG~1.MUI")) returned 1 [0029.584] FindNextFileW (in: hFindFile=0x3814c0, lpFindFileData=0x31e5e4 | out: lpFindFileData=0x31e5e4*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0029.584] FindClose (in: hFindFile=0x3814c0 | out: hFindFile=0x3814c0) returned 1 [0029.584] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e86c) returned 1 [0029.584] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e878) returned 1 [0029.584] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e8ac) returned 1 [0029.584] GetFullPathNameW (in: lpFileName="C:\\Boot\\zh-CN", nBufferLength=0x105, lpBuffer=0x31e3b4, lpFilePart=0x0 | out: lpBuffer="C:\\Boot\\zh-CN", lpFilePart=0x0) returned 0xd [0029.584] GetFullPathNameW (in: lpFileName="C:\\Boot\\zh-CN\\", nBufferLength=0x105, lpBuffer=0x31e388, lpFilePart=0x0 | out: lpBuffer="C:\\Boot\\zh-CN\\", lpFilePart=0x0) returned 0xe [0029.584] FindFirstFileW (in: lpFileName="C:\\Boot\\zh-CN\\*", lpFindFileData=0x31e5d4 | out: lpFindFileData=0x31e5d4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac0d3720, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac0d3720, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xac0d3720, ftLastWriteTime.dwHighDateTime=0x1d2de32, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3814c0 [0029.584] FindNextFileW (in: hFindFile=0x3814c0, lpFindFileData=0x31e5e4 | out: lpFindFileData=0x31e5e4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac0d3720, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac0d3720, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xac0d3720, ftLastWriteTime.dwHighDateTime=0x1d2de32, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0029.584] FindNextFileW (in: hFindFile=0x3814c0, lpFindFileData=0x31e5e4 | out: lpFindFileData=0x31e5e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xac0d3720, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac0d3720, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xe8725b0e, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x11440, dwReserved0=0x0, dwReserved1=0x0, cFileName="bootmgr.exe.mui", cAlternateFileName="BOOTMG~1.MUI")) returned 1 [0029.584] FindNextFileW (in: hFindFile=0x3814c0, lpFindFileData=0x31e5e4 | out: lpFindFileData=0x31e5e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xac0d3720, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac0d3720, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xe8725b0e, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x11440, dwReserved0=0x0, dwReserved1=0x0, cFileName="bootmgr.exe.mui", cAlternateFileName="BOOTMG~1.MUI")) returned 0 [0029.584] FindClose (in: hFindFile=0x3814c0 | out: hFindFile=0x3814c0) returned 1 [0029.585] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e86c) returned 1 [0029.585] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e878) returned 1 [0029.585] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e8ac) returned 1 [0029.585] GetFullPathNameW (in: lpFileName="C:\\Boot\\zh-HK", nBufferLength=0x105, lpBuffer=0x31e3b4, lpFilePart=0x0 | out: lpBuffer="C:\\Boot\\zh-HK", lpFilePart=0x0) returned 0xd [0029.585] GetFullPathNameW (in: lpFileName="C:\\Boot\\zh-HK\\", nBufferLength=0x105, lpBuffer=0x31e388, lpFilePart=0x0 | out: lpBuffer="C:\\Boot\\zh-HK\\", lpFilePart=0x0) returned 0xe [0029.585] FindFirstFileW (in: lpFileName="C:\\Boot\\zh-HK\\*", lpFindFileData=0x31e5d4 | out: lpFindFileData=0x31e5d4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac0f9880, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac0f9880, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xac0f9880, ftLastWriteTime.dwHighDateTime=0x1d2de32, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3814c0 [0029.585] FindNextFileW (in: hFindFile=0x3814c0, lpFindFileData=0x31e5e4 | out: lpFindFileData=0x31e5e4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac0f9880, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac0f9880, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xac0f9880, ftLastWriteTime.dwHighDateTime=0x1d2de32, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0029.586] FindNextFileW (in: hFindFile=0x3814c0, lpFindFileData=0x31e5e4 | out: lpFindFileData=0x31e5e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xac0f9880, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac0f9880, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xe88a2888, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x11250, dwReserved0=0x0, dwReserved1=0x0, cFileName="bootmgr.exe.mui", cAlternateFileName="BOOTMG~1.MUI")) returned 1 [0029.586] FindNextFileW (in: hFindFile=0x3814c0, lpFindFileData=0x31e5e4 | out: lpFindFileData=0x31e5e4*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0029.586] FindClose (in: hFindFile=0x3814c0 | out: hFindFile=0x3814c0) returned 1 [0029.586] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e86c) returned 1 [0029.586] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e878) returned 1 [0029.586] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e8ac) returned 1 [0029.586] GetFullPathNameW (in: lpFileName="C:\\Boot\\zh-HK", nBufferLength=0x105, lpBuffer=0x31e3b4, lpFilePart=0x0 | out: lpBuffer="C:\\Boot\\zh-HK", lpFilePart=0x0) returned 0xd [0029.586] GetFullPathNameW (in: lpFileName="C:\\Boot\\zh-HK\\", nBufferLength=0x105, lpBuffer=0x31e388, lpFilePart=0x0 | out: lpBuffer="C:\\Boot\\zh-HK\\", lpFilePart=0x0) returned 0xe [0029.586] FindFirstFileW (in: lpFileName="C:\\Boot\\zh-HK\\*", lpFindFileData=0x31e5d4 | out: lpFindFileData=0x31e5d4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac0f9880, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac0f9880, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xac0f9880, ftLastWriteTime.dwHighDateTime=0x1d2de32, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3814c0 [0029.586] FindNextFileW (in: hFindFile=0x3814c0, lpFindFileData=0x31e5e4 | out: lpFindFileData=0x31e5e4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac0f9880, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac0f9880, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xac0f9880, ftLastWriteTime.dwHighDateTime=0x1d2de32, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0029.586] FindNextFileW (in: hFindFile=0x3814c0, lpFindFileData=0x31e5e4 | out: lpFindFileData=0x31e5e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xac0f9880, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac0f9880, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xe88a2888, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x11250, dwReserved0=0x0, dwReserved1=0x0, cFileName="bootmgr.exe.mui", cAlternateFileName="BOOTMG~1.MUI")) returned 1 [0029.586] FindNextFileW (in: hFindFile=0x3814c0, lpFindFileData=0x31e5e4 | out: lpFindFileData=0x31e5e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xac0f9880, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac0f9880, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xe88a2888, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x11250, dwReserved0=0x0, dwReserved1=0x0, cFileName="bootmgr.exe.mui", cAlternateFileName="BOOTMG~1.MUI")) returned 0 [0029.586] FindClose (in: hFindFile=0x3814c0 | out: hFindFile=0x3814c0) returned 1 [0029.586] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e86c) returned 1 [0029.586] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e878) returned 1 [0029.586] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e8ac) returned 1 [0029.586] GetFullPathNameW (in: lpFileName="C:\\Boot\\zh-TW", nBufferLength=0x105, lpBuffer=0x31e3b4, lpFilePart=0x0 | out: lpBuffer="C:\\Boot\\zh-TW", lpFilePart=0x0) returned 0xd [0029.586] GetFullPathNameW (in: lpFileName="C:\\Boot\\zh-TW\\", nBufferLength=0x105, lpBuffer=0x31e388, lpFilePart=0x0 | out: lpBuffer="C:\\Boot\\zh-TW\\", lpFilePart=0x0) returned 0xe [0029.586] FindFirstFileW (in: lpFileName="C:\\Boot\\zh-TW\\*", lpFindFileData=0x31e5d4 | out: lpFindFileData=0x31e5d4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac0f9880, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac0f9880, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xac0f9880, ftLastWriteTime.dwHighDateTime=0x1d2de32, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3814c0 [0029.595] FindNextFileW (in: hFindFile=0x3814c0, lpFindFileData=0x31e5e4 | out: lpFindFileData=0x31e5e4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac0f9880, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac0f9880, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xac0f9880, ftLastWriteTime.dwHighDateTime=0x1d2de32, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0029.595] FindNextFileW (in: hFindFile=0x3814c0, lpFindFileData=0x31e5e4 | out: lpFindFileData=0x31e5e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xac0f9880, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac0f9880, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xe83216ab, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x11240, dwReserved0=0x0, dwReserved1=0x0, cFileName="bootmgr.exe.mui", cAlternateFileName="BOOTMG~1.MUI")) returned 1 [0029.595] FindNextFileW (in: hFindFile=0x3814c0, lpFindFileData=0x31e5e4 | out: lpFindFileData=0x31e5e4*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0029.595] FindClose (in: hFindFile=0x3814c0 | out: hFindFile=0x3814c0) returned 1 [0029.595] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e86c) returned 1 [0029.595] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e878) returned 1 [0029.595] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e8ac) returned 1 [0029.595] GetFullPathNameW (in: lpFileName="C:\\Boot\\zh-TW", nBufferLength=0x105, lpBuffer=0x31e3b4, lpFilePart=0x0 | out: lpBuffer="C:\\Boot\\zh-TW", lpFilePart=0x0) returned 0xd [0029.595] GetFullPathNameW (in: lpFileName="C:\\Boot\\zh-TW\\", nBufferLength=0x105, lpBuffer=0x31e388, lpFilePart=0x0 | out: lpBuffer="C:\\Boot\\zh-TW\\", lpFilePart=0x0) returned 0xe [0029.595] FindFirstFileW (in: lpFileName="C:\\Boot\\zh-TW\\*", lpFindFileData=0x31e5d4 | out: lpFindFileData=0x31e5d4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac0f9880, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac0f9880, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xac0f9880, ftLastWriteTime.dwHighDateTime=0x1d2de32, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3814c0 [0029.595] FindNextFileW (in: hFindFile=0x3814c0, lpFindFileData=0x31e5e4 | out: lpFindFileData=0x31e5e4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac0f9880, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac0f9880, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xac0f9880, ftLastWriteTime.dwHighDateTime=0x1d2de32, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0029.595] FindNextFileW (in: hFindFile=0x3814c0, lpFindFileData=0x31e5e4 | out: lpFindFileData=0x31e5e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xac0f9880, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac0f9880, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xe83216ab, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x11240, dwReserved0=0x0, dwReserved1=0x0, cFileName="bootmgr.exe.mui", cAlternateFileName="BOOTMG~1.MUI")) returned 1 [0029.595] FindNextFileW (in: hFindFile=0x3814c0, lpFindFileData=0x31e5e4 | out: lpFindFileData=0x31e5e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xac0f9880, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac0f9880, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xe83216ab, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x11240, dwReserved0=0x0, dwReserved1=0x0, cFileName="bootmgr.exe.mui", cAlternateFileName="BOOTMG~1.MUI")) returned 0 [0029.595] FindClose (in: hFindFile=0x3814c0 | out: hFindFile=0x3814c0) returned 1 [0029.595] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e86c) returned 1 [0029.595] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e878) returned 1 [0029.595] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e924) returned 1 [0029.595] GetFullPathNameW (in: lpFileName="C:\\Config.Msi", nBufferLength=0x105, lpBuffer=0x31e42c, lpFilePart=0x0 | out: lpBuffer="C:\\Config.Msi", lpFilePart=0x0) returned 0xd [0029.596] GetFullPathNameW (in: lpFileName="C:\\Config.Msi\\", nBufferLength=0x105, lpBuffer=0x31e400, lpFilePart=0x0 | out: lpBuffer="C:\\Config.Msi\\", lpFilePart=0x0) returned 0xe [0029.596] FindFirstFileW (in: lpFileName="C:\\Config.Msi\\*", lpFindFileData=0x31e64c | out: lpFindFileData=0x31e64c*(dwFileAttributes=0x16, ftCreationTime.dwLowDateTime=0xcd4f5c20, ftCreationTime.dwHighDateTime=0x1d305eb, ftLastAccessTime.dwLowDateTime=0xc182c7c0, ftLastAccessTime.dwHighDateTime=0x1d3373b, ftLastWriteTime.dwLowDateTime=0xc182c7c0, ftLastWriteTime.dwHighDateTime=0x1d3373b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3814c0 [0029.596] FindNextFileW (in: hFindFile=0x3814c0, lpFindFileData=0x31e65c | out: lpFindFileData=0x31e65c*(dwFileAttributes=0x16, ftCreationTime.dwLowDateTime=0xcd4f5c20, ftCreationTime.dwHighDateTime=0x1d305eb, ftLastAccessTime.dwLowDateTime=0xc182c7c0, ftLastAccessTime.dwHighDateTime=0x1d3373b, ftLastWriteTime.dwLowDateTime=0xc182c7c0, ftLastWriteTime.dwHighDateTime=0x1d3373b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0029.596] FindNextFileW (in: hFindFile=0x3814c0, lpFindFileData=0x31e65c | out: lpFindFileData=0x31e65c*(dwFileAttributes=0x16, ftCreationTime.dwLowDateTime=0xcd4f5c20, ftCreationTime.dwHighDateTime=0x1d305eb, ftLastAccessTime.dwLowDateTime=0xc182c7c0, ftLastAccessTime.dwHighDateTime=0x1d3373b, ftLastWriteTime.dwLowDateTime=0xc182c7c0, ftLastWriteTime.dwHighDateTime=0x1d3373b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 0 [0029.596] FindClose (in: hFindFile=0x3814c0 | out: hFindFile=0x3814c0) returned 1 [0029.596] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e8e4) returned 1 [0029.596] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e8f0) returned 1 [0029.596] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e924) returned 1 [0029.596] GetFullPathNameW (in: lpFileName="C:\\Config.Msi", nBufferLength=0x105, lpBuffer=0x31e42c, lpFilePart=0x0 | out: lpBuffer="C:\\Config.Msi", lpFilePart=0x0) returned 0xd [0029.596] GetFullPathNameW (in: lpFileName="C:\\Config.Msi\\", nBufferLength=0x105, lpBuffer=0x31e400, lpFilePart=0x0 | out: lpBuffer="C:\\Config.Msi\\", lpFilePart=0x0) returned 0xe [0029.596] FindFirstFileW (in: lpFileName="C:\\Config.Msi\\*", lpFindFileData=0x31e64c | out: lpFindFileData=0x31e64c*(dwFileAttributes=0x16, ftCreationTime.dwLowDateTime=0xcd4f5c20, ftCreationTime.dwHighDateTime=0x1d305eb, ftLastAccessTime.dwLowDateTime=0xc182c7c0, ftLastAccessTime.dwHighDateTime=0x1d3373b, ftLastWriteTime.dwLowDateTime=0xc182c7c0, ftLastWriteTime.dwHighDateTime=0x1d3373b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3814c0 [0029.596] FindNextFileW (in: hFindFile=0x3814c0, lpFindFileData=0x31e65c | out: lpFindFileData=0x31e65c*(dwFileAttributes=0x16, ftCreationTime.dwLowDateTime=0xcd4f5c20, ftCreationTime.dwHighDateTime=0x1d305eb, ftLastAccessTime.dwLowDateTime=0xc182c7c0, ftLastAccessTime.dwHighDateTime=0x1d3373b, ftLastWriteTime.dwLowDateTime=0xc182c7c0, ftLastWriteTime.dwHighDateTime=0x1d3373b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0029.596] FindNextFileW (in: hFindFile=0x3814c0, lpFindFileData=0x31e65c | out: lpFindFileData=0x31e65c*(dwFileAttributes=0x16, ftCreationTime.dwLowDateTime=0xcd4f5c20, ftCreationTime.dwHighDateTime=0x1d305eb, ftLastAccessTime.dwLowDateTime=0xc182c7c0, ftLastAccessTime.dwHighDateTime=0x1d3373b, ftLastWriteTime.dwLowDateTime=0xc182c7c0, ftLastWriteTime.dwHighDateTime=0x1d3373b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 0 [0029.596] FindClose (in: hFindFile=0x3814c0 | out: hFindFile=0x3814c0) returned 1 [0029.597] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e8e4) returned 1 [0029.597] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e8f0) returned 1 [0029.597] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e924) returned 1 [0029.597] GetFullPathNameW (in: lpFileName="C:\\Documents and Settings", nBufferLength=0x105, lpBuffer=0x31e42c, lpFilePart=0x0 | out: lpBuffer="C:\\Documents and Settings", lpFilePart=0x0) returned 0x19 [0029.597] GetFullPathNameW (in: lpFileName="C:\\Documents and Settings\\", nBufferLength=0x105, lpBuffer=0x31e400, lpFilePart=0x0 | out: lpBuffer="C:\\Documents and Settings\\", lpFilePart=0x0) returned 0x1a [0029.597] FindFirstFileW (in: lpFileName="C:\\Documents and Settings\\*", lpFindFileData=0x31e64c | out: lpFindFileData=0x31e64c*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0029.597] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e8e8) returned 1 [0029.616] EtwEventRegister () returned 0x0 [0029.633] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e924) returned 1 [0029.634] GetFullPathNameW (in: lpFileName="C:\\MSOCache", nBufferLength=0x105, lpBuffer=0x31e42c, lpFilePart=0x0 | out: lpBuffer="C:\\MSOCache", lpFilePart=0x0) returned 0xb [0029.634] GetFullPathNameW (in: lpFileName="C:\\MSOCache\\", nBufferLength=0x105, lpBuffer=0x31e400, lpFilePart=0x0 | out: lpBuffer="C:\\MSOCache\\", lpFilePart=0x0) returned 0xc [0029.634] FindFirstFileW (in: lpFileName="C:\\MSOCache\\*", lpFindFileData=0x31e64c | out: lpFindFileData=0x31e64c*(dwFileAttributes=0x2013, ftCreationTime.dwLowDateTime=0xe7b42810, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xe7b42810, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xe7b42810, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3814c0 [0029.634] FindNextFileW (in: hFindFile=0x3814c0, lpFindFileData=0x31e65c | out: lpFindFileData=0x31e65c*(dwFileAttributes=0x2013, ftCreationTime.dwLowDateTime=0xe7b42810, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xe7b42810, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xe7b42810, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0029.634] FindNextFileW (in: hFindFile=0x3814c0, lpFindFileData=0x31e65c | out: lpFindFileData=0x31e65c*(dwFileAttributes=0x2011, ftCreationTime.dwLowDateTime=0xe7b42810, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xa5cd3a40, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0xa5cd3a40, ftLastWriteTime.dwHighDateTime=0x1d305f1, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="All Users", cAlternateFileName="ALLUSE~1")) returned 1 [0029.634] FindNextFileW (in: hFindFile=0x3814c0, lpFindFileData=0x31e65c | out: lpFindFileData=0x31e65c*(dwFileAttributes=0x2011, ftCreationTime.dwLowDateTime=0xe7b42810, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xa5cd3a40, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0xa5cd3a40, ftLastWriteTime.dwHighDateTime=0x1d305f1, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="All Users", cAlternateFileName="ALLUSE~1")) returned 0 [0029.635] FindClose (in: hFindFile=0x3814c0 | out: hFindFile=0x3814c0) returned 1 [0029.635] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e8e4) returned 1 [0029.635] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e8f0) returned 1 [0029.635] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e924) returned 1 [0029.635] GetFullPathNameW (in: lpFileName="C:\\MSOCache", nBufferLength=0x105, lpBuffer=0x31e42c, lpFilePart=0x0 | out: lpBuffer="C:\\MSOCache", lpFilePart=0x0) returned 0xb [0029.635] GetFullPathNameW (in: lpFileName="C:\\MSOCache\\", nBufferLength=0x105, lpBuffer=0x31e400, lpFilePart=0x0 | out: lpBuffer="C:\\MSOCache\\", lpFilePart=0x0) returned 0xc [0029.635] FindFirstFileW (in: lpFileName="C:\\MSOCache\\*", lpFindFileData=0x31e64c | out: lpFindFileData=0x31e64c*(dwFileAttributes=0x2013, ftCreationTime.dwLowDateTime=0xe7b42810, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xe7b42810, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xe7b42810, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3814c0 [0029.635] FindNextFileW (in: hFindFile=0x3814c0, lpFindFileData=0x31e65c | out: lpFindFileData=0x31e65c*(dwFileAttributes=0x2013, ftCreationTime.dwLowDateTime=0xe7b42810, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xe7b42810, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xe7b42810, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0029.635] FindNextFileW (in: hFindFile=0x3814c0, lpFindFileData=0x31e65c | out: lpFindFileData=0x31e65c*(dwFileAttributes=0x2011, ftCreationTime.dwLowDateTime=0xe7b42810, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xa5cd3a40, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0xa5cd3a40, ftLastWriteTime.dwHighDateTime=0x1d305f1, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="All Users", cAlternateFileName="ALLUSE~1")) returned 1 [0029.635] FindNextFileW (in: hFindFile=0x3814c0, lpFindFileData=0x31e65c | out: lpFindFileData=0x31e65c*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0029.635] FindClose (in: hFindFile=0x3814c0 | out: hFindFile=0x3814c0) returned 1 [0029.635] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e8e4) returned 1 [0029.635] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e8f0) returned 1 [0029.636] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e8ac) returned 1 [0029.636] GetFullPathNameW (in: lpFileName="C:\\MSOCache\\All Users", nBufferLength=0x105, lpBuffer=0x31e3b4, lpFilePart=0x0 | out: lpBuffer="C:\\MSOCache\\All Users", lpFilePart=0x0) returned 0x15 [0029.636] GetFullPathNameW (in: lpFileName="C:\\MSOCache\\All Users\\", nBufferLength=0x105, lpBuffer=0x31e388, lpFilePart=0x0 | out: lpBuffer="C:\\MSOCache\\All Users\\", lpFilePart=0x0) returned 0x16 [0029.636] FindFirstFileW (in: lpFileName="C:\\MSOCache\\All Users\\*", lpFindFileData=0x31e5d4 | out: lpFindFileData=0x31e5d4*(dwFileAttributes=0x2011, ftCreationTime.dwLowDateTime=0xe7b42810, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xa5cd3a40, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0xa5cd3a40, ftLastWriteTime.dwHighDateTime=0x1d305f1, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3814c0 [0029.640] FindNextFileW (in: hFindFile=0x3814c0, lpFindFileData=0x31e5e4 | out: lpFindFileData=0x31e5e4*(dwFileAttributes=0x2011, ftCreationTime.dwLowDateTime=0xe7b42810, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xa5cd3a40, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0xa5cd3a40, ftLastWriteTime.dwHighDateTime=0x1d305f1, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0029.641] FindNextFileW (in: hFindFile=0x3814c0, lpFindFileData=0x31e5e4 | out: lpFindFileData=0x31e5e4*(dwFileAttributes=0x2011, ftCreationTime.dwLowDateTime=0xecdfa490, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xee38cbf0, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xee38cbf0, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="{90140000-0016-0409-1000-0000000FF1CE}-C", cAlternateFileName="{90140~3")) returned 1 [0029.642] FindNextFileW (in: hFindFile=0x3814c0, lpFindFileData=0x31e5e4 | out: lpFindFileData=0x31e5e4*(dwFileAttributes=0x2011, ftCreationTime.dwLowDateTime=0xe8729610, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xecdfa490, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xecdfa490, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="{90140000-0018-0409-1000-0000000FF1CE}-C", cAlternateFileName="{90140~2")) returned 1 [0029.642] FindNextFileW (in: hFindFile=0x3814c0, lpFindFileData=0x31e5e4 | out: lpFindFileData=0x31e5e4*(dwFileAttributes=0x2011, ftCreationTime.dwLowDateTime=0xfc3e6570, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xfc8a9170, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xfc8a9170, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="{90140000-0019-0409-1000-0000000FF1CE}-C", cAlternateFileName="{9877A~1")) returned 1 [0029.642] FindNextFileW (in: hFindFile=0x3814c0, lpFindFileData=0x31e5e4 | out: lpFindFileData=0x31e5e4*(dwFileAttributes=0x2011, ftCreationTime.dwLowDateTime=0xee829690, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xf00dbad0, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xf00dbad0, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="{90140000-001A-0409-1000-0000000FF1CE}-C", cAlternateFileName="{9765F~1")) returned 1 [0029.642] FindNextFileW (in: hFindFile=0x3814c0, lpFindFileData=0x31e5e4 | out: lpFindFileData=0x31e5e4*(dwFileAttributes=0x2011, ftCreationTime.dwLowDateTime=0xfc8a9170, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xfe076d70, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xfe076d70, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="{90140000-001B-0409-1000-0000000FF1CE}-C", cAlternateFileName="{94E50~1")) returned 1 [0029.643] FindNextFileW (in: hFindFile=0x3814c0, lpFindFileData=0x31e5e4 | out: lpFindFileData=0x31e5e4*(dwFileAttributes=0x2011, ftCreationTime.dwLowDateTime=0xf00dbad0, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xf58c8770, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xf58c8770, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="{90140000-002C-0409-1000-0000000FF1CE}-C", cAlternateFileName="{92787~1")) returned 1 [0029.643] FindNextFileW (in: hFindFile=0x3814c0, lpFindFileData=0x31e5e4 | out: lpFindFileData=0x31e5e4*(dwFileAttributes=0x2011, ftCreationTime.dwLowDateTime=0xfc138cb0, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xfc3e6570, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xfc3e6570, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="{90140000-0043-0409-1000-0000000FF1CE}-C", cAlternateFileName="{95310~1")) returned 1 [0029.643] FindNextFileW (in: hFindFile=0x3814c0, lpFindFileData=0x31e5e4 | out: lpFindFileData=0x31e5e4*(dwFileAttributes=0x2011, ftCreationTime.dwLowDateTime=0xf6e34d70, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xfa13c510, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xfa13c510, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="{90140000-0044-0409-1000-0000000FF1CE}-C", cAlternateFileName="{91454~1")) returned 1 [0029.643] FindNextFileW (in: hFindFile=0x3814c0, lpFindFileData=0x31e5e4 | out: lpFindFileData=0x31e5e4*(dwFileAttributes=0x2011, ftCreationTime.dwLowDateTime=0x435769e0, ftCreationTime.dwHighDateTime=0x1d305eb, ftLastAccessTime.dwLowDateTime=0x43bdc500, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0x43bdc500, ftLastWriteTime.dwHighDateTime=0x1d305eb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="{90140000-0054-0409-1000-0000000FF1CE}-C", cAlternateFileName="{9EA85~1")) returned 1 [0029.643] FindNextFileW (in: hFindFile=0x3814c0, lpFindFileData=0x31e5e4 | out: lpFindFileData=0x31e5e4*(dwFileAttributes=0x2011, ftCreationTime.dwLowDateTime=0xf58ee8d0, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xf6e0ec10, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xf6e0ec10, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="{90140000-00A1-0409-1000-0000000FF1CE}-C", cAlternateFileName="{92572~1")) returned 1 [0029.643] FindNextFileW (in: hFindFile=0x3814c0, lpFindFileData=0x31e5e4 | out: lpFindFileData=0x31e5e4*(dwFileAttributes=0x2011, ftCreationTime.dwLowDateTime=0xa5b30b20, ftCreationTime.dwHighDateTime=0x1d305f1, ftLastAccessTime.dwLowDateTime=0xa5bc90a0, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0xa5bc90a0, ftLastWriteTime.dwHighDateTime=0x1d305f1, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="{90140000-00B4-0409-1000-0000000FF1CE}-C", cAlternateFileName="{912E0~1")) returned 1 [0029.643] FindNextFileW (in: hFindFile=0x3814c0, lpFindFileData=0x31e5e4 | out: lpFindFileData=0x31e5e4*(dwFileAttributes=0x2011, ftCreationTime.dwLowDateTime=0xee38cbf0, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xee803530, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xee803530, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="{90140000-00BA-0409-1000-0000000FF1CE}-C", cAlternateFileName="{90140~4")) returned 1 [0029.644] FindNextFileW (in: hFindFile=0x3814c0, lpFindFileData=0x31e5e4 | out: lpFindFileData=0x31e5e4*(dwFileAttributes=0x2011, ftCreationTime.dwLowDateTime=0xe7b68970, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xe8729610, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xe8729610, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="{90140000-0115-0409-1000-0000000FF1CE}-C", cAlternateFileName="{90140~1")) returned 1 [0029.644] FindNextFileW (in: hFindFile=0x3814c0, lpFindFileData=0x31e5e4 | out: lpFindFileData=0x31e5e4*(dwFileAttributes=0x2011, ftCreationTime.dwLowDateTime=0xfa13c510, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xfc112b50, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xfc112b50, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="{90140000-0117-0409-1000-0000000FF1CE}-C", cAlternateFileName="{9AFC7~1")) returned 1 [0029.644] FindNextFileW (in: hFindFile=0x3814c0, lpFindFileData=0x31e5e4 | out: lpFindFileData=0x31e5e4*(dwFileAttributes=0x2011, ftCreationTime.dwLowDateTime=0xfe09ced0, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0x18179b90, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x18179b90, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="{91140000-0011-0000-1000-0000000FF1CE}-C", cAlternateFileName="{91140~1")) returned 1 [0029.644] FindNextFileW (in: hFindFile=0x3814c0, lpFindFileData=0x31e5e4 | out: lpFindFileData=0x31e5e4*(dwFileAttributes=0x2011, ftCreationTime.dwLowDateTime=0xa5cd3a40, ftCreationTime.dwHighDateTime=0x1d305f1, ftLastAccessTime.dwLowDateTime=0xa8c22f80, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0xa8c22f80, ftLastWriteTime.dwHighDateTime=0x1d305f1, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="{91140000-003B-0000-1000-0000000FF1CE}-C", cAlternateFileName="{91140~3")) returned 1 [0029.644] FindNextFileW (in: hFindFile=0x3814c0, lpFindFileData=0x31e5e4 | out: lpFindFileData=0x31e5e4*(dwFileAttributes=0x2011, ftCreationTime.dwLowDateTime=0x46538340, ftCreationTime.dwHighDateTime=0x1d305eb, ftLastAccessTime.dwLowDateTime=0x4a6d41a0, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0x4a6d41a0, ftLastWriteTime.dwHighDateTime=0x1d305eb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="{91140000-0057-0000-1000-0000000FF1CE}-C", cAlternateFileName="{91140~2")) returned 1 [0029.644] FindNextFileW (in: hFindFile=0x3814c0, lpFindFileData=0x31e5e4 | out: lpFindFileData=0x31e5e4*(dwFileAttributes=0x2011, ftCreationTime.dwLowDateTime=0x46538340, ftCreationTime.dwHighDateTime=0x1d305eb, ftLastAccessTime.dwLowDateTime=0x4a6d41a0, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0x4a6d41a0, ftLastWriteTime.dwHighDateTime=0x1d305eb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="{91140000-0057-0000-1000-0000000FF1CE}-C", cAlternateFileName="{91140~2")) returned 0 [0029.644] FindClose (in: hFindFile=0x3814c0 | out: hFindFile=0x3814c0) returned 1 [0029.645] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e86c) returned 1 [0029.645] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e878) returned 1 [0029.645] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e8ac) returned 1 [0029.645] GetFullPathNameW (in: lpFileName="C:\\MSOCache\\All Users", nBufferLength=0x105, lpBuffer=0x31e3b4, lpFilePart=0x0 | out: lpBuffer="C:\\MSOCache\\All Users", lpFilePart=0x0) returned 0x15 [0029.645] GetFullPathNameW (in: lpFileName="C:\\MSOCache\\All Users\\", nBufferLength=0x105, lpBuffer=0x31e388, lpFilePart=0x0 | out: lpBuffer="C:\\MSOCache\\All Users\\", lpFilePart=0x0) returned 0x16 [0029.645] FindFirstFileW (in: lpFileName="C:\\MSOCache\\All Users\\*", lpFindFileData=0x31e5d4 | out: lpFindFileData=0x31e5d4*(dwFileAttributes=0x2011, ftCreationTime.dwLowDateTime=0xe7b42810, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xa5cd3a40, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0xa5cd3a40, ftLastWriteTime.dwHighDateTime=0x1d305f1, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3814c0 [0029.646] FindNextFileW (in: hFindFile=0x3814c0, lpFindFileData=0x31e5e4 | out: lpFindFileData=0x31e5e4*(dwFileAttributes=0x2011, ftCreationTime.dwLowDateTime=0xe7b42810, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xa5cd3a40, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0xa5cd3a40, ftLastWriteTime.dwHighDateTime=0x1d305f1, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0029.647] FindNextFileW (in: hFindFile=0x3814c0, lpFindFileData=0x31e5e4 | out: lpFindFileData=0x31e5e4*(dwFileAttributes=0x2011, ftCreationTime.dwLowDateTime=0xecdfa490, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xee38cbf0, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xee38cbf0, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="{90140000-0016-0409-1000-0000000FF1CE}-C", cAlternateFileName="{90140~3")) returned 1 [0029.647] FindNextFileW (in: hFindFile=0x3814c0, lpFindFileData=0x31e5e4 | out: lpFindFileData=0x31e5e4*(dwFileAttributes=0x2011, ftCreationTime.dwLowDateTime=0xe8729610, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xecdfa490, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xecdfa490, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="{90140000-0018-0409-1000-0000000FF1CE}-C", cAlternateFileName="{90140~2")) returned 1 [0029.647] FindNextFileW (in: hFindFile=0x3814c0, lpFindFileData=0x31e5e4 | out: lpFindFileData=0x31e5e4*(dwFileAttributes=0x2011, ftCreationTime.dwLowDateTime=0xfc3e6570, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xfc8a9170, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xfc8a9170, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="{90140000-0019-0409-1000-0000000FF1CE}-C", cAlternateFileName="{9877A~1")) returned 1 [0029.647] FindNextFileW (in: hFindFile=0x3814c0, lpFindFileData=0x31e5e4 | out: lpFindFileData=0x31e5e4*(dwFileAttributes=0x2011, ftCreationTime.dwLowDateTime=0xee829690, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xf00dbad0, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xf00dbad0, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="{90140000-001A-0409-1000-0000000FF1CE}-C", cAlternateFileName="{9765F~1")) returned 1 [0029.647] FindNextFileW (in: hFindFile=0x3814c0, lpFindFileData=0x31e5e4 | out: lpFindFileData=0x31e5e4*(dwFileAttributes=0x2011, ftCreationTime.dwLowDateTime=0xfc8a9170, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xfe076d70, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xfe076d70, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="{90140000-001B-0409-1000-0000000FF1CE}-C", cAlternateFileName="{94E50~1")) returned 1 [0029.647] FindNextFileW (in: hFindFile=0x3814c0, lpFindFileData=0x31e5e4 | out: lpFindFileData=0x31e5e4*(dwFileAttributes=0x2011, ftCreationTime.dwLowDateTime=0xf00dbad0, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xf58c8770, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xf58c8770, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="{90140000-002C-0409-1000-0000000FF1CE}-C", cAlternateFileName="{92787~1")) returned 1 [0029.647] FindNextFileW (in: hFindFile=0x3814c0, lpFindFileData=0x31e5e4 | out: lpFindFileData=0x31e5e4*(dwFileAttributes=0x2011, ftCreationTime.dwLowDateTime=0xfc138cb0, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xfc3e6570, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xfc3e6570, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="{90140000-0043-0409-1000-0000000FF1CE}-C", cAlternateFileName="{95310~1")) returned 1 [0029.647] FindNextFileW (in: hFindFile=0x3814c0, lpFindFileData=0x31e5e4 | out: lpFindFileData=0x31e5e4*(dwFileAttributes=0x2011, ftCreationTime.dwLowDateTime=0xf6e34d70, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xfa13c510, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xfa13c510, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="{90140000-0044-0409-1000-0000000FF1CE}-C", cAlternateFileName="{91454~1")) returned 1 [0029.647] FindNextFileW (in: hFindFile=0x3814c0, lpFindFileData=0x31e5e4 | out: lpFindFileData=0x31e5e4*(dwFileAttributes=0x2011, ftCreationTime.dwLowDateTime=0x435769e0, ftCreationTime.dwHighDateTime=0x1d305eb, ftLastAccessTime.dwLowDateTime=0x43bdc500, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0x43bdc500, ftLastWriteTime.dwHighDateTime=0x1d305eb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="{90140000-0054-0409-1000-0000000FF1CE}-C", cAlternateFileName="{9EA85~1")) returned 1 [0029.648] FindNextFileW (in: hFindFile=0x3814c0, lpFindFileData=0x31e5e4 | out: lpFindFileData=0x31e5e4*(dwFileAttributes=0x2011, ftCreationTime.dwLowDateTime=0xf58ee8d0, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xf6e0ec10, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xf6e0ec10, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="{90140000-00A1-0409-1000-0000000FF1CE}-C", cAlternateFileName="{92572~1")) returned 1 [0029.648] FindNextFileW (in: hFindFile=0x3814c0, lpFindFileData=0x31e5e4 | out: lpFindFileData=0x31e5e4*(dwFileAttributes=0x2011, ftCreationTime.dwLowDateTime=0xa5b30b20, ftCreationTime.dwHighDateTime=0x1d305f1, ftLastAccessTime.dwLowDateTime=0xa5bc90a0, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0xa5bc90a0, ftLastWriteTime.dwHighDateTime=0x1d305f1, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="{90140000-00B4-0409-1000-0000000FF1CE}-C", cAlternateFileName="{912E0~1")) returned 1 [0029.648] FindNextFileW (in: hFindFile=0x3814c0, lpFindFileData=0x31e5e4 | out: lpFindFileData=0x31e5e4*(dwFileAttributes=0x2011, ftCreationTime.dwLowDateTime=0xee38cbf0, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xee803530, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xee803530, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="{90140000-00BA-0409-1000-0000000FF1CE}-C", cAlternateFileName="{90140~4")) returned 1 [0029.648] FindNextFileW (in: hFindFile=0x3814c0, lpFindFileData=0x31e5e4 | out: lpFindFileData=0x31e5e4*(dwFileAttributes=0x2011, ftCreationTime.dwLowDateTime=0xe7b68970, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xe8729610, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xe8729610, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="{90140000-0115-0409-1000-0000000FF1CE}-C", cAlternateFileName="{90140~1")) returned 1 [0029.648] FindNextFileW (in: hFindFile=0x3814c0, lpFindFileData=0x31e5e4 | out: lpFindFileData=0x31e5e4*(dwFileAttributes=0x2011, ftCreationTime.dwLowDateTime=0xfa13c510, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xfc112b50, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xfc112b50, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="{90140000-0117-0409-1000-0000000FF1CE}-C", cAlternateFileName="{9AFC7~1")) returned 1 [0029.648] FindNextFileW (in: hFindFile=0x3814c0, lpFindFileData=0x31e5e4 | out: lpFindFileData=0x31e5e4*(dwFileAttributes=0x2011, ftCreationTime.dwLowDateTime=0xfe09ced0, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0x18179b90, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x18179b90, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="{91140000-0011-0000-1000-0000000FF1CE}-C", cAlternateFileName="{91140~1")) returned 1 [0029.648] FindNextFileW (in: hFindFile=0x3814c0, lpFindFileData=0x31e5e4 | out: lpFindFileData=0x31e5e4*(dwFileAttributes=0x2011, ftCreationTime.dwLowDateTime=0xa5cd3a40, ftCreationTime.dwHighDateTime=0x1d305f1, ftLastAccessTime.dwLowDateTime=0xa8c22f80, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0xa8c22f80, ftLastWriteTime.dwHighDateTime=0x1d305f1, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="{91140000-003B-0000-1000-0000000FF1CE}-C", cAlternateFileName="{91140~3")) returned 1 [0029.648] FindNextFileW (in: hFindFile=0x3814c0, lpFindFileData=0x31e5e4 | out: lpFindFileData=0x31e5e4*(dwFileAttributes=0x2011, ftCreationTime.dwLowDateTime=0x46538340, ftCreationTime.dwHighDateTime=0x1d305eb, ftLastAccessTime.dwLowDateTime=0x4a6d41a0, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0x4a6d41a0, ftLastWriteTime.dwHighDateTime=0x1d305eb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="{91140000-0057-0000-1000-0000000FF1CE}-C", cAlternateFileName="{91140~2")) returned 1 [0029.649] FindNextFileW (in: hFindFile=0x3814c0, lpFindFileData=0x31e5e4 | out: lpFindFileData=0x31e5e4*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0029.649] FindClose (in: hFindFile=0x3814c0 | out: hFindFile=0x3814c0) returned 1 [0029.649] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e86c) returned 1 [0029.649] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e878) returned 1 [0029.649] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e834) returned 1 [0029.649] GetFullPathNameW (in: lpFileName="C:\\MSOCache\\All Users\\{90140000-0016-0409-1000-0000000FF1CE}-C", nBufferLength=0x105, lpBuffer=0x31e33c, lpFilePart=0x0 | out: lpBuffer="C:\\MSOCache\\All Users\\{90140000-0016-0409-1000-0000000FF1CE}-C", lpFilePart=0x0) returned 0x3e [0029.650] GetFullPathNameW (in: lpFileName="C:\\MSOCache\\All Users\\{90140000-0016-0409-1000-0000000FF1CE}-C\\", nBufferLength=0x105, lpBuffer=0x31e310, lpFilePart=0x0 | out: lpBuffer="C:\\MSOCache\\All Users\\{90140000-0016-0409-1000-0000000FF1CE}-C\\", lpFilePart=0x0) returned 0x3f [0029.650] FindFirstFileW (in: lpFileName="C:\\MSOCache\\All Users\\{90140000-0016-0409-1000-0000000FF1CE}-C\\*", lpFindFileData=0x31e55c | out: lpFindFileData=0x31e55c*(dwFileAttributes=0x2011, ftCreationTime.dwLowDateTime=0xecdfa490, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xee38cbf0, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xee38cbf0, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3814c0 [0029.651] FindNextFileW (in: hFindFile=0x3814c0, lpFindFileData=0x31e56c | out: lpFindFileData=0x31e56c*(dwFileAttributes=0x2011, ftCreationTime.dwLowDateTime=0xecdfa490, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xee38cbf0, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xee38cbf0, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0029.651] FindNextFileW (in: hFindFile=0x3814c0, lpFindFileData=0x31e56c | out: lpFindFileData=0x31e56c*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x393df700, ftCreationTime.dwHighDateTime=0x1cad04a, ftLastAccessTime.dwLowDateTime=0x393df700, ftLastAccessTime.dwHighDateTime=0x1cad04a, ftLastWriteTime.dwLowDateTime=0xed035930, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x102fcbb, dwReserved0=0x0, dwReserved1=0x0, cFileName="ExcelLR.cab", cAlternateFileName="")) returned 1 [0029.651] FindNextFileW (in: hFindFile=0x3814c0, lpFindFileData=0x31e56c | out: lpFindFileData=0x31e56c*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x3e02ab00, ftCreationTime.dwHighDateTime=0x1cad04a, ftLastAccessTime.dwLowDateTime=0x3e02ab00, ftLastAccessTime.dwHighDateTime=0x1cad04a, ftLastWriteTime.dwLowDateTime=0xece1ee80, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x263e00, dwReserved0=0x0, dwReserved1=0x0, cFileName="ExcelMUI.msi", cAlternateFileName="")) returned 1 [0029.652] FindNextFileW (in: hFindFile=0x3814c0, lpFindFileData=0x31e56c | out: lpFindFileData=0x31e56c*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x43f88c00, ftCreationTime.dwHighDateTime=0x1cad04a, ftLastAccessTime.dwLowDateTime=0x43f88c00, ftLastAccessTime.dwHighDateTime=0x1cad04a, ftLastWriteTime.dwLowDateTime=0xecdfa490, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x61d, dwReserved0=0x0, dwReserved1=0x0, cFileName="ExcelMUI.xml", cAlternateFileName="")) returned 1 [0029.652] FindNextFileW (in: hFindFile=0x3814c0, lpFindFileData=0x31e56c | out: lpFindFileData=0x31e56c*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x43f88c00, ftCreationTime.dwHighDateTime=0x1cad04a, ftLastAccessTime.dwLowDateTime=0x43f88c00, ftLastAccessTime.dwHighDateTime=0x1cad04a, ftLastWriteTime.dwLowDateTime=0xee38cbf0, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x8f8, dwReserved0=0x0, dwReserved1=0x0, cFileName="Setup.xml", cAlternateFileName="")) returned 1 [0029.652] FindNextFileW (in: hFindFile=0x3814c0, lpFindFileData=0x31e56c | out: lpFindFileData=0x31e56c*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0029.652] FindClose (in: hFindFile=0x3814c0 | out: hFindFile=0x3814c0) returned 1 [0029.652] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e7f4) returned 1 [0029.652] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e800) returned 1 [0029.652] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e834) returned 1 [0029.652] GetFullPathNameW (in: lpFileName="C:\\MSOCache\\All Users\\{90140000-0016-0409-1000-0000000FF1CE}-C", nBufferLength=0x105, lpBuffer=0x31e33c, lpFilePart=0x0 | out: lpBuffer="C:\\MSOCache\\All Users\\{90140000-0016-0409-1000-0000000FF1CE}-C", lpFilePart=0x0) returned 0x3e [0029.652] GetFullPathNameW (in: lpFileName="C:\\MSOCache\\All Users\\{90140000-0016-0409-1000-0000000FF1CE}-C\\", nBufferLength=0x105, lpBuffer=0x31e310, lpFilePart=0x0 | out: lpBuffer="C:\\MSOCache\\All Users\\{90140000-0016-0409-1000-0000000FF1CE}-C\\", lpFilePart=0x0) returned 0x3f [0029.652] FindFirstFileW (in: lpFileName="C:\\MSOCache\\All Users\\{90140000-0016-0409-1000-0000000FF1CE}-C\\*", lpFindFileData=0x31e55c | out: lpFindFileData=0x31e55c*(dwFileAttributes=0x2011, ftCreationTime.dwLowDateTime=0xecdfa490, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xee38cbf0, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xee38cbf0, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3814c0 [0029.652] FindNextFileW (in: hFindFile=0x3814c0, lpFindFileData=0x31e56c | out: lpFindFileData=0x31e56c*(dwFileAttributes=0x2011, ftCreationTime.dwLowDateTime=0xecdfa490, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xee38cbf0, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xee38cbf0, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0029.652] FindNextFileW (in: hFindFile=0x3814c0, lpFindFileData=0x31e56c | out: lpFindFileData=0x31e56c*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x393df700, ftCreationTime.dwHighDateTime=0x1cad04a, ftLastAccessTime.dwLowDateTime=0x393df700, ftLastAccessTime.dwHighDateTime=0x1cad04a, ftLastWriteTime.dwLowDateTime=0xed035930, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x102fcbb, dwReserved0=0x0, dwReserved1=0x0, cFileName="ExcelLR.cab", cAlternateFileName="")) returned 1 [0029.653] FindNextFileW (in: hFindFile=0x3814c0, lpFindFileData=0x31e56c | out: lpFindFileData=0x31e56c*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x3e02ab00, ftCreationTime.dwHighDateTime=0x1cad04a, ftLastAccessTime.dwLowDateTime=0x3e02ab00, ftLastAccessTime.dwHighDateTime=0x1cad04a, ftLastWriteTime.dwLowDateTime=0xece1ee80, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x263e00, dwReserved0=0x0, dwReserved1=0x0, cFileName="ExcelMUI.msi", cAlternateFileName="")) returned 1 [0029.653] FindNextFileW (in: hFindFile=0x3814c0, lpFindFileData=0x31e56c | out: lpFindFileData=0x31e56c*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x43f88c00, ftCreationTime.dwHighDateTime=0x1cad04a, ftLastAccessTime.dwLowDateTime=0x43f88c00, ftLastAccessTime.dwHighDateTime=0x1cad04a, ftLastWriteTime.dwLowDateTime=0xecdfa490, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x61d, dwReserved0=0x0, dwReserved1=0x0, cFileName="ExcelMUI.xml", cAlternateFileName="")) returned 1 [0029.653] FindNextFileW (in: hFindFile=0x3814c0, lpFindFileData=0x31e56c | out: lpFindFileData=0x31e56c*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x43f88c00, ftCreationTime.dwHighDateTime=0x1cad04a, ftLastAccessTime.dwLowDateTime=0x43f88c00, ftLastAccessTime.dwHighDateTime=0x1cad04a, ftLastWriteTime.dwLowDateTime=0xee38cbf0, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x8f8, dwReserved0=0x0, dwReserved1=0x0, cFileName="Setup.xml", cAlternateFileName="")) returned 1 [0029.653] FindNextFileW (in: hFindFile=0x3814c0, lpFindFileData=0x31e56c | out: lpFindFileData=0x31e56c*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x43f88c00, ftCreationTime.dwHighDateTime=0x1cad04a, ftLastAccessTime.dwLowDateTime=0x43f88c00, ftLastAccessTime.dwHighDateTime=0x1cad04a, ftLastWriteTime.dwLowDateTime=0xee38cbf0, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x8f8, dwReserved0=0x0, dwReserved1=0x0, cFileName="Setup.xml", cAlternateFileName="")) returned 0 [0029.653] FindClose (in: hFindFile=0x3814c0 | out: hFindFile=0x3814c0) returned 1 [0029.653] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e7f4) returned 1 [0029.653] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e800) returned 1 [0029.669] GetFullPathNameW (in: lpFileName="C:\\MSOCache\\All Users\\{90140000-0016-0409-1000-0000000FF1CE}-C\\ExcelMUI.xml", nBufferLength=0x105, lpBuffer=0x31e20c, lpFilePart=0x0 | out: lpBuffer="C:\\MSOCache\\All Users\\{90140000-0016-0409-1000-0000000FF1CE}-C\\ExcelMUI.xml", lpFilePart=0x0) returned 0x4b [0029.669] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e700) returned 1 [0029.670] CreateFileW (lpFileName="C:\\MSOCache\\All Users\\{90140000-0016-0409-1000-0000000FF1CE}-C\\ExcelMUI.xml" (normalized: "c:\\msocache\\all users\\{90140000-0016-0409-1000-0000000ff1ce}-c\\excelmui.xml"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0029.671] GetFileType (hFile=0x230) returned 0x1 [0029.671] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e6fc) returned 1 [0029.671] GetFileType (hFile=0x230) returned 0x1 [0029.671] GetFileSize (in: hFile=0x230, lpFileSizeHigh=0x31e808 | out: lpFileSizeHigh=0x31e808*=0x0) returned 0x61d [0029.671] ReadFile (in: hFile=0x230, lpBuffer=0x2648db4, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x31e7b4, lpOverlapped=0x0 | out: lpBuffer=0x2648db4*, lpNumberOfBytesRead=0x31e7b4*=0x61d, lpOverlapped=0x0) returned 1 [0029.674] CloseHandle (hObject=0x230) returned 1 [0031.706] GetFullPathNameW (in: lpFileName="C:\\Windows\\Microsoft.NET\\Framework\\v4.0.30319\\config\\machine.config", nBufferLength=0x105, lpBuffer=0x31e1c0, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\Microsoft.NET\\Framework\\v4.0.30319\\config\\machine.config", lpFilePart=0x0) returned 0x43 [0031.706] GetFullPathNameW (in: lpFileName="C:\\Windows\\Microsoft.NET\\Framework\\v4.0.30319\\config\\machine.config", nBufferLength=0x105, lpBuffer=0x31e224, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\Microsoft.NET\\Framework\\v4.0.30319\\config\\machine.config", lpFilePart=0x0) returned 0x43 [0031.706] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e684) returned 1 [0031.706] GetFileAttributesExW (in: lpFileName="C:\\Windows\\Microsoft.NET\\Framework\\v4.0.30319\\config\\machine.config" (normalized: "c:\\windows\\microsoft.net\\framework\\v4.0.30319\\config\\machine.config"), fInfoLevelId=0x0, lpFileInformation=0x31e700 | out: lpFileInformation=0x31e700*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc0cc4300, ftCreationTime.dwHighDateTime=0x1cd5cf4, ftLastAccessTime.dwLowDateTime=0xcf7ee640, ftLastAccessTime.dwHighDateTime=0x1d2e675, ftLastWriteTime.dwLowDateTime=0xc0cc4300, ftLastWriteTime.dwHighDateTime=0x1cd5cf4, nFileSizeHigh=0x0, nFileSizeLow=0x8c8f)) returned 1 [0031.706] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e680) returned 1 [0031.833] BCryptGetFipsAlgorithmMode (in: pfEnabled=0x31e40c | out: pfEnabled=0x31e40c) returned 0x0 [0032.129] GetFullPathNameW (in: lpFileName="C:\\MSOCache\\All Users\\{90140000-0016-0409-1000-0000000FF1CE}-C\\ExcelMUI.xml", nBufferLength=0x105, lpBuffer=0x31e1f8, lpFilePart=0x0 | out: lpBuffer="C:\\MSOCache\\All Users\\{90140000-0016-0409-1000-0000000FF1CE}-C\\ExcelMUI.xml", lpFilePart=0x0) returned 0x4b [0032.129] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e6ec) returned 1 [0032.129] CreateFileW (lpFileName="C:\\MSOCache\\All Users\\{90140000-0016-0409-1000-0000000FF1CE}-C\\ExcelMUI.xml" (normalized: "c:\\msocache\\all users\\{90140000-0016-0409-1000-0000000ff1ce}-c\\excelmui.xml"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x268 [0032.130] GetFileType (hFile=0x268) returned 0x1 [0032.130] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e6e8) returned 1 [0032.130] GetFileType (hFile=0x268) returned 0x1 [0032.131] WriteFile (in: hFile=0x268, lpBuffer=0x26c2e64*, nNumberOfBytesToWrite=0x620, lpNumberOfBytesWritten=0x31e77c, lpOverlapped=0x0 | out: lpBuffer=0x26c2e64*, lpNumberOfBytesWritten=0x31e77c*=0x620, lpOverlapped=0x0) returned 1 [0032.131] CloseHandle (hObject=0x268) returned 1 [0032.132] GetFullPathNameW (in: lpFileName="C:\\MSOCache\\All Users\\{90140000-0016-0409-1000-0000000FF1CE}-C\\ExcelMUI.xml", nBufferLength=0x105, lpBuffer=0x31e32c, lpFilePart=0x0 | out: lpBuffer="C:\\MSOCache\\All Users\\{90140000-0016-0409-1000-0000000FF1CE}-C\\ExcelMUI.xml", lpFilePart=0x0) returned 0x4b [0032.132] GetFullPathNameW (in: lpFileName="C:\\MSOCache\\All Users\\{90140000-0016-0409-1000-0000000FF1CE}-C\\ExcelMUI.xml", nBufferLength=0x105, lpBuffer=0x31e32c, lpFilePart=0x0 | out: lpBuffer="C:\\MSOCache\\All Users\\{90140000-0016-0409-1000-0000000FF1CE}-C\\ExcelMUI.xml", lpFilePart=0x0) returned 0x4b [0032.132] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e78c) returned 1 [0032.132] GetFileAttributesExW (in: lpFileName="C:\\MSOCache\\All Users\\{90140000-0016-0409-1000-0000000FF1CE}-C\\ExcelMUI.xml" (normalized: "c:\\msocache\\all users\\{90140000-0016-0409-1000-0000000ff1ce}-c\\excelmui.xml"), fInfoLevelId=0x0, lpFileInformation=0x31e808 | out: lpFileInformation=0x31e808*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x43f88c00, ftCreationTime.dwHighDateTime=0x1cad04a, ftLastAccessTime.dwLowDateTime=0x43f88c00, ftLastAccessTime.dwHighDateTime=0x1cad04a, ftLastWriteTime.dwLowDateTime=0xf69a3420, ftLastWriteTime.dwHighDateTime=0x1d6eb7e, nFileSizeHigh=0x0, nFileSizeLow=0x620)) returned 1 [0032.133] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e788) returned 1 [0032.135] MoveFileW (lpExistingFileName="C:\\MSOCache\\All Users\\{90140000-0016-0409-1000-0000000FF1CE}-C\\ExcelMUI.xml" (normalized: "c:\\msocache\\all users\\{90140000-0016-0409-1000-0000000ff1ce}-c\\excelmui.xml"), lpNewFileName="C:\\MSOCache\\All Users\\{90140000-0016-0409-1000-0000000FF1CE}-C\\ExcelMUI.xml" (normalized: "c:\\msocache\\all users\\{90140000-0016-0409-1000-0000000ff1ce}-c\\excelmui.xml")) returned 1 [0032.136] GetFullPathNameW (in: lpFileName="C:\\MSOCache\\All Users\\{90140000-0016-0409-1000-0000000FF1CE}-C\\Setup.xml", nBufferLength=0x105, lpBuffer=0x31e20c, lpFilePart=0x0 | out: lpBuffer="C:\\MSOCache\\All Users\\{90140000-0016-0409-1000-0000000FF1CE}-C\\Setup.xml", lpFilePart=0x0) returned 0x48 [0032.136] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e700) returned 1 [0032.136] CreateFileW (lpFileName="C:\\MSOCache\\All Users\\{90140000-0016-0409-1000-0000000FF1CE}-C\\Setup.xml" (normalized: "c:\\msocache\\all users\\{90140000-0016-0409-1000-0000000ff1ce}-c\\setup.xml"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x268 [0032.137] GetFileType (hFile=0x268) returned 0x1 [0032.137] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e6fc) returned 1 [0032.137] GetFileType (hFile=0x268) returned 0x1 [0032.137] GetFileSize (in: hFile=0x268, lpFileSizeHigh=0x31e808 | out: lpFileSizeHigh=0x31e808*=0x0) returned 0x8f8 [0032.137] ReadFile (in: hFile=0x268, lpBuffer=0x26c49f0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x31e7b4, lpOverlapped=0x0 | out: lpBuffer=0x26c49f0*, lpNumberOfBytesRead=0x31e7b4*=0x8f8, lpOverlapped=0x0) returned 1 [0032.139] CloseHandle (hObject=0x268) returned 1 [0032.180] GetFullPathNameW (in: lpFileName="C:\\MSOCache\\All Users\\{90140000-0016-0409-1000-0000000FF1CE}-C\\Setup.xml", nBufferLength=0x105, lpBuffer=0x31e1f8, lpFilePart=0x0 | out: lpBuffer="C:\\MSOCache\\All Users\\{90140000-0016-0409-1000-0000000FF1CE}-C\\Setup.xml", lpFilePart=0x0) returned 0x48 [0032.180] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e6ec) returned 1 [0032.180] CreateFileW (lpFileName="C:\\MSOCache\\All Users\\{90140000-0016-0409-1000-0000000FF1CE}-C\\Setup.xml" (normalized: "c:\\msocache\\all users\\{90140000-0016-0409-1000-0000000ff1ce}-c\\setup.xml"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x268 [0032.181] GetFileType (hFile=0x268) returned 0x1 [0032.181] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e6e8) returned 1 [0032.181] GetFileType (hFile=0x268) returned 0x1 [0032.182] WriteFile (in: hFile=0x268, lpBuffer=0x2715604*, nNumberOfBytesToWrite=0x900, lpNumberOfBytesWritten=0x31e77c, lpOverlapped=0x0 | out: lpBuffer=0x2715604*, lpNumberOfBytesWritten=0x31e77c*=0x900, lpOverlapped=0x0) returned 1 [0032.182] CloseHandle (hObject=0x268) returned 1 [0032.184] GetFullPathNameW (in: lpFileName="C:\\MSOCache\\All Users\\{90140000-0016-0409-1000-0000000FF1CE}-C\\Setup.xml", nBufferLength=0x105, lpBuffer=0x31e32c, lpFilePart=0x0 | out: lpBuffer="C:\\MSOCache\\All Users\\{90140000-0016-0409-1000-0000000FF1CE}-C\\Setup.xml", lpFilePart=0x0) returned 0x48 [0032.184] GetFullPathNameW (in: lpFileName="C:\\MSOCache\\All Users\\{90140000-0016-0409-1000-0000000FF1CE}-C\\Setup.xml", nBufferLength=0x105, lpBuffer=0x31e32c, lpFilePart=0x0 | out: lpBuffer="C:\\MSOCache\\All Users\\{90140000-0016-0409-1000-0000000FF1CE}-C\\Setup.xml", lpFilePart=0x0) returned 0x48 [0032.184] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e78c) returned 1 [0032.184] GetFileAttributesExW (in: lpFileName="C:\\MSOCache\\All Users\\{90140000-0016-0409-1000-0000000FF1CE}-C\\Setup.xml" (normalized: "c:\\msocache\\all users\\{90140000-0016-0409-1000-0000000ff1ce}-c\\setup.xml"), fInfoLevelId=0x0, lpFileInformation=0x31e808 | out: lpFileInformation=0x31e808*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x43f88c00, ftCreationTime.dwHighDateTime=0x1cad04a, ftLastAccessTime.dwLowDateTime=0x43f88c00, ftLastAccessTime.dwHighDateTime=0x1cad04a, ftLastWriteTime.dwLowDateTime=0xf6a3b9a0, ftLastWriteTime.dwHighDateTime=0x1d6eb7e, nFileSizeHigh=0x0, nFileSizeLow=0x900)) returned 1 [0032.184] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e788) returned 1 [0032.184] MoveFileW (lpExistingFileName="C:\\MSOCache\\All Users\\{90140000-0016-0409-1000-0000000FF1CE}-C\\Setup.xml" (normalized: "c:\\msocache\\all users\\{90140000-0016-0409-1000-0000000ff1ce}-c\\setup.xml"), lpNewFileName="C:\\MSOCache\\All Users\\{90140000-0016-0409-1000-0000000FF1CE}-C\\Setup.xml" (normalized: "c:\\msocache\\all users\\{90140000-0016-0409-1000-0000000ff1ce}-c\\setup.xml")) returned 1 [0032.184] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e834) returned 1 [0032.184] GetFullPathNameW (in: lpFileName="C:\\MSOCache\\All Users\\{90140000-0018-0409-1000-0000000FF1CE}-C", nBufferLength=0x105, lpBuffer=0x31e33c, lpFilePart=0x0 | out: lpBuffer="C:\\MSOCache\\All Users\\{90140000-0018-0409-1000-0000000FF1CE}-C", lpFilePart=0x0) returned 0x3e [0032.184] GetFullPathNameW (in: lpFileName="C:\\MSOCache\\All Users\\{90140000-0018-0409-1000-0000000FF1CE}-C\\", nBufferLength=0x105, lpBuffer=0x31e310, lpFilePart=0x0 | out: lpBuffer="C:\\MSOCache\\All Users\\{90140000-0018-0409-1000-0000000FF1CE}-C\\", lpFilePart=0x0) returned 0x3f [0032.185] FindFirstFileW (in: lpFileName="C:\\MSOCache\\All Users\\{90140000-0018-0409-1000-0000000FF1CE}-C\\*", lpFindFileData=0x31e55c | out: lpFindFileData=0x31e55c*(dwFileAttributes=0x2011, ftCreationTime.dwLowDateTime=0xe8729610, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xecdfa490, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xecdfa490, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x381cc0 [0032.187] FindNextFileW (in: hFindFile=0x381cc0, lpFindFileData=0x31e56c | out: lpFindFileData=0x31e56c*(dwFileAttributes=0x2011, ftCreationTime.dwLowDateTime=0xe8729610, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xecdfa490, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xecdfa490, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0032.187] FindNextFileW (in: hFindFile=0x381cc0, lpFindFileData=0x31e56c | out: lpFindFileData=0x31e56c*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x3e02ab00, ftCreationTime.dwHighDateTime=0x1cad04a, ftLastAccessTime.dwLowDateTime=0x3e02ab00, ftLastAccessTime.dwHighDateTime=0x1cad04a, ftLastWriteTime.dwLowDateTime=0xe874f770, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x263400, dwReserved0=0x0, dwReserved1=0x0, cFileName="PowerPointMUI.msi", cAlternateFileName="POWERP~1.MSI")) returned 1 [0032.187] FindNextFileW (in: hFindFile=0x381cc0, lpFindFileData=0x31e56c | out: lpFindFileData=0x31e56c*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x4529b900, ftCreationTime.dwHighDateTime=0x1cad04a, ftLastAccessTime.dwLowDateTime=0x4529b900, ftLastAccessTime.dwHighDateTime=0x1cad04a, ftLastWriteTime.dwLowDateTime=0xe8728670, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x5aa, dwReserved0=0x0, dwReserved1=0x0, cFileName="PowerPointMUI.xml", cAlternateFileName="POWERP~1.XML")) returned 1 [0032.187] FindNextFileW (in: hFindFile=0x381cc0, lpFindFileData=0x31e56c | out: lpFindFileData=0x31e56c*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x2d523500, ftCreationTime.dwHighDateTime=0x1cad04a, ftLastAccessTime.dwLowDateTime=0x2d523500, ftLastAccessTime.dwHighDateTime=0x1cad04a, ftLastWriteTime.dwLowDateTime=0xe8b079d0, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x431a290, dwReserved0=0x0, dwReserved1=0x0, cFileName="PptLR.cab", cAlternateFileName="")) returned 1 [0032.188] FindNextFileW (in: hFindFile=0x381cc0, lpFindFileData=0x31e56c | out: lpFindFileData=0x31e56c*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x43f88c00, ftCreationTime.dwHighDateTime=0x1cad04a, ftLastAccessTime.dwLowDateTime=0x43f88c00, ftLastAccessTime.dwHighDateTime=0x1cad04a, ftLastWriteTime.dwLowDateTime=0xecdfa490, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x75e, dwReserved0=0x0, dwReserved1=0x0, cFileName="Setup.xml", cAlternateFileName="")) returned 1 [0032.188] FindNextFileW (in: hFindFile=0x381cc0, lpFindFileData=0x31e56c | out: lpFindFileData=0x31e56c*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0032.188] FindClose (in: hFindFile=0x381cc0 | out: hFindFile=0x381cc0) returned 1 [0032.188] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e7f4) returned 1 [0032.188] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e800) returned 1 [0032.188] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e834) returned 1 [0032.189] GetFullPathNameW (in: lpFileName="C:\\MSOCache\\All Users\\{90140000-0018-0409-1000-0000000FF1CE}-C", nBufferLength=0x105, lpBuffer=0x31e33c, lpFilePart=0x0 | out: lpBuffer="C:\\MSOCache\\All Users\\{90140000-0018-0409-1000-0000000FF1CE}-C", lpFilePart=0x0) returned 0x3e [0032.189] GetFullPathNameW (in: lpFileName="C:\\MSOCache\\All Users\\{90140000-0018-0409-1000-0000000FF1CE}-C\\", nBufferLength=0x105, lpBuffer=0x31e310, lpFilePart=0x0 | out: lpBuffer="C:\\MSOCache\\All Users\\{90140000-0018-0409-1000-0000000FF1CE}-C\\", lpFilePart=0x0) returned 0x3f [0032.189] FindFirstFileW (in: lpFileName="C:\\MSOCache\\All Users\\{90140000-0018-0409-1000-0000000FF1CE}-C\\*", lpFindFileData=0x31e55c | out: lpFindFileData=0x31e55c*(dwFileAttributes=0x2011, ftCreationTime.dwLowDateTime=0xe8729610, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xecdfa490, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xecdfa490, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x381cc0 [0032.189] FindNextFileW (in: hFindFile=0x381cc0, lpFindFileData=0x31e56c | out: lpFindFileData=0x31e56c*(dwFileAttributes=0x2011, ftCreationTime.dwLowDateTime=0xe8729610, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xecdfa490, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xecdfa490, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0032.190] FindNextFileW (in: hFindFile=0x381cc0, lpFindFileData=0x31e56c | out: lpFindFileData=0x31e56c*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x3e02ab00, ftCreationTime.dwHighDateTime=0x1cad04a, ftLastAccessTime.dwLowDateTime=0x3e02ab00, ftLastAccessTime.dwHighDateTime=0x1cad04a, ftLastWriteTime.dwLowDateTime=0xe874f770, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x263400, dwReserved0=0x0, dwReserved1=0x0, cFileName="PowerPointMUI.msi", cAlternateFileName="POWERP~1.MSI")) returned 1 [0032.190] FindNextFileW (in: hFindFile=0x381cc0, lpFindFileData=0x31e56c | out: lpFindFileData=0x31e56c*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x4529b900, ftCreationTime.dwHighDateTime=0x1cad04a, ftLastAccessTime.dwLowDateTime=0x4529b900, ftLastAccessTime.dwHighDateTime=0x1cad04a, ftLastWriteTime.dwLowDateTime=0xe8728670, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x5aa, dwReserved0=0x0, dwReserved1=0x0, cFileName="PowerPointMUI.xml", cAlternateFileName="POWERP~1.XML")) returned 1 [0032.190] FindNextFileW (in: hFindFile=0x381cc0, lpFindFileData=0x31e56c | out: lpFindFileData=0x31e56c*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x2d523500, ftCreationTime.dwHighDateTime=0x1cad04a, ftLastAccessTime.dwLowDateTime=0x2d523500, ftLastAccessTime.dwHighDateTime=0x1cad04a, ftLastWriteTime.dwLowDateTime=0xe8b079d0, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x431a290, dwReserved0=0x0, dwReserved1=0x0, cFileName="PptLR.cab", cAlternateFileName="")) returned 1 [0032.190] FindNextFileW (in: hFindFile=0x381cc0, lpFindFileData=0x31e56c | out: lpFindFileData=0x31e56c*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x43f88c00, ftCreationTime.dwHighDateTime=0x1cad04a, ftLastAccessTime.dwLowDateTime=0x43f88c00, ftLastAccessTime.dwHighDateTime=0x1cad04a, ftLastWriteTime.dwLowDateTime=0xecdfa490, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x75e, dwReserved0=0x0, dwReserved1=0x0, cFileName="Setup.xml", cAlternateFileName="")) returned 1 [0032.190] FindNextFileW (in: hFindFile=0x381cc0, lpFindFileData=0x31e56c | out: lpFindFileData=0x31e56c*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x43f88c00, ftCreationTime.dwHighDateTime=0x1cad04a, ftLastAccessTime.dwLowDateTime=0x43f88c00, ftLastAccessTime.dwHighDateTime=0x1cad04a, ftLastWriteTime.dwLowDateTime=0xecdfa490, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x75e, dwReserved0=0x0, dwReserved1=0x0, cFileName="Setup.xml", cAlternateFileName="")) returned 0 [0032.190] FindClose (in: hFindFile=0x381cc0 | out: hFindFile=0x381cc0) returned 1 [0032.191] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e7f4) returned 1 [0032.191] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e800) returned 1 [0032.191] GetFullPathNameW (in: lpFileName="C:\\MSOCache\\All Users\\{90140000-0018-0409-1000-0000000FF1CE}-C\\PowerPointMUI.xml", nBufferLength=0x105, lpBuffer=0x31e20c, lpFilePart=0x0 | out: lpBuffer="C:\\MSOCache\\All Users\\{90140000-0018-0409-1000-0000000FF1CE}-C\\PowerPointMUI.xml", lpFilePart=0x0) returned 0x50 [0032.191] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e700) returned 1 [0032.191] CreateFileW (lpFileName="C:\\MSOCache\\All Users\\{90140000-0018-0409-1000-0000000FF1CE}-C\\PowerPointMUI.xml" (normalized: "c:\\msocache\\all users\\{90140000-0018-0409-1000-0000000ff1ce}-c\\powerpointmui.xml"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x268 [0032.192] GetFileType (hFile=0x268) returned 0x1 [0032.192] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e6fc) returned 1 [0032.192] GetFileType (hFile=0x268) returned 0x1 [0032.192] GetFileSize (in: hFile=0x268, lpFileSizeHigh=0x31e808 | out: lpFileSizeHigh=0x31e808*=0x0) returned 0x5aa [0032.192] ReadFile (in: hFile=0x268, lpBuffer=0x27190d8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x31e7b4, lpOverlapped=0x0 | out: lpBuffer=0x27190d8*, lpNumberOfBytesRead=0x31e7b4*=0x5aa, lpOverlapped=0x0) returned 1 [0032.194] CloseHandle (hObject=0x268) returned 1 [0032.236] GetFullPathNameW (in: lpFileName="C:\\MSOCache\\All Users\\{90140000-0018-0409-1000-0000000FF1CE}-C\\PowerPointMUI.xml", nBufferLength=0x105, lpBuffer=0x31e1f8, lpFilePart=0x0 | out: lpBuffer="C:\\MSOCache\\All Users\\{90140000-0018-0409-1000-0000000FF1CE}-C\\PowerPointMUI.xml", lpFilePart=0x0) returned 0x50 [0032.236] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e6ec) returned 1 [0032.236] CreateFileW (lpFileName="C:\\MSOCache\\All Users\\{90140000-0018-0409-1000-0000000FF1CE}-C\\PowerPointMUI.xml" (normalized: "c:\\msocache\\all users\\{90140000-0018-0409-1000-0000000ff1ce}-c\\powerpointmui.xml"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x268 [0032.237] GetFileType (hFile=0x268) returned 0x1 [0032.237] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e6e8) returned 1 [0032.237] GetFileType (hFile=0x268) returned 0x1 [0032.237] WriteFile (in: hFile=0x268, lpBuffer=0x2768c7c*, nNumberOfBytesToWrite=0x5b0, lpNumberOfBytesWritten=0x31e77c, lpOverlapped=0x0 | out: lpBuffer=0x2768c7c*, lpNumberOfBytesWritten=0x31e77c*=0x5b0, lpOverlapped=0x0) returned 1 [0032.238] CloseHandle (hObject=0x268) returned 1 [0032.238] GetFullPathNameW (in: lpFileName="C:\\MSOCache\\All Users\\{90140000-0018-0409-1000-0000000FF1CE}-C\\PowerPointMUI.xml", nBufferLength=0x105, lpBuffer=0x31e32c, lpFilePart=0x0 | out: lpBuffer="C:\\MSOCache\\All Users\\{90140000-0018-0409-1000-0000000FF1CE}-C\\PowerPointMUI.xml", lpFilePart=0x0) returned 0x50 [0032.238] GetFullPathNameW (in: lpFileName="C:\\MSOCache\\All Users\\{90140000-0018-0409-1000-0000000FF1CE}-C\\PowerPointMUI.xml", nBufferLength=0x105, lpBuffer=0x31e32c, lpFilePart=0x0 | out: lpBuffer="C:\\MSOCache\\All Users\\{90140000-0018-0409-1000-0000000FF1CE}-C\\PowerPointMUI.xml", lpFilePart=0x0) returned 0x50 [0032.239] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e78c) returned 1 [0032.239] GetFileAttributesExW (in: lpFileName="C:\\MSOCache\\All Users\\{90140000-0018-0409-1000-0000000FF1CE}-C\\PowerPointMUI.xml" (normalized: "c:\\msocache\\all users\\{90140000-0018-0409-1000-0000000ff1ce}-c\\powerpointmui.xml"), fInfoLevelId=0x0, lpFileInformation=0x31e808 | out: lpFileInformation=0x31e808*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x4529b900, ftCreationTime.dwHighDateTime=0x1cad04a, ftLastAccessTime.dwLowDateTime=0x4529b900, ftLastAccessTime.dwHighDateTime=0x1cad04a, ftLastWriteTime.dwLowDateTime=0xf6aaddc0, ftLastWriteTime.dwHighDateTime=0x1d6eb7e, nFileSizeHigh=0x0, nFileSizeLow=0x5b0)) returned 1 [0032.239] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e788) returned 1 [0032.239] MoveFileW (lpExistingFileName="C:\\MSOCache\\All Users\\{90140000-0018-0409-1000-0000000FF1CE}-C\\PowerPointMUI.xml" (normalized: "c:\\msocache\\all users\\{90140000-0018-0409-1000-0000000ff1ce}-c\\powerpointmui.xml"), lpNewFileName="C:\\MSOCache\\All Users\\{90140000-0018-0409-1000-0000000FF1CE}-C\\PowerPointMUI.xml" (normalized: "c:\\msocache\\all users\\{90140000-0018-0409-1000-0000000ff1ce}-c\\powerpointmui.xml")) returned 1 [0032.239] GetFullPathNameW (in: lpFileName="C:\\MSOCache\\All Users\\{90140000-0018-0409-1000-0000000FF1CE}-C\\Setup.xml", nBufferLength=0x105, lpBuffer=0x31e20c, lpFilePart=0x0 | out: lpBuffer="C:\\MSOCache\\All Users\\{90140000-0018-0409-1000-0000000FF1CE}-C\\Setup.xml", lpFilePart=0x0) returned 0x48 [0032.239] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e700) returned 1 [0032.239] CreateFileW (lpFileName="C:\\MSOCache\\All Users\\{90140000-0018-0409-1000-0000000FF1CE}-C\\Setup.xml" (normalized: "c:\\msocache\\all users\\{90140000-0018-0409-1000-0000000ff1ce}-c\\setup.xml"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x268 [0032.239] GetFileType (hFile=0x268) returned 0x1 [0032.240] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e6fc) returned 1 [0032.240] GetFileType (hFile=0x268) returned 0x1 [0032.240] GetFileSize (in: hFile=0x268, lpFileSizeHigh=0x31e808 | out: lpFileSizeHigh=0x31e808*=0x0) returned 0x75e [0032.240] ReadFile (in: hFile=0x268, lpBuffer=0x276a6a0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x31e7b4, lpOverlapped=0x0 | out: lpBuffer=0x276a6a0*, lpNumberOfBytesRead=0x31e7b4*=0x75e, lpOverlapped=0x0) returned 1 [0032.241] CloseHandle (hObject=0x268) returned 1 [0032.300] GetFullPathNameW (in: lpFileName="C:\\MSOCache\\All Users\\{90140000-0018-0409-1000-0000000FF1CE}-C\\Setup.xml", nBufferLength=0x105, lpBuffer=0x31e1f8, lpFilePart=0x0 | out: lpBuffer="C:\\MSOCache\\All Users\\{90140000-0018-0409-1000-0000000FF1CE}-C\\Setup.xml", lpFilePart=0x0) returned 0x48 [0032.300] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e6ec) returned 1 [0032.300] CreateFileW (lpFileName="C:\\MSOCache\\All Users\\{90140000-0018-0409-1000-0000000FF1CE}-C\\Setup.xml" (normalized: "c:\\msocache\\all users\\{90140000-0018-0409-1000-0000000ff1ce}-c\\setup.xml"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x268 [0032.301] GetFileType (hFile=0x268) returned 0x1 [0032.301] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e6e8) returned 1 [0032.301] GetFileType (hFile=0x268) returned 0x1 [0032.301] WriteFile (in: hFile=0x268, lpBuffer=0x27baa90*, nNumberOfBytesToWrite=0x760, lpNumberOfBytesWritten=0x31e77c, lpOverlapped=0x0 | out: lpBuffer=0x27baa90*, lpNumberOfBytesWritten=0x31e77c*=0x760, lpOverlapped=0x0) returned 1 [0032.302] CloseHandle (hObject=0x268) returned 1 [0032.303] GetFullPathNameW (in: lpFileName="C:\\MSOCache\\All Users\\{90140000-0018-0409-1000-0000000FF1CE}-C\\Setup.xml", nBufferLength=0x105, lpBuffer=0x31e32c, lpFilePart=0x0 | out: lpBuffer="C:\\MSOCache\\All Users\\{90140000-0018-0409-1000-0000000FF1CE}-C\\Setup.xml", lpFilePart=0x0) returned 0x48 [0032.303] GetFullPathNameW (in: lpFileName="C:\\MSOCache\\All Users\\{90140000-0018-0409-1000-0000000FF1CE}-C\\Setup.xml", nBufferLength=0x105, lpBuffer=0x31e32c, lpFilePart=0x0 | out: lpBuffer="C:\\MSOCache\\All Users\\{90140000-0018-0409-1000-0000000FF1CE}-C\\Setup.xml", lpFilePart=0x0) returned 0x48 [0032.303] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e78c) returned 1 [0032.303] GetFileAttributesExW (in: lpFileName="C:\\MSOCache\\All Users\\{90140000-0018-0409-1000-0000000FF1CE}-C\\Setup.xml" (normalized: "c:\\msocache\\all users\\{90140000-0018-0409-1000-0000000ff1ce}-c\\setup.xml"), fInfoLevelId=0x0, lpFileInformation=0x31e808 | out: lpFileInformation=0x31e808*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x43f88c00, ftCreationTime.dwHighDateTime=0x1cad04a, ftLastAccessTime.dwLowDateTime=0x43f88c00, ftLastAccessTime.dwHighDateTime=0x1cad04a, ftLastWriteTime.dwLowDateTime=0xf6b46340, ftLastWriteTime.dwHighDateTime=0x1d6eb7e, nFileSizeHigh=0x0, nFileSizeLow=0x760)) returned 1 [0032.303] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e788) returned 1 [0032.303] MoveFileW (lpExistingFileName="C:\\MSOCache\\All Users\\{90140000-0018-0409-1000-0000000FF1CE}-C\\Setup.xml" (normalized: "c:\\msocache\\all users\\{90140000-0018-0409-1000-0000000ff1ce}-c\\setup.xml"), lpNewFileName="C:\\MSOCache\\All Users\\{90140000-0018-0409-1000-0000000FF1CE}-C\\Setup.xml" (normalized: "c:\\msocache\\all users\\{90140000-0018-0409-1000-0000000ff1ce}-c\\setup.xml")) returned 1 [0032.304] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e834) returned 1 [0032.304] GetFullPathNameW (in: lpFileName="C:\\MSOCache\\All Users\\{90140000-0019-0409-1000-0000000FF1CE}-C", nBufferLength=0x105, lpBuffer=0x31e33c, lpFilePart=0x0 | out: lpBuffer="C:\\MSOCache\\All Users\\{90140000-0019-0409-1000-0000000FF1CE}-C", lpFilePart=0x0) returned 0x3e [0032.304] GetFullPathNameW (in: lpFileName="C:\\MSOCache\\All Users\\{90140000-0019-0409-1000-0000000FF1CE}-C\\", nBufferLength=0x105, lpBuffer=0x31e310, lpFilePart=0x0 | out: lpBuffer="C:\\MSOCache\\All Users\\{90140000-0019-0409-1000-0000000FF1CE}-C\\", lpFilePart=0x0) returned 0x3f [0032.304] FindFirstFileW (in: lpFileName="C:\\MSOCache\\All Users\\{90140000-0019-0409-1000-0000000FF1CE}-C\\*", lpFindFileData=0x31e55c | out: lpFindFileData=0x31e55c*(dwFileAttributes=0x2011, ftCreationTime.dwLowDateTime=0xfc3e6570, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xfc8a9170, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xfc8a9170, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x381dc0 [0032.307] FindNextFileW (in: hFindFile=0x381dc0, lpFindFileData=0x31e56c | out: lpFindFileData=0x31e56c*(dwFileAttributes=0x2011, ftCreationTime.dwLowDateTime=0xfc3e6570, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xfc8a9170, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xfc8a9170, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0032.307] FindNextFileW (in: hFindFile=0x381dc0, lpFindFileData=0x31e56c | out: lpFindFileData=0x31e56c*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x3e02ab00, ftCreationTime.dwHighDateTime=0x1cad04a, ftLastAccessTime.dwLowDateTime=0x3e02ab00, ftLastAccessTime.dwHighDateTime=0x1cad04a, ftLastWriteTime.dwLowDateTime=0xfc40b730, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x265c00, dwReserved0=0x0, dwReserved1=0x0, cFileName="PublisherMUI.msi", cAlternateFileName="PUBLIS~1.MSI")) returned 1 [0032.307] FindNextFileW (in: hFindFile=0x381dc0, lpFindFileData=0x31e56c | out: lpFindFileData=0x31e56c*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x4529b900, ftCreationTime.dwHighDateTime=0x1cad04a, ftLastAccessTime.dwLowDateTime=0x4529b900, ftLastAccessTime.dwHighDateTime=0x1cad04a, ftLastWriteTime.dwLowDateTime=0xfc3e4630, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x5aa, dwReserved0=0x0, dwReserved1=0x0, cFileName="PublisherMUI.xml", cAlternateFileName="PUBLIS~1.XML")) returned 1 [0032.307] FindNextFileW (in: hFindFile=0x381dc0, lpFindFileData=0x31e56c | out: lpFindFileData=0x31e56c*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x3cd17e00, ftCreationTime.dwHighDateTime=0x1cad04a, ftLastAccessTime.dwLowDateTime=0x3cd17e00, ftLastAccessTime.dwHighDateTime=0x1cad04a, ftLastWriteTime.dwLowDateTime=0xfc47e320, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x97f3f4, dwReserved0=0x0, dwReserved1=0x0, cFileName="PubLR.cab", cAlternateFileName="")) returned 1 [0032.307] FindNextFileW (in: hFindFile=0x381dc0, lpFindFileData=0x31e56c | out: lpFindFileData=0x31e56c*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x43f88c00, ftCreationTime.dwHighDateTime=0x1cad04a, ftLastAccessTime.dwLowDateTime=0x43f88c00, ftLastAccessTime.dwHighDateTime=0x1cad04a, ftLastWriteTime.dwLowDateTime=0xfc8a9170, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x648, dwReserved0=0x0, dwReserved1=0x0, cFileName="Setup.xml", cAlternateFileName="")) returned 1 [0032.307] FindNextFileW (in: hFindFile=0x381dc0, lpFindFileData=0x31e56c | out: lpFindFileData=0x31e56c*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0032.307] FindClose (in: hFindFile=0x381dc0 | out: hFindFile=0x381dc0) returned 1 [0032.311] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e7f4) returned 1 [0032.311] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e800) returned 1 [0032.311] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e834) returned 1 [0032.311] GetFullPathNameW (in: lpFileName="C:\\MSOCache\\All Users\\{90140000-0019-0409-1000-0000000FF1CE}-C", nBufferLength=0x105, lpBuffer=0x31e33c, lpFilePart=0x0 | out: lpBuffer="C:\\MSOCache\\All Users\\{90140000-0019-0409-1000-0000000FF1CE}-C", lpFilePart=0x0) returned 0x3e [0032.311] GetFullPathNameW (in: lpFileName="C:\\MSOCache\\All Users\\{90140000-0019-0409-1000-0000000FF1CE}-C\\", nBufferLength=0x105, lpBuffer=0x31e310, lpFilePart=0x0 | out: lpBuffer="C:\\MSOCache\\All Users\\{90140000-0019-0409-1000-0000000FF1CE}-C\\", lpFilePart=0x0) returned 0x3f [0032.311] FindFirstFileW (in: lpFileName="C:\\MSOCache\\All Users\\{90140000-0019-0409-1000-0000000FF1CE}-C\\*", lpFindFileData=0x31e55c | out: lpFindFileData=0x31e55c*(dwFileAttributes=0x2011, ftCreationTime.dwLowDateTime=0xfc3e6570, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xfc8a9170, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xfc8a9170, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x381dc0 [0032.312] FindNextFileW (in: hFindFile=0x381dc0, lpFindFileData=0x31e56c | out: lpFindFileData=0x31e56c*(dwFileAttributes=0x2011, ftCreationTime.dwLowDateTime=0xfc3e6570, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xfc8a9170, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xfc8a9170, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0032.312] FindNextFileW (in: hFindFile=0x381dc0, lpFindFileData=0x31e56c | out: lpFindFileData=0x31e56c*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x3e02ab00, ftCreationTime.dwHighDateTime=0x1cad04a, ftLastAccessTime.dwLowDateTime=0x3e02ab00, ftLastAccessTime.dwHighDateTime=0x1cad04a, ftLastWriteTime.dwLowDateTime=0xfc40b730, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x265c00, dwReserved0=0x0, dwReserved1=0x0, cFileName="PublisherMUI.msi", cAlternateFileName="PUBLIS~1.MSI")) returned 1 [0032.312] FindNextFileW (in: hFindFile=0x381dc0, lpFindFileData=0x31e56c | out: lpFindFileData=0x31e56c*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x4529b900, ftCreationTime.dwHighDateTime=0x1cad04a, ftLastAccessTime.dwLowDateTime=0x4529b900, ftLastAccessTime.dwHighDateTime=0x1cad04a, ftLastWriteTime.dwLowDateTime=0xfc3e4630, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x5aa, dwReserved0=0x0, dwReserved1=0x0, cFileName="PublisherMUI.xml", cAlternateFileName="PUBLIS~1.XML")) returned 1 [0032.313] FindNextFileW (in: hFindFile=0x381dc0, lpFindFileData=0x31e56c | out: lpFindFileData=0x31e56c*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x3cd17e00, ftCreationTime.dwHighDateTime=0x1cad04a, ftLastAccessTime.dwLowDateTime=0x3cd17e00, ftLastAccessTime.dwHighDateTime=0x1cad04a, ftLastWriteTime.dwLowDateTime=0xfc47e320, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x97f3f4, dwReserved0=0x0, dwReserved1=0x0, cFileName="PubLR.cab", cAlternateFileName="")) returned 1 [0032.313] FindNextFileW (in: hFindFile=0x381dc0, lpFindFileData=0x31e56c | out: lpFindFileData=0x31e56c*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x43f88c00, ftCreationTime.dwHighDateTime=0x1cad04a, ftLastAccessTime.dwLowDateTime=0x43f88c00, ftLastAccessTime.dwHighDateTime=0x1cad04a, ftLastWriteTime.dwLowDateTime=0xfc8a9170, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x648, dwReserved0=0x0, dwReserved1=0x0, cFileName="Setup.xml", cAlternateFileName="")) returned 1 [0032.313] FindNextFileW (in: hFindFile=0x381dc0, lpFindFileData=0x31e56c | out: lpFindFileData=0x31e56c*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x43f88c00, ftCreationTime.dwHighDateTime=0x1cad04a, ftLastAccessTime.dwLowDateTime=0x43f88c00, ftLastAccessTime.dwHighDateTime=0x1cad04a, ftLastWriteTime.dwLowDateTime=0xfc8a9170, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x648, dwReserved0=0x0, dwReserved1=0x0, cFileName="Setup.xml", cAlternateFileName="")) returned 0 [0032.313] FindClose (in: hFindFile=0x381dc0 | out: hFindFile=0x381dc0) returned 1 [0032.314] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e7f4) returned 1 [0032.314] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e800) returned 1 [0032.314] GetFullPathNameW (in: lpFileName="C:\\MSOCache\\All Users\\{90140000-0019-0409-1000-0000000FF1CE}-C\\PublisherMUI.xml", nBufferLength=0x105, lpBuffer=0x31e20c, lpFilePart=0x0 | out: lpBuffer="C:\\MSOCache\\All Users\\{90140000-0019-0409-1000-0000000FF1CE}-C\\PublisherMUI.xml", lpFilePart=0x0) returned 0x4f [0032.314] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e700) returned 1 [0032.314] CreateFileW (lpFileName="C:\\MSOCache\\All Users\\{90140000-0019-0409-1000-0000000FF1CE}-C\\PublisherMUI.xml" (normalized: "c:\\msocache\\all users\\{90140000-0019-0409-1000-0000000ff1ce}-c\\publishermui.xml"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x268 [0032.315] GetFileType (hFile=0x268) returned 0x1 [0032.315] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e6fc) returned 1 [0032.315] GetFileType (hFile=0x268) returned 0x1 [0032.315] GetFileSize (in: hFile=0x268, lpFileSizeHigh=0x31e808 | out: lpFileSizeHigh=0x31e808*=0x0) returned 0x5aa [0032.315] ReadFile (in: hFile=0x268, lpBuffer=0x27be540, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x31e7b4, lpOverlapped=0x0 | out: lpBuffer=0x27be540*, lpNumberOfBytesRead=0x31e7b4*=0x5aa, lpOverlapped=0x0) returned 1 [0032.317] CloseHandle (hObject=0x268) returned 1 [0032.359] GetFullPathNameW (in: lpFileName="C:\\MSOCache\\All Users\\{90140000-0019-0409-1000-0000000FF1CE}-C\\PublisherMUI.xml", nBufferLength=0x105, lpBuffer=0x31e1f8, lpFilePart=0x0 | out: lpBuffer="C:\\MSOCache\\All Users\\{90140000-0019-0409-1000-0000000FF1CE}-C\\PublisherMUI.xml", lpFilePart=0x0) returned 0x4f [0032.359] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e6ec) returned 1 [0032.359] CreateFileW (lpFileName="C:\\MSOCache\\All Users\\{90140000-0019-0409-1000-0000000FF1CE}-C\\PublisherMUI.xml" (normalized: "c:\\msocache\\all users\\{90140000-0019-0409-1000-0000000ff1ce}-c\\publishermui.xml"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x268 [0032.360] GetFileType (hFile=0x268) returned 0x1 [0032.360] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e6e8) returned 1 [0032.360] GetFileType (hFile=0x268) returned 0x1 [0032.360] WriteFile (in: hFile=0x268, lpBuffer=0x280e0e0*, nNumberOfBytesToWrite=0x5b0, lpNumberOfBytesWritten=0x31e77c, lpOverlapped=0x0 | out: lpBuffer=0x280e0e0*, lpNumberOfBytesWritten=0x31e77c*=0x5b0, lpOverlapped=0x0) returned 1 [0032.361] CloseHandle (hObject=0x268) returned 1 [0032.362] GetFullPathNameW (in: lpFileName="C:\\MSOCache\\All Users\\{90140000-0019-0409-1000-0000000FF1CE}-C\\PublisherMUI.xml", nBufferLength=0x105, lpBuffer=0x31e32c, lpFilePart=0x0 | out: lpBuffer="C:\\MSOCache\\All Users\\{90140000-0019-0409-1000-0000000FF1CE}-C\\PublisherMUI.xml", lpFilePart=0x0) returned 0x4f [0032.362] GetFullPathNameW (in: lpFileName="C:\\MSOCache\\All Users\\{90140000-0019-0409-1000-0000000FF1CE}-C\\PublisherMUI.xml", nBufferLength=0x105, lpBuffer=0x31e32c, lpFilePart=0x0 | out: lpBuffer="C:\\MSOCache\\All Users\\{90140000-0019-0409-1000-0000000FF1CE}-C\\PublisherMUI.xml", lpFilePart=0x0) returned 0x4f [0032.362] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e78c) returned 1 [0032.362] GetFileAttributesExW (in: lpFileName="C:\\MSOCache\\All Users\\{90140000-0019-0409-1000-0000000FF1CE}-C\\PublisherMUI.xml" (normalized: "c:\\msocache\\all users\\{90140000-0019-0409-1000-0000000ff1ce}-c\\publishermui.xml"), fInfoLevelId=0x0, lpFileInformation=0x31e808 | out: lpFileInformation=0x31e808*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x4529b900, ftCreationTime.dwHighDateTime=0x1cad04a, ftLastAccessTime.dwLowDateTime=0x4529b900, ftLastAccessTime.dwHighDateTime=0x1cad04a, ftLastWriteTime.dwLowDateTime=0xf6bde8c0, ftLastWriteTime.dwHighDateTime=0x1d6eb7e, nFileSizeHigh=0x0, nFileSizeLow=0x5b0)) returned 1 [0032.362] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e788) returned 1 [0032.362] MoveFileW (lpExistingFileName="C:\\MSOCache\\All Users\\{90140000-0019-0409-1000-0000000FF1CE}-C\\PublisherMUI.xml" (normalized: "c:\\msocache\\all users\\{90140000-0019-0409-1000-0000000ff1ce}-c\\publishermui.xml"), lpNewFileName="C:\\MSOCache\\All Users\\{90140000-0019-0409-1000-0000000FF1CE}-C\\PublisherMUI.xml" (normalized: "c:\\msocache\\all users\\{90140000-0019-0409-1000-0000000ff1ce}-c\\publishermui.xml")) returned 1 [0032.363] GetFullPathNameW (in: lpFileName="C:\\MSOCache\\All Users\\{90140000-0019-0409-1000-0000000FF1CE}-C\\Setup.xml", nBufferLength=0x105, lpBuffer=0x31e20c, lpFilePart=0x0 | out: lpBuffer="C:\\MSOCache\\All Users\\{90140000-0019-0409-1000-0000000FF1CE}-C\\Setup.xml", lpFilePart=0x0) returned 0x48 [0032.363] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e700) returned 1 [0032.363] CreateFileW (lpFileName="C:\\MSOCache\\All Users\\{90140000-0019-0409-1000-0000000FF1CE}-C\\Setup.xml" (normalized: "c:\\msocache\\all users\\{90140000-0019-0409-1000-0000000ff1ce}-c\\setup.xml"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x268 [0032.363] GetFileType (hFile=0x268) returned 0x1 [0032.363] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e6fc) returned 1 [0032.363] GetFileType (hFile=0x268) returned 0x1 [0032.363] GetFileSize (in: hFile=0x268, lpFileSizeHigh=0x31e808 | out: lpFileSizeHigh=0x31e808*=0x0) returned 0x648 [0032.363] ReadFile (in: hFile=0x268, lpBuffer=0x280f9e4, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x31e7b4, lpOverlapped=0x0 | out: lpBuffer=0x280f9e4*, lpNumberOfBytesRead=0x31e7b4*=0x648, lpOverlapped=0x0) returned 1 [0032.365] CloseHandle (hObject=0x268) returned 1 [0032.418] GetFullPathNameW (in: lpFileName="C:\\MSOCache\\All Users\\{90140000-0019-0409-1000-0000000FF1CE}-C\\Setup.xml", nBufferLength=0x105, lpBuffer=0x31e1f8, lpFilePart=0x0 | out: lpBuffer="C:\\MSOCache\\All Users\\{90140000-0019-0409-1000-0000000FF1CE}-C\\Setup.xml", lpFilePart=0x0) returned 0x48 [0032.418] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e6ec) returned 1 [0032.418] CreateFileW (lpFileName="C:\\MSOCache\\All Users\\{90140000-0019-0409-1000-0000000FF1CE}-C\\Setup.xml" (normalized: "c:\\msocache\\all users\\{90140000-0019-0409-1000-0000000ff1ce}-c\\setup.xml"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x224 [0032.419] GetFileType (hFile=0x224) returned 0x1 [0032.419] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e6e8) returned 1 [0032.419] GetFileType (hFile=0x224) returned 0x1 [0032.419] WriteFile (in: hFile=0x224, lpBuffer=0x26795e8*, nNumberOfBytesToWrite=0x650, lpNumberOfBytesWritten=0x31e77c, lpOverlapped=0x0 | out: lpBuffer=0x26795e8*, lpNumberOfBytesWritten=0x31e77c*=0x650, lpOverlapped=0x0) returned 1 [0032.420] CloseHandle (hObject=0x224) returned 1 [0032.421] GetFullPathNameW (in: lpFileName="C:\\MSOCache\\All Users\\{90140000-0019-0409-1000-0000000FF1CE}-C\\Setup.xml", nBufferLength=0x105, lpBuffer=0x31e32c, lpFilePart=0x0 | out: lpBuffer="C:\\MSOCache\\All Users\\{90140000-0019-0409-1000-0000000FF1CE}-C\\Setup.xml", lpFilePart=0x0) returned 0x48 [0032.421] GetFullPathNameW (in: lpFileName="C:\\MSOCache\\All Users\\{90140000-0019-0409-1000-0000000FF1CE}-C\\Setup.xml", nBufferLength=0x105, lpBuffer=0x31e32c, lpFilePart=0x0 | out: lpBuffer="C:\\MSOCache\\All Users\\{90140000-0019-0409-1000-0000000FF1CE}-C\\Setup.xml", lpFilePart=0x0) returned 0x48 [0032.421] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e78c) returned 1 [0032.421] GetFileAttributesExW (in: lpFileName="C:\\MSOCache\\All Users\\{90140000-0019-0409-1000-0000000FF1CE}-C\\Setup.xml" (normalized: "c:\\msocache\\all users\\{90140000-0019-0409-1000-0000000ff1ce}-c\\setup.xml"), fInfoLevelId=0x0, lpFileInformation=0x31e808 | out: lpFileInformation=0x31e808*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x43f88c00, ftCreationTime.dwHighDateTime=0x1cad04a, ftLastAccessTime.dwLowDateTime=0x43f88c00, ftLastAccessTime.dwHighDateTime=0x1cad04a, ftLastWriteTime.dwLowDateTime=0xf6c76e40, ftLastWriteTime.dwHighDateTime=0x1d6eb7e, nFileSizeHigh=0x0, nFileSizeLow=0x650)) returned 1 [0032.421] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e788) returned 1 [0032.421] MoveFileW (lpExistingFileName="C:\\MSOCache\\All Users\\{90140000-0019-0409-1000-0000000FF1CE}-C\\Setup.xml" (normalized: "c:\\msocache\\all users\\{90140000-0019-0409-1000-0000000ff1ce}-c\\setup.xml"), lpNewFileName="C:\\MSOCache\\All Users\\{90140000-0019-0409-1000-0000000FF1CE}-C\\Setup.xml" (normalized: "c:\\msocache\\all users\\{90140000-0019-0409-1000-0000000ff1ce}-c\\setup.xml")) returned 1 [0032.421] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e834) returned 1 [0032.422] GetFullPathNameW (in: lpFileName="C:\\MSOCache\\All Users\\{90140000-001A-0409-1000-0000000FF1CE}-C", nBufferLength=0x105, lpBuffer=0x31e33c, lpFilePart=0x0 | out: lpBuffer="C:\\MSOCache\\All Users\\{90140000-001A-0409-1000-0000000FF1CE}-C", lpFilePart=0x0) returned 0x3e [0032.422] GetFullPathNameW (in: lpFileName="C:\\MSOCache\\All Users\\{90140000-001A-0409-1000-0000000FF1CE}-C\\", nBufferLength=0x105, lpBuffer=0x31e310, lpFilePart=0x0 | out: lpBuffer="C:\\MSOCache\\All Users\\{90140000-001A-0409-1000-0000000FF1CE}-C\\", lpFilePart=0x0) returned 0x3f [0032.422] FindFirstFileW (in: lpFileName="C:\\MSOCache\\All Users\\{90140000-001A-0409-1000-0000000FF1CE}-C\\*", lpFindFileData=0x31e55c | out: lpFindFileData=0x31e55c*(dwFileAttributes=0x2011, ftCreationTime.dwLowDateTime=0xee829690, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xf00dbad0, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xf00dbad0, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x381d80 [0032.424] FindNextFileW (in: hFindFile=0x381d80, lpFindFileData=0x31e56c | out: lpFindFileData=0x31e56c*(dwFileAttributes=0x2011, ftCreationTime.dwLowDateTime=0xee829690, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xf00dbad0, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xf00dbad0, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0032.424] FindNextFileW (in: hFindFile=0x381d80, lpFindFileData=0x31e56c | out: lpFindFileData=0x31e56c*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x3a6f2400, ftCreationTime.dwHighDateTime=0x1cad04a, ftLastAccessTime.dwLowDateTime=0x3a6f2400, ftLastAccessTime.dwHighDateTime=0x1cad04a, ftLastWriteTime.dwLowDateTime=0xeebe0180, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0xe21fcc, dwReserved0=0x0, dwReserved1=0x0, cFileName="OutlkLR.cab", cAlternateFileName="")) returned 1 [0032.425] FindNextFileW (in: hFindFile=0x381d80, lpFindFileData=0x31e56c | out: lpFindFileData=0x31e56c*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x3e02ab00, ftCreationTime.dwHighDateTime=0x1cad04a, ftLastAccessTime.dwLowDateTime=0x3e02ab00, ftLastAccessTime.dwHighDateTime=0x1cad04a, ftLastWriteTime.dwLowDateTime=0xee827f20, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x2bba00, dwReserved0=0x0, dwReserved1=0x0, cFileName="OutlookMUI.msi", cAlternateFileName="OUTLOO~1.MSI")) returned 1 [0032.425] FindNextFileW (in: hFindFile=0x381d80, lpFindFileData=0x31e56c | out: lpFindFileData=0x31e56c*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x43f88c00, ftCreationTime.dwHighDateTime=0x1cad04a, ftLastAccessTime.dwLowDateTime=0x43f88c00, ftLastAccessTime.dwHighDateTime=0x1cad04a, ftLastWriteTime.dwLowDateTime=0xee827f20, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0xc72, dwReserved0=0x0, dwReserved1=0x0, cFileName="OutlookMUI.xml", cAlternateFileName="OUTLOO~1.XML")) returned 1 [0032.425] FindNextFileW (in: hFindFile=0x381d80, lpFindFileData=0x31e56c | out: lpFindFileData=0x31e56c*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x43f88c00, ftCreationTime.dwHighDateTime=0x1cad04a, ftLastAccessTime.dwLowDateTime=0x43f88c00, ftLastAccessTime.dwHighDateTime=0x1cad04a, ftLastWriteTime.dwLowDateTime=0xf00db300, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x106f, dwReserved0=0x0, dwReserved1=0x0, cFileName="Setup.xml", cAlternateFileName="")) returned 1 [0032.425] FindNextFileW (in: hFindFile=0x381d80, lpFindFileData=0x31e56c | out: lpFindFileData=0x31e56c*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0032.425] FindClose (in: hFindFile=0x381d80 | out: hFindFile=0x381d80) returned 1 [0032.426] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e7f4) returned 1 [0032.426] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e800) returned 1 [0032.426] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e834) returned 1 [0032.426] GetFullPathNameW (in: lpFileName="C:\\MSOCache\\All Users\\{90140000-001A-0409-1000-0000000FF1CE}-C", nBufferLength=0x105, lpBuffer=0x31e33c, lpFilePart=0x0 | out: lpBuffer="C:\\MSOCache\\All Users\\{90140000-001A-0409-1000-0000000FF1CE}-C", lpFilePart=0x0) returned 0x3e [0032.426] GetFullPathNameW (in: lpFileName="C:\\MSOCache\\All Users\\{90140000-001A-0409-1000-0000000FF1CE}-C\\", nBufferLength=0x105, lpBuffer=0x31e310, lpFilePart=0x0 | out: lpBuffer="C:\\MSOCache\\All Users\\{90140000-001A-0409-1000-0000000FF1CE}-C\\", lpFilePart=0x0) returned 0x3f [0032.426] FindFirstFileW (in: lpFileName="C:\\MSOCache\\All Users\\{90140000-001A-0409-1000-0000000FF1CE}-C\\*", lpFindFileData=0x31e55c | out: lpFindFileData=0x31e55c*(dwFileAttributes=0x2011, ftCreationTime.dwLowDateTime=0xee829690, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xf00dbad0, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xf00dbad0, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x381d80 [0032.427] FindNextFileW (in: hFindFile=0x381d80, lpFindFileData=0x31e56c | out: lpFindFileData=0x31e56c*(dwFileAttributes=0x2011, ftCreationTime.dwLowDateTime=0xee829690, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xf00dbad0, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xf00dbad0, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0032.428] FindNextFileW (in: hFindFile=0x381d80, lpFindFileData=0x31e56c | out: lpFindFileData=0x31e56c*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x3a6f2400, ftCreationTime.dwHighDateTime=0x1cad04a, ftLastAccessTime.dwLowDateTime=0x3a6f2400, ftLastAccessTime.dwHighDateTime=0x1cad04a, ftLastWriteTime.dwLowDateTime=0xeebe0180, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0xe21fcc, dwReserved0=0x0, dwReserved1=0x0, cFileName="OutlkLR.cab", cAlternateFileName="")) returned 1 [0032.428] FindNextFileW (in: hFindFile=0x381d80, lpFindFileData=0x31e56c | out: lpFindFileData=0x31e56c*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x3e02ab00, ftCreationTime.dwHighDateTime=0x1cad04a, ftLastAccessTime.dwLowDateTime=0x3e02ab00, ftLastAccessTime.dwHighDateTime=0x1cad04a, ftLastWriteTime.dwLowDateTime=0xee827f20, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x2bba00, dwReserved0=0x0, dwReserved1=0x0, cFileName="OutlookMUI.msi", cAlternateFileName="OUTLOO~1.MSI")) returned 1 [0032.428] FindNextFileW (in: hFindFile=0x381d80, lpFindFileData=0x31e56c | out: lpFindFileData=0x31e56c*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x43f88c00, ftCreationTime.dwHighDateTime=0x1cad04a, ftLastAccessTime.dwLowDateTime=0x43f88c00, ftLastAccessTime.dwHighDateTime=0x1cad04a, ftLastWriteTime.dwLowDateTime=0xee827f20, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0xc72, dwReserved0=0x0, dwReserved1=0x0, cFileName="OutlookMUI.xml", cAlternateFileName="OUTLOO~1.XML")) returned 1 [0032.428] FindNextFileW (in: hFindFile=0x381d80, lpFindFileData=0x31e56c | out: lpFindFileData=0x31e56c*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x43f88c00, ftCreationTime.dwHighDateTime=0x1cad04a, ftLastAccessTime.dwLowDateTime=0x43f88c00, ftLastAccessTime.dwHighDateTime=0x1cad04a, ftLastWriteTime.dwLowDateTime=0xf00db300, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x106f, dwReserved0=0x0, dwReserved1=0x0, cFileName="Setup.xml", cAlternateFileName="")) returned 1 [0032.428] FindNextFileW (in: hFindFile=0x381d80, lpFindFileData=0x31e56c | out: lpFindFileData=0x31e56c*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x43f88c00, ftCreationTime.dwHighDateTime=0x1cad04a, ftLastAccessTime.dwLowDateTime=0x43f88c00, ftLastAccessTime.dwHighDateTime=0x1cad04a, ftLastWriteTime.dwLowDateTime=0xf00db300, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x106f, dwReserved0=0x0, dwReserved1=0x0, cFileName="Setup.xml", cAlternateFileName="")) returned 0 [0032.428] FindClose (in: hFindFile=0x381d80 | out: hFindFile=0x381d80) returned 1 [0032.429] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e7f4) returned 1 [0032.429] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e800) returned 1 [0032.429] GetFullPathNameW (in: lpFileName="C:\\MSOCache\\All Users\\{90140000-001A-0409-1000-0000000FF1CE}-C\\OutlookMUI.xml", nBufferLength=0x105, lpBuffer=0x31e20c, lpFilePart=0x0 | out: lpBuffer="C:\\MSOCache\\All Users\\{90140000-001A-0409-1000-0000000FF1CE}-C\\OutlookMUI.xml", lpFilePart=0x0) returned 0x4d [0032.429] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e700) returned 1 [0032.429] CreateFileW (lpFileName="C:\\MSOCache\\All Users\\{90140000-001A-0409-1000-0000000FF1CE}-C\\OutlookMUI.xml" (normalized: "c:\\msocache\\all users\\{90140000-001a-0409-1000-0000000ff1ce}-c\\outlookmui.xml"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x224 [0032.430] GetFileType (hFile=0x224) returned 0x1 [0032.430] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e6fc) returned 1 [0032.430] GetFileType (hFile=0x224) returned 0x1 [0032.430] GetFileSize (in: hFile=0x224, lpFileSizeHigh=0x31e808 | out: lpFileSizeHigh=0x31e808*=0x0) returned 0xc72 [0032.430] ReadFile (in: hFile=0x224, lpBuffer=0x267d758, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x31e7b4, lpOverlapped=0x0 | out: lpBuffer=0x267d758*, lpNumberOfBytesRead=0x31e7b4*=0xc72, lpOverlapped=0x0) returned 1 [0032.432] CloseHandle (hObject=0x224) returned 1 [0032.472] GetFullPathNameW (in: lpFileName="C:\\MSOCache\\All Users\\{90140000-001A-0409-1000-0000000FF1CE}-C\\OutlookMUI.xml", nBufferLength=0x105, lpBuffer=0x31e1f8, lpFilePart=0x0 | out: lpBuffer="C:\\MSOCache\\All Users\\{90140000-001A-0409-1000-0000000FF1CE}-C\\OutlookMUI.xml", lpFilePart=0x0) returned 0x4d [0032.472] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e6ec) returned 1 [0032.472] CreateFileW (lpFileName="C:\\MSOCache\\All Users\\{90140000-001A-0409-1000-0000000FF1CE}-C\\OutlookMUI.xml" (normalized: "c:\\msocache\\all users\\{90140000-001a-0409-1000-0000000ff1ce}-c\\outlookmui.xml"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x224 [0032.473] GetFileType (hFile=0x224) returned 0x1 [0032.473] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e6e8) returned 1 [0032.473] GetFileType (hFile=0x224) returned 0x1 [0032.473] WriteFile (in: hFile=0x224, lpBuffer=0x26cf664*, nNumberOfBytesToWrite=0xc80, lpNumberOfBytesWritten=0x31e77c, lpOverlapped=0x0 | out: lpBuffer=0x26cf664*, lpNumberOfBytesWritten=0x31e77c*=0xc80, lpOverlapped=0x0) returned 1 [0032.474] CloseHandle (hObject=0x224) returned 1 [0032.474] GetFullPathNameW (in: lpFileName="C:\\MSOCache\\All Users\\{90140000-001A-0409-1000-0000000FF1CE}-C\\OutlookMUI.xml", nBufferLength=0x105, lpBuffer=0x31e32c, lpFilePart=0x0 | out: lpBuffer="C:\\MSOCache\\All Users\\{90140000-001A-0409-1000-0000000FF1CE}-C\\OutlookMUI.xml", lpFilePart=0x0) returned 0x4d [0032.474] GetFullPathNameW (in: lpFileName="C:\\MSOCache\\All Users\\{90140000-001A-0409-1000-0000000FF1CE}-C\\OutlookMUI.xml", nBufferLength=0x105, lpBuffer=0x31e32c, lpFilePart=0x0 | out: lpBuffer="C:\\MSOCache\\All Users\\{90140000-001A-0409-1000-0000000FF1CE}-C\\OutlookMUI.xml", lpFilePart=0x0) returned 0x4d [0032.474] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e78c) returned 1 [0032.475] GetFileAttributesExW (in: lpFileName="C:\\MSOCache\\All Users\\{90140000-001A-0409-1000-0000000FF1CE}-C\\OutlookMUI.xml" (normalized: "c:\\msocache\\all users\\{90140000-001a-0409-1000-0000000ff1ce}-c\\outlookmui.xml"), fInfoLevelId=0x0, lpFileInformation=0x31e808 | out: lpFileInformation=0x31e808*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x43f88c00, ftCreationTime.dwHighDateTime=0x1cad04a, ftLastAccessTime.dwLowDateTime=0x43f88c00, ftLastAccessTime.dwHighDateTime=0x1cad04a, ftLastWriteTime.dwLowDateTime=0xf6ce9260, ftLastWriteTime.dwHighDateTime=0x1d6eb7e, nFileSizeHigh=0x0, nFileSizeLow=0xc80)) returned 1 [0032.475] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e788) returned 1 [0032.475] MoveFileW (lpExistingFileName="C:\\MSOCache\\All Users\\{90140000-001A-0409-1000-0000000FF1CE}-C\\OutlookMUI.xml" (normalized: "c:\\msocache\\all users\\{90140000-001a-0409-1000-0000000ff1ce}-c\\outlookmui.xml"), lpNewFileName="C:\\MSOCache\\All Users\\{90140000-001A-0409-1000-0000000FF1CE}-C\\OutlookMUI.xml" (normalized: "c:\\msocache\\all users\\{90140000-001a-0409-1000-0000000ff1ce}-c\\outlookmui.xml")) returned 1 [0032.475] GetFullPathNameW (in: lpFileName="C:\\MSOCache\\All Users\\{90140000-001A-0409-1000-0000000FF1CE}-C\\Setup.xml", nBufferLength=0x105, lpBuffer=0x31e20c, lpFilePart=0x0 | out: lpBuffer="C:\\MSOCache\\All Users\\{90140000-001A-0409-1000-0000000FF1CE}-C\\Setup.xml", lpFilePart=0x0) returned 0x48 [0032.475] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e700) returned 1 [0032.475] CreateFileW (lpFileName="C:\\MSOCache\\All Users\\{90140000-001A-0409-1000-0000000FF1CE}-C\\Setup.xml" (normalized: "c:\\msocache\\all users\\{90140000-001a-0409-1000-0000000ff1ce}-c\\setup.xml"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x224 [0032.476] GetFileType (hFile=0x224) returned 0x1 [0032.476] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e6fc) returned 1 [0032.476] GetFileType (hFile=0x224) returned 0x1 [0032.476] GetFileSize (in: hFile=0x224, lpFileSizeHigh=0x31e808 | out: lpFileSizeHigh=0x31e808*=0x0) returned 0x106f [0032.476] ReadFile (in: hFile=0x224, lpBuffer=0x26d08f4, nNumberOfBytesToRead=0x106f, lpNumberOfBytesRead=0x31e7b4, lpOverlapped=0x0 | out: lpBuffer=0x26d08f4*, lpNumberOfBytesRead=0x31e7b4*=0x106f, lpOverlapped=0x0) returned 1 [0032.478] CloseHandle (hObject=0x224) returned 1 [0032.517] GetFullPathNameW (in: lpFileName="C:\\MSOCache\\All Users\\{90140000-001A-0409-1000-0000000FF1CE}-C\\Setup.xml", nBufferLength=0x105, lpBuffer=0x31e1f8, lpFilePart=0x0 | out: lpBuffer="C:\\MSOCache\\All Users\\{90140000-001A-0409-1000-0000000FF1CE}-C\\Setup.xml", lpFilePart=0x0) returned 0x48 [0032.517] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e6ec) returned 1 [0032.517] CreateFileW (lpFileName="C:\\MSOCache\\All Users\\{90140000-001A-0409-1000-0000000FF1CE}-C\\Setup.xml" (normalized: "c:\\msocache\\all users\\{90140000-001a-0409-1000-0000000ff1ce}-c\\setup.xml"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x224 [0032.518] GetFileType (hFile=0x224) returned 0x1 [0032.518] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e6e8) returned 1 [0032.518] GetFileType (hFile=0x224) returned 0x1 [0032.518] WriteFile (in: hFile=0x224, lpBuffer=0x272290c*, nNumberOfBytesToWrite=0x1070, lpNumberOfBytesWritten=0x31e7a8, lpOverlapped=0x0 | out: lpBuffer=0x272290c*, lpNumberOfBytesWritten=0x31e7a8*=0x1070, lpOverlapped=0x0) returned 1 [0032.519] CloseHandle (hObject=0x224) returned 1 [0032.520] GetFullPathNameW (in: lpFileName="C:\\MSOCache\\All Users\\{90140000-001A-0409-1000-0000000FF1CE}-C\\Setup.xml", nBufferLength=0x105, lpBuffer=0x31e32c, lpFilePart=0x0 | out: lpBuffer="C:\\MSOCache\\All Users\\{90140000-001A-0409-1000-0000000FF1CE}-C\\Setup.xml", lpFilePart=0x0) returned 0x48 [0032.520] GetFullPathNameW (in: lpFileName="C:\\MSOCache\\All Users\\{90140000-001A-0409-1000-0000000FF1CE}-C\\Setup.xml", nBufferLength=0x105, lpBuffer=0x31e32c, lpFilePart=0x0 | out: lpBuffer="C:\\MSOCache\\All Users\\{90140000-001A-0409-1000-0000000FF1CE}-C\\Setup.xml", lpFilePart=0x0) returned 0x48 [0032.520] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e78c) returned 1 [0032.520] GetFileAttributesExW (in: lpFileName="C:\\MSOCache\\All Users\\{90140000-001A-0409-1000-0000000FF1CE}-C\\Setup.xml" (normalized: "c:\\msocache\\all users\\{90140000-001a-0409-1000-0000000ff1ce}-c\\setup.xml"), fInfoLevelId=0x0, lpFileInformation=0x31e808 | out: lpFileInformation=0x31e808*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x43f88c00, ftCreationTime.dwHighDateTime=0x1cad04a, ftLastAccessTime.dwLowDateTime=0x43f88c00, ftLastAccessTime.dwHighDateTime=0x1cad04a, ftLastWriteTime.dwLowDateTime=0xf6d5b680, ftLastWriteTime.dwHighDateTime=0x1d6eb7e, nFileSizeHigh=0x0, nFileSizeLow=0x1070)) returned 1 [0032.520] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e788) returned 1 [0032.520] MoveFileW (lpExistingFileName="C:\\MSOCache\\All Users\\{90140000-001A-0409-1000-0000000FF1CE}-C\\Setup.xml" (normalized: "c:\\msocache\\all users\\{90140000-001a-0409-1000-0000000ff1ce}-c\\setup.xml"), lpNewFileName="C:\\MSOCache\\All Users\\{90140000-001A-0409-1000-0000000FF1CE}-C\\Setup.xml" (normalized: "c:\\msocache\\all users\\{90140000-001a-0409-1000-0000000ff1ce}-c\\setup.xml")) returned 1 [0032.520] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e834) returned 1 [0032.520] GetFullPathNameW (in: lpFileName="C:\\MSOCache\\All Users\\{90140000-001B-0409-1000-0000000FF1CE}-C", nBufferLength=0x105, lpBuffer=0x31e33c, lpFilePart=0x0 | out: lpBuffer="C:\\MSOCache\\All Users\\{90140000-001B-0409-1000-0000000FF1CE}-C", lpFilePart=0x0) returned 0x3e [0032.520] GetFullPathNameW (in: lpFileName="C:\\MSOCache\\All Users\\{90140000-001B-0409-1000-0000000FF1CE}-C\\", nBufferLength=0x105, lpBuffer=0x31e310, lpFilePart=0x0 | out: lpBuffer="C:\\MSOCache\\All Users\\{90140000-001B-0409-1000-0000000FF1CE}-C\\", lpFilePart=0x0) returned 0x3f [0032.521] FindFirstFileW (in: lpFileName="C:\\MSOCache\\All Users\\{90140000-001B-0409-1000-0000000FF1CE}-C\\*", lpFindFileData=0x31e55c | out: lpFindFileData=0x31e55c*(dwFileAttributes=0x2011, ftCreationTime.dwLowDateTime=0xfc8a9170, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xfe076d70, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xfe076d70, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x381c80 [0032.521] FindNextFileW (in: hFindFile=0x381c80, lpFindFileData=0x31e56c | out: lpFindFileData=0x31e56c*(dwFileAttributes=0x2011, ftCreationTime.dwLowDateTime=0xfc8a9170, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xfe076d70, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xfe076d70, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0032.522] FindNextFileW (in: hFindFile=0x381c80, lpFindFileData=0x31e56c | out: lpFindFileData=0x31e56c*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x43f88c00, ftCreationTime.dwHighDateTime=0x1cad04a, ftLastAccessTime.dwLowDateTime=0x43f88c00, ftLastAccessTime.dwHighDateTime=0x1cad04a, ftLastWriteTime.dwLowDateTime=0xfe076d70, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x978, dwReserved0=0x0, dwReserved1=0x0, cFileName="Setup.xml", cAlternateFileName="")) returned 1 [0032.522] FindNextFileW (in: hFindFile=0x381c80, lpFindFileData=0x31e56c | out: lpFindFileData=0x31e56c*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x2fb48f00, ftCreationTime.dwHighDateTime=0x1cad04a, ftLastAccessTime.dwLowDateTime=0x2fb48f00, ftLastAccessTime.dwHighDateTime=0x1cad04a, ftLastWriteTime.dwLowDateTime=0xfc967850, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x29c6dbd, dwReserved0=0x0, dwReserved1=0x0, cFileName="WordLR.cab", cAlternateFileName="")) returned 1 [0032.522] FindNextFileW (in: hFindFile=0x381c80, lpFindFileData=0x31e56c | out: lpFindFileData=0x31e56c*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x3e02ab00, ftCreationTime.dwHighDateTime=0x1cad04a, ftLastAccessTime.dwLowDateTime=0x3e02ab00, ftLastAccessTime.dwHighDateTime=0x1cad04a, ftLastWriteTime.dwLowDateTime=0xfc8a9170, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x267e00, dwReserved0=0x0, dwReserved1=0x0, cFileName="WordMUI.msi", cAlternateFileName="")) returned 1 [0032.522] FindNextFileW (in: hFindFile=0x381c80, lpFindFileData=0x31e56c | out: lpFindFileData=0x31e56c*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x43f88c00, ftCreationTime.dwHighDateTime=0x1cad04a, ftLastAccessTime.dwLowDateTime=0x43f88c00, ftLastAccessTime.dwHighDateTime=0x1cad04a, ftLastWriteTime.dwLowDateTime=0xfc8a9170, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x708, dwReserved0=0x0, dwReserved1=0x0, cFileName="WordMUI.xml", cAlternateFileName="")) returned 1 [0032.522] FindNextFileW (in: hFindFile=0x381c80, lpFindFileData=0x31e56c | out: lpFindFileData=0x31e56c*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0032.522] FindClose (in: hFindFile=0x381c80 | out: hFindFile=0x381c80) returned 1 [0032.522] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e7f4) returned 1 [0032.522] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e800) returned 1 [0032.522] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e834) returned 1 [0032.522] GetFullPathNameW (in: lpFileName="C:\\MSOCache\\All Users\\{90140000-001B-0409-1000-0000000FF1CE}-C", nBufferLength=0x105, lpBuffer=0x31e33c, lpFilePart=0x0 | out: lpBuffer="C:\\MSOCache\\All Users\\{90140000-001B-0409-1000-0000000FF1CE}-C", lpFilePart=0x0) returned 0x3e [0032.522] GetFullPathNameW (in: lpFileName="C:\\MSOCache\\All Users\\{90140000-001B-0409-1000-0000000FF1CE}-C\\", nBufferLength=0x105, lpBuffer=0x31e310, lpFilePart=0x0 | out: lpBuffer="C:\\MSOCache\\All Users\\{90140000-001B-0409-1000-0000000FF1CE}-C\\", lpFilePart=0x0) returned 0x3f [0032.523] FindFirstFileW (in: lpFileName="C:\\MSOCache\\All Users\\{90140000-001B-0409-1000-0000000FF1CE}-C\\*", lpFindFileData=0x31e55c | out: lpFindFileData=0x31e55c*(dwFileAttributes=0x2011, ftCreationTime.dwLowDateTime=0xfc8a9170, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xfe076d70, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xfe076d70, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x381c80 [0032.523] FindNextFileW (in: hFindFile=0x381c80, lpFindFileData=0x31e56c | out: lpFindFileData=0x31e56c*(dwFileAttributes=0x2011, ftCreationTime.dwLowDateTime=0xfc8a9170, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xfe076d70, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xfe076d70, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0032.523] FindNextFileW (in: hFindFile=0x381c80, lpFindFileData=0x31e56c | out: lpFindFileData=0x31e56c*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x43f88c00, ftCreationTime.dwHighDateTime=0x1cad04a, ftLastAccessTime.dwLowDateTime=0x43f88c00, ftLastAccessTime.dwHighDateTime=0x1cad04a, ftLastWriteTime.dwLowDateTime=0xfe076d70, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x978, dwReserved0=0x0, dwReserved1=0x0, cFileName="Setup.xml", cAlternateFileName="")) returned 1 [0032.523] FindNextFileW (in: hFindFile=0x381c80, lpFindFileData=0x31e56c | out: lpFindFileData=0x31e56c*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x2fb48f00, ftCreationTime.dwHighDateTime=0x1cad04a, ftLastAccessTime.dwLowDateTime=0x2fb48f00, ftLastAccessTime.dwHighDateTime=0x1cad04a, ftLastWriteTime.dwLowDateTime=0xfc967850, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x29c6dbd, dwReserved0=0x0, dwReserved1=0x0, cFileName="WordLR.cab", cAlternateFileName="")) returned 1 [0032.523] FindNextFileW (in: hFindFile=0x381c80, lpFindFileData=0x31e56c | out: lpFindFileData=0x31e56c*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x3e02ab00, ftCreationTime.dwHighDateTime=0x1cad04a, ftLastAccessTime.dwLowDateTime=0x3e02ab00, ftLastAccessTime.dwHighDateTime=0x1cad04a, ftLastWriteTime.dwLowDateTime=0xfc8a9170, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x267e00, dwReserved0=0x0, dwReserved1=0x0, cFileName="WordMUI.msi", cAlternateFileName="")) returned 1 [0032.523] FindNextFileW (in: hFindFile=0x381c80, lpFindFileData=0x31e56c | out: lpFindFileData=0x31e56c*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x43f88c00, ftCreationTime.dwHighDateTime=0x1cad04a, ftLastAccessTime.dwLowDateTime=0x43f88c00, ftLastAccessTime.dwHighDateTime=0x1cad04a, ftLastWriteTime.dwLowDateTime=0xfc8a9170, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x708, dwReserved0=0x0, dwReserved1=0x0, cFileName="WordMUI.xml", cAlternateFileName="")) returned 1 [0032.523] FindNextFileW (in: hFindFile=0x381c80, lpFindFileData=0x31e56c | out: lpFindFileData=0x31e56c*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x43f88c00, ftCreationTime.dwHighDateTime=0x1cad04a, ftLastAccessTime.dwLowDateTime=0x43f88c00, ftLastAccessTime.dwHighDateTime=0x1cad04a, ftLastWriteTime.dwLowDateTime=0xfc8a9170, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x708, dwReserved0=0x0, dwReserved1=0x0, cFileName="WordMUI.xml", cAlternateFileName="")) returned 0 [0032.523] FindClose (in: hFindFile=0x381c80 | out: hFindFile=0x381c80) returned 1 [0032.524] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e7f4) returned 1 [0032.524] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e800) returned 1 [0032.524] GetFullPathNameW (in: lpFileName="C:\\MSOCache\\All Users\\{90140000-001B-0409-1000-0000000FF1CE}-C\\Setup.xml", nBufferLength=0x105, lpBuffer=0x31e20c, lpFilePart=0x0 | out: lpBuffer="C:\\MSOCache\\All Users\\{90140000-001B-0409-1000-0000000FF1CE}-C\\Setup.xml", lpFilePart=0x0) returned 0x48 [0032.524] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e700) returned 1 [0032.524] CreateFileW (lpFileName="C:\\MSOCache\\All Users\\{90140000-001B-0409-1000-0000000FF1CE}-C\\Setup.xml" (normalized: "c:\\msocache\\all users\\{90140000-001b-0409-1000-0000000ff1ce}-c\\setup.xml"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x224 [0032.524] GetFileType (hFile=0x224) returned 0x1 [0032.524] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e6fc) returned 1 [0032.524] GetFileType (hFile=0x224) returned 0x1 [0032.524] GetFileSize (in: hFile=0x224, lpFileSizeHigh=0x31e808 | out: lpFileSizeHigh=0x31e808*=0x0) returned 0x978 [0032.524] ReadFile (in: hFile=0x224, lpBuffer=0x27267dc, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x31e7b4, lpOverlapped=0x0 | out: lpBuffer=0x27267dc*, lpNumberOfBytesRead=0x31e7b4*=0x978, lpOverlapped=0x0) returned 1 [0032.526] CloseHandle (hObject=0x224) returned 1 [0032.565] GetFullPathNameW (in: lpFileName="C:\\MSOCache\\All Users\\{90140000-001B-0409-1000-0000000FF1CE}-C\\Setup.xml", nBufferLength=0x105, lpBuffer=0x31e1f8, lpFilePart=0x0 | out: lpBuffer="C:\\MSOCache\\All Users\\{90140000-001B-0409-1000-0000000FF1CE}-C\\Setup.xml", lpFilePart=0x0) returned 0x48 [0032.565] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e6ec) returned 1 [0032.565] CreateFileW (lpFileName="C:\\MSOCache\\All Users\\{90140000-001B-0409-1000-0000000FF1CE}-C\\Setup.xml" (normalized: "c:\\msocache\\all users\\{90140000-001b-0409-1000-0000000ff1ce}-c\\setup.xml"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x224 [0032.566] GetFileType (hFile=0x224) returned 0x1 [0032.566] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e6e8) returned 1 [0032.566] GetFileType (hFile=0x224) returned 0x1 [0032.566] WriteFile (in: hFile=0x224, lpBuffer=0x2777670*, nNumberOfBytesToWrite=0x980, lpNumberOfBytesWritten=0x31e77c, lpOverlapped=0x0 | out: lpBuffer=0x2777670*, lpNumberOfBytesWritten=0x31e77c*=0x980, lpOverlapped=0x0) returned 1 [0032.566] CloseHandle (hObject=0x224) returned 1 [0032.567] GetFullPathNameW (in: lpFileName="C:\\MSOCache\\All Users\\{90140000-001B-0409-1000-0000000FF1CE}-C\\Setup.xml", nBufferLength=0x105, lpBuffer=0x31e32c, lpFilePart=0x0 | out: lpBuffer="C:\\MSOCache\\All Users\\{90140000-001B-0409-1000-0000000FF1CE}-C\\Setup.xml", lpFilePart=0x0) returned 0x48 [0032.567] GetFullPathNameW (in: lpFileName="C:\\MSOCache\\All Users\\{90140000-001B-0409-1000-0000000FF1CE}-C\\Setup.xml", nBufferLength=0x105, lpBuffer=0x31e32c, lpFilePart=0x0 | out: lpBuffer="C:\\MSOCache\\All Users\\{90140000-001B-0409-1000-0000000FF1CE}-C\\Setup.xml", lpFilePart=0x0) returned 0x48 [0032.567] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e78c) returned 1 [0032.567] GetFileAttributesExW (in: lpFileName="C:\\MSOCache\\All Users\\{90140000-001B-0409-1000-0000000FF1CE}-C\\Setup.xml" (normalized: "c:\\msocache\\all users\\{90140000-001b-0409-1000-0000000ff1ce}-c\\setup.xml"), fInfoLevelId=0x0, lpFileInformation=0x31e808 | out: lpFileInformation=0x31e808*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x43f88c00, ftCreationTime.dwHighDateTime=0x1cad04a, ftLastAccessTime.dwLowDateTime=0x43f88c00, ftLastAccessTime.dwHighDateTime=0x1cad04a, ftLastWriteTime.dwLowDateTime=0xf6dcdaa0, ftLastWriteTime.dwHighDateTime=0x1d6eb7e, nFileSizeHigh=0x0, nFileSizeLow=0x980)) returned 1 [0032.567] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e788) returned 1 [0032.567] MoveFileW (lpExistingFileName="C:\\MSOCache\\All Users\\{90140000-001B-0409-1000-0000000FF1CE}-C\\Setup.xml" (normalized: "c:\\msocache\\all users\\{90140000-001b-0409-1000-0000000ff1ce}-c\\setup.xml"), lpNewFileName="C:\\MSOCache\\All Users\\{90140000-001B-0409-1000-0000000FF1CE}-C\\Setup.xml" (normalized: "c:\\msocache\\all users\\{90140000-001b-0409-1000-0000000ff1ce}-c\\setup.xml")) returned 1 [0032.568] GetFullPathNameW (in: lpFileName="C:\\MSOCache\\All Users\\{90140000-001B-0409-1000-0000000FF1CE}-C\\WordMUI.xml", nBufferLength=0x105, lpBuffer=0x31e20c, lpFilePart=0x0 | out: lpBuffer="C:\\MSOCache\\All Users\\{90140000-001B-0409-1000-0000000FF1CE}-C\\WordMUI.xml", lpFilePart=0x0) returned 0x4a [0032.570] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e700) returned 1 [0032.570] CreateFileW (lpFileName="C:\\MSOCache\\All Users\\{90140000-001B-0409-1000-0000000FF1CE}-C\\WordMUI.xml" (normalized: "c:\\msocache\\all users\\{90140000-001b-0409-1000-0000000ff1ce}-c\\wordmui.xml"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x224 [0032.571] GetFileType (hFile=0x224) returned 0x1 [0032.571] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e6fc) returned 1 [0032.571] GetFileType (hFile=0x224) returned 0x1 [0032.571] GetFileSize (in: hFile=0x224, lpFileSizeHigh=0x31e808 | out: lpFileSizeHigh=0x31e808*=0x0) returned 0x708 [0032.571] ReadFile (in: hFile=0x224, lpBuffer=0x277903c, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x31e7b4, lpOverlapped=0x0 | out: lpBuffer=0x277903c*, lpNumberOfBytesRead=0x31e7b4*=0x708, lpOverlapped=0x0) returned 1 [0032.572] CloseHandle (hObject=0x224) returned 1 [0032.619] GetFullPathNameW (in: lpFileName="C:\\MSOCache\\All Users\\{90140000-001B-0409-1000-0000000FF1CE}-C\\WordMUI.xml", nBufferLength=0x105, lpBuffer=0x31e1f8, lpFilePart=0x0 | out: lpBuffer="C:\\MSOCache\\All Users\\{90140000-001B-0409-1000-0000000FF1CE}-C\\WordMUI.xml", lpFilePart=0x0) returned 0x4a [0032.619] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e6ec) returned 1 [0032.619] CreateFileW (lpFileName="C:\\MSOCache\\All Users\\{90140000-001B-0409-1000-0000000FF1CE}-C\\WordMUI.xml" (normalized: "c:\\msocache\\all users\\{90140000-001b-0409-1000-0000000ff1ce}-c\\wordmui.xml"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x224 [0032.620] GetFileType (hFile=0x224) returned 0x1 [0032.620] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e6e8) returned 1 [0032.620] GetFileType (hFile=0x224) returned 0x1 [0032.620] WriteFile (in: hFile=0x224, lpBuffer=0x27c92a8*, nNumberOfBytesToWrite=0x710, lpNumberOfBytesWritten=0x31e77c, lpOverlapped=0x0 | out: lpBuffer=0x27c92a8*, lpNumberOfBytesWritten=0x31e77c*=0x710, lpOverlapped=0x0) returned 1 [0032.621] CloseHandle (hObject=0x224) returned 1 [0032.622] GetFullPathNameW (in: lpFileName="C:\\MSOCache\\All Users\\{90140000-001B-0409-1000-0000000FF1CE}-C\\WordMUI.xml", nBufferLength=0x105, lpBuffer=0x31e32c, lpFilePart=0x0 | out: lpBuffer="C:\\MSOCache\\All Users\\{90140000-001B-0409-1000-0000000FF1CE}-C\\WordMUI.xml", lpFilePart=0x0) returned 0x4a [0032.622] GetFullPathNameW (in: lpFileName="C:\\MSOCache\\All Users\\{90140000-001B-0409-1000-0000000FF1CE}-C\\WordMUI.xml", nBufferLength=0x105, lpBuffer=0x31e32c, lpFilePart=0x0 | out: lpBuffer="C:\\MSOCache\\All Users\\{90140000-001B-0409-1000-0000000FF1CE}-C\\WordMUI.xml", lpFilePart=0x0) returned 0x4a [0032.622] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e78c) returned 1 [0032.622] GetFileAttributesExW (in: lpFileName="C:\\MSOCache\\All Users\\{90140000-001B-0409-1000-0000000FF1CE}-C\\WordMUI.xml" (normalized: "c:\\msocache\\all users\\{90140000-001b-0409-1000-0000000ff1ce}-c\\wordmui.xml"), fInfoLevelId=0x0, lpFileInformation=0x31e808 | out: lpFileInformation=0x31e808*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x43f88c00, ftCreationTime.dwHighDateTime=0x1cad04a, ftLastAccessTime.dwLowDateTime=0x43f88c00, ftLastAccessTime.dwHighDateTime=0x1cad04a, ftLastWriteTime.dwLowDateTime=0xf6e66020, ftLastWriteTime.dwHighDateTime=0x1d6eb7e, nFileSizeHigh=0x0, nFileSizeLow=0x710)) returned 1 [0032.622] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e788) returned 1 [0032.622] MoveFileW (lpExistingFileName="C:\\MSOCache\\All Users\\{90140000-001B-0409-1000-0000000FF1CE}-C\\WordMUI.xml" (normalized: "c:\\msocache\\all users\\{90140000-001b-0409-1000-0000000ff1ce}-c\\wordmui.xml"), lpNewFileName="C:\\MSOCache\\All Users\\{90140000-001B-0409-1000-0000000FF1CE}-C\\WordMUI.xml" (normalized: "c:\\msocache\\all users\\{90140000-001b-0409-1000-0000000ff1ce}-c\\wordmui.xml")) returned 1 [0032.622] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e834) returned 1 [0032.622] GetFullPathNameW (in: lpFileName="C:\\MSOCache\\All Users\\{90140000-002C-0409-1000-0000000FF1CE}-C", nBufferLength=0x105, lpBuffer=0x31e33c, lpFilePart=0x0 | out: lpBuffer="C:\\MSOCache\\All Users\\{90140000-002C-0409-1000-0000000FF1CE}-C", lpFilePart=0x0) returned 0x3e [0032.623] GetFullPathNameW (in: lpFileName="C:\\MSOCache\\All Users\\{90140000-002C-0409-1000-0000000FF1CE}-C\\", nBufferLength=0x105, lpBuffer=0x31e310, lpFilePart=0x0 | out: lpBuffer="C:\\MSOCache\\All Users\\{90140000-002C-0409-1000-0000000FF1CE}-C\\", lpFilePart=0x0) returned 0x3f [0032.623] FindFirstFileW (in: lpFileName="C:\\MSOCache\\All Users\\{90140000-002C-0409-1000-0000000FF1CE}-C\\*", lpFindFileData=0x31e55c | out: lpFindFileData=0x31e55c*(dwFileAttributes=0x2011, ftCreationTime.dwLowDateTime=0xf00dbad0, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xf58c8770, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xf58c8770, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x381b80 [0032.625] FindNextFileW (in: hFindFile=0x381b80, lpFindFileData=0x31e56c | out: lpFindFileData=0x31e56c*(dwFileAttributes=0x2011, ftCreationTime.dwLowDateTime=0xf00dbad0, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xf58c8770, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xf58c8770, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0032.625] FindNextFileW (in: hFindFile=0x381b80, lpFindFileData=0x31e56c | out: lpFindFileData=0x31e56c*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xf01c0310, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xf07b3a10, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xf07b3a10, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Proof.en", cAlternateFileName="")) returned 1 [0032.626] FindNextFileW (in: hFindFile=0x381b80, lpFindFileData=0x31e56c | out: lpFindFileData=0x31e56c*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xf4d53d90, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xf4f690d0, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xf4f690d0, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Proof.es", cAlternateFileName="")) returned 1 [0032.626] FindNextFileW (in: hFindFile=0x381b80, lpFindFileData=0x31e56c | out: lpFindFileData=0x31e56c*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xf2bda830, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xf30772d0, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xf30772d0, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Proof.fr", cAlternateFileName="")) returned 1 [0032.626] FindNextFileW (in: hFindFile=0x381b80, lpFindFileData=0x31e56c | out: lpFindFileData=0x31e56c*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x40650500, ftCreationTime.dwHighDateTime=0x1cad04a, ftLastAccessTime.dwLowDateTime=0x40650500, ftLastAccessTime.dwHighDateTime=0x1cad04a, ftLastWriteTime.dwLowDateTime=0xf0126df0, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0xd4200, dwReserved0=0x0, dwReserved1=0x0, cFileName="Proofing.msi", cAlternateFileName="")) returned 1 [0032.626] FindNextFileW (in: hFindFile=0x381b80, lpFindFileData=0x31e56c | out: lpFindFileData=0x31e56c*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x4529b900, ftCreationTime.dwHighDateTime=0x1cad04a, ftLastAccessTime.dwLowDateTime=0x4529b900, ftLastAccessTime.dwHighDateTime=0x1cad04a, ftLastWriteTime.dwLowDateTime=0xf00db300, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x32b, dwReserved0=0x0, dwReserved1=0x0, cFileName="Proofing.xml", cAlternateFileName="")) returned 1 [0032.626] FindNextFileW (in: hFindFile=0x381b80, lpFindFileData=0x31e56c | out: lpFindFileData=0x31e56c*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x42c75f00, ftCreationTime.dwHighDateTime=0x1cad04a, ftLastAccessTime.dwLowDateTime=0x42c75f00, ftLastAccessTime.dwHighDateTime=0x1cad04a, ftLastWriteTime.dwLowDateTime=0xf58c6830, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x16fc, dwReserved0=0x0, dwReserved1=0x0, cFileName="Setup.xml", cAlternateFileName="")) returned 1 [0032.626] FindNextFileW (in: hFindFile=0x381b80, lpFindFileData=0x31e56c | out: lpFindFileData=0x31e56c*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0032.626] FindClose (in: hFindFile=0x381b80 | out: hFindFile=0x381b80) returned 1 [0032.627] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e7f4) returned 1 [0032.627] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e800) returned 1 [0032.627] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e834) returned 1 [0032.627] GetFullPathNameW (in: lpFileName="C:\\MSOCache\\All Users\\{90140000-002C-0409-1000-0000000FF1CE}-C", nBufferLength=0x105, lpBuffer=0x31e33c, lpFilePart=0x0 | out: lpBuffer="C:\\MSOCache\\All Users\\{90140000-002C-0409-1000-0000000FF1CE}-C", lpFilePart=0x0) returned 0x3e [0032.627] GetFullPathNameW (in: lpFileName="C:\\MSOCache\\All Users\\{90140000-002C-0409-1000-0000000FF1CE}-C\\", nBufferLength=0x105, lpBuffer=0x31e310, lpFilePart=0x0 | out: lpBuffer="C:\\MSOCache\\All Users\\{90140000-002C-0409-1000-0000000FF1CE}-C\\", lpFilePart=0x0) returned 0x3f [0032.627] FindFirstFileW (in: lpFileName="C:\\MSOCache\\All Users\\{90140000-002C-0409-1000-0000000FF1CE}-C\\*", lpFindFileData=0x31e55c | out: lpFindFileData=0x31e55c*(dwFileAttributes=0x2011, ftCreationTime.dwLowDateTime=0xf00dbad0, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xf58c8770, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xf58c8770, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x381b80 [0032.628] FindNextFileW (in: hFindFile=0x381b80, lpFindFileData=0x31e56c | out: lpFindFileData=0x31e56c*(dwFileAttributes=0x2011, ftCreationTime.dwLowDateTime=0xf00dbad0, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xf58c8770, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xf58c8770, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0032.628] FindNextFileW (in: hFindFile=0x381b80, lpFindFileData=0x31e56c | out: lpFindFileData=0x31e56c*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xf01c0310, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xf07b3a10, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xf07b3a10, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Proof.en", cAlternateFileName="")) returned 1 [0032.628] FindNextFileW (in: hFindFile=0x381b80, lpFindFileData=0x31e56c | out: lpFindFileData=0x31e56c*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xf4d53d90, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xf4f690d0, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xf4f690d0, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Proof.es", cAlternateFileName="")) returned 1 [0032.628] FindNextFileW (in: hFindFile=0x381b80, lpFindFileData=0x31e56c | out: lpFindFileData=0x31e56c*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xf2bda830, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xf30772d0, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xf30772d0, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Proof.fr", cAlternateFileName="")) returned 1 [0032.628] FindNextFileW (in: hFindFile=0x381b80, lpFindFileData=0x31e56c | out: lpFindFileData=0x31e56c*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x40650500, ftCreationTime.dwHighDateTime=0x1cad04a, ftLastAccessTime.dwLowDateTime=0x40650500, ftLastAccessTime.dwHighDateTime=0x1cad04a, ftLastWriteTime.dwLowDateTime=0xf0126df0, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0xd4200, dwReserved0=0x0, dwReserved1=0x0, cFileName="Proofing.msi", cAlternateFileName="")) returned 1 [0032.629] FindNextFileW (in: hFindFile=0x381b80, lpFindFileData=0x31e56c | out: lpFindFileData=0x31e56c*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x4529b900, ftCreationTime.dwHighDateTime=0x1cad04a, ftLastAccessTime.dwLowDateTime=0x4529b900, ftLastAccessTime.dwHighDateTime=0x1cad04a, ftLastWriteTime.dwLowDateTime=0xf00db300, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x32b, dwReserved0=0x0, dwReserved1=0x0, cFileName="Proofing.xml", cAlternateFileName="")) returned 1 [0032.629] FindNextFileW (in: hFindFile=0x381b80, lpFindFileData=0x31e56c | out: lpFindFileData=0x31e56c*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x42c75f00, ftCreationTime.dwHighDateTime=0x1cad04a, ftLastAccessTime.dwLowDateTime=0x42c75f00, ftLastAccessTime.dwHighDateTime=0x1cad04a, ftLastWriteTime.dwLowDateTime=0xf58c6830, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x16fc, dwReserved0=0x0, dwReserved1=0x0, cFileName="Setup.xml", cAlternateFileName="")) returned 1 [0032.629] FindNextFileW (in: hFindFile=0x381b80, lpFindFileData=0x31e56c | out: lpFindFileData=0x31e56c*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x42c75f00, ftCreationTime.dwHighDateTime=0x1cad04a, ftLastAccessTime.dwLowDateTime=0x42c75f00, ftLastAccessTime.dwHighDateTime=0x1cad04a, ftLastWriteTime.dwLowDateTime=0xf58c6830, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x16fc, dwReserved0=0x0, dwReserved1=0x0, cFileName="Setup.xml", cAlternateFileName="")) returned 0 [0032.629] FindClose (in: hFindFile=0x381b80 | out: hFindFile=0x381b80) returned 1 [0032.630] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e7f4) returned 1 [0032.630] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e800) returned 1 [0032.630] GetFullPathNameW (in: lpFileName="C:\\MSOCache\\All Users\\{90140000-002C-0409-1000-0000000FF1CE}-C\\Proofing.xml", nBufferLength=0x105, lpBuffer=0x31e20c, lpFilePart=0x0 | out: lpBuffer="C:\\MSOCache\\All Users\\{90140000-002C-0409-1000-0000000FF1CE}-C\\Proofing.xml", lpFilePart=0x0) returned 0x4b [0032.630] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e700) returned 1 [0032.630] CreateFileW (lpFileName="C:\\MSOCache\\All Users\\{90140000-002C-0409-1000-0000000FF1CE}-C\\Proofing.xml" (normalized: "c:\\msocache\\all users\\{90140000-002c-0409-1000-0000000ff1ce}-c\\proofing.xml"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x224 [0032.631] GetFileType (hFile=0x224) returned 0x1 [0032.631] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e6fc) returned 1 [0032.631] GetFileType (hFile=0x224) returned 0x1 [0032.631] GetFileSize (in: hFile=0x224, lpFileSizeHigh=0x31e808 | out: lpFileSizeHigh=0x31e808*=0x0) returned 0x32b [0032.631] ReadFile (in: hFile=0x224, lpBuffer=0x27cd00c, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x31e7b4, lpOverlapped=0x0 | out: lpBuffer=0x27cd00c*, lpNumberOfBytesRead=0x31e7b4*=0x32b, lpOverlapped=0x0) returned 1 [0032.632] CloseHandle (hObject=0x224) returned 1 [0032.648] GetFullPathNameW (in: lpFileName="C:\\MSOCache\\All Users\\{90140000-002C-0409-1000-0000000FF1CE}-C\\Proofing.xml", nBufferLength=0x105, lpBuffer=0x31e1f8, lpFilePart=0x0 | out: lpBuffer="C:\\MSOCache\\All Users\\{90140000-002C-0409-1000-0000000FF1CE}-C\\Proofing.xml", lpFilePart=0x0) returned 0x4b [0032.648] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e6ec) returned 1 [0032.648] CreateFileW (lpFileName="C:\\MSOCache\\All Users\\{90140000-002C-0409-1000-0000000FF1CE}-C\\Proofing.xml" (normalized: "c:\\msocache\\all users\\{90140000-002c-0409-1000-0000000ff1ce}-c\\proofing.xml"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x224 [0032.649] GetFileType (hFile=0x224) returned 0x1 [0032.649] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e6e8) returned 1 [0032.649] GetFileType (hFile=0x224) returned 0x1 [0032.649] WriteFile (in: hFile=0x224, lpBuffer=0x281bf1c*, nNumberOfBytesToWrite=0x330, lpNumberOfBytesWritten=0x31e77c, lpOverlapped=0x0 | out: lpBuffer=0x281bf1c*, lpNumberOfBytesWritten=0x31e77c*=0x330, lpOverlapped=0x0) returned 1 [0032.650] CloseHandle (hObject=0x224) returned 1 [0032.650] GetFullPathNameW (in: lpFileName="C:\\MSOCache\\All Users\\{90140000-002C-0409-1000-0000000FF1CE}-C\\Proofing.xml", nBufferLength=0x105, lpBuffer=0x31e32c, lpFilePart=0x0 | out: lpBuffer="C:\\MSOCache\\All Users\\{90140000-002C-0409-1000-0000000FF1CE}-C\\Proofing.xml", lpFilePart=0x0) returned 0x4b [0032.650] GetFullPathNameW (in: lpFileName="C:\\MSOCache\\All Users\\{90140000-002C-0409-1000-0000000FF1CE}-C\\Proofing.xml", nBufferLength=0x105, lpBuffer=0x31e32c, lpFilePart=0x0 | out: lpBuffer="C:\\MSOCache\\All Users\\{90140000-002C-0409-1000-0000000FF1CE}-C\\Proofing.xml", lpFilePart=0x0) returned 0x4b [0032.650] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e78c) returned 1 [0032.650] GetFileAttributesExW (in: lpFileName="C:\\MSOCache\\All Users\\{90140000-002C-0409-1000-0000000FF1CE}-C\\Proofing.xml" (normalized: "c:\\msocache\\all users\\{90140000-002c-0409-1000-0000000ff1ce}-c\\proofing.xml"), fInfoLevelId=0x0, lpFileInformation=0x31e808 | out: lpFileInformation=0x31e808*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x4529b900, ftCreationTime.dwHighDateTime=0x1cad04a, ftLastAccessTime.dwLowDateTime=0x4529b900, ftLastAccessTime.dwHighDateTime=0x1cad04a, ftLastWriteTime.dwLowDateTime=0xf6e8c180, ftLastWriteTime.dwHighDateTime=0x1d6eb7e, nFileSizeHigh=0x0, nFileSizeLow=0x330)) returned 1 [0032.651] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e788) returned 1 [0032.651] MoveFileW (lpExistingFileName="C:\\MSOCache\\All Users\\{90140000-002C-0409-1000-0000000FF1CE}-C\\Proofing.xml" (normalized: "c:\\msocache\\all users\\{90140000-002c-0409-1000-0000000ff1ce}-c\\proofing.xml"), lpNewFileName="C:\\MSOCache\\All Users\\{90140000-002C-0409-1000-0000000FF1CE}-C\\Proofing.xml" (normalized: "c:\\msocache\\all users\\{90140000-002c-0409-1000-0000000ff1ce}-c\\proofing.xml")) returned 1 [0032.651] GetFullPathNameW (in: lpFileName="C:\\MSOCache\\All Users\\{90140000-002C-0409-1000-0000000FF1CE}-C\\Setup.xml", nBufferLength=0x105, lpBuffer=0x31e20c, lpFilePart=0x0 | out: lpBuffer="C:\\MSOCache\\All Users\\{90140000-002C-0409-1000-0000000FF1CE}-C\\Setup.xml", lpFilePart=0x0) returned 0x48 [0032.651] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e700) returned 1 [0032.651] CreateFileW (lpFileName="C:\\MSOCache\\All Users\\{90140000-002C-0409-1000-0000000FF1CE}-C\\Setup.xml" (normalized: "c:\\msocache\\all users\\{90140000-002c-0409-1000-0000000ff1ce}-c\\setup.xml"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x224 [0032.651] GetFileType (hFile=0x224) returned 0x1 [0032.651] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e6fc) returned 1 [0032.652] GetFileType (hFile=0x224) returned 0x1 [0032.652] GetFileSize (in: hFile=0x224, lpFileSizeHigh=0x31e808 | out: lpFileSizeHigh=0x31e808*=0x0) returned 0x16fc [0032.652] ReadFile (in: hFile=0x224, lpBuffer=0x281d1a4, nNumberOfBytesToRead=0x16fc, lpNumberOfBytesRead=0x31e7b4, lpOverlapped=0x0 | out: lpBuffer=0x281d1a4*, lpNumberOfBytesRead=0x31e7b4*=0x16fc, lpOverlapped=0x0) returned 1 [0032.653] CloseHandle (hObject=0x224) returned 1 [0032.699] GetFullPathNameW (in: lpFileName="C:\\MSOCache\\All Users\\{90140000-002C-0409-1000-0000000FF1CE}-C\\Setup.xml", nBufferLength=0x105, lpBuffer=0x31e1f8, lpFilePart=0x0 | out: lpBuffer="C:\\MSOCache\\All Users\\{90140000-002C-0409-1000-0000000FF1CE}-C\\Setup.xml", lpFilePart=0x0) returned 0x48 [0032.699] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e6ec) returned 1 [0032.699] CreateFileW (lpFileName="C:\\MSOCache\\All Users\\{90140000-002C-0409-1000-0000000FF1CE}-C\\Setup.xml" (normalized: "c:\\msocache\\all users\\{90140000-002c-0409-1000-0000000ff1ce}-c\\setup.xml"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x224 [0032.700] GetFileType (hFile=0x224) returned 0x1 [0032.700] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e6e8) returned 1 [0032.700] GetFileType (hFile=0x224) returned 0x1 [0032.700] WriteFile (in: hFile=0x224, lpBuffer=0x2673f64*, nNumberOfBytesToWrite=0x1700, lpNumberOfBytesWritten=0x31e7a8, lpOverlapped=0x0 | out: lpBuffer=0x2673f64*, lpNumberOfBytesWritten=0x31e7a8*=0x1700, lpOverlapped=0x0) returned 1 [0032.700] CloseHandle (hObject=0x224) returned 1 [0032.701] GetFullPathNameW (in: lpFileName="C:\\MSOCache\\All Users\\{90140000-002C-0409-1000-0000000FF1CE}-C\\Setup.xml", nBufferLength=0x105, lpBuffer=0x31e32c, lpFilePart=0x0 | out: lpBuffer="C:\\MSOCache\\All Users\\{90140000-002C-0409-1000-0000000FF1CE}-C\\Setup.xml", lpFilePart=0x0) returned 0x48 [0032.701] GetFullPathNameW (in: lpFileName="C:\\MSOCache\\All Users\\{90140000-002C-0409-1000-0000000FF1CE}-C\\Setup.xml", nBufferLength=0x105, lpBuffer=0x31e32c, lpFilePart=0x0 | out: lpBuffer="C:\\MSOCache\\All Users\\{90140000-002C-0409-1000-0000000FF1CE}-C\\Setup.xml", lpFilePart=0x0) returned 0x48 [0032.701] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e78c) returned 1 [0032.701] GetFileAttributesExW (in: lpFileName="C:\\MSOCache\\All Users\\{90140000-002C-0409-1000-0000000FF1CE}-C\\Setup.xml" (normalized: "c:\\msocache\\all users\\{90140000-002c-0409-1000-0000000ff1ce}-c\\setup.xml"), fInfoLevelId=0x0, lpFileInformation=0x31e808 | out: lpFileInformation=0x31e808*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x42c75f00, ftCreationTime.dwHighDateTime=0x1cad04a, ftLastAccessTime.dwLowDateTime=0x42c75f00, ftLastAccessTime.dwHighDateTime=0x1cad04a, ftLastWriteTime.dwLowDateTime=0xf6f24700, ftLastWriteTime.dwHighDateTime=0x1d6eb7e, nFileSizeHigh=0x0, nFileSizeLow=0x1700)) returned 1 [0032.701] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e788) returned 1 [0032.701] MoveFileW (lpExistingFileName="C:\\MSOCache\\All Users\\{90140000-002C-0409-1000-0000000FF1CE}-C\\Setup.xml" (normalized: "c:\\msocache\\all users\\{90140000-002c-0409-1000-0000000ff1ce}-c\\setup.xml"), lpNewFileName="C:\\MSOCache\\All Users\\{90140000-002C-0409-1000-0000000FF1CE}-C\\Setup.xml" (normalized: "c:\\msocache\\all users\\{90140000-002c-0409-1000-0000000ff1ce}-c\\setup.xml")) returned 1 [0032.702] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e7bc) returned 1 [0032.702] GetFullPathNameW (in: lpFileName="C:\\MSOCache\\All Users\\{90140000-002C-0409-1000-0000000FF1CE}-C\\Proof.en", nBufferLength=0x105, lpBuffer=0x31e2c4, lpFilePart=0x0 | out: lpBuffer="C:\\MSOCache\\All Users\\{90140000-002C-0409-1000-0000000FF1CE}-C\\Proof.en", lpFilePart=0x0) returned 0x47 [0032.702] GetFullPathNameW (in: lpFileName="C:\\MSOCache\\All Users\\{90140000-002C-0409-1000-0000000FF1CE}-C\\Proof.en\\", nBufferLength=0x105, lpBuffer=0x31e298, lpFilePart=0x0 | out: lpBuffer="C:\\MSOCache\\All Users\\{90140000-002C-0409-1000-0000000FF1CE}-C\\Proof.en\\", lpFilePart=0x0) returned 0x48 [0032.702] FindFirstFileW (in: lpFileName="C:\\MSOCache\\All Users\\{90140000-002C-0409-1000-0000000FF1CE}-C\\Proof.en\\*", lpFindFileData=0x31e4e4 | out: lpFindFileData=0x31e4e4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xf01c0310, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xf07b3a10, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xf07b3a10, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x381e00 [0032.702] FindNextFileW (in: hFindFile=0x381e00, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xf01c0310, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xf07b3a10, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xf07b3a10, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0032.702] FindNextFileW (in: hFindFile=0x381e00, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x219b4a00, ftCreationTime.dwHighDateTime=0x1cad01b, ftLastAccessTime.dwLowDateTime=0x219b4a00, ftLastAccessTime.dwHighDateTime=0x1cad01b, ftLastWriteTime.dwLowDateTime=0xf07b1ad0, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0xaf35ed, dwReserved0=0x0, dwReserved1=0x0, cFileName="Proof.cab", cAlternateFileName="")) returned 1 [0032.703] FindNextFileW (in: hFindFile=0x381e00, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x4db6cb00, ftCreationTime.dwHighDateTime=0x1cad01b, ftLastAccessTime.dwLowDateTime=0x4db6cb00, ftLastAccessTime.dwHighDateTime=0x1cad01b, ftLastWriteTime.dwLowDateTime=0xf020c5d0, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0xd5c00, dwReserved0=0x0, dwReserved1=0x0, cFileName="Proof.msi", cAlternateFileName="")) returned 1 [0032.703] FindNextFileW (in: hFindFile=0x381e00, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xa38b7300, ftCreationTime.dwHighDateTime=0x1cad01b, ftLastAccessTime.dwLowDateTime=0xa38b7300, ftLastAccessTime.dwHighDateTime=0x1cad01b, ftLastWriteTime.dwLowDateTime=0xf01be3d0, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x543, dwReserved0=0x0, dwReserved1=0x0, cFileName="Proof.xml", cAlternateFileName="")) returned 1 [0032.703] FindNextFileW (in: hFindFile=0x381e00, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0032.703] FindClose (in: hFindFile=0x381e00 | out: hFindFile=0x381e00) returned 1 [0032.703] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e77c) returned 1 [0032.703] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e788) returned 1 [0032.703] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e7bc) returned 1 [0032.703] GetFullPathNameW (in: lpFileName="C:\\MSOCache\\All Users\\{90140000-002C-0409-1000-0000000FF1CE}-C\\Proof.en", nBufferLength=0x105, lpBuffer=0x31e2c4, lpFilePart=0x0 | out: lpBuffer="C:\\MSOCache\\All Users\\{90140000-002C-0409-1000-0000000FF1CE}-C\\Proof.en", lpFilePart=0x0) returned 0x47 [0032.703] GetFullPathNameW (in: lpFileName="C:\\MSOCache\\All Users\\{90140000-002C-0409-1000-0000000FF1CE}-C\\Proof.en\\", nBufferLength=0x105, lpBuffer=0x31e298, lpFilePart=0x0 | out: lpBuffer="C:\\MSOCache\\All Users\\{90140000-002C-0409-1000-0000000FF1CE}-C\\Proof.en\\", lpFilePart=0x0) returned 0x48 [0032.703] FindFirstFileW (in: lpFileName="C:\\MSOCache\\All Users\\{90140000-002C-0409-1000-0000000FF1CE}-C\\Proof.en\\*", lpFindFileData=0x31e4e4 | out: lpFindFileData=0x31e4e4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xf01c0310, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xf07b3a10, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xf07b3a10, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x381e00 [0032.703] FindNextFileW (in: hFindFile=0x381e00, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xf01c0310, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xf07b3a10, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xf07b3a10, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0032.704] FindNextFileW (in: hFindFile=0x381e00, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x219b4a00, ftCreationTime.dwHighDateTime=0x1cad01b, ftLastAccessTime.dwLowDateTime=0x219b4a00, ftLastAccessTime.dwHighDateTime=0x1cad01b, ftLastWriteTime.dwLowDateTime=0xf07b1ad0, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0xaf35ed, dwReserved0=0x0, dwReserved1=0x0, cFileName="Proof.cab", cAlternateFileName="")) returned 1 [0032.704] FindNextFileW (in: hFindFile=0x381e00, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x4db6cb00, ftCreationTime.dwHighDateTime=0x1cad01b, ftLastAccessTime.dwLowDateTime=0x4db6cb00, ftLastAccessTime.dwHighDateTime=0x1cad01b, ftLastWriteTime.dwLowDateTime=0xf020c5d0, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0xd5c00, dwReserved0=0x0, dwReserved1=0x0, cFileName="Proof.msi", cAlternateFileName="")) returned 1 [0032.704] FindNextFileW (in: hFindFile=0x381e00, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xa38b7300, ftCreationTime.dwHighDateTime=0x1cad01b, ftLastAccessTime.dwLowDateTime=0xa38b7300, ftLastAccessTime.dwHighDateTime=0x1cad01b, ftLastWriteTime.dwLowDateTime=0xf01be3d0, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x543, dwReserved0=0x0, dwReserved1=0x0, cFileName="Proof.xml", cAlternateFileName="")) returned 1 [0032.704] FindNextFileW (in: hFindFile=0x381e00, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xa38b7300, ftCreationTime.dwHighDateTime=0x1cad01b, ftLastAccessTime.dwLowDateTime=0xa38b7300, ftLastAccessTime.dwHighDateTime=0x1cad01b, ftLastWriteTime.dwLowDateTime=0xf01be3d0, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x543, dwReserved0=0x0, dwReserved1=0x0, cFileName="Proof.xml", cAlternateFileName="")) returned 0 [0032.704] FindClose (in: hFindFile=0x381e00 | out: hFindFile=0x381e00) returned 1 [0032.704] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e77c) returned 1 [0032.704] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e788) returned 1 [0032.704] GetFullPathNameW (in: lpFileName="C:\\MSOCache\\All Users\\{90140000-002C-0409-1000-0000000FF1CE}-C\\Proof.en\\Proof.xml", nBufferLength=0x105, lpBuffer=0x31e194, lpFilePart=0x0 | out: lpBuffer="C:\\MSOCache\\All Users\\{90140000-002C-0409-1000-0000000FF1CE}-C\\Proof.en\\Proof.xml", lpFilePart=0x0) returned 0x51 [0032.704] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e688) returned 1 [0032.704] CreateFileW (lpFileName="C:\\MSOCache\\All Users\\{90140000-002C-0409-1000-0000000FF1CE}-C\\Proof.en\\Proof.xml" (normalized: "c:\\msocache\\all users\\{90140000-002c-0409-1000-0000000ff1ce}-c\\proof.en\\proof.xml"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x224 [0032.705] GetFileType (hFile=0x224) returned 0x1 [0032.705] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e684) returned 1 [0032.705] GetFileType (hFile=0x224) returned 0x1 [0032.705] GetFileSize (in: hFile=0x224, lpFileSizeHigh=0x31e790 | out: lpFileSizeHigh=0x31e790*=0x0) returned 0x543 [0032.705] ReadFile (in: hFile=0x224, lpBuffer=0x2677fec, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x31e73c, lpOverlapped=0x0 | out: lpBuffer=0x2677fec*, lpNumberOfBytesRead=0x31e73c*=0x543, lpOverlapped=0x0) returned 1 [0032.707] CloseHandle (hObject=0x224) returned 1 [0032.720] GetFullPathNameW (in: lpFileName="C:\\MSOCache\\All Users\\{90140000-002C-0409-1000-0000000FF1CE}-C\\Proof.en\\Proof.xml", nBufferLength=0x105, lpBuffer=0x31e180, lpFilePart=0x0 | out: lpBuffer="C:\\MSOCache\\All Users\\{90140000-002C-0409-1000-0000000FF1CE}-C\\Proof.en\\Proof.xml", lpFilePart=0x0) returned 0x51 [0032.720] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e674) returned 1 [0032.720] CreateFileW (lpFileName="C:\\MSOCache\\All Users\\{90140000-002C-0409-1000-0000000FF1CE}-C\\Proof.en\\Proof.xml" (normalized: "c:\\msocache\\all users\\{90140000-002c-0409-1000-0000000ff1ce}-c\\proof.en\\proof.xml"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x224 [0032.721] GetFileType (hFile=0x224) returned 0x1 [0032.721] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e670) returned 1 [0032.721] GetFileType (hFile=0x224) returned 0x1 [0032.721] WriteFile (in: hFile=0x224, lpBuffer=0x26c7b04*, nNumberOfBytesToWrite=0x550, lpNumberOfBytesWritten=0x31e704, lpOverlapped=0x0 | out: lpBuffer=0x26c7b04*, lpNumberOfBytesWritten=0x31e704*=0x550, lpOverlapped=0x0) returned 1 [0032.722] CloseHandle (hObject=0x224) returned 1 [0032.723] GetFullPathNameW (in: lpFileName="C:\\MSOCache\\All Users\\{90140000-002C-0409-1000-0000000FF1CE}-C\\Proof.en\\Proof.xml", nBufferLength=0x105, lpBuffer=0x31e2b4, lpFilePart=0x0 | out: lpBuffer="C:\\MSOCache\\All Users\\{90140000-002C-0409-1000-0000000FF1CE}-C\\Proof.en\\Proof.xml", lpFilePart=0x0) returned 0x51 [0032.723] GetFullPathNameW (in: lpFileName="C:\\MSOCache\\All Users\\{90140000-002C-0409-1000-0000000FF1CE}-C\\Proof.en\\Proof.xml", nBufferLength=0x105, lpBuffer=0x31e2b4, lpFilePart=0x0 | out: lpBuffer="C:\\MSOCache\\All Users\\{90140000-002C-0409-1000-0000000FF1CE}-C\\Proof.en\\Proof.xml", lpFilePart=0x0) returned 0x51 [0032.723] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e714) returned 1 [0032.723] GetFileAttributesExW (in: lpFileName="C:\\MSOCache\\All Users\\{90140000-002C-0409-1000-0000000FF1CE}-C\\Proof.en\\Proof.xml" (normalized: "c:\\msocache\\all users\\{90140000-002c-0409-1000-0000000ff1ce}-c\\proof.en\\proof.xml"), fInfoLevelId=0x0, lpFileInformation=0x31e790 | out: lpFileInformation=0x31e790*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xa38b7300, ftCreationTime.dwHighDateTime=0x1cad01b, ftLastAccessTime.dwLowDateTime=0xa38b7300, ftLastAccessTime.dwHighDateTime=0x1cad01b, ftLastWriteTime.dwLowDateTime=0xf6f4a860, ftLastWriteTime.dwHighDateTime=0x1d6eb7e, nFileSizeHigh=0x0, nFileSizeLow=0x550)) returned 1 [0032.723] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e710) returned 1 [0032.723] MoveFileW (lpExistingFileName="C:\\MSOCache\\All Users\\{90140000-002C-0409-1000-0000000FF1CE}-C\\Proof.en\\Proof.xml" (normalized: "c:\\msocache\\all users\\{90140000-002c-0409-1000-0000000ff1ce}-c\\proof.en\\proof.xml"), lpNewFileName="C:\\MSOCache\\All Users\\{90140000-002C-0409-1000-0000000FF1CE}-C\\Proof.en\\Proof.xml" (normalized: "c:\\msocache\\all users\\{90140000-002c-0409-1000-0000000ff1ce}-c\\proof.en\\proof.xml")) returned 1 [0032.723] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e7bc) returned 1 [0032.723] GetFullPathNameW (in: lpFileName="C:\\MSOCache\\All Users\\{90140000-002C-0409-1000-0000000FF1CE}-C\\Proof.es", nBufferLength=0x105, lpBuffer=0x31e2c4, lpFilePart=0x0 | out: lpBuffer="C:\\MSOCache\\All Users\\{90140000-002C-0409-1000-0000000FF1CE}-C\\Proof.es", lpFilePart=0x0) returned 0x47 [0032.723] GetFullPathNameW (in: lpFileName="C:\\MSOCache\\All Users\\{90140000-002C-0409-1000-0000000FF1CE}-C\\Proof.es\\", nBufferLength=0x105, lpBuffer=0x31e298, lpFilePart=0x0 | out: lpBuffer="C:\\MSOCache\\All Users\\{90140000-002C-0409-1000-0000000FF1CE}-C\\Proof.es\\", lpFilePart=0x0) returned 0x48 [0032.724] FindFirstFileW (in: lpFileName="C:\\MSOCache\\All Users\\{90140000-002C-0409-1000-0000000FF1CE}-C\\Proof.es\\*", lpFindFileData=0x31e4e4 | out: lpFindFileData=0x31e4e4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xf4d53d90, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xf4f690d0, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xf4f690d0, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x381c80 [0032.724] FindNextFileW (in: hFindFile=0x381c80, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xf4d53d90, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xf4f690d0, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xf4f690d0, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0032.724] FindNextFileW (in: hFindFile=0x381c80, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x3ba05100, ftCreationTime.dwHighDateTime=0x1cad04a, ftLastAccessTime.dwLowDateTime=0x3ba05100, ftLastAccessTime.dwHighDateTime=0x1cad04a, ftLastWriteTime.dwLowDateTime=0xf4f690d0, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0xd02aea, dwReserved0=0x0, dwReserved1=0x0, cFileName="Proof.cab", cAlternateFileName="")) returned 1 [0032.724] FindNextFileW (in: hFindFile=0x381c80, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x3f33d800, ftCreationTime.dwHighDateTime=0x1cad04a, ftLastAccessTime.dwLowDateTime=0x3f33d800, ftLastAccessTime.dwHighDateTime=0x1cad04a, ftLastWriteTime.dwLowDateTime=0xf4e5c7f0, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0xd7200, dwReserved0=0x0, dwReserved1=0x0, cFileName="Proof.msi", cAlternateFileName="")) returned 1 [0032.724] FindNextFileW (in: hFindFile=0x381c80, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x43f88c00, ftCreationTime.dwHighDateTime=0x1cad04a, ftLastAccessTime.dwLowDateTime=0x43f88c00, ftLastAccessTime.dwHighDateTime=0x1cad04a, ftLastWriteTime.dwLowDateTime=0xf4e37e00, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x5b1, dwReserved0=0x0, dwReserved1=0x0, cFileName="Proof.xml", cAlternateFileName="")) returned 1 [0032.724] FindNextFileW (in: hFindFile=0x381c80, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0032.724] FindClose (in: hFindFile=0x381c80 | out: hFindFile=0x381c80) returned 1 [0032.725] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e77c) returned 1 [0032.725] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e788) returned 1 [0032.725] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e7bc) returned 1 [0032.725] GetFullPathNameW (in: lpFileName="C:\\MSOCache\\All Users\\{90140000-002C-0409-1000-0000000FF1CE}-C\\Proof.es", nBufferLength=0x105, lpBuffer=0x31e2c4, lpFilePart=0x0 | out: lpBuffer="C:\\MSOCache\\All Users\\{90140000-002C-0409-1000-0000000FF1CE}-C\\Proof.es", lpFilePart=0x0) returned 0x47 [0032.725] GetFullPathNameW (in: lpFileName="C:\\MSOCache\\All Users\\{90140000-002C-0409-1000-0000000FF1CE}-C\\Proof.es\\", nBufferLength=0x105, lpBuffer=0x31e298, lpFilePart=0x0 | out: lpBuffer="C:\\MSOCache\\All Users\\{90140000-002C-0409-1000-0000000FF1CE}-C\\Proof.es\\", lpFilePart=0x0) returned 0x48 [0032.725] FindFirstFileW (in: lpFileName="C:\\MSOCache\\All Users\\{90140000-002C-0409-1000-0000000FF1CE}-C\\Proof.es\\*", lpFindFileData=0x31e4e4 | out: lpFindFileData=0x31e4e4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xf4d53d90, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xf4f690d0, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xf4f690d0, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x381c80 [0032.725] FindNextFileW (in: hFindFile=0x381c80, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xf4d53d90, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xf4f690d0, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xf4f690d0, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0032.725] FindNextFileW (in: hFindFile=0x381c80, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x3ba05100, ftCreationTime.dwHighDateTime=0x1cad04a, ftLastAccessTime.dwLowDateTime=0x3ba05100, ftLastAccessTime.dwHighDateTime=0x1cad04a, ftLastWriteTime.dwLowDateTime=0xf4f690d0, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0xd02aea, dwReserved0=0x0, dwReserved1=0x0, cFileName="Proof.cab", cAlternateFileName="")) returned 1 [0032.725] FindNextFileW (in: hFindFile=0x381c80, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x3f33d800, ftCreationTime.dwHighDateTime=0x1cad04a, ftLastAccessTime.dwLowDateTime=0x3f33d800, ftLastAccessTime.dwHighDateTime=0x1cad04a, ftLastWriteTime.dwLowDateTime=0xf4e5c7f0, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0xd7200, dwReserved0=0x0, dwReserved1=0x0, cFileName="Proof.msi", cAlternateFileName="")) returned 1 [0032.725] FindNextFileW (in: hFindFile=0x381c80, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x43f88c00, ftCreationTime.dwHighDateTime=0x1cad04a, ftLastAccessTime.dwLowDateTime=0x43f88c00, ftLastAccessTime.dwHighDateTime=0x1cad04a, ftLastWriteTime.dwLowDateTime=0xf4e37e00, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x5b1, dwReserved0=0x0, dwReserved1=0x0, cFileName="Proof.xml", cAlternateFileName="")) returned 1 [0032.725] FindNextFileW (in: hFindFile=0x381c80, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x43f88c00, ftCreationTime.dwHighDateTime=0x1cad04a, ftLastAccessTime.dwLowDateTime=0x43f88c00, ftLastAccessTime.dwHighDateTime=0x1cad04a, ftLastWriteTime.dwLowDateTime=0xf4e37e00, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x5b1, dwReserved0=0x0, dwReserved1=0x0, cFileName="Proof.xml", cAlternateFileName="")) returned 0 [0032.726] FindClose (in: hFindFile=0x381c80 | out: hFindFile=0x381c80) returned 1 [0032.726] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e77c) returned 1 [0032.726] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e788) returned 1 [0032.726] GetFullPathNameW (in: lpFileName="C:\\MSOCache\\All Users\\{90140000-002C-0409-1000-0000000FF1CE}-C\\Proof.es\\Proof.xml", nBufferLength=0x105, lpBuffer=0x31e194, lpFilePart=0x0 | out: lpBuffer="C:\\MSOCache\\All Users\\{90140000-002C-0409-1000-0000000FF1CE}-C\\Proof.es\\Proof.xml", lpFilePart=0x0) returned 0x51 [0032.726] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e688) returned 1 [0032.726] CreateFileW (lpFileName="C:\\MSOCache\\All Users\\{90140000-002C-0409-1000-0000000FF1CE}-C\\Proof.es\\Proof.xml" (normalized: "c:\\msocache\\all users\\{90140000-002c-0409-1000-0000000ff1ce}-c\\proof.es\\proof.xml"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x224 [0032.726] GetFileType (hFile=0x224) returned 0x1 [0032.726] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e684) returned 1 [0032.726] GetFileType (hFile=0x224) returned 0x1 [0032.726] GetFileSize (in: hFile=0x224, lpFileSizeHigh=0x31e790 | out: lpFileSizeHigh=0x31e790*=0x0) returned 0x5b1 [0032.726] ReadFile (in: hFile=0x224, lpBuffer=0x26cb400, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x31e73c, lpOverlapped=0x0 | out: lpBuffer=0x26cb400*, lpNumberOfBytesRead=0x31e73c*=0x5b1, lpOverlapped=0x0) returned 1 [0032.742] GetFullPathNameW (in: lpFileName="C:\\MSOCache\\All Users\\{90140000-002C-0409-1000-0000000FF1CE}-C\\Proof.es\\Proof.xml", nBufferLength=0x105, lpBuffer=0x31e180, lpFilePart=0x0 | out: lpBuffer="C:\\MSOCache\\All Users\\{90140000-002C-0409-1000-0000000FF1CE}-C\\Proof.es\\Proof.xml", lpFilePart=0x0) returned 0x51 [0032.742] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e674) returned 1 [0032.742] CreateFileW (lpFileName="C:\\MSOCache\\All Users\\{90140000-002C-0409-1000-0000000FF1CE}-C\\Proof.es\\Proof.xml" (normalized: "c:\\msocache\\all users\\{90140000-002c-0409-1000-0000000ff1ce}-c\\proof.es\\proof.xml"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x224 [0032.743] GetFileType (hFile=0x224) returned 0x1 [0032.743] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e670) returned 1 [0032.743] GetFileType (hFile=0x224) returned 0x1 [0032.743] WriteFile (in: hFile=0x224, lpBuffer=0x271afec*, nNumberOfBytesToWrite=0x5c0, lpNumberOfBytesWritten=0x31e704, lpOverlapped=0x0 | out: lpBuffer=0x271afec*, lpNumberOfBytesWritten=0x31e704*=0x5c0, lpOverlapped=0x0) returned 1 [0032.744] GetFullPathNameW (in: lpFileName="C:\\MSOCache\\All Users\\{90140000-002C-0409-1000-0000000FF1CE}-C\\Proof.es\\Proof.xml", nBufferLength=0x105, lpBuffer=0x31e2b4, lpFilePart=0x0 | out: lpBuffer="C:\\MSOCache\\All Users\\{90140000-002C-0409-1000-0000000FF1CE}-C\\Proof.es\\Proof.xml", lpFilePart=0x0) returned 0x51 [0032.744] GetFullPathNameW (in: lpFileName="C:\\MSOCache\\All Users\\{90140000-002C-0409-1000-0000000FF1CE}-C\\Proof.es\\Proof.xml", nBufferLength=0x105, lpBuffer=0x31e2b4, lpFilePart=0x0 | out: lpBuffer="C:\\MSOCache\\All Users\\{90140000-002C-0409-1000-0000000FF1CE}-C\\Proof.es\\Proof.xml", lpFilePart=0x0) returned 0x51 [0032.744] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e714) returned 1 [0032.744] GetFileAttributesExW (in: lpFileName="C:\\MSOCache\\All Users\\{90140000-002C-0409-1000-0000000FF1CE}-C\\Proof.es\\Proof.xml" (normalized: "c:\\msocache\\all users\\{90140000-002c-0409-1000-0000000ff1ce}-c\\proof.es\\proof.xml"), fInfoLevelId=0x0, lpFileInformation=0x31e790 | out: lpFileInformation=0x31e790*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x43f88c00, ftCreationTime.dwHighDateTime=0x1cad04a, ftLastAccessTime.dwLowDateTime=0x43f88c00, ftLastAccessTime.dwHighDateTime=0x1cad04a, ftLastWriteTime.dwLowDateTime=0xf6f709c0, ftLastWriteTime.dwHighDateTime=0x1d6eb7e, nFileSizeHigh=0x0, nFileSizeLow=0x5c0)) returned 1 [0032.744] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e710) returned 1 [0032.744] MoveFileW (lpExistingFileName="C:\\MSOCache\\All Users\\{90140000-002C-0409-1000-0000000FF1CE}-C\\Proof.es\\Proof.xml" (normalized: "c:\\msocache\\all users\\{90140000-002c-0409-1000-0000000ff1ce}-c\\proof.es\\proof.xml"), lpNewFileName="C:\\MSOCache\\All Users\\{90140000-002C-0409-1000-0000000FF1CE}-C\\Proof.es\\Proof.xml" (normalized: "c:\\msocache\\all users\\{90140000-002c-0409-1000-0000000ff1ce}-c\\proof.es\\proof.xml")) returned 1 [0032.745] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e7bc) returned 1 [0032.745] GetFullPathNameW (in: lpFileName="C:\\MSOCache\\All Users\\{90140000-002C-0409-1000-0000000FF1CE}-C\\Proof.fr", nBufferLength=0x105, lpBuffer=0x31e2c4, lpFilePart=0x0 | out: lpBuffer="C:\\MSOCache\\All Users\\{90140000-002C-0409-1000-0000000FF1CE}-C\\Proof.fr", lpFilePart=0x0) returned 0x47 [0032.745] GetFullPathNameW (in: lpFileName="C:\\MSOCache\\All Users\\{90140000-002C-0409-1000-0000000FF1CE}-C\\Proof.fr\\", nBufferLength=0x105, lpBuffer=0x31e298, lpFilePart=0x0 | out: lpBuffer="C:\\MSOCache\\All Users\\{90140000-002C-0409-1000-0000000FF1CE}-C\\Proof.fr\\", lpFilePart=0x0) returned 0x48 [0032.745] FindFirstFileW (in: lpFileName="C:\\MSOCache\\All Users\\{90140000-002C-0409-1000-0000000FF1CE}-C\\Proof.fr\\*", lpFindFileData=0x31e4e4 | out: lpFindFileData=0x31e4e4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xf2bda830, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xf30772d0, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xf30772d0, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x381d80 [0032.746] FindNextFileW (in: hFindFile=0x381d80, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xf2bda830, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xf30772d0, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xf30772d0, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0032.746] FindNextFileW (in: hFindFile=0x381d80, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x35aa7000, ftCreationTime.dwHighDateTime=0x1cad04a, ftLastAccessTime.dwLowDateTime=0x35aa7000, ftLastAccessTime.dwHighDateTime=0x1cad04a, ftLastWriteTime.dwLowDateTime=0xf3076b00, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x1416b54, dwReserved0=0x0, dwReserved1=0x0, cFileName="Proof.cab", cAlternateFileName="")) returned 1 [0032.746] FindNextFileW (in: hFindFile=0x381d80, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x3f33d800, ftCreationTime.dwHighDateTime=0x1cad04a, ftLastAccessTime.dwLowDateTime=0x3f33d800, ftLastAccessTime.dwHighDateTime=0x1cad04a, ftLastWriteTime.dwLowDateTime=0xf2e3b660, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0xd8400, dwReserved0=0x0, dwReserved1=0x0, cFileName="Proof.msi", cAlternateFileName="")) returned 1 [0032.746] FindNextFileW (in: hFindFile=0x381d80, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x43f88c00, ftCreationTime.dwHighDateTime=0x1cad04a, ftLastAccessTime.dwLowDateTime=0x43f88c00, ftLastAccessTime.dwHighDateTime=0x1cad04a, ftLastWriteTime.dwLowDateTime=0xf2bd90c0, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x5b2, dwReserved0=0x0, dwReserved1=0x0, cFileName="Proof.xml", cAlternateFileName="")) returned 1 [0032.746] FindNextFileW (in: hFindFile=0x381d80, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0032.746] FindClose (in: hFindFile=0x381d80 | out: hFindFile=0x381d80) returned 1 [0032.746] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e77c) returned 1 [0032.746] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e788) returned 1 [0032.747] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e7bc) returned 1 [0032.747] GetFullPathNameW (in: lpFileName="C:\\MSOCache\\All Users\\{90140000-002C-0409-1000-0000000FF1CE}-C\\Proof.fr", nBufferLength=0x105, lpBuffer=0x31e2c4, lpFilePart=0x0 | out: lpBuffer="C:\\MSOCache\\All Users\\{90140000-002C-0409-1000-0000000FF1CE}-C\\Proof.fr", lpFilePart=0x0) returned 0x47 [0032.747] GetFullPathNameW (in: lpFileName="C:\\MSOCache\\All Users\\{90140000-002C-0409-1000-0000000FF1CE}-C\\Proof.fr\\", nBufferLength=0x105, lpBuffer=0x31e298, lpFilePart=0x0 | out: lpBuffer="C:\\MSOCache\\All Users\\{90140000-002C-0409-1000-0000000FF1CE}-C\\Proof.fr\\", lpFilePart=0x0) returned 0x48 [0032.747] FindFirstFileW (in: lpFileName="C:\\MSOCache\\All Users\\{90140000-002C-0409-1000-0000000FF1CE}-C\\Proof.fr\\*", lpFindFileData=0x31e4e4 | out: lpFindFileData=0x31e4e4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xf2bda830, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xf30772d0, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xf30772d0, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x381d80 [0032.747] FindNextFileW (in: hFindFile=0x381d80, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xf2bda830, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xf30772d0, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xf30772d0, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0032.747] FindNextFileW (in: hFindFile=0x381d80, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x35aa7000, ftCreationTime.dwHighDateTime=0x1cad04a, ftLastAccessTime.dwLowDateTime=0x35aa7000, ftLastAccessTime.dwHighDateTime=0x1cad04a, ftLastWriteTime.dwLowDateTime=0xf3076b00, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x1416b54, dwReserved0=0x0, dwReserved1=0x0, cFileName="Proof.cab", cAlternateFileName="")) returned 1 [0032.747] FindNextFileW (in: hFindFile=0x381d80, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x3f33d800, ftCreationTime.dwHighDateTime=0x1cad04a, ftLastAccessTime.dwLowDateTime=0x3f33d800, ftLastAccessTime.dwHighDateTime=0x1cad04a, ftLastWriteTime.dwLowDateTime=0xf2e3b660, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0xd8400, dwReserved0=0x0, dwReserved1=0x0, cFileName="Proof.msi", cAlternateFileName="")) returned 1 [0032.747] FindNextFileW (in: hFindFile=0x381d80, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x43f88c00, ftCreationTime.dwHighDateTime=0x1cad04a, ftLastAccessTime.dwLowDateTime=0x43f88c00, ftLastAccessTime.dwHighDateTime=0x1cad04a, ftLastWriteTime.dwLowDateTime=0xf2bd90c0, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x5b2, dwReserved0=0x0, dwReserved1=0x0, cFileName="Proof.xml", cAlternateFileName="")) returned 1 [0032.747] FindNextFileW (in: hFindFile=0x381d80, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x43f88c00, ftCreationTime.dwHighDateTime=0x1cad04a, ftLastAccessTime.dwLowDateTime=0x43f88c00, ftLastAccessTime.dwHighDateTime=0x1cad04a, ftLastWriteTime.dwLowDateTime=0xf2bd90c0, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x5b2, dwReserved0=0x0, dwReserved1=0x0, cFileName="Proof.xml", cAlternateFileName="")) returned 0 [0032.747] FindClose (in: hFindFile=0x381d80 | out: hFindFile=0x381d80) returned 1 [0032.748] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e77c) returned 1 [0032.748] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e788) returned 1 [0032.748] GetFullPathNameW (in: lpFileName="C:\\MSOCache\\All Users\\{90140000-002C-0409-1000-0000000FF1CE}-C\\Proof.fr\\Proof.xml", nBufferLength=0x105, lpBuffer=0x31e194, lpFilePart=0x0 | out: lpBuffer="C:\\MSOCache\\All Users\\{90140000-002C-0409-1000-0000000FF1CE}-C\\Proof.fr\\Proof.xml", lpFilePart=0x0) returned 0x51 [0032.748] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e688) returned 1 [0032.748] CreateFileW (lpFileName="C:\\MSOCache\\All Users\\{90140000-002C-0409-1000-0000000FF1CE}-C\\Proof.fr\\Proof.xml" (normalized: "c:\\msocache\\all users\\{90140000-002c-0409-1000-0000000ff1ce}-c\\proof.fr\\proof.xml"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x224 [0032.748] GetFileType (hFile=0x224) returned 0x1 [0032.748] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e684) returned 1 [0032.748] GetFileType (hFile=0x224) returned 0x1 [0032.748] GetFileSize (in: hFile=0x224, lpFileSizeHigh=0x31e790 | out: lpFileSizeHigh=0x31e790*=0x0) returned 0x5b2 [0032.748] ReadFile (in: hFile=0x224, lpBuffer=0x271e8e8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x31e73c, lpOverlapped=0x0 | out: lpBuffer=0x271e8e8*, lpNumberOfBytesRead=0x31e73c*=0x5b2, lpOverlapped=0x0) returned 1 [0032.763] GetFullPathNameW (in: lpFileName="C:\\MSOCache\\All Users\\{90140000-002C-0409-1000-0000000FF1CE}-C\\Proof.fr\\Proof.xml", nBufferLength=0x105, lpBuffer=0x31e180, lpFilePart=0x0 | out: lpBuffer="C:\\MSOCache\\All Users\\{90140000-002C-0409-1000-0000000FF1CE}-C\\Proof.fr\\Proof.xml", lpFilePart=0x0) returned 0x51 [0032.763] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e674) returned 1 [0032.763] CreateFileW (lpFileName="C:\\MSOCache\\All Users\\{90140000-002C-0409-1000-0000000FF1CE}-C\\Proof.fr\\Proof.xml" (normalized: "c:\\msocache\\all users\\{90140000-002c-0409-1000-0000000ff1ce}-c\\proof.fr\\proof.xml"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x224 [0032.764] GetFileType (hFile=0x224) returned 0x1 [0032.764] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e670) returned 1 [0032.764] GetFileType (hFile=0x224) returned 0x1 [0032.764] WriteFile (in: hFile=0x224, lpBuffer=0x276e4d4*, nNumberOfBytesToWrite=0x5c0, lpNumberOfBytesWritten=0x31e704, lpOverlapped=0x0 | out: lpBuffer=0x276e4d4*, lpNumberOfBytesWritten=0x31e704*=0x5c0, lpOverlapped=0x0) returned 1 [0032.765] GetFullPathNameW (in: lpFileName="C:\\MSOCache\\All Users\\{90140000-002C-0409-1000-0000000FF1CE}-C\\Proof.fr\\Proof.xml", nBufferLength=0x105, lpBuffer=0x31e2b4, lpFilePart=0x0 | out: lpBuffer="C:\\MSOCache\\All Users\\{90140000-002C-0409-1000-0000000FF1CE}-C\\Proof.fr\\Proof.xml", lpFilePart=0x0) returned 0x51 [0032.765] GetFullPathNameW (in: lpFileName="C:\\MSOCache\\All Users\\{90140000-002C-0409-1000-0000000FF1CE}-C\\Proof.fr\\Proof.xml", nBufferLength=0x105, lpBuffer=0x31e2b4, lpFilePart=0x0 | out: lpBuffer="C:\\MSOCache\\All Users\\{90140000-002C-0409-1000-0000000FF1CE}-C\\Proof.fr\\Proof.xml", lpFilePart=0x0) returned 0x51 [0032.765] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e714) returned 1 [0032.765] GetFileAttributesExW (in: lpFileName="C:\\MSOCache\\All Users\\{90140000-002C-0409-1000-0000000FF1CE}-C\\Proof.fr\\Proof.xml" (normalized: "c:\\msocache\\all users\\{90140000-002c-0409-1000-0000000ff1ce}-c\\proof.fr\\proof.xml"), fInfoLevelId=0x0, lpFileInformation=0x31e790 | out: lpFileInformation=0x31e790*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x43f88c00, ftCreationTime.dwHighDateTime=0x1cad04a, ftLastAccessTime.dwLowDateTime=0x43f88c00, ftLastAccessTime.dwHighDateTime=0x1cad04a, ftLastWriteTime.dwLowDateTime=0xf6fbcc80, ftLastWriteTime.dwHighDateTime=0x1d6eb7e, nFileSizeHigh=0x0, nFileSizeLow=0x5c0)) returned 1 [0032.765] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e710) returned 1 [0032.765] MoveFileW (lpExistingFileName="C:\\MSOCache\\All Users\\{90140000-002C-0409-1000-0000000FF1CE}-C\\Proof.fr\\Proof.xml" (normalized: "c:\\msocache\\all users\\{90140000-002c-0409-1000-0000000ff1ce}-c\\proof.fr\\proof.xml"), lpNewFileName="C:\\MSOCache\\All Users\\{90140000-002C-0409-1000-0000000FF1CE}-C\\Proof.fr\\Proof.xml" (normalized: "c:\\msocache\\all users\\{90140000-002c-0409-1000-0000000ff1ce}-c\\proof.fr\\proof.xml")) returned 1 [0032.766] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e834) returned 1 [0032.766] GetFullPathNameW (in: lpFileName="C:\\MSOCache\\All Users\\{90140000-0043-0409-1000-0000000FF1CE}-C", nBufferLength=0x105, lpBuffer=0x31e33c, lpFilePart=0x0 | out: lpBuffer="C:\\MSOCache\\All Users\\{90140000-0043-0409-1000-0000000FF1CE}-C", lpFilePart=0x0) returned 0x3e [0032.766] GetFullPathNameW (in: lpFileName="C:\\MSOCache\\All Users\\{90140000-0043-0409-1000-0000000FF1CE}-C\\", nBufferLength=0x105, lpBuffer=0x31e310, lpFilePart=0x0 | out: lpBuffer="C:\\MSOCache\\All Users\\{90140000-0043-0409-1000-0000000FF1CE}-C\\", lpFilePart=0x0) returned 0x3f [0032.766] FindFirstFileW (in: lpFileName="C:\\MSOCache\\All Users\\{90140000-0043-0409-1000-0000000FF1CE}-C\\*", lpFindFileData=0x31e55c | out: lpFindFileData=0x31e55c*(dwFileAttributes=0x2011, ftCreationTime.dwLowDateTime=0xfc138cb0, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xfc3e6570, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xfc3e6570, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x381d00 [0032.769] FindNextFileW (in: hFindFile=0x381d00, lpFindFileData=0x31e56c | out: lpFindFileData=0x31e56c*(dwFileAttributes=0x2011, ftCreationTime.dwLowDateTime=0xfc138cb0, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xfc3e6570, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xfc3e6570, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0032.769] FindNextFileW (in: hFindFile=0x381d00, lpFindFileData=0x31e56c | out: lpFindFileData=0x31e56c*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x3f33d800, ftCreationTime.dwHighDateTime=0x1cad04a, ftLastAccessTime.dwLowDateTime=0x3f33d800, ftLastAccessTime.dwHighDateTime=0x1cad04a, ftLastWriteTime.dwLowDateTime=0xfc138cb0, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0xd5600, dwReserved0=0x0, dwReserved1=0x0, cFileName="Office32MUI.msi", cAlternateFileName="OFFICE~1.MSI")) returned 1 [0032.769] FindNextFileW (in: hFindFile=0x381d00, lpFindFileData=0x31e56c | out: lpFindFileData=0x31e56c*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x4529b900, ftCreationTime.dwHighDateTime=0x1cad04a, ftLastAccessTime.dwLowDateTime=0x4529b900, ftLastAccessTime.dwHighDateTime=0x1cad04a, ftLastWriteTime.dwLowDateTime=0xfc138cb0, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x567, dwReserved0=0x0, dwReserved1=0x0, cFileName="Office32MUI.xml", cAlternateFileName="OFFICE~1.XML")) returned 1 [0032.769] FindNextFileW (in: hFindFile=0x381d00, lpFindFileData=0x31e56c | out: lpFindFileData=0x31e56c*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x3e02ab00, ftCreationTime.dwHighDateTime=0x1cad04a, ftLastAccessTime.dwLowDateTime=0x3e02ab00, ftLastAccessTime.dwHighDateTime=0x1cad04a, ftLastWriteTime.dwLowDateTime=0xfc301560, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x2cb13b, dwReserved0=0x0, dwReserved1=0x0, cFileName="OWOW32LR.cab", cAlternateFileName="")) returned 1 [0032.769] FindNextFileW (in: hFindFile=0x381d00, lpFindFileData=0x31e56c | out: lpFindFileData=0x31e56c*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x43f88c00, ftCreationTime.dwHighDateTime=0x1cad04a, ftLastAccessTime.dwLowDateTime=0x43f88c00, ftLastAccessTime.dwHighDateTime=0x1cad04a, ftLastWriteTime.dwLowDateTime=0xfc3e4630, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x93a, dwReserved0=0x0, dwReserved1=0x0, cFileName="Setup.xml", cAlternateFileName="")) returned 1 [0032.769] FindNextFileW (in: hFindFile=0x381d00, lpFindFileData=0x31e56c | out: lpFindFileData=0x31e56c*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0032.769] FindClose (in: hFindFile=0x381d00 | out: hFindFile=0x381d00) returned 1 [0032.770] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e7f4) returned 1 [0032.770] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e800) returned 1 [0032.770] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e834) returned 1 [0032.770] GetFullPathNameW (in: lpFileName="C:\\MSOCache\\All Users\\{90140000-0043-0409-1000-0000000FF1CE}-C", nBufferLength=0x105, lpBuffer=0x31e33c, lpFilePart=0x0 | out: lpBuffer="C:\\MSOCache\\All Users\\{90140000-0043-0409-1000-0000000FF1CE}-C", lpFilePart=0x0) returned 0x3e [0032.770] GetFullPathNameW (in: lpFileName="C:\\MSOCache\\All Users\\{90140000-0043-0409-1000-0000000FF1CE}-C\\", nBufferLength=0x105, lpBuffer=0x31e310, lpFilePart=0x0 | out: lpBuffer="C:\\MSOCache\\All Users\\{90140000-0043-0409-1000-0000000FF1CE}-C\\", lpFilePart=0x0) returned 0x3f [0032.770] FindFirstFileW (in: lpFileName="C:\\MSOCache\\All Users\\{90140000-0043-0409-1000-0000000FF1CE}-C\\*", lpFindFileData=0x31e55c | out: lpFindFileData=0x31e55c*(dwFileAttributes=0x2011, ftCreationTime.dwLowDateTime=0xfc138cb0, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xfc3e6570, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xfc3e6570, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x381d00 [0032.771] FindNextFileW (in: hFindFile=0x381d00, lpFindFileData=0x31e56c | out: lpFindFileData=0x31e56c*(dwFileAttributes=0x2011, ftCreationTime.dwLowDateTime=0xfc138cb0, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xfc3e6570, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xfc3e6570, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0032.771] FindNextFileW (in: hFindFile=0x381d00, lpFindFileData=0x31e56c | out: lpFindFileData=0x31e56c*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x3f33d800, ftCreationTime.dwHighDateTime=0x1cad04a, ftLastAccessTime.dwLowDateTime=0x3f33d800, ftLastAccessTime.dwHighDateTime=0x1cad04a, ftLastWriteTime.dwLowDateTime=0xfc138cb0, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0xd5600, dwReserved0=0x0, dwReserved1=0x0, cFileName="Office32MUI.msi", cAlternateFileName="OFFICE~1.MSI")) returned 1 [0032.771] FindNextFileW (in: hFindFile=0x381d00, lpFindFileData=0x31e56c | out: lpFindFileData=0x31e56c*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x4529b900, ftCreationTime.dwHighDateTime=0x1cad04a, ftLastAccessTime.dwLowDateTime=0x4529b900, ftLastAccessTime.dwHighDateTime=0x1cad04a, ftLastWriteTime.dwLowDateTime=0xfc138cb0, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x567, dwReserved0=0x0, dwReserved1=0x0, cFileName="Office32MUI.xml", cAlternateFileName="OFFICE~1.XML")) returned 1 [0032.772] FindNextFileW (in: hFindFile=0x381d00, lpFindFileData=0x31e56c | out: lpFindFileData=0x31e56c*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x3e02ab00, ftCreationTime.dwHighDateTime=0x1cad04a, ftLastAccessTime.dwLowDateTime=0x3e02ab00, ftLastAccessTime.dwHighDateTime=0x1cad04a, ftLastWriteTime.dwLowDateTime=0xfc301560, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x2cb13b, dwReserved0=0x0, dwReserved1=0x0, cFileName="OWOW32LR.cab", cAlternateFileName="")) returned 1 [0032.772] FindNextFileW (in: hFindFile=0x381d00, lpFindFileData=0x31e56c | out: lpFindFileData=0x31e56c*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x43f88c00, ftCreationTime.dwHighDateTime=0x1cad04a, ftLastAccessTime.dwLowDateTime=0x43f88c00, ftLastAccessTime.dwHighDateTime=0x1cad04a, ftLastWriteTime.dwLowDateTime=0xfc3e4630, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x93a, dwReserved0=0x0, dwReserved1=0x0, cFileName="Setup.xml", cAlternateFileName="")) returned 1 [0032.772] FindNextFileW (in: hFindFile=0x381d00, lpFindFileData=0x31e56c | out: lpFindFileData=0x31e56c*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x43f88c00, ftCreationTime.dwHighDateTime=0x1cad04a, ftLastAccessTime.dwLowDateTime=0x43f88c00, ftLastAccessTime.dwHighDateTime=0x1cad04a, ftLastWriteTime.dwLowDateTime=0xfc3e4630, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x93a, dwReserved0=0x0, dwReserved1=0x0, cFileName="Setup.xml", cAlternateFileName="")) returned 0 [0032.772] FindClose (in: hFindFile=0x381d00 | out: hFindFile=0x381d00) returned 1 [0032.773] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e7f4) returned 1 [0032.773] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e800) returned 1 [0032.773] GetFullPathNameW (in: lpFileName="C:\\MSOCache\\All Users\\{90140000-0043-0409-1000-0000000FF1CE}-C\\Office32MUI.xml", nBufferLength=0x105, lpBuffer=0x31e20c, lpFilePart=0x0 | out: lpBuffer="C:\\MSOCache\\All Users\\{90140000-0043-0409-1000-0000000FF1CE}-C\\Office32MUI.xml", lpFilePart=0x0) returned 0x4e [0032.773] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e700) returned 1 [0032.773] CreateFileW (lpFileName="C:\\MSOCache\\All Users\\{90140000-0043-0409-1000-0000000FF1CE}-C\\Office32MUI.xml" (normalized: "c:\\msocache\\all users\\{90140000-0043-0409-1000-0000000ff1ce}-c\\office32mui.xml"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x224 [0032.773] GetFileType (hFile=0x224) returned 0x1 [0032.773] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e6fc) returned 1 [0032.774] GetFileType (hFile=0x224) returned 0x1 [0032.774] GetFileSize (in: hFile=0x224, lpFileSizeHigh=0x31e808 | out: lpFileSizeHigh=0x31e808*=0x0) returned 0x567 [0032.774] ReadFile (in: hFile=0x224, lpBuffer=0x2771f6c, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x31e7b4, lpOverlapped=0x0 | out: lpBuffer=0x2771f6c*, lpNumberOfBytesRead=0x31e7b4*=0x567, lpOverlapped=0x0) returned 1 [0032.788] GetFullPathNameW (in: lpFileName="C:\\MSOCache\\All Users\\{90140000-0043-0409-1000-0000000FF1CE}-C\\Office32MUI.xml", nBufferLength=0x105, lpBuffer=0x31e1f8, lpFilePart=0x0 | out: lpBuffer="C:\\MSOCache\\All Users\\{90140000-0043-0409-1000-0000000FF1CE}-C\\Office32MUI.xml", lpFilePart=0x0) returned 0x4e [0032.788] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e6ec) returned 1 [0032.788] CreateFileW (lpFileName="C:\\MSOCache\\All Users\\{90140000-0043-0409-1000-0000000FF1CE}-C\\Office32MUI.xml" (normalized: "c:\\msocache\\all users\\{90140000-0043-0409-1000-0000000ff1ce}-c\\office32mui.xml"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x224 [0032.789] GetFileType (hFile=0x224) returned 0x1 [0032.789] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e6e8) returned 1 [0032.789] GetFileType (hFile=0x224) returned 0x1 [0032.789] WriteFile (in: hFile=0x224, lpBuffer=0x27c19cc*, nNumberOfBytesToWrite=0x570, lpNumberOfBytesWritten=0x31e77c, lpOverlapped=0x0 | out: lpBuffer=0x27c19cc*, lpNumberOfBytesWritten=0x31e77c*=0x570, lpOverlapped=0x0) returned 1 [0032.790] GetFullPathNameW (in: lpFileName="C:\\MSOCache\\All Users\\{90140000-0043-0409-1000-0000000FF1CE}-C\\Office32MUI.xml", nBufferLength=0x105, lpBuffer=0x31e32c, lpFilePart=0x0 | out: lpBuffer="C:\\MSOCache\\All Users\\{90140000-0043-0409-1000-0000000FF1CE}-C\\Office32MUI.xml", lpFilePart=0x0) returned 0x4e [0032.790] GetFullPathNameW (in: lpFileName="C:\\MSOCache\\All Users\\{90140000-0043-0409-1000-0000000FF1CE}-C\\Office32MUI.xml", nBufferLength=0x105, lpBuffer=0x31e32c, lpFilePart=0x0 | out: lpBuffer="C:\\MSOCache\\All Users\\{90140000-0043-0409-1000-0000000FF1CE}-C\\Office32MUI.xml", lpFilePart=0x0) returned 0x4e [0032.790] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e78c) returned 1 [0032.790] GetFileAttributesExW (in: lpFileName="C:\\MSOCache\\All Users\\{90140000-0043-0409-1000-0000000FF1CE}-C\\Office32MUI.xml" (normalized: "c:\\msocache\\all users\\{90140000-0043-0409-1000-0000000ff1ce}-c\\office32mui.xml"), fInfoLevelId=0x0, lpFileInformation=0x31e808 | out: lpFileInformation=0x31e808*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x4529b900, ftCreationTime.dwHighDateTime=0x1cad04a, ftLastAccessTime.dwLowDateTime=0x4529b900, ftLastAccessTime.dwHighDateTime=0x1cad04a, ftLastWriteTime.dwLowDateTime=0xf6fe2de0, ftLastWriteTime.dwHighDateTime=0x1d6eb7e, nFileSizeHigh=0x0, nFileSizeLow=0x570)) returned 1 [0032.790] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e788) returned 1 [0032.791] MoveFileW (lpExistingFileName="C:\\MSOCache\\All Users\\{90140000-0043-0409-1000-0000000FF1CE}-C\\Office32MUI.xml" (normalized: "c:\\msocache\\all users\\{90140000-0043-0409-1000-0000000ff1ce}-c\\office32mui.xml"), lpNewFileName="C:\\MSOCache\\All Users\\{90140000-0043-0409-1000-0000000FF1CE}-C\\Office32MUI.xml" (normalized: "c:\\msocache\\all users\\{90140000-0043-0409-1000-0000000ff1ce}-c\\office32mui.xml")) returned 1 [0032.792] GetFullPathNameW (in: lpFileName="C:\\MSOCache\\All Users\\{90140000-0043-0409-1000-0000000FF1CE}-C\\Setup.xml", nBufferLength=0x105, lpBuffer=0x31e20c, lpFilePart=0x0 | out: lpBuffer="C:\\MSOCache\\All Users\\{90140000-0043-0409-1000-0000000FF1CE}-C\\Setup.xml", lpFilePart=0x0) returned 0x48 [0032.792] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e700) returned 1 [0032.792] CreateFileW (lpFileName="C:\\MSOCache\\All Users\\{90140000-0043-0409-1000-0000000FF1CE}-C\\Setup.xml" (normalized: "c:\\msocache\\all users\\{90140000-0043-0409-1000-0000000ff1ce}-c\\setup.xml"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x224 [0032.792] GetFileType (hFile=0x224) returned 0x1 [0032.792] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e6fc) returned 1 [0032.792] GetFileType (hFile=0x224) returned 0x1 [0032.792] GetFileSize (in: hFile=0x224, lpFileSizeHigh=0x31e808 | out: lpFileSizeHigh=0x31e808*=0x0) returned 0x93a [0032.792] ReadFile (in: hFile=0x224, lpBuffer=0x27c35c4, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x31e7b4, lpOverlapped=0x0 | out: lpBuffer=0x27c35c4*, lpNumberOfBytesRead=0x31e7b4*=0x93a, lpOverlapped=0x0) returned 1 [0032.811] GetFullPathNameW (in: lpFileName="C:\\MSOCache\\All Users\\{90140000-0043-0409-1000-0000000FF1CE}-C\\Setup.xml", nBufferLength=0x105, lpBuffer=0x31e1f8, lpFilePart=0x0 | out: lpBuffer="C:\\MSOCache\\All Users\\{90140000-0043-0409-1000-0000000FF1CE}-C\\Setup.xml", lpFilePart=0x0) returned 0x48 [0032.811] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e6ec) returned 1 [0032.811] CreateFileW (lpFileName="C:\\MSOCache\\All Users\\{90140000-0043-0409-1000-0000000FF1CE}-C\\Setup.xml" (normalized: "c:\\msocache\\all users\\{90140000-0043-0409-1000-0000000ff1ce}-c\\setup.xml"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x224 [0032.811] GetFileType (hFile=0x224) returned 0x1 [0032.811] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e6e8) returned 1 [0032.812] GetFileType (hFile=0x224) returned 0x1 [0032.812] WriteFile (in: hFile=0x224, lpBuffer=0x2814318*, nNumberOfBytesToWrite=0x940, lpNumberOfBytesWritten=0x31e77c, lpOverlapped=0x0 | out: lpBuffer=0x2814318*, lpNumberOfBytesWritten=0x31e77c*=0x940, lpOverlapped=0x0) returned 1 [0032.812] GetFullPathNameW (in: lpFileName="C:\\MSOCache\\All Users\\{90140000-0043-0409-1000-0000000FF1CE}-C\\Setup.xml", nBufferLength=0x105, lpBuffer=0x31e32c, lpFilePart=0x0 | out: lpBuffer="C:\\MSOCache\\All Users\\{90140000-0043-0409-1000-0000000FF1CE}-C\\Setup.xml", lpFilePart=0x0) returned 0x48 [0032.812] GetFullPathNameW (in: lpFileName="C:\\MSOCache\\All Users\\{90140000-0043-0409-1000-0000000FF1CE}-C\\Setup.xml", nBufferLength=0x105, lpBuffer=0x31e32c, lpFilePart=0x0 | out: lpBuffer="C:\\MSOCache\\All Users\\{90140000-0043-0409-1000-0000000FF1CE}-C\\Setup.xml", lpFilePart=0x0) returned 0x48 [0032.812] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e78c) returned 1 [0032.813] GetFileAttributesExW (in: lpFileName="C:\\MSOCache\\All Users\\{90140000-0043-0409-1000-0000000FF1CE}-C\\Setup.xml" (normalized: "c:\\msocache\\all users\\{90140000-0043-0409-1000-0000000ff1ce}-c\\setup.xml"), fInfoLevelId=0x0, lpFileInformation=0x31e808 | out: lpFileInformation=0x31e808*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x43f88c00, ftCreationTime.dwHighDateTime=0x1cad04a, ftLastAccessTime.dwLowDateTime=0x43f88c00, ftLastAccessTime.dwHighDateTime=0x1cad04a, ftLastWriteTime.dwLowDateTime=0xf702f0a0, ftLastWriteTime.dwHighDateTime=0x1d6eb7e, nFileSizeHigh=0x0, nFileSizeLow=0x940)) returned 1 [0032.813] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e788) returned 1 [0032.813] MoveFileW (lpExistingFileName="C:\\MSOCache\\All Users\\{90140000-0043-0409-1000-0000000FF1CE}-C\\Setup.xml" (normalized: "c:\\msocache\\all users\\{90140000-0043-0409-1000-0000000ff1ce}-c\\setup.xml"), lpNewFileName="C:\\MSOCache\\All Users\\{90140000-0043-0409-1000-0000000FF1CE}-C\\Setup.xml" (normalized: "c:\\msocache\\all users\\{90140000-0043-0409-1000-0000000ff1ce}-c\\setup.xml")) returned 1 [0032.814] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e834) returned 1 [0032.814] GetFullPathNameW (in: lpFileName="C:\\MSOCache\\All Users\\{90140000-0044-0409-1000-0000000FF1CE}-C", nBufferLength=0x105, lpBuffer=0x31e33c, lpFilePart=0x0 | out: lpBuffer="C:\\MSOCache\\All Users\\{90140000-0044-0409-1000-0000000FF1CE}-C", lpFilePart=0x0) returned 0x3e [0032.814] GetFullPathNameW (in: lpFileName="C:\\MSOCache\\All Users\\{90140000-0044-0409-1000-0000000FF1CE}-C\\", nBufferLength=0x105, lpBuffer=0x31e310, lpFilePart=0x0 | out: lpBuffer="C:\\MSOCache\\All Users\\{90140000-0044-0409-1000-0000000FF1CE}-C\\", lpFilePart=0x0) returned 0x3f [0032.814] FindFirstFileW (in: lpFileName="C:\\MSOCache\\All Users\\{90140000-0044-0409-1000-0000000FF1CE}-C\\*", lpFindFileData=0x31e55c | out: lpFindFileData=0x31e55c*(dwFileAttributes=0x2011, ftCreationTime.dwLowDateTime=0xf6e34d70, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xfa13c510, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xfa13c510, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x381f40 [0032.815] FindNextFileW (in: hFindFile=0x381f40, lpFindFileData=0x31e56c | out: lpFindFileData=0x31e56c*(dwFileAttributes=0x2011, ftCreationTime.dwLowDateTime=0xf6e34d70, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xfa13c510, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xfa13c510, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0032.816] FindNextFileW (in: hFindFile=0x381f40, lpFindFileData=0x31e56c | out: lpFindFileData=0x31e56c*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xbd907a00, ftCreationTime.dwHighDateTime=0x1cad04a, ftLastAccessTime.dwLowDateTime=0xbd907a00, ftLastAccessTime.dwHighDateTime=0x1cad04a, ftLastWriteTime.dwLowDateTime=0xf79111d0, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x1200204, dwReserved0=0x0, dwReserved1=0x0, cFileName="InfLR.cab", cAlternateFileName="")) returned 1 [0032.816] FindNextFileW (in: hFindFile=0x381f40, lpFindFileData=0x31e56c | out: lpFindFileData=0x31e56c*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xbd907a00, ftCreationTime.dwHighDateTime=0x1cad04a, ftLastAccessTime.dwLowDateTime=0xbd907a00, ftLastAccessTime.dwHighDateTime=0x1cad04a, ftLastWriteTime.dwLowDateTime=0xf6e58f90, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x2fac00, dwReserved0=0x0, dwReserved1=0x0, cFileName="InfoPathMUI.msi", cAlternateFileName="INFOPA~1.MSI")) returned 1 [0032.816] FindNextFileW (in: hFindFile=0x381f40, lpFindFileData=0x31e56c | out: lpFindFileData=0x31e56c*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xbec1a700, ftCreationTime.dwHighDateTime=0x1cad04a, ftLastAccessTime.dwLowDateTime=0xbec1a700, ftLastAccessTime.dwHighDateTime=0x1cad04a, ftLastWriteTime.dwLowDateTime=0xf6e345a0, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x4cf, dwReserved0=0x0, dwReserved1=0x0, cFileName="InfoPathMUI.xml", cAlternateFileName="INFOPA~1.XML")) returned 1 [0032.816] FindNextFileW (in: hFindFile=0x381f40, lpFindFileData=0x31e56c | out: lpFindFileData=0x31e56c*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xbec1a700, ftCreationTime.dwHighDateTime=0x1cad04a, ftLastAccessTime.dwLowDateTime=0xbec1a700, ftLastAccessTime.dwHighDateTime=0x1cad04a, ftLastWriteTime.dwLowDateTime=0xfa13c510, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x73c, dwReserved0=0x0, dwReserved1=0x0, cFileName="Setup.xml", cAlternateFileName="")) returned 1 [0032.816] FindNextFileW (in: hFindFile=0x381f40, lpFindFileData=0x31e56c | out: lpFindFileData=0x31e56c*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0032.816] FindClose (in: hFindFile=0x381f40 | out: hFindFile=0x381f40) returned 1 [0032.817] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e7f4) returned 1 [0032.817] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e800) returned 1 [0032.817] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e834) returned 1 [0032.817] GetFullPathNameW (in: lpFileName="C:\\MSOCache\\All Users\\{90140000-0044-0409-1000-0000000FF1CE}-C", nBufferLength=0x105, lpBuffer=0x31e33c, lpFilePart=0x0 | out: lpBuffer="C:\\MSOCache\\All Users\\{90140000-0044-0409-1000-0000000FF1CE}-C", lpFilePart=0x0) returned 0x3e [0032.817] GetFullPathNameW (in: lpFileName="C:\\MSOCache\\All Users\\{90140000-0044-0409-1000-0000000FF1CE}-C\\", nBufferLength=0x105, lpBuffer=0x31e310, lpFilePart=0x0 | out: lpBuffer="C:\\MSOCache\\All Users\\{90140000-0044-0409-1000-0000000FF1CE}-C\\", lpFilePart=0x0) returned 0x3f [0032.817] FindFirstFileW (in: lpFileName="C:\\MSOCache\\All Users\\{90140000-0044-0409-1000-0000000FF1CE}-C\\*", lpFindFileData=0x31e55c | out: lpFindFileData=0x31e55c*(dwFileAttributes=0x2011, ftCreationTime.dwLowDateTime=0xf6e34d70, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xfa13c510, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xfa13c510, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x381f40 [0032.818] FindNextFileW (in: hFindFile=0x381f40, lpFindFileData=0x31e56c | out: lpFindFileData=0x31e56c*(dwFileAttributes=0x2011, ftCreationTime.dwLowDateTime=0xf6e34d70, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xfa13c510, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xfa13c510, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0032.818] FindNextFileW (in: hFindFile=0x381f40, lpFindFileData=0x31e56c | out: lpFindFileData=0x31e56c*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xbd907a00, ftCreationTime.dwHighDateTime=0x1cad04a, ftLastAccessTime.dwLowDateTime=0xbd907a00, ftLastAccessTime.dwHighDateTime=0x1cad04a, ftLastWriteTime.dwLowDateTime=0xf79111d0, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x1200204, dwReserved0=0x0, dwReserved1=0x0, cFileName="InfLR.cab", cAlternateFileName="")) returned 1 [0032.818] FindNextFileW (in: hFindFile=0x381f40, lpFindFileData=0x31e56c | out: lpFindFileData=0x31e56c*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xbd907a00, ftCreationTime.dwHighDateTime=0x1cad04a, ftLastAccessTime.dwLowDateTime=0xbd907a00, ftLastAccessTime.dwHighDateTime=0x1cad04a, ftLastWriteTime.dwLowDateTime=0xf6e58f90, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x2fac00, dwReserved0=0x0, dwReserved1=0x0, cFileName="InfoPathMUI.msi", cAlternateFileName="INFOPA~1.MSI")) returned 1 [0032.818] FindNextFileW (in: hFindFile=0x381f40, lpFindFileData=0x31e56c | out: lpFindFileData=0x31e56c*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xbec1a700, ftCreationTime.dwHighDateTime=0x1cad04a, ftLastAccessTime.dwLowDateTime=0xbec1a700, ftLastAccessTime.dwHighDateTime=0x1cad04a, ftLastWriteTime.dwLowDateTime=0xf6e345a0, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x4cf, dwReserved0=0x0, dwReserved1=0x0, cFileName="InfoPathMUI.xml", cAlternateFileName="INFOPA~1.XML")) returned 1 [0032.818] FindNextFileW (in: hFindFile=0x381f40, lpFindFileData=0x31e56c | out: lpFindFileData=0x31e56c*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xbec1a700, ftCreationTime.dwHighDateTime=0x1cad04a, ftLastAccessTime.dwLowDateTime=0xbec1a700, ftLastAccessTime.dwHighDateTime=0x1cad04a, ftLastWriteTime.dwLowDateTime=0xfa13c510, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x73c, dwReserved0=0x0, dwReserved1=0x0, cFileName="Setup.xml", cAlternateFileName="")) returned 1 [0032.818] FindNextFileW (in: hFindFile=0x381f40, lpFindFileData=0x31e56c | out: lpFindFileData=0x31e56c*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xbec1a700, ftCreationTime.dwHighDateTime=0x1cad04a, ftLastAccessTime.dwLowDateTime=0xbec1a700, ftLastAccessTime.dwHighDateTime=0x1cad04a, ftLastWriteTime.dwLowDateTime=0xfa13c510, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x73c, dwReserved0=0x0, dwReserved1=0x0, cFileName="Setup.xml", cAlternateFileName="")) returned 0 [0032.819] FindClose (in: hFindFile=0x381f40 | out: hFindFile=0x381f40) returned 1 [0032.819] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e7f4) returned 1 [0032.819] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e800) returned 1 [0032.819] GetFullPathNameW (in: lpFileName="C:\\MSOCache\\All Users\\{90140000-0044-0409-1000-0000000FF1CE}-C\\InfoPathMUI.xml", nBufferLength=0x105, lpBuffer=0x31e20c, lpFilePart=0x0 | out: lpBuffer="C:\\MSOCache\\All Users\\{90140000-0044-0409-1000-0000000FF1CE}-C\\InfoPathMUI.xml", lpFilePart=0x0) returned 0x4e [0032.819] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e700) returned 1 [0032.819] CreateFileW (lpFileName="C:\\MSOCache\\All Users\\{90140000-0044-0409-1000-0000000FF1CE}-C\\InfoPathMUI.xml" (normalized: "c:\\msocache\\all users\\{90140000-0044-0409-1000-0000000ff1ce}-c\\infopathmui.xml"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x224 [0032.820] GetFileType (hFile=0x224) returned 0x1 [0032.820] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e6fc) returned 1 [0032.820] GetFileType (hFile=0x224) returned 0x1 [0032.820] GetFileSize (in: hFile=0x224, lpFileSizeHigh=0x31e808 | out: lpFileSizeHigh=0x31e808*=0x0) returned 0x4cf [0032.820] ReadFile (in: hFile=0x224, lpBuffer=0x2817cf0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x31e7b4, lpOverlapped=0x0 | out: lpBuffer=0x2817cf0*, lpNumberOfBytesRead=0x31e7b4*=0x4cf, lpOverlapped=0x0) returned 1 [0032.904] GetFullPathNameW (in: lpFileName="C:\\MSOCache\\All Users\\{90140000-0044-0409-1000-0000000FF1CE}-C\\InfoPathMUI.xml", nBufferLength=0x105, lpBuffer=0x31e1f8, lpFilePart=0x0 | out: lpBuffer="C:\\MSOCache\\All Users\\{90140000-0044-0409-1000-0000000FF1CE}-C\\InfoPathMUI.xml", lpFilePart=0x0) returned 0x4e [0032.904] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e6ec) returned 1 [0032.904] CreateFileW (lpFileName="C:\\MSOCache\\All Users\\{90140000-0044-0409-1000-0000000FF1CE}-C\\InfoPathMUI.xml" (normalized: "c:\\msocache\\all users\\{90140000-0044-0409-1000-0000000ff1ce}-c\\infopathmui.xml"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x224 [0032.905] GetFileType (hFile=0x224) returned 0x1 [0032.905] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e6e8) returned 1 [0032.905] GetFileType (hFile=0x224) returned 0x1 [0032.905] WriteFile (in: hFile=0x224, lpBuffer=0x2664454*, nNumberOfBytesToWrite=0x4d0, lpNumberOfBytesWritten=0x31e77c, lpOverlapped=0x0 | out: lpBuffer=0x2664454*, lpNumberOfBytesWritten=0x31e77c*=0x4d0, lpOverlapped=0x0) returned 1 [0032.906] CloseHandle (hObject=0x224) returned 1 [0032.906] GetFullPathNameW (in: lpFileName="C:\\MSOCache\\All Users\\{90140000-0044-0409-1000-0000000FF1CE}-C\\InfoPathMUI.xml", nBufferLength=0x105, lpBuffer=0x31e32c, lpFilePart=0x0 | out: lpBuffer="C:\\MSOCache\\All Users\\{90140000-0044-0409-1000-0000000FF1CE}-C\\InfoPathMUI.xml", lpFilePart=0x0) returned 0x4e [0032.906] GetFullPathNameW (in: lpFileName="C:\\MSOCache\\All Users\\{90140000-0044-0409-1000-0000000FF1CE}-C\\InfoPathMUI.xml", nBufferLength=0x105, lpBuffer=0x31e32c, lpFilePart=0x0 | out: lpBuffer="C:\\MSOCache\\All Users\\{90140000-0044-0409-1000-0000000FF1CE}-C\\InfoPathMUI.xml", lpFilePart=0x0) returned 0x4e [0032.906] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e78c) returned 1 [0032.906] GetFileAttributesExW (in: lpFileName="C:\\MSOCache\\All Users\\{90140000-0044-0409-1000-0000000FF1CE}-C\\InfoPathMUI.xml" (normalized: "c:\\msocache\\all users\\{90140000-0044-0409-1000-0000000ff1ce}-c\\infopathmui.xml"), fInfoLevelId=0x0, lpFileInformation=0x31e808 | out: lpFileInformation=0x31e808*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xbec1a700, ftCreationTime.dwHighDateTime=0x1cad04a, ftLastAccessTime.dwLowDateTime=0xbec1a700, ftLastAccessTime.dwHighDateTime=0x1cad04a, ftLastWriteTime.dwLowDateTime=0xf71138e0, ftLastWriteTime.dwHighDateTime=0x1d6eb7e, nFileSizeHigh=0x0, nFileSizeLow=0x4d0)) returned 1 [0032.907] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e788) returned 1 [0032.907] MoveFileW (lpExistingFileName="C:\\MSOCache\\All Users\\{90140000-0044-0409-1000-0000000FF1CE}-C\\InfoPathMUI.xml" (normalized: "c:\\msocache\\all users\\{90140000-0044-0409-1000-0000000ff1ce}-c\\infopathmui.xml"), lpNewFileName="C:\\MSOCache\\All Users\\{90140000-0044-0409-1000-0000000FF1CE}-C\\InfoPathMUI.xml" (normalized: "c:\\msocache\\all users\\{90140000-0044-0409-1000-0000000ff1ce}-c\\infopathmui.xml")) returned 1 [0032.907] GetFullPathNameW (in: lpFileName="C:\\MSOCache\\All Users\\{90140000-0044-0409-1000-0000000FF1CE}-C\\Setup.xml", nBufferLength=0x105, lpBuffer=0x31e20c, lpFilePart=0x0 | out: lpBuffer="C:\\MSOCache\\All Users\\{90140000-0044-0409-1000-0000000FF1CE}-C\\Setup.xml", lpFilePart=0x0) returned 0x48 [0032.907] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e700) returned 1 [0032.907] CreateFileW (lpFileName="C:\\MSOCache\\All Users\\{90140000-0044-0409-1000-0000000FF1CE}-C\\Setup.xml" (normalized: "c:\\msocache\\all users\\{90140000-0044-0409-1000-0000000ff1ce}-c\\setup.xml"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x224 [0032.907] GetFileType (hFile=0x224) returned 0x1 [0032.907] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e6fc) returned 1 [0032.907] GetFileType (hFile=0x224) returned 0x1 [0032.907] GetFileSize (in: hFile=0x224, lpFileSizeHigh=0x31e808 | out: lpFileSizeHigh=0x31e808*=0x0) returned 0x73c [0032.907] ReadFile (in: hFile=0x224, lpBuffer=0x2665e34, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x31e7b4, lpOverlapped=0x0 | out: lpBuffer=0x2665e34*, lpNumberOfBytesRead=0x31e7b4*=0x73c, lpOverlapped=0x0) returned 1 [0032.909] CloseHandle (hObject=0x224) returned 1 [0032.923] GetFullPathNameW (in: lpFileName="C:\\MSOCache\\All Users\\{90140000-0044-0409-1000-0000000FF1CE}-C\\Setup.xml", nBufferLength=0x105, lpBuffer=0x31e1f8, lpFilePart=0x0 | out: lpBuffer="C:\\MSOCache\\All Users\\{90140000-0044-0409-1000-0000000FF1CE}-C\\Setup.xml", lpFilePart=0x0) returned 0x48 [0032.923] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e6ec) returned 1 [0032.923] CreateFileW (lpFileName="C:\\MSOCache\\All Users\\{90140000-0044-0409-1000-0000000FF1CE}-C\\Setup.xml" (normalized: "c:\\msocache\\all users\\{90140000-0044-0409-1000-0000000ff1ce}-c\\setup.xml"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x224 [0032.924] GetFileType (hFile=0x224) returned 0x1 [0032.924] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e6e8) returned 1 [0032.924] GetFileType (hFile=0x224) returned 0x1 [0032.924] WriteFile (in: hFile=0x224, lpBuffer=0x26b62e0*, nNumberOfBytesToWrite=0x740, lpNumberOfBytesWritten=0x31e77c, lpOverlapped=0x0 | out: lpBuffer=0x26b62e0*, lpNumberOfBytesWritten=0x31e77c*=0x740, lpOverlapped=0x0) returned 1 [0032.925] CloseHandle (hObject=0x224) returned 1 [0032.926] GetFullPathNameW (in: lpFileName="C:\\MSOCache\\All Users\\{90140000-0044-0409-1000-0000000FF1CE}-C\\Setup.xml", nBufferLength=0x105, lpBuffer=0x31e32c, lpFilePart=0x0 | out: lpBuffer="C:\\MSOCache\\All Users\\{90140000-0044-0409-1000-0000000FF1CE}-C\\Setup.xml", lpFilePart=0x0) returned 0x48 [0032.926] GetFullPathNameW (in: lpFileName="C:\\MSOCache\\All Users\\{90140000-0044-0409-1000-0000000FF1CE}-C\\Setup.xml", nBufferLength=0x105, lpBuffer=0x31e32c, lpFilePart=0x0 | out: lpBuffer="C:\\MSOCache\\All Users\\{90140000-0044-0409-1000-0000000FF1CE}-C\\Setup.xml", lpFilePart=0x0) returned 0x48 [0032.926] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e78c) returned 1 [0032.926] GetFileAttributesExW (in: lpFileName="C:\\MSOCache\\All Users\\{90140000-0044-0409-1000-0000000FF1CE}-C\\Setup.xml" (normalized: "c:\\msocache\\all users\\{90140000-0044-0409-1000-0000000ff1ce}-c\\setup.xml"), fInfoLevelId=0x0, lpFileInformation=0x31e808 | out: lpFileInformation=0x31e808*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xbec1a700, ftCreationTime.dwHighDateTime=0x1cad04a, ftLastAccessTime.dwLowDateTime=0xbec1a700, ftLastAccessTime.dwHighDateTime=0x1cad04a, ftLastWriteTime.dwLowDateTime=0xf7139a40, ftLastWriteTime.dwHighDateTime=0x1d6eb7e, nFileSizeHigh=0x0, nFileSizeLow=0x740)) returned 1 [0032.926] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e788) returned 1 [0032.926] MoveFileW (lpExistingFileName="C:\\MSOCache\\All Users\\{90140000-0044-0409-1000-0000000FF1CE}-C\\Setup.xml" (normalized: "c:\\msocache\\all users\\{90140000-0044-0409-1000-0000000ff1ce}-c\\setup.xml"), lpNewFileName="C:\\MSOCache\\All Users\\{90140000-0044-0409-1000-0000000FF1CE}-C\\Setup.xml" (normalized: "c:\\msocache\\all users\\{90140000-0044-0409-1000-0000000ff1ce}-c\\setup.xml")) returned 1 [0032.926] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e834) returned 1 [0032.926] GetFullPathNameW (in: lpFileName="C:\\MSOCache\\All Users\\{90140000-0054-0409-1000-0000000FF1CE}-C", nBufferLength=0x105, lpBuffer=0x31e33c, lpFilePart=0x0 | out: lpBuffer="C:\\MSOCache\\All Users\\{90140000-0054-0409-1000-0000000FF1CE}-C", lpFilePart=0x0) returned 0x3e [0032.926] GetFullPathNameW (in: lpFileName="C:\\MSOCache\\All Users\\{90140000-0054-0409-1000-0000000FF1CE}-C\\", nBufferLength=0x105, lpBuffer=0x31e310, lpFilePart=0x0 | out: lpBuffer="C:\\MSOCache\\All Users\\{90140000-0054-0409-1000-0000000FF1CE}-C\\", lpFilePart=0x0) returned 0x3f [0032.926] FindFirstFileW (in: lpFileName="C:\\MSOCache\\All Users\\{90140000-0054-0409-1000-0000000FF1CE}-C\\*", lpFindFileData=0x31e55c | out: lpFindFileData=0x31e55c*(dwFileAttributes=0x2011, ftCreationTime.dwLowDateTime=0x435769e0, ftCreationTime.dwHighDateTime=0x1d305eb, ftLastAccessTime.dwLowDateTime=0x43bdc500, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0x43bdc500, ftLastWriteTime.dwHighDateTime=0x1d305eb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x381e00 [0032.927] FindNextFileW (in: hFindFile=0x381e00, lpFindFileData=0x31e56c | out: lpFindFileData=0x31e56c*(dwFileAttributes=0x2011, ftCreationTime.dwLowDateTime=0x435769e0, ftCreationTime.dwHighDateTime=0x1d305eb, ftLastAccessTime.dwLowDateTime=0x43bdc500, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0x43bdc500, ftLastWriteTime.dwHighDateTime=0x1d305eb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0032.927] FindNextFileW (in: hFindFile=0x381e00, lpFindFileData=0x31e56c | out: lpFindFileData=0x31e56c*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x5f356eb0, ftCreationTime.dwHighDateTime=0x1cbe576, ftLastAccessTime.dwLowDateTime=0x5f356eb0, ftLastAccessTime.dwHighDateTime=0x1cbe576, ftLastWriteTime.dwLowDateTime=0x43bdc500, ftLastWriteTime.dwHighDateTime=0x1d305eb, nFileSizeHigh=0x0, nFileSizeLow=0x1861, dwReserved0=0x0, dwReserved1=0x0, cFileName="Setup.xml", cAlternateFileName="")) returned 1 [0032.927] FindNextFileW (in: hFindFile=0x381e00, lpFindFileData=0x31e56c | out: lpFindFileData=0x31e56c*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x7fb9f9e0, ftCreationTime.dwHighDateTime=0x1cbe575, ftLastAccessTime.dwLowDateTime=0x7fb9f9e0, ftLastAccessTime.dwHighDateTime=0x1cbe575, ftLastWriteTime.dwLowDateTime=0x437179c0, ftLastWriteTime.dwHighDateTime=0x1d305eb, nFileSizeHigh=0x0, nFileSizeLow=0x30780dd, dwReserved0=0x0, dwReserved1=0x0, cFileName="VisioLR.cab", cAlternateFileName="")) returned 1 [0032.927] FindNextFileW (in: hFindFile=0x381e00, lpFindFileData=0x31e56c | out: lpFindFileData=0x31e56c*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x272b1e70, ftCreationTime.dwHighDateTime=0x1cbe576, ftLastAccessTime.dwLowDateTime=0x272b1e70, ftLastAccessTime.dwHighDateTime=0x1cbe576, ftLastWriteTime.dwLowDateTime=0x435c1d00, ftLastWriteTime.dwHighDateTime=0x1d305eb, nFileSizeHigh=0x0, nFileSizeLow=0x2ab000, dwReserved0=0x0, dwReserved1=0x0, cFileName="VisioMUI.msi", cAlternateFileName="")) returned 1 [0032.927] FindNextFileW (in: hFindFile=0x381e00, lpFindFileData=0x31e56c | out: lpFindFileData=0x31e56c*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x5f0a8e20, ftCreationTime.dwHighDateTime=0x1cbe576, ftLastAccessTime.dwLowDateTime=0x5f0a8e20, ftLastAccessTime.dwHighDateTime=0x1cbe576, ftLastWriteTime.dwLowDateTime=0x4359ac00, ftLastWriteTime.dwHighDateTime=0x1d305eb, nFileSizeHigh=0x0, nFileSizeLow=0x251f, dwReserved0=0x0, dwReserved1=0x0, cFileName="VisioMUI.xml", cAlternateFileName="")) returned 1 [0032.927] FindNextFileW (in: hFindFile=0x381e00, lpFindFileData=0x31e56c | out: lpFindFileData=0x31e56c*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0032.927] FindClose (in: hFindFile=0x381e00 | out: hFindFile=0x381e00) returned 1 [0032.928] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e7f4) returned 1 [0032.928] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e800) returned 1 [0032.928] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e834) returned 1 [0032.928] GetFullPathNameW (in: lpFileName="C:\\MSOCache\\All Users\\{90140000-0054-0409-1000-0000000FF1CE}-C", nBufferLength=0x105, lpBuffer=0x31e33c, lpFilePart=0x0 | out: lpBuffer="C:\\MSOCache\\All Users\\{90140000-0054-0409-1000-0000000FF1CE}-C", lpFilePart=0x0) returned 0x3e [0032.928] GetFullPathNameW (in: lpFileName="C:\\MSOCache\\All Users\\{90140000-0054-0409-1000-0000000FF1CE}-C\\", nBufferLength=0x105, lpBuffer=0x31e310, lpFilePart=0x0 | out: lpBuffer="C:\\MSOCache\\All Users\\{90140000-0054-0409-1000-0000000FF1CE}-C\\", lpFilePart=0x0) returned 0x3f [0032.928] FindFirstFileW (in: lpFileName="C:\\MSOCache\\All Users\\{90140000-0054-0409-1000-0000000FF1CE}-C\\*", lpFindFileData=0x31e55c | out: lpFindFileData=0x31e55c*(dwFileAttributes=0x2011, ftCreationTime.dwLowDateTime=0x435769e0, ftCreationTime.dwHighDateTime=0x1d305eb, ftLastAccessTime.dwLowDateTime=0x43bdc500, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0x43bdc500, ftLastWriteTime.dwHighDateTime=0x1d305eb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x381e00 [0032.928] FindNextFileW (in: hFindFile=0x381e00, lpFindFileData=0x31e56c | out: lpFindFileData=0x31e56c*(dwFileAttributes=0x2011, ftCreationTime.dwLowDateTime=0x435769e0, ftCreationTime.dwHighDateTime=0x1d305eb, ftLastAccessTime.dwLowDateTime=0x43bdc500, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0x43bdc500, ftLastWriteTime.dwHighDateTime=0x1d305eb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0032.928] FindNextFileW (in: hFindFile=0x381e00, lpFindFileData=0x31e56c | out: lpFindFileData=0x31e56c*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x5f356eb0, ftCreationTime.dwHighDateTime=0x1cbe576, ftLastAccessTime.dwLowDateTime=0x5f356eb0, ftLastAccessTime.dwHighDateTime=0x1cbe576, ftLastWriteTime.dwLowDateTime=0x43bdc500, ftLastWriteTime.dwHighDateTime=0x1d305eb, nFileSizeHigh=0x0, nFileSizeLow=0x1861, dwReserved0=0x0, dwReserved1=0x0, cFileName="Setup.xml", cAlternateFileName="")) returned 1 [0032.928] FindNextFileW (in: hFindFile=0x381e00, lpFindFileData=0x31e56c | out: lpFindFileData=0x31e56c*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x7fb9f9e0, ftCreationTime.dwHighDateTime=0x1cbe575, ftLastAccessTime.dwLowDateTime=0x7fb9f9e0, ftLastAccessTime.dwHighDateTime=0x1cbe575, ftLastWriteTime.dwLowDateTime=0x437179c0, ftLastWriteTime.dwHighDateTime=0x1d305eb, nFileSizeHigh=0x0, nFileSizeLow=0x30780dd, dwReserved0=0x0, dwReserved1=0x0, cFileName="VisioLR.cab", cAlternateFileName="")) returned 1 [0032.928] FindNextFileW (in: hFindFile=0x381e00, lpFindFileData=0x31e56c | out: lpFindFileData=0x31e56c*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x272b1e70, ftCreationTime.dwHighDateTime=0x1cbe576, ftLastAccessTime.dwLowDateTime=0x272b1e70, ftLastAccessTime.dwHighDateTime=0x1cbe576, ftLastWriteTime.dwLowDateTime=0x435c1d00, ftLastWriteTime.dwHighDateTime=0x1d305eb, nFileSizeHigh=0x0, nFileSizeLow=0x2ab000, dwReserved0=0x0, dwReserved1=0x0, cFileName="VisioMUI.msi", cAlternateFileName="")) returned 1 [0032.928] FindNextFileW (in: hFindFile=0x381e00, lpFindFileData=0x31e56c | out: lpFindFileData=0x31e56c*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x5f0a8e20, ftCreationTime.dwHighDateTime=0x1cbe576, ftLastAccessTime.dwLowDateTime=0x5f0a8e20, ftLastAccessTime.dwHighDateTime=0x1cbe576, ftLastWriteTime.dwLowDateTime=0x4359ac00, ftLastWriteTime.dwHighDateTime=0x1d305eb, nFileSizeHigh=0x0, nFileSizeLow=0x251f, dwReserved0=0x0, dwReserved1=0x0, cFileName="VisioMUI.xml", cAlternateFileName="")) returned 1 [0032.928] FindNextFileW (in: hFindFile=0x381e00, lpFindFileData=0x31e56c | out: lpFindFileData=0x31e56c*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x5f0a8e20, ftCreationTime.dwHighDateTime=0x1cbe576, ftLastAccessTime.dwLowDateTime=0x5f0a8e20, ftLastAccessTime.dwHighDateTime=0x1cbe576, ftLastWriteTime.dwLowDateTime=0x4359ac00, ftLastWriteTime.dwHighDateTime=0x1d305eb, nFileSizeHigh=0x0, nFileSizeLow=0x251f, dwReserved0=0x0, dwReserved1=0x0, cFileName="VisioMUI.xml", cAlternateFileName="")) returned 0 [0032.929] FindClose (in: hFindFile=0x381e00 | out: hFindFile=0x381e00) returned 1 [0032.929] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e7f4) returned 1 [0032.929] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e800) returned 1 [0032.929] GetFullPathNameW (in: lpFileName="C:\\MSOCache\\All Users\\{90140000-0054-0409-1000-0000000FF1CE}-C\\Setup.xml", nBufferLength=0x105, lpBuffer=0x31e20c, lpFilePart=0x0 | out: lpBuffer="C:\\MSOCache\\All Users\\{90140000-0054-0409-1000-0000000FF1CE}-C\\Setup.xml", lpFilePart=0x0) returned 0x48 [0032.929] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e700) returned 1 [0032.929] CreateFileW (lpFileName="C:\\MSOCache\\All Users\\{90140000-0054-0409-1000-0000000FF1CE}-C\\Setup.xml" (normalized: "c:\\msocache\\all users\\{90140000-0054-0409-1000-0000000ff1ce}-c\\setup.xml"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x224 [0032.930] GetFileType (hFile=0x224) returned 0x1 [0032.930] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e6fc) returned 1 [0032.930] GetFileType (hFile=0x224) returned 0x1 [0032.930] GetFileSize (in: hFile=0x224, lpFileSizeHigh=0x31e808 | out: lpFileSizeHigh=0x31e808*=0x0) returned 0x1861 [0032.931] ReadFile (in: hFile=0x224, lpBuffer=0x26b96c4, nNumberOfBytesToRead=0x1861, lpNumberOfBytesRead=0x31e7b4, lpOverlapped=0x0 | out: lpBuffer=0x26b96c4*, lpNumberOfBytesRead=0x31e7b4*=0x1861, lpOverlapped=0x0) returned 1 [0032.932] CloseHandle (hObject=0x224) returned 1 [0032.946] GetFullPathNameW (in: lpFileName="C:\\MSOCache\\All Users\\{90140000-0054-0409-1000-0000000FF1CE}-C\\Setup.xml", nBufferLength=0x105, lpBuffer=0x31e1f8, lpFilePart=0x0 | out: lpBuffer="C:\\MSOCache\\All Users\\{90140000-0054-0409-1000-0000000FF1CE}-C\\Setup.xml", lpFilePart=0x0) returned 0x48 [0032.946] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e6ec) returned 1 [0032.946] CreateFileW (lpFileName="C:\\MSOCache\\All Users\\{90140000-0054-0409-1000-0000000FF1CE}-C\\Setup.xml" (normalized: "c:\\msocache\\all users\\{90140000-0054-0409-1000-0000000ff1ce}-c\\setup.xml"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x224 [0032.947] GetFileType (hFile=0x224) returned 0x1 [0032.947] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e6e8) returned 1 [0032.947] GetFileType (hFile=0x224) returned 0x1 [0032.947] WriteFile (in: hFile=0x224, lpBuffer=0x270dedc*, nNumberOfBytesToWrite=0x1870, lpNumberOfBytesWritten=0x31e7a8, lpOverlapped=0x0 | out: lpBuffer=0x270dedc*, lpNumberOfBytesWritten=0x31e7a8*=0x1870, lpOverlapped=0x0) returned 1 [0032.951] CloseHandle (hObject=0x224) returned 1 [0032.952] GetFullPathNameW (in: lpFileName="C:\\MSOCache\\All Users\\{90140000-0054-0409-1000-0000000FF1CE}-C\\Setup.xml", nBufferLength=0x105, lpBuffer=0x31e32c, lpFilePart=0x0 | out: lpBuffer="C:\\MSOCache\\All Users\\{90140000-0054-0409-1000-0000000FF1CE}-C\\Setup.xml", lpFilePart=0x0) returned 0x48 [0032.952] GetFullPathNameW (in: lpFileName="C:\\MSOCache\\All Users\\{90140000-0054-0409-1000-0000000FF1CE}-C\\Setup.xml", nBufferLength=0x105, lpBuffer=0x31e32c, lpFilePart=0x0 | out: lpBuffer="C:\\MSOCache\\All Users\\{90140000-0054-0409-1000-0000000FF1CE}-C\\Setup.xml", lpFilePart=0x0) returned 0x48 [0032.952] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e78c) returned 1 [0032.952] GetFileAttributesExW (in: lpFileName="C:\\MSOCache\\All Users\\{90140000-0054-0409-1000-0000000FF1CE}-C\\Setup.xml" (normalized: "c:\\msocache\\all users\\{90140000-0054-0409-1000-0000000ff1ce}-c\\setup.xml"), fInfoLevelId=0x0, lpFileInformation=0x31e808 | out: lpFileInformation=0x31e808*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x5f356eb0, ftCreationTime.dwHighDateTime=0x1cbe576, ftLastAccessTime.dwLowDateTime=0x5f356eb0, ftLastAccessTime.dwHighDateTime=0x1cbe576, ftLastWriteTime.dwLowDateTime=0xf7185d00, ftLastWriteTime.dwHighDateTime=0x1d6eb7e, nFileSizeHigh=0x0, nFileSizeLow=0x1870)) returned 1 [0032.952] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e788) returned 1 [0032.952] MoveFileW (lpExistingFileName="C:\\MSOCache\\All Users\\{90140000-0054-0409-1000-0000000FF1CE}-C\\Setup.xml" (normalized: "c:\\msocache\\all users\\{90140000-0054-0409-1000-0000000ff1ce}-c\\setup.xml"), lpNewFileName="C:\\MSOCache\\All Users\\{90140000-0054-0409-1000-0000000FF1CE}-C\\Setup.xml" (normalized: "c:\\msocache\\all users\\{90140000-0054-0409-1000-0000000ff1ce}-c\\setup.xml")) returned 1 [0032.952] GetFullPathNameW (in: lpFileName="C:\\MSOCache\\All Users\\{90140000-0054-0409-1000-0000000FF1CE}-C\\VisioMUI.xml", nBufferLength=0x105, lpBuffer=0x31e20c, lpFilePart=0x0 | out: lpBuffer="C:\\MSOCache\\All Users\\{90140000-0054-0409-1000-0000000FF1CE}-C\\VisioMUI.xml", lpFilePart=0x0) returned 0x4b [0032.952] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e700) returned 1 [0032.952] CreateFileW (lpFileName="C:\\MSOCache\\All Users\\{90140000-0054-0409-1000-0000000FF1CE}-C\\VisioMUI.xml" (normalized: "c:\\msocache\\all users\\{90140000-0054-0409-1000-0000000ff1ce}-c\\visiomui.xml"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x224 [0032.953] GetFileType (hFile=0x224) returned 0x1 [0032.953] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e6fc) returned 1 [0032.953] GetFileType (hFile=0x224) returned 0x1 [0032.953] GetFileSize (in: hFile=0x224, lpFileSizeHigh=0x31e808 | out: lpFileSizeHigh=0x31e808*=0x0) returned 0x251f [0032.953] ReadFile (in: hFile=0x224, lpBuffer=0x270fb24, nNumberOfBytesToRead=0x251f, lpNumberOfBytesRead=0x31e7b4, lpOverlapped=0x0 | out: lpBuffer=0x270fb24*, lpNumberOfBytesRead=0x31e7b4*=0x251f, lpOverlapped=0x0) returned 1 [0032.955] CloseHandle (hObject=0x224) returned 1 [0032.968] GetFullPathNameW (in: lpFileName="C:\\MSOCache\\All Users\\{90140000-0054-0409-1000-0000000FF1CE}-C\\VisioMUI.xml", nBufferLength=0x105, lpBuffer=0x31e1f8, lpFilePart=0x0 | out: lpBuffer="C:\\MSOCache\\All Users\\{90140000-0054-0409-1000-0000000FF1CE}-C\\VisioMUI.xml", lpFilePart=0x0) returned 0x4b [0032.968] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e6ec) returned 1 [0032.968] CreateFileW (lpFileName="C:\\MSOCache\\All Users\\{90140000-0054-0409-1000-0000000FF1CE}-C\\VisioMUI.xml" (normalized: "c:\\msocache\\all users\\{90140000-0054-0409-1000-0000000ff1ce}-c\\visiomui.xml"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x224 [0032.969] GetFileType (hFile=0x224) returned 0x1 [0032.969] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e6e8) returned 1 [0032.969] GetFileType (hFile=0x224) returned 0x1 [0032.969] WriteFile (in: hFile=0x224, lpBuffer=0x27682ac*, nNumberOfBytesToWrite=0x2520, lpNumberOfBytesWritten=0x31e7a8, lpOverlapped=0x0 | out: lpBuffer=0x27682ac*, lpNumberOfBytesWritten=0x31e7a8*=0x2520, lpOverlapped=0x0) returned 1 [0032.970] CloseHandle (hObject=0x224) returned 1 [0032.971] GetFullPathNameW (in: lpFileName="C:\\MSOCache\\All Users\\{90140000-0054-0409-1000-0000000FF1CE}-C\\VisioMUI.xml", nBufferLength=0x105, lpBuffer=0x31e32c, lpFilePart=0x0 | out: lpBuffer="C:\\MSOCache\\All Users\\{90140000-0054-0409-1000-0000000FF1CE}-C\\VisioMUI.xml", lpFilePart=0x0) returned 0x4b [0032.971] GetFullPathNameW (in: lpFileName="C:\\MSOCache\\All Users\\{90140000-0054-0409-1000-0000000FF1CE}-C\\VisioMUI.xml", nBufferLength=0x105, lpBuffer=0x31e32c, lpFilePart=0x0 | out: lpBuffer="C:\\MSOCache\\All Users\\{90140000-0054-0409-1000-0000000FF1CE}-C\\VisioMUI.xml", lpFilePart=0x0) returned 0x4b [0032.971] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e78c) returned 1 [0032.971] GetFileAttributesExW (in: lpFileName="C:\\MSOCache\\All Users\\{90140000-0054-0409-1000-0000000FF1CE}-C\\VisioMUI.xml" (normalized: "c:\\msocache\\all users\\{90140000-0054-0409-1000-0000000ff1ce}-c\\visiomui.xml"), fInfoLevelId=0x0, lpFileInformation=0x31e808 | out: lpFileInformation=0x31e808*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x5f0a8e20, ftCreationTime.dwHighDateTime=0x1cbe576, ftLastAccessTime.dwLowDateTime=0x5f0a8e20, ftLastAccessTime.dwHighDateTime=0x1cbe576, ftLastWriteTime.dwLowDateTime=0xf71abe60, ftLastWriteTime.dwHighDateTime=0x1d6eb7e, nFileSizeHigh=0x0, nFileSizeLow=0x2520)) returned 1 [0032.971] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e788) returned 1 [0032.971] MoveFileW (lpExistingFileName="C:\\MSOCache\\All Users\\{90140000-0054-0409-1000-0000000FF1CE}-C\\VisioMUI.xml" (normalized: "c:\\msocache\\all users\\{90140000-0054-0409-1000-0000000ff1ce}-c\\visiomui.xml"), lpNewFileName="C:\\MSOCache\\All Users\\{90140000-0054-0409-1000-0000000FF1CE}-C\\VisioMUI.xml" (normalized: "c:\\msocache\\all users\\{90140000-0054-0409-1000-0000000ff1ce}-c\\visiomui.xml")) returned 1 [0032.976] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e834) returned 1 [0032.976] GetFullPathNameW (in: lpFileName="C:\\MSOCache\\All Users\\{90140000-00A1-0409-1000-0000000FF1CE}-C", nBufferLength=0x105, lpBuffer=0x31e33c, lpFilePart=0x0 | out: lpBuffer="C:\\MSOCache\\All Users\\{90140000-00A1-0409-1000-0000000FF1CE}-C", lpFilePart=0x0) returned 0x3e [0032.976] GetFullPathNameW (in: lpFileName="C:\\MSOCache\\All Users\\{90140000-00A1-0409-1000-0000000FF1CE}-C\\", nBufferLength=0x105, lpBuffer=0x31e310, lpFilePart=0x0 | out: lpBuffer="C:\\MSOCache\\All Users\\{90140000-00A1-0409-1000-0000000FF1CE}-C\\", lpFilePart=0x0) returned 0x3f [0032.976] FindFirstFileW (in: lpFileName="C:\\MSOCache\\All Users\\{90140000-00A1-0409-1000-0000000FF1CE}-C\\*", lpFindFileData=0x31e55c | out: lpFindFileData=0x31e55c*(dwFileAttributes=0x2011, ftCreationTime.dwLowDateTime=0xf58ee8d0, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xf6e0ec10, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xf6e0ec10, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x381e40 [0032.979] FindNextFileW (in: hFindFile=0x381e40, lpFindFileData=0x31e56c | out: lpFindFileData=0x31e56c*(dwFileAttributes=0x2011, ftCreationTime.dwLowDateTime=0xf58ee8d0, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xf6e0ec10, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xf6e0ec10, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0032.979] FindNextFileW (in: hFindFile=0x381e40, lpFindFileData=0x31e56c | out: lpFindFileData=0x31e56c*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x3e02ab00, ftCreationTime.dwHighDateTime=0x1cad04a, ftLastAccessTime.dwLowDateTime=0x3e02ab00, ftLastAccessTime.dwHighDateTime=0x1cad04a, ftLastWriteTime.dwLowDateTime=0xf5914a30, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x263400, dwReserved0=0x0, dwReserved1=0x0, cFileName="OneNoteMUI.msi", cAlternateFileName="ONENOT~1.MSI")) returned 1 [0032.979] FindNextFileW (in: hFindFile=0x381e40, lpFindFileData=0x31e56c | out: lpFindFileData=0x31e56c*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x43f88c00, ftCreationTime.dwHighDateTime=0x1cad04a, ftLastAccessTime.dwLowDateTime=0x43f88c00, ftLastAccessTime.dwHighDateTime=0x1cad04a, ftLastWriteTime.dwLowDateTime=0xf58ed930, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x646, dwReserved0=0x0, dwReserved1=0x0, cFileName="OneNoteMUI.xml", cAlternateFileName="ONENOT~1.XML")) returned 1 [0032.979] FindNextFileW (in: hFindFile=0x381e40, lpFindFileData=0x31e56c | out: lpFindFileData=0x31e56c*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x36db9d00, ftCreationTime.dwHighDateTime=0x1cad04a, ftLastAccessTime.dwLowDateTime=0x36db9d00, ftLastAccessTime.dwHighDateTime=0x1cad04a, ftLastWriteTime.dwLowDateTime=0xf5e95540, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x10a5df8, dwReserved0=0x0, dwReserved1=0x0, cFileName="OnoteLR.cab", cAlternateFileName="")) returned 1 [0032.979] FindNextFileW (in: hFindFile=0x381e40, lpFindFileData=0x31e56c | out: lpFindFileData=0x31e56c*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x43f88c00, ftCreationTime.dwHighDateTime=0x1cad04a, ftLastAccessTime.dwLowDateTime=0x43f88c00, ftLastAccessTime.dwHighDateTime=0x1cad04a, ftLastWriteTime.dwLowDateTime=0xf6e0d4a0, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x7c4, dwReserved0=0x0, dwReserved1=0x0, cFileName="Setup.xml", cAlternateFileName="")) returned 1 [0032.979] FindNextFileW (in: hFindFile=0x381e40, lpFindFileData=0x31e56c | out: lpFindFileData=0x31e56c*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0032.979] FindClose (in: hFindFile=0x381e40 | out: hFindFile=0x381e40) returned 1 [0032.980] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e7f4) returned 1 [0032.980] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e800) returned 1 [0032.980] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e834) returned 1 [0032.980] GetFullPathNameW (in: lpFileName="C:\\MSOCache\\All Users\\{90140000-00A1-0409-1000-0000000FF1CE}-C", nBufferLength=0x105, lpBuffer=0x31e33c, lpFilePart=0x0 | out: lpBuffer="C:\\MSOCache\\All Users\\{90140000-00A1-0409-1000-0000000FF1CE}-C", lpFilePart=0x0) returned 0x3e [0032.980] GetFullPathNameW (in: lpFileName="C:\\MSOCache\\All Users\\{90140000-00A1-0409-1000-0000000FF1CE}-C\\", nBufferLength=0x105, lpBuffer=0x31e310, lpFilePart=0x0 | out: lpBuffer="C:\\MSOCache\\All Users\\{90140000-00A1-0409-1000-0000000FF1CE}-C\\", lpFilePart=0x0) returned 0x3f [0032.980] FindFirstFileW (in: lpFileName="C:\\MSOCache\\All Users\\{90140000-00A1-0409-1000-0000000FF1CE}-C\\*", lpFindFileData=0x31e55c | out: lpFindFileData=0x31e55c*(dwFileAttributes=0x2011, ftCreationTime.dwLowDateTime=0xf58ee8d0, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xf6e0ec10, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xf6e0ec10, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x381e40 [0032.981] FindNextFileW (in: hFindFile=0x381e40, lpFindFileData=0x31e56c | out: lpFindFileData=0x31e56c*(dwFileAttributes=0x2011, ftCreationTime.dwLowDateTime=0xf58ee8d0, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xf6e0ec10, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xf6e0ec10, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0032.981] FindNextFileW (in: hFindFile=0x381e40, lpFindFileData=0x31e56c | out: lpFindFileData=0x31e56c*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x3e02ab00, ftCreationTime.dwHighDateTime=0x1cad04a, ftLastAccessTime.dwLowDateTime=0x3e02ab00, ftLastAccessTime.dwHighDateTime=0x1cad04a, ftLastWriteTime.dwLowDateTime=0xf5914a30, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x263400, dwReserved0=0x0, dwReserved1=0x0, cFileName="OneNoteMUI.msi", cAlternateFileName="ONENOT~1.MSI")) returned 1 [0032.981] FindNextFileW (in: hFindFile=0x381e40, lpFindFileData=0x31e56c | out: lpFindFileData=0x31e56c*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x43f88c00, ftCreationTime.dwHighDateTime=0x1cad04a, ftLastAccessTime.dwLowDateTime=0x43f88c00, ftLastAccessTime.dwHighDateTime=0x1cad04a, ftLastWriteTime.dwLowDateTime=0xf58ed930, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x646, dwReserved0=0x0, dwReserved1=0x0, cFileName="OneNoteMUI.xml", cAlternateFileName="ONENOT~1.XML")) returned 1 [0032.981] FindNextFileW (in: hFindFile=0x381e40, lpFindFileData=0x31e56c | out: lpFindFileData=0x31e56c*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x36db9d00, ftCreationTime.dwHighDateTime=0x1cad04a, ftLastAccessTime.dwLowDateTime=0x36db9d00, ftLastAccessTime.dwHighDateTime=0x1cad04a, ftLastWriteTime.dwLowDateTime=0xf5e95540, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x10a5df8, dwReserved0=0x0, dwReserved1=0x0, cFileName="OnoteLR.cab", cAlternateFileName="")) returned 1 [0032.981] FindNextFileW (in: hFindFile=0x381e40, lpFindFileData=0x31e56c | out: lpFindFileData=0x31e56c*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x43f88c00, ftCreationTime.dwHighDateTime=0x1cad04a, ftLastAccessTime.dwLowDateTime=0x43f88c00, ftLastAccessTime.dwHighDateTime=0x1cad04a, ftLastWriteTime.dwLowDateTime=0xf6e0d4a0, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x7c4, dwReserved0=0x0, dwReserved1=0x0, cFileName="Setup.xml", cAlternateFileName="")) returned 1 [0032.981] FindNextFileW (in: hFindFile=0x381e40, lpFindFileData=0x31e56c | out: lpFindFileData=0x31e56c*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x43f88c00, ftCreationTime.dwHighDateTime=0x1cad04a, ftLastAccessTime.dwLowDateTime=0x43f88c00, ftLastAccessTime.dwHighDateTime=0x1cad04a, ftLastWriteTime.dwLowDateTime=0xf6e0d4a0, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x7c4, dwReserved0=0x0, dwReserved1=0x0, cFileName="Setup.xml", cAlternateFileName="")) returned 0 [0032.982] FindClose (in: hFindFile=0x381e40 | out: hFindFile=0x381e40) returned 1 [0032.982] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e7f4) returned 1 [0032.982] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e800) returned 1 [0032.982] GetFullPathNameW (in: lpFileName="C:\\MSOCache\\All Users\\{90140000-00A1-0409-1000-0000000FF1CE}-C\\OneNoteMUI.xml", nBufferLength=0x105, lpBuffer=0x31e20c, lpFilePart=0x0 | out: lpBuffer="C:\\MSOCache\\All Users\\{90140000-00A1-0409-1000-0000000FF1CE}-C\\OneNoteMUI.xml", lpFilePart=0x0) returned 0x4d [0032.982] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e700) returned 1 [0032.982] CreateFileW (lpFileName="C:\\MSOCache\\All Users\\{90140000-00A1-0409-1000-0000000FF1CE}-C\\OneNoteMUI.xml" (normalized: "c:\\msocache\\all users\\{90140000-00a1-0409-1000-0000000ff1ce}-c\\onenotemui.xml"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x224 [0032.983] GetFileType (hFile=0x224) returned 0x1 [0032.983] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e6fc) returned 1 [0032.983] GetFileType (hFile=0x224) returned 0x1 [0032.983] GetFileSize (in: hFile=0x224, lpFileSizeHigh=0x31e808 | out: lpFileSizeHigh=0x31e808*=0x0) returned 0x646 [0032.984] ReadFile (in: hFile=0x224, lpBuffer=0x276d428, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x31e7b4, lpOverlapped=0x0 | out: lpBuffer=0x276d428*, lpNumberOfBytesRead=0x31e7b4*=0x646, lpOverlapped=0x0) returned 1 [0032.985] CloseHandle (hObject=0x224) returned 1 [0033.000] GetFullPathNameW (in: lpFileName="C:\\MSOCache\\All Users\\{90140000-00A1-0409-1000-0000000FF1CE}-C\\OneNoteMUI.xml", nBufferLength=0x105, lpBuffer=0x31e1f8, lpFilePart=0x0 | out: lpBuffer="C:\\MSOCache\\All Users\\{90140000-00A1-0409-1000-0000000FF1CE}-C\\OneNoteMUI.xml", lpFilePart=0x0) returned 0x4d [0033.000] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e6ec) returned 1 [0033.000] CreateFileW (lpFileName="C:\\MSOCache\\All Users\\{90140000-00A1-0409-1000-0000000FF1CE}-C\\OneNoteMUI.xml" (normalized: "c:\\msocache\\all users\\{90140000-00a1-0409-1000-0000000ff1ce}-c\\onenotemui.xml"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x224 [0033.001] GetFileType (hFile=0x224) returned 0x1 [0033.001] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e6e8) returned 1 [0033.001] GetFileType (hFile=0x224) returned 0x1 [0033.003] GetFullPathNameW (in: lpFileName="C:\\MSOCache\\All Users\\{90140000-00A1-0409-1000-0000000FF1CE}-C\\OneNoteMUI.xml", nBufferLength=0x105, lpBuffer=0x31e32c, lpFilePart=0x0 | out: lpBuffer="C:\\MSOCache\\All Users\\{90140000-00A1-0409-1000-0000000FF1CE}-C\\OneNoteMUI.xml", lpFilePart=0x0) returned 0x4d [0033.003] GetFullPathNameW (in: lpFileName="C:\\MSOCache\\All Users\\{90140000-00A1-0409-1000-0000000FF1CE}-C\\OneNoteMUI.xml", nBufferLength=0x105, lpBuffer=0x31e32c, lpFilePart=0x0 | out: lpBuffer="C:\\MSOCache\\All Users\\{90140000-00A1-0409-1000-0000000FF1CE}-C\\OneNoteMUI.xml", lpFilePart=0x0) returned 0x4d [0033.003] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e78c) returned 1 [0033.003] GetFileAttributesExW (in: lpFileName="C:\\MSOCache\\All Users\\{90140000-00A1-0409-1000-0000000FF1CE}-C\\OneNoteMUI.xml" (normalized: "c:\\msocache\\all users\\{90140000-00a1-0409-1000-0000000ff1ce}-c\\onenotemui.xml"), fInfoLevelId=0x0, lpFileInformation=0x31e808 | out: lpFileInformation=0x31e808*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x43f88c00, ftCreationTime.dwHighDateTime=0x1cad04a, ftLastAccessTime.dwLowDateTime=0x43f88c00, ftLastAccessTime.dwHighDateTime=0x1cad04a, ftLastWriteTime.dwLowDateTime=0xf71f8120, ftLastWriteTime.dwHighDateTime=0x1d6eb7e, nFileSizeHigh=0x0, nFileSizeLow=0x650)) returned 1 [0033.003] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e788) returned 1 [0033.003] MoveFileW (lpExistingFileName="C:\\MSOCache\\All Users\\{90140000-00A1-0409-1000-0000000FF1CE}-C\\OneNoteMUI.xml" (normalized: "c:\\msocache\\all users\\{90140000-00a1-0409-1000-0000000ff1ce}-c\\onenotemui.xml"), lpNewFileName="C:\\MSOCache\\All Users\\{90140000-00A1-0409-1000-0000000FF1CE}-C\\OneNoteMUI.xml" (normalized: "c:\\msocache\\all users\\{90140000-00a1-0409-1000-0000000ff1ce}-c\\onenotemui.xml")) returned 1 [0033.004] GetFullPathNameW (in: lpFileName="C:\\MSOCache\\All Users\\{90140000-00A1-0409-1000-0000000FF1CE}-C\\Setup.xml", nBufferLength=0x105, lpBuffer=0x31e20c, lpFilePart=0x0 | out: lpBuffer="C:\\MSOCache\\All Users\\{90140000-00A1-0409-1000-0000000FF1CE}-C\\Setup.xml", lpFilePart=0x0) returned 0x48 [0033.004] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e700) returned 1 [0033.004] CreateFileW (lpFileName="C:\\MSOCache\\All Users\\{90140000-00A1-0409-1000-0000000FF1CE}-C\\Setup.xml" (normalized: "c:\\msocache\\all users\\{90140000-00a1-0409-1000-0000000ff1ce}-c\\setup.xml"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x224 [0033.004] GetFileType (hFile=0x224) returned 0x1 [0033.005] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e6fc) returned 1 [0033.005] GetFileType (hFile=0x224) returned 0x1 [0033.005] GetFileSize (in: hFile=0x224, lpFileSizeHigh=0x31e808 | out: lpFileSizeHigh=0x31e808*=0x0) returned 0x7c4 [0033.005] ReadFile (in: hFile=0x224, lpBuffer=0x27bed5c, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x31e7b4, lpOverlapped=0x0 | out: lpBuffer=0x27bed5c*, lpNumberOfBytesRead=0x31e7b4*=0x7c4, lpOverlapped=0x0) returned 1 [0033.006] CloseHandle (hObject=0x224) returned 1 [0033.020] GetFullPathNameW (in: lpFileName="C:\\MSOCache\\All Users\\{90140000-00A1-0409-1000-0000000FF1CE}-C\\Setup.xml", nBufferLength=0x105, lpBuffer=0x31e1f8, lpFilePart=0x0 | out: lpBuffer="C:\\MSOCache\\All Users\\{90140000-00A1-0409-1000-0000000FF1CE}-C\\Setup.xml", lpFilePart=0x0) returned 0x48 [0033.020] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e6ec) returned 1 [0033.020] CreateFileW (lpFileName="C:\\MSOCache\\All Users\\{90140000-00A1-0409-1000-0000000FF1CE}-C\\Setup.xml" (normalized: "c:\\msocache\\all users\\{90140000-00a1-0409-1000-0000000ff1ce}-c\\setup.xml"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x224 [0033.021] GetFileType (hFile=0x224) returned 0x1 [0033.021] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e6e8) returned 1 [0033.021] GetFileType (hFile=0x224) returned 0x1 [0033.022] GetFullPathNameW (in: lpFileName="C:\\MSOCache\\All Users\\{90140000-00A1-0409-1000-0000000FF1CE}-C\\Setup.xml", nBufferLength=0x105, lpBuffer=0x31e32c, lpFilePart=0x0 | out: lpBuffer="C:\\MSOCache\\All Users\\{90140000-00A1-0409-1000-0000000FF1CE}-C\\Setup.xml", lpFilePart=0x0) returned 0x48 [0033.022] GetFullPathNameW (in: lpFileName="C:\\MSOCache\\All Users\\{90140000-00A1-0409-1000-0000000FF1CE}-C\\Setup.xml", nBufferLength=0x105, lpBuffer=0x31e32c, lpFilePart=0x0 | out: lpBuffer="C:\\MSOCache\\All Users\\{90140000-00A1-0409-1000-0000000FF1CE}-C\\Setup.xml", lpFilePart=0x0) returned 0x48 [0033.022] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e78c) returned 1 [0033.022] GetFileAttributesExW (in: lpFileName="C:\\MSOCache\\All Users\\{90140000-00A1-0409-1000-0000000FF1CE}-C\\Setup.xml" (normalized: "c:\\msocache\\all users\\{90140000-00a1-0409-1000-0000000ff1ce}-c\\setup.xml"), fInfoLevelId=0x0, lpFileInformation=0x31e808 | out: lpFileInformation=0x31e808*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x43f88c00, ftCreationTime.dwHighDateTime=0x1cad04a, ftLastAccessTime.dwLowDateTime=0x43f88c00, ftLastAccessTime.dwHighDateTime=0x1cad04a, ftLastWriteTime.dwLowDateTime=0xf721e280, ftLastWriteTime.dwHighDateTime=0x1d6eb7e, nFileSizeHigh=0x0, nFileSizeLow=0x7d0)) returned 1 [0033.022] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e788) returned 1 [0033.022] MoveFileW (lpExistingFileName="C:\\MSOCache\\All Users\\{90140000-00A1-0409-1000-0000000FF1CE}-C\\Setup.xml" (normalized: "c:\\msocache\\all users\\{90140000-00a1-0409-1000-0000000ff1ce}-c\\setup.xml"), lpNewFileName="C:\\MSOCache\\All Users\\{90140000-00A1-0409-1000-0000000FF1CE}-C\\Setup.xml" (normalized: "c:\\msocache\\all users\\{90140000-00a1-0409-1000-0000000ff1ce}-c\\setup.xml")) returned 1 [0033.022] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e834) returned 1 [0033.022] GetFullPathNameW (in: lpFileName="C:\\MSOCache\\All Users\\{90140000-00B4-0409-1000-0000000FF1CE}-C", nBufferLength=0x105, lpBuffer=0x31e33c, lpFilePart=0x0 | out: lpBuffer="C:\\MSOCache\\All Users\\{90140000-00B4-0409-1000-0000000FF1CE}-C", lpFilePart=0x0) returned 0x3e [0033.022] GetFullPathNameW (in: lpFileName="C:\\MSOCache\\All Users\\{90140000-00B4-0409-1000-0000000FF1CE}-C\\", nBufferLength=0x105, lpBuffer=0x31e310, lpFilePart=0x0 | out: lpBuffer="C:\\MSOCache\\All Users\\{90140000-00B4-0409-1000-0000000FF1CE}-C\\", lpFilePart=0x0) returned 0x3f [0033.022] FindFirstFileW (in: lpFileName="C:\\MSOCache\\All Users\\{90140000-00B4-0409-1000-0000000FF1CE}-C\\*", lpFindFileData=0x31e55c | out: lpFindFileData=0x31e55c*(dwFileAttributes=0x2011, ftCreationTime.dwLowDateTime=0xa5b30b20, ftCreationTime.dwHighDateTime=0x1d305f1, ftLastAccessTime.dwLowDateTime=0xa5bc90a0, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0xa5bc90a0, ftLastWriteTime.dwHighDateTime=0x1d305f1, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x381d80 [0033.025] FindNextFileW (in: hFindFile=0x381d80, lpFindFileData=0x31e56c | out: lpFindFileData=0x31e56c*(dwFileAttributes=0x2011, ftCreationTime.dwLowDateTime=0xa5b30b20, ftCreationTime.dwHighDateTime=0x1d305f1, ftLastAccessTime.dwLowDateTime=0xa5bc90a0, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0xa5bc90a0, ftLastWriteTime.dwHighDateTime=0x1d305f1, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0033.026] FindNextFileW (in: hFindFile=0x381d80, lpFindFileData=0x31e56c | out: lpFindFileData=0x31e56c*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x308ae9f0, ftCreationTime.dwHighDateTime=0x1cbe56c, ftLastAccessTime.dwLowDateTime=0x308ae9f0, ftLastAccessTime.dwHighDateTime=0x1cbe56c, ftLastWriteTime.dwLowDateTime=0xa5b55ce0, ftLastWriteTime.dwHighDateTime=0x1d305f1, nFileSizeHigh=0x0, nFileSizeLow=0x265400, dwReserved0=0x0, dwReserved1=0x0, cFileName="ProjectMUI.msi", cAlternateFileName="PROJEC~1.MSI")) returned 1 [0033.026] FindNextFileW (in: hFindFile=0x381d80, lpFindFileData=0x31e56c | out: lpFindFileData=0x31e56c*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x30a2b7b0, ftCreationTime.dwHighDateTime=0x1cbe56c, ftLastAccessTime.dwLowDateTime=0x30a2b7b0, ftLastAccessTime.dwHighDateTime=0x1cbe56c, ftLastWriteTime.dwLowDateTime=0xa5b2ebe0, ftLastWriteTime.dwHighDateTime=0x1d305f1, nFileSizeHigh=0x0, nFileSizeLow=0x5ac, dwReserved0=0x0, dwReserved1=0x0, cFileName="ProjectMUI.xml", cAlternateFileName="PROJEC~1.XML")) returned 1 [0033.026] FindNextFileW (in: hFindFile=0x381d80, lpFindFileData=0x31e56c | out: lpFindFileData=0x31e56c*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x30306de0, ftCreationTime.dwHighDateTime=0x1cbe56c, ftLastAccessTime.dwLowDateTime=0x30306de0, ftLastAccessTime.dwHighDateTime=0x1cbe56c, ftLastWriteTime.dwLowDateTime=0xa5b7cde0, ftLastWriteTime.dwHighDateTime=0x1d305f1, nFileSizeHigh=0x0, nFileSizeLow=0x7e1dcd, dwReserved0=0x0, dwReserved1=0x0, cFileName="ProjLR.cab", cAlternateFileName="")) returned 1 [0033.026] FindNextFileW (in: hFindFile=0x381d80, lpFindFileData=0x31e56c | out: lpFindFileData=0x31e56c*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x309dfcc0, ftCreationTime.dwHighDateTime=0x1cbe56c, ftLastAccessTime.dwLowDateTime=0x309dfcc0, ftLastAccessTime.dwHighDateTime=0x1cbe56c, ftLastWriteTime.dwLowDateTime=0xa5bc88d0, ftLastWriteTime.dwHighDateTime=0x1d305f1, nFileSizeHigh=0x0, nFileSizeLow=0x750, dwReserved0=0x0, dwReserved1=0x0, cFileName="Setup.xml", cAlternateFileName="")) returned 1 [0033.026] FindNextFileW (in: hFindFile=0x381d80, lpFindFileData=0x31e56c | out: lpFindFileData=0x31e56c*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0033.026] FindClose (in: hFindFile=0x381d80 | out: hFindFile=0x381d80) returned 1 [0033.027] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e7f4) returned 1 [0033.027] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e800) returned 1 [0033.027] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e834) returned 1 [0033.027] GetFullPathNameW (in: lpFileName="C:\\MSOCache\\All Users\\{90140000-00B4-0409-1000-0000000FF1CE}-C", nBufferLength=0x105, lpBuffer=0x31e33c, lpFilePart=0x0 | out: lpBuffer="C:\\MSOCache\\All Users\\{90140000-00B4-0409-1000-0000000FF1CE}-C", lpFilePart=0x0) returned 0x3e [0033.027] GetFullPathNameW (in: lpFileName="C:\\MSOCache\\All Users\\{90140000-00B4-0409-1000-0000000FF1CE}-C\\", nBufferLength=0x105, lpBuffer=0x31e310, lpFilePart=0x0 | out: lpBuffer="C:\\MSOCache\\All Users\\{90140000-00B4-0409-1000-0000000FF1CE}-C\\", lpFilePart=0x0) returned 0x3f [0033.027] FindFirstFileW (in: lpFileName="C:\\MSOCache\\All Users\\{90140000-00B4-0409-1000-0000000FF1CE}-C\\*", lpFindFileData=0x31e55c | out: lpFindFileData=0x31e55c*(dwFileAttributes=0x2011, ftCreationTime.dwLowDateTime=0xa5b30b20, ftCreationTime.dwHighDateTime=0x1d305f1, ftLastAccessTime.dwLowDateTime=0xa5bc90a0, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0xa5bc90a0, ftLastWriteTime.dwHighDateTime=0x1d305f1, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x381d80 [0033.028] FindNextFileW (in: hFindFile=0x381d80, lpFindFileData=0x31e56c | out: lpFindFileData=0x31e56c*(dwFileAttributes=0x2011, ftCreationTime.dwLowDateTime=0xa5b30b20, ftCreationTime.dwHighDateTime=0x1d305f1, ftLastAccessTime.dwLowDateTime=0xa5bc90a0, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0xa5bc90a0, ftLastWriteTime.dwHighDateTime=0x1d305f1, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0033.028] FindNextFileW (in: hFindFile=0x381d80, lpFindFileData=0x31e56c | out: lpFindFileData=0x31e56c*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x308ae9f0, ftCreationTime.dwHighDateTime=0x1cbe56c, ftLastAccessTime.dwLowDateTime=0x308ae9f0, ftLastAccessTime.dwHighDateTime=0x1cbe56c, ftLastWriteTime.dwLowDateTime=0xa5b55ce0, ftLastWriteTime.dwHighDateTime=0x1d305f1, nFileSizeHigh=0x0, nFileSizeLow=0x265400, dwReserved0=0x0, dwReserved1=0x0, cFileName="ProjectMUI.msi", cAlternateFileName="PROJEC~1.MSI")) returned 1 [0033.028] FindNextFileW (in: hFindFile=0x381d80, lpFindFileData=0x31e56c | out: lpFindFileData=0x31e56c*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x30a2b7b0, ftCreationTime.dwHighDateTime=0x1cbe56c, ftLastAccessTime.dwLowDateTime=0x30a2b7b0, ftLastAccessTime.dwHighDateTime=0x1cbe56c, ftLastWriteTime.dwLowDateTime=0xa5b2ebe0, ftLastWriteTime.dwHighDateTime=0x1d305f1, nFileSizeHigh=0x0, nFileSizeLow=0x5ac, dwReserved0=0x0, dwReserved1=0x0, cFileName="ProjectMUI.xml", cAlternateFileName="PROJEC~1.XML")) returned 1 [0033.028] FindNextFileW (in: hFindFile=0x381d80, lpFindFileData=0x31e56c | out: lpFindFileData=0x31e56c*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x30306de0, ftCreationTime.dwHighDateTime=0x1cbe56c, ftLastAccessTime.dwLowDateTime=0x30306de0, ftLastAccessTime.dwHighDateTime=0x1cbe56c, ftLastWriteTime.dwLowDateTime=0xa5b7cde0, ftLastWriteTime.dwHighDateTime=0x1d305f1, nFileSizeHigh=0x0, nFileSizeLow=0x7e1dcd, dwReserved0=0x0, dwReserved1=0x0, cFileName="ProjLR.cab", cAlternateFileName="")) returned 1 [0033.028] FindNextFileW (in: hFindFile=0x381d80, lpFindFileData=0x31e56c | out: lpFindFileData=0x31e56c*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x309dfcc0, ftCreationTime.dwHighDateTime=0x1cbe56c, ftLastAccessTime.dwLowDateTime=0x309dfcc0, ftLastAccessTime.dwHighDateTime=0x1cbe56c, ftLastWriteTime.dwLowDateTime=0xa5bc88d0, ftLastWriteTime.dwHighDateTime=0x1d305f1, nFileSizeHigh=0x0, nFileSizeLow=0x750, dwReserved0=0x0, dwReserved1=0x0, cFileName="Setup.xml", cAlternateFileName="")) returned 1 [0033.028] FindNextFileW (in: hFindFile=0x381d80, lpFindFileData=0x31e56c | out: lpFindFileData=0x31e56c*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x309dfcc0, ftCreationTime.dwHighDateTime=0x1cbe56c, ftLastAccessTime.dwLowDateTime=0x309dfcc0, ftLastAccessTime.dwHighDateTime=0x1cbe56c, ftLastWriteTime.dwLowDateTime=0xa5bc88d0, ftLastWriteTime.dwHighDateTime=0x1d305f1, nFileSizeHigh=0x0, nFileSizeLow=0x750, dwReserved0=0x0, dwReserved1=0x0, cFileName="Setup.xml", cAlternateFileName="")) returned 0 [0033.029] FindClose (in: hFindFile=0x381d80 | out: hFindFile=0x381d80) returned 1 [0033.029] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e7f4) returned 1 [0033.029] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e800) returned 1 [0033.029] GetFullPathNameW (in: lpFileName="C:\\MSOCache\\All Users\\{90140000-00B4-0409-1000-0000000FF1CE}-C\\ProjectMUI.xml", nBufferLength=0x105, lpBuffer=0x31e20c, lpFilePart=0x0 | out: lpBuffer="C:\\MSOCache\\All Users\\{90140000-00B4-0409-1000-0000000FF1CE}-C\\ProjectMUI.xml", lpFilePart=0x0) returned 0x4d [0033.029] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e700) returned 1 [0033.029] CreateFileW (lpFileName="C:\\MSOCache\\All Users\\{90140000-00B4-0409-1000-0000000FF1CE}-C\\ProjectMUI.xml" (normalized: "c:\\msocache\\all users\\{90140000-00b4-0409-1000-0000000ff1ce}-c\\projectmui.xml"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x224 [0033.031] GetFileType (hFile=0x224) returned 0x1 [0033.031] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e6fc) returned 1 [0033.031] GetFileType (hFile=0x224) returned 0x1 [0033.031] GetFileSize (in: hFile=0x224, lpFileSizeHigh=0x31e808 | out: lpFileSizeHigh=0x31e808*=0x0) returned 0x5ac [0033.031] ReadFile (in: hFile=0x224, lpBuffer=0x2812e04, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x31e7b4, lpOverlapped=0x0 | out: lpBuffer=0x2812e04*, lpNumberOfBytesRead=0x31e7b4*=0x5ac, lpOverlapped=0x0) returned 1 [0033.033] CloseHandle (hObject=0x224) returned 1 [0033.074] GetFullPathNameW (in: lpFileName="C:\\MSOCache\\All Users\\{90140000-00B4-0409-1000-0000000FF1CE}-C\\ProjectMUI.xml", nBufferLength=0x105, lpBuffer=0x31e1f8, lpFilePart=0x0 | out: lpBuffer="C:\\MSOCache\\All Users\\{90140000-00B4-0409-1000-0000000FF1CE}-C\\ProjectMUI.xml", lpFilePart=0x0) returned 0x4d [0033.074] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e6ec) returned 1 [0033.074] CreateFileW (lpFileName="C:\\MSOCache\\All Users\\{90140000-00B4-0409-1000-0000000FF1CE}-C\\ProjectMUI.xml" (normalized: "c:\\msocache\\all users\\{90140000-00b4-0409-1000-0000000ff1ce}-c\\projectmui.xml"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x224 [0033.075] GetFileType (hFile=0x224) returned 0x1 [0033.075] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e6e8) returned 1 [0033.075] GetFileType (hFile=0x224) returned 0x1 [0033.075] WriteFile (in: hFile=0x224, lpBuffer=0x26640ec*, nNumberOfBytesToWrite=0x5b0, lpNumberOfBytesWritten=0x31e77c, lpOverlapped=0x0 | out: lpBuffer=0x26640ec*, lpNumberOfBytesWritten=0x31e77c*=0x5b0, lpOverlapped=0x0) returned 1 [0033.076] CloseHandle (hObject=0x224) returned 1 [0033.076] GetFullPathNameW (in: lpFileName="C:\\MSOCache\\All Users\\{90140000-00B4-0409-1000-0000000FF1CE}-C\\ProjectMUI.xml", nBufferLength=0x105, lpBuffer=0x31e32c, lpFilePart=0x0 | out: lpBuffer="C:\\MSOCache\\All Users\\{90140000-00B4-0409-1000-0000000FF1CE}-C\\ProjectMUI.xml", lpFilePart=0x0) returned 0x4d [0033.076] GetFullPathNameW (in: lpFileName="C:\\MSOCache\\All Users\\{90140000-00B4-0409-1000-0000000FF1CE}-C\\ProjectMUI.xml", nBufferLength=0x105, lpBuffer=0x31e32c, lpFilePart=0x0 | out: lpBuffer="C:\\MSOCache\\All Users\\{90140000-00B4-0409-1000-0000000FF1CE}-C\\ProjectMUI.xml", lpFilePart=0x0) returned 0x4d [0033.076] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e78c) returned 1 [0033.076] GetFileAttributesExW (in: lpFileName="C:\\MSOCache\\All Users\\{90140000-00B4-0409-1000-0000000FF1CE}-C\\ProjectMUI.xml" (normalized: "c:\\msocache\\all users\\{90140000-00b4-0409-1000-0000000ff1ce}-c\\projectmui.xml"), fInfoLevelId=0x0, lpFileInformation=0x31e808 | out: lpFileInformation=0x31e808*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x30a2b7b0, ftCreationTime.dwHighDateTime=0x1cbe56c, ftLastAccessTime.dwLowDateTime=0x30a2b7b0, ftLastAccessTime.dwHighDateTime=0x1cbe56c, ftLastWriteTime.dwLowDateTime=0xf72b6800, ftLastWriteTime.dwHighDateTime=0x1d6eb7e, nFileSizeHigh=0x0, nFileSizeLow=0x5b0)) returned 1 [0033.077] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e788) returned 1 [0033.077] MoveFileW (lpExistingFileName="C:\\MSOCache\\All Users\\{90140000-00B4-0409-1000-0000000FF1CE}-C\\ProjectMUI.xml" (normalized: "c:\\msocache\\all users\\{90140000-00b4-0409-1000-0000000ff1ce}-c\\projectmui.xml"), lpNewFileName="C:\\MSOCache\\All Users\\{90140000-00B4-0409-1000-0000000FF1CE}-C\\ProjectMUI.xml" (normalized: "c:\\msocache\\all users\\{90140000-00b4-0409-1000-0000000ff1ce}-c\\projectmui.xml")) returned 1 [0033.077] GetFullPathNameW (in: lpFileName="C:\\MSOCache\\All Users\\{90140000-00B4-0409-1000-0000000FF1CE}-C\\Setup.xml", nBufferLength=0x105, lpBuffer=0x31e20c, lpFilePart=0x0 | out: lpBuffer="C:\\MSOCache\\All Users\\{90140000-00B4-0409-1000-0000000FF1CE}-C\\Setup.xml", lpFilePart=0x0) returned 0x48 [0033.077] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e700) returned 1 [0033.077] CreateFileW (lpFileName="C:\\MSOCache\\All Users\\{90140000-00B4-0409-1000-0000000FF1CE}-C\\Setup.xml" (normalized: "c:\\msocache\\all users\\{90140000-00b4-0409-1000-0000000ff1ce}-c\\setup.xml"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x224 [0033.078] GetFileType (hFile=0x224) returned 0x1 [0033.078] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e6fc) returned 1 [0033.078] GetFileType (hFile=0x224) returned 0x1 [0033.078] GetFileSize (in: hFile=0x224, lpFileSizeHigh=0x31e808 | out: lpFileSizeHigh=0x31e808*=0x0) returned 0x750 [0033.078] ReadFile (in: hFile=0x224, lpBuffer=0x2665af0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x31e7b4, lpOverlapped=0x0 | out: lpBuffer=0x2665af0*, lpNumberOfBytesRead=0x31e7b4*=0x750, lpOverlapped=0x0) returned 1 [0033.080] CloseHandle (hObject=0x224) returned 1 [0033.093] GetFullPathNameW (in: lpFileName="C:\\MSOCache\\All Users\\{90140000-00B4-0409-1000-0000000FF1CE}-C\\Setup.xml", nBufferLength=0x105, lpBuffer=0x31e1f8, lpFilePart=0x0 | out: lpBuffer="C:\\MSOCache\\All Users\\{90140000-00B4-0409-1000-0000000FF1CE}-C\\Setup.xml", lpFilePart=0x0) returned 0x48 [0033.093] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e6ec) returned 1 [0033.093] CreateFileW (lpFileName="C:\\MSOCache\\All Users\\{90140000-00B4-0409-1000-0000000FF1CE}-C\\Setup.xml" (normalized: "c:\\msocache\\all users\\{90140000-00b4-0409-1000-0000000ff1ce}-c\\setup.xml"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x224 [0033.094] GetFileType (hFile=0x224) returned 0x1 [0033.094] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e6e8) returned 1 [0033.094] GetFileType (hFile=0x224) returned 0x1 [0033.094] WriteFile (in: hFile=0x224, lpBuffer=0x26b6048*, nNumberOfBytesToWrite=0x760, lpNumberOfBytesWritten=0x31e77c, lpOverlapped=0x0 | out: lpBuffer=0x26b6048*, lpNumberOfBytesWritten=0x31e77c*=0x760, lpOverlapped=0x0) returned 1 [0033.103] CloseHandle (hObject=0x224) returned 1 [0033.104] GetFullPathNameW (in: lpFileName="C:\\MSOCache\\All Users\\{90140000-00B4-0409-1000-0000000FF1CE}-C\\Setup.xml", nBufferLength=0x105, lpBuffer=0x31e32c, lpFilePart=0x0 | out: lpBuffer="C:\\MSOCache\\All Users\\{90140000-00B4-0409-1000-0000000FF1CE}-C\\Setup.xml", lpFilePart=0x0) returned 0x48 [0033.104] GetFullPathNameW (in: lpFileName="C:\\MSOCache\\All Users\\{90140000-00B4-0409-1000-0000000FF1CE}-C\\Setup.xml", nBufferLength=0x105, lpBuffer=0x31e32c, lpFilePart=0x0 | out: lpBuffer="C:\\MSOCache\\All Users\\{90140000-00B4-0409-1000-0000000FF1CE}-C\\Setup.xml", lpFilePart=0x0) returned 0x48 [0033.104] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e78c) returned 1 [0033.104] GetFileAttributesExW (in: lpFileName="C:\\MSOCache\\All Users\\{90140000-00B4-0409-1000-0000000FF1CE}-C\\Setup.xml" (normalized: "c:\\msocache\\all users\\{90140000-00b4-0409-1000-0000000ff1ce}-c\\setup.xml"), fInfoLevelId=0x0, lpFileInformation=0x31e808 | out: lpFileInformation=0x31e808*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x309dfcc0, ftCreationTime.dwHighDateTime=0x1cbe56c, ftLastAccessTime.dwLowDateTime=0x309dfcc0, ftLastAccessTime.dwHighDateTime=0x1cbe56c, ftLastWriteTime.dwLowDateTime=0xf7302ac0, ftLastWriteTime.dwHighDateTime=0x1d6eb7e, nFileSizeHigh=0x0, nFileSizeLow=0x760)) returned 1 [0033.104] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e788) returned 1 [0033.104] MoveFileW (lpExistingFileName="C:\\MSOCache\\All Users\\{90140000-00B4-0409-1000-0000000FF1CE}-C\\Setup.xml" (normalized: "c:\\msocache\\all users\\{90140000-00b4-0409-1000-0000000ff1ce}-c\\setup.xml"), lpNewFileName="C:\\MSOCache\\All Users\\{90140000-00B4-0409-1000-0000000FF1CE}-C\\Setup.xml" (normalized: "c:\\msocache\\all users\\{90140000-00b4-0409-1000-0000000ff1ce}-c\\setup.xml")) returned 1 [0033.105] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e834) returned 1 [0033.105] GetFullPathNameW (in: lpFileName="C:\\MSOCache\\All Users\\{90140000-00BA-0409-1000-0000000FF1CE}-C", nBufferLength=0x105, lpBuffer=0x31e33c, lpFilePart=0x0 | out: lpBuffer="C:\\MSOCache\\All Users\\{90140000-00BA-0409-1000-0000000FF1CE}-C", lpFilePart=0x0) returned 0x3e [0033.105] GetFullPathNameW (in: lpFileName="C:\\MSOCache\\All Users\\{90140000-00BA-0409-1000-0000000FF1CE}-C\\", nBufferLength=0x105, lpBuffer=0x31e310, lpFilePart=0x0 | out: lpBuffer="C:\\MSOCache\\All Users\\{90140000-00BA-0409-1000-0000000FF1CE}-C\\", lpFilePart=0x0) returned 0x3f [0033.105] FindFirstFileW (in: lpFileName="C:\\MSOCache\\All Users\\{90140000-00BA-0409-1000-0000000FF1CE}-C\\*", lpFindFileData=0x31e55c | out: lpFindFileData=0x31e55c*(dwFileAttributes=0x2011, ftCreationTime.dwLowDateTime=0xee38cbf0, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xee803530, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xee803530, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x381ec0 [0033.107] FindNextFileW (in: hFindFile=0x381ec0, lpFindFileData=0x31e56c | out: lpFindFileData=0x31e56c*(dwFileAttributes=0x2011, ftCreationTime.dwLowDateTime=0xee38cbf0, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xee803530, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xee803530, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0033.107] FindNextFileW (in: hFindFile=0x381ec0, lpFindFileData=0x31e56c | out: lpFindFileData=0x31e56c*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xbd907a00, ftCreationTime.dwHighDateTime=0x1cad04a, ftLastAccessTime.dwLowDateTime=0xbd907a00, ftLastAccessTime.dwHighDateTime=0x1cad04a, ftLastWriteTime.dwLowDateTime=0xee4bb7b0, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x3e7e1f, dwReserved0=0x0, dwReserved1=0x0, cFileName="GrooveLR.cab", cAlternateFileName="")) returned 1 [0033.107] FindNextFileW (in: hFindFile=0x381ec0, lpFindFileData=0x31e56c | out: lpFindFileData=0x31e56c*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xbd907a00, ftCreationTime.dwHighDateTime=0x1cad04a, ftLastAccessTime.dwLowDateTime=0xbd907a00, ftLastAccessTime.dwHighDateTime=0x1cad04a, ftLastWriteTime.dwLowDateTime=0xee3b15e0, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x264400, dwReserved0=0x0, dwReserved1=0x0, cFileName="GrooveMUI.msi", cAlternateFileName="GROOVE~1.MSI")) returned 1 [0033.107] FindNextFileW (in: hFindFile=0x381ec0, lpFindFileData=0x31e56c | out: lpFindFileData=0x31e56c*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xbec1a700, ftCreationTime.dwHighDateTime=0x1cad04a, ftLastAccessTime.dwLowDateTime=0xbec1a700, ftLastAccessTime.dwHighDateTime=0x1cad04a, ftLastWriteTime.dwLowDateTime=0xee38cbf0, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x391, dwReserved0=0x0, dwReserved1=0x0, cFileName="GrooveMUI.xml", cAlternateFileName="GROOVE~1.XML")) returned 1 [0033.107] FindNextFileW (in: hFindFile=0x381ec0, lpFindFileData=0x31e56c | out: lpFindFileData=0x31e56c*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xbec1a700, ftCreationTime.dwHighDateTime=0x1cad04a, ftLastAccessTime.dwLowDateTime=0xbec1a700, ftLastAccessTime.dwHighDateTime=0x1cad04a, ftLastWriteTime.dwLowDateTime=0xee803530, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x5ac, dwReserved0=0x0, dwReserved1=0x0, cFileName="Setup.xml", cAlternateFileName="")) returned 1 [0033.107] FindNextFileW (in: hFindFile=0x381ec0, lpFindFileData=0x31e56c | out: lpFindFileData=0x31e56c*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0033.107] FindClose (in: hFindFile=0x381ec0 | out: hFindFile=0x381ec0) returned 1 [0033.108] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e7f4) returned 1 [0033.108] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e800) returned 1 [0033.108] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e834) returned 1 [0033.108] GetFullPathNameW (in: lpFileName="C:\\MSOCache\\All Users\\{90140000-00BA-0409-1000-0000000FF1CE}-C", nBufferLength=0x105, lpBuffer=0x31e33c, lpFilePart=0x0 | out: lpBuffer="C:\\MSOCache\\All Users\\{90140000-00BA-0409-1000-0000000FF1CE}-C", lpFilePart=0x0) returned 0x3e [0033.108] GetFullPathNameW (in: lpFileName="C:\\MSOCache\\All Users\\{90140000-00BA-0409-1000-0000000FF1CE}-C\\", nBufferLength=0x105, lpBuffer=0x31e310, lpFilePart=0x0 | out: lpBuffer="C:\\MSOCache\\All Users\\{90140000-00BA-0409-1000-0000000FF1CE}-C\\", lpFilePart=0x0) returned 0x3f [0033.108] FindFirstFileW (in: lpFileName="C:\\MSOCache\\All Users\\{90140000-00BA-0409-1000-0000000FF1CE}-C\\*", lpFindFileData=0x31e55c | out: lpFindFileData=0x31e55c*(dwFileAttributes=0x2011, ftCreationTime.dwLowDateTime=0xee38cbf0, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xee803530, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xee803530, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x381ec0 [0033.109] FindNextFileW (in: hFindFile=0x381ec0, lpFindFileData=0x31e56c | out: lpFindFileData=0x31e56c*(dwFileAttributes=0x2011, ftCreationTime.dwLowDateTime=0xee38cbf0, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xee803530, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xee803530, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0033.109] FindNextFileW (in: hFindFile=0x381ec0, lpFindFileData=0x31e56c | out: lpFindFileData=0x31e56c*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xbd907a00, ftCreationTime.dwHighDateTime=0x1cad04a, ftLastAccessTime.dwLowDateTime=0xbd907a00, ftLastAccessTime.dwHighDateTime=0x1cad04a, ftLastWriteTime.dwLowDateTime=0xee4bb7b0, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x3e7e1f, dwReserved0=0x0, dwReserved1=0x0, cFileName="GrooveLR.cab", cAlternateFileName="")) returned 1 [0033.109] FindNextFileW (in: hFindFile=0x381ec0, lpFindFileData=0x31e56c | out: lpFindFileData=0x31e56c*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xbd907a00, ftCreationTime.dwHighDateTime=0x1cad04a, ftLastAccessTime.dwLowDateTime=0xbd907a00, ftLastAccessTime.dwHighDateTime=0x1cad04a, ftLastWriteTime.dwLowDateTime=0xee3b15e0, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x264400, dwReserved0=0x0, dwReserved1=0x0, cFileName="GrooveMUI.msi", cAlternateFileName="GROOVE~1.MSI")) returned 1 [0033.109] FindNextFileW (in: hFindFile=0x381ec0, lpFindFileData=0x31e56c | out: lpFindFileData=0x31e56c*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xbec1a700, ftCreationTime.dwHighDateTime=0x1cad04a, ftLastAccessTime.dwLowDateTime=0xbec1a700, ftLastAccessTime.dwHighDateTime=0x1cad04a, ftLastWriteTime.dwLowDateTime=0xee38cbf0, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x391, dwReserved0=0x0, dwReserved1=0x0, cFileName="GrooveMUI.xml", cAlternateFileName="GROOVE~1.XML")) returned 1 [0033.110] FindNextFileW (in: hFindFile=0x381ec0, lpFindFileData=0x31e56c | out: lpFindFileData=0x31e56c*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xbec1a700, ftCreationTime.dwHighDateTime=0x1cad04a, ftLastAccessTime.dwLowDateTime=0xbec1a700, ftLastAccessTime.dwHighDateTime=0x1cad04a, ftLastWriteTime.dwLowDateTime=0xee803530, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x5ac, dwReserved0=0x0, dwReserved1=0x0, cFileName="Setup.xml", cAlternateFileName="")) returned 1 [0033.110] FindNextFileW (in: hFindFile=0x381ec0, lpFindFileData=0x31e56c | out: lpFindFileData=0x31e56c*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xbec1a700, ftCreationTime.dwHighDateTime=0x1cad04a, ftLastAccessTime.dwLowDateTime=0xbec1a700, ftLastAccessTime.dwHighDateTime=0x1cad04a, ftLastWriteTime.dwLowDateTime=0xee803530, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x5ac, dwReserved0=0x0, dwReserved1=0x0, cFileName="Setup.xml", cAlternateFileName="")) returned 0 [0033.110] FindClose (in: hFindFile=0x381ec0 | out: hFindFile=0x381ec0) returned 1 [0033.111] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e7f4) returned 1 [0033.111] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e800) returned 1 [0033.111] GetFullPathNameW (in: lpFileName="C:\\MSOCache\\All Users\\{90140000-00BA-0409-1000-0000000FF1CE}-C\\GrooveMUI.xml", nBufferLength=0x105, lpBuffer=0x31e20c, lpFilePart=0x0 | out: lpBuffer="C:\\MSOCache\\All Users\\{90140000-00BA-0409-1000-0000000FF1CE}-C\\GrooveMUI.xml", lpFilePart=0x0) returned 0x4c [0033.111] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e700) returned 1 [0033.111] CreateFileW (lpFileName="C:\\MSOCache\\All Users\\{90140000-00BA-0409-1000-0000000FF1CE}-C\\GrooveMUI.xml" (normalized: "c:\\msocache\\all users\\{90140000-00ba-0409-1000-0000000ff1ce}-c\\groovemui.xml"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x224 [0033.112] GetFileType (hFile=0x224) returned 0x1 [0033.112] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e6fc) returned 1 [0033.112] GetFileType (hFile=0x224) returned 0x1 [0033.112] GetFileSize (in: hFile=0x224, lpFileSizeHigh=0x31e808 | out: lpFileSizeHigh=0x31e808*=0x0) returned 0x391 [0033.112] ReadFile (in: hFile=0x224, lpBuffer=0x26b98cc, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x31e7b4, lpOverlapped=0x0 | out: lpBuffer=0x26b98cc*, lpNumberOfBytesRead=0x31e7b4*=0x391, lpOverlapped=0x0) returned 1 [0033.114] CloseHandle (hObject=0x224) returned 1 [0033.128] GetFullPathNameW (in: lpFileName="C:\\MSOCache\\All Users\\{90140000-00BA-0409-1000-0000000FF1CE}-C\\GrooveMUI.xml", nBufferLength=0x105, lpBuffer=0x31e1f8, lpFilePart=0x0 | out: lpBuffer="C:\\MSOCache\\All Users\\{90140000-00BA-0409-1000-0000000FF1CE}-C\\GrooveMUI.xml", lpFilePart=0x0) returned 0x4c [0033.128] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e6ec) returned 1 [0033.128] CreateFileW (lpFileName="C:\\MSOCache\\All Users\\{90140000-00BA-0409-1000-0000000FF1CE}-C\\GrooveMUI.xml" (normalized: "c:\\msocache\\all users\\{90140000-00ba-0409-1000-0000000ff1ce}-c\\groovemui.xml"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x224 [0033.129] GetFileType (hFile=0x224) returned 0x1 [0033.129] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e6e8) returned 1 [0033.129] GetFileType (hFile=0x224) returned 0x1 [0033.129] WriteFile (in: hFile=0x224, lpBuffer=0x2708a18*, nNumberOfBytesToWrite=0x3a0, lpNumberOfBytesWritten=0x31e77c, lpOverlapped=0x0 | out: lpBuffer=0x2708a18*, lpNumberOfBytesWritten=0x31e77c*=0x3a0, lpOverlapped=0x0) returned 1 [0033.130] CloseHandle (hObject=0x224) returned 1 [0033.131] GetFullPathNameW (in: lpFileName="C:\\MSOCache\\All Users\\{90140000-00BA-0409-1000-0000000FF1CE}-C\\GrooveMUI.xml", nBufferLength=0x105, lpBuffer=0x31e32c, lpFilePart=0x0 | out: lpBuffer="C:\\MSOCache\\All Users\\{90140000-00BA-0409-1000-0000000FF1CE}-C\\GrooveMUI.xml", lpFilePart=0x0) returned 0x4c [0033.131] GetFullPathNameW (in: lpFileName="C:\\MSOCache\\All Users\\{90140000-00BA-0409-1000-0000000FF1CE}-C\\GrooveMUI.xml", nBufferLength=0x105, lpBuffer=0x31e32c, lpFilePart=0x0 | out: lpBuffer="C:\\MSOCache\\All Users\\{90140000-00BA-0409-1000-0000000FF1CE}-C\\GrooveMUI.xml", lpFilePart=0x0) returned 0x4c [0033.131] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e78c) returned 1 [0033.131] GetFileAttributesExW (in: lpFileName="C:\\MSOCache\\All Users\\{90140000-00BA-0409-1000-0000000FF1CE}-C\\GrooveMUI.xml" (normalized: "c:\\msocache\\all users\\{90140000-00ba-0409-1000-0000000ff1ce}-c\\groovemui.xml"), fInfoLevelId=0x0, lpFileInformation=0x31e808 | out: lpFileInformation=0x31e808*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xbec1a700, ftCreationTime.dwHighDateTime=0x1cad04a, ftLastAccessTime.dwLowDateTime=0xbec1a700, ftLastAccessTime.dwHighDateTime=0x1cad04a, ftLastWriteTime.dwLowDateTime=0xf7328c20, ftLastWriteTime.dwHighDateTime=0x1d6eb7e, nFileSizeHigh=0x0, nFileSizeLow=0x3a0)) returned 1 [0033.131] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e788) returned 1 [0033.131] MoveFileW (lpExistingFileName="C:\\MSOCache\\All Users\\{90140000-00BA-0409-1000-0000000FF1CE}-C\\GrooveMUI.xml" (normalized: "c:\\msocache\\all users\\{90140000-00ba-0409-1000-0000000ff1ce}-c\\groovemui.xml"), lpNewFileName="C:\\MSOCache\\All Users\\{90140000-00BA-0409-1000-0000000FF1CE}-C\\GrooveMUI.xml" (normalized: "c:\\msocache\\all users\\{90140000-00ba-0409-1000-0000000ff1ce}-c\\groovemui.xml")) returned 1 [0033.131] GetFullPathNameW (in: lpFileName="C:\\MSOCache\\All Users\\{90140000-00BA-0409-1000-0000000FF1CE}-C\\Setup.xml", nBufferLength=0x105, lpBuffer=0x31e20c, lpFilePart=0x0 | out: lpBuffer="C:\\MSOCache\\All Users\\{90140000-00BA-0409-1000-0000000FF1CE}-C\\Setup.xml", lpFilePart=0x0) returned 0x48 [0033.131] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e700) returned 1 [0033.131] CreateFileW (lpFileName="C:\\MSOCache\\All Users\\{90140000-00BA-0409-1000-0000000FF1CE}-C\\Setup.xml" (normalized: "c:\\msocache\\all users\\{90140000-00ba-0409-1000-0000000ff1ce}-c\\setup.xml"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x224 [0033.131] GetFileType (hFile=0x224) returned 0x1 [0033.132] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e6fc) returned 1 [0033.132] GetFileType (hFile=0x224) returned 0x1 [0033.132] GetFileSize (in: hFile=0x224, lpFileSizeHigh=0x31e808 | out: lpFileSizeHigh=0x31e808*=0x0) returned 0x5ac [0033.132] ReadFile (in: hFile=0x224, lpBuffer=0x270a260, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x31e7b4, lpOverlapped=0x0 | out: lpBuffer=0x270a260*, lpNumberOfBytesRead=0x31e7b4*=0x5ac, lpOverlapped=0x0) returned 1 [0033.148] GetFullPathNameW (in: lpFileName="C:\\MSOCache\\All Users\\{90140000-00BA-0409-1000-0000000FF1CE}-C\\Setup.xml", nBufferLength=0x105, lpBuffer=0x31e1f8, lpFilePart=0x0 | out: lpBuffer="C:\\MSOCache\\All Users\\{90140000-00BA-0409-1000-0000000FF1CE}-C\\Setup.xml", lpFilePart=0x0) returned 0x48 [0033.148] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e6ec) returned 1 [0033.148] CreateFileW (lpFileName="C:\\MSOCache\\All Users\\{90140000-00BA-0409-1000-0000000FF1CE}-C\\Setup.xml" (normalized: "c:\\msocache\\all users\\{90140000-00ba-0409-1000-0000000ff1ce}-c\\setup.xml"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x224 [0033.149] GetFileType (hFile=0x224) returned 0x1 [0033.149] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e6e8) returned 1 [0033.149] GetFileType (hFile=0x224) returned 0x1 [0033.149] WriteFile (in: hFile=0x224, lpBuffer=0x2759de0*, nNumberOfBytesToWrite=0x5b0, lpNumberOfBytesWritten=0x31e77c, lpOverlapped=0x0 | out: lpBuffer=0x2759de0*, lpNumberOfBytesWritten=0x31e77c*=0x5b0, lpOverlapped=0x0) returned 1 [0033.151] GetFullPathNameW (in: lpFileName="C:\\MSOCache\\All Users\\{90140000-00BA-0409-1000-0000000FF1CE}-C\\Setup.xml", nBufferLength=0x105, lpBuffer=0x31e32c, lpFilePart=0x0 | out: lpBuffer="C:\\MSOCache\\All Users\\{90140000-00BA-0409-1000-0000000FF1CE}-C\\Setup.xml", lpFilePart=0x0) returned 0x48 [0033.151] GetFullPathNameW (in: lpFileName="C:\\MSOCache\\All Users\\{90140000-00BA-0409-1000-0000000FF1CE}-C\\Setup.xml", nBufferLength=0x105, lpBuffer=0x31e32c, lpFilePart=0x0 | out: lpBuffer="C:\\MSOCache\\All Users\\{90140000-00BA-0409-1000-0000000FF1CE}-C\\Setup.xml", lpFilePart=0x0) returned 0x48 [0033.151] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e78c) returned 1 [0033.151] GetFileAttributesExW (in: lpFileName="C:\\MSOCache\\All Users\\{90140000-00BA-0409-1000-0000000FF1CE}-C\\Setup.xml" (normalized: "c:\\msocache\\all users\\{90140000-00ba-0409-1000-0000000ff1ce}-c\\setup.xml"), fInfoLevelId=0x0, lpFileInformation=0x31e808 | out: lpFileInformation=0x31e808*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xbec1a700, ftCreationTime.dwHighDateTime=0x1cad04a, ftLastAccessTime.dwLowDateTime=0xbec1a700, ftLastAccessTime.dwHighDateTime=0x1cad04a, ftLastWriteTime.dwLowDateTime=0xf7374ee0, ftLastWriteTime.dwHighDateTime=0x1d6eb7e, nFileSizeHigh=0x0, nFileSizeLow=0x5b0)) returned 1 [0033.151] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e788) returned 1 [0033.151] MoveFileW (lpExistingFileName="C:\\MSOCache\\All Users\\{90140000-00BA-0409-1000-0000000FF1CE}-C\\Setup.xml" (normalized: "c:\\msocache\\all users\\{90140000-00ba-0409-1000-0000000ff1ce}-c\\setup.xml"), lpNewFileName="C:\\MSOCache\\All Users\\{90140000-00BA-0409-1000-0000000FF1CE}-C\\Setup.xml" (normalized: "c:\\msocache\\all users\\{90140000-00ba-0409-1000-0000000ff1ce}-c\\setup.xml")) returned 1 [0033.152] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e834) returned 1 [0033.152] GetFullPathNameW (in: lpFileName="C:\\MSOCache\\All Users\\{90140000-0115-0409-1000-0000000FF1CE}-C", nBufferLength=0x105, lpBuffer=0x31e33c, lpFilePart=0x0 | out: lpBuffer="C:\\MSOCache\\All Users\\{90140000-0115-0409-1000-0000000FF1CE}-C", lpFilePart=0x0) returned 0x3e [0033.152] GetFullPathNameW (in: lpFileName="C:\\MSOCache\\All Users\\{90140000-0115-0409-1000-0000000FF1CE}-C\\", nBufferLength=0x105, lpBuffer=0x31e310, lpFilePart=0x0 | out: lpBuffer="C:\\MSOCache\\All Users\\{90140000-0115-0409-1000-0000000FF1CE}-C\\", lpFilePart=0x0) returned 0x3f [0033.152] FindFirstFileW (in: lpFileName="C:\\MSOCache\\All Users\\{90140000-0115-0409-1000-0000000FF1CE}-C\\*", lpFindFileData=0x31e55c | out: lpFindFileData=0x31e55c*(dwFileAttributes=0x2011, ftCreationTime.dwLowDateTime=0xe7b68970, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xe8729610, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xe8729610, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x381b80 [0033.153] FindNextFileW (in: hFindFile=0x381b80, lpFindFileData=0x31e56c | out: lpFindFileData=0x31e56c*(dwFileAttributes=0x2011, ftCreationTime.dwLowDateTime=0xe7b68970, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xe8729610, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xe8729610, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0033.154] FindNextFileW (in: hFindFile=0x381b80, lpFindFileData=0x31e56c | out: lpFindFileData=0x31e56c*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe8691090, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xe8691090, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xe8691090, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="1033", cAlternateFileName="")) returned 1 [0033.154] FindNextFileW (in: hFindFile=0x381b80, lpFindFileData=0x31e56c | out: lpFindFileData=0x31e56c*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x11e8ef00, ftCreationTime.dwHighDateTime=0x1cacdea, ftLastAccessTime.dwLowDateTime=0x11e8ef00, ftLastAccessTime.dwHighDateTime=0x1cacdea, ftLastWriteTime.dwLowDateTime=0xe84c60d0, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x91975, dwReserved0=0x0, dwReserved1=0x0, cFileName="branding.xml", cAlternateFileName="")) returned 1 [0033.154] FindNextFileW (in: hFindFile=0x381b80, lpFindFileData=0x31e56c | out: lpFindFileData=0x31e56c*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xa26c9d00, ftCreationTime.dwHighDateTime=0x1cac9ae, ftLastAccessTime.dwLowDateTime=0xa26c9d00, ftLastAccessTime.dwHighDateTime=0x1cac9ae, ftLastWriteTime.dwLowDateTime=0xe85142d0, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0xccb88, dwReserved0=0x0, dwReserved1=0x0, cFileName="DW20.EXE", cAlternateFileName="")) returned 1 [0033.154] FindNextFileW (in: hFindFile=0x381b80, lpFindFileData=0x31e56c | out: lpFindFileData=0x31e56c*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xabf60500, ftCreationTime.dwHighDateTime=0x1cac9ae, ftLastAccessTime.dwLowDateTime=0xabf60500, ftLastAccessTime.dwHighDateTime=0x1cac9ae, ftLastWriteTime.dwLowDateTime=0xe85ab8b0, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x80760, dwReserved0=0x0, dwReserved1=0x0, cFileName="dwdcw20.dll", cAlternateFileName="")) returned 1 [0033.154] FindNextFileW (in: hFindFile=0x381b80, lpFindFileData=0x31e56c | out: lpFindFileData=0x31e56c*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xabf60500, ftCreationTime.dwHighDateTime=0x1cac9ae, ftLastAccessTime.dwLowDateTime=0xabf60500, ftLastAccessTime.dwHighDateTime=0x1cac9ae, ftLastWriteTime.dwLowDateTime=0xe85f73a0, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x7eda0, dwReserved0=0x0, dwReserved1=0x0, cFileName="dwtrig20.exe", cAlternateFileName="")) returned 1 [0033.154] FindNextFileW (in: hFindFile=0x381b80, lpFindFileData=0x31e56c | out: lpFindFileData=0x31e56c*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x8d646800, ftCreationTime.dwHighDateTime=0x1cacc53, ftLastAccessTime.dwLowDateTime=0x8d646800, ftLastAccessTime.dwHighDateTime=0x1cacc53, ftLastWriteTime.dwLowDateTime=0xe8728670, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x741, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.VC90.CRT.manifest", cAlternateFileName="MICROS~1.MAN")) returned 1 [0033.154] FindNextFileW (in: hFindFile=0x381b80, lpFindFileData=0x31e56c | out: lpFindFileData=0x31e56c*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x8c333b00, ftCreationTime.dwHighDateTime=0x1cacc53, ftLastAccessTime.dwLowDateTime=0x8c333b00, ftLastAccessTime.dwHighDateTime=0x1cacc53, ftLastWriteTime.dwLowDateTime=0xe86b5a80, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0xa0200, dwReserved0=0x0, dwReserved1=0x0, cFileName="msvcr90.dll", cAlternateFileName="")) returned 1 [0033.154] FindNextFileW (in: hFindFile=0x381b80, lpFindFileData=0x31e56c | out: lpFindFileData=0x31e56c*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x3ba05100, ftCreationTime.dwHighDateTime=0x1cad04a, ftLastAccessTime.dwLowDateTime=0x3ba05100, ftLastAccessTime.dwHighDateTime=0x1cad04a, ftLastWriteTime.dwLowDateTime=0xe7e3b3f0, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0xd79282, dwReserved0=0x0, dwReserved1=0x0, cFileName="OfficeLR.cab", cAlternateFileName="")) returned 1 [0033.155] FindNextFileW (in: hFindFile=0x381b80, lpFindFileData=0x31e56c | out: lpFindFileData=0x31e56c*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x3cd17e00, ftCreationTime.dwHighDateTime=0x1cad04a, ftLastAccessTime.dwLowDateTime=0x3cd17e00, ftLastAccessTime.dwHighDateTime=0x1cad04a, ftLastWriteTime.dwLowDateTime=0xe7c4ba40, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x387e00, dwReserved0=0x0, dwReserved1=0x0, cFileName="OfficeMUI.msi", cAlternateFileName="OFFICE~2.MSI")) returned 1 [0033.155] FindNextFileW (in: hFindFile=0x381b80, lpFindFileData=0x31e56c | out: lpFindFileData=0x31e56c*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x43f88c00, ftCreationTime.dwHighDateTime=0x1cad04a, ftLastAccessTime.dwLowDateTime=0x43f88c00, ftLastAccessTime.dwHighDateTime=0x1cad04a, ftLastWriteTime.dwLowDateTime=0xe7c27050, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x15b5, dwReserved0=0x0, dwReserved1=0x0, cFileName="OfficeMUI.xml", cAlternateFileName="OFFICE~2.XML")) returned 1 [0033.155] FindNextFileW (in: hFindFile=0x381b80, lpFindFileData=0x31e56c | out: lpFindFileData=0x31e56c*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x3f33d800, ftCreationTime.dwHighDateTime=0x1cad04a, ftLastAccessTime.dwLowDateTime=0x3f33d800, ftLastAccessTime.dwHighDateTime=0x1cad04a, ftLastWriteTime.dwLowDateTime=0xe7b68970, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0xd4200, dwReserved0=0x0, dwReserved1=0x0, cFileName="OfficeMUISet.msi", cAlternateFileName="OFFICE~1.MSI")) returned 1 [0033.155] FindNextFileW (in: hFindFile=0x381b80, lpFindFileData=0x31e56c | out: lpFindFileData=0x31e56c*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x4529b900, ftCreationTime.dwHighDateTime=0x1cad04a, ftLastAccessTime.dwLowDateTime=0x4529b900, ftLastAccessTime.dwHighDateTime=0x1cad04a, ftLastWriteTime.dwLowDateTime=0xe7b68970, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x333, dwReserved0=0x0, dwReserved1=0x0, cFileName="OfficeMUISet.xml", cAlternateFileName="OFFICE~1.XML")) returned 1 [0033.155] FindNextFileW (in: hFindFile=0x381b80, lpFindFileData=0x31e56c | out: lpFindFileData=0x31e56c*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xc8b16200, ftCreationTime.dwHighDateTime=0x1cac190, ftLastAccessTime.dwLowDateTime=0xc8b16200, ftLastAccessTime.dwHighDateTime=0x1cac190, ftLastWriteTime.dwLowDateTime=0xe8728670, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x2ed80, dwReserved0=0x0, dwReserved1=0x0, cFileName="osetupui.dll", cAlternateFileName="")) returned 1 [0033.155] FindNextFileW (in: hFindFile=0x381b80, lpFindFileData=0x31e56c | out: lpFindFileData=0x31e56c*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x77cbb000, ftCreationTime.dwHighDateTime=0x1cac57a, ftLastAccessTime.dwLowDateTime=0x77cbb000, ftLastAccessTime.dwHighDateTime=0x1cac57a, ftLastWriteTime.dwLowDateTime=0xe8728670, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x6a3b, dwReserved0=0x0, dwReserved1=0x0, cFileName="pss10r.chm", cAlternateFileName="")) returned 1 [0033.155] FindNextFileW (in: hFindFile=0x381b80, lpFindFileData=0x31e56c | out: lpFindFileData=0x31e56c*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x7cab9f00, ftCreationTime.dwHighDateTime=0x1cac8ad, ftLastAccessTime.dwLowDateTime=0x7cab9f00, ftLastAccessTime.dwHighDateTime=0x1cac8ad, ftLastWriteTime.dwLowDateTime=0xe8728670, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x10676, dwReserved0=0x0, dwReserved1=0x0, cFileName="setup.chm", cAlternateFileName="")) returned 1 [0033.155] FindNextFileW (in: hFindFile=0x381b80, lpFindFileData=0x31e56c | out: lpFindFileData=0x31e56c*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x42c75f00, ftCreationTime.dwHighDateTime=0x1cad04a, ftLastAccessTime.dwLowDateTime=0x42c75f00, ftLastAccessTime.dwHighDateTime=0x1cad04a, ftLastWriteTime.dwLowDateTime=0xe8728670, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x2488, dwReserved0=0x0, dwReserved1=0x0, cFileName="Setup.xml", cAlternateFileName="")) returned 1 [0033.155] FindNextFileW (in: hFindFile=0x381b80, lpFindFileData=0x31e56c | out: lpFindFileData=0x31e56c*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x131a1c00, ftCreationTime.dwHighDateTime=0x1cacdea, ftLastAccessTime.dwLowDateTime=0x131a1c00, ftLastAccessTime.dwHighDateTime=0x1cacdea, ftLastWriteTime.dwLowDateTime=0xe84c60d0, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0xe00, dwReserved0=0x0, dwReserved1=0x0, cFileName="ShellUI.MST", cAlternateFileName="")) returned 1 [0033.156] FindNextFileW (in: hFindFile=0x381b80, lpFindFileData=0x31e56c | out: lpFindFileData=0x31e56c*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0033.156] FindClose (in: hFindFile=0x381b80 | out: hFindFile=0x381b80) returned 1 [0033.156] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e7f4) returned 1 [0033.156] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e800) returned 1 [0033.156] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e834) returned 1 [0033.156] GetFullPathNameW (in: lpFileName="C:\\MSOCache\\All Users\\{90140000-0115-0409-1000-0000000FF1CE}-C", nBufferLength=0x105, lpBuffer=0x31e33c, lpFilePart=0x0 | out: lpBuffer="C:\\MSOCache\\All Users\\{90140000-0115-0409-1000-0000000FF1CE}-C", lpFilePart=0x0) returned 0x3e [0033.156] GetFullPathNameW (in: lpFileName="C:\\MSOCache\\All Users\\{90140000-0115-0409-1000-0000000FF1CE}-C\\", nBufferLength=0x105, lpBuffer=0x31e310, lpFilePart=0x0 | out: lpBuffer="C:\\MSOCache\\All Users\\{90140000-0115-0409-1000-0000000FF1CE}-C\\", lpFilePart=0x0) returned 0x3f [0033.156] FindFirstFileW (in: lpFileName="C:\\MSOCache\\All Users\\{90140000-0115-0409-1000-0000000FF1CE}-C\\*", lpFindFileData=0x31e55c | out: lpFindFileData=0x31e55c*(dwFileAttributes=0x2011, ftCreationTime.dwLowDateTime=0xe7b68970, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xe8729610, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xe8729610, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x381b80 [0033.157] FindNextFileW (in: hFindFile=0x381b80, lpFindFileData=0x31e56c | out: lpFindFileData=0x31e56c*(dwFileAttributes=0x2011, ftCreationTime.dwLowDateTime=0xe7b68970, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xe8729610, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xe8729610, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0033.157] FindNextFileW (in: hFindFile=0x381b80, lpFindFileData=0x31e56c | out: lpFindFileData=0x31e56c*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe8691090, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xe8691090, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xe8691090, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="1033", cAlternateFileName="")) returned 1 [0033.157] FindNextFileW (in: hFindFile=0x381b80, lpFindFileData=0x31e56c | out: lpFindFileData=0x31e56c*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x11e8ef00, ftCreationTime.dwHighDateTime=0x1cacdea, ftLastAccessTime.dwLowDateTime=0x11e8ef00, ftLastAccessTime.dwHighDateTime=0x1cacdea, ftLastWriteTime.dwLowDateTime=0xe84c60d0, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x91975, dwReserved0=0x0, dwReserved1=0x0, cFileName="branding.xml", cAlternateFileName="")) returned 1 [0033.158] FindNextFileW (in: hFindFile=0x381b80, lpFindFileData=0x31e56c | out: lpFindFileData=0x31e56c*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xa26c9d00, ftCreationTime.dwHighDateTime=0x1cac9ae, ftLastAccessTime.dwLowDateTime=0xa26c9d00, ftLastAccessTime.dwHighDateTime=0x1cac9ae, ftLastWriteTime.dwLowDateTime=0xe85142d0, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0xccb88, dwReserved0=0x0, dwReserved1=0x0, cFileName="DW20.EXE", cAlternateFileName="")) returned 1 [0033.158] FindNextFileW (in: hFindFile=0x381b80, lpFindFileData=0x31e56c | out: lpFindFileData=0x31e56c*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xabf60500, ftCreationTime.dwHighDateTime=0x1cac9ae, ftLastAccessTime.dwLowDateTime=0xabf60500, ftLastAccessTime.dwHighDateTime=0x1cac9ae, ftLastWriteTime.dwLowDateTime=0xe85ab8b0, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x80760, dwReserved0=0x0, dwReserved1=0x0, cFileName="dwdcw20.dll", cAlternateFileName="")) returned 1 [0033.158] FindNextFileW (in: hFindFile=0x381b80, lpFindFileData=0x31e56c | out: lpFindFileData=0x31e56c*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xabf60500, ftCreationTime.dwHighDateTime=0x1cac9ae, ftLastAccessTime.dwLowDateTime=0xabf60500, ftLastAccessTime.dwHighDateTime=0x1cac9ae, ftLastWriteTime.dwLowDateTime=0xe85f73a0, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x7eda0, dwReserved0=0x0, dwReserved1=0x0, cFileName="dwtrig20.exe", cAlternateFileName="")) returned 1 [0033.158] FindNextFileW (in: hFindFile=0x381b80, lpFindFileData=0x31e56c | out: lpFindFileData=0x31e56c*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x8d646800, ftCreationTime.dwHighDateTime=0x1cacc53, ftLastAccessTime.dwLowDateTime=0x8d646800, ftLastAccessTime.dwHighDateTime=0x1cacc53, ftLastWriteTime.dwLowDateTime=0xe8728670, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x741, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.VC90.CRT.manifest", cAlternateFileName="MICROS~1.MAN")) returned 1 [0033.158] FindNextFileW (in: hFindFile=0x381b80, lpFindFileData=0x31e56c | out: lpFindFileData=0x31e56c*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x8c333b00, ftCreationTime.dwHighDateTime=0x1cacc53, ftLastAccessTime.dwLowDateTime=0x8c333b00, ftLastAccessTime.dwHighDateTime=0x1cacc53, ftLastWriteTime.dwLowDateTime=0xe86b5a80, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0xa0200, dwReserved0=0x0, dwReserved1=0x0, cFileName="msvcr90.dll", cAlternateFileName="")) returned 1 [0033.158] FindNextFileW (in: hFindFile=0x381b80, lpFindFileData=0x31e56c | out: lpFindFileData=0x31e56c*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x3ba05100, ftCreationTime.dwHighDateTime=0x1cad04a, ftLastAccessTime.dwLowDateTime=0x3ba05100, ftLastAccessTime.dwHighDateTime=0x1cad04a, ftLastWriteTime.dwLowDateTime=0xe7e3b3f0, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0xd79282, dwReserved0=0x0, dwReserved1=0x0, cFileName="OfficeLR.cab", cAlternateFileName="")) returned 1 [0033.158] FindNextFileW (in: hFindFile=0x381b80, lpFindFileData=0x31e56c | out: lpFindFileData=0x31e56c*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x3cd17e00, ftCreationTime.dwHighDateTime=0x1cad04a, ftLastAccessTime.dwLowDateTime=0x3cd17e00, ftLastAccessTime.dwHighDateTime=0x1cad04a, ftLastWriteTime.dwLowDateTime=0xe7c4ba40, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x387e00, dwReserved0=0x0, dwReserved1=0x0, cFileName="OfficeMUI.msi", cAlternateFileName="OFFICE~2.MSI")) returned 1 [0033.159] FindNextFileW (in: hFindFile=0x381b80, lpFindFileData=0x31e56c | out: lpFindFileData=0x31e56c*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x43f88c00, ftCreationTime.dwHighDateTime=0x1cad04a, ftLastAccessTime.dwLowDateTime=0x43f88c00, ftLastAccessTime.dwHighDateTime=0x1cad04a, ftLastWriteTime.dwLowDateTime=0xe7c27050, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x15b5, dwReserved0=0x0, dwReserved1=0x0, cFileName="OfficeMUI.xml", cAlternateFileName="OFFICE~2.XML")) returned 1 [0033.159] FindNextFileW (in: hFindFile=0x381b80, lpFindFileData=0x31e56c | out: lpFindFileData=0x31e56c*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x3f33d800, ftCreationTime.dwHighDateTime=0x1cad04a, ftLastAccessTime.dwLowDateTime=0x3f33d800, ftLastAccessTime.dwHighDateTime=0x1cad04a, ftLastWriteTime.dwLowDateTime=0xe7b68970, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0xd4200, dwReserved0=0x0, dwReserved1=0x0, cFileName="OfficeMUISet.msi", cAlternateFileName="OFFICE~1.MSI")) returned 1 [0033.159] FindNextFileW (in: hFindFile=0x381b80, lpFindFileData=0x31e56c | out: lpFindFileData=0x31e56c*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x4529b900, ftCreationTime.dwHighDateTime=0x1cad04a, ftLastAccessTime.dwLowDateTime=0x4529b900, ftLastAccessTime.dwHighDateTime=0x1cad04a, ftLastWriteTime.dwLowDateTime=0xe7b68970, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x333, dwReserved0=0x0, dwReserved1=0x0, cFileName="OfficeMUISet.xml", cAlternateFileName="OFFICE~1.XML")) returned 1 [0033.159] FindNextFileW (in: hFindFile=0x381b80, lpFindFileData=0x31e56c | out: lpFindFileData=0x31e56c*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xc8b16200, ftCreationTime.dwHighDateTime=0x1cac190, ftLastAccessTime.dwLowDateTime=0xc8b16200, ftLastAccessTime.dwHighDateTime=0x1cac190, ftLastWriteTime.dwLowDateTime=0xe8728670, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x2ed80, dwReserved0=0x0, dwReserved1=0x0, cFileName="osetupui.dll", cAlternateFileName="")) returned 1 [0033.159] FindNextFileW (in: hFindFile=0x381b80, lpFindFileData=0x31e56c | out: lpFindFileData=0x31e56c*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x77cbb000, ftCreationTime.dwHighDateTime=0x1cac57a, ftLastAccessTime.dwLowDateTime=0x77cbb000, ftLastAccessTime.dwHighDateTime=0x1cac57a, ftLastWriteTime.dwLowDateTime=0xe8728670, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x6a3b, dwReserved0=0x0, dwReserved1=0x0, cFileName="pss10r.chm", cAlternateFileName="")) returned 1 [0033.159] FindNextFileW (in: hFindFile=0x381b80, lpFindFileData=0x31e56c | out: lpFindFileData=0x31e56c*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x7cab9f00, ftCreationTime.dwHighDateTime=0x1cac8ad, ftLastAccessTime.dwLowDateTime=0x7cab9f00, ftLastAccessTime.dwHighDateTime=0x1cac8ad, ftLastWriteTime.dwLowDateTime=0xe8728670, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x10676, dwReserved0=0x0, dwReserved1=0x0, cFileName="setup.chm", cAlternateFileName="")) returned 1 [0033.159] FindNextFileW (in: hFindFile=0x381b80, lpFindFileData=0x31e56c | out: lpFindFileData=0x31e56c*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x42c75f00, ftCreationTime.dwHighDateTime=0x1cad04a, ftLastAccessTime.dwLowDateTime=0x42c75f00, ftLastAccessTime.dwHighDateTime=0x1cad04a, ftLastWriteTime.dwLowDateTime=0xe8728670, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x2488, dwReserved0=0x0, dwReserved1=0x0, cFileName="Setup.xml", cAlternateFileName="")) returned 1 [0033.160] FindNextFileW (in: hFindFile=0x381b80, lpFindFileData=0x31e56c | out: lpFindFileData=0x31e56c*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x131a1c00, ftCreationTime.dwHighDateTime=0x1cacdea, ftLastAccessTime.dwLowDateTime=0x131a1c00, ftLastAccessTime.dwHighDateTime=0x1cacdea, ftLastWriteTime.dwLowDateTime=0xe84c60d0, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0xe00, dwReserved0=0x0, dwReserved1=0x0, cFileName="ShellUI.MST", cAlternateFileName="")) returned 1 [0033.160] FindNextFileW (in: hFindFile=0x381b80, lpFindFileData=0x31e56c | out: lpFindFileData=0x31e56c*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x131a1c00, ftCreationTime.dwHighDateTime=0x1cacdea, ftLastAccessTime.dwLowDateTime=0x131a1c00, ftLastAccessTime.dwHighDateTime=0x1cacdea, ftLastWriteTime.dwLowDateTime=0xe84c60d0, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0xe00, dwReserved0=0x0, dwReserved1=0x0, cFileName="ShellUI.MST", cAlternateFileName="")) returned 0 [0033.160] FindClose (in: hFindFile=0x381b80 | out: hFindFile=0x381b80) returned 1 [0033.160] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e7f4) returned 1 [0033.160] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e800) returned 1 [0033.161] GetFullPathNameW (in: lpFileName="C:\\MSOCache\\All Users\\{90140000-0115-0409-1000-0000000FF1CE}-C\\branding.xml", nBufferLength=0x105, lpBuffer=0x31e20c, lpFilePart=0x0 | out: lpBuffer="C:\\MSOCache\\All Users\\{90140000-0115-0409-1000-0000000FF1CE}-C\\branding.xml", lpFilePart=0x0) returned 0x4b [0033.161] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e700) returned 1 [0033.161] CreateFileW (lpFileName="C:\\MSOCache\\All Users\\{90140000-0115-0409-1000-0000000FF1CE}-C\\branding.xml" (normalized: "c:\\msocache\\all users\\{90140000-0115-0409-1000-0000000ff1ce}-c\\branding.xml"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x224 [0033.162] GetFileType (hFile=0x224) returned 0x1 [0033.162] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e6fc) returned 1 [0033.162] GetFileType (hFile=0x224) returned 0x1 [0033.162] GetFileSize (in: hFile=0x224, lpFileSizeHigh=0x31e808 | out: lpFileSizeHigh=0x31e808*=0x0) returned 0x91975 [0033.162] ReadFile (in: hFile=0x224, lpBuffer=0x36194b0, nNumberOfBytesToRead=0x91975, lpNumberOfBytesRead=0x31e7b4, lpOverlapped=0x0 | out: lpBuffer=0x36194b0*, lpNumberOfBytesRead=0x31e7b4*=0x91975, lpOverlapped=0x0) returned 1 [0033.212] GetFullPathNameW (in: lpFileName="C:\\MSOCache\\All Users\\{90140000-0115-0409-1000-0000000FF1CE}-C\\branding.xml", nBufferLength=0x105, lpBuffer=0x31e1f8, lpFilePart=0x0 | out: lpBuffer="C:\\MSOCache\\All Users\\{90140000-0115-0409-1000-0000000FF1CE}-C\\branding.xml", lpFilePart=0x0) returned 0x4b [0033.212] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e6ec) returned 1 [0033.213] CreateFileW (lpFileName="C:\\MSOCache\\All Users\\{90140000-0115-0409-1000-0000000FF1CE}-C\\branding.xml" (normalized: "c:\\msocache\\all users\\{90140000-0115-0409-1000-0000000ff1ce}-c\\branding.xml"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x224 [0033.218] GetFileType (hFile=0x224) returned 0x1 [0033.218] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e6e8) returned 1 [0033.218] GetFileType (hFile=0x224) returned 0x1 [0033.218] WriteFile (in: hFile=0x224, lpBuffer=0x38f1468*, nNumberOfBytesToWrite=0x91980, lpNumberOfBytesWritten=0x31e7a8, lpOverlapped=0x0 | out: lpBuffer=0x38f1468*, lpNumberOfBytesWritten=0x31e7a8*=0x91980, lpOverlapped=0x0) returned 1 [0033.227] GetFullPathNameW (in: lpFileName="C:\\MSOCache\\All Users\\{90140000-0115-0409-1000-0000000FF1CE}-C\\branding.xml", nBufferLength=0x105, lpBuffer=0x31e32c, lpFilePart=0x0 | out: lpBuffer="C:\\MSOCache\\All Users\\{90140000-0115-0409-1000-0000000FF1CE}-C\\branding.xml", lpFilePart=0x0) returned 0x4b [0033.227] GetFullPathNameW (in: lpFileName="C:\\MSOCache\\All Users\\{90140000-0115-0409-1000-0000000FF1CE}-C\\branding.xml", nBufferLength=0x105, lpBuffer=0x31e32c, lpFilePart=0x0 | out: lpBuffer="C:\\MSOCache\\All Users\\{90140000-0115-0409-1000-0000000FF1CE}-C\\branding.xml", lpFilePart=0x0) returned 0x4b [0033.227] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e78c) returned 1 [0033.227] GetFileAttributesExW (in: lpFileName="C:\\MSOCache\\All Users\\{90140000-0115-0409-1000-0000000FF1CE}-C\\branding.xml" (normalized: "c:\\msocache\\all users\\{90140000-0115-0409-1000-0000000ff1ce}-c\\branding.xml"), fInfoLevelId=0x0, lpFileInformation=0x31e808 | out: lpFileInformation=0x31e808*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x11e8ef00, ftCreationTime.dwHighDateTime=0x1cacdea, ftLastAccessTime.dwLowDateTime=0x11e8ef00, ftLastAccessTime.dwHighDateTime=0x1cacdea, ftLastWriteTime.dwLowDateTime=0xf740d460, ftLastWriteTime.dwHighDateTime=0x1d6eb7e, nFileSizeHigh=0x0, nFileSizeLow=0x91980)) returned 1 [0033.227] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e788) returned 1 [0033.227] MoveFileW (lpExistingFileName="C:\\MSOCache\\All Users\\{90140000-0115-0409-1000-0000000FF1CE}-C\\branding.xml" (normalized: "c:\\msocache\\all users\\{90140000-0115-0409-1000-0000000ff1ce}-c\\branding.xml"), lpNewFileName="C:\\MSOCache\\All Users\\{90140000-0115-0409-1000-0000000FF1CE}-C\\branding.xml" (normalized: "c:\\msocache\\all users\\{90140000-0115-0409-1000-0000000ff1ce}-c\\branding.xml")) returned 1 [0033.234] GetFullPathNameW (in: lpFileName="C:\\MSOCache\\All Users\\{90140000-0115-0409-1000-0000000FF1CE}-C\\OfficeMUI.xml", nBufferLength=0x105, lpBuffer=0x31e20c, lpFilePart=0x0 | out: lpBuffer="C:\\MSOCache\\All Users\\{90140000-0115-0409-1000-0000000FF1CE}-C\\OfficeMUI.xml", lpFilePart=0x0) returned 0x4c [0033.234] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e700) returned 1 [0033.234] CreateFileW (lpFileName="C:\\MSOCache\\All Users\\{90140000-0115-0409-1000-0000000FF1CE}-C\\OfficeMUI.xml" (normalized: "c:\\msocache\\all users\\{90140000-0115-0409-1000-0000000ff1ce}-c\\officemui.xml"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x224 [0033.235] GetFileType (hFile=0x224) returned 0x1 [0033.235] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e6fc) returned 1 [0033.235] GetFileType (hFile=0x224) returned 0x1 [0033.235] GetFileSize (in: hFile=0x224, lpFileSizeHigh=0x31e808 | out: lpFileSizeHigh=0x31e808*=0x0) returned 0x15b5 [0033.235] ReadFile (in: hFile=0x224, lpBuffer=0x27ad15c, nNumberOfBytesToRead=0x15b5, lpNumberOfBytesRead=0x31e7b4, lpOverlapped=0x0 | out: lpBuffer=0x27ad15c*, lpNumberOfBytesRead=0x31e7b4*=0x15b5, lpOverlapped=0x0) returned 1 [0033.264] GetFullPathNameW (in: lpFileName="C:\\MSOCache\\All Users\\{90140000-0115-0409-1000-0000000FF1CE}-C\\OfficeMUI.xml", nBufferLength=0x105, lpBuffer=0x31e1f8, lpFilePart=0x0 | out: lpBuffer="C:\\MSOCache\\All Users\\{90140000-0115-0409-1000-0000000FF1CE}-C\\OfficeMUI.xml", lpFilePart=0x0) returned 0x4c [0033.264] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e6ec) returned 1 [0033.264] CreateFileW (lpFileName="C:\\MSOCache\\All Users\\{90140000-0115-0409-1000-0000000FF1CE}-C\\OfficeMUI.xml" (normalized: "c:\\msocache\\all users\\{90140000-0115-0409-1000-0000000ff1ce}-c\\officemui.xml"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x224 [0033.265] GetFileType (hFile=0x224) returned 0x1 [0033.265] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e6e8) returned 1 [0033.265] GetFileType (hFile=0x224) returned 0x1 [0033.265] WriteFile (in: hFile=0x224, lpBuffer=0x2800c04*, nNumberOfBytesToWrite=0x15c0, lpNumberOfBytesWritten=0x31e7a8, lpOverlapped=0x0 | out: lpBuffer=0x2800c04*, lpNumberOfBytesWritten=0x31e7a8*=0x15c0, lpOverlapped=0x0) returned 1 [0033.266] GetFullPathNameW (in: lpFileName="C:\\MSOCache\\All Users\\{90140000-0115-0409-1000-0000000FF1CE}-C\\OfficeMUI.xml", nBufferLength=0x105, lpBuffer=0x31e32c, lpFilePart=0x0 | out: lpBuffer="C:\\MSOCache\\All Users\\{90140000-0115-0409-1000-0000000FF1CE}-C\\OfficeMUI.xml", lpFilePart=0x0) returned 0x4c [0033.266] GetFullPathNameW (in: lpFileName="C:\\MSOCache\\All Users\\{90140000-0115-0409-1000-0000000FF1CE}-C\\OfficeMUI.xml", nBufferLength=0x105, lpBuffer=0x31e32c, lpFilePart=0x0 | out: lpBuffer="C:\\MSOCache\\All Users\\{90140000-0115-0409-1000-0000000FF1CE}-C\\OfficeMUI.xml", lpFilePart=0x0) returned 0x4c [0033.266] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e78c) returned 1 [0033.266] GetFileAttributesExW (in: lpFileName="C:\\MSOCache\\All Users\\{90140000-0115-0409-1000-0000000FF1CE}-C\\OfficeMUI.xml" (normalized: "c:\\msocache\\all users\\{90140000-0115-0409-1000-0000000ff1ce}-c\\officemui.xml"), fInfoLevelId=0x0, lpFileInformation=0x31e808 | out: lpFileInformation=0x31e808*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x43f88c00, ftCreationTime.dwHighDateTime=0x1cad04a, ftLastAccessTime.dwLowDateTime=0x43f88c00, ftLastAccessTime.dwHighDateTime=0x1cad04a, ftLastWriteTime.dwLowDateTime=0xf747f880, ftLastWriteTime.dwHighDateTime=0x1d6eb7e, nFileSizeHigh=0x0, nFileSizeLow=0x15c0)) returned 1 [0033.266] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e788) returned 1 [0033.266] MoveFileW (lpExistingFileName="C:\\MSOCache\\All Users\\{90140000-0115-0409-1000-0000000FF1CE}-C\\OfficeMUI.xml" (normalized: "c:\\msocache\\all users\\{90140000-0115-0409-1000-0000000ff1ce}-c\\officemui.xml"), lpNewFileName="C:\\MSOCache\\All Users\\{90140000-0115-0409-1000-0000000FF1CE}-C\\OfficeMUI.xml" (normalized: "c:\\msocache\\all users\\{90140000-0115-0409-1000-0000000ff1ce}-c\\officemui.xml")) returned 1 [0033.267] GetFullPathNameW (in: lpFileName="C:\\MSOCache\\All Users\\{90140000-0115-0409-1000-0000000FF1CE}-C\\OfficeMUISet.xml", nBufferLength=0x105, lpBuffer=0x31e20c, lpFilePart=0x0 | out: lpBuffer="C:\\MSOCache\\All Users\\{90140000-0115-0409-1000-0000000FF1CE}-C\\OfficeMUISet.xml", lpFilePart=0x0) returned 0x4f [0033.267] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e700) returned 1 [0033.267] CreateFileW (lpFileName="C:\\MSOCache\\All Users\\{90140000-0115-0409-1000-0000000FF1CE}-C\\OfficeMUISet.xml" (normalized: "c:\\msocache\\all users\\{90140000-0115-0409-1000-0000000ff1ce}-c\\officemuiset.xml"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x224 [0033.268] GetFileType (hFile=0x224) returned 0x1 [0033.268] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e6fc) returned 1 [0033.268] GetFileType (hFile=0x224) returned 0x1 [0033.268] GetFileSize (in: hFile=0x224, lpFileSizeHigh=0x31e808 | out: lpFileSizeHigh=0x31e808*=0x0) returned 0x333 [0033.268] ReadFile (in: hFile=0x224, lpBuffer=0x28028f4, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x31e7b4, lpOverlapped=0x0 | out: lpBuffer=0x28028f4*, lpNumberOfBytesRead=0x31e7b4*=0x333, lpOverlapped=0x0) returned 1 [0033.313] GetFullPathNameW (in: lpFileName="C:\\MSOCache\\All Users\\{90140000-0115-0409-1000-0000000FF1CE}-C\\OfficeMUISet.xml", nBufferLength=0x105, lpBuffer=0x31e1f8, lpFilePart=0x0 | out: lpBuffer="C:\\MSOCache\\All Users\\{90140000-0115-0409-1000-0000000FF1CE}-C\\OfficeMUISet.xml", lpFilePart=0x0) returned 0x4f [0033.313] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e6ec) returned 1 [0033.314] CreateFileW (lpFileName="C:\\MSOCache\\All Users\\{90140000-0115-0409-1000-0000000FF1CE}-C\\OfficeMUISet.xml" (normalized: "c:\\msocache\\all users\\{90140000-0115-0409-1000-0000000ff1ce}-c\\officemuiset.xml"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x224 [0033.314] GetFileType (hFile=0x224) returned 0x1 [0033.314] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e6e8) returned 1 [0033.314] GetFileType (hFile=0x224) returned 0x1 [0033.315] WriteFile (in: hFile=0x224, lpBuffer=0x265080c*, nNumberOfBytesToWrite=0x340, lpNumberOfBytesWritten=0x31e77c, lpOverlapped=0x0 | out: lpBuffer=0x265080c*, lpNumberOfBytesWritten=0x31e77c*=0x340, lpOverlapped=0x0) returned 1 [0033.315] CloseHandle (hObject=0x224) returned 1 [0033.316] GetFullPathNameW (in: lpFileName="C:\\MSOCache\\All Users\\{90140000-0115-0409-1000-0000000FF1CE}-C\\OfficeMUISet.xml", nBufferLength=0x105, lpBuffer=0x31e32c, lpFilePart=0x0 | out: lpBuffer="C:\\MSOCache\\All Users\\{90140000-0115-0409-1000-0000000FF1CE}-C\\OfficeMUISet.xml", lpFilePart=0x0) returned 0x4f [0033.316] GetFullPathNameW (in: lpFileName="C:\\MSOCache\\All Users\\{90140000-0115-0409-1000-0000000FF1CE}-C\\OfficeMUISet.xml", nBufferLength=0x105, lpBuffer=0x31e32c, lpFilePart=0x0 | out: lpBuffer="C:\\MSOCache\\All Users\\{90140000-0115-0409-1000-0000000FF1CE}-C\\OfficeMUISet.xml", lpFilePart=0x0) returned 0x4f [0033.316] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e78c) returned 1 [0033.316] GetFileAttributesExW (in: lpFileName="C:\\MSOCache\\All Users\\{90140000-0115-0409-1000-0000000FF1CE}-C\\OfficeMUISet.xml" (normalized: "c:\\msocache\\all users\\{90140000-0115-0409-1000-0000000ff1ce}-c\\officemuiset.xml"), fInfoLevelId=0x0, lpFileInformation=0x31e808 | out: lpFileInformation=0x31e808*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x4529b900, ftCreationTime.dwHighDateTime=0x1cad04a, ftLastAccessTime.dwLowDateTime=0x4529b900, ftLastAccessTime.dwHighDateTime=0x1cad04a, ftLastWriteTime.dwLowDateTime=0xf74f1ca0, ftLastWriteTime.dwHighDateTime=0x1d6eb7e, nFileSizeHigh=0x0, nFileSizeLow=0x340)) returned 1 [0033.316] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e788) returned 1 [0033.316] MoveFileW (lpExistingFileName="C:\\MSOCache\\All Users\\{90140000-0115-0409-1000-0000000FF1CE}-C\\OfficeMUISet.xml" (normalized: "c:\\msocache\\all users\\{90140000-0115-0409-1000-0000000ff1ce}-c\\officemuiset.xml"), lpNewFileName="C:\\MSOCache\\All Users\\{90140000-0115-0409-1000-0000000FF1CE}-C\\OfficeMUISet.xml" (normalized: "c:\\msocache\\all users\\{90140000-0115-0409-1000-0000000ff1ce}-c\\officemuiset.xml")) returned 1 [0033.317] GetFullPathNameW (in: lpFileName="C:\\MSOCache\\All Users\\{90140000-0115-0409-1000-0000000FF1CE}-C\\Setup.xml", nBufferLength=0x105, lpBuffer=0x31e20c, lpFilePart=0x0 | out: lpBuffer="C:\\MSOCache\\All Users\\{90140000-0115-0409-1000-0000000FF1CE}-C\\Setup.xml", lpFilePart=0x0) returned 0x48 [0033.317] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e700) returned 1 [0033.317] CreateFileW (lpFileName="C:\\MSOCache\\All Users\\{90140000-0115-0409-1000-0000000FF1CE}-C\\Setup.xml" (normalized: "c:\\msocache\\all users\\{90140000-0115-0409-1000-0000000ff1ce}-c\\setup.xml"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x224 [0033.317] GetFileType (hFile=0x224) returned 0x1 [0033.317] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e6fc) returned 1 [0033.317] GetFileType (hFile=0x224) returned 0x1 [0033.317] GetFileSize (in: hFile=0x224, lpFileSizeHigh=0x31e808 | out: lpFileSizeHigh=0x31e808*=0x0) returned 0x2488 [0033.317] ReadFile (in: hFile=0x224, lpBuffer=0x2651aec, nNumberOfBytesToRead=0x2488, lpNumberOfBytesRead=0x31e7b4, lpOverlapped=0x0 | out: lpBuffer=0x2651aec*, lpNumberOfBytesRead=0x31e7b4*=0x2488, lpOverlapped=0x0) returned 1 [0033.319] CloseHandle (hObject=0x224) returned 1 [0033.333] GetFullPathNameW (in: lpFileName="C:\\MSOCache\\All Users\\{90140000-0115-0409-1000-0000000FF1CE}-C\\Setup.xml", nBufferLength=0x105, lpBuffer=0x31e1f8, lpFilePart=0x0 | out: lpBuffer="C:\\MSOCache\\All Users\\{90140000-0115-0409-1000-0000000FF1CE}-C\\Setup.xml", lpFilePart=0x0) returned 0x48 [0033.333] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e6ec) returned 1 [0033.333] CreateFileW (lpFileName="C:\\MSOCache\\All Users\\{90140000-0115-0409-1000-0000000FF1CE}-C\\Setup.xml" (normalized: "c:\\msocache\\all users\\{90140000-0115-0409-1000-0000000ff1ce}-c\\setup.xml"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x224 [0033.333] GetFileType (hFile=0x224) returned 0x1 [0033.334] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e6e8) returned 1 [0033.334] GetFileType (hFile=0x224) returned 0x1 [0033.334] WriteFile (in: hFile=0x224, lpBuffer=0x26aa0fc*, nNumberOfBytesToWrite=0x2490, lpNumberOfBytesWritten=0x31e7a8, lpOverlapped=0x0 | out: lpBuffer=0x26aa0fc*, lpNumberOfBytesWritten=0x31e7a8*=0x2490, lpOverlapped=0x0) returned 1 [0033.335] CloseHandle (hObject=0x224) returned 1 [0033.335] GetFullPathNameW (in: lpFileName="C:\\MSOCache\\All Users\\{90140000-0115-0409-1000-0000000FF1CE}-C\\Setup.xml", nBufferLength=0x105, lpBuffer=0x31e32c, lpFilePart=0x0 | out: lpBuffer="C:\\MSOCache\\All Users\\{90140000-0115-0409-1000-0000000FF1CE}-C\\Setup.xml", lpFilePart=0x0) returned 0x48 [0033.335] GetFullPathNameW (in: lpFileName="C:\\MSOCache\\All Users\\{90140000-0115-0409-1000-0000000FF1CE}-C\\Setup.xml", nBufferLength=0x105, lpBuffer=0x31e32c, lpFilePart=0x0 | out: lpBuffer="C:\\MSOCache\\All Users\\{90140000-0115-0409-1000-0000000FF1CE}-C\\Setup.xml", lpFilePart=0x0) returned 0x48 [0033.335] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e78c) returned 1 [0033.335] GetFileAttributesExW (in: lpFileName="C:\\MSOCache\\All Users\\{90140000-0115-0409-1000-0000000FF1CE}-C\\Setup.xml" (normalized: "c:\\msocache\\all users\\{90140000-0115-0409-1000-0000000ff1ce}-c\\setup.xml"), fInfoLevelId=0x0, lpFileInformation=0x31e808 | out: lpFileInformation=0x31e808*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x42c75f00, ftCreationTime.dwHighDateTime=0x1cad04a, ftLastAccessTime.dwLowDateTime=0x42c75f00, ftLastAccessTime.dwHighDateTime=0x1cad04a, ftLastWriteTime.dwLowDateTime=0xf7517e00, ftLastWriteTime.dwHighDateTime=0x1d6eb7e, nFileSizeHigh=0x0, nFileSizeLow=0x2490)) returned 1 [0033.335] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e788) returned 1 [0033.335] MoveFileW (lpExistingFileName="C:\\MSOCache\\All Users\\{90140000-0115-0409-1000-0000000FF1CE}-C\\Setup.xml" (normalized: "c:\\msocache\\all users\\{90140000-0115-0409-1000-0000000ff1ce}-c\\setup.xml"), lpNewFileName="C:\\MSOCache\\All Users\\{90140000-0115-0409-1000-0000000FF1CE}-C\\Setup.xml" (normalized: "c:\\msocache\\all users\\{90140000-0115-0409-1000-0000000ff1ce}-c\\setup.xml")) returned 1 [0033.336] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e7bc) returned 1 [0033.336] GetFullPathNameW (in: lpFileName="C:\\MSOCache\\All Users\\{90140000-0115-0409-1000-0000000FF1CE}-C\\1033", nBufferLength=0x105, lpBuffer=0x31e2c4, lpFilePart=0x0 | out: lpBuffer="C:\\MSOCache\\All Users\\{90140000-0115-0409-1000-0000000FF1CE}-C\\1033", lpFilePart=0x0) returned 0x43 [0033.336] GetFullPathNameW (in: lpFileName="C:\\MSOCache\\All Users\\{90140000-0115-0409-1000-0000000FF1CE}-C\\1033\\", nBufferLength=0x105, lpBuffer=0x31e298, lpFilePart=0x0 | out: lpBuffer="C:\\MSOCache\\All Users\\{90140000-0115-0409-1000-0000000FF1CE}-C\\1033\\", lpFilePart=0x0) returned 0x44 [0033.336] FindFirstFileW (in: lpFileName="C:\\MSOCache\\All Users\\{90140000-0115-0409-1000-0000000FF1CE}-C\\1033\\*", lpFindFileData=0x31e4e4 | out: lpFindFileData=0x31e4e4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe8691090, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xe8691090, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xe8691090, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x381f40 [0033.339] FindNextFileW (in: hFindFile=0x381f40, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe8691090, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xe8691090, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xe8691090, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0033.339] FindNextFileW (in: hFindFile=0x381f40, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x6a35700, ftCreationTime.dwHighDateTime=0x1cac9d7, ftLastAccessTime.dwLowDateTime=0x6a35700, ftLastAccessTime.dwHighDateTime=0x1cac9d7, ftLastWriteTime.dwLowDateTime=0xe8691090, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x1a588, dwReserved0=0x0, dwReserved1=0x0, cFileName="dwintl20.dll", cAlternateFileName="")) returned 1 [0033.339] FindNextFileW (in: hFindFile=0x381f40, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0033.339] FindClose (in: hFindFile=0x381f40 | out: hFindFile=0x381f40) returned 1 [0033.339] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e77c) returned 1 [0033.339] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e788) returned 1 [0033.339] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e7bc) returned 1 [0033.339] GetFullPathNameW (in: lpFileName="C:\\MSOCache\\All Users\\{90140000-0115-0409-1000-0000000FF1CE}-C\\1033", nBufferLength=0x105, lpBuffer=0x31e2c4, lpFilePart=0x0 | out: lpBuffer="C:\\MSOCache\\All Users\\{90140000-0115-0409-1000-0000000FF1CE}-C\\1033", lpFilePart=0x0) returned 0x43 [0033.339] GetFullPathNameW (in: lpFileName="C:\\MSOCache\\All Users\\{90140000-0115-0409-1000-0000000FF1CE}-C\\1033\\", nBufferLength=0x105, lpBuffer=0x31e298, lpFilePart=0x0 | out: lpBuffer="C:\\MSOCache\\All Users\\{90140000-0115-0409-1000-0000000FF1CE}-C\\1033\\", lpFilePart=0x0) returned 0x44 [0033.339] FindFirstFileW (in: lpFileName="C:\\MSOCache\\All Users\\{90140000-0115-0409-1000-0000000FF1CE}-C\\1033\\*", lpFindFileData=0x31e4e4 | out: lpFindFileData=0x31e4e4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe8691090, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xe8691090, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xe8691090, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x381f40 [0033.339] FindNextFileW (in: hFindFile=0x381f40, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe8691090, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xe8691090, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xe8691090, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0033.340] FindNextFileW (in: hFindFile=0x381f40, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x6a35700, ftCreationTime.dwHighDateTime=0x1cac9d7, ftLastAccessTime.dwLowDateTime=0x6a35700, ftLastAccessTime.dwHighDateTime=0x1cac9d7, ftLastWriteTime.dwLowDateTime=0xe8691090, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x1a588, dwReserved0=0x0, dwReserved1=0x0, cFileName="dwintl20.dll", cAlternateFileName="")) returned 1 [0033.340] FindNextFileW (in: hFindFile=0x381f40, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x6a35700, ftCreationTime.dwHighDateTime=0x1cac9d7, ftLastAccessTime.dwLowDateTime=0x6a35700, ftLastAccessTime.dwHighDateTime=0x1cac9d7, ftLastWriteTime.dwLowDateTime=0xe8691090, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x1a588, dwReserved0=0x0, dwReserved1=0x0, cFileName="dwintl20.dll", cAlternateFileName="")) returned 0 [0033.340] FindClose (in: hFindFile=0x381f40 | out: hFindFile=0x381f40) returned 1 [0033.340] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e77c) returned 1 [0033.340] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e788) returned 1 [0033.340] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e834) returned 1 [0033.340] GetFullPathNameW (in: lpFileName="C:\\MSOCache\\All Users\\{90140000-0117-0409-1000-0000000FF1CE}-C", nBufferLength=0x105, lpBuffer=0x31e33c, lpFilePart=0x0 | out: lpBuffer="C:\\MSOCache\\All Users\\{90140000-0117-0409-1000-0000000FF1CE}-C", lpFilePart=0x0) returned 0x3e [0033.340] GetFullPathNameW (in: lpFileName="C:\\MSOCache\\All Users\\{90140000-0117-0409-1000-0000000FF1CE}-C\\", nBufferLength=0x105, lpBuffer=0x31e310, lpFilePart=0x0 | out: lpBuffer="C:\\MSOCache\\All Users\\{90140000-0117-0409-1000-0000000FF1CE}-C\\", lpFilePart=0x0) returned 0x3f [0033.340] FindFirstFileW (in: lpFileName="C:\\MSOCache\\All Users\\{90140000-0117-0409-1000-0000000FF1CE}-C\\*", lpFindFileData=0x31e55c | out: lpFindFileData=0x31e55c*(dwFileAttributes=0x2011, ftCreationTime.dwLowDateTime=0xfa13c510, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xfc112b50, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xfc112b50, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x381f40 [0033.342] FindNextFileW (in: hFindFile=0x381f40, lpFindFileData=0x31e56c | out: lpFindFileData=0x31e56c*(dwFileAttributes=0x2011, ftCreationTime.dwLowDateTime=0xfa13c510, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xfc112b50, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xfc112b50, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0033.342] FindNextFileW (in: hFindFile=0x381f40, lpFindFileData=0x31e56c | out: lpFindFileData=0x31e56c*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xfa2b92d0, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xfc0c6890, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xfc0c6890, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Access.en-us", cAlternateFileName="ACCESS~1.EN-")) returned 1 [0033.343] FindNextFileW (in: hFindFile=0x381f40, lpFindFileData=0x31e56c | out: lpFindFileData=0x31e56c*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x3f33d800, ftCreationTime.dwHighDateTime=0x1cad04a, ftLastAccessTime.dwLowDateTime=0x3f33d800, ftLastAccessTime.dwHighDateTime=0x1cad04a, ftLastWriteTime.dwLowDateTime=0xfa160f00, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0xd4200, dwReserved0=0x0, dwReserved1=0x0, cFileName="AccessMUISet.msi", cAlternateFileName="ACCESS~1.MSI")) returned 1 [0033.343] FindNextFileW (in: hFindFile=0x381f40, lpFindFileData=0x31e56c | out: lpFindFileData=0x31e56c*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x4529b900, ftCreationTime.dwHighDateTime=0x1cad04a, ftLastAccessTime.dwLowDateTime=0x4529b900, ftLastAccessTime.dwHighDateTime=0x1cad04a, ftLastWriteTime.dwLowDateTime=0xfa13c510, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x333, dwReserved0=0x0, dwReserved1=0x0, cFileName="AccessMUISet.xml", cAlternateFileName="ACCESS~1.XML")) returned 1 [0033.343] FindNextFileW (in: hFindFile=0x381f40, lpFindFileData=0x31e56c | out: lpFindFileData=0x31e56c*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x43f88c00, ftCreationTime.dwHighDateTime=0x1cad04a, ftLastAccessTime.dwLowDateTime=0x43f88c00, ftLastAccessTime.dwHighDateTime=0x1cad04a, ftLastWriteTime.dwLowDateTime=0xfc111bb0, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0xa40, dwReserved0=0x0, dwReserved1=0x0, cFileName="Setup.xml", cAlternateFileName="")) returned 1 [0033.343] FindNextFileW (in: hFindFile=0x381f40, lpFindFileData=0x31e56c | out: lpFindFileData=0x31e56c*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0033.343] FindClose (in: hFindFile=0x381f40 | out: hFindFile=0x381f40) returned 1 [0033.344] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e7f4) returned 1 [0033.344] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e800) returned 1 [0033.344] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e834) returned 1 [0033.344] GetFullPathNameW (in: lpFileName="C:\\MSOCache\\All Users\\{90140000-0117-0409-1000-0000000FF1CE}-C", nBufferLength=0x105, lpBuffer=0x31e33c, lpFilePart=0x0 | out: lpBuffer="C:\\MSOCache\\All Users\\{90140000-0117-0409-1000-0000000FF1CE}-C", lpFilePart=0x0) returned 0x3e [0033.344] GetFullPathNameW (in: lpFileName="C:\\MSOCache\\All Users\\{90140000-0117-0409-1000-0000000FF1CE}-C\\", nBufferLength=0x105, lpBuffer=0x31e310, lpFilePart=0x0 | out: lpBuffer="C:\\MSOCache\\All Users\\{90140000-0117-0409-1000-0000000FF1CE}-C\\", lpFilePart=0x0) returned 0x3f [0033.344] FindFirstFileW (in: lpFileName="C:\\MSOCache\\All Users\\{90140000-0117-0409-1000-0000000FF1CE}-C\\*", lpFindFileData=0x31e55c | out: lpFindFileData=0x31e55c*(dwFileAttributes=0x2011, ftCreationTime.dwLowDateTime=0xfa13c510, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xfc112b50, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xfc112b50, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x381f40 [0033.345] FindNextFileW (in: hFindFile=0x381f40, lpFindFileData=0x31e56c | out: lpFindFileData=0x31e56c*(dwFileAttributes=0x2011, ftCreationTime.dwLowDateTime=0xfa13c510, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xfc112b50, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xfc112b50, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0033.345] FindNextFileW (in: hFindFile=0x381f40, lpFindFileData=0x31e56c | out: lpFindFileData=0x31e56c*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xfa2b92d0, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xfc0c6890, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xfc0c6890, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Access.en-us", cAlternateFileName="ACCESS~1.EN-")) returned 1 [0033.345] FindNextFileW (in: hFindFile=0x381f40, lpFindFileData=0x31e56c | out: lpFindFileData=0x31e56c*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x3f33d800, ftCreationTime.dwHighDateTime=0x1cad04a, ftLastAccessTime.dwLowDateTime=0x3f33d800, ftLastAccessTime.dwHighDateTime=0x1cad04a, ftLastWriteTime.dwLowDateTime=0xfa160f00, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0xd4200, dwReserved0=0x0, dwReserved1=0x0, cFileName="AccessMUISet.msi", cAlternateFileName="ACCESS~1.MSI")) returned 1 [0033.345] FindNextFileW (in: hFindFile=0x381f40, lpFindFileData=0x31e56c | out: lpFindFileData=0x31e56c*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x4529b900, ftCreationTime.dwHighDateTime=0x1cad04a, ftLastAccessTime.dwLowDateTime=0x4529b900, ftLastAccessTime.dwHighDateTime=0x1cad04a, ftLastWriteTime.dwLowDateTime=0xfa13c510, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x333, dwReserved0=0x0, dwReserved1=0x0, cFileName="AccessMUISet.xml", cAlternateFileName="ACCESS~1.XML")) returned 1 [0033.345] FindNextFileW (in: hFindFile=0x381f40, lpFindFileData=0x31e56c | out: lpFindFileData=0x31e56c*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x43f88c00, ftCreationTime.dwHighDateTime=0x1cad04a, ftLastAccessTime.dwLowDateTime=0x43f88c00, ftLastAccessTime.dwHighDateTime=0x1cad04a, ftLastWriteTime.dwLowDateTime=0xfc111bb0, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0xa40, dwReserved0=0x0, dwReserved1=0x0, cFileName="Setup.xml", cAlternateFileName="")) returned 1 [0033.345] FindNextFileW (in: hFindFile=0x381f40, lpFindFileData=0x31e56c | out: lpFindFileData=0x31e56c*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x43f88c00, ftCreationTime.dwHighDateTime=0x1cad04a, ftLastAccessTime.dwLowDateTime=0x43f88c00, ftLastAccessTime.dwHighDateTime=0x1cad04a, ftLastWriteTime.dwLowDateTime=0xfc111bb0, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0xa40, dwReserved0=0x0, dwReserved1=0x0, cFileName="Setup.xml", cAlternateFileName="")) returned 0 [0033.345] FindClose (in: hFindFile=0x381f40 | out: hFindFile=0x381f40) returned 1 [0033.346] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e7f4) returned 1 [0033.346] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e800) returned 1 [0033.346] GetFullPathNameW (in: lpFileName="C:\\MSOCache\\All Users\\{90140000-0117-0409-1000-0000000FF1CE}-C\\AccessMUISet.xml", nBufferLength=0x105, lpBuffer=0x31e20c, lpFilePart=0x0 | out: lpBuffer="C:\\MSOCache\\All Users\\{90140000-0117-0409-1000-0000000FF1CE}-C\\AccessMUISet.xml", lpFilePart=0x0) returned 0x4f [0033.346] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e700) returned 1 [0033.346] CreateFileW (lpFileName="C:\\MSOCache\\All Users\\{90140000-0117-0409-1000-0000000FF1CE}-C\\AccessMUISet.xml" (normalized: "c:\\msocache\\all users\\{90140000-0117-0409-1000-0000000ff1ce}-c\\accessmuiset.xml"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x224 [0033.347] GetFileType (hFile=0x224) returned 0x1 [0033.347] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e6fc) returned 1 [0033.347] GetFileType (hFile=0x224) returned 0x1 [0033.347] GetFileSize (in: hFile=0x224, lpFileSizeHigh=0x31e808 | out: lpFileSizeHigh=0x31e808*=0x0) returned 0x333 [0033.347] ReadFile (in: hFile=0x224, lpBuffer=0x26b0870, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x31e7b4, lpOverlapped=0x0 | out: lpBuffer=0x26b0870*, lpNumberOfBytesRead=0x31e7b4*=0x333, lpOverlapped=0x0) returned 1 [0033.349] CloseHandle (hObject=0x224) returned 1 [0033.362] GetFullPathNameW (in: lpFileName="C:\\MSOCache\\All Users\\{90140000-0117-0409-1000-0000000FF1CE}-C\\AccessMUISet.xml", nBufferLength=0x105, lpBuffer=0x31e1f8, lpFilePart=0x0 | out: lpBuffer="C:\\MSOCache\\All Users\\{90140000-0117-0409-1000-0000000FF1CE}-C\\AccessMUISet.xml", lpFilePart=0x0) returned 0x4f [0033.363] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e6ec) returned 1 [0033.363] CreateFileW (lpFileName="C:\\MSOCache\\All Users\\{90140000-0117-0409-1000-0000000FF1CE}-C\\AccessMUISet.xml" (normalized: "c:\\msocache\\all users\\{90140000-0117-0409-1000-0000000ff1ce}-c\\accessmuiset.xml"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x224 [0033.363] GetFileType (hFile=0x224) returned 0x1 [0033.363] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e6e8) returned 1 [0033.363] GetFileType (hFile=0x224) returned 0x1 [0033.363] WriteFile (in: hFile=0x224, lpBuffer=0x26ff7e8*, nNumberOfBytesToWrite=0x340, lpNumberOfBytesWritten=0x31e77c, lpOverlapped=0x0 | out: lpBuffer=0x26ff7e8*, lpNumberOfBytesWritten=0x31e77c*=0x340, lpOverlapped=0x0) returned 1 [0033.364] CloseHandle (hObject=0x224) returned 1 [0033.365] GetFullPathNameW (in: lpFileName="C:\\MSOCache\\All Users\\{90140000-0117-0409-1000-0000000FF1CE}-C\\AccessMUISet.xml", nBufferLength=0x105, lpBuffer=0x31e32c, lpFilePart=0x0 | out: lpBuffer="C:\\MSOCache\\All Users\\{90140000-0117-0409-1000-0000000FF1CE}-C\\AccessMUISet.xml", lpFilePart=0x0) returned 0x4f [0033.365] GetFullPathNameW (in: lpFileName="C:\\MSOCache\\All Users\\{90140000-0117-0409-1000-0000000FF1CE}-C\\AccessMUISet.xml", nBufferLength=0x105, lpBuffer=0x31e32c, lpFilePart=0x0 | out: lpBuffer="C:\\MSOCache\\All Users\\{90140000-0117-0409-1000-0000000FF1CE}-C\\AccessMUISet.xml", lpFilePart=0x0) returned 0x4f [0033.365] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e78c) returned 1 [0033.365] GetFileAttributesExW (in: lpFileName="C:\\MSOCache\\All Users\\{90140000-0117-0409-1000-0000000FF1CE}-C\\AccessMUISet.xml" (normalized: "c:\\msocache\\all users\\{90140000-0117-0409-1000-0000000ff1ce}-c\\accessmuiset.xml"), fInfoLevelId=0x0, lpFileInformation=0x31e808 | out: lpFileInformation=0x31e808*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x4529b900, ftCreationTime.dwHighDateTime=0x1cad04a, ftLastAccessTime.dwLowDateTime=0x4529b900, ftLastAccessTime.dwHighDateTime=0x1cad04a, ftLastWriteTime.dwLowDateTime=0xf75640c0, ftLastWriteTime.dwHighDateTime=0x1d6eb7e, nFileSizeHigh=0x0, nFileSizeLow=0x340)) returned 1 [0033.365] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e788) returned 1 [0033.365] MoveFileW (lpExistingFileName="C:\\MSOCache\\All Users\\{90140000-0117-0409-1000-0000000FF1CE}-C\\AccessMUISet.xml" (normalized: "c:\\msocache\\all users\\{90140000-0117-0409-1000-0000000ff1ce}-c\\accessmuiset.xml"), lpNewFileName="C:\\MSOCache\\All Users\\{90140000-0117-0409-1000-0000000FF1CE}-C\\AccessMUISet.xml" (normalized: "c:\\msocache\\all users\\{90140000-0117-0409-1000-0000000ff1ce}-c\\accessmuiset.xml")) returned 1 [0033.366] GetFullPathNameW (in: lpFileName="C:\\MSOCache\\All Users\\{90140000-0117-0409-1000-0000000FF1CE}-C\\Setup.xml", nBufferLength=0x105, lpBuffer=0x31e20c, lpFilePart=0x0 | out: lpBuffer="C:\\MSOCache\\All Users\\{90140000-0117-0409-1000-0000000FF1CE}-C\\Setup.xml", lpFilePart=0x0) returned 0x48 [0033.366] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e700) returned 1 [0033.366] CreateFileW (lpFileName="C:\\MSOCache\\All Users\\{90140000-0117-0409-1000-0000000FF1CE}-C\\Setup.xml" (normalized: "c:\\msocache\\all users\\{90140000-0117-0409-1000-0000000ff1ce}-c\\setup.xml"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x224 [0033.366] GetFileType (hFile=0x224) returned 0x1 [0033.366] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e6fc) returned 1 [0033.366] GetFileType (hFile=0x224) returned 0x1 [0033.366] GetFileSize (in: hFile=0x224, lpFileSizeHigh=0x31e808 | out: lpFileSizeHigh=0x31e808*=0x0) returned 0xa40 [0033.366] ReadFile (in: hFile=0x224, lpBuffer=0x27014cc, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x31e7b4, lpOverlapped=0x0 | out: lpBuffer=0x27014cc*, lpNumberOfBytesRead=0x31e7b4*=0xa40, lpOverlapped=0x0) returned 1 [0033.368] CloseHandle (hObject=0x224) returned 1 [0033.381] GetFullPathNameW (in: lpFileName="C:\\MSOCache\\All Users\\{90140000-0117-0409-1000-0000000FF1CE}-C\\Setup.xml", nBufferLength=0x105, lpBuffer=0x31e1f8, lpFilePart=0x0 | out: lpBuffer="C:\\MSOCache\\All Users\\{90140000-0117-0409-1000-0000000FF1CE}-C\\Setup.xml", lpFilePart=0x0) returned 0x48 [0033.381] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e6ec) returned 1 [0033.381] CreateFileW (lpFileName="C:\\MSOCache\\All Users\\{90140000-0117-0409-1000-0000000FF1CE}-C\\Setup.xml" (normalized: "c:\\msocache\\all users\\{90140000-0117-0409-1000-0000000ff1ce}-c\\setup.xml"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x224 [0033.382] GetFileType (hFile=0x224) returned 0x1 [0033.382] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e6e8) returned 1 [0033.382] GetFileType (hFile=0x224) returned 0x1 [0033.382] WriteFile (in: hFile=0x224, lpBuffer=0x2752778*, nNumberOfBytesToWrite=0xa50, lpNumberOfBytesWritten=0x31e77c, lpOverlapped=0x0 | out: lpBuffer=0x2752778*, lpNumberOfBytesWritten=0x31e77c*=0xa50, lpOverlapped=0x0) returned 1 [0033.383] CloseHandle (hObject=0x224) returned 1 [0033.384] GetFullPathNameW (in: lpFileName="C:\\MSOCache\\All Users\\{90140000-0117-0409-1000-0000000FF1CE}-C\\Setup.xml", nBufferLength=0x105, lpBuffer=0x31e32c, lpFilePart=0x0 | out: lpBuffer="C:\\MSOCache\\All Users\\{90140000-0117-0409-1000-0000000FF1CE}-C\\Setup.xml", lpFilePart=0x0) returned 0x48 [0033.384] GetFullPathNameW (in: lpFileName="C:\\MSOCache\\All Users\\{90140000-0117-0409-1000-0000000FF1CE}-C\\Setup.xml", nBufferLength=0x105, lpBuffer=0x31e32c, lpFilePart=0x0 | out: lpBuffer="C:\\MSOCache\\All Users\\{90140000-0117-0409-1000-0000000FF1CE}-C\\Setup.xml", lpFilePart=0x0) returned 0x48 [0033.384] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e78c) returned 1 [0033.384] GetFileAttributesExW (in: lpFileName="C:\\MSOCache\\All Users\\{90140000-0117-0409-1000-0000000FF1CE}-C\\Setup.xml" (normalized: "c:\\msocache\\all users\\{90140000-0117-0409-1000-0000000ff1ce}-c\\setup.xml"), fInfoLevelId=0x0, lpFileInformation=0x31e808 | out: lpFileInformation=0x31e808*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x43f88c00, ftCreationTime.dwHighDateTime=0x1cad04a, ftLastAccessTime.dwLowDateTime=0x43f88c00, ftLastAccessTime.dwHighDateTime=0x1cad04a, ftLastWriteTime.dwLowDateTime=0xf758a220, ftLastWriteTime.dwHighDateTime=0x1d6eb7e, nFileSizeHigh=0x0, nFileSizeLow=0xa50)) returned 1 [0033.384] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e788) returned 1 [0033.384] MoveFileW (lpExistingFileName="C:\\MSOCache\\All Users\\{90140000-0117-0409-1000-0000000FF1CE}-C\\Setup.xml" (normalized: "c:\\msocache\\all users\\{90140000-0117-0409-1000-0000000ff1ce}-c\\setup.xml"), lpNewFileName="C:\\MSOCache\\All Users\\{90140000-0117-0409-1000-0000000FF1CE}-C\\Setup.xml" (normalized: "c:\\msocache\\all users\\{90140000-0117-0409-1000-0000000ff1ce}-c\\setup.xml")) returned 1 [0033.385] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e7bc) returned 1 [0033.385] GetFullPathNameW (in: lpFileName="C:\\MSOCache\\All Users\\{90140000-0117-0409-1000-0000000FF1CE}-C\\Access.en-us", nBufferLength=0x105, lpBuffer=0x31e2c4, lpFilePart=0x0 | out: lpBuffer="C:\\MSOCache\\All Users\\{90140000-0117-0409-1000-0000000FF1CE}-C\\Access.en-us", lpFilePart=0x0) returned 0x4b [0033.385] GetFullPathNameW (in: lpFileName="C:\\MSOCache\\All Users\\{90140000-0117-0409-1000-0000000FF1CE}-C\\Access.en-us\\", nBufferLength=0x105, lpBuffer=0x31e298, lpFilePart=0x0 | out: lpBuffer="C:\\MSOCache\\All Users\\{90140000-0117-0409-1000-0000000FF1CE}-C\\Access.en-us\\", lpFilePart=0x0) returned 0x4c [0033.385] FindFirstFileW (in: lpFileName="C:\\MSOCache\\All Users\\{90140000-0117-0409-1000-0000000FF1CE}-C\\Access.en-us\\*", lpFindFileData=0x31e4e4 | out: lpFindFileData=0x31e4e4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xfa2b92d0, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xfc0c6890, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xfc0c6890, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x381b80 [0033.387] FindNextFileW (in: hFindFile=0x381b80, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xfa2b92d0, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xfc0c6890, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xfc0c6890, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0033.387] FindNextFileW (in: hFindFile=0x381b80, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x3e02ab00, ftCreationTime.dwHighDateTime=0x1cad04a, ftLastAccessTime.dwLowDateTime=0x3e02ab00, ftLastAccessTime.dwHighDateTime=0x1cad04a, ftLastWriteTime.dwLowDateTime=0xfa623330, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x266a00, dwReserved0=0x0, dwReserved1=0x0, cFileName="AccessMUI.msi", cAlternateFileName="ACCESS~1.MSI")) returned 1 [0033.387] FindNextFileW (in: hFindFile=0x381b80, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x4529b900, ftCreationTime.dwHighDateTime=0x1cad04a, ftLastAccessTime.dwLowDateTime=0x4529b900, ftLastAccessTime.dwHighDateTime=0x1cad04a, ftLastWriteTime.dwLowDateTime=0xfa5fe940, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x545, dwReserved0=0x0, dwReserved1=0x0, cFileName="AccessMUI.xml", cAlternateFileName="ACCESS~1.XML")) returned 1 [0033.387] FindNextFileW (in: hFindFile=0x381b80, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x3216e900, ftCreationTime.dwHighDateTime=0x1cad04a, ftLastAccessTime.dwLowDateTime=0x3216e900, ftLastAccessTime.dwHighDateTime=0x1cad04a, ftLastWriteTime.dwLowDateTime=0xfa64a430, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x1ab7e94, dwReserved0=0x0, dwReserved1=0x0, cFileName="AccLR.cab", cAlternateFileName="")) returned 1 [0033.387] FindNextFileW (in: hFindFile=0x381b80, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x11e8ef00, ftCreationTime.dwHighDateTime=0x1cacdea, ftLastAccessTime.dwLowDateTime=0x11e8ef00, ftLastAccessTime.dwHighDateTime=0x1cacdea, ftLastWriteTime.dwLowDateTime=0xfc0c60c0, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x91975, dwReserved0=0x0, dwReserved1=0x0, cFileName="branding.xml", cAlternateFileName="")) returned 1 [0033.388] FindNextFileW (in: hFindFile=0x381b80, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0033.388] FindClose (in: hFindFile=0x381b80 | out: hFindFile=0x381b80) returned 1 [0033.388] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e77c) returned 1 [0033.388] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e788) returned 1 [0033.388] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e7bc) returned 1 [0033.388] GetFullPathNameW (in: lpFileName="C:\\MSOCache\\All Users\\{90140000-0117-0409-1000-0000000FF1CE}-C\\Access.en-us", nBufferLength=0x105, lpBuffer=0x31e2c4, lpFilePart=0x0 | out: lpBuffer="C:\\MSOCache\\All Users\\{90140000-0117-0409-1000-0000000FF1CE}-C\\Access.en-us", lpFilePart=0x0) returned 0x4b [0033.388] GetFullPathNameW (in: lpFileName="C:\\MSOCache\\All Users\\{90140000-0117-0409-1000-0000000FF1CE}-C\\Access.en-us\\", nBufferLength=0x105, lpBuffer=0x31e298, lpFilePart=0x0 | out: lpBuffer="C:\\MSOCache\\All Users\\{90140000-0117-0409-1000-0000000FF1CE}-C\\Access.en-us\\", lpFilePart=0x0) returned 0x4c [0033.389] FindFirstFileW (in: lpFileName="C:\\MSOCache\\All Users\\{90140000-0117-0409-1000-0000000FF1CE}-C\\Access.en-us\\*", lpFindFileData=0x31e4e4 | out: lpFindFileData=0x31e4e4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xfa2b92d0, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xfc0c6890, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xfc0c6890, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x381b80 [0033.389] FindNextFileW (in: hFindFile=0x381b80, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xfa2b92d0, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xfc0c6890, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xfc0c6890, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0033.390] FindNextFileW (in: hFindFile=0x381b80, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x3e02ab00, ftCreationTime.dwHighDateTime=0x1cad04a, ftLastAccessTime.dwLowDateTime=0x3e02ab00, ftLastAccessTime.dwHighDateTime=0x1cad04a, ftLastWriteTime.dwLowDateTime=0xfa623330, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x266a00, dwReserved0=0x0, dwReserved1=0x0, cFileName="AccessMUI.msi", cAlternateFileName="ACCESS~1.MSI")) returned 1 [0033.390] FindNextFileW (in: hFindFile=0x381b80, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x4529b900, ftCreationTime.dwHighDateTime=0x1cad04a, ftLastAccessTime.dwLowDateTime=0x4529b900, ftLastAccessTime.dwHighDateTime=0x1cad04a, ftLastWriteTime.dwLowDateTime=0xfa5fe940, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x545, dwReserved0=0x0, dwReserved1=0x0, cFileName="AccessMUI.xml", cAlternateFileName="ACCESS~1.XML")) returned 1 [0033.390] FindNextFileW (in: hFindFile=0x381b80, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x3216e900, ftCreationTime.dwHighDateTime=0x1cad04a, ftLastAccessTime.dwLowDateTime=0x3216e900, ftLastAccessTime.dwHighDateTime=0x1cad04a, ftLastWriteTime.dwLowDateTime=0xfa64a430, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x1ab7e94, dwReserved0=0x0, dwReserved1=0x0, cFileName="AccLR.cab", cAlternateFileName="")) returned 1 [0033.390] FindNextFileW (in: hFindFile=0x381b80, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x11e8ef00, ftCreationTime.dwHighDateTime=0x1cacdea, ftLastAccessTime.dwLowDateTime=0x11e8ef00, ftLastAccessTime.dwHighDateTime=0x1cacdea, ftLastWriteTime.dwLowDateTime=0xfc0c60c0, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x91975, dwReserved0=0x0, dwReserved1=0x0, cFileName="branding.xml", cAlternateFileName="")) returned 1 [0033.390] FindNextFileW (in: hFindFile=0x381b80, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x11e8ef00, ftCreationTime.dwHighDateTime=0x1cacdea, ftLastAccessTime.dwLowDateTime=0x11e8ef00, ftLastAccessTime.dwHighDateTime=0x1cacdea, ftLastWriteTime.dwLowDateTime=0xfc0c60c0, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x91975, dwReserved0=0x0, dwReserved1=0x0, cFileName="branding.xml", cAlternateFileName="")) returned 0 [0033.390] FindClose (in: hFindFile=0x381b80 | out: hFindFile=0x381b80) returned 1 [0033.391] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e77c) returned 1 [0033.391] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e788) returned 1 [0033.391] GetFullPathNameW (in: lpFileName="C:\\MSOCache\\All Users\\{90140000-0117-0409-1000-0000000FF1CE}-C\\Access.en-us\\AccessMUI.xml", nBufferLength=0x105, lpBuffer=0x31e194, lpFilePart=0x0 | out: lpBuffer="C:\\MSOCache\\All Users\\{90140000-0117-0409-1000-0000000FF1CE}-C\\Access.en-us\\AccessMUI.xml", lpFilePart=0x0) returned 0x59 [0033.391] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e688) returned 1 [0033.391] CreateFileW (lpFileName="C:\\MSOCache\\All Users\\{90140000-0117-0409-1000-0000000FF1CE}-C\\Access.en-us\\AccessMUI.xml" (normalized: "c:\\msocache\\all users\\{90140000-0117-0409-1000-0000000ff1ce}-c\\access.en-us\\accessmui.xml"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x224 [0033.392] GetFileType (hFile=0x224) returned 0x1 [0033.392] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e684) returned 1 [0033.392] GetFileType (hFile=0x224) returned 0x1 [0033.393] GetFileSize (in: hFile=0x224, lpFileSizeHigh=0x31e790 | out: lpFileSizeHigh=0x31e790*=0x0) returned 0x545 [0033.393] ReadFile (in: hFile=0x224, lpBuffer=0x27565d8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x31e73c, lpOverlapped=0x0 | out: lpBuffer=0x27565d8*, lpNumberOfBytesRead=0x31e73c*=0x545, lpOverlapped=0x0) returned 1 [0033.395] CloseHandle (hObject=0x224) returned 1 [0033.409] GetFullPathNameW (in: lpFileName="C:\\MSOCache\\All Users\\{90140000-0117-0409-1000-0000000FF1CE}-C\\Access.en-us\\AccessMUI.xml", nBufferLength=0x105, lpBuffer=0x31e180, lpFilePart=0x0 | out: lpBuffer="C:\\MSOCache\\All Users\\{90140000-0117-0409-1000-0000000FF1CE}-C\\Access.en-us\\AccessMUI.xml", lpFilePart=0x0) returned 0x59 [0033.409] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e674) returned 1 [0033.409] CreateFileW (lpFileName="C:\\MSOCache\\All Users\\{90140000-0117-0409-1000-0000000FF1CE}-C\\Access.en-us\\AccessMUI.xml" (normalized: "c:\\msocache\\all users\\{90140000-0117-0409-1000-0000000ff1ce}-c\\access.en-us\\accessmui.xml"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x224 [0033.410] GetFileType (hFile=0x224) returned 0x1 [0033.410] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e670) returned 1 [0033.410] GetFileType (hFile=0x224) returned 0x1 [0033.410] WriteFile (in: hFile=0x224, lpBuffer=0x27a5fa8*, nNumberOfBytesToWrite=0x550, lpNumberOfBytesWritten=0x31e704, lpOverlapped=0x0 | out: lpBuffer=0x27a5fa8*, lpNumberOfBytesWritten=0x31e704*=0x550, lpOverlapped=0x0) returned 1 [0033.411] CloseHandle (hObject=0x224) returned 1 [0033.412] GetFullPathNameW (in: lpFileName="C:\\MSOCache\\All Users\\{90140000-0117-0409-1000-0000000FF1CE}-C\\Access.en-us\\AccessMUI.xml", nBufferLength=0x105, lpBuffer=0x31e2b4, lpFilePart=0x0 | out: lpBuffer="C:\\MSOCache\\All Users\\{90140000-0117-0409-1000-0000000FF1CE}-C\\Access.en-us\\AccessMUI.xml", lpFilePart=0x0) returned 0x59 [0033.412] GetFullPathNameW (in: lpFileName="C:\\MSOCache\\All Users\\{90140000-0117-0409-1000-0000000FF1CE}-C\\Access.en-us\\AccessMUI.xml", nBufferLength=0x105, lpBuffer=0x31e2b4, lpFilePart=0x0 | out: lpBuffer="C:\\MSOCache\\All Users\\{90140000-0117-0409-1000-0000000FF1CE}-C\\Access.en-us\\AccessMUI.xml", lpFilePart=0x0) returned 0x59 [0033.412] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e714) returned 1 [0033.412] GetFileAttributesExW (in: lpFileName="C:\\MSOCache\\All Users\\{90140000-0117-0409-1000-0000000FF1CE}-C\\Access.en-us\\AccessMUI.xml" (normalized: "c:\\msocache\\all users\\{90140000-0117-0409-1000-0000000ff1ce}-c\\access.en-us\\accessmui.xml"), fInfoLevelId=0x0, lpFileInformation=0x31e790 | out: lpFileInformation=0x31e790*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x4529b900, ftCreationTime.dwHighDateTime=0x1cad04a, ftLastAccessTime.dwLowDateTime=0x4529b900, ftLastAccessTime.dwHighDateTime=0x1cad04a, ftLastWriteTime.dwLowDateTime=0xf75d64e0, ftLastWriteTime.dwHighDateTime=0x1d6eb7e, nFileSizeHigh=0x0, nFileSizeLow=0x550)) returned 1 [0033.412] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e710) returned 1 [0033.412] MoveFileW (lpExistingFileName="C:\\MSOCache\\All Users\\{90140000-0117-0409-1000-0000000FF1CE}-C\\Access.en-us\\AccessMUI.xml" (normalized: "c:\\msocache\\all users\\{90140000-0117-0409-1000-0000000ff1ce}-c\\access.en-us\\accessmui.xml"), lpNewFileName="C:\\MSOCache\\All Users\\{90140000-0117-0409-1000-0000000FF1CE}-C\\Access.en-us\\AccessMUI.xml" (normalized: "c:\\msocache\\all users\\{90140000-0117-0409-1000-0000000ff1ce}-c\\access.en-us\\accessmui.xml")) returned 1 [0033.413] GetFullPathNameW (in: lpFileName="C:\\MSOCache\\All Users\\{90140000-0117-0409-1000-0000000FF1CE}-C\\Access.en-us\\branding.xml", nBufferLength=0x105, lpBuffer=0x31e194, lpFilePart=0x0 | out: lpBuffer="C:\\MSOCache\\All Users\\{90140000-0117-0409-1000-0000000FF1CE}-C\\Access.en-us\\branding.xml", lpFilePart=0x0) returned 0x58 [0033.413] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e688) returned 1 [0033.413] CreateFileW (lpFileName="C:\\MSOCache\\All Users\\{90140000-0117-0409-1000-0000000FF1CE}-C\\Access.en-us\\branding.xml" (normalized: "c:\\msocache\\all users\\{90140000-0117-0409-1000-0000000ff1ce}-c\\access.en-us\\branding.xml"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x224 [0033.414] GetFileType (hFile=0x224) returned 0x1 [0033.414] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e684) returned 1 [0033.414] GetFileType (hFile=0x224) returned 0x1 [0033.414] GetFileSize (in: hFile=0x224, lpFileSizeHigh=0x31e790 | out: lpFileSizeHigh=0x31e790*=0x0) returned 0x91975 [0033.414] ReadFile (in: hFile=0x224, lpBuffer=0x36194b0, nNumberOfBytesToRead=0x91975, lpNumberOfBytesRead=0x31e73c, lpOverlapped=0x0 | out: lpBuffer=0x36194b0*, lpNumberOfBytesRead=0x31e73c*=0x91975, lpOverlapped=0x0) returned 1 [0033.424] CloseHandle (hObject=0x224) returned 1 [0033.463] GetFullPathNameW (in: lpFileName="C:\\MSOCache\\All Users\\{90140000-0117-0409-1000-0000000FF1CE}-C\\Access.en-us\\branding.xml", nBufferLength=0x105, lpBuffer=0x31e180, lpFilePart=0x0 | out: lpBuffer="C:\\MSOCache\\All Users\\{90140000-0117-0409-1000-0000000FF1CE}-C\\Access.en-us\\branding.xml", lpFilePart=0x0) returned 0x58 [0033.463] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e674) returned 1 [0033.463] CreateFileW (lpFileName="C:\\MSOCache\\All Users\\{90140000-0117-0409-1000-0000000FF1CE}-C\\Access.en-us\\branding.xml" (normalized: "c:\\msocache\\all users\\{90140000-0117-0409-1000-0000000ff1ce}-c\\access.en-us\\branding.xml"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x224 [0033.468] GetFileType (hFile=0x224) returned 0x1 [0033.468] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e670) returned 1 [0033.468] GetFileType (hFile=0x224) returned 0x1 [0033.468] WriteFile (in: hFile=0x224, lpBuffer=0x38f1468*, nNumberOfBytesToWrite=0x91980, lpNumberOfBytesWritten=0x31e730, lpOverlapped=0x0 | out: lpBuffer=0x38f1468*, lpNumberOfBytesWritten=0x31e730*=0x91980, lpOverlapped=0x0) returned 1 [0033.477] CloseHandle (hObject=0x224) returned 1 [0033.481] GetFullPathNameW (in: lpFileName="C:\\MSOCache\\All Users\\{90140000-0117-0409-1000-0000000FF1CE}-C\\Access.en-us\\branding.xml", nBufferLength=0x105, lpBuffer=0x31e2b4, lpFilePart=0x0 | out: lpBuffer="C:\\MSOCache\\All Users\\{90140000-0117-0409-1000-0000000FF1CE}-C\\Access.en-us\\branding.xml", lpFilePart=0x0) returned 0x58 [0033.481] GetFullPathNameW (in: lpFileName="C:\\MSOCache\\All Users\\{90140000-0117-0409-1000-0000000FF1CE}-C\\Access.en-us\\branding.xml", nBufferLength=0x105, lpBuffer=0x31e2b4, lpFilePart=0x0 | out: lpBuffer="C:\\MSOCache\\All Users\\{90140000-0117-0409-1000-0000000FF1CE}-C\\Access.en-us\\branding.xml", lpFilePart=0x0) returned 0x58 [0033.481] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e714) returned 1 [0033.481] GetFileAttributesExW (in: lpFileName="C:\\MSOCache\\All Users\\{90140000-0117-0409-1000-0000000FF1CE}-C\\Access.en-us\\branding.xml" (normalized: "c:\\msocache\\all users\\{90140000-0117-0409-1000-0000000ff1ce}-c\\access.en-us\\branding.xml"), fInfoLevelId=0x0, lpFileInformation=0x31e790 | out: lpFileInformation=0x31e790*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x11e8ef00, ftCreationTime.dwHighDateTime=0x1cacdea, ftLastAccessTime.dwLowDateTime=0x11e8ef00, ftLastAccessTime.dwHighDateTime=0x1cacdea, ftLastWriteTime.dwLowDateTime=0xf7694bc0, ftLastWriteTime.dwHighDateTime=0x1d6eb7e, nFileSizeHigh=0x0, nFileSizeLow=0x91980)) returned 1 [0033.481] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e710) returned 1 [0033.482] MoveFileW (lpExistingFileName="C:\\MSOCache\\All Users\\{90140000-0117-0409-1000-0000000FF1CE}-C\\Access.en-us\\branding.xml" (normalized: "c:\\msocache\\all users\\{90140000-0117-0409-1000-0000000ff1ce}-c\\access.en-us\\branding.xml"), lpNewFileName="C:\\MSOCache\\All Users\\{90140000-0117-0409-1000-0000000FF1CE}-C\\Access.en-us\\branding.xml" (normalized: "c:\\msocache\\all users\\{90140000-0117-0409-1000-0000000ff1ce}-c\\access.en-us\\branding.xml")) returned 1 [0033.482] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e834) returned 1 [0033.482] GetFullPathNameW (in: lpFileName="C:\\MSOCache\\All Users\\{91140000-0011-0000-1000-0000000FF1CE}-C", nBufferLength=0x105, lpBuffer=0x31e33c, lpFilePart=0x0 | out: lpBuffer="C:\\MSOCache\\All Users\\{91140000-0011-0000-1000-0000000FF1CE}-C", lpFilePart=0x0) returned 0x3e [0033.482] GetFullPathNameW (in: lpFileName="C:\\MSOCache\\All Users\\{91140000-0011-0000-1000-0000000FF1CE}-C\\", nBufferLength=0x105, lpBuffer=0x31e310, lpFilePart=0x0 | out: lpBuffer="C:\\MSOCache\\All Users\\{91140000-0011-0000-1000-0000000FF1CE}-C\\", lpFilePart=0x0) returned 0x3f [0033.482] FindFirstFileW (in: lpFileName="C:\\MSOCache\\All Users\\{91140000-0011-0000-1000-0000000FF1CE}-C\\*", lpFindFileData=0x31e55c | out: lpFindFileData=0x31e55c*(dwFileAttributes=0x2011, ftCreationTime.dwLowDateTime=0xfe09ced0, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0x18179b90, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x18179b90, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x381ec0 [0033.484] FindNextFileW (in: hFindFile=0x381ec0, lpFindFileData=0x31e56c | out: lpFindFileData=0x31e56c*(dwFileAttributes=0x2011, ftCreationTime.dwLowDateTime=0xfe09ced0, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0x18179b90, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x18179b90, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0033.484] FindNextFileW (in: hFindFile=0x381ec0, lpFindFileData=0x31e56c | out: lpFindFileData=0x31e56c*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x34ae1a00, ftCreationTime.dwHighDateTime=0x1cad01b, ftLastAccessTime.dwLowDateTime=0x34ae1a00, ftLastAccessTime.dwHighDateTime=0x1cad01b, ftLastWriteTime.dwLowDateTime=0xfe0c2860, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x1e6600, dwReserved0=0x0, dwReserved1=0x0, cFileName="Office32WW.msi", cAlternateFileName="OFFICE~1.MSI")) returned 1 [0033.484] FindNextFileW (in: hFindFile=0x381ec0, lpFindFileData=0x31e56c | out: lpFindFileData=0x31e56c*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x940c2a00, ftCreationTime.dwHighDateTime=0x1cad01b, ftLastAccessTime.dwLowDateTime=0x940c2a00, ftLastAccessTime.dwHighDateTime=0x1cad01b, ftLastWriteTime.dwLowDateTime=0xfe09b760, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x10b2, dwReserved0=0x0, dwReserved1=0x0, cFileName="Office32WW.xml", cAlternateFileName="OFFICE~1.XML")) returned 1 [0033.485] FindNextFileW (in: hFindFile=0x381ec0, lpFindFileData=0x31e56c | out: lpFindFileData=0x31e56c*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xf885a000, ftCreationTime.dwHighDateTime=0x1cac4d7, ftLastAccessTime.dwLowDateTime=0xf885a000, ftLastAccessTime.dwHighDateTime=0x1cac4d7, ftLastWriteTime.dwLowDateTime=0x17c42c30, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x2a968, dwReserved0=0x0, dwReserved1=0x0, cFileName="ose.exe", cAlternateFileName="")) returned 1 [0033.485] FindNextFileW (in: hFindFile=0x381ec0, lpFindFileData=0x31e56c | out: lpFindFileData=0x31e56c*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xbd900f00, ftCreationTime.dwHighDateTime=0x1cac15b, ftLastAccessTime.dwLowDateTime=0xbd900f00, ftLastAccessTime.dwHighDateTime=0x1cac15b, ftLastWriteTime.dwLowDateTime=0x16854390, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x709768, dwReserved0=0x0, dwReserved1=0x0, cFileName="osetup.dll", cAlternateFileName="")) returned 1 [0033.485] FindNextFileW (in: hFindFile=0x381ec0, lpFindFileData=0x31e56c | out: lpFindFileData=0x31e56c*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x147e5b00, ftCreationTime.dwHighDateTime=0x1cad01b, ftLastAccessTime.dwLowDateTime=0x147e5b00, ftLastAccessTime.dwHighDateTime=0x1cad01b, ftLastWriteTime.dwLowDateTime=0xff654fc0, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x228df5c, dwReserved0=0x0, dwReserved1=0x0, cFileName="OWOW32WW.cab", cAlternateFileName="")) returned 1 [0033.485] FindNextFileW (in: hFindFile=0x381ec0, lpFindFileData=0x31e56c | out: lpFindFileData=0x31e56c*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xe3a02e00, ftCreationTime.dwHighDateTime=0x1cac5f7, ftLastAccessTime.dwLowDateTime=0xe3a02e00, ftLastAccessTime.dwHighDateTime=0x1cac5f7, ftLastWriteTime.dwLowDateTime=0x17e0dbf0, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x165510, dwReserved0=0x0, dwReserved1=0x0, cFileName="PidGenX.dll", cAlternateFileName="")) returned 1 [0033.485] FindNextFileW (in: hFindFile=0x381ec0, lpFindFileData=0x31e56c | out: lpFindFileData=0x31e56c*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xe06a9500, ftCreationTime.dwHighDateTime=0x1cac7e5, ftLastAccessTime.dwLowDateTime=0xe06a9500, ftLastAccessTime.dwHighDateTime=0x1cac7e5, ftLastWriteTime.dwLowDateTime=0x17c42c30, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0xaec3a, dwReserved0=0x0, dwReserved1=0x0, cFileName="pkeyconfig-office.xrm-ms", cAlternateFileName="PKEYCO~1.XRM")) returned 1 [0033.485] FindNextFileW (in: hFindFile=0x381ec0, lpFindFileData=0x31e56c | out: lpFindFileData=0x31e56c*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xbb2e2000, ftCreationTime.dwHighDateTime=0x1cad04a, ftLastAccessTime.dwLowDateTime=0xbb2e2000, ftLastAccessTime.dwHighDateTime=0x1cad04a, ftLastWriteTime.dwLowDateTime=0x170fe40, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x1a41c00, dwReserved0=0x0, dwReserved1=0x0, cFileName="ProPlusrWW.msi", cAlternateFileName="PROPLU~1.MSI")) returned 1 [0033.485] FindNextFileW (in: hFindFile=0x381ec0, lpFindFileData=0x31e56c | out: lpFindFileData=0x31e56c*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xbd907a00, ftCreationTime.dwHighDateTime=0x1cad04a, ftLastAccessTime.dwLowDateTime=0xbd907a00, ftLastAccessTime.dwHighDateTime=0x1cad04a, ftLastWriteTime.dwLowDateTime=0x170fe40, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x41d4, dwReserved0=0x0, dwReserved1=0x0, cFileName="ProPlusrWW.xml", cAlternateFileName="PROPLU~1.XML")) returned 1 [0033.485] FindNextFileW (in: hFindFile=0x381ec0, lpFindFileData=0x31e56c | out: lpFindFileData=0x31e56c*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x262b2700, ftCreationTime.dwHighDateTime=0x1cad04a, ftLastAccessTime.dwLowDateTime=0x262b2700, ftLastAccessTime.dwHighDateTime=0x1cad04a, ftLastWriteTime.dwLowDateTime=0x1ffd0c0, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0xa97cbdb, dwReserved0=0x0, dwReserved1=0x0, cFileName="ProPrWW.cab", cAlternateFileName="")) returned 1 [0033.485] FindNextFileW (in: hFindFile=0x381ec0, lpFindFileData=0x31e56c | out: lpFindFileData=0x31e56c*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xbf14900, ftCreationTime.dwHighDateTime=0x1cad04a, ftLastAccessTime.dwLowDateTime=0xbf14900, ftLastAccessTime.dwHighDateTime=0x1cad04a, ftLastWriteTime.dwLowDateTime=0xc96ff40, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0xd49ee31, dwReserved0=0x0, dwReserved1=0x0, cFileName="ProPrWW2.cab", cAlternateFileName="")) returned 1 [0033.486] FindNextFileW (in: hFindFile=0x381ec0, lpFindFileData=0x31e56c | out: lpFindFileData=0x31e56c*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xbec13c00, ftCreationTime.dwHighDateTime=0x1cac15b, ftLastAccessTime.dwLowDateTime=0xbec13c00, ftLastAccessTime.dwHighDateTime=0x1cac15b, ftLastWriteTime.dwLowDateTime=0x1682d290, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x150578, dwReserved0=0x0, dwReserved1=0x0, cFileName="setup.exe", cAlternateFileName="")) returned 1 [0033.486] FindNextFileW (in: hFindFile=0x381ec0, lpFindFileData=0x31e56c | out: lpFindFileData=0x31e56c*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xbd907a00, ftCreationTime.dwHighDateTime=0x1cad04a, ftLastAccessTime.dwLowDateTime=0xbd907a00, ftLastAccessTime.dwHighDateTime=0x1cad04a, ftLastWriteTime.dwLowDateTime=0x18177c50, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x7976, dwReserved0=0x0, dwReserved1=0x0, cFileName="Setup.xml", cAlternateFileName="")) returned 1 [0033.486] FindNextFileW (in: hFindFile=0x381ec0, lpFindFileData=0x31e56c | out: lpFindFileData=0x31e56c*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0033.486] FindClose (in: hFindFile=0x381ec0 | out: hFindFile=0x381ec0) returned 1 [0033.487] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e7f4) returned 1 [0033.487] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e800) returned 1 [0033.487] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e834) returned 1 [0033.487] GetFullPathNameW (in: lpFileName="C:\\MSOCache\\All Users\\{91140000-0011-0000-1000-0000000FF1CE}-C", nBufferLength=0x105, lpBuffer=0x31e33c, lpFilePart=0x0 | out: lpBuffer="C:\\MSOCache\\All Users\\{91140000-0011-0000-1000-0000000FF1CE}-C", lpFilePart=0x0) returned 0x3e [0033.487] GetFullPathNameW (in: lpFileName="C:\\MSOCache\\All Users\\{91140000-0011-0000-1000-0000000FF1CE}-C\\", nBufferLength=0x105, lpBuffer=0x31e310, lpFilePart=0x0 | out: lpBuffer="C:\\MSOCache\\All Users\\{91140000-0011-0000-1000-0000000FF1CE}-C\\", lpFilePart=0x0) returned 0x3f [0033.487] FindFirstFileW (in: lpFileName="C:\\MSOCache\\All Users\\{91140000-0011-0000-1000-0000000FF1CE}-C\\*", lpFindFileData=0x31e55c | out: lpFindFileData=0x31e55c*(dwFileAttributes=0x2011, ftCreationTime.dwLowDateTime=0xfe09ced0, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0x18179b90, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x18179b90, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x381ec0 [0033.488] FindNextFileW (in: hFindFile=0x381ec0, lpFindFileData=0x31e56c | out: lpFindFileData=0x31e56c*(dwFileAttributes=0x2011, ftCreationTime.dwLowDateTime=0xfe09ced0, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0x18179b90, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x18179b90, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0033.488] FindNextFileW (in: hFindFile=0x381ec0, lpFindFileData=0x31e56c | out: lpFindFileData=0x31e56c*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x34ae1a00, ftCreationTime.dwHighDateTime=0x1cad01b, ftLastAccessTime.dwLowDateTime=0x34ae1a00, ftLastAccessTime.dwHighDateTime=0x1cad01b, ftLastWriteTime.dwLowDateTime=0xfe0c2860, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x1e6600, dwReserved0=0x0, dwReserved1=0x0, cFileName="Office32WW.msi", cAlternateFileName="OFFICE~1.MSI")) returned 1 [0033.488] FindNextFileW (in: hFindFile=0x381ec0, lpFindFileData=0x31e56c | out: lpFindFileData=0x31e56c*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x940c2a00, ftCreationTime.dwHighDateTime=0x1cad01b, ftLastAccessTime.dwLowDateTime=0x940c2a00, ftLastAccessTime.dwHighDateTime=0x1cad01b, ftLastWriteTime.dwLowDateTime=0xfe09b760, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x10b2, dwReserved0=0x0, dwReserved1=0x0, cFileName="Office32WW.xml", cAlternateFileName="OFFICE~1.XML")) returned 1 [0033.488] FindNextFileW (in: hFindFile=0x381ec0, lpFindFileData=0x31e56c | out: lpFindFileData=0x31e56c*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xf885a000, ftCreationTime.dwHighDateTime=0x1cac4d7, ftLastAccessTime.dwLowDateTime=0xf885a000, ftLastAccessTime.dwHighDateTime=0x1cac4d7, ftLastWriteTime.dwLowDateTime=0x17c42c30, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x2a968, dwReserved0=0x0, dwReserved1=0x0, cFileName="ose.exe", cAlternateFileName="")) returned 1 [0033.488] FindNextFileW (in: hFindFile=0x381ec0, lpFindFileData=0x31e56c | out: lpFindFileData=0x31e56c*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xbd900f00, ftCreationTime.dwHighDateTime=0x1cac15b, ftLastAccessTime.dwLowDateTime=0xbd900f00, ftLastAccessTime.dwHighDateTime=0x1cac15b, ftLastWriteTime.dwLowDateTime=0x16854390, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x709768, dwReserved0=0x0, dwReserved1=0x0, cFileName="osetup.dll", cAlternateFileName="")) returned 1 [0033.488] FindNextFileW (in: hFindFile=0x381ec0, lpFindFileData=0x31e56c | out: lpFindFileData=0x31e56c*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x147e5b00, ftCreationTime.dwHighDateTime=0x1cad01b, ftLastAccessTime.dwLowDateTime=0x147e5b00, ftLastAccessTime.dwHighDateTime=0x1cad01b, ftLastWriteTime.dwLowDateTime=0xff654fc0, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x228df5c, dwReserved0=0x0, dwReserved1=0x0, cFileName="OWOW32WW.cab", cAlternateFileName="")) returned 1 [0033.488] FindNextFileW (in: hFindFile=0x381ec0, lpFindFileData=0x31e56c | out: lpFindFileData=0x31e56c*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xe3a02e00, ftCreationTime.dwHighDateTime=0x1cac5f7, ftLastAccessTime.dwLowDateTime=0xe3a02e00, ftLastAccessTime.dwHighDateTime=0x1cac5f7, ftLastWriteTime.dwLowDateTime=0x17e0dbf0, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x165510, dwReserved0=0x0, dwReserved1=0x0, cFileName="PidGenX.dll", cAlternateFileName="")) returned 1 [0033.489] FindNextFileW (in: hFindFile=0x381ec0, lpFindFileData=0x31e56c | out: lpFindFileData=0x31e56c*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xe06a9500, ftCreationTime.dwHighDateTime=0x1cac7e5, ftLastAccessTime.dwLowDateTime=0xe06a9500, ftLastAccessTime.dwHighDateTime=0x1cac7e5, ftLastWriteTime.dwLowDateTime=0x17c42c30, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0xaec3a, dwReserved0=0x0, dwReserved1=0x0, cFileName="pkeyconfig-office.xrm-ms", cAlternateFileName="PKEYCO~1.XRM")) returned 1 [0033.489] FindNextFileW (in: hFindFile=0x381ec0, lpFindFileData=0x31e56c | out: lpFindFileData=0x31e56c*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xbb2e2000, ftCreationTime.dwHighDateTime=0x1cad04a, ftLastAccessTime.dwLowDateTime=0xbb2e2000, ftLastAccessTime.dwHighDateTime=0x1cad04a, ftLastWriteTime.dwLowDateTime=0x170fe40, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x1a41c00, dwReserved0=0x0, dwReserved1=0x0, cFileName="ProPlusrWW.msi", cAlternateFileName="PROPLU~1.MSI")) returned 1 [0033.489] FindNextFileW (in: hFindFile=0x381ec0, lpFindFileData=0x31e56c | out: lpFindFileData=0x31e56c*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xbd907a00, ftCreationTime.dwHighDateTime=0x1cad04a, ftLastAccessTime.dwLowDateTime=0xbd907a00, ftLastAccessTime.dwHighDateTime=0x1cad04a, ftLastWriteTime.dwLowDateTime=0x170fe40, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x41d4, dwReserved0=0x0, dwReserved1=0x0, cFileName="ProPlusrWW.xml", cAlternateFileName="PROPLU~1.XML")) returned 1 [0033.489] FindNextFileW (in: hFindFile=0x381ec0, lpFindFileData=0x31e56c | out: lpFindFileData=0x31e56c*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x262b2700, ftCreationTime.dwHighDateTime=0x1cad04a, ftLastAccessTime.dwLowDateTime=0x262b2700, ftLastAccessTime.dwHighDateTime=0x1cad04a, ftLastWriteTime.dwLowDateTime=0x1ffd0c0, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0xa97cbdb, dwReserved0=0x0, dwReserved1=0x0, cFileName="ProPrWW.cab", cAlternateFileName="")) returned 1 [0033.489] FindNextFileW (in: hFindFile=0x381ec0, lpFindFileData=0x31e56c | out: lpFindFileData=0x31e56c*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xbf14900, ftCreationTime.dwHighDateTime=0x1cad04a, ftLastAccessTime.dwLowDateTime=0xbf14900, ftLastAccessTime.dwHighDateTime=0x1cad04a, ftLastWriteTime.dwLowDateTime=0xc96ff40, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0xd49ee31, dwReserved0=0x0, dwReserved1=0x0, cFileName="ProPrWW2.cab", cAlternateFileName="")) returned 1 [0033.489] FindNextFileW (in: hFindFile=0x381ec0, lpFindFileData=0x31e56c | out: lpFindFileData=0x31e56c*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xbec13c00, ftCreationTime.dwHighDateTime=0x1cac15b, ftLastAccessTime.dwLowDateTime=0xbec13c00, ftLastAccessTime.dwHighDateTime=0x1cac15b, ftLastWriteTime.dwLowDateTime=0x1682d290, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x150578, dwReserved0=0x0, dwReserved1=0x0, cFileName="setup.exe", cAlternateFileName="")) returned 1 [0033.489] FindNextFileW (in: hFindFile=0x381ec0, lpFindFileData=0x31e56c | out: lpFindFileData=0x31e56c*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xbd907a00, ftCreationTime.dwHighDateTime=0x1cad04a, ftLastAccessTime.dwLowDateTime=0xbd907a00, ftLastAccessTime.dwHighDateTime=0x1cad04a, ftLastWriteTime.dwLowDateTime=0x18177c50, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x7976, dwReserved0=0x0, dwReserved1=0x0, cFileName="Setup.xml", cAlternateFileName="")) returned 1 [0033.490] FindNextFileW (in: hFindFile=0x381ec0, lpFindFileData=0x31e56c | out: lpFindFileData=0x31e56c*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xbd907a00, ftCreationTime.dwHighDateTime=0x1cad04a, ftLastAccessTime.dwLowDateTime=0xbd907a00, ftLastAccessTime.dwHighDateTime=0x1cad04a, ftLastWriteTime.dwLowDateTime=0x18177c50, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x7976, dwReserved0=0x0, dwReserved1=0x0, cFileName="Setup.xml", cAlternateFileName="")) returned 0 [0033.490] FindClose (in: hFindFile=0x381ec0 | out: hFindFile=0x381ec0) returned 1 [0033.490] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e7f4) returned 1 [0033.490] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e800) returned 1 [0033.490] GetFullPathNameW (in: lpFileName="C:\\MSOCache\\All Users\\{91140000-0011-0000-1000-0000000FF1CE}-C\\Office32WW.xml", nBufferLength=0x105, lpBuffer=0x31e20c, lpFilePart=0x0 | out: lpBuffer="C:\\MSOCache\\All Users\\{91140000-0011-0000-1000-0000000FF1CE}-C\\Office32WW.xml", lpFilePart=0x0) returned 0x4d [0033.490] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e700) returned 1 [0033.491] CreateFileW (lpFileName="C:\\MSOCache\\All Users\\{91140000-0011-0000-1000-0000000FF1CE}-C\\Office32WW.xml" (normalized: "c:\\msocache\\all users\\{91140000-0011-0000-1000-0000000ff1ce}-c\\office32ww.xml"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x224 [0033.492] GetFileType (hFile=0x224) returned 0x1 [0033.492] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e6fc) returned 1 [0033.492] GetFileType (hFile=0x224) returned 0x1 [0033.492] GetFileSize (in: hFile=0x224, lpFileSizeHigh=0x31e808 | out: lpFileSizeHigh=0x31e808*=0x0) returned 0x10b2 [0033.492] ReadFile (in: hFile=0x224, lpBuffer=0x27f8630, nNumberOfBytesToRead=0x10b2, lpNumberOfBytesRead=0x31e7b4, lpOverlapped=0x0 | out: lpBuffer=0x27f8630*, lpNumberOfBytesRead=0x31e7b4*=0x10b2, lpOverlapped=0x0) returned 1 [0033.494] CloseHandle (hObject=0x224) returned 1 [0033.536] GetFullPathNameW (in: lpFileName="C:\\MSOCache\\All Users\\{91140000-0011-0000-1000-0000000FF1CE}-C\\Office32WW.xml", nBufferLength=0x105, lpBuffer=0x31e1f8, lpFilePart=0x0 | out: lpBuffer="C:\\MSOCache\\All Users\\{91140000-0011-0000-1000-0000000FF1CE}-C\\Office32WW.xml", lpFilePart=0x0) returned 0x4d [0033.536] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e6ec) returned 1 [0033.536] CreateFileW (lpFileName="C:\\MSOCache\\All Users\\{91140000-0011-0000-1000-0000000FF1CE}-C\\Office32WW.xml" (normalized: "c:\\msocache\\all users\\{91140000-0011-0000-1000-0000000ff1ce}-c\\office32ww.xml"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x224 [0033.537] GetFileType (hFile=0x224) returned 0x1 [0033.537] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e6e8) returned 1 [0033.537] GetFileType (hFile=0x224) returned 0x1 [0033.537] WriteFile (in: hFile=0x224, lpBuffer=0x264b264*, nNumberOfBytesToWrite=0x10c0, lpNumberOfBytesWritten=0x31e7a8, lpOverlapped=0x0 | out: lpBuffer=0x264b264*, lpNumberOfBytesWritten=0x31e7a8*=0x10c0, lpOverlapped=0x0) returned 1 [0033.538] CloseHandle (hObject=0x224) returned 1 [0033.539] GetFullPathNameW (in: lpFileName="C:\\MSOCache\\All Users\\{91140000-0011-0000-1000-0000000FF1CE}-C\\Office32WW.xml", nBufferLength=0x105, lpBuffer=0x31e32c, lpFilePart=0x0 | out: lpBuffer="C:\\MSOCache\\All Users\\{91140000-0011-0000-1000-0000000FF1CE}-C\\Office32WW.xml", lpFilePart=0x0) returned 0x4d [0033.539] GetFullPathNameW (in: lpFileName="C:\\MSOCache\\All Users\\{91140000-0011-0000-1000-0000000FF1CE}-C\\Office32WW.xml", nBufferLength=0x105, lpBuffer=0x31e32c, lpFilePart=0x0 | out: lpBuffer="C:\\MSOCache\\All Users\\{91140000-0011-0000-1000-0000000FF1CE}-C\\Office32WW.xml", lpFilePart=0x0) returned 0x4d [0033.539] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e78c) returned 1 [0033.539] GetFileAttributesExW (in: lpFileName="C:\\MSOCache\\All Users\\{91140000-0011-0000-1000-0000000FF1CE}-C\\Office32WW.xml" (normalized: "c:\\msocache\\all users\\{91140000-0011-0000-1000-0000000ff1ce}-c\\office32ww.xml"), fInfoLevelId=0x0, lpFileInformation=0x31e808 | out: lpFileInformation=0x31e808*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x940c2a00, ftCreationTime.dwHighDateTime=0x1cad01b, ftLastAccessTime.dwLowDateTime=0x940c2a00, ftLastAccessTime.dwHighDateTime=0x1cad01b, ftLastWriteTime.dwLowDateTime=0xf7706fe0, ftLastWriteTime.dwHighDateTime=0x1d6eb7e, nFileSizeHigh=0x0, nFileSizeLow=0x10c0)) returned 1 [0033.539] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e788) returned 1 [0033.539] MoveFileW (lpExistingFileName="C:\\MSOCache\\All Users\\{91140000-0011-0000-1000-0000000FF1CE}-C\\Office32WW.xml" (normalized: "c:\\msocache\\all users\\{91140000-0011-0000-1000-0000000ff1ce}-c\\office32ww.xml"), lpNewFileName="C:\\MSOCache\\All Users\\{91140000-0011-0000-1000-0000000FF1CE}-C\\Office32WW.xml" (normalized: "c:\\msocache\\all users\\{91140000-0011-0000-1000-0000000ff1ce}-c\\office32ww.xml")) returned 1 [0033.540] GetFullPathNameW (in: lpFileName="C:\\MSOCache\\All Users\\{91140000-0011-0000-1000-0000000FF1CE}-C\\ProPlusrWW.xml", nBufferLength=0x105, lpBuffer=0x31e20c, lpFilePart=0x0 | out: lpBuffer="C:\\MSOCache\\All Users\\{91140000-0011-0000-1000-0000000FF1CE}-C\\ProPlusrWW.xml", lpFilePart=0x0) returned 0x4d [0033.540] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e700) returned 1 [0033.540] CreateFileW (lpFileName="C:\\MSOCache\\All Users\\{91140000-0011-0000-1000-0000000FF1CE}-C\\ProPlusrWW.xml" (normalized: "c:\\msocache\\all users\\{91140000-0011-0000-1000-0000000ff1ce}-c\\proplusrww.xml"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x224 [0033.544] GetFileType (hFile=0x224) returned 0x1 [0033.544] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e6fc) returned 1 [0033.544] GetFileType (hFile=0x224) returned 0x1 [0033.544] GetFileSize (in: hFile=0x224, lpFileSizeHigh=0x31e808 | out: lpFileSizeHigh=0x31e808*=0x0) returned 0x41d4 [0033.544] ReadFile (in: hFile=0x224, lpBuffer=0x264c78c, nNumberOfBytesToRead=0x41d4, lpNumberOfBytesRead=0x31e7b4, lpOverlapped=0x0 | out: lpBuffer=0x264c78c*, lpNumberOfBytesRead=0x31e7b4*=0x41d4, lpOverlapped=0x0) returned 1 [0033.546] CloseHandle (hObject=0x224) returned 1 [0033.562] GetFullPathNameW (in: lpFileName="C:\\MSOCache\\All Users\\{91140000-0011-0000-1000-0000000FF1CE}-C\\ProPlusrWW.xml", nBufferLength=0x105, lpBuffer=0x31e1f8, lpFilePart=0x0 | out: lpBuffer="C:\\MSOCache\\All Users\\{91140000-0011-0000-1000-0000000FF1CE}-C\\ProPlusrWW.xml", lpFilePart=0x0) returned 0x4d [0033.562] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e6ec) returned 1 [0033.562] CreateFileW (lpFileName="C:\\MSOCache\\All Users\\{91140000-0011-0000-1000-0000000FF1CE}-C\\ProPlusrWW.xml" (normalized: "c:\\msocache\\all users\\{91140000-0011-0000-1000-0000000ff1ce}-c\\proplusrww.xml"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x224 [0033.563] GetFileType (hFile=0x224) returned 0x1 [0033.563] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e6e8) returned 1 [0033.563] GetFileType (hFile=0x224) returned 0x1 [0033.563] WriteFile (in: hFile=0x224, lpBuffer=0x26ae02c*, nNumberOfBytesToWrite=0x41e0, lpNumberOfBytesWritten=0x31e7a8, lpOverlapped=0x0 | out: lpBuffer=0x26ae02c*, lpNumberOfBytesWritten=0x31e7a8*=0x41e0, lpOverlapped=0x0) returned 1 [0033.564] CloseHandle (hObject=0x224) returned 1 [0033.565] GetFullPathNameW (in: lpFileName="C:\\MSOCache\\All Users\\{91140000-0011-0000-1000-0000000FF1CE}-C\\ProPlusrWW.xml", nBufferLength=0x105, lpBuffer=0x31e32c, lpFilePart=0x0 | out: lpBuffer="C:\\MSOCache\\All Users\\{91140000-0011-0000-1000-0000000FF1CE}-C\\ProPlusrWW.xml", lpFilePart=0x0) returned 0x4d [0033.565] GetFullPathNameW (in: lpFileName="C:\\MSOCache\\All Users\\{91140000-0011-0000-1000-0000000FF1CE}-C\\ProPlusrWW.xml", nBufferLength=0x105, lpBuffer=0x31e32c, lpFilePart=0x0 | out: lpBuffer="C:\\MSOCache\\All Users\\{91140000-0011-0000-1000-0000000FF1CE}-C\\ProPlusrWW.xml", lpFilePart=0x0) returned 0x4d [0033.565] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e78c) returned 1 [0033.565] GetFileAttributesExW (in: lpFileName="C:\\MSOCache\\All Users\\{91140000-0011-0000-1000-0000000FF1CE}-C\\ProPlusrWW.xml" (normalized: "c:\\msocache\\all users\\{91140000-0011-0000-1000-0000000ff1ce}-c\\proplusrww.xml"), fInfoLevelId=0x0, lpFileInformation=0x31e808 | out: lpFileInformation=0x31e808*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xbd907a00, ftCreationTime.dwHighDateTime=0x1cad04a, ftLastAccessTime.dwLowDateTime=0xbd907a00, ftLastAccessTime.dwHighDateTime=0x1cad04a, ftLastWriteTime.dwLowDateTime=0xf77532a0, ftLastWriteTime.dwHighDateTime=0x1d6eb7e, nFileSizeHigh=0x0, nFileSizeLow=0x41e0)) returned 1 [0033.565] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e788) returned 1 [0033.565] MoveFileW (lpExistingFileName="C:\\MSOCache\\All Users\\{91140000-0011-0000-1000-0000000FF1CE}-C\\ProPlusrWW.xml" (normalized: "c:\\msocache\\all users\\{91140000-0011-0000-1000-0000000ff1ce}-c\\proplusrww.xml"), lpNewFileName="C:\\MSOCache\\All Users\\{91140000-0011-0000-1000-0000000FF1CE}-C\\ProPlusrWW.xml" (normalized: "c:\\msocache\\all users\\{91140000-0011-0000-1000-0000000ff1ce}-c\\proplusrww.xml")) returned 1 [0033.566] GetFullPathNameW (in: lpFileName="C:\\MSOCache\\All Users\\{91140000-0011-0000-1000-0000000FF1CE}-C\\Setup.xml", nBufferLength=0x105, lpBuffer=0x31e20c, lpFilePart=0x0 | out: lpBuffer="C:\\MSOCache\\All Users\\{91140000-0011-0000-1000-0000000FF1CE}-C\\Setup.xml", lpFilePart=0x0) returned 0x48 [0033.566] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e700) returned 1 [0033.566] CreateFileW (lpFileName="C:\\MSOCache\\All Users\\{91140000-0011-0000-1000-0000000FF1CE}-C\\Setup.xml" (normalized: "c:\\msocache\\all users\\{91140000-0011-0000-1000-0000000ff1ce}-c\\setup.xml"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x224 [0033.567] GetFileType (hFile=0x224) returned 0x1 [0033.567] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e6fc) returned 1 [0033.567] GetFileType (hFile=0x224) returned 0x1 [0033.567] GetFileSize (in: hFile=0x224, lpFileSizeHigh=0x31e808 | out: lpFileSizeHigh=0x31e808*=0x0) returned 0x7976 [0033.567] ReadFile (in: hFile=0x224, lpBuffer=0x26b2614, nNumberOfBytesToRead=0x7976, lpNumberOfBytesRead=0x31e7b4, lpOverlapped=0x0 | out: lpBuffer=0x26b2614*, lpNumberOfBytesRead=0x31e7b4*=0x7976, lpOverlapped=0x0) returned 1 [0033.571] CloseHandle (hObject=0x224) returned 1 [0033.585] GetFullPathNameW (in: lpFileName="C:\\MSOCache\\All Users\\{91140000-0011-0000-1000-0000000FF1CE}-C\\Setup.xml", nBufferLength=0x105, lpBuffer=0x31e1f8, lpFilePart=0x0 | out: lpBuffer="C:\\MSOCache\\All Users\\{91140000-0011-0000-1000-0000000FF1CE}-C\\Setup.xml", lpFilePart=0x0) returned 0x48 [0033.585] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e6ec) returned 1 [0033.585] CreateFileW (lpFileName="C:\\MSOCache\\All Users\\{91140000-0011-0000-1000-0000000FF1CE}-C\\Setup.xml" (normalized: "c:\\msocache\\all users\\{91140000-0011-0000-1000-0000000ff1ce}-c\\setup.xml"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x224 [0033.586] GetFileType (hFile=0x224) returned 0x1 [0033.586] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e6e8) returned 1 [0033.586] GetFileType (hFile=0x224) returned 0x1 [0033.586] WriteFile (in: hFile=0x224, lpBuffer=0x272537c*, nNumberOfBytesToWrite=0x7980, lpNumberOfBytesWritten=0x31e7a8, lpOverlapped=0x0 | out: lpBuffer=0x272537c*, lpNumberOfBytesWritten=0x31e7a8*=0x7980, lpOverlapped=0x0) returned 1 [0033.587] CloseHandle (hObject=0x224) returned 1 [0033.589] GetFullPathNameW (in: lpFileName="C:\\MSOCache\\All Users\\{91140000-0011-0000-1000-0000000FF1CE}-C\\Setup.xml", nBufferLength=0x105, lpBuffer=0x31e32c, lpFilePart=0x0 | out: lpBuffer="C:\\MSOCache\\All Users\\{91140000-0011-0000-1000-0000000FF1CE}-C\\Setup.xml", lpFilePart=0x0) returned 0x48 [0033.589] GetFullPathNameW (in: lpFileName="C:\\MSOCache\\All Users\\{91140000-0011-0000-1000-0000000FF1CE}-C\\Setup.xml", nBufferLength=0x105, lpBuffer=0x31e32c, lpFilePart=0x0 | out: lpBuffer="C:\\MSOCache\\All Users\\{91140000-0011-0000-1000-0000000FF1CE}-C\\Setup.xml", lpFilePart=0x0) returned 0x48 [0033.589] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e78c) returned 1 [0033.589] GetFileAttributesExW (in: lpFileName="C:\\MSOCache\\All Users\\{91140000-0011-0000-1000-0000000FF1CE}-C\\Setup.xml" (normalized: "c:\\msocache\\all users\\{91140000-0011-0000-1000-0000000ff1ce}-c\\setup.xml"), fInfoLevelId=0x0, lpFileInformation=0x31e808 | out: lpFileInformation=0x31e808*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xbd907a00, ftCreationTime.dwHighDateTime=0x1cad04a, ftLastAccessTime.dwLowDateTime=0xbd907a00, ftLastAccessTime.dwHighDateTime=0x1cad04a, ftLastWriteTime.dwLowDateTime=0xf779f560, ftLastWriteTime.dwHighDateTime=0x1d6eb7e, nFileSizeHigh=0x0, nFileSizeLow=0x7980)) returned 1 [0033.589] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e788) returned 1 [0033.589] MoveFileW (lpExistingFileName="C:\\MSOCache\\All Users\\{91140000-0011-0000-1000-0000000FF1CE}-C\\Setup.xml" (normalized: "c:\\msocache\\all users\\{91140000-0011-0000-1000-0000000ff1ce}-c\\setup.xml"), lpNewFileName="C:\\MSOCache\\All Users\\{91140000-0011-0000-1000-0000000FF1CE}-C\\Setup.xml" (normalized: "c:\\msocache\\all users\\{91140000-0011-0000-1000-0000000ff1ce}-c\\setup.xml")) returned 1 [0033.597] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e834) returned 1 [0033.597] GetFullPathNameW (in: lpFileName="C:\\MSOCache\\All Users\\{91140000-003B-0000-1000-0000000FF1CE}-C", nBufferLength=0x105, lpBuffer=0x31e33c, lpFilePart=0x0 | out: lpBuffer="C:\\MSOCache\\All Users\\{91140000-003B-0000-1000-0000000FF1CE}-C", lpFilePart=0x0) returned 0x3e [0033.597] GetFullPathNameW (in: lpFileName="C:\\MSOCache\\All Users\\{91140000-003B-0000-1000-0000000FF1CE}-C\\", nBufferLength=0x105, lpBuffer=0x31e310, lpFilePart=0x0 | out: lpBuffer="C:\\MSOCache\\All Users\\{91140000-003B-0000-1000-0000000FF1CE}-C\\", lpFilePart=0x0) returned 0x3f [0033.597] FindFirstFileW (in: lpFileName="C:\\MSOCache\\All Users\\{91140000-003B-0000-1000-0000000FF1CE}-C\\*", lpFindFileData=0x31e55c | out: lpFindFileData=0x31e55c*(dwFileAttributes=0x2011, ftCreationTime.dwLowDateTime=0xa5cd3a40, ftCreationTime.dwHighDateTime=0x1d305f1, ftLastAccessTime.dwLowDateTime=0xa8c22f80, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0xa8c22f80, ftLastWriteTime.dwHighDateTime=0x1d305f1, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x381e80 [0033.600] FindNextFileW (in: hFindFile=0x381e80, lpFindFileData=0x31e56c | out: lpFindFileData=0x31e56c*(dwFileAttributes=0x2011, ftCreationTime.dwLowDateTime=0xa5cd3a40, ftCreationTime.dwHighDateTime=0x1d305f1, ftLastAccessTime.dwLowDateTime=0xa8c22f80, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0xa8c22f80, ftLastWriteTime.dwHighDateTime=0x1d305f1, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0033.600] FindNextFileW (in: hFindFile=0x381e80, lpFindFileData=0x31e56c | out: lpFindFileData=0x31e56c*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x87078450, ftCreationTime.dwHighDateTime=0x1cb147f, ftLastAccessTime.dwLowDateTime=0x87078450, ftLastAccessTime.dwHighDateTime=0x1cb147f, ftLastWriteTime.dwLowDateTime=0xa5d1e590, ftLastWriteTime.dwHighDateTime=0x1d305f1, nFileSizeHigh=0x0, nFileSizeLow=0x1e6600, dwReserved0=0x0, dwReserved1=0x0, cFileName="Office32WW.msi", cAlternateFileName="OFFICE~1.MSI")) returned 1 [0033.600] FindNextFileW (in: hFindFile=0x381e80, lpFindFileData=0x31e56c | out: lpFindFileData=0x31e56c*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x87abdaa0, ftCreationTime.dwHighDateTime=0x1cb147f, ftLastAccessTime.dwLowDateTime=0x87abdaa0, ftLastAccessTime.dwHighDateTime=0x1cb147f, ftLastWriteTime.dwLowDateTime=0xa5cd2aa0, ftLastWriteTime.dwHighDateTime=0x1d305f1, nFileSizeHigh=0x0, nFileSizeLow=0x10b2, dwReserved0=0x0, dwReserved1=0x0, cFileName="Office32WW.xml", cAlternateFileName="OFFICE~1.XML")) returned 1 [0033.600] FindNextFileW (in: hFindFile=0x381e80, lpFindFileData=0x31e56c | out: lpFindFileData=0x31e56c*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xfe57f8e0, ftCreationTime.dwHighDateTime=0x1cbe1cb, ftLastAccessTime.dwLowDateTime=0xfe57f8e0, ftLastAccessTime.dwHighDateTime=0x1cbe1cb, ftLastWriteTime.dwLowDateTime=0xa8bafbc0, ftLastWriteTime.dwHighDateTime=0x1d305f1, nFileSizeHigh=0x0, nFileSizeLow=0x2a968, dwReserved0=0x0, dwReserved1=0x0, cFileName="ose.exe", cAlternateFileName="")) returned 1 [0033.600] FindNextFileW (in: hFindFile=0x381e80, lpFindFileData=0x31e56c | out: lpFindFileData=0x31e56c*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x6644b620, ftCreationTime.dwHighDateTime=0x1cb04b2, ftLastAccessTime.dwLowDateTime=0x6644b620, ftLastAccessTime.dwHighDateTime=0x1cb04b2, ftLastWriteTime.dwLowDateTime=0xa81b8770, ftLastWriteTime.dwHighDateTime=0x1d305f1, nFileSizeHigh=0x0, nFileSizeLow=0x709768, dwReserved0=0x0, dwReserved1=0x0, cFileName="osetup.dll", cAlternateFileName="")) returned 1 [0033.600] FindNextFileW (in: hFindFile=0x381e80, lpFindFileData=0x31e56c | out: lpFindFileData=0x31e56c*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x8238e540, ftCreationTime.dwHighDateTime=0x1cb147f, ftLastAccessTime.dwLowDateTime=0x8238e540, ftLastAccessTime.dwHighDateTime=0x1cb147f, ftLastWriteTime.dwLowDateTime=0xa5ddcc70, ftLastWriteTime.dwHighDateTime=0x1d305f1, nFileSizeHigh=0x0, nFileSizeLow=0x228df5c, dwReserved0=0x0, dwReserved1=0x0, cFileName="OWOW32WW.cab", cAlternateFileName="")) returned 1 [0033.600] FindNextFileW (in: hFindFile=0x381e80, lpFindFileData=0x31e56c | out: lpFindFileData=0x31e56c*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x7bd91af0, ftCreationTime.dwHighDateTime=0x1cb07b2, ftLastAccessTime.dwLowDateTime=0x7bd91af0, ftLastAccessTime.dwHighDateTime=0x1cb07b2, ftLastWriteTime.dwLowDateTime=0xa8bafbc0, ftLastWriteTime.dwHighDateTime=0x1d305f1, nFileSizeHigh=0x0, nFileSizeLow=0x165510, dwReserved0=0x0, dwReserved1=0x0, cFileName="PidGenX.dll", cAlternateFileName="")) returned 1 [0033.600] FindNextFileW (in: hFindFile=0x381e80, lpFindFileData=0x31e56c | out: lpFindFileData=0x31e56c*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x2a2397e0, ftCreationTime.dwHighDateTime=0x1cbe19a, ftLastAccessTime.dwLowDateTime=0x2a2397e0, ftLastAccessTime.dwHighDateTime=0x1cbe19a, ftLastWriteTime.dwLowDateTime=0xa8bafbc0, ftLastWriteTime.dwHighDateTime=0x1d305f1, nFileSizeHigh=0x0, nFileSizeLow=0xaec3a, dwReserved0=0x0, dwReserved1=0x0, cFileName="pkeyconfig-office.xrm-ms", cAlternateFileName="PKEYCO~1.XRM")) returned 1 [0033.601] FindNextFileW (in: hFindFile=0x381e80, lpFindFileData=0x31e56c | out: lpFindFileData=0x31e56c*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x7c1614f0, ftCreationTime.dwHighDateTime=0x1cb148c, ftLastAccessTime.dwLowDateTime=0x7c1614f0, ftLastAccessTime.dwHighDateTime=0x1cb148c, ftLastWriteTime.dwLowDateTime=0xa60fd8f0, ftLastWriteTime.dwHighDateTime=0x1d305f1, nFileSizeHigh=0x0, nFileSizeLow=0xa4c400, dwReserved0=0x0, dwReserved1=0x0, cFileName="PrjProrWW.msi", cAlternateFileName="PRJPRO~1.MSI")) returned 1 [0033.601] FindNextFileW (in: hFindFile=0x381e80, lpFindFileData=0x31e56c | out: lpFindFileData=0x31e56c*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x7cabec50, ftCreationTime.dwHighDateTime=0x1cb148c, ftLastAccessTime.dwLowDateTime=0x7cabec50, ftLastAccessTime.dwHighDateTime=0x1cb148c, ftLastWriteTime.dwLowDateTime=0xa60fd8f0, ftLastWriteTime.dwHighDateTime=0x1d305f1, nFileSizeHigh=0x0, nFileSizeLow=0x1915, dwReserved0=0x0, dwReserved1=0x0, cFileName="PrjProrWW.xml", cAlternateFileName="PRJPRO~1.XML")) returned 1 [0033.601] FindNextFileW (in: hFindFile=0x381e80, lpFindFileData=0x31e56c | out: lpFindFileData=0x31e56c*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x6c87b0c0, ftCreationTime.dwHighDateTime=0x1cb148c, ftLastAccessTime.dwLowDateTime=0x6c87b0c0, ftLastAccessTime.dwHighDateTime=0x1cb148c, ftLastWriteTime.dwLowDateTime=0xa6b67930, ftLastWriteTime.dwHighDateTime=0x1d305f1, nFileSizeHigh=0x0, nFileSizeLow=0x9b6ba9f, dwReserved0=0x0, dwReserved1=0x0, cFileName="PrjPrrWW.cab", cAlternateFileName="")) returned 1 [0033.601] FindNextFileW (in: hFindFile=0x381e80, lpFindFileData=0x31e56c | out: lpFindFileData=0x31e56c*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x69dde270, ftCreationTime.dwHighDateTime=0x1cb04b2, ftLastAccessTime.dwLowDateTime=0x69dde270, ftLastAccessTime.dwHighDateTime=0x1cb04b2, ftLastWriteTime.dwLowDateTime=0xa8191670, ftLastWriteTime.dwHighDateTime=0x1d305f1, nFileSizeHigh=0x0, nFileSizeLow=0x150578, dwReserved0=0x0, dwReserved1=0x0, cFileName="setup.exe", cAlternateFileName="")) returned 1 [0033.601] FindNextFileW (in: hFindFile=0x381e80, lpFindFileData=0x31e56c | out: lpFindFileData=0x31e56c*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x7ca00570, ftCreationTime.dwHighDateTime=0x1cb148c, ftLastAccessTime.dwLowDateTime=0x7ca00570, ftLastAccessTime.dwHighDateTime=0x1cb148c, ftLastWriteTime.dwLowDateTime=0xa8c227b0, ftLastWriteTime.dwHighDateTime=0x1d305f1, nFileSizeHigh=0x0, nFileSizeLow=0x412b, dwReserved0=0x0, dwReserved1=0x0, cFileName="Setup.xml", cAlternateFileName="")) returned 1 [0033.601] FindNextFileW (in: hFindFile=0x381e80, lpFindFileData=0x31e56c | out: lpFindFileData=0x31e56c*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0033.601] FindClose (in: hFindFile=0x381e80 | out: hFindFile=0x381e80) returned 1 [0033.602] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e7f4) returned 1 [0033.602] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e800) returned 1 [0033.602] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e834) returned 1 [0033.602] GetFullPathNameW (in: lpFileName="C:\\MSOCache\\All Users\\{91140000-003B-0000-1000-0000000FF1CE}-C", nBufferLength=0x105, lpBuffer=0x31e33c, lpFilePart=0x0 | out: lpBuffer="C:\\MSOCache\\All Users\\{91140000-003B-0000-1000-0000000FF1CE}-C", lpFilePart=0x0) returned 0x3e [0033.602] GetFullPathNameW (in: lpFileName="C:\\MSOCache\\All Users\\{91140000-003B-0000-1000-0000000FF1CE}-C\\", nBufferLength=0x105, lpBuffer=0x31e310, lpFilePart=0x0 | out: lpBuffer="C:\\MSOCache\\All Users\\{91140000-003B-0000-1000-0000000FF1CE}-C\\", lpFilePart=0x0) returned 0x3f [0033.602] FindFirstFileW (in: lpFileName="C:\\MSOCache\\All Users\\{91140000-003B-0000-1000-0000000FF1CE}-C\\*", lpFindFileData=0x31e55c | out: lpFindFileData=0x31e55c*(dwFileAttributes=0x2011, ftCreationTime.dwLowDateTime=0xa5cd3a40, ftCreationTime.dwHighDateTime=0x1d305f1, ftLastAccessTime.dwLowDateTime=0xa8c22f80, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0xa8c22f80, ftLastWriteTime.dwHighDateTime=0x1d305f1, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x381e80 [0033.603] FindNextFileW (in: hFindFile=0x381e80, lpFindFileData=0x31e56c | out: lpFindFileData=0x31e56c*(dwFileAttributes=0x2011, ftCreationTime.dwLowDateTime=0xa5cd3a40, ftCreationTime.dwHighDateTime=0x1d305f1, ftLastAccessTime.dwLowDateTime=0xa8c22f80, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0xa8c22f80, ftLastWriteTime.dwHighDateTime=0x1d305f1, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0033.603] FindNextFileW (in: hFindFile=0x381e80, lpFindFileData=0x31e56c | out: lpFindFileData=0x31e56c*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x87078450, ftCreationTime.dwHighDateTime=0x1cb147f, ftLastAccessTime.dwLowDateTime=0x87078450, ftLastAccessTime.dwHighDateTime=0x1cb147f, ftLastWriteTime.dwLowDateTime=0xa5d1e590, ftLastWriteTime.dwHighDateTime=0x1d305f1, nFileSizeHigh=0x0, nFileSizeLow=0x1e6600, dwReserved0=0x0, dwReserved1=0x0, cFileName="Office32WW.msi", cAlternateFileName="OFFICE~1.MSI")) returned 1 [0033.603] FindNextFileW (in: hFindFile=0x381e80, lpFindFileData=0x31e56c | out: lpFindFileData=0x31e56c*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x87abdaa0, ftCreationTime.dwHighDateTime=0x1cb147f, ftLastAccessTime.dwLowDateTime=0x87abdaa0, ftLastAccessTime.dwHighDateTime=0x1cb147f, ftLastWriteTime.dwLowDateTime=0xa5cd2aa0, ftLastWriteTime.dwHighDateTime=0x1d305f1, nFileSizeHigh=0x0, nFileSizeLow=0x10b2, dwReserved0=0x0, dwReserved1=0x0, cFileName="Office32WW.xml", cAlternateFileName="OFFICE~1.XML")) returned 1 [0033.604] FindNextFileW (in: hFindFile=0x381e80, lpFindFileData=0x31e56c | out: lpFindFileData=0x31e56c*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xfe57f8e0, ftCreationTime.dwHighDateTime=0x1cbe1cb, ftLastAccessTime.dwLowDateTime=0xfe57f8e0, ftLastAccessTime.dwHighDateTime=0x1cbe1cb, ftLastWriteTime.dwLowDateTime=0xa8bafbc0, ftLastWriteTime.dwHighDateTime=0x1d305f1, nFileSizeHigh=0x0, nFileSizeLow=0x2a968, dwReserved0=0x0, dwReserved1=0x0, cFileName="ose.exe", cAlternateFileName="")) returned 1 [0033.604] FindNextFileW (in: hFindFile=0x381e80, lpFindFileData=0x31e56c | out: lpFindFileData=0x31e56c*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x6644b620, ftCreationTime.dwHighDateTime=0x1cb04b2, ftLastAccessTime.dwLowDateTime=0x6644b620, ftLastAccessTime.dwHighDateTime=0x1cb04b2, ftLastWriteTime.dwLowDateTime=0xa81b8770, ftLastWriteTime.dwHighDateTime=0x1d305f1, nFileSizeHigh=0x0, nFileSizeLow=0x709768, dwReserved0=0x0, dwReserved1=0x0, cFileName="osetup.dll", cAlternateFileName="")) returned 1 [0033.604] FindNextFileW (in: hFindFile=0x381e80, lpFindFileData=0x31e56c | out: lpFindFileData=0x31e56c*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x8238e540, ftCreationTime.dwHighDateTime=0x1cb147f, ftLastAccessTime.dwLowDateTime=0x8238e540, ftLastAccessTime.dwHighDateTime=0x1cb147f, ftLastWriteTime.dwLowDateTime=0xa5ddcc70, ftLastWriteTime.dwHighDateTime=0x1d305f1, nFileSizeHigh=0x0, nFileSizeLow=0x228df5c, dwReserved0=0x0, dwReserved1=0x0, cFileName="OWOW32WW.cab", cAlternateFileName="")) returned 1 [0033.604] FindNextFileW (in: hFindFile=0x381e80, lpFindFileData=0x31e56c | out: lpFindFileData=0x31e56c*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x7bd91af0, ftCreationTime.dwHighDateTime=0x1cb07b2, ftLastAccessTime.dwLowDateTime=0x7bd91af0, ftLastAccessTime.dwHighDateTime=0x1cb07b2, ftLastWriteTime.dwLowDateTime=0xa8bafbc0, ftLastWriteTime.dwHighDateTime=0x1d305f1, nFileSizeHigh=0x0, nFileSizeLow=0x165510, dwReserved0=0x0, dwReserved1=0x0, cFileName="PidGenX.dll", cAlternateFileName="")) returned 1 [0033.604] FindNextFileW (in: hFindFile=0x381e80, lpFindFileData=0x31e56c | out: lpFindFileData=0x31e56c*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x2a2397e0, ftCreationTime.dwHighDateTime=0x1cbe19a, ftLastAccessTime.dwLowDateTime=0x2a2397e0, ftLastAccessTime.dwHighDateTime=0x1cbe19a, ftLastWriteTime.dwLowDateTime=0xa8bafbc0, ftLastWriteTime.dwHighDateTime=0x1d305f1, nFileSizeHigh=0x0, nFileSizeLow=0xaec3a, dwReserved0=0x0, dwReserved1=0x0, cFileName="pkeyconfig-office.xrm-ms", cAlternateFileName="PKEYCO~1.XRM")) returned 1 [0033.604] FindNextFileW (in: hFindFile=0x381e80, lpFindFileData=0x31e56c | out: lpFindFileData=0x31e56c*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x7c1614f0, ftCreationTime.dwHighDateTime=0x1cb148c, ftLastAccessTime.dwLowDateTime=0x7c1614f0, ftLastAccessTime.dwHighDateTime=0x1cb148c, ftLastWriteTime.dwLowDateTime=0xa60fd8f0, ftLastWriteTime.dwHighDateTime=0x1d305f1, nFileSizeHigh=0x0, nFileSizeLow=0xa4c400, dwReserved0=0x0, dwReserved1=0x0, cFileName="PrjProrWW.msi", cAlternateFileName="PRJPRO~1.MSI")) returned 1 [0033.604] FindNextFileW (in: hFindFile=0x381e80, lpFindFileData=0x31e56c | out: lpFindFileData=0x31e56c*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x7cabec50, ftCreationTime.dwHighDateTime=0x1cb148c, ftLastAccessTime.dwLowDateTime=0x7cabec50, ftLastAccessTime.dwHighDateTime=0x1cb148c, ftLastWriteTime.dwLowDateTime=0xa60fd8f0, ftLastWriteTime.dwHighDateTime=0x1d305f1, nFileSizeHigh=0x0, nFileSizeLow=0x1915, dwReserved0=0x0, dwReserved1=0x0, cFileName="PrjProrWW.xml", cAlternateFileName="PRJPRO~1.XML")) returned 1 [0033.605] FindNextFileW (in: hFindFile=0x381e80, lpFindFileData=0x31e56c | out: lpFindFileData=0x31e56c*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x6c87b0c0, ftCreationTime.dwHighDateTime=0x1cb148c, ftLastAccessTime.dwLowDateTime=0x6c87b0c0, ftLastAccessTime.dwHighDateTime=0x1cb148c, ftLastWriteTime.dwLowDateTime=0xa6b67930, ftLastWriteTime.dwHighDateTime=0x1d305f1, nFileSizeHigh=0x0, nFileSizeLow=0x9b6ba9f, dwReserved0=0x0, dwReserved1=0x0, cFileName="PrjPrrWW.cab", cAlternateFileName="")) returned 1 [0033.605] FindNextFileW (in: hFindFile=0x381e80, lpFindFileData=0x31e56c | out: lpFindFileData=0x31e56c*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x69dde270, ftCreationTime.dwHighDateTime=0x1cb04b2, ftLastAccessTime.dwLowDateTime=0x69dde270, ftLastAccessTime.dwHighDateTime=0x1cb04b2, ftLastWriteTime.dwLowDateTime=0xa8191670, ftLastWriteTime.dwHighDateTime=0x1d305f1, nFileSizeHigh=0x0, nFileSizeLow=0x150578, dwReserved0=0x0, dwReserved1=0x0, cFileName="setup.exe", cAlternateFileName="")) returned 1 [0033.605] FindNextFileW (in: hFindFile=0x381e80, lpFindFileData=0x31e56c | out: lpFindFileData=0x31e56c*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x7ca00570, ftCreationTime.dwHighDateTime=0x1cb148c, ftLastAccessTime.dwLowDateTime=0x7ca00570, ftLastAccessTime.dwHighDateTime=0x1cb148c, ftLastWriteTime.dwLowDateTime=0xa8c227b0, ftLastWriteTime.dwHighDateTime=0x1d305f1, nFileSizeHigh=0x0, nFileSizeLow=0x412b, dwReserved0=0x0, dwReserved1=0x0, cFileName="Setup.xml", cAlternateFileName="")) returned 1 [0033.605] FindNextFileW (in: hFindFile=0x381e80, lpFindFileData=0x31e56c | out: lpFindFileData=0x31e56c*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x7ca00570, ftCreationTime.dwHighDateTime=0x1cb148c, ftLastAccessTime.dwLowDateTime=0x7ca00570, ftLastAccessTime.dwHighDateTime=0x1cb148c, ftLastWriteTime.dwLowDateTime=0xa8c227b0, ftLastWriteTime.dwHighDateTime=0x1d305f1, nFileSizeHigh=0x0, nFileSizeLow=0x412b, dwReserved0=0x0, dwReserved1=0x0, cFileName="Setup.xml", cAlternateFileName="")) returned 0 [0033.605] FindClose (in: hFindFile=0x381e80 | out: hFindFile=0x381e80) returned 1 [0033.606] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e7f4) returned 1 [0033.606] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e800) returned 1 [0033.606] GetFullPathNameW (in: lpFileName="C:\\MSOCache\\All Users\\{91140000-003B-0000-1000-0000000FF1CE}-C\\Office32WW.xml", nBufferLength=0x105, lpBuffer=0x31e20c, lpFilePart=0x0 | out: lpBuffer="C:\\MSOCache\\All Users\\{91140000-003B-0000-1000-0000000FF1CE}-C\\Office32WW.xml", lpFilePart=0x0) returned 0x4d [0033.606] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e700) returned 1 [0033.606] CreateFileW (lpFileName="C:\\MSOCache\\All Users\\{91140000-003B-0000-1000-0000000FF1CE}-C\\Office32WW.xml" (normalized: "c:\\msocache\\all users\\{91140000-003b-0000-1000-0000000ff1ce}-c\\office32ww.xml"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x224 [0033.607] GetFileType (hFile=0x224) returned 0x1 [0033.607] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e6fc) returned 1 [0033.607] GetFileType (hFile=0x224) returned 0x1 [0033.607] GetFileSize (in: hFile=0x224, lpFileSizeHigh=0x31e808 | out: lpFileSizeHigh=0x31e808*=0x0) returned 0x10b2 [0033.607] ReadFile (in: hFile=0x224, lpBuffer=0x2730ed8, nNumberOfBytesToRead=0x10b2, lpNumberOfBytesRead=0x31e7b4, lpOverlapped=0x0 | out: lpBuffer=0x2730ed8*, lpNumberOfBytesRead=0x31e7b4*=0x10b2, lpOverlapped=0x0) returned 1 [0033.608] CloseHandle (hObject=0x224) returned 1 [0033.622] GetFullPathNameW (in: lpFileName="C:\\MSOCache\\All Users\\{91140000-003B-0000-1000-0000000FF1CE}-C\\Office32WW.xml", nBufferLength=0x105, lpBuffer=0x31e1f8, lpFilePart=0x0 | out: lpBuffer="C:\\MSOCache\\All Users\\{91140000-003B-0000-1000-0000000FF1CE}-C\\Office32WW.xml", lpFilePart=0x0) returned 0x4d [0033.622] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e6ec) returned 1 [0033.622] CreateFileW (lpFileName="C:\\MSOCache\\All Users\\{91140000-003B-0000-1000-0000000FF1CE}-C\\Office32WW.xml" (normalized: "c:\\msocache\\all users\\{91140000-003b-0000-1000-0000000ff1ce}-c\\office32ww.xml"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x224 [0033.623] GetFileType (hFile=0x224) returned 0x1 [0033.623] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e6e8) returned 1 [0033.623] GetFileType (hFile=0x224) returned 0x1 [0033.623] WriteFile (in: hFile=0x224, lpBuffer=0x2783080*, nNumberOfBytesToWrite=0x10c0, lpNumberOfBytesWritten=0x31e7a8, lpOverlapped=0x0 | out: lpBuffer=0x2783080*, lpNumberOfBytesWritten=0x31e7a8*=0x10c0, lpOverlapped=0x0) returned 1 [0033.624] CloseHandle (hObject=0x224) returned 1 [0033.624] GetFullPathNameW (in: lpFileName="C:\\MSOCache\\All Users\\{91140000-003B-0000-1000-0000000FF1CE}-C\\Office32WW.xml", nBufferLength=0x105, lpBuffer=0x31e32c, lpFilePart=0x0 | out: lpBuffer="C:\\MSOCache\\All Users\\{91140000-003B-0000-1000-0000000FF1CE}-C\\Office32WW.xml", lpFilePart=0x0) returned 0x4d [0033.624] GetFullPathNameW (in: lpFileName="C:\\MSOCache\\All Users\\{91140000-003B-0000-1000-0000000FF1CE}-C\\Office32WW.xml", nBufferLength=0x105, lpBuffer=0x31e32c, lpFilePart=0x0 | out: lpBuffer="C:\\MSOCache\\All Users\\{91140000-003B-0000-1000-0000000FF1CE}-C\\Office32WW.xml", lpFilePart=0x0) returned 0x4d [0033.625] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e78c) returned 1 [0033.625] GetFileAttributesExW (in: lpFileName="C:\\MSOCache\\All Users\\{91140000-003B-0000-1000-0000000FF1CE}-C\\Office32WW.xml" (normalized: "c:\\msocache\\all users\\{91140000-003b-0000-1000-0000000ff1ce}-c\\office32ww.xml"), fInfoLevelId=0x0, lpFileInformation=0x31e808 | out: lpFileInformation=0x31e808*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x87abdaa0, ftCreationTime.dwHighDateTime=0x1cb147f, ftLastAccessTime.dwLowDateTime=0x87abdaa0, ftLastAccessTime.dwHighDateTime=0x1cb147f, ftLastWriteTime.dwLowDateTime=0xf77eb820, ftLastWriteTime.dwHighDateTime=0x1d6eb7e, nFileSizeHigh=0x0, nFileSizeLow=0x10c0)) returned 1 [0033.625] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e788) returned 1 [0033.625] MoveFileW (lpExistingFileName="C:\\MSOCache\\All Users\\{91140000-003B-0000-1000-0000000FF1CE}-C\\Office32WW.xml" (normalized: "c:\\msocache\\all users\\{91140000-003b-0000-1000-0000000ff1ce}-c\\office32ww.xml"), lpNewFileName="C:\\MSOCache\\All Users\\{91140000-003B-0000-1000-0000000FF1CE}-C\\Office32WW.xml" (normalized: "c:\\msocache\\all users\\{91140000-003b-0000-1000-0000000ff1ce}-c\\office32ww.xml")) returned 1 [0033.625] GetFullPathNameW (in: lpFileName="C:\\MSOCache\\All Users\\{91140000-003B-0000-1000-0000000FF1CE}-C\\PrjProrWW.xml", nBufferLength=0x105, lpBuffer=0x31e20c, lpFilePart=0x0 | out: lpBuffer="C:\\MSOCache\\All Users\\{91140000-003B-0000-1000-0000000FF1CE}-C\\PrjProrWW.xml", lpFilePart=0x0) returned 0x4c [0033.625] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e700) returned 1 [0033.625] CreateFileW (lpFileName="C:\\MSOCache\\All Users\\{91140000-003B-0000-1000-0000000FF1CE}-C\\PrjProrWW.xml" (normalized: "c:\\msocache\\all users\\{91140000-003b-0000-1000-0000000ff1ce}-c\\prjprorww.xml"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x224 [0033.626] GetFileType (hFile=0x224) returned 0x1 [0033.626] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e6fc) returned 1 [0033.626] GetFileType (hFile=0x224) returned 0x1 [0033.626] GetFileSize (in: hFile=0x224, lpFileSizeHigh=0x31e808 | out: lpFileSizeHigh=0x31e808*=0x0) returned 0x1915 [0033.626] ReadFile (in: hFile=0x224, lpBuffer=0x27845a4, nNumberOfBytesToRead=0x1915, lpNumberOfBytesRead=0x31e7b4, lpOverlapped=0x0 | out: lpBuffer=0x27845a4*, lpNumberOfBytesRead=0x31e7b4*=0x1915, lpOverlapped=0x0) returned 1 [0033.629] CloseHandle (hObject=0x224) returned 1 [0033.643] GetFullPathNameW (in: lpFileName="C:\\MSOCache\\All Users\\{91140000-003B-0000-1000-0000000FF1CE}-C\\PrjProrWW.xml", nBufferLength=0x105, lpBuffer=0x31e1f8, lpFilePart=0x0 | out: lpBuffer="C:\\MSOCache\\All Users\\{91140000-003B-0000-1000-0000000FF1CE}-C\\PrjProrWW.xml", lpFilePart=0x0) returned 0x4c [0033.643] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e6ec) returned 1 [0033.643] CreateFileW (lpFileName="C:\\MSOCache\\All Users\\{91140000-003B-0000-1000-0000000FF1CE}-C\\PrjProrWW.xml" (normalized: "c:\\msocache\\all users\\{91140000-003b-0000-1000-0000000ff1ce}-c\\prjprorww.xml"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x224 [0033.644] GetFileType (hFile=0x224) returned 0x1 [0033.644] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e6e8) returned 1 [0033.644] GetFileType (hFile=0x224) returned 0x1 [0033.644] WriteFile (in: hFile=0x224, lpBuffer=0x27d912c*, nNumberOfBytesToWrite=0x1920, lpNumberOfBytesWritten=0x31e7a8, lpOverlapped=0x0 | out: lpBuffer=0x27d912c*, lpNumberOfBytesWritten=0x31e7a8*=0x1920, lpOverlapped=0x0) returned 1 [0033.645] CloseHandle (hObject=0x224) returned 1 [0033.645] GetFullPathNameW (in: lpFileName="C:\\MSOCache\\All Users\\{91140000-003B-0000-1000-0000000FF1CE}-C\\PrjProrWW.xml", nBufferLength=0x105, lpBuffer=0x31e32c, lpFilePart=0x0 | out: lpBuffer="C:\\MSOCache\\All Users\\{91140000-003B-0000-1000-0000000FF1CE}-C\\PrjProrWW.xml", lpFilePart=0x0) returned 0x4c [0033.646] GetFullPathNameW (in: lpFileName="C:\\MSOCache\\All Users\\{91140000-003B-0000-1000-0000000FF1CE}-C\\PrjProrWW.xml", nBufferLength=0x105, lpBuffer=0x31e32c, lpFilePart=0x0 | out: lpBuffer="C:\\MSOCache\\All Users\\{91140000-003B-0000-1000-0000000FF1CE}-C\\PrjProrWW.xml", lpFilePart=0x0) returned 0x4c [0033.646] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e78c) returned 1 [0033.646] GetFileAttributesExW (in: lpFileName="C:\\MSOCache\\All Users\\{91140000-003B-0000-1000-0000000FF1CE}-C\\PrjProrWW.xml" (normalized: "c:\\msocache\\all users\\{91140000-003b-0000-1000-0000000ff1ce}-c\\prjprorww.xml"), fInfoLevelId=0x0, lpFileInformation=0x31e808 | out: lpFileInformation=0x31e808*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x7cabec50, ftCreationTime.dwHighDateTime=0x1cb148c, ftLastAccessTime.dwLowDateTime=0x7cabec50, ftLastAccessTime.dwHighDateTime=0x1cb148c, ftLastWriteTime.dwLowDateTime=0xf7811980, ftLastWriteTime.dwHighDateTime=0x1d6eb7e, nFileSizeHigh=0x0, nFileSizeLow=0x1920)) returned 1 [0033.646] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e788) returned 1 [0033.646] MoveFileW (lpExistingFileName="C:\\MSOCache\\All Users\\{91140000-003B-0000-1000-0000000FF1CE}-C\\PrjProrWW.xml" (normalized: "c:\\msocache\\all users\\{91140000-003b-0000-1000-0000000ff1ce}-c\\prjprorww.xml"), lpNewFileName="C:\\MSOCache\\All Users\\{91140000-003B-0000-1000-0000000FF1CE}-C\\PrjProrWW.xml" (normalized: "c:\\msocache\\all users\\{91140000-003b-0000-1000-0000000ff1ce}-c\\prjprorww.xml")) returned 1 [0033.646] GetFullPathNameW (in: lpFileName="C:\\MSOCache\\All Users\\{91140000-003B-0000-1000-0000000FF1CE}-C\\Setup.xml", nBufferLength=0x105, lpBuffer=0x31e20c, lpFilePart=0x0 | out: lpBuffer="C:\\MSOCache\\All Users\\{91140000-003B-0000-1000-0000000FF1CE}-C\\Setup.xml", lpFilePart=0x0) returned 0x48 [0033.646] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e700) returned 1 [0033.646] CreateFileW (lpFileName="C:\\MSOCache\\All Users\\{91140000-003B-0000-1000-0000000FF1CE}-C\\Setup.xml" (normalized: "c:\\msocache\\all users\\{91140000-003b-0000-1000-0000000ff1ce}-c\\setup.xml"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x224 [0033.647] GetFileType (hFile=0x224) returned 0x1 [0033.647] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e6fc) returned 1 [0033.647] GetFileType (hFile=0x224) returned 0x1 [0033.647] GetFileSize (in: hFile=0x224, lpFileSizeHigh=0x31e808 | out: lpFileSizeHigh=0x31e808*=0x0) returned 0x412b [0033.647] ReadFile (in: hFile=0x224, lpBuffer=0x27dae38, nNumberOfBytesToRead=0x412b, lpNumberOfBytesRead=0x31e7b4, lpOverlapped=0x0 | out: lpBuffer=0x27dae38*, lpNumberOfBytesRead=0x31e7b4*=0x412b, lpOverlapped=0x0) returned 1 [0033.649] CloseHandle (hObject=0x224) returned 1 [0033.668] GetFullPathNameW (in: lpFileName="C:\\MSOCache\\All Users\\{91140000-003B-0000-1000-0000000FF1CE}-C\\Setup.xml", nBufferLength=0x105, lpBuffer=0x31e1f8, lpFilePart=0x0 | out: lpBuffer="C:\\MSOCache\\All Users\\{91140000-003B-0000-1000-0000000FF1CE}-C\\Setup.xml", lpFilePart=0x0) returned 0x48 [0033.668] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e6ec) returned 1 [0033.668] CreateFileW (lpFileName="C:\\MSOCache\\All Users\\{91140000-003B-0000-1000-0000000FF1CE}-C\\Setup.xml" (normalized: "c:\\msocache\\all users\\{91140000-003b-0000-1000-0000000ff1ce}-c\\setup.xml"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x224 [0033.669] GetFileType (hFile=0x224) returned 0x1 [0033.669] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e6e8) returned 1 [0033.669] GetFileType (hFile=0x224) returned 0x1 [0033.669] WriteFile (in: hFile=0x224, lpBuffer=0x2643504*, nNumberOfBytesToWrite=0x4130, lpNumberOfBytesWritten=0x31e7a8, lpOverlapped=0x0 | out: lpBuffer=0x2643504*, lpNumberOfBytesWritten=0x31e7a8*=0x4130, lpOverlapped=0x0) returned 1 [0033.670] CloseHandle (hObject=0x224) returned 1 [0033.671] GetFullPathNameW (in: lpFileName="C:\\MSOCache\\All Users\\{91140000-003B-0000-1000-0000000FF1CE}-C\\Setup.xml", nBufferLength=0x105, lpBuffer=0x31e32c, lpFilePart=0x0 | out: lpBuffer="C:\\MSOCache\\All Users\\{91140000-003B-0000-1000-0000000FF1CE}-C\\Setup.xml", lpFilePart=0x0) returned 0x48 [0033.671] GetFullPathNameW (in: lpFileName="C:\\MSOCache\\All Users\\{91140000-003B-0000-1000-0000000FF1CE}-C\\Setup.xml", nBufferLength=0x105, lpBuffer=0x31e32c, lpFilePart=0x0 | out: lpBuffer="C:\\MSOCache\\All Users\\{91140000-003B-0000-1000-0000000FF1CE}-C\\Setup.xml", lpFilePart=0x0) returned 0x48 [0033.671] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e78c) returned 1 [0033.671] GetFileAttributesExW (in: lpFileName="C:\\MSOCache\\All Users\\{91140000-003B-0000-1000-0000000FF1CE}-C\\Setup.xml" (normalized: "c:\\msocache\\all users\\{91140000-003b-0000-1000-0000000ff1ce}-c\\setup.xml"), fInfoLevelId=0x0, lpFileInformation=0x31e808 | out: lpFileInformation=0x31e808*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x7ca00570, ftCreationTime.dwHighDateTime=0x1cb148c, ftLastAccessTime.dwLowDateTime=0x7ca00570, ftLastAccessTime.dwHighDateTime=0x1cb148c, ftLastWriteTime.dwLowDateTime=0xf785dc40, ftLastWriteTime.dwHighDateTime=0x1d6eb7e, nFileSizeHigh=0x0, nFileSizeLow=0x4130)) returned 1 [0033.671] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e788) returned 1 [0033.671] MoveFileW (lpExistingFileName="C:\\MSOCache\\All Users\\{91140000-003B-0000-1000-0000000FF1CE}-C\\Setup.xml" (normalized: "c:\\msocache\\all users\\{91140000-003b-0000-1000-0000000ff1ce}-c\\setup.xml"), lpNewFileName="C:\\MSOCache\\All Users\\{91140000-003B-0000-1000-0000000FF1CE}-C\\Setup.xml" (normalized: "c:\\msocache\\all users\\{91140000-003b-0000-1000-0000000ff1ce}-c\\setup.xml")) returned 1 [0033.672] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e834) returned 1 [0033.672] GetFullPathNameW (in: lpFileName="C:\\MSOCache\\All Users\\{91140000-0057-0000-1000-0000000FF1CE}-C", nBufferLength=0x105, lpBuffer=0x31e33c, lpFilePart=0x0 | out: lpBuffer="C:\\MSOCache\\All Users\\{91140000-0057-0000-1000-0000000FF1CE}-C", lpFilePart=0x0) returned 0x3e [0033.672] GetFullPathNameW (in: lpFileName="C:\\MSOCache\\All Users\\{91140000-0057-0000-1000-0000000FF1CE}-C\\", nBufferLength=0x105, lpBuffer=0x31e310, lpFilePart=0x0 | out: lpBuffer="C:\\MSOCache\\All Users\\{91140000-0057-0000-1000-0000000FF1CE}-C\\", lpFilePart=0x0) returned 0x3f [0033.672] FindFirstFileW (in: lpFileName="C:\\MSOCache\\All Users\\{91140000-0057-0000-1000-0000000FF1CE}-C\\*", lpFindFileData=0x31e55c | out: lpFindFileData=0x31e55c*(dwFileAttributes=0x2011, ftCreationTime.dwLowDateTime=0x46538340, ftCreationTime.dwHighDateTime=0x1d305eb, ftLastAccessTime.dwLowDateTime=0x4a6d41a0, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0x4a6d41a0, ftLastWriteTime.dwHighDateTime=0x1d305eb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x381b80 [0033.675] FindNextFileW (in: hFindFile=0x381b80, lpFindFileData=0x31e56c | out: lpFindFileData=0x31e56c*(dwFileAttributes=0x2011, ftCreationTime.dwLowDateTime=0x46538340, ftCreationTime.dwHighDateTime=0x1d305eb, ftLastAccessTime.dwLowDateTime=0x4a6d41a0, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0x4a6d41a0, ftLastWriteTime.dwHighDateTime=0x1d305eb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0033.675] FindNextFileW (in: hFindFile=0x381b80, lpFindFileData=0x31e56c | out: lpFindFileData=0x31e56c*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xe5ed9630, ftCreationTime.dwHighDateTime=0x1cb12b3, ftLastAccessTime.dwLowDateTime=0xe5ed9630, ftLastAccessTime.dwHighDateTime=0x1cb12b3, ftLastWriteTime.dwLowDateTime=0x4655d500, ftLastWriteTime.dwHighDateTime=0x1d305eb, nFileSizeHigh=0x0, nFileSizeLow=0x1e6600, dwReserved0=0x0, dwReserved1=0x0, cFileName="Office32WW.msi", cAlternateFileName="OFFICE~1.MSI")) returned 1 [0033.675] FindNextFileW (in: hFindFile=0x381b80, lpFindFileData=0x31e56c | out: lpFindFileData=0x31e56c*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x16771fb0, ftCreationTime.dwHighDateTime=0x1cb12b4, ftLastAccessTime.dwLowDateTime=0x16771fb0, ftLastAccessTime.dwHighDateTime=0x1cb12b4, ftLastWriteTime.dwLowDateTime=0x46536400, ftLastWriteTime.dwHighDateTime=0x1d305eb, nFileSizeHigh=0x0, nFileSizeLow=0x10b2, dwReserved0=0x0, dwReserved1=0x0, cFileName="Office32WW.xml", cAlternateFileName="OFFICE~1.XML")) returned 1 [0033.675] FindNextFileW (in: hFindFile=0x381b80, lpFindFileData=0x31e56c | out: lpFindFileData=0x31e56c*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xec54b6b0, ftCreationTime.dwHighDateTime=0x1cb04a9, ftLastAccessTime.dwLowDateTime=0xec54b6b0, ftLastAccessTime.dwHighDateTime=0x1cb04a9, ftLastWriteTime.dwLowDateTime=0x4a687710, ftLastWriteTime.dwHighDateTime=0x1d305eb, nFileSizeHigh=0x0, nFileSizeLow=0x2a968, dwReserved0=0x0, dwReserved1=0x0, cFileName="ose.exe", cAlternateFileName="")) returned 1 [0033.675] FindNextFileW (in: hFindFile=0x381b80, lpFindFileData=0x31e56c | out: lpFindFileData=0x31e56c*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xde72fbf0, ftCreationTime.dwHighDateTime=0x1cb0d0b, ftLastAccessTime.dwLowDateTime=0xde72fbf0, ftLastAccessTime.dwHighDateTime=0x1cb0d0b, ftLastWriteTime.dwLowDateTime=0x49c902c0, ftLastWriteTime.dwHighDateTime=0x1d305eb, nFileSizeHigh=0x0, nFileSizeLow=0x709768, dwReserved0=0x0, dwReserved1=0x0, cFileName="osetup.dll", cAlternateFileName="")) returned 1 [0033.675] FindNextFileW (in: hFindFile=0x381b80, lpFindFileData=0x31e56c | out: lpFindFileData=0x31e56c*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xc9c380f0, ftCreationTime.dwHighDateTime=0x1cb12b3, ftLastAccessTime.dwLowDateTime=0xc9c380f0, ftLastAccessTime.dwHighDateTime=0x1cb12b3, ftLastWriteTime.dwLowDateTime=0x465d00f0, ftLastWriteTime.dwHighDateTime=0x1d305eb, nFileSizeHigh=0x0, nFileSizeLow=0x228df5c, dwReserved0=0x0, dwReserved1=0x0, cFileName="OWOW32WW.cab", cAlternateFileName="")) returned 1 [0033.675] FindNextFileW (in: hFindFile=0x381b80, lpFindFileData=0x31e56c | out: lpFindFileData=0x31e56c*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xe7c66670, ftCreationTime.dwHighDateTime=0x1cb0ee5, ftLastAccessTime.dwLowDateTime=0xe7c66670, ftLastAccessTime.dwHighDateTime=0x1cb0ee5, ftLastWriteTime.dwLowDateTime=0x4a6ac100, ftLastWriteTime.dwHighDateTime=0x1d305eb, nFileSizeHigh=0x0, nFileSizeLow=0x165510, dwReserved0=0x0, dwReserved1=0x0, cFileName="PidGenX.dll", cAlternateFileName="")) returned 1 [0033.676] FindNextFileW (in: hFindFile=0x381b80, lpFindFileData=0x31e56c | out: lpFindFileData=0x31e56c*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x95261510, ftCreationTime.dwHighDateTime=0x1cb048a, ftLastAccessTime.dwLowDateTime=0x95261510, ftLastAccessTime.dwHighDateTime=0x1cb048a, ftLastWriteTime.dwLowDateTime=0x4a6ac100, ftLastWriteTime.dwHighDateTime=0x1d305eb, nFileSizeHigh=0x0, nFileSizeLow=0xaec3a, dwReserved0=0x0, dwReserved1=0x0, cFileName="pkeyconfig-office.xrm-ms", cAlternateFileName="PKEYCO~1.XRM")) returned 1 [0033.676] FindNextFileW (in: hFindFile=0x381b80, lpFindFileData=0x31e56c | out: lpFindFileData=0x31e56c*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xeb7e7af0, ftCreationTime.dwHighDateTime=0x1cb04a9, ftLastAccessTime.dwLowDateTime=0xeb7e7af0, ftLastAccessTime.dwHighDateTime=0x1cb04a9, ftLastWriteTime.dwLowDateTime=0x49c691c0, ftLastWriteTime.dwHighDateTime=0x1d305eb, nFileSizeHigh=0x0, nFileSizeLow=0x150578, dwReserved0=0x0, dwReserved1=0x0, cFileName="setup.exe", cAlternateFileName="")) returned 1 [0033.676] FindNextFileW (in: hFindFile=0x381b80, lpFindFileData=0x31e56c | out: lpFindFileData=0x31e56c*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x80aa51d0, ftCreationTime.dwHighDateTime=0x1cb1486, ftLastAccessTime.dwLowDateTime=0x80aa51d0, ftLastAccessTime.dwHighDateTime=0x1cb1486, ftLastWriteTime.dwLowDateTime=0x4a6d3200, ftLastWriteTime.dwHighDateTime=0x1d305eb, nFileSizeHigh=0x0, nFileSizeLow=0x5061, dwReserved0=0x0, dwReserved1=0x0, cFileName="Setup.xml", cAlternateFileName="")) returned 1 [0033.676] FindNextFileW (in: hFindFile=0x381b80, lpFindFileData=0x31e56c | out: lpFindFileData=0x31e56c*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x749b0240, ftCreationTime.dwHighDateTime=0x1cb1486, ftLastAccessTime.dwLowDateTime=0x749b0240, ftLastAccessTime.dwHighDateTime=0x1cb1486, ftLastWriteTime.dwLowDateTime=0x46a46a30, ftLastWriteTime.dwHighDateTime=0x1d305eb, nFileSizeHigh=0x0, nFileSizeLow=0xb9fa2f7, dwReserved0=0x0, dwReserved1=0x0, cFileName="VisiorWW.cab", cAlternateFileName="")) returned 1 [0033.676] FindNextFileW (in: hFindFile=0x381b80, lpFindFileData=0x31e56c | out: lpFindFileData=0x31e56c*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x80711960, ftCreationTime.dwHighDateTime=0x1cb1486, ftLastAccessTime.dwLowDateTime=0x80711960, ftLastAccessTime.dwHighDateTime=0x1cb1486, ftLastWriteTime.dwLowDateTime=0x468ee660, ftLastWriteTime.dwHighDateTime=0x1d305eb, nFileSizeHigh=0x0, nFileSizeLow=0xb80800, dwReserved0=0x0, dwReserved1=0x0, cFileName="VisiorWW.msi", cAlternateFileName="")) returned 1 [0033.676] FindNextFileW (in: hFindFile=0x381b80, lpFindFileData=0x31e56c | out: lpFindFileData=0x31e56c*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x80b17dc0, ftCreationTime.dwHighDateTime=0x1cb1486, ftLastAccessTime.dwLowDateTime=0x80b17dc0, ftLastAccessTime.dwHighDateTime=0x1cb1486, ftLastWriteTime.dwLowDateTime=0x468a2b70, ftLastWriteTime.dwHighDateTime=0x1d305eb, nFileSizeHigh=0x0, nFileSizeLow=0x2213, dwReserved0=0x0, dwReserved1=0x0, cFileName="VisiorWW.xml", cAlternateFileName="")) returned 1 [0033.676] FindNextFileW (in: hFindFile=0x381b80, lpFindFileData=0x31e56c | out: lpFindFileData=0x31e56c*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0033.676] FindClose (in: hFindFile=0x381b80 | out: hFindFile=0x381b80) returned 1 [0033.677] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e7f4) returned 1 [0033.677] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e800) returned 1 [0033.677] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e834) returned 1 [0033.677] GetFullPathNameW (in: lpFileName="C:\\MSOCache\\All Users\\{91140000-0057-0000-1000-0000000FF1CE}-C", nBufferLength=0x105, lpBuffer=0x31e33c, lpFilePart=0x0 | out: lpBuffer="C:\\MSOCache\\All Users\\{91140000-0057-0000-1000-0000000FF1CE}-C", lpFilePart=0x0) returned 0x3e [0033.677] GetFullPathNameW (in: lpFileName="C:\\MSOCache\\All Users\\{91140000-0057-0000-1000-0000000FF1CE}-C\\", nBufferLength=0x105, lpBuffer=0x31e310, lpFilePart=0x0 | out: lpBuffer="C:\\MSOCache\\All Users\\{91140000-0057-0000-1000-0000000FF1CE}-C\\", lpFilePart=0x0) returned 0x3f [0033.677] FindFirstFileW (in: lpFileName="C:\\MSOCache\\All Users\\{91140000-0057-0000-1000-0000000FF1CE}-C\\*", lpFindFileData=0x31e55c | out: lpFindFileData=0x31e55c*(dwFileAttributes=0x2011, ftCreationTime.dwLowDateTime=0x46538340, ftCreationTime.dwHighDateTime=0x1d305eb, ftLastAccessTime.dwLowDateTime=0x4a6d41a0, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0x4a6d41a0, ftLastWriteTime.dwHighDateTime=0x1d305eb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x381b80 [0033.678] FindNextFileW (in: hFindFile=0x381b80, lpFindFileData=0x31e56c | out: lpFindFileData=0x31e56c*(dwFileAttributes=0x2011, ftCreationTime.dwLowDateTime=0x46538340, ftCreationTime.dwHighDateTime=0x1d305eb, ftLastAccessTime.dwLowDateTime=0x4a6d41a0, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0x4a6d41a0, ftLastWriteTime.dwHighDateTime=0x1d305eb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0033.678] FindNextFileW (in: hFindFile=0x381b80, lpFindFileData=0x31e56c | out: lpFindFileData=0x31e56c*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xe5ed9630, ftCreationTime.dwHighDateTime=0x1cb12b3, ftLastAccessTime.dwLowDateTime=0xe5ed9630, ftLastAccessTime.dwHighDateTime=0x1cb12b3, ftLastWriteTime.dwLowDateTime=0x4655d500, ftLastWriteTime.dwHighDateTime=0x1d305eb, nFileSizeHigh=0x0, nFileSizeLow=0x1e6600, dwReserved0=0x0, dwReserved1=0x0, cFileName="Office32WW.msi", cAlternateFileName="OFFICE~1.MSI")) returned 1 [0033.678] FindNextFileW (in: hFindFile=0x381b80, lpFindFileData=0x31e56c | out: lpFindFileData=0x31e56c*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x16771fb0, ftCreationTime.dwHighDateTime=0x1cb12b4, ftLastAccessTime.dwLowDateTime=0x16771fb0, ftLastAccessTime.dwHighDateTime=0x1cb12b4, ftLastWriteTime.dwLowDateTime=0x46536400, ftLastWriteTime.dwHighDateTime=0x1d305eb, nFileSizeHigh=0x0, nFileSizeLow=0x10b2, dwReserved0=0x0, dwReserved1=0x0, cFileName="Office32WW.xml", cAlternateFileName="OFFICE~1.XML")) returned 1 [0033.678] FindNextFileW (in: hFindFile=0x381b80, lpFindFileData=0x31e56c | out: lpFindFileData=0x31e56c*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xec54b6b0, ftCreationTime.dwHighDateTime=0x1cb04a9, ftLastAccessTime.dwLowDateTime=0xec54b6b0, ftLastAccessTime.dwHighDateTime=0x1cb04a9, ftLastWriteTime.dwLowDateTime=0x4a687710, ftLastWriteTime.dwHighDateTime=0x1d305eb, nFileSizeHigh=0x0, nFileSizeLow=0x2a968, dwReserved0=0x0, dwReserved1=0x0, cFileName="ose.exe", cAlternateFileName="")) returned 1 [0033.679] FindNextFileW (in: hFindFile=0x381b80, lpFindFileData=0x31e56c | out: lpFindFileData=0x31e56c*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xde72fbf0, ftCreationTime.dwHighDateTime=0x1cb0d0b, ftLastAccessTime.dwLowDateTime=0xde72fbf0, ftLastAccessTime.dwHighDateTime=0x1cb0d0b, ftLastWriteTime.dwLowDateTime=0x49c902c0, ftLastWriteTime.dwHighDateTime=0x1d305eb, nFileSizeHigh=0x0, nFileSizeLow=0x709768, dwReserved0=0x0, dwReserved1=0x0, cFileName="osetup.dll", cAlternateFileName="")) returned 1 [0033.679] FindNextFileW (in: hFindFile=0x381b80, lpFindFileData=0x31e56c | out: lpFindFileData=0x31e56c*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xc9c380f0, ftCreationTime.dwHighDateTime=0x1cb12b3, ftLastAccessTime.dwLowDateTime=0xc9c380f0, ftLastAccessTime.dwHighDateTime=0x1cb12b3, ftLastWriteTime.dwLowDateTime=0x465d00f0, ftLastWriteTime.dwHighDateTime=0x1d305eb, nFileSizeHigh=0x0, nFileSizeLow=0x228df5c, dwReserved0=0x0, dwReserved1=0x0, cFileName="OWOW32WW.cab", cAlternateFileName="")) returned 1 [0033.679] FindNextFileW (in: hFindFile=0x381b80, lpFindFileData=0x31e56c | out: lpFindFileData=0x31e56c*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xe7c66670, ftCreationTime.dwHighDateTime=0x1cb0ee5, ftLastAccessTime.dwLowDateTime=0xe7c66670, ftLastAccessTime.dwHighDateTime=0x1cb0ee5, ftLastWriteTime.dwLowDateTime=0x4a6ac100, ftLastWriteTime.dwHighDateTime=0x1d305eb, nFileSizeHigh=0x0, nFileSizeLow=0x165510, dwReserved0=0x0, dwReserved1=0x0, cFileName="PidGenX.dll", cAlternateFileName="")) returned 1 [0033.679] FindNextFileW (in: hFindFile=0x381b80, lpFindFileData=0x31e56c | out: lpFindFileData=0x31e56c*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x95261510, ftCreationTime.dwHighDateTime=0x1cb048a, ftLastAccessTime.dwLowDateTime=0x95261510, ftLastAccessTime.dwHighDateTime=0x1cb048a, ftLastWriteTime.dwLowDateTime=0x4a6ac100, ftLastWriteTime.dwHighDateTime=0x1d305eb, nFileSizeHigh=0x0, nFileSizeLow=0xaec3a, dwReserved0=0x0, dwReserved1=0x0, cFileName="pkeyconfig-office.xrm-ms", cAlternateFileName="PKEYCO~1.XRM")) returned 1 [0033.679] FindNextFileW (in: hFindFile=0x381b80, lpFindFileData=0x31e56c | out: lpFindFileData=0x31e56c*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xeb7e7af0, ftCreationTime.dwHighDateTime=0x1cb04a9, ftLastAccessTime.dwLowDateTime=0xeb7e7af0, ftLastAccessTime.dwHighDateTime=0x1cb04a9, ftLastWriteTime.dwLowDateTime=0x49c691c0, ftLastWriteTime.dwHighDateTime=0x1d305eb, nFileSizeHigh=0x0, nFileSizeLow=0x150578, dwReserved0=0x0, dwReserved1=0x0, cFileName="setup.exe", cAlternateFileName="")) returned 1 [0033.679] FindNextFileW (in: hFindFile=0x381b80, lpFindFileData=0x31e56c | out: lpFindFileData=0x31e56c*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x80aa51d0, ftCreationTime.dwHighDateTime=0x1cb1486, ftLastAccessTime.dwLowDateTime=0x80aa51d0, ftLastAccessTime.dwHighDateTime=0x1cb1486, ftLastWriteTime.dwLowDateTime=0x4a6d3200, ftLastWriteTime.dwHighDateTime=0x1d305eb, nFileSizeHigh=0x0, nFileSizeLow=0x5061, dwReserved0=0x0, dwReserved1=0x0, cFileName="Setup.xml", cAlternateFileName="")) returned 1 [0033.679] FindNextFileW (in: hFindFile=0x381b80, lpFindFileData=0x31e56c | out: lpFindFileData=0x31e56c*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x749b0240, ftCreationTime.dwHighDateTime=0x1cb1486, ftLastAccessTime.dwLowDateTime=0x749b0240, ftLastAccessTime.dwHighDateTime=0x1cb1486, ftLastWriteTime.dwLowDateTime=0x46a46a30, ftLastWriteTime.dwHighDateTime=0x1d305eb, nFileSizeHigh=0x0, nFileSizeLow=0xb9fa2f7, dwReserved0=0x0, dwReserved1=0x0, cFileName="VisiorWW.cab", cAlternateFileName="")) returned 1 [0033.679] FindNextFileW (in: hFindFile=0x381b80, lpFindFileData=0x31e56c | out: lpFindFileData=0x31e56c*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x80711960, ftCreationTime.dwHighDateTime=0x1cb1486, ftLastAccessTime.dwLowDateTime=0x80711960, ftLastAccessTime.dwHighDateTime=0x1cb1486, ftLastWriteTime.dwLowDateTime=0x468ee660, ftLastWriteTime.dwHighDateTime=0x1d305eb, nFileSizeHigh=0x0, nFileSizeLow=0xb80800, dwReserved0=0x0, dwReserved1=0x0, cFileName="VisiorWW.msi", cAlternateFileName="")) returned 1 [0033.680] FindNextFileW (in: hFindFile=0x381b80, lpFindFileData=0x31e56c | out: lpFindFileData=0x31e56c*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x80b17dc0, ftCreationTime.dwHighDateTime=0x1cb1486, ftLastAccessTime.dwLowDateTime=0x80b17dc0, ftLastAccessTime.dwHighDateTime=0x1cb1486, ftLastWriteTime.dwLowDateTime=0x468a2b70, ftLastWriteTime.dwHighDateTime=0x1d305eb, nFileSizeHigh=0x0, nFileSizeLow=0x2213, dwReserved0=0x0, dwReserved1=0x0, cFileName="VisiorWW.xml", cAlternateFileName="")) returned 1 [0033.680] FindNextFileW (in: hFindFile=0x381b80, lpFindFileData=0x31e56c | out: lpFindFileData=0x31e56c*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x80b17dc0, ftCreationTime.dwHighDateTime=0x1cb1486, ftLastAccessTime.dwLowDateTime=0x80b17dc0, ftLastAccessTime.dwHighDateTime=0x1cb1486, ftLastWriteTime.dwLowDateTime=0x468a2b70, ftLastWriteTime.dwHighDateTime=0x1d305eb, nFileSizeHigh=0x0, nFileSizeLow=0x2213, dwReserved0=0x0, dwReserved1=0x0, cFileName="VisiorWW.xml", cAlternateFileName="")) returned 0 [0033.680] FindClose (in: hFindFile=0x381b80 | out: hFindFile=0x381b80) returned 1 [0033.681] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e7f4) returned 1 [0033.681] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e800) returned 1 [0033.681] GetFullPathNameW (in: lpFileName="C:\\MSOCache\\All Users\\{91140000-0057-0000-1000-0000000FF1CE}-C\\Office32WW.xml", nBufferLength=0x105, lpBuffer=0x31e20c, lpFilePart=0x0 | out: lpBuffer="C:\\MSOCache\\All Users\\{91140000-0057-0000-1000-0000000FF1CE}-C\\Office32WW.xml", lpFilePart=0x0) returned 0x4d [0033.681] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e700) returned 1 [0033.681] CreateFileW (lpFileName="C:\\MSOCache\\All Users\\{91140000-0057-0000-1000-0000000FF1CE}-C\\Office32WW.xml" (normalized: "c:\\msocache\\all users\\{91140000-0057-0000-1000-0000000ff1ce}-c\\office32ww.xml"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x224 [0033.682] GetFileType (hFile=0x224) returned 0x1 [0033.682] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e6fc) returned 1 [0033.682] GetFileType (hFile=0x224) returned 0x1 [0033.682] GetFileSize (in: hFile=0x224, lpFileSizeHigh=0x31e808 | out: lpFileSizeHigh=0x31e808*=0x0) returned 0x10b2 [0033.682] ReadFile (in: hFile=0x224, lpBuffer=0x264b758, nNumberOfBytesToRead=0x10b2, lpNumberOfBytesRead=0x31e7b4, lpOverlapped=0x0 | out: lpBuffer=0x264b758*, lpNumberOfBytesRead=0x31e7b4*=0x10b2, lpOverlapped=0x0) returned 1 [0033.684] CloseHandle (hObject=0x224) returned 1 [0033.722] GetFullPathNameW (in: lpFileName="C:\\MSOCache\\All Users\\{91140000-0057-0000-1000-0000000FF1CE}-C\\Office32WW.xml", nBufferLength=0x105, lpBuffer=0x31e1f8, lpFilePart=0x0 | out: lpBuffer="C:\\MSOCache\\All Users\\{91140000-0057-0000-1000-0000000FF1CE}-C\\Office32WW.xml", lpFilePart=0x0) returned 0x4d [0033.722] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e6ec) returned 1 [0033.723] CreateFileW (lpFileName="C:\\MSOCache\\All Users\\{91140000-0057-0000-1000-0000000FF1CE}-C\\Office32WW.xml" (normalized: "c:\\msocache\\all users\\{91140000-0057-0000-1000-0000000ff1ce}-c\\office32ww.xml"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x224 [0033.723] GetFileType (hFile=0x224) returned 0x1 [0033.723] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e6e8) returned 1 [0033.723] GetFileType (hFile=0x224) returned 0x1 [0033.723] WriteFile (in: hFile=0x224, lpBuffer=0x269da5c*, nNumberOfBytesToWrite=0x10c0, lpNumberOfBytesWritten=0x31e7a8, lpOverlapped=0x0 | out: lpBuffer=0x269da5c*, lpNumberOfBytesWritten=0x31e7a8*=0x10c0, lpOverlapped=0x0) returned 1 [0033.724] CloseHandle (hObject=0x224) returned 1 [0033.725] GetFullPathNameW (in: lpFileName="C:\\MSOCache\\All Users\\{91140000-0057-0000-1000-0000000FF1CE}-C\\Office32WW.xml", nBufferLength=0x105, lpBuffer=0x31e32c, lpFilePart=0x0 | out: lpBuffer="C:\\MSOCache\\All Users\\{91140000-0057-0000-1000-0000000FF1CE}-C\\Office32WW.xml", lpFilePart=0x0) returned 0x4d [0033.725] GetFullPathNameW (in: lpFileName="C:\\MSOCache\\All Users\\{91140000-0057-0000-1000-0000000FF1CE}-C\\Office32WW.xml", nBufferLength=0x105, lpBuffer=0x31e32c, lpFilePart=0x0 | out: lpBuffer="C:\\MSOCache\\All Users\\{91140000-0057-0000-1000-0000000FF1CE}-C\\Office32WW.xml", lpFilePart=0x0) returned 0x4d [0033.725] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e78c) returned 1 [0033.725] GetFileAttributesExW (in: lpFileName="C:\\MSOCache\\All Users\\{91140000-0057-0000-1000-0000000FF1CE}-C\\Office32WW.xml" (normalized: "c:\\msocache\\all users\\{91140000-0057-0000-1000-0000000ff1ce}-c\\office32ww.xml"), fInfoLevelId=0x0, lpFileInformation=0x31e808 | out: lpFileInformation=0x31e808*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x16771fb0, ftCreationTime.dwHighDateTime=0x1cb12b4, ftLastAccessTime.dwLowDateTime=0x16771fb0, ftLastAccessTime.dwHighDateTime=0x1cb12b4, ftLastWriteTime.dwLowDateTime=0xf78d0060, ftLastWriteTime.dwHighDateTime=0x1d6eb7e, nFileSizeHigh=0x0, nFileSizeLow=0x10c0)) returned 1 [0033.725] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e788) returned 1 [0033.725] MoveFileW (lpExistingFileName="C:\\MSOCache\\All Users\\{91140000-0057-0000-1000-0000000FF1CE}-C\\Office32WW.xml" (normalized: "c:\\msocache\\all users\\{91140000-0057-0000-1000-0000000ff1ce}-c\\office32ww.xml"), lpNewFileName="C:\\MSOCache\\All Users\\{91140000-0057-0000-1000-0000000FF1CE}-C\\Office32WW.xml" (normalized: "c:\\msocache\\all users\\{91140000-0057-0000-1000-0000000ff1ce}-c\\office32ww.xml")) returned 1 [0033.725] GetFullPathNameW (in: lpFileName="C:\\MSOCache\\All Users\\{91140000-0057-0000-1000-0000000FF1CE}-C\\Setup.xml", nBufferLength=0x105, lpBuffer=0x31e20c, lpFilePart=0x0 | out: lpBuffer="C:\\MSOCache\\All Users\\{91140000-0057-0000-1000-0000000FF1CE}-C\\Setup.xml", lpFilePart=0x0) returned 0x48 [0033.725] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e700) returned 1 [0033.725] CreateFileW (lpFileName="C:\\MSOCache\\All Users\\{91140000-0057-0000-1000-0000000FF1CE}-C\\Setup.xml" (normalized: "c:\\msocache\\all users\\{91140000-0057-0000-1000-0000000ff1ce}-c\\setup.xml"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x224 [0033.726] GetFileType (hFile=0x224) returned 0x1 [0033.726] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e6fc) returned 1 [0033.726] GetFileType (hFile=0x224) returned 0x1 [0033.726] GetFileSize (in: hFile=0x224, lpFileSizeHigh=0x31e808 | out: lpFileSizeHigh=0x31e808*=0x0) returned 0x5061 [0033.726] ReadFile (in: hFile=0x224, lpBuffer=0x269ef70, nNumberOfBytesToRead=0x5061, lpNumberOfBytesRead=0x31e7b4, lpOverlapped=0x0 | out: lpBuffer=0x269ef70*, lpNumberOfBytesRead=0x31e7b4*=0x5061, lpOverlapped=0x0) returned 1 [0033.766] CloseHandle (hObject=0x224) returned 1 [0033.780] GetFullPathNameW (in: lpFileName="C:\\MSOCache\\All Users\\{91140000-0057-0000-1000-0000000FF1CE}-C\\Setup.xml", nBufferLength=0x105, lpBuffer=0x31e1f8, lpFilePart=0x0 | out: lpBuffer="C:\\MSOCache\\All Users\\{91140000-0057-0000-1000-0000000FF1CE}-C\\Setup.xml", lpFilePart=0x0) returned 0x48 [0033.780] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e6ec) returned 1 [0033.780] CreateFileW (lpFileName="C:\\MSOCache\\All Users\\{91140000-0057-0000-1000-0000000FF1CE}-C\\Setup.xml" (normalized: "c:\\msocache\\all users\\{91140000-0057-0000-1000-0000000ff1ce}-c\\setup.xml"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x224 [0033.781] GetFileType (hFile=0x224) returned 0x1 [0033.781] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e6e8) returned 1 [0033.781] GetFileType (hFile=0x224) returned 0x1 [0033.781] WriteFile (in: hFile=0x224, lpBuffer=0x2704f88*, nNumberOfBytesToWrite=0x5070, lpNumberOfBytesWritten=0x31e7a8, lpOverlapped=0x0 | out: lpBuffer=0x2704f88*, lpNumberOfBytesWritten=0x31e7a8*=0x5070, lpOverlapped=0x0) returned 1 [0033.782] CloseHandle (hObject=0x224) returned 1 [0033.783] GetFullPathNameW (in: lpFileName="C:\\MSOCache\\All Users\\{91140000-0057-0000-1000-0000000FF1CE}-C\\Setup.xml", nBufferLength=0x105, lpBuffer=0x31e32c, lpFilePart=0x0 | out: lpBuffer="C:\\MSOCache\\All Users\\{91140000-0057-0000-1000-0000000FF1CE}-C\\Setup.xml", lpFilePart=0x0) returned 0x48 [0033.783] GetFullPathNameW (in: lpFileName="C:\\MSOCache\\All Users\\{91140000-0057-0000-1000-0000000FF1CE}-C\\Setup.xml", nBufferLength=0x105, lpBuffer=0x31e32c, lpFilePart=0x0 | out: lpBuffer="C:\\MSOCache\\All Users\\{91140000-0057-0000-1000-0000000FF1CE}-C\\Setup.xml", lpFilePart=0x0) returned 0x48 [0033.783] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e78c) returned 1 [0033.783] GetFileAttributesExW (in: lpFileName="C:\\MSOCache\\All Users\\{91140000-0057-0000-1000-0000000FF1CE}-C\\Setup.xml" (normalized: "c:\\msocache\\all users\\{91140000-0057-0000-1000-0000000ff1ce}-c\\setup.xml"), fInfoLevelId=0x0, lpFileInformation=0x31e808 | out: lpFileInformation=0x31e808*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x80aa51d0, ftCreationTime.dwHighDateTime=0x1cb1486, ftLastAccessTime.dwLowDateTime=0x80aa51d0, ftLastAccessTime.dwHighDateTime=0x1cb1486, ftLastWriteTime.dwLowDateTime=0xf79685e0, ftLastWriteTime.dwHighDateTime=0x1d6eb7e, nFileSizeHigh=0x0, nFileSizeLow=0x5070)) returned 1 [0033.783] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e788) returned 1 [0033.783] MoveFileW (lpExistingFileName="C:\\MSOCache\\All Users\\{91140000-0057-0000-1000-0000000FF1CE}-C\\Setup.xml" (normalized: "c:\\msocache\\all users\\{91140000-0057-0000-1000-0000000ff1ce}-c\\setup.xml"), lpNewFileName="C:\\MSOCache\\All Users\\{91140000-0057-0000-1000-0000000FF1CE}-C\\Setup.xml" (normalized: "c:\\msocache\\all users\\{91140000-0057-0000-1000-0000000ff1ce}-c\\setup.xml")) returned 1 [0033.784] GetFullPathNameW (in: lpFileName="C:\\MSOCache\\All Users\\{91140000-0057-0000-1000-0000000FF1CE}-C\\VisiorWW.xml", nBufferLength=0x105, lpBuffer=0x31e20c, lpFilePart=0x0 | out: lpBuffer="C:\\MSOCache\\All Users\\{91140000-0057-0000-1000-0000000FF1CE}-C\\VisiorWW.xml", lpFilePart=0x0) returned 0x4b [0033.784] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e700) returned 1 [0033.784] CreateFileW (lpFileName="C:\\MSOCache\\All Users\\{91140000-0057-0000-1000-0000000FF1CE}-C\\VisiorWW.xml" (normalized: "c:\\msocache\\all users\\{91140000-0057-0000-1000-0000000ff1ce}-c\\visiorww.xml"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x224 [0033.785] GetFileType (hFile=0x224) returned 0x1 [0033.785] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e6fc) returned 1 [0033.785] GetFileType (hFile=0x224) returned 0x1 [0033.785] GetFileSize (in: hFile=0x224, lpFileSizeHigh=0x31e808 | out: lpFileSizeHigh=0x31e808*=0x0) returned 0x2213 [0033.785] ReadFile (in: hFile=0x224, lpBuffer=0x270a3d0, nNumberOfBytesToRead=0x2213, lpNumberOfBytesRead=0x31e7b4, lpOverlapped=0x0 | out: lpBuffer=0x270a3d0*, lpNumberOfBytesRead=0x31e7b4*=0x2213, lpOverlapped=0x0) returned 1 [0033.794] CloseHandle (hObject=0x224) returned 1 [0033.807] GetFullPathNameW (in: lpFileName="C:\\MSOCache\\All Users\\{91140000-0057-0000-1000-0000000FF1CE}-C\\VisiorWW.xml", nBufferLength=0x105, lpBuffer=0x31e1f8, lpFilePart=0x0 | out: lpBuffer="C:\\MSOCache\\All Users\\{91140000-0057-0000-1000-0000000FF1CE}-C\\VisiorWW.xml", lpFilePart=0x0) returned 0x4b [0033.807] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e6ec) returned 1 [0033.807] CreateFileW (lpFileName="C:\\MSOCache\\All Users\\{91140000-0057-0000-1000-0000000FF1CE}-C\\VisiorWW.xml" (normalized: "c:\\msocache\\all users\\{91140000-0057-0000-1000-0000000ff1ce}-c\\visiorww.xml"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x224 [0033.808] GetFileType (hFile=0x224) returned 0x1 [0033.808] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e6e8) returned 1 [0033.808] GetFileType (hFile=0x224) returned 0x1 [0033.808] WriteFile (in: hFile=0x224, lpBuffer=0x2761c58*, nNumberOfBytesToWrite=0x2220, lpNumberOfBytesWritten=0x31e7a8, lpOverlapped=0x0 | out: lpBuffer=0x2761c58*, lpNumberOfBytesWritten=0x31e7a8*=0x2220, lpOverlapped=0x0) returned 1 [0033.809] CloseHandle (hObject=0x224) returned 1 [0033.810] GetFullPathNameW (in: lpFileName="C:\\MSOCache\\All Users\\{91140000-0057-0000-1000-0000000FF1CE}-C\\VisiorWW.xml", nBufferLength=0x105, lpBuffer=0x31e32c, lpFilePart=0x0 | out: lpBuffer="C:\\MSOCache\\All Users\\{91140000-0057-0000-1000-0000000FF1CE}-C\\VisiorWW.xml", lpFilePart=0x0) returned 0x4b [0033.810] GetFullPathNameW (in: lpFileName="C:\\MSOCache\\All Users\\{91140000-0057-0000-1000-0000000FF1CE}-C\\VisiorWW.xml", nBufferLength=0x105, lpBuffer=0x31e32c, lpFilePart=0x0 | out: lpBuffer="C:\\MSOCache\\All Users\\{91140000-0057-0000-1000-0000000FF1CE}-C\\VisiorWW.xml", lpFilePart=0x0) returned 0x4b [0033.810] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e78c) returned 1 [0033.810] GetFileAttributesExW (in: lpFileName="C:\\MSOCache\\All Users\\{91140000-0057-0000-1000-0000000FF1CE}-C\\VisiorWW.xml" (normalized: "c:\\msocache\\all users\\{91140000-0057-0000-1000-0000000ff1ce}-c\\visiorww.xml"), fInfoLevelId=0x0, lpFileInformation=0x31e808 | out: lpFileInformation=0x31e808*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x80b17dc0, ftCreationTime.dwHighDateTime=0x1cb1486, ftLastAccessTime.dwLowDateTime=0x80b17dc0, ftLastAccessTime.dwHighDateTime=0x1cb1486, ftLastWriteTime.dwLowDateTime=0xf79b48a0, ftLastWriteTime.dwHighDateTime=0x1d6eb7e, nFileSizeHigh=0x0, nFileSizeLow=0x2220)) returned 1 [0033.810] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e788) returned 1 [0033.810] MoveFileW (lpExistingFileName="C:\\MSOCache\\All Users\\{91140000-0057-0000-1000-0000000FF1CE}-C\\VisiorWW.xml" (normalized: "c:\\msocache\\all users\\{91140000-0057-0000-1000-0000000ff1ce}-c\\visiorww.xml"), lpNewFileName="C:\\MSOCache\\All Users\\{91140000-0057-0000-1000-0000000FF1CE}-C\\VisiorWW.xml" (normalized: "c:\\msocache\\all users\\{91140000-0057-0000-1000-0000000ff1ce}-c\\visiorww.xml")) returned 1 [0033.811] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e924) returned 1 [0033.811] GetFullPathNameW (in: lpFileName="C:\\PerfLogs", nBufferLength=0x105, lpBuffer=0x31e42c, lpFilePart=0x0 | out: lpBuffer="C:\\PerfLogs", lpFilePart=0x0) returned 0xb [0033.811] GetFullPathNameW (in: lpFileName="C:\\PerfLogs\\", nBufferLength=0x105, lpBuffer=0x31e400, lpFilePart=0x0 | out: lpBuffer="C:\\PerfLogs\\", lpFilePart=0x0) returned 0xc [0033.811] FindFirstFileW (in: lpFileName="C:\\PerfLogs\\*", lpFindFileData=0x31e64c | out: lpFindFileData=0x31e64c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd72e458, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd72e458, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xfd72e458, ftLastWriteTime.dwHighDateTime=0x1ca0431, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x381e40 [0033.811] FindNextFileW (in: hFindFile=0x381e40, lpFindFileData=0x31e65c | out: lpFindFileData=0x31e65c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd72e458, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd72e458, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xfd72e458, ftLastWriteTime.dwHighDateTime=0x1ca0431, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0033.811] FindNextFileW (in: hFindFile=0x381e40, lpFindFileData=0x31e65c | out: lpFindFileData=0x31e65c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd72e458, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd72e458, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xbbba4afc, ftLastWriteTime.dwHighDateTime=0x1ca042b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Admin", cAlternateFileName="")) returned 1 [0033.812] FindNextFileW (in: hFindFile=0x381e40, lpFindFileData=0x31e65c | out: lpFindFileData=0x31e65c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd72e458, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd72e458, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xbbba4afc, ftLastWriteTime.dwHighDateTime=0x1ca042b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Admin", cAlternateFileName="")) returned 0 [0033.812] FindClose (in: hFindFile=0x381e40 | out: hFindFile=0x381e40) returned 1 [0033.812] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e8e4) returned 1 [0033.812] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e8f0) returned 1 [0033.812] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e924) returned 1 [0033.812] GetFullPathNameW (in: lpFileName="C:\\PerfLogs", nBufferLength=0x105, lpBuffer=0x31e42c, lpFilePart=0x0 | out: lpBuffer="C:\\PerfLogs", lpFilePart=0x0) returned 0xb [0033.812] GetFullPathNameW (in: lpFileName="C:\\PerfLogs\\", nBufferLength=0x105, lpBuffer=0x31e400, lpFilePart=0x0 | out: lpBuffer="C:\\PerfLogs\\", lpFilePart=0x0) returned 0xc [0033.812] FindFirstFileW (in: lpFileName="C:\\PerfLogs\\*", lpFindFileData=0x31e64c | out: lpFindFileData=0x31e64c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd72e458, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd72e458, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xfd72e458, ftLastWriteTime.dwHighDateTime=0x1ca0431, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x381e40 [0033.812] FindNextFileW (in: hFindFile=0x381e40, lpFindFileData=0x31e65c | out: lpFindFileData=0x31e65c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd72e458, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd72e458, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xfd72e458, ftLastWriteTime.dwHighDateTime=0x1ca0431, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0033.812] FindNextFileW (in: hFindFile=0x381e40, lpFindFileData=0x31e65c | out: lpFindFileData=0x31e65c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd72e458, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd72e458, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xbbba4afc, ftLastWriteTime.dwHighDateTime=0x1ca042b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Admin", cAlternateFileName="")) returned 1 [0033.812] FindNextFileW (in: hFindFile=0x381e40, lpFindFileData=0x31e65c | out: lpFindFileData=0x31e65c*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0033.813] FindClose (in: hFindFile=0x381e40 | out: hFindFile=0x381e40) returned 1 [0033.813] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e8e4) returned 1 [0033.813] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e8f0) returned 1 [0033.813] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e8ac) returned 1 [0033.813] GetFullPathNameW (in: lpFileName="C:\\PerfLogs\\Admin", nBufferLength=0x105, lpBuffer=0x31e3b4, lpFilePart=0x0 | out: lpBuffer="C:\\PerfLogs\\Admin", lpFilePart=0x0) returned 0x11 [0033.813] GetFullPathNameW (in: lpFileName="C:\\PerfLogs\\Admin\\", nBufferLength=0x105, lpBuffer=0x31e388, lpFilePart=0x0 | out: lpBuffer="C:\\PerfLogs\\Admin\\", lpFilePart=0x0) returned 0x12 [0033.813] FindFirstFileW (in: lpFileName="C:\\PerfLogs\\Admin\\*", lpFindFileData=0x31e5d4 | out: lpFindFileData=0x31e5d4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd72e458, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd72e458, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xbbba4afc, ftLastWriteTime.dwHighDateTime=0x1ca042b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x381e40 [0033.813] FindNextFileW (in: hFindFile=0x381e40, lpFindFileData=0x31e5e4 | out: lpFindFileData=0x31e5e4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd72e458, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd72e458, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xbbba4afc, ftLastWriteTime.dwHighDateTime=0x1ca042b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0033.813] FindNextFileW (in: hFindFile=0x381e40, lpFindFileData=0x31e5e4 | out: lpFindFileData=0x31e5e4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd72e458, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd72e458, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xbbba4afc, ftLastWriteTime.dwHighDateTime=0x1ca042b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 0 [0033.813] FindClose (in: hFindFile=0x381e40 | out: hFindFile=0x381e40) returned 1 [0033.813] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e86c) returned 1 [0033.813] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e878) returned 1 [0033.813] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e8ac) returned 1 [0033.813] GetFullPathNameW (in: lpFileName="C:\\PerfLogs\\Admin", nBufferLength=0x105, lpBuffer=0x31e3b4, lpFilePart=0x0 | out: lpBuffer="C:\\PerfLogs\\Admin", lpFilePart=0x0) returned 0x11 [0033.814] GetFullPathNameW (in: lpFileName="C:\\PerfLogs\\Admin\\", nBufferLength=0x105, lpBuffer=0x31e388, lpFilePart=0x0 | out: lpBuffer="C:\\PerfLogs\\Admin\\", lpFilePart=0x0) returned 0x12 [0033.814] FindFirstFileW (in: lpFileName="C:\\PerfLogs\\Admin\\*", lpFindFileData=0x31e5d4 | out: lpFindFileData=0x31e5d4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd72e458, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd72e458, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xbbba4afc, ftLastWriteTime.dwHighDateTime=0x1ca042b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x381e40 [0033.814] FindNextFileW (in: hFindFile=0x381e40, lpFindFileData=0x31e5e4 | out: lpFindFileData=0x31e5e4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd72e458, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd72e458, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xbbba4afc, ftLastWriteTime.dwHighDateTime=0x1ca042b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0033.814] FindNextFileW (in: hFindFile=0x381e40, lpFindFileData=0x31e5e4 | out: lpFindFileData=0x31e5e4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd72e458, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd72e458, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xbbba4afc, ftLastWriteTime.dwHighDateTime=0x1ca042b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 0 [0033.814] FindClose (in: hFindFile=0x381e40 | out: hFindFile=0x381e40) returned 1 [0033.814] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e86c) returned 1 [0033.814] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e878) returned 1 [0033.814] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e924) returned 1 [0033.814] GetFullPathNameW (in: lpFileName="C:\\Program Files", nBufferLength=0x105, lpBuffer=0x31e42c, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files", lpFilePart=0x0) returned 0x10 [0033.814] GetFullPathNameW (in: lpFileName="C:\\Program Files\\", nBufferLength=0x105, lpBuffer=0x31e400, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\", lpFilePart=0x0) returned 0x11 [0033.814] FindFirstFileW (in: lpFileName="C:\\Program Files\\*", lpFindFileData=0x31e64c | out: lpFindFileData=0x31e64c*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0xfd72e458, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xdde29c40, ftLastAccessTime.dwHighDateTime=0x1d5e82a, ftLastWriteTime.dwLowDateTime=0xdde29c40, ftLastWriteTime.dwHighDateTime=0x1d5e82a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x381e40 [0033.814] FindNextFileW (in: hFindFile=0x381e40, lpFindFileData=0x31e65c | out: lpFindFileData=0x31e65c*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0xfd72e458, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xdde29c40, ftLastAccessTime.dwHighDateTime=0x1d5e82a, ftLastWriteTime.dwLowDateTime=0xdde29c40, ftLastWriteTime.dwHighDateTime=0x1d5e82a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0033.815] FindNextFileW (in: hFindFile=0x381e40, lpFindFileData=0x31e65c | out: lpFindFileData=0x31e65c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd7545b2, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xd99e0520, ftLastAccessTime.dwHighDateTime=0x1d5e82a, ftLastWriteTime.dwLowDateTime=0xd99e0520, ftLastWriteTime.dwHighDateTime=0x1d5e82a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Common Files", cAlternateFileName="COMMON~1")) returned 1 [0033.815] FindNextFileW (in: hFindFile=0x381e40, lpFindFileData=0x31e65c | out: lpFindFileData=0x31e65c*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0x28ae853d, ftCreationTime.dwHighDateTime=0x1ca043f, ftLastAccessTime.dwLowDateTime=0x28ae853d, ftLastAccessTime.dwHighDateTime=0x1ca043f, ftLastWriteTime.dwLowDateTime=0x28ae853d, ftLastWriteTime.dwHighDateTime=0x1ca043f, nFileSizeHigh=0x0, nFileSizeLow=0xae, dwReserved0=0x0, dwReserved1=0x0, cFileName="desktop.ini", cAlternateFileName="")) returned 1 [0033.815] FindNextFileW (in: hFindFile=0x381e40, lpFindFileData=0x31e65c | out: lpFindFileData=0x31e65c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x80046d91, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0xd9a2c7e0, ftLastAccessTime.dwHighDateTime=0x1d5e82a, ftLastWriteTime.dwLowDateTime=0xd9a2c7e0, ftLastWriteTime.dwHighDateTime=0x1d5e82a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="DVD Maker", cAlternateFileName="DVDMAK~1")) returned 1 [0033.815] FindNextFileW (in: hFindFile=0x381e40, lpFindFileData=0x31e65c | out: lpFindFileData=0x31e65c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd885082, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x1ead9a68, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x1ead9a68, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Internet Explorer", cAlternateFileName="INTERN~1")) returned 1 [0033.815] FindNextFileW (in: hFindFile=0x381e40, lpFindFileData=0x31e65c | out: lpFindFileData=0x31e65c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfa1d4a90, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xd9a52940, ftLastAccessTime.dwHighDateTime=0x1d5e82a, ftLastWriteTime.dwLowDateTime=0xd9a52940, ftLastWriteTime.dwHighDateTime=0x1d5e82a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft Analysis Services", cAlternateFileName="MICROS~2")) returned 1 [0033.815] FindNextFileW (in: hFindFile=0x381e40, lpFindFileData=0x31e65c | out: lpFindFileData=0x31e65c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee2ce510, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xd93085e0, ftLastAccessTime.dwHighDateTime=0x1d5e82a, ftLastWriteTime.dwLowDateTime=0xd93085e0, ftLastWriteTime.dwHighDateTime=0x1d5e82a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft Office", cAlternateFileName="MICROS~1")) returned 1 [0033.815] FindNextFileW (in: hFindFile=0x381e40, lpFindFileData=0x31e65c | out: lpFindFileData=0x31e65c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x50e54b70, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0xd9947fa0, ftLastAccessTime.dwHighDateTime=0x1d5e82a, ftLastWriteTime.dwLowDateTime=0xd9947fa0, ftLastWriteTime.dwHighDateTime=0x1d5e82a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft SQL Server Compact Edition", cAlternateFileName="MICROS~3")) returned 1 [0033.816] FindNextFileW (in: hFindFile=0x381e40, lpFindFileData=0x31e65c | out: lpFindFileData=0x31e65c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x50e7acd0, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0xda90d160, ftLastAccessTime.dwHighDateTime=0x1d5e82a, ftLastWriteTime.dwLowDateTime=0xda90d160, ftLastWriteTime.dwHighDateTime=0x1d5e82a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft Sync Framework", cAlternateFileName="MICROS~4")) returned 1 [0033.816] FindNextFileW (in: hFindFile=0x381e40, lpFindFileData=0x31e65c | out: lpFindFileData=0x31e65c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x594863b0, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0xd9a78aa0, ftLastAccessTime.dwHighDateTime=0x1d5e82a, ftLastWriteTime.dwLowDateTime=0xd9a78aa0, ftLastWriteTime.dwHighDateTime=0x1d5e82a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft Synchronization Services", cAlternateFileName="MID7C0~1")) returned 1 [0033.816] FindNextFileW (in: hFindFile=0x381e40, lpFindFileData=0x31e65c | out: lpFindFileData=0x31e65c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x80020c30, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0xd9947fa0, ftLastAccessTime.dwHighDateTime=0x1d5e82a, ftLastWriteTime.dwLowDateTime=0xd9947fa0, ftLastWriteTime.dwHighDateTime=0x1d5e82a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="MSBuild", cAlternateFileName="")) returned 1 [0033.816] FindNextFileW (in: hFindFile=0x381e40, lpFindFileData=0x31e65c | out: lpFindFileData=0x31e65c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x80020c30, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0xda90d160, ftLastAccessTime.dwHighDateTime=0x1d5e82a, ftLastWriteTime.dwLowDateTime=0xda90d160, ftLastWriteTime.dwHighDateTime=0x1d5e82a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Reference Assemblies", cAlternateFileName="REFERE~1")) returned 1 [0033.816] FindNextFileW (in: hFindFile=0x381e40, lpFindFileData=0x31e65c | out: lpFindFileData=0x31e65c*(dwFileAttributes=0x12, ftCreationTime.dwLowDateTime=0x4232b3dd, ftCreationTime.dwHighDateTime=0x1ca0441, ftLastAccessTime.dwLowDateTime=0xd99ba3c0, ftLastAccessTime.dwHighDateTime=0x1d5e82a, ftLastWriteTime.dwLowDateTime=0xd99ba3c0, ftLastWriteTime.dwHighDateTime=0x1d5e82a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Uninstall Information", cAlternateFileName="UNINST~1")) returned 1 [0033.816] FindNextFileW (in: hFindFile=0x381e40, lpFindFileData=0x31e65c | out: lpFindFileData=0x31e65c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x80020c30, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0xda9332c0, ftLastAccessTime.dwHighDateTime=0x1d5e82a, ftLastWriteTime.dwLowDateTime=0xda9332c0, ftLastWriteTime.dwHighDateTime=0x1d5e82a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Windows Defender", cAlternateFileName="WINDOW~3")) returned 1 [0033.816] FindNextFileW (in: hFindFile=0x381e40, lpFindFileData=0x31e65c | out: lpFindFileData=0x31e65c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x9e177d26, ftCreationTime.dwHighDateTime=0x1cbf8eb, ftLastAccessTime.dwLowDateTime=0xd99e0520, ftLastAccessTime.dwHighDateTime=0x1d5e82a, ftLastWriteTime.dwLowDateTime=0xd99e0520, ftLastWriteTime.dwHighDateTime=0x1d5e82a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Windows Journal", cAlternateFileName="WI0FCF~1")) returned 1 [0033.817] FindNextFileW (in: hFindFile=0x381e40, lpFindFileData=0x31e65c | out: lpFindFileData=0x31e65c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd885082, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xd996e100, ftLastAccessTime.dwHighDateTime=0x1d5e82a, ftLastWriteTime.dwLowDateTime=0xd996e100, ftLastWriteTime.dwHighDateTime=0x1d5e82a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Windows Mail", cAlternateFileName="WINDOW~1")) returned 1 [0033.817] FindNextFileW (in: hFindFile=0x381e40, lpFindFileData=0x31e65c | out: lpFindFileData=0x31e65c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x80020c30, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0xd9994260, ftLastAccessTime.dwHighDateTime=0x1d5e82a, ftLastWriteTime.dwLowDateTime=0xd9994260, ftLastWriteTime.dwHighDateTime=0x1d5e82a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Windows Media Player", cAlternateFileName="WI54FB~1")) returned 1 [0033.817] FindNextFileW (in: hFindFile=0x381e40, lpFindFileData=0x31e65c | out: lpFindFileData=0x31e65c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd8ab1dc, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xda90d160, ftLastAccessTime.dwHighDateTime=0x1d5e82a, ftLastWriteTime.dwLowDateTime=0xda90d160, ftLastWriteTime.dwHighDateTime=0x1d5e82a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Windows NT", cAlternateFileName="WINDOW~2")) returned 1 [0033.817] FindNextFileW (in: hFindFile=0x381e40, lpFindFileData=0x31e65c | out: lpFindFileData=0x31e65c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x80020c30, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0xd9a78aa0, ftLastAccessTime.dwHighDateTime=0x1d5e82a, ftLastWriteTime.dwLowDateTime=0xd9a78aa0, ftLastWriteTime.dwHighDateTime=0x1d5e82a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Windows Photo Viewer", cAlternateFileName="WINDOW~4")) returned 1 [0033.817] FindNextFileW (in: hFindFile=0x381e40, lpFindFileData=0x31e65c | out: lpFindFileData=0x31e65c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x80046d91, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0xd92e2480, ftLastAccessTime.dwHighDateTime=0x1d5e82a, ftLastWriteTime.dwLowDateTime=0xd92e2480, ftLastWriteTime.dwHighDateTime=0x1d5e82a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Windows Portable Devices", cAlternateFileName="WIBFE5~1")) returned 1 [0033.817] FindNextFileW (in: hFindFile=0x381e40, lpFindFileData=0x31e65c | out: lpFindFileData=0x31e65c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x80046d91, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0xd9a06680, ftLastAccessTime.dwHighDateTime=0x1d5e82a, ftLastWriteTime.dwLowDateTime=0xd9a06680, ftLastWriteTime.dwHighDateTime=0x1d5e82a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Windows Sidebar", cAlternateFileName="WI4223~1")) returned 1 [0033.817] FindNextFileW (in: hFindFile=0x381e40, lpFindFileData=0x31e65c | out: lpFindFileData=0x31e65c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x80046d91, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0xd9a06680, ftLastAccessTime.dwHighDateTime=0x1d5e82a, ftLastWriteTime.dwLowDateTime=0xd9a06680, ftLastWriteTime.dwHighDateTime=0x1d5e82a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Windows Sidebar", cAlternateFileName="WI4223~1")) returned 0 [0033.818] FindClose (in: hFindFile=0x381e40 | out: hFindFile=0x381e40) returned 1 [0033.818] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e8e4) returned 1 [0033.818] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e8f0) returned 1 [0033.818] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e924) returned 1 [0033.818] GetFullPathNameW (in: lpFileName="C:\\Program Files", nBufferLength=0x105, lpBuffer=0x31e42c, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files", lpFilePart=0x0) returned 0x10 [0033.818] GetFullPathNameW (in: lpFileName="C:\\Program Files\\", nBufferLength=0x105, lpBuffer=0x31e400, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\", lpFilePart=0x0) returned 0x11 [0033.818] FindFirstFileW (in: lpFileName="C:\\Program Files\\*", lpFindFileData=0x31e64c | out: lpFindFileData=0x31e64c*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0xfd72e458, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xdde29c40, ftLastAccessTime.dwHighDateTime=0x1d5e82a, ftLastWriteTime.dwLowDateTime=0xdde29c40, ftLastWriteTime.dwHighDateTime=0x1d5e82a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x381e40 [0033.818] FindNextFileW (in: hFindFile=0x381e40, lpFindFileData=0x31e65c | out: lpFindFileData=0x31e65c*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0xfd72e458, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xdde29c40, ftLastAccessTime.dwHighDateTime=0x1d5e82a, ftLastWriteTime.dwLowDateTime=0xdde29c40, ftLastWriteTime.dwHighDateTime=0x1d5e82a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0033.818] FindNextFileW (in: hFindFile=0x381e40, lpFindFileData=0x31e65c | out: lpFindFileData=0x31e65c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd7545b2, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xd99e0520, ftLastAccessTime.dwHighDateTime=0x1d5e82a, ftLastWriteTime.dwLowDateTime=0xd99e0520, ftLastWriteTime.dwHighDateTime=0x1d5e82a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Common Files", cAlternateFileName="COMMON~1")) returned 1 [0033.818] FindNextFileW (in: hFindFile=0x381e40, lpFindFileData=0x31e65c | out: lpFindFileData=0x31e65c*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0x28ae853d, ftCreationTime.dwHighDateTime=0x1ca043f, ftLastAccessTime.dwLowDateTime=0x28ae853d, ftLastAccessTime.dwHighDateTime=0x1ca043f, ftLastWriteTime.dwLowDateTime=0x28ae853d, ftLastWriteTime.dwHighDateTime=0x1ca043f, nFileSizeHigh=0x0, nFileSizeLow=0xae, dwReserved0=0x0, dwReserved1=0x0, cFileName="desktop.ini", cAlternateFileName="")) returned 1 [0033.818] FindNextFileW (in: hFindFile=0x381e40, lpFindFileData=0x31e65c | out: lpFindFileData=0x31e65c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x80046d91, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0xd9a2c7e0, ftLastAccessTime.dwHighDateTime=0x1d5e82a, ftLastWriteTime.dwLowDateTime=0xd9a2c7e0, ftLastWriteTime.dwHighDateTime=0x1d5e82a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="DVD Maker", cAlternateFileName="DVDMAK~1")) returned 1 [0033.818] FindNextFileW (in: hFindFile=0x381e40, lpFindFileData=0x31e65c | out: lpFindFileData=0x31e65c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd885082, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x1ead9a68, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x1ead9a68, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Internet Explorer", cAlternateFileName="INTERN~1")) returned 1 [0033.819] FindNextFileW (in: hFindFile=0x381e40, lpFindFileData=0x31e65c | out: lpFindFileData=0x31e65c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfa1d4a90, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xd9a52940, ftLastAccessTime.dwHighDateTime=0x1d5e82a, ftLastWriteTime.dwLowDateTime=0xd9a52940, ftLastWriteTime.dwHighDateTime=0x1d5e82a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft Analysis Services", cAlternateFileName="MICROS~2")) returned 1 [0033.819] FindNextFileW (in: hFindFile=0x381e40, lpFindFileData=0x31e65c | out: lpFindFileData=0x31e65c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee2ce510, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xd93085e0, ftLastAccessTime.dwHighDateTime=0x1d5e82a, ftLastWriteTime.dwLowDateTime=0xd93085e0, ftLastWriteTime.dwHighDateTime=0x1d5e82a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft Office", cAlternateFileName="MICROS~1")) returned 1 [0033.819] FindNextFileW (in: hFindFile=0x381e40, lpFindFileData=0x31e65c | out: lpFindFileData=0x31e65c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x50e54b70, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0xd9947fa0, ftLastAccessTime.dwHighDateTime=0x1d5e82a, ftLastWriteTime.dwLowDateTime=0xd9947fa0, ftLastWriteTime.dwHighDateTime=0x1d5e82a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft SQL Server Compact Edition", cAlternateFileName="MICROS~3")) returned 1 [0033.819] FindNextFileW (in: hFindFile=0x381e40, lpFindFileData=0x31e65c | out: lpFindFileData=0x31e65c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x50e7acd0, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0xda90d160, ftLastAccessTime.dwHighDateTime=0x1d5e82a, ftLastWriteTime.dwLowDateTime=0xda90d160, ftLastWriteTime.dwHighDateTime=0x1d5e82a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft Sync Framework", cAlternateFileName="MICROS~4")) returned 1 [0033.819] FindNextFileW (in: hFindFile=0x381e40, lpFindFileData=0x31e65c | out: lpFindFileData=0x31e65c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x594863b0, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0xd9a78aa0, ftLastAccessTime.dwHighDateTime=0x1d5e82a, ftLastWriteTime.dwLowDateTime=0xd9a78aa0, ftLastWriteTime.dwHighDateTime=0x1d5e82a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft Synchronization Services", cAlternateFileName="MID7C0~1")) returned 1 [0033.819] FindNextFileW (in: hFindFile=0x381e40, lpFindFileData=0x31e65c | out: lpFindFileData=0x31e65c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x80020c30, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0xd9947fa0, ftLastAccessTime.dwHighDateTime=0x1d5e82a, ftLastWriteTime.dwLowDateTime=0xd9947fa0, ftLastWriteTime.dwHighDateTime=0x1d5e82a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="MSBuild", cAlternateFileName="")) returned 1 [0033.819] FindNextFileW (in: hFindFile=0x381e40, lpFindFileData=0x31e65c | out: lpFindFileData=0x31e65c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x80020c30, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0xda90d160, ftLastAccessTime.dwHighDateTime=0x1d5e82a, ftLastWriteTime.dwLowDateTime=0xda90d160, ftLastWriteTime.dwHighDateTime=0x1d5e82a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Reference Assemblies", cAlternateFileName="REFERE~1")) returned 1 [0033.819] FindNextFileW (in: hFindFile=0x381e40, lpFindFileData=0x31e65c | out: lpFindFileData=0x31e65c*(dwFileAttributes=0x12, ftCreationTime.dwLowDateTime=0x4232b3dd, ftCreationTime.dwHighDateTime=0x1ca0441, ftLastAccessTime.dwLowDateTime=0xd99ba3c0, ftLastAccessTime.dwHighDateTime=0x1d5e82a, ftLastWriteTime.dwLowDateTime=0xd99ba3c0, ftLastWriteTime.dwHighDateTime=0x1d5e82a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Uninstall Information", cAlternateFileName="UNINST~1")) returned 1 [0033.820] FindNextFileW (in: hFindFile=0x381e40, lpFindFileData=0x31e65c | out: lpFindFileData=0x31e65c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x80020c30, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0xda9332c0, ftLastAccessTime.dwHighDateTime=0x1d5e82a, ftLastWriteTime.dwLowDateTime=0xda9332c0, ftLastWriteTime.dwHighDateTime=0x1d5e82a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Windows Defender", cAlternateFileName="WINDOW~3")) returned 1 [0033.820] FindNextFileW (in: hFindFile=0x381e40, lpFindFileData=0x31e65c | out: lpFindFileData=0x31e65c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x9e177d26, ftCreationTime.dwHighDateTime=0x1cbf8eb, ftLastAccessTime.dwLowDateTime=0xd99e0520, ftLastAccessTime.dwHighDateTime=0x1d5e82a, ftLastWriteTime.dwLowDateTime=0xd99e0520, ftLastWriteTime.dwHighDateTime=0x1d5e82a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Windows Journal", cAlternateFileName="WI0FCF~1")) returned 1 [0033.820] FindNextFileW (in: hFindFile=0x381e40, lpFindFileData=0x31e65c | out: lpFindFileData=0x31e65c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd885082, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xd996e100, ftLastAccessTime.dwHighDateTime=0x1d5e82a, ftLastWriteTime.dwLowDateTime=0xd996e100, ftLastWriteTime.dwHighDateTime=0x1d5e82a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Windows Mail", cAlternateFileName="WINDOW~1")) returned 1 [0033.820] FindNextFileW (in: hFindFile=0x381e40, lpFindFileData=0x31e65c | out: lpFindFileData=0x31e65c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x80020c30, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0xd9994260, ftLastAccessTime.dwHighDateTime=0x1d5e82a, ftLastWriteTime.dwLowDateTime=0xd9994260, ftLastWriteTime.dwHighDateTime=0x1d5e82a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Windows Media Player", cAlternateFileName="WI54FB~1")) returned 1 [0033.820] FindNextFileW (in: hFindFile=0x381e40, lpFindFileData=0x31e65c | out: lpFindFileData=0x31e65c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd8ab1dc, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xda90d160, ftLastAccessTime.dwHighDateTime=0x1d5e82a, ftLastWriteTime.dwLowDateTime=0xda90d160, ftLastWriteTime.dwHighDateTime=0x1d5e82a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Windows NT", cAlternateFileName="WINDOW~2")) returned 1 [0033.820] FindNextFileW (in: hFindFile=0x381e40, lpFindFileData=0x31e65c | out: lpFindFileData=0x31e65c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x80020c30, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0xd9a78aa0, ftLastAccessTime.dwHighDateTime=0x1d5e82a, ftLastWriteTime.dwLowDateTime=0xd9a78aa0, ftLastWriteTime.dwHighDateTime=0x1d5e82a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Windows Photo Viewer", cAlternateFileName="WINDOW~4")) returned 1 [0033.820] FindNextFileW (in: hFindFile=0x381e40, lpFindFileData=0x31e65c | out: lpFindFileData=0x31e65c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x80046d91, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0xd92e2480, ftLastAccessTime.dwHighDateTime=0x1d5e82a, ftLastWriteTime.dwLowDateTime=0xd92e2480, ftLastWriteTime.dwHighDateTime=0x1d5e82a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Windows Portable Devices", cAlternateFileName="WIBFE5~1")) returned 1 [0033.820] FindNextFileW (in: hFindFile=0x381e40, lpFindFileData=0x31e65c | out: lpFindFileData=0x31e65c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x80046d91, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0xd9a06680, ftLastAccessTime.dwHighDateTime=0x1d5e82a, ftLastWriteTime.dwLowDateTime=0xd9a06680, ftLastWriteTime.dwHighDateTime=0x1d5e82a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Windows Sidebar", cAlternateFileName="WI4223~1")) returned 1 [0033.820] FindNextFileW (in: hFindFile=0x381e40, lpFindFileData=0x31e65c | out: lpFindFileData=0x31e65c*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0033.821] FindClose (in: hFindFile=0x381e40 | out: hFindFile=0x381e40) returned 1 [0033.821] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e8e4) returned 1 [0033.821] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e8f0) returned 1 [0033.821] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e8ac) returned 1 [0033.821] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Common Files", nBufferLength=0x105, lpBuffer=0x31e3b4, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Common Files", lpFilePart=0x0) returned 0x1d [0033.823] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Common Files\\", nBufferLength=0x105, lpBuffer=0x31e388, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Common Files\\", lpFilePart=0x0) returned 0x1e [0033.823] FindFirstFileW (in: lpFileName="C:\\Program Files\\Common Files\\*", lpFindFileData=0x31e5d4 | out: lpFindFileData=0x31e5d4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd7545b2, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xd99e0520, ftLastAccessTime.dwHighDateTime=0x1d5e82a, ftLastWriteTime.dwLowDateTime=0xd99e0520, ftLastWriteTime.dwHighDateTime=0x1d5e82a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x381e40 [0033.823] FindNextFileW (in: hFindFile=0x381e40, lpFindFileData=0x31e5e4 | out: lpFindFileData=0x31e5e4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd7545b2, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xd99e0520, ftLastAccessTime.dwHighDateTime=0x1d5e82a, ftLastWriteTime.dwLowDateTime=0xd99e0520, ftLastWriteTime.dwHighDateTime=0x1d5e82a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0033.823] FindNextFileW (in: hFindFile=0x381e40, lpFindFileData=0x31e5e4 | out: lpFindFileData=0x31e5e4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x69da35f0, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x69dc9750, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x69dc9750, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="DESIGNER", cAlternateFileName="")) returned 1 [0033.823] FindNextFileW (in: hFindFile=0x381e40, lpFindFileData=0x31e5e4 | out: lpFindFileData=0x31e5e4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd7545b2, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x81afcd40, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0x81afcd40, ftLastWriteTime.dwHighDateTime=0x1d305eb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft Shared", cAlternateFileName="MICROS~1")) returned 1 [0033.823] FindNextFileW (in: hFindFile=0x381e40, lpFindFileData=0x31e5e4 | out: lpFindFileData=0x31e5e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x810b22b0, ftCreationTime.dwHighDateTime=0x1d5b2d0, ftLastAccessTime.dwLowDateTime=0x6950a730, ftLastAccessTime.dwHighDateTime=0x1d5d91d, ftLastWriteTime.dwLowDateTime=0x6950a730, ftLastWriteTime.dwHighDateTime=0x1d5d91d, nFileSizeHigh=0x0, nFileSizeLow=0x13a00, dwReserved0=0x0, dwReserved1=0x0, cFileName="pidgin.exe", cAlternateFileName="")) returned 1 [0033.823] FindNextFileW (in: hFindFile=0x381e40, lpFindFileData=0x31e5e4 | out: lpFindFileData=0x31e5e4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd85ef28, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd85ef28, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xfd85ef28, ftLastWriteTime.dwHighDateTime=0x1ca0431, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Services", cAlternateFileName="")) returned 1 [0033.824] FindNextFileW (in: hFindFile=0x381e40, lpFindFileData=0x31e5e4 | out: lpFindFileData=0x31e5e4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd85ef28, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd85ef28, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xfd85ef28, ftLastWriteTime.dwHighDateTime=0x1ca0431, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="SpeechEngines", cAlternateFileName="SPEECH~1")) returned 1 [0033.824] FindNextFileW (in: hFindFile=0x381e40, lpFindFileData=0x31e5e4 | out: lpFindFileData=0x31e5e4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd85ef28, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xf53e90, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xf53e90, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="System", cAlternateFileName="")) returned 1 [0033.824] FindNextFileW (in: hFindFile=0x381e40, lpFindFileData=0x31e5e4 | out: lpFindFileData=0x31e5e4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd85ef28, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xf53e90, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xf53e90, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="System", cAlternateFileName="")) returned 0 [0033.824] FindClose (in: hFindFile=0x381e40 | out: hFindFile=0x381e40) returned 1 [0033.824] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e86c) returned 1 [0033.824] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e878) returned 1 [0033.824] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e8ac) returned 1 [0033.824] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Common Files", nBufferLength=0x105, lpBuffer=0x31e3b4, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Common Files", lpFilePart=0x0) returned 0x1d [0033.824] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Common Files\\", nBufferLength=0x105, lpBuffer=0x31e388, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Common Files\\", lpFilePart=0x0) returned 0x1e [0033.824] FindFirstFileW (in: lpFileName="C:\\Program Files\\Common Files\\*", lpFindFileData=0x31e5d4 | out: lpFindFileData=0x31e5d4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd7545b2, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xd99e0520, ftLastAccessTime.dwHighDateTime=0x1d5e82a, ftLastWriteTime.dwLowDateTime=0xd99e0520, ftLastWriteTime.dwHighDateTime=0x1d5e82a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x381e40 [0033.824] FindNextFileW (in: hFindFile=0x381e40, lpFindFileData=0x31e5e4 | out: lpFindFileData=0x31e5e4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd7545b2, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xd99e0520, ftLastAccessTime.dwHighDateTime=0x1d5e82a, ftLastWriteTime.dwLowDateTime=0xd99e0520, ftLastWriteTime.dwHighDateTime=0x1d5e82a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0033.824] FindNextFileW (in: hFindFile=0x381e40, lpFindFileData=0x31e5e4 | out: lpFindFileData=0x31e5e4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x69da35f0, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x69dc9750, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x69dc9750, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="DESIGNER", cAlternateFileName="")) returned 1 [0033.825] FindNextFileW (in: hFindFile=0x381e40, lpFindFileData=0x31e5e4 | out: lpFindFileData=0x31e5e4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd7545b2, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x81afcd40, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0x81afcd40, ftLastWriteTime.dwHighDateTime=0x1d305eb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft Shared", cAlternateFileName="MICROS~1")) returned 1 [0033.825] FindNextFileW (in: hFindFile=0x381e40, lpFindFileData=0x31e5e4 | out: lpFindFileData=0x31e5e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x810b22b0, ftCreationTime.dwHighDateTime=0x1d5b2d0, ftLastAccessTime.dwLowDateTime=0x6950a730, ftLastAccessTime.dwHighDateTime=0x1d5d91d, ftLastWriteTime.dwLowDateTime=0x6950a730, ftLastWriteTime.dwHighDateTime=0x1d5d91d, nFileSizeHigh=0x0, nFileSizeLow=0x13a00, dwReserved0=0x0, dwReserved1=0x0, cFileName="pidgin.exe", cAlternateFileName="")) returned 1 [0033.825] FindNextFileW (in: hFindFile=0x381e40, lpFindFileData=0x31e5e4 | out: lpFindFileData=0x31e5e4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd85ef28, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd85ef28, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xfd85ef28, ftLastWriteTime.dwHighDateTime=0x1ca0431, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Services", cAlternateFileName="")) returned 1 [0033.825] FindNextFileW (in: hFindFile=0x381e40, lpFindFileData=0x31e5e4 | out: lpFindFileData=0x31e5e4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd85ef28, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd85ef28, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xfd85ef28, ftLastWriteTime.dwHighDateTime=0x1ca0431, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="SpeechEngines", cAlternateFileName="SPEECH~1")) returned 1 [0033.825] FindNextFileW (in: hFindFile=0x381e40, lpFindFileData=0x31e5e4 | out: lpFindFileData=0x31e5e4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd85ef28, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xf53e90, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xf53e90, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="System", cAlternateFileName="")) returned 1 [0033.825] FindNextFileW (in: hFindFile=0x381e40, lpFindFileData=0x31e5e4 | out: lpFindFileData=0x31e5e4*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0033.825] FindClose (in: hFindFile=0x381e40 | out: hFindFile=0x381e40) returned 1 [0033.825] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e86c) returned 1 [0033.825] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e878) returned 1 [0033.825] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e834) returned 1 [0033.825] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Common Files\\DESIGNER", nBufferLength=0x105, lpBuffer=0x31e33c, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Common Files\\DESIGNER", lpFilePart=0x0) returned 0x26 [0033.825] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Common Files\\DESIGNER\\", nBufferLength=0x105, lpBuffer=0x31e310, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Common Files\\DESIGNER\\", lpFilePart=0x0) returned 0x27 [0033.825] FindFirstFileW (in: lpFileName="C:\\Program Files\\Common Files\\DESIGNER\\*", lpFindFileData=0x31e55c | out: lpFindFileData=0x31e55c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x69da35f0, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x69dc9750, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x69dc9750, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x381e40 [0033.826] FindNextFileW (in: hFindFile=0x381e40, lpFindFileData=0x31e56c | out: lpFindFileData=0x31e56c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x69da35f0, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x69dc9750, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x69dc9750, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0033.826] FindNextFileW (in: hFindFile=0x381e40, lpFindFileData=0x31e56c | out: lpFindFileData=0x31e56c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc6accc00, ftCreationTime.dwHighDateTime=0x1ca8d25, ftLastAccessTime.dwLowDateTime=0x69dc9750, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xc6accc00, ftLastWriteTime.dwHighDateTime=0x1ca8d25, nFileSizeHigh=0x0, nFileSizeLow=0x18340, dwReserved0=0x0, dwReserved1=0x0, cFileName="MSADDNDR.DLL", cAlternateFileName="")) returned 1 [0033.826] FindNextFileW (in: hFindFile=0x381e40, lpFindFileData=0x31e56c | out: lpFindFileData=0x31e56c*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0033.826] FindClose (in: hFindFile=0x381e40 | out: hFindFile=0x381e40) returned 1 [0033.826] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e7f4) returned 1 [0033.826] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e800) returned 1 [0033.826] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e834) returned 1 [0033.826] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Common Files\\DESIGNER", nBufferLength=0x105, lpBuffer=0x31e33c, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Common Files\\DESIGNER", lpFilePart=0x0) returned 0x26 [0033.826] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Common Files\\DESIGNER\\", nBufferLength=0x105, lpBuffer=0x31e310, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Common Files\\DESIGNER\\", lpFilePart=0x0) returned 0x27 [0033.826] FindFirstFileW (in: lpFileName="C:\\Program Files\\Common Files\\DESIGNER\\*", lpFindFileData=0x31e55c | out: lpFindFileData=0x31e55c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x69da35f0, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x69dc9750, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x69dc9750, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x381e40 [0033.827] FindNextFileW (in: hFindFile=0x381e40, lpFindFileData=0x31e56c | out: lpFindFileData=0x31e56c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x69da35f0, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x69dc9750, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x69dc9750, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0033.827] FindNextFileW (in: hFindFile=0x381e40, lpFindFileData=0x31e56c | out: lpFindFileData=0x31e56c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc6accc00, ftCreationTime.dwHighDateTime=0x1ca8d25, ftLastAccessTime.dwLowDateTime=0x69dc9750, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xc6accc00, ftLastWriteTime.dwHighDateTime=0x1ca8d25, nFileSizeHigh=0x0, nFileSizeLow=0x18340, dwReserved0=0x0, dwReserved1=0x0, cFileName="MSADDNDR.DLL", cAlternateFileName="")) returned 1 [0033.827] FindNextFileW (in: hFindFile=0x381e40, lpFindFileData=0x31e56c | out: lpFindFileData=0x31e56c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc6accc00, ftCreationTime.dwHighDateTime=0x1ca8d25, ftLastAccessTime.dwLowDateTime=0x69dc9750, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xc6accc00, ftLastWriteTime.dwHighDateTime=0x1ca8d25, nFileSizeHigh=0x0, nFileSizeLow=0x18340, dwReserved0=0x0, dwReserved1=0x0, cFileName="MSADDNDR.DLL", cAlternateFileName="")) returned 0 [0033.827] FindClose (in: hFindFile=0x381e40 | out: hFindFile=0x381e40) returned 1 [0033.827] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e7f4) returned 1 [0033.827] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e800) returned 1 [0033.827] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e834) returned 1 [0033.827] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared", nBufferLength=0x105, lpBuffer=0x31e33c, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Common Files\\Microsoft Shared", lpFilePart=0x0) returned 0x2e [0033.827] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\", nBufferLength=0x105, lpBuffer=0x31e310, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Common Files\\Microsoft Shared\\", lpFilePart=0x0) returned 0x2f [0033.827] FindFirstFileW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\*", lpFindFileData=0x31e55c | out: lpFindFileData=0x31e55c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd7545b2, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x81afcd40, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0x81afcd40, ftLastWriteTime.dwHighDateTime=0x1d305eb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x381e40 [0033.828] FindNextFileW (in: hFindFile=0x381e40, lpFindFileData=0x31e56c | out: lpFindFileData=0x31e56c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd7545b2, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x81afcd40, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0x81afcd40, ftLastWriteTime.dwHighDateTime=0x1d305eb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0033.828] FindNextFileW (in: hFindFile=0x381e40, lpFindFileData=0x31e56c | out: lpFindFileData=0x31e56c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x51e19d30, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0xdbe166c0, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0xdbe166c0, ftLastWriteTime.dwHighDateTime=0x1d305eb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="DW", cAlternateFileName="")) returned 1 [0033.828] FindNextFileW (in: hFindFile=0x381e40, lpFindFileData=0x31e56c | out: lpFindFileData=0x31e56c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeed38550, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xeef015d0, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xeef015d0, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="EQUATION", cAlternateFileName="")) returned 1 [0033.828] FindNextFileW (in: hFindFile=0x381e40, lpFindFileData=0x31e56c | out: lpFindFileData=0x31e56c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x58c7d970, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x58c7d970, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x58c7d970, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="EURO", cAlternateFileName="")) returned 1 [0033.828] FindNextFileW (in: hFindFile=0x381e40, lpFindFileData=0x31e56c | out: lpFindFileData=0x31e56c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5969b6f0, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0xd9df3dc0, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0xd9df3dc0, ftLastWriteTime.dwHighDateTime=0x1d305eb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Filters", cAlternateFileName="")) returned 1 [0033.828] FindNextFileW (in: hFindFile=0x381e40, lpFindFileData=0x31e56c | out: lpFindFileData=0x31e56c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeec79e70, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xc25b4860, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0xc25b4860, ftLastWriteTime.dwHighDateTime=0x1d305eb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="GRPHFLT", cAlternateFileName="")) returned 1 [0033.828] FindNextFileW (in: hFindFile=0x381e40, lpFindFileData=0x31e56c | out: lpFindFileData=0x31e56c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee282250, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0x61073d10, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x61073d10, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Help", cAlternateFileName="")) returned 1 [0033.828] FindNextFileW (in: hFindFile=0x381e40, lpFindFileData=0x31e56c | out: lpFindFileData=0x31e56c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd7545b2, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x9e0df36a, ftLastAccessTime.dwHighDateTime=0x1cbf8eb, ftLastWriteTime.dwLowDateTime=0x9e0df36a, ftLastWriteTime.dwHighDateTime=0x1cbf8eb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="ink", cAlternateFileName="")) returned 1 [0033.829] FindNextFileW (in: hFindFile=0x381e40, lpFindFileData=0x31e56c | out: lpFindFileData=0x31e56c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x69dc9750, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x69dc9750, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x69dc9750, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="MSClientDataMgr", cAlternateFileName="MSCLIE~1")) returned 1 [0033.829] FindNextFileW (in: hFindFile=0x381e40, lpFindFileData=0x31e56c | out: lpFindFileData=0x31e56c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd838dce, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x1eab37af, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x1eab37af, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="MSInfo", cAlternateFileName="")) returned 1 [0033.829] FindNextFileW (in: hFindFile=0x381e40, lpFindFileData=0x31e56c | out: lpFindFileData=0x31e56c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee282250, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xe5d93940, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0xe5d93940, ftLastWriteTime.dwHighDateTime=0x1d305f1, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="OFFICE14", cAlternateFileName="")) returned 1 [0033.829] FindNextFileW (in: hFindFile=0x381e40, lpFindFileData=0x31e56c | out: lpFindFileData=0x31e56c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x50e54b70, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x6c23c830, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x6c23c830, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="OfficeSoftwareProtectionPlatform", cAlternateFileName="OFFICE~1")) returned 1 [0033.829] FindNextFileW (in: hFindFile=0x381e40, lpFindFileData=0x31e56c | out: lpFindFileData=0x31e56c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5b0da70, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x69e61cd0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x69e61cd0, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="PROOF", cAlternateFileName="")) returned 1 [0033.829] FindNextFileW (in: hFindFile=0x381e40, lpFindFileData=0x31e56c | out: lpFindFileData=0x31e56c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeed123f0, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xd5807780, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0xd5807780, ftLastWriteTime.dwHighDateTime=0x1d305eb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Smart Tag", cAlternateFileName="SMARTT~1")) returned 1 [0033.829] FindNextFileW (in: hFindFile=0x381e40, lpFindFileData=0x31e56c | out: lpFindFileData=0x31e56c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeef4d890, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xeef4d890, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xeef4d890, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Source Engine", cAlternateFileName="SOURCE~1")) returned 1 [0033.829] FindNextFileW (in: hFindFile=0x381e40, lpFindFileData=0x31e56c | out: lpFindFileData=0x31e56c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd85ef28, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x9e177d26, ftLastAccessTime.dwHighDateTime=0x1cbf8eb, ftLastWriteTime.dwLowDateTime=0x9e177d26, ftLastWriteTime.dwHighDateTime=0x1cbf8eb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Stationery", cAlternateFileName="STATIO~1")) returned 1 [0033.829] FindNextFileW (in: hFindFile=0x381e40, lpFindFileData=0x31e56c | out: lpFindFileData=0x31e56c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x80020c30, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0xcf4f23c0, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0xcf4f23c0, ftLastWriteTime.dwHighDateTime=0x1d305eb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="TextConv", cAlternateFileName="")) returned 1 [0033.829] FindNextFileW (in: hFindFile=0x381e40, lpFindFileData=0x31e56c | out: lpFindFileData=0x31e56c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x512f1610, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x6d462ff0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x6d462ff0, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="THEMES14", cAlternateFileName="")) returned 1 [0033.829] FindNextFileW (in: hFindFile=0x381e40, lpFindFileData=0x31e56c | out: lpFindFileData=0x31e56c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x54a7f50, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x69dc9750, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x69dc9750, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="TRANSLAT", cAlternateFileName="")) returned 1 [0033.829] FindNextFileW (in: hFindFile=0x381e40, lpFindFileData=0x31e56c | out: lpFindFileData=0x31e56c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1eab37af, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x1eab37af, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x1eab37af, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Triedit", cAlternateFileName="")) returned 1 [0033.829] FindNextFileW (in: hFindFile=0x381e40, lpFindFileData=0x31e56c | out: lpFindFileData=0x31e56c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeedaa970, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xeedaa970, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xeedaa970, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="VBA", cAlternateFileName="")) returned 1 [0033.829] FindNextFileW (in: hFindFile=0x381e40, lpFindFileData=0x31e56c | out: lpFindFileData=0x31e56c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xbd2c6940, ftCreationTime.dwHighDateTime=0x1d2e620, ftLastAccessTime.dwLowDateTime=0xd250e300, ftLastAccessTime.dwHighDateTime=0x1d2e620, ftLastWriteTime.dwLowDateTime=0xd250e300, ftLastWriteTime.dwHighDateTime=0x1d2e620, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="VC", cAlternateFileName="")) returned 1 [0033.829] FindNextFileW (in: hFindFile=0x381e40, lpFindFileData=0x31e56c | out: lpFindFileData=0x31e56c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x80020c30, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x803feff7, ftLastAccessTime.dwHighDateTime=0x1ca0444, ftLastWriteTime.dwLowDateTime=0x803feff7, ftLastWriteTime.dwHighDateTime=0x1ca0444, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="VGX", cAlternateFileName="")) returned 1 [0033.829] FindNextFileW (in: hFindFile=0x381e40, lpFindFileData=0x31e56c | out: lpFindFileData=0x31e56c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x81afcd40, ftCreationTime.dwHighDateTime=0x1d305eb, ftLastAccessTime.dwLowDateTime=0x81afcd40, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0x81afcd40, ftLastWriteTime.dwHighDateTime=0x1d305eb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Visio Shared", cAlternateFileName="VISIOS~1")) returned 1 [0033.829] FindNextFileW (in: hFindFile=0x381e40, lpFindFileData=0x31e56c | out: lpFindFileData=0x31e56c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x3a42070, ftCreationTime.dwHighDateTime=0x1d2dda2, ftLastAccessTime.dwLowDateTime=0xd6cdb800, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0xd6cdb800, ftLastWriteTime.dwHighDateTime=0x1d305eb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="VSTO", cAlternateFileName="")) returned 1 [0033.829] FindNextFileW (in: hFindFile=0x381e40, lpFindFileData=0x31e56c | out: lpFindFileData=0x31e56c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeeeb5310, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0x6a02ad50, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x6a02ad50, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Web Folders", cAlternateFileName="WEBFOL~1")) returned 1 [0033.829] FindNextFileW (in: hFindFile=0x381e40, lpFindFileData=0x31e56c | out: lpFindFileData=0x31e56c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeedaa970, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xeedaa970, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xeedaa970, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Web Server Extensions", cAlternateFileName="WEBSER~1")) returned 1 [0033.829] FindNextFileW (in: hFindFile=0x381e40, lpFindFileData=0x31e56c | out: lpFindFileData=0x31e56c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeedaa970, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xeedaa970, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xeedaa970, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Web Server Extensions", cAlternateFileName="WEBSER~1")) returned 0 [0033.829] FindClose (in: hFindFile=0x381e40 | out: hFindFile=0x381e40) returned 1 [0033.829] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e7f4) returned 1 [0033.829] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e800) returned 1 [0033.829] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e834) returned 1 [0033.830] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared", nBufferLength=0x105, lpBuffer=0x31e33c, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Common Files\\Microsoft Shared", lpFilePart=0x0) returned 0x2e [0033.830] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\", nBufferLength=0x105, lpBuffer=0x31e310, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Common Files\\Microsoft Shared\\", lpFilePart=0x0) returned 0x2f [0033.830] FindFirstFileW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\*", lpFindFileData=0x31e55c | out: lpFindFileData=0x31e55c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd7545b2, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x81afcd40, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0x81afcd40, ftLastWriteTime.dwHighDateTime=0x1d305eb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x381e40 [0033.830] FindNextFileW (in: hFindFile=0x381e40, lpFindFileData=0x31e56c | out: lpFindFileData=0x31e56c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd7545b2, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x81afcd40, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0x81afcd40, ftLastWriteTime.dwHighDateTime=0x1d305eb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0033.830] FindNextFileW (in: hFindFile=0x381e40, lpFindFileData=0x31e56c | out: lpFindFileData=0x31e56c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x51e19d30, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0xdbe166c0, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0xdbe166c0, ftLastWriteTime.dwHighDateTime=0x1d305eb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="DW", cAlternateFileName="")) returned 1 [0033.830] FindNextFileW (in: hFindFile=0x381e40, lpFindFileData=0x31e56c | out: lpFindFileData=0x31e56c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeed38550, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xeef015d0, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xeef015d0, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="EQUATION", cAlternateFileName="")) returned 1 [0033.830] FindNextFileW (in: hFindFile=0x381e40, lpFindFileData=0x31e56c | out: lpFindFileData=0x31e56c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x58c7d970, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x58c7d970, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x58c7d970, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="EURO", cAlternateFileName="")) returned 1 [0033.830] FindNextFileW (in: hFindFile=0x381e40, lpFindFileData=0x31e56c | out: lpFindFileData=0x31e56c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5969b6f0, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0xd9df3dc0, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0xd9df3dc0, ftLastWriteTime.dwHighDateTime=0x1d305eb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Filters", cAlternateFileName="")) returned 1 [0033.830] FindNextFileW (in: hFindFile=0x381e40, lpFindFileData=0x31e56c | out: lpFindFileData=0x31e56c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeec79e70, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xc25b4860, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0xc25b4860, ftLastWriteTime.dwHighDateTime=0x1d305eb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="GRPHFLT", cAlternateFileName="")) returned 1 [0033.830] FindNextFileW (in: hFindFile=0x381e40, lpFindFileData=0x31e56c | out: lpFindFileData=0x31e56c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee282250, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0x61073d10, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x61073d10, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Help", cAlternateFileName="")) returned 1 [0033.830] FindNextFileW (in: hFindFile=0x381e40, lpFindFileData=0x31e56c | out: lpFindFileData=0x31e56c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd7545b2, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x9e0df36a, ftLastAccessTime.dwHighDateTime=0x1cbf8eb, ftLastWriteTime.dwLowDateTime=0x9e0df36a, ftLastWriteTime.dwHighDateTime=0x1cbf8eb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="ink", cAlternateFileName="")) returned 1 [0033.830] FindNextFileW (in: hFindFile=0x381e40, lpFindFileData=0x31e56c | out: lpFindFileData=0x31e56c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x69dc9750, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x69dc9750, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x69dc9750, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="MSClientDataMgr", cAlternateFileName="MSCLIE~1")) returned 1 [0033.830] FindNextFileW (in: hFindFile=0x381e40, lpFindFileData=0x31e56c | out: lpFindFileData=0x31e56c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd838dce, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x1eab37af, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x1eab37af, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="MSInfo", cAlternateFileName="")) returned 1 [0033.830] FindNextFileW (in: hFindFile=0x381e40, lpFindFileData=0x31e56c | out: lpFindFileData=0x31e56c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee282250, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xe5d93940, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0xe5d93940, ftLastWriteTime.dwHighDateTime=0x1d305f1, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="OFFICE14", cAlternateFileName="")) returned 1 [0033.830] FindNextFileW (in: hFindFile=0x381e40, lpFindFileData=0x31e56c | out: lpFindFileData=0x31e56c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x50e54b70, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x6c23c830, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x6c23c830, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="OfficeSoftwareProtectionPlatform", cAlternateFileName="OFFICE~1")) returned 1 [0033.830] FindNextFileW (in: hFindFile=0x381e40, lpFindFileData=0x31e56c | out: lpFindFileData=0x31e56c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5b0da70, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x69e61cd0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x69e61cd0, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="PROOF", cAlternateFileName="")) returned 1 [0033.830] FindNextFileW (in: hFindFile=0x381e40, lpFindFileData=0x31e56c | out: lpFindFileData=0x31e56c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeed123f0, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xd5807780, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0xd5807780, ftLastWriteTime.dwHighDateTime=0x1d305eb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Smart Tag", cAlternateFileName="SMARTT~1")) returned 1 [0033.830] FindNextFileW (in: hFindFile=0x381e40, lpFindFileData=0x31e56c | out: lpFindFileData=0x31e56c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeef4d890, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xeef4d890, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xeef4d890, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Source Engine", cAlternateFileName="SOURCE~1")) returned 1 [0033.830] FindNextFileW (in: hFindFile=0x381e40, lpFindFileData=0x31e56c | out: lpFindFileData=0x31e56c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd85ef28, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x9e177d26, ftLastAccessTime.dwHighDateTime=0x1cbf8eb, ftLastWriteTime.dwLowDateTime=0x9e177d26, ftLastWriteTime.dwHighDateTime=0x1cbf8eb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Stationery", cAlternateFileName="STATIO~1")) returned 1 [0033.830] FindNextFileW (in: hFindFile=0x381e40, lpFindFileData=0x31e56c | out: lpFindFileData=0x31e56c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x80020c30, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0xcf4f23c0, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0xcf4f23c0, ftLastWriteTime.dwHighDateTime=0x1d305eb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="TextConv", cAlternateFileName="")) returned 1 [0033.830] FindNextFileW (in: hFindFile=0x381e40, lpFindFileData=0x31e56c | out: lpFindFileData=0x31e56c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x512f1610, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x6d462ff0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x6d462ff0, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="THEMES14", cAlternateFileName="")) returned 1 [0033.830] FindNextFileW (in: hFindFile=0x381e40, lpFindFileData=0x31e56c | out: lpFindFileData=0x31e56c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x54a7f50, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x69dc9750, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x69dc9750, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="TRANSLAT", cAlternateFileName="")) returned 1 [0033.831] FindNextFileW (in: hFindFile=0x381e40, lpFindFileData=0x31e56c | out: lpFindFileData=0x31e56c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1eab37af, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x1eab37af, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x1eab37af, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Triedit", cAlternateFileName="")) returned 1 [0033.831] FindNextFileW (in: hFindFile=0x381e40, lpFindFileData=0x31e56c | out: lpFindFileData=0x31e56c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeedaa970, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xeedaa970, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xeedaa970, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="VBA", cAlternateFileName="")) returned 1 [0033.831] FindNextFileW (in: hFindFile=0x381e40, lpFindFileData=0x31e56c | out: lpFindFileData=0x31e56c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xbd2c6940, ftCreationTime.dwHighDateTime=0x1d2e620, ftLastAccessTime.dwLowDateTime=0xd250e300, ftLastAccessTime.dwHighDateTime=0x1d2e620, ftLastWriteTime.dwLowDateTime=0xd250e300, ftLastWriteTime.dwHighDateTime=0x1d2e620, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="VC", cAlternateFileName="")) returned 1 [0033.831] FindNextFileW (in: hFindFile=0x381e40, lpFindFileData=0x31e56c | out: lpFindFileData=0x31e56c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x80020c30, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x803feff7, ftLastAccessTime.dwHighDateTime=0x1ca0444, ftLastWriteTime.dwLowDateTime=0x803feff7, ftLastWriteTime.dwHighDateTime=0x1ca0444, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="VGX", cAlternateFileName="")) returned 1 [0033.831] FindNextFileW (in: hFindFile=0x381e40, lpFindFileData=0x31e56c | out: lpFindFileData=0x31e56c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x81afcd40, ftCreationTime.dwHighDateTime=0x1d305eb, ftLastAccessTime.dwLowDateTime=0x81afcd40, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0x81afcd40, ftLastWriteTime.dwHighDateTime=0x1d305eb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Visio Shared", cAlternateFileName="VISIOS~1")) returned 1 [0033.831] FindNextFileW (in: hFindFile=0x381e40, lpFindFileData=0x31e56c | out: lpFindFileData=0x31e56c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x3a42070, ftCreationTime.dwHighDateTime=0x1d2dda2, ftLastAccessTime.dwLowDateTime=0xd6cdb800, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0xd6cdb800, ftLastWriteTime.dwHighDateTime=0x1d305eb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="VSTO", cAlternateFileName="")) returned 1 [0033.831] FindNextFileW (in: hFindFile=0x381e40, lpFindFileData=0x31e56c | out: lpFindFileData=0x31e56c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeeeb5310, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0x6a02ad50, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x6a02ad50, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Web Folders", cAlternateFileName="WEBFOL~1")) returned 1 [0033.831] FindNextFileW (in: hFindFile=0x381e40, lpFindFileData=0x31e56c | out: lpFindFileData=0x31e56c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeedaa970, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xeedaa970, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xeedaa970, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Web Server Extensions", cAlternateFileName="WEBSER~1")) returned 1 [0033.831] FindNextFileW (in: hFindFile=0x381e40, lpFindFileData=0x31e56c | out: lpFindFileData=0x31e56c*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0033.831] FindClose (in: hFindFile=0x381e40 | out: hFindFile=0x381e40) returned 1 [0033.831] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e7f4) returned 1 [0033.831] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e800) returned 1 [0033.831] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e7bc) returned 1 [0033.831] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\DW", nBufferLength=0x105, lpBuffer=0x31e2c4, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Common Files\\Microsoft Shared\\DW", lpFilePart=0x0) returned 0x31 [0033.831] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\DW\\", nBufferLength=0x105, lpBuffer=0x31e298, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Common Files\\Microsoft Shared\\DW\\", lpFilePart=0x0) returned 0x32 [0033.831] FindFirstFileW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\DW\\*", lpFindFileData=0x31e4e4 | out: lpFindFileData=0x31e4e4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x51e19d30, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0xdbe166c0, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0xdbe166c0, ftLastWriteTime.dwHighDateTime=0x1d305eb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x381e40 [0033.833] FindNextFileW (in: hFindFile=0x381e40, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x51e19d30, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0xdbe166c0, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0xdbe166c0, ftLastWriteTime.dwHighDateTime=0x1d305eb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0033.833] FindNextFileW (in: hFindFile=0x381e40, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4a0ba500, ftCreationTime.dwHighDateTime=0x1c982ad, ftLastAccessTime.dwLowDateTime=0x6086b2d0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x4a0ba500, ftLastWriteTime.dwHighDateTime=0x1c982ad, nFileSizeHigh=0x0, nFileSizeLow=0x14e760, dwReserved0=0x0, dwReserved1=0x0, cFileName="DBGHELP.DLL", cAlternateFileName="")) returned 1 [0033.833] FindNextFileW (in: hFindFile=0x381e40, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2f8f7000, ftCreationTime.dwHighDateTime=0x1cba06d, ftLastAccessTime.dwLowDateTime=0xdb9ec040, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0x2f8f7000, ftLastWriteTime.dwHighDateTime=0x1cba06d, nFileSizeHigh=0x0, nFileSizeLow=0xf2b88, dwReserved0=0x0, dwReserved1=0x0, cFileName="DW20.EXE", cAlternateFileName="")) returned 1 [0033.833] FindNextFileW (in: hFindFile=0x381e40, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2e5e4300, ftCreationTime.dwHighDateTime=0x1cba06d, ftLastAccessTime.dwLowDateTime=0xdbe62980, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0x2e5e4300, ftLastWriteTime.dwHighDateTime=0x1cba06d, nFileSizeHigh=0x0, nFileSizeLow=0x99ba0, dwReserved0=0x0, dwReserved1=0x0, cFileName="DWTRIG20.EXE", cAlternateFileName="")) returned 1 [0033.833] FindNextFileW (in: hFindFile=0x381e40, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0033.833] FindClose (in: hFindFile=0x381e40 | out: hFindFile=0x381e40) returned 1 [0033.833] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e77c) returned 1 [0033.833] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e788) returned 1 [0033.833] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e7bc) returned 1 [0033.833] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\DW", nBufferLength=0x105, lpBuffer=0x31e2c4, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Common Files\\Microsoft Shared\\DW", lpFilePart=0x0) returned 0x31 [0033.833] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\DW\\", nBufferLength=0x105, lpBuffer=0x31e298, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Common Files\\Microsoft Shared\\DW\\", lpFilePart=0x0) returned 0x32 [0033.833] FindFirstFileW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\DW\\*", lpFindFileData=0x31e4e4 | out: lpFindFileData=0x31e4e4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x51e19d30, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0xdbe166c0, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0xdbe166c0, ftLastWriteTime.dwHighDateTime=0x1d305eb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x381e40 [0033.833] FindNextFileW (in: hFindFile=0x381e40, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x51e19d30, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0xdbe166c0, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0xdbe166c0, ftLastWriteTime.dwHighDateTime=0x1d305eb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0033.833] FindNextFileW (in: hFindFile=0x381e40, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4a0ba500, ftCreationTime.dwHighDateTime=0x1c982ad, ftLastAccessTime.dwLowDateTime=0x6086b2d0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x4a0ba500, ftLastWriteTime.dwHighDateTime=0x1c982ad, nFileSizeHigh=0x0, nFileSizeLow=0x14e760, dwReserved0=0x0, dwReserved1=0x0, cFileName="DBGHELP.DLL", cAlternateFileName="")) returned 1 [0033.833] FindNextFileW (in: hFindFile=0x381e40, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2f8f7000, ftCreationTime.dwHighDateTime=0x1cba06d, ftLastAccessTime.dwLowDateTime=0xdb9ec040, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0x2f8f7000, ftLastWriteTime.dwHighDateTime=0x1cba06d, nFileSizeHigh=0x0, nFileSizeLow=0xf2b88, dwReserved0=0x0, dwReserved1=0x0, cFileName="DW20.EXE", cAlternateFileName="")) returned 1 [0033.834] FindNextFileW (in: hFindFile=0x381e40, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2e5e4300, ftCreationTime.dwHighDateTime=0x1cba06d, ftLastAccessTime.dwLowDateTime=0xdbe62980, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0x2e5e4300, ftLastWriteTime.dwHighDateTime=0x1cba06d, nFileSizeHigh=0x0, nFileSizeLow=0x99ba0, dwReserved0=0x0, dwReserved1=0x0, cFileName="DWTRIG20.EXE", cAlternateFileName="")) returned 1 [0033.834] FindNextFileW (in: hFindFile=0x381e40, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2e5e4300, ftCreationTime.dwHighDateTime=0x1cba06d, ftLastAccessTime.dwLowDateTime=0xdbe62980, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0x2e5e4300, ftLastWriteTime.dwHighDateTime=0x1cba06d, nFileSizeHigh=0x0, nFileSizeLow=0x99ba0, dwReserved0=0x0, dwReserved1=0x0, cFileName="DWTRIG20.EXE", cAlternateFileName="")) returned 0 [0033.834] FindClose (in: hFindFile=0x381e40 | out: hFindFile=0x381e40) returned 1 [0033.834] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e77c) returned 1 [0033.834] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e788) returned 1 [0033.834] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e7bc) returned 1 [0033.834] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\EQUATION", nBufferLength=0x105, lpBuffer=0x31e2c4, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Common Files\\Microsoft Shared\\EQUATION", lpFilePart=0x0) returned 0x37 [0033.834] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\EQUATION\\", nBufferLength=0x105, lpBuffer=0x31e298, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Common Files\\Microsoft Shared\\EQUATION\\", lpFilePart=0x0) returned 0x38 [0033.834] FindFirstFileW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\EQUATION\\*", lpFindFileData=0x31e4e4 | out: lpFindFileData=0x31e4e4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeed38550, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xeef015d0, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xeef015d0, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x381e40 [0033.835] FindNextFileW (in: hFindFile=0x381e40, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeed38550, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xeef015d0, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xeef015d0, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0033.835] FindNextFileW (in: hFindFile=0x381e40, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeed38550, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xeed38550, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xeed38550, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="1033", cAlternateFileName="")) returned 1 [0033.835] FindNextFileW (in: hFindFile=0x381e40, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5d107e00, ftCreationTime.dwHighDateTime=0x1bb541c, ftLastAccessTime.dwLowDateTime=0xeed5e6b0, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0x5d107e00, ftLastWriteTime.dwHighDateTime=0x1bb541c, nFileSizeHigh=0x0, nFileSizeLow=0x9fd, dwReserved0=0x0, dwReserved1=0x0, cFileName="EQNEDT32.CNT", cAlternateFileName="")) returned 1 [0033.835] FindNextFileW (in: hFindFile=0x381e40, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x28305200, ftCreationTime.dwHighDateTime=0x1c2f1c2, ftLastAccessTime.dwLowDateTime=0xeed5e6b0, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0x28305200, ftLastWriteTime.dwHighDateTime=0x1c2f1c2, nFileSizeHigh=0x0, nFileSizeLow=0x84a48, dwReserved0=0x0, dwReserved1=0x0, cFileName="EQNEDT32.EXE", cAlternateFileName="")) returned 1 [0033.835] FindNextFileW (in: hFindFile=0x381e40, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3acd3b00, ftCreationTime.dwHighDateTime=0x1c6cca0, ftLastAccessTime.dwLowDateTime=0xeed5e6b0, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0x3acd3b00, ftLastWriteTime.dwHighDateTime=0x1c6cca0, nFileSizeHigh=0x0, nFileSizeLow=0x236, dwReserved0=0x0, dwReserved1=0x0, cFileName="eqnedt32.exe.manifest", cAlternateFileName="EQNEDT~1.MAN")) returned 1 [0033.835] FindNextFileW (in: hFindFile=0x381e40, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3bd0200, ftCreationTime.dwHighDateTime=0x1be1298, ftLastAccessTime.dwLowDateTime=0xeed5e6b0, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0x3bd0200, ftLastWriteTime.dwHighDateTime=0x1be1298, nFileSizeHigh=0x0, nFileSizeLow=0x2b0b7, dwReserved0=0x0, dwReserved1=0x0, cFileName="EQNEDT32.HLP", cAlternateFileName="")) returned 1 [0033.835] FindNextFileW (in: hFindFile=0x381e40, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x95fd7600, ftCreationTime.dwHighDateTime=0x1bc9dc7, ftLastAccessTime.dwLowDateTime=0xeef015d0, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0x95fd7600, ftLastWriteTime.dwHighDateTime=0x1bc9dc7, nFileSizeHigh=0x0, nFileSizeLow=0x1de8, dwReserved0=0x0, dwReserved1=0x0, cFileName="MTEXTRA.TTF", cAlternateFileName="")) returned 1 [0033.835] FindNextFileW (in: hFindFile=0x381e40, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0033.835] FindClose (in: hFindFile=0x381e40 | out: hFindFile=0x381e40) returned 1 [0033.836] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e77c) returned 1 [0033.836] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e788) returned 1 [0033.836] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e7bc) returned 1 [0033.836] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\EQUATION", nBufferLength=0x105, lpBuffer=0x31e2c4, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Common Files\\Microsoft Shared\\EQUATION", lpFilePart=0x0) returned 0x37 [0033.836] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\EQUATION\\", nBufferLength=0x105, lpBuffer=0x31e298, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Common Files\\Microsoft Shared\\EQUATION\\", lpFilePart=0x0) returned 0x38 [0033.836] FindFirstFileW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\EQUATION\\*", lpFindFileData=0x31e4e4 | out: lpFindFileData=0x31e4e4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeed38550, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xeef015d0, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xeef015d0, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x381e40 [0033.838] FindNextFileW (in: hFindFile=0x381e40, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeed38550, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xeef015d0, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xeef015d0, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0033.838] FindNextFileW (in: hFindFile=0x381e40, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeed38550, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xeed38550, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xeed38550, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="1033", cAlternateFileName="")) returned 1 [0033.838] FindNextFileW (in: hFindFile=0x381e40, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5d107e00, ftCreationTime.dwHighDateTime=0x1bb541c, ftLastAccessTime.dwLowDateTime=0xeed5e6b0, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0x5d107e00, ftLastWriteTime.dwHighDateTime=0x1bb541c, nFileSizeHigh=0x0, nFileSizeLow=0x9fd, dwReserved0=0x0, dwReserved1=0x0, cFileName="EQNEDT32.CNT", cAlternateFileName="")) returned 1 [0033.838] FindNextFileW (in: hFindFile=0x381e40, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x28305200, ftCreationTime.dwHighDateTime=0x1c2f1c2, ftLastAccessTime.dwLowDateTime=0xeed5e6b0, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0x28305200, ftLastWriteTime.dwHighDateTime=0x1c2f1c2, nFileSizeHigh=0x0, nFileSizeLow=0x84a48, dwReserved0=0x0, dwReserved1=0x0, cFileName="EQNEDT32.EXE", cAlternateFileName="")) returned 1 [0033.838] FindNextFileW (in: hFindFile=0x381e40, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3acd3b00, ftCreationTime.dwHighDateTime=0x1c6cca0, ftLastAccessTime.dwLowDateTime=0xeed5e6b0, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0x3acd3b00, ftLastWriteTime.dwHighDateTime=0x1c6cca0, nFileSizeHigh=0x0, nFileSizeLow=0x236, dwReserved0=0x0, dwReserved1=0x0, cFileName="eqnedt32.exe.manifest", cAlternateFileName="EQNEDT~1.MAN")) returned 1 [0033.838] FindNextFileW (in: hFindFile=0x381e40, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3bd0200, ftCreationTime.dwHighDateTime=0x1be1298, ftLastAccessTime.dwLowDateTime=0xeed5e6b0, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0x3bd0200, ftLastWriteTime.dwHighDateTime=0x1be1298, nFileSizeHigh=0x0, nFileSizeLow=0x2b0b7, dwReserved0=0x0, dwReserved1=0x0, cFileName="EQNEDT32.HLP", cAlternateFileName="")) returned 1 [0033.838] FindNextFileW (in: hFindFile=0x381e40, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x95fd7600, ftCreationTime.dwHighDateTime=0x1bc9dc7, ftLastAccessTime.dwLowDateTime=0xeef015d0, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0x95fd7600, ftLastWriteTime.dwHighDateTime=0x1bc9dc7, nFileSizeHigh=0x0, nFileSizeLow=0x1de8, dwReserved0=0x0, dwReserved1=0x0, cFileName="MTEXTRA.TTF", cAlternateFileName="")) returned 1 [0033.838] FindNextFileW (in: hFindFile=0x381e40, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x95fd7600, ftCreationTime.dwHighDateTime=0x1bc9dc7, ftLastAccessTime.dwLowDateTime=0xeef015d0, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0x95fd7600, ftLastWriteTime.dwHighDateTime=0x1bc9dc7, nFileSizeHigh=0x0, nFileSizeLow=0x1de8, dwReserved0=0x0, dwReserved1=0x0, cFileName="MTEXTRA.TTF", cAlternateFileName="")) returned 0 [0033.838] FindClose (in: hFindFile=0x381e40 | out: hFindFile=0x381e40) returned 1 [0033.839] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e77c) returned 1 [0033.839] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e788) returned 1 [0033.839] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e744) returned 1 [0033.839] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\EQUATION\\1033", nBufferLength=0x105, lpBuffer=0x31e24c, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Common Files\\Microsoft Shared\\EQUATION\\1033", lpFilePart=0x0) returned 0x3c [0033.839] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\EQUATION\\1033\\", nBufferLength=0x105, lpBuffer=0x31e220, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Common Files\\Microsoft Shared\\EQUATION\\1033\\", lpFilePart=0x0) returned 0x3d [0033.839] FindFirstFileW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\EQUATION\\1033\\*", lpFindFileData=0x31e46c | out: lpFindFileData=0x31e46c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeed38550, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xeed38550, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xeed38550, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x381e40 [0033.840] FindNextFileW (in: hFindFile=0x381e40, lpFindFileData=0x31e47c | out: lpFindFileData=0x31e47c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeed38550, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xeed38550, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xeed38550, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0033.841] FindNextFileW (in: hFindFile=0x381e40, lpFindFileData=0x31e47c | out: lpFindFileData=0x31e47c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x723f8e00, ftCreationTime.dwHighDateTime=0x1c2e156, ftLastAccessTime.dwLowDateTime=0xeed38550, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0x723f8e00, ftLastWriteTime.dwHighDateTime=0x1c2e156, nFileSizeHigh=0x0, nFileSizeLow=0xfa60, dwReserved0=0x0, dwReserved1=0x0, cFileName="EEINTL.DLL", cAlternateFileName="")) returned 1 [0033.841] FindNextFileW (in: hFindFile=0x381e40, lpFindFileData=0x31e47c | out: lpFindFileData=0x31e47c*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0033.841] FindClose (in: hFindFile=0x381e40 | out: hFindFile=0x381e40) returned 1 [0033.841] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e704) returned 1 [0033.841] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e710) returned 1 [0033.841] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e744) returned 1 [0033.841] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\EQUATION\\1033", nBufferLength=0x105, lpBuffer=0x31e24c, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Common Files\\Microsoft Shared\\EQUATION\\1033", lpFilePart=0x0) returned 0x3c [0033.841] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\EQUATION\\1033\\", nBufferLength=0x105, lpBuffer=0x31e220, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Common Files\\Microsoft Shared\\EQUATION\\1033\\", lpFilePart=0x0) returned 0x3d [0033.841] FindFirstFileW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\EQUATION\\1033\\*", lpFindFileData=0x31e46c | out: lpFindFileData=0x31e46c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeed38550, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xeed38550, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xeed38550, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x381e40 [0033.841] FindNextFileW (in: hFindFile=0x381e40, lpFindFileData=0x31e47c | out: lpFindFileData=0x31e47c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeed38550, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xeed38550, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xeed38550, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0033.841] FindNextFileW (in: hFindFile=0x381e40, lpFindFileData=0x31e47c | out: lpFindFileData=0x31e47c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x723f8e00, ftCreationTime.dwHighDateTime=0x1c2e156, ftLastAccessTime.dwLowDateTime=0xeed38550, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0x723f8e00, ftLastWriteTime.dwHighDateTime=0x1c2e156, nFileSizeHigh=0x0, nFileSizeLow=0xfa60, dwReserved0=0x0, dwReserved1=0x0, cFileName="EEINTL.DLL", cAlternateFileName="")) returned 1 [0033.841] FindNextFileW (in: hFindFile=0x381e40, lpFindFileData=0x31e47c | out: lpFindFileData=0x31e47c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x723f8e00, ftCreationTime.dwHighDateTime=0x1c2e156, ftLastAccessTime.dwLowDateTime=0xeed38550, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0x723f8e00, ftLastWriteTime.dwHighDateTime=0x1c2e156, nFileSizeHigh=0x0, nFileSizeLow=0xfa60, dwReserved0=0x0, dwReserved1=0x0, cFileName="EEINTL.DLL", cAlternateFileName="")) returned 0 [0033.841] FindClose (in: hFindFile=0x381e40 | out: hFindFile=0x381e40) returned 1 [0033.841] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e704) returned 1 [0033.841] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e710) returned 1 [0033.841] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e7bc) returned 1 [0033.841] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\EURO", nBufferLength=0x105, lpBuffer=0x31e2c4, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Common Files\\Microsoft Shared\\EURO", lpFilePart=0x0) returned 0x33 [0033.841] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\EURO\\", nBufferLength=0x105, lpBuffer=0x31e298, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Common Files\\Microsoft Shared\\EURO\\", lpFilePart=0x0) returned 0x34 [0033.841] FindFirstFileW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\EURO\\*", lpFindFileData=0x31e4e4 | out: lpFindFileData=0x31e4e4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x58c7d970, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x58c7d970, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x58c7d970, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x381e40 [0033.842] FindNextFileW (in: hFindFile=0x381e40, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x58c7d970, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x58c7d970, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x58c7d970, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0033.843] FindNextFileW (in: hFindFile=0x381e40, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6b4ffc00, ftCreationTime.dwHighDateTime=0x1cac1f6, ftLastAccessTime.dwLowDateTime=0x58c7d970, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x6b4ffc00, ftLastWriteTime.dwHighDateTime=0x1cac1f6, nFileSizeHigh=0x0, nFileSizeLow=0x7980, dwReserved0=0x0, dwReserved1=0x0, cFileName="MSOEURO.DLL", cAlternateFileName="")) returned 1 [0033.843] FindNextFileW (in: hFindFile=0x381e40, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0033.843] FindClose (in: hFindFile=0x381e40 | out: hFindFile=0x381e40) returned 1 [0033.843] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e77c) returned 1 [0033.843] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e788) returned 1 [0033.843] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e7bc) returned 1 [0033.843] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\EURO", nBufferLength=0x105, lpBuffer=0x31e2c4, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Common Files\\Microsoft Shared\\EURO", lpFilePart=0x0) returned 0x33 [0033.843] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\EURO\\", nBufferLength=0x105, lpBuffer=0x31e298, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Common Files\\Microsoft Shared\\EURO\\", lpFilePart=0x0) returned 0x34 [0033.843] FindFirstFileW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\EURO\\*", lpFindFileData=0x31e4e4 | out: lpFindFileData=0x31e4e4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x58c7d970, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x58c7d970, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x58c7d970, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x381e40 [0033.843] FindNextFileW (in: hFindFile=0x381e40, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x58c7d970, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x58c7d970, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x58c7d970, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0033.843] FindNextFileW (in: hFindFile=0x381e40, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6b4ffc00, ftCreationTime.dwHighDateTime=0x1cac1f6, ftLastAccessTime.dwLowDateTime=0x58c7d970, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x6b4ffc00, ftLastWriteTime.dwHighDateTime=0x1cac1f6, nFileSizeHigh=0x0, nFileSizeLow=0x7980, dwReserved0=0x0, dwReserved1=0x0, cFileName="MSOEURO.DLL", cAlternateFileName="")) returned 1 [0033.843] FindNextFileW (in: hFindFile=0x381e40, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6b4ffc00, ftCreationTime.dwHighDateTime=0x1cac1f6, ftLastAccessTime.dwLowDateTime=0x58c7d970, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x6b4ffc00, ftLastWriteTime.dwHighDateTime=0x1cac1f6, nFileSizeHigh=0x0, nFileSizeLow=0x7980, dwReserved0=0x0, dwReserved1=0x0, cFileName="MSOEURO.DLL", cAlternateFileName="")) returned 0 [0033.843] FindClose (in: hFindFile=0x381e40 | out: hFindFile=0x381e40) returned 1 [0033.843] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e77c) returned 1 [0033.843] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e788) returned 1 [0033.843] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e7bc) returned 1 [0033.843] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\Filters", nBufferLength=0x105, lpBuffer=0x31e2c4, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Common Files\\Microsoft Shared\\Filters", lpFilePart=0x0) returned 0x36 [0033.843] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\Filters\\", nBufferLength=0x105, lpBuffer=0x31e298, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Common Files\\Microsoft Shared\\Filters\\", lpFilePart=0x0) returned 0x37 [0033.843] FindFirstFileW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\Filters\\*", lpFindFileData=0x31e4e4 | out: lpFindFileData=0x31e4e4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5969b6f0, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0xd9df3dc0, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0xd9df3dc0, ftLastWriteTime.dwHighDateTime=0x1d305eb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x381e40 [0033.844] FindNextFileW (in: hFindFile=0x381e40, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5969b6f0, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0xd9df3dc0, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0xd9df3dc0, ftLastWriteTime.dwHighDateTime=0x1d305eb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0033.844] FindNextFileW (in: hFindFile=0x381e40, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4e922100, ftCreationTime.dwHighDateTime=0x1caafc8, ftLastAccessTime.dwLowDateTime=0x69e61cd0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x4e922100, ftLastWriteTime.dwHighDateTime=0x1caafc8, nFileSizeHigh=0x0, nFileSizeLow=0x9770, dwReserved0=0x0, dwReserved1=0x0, cFileName="msgfilt.dll", cAlternateFileName="")) returned 1 [0033.845] FindNextFileW (in: hFindFile=0x381e40, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4e922100, ftCreationTime.dwHighDateTime=0x1caafc8, ftLastAccessTime.dwLowDateTime=0x6b29d7d0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x4e922100, ftLastWriteTime.dwHighDateTime=0x1caafc8, nFileSizeHigh=0x0, nFileSizeLow=0x140790, dwReserved0=0x0, dwReserved1=0x0, cFileName="odffilt.dll", cAlternateFileName="")) returned 1 [0033.845] FindNextFileW (in: hFindFile=0x381e40, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4e922100, ftCreationTime.dwHighDateTime=0x1caafc8, ftLastAccessTime.dwLowDateTime=0x596c1850, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x4e922100, ftLastWriteTime.dwHighDateTime=0x1caafc8, nFileSizeHigh=0x0, nFileSizeLow=0x16af90, dwReserved0=0x0, dwReserved1=0x0, cFileName="offfiltx.dll", cAlternateFileName="")) returned 1 [0033.845] FindNextFileW (in: hFindFile=0x381e40, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x46d35b00, ftCreationTime.dwHighDateTime=0x1cba077, ftLastAccessTime.dwLowDateTime=0xd9e40080, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0x46d35b00, ftLastWriteTime.dwHighDateTime=0x1cba077, nFileSizeHigh=0x0, nFileSizeLow=0x206b78, dwReserved0=0x0, dwReserved1=0x0, cFileName="VISFILT.DLL", cAlternateFileName="")) returned 1 [0033.845] FindNextFileW (in: hFindFile=0x381e40, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0033.845] FindClose (in: hFindFile=0x381e40 | out: hFindFile=0x381e40) returned 1 [0033.845] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e77c) returned 1 [0033.845] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e788) returned 1 [0033.845] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e7bc) returned 1 [0033.845] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\Filters", nBufferLength=0x105, lpBuffer=0x31e2c4, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Common Files\\Microsoft Shared\\Filters", lpFilePart=0x0) returned 0x36 [0033.845] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\Filters\\", nBufferLength=0x105, lpBuffer=0x31e298, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Common Files\\Microsoft Shared\\Filters\\", lpFilePart=0x0) returned 0x37 [0033.845] FindFirstFileW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\Filters\\*", lpFindFileData=0x31e4e4 | out: lpFindFileData=0x31e4e4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5969b6f0, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0xd9df3dc0, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0xd9df3dc0, ftLastWriteTime.dwHighDateTime=0x1d305eb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x381e40 [0033.845] FindNextFileW (in: hFindFile=0x381e40, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5969b6f0, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0xd9df3dc0, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0xd9df3dc0, ftLastWriteTime.dwHighDateTime=0x1d305eb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0033.845] FindNextFileW (in: hFindFile=0x381e40, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4e922100, ftCreationTime.dwHighDateTime=0x1caafc8, ftLastAccessTime.dwLowDateTime=0x69e61cd0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x4e922100, ftLastWriteTime.dwHighDateTime=0x1caafc8, nFileSizeHigh=0x0, nFileSizeLow=0x9770, dwReserved0=0x0, dwReserved1=0x0, cFileName="msgfilt.dll", cAlternateFileName="")) returned 1 [0033.845] FindNextFileW (in: hFindFile=0x381e40, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4e922100, ftCreationTime.dwHighDateTime=0x1caafc8, ftLastAccessTime.dwLowDateTime=0x6b29d7d0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x4e922100, ftLastWriteTime.dwHighDateTime=0x1caafc8, nFileSizeHigh=0x0, nFileSizeLow=0x140790, dwReserved0=0x0, dwReserved1=0x0, cFileName="odffilt.dll", cAlternateFileName="")) returned 1 [0033.845] FindNextFileW (in: hFindFile=0x381e40, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4e922100, ftCreationTime.dwHighDateTime=0x1caafc8, ftLastAccessTime.dwLowDateTime=0x596c1850, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x4e922100, ftLastWriteTime.dwHighDateTime=0x1caafc8, nFileSizeHigh=0x0, nFileSizeLow=0x16af90, dwReserved0=0x0, dwReserved1=0x0, cFileName="offfiltx.dll", cAlternateFileName="")) returned 1 [0033.845] FindNextFileW (in: hFindFile=0x381e40, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x46d35b00, ftCreationTime.dwHighDateTime=0x1cba077, ftLastAccessTime.dwLowDateTime=0xd9e40080, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0x46d35b00, ftLastWriteTime.dwHighDateTime=0x1cba077, nFileSizeHigh=0x0, nFileSizeLow=0x206b78, dwReserved0=0x0, dwReserved1=0x0, cFileName="VISFILT.DLL", cAlternateFileName="")) returned 1 [0033.845] FindNextFileW (in: hFindFile=0x381e40, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x46d35b00, ftCreationTime.dwHighDateTime=0x1cba077, ftLastAccessTime.dwLowDateTime=0xd9e40080, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0x46d35b00, ftLastWriteTime.dwHighDateTime=0x1cba077, nFileSizeHigh=0x0, nFileSizeLow=0x206b78, dwReserved0=0x0, dwReserved1=0x0, cFileName="VISFILT.DLL", cAlternateFileName="")) returned 0 [0033.845] FindClose (in: hFindFile=0x381e40 | out: hFindFile=0x381e40) returned 1 [0033.845] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e77c) returned 1 [0033.845] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e788) returned 1 [0033.845] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e7bc) returned 1 [0033.845] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\GRPHFLT", nBufferLength=0x105, lpBuffer=0x31e2c4, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Common Files\\Microsoft Shared\\GRPHFLT", lpFilePart=0x0) returned 0x36 [0033.846] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\GRPHFLT\\", nBufferLength=0x105, lpBuffer=0x31e298, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Common Files\\Microsoft Shared\\GRPHFLT\\", lpFilePart=0x0) returned 0x37 [0033.846] FindFirstFileW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\GRPHFLT\\*", lpFindFileData=0x31e4e4 | out: lpFindFileData=0x31e4e4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeec79e70, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xc25b4860, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0xc25b4860, ftLastWriteTime.dwHighDateTime=0x1d305eb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x381e40 [0033.848] FindNextFileW (in: hFindFile=0x381e40, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeec79e70, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xc25b4860, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0xc25b4860, ftLastWriteTime.dwHighDateTime=0x1d305eb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0033.848] FindNextFileW (in: hFindFile=0x381e40, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x916cf600, ftCreationTime.dwHighDateTime=0x1bcabec, ftLastAccessTime.dwLowDateTime=0xeec79e70, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0x916cf600, ftLastWriteTime.dwHighDateTime=0x1bcabec, nFileSizeHigh=0x0, nFileSizeLow=0x1a9b, dwReserved0=0x0, dwReserved1=0x0, cFileName="CGMIMP32.CFG", cAlternateFileName="")) returned 1 [0033.848] FindNextFileW (in: hFindFile=0x381e40, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xfda4ec00, ftCreationTime.dwHighDateTime=0x1cba021, ftLastAccessTime.dwLowDateTime=0xc22488c0, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0xfda4ec00, ftLastWriteTime.dwHighDateTime=0x1cba021, nFileSizeHigh=0x0, nFileSizeLow=0x4f160, dwReserved0=0x0, dwReserved1=0x0, cFileName="CGMIMP32.FLT", cAlternateFileName="")) returned 1 [0033.848] FindNextFileW (in: hFindFile=0x381e40, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x916cf600, ftCreationTime.dwHighDateTime=0x1bcabec, ftLastAccessTime.dwLowDateTime=0xeec79e70, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0x916cf600, ftLastWriteTime.dwHighDateTime=0x1bcabec, nFileSizeHigh=0x0, nFileSizeLow=0x93f6e, dwReserved0=0x0, dwReserved1=0x0, cFileName="CGMIMP32.FNT", cAlternateFileName="")) returned 1 [0033.848] FindNextFileW (in: hFindFile=0x381e40, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe8a19600, ftCreationTime.dwHighDateTime=0x1caa4ff, ftLastAccessTime.dwLowDateTime=0xeed5e6b0, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xe8a19600, ftLastWriteTime.dwHighDateTime=0x1caa4ff, nFileSizeHigh=0x0, nFileSizeLow=0xadf90, dwReserved0=0x0, dwReserved1=0x0, cFileName="EPSIMP32.FLT", cAlternateFileName="")) returned 1 [0033.848] FindNextFileW (in: hFindFile=0x381e40, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe8a19600, ftCreationTime.dwHighDateTime=0x1caa4ff, ftLastAccessTime.dwLowDateTime=0xeedd0ad0, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xe8a19600, ftLastWriteTime.dwHighDateTime=0x1caa4ff, nFileSizeHigh=0x0, nFileSizeLow=0x4e380, dwReserved0=0x0, dwReserved1=0x0, cFileName="GIFIMP32.FLT", cAlternateFileName="")) returned 1 [0033.848] FindNextFileW (in: hFindFile=0x381e40, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe8a19600, ftCreationTime.dwHighDateTime=0x1caa4ff, ftLastAccessTime.dwLowDateTime=0xeee1cd90, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xe8a19600, ftLastWriteTime.dwHighDateTime=0x1caa4ff, nFileSizeHigh=0x0, nFileSizeLow=0x3ad80, dwReserved0=0x0, dwReserved1=0x0, cFileName="JPEGIM32.FLT", cAlternateFileName="")) returned 1 [0033.848] FindNextFileW (in: hFindFile=0x381e40, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x916cf600, ftCreationTime.dwHighDateTime=0x1bcabec, ftLastAccessTime.dwLowDateTime=0xeee42ef0, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0x916cf600, ftLastWriteTime.dwHighDateTime=0x1bcabec, nFileSizeHigh=0x0, nFileSizeLow=0x774, dwReserved0=0x0, dwReserved1=0x0, cFileName="MS.CGM", cAlternateFileName="")) returned 1 [0033.848] FindNextFileW (in: hFindFile=0x381e40, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x916cf600, ftCreationTime.dwHighDateTime=0x1bcabec, ftLastAccessTime.dwLowDateTime=0xeee42ef0, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0x916cf600, ftLastWriteTime.dwHighDateTime=0x1bcabec, nFileSizeHigh=0x0, nFileSizeLow=0x3adb, dwReserved0=0x0, dwReserved1=0x0, cFileName="MS.EPS", cAlternateFileName="")) returned 1 [0033.848] FindNextFileW (in: hFindFile=0x381e40, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x916cf600, ftCreationTime.dwHighDateTime=0x1bcabec, ftLastAccessTime.dwLowDateTime=0xeee42ef0, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0x916cf600, ftLastWriteTime.dwHighDateTime=0x1bcabec, nFileSizeHigh=0x0, nFileSizeLow=0x42d, dwReserved0=0x0, dwReserved1=0x0, cFileName="MS.GIF", cAlternateFileName="")) returned 1 [0033.848] FindNextFileW (in: hFindFile=0x381e40, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x916cf600, ftCreationTime.dwHighDateTime=0x1bcabec, ftLastAccessTime.dwLowDateTime=0xeee42ef0, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0x916cf600, ftLastWriteTime.dwHighDateTime=0x1bcabec, nFileSizeHigh=0x0, nFileSizeLow=0x425, dwReserved0=0x0, dwReserved1=0x0, cFileName="MS.JPG", cAlternateFileName="")) returned 1 [0033.848] FindNextFileW (in: hFindFile=0x381e40, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x916cf600, ftCreationTime.dwHighDateTime=0x1bcabec, ftLastAccessTime.dwLowDateTime=0xeee42ef0, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0x916cf600, ftLastWriteTime.dwHighDateTime=0x1bcabec, nFileSizeHigh=0x0, nFileSizeLow=0x692, dwReserved0=0x0, dwReserved1=0x0, cFileName="MS.PNG", cAlternateFileName="")) returned 1 [0033.848] FindNextFileW (in: hFindFile=0x381e40, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x916cf600, ftCreationTime.dwHighDateTime=0x1bcabec, ftLastAccessTime.dwLowDateTime=0xeee42ef0, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0x916cf600, ftLastWriteTime.dwHighDateTime=0x1bcabec, nFileSizeHigh=0x0, nFileSizeLow=0x566, dwReserved0=0x0, dwReserved1=0x0, cFileName="MS.WPG", cAlternateFileName="")) returned 1 [0033.848] FindNextFileW (in: hFindFile=0x381e40, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe8a19600, ftCreationTime.dwHighDateTime=0x1caa4ff, ftLastAccessTime.dwLowDateTime=0xeefe5e10, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xe8a19600, ftLastWriteTime.dwHighDateTime=0x1caa4ff, nFileSizeHigh=0x0, nFileSizeLow=0x11d78, dwReserved0=0x0, dwReserved1=0x0, cFileName="PICTIM32.FLT", cAlternateFileName="")) returned 1 [0033.848] FindNextFileW (in: hFindFile=0x381e40, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe8a19600, ftCreationTime.dwHighDateTime=0x1caa4ff, ftLastAccessTime.dwLowDateTime=0xeefe5e10, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xe8a19600, ftLastWriteTime.dwHighDateTime=0x1caa4ff, nFileSizeHigh=0x0, nFileSizeLow=0x49f80, dwReserved0=0x0, dwReserved1=0x0, cFileName="PNG32.FLT", cAlternateFileName="")) returned 1 [0033.848] FindNextFileW (in: hFindFile=0x381e40, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd53d4900, ftCreationTime.dwHighDateTime=0x1cb7002, ftLastAccessTime.dwLowDateTime=0xc25b4860, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0xd53d4900, ftLastWriteTime.dwHighDateTime=0x1cb7002, nFileSizeHigh=0x0, nFileSizeLow=0x44780, dwReserved0=0x0, dwReserved1=0x0, cFileName="WPGIMP32.FLT", cAlternateFileName="")) returned 1 [0033.848] FindNextFileW (in: hFindFile=0x381e40, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0033.848] FindClose (in: hFindFile=0x381e40 | out: hFindFile=0x381e40) returned 1 [0033.849] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e77c) returned 1 [0033.849] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e788) returned 1 [0033.849] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e7bc) returned 1 [0033.849] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\GRPHFLT", nBufferLength=0x105, lpBuffer=0x31e2c4, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Common Files\\Microsoft Shared\\GRPHFLT", lpFilePart=0x0) returned 0x36 [0033.849] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\GRPHFLT\\", nBufferLength=0x105, lpBuffer=0x31e298, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Common Files\\Microsoft Shared\\GRPHFLT\\", lpFilePart=0x0) returned 0x37 [0033.849] FindFirstFileW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\GRPHFLT\\*", lpFindFileData=0x31e4e4 | out: lpFindFileData=0x31e4e4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeec79e70, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xc25b4860, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0xc25b4860, ftLastWriteTime.dwHighDateTime=0x1d305eb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x381e40 [0033.850] FindNextFileW (in: hFindFile=0x381e40, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeec79e70, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xc25b4860, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0xc25b4860, ftLastWriteTime.dwHighDateTime=0x1d305eb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0033.850] FindNextFileW (in: hFindFile=0x381e40, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x916cf600, ftCreationTime.dwHighDateTime=0x1bcabec, ftLastAccessTime.dwLowDateTime=0xeec79e70, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0x916cf600, ftLastWriteTime.dwHighDateTime=0x1bcabec, nFileSizeHigh=0x0, nFileSizeLow=0x1a9b, dwReserved0=0x0, dwReserved1=0x0, cFileName="CGMIMP32.CFG", cAlternateFileName="")) returned 1 [0033.850] FindNextFileW (in: hFindFile=0x381e40, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xfda4ec00, ftCreationTime.dwHighDateTime=0x1cba021, ftLastAccessTime.dwLowDateTime=0xc22488c0, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0xfda4ec00, ftLastWriteTime.dwHighDateTime=0x1cba021, nFileSizeHigh=0x0, nFileSizeLow=0x4f160, dwReserved0=0x0, dwReserved1=0x0, cFileName="CGMIMP32.FLT", cAlternateFileName="")) returned 1 [0033.850] FindNextFileW (in: hFindFile=0x381e40, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x916cf600, ftCreationTime.dwHighDateTime=0x1bcabec, ftLastAccessTime.dwLowDateTime=0xeec79e70, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0x916cf600, ftLastWriteTime.dwHighDateTime=0x1bcabec, nFileSizeHigh=0x0, nFileSizeLow=0x93f6e, dwReserved0=0x0, dwReserved1=0x0, cFileName="CGMIMP32.FNT", cAlternateFileName="")) returned 1 [0033.850] FindNextFileW (in: hFindFile=0x381e40, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe8a19600, ftCreationTime.dwHighDateTime=0x1caa4ff, ftLastAccessTime.dwLowDateTime=0xeed5e6b0, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xe8a19600, ftLastWriteTime.dwHighDateTime=0x1caa4ff, nFileSizeHigh=0x0, nFileSizeLow=0xadf90, dwReserved0=0x0, dwReserved1=0x0, cFileName="EPSIMP32.FLT", cAlternateFileName="")) returned 1 [0033.850] FindNextFileW (in: hFindFile=0x381e40, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe8a19600, ftCreationTime.dwHighDateTime=0x1caa4ff, ftLastAccessTime.dwLowDateTime=0xeedd0ad0, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xe8a19600, ftLastWriteTime.dwHighDateTime=0x1caa4ff, nFileSizeHigh=0x0, nFileSizeLow=0x4e380, dwReserved0=0x0, dwReserved1=0x0, cFileName="GIFIMP32.FLT", cAlternateFileName="")) returned 1 [0033.850] FindNextFileW (in: hFindFile=0x381e40, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe8a19600, ftCreationTime.dwHighDateTime=0x1caa4ff, ftLastAccessTime.dwLowDateTime=0xeee1cd90, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xe8a19600, ftLastWriteTime.dwHighDateTime=0x1caa4ff, nFileSizeHigh=0x0, nFileSizeLow=0x3ad80, dwReserved0=0x0, dwReserved1=0x0, cFileName="JPEGIM32.FLT", cAlternateFileName="")) returned 1 [0033.850] FindNextFileW (in: hFindFile=0x381e40, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x916cf600, ftCreationTime.dwHighDateTime=0x1bcabec, ftLastAccessTime.dwLowDateTime=0xeee42ef0, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0x916cf600, ftLastWriteTime.dwHighDateTime=0x1bcabec, nFileSizeHigh=0x0, nFileSizeLow=0x774, dwReserved0=0x0, dwReserved1=0x0, cFileName="MS.CGM", cAlternateFileName="")) returned 1 [0033.850] FindNextFileW (in: hFindFile=0x381e40, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x916cf600, ftCreationTime.dwHighDateTime=0x1bcabec, ftLastAccessTime.dwLowDateTime=0xeee42ef0, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0x916cf600, ftLastWriteTime.dwHighDateTime=0x1bcabec, nFileSizeHigh=0x0, nFileSizeLow=0x3adb, dwReserved0=0x0, dwReserved1=0x0, cFileName="MS.EPS", cAlternateFileName="")) returned 1 [0033.850] FindNextFileW (in: hFindFile=0x381e40, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x916cf600, ftCreationTime.dwHighDateTime=0x1bcabec, ftLastAccessTime.dwLowDateTime=0xeee42ef0, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0x916cf600, ftLastWriteTime.dwHighDateTime=0x1bcabec, nFileSizeHigh=0x0, nFileSizeLow=0x42d, dwReserved0=0x0, dwReserved1=0x0, cFileName="MS.GIF", cAlternateFileName="")) returned 1 [0033.850] FindNextFileW (in: hFindFile=0x381e40, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x916cf600, ftCreationTime.dwHighDateTime=0x1bcabec, ftLastAccessTime.dwLowDateTime=0xeee42ef0, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0x916cf600, ftLastWriteTime.dwHighDateTime=0x1bcabec, nFileSizeHigh=0x0, nFileSizeLow=0x425, dwReserved0=0x0, dwReserved1=0x0, cFileName="MS.JPG", cAlternateFileName="")) returned 1 [0033.851] FindNextFileW (in: hFindFile=0x381e40, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x916cf600, ftCreationTime.dwHighDateTime=0x1bcabec, ftLastAccessTime.dwLowDateTime=0xeee42ef0, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0x916cf600, ftLastWriteTime.dwHighDateTime=0x1bcabec, nFileSizeHigh=0x0, nFileSizeLow=0x692, dwReserved0=0x0, dwReserved1=0x0, cFileName="MS.PNG", cAlternateFileName="")) returned 1 [0033.851] FindNextFileW (in: hFindFile=0x381e40, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x916cf600, ftCreationTime.dwHighDateTime=0x1bcabec, ftLastAccessTime.dwLowDateTime=0xeee42ef0, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0x916cf600, ftLastWriteTime.dwHighDateTime=0x1bcabec, nFileSizeHigh=0x0, nFileSizeLow=0x566, dwReserved0=0x0, dwReserved1=0x0, cFileName="MS.WPG", cAlternateFileName="")) returned 1 [0033.851] FindNextFileW (in: hFindFile=0x381e40, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe8a19600, ftCreationTime.dwHighDateTime=0x1caa4ff, ftLastAccessTime.dwLowDateTime=0xeefe5e10, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xe8a19600, ftLastWriteTime.dwHighDateTime=0x1caa4ff, nFileSizeHigh=0x0, nFileSizeLow=0x11d78, dwReserved0=0x0, dwReserved1=0x0, cFileName="PICTIM32.FLT", cAlternateFileName="")) returned 1 [0033.851] FindNextFileW (in: hFindFile=0x381e40, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe8a19600, ftCreationTime.dwHighDateTime=0x1caa4ff, ftLastAccessTime.dwLowDateTime=0xeefe5e10, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xe8a19600, ftLastWriteTime.dwHighDateTime=0x1caa4ff, nFileSizeHigh=0x0, nFileSizeLow=0x49f80, dwReserved0=0x0, dwReserved1=0x0, cFileName="PNG32.FLT", cAlternateFileName="")) returned 1 [0033.851] FindNextFileW (in: hFindFile=0x381e40, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd53d4900, ftCreationTime.dwHighDateTime=0x1cb7002, ftLastAccessTime.dwLowDateTime=0xc25b4860, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0xd53d4900, ftLastWriteTime.dwHighDateTime=0x1cb7002, nFileSizeHigh=0x0, nFileSizeLow=0x44780, dwReserved0=0x0, dwReserved1=0x0, cFileName="WPGIMP32.FLT", cAlternateFileName="")) returned 1 [0033.851] FindNextFileW (in: hFindFile=0x381e40, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd53d4900, ftCreationTime.dwHighDateTime=0x1cb7002, ftLastAccessTime.dwLowDateTime=0xc25b4860, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0xd53d4900, ftLastWriteTime.dwHighDateTime=0x1cb7002, nFileSizeHigh=0x0, nFileSizeLow=0x44780, dwReserved0=0x0, dwReserved1=0x0, cFileName="WPGIMP32.FLT", cAlternateFileName="")) returned 0 [0033.851] FindClose (in: hFindFile=0x381e40 | out: hFindFile=0x381e40) returned 1 [0033.851] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e77c) returned 1 [0033.851] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e788) returned 1 [0033.851] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e7bc) returned 1 [0033.852] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\Help", nBufferLength=0x105, lpBuffer=0x31e2c4, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Common Files\\Microsoft Shared\\Help", lpFilePart=0x0) returned 0x33 [0033.852] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\Help\\", nBufferLength=0x105, lpBuffer=0x31e298, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Common Files\\Microsoft Shared\\Help\\", lpFilePart=0x0) returned 0x34 [0033.852] FindFirstFileW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\Help\\*", lpFindFileData=0x31e4e4 | out: lpFindFileData=0x31e4e4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee282250, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0x61073d10, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x61073d10, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x381e40 [0033.852] FindNextFileW (in: hFindFile=0x381e40, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee282250, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0x61073d10, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x61073d10, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0033.852] FindNextFileW (in: hFindFile=0x381e40, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe777f900, ftCreationTime.dwHighDateTime=0x1c8bc89, ftLastAccessTime.dwLowDateTime=0x60d54030, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xe777f900, ftLastWriteTime.dwHighDateTime=0x1c8bc89, nFileSizeHigh=0x0, nFileSizeLow=0x133200, dwReserved0=0x0, dwReserved1=0x0, cFileName="hxds.dll", cAlternateFileName="")) returned 1 [0033.852] FindNextFileW (in: hFindFile=0x381e40, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe3e47200, ftCreationTime.dwHighDateTime=0x1c8bc89, ftLastAccessTime.dwLowDateTime=0x522dc930, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xe3e47200, ftLastWriteTime.dwHighDateTime=0x1c8bc89, nFileSizeHigh=0x0, nFileSizeLow=0x1bf200, dwReserved0=0x0, dwReserved1=0x0, cFileName="ITIRCL55.DLL", cAlternateFileName="")) returned 1 [0033.852] FindNextFileW (in: hFindFile=0x381e40, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe777f900, ftCreationTime.dwHighDateTime=0x1c8bc89, ftLastAccessTime.dwLowDateTime=0x616b36d0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xe777f900, ftLastWriteTime.dwHighDateTime=0x1c8bc89, nFileSizeHigh=0x0, nFileSizeLow=0x69000, dwReserved0=0x0, dwReserved1=0x0, cFileName="msitss55.dll", cAlternateFileName="")) returned 1 [0033.852] FindNextFileW (in: hFindFile=0x381e40, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0033.852] FindClose (in: hFindFile=0x381e40 | out: hFindFile=0x381e40) returned 1 [0033.852] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e77c) returned 1 [0033.853] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e788) returned 1 [0033.853] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e7bc) returned 1 [0033.853] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\Help", nBufferLength=0x105, lpBuffer=0x31e2c4, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Common Files\\Microsoft Shared\\Help", lpFilePart=0x0) returned 0x33 [0033.853] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\Help\\", nBufferLength=0x105, lpBuffer=0x31e298, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Common Files\\Microsoft Shared\\Help\\", lpFilePart=0x0) returned 0x34 [0033.853] FindFirstFileW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\Help\\*", lpFindFileData=0x31e4e4 | out: lpFindFileData=0x31e4e4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee282250, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0x61073d10, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x61073d10, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x381e40 [0033.853] FindClose (in: hFindFile=0x381e40 | out: hFindFile=0x381e40) returned 1 [0033.853] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e77c) returned 1 [0033.853] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e788) returned 1 [0033.854] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e7bc) returned 1 [0033.854] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\ink", nBufferLength=0x105, lpBuffer=0x31e2c4, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Common Files\\Microsoft Shared\\ink", lpFilePart=0x0) returned 0x32 [0033.854] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\", nBufferLength=0x105, lpBuffer=0x31e298, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\", lpFilePart=0x0) returned 0x33 [0033.854] FindFirstFileW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\*", lpFindFileData=0x31e4e4 | out: lpFindFileData=0x31e4e4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd7545b2, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x9e0df36a, ftLastAccessTime.dwHighDateTime=0x1cbf8eb, ftLastWriteTime.dwLowDateTime=0x9e0df36a, ftLastWriteTime.dwHighDateTime=0x1cbf8eb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x381e40 [0033.854] FindClose (in: hFindFile=0x381e40 | out: hFindFile=0x381e40) returned 1 [0033.854] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e77c) returned 1 [0033.854] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e788) returned 1 [0033.854] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e7bc) returned 1 [0033.854] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\ink", nBufferLength=0x105, lpBuffer=0x31e2c4, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Common Files\\Microsoft Shared\\ink", lpFilePart=0x0) returned 0x32 [0033.854] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\", nBufferLength=0x105, lpBuffer=0x31e298, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\", lpFilePart=0x0) returned 0x33 [0033.855] FindFirstFileW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\*", lpFindFileData=0x31e4e4 | out: lpFindFileData=0x31e4e4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd7545b2, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x9e0df36a, ftLastAccessTime.dwHighDateTime=0x1cbf8eb, ftLastWriteTime.dwLowDateTime=0x9e0df36a, ftLastWriteTime.dwHighDateTime=0x1cbf8eb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x381e40 [0033.855] FindClose (in: hFindFile=0x381e40 | out: hFindFile=0x381e40) returned 1 [0033.855] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e77c) returned 1 [0033.855] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e788) returned 1 [0033.855] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\Alphabet.xml", nBufferLength=0x105, lpBuffer=0x31e194, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\Alphabet.xml", lpFilePart=0x0) returned 0x3f [0033.855] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e688) returned 1 [0033.855] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\Alphabet.xml" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\alphabet.xml"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x224 [0033.856] GetFileType (hFile=0x224) returned 0x1 [0033.856] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e684) returned 1 [0033.856] GetFileType (hFile=0x224) returned 0x1 [0033.856] GetFileSize (in: hFile=0x224, lpFileSizeHigh=0x31e790 | out: lpFileSizeHigh=0x31e790*=0x0) returned 0xc1486 [0033.856] ReadFile (in: hFile=0x224, lpBuffer=0x36194b0, nNumberOfBytesToRead=0xc1486, lpNumberOfBytesRead=0x31e73c, lpOverlapped=0x0 | out: lpBuffer=0x36194b0*, lpNumberOfBytesRead=0x31e73c*=0xc1486, lpOverlapped=0x0) returned 1 [0033.917] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\Alphabet.xml", nBufferLength=0x105, lpBuffer=0x31e180, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\Alphabet.xml", lpFilePart=0x0) returned 0x3f [0033.917] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e674) returned 1 [0033.917] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\Alphabet.xml" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\alphabet.xml"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0xffffffff [0033.930] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31d4b0) returned 1 [0033.931] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e7bc) returned 1 [0033.931] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\MSClientDataMgr", nBufferLength=0x105, lpBuffer=0x31e2c4, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Common Files\\Microsoft Shared\\MSClientDataMgr", lpFilePart=0x0) returned 0x3e [0033.931] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\MSClientDataMgr\\", nBufferLength=0x105, lpBuffer=0x31e298, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Common Files\\Microsoft Shared\\MSClientDataMgr\\", lpFilePart=0x0) returned 0x3f [0033.931] FindFirstFileW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\MSClientDataMgr\\*", lpFindFileData=0x31e4e4 | out: lpFindFileData=0x31e4e4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x69dc9750, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x69dc9750, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x69dc9750, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x381b80 [0033.932] FindNextFileW (in: hFindFile=0x381b80, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x69dc9750, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x69dc9750, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x69dc9750, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0033.933] FindNextFileW (in: hFindFile=0x381b80, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xad59fd00, ftCreationTime.dwHighDateTime=0x1ca9454, ftLastAccessTime.dwLowDateTime=0x69dc9750, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xad59fd00, ftLastWriteTime.dwHighDateTime=0x1ca9454, nFileSizeHigh=0x0, nFileSizeLow=0x665a0, dwReserved0=0x0, dwReserved1=0x0, cFileName="MSCDM.DLL", cAlternateFileName="")) returned 1 [0033.933] FindNextFileW (in: hFindFile=0x381b80, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0033.933] FindClose (in: hFindFile=0x381b80 | out: hFindFile=0x381b80) returned 1 [0033.933] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e77c) returned 1 [0033.933] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e788) returned 1 [0033.933] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e7bc) returned 1 [0033.933] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\MSClientDataMgr", nBufferLength=0x105, lpBuffer=0x31e2c4, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Common Files\\Microsoft Shared\\MSClientDataMgr", lpFilePart=0x0) returned 0x3e [0033.933] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\MSClientDataMgr\\", nBufferLength=0x105, lpBuffer=0x31e298, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Common Files\\Microsoft Shared\\MSClientDataMgr\\", lpFilePart=0x0) returned 0x3f [0033.933] FindFirstFileW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\MSClientDataMgr\\*", lpFindFileData=0x31e4e4 | out: lpFindFileData=0x31e4e4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x69dc9750, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x69dc9750, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x69dc9750, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x381b80 [0033.933] FindNextFileW (in: hFindFile=0x381b80, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x69dc9750, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x69dc9750, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x69dc9750, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0033.933] FindNextFileW (in: hFindFile=0x381b80, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xad59fd00, ftCreationTime.dwHighDateTime=0x1ca9454, ftLastAccessTime.dwLowDateTime=0x69dc9750, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xad59fd00, ftLastWriteTime.dwHighDateTime=0x1ca9454, nFileSizeHigh=0x0, nFileSizeLow=0x665a0, dwReserved0=0x0, dwReserved1=0x0, cFileName="MSCDM.DLL", cAlternateFileName="")) returned 1 [0033.934] FindNextFileW (in: hFindFile=0x381b80, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xad59fd00, ftCreationTime.dwHighDateTime=0x1ca9454, ftLastAccessTime.dwLowDateTime=0x69dc9750, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xad59fd00, ftLastWriteTime.dwHighDateTime=0x1ca9454, nFileSizeHigh=0x0, nFileSizeLow=0x665a0, dwReserved0=0x0, dwReserved1=0x0, cFileName="MSCDM.DLL", cAlternateFileName="")) returned 0 [0033.934] FindClose (in: hFindFile=0x381b80 | out: hFindFile=0x381b80) returned 1 [0033.934] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e77c) returned 1 [0033.934] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e788) returned 1 [0033.934] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e7bc) returned 1 [0033.934] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\MSInfo", nBufferLength=0x105, lpBuffer=0x31e2c4, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Common Files\\Microsoft Shared\\MSInfo", lpFilePart=0x0) returned 0x35 [0033.934] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\MSInfo\\", nBufferLength=0x105, lpBuffer=0x31e298, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Common Files\\Microsoft Shared\\MSInfo\\", lpFilePart=0x0) returned 0x36 [0033.934] FindFirstFileW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\MSInfo\\*", lpFindFileData=0x31e4e4 | out: lpFindFileData=0x31e4e4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd838dce, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x1eab37af, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x1eab37af, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x381b80 [0033.935] FindNextFileW (in: hFindFile=0x381b80, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd838dce, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x1eab37af, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x1eab37af, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0033.935] FindNextFileW (in: hFindFile=0x381b80, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1eab37af, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x23ecb743, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x1eab37af, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="en-US", cAlternateFileName="")) returned 1 [0033.935] FindNextFileW (in: hFindFile=0x381b80, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x830a4e7c, ftCreationTime.dwHighDateTime=0x1cb892b, ftLastAccessTime.dwLowDateTime=0x830a4e7c, ftLastAccessTime.dwHighDateTime=0x1cb892b, ftLastWriteTime.dwLowDateTime=0x830cafdd, ftLastWriteTime.dwHighDateTime=0x1cb892b, nFileSizeHigh=0x0, nFileSizeLow=0x5c800, dwReserved0=0x0, dwReserved1=0x0, cFileName="msinfo32.exe", cAlternateFileName="")) returned 1 [0033.935] FindNextFileW (in: hFindFile=0x381b80, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0033.936] FindClose (in: hFindFile=0x381b80 | out: hFindFile=0x381b80) returned 1 [0033.936] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e77c) returned 1 [0033.936] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e788) returned 1 [0033.936] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e7bc) returned 1 [0033.936] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\MSInfo", nBufferLength=0x105, lpBuffer=0x31e2c4, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Common Files\\Microsoft Shared\\MSInfo", lpFilePart=0x0) returned 0x35 [0033.936] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\MSInfo\\", nBufferLength=0x105, lpBuffer=0x31e298, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Common Files\\Microsoft Shared\\MSInfo\\", lpFilePart=0x0) returned 0x36 [0033.936] FindFirstFileW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\MSInfo\\*", lpFindFileData=0x31e4e4 | out: lpFindFileData=0x31e4e4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd838dce, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x1eab37af, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x1eab37af, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x381b80 [0033.936] FindNextFileW (in: hFindFile=0x381b80, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd838dce, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x1eab37af, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x1eab37af, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0033.936] FindNextFileW (in: hFindFile=0x381b80, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1eab37af, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x23ecb743, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x1eab37af, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="en-US", cAlternateFileName="")) returned 1 [0033.936] FindNextFileW (in: hFindFile=0x381b80, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x830a4e7c, ftCreationTime.dwHighDateTime=0x1cb892b, ftLastAccessTime.dwLowDateTime=0x830a4e7c, ftLastAccessTime.dwHighDateTime=0x1cb892b, ftLastWriteTime.dwLowDateTime=0x830cafdd, ftLastWriteTime.dwHighDateTime=0x1cb892b, nFileSizeHigh=0x0, nFileSizeLow=0x5c800, dwReserved0=0x0, dwReserved1=0x0, cFileName="msinfo32.exe", cAlternateFileName="")) returned 1 [0033.936] FindNextFileW (in: hFindFile=0x381b80, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x830a4e7c, ftCreationTime.dwHighDateTime=0x1cb892b, ftLastAccessTime.dwLowDateTime=0x830a4e7c, ftLastAccessTime.dwHighDateTime=0x1cb892b, ftLastWriteTime.dwLowDateTime=0x830cafdd, ftLastWriteTime.dwHighDateTime=0x1cb892b, nFileSizeHigh=0x0, nFileSizeLow=0x5c800, dwReserved0=0x0, dwReserved1=0x0, cFileName="msinfo32.exe", cAlternateFileName="")) returned 0 [0033.937] FindClose (in: hFindFile=0x381b80 | out: hFindFile=0x381b80) returned 1 [0033.937] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e77c) returned 1 [0033.937] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e788) returned 1 [0033.937] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e744) returned 1 [0033.937] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\MSInfo\\en-US", nBufferLength=0x105, lpBuffer=0x31e24c, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Common Files\\Microsoft Shared\\MSInfo\\en-US", lpFilePart=0x0) returned 0x3b [0033.937] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\MSInfo\\en-US\\", nBufferLength=0x105, lpBuffer=0x31e220, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Common Files\\Microsoft Shared\\MSInfo\\en-US\\", lpFilePart=0x0) returned 0x3c [0033.937] FindFirstFileW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\MSInfo\\en-US\\*", lpFindFileData=0x31e46c | out: lpFindFileData=0x31e46c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1eab37af, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x23ecb743, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x1eab37af, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x381b80 [0033.937] FindNextFileW (in: hFindFile=0x381b80, lpFindFileData=0x31e47c | out: lpFindFileData=0x31e47c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1eab37af, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x23ecb743, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x1eab37af, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0033.937] FindNextFileW (in: hFindFile=0x381b80, lpFindFileData=0x31e47c | out: lpFindFileData=0x31e47c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xca0a09f, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0xccb91a1, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0xca0a09f, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x6800, dwReserved0=0x0, dwReserved1=0x0, cFileName="msinfo32.exe.mui", cAlternateFileName="")) returned 1 [0033.937] FindNextFileW (in: hFindFile=0x381b80, lpFindFileData=0x31e47c | out: lpFindFileData=0x31e47c*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0033.937] FindClose (in: hFindFile=0x381b80 | out: hFindFile=0x381b80) returned 1 [0033.938] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e704) returned 1 [0033.938] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e710) returned 1 [0033.938] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e744) returned 1 [0033.938] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\MSInfo\\en-US", nBufferLength=0x105, lpBuffer=0x31e24c, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Common Files\\Microsoft Shared\\MSInfo\\en-US", lpFilePart=0x0) returned 0x3b [0033.938] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\MSInfo\\en-US\\", nBufferLength=0x105, lpBuffer=0x31e220, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Common Files\\Microsoft Shared\\MSInfo\\en-US\\", lpFilePart=0x0) returned 0x3c [0033.938] FindFirstFileW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\MSInfo\\en-US\\*", lpFindFileData=0x31e46c | out: lpFindFileData=0x31e46c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1eab37af, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x23ecb743, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x1eab37af, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x381b80 [0033.938] FindNextFileW (in: hFindFile=0x381b80, lpFindFileData=0x31e47c | out: lpFindFileData=0x31e47c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1eab37af, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x23ecb743, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x1eab37af, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0033.938] FindNextFileW (in: hFindFile=0x381b80, lpFindFileData=0x31e47c | out: lpFindFileData=0x31e47c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xca0a09f, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0xccb91a1, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0xca0a09f, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x6800, dwReserved0=0x0, dwReserved1=0x0, cFileName="msinfo32.exe.mui", cAlternateFileName="")) returned 1 [0033.938] FindNextFileW (in: hFindFile=0x381b80, lpFindFileData=0x31e47c | out: lpFindFileData=0x31e47c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xca0a09f, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0xccb91a1, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0xca0a09f, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x6800, dwReserved0=0x0, dwReserved1=0x0, cFileName="msinfo32.exe.mui", cAlternateFileName="")) returned 0 [0033.938] FindClose (in: hFindFile=0x381b80 | out: hFindFile=0x381b80) returned 1 [0033.938] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e704) returned 1 [0033.938] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e710) returned 1 [0033.939] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e7bc) returned 1 [0033.939] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14", nBufferLength=0x105, lpBuffer=0x31e2c4, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14", lpFilePart=0x0) returned 0x37 [0033.939] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\", nBufferLength=0x105, lpBuffer=0x31e298, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\", lpFilePart=0x0) returned 0x38 [0033.939] FindFirstFileW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\*", lpFindFileData=0x31e4e4 | out: lpFindFileData=0x31e4e4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee282250, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xe5d93940, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0xe5d93940, ftLastWriteTime.dwHighDateTime=0x1d305f1, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x381b80 [0033.939] FindNextFileW (in: hFindFile=0x381b80, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee282250, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xe5d93940, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0xe5d93940, ftLastWriteTime.dwHighDateTime=0x1d305f1, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0033.939] FindNextFileW (in: hFindFile=0x381b80, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee282250, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xc24d0020, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0xc24d0020, ftLastWriteTime.dwHighDateTime=0x1d305eb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="1033", cAlternateFileName="")) returned 1 [0033.939] FindNextFileW (in: hFindFile=0x381b80, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x703dbc00, ftCreationTime.dwHighDateTime=0x1cbdfc0, ftLastAccessTime.dwLowDateTime=0xd80a4ee0, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0x703dbc00, ftLastWriteTime.dwHighDateTime=0x1cbdfc0, nFileSizeHigh=0x0, nFileSizeLow=0x310788, dwReserved0=0x0, dwReserved1=0x0, cFileName="ACECORE.DLL", cAlternateFileName="")) returned 1 [0033.939] FindNextFileW (in: hFindFile=0x381b80, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3706ca00, ftCreationTime.dwHighDateTime=0x1cba5d5, ftLastAccessTime.dwLowDateTime=0xd80f11a0, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0x3706ca00, ftLastWriteTime.dwHighDateTime=0x1cba5d5, nFileSizeHigh=0x0, nFileSizeLow=0xb5db8, dwReserved0=0x0, dwReserved1=0x0, cFileName="ACEDAO.DLL", cAlternateFileName="")) returned 1 [0033.939] FindNextFileW (in: hFindFile=0x381b80, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x81925f00, ftCreationTime.dwHighDateTime=0x1caca23, ftLastAccessTime.dwLowDateTime=0x51128590, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x81925f00, ftLastWriteTime.dwHighDateTime=0x1caca23, nFileSizeHigh=0x0, nFileSizeLow=0xa990, dwReserved0=0x0, dwReserved1=0x0, cFileName="ACEERR.DLL", cAlternateFileName="")) returned 1 [0033.940] FindNextFileW (in: hFindFile=0x381b80, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3706ca00, ftCreationTime.dwHighDateTime=0x1cba5d5, ftLastAccessTime.dwLowDateTime=0xd8117300, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0x3706ca00, ftLastWriteTime.dwHighDateTime=0x1cba5d5, nFileSizeHigh=0x0, nFileSizeLow=0xf73a8, dwReserved0=0x0, dwReserved1=0x0, cFileName="ACEES.DLL", cAlternateFileName="")) returned 1 [0033.940] FindNextFileW (in: hFindFile=0x381b80, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3706ca00, ftCreationTime.dwHighDateTime=0x1cba5d5, ftLastAccessTime.dwLowDateTime=0xd8117300, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0x3706ca00, ftLastWriteTime.dwHighDateTime=0x1cba5d5, nFileSizeHigh=0x0, nFileSizeLow=0x6bfa0, dwReserved0=0x0, dwReserved1=0x0, cFileName="ACEEXCH.DLL", cAlternateFileName="")) returned 1 [0033.940] FindNextFileW (in: hFindFile=0x381b80, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3706ca00, ftCreationTime.dwHighDateTime=0x1cba5d5, ftLastAccessTime.dwLowDateTime=0xd813d460, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0x3706ca00, ftLastWriteTime.dwHighDateTime=0x1cba5d5, nFileSizeHigh=0x0, nFileSizeLow=0xdbb98, dwReserved0=0x0, dwReserved1=0x0, cFileName="ACEEXCL.DLL", cAlternateFileName="")) returned 1 [0033.940] FindNextFileW (in: hFindFile=0x381b80, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x95c9c200, ftCreationTime.dwHighDateTime=0x1cba070, ftLastAccessTime.dwLowDateTime=0xd813d460, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0x95c9c200, ftLastWriteTime.dwHighDateTime=0x1cba070, nFileSizeHigh=0x0, nFileSizeLow=0x53bb0, dwReserved0=0x0, dwReserved1=0x0, cFileName="ACEODBC.DLL", cAlternateFileName="")) returned 1 [0033.940] FindNextFileW (in: hFindFile=0x381b80, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x77357e00, ftCreationTime.dwHighDateTime=0x1cac9ad, ftLastAccessTime.dwLowDateTime=0x51128590, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x77357e00, ftLastWriteTime.dwHighDateTime=0x1cac9ad, nFileSizeHigh=0x0, nFileSizeLow=0x3db8, dwReserved0=0x0, dwReserved1=0x0, cFileName="ACEODDBS.DLL", cAlternateFileName="")) returned 1 [0033.940] FindNextFileW (in: hFindFile=0x381b80, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x77357e00, ftCreationTime.dwHighDateTime=0x1cac9ad, ftLastAccessTime.dwLowDateTime=0x5e99f630, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x77357e00, ftLastWriteTime.dwHighDateTime=0x1cac9ad, nFileSizeHigh=0x0, nFileSizeLow=0x3db8, dwReserved0=0x0, dwReserved1=0x0, cFileName="ACEODEXL.DLL", cAlternateFileName="")) returned 1 [0033.940] FindNextFileW (in: hFindFile=0x381b80, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x77357e00, ftCreationTime.dwHighDateTime=0x1cac9ad, ftLastAccessTime.dwLowDateTime=0x5e99f630, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x77357e00, ftLastWriteTime.dwHighDateTime=0x1cac9ad, nFileSizeHigh=0x0, nFileSizeLow=0x3db8, dwReserved0=0x0, dwReserved1=0x0, cFileName="ACEODTXT.DLL", cAlternateFileName="")) returned 1 [0033.940] FindNextFileW (in: hFindFile=0x381b80, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3706ca00, ftCreationTime.dwHighDateTime=0x1cba5d5, ftLastAccessTime.dwLowDateTime=0xd8189720, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0x3706ca00, ftLastWriteTime.dwHighDateTime=0x1cba5d5, nFileSizeHigh=0x0, nFileSizeLow=0x833a0, dwReserved0=0x0, dwReserved1=0x0, cFileName="ACEOLEDB.DLL", cAlternateFileName="")) returned 1 [0033.940] FindNextFileW (in: hFindFile=0x381b80, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x96faef00, ftCreationTime.dwHighDateTime=0x1cba070, ftLastAccessTime.dwLowDateTime=0xd8247e00, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0x96faef00, ftLastWriteTime.dwHighDateTime=0x1cba070, nFileSizeHigh=0x0, nFileSizeLow=0x6e398, dwReserved0=0x0, dwReserved1=0x0, cFileName="ACER3X.DLL", cAlternateFileName="")) returned 1 [0033.941] FindNextFileW (in: hFindFile=0x381b80, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x95c9c200, ftCreationTime.dwHighDateTime=0x1cba070, ftLastAccessTime.dwLowDateTime=0xd826df60, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0x95c9c200, ftLastWriteTime.dwHighDateTime=0x1cba070, nFileSizeHigh=0x0, nFileSizeLow=0xd9c0, dwReserved0=0x0, dwReserved1=0x0, cFileName="ACERCLR.DLL", cAlternateFileName="")) returned 1 [0033.941] FindNextFileW (in: hFindFile=0x381b80, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x35d59d00, ftCreationTime.dwHighDateTime=0x1cba5d5, ftLastAccessTime.dwLowDateTime=0xd826df60, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0x35d59d00, ftLastWriteTime.dwHighDateTime=0x1cba5d5, nFileSizeHigh=0x0, nFileSizeLow=0xa8da0, dwReserved0=0x0, dwReserved1=0x0, cFileName="ACEREP.DLL", cAlternateFileName="")) returned 1 [0033.941] FindNextFileW (in: hFindFile=0x381b80, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x35d59d00, ftCreationTime.dwHighDateTime=0x1cba5d5, ftLastAccessTime.dwLowDateTime=0xd82940c0, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0x35d59d00, ftLastWriteTime.dwHighDateTime=0x1cba5d5, nFileSizeHigh=0x0, nFileSizeLow=0x48990, dwReserved0=0x0, dwReserved1=0x0, cFileName="ACETXT.DLL", cAlternateFileName="")) returned 1 [0033.941] FindNextFileW (in: hFindFile=0x381b80, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1092c00, ftCreationTime.dwHighDateTime=0x1cb71c7, ftLastAccessTime.dwLowDateTime=0xd82ba220, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0x1092c00, ftLastWriteTime.dwHighDateTime=0x1cb71c7, nFileSizeHigh=0x0, nFileSizeLow=0x2e8da0, dwReserved0=0x0, dwReserved1=0x0, cFileName="ACEWDAT.DLL", cAlternateFileName="")) returned 1 [0033.941] FindNextFileW (in: hFindFile=0x381b80, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8e0c9f00, ftCreationTime.dwHighDateTime=0x1cba5d5, ftLastAccessTime.dwLowDateTime=0xcf0c7d40, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0x8e0c9f00, ftLastWriteTime.dwHighDateTime=0x1cba5d5, nFileSizeHigh=0x0, nFileSizeLow=0x4dba0, dwReserved0=0x0, dwReserved1=0x0, cFileName="ACEWSS.DLL", cAlternateFileName="")) returned 1 [0033.941] FindNextFileW (in: hFindFile=0x381b80, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x35d59d00, ftCreationTime.dwHighDateTime=0x1cba5d5, ftLastAccessTime.dwLowDateTime=0xd82e0380, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0x35d59d00, ftLastWriteTime.dwHighDateTime=0x1cba5d5, nFileSizeHigh=0x0, nFileSizeLow=0x7a998, dwReserved0=0x0, dwReserved1=0x0, cFileName="ACEXBE.DLL", cAlternateFileName="")) returned 1 [0033.941] FindNextFileW (in: hFindFile=0x381b80, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x67c38700, ftCreationTime.dwHighDateTime=0x1cbc9fc, ftLastAccessTime.dwLowDateTime=0xe5d21520, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0x67c38700, ftLastWriteTime.dwHighDateTime=0x1cbc9fc, nFileSizeHigh=0x0, nFileSizeLow=0x5e158, dwReserved0=0x0, dwReserved1=0x0, cFileName="ATLCONV.DLL", cAlternateFileName="")) returned 1 [0033.941] FindNextFileW (in: hFindFile=0x381b80, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb10f7500, ftCreationTime.dwHighDateTime=0x1cbe56c, ftLastAccessTime.dwLowDateTime=0xda5b0540, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0xb10f7500, ftLastWriteTime.dwHighDateTime=0x1cbe56c, nFileSizeHigh=0x0, nFileSizeLow=0x4d67b0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Csi.dll", cAlternateFileName="")) returned 1 [0033.941] FindNextFileW (in: hFindFile=0x381b80, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xef87d800, ftCreationTime.dwHighDateTime=0x1cb8cce, ftLastAccessTime.dwLowDateTime=0xda5d66a0, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0xef87d800, ftLastWriteTime.dwHighDateTime=0x1cb8cce, nFileSizeHigh=0x0, nFileSizeLow=0x1b3980, dwReserved0=0x0, dwReserved1=0x0, cFileName="CsiSoap.dll", cAlternateFileName="")) returned 1 [0033.942] FindNextFileW (in: hFindFile=0x381b80, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xceefecc0, ftCreationTime.dwHighDateTime=0x1d305eb, ftLastAccessTime.dwLowDateTime=0xceefecc0, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0xceefecc0, ftLastWriteTime.dwHighDateTime=0x1d305eb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Cultures", cAlternateFileName="")) returned 1 [0033.942] FindNextFileW (in: hFindFile=0x381b80, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x520efa00, ftCreationTime.dwHighDateTime=0x1cbc41d, ftLastAccessTime.dwLowDateTime=0xd83064e0, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0x520efa00, ftLastWriteTime.dwHighDateTime=0x1cbc41d, nFileSizeHigh=0x0, nFileSizeLow=0x7eb48, dwReserved0=0x0, dwReserved1=0x0, cFileName="EXPSRV.DLL", cAlternateFileName="")) returned 1 [0033.942] FindNextFileW (in: hFindFile=0x381b80, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3ebd7300, ftCreationTime.dwHighDateTime=0x1cba5c3, ftLastAccessTime.dwLowDateTime=0xcef710e0, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0x3ebd7300, ftLastWriteTime.dwHighDateTime=0x1cba5c3, nFileSizeHigh=0x0, nFileSizeLow=0x21d78, dwReserved0=0x0, dwReserved1=0x0, cFileName="EXP_PDF.DLL", cAlternateFileName="")) returned 1 [0033.942] FindNextFileW (in: hFindFile=0x381b80, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf5bf6900, ftCreationTime.dwHighDateTime=0x1cba06e, ftLastAccessTime.dwLowDateTime=0xcf5b0aa0, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0xf5bf6900, ftLastWriteTime.dwHighDateTime=0x1cba06e, nFileSizeHigh=0x0, nFileSizeLow=0x11578, dwReserved0=0x0, dwReserved1=0x0, cFileName="EXP_XPS.DLL", cAlternateFileName="")) returned 1 [0033.942] FindNextFileW (in: hFindFile=0x381b80, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd66e7600, ftCreationTime.dwHighDateTime=0x1cb7002, ftLastAccessTime.dwLowDateTime=0xe572de20, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0xd66e7600, ftLastWriteTime.dwHighDateTime=0x1cb7002, nFileSizeHigh=0x0, nFileSizeLow=0x26560, dwReserved0=0x0, dwReserved1=0x0, cFileName="FLTLDR.EXE", cAlternateFileName="")) returned 1 [0033.942] FindNextFileW (in: hFindFile=0x381b80, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf7bf3f00, ftCreationTime.dwHighDateTime=0x1ca911f, ftLastAccessTime.dwLowDateTime=0x53907610, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xf7bf3f00, ftLastWriteTime.dwHighDateTime=0x1ca911f, nFileSizeHigh=0x0, nFileSizeLow=0x417360, dwReserved0=0x0, dwReserved1=0x0, cFileName="IACOM2.DLL", cAlternateFileName="")) returned 1 [0033.942] FindNextFileW (in: hFindFile=0x381b80, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe164800, ftCreationTime.dwHighDateTime=0x1cac048, ftLastAccessTime.dwLowDateTime=0x6626d2b0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xe164800, ftLastWriteTime.dwHighDateTime=0x1cac048, nFileSizeHigh=0x0, nFileSizeLow=0x31d88, dwReserved0=0x0, dwReserved1=0x0, cFileName="LICLUA.EXE", cAlternateFileName="")) returned 1 [0033.942] FindNextFileW (in: hFindFile=0x381b80, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc821f600, ftCreationTime.dwHighDateTime=0x1cbdfb3, ftLastAccessTime.dwLowDateTime=0xd776b9a0, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0xc821f600, ftLastWriteTime.dwHighDateTime=0x1cbdfb3, nFileSizeHigh=0x0, nFileSizeLow=0x183d780, dwReserved0=0x0, dwReserved1=0x0, cFileName="MSO.DLL", cAlternateFileName="")) returned 1 [0033.942] FindNextFileW (in: hFindFile=0x381b80, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xee94c400, ftCreationTime.dwHighDateTime=0x1cb7007, ftLastAccessTime.dwLowDateTime=0xd6225500, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0xee94c400, ftLastWriteTime.dwHighDateTime=0x1cb7007, nFileSizeHigh=0x0, nFileSizeLow=0x73b60, dwReserved0=0x0, dwReserved1=0x0, cFileName="MSOICONS.EXE", cAlternateFileName="")) returned 1 [0033.943] FindNextFileW (in: hFindFile=0x381b80, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe5e15000, ftCreationTime.dwHighDateTime=0x1cbf3e5, ftLastAccessTime.dwLowDateTime=0xec32f3e0, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0xe5e15000, ftLastWriteTime.dwHighDateTime=0x1cbf3e5, nFileSizeHigh=0x0, nFileSizeLow=0x4529780, dwReserved0=0x0, dwReserved1=0x0, cFileName="MSORES.DLL", cAlternateFileName="")) returned 1 [0033.943] FindNextFileW (in: hFindFile=0x381b80, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa4293d00, ftCreationTime.dwHighDateTime=0x1cbc468, ftLastAccessTime.dwLowDateTime=0xd77dddc0, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0xa4293d00, ftLastWriteTime.dwHighDateTime=0x1cbc468, nFileSizeHigh=0x0, nFileSizeLow=0x135f90, dwReserved0=0x0, dwReserved1=0x0, cFileName="msoshext.dll", cAlternateFileName="")) returned 1 [0033.943] FindNextFileW (in: hFindFile=0x381b80, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc276d800, ftCreationTime.dwHighDateTime=0x1cab8aa, ftLastAccessTime.dwLowDateTime=0x6a050eb0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xc276d800, ftLastWriteTime.dwHighDateTime=0x1cab8aa, nFileSizeHigh=0x0, nFileSizeLow=0xdb50, dwReserved0=0x0, dwReserved1=0x0, cFileName="MSOXEV.DLL", cAlternateFileName="")) returned 1 [0033.943] FindNextFileW (in: hFindFile=0x381b80, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x553f4600, ftCreationTime.dwHighDateTime=0x1cab7c9, ftLastAccessTime.dwLowDateTime=0x593ede30, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x553f4600, ftLastWriteTime.dwHighDateTime=0x1cab7c9, nFileSizeHigh=0x0, nFileSizeLow=0x1d950, dwReserved0=0x0, dwReserved1=0x0, cFileName="MSOXMLED.EXE", cAlternateFileName="")) returned 1 [0033.943] FindNextFileW (in: hFindFile=0x381b80, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x553f4600, ftCreationTime.dwHighDateTime=0x1cab7c9, ftLastAccessTime.dwLowDateTime=0x593ede30, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x553f4600, ftLastWriteTime.dwHighDateTime=0x1cab7c9, nFileSizeHigh=0x0, nFileSizeLow=0xdb80, dwReserved0=0x0, dwReserved1=0x0, cFileName="MSOXMLMF.DLL", cAlternateFileName="")) returned 1 [0033.943] FindNextFileW (in: hFindFile=0x381b80, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf3922200, ftCreationTime.dwHighDateTime=0x1ca911d, ftLastAccessTime.dwLowDateTime=0x59413f90, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xf3922200, ftLastWriteTime.dwHighDateTime=0x1ca911d, nFileSizeHigh=0x0, nFileSizeLow=0x124980, dwReserved0=0x0, dwReserved1=0x0, cFileName="MSPTLS.DLL", cAlternateFileName="")) returned 1 [0033.943] FindNextFileW (in: hFindFile=0x381b80, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x15d97a00, ftCreationTime.dwHighDateTime=0x1caa6a1, ftLastAccessTime.dwLowDateTime=0x6a1819b0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x15d97a00, ftLastWriteTime.dwHighDateTime=0x1caa6a1, nFileSizeHigh=0x0, nFileSizeLow=0xac370, dwReserved0=0x0, dwReserved1=0x0, cFileName="MSSOAP30.DLL", cAlternateFileName="")) returned 1 [0033.943] FindNextFileW (in: hFindFile=0x381b80, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8054ff00, ftCreationTime.dwHighDateTime=0x1cb7011, ftLastAccessTime.dwLowDateTime=0xcf459e40, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0x8054ff00, ftLastWriteTime.dwHighDateTime=0x1cb7011, nFileSizeHigh=0x0, nFileSizeLow=0x1a5b, dwReserved0=0x0, dwReserved1=0x0, cFileName="MUAUTH.CAB", cAlternateFileName="")) returned 1 [0033.943] FindNextFileW (in: hFindFile=0x381b80, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8054ff00, ftCreationTime.dwHighDateTime=0x1cb7011, ftLastAccessTime.dwLowDateTime=0xcf47ffa0, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0x8054ff00, ftLastWriteTime.dwHighDateTime=0x1cb7011, nFileSizeHigh=0x0, nFileSizeLow=0x6190, dwReserved0=0x0, dwReserved1=0x0, cFileName="MUOPTIN.DLL", cAlternateFileName="")) returned 1 [0033.944] FindNextFileW (in: hFindFile=0x381b80, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x161d5800, ftCreationTime.dwHighDateTime=0x1cbd856, ftLastAccessTime.dwLowDateTime=0xd63a22c0, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0x161d5800, ftLastWriteTime.dwHighDateTime=0x1cbd856, nFileSizeHigh=0x0, nFileSizeLow=0x38d88, dwReserved0=0x0, dwReserved1=0x0, cFileName="Oarpmany.exe", cAlternateFileName="")) returned 1 [0033.944] FindNextFileW (in: hFindFile=0x381b80, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7f9d2900, ftCreationTime.dwHighDateTime=0x1cab9ac, ftLastAccessTime.dwLowDateTime=0xbe0f9da0, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0x7f9d2900, ftLastWriteTime.dwHighDateTime=0x1cab9ac, nFileSizeHigh=0x0, nFileSizeLow=0x7568, dwReserved0=0x0, dwReserved1=0x0, cFileName="ODBCMON.DLL", cAlternateFileName="")) returned 1 [0033.944] FindNextFileW (in: hFindFile=0x381b80, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee2ce510, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xbe974c00, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0xbe974c00, ftLastWriteTime.dwHighDateTime=0x1d305f1, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Office Setup Controller", cAlternateFileName="OFFICE~1")) returned 1 [0033.944] FindNextFileW (in: hFindFile=0x381b80, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5de00200, ftCreationTime.dwHighDateTime=0x1cac9ac, ftLastAccessTime.dwLowDateTime=0x6bc953f0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x5de00200, ftLastWriteTime.dwHighDateTime=0x1cac9ac, nFileSizeHigh=0x0, nFileSizeLow=0x2560, dwReserved0=0x0, dwReserved1=0x0, cFileName="OFFREL.DLL", cAlternateFileName="")) returned 1 [0033.944] FindNextFileW (in: hFindFile=0x381b80, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5de00200, ftCreationTime.dwHighDateTime=0x1cac9ac, ftLastAccessTime.dwLowDateTime=0x6c2166d0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x5de00200, ftLastWriteTime.dwHighDateTime=0x1cac9ac, nFileSizeHigh=0x0, nFileSizeLow=0x4d88, dwReserved0=0x0, dwReserved1=0x0, cFileName="OPHPROXY.DLL", cAlternateFileName="")) returned 1 [0033.944] FindNextFileW (in: hFindFile=0x381b80, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf6a43200, ftCreationTime.dwHighDateTime=0x1cb700e, ftLastAccessTime.dwLowDateTime=0xcf47ffa0, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0xf6a43200, ftLastWriteTime.dwHighDateTime=0x1cb700e, nFileSizeHigh=0x0, nFileSizeLow=0x47a0, dwReserved0=0x0, dwReserved1=0x0, cFileName="OPTINPS.DLL", cAlternateFileName="")) returned 1 [0033.944] FindNextFileW (in: hFindFile=0x381b80, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1570ec00, ftCreationTime.dwHighDateTime=0x1cbc479, ftLastAccessTime.dwLowDateTime=0xe5d21520, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0x1570ec00, ftLastWriteTime.dwHighDateTime=0x1cbc479, nFileSizeHigh=0x0, nFileSizeLow=0xb7ba8, dwReserved0=0x0, dwReserved1=0x0, cFileName="PJ11OD11.DLL", cAlternateFileName="")) returned 1 [0033.944] FindNextFileW (in: hFindFile=0x381b80, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9a461000, ftCreationTime.dwHighDateTime=0x1cb7018, ftLastAccessTime.dwLowDateTime=0xe5d47680, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0x9a461000, ftLastWriteTime.dwHighDateTime=0x1cb7018, nFileSizeHigh=0x0, nFileSizeLow=0x3fb90, dwReserved0=0x0, dwReserved1=0x0, cFileName="PJRESC.DLL", cAlternateFileName="")) returned 1 [0033.944] FindNextFileW (in: hFindFile=0x381b80, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x74bd800, ftCreationTime.dwHighDateTime=0x1cb71c8, ftLastAccessTime.dwLowDateTime=0xe5d93940, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0x74bd800, ftLastWriteTime.dwHighDateTime=0x1cb71c8, nFileSizeHigh=0x0, nFileSizeLow=0x3c2b90, dwReserved0=0x0, dwReserved1=0x0, cFileName="PRJRES.DLL", cAlternateFileName="")) returned 1 [0033.945] FindNextFileW (in: hFindFile=0x381b80, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4a199a00, ftCreationTime.dwHighDateTime=0x1cba5d5, ftLastAccessTime.dwLowDateTime=0xdac16060, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0x4a199a00, ftLastWriteTime.dwHighDateTime=0x1cba5d5, nFileSizeHigh=0x0, nFileSizeLow=0x1c8b68, dwReserved0=0x0, dwReserved1=0x0, cFileName="RICHED20.DLL", cAlternateFileName="")) returned 1 [0033.945] FindNextFileW (in: hFindFile=0x381b80, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7339ac00, ftCreationTime.dwHighDateTime=0x1cbdfc2, ftLastAccessTime.dwLowDateTime=0xe5d93940, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0x7339ac00, ftLastWriteTime.dwHighDateTime=0x1cbdfc2, nFileSizeHigh=0x0, nFileSizeLow=0x90778, dwReserved0=0x0, dwReserved1=0x0, cFileName="SERCONV.DLL", cAlternateFileName="")) returned 1 [0033.945] FindNextFileW (in: hFindFile=0x381b80, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xded68100, ftCreationTime.dwHighDateTime=0x1cb5970, ftLastAccessTime.dwLowDateTime=0xd68d72e0, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0xded68100, ftLastWriteTime.dwHighDateTime=0x1cb5970, nFileSizeHigh=0x0, nFileSizeLow=0xc6b00, dwReserved0=0x0, dwReserved1=0x0, cFileName="USP10.DLL", cAlternateFileName="")) returned 1 [0033.945] FindNextFileW (in: hFindFile=0x381b80, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x520efa00, ftCreationTime.dwHighDateTime=0x1cbc41d, ftLastAccessTime.dwLowDateTime=0xd83064e0, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0x520efa00, ftLastWriteTime.dwHighDateTime=0x1cbc41d, nFileSizeHigh=0x0, nFileSizeLow=0xc150, dwReserved0=0x0, dwReserved1=0x0, cFileName="VBAJET32.DLL", cAlternateFileName="")) returned 1 [0033.945] FindNextFileW (in: hFindFile=0x381b80, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x14a84d00, ftCreationTime.dwHighDateTime=0x1caa6a1, ftLastAccessTime.dwLowDateTime=0x5e5e73d0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x14a84d00, ftLastWriteTime.dwHighDateTime=0x1caa6a1, nFileSizeHigh=0x0, nFileSizeLow=0x23f90, dwReserved0=0x0, dwReserved1=0x0, cFileName="WISC30.DLL", cAlternateFileName="")) returned 1 [0033.945] FindNextFileW (in: hFindFile=0x381b80, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0033.945] FindClose (in: hFindFile=0x381b80 | out: hFindFile=0x381b80) returned 1 [0033.945] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e77c) returned 1 [0033.945] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e788) returned 1 [0033.945] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e7bc) returned 1 [0033.945] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14", nBufferLength=0x105, lpBuffer=0x31e2c4, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14", lpFilePart=0x0) returned 0x37 [0033.945] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\", nBufferLength=0x105, lpBuffer=0x31e298, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\", lpFilePart=0x0) returned 0x38 [0033.945] FindFirstFileW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\*", lpFindFileData=0x31e4e4 | out: lpFindFileData=0x31e4e4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee282250, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xe5d93940, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0xe5d93940, ftLastWriteTime.dwHighDateTime=0x1d305f1, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x381b80 [0033.946] FindNextFileW (in: hFindFile=0x381b80, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee282250, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xe5d93940, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0xe5d93940, ftLastWriteTime.dwHighDateTime=0x1d305f1, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0033.946] FindNextFileW (in: hFindFile=0x381b80, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee282250, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xc24d0020, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0xc24d0020, ftLastWriteTime.dwHighDateTime=0x1d305eb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="1033", cAlternateFileName="")) returned 1 [0033.946] FindNextFileW (in: hFindFile=0x381b80, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x703dbc00, ftCreationTime.dwHighDateTime=0x1cbdfc0, ftLastAccessTime.dwLowDateTime=0xd80a4ee0, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0x703dbc00, ftLastWriteTime.dwHighDateTime=0x1cbdfc0, nFileSizeHigh=0x0, nFileSizeLow=0x310788, dwReserved0=0x0, dwReserved1=0x0, cFileName="ACECORE.DLL", cAlternateFileName="")) returned 1 [0033.946] FindNextFileW (in: hFindFile=0x381b80, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3706ca00, ftCreationTime.dwHighDateTime=0x1cba5d5, ftLastAccessTime.dwLowDateTime=0xd80f11a0, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0x3706ca00, ftLastWriteTime.dwHighDateTime=0x1cba5d5, nFileSizeHigh=0x0, nFileSizeLow=0xb5db8, dwReserved0=0x0, dwReserved1=0x0, cFileName="ACEDAO.DLL", cAlternateFileName="")) returned 1 [0033.946] FindNextFileW (in: hFindFile=0x381b80, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x81925f00, ftCreationTime.dwHighDateTime=0x1caca23, ftLastAccessTime.dwLowDateTime=0x51128590, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x81925f00, ftLastWriteTime.dwHighDateTime=0x1caca23, nFileSizeHigh=0x0, nFileSizeLow=0xa990, dwReserved0=0x0, dwReserved1=0x0, cFileName="ACEERR.DLL", cAlternateFileName="")) returned 1 [0033.947] FindNextFileW (in: hFindFile=0x381b80, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3706ca00, ftCreationTime.dwHighDateTime=0x1cba5d5, ftLastAccessTime.dwLowDateTime=0xd8117300, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0x3706ca00, ftLastWriteTime.dwHighDateTime=0x1cba5d5, nFileSizeHigh=0x0, nFileSizeLow=0xf73a8, dwReserved0=0x0, dwReserved1=0x0, cFileName="ACEES.DLL", cAlternateFileName="")) returned 1 [0033.947] FindNextFileW (in: hFindFile=0x381b80, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3706ca00, ftCreationTime.dwHighDateTime=0x1cba5d5, ftLastAccessTime.dwLowDateTime=0xd8117300, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0x3706ca00, ftLastWriteTime.dwHighDateTime=0x1cba5d5, nFileSizeHigh=0x0, nFileSizeLow=0x6bfa0, dwReserved0=0x0, dwReserved1=0x0, cFileName="ACEEXCH.DLL", cAlternateFileName="")) returned 1 [0033.947] FindNextFileW (in: hFindFile=0x381b80, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3706ca00, ftCreationTime.dwHighDateTime=0x1cba5d5, ftLastAccessTime.dwLowDateTime=0xd813d460, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0x3706ca00, ftLastWriteTime.dwHighDateTime=0x1cba5d5, nFileSizeHigh=0x0, nFileSizeLow=0xdbb98, dwReserved0=0x0, dwReserved1=0x0, cFileName="ACEEXCL.DLL", cAlternateFileName="")) returned 1 [0033.947] FindNextFileW (in: hFindFile=0x381b80, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x95c9c200, ftCreationTime.dwHighDateTime=0x1cba070, ftLastAccessTime.dwLowDateTime=0xd813d460, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0x95c9c200, ftLastWriteTime.dwHighDateTime=0x1cba070, nFileSizeHigh=0x0, nFileSizeLow=0x53bb0, dwReserved0=0x0, dwReserved1=0x0, cFileName="ACEODBC.DLL", cAlternateFileName="")) returned 1 [0033.947] FindNextFileW (in: hFindFile=0x381b80, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x77357e00, ftCreationTime.dwHighDateTime=0x1cac9ad, ftLastAccessTime.dwLowDateTime=0x51128590, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x77357e00, ftLastWriteTime.dwHighDateTime=0x1cac9ad, nFileSizeHigh=0x0, nFileSizeLow=0x3db8, dwReserved0=0x0, dwReserved1=0x0, cFileName="ACEODDBS.DLL", cAlternateFileName="")) returned 1 [0033.947] FindNextFileW (in: hFindFile=0x381b80, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x77357e00, ftCreationTime.dwHighDateTime=0x1cac9ad, ftLastAccessTime.dwLowDateTime=0x5e99f630, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x77357e00, ftLastWriteTime.dwHighDateTime=0x1cac9ad, nFileSizeHigh=0x0, nFileSizeLow=0x3db8, dwReserved0=0x0, dwReserved1=0x0, cFileName="ACEODEXL.DLL", cAlternateFileName="")) returned 1 [0033.947] FindNextFileW (in: hFindFile=0x381b80, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x77357e00, ftCreationTime.dwHighDateTime=0x1cac9ad, ftLastAccessTime.dwLowDateTime=0x5e99f630, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x77357e00, ftLastWriteTime.dwHighDateTime=0x1cac9ad, nFileSizeHigh=0x0, nFileSizeLow=0x3db8, dwReserved0=0x0, dwReserved1=0x0, cFileName="ACEODTXT.DLL", cAlternateFileName="")) returned 1 [0033.948] FindNextFileW (in: hFindFile=0x381b80, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3706ca00, ftCreationTime.dwHighDateTime=0x1cba5d5, ftLastAccessTime.dwLowDateTime=0xd8189720, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0x3706ca00, ftLastWriteTime.dwHighDateTime=0x1cba5d5, nFileSizeHigh=0x0, nFileSizeLow=0x833a0, dwReserved0=0x0, dwReserved1=0x0, cFileName="ACEOLEDB.DLL", cAlternateFileName="")) returned 1 [0033.948] FindNextFileW (in: hFindFile=0x381b80, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x96faef00, ftCreationTime.dwHighDateTime=0x1cba070, ftLastAccessTime.dwLowDateTime=0xd8247e00, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0x96faef00, ftLastWriteTime.dwHighDateTime=0x1cba070, nFileSizeHigh=0x0, nFileSizeLow=0x6e398, dwReserved0=0x0, dwReserved1=0x0, cFileName="ACER3X.DLL", cAlternateFileName="")) returned 1 [0033.948] FindNextFileW (in: hFindFile=0x381b80, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x95c9c200, ftCreationTime.dwHighDateTime=0x1cba070, ftLastAccessTime.dwLowDateTime=0xd826df60, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0x95c9c200, ftLastWriteTime.dwHighDateTime=0x1cba070, nFileSizeHigh=0x0, nFileSizeLow=0xd9c0, dwReserved0=0x0, dwReserved1=0x0, cFileName="ACERCLR.DLL", cAlternateFileName="")) returned 1 [0033.948] FindNextFileW (in: hFindFile=0x381b80, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x35d59d00, ftCreationTime.dwHighDateTime=0x1cba5d5, ftLastAccessTime.dwLowDateTime=0xd826df60, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0x35d59d00, ftLastWriteTime.dwHighDateTime=0x1cba5d5, nFileSizeHigh=0x0, nFileSizeLow=0xa8da0, dwReserved0=0x0, dwReserved1=0x0, cFileName="ACEREP.DLL", cAlternateFileName="")) returned 1 [0033.948] FindNextFileW (in: hFindFile=0x381b80, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x35d59d00, ftCreationTime.dwHighDateTime=0x1cba5d5, ftLastAccessTime.dwLowDateTime=0xd82940c0, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0x35d59d00, ftLastWriteTime.dwHighDateTime=0x1cba5d5, nFileSizeHigh=0x0, nFileSizeLow=0x48990, dwReserved0=0x0, dwReserved1=0x0, cFileName="ACETXT.DLL", cAlternateFileName="")) returned 1 [0033.948] FindNextFileW (in: hFindFile=0x381b80, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1092c00, ftCreationTime.dwHighDateTime=0x1cb71c7, ftLastAccessTime.dwLowDateTime=0xd82ba220, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0x1092c00, ftLastWriteTime.dwHighDateTime=0x1cb71c7, nFileSizeHigh=0x0, nFileSizeLow=0x2e8da0, dwReserved0=0x0, dwReserved1=0x0, cFileName="ACEWDAT.DLL", cAlternateFileName="")) returned 1 [0033.948] FindNextFileW (in: hFindFile=0x381b80, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8e0c9f00, ftCreationTime.dwHighDateTime=0x1cba5d5, ftLastAccessTime.dwLowDateTime=0xcf0c7d40, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0x8e0c9f00, ftLastWriteTime.dwHighDateTime=0x1cba5d5, nFileSizeHigh=0x0, nFileSizeLow=0x4dba0, dwReserved0=0x0, dwReserved1=0x0, cFileName="ACEWSS.DLL", cAlternateFileName="")) returned 1 [0033.949] FindNextFileW (in: hFindFile=0x381b80, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x35d59d00, ftCreationTime.dwHighDateTime=0x1cba5d5, ftLastAccessTime.dwLowDateTime=0xd82e0380, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0x35d59d00, ftLastWriteTime.dwHighDateTime=0x1cba5d5, nFileSizeHigh=0x0, nFileSizeLow=0x7a998, dwReserved0=0x0, dwReserved1=0x0, cFileName="ACEXBE.DLL", cAlternateFileName="")) returned 1 [0033.949] FindNextFileW (in: hFindFile=0x381b80, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x67c38700, ftCreationTime.dwHighDateTime=0x1cbc9fc, ftLastAccessTime.dwLowDateTime=0xe5d21520, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0x67c38700, ftLastWriteTime.dwHighDateTime=0x1cbc9fc, nFileSizeHigh=0x0, nFileSizeLow=0x5e158, dwReserved0=0x0, dwReserved1=0x0, cFileName="ATLCONV.DLL", cAlternateFileName="")) returned 1 [0033.949] FindNextFileW (in: hFindFile=0x381b80, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb10f7500, ftCreationTime.dwHighDateTime=0x1cbe56c, ftLastAccessTime.dwLowDateTime=0xda5b0540, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0xb10f7500, ftLastWriteTime.dwHighDateTime=0x1cbe56c, nFileSizeHigh=0x0, nFileSizeLow=0x4d67b0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Csi.dll", cAlternateFileName="")) returned 1 [0033.949] FindNextFileW (in: hFindFile=0x381b80, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xef87d800, ftCreationTime.dwHighDateTime=0x1cb8cce, ftLastAccessTime.dwLowDateTime=0xda5d66a0, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0xef87d800, ftLastWriteTime.dwHighDateTime=0x1cb8cce, nFileSizeHigh=0x0, nFileSizeLow=0x1b3980, dwReserved0=0x0, dwReserved1=0x0, cFileName="CsiSoap.dll", cAlternateFileName="")) returned 1 [0033.949] FindNextFileW (in: hFindFile=0x381b80, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xceefecc0, ftCreationTime.dwHighDateTime=0x1d305eb, ftLastAccessTime.dwLowDateTime=0xceefecc0, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0xceefecc0, ftLastWriteTime.dwHighDateTime=0x1d305eb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Cultures", cAlternateFileName="")) returned 1 [0033.949] FindNextFileW (in: hFindFile=0x381b80, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x520efa00, ftCreationTime.dwHighDateTime=0x1cbc41d, ftLastAccessTime.dwLowDateTime=0xd83064e0, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0x520efa00, ftLastWriteTime.dwHighDateTime=0x1cbc41d, nFileSizeHigh=0x0, nFileSizeLow=0x7eb48, dwReserved0=0x0, dwReserved1=0x0, cFileName="EXPSRV.DLL", cAlternateFileName="")) returned 1 [0033.949] FindNextFileW (in: hFindFile=0x381b80, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3ebd7300, ftCreationTime.dwHighDateTime=0x1cba5c3, ftLastAccessTime.dwLowDateTime=0xcef710e0, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0x3ebd7300, ftLastWriteTime.dwHighDateTime=0x1cba5c3, nFileSizeHigh=0x0, nFileSizeLow=0x21d78, dwReserved0=0x0, dwReserved1=0x0, cFileName="EXP_PDF.DLL", cAlternateFileName="")) returned 1 [0033.949] FindNextFileW (in: hFindFile=0x381b80, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf5bf6900, ftCreationTime.dwHighDateTime=0x1cba06e, ftLastAccessTime.dwLowDateTime=0xcf5b0aa0, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0xf5bf6900, ftLastWriteTime.dwHighDateTime=0x1cba06e, nFileSizeHigh=0x0, nFileSizeLow=0x11578, dwReserved0=0x0, dwReserved1=0x0, cFileName="EXP_XPS.DLL", cAlternateFileName="")) returned 1 [0033.950] FindNextFileW (in: hFindFile=0x381b80, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd66e7600, ftCreationTime.dwHighDateTime=0x1cb7002, ftLastAccessTime.dwLowDateTime=0xe572de20, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0xd66e7600, ftLastWriteTime.dwHighDateTime=0x1cb7002, nFileSizeHigh=0x0, nFileSizeLow=0x26560, dwReserved0=0x0, dwReserved1=0x0, cFileName="FLTLDR.EXE", cAlternateFileName="")) returned 1 [0033.950] FindNextFileW (in: hFindFile=0x381b80, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf7bf3f00, ftCreationTime.dwHighDateTime=0x1ca911f, ftLastAccessTime.dwLowDateTime=0x53907610, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xf7bf3f00, ftLastWriteTime.dwHighDateTime=0x1ca911f, nFileSizeHigh=0x0, nFileSizeLow=0x417360, dwReserved0=0x0, dwReserved1=0x0, cFileName="IACOM2.DLL", cAlternateFileName="")) returned 1 [0033.950] FindNextFileW (in: hFindFile=0x381b80, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe164800, ftCreationTime.dwHighDateTime=0x1cac048, ftLastAccessTime.dwLowDateTime=0x6626d2b0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xe164800, ftLastWriteTime.dwHighDateTime=0x1cac048, nFileSizeHigh=0x0, nFileSizeLow=0x31d88, dwReserved0=0x0, dwReserved1=0x0, cFileName="LICLUA.EXE", cAlternateFileName="")) returned 1 [0033.950] FindNextFileW (in: hFindFile=0x381b80, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc821f600, ftCreationTime.dwHighDateTime=0x1cbdfb3, ftLastAccessTime.dwLowDateTime=0xd776b9a0, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0xc821f600, ftLastWriteTime.dwHighDateTime=0x1cbdfb3, nFileSizeHigh=0x0, nFileSizeLow=0x183d780, dwReserved0=0x0, dwReserved1=0x0, cFileName="MSO.DLL", cAlternateFileName="")) returned 1 [0033.950] FindNextFileW (in: hFindFile=0x381b80, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xee94c400, ftCreationTime.dwHighDateTime=0x1cb7007, ftLastAccessTime.dwLowDateTime=0xd6225500, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0xee94c400, ftLastWriteTime.dwHighDateTime=0x1cb7007, nFileSizeHigh=0x0, nFileSizeLow=0x73b60, dwReserved0=0x0, dwReserved1=0x0, cFileName="MSOICONS.EXE", cAlternateFileName="")) returned 1 [0033.950] FindNextFileW (in: hFindFile=0x381b80, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe5e15000, ftCreationTime.dwHighDateTime=0x1cbf3e5, ftLastAccessTime.dwLowDateTime=0xec32f3e0, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0xe5e15000, ftLastWriteTime.dwHighDateTime=0x1cbf3e5, nFileSizeHigh=0x0, nFileSizeLow=0x4529780, dwReserved0=0x0, dwReserved1=0x0, cFileName="MSORES.DLL", cAlternateFileName="")) returned 1 [0033.950] FindNextFileW (in: hFindFile=0x381b80, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa4293d00, ftCreationTime.dwHighDateTime=0x1cbc468, ftLastAccessTime.dwLowDateTime=0xd77dddc0, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0xa4293d00, ftLastWriteTime.dwHighDateTime=0x1cbc468, nFileSizeHigh=0x0, nFileSizeLow=0x135f90, dwReserved0=0x0, dwReserved1=0x0, cFileName="msoshext.dll", cAlternateFileName="")) returned 1 [0033.951] FindNextFileW (in: hFindFile=0x381b80, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc276d800, ftCreationTime.dwHighDateTime=0x1cab8aa, ftLastAccessTime.dwLowDateTime=0x6a050eb0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xc276d800, ftLastWriteTime.dwHighDateTime=0x1cab8aa, nFileSizeHigh=0x0, nFileSizeLow=0xdb50, dwReserved0=0x0, dwReserved1=0x0, cFileName="MSOXEV.DLL", cAlternateFileName="")) returned 1 [0033.951] FindNextFileW (in: hFindFile=0x381b80, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x553f4600, ftCreationTime.dwHighDateTime=0x1cab7c9, ftLastAccessTime.dwLowDateTime=0x593ede30, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x553f4600, ftLastWriteTime.dwHighDateTime=0x1cab7c9, nFileSizeHigh=0x0, nFileSizeLow=0x1d950, dwReserved0=0x0, dwReserved1=0x0, cFileName="MSOXMLED.EXE", cAlternateFileName="")) returned 1 [0033.951] FindNextFileW (in: hFindFile=0x381b80, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x553f4600, ftCreationTime.dwHighDateTime=0x1cab7c9, ftLastAccessTime.dwLowDateTime=0x593ede30, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x553f4600, ftLastWriteTime.dwHighDateTime=0x1cab7c9, nFileSizeHigh=0x0, nFileSizeLow=0xdb80, dwReserved0=0x0, dwReserved1=0x0, cFileName="MSOXMLMF.DLL", cAlternateFileName="")) returned 1 [0033.951] FindNextFileW (in: hFindFile=0x381b80, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf3922200, ftCreationTime.dwHighDateTime=0x1ca911d, ftLastAccessTime.dwLowDateTime=0x59413f90, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xf3922200, ftLastWriteTime.dwHighDateTime=0x1ca911d, nFileSizeHigh=0x0, nFileSizeLow=0x124980, dwReserved0=0x0, dwReserved1=0x0, cFileName="MSPTLS.DLL", cAlternateFileName="")) returned 1 [0033.951] FindNextFileW (in: hFindFile=0x381b80, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x15d97a00, ftCreationTime.dwHighDateTime=0x1caa6a1, ftLastAccessTime.dwLowDateTime=0x6a1819b0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x15d97a00, ftLastWriteTime.dwHighDateTime=0x1caa6a1, nFileSizeHigh=0x0, nFileSizeLow=0xac370, dwReserved0=0x0, dwReserved1=0x0, cFileName="MSSOAP30.DLL", cAlternateFileName="")) returned 1 [0033.951] FindNextFileW (in: hFindFile=0x381b80, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8054ff00, ftCreationTime.dwHighDateTime=0x1cb7011, ftLastAccessTime.dwLowDateTime=0xcf459e40, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0x8054ff00, ftLastWriteTime.dwHighDateTime=0x1cb7011, nFileSizeHigh=0x0, nFileSizeLow=0x1a5b, dwReserved0=0x0, dwReserved1=0x0, cFileName="MUAUTH.CAB", cAlternateFileName="")) returned 1 [0033.951] FindNextFileW (in: hFindFile=0x381b80, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8054ff00, ftCreationTime.dwHighDateTime=0x1cb7011, ftLastAccessTime.dwLowDateTime=0xcf47ffa0, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0x8054ff00, ftLastWriteTime.dwHighDateTime=0x1cb7011, nFileSizeHigh=0x0, nFileSizeLow=0x6190, dwReserved0=0x0, dwReserved1=0x0, cFileName="MUOPTIN.DLL", cAlternateFileName="")) returned 1 [0033.951] FindNextFileW (in: hFindFile=0x381b80, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x161d5800, ftCreationTime.dwHighDateTime=0x1cbd856, ftLastAccessTime.dwLowDateTime=0xd63a22c0, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0x161d5800, ftLastWriteTime.dwHighDateTime=0x1cbd856, nFileSizeHigh=0x0, nFileSizeLow=0x38d88, dwReserved0=0x0, dwReserved1=0x0, cFileName="Oarpmany.exe", cAlternateFileName="")) returned 1 [0033.952] FindNextFileW (in: hFindFile=0x381b80, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7f9d2900, ftCreationTime.dwHighDateTime=0x1cab9ac, ftLastAccessTime.dwLowDateTime=0xbe0f9da0, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0x7f9d2900, ftLastWriteTime.dwHighDateTime=0x1cab9ac, nFileSizeHigh=0x0, nFileSizeLow=0x7568, dwReserved0=0x0, dwReserved1=0x0, cFileName="ODBCMON.DLL", cAlternateFileName="")) returned 1 [0033.952] FindNextFileW (in: hFindFile=0x381b80, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee2ce510, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xbe974c00, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0xbe974c00, ftLastWriteTime.dwHighDateTime=0x1d305f1, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Office Setup Controller", cAlternateFileName="OFFICE~1")) returned 1 [0033.952] FindNextFileW (in: hFindFile=0x381b80, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5de00200, ftCreationTime.dwHighDateTime=0x1cac9ac, ftLastAccessTime.dwLowDateTime=0x6bc953f0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x5de00200, ftLastWriteTime.dwHighDateTime=0x1cac9ac, nFileSizeHigh=0x0, nFileSizeLow=0x2560, dwReserved0=0x0, dwReserved1=0x0, cFileName="OFFREL.DLL", cAlternateFileName="")) returned 1 [0033.952] FindNextFileW (in: hFindFile=0x381b80, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5de00200, ftCreationTime.dwHighDateTime=0x1cac9ac, ftLastAccessTime.dwLowDateTime=0x6c2166d0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x5de00200, ftLastWriteTime.dwHighDateTime=0x1cac9ac, nFileSizeHigh=0x0, nFileSizeLow=0x4d88, dwReserved0=0x0, dwReserved1=0x0, cFileName="OPHPROXY.DLL", cAlternateFileName="")) returned 1 [0033.952] FindNextFileW (in: hFindFile=0x381b80, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf6a43200, ftCreationTime.dwHighDateTime=0x1cb700e, ftLastAccessTime.dwLowDateTime=0xcf47ffa0, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0xf6a43200, ftLastWriteTime.dwHighDateTime=0x1cb700e, nFileSizeHigh=0x0, nFileSizeLow=0x47a0, dwReserved0=0x0, dwReserved1=0x0, cFileName="OPTINPS.DLL", cAlternateFileName="")) returned 1 [0033.952] FindNextFileW (in: hFindFile=0x381b80, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1570ec00, ftCreationTime.dwHighDateTime=0x1cbc479, ftLastAccessTime.dwLowDateTime=0xe5d21520, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0x1570ec00, ftLastWriteTime.dwHighDateTime=0x1cbc479, nFileSizeHigh=0x0, nFileSizeLow=0xb7ba8, dwReserved0=0x0, dwReserved1=0x0, cFileName="PJ11OD11.DLL", cAlternateFileName="")) returned 1 [0033.952] FindNextFileW (in: hFindFile=0x381b80, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9a461000, ftCreationTime.dwHighDateTime=0x1cb7018, ftLastAccessTime.dwLowDateTime=0xe5d47680, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0x9a461000, ftLastWriteTime.dwHighDateTime=0x1cb7018, nFileSizeHigh=0x0, nFileSizeLow=0x3fb90, dwReserved0=0x0, dwReserved1=0x0, cFileName="PJRESC.DLL", cAlternateFileName="")) returned 1 [0033.952] FindNextFileW (in: hFindFile=0x381b80, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x74bd800, ftCreationTime.dwHighDateTime=0x1cb71c8, ftLastAccessTime.dwLowDateTime=0xe5d93940, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0x74bd800, ftLastWriteTime.dwHighDateTime=0x1cb71c8, nFileSizeHigh=0x0, nFileSizeLow=0x3c2b90, dwReserved0=0x0, dwReserved1=0x0, cFileName="PRJRES.DLL", cAlternateFileName="")) returned 1 [0033.952] FindNextFileW (in: hFindFile=0x381b80, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4a199a00, ftCreationTime.dwHighDateTime=0x1cba5d5, ftLastAccessTime.dwLowDateTime=0xdac16060, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0x4a199a00, ftLastWriteTime.dwHighDateTime=0x1cba5d5, nFileSizeHigh=0x0, nFileSizeLow=0x1c8b68, dwReserved0=0x0, dwReserved1=0x0, cFileName="RICHED20.DLL", cAlternateFileName="")) returned 1 [0033.953] FindNextFileW (in: hFindFile=0x381b80, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7339ac00, ftCreationTime.dwHighDateTime=0x1cbdfc2, ftLastAccessTime.dwLowDateTime=0xe5d93940, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0x7339ac00, ftLastWriteTime.dwHighDateTime=0x1cbdfc2, nFileSizeHigh=0x0, nFileSizeLow=0x90778, dwReserved0=0x0, dwReserved1=0x0, cFileName="SERCONV.DLL", cAlternateFileName="")) returned 1 [0033.953] FindNextFileW (in: hFindFile=0x381b80, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xded68100, ftCreationTime.dwHighDateTime=0x1cb5970, ftLastAccessTime.dwLowDateTime=0xd68d72e0, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0xded68100, ftLastWriteTime.dwHighDateTime=0x1cb5970, nFileSizeHigh=0x0, nFileSizeLow=0xc6b00, dwReserved0=0x0, dwReserved1=0x0, cFileName="USP10.DLL", cAlternateFileName="")) returned 1 [0033.953] FindNextFileW (in: hFindFile=0x381b80, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x520efa00, ftCreationTime.dwHighDateTime=0x1cbc41d, ftLastAccessTime.dwLowDateTime=0xd83064e0, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0x520efa00, ftLastWriteTime.dwHighDateTime=0x1cbc41d, nFileSizeHigh=0x0, nFileSizeLow=0xc150, dwReserved0=0x0, dwReserved1=0x0, cFileName="VBAJET32.DLL", cAlternateFileName="")) returned 1 [0033.953] FindNextFileW (in: hFindFile=0x381b80, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x14a84d00, ftCreationTime.dwHighDateTime=0x1caa6a1, ftLastAccessTime.dwLowDateTime=0x5e5e73d0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x14a84d00, ftLastWriteTime.dwHighDateTime=0x1caa6a1, nFileSizeHigh=0x0, nFileSizeLow=0x23f90, dwReserved0=0x0, dwReserved1=0x0, cFileName="WISC30.DLL", cAlternateFileName="")) returned 1 [0033.953] FindNextFileW (in: hFindFile=0x381b80, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x14a84d00, ftCreationTime.dwHighDateTime=0x1caa6a1, ftLastAccessTime.dwLowDateTime=0x5e5e73d0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x14a84d00, ftLastWriteTime.dwHighDateTime=0x1caa6a1, nFileSizeHigh=0x0, nFileSizeLow=0x23f90, dwReserved0=0x0, dwReserved1=0x0, cFileName="WISC30.DLL", cAlternateFileName="")) returned 0 [0033.953] FindClose (in: hFindFile=0x381b80 | out: hFindFile=0x381b80) returned 1 [0033.953] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e77c) returned 1 [0033.953] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e788) returned 1 [0033.953] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e744) returned 1 [0033.953] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\1033", nBufferLength=0x105, lpBuffer=0x31e24c, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\1033", lpFilePart=0x0) returned 0x3c [0033.953] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\1033\\", nBufferLength=0x105, lpBuffer=0x31e220, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\1033\\", lpFilePart=0x0) returned 0x3d [0033.953] FindFirstFileW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\1033\\*", lpFindFileData=0x31e46c | out: lpFindFileData=0x31e46c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee282250, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xc24d0020, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0xc24d0020, ftLastWriteTime.dwHighDateTime=0x1d305eb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x381b80 [0033.954] FindNextFileW (in: hFindFile=0x381b80, lpFindFileData=0x31e47c | out: lpFindFileData=0x31e47c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee282250, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xc24d0020, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0xc24d0020, ftLastWriteTime.dwHighDateTime=0x1d305eb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0033.954] FindNextFileW (in: hFindFile=0x381b80, lpFindFileData=0x31e47c | out: lpFindFileData=0x31e47c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x81925f00, ftCreationTime.dwHighDateTime=0x1caca23, ftLastAccessTime.dwLowDateTime=0xee2a83b0, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0x81925f00, ftLastWriteTime.dwHighDateTime=0x1caca23, nFileSizeHigh=0x0, nFileSizeLow=0x305a8, dwReserved0=0x0, dwReserved1=0x0, cFileName="ACEINTL.DLL", cAlternateFileName="")) returned 1 [0033.955] FindNextFileW (in: hFindFile=0x381b80, lpFindFileData=0x31e47c | out: lpFindFileData=0x31e47c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x77357e00, ftCreationTime.dwHighDateTime=0x1cac9ad, ftLastAccessTime.dwLowDateTime=0xee2a83b0, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0x77357e00, ftLastWriteTime.dwHighDateTime=0x1cac9ad, nFileSizeHigh=0x0, nFileSizeLow=0xcdb0, dwReserved0=0x0, dwReserved1=0x0, cFileName="ACEODBCI.DLL", cAlternateFileName="")) returned 1 [0033.955] FindNextFileW (in: hFindFile=0x381b80, lpFindFileData=0x31e47c | out: lpFindFileData=0x31e47c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x77357e00, ftCreationTime.dwHighDateTime=0x1cac9ad, ftLastAccessTime.dwLowDateTime=0xee2a83b0, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0x77357e00, ftLastWriteTime.dwHighDateTime=0x1cac9ad, nFileSizeHigh=0x0, nFileSizeLow=0x51d0, dwReserved0=0x0, dwReserved1=0x0, cFileName="ACERECR.DLL", cAlternateFileName="")) returned 1 [0033.955] FindNextFileW (in: hFindFile=0x381b80, lpFindFileData=0x31e47c | out: lpFindFileData=0x31e47c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x81925f00, ftCreationTime.dwHighDateTime=0x1caca23, ftLastAccessTime.dwLowDateTime=0xee2a83b0, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0x81925f00, ftLastWriteTime.dwHighDateTime=0x1caca23, nFileSizeHigh=0x0, nFileSizeLow=0xd2990, dwReserved0=0x0, dwReserved1=0x0, cFileName="ACEWSTR.DLL", cAlternateFileName="")) returned 1 [0033.955] FindNextFileW (in: hFindFile=0x381b80, lpFindFileData=0x31e47c | out: lpFindFileData=0x31e47c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7f139500, ftCreationTime.dwHighDateTime=0x1c69359, ftLastAccessTime.dwLowDateTime=0xee2ce510, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0x7f139500, ftLastWriteTime.dwHighDateTime=0x1c69359, nFileSizeHigh=0x0, nFileSizeLow=0x19a3ff, dwReserved0=0x0, dwReserved1=0x0, cFileName="ADO210.CHM", cAlternateFileName="")) returned 1 [0033.955] FindNextFileW (in: hFindFile=0x381b80, lpFindFileData=0x31e47c | out: lpFindFileData=0x31e47c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe4b06d00, ftCreationTime.dwHighDateTime=0x1ca9127, ftLastAccessTime.dwLowDateTime=0xee2ce510, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xe4b06d00, ftLastWriteTime.dwHighDateTime=0x1ca9127, nFileSizeHigh=0x0, nFileSizeLow=0x25b50, dwReserved0=0x0, dwReserved1=0x0, cFileName="ALRTINTL.DLL", cAlternateFileName="")) returned 1 [0033.955] FindNextFileW (in: hFindFile=0x381b80, lpFindFileData=0x31e47c | out: lpFindFileData=0x31e47c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe5e15000, ftCreationTime.dwHighDateTime=0x1cbf3e5, ftLastAccessTime.dwLowDateTime=0xc24a9ec0, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0xe5e15000, ftLastWriteTime.dwHighDateTime=0x1cbf3e5, nFileSizeHigh=0x0, nFileSizeLow=0x269380, dwReserved0=0x0, dwReserved1=0x0, cFileName="MSOINTL.DLL", cAlternateFileName="")) returned 1 [0033.955] FindNextFileW (in: hFindFile=0x381b80, lpFindFileData=0x31e47c | out: lpFindFileData=0x31e47c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5b30dd00, ftCreationTime.dwHighDateTime=0x1cac9ab, ftLastAccessTime.dwLowDateTime=0xeee42ef0, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0x5b30dd00, ftLastWriteTime.dwHighDateTime=0x1cac9ab, nFileSizeHigh=0x0, nFileSizeLow=0xd980, dwReserved0=0x0, dwReserved1=0x0, cFileName="MSOINTL.DLL.IDX_DLL", cAlternateFileName="MSOINT~1.IDX")) returned 1 [0033.955] FindNextFileW (in: hFindFile=0x381b80, lpFindFileData=0x31e47c | out: lpFindFileData=0x31e47c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5c620a00, ftCreationTime.dwHighDateTime=0x1cac9ab, ftLastAccessTime.dwLowDateTime=0xeee8f1b0, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0x5c620a00, ftLastWriteTime.dwHighDateTime=0x1cac9ab, nFileSizeHigh=0x0, nFileSizeLow=0x152f80, dwReserved0=0x0, dwReserved1=0x0, cFileName="MSOINTL.REST.IDX_DLL", cAlternateFileName="MSOINT~2.IDX")) returned 1 [0033.955] FindNextFileW (in: hFindFile=0x381b80, lpFindFileData=0x31e47c | out: lpFindFileData=0x31e47c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x15d97a00, ftCreationTime.dwHighDateTime=0x1caa6a1, ftLastAccessTime.dwLowDateTime=0xeeedb470, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0x15d97a00, ftLastWriteTime.dwHighDateTime=0x1caa6a1, nFileSizeHigh=0x0, nFileSizeLow=0xa388, dwReserved0=0x0, dwReserved1=0x0, cFileName="MSSOAPR3.DLL", cAlternateFileName="")) returned 1 [0033.955] FindNextFileW (in: hFindFile=0x381b80, lpFindFileData=0x31e47c | out: lpFindFileData=0x31e47c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x356f9800, ftCreationTime.dwHighDateTime=0x1ca911f, ftLastAccessTime.dwLowDateTime=0xeef015d0, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0x356f9800, ftLastWriteTime.dwHighDateTime=0x1ca911f, nFileSizeHigh=0x0, nFileSizeLow=0x2d88, dwReserved0=0x0, dwReserved1=0x0, cFileName="OARPMANR.DLL", cAlternateFileName="")) returned 1 [0033.955] FindNextFileW (in: hFindFile=0x381b80, lpFindFileData=0x31e47c | out: lpFindFileData=0x31e47c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4d183e00, ftCreationTime.dwHighDateTime=0x1ca520c, ftLastAccessTime.dwLowDateTime=0xef0320d0, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0x4d183e00, ftLastWriteTime.dwHighDateTime=0x1ca520c, nFileSizeHigh=0x0, nFileSizeLow=0x795, dwReserved0=0x0, dwReserved1=0x0, cFileName="README.HTM", cAlternateFileName="")) returned 1 [0033.955] FindNextFileW (in: hFindFile=0x381b80, lpFindFileData=0x31e47c | out: lpFindFileData=0x31e47c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb401ca00, ftCreationTime.dwHighDateTime=0x1cbdec9, ftLastAccessTime.dwLowDateTime=0xc24d0020, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0xb401ca00, ftLastWriteTime.dwHighDateTime=0x1cbdec9, nFileSizeHigh=0x0, nFileSizeLow=0x19b80, dwReserved0=0x0, dwReserved1=0x0, cFileName="xlsrvintl.dll", cAlternateFileName="XLSRVI~1.DLL")) returned 1 [0033.956] FindNextFileW (in: hFindFile=0x381b80, lpFindFileData=0x31e47c | out: lpFindFileData=0x31e47c*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0033.956] FindClose (in: hFindFile=0x381b80 | out: hFindFile=0x381b80) returned 1 [0033.956] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e704) returned 1 [0033.956] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e710) returned 1 [0033.956] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e744) returned 1 [0033.956] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\1033", nBufferLength=0x105, lpBuffer=0x31e24c, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\1033", lpFilePart=0x0) returned 0x3c [0033.956] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\1033\\", nBufferLength=0x105, lpBuffer=0x31e220, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\1033\\", lpFilePart=0x0) returned 0x3d [0033.956] FindFirstFileW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\1033\\*", lpFindFileData=0x31e46c | out: lpFindFileData=0x31e46c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee282250, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xc24d0020, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0xc24d0020, ftLastWriteTime.dwHighDateTime=0x1d305eb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x381b80 [0033.957] FindNextFileW (in: hFindFile=0x381b80, lpFindFileData=0x31e47c | out: lpFindFileData=0x31e47c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee282250, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xc24d0020, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0xc24d0020, ftLastWriteTime.dwHighDateTime=0x1d305eb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0033.957] FindNextFileW (in: hFindFile=0x381b80, lpFindFileData=0x31e47c | out: lpFindFileData=0x31e47c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x81925f00, ftCreationTime.dwHighDateTime=0x1caca23, ftLastAccessTime.dwLowDateTime=0xee2a83b0, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0x81925f00, ftLastWriteTime.dwHighDateTime=0x1caca23, nFileSizeHigh=0x0, nFileSizeLow=0x305a8, dwReserved0=0x0, dwReserved1=0x0, cFileName="ACEINTL.DLL", cAlternateFileName="")) returned 1 [0033.957] FindNextFileW (in: hFindFile=0x381b80, lpFindFileData=0x31e47c | out: lpFindFileData=0x31e47c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x77357e00, ftCreationTime.dwHighDateTime=0x1cac9ad, ftLastAccessTime.dwLowDateTime=0xee2a83b0, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0x77357e00, ftLastWriteTime.dwHighDateTime=0x1cac9ad, nFileSizeHigh=0x0, nFileSizeLow=0xcdb0, dwReserved0=0x0, dwReserved1=0x0, cFileName="ACEODBCI.DLL", cAlternateFileName="")) returned 1 [0033.958] FindNextFileW (in: hFindFile=0x381b80, lpFindFileData=0x31e47c | out: lpFindFileData=0x31e47c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x77357e00, ftCreationTime.dwHighDateTime=0x1cac9ad, ftLastAccessTime.dwLowDateTime=0xee2a83b0, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0x77357e00, ftLastWriteTime.dwHighDateTime=0x1cac9ad, nFileSizeHigh=0x0, nFileSizeLow=0x51d0, dwReserved0=0x0, dwReserved1=0x0, cFileName="ACERECR.DLL", cAlternateFileName="")) returned 1 [0033.958] FindNextFileW (in: hFindFile=0x381b80, lpFindFileData=0x31e47c | out: lpFindFileData=0x31e47c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x81925f00, ftCreationTime.dwHighDateTime=0x1caca23, ftLastAccessTime.dwLowDateTime=0xee2a83b0, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0x81925f00, ftLastWriteTime.dwHighDateTime=0x1caca23, nFileSizeHigh=0x0, nFileSizeLow=0xd2990, dwReserved0=0x0, dwReserved1=0x0, cFileName="ACEWSTR.DLL", cAlternateFileName="")) returned 1 [0033.958] FindNextFileW (in: hFindFile=0x381b80, lpFindFileData=0x31e47c | out: lpFindFileData=0x31e47c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7f139500, ftCreationTime.dwHighDateTime=0x1c69359, ftLastAccessTime.dwLowDateTime=0xee2ce510, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0x7f139500, ftLastWriteTime.dwHighDateTime=0x1c69359, nFileSizeHigh=0x0, nFileSizeLow=0x19a3ff, dwReserved0=0x0, dwReserved1=0x0, cFileName="ADO210.CHM", cAlternateFileName="")) returned 1 [0033.958] FindNextFileW (in: hFindFile=0x381b80, lpFindFileData=0x31e47c | out: lpFindFileData=0x31e47c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe4b06d00, ftCreationTime.dwHighDateTime=0x1ca9127, ftLastAccessTime.dwLowDateTime=0xee2ce510, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xe4b06d00, ftLastWriteTime.dwHighDateTime=0x1ca9127, nFileSizeHigh=0x0, nFileSizeLow=0x25b50, dwReserved0=0x0, dwReserved1=0x0, cFileName="ALRTINTL.DLL", cAlternateFileName="")) returned 1 [0033.958] FindNextFileW (in: hFindFile=0x381b80, lpFindFileData=0x31e47c | out: lpFindFileData=0x31e47c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe5e15000, ftCreationTime.dwHighDateTime=0x1cbf3e5, ftLastAccessTime.dwLowDateTime=0xc24a9ec0, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0xe5e15000, ftLastWriteTime.dwHighDateTime=0x1cbf3e5, nFileSizeHigh=0x0, nFileSizeLow=0x269380, dwReserved0=0x0, dwReserved1=0x0, cFileName="MSOINTL.DLL", cAlternateFileName="")) returned 1 [0033.958] FindNextFileW (in: hFindFile=0x381b80, lpFindFileData=0x31e47c | out: lpFindFileData=0x31e47c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5b30dd00, ftCreationTime.dwHighDateTime=0x1cac9ab, ftLastAccessTime.dwLowDateTime=0xeee42ef0, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0x5b30dd00, ftLastWriteTime.dwHighDateTime=0x1cac9ab, nFileSizeHigh=0x0, nFileSizeLow=0xd980, dwReserved0=0x0, dwReserved1=0x0, cFileName="MSOINTL.DLL.IDX_DLL", cAlternateFileName="MSOINT~1.IDX")) returned 1 [0033.958] FindNextFileW (in: hFindFile=0x381b80, lpFindFileData=0x31e47c | out: lpFindFileData=0x31e47c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5c620a00, ftCreationTime.dwHighDateTime=0x1cac9ab, ftLastAccessTime.dwLowDateTime=0xeee8f1b0, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0x5c620a00, ftLastWriteTime.dwHighDateTime=0x1cac9ab, nFileSizeHigh=0x0, nFileSizeLow=0x152f80, dwReserved0=0x0, dwReserved1=0x0, cFileName="MSOINTL.REST.IDX_DLL", cAlternateFileName="MSOINT~2.IDX")) returned 1 [0033.958] FindNextFileW (in: hFindFile=0x381b80, lpFindFileData=0x31e47c | out: lpFindFileData=0x31e47c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x15d97a00, ftCreationTime.dwHighDateTime=0x1caa6a1, ftLastAccessTime.dwLowDateTime=0xeeedb470, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0x15d97a00, ftLastWriteTime.dwHighDateTime=0x1caa6a1, nFileSizeHigh=0x0, nFileSizeLow=0xa388, dwReserved0=0x0, dwReserved1=0x0, cFileName="MSSOAPR3.DLL", cAlternateFileName="")) returned 1 [0033.958] FindNextFileW (in: hFindFile=0x381b80, lpFindFileData=0x31e47c | out: lpFindFileData=0x31e47c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x356f9800, ftCreationTime.dwHighDateTime=0x1ca911f, ftLastAccessTime.dwLowDateTime=0xeef015d0, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0x356f9800, ftLastWriteTime.dwHighDateTime=0x1ca911f, nFileSizeHigh=0x0, nFileSizeLow=0x2d88, dwReserved0=0x0, dwReserved1=0x0, cFileName="OARPMANR.DLL", cAlternateFileName="")) returned 1 [0033.959] FindNextFileW (in: hFindFile=0x381b80, lpFindFileData=0x31e47c | out: lpFindFileData=0x31e47c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4d183e00, ftCreationTime.dwHighDateTime=0x1ca520c, ftLastAccessTime.dwLowDateTime=0xef0320d0, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0x4d183e00, ftLastWriteTime.dwHighDateTime=0x1ca520c, nFileSizeHigh=0x0, nFileSizeLow=0x795, dwReserved0=0x0, dwReserved1=0x0, cFileName="README.HTM", cAlternateFileName="")) returned 1 [0033.959] FindNextFileW (in: hFindFile=0x381b80, lpFindFileData=0x31e47c | out: lpFindFileData=0x31e47c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb401ca00, ftCreationTime.dwHighDateTime=0x1cbdec9, ftLastAccessTime.dwLowDateTime=0xc24d0020, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0xb401ca00, ftLastWriteTime.dwHighDateTime=0x1cbdec9, nFileSizeHigh=0x0, nFileSizeLow=0x19b80, dwReserved0=0x0, dwReserved1=0x0, cFileName="xlsrvintl.dll", cAlternateFileName="XLSRVI~1.DLL")) returned 1 [0033.959] FindNextFileW (in: hFindFile=0x381b80, lpFindFileData=0x31e47c | out: lpFindFileData=0x31e47c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb401ca00, ftCreationTime.dwHighDateTime=0x1cbdec9, ftLastAccessTime.dwLowDateTime=0xc24d0020, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0xb401ca00, ftLastWriteTime.dwHighDateTime=0x1cbdec9, nFileSizeHigh=0x0, nFileSizeLow=0x19b80, dwReserved0=0x0, dwReserved1=0x0, cFileName="xlsrvintl.dll", cAlternateFileName="XLSRVI~1.DLL")) returned 0 [0033.959] FindClose (in: hFindFile=0x381b80 | out: hFindFile=0x381b80) returned 1 [0033.960] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e704) returned 1 [0033.960] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e710) returned 1 [0033.960] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e744) returned 1 [0033.960] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Cultures", nBufferLength=0x105, lpBuffer=0x31e24c, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Cultures", lpFilePart=0x0) returned 0x40 [0033.960] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Cultures\\", nBufferLength=0x105, lpBuffer=0x31e220, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Cultures\\", lpFilePart=0x0) returned 0x41 [0033.960] FindFirstFileW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Cultures\\*", lpFindFileData=0x31e46c | out: lpFindFileData=0x31e46c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xceefecc0, ftCreationTime.dwHighDateTime=0x1d305eb, ftLastAccessTime.dwLowDateTime=0xceefecc0, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0xceefecc0, ftLastWriteTime.dwHighDateTime=0x1d305eb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x381b80 [0033.963] FindNextFileW (in: hFindFile=0x381b80, lpFindFileData=0x31e47c | out: lpFindFileData=0x31e47c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xceefecc0, ftCreationTime.dwHighDateTime=0x1d305eb, ftLastAccessTime.dwLowDateTime=0xceefecc0, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0xceefecc0, ftLastWriteTime.dwHighDateTime=0x1d305eb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0033.963] FindNextFileW (in: hFindFile=0x381b80, lpFindFileData=0x31e47c | out: lpFindFileData=0x31e47c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7cbc7d00, ftCreationTime.dwHighDateTime=0x1cbe3e3, ftLastAccessTime.dwLowDateTime=0xcef24e20, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0x7cbc7d00, ftLastWriteTime.dwHighDateTime=0x1cbe3e3, nFileSizeHigh=0x0, nFileSizeLow=0x419360, dwReserved0=0x0, dwReserved1=0x0, cFileName="OFFICE.ODF", cAlternateFileName="")) returned 1 [0033.963] FindNextFileW (in: hFindFile=0x381b80, lpFindFileData=0x31e47c | out: lpFindFileData=0x31e47c*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0033.963] FindClose (in: hFindFile=0x381b80 | out: hFindFile=0x381b80) returned 1 [0033.963] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e704) returned 1 [0033.963] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e710) returned 1 [0033.963] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e744) returned 1 [0033.963] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Cultures", nBufferLength=0x105, lpBuffer=0x31e24c, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Cultures", lpFilePart=0x0) returned 0x40 [0033.963] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Cultures\\", nBufferLength=0x105, lpBuffer=0x31e220, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Cultures\\", lpFilePart=0x0) returned 0x41 [0033.963] FindFirstFileW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Cultures\\*", lpFindFileData=0x31e46c | out: lpFindFileData=0x31e46c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xceefecc0, ftCreationTime.dwHighDateTime=0x1d305eb, ftLastAccessTime.dwLowDateTime=0xceefecc0, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0xceefecc0, ftLastWriteTime.dwHighDateTime=0x1d305eb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x381b80 [0033.964] FindNextFileW (in: hFindFile=0x381b80, lpFindFileData=0x31e47c | out: lpFindFileData=0x31e47c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xceefecc0, ftCreationTime.dwHighDateTime=0x1d305eb, ftLastAccessTime.dwLowDateTime=0xceefecc0, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0xceefecc0, ftLastWriteTime.dwHighDateTime=0x1d305eb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0033.964] FindNextFileW (in: hFindFile=0x381b80, lpFindFileData=0x31e47c | out: lpFindFileData=0x31e47c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7cbc7d00, ftCreationTime.dwHighDateTime=0x1cbe3e3, ftLastAccessTime.dwLowDateTime=0xcef24e20, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0x7cbc7d00, ftLastWriteTime.dwHighDateTime=0x1cbe3e3, nFileSizeHigh=0x0, nFileSizeLow=0x419360, dwReserved0=0x0, dwReserved1=0x0, cFileName="OFFICE.ODF", cAlternateFileName="")) returned 1 [0033.964] FindNextFileW (in: hFindFile=0x381b80, lpFindFileData=0x31e47c | out: lpFindFileData=0x31e47c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7cbc7d00, ftCreationTime.dwHighDateTime=0x1cbe3e3, ftLastAccessTime.dwLowDateTime=0xcef24e20, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0x7cbc7d00, ftLastWriteTime.dwHighDateTime=0x1cbe3e3, nFileSizeHigh=0x0, nFileSizeLow=0x419360, dwReserved0=0x0, dwReserved1=0x0, cFileName="OFFICE.ODF", cAlternateFileName="")) returned 0 [0033.964] FindClose (in: hFindFile=0x381b80 | out: hFindFile=0x381b80) returned 1 [0033.964] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e704) returned 1 [0033.964] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e710) returned 1 [0033.964] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e744) returned 1 [0033.964] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller", nBufferLength=0x105, lpBuffer=0x31e24c, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller", lpFilePart=0x0) returned 0x4f [0033.964] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\", nBufferLength=0x105, lpBuffer=0x31e220, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\", lpFilePart=0x0) returned 0x50 [0033.964] FindFirstFileW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\*", lpFindFileData=0x31e46c | out: lpFindFileData=0x31e46c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee2ce510, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xbe974c00, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0xbe974c00, ftLastWriteTime.dwHighDateTime=0x1d305f1, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x381b80 [0033.966] FindNextFileW (in: hFindFile=0x381b80, lpFindFileData=0x31e47c | out: lpFindFileData=0x31e47c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee2ce510, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xbe974c00, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0xbe974c00, ftLastWriteTime.dwHighDateTime=0x1d305f1, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0033.967] FindNextFileW (in: hFindFile=0x381b80, lpFindFileData=0x31e47c | out: lpFindFileData=0x31e47c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x15419830, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x17bd2750, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x17bd2750, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Access.en-us", cAlternateFileName="ACCESS~1.EN-")) returned 1 [0033.967] FindNextFileW (in: hFindFile=0x381b80, lpFindFileData=0x31e47c | out: lpFindFileData=0x31e47c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfa64b3d0, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xfa64b3d0, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xfa64b3d0, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Excel.en-us", cAlternateFileName="EXCEL~1.EN-")) returned 1 [0033.967] FindNextFileW (in: hFindFile=0x381b80, lpFindFileData=0x31e47c | out: lpFindFileData=0x31e47c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd658ff0, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xfd67f150, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xfd67f150, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Groove.en-us", cAlternateFileName="GROOVE~1.EN-")) returned 1 [0033.967] FindNextFileW (in: hFindFile=0x381b80, lpFindFileData=0x31e47c | out: lpFindFileData=0x31e47c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x112a3b30, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x112a3b30, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x112a3b30, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="InfoPath.en-us", cAlternateFileName="INFOPA~1.EN-")) returned 1 [0033.967] FindNextFileW (in: hFindFile=0x381b80, lpFindFileData=0x31e47c | out: lpFindFileData=0x31e47c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe164800, ftCreationTime.dwHighDateTime=0x1cac048, ftLastAccessTime.dwLowDateTime=0x6b277670, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xe164800, ftLastWriteTime.dwHighDateTime=0x1cac048, nFileSizeHigh=0x0, nFileSizeLow=0x8b7b8, dwReserved0=0x0, dwReserved1=0x0, cFileName="ODeploy.exe", cAlternateFileName="")) returned 1 [0033.967] FindNextFileW (in: hFindFile=0x381b80, lpFindFileData=0x31e47c | out: lpFindFileData=0x31e47c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee2ce510, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xc2600b20, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0xc2600b20, ftLastWriteTime.dwHighDateTime=0x1d305eb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Office.en-us", cAlternateFileName="OFFICE~1.EN-")) returned 1 [0033.968] FindNextFileW (in: hFindFile=0x381b80, lpFindFileData=0x31e47c | out: lpFindFileData=0x31e47c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x19b82c30, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x19b82c30, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x19b82c30, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Office32.en-us", cAlternateFileName="OFFICE~2.EN-")) returned 1 [0033.968] FindNextFileW (in: hFindFile=0x381b80, lpFindFileData=0x31e47c | out: lpFindFileData=0x31e47c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x22200730, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x22200730, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x22200730, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Office32.WW", cAlternateFileName="")) returned 1 [0033.968] FindNextFileW (in: hFindFile=0x381b80, lpFindFileData=0x31e47c | out: lpFindFileData=0x31e47c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc840bb0, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0xc8d9130, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xc8d9130, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="OneNote.en-us", cAlternateFileName="ONENOT~1.EN-")) returned 1 [0033.968] FindNextFileW (in: hFindFile=0x381b80, lpFindFileData=0x31e47c | out: lpFindFileData=0x31e47c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x302b0500, ftCreationTime.dwHighDateTime=0x1cba073, ftLastAccessTime.dwLowDateTime=0xcf459e40, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0x302b0500, ftLastWriteTime.dwHighDateTime=0x1cba073, nFileSizeHigh=0x0, nFileSizeLow=0x709b68, dwReserved0=0x0, dwReserved1=0x0, cFileName="OSETUP.DLL", cAlternateFileName="")) returned 1 [0033.968] FindNextFileW (in: hFindFile=0x381b80, lpFindFileData=0x31e47c | out: lpFindFileData=0x31e47c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5de00200, ftCreationTime.dwHighDateTime=0x1cac9ac, ftLastAccessTime.dwLowDateTime=0x598fccf0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x5de00200, ftLastWriteTime.dwHighDateTime=0x1cac9ac, nFileSizeHigh=0x0, nFileSizeLow=0xb9a0, dwReserved0=0x0, dwReserved1=0x0, cFileName="OSetupPS.dll", cAlternateFileName="")) returned 1 [0033.968] FindNextFileW (in: hFindFile=0x381b80, lpFindFileData=0x31e47c | out: lpFindFileData=0x31e47c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x14af010, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x2095e10, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x2095e10, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Outlook.en-us", cAlternateFileName="OUTLOO~1.EN-")) returned 1 [0033.968] FindNextFileW (in: hFindFile=0x381b80, lpFindFileData=0x31e47c | out: lpFindFileData=0x31e47c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb169e000, ftCreationTime.dwHighDateTime=0x1ca911f, ftLastAccessTime.dwLowDateTime=0x6cee1d10, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xb169e000, ftLastWriteTime.dwHighDateTime=0x1ca911f, nFileSizeHigh=0x0, nFileSizeLow=0x165510, dwReserved0=0x0, dwReserved1=0x0, cFileName="pidgenx.dll", cAlternateFileName="")) returned 1 [0033.968] FindNextFileW (in: hFindFile=0x381b80, lpFindFileData=0x31e47c | out: lpFindFileData=0x31e47c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x17eefe00, ftCreationTime.dwHighDateTime=0x1ca9120, ftLastAccessTime.dwLowDateTime=0xbe99ad60, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0x17eefe00, ftLastWriteTime.dwHighDateTime=0x1ca9120, nFileSizeHigh=0x0, nFileSizeLow=0xaec3a, dwReserved0=0x0, dwReserved1=0x0, cFileName="pkeyconfig-office.xrm-ms", cAlternateFileName="PKEYCO~1.XRM")) returned 1 [0033.968] FindNextFileW (in: hFindFile=0x381b80, lpFindFileData=0x31e47c | out: lpFindFileData=0x31e47c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6904ef00, ftCreationTime.dwHighDateTime=0x1ca912c, ftLastAccessTime.dwLowDateTime=0x6cf07e70, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x6904ef00, ftLastWriteTime.dwHighDateTime=0x1ca912c, nFileSizeHigh=0x0, nFileSizeLow=0x3d78, dwReserved0=0x0, dwReserved1=0x0, cFileName="pkeyconfig.companion.dll", cAlternateFileName="PKEYCO~1.DLL")) returned 1 [0033.968] FindNextFileW (in: hFindFile=0x381b80, lpFindFileData=0x31e47c | out: lpFindFileData=0x31e47c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf5db14d0, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xf5e95d10, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xf5e95d10, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="PowerPoint.en-us", cAlternateFileName="POWERP~1.EN-")) returned 1 [0033.968] FindNextFileW (in: hFindFile=0x381b80, lpFindFileData=0x31e47c | out: lpFindFileData=0x31e47c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xbe2e8f80, ftCreationTime.dwHighDateTime=0x1d305f1, ftLastAccessTime.dwLowDateTime=0xbec48620, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0xbec48620, ftLastWriteTime.dwHighDateTime=0x1d305f1, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="PRJPROR", cAlternateFileName="")) returned 1 [0033.969] FindNextFileW (in: hFindFile=0x381b80, lpFindFileData=0x31e47c | out: lpFindFileData=0x31e47c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xaf551ba0, ftCreationTime.dwHighDateTime=0x1d305f1, ftLastAccessTime.dwLowDateTime=0xaf577d00, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0xaf577d00, ftLastWriteTime.dwHighDateTime=0x1d305f1, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Project.en-us", cAlternateFileName="PROJEC~1.EN-")) returned 1 [0033.969] FindNextFileW (in: hFindFile=0x381b80, lpFindFileData=0x31e47c | out: lpFindFileData=0x31e47c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x99177d0, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x99177d0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x99177d0, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Proof.en", cAlternateFileName="")) returned 1 [0033.969] FindNextFileW (in: hFindFile=0x381b80, lpFindFileData=0x31e47c | out: lpFindFileData=0x31e47c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5b7fe90, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x5b7fe90, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x5b7fe90, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Proof.es", cAlternateFileName="")) returned 1 [0033.969] FindNextFileW (in: hFindFile=0x381b80, lpFindFileData=0x31e47c | out: lpFindFileData=0x31e47c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7941190, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x7941190, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x7941190, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Proof.fr", cAlternateFileName="")) returned 1 [0033.969] FindNextFileW (in: hFindFile=0x381b80, lpFindFileData=0x31e47c | out: lpFindFileData=0x31e47c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xab640f0, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0xab8a250, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xab8a250, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Proofing.en-us", cAlternateFileName="PROOFI~1.EN-")) returned 1 [0033.969] FindNextFileW (in: hFindFile=0x381b80, lpFindFileData=0x31e47c | out: lpFindFileData=0x31e47c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5a95a430, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x6cd64f50, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x6cd64f50, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="PROPLUSR", cAlternateFileName="")) returned 1 [0033.969] FindNextFileW (in: hFindFile=0x381b80, lpFindFileData=0x31e47c | out: lpFindFileData=0x31e47c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1ba9ab90, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x1bc89d70, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x1bc89d70, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Publisher.en-us", cAlternateFileName="PUBLIS~1.EN-")) returned 1 [0033.969] FindNextFileW (in: hFindFile=0x381b80, lpFindFileData=0x31e47c | out: lpFindFileData=0x31e47c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8cba0700, ftCreationTime.dwHighDateTime=0x1cb7664, ftLastAccessTime.dwLowDateTime=0xd78c2600, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0x8cba0700, ftLastWriteTime.dwHighDateTime=0x1cb7664, nFileSizeHigh=0x0, nFileSizeLow=0x150378, dwReserved0=0x0, dwReserved1=0x0, cFileName="Setup.exe", cAlternateFileName="")) returned 1 [0033.969] FindNextFileW (in: hFindFile=0x381b80, lpFindFileData=0x31e47c | out: lpFindFileData=0x31e47c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x50b66320, ftCreationTime.dwHighDateTime=0x1d305eb, ftLastAccessTime.dwLowDateTime=0x50da17c0, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0x50da17c0, ftLastWriteTime.dwHighDateTime=0x1d305eb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Visio.en-us", cAlternateFileName="VISIO~1.EN-")) returned 1 [0033.969] FindNextFileW (in: hFindFile=0x381b80, lpFindFileData=0x31e47c | out: lpFindFileData=0x31e47c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x83258520, ftCreationTime.dwHighDateTime=0x1d305eb, ftLastAccessTime.dwLowDateTime=0x84c615c0, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0x84c615c0, ftLastWriteTime.dwHighDateTime=0x1d305eb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="VISIOR", cAlternateFileName="")) returned 1 [0033.970] FindNextFileW (in: hFindFile=0x381b80, lpFindFileData=0x31e47c | out: lpFindFileData=0x31e47c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1e501370, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x1e501370, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x1e501370, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Word.en-us", cAlternateFileName="WORD~1.EN-")) returned 1 [0033.970] FindNextFileW (in: hFindFile=0x381b80, lpFindFileData=0x31e47c | out: lpFindFileData=0x31e47c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1e501370, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x1e501370, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x1e501370, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Word.en-us", cAlternateFileName="WORD~1.EN-")) returned 0 [0033.970] FindClose (in: hFindFile=0x381b80 | out: hFindFile=0x381b80) returned 1 [0033.970] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e704) returned 1 [0033.970] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e710) returned 1 [0033.970] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e744) returned 1 [0033.971] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller", nBufferLength=0x105, lpBuffer=0x31e24c, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller", lpFilePart=0x0) returned 0x4f [0033.971] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\", nBufferLength=0x105, lpBuffer=0x31e220, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\", lpFilePart=0x0) returned 0x50 [0033.971] FindFirstFileW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\*", lpFindFileData=0x31e46c | out: lpFindFileData=0x31e46c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee2ce510, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xbe974c00, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0xbe974c00, ftLastWriteTime.dwHighDateTime=0x1d305f1, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x381b80 [0033.971] FindNextFileW (in: hFindFile=0x381b80, lpFindFileData=0x31e47c | out: lpFindFileData=0x31e47c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee2ce510, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xbe974c00, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0xbe974c00, ftLastWriteTime.dwHighDateTime=0x1d305f1, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0033.971] FindNextFileW (in: hFindFile=0x381b80, lpFindFileData=0x31e47c | out: lpFindFileData=0x31e47c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x15419830, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x17bd2750, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x17bd2750, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Access.en-us", cAlternateFileName="ACCESS~1.EN-")) returned 1 [0033.972] FindNextFileW (in: hFindFile=0x381b80, lpFindFileData=0x31e47c | out: lpFindFileData=0x31e47c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfa64b3d0, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xfa64b3d0, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xfa64b3d0, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Excel.en-us", cAlternateFileName="EXCEL~1.EN-")) returned 1 [0033.972] FindNextFileW (in: hFindFile=0x381b80, lpFindFileData=0x31e47c | out: lpFindFileData=0x31e47c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd658ff0, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xfd67f150, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xfd67f150, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Groove.en-us", cAlternateFileName="GROOVE~1.EN-")) returned 1 [0033.972] FindNextFileW (in: hFindFile=0x381b80, lpFindFileData=0x31e47c | out: lpFindFileData=0x31e47c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x112a3b30, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x112a3b30, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x112a3b30, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="InfoPath.en-us", cAlternateFileName="INFOPA~1.EN-")) returned 1 [0033.972] FindNextFileW (in: hFindFile=0x381b80, lpFindFileData=0x31e47c | out: lpFindFileData=0x31e47c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe164800, ftCreationTime.dwHighDateTime=0x1cac048, ftLastAccessTime.dwLowDateTime=0x6b277670, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xe164800, ftLastWriteTime.dwHighDateTime=0x1cac048, nFileSizeHigh=0x0, nFileSizeLow=0x8b7b8, dwReserved0=0x0, dwReserved1=0x0, cFileName="ODeploy.exe", cAlternateFileName="")) returned 1 [0033.972] FindNextFileW (in: hFindFile=0x381b80, lpFindFileData=0x31e47c | out: lpFindFileData=0x31e47c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee2ce510, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xc2600b20, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0xc2600b20, ftLastWriteTime.dwHighDateTime=0x1d305eb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Office.en-us", cAlternateFileName="OFFICE~1.EN-")) returned 1 [0033.972] FindNextFileW (in: hFindFile=0x381b80, lpFindFileData=0x31e47c | out: lpFindFileData=0x31e47c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x19b82c30, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x19b82c30, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x19b82c30, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Office32.en-us", cAlternateFileName="OFFICE~2.EN-")) returned 1 [0033.972] FindNextFileW (in: hFindFile=0x381b80, lpFindFileData=0x31e47c | out: lpFindFileData=0x31e47c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x22200730, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x22200730, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x22200730, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Office32.WW", cAlternateFileName="")) returned 1 [0033.972] FindNextFileW (in: hFindFile=0x381b80, lpFindFileData=0x31e47c | out: lpFindFileData=0x31e47c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc840bb0, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0xc8d9130, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xc8d9130, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="OneNote.en-us", cAlternateFileName="ONENOT~1.EN-")) returned 1 [0033.972] FindNextFileW (in: hFindFile=0x381b80, lpFindFileData=0x31e47c | out: lpFindFileData=0x31e47c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x302b0500, ftCreationTime.dwHighDateTime=0x1cba073, ftLastAccessTime.dwLowDateTime=0xcf459e40, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0x302b0500, ftLastWriteTime.dwHighDateTime=0x1cba073, nFileSizeHigh=0x0, nFileSizeLow=0x709b68, dwReserved0=0x0, dwReserved1=0x0, cFileName="OSETUP.DLL", cAlternateFileName="")) returned 1 [0033.972] FindNextFileW (in: hFindFile=0x381b80, lpFindFileData=0x31e47c | out: lpFindFileData=0x31e47c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5de00200, ftCreationTime.dwHighDateTime=0x1cac9ac, ftLastAccessTime.dwLowDateTime=0x598fccf0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x5de00200, ftLastWriteTime.dwHighDateTime=0x1cac9ac, nFileSizeHigh=0x0, nFileSizeLow=0xb9a0, dwReserved0=0x0, dwReserved1=0x0, cFileName="OSetupPS.dll", cAlternateFileName="")) returned 1 [0033.972] FindNextFileW (in: hFindFile=0x381b80, lpFindFileData=0x31e47c | out: lpFindFileData=0x31e47c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x14af010, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x2095e10, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x2095e10, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Outlook.en-us", cAlternateFileName="OUTLOO~1.EN-")) returned 1 [0033.972] FindNextFileW (in: hFindFile=0x381b80, lpFindFileData=0x31e47c | out: lpFindFileData=0x31e47c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb169e000, ftCreationTime.dwHighDateTime=0x1ca911f, ftLastAccessTime.dwLowDateTime=0x6cee1d10, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xb169e000, ftLastWriteTime.dwHighDateTime=0x1ca911f, nFileSizeHigh=0x0, nFileSizeLow=0x165510, dwReserved0=0x0, dwReserved1=0x0, cFileName="pidgenx.dll", cAlternateFileName="")) returned 1 [0033.972] FindNextFileW (in: hFindFile=0x381b80, lpFindFileData=0x31e47c | out: lpFindFileData=0x31e47c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x17eefe00, ftCreationTime.dwHighDateTime=0x1ca9120, ftLastAccessTime.dwLowDateTime=0xbe99ad60, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0x17eefe00, ftLastWriteTime.dwHighDateTime=0x1ca9120, nFileSizeHigh=0x0, nFileSizeLow=0xaec3a, dwReserved0=0x0, dwReserved1=0x0, cFileName="pkeyconfig-office.xrm-ms", cAlternateFileName="PKEYCO~1.XRM")) returned 1 [0033.972] FindNextFileW (in: hFindFile=0x381b80, lpFindFileData=0x31e47c | out: lpFindFileData=0x31e47c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6904ef00, ftCreationTime.dwHighDateTime=0x1ca912c, ftLastAccessTime.dwLowDateTime=0x6cf07e70, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x6904ef00, ftLastWriteTime.dwHighDateTime=0x1ca912c, nFileSizeHigh=0x0, nFileSizeLow=0x3d78, dwReserved0=0x0, dwReserved1=0x0, cFileName="pkeyconfig.companion.dll", cAlternateFileName="PKEYCO~1.DLL")) returned 1 [0033.973] FindNextFileW (in: hFindFile=0x381b80, lpFindFileData=0x31e47c | out: lpFindFileData=0x31e47c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf5db14d0, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xf5e95d10, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xf5e95d10, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="PowerPoint.en-us", cAlternateFileName="POWERP~1.EN-")) returned 1 [0033.973] FindNextFileW (in: hFindFile=0x381b80, lpFindFileData=0x31e47c | out: lpFindFileData=0x31e47c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xbe2e8f80, ftCreationTime.dwHighDateTime=0x1d305f1, ftLastAccessTime.dwLowDateTime=0xbec48620, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0xbec48620, ftLastWriteTime.dwHighDateTime=0x1d305f1, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="PRJPROR", cAlternateFileName="")) returned 1 [0033.973] FindNextFileW (in: hFindFile=0x381b80, lpFindFileData=0x31e47c | out: lpFindFileData=0x31e47c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xaf551ba0, ftCreationTime.dwHighDateTime=0x1d305f1, ftLastAccessTime.dwLowDateTime=0xaf577d00, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0xaf577d00, ftLastWriteTime.dwHighDateTime=0x1d305f1, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Project.en-us", cAlternateFileName="PROJEC~1.EN-")) returned 1 [0033.973] FindNextFileW (in: hFindFile=0x381b80, lpFindFileData=0x31e47c | out: lpFindFileData=0x31e47c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x99177d0, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x99177d0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x99177d0, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Proof.en", cAlternateFileName="")) returned 1 [0033.973] FindNextFileW (in: hFindFile=0x381b80, lpFindFileData=0x31e47c | out: lpFindFileData=0x31e47c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5b7fe90, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x5b7fe90, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x5b7fe90, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Proof.es", cAlternateFileName="")) returned 1 [0033.973] FindNextFileW (in: hFindFile=0x381b80, lpFindFileData=0x31e47c | out: lpFindFileData=0x31e47c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7941190, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x7941190, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x7941190, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Proof.fr", cAlternateFileName="")) returned 1 [0033.973] FindNextFileW (in: hFindFile=0x381b80, lpFindFileData=0x31e47c | out: lpFindFileData=0x31e47c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xab640f0, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0xab8a250, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xab8a250, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Proofing.en-us", cAlternateFileName="PROOFI~1.EN-")) returned 1 [0033.973] FindNextFileW (in: hFindFile=0x381b80, lpFindFileData=0x31e47c | out: lpFindFileData=0x31e47c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5a95a430, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x6cd64f50, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x6cd64f50, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="PROPLUSR", cAlternateFileName="")) returned 1 [0033.973] FindNextFileW (in: hFindFile=0x381b80, lpFindFileData=0x31e47c | out: lpFindFileData=0x31e47c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1ba9ab90, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x1bc89d70, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x1bc89d70, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Publisher.en-us", cAlternateFileName="PUBLIS~1.EN-")) returned 1 [0033.973] FindNextFileW (in: hFindFile=0x381b80, lpFindFileData=0x31e47c | out: lpFindFileData=0x31e47c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8cba0700, ftCreationTime.dwHighDateTime=0x1cb7664, ftLastAccessTime.dwLowDateTime=0xd78c2600, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0x8cba0700, ftLastWriteTime.dwHighDateTime=0x1cb7664, nFileSizeHigh=0x0, nFileSizeLow=0x150378, dwReserved0=0x0, dwReserved1=0x0, cFileName="Setup.exe", cAlternateFileName="")) returned 1 [0033.973] FindNextFileW (in: hFindFile=0x381b80, lpFindFileData=0x31e47c | out: lpFindFileData=0x31e47c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x50b66320, ftCreationTime.dwHighDateTime=0x1d305eb, ftLastAccessTime.dwLowDateTime=0x50da17c0, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0x50da17c0, ftLastWriteTime.dwHighDateTime=0x1d305eb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Visio.en-us", cAlternateFileName="VISIO~1.EN-")) returned 1 [0033.973] FindNextFileW (in: hFindFile=0x381b80, lpFindFileData=0x31e47c | out: lpFindFileData=0x31e47c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x83258520, ftCreationTime.dwHighDateTime=0x1d305eb, ftLastAccessTime.dwLowDateTime=0x84c615c0, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0x84c615c0, ftLastWriteTime.dwHighDateTime=0x1d305eb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="VISIOR", cAlternateFileName="")) returned 1 [0033.973] FindNextFileW (in: hFindFile=0x381b80, lpFindFileData=0x31e47c | out: lpFindFileData=0x31e47c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1e501370, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x1e501370, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x1e501370, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Word.en-us", cAlternateFileName="WORD~1.EN-")) returned 1 [0033.973] FindNextFileW (in: hFindFile=0x381b80, lpFindFileData=0x31e47c | out: lpFindFileData=0x31e47c*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0033.973] FindClose (in: hFindFile=0x381b80 | out: hFindFile=0x381b80) returned 1 [0033.974] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e704) returned 1 [0033.974] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e710) returned 1 [0033.974] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e6cc) returned 1 [0033.974] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Access.en-us", nBufferLength=0x105, lpBuffer=0x31e1d4, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Access.en-us", lpFilePart=0x0) returned 0x5c [0033.974] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Access.en-us\\", nBufferLength=0x105, lpBuffer=0x31e1a8, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Access.en-us\\", lpFilePart=0x0) returned 0x5d [0033.974] FindFirstFileW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Access.en-us\\*", lpFindFileData=0x31e3f4 | out: lpFindFileData=0x31e3f4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x15419830, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x17bd2750, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x17bd2750, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x381b80 [0033.977] FindNextFileW (in: hFindFile=0x381b80, lpFindFileData=0x31e404 | out: lpFindFileData=0x31e404*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x15419830, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x17bd2750, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x17bd2750, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0033.977] FindNextFileW (in: hFindFile=0x381b80, lpFindFileData=0x31e404 | out: lpFindFileData=0x31e404*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xfa5fe940, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0x15419830, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xfa5fe940, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x545, dwReserved0=0x0, dwReserved1=0x0, cFileName="AccessMUI.XML", cAlternateFileName="ACCESS~1.XML")) returned 1 [0033.977] FindNextFileW (in: hFindFile=0x381b80, lpFindFileData=0x31e404 | out: lpFindFileData=0x31e404*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xfa13c510, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0x17bd2750, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xfa13c510, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x333, dwReserved0=0x0, dwReserved1=0x0, cFileName="AccessMUISet.XML", cAlternateFileName="ACCESS~2.XML")) returned 1 [0033.978] FindNextFileW (in: hFindFile=0x381b80, lpFindFileData=0x31e404 | out: lpFindFileData=0x31e404*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xfc111bb0, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0x17bd2750, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xfc111bb0, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0xa40, dwReserved0=0x0, dwReserved1=0x0, cFileName="SETUP.XML", cAlternateFileName="")) returned 1 [0033.978] FindNextFileW (in: hFindFile=0x381b80, lpFindFileData=0x31e404 | out: lpFindFileData=0x31e404*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0033.978] FindClose (in: hFindFile=0x381b80 | out: hFindFile=0x381b80) returned 1 [0033.978] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e68c) returned 1 [0033.978] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e698) returned 1 [0033.978] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e6cc) returned 1 [0033.978] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Access.en-us", nBufferLength=0x105, lpBuffer=0x31e1d4, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Access.en-us", lpFilePart=0x0) returned 0x5c [0033.978] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Access.en-us\\", nBufferLength=0x105, lpBuffer=0x31e1a8, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Access.en-us\\", lpFilePart=0x0) returned 0x5d [0033.978] FindFirstFileW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Access.en-us\\*", lpFindFileData=0x31e3f4 | out: lpFindFileData=0x31e3f4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x15419830, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x17bd2750, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x17bd2750, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x381b80 [0033.979] FindNextFileW (in: hFindFile=0x381b80, lpFindFileData=0x31e404 | out: lpFindFileData=0x31e404*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x15419830, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x17bd2750, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x17bd2750, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0033.979] FindNextFileW (in: hFindFile=0x381b80, lpFindFileData=0x31e404 | out: lpFindFileData=0x31e404*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xfa5fe940, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0x15419830, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xfa5fe940, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x545, dwReserved0=0x0, dwReserved1=0x0, cFileName="AccessMUI.XML", cAlternateFileName="ACCESS~1.XML")) returned 1 [0033.979] FindNextFileW (in: hFindFile=0x381b80, lpFindFileData=0x31e404 | out: lpFindFileData=0x31e404*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xfa13c510, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0x17bd2750, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xfa13c510, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x333, dwReserved0=0x0, dwReserved1=0x0, cFileName="AccessMUISet.XML", cAlternateFileName="ACCESS~2.XML")) returned 1 [0033.979] FindNextFileW (in: hFindFile=0x381b80, lpFindFileData=0x31e404 | out: lpFindFileData=0x31e404*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xfc111bb0, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0x17bd2750, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xfc111bb0, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0xa40, dwReserved0=0x0, dwReserved1=0x0, cFileName="SETUP.XML", cAlternateFileName="")) returned 1 [0033.979] FindNextFileW (in: hFindFile=0x381b80, lpFindFileData=0x31e404 | out: lpFindFileData=0x31e404*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xfc111bb0, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0x17bd2750, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xfc111bb0, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0xa40, dwReserved0=0x0, dwReserved1=0x0, cFileName="SETUP.XML", cAlternateFileName="")) returned 0 [0033.979] FindClose (in: hFindFile=0x381b80 | out: hFindFile=0x381b80) returned 1 [0033.980] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e68c) returned 1 [0033.980] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e698) returned 1 [0033.980] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e6cc) returned 1 [0033.980] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Excel.en-us", nBufferLength=0x105, lpBuffer=0x31e1d4, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Excel.en-us", lpFilePart=0x0) returned 0x5b [0033.980] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Excel.en-us\\", nBufferLength=0x105, lpBuffer=0x31e1a8, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Excel.en-us\\", lpFilePart=0x0) returned 0x5c [0033.980] FindFirstFileW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Excel.en-us\\*", lpFindFileData=0x31e3f4 | out: lpFindFileData=0x31e3f4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfa64b3d0, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xfa64b3d0, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xfa64b3d0, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x381b80 [0033.981] FindNextFileW (in: hFindFile=0x381b80, lpFindFileData=0x31e404 | out: lpFindFileData=0x31e404*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfa64b3d0, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xfa64b3d0, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xfa64b3d0, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0033.981] FindNextFileW (in: hFindFile=0x381b80, lpFindFileData=0x31e404 | out: lpFindFileData=0x31e404*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xecdfa490, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xfa64b3d0, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xecdfa490, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x61d, dwReserved0=0x0, dwReserved1=0x0, cFileName="ExcelMUI.XML", cAlternateFileName="")) returned 1 [0033.981] FindNextFileW (in: hFindFile=0x381b80, lpFindFileData=0x31e404 | out: lpFindFileData=0x31e404*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xee38cbf0, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xfa671530, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xee38cbf0, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x8f8, dwReserved0=0x0, dwReserved1=0x0, cFileName="SETUP.XML", cAlternateFileName="")) returned 1 [0033.981] FindNextFileW (in: hFindFile=0x381b80, lpFindFileData=0x31e404 | out: lpFindFileData=0x31e404*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0033.981] FindClose (in: hFindFile=0x381b80 | out: hFindFile=0x381b80) returned 1 [0033.981] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e68c) returned 1 [0033.981] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e698) returned 1 [0033.981] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e6cc) returned 1 [0033.981] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Excel.en-us", nBufferLength=0x105, lpBuffer=0x31e1d4, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Excel.en-us", lpFilePart=0x0) returned 0x5b [0033.981] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Excel.en-us\\", nBufferLength=0x105, lpBuffer=0x31e1a8, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Excel.en-us\\", lpFilePart=0x0) returned 0x5c [0033.981] FindFirstFileW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Excel.en-us\\*", lpFindFileData=0x31e3f4 | out: lpFindFileData=0x31e3f4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfa64b3d0, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xfa64b3d0, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xfa64b3d0, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x381b80 [0033.982] FindNextFileW (in: hFindFile=0x381b80, lpFindFileData=0x31e404 | out: lpFindFileData=0x31e404*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfa64b3d0, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xfa64b3d0, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xfa64b3d0, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0033.982] FindNextFileW (in: hFindFile=0x381b80, lpFindFileData=0x31e404 | out: lpFindFileData=0x31e404*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xecdfa490, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xfa64b3d0, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xecdfa490, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x61d, dwReserved0=0x0, dwReserved1=0x0, cFileName="ExcelMUI.XML", cAlternateFileName="")) returned 1 [0033.982] FindNextFileW (in: hFindFile=0x381b80, lpFindFileData=0x31e404 | out: lpFindFileData=0x31e404*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xee38cbf0, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xfa671530, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xee38cbf0, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x8f8, dwReserved0=0x0, dwReserved1=0x0, cFileName="SETUP.XML", cAlternateFileName="")) returned 1 [0033.982] FindNextFileW (in: hFindFile=0x381b80, lpFindFileData=0x31e404 | out: lpFindFileData=0x31e404*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xee38cbf0, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xfa671530, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xee38cbf0, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x8f8, dwReserved0=0x0, dwReserved1=0x0, cFileName="SETUP.XML", cAlternateFileName="")) returned 0 [0033.982] FindClose (in: hFindFile=0x381b80 | out: hFindFile=0x381b80) returned 1 [0033.982] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e68c) returned 1 [0033.982] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e698) returned 1 [0033.982] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e6cc) returned 1 [0033.982] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Groove.en-us", nBufferLength=0x105, lpBuffer=0x31e1d4, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Groove.en-us", lpFilePart=0x0) returned 0x5c [0033.982] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Groove.en-us\\", nBufferLength=0x105, lpBuffer=0x31e1a8, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Groove.en-us\\", lpFilePart=0x0) returned 0x5d [0033.982] FindFirstFileW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Groove.en-us\\*", lpFindFileData=0x31e3f4 | out: lpFindFileData=0x31e3f4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd658ff0, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xfd67f150, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xfd67f150, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x381b80 [0033.983] FindNextFileW (in: hFindFile=0x381b80, lpFindFileData=0x31e404 | out: lpFindFileData=0x31e404*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd658ff0, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xfd67f150, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xfd67f150, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0033.983] FindNextFileW (in: hFindFile=0x381b80, lpFindFileData=0x31e404 | out: lpFindFileData=0x31e404*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xee38cbf0, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xfd658ff0, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xee38cbf0, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x391, dwReserved0=0x0, dwReserved1=0x0, cFileName="GrooveMUI.XML", cAlternateFileName="GROOVE~1.XML")) returned 1 [0033.983] FindNextFileW (in: hFindFile=0x381b80, lpFindFileData=0x31e404 | out: lpFindFileData=0x31e404*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xee803530, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xfd67f150, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xee803530, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x5ac, dwReserved0=0x0, dwReserved1=0x0, cFileName="SETUP.XML", cAlternateFileName="")) returned 1 [0033.984] FindClose (in: hFindFile=0x381b80 | out: hFindFile=0x381b80) returned 1 [0033.985] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e68c) returned 1 [0033.985] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e698) returned 1 [0033.985] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e6cc) returned 1 [0033.985] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Groove.en-us", nBufferLength=0x105, lpBuffer=0x31e1d4, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Groove.en-us", lpFilePart=0x0) returned 0x5c [0033.985] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Groove.en-us\\", nBufferLength=0x105, lpBuffer=0x31e1a8, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Groove.en-us\\", lpFilePart=0x0) returned 0x5d [0033.985] FindFirstFileW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Groove.en-us\\*", lpFindFileData=0x31e3f4 | out: lpFindFileData=0x31e3f4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd658ff0, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xfd67f150, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xfd67f150, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x381b80 [0033.986] FindClose (in: hFindFile=0x381b80 | out: hFindFile=0x381b80) returned 1 [0033.986] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e68c) returned 1 [0033.986] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e698) returned 1 [0033.986] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e6cc) returned 1 [0033.986] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\InfoPath.en-us", nBufferLength=0x105, lpBuffer=0x31e1d4, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\InfoPath.en-us", lpFilePart=0x0) returned 0x5e [0033.986] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\InfoPath.en-us\\", nBufferLength=0x105, lpBuffer=0x31e1a8, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\InfoPath.en-us\\", lpFilePart=0x0) returned 0x5f [0033.986] FindFirstFileW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\InfoPath.en-us\\*", lpFindFileData=0x31e3f4 | out: lpFindFileData=0x31e3f4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x112a3b30, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x112a3b30, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x112a3b30, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x381b80 [0033.987] FindClose (in: hFindFile=0x381b80 | out: hFindFile=0x381b80) returned 1 [0033.987] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e68c) returned 1 [0033.987] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e698) returned 1 [0033.987] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e6cc) returned 1 [0033.987] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\InfoPath.en-us", nBufferLength=0x105, lpBuffer=0x31e1d4, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\InfoPath.en-us", lpFilePart=0x0) returned 0x5e [0033.987] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\InfoPath.en-us\\", nBufferLength=0x105, lpBuffer=0x31e1a8, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\InfoPath.en-us\\", lpFilePart=0x0) returned 0x5f [0033.987] FindFirstFileW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\InfoPath.en-us\\*", lpFindFileData=0x31e3f4 | out: lpFindFileData=0x31e3f4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x112a3b30, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x112a3b30, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x112a3b30, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x381b80 [0033.987] FindClose (in: hFindFile=0x381b80 | out: hFindFile=0x381b80) returned 1 [0033.987] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e68c) returned 1 [0033.987] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e698) returned 1 [0033.987] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e6cc) returned 1 [0033.987] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Office.en-us", nBufferLength=0x105, lpBuffer=0x31e1d4, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Office.en-us", lpFilePart=0x0) returned 0x5c [0033.987] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Office.en-us\\", nBufferLength=0x105, lpBuffer=0x31e1a8, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Office.en-us\\", lpFilePart=0x0) returned 0x5d [0033.987] FindFirstFileW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Office.en-us\\*", lpFindFileData=0x31e3f4 | out: lpFindFileData=0x31e3f4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee2ce510, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xc2600b20, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0xc2600b20, ftLastWriteTime.dwHighDateTime=0x1d305eb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x381b80 [0033.989] FindClose (in: hFindFile=0x381b80 | out: hFindFile=0x381b80) returned 1 [0033.989] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e68c) returned 1 [0033.989] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e698) returned 1 [0033.990] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e6cc) returned 1 [0033.990] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Office.en-us", nBufferLength=0x105, lpBuffer=0x31e1d4, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Office.en-us", lpFilePart=0x0) returned 0x5c [0033.990] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Office.en-us\\", nBufferLength=0x105, lpBuffer=0x31e1a8, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Office.en-us\\", lpFilePart=0x0) returned 0x5d [0033.990] FindFirstFileW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Office.en-us\\*", lpFindFileData=0x31e3f4 | out: lpFindFileData=0x31e3f4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee2ce510, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xc2600b20, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0xc2600b20, ftLastWriteTime.dwHighDateTime=0x1d305eb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x381b80 [0033.990] FindClose (in: hFindFile=0x381b80 | out: hFindFile=0x381b80) returned 1 [0033.991] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e68c) returned 1 [0033.991] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e698) returned 1 [0033.991] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e6cc) returned 1 [0033.991] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Office32.en-us", nBufferLength=0x105, lpBuffer=0x31e1d4, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Office32.en-us", lpFilePart=0x0) returned 0x5e [0033.991] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Office32.en-us\\", nBufferLength=0x105, lpBuffer=0x31e1a8, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Office32.en-us\\", lpFilePart=0x0) returned 0x5f [0033.991] FindFirstFileW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Office32.en-us\\*", lpFindFileData=0x31e3f4 | out: lpFindFileData=0x31e3f4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x19b82c30, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x19b82c30, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x19b82c30, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x381b80 [0033.992] FindClose (in: hFindFile=0x381b80 | out: hFindFile=0x381b80) returned 1 [0033.992] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e68c) returned 1 [0033.992] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e698) returned 1 [0033.992] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e6cc) returned 1 [0033.992] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Office32.en-us", nBufferLength=0x105, lpBuffer=0x31e1d4, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Office32.en-us", lpFilePart=0x0) returned 0x5e [0033.992] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Office32.en-us\\", nBufferLength=0x105, lpBuffer=0x31e1a8, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Office32.en-us\\", lpFilePart=0x0) returned 0x5f [0033.992] FindFirstFileW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Office32.en-us\\*", lpFindFileData=0x31e3f4 | out: lpFindFileData=0x31e3f4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x19b82c30, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x19b82c30, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x19b82c30, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x381b80 [0033.993] FindClose (in: hFindFile=0x381b80 | out: hFindFile=0x381b80) returned 1 [0033.993] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e68c) returned 1 [0033.993] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e698) returned 1 [0033.993] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e6cc) returned 1 [0033.993] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Office32.WW", nBufferLength=0x105, lpBuffer=0x31e1d4, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Office32.WW", lpFilePart=0x0) returned 0x5b [0033.993] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Office32.WW\\", nBufferLength=0x105, lpBuffer=0x31e1a8, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Office32.WW\\", lpFilePart=0x0) returned 0x5c [0033.993] FindFirstFileW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Office32.WW\\*", lpFindFileData=0x31e3f4 | out: lpFindFileData=0x31e3f4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x22200730, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x22200730, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x22200730, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x381b80 [0033.994] FindClose (in: hFindFile=0x381b80 | out: hFindFile=0x381b80) returned 1 [0033.994] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e68c) returned 1 [0033.994] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e698) returned 1 [0033.994] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e6cc) returned 1 [0033.994] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Office32.WW", nBufferLength=0x105, lpBuffer=0x31e1d4, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Office32.WW", lpFilePart=0x0) returned 0x5b [0033.994] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Office32.WW\\", nBufferLength=0x105, lpBuffer=0x31e1a8, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Office32.WW\\", lpFilePart=0x0) returned 0x5c [0033.994] FindFirstFileW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Office32.WW\\*", lpFindFileData=0x31e3f4 | out: lpFindFileData=0x31e3f4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x22200730, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x22200730, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x22200730, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x381b80 [0033.994] FindClose (in: hFindFile=0x381b80 | out: hFindFile=0x381b80) returned 1 [0033.994] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e68c) returned 1 [0033.994] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e698) returned 1 [0033.994] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e6cc) returned 1 [0033.994] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\OneNote.en-us", nBufferLength=0x105, lpBuffer=0x31e1d4, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\OneNote.en-us", lpFilePart=0x0) returned 0x5d [0033.994] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\OneNote.en-us\\", nBufferLength=0x105, lpBuffer=0x31e1a8, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\OneNote.en-us\\", lpFilePart=0x0) returned 0x5e [0033.995] FindFirstFileW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\OneNote.en-us\\*", lpFindFileData=0x31e3f4 | out: lpFindFileData=0x31e3f4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc840bb0, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0xc8d9130, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xc8d9130, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x381b80 [0033.995] FindClose (in: hFindFile=0x381b80 | out: hFindFile=0x381b80) returned 1 [0033.995] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e68c) returned 1 [0033.995] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e698) returned 1 [0033.995] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e6cc) returned 1 [0033.995] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\OneNote.en-us", nBufferLength=0x105, lpBuffer=0x31e1d4, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\OneNote.en-us", lpFilePart=0x0) returned 0x5d [0033.996] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\OneNote.en-us\\", nBufferLength=0x105, lpBuffer=0x31e1a8, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\OneNote.en-us\\", lpFilePart=0x0) returned 0x5e [0033.996] FindFirstFileW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\OneNote.en-us\\*", lpFindFileData=0x31e3f4 | out: lpFindFileData=0x31e3f4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc840bb0, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0xc8d9130, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xc8d9130, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x381b80 [0033.996] FindClose (in: hFindFile=0x381b80 | out: hFindFile=0x381b80) returned 1 [0033.996] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e68c) returned 1 [0033.996] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e698) returned 1 [0033.996] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e6cc) returned 1 [0033.996] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Outlook.en-us", nBufferLength=0x105, lpBuffer=0x31e1d4, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Outlook.en-us", lpFilePart=0x0) returned 0x5d [0033.996] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Outlook.en-us\\", nBufferLength=0x105, lpBuffer=0x31e1a8, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Outlook.en-us\\", lpFilePart=0x0) returned 0x5e [0033.996] FindFirstFileW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Outlook.en-us\\*", lpFindFileData=0x31e3f4 | out: lpFindFileData=0x31e3f4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x14af010, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x2095e10, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x2095e10, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x381b80 [0033.997] FindClose (in: hFindFile=0x381b80 | out: hFindFile=0x381b80) returned 1 [0033.997] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e68c) returned 1 [0033.997] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e698) returned 1 [0033.997] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e6cc) returned 1 [0033.997] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Outlook.en-us", nBufferLength=0x105, lpBuffer=0x31e1d4, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Outlook.en-us", lpFilePart=0x0) returned 0x5d [0033.997] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Outlook.en-us\\", nBufferLength=0x105, lpBuffer=0x31e1a8, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Outlook.en-us\\", lpFilePart=0x0) returned 0x5e [0033.997] FindFirstFileW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Outlook.en-us\\*", lpFindFileData=0x31e3f4 | out: lpFindFileData=0x31e3f4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x14af010, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x2095e10, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x2095e10, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x381b80 [0033.997] FindClose (in: hFindFile=0x381b80 | out: hFindFile=0x381b80) returned 1 [0033.997] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e68c) returned 1 [0033.997] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e698) returned 1 [0033.997] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e6cc) returned 1 [0033.997] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\PowerPoint.en-us", nBufferLength=0x105, lpBuffer=0x31e1d4, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\PowerPoint.en-us", lpFilePart=0x0) returned 0x60 [0033.997] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\PowerPoint.en-us\\", nBufferLength=0x105, lpBuffer=0x31e1a8, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\PowerPoint.en-us\\", lpFilePart=0x0) returned 0x61 [0033.997] FindFirstFileW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\PowerPoint.en-us\\*", lpFindFileData=0x31e3f4 | out: lpFindFileData=0x31e3f4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf5db14d0, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xf5e95d10, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xf5e95d10, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x381b80 [0033.998] FindClose (in: hFindFile=0x381b80 | out: hFindFile=0x381b80) returned 1 [0033.998] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e68c) returned 1 [0033.998] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e698) returned 1 [0033.998] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e6cc) returned 1 [0033.998] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\PowerPoint.en-us", nBufferLength=0x105, lpBuffer=0x31e1d4, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\PowerPoint.en-us", lpFilePart=0x0) returned 0x60 [0033.998] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\PowerPoint.en-us\\", nBufferLength=0x105, lpBuffer=0x31e1a8, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\PowerPoint.en-us\\", lpFilePart=0x0) returned 0x61 [0033.999] FindFirstFileW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\PowerPoint.en-us\\*", lpFindFileData=0x31e3f4 | out: lpFindFileData=0x31e3f4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf5db14d0, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xf5e95d10, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xf5e95d10, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x381b80 [0033.999] FindClose (in: hFindFile=0x381b80 | out: hFindFile=0x381b80) returned 1 [0033.999] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e68c) returned 1 [0033.999] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e698) returned 1 [0033.999] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e6cc) returned 1 [0033.999] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\PRJPROR", nBufferLength=0x105, lpBuffer=0x31e1d4, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\PRJPROR", lpFilePart=0x0) returned 0x57 [0033.999] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\PRJPROR\\", nBufferLength=0x105, lpBuffer=0x31e1a8, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\PRJPROR\\", lpFilePart=0x0) returned 0x58 [0033.999] FindFirstFileW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\PRJPROR\\*", lpFindFileData=0x31e3f4 | out: lpFindFileData=0x31e3f4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xbe2e8f80, ftCreationTime.dwHighDateTime=0x1d305f1, ftLastAccessTime.dwLowDateTime=0xbec48620, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0xbec48620, ftLastWriteTime.dwHighDateTime=0x1d305f1, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x381b80 [0034.000] FindClose (in: hFindFile=0x381b80 | out: hFindFile=0x381b80) returned 1 [0034.000] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e68c) returned 1 [0034.000] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e698) returned 1 [0034.000] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e6cc) returned 1 [0034.000] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\PRJPROR", nBufferLength=0x105, lpBuffer=0x31e1d4, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\PRJPROR", lpFilePart=0x0) returned 0x57 [0034.000] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\PRJPROR\\", nBufferLength=0x105, lpBuffer=0x31e1a8, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\PRJPROR\\", lpFilePart=0x0) returned 0x58 [0034.000] FindFirstFileW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\PRJPROR\\*", lpFindFileData=0x31e3f4 | out: lpFindFileData=0x31e3f4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xbe2e8f80, ftCreationTime.dwHighDateTime=0x1d305f1, ftLastAccessTime.dwLowDateTime=0xbec48620, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0xbec48620, ftLastWriteTime.dwHighDateTime=0x1d305f1, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x381b80 [0034.000] FindClose (in: hFindFile=0x381b80 | out: hFindFile=0x381b80) returned 1 [0034.000] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e68c) returned 1 [0034.000] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e698) returned 1 [0034.000] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e6cc) returned 1 [0034.000] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Project.en-us", nBufferLength=0x105, lpBuffer=0x31e1d4, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Project.en-us", lpFilePart=0x0) returned 0x5d [0034.000] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Project.en-us\\", nBufferLength=0x105, lpBuffer=0x31e1a8, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Project.en-us\\", lpFilePart=0x0) returned 0x5e [0034.001] FindFirstFileW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Project.en-us\\*", lpFindFileData=0x31e3f4 | out: lpFindFileData=0x31e3f4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xaf551ba0, ftCreationTime.dwHighDateTime=0x1d305f1, ftLastAccessTime.dwLowDateTime=0xaf577d00, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0xaf577d00, ftLastWriteTime.dwHighDateTime=0x1d305f1, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x381b80 [0034.001] FindClose (in: hFindFile=0x381b80 | out: hFindFile=0x381b80) returned 1 [0034.001] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e68c) returned 1 [0034.001] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e698) returned 1 [0034.001] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e6cc) returned 1 [0034.001] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Project.en-us", nBufferLength=0x105, lpBuffer=0x31e1d4, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Project.en-us", lpFilePart=0x0) returned 0x5d [0034.002] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Project.en-us\\", nBufferLength=0x105, lpBuffer=0x31e1a8, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Project.en-us\\", lpFilePart=0x0) returned 0x5e [0034.002] FindFirstFileW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Project.en-us\\*", lpFindFileData=0x31e3f4 | out: lpFindFileData=0x31e3f4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xaf551ba0, ftCreationTime.dwHighDateTime=0x1d305f1, ftLastAccessTime.dwLowDateTime=0xaf577d00, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0xaf577d00, ftLastWriteTime.dwHighDateTime=0x1d305f1, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x381b80 [0034.002] FindClose (in: hFindFile=0x381b80 | out: hFindFile=0x381b80) returned 1 [0034.002] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e68c) returned 1 [0034.002] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e698) returned 1 [0034.002] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e6cc) returned 1 [0034.002] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Proof.en", nBufferLength=0x105, lpBuffer=0x31e1d4, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Proof.en", lpFilePart=0x0) returned 0x58 [0034.002] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Proof.en\\", nBufferLength=0x105, lpBuffer=0x31e1a8, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Proof.en\\", lpFilePart=0x0) returned 0x59 [0034.002] FindFirstFileW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Proof.en\\*", lpFindFileData=0x31e3f4 | out: lpFindFileData=0x31e3f4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x99177d0, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x99177d0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x99177d0, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x381b80 [0034.003] FindClose (in: hFindFile=0x381b80 | out: hFindFile=0x381b80) returned 1 [0034.003] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e68c) returned 1 [0034.003] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e698) returned 1 [0034.003] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e6cc) returned 1 [0034.003] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Proof.en", nBufferLength=0x105, lpBuffer=0x31e1d4, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Proof.en", lpFilePart=0x0) returned 0x58 [0034.003] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Proof.en\\", nBufferLength=0x105, lpBuffer=0x31e1a8, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Proof.en\\", lpFilePart=0x0) returned 0x59 [0034.003] FindFirstFileW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Proof.en\\*", lpFindFileData=0x31e3f4 | out: lpFindFileData=0x31e3f4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x99177d0, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x99177d0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x99177d0, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x381b80 [0034.003] FindClose (in: hFindFile=0x381b80 | out: hFindFile=0x381b80) returned 1 [0034.003] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e68c) returned 1 [0034.003] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e698) returned 1 [0034.003] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e6cc) returned 1 [0034.003] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Proof.es", nBufferLength=0x105, lpBuffer=0x31e1d4, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Proof.es", lpFilePart=0x0) returned 0x58 [0034.003] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Proof.es\\", nBufferLength=0x105, lpBuffer=0x31e1a8, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Proof.es\\", lpFilePart=0x0) returned 0x59 [0034.003] FindFirstFileW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Proof.es\\*", lpFindFileData=0x31e3f4 | out: lpFindFileData=0x31e3f4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5b7fe90, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x5b7fe90, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x5b7fe90, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x381b80 [0034.004] FindClose (in: hFindFile=0x381b80 | out: hFindFile=0x381b80) returned 1 [0034.004] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e68c) returned 1 [0034.004] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e698) returned 1 [0034.004] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e6cc) returned 1 [0034.004] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Proof.es", nBufferLength=0x105, lpBuffer=0x31e1d4, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Proof.es", lpFilePart=0x0) returned 0x58 [0034.004] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Proof.es\\", nBufferLength=0x105, lpBuffer=0x31e1a8, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Proof.es\\", lpFilePart=0x0) returned 0x59 [0034.005] FindFirstFileW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Proof.es\\*", lpFindFileData=0x31e3f4 | out: lpFindFileData=0x31e3f4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5b7fe90, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x5b7fe90, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x5b7fe90, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x381b80 [0034.005] FindClose (in: hFindFile=0x381b80 | out: hFindFile=0x381b80) returned 1 [0034.005] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e68c) returned 1 [0034.005] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e698) returned 1 [0034.005] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e6cc) returned 1 [0034.005] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Proof.fr", nBufferLength=0x105, lpBuffer=0x31e1d4, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Proof.fr", lpFilePart=0x0) returned 0x58 [0034.005] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Proof.fr\\", nBufferLength=0x105, lpBuffer=0x31e1a8, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Proof.fr\\", lpFilePart=0x0) returned 0x59 [0034.005] FindFirstFileW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Proof.fr\\*", lpFindFileData=0x31e3f4 | out: lpFindFileData=0x31e3f4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7941190, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x7941190, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x7941190, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x381b80 [0034.006] FindClose (in: hFindFile=0x381b80 | out: hFindFile=0x381b80) returned 1 [0034.006] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e68c) returned 1 [0034.006] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e698) returned 1 [0034.006] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e6cc) returned 1 [0034.006] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Proof.fr", nBufferLength=0x105, lpBuffer=0x31e1d4, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Proof.fr", lpFilePart=0x0) returned 0x58 [0034.006] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Proof.fr\\", nBufferLength=0x105, lpBuffer=0x31e1a8, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Proof.fr\\", lpFilePart=0x0) returned 0x59 [0034.006] FindFirstFileW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Proof.fr\\*", lpFindFileData=0x31e3f4 | out: lpFindFileData=0x31e3f4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7941190, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x7941190, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x7941190, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x381b80 [0034.006] FindClose (in: hFindFile=0x381b80 | out: hFindFile=0x381b80) returned 1 [0034.006] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e68c) returned 1 [0034.006] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e698) returned 1 [0034.006] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e6cc) returned 1 [0034.006] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Proofing.en-us", nBufferLength=0x105, lpBuffer=0x31e1d4, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Proofing.en-us", lpFilePart=0x0) returned 0x5e [0034.006] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Proofing.en-us\\", nBufferLength=0x105, lpBuffer=0x31e1a8, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Proofing.en-us\\", lpFilePart=0x0) returned 0x5f [0034.006] FindFirstFileW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Proofing.en-us\\*", lpFindFileData=0x31e3f4 | out: lpFindFileData=0x31e3f4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xab640f0, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0xab8a250, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xab8a250, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x381b80 [0034.008] FindClose (in: hFindFile=0x381b80 | out: hFindFile=0x381b80) returned 1 [0034.008] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e68c) returned 1 [0034.008] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e698) returned 1 [0034.008] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e6cc) returned 1 [0034.008] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Proofing.en-us", nBufferLength=0x105, lpBuffer=0x31e1d4, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Proofing.en-us", lpFilePart=0x0) returned 0x5e [0034.008] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Proofing.en-us\\", nBufferLength=0x105, lpBuffer=0x31e1a8, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Proofing.en-us\\", lpFilePart=0x0) returned 0x5f [0034.008] FindFirstFileW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Proofing.en-us\\*", lpFindFileData=0x31e3f4 | out: lpFindFileData=0x31e3f4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xab640f0, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0xab8a250, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xab8a250, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x381b80 [0034.008] FindClose (in: hFindFile=0x381b80 | out: hFindFile=0x381b80) returned 1 [0034.008] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e68c) returned 1 [0034.008] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e698) returned 1 [0034.008] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e6cc) returned 1 [0034.009] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\PROPLUSR", nBufferLength=0x105, lpBuffer=0x31e1d4, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\PROPLUSR", lpFilePart=0x0) returned 0x58 [0034.009] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\PROPLUSR\\", nBufferLength=0x105, lpBuffer=0x31e1a8, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\PROPLUSR\\", lpFilePart=0x0) returned 0x59 [0034.009] FindFirstFileW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\PROPLUSR\\*", lpFindFileData=0x31e3f4 | out: lpFindFileData=0x31e3f4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5a95a430, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x6cd64f50, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x6cd64f50, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x381b80 [0034.010] FindClose (in: hFindFile=0x381b80 | out: hFindFile=0x381b80) returned 1 [0034.010] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e68c) returned 1 [0034.010] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e698) returned 1 [0034.010] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e6cc) returned 1 [0034.010] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\PROPLUSR", nBufferLength=0x105, lpBuffer=0x31e1d4, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\PROPLUSR", lpFilePart=0x0) returned 0x58 [0034.010] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\PROPLUSR\\", nBufferLength=0x105, lpBuffer=0x31e1a8, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\PROPLUSR\\", lpFilePart=0x0) returned 0x59 [0034.010] FindFirstFileW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\PROPLUSR\\*", lpFindFileData=0x31e3f4 | out: lpFindFileData=0x31e3f4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5a95a430, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x6cd64f50, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x6cd64f50, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x381b80 [0034.010] FindClose (in: hFindFile=0x381b80 | out: hFindFile=0x381b80) returned 1 [0034.010] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e68c) returned 1 [0034.010] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e698) returned 1 [0034.010] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e6cc) returned 1 [0034.010] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Publisher.en-us", nBufferLength=0x105, lpBuffer=0x31e1d4, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Publisher.en-us", lpFilePart=0x0) returned 0x5f [0034.010] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Publisher.en-us\\", nBufferLength=0x105, lpBuffer=0x31e1a8, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Publisher.en-us\\", lpFilePart=0x0) returned 0x60 [0034.010] FindFirstFileW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Publisher.en-us\\*", lpFindFileData=0x31e3f4 | out: lpFindFileData=0x31e3f4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1ba9ab90, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x1bc89d70, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x1bc89d70, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x381b80 [0034.011] FindClose (in: hFindFile=0x381b80 | out: hFindFile=0x381b80) returned 1 [0034.011] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e68c) returned 1 [0034.011] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e698) returned 1 [0034.011] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e6cc) returned 1 [0034.011] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Publisher.en-us", nBufferLength=0x105, lpBuffer=0x31e1d4, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Publisher.en-us", lpFilePart=0x0) returned 0x5f [0034.011] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Publisher.en-us\\", nBufferLength=0x105, lpBuffer=0x31e1a8, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Publisher.en-us\\", lpFilePart=0x0) returned 0x60 [0034.011] FindFirstFileW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Publisher.en-us\\*", lpFindFileData=0x31e3f4 | out: lpFindFileData=0x31e3f4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1ba9ab90, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x1bc89d70, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x1bc89d70, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x381b80 [0034.011] FindClose (in: hFindFile=0x381b80 | out: hFindFile=0x381b80) returned 1 [0034.011] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e68c) returned 1 [0034.012] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e698) returned 1 [0034.012] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e6cc) returned 1 [0034.012] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Visio.en-us", nBufferLength=0x105, lpBuffer=0x31e1d4, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Visio.en-us", lpFilePart=0x0) returned 0x5b [0034.012] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Visio.en-us\\", nBufferLength=0x105, lpBuffer=0x31e1a8, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Visio.en-us\\", lpFilePart=0x0) returned 0x5c [0034.012] FindFirstFileW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Visio.en-us\\*", lpFindFileData=0x31e3f4 | out: lpFindFileData=0x31e3f4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x50b66320, ftCreationTime.dwHighDateTime=0x1d305eb, ftLastAccessTime.dwLowDateTime=0x50da17c0, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0x50da17c0, ftLastWriteTime.dwHighDateTime=0x1d305eb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x381b80 [0034.013] FindClose (in: hFindFile=0x381b80 | out: hFindFile=0x381b80) returned 1 [0034.013] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e68c) returned 1 [0034.013] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e698) returned 1 [0034.013] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e6cc) returned 1 [0034.013] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Visio.en-us", nBufferLength=0x105, lpBuffer=0x31e1d4, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Visio.en-us", lpFilePart=0x0) returned 0x5b [0034.013] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Visio.en-us\\", nBufferLength=0x105, lpBuffer=0x31e1a8, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Visio.en-us\\", lpFilePart=0x0) returned 0x5c [0034.013] FindFirstFileW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Visio.en-us\\*", lpFindFileData=0x31e3f4 | out: lpFindFileData=0x31e3f4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x50b66320, ftCreationTime.dwHighDateTime=0x1d305eb, ftLastAccessTime.dwLowDateTime=0x50da17c0, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0x50da17c0, ftLastWriteTime.dwHighDateTime=0x1d305eb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x381b80 [0034.014] FindClose (in: hFindFile=0x381b80 | out: hFindFile=0x381b80) returned 1 [0034.014] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e68c) returned 1 [0034.014] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e698) returned 1 [0034.014] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e6cc) returned 1 [0034.014] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\VISIOR", nBufferLength=0x105, lpBuffer=0x31e1d4, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\VISIOR", lpFilePart=0x0) returned 0x56 [0034.014] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\VISIOR\\", nBufferLength=0x105, lpBuffer=0x31e1a8, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\VISIOR\\", lpFilePart=0x0) returned 0x57 [0034.014] FindFirstFileW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\VISIOR\\*", lpFindFileData=0x31e3f4 | out: lpFindFileData=0x31e3f4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x83258520, ftCreationTime.dwHighDateTime=0x1d305eb, ftLastAccessTime.dwLowDateTime=0x84c615c0, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0x84c615c0, ftLastWriteTime.dwHighDateTime=0x1d305eb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x381b80 [0034.014] FindClose (in: hFindFile=0x381b80 | out: hFindFile=0x381b80) returned 1 [0034.014] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e68c) returned 1 [0034.014] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e698) returned 1 [0034.014] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e6cc) returned 1 [0034.014] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\VISIOR", nBufferLength=0x105, lpBuffer=0x31e1d4, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\VISIOR", lpFilePart=0x0) returned 0x56 [0034.014] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\VISIOR\\", nBufferLength=0x105, lpBuffer=0x31e1a8, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\VISIOR\\", lpFilePart=0x0) returned 0x57 [0034.014] FindFirstFileW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\VISIOR\\*", lpFindFileData=0x31e3f4 | out: lpFindFileData=0x31e3f4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x83258520, ftCreationTime.dwHighDateTime=0x1d305eb, ftLastAccessTime.dwLowDateTime=0x84c615c0, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0x84c615c0, ftLastWriteTime.dwHighDateTime=0x1d305eb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x381b80 [0034.014] FindClose (in: hFindFile=0x381b80 | out: hFindFile=0x381b80) returned 1 [0034.015] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e68c) returned 1 [0034.015] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e698) returned 1 [0034.015] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e6cc) returned 1 [0034.015] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Word.en-us", nBufferLength=0x105, lpBuffer=0x31e1d4, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Word.en-us", lpFilePart=0x0) returned 0x5a [0034.015] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Word.en-us\\", nBufferLength=0x105, lpBuffer=0x31e1a8, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Word.en-us\\", lpFilePart=0x0) returned 0x5b [0034.015] FindFirstFileW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Word.en-us\\*", lpFindFileData=0x31e3f4 | out: lpFindFileData=0x31e3f4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1e501370, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x1e501370, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x1e501370, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x381b80 [0034.016] FindClose (in: hFindFile=0x381b80 | out: hFindFile=0x381b80) returned 1 [0034.016] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e68c) returned 1 [0034.016] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e698) returned 1 [0034.016] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e6cc) returned 1 [0034.016] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Word.en-us", nBufferLength=0x105, lpBuffer=0x31e1d4, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Word.en-us", lpFilePart=0x0) returned 0x5a [0034.016] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Word.en-us\\", nBufferLength=0x105, lpBuffer=0x31e1a8, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Word.en-us\\", lpFilePart=0x0) returned 0x5b [0034.016] FindFirstFileW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE14\\Office Setup Controller\\Word.en-us\\*", lpFindFileData=0x31e3f4 | out: lpFindFileData=0x31e3f4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1e501370, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x1e501370, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x1e501370, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x381b80 [0034.016] FindClose (in: hFindFile=0x381b80 | out: hFindFile=0x381b80) returned 1 [0034.016] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e68c) returned 1 [0034.016] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e698) returned 1 [0034.016] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e7bc) returned 1 [0034.016] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\OfficeSoftwareProtectionPlatform", nBufferLength=0x105, lpBuffer=0x31e2c4, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Common Files\\Microsoft Shared\\OfficeSoftwareProtectionPlatform", lpFilePart=0x0) returned 0x4f [0034.016] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\OfficeSoftwareProtectionPlatform\\", nBufferLength=0x105, lpBuffer=0x31e298, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Common Files\\Microsoft Shared\\OfficeSoftwareProtectionPlatform\\", lpFilePart=0x0) returned 0x50 [0034.016] FindFirstFileW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\OfficeSoftwareProtectionPlatform\\*", lpFindFileData=0x31e4e4 | out: lpFindFileData=0x31e4e4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x50e54b70, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x6c23c830, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x6c23c830, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x381b80 [0034.017] FindClose (in: hFindFile=0x381b80 | out: hFindFile=0x381b80) returned 1 [0034.018] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e77c) returned 1 [0034.018] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e788) returned 1 [0034.018] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e7bc) returned 1 [0034.018] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\OfficeSoftwareProtectionPlatform", nBufferLength=0x105, lpBuffer=0x31e2c4, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Common Files\\Microsoft Shared\\OfficeSoftwareProtectionPlatform", lpFilePart=0x0) returned 0x4f [0034.018] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\OfficeSoftwareProtectionPlatform\\", nBufferLength=0x105, lpBuffer=0x31e298, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Common Files\\Microsoft Shared\\OfficeSoftwareProtectionPlatform\\", lpFilePart=0x0) returned 0x50 [0034.018] FindFirstFileW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\OfficeSoftwareProtectionPlatform\\*", lpFindFileData=0x31e4e4 | out: lpFindFileData=0x31e4e4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x50e54b70, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x6c23c830, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x6c23c830, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x381b80 [0034.019] FindClose (in: hFindFile=0x381b80 | out: hFindFile=0x381b80) returned 1 [0034.019] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e77c) returned 1 [0034.019] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e788) returned 1 [0034.019] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e7bc) returned 1 [0034.020] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\PROOF", nBufferLength=0x105, lpBuffer=0x31e2c4, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Common Files\\Microsoft Shared\\PROOF", lpFilePart=0x0) returned 0x34 [0034.020] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\PROOF\\", nBufferLength=0x105, lpBuffer=0x31e298, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Common Files\\Microsoft Shared\\PROOF\\", lpFilePart=0x0) returned 0x35 [0034.020] FindFirstFileW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\PROOF\\*", lpFindFileData=0x31e4e4 | out: lpFindFileData=0x31e4e4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5b0da70, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x69e61cd0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x69e61cd0, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x381b80 [0034.020] FindClose (in: hFindFile=0x381b80 | out: hFindFile=0x381b80) returned 1 [0034.021] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e77c) returned 1 [0034.021] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e788) returned 1 [0034.021] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e7bc) returned 1 [0034.021] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\PROOF", nBufferLength=0x105, lpBuffer=0x31e2c4, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Common Files\\Microsoft Shared\\PROOF", lpFilePart=0x0) returned 0x34 [0034.021] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\PROOF\\", nBufferLength=0x105, lpBuffer=0x31e298, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Common Files\\Microsoft Shared\\PROOF\\", lpFilePart=0x0) returned 0x35 [0034.021] FindFirstFileW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\PROOF\\*", lpFindFileData=0x31e4e4 | out: lpFindFileData=0x31e4e4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5b0da70, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x69e61cd0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x69e61cd0, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x381b80 [0034.021] FindClose (in: hFindFile=0x381b80 | out: hFindFile=0x381b80) returned 1 [0034.021] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e77c) returned 1 [0034.021] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e788) returned 1 [0034.021] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e7bc) returned 1 [0034.021] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\Smart Tag", nBufferLength=0x105, lpBuffer=0x31e2c4, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Common Files\\Microsoft Shared\\Smart Tag", lpFilePart=0x0) returned 0x38 [0034.021] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\Smart Tag\\", nBufferLength=0x105, lpBuffer=0x31e298, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Common Files\\Microsoft Shared\\Smart Tag\\", lpFilePart=0x0) returned 0x39 [0034.021] FindFirstFileW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\Smart Tag\\*", lpFindFileData=0x31e4e4 | out: lpFindFileData=0x31e4e4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeed123f0, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xd5807780, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0xd5807780, ftLastWriteTime.dwHighDateTime=0x1d305eb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x381b80 [0034.023] FindClose (in: hFindFile=0x381b80 | out: hFindFile=0x381b80) returned 1 [0034.024] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e77c) returned 1 [0034.024] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e788) returned 1 [0034.024] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e7bc) returned 1 [0034.024] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\Smart Tag", nBufferLength=0x105, lpBuffer=0x31e2c4, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Common Files\\Microsoft Shared\\Smart Tag", lpFilePart=0x0) returned 0x38 [0034.024] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\Smart Tag\\", nBufferLength=0x105, lpBuffer=0x31e298, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Common Files\\Microsoft Shared\\Smart Tag\\", lpFilePart=0x0) returned 0x39 [0034.024] FindFirstFileW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\Smart Tag\\*", lpFindFileData=0x31e4e4 | out: lpFindFileData=0x31e4e4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeed123f0, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xd5807780, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0xd5807780, ftLastWriteTime.dwHighDateTime=0x1d305eb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x381b80 [0034.025] FindClose (in: hFindFile=0x381b80 | out: hFindFile=0x381b80) returned 1 [0034.025] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e77c) returned 1 [0034.026] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e788) returned 1 [0034.026] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e744) returned 1 [0034.026] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\Smart Tag\\1033", nBufferLength=0x105, lpBuffer=0x31e24c, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Common Files\\Microsoft Shared\\Smart Tag\\1033", lpFilePart=0x0) returned 0x3d [0034.026] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\Smart Tag\\1033\\", nBufferLength=0x105, lpBuffer=0x31e220, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Common Files\\Microsoft Shared\\Smart Tag\\1033\\", lpFilePart=0x0) returned 0x3e [0034.026] FindFirstFileW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\Smart Tag\\1033\\*", lpFindFileData=0x31e46c | out: lpFindFileData=0x31e46c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeee1cd90, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xef058230, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xef058230, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x381b80 [0034.027] FindClose (in: hFindFile=0x381b80 | out: hFindFile=0x381b80) returned 1 [0034.027] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e704) returned 1 [0034.027] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e710) returned 1 [0034.027] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e744) returned 1 [0034.027] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\Smart Tag\\1033", nBufferLength=0x105, lpBuffer=0x31e24c, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Common Files\\Microsoft Shared\\Smart Tag\\1033", lpFilePart=0x0) returned 0x3d [0034.027] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\Smart Tag\\1033\\", nBufferLength=0x105, lpBuffer=0x31e220, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Common Files\\Microsoft Shared\\Smart Tag\\1033\\", lpFilePart=0x0) returned 0x3e [0034.027] FindFirstFileW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\Smart Tag\\1033\\*", lpFindFileData=0x31e46c | out: lpFindFileData=0x31e46c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeee1cd90, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xef058230, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xef058230, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x381b80 [0034.027] FindClose (in: hFindFile=0x381b80 | out: hFindFile=0x381b80) returned 1 [0034.028] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e704) returned 1 [0034.028] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e710) returned 1 [0034.028] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e744) returned 1 [0034.028] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\Smart Tag\\LISTS", nBufferLength=0x105, lpBuffer=0x31e24c, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Common Files\\Microsoft Shared\\Smart Tag\\LISTS", lpFilePart=0x0) returned 0x3e [0034.028] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\Smart Tag\\LISTS\\", nBufferLength=0x105, lpBuffer=0x31e220, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Common Files\\Microsoft Shared\\Smart Tag\\LISTS\\", lpFilePart=0x0) returned 0x3f [0034.028] FindFirstFileW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\Smart Tag\\LISTS\\*", lpFindFileData=0x31e46c | out: lpFindFileData=0x31e46c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeed123f0, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0x5f42f7d0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x5f42f7d0, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x381b80 [0034.028] FindClose (in: hFindFile=0x381b80 | out: hFindFile=0x381b80) returned 1 [0034.029] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e704) returned 1 [0034.029] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e710) returned 1 [0034.029] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e744) returned 1 [0034.029] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\Smart Tag\\LISTS", nBufferLength=0x105, lpBuffer=0x31e24c, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Common Files\\Microsoft Shared\\Smart Tag\\LISTS", lpFilePart=0x0) returned 0x3e [0034.029] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\Smart Tag\\LISTS\\", nBufferLength=0x105, lpBuffer=0x31e220, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Common Files\\Microsoft Shared\\Smart Tag\\LISTS\\", lpFilePart=0x0) returned 0x3f [0034.029] FindFirstFileW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\Smart Tag\\LISTS\\*", lpFindFileData=0x31e46c | out: lpFindFileData=0x31e46c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeed123f0, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0x5f42f7d0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x5f42f7d0, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x381b80 [0034.029] FindClose (in: hFindFile=0x381b80 | out: hFindFile=0x381b80) returned 1 [0034.029] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e704) returned 1 [0034.029] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e710) returned 1 [0034.029] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e6cc) returned 1 [0034.029] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\Smart Tag\\LISTS\\1033", nBufferLength=0x105, lpBuffer=0x31e1d4, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Common Files\\Microsoft Shared\\Smart Tag\\LISTS\\1033", lpFilePart=0x0) returned 0x43 [0034.029] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\Smart Tag\\LISTS\\1033\\", nBufferLength=0x105, lpBuffer=0x31e1a8, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Common Files\\Microsoft Shared\\Smart Tag\\LISTS\\1033\\", lpFilePart=0x0) returned 0x44 [0034.029] FindFirstFileW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\Smart Tag\\LISTS\\1033\\*", lpFindFileData=0x31e3f4 | out: lpFindFileData=0x31e3f4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeed123f0, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xef07e390, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xef07e390, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x381b80 [0034.029] FindClose (in: hFindFile=0x381b80 | out: hFindFile=0x381b80) returned 1 [0034.029] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e68c) returned 1 [0034.029] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e698) returned 1 [0034.030] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e6cc) returned 1 [0034.030] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\Smart Tag\\LISTS\\1033", nBufferLength=0x105, lpBuffer=0x31e1d4, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Common Files\\Microsoft Shared\\Smart Tag\\LISTS\\1033", lpFilePart=0x0) returned 0x43 [0034.030] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\Smart Tag\\LISTS\\1033\\", nBufferLength=0x105, lpBuffer=0x31e1a8, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Common Files\\Microsoft Shared\\Smart Tag\\LISTS\\1033\\", lpFilePart=0x0) returned 0x44 [0034.030] FindFirstFileW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\Smart Tag\\LISTS\\1033\\*", lpFindFileData=0x31e3f4 | out: lpFindFileData=0x31e3f4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeed123f0, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xef07e390, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xef07e390, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x381b80 [0034.030] FindClose (in: hFindFile=0x381b80 | out: hFindFile=0x381b80) returned 1 [0034.030] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e68c) returned 1 [0034.030] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e698) returned 1 [0034.030] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e7bc) returned 1 [0034.030] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\Source Engine", nBufferLength=0x105, lpBuffer=0x31e2c4, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Common Files\\Microsoft Shared\\Source Engine", lpFilePart=0x0) returned 0x3c [0034.030] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\Source Engine\\", nBufferLength=0x105, lpBuffer=0x31e298, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Common Files\\Microsoft Shared\\Source Engine\\", lpFilePart=0x0) returned 0x3d [0034.030] FindFirstFileW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\Source Engine\\*", lpFindFileData=0x31e4e4 | out: lpFindFileData=0x31e4e4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeef4d890, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xeef4d890, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xeef4d890, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x381b80 [0034.031] FindClose (in: hFindFile=0x381b80 | out: hFindFile=0x381b80) returned 1 [0034.031] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e77c) returned 1 [0034.031] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e788) returned 1 [0034.031] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e7bc) returned 1 [0034.031] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\Source Engine", nBufferLength=0x105, lpBuffer=0x31e2c4, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Common Files\\Microsoft Shared\\Source Engine", lpFilePart=0x0) returned 0x3c [0034.031] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\Source Engine\\", nBufferLength=0x105, lpBuffer=0x31e298, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Common Files\\Microsoft Shared\\Source Engine\\", lpFilePart=0x0) returned 0x3d [0034.031] FindFirstFileW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\Source Engine\\*", lpFindFileData=0x31e4e4 | out: lpFindFileData=0x31e4e4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeef4d890, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xeef4d890, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xeef4d890, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x381b80 [0034.031] FindClose (in: hFindFile=0x381b80 | out: hFindFile=0x381b80) returned 1 [0034.031] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e77c) returned 1 [0034.031] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e788) returned 1 [0034.031] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e7bc) returned 1 [0034.032] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\Stationery", nBufferLength=0x105, lpBuffer=0x31e2c4, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Common Files\\Microsoft Shared\\Stationery", lpFilePart=0x0) returned 0x39 [0034.032] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\Stationery\\", nBufferLength=0x105, lpBuffer=0x31e298, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Common Files\\Microsoft Shared\\Stationery\\", lpFilePart=0x0) returned 0x3a [0034.032] FindFirstFileW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\Stationery\\*", lpFindFileData=0x31e4e4 | out: lpFindFileData=0x31e4e4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd85ef28, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x9e177d26, ftLastAccessTime.dwHighDateTime=0x1cbf8eb, ftLastWriteTime.dwLowDateTime=0x9e177d26, ftLastWriteTime.dwHighDateTime=0x1cbf8eb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x381b80 [0034.036] FindClose (in: hFindFile=0x381b80 | out: hFindFile=0x381b80) returned 1 [0034.036] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e77c) returned 1 [0034.036] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e788) returned 1 [0034.036] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e7bc) returned 1 [0034.036] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\Stationery", nBufferLength=0x105, lpBuffer=0x31e2c4, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Common Files\\Microsoft Shared\\Stationery", lpFilePart=0x0) returned 0x39 [0034.037] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\Stationery\\", nBufferLength=0x105, lpBuffer=0x31e298, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Common Files\\Microsoft Shared\\Stationery\\", lpFilePart=0x0) returned 0x3a [0034.037] FindFirstFileW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\Stationery\\*", lpFindFileData=0x31e4e4 | out: lpFindFileData=0x31e4e4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd85ef28, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x9e177d26, ftLastAccessTime.dwHighDateTime=0x1cbf8eb, ftLastWriteTime.dwLowDateTime=0x9e177d26, ftLastWriteTime.dwHighDateTime=0x1cbf8eb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x381b80 [0034.037] FindClose (in: hFindFile=0x381b80 | out: hFindFile=0x381b80) returned 1 [0034.038] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e77c) returned 1 [0034.038] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e788) returned 1 [0034.038] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\Stationery\\Bears.jpg", nBufferLength=0x105, lpBuffer=0x31e194, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Common Files\\Microsoft Shared\\Stationery\\Bears.jpg", lpFilePart=0x0) returned 0x43 [0034.038] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e688) returned 1 [0034.038] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\Stationery\\Bears.jpg" (normalized: "c:\\program files\\common files\\microsoft shared\\stationery\\bears.jpg"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x224 [0034.039] GetFileType (hFile=0x224) returned 0x1 [0034.039] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e684) returned 1 [0034.039] GetFileType (hFile=0x224) returned 0x1 [0034.039] GetFileSize (in: hFile=0x224, lpFileSizeHigh=0x31e790 | out: lpFileSizeHigh=0x31e790*=0x0) returned 0x432 [0034.039] ReadFile (in: hFile=0x224, lpBuffer=0x2699ae4, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x31e73c, lpOverlapped=0x0 | out: lpBuffer=0x2699ae4*, lpNumberOfBytesRead=0x31e73c*=0x432, lpOverlapped=0x0) returned 1 [0034.069] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\Stationery\\Bears.jpg", nBufferLength=0x105, lpBuffer=0x31e180, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Common Files\\Microsoft Shared\\Stationery\\Bears.jpg", lpFilePart=0x0) returned 0x43 [0034.069] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e674) returned 1 [0034.069] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\Stationery\\Bears.jpg" (normalized: "c:\\program files\\common files\\microsoft shared\\stationery\\bears.jpg"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0xffffffff [0034.070] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31d4b0) returned 1 [0034.070] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e7bc) returned 1 [0034.070] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\TextConv", nBufferLength=0x105, lpBuffer=0x31e2c4, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Common Files\\Microsoft Shared\\TextConv", lpFilePart=0x0) returned 0x37 [0034.070] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\TextConv\\", nBufferLength=0x105, lpBuffer=0x31e298, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Common Files\\Microsoft Shared\\TextConv\\", lpFilePart=0x0) returned 0x38 [0034.070] FindFirstFileW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\TextConv\\*", lpFindFileData=0x31e4e4 | out: lpFindFileData=0x31e4e4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x80020c30, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0xcf4f23c0, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0xcf4f23c0, ftLastWriteTime.dwHighDateTime=0x1d305eb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x381c80 [0034.071] FindNextFileW (in: hFindFile=0x381c80, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x80020c30, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0xcf4f23c0, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0xcf4f23c0, ftLastWriteTime.dwHighDateTime=0x1d305eb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0034.071] FindNextFileW (in: hFindFile=0x381c80, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1eab37af, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x23ecb743, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x1eab37af, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="en-US", cAlternateFileName="")) returned 1 [0034.071] FindNextFileW (in: hFindFile=0x381c80, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3e16af00, ftCreationTime.dwHighDateTime=0x1cbae03, ftLastAccessTime.dwLowDateTime=0xcf518520, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0x3e16af00, ftLastWriteTime.dwHighDateTime=0x1cbae03, nFileSizeHigh=0x0, nFileSizeLow=0x23d78, dwReserved0=0x0, dwReserved1=0x0, cFileName="MSCONV97.DLL", cAlternateFileName="")) returned 1 [0034.072] FindNextFileW (in: hFindFile=0x381c80, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1aeaee00, ftCreationTime.dwHighDateTime=0x1ca9122, ftLastAccessTime.dwLowDateTime=0xef0320d0, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0x1aeaee00, ftLastWriteTime.dwHighDateTime=0x1ca9122, nFileSizeHigh=0x0, nFileSizeLow=0x8f68, dwReserved0=0x0, dwReserved1=0x0, cFileName="RECOVR32.CNV", cAlternateFileName="")) returned 1 [0034.072] FindNextFileW (in: hFindFile=0x381c80, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2f938f00, ftCreationTime.dwHighDateTime=0x1caafc8, ftLastAccessTime.dwLowDateTime=0x7090d6b0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x2f938f00, ftLastWriteTime.dwHighDateTime=0x1caafc8, nFileSizeHigh=0x0, nFileSizeLow=0xdfa0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Wks9Pxy.cnv", cAlternateFileName="")) returned 1 [0034.072] FindNextFileW (in: hFindFile=0x381c80, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x56ce200, ftCreationTime.dwHighDateTime=0x1cbd856, ftLastAccessTime.dwLowDateTime=0xc226ea20, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0x56ce200, ftLastWriteTime.dwHighDateTime=0x1cbd856, nFileSizeHigh=0x0, nFileSizeLow=0x30170, dwReserved0=0x0, dwReserved1=0x0, cFileName="WPFT532.CNV", cAlternateFileName="")) returned 1 [0034.072] FindNextFileW (in: hFindFile=0x381c80, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3e16af00, ftCreationTime.dwHighDateTime=0x1cbae03, ftLastAccessTime.dwLowDateTime=0xc2294b80, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0x3e16af00, ftLastWriteTime.dwHighDateTime=0x1cbae03, nFileSizeHigh=0x0, nFileSizeLow=0x46b70, dwReserved0=0x0, dwReserved1=0x0, cFileName="WPFT632.CNV", cAlternateFileName="")) returned 1 [0034.072] FindNextFileW (in: hFindFile=0x381c80, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0034.072] FindClose (in: hFindFile=0x381c80 | out: hFindFile=0x381c80) returned 1 [0034.072] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e77c) returned 1 [0034.072] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e788) returned 1 [0034.072] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e7bc) returned 1 [0034.072] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\TextConv", nBufferLength=0x105, lpBuffer=0x31e2c4, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Common Files\\Microsoft Shared\\TextConv", lpFilePart=0x0) returned 0x37 [0034.072] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\TextConv\\", nBufferLength=0x105, lpBuffer=0x31e298, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Common Files\\Microsoft Shared\\TextConv\\", lpFilePart=0x0) returned 0x38 [0034.072] FindFirstFileW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\TextConv\\*", lpFindFileData=0x31e4e4 | out: lpFindFileData=0x31e4e4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x80020c30, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0xcf4f23c0, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0xcf4f23c0, ftLastWriteTime.dwHighDateTime=0x1d305eb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x381c80 [0034.073] FindNextFileW (in: hFindFile=0x381c80, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x80020c30, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0xcf4f23c0, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0xcf4f23c0, ftLastWriteTime.dwHighDateTime=0x1d305eb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0034.073] FindNextFileW (in: hFindFile=0x381c80, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1eab37af, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x23ecb743, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x1eab37af, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="en-US", cAlternateFileName="")) returned 1 [0034.073] FindNextFileW (in: hFindFile=0x381c80, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3e16af00, ftCreationTime.dwHighDateTime=0x1cbae03, ftLastAccessTime.dwLowDateTime=0xcf518520, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0x3e16af00, ftLastWriteTime.dwHighDateTime=0x1cbae03, nFileSizeHigh=0x0, nFileSizeLow=0x23d78, dwReserved0=0x0, dwReserved1=0x0, cFileName="MSCONV97.DLL", cAlternateFileName="")) returned 1 [0034.073] FindNextFileW (in: hFindFile=0x381c80, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1aeaee00, ftCreationTime.dwHighDateTime=0x1ca9122, ftLastAccessTime.dwLowDateTime=0xef0320d0, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0x1aeaee00, ftLastWriteTime.dwHighDateTime=0x1ca9122, nFileSizeHigh=0x0, nFileSizeLow=0x8f68, dwReserved0=0x0, dwReserved1=0x0, cFileName="RECOVR32.CNV", cAlternateFileName="")) returned 1 [0034.073] FindNextFileW (in: hFindFile=0x381c80, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2f938f00, ftCreationTime.dwHighDateTime=0x1caafc8, ftLastAccessTime.dwLowDateTime=0x7090d6b0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x2f938f00, ftLastWriteTime.dwHighDateTime=0x1caafc8, nFileSizeHigh=0x0, nFileSizeLow=0xdfa0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Wks9Pxy.cnv", cAlternateFileName="")) returned 1 [0034.073] FindNextFileW (in: hFindFile=0x381c80, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x56ce200, ftCreationTime.dwHighDateTime=0x1cbd856, ftLastAccessTime.dwLowDateTime=0xc226ea20, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0x56ce200, ftLastWriteTime.dwHighDateTime=0x1cbd856, nFileSizeHigh=0x0, nFileSizeLow=0x30170, dwReserved0=0x0, dwReserved1=0x0, cFileName="WPFT532.CNV", cAlternateFileName="")) returned 1 [0034.073] FindNextFileW (in: hFindFile=0x381c80, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3e16af00, ftCreationTime.dwHighDateTime=0x1cbae03, ftLastAccessTime.dwLowDateTime=0xc2294b80, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0x3e16af00, ftLastWriteTime.dwHighDateTime=0x1cbae03, nFileSizeHigh=0x0, nFileSizeLow=0x46b70, dwReserved0=0x0, dwReserved1=0x0, cFileName="WPFT632.CNV", cAlternateFileName="")) returned 1 [0034.074] FindNextFileW (in: hFindFile=0x381c80, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3e16af00, ftCreationTime.dwHighDateTime=0x1cbae03, ftLastAccessTime.dwLowDateTime=0xc2294b80, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0x3e16af00, ftLastWriteTime.dwHighDateTime=0x1cbae03, nFileSizeHigh=0x0, nFileSizeLow=0x46b70, dwReserved0=0x0, dwReserved1=0x0, cFileName="WPFT632.CNV", cAlternateFileName="")) returned 0 [0034.074] FindClose (in: hFindFile=0x381c80 | out: hFindFile=0x381c80) returned 1 [0034.074] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e77c) returned 1 [0034.074] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e788) returned 1 [0034.074] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e744) returned 1 [0034.074] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\TextConv\\en-US", nBufferLength=0x105, lpBuffer=0x31e24c, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Common Files\\Microsoft Shared\\TextConv\\en-US", lpFilePart=0x0) returned 0x3d [0034.074] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\TextConv\\en-US\\", nBufferLength=0x105, lpBuffer=0x31e220, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Common Files\\Microsoft Shared\\TextConv\\en-US\\", lpFilePart=0x0) returned 0x3e [0034.074] FindFirstFileW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\TextConv\\en-US\\*", lpFindFileData=0x31e46c | out: lpFindFileData=0x31e46c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1eab37af, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x23ecb743, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x1eab37af, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x381c80 [0034.074] FindNextFileW (in: hFindFile=0x381c80, lpFindFileData=0x31e47c | out: lpFindFileData=0x31e47c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1eab37af, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x23ecb743, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x1eab37af, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0034.075] FindNextFileW (in: hFindFile=0x381c80, lpFindFileData=0x31e47c | out: lpFindFileData=0x31e47c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1eab37af, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x23ecb743, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x1eab37af, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 0 [0034.075] FindClose (in: hFindFile=0x381c80 | out: hFindFile=0x381c80) returned 1 [0034.075] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e704) returned 1 [0034.075] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e710) returned 1 [0034.075] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e744) returned 1 [0034.075] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\TextConv\\en-US", nBufferLength=0x105, lpBuffer=0x31e24c, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Common Files\\Microsoft Shared\\TextConv\\en-US", lpFilePart=0x0) returned 0x3d [0034.075] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\TextConv\\en-US\\", nBufferLength=0x105, lpBuffer=0x31e220, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Common Files\\Microsoft Shared\\TextConv\\en-US\\", lpFilePart=0x0) returned 0x3e [0034.075] FindFirstFileW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\TextConv\\en-US\\*", lpFindFileData=0x31e46c | out: lpFindFileData=0x31e46c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1eab37af, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x23ecb743, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x1eab37af, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x381c80 [0034.075] FindNextFileW (in: hFindFile=0x381c80, lpFindFileData=0x31e47c | out: lpFindFileData=0x31e47c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1eab37af, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x23ecb743, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x1eab37af, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0034.076] FindNextFileW (in: hFindFile=0x381c80, lpFindFileData=0x31e47c | out: lpFindFileData=0x31e47c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1eab37af, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x23ecb743, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x1eab37af, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 0 [0034.076] FindClose (in: hFindFile=0x381c80 | out: hFindFile=0x381c80) returned 1 [0034.076] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e704) returned 1 [0034.076] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e710) returned 1 [0034.076] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e7bc) returned 1 [0034.076] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14", nBufferLength=0x105, lpBuffer=0x31e2c4, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14", lpFilePart=0x0) returned 0x37 [0034.076] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\", nBufferLength=0x105, lpBuffer=0x31e298, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\", lpFilePart=0x0) returned 0x38 [0034.076] FindFirstFileW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\*", lpFindFileData=0x31e4e4 | out: lpFindFileData=0x31e4e4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x512f1610, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x6d462ff0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x6d462ff0, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x381c80 [0034.079] FindNextFileW (in: hFindFile=0x381c80, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x512f1610, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x6d462ff0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x6d462ff0, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0034.081] FindNextFileW (in: hFindFile=0x381c80, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x512f1610, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x6d05ead0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x6d05ead0, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="AFTRNOON", cAlternateFileName="")) returned 1 [0034.081] FindNextFileW (in: hFindFile=0x381c80, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5146e3d0, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x6d462ff0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x6d462ff0, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="ARCTIC", cAlternateFileName="")) returned 1 [0034.082] FindNextFileW (in: hFindFile=0x381c80, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x51767f50, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x6d05ead0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x6d05ead0, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="AXIS", cAlternateFileName="")) returned 1 [0034.082] FindNextFileW (in: hFindFile=0x381c80, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x51a15810, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x6d462ff0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x6d462ff0, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="BLENDS", cAlternateFileName="")) returned 1 [0034.082] FindNextFileW (in: hFindFile=0x381c80, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x51a15810, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x6d462ff0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x6d462ff0, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="BLUECALM", cAlternateFileName="")) returned 1 [0034.082] FindNextFileW (in: hFindFile=0x381c80, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x51a15810, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x6d05ead0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x6d05ead0, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="BLUEPRNT", cAlternateFileName="")) returned 1 [0034.082] FindNextFileW (in: hFindFile=0x381c80, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x51a15810, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x6d462ff0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x6d462ff0, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="BOLDSTRI", cAlternateFileName="")) returned 1 [0034.082] FindNextFileW (in: hFindFile=0x381c80, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x51a61ad0, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x6d462ff0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x6d462ff0, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="BREEZE", cAlternateFileName="")) returned 1 [0034.083] FindNextFileW (in: hFindFile=0x381c80, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x51c2ab50, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x6d462ff0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x6d462ff0, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="CANYON", cAlternateFileName="")) returned 1 [0034.083] FindNextFileW (in: hFindFile=0x381c80, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x51c2ab50, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x6d05ead0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x6d05ead0, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="CAPSULES", cAlternateFileName="")) returned 1 [0034.083] FindNextFileW (in: hFindFile=0x381c80, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x51c50cb0, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x6d462ff0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x6d462ff0, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="CASCADE", cAlternateFileName="")) returned 1 [0034.083] FindNextFileW (in: hFindFile=0x381c80, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x51cc30d0, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x6d05ead0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x6d05ead0, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="COMPASS", cAlternateFileName="")) returned 1 [0034.083] FindNextFileW (in: hFindFile=0x381c80, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x51cc30d0, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x6d05ead0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x6d05ead0, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="CONCRETE", cAlternateFileName="")) returned 1 [0034.083] FindNextFileW (in: hFindFile=0x381c80, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5a6f8e30, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x6073a7d0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x6073a7d0, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="DEEPBLUE", cAlternateFileName="")) returned 1 [0034.083] FindNextFileW (in: hFindFile=0x381c80, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5a6f8e30, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x60891430, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x60891430, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="ECHO", cAlternateFileName="")) returned 1 [0034.083] FindNextFileW (in: hFindFile=0x381c80, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x51e3fe90, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x6d05ead0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x6d05ead0, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="ECLIPSE", cAlternateFileName="")) returned 1 [0034.084] FindNextFileW (in: hFindFile=0x381c80, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x51f70990, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x6d462ff0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x6d462ff0, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="EDGE", cAlternateFileName="")) returned 1 [0034.084] FindNextFileW (in: hFindFile=0x381c80, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x51fe2db0, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x6d05ead0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x6d05ead0, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="EVRGREEN", cAlternateFileName="")) returned 1 [0034.084] FindNextFileW (in: hFindFile=0x381c80, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5a6f8e30, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x60af2a30, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x60af2a30, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="EXPEDITN", cAlternateFileName="")) returned 1 [0034.084] FindNextFileW (in: hFindFile=0x381c80, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5a6f8e30, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x61cccf30, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x61cccf30, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="ICE", cAlternateFileName="")) returned 1 [0034.084] FindNextFileW (in: hFindFile=0x381c80, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x539538d0, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x6d489150, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x6d489150, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="INDUST", cAlternateFileName="")) returned 1 [0034.084] FindNextFileW (in: hFindFile=0x381c80, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5a6f8e30, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x65d5e3f0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x65d5e3f0, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="IRIS", cAlternateFileName="")) returned 1 [0034.084] FindNextFileW (in: hFindFile=0x381c80, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x567be5d0, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x6d489150, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x6d489150, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="JOURNAL", cAlternateFileName="")) returned 1 [0034.085] FindNextFileW (in: hFindFile=0x381c80, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x567e4730, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x6d489150, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x6d489150, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="LAYERS", cAlternateFileName="")) returned 1 [0034.085] FindNextFileW (in: hFindFile=0x381c80, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5a6f8e30, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x66247150, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x66247150, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="LEVEL", cAlternateFileName="")) returned 1 [0034.085] FindNextFileW (in: hFindFile=0x381c80, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x59544a90, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x6d489150, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x6d489150, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="NETWORK", cAlternateFileName="")) returned 1 [0034.085] FindNextFileW (in: hFindFile=0x381c80, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x59c68c90, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x6d489150, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x6d489150, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="PAPYRUS", cAlternateFileName="")) returned 1 [0034.085] FindNextFileW (in: hFindFile=0x381c80, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5a44b570, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x6d05ead0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x6d05ead0, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="PIXEL", cAlternateFileName="")) returned 1 [0034.085] FindNextFileW (in: hFindFile=0x381c80, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5a6f8e30, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x6d084c30, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x6d084c30, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="PROFILE", cAlternateFileName="")) returned 1 [0034.085] FindNextFileW (in: hFindFile=0x381c80, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5a6f8e30, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x6d489150, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x6d489150, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="QUAD", cAlternateFileName="")) returned 1 [0034.086] FindNextFileW (in: hFindFile=0x381c80, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5a829930, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x6d0d0ef0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x6d0d0ef0, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="RADIAL", cAlternateFileName="")) returned 1 [0034.086] FindNextFileW (in: hFindFile=0x381c80, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5a84fa90, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x6d0d0ef0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x6d0d0ef0, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="REFINED", cAlternateFileName="")) returned 1 [0034.086] FindNextFileW (in: hFindFile=0x381c80, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5a89bd50, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x6d1db890, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x6d1db890, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="RICEPAPR", cAlternateFileName="")) returned 1 [0034.086] FindNextFileW (in: hFindFile=0x381c80, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5a71ef90, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x6d489150, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x6d489150, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="RIPPLE", cAlternateFileName="")) returned 1 [0034.086] FindNextFileW (in: hFindFile=0x381c80, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5a71ef90, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x6d489150, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x6d489150, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="RMNSQUE", cAlternateFileName="")) returned 1 [0034.087] FindNextFileW (in: hFindFile=0x381c80, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5a71ef90, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x6d24dcb0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x6d24dcb0, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="SATIN", cAlternateFileName="")) returned 1 [0034.087] FindNextFileW (in: hFindFile=0x381c80, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5a980590, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x6d2c00d0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x6d2c00d0, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="SKY", cAlternateFileName="")) returned 1 [0034.087] FindNextFileW (in: hFindFile=0x381c80, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5a980590, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x6d4d5410, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x6d4d5410, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="SLATE", cAlternateFileName="")) returned 1 [0034.087] FindNextFileW (in: hFindFile=0x381c80, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5aad71f0, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x6d4d5410, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x6d4d5410, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="SONORA", cAlternateFileName="")) returned 1 [0034.087] FindNextFileW (in: hFindFile=0x381c80, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5a71ef90, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x6d4d5410, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x6d4d5410, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="SPRING", cAlternateFileName="")) returned 1 [0034.087] FindNextFileW (in: hFindFile=0x381c80, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5abe1b90, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x6d3f0bd0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x6d3f0bd0, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="STRTEDGE", cAlternateFileName="")) returned 1 [0034.087] FindNextFileW (in: hFindFile=0x381c80, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5a71ef90, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x6d4d5410, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x6d4d5410, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="STUDIO", cAlternateFileName="")) returned 1 [0034.088] FindNextFileW (in: hFindFile=0x381c80, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5a71ef90, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x6d416d30, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x6d416d30, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="SUMIPNTG", cAlternateFileName="")) returned 1 [0034.088] FindNextFileW (in: hFindFile=0x381c80, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc24e4f00, ftCreationTime.dwHighDateTime=0x1c06b0e, ftLastAccessTime.dwLowDateTime=0x6d462ff0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xc24e4f00, ftLastWriteTime.dwHighDateTime=0x1c06b0e, nFileSizeHigh=0x0, nFileSizeLow=0x1c6c, dwReserved0=0x0, dwReserved1=0x0, cFileName="THEMES.INF", cAlternateFileName="")) returned 1 [0034.088] FindNextFileW (in: hFindFile=0x381c80, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5ad387f0, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x7084efd0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x7084efd0, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="WATER", cAlternateFileName="")) returned 1 [0034.088] FindNextFileW (in: hFindFile=0x381c80, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5a71ef90, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x7084efd0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x7084efd0, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="WATERMAR", cAlternateFileName="")) returned 1 [0034.088] FindNextFileW (in: hFindFile=0x381c80, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5a71ef90, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x7084efd0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x7084efd0, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="WATERMAR", cAlternateFileName="")) returned 0 [0034.088] FindClose (in: hFindFile=0x381c80 | out: hFindFile=0x381c80) returned 1 [0034.089] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e77c) returned 1 [0034.089] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e788) returned 1 [0034.089] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e7bc) returned 1 [0034.089] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14", nBufferLength=0x105, lpBuffer=0x31e2c4, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14", lpFilePart=0x0) returned 0x37 [0034.089] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\", nBufferLength=0x105, lpBuffer=0x31e298, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\", lpFilePart=0x0) returned 0x38 [0034.089] FindFirstFileW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\*", lpFindFileData=0x31e4e4 | out: lpFindFileData=0x31e4e4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x512f1610, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x6d462ff0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x6d462ff0, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x381c80 [0034.090] FindNextFileW (in: hFindFile=0x381c80, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x512f1610, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x6d462ff0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x6d462ff0, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0034.090] FindNextFileW (in: hFindFile=0x381c80, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x512f1610, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x6d05ead0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x6d05ead0, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="AFTRNOON", cAlternateFileName="")) returned 1 [0034.090] FindNextFileW (in: hFindFile=0x381c80, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5146e3d0, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x6d462ff0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x6d462ff0, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="ARCTIC", cAlternateFileName="")) returned 1 [0034.090] FindNextFileW (in: hFindFile=0x381c80, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x51767f50, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x6d05ead0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x6d05ead0, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="AXIS", cAlternateFileName="")) returned 1 [0034.090] FindNextFileW (in: hFindFile=0x381c80, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x51a15810, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x6d462ff0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x6d462ff0, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="BLENDS", cAlternateFileName="")) returned 1 [0034.091] FindNextFileW (in: hFindFile=0x381c80, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x51a15810, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x6d462ff0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x6d462ff0, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="BLUECALM", cAlternateFileName="")) returned 1 [0034.091] FindNextFileW (in: hFindFile=0x381c80, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x51a15810, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x6d05ead0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x6d05ead0, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="BLUEPRNT", cAlternateFileName="")) returned 1 [0034.091] FindNextFileW (in: hFindFile=0x381c80, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x51a15810, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x6d462ff0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x6d462ff0, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="BOLDSTRI", cAlternateFileName="")) returned 1 [0034.091] FindNextFileW (in: hFindFile=0x381c80, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x51a61ad0, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x6d462ff0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x6d462ff0, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="BREEZE", cAlternateFileName="")) returned 1 [0034.091] FindNextFileW (in: hFindFile=0x381c80, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x51c2ab50, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x6d462ff0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x6d462ff0, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="CANYON", cAlternateFileName="")) returned 1 [0034.091] FindNextFileW (in: hFindFile=0x381c80, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x51c2ab50, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x6d05ead0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x6d05ead0, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="CAPSULES", cAlternateFileName="")) returned 1 [0034.091] FindNextFileW (in: hFindFile=0x381c80, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x51c50cb0, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x6d462ff0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x6d462ff0, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="CASCADE", cAlternateFileName="")) returned 1 [0034.091] FindNextFileW (in: hFindFile=0x381c80, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x51cc30d0, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x6d05ead0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x6d05ead0, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="COMPASS", cAlternateFileName="")) returned 1 [0034.091] FindNextFileW (in: hFindFile=0x381c80, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x51cc30d0, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x6d05ead0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x6d05ead0, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="CONCRETE", cAlternateFileName="")) returned 1 [0034.092] FindNextFileW (in: hFindFile=0x381c80, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5a6f8e30, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x6073a7d0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x6073a7d0, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="DEEPBLUE", cAlternateFileName="")) returned 1 [0034.092] FindNextFileW (in: hFindFile=0x381c80, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5a6f8e30, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x60891430, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x60891430, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="ECHO", cAlternateFileName="")) returned 1 [0034.092] FindNextFileW (in: hFindFile=0x381c80, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x51e3fe90, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x6d05ead0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x6d05ead0, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="ECLIPSE", cAlternateFileName="")) returned 1 [0034.092] FindNextFileW (in: hFindFile=0x381c80, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x51f70990, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x6d462ff0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x6d462ff0, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="EDGE", cAlternateFileName="")) returned 1 [0034.092] FindNextFileW (in: hFindFile=0x381c80, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x51fe2db0, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x6d05ead0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x6d05ead0, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="EVRGREEN", cAlternateFileName="")) returned 1 [0034.092] FindNextFileW (in: hFindFile=0x381c80, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5a6f8e30, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x60af2a30, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x60af2a30, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="EXPEDITN", cAlternateFileName="")) returned 1 [0034.092] FindNextFileW (in: hFindFile=0x381c80, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5a6f8e30, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x61cccf30, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x61cccf30, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="ICE", cAlternateFileName="")) returned 1 [0034.092] FindNextFileW (in: hFindFile=0x381c80, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x539538d0, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x6d489150, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x6d489150, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="INDUST", cAlternateFileName="")) returned 1 [0034.092] FindNextFileW (in: hFindFile=0x381c80, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5a6f8e30, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x65d5e3f0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x65d5e3f0, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="IRIS", cAlternateFileName="")) returned 1 [0034.092] FindNextFileW (in: hFindFile=0x381c80, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x567be5d0, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x6d489150, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x6d489150, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="JOURNAL", cAlternateFileName="")) returned 1 [0034.093] FindNextFileW (in: hFindFile=0x381c80, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x567e4730, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x6d489150, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x6d489150, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="LAYERS", cAlternateFileName="")) returned 1 [0034.093] FindNextFileW (in: hFindFile=0x381c80, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5a6f8e30, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x66247150, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x66247150, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="LEVEL", cAlternateFileName="")) returned 1 [0034.093] FindNextFileW (in: hFindFile=0x381c80, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x59544a90, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x6d489150, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x6d489150, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="NETWORK", cAlternateFileName="")) returned 1 [0034.093] FindNextFileW (in: hFindFile=0x381c80, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x59c68c90, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x6d489150, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x6d489150, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="PAPYRUS", cAlternateFileName="")) returned 1 [0034.093] FindNextFileW (in: hFindFile=0x381c80, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5a44b570, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x6d05ead0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x6d05ead0, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="PIXEL", cAlternateFileName="")) returned 1 [0034.093] FindNextFileW (in: hFindFile=0x381c80, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5a6f8e30, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x6d084c30, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x6d084c30, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="PROFILE", cAlternateFileName="")) returned 1 [0034.093] FindNextFileW (in: hFindFile=0x381c80, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5a6f8e30, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x6d489150, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x6d489150, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="QUAD", cAlternateFileName="")) returned 1 [0034.093] FindNextFileW (in: hFindFile=0x381c80, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5a829930, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x6d0d0ef0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x6d0d0ef0, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="RADIAL", cAlternateFileName="")) returned 1 [0034.093] FindNextFileW (in: hFindFile=0x381c80, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5a84fa90, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x6d0d0ef0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x6d0d0ef0, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="REFINED", cAlternateFileName="")) returned 1 [0034.094] FindNextFileW (in: hFindFile=0x381c80, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5a89bd50, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x6d1db890, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x6d1db890, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="RICEPAPR", cAlternateFileName="")) returned 1 [0034.094] FindNextFileW (in: hFindFile=0x381c80, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5a71ef90, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x6d489150, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x6d489150, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="RIPPLE", cAlternateFileName="")) returned 1 [0034.094] FindNextFileW (in: hFindFile=0x381c80, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5a71ef90, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x6d489150, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x6d489150, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="RMNSQUE", cAlternateFileName="")) returned 1 [0034.094] FindNextFileW (in: hFindFile=0x381c80, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5a71ef90, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x6d24dcb0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x6d24dcb0, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="SATIN", cAlternateFileName="")) returned 1 [0034.094] FindNextFileW (in: hFindFile=0x381c80, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5a980590, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x6d2c00d0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x6d2c00d0, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="SKY", cAlternateFileName="")) returned 1 [0034.094] FindNextFileW (in: hFindFile=0x381c80, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5a980590, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x6d4d5410, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x6d4d5410, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="SLATE", cAlternateFileName="")) returned 1 [0034.094] FindNextFileW (in: hFindFile=0x381c80, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5aad71f0, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x6d4d5410, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x6d4d5410, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="SONORA", cAlternateFileName="")) returned 1 [0034.094] FindNextFileW (in: hFindFile=0x381c80, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5a71ef90, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x6d4d5410, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x6d4d5410, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="SPRING", cAlternateFileName="")) returned 1 [0034.094] FindNextFileW (in: hFindFile=0x381c80, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5abe1b90, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x6d3f0bd0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x6d3f0bd0, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="STRTEDGE", cAlternateFileName="")) returned 1 [0034.095] FindNextFileW (in: hFindFile=0x381c80, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5a71ef90, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x6d4d5410, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x6d4d5410, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="STUDIO", cAlternateFileName="")) returned 1 [0034.095] FindNextFileW (in: hFindFile=0x381c80, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5a71ef90, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x6d416d30, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x6d416d30, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="SUMIPNTG", cAlternateFileName="")) returned 1 [0034.095] FindNextFileW (in: hFindFile=0x381c80, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc24e4f00, ftCreationTime.dwHighDateTime=0x1c06b0e, ftLastAccessTime.dwLowDateTime=0x6d462ff0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xc24e4f00, ftLastWriteTime.dwHighDateTime=0x1c06b0e, nFileSizeHigh=0x0, nFileSizeLow=0x1c6c, dwReserved0=0x0, dwReserved1=0x0, cFileName="THEMES.INF", cAlternateFileName="")) returned 1 [0034.095] FindNextFileW (in: hFindFile=0x381c80, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5ad387f0, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x7084efd0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x7084efd0, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="WATER", cAlternateFileName="")) returned 1 [0034.095] FindNextFileW (in: hFindFile=0x381c80, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5a71ef90, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x7084efd0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x7084efd0, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="WATERMAR", cAlternateFileName="")) returned 1 [0034.095] FindNextFileW (in: hFindFile=0x381c80, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0034.095] FindClose (in: hFindFile=0x381c80 | out: hFindFile=0x381c80) returned 1 [0034.096] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e77c) returned 1 [0034.096] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e788) returned 1 [0034.096] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e744) returned 1 [0034.096] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\AFTRNOON", nBufferLength=0x105, lpBuffer=0x31e24c, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\AFTRNOON", lpFilePart=0x0) returned 0x40 [0034.096] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\AFTRNOON\\", nBufferLength=0x105, lpBuffer=0x31e220, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\AFTRNOON\\", lpFilePart=0x0) returned 0x41 [0034.096] FindFirstFileW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\AFTRNOON\\*", lpFindFileData=0x31e46c | out: lpFindFileData=0x31e46c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x512f1610, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x6d05ead0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x6d05ead0, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x381c80 [0034.097] FindNextFileW (in: hFindFile=0x381c80, lpFindFileData=0x31e47c | out: lpFindFileData=0x31e47c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x512f1610, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x6d05ead0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x6d05ead0, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0034.097] FindNextFileW (in: hFindFile=0x381c80, lpFindFileData=0x31e47c | out: lpFindFileData=0x31e47c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xdad6ec00, ftCreationTime.dwHighDateTime=0x1cab7f1, ftLastAccessTime.dwLowDateTime=0x5eb42550, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xdad6ec00, ftLastWriteTime.dwHighDateTime=0x1cab7f1, nFileSizeHigh=0x0, nFileSizeLow=0xe58e, dwReserved0=0x0, dwReserved1=0x0, cFileName="AFTRNOON.ELM", cAlternateFileName="")) returned 1 [0034.097] FindNextFileW (in: hFindFile=0x381c80, lpFindFileData=0x31e47c | out: lpFindFileData=0x31e47c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x86e63000, ftCreationTime.dwHighDateTime=0x1c43125, ftLastAccessTime.dwLowDateTime=0x512f1610, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x86e63000, ftLastWriteTime.dwHighDateTime=0x1c43125, nFileSizeHigh=0x0, nFileSizeLow=0x22b, dwReserved0=0x0, dwReserved1=0x0, cFileName="AFTRNOON.INF", cAlternateFileName="")) returned 1 [0034.097] FindNextFileW (in: hFindFile=0x381c80, lpFindFileData=0x31e47c | out: lpFindFileData=0x31e47c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x85b50300, ftCreationTime.dwHighDateTime=0x1c43125, ftLastAccessTime.dwLowDateTime=0x6d05ead0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x85b50300, ftLastWriteTime.dwHighDateTime=0x1c43125, nFileSizeHigh=0x0, nFileSizeLow=0x621, dwReserved0=0x0, dwReserved1=0x0, cFileName="PREVIEW.GIF", cAlternateFileName="")) returned 1 [0034.097] FindNextFileW (in: hFindFile=0x381c80, lpFindFileData=0x31e47c | out: lpFindFileData=0x31e47c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x86e63000, ftCreationTime.dwHighDateTime=0x1c43125, ftLastAccessTime.dwLowDateTime=0x5ad12690, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x86e63000, ftLastWriteTime.dwHighDateTime=0x1c43125, nFileSizeHigh=0x0, nFileSizeLow=0x6292, dwReserved0=0x0, dwReserved1=0x0, cFileName="THMBNAIL.PNG", cAlternateFileName="")) returned 1 [0034.098] FindNextFileW (in: hFindFile=0x381c80, lpFindFileData=0x31e47c | out: lpFindFileData=0x31e47c*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0034.098] FindClose (in: hFindFile=0x381c80 | out: hFindFile=0x381c80) returned 1 [0034.098] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e704) returned 1 [0034.098] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e710) returned 1 [0034.098] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e744) returned 1 [0034.098] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\AFTRNOON", nBufferLength=0x105, lpBuffer=0x31e24c, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\AFTRNOON", lpFilePart=0x0) returned 0x40 [0034.098] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\AFTRNOON\\", nBufferLength=0x105, lpBuffer=0x31e220, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\AFTRNOON\\", lpFilePart=0x0) returned 0x41 [0034.098] FindFirstFileW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\AFTRNOON\\*", lpFindFileData=0x31e46c | out: lpFindFileData=0x31e46c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x512f1610, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x6d05ead0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x6d05ead0, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x381c80 [0034.098] FindNextFileW (in: hFindFile=0x381c80, lpFindFileData=0x31e47c | out: lpFindFileData=0x31e47c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x512f1610, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x6d05ead0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x6d05ead0, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0034.098] FindNextFileW (in: hFindFile=0x381c80, lpFindFileData=0x31e47c | out: lpFindFileData=0x31e47c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xdad6ec00, ftCreationTime.dwHighDateTime=0x1cab7f1, ftLastAccessTime.dwLowDateTime=0x5eb42550, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xdad6ec00, ftLastWriteTime.dwHighDateTime=0x1cab7f1, nFileSizeHigh=0x0, nFileSizeLow=0xe58e, dwReserved0=0x0, dwReserved1=0x0, cFileName="AFTRNOON.ELM", cAlternateFileName="")) returned 1 [0034.098] FindNextFileW (in: hFindFile=0x381c80, lpFindFileData=0x31e47c | out: lpFindFileData=0x31e47c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x86e63000, ftCreationTime.dwHighDateTime=0x1c43125, ftLastAccessTime.dwLowDateTime=0x512f1610, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x86e63000, ftLastWriteTime.dwHighDateTime=0x1c43125, nFileSizeHigh=0x0, nFileSizeLow=0x22b, dwReserved0=0x0, dwReserved1=0x0, cFileName="AFTRNOON.INF", cAlternateFileName="")) returned 1 [0034.099] FindNextFileW (in: hFindFile=0x381c80, lpFindFileData=0x31e47c | out: lpFindFileData=0x31e47c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x85b50300, ftCreationTime.dwHighDateTime=0x1c43125, ftLastAccessTime.dwLowDateTime=0x6d05ead0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x85b50300, ftLastWriteTime.dwHighDateTime=0x1c43125, nFileSizeHigh=0x0, nFileSizeLow=0x621, dwReserved0=0x0, dwReserved1=0x0, cFileName="PREVIEW.GIF", cAlternateFileName="")) returned 1 [0034.099] FindNextFileW (in: hFindFile=0x381c80, lpFindFileData=0x31e47c | out: lpFindFileData=0x31e47c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x86e63000, ftCreationTime.dwHighDateTime=0x1c43125, ftLastAccessTime.dwLowDateTime=0x5ad12690, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x86e63000, ftLastWriteTime.dwHighDateTime=0x1c43125, nFileSizeHigh=0x0, nFileSizeLow=0x6292, dwReserved0=0x0, dwReserved1=0x0, cFileName="THMBNAIL.PNG", cAlternateFileName="")) returned 1 [0034.099] FindNextFileW (in: hFindFile=0x381c80, lpFindFileData=0x31e47c | out: lpFindFileData=0x31e47c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x86e63000, ftCreationTime.dwHighDateTime=0x1c43125, ftLastAccessTime.dwLowDateTime=0x5ad12690, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x86e63000, ftLastWriteTime.dwHighDateTime=0x1c43125, nFileSizeHigh=0x0, nFileSizeLow=0x6292, dwReserved0=0x0, dwReserved1=0x0, cFileName="THMBNAIL.PNG", cAlternateFileName="")) returned 0 [0034.099] FindClose (in: hFindFile=0x381c80 | out: hFindFile=0x381c80) returned 1 [0034.099] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e704) returned 1 [0034.099] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e710) returned 1 [0034.099] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e744) returned 1 [0034.099] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\ARCTIC", nBufferLength=0x105, lpBuffer=0x31e24c, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\ARCTIC", lpFilePart=0x0) returned 0x3e [0034.099] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\ARCTIC\\", nBufferLength=0x105, lpBuffer=0x31e220, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\ARCTIC\\", lpFilePart=0x0) returned 0x3f [0034.099] FindFirstFileW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\ARCTIC\\*", lpFindFileData=0x31e46c | out: lpFindFileData=0x31e46c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5146e3d0, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x6d462ff0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x6d462ff0, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x381c80 [0034.104] FindNextFileW (in: hFindFile=0x381c80, lpFindFileData=0x31e47c | out: lpFindFileData=0x31e47c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5146e3d0, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x6d462ff0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x6d462ff0, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0034.104] FindNextFileW (in: hFindFile=0x381c80, lpFindFileData=0x31e47c | out: lpFindFileData=0x31e47c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xdc081900, ftCreationTime.dwHighDateTime=0x1cab7f1, ftLastAccessTime.dwLowDateTime=0x5146e3d0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xdc081900, ftLastWriteTime.dwHighDateTime=0x1cab7f1, nFileSizeHigh=0x0, nFileSizeLow=0x10fc7, dwReserved0=0x0, dwReserved1=0x0, cFileName="ARCTIC.ELM", cAlternateFileName="")) returned 1 [0034.104] FindNextFileW (in: hFindFile=0x381c80, lpFindFileData=0x31e47c | out: lpFindFileData=0x31e47c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8a79b700, ftCreationTime.dwHighDateTime=0x1c43125, ftLastAccessTime.dwLowDateTime=0x5146e3d0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x8a79b700, ftLastWriteTime.dwHighDateTime=0x1c43125, nFileSizeHigh=0x0, nFileSizeLow=0x201, dwReserved0=0x0, dwReserved1=0x0, cFileName="ARCTIC.INF", cAlternateFileName="")) returned 1 [0034.104] FindNextFileW (in: hFindFile=0x381c80, lpFindFileData=0x31e47c | out: lpFindFileData=0x31e47c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8a79b700, ftCreationTime.dwHighDateTime=0x1c43125, ftLastAccessTime.dwLowDateTime=0x6d05ead0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x8a79b700, ftLastWriteTime.dwHighDateTime=0x1c43125, nFileSizeHigh=0x0, nFileSizeLow=0xba9, dwReserved0=0x0, dwReserved1=0x0, cFileName="PREVIEW.GIF", cAlternateFileName="")) returned 1 [0034.104] FindNextFileW (in: hFindFile=0x381c80, lpFindFileData=0x31e47c | out: lpFindFileData=0x31e47c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8a79b700, ftCreationTime.dwHighDateTime=0x1c43125, ftLastAccessTime.dwLowDateTime=0x6d462ff0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x8a79b700, ftLastWriteTime.dwHighDateTime=0x1c43125, nFileSizeHigh=0x0, nFileSizeLow=0x4d44, dwReserved0=0x0, dwReserved1=0x0, cFileName="THMBNAIL.PNG", cAlternateFileName="")) returned 1 [0034.104] FindNextFileW (in: hFindFile=0x381c80, lpFindFileData=0x31e47c | out: lpFindFileData=0x31e47c*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0034.104] FindClose (in: hFindFile=0x381c80 | out: hFindFile=0x381c80) returned 1 [0034.104] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e704) returned 1 [0034.104] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e710) returned 1 [0034.104] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\ARCTIC", nBufferLength=0x105, lpBuffer=0x31e24c, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\ARCTIC", lpFilePart=0x0) returned 0x3e [0034.104] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\ARCTIC\\", nBufferLength=0x105, lpBuffer=0x31e220, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\ARCTIC\\", lpFilePart=0x0) returned 0x3f [0034.104] FindFirstFileW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\ARCTIC\\*", lpFindFileData=0x31e46c | out: lpFindFileData=0x31e46c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5146e3d0, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x6d462ff0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x6d462ff0, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x381c80 [0034.105] FindNextFileW (in: hFindFile=0x381c80, lpFindFileData=0x31e47c | out: lpFindFileData=0x31e47c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5146e3d0, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x6d462ff0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x6d462ff0, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0034.105] FindNextFileW (in: hFindFile=0x381c80, lpFindFileData=0x31e47c | out: lpFindFileData=0x31e47c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xdc081900, ftCreationTime.dwHighDateTime=0x1cab7f1, ftLastAccessTime.dwLowDateTime=0x5146e3d0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xdc081900, ftLastWriteTime.dwHighDateTime=0x1cab7f1, nFileSizeHigh=0x0, nFileSizeLow=0x10fc7, dwReserved0=0x0, dwReserved1=0x0, cFileName="ARCTIC.ELM", cAlternateFileName="")) returned 1 [0034.105] FindNextFileW (in: hFindFile=0x381c80, lpFindFileData=0x31e47c | out: lpFindFileData=0x31e47c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8a79b700, ftCreationTime.dwHighDateTime=0x1c43125, ftLastAccessTime.dwLowDateTime=0x5146e3d0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x8a79b700, ftLastWriteTime.dwHighDateTime=0x1c43125, nFileSizeHigh=0x0, nFileSizeLow=0x201, dwReserved0=0x0, dwReserved1=0x0, cFileName="ARCTIC.INF", cAlternateFileName="")) returned 1 [0034.105] FindNextFileW (in: hFindFile=0x381c80, lpFindFileData=0x31e47c | out: lpFindFileData=0x31e47c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8a79b700, ftCreationTime.dwHighDateTime=0x1c43125, ftLastAccessTime.dwLowDateTime=0x6d05ead0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x8a79b700, ftLastWriteTime.dwHighDateTime=0x1c43125, nFileSizeHigh=0x0, nFileSizeLow=0xba9, dwReserved0=0x0, dwReserved1=0x0, cFileName="PREVIEW.GIF", cAlternateFileName="")) returned 1 [0034.105] FindNextFileW (in: hFindFile=0x381c80, lpFindFileData=0x31e47c | out: lpFindFileData=0x31e47c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8a79b700, ftCreationTime.dwHighDateTime=0x1c43125, ftLastAccessTime.dwLowDateTime=0x6d462ff0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x8a79b700, ftLastWriteTime.dwHighDateTime=0x1c43125, nFileSizeHigh=0x0, nFileSizeLow=0x4d44, dwReserved0=0x0, dwReserved1=0x0, cFileName="THMBNAIL.PNG", cAlternateFileName="")) returned 1 [0034.106] FindNextFileW (in: hFindFile=0x381c80, lpFindFileData=0x31e47c | out: lpFindFileData=0x31e47c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8a79b700, ftCreationTime.dwHighDateTime=0x1c43125, ftLastAccessTime.dwLowDateTime=0x6d462ff0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x8a79b700, ftLastWriteTime.dwHighDateTime=0x1c43125, nFileSizeHigh=0x0, nFileSizeLow=0x4d44, dwReserved0=0x0, dwReserved1=0x0, cFileName="THMBNAIL.PNG", cAlternateFileName="")) returned 0 [0034.106] FindClose (in: hFindFile=0x381c80 | out: hFindFile=0x381c80) returned 1 [0034.106] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\AXIS", nBufferLength=0x105, lpBuffer=0x31e24c, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\AXIS", lpFilePart=0x0) returned 0x3c [0034.106] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\AXIS\\", nBufferLength=0x105, lpBuffer=0x31e220, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\AXIS\\", lpFilePart=0x0) returned 0x3d [0034.106] FindFirstFileW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\AXIS\\*", lpFindFileData=0x31e46c | out: lpFindFileData=0x31e46c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x51767f50, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x6d05ead0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x6d05ead0, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x381c80 [0034.107] FindNextFileW (in: hFindFile=0x381c80, lpFindFileData=0x31e47c | out: lpFindFileData=0x31e47c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x51767f50, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x6d05ead0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x6d05ead0, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0034.107] FindNextFileW (in: hFindFile=0x381c80, lpFindFileData=0x31e47c | out: lpFindFileData=0x31e47c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xdd394600, ftCreationTime.dwHighDateTime=0x1cab7f1, ftLastAccessTime.dwLowDateTime=0x51767f50, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xdd394600, ftLastWriteTime.dwHighDateTime=0x1cab7f1, nFileSizeHigh=0x0, nFileSizeLow=0x189be, dwReserved0=0x0, dwReserved1=0x0, cFileName="AXIS.ELM", cAlternateFileName="")) returned 1 [0034.108] FindNextFileW (in: hFindFile=0x381c80, lpFindFileData=0x31e47c | out: lpFindFileData=0x31e47c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8baae400, ftCreationTime.dwHighDateTime=0x1c43125, ftLastAccessTime.dwLowDateTime=0x5f409670, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x8baae400, ftLastWriteTime.dwHighDateTime=0x1c43125, nFileSizeHigh=0x0, nFileSizeLow=0x211, dwReserved0=0x0, dwReserved1=0x0, cFileName="AXIS.INF", cAlternateFileName="")) returned 1 [0034.108] FindNextFileW (in: hFindFile=0x381c80, lpFindFileData=0x31e47c | out: lpFindFileData=0x31e47c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8baae400, ftCreationTime.dwHighDateTime=0x1c43125, ftLastAccessTime.dwLowDateTime=0x6d05ead0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x8baae400, ftLastWriteTime.dwHighDateTime=0x1c43125, nFileSizeHigh=0x0, nFileSizeLow=0xb20, dwReserved0=0x0, dwReserved1=0x0, cFileName="PREVIEW.GIF", cAlternateFileName="")) returned 1 [0034.108] FindNextFileW (in: hFindFile=0x381c80, lpFindFileData=0x31e47c | out: lpFindFileData=0x31e47c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8baae400, ftCreationTime.dwHighDateTime=0x1c43125, ftLastAccessTime.dwLowDateTime=0x5ad12690, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x8baae400, ftLastWriteTime.dwHighDateTime=0x1c43125, nFileSizeHigh=0x0, nFileSizeLow=0x8864, dwReserved0=0x0, dwReserved1=0x0, cFileName="THMBNAIL.PNG", cAlternateFileName="")) returned 1 [0034.108] FindNextFileW (in: hFindFile=0x381c80, lpFindFileData=0x31e47c | out: lpFindFileData=0x31e47c*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0034.108] FindClose (in: hFindFile=0x381c80 | out: hFindFile=0x381c80) returned 1 [0034.108] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\AXIS", nBufferLength=0x105, lpBuffer=0x31e24c, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\AXIS", lpFilePart=0x0) returned 0x3c [0034.108] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\AXIS\\", nBufferLength=0x105, lpBuffer=0x31e220, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\AXIS\\", lpFilePart=0x0) returned 0x3d [0034.108] FindFirstFileW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\AXIS\\*", lpFindFileData=0x31e46c | out: lpFindFileData=0x31e46c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x51767f50, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x6d05ead0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x6d05ead0, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x381c80 [0034.108] FindNextFileW (in: hFindFile=0x381c80, lpFindFileData=0x31e47c | out: lpFindFileData=0x31e47c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x51767f50, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x6d05ead0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x6d05ead0, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0034.108] FindNextFileW (in: hFindFile=0x381c80, lpFindFileData=0x31e47c | out: lpFindFileData=0x31e47c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xdd394600, ftCreationTime.dwHighDateTime=0x1cab7f1, ftLastAccessTime.dwLowDateTime=0x51767f50, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xdd394600, ftLastWriteTime.dwHighDateTime=0x1cab7f1, nFileSizeHigh=0x0, nFileSizeLow=0x189be, dwReserved0=0x0, dwReserved1=0x0, cFileName="AXIS.ELM", cAlternateFileName="")) returned 1 [0034.109] FindNextFileW (in: hFindFile=0x381c80, lpFindFileData=0x31e47c | out: lpFindFileData=0x31e47c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8baae400, ftCreationTime.dwHighDateTime=0x1c43125, ftLastAccessTime.dwLowDateTime=0x5f409670, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x8baae400, ftLastWriteTime.dwHighDateTime=0x1c43125, nFileSizeHigh=0x0, nFileSizeLow=0x211, dwReserved0=0x0, dwReserved1=0x0, cFileName="AXIS.INF", cAlternateFileName="")) returned 1 [0034.109] FindNextFileW (in: hFindFile=0x381c80, lpFindFileData=0x31e47c | out: lpFindFileData=0x31e47c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8baae400, ftCreationTime.dwHighDateTime=0x1c43125, ftLastAccessTime.dwLowDateTime=0x6d05ead0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x8baae400, ftLastWriteTime.dwHighDateTime=0x1c43125, nFileSizeHigh=0x0, nFileSizeLow=0xb20, dwReserved0=0x0, dwReserved1=0x0, cFileName="PREVIEW.GIF", cAlternateFileName="")) returned 1 [0034.109] FindNextFileW (in: hFindFile=0x381c80, lpFindFileData=0x31e47c | out: lpFindFileData=0x31e47c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8baae400, ftCreationTime.dwHighDateTime=0x1c43125, ftLastAccessTime.dwLowDateTime=0x5ad12690, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x8baae400, ftLastWriteTime.dwHighDateTime=0x1c43125, nFileSizeHigh=0x0, nFileSizeLow=0x8864, dwReserved0=0x0, dwReserved1=0x0, cFileName="THMBNAIL.PNG", cAlternateFileName="")) returned 1 [0034.109] FindNextFileW (in: hFindFile=0x381c80, lpFindFileData=0x31e47c | out: lpFindFileData=0x31e47c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8baae400, ftCreationTime.dwHighDateTime=0x1c43125, ftLastAccessTime.dwLowDateTime=0x5ad12690, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x8baae400, ftLastWriteTime.dwHighDateTime=0x1c43125, nFileSizeHigh=0x0, nFileSizeLow=0x8864, dwReserved0=0x0, dwReserved1=0x0, cFileName="THMBNAIL.PNG", cAlternateFileName="")) returned 0 [0034.109] FindClose (in: hFindFile=0x381c80 | out: hFindFile=0x381c80) returned 1 [0034.109] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\BLENDS", nBufferLength=0x105, lpBuffer=0x31e24c, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\BLENDS", lpFilePart=0x0) returned 0x3e [0034.109] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\BLENDS\\", nBufferLength=0x105, lpBuffer=0x31e220, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\BLENDS\\", lpFilePart=0x0) returned 0x3f [0034.109] FindFirstFileW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\BLENDS\\*", lpFindFileData=0x31e46c | out: lpFindFileData=0x31e46c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x51a15810, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x6d462ff0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x6d462ff0, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x381c80 [0034.110] FindNextFileW (in: hFindFile=0x381c80, lpFindFileData=0x31e47c | out: lpFindFileData=0x31e47c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x51a15810, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x6d462ff0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x6d462ff0, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0034.110] FindNextFileW (in: hFindFile=0x381c80, lpFindFileData=0x31e47c | out: lpFindFileData=0x31e47c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe32f2700, ftCreationTime.dwHighDateTime=0x1cab7f1, ftLastAccessTime.dwLowDateTime=0x51a15810, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xe32f2700, ftLastWriteTime.dwHighDateTime=0x1cab7f1, nFileSizeHigh=0x0, nFileSizeLow=0x10db7, dwReserved0=0x0, dwReserved1=0x0, cFileName="BLENDS.ELM", cAlternateFileName="")) returned 1 [0034.111] FindNextFileW (in: hFindFile=0x381c80, lpFindFileData=0x31e47c | out: lpFindFileData=0x31e47c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xcb59ad00, ftCreationTime.dwHighDateTime=0x1c4d794, ftLastAccessTime.dwLowDateTime=0x5f729350, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xcb59ad00, ftLastWriteTime.dwHighDateTime=0x1c4d794, nFileSizeHigh=0x0, nFileSizeLow=0x216, dwReserved0=0x0, dwReserved1=0x0, cFileName="BLENDS.INF", cAlternateFileName="")) returned 1 [0034.111] FindNextFileW (in: hFindFile=0x381c80, lpFindFileData=0x31e47c | out: lpFindFileData=0x31e47c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x363aa000, ftCreationTime.dwHighDateTime=0x1c3ee72, ftLastAccessTime.dwLowDateTime=0x5a6d2cd0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x363aa000, ftLastWriteTime.dwHighDateTime=0x1c3ee72, nFileSizeHigh=0x0, nFileSizeLow=0x885, dwReserved0=0x0, dwReserved1=0x0, cFileName="PREVIEW.GIF", cAlternateFileName="")) returned 1 [0034.111] FindNextFileW (in: hFindFile=0x381c80, lpFindFileData=0x31e47c | out: lpFindFileData=0x31e47c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x363aa000, ftCreationTime.dwHighDateTime=0x1c3ee72, ftLastAccessTime.dwLowDateTime=0x6d462ff0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x363aa000, ftLastWriteTime.dwHighDateTime=0x1c3ee72, nFileSizeHigh=0x0, nFileSizeLow=0x5093, dwReserved0=0x0, dwReserved1=0x0, cFileName="THMBNAIL.PNG", cAlternateFileName="")) returned 1 [0034.111] FindNextFileW (in: hFindFile=0x381c80, lpFindFileData=0x31e47c | out: lpFindFileData=0x31e47c*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0034.111] FindClose (in: hFindFile=0x381c80 | out: hFindFile=0x381c80) returned 1 [0034.111] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\BLENDS", nBufferLength=0x105, lpBuffer=0x31e24c, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\BLENDS", lpFilePart=0x0) returned 0x3e [0034.111] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\BLENDS\\", nBufferLength=0x105, lpBuffer=0x31e220, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\BLENDS\\", lpFilePart=0x0) returned 0x3f [0034.111] FindFirstFileW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\BLENDS\\*", lpFindFileData=0x31e46c | out: lpFindFileData=0x31e46c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x51a15810, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x6d462ff0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x6d462ff0, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x381c80 [0034.111] FindNextFileW (in: hFindFile=0x381c80, lpFindFileData=0x31e47c | out: lpFindFileData=0x31e47c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x51a15810, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x6d462ff0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x6d462ff0, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0034.111] FindNextFileW (in: hFindFile=0x381c80, lpFindFileData=0x31e47c | out: lpFindFileData=0x31e47c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe32f2700, ftCreationTime.dwHighDateTime=0x1cab7f1, ftLastAccessTime.dwLowDateTime=0x51a15810, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xe32f2700, ftLastWriteTime.dwHighDateTime=0x1cab7f1, nFileSizeHigh=0x0, nFileSizeLow=0x10db7, dwReserved0=0x0, dwReserved1=0x0, cFileName="BLENDS.ELM", cAlternateFileName="")) returned 1 [0034.112] FindNextFileW (in: hFindFile=0x381c80, lpFindFileData=0x31e47c | out: lpFindFileData=0x31e47c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xcb59ad00, ftCreationTime.dwHighDateTime=0x1c4d794, ftLastAccessTime.dwLowDateTime=0x5f729350, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xcb59ad00, ftLastWriteTime.dwHighDateTime=0x1c4d794, nFileSizeHigh=0x0, nFileSizeLow=0x216, dwReserved0=0x0, dwReserved1=0x0, cFileName="BLENDS.INF", cAlternateFileName="")) returned 1 [0034.112] FindNextFileW (in: hFindFile=0x381c80, lpFindFileData=0x31e47c | out: lpFindFileData=0x31e47c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x363aa000, ftCreationTime.dwHighDateTime=0x1c3ee72, ftLastAccessTime.dwLowDateTime=0x5a6d2cd0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x363aa000, ftLastWriteTime.dwHighDateTime=0x1c3ee72, nFileSizeHigh=0x0, nFileSizeLow=0x885, dwReserved0=0x0, dwReserved1=0x0, cFileName="PREVIEW.GIF", cAlternateFileName="")) returned 1 [0034.112] FindNextFileW (in: hFindFile=0x381c80, lpFindFileData=0x31e47c | out: lpFindFileData=0x31e47c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x363aa000, ftCreationTime.dwHighDateTime=0x1c3ee72, ftLastAccessTime.dwLowDateTime=0x6d462ff0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x363aa000, ftLastWriteTime.dwHighDateTime=0x1c3ee72, nFileSizeHigh=0x0, nFileSizeLow=0x5093, dwReserved0=0x0, dwReserved1=0x0, cFileName="THMBNAIL.PNG", cAlternateFileName="")) returned 1 [0034.112] FindNextFileW (in: hFindFile=0x381c80, lpFindFileData=0x31e47c | out: lpFindFileData=0x31e47c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x363aa000, ftCreationTime.dwHighDateTime=0x1c3ee72, ftLastAccessTime.dwLowDateTime=0x6d462ff0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x363aa000, ftLastWriteTime.dwHighDateTime=0x1c3ee72, nFileSizeHigh=0x0, nFileSizeLow=0x5093, dwReserved0=0x0, dwReserved1=0x0, cFileName="THMBNAIL.PNG", cAlternateFileName="")) returned 0 [0034.112] FindClose (in: hFindFile=0x381c80 | out: hFindFile=0x381c80) returned 1 [0034.112] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\BLUECALM", nBufferLength=0x105, lpBuffer=0x31e24c, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\BLUECALM", lpFilePart=0x0) returned 0x40 [0034.112] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\BLUECALM\\", nBufferLength=0x105, lpBuffer=0x31e220, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\BLUECALM\\", lpFilePart=0x0) returned 0x41 [0034.112] FindFirstFileW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\BLUECALM\\*", lpFindFileData=0x31e46c | out: lpFindFileData=0x31e46c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x51a15810, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x6d462ff0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x6d462ff0, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x381c80 [0034.113] FindNextFileW (in: hFindFile=0x381c80, lpFindFileData=0x31e47c | out: lpFindFileData=0x31e47c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x51a15810, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x6d462ff0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x6d462ff0, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0034.113] FindNextFileW (in: hFindFile=0x381c80, lpFindFileData=0x31e47c | out: lpFindFileData=0x31e47c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe6c2ae00, ftCreationTime.dwHighDateTime=0x1cab7f1, ftLastAccessTime.dwLowDateTime=0x5f775610, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xe6c2ae00, ftLastWriteTime.dwHighDateTime=0x1cab7f1, nFileSizeHigh=0x0, nFileSizeLow=0xc2ba, dwReserved0=0x0, dwReserved1=0x0, cFileName="BLUECALM.ELM", cAlternateFileName="")) returned 1 [0034.113] FindNextFileW (in: hFindFile=0x381c80, lpFindFileData=0x31e47c | out: lpFindFileData=0x31e47c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x363aa000, ftCreationTime.dwHighDateTime=0x1c3ee72, ftLastAccessTime.dwLowDateTime=0x51a15810, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x363aa000, ftLastWriteTime.dwHighDateTime=0x1c3ee72, nFileSizeHigh=0x0, nFileSizeLow=0x227, dwReserved0=0x0, dwReserved1=0x0, cFileName="BLUECALM.INF", cAlternateFileName="")) returned 1 [0034.113] FindNextFileW (in: hFindFile=0x381c80, lpFindFileData=0x31e47c | out: lpFindFileData=0x31e47c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x363aa000, ftCreationTime.dwHighDateTime=0x1c3ee72, ftLastAccessTime.dwLowDateTime=0x5a6d2cd0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x363aa000, ftLastWriteTime.dwHighDateTime=0x1c3ee72, nFileSizeHigh=0x0, nFileSizeLow=0x618, dwReserved0=0x0, dwReserved1=0x0, cFileName="PREVIEW.GIF", cAlternateFileName="")) returned 1 [0034.113] FindNextFileW (in: hFindFile=0x381c80, lpFindFileData=0x31e47c | out: lpFindFileData=0x31e47c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x363aa000, ftCreationTime.dwHighDateTime=0x1c3ee72, ftLastAccessTime.dwLowDateTime=0x6d462ff0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x363aa000, ftLastWriteTime.dwHighDateTime=0x1c3ee72, nFileSizeHigh=0x0, nFileSizeLow=0x80f1, dwReserved0=0x0, dwReserved1=0x0, cFileName="THMBNAIL.PNG", cAlternateFileName="")) returned 1 [0034.113] FindNextFileW (in: hFindFile=0x381c80, lpFindFileData=0x31e47c | out: lpFindFileData=0x31e47c*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0034.113] FindClose (in: hFindFile=0x381c80 | out: hFindFile=0x381c80) returned 1 [0034.113] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\BLUECALM", nBufferLength=0x105, lpBuffer=0x31e24c, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\BLUECALM", lpFilePart=0x0) returned 0x40 [0034.113] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\BLUECALM\\", nBufferLength=0x105, lpBuffer=0x31e220, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\BLUECALM\\", lpFilePart=0x0) returned 0x41 [0034.113] FindFirstFileW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\BLUECALM\\*", lpFindFileData=0x31e46c | out: lpFindFileData=0x31e46c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x51a15810, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x6d462ff0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x6d462ff0, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x381c80 [0034.113] FindNextFileW (in: hFindFile=0x381c80, lpFindFileData=0x31e47c | out: lpFindFileData=0x31e47c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x51a15810, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x6d462ff0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x6d462ff0, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0034.114] FindNextFileW (in: hFindFile=0x381c80, lpFindFileData=0x31e47c | out: lpFindFileData=0x31e47c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe6c2ae00, ftCreationTime.dwHighDateTime=0x1cab7f1, ftLastAccessTime.dwLowDateTime=0x5f775610, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xe6c2ae00, ftLastWriteTime.dwHighDateTime=0x1cab7f1, nFileSizeHigh=0x0, nFileSizeLow=0xc2ba, dwReserved0=0x0, dwReserved1=0x0, cFileName="BLUECALM.ELM", cAlternateFileName="")) returned 1 [0034.114] FindNextFileW (in: hFindFile=0x381c80, lpFindFileData=0x31e47c | out: lpFindFileData=0x31e47c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x363aa000, ftCreationTime.dwHighDateTime=0x1c3ee72, ftLastAccessTime.dwLowDateTime=0x51a15810, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x363aa000, ftLastWriteTime.dwHighDateTime=0x1c3ee72, nFileSizeHigh=0x0, nFileSizeLow=0x227, dwReserved0=0x0, dwReserved1=0x0, cFileName="BLUECALM.INF", cAlternateFileName="")) returned 1 [0034.114] FindNextFileW (in: hFindFile=0x381c80, lpFindFileData=0x31e47c | out: lpFindFileData=0x31e47c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x363aa000, ftCreationTime.dwHighDateTime=0x1c3ee72, ftLastAccessTime.dwLowDateTime=0x5a6d2cd0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x363aa000, ftLastWriteTime.dwHighDateTime=0x1c3ee72, nFileSizeHigh=0x0, nFileSizeLow=0x618, dwReserved0=0x0, dwReserved1=0x0, cFileName="PREVIEW.GIF", cAlternateFileName="")) returned 1 [0034.114] FindNextFileW (in: hFindFile=0x381c80, lpFindFileData=0x31e47c | out: lpFindFileData=0x31e47c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x363aa000, ftCreationTime.dwHighDateTime=0x1c3ee72, ftLastAccessTime.dwLowDateTime=0x6d462ff0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x363aa000, ftLastWriteTime.dwHighDateTime=0x1c3ee72, nFileSizeHigh=0x0, nFileSizeLow=0x80f1, dwReserved0=0x0, dwReserved1=0x0, cFileName="THMBNAIL.PNG", cAlternateFileName="")) returned 1 [0034.114] FindNextFileW (in: hFindFile=0x381c80, lpFindFileData=0x31e47c | out: lpFindFileData=0x31e47c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x363aa000, ftCreationTime.dwHighDateTime=0x1c3ee72, ftLastAccessTime.dwLowDateTime=0x6d462ff0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x363aa000, ftLastWriteTime.dwHighDateTime=0x1c3ee72, nFileSizeHigh=0x0, nFileSizeLow=0x80f1, dwReserved0=0x0, dwReserved1=0x0, cFileName="THMBNAIL.PNG", cAlternateFileName="")) returned 0 [0034.114] FindClose (in: hFindFile=0x381c80 | out: hFindFile=0x381c80) returned 1 [0034.114] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\BLUEPRNT", nBufferLength=0x105, lpBuffer=0x31e24c, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\BLUEPRNT", lpFilePart=0x0) returned 0x40 [0034.114] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\BLUEPRNT\\", nBufferLength=0x105, lpBuffer=0x31e220, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\BLUEPRNT\\", lpFilePart=0x0) returned 0x41 [0034.114] FindFirstFileW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\BLUEPRNT\\*", lpFindFileData=0x31e46c | out: lpFindFileData=0x31e46c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x51a15810, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x6d05ead0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x6d05ead0, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x381c80 [0034.115] FindNextFileW (in: hFindFile=0x381c80, lpFindFileData=0x31e47c | out: lpFindFileData=0x31e47c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x51a15810, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x6d05ead0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x6d05ead0, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0034.115] FindNextFileW (in: hFindFile=0x381c80, lpFindFileData=0x31e47c | out: lpFindFileData=0x31e47c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe7f3db00, ftCreationTime.dwHighDateTime=0x1cab7f1, ftLastAccessTime.dwLowDateTime=0x51a15810, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xe7f3db00, ftLastWriteTime.dwHighDateTime=0x1cab7f1, nFileSizeHigh=0x0, nFileSizeLow=0xda86, dwReserved0=0x0, dwReserved1=0x0, cFileName="BLUEPRNT.ELM", cAlternateFileName="")) returned 1 [0034.115] FindNextFileW (in: hFindFile=0x381c80, lpFindFileData=0x31e47c | out: lpFindFileData=0x31e47c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x363aa000, ftCreationTime.dwHighDateTime=0x1c3ee72, ftLastAccessTime.dwLowDateTime=0x5fbc5df0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x363aa000, ftLastWriteTime.dwHighDateTime=0x1c3ee72, nFileSizeHigh=0x0, nFileSizeLow=0x225, dwReserved0=0x0, dwReserved1=0x0, cFileName="BLUEPRNT.INF", cAlternateFileName="")) returned 1 [0034.116] FindNextFileW (in: hFindFile=0x381c80, lpFindFileData=0x31e47c | out: lpFindFileData=0x31e47c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x363aa000, ftCreationTime.dwHighDateTime=0x1c3ee72, ftLastAccessTime.dwLowDateTime=0x6d05ead0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x363aa000, ftLastWriteTime.dwHighDateTime=0x1c3ee72, nFileSizeHigh=0x0, nFileSizeLow=0x785, dwReserved0=0x0, dwReserved1=0x0, cFileName="PREVIEW.GIF", cAlternateFileName="")) returned 1 [0034.116] FindNextFileW (in: hFindFile=0x381c80, lpFindFileData=0x31e47c | out: lpFindFileData=0x31e47c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x363aa000, ftCreationTime.dwHighDateTime=0x1c3ee72, ftLastAccessTime.dwLowDateTime=0x5ad12690, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x363aa000, ftLastWriteTime.dwHighDateTime=0x1c3ee72, nFileSizeHigh=0x0, nFileSizeLow=0x6b0f, dwReserved0=0x0, dwReserved1=0x0, cFileName="THMBNAIL.PNG", cAlternateFileName="")) returned 1 [0034.116] FindNextFileW (in: hFindFile=0x381c80, lpFindFileData=0x31e47c | out: lpFindFileData=0x31e47c*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0034.116] FindClose (in: hFindFile=0x381c80 | out: hFindFile=0x381c80) returned 1 [0034.116] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\BLUEPRNT", nBufferLength=0x105, lpBuffer=0x31e24c, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\BLUEPRNT", lpFilePart=0x0) returned 0x40 [0034.116] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\BLUEPRNT\\", nBufferLength=0x105, lpBuffer=0x31e220, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\BLUEPRNT\\", lpFilePart=0x0) returned 0x41 [0034.116] FindFirstFileW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\BLUEPRNT\\*", lpFindFileData=0x31e46c | out: lpFindFileData=0x31e46c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x51a15810, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x6d05ead0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x6d05ead0, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x381c80 [0034.116] FindNextFileW (in: hFindFile=0x381c80, lpFindFileData=0x31e47c | out: lpFindFileData=0x31e47c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x51a15810, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x6d05ead0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x6d05ead0, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0034.116] FindNextFileW (in: hFindFile=0x381c80, lpFindFileData=0x31e47c | out: lpFindFileData=0x31e47c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe7f3db00, ftCreationTime.dwHighDateTime=0x1cab7f1, ftLastAccessTime.dwLowDateTime=0x51a15810, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xe7f3db00, ftLastWriteTime.dwHighDateTime=0x1cab7f1, nFileSizeHigh=0x0, nFileSizeLow=0xda86, dwReserved0=0x0, dwReserved1=0x0, cFileName="BLUEPRNT.ELM", cAlternateFileName="")) returned 1 [0034.116] FindNextFileW (in: hFindFile=0x381c80, lpFindFileData=0x31e47c | out: lpFindFileData=0x31e47c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x363aa000, ftCreationTime.dwHighDateTime=0x1c3ee72, ftLastAccessTime.dwLowDateTime=0x5fbc5df0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x363aa000, ftLastWriteTime.dwHighDateTime=0x1c3ee72, nFileSizeHigh=0x0, nFileSizeLow=0x225, dwReserved0=0x0, dwReserved1=0x0, cFileName="BLUEPRNT.INF", cAlternateFileName="")) returned 1 [0034.116] FindNextFileW (in: hFindFile=0x381c80, lpFindFileData=0x31e47c | out: lpFindFileData=0x31e47c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x363aa000, ftCreationTime.dwHighDateTime=0x1c3ee72, ftLastAccessTime.dwLowDateTime=0x6d05ead0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x363aa000, ftLastWriteTime.dwHighDateTime=0x1c3ee72, nFileSizeHigh=0x0, nFileSizeLow=0x785, dwReserved0=0x0, dwReserved1=0x0, cFileName="PREVIEW.GIF", cAlternateFileName="")) returned 1 [0034.117] FindNextFileW (in: hFindFile=0x381c80, lpFindFileData=0x31e47c | out: lpFindFileData=0x31e47c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x363aa000, ftCreationTime.dwHighDateTime=0x1c3ee72, ftLastAccessTime.dwLowDateTime=0x5ad12690, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x363aa000, ftLastWriteTime.dwHighDateTime=0x1c3ee72, nFileSizeHigh=0x0, nFileSizeLow=0x6b0f, dwReserved0=0x0, dwReserved1=0x0, cFileName="THMBNAIL.PNG", cAlternateFileName="")) returned 1 [0034.117] FindNextFileW (in: hFindFile=0x381c80, lpFindFileData=0x31e47c | out: lpFindFileData=0x31e47c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x363aa000, ftCreationTime.dwHighDateTime=0x1c3ee72, ftLastAccessTime.dwLowDateTime=0x5ad12690, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x363aa000, ftLastWriteTime.dwHighDateTime=0x1c3ee72, nFileSizeHigh=0x0, nFileSizeLow=0x6b0f, dwReserved0=0x0, dwReserved1=0x0, cFileName="THMBNAIL.PNG", cAlternateFileName="")) returned 0 [0034.117] FindClose (in: hFindFile=0x381c80 | out: hFindFile=0x381c80) returned 1 [0034.117] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\BOLDSTRI", nBufferLength=0x105, lpBuffer=0x31e24c, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\BOLDSTRI", lpFilePart=0x0) returned 0x40 [0034.117] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\BOLDSTRI\\", nBufferLength=0x105, lpBuffer=0x31e220, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\BOLDSTRI\\", lpFilePart=0x0) returned 0x41 [0034.117] FindFirstFileW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\BOLDSTRI\\*", lpFindFileData=0x31e46c | out: lpFindFileData=0x31e46c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x51a15810, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x6d462ff0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x6d462ff0, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x381c80 [0034.118] FindNextFileW (in: hFindFile=0x381c80, lpFindFileData=0x31e47c | out: lpFindFileData=0x31e47c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x51a15810, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x6d462ff0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x6d462ff0, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0034.118] FindNextFileW (in: hFindFile=0x381c80, lpFindFileData=0x31e47c | out: lpFindFileData=0x31e47c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe9250800, ftCreationTime.dwHighDateTime=0x1cab7f1, ftLastAccessTime.dwLowDateTime=0x51a15810, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xe9250800, ftLastWriteTime.dwHighDateTime=0x1cab7f1, nFileSizeHigh=0x0, nFileSizeLow=0xeafa, dwReserved0=0x0, dwReserved1=0x0, cFileName="BOLDSTRI.ELM", cAlternateFileName="")) returned 1 [0034.118] FindNextFileW (in: hFindFile=0x381c80, lpFindFileData=0x31e47c | out: lpFindFileData=0x31e47c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x363aa000, ftCreationTime.dwHighDateTime=0x1c3ee72, ftLastAccessTime.dwLowDateTime=0x51a15810, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x363aa000, ftLastWriteTime.dwHighDateTime=0x1c3ee72, nFileSizeHigh=0x0, nFileSizeLow=0x254, dwReserved0=0x0, dwReserved1=0x0, cFileName="BOLDSTRI.INF", cAlternateFileName="")) returned 1 [0034.118] FindNextFileW (in: hFindFile=0x381c80, lpFindFileData=0x31e47c | out: lpFindFileData=0x31e47c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x363aa000, ftCreationTime.dwHighDateTime=0x1c3ee72, ftLastAccessTime.dwLowDateTime=0x6d05ead0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x363aa000, ftLastWriteTime.dwHighDateTime=0x1c3ee72, nFileSizeHigh=0x0, nFileSizeLow=0xd97, dwReserved0=0x0, dwReserved1=0x0, cFileName="PREVIEW.GIF", cAlternateFileName="")) returned 1 [0034.118] FindNextFileW (in: hFindFile=0x381c80, lpFindFileData=0x31e47c | out: lpFindFileData=0x31e47c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x363aa000, ftCreationTime.dwHighDateTime=0x1c3ee72, ftLastAccessTime.dwLowDateTime=0x6d462ff0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x363aa000, ftLastWriteTime.dwHighDateTime=0x1c3ee72, nFileSizeHigh=0x0, nFileSizeLow=0x7c5d, dwReserved0=0x0, dwReserved1=0x0, cFileName="THMBNAIL.PNG", cAlternateFileName="")) returned 1 [0034.118] FindNextFileW (in: hFindFile=0x381c80, lpFindFileData=0x31e47c | out: lpFindFileData=0x31e47c*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0034.118] FindClose (in: hFindFile=0x381c80 | out: hFindFile=0x381c80) returned 1 [0034.119] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\BOLDSTRI", nBufferLength=0x105, lpBuffer=0x31e24c, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\BOLDSTRI", lpFilePart=0x0) returned 0x40 [0034.119] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\BOLDSTRI\\", nBufferLength=0x105, lpBuffer=0x31e220, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\BOLDSTRI\\", lpFilePart=0x0) returned 0x41 [0034.119] FindFirstFileW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\BOLDSTRI\\*", lpFindFileData=0x31e46c | out: lpFindFileData=0x31e46c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x51a15810, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x6d462ff0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x6d462ff0, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x381c80 [0034.119] FindNextFileW (in: hFindFile=0x381c80, lpFindFileData=0x31e47c | out: lpFindFileData=0x31e47c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x51a15810, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x6d462ff0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x6d462ff0, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0034.119] FindNextFileW (in: hFindFile=0x381c80, lpFindFileData=0x31e47c | out: lpFindFileData=0x31e47c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe9250800, ftCreationTime.dwHighDateTime=0x1cab7f1, ftLastAccessTime.dwLowDateTime=0x51a15810, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xe9250800, ftLastWriteTime.dwHighDateTime=0x1cab7f1, nFileSizeHigh=0x0, nFileSizeLow=0xeafa, dwReserved0=0x0, dwReserved1=0x0, cFileName="BOLDSTRI.ELM", cAlternateFileName="")) returned 1 [0034.119] FindNextFileW (in: hFindFile=0x381c80, lpFindFileData=0x31e47c | out: lpFindFileData=0x31e47c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x363aa000, ftCreationTime.dwHighDateTime=0x1c3ee72, ftLastAccessTime.dwLowDateTime=0x51a15810, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x363aa000, ftLastWriteTime.dwHighDateTime=0x1c3ee72, nFileSizeHigh=0x0, nFileSizeLow=0x254, dwReserved0=0x0, dwReserved1=0x0, cFileName="BOLDSTRI.INF", cAlternateFileName="")) returned 1 [0034.119] FindNextFileW (in: hFindFile=0x381c80, lpFindFileData=0x31e47c | out: lpFindFileData=0x31e47c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x363aa000, ftCreationTime.dwHighDateTime=0x1c3ee72, ftLastAccessTime.dwLowDateTime=0x6d05ead0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x363aa000, ftLastWriteTime.dwHighDateTime=0x1c3ee72, nFileSizeHigh=0x0, nFileSizeLow=0xd97, dwReserved0=0x0, dwReserved1=0x0, cFileName="PREVIEW.GIF", cAlternateFileName="")) returned 1 [0034.119] FindNextFileW (in: hFindFile=0x381c80, lpFindFileData=0x31e47c | out: lpFindFileData=0x31e47c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x363aa000, ftCreationTime.dwHighDateTime=0x1c3ee72, ftLastAccessTime.dwLowDateTime=0x6d462ff0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x363aa000, ftLastWriteTime.dwHighDateTime=0x1c3ee72, nFileSizeHigh=0x0, nFileSizeLow=0x7c5d, dwReserved0=0x0, dwReserved1=0x0, cFileName="THMBNAIL.PNG", cAlternateFileName="")) returned 1 [0034.119] FindNextFileW (in: hFindFile=0x381c80, lpFindFileData=0x31e47c | out: lpFindFileData=0x31e47c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x363aa000, ftCreationTime.dwHighDateTime=0x1c3ee72, ftLastAccessTime.dwLowDateTime=0x6d462ff0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x363aa000, ftLastWriteTime.dwHighDateTime=0x1c3ee72, nFileSizeHigh=0x0, nFileSizeLow=0x7c5d, dwReserved0=0x0, dwReserved1=0x0, cFileName="THMBNAIL.PNG", cAlternateFileName="")) returned 0 [0034.119] FindClose (in: hFindFile=0x381c80 | out: hFindFile=0x381c80) returned 1 [0034.120] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\BREEZE", nBufferLength=0x105, lpBuffer=0x31e24c, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\BREEZE", lpFilePart=0x0) returned 0x3e [0034.120] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\BREEZE\\", nBufferLength=0x105, lpBuffer=0x31e220, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\BREEZE\\", lpFilePart=0x0) returned 0x3f [0034.120] FindFirstFileW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\BREEZE\\*", lpFindFileData=0x31e46c | out: lpFindFileData=0x31e46c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x51a61ad0, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x6d462ff0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x6d462ff0, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x381c80 [0034.120] FindNextFileW (in: hFindFile=0x381c80, lpFindFileData=0x31e47c | out: lpFindFileData=0x31e47c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x51a61ad0, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x6d462ff0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x6d462ff0, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0034.121] FindNextFileW (in: hFindFile=0x381c80, lpFindFileData=0x31e47c | out: lpFindFileData=0x31e47c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xea563500, ftCreationTime.dwHighDateTime=0x1cab7f1, ftLastAccessTime.dwLowDateTime=0x51a61ad0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xea563500, ftLastWriteTime.dwHighDateTime=0x1cab7f1, nFileSizeHigh=0x0, nFileSizeLow=0x1a537, dwReserved0=0x0, dwReserved1=0x0, cFileName="BREEZE.ELM", cAlternateFileName="")) returned 1 [0034.121] FindNextFileW (in: hFindFile=0x381c80, lpFindFileData=0x31e47c | out: lpFindFileData=0x31e47c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x363aa000, ftCreationTime.dwHighDateTime=0x1c3ee72, ftLastAccessTime.dwLowDateTime=0x6003c730, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x363aa000, ftLastWriteTime.dwHighDateTime=0x1c3ee72, nFileSizeHigh=0x0, nFileSizeLow=0x1c2, dwReserved0=0x0, dwReserved1=0x0, cFileName="BREEZE.INF", cAlternateFileName="")) returned 1 [0034.121] FindNextFileW (in: hFindFile=0x381c80, lpFindFileData=0x31e47c | out: lpFindFileData=0x31e47c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x363aa000, ftCreationTime.dwHighDateTime=0x1c3ee72, ftLastAccessTime.dwLowDateTime=0x5a6f8e30, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x363aa000, ftLastWriteTime.dwHighDateTime=0x1c3ee72, nFileSizeHigh=0x0, nFileSizeLow=0xaa2, dwReserved0=0x0, dwReserved1=0x0, cFileName="PREVIEW.GIF", cAlternateFileName="")) returned 1 [0034.121] FindNextFileW (in: hFindFile=0x381c80, lpFindFileData=0x31e47c | out: lpFindFileData=0x31e47c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x363aa000, ftCreationTime.dwHighDateTime=0x1c3ee72, ftLastAccessTime.dwLowDateTime=0x6d462ff0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x363aa000, ftLastWriteTime.dwHighDateTime=0x1c3ee72, nFileSizeHigh=0x0, nFileSizeLow=0xa90c, dwReserved0=0x0, dwReserved1=0x0, cFileName="THMBNAIL.PNG", cAlternateFileName="")) returned 1 [0034.121] FindNextFileW (in: hFindFile=0x381c80, lpFindFileData=0x31e47c | out: lpFindFileData=0x31e47c*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0034.121] FindClose (in: hFindFile=0x381c80 | out: hFindFile=0x381c80) returned 1 [0034.121] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\BREEZE", nBufferLength=0x105, lpBuffer=0x31e24c, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\BREEZE", lpFilePart=0x0) returned 0x3e [0034.121] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\BREEZE\\", nBufferLength=0x105, lpBuffer=0x31e220, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\BREEZE\\", lpFilePart=0x0) returned 0x3f [0034.121] FindFirstFileW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\BREEZE\\*", lpFindFileData=0x31e46c | out: lpFindFileData=0x31e46c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x51a61ad0, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x6d462ff0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x6d462ff0, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x381c80 [0034.121] FindNextFileW (in: hFindFile=0x381c80, lpFindFileData=0x31e47c | out: lpFindFileData=0x31e47c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x51a61ad0, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x6d462ff0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x6d462ff0, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0034.121] FindNextFileW (in: hFindFile=0x381c80, lpFindFileData=0x31e47c | out: lpFindFileData=0x31e47c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xea563500, ftCreationTime.dwHighDateTime=0x1cab7f1, ftLastAccessTime.dwLowDateTime=0x51a61ad0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xea563500, ftLastWriteTime.dwHighDateTime=0x1cab7f1, nFileSizeHigh=0x0, nFileSizeLow=0x1a537, dwReserved0=0x0, dwReserved1=0x0, cFileName="BREEZE.ELM", cAlternateFileName="")) returned 1 [0034.122] FindNextFileW (in: hFindFile=0x381c80, lpFindFileData=0x31e47c | out: lpFindFileData=0x31e47c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x363aa000, ftCreationTime.dwHighDateTime=0x1c3ee72, ftLastAccessTime.dwLowDateTime=0x6003c730, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x363aa000, ftLastWriteTime.dwHighDateTime=0x1c3ee72, nFileSizeHigh=0x0, nFileSizeLow=0x1c2, dwReserved0=0x0, dwReserved1=0x0, cFileName="BREEZE.INF", cAlternateFileName="")) returned 1 [0034.122] FindNextFileW (in: hFindFile=0x381c80, lpFindFileData=0x31e47c | out: lpFindFileData=0x31e47c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x363aa000, ftCreationTime.dwHighDateTime=0x1c3ee72, ftLastAccessTime.dwLowDateTime=0x5a6f8e30, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x363aa000, ftLastWriteTime.dwHighDateTime=0x1c3ee72, nFileSizeHigh=0x0, nFileSizeLow=0xaa2, dwReserved0=0x0, dwReserved1=0x0, cFileName="PREVIEW.GIF", cAlternateFileName="")) returned 1 [0034.122] FindNextFileW (in: hFindFile=0x381c80, lpFindFileData=0x31e47c | out: lpFindFileData=0x31e47c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x363aa000, ftCreationTime.dwHighDateTime=0x1c3ee72, ftLastAccessTime.dwLowDateTime=0x6d462ff0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x363aa000, ftLastWriteTime.dwHighDateTime=0x1c3ee72, nFileSizeHigh=0x0, nFileSizeLow=0xa90c, dwReserved0=0x0, dwReserved1=0x0, cFileName="THMBNAIL.PNG", cAlternateFileName="")) returned 1 [0034.122] FindNextFileW (in: hFindFile=0x381c80, lpFindFileData=0x31e47c | out: lpFindFileData=0x31e47c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x363aa000, ftCreationTime.dwHighDateTime=0x1c3ee72, ftLastAccessTime.dwLowDateTime=0x6d462ff0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x363aa000, ftLastWriteTime.dwHighDateTime=0x1c3ee72, nFileSizeHigh=0x0, nFileSizeLow=0xa90c, dwReserved0=0x0, dwReserved1=0x0, cFileName="THMBNAIL.PNG", cAlternateFileName="")) returned 0 [0034.122] FindClose (in: hFindFile=0x381c80 | out: hFindFile=0x381c80) returned 1 [0034.122] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\CANYON", nBufferLength=0x105, lpBuffer=0x31e24c, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\CANYON", lpFilePart=0x0) returned 0x3e [0034.122] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\CANYON\\", nBufferLength=0x105, lpBuffer=0x31e220, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\CANYON\\", lpFilePart=0x0) returned 0x3f [0034.122] FindFirstFileW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\CANYON\\*", lpFindFileData=0x31e46c | out: lpFindFileData=0x31e46c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x51c2ab50, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x6d462ff0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x6d462ff0, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x381c80 [0034.123] FindNextFileW (in: hFindFile=0x381c80, lpFindFileData=0x31e47c | out: lpFindFileData=0x31e47c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x51c2ab50, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x6d462ff0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x6d462ff0, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0034.123] FindNextFileW (in: hFindFile=0x381c80, lpFindFileData=0x31e47c | out: lpFindFileData=0x31e47c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xeb876200, ftCreationTime.dwHighDateTime=0x1cab7f1, ftLastAccessTime.dwLowDateTime=0x51c2ab50, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xeb876200, ftLastWriteTime.dwHighDateTime=0x1cab7f1, nFileSizeHigh=0x0, nFileSizeLow=0xaec9, dwReserved0=0x0, dwReserved1=0x0, cFileName="CANYON.ELM", cAlternateFileName="")) returned 1 [0034.123] FindNextFileW (in: hFindFile=0x381c80, lpFindFileData=0x31e47c | out: lpFindFileData=0x31e47c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x363aa000, ftCreationTime.dwHighDateTime=0x1c3ee72, ftLastAccessTime.dwLowDateTime=0x603362b0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x363aa000, ftLastWriteTime.dwHighDateTime=0x1c3ee72, nFileSizeHigh=0x0, nFileSizeLow=0x1d1, dwReserved0=0x0, dwReserved1=0x0, cFileName="CANYON.INF", cAlternateFileName="")) returned 1 [0034.123] FindNextFileW (in: hFindFile=0x381c80, lpFindFileData=0x31e47c | out: lpFindFileData=0x31e47c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x363aa000, ftCreationTime.dwHighDateTime=0x1c3ee72, ftLastAccessTime.dwLowDateTime=0x5a6f8e30, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x363aa000, ftLastWriteTime.dwHighDateTime=0x1c3ee72, nFileSizeHigh=0x0, nFileSizeLow=0x3b1, dwReserved0=0x0, dwReserved1=0x0, cFileName="PREVIEW.GIF", cAlternateFileName="")) returned 1 [0034.123] FindNextFileW (in: hFindFile=0x381c80, lpFindFileData=0x31e47c | out: lpFindFileData=0x31e47c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x363aa000, ftCreationTime.dwHighDateTime=0x1c3ee72, ftLastAccessTime.dwLowDateTime=0x6d462ff0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x363aa000, ftLastWriteTime.dwHighDateTime=0x1c3ee72, nFileSizeHigh=0x0, nFileSizeLow=0x7f5f, dwReserved0=0x0, dwReserved1=0x0, cFileName="THMBNAIL.PNG", cAlternateFileName="")) returned 1 [0034.123] FindNextFileW (in: hFindFile=0x381c80, lpFindFileData=0x31e47c | out: lpFindFileData=0x31e47c*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0034.123] FindClose (in: hFindFile=0x381c80 | out: hFindFile=0x381c80) returned 1 [0034.124] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\CANYON", nBufferLength=0x105, lpBuffer=0x31e24c, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\CANYON", lpFilePart=0x0) returned 0x3e [0034.124] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\CANYON\\", nBufferLength=0x105, lpBuffer=0x31e220, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\CANYON\\", lpFilePart=0x0) returned 0x3f [0034.124] FindFirstFileW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\CANYON\\*", lpFindFileData=0x31e46c | out: lpFindFileData=0x31e46c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x51c2ab50, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x6d462ff0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x6d462ff0, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x381c80 [0034.124] FindNextFileW (in: hFindFile=0x381c80, lpFindFileData=0x31e47c | out: lpFindFileData=0x31e47c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x51c2ab50, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x6d462ff0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x6d462ff0, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0034.124] FindNextFileW (in: hFindFile=0x381c80, lpFindFileData=0x31e47c | out: lpFindFileData=0x31e47c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xeb876200, ftCreationTime.dwHighDateTime=0x1cab7f1, ftLastAccessTime.dwLowDateTime=0x51c2ab50, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xeb876200, ftLastWriteTime.dwHighDateTime=0x1cab7f1, nFileSizeHigh=0x0, nFileSizeLow=0xaec9, dwReserved0=0x0, dwReserved1=0x0, cFileName="CANYON.ELM", cAlternateFileName="")) returned 1 [0034.124] FindNextFileW (in: hFindFile=0x381c80, lpFindFileData=0x31e47c | out: lpFindFileData=0x31e47c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x363aa000, ftCreationTime.dwHighDateTime=0x1c3ee72, ftLastAccessTime.dwLowDateTime=0x603362b0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x363aa000, ftLastWriteTime.dwHighDateTime=0x1c3ee72, nFileSizeHigh=0x0, nFileSizeLow=0x1d1, dwReserved0=0x0, dwReserved1=0x0, cFileName="CANYON.INF", cAlternateFileName="")) returned 1 [0034.124] FindNextFileW (in: hFindFile=0x381c80, lpFindFileData=0x31e47c | out: lpFindFileData=0x31e47c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x363aa000, ftCreationTime.dwHighDateTime=0x1c3ee72, ftLastAccessTime.dwLowDateTime=0x5a6f8e30, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x363aa000, ftLastWriteTime.dwHighDateTime=0x1c3ee72, nFileSizeHigh=0x0, nFileSizeLow=0x3b1, dwReserved0=0x0, dwReserved1=0x0, cFileName="PREVIEW.GIF", cAlternateFileName="")) returned 1 [0034.124] FindNextFileW (in: hFindFile=0x381c80, lpFindFileData=0x31e47c | out: lpFindFileData=0x31e47c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x363aa000, ftCreationTime.dwHighDateTime=0x1c3ee72, ftLastAccessTime.dwLowDateTime=0x6d462ff0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x363aa000, ftLastWriteTime.dwHighDateTime=0x1c3ee72, nFileSizeHigh=0x0, nFileSizeLow=0x7f5f, dwReserved0=0x0, dwReserved1=0x0, cFileName="THMBNAIL.PNG", cAlternateFileName="")) returned 1 [0034.124] FindNextFileW (in: hFindFile=0x381c80, lpFindFileData=0x31e47c | out: lpFindFileData=0x31e47c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x363aa000, ftCreationTime.dwHighDateTime=0x1c3ee72, ftLastAccessTime.dwLowDateTime=0x6d462ff0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x363aa000, ftLastWriteTime.dwHighDateTime=0x1c3ee72, nFileSizeHigh=0x0, nFileSizeLow=0x7f5f, dwReserved0=0x0, dwReserved1=0x0, cFileName="THMBNAIL.PNG", cAlternateFileName="")) returned 0 [0034.124] FindClose (in: hFindFile=0x381c80 | out: hFindFile=0x381c80) returned 1 [0034.124] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\CAPSULES", nBufferLength=0x105, lpBuffer=0x31e24c, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\CAPSULES", lpFilePart=0x0) returned 0x40 [0034.125] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\CAPSULES\\", nBufferLength=0x105, lpBuffer=0x31e220, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\CAPSULES\\", lpFilePart=0x0) returned 0x41 [0034.125] FindFirstFileW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\CAPSULES\\*", lpFindFileData=0x31e46c | out: lpFindFileData=0x31e46c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x51c2ab50, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x6d05ead0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x6d05ead0, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x381c80 [0034.126] FindNextFileW (in: hFindFile=0x381c80, lpFindFileData=0x31e47c | out: lpFindFileData=0x31e47c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x51c2ab50, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x6d05ead0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x6d05ead0, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0034.126] FindNextFileW (in: hFindFile=0x381c80, lpFindFileData=0x31e47c | out: lpFindFileData=0x31e47c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xecb88f00, ftCreationTime.dwHighDateTime=0x1cab7f1, ftLastAccessTime.dwLowDateTime=0x603362b0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xecb88f00, ftLastWriteTime.dwHighDateTime=0x1cab7f1, nFileSizeHigh=0x0, nFileSizeLow=0xe1ba, dwReserved0=0x0, dwReserved1=0x0, cFileName="CAPSULES.ELM", cAlternateFileName="")) returned 1 [0034.126] FindNextFileW (in: hFindFile=0x381c80, lpFindFileData=0x31e47c | out: lpFindFileData=0x31e47c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf86a7300, ftCreationTime.dwHighDateTime=0x1c47827, ftLastAccessTime.dwLowDateTime=0x51c2ab50, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xf86a7300, ftLastWriteTime.dwHighDateTime=0x1c47827, nFileSizeHigh=0x0, nFileSizeLow=0x1f5, dwReserved0=0x0, dwReserved1=0x0, cFileName="CAPSULES.INF", cAlternateFileName="")) returned 1 [0034.126] FindNextFileW (in: hFindFile=0x381c80, lpFindFileData=0x31e47c | out: lpFindFileData=0x31e47c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x363aa000, ftCreationTime.dwHighDateTime=0x1c3ee72, ftLastAccessTime.dwLowDateTime=0x6d05ead0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x363aa000, ftLastWriteTime.dwHighDateTime=0x1c3ee72, nFileSizeHigh=0x0, nFileSizeLow=0x7fc, dwReserved0=0x0, dwReserved1=0x0, cFileName="PREVIEW.GIF", cAlternateFileName="")) returned 1 [0034.126] FindNextFileW (in: hFindFile=0x381c80, lpFindFileData=0x31e47c | out: lpFindFileData=0x31e47c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x363aa000, ftCreationTime.dwHighDateTime=0x1c3ee72, ftLastAccessTime.dwLowDateTime=0x5ad12690, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x363aa000, ftLastWriteTime.dwHighDateTime=0x1c3ee72, nFileSizeHigh=0x0, nFileSizeLow=0x74e5, dwReserved0=0x0, dwReserved1=0x0, cFileName="THMBNAIL.PNG", cAlternateFileName="")) returned 1 [0034.126] FindNextFileW (in: hFindFile=0x381c80, lpFindFileData=0x31e47c | out: lpFindFileData=0x31e47c*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0034.126] FindClose (in: hFindFile=0x381c80 | out: hFindFile=0x381c80) returned 1 [0034.126] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\CAPSULES", nBufferLength=0x105, lpBuffer=0x31e24c, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\CAPSULES", lpFilePart=0x0) returned 0x40 [0034.126] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\CAPSULES\\", nBufferLength=0x105, lpBuffer=0x31e220, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\CAPSULES\\", lpFilePart=0x0) returned 0x41 [0034.126] FindFirstFileW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\CAPSULES\\*", lpFindFileData=0x31e46c | out: lpFindFileData=0x31e46c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x51c2ab50, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x6d05ead0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x6d05ead0, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x381c80 [0034.126] FindNextFileW (in: hFindFile=0x381c80, lpFindFileData=0x31e47c | out: lpFindFileData=0x31e47c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x51c2ab50, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x6d05ead0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x6d05ead0, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0034.126] FindNextFileW (in: hFindFile=0x381c80, lpFindFileData=0x31e47c | out: lpFindFileData=0x31e47c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xecb88f00, ftCreationTime.dwHighDateTime=0x1cab7f1, ftLastAccessTime.dwLowDateTime=0x603362b0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xecb88f00, ftLastWriteTime.dwHighDateTime=0x1cab7f1, nFileSizeHigh=0x0, nFileSizeLow=0xe1ba, dwReserved0=0x0, dwReserved1=0x0, cFileName="CAPSULES.ELM", cAlternateFileName="")) returned 1 [0034.127] FindNextFileW (in: hFindFile=0x381c80, lpFindFileData=0x31e47c | out: lpFindFileData=0x31e47c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf86a7300, ftCreationTime.dwHighDateTime=0x1c47827, ftLastAccessTime.dwLowDateTime=0x51c2ab50, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xf86a7300, ftLastWriteTime.dwHighDateTime=0x1c47827, nFileSizeHigh=0x0, nFileSizeLow=0x1f5, dwReserved0=0x0, dwReserved1=0x0, cFileName="CAPSULES.INF", cAlternateFileName="")) returned 1 [0034.127] FindNextFileW (in: hFindFile=0x381c80, lpFindFileData=0x31e47c | out: lpFindFileData=0x31e47c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x363aa000, ftCreationTime.dwHighDateTime=0x1c3ee72, ftLastAccessTime.dwLowDateTime=0x6d05ead0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x363aa000, ftLastWriteTime.dwHighDateTime=0x1c3ee72, nFileSizeHigh=0x0, nFileSizeLow=0x7fc, dwReserved0=0x0, dwReserved1=0x0, cFileName="PREVIEW.GIF", cAlternateFileName="")) returned 1 [0034.127] FindNextFileW (in: hFindFile=0x381c80, lpFindFileData=0x31e47c | out: lpFindFileData=0x31e47c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x363aa000, ftCreationTime.dwHighDateTime=0x1c3ee72, ftLastAccessTime.dwLowDateTime=0x5ad12690, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x363aa000, ftLastWriteTime.dwHighDateTime=0x1c3ee72, nFileSizeHigh=0x0, nFileSizeLow=0x74e5, dwReserved0=0x0, dwReserved1=0x0, cFileName="THMBNAIL.PNG", cAlternateFileName="")) returned 1 [0034.127] FindNextFileW (in: hFindFile=0x381c80, lpFindFileData=0x31e47c | out: lpFindFileData=0x31e47c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x363aa000, ftCreationTime.dwHighDateTime=0x1c3ee72, ftLastAccessTime.dwLowDateTime=0x5ad12690, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x363aa000, ftLastWriteTime.dwHighDateTime=0x1c3ee72, nFileSizeHigh=0x0, nFileSizeLow=0x74e5, dwReserved0=0x0, dwReserved1=0x0, cFileName="THMBNAIL.PNG", cAlternateFileName="")) returned 0 [0034.127] FindClose (in: hFindFile=0x381c80 | out: hFindFile=0x381c80) returned 1 [0034.127] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\CASCADE", nBufferLength=0x105, lpBuffer=0x31e24c, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\CASCADE", lpFilePart=0x0) returned 0x3f [0034.127] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\CASCADE\\", nBufferLength=0x105, lpBuffer=0x31e220, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\CASCADE\\", lpFilePart=0x0) returned 0x40 [0034.127] FindFirstFileW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\CASCADE\\*", lpFindFileData=0x31e46c | out: lpFindFileData=0x31e46c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x51c50cb0, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x6d462ff0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x6d462ff0, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x381c80 [0034.128] FindNextFileW (in: hFindFile=0x381c80, lpFindFileData=0x31e47c | out: lpFindFileData=0x31e47c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x51c50cb0, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x6d462ff0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x6d462ff0, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0034.128] FindNextFileW (in: hFindFile=0x381c80, lpFindFileData=0x31e47c | out: lpFindFileData=0x31e47c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xede9bc00, ftCreationTime.dwHighDateTime=0x1cab7f1, ftLastAccessTime.dwLowDateTime=0x51c50cb0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xede9bc00, ftLastWriteTime.dwHighDateTime=0x1cab7f1, nFileSizeHigh=0x0, nFileSizeLow=0xba44, dwReserved0=0x0, dwReserved1=0x0, cFileName="CASCADE.ELM", cAlternateFileName="")) returned 1 [0034.128] FindNextFileW (in: hFindFile=0x381c80, lpFindFileData=0x31e47c | out: lpFindFileData=0x31e47c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x363aa000, ftCreationTime.dwHighDateTime=0x1c3ee72, ftLastAccessTime.dwLowDateTime=0x51c50cb0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x363aa000, ftLastWriteTime.dwHighDateTime=0x1c3ee72, nFileSizeHigh=0x0, nFileSizeLow=0x262, dwReserved0=0x0, dwReserved1=0x0, cFileName="CASCADE.INF", cAlternateFileName="")) returned 1 [0034.128] FindNextFileW (in: hFindFile=0x381c80, lpFindFileData=0x31e47c | out: lpFindFileData=0x31e47c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x363aa000, ftCreationTime.dwHighDateTime=0x1c3ee72, ftLastAccessTime.dwLowDateTime=0x6d05ead0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x363aa000, ftLastWriteTime.dwHighDateTime=0x1c3ee72, nFileSizeHigh=0x0, nFileSizeLow=0x553, dwReserved0=0x0, dwReserved1=0x0, cFileName="PREVIEW.GIF", cAlternateFileName="")) returned 1 [0034.128] FindNextFileW (in: hFindFile=0x381c80, lpFindFileData=0x31e47c | out: lpFindFileData=0x31e47c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x363aa000, ftCreationTime.dwHighDateTime=0x1c3ee72, ftLastAccessTime.dwLowDateTime=0x6d462ff0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x363aa000, ftLastWriteTime.dwHighDateTime=0x1c3ee72, nFileSizeHigh=0x0, nFileSizeLow=0x4f93, dwReserved0=0x0, dwReserved1=0x0, cFileName="THMBNAIL.PNG", cAlternateFileName="")) returned 1 [0034.128] FindNextFileW (in: hFindFile=0x381c80, lpFindFileData=0x31e47c | out: lpFindFileData=0x31e47c*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0034.128] FindClose (in: hFindFile=0x381c80 | out: hFindFile=0x381c80) returned 1 [0034.128] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\CASCADE", nBufferLength=0x105, lpBuffer=0x31e24c, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\CASCADE", lpFilePart=0x0) returned 0x3f [0034.128] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\CASCADE\\", nBufferLength=0x105, lpBuffer=0x31e220, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\CASCADE\\", lpFilePart=0x0) returned 0x40 [0034.128] FindFirstFileW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\CASCADE\\*", lpFindFileData=0x31e46c | out: lpFindFileData=0x31e46c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x51c50cb0, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x6d462ff0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x6d462ff0, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x381c80 [0034.128] FindNextFileW (in: hFindFile=0x381c80, lpFindFileData=0x31e47c | out: lpFindFileData=0x31e47c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x51c50cb0, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x6d462ff0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x6d462ff0, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0034.128] FindNextFileW (in: hFindFile=0x381c80, lpFindFileData=0x31e47c | out: lpFindFileData=0x31e47c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xede9bc00, ftCreationTime.dwHighDateTime=0x1cab7f1, ftLastAccessTime.dwLowDateTime=0x51c50cb0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xede9bc00, ftLastWriteTime.dwHighDateTime=0x1cab7f1, nFileSizeHigh=0x0, nFileSizeLow=0xba44, dwReserved0=0x0, dwReserved1=0x0, cFileName="CASCADE.ELM", cAlternateFileName="")) returned 1 [0034.128] FindNextFileW (in: hFindFile=0x381c80, lpFindFileData=0x31e47c | out: lpFindFileData=0x31e47c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x363aa000, ftCreationTime.dwHighDateTime=0x1c3ee72, ftLastAccessTime.dwLowDateTime=0x51c50cb0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x363aa000, ftLastWriteTime.dwHighDateTime=0x1c3ee72, nFileSizeHigh=0x0, nFileSizeLow=0x262, dwReserved0=0x0, dwReserved1=0x0, cFileName="CASCADE.INF", cAlternateFileName="")) returned 1 [0034.129] FindNextFileW (in: hFindFile=0x381c80, lpFindFileData=0x31e47c | out: lpFindFileData=0x31e47c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x363aa000, ftCreationTime.dwHighDateTime=0x1c3ee72, ftLastAccessTime.dwLowDateTime=0x6d05ead0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x363aa000, ftLastWriteTime.dwHighDateTime=0x1c3ee72, nFileSizeHigh=0x0, nFileSizeLow=0x553, dwReserved0=0x0, dwReserved1=0x0, cFileName="PREVIEW.GIF", cAlternateFileName="")) returned 1 [0034.129] FindNextFileW (in: hFindFile=0x381c80, lpFindFileData=0x31e47c | out: lpFindFileData=0x31e47c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x363aa000, ftCreationTime.dwHighDateTime=0x1c3ee72, ftLastAccessTime.dwLowDateTime=0x6d462ff0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x363aa000, ftLastWriteTime.dwHighDateTime=0x1c3ee72, nFileSizeHigh=0x0, nFileSizeLow=0x4f93, dwReserved0=0x0, dwReserved1=0x0, cFileName="THMBNAIL.PNG", cAlternateFileName="")) returned 1 [0034.129] FindNextFileW (in: hFindFile=0x381c80, lpFindFileData=0x31e47c | out: lpFindFileData=0x31e47c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x363aa000, ftCreationTime.dwHighDateTime=0x1c3ee72, ftLastAccessTime.dwLowDateTime=0x6d462ff0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x363aa000, ftLastWriteTime.dwHighDateTime=0x1c3ee72, nFileSizeHigh=0x0, nFileSizeLow=0x4f93, dwReserved0=0x0, dwReserved1=0x0, cFileName="THMBNAIL.PNG", cAlternateFileName="")) returned 0 [0034.129] FindClose (in: hFindFile=0x381c80 | out: hFindFile=0x381c80) returned 1 [0034.129] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\COMPASS", nBufferLength=0x105, lpBuffer=0x31e24c, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\COMPASS", lpFilePart=0x0) returned 0x3f [0034.129] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\COMPASS\\", nBufferLength=0x105, lpBuffer=0x31e220, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\COMPASS\\", lpFilePart=0x0) returned 0x40 [0034.129] FindFirstFileW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\COMPASS\\*", lpFindFileData=0x31e46c | out: lpFindFileData=0x31e46c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x51cc30d0, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x6d05ead0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x6d05ead0, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x381c80 [0034.130] FindNextFileW (in: hFindFile=0x381c80, lpFindFileData=0x31e47c | out: lpFindFileData=0x31e47c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x51cc30d0, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x6d05ead0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x6d05ead0, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0034.130] FindClose (in: hFindFile=0x381c80 | out: hFindFile=0x381c80) returned 1 [0034.130] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\COMPASS", nBufferLength=0x105, lpBuffer=0x31e24c, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\COMPASS", lpFilePart=0x0) returned 0x3f [0034.130] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\COMPASS\\", nBufferLength=0x105, lpBuffer=0x31e220, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\COMPASS\\", lpFilePart=0x0) returned 0x40 [0034.131] FindFirstFileW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\COMPASS\\*", lpFindFileData=0x31e46c | out: lpFindFileData=0x31e46c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x51cc30d0, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x6d05ead0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x6d05ead0, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x381c80 [0034.131] FindClose (in: hFindFile=0x381c80 | out: hFindFile=0x381c80) returned 1 [0034.131] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\CONCRETE", nBufferLength=0x105, lpBuffer=0x31e24c, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\CONCRETE", lpFilePart=0x0) returned 0x40 [0034.131] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\CONCRETE\\", nBufferLength=0x105, lpBuffer=0x31e220, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\CONCRETE\\", lpFilePart=0x0) returned 0x41 [0034.131] FindFirstFileW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\CONCRETE\\*", lpFindFileData=0x31e46c | out: lpFindFileData=0x31e46c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x51cc30d0, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x6d05ead0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x6d05ead0, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x381c80 [0034.131] FindClose (in: hFindFile=0x381c80 | out: hFindFile=0x381c80) returned 1 [0034.131] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\CONCRETE", nBufferLength=0x105, lpBuffer=0x31e24c, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\CONCRETE", lpFilePart=0x0) returned 0x40 [0034.131] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\CONCRETE\\", nBufferLength=0x105, lpBuffer=0x31e220, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\CONCRETE\\", lpFilePart=0x0) returned 0x41 [0034.131] FindFirstFileW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\CONCRETE\\*", lpFindFileData=0x31e46c | out: lpFindFileData=0x31e46c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x51cc30d0, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x6d05ead0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x6d05ead0, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x381c80 [0034.132] FindClose (in: hFindFile=0x381c80 | out: hFindFile=0x381c80) returned 1 [0034.132] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\DEEPBLUE", nBufferLength=0x105, lpBuffer=0x31e24c, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\DEEPBLUE", lpFilePart=0x0) returned 0x40 [0034.132] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\DEEPBLUE\\", nBufferLength=0x105, lpBuffer=0x31e220, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\DEEPBLUE\\", lpFilePart=0x0) returned 0x41 [0034.132] FindFirstFileW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\DEEPBLUE\\*", lpFindFileData=0x31e46c | out: lpFindFileData=0x31e46c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5a6f8e30, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x6073a7d0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x6073a7d0, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x381c80 [0034.133] FindClose (in: hFindFile=0x381c80 | out: hFindFile=0x381c80) returned 1 [0034.133] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\DEEPBLUE", nBufferLength=0x105, lpBuffer=0x31e24c, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\DEEPBLUE", lpFilePart=0x0) returned 0x40 [0034.133] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\DEEPBLUE\\", nBufferLength=0x105, lpBuffer=0x31e220, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\DEEPBLUE\\", lpFilePart=0x0) returned 0x41 [0034.133] FindFirstFileW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\DEEPBLUE\\*", lpFindFileData=0x31e46c | out: lpFindFileData=0x31e46c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5a6f8e30, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x6073a7d0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x6073a7d0, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x381c80 [0034.133] FindClose (in: hFindFile=0x381c80 | out: hFindFile=0x381c80) returned 1 [0034.133] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\ECHO", nBufferLength=0x105, lpBuffer=0x31e24c, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\ECHO", lpFilePart=0x0) returned 0x3c [0034.133] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\ECHO\\", nBufferLength=0x105, lpBuffer=0x31e220, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\ECHO\\", lpFilePart=0x0) returned 0x3d [0034.133] FindFirstFileW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\ECHO\\*", lpFindFileData=0x31e46c | out: lpFindFileData=0x31e46c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5a6f8e30, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x60891430, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x60891430, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x381c80 [0034.135] FindClose (in: hFindFile=0x381c80 | out: hFindFile=0x381c80) returned 1 [0034.135] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\ECHO", nBufferLength=0x105, lpBuffer=0x31e24c, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\ECHO", lpFilePart=0x0) returned 0x3c [0034.135] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\ECHO\\", nBufferLength=0x105, lpBuffer=0x31e220, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\ECHO\\", lpFilePart=0x0) returned 0x3d [0034.135] FindFirstFileW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\ECHO\\*", lpFindFileData=0x31e46c | out: lpFindFileData=0x31e46c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5a6f8e30, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x60891430, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x60891430, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x381c80 [0034.135] FindClose (in: hFindFile=0x381c80 | out: hFindFile=0x381c80) returned 1 [0034.135] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\ECLIPSE", nBufferLength=0x105, lpBuffer=0x31e24c, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\ECLIPSE", lpFilePart=0x0) returned 0x3f [0034.135] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\ECLIPSE\\", nBufferLength=0x105, lpBuffer=0x31e220, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\ECLIPSE\\", lpFilePart=0x0) returned 0x40 [0034.135] FindFirstFileW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\ECLIPSE\\*", lpFindFileData=0x31e46c | out: lpFindFileData=0x31e46c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x51e3fe90, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x6d05ead0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x6d05ead0, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x381c80 [0034.136] FindClose (in: hFindFile=0x381c80 | out: hFindFile=0x381c80) returned 1 [0034.136] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\ECLIPSE", nBufferLength=0x105, lpBuffer=0x31e24c, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\ECLIPSE", lpFilePart=0x0) returned 0x3f [0034.136] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\ECLIPSE\\", nBufferLength=0x105, lpBuffer=0x31e220, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\ECLIPSE\\", lpFilePart=0x0) returned 0x40 [0034.136] FindFirstFileW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\ECLIPSE\\*", lpFindFileData=0x31e46c | out: lpFindFileData=0x31e46c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x51e3fe90, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x6d05ead0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x6d05ead0, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x381c80 [0034.137] FindClose (in: hFindFile=0x381c80 | out: hFindFile=0x381c80) returned 1 [0034.137] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\EDGE", nBufferLength=0x105, lpBuffer=0x31e24c, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\EDGE", lpFilePart=0x0) returned 0x3c [0034.137] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\EDGE\\", nBufferLength=0x105, lpBuffer=0x31e220, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\EDGE\\", lpFilePart=0x0) returned 0x3d [0034.137] FindFirstFileW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\EDGE\\*", lpFindFileData=0x31e46c | out: lpFindFileData=0x31e46c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x51f70990, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x6d462ff0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x6d462ff0, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x381c80 [0034.138] FindClose (in: hFindFile=0x381c80 | out: hFindFile=0x381c80) returned 1 [0034.138] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\EDGE", nBufferLength=0x105, lpBuffer=0x31e24c, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\EDGE", lpFilePart=0x0) returned 0x3c [0034.138] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\EDGE\\", nBufferLength=0x105, lpBuffer=0x31e220, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\EDGE\\", lpFilePart=0x0) returned 0x3d [0034.138] FindFirstFileW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\EDGE\\*", lpFindFileData=0x31e46c | out: lpFindFileData=0x31e46c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x51f70990, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x6d462ff0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x6d462ff0, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x381c80 [0034.138] FindClose (in: hFindFile=0x381c80 | out: hFindFile=0x381c80) returned 1 [0034.138] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\EVRGREEN", nBufferLength=0x105, lpBuffer=0x31e24c, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\EVRGREEN", lpFilePart=0x0) returned 0x40 [0034.138] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\EVRGREEN\\", nBufferLength=0x105, lpBuffer=0x31e220, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\EVRGREEN\\", lpFilePart=0x0) returned 0x41 [0034.138] FindFirstFileW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\EVRGREEN\\*", lpFindFileData=0x31e46c | out: lpFindFileData=0x31e46c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x51fe2db0, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x6d05ead0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x6d05ead0, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x381c80 [0034.139] FindClose (in: hFindFile=0x381c80 | out: hFindFile=0x381c80) returned 1 [0034.139] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\EVRGREEN", nBufferLength=0x105, lpBuffer=0x31e24c, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\EVRGREEN", lpFilePart=0x0) returned 0x40 [0034.139] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\EVRGREEN\\", nBufferLength=0x105, lpBuffer=0x31e220, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\EVRGREEN\\", lpFilePart=0x0) returned 0x41 [0034.139] FindFirstFileW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\EVRGREEN\\*", lpFindFileData=0x31e46c | out: lpFindFileData=0x31e46c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x51fe2db0, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x6d05ead0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x6d05ead0, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x381c80 [0034.139] FindClose (in: hFindFile=0x381c80 | out: hFindFile=0x381c80) returned 1 [0034.139] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\EXPEDITN", nBufferLength=0x105, lpBuffer=0x31e24c, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\EXPEDITN", lpFilePart=0x0) returned 0x40 [0034.139] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\EXPEDITN\\", nBufferLength=0x105, lpBuffer=0x31e220, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\EXPEDITN\\", lpFilePart=0x0) returned 0x41 [0034.140] FindFirstFileW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\EXPEDITN\\*", lpFindFileData=0x31e46c | out: lpFindFileData=0x31e46c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5a6f8e30, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x60af2a30, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x60af2a30, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x381c80 [0034.140] FindClose (in: hFindFile=0x381c80 | out: hFindFile=0x381c80) returned 1 [0034.140] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\EXPEDITN", nBufferLength=0x105, lpBuffer=0x31e24c, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\EXPEDITN", lpFilePart=0x0) returned 0x40 [0034.140] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\EXPEDITN\\", nBufferLength=0x105, lpBuffer=0x31e220, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\EXPEDITN\\", lpFilePart=0x0) returned 0x41 [0034.140] FindFirstFileW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\EXPEDITN\\*", lpFindFileData=0x31e46c | out: lpFindFileData=0x31e46c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5a6f8e30, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x60af2a30, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x60af2a30, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x381c80 [0034.140] FindClose (in: hFindFile=0x381c80 | out: hFindFile=0x381c80) returned 1 [0034.140] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\ICE", nBufferLength=0x105, lpBuffer=0x31e24c, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\ICE", lpFilePart=0x0) returned 0x3b [0034.140] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\ICE\\", nBufferLength=0x105, lpBuffer=0x31e220, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\ICE\\", lpFilePart=0x0) returned 0x3c [0034.140] FindFirstFileW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\ICE\\*", lpFindFileData=0x31e46c | out: lpFindFileData=0x31e46c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5a6f8e30, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x61cccf30, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x61cccf30, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x381c80 [0034.141] FindClose (in: hFindFile=0x381c80 | out: hFindFile=0x381c80) returned 1 [0034.141] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\ICE", nBufferLength=0x105, lpBuffer=0x31e24c, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\ICE", lpFilePart=0x0) returned 0x3b [0034.141] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\ICE\\", nBufferLength=0x105, lpBuffer=0x31e220, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\ICE\\", lpFilePart=0x0) returned 0x3c [0034.141] FindFirstFileW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\ICE\\*", lpFindFileData=0x31e46c | out: lpFindFileData=0x31e46c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5a6f8e30, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x61cccf30, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x61cccf30, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x381c80 [0034.141] FindClose (in: hFindFile=0x381c80 | out: hFindFile=0x381c80) returned 1 [0034.141] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\INDUST", nBufferLength=0x105, lpBuffer=0x31e24c, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\INDUST", lpFilePart=0x0) returned 0x3e [0034.142] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\INDUST\\", nBufferLength=0x105, lpBuffer=0x31e220, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\INDUST\\", lpFilePart=0x0) returned 0x3f [0034.142] FindFirstFileW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\INDUST\\*", lpFindFileData=0x31e46c | out: lpFindFileData=0x31e46c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x539538d0, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x6d489150, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x6d489150, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x381c80 [0034.142] FindClose (in: hFindFile=0x381c80 | out: hFindFile=0x381c80) returned 1 [0034.143] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\INDUST", nBufferLength=0x105, lpBuffer=0x31e24c, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\INDUST", lpFilePart=0x0) returned 0x3e [0034.143] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\INDUST\\", nBufferLength=0x105, lpBuffer=0x31e220, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\INDUST\\", lpFilePart=0x0) returned 0x3f [0034.143] FindFirstFileW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\INDUST\\*", lpFindFileData=0x31e46c | out: lpFindFileData=0x31e46c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x539538d0, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x6d489150, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x6d489150, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x381c80 [0034.143] FindClose (in: hFindFile=0x381c80 | out: hFindFile=0x381c80) returned 1 [0034.143] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\IRIS", nBufferLength=0x105, lpBuffer=0x31e24c, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\IRIS", lpFilePart=0x0) returned 0x3c [0034.143] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\IRIS\\", nBufferLength=0x105, lpBuffer=0x31e220, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\IRIS\\", lpFilePart=0x0) returned 0x3d [0034.143] FindFirstFileW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\IRIS\\*", lpFindFileData=0x31e46c | out: lpFindFileData=0x31e46c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5a6f8e30, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x65d5e3f0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x65d5e3f0, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x381c80 [0034.143] FindClose (in: hFindFile=0x381c80 | out: hFindFile=0x381c80) returned 1 [0034.143] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\IRIS", nBufferLength=0x105, lpBuffer=0x31e24c, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\IRIS", lpFilePart=0x0) returned 0x3c [0034.143] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\IRIS\\", nBufferLength=0x105, lpBuffer=0x31e220, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\IRIS\\", lpFilePart=0x0) returned 0x3d [0034.143] FindFirstFileW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\IRIS\\*", lpFindFileData=0x31e46c | out: lpFindFileData=0x31e46c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5a6f8e30, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x65d5e3f0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x65d5e3f0, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x381c80 [0034.143] FindClose (in: hFindFile=0x381c80 | out: hFindFile=0x381c80) returned 1 [0034.144] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\JOURNAL", nBufferLength=0x105, lpBuffer=0x31e24c, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\JOURNAL", lpFilePart=0x0) returned 0x3f [0034.144] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\JOURNAL\\", nBufferLength=0x105, lpBuffer=0x31e220, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\JOURNAL\\", lpFilePart=0x0) returned 0x40 [0034.144] FindFirstFileW (in: lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\THEMES14\\JOURNAL\\*", lpFindFileData=0x31e46c | out: lpFindFileData=0x31e46c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x567be5d0, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x6d489150, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x6d489150, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x381c80 [0034.145] FindClose (in: hFindFile=0x381c80 | out: hFindFile=0x381c80) returned 1 [0034.198] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\Services\\verisign.bmp" (normalized: "c:\\program files\\common files\\services\\verisign.bmp"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x224 [0034.199] GetFileType (hFile=0x224) returned 0x1 [0034.199] GetFileType (hFile=0x224) returned 0x1 [0034.199] GetFileSize (in: hFile=0x224, lpFileSizeHigh=0x31e808 | out: lpFileSizeHigh=0x31e808*=0x0) returned 0xa8e [0034.199] ReadFile (in: hFile=0x224, lpBuffer=0x27844a4, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x31e7b4, lpOverlapped=0x0 | out: lpBuffer=0x27844a4*, lpNumberOfBytesRead=0x31e7b4*=0xa8e, lpOverlapped=0x0) returned 1 [0034.230] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\Services\\verisign.bmp" (normalized: "c:\\program files\\common files\\services\\verisign.bmp"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0xffffffff [0034.232] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31d528) returned 1 [0034.232] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e834) returned 1 [0034.232] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Common Files\\SpeechEngines", nBufferLength=0x105, lpBuffer=0x31e33c, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Common Files\\SpeechEngines", lpFilePart=0x0) returned 0x2b [0034.232] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Common Files\\SpeechEngines\\", nBufferLength=0x105, lpBuffer=0x31e310, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Common Files\\SpeechEngines\\", lpFilePart=0x0) returned 0x2c [0034.232] FindFirstFileW (in: lpFileName="C:\\Program Files\\Common Files\\SpeechEngines\\*", lpFindFileData=0x31e55c | out: lpFindFileData=0x31e55c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd85ef28, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd85ef28, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xfd85ef28, ftLastWriteTime.dwHighDateTime=0x1ca0431, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x381d00 [0034.232] FindNextFileW (in: hFindFile=0x381d00, lpFindFileData=0x31e56c | out: lpFindFileData=0x31e56c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd85ef28, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd85ef28, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xfd85ef28, ftLastWriteTime.dwHighDateTime=0x1ca0431, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0034.232] FindNextFileW (in: hFindFile=0x381d00, lpFindFileData=0x31e56c | out: lpFindFileData=0x31e56c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd85ef28, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd85ef28, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xfd85ef28, ftLastWriteTime.dwHighDateTime=0x1ca0431, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft", cAlternateFileName="MICROS~1")) returned 1 [0034.233] FindNextFileW (in: hFindFile=0x381d00, lpFindFileData=0x31e56c | out: lpFindFileData=0x31e56c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd85ef28, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd85ef28, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xfd85ef28, ftLastWriteTime.dwHighDateTime=0x1ca0431, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft", cAlternateFileName="MICROS~1")) returned 0 [0034.233] FindClose (in: hFindFile=0x381d00 | out: hFindFile=0x381d00) returned 1 [0034.233] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e7f4) returned 1 [0034.233] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e800) returned 1 [0034.233] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e834) returned 1 [0034.233] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Common Files\\SpeechEngines", nBufferLength=0x105, lpBuffer=0x31e33c, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Common Files\\SpeechEngines", lpFilePart=0x0) returned 0x2b [0034.233] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Common Files\\SpeechEngines\\", nBufferLength=0x105, lpBuffer=0x31e310, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Common Files\\SpeechEngines\\", lpFilePart=0x0) returned 0x2c [0034.233] FindFirstFileW (in: lpFileName="C:\\Program Files\\Common Files\\SpeechEngines\\*", lpFindFileData=0x31e55c | out: lpFindFileData=0x31e55c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd85ef28, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd85ef28, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xfd85ef28, ftLastWriteTime.dwHighDateTime=0x1ca0431, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x381d00 [0034.233] FindNextFileW (in: hFindFile=0x381d00, lpFindFileData=0x31e56c | out: lpFindFileData=0x31e56c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd85ef28, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd85ef28, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xfd85ef28, ftLastWriteTime.dwHighDateTime=0x1ca0431, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0034.233] FindNextFileW (in: hFindFile=0x381d00, lpFindFileData=0x31e56c | out: lpFindFileData=0x31e56c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd85ef28, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd85ef28, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xfd85ef28, ftLastWriteTime.dwHighDateTime=0x1ca0431, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft", cAlternateFileName="MICROS~1")) returned 1 [0034.234] FindNextFileW (in: hFindFile=0x381d00, lpFindFileData=0x31e56c | out: lpFindFileData=0x31e56c*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0034.234] FindClose (in: hFindFile=0x381d00 | out: hFindFile=0x381d00) returned 1 [0034.234] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e7f4) returned 1 [0034.234] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e800) returned 1 [0034.234] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e7bc) returned 1 [0034.234] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Common Files\\SpeechEngines\\Microsoft", nBufferLength=0x105, lpBuffer=0x31e2c4, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Common Files\\SpeechEngines\\Microsoft", lpFilePart=0x0) returned 0x35 [0034.234] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Common Files\\SpeechEngines\\Microsoft\\", nBufferLength=0x105, lpBuffer=0x31e298, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Common Files\\SpeechEngines\\Microsoft\\", lpFilePart=0x0) returned 0x36 [0034.234] FindFirstFileW (in: lpFileName="C:\\Program Files\\Common Files\\SpeechEngines\\Microsoft\\*", lpFindFileData=0x31e4e4 | out: lpFindFileData=0x31e4e4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd85ef28, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd85ef28, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xfd85ef28, ftLastWriteTime.dwHighDateTime=0x1ca0431, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x381d00 [0034.235] FindNextFileW (in: hFindFile=0x381d00, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd85ef28, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd85ef28, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xfd85ef28, ftLastWriteTime.dwHighDateTime=0x1ca0431, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0034.235] FindNextFileW (in: hFindFile=0x381d00, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd85ef28, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd85ef28, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xfd85ef28, ftLastWriteTime.dwHighDateTime=0x1ca0431, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="TTS20", cAlternateFileName="")) returned 1 [0034.235] FindNextFileW (in: hFindFile=0x381d00, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd85ef28, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd85ef28, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xfd85ef28, ftLastWriteTime.dwHighDateTime=0x1ca0431, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="TTS20", cAlternateFileName="")) returned 0 [0034.235] FindClose (in: hFindFile=0x381d00 | out: hFindFile=0x381d00) returned 1 [0034.235] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e77c) returned 1 [0034.235] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e788) returned 1 [0034.236] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e7bc) returned 1 [0034.236] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Common Files\\SpeechEngines\\Microsoft", nBufferLength=0x105, lpBuffer=0x31e2c4, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Common Files\\SpeechEngines\\Microsoft", lpFilePart=0x0) returned 0x35 [0034.236] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Common Files\\SpeechEngines\\Microsoft\\", nBufferLength=0x105, lpBuffer=0x31e298, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Common Files\\SpeechEngines\\Microsoft\\", lpFilePart=0x0) returned 0x36 [0034.236] FindFirstFileW (in: lpFileName="C:\\Program Files\\Common Files\\SpeechEngines\\Microsoft\\*", lpFindFileData=0x31e4e4 | out: lpFindFileData=0x31e4e4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd85ef28, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd85ef28, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xfd85ef28, ftLastWriteTime.dwHighDateTime=0x1ca0431, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x381d00 [0034.236] FindNextFileW (in: hFindFile=0x381d00, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd85ef28, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd85ef28, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xfd85ef28, ftLastWriteTime.dwHighDateTime=0x1ca0431, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0034.236] FindNextFileW (in: hFindFile=0x381d00, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd85ef28, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd85ef28, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xfd85ef28, ftLastWriteTime.dwHighDateTime=0x1ca0431, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="TTS20", cAlternateFileName="")) returned 1 [0034.236] FindNextFileW (in: hFindFile=0x381d00, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0034.236] FindClose (in: hFindFile=0x381d00 | out: hFindFile=0x381d00) returned 1 [0034.236] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e77c) returned 1 [0034.236] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e788) returned 1 [0034.236] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e744) returned 1 [0034.236] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Common Files\\SpeechEngines\\Microsoft\\TTS20", nBufferLength=0x105, lpBuffer=0x31e24c, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Common Files\\SpeechEngines\\Microsoft\\TTS20", lpFilePart=0x0) returned 0x3b [0034.236] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Common Files\\SpeechEngines\\Microsoft\\TTS20\\", nBufferLength=0x105, lpBuffer=0x31e220, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Common Files\\SpeechEngines\\Microsoft\\TTS20\\", lpFilePart=0x0) returned 0x3c [0034.237] FindFirstFileW (in: lpFileName="C:\\Program Files\\Common Files\\SpeechEngines\\Microsoft\\TTS20\\*", lpFindFileData=0x31e46c | out: lpFindFileData=0x31e46c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd85ef28, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd85ef28, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xfd85ef28, ftLastWriteTime.dwHighDateTime=0x1ca0431, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x381d00 [0034.237] FindNextFileW (in: hFindFile=0x381d00, lpFindFileData=0x31e47c | out: lpFindFileData=0x31e47c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd85ef28, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd85ef28, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xfd85ef28, ftLastWriteTime.dwHighDateTime=0x1ca0431, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0034.237] FindNextFileW (in: hFindFile=0x381d00, lpFindFileData=0x31e47c | out: lpFindFileData=0x31e47c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd85ef28, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x1eab37af, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x1eab37af, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="en-US", cAlternateFileName="")) returned 1 [0034.237] FindNextFileW (in: hFindFile=0x381d00, lpFindFileData=0x31e47c | out: lpFindFileData=0x31e47c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc536f5be, ftCreationTime.dwHighDateTime=0x1ca041a, ftLastAccessTime.dwLowDateTime=0xc536f5be, ftLastAccessTime.dwHighDateTime=0x1ca041a, ftLastWriteTime.dwLowDateTime=0x36fbb600, ftLastWriteTime.dwHighDateTime=0x1ca0424, nFileSizeHigh=0x0, nFileSizeLow=0xa200, dwReserved0=0x0, dwReserved1=0x0, cFileName="MSTTSCommon.dll", cAlternateFileName="")) returned 1 [0034.237] FindNextFileW (in: hFindFile=0x381d00, lpFindFileData=0x31e47c | out: lpFindFileData=0x31e47c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc982ab94, ftCreationTime.dwHighDateTime=0x1ca041a, ftLastAccessTime.dwLowDateTime=0xc982ab94, ftLastAccessTime.dwHighDateTime=0x1ca041a, ftLastWriteTime.dwLowDateTime=0x3702e1f0, ftLastWriteTime.dwHighDateTime=0x1ca0424, nFileSizeHigh=0x0, nFileSizeLow=0x2c400, dwReserved0=0x0, dwReserved1=0x0, cFileName="MSTTSEngine.dll", cAlternateFileName="")) returned 1 [0034.237] FindNextFileW (in: hFindFile=0x381d00, lpFindFileData=0x31e47c | out: lpFindFileData=0x31e47c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc6d522f4, ftCreationTime.dwHighDateTime=0x1ca041a, ftLastAccessTime.dwLowDateTime=0xc6d522f4, ftLastAccessTime.dwHighDateTime=0x1ca041a, ftLastWriteTime.dwLowDateTime=0x3739a960, ftLastWriteTime.dwHighDateTime=0x1ca0424, nFileSizeHigh=0x0, nFileSizeLow=0x2600, dwReserved0=0x0, dwReserved1=0x0, cFileName="MSTTSLoc.dll", cAlternateFileName="")) returned 1 [0034.237] FindNextFileW (in: hFindFile=0x381d00, lpFindFileData=0x31e47c | out: lpFindFileData=0x31e47c*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0034.238] FindClose (in: hFindFile=0x381d00 | out: hFindFile=0x381d00) returned 1 [0034.238] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e704) returned 1 [0034.238] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e710) returned 1 [0034.238] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e744) returned 1 [0034.238] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Common Files\\SpeechEngines\\Microsoft\\TTS20", nBufferLength=0x105, lpBuffer=0x31e24c, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Common Files\\SpeechEngines\\Microsoft\\TTS20", lpFilePart=0x0) returned 0x3b [0034.238] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Common Files\\SpeechEngines\\Microsoft\\TTS20\\", nBufferLength=0x105, lpBuffer=0x31e220, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Common Files\\SpeechEngines\\Microsoft\\TTS20\\", lpFilePart=0x0) returned 0x3c [0034.238] FindFirstFileW (in: lpFileName="C:\\Program Files\\Common Files\\SpeechEngines\\Microsoft\\TTS20\\*", lpFindFileData=0x31e46c | out: lpFindFileData=0x31e46c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd85ef28, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd85ef28, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xfd85ef28, ftLastWriteTime.dwHighDateTime=0x1ca0431, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x381d00 [0034.238] FindNextFileW (in: hFindFile=0x381d00, lpFindFileData=0x31e47c | out: lpFindFileData=0x31e47c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd85ef28, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd85ef28, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xfd85ef28, ftLastWriteTime.dwHighDateTime=0x1ca0431, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0034.238] FindNextFileW (in: hFindFile=0x381d00, lpFindFileData=0x31e47c | out: lpFindFileData=0x31e47c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd85ef28, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x1eab37af, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x1eab37af, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="en-US", cAlternateFileName="")) returned 1 [0034.238] FindNextFileW (in: hFindFile=0x381d00, lpFindFileData=0x31e47c | out: lpFindFileData=0x31e47c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc536f5be, ftCreationTime.dwHighDateTime=0x1ca041a, ftLastAccessTime.dwLowDateTime=0xc536f5be, ftLastAccessTime.dwHighDateTime=0x1ca041a, ftLastWriteTime.dwLowDateTime=0x36fbb600, ftLastWriteTime.dwHighDateTime=0x1ca0424, nFileSizeHigh=0x0, nFileSizeLow=0xa200, dwReserved0=0x0, dwReserved1=0x0, cFileName="MSTTSCommon.dll", cAlternateFileName="")) returned 1 [0034.238] FindNextFileW (in: hFindFile=0x381d00, lpFindFileData=0x31e47c | out: lpFindFileData=0x31e47c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc982ab94, ftCreationTime.dwHighDateTime=0x1ca041a, ftLastAccessTime.dwLowDateTime=0xc982ab94, ftLastAccessTime.dwHighDateTime=0x1ca041a, ftLastWriteTime.dwLowDateTime=0x3702e1f0, ftLastWriteTime.dwHighDateTime=0x1ca0424, nFileSizeHigh=0x0, nFileSizeLow=0x2c400, dwReserved0=0x0, dwReserved1=0x0, cFileName="MSTTSEngine.dll", cAlternateFileName="")) returned 1 [0034.239] FindNextFileW (in: hFindFile=0x381d00, lpFindFileData=0x31e47c | out: lpFindFileData=0x31e47c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc6d522f4, ftCreationTime.dwHighDateTime=0x1ca041a, ftLastAccessTime.dwLowDateTime=0xc6d522f4, ftLastAccessTime.dwHighDateTime=0x1ca041a, ftLastWriteTime.dwLowDateTime=0x3739a960, ftLastWriteTime.dwHighDateTime=0x1ca0424, nFileSizeHigh=0x0, nFileSizeLow=0x2600, dwReserved0=0x0, dwReserved1=0x0, cFileName="MSTTSLoc.dll", cAlternateFileName="")) returned 1 [0034.239] FindNextFileW (in: hFindFile=0x381d00, lpFindFileData=0x31e47c | out: lpFindFileData=0x31e47c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc6d522f4, ftCreationTime.dwHighDateTime=0x1ca041a, ftLastAccessTime.dwLowDateTime=0xc6d522f4, ftLastAccessTime.dwHighDateTime=0x1ca041a, ftLastWriteTime.dwLowDateTime=0x3739a960, ftLastWriteTime.dwHighDateTime=0x1ca0424, nFileSizeHigh=0x0, nFileSizeLow=0x2600, dwReserved0=0x0, dwReserved1=0x0, cFileName="MSTTSLoc.dll", cAlternateFileName="")) returned 0 [0034.239] FindClose (in: hFindFile=0x381d00 | out: hFindFile=0x381d00) returned 1 [0034.239] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e704) returned 1 [0034.239] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e710) returned 1 [0034.239] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e6cc) returned 1 [0034.239] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Common Files\\SpeechEngines\\Microsoft\\TTS20\\en-US", nBufferLength=0x105, lpBuffer=0x31e1d4, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Common Files\\SpeechEngines\\Microsoft\\TTS20\\en-US", lpFilePart=0x0) returned 0x41 [0034.239] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Common Files\\SpeechEngines\\Microsoft\\TTS20\\en-US\\", nBufferLength=0x105, lpBuffer=0x31e1a8, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Common Files\\SpeechEngines\\Microsoft\\TTS20\\en-US\\", lpFilePart=0x0) returned 0x42 [0034.239] FindFirstFileW (in: lpFileName="C:\\Program Files\\Common Files\\SpeechEngines\\Microsoft\\TTS20\\en-US\\*", lpFindFileData=0x31e3f4 | out: lpFindFileData=0x31e3f4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd85ef28, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x1eab37af, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x1eab37af, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x381d00 [0034.239] FindNextFileW (in: hFindFile=0x381d00, lpFindFileData=0x31e404 | out: lpFindFileData=0x31e404*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd85ef28, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x1eab37af, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x1eab37af, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0034.240] FindNextFileW (in: hFindFile=0x381d00, lpFindFileData=0x31e404 | out: lpFindFileData=0x31e404*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd85ef28, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd85ef28, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xd64fa49b, ftLastWriteTime.dwHighDateTime=0x1ca042b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="enu-dsk", cAlternateFileName="")) returned 1 [0034.240] FindNextFileW (in: hFindFile=0x381d00, lpFindFileData=0x31e404 | out: lpFindFileData=0x31e404*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc84877a0, ftCreationTime.dwHighDateTime=0x1ca041a, ftLastAccessTime.dwLowDateTime=0xc84877a0, ftLastAccessTime.dwHighDateTime=0x1ca041a, ftLastWriteTime.dwLowDateTime=0x3739a960, ftLastWriteTime.dwHighDateTime=0x1ca0424, nFileSizeHigh=0x0, nFileSizeLow=0x5b400, dwReserved0=0x0, dwReserved1=0x0, cFileName="MSTTSFrontendENU.dll", cAlternateFileName="")) returned 1 [0034.240] FindNextFileW (in: hFindFile=0x381d00, lpFindFileData=0x31e404 | out: lpFindFileData=0x31e404*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb2c77e3, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0xb5e9110, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0xb2c77e3, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0xa00, dwReserved0=0x0, dwReserved1=0x0, cFileName="MSTTSLoc.dll.mui", cAlternateFileName="")) returned 1 [0034.240] FindNextFileW (in: hFindFile=0x381d00, lpFindFileData=0x31e404 | out: lpFindFileData=0x31e404*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0034.240] FindClose (in: hFindFile=0x381d00 | out: hFindFile=0x381d00) returned 1 [0034.240] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e68c) returned 1 [0034.240] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e698) returned 1 [0034.240] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e6cc) returned 1 [0034.240] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Common Files\\SpeechEngines\\Microsoft\\TTS20\\en-US", nBufferLength=0x105, lpBuffer=0x31e1d4, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Common Files\\SpeechEngines\\Microsoft\\TTS20\\en-US", lpFilePart=0x0) returned 0x41 [0034.240] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Common Files\\SpeechEngines\\Microsoft\\TTS20\\en-US\\", nBufferLength=0x105, lpBuffer=0x31e1a8, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Common Files\\SpeechEngines\\Microsoft\\TTS20\\en-US\\", lpFilePart=0x0) returned 0x42 [0034.240] FindFirstFileW (in: lpFileName="C:\\Program Files\\Common Files\\SpeechEngines\\Microsoft\\TTS20\\en-US\\*", lpFindFileData=0x31e3f4 | out: lpFindFileData=0x31e3f4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd85ef28, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x1eab37af, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x1eab37af, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x381d00 [0034.241] FindNextFileW (in: hFindFile=0x381d00, lpFindFileData=0x31e404 | out: lpFindFileData=0x31e404*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd85ef28, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x1eab37af, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x1eab37af, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0034.241] FindNextFileW (in: hFindFile=0x381d00, lpFindFileData=0x31e404 | out: lpFindFileData=0x31e404*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd85ef28, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd85ef28, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xd64fa49b, ftLastWriteTime.dwHighDateTime=0x1ca042b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="enu-dsk", cAlternateFileName="")) returned 1 [0034.241] FindNextFileW (in: hFindFile=0x381d00, lpFindFileData=0x31e404 | out: lpFindFileData=0x31e404*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc84877a0, ftCreationTime.dwHighDateTime=0x1ca041a, ftLastAccessTime.dwLowDateTime=0xc84877a0, ftLastAccessTime.dwHighDateTime=0x1ca041a, ftLastWriteTime.dwLowDateTime=0x3739a960, ftLastWriteTime.dwHighDateTime=0x1ca0424, nFileSizeHigh=0x0, nFileSizeLow=0x5b400, dwReserved0=0x0, dwReserved1=0x0, cFileName="MSTTSFrontendENU.dll", cAlternateFileName="")) returned 1 [0034.241] FindNextFileW (in: hFindFile=0x381d00, lpFindFileData=0x31e404 | out: lpFindFileData=0x31e404*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb2c77e3, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0xb5e9110, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0xb2c77e3, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0xa00, dwReserved0=0x0, dwReserved1=0x0, cFileName="MSTTSLoc.dll.mui", cAlternateFileName="")) returned 1 [0034.241] FindNextFileW (in: hFindFile=0x381d00, lpFindFileData=0x31e404 | out: lpFindFileData=0x31e404*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb2c77e3, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0xb5e9110, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0xb2c77e3, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0xa00, dwReserved0=0x0, dwReserved1=0x0, cFileName="MSTTSLoc.dll.mui", cAlternateFileName="")) returned 0 [0034.241] FindClose (in: hFindFile=0x381d00 | out: hFindFile=0x381d00) returned 1 [0034.241] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e68c) returned 1 [0034.241] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e698) returned 1 [0034.241] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e654) returned 1 [0034.241] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Common Files\\SpeechEngines\\Microsoft\\TTS20\\en-US\\enu-dsk", nBufferLength=0x105, lpBuffer=0x31e15c, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Common Files\\SpeechEngines\\Microsoft\\TTS20\\en-US\\enu-dsk", lpFilePart=0x0) returned 0x49 [0034.241] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Common Files\\SpeechEngines\\Microsoft\\TTS20\\en-US\\enu-dsk\\", nBufferLength=0x105, lpBuffer=0x31e130, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Common Files\\SpeechEngines\\Microsoft\\TTS20\\en-US\\enu-dsk\\", lpFilePart=0x0) returned 0x4a [0034.241] FindFirstFileW (in: lpFileName="C:\\Program Files\\Common Files\\SpeechEngines\\Microsoft\\TTS20\\en-US\\enu-dsk\\*", lpFindFileData=0x31e37c | out: lpFindFileData=0x31e37c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd85ef28, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd85ef28, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xd64fa49b, ftLastWriteTime.dwHighDateTime=0x1ca042b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x381d00 [0034.242] FindNextFileW (in: hFindFile=0x381d00, lpFindFileData=0x31e38c | out: lpFindFileData=0x31e38c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd85ef28, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd85ef28, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xd64fa49b, ftLastWriteTime.dwHighDateTime=0x1ca042b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0034.242] FindNextFileW (in: hFindFile=0x381d00, lpFindFileData=0x31e38c | out: lpFindFileData=0x31e38c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd85ef28, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd85ef28, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xd64fa49b, ftLastWriteTime.dwHighDateTime=0x1ca042b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 0 [0034.250] FindClose (in: hFindFile=0x381d00 | out: hFindFile=0x381d00) returned 1 [0034.250] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e614) returned 1 [0034.250] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e620) returned 1 [0034.250] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e654) returned 1 [0034.250] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Common Files\\SpeechEngines\\Microsoft\\TTS20\\en-US\\enu-dsk", nBufferLength=0x105, lpBuffer=0x31e15c, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Common Files\\SpeechEngines\\Microsoft\\TTS20\\en-US\\enu-dsk", lpFilePart=0x0) returned 0x49 [0034.250] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Common Files\\SpeechEngines\\Microsoft\\TTS20\\en-US\\enu-dsk\\", nBufferLength=0x105, lpBuffer=0x31e130, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Common Files\\SpeechEngines\\Microsoft\\TTS20\\en-US\\enu-dsk\\", lpFilePart=0x0) returned 0x4a [0034.250] FindFirstFileW (in: lpFileName="C:\\Program Files\\Common Files\\SpeechEngines\\Microsoft\\TTS20\\en-US\\enu-dsk\\*", lpFindFileData=0x31e37c | out: lpFindFileData=0x31e37c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd85ef28, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd85ef28, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xd64fa49b, ftLastWriteTime.dwHighDateTime=0x1ca042b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x381d00 [0034.250] FindNextFileW (in: hFindFile=0x381d00, lpFindFileData=0x31e38c | out: lpFindFileData=0x31e38c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd85ef28, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd85ef28, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xd64fa49b, ftLastWriteTime.dwHighDateTime=0x1ca042b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0034.251] FindNextFileW (in: hFindFile=0x381d00, lpFindFileData=0x31e38c | out: lpFindFileData=0x31e38c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd85ef28, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd85ef28, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xd64fa49b, ftLastWriteTime.dwHighDateTime=0x1ca042b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 0 [0034.251] FindClose (in: hFindFile=0x381d00 | out: hFindFile=0x381d00) returned 1 [0034.251] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e614) returned 1 [0034.251] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e620) returned 1 [0034.251] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e834) returned 1 [0034.251] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Common Files\\System", nBufferLength=0x105, lpBuffer=0x31e33c, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Common Files\\System", lpFilePart=0x0) returned 0x24 [0034.251] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Common Files\\System\\", nBufferLength=0x105, lpBuffer=0x31e310, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Common Files\\System\\", lpFilePart=0x0) returned 0x25 [0034.251] FindFirstFileW (in: lpFileName="C:\\Program Files\\Common Files\\System\\*", lpFindFileData=0x31e55c | out: lpFindFileData=0x31e55c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd85ef28, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xf53e90, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xf53e90, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x381d00 [0034.255] FindNextFileW (in: hFindFile=0x381d00, lpFindFileData=0x31e56c | out: lpFindFileData=0x31e56c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd85ef28, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xf53e90, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xf53e90, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0034.255] FindNextFileW (in: hFindFile=0x381d00, lpFindFileData=0x31e56c | out: lpFindFileData=0x31e56c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd85ef28, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x1eab37af, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x1eab37af, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="ado", cAlternateFileName="")) returned 1 [0034.255] FindNextFileW (in: hFindFile=0x381d00, lpFindFileData=0x31e56c | out: lpFindFileData=0x31e56c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xbf4f1c09, ftCreationTime.dwHighDateTime=0x1ca0415, ftLastAccessTime.dwLowDateTime=0xbf4f1c09, ftLastAccessTime.dwHighDateTime=0x1ca0415, ftLastWriteTime.dwLowDateTime=0x128ffb00, ftLastWriteTime.dwHighDateTime=0x1ca0424, nFileSizeHigh=0x0, nFileSizeLow=0x7200, dwReserved0=0x0, dwReserved1=0x0, cFileName="DirectDB.dll", cAlternateFileName="")) returned 1 [0034.256] FindNextFileW (in: hFindFile=0x381d00, lpFindFileData=0x31e56c | out: lpFindFileData=0x31e56c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1eab37af, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x23ef19fc, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x1eab37af, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="en-US", cAlternateFileName="")) returned 1 [0034.256] FindNextFileW (in: hFindFile=0x381d00, lpFindFileData=0x31e56c | out: lpFindFileData=0x31e56c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd885082, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x1eab37af, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x1eab37af, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="msadc", cAlternateFileName="")) returned 1 [0034.256] FindNextFileW (in: hFindFile=0x381d00, lpFindFileData=0x31e56c | out: lpFindFileData=0x31e56c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf53e90, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0xf53e90, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xf53e90, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="MSMAPI", cAlternateFileName="")) returned 1 [0034.256] FindNextFileW (in: hFindFile=0x381d00, lpFindFileData=0x31e56c | out: lpFindFileData=0x31e56c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd885082, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x5f324e30, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x5f324e30, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Ole DB", cAlternateFileName="OLEDB~1")) returned 1 [0034.256] FindNextFileW (in: hFindFile=0x381d00, lpFindFileData=0x31e56c | out: lpFindFileData=0x31e56c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xcc5390a1, ftCreationTime.dwHighDateTime=0x1ca0415, ftLastAccessTime.dwLowDateTime=0xcc5390a1, ftLastAccessTime.dwHighDateTime=0x1ca0415, ftLastWriteTime.dwLowDateTime=0x4556f160, ftLastWriteTime.dwHighDateTime=0x1ca0424, nFileSizeHigh=0x0, nFileSizeLow=0xd8800, dwReserved0=0x0, dwReserved1=0x0, cFileName="wab32.dll", cAlternateFileName="")) returned 1 [0034.256] FindNextFileW (in: hFindFile=0x381d00, lpFindFileData=0x31e56c | out: lpFindFileData=0x31e56c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc0f46d56, ftCreationTime.dwHighDateTime=0x1ca0415, ftLastAccessTime.dwLowDateTime=0xc0f46d56, ftLastAccessTime.dwHighDateTime=0x1ca0415, ftLastWriteTime.dwLowDateTime=0x1f9ed5b0, ftLastWriteTime.dwHighDateTime=0x1ca0423, nFileSizeHigh=0x0, nFileSizeLow=0x10c400, dwReserved0=0x0, dwReserved1=0x0, cFileName="wab32res.dll", cAlternateFileName="")) returned 1 [0034.256] FindNextFileW (in: hFindFile=0x381d00, lpFindFileData=0x31e56c | out: lpFindFileData=0x31e56c*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0034.256] FindClose (in: hFindFile=0x381d00 | out: hFindFile=0x381d00) returned 1 [0034.257] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e7f4) returned 1 [0034.257] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e800) returned 1 [0034.257] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e834) returned 1 [0034.257] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Common Files\\System", nBufferLength=0x105, lpBuffer=0x31e33c, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Common Files\\System", lpFilePart=0x0) returned 0x24 [0034.257] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Common Files\\System\\", nBufferLength=0x105, lpBuffer=0x31e310, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Common Files\\System\\", lpFilePart=0x0) returned 0x25 [0034.257] FindFirstFileW (in: lpFileName="C:\\Program Files\\Common Files\\System\\*", lpFindFileData=0x31e55c | out: lpFindFileData=0x31e55c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd85ef28, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xf53e90, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xf53e90, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x381d00 [0034.258] FindNextFileW (in: hFindFile=0x381d00, lpFindFileData=0x31e56c | out: lpFindFileData=0x31e56c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd85ef28, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xf53e90, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xf53e90, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0034.258] FindNextFileW (in: hFindFile=0x381d00, lpFindFileData=0x31e56c | out: lpFindFileData=0x31e56c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd85ef28, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x1eab37af, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x1eab37af, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="ado", cAlternateFileName="")) returned 1 [0034.259] FindNextFileW (in: hFindFile=0x381d00, lpFindFileData=0x31e56c | out: lpFindFileData=0x31e56c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xbf4f1c09, ftCreationTime.dwHighDateTime=0x1ca0415, ftLastAccessTime.dwLowDateTime=0xbf4f1c09, ftLastAccessTime.dwHighDateTime=0x1ca0415, ftLastWriteTime.dwLowDateTime=0x128ffb00, ftLastWriteTime.dwHighDateTime=0x1ca0424, nFileSizeHigh=0x0, nFileSizeLow=0x7200, dwReserved0=0x0, dwReserved1=0x0, cFileName="DirectDB.dll", cAlternateFileName="")) returned 1 [0034.259] FindNextFileW (in: hFindFile=0x381d00, lpFindFileData=0x31e56c | out: lpFindFileData=0x31e56c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1eab37af, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x23ef19fc, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x1eab37af, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="en-US", cAlternateFileName="")) returned 1 [0034.259] FindNextFileW (in: hFindFile=0x381d00, lpFindFileData=0x31e56c | out: lpFindFileData=0x31e56c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd885082, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x1eab37af, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x1eab37af, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="msadc", cAlternateFileName="")) returned 1 [0034.259] FindNextFileW (in: hFindFile=0x381d00, lpFindFileData=0x31e56c | out: lpFindFileData=0x31e56c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf53e90, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0xf53e90, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xf53e90, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="MSMAPI", cAlternateFileName="")) returned 1 [0034.259] FindNextFileW (in: hFindFile=0x381d00, lpFindFileData=0x31e56c | out: lpFindFileData=0x31e56c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd885082, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x5f324e30, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x5f324e30, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Ole DB", cAlternateFileName="OLEDB~1")) returned 1 [0034.259] FindNextFileW (in: hFindFile=0x381d00, lpFindFileData=0x31e56c | out: lpFindFileData=0x31e56c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xcc5390a1, ftCreationTime.dwHighDateTime=0x1ca0415, ftLastAccessTime.dwLowDateTime=0xcc5390a1, ftLastAccessTime.dwHighDateTime=0x1ca0415, ftLastWriteTime.dwLowDateTime=0x4556f160, ftLastWriteTime.dwHighDateTime=0x1ca0424, nFileSizeHigh=0x0, nFileSizeLow=0xd8800, dwReserved0=0x0, dwReserved1=0x0, cFileName="wab32.dll", cAlternateFileName="")) returned 1 [0034.259] FindNextFileW (in: hFindFile=0x381d00, lpFindFileData=0x31e56c | out: lpFindFileData=0x31e56c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc0f46d56, ftCreationTime.dwHighDateTime=0x1ca0415, ftLastAccessTime.dwLowDateTime=0xc0f46d56, ftLastAccessTime.dwHighDateTime=0x1ca0415, ftLastWriteTime.dwLowDateTime=0x1f9ed5b0, ftLastWriteTime.dwHighDateTime=0x1ca0423, nFileSizeHigh=0x0, nFileSizeLow=0x10c400, dwReserved0=0x0, dwReserved1=0x0, cFileName="wab32res.dll", cAlternateFileName="")) returned 1 [0034.259] FindNextFileW (in: hFindFile=0x381d00, lpFindFileData=0x31e56c | out: lpFindFileData=0x31e56c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc0f46d56, ftCreationTime.dwHighDateTime=0x1ca0415, ftLastAccessTime.dwLowDateTime=0xc0f46d56, ftLastAccessTime.dwHighDateTime=0x1ca0415, ftLastWriteTime.dwLowDateTime=0x1f9ed5b0, ftLastWriteTime.dwHighDateTime=0x1ca0423, nFileSizeHigh=0x0, nFileSizeLow=0x10c400, dwReserved0=0x0, dwReserved1=0x0, cFileName="wab32res.dll", cAlternateFileName="")) returned 0 [0034.260] FindClose (in: hFindFile=0x381d00 | out: hFindFile=0x381d00) returned 1 [0034.260] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e7f4) returned 1 [0034.260] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e800) returned 1 [0034.260] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e7bc) returned 1 [0034.260] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Common Files\\System\\ado", nBufferLength=0x105, lpBuffer=0x31e2c4, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Common Files\\System\\ado", lpFilePart=0x0) returned 0x28 [0034.260] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Common Files\\System\\ado\\", nBufferLength=0x105, lpBuffer=0x31e298, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Common Files\\System\\ado\\", lpFilePart=0x0) returned 0x29 [0034.260] FindFirstFileW (in: lpFileName="C:\\Program Files\\Common Files\\System\\ado\\*", lpFindFileData=0x31e4e4 | out: lpFindFileData=0x31e4e4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd85ef28, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x1eab37af, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x1eab37af, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x381d00 [0034.263] FindNextFileW (in: hFindFile=0x381d00, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd85ef28, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x1eab37af, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x1eab37af, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0034.263] FindNextFileW (in: hFindFile=0x381d00, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa4c91ed4, ftCreationTime.dwHighDateTime=0x1ca0409, ftLastAccessTime.dwLowDateTime=0xa4c91ed4, ftLastAccessTime.dwHighDateTime=0x1ca0409, ftLastWriteTime.dwLowDateTime=0xa06f97f7, ftLastWriteTime.dwHighDateTime=0x1ca03fb, nFileSizeHigh=0x0, nFileSizeLow=0x3912, dwReserved0=0x0, dwReserved1=0x0, cFileName="adojavas.inc", cAlternateFileName="")) returned 1 [0034.263] FindNextFileW (in: hFindFile=0x381d00, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa4085067, ftCreationTime.dwHighDateTime=0x1ca0409, ftLastAccessTime.dwLowDateTime=0xa4085067, ftLastAccessTime.dwHighDateTime=0x1ca0409, ftLastWriteTime.dwLowDateTime=0xa0661283, ftLastWriteTime.dwHighDateTime=0x1ca03fb, nFileSizeHigh=0x0, nFileSizeLow=0x3a67, dwReserved0=0x0, dwReserved1=0x0, cFileName="adovbs.inc", cAlternateFileName="")) returned 1 [0034.263] FindNextFileW (in: hFindFile=0x381d00, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1eab37af, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x23ef19fc, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x1eab37af, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="en-US", cAlternateFileName="")) returned 1 [0034.263] FindNextFileW (in: hFindFile=0x381d00, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6129cc5, ftCreationTime.dwHighDateTime=0x1ca041a, ftLastAccessTime.dwLowDateTime=0x6129cc5, ftLastAccessTime.dwHighDateTime=0x1ca041a, ftLastWriteTime.dwLowDateTime=0x80fe7780, ftLastWriteTime.dwHighDateTime=0x1ca0422, nFileSizeHigh=0x0, nFileSizeLow=0x2000, dwReserved0=0x0, dwReserved1=0x0, cFileName="msader15.dll", cAlternateFileName="")) returned 1 [0034.263] FindNextFileW (in: hFindFile=0x381d00, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8f7da10b, ftCreationTime.dwHighDateTime=0x1cb892b, ftLastAccessTime.dwLowDateTime=0x8f7da10b, ftLastAccessTime.dwHighDateTime=0x1cb892b, ftLastWriteTime.dwLowDateTime=0x8f80026c, ftLastWriteTime.dwHighDateTime=0x1cb892b, nFileSizeHigh=0x0, nFileSizeLow=0x16e000, dwReserved0=0x0, dwReserved1=0x0, cFileName="msado15.dll", cAlternateFileName="")) returned 1 [0034.263] FindNextFileW (in: hFindFile=0x381d00, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x833eacc3, ftCreationTime.dwHighDateTime=0x1cb892b, ftLastAccessTime.dwLowDateTime=0x833eacc3, ftLastAccessTime.dwHighDateTime=0x1cb892b, ftLastWriteTime.dwLowDateTime=0x833eacc3, ftLastWriteTime.dwHighDateTime=0x1cb892b, nFileSizeHigh=0x0, nFileSizeLow=0x11000, dwReserved0=0x0, dwReserved1=0x0, cFileName="msado20.tlb", cAlternateFileName="")) returned 1 [0034.263] FindNextFileW (in: hFindFile=0x381d00, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x833eacc3, ftCreationTime.dwHighDateTime=0x1cb892b, ftLastAccessTime.dwLowDateTime=0x833eacc3, ftLastAccessTime.dwHighDateTime=0x1cb892b, ftLastWriteTime.dwLowDateTime=0x833eacc3, ftLastWriteTime.dwHighDateTime=0x1cb892b, nFileSizeHigh=0x0, nFileSizeLow=0x12000, dwReserved0=0x0, dwReserved1=0x0, cFileName="msado21.tlb", cAlternateFileName="")) returned 1 [0034.264] FindNextFileW (in: hFindFile=0x381d00, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x83410e23, ftCreationTime.dwHighDateTime=0x1cb892b, ftLastAccessTime.dwLowDateTime=0x83410e23, ftLastAccessTime.dwHighDateTime=0x1cb892b, ftLastWriteTime.dwLowDateTime=0x83410e23, ftLastWriteTime.dwHighDateTime=0x1cb892b, nFileSizeHigh=0x0, nFileSizeLow=0x17000, dwReserved0=0x0, dwReserved1=0x0, cFileName="msado25.tlb", cAlternateFileName="")) returned 1 [0034.264] FindNextFileW (in: hFindFile=0x381d00, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x83410e23, ftCreationTime.dwHighDateTime=0x1cb892b, ftLastAccessTime.dwLowDateTime=0x83410e23, ftLastAccessTime.dwHighDateTime=0x1cb892b, ftLastWriteTime.dwLowDateTime=0x83410e23, ftLastWriteTime.dwHighDateTime=0x1cb892b, nFileSizeHigh=0x0, nFileSizeLow=0x18000, dwReserved0=0x0, dwReserved1=0x0, cFileName="msado26.tlb", cAlternateFileName="")) returned 1 [0034.264] FindNextFileW (in: hFindFile=0x381d00, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x83436f83, ftCreationTime.dwHighDateTime=0x1cb892b, ftLastAccessTime.dwLowDateTime=0x83436f83, ftLastAccessTime.dwHighDateTime=0x1cb892b, ftLastWriteTime.dwLowDateTime=0x8345d0e3, ftLastWriteTime.dwHighDateTime=0x1cb892b, nFileSizeHigh=0x0, nFileSizeLow=0x18000, dwReserved0=0x0, dwReserved1=0x0, cFileName="msado27.tlb", cAlternateFileName="")) returned 1 [0034.264] FindNextFileW (in: hFindFile=0x381d00, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x83483244, ftCreationTime.dwHighDateTime=0x1cb892b, ftLastAccessTime.dwLowDateTime=0x83483244, ftLastAccessTime.dwHighDateTime=0x1cb892b, ftLastWriteTime.dwLowDateTime=0x83483244, ftLastWriteTime.dwHighDateTime=0x1cb892b, nFileSizeHigh=0x0, nFileSizeLow=0x18000, dwReserved0=0x0, dwReserved1=0x0, cFileName="msado28.tlb", cAlternateFileName="")) returned 1 [0034.264] FindNextFileW (in: hFindFile=0x381d00, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9ec495ee, ftCreationTime.dwHighDateTime=0x1cb892b, ftLastAccessTime.dwLowDateTime=0x9ec495ee, ftLastAccessTime.dwHighDateTime=0x1cb892b, ftLastWriteTime.dwLowDateTime=0x9ec6f74e, ftLastWriteTime.dwHighDateTime=0x1cb892b, nFileSizeHigh=0x0, nFileSizeLow=0x72000, dwReserved0=0x0, dwReserved1=0x0, cFileName="msadomd.dll", cAlternateFileName="")) returned 1 [0034.264] FindNextFileW (in: hFindFile=0x381d00, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x62a6a67, ftCreationTime.dwHighDateTime=0x1ca041a, ftLastAccessTime.dwLowDateTime=0x62a6a67, ftLastAccessTime.dwHighDateTime=0x1ca041a, ftLastWriteTime.dwLowDateTime=0x625a7ad, ftLastWriteTime.dwHighDateTime=0x1ca041a, nFileSizeHigh=0x0, nFileSizeLow=0x5000, dwReserved0=0x0, dwReserved1=0x0, cFileName="msadomd28.tlb", cAlternateFileName="")) returned 1 [0034.264] FindNextFileW (in: hFindFile=0x381d00, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8ad50fa2, ftCreationTime.dwHighDateTime=0x1cb892b, ftLastAccessTime.dwLowDateTime=0x8ad50fa2, ftLastAccessTime.dwHighDateTime=0x1cb892b, ftLastWriteTime.dwLowDateTime=0x8ad50fa2, ftLastWriteTime.dwHighDateTime=0x1cb892b, nFileSizeHigh=0x0, nFileSizeLow=0xf000, dwReserved0=0x0, dwReserved1=0x0, cFileName="msador15.dll", cAlternateFileName="")) returned 1 [0034.264] FindNextFileW (in: hFindFile=0x381d00, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9debf8b5, ftCreationTime.dwHighDateTime=0x1cb892b, ftLastAccessTime.dwLowDateTime=0x9debf8b5, ftLastAccessTime.dwHighDateTime=0x1cb892b, ftLastWriteTime.dwLowDateTime=0x9dee5a15, ftLastWriteTime.dwHighDateTime=0x1cb892b, nFileSizeHigh=0x0, nFileSizeLow=0x79000, dwReserved0=0x0, dwReserved1=0x0, cFileName="msadox.dll", cAlternateFileName="")) returned 1 [0034.264] FindNextFileW (in: hFindFile=0x381d00, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5fd3080, ftCreationTime.dwHighDateTime=0x1ca041a, ftLastAccessTime.dwLowDateTime=0x5fd3080, ftLastAccessTime.dwHighDateTime=0x1ca041a, ftLastWriteTime.dwLowDateTime=0x5f60c69, ftLastWriteTime.dwHighDateTime=0x1ca041a, nFileSizeHigh=0x0, nFileSizeLow=0x7000, dwReserved0=0x0, dwReserved1=0x0, cFileName="msadox28.tlb", cAlternateFileName="")) returned 1 [0034.264] FindNextFileW (in: hFindFile=0x381d00, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xbf55bba, ftCreationTime.dwHighDateTime=0x1ca041a, ftLastAccessTime.dwLowDateTime=0xbf55bba, ftLastAccessTime.dwHighDateTime=0x1ca041a, ftLastWriteTime.dwLowDateTime=0x347dbdb0, ftLastWriteTime.dwHighDateTime=0x1ca0424, nFileSizeHigh=0x0, nFileSizeLow=0x1a000, dwReserved0=0x0, dwReserved1=0x0, cFileName="msadrh15.dll", cAlternateFileName="")) returned 1 [0034.265] FindNextFileW (in: hFindFile=0x381d00, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0034.265] FindClose (in: hFindFile=0x381d00 | out: hFindFile=0x381d00) returned 1 [0034.265] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e77c) returned 1 [0034.265] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e788) returned 1 [0034.265] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e7bc) returned 1 [0034.265] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Common Files\\System\\ado", nBufferLength=0x105, lpBuffer=0x31e2c4, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Common Files\\System\\ado", lpFilePart=0x0) returned 0x28 [0034.265] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Common Files\\System\\ado\\", nBufferLength=0x105, lpBuffer=0x31e298, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Common Files\\System\\ado\\", lpFilePart=0x0) returned 0x29 [0034.266] FindFirstFileW (in: lpFileName="C:\\Program Files\\Common Files\\System\\ado\\*", lpFindFileData=0x31e4e4 | out: lpFindFileData=0x31e4e4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd85ef28, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x1eab37af, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x1eab37af, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x381d00 [0034.266] FindNextFileW (in: hFindFile=0x381d00, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd85ef28, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x1eab37af, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x1eab37af, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0034.267] FindNextFileW (in: hFindFile=0x381d00, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa4c91ed4, ftCreationTime.dwHighDateTime=0x1ca0409, ftLastAccessTime.dwLowDateTime=0xa4c91ed4, ftLastAccessTime.dwHighDateTime=0x1ca0409, ftLastWriteTime.dwLowDateTime=0xa06f97f7, ftLastWriteTime.dwHighDateTime=0x1ca03fb, nFileSizeHigh=0x0, nFileSizeLow=0x3912, dwReserved0=0x0, dwReserved1=0x0, cFileName="adojavas.inc", cAlternateFileName="")) returned 1 [0034.267] FindNextFileW (in: hFindFile=0x381d00, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa4085067, ftCreationTime.dwHighDateTime=0x1ca0409, ftLastAccessTime.dwLowDateTime=0xa4085067, ftLastAccessTime.dwHighDateTime=0x1ca0409, ftLastWriteTime.dwLowDateTime=0xa0661283, ftLastWriteTime.dwHighDateTime=0x1ca03fb, nFileSizeHigh=0x0, nFileSizeLow=0x3a67, dwReserved0=0x0, dwReserved1=0x0, cFileName="adovbs.inc", cAlternateFileName="")) returned 1 [0034.267] FindNextFileW (in: hFindFile=0x381d00, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1eab37af, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x23ef19fc, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x1eab37af, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="en-US", cAlternateFileName="")) returned 1 [0034.267] FindNextFileW (in: hFindFile=0x381d00, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6129cc5, ftCreationTime.dwHighDateTime=0x1ca041a, ftLastAccessTime.dwLowDateTime=0x6129cc5, ftLastAccessTime.dwHighDateTime=0x1ca041a, ftLastWriteTime.dwLowDateTime=0x80fe7780, ftLastWriteTime.dwHighDateTime=0x1ca0422, nFileSizeHigh=0x0, nFileSizeLow=0x2000, dwReserved0=0x0, dwReserved1=0x0, cFileName="msader15.dll", cAlternateFileName="")) returned 1 [0034.267] FindNextFileW (in: hFindFile=0x381d00, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8f7da10b, ftCreationTime.dwHighDateTime=0x1cb892b, ftLastAccessTime.dwLowDateTime=0x8f7da10b, ftLastAccessTime.dwHighDateTime=0x1cb892b, ftLastWriteTime.dwLowDateTime=0x8f80026c, ftLastWriteTime.dwHighDateTime=0x1cb892b, nFileSizeHigh=0x0, nFileSizeLow=0x16e000, dwReserved0=0x0, dwReserved1=0x0, cFileName="msado15.dll", cAlternateFileName="")) returned 1 [0034.267] FindNextFileW (in: hFindFile=0x381d00, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x833eacc3, ftCreationTime.dwHighDateTime=0x1cb892b, ftLastAccessTime.dwLowDateTime=0x833eacc3, ftLastAccessTime.dwHighDateTime=0x1cb892b, ftLastWriteTime.dwLowDateTime=0x833eacc3, ftLastWriteTime.dwHighDateTime=0x1cb892b, nFileSizeHigh=0x0, nFileSizeLow=0x11000, dwReserved0=0x0, dwReserved1=0x0, cFileName="msado20.tlb", cAlternateFileName="")) returned 1 [0034.267] FindNextFileW (in: hFindFile=0x381d00, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x833eacc3, ftCreationTime.dwHighDateTime=0x1cb892b, ftLastAccessTime.dwLowDateTime=0x833eacc3, ftLastAccessTime.dwHighDateTime=0x1cb892b, ftLastWriteTime.dwLowDateTime=0x833eacc3, ftLastWriteTime.dwHighDateTime=0x1cb892b, nFileSizeHigh=0x0, nFileSizeLow=0x12000, dwReserved0=0x0, dwReserved1=0x0, cFileName="msado21.tlb", cAlternateFileName="")) returned 1 [0034.268] FindNextFileW (in: hFindFile=0x381d00, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x83410e23, ftCreationTime.dwHighDateTime=0x1cb892b, ftLastAccessTime.dwLowDateTime=0x83410e23, ftLastAccessTime.dwHighDateTime=0x1cb892b, ftLastWriteTime.dwLowDateTime=0x83410e23, ftLastWriteTime.dwHighDateTime=0x1cb892b, nFileSizeHigh=0x0, nFileSizeLow=0x17000, dwReserved0=0x0, dwReserved1=0x0, cFileName="msado25.tlb", cAlternateFileName="")) returned 1 [0034.268] FindNextFileW (in: hFindFile=0x381d00, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x83410e23, ftCreationTime.dwHighDateTime=0x1cb892b, ftLastAccessTime.dwLowDateTime=0x83410e23, ftLastAccessTime.dwHighDateTime=0x1cb892b, ftLastWriteTime.dwLowDateTime=0x83410e23, ftLastWriteTime.dwHighDateTime=0x1cb892b, nFileSizeHigh=0x0, nFileSizeLow=0x18000, dwReserved0=0x0, dwReserved1=0x0, cFileName="msado26.tlb", cAlternateFileName="")) returned 1 [0034.268] FindNextFileW (in: hFindFile=0x381d00, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x83436f83, ftCreationTime.dwHighDateTime=0x1cb892b, ftLastAccessTime.dwLowDateTime=0x83436f83, ftLastAccessTime.dwHighDateTime=0x1cb892b, ftLastWriteTime.dwLowDateTime=0x8345d0e3, ftLastWriteTime.dwHighDateTime=0x1cb892b, nFileSizeHigh=0x0, nFileSizeLow=0x18000, dwReserved0=0x0, dwReserved1=0x0, cFileName="msado27.tlb", cAlternateFileName="")) returned 1 [0034.268] FindNextFileW (in: hFindFile=0x381d00, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x83483244, ftCreationTime.dwHighDateTime=0x1cb892b, ftLastAccessTime.dwLowDateTime=0x83483244, ftLastAccessTime.dwHighDateTime=0x1cb892b, ftLastWriteTime.dwLowDateTime=0x83483244, ftLastWriteTime.dwHighDateTime=0x1cb892b, nFileSizeHigh=0x0, nFileSizeLow=0x18000, dwReserved0=0x0, dwReserved1=0x0, cFileName="msado28.tlb", cAlternateFileName="")) returned 1 [0034.268] FindNextFileW (in: hFindFile=0x381d00, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9ec495ee, ftCreationTime.dwHighDateTime=0x1cb892b, ftLastAccessTime.dwLowDateTime=0x9ec495ee, ftLastAccessTime.dwHighDateTime=0x1cb892b, ftLastWriteTime.dwLowDateTime=0x9ec6f74e, ftLastWriteTime.dwHighDateTime=0x1cb892b, nFileSizeHigh=0x0, nFileSizeLow=0x72000, dwReserved0=0x0, dwReserved1=0x0, cFileName="msadomd.dll", cAlternateFileName="")) returned 1 [0034.268] FindNextFileW (in: hFindFile=0x381d00, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x62a6a67, ftCreationTime.dwHighDateTime=0x1ca041a, ftLastAccessTime.dwLowDateTime=0x62a6a67, ftLastAccessTime.dwHighDateTime=0x1ca041a, ftLastWriteTime.dwLowDateTime=0x625a7ad, ftLastWriteTime.dwHighDateTime=0x1ca041a, nFileSizeHigh=0x0, nFileSizeLow=0x5000, dwReserved0=0x0, dwReserved1=0x0, cFileName="msadomd28.tlb", cAlternateFileName="")) returned 1 [0034.268] FindNextFileW (in: hFindFile=0x381d00, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8ad50fa2, ftCreationTime.dwHighDateTime=0x1cb892b, ftLastAccessTime.dwLowDateTime=0x8ad50fa2, ftLastAccessTime.dwHighDateTime=0x1cb892b, ftLastWriteTime.dwLowDateTime=0x8ad50fa2, ftLastWriteTime.dwHighDateTime=0x1cb892b, nFileSizeHigh=0x0, nFileSizeLow=0xf000, dwReserved0=0x0, dwReserved1=0x0, cFileName="msador15.dll", cAlternateFileName="")) returned 1 [0034.268] FindNextFileW (in: hFindFile=0x381d00, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9debf8b5, ftCreationTime.dwHighDateTime=0x1cb892b, ftLastAccessTime.dwLowDateTime=0x9debf8b5, ftLastAccessTime.dwHighDateTime=0x1cb892b, ftLastWriteTime.dwLowDateTime=0x9dee5a15, ftLastWriteTime.dwHighDateTime=0x1cb892b, nFileSizeHigh=0x0, nFileSizeLow=0x79000, dwReserved0=0x0, dwReserved1=0x0, cFileName="msadox.dll", cAlternateFileName="")) returned 1 [0034.269] FindNextFileW (in: hFindFile=0x381d00, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5fd3080, ftCreationTime.dwHighDateTime=0x1ca041a, ftLastAccessTime.dwLowDateTime=0x5fd3080, ftLastAccessTime.dwHighDateTime=0x1ca041a, ftLastWriteTime.dwLowDateTime=0x5f60c69, ftLastWriteTime.dwHighDateTime=0x1ca041a, nFileSizeHigh=0x0, nFileSizeLow=0x7000, dwReserved0=0x0, dwReserved1=0x0, cFileName="msadox28.tlb", cAlternateFileName="")) returned 1 [0034.269] FindNextFileW (in: hFindFile=0x381d00, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xbf55bba, ftCreationTime.dwHighDateTime=0x1ca041a, ftLastAccessTime.dwLowDateTime=0xbf55bba, ftLastAccessTime.dwHighDateTime=0x1ca041a, ftLastWriteTime.dwLowDateTime=0x347dbdb0, ftLastWriteTime.dwHighDateTime=0x1ca0424, nFileSizeHigh=0x0, nFileSizeLow=0x1a000, dwReserved0=0x0, dwReserved1=0x0, cFileName="msadrh15.dll", cAlternateFileName="")) returned 1 [0034.269] FindNextFileW (in: hFindFile=0x381d00, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xbf55bba, ftCreationTime.dwHighDateTime=0x1ca041a, ftLastAccessTime.dwLowDateTime=0xbf55bba, ftLastAccessTime.dwHighDateTime=0x1ca041a, ftLastWriteTime.dwLowDateTime=0x347dbdb0, ftLastWriteTime.dwHighDateTime=0x1ca0424, nFileSizeHigh=0x0, nFileSizeLow=0x1a000, dwReserved0=0x0, dwReserved1=0x0, cFileName="msadrh15.dll", cAlternateFileName="")) returned 0 [0034.269] FindClose (in: hFindFile=0x381d00 | out: hFindFile=0x381d00) returned 1 [0034.270] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e77c) returned 1 [0034.270] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e788) returned 1 [0034.270] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e744) returned 1 [0034.270] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Common Files\\System\\ado\\en-US", nBufferLength=0x105, lpBuffer=0x31e24c, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Common Files\\System\\ado\\en-US", lpFilePart=0x0) returned 0x2e [0034.270] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Common Files\\System\\ado\\en-US\\", nBufferLength=0x105, lpBuffer=0x31e220, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Common Files\\System\\ado\\en-US\\", lpFilePart=0x0) returned 0x2f [0034.270] FindFirstFileW (in: lpFileName="C:\\Program Files\\Common Files\\System\\ado\\en-US\\*", lpFindFileData=0x31e46c | out: lpFindFileData=0x31e46c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1eab37af, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x23ef19fc, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x1eab37af, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x381d00 [0034.271] FindNextFileW (in: hFindFile=0x381d00, lpFindFileData=0x31e47c | out: lpFindFileData=0x31e47c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1eab37af, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x23ef19fc, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x1eab37af, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0034.271] FindNextFileW (in: hFindFile=0x381d00, lpFindFileData=0x31e47c | out: lpFindFileData=0x31e47c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb2a152a, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0xb5e9110, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0xb2a152a, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x4400, dwReserved0=0x0, dwReserved1=0x0, cFileName="msader15.dll.mui", cAlternateFileName="")) returned 1 [0034.271] FindNextFileW (in: hFindFile=0x381d00, lpFindFileData=0x31e47c | out: lpFindFileData=0x31e47c*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0034.271] FindClose (in: hFindFile=0x381d00 | out: hFindFile=0x381d00) returned 1 [0034.271] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e704) returned 1 [0034.271] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e710) returned 1 [0034.271] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e744) returned 1 [0034.271] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Common Files\\System\\ado\\en-US", nBufferLength=0x105, lpBuffer=0x31e24c, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Common Files\\System\\ado\\en-US", lpFilePart=0x0) returned 0x2e [0034.271] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Common Files\\System\\ado\\en-US\\", nBufferLength=0x105, lpBuffer=0x31e220, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Common Files\\System\\ado\\en-US\\", lpFilePart=0x0) returned 0x2f [0034.272] FindFirstFileW (in: lpFileName="C:\\Program Files\\Common Files\\System\\ado\\en-US\\*", lpFindFileData=0x31e46c | out: lpFindFileData=0x31e46c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1eab37af, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x23ef19fc, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x1eab37af, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x381d00 [0034.272] FindNextFileW (in: hFindFile=0x381d00, lpFindFileData=0x31e47c | out: lpFindFileData=0x31e47c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1eab37af, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x23ef19fc, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x1eab37af, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0034.272] FindNextFileW (in: hFindFile=0x381d00, lpFindFileData=0x31e47c | out: lpFindFileData=0x31e47c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb2a152a, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0xb5e9110, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0xb2a152a, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x4400, dwReserved0=0x0, dwReserved1=0x0, cFileName="msader15.dll.mui", cAlternateFileName="")) returned 1 [0034.272] FindNextFileW (in: hFindFile=0x381d00, lpFindFileData=0x31e47c | out: lpFindFileData=0x31e47c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb2a152a, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0xb5e9110, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0xb2a152a, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x4400, dwReserved0=0x0, dwReserved1=0x0, cFileName="msader15.dll.mui", cAlternateFileName="")) returned 0 [0034.272] FindClose (in: hFindFile=0x381d00 | out: hFindFile=0x381d00) returned 1 [0034.272] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e704) returned 1 [0034.272] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e710) returned 1 [0034.272] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e7bc) returned 1 [0034.272] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Common Files\\System\\en-US", nBufferLength=0x105, lpBuffer=0x31e2c4, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Common Files\\System\\en-US", lpFilePart=0x0) returned 0x2a [0034.272] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Common Files\\System\\en-US\\", nBufferLength=0x105, lpBuffer=0x31e298, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Common Files\\System\\en-US\\", lpFilePart=0x0) returned 0x2b [0034.272] FindFirstFileW (in: lpFileName="C:\\Program Files\\Common Files\\System\\en-US\\*", lpFindFileData=0x31e4e4 | out: lpFindFileData=0x31e4e4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1eab37af, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x23ef19fc, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x1eab37af, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x381d00 [0034.273] FindNextFileW (in: hFindFile=0x381d00, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1eab37af, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x23ef19fc, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x1eab37af, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0034.273] FindNextFileW (in: hFindFile=0x381d00, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb313d55, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0xb5e9110, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0xb313d55, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x16e00, dwReserved0=0x0, dwReserved1=0x0, cFileName="wab32res.dll.mui", cAlternateFileName="")) returned 1 [0034.273] FindNextFileW (in: hFindFile=0x381d00, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0034.273] FindClose (in: hFindFile=0x381d00 | out: hFindFile=0x381d00) returned 1 [0034.273] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e77c) returned 1 [0034.273] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e788) returned 1 [0034.274] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e7bc) returned 1 [0034.274] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Common Files\\System\\en-US", nBufferLength=0x105, lpBuffer=0x31e2c4, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Common Files\\System\\en-US", lpFilePart=0x0) returned 0x2a [0034.274] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Common Files\\System\\en-US\\", nBufferLength=0x105, lpBuffer=0x31e298, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Common Files\\System\\en-US\\", lpFilePart=0x0) returned 0x2b [0034.274] FindFirstFileW (in: lpFileName="C:\\Program Files\\Common Files\\System\\en-US\\*", lpFindFileData=0x31e4e4 | out: lpFindFileData=0x31e4e4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1eab37af, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x23ef19fc, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x1eab37af, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x381d00 [0034.274] FindNextFileW (in: hFindFile=0x381d00, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1eab37af, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x23ef19fc, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x1eab37af, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0034.274] FindNextFileW (in: hFindFile=0x381d00, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb313d55, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0xb5e9110, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0xb313d55, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x16e00, dwReserved0=0x0, dwReserved1=0x0, cFileName="wab32res.dll.mui", cAlternateFileName="")) returned 1 [0034.274] FindNextFileW (in: hFindFile=0x381d00, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb313d55, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0xb5e9110, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0xb313d55, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x16e00, dwReserved0=0x0, dwReserved1=0x0, cFileName="wab32res.dll.mui", cAlternateFileName="")) returned 0 [0034.274] FindClose (in: hFindFile=0x381d00 | out: hFindFile=0x381d00) returned 1 [0034.275] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e77c) returned 1 [0034.275] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e788) returned 1 [0034.275] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e7bc) returned 1 [0034.275] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Common Files\\System\\msadc", nBufferLength=0x105, lpBuffer=0x31e2c4, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Common Files\\System\\msadc", lpFilePart=0x0) returned 0x2a [0034.275] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Common Files\\System\\msadc\\", nBufferLength=0x105, lpBuffer=0x31e298, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Common Files\\System\\msadc\\", lpFilePart=0x0) returned 0x2b [0034.275] FindFirstFileW (in: lpFileName="C:\\Program Files\\Common Files\\System\\msadc\\*", lpFindFileData=0x31e4e4 | out: lpFindFileData=0x31e4e4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd885082, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x1eab37af, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x1eab37af, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x381d00 [0034.277] FindNextFileW (in: hFindFile=0x381d00, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd885082, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x1eab37af, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x1eab37af, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0034.277] FindNextFileW (in: hFindFile=0x381d00, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa34c44b4, ftCreationTime.dwHighDateTime=0x1ca0409, ftLastAccessTime.dwLowDateTime=0xa34c44b4, ftLastAccessTime.dwHighDateTime=0x1ca0409, ftLastWriteTime.dwLowDateTime=0xa05a2bb2, ftLastWriteTime.dwHighDateTime=0x1ca03fb, nFileSizeHigh=0x0, nFileSizeLow=0x276, dwReserved0=0x0, dwReserved1=0x0, cFileName="adcjavas.inc", cAlternateFileName="")) returned 1 [0034.277] FindNextFileW (in: hFindFile=0x381d00, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa34ea611, ftCreationTime.dwHighDateTime=0x1ca0409, ftLastAccessTime.dwLowDateTime=0xa34ea611, ftLastAccessTime.dwHighDateTime=0x1ca0409, ftLastWriteTime.dwLowDateTime=0xa063b126, ftLastWriteTime.dwHighDateTime=0x1ca03fb, nFileSizeHigh=0x0, nFileSizeLow=0x26f, dwReserved0=0x0, dwReserved1=0x0, cFileName="adcvbs.inc", cAlternateFileName="")) returned 1 [0034.277] FindNextFileW (in: hFindFile=0x381d00, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1eab37af, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x23ef19fc, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x1eab37af, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="en-US", cAlternateFileName="")) returned 1 [0034.277] FindNextFileW (in: hFindFile=0x381d00, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2cac9e93, ftCreationTime.dwHighDateTime=0x1c9ea0b, ftLastAccessTime.dwLowDateTime=0x2cac9e93, ftLastAccessTime.dwHighDateTime=0x1c9ea0b, ftLastWriteTime.dwLowDateTime=0x2cac9e93, ftLastWriteTime.dwHighDateTime=0x1c9ea0b, nFileSizeHigh=0x0, nFileSizeLow=0x206, dwReserved0=0x0, dwReserved1=0x0, cFileName="handler.reg", cAlternateFileName="")) returned 1 [0034.278] FindNextFileW (in: hFindFile=0x381d00, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x70a4b8b3, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x70a4b8b3, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x2d63e7d9, ftLastWriteTime.dwHighDateTime=0x1c9ea0b, nFileSizeHigh=0x0, nFileSizeLow=0x24c, dwReserved0=0x0, dwReserved1=0x0, cFileName="handsafe.reg", cAlternateFileName="")) returned 1 [0034.278] FindNextFileW (in: hFindFile=0x381d00, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8b36a80d, ftCreationTime.dwHighDateTime=0x1cb892b, ftLastAccessTime.dwLowDateTime=0x8b36a80d, ftLastAccessTime.dwHighDateTime=0x1cb892b, ftLastWriteTime.dwLowDateTime=0x8b6180d2, ftLastWriteTime.dwHighDateTime=0x1cb892b, nFileSizeHigh=0x0, nFileSizeLow=0xb7000, dwReserved0=0x0, dwReserved1=0x0, cFileName="msadce.dll", cAlternateFileName="")) returned 1 [0034.278] FindNextFileW (in: hFindFile=0x381d00, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xfc13c33e, ftCreationTime.dwHighDateTime=0x1ca0419, ftLastAccessTime.dwLowDateTime=0xfc13c33e, ftLastAccessTime.dwHighDateTime=0x1ca0419, ftLastWriteTime.dwLowDateTime=0x80e1eed0, ftLastWriteTime.dwHighDateTime=0x1ca0422, nFileSizeHigh=0x0, nFileSizeLow=0x2000, dwReserved0=0x0, dwReserved1=0x0, cFileName="msadcer.dll", cAlternateFileName="")) returned 1 [0034.278] FindNextFileW (in: hFindFile=0x381d00, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8a9e4ffc, ftCreationTime.dwHighDateTime=0x1cb892b, ftLastAccessTime.dwLowDateTime=0x8a9e4ffc, ftLastAccessTime.dwHighDateTime=0x1cb892b, ftLastWriteTime.dwLowDateTime=0x8a9e4ffc, ftLastWriteTime.dwHighDateTime=0x1cb892b, nFileSizeHigh=0x0, nFileSizeLow=0x1c000, dwReserved0=0x0, dwReserved1=0x0, cFileName="msadcf.dll", cAlternateFileName="")) returned 1 [0034.278] FindNextFileW (in: hFindFile=0x381d00, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xfbf732e2, ftCreationTime.dwHighDateTime=0x1ca0419, ftLastAccessTime.dwLowDateTime=0xfbf732e2, ftLastAccessTime.dwHighDateTime=0x1ca0419, ftLastWriteTime.dwLowDateTime=0x80e6a9c0, ftLastWriteTime.dwHighDateTime=0x1ca0422, nFileSizeHigh=0x0, nFileSizeLow=0x2000, dwReserved0=0x0, dwReserved1=0x0, cFileName="msadcfr.dll", cAlternateFileName="")) returned 1 [0034.278] FindNextFileW (in: hFindFile=0x381d00, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8a9bee9c, ftCreationTime.dwHighDateTime=0x1cb892b, ftLastAccessTime.dwLowDateTime=0x8a9bee9c, ftLastAccessTime.dwHighDateTime=0x1cb892b, ftLastWriteTime.dwLowDateTime=0x8a9e4ffc, ftLastWriteTime.dwHighDateTime=0x1cb892b, nFileSizeHigh=0x0, nFileSizeLow=0x3f000, dwReserved0=0x0, dwReserved1=0x0, cFileName="msadco.dll", cAlternateFileName="")) returned 1 [0034.278] FindNextFileW (in: hFindFile=0x381d00, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xfc0a3dca, ftCreationTime.dwHighDateTime=0x1ca0419, ftLastAccessTime.dwLowDateTime=0xfc0a3dca, ftLastAccessTime.dwHighDateTime=0x1ca0419, ftLastWriteTime.dwLowDateTime=0x80edd5b0, ftLastWriteTime.dwHighDateTime=0x1ca0422, nFileSizeHigh=0x0, nFileSizeLow=0x2000, dwReserved0=0x0, dwReserved1=0x0, cFileName="msadcor.dll", cAlternateFileName="")) returned 1 [0034.278] FindNextFileW (in: hFindFile=0x381d00, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x84872aa8, ftCreationTime.dwHighDateTime=0x1cb892b, ftLastAccessTime.dwLowDateTime=0x84872aa8, ftLastAccessTime.dwHighDateTime=0x1cb892b, ftLastWriteTime.dwLowDateTime=0x84872aa8, ftLastWriteTime.dwHighDateTime=0x1cb892b, nFileSizeHigh=0x0, nFileSizeLow=0x18000, dwReserved0=0x0, dwReserved1=0x0, cFileName="msadcs.dll", cAlternateFileName="")) returned 1 [0034.278] FindNextFileW (in: hFindFile=0x381d00, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc3801e6, ftCreationTime.dwHighDateTime=0x1ca041a, ftLastAccessTime.dwLowDateTime=0xc3801e6, ftLastAccessTime.dwHighDateTime=0x1ca041a, ftLastWriteTime.dwLowDateTime=0x345eeb10, ftLastWriteTime.dwHighDateTime=0x1ca0424, nFileSizeHigh=0x0, nFileSizeLow=0x4a000, dwReserved0=0x0, dwReserved1=0x0, cFileName="msadds.dll", cAlternateFileName="")) returned 1 [0034.278] FindNextFileW (in: hFindFile=0x381d00, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xfce53b36, ftCreationTime.dwHighDateTime=0x1ca0419, ftLastAccessTime.dwLowDateTime=0xfce53b36, ftLastAccessTime.dwHighDateTime=0x1ca0419, ftLastWriteTime.dwLowDateTime=0x80fc2d90, ftLastWriteTime.dwHighDateTime=0x1ca0422, nFileSizeHigh=0x0, nFileSizeLow=0x2000, dwReserved0=0x0, dwReserved1=0x0, cFileName="msaddsr.dll", cAlternateFileName="")) returned 1 [0034.278] FindNextFileW (in: hFindFile=0x381d00, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xfd7d9276, ftCreationTime.dwHighDateTime=0x1ca0419, ftLastAccessTime.dwLowDateTime=0xfd7d9276, ftLastAccessTime.dwHighDateTime=0x1ca0419, ftLastWriteTime.dwLowDateTime=0x81dbdf30, ftLastWriteTime.dwHighDateTime=0x1ca0422, nFileSizeHigh=0x0, nFileSizeLow=0x2000, dwReserved0=0x0, dwReserved1=0x0, cFileName="msdaprsr.dll", cAlternateFileName="")) returned 1 [0034.279] FindNextFileW (in: hFindFile=0x381d00, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc0d295c, ftCreationTime.dwHighDateTime=0x1ca041a, ftLastAccessTime.dwLowDateTime=0xc0d295c, ftLastAccessTime.dwHighDateTime=0x1ca041a, ftLastWriteTime.dwLowDateTime=0x3497fc70, ftLastWriteTime.dwHighDateTime=0x1ca0424, nFileSizeHigh=0x0, nFileSizeLow=0x5f000, dwReserved0=0x0, dwReserved1=0x0, cFileName="msdaprst.dll", cAlternateFileName="")) returned 1 [0034.279] FindNextFileW (in: hFindFile=0x381d00, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x93fdbb10, ftCreationTime.dwHighDateTime=0x1cb892b, ftLastAccessTime.dwLowDateTime=0x93fdbb10, ftLastAccessTime.dwHighDateTime=0x1cb892b, ftLastWriteTime.dwLowDateTime=0x94001c70, ftLastWriteTime.dwHighDateTime=0x1cb892b, nFileSizeHigh=0x0, nFileSizeLow=0x3d000, dwReserved0=0x0, dwReserved1=0x0, cFileName="msdarem.dll", cAlternateFileName="")) returned 1 [0034.279] FindNextFileW (in: hFindFile=0x381d00, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xfd6a878e, ftCreationTime.dwHighDateTime=0x1ca0419, ftLastAccessTime.dwLowDateTime=0xfd6a878e, ftLastAccessTime.dwHighDateTime=0x1ca0419, ftLastWriteTime.dwLowDateTime=0x835d7620, ftLastWriteTime.dwHighDateTime=0x1ca0422, nFileSizeHigh=0x0, nFileSizeLow=0x2000, dwReserved0=0x0, dwReserved1=0x0, cFileName="msdaremr.dll", cAlternateFileName="")) returned 1 [0034.279] FindNextFileW (in: hFindFile=0x381d00, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x99d95dfd, ftCreationTime.dwHighDateTime=0x1cb892b, ftLastAccessTime.dwLowDateTime=0x99d95dfd, ftLastAccessTime.dwHighDateTime=0x1cb892b, ftLastWriteTime.dwLowDateTime=0x99dbbf5d, ftLastWriteTime.dwHighDateTime=0x1cb892b, nFileSizeHigh=0x0, nFileSizeLow=0xe000, dwReserved0=0x0, dwReserved1=0x0, cFileName="msdfmap.dll", cAlternateFileName="")) returned 1 [0034.279] FindNextFileW (in: hFindFile=0x381d00, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0034.279] FindClose (in: hFindFile=0x381d00 | out: hFindFile=0x381d00) returned 1 [0034.280] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e77c) returned 1 [0034.280] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e788) returned 1 [0034.280] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e7bc) returned 1 [0034.280] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Common Files\\System\\msadc", nBufferLength=0x105, lpBuffer=0x31e2c4, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Common Files\\System\\msadc", lpFilePart=0x0) returned 0x2a [0034.280] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Common Files\\System\\msadc\\", nBufferLength=0x105, lpBuffer=0x31e298, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Common Files\\System\\msadc\\", lpFilePart=0x0) returned 0x2b [0034.280] FindFirstFileW (in: lpFileName="C:\\Program Files\\Common Files\\System\\msadc\\*", lpFindFileData=0x31e4e4 | out: lpFindFileData=0x31e4e4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd885082, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x1eab37af, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x1eab37af, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x381d00 [0034.281] FindNextFileW (in: hFindFile=0x381d00, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd885082, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x1eab37af, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x1eab37af, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0034.281] FindNextFileW (in: hFindFile=0x381d00, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa34c44b4, ftCreationTime.dwHighDateTime=0x1ca0409, ftLastAccessTime.dwLowDateTime=0xa34c44b4, ftLastAccessTime.dwHighDateTime=0x1ca0409, ftLastWriteTime.dwLowDateTime=0xa05a2bb2, ftLastWriteTime.dwHighDateTime=0x1ca03fb, nFileSizeHigh=0x0, nFileSizeLow=0x276, dwReserved0=0x0, dwReserved1=0x0, cFileName="adcjavas.inc", cAlternateFileName="")) returned 1 [0034.281] FindNextFileW (in: hFindFile=0x381d00, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa34ea611, ftCreationTime.dwHighDateTime=0x1ca0409, ftLastAccessTime.dwLowDateTime=0xa34ea611, ftLastAccessTime.dwHighDateTime=0x1ca0409, ftLastWriteTime.dwLowDateTime=0xa063b126, ftLastWriteTime.dwHighDateTime=0x1ca03fb, nFileSizeHigh=0x0, nFileSizeLow=0x26f, dwReserved0=0x0, dwReserved1=0x0, cFileName="adcvbs.inc", cAlternateFileName="")) returned 1 [0034.281] FindNextFileW (in: hFindFile=0x381d00, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1eab37af, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x23ef19fc, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x1eab37af, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="en-US", cAlternateFileName="")) returned 1 [0034.281] FindNextFileW (in: hFindFile=0x381d00, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2cac9e93, ftCreationTime.dwHighDateTime=0x1c9ea0b, ftLastAccessTime.dwLowDateTime=0x2cac9e93, ftLastAccessTime.dwHighDateTime=0x1c9ea0b, ftLastWriteTime.dwLowDateTime=0x2cac9e93, ftLastWriteTime.dwHighDateTime=0x1c9ea0b, nFileSizeHigh=0x0, nFileSizeLow=0x206, dwReserved0=0x0, dwReserved1=0x0, cFileName="handler.reg", cAlternateFileName="")) returned 1 [0034.281] FindNextFileW (in: hFindFile=0x381d00, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x70a4b8b3, ftCreationTime.dwHighDateTime=0x1ca03fb, ftLastAccessTime.dwLowDateTime=0x70a4b8b3, ftLastAccessTime.dwHighDateTime=0x1ca03fb, ftLastWriteTime.dwLowDateTime=0x2d63e7d9, ftLastWriteTime.dwHighDateTime=0x1c9ea0b, nFileSizeHigh=0x0, nFileSizeLow=0x24c, dwReserved0=0x0, dwReserved1=0x0, cFileName="handsafe.reg", cAlternateFileName="")) returned 1 [0034.281] FindNextFileW (in: hFindFile=0x381d00, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8b36a80d, ftCreationTime.dwHighDateTime=0x1cb892b, ftLastAccessTime.dwLowDateTime=0x8b36a80d, ftLastAccessTime.dwHighDateTime=0x1cb892b, ftLastWriteTime.dwLowDateTime=0x8b6180d2, ftLastWriteTime.dwHighDateTime=0x1cb892b, nFileSizeHigh=0x0, nFileSizeLow=0xb7000, dwReserved0=0x0, dwReserved1=0x0, cFileName="msadce.dll", cAlternateFileName="")) returned 1 [0034.281] FindNextFileW (in: hFindFile=0x381d00, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xfc13c33e, ftCreationTime.dwHighDateTime=0x1ca0419, ftLastAccessTime.dwLowDateTime=0xfc13c33e, ftLastAccessTime.dwHighDateTime=0x1ca0419, ftLastWriteTime.dwLowDateTime=0x80e1eed0, ftLastWriteTime.dwHighDateTime=0x1ca0422, nFileSizeHigh=0x0, nFileSizeLow=0x2000, dwReserved0=0x0, dwReserved1=0x0, cFileName="msadcer.dll", cAlternateFileName="")) returned 1 [0034.282] FindNextFileW (in: hFindFile=0x381d00, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8a9e4ffc, ftCreationTime.dwHighDateTime=0x1cb892b, ftLastAccessTime.dwLowDateTime=0x8a9e4ffc, ftLastAccessTime.dwHighDateTime=0x1cb892b, ftLastWriteTime.dwLowDateTime=0x8a9e4ffc, ftLastWriteTime.dwHighDateTime=0x1cb892b, nFileSizeHigh=0x0, nFileSizeLow=0x1c000, dwReserved0=0x0, dwReserved1=0x0, cFileName="msadcf.dll", cAlternateFileName="")) returned 1 [0034.282] FindNextFileW (in: hFindFile=0x381d00, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xfbf732e2, ftCreationTime.dwHighDateTime=0x1ca0419, ftLastAccessTime.dwLowDateTime=0xfbf732e2, ftLastAccessTime.dwHighDateTime=0x1ca0419, ftLastWriteTime.dwLowDateTime=0x80e6a9c0, ftLastWriteTime.dwHighDateTime=0x1ca0422, nFileSizeHigh=0x0, nFileSizeLow=0x2000, dwReserved0=0x0, dwReserved1=0x0, cFileName="msadcfr.dll", cAlternateFileName="")) returned 1 [0034.282] FindNextFileW (in: hFindFile=0x381d00, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8a9bee9c, ftCreationTime.dwHighDateTime=0x1cb892b, ftLastAccessTime.dwLowDateTime=0x8a9bee9c, ftLastAccessTime.dwHighDateTime=0x1cb892b, ftLastWriteTime.dwLowDateTime=0x8a9e4ffc, ftLastWriteTime.dwHighDateTime=0x1cb892b, nFileSizeHigh=0x0, nFileSizeLow=0x3f000, dwReserved0=0x0, dwReserved1=0x0, cFileName="msadco.dll", cAlternateFileName="")) returned 1 [0034.282] FindNextFileW (in: hFindFile=0x381d00, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xfc0a3dca, ftCreationTime.dwHighDateTime=0x1ca0419, ftLastAccessTime.dwLowDateTime=0xfc0a3dca, ftLastAccessTime.dwHighDateTime=0x1ca0419, ftLastWriteTime.dwLowDateTime=0x80edd5b0, ftLastWriteTime.dwHighDateTime=0x1ca0422, nFileSizeHigh=0x0, nFileSizeLow=0x2000, dwReserved0=0x0, dwReserved1=0x0, cFileName="msadcor.dll", cAlternateFileName="")) returned 1 [0034.282] FindNextFileW (in: hFindFile=0x381d00, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x84872aa8, ftCreationTime.dwHighDateTime=0x1cb892b, ftLastAccessTime.dwLowDateTime=0x84872aa8, ftLastAccessTime.dwHighDateTime=0x1cb892b, ftLastWriteTime.dwLowDateTime=0x84872aa8, ftLastWriteTime.dwHighDateTime=0x1cb892b, nFileSizeHigh=0x0, nFileSizeLow=0x18000, dwReserved0=0x0, dwReserved1=0x0, cFileName="msadcs.dll", cAlternateFileName="")) returned 1 [0034.282] FindNextFileW (in: hFindFile=0x381d00, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc3801e6, ftCreationTime.dwHighDateTime=0x1ca041a, ftLastAccessTime.dwLowDateTime=0xc3801e6, ftLastAccessTime.dwHighDateTime=0x1ca041a, ftLastWriteTime.dwLowDateTime=0x345eeb10, ftLastWriteTime.dwHighDateTime=0x1ca0424, nFileSizeHigh=0x0, nFileSizeLow=0x4a000, dwReserved0=0x0, dwReserved1=0x0, cFileName="msadds.dll", cAlternateFileName="")) returned 1 [0034.282] FindNextFileW (in: hFindFile=0x381d00, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xfce53b36, ftCreationTime.dwHighDateTime=0x1ca0419, ftLastAccessTime.dwLowDateTime=0xfce53b36, ftLastAccessTime.dwHighDateTime=0x1ca0419, ftLastWriteTime.dwLowDateTime=0x80fc2d90, ftLastWriteTime.dwHighDateTime=0x1ca0422, nFileSizeHigh=0x0, nFileSizeLow=0x2000, dwReserved0=0x0, dwReserved1=0x0, cFileName="msaddsr.dll", cAlternateFileName="")) returned 1 [0034.282] FindNextFileW (in: hFindFile=0x381d00, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xfd7d9276, ftCreationTime.dwHighDateTime=0x1ca0419, ftLastAccessTime.dwLowDateTime=0xfd7d9276, ftLastAccessTime.dwHighDateTime=0x1ca0419, ftLastWriteTime.dwLowDateTime=0x81dbdf30, ftLastWriteTime.dwHighDateTime=0x1ca0422, nFileSizeHigh=0x0, nFileSizeLow=0x2000, dwReserved0=0x0, dwReserved1=0x0, cFileName="msdaprsr.dll", cAlternateFileName="")) returned 1 [0034.282] FindNextFileW (in: hFindFile=0x381d00, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc0d295c, ftCreationTime.dwHighDateTime=0x1ca041a, ftLastAccessTime.dwLowDateTime=0xc0d295c, ftLastAccessTime.dwHighDateTime=0x1ca041a, ftLastWriteTime.dwLowDateTime=0x3497fc70, ftLastWriteTime.dwHighDateTime=0x1ca0424, nFileSizeHigh=0x0, nFileSizeLow=0x5f000, dwReserved0=0x0, dwReserved1=0x0, cFileName="msdaprst.dll", cAlternateFileName="")) returned 1 [0034.283] FindNextFileW (in: hFindFile=0x381d00, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x93fdbb10, ftCreationTime.dwHighDateTime=0x1cb892b, ftLastAccessTime.dwLowDateTime=0x93fdbb10, ftLastAccessTime.dwHighDateTime=0x1cb892b, ftLastWriteTime.dwLowDateTime=0x94001c70, ftLastWriteTime.dwHighDateTime=0x1cb892b, nFileSizeHigh=0x0, nFileSizeLow=0x3d000, dwReserved0=0x0, dwReserved1=0x0, cFileName="msdarem.dll", cAlternateFileName="")) returned 1 [0034.283] FindNextFileW (in: hFindFile=0x381d00, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xfd6a878e, ftCreationTime.dwHighDateTime=0x1ca0419, ftLastAccessTime.dwLowDateTime=0xfd6a878e, ftLastAccessTime.dwHighDateTime=0x1ca0419, ftLastWriteTime.dwLowDateTime=0x835d7620, ftLastWriteTime.dwHighDateTime=0x1ca0422, nFileSizeHigh=0x0, nFileSizeLow=0x2000, dwReserved0=0x0, dwReserved1=0x0, cFileName="msdaremr.dll", cAlternateFileName="")) returned 1 [0034.283] FindNextFileW (in: hFindFile=0x381d00, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x99d95dfd, ftCreationTime.dwHighDateTime=0x1cb892b, ftLastAccessTime.dwLowDateTime=0x99d95dfd, ftLastAccessTime.dwHighDateTime=0x1cb892b, ftLastWriteTime.dwLowDateTime=0x99dbbf5d, ftLastWriteTime.dwHighDateTime=0x1cb892b, nFileSizeHigh=0x0, nFileSizeLow=0xe000, dwReserved0=0x0, dwReserved1=0x0, cFileName="msdfmap.dll", cAlternateFileName="")) returned 1 [0034.283] FindNextFileW (in: hFindFile=0x381d00, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x99d95dfd, ftCreationTime.dwHighDateTime=0x1cb892b, ftLastAccessTime.dwLowDateTime=0x99d95dfd, ftLastAccessTime.dwHighDateTime=0x1cb892b, ftLastWriteTime.dwLowDateTime=0x99dbbf5d, ftLastWriteTime.dwHighDateTime=0x1cb892b, nFileSizeHigh=0x0, nFileSizeLow=0xe000, dwReserved0=0x0, dwReserved1=0x0, cFileName="msdfmap.dll", cAlternateFileName="")) returned 0 [0034.283] FindClose (in: hFindFile=0x381d00 | out: hFindFile=0x381d00) returned 1 [0034.284] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e77c) returned 1 [0034.284] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e788) returned 1 [0034.284] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e744) returned 1 [0034.284] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Common Files\\System\\msadc\\en-US", nBufferLength=0x105, lpBuffer=0x31e24c, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Common Files\\System\\msadc\\en-US", lpFilePart=0x0) returned 0x30 [0034.284] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Common Files\\System\\msadc\\en-US\\", nBufferLength=0x105, lpBuffer=0x31e220, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Common Files\\System\\msadc\\en-US\\", lpFilePart=0x0) returned 0x31 [0034.284] FindFirstFileW (in: lpFileName="C:\\Program Files\\Common Files\\System\\msadc\\en-US\\*", lpFindFileData=0x31e46c | out: lpFindFileData=0x31e46c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1eab37af, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x23ef19fc, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x1eab37af, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x381d00 [0034.286] FindNextFileW (in: hFindFile=0x381d00, lpFindFileData=0x31e47c | out: lpFindFileData=0x31e47c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1eab37af, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x23ef19fc, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x1eab37af, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0034.286] FindNextFileW (in: hFindFile=0x381d00, lpFindFileData=0x31e47c | out: lpFindFileData=0x31e47c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9351968, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x95b44f8, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x9351968, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x2600, dwReserved0=0x0, dwReserved1=0x0, cFileName="msadcer.dll.mui", cAlternateFileName="")) returned 1 [0034.286] FindNextFileW (in: hFindFile=0x381d00, lpFindFileData=0x31e47c | out: lpFindFileData=0x31e47c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc32e361, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0xc60371c, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0xc32e361, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x1400, dwReserved0=0x0, dwReserved1=0x0, cFileName="msadcfr.dll.mui", cAlternateFileName="")) returned 1 [0034.286] FindNextFileW (in: hFindFile=0x381d00, lpFindFileData=0x31e47c | out: lpFindFileData=0x31e47c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9a073ed, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x9e34029, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x9a073ed, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x1600, dwReserved0=0x0, dwReserved1=0x0, cFileName="msadcor.dll.mui", cAlternateFileName="")) returned 1 [0034.286] FindNextFileW (in: hFindFile=0x381d00, lpFindFileData=0x31e47c | out: lpFindFileData=0x31e47c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x93053f6, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x95b44f8, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x93053f6, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x3600, dwReserved0=0x0, dwReserved1=0x0, cFileName="msaddsr.dll.mui", cAlternateFileName="")) returned 1 [0034.287] FindNextFileW (in: hFindFile=0x381d00, lpFindFileData=0x31e47c | out: lpFindFileData=0x31e47c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb313d55, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0xb5e9110, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0xb313d55, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x1c00, dwReserved0=0x0, dwReserved1=0x0, cFileName="msdaprsr.dll.mui", cAlternateFileName="")) returned 1 [0034.287] FindNextFileW (in: hFindFile=0x381d00, lpFindFileData=0x31e47c | out: lpFindFileData=0x31e47c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x92b8e84, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x95b44f8, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x92b8e84, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x1600, dwReserved0=0x0, dwReserved1=0x0, cFileName="msdaremr.dll.mui", cAlternateFileName="")) returned 1 [0034.287] FindNextFileW (in: hFindFile=0x381d00, lpFindFileData=0x31e47c | out: lpFindFileData=0x31e47c*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0034.287] FindClose (in: hFindFile=0x381d00 | out: hFindFile=0x381d00) returned 1 [0034.287] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e704) returned 1 [0034.287] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e710) returned 1 [0034.287] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e744) returned 1 [0034.287] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Common Files\\System\\msadc\\en-US", nBufferLength=0x105, lpBuffer=0x31e24c, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Common Files\\System\\msadc\\en-US", lpFilePart=0x0) returned 0x30 [0034.288] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Common Files\\System\\msadc\\en-US\\", nBufferLength=0x105, lpBuffer=0x31e220, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Common Files\\System\\msadc\\en-US\\", lpFilePart=0x0) returned 0x31 [0034.288] FindFirstFileW (in: lpFileName="C:\\Program Files\\Common Files\\System\\msadc\\en-US\\*", lpFindFileData=0x31e46c | out: lpFindFileData=0x31e46c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1eab37af, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x23ef19fc, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x1eab37af, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x381d00 [0034.288] FindNextFileW (in: hFindFile=0x381d00, lpFindFileData=0x31e47c | out: lpFindFileData=0x31e47c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1eab37af, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x23ef19fc, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x1eab37af, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0034.288] FindNextFileW (in: hFindFile=0x381d00, lpFindFileData=0x31e47c | out: lpFindFileData=0x31e47c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9351968, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x95b44f8, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x9351968, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x2600, dwReserved0=0x0, dwReserved1=0x0, cFileName="msadcer.dll.mui", cAlternateFileName="")) returned 1 [0034.289] FindNextFileW (in: hFindFile=0x381d00, lpFindFileData=0x31e47c | out: lpFindFileData=0x31e47c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc32e361, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0xc60371c, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0xc32e361, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x1400, dwReserved0=0x0, dwReserved1=0x0, cFileName="msadcfr.dll.mui", cAlternateFileName="")) returned 1 [0034.289] FindNextFileW (in: hFindFile=0x381d00, lpFindFileData=0x31e47c | out: lpFindFileData=0x31e47c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9a073ed, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x9e34029, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x9a073ed, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x1600, dwReserved0=0x0, dwReserved1=0x0, cFileName="msadcor.dll.mui", cAlternateFileName="")) returned 1 [0034.289] FindNextFileW (in: hFindFile=0x381d00, lpFindFileData=0x31e47c | out: lpFindFileData=0x31e47c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x93053f6, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x95b44f8, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x93053f6, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x3600, dwReserved0=0x0, dwReserved1=0x0, cFileName="msaddsr.dll.mui", cAlternateFileName="")) returned 1 [0034.289] FindNextFileW (in: hFindFile=0x381d00, lpFindFileData=0x31e47c | out: lpFindFileData=0x31e47c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb313d55, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0xb5e9110, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0xb313d55, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x1c00, dwReserved0=0x0, dwReserved1=0x0, cFileName="msdaprsr.dll.mui", cAlternateFileName="")) returned 1 [0034.289] FindNextFileW (in: hFindFile=0x381d00, lpFindFileData=0x31e47c | out: lpFindFileData=0x31e47c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x92b8e84, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x95b44f8, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x92b8e84, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x1600, dwReserved0=0x0, dwReserved1=0x0, cFileName="msdaremr.dll.mui", cAlternateFileName="")) returned 1 [0034.289] FindNextFileW (in: hFindFile=0x381d00, lpFindFileData=0x31e47c | out: lpFindFileData=0x31e47c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x92b8e84, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x95b44f8, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x92b8e84, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x1600, dwReserved0=0x0, dwReserved1=0x0, cFileName="msdaremr.dll.mui", cAlternateFileName="")) returned 0 [0034.290] FindClose (in: hFindFile=0x381d00 | out: hFindFile=0x381d00) returned 1 [0034.290] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e704) returned 1 [0034.290] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e710) returned 1 [0034.290] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e7bc) returned 1 [0034.290] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Common Files\\System\\MSMAPI", nBufferLength=0x105, lpBuffer=0x31e2c4, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Common Files\\System\\MSMAPI", lpFilePart=0x0) returned 0x2b [0034.290] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Common Files\\System\\MSMAPI\\", nBufferLength=0x105, lpBuffer=0x31e298, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Common Files\\System\\MSMAPI\\", lpFilePart=0x0) returned 0x2c [0034.290] FindFirstFileW (in: lpFileName="C:\\Program Files\\Common Files\\System\\MSMAPI\\*", lpFindFileData=0x31e4e4 | out: lpFindFileData=0x31e4e4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf53e90, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0xf53e90, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xf53e90, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x381d00 [0034.291] FindNextFileW (in: hFindFile=0x381d00, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf53e90, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0xf53e90, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xf53e90, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0034.291] FindNextFileW (in: hFindFile=0x381d00, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf53e90, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0xf53e90, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xf53e90, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="1033", cAlternateFileName="")) returned 1 [0034.292] FindNextFileW (in: hFindFile=0x381d00, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf53e90, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0xf53e90, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xf53e90, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="1033", cAlternateFileName="")) returned 0 [0034.292] FindClose (in: hFindFile=0x381d00 | out: hFindFile=0x381d00) returned 1 [0034.292] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e77c) returned 1 [0034.292] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e788) returned 1 [0034.292] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e7bc) returned 1 [0034.292] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Common Files\\System\\MSMAPI", nBufferLength=0x105, lpBuffer=0x31e2c4, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Common Files\\System\\MSMAPI", lpFilePart=0x0) returned 0x2b [0034.292] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Common Files\\System\\MSMAPI\\", nBufferLength=0x105, lpBuffer=0x31e298, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Common Files\\System\\MSMAPI\\", lpFilePart=0x0) returned 0x2c [0034.292] FindFirstFileW (in: lpFileName="C:\\Program Files\\Common Files\\System\\MSMAPI\\*", lpFindFileData=0x31e4e4 | out: lpFindFileData=0x31e4e4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf53e90, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0xf53e90, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xf53e90, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x381d00 [0034.292] FindNextFileW (in: hFindFile=0x381d00, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf53e90, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0xf53e90, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xf53e90, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0034.292] FindNextFileW (in: hFindFile=0x381d00, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf53e90, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0xf53e90, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xf53e90, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="1033", cAlternateFileName="")) returned 1 [0034.292] FindNextFileW (in: hFindFile=0x381d00, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0034.292] FindClose (in: hFindFile=0x381d00 | out: hFindFile=0x381d00) returned 1 [0034.292] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e77c) returned 1 [0034.292] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e788) returned 1 [0034.292] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e744) returned 1 [0034.292] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Common Files\\System\\MSMAPI\\1033", nBufferLength=0x105, lpBuffer=0x31e24c, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Common Files\\System\\MSMAPI\\1033", lpFilePart=0x0) returned 0x30 [0034.292] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Common Files\\System\\MSMAPI\\1033\\", nBufferLength=0x105, lpBuffer=0x31e220, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Common Files\\System\\MSMAPI\\1033\\", lpFilePart=0x0) returned 0x31 [0034.293] FindFirstFileW (in: lpFileName="C:\\Program Files\\Common Files\\System\\MSMAPI\\1033\\*", lpFindFileData=0x31e46c | out: lpFindFileData=0x31e46c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf53e90, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0xf53e90, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xf53e90, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x381d00 [0034.293] FindNextFileW (in: hFindFile=0x381d00, lpFindFileData=0x31e47c | out: lpFindFileData=0x31e47c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf53e90, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0xf53e90, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xf53e90, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0034.293] FindNextFileW (in: hFindFile=0x381d00, lpFindFileData=0x31e47c | out: lpFindFileData=0x31e47c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x324d2e00, ftCreationTime.dwHighDateTime=0x1caca25, ftLastAccessTime.dwLowDateTime=0xf53e90, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x324d2e00, ftLastWriteTime.dwHighDateTime=0x1caca25, nFileSizeHigh=0x0, nFileSizeLow=0xe580, dwReserved0=0x0, dwReserved1=0x0, cFileName="MSMAPI32.DLL", cAlternateFileName="")) returned 1 [0034.293] FindNextFileW (in: hFindFile=0x381d00, lpFindFileData=0x31e47c | out: lpFindFileData=0x31e47c*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0034.293] FindClose (in: hFindFile=0x381d00 | out: hFindFile=0x381d00) returned 1 [0034.293] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e704) returned 1 [0034.293] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e710) returned 1 [0034.293] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e744) returned 1 [0034.293] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Common Files\\System\\MSMAPI\\1033", nBufferLength=0x105, lpBuffer=0x31e24c, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Common Files\\System\\MSMAPI\\1033", lpFilePart=0x0) returned 0x30 [0034.293] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Common Files\\System\\MSMAPI\\1033\\", nBufferLength=0x105, lpBuffer=0x31e220, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Common Files\\System\\MSMAPI\\1033\\", lpFilePart=0x0) returned 0x31 [0034.293] FindFirstFileW (in: lpFileName="C:\\Program Files\\Common Files\\System\\MSMAPI\\1033\\*", lpFindFileData=0x31e46c | out: lpFindFileData=0x31e46c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf53e90, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0xf53e90, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xf53e90, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x381d00 [0034.293] FindNextFileW (in: hFindFile=0x381d00, lpFindFileData=0x31e47c | out: lpFindFileData=0x31e47c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf53e90, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0xf53e90, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xf53e90, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0034.294] FindNextFileW (in: hFindFile=0x381d00, lpFindFileData=0x31e47c | out: lpFindFileData=0x31e47c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x324d2e00, ftCreationTime.dwHighDateTime=0x1caca25, ftLastAccessTime.dwLowDateTime=0xf53e90, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x324d2e00, ftLastWriteTime.dwHighDateTime=0x1caca25, nFileSizeHigh=0x0, nFileSizeLow=0xe580, dwReserved0=0x0, dwReserved1=0x0, cFileName="MSMAPI32.DLL", cAlternateFileName="")) returned 1 [0034.294] FindNextFileW (in: hFindFile=0x381d00, lpFindFileData=0x31e47c | out: lpFindFileData=0x31e47c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x324d2e00, ftCreationTime.dwHighDateTime=0x1caca25, ftLastAccessTime.dwLowDateTime=0xf53e90, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x324d2e00, ftLastWriteTime.dwHighDateTime=0x1caca25, nFileSizeHigh=0x0, nFileSizeLow=0xe580, dwReserved0=0x0, dwReserved1=0x0, cFileName="MSMAPI32.DLL", cAlternateFileName="")) returned 0 [0034.294] FindClose (in: hFindFile=0x381d00 | out: hFindFile=0x381d00) returned 1 [0034.294] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e704) returned 1 [0034.294] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e710) returned 1 [0034.294] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e7bc) returned 1 [0034.294] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Common Files\\System\\Ole DB", nBufferLength=0x105, lpBuffer=0x31e2c4, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Common Files\\System\\Ole DB", lpFilePart=0x0) returned 0x2b [0034.294] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Common Files\\System\\Ole DB\\", nBufferLength=0x105, lpBuffer=0x31e298, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Common Files\\System\\Ole DB\\", lpFilePart=0x0) returned 0x2c [0034.294] FindFirstFileW (in: lpFileName="C:\\Program Files\\Common Files\\System\\Ole DB\\*", lpFindFileData=0x31e4e4 | out: lpFindFileData=0x31e4e4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd885082, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x5f324e30, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x5f324e30, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x381d00 [0034.296] FindNextFileW (in: hFindFile=0x381d00, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd885082, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x5f324e30, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x5f324e30, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0034.296] FindNextFileW (in: hFindFile=0x381d00, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1eab37af, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x23ef19fc, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x1eab37af, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="en-US", cAlternateFileName="")) returned 1 [0034.296] FindNextFileW (in: hFindFile=0x381d00, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9ad34e79, ftCreationTime.dwHighDateTime=0x1cb892b, ftLastAccessTime.dwLowDateTime=0x9ad34e79, ftLastAccessTime.dwHighDateTime=0x1cb892b, ftLastWriteTime.dwLowDateTime=0x9ad5afda, ftLastWriteTime.dwHighDateTime=0x1cb892b, nFileSizeHigh=0x0, nFileSizeLow=0x1f000, dwReserved0=0x0, dwReserved1=0x0, cFileName="msdaosp.dll", cAlternateFileName="")) returned 1 [0034.296] FindNextFileW (in: hFindFile=0x381d00, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x14cd0c35, ftCreationTime.dwHighDateTime=0x1ca041a, ftLastAccessTime.dwLowDateTime=0x14cd0c35, ftLastAccessTime.dwHighDateTime=0x1ca041a, ftLastWriteTime.dwLowDateTime=0x349a6d70, ftLastWriteTime.dwHighDateTime=0x1ca0424, nFileSizeHigh=0x0, nFileSizeLow=0x6a000, dwReserved0=0x0, dwReserved1=0x0, cFileName="msdaps.dll", cAlternateFileName="")) returned 1 [0034.296] FindNextFileW (in: hFindFile=0x381d00, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x86c0138a, ftCreationTime.dwHighDateTime=0x1cb892b, ftLastAccessTime.dwLowDateTime=0x86c0138a, ftLastAccessTime.dwHighDateTime=0x1cb892b, ftLastWriteTime.dwLowDateTime=0x86c0138a, ftLastWriteTime.dwHighDateTime=0x1cb892b, nFileSizeHigh=0x0, nFileSizeLow=0xb6000, dwReserved0=0x0, dwReserved1=0x0, cFileName="msdasql.dll", cAlternateFileName="")) returned 1 [0034.296] FindNextFileW (in: hFindFile=0x381d00, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2ab69cf, ftCreationTime.dwHighDateTime=0x1ca041a, ftLastAccessTime.dwLowDateTime=0x2ab69cf, ftLastAccessTime.dwHighDateTime=0x1ca041a, ftLastWriteTime.dwLowDateTime=0x838ac7b0, ftLastWriteTime.dwHighDateTime=0x1ca0422, nFileSizeHigh=0x0, nFileSizeLow=0xf000, dwReserved0=0x0, dwReserved1=0x0, cFileName="msdasqlr.dll", cAlternateFileName="")) returned 1 [0034.296] FindNextFileW (in: hFindFile=0x381d00, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xfc3c3a6b, ftCreationTime.dwHighDateTime=0x1ca0419, ftLastAccessTime.dwLowDateTime=0xfc3c3a6b, ftLastAccessTime.dwHighDateTime=0x1ca0419, ftLastWriteTime.dwLowDateTime=0x349f2860, ftLastWriteTime.dwHighDateTime=0x1ca0424, nFileSizeHigh=0x0, nFileSizeLow=0x20000, dwReserved0=0x0, dwReserved1=0x0, cFileName="msdatl3.dll", cAlternateFileName="")) returned 1 [0034.296] FindNextFileW (in: hFindFile=0x381d00, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1d2cdc0, ftCreationTime.dwHighDateTime=0x1ca041a, ftLastAccessTime.dwLowDateTime=0x1d2cdc0, ftLastAccessTime.dwHighDateTime=0x1ca041a, ftLastWriteTime.dwLowDateTime=0x383128c0, ftLastWriteTime.dwHighDateTime=0x1ca0424, nFileSizeHigh=0x0, nFileSizeLow=0x9000, dwReserved0=0x0, dwReserved1=0x0, cFileName="msxactps.dll", cAlternateFileName="")) returned 1 [0034.296] FindNextFileW (in: hFindFile=0x381d00, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x84c2ad0f, ftCreationTime.dwHighDateTime=0x1cb892b, ftLastAccessTime.dwLowDateTime=0x84c2ad0f, ftLastAccessTime.dwHighDateTime=0x1cb892b, ftLastWriteTime.dwLowDateTime=0x84c50e6f, ftLastWriteTime.dwHighDateTime=0x1cb892b, nFileSizeHigh=0x0, nFileSizeLow=0x10d000, dwReserved0=0x0, dwReserved1=0x0, cFileName="oledb32.dll", cAlternateFileName="")) returned 1 [0034.296] FindNextFileW (in: hFindFile=0x381d00, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xfabf604b, ftCreationTime.dwHighDateTime=0x1ca0419, ftLastAccessTime.dwLowDateTime=0xfabf604b, ftLastAccessTime.dwHighDateTime=0x1ca0419, ftLastWriteTime.dwLowDateTime=0xdf9a48f0, ftLastWriteTime.dwHighDateTime=0x1ca0422, nFileSizeHigh=0x0, nFileSizeLow=0x14000, dwReserved0=0x0, dwReserved1=0x0, cFileName="oledb32r.dll", cAlternateFileName="")) returned 1 [0034.296] FindNextFileW (in: hFindFile=0x381d00, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa542845b, ftCreationTime.dwHighDateTime=0x1ca0409, ftLastAccessTime.dwLowDateTime=0xa542845b, ftLastAccessTime.dwHighDateTime=0x1ca0409, ftLastWriteTime.dwLowDateTime=0xa4ffde2f, ftLastWriteTime.dwHighDateTime=0x1ca0409, nFileSizeHigh=0x0, nFileSizeLow=0x264c, dwReserved0=0x0, dwReserved1=0x0, cFileName="oledbjvs.inc", cAlternateFileName="")) returned 1 [0034.297] FindNextFileW (in: hFindFile=0x381d00, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa542845b, ftCreationTime.dwHighDateTime=0x1ca0409, ftLastAccessTime.dwLowDateTime=0xa542845b, ftLastAccessTime.dwHighDateTime=0x1ca0409, ftLastWriteTime.dwLowDateTime=0xa52d1816, ftLastWriteTime.dwHighDateTime=0x1ca0409, nFileSizeHigh=0x0, nFileSizeLow=0x26f7, dwReserved0=0x0, dwReserved1=0x0, cFileName="oledbvbs.inc", cAlternateFileName="")) returned 1 [0034.297] FindNextFileW (in: hFindFile=0x381d00, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x92f0bf91, ftCreationTime.dwHighDateTime=0x1cb892b, ftLastAccessTime.dwLowDateTime=0x92f0bf91, ftLastAccessTime.dwHighDateTime=0x1cb892b, ftLastWriteTime.dwLowDateTime=0x92f320f1, ftLastWriteTime.dwHighDateTime=0x1cb892b, nFileSizeHigh=0x0, nFileSizeLow=0x128000, dwReserved0=0x0, dwReserved1=0x0, cFileName="sqloledb.dll", cAlternateFileName="")) returned 1 [0034.297] FindNextFileW (in: hFindFile=0x381d00, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xcc9350f, ftCreationTime.dwHighDateTime=0x1ca041a, ftLastAccessTime.dwLowDateTime=0xcc9350f, ftLastAccessTime.dwHighDateTime=0x1ca041a, ftLastWriteTime.dwLowDateTime=0xcc210f8, ftLastWriteTime.dwHighDateTime=0x1ca041a, nFileSizeHigh=0x0, nFileSizeLow=0x4000, dwReserved0=0x0, dwReserved1=0x0, cFileName="sqloledb.rll", cAlternateFileName="")) returned 1 [0034.297] FindNextFileW (in: hFindFile=0x381d00, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x14f7e4bf, ftCreationTime.dwHighDateTime=0x1ca041a, ftLastAccessTime.dwLowDateTime=0x14f7e4bf, ftLastAccessTime.dwHighDateTime=0x1ca041a, ftLastWriteTime.dwLowDateTime=0x44773fc0, ftLastWriteTime.dwHighDateTime=0x1ca0424, nFileSizeHigh=0x0, nFileSizeLow=0x59000, dwReserved0=0x0, dwReserved1=0x0, cFileName="sqlxmlx.dll", cAlternateFileName="")) returned 1 [0034.297] FindNextFileW (in: hFindFile=0x381d00, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc9e5c85, ftCreationTime.dwHighDateTime=0x1ca041a, ftLastAccessTime.dwLowDateTime=0xc9e5c85, ftLastAccessTime.dwHighDateTime=0x1ca041a, ftLastWriteTime.dwLowDateTime=0xc97386e, ftLastWriteTime.dwHighDateTime=0x1ca041a, nFileSizeHigh=0x0, nFileSizeLow=0x2000, dwReserved0=0x0, dwReserved1=0x0, cFileName="sqlxmlx.rll", cAlternateFileName="")) returned 1 [0034.297] FindNextFileW (in: hFindFile=0x381d00, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xbc7a4200, ftCreationTime.dwHighDateTime=0x1c8e202, ftLastAccessTime.dwLowDateTime=0x5f34af90, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xbc7a4200, ftLastWriteTime.dwHighDateTime=0x1c8e202, nFileSizeHigh=0x0, nFileSizeLow=0x44e18, dwReserved0=0x0, dwReserved1=0x0, cFileName="xmlrw.dll", cAlternateFileName="")) returned 1 [0034.297] FindNextFileW (in: hFindFile=0x381d00, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xbc7a4200, ftCreationTime.dwHighDateTime=0x1c8e202, ftLastAccessTime.dwLowDateTime=0x516f5b30, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xbc7a4200, ftLastWriteTime.dwHighDateTime=0x1c8e202, nFileSizeHigh=0x0, nFileSizeLow=0x30a18, dwReserved0=0x0, dwReserved1=0x0, cFileName="xmlrwbin.dll", cAlternateFileName="")) returned 1 [0034.297] FindNextFileW (in: hFindFile=0x381d00, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0034.297] FindClose (in: hFindFile=0x381d00 | out: hFindFile=0x381d00) returned 1 [0034.298] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e77c) returned 1 [0034.298] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e788) returned 1 [0034.298] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e7bc) returned 1 [0034.298] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Common Files\\System\\Ole DB", nBufferLength=0x105, lpBuffer=0x31e2c4, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Common Files\\System\\Ole DB", lpFilePart=0x0) returned 0x2b [0034.298] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Common Files\\System\\Ole DB\\", nBufferLength=0x105, lpBuffer=0x31e298, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Common Files\\System\\Ole DB\\", lpFilePart=0x0) returned 0x2c [0034.298] FindFirstFileW (in: lpFileName="C:\\Program Files\\Common Files\\System\\Ole DB\\*", lpFindFileData=0x31e4e4 | out: lpFindFileData=0x31e4e4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd885082, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x5f324e30, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x5f324e30, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x381d00 [0034.299] FindNextFileW (in: hFindFile=0x381d00, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd885082, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x5f324e30, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x5f324e30, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0034.299] FindNextFileW (in: hFindFile=0x381d00, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1eab37af, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x23ef19fc, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x1eab37af, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="en-US", cAlternateFileName="")) returned 1 [0034.299] FindNextFileW (in: hFindFile=0x381d00, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9ad34e79, ftCreationTime.dwHighDateTime=0x1cb892b, ftLastAccessTime.dwLowDateTime=0x9ad34e79, ftLastAccessTime.dwHighDateTime=0x1cb892b, ftLastWriteTime.dwLowDateTime=0x9ad5afda, ftLastWriteTime.dwHighDateTime=0x1cb892b, nFileSizeHigh=0x0, nFileSizeLow=0x1f000, dwReserved0=0x0, dwReserved1=0x0, cFileName="msdaosp.dll", cAlternateFileName="")) returned 1 [0034.299] FindNextFileW (in: hFindFile=0x381d00, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x14cd0c35, ftCreationTime.dwHighDateTime=0x1ca041a, ftLastAccessTime.dwLowDateTime=0x14cd0c35, ftLastAccessTime.dwHighDateTime=0x1ca041a, ftLastWriteTime.dwLowDateTime=0x349a6d70, ftLastWriteTime.dwHighDateTime=0x1ca0424, nFileSizeHigh=0x0, nFileSizeLow=0x6a000, dwReserved0=0x0, dwReserved1=0x0, cFileName="msdaps.dll", cAlternateFileName="")) returned 1 [0034.299] FindNextFileW (in: hFindFile=0x381d00, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x86c0138a, ftCreationTime.dwHighDateTime=0x1cb892b, ftLastAccessTime.dwLowDateTime=0x86c0138a, ftLastAccessTime.dwHighDateTime=0x1cb892b, ftLastWriteTime.dwLowDateTime=0x86c0138a, ftLastWriteTime.dwHighDateTime=0x1cb892b, nFileSizeHigh=0x0, nFileSizeLow=0xb6000, dwReserved0=0x0, dwReserved1=0x0, cFileName="msdasql.dll", cAlternateFileName="")) returned 1 [0034.299] FindNextFileW (in: hFindFile=0x381d00, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2ab69cf, ftCreationTime.dwHighDateTime=0x1ca041a, ftLastAccessTime.dwLowDateTime=0x2ab69cf, ftLastAccessTime.dwHighDateTime=0x1ca041a, ftLastWriteTime.dwLowDateTime=0x838ac7b0, ftLastWriteTime.dwHighDateTime=0x1ca0422, nFileSizeHigh=0x0, nFileSizeLow=0xf000, dwReserved0=0x0, dwReserved1=0x0, cFileName="msdasqlr.dll", cAlternateFileName="")) returned 1 [0034.299] FindNextFileW (in: hFindFile=0x381d00, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xfc3c3a6b, ftCreationTime.dwHighDateTime=0x1ca0419, ftLastAccessTime.dwLowDateTime=0xfc3c3a6b, ftLastAccessTime.dwHighDateTime=0x1ca0419, ftLastWriteTime.dwLowDateTime=0x349f2860, ftLastWriteTime.dwHighDateTime=0x1ca0424, nFileSizeHigh=0x0, nFileSizeLow=0x20000, dwReserved0=0x0, dwReserved1=0x0, cFileName="msdatl3.dll", cAlternateFileName="")) returned 1 [0034.300] FindNextFileW (in: hFindFile=0x381d00, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1d2cdc0, ftCreationTime.dwHighDateTime=0x1ca041a, ftLastAccessTime.dwLowDateTime=0x1d2cdc0, ftLastAccessTime.dwHighDateTime=0x1ca041a, ftLastWriteTime.dwLowDateTime=0x383128c0, ftLastWriteTime.dwHighDateTime=0x1ca0424, nFileSizeHigh=0x0, nFileSizeLow=0x9000, dwReserved0=0x0, dwReserved1=0x0, cFileName="msxactps.dll", cAlternateFileName="")) returned 1 [0034.300] FindNextFileW (in: hFindFile=0x381d00, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x84c2ad0f, ftCreationTime.dwHighDateTime=0x1cb892b, ftLastAccessTime.dwLowDateTime=0x84c2ad0f, ftLastAccessTime.dwHighDateTime=0x1cb892b, ftLastWriteTime.dwLowDateTime=0x84c50e6f, ftLastWriteTime.dwHighDateTime=0x1cb892b, nFileSizeHigh=0x0, nFileSizeLow=0x10d000, dwReserved0=0x0, dwReserved1=0x0, cFileName="oledb32.dll", cAlternateFileName="")) returned 1 [0034.300] FindNextFileW (in: hFindFile=0x381d00, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xfabf604b, ftCreationTime.dwHighDateTime=0x1ca0419, ftLastAccessTime.dwLowDateTime=0xfabf604b, ftLastAccessTime.dwHighDateTime=0x1ca0419, ftLastWriteTime.dwLowDateTime=0xdf9a48f0, ftLastWriteTime.dwHighDateTime=0x1ca0422, nFileSizeHigh=0x0, nFileSizeLow=0x14000, dwReserved0=0x0, dwReserved1=0x0, cFileName="oledb32r.dll", cAlternateFileName="")) returned 1 [0034.300] FindNextFileW (in: hFindFile=0x381d00, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa542845b, ftCreationTime.dwHighDateTime=0x1ca0409, ftLastAccessTime.dwLowDateTime=0xa542845b, ftLastAccessTime.dwHighDateTime=0x1ca0409, ftLastWriteTime.dwLowDateTime=0xa4ffde2f, ftLastWriteTime.dwHighDateTime=0x1ca0409, nFileSizeHigh=0x0, nFileSizeLow=0x264c, dwReserved0=0x0, dwReserved1=0x0, cFileName="oledbjvs.inc", cAlternateFileName="")) returned 1 [0034.300] FindNextFileW (in: hFindFile=0x381d00, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa542845b, ftCreationTime.dwHighDateTime=0x1ca0409, ftLastAccessTime.dwLowDateTime=0xa542845b, ftLastAccessTime.dwHighDateTime=0x1ca0409, ftLastWriteTime.dwLowDateTime=0xa52d1816, ftLastWriteTime.dwHighDateTime=0x1ca0409, nFileSizeHigh=0x0, nFileSizeLow=0x26f7, dwReserved0=0x0, dwReserved1=0x0, cFileName="oledbvbs.inc", cAlternateFileName="")) returned 1 [0034.300] FindNextFileW (in: hFindFile=0x381d00, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x92f0bf91, ftCreationTime.dwHighDateTime=0x1cb892b, ftLastAccessTime.dwLowDateTime=0x92f0bf91, ftLastAccessTime.dwHighDateTime=0x1cb892b, ftLastWriteTime.dwLowDateTime=0x92f320f1, ftLastWriteTime.dwHighDateTime=0x1cb892b, nFileSizeHigh=0x0, nFileSizeLow=0x128000, dwReserved0=0x0, dwReserved1=0x0, cFileName="sqloledb.dll", cAlternateFileName="")) returned 1 [0034.300] FindNextFileW (in: hFindFile=0x381d00, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xcc9350f, ftCreationTime.dwHighDateTime=0x1ca041a, ftLastAccessTime.dwLowDateTime=0xcc9350f, ftLastAccessTime.dwHighDateTime=0x1ca041a, ftLastWriteTime.dwLowDateTime=0xcc210f8, ftLastWriteTime.dwHighDateTime=0x1ca041a, nFileSizeHigh=0x0, nFileSizeLow=0x4000, dwReserved0=0x0, dwReserved1=0x0, cFileName="sqloledb.rll", cAlternateFileName="")) returned 1 [0034.300] FindNextFileW (in: hFindFile=0x381d00, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x14f7e4bf, ftCreationTime.dwHighDateTime=0x1ca041a, ftLastAccessTime.dwLowDateTime=0x14f7e4bf, ftLastAccessTime.dwHighDateTime=0x1ca041a, ftLastWriteTime.dwLowDateTime=0x44773fc0, ftLastWriteTime.dwHighDateTime=0x1ca0424, nFileSizeHigh=0x0, nFileSizeLow=0x59000, dwReserved0=0x0, dwReserved1=0x0, cFileName="sqlxmlx.dll", cAlternateFileName="")) returned 1 [0034.300] FindNextFileW (in: hFindFile=0x381d00, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc9e5c85, ftCreationTime.dwHighDateTime=0x1ca041a, ftLastAccessTime.dwLowDateTime=0xc9e5c85, ftLastAccessTime.dwHighDateTime=0x1ca041a, ftLastWriteTime.dwLowDateTime=0xc97386e, ftLastWriteTime.dwHighDateTime=0x1ca041a, nFileSizeHigh=0x0, nFileSizeLow=0x2000, dwReserved0=0x0, dwReserved1=0x0, cFileName="sqlxmlx.rll", cAlternateFileName="")) returned 1 [0034.300] FindNextFileW (in: hFindFile=0x381d00, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xbc7a4200, ftCreationTime.dwHighDateTime=0x1c8e202, ftLastAccessTime.dwLowDateTime=0x5f34af90, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xbc7a4200, ftLastWriteTime.dwHighDateTime=0x1c8e202, nFileSizeHigh=0x0, nFileSizeLow=0x44e18, dwReserved0=0x0, dwReserved1=0x0, cFileName="xmlrw.dll", cAlternateFileName="")) returned 1 [0034.300] FindNextFileW (in: hFindFile=0x381d00, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xbc7a4200, ftCreationTime.dwHighDateTime=0x1c8e202, ftLastAccessTime.dwLowDateTime=0x516f5b30, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xbc7a4200, ftLastWriteTime.dwHighDateTime=0x1c8e202, nFileSizeHigh=0x0, nFileSizeLow=0x30a18, dwReserved0=0x0, dwReserved1=0x0, cFileName="xmlrwbin.dll", cAlternateFileName="")) returned 1 [0034.301] FindNextFileW (in: hFindFile=0x381d00, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xbc7a4200, ftCreationTime.dwHighDateTime=0x1c8e202, ftLastAccessTime.dwLowDateTime=0x516f5b30, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xbc7a4200, ftLastWriteTime.dwHighDateTime=0x1c8e202, nFileSizeHigh=0x0, nFileSizeLow=0x30a18, dwReserved0=0x0, dwReserved1=0x0, cFileName="xmlrwbin.dll", cAlternateFileName="")) returned 0 [0034.301] FindClose (in: hFindFile=0x381d00 | out: hFindFile=0x381d00) returned 1 [0034.301] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e77c) returned 1 [0034.301] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e788) returned 1 [0034.301] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e744) returned 1 [0034.301] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Common Files\\System\\Ole DB\\en-US", nBufferLength=0x105, lpBuffer=0x31e24c, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Common Files\\System\\Ole DB\\en-US", lpFilePart=0x0) returned 0x31 [0034.301] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Common Files\\System\\Ole DB\\en-US\\", nBufferLength=0x105, lpBuffer=0x31e220, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Common Files\\System\\Ole DB\\en-US\\", lpFilePart=0x0) returned 0x32 [0034.302] FindFirstFileW (in: lpFileName="C:\\Program Files\\Common Files\\System\\Ole DB\\en-US\\*", lpFindFileData=0x31e46c | out: lpFindFileData=0x31e46c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1eab37af, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x23ef19fc, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x1eab37af, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x381d00 [0034.302] FindNextFileW (in: hFindFile=0x381d00, lpFindFileData=0x31e47c | out: lpFindFileData=0x31e47c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1eab37af, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x23ef19fc, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x1eab37af, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0034.302] FindNextFileW (in: hFindFile=0x381d00, lpFindFileData=0x31e47c | out: lpFindFileData=0x31e47c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xbb6d5cd, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0xbeb51b3, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0xbb6d5cd, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x1600, dwReserved0=0x0, dwReserved1=0x0, cFileName="msdasqlr.dll.mui", cAlternateFileName="")) returned 1 [0034.303] FindNextFileW (in: hFindFile=0x381d00, lpFindFileData=0x31e47c | out: lpFindFileData=0x31e47c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8aabb7e, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x8e65f8f, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x8aabb7e, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0xba00, dwReserved0=0x0, dwReserved1=0x0, cFileName="oledb32r.dll.mui", cAlternateFileName="")) returned 1 [0034.303] FindNextFileW (in: hFindFile=0x381d00, lpFindFileData=0x31e47c | out: lpFindFileData=0x31e47c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xbb93886, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0xbeb51b3, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0xbb93886, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0xac00, dwReserved0=0x0, dwReserved1=0x0, cFileName="sqloledb.rll.mui", cAlternateFileName="")) returned 1 [0034.303] FindNextFileW (in: hFindFile=0x381d00, lpFindFileData=0x31e47c | out: lpFindFileData=0x31e47c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8ad1e37, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x8e65f8f, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x8ad1e37, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x4600, dwReserved0=0x0, dwReserved1=0x0, cFileName="sqlxmlx.rll.mui", cAlternateFileName="")) returned 1 [0034.303] FindNextFileW (in: hFindFile=0x381d00, lpFindFileData=0x31e47c | out: lpFindFileData=0x31e47c*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0034.303] FindClose (in: hFindFile=0x381d00 | out: hFindFile=0x381d00) returned 1 [0034.303] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e704) returned 1 [0034.303] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e710) returned 1 [0034.303] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e744) returned 1 [0034.303] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Common Files\\System\\Ole DB\\en-US", nBufferLength=0x105, lpBuffer=0x31e24c, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Common Files\\System\\Ole DB\\en-US", lpFilePart=0x0) returned 0x31 [0034.303] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Common Files\\System\\Ole DB\\en-US\\", nBufferLength=0x105, lpBuffer=0x31e220, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Common Files\\System\\Ole DB\\en-US\\", lpFilePart=0x0) returned 0x32 [0034.303] FindFirstFileW (in: lpFileName="C:\\Program Files\\Common Files\\System\\Ole DB\\en-US\\*", lpFindFileData=0x31e46c | out: lpFindFileData=0x31e46c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1eab37af, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x23ef19fc, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x1eab37af, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x381d00 [0034.303] FindNextFileW (in: hFindFile=0x381d00, lpFindFileData=0x31e47c | out: lpFindFileData=0x31e47c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1eab37af, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x23ef19fc, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x1eab37af, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0034.303] FindNextFileW (in: hFindFile=0x381d00, lpFindFileData=0x31e47c | out: lpFindFileData=0x31e47c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xbb6d5cd, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0xbeb51b3, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0xbb6d5cd, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x1600, dwReserved0=0x0, dwReserved1=0x0, cFileName="msdasqlr.dll.mui", cAlternateFileName="")) returned 1 [0034.303] FindNextFileW (in: hFindFile=0x381d00, lpFindFileData=0x31e47c | out: lpFindFileData=0x31e47c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8aabb7e, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x8e65f8f, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x8aabb7e, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0xba00, dwReserved0=0x0, dwReserved1=0x0, cFileName="oledb32r.dll.mui", cAlternateFileName="")) returned 1 [0034.303] FindNextFileW (in: hFindFile=0x381d00, lpFindFileData=0x31e47c | out: lpFindFileData=0x31e47c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xbb93886, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0xbeb51b3, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0xbb93886, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0xac00, dwReserved0=0x0, dwReserved1=0x0, cFileName="sqloledb.rll.mui", cAlternateFileName="")) returned 1 [0034.304] FindNextFileW (in: hFindFile=0x381d00, lpFindFileData=0x31e47c | out: lpFindFileData=0x31e47c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8ad1e37, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x8e65f8f, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x8ad1e37, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x4600, dwReserved0=0x0, dwReserved1=0x0, cFileName="sqlxmlx.rll.mui", cAlternateFileName="")) returned 1 [0034.304] FindNextFileW (in: hFindFile=0x381d00, lpFindFileData=0x31e47c | out: lpFindFileData=0x31e47c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8ad1e37, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x8e65f8f, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x8ad1e37, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x4600, dwReserved0=0x0, dwReserved1=0x0, cFileName="sqlxmlx.rll.mui", cAlternateFileName="")) returned 0 [0034.304] FindClose (in: hFindFile=0x381d00 | out: hFindFile=0x381d00) returned 1 [0034.304] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e704) returned 1 [0034.304] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e710) returned 1 [0034.304] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e8ac) returned 1 [0034.304] GetFullPathNameW (in: lpFileName="C:\\Program Files\\DVD Maker", nBufferLength=0x105, lpBuffer=0x31e3b4, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\DVD Maker", lpFilePart=0x0) returned 0x1a [0034.304] GetFullPathNameW (in: lpFileName="C:\\Program Files\\DVD Maker\\", nBufferLength=0x105, lpBuffer=0x31e388, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\DVD Maker\\", lpFilePart=0x0) returned 0x1b [0034.304] FindFirstFileW (in: lpFileName="C:\\Program Files\\DVD Maker\\*", lpFindFileData=0x31e5d4 | out: lpFindFileData=0x31e5d4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x80046d91, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0xd9a2c7e0, ftLastAccessTime.dwHighDateTime=0x1d5e82a, ftLastWriteTime.dwLowDateTime=0xd9a2c7e0, ftLastWriteTime.dwHighDateTime=0x1d5e82a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x381d00 [0034.304] FindNextFileW (in: hFindFile=0x381d00, lpFindFileData=0x31e5e4 | out: lpFindFileData=0x31e5e4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x80046d91, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0xd9a2c7e0, ftLastAccessTime.dwHighDateTime=0x1d5e82a, ftLastWriteTime.dwLowDateTime=0xd9a2c7e0, ftLastWriteTime.dwHighDateTime=0x1d5e82a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0034.304] FindNextFileW (in: hFindFile=0x381d00, lpFindFileData=0x31e5e4 | out: lpFindFileData=0x31e5e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb0ed7565, ftCreationTime.dwHighDateTime=0x1cb892b, ftLastAccessTime.dwLowDateTime=0xb0ed7565, ftLastAccessTime.dwHighDateTime=0x1cb892b, ftLastWriteTime.dwLowDateTime=0xb0efd6c5, ftLastWriteTime.dwHighDateTime=0x1cb892b, nFileSizeHigh=0x0, nFileSizeLow=0xc600, dwReserved0=0x0, dwReserved1=0x0, cFileName="audiodepthconverter.ax", cAlternateFileName="")) returned 1 [0034.304] FindNextFileW (in: hFindFile=0x381d00, lpFindFileData=0x31e5e4 | out: lpFindFileData=0x31e5e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x499cc441, ftCreationTime.dwHighDateTime=0x1c9ea0f, ftLastAccessTime.dwLowDateTime=0x499cc441, ftLastAccessTime.dwHighDateTime=0x1c9ea0f, ftLastWriteTime.dwLowDateTime=0x499cc441, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x1303c, dwReserved0=0x0, dwReserved1=0x0, cFileName="bod_r.TTF", cAlternateFileName="")) returned 1 [0034.304] FindNextFileW (in: hFindFile=0x381d00, lpFindFileData=0x31e5e4 | out: lpFindFileData=0x31e5e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb0eb1404, ftCreationTime.dwHighDateTime=0x1cb892b, ftLastAccessTime.dwLowDateTime=0xb0eb1404, ftLastAccessTime.dwHighDateTime=0x1cb892b, ftLastWriteTime.dwLowDateTime=0xb0ed7565, ftLastWriteTime.dwHighDateTime=0x1cb892b, nFileSizeHigh=0x0, nFileSizeLow=0xf000, dwReserved0=0x0, dwReserved1=0x0, cFileName="directshowtap.ax", cAlternateFileName="")) returned 1 [0034.304] FindNextFileW (in: hFindFile=0x381d00, lpFindFileData=0x31e5e4 | out: lpFindFileData=0x31e5e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc9ae6642, ftCreationTime.dwHighDateTime=0x1ca0419, ftLastAccessTime.dwLowDateTime=0xc9ae6642, ftLastAccessTime.dwHighDateTime=0x1ca0419, ftLastWriteTime.dwLowDateTime=0xe1601f60, ftLastWriteTime.dwHighDateTime=0x1ca0423, nFileSizeHigh=0x0, nFileSizeLow=0x227600, dwReserved0=0x0, dwReserved1=0x0, cFileName="DVDMaker.exe", cAlternateFileName="")) returned 1 [0034.304] FindNextFileW (in: hFindFile=0x381d00, lpFindFileData=0x31e5e4 | out: lpFindFileData=0x31e5e4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1ead9a68, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0xaa276ca7, ftLastAccessTime.dwHighDateTime=0x1cbf8eb, ftLastWriteTime.dwLowDateTime=0x9f05f082, ftLastWriteTime.dwHighDateTime=0x1cbf8eb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="en-US", cAlternateFileName="")) returned 1 [0034.304] FindNextFileW (in: hFindFile=0x381d00, lpFindFileData=0x31e5e4 | out: lpFindFileData=0x31e5e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd559b52d, ftCreationTime.dwHighDateTime=0x1ca0419, ftLastAccessTime.dwLowDateTime=0xd559b52d, ftLastAccessTime.dwHighDateTime=0x1ca0419, ftLastWriteTime.dwLowDateTime=0x499cc441, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0xddb8, dwReserved0=0x0, dwReserved1=0x0, cFileName="Eurosti.TTF", cAlternateFileName="")) returned 1 [0034.304] FindNextFileW (in: hFindFile=0x381d00, lpFindFileData=0x31e5e4 | out: lpFindFileData=0x31e5e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb0c03b3f, ftCreationTime.dwHighDateTime=0x1cb892b, ftLastAccessTime.dwLowDateTime=0xb0c03b3f, ftLastAccessTime.dwHighDateTime=0x1cb892b, ftLastWriteTime.dwLowDateTime=0xb0c03b3f, ftLastWriteTime.dwHighDateTime=0x1cb892b, nFileSizeHigh=0x0, nFileSizeLow=0xa200, dwReserved0=0x0, dwReserved1=0x0, cFileName="fieldswitch.ax", cAlternateFileName="")) returned 1 [0034.304] FindNextFileW (in: hFindFile=0x381d00, lpFindFileData=0x31e5e4 | out: lpFindFileData=0x31e5e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb0bdd9df, ftCreationTime.dwHighDateTime=0x1cb892b, ftLastAccessTime.dwLowDateTime=0xb0bdd9df, ftLastAccessTime.dwHighDateTime=0x1cb892b, ftLastWriteTime.dwLowDateTime=0xb0c03b3f, ftLastWriteTime.dwHighDateTime=0x1cb892b, nFileSizeHigh=0x0, nFileSizeLow=0xa800, dwReserved0=0x0, dwReserved1=0x0, cFileName="offset.ax", cAlternateFileName="")) returned 1 [0034.305] FindNextFileW (in: hFindFile=0x381d00, lpFindFileData=0x31e5e4 | out: lpFindFileData=0x31e5e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb0c03b3f, ftCreationTime.dwHighDateTime=0x1cb892b, ftLastAccessTime.dwLowDateTime=0xb0c03b3f, ftLastAccessTime.dwHighDateTime=0x1cb892b, ftLastWriteTime.dwLowDateTime=0xb0eb1404, ftLastWriteTime.dwHighDateTime=0x1cb892b, nFileSizeHigh=0x0, nFileSizeLow=0xe46400, dwReserved0=0x0, dwReserved1=0x0, cFileName="OmdBase.dll", cAlternateFileName="")) returned 1 [0034.305] FindNextFileW (in: hFindFile=0x381d00, lpFindFileData=0x31e5e4 | out: lpFindFileData=0x31e5e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb0efd6c5, ftCreationTime.dwHighDateTime=0x1cb892b, ftLastAccessTime.dwLowDateTime=0xb0efd6c5, ftLastAccessTime.dwHighDateTime=0x1cb892b, ftLastWriteTime.dwLowDateTime=0xb102e1c7, ftLastWriteTime.dwHighDateTime=0x1cb892b, nFileSizeHigh=0x0, nFileSizeLow=0x432600, dwReserved0=0x0, dwReserved1=0x0, cFileName="OmdProject.dll", cAlternateFileName="")) returned 1 [0034.305] FindNextFileW (in: hFindFile=0x381d00, lpFindFileData=0x31e5e4 | out: lpFindFileData=0x31e5e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2499d610, ftCreationTime.dwHighDateTime=0x1d5af25, ftLastAccessTime.dwLowDateTime=0x9d8c5f80, ftLastAccessTime.dwHighDateTime=0x1d57973, ftLastWriteTime.dwLowDateTime=0x9d8c5f80, ftLastWriteTime.dwHighDateTime=0x1d57973, nFileSizeHigh=0x0, nFileSizeLow=0x13a00, dwReserved0=0x0, dwReserved1=0x0, cFileName="operamail.exe", cAlternateFileName="OPERAM~1.EXE")) returned 1 [0034.305] FindNextFileW (in: hFindFile=0x381d00, lpFindFileData=0x31e5e4 | out: lpFindFileData=0x31e5e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb0b6b5be, ftCreationTime.dwHighDateTime=0x1cb892b, ftLastAccessTime.dwLowDateTime=0xb0b6b5be, ftLastAccessTime.dwHighDateTime=0x1cb892b, ftLastWriteTime.dwLowDateTime=0xb0bb787f, ftLastWriteTime.dwHighDateTime=0x1cb892b, nFileSizeHigh=0x0, nFileSizeLow=0x1c4600, dwReserved0=0x0, dwReserved1=0x0, cFileName="Pipeline.dll", cAlternateFileName="")) returned 1 [0034.305] FindNextFileW (in: hFindFile=0x381d00, lpFindFileData=0x31e5e4 | out: lpFindFileData=0x31e5e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc7b5c53e, ftCreationTime.dwHighDateTime=0x1ca0419, ftLastAccessTime.dwLowDateTime=0xc7b5c53e, ftLastAccessTime.dwHighDateTime=0x1ca0419, ftLastWriteTime.dwLowDateTime=0x43aceae0, ftLastWriteTime.dwHighDateTime=0x1ca0424, nFileSizeHigh=0x0, nFileSizeLow=0x1cc000, dwReserved0=0x0, dwReserved1=0x0, cFileName="PipeTran.dll", cAlternateFileName="")) returned 1 [0034.305] FindNextFileW (in: hFindFile=0x381d00, lpFindFileData=0x31e5e4 | out: lpFindFileData=0x31e5e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb0eb1404, ftCreationTime.dwHighDateTime=0x1cb892b, ftLastAccessTime.dwLowDateTime=0xb0eb1404, ftLastAccessTime.dwHighDateTime=0x1cb892b, ftLastWriteTime.dwLowDateTime=0xb0eb1404, ftLastWriteTime.dwHighDateTime=0x1cb892b, nFileSizeHigh=0x0, nFileSizeLow=0x13400, dwReserved0=0x0, dwReserved1=0x0, cFileName="rtstreamsink.ax", cAlternateFileName="")) returned 1 [0034.305] FindNextFileW (in: hFindFile=0x381d00, lpFindFileData=0x31e5e4 | out: lpFindFileData=0x31e5e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb0c03b3f, ftCreationTime.dwHighDateTime=0x1cb892b, ftLastAccessTime.dwLowDateTime=0xb0c03b3f, ftLastAccessTime.dwHighDateTime=0x1cb892b, ftLastWriteTime.dwLowDateTime=0xb0c03b3f, ftLastWriteTime.dwHighDateTime=0x1cb892b, nFileSizeHigh=0x0, nFileSizeLow=0xce00, dwReserved0=0x0, dwReserved1=0x0, cFileName="rtstreamsource.ax", cAlternateFileName="")) returned 1 [0034.305] FindNextFileW (in: hFindFile=0x381d00, lpFindFileData=0x31e5e4 | out: lpFindFileData=0x31e5e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd55c168a, ftCreationTime.dwHighDateTime=0x1ca0419, ftLastAccessTime.dwLowDateTime=0xd55c168a, ftLastAccessTime.dwHighDateTime=0x1ca0419, ftLastWriteTime.dwLowDateTime=0x499cc441, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x18208, dwReserved0=0x0, dwReserved1=0x0, cFileName="SecretST.TTF", cAlternateFileName="")) returned 1 [0034.305] FindNextFileW (in: hFindFile=0x381d00, lpFindFileData=0x31e5e4 | out: lpFindFileData=0x31e5e4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x80046d91, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x9f0852f1, ftLastAccessTime.dwHighDateTime=0x1cbf8eb, ftLastWriteTime.dwLowDateTime=0x9f0852f1, ftLastWriteTime.dwHighDateTime=0x1cbf8eb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Shared", cAlternateFileName="")) returned 1 [0034.305] FindNextFileW (in: hFindFile=0x381d00, lpFindFileData=0x31e5e4 | out: lpFindFileData=0x31e5e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb0c03b3f, ftCreationTime.dwHighDateTime=0x1cb892b, ftLastAccessTime.dwLowDateTime=0xb0c03b3f, ftLastAccessTime.dwHighDateTime=0x1cb892b, ftLastWriteTime.dwLowDateTime=0xb0c03b3f, ftLastWriteTime.dwHighDateTime=0x1cb892b, nFileSizeHigh=0x0, nFileSizeLow=0x13600, dwReserved0=0x0, dwReserved1=0x0, cFileName="soniccolorconverter.ax", cAlternateFileName="")) returned 1 [0034.305] FindNextFileW (in: hFindFile=0x381d00, lpFindFileData=0x31e5e4 | out: lpFindFileData=0x31e5e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb0bdd9df, ftCreationTime.dwHighDateTime=0x1cb892b, ftLastAccessTime.dwLowDateTime=0xb0bdd9df, ftLastAccessTime.dwHighDateTime=0x1cb892b, ftLastWriteTime.dwLowDateTime=0xb0bdd9df, ftLastWriteTime.dwHighDateTime=0x1cb892b, nFileSizeHigh=0x0, nFileSizeLow=0xca00, dwReserved0=0x0, dwReserved1=0x0, cFileName="sonicsptransform.ax", cAlternateFileName="")) returned 1 [0034.305] FindNextFileW (in: hFindFile=0x381d00, lpFindFileData=0x31e5e4 | out: lpFindFileData=0x31e5e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7db2ddd0, ftCreationTime.dwHighDateTime=0x1d5cc28, ftLastAccessTime.dwLowDateTime=0xee213cb0, ftLastAccessTime.dwHighDateTime=0x1d59104, ftLastWriteTime.dwLowDateTime=0xee213cb0, ftLastWriteTime.dwHighDateTime=0x1d59104, nFileSizeHigh=0x0, nFileSizeLow=0x13a00, dwReserved0=0x0, dwReserved1=0x0, cFileName="winscp.exe", cAlternateFileName="")) returned 1 [0034.306] FindClose (in: hFindFile=0x381d00 | out: hFindFile=0x381d00) returned 1 [0034.306] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e86c) returned 1 [0034.306] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e878) returned 1 [0034.306] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e8ac) returned 1 [0034.306] GetFullPathNameW (in: lpFileName="C:\\Program Files\\DVD Maker", nBufferLength=0x105, lpBuffer=0x31e3b4, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\DVD Maker", lpFilePart=0x0) returned 0x1a [0034.306] GetFullPathNameW (in: lpFileName="C:\\Program Files\\DVD Maker\\", nBufferLength=0x105, lpBuffer=0x31e388, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\DVD Maker\\", lpFilePart=0x0) returned 0x1b [0034.306] FindFirstFileW (in: lpFileName="C:\\Program Files\\DVD Maker\\*", lpFindFileData=0x31e5d4 | out: lpFindFileData=0x31e5d4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x80046d91, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0xd9a2c7e0, ftLastAccessTime.dwHighDateTime=0x1d5e82a, ftLastWriteTime.dwLowDateTime=0xd9a2c7e0, ftLastWriteTime.dwHighDateTime=0x1d5e82a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x381d00 [0034.307] FindClose (in: hFindFile=0x381d00 | out: hFindFile=0x381d00) returned 1 [0034.307] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e86c) returned 1 [0034.307] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e878) returned 1 [0034.307] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e834) returned 1 [0034.307] GetFullPathNameW (in: lpFileName="C:\\Program Files\\DVD Maker\\en-US", nBufferLength=0x105, lpBuffer=0x31e33c, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\DVD Maker\\en-US", lpFilePart=0x0) returned 0x20 [0034.307] GetFullPathNameW (in: lpFileName="C:\\Program Files\\DVD Maker\\en-US\\", nBufferLength=0x105, lpBuffer=0x31e310, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\DVD Maker\\en-US\\", lpFilePart=0x0) returned 0x21 [0034.307] FindFirstFileW (in: lpFileName="C:\\Program Files\\DVD Maker\\en-US\\*", lpFindFileData=0x31e55c | out: lpFindFileData=0x31e55c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1ead9a68, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0xaa276ca7, ftLastAccessTime.dwHighDateTime=0x1cbf8eb, ftLastWriteTime.dwLowDateTime=0x9f05f082, ftLastWriteTime.dwHighDateTime=0x1cbf8eb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x381d00 [0034.307] FindClose (in: hFindFile=0x381d00 | out: hFindFile=0x381d00) returned 1 [0034.307] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e7f4) returned 1 [0034.307] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e800) returned 1 [0034.307] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e834) returned 1 [0034.307] GetFullPathNameW (in: lpFileName="C:\\Program Files\\DVD Maker\\en-US", nBufferLength=0x105, lpBuffer=0x31e33c, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\DVD Maker\\en-US", lpFilePart=0x0) returned 0x20 [0034.307] GetFullPathNameW (in: lpFileName="C:\\Program Files\\DVD Maker\\en-US\\", nBufferLength=0x105, lpBuffer=0x31e310, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\DVD Maker\\en-US\\", lpFilePart=0x0) returned 0x21 [0034.307] FindFirstFileW (in: lpFileName="C:\\Program Files\\DVD Maker\\en-US\\*", lpFindFileData=0x31e55c | out: lpFindFileData=0x31e55c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1ead9a68, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0xaa276ca7, ftLastAccessTime.dwHighDateTime=0x1cbf8eb, ftLastWriteTime.dwLowDateTime=0x9f05f082, ftLastWriteTime.dwHighDateTime=0x1cbf8eb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x381d00 [0034.307] FindClose (in: hFindFile=0x381d00 | out: hFindFile=0x381d00) returned 1 [0034.308] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e7f4) returned 1 [0034.308] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e800) returned 1 [0034.308] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e834) returned 1 [0034.308] GetFullPathNameW (in: lpFileName="C:\\Program Files\\DVD Maker\\Shared", nBufferLength=0x105, lpBuffer=0x31e33c, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\DVD Maker\\Shared", lpFilePart=0x0) returned 0x21 [0034.308] GetFullPathNameW (in: lpFileName="C:\\Program Files\\DVD Maker\\Shared\\", nBufferLength=0x105, lpBuffer=0x31e310, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\DVD Maker\\Shared\\", lpFilePart=0x0) returned 0x22 [0034.308] FindFirstFileW (in: lpFileName="C:\\Program Files\\DVD Maker\\Shared\\*", lpFindFileData=0x31e55c | out: lpFindFileData=0x31e55c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x80046d91, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x9f0852f1, ftLastAccessTime.dwHighDateTime=0x1cbf8eb, ftLastWriteTime.dwLowDateTime=0x9f0852f1, ftLastWriteTime.dwHighDateTime=0x1cbf8eb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x381d00 [0034.309] FindClose (in: hFindFile=0x381d00 | out: hFindFile=0x381d00) returned 1 [0034.310] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e7f4) returned 1 [0034.310] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e800) returned 1 [0034.310] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e834) returned 1 [0034.310] GetFullPathNameW (in: lpFileName="C:\\Program Files\\DVD Maker\\Shared", nBufferLength=0x105, lpBuffer=0x31e33c, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\DVD Maker\\Shared", lpFilePart=0x0) returned 0x21 [0034.310] GetFullPathNameW (in: lpFileName="C:\\Program Files\\DVD Maker\\Shared\\", nBufferLength=0x105, lpBuffer=0x31e310, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\DVD Maker\\Shared\\", lpFilePart=0x0) returned 0x22 [0034.310] FindFirstFileW (in: lpFileName="C:\\Program Files\\DVD Maker\\Shared\\*", lpFindFileData=0x31e55c | out: lpFindFileData=0x31e55c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x80046d91, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x9f0852f1, ftLastAccessTime.dwHighDateTime=0x1cbf8eb, ftLastWriteTime.dwLowDateTime=0x9f0852f1, ftLastWriteTime.dwHighDateTime=0x1cbf8eb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x381d00 [0034.311] FindClose (in: hFindFile=0x381d00 | out: hFindFile=0x381d00) returned 1 [0034.312] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e7f4) returned 1 [0034.312] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e800) returned 1 [0034.312] GetFullPathNameW (in: lpFileName="C:\\Program Files\\DVD Maker\\Shared\\DissolveAnother.png", nBufferLength=0x105, lpBuffer=0x31e20c, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\DVD Maker\\Shared\\DissolveAnother.png", lpFilePart=0x0) returned 0x35 [0034.312] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e700) returned 1 [0034.312] CreateFileW (lpFileName="C:\\Program Files\\DVD Maker\\Shared\\DissolveAnother.png" (normalized: "c:\\program files\\dvd maker\\shared\\dissolveanother.png"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x224 [0034.313] GetFileType (hFile=0x224) returned 0x1 [0034.313] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e6fc) returned 1 [0034.313] GetFileType (hFile=0x224) returned 0x1 [0034.313] GetFileSize (in: hFile=0x224, lpFileSizeHigh=0x31e808 | out: lpFileSizeHigh=0x31e808*=0x0) returned 0x6d1f [0034.313] ReadFile (in: hFile=0x224, lpBuffer=0x27fc558, nNumberOfBytesToRead=0x6d1f, lpNumberOfBytesRead=0x31e7b4, lpOverlapped=0x0 | out: lpBuffer=0x27fc558*, lpNumberOfBytesRead=0x31e7b4*=0x6d1f, lpOverlapped=0x0) returned 1 [0034.345] GetFullPathNameW (in: lpFileName="C:\\Program Files\\DVD Maker\\Shared\\DissolveAnother.png", nBufferLength=0x105, lpBuffer=0x31e1f8, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\DVD Maker\\Shared\\DissolveAnother.png", lpFilePart=0x0) returned 0x35 [0034.346] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e6ec) returned 1 [0034.346] CreateFileW (lpFileName="C:\\Program Files\\DVD Maker\\Shared\\DissolveAnother.png" (normalized: "c:\\program files\\dvd maker\\shared\\dissolveanother.png"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0xffffffff [0034.347] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31d528) returned 1 [0034.347] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e8ac) returned 1 [0034.347] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Internet Explorer", nBufferLength=0x105, lpBuffer=0x31e3b4, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Internet Explorer", lpFilePart=0x0) returned 0x22 [0034.347] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Internet Explorer\\", nBufferLength=0x105, lpBuffer=0x31e388, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Internet Explorer\\", lpFilePart=0x0) returned 0x23 [0034.347] FindFirstFileW (in: lpFileName="C:\\Program Files\\Internet Explorer\\*", lpFindFileData=0x31e5d4 | out: lpFindFileData=0x31e5d4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd885082, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x1ead9a68, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x1ead9a68, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x381c80 [0034.347] FindNextFileW (in: hFindFile=0x381c80, lpFindFileData=0x31e5e4 | out: lpFindFileData=0x31e5e4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd885082, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x1ead9a68, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x1ead9a68, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0034.348] FindNextFileW (in: hFindFile=0x381c80, lpFindFileData=0x31e5e4 | out: lpFindFileData=0x31e5e4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1ead9a68, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x23ef19fc, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x1ead9a68, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="en-US", cAlternateFileName="")) returned 1 [0034.348] FindNextFileW (in: hFindFile=0x381c80, lpFindFileData=0x31e5e4 | out: lpFindFileData=0x31e5e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5f55643f, ftCreationTime.dwHighDateTime=0x1ca0415, ftLastAccessTime.dwLowDateTime=0x5f55643f, ftLastAccessTime.dwHighDateTime=0x1ca0415, ftLastWriteTime.dwLowDateTime=0x23ff2d20, ftLastWriteTime.dwHighDateTime=0x1ca0424, nFileSizeHigh=0x0, nFileSizeLow=0xce00, dwReserved0=0x0, dwReserved1=0x0, cFileName="hmmapi.dll", cAlternateFileName="")) returned 1 [0034.348] FindNextFileW (in: hFindFile=0x381c80, lpFindFileData=0x31e5e4 | out: lpFindFileData=0x31e5e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb9a30bbb, ftCreationTime.dwHighDateTime=0x1c9ea0a, ftLastAccessTime.dwLowDateTime=0xb9a30bbb, ftLastAccessTime.dwHighDateTime=0x1c9ea0a, ftLastWriteTime.dwLowDateTime=0xb9a30bbb, ftLastWriteTime.dwHighDateTime=0x1c9ea0a, nFileSizeHigh=0x0, nFileSizeLow=0xa59, dwReserved0=0x0, dwReserved1=0x0, cFileName="ie8props.propdesc", cAlternateFileName="")) returned 1 [0034.348] FindNextFileW (in: hFindFile=0x381c80, lpFindFileData=0x31e5e4 | out: lpFindFileData=0x31e5e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa37b6f98, ftCreationTime.dwHighDateTime=0x1cb892b, ftLastAccessTime.dwLowDateTime=0xa37b6f98, ftLastAccessTime.dwHighDateTime=0x1cb892b, ftLastWriteTime.dwLowDateTime=0xa37b6f98, ftLastWriteTime.dwHighDateTime=0x1cb892b, nFileSizeHigh=0x0, nFileSizeLow=0x1e00, dwReserved0=0x0, dwReserved1=0x0, cFileName="iecompat.dll", cAlternateFileName="")) returned 1 [0034.348] FindNextFileW (in: hFindFile=0x381c80, lpFindFileData=0x31e5e4 | out: lpFindFileData=0x31e5e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa37b6f98, ftCreationTime.dwHighDateTime=0x1cb892b, ftLastAccessTime.dwLowDateTime=0xa37b6f98, ftLastAccessTime.dwHighDateTime=0x1cb892b, ftLastWriteTime.dwLowDateTime=0xa37dd0f9, ftLastWriteTime.dwHighDateTime=0x1cb892b, nFileSizeHigh=0x0, nFileSizeLow=0xf7600, dwReserved0=0x0, dwReserved1=0x0, cFileName="iedvtool.dll", cAlternateFileName="")) returned 1 [0034.348] FindNextFileW (in: hFindFile=0x381c80, lpFindFileData=0x31e5e4 | out: lpFindFileData=0x31e5e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa357baf4, ftCreationTime.dwHighDateTime=0x1cb892b, ftLastAccessTime.dwLowDateTime=0xa357baf4, ftLastAccessTime.dwHighDateTime=0x1cb892b, ftLastWriteTime.dwLowDateTime=0xa357baf4, ftLastWriteTime.dwHighDateTime=0x1cb892b, nFileSizeHigh=0x0, nFileSizeLow=0x41e00, dwReserved0=0x0, dwReserved1=0x0, cFileName="ieinstal.exe", cAlternateFileName="")) returned 1 [0034.348] FindNextFileW (in: hFindFile=0x381c80, lpFindFileData=0x31e5e4 | out: lpFindFileData=0x31e5e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xdecd4578, ftCreationTime.dwHighDateTime=0x1ca0415, ftLastAccessTime.dwLowDateTime=0xdecd4578, ftLastAccessTime.dwHighDateTime=0x1ca0415, ftLastWriteTime.dwLowDateTime=0xe3cb04e0, ftLastWriteTime.dwHighDateTime=0x1ca0423, nFileSizeHigh=0x0, nFileSizeLow=0x1c400, dwReserved0=0x0, dwReserved1=0x0, cFileName="ielowutil.exe", cAlternateFileName="")) returned 1 [0034.348] FindNextFileW (in: hFindFile=0x381c80, lpFindFileData=0x31e5e4 | out: lpFindFileData=0x31e5e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa3803259, ftCreationTime.dwHighDateTime=0x1cb892b, ftLastAccessTime.dwLowDateTime=0xa3803259, ftLastAccessTime.dwHighDateTime=0x1cb892b, ftLastWriteTime.dwLowDateTime=0xa3803259, ftLastWriteTime.dwHighDateTime=0x1cb892b, nFileSizeHigh=0x0, nFileSizeLow=0x6e200, dwReserved0=0x0, dwReserved1=0x0, cFileName="ieproxy.dll", cAlternateFileName="")) returned 1 [0034.349] FindNextFileW (in: hFindFile=0x381c80, lpFindFileData=0x31e5e4 | out: lpFindFileData=0x31e5e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa357baf4, ftCreationTime.dwHighDateTime=0x1cb892b, ftLastAccessTime.dwLowDateTime=0xa357baf4, ftLastAccessTime.dwHighDateTime=0x1cb892b, ftLastWriteTime.dwLowDateTime=0xa357baf4, ftLastWriteTime.dwHighDateTime=0x1cb892b, nFileSizeHigh=0x0, nFileSizeLow=0x47a00, dwReserved0=0x0, dwReserved1=0x0, cFileName="IEShims.dll", cAlternateFileName="")) returned 1 [0034.349] FindNextFileW (in: hFindFile=0x381c80, lpFindFileData=0x31e5e4 | out: lpFindFileData=0x31e5e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa387567a, ftCreationTime.dwHighDateTime=0x1cb892b, ftLastAccessTime.dwLowDateTime=0xa387567a, ftLastAccessTime.dwHighDateTime=0x1cb892b, ftLastWriteTime.dwLowDateTime=0xa387567a, ftLastWriteTime.dwHighDateTime=0x1cb892b, nFileSizeHigh=0x0, nFileSizeLow=0xa9b10, dwReserved0=0x0, dwReserved1=0x0, cFileName="iexplore.exe", cAlternateFileName="")) returned 1 [0034.349] FindNextFileW (in: hFindFile=0x381c80, lpFindFileData=0x31e5e4 | out: lpFindFileData=0x31e5e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa3686496, ftCreationTime.dwHighDateTime=0x1cb892b, ftLastAccessTime.dwLowDateTime=0xa3686496, ftLastAccessTime.dwHighDateTime=0x1cb892b, ftLastWriteTime.dwLowDateTime=0xa36ac5f7, ftLastWriteTime.dwHighDateTime=0x1cb892b, nFileSizeHigh=0x0, nFileSizeLow=0x7b600, dwReserved0=0x0, dwReserved1=0x0, cFileName="jsdbgui.dll", cAlternateFileName="")) returned 1 [0034.349] FindNextFileW (in: hFindFile=0x381c80, lpFindFileData=0x31e5e4 | out: lpFindFileData=0x31e5e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe54abd0a, ftCreationTime.dwHighDateTime=0x1ca0415, ftLastAccessTime.dwLowDateTime=0xe54abd0a, ftLastAccessTime.dwHighDateTime=0x1ca0415, ftLastWriteTime.dwLowDateTime=0x2b495380, ftLastWriteTime.dwHighDateTime=0x1ca0424, nFileSizeHigh=0x0, nFileSizeLow=0x23600, dwReserved0=0x0, dwReserved1=0x0, cFileName="jsdebuggeride.dll", cAlternateFileName="")) returned 1 [0034.349] FindNextFileW (in: hFindFile=0x381c80, lpFindFileData=0x31e5e4 | out: lpFindFileData=0x31e5e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe41a0e8a, ftCreationTime.dwHighDateTime=0x1ca0415, ftLastAccessTime.dwLowDateTime=0xe41a0e8a, ftLastAccessTime.dwHighDateTime=0x1ca0415, ftLastWriteTime.dwLowDateTime=0x2b4b9d70, ftLastWriteTime.dwHighDateTime=0x1ca0424, nFileSizeHigh=0x0, nFileSizeLow=0x20400, dwReserved0=0x0, dwReserved1=0x0, cFileName="JSProfilerCore.dll", cAlternateFileName="")) returned 1 [0034.349] FindNextFileW (in: hFindFile=0x381c80, lpFindFileData=0x31e5e4 | out: lpFindFileData=0x31e5e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa36ac5f7, ftCreationTime.dwHighDateTime=0x1cb892b, ftLastAccessTime.dwLowDateTime=0xa36ac5f7, ftLastAccessTime.dwHighDateTime=0x1cb892b, ftLastWriteTime.dwLowDateTime=0xa36ac5f7, ftLastWriteTime.dwHighDateTime=0x1cb892b, nFileSizeHigh=0x0, nFileSizeLow=0x46400, dwReserved0=0x0, dwReserved1=0x0, cFileName="jsprofilerui.dll", cAlternateFileName="")) returned 1 [0034.349] FindNextFileW (in: hFindFile=0x381c80, lpFindFileData=0x31e5e4 | out: lpFindFileData=0x31e5e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x825d0f8, ftCreationTime.dwHighDateTime=0x1ca0404, ftLastAccessTime.dwLowDateTime=0x825d0f8, ftLastAccessTime.dwHighDateTime=0x1ca0404, ftLastWriteTime.dwLowDateTime=0x5909b005, ftLastWriteTime.dwHighDateTime=0x1c9ea0a, nFileSizeHigh=0x0, nFileSizeLow=0x579f8, dwReserved0=0x0, dwReserved1=0x0, cFileName="msdbg2.dll", cAlternateFileName="")) returned 1 [0034.349] FindNextFileW (in: hFindFile=0x381c80, lpFindFileData=0x31e5e4 | out: lpFindFileData=0x31e5e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x594eb7ab, ftCreationTime.dwHighDateTime=0x1c9ea0a, ftLastAccessTime.dwLowDateTime=0x594eb7ab, ftLastAccessTime.dwHighDateTime=0x1c9ea0a, ftLastWriteTime.dwLowDateTime=0x439e9300, ftLastWriteTime.dwHighDateTime=0x1ca0424, nFileSizeHigh=0x0, nFileSizeLow=0x83200, dwReserved0=0x0, dwReserved1=0x0, cFileName="pdm.dll", cAlternateFileName="")) returned 1 [0034.349] FindNextFileW (in: hFindFile=0x381c80, lpFindFileData=0x31e5e4 | out: lpFindFileData=0x31e5e4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x80046d91, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x98d1a336, ftLastAccessTime.dwHighDateTime=0x1cb892c, ftLastWriteTime.dwLowDateTime=0x98d1a336, ftLastWriteTime.dwHighDateTime=0x1cb892c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="SIGNUP", cAlternateFileName="")) returned 1 [0034.350] FindNextFileW (in: hFindFile=0x381c80, lpFindFileData=0x31e5e4 | out: lpFindFileData=0x31e5e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x855fc7e1, ftCreationTime.dwHighDateTime=0x1cb892b, ftLastAccessTime.dwLowDateTime=0x855fc7e1, ftLastAccessTime.dwHighDateTime=0x1cb892b, ftLastWriteTime.dwLowDateTime=0x85622942, ftLastWriteTime.dwHighDateTime=0x1cb892b, nFileSizeHigh=0x0, nFileSizeLow=0x3bc00, dwReserved0=0x0, dwReserved1=0x0, cFileName="sqmapi.dll", cAlternateFileName="")) returned 1 [0034.350] FindNextFileW (in: hFindFile=0x381c80, lpFindFileData=0x31e5e4 | out: lpFindFileData=0x31e5e4*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0034.350] FindClose (in: hFindFile=0x381c80 | out: hFindFile=0x381c80) returned 1 [0034.350] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e86c) returned 1 [0034.350] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e878) returned 1 [0034.350] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e8ac) returned 1 [0034.350] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Internet Explorer", nBufferLength=0x105, lpBuffer=0x31e3b4, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Internet Explorer", lpFilePart=0x0) returned 0x22 [0034.350] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Internet Explorer\\", nBufferLength=0x105, lpBuffer=0x31e388, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Internet Explorer\\", lpFilePart=0x0) returned 0x23 [0034.350] FindFirstFileW (in: lpFileName="C:\\Program Files\\Internet Explorer\\*", lpFindFileData=0x31e5d4 | out: lpFindFileData=0x31e5d4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd885082, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x1ead9a68, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x1ead9a68, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x381c80 [0034.350] FindNextFileW (in: hFindFile=0x381c80, lpFindFileData=0x31e5e4 | out: lpFindFileData=0x31e5e4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd885082, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x1ead9a68, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x1ead9a68, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0034.350] FindNextFileW (in: hFindFile=0x381c80, lpFindFileData=0x31e5e4 | out: lpFindFileData=0x31e5e4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1ead9a68, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x23ef19fc, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x1ead9a68, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="en-US", cAlternateFileName="")) returned 1 [0034.350] FindNextFileW (in: hFindFile=0x381c80, lpFindFileData=0x31e5e4 | out: lpFindFileData=0x31e5e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5f55643f, ftCreationTime.dwHighDateTime=0x1ca0415, ftLastAccessTime.dwLowDateTime=0x5f55643f, ftLastAccessTime.dwHighDateTime=0x1ca0415, ftLastWriteTime.dwLowDateTime=0x23ff2d20, ftLastWriteTime.dwHighDateTime=0x1ca0424, nFileSizeHigh=0x0, nFileSizeLow=0xce00, dwReserved0=0x0, dwReserved1=0x0, cFileName="hmmapi.dll", cAlternateFileName="")) returned 1 [0034.351] FindNextFileW (in: hFindFile=0x381c80, lpFindFileData=0x31e5e4 | out: lpFindFileData=0x31e5e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb9a30bbb, ftCreationTime.dwHighDateTime=0x1c9ea0a, ftLastAccessTime.dwLowDateTime=0xb9a30bbb, ftLastAccessTime.dwHighDateTime=0x1c9ea0a, ftLastWriteTime.dwLowDateTime=0xb9a30bbb, ftLastWriteTime.dwHighDateTime=0x1c9ea0a, nFileSizeHigh=0x0, nFileSizeLow=0xa59, dwReserved0=0x0, dwReserved1=0x0, cFileName="ie8props.propdesc", cAlternateFileName="")) returned 1 [0034.351] FindNextFileW (in: hFindFile=0x381c80, lpFindFileData=0x31e5e4 | out: lpFindFileData=0x31e5e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa37b6f98, ftCreationTime.dwHighDateTime=0x1cb892b, ftLastAccessTime.dwLowDateTime=0xa37b6f98, ftLastAccessTime.dwHighDateTime=0x1cb892b, ftLastWriteTime.dwLowDateTime=0xa37b6f98, ftLastWriteTime.dwHighDateTime=0x1cb892b, nFileSizeHigh=0x0, nFileSizeLow=0x1e00, dwReserved0=0x0, dwReserved1=0x0, cFileName="iecompat.dll", cAlternateFileName="")) returned 1 [0034.351] FindNextFileW (in: hFindFile=0x381c80, lpFindFileData=0x31e5e4 | out: lpFindFileData=0x31e5e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa37b6f98, ftCreationTime.dwHighDateTime=0x1cb892b, ftLastAccessTime.dwLowDateTime=0xa37b6f98, ftLastAccessTime.dwHighDateTime=0x1cb892b, ftLastWriteTime.dwLowDateTime=0xa37dd0f9, ftLastWriteTime.dwHighDateTime=0x1cb892b, nFileSizeHigh=0x0, nFileSizeLow=0xf7600, dwReserved0=0x0, dwReserved1=0x0, cFileName="iedvtool.dll", cAlternateFileName="")) returned 1 [0034.351] FindNextFileW (in: hFindFile=0x381c80, lpFindFileData=0x31e5e4 | out: lpFindFileData=0x31e5e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa357baf4, ftCreationTime.dwHighDateTime=0x1cb892b, ftLastAccessTime.dwLowDateTime=0xa357baf4, ftLastAccessTime.dwHighDateTime=0x1cb892b, ftLastWriteTime.dwLowDateTime=0xa357baf4, ftLastWriteTime.dwHighDateTime=0x1cb892b, nFileSizeHigh=0x0, nFileSizeLow=0x41e00, dwReserved0=0x0, dwReserved1=0x0, cFileName="ieinstal.exe", cAlternateFileName="")) returned 1 [0034.351] FindNextFileW (in: hFindFile=0x381c80, lpFindFileData=0x31e5e4 | out: lpFindFileData=0x31e5e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xdecd4578, ftCreationTime.dwHighDateTime=0x1ca0415, ftLastAccessTime.dwLowDateTime=0xdecd4578, ftLastAccessTime.dwHighDateTime=0x1ca0415, ftLastWriteTime.dwLowDateTime=0xe3cb04e0, ftLastWriteTime.dwHighDateTime=0x1ca0423, nFileSizeHigh=0x0, nFileSizeLow=0x1c400, dwReserved0=0x0, dwReserved1=0x0, cFileName="ielowutil.exe", cAlternateFileName="")) returned 1 [0034.352] FindNextFileW (in: hFindFile=0x381c80, lpFindFileData=0x31e5e4 | out: lpFindFileData=0x31e5e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa3803259, ftCreationTime.dwHighDateTime=0x1cb892b, ftLastAccessTime.dwLowDateTime=0xa3803259, ftLastAccessTime.dwHighDateTime=0x1cb892b, ftLastWriteTime.dwLowDateTime=0xa3803259, ftLastWriteTime.dwHighDateTime=0x1cb892b, nFileSizeHigh=0x0, nFileSizeLow=0x6e200, dwReserved0=0x0, dwReserved1=0x0, cFileName="ieproxy.dll", cAlternateFileName="")) returned 1 [0034.352] FindNextFileW (in: hFindFile=0x381c80, lpFindFileData=0x31e5e4 | out: lpFindFileData=0x31e5e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa357baf4, ftCreationTime.dwHighDateTime=0x1cb892b, ftLastAccessTime.dwLowDateTime=0xa357baf4, ftLastAccessTime.dwHighDateTime=0x1cb892b, ftLastWriteTime.dwLowDateTime=0xa357baf4, ftLastWriteTime.dwHighDateTime=0x1cb892b, nFileSizeHigh=0x0, nFileSizeLow=0x47a00, dwReserved0=0x0, dwReserved1=0x0, cFileName="IEShims.dll", cAlternateFileName="")) returned 1 [0034.352] FindNextFileW (in: hFindFile=0x381c80, lpFindFileData=0x31e5e4 | out: lpFindFileData=0x31e5e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa387567a, ftCreationTime.dwHighDateTime=0x1cb892b, ftLastAccessTime.dwLowDateTime=0xa387567a, ftLastAccessTime.dwHighDateTime=0x1cb892b, ftLastWriteTime.dwLowDateTime=0xa387567a, ftLastWriteTime.dwHighDateTime=0x1cb892b, nFileSizeHigh=0x0, nFileSizeLow=0xa9b10, dwReserved0=0x0, dwReserved1=0x0, cFileName="iexplore.exe", cAlternateFileName="")) returned 1 [0034.352] FindNextFileW (in: hFindFile=0x381c80, lpFindFileData=0x31e5e4 | out: lpFindFileData=0x31e5e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa3686496, ftCreationTime.dwHighDateTime=0x1cb892b, ftLastAccessTime.dwLowDateTime=0xa3686496, ftLastAccessTime.dwHighDateTime=0x1cb892b, ftLastWriteTime.dwLowDateTime=0xa36ac5f7, ftLastWriteTime.dwHighDateTime=0x1cb892b, nFileSizeHigh=0x0, nFileSizeLow=0x7b600, dwReserved0=0x0, dwReserved1=0x0, cFileName="jsdbgui.dll", cAlternateFileName="")) returned 1 [0034.352] FindNextFileW (in: hFindFile=0x381c80, lpFindFileData=0x31e5e4 | out: lpFindFileData=0x31e5e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe54abd0a, ftCreationTime.dwHighDateTime=0x1ca0415, ftLastAccessTime.dwLowDateTime=0xe54abd0a, ftLastAccessTime.dwHighDateTime=0x1ca0415, ftLastWriteTime.dwLowDateTime=0x2b495380, ftLastWriteTime.dwHighDateTime=0x1ca0424, nFileSizeHigh=0x0, nFileSizeLow=0x23600, dwReserved0=0x0, dwReserved1=0x0, cFileName="jsdebuggeride.dll", cAlternateFileName="")) returned 1 [0034.352] FindNextFileW (in: hFindFile=0x381c80, lpFindFileData=0x31e5e4 | out: lpFindFileData=0x31e5e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe41a0e8a, ftCreationTime.dwHighDateTime=0x1ca0415, ftLastAccessTime.dwLowDateTime=0xe41a0e8a, ftLastAccessTime.dwHighDateTime=0x1ca0415, ftLastWriteTime.dwLowDateTime=0x2b4b9d70, ftLastWriteTime.dwHighDateTime=0x1ca0424, nFileSizeHigh=0x0, nFileSizeLow=0x20400, dwReserved0=0x0, dwReserved1=0x0, cFileName="JSProfilerCore.dll", cAlternateFileName="")) returned 1 [0034.352] FindNextFileW (in: hFindFile=0x381c80, lpFindFileData=0x31e5e4 | out: lpFindFileData=0x31e5e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa36ac5f7, ftCreationTime.dwHighDateTime=0x1cb892b, ftLastAccessTime.dwLowDateTime=0xa36ac5f7, ftLastAccessTime.dwHighDateTime=0x1cb892b, ftLastWriteTime.dwLowDateTime=0xa36ac5f7, ftLastWriteTime.dwHighDateTime=0x1cb892b, nFileSizeHigh=0x0, nFileSizeLow=0x46400, dwReserved0=0x0, dwReserved1=0x0, cFileName="jsprofilerui.dll", cAlternateFileName="")) returned 1 [0034.352] FindNextFileW (in: hFindFile=0x381c80, lpFindFileData=0x31e5e4 | out: lpFindFileData=0x31e5e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x825d0f8, ftCreationTime.dwHighDateTime=0x1ca0404, ftLastAccessTime.dwLowDateTime=0x825d0f8, ftLastAccessTime.dwHighDateTime=0x1ca0404, ftLastWriteTime.dwLowDateTime=0x5909b005, ftLastWriteTime.dwHighDateTime=0x1c9ea0a, nFileSizeHigh=0x0, nFileSizeLow=0x579f8, dwReserved0=0x0, dwReserved1=0x0, cFileName="msdbg2.dll", cAlternateFileName="")) returned 1 [0034.353] FindNextFileW (in: hFindFile=0x381c80, lpFindFileData=0x31e5e4 | out: lpFindFileData=0x31e5e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x594eb7ab, ftCreationTime.dwHighDateTime=0x1c9ea0a, ftLastAccessTime.dwLowDateTime=0x594eb7ab, ftLastAccessTime.dwHighDateTime=0x1c9ea0a, ftLastWriteTime.dwLowDateTime=0x439e9300, ftLastWriteTime.dwHighDateTime=0x1ca0424, nFileSizeHigh=0x0, nFileSizeLow=0x83200, dwReserved0=0x0, dwReserved1=0x0, cFileName="pdm.dll", cAlternateFileName="")) returned 1 [0034.353] FindNextFileW (in: hFindFile=0x381c80, lpFindFileData=0x31e5e4 | out: lpFindFileData=0x31e5e4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x80046d91, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x98d1a336, ftLastAccessTime.dwHighDateTime=0x1cb892c, ftLastWriteTime.dwLowDateTime=0x98d1a336, ftLastWriteTime.dwHighDateTime=0x1cb892c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="SIGNUP", cAlternateFileName="")) returned 1 [0034.353] FindNextFileW (in: hFindFile=0x381c80, lpFindFileData=0x31e5e4 | out: lpFindFileData=0x31e5e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x855fc7e1, ftCreationTime.dwHighDateTime=0x1cb892b, ftLastAccessTime.dwLowDateTime=0x855fc7e1, ftLastAccessTime.dwHighDateTime=0x1cb892b, ftLastWriteTime.dwLowDateTime=0x85622942, ftLastWriteTime.dwHighDateTime=0x1cb892b, nFileSizeHigh=0x0, nFileSizeLow=0x3bc00, dwReserved0=0x0, dwReserved1=0x0, cFileName="sqmapi.dll", cAlternateFileName="")) returned 1 [0034.353] FindNextFileW (in: hFindFile=0x381c80, lpFindFileData=0x31e5e4 | out: lpFindFileData=0x31e5e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x855fc7e1, ftCreationTime.dwHighDateTime=0x1cb892b, ftLastAccessTime.dwLowDateTime=0x855fc7e1, ftLastAccessTime.dwHighDateTime=0x1cb892b, ftLastWriteTime.dwLowDateTime=0x85622942, ftLastWriteTime.dwHighDateTime=0x1cb892b, nFileSizeHigh=0x0, nFileSizeLow=0x3bc00, dwReserved0=0x0, dwReserved1=0x0, cFileName="sqmapi.dll", cAlternateFileName="")) returned 0 [0034.353] FindClose (in: hFindFile=0x381c80 | out: hFindFile=0x381c80) returned 1 [0034.353] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e86c) returned 1 [0034.353] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e878) returned 1 [0034.353] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e834) returned 1 [0034.353] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Internet Explorer\\en-US", nBufferLength=0x105, lpBuffer=0x31e33c, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Internet Explorer\\en-US", lpFilePart=0x0) returned 0x28 [0034.353] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Internet Explorer\\en-US\\", nBufferLength=0x105, lpBuffer=0x31e310, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Internet Explorer\\en-US\\", lpFilePart=0x0) returned 0x29 [0034.353] FindFirstFileW (in: lpFileName="C:\\Program Files\\Internet Explorer\\en-US\\*", lpFindFileData=0x31e55c | out: lpFindFileData=0x31e55c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1ead9a68, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x23ef19fc, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x1ead9a68, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x381c80 [0034.354] FindNextFileW (in: hFindFile=0x381c80, lpFindFileData=0x31e56c | out: lpFindFileData=0x31e56c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1ead9a68, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x23ef19fc, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x1ead9a68, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0034.354] FindNextFileW (in: hFindFile=0x381c80, lpFindFileData=0x31e56c | out: lpFindFileData=0x31e56c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x128b8182, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x12aa84e7, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x128b8182, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0xa00, dwReserved0=0x0, dwReserved1=0x0, cFileName="hmmapi.dll.mui", cAlternateFileName="")) returned 1 [0034.355] FindNextFileW (in: hFindFile=0x381c80, lpFindFileData=0x31e56c | out: lpFindFileData=0x31e56c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x128b8182, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x12aa84e7, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x128b8182, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x7000, dwReserved0=0x0, dwReserved1=0x0, cFileName="iedvtool.dll.mui", cAlternateFileName="")) returned 1 [0034.355] FindNextFileW (in: hFindFile=0x381c80, lpFindFileData=0x31e56c | out: lpFindFileData=0x31e56c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x128de43b, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x12aa84e7, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x128de43b, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x800, dwReserved0=0x0, dwReserved1=0x0, cFileName="ieinstal.exe.mui", cAlternateFileName="")) returned 1 [0034.355] FindNextFileW (in: hFindFile=0x381c80, lpFindFileData=0x31e56c | out: lpFindFileData=0x31e56c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x128de43b, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x12aa84e7, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x128de43b, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x800, dwReserved0=0x0, dwReserved1=0x0, cFileName="ielowutil.exe.mui", cAlternateFileName="")) returned 1 [0034.355] FindNextFileW (in: hFindFile=0x381c80, lpFindFileData=0x31e56c | out: lpFindFileData=0x31e56c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe647cb96, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0xe647cb96, ftLastAccessTime.dwHighDateTime=0x1ca0444, ftLastWriteTime.dwLowDateTime=0xe45e4000, ftLastWriteTime.dwHighDateTime=0x1ca042a, nFileSizeHigh=0x0, nFileSizeLow=0x1400, dwReserved0=0x0, dwReserved1=0x0, cFileName="iexplore.exe.mui", cAlternateFileName="")) returned 1 [0034.355] FindNextFileW (in: hFindFile=0x381c80, lpFindFileData=0x31e56c | out: lpFindFileData=0x31e56c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x128b8182, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x12aa84e7, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x128b8182, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x2e00, dwReserved0=0x0, dwReserved1=0x0, cFileName="jsdbgui.dll.mui", cAlternateFileName="")) returned 1 [0034.355] FindNextFileW (in: hFindFile=0x381c80, lpFindFileData=0x31e56c | out: lpFindFileData=0x31e56c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x128b8182, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x12aa84e7, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x128b8182, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x800, dwReserved0=0x0, dwReserved1=0x0, cFileName="jsdebuggeride.dll.mui", cAlternateFileName="")) returned 1 [0034.355] FindNextFileW (in: hFindFile=0x381c80, lpFindFileData=0x31e56c | out: lpFindFileData=0x31e56c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x128de43b, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x12aa84e7, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x128de43b, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x800, dwReserved0=0x0, dwReserved1=0x0, cFileName="JSProfilerCore.dll.mui", cAlternateFileName="")) returned 1 [0034.355] FindNextFileW (in: hFindFile=0x381c80, lpFindFileData=0x31e56c | out: lpFindFileData=0x31e56c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x128de43b, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x12aa84e7, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x128de43b, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x1c00, dwReserved0=0x0, dwReserved1=0x0, cFileName="jsprofilerui.dll.mui", cAlternateFileName="")) returned 1 [0034.355] FindNextFileW (in: hFindFile=0x381c80, lpFindFileData=0x31e56c | out: lpFindFileData=0x31e56c*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0034.356] FindClose (in: hFindFile=0x381c80 | out: hFindFile=0x381c80) returned 1 [0034.356] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e7f4) returned 1 [0034.356] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e800) returned 1 [0034.356] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e834) returned 1 [0034.356] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Internet Explorer\\en-US", nBufferLength=0x105, lpBuffer=0x31e33c, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Internet Explorer\\en-US", lpFilePart=0x0) returned 0x28 [0034.356] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Internet Explorer\\en-US\\", nBufferLength=0x105, lpBuffer=0x31e310, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Internet Explorer\\en-US\\", lpFilePart=0x0) returned 0x29 [0034.356] FindFirstFileW (in: lpFileName="C:\\Program Files\\Internet Explorer\\en-US\\*", lpFindFileData=0x31e55c | out: lpFindFileData=0x31e55c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1ead9a68, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x23ef19fc, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x1ead9a68, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x381c80 [0034.357] FindNextFileW (in: hFindFile=0x381c80, lpFindFileData=0x31e56c | out: lpFindFileData=0x31e56c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1ead9a68, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x23ef19fc, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x1ead9a68, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0034.357] FindNextFileW (in: hFindFile=0x381c80, lpFindFileData=0x31e56c | out: lpFindFileData=0x31e56c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x128b8182, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x12aa84e7, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x128b8182, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0xa00, dwReserved0=0x0, dwReserved1=0x0, cFileName="hmmapi.dll.mui", cAlternateFileName="")) returned 1 [0034.357] FindNextFileW (in: hFindFile=0x381c80, lpFindFileData=0x31e56c | out: lpFindFileData=0x31e56c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x128b8182, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x12aa84e7, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x128b8182, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x7000, dwReserved0=0x0, dwReserved1=0x0, cFileName="iedvtool.dll.mui", cAlternateFileName="")) returned 1 [0034.358] FindNextFileW (in: hFindFile=0x381c80, lpFindFileData=0x31e56c | out: lpFindFileData=0x31e56c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x128de43b, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x12aa84e7, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x128de43b, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x800, dwReserved0=0x0, dwReserved1=0x0, cFileName="ieinstal.exe.mui", cAlternateFileName="")) returned 1 [0034.358] FindNextFileW (in: hFindFile=0x381c80, lpFindFileData=0x31e56c | out: lpFindFileData=0x31e56c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x128de43b, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x12aa84e7, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x128de43b, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x800, dwReserved0=0x0, dwReserved1=0x0, cFileName="ielowutil.exe.mui", cAlternateFileName="")) returned 1 [0034.358] FindNextFileW (in: hFindFile=0x381c80, lpFindFileData=0x31e56c | out: lpFindFileData=0x31e56c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe647cb96, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0xe647cb96, ftLastAccessTime.dwHighDateTime=0x1ca0444, ftLastWriteTime.dwLowDateTime=0xe45e4000, ftLastWriteTime.dwHighDateTime=0x1ca042a, nFileSizeHigh=0x0, nFileSizeLow=0x1400, dwReserved0=0x0, dwReserved1=0x0, cFileName="iexplore.exe.mui", cAlternateFileName="")) returned 1 [0034.358] FindNextFileW (in: hFindFile=0x381c80, lpFindFileData=0x31e56c | out: lpFindFileData=0x31e56c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x128b8182, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x12aa84e7, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x128b8182, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x2e00, dwReserved0=0x0, dwReserved1=0x0, cFileName="jsdbgui.dll.mui", cAlternateFileName="")) returned 1 [0034.358] FindNextFileW (in: hFindFile=0x381c80, lpFindFileData=0x31e56c | out: lpFindFileData=0x31e56c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x128b8182, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x12aa84e7, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x128b8182, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x800, dwReserved0=0x0, dwReserved1=0x0, cFileName="jsdebuggeride.dll.mui", cAlternateFileName="")) returned 1 [0034.358] FindNextFileW (in: hFindFile=0x381c80, lpFindFileData=0x31e56c | out: lpFindFileData=0x31e56c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x128de43b, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x12aa84e7, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x128de43b, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x800, dwReserved0=0x0, dwReserved1=0x0, cFileName="JSProfilerCore.dll.mui", cAlternateFileName="")) returned 1 [0034.358] FindNextFileW (in: hFindFile=0x381c80, lpFindFileData=0x31e56c | out: lpFindFileData=0x31e56c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x128de43b, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x12aa84e7, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x128de43b, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x1c00, dwReserved0=0x0, dwReserved1=0x0, cFileName="jsprofilerui.dll.mui", cAlternateFileName="")) returned 1 [0034.359] FindNextFileW (in: hFindFile=0x381c80, lpFindFileData=0x31e56c | out: lpFindFileData=0x31e56c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x128de43b, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x12aa84e7, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x128de43b, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x1c00, dwReserved0=0x0, dwReserved1=0x0, cFileName="jsprofilerui.dll.mui", cAlternateFileName="")) returned 0 [0034.359] FindClose (in: hFindFile=0x381c80 | out: hFindFile=0x381c80) returned 1 [0034.359] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e7f4) returned 1 [0034.359] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e800) returned 1 [0034.359] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e834) returned 1 [0034.359] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Internet Explorer\\SIGNUP", nBufferLength=0x105, lpBuffer=0x31e33c, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Internet Explorer\\SIGNUP", lpFilePart=0x0) returned 0x29 [0034.360] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Internet Explorer\\SIGNUP\\", nBufferLength=0x105, lpBuffer=0x31e310, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Internet Explorer\\SIGNUP\\", lpFilePart=0x0) returned 0x2a [0034.360] FindFirstFileW (in: lpFileName="C:\\Program Files\\Internet Explorer\\SIGNUP\\*", lpFindFileData=0x31e55c | out: lpFindFileData=0x31e55c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x80046d91, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x98d1a336, ftLastAccessTime.dwHighDateTime=0x1cb892c, ftLastWriteTime.dwLowDateTime=0x98d1a336, ftLastWriteTime.dwHighDateTime=0x1cb892c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x381c80 [0034.360] FindNextFileW (in: hFindFile=0x381c80, lpFindFileData=0x31e56c | out: lpFindFileData=0x31e56c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x80046d91, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x98d1a336, ftLastAccessTime.dwHighDateTime=0x1cb892c, ftLastWriteTime.dwLowDateTime=0x98d1a336, ftLastWriteTime.dwHighDateTime=0x1cb892c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0034.360] FindNextFileW (in: hFindFile=0x381c80, lpFindFileData=0x31e56c | out: lpFindFileData=0x31e56c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x80471418, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0xf22307c6, ftLastAccessTime.dwHighDateTime=0x1cb892b, ftLastWriteTime.dwLowDateTime=0xf22307c6, ftLastWriteTime.dwHighDateTime=0x1cb892b, nFileSizeHigh=0x0, nFileSizeLow=0x1cc, dwReserved0=0x0, dwReserved1=0x0, cFileName="install.ins", cAlternateFileName="")) returned 1 [0034.360] FindNextFileW (in: hFindFile=0x381c80, lpFindFileData=0x31e56c | out: lpFindFileData=0x31e56c*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0034.360] FindClose (in: hFindFile=0x381c80 | out: hFindFile=0x381c80) returned 1 [0034.360] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e7f4) returned 1 [0034.360] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e800) returned 1 [0034.360] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e834) returned 1 [0034.361] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Internet Explorer\\SIGNUP", nBufferLength=0x105, lpBuffer=0x31e33c, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Internet Explorer\\SIGNUP", lpFilePart=0x0) returned 0x29 [0034.361] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Internet Explorer\\SIGNUP\\", nBufferLength=0x105, lpBuffer=0x31e310, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Internet Explorer\\SIGNUP\\", lpFilePart=0x0) returned 0x2a [0034.361] FindFirstFileW (in: lpFileName="C:\\Program Files\\Internet Explorer\\SIGNUP\\*", lpFindFileData=0x31e55c | out: lpFindFileData=0x31e55c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x80046d91, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x98d1a336, ftLastAccessTime.dwHighDateTime=0x1cb892c, ftLastWriteTime.dwLowDateTime=0x98d1a336, ftLastWriteTime.dwHighDateTime=0x1cb892c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x381c80 [0034.361] FindNextFileW (in: hFindFile=0x381c80, lpFindFileData=0x31e56c | out: lpFindFileData=0x31e56c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x80046d91, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x98d1a336, ftLastAccessTime.dwHighDateTime=0x1cb892c, ftLastWriteTime.dwLowDateTime=0x98d1a336, ftLastWriteTime.dwHighDateTime=0x1cb892c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0034.361] FindNextFileW (in: hFindFile=0x381c80, lpFindFileData=0x31e56c | out: lpFindFileData=0x31e56c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x80471418, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0xf22307c6, ftLastAccessTime.dwHighDateTime=0x1cb892b, ftLastWriteTime.dwLowDateTime=0xf22307c6, ftLastWriteTime.dwHighDateTime=0x1cb892b, nFileSizeHigh=0x0, nFileSizeLow=0x1cc, dwReserved0=0x0, dwReserved1=0x0, cFileName="install.ins", cAlternateFileName="")) returned 1 [0034.361] FindNextFileW (in: hFindFile=0x381c80, lpFindFileData=0x31e56c | out: lpFindFileData=0x31e56c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x80471418, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0xf22307c6, ftLastAccessTime.dwHighDateTime=0x1cb892b, ftLastWriteTime.dwLowDateTime=0xf22307c6, ftLastWriteTime.dwHighDateTime=0x1cb892b, nFileSizeHigh=0x0, nFileSizeLow=0x1cc, dwReserved0=0x0, dwReserved1=0x0, cFileName="install.ins", cAlternateFileName="")) returned 0 [0034.361] FindClose (in: hFindFile=0x381c80 | out: hFindFile=0x381c80) returned 1 [0034.361] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e7f4) returned 1 [0034.361] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e800) returned 1 [0034.361] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e8ac) returned 1 [0034.361] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Analysis Services", nBufferLength=0x105, lpBuffer=0x31e3b4, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Analysis Services", lpFilePart=0x0) returned 0x2c [0034.361] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Analysis Services\\", nBufferLength=0x105, lpBuffer=0x31e388, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Analysis Services\\", lpFilePart=0x0) returned 0x2d [0034.362] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Analysis Services\\*", lpFindFileData=0x31e5d4 | out: lpFindFileData=0x31e5d4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfa1d4a90, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xd9a52940, ftLastAccessTime.dwHighDateTime=0x1d5e82a, ftLastWriteTime.dwLowDateTime=0xd9a52940, ftLastWriteTime.dwHighDateTime=0x1d5e82a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x381c80 [0034.362] FindNextFileW (in: hFindFile=0x381c80, lpFindFileData=0x31e5e4 | out: lpFindFileData=0x31e5e4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfa1d4a90, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xd9a52940, ftLastAccessTime.dwHighDateTime=0x1d5e82a, ftLastWriteTime.dwLowDateTime=0xd9a52940, ftLastWriteTime.dwHighDateTime=0x1d5e82a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0034.362] FindNextFileW (in: hFindFile=0x381c80, lpFindFileData=0x31e5e4 | out: lpFindFileData=0x31e5e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xea5446f0, ftCreationTime.dwHighDateTime=0x1d5e54a, ftLastAccessTime.dwLowDateTime=0xb5ef08c0, ftLastAccessTime.dwHighDateTime=0x1d5b87a, ftLastWriteTime.dwLowDateTime=0xb5ef08c0, ftLastWriteTime.dwHighDateTime=0x1d5b87a, nFileSizeHigh=0x0, nFileSizeLow=0x13a00, dwReserved0=0x0, dwReserved1=0x0, cFileName="aldelo.exe", cAlternateFileName="")) returned 1 [0034.362] FindNextFileW (in: hFindFile=0x381c80, lpFindFileData=0x31e5e4 | out: lpFindFileData=0x31e5e4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfa1d4a90, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xfa1d4a90, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xfa1d4a90, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="AS OLEDB", cAlternateFileName="ASOLED~1")) returned 1 [0034.362] FindNextFileW (in: hFindFile=0x381c80, lpFindFileData=0x31e5e4 | out: lpFindFileData=0x31e5e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1ce4a430, ftCreationTime.dwHighDateTime=0x1d56089, ftLastAccessTime.dwLowDateTime=0xec7a1b0, ftLastAccessTime.dwHighDateTime=0x1d56136, ftLastWriteTime.dwLowDateTime=0xec7a1b0, ftLastWriteTime.dwHighDateTime=0x1d56136, nFileSizeHigh=0x0, nFileSizeLow=0x13a00, dwReserved0=0x0, dwReserved1=0x0, cFileName="centralcreditcard.exe", cAlternateFileName="CENTRA~1.EXE")) returned 1 [0034.362] FindNextFileW (in: hFindFile=0x381c80, lpFindFileData=0x31e5e4 | out: lpFindFileData=0x31e5e4*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0034.362] FindClose (in: hFindFile=0x381c80 | out: hFindFile=0x381c80) returned 1 [0034.362] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e86c) returned 1 [0034.362] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e878) returned 1 [0034.363] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e8ac) returned 1 [0034.363] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Analysis Services", nBufferLength=0x105, lpBuffer=0x31e3b4, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Analysis Services", lpFilePart=0x0) returned 0x2c [0034.363] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Analysis Services\\", nBufferLength=0x105, lpBuffer=0x31e388, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Analysis Services\\", lpFilePart=0x0) returned 0x2d [0034.363] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Analysis Services\\*", lpFindFileData=0x31e5d4 | out: lpFindFileData=0x31e5d4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfa1d4a90, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xd9a52940, ftLastAccessTime.dwHighDateTime=0x1d5e82a, ftLastWriteTime.dwLowDateTime=0xd9a52940, ftLastWriteTime.dwHighDateTime=0x1d5e82a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x381c80 [0034.363] FindNextFileW (in: hFindFile=0x381c80, lpFindFileData=0x31e5e4 | out: lpFindFileData=0x31e5e4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfa1d4a90, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xd9a52940, ftLastAccessTime.dwHighDateTime=0x1d5e82a, ftLastWriteTime.dwLowDateTime=0xd9a52940, ftLastWriteTime.dwHighDateTime=0x1d5e82a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0034.363] FindNextFileW (in: hFindFile=0x381c80, lpFindFileData=0x31e5e4 | out: lpFindFileData=0x31e5e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xea5446f0, ftCreationTime.dwHighDateTime=0x1d5e54a, ftLastAccessTime.dwLowDateTime=0xb5ef08c0, ftLastAccessTime.dwHighDateTime=0x1d5b87a, ftLastWriteTime.dwLowDateTime=0xb5ef08c0, ftLastWriteTime.dwHighDateTime=0x1d5b87a, nFileSizeHigh=0x0, nFileSizeLow=0x13a00, dwReserved0=0x0, dwReserved1=0x0, cFileName="aldelo.exe", cAlternateFileName="")) returned 1 [0034.363] FindNextFileW (in: hFindFile=0x381c80, lpFindFileData=0x31e5e4 | out: lpFindFileData=0x31e5e4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfa1d4a90, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xfa1d4a90, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xfa1d4a90, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="AS OLEDB", cAlternateFileName="ASOLED~1")) returned 1 [0034.363] FindNextFileW (in: hFindFile=0x381c80, lpFindFileData=0x31e5e4 | out: lpFindFileData=0x31e5e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1ce4a430, ftCreationTime.dwHighDateTime=0x1d56089, ftLastAccessTime.dwLowDateTime=0xec7a1b0, ftLastAccessTime.dwHighDateTime=0x1d56136, ftLastWriteTime.dwLowDateTime=0xec7a1b0, ftLastWriteTime.dwHighDateTime=0x1d56136, nFileSizeHigh=0x0, nFileSizeLow=0x13a00, dwReserved0=0x0, dwReserved1=0x0, cFileName="centralcreditcard.exe", cAlternateFileName="CENTRA~1.EXE")) returned 1 [0034.363] FindNextFileW (in: hFindFile=0x381c80, lpFindFileData=0x31e5e4 | out: lpFindFileData=0x31e5e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1ce4a430, ftCreationTime.dwHighDateTime=0x1d56089, ftLastAccessTime.dwLowDateTime=0xec7a1b0, ftLastAccessTime.dwHighDateTime=0x1d56136, ftLastWriteTime.dwLowDateTime=0xec7a1b0, ftLastWriteTime.dwHighDateTime=0x1d56136, nFileSizeHigh=0x0, nFileSizeLow=0x13a00, dwReserved0=0x0, dwReserved1=0x0, cFileName="centralcreditcard.exe", cAlternateFileName="CENTRA~1.EXE")) returned 0 [0034.364] FindClose (in: hFindFile=0x381c80 | out: hFindFile=0x381c80) returned 1 [0034.364] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e86c) returned 1 [0034.364] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e878) returned 1 [0034.364] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e834) returned 1 [0034.364] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Analysis Services\\AS OLEDB", nBufferLength=0x105, lpBuffer=0x31e33c, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Analysis Services\\AS OLEDB", lpFilePart=0x0) returned 0x35 [0034.364] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Analysis Services\\AS OLEDB\\", nBufferLength=0x105, lpBuffer=0x31e310, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Analysis Services\\AS OLEDB\\", lpFilePart=0x0) returned 0x36 [0034.364] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Analysis Services\\AS OLEDB\\*", lpFindFileData=0x31e55c | out: lpFindFileData=0x31e55c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfa1d4a90, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xfa1d4a90, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xfa1d4a90, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x381c80 [0034.364] FindNextFileW (in: hFindFile=0x381c80, lpFindFileData=0x31e56c | out: lpFindFileData=0x31e56c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfa1d4a90, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xfa1d4a90, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xfa1d4a90, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0034.364] FindNextFileW (in: hFindFile=0x381c80, lpFindFileData=0x31e56c | out: lpFindFileData=0x31e56c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfa1d4a90, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0x5f1ce1d0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x5f1ce1d0, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="10", cAlternateFileName="")) returned 1 [0034.364] FindNextFileW (in: hFindFile=0x381c80, lpFindFileData=0x31e56c | out: lpFindFileData=0x31e56c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfa1d4a90, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0x5f1ce1d0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x5f1ce1d0, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="10", cAlternateFileName="")) returned 0 [0034.365] FindClose (in: hFindFile=0x381c80 | out: hFindFile=0x381c80) returned 1 [0034.365] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e7f4) returned 1 [0034.365] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e800) returned 1 [0034.365] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e834) returned 1 [0034.365] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Analysis Services\\AS OLEDB", nBufferLength=0x105, lpBuffer=0x31e33c, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Analysis Services\\AS OLEDB", lpFilePart=0x0) returned 0x35 [0034.365] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Analysis Services\\AS OLEDB\\", nBufferLength=0x105, lpBuffer=0x31e310, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Analysis Services\\AS OLEDB\\", lpFilePart=0x0) returned 0x36 [0034.365] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Analysis Services\\AS OLEDB\\*", lpFindFileData=0x31e55c | out: lpFindFileData=0x31e55c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfa1d4a90, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xfa1d4a90, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xfa1d4a90, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x381c80 [0034.365] FindNextFileW (in: hFindFile=0x381c80, lpFindFileData=0x31e56c | out: lpFindFileData=0x31e56c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfa1d4a90, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xfa1d4a90, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xfa1d4a90, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0034.365] FindNextFileW (in: hFindFile=0x381c80, lpFindFileData=0x31e56c | out: lpFindFileData=0x31e56c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfa1d4a90, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0x5f1ce1d0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x5f1ce1d0, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="10", cAlternateFileName="")) returned 1 [0034.365] FindNextFileW (in: hFindFile=0x381c80, lpFindFileData=0x31e56c | out: lpFindFileData=0x31e56c*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0034.365] FindClose (in: hFindFile=0x381c80 | out: hFindFile=0x381c80) returned 1 [0034.365] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e7f4) returned 1 [0034.365] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e800) returned 1 [0034.365] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e7bc) returned 1 [0034.366] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Analysis Services\\AS OLEDB\\10", nBufferLength=0x105, lpBuffer=0x31e2c4, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Analysis Services\\AS OLEDB\\10", lpFilePart=0x0) returned 0x38 [0034.366] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Analysis Services\\AS OLEDB\\10\\", nBufferLength=0x105, lpBuffer=0x31e298, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Analysis Services\\AS OLEDB\\10\\", lpFilePart=0x0) returned 0x39 [0034.366] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Analysis Services\\AS OLEDB\\10\\*", lpFindFileData=0x31e4e4 | out: lpFindFileData=0x31e4e4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfa1d4a90, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0x5f1ce1d0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x5f1ce1d0, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x381c80 [0034.368] FindNextFileW (in: hFindFile=0x381c80, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfa1d4a90, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0x5f1ce1d0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x5f1ce1d0, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0034.368] FindNextFileW (in: hFindFile=0x381c80, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5146e3d0, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x5edefe10, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x5edefe10, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Cartridges", cAlternateFileName="CARTRI~1")) returned 1 [0034.368] FindNextFileW (in: hFindFile=0x381c80, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf3cf6c00, ftCreationTime.dwHighDateTime=0x1ca2caa, ftLastAccessTime.dwLowDateTime=0x5f005150, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xf3cf6c00, ftLastWriteTime.dwHighDateTime=0x1ca2caa, nFileSizeHigh=0x0, nFileSizeLow=0x2a65d68, dwReserved0=0x0, dwReserved1=0x0, cFileName="msmdlocal.dll", cAlternateFileName="MSMDLO~1.DLL")) returned 1 [0034.368] FindNextFileW (in: hFindFile=0x381c80, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x47fe200, ftCreationTime.dwHighDateTime=0x1ca2cab, ftLastAccessTime.dwLowDateTime=0x51552c10, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x47fe200, ftLastWriteTime.dwHighDateTime=0x1ca2cab, nFileSizeHigh=0x0, nFileSizeLow=0xbc4568, dwReserved0=0x0, dwReserved1=0x0, cFileName="msmgdsrv.dll", cAlternateFileName="")) returned 1 [0034.368] FindNextFileW (in: hFindFile=0x381c80, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5b10f00, ftCreationTime.dwHighDateTime=0x1ca2cab, ftLastAccessTime.dwLowDateTime=0x5f28c8b0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x5b10f00, ftLastWriteTime.dwHighDateTime=0x1ca2cab, nFileSizeHigh=0x0, nFileSizeLow=0x7c6f68, dwReserved0=0x0, dwReserved1=0x0, cFileName="msolap100.dll", cAlternateFileName="MSOLAP~1.DLL")) returned 1 [0034.368] FindNextFileW (in: hFindFile=0x381c80, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb46ad400, ftCreationTime.dwHighDateTime=0x1c8e1fb, ftLastAccessTime.dwLowDateTime=0x516f5b30, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xb46ad400, ftLastWriteTime.dwHighDateTime=0x1c8e1fb, nFileSizeHigh=0x0, nFileSizeLow=0x4dc18, dwReserved0=0x0, dwReserved1=0x0, cFileName="msolui100.dll", cAlternateFileName="MSOLUI~1.DLL")) returned 1 [0034.368] FindNextFileW (in: hFindFile=0x381c80, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfa1d4a90, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xfa1d4a90, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xfa1d4a90, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Resources", cAlternateFileName="RESOUR~1")) returned 1 [0034.368] FindNextFileW (in: hFindFile=0x381c80, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfa1d4a90, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xfa1d4a90, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xfa1d4a90, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Resources", cAlternateFileName="RESOUR~1")) returned 0 [0034.369] FindClose (in: hFindFile=0x381c80 | out: hFindFile=0x381c80) returned 1 [0034.370] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e77c) returned 1 [0034.370] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e788) returned 1 [0034.370] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e7bc) returned 1 [0034.371] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Analysis Services\\AS OLEDB\\10", nBufferLength=0x105, lpBuffer=0x31e2c4, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Analysis Services\\AS OLEDB\\10", lpFilePart=0x0) returned 0x38 [0034.371] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Analysis Services\\AS OLEDB\\10\\", nBufferLength=0x105, lpBuffer=0x31e298, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Analysis Services\\AS OLEDB\\10\\", lpFilePart=0x0) returned 0x39 [0034.371] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Analysis Services\\AS OLEDB\\10\\*", lpFindFileData=0x31e4e4 | out: lpFindFileData=0x31e4e4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfa1d4a90, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0x5f1ce1d0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x5f1ce1d0, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x381c80 [0034.371] FindNextFileW (in: hFindFile=0x381c80, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfa1d4a90, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0x5f1ce1d0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x5f1ce1d0, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0034.372] FindNextFileW (in: hFindFile=0x381c80, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5146e3d0, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x5edefe10, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x5edefe10, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Cartridges", cAlternateFileName="CARTRI~1")) returned 1 [0034.372] FindNextFileW (in: hFindFile=0x381c80, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf3cf6c00, ftCreationTime.dwHighDateTime=0x1ca2caa, ftLastAccessTime.dwLowDateTime=0x5f005150, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xf3cf6c00, ftLastWriteTime.dwHighDateTime=0x1ca2caa, nFileSizeHigh=0x0, nFileSizeLow=0x2a65d68, dwReserved0=0x0, dwReserved1=0x0, cFileName="msmdlocal.dll", cAlternateFileName="MSMDLO~1.DLL")) returned 1 [0034.372] FindNextFileW (in: hFindFile=0x381c80, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x47fe200, ftCreationTime.dwHighDateTime=0x1ca2cab, ftLastAccessTime.dwLowDateTime=0x51552c10, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x47fe200, ftLastWriteTime.dwHighDateTime=0x1ca2cab, nFileSizeHigh=0x0, nFileSizeLow=0xbc4568, dwReserved0=0x0, dwReserved1=0x0, cFileName="msmgdsrv.dll", cAlternateFileName="")) returned 1 [0034.372] FindNextFileW (in: hFindFile=0x381c80, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5b10f00, ftCreationTime.dwHighDateTime=0x1ca2cab, ftLastAccessTime.dwLowDateTime=0x5f28c8b0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x5b10f00, ftLastWriteTime.dwHighDateTime=0x1ca2cab, nFileSizeHigh=0x0, nFileSizeLow=0x7c6f68, dwReserved0=0x0, dwReserved1=0x0, cFileName="msolap100.dll", cAlternateFileName="MSOLAP~1.DLL")) returned 1 [0034.372] FindNextFileW (in: hFindFile=0x381c80, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb46ad400, ftCreationTime.dwHighDateTime=0x1c8e1fb, ftLastAccessTime.dwLowDateTime=0x516f5b30, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xb46ad400, ftLastWriteTime.dwHighDateTime=0x1c8e1fb, nFileSizeHigh=0x0, nFileSizeLow=0x4dc18, dwReserved0=0x0, dwReserved1=0x0, cFileName="msolui100.dll", cAlternateFileName="MSOLUI~1.DLL")) returned 1 [0034.372] FindNextFileW (in: hFindFile=0x381c80, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfa1d4a90, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xfa1d4a90, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xfa1d4a90, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Resources", cAlternateFileName="RESOUR~1")) returned 1 [0034.372] FindNextFileW (in: hFindFile=0x381c80, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0034.373] FindClose (in: hFindFile=0x381c80 | out: hFindFile=0x381c80) returned 1 [0034.373] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e77c) returned 1 [0034.373] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e788) returned 1 [0034.373] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e744) returned 1 [0034.373] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Analysis Services\\AS OLEDB\\10\\Cartridges", nBufferLength=0x105, lpBuffer=0x31e24c, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Analysis Services\\AS OLEDB\\10\\Cartridges", lpFilePart=0x0) returned 0x43 [0034.373] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Analysis Services\\AS OLEDB\\10\\Cartridges\\", nBufferLength=0x105, lpBuffer=0x31e220, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Analysis Services\\AS OLEDB\\10\\Cartridges\\", lpFilePart=0x0) returned 0x44 [0034.373] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Analysis Services\\AS OLEDB\\10\\Cartridges\\*", lpFindFileData=0x31e46c | out: lpFindFileData=0x31e46c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5146e3d0, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x5edefe10, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x5edefe10, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x381c80 [0034.377] FindNextFileW (in: hFindFile=0x381c80, lpFindFileData=0x31e47c | out: lpFindFileData=0x31e47c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5146e3d0, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x5edefe10, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x5edefe10, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0034.377] FindNextFileW (in: hFindFile=0x381c80, lpFindFileData=0x31e47c | out: lpFindFileData=0x31e47c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8ce7000, ftCreationTime.dwHighDateTime=0x1c9b00b, ftLastAccessTime.dwLowDateTime=0x51494530, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xa8ce7000, ftLastWriteTime.dwHighDateTime=0x1c9b00b, nFileSizeHigh=0x0, nFileSizeLow=0x4360, dwReserved0=0x0, dwReserved1=0x0, cFileName="as80.xsl", cAlternateFileName="")) returned 1 [0034.377] FindNextFileW (in: hFindFile=0x381c80, lpFindFileData=0x31e47c | out: lpFindFileData=0x31e47c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8ce7000, ftCreationTime.dwHighDateTime=0x1c9b00b, ftLastAccessTime.dwLowDateTime=0x5ed7d9f0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xa8ce7000, ftLastWriteTime.dwHighDateTime=0x1c9b00b, nFileSizeHigh=0x0, nFileSizeLow=0x4932, dwReserved0=0x0, dwReserved1=0x0, cFileName="as90.xsl", cAlternateFileName="")) returned 1 [0034.377] FindNextFileW (in: hFindFile=0x381c80, lpFindFileData=0x31e47c | out: lpFindFileData=0x31e47c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa81fdc00, ftCreationTime.dwHighDateTime=0x1c8dd0e, ftLastAccessTime.dwLowDateTime=0x51494530, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xa81fdc00, ftLastWriteTime.dwHighDateTime=0x1c8dd0e, nFileSizeHigh=0x0, nFileSizeLow=0x78e4, dwReserved0=0x0, dwReserved1=0x0, cFileName="Informix.xsl", cAlternateFileName="")) returned 1 [0034.377] FindNextFileW (in: hFindFile=0x381c80, lpFindFileData=0x31e47c | out: lpFindFileData=0x31e47c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8ce7000, ftCreationTime.dwHighDateTime=0x1c9b00b, ftLastAccessTime.dwLowDateTime=0x51494530, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xa8ce7000, ftLastWriteTime.dwHighDateTime=0x1c9b00b, nFileSizeHigh=0x0, nFileSizeLow=0x712e, dwReserved0=0x0, dwReserved1=0x0, cFileName="msjet.xsl", cAlternateFileName="")) returned 1 [0034.377] FindNextFileW (in: hFindFile=0x381c80, lpFindFileData=0x31e47c | out: lpFindFileData=0x31e47c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8ce7000, ftCreationTime.dwHighDateTime=0x1c9b00b, ftLastAccessTime.dwLowDateTime=0x51552c10, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xa8ce7000, ftLastWriteTime.dwHighDateTime=0x1c9b00b, nFileSizeHigh=0x0, nFileSizeLow=0x851c, dwReserved0=0x0, dwReserved1=0x0, cFileName="sql2000.xsl", cAlternateFileName="")) returned 1 [0034.377] FindNextFileW (in: hFindFile=0x381c80, lpFindFileData=0x31e47c | out: lpFindFileData=0x31e47c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8ce7000, ftCreationTime.dwHighDateTime=0x1c9b00b, ftLastAccessTime.dwLowDateTime=0x5edefe10, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xa8ce7000, ftLastWriteTime.dwHighDateTime=0x1c9b00b, nFileSizeHigh=0x0, nFileSizeLow=0x7d92, dwReserved0=0x0, dwReserved1=0x0, cFileName="sql70.xsl", cAlternateFileName="")) returned 1 [0034.378] FindNextFileW (in: hFindFile=0x381c80, lpFindFileData=0x31e47c | out: lpFindFileData=0x31e47c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8ce7000, ftCreationTime.dwHighDateTime=0x1c9b00b, ftLastAccessTime.dwLowDateTime=0x51552c10, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xa8ce7000, ftLastWriteTime.dwHighDateTime=0x1c9b00b, nFileSizeHigh=0x0, nFileSizeLow=0x9a5b, dwReserved0=0x0, dwReserved1=0x0, cFileName="sql90.xsl", cAlternateFileName="")) returned 1 [0034.378] FindNextFileW (in: hFindFile=0x381c80, lpFindFileData=0x31e47c | out: lpFindFileData=0x31e47c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa81fdc00, ftCreationTime.dwHighDateTime=0x1c8dd0e, ftLastAccessTime.dwLowDateTime=0x5edefe10, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xa81fdc00, ftLastWriteTime.dwHighDateTime=0x1c8dd0e, nFileSizeHigh=0x0, nFileSizeLow=0x745e, dwReserved0=0x0, dwReserved1=0x0, cFileName="Sybase.xsl", cAlternateFileName="")) returned 1 [0034.378] FindNextFileW (in: hFindFile=0x381c80, lpFindFileData=0x31e47c | out: lpFindFileData=0x31e47c*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0034.378] FindClose (in: hFindFile=0x381c80 | out: hFindFile=0x381c80) returned 1 [0034.379] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e704) returned 1 [0034.379] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e710) returned 1 [0034.379] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e744) returned 1 [0034.379] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Analysis Services\\AS OLEDB\\10\\Cartridges", nBufferLength=0x105, lpBuffer=0x31e24c, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Analysis Services\\AS OLEDB\\10\\Cartridges", lpFilePart=0x0) returned 0x43 [0034.379] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Analysis Services\\AS OLEDB\\10\\Cartridges\\", nBufferLength=0x105, lpBuffer=0x31e220, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Analysis Services\\AS OLEDB\\10\\Cartridges\\", lpFilePart=0x0) returned 0x44 [0034.379] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Analysis Services\\AS OLEDB\\10\\Cartridges\\*", lpFindFileData=0x31e46c | out: lpFindFileData=0x31e46c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5146e3d0, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x5edefe10, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x5edefe10, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x381c80 [0034.380] FindNextFileW (in: hFindFile=0x381c80, lpFindFileData=0x31e47c | out: lpFindFileData=0x31e47c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5146e3d0, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x5edefe10, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x5edefe10, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0034.380] FindNextFileW (in: hFindFile=0x381c80, lpFindFileData=0x31e47c | out: lpFindFileData=0x31e47c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8ce7000, ftCreationTime.dwHighDateTime=0x1c9b00b, ftLastAccessTime.dwLowDateTime=0x51494530, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xa8ce7000, ftLastWriteTime.dwHighDateTime=0x1c9b00b, nFileSizeHigh=0x0, nFileSizeLow=0x4360, dwReserved0=0x0, dwReserved1=0x0, cFileName="as80.xsl", cAlternateFileName="")) returned 1 [0034.380] FindNextFileW (in: hFindFile=0x381c80, lpFindFileData=0x31e47c | out: lpFindFileData=0x31e47c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8ce7000, ftCreationTime.dwHighDateTime=0x1c9b00b, ftLastAccessTime.dwLowDateTime=0x5ed7d9f0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xa8ce7000, ftLastWriteTime.dwHighDateTime=0x1c9b00b, nFileSizeHigh=0x0, nFileSizeLow=0x4932, dwReserved0=0x0, dwReserved1=0x0, cFileName="as90.xsl", cAlternateFileName="")) returned 1 [0034.380] FindNextFileW (in: hFindFile=0x381c80, lpFindFileData=0x31e47c | out: lpFindFileData=0x31e47c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa81fdc00, ftCreationTime.dwHighDateTime=0x1c8dd0e, ftLastAccessTime.dwLowDateTime=0x51494530, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xa81fdc00, ftLastWriteTime.dwHighDateTime=0x1c8dd0e, nFileSizeHigh=0x0, nFileSizeLow=0x78e4, dwReserved0=0x0, dwReserved1=0x0, cFileName="Informix.xsl", cAlternateFileName="")) returned 1 [0034.380] FindNextFileW (in: hFindFile=0x381c80, lpFindFileData=0x31e47c | out: lpFindFileData=0x31e47c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8ce7000, ftCreationTime.dwHighDateTime=0x1c9b00b, ftLastAccessTime.dwLowDateTime=0x51494530, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xa8ce7000, ftLastWriteTime.dwHighDateTime=0x1c9b00b, nFileSizeHigh=0x0, nFileSizeLow=0x712e, dwReserved0=0x0, dwReserved1=0x0, cFileName="msjet.xsl", cAlternateFileName="")) returned 1 [0034.380] FindNextFileW (in: hFindFile=0x381c80, lpFindFileData=0x31e47c | out: lpFindFileData=0x31e47c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8ce7000, ftCreationTime.dwHighDateTime=0x1c9b00b, ftLastAccessTime.dwLowDateTime=0x51552c10, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xa8ce7000, ftLastWriteTime.dwHighDateTime=0x1c9b00b, nFileSizeHigh=0x0, nFileSizeLow=0x851c, dwReserved0=0x0, dwReserved1=0x0, cFileName="sql2000.xsl", cAlternateFileName="")) returned 1 [0034.380] FindNextFileW (in: hFindFile=0x381c80, lpFindFileData=0x31e47c | out: lpFindFileData=0x31e47c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8ce7000, ftCreationTime.dwHighDateTime=0x1c9b00b, ftLastAccessTime.dwLowDateTime=0x5edefe10, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xa8ce7000, ftLastWriteTime.dwHighDateTime=0x1c9b00b, nFileSizeHigh=0x0, nFileSizeLow=0x7d92, dwReserved0=0x0, dwReserved1=0x0, cFileName="sql70.xsl", cAlternateFileName="")) returned 1 [0034.380] FindNextFileW (in: hFindFile=0x381c80, lpFindFileData=0x31e47c | out: lpFindFileData=0x31e47c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8ce7000, ftCreationTime.dwHighDateTime=0x1c9b00b, ftLastAccessTime.dwLowDateTime=0x51552c10, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xa8ce7000, ftLastWriteTime.dwHighDateTime=0x1c9b00b, nFileSizeHigh=0x0, nFileSizeLow=0x9a5b, dwReserved0=0x0, dwReserved1=0x0, cFileName="sql90.xsl", cAlternateFileName="")) returned 1 [0034.381] FindNextFileW (in: hFindFile=0x381c80, lpFindFileData=0x31e47c | out: lpFindFileData=0x31e47c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa81fdc00, ftCreationTime.dwHighDateTime=0x1c8dd0e, ftLastAccessTime.dwLowDateTime=0x5edefe10, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xa81fdc00, ftLastWriteTime.dwHighDateTime=0x1c8dd0e, nFileSizeHigh=0x0, nFileSizeLow=0x745e, dwReserved0=0x0, dwReserved1=0x0, cFileName="Sybase.xsl", cAlternateFileName="")) returned 1 [0034.381] FindNextFileW (in: hFindFile=0x381c80, lpFindFileData=0x31e47c | out: lpFindFileData=0x31e47c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa81fdc00, ftCreationTime.dwHighDateTime=0x1c8dd0e, ftLastAccessTime.dwLowDateTime=0x5edefe10, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xa81fdc00, ftLastWriteTime.dwHighDateTime=0x1c8dd0e, nFileSizeHigh=0x0, nFileSizeLow=0x745e, dwReserved0=0x0, dwReserved1=0x0, cFileName="Sybase.xsl", cAlternateFileName="")) returned 0 [0034.381] FindClose (in: hFindFile=0x381c80 | out: hFindFile=0x381c80) returned 1 [0034.381] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e704) returned 1 [0034.382] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e710) returned 1 [0034.382] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e744) returned 1 [0034.382] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Analysis Services\\AS OLEDB\\10\\Resources", nBufferLength=0x105, lpBuffer=0x31e24c, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Analysis Services\\AS OLEDB\\10\\Resources", lpFilePart=0x0) returned 0x42 [0034.382] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Analysis Services\\AS OLEDB\\10\\Resources\\", nBufferLength=0x105, lpBuffer=0x31e220, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Analysis Services\\AS OLEDB\\10\\Resources\\", lpFilePart=0x0) returned 0x43 [0034.382] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Analysis Services\\AS OLEDB\\10\\Resources\\*", lpFindFileData=0x31e46c | out: lpFindFileData=0x31e46c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfa1d4a90, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xfa1d4a90, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xfa1d4a90, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x381c80 [0034.382] FindNextFileW (in: hFindFile=0x381c80, lpFindFileData=0x31e47c | out: lpFindFileData=0x31e47c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfa1d4a90, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xfa1d4a90, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xfa1d4a90, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0034.382] FindNextFileW (in: hFindFile=0x381c80, lpFindFileData=0x31e47c | out: lpFindFileData=0x31e47c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfa1d4a90, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xfa1d4a90, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xfa1d4a90, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="1033", cAlternateFileName="")) returned 1 [0034.383] FindNextFileW (in: hFindFile=0x381c80, lpFindFileData=0x31e47c | out: lpFindFileData=0x31e47c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfa1d4a90, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xfa1d4a90, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xfa1d4a90, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="1033", cAlternateFileName="")) returned 0 [0034.383] FindClose (in: hFindFile=0x381c80 | out: hFindFile=0x381c80) returned 1 [0034.383] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e704) returned 1 [0034.383] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e710) returned 1 [0034.383] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e744) returned 1 [0034.383] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Analysis Services\\AS OLEDB\\10\\Resources", nBufferLength=0x105, lpBuffer=0x31e24c, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Analysis Services\\AS OLEDB\\10\\Resources", lpFilePart=0x0) returned 0x42 [0034.383] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Analysis Services\\AS OLEDB\\10\\Resources\\", nBufferLength=0x105, lpBuffer=0x31e220, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Analysis Services\\AS OLEDB\\10\\Resources\\", lpFilePart=0x0) returned 0x43 [0034.383] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Analysis Services\\AS OLEDB\\10\\Resources\\*", lpFindFileData=0x31e46c | out: lpFindFileData=0x31e46c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfa1d4a90, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xfa1d4a90, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xfa1d4a90, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x381c80 [0034.383] FindNextFileW (in: hFindFile=0x381c80, lpFindFileData=0x31e47c | out: lpFindFileData=0x31e47c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfa1d4a90, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xfa1d4a90, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xfa1d4a90, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0034.383] FindNextFileW (in: hFindFile=0x381c80, lpFindFileData=0x31e47c | out: lpFindFileData=0x31e47c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfa1d4a90, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xfa1d4a90, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xfa1d4a90, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="1033", cAlternateFileName="")) returned 1 [0034.383] FindNextFileW (in: hFindFile=0x381c80, lpFindFileData=0x31e47c | out: lpFindFileData=0x31e47c*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0034.383] FindClose (in: hFindFile=0x381c80 | out: hFindFile=0x381c80) returned 1 [0034.384] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e704) returned 1 [0034.384] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e710) returned 1 [0034.384] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e6cc) returned 1 [0034.384] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Analysis Services\\AS OLEDB\\10\\Resources\\1033", nBufferLength=0x105, lpBuffer=0x31e1d4, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Analysis Services\\AS OLEDB\\10\\Resources\\1033", lpFilePart=0x0) returned 0x47 [0034.384] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Analysis Services\\AS OLEDB\\10\\Resources\\1033\\", nBufferLength=0x105, lpBuffer=0x31e1a8, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Analysis Services\\AS OLEDB\\10\\Resources\\1033\\", lpFilePart=0x0) returned 0x48 [0034.384] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Analysis Services\\AS OLEDB\\10\\Resources\\1033\\*", lpFindFileData=0x31e3f4 | out: lpFindFileData=0x31e3f4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfa1d4a90, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xfa1d4a90, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xfa1d4a90, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x381c80 [0034.385] FindNextFileW (in: hFindFile=0x381c80, lpFindFileData=0x31e404 | out: lpFindFileData=0x31e404*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfa1d4a90, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xfa1d4a90, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xfa1d4a90, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0034.385] FindNextFileW (in: hFindFile=0x381c80, lpFindFileData=0x31e404 | out: lpFindFileData=0x31e404*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd9f68100, ftCreationTime.dwHighDateTime=0x1c9b09b, ftLastAccessTime.dwLowDateTime=0xfa1d4a90, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xd9f68100, ftLastWriteTime.dwHighDateTime=0x1c9b09b, nFileSizeHigh=0x0, nFileSizeLow=0xa2b58, dwReserved0=0x0, dwReserved1=0x0, cFileName="msmdsrv.rll", cAlternateFileName="")) returned 1 [0034.385] FindNextFileW (in: hFindFile=0x381c80, lpFindFileData=0x31e404 | out: lpFindFileData=0x31e404*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2512f000, ftCreationTime.dwHighDateTime=0x1c8e1fe, ftLastAccessTime.dwLowDateTime=0xfa1d4a90, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0x2512f000, ftLastWriteTime.dwHighDateTime=0x1c8e1fe, nFileSizeHigh=0x0, nFileSizeLow=0x3a18, dwReserved0=0x0, dwReserved1=0x0, cFileName="msolui100.rll", cAlternateFileName="MSOLUI~1.RLL")) returned 1 [0034.385] FindNextFileW (in: hFindFile=0x381c80, lpFindFileData=0x31e404 | out: lpFindFileData=0x31e404*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0034.385] FindClose (in: hFindFile=0x381c80 | out: hFindFile=0x381c80) returned 1 [0034.387] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e68c) returned 1 [0034.387] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e698) returned 1 [0034.387] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e6cc) returned 1 [0034.387] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Analysis Services\\AS OLEDB\\10\\Resources\\1033", nBufferLength=0x105, lpBuffer=0x31e1d4, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Analysis Services\\AS OLEDB\\10\\Resources\\1033", lpFilePart=0x0) returned 0x47 [0034.387] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Analysis Services\\AS OLEDB\\10\\Resources\\1033\\", nBufferLength=0x105, lpBuffer=0x31e1a8, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Analysis Services\\AS OLEDB\\10\\Resources\\1033\\", lpFilePart=0x0) returned 0x48 [0034.388] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Analysis Services\\AS OLEDB\\10\\Resources\\1033\\*", lpFindFileData=0x31e3f4 | out: lpFindFileData=0x31e3f4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfa1d4a90, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xfa1d4a90, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xfa1d4a90, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x381c80 [0034.388] FindNextFileW (in: hFindFile=0x381c80, lpFindFileData=0x31e404 | out: lpFindFileData=0x31e404*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfa1d4a90, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xfa1d4a90, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xfa1d4a90, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0034.388] FindNextFileW (in: hFindFile=0x381c80, lpFindFileData=0x31e404 | out: lpFindFileData=0x31e404*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd9f68100, ftCreationTime.dwHighDateTime=0x1c9b09b, ftLastAccessTime.dwLowDateTime=0xfa1d4a90, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xd9f68100, ftLastWriteTime.dwHighDateTime=0x1c9b09b, nFileSizeHigh=0x0, nFileSizeLow=0xa2b58, dwReserved0=0x0, dwReserved1=0x0, cFileName="msmdsrv.rll", cAlternateFileName="")) returned 1 [0034.388] FindNextFileW (in: hFindFile=0x381c80, lpFindFileData=0x31e404 | out: lpFindFileData=0x31e404*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2512f000, ftCreationTime.dwHighDateTime=0x1c8e1fe, ftLastAccessTime.dwLowDateTime=0xfa1d4a90, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0x2512f000, ftLastWriteTime.dwHighDateTime=0x1c8e1fe, nFileSizeHigh=0x0, nFileSizeLow=0x3a18, dwReserved0=0x0, dwReserved1=0x0, cFileName="msolui100.rll", cAlternateFileName="MSOLUI~1.RLL")) returned 1 [0034.388] FindNextFileW (in: hFindFile=0x381c80, lpFindFileData=0x31e404 | out: lpFindFileData=0x31e404*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2512f000, ftCreationTime.dwHighDateTime=0x1c8e1fe, ftLastAccessTime.dwLowDateTime=0xfa1d4a90, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0x2512f000, ftLastWriteTime.dwHighDateTime=0x1c8e1fe, nFileSizeHigh=0x0, nFileSizeLow=0x3a18, dwReserved0=0x0, dwReserved1=0x0, cFileName="msolui100.rll", cAlternateFileName="MSOLUI~1.RLL")) returned 0 [0034.388] FindClose (in: hFindFile=0x381c80 | out: hFindFile=0x381c80) returned 1 [0034.388] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e68c) returned 1 [0034.388] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e698) returned 1 [0034.388] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e8ac) returned 1 [0034.388] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office", nBufferLength=0x105, lpBuffer=0x31e3b4, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office", lpFilePart=0x0) returned 0x21 [0034.388] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\", nBufferLength=0x105, lpBuffer=0x31e388, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\", lpFilePart=0x0) returned 0x22 [0034.389] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\*", lpFindFileData=0x31e5d4 | out: lpFindFileData=0x31e5d4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee2ce510, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xd93085e0, ftLastAccessTime.dwHighDateTime=0x1d5e82a, ftLastWriteTime.dwLowDateTime=0xd93085e0, ftLastWriteTime.dwHighDateTime=0x1d5e82a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x381c80 [0034.389] FindNextFileW (in: hFindFile=0x381c80, lpFindFileData=0x31e5e4 | out: lpFindFileData=0x31e5e4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee2ce510, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xd93085e0, ftLastAccessTime.dwHighDateTime=0x1d5e82a, ftLastWriteTime.dwLowDateTime=0xd93085e0, ftLastWriteTime.dwHighDateTime=0x1d5e82a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0034.389] FindNextFileW (in: hFindFile=0x381c80, lpFindFileData=0x31e5e4 | out: lpFindFileData=0x31e5e4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x512f1610, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x56406370, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x56406370, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="CLIPART", cAlternateFileName="")) returned 1 [0034.389] FindNextFileW (in: hFindFile=0x381c80, lpFindFileData=0x31e5e4 | out: lpFindFileData=0x31e5e4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5127f1f0, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0xe5cd5260, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0xe5cd5260, ftLastWriteTime.dwHighDateTime=0x1d305f1, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Document Themes 14", cAlternateFileName="DOCUME~1")) returned 1 [0034.389] FindNextFileW (in: hFindFile=0x381c80, lpFindFileData=0x31e5e4 | out: lpFindFileData=0x31e5e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb81a8870, ftCreationTime.dwHighDateTime=0x1d59ce8, ftLastAccessTime.dwLowDateTime=0x2f15f920, ftLastAccessTime.dwHighDateTime=0x1d5c2c6, ftLastWriteTime.dwLowDateTime=0x2f15f920, ftLastWriteTime.dwHighDateTime=0x1d5c2c6, nFileSizeHigh=0x0, nFileSizeLow=0x13a00, dwReserved0=0x0, dwReserved1=0x0, cFileName="holdings-ears-titles.exe", cAlternateFileName="HOLDIN~1.EXE")) returned 1 [0034.389] FindNextFileW (in: hFindFile=0x381c80, lpFindFileData=0x31e5e4 | out: lpFindFileData=0x31e5e4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeec79e70, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xeef015d0, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xeef015d0, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="MEDIA", cAlternateFileName="")) returned 1 [0034.389] FindNextFileW (in: hFindFile=0x381c80, lpFindFileData=0x31e5e4 | out: lpFindFileData=0x31e5e4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee2ce510, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xe5db9aa0, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0xe5db9aa0, ftLastWriteTime.dwHighDateTime=0x1d305f1, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Office14", cAlternateFileName="")) returned 1 [0034.389] FindNextFileW (in: hFindFile=0x381c80, lpFindFileData=0x31e5e4 | out: lpFindFileData=0x31e5e4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd3eb50, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0xebb910, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xebb910, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Stationery", cAlternateFileName="STATIO~1")) returned 1 [0034.390] FindNextFileW (in: hFindFile=0x381c80, lpFindFileData=0x31e5e4 | out: lpFindFileData=0x31e5e4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf59f9270, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0x50e7acd0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x50e7acd0, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Templates", cAlternateFileName="TEMPLA~1")) returned 1 [0034.390] FindNextFileW (in: hFindFile=0x381c80, lpFindFileData=0x31e5e4 | out: lpFindFileData=0x31e5e4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf59f9270, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0x50e7acd0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x50e7acd0, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Templates", cAlternateFileName="TEMPLA~1")) returned 0 [0034.390] FindClose (in: hFindFile=0x381c80 | out: hFindFile=0x381c80) returned 1 [0034.390] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e86c) returned 1 [0034.390] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e878) returned 1 [0034.390] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e8ac) returned 1 [0034.390] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office", nBufferLength=0x105, lpBuffer=0x31e3b4, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office", lpFilePart=0x0) returned 0x21 [0034.390] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\", nBufferLength=0x105, lpBuffer=0x31e388, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\", lpFilePart=0x0) returned 0x22 [0034.390] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\*", lpFindFileData=0x31e5d4 | out: lpFindFileData=0x31e5d4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee2ce510, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xd93085e0, ftLastAccessTime.dwHighDateTime=0x1d5e82a, ftLastWriteTime.dwLowDateTime=0xd93085e0, ftLastWriteTime.dwHighDateTime=0x1d5e82a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x381c80 [0034.390] FindNextFileW (in: hFindFile=0x381c80, lpFindFileData=0x31e5e4 | out: lpFindFileData=0x31e5e4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee2ce510, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xd93085e0, ftLastAccessTime.dwHighDateTime=0x1d5e82a, ftLastWriteTime.dwLowDateTime=0xd93085e0, ftLastWriteTime.dwHighDateTime=0x1d5e82a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0034.390] FindNextFileW (in: hFindFile=0x381c80, lpFindFileData=0x31e5e4 | out: lpFindFileData=0x31e5e4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x512f1610, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x56406370, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x56406370, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="CLIPART", cAlternateFileName="")) returned 1 [0034.390] FindNextFileW (in: hFindFile=0x381c80, lpFindFileData=0x31e5e4 | out: lpFindFileData=0x31e5e4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5127f1f0, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0xe5cd5260, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0xe5cd5260, ftLastWriteTime.dwHighDateTime=0x1d305f1, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Document Themes 14", cAlternateFileName="DOCUME~1")) returned 1 [0034.391] FindNextFileW (in: hFindFile=0x381c80, lpFindFileData=0x31e5e4 | out: lpFindFileData=0x31e5e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb81a8870, ftCreationTime.dwHighDateTime=0x1d59ce8, ftLastAccessTime.dwLowDateTime=0x2f15f920, ftLastAccessTime.dwHighDateTime=0x1d5c2c6, ftLastWriteTime.dwLowDateTime=0x2f15f920, ftLastWriteTime.dwHighDateTime=0x1d5c2c6, nFileSizeHigh=0x0, nFileSizeLow=0x13a00, dwReserved0=0x0, dwReserved1=0x0, cFileName="holdings-ears-titles.exe", cAlternateFileName="HOLDIN~1.EXE")) returned 1 [0034.391] FindNextFileW (in: hFindFile=0x381c80, lpFindFileData=0x31e5e4 | out: lpFindFileData=0x31e5e4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeec79e70, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xeef015d0, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xeef015d0, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="MEDIA", cAlternateFileName="")) returned 1 [0034.391] FindNextFileW (in: hFindFile=0x381c80, lpFindFileData=0x31e5e4 | out: lpFindFileData=0x31e5e4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee2ce510, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xe5db9aa0, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0xe5db9aa0, ftLastWriteTime.dwHighDateTime=0x1d305f1, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Office14", cAlternateFileName="")) returned 1 [0034.391] FindNextFileW (in: hFindFile=0x381c80, lpFindFileData=0x31e5e4 | out: lpFindFileData=0x31e5e4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd3eb50, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0xebb910, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xebb910, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Stationery", cAlternateFileName="STATIO~1")) returned 1 [0034.391] FindNextFileW (in: hFindFile=0x381c80, lpFindFileData=0x31e5e4 | out: lpFindFileData=0x31e5e4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf59f9270, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0x50e7acd0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x50e7acd0, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Templates", cAlternateFileName="TEMPLA~1")) returned 1 [0034.391] FindNextFileW (in: hFindFile=0x381c80, lpFindFileData=0x31e5e4 | out: lpFindFileData=0x31e5e4*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0034.391] FindClose (in: hFindFile=0x381c80 | out: hFindFile=0x381c80) returned 1 [0034.391] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e86c) returned 1 [0034.391] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e878) returned 1 [0034.391] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e834) returned 1 [0034.391] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART", nBufferLength=0x105, lpBuffer=0x31e33c, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\CLIPART", lpFilePart=0x0) returned 0x29 [0034.391] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\", nBufferLength=0x105, lpBuffer=0x31e310, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\CLIPART\\", lpFilePart=0x0) returned 0x2a [0034.391] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\*", lpFindFileData=0x31e55c | out: lpFindFileData=0x31e55c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x512f1610, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x56406370, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x56406370, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x381c80 [0034.392] FindNextFileW (in: hFindFile=0x381c80, lpFindFileData=0x31e56c | out: lpFindFileData=0x31e56c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x512f1610, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x56406370, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x56406370, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0034.392] FindNextFileW (in: hFindFile=0x381c80, lpFindFileData=0x31e56c | out: lpFindFileData=0x31e56c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x512f1610, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x7090d6b0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x7090d6b0, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="PUB60COR", cAlternateFileName="")) returned 1 [0034.393] FindNextFileW (in: hFindFile=0x381c80, lpFindFileData=0x31e56c | out: lpFindFileData=0x31e56c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x56406370, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x56406370, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x56406370, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Publisher", cAlternateFileName="PUBLIS~1")) returned 1 [0034.393] FindNextFileW (in: hFindFile=0x381c80, lpFindFileData=0x31e56c | out: lpFindFileData=0x31e56c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x56406370, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x56406370, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x56406370, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Publisher", cAlternateFileName="PUBLIS~1")) returned 0 [0034.393] FindClose (in: hFindFile=0x381c80 | out: hFindFile=0x381c80) returned 1 [0034.393] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e7f4) returned 1 [0034.393] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e800) returned 1 [0034.393] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e834) returned 1 [0034.393] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART", nBufferLength=0x105, lpBuffer=0x31e33c, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\CLIPART", lpFilePart=0x0) returned 0x29 [0034.393] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\", nBufferLength=0x105, lpBuffer=0x31e310, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\CLIPART\\", lpFilePart=0x0) returned 0x2a [0034.393] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\*", lpFindFileData=0x31e55c | out: lpFindFileData=0x31e55c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x512f1610, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x56406370, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x56406370, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x381c80 [0034.393] FindNextFileW (in: hFindFile=0x381c80, lpFindFileData=0x31e56c | out: lpFindFileData=0x31e56c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x512f1610, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x56406370, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x56406370, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0034.393] FindNextFileW (in: hFindFile=0x381c80, lpFindFileData=0x31e56c | out: lpFindFileData=0x31e56c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x512f1610, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x7090d6b0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x7090d6b0, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="PUB60COR", cAlternateFileName="")) returned 1 [0034.393] FindNextFileW (in: hFindFile=0x381c80, lpFindFileData=0x31e56c | out: lpFindFileData=0x31e56c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x56406370, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x56406370, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x56406370, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Publisher", cAlternateFileName="PUBLIS~1")) returned 1 [0034.393] FindNextFileW (in: hFindFile=0x381c80, lpFindFileData=0x31e56c | out: lpFindFileData=0x31e56c*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0034.394] FindClose (in: hFindFile=0x381c80 | out: hFindFile=0x381c80) returned 1 [0034.394] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e7f4) returned 1 [0034.394] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e800) returned 1 [0034.394] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e7bc) returned 1 [0034.394] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR", nBufferLength=0x105, lpBuffer=0x31e2c4, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR", lpFilePart=0x0) returned 0x32 [0034.394] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\", nBufferLength=0x105, lpBuffer=0x31e298, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\", lpFilePart=0x0) returned 0x33 [0034.394] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\*", lpFindFileData=0x31e4e4 | out: lpFindFileData=0x31e4e4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x512f1610, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x7090d6b0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x7090d6b0, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x381c80 [0034.396] FindNextFileW (in: hFindFile=0x381c80, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x512f1610, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x7090d6b0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x7090d6b0, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0034.397] FindNextFileW (in: hFindFile=0x381c80, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x54952c00, ftCreationTime.dwHighDateTime=0x1bd4b49, ftLastAccessTime.dwLowDateTime=0x5eb42550, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x54952c00, ftLastWriteTime.dwHighDateTime=0x1bd4b49, nFileSizeHigh=0x0, nFileSizeLow=0x2340, dwReserved0=0x0, dwReserved1=0x0, cFileName="AG00004_.GIF", cAlternateFileName="")) returned 1 [0034.397] FindNextFileW (in: hFindFile=0x381c80, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x83130700, ftCreationTime.dwHighDateTime=0x1bd4b49, ftLastAccessTime.dwLowDateTime=0x512f1610, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x83130700, ftLastWriteTime.dwHighDateTime=0x1bd4b49, nFileSizeHigh=0x0, nFileSizeLow=0x1c30, dwReserved0=0x0, dwReserved1=0x0, cFileName="AG00011_.GIF", cAlternateFileName="")) returned 1 [0034.397] FindNextFileW (in: hFindFile=0x381c80, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x78587200, ftCreationTime.dwHighDateTime=0x1bd4b49, ftLastAccessTime.dwLowDateTime=0x5eb42550, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x78587200, ftLastWriteTime.dwHighDateTime=0x1bd4b49, nFileSizeHigh=0x0, nFileSizeLow=0x3a19, dwReserved0=0x0, dwReserved1=0x0, cFileName="AG00021_.GIF", cAlternateFileName="")) returned 1 [0034.397] FindNextFileW (in: hFindFile=0x381c80, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x64147500, ftCreationTime.dwHighDateTime=0x1bd4b49, ftLastAccessTime.dwLowDateTime=0x512f1610, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x64147500, ftLastWriteTime.dwHighDateTime=0x1bd4b49, nFileSizeHigh=0x0, nFileSizeLow=0x1a1c, dwReserved0=0x0, dwReserved1=0x0, cFileName="AG00037_.GIF", cAlternateFileName="")) returned 1 [0034.397] FindNextFileW (in: hFindFile=0x381c80, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x47589c00, ftCreationTime.dwHighDateTime=0x1bf325d, ftLastAccessTime.dwLowDateTime=0x512f1610, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x47589c00, ftLastWriteTime.dwHighDateTime=0x1bf325d, nFileSizeHigh=0x0, nFileSizeLow=0xcb3, dwReserved0=0x0, dwReserved1=0x0, cFileName="AG00038_.GIF", cAlternateFileName="")) returned 1 [0034.397] FindNextFileW (in: hFindFile=0x381c80, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5f4fc100, ftCreationTime.dwHighDateTime=0x1bd4b49, ftLastAccessTime.dwLowDateTime=0x5eb42550, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x5f4fc100, ftLastWriteTime.dwHighDateTime=0x1bd4b49, nFileSizeHigh=0x0, nFileSizeLow=0x1fa1, dwReserved0=0x0, dwReserved1=0x0, cFileName="AG00040_.GIF", cAlternateFileName="")) returned 1 [0034.397] FindNextFileW (in: hFindFile=0x381c80, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x262e5400, ftCreationTime.dwHighDateTime=0x1bd4c10, ftLastAccessTime.dwLowDateTime=0x512f1610, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x262e5400, ftLastWriteTime.dwHighDateTime=0x1bd4c10, nFileSizeHigh=0x0, nFileSizeLow=0x1e06, dwReserved0=0x0, dwReserved1=0x0, cFileName="AG00052_.GIF", cAlternateFileName="")) returned 1 [0034.397] FindNextFileW (in: hFindFile=0x381c80, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8b6b4200, ftCreationTime.dwHighDateTime=0x1bd4b49, ftLastAccessTime.dwLowDateTime=0x512f1610, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x8b6b4200, ftLastWriteTime.dwHighDateTime=0x1bd4b49, nFileSizeHigh=0x0, nFileSizeLow=0x2e73, dwReserved0=0x0, dwReserved1=0x0, cFileName="AG00057_.GIF", cAlternateFileName="")) returned 1 [0034.397] FindNextFileW (in: hFindFile=0x381c80, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x29618e00, ftCreationTime.dwHighDateTime=0x1bd50af, ftLastAccessTime.dwLowDateTime=0x5eb42550, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x29618e00, ftLastWriteTime.dwHighDateTime=0x1bd50af, nFileSizeHigh=0x0, nFileSizeLow=0x205, dwReserved0=0x0, dwReserved1=0x0, cFileName="AG00090_.GIF", cAlternateFileName="")) returned 1 [0034.398] FindNextFileW (in: hFindFile=0x381c80, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x26ff3400, ftCreationTime.dwHighDateTime=0x1bd50af, ftLastAccessTime.dwLowDateTime=0x512f1610, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x26ff3400, ftLastWriteTime.dwHighDateTime=0x1bd50af, nFileSizeHigh=0x0, nFileSizeLow=0x1f6, dwReserved0=0x0, dwReserved1=0x0, cFileName="AG00092_.GIF", cAlternateFileName="")) returned 1 [0034.398] FindNextFileW (in: hFindFile=0x381c80, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4ef57700, ftCreationTime.dwHighDateTime=0x1bd4f8b, ftLastAccessTime.dwLowDateTime=0x512f1610, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x4ef57700, ftLastWriteTime.dwHighDateTime=0x1bd4f8b, nFileSizeHigh=0x0, nFileSizeLow=0x319e, dwReserved0=0x0, dwReserved1=0x0, cFileName="AG00103_.GIF", cAlternateFileName="")) returned 1 [0034.398] FindNextFileW (in: hFindFile=0x381c80, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf316a100, ftCreationTime.dwHighDateTime=0x1bd4bcc, ftLastAccessTime.dwLowDateTime=0x51317770, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xf316a100, ftLastWriteTime.dwHighDateTime=0x1bd4bcc, nFileSizeHigh=0x0, nFileSizeLow=0xd9c, dwReserved0=0x0, dwReserved1=0x0, cFileName="AG00120_.GIF", cAlternateFileName="")) returned 1 [0034.398] FindNextFileW (in: hFindFile=0x381c80, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x33bee00, ftCreationTime.dwHighDateTime=0x1bd50af, ftLastAccessTime.dwLowDateTime=0x51317770, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x33bee00, ftLastWriteTime.dwHighDateTime=0x1bd50af, nFileSizeHigh=0x0, nFileSizeLow=0xc44, dwReserved0=0x0, dwReserved1=0x0, cFileName="AG00126_.GIF", cAlternateFileName="")) returned 1 [0034.398] FindNextFileW (in: hFindFile=0x381c80, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd99400, ftCreationTime.dwHighDateTime=0x1bd50af, ftLastAccessTime.dwLowDateTime=0x51317770, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xd99400, ftLastWriteTime.dwHighDateTime=0x1bd50af, nFileSizeHigh=0x0, nFileSizeLow=0x30c2, dwReserved0=0x0, dwReserved1=0x0, cFileName="AG00129_.GIF", cAlternateFileName="")) returned 1 [0034.398] FindNextFileW (in: hFindFile=0x381c80, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xffa86700, ftCreationTime.dwHighDateTime=0x1bd50ae, ftLastAccessTime.dwLowDateTime=0x5eb42550, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xffa86700, ftLastWriteTime.dwHighDateTime=0x1bd50ae, nFileSizeHigh=0x0, nFileSizeLow=0x1485, dwReserved0=0x0, dwReserved1=0x0, cFileName="AG00130_.GIF", cAlternateFileName="")) returned 1 [0034.398] FindNextFileW (in: hFindFile=0x381c80, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf9b28600, ftCreationTime.dwHighDateTime=0x1bd50ae, ftLastAccessTime.dwLowDateTime=0x5eb42550, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xf9b28600, ftLastWriteTime.dwHighDateTime=0x1bd50ae, nFileSizeHigh=0x0, nFileSizeLow=0xa24, dwReserved0=0x0, dwReserved1=0x0, cFileName="AG00135_.GIF", cAlternateFileName="")) returned 1 [0034.398] FindNextFileW (in: hFindFile=0x381c80, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf3bca500, ftCreationTime.dwHighDateTime=0x1bd50ae, ftLastAccessTime.dwLowDateTime=0x51317770, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xf3bca500, ftLastWriteTime.dwHighDateTime=0x1bd50ae, nFileSizeHigh=0x0, nFileSizeLow=0x296f, dwReserved0=0x0, dwReserved1=0x0, cFileName="AG00139_.GIF", cAlternateFileName="")) returned 1 [0034.398] FindNextFileW (in: hFindFile=0x381c80, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xedc6c400, ftCreationTime.dwHighDateTime=0x1bd50ae, ftLastAccessTime.dwLowDateTime=0x5eb42550, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xedc6c400, ftLastWriteTime.dwHighDateTime=0x1bd50ae, nFileSizeHigh=0x0, nFileSizeLow=0x3bcc, dwReserved0=0x0, dwReserved1=0x0, cFileName="AG00142_.GIF", cAlternateFileName="")) returned 1 [0034.398] FindNextFileW (in: hFindFile=0x381c80, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb9688900, ftCreationTime.dwHighDateTime=0x1bd4c12, ftLastAccessTime.dwLowDateTime=0x51317770, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xb9688900, ftLastWriteTime.dwHighDateTime=0x1bd4c12, nFileSizeHigh=0x0, nFileSizeLow=0x14c3, dwReserved0=0x0, dwReserved1=0x0, cFileName="AG00154_.GIF", cAlternateFileName="")) returned 1 [0034.399] FindNextFileW (in: hFindFile=0x381c80, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb2417b00, ftCreationTime.dwHighDateTime=0x1bd4c12, ftLastAccessTime.dwLowDateTime=0x51317770, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xb2417b00, ftLastWriteTime.dwHighDateTime=0x1bd4c12, nFileSizeHigh=0x0, nFileSizeLow=0x135b, dwReserved0=0x0, dwReserved1=0x0, cFileName="AG00157_.GIF", cAlternateFileName="")) returned 1 [0034.399] FindNextFileW (in: hFindFile=0x381c80, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xad7cc700, ftCreationTime.dwHighDateTime=0x1bd4c12, ftLastAccessTime.dwLowDateTime=0x5eb42550, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xad7cc700, ftLastWriteTime.dwHighDateTime=0x1bd4c12, nFileSizeHigh=0x0, nFileSizeLow=0x13a6, dwReserved0=0x0, dwReserved1=0x0, cFileName="AG00158_.GIF", cAlternateFileName="")) returned 1 [0034.399] FindNextFileW (in: hFindFile=0x381c80, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9a69f700, ftCreationTime.dwHighDateTime=0x1bd4c12, ftLastAccessTime.dwLowDateTime=0x51317770, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x9a69f700, ftLastWriteTime.dwHighDateTime=0x1bd4c12, nFileSizeHigh=0x0, nFileSizeLow=0x47a, dwReserved0=0x0, dwReserved1=0x0, cFileName="AG00160_.GIF", cAlternateFileName="")) returned 1 [0034.399] FindNextFileW (in: hFindFile=0x381c80, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x95a54300, ftCreationTime.dwHighDateTime=0x1bd4c12, ftLastAccessTime.dwLowDateTime=0x5eb42550, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x95a54300, ftLastWriteTime.dwHighDateTime=0x1bd4c12, nFileSizeHigh=0x0, nFileSizeLow=0x1d9f, dwReserved0=0x0, dwReserved1=0x0, cFileName="AG00161_.GIF", cAlternateFileName="")) returned 1 [0034.399] FindNextFileW (in: hFindFile=0x381c80, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x65e47e00, ftCreationTime.dwHighDateTime=0x1bd4e52, ftLastAccessTime.dwLowDateTime=0x5eb42550, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x65e47e00, ftLastWriteTime.dwHighDateTime=0x1bd4e52, nFileSizeHigh=0x0, nFileSizeLow=0x1b48, dwReserved0=0x0, dwReserved1=0x0, cFileName="AG00163_.GIF", cAlternateFileName="")) returned 1 [0034.399] FindNextFileW (in: hFindFile=0x381c80, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8d4d0800, ftCreationTime.dwHighDateTime=0x1bd4c12, ftLastAccessTime.dwLowDateTime=0x5eb42550, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x8d4d0800, ftLastWriteTime.dwHighDateTime=0x1bd4c12, nFileSizeHigh=0x0, nFileSizeLow=0x33c6, dwReserved0=0x0, dwReserved1=0x0, cFileName="AG00164_.GIF", cAlternateFileName="")) returned 1 [0034.399] FindNextFileW (in: hFindFile=0x381c80, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x89b98100, ftCreationTime.dwHighDateTime=0x1bd4c12, ftLastAccessTime.dwLowDateTime=0x51317770, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x89b98100, ftLastWriteTime.dwHighDateTime=0x1bd4c12, nFileSizeHigh=0x0, nFileSizeLow=0x2186, dwReserved0=0x0, dwReserved1=0x0, cFileName="AG00165_.GIF", cAlternateFileName="")) returned 1 [0034.399] FindNextFileW (in: hFindFile=0x381c80, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x81614600, ftCreationTime.dwHighDateTime=0x1bd4c12, ftLastAccessTime.dwLowDateTime=0x5eb42550, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x81614600, ftLastWriteTime.dwHighDateTime=0x1bd4c12, nFileSizeHigh=0x0, nFileSizeLow=0x131e, dwReserved0=0x0, dwReserved1=0x0, cFileName="AG00167_.GIF", cAlternateFileName="")) returned 1 [0034.399] FindNextFileW (in: hFindFile=0x381c80, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7c9c9200, ftCreationTime.dwHighDateTime=0x1bd4c12, ftLastAccessTime.dwLowDateTime=0x5eb686b0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x7c9c9200, ftLastWriteTime.dwHighDateTime=0x1bd4c12, nFileSizeHigh=0x0, nFileSizeLow=0x14ff, dwReserved0=0x0, dwReserved1=0x0, cFileName="AG00169_.GIF", cAlternateFileName="")) returned 1 [0034.399] FindNextFileW (in: hFindFile=0x381c80, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x76a6b100, ftCreationTime.dwHighDateTime=0x1bd4c12, ftLastAccessTime.dwLowDateTime=0x51317770, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x76a6b100, ftLastWriteTime.dwHighDateTime=0x1bd4c12, nFileSizeHigh=0x0, nFileSizeLow=0x2420, dwReserved0=0x0, dwReserved1=0x0, cFileName="AG00170_.GIF", cAlternateFileName="")) returned 1 [0034.399] FindNextFileW (in: hFindFile=0x381c80, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x71e1fd00, ftCreationTime.dwHighDateTime=0x1bd4c12, ftLastAccessTime.dwLowDateTime=0x51317770, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x71e1fd00, ftLastWriteTime.dwHighDateTime=0x1bd4c12, nFileSizeHigh=0x0, nFileSizeLow=0x1398, dwReserved0=0x0, dwReserved1=0x0, cFileName="AG00171_.GIF", cAlternateFileName="")) returned 1 [0034.399] FindNextFileW (in: hFindFile=0x381c80, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2a04e500, ftCreationTime.dwHighDateTime=0x1bd4e61, ftLastAccessTime.dwLowDateTime=0x5eb686b0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x2a04e500, ftLastWriteTime.dwHighDateTime=0x1bd4e61, nFileSizeHigh=0x0, nFileSizeLow=0x1126, dwReserved0=0x0, dwReserved1=0x0, cFileName="AG00172_.GIF", cAlternateFileName="")) returned 1 [0034.399] FindNextFileW (in: hFindFile=0x381c80, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xde4d3e00, ftCreationTime.dwHighDateTime=0x1bd4e56, ftLastAccessTime.dwLowDateTime=0x51317770, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xde4d3e00, ftLastWriteTime.dwHighDateTime=0x1bd4e56, nFileSizeHigh=0x0, nFileSizeLow=0xf7e, dwReserved0=0x0, dwReserved1=0x0, cFileName="AG00174_.GIF", cAlternateFileName="")) returned 1 [0034.400] FindNextFileW (in: hFindFile=0x381c80, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xfc18a400, ftCreationTime.dwHighDateTime=0x1bd4e52, ftLastAccessTime.dwLowDateTime=0x5eb686b0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xfc18a400, ftLastWriteTime.dwHighDateTime=0x1bd4e52, nFileSizeHigh=0x0, nFileSizeLow=0xd32, dwReserved0=0x0, dwReserved1=0x0, cFileName="AG00175_.GIF", cAlternateFileName="")) returned 1 [0034.400] FindNextFileW (in: hFindFile=0x381c80, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6e3cb900, ftCreationTime.dwHighDateTime=0x1bd4e52, ftLastAccessTime.dwLowDateTime=0x5eb686b0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x6e3cb900, ftLastWriteTime.dwHighDateTime=0x1bd4e52, nFileSizeHigh=0x0, nFileSizeLow=0xc30, dwReserved0=0x0, dwReserved1=0x0, cFileName="AG00176_.GIF", cAlternateFileName="")) returned 1 [0034.400] FindNextFileW (in: hFindFile=0x381c80, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5a5f2300, ftCreationTime.dwHighDateTime=0x1bd4af1, ftLastAccessTime.dwLowDateTime=0x5133d8d0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x5a5f2300, ftLastWriteTime.dwHighDateTime=0x1bd4af1, nFileSizeHigh=0x0, nFileSizeLow=0xbd2, dwReserved0=0x0, dwReserved1=0x0, cFileName="AN00010_.WMF", cAlternateFileName="")) returned 1 [0034.400] FindNextFileW (in: hFindFile=0x381c80, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xab1c4f00, ftCreationTime.dwHighDateTime=0x1bd4ae4, ftLastAccessTime.dwLowDateTime=0x5133d8d0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xab1c4f00, ftLastWriteTime.dwHighDateTime=0x1bd4ae4, nFileSizeHigh=0x0, nFileSizeLow=0x127e, dwReserved0=0x0, dwReserved1=0x0, cFileName="AN00015_.WMF", cAlternateFileName="")) returned 1 [0034.400] FindNextFileW (in: hFindFile=0x381c80, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7e812b00, ftCreationTime.dwHighDateTime=0x1bd4b16, ftLastAccessTime.dwLowDateTime=0x5eb8e810, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x7e812b00, ftLastWriteTime.dwHighDateTime=0x1bd4b16, nFileSizeHigh=0x0, nFileSizeLow=0x1634, dwReserved0=0x0, dwReserved1=0x0, cFileName="AN00790_.WMF", cAlternateFileName="")) returned 1 [0034.401] FindNextFileW (in: hFindFile=0x381c80, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa9eb2200, ftCreationTime.dwHighDateTime=0x1bd4ae4, ftLastAccessTime.dwLowDateTime=0x5133d8d0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xa9eb2200, ftLastWriteTime.dwHighDateTime=0x1bd4ae4, nFileSizeHigh=0x0, nFileSizeLow=0x5062, dwReserved0=0x0, dwReserved1=0x0, cFileName="AN00853_.WMF", cAlternateFileName="")) returned 1 [0034.401] FindNextFileW (in: hFindFile=0x381c80, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2efb2900, ftCreationTime.dwHighDateTime=0x1bd4b2f, ftLastAccessTime.dwLowDateTime=0x5133d8d0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x2efb2900, ftLastWriteTime.dwHighDateTime=0x1bd4b2f, nFileSizeHigh=0x0, nFileSizeLow=0x2a50, dwReserved0=0x0, dwReserved1=0x0, cFileName="AN00914_.WMF", cAlternateFileName="")) returned 1 [0034.401] FindNextFileW (in: hFindFile=0x381c80, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8b9f500, ftCreationTime.dwHighDateTime=0x1bd4ae4, ftLastAccessTime.dwLowDateTime=0x5eb8e810, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xa8b9f500, ftLastWriteTime.dwHighDateTime=0x1bd4ae4, nFileSizeHigh=0x0, nFileSizeLow=0x385c, dwReserved0=0x0, dwReserved1=0x0, cFileName="AN00932_.WMF", cAlternateFileName="")) returned 1 [0034.401] FindNextFileW (in: hFindFile=0x381c80, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc14efd00, ftCreationTime.dwHighDateTime=0x1bd4b2e, ftLastAccessTime.dwLowDateTime=0x5133d8d0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xc14efd00, ftLastWriteTime.dwHighDateTime=0x1bd4b2e, nFileSizeHigh=0x0, nFileSizeLow=0x1ba0, dwReserved0=0x0, dwReserved1=0x0, cFileName="AN00965_.WMF", cAlternateFileName="")) returned 1 [0034.401] FindNextFileW (in: hFindFile=0x381c80, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6d83ea00, ftCreationTime.dwHighDateTime=0x1bd4b15, ftLastAccessTime.dwLowDateTime=0x5133d8d0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x6d83ea00, ftLastWriteTime.dwHighDateTime=0x1bd4b15, nFileSizeHigh=0x0, nFileSizeLow=0xd10, dwReserved0=0x0, dwReserved1=0x0, cFileName="AN01039_.WMF", cAlternateFileName="")) returned 1 [0034.401] FindNextFileW (in: hFindFile=0x381c80, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x31e92000, ftCreationTime.dwHighDateTime=0x1bd4b15, ftLastAccessTime.dwLowDateTime=0x5eb8e810, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x31e92000, ftLastWriteTime.dwHighDateTime=0x1bd4b15, nFileSizeHigh=0x0, nFileSizeLow=0x63c, dwReserved0=0x0, dwReserved1=0x0, cFileName="AN01044_.WMF", cAlternateFileName="")) returned 1 [0034.401] FindNextFileW (in: hFindFile=0x381c80, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa1fda300, ftCreationTime.dwHighDateTime=0x1bd4b21, ftLastAccessTime.dwLowDateTime=0x5eb8e810, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xa1fda300, ftLastWriteTime.dwHighDateTime=0x1bd4b21, nFileSizeHigh=0x0, nFileSizeLow=0x1f20, dwReserved0=0x0, dwReserved1=0x0, cFileName="AN01060_.WMF", cAlternateFileName="")) returned 1 [0034.401] FindNextFileW (in: hFindFile=0x381c80, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x86dd6400, ftCreationTime.dwHighDateTime=0x1bd4b1e, ftLastAccessTime.dwLowDateTime=0x5133d8d0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x86dd6400, ftLastWriteTime.dwHighDateTime=0x1bd4b1e, nFileSizeHigh=0x0, nFileSizeLow=0x728, dwReserved0=0x0, dwReserved1=0x0, cFileName="AN01084_.WMF", cAlternateFileName="")) returned 1 [0034.401] FindNextFileW (in: hFindFile=0x381c80, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x54406500, ftCreationTime.dwHighDateTime=0x1bd4b38, ftLastAccessTime.dwLowDateTime=0x5133d8d0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x54406500, ftLastWriteTime.dwHighDateTime=0x1bd4b38, nFileSizeHigh=0x0, nFileSizeLow=0x66dc, dwReserved0=0x0, dwReserved1=0x0, cFileName="AN01173_.WMF", cAlternateFileName="")) returned 1 [0034.401] FindNextFileW (in: hFindFile=0x381c80, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x530f3800, ftCreationTime.dwHighDateTime=0x1bd4b38, ftLastAccessTime.dwLowDateTime=0x5eb8e810, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x530f3800, ftLastWriteTime.dwHighDateTime=0x1bd4b38, nFileSizeHigh=0x0, nFileSizeLow=0x6cd2, dwReserved0=0x0, dwReserved1=0x0, cFileName="AN01174_.WMF", cAlternateFileName="")) returned 1 [0034.401] FindNextFileW (in: hFindFile=0x381c80, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8cbf4f00, ftCreationTime.dwHighDateTime=0x1bd4af6, ftLastAccessTime.dwLowDateTime=0x5eb8e810, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x8cbf4f00, ftLastWriteTime.dwHighDateTime=0x1bd4af6, nFileSizeHigh=0x0, nFileSizeLow=0xea2, dwReserved0=0x0, dwReserved1=0x0, cFileName="AN01184_.WMF", cAlternateFileName="")) returned 1 [0034.401] FindNextFileW (in: hFindFile=0x381c80, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8335e700, ftCreationTime.dwHighDateTime=0x1bd4af6, ftLastAccessTime.dwLowDateTime=0x5133d8d0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x8335e700, ftLastWriteTime.dwHighDateTime=0x1bd4af6, nFileSizeHigh=0x0, nFileSizeLow=0x16cc, dwReserved0=0x0, dwReserved1=0x0, cFileName="AN01216_.WMF", cAlternateFileName="")) returned 1 [0034.401] FindNextFileW (in: hFindFile=0x381c80, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7fa26000, ftCreationTime.dwHighDateTime=0x1bd4af6, ftLastAccessTime.dwLowDateTime=0x5eb8e810, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x7fa26000, ftLastWriteTime.dwHighDateTime=0x1bd4af6, nFileSizeHigh=0x0, nFileSizeLow=0xbc4, dwReserved0=0x0, dwReserved1=0x0, cFileName="AN01218_.WMF", cAlternateFileName="")) returned 1 [0034.401] FindNextFileW (in: hFindFile=0x381c80, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x68bb3800, ftCreationTime.dwHighDateTime=0x1bd4b0d, ftLastAccessTime.dwLowDateTime=0x5133d8d0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x68bb3800, ftLastWriteTime.dwHighDateTime=0x1bd4b0d, nFileSizeHigh=0x0, nFileSizeLow=0xac4, dwReserved0=0x0, dwReserved1=0x0, cFileName="AN01251_.WMF", cAlternateFileName="")) returned 1 [0034.402] FindNextFileW (in: hFindFile=0x381c80, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc436f700, ftCreationTime.dwHighDateTime=0x1bd4b08, ftLastAccessTime.dwLowDateTime=0x5133d8d0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xc436f700, ftLastWriteTime.dwHighDateTime=0x1bd4b08, nFileSizeHigh=0x0, nFileSizeLow=0x1ccc, dwReserved0=0x0, dwReserved1=0x0, cFileName="AN01545_.WMF", cAlternateFileName="")) returned 1 [0034.402] FindNextFileW (in: hFindFile=0x381c80, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe37a5800, ftCreationTime.dwHighDateTime=0x1bd4af9, ftLastAccessTime.dwLowDateTime=0x5eb8e810, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xe37a5800, ftLastWriteTime.dwHighDateTime=0x1bd4af9, nFileSizeHigh=0x0, nFileSizeLow=0x1d74, dwReserved0=0x0, dwReserved1=0x0, cFileName="AN02122_.WMF", cAlternateFileName="")) returned 1 [0034.402] FindNextFileW (in: hFindFile=0x381c80, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xcec9bd00, ftCreationTime.dwHighDateTime=0x1bd4bea, ftLastAccessTime.dwLowDateTime=0x5eb8e810, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xcec9bd00, ftLastWriteTime.dwHighDateTime=0x1bd4bea, nFileSizeHigh=0x0, nFileSizeLow=0x19e8, dwReserved0=0x0, dwReserved1=0x0, cFileName="AN02559_.WMF", cAlternateFileName="")) returned 1 [0034.402] FindNextFileW (in: hFindFile=0x381c80, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1b6bc300, ftCreationTime.dwHighDateTime=0x1bd4c00, ftLastAccessTime.dwLowDateTime=0x5133d8d0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x1b6bc300, ftLastWriteTime.dwHighDateTime=0x1bd4c00, nFileSizeHigh=0x0, nFileSizeLow=0x83c, dwReserved0=0x0, dwReserved1=0x0, cFileName="AN02724_.WMF", cAlternateFileName="")) returned 1 [0034.402] FindNextFileW (in: hFindFile=0x381c80, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6c87b100, ftCreationTime.dwHighDateTime=0x1bd4c18, ftLastAccessTime.dwLowDateTime=0x5eb8e810, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x6c87b100, ftLastWriteTime.dwHighDateTime=0x1bd4c18, nFileSizeHigh=0x0, nFileSizeLow=0x2418, dwReserved0=0x0, dwReserved1=0x0, cFileName="AN03500_.WMF", cAlternateFileName="")) returned 1 [0034.402] FindNextFileW (in: hFindFile=0x381c80, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x73d19900, ftCreationTime.dwHighDateTime=0x1c7a765, ftLastAccessTime.dwLowDateTime=0x5133d8d0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x73d19900, ftLastWriteTime.dwHighDateTime=0x1c7a765, nFileSizeHigh=0x0, nFileSizeLow=0x928, dwReserved0=0x0, dwReserved1=0x0, cFileName="AN04108_.WMF", cAlternateFileName="")) returned 1 [0034.402] FindNextFileW (in: hFindFile=0x381c80, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x73d19900, ftCreationTime.dwHighDateTime=0x1c7a765, ftLastAccessTime.dwLowDateTime=0x5eb8e810, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x73d19900, ftLastWriteTime.dwHighDateTime=0x1c7a765, nFileSizeHigh=0x0, nFileSizeLow=0x17ac, dwReserved0=0x0, dwReserved1=0x0, cFileName="AN04117_.WMF", cAlternateFileName="")) returned 1 [0034.402] FindNextFileW (in: hFindFile=0x381c80, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x73d19900, ftCreationTime.dwHighDateTime=0x1c7a765, ftLastAccessTime.dwLowDateTime=0x5133d8d0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x73d19900, ftLastWriteTime.dwHighDateTime=0x1c7a765, nFileSizeHigh=0x0, nFileSizeLow=0xd58, dwReserved0=0x0, dwReserved1=0x0, cFileName="AN04134_.WMF", cAlternateFileName="")) returned 1 [0034.402] FindNextFileW (in: hFindFile=0x381c80, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x73d19900, ftCreationTime.dwHighDateTime=0x1c7a765, ftLastAccessTime.dwLowDateTime=0x5eb8e810, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x73d19900, ftLastWriteTime.dwHighDateTime=0x1c7a765, nFileSizeHigh=0x0, nFileSizeLow=0xa4c, dwReserved0=0x0, dwReserved1=0x0, cFileName="AN04174_.WMF", cAlternateFileName="")) returned 1 [0034.402] FindNextFileW (in: hFindFile=0x381c80, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x73d19900, ftCreationTime.dwHighDateTime=0x1c7a765, ftLastAccessTime.dwLowDateTime=0x5eb8e810, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x73d19900, ftLastWriteTime.dwHighDateTime=0x1c7a765, nFileSizeHigh=0x0, nFileSizeLow=0x19ec, dwReserved0=0x0, dwReserved1=0x0, cFileName="AN04191_.WMF", cAlternateFileName="")) returned 1 [0034.402] FindNextFileW (in: hFindFile=0x381c80, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x73d19900, ftCreationTime.dwHighDateTime=0x1c7a765, ftLastAccessTime.dwLowDateTime=0x5133d8d0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x73d19900, ftLastWriteTime.dwHighDateTime=0x1c7a765, nFileSizeHigh=0x0, nFileSizeLow=0x1204, dwReserved0=0x0, dwReserved1=0x0, cFileName="AN04195_.WMF", cAlternateFileName="")) returned 1 [0034.402] FindNextFileW (in: hFindFile=0x381c80, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x73d19900, ftCreationTime.dwHighDateTime=0x1c7a765, ftLastAccessTime.dwLowDateTime=0x5eb8e810, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x73d19900, ftLastWriteTime.dwHighDateTime=0x1c7a765, nFileSizeHigh=0x0, nFileSizeLow=0xc48, dwReserved0=0x0, dwReserved1=0x0, cFileName="AN04196_.WMF", cAlternateFileName="")) returned 1 [0034.402] FindNextFileW (in: hFindFile=0x381c80, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x73d19900, ftCreationTime.dwHighDateTime=0x1c7a765, ftLastAccessTime.dwLowDateTime=0x5133d8d0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x73d19900, ftLastWriteTime.dwHighDateTime=0x1c7a765, nFileSizeHigh=0x0, nFileSizeLow=0x1df4, dwReserved0=0x0, dwReserved1=0x0, cFileName="AN04206_.WMF", cAlternateFileName="")) returned 1 [0034.402] FindNextFileW (in: hFindFile=0x381c80, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x73d19900, ftCreationTime.dwHighDateTime=0x1c7a765, ftLastAccessTime.dwLowDateTime=0x5133d8d0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x73d19900, ftLastWriteTime.dwHighDateTime=0x1c7a765, nFileSizeHigh=0x0, nFileSizeLow=0x212c, dwReserved0=0x0, dwReserved1=0x0, cFileName="AN04225_.WMF", cAlternateFileName="")) returned 1 [0034.402] FindNextFileW (in: hFindFile=0x381c80, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x73d19900, ftCreationTime.dwHighDateTime=0x1c7a765, ftLastAccessTime.dwLowDateTime=0x5eb8e810, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x73d19900, ftLastWriteTime.dwHighDateTime=0x1c7a765, nFileSizeHigh=0x0, nFileSizeLow=0x1e7c, dwReserved0=0x0, dwReserved1=0x0, cFileName="AN04235_.WMF", cAlternateFileName="")) returned 1 [0034.402] FindNextFileW (in: hFindFile=0x381c80, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x73d19900, ftCreationTime.dwHighDateTime=0x1c7a765, ftLastAccessTime.dwLowDateTime=0x513d5e50, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x73d19900, ftLastWriteTime.dwHighDateTime=0x1c7a765, nFileSizeHigh=0x0, nFileSizeLow=0x1e7c, dwReserved0=0x0, dwReserved1=0x0, cFileName="AN04267_.WMF", cAlternateFileName="")) returned 1 [0034.402] FindNextFileW (in: hFindFile=0x381c80, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x73d19900, ftCreationTime.dwHighDateTime=0x1c7a765, ftLastAccessTime.dwLowDateTime=0x513d5e50, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x73d19900, ftLastWriteTime.dwHighDateTime=0x1c7a765, nFileSizeHigh=0x0, nFileSizeLow=0x7e0, dwReserved0=0x0, dwReserved1=0x0, cFileName="AN04269_.WMF", cAlternateFileName="")) returned 1 [0034.409] FindNextFileW (in: hFindFile=0x381c80, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x73d19900, ftCreationTime.dwHighDateTime=0x1c7a765, ftLastAccessTime.dwLowDateTime=0x5eb8e810, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x73d19900, ftLastWriteTime.dwHighDateTime=0x1c7a765, nFileSizeHigh=0x0, nFileSizeLow=0x9bc, dwReserved0=0x0, dwReserved1=0x0, cFileName="AN04323_.WMF", cAlternateFileName="")) returned 1 [0034.409] FindNextFileW (in: hFindFile=0x381c80, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x73d19900, ftCreationTime.dwHighDateTime=0x1c7a765, ftLastAccessTime.dwLowDateTime=0x5eb8e810, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x73d19900, ftLastWriteTime.dwHighDateTime=0x1c7a765, nFileSizeHigh=0x0, nFileSizeLow=0xd14, dwReserved0=0x0, dwReserved1=0x0, cFileName="AN04326_.WMF", cAlternateFileName="")) returned 1 [0034.409] FindNextFileW (in: hFindFile=0x381c80, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x73d19900, ftCreationTime.dwHighDateTime=0x1c7a765, ftLastAccessTime.dwLowDateTime=0x513d5e50, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x73d19900, ftLastWriteTime.dwHighDateTime=0x1c7a765, nFileSizeHigh=0x0, nFileSizeLow=0x10c8, dwReserved0=0x0, dwReserved1=0x0, cFileName="AN04332_.WMF", cAlternateFileName="")) returned 1 [0034.409] FindNextFileW (in: hFindFile=0x381c80, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x73d19900, ftCreationTime.dwHighDateTime=0x1c7a765, ftLastAccessTime.dwLowDateTime=0x513d5e50, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x73d19900, ftLastWriteTime.dwHighDateTime=0x1c7a765, nFileSizeHigh=0x0, nFileSizeLow=0xc9c, dwReserved0=0x0, dwReserved1=0x0, cFileName="AN04355_.WMF", cAlternateFileName="")) returned 1 [0034.409] FindNextFileW (in: hFindFile=0x381c80, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x73d19900, ftCreationTime.dwHighDateTime=0x1c7a765, ftLastAccessTime.dwLowDateTime=0x513d5e50, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x73d19900, ftLastWriteTime.dwHighDateTime=0x1c7a765, nFileSizeHigh=0x0, nFileSizeLow=0x12c8, dwReserved0=0x0, dwReserved1=0x0, cFileName="AN04369_.WMF", cAlternateFileName="")) returned 1 [0034.409] FindNextFileW (in: hFindFile=0x381c80, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x73d19900, ftCreationTime.dwHighDateTime=0x1c7a765, ftLastAccessTime.dwLowDateTime=0x5eb8e810, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x73d19900, ftLastWriteTime.dwHighDateTime=0x1c7a765, nFileSizeHigh=0x0, nFileSizeLow=0x1384, dwReserved0=0x0, dwReserved1=0x0, cFileName="AN04384_.WMF", cAlternateFileName="")) returned 1 [0034.409] FindNextFileW (in: hFindFile=0x381c80, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x73d19900, ftCreationTime.dwHighDateTime=0x1c7a765, ftLastAccessTime.dwLowDateTime=0x5eb8e810, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x73d19900, ftLastWriteTime.dwHighDateTime=0x1c7a765, nFileSizeHigh=0x0, nFileSizeLow=0x138c, dwReserved0=0x0, dwReserved1=0x0, cFileName="AN04385_.WMF", cAlternateFileName="")) returned 1 [0034.409] FindNextFileW (in: hFindFile=0x381c80, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xcfc41400, ftCreationTime.dwHighDateTime=0x1bd4c15, ftLastAccessTime.dwLowDateTime=0x5f409670, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xcfc41400, ftLastWriteTime.dwHighDateTime=0x1bd4c15, nFileSizeHigh=0x0, nFileSizeLow=0x1cd8, dwReserved0=0x0, dwReserved1=0x0, cFileName="BABY_01.MID", cAlternateFileName="")) returned 1 [0034.409] FindNextFileW (in: hFindFile=0x381c80, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x73d19900, ftCreationTime.dwHighDateTime=0x1c7a765, ftLastAccessTime.dwLowDateTime=0x5178e0b0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x73d19900, ftLastWriteTime.dwHighDateTime=0x1c7a765, nFileSizeHigh=0x0, nFileSizeLow=0x1306, dwReserved0=0x0, dwReserved1=0x0, cFileName="BD00116_.WMF", cAlternateFileName="")) returned 1 [0034.409] FindNextFileW (in: hFindFile=0x381c80, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2332bb00, ftCreationTime.dwHighDateTime=0x1bd4fa4, ftLastAccessTime.dwLowDateTime=0x5f42f7d0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x2332bb00, ftLastWriteTime.dwHighDateTime=0x1bd4fa4, nFileSizeHigh=0x0, nFileSizeLow=0x6906, dwReserved0=0x0, dwReserved1=0x0, cFileName="BD00141_.WMF", cAlternateFileName="")) returned 1 [0034.409] FindNextFileW (in: hFindFile=0x381c80, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb983d700, ftCreationTime.dwHighDateTime=0x1bf148e, ftLastAccessTime.dwLowDateTime=0x5f42f7d0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xb983d700, ftLastWriteTime.dwHighDateTime=0x1bf148e, nFileSizeHigh=0x0, nFileSizeLow=0x7114, dwReserved0=0x0, dwReserved1=0x0, cFileName="BD00146_.WMF", cAlternateFileName="")) returned 1 [0034.409] FindNextFileW (in: hFindFile=0x381c80, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1d1cf00, ftCreationTime.dwHighDateTime=0x1bd4fa4, ftLastAccessTime.dwLowDateTime=0x5178e0b0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x1d1cf00, ftLastWriteTime.dwHighDateTime=0x1bd4fa4, nFileSizeHigh=0x0, nFileSizeLow=0x2d74, dwReserved0=0x0, dwReserved1=0x0, cFileName="BD00155_.WMF", cAlternateFileName="")) returned 1 [0034.409] FindNextFileW (in: hFindFile=0x381c80, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xfaaac100, ftCreationTime.dwHighDateTime=0x1bd4fa3, ftLastAccessTime.dwLowDateTime=0x5f42f7d0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xfaaac100, ftLastWriteTime.dwHighDateTime=0x1bd4fa3, nFileSizeHigh=0x0, nFileSizeLow=0x57f4, dwReserved0=0x0, dwReserved1=0x0, cFileName="BD00160_.WMF", cAlternateFileName="")) returned 1 [0034.409] FindNextFileW (in: hFindFile=0x381c80, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xcafbb900, ftCreationTime.dwHighDateTime=0x1bd4fa3, ftLastAccessTime.dwLowDateTime=0x5178e0b0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xcafbb900, ftLastWriteTime.dwHighDateTime=0x1bd4fa3, nFileSizeHigh=0x0, nFileSizeLow=0x3f34, dwReserved0=0x0, dwReserved1=0x0, cFileName="BD00173_.WMF", cAlternateFileName="")) returned 1 [0034.409] FindNextFileW (in: hFindFile=0x381c80, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x73d19900, ftCreationTime.dwHighDateTime=0x1c7a765, ftLastAccessTime.dwLowDateTime=0x5f42f7d0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x73d19900, ftLastWriteTime.dwHighDateTime=0x1c7a765, nFileSizeHigh=0x0, nFileSizeLow=0x4354, dwReserved0=0x0, dwReserved1=0x0, cFileName="BD05119_.WMF", cAlternateFileName="")) returned 1 [0034.409] FindNextFileW (in: hFindFile=0x381c80, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x73d19900, ftCreationTime.dwHighDateTime=0x1c7a765, ftLastAccessTime.dwLowDateTime=0x5178e0b0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x73d19900, ftLastWriteTime.dwHighDateTime=0x1c7a765, nFileSizeHigh=0x0, nFileSizeLow=0x3ef0, dwReserved0=0x0, dwReserved1=0x0, cFileName="BD06102_.WMF", cAlternateFileName="")) returned 1 [0034.409] FindNextFileW (in: hFindFile=0x381c80, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x73d19900, ftCreationTime.dwHighDateTime=0x1c7a765, ftLastAccessTime.dwLowDateTime=0x5178e0b0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x73d19900, ftLastWriteTime.dwHighDateTime=0x1c7a765, nFileSizeHigh=0x0, nFileSizeLow=0x4124, dwReserved0=0x0, dwReserved1=0x0, cFileName="BD06200_.WMF", cAlternateFileName="")) returned 1 [0034.409] FindNextFileW (in: hFindFile=0x381c80, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x73d19900, ftCreationTime.dwHighDateTime=0x1c7a765, ftLastAccessTime.dwLowDateTime=0x5f455930, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x73d19900, ftLastWriteTime.dwHighDateTime=0x1c7a765, nFileSizeHigh=0x0, nFileSizeLow=0x687c, dwReserved0=0x0, dwReserved1=0x0, cFileName="BD07761_.WMF", cAlternateFileName="")) returned 1 [0034.409] FindNextFileW (in: hFindFile=0x381c80, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x73d19900, ftCreationTime.dwHighDateTime=0x1c7a765, ftLastAccessTime.dwLowDateTime=0x5f455930, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x73d19900, ftLastWriteTime.dwHighDateTime=0x1c7a765, nFileSizeHigh=0x0, nFileSizeLow=0x133c, dwReserved0=0x0, dwReserved1=0x0, cFileName="BD07804_.WMF", cAlternateFileName="")) returned 1 [0034.409] FindNextFileW (in: hFindFile=0x381c80, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x73d19900, ftCreationTime.dwHighDateTime=0x1c7a765, ftLastAccessTime.dwLowDateTime=0x5f455930, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x73d19900, ftLastWriteTime.dwHighDateTime=0x1c7a765, nFileSizeHigh=0x0, nFileSizeLow=0xfe2, dwReserved0=0x0, dwReserved1=0x0, cFileName="BD07831_.WMF", cAlternateFileName="")) returned 1 [0034.450] FindClose (in: hFindFile=0x381c80 | out: hFindFile=0x381c80) returned 1 [0034.453] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e77c) returned 1 [0034.453] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e788) returned 1 [0034.453] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e7bc) returned 1 [0034.453] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR", nBufferLength=0x105, lpBuffer=0x31e2c4, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR", lpFilePart=0x0) returned 0x32 [0034.453] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\", nBufferLength=0x105, lpBuffer=0x31e298, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\", lpFilePart=0x0) returned 0x33 [0034.453] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\PUB60COR\\*", lpFindFileData=0x31e4e4 | out: lpFindFileData=0x31e4e4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x512f1610, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x7090d6b0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x7090d6b0, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x381c80 [0034.459] FindClose (in: hFindFile=0x381c80 | out: hFindFile=0x381c80) returned 1 [0034.462] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e77c) returned 1 [0034.462] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e788) returned 1 [0034.463] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e7bc) returned 1 [0034.463] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\Publisher", nBufferLength=0x105, lpBuffer=0x31e2c4, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\CLIPART\\Publisher", lpFilePart=0x0) returned 0x33 [0034.463] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\Publisher\\", nBufferLength=0x105, lpBuffer=0x31e298, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\CLIPART\\Publisher\\", lpFilePart=0x0) returned 0x34 [0034.463] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\Publisher\\*", lpFindFileData=0x31e4e4 | out: lpFindFileData=0x31e4e4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x56406370, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x56406370, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x56406370, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x381c80 [0034.469] FindClose (in: hFindFile=0x381c80 | out: hFindFile=0x381c80) returned 1 [0034.469] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e77c) returned 1 [0034.469] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e788) returned 1 [0034.469] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e7bc) returned 1 [0034.469] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\Publisher", nBufferLength=0x105, lpBuffer=0x31e2c4, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\CLIPART\\Publisher", lpFilePart=0x0) returned 0x33 [0034.469] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\Publisher\\", nBufferLength=0x105, lpBuffer=0x31e298, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\CLIPART\\Publisher\\", lpFilePart=0x0) returned 0x34 [0034.469] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\Publisher\\*", lpFindFileData=0x31e4e4 | out: lpFindFileData=0x31e4e4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x56406370, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x56406370, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x56406370, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x381c80 [0034.469] FindClose (in: hFindFile=0x381c80 | out: hFindFile=0x381c80) returned 1 [0034.469] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e77c) returned 1 [0034.469] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e788) returned 1 [0034.469] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e744) returned 1 [0034.469] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\Publisher\\Backgrounds", nBufferLength=0x105, lpBuffer=0x31e24c, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\CLIPART\\Publisher\\Backgrounds", lpFilePart=0x0) returned 0x3f [0034.469] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\Publisher\\Backgrounds\\", nBufferLength=0x105, lpBuffer=0x31e220, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\CLIPART\\Publisher\\Backgrounds\\", lpFilePart=0x0) returned 0x40 [0034.469] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\Publisher\\Backgrounds\\*", lpFindFileData=0x31e46c | out: lpFindFileData=0x31e46c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x56406370, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x7089b290, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x7089b290, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x381c80 [0034.471] FindClose (in: hFindFile=0x381c80 | out: hFindFile=0x381c80) returned 1 [0034.472] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e704) returned 1 [0034.472] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e710) returned 1 [0034.472] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e744) returned 1 [0034.472] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\Publisher\\Backgrounds", nBufferLength=0x105, lpBuffer=0x31e24c, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\CLIPART\\Publisher\\Backgrounds", lpFilePart=0x0) returned 0x3f [0034.472] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\Publisher\\Backgrounds\\", nBufferLength=0x105, lpBuffer=0x31e220, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\CLIPART\\Publisher\\Backgrounds\\", lpFilePart=0x0) returned 0x40 [0034.472] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\CLIPART\\Publisher\\Backgrounds\\*", lpFindFileData=0x31e46c | out: lpFindFileData=0x31e46c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x56406370, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x7089b290, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x7089b290, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x381c80 [0034.473] FindClose (in: hFindFile=0x381c80 | out: hFindFile=0x381c80) returned 1 [0034.474] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e704) returned 1 [0034.474] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e710) returned 1 [0034.474] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e834) returned 1 [0034.474] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14", nBufferLength=0x105, lpBuffer=0x31e33c, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\Document Themes 14", lpFilePart=0x0) returned 0x34 [0034.474] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14\\", nBufferLength=0x105, lpBuffer=0x31e310, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\Document Themes 14\\", lpFilePart=0x0) returned 0x35 [0034.474] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14\\*", lpFindFileData=0x31e55c | out: lpFindFileData=0x31e55c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5127f1f0, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0xe5cd5260, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0xe5cd5260, ftLastWriteTime.dwHighDateTime=0x1d305f1, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x381c80 [0034.478] FindClose (in: hFindFile=0x381c80 | out: hFindFile=0x381c80) returned 1 [0034.479] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e7f4) returned 1 [0034.479] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e800) returned 1 [0034.479] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e834) returned 1 [0034.479] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14", nBufferLength=0x105, lpBuffer=0x31e33c, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\Document Themes 14", lpFilePart=0x0) returned 0x34 [0034.479] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14\\", nBufferLength=0x105, lpBuffer=0x31e310, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\Document Themes 14\\", lpFilePart=0x0) returned 0x35 [0034.479] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14\\*", lpFindFileData=0x31e55c | out: lpFindFileData=0x31e55c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5127f1f0, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0xe5cd5260, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0xe5cd5260, ftLastWriteTime.dwHighDateTime=0x1d305f1, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x381c80 [0034.480] FindClose (in: hFindFile=0x381c80 | out: hFindFile=0x381c80) returned 1 [0034.480] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e7f4) returned 1 [0034.480] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e800) returned 1 [0034.480] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e7bc) returned 1 [0034.480] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Colors", nBufferLength=0x105, lpBuffer=0x31e2c4, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Colors", lpFilePart=0x0) returned 0x41 [0034.481] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Colors\\", nBufferLength=0x105, lpBuffer=0x31e298, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Colors\\", lpFilePart=0x0) returned 0x42 [0034.481] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Colors\\*", lpFindFileData=0x31e4e4 | out: lpFindFileData=0x31e4e4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x51c9cf70, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x603f4990, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x603f4990, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x381c80 [0034.484] FindClose (in: hFindFile=0x381c80 | out: hFindFile=0x381c80) returned 1 [0034.485] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e77c) returned 1 [0034.485] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e788) returned 1 [0034.485] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e7bc) returned 1 [0034.485] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Colors", nBufferLength=0x105, lpBuffer=0x31e2c4, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Colors", lpFilePart=0x0) returned 0x41 [0034.485] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Colors\\", nBufferLength=0x105, lpBuffer=0x31e298, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Colors\\", lpFilePart=0x0) returned 0x42 [0034.485] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Colors\\*", lpFindFileData=0x31e4e4 | out: lpFindFileData=0x31e4e4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x51c9cf70, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x603f4990, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x603f4990, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x381c80 [0034.486] FindClose (in: hFindFile=0x381c80 | out: hFindFile=0x381c80) returned 1 [0034.487] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e77c) returned 1 [0034.487] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e788) returned 1 [0034.487] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Colors\\Adjacency.xml", nBufferLength=0x105, lpBuffer=0x31e194, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Colors\\Adjacency.xml", lpFilePart=0x0) returned 0x4f [0034.487] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e688) returned 1 [0034.487] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Colors\\Adjacency.xml" (normalized: "c:\\program files\\microsoft office\\document themes 14\\theme colors\\adjacency.xml"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x224 [0034.491] GetFileType (hFile=0x224) returned 0x1 [0034.491] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e684) returned 1 [0034.491] GetFileType (hFile=0x224) returned 0x1 [0034.491] GetFileSize (in: hFile=0x224, lpFileSizeHigh=0x31e790 | out: lpFileSizeHigh=0x31e790*=0x0) returned 0x3a0 [0034.491] ReadFile (in: hFile=0x224, lpBuffer=0x27eb8f8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x31e73c, lpOverlapped=0x0 | out: lpBuffer=0x27eb8f8*, lpNumberOfBytesRead=0x31e73c*=0x3a0, lpOverlapped=0x0) returned 1 [0034.521] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Colors\\Adjacency.xml", nBufferLength=0x105, lpBuffer=0x31e180, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Colors\\Adjacency.xml", lpFilePart=0x0) returned 0x4f [0034.521] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e674) returned 1 [0034.521] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Colors\\Adjacency.xml" (normalized: "c:\\program files\\microsoft office\\document themes 14\\theme colors\\adjacency.xml"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x224 [0034.522] GetFileType (hFile=0x224) returned 0x1 [0034.522] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e670) returned 1 [0034.522] GetFileType (hFile=0x224) returned 0x1 [0034.522] WriteFile (in: hFile=0x224, lpBuffer=0x264c7dc*, nNumberOfBytesToWrite=0x3b0, lpNumberOfBytesWritten=0x31e704, lpOverlapped=0x0 | out: lpBuffer=0x264c7dc*, lpNumberOfBytesWritten=0x31e704*=0x3b0, lpOverlapped=0x0) returned 1 [0034.523] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Colors\\Adjacency.xml", nBufferLength=0x105, lpBuffer=0x31e2b4, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Colors\\Adjacency.xml", lpFilePart=0x0) returned 0x4f [0034.523] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Colors\\Adjacency.xml", nBufferLength=0x105, lpBuffer=0x31e2b4, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Colors\\Adjacency.xml", lpFilePart=0x0) returned 0x4f [0034.523] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e714) returned 1 [0034.523] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Colors\\Adjacency.xml" (normalized: "c:\\program files\\microsoft office\\document themes 14\\theme colors\\adjacency.xml"), fInfoLevelId=0x0, lpFileInformation=0x31e790 | out: lpFileInformation=0x31e790*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xccc5300, ftCreationTime.dwHighDateTime=0x1cac1e1, ftLastAccessTime.dwLowDateTime=0x51c9cf70, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xf8066680, ftLastWriteTime.dwHighDateTime=0x1d6eb7e, nFileSizeHigh=0x0, nFileSizeLow=0x3b0)) returned 1 [0034.523] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e710) returned 1 [0034.523] MoveFileW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Colors\\Adjacency.xml" (normalized: "c:\\program files\\microsoft office\\document themes 14\\theme colors\\adjacency.xml"), lpNewFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Colors\\Adjacency.xml" (normalized: "c:\\program files\\microsoft office\\document themes 14\\theme colors\\adjacency.xml")) returned 1 [0034.525] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Colors\\Angles.xml", nBufferLength=0x105, lpBuffer=0x31e194, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Colors\\Angles.xml", lpFilePart=0x0) returned 0x4c [0034.525] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e688) returned 1 [0034.525] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Colors\\Angles.xml" (normalized: "c:\\program files\\microsoft office\\document themes 14\\theme colors\\angles.xml"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x224 [0034.525] GetFileType (hFile=0x224) returned 0x1 [0034.525] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e684) returned 1 [0034.525] GetFileType (hFile=0x224) returned 0x1 [0034.525] GetFileSize (in: hFile=0x224, lpFileSizeHigh=0x31e790 | out: lpFileSizeHigh=0x31e790*=0x0) returned 0x39d [0034.525] ReadFile (in: hFile=0x224, lpBuffer=0x264de2c, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x31e73c, lpOverlapped=0x0 | out: lpBuffer=0x264de2c*, lpNumberOfBytesRead=0x31e73c*=0x39d, lpOverlapped=0x0) returned 1 [0034.540] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Colors\\Angles.xml", nBufferLength=0x105, lpBuffer=0x31e180, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Colors\\Angles.xml", lpFilePart=0x0) returned 0x4c [0034.540] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e674) returned 1 [0034.540] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Colors\\Angles.xml" (normalized: "c:\\program files\\microsoft office\\document themes 14\\theme colors\\angles.xml"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x224 [0034.541] GetFileType (hFile=0x224) returned 0x1 [0034.541] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e670) returned 1 [0034.541] GetFileType (hFile=0x224) returned 0x1 [0034.541] WriteFile (in: hFile=0x224, lpBuffer=0x269d0c4*, nNumberOfBytesToWrite=0x3a0, lpNumberOfBytesWritten=0x31e704, lpOverlapped=0x0 | out: lpBuffer=0x269d0c4*, lpNumberOfBytesWritten=0x31e704*=0x3a0, lpOverlapped=0x0) returned 1 [0034.542] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Colors\\Angles.xml", nBufferLength=0x105, lpBuffer=0x31e2b4, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Colors\\Angles.xml", lpFilePart=0x0) returned 0x4c [0034.542] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Colors\\Angles.xml", nBufferLength=0x105, lpBuffer=0x31e2b4, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Colors\\Angles.xml", lpFilePart=0x0) returned 0x4c [0034.542] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e714) returned 1 [0034.542] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Colors\\Angles.xml" (normalized: "c:\\program files\\microsoft office\\document themes 14\\theme colors\\angles.xml"), fInfoLevelId=0x0, lpFileInformation=0x31e790 | out: lpFileInformation=0x31e790*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xdfd8000, ftCreationTime.dwHighDateTime=0x1cac1e1, ftLastAccessTime.dwLowDateTime=0x51c9cf70, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xf80b2940, ftLastWriteTime.dwHighDateTime=0x1d6eb7e, nFileSizeHigh=0x0, nFileSizeLow=0x3a0)) returned 1 [0034.542] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e710) returned 1 [0034.542] MoveFileW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Colors\\Angles.xml" (normalized: "c:\\program files\\microsoft office\\document themes 14\\theme colors\\angles.xml"), lpNewFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Colors\\Angles.xml" (normalized: "c:\\program files\\microsoft office\\document themes 14\\theme colors\\angles.xml")) returned 1 [0034.543] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Colors\\Apex.xml", nBufferLength=0x105, lpBuffer=0x31e194, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Colors\\Apex.xml", lpFilePart=0x0) returned 0x4a [0034.544] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e688) returned 1 [0034.544] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Colors\\Apex.xml" (normalized: "c:\\program files\\microsoft office\\document themes 14\\theme colors\\apex.xml"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x224 [0034.544] GetFileType (hFile=0x224) returned 0x1 [0034.544] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e684) returned 1 [0034.544] GetFileType (hFile=0x224) returned 0x1 [0034.544] GetFileSize (in: hFile=0x224, lpFileSizeHigh=0x31e790 | out: lpFileSizeHigh=0x31e790*=0x0) returned 0x3bf [0034.544] ReadFile (in: hFile=0x224, lpBuffer=0x269e724, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x31e73c, lpOverlapped=0x0 | out: lpBuffer=0x269e724*, lpNumberOfBytesRead=0x31e73c*=0x3bf, lpOverlapped=0x0) returned 1 [0034.559] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Colors\\Apex.xml", nBufferLength=0x105, lpBuffer=0x31e180, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Colors\\Apex.xml", lpFilePart=0x0) returned 0x4a [0034.559] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e674) returned 1 [0034.559] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Colors\\Apex.xml" (normalized: "c:\\program files\\microsoft office\\document themes 14\\theme colors\\apex.xml"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x224 [0034.560] GetFileType (hFile=0x224) returned 0x1 [0034.560] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e670) returned 1 [0034.560] GetFileType (hFile=0x224) returned 0x1 [0034.561] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Colors\\Apex.xml", nBufferLength=0x105, lpBuffer=0x31e2b4, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Colors\\Apex.xml", lpFilePart=0x0) returned 0x4a [0034.561] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Colors\\Apex.xml", nBufferLength=0x105, lpBuffer=0x31e2b4, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Colors\\Apex.xml", lpFilePart=0x0) returned 0x4a [0034.561] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e714) returned 1 [0034.561] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Colors\\Apex.xml" (normalized: "c:\\program files\\microsoft office\\document themes 14\\theme colors\\apex.xml"), fInfoLevelId=0x0, lpFileInformation=0x31e790 | out: lpFileInformation=0x31e790*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xeb6b6700, ftCreationTime.dwHighDateTime=0x1cac1e0, ftLastAccessTime.dwLowDateTime=0x51c9cf70, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xf80d8aa0, ftLastWriteTime.dwHighDateTime=0x1d6eb7e, nFileSizeHigh=0x0, nFileSizeLow=0x3c0)) returned 1 [0034.561] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e710) returned 1 [0034.562] MoveFileW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Colors\\Apex.xml" (normalized: "c:\\program files\\microsoft office\\document themes 14\\theme colors\\apex.xml"), lpNewFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Colors\\Apex.xml" (normalized: "c:\\program files\\microsoft office\\document themes 14\\theme colors\\apex.xml")) returned 1 [0034.562] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Colors\\Apothecary.xml", nBufferLength=0x105, lpBuffer=0x31e194, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Colors\\Apothecary.xml", lpFilePart=0x0) returned 0x50 [0034.562] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e688) returned 1 [0034.562] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Colors\\Apothecary.xml" (normalized: "c:\\program files\\microsoft office\\document themes 14\\theme colors\\apothecary.xml"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x224 [0034.564] GetFileType (hFile=0x224) returned 0x1 [0034.564] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e684) returned 1 [0034.564] GetFileType (hFile=0x224) returned 0x1 [0034.564] GetFileSize (in: hFile=0x224, lpFileSizeHigh=0x31e790 | out: lpFileSizeHigh=0x31e790*=0x0) returned 0x3c5 [0034.564] ReadFile (in: hFile=0x224, lpBuffer=0x26eef70, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x31e73c, lpOverlapped=0x0 | out: lpBuffer=0x26eef70*, lpNumberOfBytesRead=0x31e73c*=0x3c5, lpOverlapped=0x0) returned 1 [0034.579] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Colors\\Apothecary.xml", nBufferLength=0x105, lpBuffer=0x31e180, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Colors\\Apothecary.xml", lpFilePart=0x0) returned 0x50 [0034.579] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e674) returned 1 [0034.579] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Colors\\Apothecary.xml" (normalized: "c:\\program files\\microsoft office\\document themes 14\\theme colors\\apothecary.xml"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x224 [0034.581] GetFileType (hFile=0x224) returned 0x1 [0034.581] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e670) returned 1 [0034.581] GetFileType (hFile=0x224) returned 0x1 [0034.582] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Colors\\Apothecary.xml", nBufferLength=0x105, lpBuffer=0x31e2b4, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Colors\\Apothecary.xml", lpFilePart=0x0) returned 0x50 [0034.582] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Colors\\Apothecary.xml", nBufferLength=0x105, lpBuffer=0x31e2b4, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Colors\\Apothecary.xml", lpFilePart=0x0) returned 0x50 [0034.582] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e714) returned 1 [0034.582] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Colors\\Apothecary.xml" (normalized: "c:\\program files\\microsoft office\\document themes 14\\theme colors\\apothecary.xml"), fInfoLevelId=0x0, lpFileInformation=0x31e790 | out: lpFileInformation=0x31e790*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe09100, ftCreationTime.dwHighDateTime=0x1cac1e1, ftLastAccessTime.dwLowDateTime=0x603a86d0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xf80fec00, ftLastWriteTime.dwHighDateTime=0x1d6eb7e, nFileSizeHigh=0x0, nFileSizeLow=0x3d0)) returned 1 [0034.582] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e710) returned 1 [0034.582] MoveFileW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Colors\\Apothecary.xml" (normalized: "c:\\program files\\microsoft office\\document themes 14\\theme colors\\apothecary.xml"), lpNewFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Colors\\Apothecary.xml" (normalized: "c:\\program files\\microsoft office\\document themes 14\\theme colors\\apothecary.xml")) returned 1 [0034.583] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Colors\\Aspect.xml", nBufferLength=0x105, lpBuffer=0x31e194, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Colors\\Aspect.xml", lpFilePart=0x0) returned 0x4c [0034.583] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e688) returned 1 [0034.583] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Colors\\Aspect.xml" (normalized: "c:\\program files\\microsoft office\\document themes 14\\theme colors\\aspect.xml"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x224 [0034.583] GetFileType (hFile=0x224) returned 0x1 [0034.583] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e684) returned 1 [0034.583] GetFileType (hFile=0x224) returned 0x1 [0034.583] GetFileSize (in: hFile=0x224, lpFileSizeHigh=0x31e790 | out: lpFileSizeHigh=0x31e790*=0x0) returned 0x3c1 [0034.583] ReadFile (in: hFile=0x224, lpBuffer=0x273f830, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x31e73c, lpOverlapped=0x0 | out: lpBuffer=0x273f830*, lpNumberOfBytesRead=0x31e73c*=0x3c1, lpOverlapped=0x0) returned 1 [0034.598] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Colors\\Aspect.xml", nBufferLength=0x105, lpBuffer=0x31e180, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Colors\\Aspect.xml", lpFilePart=0x0) returned 0x4c [0034.598] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e674) returned 1 [0034.599] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Colors\\Aspect.xml" (normalized: "c:\\program files\\microsoft office\\document themes 14\\theme colors\\aspect.xml"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x224 [0034.599] GetFileType (hFile=0x224) returned 0x1 [0034.599] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e670) returned 1 [0034.599] GetFileType (hFile=0x224) returned 0x1 [0034.599] WriteFile (in: hFile=0x224, lpBuffer=0x278ea68*, nNumberOfBytesToWrite=0x3d0, lpNumberOfBytesWritten=0x31e704, lpOverlapped=0x0 | out: lpBuffer=0x278ea68*, lpNumberOfBytesWritten=0x31e704*=0x3d0, lpOverlapped=0x0) returned 1 [0034.600] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Colors\\Aspect.xml", nBufferLength=0x105, lpBuffer=0x31e2b4, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Colors\\Aspect.xml", lpFilePart=0x0) returned 0x4c [0034.600] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Colors\\Aspect.xml", nBufferLength=0x105, lpBuffer=0x31e2b4, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Colors\\Aspect.xml", lpFilePart=0x0) returned 0x4c [0034.600] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e714) returned 1 [0034.600] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Colors\\Aspect.xml" (normalized: "c:\\program files\\microsoft office\\document themes 14\\theme colors\\aspect.xml"), fInfoLevelId=0x0, lpFileInformation=0x31e790 | out: lpFileInformation=0x31e790*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xec9c9400, ftCreationTime.dwHighDateTime=0x1cac1e0, ftLastAccessTime.dwLowDateTime=0x603ce830, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xf8124d60, ftLastWriteTime.dwHighDateTime=0x1d6eb7e, nFileSizeHigh=0x0, nFileSizeLow=0x3d0)) returned 1 [0034.600] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e710) returned 1 [0034.600] MoveFileW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Colors\\Aspect.xml" (normalized: "c:\\program files\\microsoft office\\document themes 14\\theme colors\\aspect.xml"), lpNewFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Colors\\Aspect.xml" (normalized: "c:\\program files\\microsoft office\\document themes 14\\theme colors\\aspect.xml")) returned 1 [0034.609] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Colors\\Austin.xml", nBufferLength=0x105, lpBuffer=0x31e194, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Colors\\Austin.xml", lpFilePart=0x0) returned 0x4c [0034.609] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e688) returned 1 [0034.609] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Colors\\Austin.xml" (normalized: "c:\\program files\\microsoft office\\document themes 14\\theme colors\\austin.xml"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x224 [0034.610] GetFileType (hFile=0x224) returned 0x1 [0034.610] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e684) returned 1 [0034.610] GetFileType (hFile=0x224) returned 0x1 [0034.610] GetFileSize (in: hFile=0x224, lpFileSizeHigh=0x31e790 | out: lpFileSizeHigh=0x31e790*=0x0) returned 0x3c1 [0034.610] ReadFile (in: hFile=0x224, lpBuffer=0x27900d4, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x31e73c, lpOverlapped=0x0 | out: lpBuffer=0x27900d4*, lpNumberOfBytesRead=0x31e73c*=0x3c1, lpOverlapped=0x0) returned 1 [0034.625] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Colors\\Austin.xml", nBufferLength=0x105, lpBuffer=0x31e180, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Colors\\Austin.xml", lpFilePart=0x0) returned 0x4c [0034.625] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e674) returned 1 [0034.625] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Colors\\Austin.xml" (normalized: "c:\\program files\\microsoft office\\document themes 14\\theme colors\\austin.xml"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x224 [0034.626] GetFileType (hFile=0x224) returned 0x1 [0034.626] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e670) returned 1 [0034.626] GetFileType (hFile=0x224) returned 0x1 [0034.626] WriteFile (in: hFile=0x224, lpBuffer=0x27df30c*, nNumberOfBytesToWrite=0x3d0, lpNumberOfBytesWritten=0x31e704, lpOverlapped=0x0 | out: lpBuffer=0x27df30c*, lpNumberOfBytesWritten=0x31e704*=0x3d0, lpOverlapped=0x0) returned 1 [0034.627] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Colors\\Austin.xml", nBufferLength=0x105, lpBuffer=0x31e2b4, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Colors\\Austin.xml", lpFilePart=0x0) returned 0x4c [0034.627] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Colors\\Austin.xml", nBufferLength=0x105, lpBuffer=0x31e2b4, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Colors\\Austin.xml", lpFilePart=0x0) returned 0x4c [0034.627] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e714) returned 1 [0034.627] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Colors\\Austin.xml" (normalized: "c:\\program files\\microsoft office\\document themes 14\\theme colors\\austin.xml"), fInfoLevelId=0x0, lpFileInformation=0x31e790 | out: lpFileInformation=0x31e790*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x211be00, ftCreationTime.dwHighDateTime=0x1cac1e1, ftLastAccessTime.dwLowDateTime=0x51c9cf70, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xf8171020, ftLastWriteTime.dwHighDateTime=0x1d6eb7e, nFileSizeHigh=0x0, nFileSizeLow=0x3d0)) returned 1 [0034.627] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e710) returned 1 [0034.627] MoveFileW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Colors\\Austin.xml" (normalized: "c:\\program files\\microsoft office\\document themes 14\\theme colors\\austin.xml"), lpNewFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Colors\\Austin.xml" (normalized: "c:\\program files\\microsoft office\\document themes 14\\theme colors\\austin.xml")) returned 1 [0034.628] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Colors\\Black Tie.xml", nBufferLength=0x105, lpBuffer=0x31e194, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Colors\\Black Tie.xml", lpFilePart=0x0) returned 0x4f [0034.628] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e688) returned 1 [0034.629] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Colors\\Black Tie.xml" (normalized: "c:\\program files\\microsoft office\\document themes 14\\theme colors\\black tie.xml"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x224 [0034.629] GetFileType (hFile=0x224) returned 0x1 [0034.629] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e684) returned 1 [0034.629] GetFileType (hFile=0x224) returned 0x1 [0034.629] GetFileSize (in: hFile=0x224, lpFileSizeHigh=0x31e790 | out: lpFileSizeHigh=0x31e790*=0x0) returned 0x39f [0034.629] ReadFile (in: hFile=0x224, lpBuffer=0x27e095c, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x31e73c, lpOverlapped=0x0 | out: lpBuffer=0x27e095c*, lpNumberOfBytesRead=0x31e73c*=0x39f, lpOverlapped=0x0) returned 1 [0034.644] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Colors\\Black Tie.xml", nBufferLength=0x105, lpBuffer=0x31e180, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Colors\\Black Tie.xml", lpFilePart=0x0) returned 0x4f [0034.644] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e674) returned 1 [0034.644] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Colors\\Black Tie.xml" (normalized: "c:\\program files\\microsoft office\\document themes 14\\theme colors\\black tie.xml"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x224 [0034.645] GetFileType (hFile=0x224) returned 0x1 [0034.645] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e670) returned 1 [0034.645] GetFileType (hFile=0x224) returned 0x1 [0034.646] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Colors\\Black Tie.xml", nBufferLength=0x105, lpBuffer=0x31e2b4, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Colors\\Black Tie.xml", lpFilePart=0x0) returned 0x4f [0034.646] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Colors\\Black Tie.xml", nBufferLength=0x105, lpBuffer=0x31e2b4, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Colors\\Black Tie.xml", lpFilePart=0x0) returned 0x4f [0034.646] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Colors\\Black Tie.xml" (normalized: "c:\\program files\\microsoft office\\document themes 14\\theme colors\\black tie.xml"), fInfoLevelId=0x0, lpFileInformation=0x31e790 | out: lpFileInformation=0x31e790*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf2ead00, ftCreationTime.dwHighDateTime=0x1cac1e1, ftLastAccessTime.dwLowDateTime=0x603ce830, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xf8197180, ftLastWriteTime.dwHighDateTime=0x1d6eb7e, nFileSizeHigh=0x0, nFileSizeLow=0x3a0)) returned 1 [0034.646] MoveFileW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Colors\\Black Tie.xml" (normalized: "c:\\program files\\microsoft office\\document themes 14\\theme colors\\black tie.xml"), lpNewFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Colors\\Black Tie.xml" (normalized: "c:\\program files\\microsoft office\\document themes 14\\theme colors\\black tie.xml")) returned 1 [0034.646] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Colors\\Civic.xml", nBufferLength=0x105, lpBuffer=0x31e194, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Colors\\Civic.xml", lpFilePart=0x0) returned 0x4b [0034.646] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Colors\\Civic.xml" (normalized: "c:\\program files\\microsoft office\\document themes 14\\theme colors\\civic.xml"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x224 [0034.646] GetFileType (hFile=0x224) returned 0x1 [0034.647] GetFileType (hFile=0x224) returned 0x1 [0034.647] GetFileSize (in: hFile=0x224, lpFileSizeHigh=0x31e790 | out: lpFileSizeHigh=0x31e790*=0x0) returned 0x3c0 [0034.647] ReadFile (in: hFile=0x224, lpBuffer=0x2831108, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x31e73c, lpOverlapped=0x0 | out: lpBuffer=0x2831108*, lpNumberOfBytesRead=0x31e73c*=0x3c0, lpOverlapped=0x0) returned 1 [0034.665] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Colors\\Civic.xml", nBufferLength=0x105, lpBuffer=0x31e180, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Colors\\Civic.xml", lpFilePart=0x0) returned 0x4b [0034.665] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Colors\\Civic.xml" (normalized: "c:\\program files\\microsoft office\\document themes 14\\theme colors\\civic.xml"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x224 [0034.666] GetFileType (hFile=0x224) returned 0x1 [0034.666] GetFileType (hFile=0x224) returned 0x1 [0034.667] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Colors\\Civic.xml", nBufferLength=0x105, lpBuffer=0x31e2b4, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Colors\\Civic.xml", lpFilePart=0x0) returned 0x4b [0034.667] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Colors\\Civic.xml", nBufferLength=0x105, lpBuffer=0x31e2b4, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Colors\\Civic.xml", lpFilePart=0x0) returned 0x4b [0034.667] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Colors\\Civic.xml" (normalized: "c:\\program files\\microsoft office\\document themes 14\\theme colors\\civic.xml"), fInfoLevelId=0x0, lpFileInformation=0x31e790 | out: lpFileInformation=0x31e790*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xedcdc100, ftCreationTime.dwHighDateTime=0x1cac1e0, ftLastAccessTime.dwLowDateTime=0x51c9cf70, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xf81e3440, ftLastWriteTime.dwHighDateTime=0x1d6eb7e, nFileSizeHigh=0x0, nFileSizeLow=0x3d0)) returned 1 [0034.667] MoveFileW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Colors\\Civic.xml" (normalized: "c:\\program files\\microsoft office\\document themes 14\\theme colors\\civic.xml"), lpNewFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Colors\\Civic.xml" (normalized: "c:\\program files\\microsoft office\\document themes 14\\theme colors\\civic.xml")) returned 1 [0034.667] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Colors\\Clarity.xml", nBufferLength=0x105, lpBuffer=0x31e194, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Colors\\Clarity.xml", lpFilePart=0x0) returned 0x4d [0034.667] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Colors\\Clarity.xml" (normalized: "c:\\program files\\microsoft office\\document themes 14\\theme colors\\clarity.xml"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x224 [0034.668] GetFileType (hFile=0x224) returned 0x1 [0034.668] GetFileType (hFile=0x224) returned 0x1 [0034.668] GetFileSize (in: hFile=0x224, lpFileSizeHigh=0x31e790 | out: lpFileSizeHigh=0x31e790*=0x0) returned 0x39e [0034.668] ReadFile (in: hFile=0x224, lpBuffer=0x2682954, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x31e73c, lpOverlapped=0x0 | out: lpBuffer=0x2682954*, lpNumberOfBytesRead=0x31e73c*=0x39e, lpOverlapped=0x0) returned 1 [0034.683] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Colors\\Clarity.xml", nBufferLength=0x105, lpBuffer=0x31e180, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Colors\\Clarity.xml", lpFilePart=0x0) returned 0x4d [0034.683] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Colors\\Clarity.xml" (normalized: "c:\\program files\\microsoft office\\document themes 14\\theme colors\\clarity.xml"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x224 [0034.684] GetFileType (hFile=0x224) returned 0x1 [0034.684] GetFileType (hFile=0x224) returned 0x1 [0034.684] WriteFile (in: hFile=0x224, lpBuffer=0x26d1bec*, nNumberOfBytesToWrite=0x3a0, lpNumberOfBytesWritten=0x31e704, lpOverlapped=0x0 | out: lpBuffer=0x26d1bec*, lpNumberOfBytesWritten=0x31e704*=0x3a0, lpOverlapped=0x0) returned 1 [0034.685] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Colors\\Clarity.xml", nBufferLength=0x105, lpBuffer=0x31e2b4, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Colors\\Clarity.xml", lpFilePart=0x0) returned 0x4d [0034.685] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Colors\\Clarity.xml", nBufferLength=0x105, lpBuffer=0x31e2b4, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Colors\\Clarity.xml", lpFilePart=0x0) returned 0x4d [0034.685] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Colors\\Clarity.xml" (normalized: "c:\\program files\\microsoft office\\document themes 14\\theme colors\\clarity.xml"), fInfoLevelId=0x0, lpFileInformation=0x31e790 | out: lpFileInformation=0x31e790*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x342eb00, ftCreationTime.dwHighDateTime=0x1cac1e1, ftLastAccessTime.dwLowDateTime=0x603ce830, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xf82095a0, ftLastWriteTime.dwHighDateTime=0x1d6eb7e, nFileSizeHigh=0x0, nFileSizeLow=0x3a0)) returned 1 [0034.685] MoveFileW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Colors\\Clarity.xml" (normalized: "c:\\program files\\microsoft office\\document themes 14\\theme colors\\clarity.xml"), lpNewFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Colors\\Clarity.xml" (normalized: "c:\\program files\\microsoft office\\document themes 14\\theme colors\\clarity.xml")) returned 1 [0034.686] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Colors\\Composite.xml", nBufferLength=0x105, lpBuffer=0x31e194, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Colors\\Composite.xml", lpFilePart=0x0) returned 0x4f [0034.686] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Colors\\Composite.xml" (normalized: "c:\\program files\\microsoft office\\document themes 14\\theme colors\\composite.xml"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x224 [0034.687] GetFileType (hFile=0x224) returned 0x1 [0034.687] GetFileType (hFile=0x224) returned 0x1 [0034.687] GetFileSize (in: hFile=0x224, lpFileSizeHigh=0x31e790 | out: lpFileSizeHigh=0x31e790*=0x0) returned 0x3c4 [0034.687] ReadFile (in: hFile=0x224, lpBuffer=0x26d3260, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x31e73c, lpOverlapped=0x0 | out: lpBuffer=0x26d3260*, lpNumberOfBytesRead=0x31e73c*=0x3c4, lpOverlapped=0x0) returned 1 [0034.702] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Colors\\Composite.xml", nBufferLength=0x105, lpBuffer=0x31e180, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Colors\\Composite.xml", lpFilePart=0x0) returned 0x4f [0034.702] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Colors\\Composite.xml" (normalized: "c:\\program files\\microsoft office\\document themes 14\\theme colors\\composite.xml"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x224 [0034.703] GetFileType (hFile=0x224) returned 0x1 [0034.703] GetFileType (hFile=0x224) returned 0x1 [0034.703] WriteFile (in: hFile=0x224, lpBuffer=0x272249c*, nNumberOfBytesToWrite=0x3d0, lpNumberOfBytesWritten=0x31e704, lpOverlapped=0x0 | out: lpBuffer=0x272249c*, lpNumberOfBytesWritten=0x31e704*=0x3d0, lpOverlapped=0x0) returned 1 [0034.704] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Colors\\Composite.xml", nBufferLength=0x105, lpBuffer=0x31e2b4, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Colors\\Composite.xml", lpFilePart=0x0) returned 0x4f [0034.704] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Colors\\Composite.xml", nBufferLength=0x105, lpBuffer=0x31e2b4, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Colors\\Composite.xml", lpFilePart=0x0) returned 0x4f [0034.704] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Colors\\Composite.xml" (normalized: "c:\\program files\\microsoft office\\document themes 14\\theme colors\\composite.xml"), fInfoLevelId=0x0, lpFileInformation=0x31e790 | out: lpFileInformation=0x31e790*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x11910700, ftCreationTime.dwHighDateTime=0x1cac1e1, ftLastAccessTime.dwLowDateTime=0x603ce830, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xf822f700, ftLastWriteTime.dwHighDateTime=0x1d6eb7e, nFileSizeHigh=0x0, nFileSizeLow=0x3d0)) returned 1 [0034.704] MoveFileW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Colors\\Composite.xml" (normalized: "c:\\program files\\microsoft office\\document themes 14\\theme colors\\composite.xml"), lpNewFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Colors\\Composite.xml" (normalized: "c:\\program files\\microsoft office\\document themes 14\\theme colors\\composite.xml")) returned 1 [0034.705] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Colors\\Concourse.xml", nBufferLength=0x105, lpBuffer=0x31e194, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Colors\\Concourse.xml", lpFilePart=0x0) returned 0x4f [0034.705] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Colors\\Concourse.xml" (normalized: "c:\\program files\\microsoft office\\document themes 14\\theme colors\\concourse.xml"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x224 [0034.705] GetFileType (hFile=0x224) returned 0x1 [0034.705] GetFileType (hFile=0x224) returned 0x1 [0034.705] GetFileSize (in: hFile=0x224, lpFileSizeHigh=0x31e790 | out: lpFileSizeHigh=0x31e790*=0x0) returned 0x3c4 [0034.705] ReadFile (in: hFile=0x224, lpBuffer=0x2723b18, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x31e73c, lpOverlapped=0x0 | out: lpBuffer=0x2723b18*, lpNumberOfBytesRead=0x31e73c*=0x3c4, lpOverlapped=0x0) returned 1 [0034.721] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Colors\\Concourse.xml", nBufferLength=0x105, lpBuffer=0x31e180, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Colors\\Concourse.xml", lpFilePart=0x0) returned 0x4f [0034.721] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Colors\\Concourse.xml" (normalized: "c:\\program files\\microsoft office\\document themes 14\\theme colors\\concourse.xml"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x224 [0034.721] GetFileType (hFile=0x224) returned 0x1 [0034.721] GetFileType (hFile=0x224) returned 0x1 [0034.722] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Colors\\Concourse.xml", nBufferLength=0x105, lpBuffer=0x31e2b4, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Colors\\Concourse.xml", lpFilePart=0x0) returned 0x4f [0034.722] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Colors\\Concourse.xml", nBufferLength=0x105, lpBuffer=0x31e2b4, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Colors\\Concourse.xml", lpFilePart=0x0) returned 0x4f [0034.722] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Colors\\Concourse.xml" (normalized: "c:\\program files\\microsoft office\\document themes 14\\theme colors\\concourse.xml"), fInfoLevelId=0x0, lpFileInformation=0x31e790 | out: lpFileInformation=0x31e790*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xeefeee00, ftCreationTime.dwHighDateTime=0x1cac1e0, ftLastAccessTime.dwLowDateTime=0x51c9cf70, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xf8255860, ftLastWriteTime.dwHighDateTime=0x1d6eb7e, nFileSizeHigh=0x0, nFileSizeLow=0x3d0)) returned 1 [0034.722] MoveFileW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Colors\\Concourse.xml" (normalized: "c:\\program files\\microsoft office\\document themes 14\\theme colors\\concourse.xml"), lpNewFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Colors\\Concourse.xml" (normalized: "c:\\program files\\microsoft office\\document themes 14\\theme colors\\concourse.xml")) returned 1 [0034.723] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Colors\\Couture.xml", nBufferLength=0x105, lpBuffer=0x31e194, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Colors\\Couture.xml", lpFilePart=0x0) returned 0x4d [0034.723] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Colors\\Couture.xml" (normalized: "c:\\program files\\microsoft office\\document themes 14\\theme colors\\couture.xml"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x224 [0034.724] GetFileType (hFile=0x224) returned 0x1 [0034.724] GetFileType (hFile=0x224) returned 0x1 [0034.724] GetFileSize (in: hFile=0x224, lpFileSizeHigh=0x31e790 | out: lpFileSizeHigh=0x31e790*=0x0) returned 0x3c2 [0034.724] ReadFile (in: hFile=0x224, lpBuffer=0x27743c8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x31e73c, lpOverlapped=0x0 | out: lpBuffer=0x27743c8*, lpNumberOfBytesRead=0x31e73c*=0x3c2, lpOverlapped=0x0) returned 1 [0034.739] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Colors\\Couture.xml", nBufferLength=0x105, lpBuffer=0x31e180, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Colors\\Couture.xml", lpFilePart=0x0) returned 0x4d [0034.739] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Colors\\Couture.xml" (normalized: "c:\\program files\\microsoft office\\document themes 14\\theme colors\\couture.xml"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x224 [0034.740] GetFileType (hFile=0x224) returned 0x1 [0034.740] GetFileType (hFile=0x224) returned 0x1 [0034.740] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Colors\\Couture.xml", nBufferLength=0x105, lpBuffer=0x31e2b4, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Colors\\Couture.xml", lpFilePart=0x0) returned 0x4d [0034.740] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Colors\\Couture.xml", nBufferLength=0x105, lpBuffer=0x31e2b4, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Colors\\Couture.xml", lpFilePart=0x0) returned 0x4d [0034.740] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Colors\\Couture.xml" (normalized: "c:\\program files\\microsoft office\\document themes 14\\theme colors\\couture.xml"), fInfoLevelId=0x0, lpFileInformation=0x31e790 | out: lpFileInformation=0x31e790*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x12c23400, ftCreationTime.dwHighDateTime=0x1cac1e1, ftLastAccessTime.dwLowDateTime=0x51c9cf70, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xf827b9c0, ftLastWriteTime.dwHighDateTime=0x1d6eb7e, nFileSizeHigh=0x0, nFileSizeLow=0x3d0)) returned 1 [0034.741] MoveFileW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Colors\\Couture.xml" (normalized: "c:\\program files\\microsoft office\\document themes 14\\theme colors\\couture.xml"), lpNewFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Colors\\Couture.xml" (normalized: "c:\\program files\\microsoft office\\document themes 14\\theme colors\\couture.xml")) returned 1 [0034.741] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Colors\\Elemental.xml", nBufferLength=0x105, lpBuffer=0x31e194, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Colors\\Elemental.xml", lpFilePart=0x0) returned 0x4f [0034.741] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Colors\\Elemental.xml" (normalized: "c:\\program files\\microsoft office\\document themes 14\\theme colors\\elemental.xml"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x224 [0034.741] GetFileType (hFile=0x224) returned 0x1 [0034.741] GetFileType (hFile=0x224) returned 0x1 [0034.742] GetFileSize (in: hFile=0x224, lpFileSizeHigh=0x31e790 | out: lpFileSizeHigh=0x31e790*=0x0) returned 0x3c4 [0034.742] ReadFile (in: hFile=0x224, lpBuffer=0x27c4c74, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x31e73c, lpOverlapped=0x0 | out: lpBuffer=0x27c4c74*, lpNumberOfBytesRead=0x31e73c*=0x3c4, lpOverlapped=0x0) returned 1 [0034.756] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Colors\\Elemental.xml", nBufferLength=0x105, lpBuffer=0x31e180, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Colors\\Elemental.xml", lpFilePart=0x0) returned 0x4f [0034.756] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Colors\\Elemental.xml" (normalized: "c:\\program files\\microsoft office\\document themes 14\\theme colors\\elemental.xml"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x224 [0034.757] GetFileType (hFile=0x224) returned 0x1 [0034.757] GetFileType (hFile=0x224) returned 0x1 [0034.757] WriteFile (in: hFile=0x224, lpBuffer=0x2813eb0*, nNumberOfBytesToWrite=0x3d0, lpNumberOfBytesWritten=0x31e704, lpOverlapped=0x0 | out: lpBuffer=0x2813eb0*, lpNumberOfBytesWritten=0x31e704*=0x3d0, lpOverlapped=0x0) returned 1 [0034.758] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Colors\\Elemental.xml", nBufferLength=0x105, lpBuffer=0x31e2b4, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Colors\\Elemental.xml", lpFilePart=0x0) returned 0x4f [0034.758] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Colors\\Elemental.xml", nBufferLength=0x105, lpBuffer=0x31e2b4, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Colors\\Elemental.xml", lpFilePart=0x0) returned 0x4f [0034.758] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Colors\\Elemental.xml" (normalized: "c:\\program files\\microsoft office\\document themes 14\\theme colors\\elemental.xml"), fInfoLevelId=0x0, lpFileInformation=0x31e790 | out: lpFileInformation=0x31e790*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x15248e00, ftCreationTime.dwHighDateTime=0x1cac1e1, ftLastAccessTime.dwLowDateTime=0x603ce830, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xf82c7c80, ftLastWriteTime.dwHighDateTime=0x1d6eb7e, nFileSizeHigh=0x0, nFileSizeLow=0x3d0)) returned 1 [0034.758] MoveFileW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Colors\\Elemental.xml" (normalized: "c:\\program files\\microsoft office\\document themes 14\\theme colors\\elemental.xml"), lpNewFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Colors\\Elemental.xml" (normalized: "c:\\program files\\microsoft office\\document themes 14\\theme colors\\elemental.xml")) returned 1 [0034.759] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Colors\\Equity.xml", nBufferLength=0x105, lpBuffer=0x31e194, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Colors\\Equity.xml", lpFilePart=0x0) returned 0x4c [0034.760] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Colors\\Equity.xml" (normalized: "c:\\program files\\microsoft office\\document themes 14\\theme colors\\equity.xml"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x224 [0034.760] GetFileType (hFile=0x224) returned 0x1 [0034.760] GetFileType (hFile=0x224) returned 0x1 [0034.760] GetFileSize (in: hFile=0x224, lpFileSizeHigh=0x31e790 | out: lpFileSizeHigh=0x31e790*=0x0) returned 0x3c1 [0034.760] ReadFile (in: hFile=0x224, lpBuffer=0x2815524, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x31e73c, lpOverlapped=0x0 | out: lpBuffer=0x2815524*, lpNumberOfBytesRead=0x31e73c*=0x3c1, lpOverlapped=0x0) returned 1 [0034.779] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Colors\\Equity.xml", nBufferLength=0x105, lpBuffer=0x31e180, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Colors\\Equity.xml", lpFilePart=0x0) returned 0x4c [0034.779] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Colors\\Equity.xml" (normalized: "c:\\program files\\microsoft office\\document themes 14\\theme colors\\equity.xml"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x224 [0034.780] GetFileType (hFile=0x224) returned 0x1 [0034.780] GetFileType (hFile=0x224) returned 0x1 [0034.780] WriteFile (in: hFile=0x224, lpBuffer=0x2664750*, nNumberOfBytesToWrite=0x3d0, lpNumberOfBytesWritten=0x31e704, lpOverlapped=0x0 | out: lpBuffer=0x2664750*, lpNumberOfBytesWritten=0x31e704*=0x3d0, lpOverlapped=0x0) returned 1 [0034.781] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Colors\\Equity.xml", nBufferLength=0x105, lpBuffer=0x31e2b4, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Colors\\Equity.xml", lpFilePart=0x0) returned 0x4c [0034.781] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Colors\\Equity.xml", nBufferLength=0x105, lpBuffer=0x31e2b4, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Colors\\Equity.xml", lpFilePart=0x0) returned 0x4c [0034.781] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Colors\\Equity.xml" (normalized: "c:\\program files\\microsoft office\\document themes 14\\theme colors\\equity.xml"), fInfoLevelId=0x0, lpFileInformation=0x31e790 | out: lpFileInformation=0x31e790*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf0301b00, ftCreationTime.dwHighDateTime=0x1cac1e0, ftLastAccessTime.dwLowDateTime=0x51c9cf70, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xf82edde0, ftLastWriteTime.dwHighDateTime=0x1d6eb7e, nFileSizeHigh=0x0, nFileSizeLow=0x3d0)) returned 1 [0034.781] MoveFileW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Colors\\Equity.xml" (normalized: "c:\\program files\\microsoft office\\document themes 14\\theme colors\\equity.xml"), lpNewFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Colors\\Equity.xml" (normalized: "c:\\program files\\microsoft office\\document themes 14\\theme colors\\equity.xml")) returned 1 [0034.782] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Colors\\Essential.xml", nBufferLength=0x105, lpBuffer=0x31e194, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Colors\\Essential.xml", lpFilePart=0x0) returned 0x4f [0034.782] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Colors\\Essential.xml" (normalized: "c:\\program files\\microsoft office\\document themes 14\\theme colors\\essential.xml"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x224 [0034.782] GetFileType (hFile=0x224) returned 0x1 [0034.783] GetFileType (hFile=0x224) returned 0x1 [0034.783] GetFileSize (in: hFile=0x224, lpFileSizeHigh=0x31e790 | out: lpFileSizeHigh=0x31e790*=0x0) returned 0x3a0 [0034.783] ReadFile (in: hFile=0x224, lpBuffer=0x2665da0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x31e73c, lpOverlapped=0x0 | out: lpBuffer=0x2665da0*, lpNumberOfBytesRead=0x31e73c*=0x3a0, lpOverlapped=0x0) returned 1 [0034.797] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Colors\\Essential.xml", nBufferLength=0x105, lpBuffer=0x31e180, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Colors\\Essential.xml", lpFilePart=0x0) returned 0x4f [0034.797] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Colors\\Essential.xml" (normalized: "c:\\program files\\microsoft office\\document themes 14\\theme colors\\essential.xml"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x224 [0034.798] GetFileType (hFile=0x224) returned 0x1 [0034.798] GetFileType (hFile=0x224) returned 0x1 [0034.799] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Colors\\Essential.xml", nBufferLength=0x105, lpBuffer=0x31e2b4, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Colors\\Essential.xml", lpFilePart=0x0) returned 0x4f [0034.799] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Colors\\Essential.xml", nBufferLength=0x105, lpBuffer=0x31e2b4, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Colors\\Essential.xml", lpFilePart=0x0) returned 0x4f [0034.799] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Colors\\Essential.xml" (normalized: "c:\\program files\\microsoft office\\document themes 14\\theme colors\\essential.xml"), fInfoLevelId=0x0, lpFileInformation=0x31e790 | out: lpFileInformation=0x31e790*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4741800, ftCreationTime.dwHighDateTime=0x1cac1e1, ftLastAccessTime.dwLowDateTime=0x603ce830, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xf8313f40, ftLastWriteTime.dwHighDateTime=0x1d6eb7e, nFileSizeHigh=0x0, nFileSizeLow=0x3b0)) returned 1 [0034.799] MoveFileW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Colors\\Essential.xml" (normalized: "c:\\program files\\microsoft office\\document themes 14\\theme colors\\essential.xml"), lpNewFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Colors\\Essential.xml" (normalized: "c:\\program files\\microsoft office\\document themes 14\\theme colors\\essential.xml")) returned 1 [0034.800] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Colors\\Executive.xml", nBufferLength=0x105, lpBuffer=0x31e194, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Colors\\Executive.xml", lpFilePart=0x0) returned 0x4f [0034.800] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Colors\\Executive.xml" (normalized: "c:\\program files\\microsoft office\\document themes 14\\theme colors\\executive.xml"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x224 [0034.800] GetFileType (hFile=0x224) returned 0x1 [0034.800] GetFileType (hFile=0x224) returned 0x1 [0034.800] GetFileSize (in: hFile=0x224, lpFileSizeHigh=0x31e790 | out: lpFileSizeHigh=0x31e790*=0x0) returned 0x3c4 [0034.800] ReadFile (in: hFile=0x224, lpBuffer=0x26b6718, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x31e73c, lpOverlapped=0x0 | out: lpBuffer=0x26b6718*, lpNumberOfBytesRead=0x31e73c*=0x3c4, lpOverlapped=0x0) returned 1 [0034.815] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Colors\\Executive.xml", nBufferLength=0x105, lpBuffer=0x31e180, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Colors\\Executive.xml", lpFilePart=0x0) returned 0x4f [0034.816] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Colors\\Executive.xml" (normalized: "c:\\program files\\microsoft office\\document themes 14\\theme colors\\executive.xml"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x224 [0034.816] GetFileType (hFile=0x224) returned 0x1 [0034.816] GetFileType (hFile=0x224) returned 0x1 [0034.817] WriteFile (in: hFile=0x224, lpBuffer=0x2705954*, nNumberOfBytesToWrite=0x3d0, lpNumberOfBytesWritten=0x31e704, lpOverlapped=0x0 | out: lpBuffer=0x2705954*, lpNumberOfBytesWritten=0x31e704*=0x3d0, lpOverlapped=0x0) returned 1 [0034.817] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Colors\\Executive.xml", nBufferLength=0x105, lpBuffer=0x31e2b4, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Colors\\Executive.xml", lpFilePart=0x0) returned 0x4f [0034.817] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Colors\\Executive.xml", nBufferLength=0x105, lpBuffer=0x31e2b4, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Colors\\Executive.xml", lpFilePart=0x0) returned 0x4f [0034.817] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Colors\\Executive.xml" (normalized: "c:\\program files\\microsoft office\\document themes 14\\theme colors\\executive.xml"), fInfoLevelId=0x0, lpFileInformation=0x31e790 | out: lpFileInformation=0x31e790*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1655bb00, ftCreationTime.dwHighDateTime=0x1cac1e1, ftLastAccessTime.dwLowDateTime=0x51c9cf70, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xf833a0a0, ftLastWriteTime.dwHighDateTime=0x1d6eb7e, nFileSizeHigh=0x0, nFileSizeLow=0x3d0)) returned 1 [0034.818] MoveFileW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Colors\\Executive.xml" (normalized: "c:\\program files\\microsoft office\\document themes 14\\theme colors\\executive.xml"), lpNewFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Colors\\Executive.xml" (normalized: "c:\\program files\\microsoft office\\document themes 14\\theme colors\\executive.xml")) returned 1 [0034.819] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Colors\\Flow.xml", nBufferLength=0x105, lpBuffer=0x31e194, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Colors\\Flow.xml", lpFilePart=0x0) returned 0x4a [0034.819] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Colors\\Flow.xml" (normalized: "c:\\program files\\microsoft office\\document themes 14\\theme colors\\flow.xml"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x224 [0034.819] GetFileType (hFile=0x224) returned 0x1 [0034.819] GetFileType (hFile=0x224) returned 0x1 [0034.819] GetFileSize (in: hFile=0x224, lpFileSizeHigh=0x31e790 | out: lpFileSizeHigh=0x31e790*=0x0) returned 0x3bf [0034.819] ReadFile (in: hFile=0x224, lpBuffer=0x2706fbc, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x31e73c, lpOverlapped=0x0 | out: lpBuffer=0x2706fbc*, lpNumberOfBytesRead=0x31e73c*=0x3bf, lpOverlapped=0x0) returned 1 [0034.834] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Colors\\Flow.xml", nBufferLength=0x105, lpBuffer=0x31e180, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Colors\\Flow.xml", lpFilePart=0x0) returned 0x4a [0034.834] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Colors\\Flow.xml" (normalized: "c:\\program files\\microsoft office\\document themes 14\\theme colors\\flow.xml"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x224 [0034.942] GetFileType (hFile=0x224) returned 0x1 [0034.942] GetFileType (hFile=0x224) returned 0x1 [0034.942] WriteFile (in: hFile=0x224, lpBuffer=0x2756190*, nNumberOfBytesToWrite=0x3c0, lpNumberOfBytesWritten=0x31e704, lpOverlapped=0x0 | out: lpBuffer=0x2756190*, lpNumberOfBytesWritten=0x31e704*=0x3c0, lpOverlapped=0x0) returned 1 [0034.943] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Colors\\Flow.xml", nBufferLength=0x105, lpBuffer=0x31e2b4, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Colors\\Flow.xml", lpFilePart=0x0) returned 0x4a [0034.943] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Colors\\Flow.xml", nBufferLength=0x105, lpBuffer=0x31e2b4, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Colors\\Flow.xml", lpFilePart=0x0) returned 0x4a [0034.943] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Colors\\Flow.xml" (normalized: "c:\\program files\\microsoft office\\document themes 14\\theme colors\\flow.xml"), fInfoLevelId=0x0, lpFileInformation=0x31e790 | out: lpFileInformation=0x31e790*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf2927500, ftCreationTime.dwHighDateTime=0x1cac1e0, ftLastAccessTime.dwLowDateTime=0x603ce830, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xf846aba0, ftLastWriteTime.dwHighDateTime=0x1d6eb7e, nFileSizeHigh=0x0, nFileSizeLow=0x3c0)) returned 1 [0034.943] MoveFileW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Colors\\Flow.xml" (normalized: "c:\\program files\\microsoft office\\document themes 14\\theme colors\\flow.xml"), lpNewFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Colors\\Flow.xml" (normalized: "c:\\program files\\microsoft office\\document themes 14\\theme colors\\flow.xml")) returned 1 [0034.944] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Colors\\Foundry.xml", nBufferLength=0x105, lpBuffer=0x31e194, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Colors\\Foundry.xml", lpFilePart=0x0) returned 0x4d [0034.944] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Colors\\Foundry.xml" (normalized: "c:\\program files\\microsoft office\\document themes 14\\theme colors\\foundry.xml"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x224 [0034.945] GetFileType (hFile=0x224) returned 0x1 [0034.945] GetFileType (hFile=0x224) returned 0x1 [0034.945] GetFileSize (in: hFile=0x224, lpFileSizeHigh=0x31e790 | out: lpFileSizeHigh=0x31e790*=0x0) returned 0x3c2 [0034.945] ReadFile (in: hFile=0x224, lpBuffer=0x27577f4, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x31e73c, lpOverlapped=0x0 | out: lpBuffer=0x27577f4*, lpNumberOfBytesRead=0x31e73c*=0x3c2, lpOverlapped=0x0) returned 1 [0034.960] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Colors\\Foundry.xml", nBufferLength=0x105, lpBuffer=0x31e180, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Colors\\Foundry.xml", lpFilePart=0x0) returned 0x4d [0034.960] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Colors\\Foundry.xml" (normalized: "c:\\program files\\microsoft office\\document themes 14\\theme colors\\foundry.xml"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x224 [0034.961] GetFileType (hFile=0x224) returned 0x1 [0034.961] GetFileType (hFile=0x224) returned 0x1 [0034.962] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Colors\\Foundry.xml", nBufferLength=0x105, lpBuffer=0x31e2b4, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Colors\\Foundry.xml", lpFilePart=0x0) returned 0x4d [0034.962] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Colors\\Foundry.xml", nBufferLength=0x105, lpBuffer=0x31e2b4, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Colors\\Foundry.xml", lpFilePart=0x0) returned 0x4d [0034.962] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Colors\\Foundry.xml" (normalized: "c:\\program files\\microsoft office\\document themes 14\\theme colors\\foundry.xml"), fInfoLevelId=0x0, lpFileInformation=0x31e790 | out: lpFileInformation=0x31e790*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf1614800, ftCreationTime.dwHighDateTime=0x1cac1e0, ftLastAccessTime.dwLowDateTime=0x51c9cf70, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xf84b6e60, ftLastWriteTime.dwHighDateTime=0x1d6eb7e, nFileSizeHigh=0x0, nFileSizeLow=0x3d0)) returned 1 [0034.962] MoveFileW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Colors\\Foundry.xml" (normalized: "c:\\program files\\microsoft office\\document themes 14\\theme colors\\foundry.xml"), lpNewFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Colors\\Foundry.xml" (normalized: "c:\\program files\\microsoft office\\document themes 14\\theme colors\\foundry.xml")) returned 1 [0034.962] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Colors\\Grayscale.xml", nBufferLength=0x105, lpBuffer=0x31e194, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Colors\\Grayscale.xml", lpFilePart=0x0) returned 0x4f [0034.962] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Colors\\Grayscale.xml" (normalized: "c:\\program files\\microsoft office\\document themes 14\\theme colors\\grayscale.xml"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x224 [0034.964] GetFileType (hFile=0x224) returned 0x1 [0034.964] GetFileType (hFile=0x224) returned 0x1 [0034.964] GetFileSize (in: hFile=0x224, lpFileSizeHigh=0x31e790 | out: lpFileSizeHigh=0x31e790*=0x0) returned 0x3a0 [0034.964] ReadFile (in: hFile=0x224, lpBuffer=0x27a807c, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x31e73c, lpOverlapped=0x0 | out: lpBuffer=0x27a807c*, lpNumberOfBytesRead=0x31e73c*=0x3a0, lpOverlapped=0x0) returned 1 [0034.984] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Colors\\Grayscale.xml", nBufferLength=0x105, lpBuffer=0x31e180, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Colors\\Grayscale.xml", lpFilePart=0x0) returned 0x4f [0034.985] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Colors\\Grayscale.xml" (normalized: "c:\\program files\\microsoft office\\document themes 14\\theme colors\\grayscale.xml"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x224 [0034.985] GetFileType (hFile=0x224) returned 0x1 [0034.985] GetFileType (hFile=0x224) returned 0x1 [0034.986] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Colors\\Grayscale.xml", nBufferLength=0x105, lpBuffer=0x31e2b4, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Colors\\Grayscale.xml", lpFilePart=0x0) returned 0x4f [0034.986] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Colors\\Grayscale.xml", nBufferLength=0x105, lpBuffer=0x31e2b4, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Colors\\Grayscale.xml", lpFilePart=0x0) returned 0x4f [0034.986] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Colors\\Grayscale.xml" (normalized: "c:\\program files\\microsoft office\\document themes 14\\theme colors\\grayscale.xml"), fInfoLevelId=0x0, lpFileInformation=0x31e790 | out: lpFileInformation=0x31e790*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x99314000, ftCreationTime.dwHighDateTime=0x1c6ba8b, ftLastAccessTime.dwLowDateTime=0x603ce830, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xf84dcfc0, ftLastWriteTime.dwHighDateTime=0x1d6eb7e, nFileSizeHigh=0x0, nFileSizeLow=0x3b0)) returned 1 [0034.986] MoveFileW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Colors\\Grayscale.xml" (normalized: "c:\\program files\\microsoft office\\document themes 14\\theme colors\\grayscale.xml"), lpNewFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Colors\\Grayscale.xml" (normalized: "c:\\program files\\microsoft office\\document themes 14\\theme colors\\grayscale.xml")) returned 1 [0034.987] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Colors\\Grid.xml", nBufferLength=0x105, lpBuffer=0x31e194, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Colors\\Grid.xml", lpFilePart=0x0) returned 0x4a [0034.987] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Colors\\Grid.xml" (normalized: "c:\\program files\\microsoft office\\document themes 14\\theme colors\\grid.xml"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x224 [0034.987] GetFileType (hFile=0x224) returned 0x1 [0034.987] GetFileType (hFile=0x224) returned 0x1 [0034.987] GetFileSize (in: hFile=0x224, lpFileSizeHigh=0x31e790 | out: lpFileSizeHigh=0x31e790*=0x0) returned 0x3bf [0034.987] ReadFile (in: hFile=0x224, lpBuffer=0x27f8884, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x31e73c, lpOverlapped=0x0 | out: lpBuffer=0x27f8884*, lpNumberOfBytesRead=0x31e73c*=0x3bf, lpOverlapped=0x0) returned 1 [0035.003] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Colors\\Grid.xml", nBufferLength=0x105, lpBuffer=0x31e180, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Colors\\Grid.xml", lpFilePart=0x0) returned 0x4a [0035.003] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Colors\\Grid.xml" (normalized: "c:\\program files\\microsoft office\\document themes 14\\theme colors\\grid.xml"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x224 [0035.004] GetFileType (hFile=0x224) returned 0x1 [0035.004] GetFileType (hFile=0x224) returned 0x1 [0035.004] WriteFile (in: hFile=0x224, lpBuffer=0x2847a58*, nNumberOfBytesToWrite=0x3c0, lpNumberOfBytesWritten=0x31e704, lpOverlapped=0x0 | out: lpBuffer=0x2847a58*, lpNumberOfBytesWritten=0x31e704*=0x3c0, lpOverlapped=0x0) returned 1 [0035.005] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Colors\\Grid.xml", nBufferLength=0x105, lpBuffer=0x31e2b4, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Colors\\Grid.xml", lpFilePart=0x0) returned 0x4a [0035.005] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Colors\\Grid.xml", nBufferLength=0x105, lpBuffer=0x31e2b4, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Colors\\Grid.xml", lpFilePart=0x0) returned 0x4a [0035.005] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Colors\\Grid.xml" (normalized: "c:\\program files\\microsoft office\\document themes 14\\theme colors\\grid.xml"), fInfoLevelId=0x0, lpFileInformation=0x31e790 | out: lpFileInformation=0x31e790*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5a54500, ftCreationTime.dwHighDateTime=0x1cac1e1, ftLastAccessTime.dwLowDateTime=0x603ce830, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xf8503120, ftLastWriteTime.dwHighDateTime=0x1d6eb7e, nFileSizeHigh=0x0, nFileSizeLow=0x3c0)) returned 1 [0035.005] MoveFileW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Colors\\Grid.xml" (normalized: "c:\\program files\\microsoft office\\document themes 14\\theme colors\\grid.xml"), lpNewFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Colors\\Grid.xml" (normalized: "c:\\program files\\microsoft office\\document themes 14\\theme colors\\grid.xml")) returned 1 [0035.006] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Colors\\Hardcover.xml", nBufferLength=0x105, lpBuffer=0x31e194, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Colors\\Hardcover.xml", lpFilePart=0x0) returned 0x4f [0035.006] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Colors\\Hardcover.xml" (normalized: "c:\\program files\\microsoft office\\document themes 14\\theme colors\\hardcover.xml"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x224 [0035.006] GetFileType (hFile=0x224) returned 0x1 [0035.007] GetFileType (hFile=0x224) returned 0x1 [0035.007] GetFileSize (in: hFile=0x224, lpFileSizeHigh=0x31e790 | out: lpFileSizeHigh=0x31e790*=0x0) returned 0x3c4 [0035.007] ReadFile (in: hFile=0x224, lpBuffer=0x28490c4, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x31e73c, lpOverlapped=0x0 | out: lpBuffer=0x28490c4*, lpNumberOfBytesRead=0x31e73c*=0x3c4, lpOverlapped=0x0) returned 1 [0035.024] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Colors\\Hardcover.xml", nBufferLength=0x105, lpBuffer=0x31e180, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Colors\\Hardcover.xml", lpFilePart=0x0) returned 0x4f [0035.024] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Colors\\Hardcover.xml" (normalized: "c:\\program files\\microsoft office\\document themes 14\\theme colors\\hardcover.xml"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x224 [0035.025] GetFileType (hFile=0x224) returned 0x1 [0035.025] GetFileType (hFile=0x224) returned 0x1 [0035.026] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Colors\\Hardcover.xml", nBufferLength=0x105, lpBuffer=0x31e2b4, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Colors\\Hardcover.xml", lpFilePart=0x0) returned 0x4f [0035.026] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Colors\\Hardcover.xml", nBufferLength=0x105, lpBuffer=0x31e2b4, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Colors\\Hardcover.xml", lpFilePart=0x0) returned 0x4f [0035.026] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Colors\\Hardcover.xml" (normalized: "c:\\program files\\microsoft office\\document themes 14\\theme colors\\hardcover.xml"), fInfoLevelId=0x0, lpFileInformation=0x31e790 | out: lpFileInformation=0x31e790*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6d67200, ftCreationTime.dwHighDateTime=0x1cac1e1, ftLastAccessTime.dwLowDateTime=0x603ce830, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xf854f3e0, ftLastWriteTime.dwHighDateTime=0x1d6eb7e, nFileSizeHigh=0x0, nFileSizeLow=0x3d0)) returned 1 [0035.026] MoveFileW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Colors\\Hardcover.xml" (normalized: "c:\\program files\\microsoft office\\document themes 14\\theme colors\\hardcover.xml"), lpNewFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Colors\\Hardcover.xml" (normalized: "c:\\program files\\microsoft office\\document themes 14\\theme colors\\hardcover.xml")) returned 1 [0035.027] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Colors\\Horizon.xml", nBufferLength=0x105, lpBuffer=0x31e194, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Colors\\Horizon.xml", lpFilePart=0x0) returned 0x4d [0035.027] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Colors\\Horizon.xml" (normalized: "c:\\program files\\microsoft office\\document themes 14\\theme colors\\horizon.xml"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x224 [0035.027] GetFileType (hFile=0x224) returned 0x1 [0035.027] GetFileType (hFile=0x224) returned 0x1 [0035.027] GetFileSize (in: hFile=0x224, lpFileSizeHigh=0x31e790 | out: lpFileSizeHigh=0x31e790*=0x0) returned 0x39e [0035.027] ReadFile (in: hFile=0x224, lpBuffer=0x269894c, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x31e73c, lpOverlapped=0x0 | out: lpBuffer=0x269894c*, lpNumberOfBytesRead=0x31e73c*=0x39e, lpOverlapped=0x0) returned 1 [0035.042] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Colors\\Horizon.xml", nBufferLength=0x105, lpBuffer=0x31e180, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Colors\\Horizon.xml", lpFilePart=0x0) returned 0x4d [0035.042] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Colors\\Horizon.xml" (normalized: "c:\\program files\\microsoft office\\document themes 14\\theme colors\\horizon.xml"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x224 [0035.043] GetFileType (hFile=0x224) returned 0x1 [0035.043] GetFileType (hFile=0x224) returned 0x1 [0035.043] WriteFile (in: hFile=0x224, lpBuffer=0x26e7be4*, nNumberOfBytesToWrite=0x3a0, lpNumberOfBytesWritten=0x31e704, lpOverlapped=0x0 | out: lpBuffer=0x26e7be4*, lpNumberOfBytesWritten=0x31e704*=0x3a0, lpOverlapped=0x0) returned 1 [0035.044] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Colors\\Horizon.xml", nBufferLength=0x105, lpBuffer=0x31e2b4, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Colors\\Horizon.xml", lpFilePart=0x0) returned 0x4d [0035.044] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Colors\\Horizon.xml", nBufferLength=0x105, lpBuffer=0x31e2b4, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Colors\\Horizon.xml", lpFilePart=0x0) returned 0x4d [0035.044] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Colors\\Horizon.xml" (normalized: "c:\\program files\\microsoft office\\document themes 14\\theme colors\\horizon.xml"), fInfoLevelId=0x0, lpFileInformation=0x31e790 | out: lpFileInformation=0x31e790*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1786e800, ftCreationTime.dwHighDateTime=0x1cac1e1, ftLastAccessTime.dwLowDateTime=0x51c9cf70, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xf8575540, ftLastWriteTime.dwHighDateTime=0x1d6eb7e, nFileSizeHigh=0x0, nFileSizeLow=0x3a0)) returned 1 [0035.044] MoveFileW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Colors\\Horizon.xml" (normalized: "c:\\program files\\microsoft office\\document themes 14\\theme colors\\horizon.xml"), lpNewFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Colors\\Horizon.xml" (normalized: "c:\\program files\\microsoft office\\document themes 14\\theme colors\\horizon.xml")) returned 1 [0035.045] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Colors\\Median.xml", nBufferLength=0x105, lpBuffer=0x31e194, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Colors\\Median.xml", lpFilePart=0x0) returned 0x4c [0035.045] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Colors\\Median.xml" (normalized: "c:\\program files\\microsoft office\\document themes 14\\theme colors\\median.xml"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x224 [0035.045] GetFileType (hFile=0x224) returned 0x1 [0035.045] GetFileType (hFile=0x224) returned 0x1 [0035.045] GetFileSize (in: hFile=0x224, lpFileSizeHigh=0x31e790 | out: lpFileSizeHigh=0x31e790*=0x0) returned 0x3c1 [0035.045] ReadFile (in: hFile=0x224, lpBuffer=0x26e9250, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x31e73c, lpOverlapped=0x0 | out: lpBuffer=0x26e9250*, lpNumberOfBytesRead=0x31e73c*=0x3c1, lpOverlapped=0x0) returned 1 [0035.061] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Colors\\Median.xml", nBufferLength=0x105, lpBuffer=0x31e180, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Colors\\Median.xml", lpFilePart=0x0) returned 0x4c [0035.061] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Colors\\Median.xml" (normalized: "c:\\program files\\microsoft office\\document themes 14\\theme colors\\median.xml"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x224 [0035.062] GetFileType (hFile=0x224) returned 0x1 [0035.062] GetFileType (hFile=0x224) returned 0x1 [0035.062] WriteFile (in: hFile=0x224, lpBuffer=0x2738488*, nNumberOfBytesToWrite=0x3d0, lpNumberOfBytesWritten=0x31e704, lpOverlapped=0x0 | out: lpBuffer=0x2738488*, lpNumberOfBytesWritten=0x31e704*=0x3d0, lpOverlapped=0x0) returned 1 [0035.063] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Colors\\Median.xml", nBufferLength=0x105, lpBuffer=0x31e2b4, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Colors\\Median.xml", lpFilePart=0x0) returned 0x4c [0035.063] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Colors\\Median.xml", nBufferLength=0x105, lpBuffer=0x31e2b4, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Colors\\Median.xml", lpFilePart=0x0) returned 0x4c [0035.063] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Colors\\Median.xml" (normalized: "c:\\program files\\microsoft office\\document themes 14\\theme colors\\median.xml"), fInfoLevelId=0x0, lpFileInformation=0x31e790 | out: lpFileInformation=0x31e790*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf3c3a200, ftCreationTime.dwHighDateTime=0x1cac1e0, ftLastAccessTime.dwLowDateTime=0x603ce830, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xf859b6a0, ftLastWriteTime.dwHighDateTime=0x1d6eb7e, nFileSizeHigh=0x0, nFileSizeLow=0x3d0)) returned 1 [0035.063] MoveFileW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Colors\\Median.xml" (normalized: "c:\\program files\\microsoft office\\document themes 14\\theme colors\\median.xml"), lpNewFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Colors\\Median.xml" (normalized: "c:\\program files\\microsoft office\\document themes 14\\theme colors\\median.xml")) returned 1 [0035.064] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Colors\\Metro.xml", nBufferLength=0x105, lpBuffer=0x31e194, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Colors\\Metro.xml", lpFilePart=0x0) returned 0x4b [0035.064] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Colors\\Metro.xml" (normalized: "c:\\program files\\microsoft office\\document themes 14\\theme colors\\metro.xml"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x224 [0035.064] GetFileType (hFile=0x224) returned 0x1 [0035.064] GetFileType (hFile=0x224) returned 0x1 [0035.064] GetFileSize (in: hFile=0x224, lpFileSizeHigh=0x31e790 | out: lpFileSizeHigh=0x31e790*=0x0) returned 0x3c0 [0035.064] ReadFile (in: hFile=0x224, lpBuffer=0x2739ae8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x31e73c, lpOverlapped=0x0 | out: lpBuffer=0x2739ae8*, lpNumberOfBytesRead=0x31e73c*=0x3c0, lpOverlapped=0x0) returned 1 [0035.079] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Colors\\Metro.xml", nBufferLength=0x105, lpBuffer=0x31e180, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Colors\\Metro.xml", lpFilePart=0x0) returned 0x4b [0035.079] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Colors\\Metro.xml" (normalized: "c:\\program files\\microsoft office\\document themes 14\\theme colors\\metro.xml"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x224 [0035.080] GetFileType (hFile=0x224) returned 0x1 [0035.080] GetFileType (hFile=0x224) returned 0x1 [0035.081] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Colors\\Metro.xml", nBufferLength=0x105, lpBuffer=0x31e2b4, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Colors\\Metro.xml", lpFilePart=0x0) returned 0x4b [0035.081] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Colors\\Metro.xml", nBufferLength=0x105, lpBuffer=0x31e2b4, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Colors\\Metro.xml", lpFilePart=0x0) returned 0x4b [0035.081] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Colors\\Metro.xml" (normalized: "c:\\program files\\microsoft office\\document themes 14\\theme colors\\metro.xml"), fInfoLevelId=0x0, lpFileInformation=0x31e790 | out: lpFileInformation=0x31e790*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf4f4cf00, ftCreationTime.dwHighDateTime=0x1cac1e0, ftLastAccessTime.dwLowDateTime=0x51c9cf70, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xf85c1800, ftLastWriteTime.dwHighDateTime=0x1d6eb7e, nFileSizeHigh=0x0, nFileSizeLow=0x3d0)) returned 1 [0035.081] MoveFileW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Colors\\Metro.xml" (normalized: "c:\\program files\\microsoft office\\document themes 14\\theme colors\\metro.xml"), lpNewFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Colors\\Metro.xml" (normalized: "c:\\program files\\microsoft office\\document themes 14\\theme colors\\metro.xml")) returned 1 [0035.082] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Colors\\Module.xml", nBufferLength=0x105, lpBuffer=0x31e194, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Colors\\Module.xml", lpFilePart=0x0) returned 0x4c [0035.082] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Colors\\Module.xml" (normalized: "c:\\program files\\microsoft office\\document themes 14\\theme colors\\module.xml"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x224 [0035.083] GetFileType (hFile=0x224) returned 0x1 [0035.083] GetFileType (hFile=0x224) returned 0x1 [0035.083] GetFileSize (in: hFile=0x224, lpFileSizeHigh=0x31e790 | out: lpFileSizeHigh=0x31e790*=0x0) returned 0x3c1 [0035.083] ReadFile (in: hFile=0x224, lpBuffer=0x278a37c, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x31e73c, lpOverlapped=0x0 | out: lpBuffer=0x278a37c*, lpNumberOfBytesRead=0x31e73c*=0x3c1, lpOverlapped=0x0) returned 1 [0035.098] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Colors\\Module.xml", nBufferLength=0x105, lpBuffer=0x31e180, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Colors\\Module.xml", lpFilePart=0x0) returned 0x4c [0035.098] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Colors\\Module.xml" (normalized: "c:\\program files\\microsoft office\\document themes 14\\theme colors\\module.xml"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x224 [0035.099] GetFileType (hFile=0x224) returned 0x1 [0035.099] GetFileType (hFile=0x224) returned 0x1 [0035.099] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Colors\\Module.xml", nBufferLength=0x105, lpBuffer=0x31e2b4, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Colors\\Module.xml", lpFilePart=0x0) returned 0x4c [0035.099] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Colors\\Module.xml", nBufferLength=0x105, lpBuffer=0x31e2b4, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Colors\\Module.xml", lpFilePart=0x0) returned 0x4c [0035.099] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Colors\\Module.xml" (normalized: "c:\\program files\\microsoft office\\document themes 14\\theme colors\\module.xml"), fInfoLevelId=0x0, lpFileInformation=0x31e790 | out: lpFileInformation=0x31e790*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf625fc00, ftCreationTime.dwHighDateTime=0x1cac1e0, ftLastAccessTime.dwLowDateTime=0x603ce830, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xf85e7960, ftLastWriteTime.dwHighDateTime=0x1d6eb7e, nFileSizeHigh=0x0, nFileSizeLow=0x3d0)) returned 1 [0035.100] MoveFileW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Colors\\Module.xml" (normalized: "c:\\program files\\microsoft office\\document themes 14\\theme colors\\module.xml"), lpNewFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Colors\\Module.xml" (normalized: "c:\\program files\\microsoft office\\document themes 14\\theme colors\\module.xml")) returned 1 [0035.100] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Colors\\Newsprint.xml", nBufferLength=0x105, lpBuffer=0x31e194, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Colors\\Newsprint.xml", lpFilePart=0x0) returned 0x4f [0035.100] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Colors\\Newsprint.xml" (normalized: "c:\\program files\\microsoft office\\document themes 14\\theme colors\\newsprint.xml"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x224 [0035.100] GetFileType (hFile=0x224) returned 0x1 [0035.100] GetFileType (hFile=0x224) returned 0x1 [0035.100] GetFileSize (in: hFile=0x224, lpFileSizeHigh=0x31e790 | out: lpFileSizeHigh=0x31e790*=0x0) returned 0x3c4 [0035.101] ReadFile (in: hFile=0x224, lpBuffer=0x27dac28, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x31e73c, lpOverlapped=0x0 | out: lpBuffer=0x27dac28*, lpNumberOfBytesRead=0x31e73c*=0x3c4, lpOverlapped=0x0) returned 1 [0035.117] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Colors\\Newsprint.xml", nBufferLength=0x105, lpBuffer=0x31e180, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Colors\\Newsprint.xml", lpFilePart=0x0) returned 0x4f [0035.117] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Colors\\Newsprint.xml" (normalized: "c:\\program files\\microsoft office\\document themes 14\\theme colors\\newsprint.xml"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x224 [0035.118] GetFileType (hFile=0x224) returned 0x1 [0035.118] GetFileType (hFile=0x224) returned 0x1 [0035.118] WriteFile (in: hFile=0x224, lpBuffer=0x2829e64*, nNumberOfBytesToWrite=0x3d0, lpNumberOfBytesWritten=0x31e704, lpOverlapped=0x0 | out: lpBuffer=0x2829e64*, lpNumberOfBytesWritten=0x31e704*=0x3d0, lpOverlapped=0x0) returned 1 [0035.119] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Colors\\Newsprint.xml", nBufferLength=0x105, lpBuffer=0x31e2b4, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Colors\\Newsprint.xml", lpFilePart=0x0) returned 0x4f [0035.119] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Colors\\Newsprint.xml", nBufferLength=0x105, lpBuffer=0x31e2b4, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Colors\\Newsprint.xml", lpFilePart=0x0) returned 0x4f [0035.119] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Colors\\Newsprint.xml" (normalized: "c:\\program files\\microsoft office\\document themes 14\\theme colors\\newsprint.xml"), fInfoLevelId=0x0, lpFileInformation=0x31e790 | out: lpFileInformation=0x31e790*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x18b81500, ftCreationTime.dwHighDateTime=0x1cac1e1, ftLastAccessTime.dwLowDateTime=0x51c9cf70, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xf8633c20, ftLastWriteTime.dwHighDateTime=0x1d6eb7e, nFileSizeHigh=0x0, nFileSizeLow=0x3d0)) returned 1 [0035.119] MoveFileW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Colors\\Newsprint.xml" (normalized: "c:\\program files\\microsoft office\\document themes 14\\theme colors\\newsprint.xml"), lpNewFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Colors\\Newsprint.xml" (normalized: "c:\\program files\\microsoft office\\document themes 14\\theme colors\\newsprint.xml")) returned 1 [0035.120] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Colors\\Opulent.xml", nBufferLength=0x105, lpBuffer=0x31e194, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Colors\\Opulent.xml", lpFilePart=0x0) returned 0x4d [0035.120] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Colors\\Opulent.xml" (normalized: "c:\\program files\\microsoft office\\document themes 14\\theme colors\\opulent.xml"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x224 [0035.120] GetFileType (hFile=0x224) returned 0x1 [0035.120] GetFileType (hFile=0x224) returned 0x1 [0035.120] GetFileSize (in: hFile=0x224, lpFileSizeHigh=0x31e790 | out: lpFileSizeHigh=0x31e790*=0x0) returned 0x3c2 [0035.120] ReadFile (in: hFile=0x224, lpBuffer=0x282b4d8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x31e73c, lpOverlapped=0x0 | out: lpBuffer=0x282b4d8*, lpNumberOfBytesRead=0x31e73c*=0x3c2, lpOverlapped=0x0) returned 1 [0035.138] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Colors\\Opulent.xml", nBufferLength=0x105, lpBuffer=0x31e180, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Colors\\Opulent.xml", lpFilePart=0x0) returned 0x4d [0035.138] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Colors\\Opulent.xml" (normalized: "c:\\program files\\microsoft office\\document themes 14\\theme colors\\opulent.xml"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x224 [0035.139] GetFileType (hFile=0x224) returned 0x1 [0035.139] GetFileType (hFile=0x224) returned 0x1 [0035.139] WriteFile (in: hFile=0x224, lpBuffer=0x267a700*, nNumberOfBytesToWrite=0x3d0, lpNumberOfBytesWritten=0x31e704, lpOverlapped=0x0 | out: lpBuffer=0x267a700*, lpNumberOfBytesWritten=0x31e704*=0x3d0, lpOverlapped=0x0) returned 1 [0035.140] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Colors\\Opulent.xml", nBufferLength=0x105, lpBuffer=0x31e2b4, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Colors\\Opulent.xml", lpFilePart=0x0) returned 0x4d [0035.140] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Colors\\Opulent.xml", nBufferLength=0x105, lpBuffer=0x31e2b4, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Colors\\Opulent.xml", lpFilePart=0x0) returned 0x4d [0035.140] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Colors\\Opulent.xml" (normalized: "c:\\program files\\microsoft office\\document themes 14\\theme colors\\opulent.xml"), fInfoLevelId=0x0, lpFileInformation=0x31e790 | out: lpFileInformation=0x31e790*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf7572900, ftCreationTime.dwHighDateTime=0x1cac1e0, ftLastAccessTime.dwLowDateTime=0x603ce830, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xf8659d80, ftLastWriteTime.dwHighDateTime=0x1d6eb7e, nFileSizeHigh=0x0, nFileSizeLow=0x3d0)) returned 1 [0035.140] MoveFileW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Colors\\Opulent.xml" (normalized: "c:\\program files\\microsoft office\\document themes 14\\theme colors\\opulent.xml"), lpNewFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Colors\\Opulent.xml" (normalized: "c:\\program files\\microsoft office\\document themes 14\\theme colors\\opulent.xml")) returned 1 [0035.141] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Colors\\Oriel.xml", nBufferLength=0x105, lpBuffer=0x31e194, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Colors\\Oriel.xml", lpFilePart=0x0) returned 0x4b [0035.141] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Colors\\Oriel.xml" (normalized: "c:\\program files\\microsoft office\\document themes 14\\theme colors\\oriel.xml"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x224 [0035.142] GetFileType (hFile=0x224) returned 0x1 [0035.142] GetFileType (hFile=0x224) returned 0x1 [0035.142] GetFileSize (in: hFile=0x224, lpFileSizeHigh=0x31e790 | out: lpFileSizeHigh=0x31e790*=0x0) returned 0x3c0 [0035.142] ReadFile (in: hFile=0x224, lpBuffer=0x267bd60, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x31e73c, lpOverlapped=0x0 | out: lpBuffer=0x267bd60*, lpNumberOfBytesRead=0x31e73c*=0x3c0, lpOverlapped=0x0) returned 1 [0035.157] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Colors\\Oriel.xml", nBufferLength=0x105, lpBuffer=0x31e180, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Colors\\Oriel.xml", lpFilePart=0x0) returned 0x4b [0035.157] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Colors\\Oriel.xml" (normalized: "c:\\program files\\microsoft office\\document themes 14\\theme colors\\oriel.xml"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x224 [0035.158] GetFileType (hFile=0x224) returned 0x1 [0035.158] GetFileType (hFile=0x224) returned 0x1 [0035.159] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Colors\\Oriel.xml", nBufferLength=0x105, lpBuffer=0x31e2b4, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Colors\\Oriel.xml", lpFilePart=0x0) returned 0x4b [0035.159] MoveFileW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Colors\\Oriel.xml" (normalized: "c:\\program files\\microsoft office\\document themes 14\\theme colors\\oriel.xml"), lpNewFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Colors\\Oriel.xml" (normalized: "c:\\program files\\microsoft office\\document themes 14\\theme colors\\oriel.xml")) returned 1 [0035.160] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Colors\\Origin.xml" (normalized: "c:\\program files\\microsoft office\\document themes 14\\theme colors\\origin.xml"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x224 [0035.161] GetFileType (hFile=0x224) returned 0x1 [0035.161] GetFileType (hFile=0x224) returned 0x1 [0035.161] GetFileSize (in: hFile=0x224, lpFileSizeHigh=0x31e790 | out: lpFileSizeHigh=0x31e790*=0x0) returned 0x3c1 [0035.161] ReadFile (in: hFile=0x224, lpBuffer=0x26cc750, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x31e73c, lpOverlapped=0x0 | out: lpBuffer=0x26cc750*, lpNumberOfBytesRead=0x31e73c*=0x3c1, lpOverlapped=0x0) returned 1 [0035.176] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Colors\\Origin.xml" (normalized: "c:\\program files\\microsoft office\\document themes 14\\theme colors\\origin.xml"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x224 [0035.176] GetFileType (hFile=0x224) returned 0x1 [0035.176] GetFileType (hFile=0x224) returned 0x1 [0035.177] WriteFile (in: hFile=0x224, lpBuffer=0x271b988*, nNumberOfBytesToWrite=0x3d0, lpNumberOfBytesWritten=0x31e704, lpOverlapped=0x0 | out: lpBuffer=0x271b988*, lpNumberOfBytesWritten=0x31e704*=0x3d0, lpOverlapped=0x0) returned 1 [0035.177] MoveFileW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Colors\\Origin.xml" (normalized: "c:\\program files\\microsoft office\\document themes 14\\theme colors\\origin.xml"), lpNewFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Colors\\Origin.xml" (normalized: "c:\\program files\\microsoft office\\document themes 14\\theme colors\\origin.xml")) returned 1 [0035.179] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Colors\\Paper.xml" (normalized: "c:\\program files\\microsoft office\\document themes 14\\theme colors\\paper.xml"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x224 [0035.179] GetFileType (hFile=0x224) returned 0x1 [0035.179] GetFileType (hFile=0x224) returned 0x1 [0035.179] GetFileSize (in: hFile=0x224, lpFileSizeHigh=0x31e790 | out: lpFileSizeHigh=0x31e790*=0x0) returned 0x3c0 [0035.179] ReadFile (in: hFile=0x224, lpBuffer=0x271cfe8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x31e73c, lpOverlapped=0x0 | out: lpBuffer=0x271cfe8*, lpNumberOfBytesRead=0x31e73c*=0x3c0, lpOverlapped=0x0) returned 1 [0035.194] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Colors\\Paper.xml" (normalized: "c:\\program files\\microsoft office\\document themes 14\\theme colors\\paper.xml"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x224 [0035.195] GetFileType (hFile=0x224) returned 0x1 [0035.195] GetFileType (hFile=0x224) returned 0x1 [0035.195] WriteFile (in: hFile=0x224, lpBuffer=0x276c218*, nNumberOfBytesToWrite=0x3d0, lpNumberOfBytesWritten=0x31e704, lpOverlapped=0x0 | out: lpBuffer=0x276c218*, lpNumberOfBytesWritten=0x31e704*=0x3d0, lpOverlapped=0x0) returned 1 [0035.196] MoveFileW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Colors\\Paper.xml" (normalized: "c:\\program files\\microsoft office\\document themes 14\\theme colors\\paper.xml"), lpNewFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Colors\\Paper.xml" (normalized: "c:\\program files\\microsoft office\\document themes 14\\theme colors\\paper.xml")) returned 1 [0035.197] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Colors\\Perspective.xml" (normalized: "c:\\program files\\microsoft office\\document themes 14\\theme colors\\perspective.xml"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x224 [0035.197] GetFileType (hFile=0x224) returned 0x1 [0035.197] GetFileType (hFile=0x224) returned 0x1 [0035.197] GetFileSize (in: hFile=0x224, lpFileSizeHigh=0x31e790 | out: lpFileSizeHigh=0x31e790*=0x0) returned 0x3c6 [0035.197] ReadFile (in: hFile=0x224, lpBuffer=0x276d890, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x31e73c, lpOverlapped=0x0 | out: lpBuffer=0x276d890*, lpNumberOfBytesRead=0x31e73c*=0x3c6, lpOverlapped=0x0) returned 1 [0035.215] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Colors\\Perspective.xml" (normalized: "c:\\program files\\microsoft office\\document themes 14\\theme colors\\perspective.xml"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x224 [0035.216] GetFileType (hFile=0x224) returned 0x1 [0035.216] GetFileType (hFile=0x224) returned 0x1 [0035.217] MoveFileW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Colors\\Perspective.xml" (normalized: "c:\\program files\\microsoft office\\document themes 14\\theme colors\\perspective.xml"), lpNewFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Colors\\Perspective.xml" (normalized: "c:\\program files\\microsoft office\\document themes 14\\theme colors\\perspective.xml")) returned 1 [0035.217] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Colors\\Pushpin.xml" (normalized: "c:\\program files\\microsoft office\\document themes 14\\theme colors\\pushpin.xml"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x224 [0035.217] GetFileType (hFile=0x224) returned 0x1 [0035.217] GetFileType (hFile=0x224) returned 0x1 [0035.217] GetFileSize (in: hFile=0x224, lpFileSizeHigh=0x31e790 | out: lpFileSizeHigh=0x31e790*=0x0) returned 0x3c2 [0035.217] ReadFile (in: hFile=0x224, lpBuffer=0x27be150, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x31e73c, lpOverlapped=0x0 | out: lpBuffer=0x27be150*, lpNumberOfBytesRead=0x31e73c*=0x3c2, lpOverlapped=0x0) returned 1 [0035.232] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Colors\\Pushpin.xml" (normalized: "c:\\program files\\microsoft office\\document themes 14\\theme colors\\pushpin.xml"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x224 [0035.233] GetFileType (hFile=0x224) returned 0x1 [0035.233] GetFileType (hFile=0x224) returned 0x1 [0035.234] MoveFileW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Colors\\Pushpin.xml" (normalized: "c:\\program files\\microsoft office\\document themes 14\\theme colors\\pushpin.xml"), lpNewFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Colors\\Pushpin.xml" (normalized: "c:\\program files\\microsoft office\\document themes 14\\theme colors\\pushpin.xml")) returned 1 [0035.234] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Colors\\Slipstream.xml" (normalized: "c:\\program files\\microsoft office\\document themes 14\\theme colors\\slipstream.xml"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x224 [0035.235] GetFileType (hFile=0x224) returned 0x1 [0035.235] GetFileType (hFile=0x224) returned 0x1 [0035.235] GetFileSize (in: hFile=0x224, lpFileSizeHigh=0x31e790 | out: lpFileSizeHigh=0x31e790*=0x0) returned 0x3c5 [0035.235] ReadFile (in: hFile=0x224, lpBuffer=0x280ea08, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x31e73c, lpOverlapped=0x0 | out: lpBuffer=0x280ea08*, lpNumberOfBytesRead=0x31e73c*=0x3c5, lpOverlapped=0x0) returned 1 [0035.260] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Colors\\Slipstream.xml" (normalized: "c:\\program files\\microsoft office\\document themes 14\\theme colors\\slipstream.xml"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x224 [0035.261] GetFileType (hFile=0x224) returned 0x1 [0035.261] GetFileType (hFile=0x224) returned 0x1 [0035.261] WriteFile (in: hFile=0x224, lpBuffer=0x265dc7c*, nNumberOfBytesToWrite=0x3d0, lpNumberOfBytesWritten=0x31e704, lpOverlapped=0x0 | out: lpBuffer=0x265dc7c*, lpNumberOfBytesWritten=0x31e704*=0x3d0, lpOverlapped=0x0) returned 1 [0035.262] MoveFileW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Colors\\Slipstream.xml" (normalized: "c:\\program files\\microsoft office\\document themes 14\\theme colors\\slipstream.xml"), lpNewFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Colors\\Slipstream.xml" (normalized: "c:\\program files\\microsoft office\\document themes 14\\theme colors\\slipstream.xml")) returned 1 [0035.263] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Colors\\Solstice.xml" (normalized: "c:\\program files\\microsoft office\\document themes 14\\theme colors\\solstice.xml"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x224 [0035.263] GetFileType (hFile=0x224) returned 0x1 [0035.263] GetFileType (hFile=0x224) returned 0x1 [0035.264] GetFileSize (in: hFile=0x224, lpFileSizeHigh=0x31e790 | out: lpFileSizeHigh=0x31e790*=0x0) returned 0x3c3 [0035.264] ReadFile (in: hFile=0x224, lpBuffer=0x265f300, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x31e73c, lpOverlapped=0x0 | out: lpBuffer=0x265f300*, lpNumberOfBytesRead=0x31e73c*=0x3c3, lpOverlapped=0x0) returned 1 [0035.279] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Colors\\Solstice.xml" (normalized: "c:\\program files\\microsoft office\\document themes 14\\theme colors\\solstice.xml"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x224 [0035.279] GetFileType (hFile=0x224) returned 0x1 [0035.280] GetFileType (hFile=0x224) returned 0x1 [0035.280] WriteFile (in: hFile=0x224, lpBuffer=0x26ae69c*, nNumberOfBytesToWrite=0x3d0, lpNumberOfBytesWritten=0x31e704, lpOverlapped=0x0 | out: lpBuffer=0x26ae69c*, lpNumberOfBytesWritten=0x31e704*=0x3d0, lpOverlapped=0x0) returned 1 [0035.280] MoveFileW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Colors\\Solstice.xml" (normalized: "c:\\program files\\microsoft office\\document themes 14\\theme colors\\solstice.xml"), lpNewFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Colors\\Solstice.xml" (normalized: "c:\\program files\\microsoft office\\document themes 14\\theme colors\\solstice.xml")) returned 1 [0035.281] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Colors\\Technic.xml" (normalized: "c:\\program files\\microsoft office\\document themes 14\\theme colors\\technic.xml"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x224 [0035.282] GetFileType (hFile=0x224) returned 0x1 [0035.282] GetFileType (hFile=0x224) returned 0x1 [0035.282] GetFileSize (in: hFile=0x224, lpFileSizeHigh=0x31e790 | out: lpFileSizeHigh=0x31e790*=0x0) returned 0x3c2 [0035.282] ReadFile (in: hFile=0x224, lpBuffer=0x26afd10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x31e73c, lpOverlapped=0x0 | out: lpBuffer=0x26afd10*, lpNumberOfBytesRead=0x31e73c*=0x3c2, lpOverlapped=0x0) returned 1 [0035.297] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Colors\\Technic.xml" (normalized: "c:\\program files\\microsoft office\\document themes 14\\theme colors\\technic.xml"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x224 [0035.298] GetFileType (hFile=0x224) returned 0x1 [0035.298] GetFileType (hFile=0x224) returned 0x1 [0035.299] MoveFileW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Colors\\Technic.xml" (normalized: "c:\\program files\\microsoft office\\document themes 14\\theme colors\\technic.xml"), lpNewFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Colors\\Technic.xml" (normalized: "c:\\program files\\microsoft office\\document themes 14\\theme colors\\technic.xml")) returned 1 [0035.299] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Colors\\Thatch.xml" (normalized: "c:\\program files\\microsoft office\\document themes 14\\theme colors\\thatch.xml"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x224 [0035.299] GetFileType (hFile=0x224) returned 0x1 [0035.299] GetFileType (hFile=0x224) returned 0x1 [0035.299] GetFileSize (in: hFile=0x224, lpFileSizeHigh=0x31e790 | out: lpFileSizeHigh=0x31e790*=0x0) returned 0x3c1 [0035.299] ReadFile (in: hFile=0x224, lpBuffer=0x27005b4, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x31e73c, lpOverlapped=0x0 | out: lpBuffer=0x27005b4*, lpNumberOfBytesRead=0x31e73c*=0x3c1, lpOverlapped=0x0) returned 1 [0035.315] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Colors\\Thatch.xml" (normalized: "c:\\program files\\microsoft office\\document themes 14\\theme colors\\thatch.xml"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x224 [0035.316] GetFileType (hFile=0x224) returned 0x1 [0035.316] GetFileType (hFile=0x224) returned 0x1 [0035.316] WriteFile (in: hFile=0x224, lpBuffer=0x274f7ec*, nNumberOfBytesToWrite=0x3d0, lpNumberOfBytesWritten=0x31e704, lpOverlapped=0x0 | out: lpBuffer=0x274f7ec*, lpNumberOfBytesWritten=0x31e704*=0x3d0, lpOverlapped=0x0) returned 1 [0035.317] MoveFileW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Colors\\Thatch.xml" (normalized: "c:\\program files\\microsoft office\\document themes 14\\theme colors\\thatch.xml"), lpNewFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Colors\\Thatch.xml" (normalized: "c:\\program files\\microsoft office\\document themes 14\\theme colors\\thatch.xml")) returned 1 [0035.318] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Colors\\Trek.xml" (normalized: "c:\\program files\\microsoft office\\document themes 14\\theme colors\\trek.xml"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x224 [0035.318] GetFileType (hFile=0x224) returned 0x1 [0035.318] GetFileType (hFile=0x224) returned 0x1 [0035.318] GetFileSize (in: hFile=0x224, lpFileSizeHigh=0x31e790 | out: lpFileSizeHigh=0x31e790*=0x0) returned 0x3bf [0035.318] ReadFile (in: hFile=0x224, lpBuffer=0x2750e4c, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x31e73c, lpOverlapped=0x0 | out: lpBuffer=0x2750e4c*, lpNumberOfBytesRead=0x31e73c*=0x3bf, lpOverlapped=0x0) returned 1 [0035.333] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Colors\\Trek.xml" (normalized: "c:\\program files\\microsoft office\\document themes 14\\theme colors\\trek.xml"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x224 [0035.334] GetFileType (hFile=0x224) returned 0x1 [0035.334] GetFileType (hFile=0x224) returned 0x1 [0035.334] WriteFile (in: hFile=0x224, lpBuffer=0x27a0020*, nNumberOfBytesToWrite=0x3c0, lpNumberOfBytesWritten=0x31e704, lpOverlapped=0x0 | out: lpBuffer=0x27a0020*, lpNumberOfBytesWritten=0x31e704*=0x3c0, lpOverlapped=0x0) returned 1 [0035.335] CloseHandle (hObject=0x224) returned 1 [0035.336] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Colors\\Trek.xml" (normalized: "c:\\program files\\microsoft office\\document themes 14\\theme colors\\trek.xml"), fInfoLevelId=0x0, lpFileInformation=0x31e790 | out: lpFileInformation=0x31e790*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xfd4d0a00, ftCreationTime.dwHighDateTime=0x1cac1e0, ftLastAccessTime.dwLowDateTime=0x51cc30d0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xf8848f60, ftLastWriteTime.dwHighDateTime=0x1d6eb7e, nFileSizeHigh=0x0, nFileSizeLow=0x3c0)) returned 1 [0035.336] MoveFileW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Colors\\Trek.xml" (normalized: "c:\\program files\\microsoft office\\document themes 14\\theme colors\\trek.xml"), lpNewFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Colors\\Trek.xml" (normalized: "c:\\program files\\microsoft office\\document themes 14\\theme colors\\trek.xml")) returned 1 [0035.337] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Colors\\Urban.xml" (normalized: "c:\\program files\\microsoft office\\document themes 14\\theme colors\\urban.xml"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x224 [0035.337] GetFileType (hFile=0x224) returned 0x1 [0035.337] GetFileType (hFile=0x224) returned 0x1 [0035.337] GetFileSize (in: hFile=0x224, lpFileSizeHigh=0x31e790 | out: lpFileSizeHigh=0x31e790*=0x0) returned 0x3c0 [0035.337] ReadFile (in: hFile=0x224, lpBuffer=0x27a1678, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x31e73c, lpOverlapped=0x0 | out: lpBuffer=0x27a1678*, lpNumberOfBytesRead=0x31e73c*=0x3c0, lpOverlapped=0x0) returned 1 [0035.338] CloseHandle (hObject=0x224) returned 1 [0035.361] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Colors\\Urban.xml" (normalized: "c:\\program files\\microsoft office\\document themes 14\\theme colors\\urban.xml"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x224 [0035.361] GetFileType (hFile=0x224) returned 0x1 [0035.361] GetFileType (hFile=0x224) returned 0x1 [0035.361] WriteFile (in: hFile=0x224, lpBuffer=0x27f08a8*, nNumberOfBytesToWrite=0x3d0, lpNumberOfBytesWritten=0x31e704, lpOverlapped=0x0 | out: lpBuffer=0x27f08a8*, lpNumberOfBytesWritten=0x31e704*=0x3d0, lpOverlapped=0x0) returned 1 [0035.362] CloseHandle (hObject=0x224) returned 1 [0035.364] MoveFileW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Colors\\Urban.xml" (normalized: "c:\\program files\\microsoft office\\document themes 14\\theme colors\\urban.xml"), lpNewFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Colors\\Urban.xml" (normalized: "c:\\program files\\microsoft office\\document themes 14\\theme colors\\urban.xml")) returned 1 [0035.365] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Colors\\Verve.xml" (normalized: "c:\\program files\\microsoft office\\document themes 14\\theme colors\\verve.xml"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x224 [0035.366] GetFileType (hFile=0x224) returned 0x1 [0035.366] GetFileType (hFile=0x224) returned 0x1 [0035.366] GetFileSize (in: hFile=0x224, lpFileSizeHigh=0x31e790 | out: lpFileSizeHigh=0x31e790*=0x0) returned 0x3c0 [0035.366] ReadFile (in: hFile=0x224, lpBuffer=0x27f1f00, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x31e73c, lpOverlapped=0x0 | out: lpBuffer=0x27f1f00*, lpNumberOfBytesRead=0x31e73c*=0x3c0, lpOverlapped=0x0) returned 1 [0035.368] CloseHandle (hObject=0x224) returned 1 [0035.382] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Colors\\Verve.xml" (normalized: "c:\\program files\\microsoft office\\document themes 14\\theme colors\\verve.xml"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x224 [0035.383] GetFileType (hFile=0x224) returned 0x1 [0035.383] GetFileType (hFile=0x224) returned 0x1 [0035.383] WriteFile (in: hFile=0x224, lpBuffer=0x2841130*, nNumberOfBytesToWrite=0x3d0, lpNumberOfBytesWritten=0x31e704, lpOverlapped=0x0 | out: lpBuffer=0x2841130*, lpNumberOfBytesWritten=0x31e704*=0x3d0, lpOverlapped=0x0) returned 1 [0035.384] CloseHandle (hObject=0x224) returned 1 [0035.384] MoveFileW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Colors\\Verve.xml" (normalized: "c:\\program files\\microsoft office\\document themes 14\\theme colors\\verve.xml"), lpNewFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Colors\\Verve.xml" (normalized: "c:\\program files\\microsoft office\\document themes 14\\theme colors\\verve.xml")) returned 1 [0035.385] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Colors\\Waveform.xml" (normalized: "c:\\program files\\microsoft office\\document themes 14\\theme colors\\waveform.xml"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x224 [0035.385] GetFileType (hFile=0x224) returned 0x1 [0035.385] GetFileType (hFile=0x224) returned 0x1 [0035.385] GetFileSize (in: hFile=0x224, lpFileSizeHigh=0x31e790 | out: lpFileSizeHigh=0x31e790*=0x0) returned 0x3c3 [0035.385] ReadFile (in: hFile=0x224, lpBuffer=0x284279c, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x31e73c, lpOverlapped=0x0 | out: lpBuffer=0x284279c*, lpNumberOfBytesRead=0x31e73c*=0x3c3, lpOverlapped=0x0) returned 1 [0035.387] CloseHandle (hObject=0x224) returned 1 [0035.430] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Colors\\Waveform.xml", nBufferLength=0x105, lpBuffer=0x31e180, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Colors\\Waveform.xml", lpFilePart=0x0) returned 0x4e [0035.430] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e674) returned 1 [0035.430] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Colors\\Waveform.xml" (normalized: "c:\\program files\\microsoft office\\document themes 14\\theme colors\\waveform.xml"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x224 [0035.431] GetFileType (hFile=0x224) returned 0x1 [0035.431] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e670) returned 1 [0035.431] GetFileType (hFile=0x224) returned 0x1 [0035.431] WriteFile (in: hFile=0x224, lpBuffer=0x26919a0*, nNumberOfBytesToWrite=0x3d0, lpNumberOfBytesWritten=0x31e704, lpOverlapped=0x0 | out: lpBuffer=0x26919a0*, lpNumberOfBytesWritten=0x31e704*=0x3d0, lpOverlapped=0x0) returned 1 [0035.432] CloseHandle (hObject=0x224) returned 1 [0035.433] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Colors\\Waveform.xml", nBufferLength=0x105, lpBuffer=0x31e2b4, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Colors\\Waveform.xml", lpFilePart=0x0) returned 0x4e [0035.433] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Colors\\Waveform.xml", nBufferLength=0x105, lpBuffer=0x31e2b4, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Colors\\Waveform.xml", lpFilePart=0x0) returned 0x4e [0035.433] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e714) returned 1 [0035.433] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Colors\\Waveform.xml" (normalized: "c:\\program files\\microsoft office\\document themes 14\\theme colors\\waveform.xml"), fInfoLevelId=0x0, lpFileInformation=0x31e790 | out: lpFileInformation=0x31e790*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb9b2600, ftCreationTime.dwHighDateTime=0x1cac1e1, ftLastAccessTime.dwLowDateTime=0x51cc30d0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xf892d7a0, ftLastWriteTime.dwHighDateTime=0x1d6eb7e, nFileSizeHigh=0x0, nFileSizeLow=0x3d0)) returned 1 [0035.433] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e710) returned 1 [0035.433] MoveFileW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Colors\\Waveform.xml" (normalized: "c:\\program files\\microsoft office\\document themes 14\\theme colors\\waveform.xml"), lpNewFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Colors\\Waveform.xml" (normalized: "c:\\program files\\microsoft office\\document themes 14\\theme colors\\waveform.xml")) returned 1 [0035.433] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e7bc) returned 1 [0035.434] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Effects", nBufferLength=0x105, lpBuffer=0x31e2c4, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Effects", lpFilePart=0x0) returned 0x42 [0035.434] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Effects\\", nBufferLength=0x105, lpBuffer=0x31e298, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Effects\\", lpFilePart=0x0) returned 0x43 [0035.434] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Effects\\*", lpFindFileData=0x31e4e4 | out: lpFindFileData=0x31e4e4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5127f1f0, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0xe5caf100, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0xe5caf100, ftLastWriteTime.dwHighDateTime=0x1d305f1, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5107ae0 [0035.437] FindNextFileW (in: hFindFile=0x5107ae0, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5127f1f0, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0xe5caf100, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0xe5caf100, ftLastWriteTime.dwHighDateTime=0x1d305f1, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0035.439] FindNextFileW (in: hFindFile=0x5107ae0, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x61c8a500, ftCreationTime.dwHighDateTime=0x1cbded9, ftLastAccessTime.dwLowDateTime=0xe591d000, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0x61c8a500, ftLastWriteTime.dwHighDateTime=0x1cbded9, nFileSizeHigh=0x0, nFileSizeLow=0x5261, dwReserved0=0x0, dwReserved1=0x0, cFileName="Adjacency.eftx", cAlternateFileName="ADJACE~1.EFT")) returned 1 [0035.439] FindNextFileW (in: hFindFile=0x5107ae0, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x655c2c00, ftCreationTime.dwHighDateTime=0x1cbded9, ftLastAccessTime.dwLowDateTime=0xe5943160, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0x655c2c00, ftLastWriteTime.dwHighDateTime=0x1cbded9, nFileSizeHigh=0x0, nFileSizeLow=0x6ae5, dwReserved0=0x0, dwReserved1=0x0, cFileName="Angles.eftx", cAlternateFileName="ANGLES~1.EFT")) returned 1 [0035.439] FindNextFileW (in: hFindFile=0x5107ae0, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x83b00, ftCreationTime.dwHighDateTime=0x1cbded9, ftLastAccessTime.dwLowDateTime=0xe5943160, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0x83b00, ftLastWriteTime.dwHighDateTime=0x1cbded9, nFileSizeHigh=0x0, nFileSizeLow=0x354c6, dwReserved0=0x0, dwReserved1=0x0, cFileName="Apex.eftx", cAlternateFileName="APEX~1.EFT")) returned 1 [0035.439] FindNextFileW (in: hFindFile=0x5107ae0, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3f368c00, ftCreationTime.dwHighDateTime=0x1cbded9, ftLastAccessTime.dwLowDateTime=0xe59692c0, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0x3f368c00, ftLastWriteTime.dwHighDateTime=0x1cbded9, nFileSizeHigh=0x0, nFileSizeLow=0xbf81, dwReserved0=0x0, dwReserved1=0x0, cFileName="Apothecary.eftx", cAlternateFileName="APOTHE~1.EFT")) returned 1 [0035.439] FindNextFileW (in: hFindFile=0x5107ae0, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x39bc200, ftCreationTime.dwHighDateTime=0x1cbded9, ftLastAccessTime.dwLowDateTime=0xe59692c0, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0x39bc200, ftLastWriteTime.dwHighDateTime=0x1cbded9, nFileSizeHigh=0x0, nFileSizeLow=0x581a, dwReserved0=0x0, dwReserved1=0x0, cFileName="Aspect.eftx", cAlternateFileName="ASPECT~1.EFT")) returned 1 [0035.439] FindNextFileW (in: hFindFile=0x5107ae0, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x42ca1300, ftCreationTime.dwHighDateTime=0x1cbded9, ftLastAccessTime.dwLowDateTime=0xe598f420, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0x42ca1300, ftLastWriteTime.dwHighDateTime=0x1cbded9, nFileSizeHigh=0x0, nFileSizeLow=0x696d, dwReserved0=0x0, dwReserved1=0x0, cFileName="Austin.eftx", cAlternateFileName="AUSTIN~1.EFT")) returned 1 [0035.439] FindNextFileW (in: hFindFile=0x5107ae0, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x68efb300, ftCreationTime.dwHighDateTime=0x1cbded9, ftLastAccessTime.dwLowDateTime=0xe598f420, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0x68efb300, ftLastWriteTime.dwHighDateTime=0x1cbded9, nFileSizeHigh=0x0, nFileSizeLow=0x96e87, dwReserved0=0x0, dwReserved1=0x0, cFileName="Black Tie.eftx", cAlternateFileName="BLACKT~1.EFT")) returned 1 [0035.439] FindNextFileW (in: hFindFile=0x5107ae0, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x72f4900, ftCreationTime.dwHighDateTime=0x1cbded9, ftLastAccessTime.dwLowDateTime=0xe59b5580, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0x72f4900, ftLastWriteTime.dwHighDateTime=0x1cbded9, nFileSizeHigh=0x0, nFileSizeLow=0xa7a5, dwReserved0=0x0, dwReserved1=0x0, cFileName="Civic.eftx", cAlternateFileName="CIVIC~1.EFT")) returned 1 [0035.440] FindNextFileW (in: hFindFile=0x5107ae0, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x465d9a00, ftCreationTime.dwHighDateTime=0x1cbded9, ftLastAccessTime.dwLowDateTime=0xe59db6e0, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0x465d9a00, ftLastWriteTime.dwHighDateTime=0x1cbded9, nFileSizeHigh=0x0, nFileSizeLow=0x8032, dwReserved0=0x0, dwReserved1=0x0, cFileName="Clarity.eftx", cAlternateFileName="CLARIT~1.EFT")) returned 1 [0035.440] FindNextFileW (in: hFindFile=0x5107ae0, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6db46700, ftCreationTime.dwHighDateTime=0x1cbded9, ftLastAccessTime.dwLowDateTime=0xe5a01840, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0x6db46700, ftLastWriteTime.dwHighDateTime=0x1cbded9, nFileSizeHigh=0x0, nFileSizeLow=0x825e4, dwReserved0=0x0, dwReserved1=0x0, cFileName="Composite.eftx", cAlternateFileName="COMPOS~1.EFT")) returned 1 [0035.440] FindNextFileW (in: hFindFile=0x5107ae0, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xac2d000, ftCreationTime.dwHighDateTime=0x1cbded9, ftLastAccessTime.dwLowDateTime=0xe5a279a0, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0xac2d000, ftLastWriteTime.dwHighDateTime=0x1cbded9, nFileSizeHigh=0x0, nFileSizeLow=0x5791, dwReserved0=0x0, dwReserved1=0x0, cFileName="Concourse.eftx", cAlternateFileName="CONCOU~1.EFT")) returned 1 [0035.440] FindNextFileW (in: hFindFile=0x5107ae0, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x72791b00, ftCreationTime.dwHighDateTime=0x1cbded9, ftLastAccessTime.dwLowDateTime=0xe5a4db00, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0x72791b00, ftLastWriteTime.dwHighDateTime=0x1cbded9, nFileSizeHigh=0x0, nFileSizeLow=0x1e0721, dwReserved0=0x0, dwReserved1=0x0, cFileName="Couture.eftx", cAlternateFileName="COUTUR~1.EFT")) returned 1 [0035.440] FindNextFileW (in: hFindFile=0x5107ae0, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x760ca200, ftCreationTime.dwHighDateTime=0x1cbded9, ftLastAccessTime.dwLowDateTime=0xe5a99dc0, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0x760ca200, ftLastWriteTime.dwHighDateTime=0x1cbded9, nFileSizeHigh=0x0, nFileSizeLow=0x4caa1, dwReserved0=0x0, dwReserved1=0x0, cFileName="Elemental.eftx", cAlternateFileName="ELEMEN~1.EFT")) returned 1 [0035.440] FindNextFileW (in: hFindFile=0x5107ae0, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd252a00, ftCreationTime.dwHighDateTime=0x1cbded9, ftLastAccessTime.dwLowDateTime=0xe5abff20, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0xd252a00, ftLastWriteTime.dwHighDateTime=0x1cbded9, nFileSizeHigh=0x0, nFileSizeLow=0x6023, dwReserved0=0x0, dwReserved1=0x0, cFileName="Equity.eftx", cAlternateFileName="EQUITY~1.EFT")) returned 1 [0035.440] FindNextFileW (in: hFindFile=0x5107ae0, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x49f12100, ftCreationTime.dwHighDateTime=0x1cbded9, ftLastAccessTime.dwLowDateTime=0xe5abff20, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0x49f12100, ftLastWriteTime.dwHighDateTime=0x1cbded9, nFileSizeHigh=0x0, nFileSizeLow=0x3fde, dwReserved0=0x0, dwReserved1=0x0, cFileName="Essential.eftx", cAlternateFileName="ESSENT~1.EFT")) returned 1 [0035.440] FindNextFileW (in: hFindFile=0x5107ae0, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x79a02900, ftCreationTime.dwHighDateTime=0x1cbded9, ftLastAccessTime.dwLowDateTime=0xe5abff20, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0x79a02900, ftLastWriteTime.dwHighDateTime=0x1cbded9, nFileSizeHigh=0x0, nFileSizeLow=0x52a4, dwReserved0=0x0, dwReserved1=0x0, cFileName="Executive.eftx", cAlternateFileName="EXECUT~1.EFT")) returned 1 [0035.441] FindNextFileW (in: hFindFile=0x5107ae0, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x144c3800, ftCreationTime.dwHighDateTime=0x1cbded9, ftLastAccessTime.dwLowDateTime=0xe5ae6080, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0x144c3800, ftLastWriteTime.dwHighDateTime=0x1cbded9, nFileSizeHigh=0x0, nFileSizeLow=0x6818, dwReserved0=0x0, dwReserved1=0x0, cFileName="Flow.eftx", cAlternateFileName="FLOW~1.EFT")) returned 1 [0035.441] FindNextFileW (in: hFindFile=0x5107ae0, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x10b8b100, ftCreationTime.dwHighDateTime=0x1cbded9, ftLastAccessTime.dwLowDateTime=0xe5b0c1e0, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0x10b8b100, ftLastWriteTime.dwHighDateTime=0x1cbded9, nFileSizeHigh=0x0, nFileSizeLow=0x4732, dwReserved0=0x0, dwReserved1=0x0, cFileName="Foundry.eftx", cAlternateFileName="FOUNDR~1.EFT")) returned 1 [0035.441] FindNextFileW (in: hFindFile=0x5107ae0, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4d84a800, ftCreationTime.dwHighDateTime=0x1cbded9, ftLastAccessTime.dwLowDateTime=0xe5b0c1e0, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0x4d84a800, ftLastWriteTime.dwHighDateTime=0x1cbded9, nFileSizeHigh=0x0, nFileSizeLow=0x48cf, dwReserved0=0x0, dwReserved1=0x0, cFileName="Grid.eftx", cAlternateFileName="GRID~1.EFT")) returned 1 [0035.441] FindNextFileW (in: hFindFile=0x5107ae0, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x51182f00, ftCreationTime.dwHighDateTime=0x1cbded9, ftLastAccessTime.dwLowDateTime=0xe5b32340, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0x51182f00, ftLastWriteTime.dwHighDateTime=0x1cbded9, nFileSizeHigh=0x0, nFileSizeLow=0x559e1, dwReserved0=0x0, dwReserved1=0x0, cFileName="Hardcover.eftx", cAlternateFileName="HARDCO~1.EFT")) returned 1 [0035.441] FindNextFileW (in: hFindFile=0x5107ae0, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7d33b000, ftCreationTime.dwHighDateTime=0x1cbded9, ftLastAccessTime.dwLowDateTime=0xe5b32340, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0x7d33b000, ftLastWriteTime.dwHighDateTime=0x1cbded9, nFileSizeHigh=0x0, nFileSizeLow=0x33892, dwReserved0=0x0, dwReserved1=0x0, cFileName="Horizon.eftx", cAlternateFileName="HORIZO~1.EFT")) returned 1 [0035.441] FindNextFileW (in: hFindFile=0x5107ae0, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x17dfbf00, ftCreationTime.dwHighDateTime=0x1cbded9, ftLastAccessTime.dwLowDateTime=0xe5b584a0, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0x17dfbf00, ftLastWriteTime.dwHighDateTime=0x1cbded9, nFileSizeHigh=0x0, nFileSizeLow=0x9a7a, dwReserved0=0x0, dwReserved1=0x0, cFileName="Median.eftx", cAlternateFileName="MEDIAN~1.EFT")) returned 1 [0035.441] FindNextFileW (in: hFindFile=0x5107ae0, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1b734600, ftCreationTime.dwHighDateTime=0x1cbded9, ftLastAccessTime.dwLowDateTime=0xe5b584a0, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0x1b734600, ftLastWriteTime.dwHighDateTime=0x1cbded9, nFileSizeHigh=0x0, nFileSizeLow=0x5e35, dwReserved0=0x0, dwReserved1=0x0, cFileName="Metro.eftx", cAlternateFileName="METRO~1.EFT")) returned 1 [0035.441] FindNextFileW (in: hFindFile=0x5107ae0, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1dd5a000, ftCreationTime.dwHighDateTime=0x1cbded9, ftLastAccessTime.dwLowDateTime=0xe5b7e600, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0x1dd5a000, ftLastWriteTime.dwHighDateTime=0x1cbded9, nFileSizeHigh=0x0, nFileSizeLow=0xa95d, dwReserved0=0x0, dwReserved1=0x0, cFileName="Module.eftx", cAlternateFileName="MODULE~1.EFT")) returned 1 [0035.441] FindNextFileW (in: hFindFile=0x5107ae0, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x80c73700, ftCreationTime.dwHighDateTime=0x1cbded9, ftLastAccessTime.dwLowDateTime=0xe5b7e600, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0x80c73700, ftLastWriteTime.dwHighDateTime=0x1cbded9, nFileSizeHigh=0x0, nFileSizeLow=0x8e301, dwReserved0=0x0, dwReserved1=0x0, cFileName="Newsprint.eftx", cAlternateFileName="NEWSPR~1.EFT")) returned 1 [0035.442] FindNextFileW (in: hFindFile=0x5107ae0, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x21692700, ftCreationTime.dwHighDateTime=0x1cbded9, ftLastAccessTime.dwLowDateTime=0xe5ba4760, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0x21692700, ftLastWriteTime.dwHighDateTime=0x1cbded9, nFileSizeHigh=0x0, nFileSizeLow=0x8059, dwReserved0=0x0, dwReserved1=0x0, cFileName="Opulent.eftx", cAlternateFileName="OPULEN~1.EFT")) returned 1 [0035.442] FindNextFileW (in: hFindFile=0x5107ae0, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x24fcae00, ftCreationTime.dwHighDateTime=0x1cbded9, ftLastAccessTime.dwLowDateTime=0xe5bca8c0, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0x24fcae00, ftLastWriteTime.dwHighDateTime=0x1cbded9, nFileSizeHigh=0x0, nFileSizeLow=0xa8b9, dwReserved0=0x0, dwReserved1=0x0, cFileName="Oriel.eftx", cAlternateFileName="ORIEL~1.EFT")) returned 1 [0035.442] FindNextFileW (in: hFindFile=0x5107ae0, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x28903500, ftCreationTime.dwHighDateTime=0x1cbded9, ftLastAccessTime.dwLowDateTime=0xe5bca8c0, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0x28903500, ftLastWriteTime.dwHighDateTime=0x1cbded9, nFileSizeHigh=0x0, nFileSizeLow=0x9fed, dwReserved0=0x0, dwReserved1=0x0, cFileName="Origin.eftx", cAlternateFileName="ORIGIN~1.EFT")) returned 1 [0035.442] FindNextFileW (in: hFindFile=0x5107ae0, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2c23bc00, ftCreationTime.dwHighDateTime=0x1cbded9, ftLastAccessTime.dwLowDateTime=0xe5bf0a20, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0x2c23bc00, ftLastWriteTime.dwHighDateTime=0x1cbded9, nFileSizeHigh=0x0, nFileSizeLow=0x37d8a, dwReserved0=0x0, dwReserved1=0x0, cFileName="Paper.eftx", cAlternateFileName="PAPER~1.EFT")) returned 1 [0035.442] FindNextFileW (in: hFindFile=0x5107ae0, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x537a8900, ftCreationTime.dwHighDateTime=0x1cbded9, ftLastAccessTime.dwLowDateTime=0xe5c16b80, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0x537a8900, ftLastWriteTime.dwHighDateTime=0x1cbded9, nFileSizeHigh=0x0, nFileSizeLow=0x53af, dwReserved0=0x0, dwReserved1=0x0, cFileName="Perspective.eftx", cAlternateFileName="PERSPE~1.EFT")) returned 1 [0035.442] FindNextFileW (in: hFindFile=0x5107ae0, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x583f3d00, ftCreationTime.dwHighDateTime=0x1cbded9, ftLastAccessTime.dwLowDateTime=0xe5c3cce0, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0x583f3d00, ftLastWriteTime.dwHighDateTime=0x1cbded9, nFileSizeHigh=0x0, nFileSizeLow=0xbef29, dwReserved0=0x0, dwReserved1=0x0, cFileName="Pushpin.eftx", cAlternateFileName="PUSHPI~1.EFT")) returned 1 [0035.442] FindNextFileW (in: hFindFile=0x5107ae0, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x845abe00, ftCreationTime.dwHighDateTime=0x1cbded9, ftLastAccessTime.dwLowDateTime=0xe5c62e40, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0x845abe00, ftLastWriteTime.dwHighDateTime=0x1cbded9, nFileSizeHigh=0x0, nFileSizeLow=0x6c8d, dwReserved0=0x0, dwReserved1=0x0, cFileName="Slipstream.eftx", cAlternateFileName="SLIPST~1.EFT")) returned 1 [0035.442] FindNextFileW (in: hFindFile=0x5107ae0, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2e861600, ftCreationTime.dwHighDateTime=0x1cbded9, ftLastAccessTime.dwLowDateTime=0xe5c62e40, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0x2e861600, ftLastWriteTime.dwHighDateTime=0x1cbded9, nFileSizeHigh=0x0, nFileSizeLow=0x6c85, dwReserved0=0x0, dwReserved1=0x0, cFileName="Solstice.eftx", cAlternateFileName="SOLSTI~1.EFT")) returned 1 [0035.443] FindNextFileW (in: hFindFile=0x5107ae0, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x32199d00, ftCreationTime.dwHighDateTime=0x1cbded9, ftLastAccessTime.dwLowDateTime=0xe5c62e40, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0x32199d00, ftLastWriteTime.dwHighDateTime=0x1cbded9, nFileSizeHigh=0x0, nFileSizeLow=0x5c8c, dwReserved0=0x0, dwReserved1=0x0, cFileName="Technic.eftx", cAlternateFileName="TECHNI~1.EFT")) returned 1 [0035.443] FindNextFileW (in: hFindFile=0x5107ae0, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5bd2c400, ftCreationTime.dwHighDateTime=0x1cbded9, ftLastAccessTime.dwLowDateTime=0xe5c88fa0, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0x5bd2c400, ftLastWriteTime.dwHighDateTime=0x1cbded9, nFileSizeHigh=0x0, nFileSizeLow=0xa14f, dwReserved0=0x0, dwReserved1=0x0, cFileName="Thatch.eftx", cAlternateFileName="THATCH~1.EFT")) returned 1 [0035.443] FindNextFileW (in: hFindFile=0x5107ae0, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x35ad2400, ftCreationTime.dwHighDateTime=0x1cbded9, ftLastAccessTime.dwLowDateTime=0xe5c88fa0, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0x35ad2400, ftLastWriteTime.dwHighDateTime=0x1cbded9, nFileSizeHigh=0x0, nFileSizeLow=0x1fb84, dwReserved0=0x0, dwReserved1=0x0, cFileName="Trek.eftx", cAlternateFileName="TREK~1.EFT")) returned 1 [0035.443] FindNextFileW (in: hFindFile=0x5107ae0, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3940ab00, ftCreationTime.dwHighDateTime=0x1cbded9, ftLastAccessTime.dwLowDateTime=0xe5caf100, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0x3940ab00, ftLastWriteTime.dwHighDateTime=0x1cbded9, nFileSizeHigh=0x0, nFileSizeLow=0x4c9b, dwReserved0=0x0, dwReserved1=0x0, cFileName="Urban.eftx", cAlternateFileName="URBAN~1.EFT")) returned 1 [0035.443] FindNextFileW (in: hFindFile=0x5107ae0, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3cd43200, ftCreationTime.dwHighDateTime=0x1cbded9, ftLastAccessTime.dwLowDateTime=0xe5caf100, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0x3cd43200, ftLastWriteTime.dwHighDateTime=0x1cbded9, nFileSizeHigh=0x0, nFileSizeLow=0x79f8, dwReserved0=0x0, dwReserved1=0x0, cFileName="Verve.eftx", cAlternateFileName="VERVE~1.EFT")) returned 1 [0035.443] FindNextFileW (in: hFindFile=0x5107ae0, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5f664b00, ftCreationTime.dwHighDateTime=0x1cbded9, ftLastAccessTime.dwLowDateTime=0xe5caf100, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0x5f664b00, ftLastWriteTime.dwHighDateTime=0x1cbded9, nFileSizeHigh=0x0, nFileSizeLow=0x1b778, dwReserved0=0x0, dwReserved1=0x0, cFileName="Waveform.eftx", cAlternateFileName="WAVEFO~1.EFT")) returned 1 [0035.444] FindNextFileW (in: hFindFile=0x5107ae0, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0035.444] FindClose (in: hFindFile=0x5107ae0 | out: hFindFile=0x5107ae0) returned 1 [0035.445] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e77c) returned 1 [0035.445] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e788) returned 1 [0035.445] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e7bc) returned 1 [0035.445] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Effects", nBufferLength=0x105, lpBuffer=0x31e2c4, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Effects", lpFilePart=0x0) returned 0x42 [0035.445] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Effects\\", nBufferLength=0x105, lpBuffer=0x31e298, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Effects\\", lpFilePart=0x0) returned 0x43 [0035.445] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Effects\\*", lpFindFileData=0x31e4e4 | out: lpFindFileData=0x31e4e4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5127f1f0, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0xe5caf100, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0xe5caf100, ftLastWriteTime.dwHighDateTime=0x1d305f1, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5107ae0 [0035.446] FindNextFileW (in: hFindFile=0x5107ae0, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5127f1f0, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0xe5caf100, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0xe5caf100, ftLastWriteTime.dwHighDateTime=0x1d305f1, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0035.446] FindNextFileW (in: hFindFile=0x5107ae0, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x61c8a500, ftCreationTime.dwHighDateTime=0x1cbded9, ftLastAccessTime.dwLowDateTime=0xe591d000, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0x61c8a500, ftLastWriteTime.dwHighDateTime=0x1cbded9, nFileSizeHigh=0x0, nFileSizeLow=0x5261, dwReserved0=0x0, dwReserved1=0x0, cFileName="Adjacency.eftx", cAlternateFileName="ADJACE~1.EFT")) returned 1 [0035.446] FindNextFileW (in: hFindFile=0x5107ae0, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x655c2c00, ftCreationTime.dwHighDateTime=0x1cbded9, ftLastAccessTime.dwLowDateTime=0xe5943160, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0x655c2c00, ftLastWriteTime.dwHighDateTime=0x1cbded9, nFileSizeHigh=0x0, nFileSizeLow=0x6ae5, dwReserved0=0x0, dwReserved1=0x0, cFileName="Angles.eftx", cAlternateFileName="ANGLES~1.EFT")) returned 1 [0035.447] FindNextFileW (in: hFindFile=0x5107ae0, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x83b00, ftCreationTime.dwHighDateTime=0x1cbded9, ftLastAccessTime.dwLowDateTime=0xe5943160, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0x83b00, ftLastWriteTime.dwHighDateTime=0x1cbded9, nFileSizeHigh=0x0, nFileSizeLow=0x354c6, dwReserved0=0x0, dwReserved1=0x0, cFileName="Apex.eftx", cAlternateFileName="APEX~1.EFT")) returned 1 [0035.447] FindNextFileW (in: hFindFile=0x5107ae0, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3f368c00, ftCreationTime.dwHighDateTime=0x1cbded9, ftLastAccessTime.dwLowDateTime=0xe59692c0, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0x3f368c00, ftLastWriteTime.dwHighDateTime=0x1cbded9, nFileSizeHigh=0x0, nFileSizeLow=0xbf81, dwReserved0=0x0, dwReserved1=0x0, cFileName="Apothecary.eftx", cAlternateFileName="APOTHE~1.EFT")) returned 1 [0035.447] FindNextFileW (in: hFindFile=0x5107ae0, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x39bc200, ftCreationTime.dwHighDateTime=0x1cbded9, ftLastAccessTime.dwLowDateTime=0xe59692c0, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0x39bc200, ftLastWriteTime.dwHighDateTime=0x1cbded9, nFileSizeHigh=0x0, nFileSizeLow=0x581a, dwReserved0=0x0, dwReserved1=0x0, cFileName="Aspect.eftx", cAlternateFileName="ASPECT~1.EFT")) returned 1 [0035.447] FindNextFileW (in: hFindFile=0x5107ae0, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x42ca1300, ftCreationTime.dwHighDateTime=0x1cbded9, ftLastAccessTime.dwLowDateTime=0xe598f420, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0x42ca1300, ftLastWriteTime.dwHighDateTime=0x1cbded9, nFileSizeHigh=0x0, nFileSizeLow=0x696d, dwReserved0=0x0, dwReserved1=0x0, cFileName="Austin.eftx", cAlternateFileName="AUSTIN~1.EFT")) returned 1 [0035.447] FindNextFileW (in: hFindFile=0x5107ae0, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x68efb300, ftCreationTime.dwHighDateTime=0x1cbded9, ftLastAccessTime.dwLowDateTime=0xe598f420, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0x68efb300, ftLastWriteTime.dwHighDateTime=0x1cbded9, nFileSizeHigh=0x0, nFileSizeLow=0x96e87, dwReserved0=0x0, dwReserved1=0x0, cFileName="Black Tie.eftx", cAlternateFileName="BLACKT~1.EFT")) returned 1 [0035.447] FindNextFileW (in: hFindFile=0x5107ae0, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x72f4900, ftCreationTime.dwHighDateTime=0x1cbded9, ftLastAccessTime.dwLowDateTime=0xe59b5580, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0x72f4900, ftLastWriteTime.dwHighDateTime=0x1cbded9, nFileSizeHigh=0x0, nFileSizeLow=0xa7a5, dwReserved0=0x0, dwReserved1=0x0, cFileName="Civic.eftx", cAlternateFileName="CIVIC~1.EFT")) returned 1 [0035.448] FindNextFileW (in: hFindFile=0x5107ae0, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x465d9a00, ftCreationTime.dwHighDateTime=0x1cbded9, ftLastAccessTime.dwLowDateTime=0xe59db6e0, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0x465d9a00, ftLastWriteTime.dwHighDateTime=0x1cbded9, nFileSizeHigh=0x0, nFileSizeLow=0x8032, dwReserved0=0x0, dwReserved1=0x0, cFileName="Clarity.eftx", cAlternateFileName="CLARIT~1.EFT")) returned 1 [0035.448] FindNextFileW (in: hFindFile=0x5107ae0, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6db46700, ftCreationTime.dwHighDateTime=0x1cbded9, ftLastAccessTime.dwLowDateTime=0xe5a01840, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0x6db46700, ftLastWriteTime.dwHighDateTime=0x1cbded9, nFileSizeHigh=0x0, nFileSizeLow=0x825e4, dwReserved0=0x0, dwReserved1=0x0, cFileName="Composite.eftx", cAlternateFileName="COMPOS~1.EFT")) returned 1 [0035.448] FindNextFileW (in: hFindFile=0x5107ae0, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xac2d000, ftCreationTime.dwHighDateTime=0x1cbded9, ftLastAccessTime.dwLowDateTime=0xe5a279a0, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0xac2d000, ftLastWriteTime.dwHighDateTime=0x1cbded9, nFileSizeHigh=0x0, nFileSizeLow=0x5791, dwReserved0=0x0, dwReserved1=0x0, cFileName="Concourse.eftx", cAlternateFileName="CONCOU~1.EFT")) returned 1 [0035.448] FindNextFileW (in: hFindFile=0x5107ae0, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x72791b00, ftCreationTime.dwHighDateTime=0x1cbded9, ftLastAccessTime.dwLowDateTime=0xe5a4db00, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0x72791b00, ftLastWriteTime.dwHighDateTime=0x1cbded9, nFileSizeHigh=0x0, nFileSizeLow=0x1e0721, dwReserved0=0x0, dwReserved1=0x0, cFileName="Couture.eftx", cAlternateFileName="COUTUR~1.EFT")) returned 1 [0035.448] FindNextFileW (in: hFindFile=0x5107ae0, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x760ca200, ftCreationTime.dwHighDateTime=0x1cbded9, ftLastAccessTime.dwLowDateTime=0xe5a99dc0, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0x760ca200, ftLastWriteTime.dwHighDateTime=0x1cbded9, nFileSizeHigh=0x0, nFileSizeLow=0x4caa1, dwReserved0=0x0, dwReserved1=0x0, cFileName="Elemental.eftx", cAlternateFileName="ELEMEN~1.EFT")) returned 1 [0035.448] FindNextFileW (in: hFindFile=0x5107ae0, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd252a00, ftCreationTime.dwHighDateTime=0x1cbded9, ftLastAccessTime.dwLowDateTime=0xe5abff20, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0xd252a00, ftLastWriteTime.dwHighDateTime=0x1cbded9, nFileSizeHigh=0x0, nFileSizeLow=0x6023, dwReserved0=0x0, dwReserved1=0x0, cFileName="Equity.eftx", cAlternateFileName="EQUITY~1.EFT")) returned 1 [0035.448] FindNextFileW (in: hFindFile=0x5107ae0, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x49f12100, ftCreationTime.dwHighDateTime=0x1cbded9, ftLastAccessTime.dwLowDateTime=0xe5abff20, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0x49f12100, ftLastWriteTime.dwHighDateTime=0x1cbded9, nFileSizeHigh=0x0, nFileSizeLow=0x3fde, dwReserved0=0x0, dwReserved1=0x0, cFileName="Essential.eftx", cAlternateFileName="ESSENT~1.EFT")) returned 1 [0035.449] FindNextFileW (in: hFindFile=0x5107ae0, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x79a02900, ftCreationTime.dwHighDateTime=0x1cbded9, ftLastAccessTime.dwLowDateTime=0xe5abff20, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0x79a02900, ftLastWriteTime.dwHighDateTime=0x1cbded9, nFileSizeHigh=0x0, nFileSizeLow=0x52a4, dwReserved0=0x0, dwReserved1=0x0, cFileName="Executive.eftx", cAlternateFileName="EXECUT~1.EFT")) returned 1 [0035.449] FindNextFileW (in: hFindFile=0x5107ae0, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x144c3800, ftCreationTime.dwHighDateTime=0x1cbded9, ftLastAccessTime.dwLowDateTime=0xe5ae6080, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0x144c3800, ftLastWriteTime.dwHighDateTime=0x1cbded9, nFileSizeHigh=0x0, nFileSizeLow=0x6818, dwReserved0=0x0, dwReserved1=0x0, cFileName="Flow.eftx", cAlternateFileName="FLOW~1.EFT")) returned 1 [0035.449] FindNextFileW (in: hFindFile=0x5107ae0, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x10b8b100, ftCreationTime.dwHighDateTime=0x1cbded9, ftLastAccessTime.dwLowDateTime=0xe5b0c1e0, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0x10b8b100, ftLastWriteTime.dwHighDateTime=0x1cbded9, nFileSizeHigh=0x0, nFileSizeLow=0x4732, dwReserved0=0x0, dwReserved1=0x0, cFileName="Foundry.eftx", cAlternateFileName="FOUNDR~1.EFT")) returned 1 [0035.449] FindNextFileW (in: hFindFile=0x5107ae0, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4d84a800, ftCreationTime.dwHighDateTime=0x1cbded9, ftLastAccessTime.dwLowDateTime=0xe5b0c1e0, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0x4d84a800, ftLastWriteTime.dwHighDateTime=0x1cbded9, nFileSizeHigh=0x0, nFileSizeLow=0x48cf, dwReserved0=0x0, dwReserved1=0x0, cFileName="Grid.eftx", cAlternateFileName="GRID~1.EFT")) returned 1 [0035.449] FindNextFileW (in: hFindFile=0x5107ae0, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x51182f00, ftCreationTime.dwHighDateTime=0x1cbded9, ftLastAccessTime.dwLowDateTime=0xe5b32340, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0x51182f00, ftLastWriteTime.dwHighDateTime=0x1cbded9, nFileSizeHigh=0x0, nFileSizeLow=0x559e1, dwReserved0=0x0, dwReserved1=0x0, cFileName="Hardcover.eftx", cAlternateFileName="HARDCO~1.EFT")) returned 1 [0035.449] FindNextFileW (in: hFindFile=0x5107ae0, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7d33b000, ftCreationTime.dwHighDateTime=0x1cbded9, ftLastAccessTime.dwLowDateTime=0xe5b32340, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0x7d33b000, ftLastWriteTime.dwHighDateTime=0x1cbded9, nFileSizeHigh=0x0, nFileSizeLow=0x33892, dwReserved0=0x0, dwReserved1=0x0, cFileName="Horizon.eftx", cAlternateFileName="HORIZO~1.EFT")) returned 1 [0035.449] FindNextFileW (in: hFindFile=0x5107ae0, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x17dfbf00, ftCreationTime.dwHighDateTime=0x1cbded9, ftLastAccessTime.dwLowDateTime=0xe5b584a0, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0x17dfbf00, ftLastWriteTime.dwHighDateTime=0x1cbded9, nFileSizeHigh=0x0, nFileSizeLow=0x9a7a, dwReserved0=0x0, dwReserved1=0x0, cFileName="Median.eftx", cAlternateFileName="MEDIAN~1.EFT")) returned 1 [0035.450] FindNextFileW (in: hFindFile=0x5107ae0, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1b734600, ftCreationTime.dwHighDateTime=0x1cbded9, ftLastAccessTime.dwLowDateTime=0xe5b584a0, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0x1b734600, ftLastWriteTime.dwHighDateTime=0x1cbded9, nFileSizeHigh=0x0, nFileSizeLow=0x5e35, dwReserved0=0x0, dwReserved1=0x0, cFileName="Metro.eftx", cAlternateFileName="METRO~1.EFT")) returned 1 [0035.450] FindNextFileW (in: hFindFile=0x5107ae0, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1dd5a000, ftCreationTime.dwHighDateTime=0x1cbded9, ftLastAccessTime.dwLowDateTime=0xe5b7e600, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0x1dd5a000, ftLastWriteTime.dwHighDateTime=0x1cbded9, nFileSizeHigh=0x0, nFileSizeLow=0xa95d, dwReserved0=0x0, dwReserved1=0x0, cFileName="Module.eftx", cAlternateFileName="MODULE~1.EFT")) returned 1 [0035.450] FindNextFileW (in: hFindFile=0x5107ae0, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x80c73700, ftCreationTime.dwHighDateTime=0x1cbded9, ftLastAccessTime.dwLowDateTime=0xe5b7e600, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0x80c73700, ftLastWriteTime.dwHighDateTime=0x1cbded9, nFileSizeHigh=0x0, nFileSizeLow=0x8e301, dwReserved0=0x0, dwReserved1=0x0, cFileName="Newsprint.eftx", cAlternateFileName="NEWSPR~1.EFT")) returned 1 [0035.450] FindNextFileW (in: hFindFile=0x5107ae0, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x21692700, ftCreationTime.dwHighDateTime=0x1cbded9, ftLastAccessTime.dwLowDateTime=0xe5ba4760, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0x21692700, ftLastWriteTime.dwHighDateTime=0x1cbded9, nFileSizeHigh=0x0, nFileSizeLow=0x8059, dwReserved0=0x0, dwReserved1=0x0, cFileName="Opulent.eftx", cAlternateFileName="OPULEN~1.EFT")) returned 1 [0035.450] FindNextFileW (in: hFindFile=0x5107ae0, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x24fcae00, ftCreationTime.dwHighDateTime=0x1cbded9, ftLastAccessTime.dwLowDateTime=0xe5bca8c0, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0x24fcae00, ftLastWriteTime.dwHighDateTime=0x1cbded9, nFileSizeHigh=0x0, nFileSizeLow=0xa8b9, dwReserved0=0x0, dwReserved1=0x0, cFileName="Oriel.eftx", cAlternateFileName="ORIEL~1.EFT")) returned 1 [0035.450] FindNextFileW (in: hFindFile=0x5107ae0, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x28903500, ftCreationTime.dwHighDateTime=0x1cbded9, ftLastAccessTime.dwLowDateTime=0xe5bca8c0, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0x28903500, ftLastWriteTime.dwHighDateTime=0x1cbded9, nFileSizeHigh=0x0, nFileSizeLow=0x9fed, dwReserved0=0x0, dwReserved1=0x0, cFileName="Origin.eftx", cAlternateFileName="ORIGIN~1.EFT")) returned 1 [0035.451] FindNextFileW (in: hFindFile=0x5107ae0, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2c23bc00, ftCreationTime.dwHighDateTime=0x1cbded9, ftLastAccessTime.dwLowDateTime=0xe5bf0a20, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0x2c23bc00, ftLastWriteTime.dwHighDateTime=0x1cbded9, nFileSizeHigh=0x0, nFileSizeLow=0x37d8a, dwReserved0=0x0, dwReserved1=0x0, cFileName="Paper.eftx", cAlternateFileName="PAPER~1.EFT")) returned 1 [0035.451] FindNextFileW (in: hFindFile=0x5107ae0, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x537a8900, ftCreationTime.dwHighDateTime=0x1cbded9, ftLastAccessTime.dwLowDateTime=0xe5c16b80, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0x537a8900, ftLastWriteTime.dwHighDateTime=0x1cbded9, nFileSizeHigh=0x0, nFileSizeLow=0x53af, dwReserved0=0x0, dwReserved1=0x0, cFileName="Perspective.eftx", cAlternateFileName="PERSPE~1.EFT")) returned 1 [0035.451] FindNextFileW (in: hFindFile=0x5107ae0, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x583f3d00, ftCreationTime.dwHighDateTime=0x1cbded9, ftLastAccessTime.dwLowDateTime=0xe5c3cce0, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0x583f3d00, ftLastWriteTime.dwHighDateTime=0x1cbded9, nFileSizeHigh=0x0, nFileSizeLow=0xbef29, dwReserved0=0x0, dwReserved1=0x0, cFileName="Pushpin.eftx", cAlternateFileName="PUSHPI~1.EFT")) returned 1 [0035.451] FindNextFileW (in: hFindFile=0x5107ae0, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x845abe00, ftCreationTime.dwHighDateTime=0x1cbded9, ftLastAccessTime.dwLowDateTime=0xe5c62e40, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0x845abe00, ftLastWriteTime.dwHighDateTime=0x1cbded9, nFileSizeHigh=0x0, nFileSizeLow=0x6c8d, dwReserved0=0x0, dwReserved1=0x0, cFileName="Slipstream.eftx", cAlternateFileName="SLIPST~1.EFT")) returned 1 [0035.451] FindNextFileW (in: hFindFile=0x5107ae0, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2e861600, ftCreationTime.dwHighDateTime=0x1cbded9, ftLastAccessTime.dwLowDateTime=0xe5c62e40, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0x2e861600, ftLastWriteTime.dwHighDateTime=0x1cbded9, nFileSizeHigh=0x0, nFileSizeLow=0x6c85, dwReserved0=0x0, dwReserved1=0x0, cFileName="Solstice.eftx", cAlternateFileName="SOLSTI~1.EFT")) returned 1 [0035.451] FindNextFileW (in: hFindFile=0x5107ae0, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x32199d00, ftCreationTime.dwHighDateTime=0x1cbded9, ftLastAccessTime.dwLowDateTime=0xe5c62e40, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0x32199d00, ftLastWriteTime.dwHighDateTime=0x1cbded9, nFileSizeHigh=0x0, nFileSizeLow=0x5c8c, dwReserved0=0x0, dwReserved1=0x0, cFileName="Technic.eftx", cAlternateFileName="TECHNI~1.EFT")) returned 1 [0035.452] FindNextFileW (in: hFindFile=0x5107ae0, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5bd2c400, ftCreationTime.dwHighDateTime=0x1cbded9, ftLastAccessTime.dwLowDateTime=0xe5c88fa0, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0x5bd2c400, ftLastWriteTime.dwHighDateTime=0x1cbded9, nFileSizeHigh=0x0, nFileSizeLow=0xa14f, dwReserved0=0x0, dwReserved1=0x0, cFileName="Thatch.eftx", cAlternateFileName="THATCH~1.EFT")) returned 1 [0035.452] FindNextFileW (in: hFindFile=0x5107ae0, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x35ad2400, ftCreationTime.dwHighDateTime=0x1cbded9, ftLastAccessTime.dwLowDateTime=0xe5c88fa0, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0x35ad2400, ftLastWriteTime.dwHighDateTime=0x1cbded9, nFileSizeHigh=0x0, nFileSizeLow=0x1fb84, dwReserved0=0x0, dwReserved1=0x0, cFileName="Trek.eftx", cAlternateFileName="TREK~1.EFT")) returned 1 [0035.452] FindNextFileW (in: hFindFile=0x5107ae0, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3940ab00, ftCreationTime.dwHighDateTime=0x1cbded9, ftLastAccessTime.dwLowDateTime=0xe5caf100, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0x3940ab00, ftLastWriteTime.dwHighDateTime=0x1cbded9, nFileSizeHigh=0x0, nFileSizeLow=0x4c9b, dwReserved0=0x0, dwReserved1=0x0, cFileName="Urban.eftx", cAlternateFileName="URBAN~1.EFT")) returned 1 [0035.452] FindNextFileW (in: hFindFile=0x5107ae0, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3cd43200, ftCreationTime.dwHighDateTime=0x1cbded9, ftLastAccessTime.dwLowDateTime=0xe5caf100, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0x3cd43200, ftLastWriteTime.dwHighDateTime=0x1cbded9, nFileSizeHigh=0x0, nFileSizeLow=0x79f8, dwReserved0=0x0, dwReserved1=0x0, cFileName="Verve.eftx", cAlternateFileName="VERVE~1.EFT")) returned 1 [0035.452] FindNextFileW (in: hFindFile=0x5107ae0, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5f664b00, ftCreationTime.dwHighDateTime=0x1cbded9, ftLastAccessTime.dwLowDateTime=0xe5caf100, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0x5f664b00, ftLastWriteTime.dwHighDateTime=0x1cbded9, nFileSizeHigh=0x0, nFileSizeLow=0x1b778, dwReserved0=0x0, dwReserved1=0x0, cFileName="Waveform.eftx", cAlternateFileName="WAVEFO~1.EFT")) returned 1 [0035.452] FindNextFileW (in: hFindFile=0x5107ae0, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5f664b00, ftCreationTime.dwHighDateTime=0x1cbded9, ftLastAccessTime.dwLowDateTime=0xe5caf100, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0x5f664b00, ftLastWriteTime.dwHighDateTime=0x1cbded9, nFileSizeHigh=0x0, nFileSizeLow=0x1b778, dwReserved0=0x0, dwReserved1=0x0, cFileName="Waveform.eftx", cAlternateFileName="WAVEFO~1.EFT")) returned 0 [0035.453] FindClose (in: hFindFile=0x5107ae0 | out: hFindFile=0x5107ae0) returned 1 [0035.453] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e77c) returned 1 [0035.453] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e788) returned 1 [0035.453] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e7bc) returned 1 [0035.454] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Fonts", nBufferLength=0x105, lpBuffer=0x31e2c4, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Fonts", lpFilePart=0x0) returned 0x40 [0035.454] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Fonts\\", nBufferLength=0x105, lpBuffer=0x31e298, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Fonts\\", lpFilePart=0x0) returned 0x41 [0035.454] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Fonts\\*", lpFindFileData=0x31e4e4 | out: lpFindFileData=0x31e4e4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x528a9ed0, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x6187c750, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x6187c750, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5107ae0 [0035.455] FindNextFileW (in: hFindFile=0x5107ae0, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x528a9ed0, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x6187c750, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x6187c750, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0035.456] FindNextFileW (in: hFindFile=0x5107ae0, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xccc5300, ftCreationTime.dwHighDateTime=0x1cac1e1, ftLastAccessTime.dwLowDateTime=0x61830490, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xccc5300, ftLastWriteTime.dwHighDateTime=0x1cac1e1, nFileSizeHigh=0x0, nFileSizeLow=0xe19, dwReserved0=0x0, dwReserved1=0x0, cFileName="Adjacency.xml", cAlternateFileName="ADJACE~1.XML")) returned 1 [0035.456] FindNextFileW (in: hFindFile=0x5107ae0, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xdfd8000, ftCreationTime.dwHighDateTime=0x1cac1e1, ftLastAccessTime.dwLowDateTime=0x528a9ed0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xdfd8000, ftLastWriteTime.dwHighDateTime=0x1cac1e1, nFileSizeHigh=0x0, nFileSizeLow=0xe2a, dwReserved0=0x0, dwReserved1=0x0, cFileName="Angles.xml", cAlternateFileName="")) returned 1 [0035.456] FindNextFileW (in: hFindFile=0x5107ae0, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xeb6b6700, ftCreationTime.dwHighDateTime=0x1cac1e0, ftLastAccessTime.dwLowDateTime=0x61830490, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xeb6b6700, ftLastWriteTime.dwHighDateTime=0x1cac1e0, nFileSizeHigh=0x0, nFileSizeLow=0xeee, dwReserved0=0x0, dwReserved1=0x0, cFileName="Apex.xml", cAlternateFileName="")) returned 1 [0035.456] FindNextFileW (in: hFindFile=0x5107ae0, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe09100, ftCreationTime.dwHighDateTime=0x1cac1e1, ftLastAccessTime.dwLowDateTime=0x528a9ed0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xe09100, ftLastWriteTime.dwHighDateTime=0x1cac1e1, nFileSizeHigh=0x0, nFileSizeLow=0xe1f, dwReserved0=0x0, dwReserved1=0x0, cFileName="Apothecary.xml", cAlternateFileName="APOTHE~1.XML")) returned 1 [0035.456] FindNextFileW (in: hFindFile=0x5107ae0, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xedcdc100, ftCreationTime.dwHighDateTime=0x1cac1e0, ftLastAccessTime.dwLowDateTime=0x61830490, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xedcdc100, ftLastWriteTime.dwHighDateTime=0x1cac1e0, nFileSizeHigh=0x0, nFileSizeLow=0xe0b, dwReserved0=0x0, dwReserved1=0x0, cFileName="Aspect.xml", cAlternateFileName="")) returned 1 [0035.456] FindNextFileW (in: hFindFile=0x5107ae0, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x211be00, ftCreationTime.dwHighDateTime=0x1cac1e1, ftLastAccessTime.dwLowDateTime=0x528a9ed0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x211be00, ftLastWriteTime.dwHighDateTime=0x1cac1e1, nFileSizeHigh=0x0, nFileSizeLow=0xe16, dwReserved0=0x0, dwReserved1=0x0, cFileName="Austin.xml", cAlternateFileName="")) returned 1 [0035.456] FindNextFileW (in: hFindFile=0x5107ae0, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf2ead00, ftCreationTime.dwHighDateTime=0x1cac1e1, ftLastAccessTime.dwLowDateTime=0x528a9ed0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xf2ead00, ftLastWriteTime.dwHighDateTime=0x1cac1e1, nFileSizeHigh=0x0, nFileSizeLow=0xefb, dwReserved0=0x0, dwReserved1=0x0, cFileName="Black Tie.xml", cAlternateFileName="BLACKT~1.XML")) returned 1 [0035.457] FindNextFileW (in: hFindFile=0x5107ae0, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xedcdc100, ftCreationTime.dwHighDateTime=0x1cac1e0, ftLastAccessTime.dwLowDateTime=0x618565f0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xedcdc100, ftLastWriteTime.dwHighDateTime=0x1cac1e0, nFileSizeHigh=0x0, nFileSizeLow=0xe1f, dwReserved0=0x0, dwReserved1=0x0, cFileName="Civic.xml", cAlternateFileName="")) returned 1 [0035.457] FindNextFileW (in: hFindFile=0x5107ae0, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x342eb00, ftCreationTime.dwHighDateTime=0x1cac1e1, ftLastAccessTime.dwLowDateTime=0x618565f0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x342eb00, ftLastWriteTime.dwHighDateTime=0x1cac1e1, nFileSizeHigh=0x0, nFileSizeLow=0xe0f, dwReserved0=0x0, dwReserved1=0x0, cFileName="Clarity.xml", cAlternateFileName="")) returned 1 [0035.457] FindNextFileW (in: hFindFile=0x5107ae0, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x11910700, ftCreationTime.dwHighDateTime=0x1cac1e1, ftLastAccessTime.dwLowDateTime=0x618565f0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x11910700, ftLastWriteTime.dwHighDateTime=0x1cac1e1, nFileSizeHigh=0x0, nFileSizeLow=0xe0e, dwReserved0=0x0, dwReserved1=0x0, cFileName="Composite.xml", cAlternateFileName="COMPOS~1.XML")) returned 1 [0035.457] FindNextFileW (in: hFindFile=0x5107ae0, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xeefeee00, ftCreationTime.dwHighDateTime=0x1cac1e0, ftLastAccessTime.dwLowDateTime=0x618565f0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xeefeee00, ftLastWriteTime.dwHighDateTime=0x1cac1e0, nFileSizeHigh=0x0, nFileSizeLow=0xdc6, dwReserved0=0x0, dwReserved1=0x0, cFileName="Concourse.xml", cAlternateFileName="CONCOU~1.XML")) returned 1 [0035.457] FindNextFileW (in: hFindFile=0x5107ae0, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x13f36100, ftCreationTime.dwHighDateTime=0x1cac1e1, ftLastAccessTime.dwLowDateTime=0x618565f0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x13f36100, ftLastWriteTime.dwHighDateTime=0x1cac1e1, nFileSizeHigh=0x0, nFileSizeLow=0xefc, dwReserved0=0x0, dwReserved1=0x0, cFileName="Couture.xml", cAlternateFileName="")) returned 1 [0035.457] FindNextFileW (in: hFindFile=0x5107ae0, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x15248e00, ftCreationTime.dwHighDateTime=0x1cac1e1, ftLastAccessTime.dwLowDateTime=0x618565f0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x15248e00, ftLastWriteTime.dwHighDateTime=0x1cac1e1, nFileSizeHigh=0x0, nFileSizeLow=0xe48, dwReserved0=0x0, dwReserved1=0x0, cFileName="Elemental.xml", cAlternateFileName="ELEMEN~1.XML")) returned 1 [0035.457] FindNextFileW (in: hFindFile=0x5107ae0, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf0301b00, ftCreationTime.dwHighDateTime=0x1cac1e0, ftLastAccessTime.dwLowDateTime=0x528a9ed0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xf0301b00, ftLastWriteTime.dwHighDateTime=0x1cac1e0, nFileSizeHigh=0x0, nFileSizeLow=0xef5, dwReserved0=0x0, dwReserved1=0x0, cFileName="Equity.xml", cAlternateFileName="")) returned 1 [0035.457] FindNextFileW (in: hFindFile=0x5107ae0, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4741800, ftCreationTime.dwHighDateTime=0x1cac1e1, ftLastAccessTime.dwLowDateTime=0x528a9ed0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x4741800, ftLastWriteTime.dwHighDateTime=0x1cac1e1, nFileSizeHigh=0x0, nFileSizeLow=0xe16, dwReserved0=0x0, dwReserved1=0x0, cFileName="Essential.xml", cAlternateFileName="ESSENT~1.XML")) returned 1 [0035.458] FindNextFileW (in: hFindFile=0x5107ae0, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1655bb00, ftCreationTime.dwHighDateTime=0x1cac1e1, ftLastAccessTime.dwLowDateTime=0x618565f0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x1655bb00, ftLastWriteTime.dwHighDateTime=0x1cac1e1, nFileSizeHigh=0x0, nFileSizeLow=0xe2f, dwReserved0=0x0, dwReserved1=0x0, cFileName="Executive.xml", cAlternateFileName="EXECUT~1.XML")) returned 1 [0035.458] FindNextFileW (in: hFindFile=0x5107ae0, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf2927500, ftCreationTime.dwHighDateTime=0x1cac1e0, ftLastAccessTime.dwLowDateTime=0x618565f0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xf2927500, ftLastWriteTime.dwHighDateTime=0x1cac1e0, nFileSizeHigh=0x0, nFileSizeLow=0xdb5, dwReserved0=0x0, dwReserved1=0x0, cFileName="Flow.xml", cAlternateFileName="")) returned 1 [0035.458] FindNextFileW (in: hFindFile=0x5107ae0, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf1614800, ftCreationTime.dwHighDateTime=0x1cac1e0, ftLastAccessTime.dwLowDateTime=0x618565f0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xf1614800, ftLastWriteTime.dwHighDateTime=0x1cac1e0, nFileSizeHigh=0x0, nFileSizeLow=0xed4, dwReserved0=0x0, dwReserved1=0x0, cFileName="Foundry.xml", cAlternateFileName="")) returned 1 [0035.458] FindNextFileW (in: hFindFile=0x5107ae0, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5a54500, ftCreationTime.dwHighDateTime=0x1cac1e1, ftLastAccessTime.dwLowDateTime=0x528a9ed0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x5a54500, ftLastWriteTime.dwHighDateTime=0x1cac1e1, nFileSizeHigh=0x0, nFileSizeLow=0xe59, dwReserved0=0x0, dwReserved1=0x0, cFileName="Grid.xml", cAlternateFileName="")) returned 1 [0035.458] FindNextFileW (in: hFindFile=0x5107ae0, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6d67200, ftCreationTime.dwHighDateTime=0x1cac1e1, ftLastAccessTime.dwLowDateTime=0x618565f0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x6d67200, ftLastWriteTime.dwHighDateTime=0x1cac1e1, nFileSizeHigh=0x0, nFileSizeLow=0xf09, dwReserved0=0x0, dwReserved1=0x0, cFileName="Hardcover.xml", cAlternateFileName="HARDCO~1.XML")) returned 1 [0035.458] FindNextFileW (in: hFindFile=0x5107ae0, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1786e800, ftCreationTime.dwHighDateTime=0x1cac1e1, ftLastAccessTime.dwLowDateTime=0x528a9ed0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x1786e800, ftLastWriteTime.dwHighDateTime=0x1cac1e1, nFileSizeHigh=0x0, nFileSizeLow=0xe2a, dwReserved0=0x0, dwReserved1=0x0, cFileName="Horizon.xml", cAlternateFileName="")) returned 1 [0035.458] FindNextFileW (in: hFindFile=0x5107ae0, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf3c3a200, ftCreationTime.dwHighDateTime=0x1cac1e0, ftLastAccessTime.dwLowDateTime=0x618565f0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xf3c3a200, ftLastWriteTime.dwHighDateTime=0x1cac1e0, nFileSizeHigh=0x0, nFileSizeLow=0xeed, dwReserved0=0x0, dwReserved1=0x0, cFileName="Median.xml", cAlternateFileName="")) returned 1 [0035.458] FindNextFileW (in: hFindFile=0x5107ae0, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf4f4cf00, ftCreationTime.dwHighDateTime=0x1cac1e0, ftLastAccessTime.dwLowDateTime=0x618565f0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xf4f4cf00, ftLastWriteTime.dwHighDateTime=0x1cac1e0, nFileSizeHigh=0x0, nFileSizeLow=0xe13, dwReserved0=0x0, dwReserved1=0x0, cFileName="Metro.xml", cAlternateFileName="")) returned 1 [0035.458] FindNextFileW (in: hFindFile=0x5107ae0, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf625fc00, ftCreationTime.dwHighDateTime=0x1cac1e0, ftLastAccessTime.dwLowDateTime=0x618565f0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xf625fc00, ftLastWriteTime.dwHighDateTime=0x1cac1e0, nFileSizeHigh=0x0, nFileSizeLow=0xe05, dwReserved0=0x0, dwReserved1=0x0, cFileName="Module.xml", cAlternateFileName="")) returned 1 [0035.459] FindNextFileW (in: hFindFile=0x5107ae0, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x18b81500, ftCreationTime.dwHighDateTime=0x1cac1e1, ftLastAccessTime.dwLowDateTime=0x618565f0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x18b81500, ftLastWriteTime.dwHighDateTime=0x1cac1e1, nFileSizeHigh=0x0, nFileSizeLow=0xe39, dwReserved0=0x0, dwReserved1=0x0, cFileName="Newsprint.xml", cAlternateFileName="NEWSPR~1.XML")) returned 1 [0035.459] FindNextFileW (in: hFindFile=0x5107ae0, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xefe70d00, ftCreationTime.dwHighDateTime=0x1c9b824, ftLastAccessTime.dwLowDateTime=0x528a9ed0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xefe70d00, ftLastWriteTime.dwHighDateTime=0x1c9b824, nFileSizeHigh=0x0, nFileSizeLow=0xe15, dwReserved0=0x0, dwReserved1=0x0, cFileName="Office 2.xml", cAlternateFileName="OFFICE~1.XML")) returned 1 [0035.459] FindNextFileW (in: hFindFile=0x5107ae0, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xefe70d00, ftCreationTime.dwHighDateTime=0x1c9b824, ftLastAccessTime.dwLowDateTime=0x528a9ed0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xefe70d00, ftLastWriteTime.dwHighDateTime=0x1c9b824, nFileSizeHigh=0x0, nFileSizeLow=0xe01, dwReserved0=0x0, dwReserved1=0x0, cFileName="Office Classic 2.xml", cAlternateFileName="OFFICE~3.XML")) returned 1 [0035.459] FindNextFileW (in: hFindFile=0x5107ae0, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xefe70d00, ftCreationTime.dwHighDateTime=0x1c9b824, ftLastAccessTime.dwLowDateTime=0x528a9ed0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xefe70d00, ftLastWriteTime.dwHighDateTime=0x1c9b824, nFileSizeHigh=0x0, nFileSizeLow=0xe20, dwReserved0=0x0, dwReserved1=0x0, cFileName="Office Classic.xml", cAlternateFileName="OFFICE~2.XML")) returned 1 [0035.459] FindNextFileW (in: hFindFile=0x5107ae0, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf7572900, ftCreationTime.dwHighDateTime=0x1cac1e0, ftLastAccessTime.dwLowDateTime=0x618565f0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xf7572900, ftLastWriteTime.dwHighDateTime=0x1cac1e0, nFileSizeHigh=0x0, nFileSizeLow=0xe1d, dwReserved0=0x0, dwReserved1=0x0, cFileName="Opulent.xml", cAlternateFileName="")) returned 1 [0035.459] FindNextFileW (in: hFindFile=0x5107ae0, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf8885600, ftCreationTime.dwHighDateTime=0x1cac1e0, ftLastAccessTime.dwLowDateTime=0x528a9ed0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xf8885600, ftLastWriteTime.dwHighDateTime=0x1cac1e0, nFileSizeHigh=0x0, nFileSizeLow=0xe5a, dwReserved0=0x0, dwReserved1=0x0, cFileName="Oriel.xml", cAlternateFileName="")) returned 1 [0035.460] FindNextFileW (in: hFindFile=0x5107ae0, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf9b98300, ftCreationTime.dwHighDateTime=0x1cac1e0, ftLastAccessTime.dwLowDateTime=0x528a9ed0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xf9b98300, ftLastWriteTime.dwHighDateTime=0x1cac1e0, nFileSizeHigh=0x0, nFileSizeLow=0xeed, dwReserved0=0x0, dwReserved1=0x0, cFileName="Origin.xml", cAlternateFileName="")) returned 1 [0035.460] FindNextFileW (in: hFindFile=0x5107ae0, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xfaeab000, ftCreationTime.dwHighDateTime=0x1cac1e0, ftLastAccessTime.dwLowDateTime=0x528d0030, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xfaeab000, ftLastWriteTime.dwHighDateTime=0x1cac1e0, nFileSizeHigh=0x0, nFileSizeLow=0xe2c, dwReserved0=0x0, dwReserved1=0x0, cFileName="Paper.xml", cAlternateFileName="")) returned 1 [0035.460] FindNextFileW (in: hFindFile=0x5107ae0, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8079f00, ftCreationTime.dwHighDateTime=0x1cac1e1, ftLastAccessTime.dwLowDateTime=0x618565f0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x8079f00, ftLastWriteTime.dwHighDateTime=0x1cac1e1, nFileSizeHigh=0x0, nFileSizeLow=0xe0f, dwReserved0=0x0, dwReserved1=0x0, cFileName="Perspective.xml", cAlternateFileName="PERSPE~1.XML")) returned 1 [0035.460] FindNextFileW (in: hFindFile=0x5107ae0, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x938cc00, ftCreationTime.dwHighDateTime=0x1cac1e1, ftLastAccessTime.dwLowDateTime=0x528d0030, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x938cc00, ftLastWriteTime.dwHighDateTime=0x1cac1e1, nFileSizeHigh=0x0, nFileSizeLow=0xe7f, dwReserved0=0x0, dwReserved1=0x0, cFileName="Pushpin.xml", cAlternateFileName="")) returned 1 [0035.460] FindNextFileW (in: hFindFile=0x5107ae0, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1b1a6f00, ftCreationTime.dwHighDateTime=0x1cac1e1, ftLastAccessTime.dwLowDateTime=0x528d0030, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x1b1a6f00, ftLastWriteTime.dwHighDateTime=0x1cac1e1, nFileSizeHigh=0x0, nFileSizeLow=0xe18, dwReserved0=0x0, dwReserved1=0x0, cFileName="Slipstream.xml", cAlternateFileName="SLIPST~1.XML")) returned 1 [0035.460] FindNextFileW (in: hFindFile=0x5107ae0, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xfc1bdd00, ftCreationTime.dwHighDateTime=0x1cac1e0, ftLastAccessTime.dwLowDateTime=0x618565f0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xfc1bdd00, ftLastWriteTime.dwHighDateTime=0x1cac1e0, nFileSizeHigh=0x0, nFileSizeLow=0xee9, dwReserved0=0x0, dwReserved1=0x0, cFileName="Solstice.xml", cAlternateFileName="")) returned 1 [0035.460] FindNextFileW (in: hFindFile=0x5107ae0, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xfd4d0a00, ftCreationTime.dwHighDateTime=0x1cac1e0, ftLastAccessTime.dwLowDateTime=0x528d0030, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xfd4d0a00, ftLastWriteTime.dwHighDateTime=0x1cac1e0, nFileSizeHigh=0x0, nFileSizeLow=0xe13, dwReserved0=0x0, dwReserved1=0x0, cFileName="Technic.xml", cAlternateFileName="")) returned 1 [0035.460] FindNextFileW (in: hFindFile=0x5107ae0, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa69f900, ftCreationTime.dwHighDateTime=0x1cac1e1, ftLastAccessTime.dwLowDateTime=0x6187c750, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xa69f900, ftLastWriteTime.dwHighDateTime=0x1cac1e1, nFileSizeHigh=0x0, nFileSizeLow=0xeff, dwReserved0=0x0, dwReserved1=0x0, cFileName="Thatch.xml", cAlternateFileName="")) returned 1 [0035.460] FindNextFileW (in: hFindFile=0x5107ae0, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xfd4d0a00, ftCreationTime.dwHighDateTime=0x1cac1e0, ftLastAccessTime.dwLowDateTime=0x528d0030, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xfd4d0a00, ftLastWriteTime.dwHighDateTime=0x1cac1e0, nFileSizeHigh=0x0, nFileSizeLow=0xe20, dwReserved0=0x0, dwReserved1=0x0, cFileName="Trek.xml", cAlternateFileName="")) returned 1 [0035.461] FindNextFileW (in: hFindFile=0x5107ae0, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xfe7e3700, ftCreationTime.dwHighDateTime=0x1cac1e0, ftLastAccessTime.dwLowDateTime=0x528d0030, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xfe7e3700, ftLastWriteTime.dwHighDateTime=0x1cac1e0, nFileSizeHigh=0x0, nFileSizeLow=0xe19, dwReserved0=0x0, dwReserved1=0x0, cFileName="Urban.xml", cAlternateFileName="")) returned 1 [0035.461] FindNextFileW (in: hFindFile=0x5107ae0, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xffaf6400, ftCreationTime.dwHighDateTime=0x1cac1e0, ftLastAccessTime.dwLowDateTime=0x528d0030, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xffaf6400, ftLastWriteTime.dwHighDateTime=0x1cac1e0, nFileSizeHigh=0x0, nFileSizeLow=0xe14, dwReserved0=0x0, dwReserved1=0x0, cFileName="Verve.xml", cAlternateFileName="")) returned 1 [0035.461] FindNextFileW (in: hFindFile=0x5107ae0, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb9b2600, ftCreationTime.dwHighDateTime=0x1cac1e1, ftLastAccessTime.dwLowDateTime=0x528d0030, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xb9b2600, ftLastWriteTime.dwHighDateTime=0x1cac1e1, nFileSizeHigh=0x0, nFileSizeLow=0xdf9, dwReserved0=0x0, dwReserved1=0x0, cFileName="Waveform.xml", cAlternateFileName="")) returned 1 [0035.461] FindNextFileW (in: hFindFile=0x5107ae0, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0035.461] FindClose (in: hFindFile=0x5107ae0 | out: hFindFile=0x5107ae0) returned 1 [0035.461] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e77c) returned 1 [0035.462] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e788) returned 1 [0035.462] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e7bc) returned 1 [0035.462] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Fonts", nBufferLength=0x105, lpBuffer=0x31e2c4, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Fonts", lpFilePart=0x0) returned 0x40 [0035.462] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Fonts\\", nBufferLength=0x105, lpBuffer=0x31e298, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Fonts\\", lpFilePart=0x0) returned 0x41 [0035.462] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Fonts\\*", lpFindFileData=0x31e4e4 | out: lpFindFileData=0x31e4e4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x528a9ed0, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x6187c750, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x6187c750, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5107ae0 [0035.463] FindNextFileW (in: hFindFile=0x5107ae0, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x528a9ed0, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x6187c750, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x6187c750, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0035.463] FindNextFileW (in: hFindFile=0x5107ae0, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xccc5300, ftCreationTime.dwHighDateTime=0x1cac1e1, ftLastAccessTime.dwLowDateTime=0x61830490, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xccc5300, ftLastWriteTime.dwHighDateTime=0x1cac1e1, nFileSizeHigh=0x0, nFileSizeLow=0xe19, dwReserved0=0x0, dwReserved1=0x0, cFileName="Adjacency.xml", cAlternateFileName="ADJACE~1.XML")) returned 1 [0035.463] FindNextFileW (in: hFindFile=0x5107ae0, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xdfd8000, ftCreationTime.dwHighDateTime=0x1cac1e1, ftLastAccessTime.dwLowDateTime=0x528a9ed0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xdfd8000, ftLastWriteTime.dwHighDateTime=0x1cac1e1, nFileSizeHigh=0x0, nFileSizeLow=0xe2a, dwReserved0=0x0, dwReserved1=0x0, cFileName="Angles.xml", cAlternateFileName="")) returned 1 [0035.463] FindNextFileW (in: hFindFile=0x5107ae0, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xeb6b6700, ftCreationTime.dwHighDateTime=0x1cac1e0, ftLastAccessTime.dwLowDateTime=0x61830490, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xeb6b6700, ftLastWriteTime.dwHighDateTime=0x1cac1e0, nFileSizeHigh=0x0, nFileSizeLow=0xeee, dwReserved0=0x0, dwReserved1=0x0, cFileName="Apex.xml", cAlternateFileName="")) returned 1 [0035.463] FindNextFileW (in: hFindFile=0x5107ae0, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe09100, ftCreationTime.dwHighDateTime=0x1cac1e1, ftLastAccessTime.dwLowDateTime=0x528a9ed0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xe09100, ftLastWriteTime.dwHighDateTime=0x1cac1e1, nFileSizeHigh=0x0, nFileSizeLow=0xe1f, dwReserved0=0x0, dwReserved1=0x0, cFileName="Apothecary.xml", cAlternateFileName="APOTHE~1.XML")) returned 1 [0035.463] FindNextFileW (in: hFindFile=0x5107ae0, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xedcdc100, ftCreationTime.dwHighDateTime=0x1cac1e0, ftLastAccessTime.dwLowDateTime=0x61830490, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xedcdc100, ftLastWriteTime.dwHighDateTime=0x1cac1e0, nFileSizeHigh=0x0, nFileSizeLow=0xe0b, dwReserved0=0x0, dwReserved1=0x0, cFileName="Aspect.xml", cAlternateFileName="")) returned 1 [0035.463] FindNextFileW (in: hFindFile=0x5107ae0, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x211be00, ftCreationTime.dwHighDateTime=0x1cac1e1, ftLastAccessTime.dwLowDateTime=0x528a9ed0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x211be00, ftLastWriteTime.dwHighDateTime=0x1cac1e1, nFileSizeHigh=0x0, nFileSizeLow=0xe16, dwReserved0=0x0, dwReserved1=0x0, cFileName="Austin.xml", cAlternateFileName="")) returned 1 [0035.463] FindNextFileW (in: hFindFile=0x5107ae0, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf2ead00, ftCreationTime.dwHighDateTime=0x1cac1e1, ftLastAccessTime.dwLowDateTime=0x528a9ed0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xf2ead00, ftLastWriteTime.dwHighDateTime=0x1cac1e1, nFileSizeHigh=0x0, nFileSizeLow=0xefb, dwReserved0=0x0, dwReserved1=0x0, cFileName="Black Tie.xml", cAlternateFileName="BLACKT~1.XML")) returned 1 [0035.463] FindNextFileW (in: hFindFile=0x5107ae0, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xedcdc100, ftCreationTime.dwHighDateTime=0x1cac1e0, ftLastAccessTime.dwLowDateTime=0x618565f0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xedcdc100, ftLastWriteTime.dwHighDateTime=0x1cac1e0, nFileSizeHigh=0x0, nFileSizeLow=0xe1f, dwReserved0=0x0, dwReserved1=0x0, cFileName="Civic.xml", cAlternateFileName="")) returned 1 [0035.463] FindNextFileW (in: hFindFile=0x5107ae0, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x342eb00, ftCreationTime.dwHighDateTime=0x1cac1e1, ftLastAccessTime.dwLowDateTime=0x618565f0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x342eb00, ftLastWriteTime.dwHighDateTime=0x1cac1e1, nFileSizeHigh=0x0, nFileSizeLow=0xe0f, dwReserved0=0x0, dwReserved1=0x0, cFileName="Clarity.xml", cAlternateFileName="")) returned 1 [0035.463] FindNextFileW (in: hFindFile=0x5107ae0, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x11910700, ftCreationTime.dwHighDateTime=0x1cac1e1, ftLastAccessTime.dwLowDateTime=0x618565f0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x11910700, ftLastWriteTime.dwHighDateTime=0x1cac1e1, nFileSizeHigh=0x0, nFileSizeLow=0xe0e, dwReserved0=0x0, dwReserved1=0x0, cFileName="Composite.xml", cAlternateFileName="COMPOS~1.XML")) returned 1 [0035.463] FindNextFileW (in: hFindFile=0x5107ae0, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xeefeee00, ftCreationTime.dwHighDateTime=0x1cac1e0, ftLastAccessTime.dwLowDateTime=0x618565f0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xeefeee00, ftLastWriteTime.dwHighDateTime=0x1cac1e0, nFileSizeHigh=0x0, nFileSizeLow=0xdc6, dwReserved0=0x0, dwReserved1=0x0, cFileName="Concourse.xml", cAlternateFileName="CONCOU~1.XML")) returned 1 [0035.463] FindNextFileW (in: hFindFile=0x5107ae0, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x13f36100, ftCreationTime.dwHighDateTime=0x1cac1e1, ftLastAccessTime.dwLowDateTime=0x618565f0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x13f36100, ftLastWriteTime.dwHighDateTime=0x1cac1e1, nFileSizeHigh=0x0, nFileSizeLow=0xefc, dwReserved0=0x0, dwReserved1=0x0, cFileName="Couture.xml", cAlternateFileName="")) returned 1 [0035.463] FindNextFileW (in: hFindFile=0x5107ae0, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x15248e00, ftCreationTime.dwHighDateTime=0x1cac1e1, ftLastAccessTime.dwLowDateTime=0x618565f0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x15248e00, ftLastWriteTime.dwHighDateTime=0x1cac1e1, nFileSizeHigh=0x0, nFileSizeLow=0xe48, dwReserved0=0x0, dwReserved1=0x0, cFileName="Elemental.xml", cAlternateFileName="ELEMEN~1.XML")) returned 1 [0035.463] FindNextFileW (in: hFindFile=0x5107ae0, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf0301b00, ftCreationTime.dwHighDateTime=0x1cac1e0, ftLastAccessTime.dwLowDateTime=0x528a9ed0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xf0301b00, ftLastWriteTime.dwHighDateTime=0x1cac1e0, nFileSizeHigh=0x0, nFileSizeLow=0xef5, dwReserved0=0x0, dwReserved1=0x0, cFileName="Equity.xml", cAlternateFileName="")) returned 1 [0035.463] FindNextFileW (in: hFindFile=0x5107ae0, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4741800, ftCreationTime.dwHighDateTime=0x1cac1e1, ftLastAccessTime.dwLowDateTime=0x528a9ed0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x4741800, ftLastWriteTime.dwHighDateTime=0x1cac1e1, nFileSizeHigh=0x0, nFileSizeLow=0xe16, dwReserved0=0x0, dwReserved1=0x0, cFileName="Essential.xml", cAlternateFileName="ESSENT~1.XML")) returned 1 [0035.463] FindNextFileW (in: hFindFile=0x5107ae0, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1655bb00, ftCreationTime.dwHighDateTime=0x1cac1e1, ftLastAccessTime.dwLowDateTime=0x618565f0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x1655bb00, ftLastWriteTime.dwHighDateTime=0x1cac1e1, nFileSizeHigh=0x0, nFileSizeLow=0xe2f, dwReserved0=0x0, dwReserved1=0x0, cFileName="Executive.xml", cAlternateFileName="EXECUT~1.XML")) returned 1 [0035.463] FindNextFileW (in: hFindFile=0x5107ae0, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf2927500, ftCreationTime.dwHighDateTime=0x1cac1e0, ftLastAccessTime.dwLowDateTime=0x618565f0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xf2927500, ftLastWriteTime.dwHighDateTime=0x1cac1e0, nFileSizeHigh=0x0, nFileSizeLow=0xdb5, dwReserved0=0x0, dwReserved1=0x0, cFileName="Flow.xml", cAlternateFileName="")) returned 1 [0035.464] FindNextFileW (in: hFindFile=0x5107ae0, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf1614800, ftCreationTime.dwHighDateTime=0x1cac1e0, ftLastAccessTime.dwLowDateTime=0x618565f0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xf1614800, ftLastWriteTime.dwHighDateTime=0x1cac1e0, nFileSizeHigh=0x0, nFileSizeLow=0xed4, dwReserved0=0x0, dwReserved1=0x0, cFileName="Foundry.xml", cAlternateFileName="")) returned 1 [0035.464] FindNextFileW (in: hFindFile=0x5107ae0, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5a54500, ftCreationTime.dwHighDateTime=0x1cac1e1, ftLastAccessTime.dwLowDateTime=0x528a9ed0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x5a54500, ftLastWriteTime.dwHighDateTime=0x1cac1e1, nFileSizeHigh=0x0, nFileSizeLow=0xe59, dwReserved0=0x0, dwReserved1=0x0, cFileName="Grid.xml", cAlternateFileName="")) returned 1 [0035.464] FindNextFileW (in: hFindFile=0x5107ae0, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6d67200, ftCreationTime.dwHighDateTime=0x1cac1e1, ftLastAccessTime.dwLowDateTime=0x618565f0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x6d67200, ftLastWriteTime.dwHighDateTime=0x1cac1e1, nFileSizeHigh=0x0, nFileSizeLow=0xf09, dwReserved0=0x0, dwReserved1=0x0, cFileName="Hardcover.xml", cAlternateFileName="HARDCO~1.XML")) returned 1 [0035.464] FindNextFileW (in: hFindFile=0x5107ae0, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1786e800, ftCreationTime.dwHighDateTime=0x1cac1e1, ftLastAccessTime.dwLowDateTime=0x528a9ed0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x1786e800, ftLastWriteTime.dwHighDateTime=0x1cac1e1, nFileSizeHigh=0x0, nFileSizeLow=0xe2a, dwReserved0=0x0, dwReserved1=0x0, cFileName="Horizon.xml", cAlternateFileName="")) returned 1 [0035.464] FindNextFileW (in: hFindFile=0x5107ae0, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf3c3a200, ftCreationTime.dwHighDateTime=0x1cac1e0, ftLastAccessTime.dwLowDateTime=0x618565f0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xf3c3a200, ftLastWriteTime.dwHighDateTime=0x1cac1e0, nFileSizeHigh=0x0, nFileSizeLow=0xeed, dwReserved0=0x0, dwReserved1=0x0, cFileName="Median.xml", cAlternateFileName="")) returned 1 [0035.464] FindNextFileW (in: hFindFile=0x5107ae0, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf4f4cf00, ftCreationTime.dwHighDateTime=0x1cac1e0, ftLastAccessTime.dwLowDateTime=0x618565f0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xf4f4cf00, ftLastWriteTime.dwHighDateTime=0x1cac1e0, nFileSizeHigh=0x0, nFileSizeLow=0xe13, dwReserved0=0x0, dwReserved1=0x0, cFileName="Metro.xml", cAlternateFileName="")) returned 1 [0035.464] FindNextFileW (in: hFindFile=0x5107ae0, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf625fc00, ftCreationTime.dwHighDateTime=0x1cac1e0, ftLastAccessTime.dwLowDateTime=0x618565f0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xf625fc00, ftLastWriteTime.dwHighDateTime=0x1cac1e0, nFileSizeHigh=0x0, nFileSizeLow=0xe05, dwReserved0=0x0, dwReserved1=0x0, cFileName="Module.xml", cAlternateFileName="")) returned 1 [0035.464] FindNextFileW (in: hFindFile=0x5107ae0, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x18b81500, ftCreationTime.dwHighDateTime=0x1cac1e1, ftLastAccessTime.dwLowDateTime=0x618565f0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x18b81500, ftLastWriteTime.dwHighDateTime=0x1cac1e1, nFileSizeHigh=0x0, nFileSizeLow=0xe39, dwReserved0=0x0, dwReserved1=0x0, cFileName="Newsprint.xml", cAlternateFileName="NEWSPR~1.XML")) returned 1 [0035.464] FindNextFileW (in: hFindFile=0x5107ae0, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xefe70d00, ftCreationTime.dwHighDateTime=0x1c9b824, ftLastAccessTime.dwLowDateTime=0x528a9ed0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xefe70d00, ftLastWriteTime.dwHighDateTime=0x1c9b824, nFileSizeHigh=0x0, nFileSizeLow=0xe15, dwReserved0=0x0, dwReserved1=0x0, cFileName="Office 2.xml", cAlternateFileName="OFFICE~1.XML")) returned 1 [0035.464] FindNextFileW (in: hFindFile=0x5107ae0, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xefe70d00, ftCreationTime.dwHighDateTime=0x1c9b824, ftLastAccessTime.dwLowDateTime=0x528a9ed0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xefe70d00, ftLastWriteTime.dwHighDateTime=0x1c9b824, nFileSizeHigh=0x0, nFileSizeLow=0xe01, dwReserved0=0x0, dwReserved1=0x0, cFileName="Office Classic 2.xml", cAlternateFileName="OFFICE~3.XML")) returned 1 [0035.464] FindNextFileW (in: hFindFile=0x5107ae0, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xefe70d00, ftCreationTime.dwHighDateTime=0x1c9b824, ftLastAccessTime.dwLowDateTime=0x528a9ed0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xefe70d00, ftLastWriteTime.dwHighDateTime=0x1c9b824, nFileSizeHigh=0x0, nFileSizeLow=0xe20, dwReserved0=0x0, dwReserved1=0x0, cFileName="Office Classic.xml", cAlternateFileName="OFFICE~2.XML")) returned 1 [0035.464] FindNextFileW (in: hFindFile=0x5107ae0, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf7572900, ftCreationTime.dwHighDateTime=0x1cac1e0, ftLastAccessTime.dwLowDateTime=0x618565f0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xf7572900, ftLastWriteTime.dwHighDateTime=0x1cac1e0, nFileSizeHigh=0x0, nFileSizeLow=0xe1d, dwReserved0=0x0, dwReserved1=0x0, cFileName="Opulent.xml", cAlternateFileName="")) returned 1 [0035.464] FindNextFileW (in: hFindFile=0x5107ae0, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf8885600, ftCreationTime.dwHighDateTime=0x1cac1e0, ftLastAccessTime.dwLowDateTime=0x528a9ed0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xf8885600, ftLastWriteTime.dwHighDateTime=0x1cac1e0, nFileSizeHigh=0x0, nFileSizeLow=0xe5a, dwReserved0=0x0, dwReserved1=0x0, cFileName="Oriel.xml", cAlternateFileName="")) returned 1 [0035.464] FindNextFileW (in: hFindFile=0x5107ae0, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf9b98300, ftCreationTime.dwHighDateTime=0x1cac1e0, ftLastAccessTime.dwLowDateTime=0x528a9ed0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xf9b98300, ftLastWriteTime.dwHighDateTime=0x1cac1e0, nFileSizeHigh=0x0, nFileSizeLow=0xeed, dwReserved0=0x0, dwReserved1=0x0, cFileName="Origin.xml", cAlternateFileName="")) returned 1 [0035.464] FindNextFileW (in: hFindFile=0x5107ae0, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xfaeab000, ftCreationTime.dwHighDateTime=0x1cac1e0, ftLastAccessTime.dwLowDateTime=0x528d0030, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xfaeab000, ftLastWriteTime.dwHighDateTime=0x1cac1e0, nFileSizeHigh=0x0, nFileSizeLow=0xe2c, dwReserved0=0x0, dwReserved1=0x0, cFileName="Paper.xml", cAlternateFileName="")) returned 1 [0035.464] FindNextFileW (in: hFindFile=0x5107ae0, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8079f00, ftCreationTime.dwHighDateTime=0x1cac1e1, ftLastAccessTime.dwLowDateTime=0x618565f0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x8079f00, ftLastWriteTime.dwHighDateTime=0x1cac1e1, nFileSizeHigh=0x0, nFileSizeLow=0xe0f, dwReserved0=0x0, dwReserved1=0x0, cFileName="Perspective.xml", cAlternateFileName="PERSPE~1.XML")) returned 1 [0035.464] FindNextFileW (in: hFindFile=0x5107ae0, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x938cc00, ftCreationTime.dwHighDateTime=0x1cac1e1, ftLastAccessTime.dwLowDateTime=0x528d0030, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x938cc00, ftLastWriteTime.dwHighDateTime=0x1cac1e1, nFileSizeHigh=0x0, nFileSizeLow=0xe7f, dwReserved0=0x0, dwReserved1=0x0, cFileName="Pushpin.xml", cAlternateFileName="")) returned 1 [0035.464] FindNextFileW (in: hFindFile=0x5107ae0, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1b1a6f00, ftCreationTime.dwHighDateTime=0x1cac1e1, ftLastAccessTime.dwLowDateTime=0x528d0030, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x1b1a6f00, ftLastWriteTime.dwHighDateTime=0x1cac1e1, nFileSizeHigh=0x0, nFileSizeLow=0xe18, dwReserved0=0x0, dwReserved1=0x0, cFileName="Slipstream.xml", cAlternateFileName="SLIPST~1.XML")) returned 1 [0035.465] FindNextFileW (in: hFindFile=0x5107ae0, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xfc1bdd00, ftCreationTime.dwHighDateTime=0x1cac1e0, ftLastAccessTime.dwLowDateTime=0x618565f0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xfc1bdd00, ftLastWriteTime.dwHighDateTime=0x1cac1e0, nFileSizeHigh=0x0, nFileSizeLow=0xee9, dwReserved0=0x0, dwReserved1=0x0, cFileName="Solstice.xml", cAlternateFileName="")) returned 1 [0035.465] FindNextFileW (in: hFindFile=0x5107ae0, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xfd4d0a00, ftCreationTime.dwHighDateTime=0x1cac1e0, ftLastAccessTime.dwLowDateTime=0x528d0030, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xfd4d0a00, ftLastWriteTime.dwHighDateTime=0x1cac1e0, nFileSizeHigh=0x0, nFileSizeLow=0xe13, dwReserved0=0x0, dwReserved1=0x0, cFileName="Technic.xml", cAlternateFileName="")) returned 1 [0035.465] FindNextFileW (in: hFindFile=0x5107ae0, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa69f900, ftCreationTime.dwHighDateTime=0x1cac1e1, ftLastAccessTime.dwLowDateTime=0x6187c750, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xa69f900, ftLastWriteTime.dwHighDateTime=0x1cac1e1, nFileSizeHigh=0x0, nFileSizeLow=0xeff, dwReserved0=0x0, dwReserved1=0x0, cFileName="Thatch.xml", cAlternateFileName="")) returned 1 [0035.465] FindNextFileW (in: hFindFile=0x5107ae0, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xfd4d0a00, ftCreationTime.dwHighDateTime=0x1cac1e0, ftLastAccessTime.dwLowDateTime=0x528d0030, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xfd4d0a00, ftLastWriteTime.dwHighDateTime=0x1cac1e0, nFileSizeHigh=0x0, nFileSizeLow=0xe20, dwReserved0=0x0, dwReserved1=0x0, cFileName="Trek.xml", cAlternateFileName="")) returned 1 [0035.465] FindNextFileW (in: hFindFile=0x5107ae0, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xfe7e3700, ftCreationTime.dwHighDateTime=0x1cac1e0, ftLastAccessTime.dwLowDateTime=0x528d0030, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xfe7e3700, ftLastWriteTime.dwHighDateTime=0x1cac1e0, nFileSizeHigh=0x0, nFileSizeLow=0xe19, dwReserved0=0x0, dwReserved1=0x0, cFileName="Urban.xml", cAlternateFileName="")) returned 1 [0035.465] FindNextFileW (in: hFindFile=0x5107ae0, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xffaf6400, ftCreationTime.dwHighDateTime=0x1cac1e0, ftLastAccessTime.dwLowDateTime=0x528d0030, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xffaf6400, ftLastWriteTime.dwHighDateTime=0x1cac1e0, nFileSizeHigh=0x0, nFileSizeLow=0xe14, dwReserved0=0x0, dwReserved1=0x0, cFileName="Verve.xml", cAlternateFileName="")) returned 1 [0035.465] FindNextFileW (in: hFindFile=0x5107ae0, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb9b2600, ftCreationTime.dwHighDateTime=0x1cac1e1, ftLastAccessTime.dwLowDateTime=0x528d0030, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xb9b2600, ftLastWriteTime.dwHighDateTime=0x1cac1e1, nFileSizeHigh=0x0, nFileSizeLow=0xdf9, dwReserved0=0x0, dwReserved1=0x0, cFileName="Waveform.xml", cAlternateFileName="")) returned 1 [0035.465] FindNextFileW (in: hFindFile=0x5107ae0, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb9b2600, ftCreationTime.dwHighDateTime=0x1cac1e1, ftLastAccessTime.dwLowDateTime=0x528d0030, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xb9b2600, ftLastWriteTime.dwHighDateTime=0x1cac1e1, nFileSizeHigh=0x0, nFileSizeLow=0xdf9, dwReserved0=0x0, dwReserved1=0x0, cFileName="Waveform.xml", cAlternateFileName="")) returned 0 [0035.465] FindClose (in: hFindFile=0x5107ae0 | out: hFindFile=0x5107ae0) returned 1 [0035.466] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e77c) returned 1 [0035.466] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e788) returned 1 [0035.466] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Fonts\\Adjacency.xml", nBufferLength=0x105, lpBuffer=0x31e194, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Fonts\\Adjacency.xml", lpFilePart=0x0) returned 0x4e [0035.466] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e688) returned 1 [0035.466] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Fonts\\Adjacency.xml" (normalized: "c:\\program files\\microsoft office\\document themes 14\\theme fonts\\adjacency.xml"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x224 [0035.468] GetFileType (hFile=0x224) returned 0x1 [0035.468] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e684) returned 1 [0035.468] GetFileType (hFile=0x224) returned 0x1 [0035.468] GetFileSize (in: hFile=0x224, lpFileSizeHigh=0x31e790 | out: lpFileSizeHigh=0x31e790*=0x0) returned 0xe19 [0035.468] ReadFile (in: hFile=0x224, lpBuffer=0x26a8d8c, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x31e73c, lpOverlapped=0x0 | out: lpBuffer=0x26a8d8c*, lpNumberOfBytesRead=0x31e73c*=0xe19, lpOverlapped=0x0) returned 1 [0035.469] CloseHandle (hObject=0x224) returned 1 [0035.483] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Fonts\\Adjacency.xml", nBufferLength=0x105, lpBuffer=0x31e180, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Fonts\\Adjacency.xml", lpFilePart=0x0) returned 0x4e [0035.483] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e674) returned 1 [0035.483] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Fonts\\Adjacency.xml" (normalized: "c:\\program files\\microsoft office\\document themes 14\\theme fonts\\adjacency.xml"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x224 [0035.484] GetFileType (hFile=0x224) returned 0x1 [0035.484] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e670) returned 1 [0035.484] GetFileType (hFile=0x224) returned 0x1 [0035.484] WriteFile (in: hFile=0x224, lpBuffer=0x26fb4b0*, nNumberOfBytesToWrite=0xe20, lpNumberOfBytesWritten=0x31e704, lpOverlapped=0x0 | out: lpBuffer=0x26fb4b0*, lpNumberOfBytesWritten=0x31e704*=0xe20, lpOverlapped=0x0) returned 1 [0035.485] CloseHandle (hObject=0x224) returned 1 [0035.486] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Fonts\\Adjacency.xml", nBufferLength=0x105, lpBuffer=0x31e2b4, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Fonts\\Adjacency.xml", lpFilePart=0x0) returned 0x4e [0035.486] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Fonts\\Adjacency.xml", nBufferLength=0x105, lpBuffer=0x31e2b4, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Fonts\\Adjacency.xml", lpFilePart=0x0) returned 0x4e [0035.486] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e714) returned 1 [0035.486] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Fonts\\Adjacency.xml" (normalized: "c:\\program files\\microsoft office\\document themes 14\\theme fonts\\adjacency.xml"), fInfoLevelId=0x0, lpFileInformation=0x31e790 | out: lpFileInformation=0x31e790*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xccc5300, ftCreationTime.dwHighDateTime=0x1cac1e1, ftLastAccessTime.dwLowDateTime=0x61830490, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xf899fbc0, ftLastWriteTime.dwHighDateTime=0x1d6eb7e, nFileSizeHigh=0x0, nFileSizeLow=0xe20)) returned 1 [0035.486] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e710) returned 1 [0035.486] MoveFileW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Fonts\\Adjacency.xml" (normalized: "c:\\program files\\microsoft office\\document themes 14\\theme fonts\\adjacency.xml"), lpNewFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Fonts\\Adjacency.xml" (normalized: "c:\\program files\\microsoft office\\document themes 14\\theme fonts\\adjacency.xml")) returned 1 [0035.486] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Fonts\\Angles.xml", nBufferLength=0x105, lpBuffer=0x31e194, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Fonts\\Angles.xml", lpFilePart=0x0) returned 0x4b [0035.486] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e688) returned 1 [0035.487] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Fonts\\Angles.xml" (normalized: "c:\\program files\\microsoft office\\document themes 14\\theme fonts\\angles.xml"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x224 [0035.487] GetFileType (hFile=0x224) returned 0x1 [0035.487] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e684) returned 1 [0035.487] GetFileType (hFile=0x224) returned 0x1 [0035.487] GetFileSize (in: hFile=0x224, lpFileSizeHigh=0x31e790 | out: lpFileSizeHigh=0x31e790*=0x0) returned 0xe2a [0035.487] ReadFile (in: hFile=0x224, lpBuffer=0x26fd588, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x31e73c, lpOverlapped=0x0 | out: lpBuffer=0x26fd588*, lpNumberOfBytesRead=0x31e73c*=0xe2a, lpOverlapped=0x0) returned 1 [0035.502] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Fonts\\Angles.xml", nBufferLength=0x105, lpBuffer=0x31e180, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Fonts\\Angles.xml", lpFilePart=0x0) returned 0x4b [0035.502] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e674) returned 1 [0035.502] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Fonts\\Angles.xml" (normalized: "c:\\program files\\microsoft office\\document themes 14\\theme fonts\\angles.xml"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x224 [0035.503] GetFileType (hFile=0x224) returned 0x1 [0035.503] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e670) returned 1 [0035.503] GetFileType (hFile=0x224) returned 0x1 [0035.503] WriteFile (in: hFile=0x224, lpBuffer=0x274fb94*, nNumberOfBytesToWrite=0xe30, lpNumberOfBytesWritten=0x31e704, lpOverlapped=0x0 | out: lpBuffer=0x274fb94*, lpNumberOfBytesWritten=0x31e704*=0xe30, lpOverlapped=0x0) returned 1 [0035.505] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Fonts\\Angles.xml", nBufferLength=0x105, lpBuffer=0x31e2b4, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Fonts\\Angles.xml", lpFilePart=0x0) returned 0x4b [0035.505] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Fonts\\Angles.xml", nBufferLength=0x105, lpBuffer=0x31e2b4, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Fonts\\Angles.xml", lpFilePart=0x0) returned 0x4b [0035.505] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e714) returned 1 [0035.505] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Fonts\\Angles.xml" (normalized: "c:\\program files\\microsoft office\\document themes 14\\theme fonts\\angles.xml"), fInfoLevelId=0x0, lpFileInformation=0x31e790 | out: lpFileInformation=0x31e790*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xdfd8000, ftCreationTime.dwHighDateTime=0x1cac1e1, ftLastAccessTime.dwLowDateTime=0x528a9ed0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xf89c5d20, ftLastWriteTime.dwHighDateTime=0x1d6eb7e, nFileSizeHigh=0x0, nFileSizeLow=0xe30)) returned 1 [0035.505] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e710) returned 1 [0035.505] MoveFileW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Fonts\\Angles.xml" (normalized: "c:\\program files\\microsoft office\\document themes 14\\theme fonts\\angles.xml"), lpNewFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Fonts\\Angles.xml" (normalized: "c:\\program files\\microsoft office\\document themes 14\\theme fonts\\angles.xml")) returned 1 [0035.506] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Fonts\\Apex.xml", nBufferLength=0x105, lpBuffer=0x31e194, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Fonts\\Apex.xml", lpFilePart=0x0) returned 0x49 [0035.506] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e688) returned 1 [0035.507] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Fonts\\Apex.xml" (normalized: "c:\\program files\\microsoft office\\document themes 14\\theme fonts\\apex.xml"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x224 [0035.507] GetFileType (hFile=0x224) returned 0x1 [0035.507] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e684) returned 1 [0035.507] GetFileType (hFile=0x224) returned 0x1 [0035.507] GetFileSize (in: hFile=0x224, lpFileSizeHigh=0x31e790 | out: lpFileSizeHigh=0x31e790*=0x0) returned 0xeee [0035.507] ReadFile (in: hFile=0x224, lpBuffer=0x2751d18, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x31e73c, lpOverlapped=0x0 | out: lpBuffer=0x2751d18*, lpNumberOfBytesRead=0x31e73c*=0xeee, lpOverlapped=0x0) returned 1 [0035.522] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Fonts\\Apex.xml", nBufferLength=0x105, lpBuffer=0x31e180, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Fonts\\Apex.xml", lpFilePart=0x0) returned 0x49 [0035.522] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e674) returned 1 [0035.522] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Fonts\\Apex.xml" (normalized: "c:\\program files\\microsoft office\\document themes 14\\theme fonts\\apex.xml"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x224 [0035.523] GetFileType (hFile=0x224) returned 0x1 [0035.523] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e670) returned 1 [0035.523] GetFileType (hFile=0x224) returned 0x1 [0035.523] WriteFile (in: hFile=0x224, lpBuffer=0x27a46d8*, nNumberOfBytesToWrite=0xef0, lpNumberOfBytesWritten=0x31e704, lpOverlapped=0x0 | out: lpBuffer=0x27a46d8*, lpNumberOfBytesWritten=0x31e704*=0xef0, lpOverlapped=0x0) returned 1 [0035.524] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Fonts\\Apex.xml", nBufferLength=0x105, lpBuffer=0x31e2b4, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Fonts\\Apex.xml", lpFilePart=0x0) returned 0x49 [0035.524] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Fonts\\Apex.xml", nBufferLength=0x105, lpBuffer=0x31e2b4, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Fonts\\Apex.xml", lpFilePart=0x0) returned 0x49 [0035.524] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e714) returned 1 [0035.524] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Fonts\\Apex.xml" (normalized: "c:\\program files\\microsoft office\\document themes 14\\theme fonts\\apex.xml"), fInfoLevelId=0x0, lpFileInformation=0x31e790 | out: lpFileInformation=0x31e790*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xeb6b6700, ftCreationTime.dwHighDateTime=0x1cac1e0, ftLastAccessTime.dwLowDateTime=0x61830490, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xf8a11fe0, ftLastWriteTime.dwHighDateTime=0x1d6eb7e, nFileSizeHigh=0x0, nFileSizeLow=0xef0)) returned 1 [0035.524] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e710) returned 1 [0035.524] MoveFileW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Fonts\\Apex.xml" (normalized: "c:\\program files\\microsoft office\\document themes 14\\theme fonts\\apex.xml"), lpNewFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Fonts\\Apex.xml" (normalized: "c:\\program files\\microsoft office\\document themes 14\\theme fonts\\apex.xml")) returned 1 [0035.525] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Fonts\\Apothecary.xml", nBufferLength=0x105, lpBuffer=0x31e194, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Fonts\\Apothecary.xml", lpFilePart=0x0) returned 0x4f [0035.525] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e688) returned 1 [0035.525] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Fonts\\Apothecary.xml" (normalized: "c:\\program files\\microsoft office\\document themes 14\\theme fonts\\apothecary.xml"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x224 [0035.525] GetFileType (hFile=0x224) returned 0x1 [0035.525] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e684) returned 1 [0035.525] GetFileType (hFile=0x224) returned 0x1 [0035.525] GetFileSize (in: hFile=0x224, lpFileSizeHigh=0x31e790 | out: lpFileSizeHigh=0x31e790*=0x0) returned 0xe1f [0035.525] ReadFile (in: hFile=0x224, lpBuffer=0x27a679c, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x31e73c, lpOverlapped=0x0 | out: lpBuffer=0x27a679c*, lpNumberOfBytesRead=0x31e73c*=0xe1f, lpOverlapped=0x0) returned 1 [0035.540] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Fonts\\Apothecary.xml", nBufferLength=0x105, lpBuffer=0x31e180, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Fonts\\Apothecary.xml", lpFilePart=0x0) returned 0x4f [0035.541] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e674) returned 1 [0035.541] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Fonts\\Apothecary.xml" (normalized: "c:\\program files\\microsoft office\\document themes 14\\theme fonts\\apothecary.xml"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x224 [0035.543] GetFileType (hFile=0x224) returned 0x1 [0035.543] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e670) returned 1 [0035.543] GetFileType (hFile=0x224) returned 0x1 [0035.543] WriteFile (in: hFile=0x224, lpBuffer=0x27f8d64*, nNumberOfBytesToWrite=0xe20, lpNumberOfBytesWritten=0x31e704, lpOverlapped=0x0 | out: lpBuffer=0x27f8d64*, lpNumberOfBytesWritten=0x31e704*=0xe20, lpOverlapped=0x0) returned 1 [0035.544] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Fonts\\Apothecary.xml", nBufferLength=0x105, lpBuffer=0x31e2b4, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Fonts\\Apothecary.xml", lpFilePart=0x0) returned 0x4f [0035.544] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Fonts\\Apothecary.xml", nBufferLength=0x105, lpBuffer=0x31e2b4, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Fonts\\Apothecary.xml", lpFilePart=0x0) returned 0x4f [0035.544] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e714) returned 1 [0035.544] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Fonts\\Apothecary.xml" (normalized: "c:\\program files\\microsoft office\\document themes 14\\theme fonts\\apothecary.xml"), fInfoLevelId=0x0, lpFileInformation=0x31e790 | out: lpFileInformation=0x31e790*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe09100, ftCreationTime.dwHighDateTime=0x1cac1e1, ftLastAccessTime.dwLowDateTime=0x528a9ed0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xf8a38140, ftLastWriteTime.dwHighDateTime=0x1d6eb7e, nFileSizeHigh=0x0, nFileSizeLow=0xe20)) returned 1 [0035.544] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e710) returned 1 [0035.544] MoveFileW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Fonts\\Apothecary.xml" (normalized: "c:\\program files\\microsoft office\\document themes 14\\theme fonts\\apothecary.xml"), lpNewFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Fonts\\Apothecary.xml" (normalized: "c:\\program files\\microsoft office\\document themes 14\\theme fonts\\apothecary.xml")) returned 1 [0035.545] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Fonts\\Aspect.xml", nBufferLength=0x105, lpBuffer=0x31e194, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Fonts\\Aspect.xml", lpFilePart=0x0) returned 0x4b [0035.545] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e688) returned 1 [0035.545] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Fonts\\Aspect.xml" (normalized: "c:\\program files\\microsoft office\\document themes 14\\theme fonts\\aspect.xml"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x224 [0035.546] GetFileType (hFile=0x224) returned 0x1 [0035.546] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e684) returned 1 [0035.546] GetFileType (hFile=0x224) returned 0x1 [0035.546] GetFileSize (in: hFile=0x224, lpFileSizeHigh=0x31e790 | out: lpFileSizeHigh=0x31e790*=0x0) returned 0xe0b [0035.546] ReadFile (in: hFile=0x224, lpBuffer=0x27fae1c, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x31e73c, lpOverlapped=0x0 | out: lpBuffer=0x27fae1c*, lpNumberOfBytesRead=0x31e73c*=0xe0b, lpOverlapped=0x0) returned 1 [0035.563] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Fonts\\Aspect.xml", nBufferLength=0x105, lpBuffer=0x31e180, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Fonts\\Aspect.xml", lpFilePart=0x0) returned 0x4b [0035.564] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e674) returned 1 [0035.564] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Fonts\\Aspect.xml" (normalized: "c:\\program files\\microsoft office\\document themes 14\\theme fonts\\aspect.xml"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x224 [0035.564] GetFileType (hFile=0x224) returned 0x1 [0035.564] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e670) returned 1 [0035.564] GetFileType (hFile=0x224) returned 0x1 [0035.564] WriteFile (in: hFile=0x224, lpBuffer=0x2650a18*, nNumberOfBytesToWrite=0xe10, lpNumberOfBytesWritten=0x31e704, lpOverlapped=0x0 | out: lpBuffer=0x2650a18*, lpNumberOfBytesWritten=0x31e704*=0xe10, lpOverlapped=0x0) returned 1 [0035.566] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Fonts\\Aspect.xml", nBufferLength=0x105, lpBuffer=0x31e2b4, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Fonts\\Aspect.xml", lpFilePart=0x0) returned 0x4b [0035.566] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Fonts\\Aspect.xml", nBufferLength=0x105, lpBuffer=0x31e2b4, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Fonts\\Aspect.xml", lpFilePart=0x0) returned 0x4b [0035.566] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e714) returned 1 [0035.566] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Fonts\\Aspect.xml" (normalized: "c:\\program files\\microsoft office\\document themes 14\\theme fonts\\aspect.xml"), fInfoLevelId=0x0, lpFileInformation=0x31e790 | out: lpFileInformation=0x31e790*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xedcdc100, ftCreationTime.dwHighDateTime=0x1cac1e0, ftLastAccessTime.dwLowDateTime=0x61830490, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xf8a5e2a0, ftLastWriteTime.dwHighDateTime=0x1d6eb7e, nFileSizeHigh=0x0, nFileSizeLow=0xe10)) returned 1 [0035.567] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e710) returned 1 [0035.567] MoveFileW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Fonts\\Aspect.xml" (normalized: "c:\\program files\\microsoft office\\document themes 14\\theme fonts\\aspect.xml"), lpNewFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Fonts\\Aspect.xml" (normalized: "c:\\program files\\microsoft office\\document themes 14\\theme fonts\\aspect.xml")) returned 1 [0035.568] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Fonts\\Austin.xml", nBufferLength=0x105, lpBuffer=0x31e194, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Fonts\\Austin.xml", lpFilePart=0x0) returned 0x4b [0035.568] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e688) returned 1 [0035.568] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Fonts\\Austin.xml" (normalized: "c:\\program files\\microsoft office\\document themes 14\\theme fonts\\austin.xml"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x224 [0035.569] GetFileType (hFile=0x224) returned 0x1 [0035.569] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e684) returned 1 [0035.569] GetFileType (hFile=0x224) returned 0x1 [0035.569] GetFileSize (in: hFile=0x224, lpFileSizeHigh=0x31e790 | out: lpFileSizeHigh=0x31e790*=0x0) returned 0xe16 [0035.569] ReadFile (in: hFile=0x224, lpBuffer=0x2652acc, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x31e73c, lpOverlapped=0x0 | out: lpBuffer=0x2652acc*, lpNumberOfBytesRead=0x31e73c*=0xe16, lpOverlapped=0x0) returned 1 [0035.571] CloseHandle (hObject=0x224) returned 1 [0035.619] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Fonts\\Austin.xml", nBufferLength=0x105, lpBuffer=0x31e180, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Fonts\\Austin.xml", lpFilePart=0x0) returned 0x4b [0035.620] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e674) returned 1 [0035.620] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Fonts\\Austin.xml" (normalized: "c:\\program files\\microsoft office\\document themes 14\\theme fonts\\austin.xml"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x224 [0035.620] GetFileType (hFile=0x224) returned 0x1 [0035.621] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e670) returned 1 [0035.621] GetFileType (hFile=0x224) returned 0x1 [0035.621] WriteFile (in: hFile=0x224, lpBuffer=0x26a51e8*, nNumberOfBytesToWrite=0xe20, lpNumberOfBytesWritten=0x31e704, lpOverlapped=0x0 | out: lpBuffer=0x26a51e8*, lpNumberOfBytesWritten=0x31e704*=0xe20, lpOverlapped=0x0) returned 1 [0035.621] CloseHandle (hObject=0x224) returned 1 [0035.622] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Fonts\\Austin.xml", nBufferLength=0x105, lpBuffer=0x31e2b4, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Fonts\\Austin.xml", lpFilePart=0x0) returned 0x4b [0035.622] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Fonts\\Austin.xml", nBufferLength=0x105, lpBuffer=0x31e2b4, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Fonts\\Austin.xml", lpFilePart=0x0) returned 0x4b [0035.622] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e714) returned 1 [0035.622] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Fonts\\Austin.xml" (normalized: "c:\\program files\\microsoft office\\document themes 14\\theme fonts\\austin.xml"), fInfoLevelId=0x0, lpFileInformation=0x31e790 | out: lpFileInformation=0x31e790*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x211be00, ftCreationTime.dwHighDateTime=0x1cac1e1, ftLastAccessTime.dwLowDateTime=0x528a9ed0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xf8af6820, ftLastWriteTime.dwHighDateTime=0x1d6eb7e, nFileSizeHigh=0x0, nFileSizeLow=0xe20)) returned 1 [0035.623] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e710) returned 1 [0035.623] MoveFileW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Fonts\\Austin.xml" (normalized: "c:\\program files\\microsoft office\\document themes 14\\theme fonts\\austin.xml"), lpNewFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Fonts\\Austin.xml" (normalized: "c:\\program files\\microsoft office\\document themes 14\\theme fonts\\austin.xml")) returned 1 [0035.623] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Fonts\\Black Tie.xml", nBufferLength=0x105, lpBuffer=0x31e194, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Fonts\\Black Tie.xml", lpFilePart=0x0) returned 0x4e [0035.623] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e688) returned 1 [0035.623] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Fonts\\Black Tie.xml" (normalized: "c:\\program files\\microsoft office\\document themes 14\\theme fonts\\black tie.xml"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x224 [0035.623] GetFileType (hFile=0x224) returned 0x1 [0035.623] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e684) returned 1 [0035.623] GetFileType (hFile=0x224) returned 0x1 [0035.623] GetFileSize (in: hFile=0x224, lpFileSizeHigh=0x31e790 | out: lpFileSizeHigh=0x31e790*=0x0) returned 0xefb [0035.624] ReadFile (in: hFile=0x224, lpBuffer=0x26a738c, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x31e73c, lpOverlapped=0x0 | out: lpBuffer=0x26a738c*, lpNumberOfBytesRead=0x31e73c*=0xefb, lpOverlapped=0x0) returned 1 [0035.625] CloseHandle (hObject=0x224) returned 1 [0035.639] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Fonts\\Black Tie.xml", nBufferLength=0x105, lpBuffer=0x31e180, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Fonts\\Black Tie.xml", lpFilePart=0x0) returned 0x4e [0035.639] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e674) returned 1 [0035.640] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Fonts\\Black Tie.xml" (normalized: "c:\\program files\\microsoft office\\document themes 14\\theme fonts\\black tie.xml"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x224 [0035.640] GetFileType (hFile=0x224) returned 0x1 [0035.640] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e670) returned 1 [0035.640] GetFileType (hFile=0x224) returned 0x1 [0035.640] WriteFile (in: hFile=0x224, lpBuffer=0x26f9db4*, nNumberOfBytesToWrite=0xf00, lpNumberOfBytesWritten=0x31e704, lpOverlapped=0x0 | out: lpBuffer=0x26f9db4*, lpNumberOfBytesWritten=0x31e704*=0xf00, lpOverlapped=0x0) returned 1 [0035.641] CloseHandle (hObject=0x224) returned 1 [0035.642] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Fonts\\Black Tie.xml", nBufferLength=0x105, lpBuffer=0x31e2b4, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Fonts\\Black Tie.xml", lpFilePart=0x0) returned 0x4e [0035.642] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Fonts\\Black Tie.xml", nBufferLength=0x105, lpBuffer=0x31e2b4, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Fonts\\Black Tie.xml", lpFilePart=0x0) returned 0x4e [0035.642] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e714) returned 1 [0035.642] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Fonts\\Black Tie.xml" (normalized: "c:\\program files\\microsoft office\\document themes 14\\theme fonts\\black tie.xml"), fInfoLevelId=0x0, lpFileInformation=0x31e790 | out: lpFileInformation=0x31e790*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf2ead00, ftCreationTime.dwHighDateTime=0x1cac1e1, ftLastAccessTime.dwLowDateTime=0x528a9ed0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xf8b1c980, ftLastWriteTime.dwHighDateTime=0x1d6eb7e, nFileSizeHigh=0x0, nFileSizeLow=0xf00)) returned 1 [0035.642] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e710) returned 1 [0035.642] MoveFileW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Fonts\\Black Tie.xml" (normalized: "c:\\program files\\microsoft office\\document themes 14\\theme fonts\\black tie.xml"), lpNewFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Fonts\\Black Tie.xml" (normalized: "c:\\program files\\microsoft office\\document themes 14\\theme fonts\\black tie.xml")) returned 1 [0035.643] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Fonts\\Civic.xml", nBufferLength=0x105, lpBuffer=0x31e194, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Fonts\\Civic.xml", lpFilePart=0x0) returned 0x4a [0035.643] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e688) returned 1 [0035.643] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Fonts\\Civic.xml" (normalized: "c:\\program files\\microsoft office\\document themes 14\\theme fonts\\civic.xml"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x224 [0035.643] GetFileType (hFile=0x224) returned 0x1 [0035.643] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e684) returned 1 [0035.644] GetFileType (hFile=0x224) returned 0x1 [0035.644] GetFileSize (in: hFile=0x224, lpFileSizeHigh=0x31e790 | out: lpFileSizeHigh=0x31e790*=0x0) returned 0xe1f [0035.644] ReadFile (in: hFile=0x224, lpBuffer=0x26fbe7c, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x31e73c, lpOverlapped=0x0 | out: lpBuffer=0x26fbe7c*, lpNumberOfBytesRead=0x31e73c*=0xe1f, lpOverlapped=0x0) returned 1 [0035.645] CloseHandle (hObject=0x224) returned 1 [0035.661] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Fonts\\Civic.xml", nBufferLength=0x105, lpBuffer=0x31e180, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Fonts\\Civic.xml", lpFilePart=0x0) returned 0x4a [0035.661] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e674) returned 1 [0035.661] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Fonts\\Civic.xml" (normalized: "c:\\program files\\microsoft office\\document themes 14\\theme fonts\\civic.xml"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x224 [0035.662] GetFileType (hFile=0x224) returned 0x1 [0035.662] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e670) returned 1 [0035.662] GetFileType (hFile=0x224) returned 0x1 [0035.662] WriteFile (in: hFile=0x224, lpBuffer=0x274e430*, nNumberOfBytesToWrite=0xe20, lpNumberOfBytesWritten=0x31e704, lpOverlapped=0x0 | out: lpBuffer=0x274e430*, lpNumberOfBytesWritten=0x31e704*=0xe20, lpOverlapped=0x0) returned 1 [0035.663] CloseHandle (hObject=0x224) returned 1 [0035.663] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Fonts\\Civic.xml", nBufferLength=0x105, lpBuffer=0x31e2b4, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Fonts\\Civic.xml", lpFilePart=0x0) returned 0x4a [0035.664] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Fonts\\Civic.xml", nBufferLength=0x105, lpBuffer=0x31e2b4, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Fonts\\Civic.xml", lpFilePart=0x0) returned 0x4a [0035.664] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e714) returned 1 [0035.664] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Fonts\\Civic.xml" (normalized: "c:\\program files\\microsoft office\\document themes 14\\theme fonts\\civic.xml"), fInfoLevelId=0x0, lpFileInformation=0x31e790 | out: lpFileInformation=0x31e790*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xedcdc100, ftCreationTime.dwHighDateTime=0x1cac1e0, ftLastAccessTime.dwLowDateTime=0x618565f0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xf8b68c40, ftLastWriteTime.dwHighDateTime=0x1d6eb7e, nFileSizeHigh=0x0, nFileSizeLow=0xe20)) returned 1 [0035.664] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e710) returned 1 [0035.664] MoveFileW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Fonts\\Civic.xml" (normalized: "c:\\program files\\microsoft office\\document themes 14\\theme fonts\\civic.xml"), lpNewFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Fonts\\Civic.xml" (normalized: "c:\\program files\\microsoft office\\document themes 14\\theme fonts\\civic.xml")) returned 1 [0035.664] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Fonts\\Clarity.xml", nBufferLength=0x105, lpBuffer=0x31e194, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Fonts\\Clarity.xml", lpFilePart=0x0) returned 0x4c [0035.664] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e688) returned 1 [0035.664] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Fonts\\Clarity.xml" (normalized: "c:\\program files\\microsoft office\\document themes 14\\theme fonts\\clarity.xml"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x224 [0035.664] GetFileType (hFile=0x224) returned 0x1 [0035.664] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e684) returned 1 [0035.665] GetFileType (hFile=0x224) returned 0x1 [0035.665] GetFileSize (in: hFile=0x224, lpFileSizeHigh=0x31e790 | out: lpFileSizeHigh=0x31e790*=0x0) returned 0xe0f [0035.665] ReadFile (in: hFile=0x224, lpBuffer=0x27504e0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x31e73c, lpOverlapped=0x0 | out: lpBuffer=0x27504e0*, lpNumberOfBytesRead=0x31e73c*=0xe0f, lpOverlapped=0x0) returned 1 [0035.666] CloseHandle (hObject=0x224) returned 1 [0035.680] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Fonts\\Clarity.xml", nBufferLength=0x105, lpBuffer=0x31e180, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Fonts\\Clarity.xml", lpFilePart=0x0) returned 0x4c [0035.680] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e674) returned 1 [0035.680] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Fonts\\Clarity.xml" (normalized: "c:\\program files\\microsoft office\\document themes 14\\theme fonts\\clarity.xml"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x224 [0035.681] GetFileType (hFile=0x224) returned 0x1 [0035.681] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e670) returned 1 [0035.681] GetFileType (hFile=0x224) returned 0x1 [0035.681] WriteFile (in: hFile=0x224, lpBuffer=0x27a2a4c*, nNumberOfBytesToWrite=0xe10, lpNumberOfBytesWritten=0x31e704, lpOverlapped=0x0 | out: lpBuffer=0x27a2a4c*, lpNumberOfBytesWritten=0x31e704*=0xe10, lpOverlapped=0x0) returned 1 [0035.682] CloseHandle (hObject=0x224) returned 1 [0035.682] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Fonts\\Clarity.xml", nBufferLength=0x105, lpBuffer=0x31e2b4, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Fonts\\Clarity.xml", lpFilePart=0x0) returned 0x4c [0035.682] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Fonts\\Clarity.xml", nBufferLength=0x105, lpBuffer=0x31e2b4, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Fonts\\Clarity.xml", lpFilePart=0x0) returned 0x4c [0035.682] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e714) returned 1 [0035.682] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Fonts\\Clarity.xml" (normalized: "c:\\program files\\microsoft office\\document themes 14\\theme fonts\\clarity.xml"), fInfoLevelId=0x0, lpFileInformation=0x31e790 | out: lpFileInformation=0x31e790*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x342eb00, ftCreationTime.dwHighDateTime=0x1cac1e1, ftLastAccessTime.dwLowDateTime=0x618565f0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xf8b8eda0, ftLastWriteTime.dwHighDateTime=0x1d6eb7e, nFileSizeHigh=0x0, nFileSizeLow=0xe10)) returned 1 [0035.683] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e710) returned 1 [0035.683] MoveFileW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Fonts\\Clarity.xml" (normalized: "c:\\program files\\microsoft office\\document themes 14\\theme fonts\\clarity.xml"), lpNewFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Fonts\\Clarity.xml" (normalized: "c:\\program files\\microsoft office\\document themes 14\\theme fonts\\clarity.xml")) returned 1 [0035.683] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Fonts\\Composite.xml", nBufferLength=0x105, lpBuffer=0x31e194, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Fonts\\Composite.xml", lpFilePart=0x0) returned 0x4e [0035.683] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e688) returned 1 [0035.683] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Fonts\\Composite.xml" (normalized: "c:\\program files\\microsoft office\\document themes 14\\theme fonts\\composite.xml"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x224 [0035.683] GetFileType (hFile=0x224) returned 0x1 [0035.683] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e684) returned 1 [0035.683] GetFileType (hFile=0x224) returned 0x1 [0035.683] GetFileSize (in: hFile=0x224, lpFileSizeHigh=0x31e790 | out: lpFileSizeHigh=0x31e790*=0x0) returned 0xe0e [0035.683] ReadFile (in: hFile=0x224, lpBuffer=0x27a4b0c, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x31e73c, lpOverlapped=0x0 | out: lpBuffer=0x27a4b0c*, lpNumberOfBytesRead=0x31e73c*=0xe0e, lpOverlapped=0x0) returned 1 [0035.685] CloseHandle (hObject=0x224) returned 1 [0035.698] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Fonts\\Composite.xml", nBufferLength=0x105, lpBuffer=0x31e180, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Fonts\\Composite.xml", lpFilePart=0x0) returned 0x4e [0035.698] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e674) returned 1 [0035.698] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Fonts\\Composite.xml" (normalized: "c:\\program files\\microsoft office\\document themes 14\\theme fonts\\composite.xml"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x224 [0035.699] GetFileType (hFile=0x224) returned 0x1 [0035.699] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e670) returned 1 [0035.699] GetFileType (hFile=0x224) returned 0x1 [0035.699] WriteFile (in: hFile=0x224, lpBuffer=0x27f7080*, nNumberOfBytesToWrite=0xe10, lpNumberOfBytesWritten=0x31e704, lpOverlapped=0x0 | out: lpBuffer=0x27f7080*, lpNumberOfBytesWritten=0x31e704*=0xe10, lpOverlapped=0x0) returned 1 [0035.700] CloseHandle (hObject=0x224) returned 1 [0035.700] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Fonts\\Composite.xml", nBufferLength=0x105, lpBuffer=0x31e2b4, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Fonts\\Composite.xml", lpFilePart=0x0) returned 0x4e [0035.701] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Fonts\\Composite.xml", nBufferLength=0x105, lpBuffer=0x31e2b4, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Fonts\\Composite.xml", lpFilePart=0x0) returned 0x4e [0035.701] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e714) returned 1 [0035.701] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Fonts\\Composite.xml" (normalized: "c:\\program files\\microsoft office\\document themes 14\\theme fonts\\composite.xml"), fInfoLevelId=0x0, lpFileInformation=0x31e790 | out: lpFileInformation=0x31e790*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x11910700, ftCreationTime.dwHighDateTime=0x1cac1e1, ftLastAccessTime.dwLowDateTime=0x618565f0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xf8bb4f00, ftLastWriteTime.dwHighDateTime=0x1d6eb7e, nFileSizeHigh=0x0, nFileSizeLow=0xe10)) returned 1 [0035.701] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e710) returned 1 [0035.701] MoveFileW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Fonts\\Composite.xml" (normalized: "c:\\program files\\microsoft office\\document themes 14\\theme fonts\\composite.xml"), lpNewFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Fonts\\Composite.xml" (normalized: "c:\\program files\\microsoft office\\document themes 14\\theme fonts\\composite.xml")) returned 1 [0035.701] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Fonts\\Concourse.xml", nBufferLength=0x105, lpBuffer=0x31e194, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Fonts\\Concourse.xml", lpFilePart=0x0) returned 0x4e [0035.701] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e688) returned 1 [0035.701] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Fonts\\Concourse.xml" (normalized: "c:\\program files\\microsoft office\\document themes 14\\theme fonts\\concourse.xml"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x224 [0035.701] GetFileType (hFile=0x224) returned 0x1 [0035.701] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e684) returned 1 [0035.701] GetFileType (hFile=0x224) returned 0x1 [0035.702] GetFileSize (in: hFile=0x224, lpFileSizeHigh=0x31e790 | out: lpFileSizeHigh=0x31e790*=0x0) returned 0xdc6 [0035.702] ReadFile (in: hFile=0x224, lpBuffer=0x27f9100, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x31e73c, lpOverlapped=0x0 | out: lpBuffer=0x27f9100*, lpNumberOfBytesRead=0x31e73c*=0xdc6, lpOverlapped=0x0) returned 1 [0035.703] CloseHandle (hObject=0x224) returned 1 [0035.717] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Fonts\\Concourse.xml", nBufferLength=0x105, lpBuffer=0x31e180, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Fonts\\Concourse.xml", lpFilePart=0x0) returned 0x4e [0035.717] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e674) returned 1 [0035.717] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Fonts\\Concourse.xml" (normalized: "c:\\program files\\microsoft office\\document themes 14\\theme fonts\\concourse.xml"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x224 [0035.718] GetFileType (hFile=0x224) returned 0x1 [0035.718] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e670) returned 1 [0035.718] GetFileType (hFile=0x224) returned 0x1 [0035.718] WriteFile (in: hFile=0x224, lpBuffer=0x284b53c*, nNumberOfBytesToWrite=0xdd0, lpNumberOfBytesWritten=0x31e704, lpOverlapped=0x0 | out: lpBuffer=0x284b53c*, lpNumberOfBytesWritten=0x31e704*=0xdd0, lpOverlapped=0x0) returned 1 [0035.719] CloseHandle (hObject=0x224) returned 1 [0035.719] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Fonts\\Concourse.xml", nBufferLength=0x105, lpBuffer=0x31e2b4, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Fonts\\Concourse.xml", lpFilePart=0x0) returned 0x4e [0035.719] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Fonts\\Concourse.xml", nBufferLength=0x105, lpBuffer=0x31e2b4, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Fonts\\Concourse.xml", lpFilePart=0x0) returned 0x4e [0035.719] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e714) returned 1 [0035.719] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Fonts\\Concourse.xml" (normalized: "c:\\program files\\microsoft office\\document themes 14\\theme fonts\\concourse.xml"), fInfoLevelId=0x0, lpFileInformation=0x31e790 | out: lpFileInformation=0x31e790*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xeefeee00, ftCreationTime.dwHighDateTime=0x1cac1e0, ftLastAccessTime.dwLowDateTime=0x618565f0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xf8bdb060, ftLastWriteTime.dwHighDateTime=0x1d6eb7e, nFileSizeHigh=0x0, nFileSizeLow=0xdd0)) returned 1 [0035.720] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e710) returned 1 [0035.720] MoveFileW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Fonts\\Concourse.xml" (normalized: "c:\\program files\\microsoft office\\document themes 14\\theme fonts\\concourse.xml"), lpNewFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Fonts\\Concourse.xml" (normalized: "c:\\program files\\microsoft office\\document themes 14\\theme fonts\\concourse.xml")) returned 1 [0035.720] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Fonts\\Couture.xml", nBufferLength=0x105, lpBuffer=0x31e194, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Fonts\\Couture.xml", lpFilePart=0x0) returned 0x4c [0035.720] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e688) returned 1 [0035.720] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Fonts\\Couture.xml" (normalized: "c:\\program files\\microsoft office\\document themes 14\\theme fonts\\couture.xml"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x224 [0035.721] GetFileType (hFile=0x224) returned 0x1 [0035.721] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e684) returned 1 [0035.721] GetFileType (hFile=0x224) returned 0x1 [0035.721] GetFileSize (in: hFile=0x224, lpFileSizeHigh=0x31e790 | out: lpFileSizeHigh=0x31e790*=0x0) returned 0xefc [0035.725] ReadFile (in: hFile=0x224, lpBuffer=0x264bd24, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x31e73c, lpOverlapped=0x0 | out: lpBuffer=0x264bd24*, lpNumberOfBytesRead=0x31e73c*=0xefc, lpOverlapped=0x0) returned 1 [0035.726] CloseHandle (hObject=0x224) returned 1 [0035.765] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Fonts\\Couture.xml", nBufferLength=0x105, lpBuffer=0x31e180, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Fonts\\Couture.xml", lpFilePart=0x0) returned 0x4c [0035.765] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e674) returned 1 [0035.765] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Fonts\\Couture.xml" (normalized: "c:\\program files\\microsoft office\\document themes 14\\theme fonts\\couture.xml"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x224 [0035.766] GetFileType (hFile=0x224) returned 0x1 [0035.766] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e670) returned 1 [0035.766] GetFileType (hFile=0x224) returned 0x1 [0035.766] WriteFile (in: hFile=0x224, lpBuffer=0x269e89c*, nNumberOfBytesToWrite=0xf00, lpNumberOfBytesWritten=0x31e704, lpOverlapped=0x0 | out: lpBuffer=0x269e89c*, lpNumberOfBytesWritten=0x31e704*=0xf00, lpOverlapped=0x0) returned 1 [0035.767] CloseHandle (hObject=0x224) returned 1 [0035.768] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Fonts\\Couture.xml", nBufferLength=0x105, lpBuffer=0x31e2b4, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Fonts\\Couture.xml", lpFilePart=0x0) returned 0x4c [0035.768] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Fonts\\Couture.xml", nBufferLength=0x105, lpBuffer=0x31e2b4, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Fonts\\Couture.xml", lpFilePart=0x0) returned 0x4c [0035.768] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e714) returned 1 [0035.768] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Fonts\\Couture.xml" (normalized: "c:\\program files\\microsoft office\\document themes 14\\theme fonts\\couture.xml"), fInfoLevelId=0x0, lpFileInformation=0x31e790 | out: lpFileInformation=0x31e790*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x13f36100, ftCreationTime.dwHighDateTime=0x1cac1e1, ftLastAccessTime.dwLowDateTime=0x618565f0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xf8c4d480, ftLastWriteTime.dwHighDateTime=0x1d6eb7e, nFileSizeHigh=0x0, nFileSizeLow=0xf00)) returned 1 [0035.768] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e710) returned 1 [0035.768] MoveFileW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Fonts\\Couture.xml" (normalized: "c:\\program files\\microsoft office\\document themes 14\\theme fonts\\couture.xml"), lpNewFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Fonts\\Couture.xml" (normalized: "c:\\program files\\microsoft office\\document themes 14\\theme fonts\\couture.xml")) returned 1 [0035.769] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Fonts\\Elemental.xml", nBufferLength=0x105, lpBuffer=0x31e194, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Fonts\\Elemental.xml", lpFilePart=0x0) returned 0x4e [0035.769] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e688) returned 1 [0035.769] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Fonts\\Elemental.xml" (normalized: "c:\\program files\\microsoft office\\document themes 14\\theme fonts\\elemental.xml"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x224 [0035.769] GetFileType (hFile=0x224) returned 0x1 [0035.769] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e684) returned 1 [0035.769] GetFileType (hFile=0x224) returned 0x1 [0035.769] GetFileSize (in: hFile=0x224, lpFileSizeHigh=0x31e790 | out: lpFileSizeHigh=0x31e790*=0x0) returned 0xe48 [0035.769] ReadFile (in: hFile=0x224, lpBuffer=0x26a0994, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x31e73c, lpOverlapped=0x0 | out: lpBuffer=0x26a0994*, lpNumberOfBytesRead=0x31e73c*=0xe48, lpOverlapped=0x0) returned 1 [0035.770] CloseHandle (hObject=0x224) returned 1 [0035.784] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Fonts\\Elemental.xml", nBufferLength=0x105, lpBuffer=0x31e180, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Fonts\\Elemental.xml", lpFilePart=0x0) returned 0x4e [0035.784] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e674) returned 1 [0035.784] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Fonts\\Elemental.xml" (normalized: "c:\\program files\\microsoft office\\document themes 14\\theme fonts\\elemental.xml"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x224 [0035.785] GetFileType (hFile=0x224) returned 0x1 [0035.785] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e670) returned 1 [0035.785] GetFileType (hFile=0x224) returned 0x1 [0035.788] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Fonts\\Elemental.xml", nBufferLength=0x105, lpBuffer=0x31e2b4, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Fonts\\Elemental.xml", lpFilePart=0x0) returned 0x4e [0035.788] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Fonts\\Elemental.xml", nBufferLength=0x105, lpBuffer=0x31e2b4, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Fonts\\Elemental.xml", lpFilePart=0x0) returned 0x4e [0035.788] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e714) returned 1 [0035.788] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Fonts\\Elemental.xml" (normalized: "c:\\program files\\microsoft office\\document themes 14\\theme fonts\\elemental.xml"), fInfoLevelId=0x0, lpFileInformation=0x31e790 | out: lpFileInformation=0x31e790*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x15248e00, ftCreationTime.dwHighDateTime=0x1cac1e1, ftLastAccessTime.dwLowDateTime=0x618565f0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xf8c99740, ftLastWriteTime.dwHighDateTime=0x1d6eb7e, nFileSizeHigh=0x0, nFileSizeLow=0xe50)) returned 1 [0035.789] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e710) returned 1 [0035.789] MoveFileW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Fonts\\Elemental.xml" (normalized: "c:\\program files\\microsoft office\\document themes 14\\theme fonts\\elemental.xml"), lpNewFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Fonts\\Elemental.xml" (normalized: "c:\\program files\\microsoft office\\document themes 14\\theme fonts\\elemental.xml")) returned 1 [0035.789] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Fonts\\Equity.xml", nBufferLength=0x105, lpBuffer=0x31e194, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Fonts\\Equity.xml", lpFilePart=0x0) returned 0x4b [0035.789] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e688) returned 1 [0035.789] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Fonts\\Equity.xml" (normalized: "c:\\program files\\microsoft office\\document themes 14\\theme fonts\\equity.xml"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x224 [0035.789] GetFileType (hFile=0x224) returned 0x1 [0035.789] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e684) returned 1 [0035.789] GetFileType (hFile=0x224) returned 0x1 [0035.789] GetFileSize (in: hFile=0x224, lpFileSizeHigh=0x31e790 | out: lpFileSizeHigh=0x31e790*=0x0) returned 0xef5 [0035.789] ReadFile (in: hFile=0x224, lpBuffer=0x26f51f0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x31e73c, lpOverlapped=0x0 | out: lpBuffer=0x26f51f0*, lpNumberOfBytesRead=0x31e73c*=0xef5, lpOverlapped=0x0) returned 1 [0035.791] CloseHandle (hObject=0x224) returned 1 [0035.804] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Fonts\\Equity.xml", nBufferLength=0x105, lpBuffer=0x31e180, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Fonts\\Equity.xml", lpFilePart=0x0) returned 0x4b [0035.804] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e674) returned 1 [0035.804] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Fonts\\Equity.xml" (normalized: "c:\\program files\\microsoft office\\document themes 14\\theme fonts\\equity.xml"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x224 [0035.805] GetFileType (hFile=0x224) returned 0x1 [0035.805] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e670) returned 1 [0035.805] GetFileType (hFile=0x224) returned 0x1 [0035.806] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Fonts\\Equity.xml", nBufferLength=0x105, lpBuffer=0x31e2b4, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Fonts\\Equity.xml", lpFilePart=0x0) returned 0x4b [0035.806] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Fonts\\Equity.xml", nBufferLength=0x105, lpBuffer=0x31e2b4, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Fonts\\Equity.xml", lpFilePart=0x0) returned 0x4b [0035.806] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e714) returned 1 [0035.806] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Fonts\\Equity.xml" (normalized: "c:\\program files\\microsoft office\\document themes 14\\theme fonts\\equity.xml"), fInfoLevelId=0x0, lpFileInformation=0x31e790 | out: lpFileInformation=0x31e790*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf0301b00, ftCreationTime.dwHighDateTime=0x1cac1e0, ftLastAccessTime.dwLowDateTime=0x528a9ed0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xf8cbf8a0, ftLastWriteTime.dwHighDateTime=0x1d6eb7e, nFileSizeHigh=0x0, nFileSizeLow=0xf00)) returned 1 [0035.806] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e710) returned 1 [0035.806] MoveFileW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Fonts\\Equity.xml" (normalized: "c:\\program files\\microsoft office\\document themes 14\\theme fonts\\equity.xml"), lpNewFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Fonts\\Equity.xml" (normalized: "c:\\program files\\microsoft office\\document themes 14\\theme fonts\\equity.xml")) returned 1 [0035.807] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Fonts\\Essential.xml", nBufferLength=0x105, lpBuffer=0x31e194, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Fonts\\Essential.xml", lpFilePart=0x0) returned 0x4e [0035.807] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e688) returned 1 [0035.807] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Fonts\\Essential.xml" (normalized: "c:\\program files\\microsoft office\\document themes 14\\theme fonts\\essential.xml"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x224 [0035.807] GetFileType (hFile=0x224) returned 0x1 [0035.807] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e684) returned 1 [0035.807] GetFileType (hFile=0x224) returned 0x1 [0035.807] GetFileSize (in: hFile=0x224, lpFileSizeHigh=0x31e790 | out: lpFileSizeHigh=0x31e790*=0x0) returned 0xe16 [0035.807] ReadFile (in: hFile=0x224, lpBuffer=0x2749cd0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x31e73c, lpOverlapped=0x0 | out: lpBuffer=0x2749cd0*, lpNumberOfBytesRead=0x31e73c*=0xe16, lpOverlapped=0x0) returned 1 [0035.809] CloseHandle (hObject=0x224) returned 1 [0035.822] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Fonts\\Essential.xml", nBufferLength=0x105, lpBuffer=0x31e180, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Fonts\\Essential.xml", lpFilePart=0x0) returned 0x4e [0035.822] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e674) returned 1 [0035.822] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Fonts\\Essential.xml" (normalized: "c:\\program files\\microsoft office\\document themes 14\\theme fonts\\essential.xml"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x224 [0035.823] GetFileType (hFile=0x224) returned 0x1 [0035.823] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e670) returned 1 [0035.823] GetFileType (hFile=0x224) returned 0x1 [0035.823] WriteFile (in: hFile=0x224, lpBuffer=0x279c29c*, nNumberOfBytesToWrite=0xe20, lpNumberOfBytesWritten=0x31e704, lpOverlapped=0x0 | out: lpBuffer=0x279c29c*, lpNumberOfBytesWritten=0x31e704*=0xe20, lpOverlapped=0x0) returned 1 [0035.824] CloseHandle (hObject=0x224) returned 1 [0035.825] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Fonts\\Essential.xml", nBufferLength=0x105, lpBuffer=0x31e2b4, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Fonts\\Essential.xml", lpFilePart=0x0) returned 0x4e [0035.825] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Fonts\\Essential.xml", nBufferLength=0x105, lpBuffer=0x31e2b4, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Fonts\\Essential.xml", lpFilePart=0x0) returned 0x4e [0035.825] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e714) returned 1 [0035.825] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Fonts\\Essential.xml" (normalized: "c:\\program files\\microsoft office\\document themes 14\\theme fonts\\essential.xml"), fInfoLevelId=0x0, lpFileInformation=0x31e790 | out: lpFileInformation=0x31e790*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4741800, ftCreationTime.dwHighDateTime=0x1cac1e1, ftLastAccessTime.dwLowDateTime=0x528a9ed0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xf8ce5a00, ftLastWriteTime.dwHighDateTime=0x1d6eb7e, nFileSizeHigh=0x0, nFileSizeLow=0xe20)) returned 1 [0035.825] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e710) returned 1 [0035.825] MoveFileW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Fonts\\Essential.xml" (normalized: "c:\\program files\\microsoft office\\document themes 14\\theme fonts\\essential.xml"), lpNewFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Fonts\\Essential.xml" (normalized: "c:\\program files\\microsoft office\\document themes 14\\theme fonts\\essential.xml")) returned 1 [0035.825] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Fonts\\Executive.xml", nBufferLength=0x105, lpBuffer=0x31e194, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Fonts\\Executive.xml", lpFilePart=0x0) returned 0x4e [0035.825] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e688) returned 1 [0035.825] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Fonts\\Executive.xml" (normalized: "c:\\program files\\microsoft office\\document themes 14\\theme fonts\\executive.xml"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x224 [0035.826] GetFileType (hFile=0x224) returned 0x1 [0035.826] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e684) returned 1 [0035.826] GetFileType (hFile=0x224) returned 0x1 [0035.826] GetFileSize (in: hFile=0x224, lpFileSizeHigh=0x31e790 | out: lpFileSizeHigh=0x31e790*=0x0) returned 0xe2f [0035.826] ReadFile (in: hFile=0x224, lpBuffer=0x279e384, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x31e73c, lpOverlapped=0x0 | out: lpBuffer=0x279e384*, lpNumberOfBytesRead=0x31e73c*=0xe2f, lpOverlapped=0x0) returned 1 [0035.827] CloseHandle (hObject=0x224) returned 1 [0035.844] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Fonts\\Executive.xml", nBufferLength=0x105, lpBuffer=0x31e180, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Fonts\\Executive.xml", lpFilePart=0x0) returned 0x4e [0035.844] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e674) returned 1 [0035.844] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Fonts\\Executive.xml" (normalized: "c:\\program files\\microsoft office\\document themes 14\\theme fonts\\executive.xml"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x224 [0035.845] GetFileType (hFile=0x224) returned 0x1 [0035.845] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e670) returned 1 [0035.845] GetFileType (hFile=0x224) returned 0x1 [0035.845] WriteFile (in: hFile=0x224, lpBuffer=0x27f0998*, nNumberOfBytesToWrite=0xe30, lpNumberOfBytesWritten=0x31e704, lpOverlapped=0x0 | out: lpBuffer=0x27f0998*, lpNumberOfBytesWritten=0x31e704*=0xe30, lpOverlapped=0x0) returned 1 [0035.846] CloseHandle (hObject=0x224) returned 1 [0035.846] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Fonts\\Executive.xml", nBufferLength=0x105, lpBuffer=0x31e2b4, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Fonts\\Executive.xml", lpFilePart=0x0) returned 0x4e [0035.846] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Fonts\\Executive.xml", nBufferLength=0x105, lpBuffer=0x31e2b4, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Fonts\\Executive.xml", lpFilePart=0x0) returned 0x4e [0035.846] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e714) returned 1 [0035.846] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Fonts\\Executive.xml" (normalized: "c:\\program files\\microsoft office\\document themes 14\\theme fonts\\executive.xml"), fInfoLevelId=0x0, lpFileInformation=0x31e790 | out: lpFileInformation=0x31e790*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1655bb00, ftCreationTime.dwHighDateTime=0x1cac1e1, ftLastAccessTime.dwLowDateTime=0x618565f0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xf8d0bb60, ftLastWriteTime.dwHighDateTime=0x1d6eb7e, nFileSizeHigh=0x0, nFileSizeLow=0xe30)) returned 1 [0035.847] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e710) returned 1 [0035.847] MoveFileW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Fonts\\Executive.xml" (normalized: "c:\\program files\\microsoft office\\document themes 14\\theme fonts\\executive.xml"), lpNewFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Fonts\\Executive.xml" (normalized: "c:\\program files\\microsoft office\\document themes 14\\theme fonts\\executive.xml")) returned 1 [0035.847] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Fonts\\Flow.xml", nBufferLength=0x105, lpBuffer=0x31e194, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Fonts\\Flow.xml", lpFilePart=0x0) returned 0x49 [0035.847] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e688) returned 1 [0035.847] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Fonts\\Flow.xml" (normalized: "c:\\program files\\microsoft office\\document themes 14\\theme fonts\\flow.xml"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x224 [0035.847] GetFileType (hFile=0x224) returned 0x1 [0035.847] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e684) returned 1 [0035.847] GetFileType (hFile=0x224) returned 0x1 [0035.847] GetFileSize (in: hFile=0x224, lpFileSizeHigh=0x31e790 | out: lpFileSizeHigh=0x31e790*=0x0) returned 0xdb5 [0035.847] ReadFile (in: hFile=0x224, lpBuffer=0x27f29f4, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x31e73c, lpOverlapped=0x0 | out: lpBuffer=0x27f29f4*, lpNumberOfBytesRead=0x31e73c*=0xdb5, lpOverlapped=0x0) returned 1 [0035.849] CloseHandle (hObject=0x224) returned 1 [0035.862] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Fonts\\Flow.xml", nBufferLength=0x105, lpBuffer=0x31e180, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Fonts\\Flow.xml", lpFilePart=0x0) returned 0x49 [0035.862] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e674) returned 1 [0035.862] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Fonts\\Flow.xml" (normalized: "c:\\program files\\microsoft office\\document themes 14\\theme fonts\\flow.xml"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x224 [0035.863] GetFileType (hFile=0x224) returned 0x1 [0035.863] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e670) returned 1 [0035.863] GetFileType (hFile=0x224) returned 0x1 [0035.864] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Fonts\\Flow.xml", nBufferLength=0x105, lpBuffer=0x31e2b4, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Fonts\\Flow.xml", lpFilePart=0x0) returned 0x49 [0035.864] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Fonts\\Flow.xml", nBufferLength=0x105, lpBuffer=0x31e2b4, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Fonts\\Flow.xml", lpFilePart=0x0) returned 0x49 [0035.864] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e714) returned 1 [0035.864] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Fonts\\Flow.xml" (normalized: "c:\\program files\\microsoft office\\document themes 14\\theme fonts\\flow.xml"), fInfoLevelId=0x0, lpFileInformation=0x31e790 | out: lpFileInformation=0x31e790*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf2927500, ftCreationTime.dwHighDateTime=0x1cac1e0, ftLastAccessTime.dwLowDateTime=0x618565f0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xf8d31cc0, ftLastWriteTime.dwHighDateTime=0x1d6eb7e, nFileSizeHigh=0x0, nFileSizeLow=0xdc0)) returned 1 [0035.864] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e710) returned 1 [0035.864] MoveFileW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Fonts\\Flow.xml" (normalized: "c:\\program files\\microsoft office\\document themes 14\\theme fonts\\flow.xml"), lpNewFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Fonts\\Flow.xml" (normalized: "c:\\program files\\microsoft office\\document themes 14\\theme fonts\\flow.xml")) returned 1 [0035.864] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Fonts\\Foundry.xml", nBufferLength=0x105, lpBuffer=0x31e194, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Fonts\\Foundry.xml", lpFilePart=0x0) returned 0x4c [0035.864] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e688) returned 1 [0035.864] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Fonts\\Foundry.xml" (normalized: "c:\\program files\\microsoft office\\document themes 14\\theme fonts\\foundry.xml"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x224 [0035.865] GetFileType (hFile=0x224) returned 0x1 [0035.866] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e684) returned 1 [0035.866] GetFileType (hFile=0x224) returned 0x1 [0035.866] GetFileSize (in: hFile=0x224, lpFileSizeHigh=0x31e790 | out: lpFileSizeHigh=0x31e790*=0x0) returned 0xed4 [0035.866] ReadFile (in: hFile=0x224, lpBuffer=0x2846f38, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x31e73c, lpOverlapped=0x0 | out: lpBuffer=0x2846f38*, lpNumberOfBytesRead=0x31e73c*=0xed4, lpOverlapped=0x0) returned 1 [0035.867] CloseHandle (hObject=0x224) returned 1 [0035.910] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Fonts\\Foundry.xml", nBufferLength=0x105, lpBuffer=0x31e180, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Fonts\\Foundry.xml", lpFilePart=0x0) returned 0x4c [0035.910] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e674) returned 1 [0035.910] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Fonts\\Foundry.xml" (normalized: "c:\\program files\\microsoft office\\document themes 14\\theme fonts\\foundry.xml"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x224 [0035.911] GetFileType (hFile=0x224) returned 0x1 [0035.911] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e670) returned 1 [0035.911] GetFileType (hFile=0x224) returned 0x1 [0035.913] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Fonts\\Foundry.xml", nBufferLength=0x105, lpBuffer=0x31e2b4, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Fonts\\Foundry.xml", lpFilePart=0x0) returned 0x4c [0035.913] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Fonts\\Foundry.xml", nBufferLength=0x105, lpBuffer=0x31e2b4, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Fonts\\Foundry.xml", lpFilePart=0x0) returned 0x4c [0035.913] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e714) returned 1 [0035.913] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Fonts\\Foundry.xml" (normalized: "c:\\program files\\microsoft office\\document themes 14\\theme fonts\\foundry.xml"), fInfoLevelId=0x0, lpFileInformation=0x31e790 | out: lpFileInformation=0x31e790*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf1614800, ftCreationTime.dwHighDateTime=0x1cac1e0, ftLastAccessTime.dwLowDateTime=0x618565f0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xf8dca240, ftLastWriteTime.dwHighDateTime=0x1d6eb7e, nFileSizeHigh=0x0, nFileSizeLow=0xee0)) returned 1 [0035.913] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e710) returned 1 [0035.913] MoveFileW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Fonts\\Foundry.xml" (normalized: "c:\\program files\\microsoft office\\document themes 14\\theme fonts\\foundry.xml"), lpNewFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Fonts\\Foundry.xml" (normalized: "c:\\program files\\microsoft office\\document themes 14\\theme fonts\\foundry.xml")) returned 1 [0035.914] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Fonts\\Grid.xml", nBufferLength=0x105, lpBuffer=0x31e194, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Fonts\\Grid.xml", lpFilePart=0x0) returned 0x49 [0035.914] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e688) returned 1 [0035.914] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Fonts\\Grid.xml" (normalized: "c:\\program files\\microsoft office\\document themes 14\\theme fonts\\grid.xml"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x224 [0035.915] GetFileType (hFile=0x224) returned 0x1 [0035.915] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e684) returned 1 [0035.915] GetFileType (hFile=0x224) returned 0x1 [0035.915] GetFileSize (in: hFile=0x224, lpFileSizeHigh=0x31e790 | out: lpFileSizeHigh=0x31e790*=0x0) returned 0xe59 [0035.915] ReadFile (in: hFile=0x224, lpBuffer=0x269bc50, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x31e73c, lpOverlapped=0x0 | out: lpBuffer=0x269bc50*, lpNumberOfBytesRead=0x31e73c*=0xe59, lpOverlapped=0x0) returned 1 [0035.916] CloseHandle (hObject=0x224) returned 1 [0035.930] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Fonts\\Grid.xml", nBufferLength=0x105, lpBuffer=0x31e180, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Fonts\\Grid.xml", lpFilePart=0x0) returned 0x49 [0035.930] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e674) returned 1 [0035.930] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Fonts\\Grid.xml" (normalized: "c:\\program files\\microsoft office\\document themes 14\\theme fonts\\grid.xml"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x224 [0035.930] GetFileType (hFile=0x224) returned 0x1 [0035.931] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e670) returned 1 [0035.931] GetFileType (hFile=0x224) returned 0x1 [0035.931] WriteFile (in: hFile=0x224, lpBuffer=0x26ee4a0*, nNumberOfBytesToWrite=0xe60, lpNumberOfBytesWritten=0x31e704, lpOverlapped=0x0 | out: lpBuffer=0x26ee4a0*, lpNumberOfBytesWritten=0x31e704*=0xe60, lpOverlapped=0x0) returned 1 [0035.931] CloseHandle (hObject=0x224) returned 1 [0035.932] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Fonts\\Grid.xml", nBufferLength=0x105, lpBuffer=0x31e2b4, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Fonts\\Grid.xml", lpFilePart=0x0) returned 0x49 [0035.932] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Fonts\\Grid.xml", nBufferLength=0x105, lpBuffer=0x31e2b4, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Fonts\\Grid.xml", lpFilePart=0x0) returned 0x49 [0035.932] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e714) returned 1 [0035.932] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Fonts\\Grid.xml" (normalized: "c:\\program files\\microsoft office\\document themes 14\\theme fonts\\grid.xml"), fInfoLevelId=0x0, lpFileInformation=0x31e790 | out: lpFileInformation=0x31e790*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5a54500, ftCreationTime.dwHighDateTime=0x1cac1e1, ftLastAccessTime.dwLowDateTime=0x528a9ed0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xf8df03a0, ftLastWriteTime.dwHighDateTime=0x1d6eb7e, nFileSizeHigh=0x0, nFileSizeLow=0xe60)) returned 1 [0035.932] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e710) returned 1 [0035.932] MoveFileW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Fonts\\Grid.xml" (normalized: "c:\\program files\\microsoft office\\document themes 14\\theme fonts\\grid.xml"), lpNewFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Fonts\\Grid.xml" (normalized: "c:\\program files\\microsoft office\\document themes 14\\theme fonts\\grid.xml")) returned 1 [0035.933] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Fonts\\Hardcover.xml", nBufferLength=0x105, lpBuffer=0x31e194, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Fonts\\Hardcover.xml", lpFilePart=0x0) returned 0x4e [0035.933] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e688) returned 1 [0035.933] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Fonts\\Hardcover.xml" (normalized: "c:\\program files\\microsoft office\\document themes 14\\theme fonts\\hardcover.xml"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x224 [0035.933] GetFileType (hFile=0x224) returned 0x1 [0035.933] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e684) returned 1 [0035.933] GetFileType (hFile=0x224) returned 0x1 [0035.933] GetFileSize (in: hFile=0x224, lpFileSizeHigh=0x31e790 | out: lpFileSizeHigh=0x31e790*=0x0) returned 0xf09 [0035.933] ReadFile (in: hFile=0x224, lpBuffer=0x26f064c, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x31e73c, lpOverlapped=0x0 | out: lpBuffer=0x26f064c*, lpNumberOfBytesRead=0x31e73c*=0xf09, lpOverlapped=0x0) returned 1 [0035.950] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Fonts\\Hardcover.xml", nBufferLength=0x105, lpBuffer=0x31e180, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Fonts\\Hardcover.xml", lpFilePart=0x0) returned 0x4e [0035.950] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e674) returned 1 [0035.950] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Fonts\\Hardcover.xml" (normalized: "c:\\program files\\microsoft office\\document themes 14\\theme fonts\\hardcover.xml"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x224 [0035.951] GetFileType (hFile=0x224) returned 0x1 [0035.951] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e670) returned 1 [0035.951] GetFileType (hFile=0x224) returned 0x1 [0035.952] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Fonts\\Hardcover.xml", nBufferLength=0x105, lpBuffer=0x31e2b4, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Fonts\\Hardcover.xml", lpFilePart=0x0) returned 0x4e [0035.952] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Fonts\\Hardcover.xml", nBufferLength=0x105, lpBuffer=0x31e2b4, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Fonts\\Hardcover.xml", lpFilePart=0x0) returned 0x4e [0035.952] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e714) returned 1 [0035.952] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Fonts\\Hardcover.xml" (normalized: "c:\\program files\\microsoft office\\document themes 14\\theme fonts\\hardcover.xml"), fInfoLevelId=0x0, lpFileInformation=0x31e790 | out: lpFileInformation=0x31e790*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6d67200, ftCreationTime.dwHighDateTime=0x1cac1e1, ftLastAccessTime.dwLowDateTime=0x618565f0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xf8e16500, ftLastWriteTime.dwHighDateTime=0x1d6eb7e, nFileSizeHigh=0x0, nFileSizeLow=0xf10)) returned 1 [0035.952] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e710) returned 1 [0035.952] MoveFileW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Fonts\\Hardcover.xml" (normalized: "c:\\program files\\microsoft office\\document themes 14\\theme fonts\\hardcover.xml"), lpNewFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Fonts\\Hardcover.xml" (normalized: "c:\\program files\\microsoft office\\document themes 14\\theme fonts\\hardcover.xml")) returned 1 [0035.952] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Fonts\\Horizon.xml", nBufferLength=0x105, lpBuffer=0x31e194, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Fonts\\Horizon.xml", lpFilePart=0x0) returned 0x4c [0035.952] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e688) returned 1 [0035.952] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Fonts\\Horizon.xml" (normalized: "c:\\program files\\microsoft office\\document themes 14\\theme fonts\\horizon.xml"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x224 [0035.952] GetFileType (hFile=0x224) returned 0x1 [0035.952] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e684) returned 1 [0035.952] GetFileType (hFile=0x224) returned 0x1 [0035.952] GetFileSize (in: hFile=0x224, lpFileSizeHigh=0x31e790 | out: lpFileSizeHigh=0x31e790*=0x0) returned 0xe2a [0035.953] ReadFile (in: hFile=0x224, lpBuffer=0x27451a0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x31e73c, lpOverlapped=0x0 | out: lpBuffer=0x27451a0*, lpNumberOfBytesRead=0x31e73c*=0xe2a, lpOverlapped=0x0) returned 1 [0035.968] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Fonts\\Horizon.xml", nBufferLength=0x105, lpBuffer=0x31e180, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Fonts\\Horizon.xml", lpFilePart=0x0) returned 0x4c [0035.968] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e674) returned 1 [0035.968] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Fonts\\Horizon.xml" (normalized: "c:\\program files\\microsoft office\\document themes 14\\theme fonts\\horizon.xml"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x224 [0035.968] GetFileType (hFile=0x224) returned 0x1 [0035.968] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e670) returned 1 [0035.968] GetFileType (hFile=0x224) returned 0x1 [0035.969] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Fonts\\Horizon.xml", nBufferLength=0x105, lpBuffer=0x31e2b4, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Fonts\\Horizon.xml", lpFilePart=0x0) returned 0x4c [0035.970] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Fonts\\Horizon.xml", nBufferLength=0x105, lpBuffer=0x31e2b4, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Fonts\\Horizon.xml", lpFilePart=0x0) returned 0x4c [0035.970] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e714) returned 1 [0035.970] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Fonts\\Horizon.xml" (normalized: "c:\\program files\\microsoft office\\document themes 14\\theme fonts\\horizon.xml"), fInfoLevelId=0x0, lpFileInformation=0x31e790 | out: lpFileInformation=0x31e790*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1786e800, ftCreationTime.dwHighDateTime=0x1cac1e1, ftLastAccessTime.dwLowDateTime=0x528a9ed0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xf8e3c660, ftLastWriteTime.dwHighDateTime=0x1d6eb7e, nFileSizeHigh=0x0, nFileSizeLow=0xe30)) returned 1 [0035.970] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e710) returned 1 [0035.970] MoveFileW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Fonts\\Horizon.xml" (normalized: "c:\\program files\\microsoft office\\document themes 14\\theme fonts\\horizon.xml"), lpNewFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Fonts\\Horizon.xml" (normalized: "c:\\program files\\microsoft office\\document themes 14\\theme fonts\\horizon.xml")) returned 1 [0035.970] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Fonts\\Median.xml", nBufferLength=0x105, lpBuffer=0x31e194, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Fonts\\Median.xml", lpFilePart=0x0) returned 0x4b [0035.970] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e688) returned 1 [0035.970] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Fonts\\Median.xml" (normalized: "c:\\program files\\microsoft office\\document themes 14\\theme fonts\\median.xml"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x224 [0035.970] GetFileType (hFile=0x224) returned 0x1 [0035.970] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e684) returned 1 [0035.970] GetFileType (hFile=0x224) returned 0x1 [0035.970] GetFileSize (in: hFile=0x224, lpFileSizeHigh=0x31e790 | out: lpFileSizeHigh=0x31e790*=0x0) returned 0xeed [0035.971] ReadFile (in: hFile=0x224, lpBuffer=0x2799944, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x31e73c, lpOverlapped=0x0 | out: lpBuffer=0x2799944*, lpNumberOfBytesRead=0x31e73c*=0xeed, lpOverlapped=0x0) returned 1 [0035.985] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Fonts\\Median.xml", nBufferLength=0x105, lpBuffer=0x31e180, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Fonts\\Median.xml", lpFilePart=0x0) returned 0x4b [0035.985] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e674) returned 1 [0035.985] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Fonts\\Median.xml" (normalized: "c:\\program files\\microsoft office\\document themes 14\\theme fonts\\median.xml"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x224 [0035.986] GetFileType (hFile=0x224) returned 0x1 [0035.986] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e670) returned 1 [0035.986] GetFileType (hFile=0x224) returned 0x1 [0035.986] WriteFile (in: hFile=0x224, lpBuffer=0x27ec30c*, nNumberOfBytesToWrite=0xef0, lpNumberOfBytesWritten=0x31e704, lpOverlapped=0x0 | out: lpBuffer=0x27ec30c*, lpNumberOfBytesWritten=0x31e704*=0xef0, lpOverlapped=0x0) returned 1 [0035.987] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Fonts\\Median.xml", nBufferLength=0x105, lpBuffer=0x31e2b4, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Fonts\\Median.xml", lpFilePart=0x0) returned 0x4b [0035.987] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Fonts\\Median.xml", nBufferLength=0x105, lpBuffer=0x31e2b4, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Fonts\\Median.xml", lpFilePart=0x0) returned 0x4b [0035.987] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e714) returned 1 [0035.987] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Fonts\\Median.xml" (normalized: "c:\\program files\\microsoft office\\document themes 14\\theme fonts\\median.xml"), fInfoLevelId=0x0, lpFileInformation=0x31e790 | out: lpFileInformation=0x31e790*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf3c3a200, ftCreationTime.dwHighDateTime=0x1cac1e0, ftLastAccessTime.dwLowDateTime=0x618565f0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xf8e627c0, ftLastWriteTime.dwHighDateTime=0x1d6eb7e, nFileSizeHigh=0x0, nFileSizeLow=0xef0)) returned 1 [0035.987] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e710) returned 1 [0035.987] MoveFileW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Fonts\\Median.xml" (normalized: "c:\\program files\\microsoft office\\document themes 14\\theme fonts\\median.xml"), lpNewFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Fonts\\Median.xml" (normalized: "c:\\program files\\microsoft office\\document themes 14\\theme fonts\\median.xml")) returned 1 [0035.988] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Fonts\\Metro.xml", nBufferLength=0x105, lpBuffer=0x31e194, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Fonts\\Metro.xml", lpFilePart=0x0) returned 0x4a [0035.988] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e688) returned 1 [0035.988] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Fonts\\Metro.xml" (normalized: "c:\\program files\\microsoft office\\document themes 14\\theme fonts\\metro.xml"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x224 [0035.988] GetFileType (hFile=0x224) returned 0x1 [0035.988] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e684) returned 1 [0035.988] GetFileType (hFile=0x224) returned 0x1 [0035.988] GetFileSize (in: hFile=0x224, lpFileSizeHigh=0x31e790 | out: lpFileSizeHigh=0x31e790*=0x0) returned 0xe13 [0035.988] ReadFile (in: hFile=0x224, lpBuffer=0x27ee3b8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x31e73c, lpOverlapped=0x0 | out: lpBuffer=0x27ee3b8*, lpNumberOfBytesRead=0x31e73c*=0xe13, lpOverlapped=0x0) returned 1 [0036.003] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Fonts\\Metro.xml", nBufferLength=0x105, lpBuffer=0x31e180, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Fonts\\Metro.xml", lpFilePart=0x0) returned 0x4a [0036.003] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e674) returned 1 [0036.003] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Fonts\\Metro.xml" (normalized: "c:\\program files\\microsoft office\\document themes 14\\theme fonts\\metro.xml"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x224 [0036.004] GetFileType (hFile=0x224) returned 0x1 [0036.004] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e670) returned 1 [0036.004] GetFileType (hFile=0x224) returned 0x1 [0036.004] WriteFile (in: hFile=0x224, lpBuffer=0x2840978*, nNumberOfBytesToWrite=0xe20, lpNumberOfBytesWritten=0x31e704, lpOverlapped=0x0 | out: lpBuffer=0x2840978*, lpNumberOfBytesWritten=0x31e704*=0xe20, lpOverlapped=0x0) returned 1 [0036.005] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Fonts\\Metro.xml", nBufferLength=0x105, lpBuffer=0x31e2b4, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Fonts\\Metro.xml", lpFilePart=0x0) returned 0x4a [0036.005] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Fonts\\Metro.xml", nBufferLength=0x105, lpBuffer=0x31e2b4, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Fonts\\Metro.xml", lpFilePart=0x0) returned 0x4a [0036.005] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e714) returned 1 [0036.005] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Fonts\\Metro.xml" (normalized: "c:\\program files\\microsoft office\\document themes 14\\theme fonts\\metro.xml"), fInfoLevelId=0x0, lpFileInformation=0x31e790 | out: lpFileInformation=0x31e790*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf4f4cf00, ftCreationTime.dwHighDateTime=0x1cac1e0, ftLastAccessTime.dwLowDateTime=0x618565f0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xf8e88920, ftLastWriteTime.dwHighDateTime=0x1d6eb7e, nFileSizeHigh=0x0, nFileSizeLow=0xe20)) returned 1 [0036.005] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e710) returned 1 [0036.005] MoveFileW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Fonts\\Metro.xml" (normalized: "c:\\program files\\microsoft office\\document themes 14\\theme fonts\\metro.xml"), lpNewFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Fonts\\Metro.xml" (normalized: "c:\\program files\\microsoft office\\document themes 14\\theme fonts\\metro.xml")) returned 1 [0036.017] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Fonts\\Module.xml", nBufferLength=0x105, lpBuffer=0x31e194, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Fonts\\Module.xml", lpFilePart=0x0) returned 0x4b [0036.017] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e688) returned 1 [0036.017] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Fonts\\Module.xml" (normalized: "c:\\program files\\microsoft office\\document themes 14\\theme fonts\\module.xml"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x224 [0036.019] GetFileType (hFile=0x224) returned 0x1 [0036.019] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e684) returned 1 [0036.019] GetFileType (hFile=0x224) returned 0x1 [0036.019] GetFileSize (in: hFile=0x224, lpFileSizeHigh=0x31e790 | out: lpFileSizeHigh=0x31e790*=0x0) returned 0xe05 [0036.019] ReadFile (in: hFile=0x224, lpBuffer=0x2842a1c, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x31e73c, lpOverlapped=0x0 | out: lpBuffer=0x2842a1c*, lpNumberOfBytesRead=0x31e73c*=0xe05, lpOverlapped=0x0) returned 1 [0036.021] CloseHandle (hObject=0x224) returned 1 [0036.043] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Fonts\\Module.xml", nBufferLength=0x105, lpBuffer=0x31e180, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Fonts\\Module.xml", lpFilePart=0x0) returned 0x4b [0036.043] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e674) returned 1 [0036.043] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Fonts\\Module.xml" (normalized: "c:\\program files\\microsoft office\\document themes 14\\theme fonts\\module.xml"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x224 [0036.043] GetFileType (hFile=0x224) returned 0x1 [0036.043] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e670) returned 1 [0036.043] GetFileType (hFile=0x224) returned 0x1 [0036.044] WriteFile (in: hFile=0x224, lpBuffer=0x2694eb0*, nNumberOfBytesToWrite=0xe10, lpNumberOfBytesWritten=0x31e704, lpOverlapped=0x0 | out: lpBuffer=0x2694eb0*, lpNumberOfBytesWritten=0x31e704*=0xe10, lpOverlapped=0x0) returned 1 [0036.044] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Fonts\\Module.xml", nBufferLength=0x105, lpBuffer=0x31e2b4, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Fonts\\Module.xml", lpFilePart=0x0) returned 0x4b [0036.044] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Fonts\\Module.xml", nBufferLength=0x105, lpBuffer=0x31e2b4, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Fonts\\Module.xml", lpFilePart=0x0) returned 0x4b [0036.044] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e714) returned 1 [0036.045] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Fonts\\Module.xml" (normalized: "c:\\program files\\microsoft office\\document themes 14\\theme fonts\\module.xml"), fInfoLevelId=0x0, lpFileInformation=0x31e790 | out: lpFileInformation=0x31e790*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf625fc00, ftCreationTime.dwHighDateTime=0x1cac1e0, ftLastAccessTime.dwLowDateTime=0x618565f0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xf8efad40, ftLastWriteTime.dwHighDateTime=0x1d6eb7e, nFileSizeHigh=0x0, nFileSizeLow=0xe10)) returned 1 [0036.045] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e710) returned 1 [0036.045] MoveFileW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Fonts\\Module.xml" (normalized: "c:\\program files\\microsoft office\\document themes 14\\theme fonts\\module.xml"), lpNewFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Fonts\\Module.xml" (normalized: "c:\\program files\\microsoft office\\document themes 14\\theme fonts\\module.xml")) returned 1 [0036.046] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Fonts\\Newsprint.xml", nBufferLength=0x105, lpBuffer=0x31e194, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Fonts\\Newsprint.xml", lpFilePart=0x0) returned 0x4e [0036.046] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e688) returned 1 [0036.046] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Fonts\\Newsprint.xml" (normalized: "c:\\program files\\microsoft office\\document themes 14\\theme fonts\\newsprint.xml"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x224 [0036.046] GetFileType (hFile=0x224) returned 0x1 [0036.046] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e684) returned 1 [0036.046] GetFileType (hFile=0x224) returned 0x1 [0036.046] GetFileSize (in: hFile=0x224, lpFileSizeHigh=0x31e790 | out: lpFileSizeHigh=0x31e790*=0x0) returned 0xe39 [0036.046] ReadFile (in: hFile=0x224, lpBuffer=0x2696f94, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x31e73c, lpOverlapped=0x0 | out: lpBuffer=0x2696f94*, lpNumberOfBytesRead=0x31e73c*=0xe39, lpOverlapped=0x0) returned 1 [0036.061] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Fonts\\Newsprint.xml", nBufferLength=0x105, lpBuffer=0x31e180, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Fonts\\Newsprint.xml", lpFilePart=0x0) returned 0x4e [0036.061] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e674) returned 1 [0036.061] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Fonts\\Newsprint.xml" (normalized: "c:\\program files\\microsoft office\\document themes 14\\theme fonts\\newsprint.xml"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x224 [0036.062] GetFileType (hFile=0x224) returned 0x1 [0036.062] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e670) returned 1 [0036.062] GetFileType (hFile=0x224) returned 0x1 [0036.063] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Fonts\\Newsprint.xml", nBufferLength=0x105, lpBuffer=0x31e2b4, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Fonts\\Newsprint.xml", lpFilePart=0x0) returned 0x4e [0036.063] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Fonts\\Newsprint.xml", nBufferLength=0x105, lpBuffer=0x31e2b4, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Fonts\\Newsprint.xml", lpFilePart=0x0) returned 0x4e [0036.063] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e714) returned 1 [0036.063] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Fonts\\Newsprint.xml" (normalized: "c:\\program files\\microsoft office\\document themes 14\\theme fonts\\newsprint.xml"), fInfoLevelId=0x0, lpFileInformation=0x31e790 | out: lpFileInformation=0x31e790*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x18b81500, ftCreationTime.dwHighDateTime=0x1cac1e1, ftLastAccessTime.dwLowDateTime=0x618565f0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xf8f20ea0, ftLastWriteTime.dwHighDateTime=0x1d6eb7e, nFileSizeHigh=0x0, nFileSizeLow=0xe40)) returned 1 [0036.063] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e710) returned 1 [0036.063] MoveFileW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Fonts\\Newsprint.xml" (normalized: "c:\\program files\\microsoft office\\document themes 14\\theme fonts\\newsprint.xml"), lpNewFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Fonts\\Newsprint.xml" (normalized: "c:\\program files\\microsoft office\\document themes 14\\theme fonts\\newsprint.xml")) returned 1 [0036.063] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Fonts\\Office 2.xml", nBufferLength=0x105, lpBuffer=0x31e194, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Fonts\\Office 2.xml", lpFilePart=0x0) returned 0x4d [0036.063] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e688) returned 1 [0036.063] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Fonts\\Office 2.xml" (normalized: "c:\\program files\\microsoft office\\document themes 14\\theme fonts\\office 2.xml"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x224 [0036.064] GetFileType (hFile=0x224) returned 0x1 [0036.064] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e684) returned 1 [0036.064] GetFileType (hFile=0x224) returned 0x1 [0036.064] GetFileSize (in: hFile=0x224, lpFileSizeHigh=0x31e790 | out: lpFileSizeHigh=0x31e790*=0x0) returned 0xe15 [0036.064] ReadFile (in: hFile=0x224, lpBuffer=0x26eb824, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x31e73c, lpOverlapped=0x0 | out: lpBuffer=0x26eb824*, lpNumberOfBytesRead=0x31e73c*=0xe15, lpOverlapped=0x0) returned 1 [0036.080] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Fonts\\Office 2.xml", nBufferLength=0x105, lpBuffer=0x31e180, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Fonts\\Office 2.xml", lpFilePart=0x0) returned 0x4d [0036.080] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e674) returned 1 [0036.080] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Fonts\\Office 2.xml" (normalized: "c:\\program files\\microsoft office\\document themes 14\\theme fonts\\office 2.xml"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x224 [0036.081] GetFileType (hFile=0x224) returned 0x1 [0036.081] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e670) returned 1 [0036.081] GetFileType (hFile=0x224) returned 0x1 [0036.082] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Fonts\\Office 2.xml", nBufferLength=0x105, lpBuffer=0x31e2b4, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Fonts\\Office 2.xml", lpFilePart=0x0) returned 0x4d [0036.082] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Fonts\\Office 2.xml", nBufferLength=0x105, lpBuffer=0x31e2b4, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Fonts\\Office 2.xml", lpFilePart=0x0) returned 0x4d [0036.082] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e714) returned 1 [0036.082] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Fonts\\Office 2.xml" (normalized: "c:\\program files\\microsoft office\\document themes 14\\theme fonts\\office 2.xml"), fInfoLevelId=0x0, lpFileInformation=0x31e790 | out: lpFileInformation=0x31e790*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xefe70d00, ftCreationTime.dwHighDateTime=0x1c9b824, ftLastAccessTime.dwLowDateTime=0x528a9ed0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xf8f47000, ftLastWriteTime.dwHighDateTime=0x1d6eb7e, nFileSizeHigh=0x0, nFileSizeLow=0xe20)) returned 1 [0036.082] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e710) returned 1 [0036.082] MoveFileW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Fonts\\Office 2.xml" (normalized: "c:\\program files\\microsoft office\\document themes 14\\theme fonts\\office 2.xml"), lpNewFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Fonts\\Office 2.xml" (normalized: "c:\\program files\\microsoft office\\document themes 14\\theme fonts\\office 2.xml")) returned 1 [0036.083] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Fonts\\Office Classic 2.xml", nBufferLength=0x105, lpBuffer=0x31e194, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Fonts\\Office Classic 2.xml", lpFilePart=0x0) returned 0x55 [0036.083] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e688) returned 1 [0036.083] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Fonts\\Office Classic 2.xml" (normalized: "c:\\program files\\microsoft office\\document themes 14\\theme fonts\\office classic 2.xml"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x224 [0036.084] GetFileType (hFile=0x224) returned 0x1 [0036.084] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e684) returned 1 [0036.084] GetFileType (hFile=0x224) returned 0x1 [0036.084] GetFileSize (in: hFile=0x224, lpFileSizeHigh=0x31e790 | out: lpFileSizeHigh=0x31e790*=0x0) returned 0xe01 [0036.084] ReadFile (in: hFile=0x224, lpBuffer=0x273febc, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x31e73c, lpOverlapped=0x0 | out: lpBuffer=0x273febc*, lpNumberOfBytesRead=0x31e73c*=0xe01, lpOverlapped=0x0) returned 1 [0036.099] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Fonts\\Office Classic 2.xml", nBufferLength=0x105, lpBuffer=0x31e180, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Fonts\\Office Classic 2.xml", lpFilePart=0x0) returned 0x55 [0036.099] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e674) returned 1 [0036.099] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Fonts\\Office Classic 2.xml" (normalized: "c:\\program files\\microsoft office\\document themes 14\\theme fonts\\office classic 2.xml"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x224 [0036.099] GetFileType (hFile=0x224) returned 0x1 [0036.099] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e670) returned 1 [0036.100] GetFileType (hFile=0x224) returned 0x1 [0036.100] WriteFile (in: hFile=0x224, lpBuffer=0x2792458*, nNumberOfBytesToWrite=0xe10, lpNumberOfBytesWritten=0x31e704, lpOverlapped=0x0 | out: lpBuffer=0x2792458*, lpNumberOfBytesWritten=0x31e704*=0xe10, lpOverlapped=0x0) returned 1 [0036.100] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Fonts\\Office Classic 2.xml", nBufferLength=0x105, lpBuffer=0x31e2b4, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Fonts\\Office Classic 2.xml", lpFilePart=0x0) returned 0x55 [0036.100] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Fonts\\Office Classic 2.xml", nBufferLength=0x105, lpBuffer=0x31e2b4, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Fonts\\Office Classic 2.xml", lpFilePart=0x0) returned 0x55 [0036.100] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e714) returned 1 [0036.101] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Fonts\\Office Classic 2.xml" (normalized: "c:\\program files\\microsoft office\\document themes 14\\theme fonts\\office classic 2.xml"), fInfoLevelId=0x0, lpFileInformation=0x31e790 | out: lpFileInformation=0x31e790*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xefe70d00, ftCreationTime.dwHighDateTime=0x1c9b824, ftLastAccessTime.dwLowDateTime=0x528a9ed0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xf8f932c0, ftLastWriteTime.dwHighDateTime=0x1d6eb7e, nFileSizeHigh=0x0, nFileSizeLow=0xe10)) returned 1 [0036.101] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e710) returned 1 [0036.101] MoveFileW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Fonts\\Office Classic 2.xml" (normalized: "c:\\program files\\microsoft office\\document themes 14\\theme fonts\\office classic 2.xml"), lpNewFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Fonts\\Office Classic 2.xml" (normalized: "c:\\program files\\microsoft office\\document themes 14\\theme fonts\\office classic 2.xml")) returned 1 [0036.102] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Fonts\\Office Classic.xml", nBufferLength=0x105, lpBuffer=0x31e194, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Fonts\\Office Classic.xml", lpFilePart=0x0) returned 0x53 [0036.102] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e688) returned 1 [0036.102] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Fonts\\Office Classic.xml" (normalized: "c:\\program files\\microsoft office\\document themes 14\\theme fonts\\office classic.xml"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x224 [0036.102] GetFileType (hFile=0x224) returned 0x1 [0036.102] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e684) returned 1 [0036.102] GetFileType (hFile=0x224) returned 0x1 [0036.102] GetFileSize (in: hFile=0x224, lpFileSizeHigh=0x31e790 | out: lpFileSizeHigh=0x31e790*=0x0) returned 0xe20 [0036.102] ReadFile (in: hFile=0x224, lpBuffer=0x279455c, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x31e73c, lpOverlapped=0x0 | out: lpBuffer=0x279455c*, lpNumberOfBytesRead=0x31e73c*=0xe20, lpOverlapped=0x0) returned 1 [0036.117] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Fonts\\Office Classic.xml", nBufferLength=0x105, lpBuffer=0x31e180, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Fonts\\Office Classic.xml", lpFilePart=0x0) returned 0x53 [0036.117] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e674) returned 1 [0036.117] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Fonts\\Office Classic.xml" (normalized: "c:\\program files\\microsoft office\\document themes 14\\theme fonts\\office classic.xml"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x224 [0036.118] GetFileType (hFile=0x224) returned 0x1 [0036.118] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e670) returned 1 [0036.118] GetFileType (hFile=0x224) returned 0x1 [0036.118] WriteFile (in: hFile=0x224, lpBuffer=0x27e6b90*, nNumberOfBytesToWrite=0xe30, lpNumberOfBytesWritten=0x31e704, lpOverlapped=0x0 | out: lpBuffer=0x27e6b90*, lpNumberOfBytesWritten=0x31e704*=0xe30, lpOverlapped=0x0) returned 1 [0036.119] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Fonts\\Office Classic.xml", nBufferLength=0x105, lpBuffer=0x31e2b4, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Fonts\\Office Classic.xml", lpFilePart=0x0) returned 0x53 [0036.119] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Fonts\\Office Classic.xml", nBufferLength=0x105, lpBuffer=0x31e2b4, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Fonts\\Office Classic.xml", lpFilePart=0x0) returned 0x53 [0036.119] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e714) returned 1 [0036.119] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Fonts\\Office Classic.xml" (normalized: "c:\\program files\\microsoft office\\document themes 14\\theme fonts\\office classic.xml"), fInfoLevelId=0x0, lpFileInformation=0x31e790 | out: lpFileInformation=0x31e790*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xefe70d00, ftCreationTime.dwHighDateTime=0x1c9b824, ftLastAccessTime.dwLowDateTime=0x528a9ed0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xf8fb9420, ftLastWriteTime.dwHighDateTime=0x1d6eb7e, nFileSizeHigh=0x0, nFileSizeLow=0xe30)) returned 1 [0036.119] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e710) returned 1 [0036.119] MoveFileW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Fonts\\Office Classic.xml" (normalized: "c:\\program files\\microsoft office\\document themes 14\\theme fonts\\office classic.xml"), lpNewFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Fonts\\Office Classic.xml" (normalized: "c:\\program files\\microsoft office\\document themes 14\\theme fonts\\office classic.xml")) returned 1 [0036.120] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Fonts\\Opulent.xml", nBufferLength=0x105, lpBuffer=0x31e194, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Fonts\\Opulent.xml", lpFilePart=0x0) returned 0x4c [0036.120] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e688) returned 1 [0036.120] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Fonts\\Opulent.xml" (normalized: "c:\\program files\\microsoft office\\document themes 14\\theme fonts\\opulent.xml"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x224 [0036.120] GetFileType (hFile=0x224) returned 0x1 [0036.121] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e684) returned 1 [0036.121] GetFileType (hFile=0x224) returned 0x1 [0036.121] GetFileSize (in: hFile=0x224, lpFileSizeHigh=0x31e790 | out: lpFileSizeHigh=0x31e790*=0x0) returned 0xe1d [0036.121] ReadFile (in: hFile=0x224, lpBuffer=0x27e8c70, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x31e73c, lpOverlapped=0x0 | out: lpBuffer=0x27e8c70*, lpNumberOfBytesRead=0x31e73c*=0xe1d, lpOverlapped=0x0) returned 1 [0036.139] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Fonts\\Opulent.xml", nBufferLength=0x105, lpBuffer=0x31e180, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Fonts\\Opulent.xml", lpFilePart=0x0) returned 0x4c [0036.139] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e674) returned 1 [0036.139] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Fonts\\Opulent.xml" (normalized: "c:\\program files\\microsoft office\\document themes 14\\theme fonts\\opulent.xml"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x224 [0036.140] GetFileType (hFile=0x224) returned 0x1 [0036.140] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e670) returned 1 [0036.140] GetFileType (hFile=0x224) returned 0x1 [0036.140] WriteFile (in: hFile=0x224, lpBuffer=0x283b22c*, nNumberOfBytesToWrite=0xe20, lpNumberOfBytesWritten=0x31e704, lpOverlapped=0x0 | out: lpBuffer=0x283b22c*, lpNumberOfBytesWritten=0x31e704*=0xe20, lpOverlapped=0x0) returned 1 [0036.141] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Fonts\\Opulent.xml", nBufferLength=0x105, lpBuffer=0x31e2b4, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Fonts\\Opulent.xml", lpFilePart=0x0) returned 0x4c [0036.141] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Fonts\\Opulent.xml", nBufferLength=0x105, lpBuffer=0x31e2b4, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Fonts\\Opulent.xml", lpFilePart=0x0) returned 0x4c [0036.141] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e714) returned 1 [0036.141] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Fonts\\Opulent.xml" (normalized: "c:\\program files\\microsoft office\\document themes 14\\theme fonts\\opulent.xml"), fInfoLevelId=0x0, lpFileInformation=0x31e790 | out: lpFileInformation=0x31e790*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf7572900, ftCreationTime.dwHighDateTime=0x1cac1e0, ftLastAccessTime.dwLowDateTime=0x618565f0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xf8fdf580, ftLastWriteTime.dwHighDateTime=0x1d6eb7e, nFileSizeHigh=0x0, nFileSizeLow=0xe20)) returned 1 [0036.141] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e710) returned 1 [0036.142] MoveFileW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Fonts\\Opulent.xml" (normalized: "c:\\program files\\microsoft office\\document themes 14\\theme fonts\\opulent.xml"), lpNewFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Fonts\\Opulent.xml" (normalized: "c:\\program files\\microsoft office\\document themes 14\\theme fonts\\opulent.xml")) returned 1 [0036.143] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Fonts\\Oriel.xml", nBufferLength=0x105, lpBuffer=0x31e194, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Fonts\\Oriel.xml", lpFilePart=0x0) returned 0x4a [0036.143] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e688) returned 1 [0036.143] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Fonts\\Oriel.xml" (normalized: "c:\\program files\\microsoft office\\document themes 14\\theme fonts\\oriel.xml"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x224 [0036.143] GetFileType (hFile=0x224) returned 0x1 [0036.143] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e684) returned 1 [0036.143] GetFileType (hFile=0x224) returned 0x1 [0036.143] GetFileSize (in: hFile=0x224, lpFileSizeHigh=0x31e790 | out: lpFileSizeHigh=0x31e790*=0x0) returned 0xe5a [0036.143] ReadFile (in: hFile=0x224, lpBuffer=0x283d328, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x31e73c, lpOverlapped=0x0 | out: lpBuffer=0x283d328*, lpNumberOfBytesRead=0x31e73c*=0xe5a, lpOverlapped=0x0) returned 1 [0036.187] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Fonts\\Oriel.xml", nBufferLength=0x105, lpBuffer=0x31e180, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Fonts\\Oriel.xml", lpFilePart=0x0) returned 0x4a [0036.187] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e674) returned 1 [0036.187] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Fonts\\Oriel.xml" (normalized: "c:\\program files\\microsoft office\\document themes 14\\theme fonts\\oriel.xml"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x224 [0036.188] GetFileType (hFile=0x224) returned 0x1 [0036.188] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e670) returned 1 [0036.188] GetFileType (hFile=0x224) returned 0x1 [0036.188] WriteFile (in: hFile=0x224, lpBuffer=0x268fa6c*, nNumberOfBytesToWrite=0xe60, lpNumberOfBytesWritten=0x31e704, lpOverlapped=0x0 | out: lpBuffer=0x268fa6c*, lpNumberOfBytesWritten=0x31e704*=0xe60, lpOverlapped=0x0) returned 1 [0036.189] CloseHandle (hObject=0x224) returned 1 [0036.190] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Fonts\\Oriel.xml", nBufferLength=0x105, lpBuffer=0x31e2b4, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Fonts\\Oriel.xml", lpFilePart=0x0) returned 0x4a [0036.190] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Fonts\\Oriel.xml", nBufferLength=0x105, lpBuffer=0x31e2b4, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Fonts\\Oriel.xml", lpFilePart=0x0) returned 0x4a [0036.190] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e714) returned 1 [0036.190] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Fonts\\Oriel.xml" (normalized: "c:\\program files\\microsoft office\\document themes 14\\theme fonts\\oriel.xml"), fInfoLevelId=0x0, lpFileInformation=0x31e790 | out: lpFileInformation=0x31e790*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf8885600, ftCreationTime.dwHighDateTime=0x1cac1e0, ftLastAccessTime.dwLowDateTime=0x528a9ed0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xf90519a0, ftLastWriteTime.dwHighDateTime=0x1d6eb7e, nFileSizeHigh=0x0, nFileSizeLow=0xe60)) returned 1 [0036.190] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e710) returned 1 [0036.190] MoveFileW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Fonts\\Oriel.xml" (normalized: "c:\\program files\\microsoft office\\document themes 14\\theme fonts\\oriel.xml"), lpNewFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Fonts\\Oriel.xml" (normalized: "c:\\program files\\microsoft office\\document themes 14\\theme fonts\\oriel.xml")) returned 1 [0036.190] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Fonts\\Origin.xml", nBufferLength=0x105, lpBuffer=0x31e194, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Fonts\\Origin.xml", lpFilePart=0x0) returned 0x4b [0036.191] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e688) returned 1 [0036.191] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Fonts\\Origin.xml" (normalized: "c:\\program files\\microsoft office\\document themes 14\\theme fonts\\origin.xml"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x224 [0036.191] GetFileType (hFile=0x224) returned 0x1 [0036.191] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e684) returned 1 [0036.191] GetFileType (hFile=0x224) returned 0x1 [0036.191] GetFileSize (in: hFile=0x224, lpFileSizeHigh=0x31e790 | out: lpFileSizeHigh=0x31e790*=0x0) returned 0xeed [0036.191] ReadFile (in: hFile=0x224, lpBuffer=0x2691bf8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x31e73c, lpOverlapped=0x0 | out: lpBuffer=0x2691bf8*, lpNumberOfBytesRead=0x31e73c*=0xeed, lpOverlapped=0x0) returned 1 [0036.193] CloseHandle (hObject=0x224) returned 1 [0036.206] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Fonts\\Origin.xml", nBufferLength=0x105, lpBuffer=0x31e180, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Fonts\\Origin.xml", lpFilePart=0x0) returned 0x4b [0036.206] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e674) returned 1 [0036.206] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Fonts\\Origin.xml" (normalized: "c:\\program files\\microsoft office\\document themes 14\\theme fonts\\origin.xml"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x224 [0036.207] GetFileType (hFile=0x224) returned 0x1 [0036.207] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e670) returned 1 [0036.207] GetFileType (hFile=0x224) returned 0x1 [0036.207] WriteFile (in: hFile=0x224, lpBuffer=0x26e471c*, nNumberOfBytesToWrite=0xef0, lpNumberOfBytesWritten=0x31e704, lpOverlapped=0x0 | out: lpBuffer=0x26e471c*, lpNumberOfBytesWritten=0x31e704*=0xef0, lpOverlapped=0x0) returned 1 [0036.208] CloseHandle (hObject=0x224) returned 1 [0036.209] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Fonts\\Origin.xml", nBufferLength=0x105, lpBuffer=0x31e2b4, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Fonts\\Origin.xml", lpFilePart=0x0) returned 0x4b [0036.209] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Fonts\\Origin.xml", nBufferLength=0x105, lpBuffer=0x31e2b4, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Fonts\\Origin.xml", lpFilePart=0x0) returned 0x4b [0036.209] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e714) returned 1 [0036.209] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Fonts\\Origin.xml" (normalized: "c:\\program files\\microsoft office\\document themes 14\\theme fonts\\origin.xml"), fInfoLevelId=0x0, lpFileInformation=0x31e790 | out: lpFileInformation=0x31e790*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf9b98300, ftCreationTime.dwHighDateTime=0x1cac1e0, ftLastAccessTime.dwLowDateTime=0x528a9ed0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xf909dc60, ftLastWriteTime.dwHighDateTime=0x1d6eb7e, nFileSizeHigh=0x0, nFileSizeLow=0xef0)) returned 1 [0036.209] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e710) returned 1 [0036.209] MoveFileW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Fonts\\Origin.xml" (normalized: "c:\\program files\\microsoft office\\document themes 14\\theme fonts\\origin.xml"), lpNewFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Fonts\\Origin.xml" (normalized: "c:\\program files\\microsoft office\\document themes 14\\theme fonts\\origin.xml")) returned 1 [0036.209] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Fonts\\Paper.xml", nBufferLength=0x105, lpBuffer=0x31e194, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Fonts\\Paper.xml", lpFilePart=0x0) returned 0x4a [0036.209] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e688) returned 1 [0036.209] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Fonts\\Paper.xml" (normalized: "c:\\program files\\microsoft office\\document themes 14\\theme fonts\\paper.xml"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x224 [0036.210] GetFileType (hFile=0x224) returned 0x1 [0036.210] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e684) returned 1 [0036.210] GetFileType (hFile=0x224) returned 0x1 [0036.210] GetFileSize (in: hFile=0x224, lpFileSizeHigh=0x31e790 | out: lpFileSizeHigh=0x31e790*=0x0) returned 0xe2c [0036.210] ReadFile (in: hFile=0x224, lpBuffer=0x26e67e0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x31e73c, lpOverlapped=0x0 | out: lpBuffer=0x26e67e0*, lpNumberOfBytesRead=0x31e73c*=0xe2c, lpOverlapped=0x0) returned 1 [0036.211] CloseHandle (hObject=0x224) returned 1 [0036.225] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Fonts\\Paper.xml", nBufferLength=0x105, lpBuffer=0x31e180, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Fonts\\Paper.xml", lpFilePart=0x0) returned 0x4a [0036.226] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e674) returned 1 [0036.226] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Fonts\\Paper.xml" (normalized: "c:\\program files\\microsoft office\\document themes 14\\theme fonts\\paper.xml"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x224 [0036.226] GetFileType (hFile=0x224) returned 0x1 [0036.226] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e670) returned 1 [0036.226] GetFileType (hFile=0x224) returned 0x1 [0036.227] WriteFile (in: hFile=0x224, lpBuffer=0x2738de4*, nNumberOfBytesToWrite=0xe30, lpNumberOfBytesWritten=0x31e704, lpOverlapped=0x0 | out: lpBuffer=0x2738de4*, lpNumberOfBytesWritten=0x31e704*=0xe30, lpOverlapped=0x0) returned 1 [0036.227] CloseHandle (hObject=0x224) returned 1 [0036.228] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Fonts\\Paper.xml", nBufferLength=0x105, lpBuffer=0x31e2b4, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Fonts\\Paper.xml", lpFilePart=0x0) returned 0x4a [0036.228] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Fonts\\Paper.xml", nBufferLength=0x105, lpBuffer=0x31e2b4, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Fonts\\Paper.xml", lpFilePart=0x0) returned 0x4a [0036.228] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e714) returned 1 [0036.228] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Fonts\\Paper.xml" (normalized: "c:\\program files\\microsoft office\\document themes 14\\theme fonts\\paper.xml"), fInfoLevelId=0x0, lpFileInformation=0x31e790 | out: lpFileInformation=0x31e790*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xfaeab000, ftCreationTime.dwHighDateTime=0x1cac1e0, ftLastAccessTime.dwLowDateTime=0x528d0030, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xf90c3dc0, ftLastWriteTime.dwHighDateTime=0x1d6eb7e, nFileSizeHigh=0x0, nFileSizeLow=0xe30)) returned 1 [0036.228] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e710) returned 1 [0036.228] MoveFileW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Fonts\\Paper.xml" (normalized: "c:\\program files\\microsoft office\\document themes 14\\theme fonts\\paper.xml"), lpNewFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Fonts\\Paper.xml" (normalized: "c:\\program files\\microsoft office\\document themes 14\\theme fonts\\paper.xml")) returned 1 [0036.229] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Fonts\\Perspective.xml", nBufferLength=0x105, lpBuffer=0x31e194, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Fonts\\Perspective.xml", lpFilePart=0x0) returned 0x50 [0036.229] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e688) returned 1 [0036.229] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Fonts\\Perspective.xml" (normalized: "c:\\program files\\microsoft office\\document themes 14\\theme fonts\\perspective.xml"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x224 [0036.229] GetFileType (hFile=0x224) returned 0x1 [0036.229] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e684) returned 1 [0036.229] GetFileType (hFile=0x224) returned 0x1 [0036.229] GetFileSize (in: hFile=0x224, lpFileSizeHigh=0x31e790 | out: lpFileSizeHigh=0x31e790*=0x0) returned 0xe0f [0036.229] ReadFile (in: hFile=0x224, lpBuffer=0x273aea4, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x31e73c, lpOverlapped=0x0 | out: lpBuffer=0x273aea4*, lpNumberOfBytesRead=0x31e73c*=0xe0f, lpOverlapped=0x0) returned 1 [0036.231] CloseHandle (hObject=0x224) returned 1 [0036.251] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Fonts\\Perspective.xml", nBufferLength=0x105, lpBuffer=0x31e180, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Fonts\\Perspective.xml", lpFilePart=0x0) returned 0x50 [0036.251] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e674) returned 1 [0036.251] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Fonts\\Perspective.xml" (normalized: "c:\\program files\\microsoft office\\document themes 14\\theme fonts\\perspective.xml"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x224 [0036.252] GetFileType (hFile=0x224) returned 0x1 [0036.252] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e670) returned 1 [0036.252] GetFileType (hFile=0x224) returned 0x1 [0036.252] WriteFile (in: hFile=0x224, lpBuffer=0x278d420*, nNumberOfBytesToWrite=0xe10, lpNumberOfBytesWritten=0x31e704, lpOverlapped=0x0 | out: lpBuffer=0x278d420*, lpNumberOfBytesWritten=0x31e704*=0xe10, lpOverlapped=0x0) returned 1 [0036.253] CloseHandle (hObject=0x224) returned 1 [0036.253] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Fonts\\Perspective.xml", nBufferLength=0x105, lpBuffer=0x31e2b4, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Fonts\\Perspective.xml", lpFilePart=0x0) returned 0x50 [0036.253] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Fonts\\Perspective.xml", nBufferLength=0x105, lpBuffer=0x31e2b4, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Fonts\\Perspective.xml", lpFilePart=0x0) returned 0x50 [0036.253] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e714) returned 1 [0036.253] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Fonts\\Perspective.xml" (normalized: "c:\\program files\\microsoft office\\document themes 14\\theme fonts\\perspective.xml"), fInfoLevelId=0x0, lpFileInformation=0x31e790 | out: lpFileInformation=0x31e790*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8079f00, ftCreationTime.dwHighDateTime=0x1cac1e1, ftLastAccessTime.dwLowDateTime=0x618565f0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xf90e9f20, ftLastWriteTime.dwHighDateTime=0x1d6eb7e, nFileSizeHigh=0x0, nFileSizeLow=0xe10)) returned 1 [0036.253] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e710) returned 1 [0036.253] MoveFileW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Fonts\\Perspective.xml" (normalized: "c:\\program files\\microsoft office\\document themes 14\\theme fonts\\perspective.xml"), lpNewFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Fonts\\Perspective.xml" (normalized: "c:\\program files\\microsoft office\\document themes 14\\theme fonts\\perspective.xml")) returned 1 [0036.254] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Fonts\\Pushpin.xml", nBufferLength=0x105, lpBuffer=0x31e194, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Fonts\\Pushpin.xml", lpFilePart=0x0) returned 0x4c [0036.254] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e688) returned 1 [0036.254] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Fonts\\Pushpin.xml" (normalized: "c:\\program files\\microsoft office\\document themes 14\\theme fonts\\pushpin.xml"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x224 [0036.255] GetFileType (hFile=0x224) returned 0x1 [0036.255] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e684) returned 1 [0036.255] GetFileType (hFile=0x224) returned 0x1 [0036.255] GetFileSize (in: hFile=0x224, lpFileSizeHigh=0x31e790 | out: lpFileSizeHigh=0x31e790*=0x0) returned 0xe7f [0036.255] ReadFile (in: hFile=0x224, lpBuffer=0x278f558, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x31e73c, lpOverlapped=0x0 | out: lpBuffer=0x278f558*, lpNumberOfBytesRead=0x31e73c*=0xe7f, lpOverlapped=0x0) returned 1 [0036.256] CloseHandle (hObject=0x224) returned 1 [0036.270] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Fonts\\Pushpin.xml", nBufferLength=0x105, lpBuffer=0x31e180, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Fonts\\Pushpin.xml", lpFilePart=0x0) returned 0x4c [0036.270] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e674) returned 1 [0036.270] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Fonts\\Pushpin.xml" (normalized: "c:\\program files\\microsoft office\\document themes 14\\theme fonts\\pushpin.xml"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x224 [0036.271] GetFileType (hFile=0x224) returned 0x1 [0036.271] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e670) returned 1 [0036.271] GetFileType (hFile=0x224) returned 0x1 [0036.271] WriteFile (in: hFile=0x224, lpBuffer=0x27e1cf4*, nNumberOfBytesToWrite=0xe80, lpNumberOfBytesWritten=0x31e704, lpOverlapped=0x0 | out: lpBuffer=0x27e1cf4*, lpNumberOfBytesWritten=0x31e704*=0xe80, lpOverlapped=0x0) returned 1 [0036.272] CloseHandle (hObject=0x224) returned 1 [0036.272] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Fonts\\Pushpin.xml", nBufferLength=0x105, lpBuffer=0x31e2b4, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Fonts\\Pushpin.xml", lpFilePart=0x0) returned 0x4c [0036.272] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Fonts\\Pushpin.xml", nBufferLength=0x105, lpBuffer=0x31e2b4, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Fonts\\Pushpin.xml", lpFilePart=0x0) returned 0x4c [0036.273] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e714) returned 1 [0036.273] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Fonts\\Pushpin.xml" (normalized: "c:\\program files\\microsoft office\\document themes 14\\theme fonts\\pushpin.xml"), fInfoLevelId=0x0, lpFileInformation=0x31e790 | out: lpFileInformation=0x31e790*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x938cc00, ftCreationTime.dwHighDateTime=0x1cac1e1, ftLastAccessTime.dwLowDateTime=0x528d0030, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xf91361e0, ftLastWriteTime.dwHighDateTime=0x1d6eb7e, nFileSizeHigh=0x0, nFileSizeLow=0xe80)) returned 1 [0036.273] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e710) returned 1 [0036.273] MoveFileW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Fonts\\Pushpin.xml" (normalized: "c:\\program files\\microsoft office\\document themes 14\\theme fonts\\pushpin.xml"), lpNewFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Fonts\\Pushpin.xml" (normalized: "c:\\program files\\microsoft office\\document themes 14\\theme fonts\\pushpin.xml")) returned 1 [0036.273] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Fonts\\Slipstream.xml", nBufferLength=0x105, lpBuffer=0x31e194, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Fonts\\Slipstream.xml", lpFilePart=0x0) returned 0x4f [0036.273] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e688) returned 1 [0036.273] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Fonts\\Slipstream.xml" (normalized: "c:\\program files\\microsoft office\\document themes 14\\theme fonts\\slipstream.xml"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x224 [0036.273] GetFileType (hFile=0x224) returned 0x1 [0036.273] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e684) returned 1 [0036.273] GetFileType (hFile=0x224) returned 0x1 [0036.274] GetFileSize (in: hFile=0x224, lpFileSizeHigh=0x31e790 | out: lpFileSizeHigh=0x31e790*=0x0) returned 0xe18 [0036.274] ReadFile (in: hFile=0x224, lpBuffer=0x27e3dc0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x31e73c, lpOverlapped=0x0 | out: lpBuffer=0x27e3dc0*, lpNumberOfBytesRead=0x31e73c*=0xe18, lpOverlapped=0x0) returned 1 [0036.275] CloseHandle (hObject=0x224) returned 1 [0036.289] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Fonts\\Slipstream.xml", nBufferLength=0x105, lpBuffer=0x31e180, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Fonts\\Slipstream.xml", lpFilePart=0x0) returned 0x4f [0036.289] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e674) returned 1 [0036.289] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Fonts\\Slipstream.xml" (normalized: "c:\\program files\\microsoft office\\document themes 14\\theme fonts\\slipstream.xml"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x224 [0036.289] GetFileType (hFile=0x224) returned 0x1 [0036.290] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e670) returned 1 [0036.290] GetFileType (hFile=0x224) returned 0x1 [0036.290] WriteFile (in: hFile=0x224, lpBuffer=0x283638c*, nNumberOfBytesToWrite=0xe20, lpNumberOfBytesWritten=0x31e704, lpOverlapped=0x0 | out: lpBuffer=0x283638c*, lpNumberOfBytesWritten=0x31e704*=0xe20, lpOverlapped=0x0) returned 1 [0036.290] CloseHandle (hObject=0x224) returned 1 [0036.291] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Fonts\\Slipstream.xml", nBufferLength=0x105, lpBuffer=0x31e2b4, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Fonts\\Slipstream.xml", lpFilePart=0x0) returned 0x4f [0036.291] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Fonts\\Slipstream.xml", nBufferLength=0x105, lpBuffer=0x31e2b4, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Fonts\\Slipstream.xml", lpFilePart=0x0) returned 0x4f [0036.291] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e714) returned 1 [0036.291] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Fonts\\Slipstream.xml" (normalized: "c:\\program files\\microsoft office\\document themes 14\\theme fonts\\slipstream.xml"), fInfoLevelId=0x0, lpFileInformation=0x31e790 | out: lpFileInformation=0x31e790*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1b1a6f00, ftCreationTime.dwHighDateTime=0x1cac1e1, ftLastAccessTime.dwLowDateTime=0x528d0030, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xf915c340, ftLastWriteTime.dwHighDateTime=0x1d6eb7e, nFileSizeHigh=0x0, nFileSizeLow=0xe20)) returned 1 [0036.291] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e710) returned 1 [0036.291] MoveFileW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Fonts\\Slipstream.xml" (normalized: "c:\\program files\\microsoft office\\document themes 14\\theme fonts\\slipstream.xml"), lpNewFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Fonts\\Slipstream.xml" (normalized: "c:\\program files\\microsoft office\\document themes 14\\theme fonts\\slipstream.xml")) returned 1 [0036.292] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Fonts\\Solstice.xml", nBufferLength=0x105, lpBuffer=0x31e194, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Fonts\\Solstice.xml", lpFilePart=0x0) returned 0x4d [0036.292] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e688) returned 1 [0036.292] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Fonts\\Solstice.xml" (normalized: "c:\\program files\\microsoft office\\document themes 14\\theme fonts\\solstice.xml"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x224 [0036.293] GetFileType (hFile=0x224) returned 0x1 [0036.293] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e684) returned 1 [0036.293] GetFileType (hFile=0x224) returned 0x1 [0036.293] GetFileSize (in: hFile=0x224, lpFileSizeHigh=0x31e790 | out: lpFileSizeHigh=0x31e790*=0x0) returned 0xee9 [0036.293] ReadFile (in: hFile=0x224, lpBuffer=0x283852c, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x31e73c, lpOverlapped=0x0 | out: lpBuffer=0x283852c*, lpNumberOfBytesRead=0x31e73c*=0xee9, lpOverlapped=0x0) returned 1 [0036.294] CloseHandle (hObject=0x224) returned 1 [0036.335] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Fonts\\Solstice.xml", nBufferLength=0x105, lpBuffer=0x31e180, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Fonts\\Solstice.xml", lpFilePart=0x0) returned 0x4d [0036.335] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e674) returned 1 [0036.335] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Fonts\\Solstice.xml" (normalized: "c:\\program files\\microsoft office\\document themes 14\\theme fonts\\solstice.xml"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x224 [0036.336] GetFileType (hFile=0x224) returned 0x1 [0036.336] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e670) returned 1 [0036.336] GetFileType (hFile=0x224) returned 0x1 [0036.336] WriteFile (in: hFile=0x224, lpBuffer=0x268af70*, nNumberOfBytesToWrite=0xef0, lpNumberOfBytesWritten=0x31e704, lpOverlapped=0x0 | out: lpBuffer=0x268af70*, lpNumberOfBytesWritten=0x31e704*=0xef0, lpOverlapped=0x0) returned 1 [0036.337] CloseHandle (hObject=0x224) returned 1 [0036.338] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Fonts\\Solstice.xml", nBufferLength=0x105, lpBuffer=0x31e2b4, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Fonts\\Solstice.xml", lpFilePart=0x0) returned 0x4d [0036.338] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Fonts\\Solstice.xml", nBufferLength=0x105, lpBuffer=0x31e2b4, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Fonts\\Solstice.xml", lpFilePart=0x0) returned 0x4d [0036.338] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e714) returned 1 [0036.338] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Fonts\\Solstice.xml" (normalized: "c:\\program files\\microsoft office\\document themes 14\\theme fonts\\solstice.xml"), fInfoLevelId=0x0, lpFileInformation=0x31e790 | out: lpFileInformation=0x31e790*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xfc1bdd00, ftCreationTime.dwHighDateTime=0x1cac1e0, ftLastAccessTime.dwLowDateTime=0x618565f0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xf91ce760, ftLastWriteTime.dwHighDateTime=0x1d6eb7e, nFileSizeHigh=0x0, nFileSizeLow=0xef0)) returned 1 [0036.338] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e710) returned 1 [0036.338] MoveFileW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Fonts\\Solstice.xml" (normalized: "c:\\program files\\microsoft office\\document themes 14\\theme fonts\\solstice.xml"), lpNewFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Fonts\\Solstice.xml" (normalized: "c:\\program files\\microsoft office\\document themes 14\\theme fonts\\solstice.xml")) returned 1 [0036.339] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Fonts\\Technic.xml", nBufferLength=0x105, lpBuffer=0x31e194, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Fonts\\Technic.xml", lpFilePart=0x0) returned 0x4c [0036.339] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e688) returned 1 [0036.339] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Fonts\\Technic.xml" (normalized: "c:\\program files\\microsoft office\\document themes 14\\theme fonts\\technic.xml"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x224 [0036.339] GetFileType (hFile=0x224) returned 0x1 [0036.339] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e684) returned 1 [0036.339] GetFileType (hFile=0x224) returned 0x1 [0036.339] GetFileSize (in: hFile=0x224, lpFileSizeHigh=0x31e790 | out: lpFileSizeHigh=0x31e790*=0x0) returned 0xe13 [0036.339] ReadFile (in: hFile=0x224, lpBuffer=0x268d02c, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x31e73c, lpOverlapped=0x0 | out: lpBuffer=0x268d02c*, lpNumberOfBytesRead=0x31e73c*=0xe13, lpOverlapped=0x0) returned 1 [0036.341] CloseHandle (hObject=0x224) returned 1 [0036.355] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Fonts\\Technic.xml", nBufferLength=0x105, lpBuffer=0x31e180, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Fonts\\Technic.xml", lpFilePart=0x0) returned 0x4c [0036.355] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e674) returned 1 [0036.355] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Fonts\\Technic.xml" (normalized: "c:\\program files\\microsoft office\\document themes 14\\theme fonts\\technic.xml"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x224 [0036.356] GetFileType (hFile=0x224) returned 0x1 [0036.356] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e670) returned 1 [0036.356] GetFileType (hFile=0x224) returned 0x1 [0036.356] WriteFile (in: hFile=0x224, lpBuffer=0x26df750*, nNumberOfBytesToWrite=0xe20, lpNumberOfBytesWritten=0x31e704, lpOverlapped=0x0 | out: lpBuffer=0x26df750*, lpNumberOfBytesWritten=0x31e704*=0xe20, lpOverlapped=0x0) returned 1 [0036.357] CloseHandle (hObject=0x224) returned 1 [0036.357] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Fonts\\Technic.xml", nBufferLength=0x105, lpBuffer=0x31e2b4, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Fonts\\Technic.xml", lpFilePart=0x0) returned 0x4c [0036.357] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Fonts\\Technic.xml", nBufferLength=0x105, lpBuffer=0x31e2b4, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Fonts\\Technic.xml", lpFilePart=0x0) returned 0x4c [0036.357] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e714) returned 1 [0036.358] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Fonts\\Technic.xml" (normalized: "c:\\program files\\microsoft office\\document themes 14\\theme fonts\\technic.xml"), fInfoLevelId=0x0, lpFileInformation=0x31e790 | out: lpFileInformation=0x31e790*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xfd4d0a00, ftCreationTime.dwHighDateTime=0x1cac1e0, ftLastAccessTime.dwLowDateTime=0x528d0030, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xf91f48c0, ftLastWriteTime.dwHighDateTime=0x1d6eb7e, nFileSizeHigh=0x0, nFileSizeLow=0xe20)) returned 1 [0036.358] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e710) returned 1 [0036.358] MoveFileW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Fonts\\Technic.xml" (normalized: "c:\\program files\\microsoft office\\document themes 14\\theme fonts\\technic.xml"), lpNewFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Fonts\\Technic.xml" (normalized: "c:\\program files\\microsoft office\\document themes 14\\theme fonts\\technic.xml")) returned 1 [0036.358] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Fonts\\Thatch.xml", nBufferLength=0x105, lpBuffer=0x31e194, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Fonts\\Thatch.xml", lpFilePart=0x0) returned 0x4b [0036.358] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e688) returned 1 [0036.358] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Fonts\\Thatch.xml" (normalized: "c:\\program files\\microsoft office\\document themes 14\\theme fonts\\thatch.xml"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x224 [0036.358] GetFileType (hFile=0x224) returned 0x1 [0036.358] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e684) returned 1 [0036.358] GetFileType (hFile=0x224) returned 0x1 [0036.359] GetFileSize (in: hFile=0x224, lpFileSizeHigh=0x31e790 | out: lpFileSizeHigh=0x31e790*=0x0) returned 0xeff [0036.359] ReadFile (in: hFile=0x224, lpBuffer=0x26e18f4, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x31e73c, lpOverlapped=0x0 | out: lpBuffer=0x26e18f4*, lpNumberOfBytesRead=0x31e73c*=0xeff, lpOverlapped=0x0) returned 1 [0036.360] CloseHandle (hObject=0x224) returned 1 [0036.374] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Fonts\\Thatch.xml", nBufferLength=0x105, lpBuffer=0x31e180, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Fonts\\Thatch.xml", lpFilePart=0x0) returned 0x4b [0036.374] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e674) returned 1 [0036.374] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Fonts\\Thatch.xml" (normalized: "c:\\program files\\microsoft office\\document themes 14\\theme fonts\\thatch.xml"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x224 [0036.374] GetFileType (hFile=0x224) returned 0x1 [0036.375] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e670) returned 1 [0036.375] GetFileType (hFile=0x224) returned 0x1 [0036.375] WriteFile (in: hFile=0x224, lpBuffer=0x273430c*, nNumberOfBytesToWrite=0xf00, lpNumberOfBytesWritten=0x31e704, lpOverlapped=0x0 | out: lpBuffer=0x273430c*, lpNumberOfBytesWritten=0x31e704*=0xf00, lpOverlapped=0x0) returned 1 [0036.375] CloseHandle (hObject=0x224) returned 1 [0036.376] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Fonts\\Thatch.xml", nBufferLength=0x105, lpBuffer=0x31e2b4, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Fonts\\Thatch.xml", lpFilePart=0x0) returned 0x4b [0036.376] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Fonts\\Thatch.xml", nBufferLength=0x105, lpBuffer=0x31e2b4, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Fonts\\Thatch.xml", lpFilePart=0x0) returned 0x4b [0036.376] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e714) returned 1 [0036.376] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Fonts\\Thatch.xml" (normalized: "c:\\program files\\microsoft office\\document themes 14\\theme fonts\\thatch.xml"), fInfoLevelId=0x0, lpFileInformation=0x31e790 | out: lpFileInformation=0x31e790*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa69f900, ftCreationTime.dwHighDateTime=0x1cac1e1, ftLastAccessTime.dwLowDateTime=0x6187c750, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xf921aa20, ftLastWriteTime.dwHighDateTime=0x1d6eb7e, nFileSizeHigh=0x0, nFileSizeLow=0xf00)) returned 1 [0036.376] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e710) returned 1 [0036.376] MoveFileW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Fonts\\Thatch.xml" (normalized: "c:\\program files\\microsoft office\\document themes 14\\theme fonts\\thatch.xml"), lpNewFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Fonts\\Thatch.xml" (normalized: "c:\\program files\\microsoft office\\document themes 14\\theme fonts\\thatch.xml")) returned 1 [0036.377] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Fonts\\Trek.xml", nBufferLength=0x105, lpBuffer=0x31e194, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Fonts\\Trek.xml", lpFilePart=0x0) returned 0x49 [0036.377] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e688) returned 1 [0036.377] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Fonts\\Trek.xml" (normalized: "c:\\program files\\microsoft office\\document themes 14\\theme fonts\\trek.xml"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x224 [0036.377] GetFileType (hFile=0x224) returned 0x1 [0036.377] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e684) returned 1 [0036.377] GetFileType (hFile=0x224) returned 0x1 [0036.377] GetFileSize (in: hFile=0x224, lpFileSizeHigh=0x31e790 | out: lpFileSizeHigh=0x31e790*=0x0) returned 0xe20 [0036.377] ReadFile (in: hFile=0x224, lpBuffer=0x27363c0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x31e73c, lpOverlapped=0x0 | out: lpBuffer=0x27363c0*, lpNumberOfBytesRead=0x31e73c*=0xe20, lpOverlapped=0x0) returned 1 [0036.379] CloseHandle (hObject=0x224) returned 1 [0036.392] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Fonts\\Trek.xml", nBufferLength=0x105, lpBuffer=0x31e180, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Fonts\\Trek.xml", lpFilePart=0x0) returned 0x49 [0036.392] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e674) returned 1 [0036.392] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Fonts\\Trek.xml" (normalized: "c:\\program files\\microsoft office\\document themes 14\\theme fonts\\trek.xml"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x224 [0036.393] GetFileType (hFile=0x224) returned 0x1 [0036.393] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e670) returned 1 [0036.393] GetFileType (hFile=0x224) returned 0x1 [0036.393] WriteFile (in: hFile=0x224, lpBuffer=0x27889cc*, nNumberOfBytesToWrite=0xe30, lpNumberOfBytesWritten=0x31e704, lpOverlapped=0x0 | out: lpBuffer=0x27889cc*, lpNumberOfBytesWritten=0x31e704*=0xe30, lpOverlapped=0x0) returned 1 [0036.394] CloseHandle (hObject=0x224) returned 1 [0036.395] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Fonts\\Trek.xml", nBufferLength=0x105, lpBuffer=0x31e2b4, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Fonts\\Trek.xml", lpFilePart=0x0) returned 0x49 [0036.395] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Fonts\\Trek.xml", nBufferLength=0x105, lpBuffer=0x31e2b4, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Fonts\\Trek.xml", lpFilePart=0x0) returned 0x49 [0036.395] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e714) returned 1 [0036.395] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Fonts\\Trek.xml" (normalized: "c:\\program files\\microsoft office\\document themes 14\\theme fonts\\trek.xml"), fInfoLevelId=0x0, lpFileInformation=0x31e790 | out: lpFileInformation=0x31e790*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xfd4d0a00, ftCreationTime.dwHighDateTime=0x1cac1e0, ftLastAccessTime.dwLowDateTime=0x528d0030, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xf9240b80, ftLastWriteTime.dwHighDateTime=0x1d6eb7e, nFileSizeHigh=0x0, nFileSizeLow=0xe30)) returned 1 [0036.395] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e710) returned 1 [0036.395] MoveFileW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Fonts\\Trek.xml" (normalized: "c:\\program files\\microsoft office\\document themes 14\\theme fonts\\trek.xml"), lpNewFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Fonts\\Trek.xml" (normalized: "c:\\program files\\microsoft office\\document themes 14\\theme fonts\\trek.xml")) returned 1 [0036.395] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Fonts\\Urban.xml", nBufferLength=0x105, lpBuffer=0x31e194, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Fonts\\Urban.xml", lpFilePart=0x0) returned 0x4a [0036.395] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e688) returned 1 [0036.396] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Fonts\\Urban.xml" (normalized: "c:\\program files\\microsoft office\\document themes 14\\theme fonts\\urban.xml"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x224 [0036.396] GetFileType (hFile=0x224) returned 0x1 [0036.396] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e684) returned 1 [0036.396] GetFileType (hFile=0x224) returned 0x1 [0036.396] GetFileSize (in: hFile=0x224, lpFileSizeHigh=0x31e790 | out: lpFileSizeHigh=0x31e790*=0x0) returned 0xe19 [0036.397] ReadFile (in: hFile=0x224, lpBuffer=0x278aa78, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x31e73c, lpOverlapped=0x0 | out: lpBuffer=0x278aa78*, lpNumberOfBytesRead=0x31e73c*=0xe19, lpOverlapped=0x0) returned 1 [0036.398] CloseHandle (hObject=0x224) returned 1 [0036.411] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Fonts\\Urban.xml", nBufferLength=0x105, lpBuffer=0x31e180, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Fonts\\Urban.xml", lpFilePart=0x0) returned 0x4a [0036.411] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e674) returned 1 [0036.411] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Fonts\\Urban.xml" (normalized: "c:\\program files\\microsoft office\\document themes 14\\theme fonts\\urban.xml"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x224 [0036.412] GetFileType (hFile=0x224) returned 0x1 [0036.412] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e670) returned 1 [0036.412] GetFileType (hFile=0x224) returned 0x1 [0036.412] WriteFile (in: hFile=0x224, lpBuffer=0x27dd030*, nNumberOfBytesToWrite=0xe20, lpNumberOfBytesWritten=0x31e704, lpOverlapped=0x0 | out: lpBuffer=0x27dd030*, lpNumberOfBytesWritten=0x31e704*=0xe20, lpOverlapped=0x0) returned 1 [0036.413] CloseHandle (hObject=0x224) returned 1 [0036.414] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Fonts\\Urban.xml", nBufferLength=0x105, lpBuffer=0x31e2b4, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Fonts\\Urban.xml", lpFilePart=0x0) returned 0x4a [0036.414] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Fonts\\Urban.xml", nBufferLength=0x105, lpBuffer=0x31e2b4, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Fonts\\Urban.xml", lpFilePart=0x0) returned 0x4a [0036.414] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e714) returned 1 [0036.414] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Fonts\\Urban.xml" (normalized: "c:\\program files\\microsoft office\\document themes 14\\theme fonts\\urban.xml"), fInfoLevelId=0x0, lpFileInformation=0x31e790 | out: lpFileInformation=0x31e790*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xfe7e3700, ftCreationTime.dwHighDateTime=0x1cac1e0, ftLastAccessTime.dwLowDateTime=0x528d0030, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xf928ce40, ftLastWriteTime.dwHighDateTime=0x1d6eb7e, nFileSizeHigh=0x0, nFileSizeLow=0xe20)) returned 1 [0036.414] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e710) returned 1 [0036.414] MoveFileW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Fonts\\Urban.xml" (normalized: "c:\\program files\\microsoft office\\document themes 14\\theme fonts\\urban.xml"), lpNewFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Fonts\\Urban.xml" (normalized: "c:\\program files\\microsoft office\\document themes 14\\theme fonts\\urban.xml")) returned 1 [0036.414] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Fonts\\Verve.xml", nBufferLength=0x105, lpBuffer=0x31e194, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Fonts\\Verve.xml", lpFilePart=0x0) returned 0x4a [0036.415] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e688) returned 1 [0036.415] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Fonts\\Verve.xml" (normalized: "c:\\program files\\microsoft office\\document themes 14\\theme fonts\\verve.xml"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x224 [0036.415] GetFileType (hFile=0x224) returned 0x1 [0036.415] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e684) returned 1 [0036.415] GetFileType (hFile=0x224) returned 0x1 [0036.415] GetFileSize (in: hFile=0x224, lpFileSizeHigh=0x31e790 | out: lpFileSizeHigh=0x31e790*=0x0) returned 0xe14 [0036.415] ReadFile (in: hFile=0x224, lpBuffer=0x27df0dc, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x31e73c, lpOverlapped=0x0 | out: lpBuffer=0x27df0dc*, lpNumberOfBytesRead=0x31e73c*=0xe14, lpOverlapped=0x0) returned 1 [0036.416] CloseHandle (hObject=0x224) returned 1 [0036.430] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Fonts\\Verve.xml", nBufferLength=0x105, lpBuffer=0x31e180, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Fonts\\Verve.xml", lpFilePart=0x0) returned 0x4a [0036.430] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e674) returned 1 [0036.430] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Fonts\\Verve.xml" (normalized: "c:\\program files\\microsoft office\\document themes 14\\theme fonts\\verve.xml"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x224 [0036.431] GetFileType (hFile=0x224) returned 0x1 [0036.431] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e670) returned 1 [0036.431] GetFileType (hFile=0x224) returned 0x1 [0036.431] WriteFile (in: hFile=0x224, lpBuffer=0x2831698*, nNumberOfBytesToWrite=0xe20, lpNumberOfBytesWritten=0x31e704, lpOverlapped=0x0 | out: lpBuffer=0x2831698*, lpNumberOfBytesWritten=0x31e704*=0xe20, lpOverlapped=0x0) returned 1 [0036.432] CloseHandle (hObject=0x224) returned 1 [0036.433] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Fonts\\Verve.xml", nBufferLength=0x105, lpBuffer=0x31e2b4, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Fonts\\Verve.xml", lpFilePart=0x0) returned 0x4a [0036.433] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Fonts\\Verve.xml", nBufferLength=0x105, lpBuffer=0x31e2b4, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Fonts\\Verve.xml", lpFilePart=0x0) returned 0x4a [0036.433] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e714) returned 1 [0036.433] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Fonts\\Verve.xml" (normalized: "c:\\program files\\microsoft office\\document themes 14\\theme fonts\\verve.xml"), fInfoLevelId=0x0, lpFileInformation=0x31e790 | out: lpFileInformation=0x31e790*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xffaf6400, ftCreationTime.dwHighDateTime=0x1cac1e0, ftLastAccessTime.dwLowDateTime=0x528d0030, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xf92b2fa0, ftLastWriteTime.dwHighDateTime=0x1d6eb7e, nFileSizeHigh=0x0, nFileSizeLow=0xe20)) returned 1 [0036.433] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e710) returned 1 [0036.433] MoveFileW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Fonts\\Verve.xml" (normalized: "c:\\program files\\microsoft office\\document themes 14\\theme fonts\\verve.xml"), lpNewFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Fonts\\Verve.xml" (normalized: "c:\\program files\\microsoft office\\document themes 14\\theme fonts\\verve.xml")) returned 1 [0036.433] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Fonts\\Waveform.xml", nBufferLength=0x105, lpBuffer=0x31e194, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Fonts\\Waveform.xml", lpFilePart=0x0) returned 0x4d [0036.433] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e688) returned 1 [0036.433] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Fonts\\Waveform.xml" (normalized: "c:\\program files\\microsoft office\\document themes 14\\theme fonts\\waveform.xml"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x224 [0036.434] GetFileType (hFile=0x224) returned 0x1 [0036.434] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e684) returned 1 [0036.434] GetFileType (hFile=0x224) returned 0x1 [0036.434] GetFileSize (in: hFile=0x224, lpFileSizeHigh=0x31e790 | out: lpFileSizeHigh=0x31e790*=0x0) returned 0xdf9 [0036.434] ReadFile (in: hFile=0x224, lpBuffer=0x2833738, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x31e73c, lpOverlapped=0x0 | out: lpBuffer=0x2833738*, lpNumberOfBytesRead=0x31e73c*=0xdf9, lpOverlapped=0x0) returned 1 [0036.436] CloseHandle (hObject=0x224) returned 1 [0036.452] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Fonts\\Waveform.xml", nBufferLength=0x105, lpBuffer=0x31e180, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Fonts\\Waveform.xml", lpFilePart=0x0) returned 0x4d [0036.452] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e674) returned 1 [0036.452] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Fonts\\Waveform.xml" (normalized: "c:\\program files\\microsoft office\\document themes 14\\theme fonts\\waveform.xml"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x224 [0036.453] GetFileType (hFile=0x224) returned 0x1 [0036.453] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e670) returned 1 [0036.453] GetFileType (hFile=0x224) returned 0x1 [0036.453] WriteFile (in: hFile=0x224, lpBuffer=0x2685b68*, nNumberOfBytesToWrite=0xe00, lpNumberOfBytesWritten=0x31e704, lpOverlapped=0x0 | out: lpBuffer=0x2685b68*, lpNumberOfBytesWritten=0x31e704*=0xe00, lpOverlapped=0x0) returned 1 [0036.454] CloseHandle (hObject=0x224) returned 1 [0036.454] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Fonts\\Waveform.xml", nBufferLength=0x105, lpBuffer=0x31e2b4, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Fonts\\Waveform.xml", lpFilePart=0x0) returned 0x4d [0036.454] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Fonts\\Waveform.xml", nBufferLength=0x105, lpBuffer=0x31e2b4, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Fonts\\Waveform.xml", lpFilePart=0x0) returned 0x4d [0036.454] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e714) returned 1 [0036.454] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Fonts\\Waveform.xml" (normalized: "c:\\program files\\microsoft office\\document themes 14\\theme fonts\\waveform.xml"), fInfoLevelId=0x0, lpFileInformation=0x31e790 | out: lpFileInformation=0x31e790*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb9b2600, ftCreationTime.dwHighDateTime=0x1cac1e1, ftLastAccessTime.dwLowDateTime=0x528d0030, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xf92d9100, ftLastWriteTime.dwHighDateTime=0x1d6eb7e, nFileSizeHigh=0x0, nFileSizeLow=0xe00)) returned 1 [0036.455] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e710) returned 1 [0036.455] MoveFileW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Fonts\\Waveform.xml" (normalized: "c:\\program files\\microsoft office\\document themes 14\\theme fonts\\waveform.xml"), lpNewFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Fonts\\Waveform.xml" (normalized: "c:\\program files\\microsoft office\\document themes 14\\theme fonts\\waveform.xml")) returned 1 [0036.455] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e834) returned 1 [0036.455] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA", nBufferLength=0x105, lpBuffer=0x31e33c, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\MEDIA", lpFilePart=0x0) returned 0x27 [0036.455] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\", nBufferLength=0x105, lpBuffer=0x31e310, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\MEDIA\\", lpFilePart=0x0) returned 0x28 [0036.455] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\*", lpFindFileData=0x31e55c | out: lpFindFileData=0x31e55c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeec79e70, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xeef015d0, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xeef015d0, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x381dc0 [0036.458] FindNextFileW (in: hFindFile=0x381dc0, lpFindFileData=0x31e56c | out: lpFindFileData=0x31e56c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeec79e70, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xeef015d0, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xeef015d0, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0036.458] FindNextFileW (in: hFindFile=0x381dc0, lpFindFileData=0x31e56c | out: lpFindFileData=0x31e56c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeec79e70, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xbd6dc020, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0xbd6dc020, ftLastWriteTime.dwHighDateTime=0x1d305f1, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="CAGCAT10", cAlternateFileName="")) returned 1 [0036.458] FindNextFileW (in: hFindFile=0x381dc0, lpFindFileData=0x31e56c | out: lpFindFileData=0x31e56c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeef015d0, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0x596c1850, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x596c1850, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="OFFICE14", cAlternateFileName="")) returned 1 [0036.458] FindNextFileW (in: hFindFile=0x381dc0, lpFindFileData=0x31e56c | out: lpFindFileData=0x31e56c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeef015d0, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0x596c1850, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x596c1850, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="OFFICE14", cAlternateFileName="")) returned 0 [0036.458] FindClose (in: hFindFile=0x381dc0 | out: hFindFile=0x381dc0) returned 1 [0036.458] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e7f4) returned 1 [0036.458] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e800) returned 1 [0036.458] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e834) returned 1 [0036.458] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA", nBufferLength=0x105, lpBuffer=0x31e33c, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\MEDIA", lpFilePart=0x0) returned 0x27 [0036.459] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\", nBufferLength=0x105, lpBuffer=0x31e310, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\MEDIA\\", lpFilePart=0x0) returned 0x28 [0036.459] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\*", lpFindFileData=0x31e55c | out: lpFindFileData=0x31e55c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeec79e70, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xeef015d0, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xeef015d0, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x381dc0 [0036.459] FindNextFileW (in: hFindFile=0x381dc0, lpFindFileData=0x31e56c | out: lpFindFileData=0x31e56c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeec79e70, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xeef015d0, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xeef015d0, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0036.459] FindNextFileW (in: hFindFile=0x381dc0, lpFindFileData=0x31e56c | out: lpFindFileData=0x31e56c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeec79e70, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xbd6dc020, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0xbd6dc020, ftLastWriteTime.dwHighDateTime=0x1d305f1, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="CAGCAT10", cAlternateFileName="")) returned 1 [0036.459] FindNextFileW (in: hFindFile=0x381dc0, lpFindFileData=0x31e56c | out: lpFindFileData=0x31e56c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeef015d0, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0x596c1850, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x596c1850, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="OFFICE14", cAlternateFileName="")) returned 1 [0036.459] FindNextFileW (in: hFindFile=0x381dc0, lpFindFileData=0x31e56c | out: lpFindFileData=0x31e56c*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0036.459] FindClose (in: hFindFile=0x381dc0 | out: hFindFile=0x381dc0) returned 1 [0036.459] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e7f4) returned 1 [0036.459] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e800) returned 1 [0036.459] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e7bc) returned 1 [0036.459] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10", nBufferLength=0x105, lpBuffer=0x31e2c4, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10", lpFilePart=0x0) returned 0x30 [0036.459] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\", nBufferLength=0x105, lpBuffer=0x31e298, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\", lpFilePart=0x0) returned 0x31 [0036.460] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\*", lpFindFileData=0x31e4e4 | out: lpFindFileData=0x31e4e4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeec79e70, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xbd6dc020, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0xbd6dc020, ftLastWriteTime.dwHighDateTime=0x1d305f1, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x381dc0 [0036.461] FindNextFileW (in: hFindFile=0x381dc0, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeec79e70, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xbd6dc020, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0xbd6dc020, ftLastWriteTime.dwHighDateTime=0x1d305f1, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0036.462] FindNextFileW (in: hFindFile=0x381dc0, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeec79e70, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xeec79e70, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xeec79e70, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="1033", cAlternateFileName="")) returned 1 [0036.462] FindNextFileW (in: hFindFile=0x381dc0, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf2162900, ftCreationTime.dwHighDateTime=0x1ca9120, ftLastAccessTime.dwLowDateTime=0x51b925d0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xf2162900, ftLastWriteTime.dwHighDateTime=0x1ca9120, nFileSizeHigh=0x0, nFileSizeLow=0x3da0, dwReserved0=0x0, dwReserved1=0x0, cFileName="CAGCAT10.DLL", cAlternateFileName="")) returned 1 [0036.462] FindNextFileW (in: hFindFile=0x381dc0, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x130a0400, ftCreationTime.dwHighDateTime=0x1c07b1f, ftLastAccessTime.dwLowDateTime=0x60120f70, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x130a0400, ftLastWriteTime.dwHighDateTime=0x1c07b1f, nFileSizeHigh=0x0, nFileSizeLow=0x603d8, dwReserved0=0x0, dwReserved1=0x0, cFileName="CAGCAT10.MMW", cAlternateFileName="")) returned 1 [0036.462] FindNextFileW (in: hFindFile=0x381dc0, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x11ec5600, ftCreationTime.dwHighDateTime=0x1bd4c14, ftLastAccessTime.dwLowDateTime=0xbd180ea0, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0x11ec5600, ftLastWriteTime.dwHighDateTime=0x1bd4c14, nFileSizeHigh=0x0, nFileSizeLow=0x585a, dwReserved0=0x0, dwReserved1=0x0, cFileName="ELPHRG01.WAV", cAlternateFileName="")) returned 1 [0036.462] FindNextFileW (in: hFindFile=0x381dc0, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x63c1b400, ftCreationTime.dwHighDateTime=0x1bd216e, ftLastAccessTime.dwLowDateTime=0xbd3e24a0, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0x63c1b400, ftLastWriteTime.dwHighDateTime=0x1bd216e, nFileSizeHigh=0x0, nFileSizeLow=0x3602, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0088542.WMF", cAlternateFileName="")) returned 1 [0036.462] FindNextFileW (in: hFindFile=0x381dc0, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x68ad6a00, ftCreationTime.dwHighDateTime=0x1bcf887, ftLastAccessTime.dwLowDateTime=0xbd3e24a0, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0x68ad6a00, ftLastWriteTime.dwHighDateTime=0x1bcf887, nFileSizeHigh=0x0, nFileSizeLow=0x8880, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0090070.WMF", cAlternateFileName="")) returned 1 [0036.462] FindNextFileW (in: hFindFile=0x381dc0, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x59c88400, ftCreationTime.dwHighDateTime=0x1bd208e, ftLastAccessTime.dwLowDateTime=0xbd3e24a0, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0x59c88400, ftLastWriteTime.dwHighDateTime=0x1bd208e, nFileSizeHigh=0x0, nFileSizeLow=0x830a, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0090386.WMF", cAlternateFileName="")) returned 1 [0036.463] FindNextFileW (in: hFindFile=0x381dc0, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6e332700, ftCreationTime.dwHighDateTime=0x1bd3d86, ftLastAccessTime.dwLowDateTime=0xbd4548c0, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0x6e332700, ftLastWriteTime.dwHighDateTime=0x1bd3d86, nFileSizeHigh=0x0, nFileSizeLow=0x870a, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0149407.WMF", cAlternateFileName="")) returned 1 [0036.463] FindNextFileW (in: hFindFile=0x381dc0, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4fd5900, ftCreationTime.dwHighDateTime=0x1bd4249, ftLastAccessTime.dwLowDateTime=0xbd4548c0, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0x4fd5900, ftLastWriteTime.dwHighDateTime=0x1bd4249, nFileSizeHigh=0x0, nFileSizeLow=0x5eda, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0149481.WMF", cAlternateFileName="")) returned 1 [0036.463] FindNextFileW (in: hFindFile=0x381dc0, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3fe3f700, ftCreationTime.dwHighDateTime=0x1bd5067, ftLastAccessTime.dwLowDateTime=0xbd4548c0, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0x3fe3f700, ftLastWriteTime.dwHighDateTime=0x1bd5067, nFileSizeHigh=0x0, nFileSizeLow=0xa80a, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0149627.WMF", cAlternateFileName="")) returned 1 [0036.463] FindNextFileW (in: hFindFile=0x381dc0, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9dd2e700, ftCreationTime.dwHighDateTime=0x1bd6439, ftLastAccessTime.dwLowDateTime=0xbd4548c0, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0x9dd2e700, ftLastWriteTime.dwHighDateTime=0x1bd6439, nFileSizeHigh=0x0, nFileSizeLow=0x1ffa, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0149887.WMF", cAlternateFileName="")) returned 1 [0036.463] FindNextFileW (in: hFindFile=0x381dc0, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3fc87200, ftCreationTime.dwHighDateTime=0x1bd7ec5, ftLastAccessTime.dwLowDateTime=0xbd4548c0, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0x3fc87200, ftLastWriteTime.dwHighDateTime=0x1bd7ec5, nFileSizeHigh=0x0, nFileSizeLow=0x2068, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0157763.WMF", cAlternateFileName="")) returned 1 [0036.463] FindNextFileW (in: hFindFile=0x381dc0, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xaeffa900, ftCreationTime.dwHighDateTime=0x1bd94f9, ftLastAccessTime.dwLowDateTime=0xbd4548c0, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0xaeffa900, ftLastWriteTime.dwHighDateTime=0x1bd94f9, nFileSizeHigh=0x0, nFileSizeLow=0x1d94, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0157995.WMF", cAlternateFileName="")) returned 1 [0036.463] FindNextFileW (in: hFindFile=0x381dc0, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb9ba3e00, ftCreationTime.dwHighDateTime=0x1bd94f9, ftLastAccessTime.dwLowDateTime=0xbd47aa20, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0xb9ba3e00, ftLastWriteTime.dwHighDateTime=0x1bd94f9, nFileSizeHigh=0x0, nFileSizeLow=0x1426, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0158007.WMF", cAlternateFileName="")) returned 1 [0036.463] FindNextFileW (in: hFindFile=0x381dc0, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xdf00c800, ftCreationTime.dwHighDateTime=0x1bdf6f6, ftLastAccessTime.dwLowDateTime=0xbd47aa20, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0xdf00c800, ftLastWriteTime.dwHighDateTime=0x1bdf6f6, nFileSizeHigh=0x0, nFileSizeLow=0x4d38, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0183168.WMF", cAlternateFileName="")) returned 1 [0036.463] FindNextFileW (in: hFindFile=0x381dc0, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc9d86900, ftCreationTime.dwHighDateTime=0x1bdf6f7, ftLastAccessTime.dwLowDateTime=0xbd47aa20, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0xc9d86900, ftLastWriteTime.dwHighDateTime=0x1bdf6f7, nFileSizeHigh=0x0, nFileSizeLow=0x7018, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0183290.WMF", cAlternateFileName="")) returned 1 [0036.463] FindNextFileW (in: hFindFile=0x381dc0, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf8564400, ftCreationTime.dwHighDateTime=0x1bdf6f7, ftLastAccessTime.dwLowDateTime=0xbd47aa20, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0xf8564400, ftLastWriteTime.dwHighDateTime=0x1bdf6f7, nFileSizeHigh=0x0, nFileSizeLow=0x14fa, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0183328.WMF", cAlternateFileName="")) returned 1 [0036.464] FindNextFileW (in: hFindFile=0x381dc0, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf396a700, ftCreationTime.dwHighDateTime=0x1be0d1a, ftLastAccessTime.dwLowDateTime=0xbd47aa20, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0xf396a700, ftLastWriteTime.dwHighDateTime=0x1be0d1a, nFileSizeHigh=0x0, nFileSizeLow=0x171c, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0185604.WMF", cAlternateFileName="")) returned 1 [0036.464] FindNextFileW (in: hFindFile=0x381dc0, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xdc0fec00, ftCreationTime.dwHighDateTime=0x1be0d23, ftLastAccessTime.dwLowDateTime=0xbd47aa20, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0xdc0fec00, ftLastWriteTime.dwHighDateTime=0x1be0d23, nFileSizeHigh=0x0, nFileSizeLow=0x2f64, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0186002.WMF", cAlternateFileName="")) returned 1 [0036.464] FindNextFileW (in: hFindFile=0x381dc0, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xeb426a00, ftCreationTime.dwHighDateTime=0x1be0d22, ftLastAccessTime.dwLowDateTime=0xbd47aa20, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0xeb426a00, ftLastWriteTime.dwHighDateTime=0x1be0d22, nFileSizeHigh=0x0, nFileSizeLow=0x1b3a, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0186348.WMF", cAlternateFileName="")) returned 1 [0036.464] FindNextFileW (in: hFindFile=0x381dc0, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1b608300, ftCreationTime.dwHighDateTime=0x1be10fe, ftLastAccessTime.dwLowDateTime=0xbd4a0b80, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0x1b608300, ftLastWriteTime.dwHighDateTime=0x1be10fe, nFileSizeHigh=0x0, nFileSizeLow=0x4746, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0187423.WMF", cAlternateFileName="")) returned 1 [0036.464] FindNextFileW (in: hFindFile=0x381dc0, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc36d6a00, ftCreationTime.dwHighDateTime=0x1be2705, ftLastAccessTime.dwLowDateTime=0xbd4a0b80, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0xc36d6a00, ftLastWriteTime.dwHighDateTime=0x1be2705, nFileSizeHigh=0x0, nFileSizeLow=0x31da, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0195384.WMF", cAlternateFileName="")) returned 1 [0036.464] FindNextFileW (in: hFindFile=0x381dc0, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xfa438000, ftCreationTime.dwHighDateTime=0x1be2705, ftLastAccessTime.dwLowDateTime=0xbd4a0b80, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0xfa438000, ftLastWriteTime.dwHighDateTime=0x1be2705, nFileSizeHigh=0x0, nFileSizeLow=0x275c, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0195534.WMF", cAlternateFileName="")) returned 1 [0036.464] FindNextFileW (in: hFindFile=0x381dc0, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x455d9300, ftCreationTime.dwHighDateTime=0x1be2706, ftLastAccessTime.dwLowDateTime=0xbd4a0b80, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0x455d9300, ftLastWriteTime.dwHighDateTime=0x1be2706, nFileSizeHigh=0x0, nFileSizeLow=0xfca, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0195812.WMF", cAlternateFileName="")) returned 1 [0036.464] FindNextFileW (in: hFindFile=0x381dc0, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9ec5c200, ftCreationTime.dwHighDateTime=0x1be2706, ftLastAccessTime.dwLowDateTime=0xbd4a0b80, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0x9ec5c200, ftLastWriteTime.dwHighDateTime=0x1be2706, nFileSizeHigh=0x0, nFileSizeLow=0x7b2, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0196164.WMF", cAlternateFileName="")) returned 1 [0036.464] FindNextFileW (in: hFindFile=0x381dc0, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x81ec6b00, ftCreationTime.dwHighDateTime=0x1be390f, ftLastAccessTime.dwLowDateTime=0xbd4a0b80, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0x81ec6b00, ftLastWriteTime.dwHighDateTime=0x1be390f, nFileSizeHigh=0x0, nFileSizeLow=0x1216, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0196374.WMF", cAlternateFileName="")) returned 1 [0036.464] FindNextFileW (in: hFindFile=0x381dc0, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x929ce100, ftCreationTime.dwHighDateTime=0x1be390f, ftLastAccessTime.dwLowDateTime=0xbd4c6ce0, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0x929ce100, ftLastWriteTime.dwHighDateTime=0x1be390f, nFileSizeHigh=0x0, nFileSizeLow=0x8cbe, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0196400.WMF", cAlternateFileName="")) returned 1 [0036.465] FindNextFileW (in: hFindFile=0x381dc0, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x91fc00, ftCreationTime.dwHighDateTime=0x1bdf0c6, ftLastAccessTime.dwLowDateTime=0xbd4c6ce0, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0x91fc00, ftLastWriteTime.dwHighDateTime=0x1bdf0c6, nFileSizeHigh=0x0, nFileSizeLow=0x2518, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0199036.WMF", cAlternateFileName="")) returned 1 [0036.465] FindNextFileW (in: hFindFile=0x381dc0, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xebd55500, ftCreationTime.dwHighDateTime=0x1be05ec, ftLastAccessTime.dwLowDateTime=0xbd4c6ce0, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0xebd55500, ftLastWriteTime.dwHighDateTime=0x1be05ec, nFileSizeHigh=0x0, nFileSizeLow=0x8ec4, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0199283.WMF", cAlternateFileName="")) returned 1 [0036.465] FindNextFileW (in: hFindFile=0x381dc0, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x54b53500, ftCreationTime.dwHighDateTime=0x1be3e9a, ftLastAccessTime.dwLowDateTime=0xbd4c6ce0, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0x54b53500, ftLastWriteTime.dwHighDateTime=0x1be3e9a, nFileSizeHigh=0x0, nFileSizeLow=0xf5e, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0199549.WMF", cAlternateFileName="")) returned 1 [0036.465] FindNextFileW (in: hFindFile=0x381dc0, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8b8b4b00, ftCreationTime.dwHighDateTime=0x1be3e9a, ftLastAccessTime.dwLowDateTime=0xbd4c6ce0, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0x8b8b4b00, ftLastWriteTime.dwHighDateTime=0x1be3e9a, nFileSizeHigh=0x0, nFileSizeLow=0x341e, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0199661.WMF", cAlternateFileName="")) returned 1 [0036.465] FindNextFileW (in: hFindFile=0x381dc0, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb1b0eb00, ftCreationTime.dwHighDateTime=0x1be3e9a, ftLastAccessTime.dwLowDateTime=0xbd4c6ce0, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0xb1b0eb00, ftLastWriteTime.dwHighDateTime=0x1be3e9a, nFileSizeHigh=0x0, nFileSizeLow=0x900, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0199727.WMF", cAlternateFileName="")) returned 1 [0036.465] FindNextFileW (in: hFindFile=0x381dc0, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xbc6b8000, ftCreationTime.dwHighDateTime=0x1be3e9a, ftLastAccessTime.dwLowDateTime=0xbd4c6ce0, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0xbc6b8000, ftLastWriteTime.dwHighDateTime=0x1be3e9a, nFileSizeHigh=0x0, nFileSizeLow=0xaf0, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0199755.WMF", cAlternateFileName="")) returned 1 [0036.465] FindNextFileW (in: hFindFile=0x381dc0, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd311d700, ftCreationTime.dwHighDateTime=0x1be3e9a, ftLastAccessTime.dwLowDateTime=0xbd4ece40, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0xd311d700, ftLastWriteTime.dwHighDateTime=0x1be3e9a, nFileSizeHigh=0x0, nFileSizeLow=0x948, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0199805.WMF", cAlternateFileName="")) returned 1 [0036.466] FindNextFileW (in: hFindFile=0x381dc0, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x85ccab00, ftCreationTime.dwHighDateTime=0x1be4d5e, ftLastAccessTime.dwLowDateTime=0xbd4ece40, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0x85ccab00, ftLastWriteTime.dwHighDateTime=0x1be4d5e, nFileSizeHigh=0x0, nFileSizeLow=0x2398, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0205462.WMF", cAlternateFileName="")) returned 1 [0036.466] FindNextFileW (in: hFindFile=0x381dc0, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x89603200, ftCreationTime.dwHighDateTime=0x1be4d5e, ftLastAccessTime.dwLowDateTime=0xbd4ece40, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0x89603200, ftLastWriteTime.dwHighDateTime=0x1be4d5e, nFileSizeHigh=0x0, nFileSizeLow=0x11e2, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0205466.WMF", cAlternateFileName="")) returned 1 [0036.466] FindNextFileW (in: hFindFile=0x381dc0, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x14d9c300, ftCreationTime.dwHighDateTime=0x1be4d5f, ftLastAccessTime.dwLowDateTime=0xbd4ece40, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0x14d9c300, ftLastWriteTime.dwHighDateTime=0x1be4d5f, nFileSizeHigh=0x0, nFileSizeLow=0x17f2, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0205582.WMF", cAlternateFileName="")) returned 1 [0036.466] FindNextFileW (in: hFindFile=0x381dc0, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3e240a00, ftCreationTime.dwHighDateTime=0x1be560f, ftLastAccessTime.dwLowDateTime=0xbd4ece40, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0x3e240a00, ftLastWriteTime.dwHighDateTime=0x1be560f, nFileSizeHigh=0x0, nFileSizeLow=0xb34e, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0211949.WMF", cAlternateFileName="")) returned 1 [0036.466] FindNextFileW (in: hFindFile=0x381dc0, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x50527800, ftCreationTime.dwHighDateTime=0x1be5610, ftLastAccessTime.dwLowDateTime=0xbd4ece40, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0x50527800, ftLastWriteTime.dwHighDateTime=0x1be5610, nFileSizeHigh=0x0, nFileSizeLow=0x11be, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0212219.WMF", cAlternateFileName="")) returned 1 [0036.466] FindNextFileW (in: hFindFile=0x381dc0, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x56952400, ftCreationTime.dwHighDateTime=0x1be5611, ftLastAccessTime.dwLowDateTime=0xbd4ece40, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0x56952400, ftLastWriteTime.dwHighDateTime=0x1be5611, nFileSizeHigh=0x0, nFileSizeLow=0x248e, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0212661.WMF", cAlternateFileName="")) returned 1 [0036.467] FindNextFileW (in: hFindFile=0x381dc0, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6e6ca800, ftCreationTime.dwHighDateTime=0x1be5611, ftLastAccessTime.dwLowDateTime=0xbd512fa0, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0x6e6ca800, ftLastWriteTime.dwHighDateTime=0x1be5611, nFileSizeHigh=0x0, nFileSizeLow=0xb7a, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0212701.WMF", cAlternateFileName="")) returned 1 [0036.467] FindNextFileW (in: hFindFile=0x381dc0, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xdae7a700, ftCreationTime.dwHighDateTime=0x1be5611, ftLastAccessTime.dwLowDateTime=0xbd512fa0, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0xdae7a700, ftLastWriteTime.dwHighDateTime=0x1be5611, nFileSizeHigh=0x0, nFileSizeLow=0x2424, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0212957.WMF", cAlternateFileName="")) returned 1 [0036.467] FindNextFileW (in: hFindFile=0x381dc0, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8726e600, ftCreationTime.dwHighDateTime=0x1be59a2, ftLastAccessTime.dwLowDateTime=0xbd512fa0, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0x8726e600, ftLastWriteTime.dwHighDateTime=0x1be59a2, nFileSizeHigh=0x0, nFileSizeLow=0x68ba, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0214098.WAV", cAlternateFileName="")) returned 1 [0036.467] FindNextFileW (in: hFindFile=0x381dc0, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x32ba5a00, ftCreationTime.dwHighDateTime=0x1be1b5b, ftLastAccessTime.dwLowDateTime=0xbd512fa0, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0x32ba5a00, ftLastWriteTime.dwHighDateTime=0x1be1b5b, nFileSizeHigh=0x0, nFileSizeLow=0x1d3a, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0215086.WMF", cAlternateFileName="")) returned 1 [0036.467] FindNextFileW (in: hFindFile=0x381dc0, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x35c4ec00, ftCreationTime.dwHighDateTime=0x1be6c1a, ftLastAccessTime.dwLowDateTime=0xbd512fa0, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0x35c4ec00, ftLastWriteTime.dwHighDateTime=0x1be6c1a, nFileSizeHigh=0x0, nFileSizeLow=0x3138, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0216516.WMF", cAlternateFileName="")) returned 1 [0036.467] FindNextFileW (in: hFindFile=0x381dc0, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7e7ca500, ftCreationTime.dwHighDateTime=0x1be6c1a, ftLastAccessTime.dwLowDateTime=0xbd512fa0, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0x7e7ca500, ftLastWriteTime.dwHighDateTime=0x1be6c1a, nFileSizeHigh=0x0, nFileSizeLow=0x1c06, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0216588.WMF", cAlternateFileName="")) returned 1 [0036.467] FindNextFileW (in: hFindFile=0x381dc0, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xff3ba100, ftCreationTime.dwHighDateTime=0x1be6c1a, ftLastAccessTime.dwLowDateTime=0xbd512fa0, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0xff3ba100, ftLastWriteTime.dwHighDateTime=0x1be6c1a, nFileSizeHigh=0x0, nFileSizeLow=0x5d78, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0216724.WMF", cAlternateFileName="")) returned 1 [0036.467] FindNextFileW (in: hFindFile=0x381dc0, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x825cf700, ftCreationTime.dwHighDateTime=0x1be6c1b, ftLastAccessTime.dwLowDateTime=0xbd539100, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0x825cf700, ftLastWriteTime.dwHighDateTime=0x1be6c1b, nFileSizeHigh=0x0, nFileSizeLow=0x2dc4, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0216858.WMF", cAlternateFileName="")) returned 1 [0036.467] FindNextFileW (in: hFindFile=0x381dc0, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd8cb3500, ftCreationTime.dwHighDateTime=0x1be6c1d, ftLastAccessTime.dwLowDateTime=0xbd539100, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0xd8cb3500, ftLastWriteTime.dwHighDateTime=0x1be6c1d, nFileSizeHigh=0x0, nFileSizeLow=0x1aea, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0217698.WMF", cAlternateFileName="")) returned 1 [0036.467] FindNextFileW (in: hFindFile=0x381dc0, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7bfdb600, ftCreationTime.dwHighDateTime=0x1be7a36, ftLastAccessTime.dwLowDateTime=0xbd539100, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0x7bfdb600, ftLastWriteTime.dwHighDateTime=0x1be7a36, nFileSizeHigh=0x0, nFileSizeLow=0x3838, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0221903.WMF", cAlternateFileName="")) returned 1 [0036.468] FindNextFileW (in: hFindFile=0x381dc0, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7d7bae00, ftCreationTime.dwHighDateTime=0x1be7a37, ftLastAccessTime.dwLowDateTime=0xbd539100, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0x7d7bae00, ftLastWriteTime.dwHighDateTime=0x1be7a37, nFileSizeHigh=0x0, nFileSizeLow=0x78a, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0222015.WMF", cAlternateFileName="")) returned 1 [0036.468] FindNextFileW (in: hFindFile=0x381dc0, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7fde0800, ftCreationTime.dwHighDateTime=0x1be7a37, ftLastAccessTime.dwLowDateTime=0xbd539100, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0x7fde0800, ftLastWriteTime.dwHighDateTime=0x1be7a37, nFileSizeHigh=0x0, nFileSizeLow=0x632, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0222017.WMF", cAlternateFileName="")) returned 1 [0036.468] FindNextFileW (in: hFindFile=0x381dc0, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x82406200, ftCreationTime.dwHighDateTime=0x1be7a37, ftLastAccessTime.dwLowDateTime=0xbd539100, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0x82406200, ftLastWriteTime.dwHighDateTime=0x1be7a37, nFileSizeHigh=0x0, nFileSizeLow=0x58e, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0222019.WMF", cAlternateFileName="")) returned 1 [0036.468] FindNextFileW (in: hFindFile=0x381dc0, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x85d3e900, ftCreationTime.dwHighDateTime=0x1be7a37, ftLastAccessTime.dwLowDateTime=0xbd539100, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0x85d3e900, ftLastWriteTime.dwHighDateTime=0x1be7a37, nFileSizeHigh=0x0, nFileSizeLow=0x7c6, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0222021.WMF", cAlternateFileName="")) returned 1 [0036.468] FindNextFileW (in: hFindFile=0x381dc0, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7b0a7e00, ftCreationTime.dwHighDateTime=0x1be860b, ftLastAccessTime.dwLowDateTime=0xbd55f260, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0x7b0a7e00, ftLastWriteTime.dwHighDateTime=0x1be860b, nFileSizeHigh=0x0, nFileSizeLow=0xf5c, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0229385.WMF", cAlternateFileName="")) returned 1 [0036.468] FindNextFileW (in: hFindFile=0x381dc0, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7c3bab00, ftCreationTime.dwHighDateTime=0x1be860b, ftLastAccessTime.dwLowDateTime=0xbd55f260, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0x7c3bab00, ftLastWriteTime.dwHighDateTime=0x1be860b, nFileSizeHigh=0x0, nFileSizeLow=0xee0, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0229389.WMF", cAlternateFileName="")) returned 1 [0036.468] FindNextFileW (in: hFindFile=0x381dc0, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6fd64900, ftCreationTime.dwHighDateTime=0x1bc82e4, ftLastAccessTime.dwLowDateTime=0xbd55f260, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0x6fd64900, ftLastWriteTime.dwHighDateTime=0x1bc82e4, nFileSizeHigh=0x0, nFileSizeLow=0x30da, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0230876.WMF", cAlternateFileName="")) returned 1 [0036.468] FindNextFileW (in: hFindFile=0x381dc0, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xabe1b900, ftCreationTime.dwHighDateTime=0x1be516b, ftLastAccessTime.dwLowDateTime=0xbd55f260, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0xabe1b900, ftLastWriteTime.dwHighDateTime=0x1be516b, nFileSizeHigh=0x0, nFileSizeLow=0x77f0, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0233018.WMF", cAlternateFileName="")) returned 1 [0036.468] FindNextFileW (in: hFindFile=0x381dc0, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3c43c200, ftCreationTime.dwHighDateTime=0x1be1b5b, ftLastAccessTime.dwLowDateTime=0xbd55f260, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0x3c43c200, ftLastWriteTime.dwHighDateTime=0x1be1b5b, nFileSizeHigh=0x0, nFileSizeLow=0x1522, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0233070.WMF", cAlternateFileName="")) returned 1 [0036.468] FindNextFileW (in: hFindFile=0x381dc0, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x36d32e00, ftCreationTime.dwHighDateTime=0x1be56ed, ftLastAccessTime.dwLowDateTime=0xbd55f260, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0x36d32e00, ftLastWriteTime.dwHighDateTime=0x1be56ed, nFileSizeHigh=0x0, nFileSizeLow=0x80f8, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0233312.WMF", cAlternateFileName="")) returned 1 [0036.469] FindNextFileW (in: hFindFile=0x381dc0, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x23f92c00, ftCreationTime.dwHighDateTime=0x1be8094, ftLastAccessTime.dwLowDateTime=0xbd55f260, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0x23f92c00, ftLastWriteTime.dwHighDateTime=0x1be8094, nFileSizeHigh=0x0, nFileSizeLow=0x6632, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0234131.WMF", cAlternateFileName="")) returned 1 [0036.469] FindNextFileW (in: hFindFile=0x381dc0, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4a15c200, ftCreationTime.dwHighDateTime=0x1be7fe9, ftLastAccessTime.dwLowDateTime=0xbd5853c0, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0x4a15c200, ftLastWriteTime.dwHighDateTime=0x1be7fe9, nFileSizeHigh=0x0, nFileSizeLow=0xa87e, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0234266.WMF", cAlternateFileName="")) returned 1 [0036.469] FindNextFileW (in: hFindFile=0x381dc0, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1034e00, ftCreationTime.dwHighDateTime=0x1be75a5, ftLastAccessTime.dwLowDateTime=0xbd5853c0, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0x1034e00, ftLastWriteTime.dwHighDateTime=0x1be75a5, nFileSizeHigh=0x0, nFileSizeLow=0x27ee, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0234657.WMF", cAlternateFileName="")) returned 1 [0036.469] FindNextFileW (in: hFindFile=0x381dc0, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc9eeb500, ftCreationTime.dwHighDateTime=0x1bf2be6, ftLastAccessTime.dwLowDateTime=0xbd5853c0, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0xc9eeb500, ftLastWriteTime.dwHighDateTime=0x1bf2be6, nFileSizeHigh=0x0, nFileSizeLow=0xd4f, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0234687.GIF", cAlternateFileName="")) returned 1 [0036.469] FindNextFileW (in: hFindFile=0x381dc0, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x85566d00, ftCreationTime.dwHighDateTime=0x1be911f, ftLastAccessTime.dwLowDateTime=0xbd5853c0, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0x85566d00, ftLastWriteTime.dwHighDateTime=0x1be911f, nFileSizeHigh=0x0, nFileSizeLow=0x1820, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0235241.WMF", cAlternateFileName="")) returned 1 [0036.469] FindNextFileW (in: hFindFile=0x381dc0, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4c56b00, ftCreationTime.dwHighDateTime=0x1c0371d, ftLastAccessTime.dwLowDateTime=0xbd5853c0, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0x4c56b00, ftLastWriteTime.dwHighDateTime=0x1c0371d, nFileSizeHigh=0x0, nFileSizeLow=0xa24, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0235319.WMF", cAlternateFileName="")) returned 1 [0036.469] FindNextFileW (in: hFindFile=0x381dc0, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb0bd8800, ftCreationTime.dwHighDateTime=0x1be9cd9, ftLastAccessTime.dwLowDateTime=0xbd5853c0, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0xb0bd8800, ftLastWriteTime.dwHighDateTime=0x1be9cd9, nFileSizeHigh=0x0, nFileSizeLow=0x13d6, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0240695.WMF", cAlternateFileName="")) returned 1 [0036.469] FindNextFileW (in: hFindFile=0x381dc0, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc16dfe00, ftCreationTime.dwHighDateTime=0x1be9cd9, ftLastAccessTime.dwLowDateTime=0xbd5ab520, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0xc16dfe00, ftLastWriteTime.dwHighDateTime=0x1be9cd9, nFileSizeHigh=0x0, nFileSizeLow=0x1aa2, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0240719.WMF", cAlternateFileName="")) returned 1 [0036.471] FindNextFileW (in: hFindFile=0x381dc0, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x28d89700, ftCreationTime.dwHighDateTime=0x1beb2f4, ftLastAccessTime.dwLowDateTime=0xbd5ab520, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0x28d89700, ftLastWriteTime.dwHighDateTime=0x1beb2f4, nFileSizeHigh=0x0, nFileSizeLow=0x1498, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0251301.WMF", cAlternateFileName="")) returned 1 [0036.471] FindNextFileW (in: hFindFile=0x381dc0, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf384f00, ftCreationTime.dwHighDateTime=0x1beb2f6, ftLastAccessTime.dwLowDateTime=0xbd5ab520, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0xf384f00, ftLastWriteTime.dwHighDateTime=0x1beb2f6, nFileSizeHigh=0x0, nFileSizeLow=0x1232, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0251871.WMF", cAlternateFileName="")) returned 1 [0036.471] FindNextFileW (in: hFindFile=0x381dc0, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3db62a00, ftCreationTime.dwHighDateTime=0x1beb2f6, ftLastAccessTime.dwLowDateTime=0xbd5ab520, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0x3db62a00, ftLastWriteTime.dwHighDateTime=0x1beb2f6, nFileSizeHigh=0x0, nFileSizeLow=0x11b6, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0251925.WMF", cAlternateFileName="")) returned 1 [0036.471] FindNextFileW (in: hFindFile=0x381dc0, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xfb8de800, ftCreationTime.dwHighDateTime=0x1beb2f7, ftLastAccessTime.dwLowDateTime=0xbd5ab520, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0xfb8de800, ftLastWriteTime.dwHighDateTime=0x1beb2f7, nFileSizeHigh=0x0, nFileSizeLow=0x158c, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0252349.WMF", cAlternateFileName="")) returned 1 [0036.471] FindNextFileW (in: hFindFile=0x381dc0, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3fdf2000, ftCreationTime.dwHighDateTime=0x1beccca, ftLastAccessTime.dwLowDateTime=0xbd5ab520, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0x3fdf2000, ftLastWriteTime.dwHighDateTime=0x1beccca, nFileSizeHigh=0x0, nFileSizeLow=0xed0, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0278882.WMF", cAlternateFileName="")) returned 1 [0036.471] FindNextFileW (in: hFindFile=0x381dc0, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xecd0c800, ftCreationTime.dwHighDateTime=0x1bee443, ftLastAccessTime.dwLowDateTime=0xbd5ab520, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0xecd0c800, ftLastWriteTime.dwHighDateTime=0x1bee443, nFileSizeHigh=0x0, nFileSizeLow=0x4ffa, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0281904.WMF", cAlternateFileName="")) returned 1 [0036.471] FindNextFileW (in: hFindFile=0x381dc0, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe1a4f200, ftCreationTime.dwHighDateTime=0x1bed3d9, ftLastAccessTime.dwLowDateTime=0xbd5d1680, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0xe1a4f200, ftLastWriteTime.dwHighDateTime=0x1bed3d9, nFileSizeHigh=0x0, nFileSizeLow=0x4dc6, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0283209.GIF", cAlternateFileName="")) returned 1 [0036.471] FindNextFileW (in: hFindFile=0x381dc0, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb7ae3400, ftCreationTime.dwHighDateTime=0x1bea1cc, ftLastAccessTime.dwLowDateTime=0xbd5d1680, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0xb7ae3400, ftLastWriteTime.dwHighDateTime=0x1bea1cc, nFileSizeHigh=0x0, nFileSizeLow=0x62e3, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0284916.JPG", cAlternateFileName="")) returned 1 [0036.471] FindNextFileW (in: hFindFile=0x381dc0, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa68bc300, ftCreationTime.dwHighDateTime=0x1befd79, ftLastAccessTime.dwLowDateTime=0xbd5d1680, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0xa68bc300, ftLastWriteTime.dwHighDateTime=0x1befd79, nFileSizeHigh=0x0, nFileSizeLow=0x7876, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0285360.WMF", cAlternateFileName="")) returned 1 [0036.472] FindNextFileW (in: hFindFile=0x381dc0, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd63acb00, ftCreationTime.dwHighDateTime=0x1befd79, ftLastAccessTime.dwLowDateTime=0xbd5d1680, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0xd63acb00, ftLastWriteTime.dwHighDateTime=0x1befd79, nFileSizeHigh=0x0, nFileSizeLow=0x30e4, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0285410.WMF", cAlternateFileName="")) returned 1 [0036.472] FindNextFileW (in: hFindFile=0x381dc0, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x97d5a00, ftCreationTime.dwHighDateTime=0x1befd7a, ftLastAccessTime.dwLowDateTime=0xbd5d1680, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0x97d5a00, ftLastWriteTime.dwHighDateTime=0x1befd7a, nFileSizeHigh=0x0, nFileSizeLow=0x2448, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0285444.WMF", cAlternateFileName="")) returned 1 [0036.472] FindNextFileW (in: hFindFile=0x381dc0, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5d3c7300, ftCreationTime.dwHighDateTime=0x1befd7b, ftLastAccessTime.dwLowDateTime=0xbd5d1680, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0x5d3c7300, ftLastWriteTime.dwHighDateTime=0x1befd7b, nFileSizeHigh=0x0, nFileSizeLow=0x2a12, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0285698.WMF", cAlternateFileName="")) returned 1 [0036.472] FindNextFileW (in: hFindFile=0x381dc0, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9ecd1e00, ftCreationTime.dwHighDateTime=0x1befd7b, ftLastAccessTime.dwLowDateTime=0xbd5d1680, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0x9ecd1e00, ftLastWriteTime.dwHighDateTime=0x1befd7b, nFileSizeHigh=0x0, nFileSizeLow=0x958c, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0285750.WMF", cAlternateFileName="")) returned 1 [0036.472] FindNextFileW (in: hFindFile=0x381dc0, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x95908100, ftCreationTime.dwHighDateTime=0x1befd7c, ftLastAccessTime.dwLowDateTime=0xbd5f77e0, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0x95908100, ftLastWriteTime.dwHighDateTime=0x1befd7c, nFileSizeHigh=0x0, nFileSizeLow=0x3452, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0285926.WMF", cAlternateFileName="")) returned 1 [0036.472] FindNextFileW (in: hFindFile=0x381dc0, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xbf49a800, ftCreationTime.dwHighDateTime=0x1befd7c, ftLastAccessTime.dwLowDateTime=0xbd5f77e0, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0xbf49a800, ftLastWriteTime.dwHighDateTime=0x1befd7c, nFileSizeHigh=0x0, nFileSizeLow=0x9e0, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0286034.WMF", cAlternateFileName="")) returned 1 [0036.472] FindNextFileW (in: hFindFile=0x381dc0, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd5efff00, ftCreationTime.dwHighDateTime=0x1befd7c, ftLastAccessTime.dwLowDateTime=0xbd5f77e0, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0xd5efff00, ftLastWriteTime.dwHighDateTime=0x1befd7c, nFileSizeHigh=0x0, nFileSizeLow=0x9d0, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0286068.WMF", cAlternateFileName="")) returned 1 [0036.472] FindNextFileW (in: hFindFile=0x381dc0, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xaa019c00, ftCreationTime.dwHighDateTime=0x1bef57a, ftLastAccessTime.dwLowDateTime=0xbd5f77e0, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0xaa019c00, ftLastWriteTime.dwHighDateTime=0x1bef57a, nFileSizeHigh=0x0, nFileSizeLow=0xb21e, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0287005.WMF", cAlternateFileName="")) returned 1 [0036.472] FindNextFileW (in: hFindFile=0x381dc0, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x948c7400, ftCreationTime.dwHighDateTime=0x1bf1521, ftLastAccessTime.dwLowDateTime=0xbd5f77e0, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0x948c7400, ftLastWriteTime.dwHighDateTime=0x1bf1521, nFileSizeHigh=0x0, nFileSizeLow=0x76ea, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0291984.WMF", cAlternateFileName="")) returned 1 [0036.472] FindNextFileW (in: hFindFile=0x381dc0, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc9003000, ftCreationTime.dwHighDateTime=0x1bf1521, ftLastAccessTime.dwLowDateTime=0xbd5f77e0, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0xc9003000, ftLastWriteTime.dwHighDateTime=0x1bf1521, nFileSizeHigh=0x0, nFileSizeLow=0x7148, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0292020.WMF", cAlternateFileName="")) returned 1 [0036.472] FindNextFileW (in: hFindFile=0x381dc0, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4af05900, ftCreationTime.dwHighDateTime=0x1bf1522, ftLastAccessTime.dwLowDateTime=0xbd61d940, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0x4af05900, ftLastWriteTime.dwHighDateTime=0x1bf1522, nFileSizeHigh=0x0, nFileSizeLow=0x20ce, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0292152.WMF", cAlternateFileName="")) returned 1 [0036.473] FindNextFileW (in: hFindFile=0x381dc0, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x48b60800, ftCreationTime.dwHighDateTime=0x1bf16a4, ftLastAccessTime.dwLowDateTime=0xbd61d940, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0x48b60800, ftLastWriteTime.dwHighDateTime=0x1bf16a4, nFileSizeHigh=0x0, nFileSizeLow=0x998, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0292982.WMF", cAlternateFileName="")) returned 1 [0036.473] FindNextFileW (in: hFindFile=0x381dc0, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9af72900, ftCreationTime.dwHighDateTime=0x1bf16a4, ftLastAccessTime.dwLowDateTime=0xbd61d940, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0x9af72900, ftLastWriteTime.dwHighDateTime=0x1bf16a4, nFileSizeHigh=0x0, nFileSizeLow=0x5ba, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0293234.WMF", cAlternateFileName="")) returned 1 [0036.473] FindNextFileW (in: hFindFile=0x381dc0, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9af72900, ftCreationTime.dwHighDateTime=0x1bf16a4, ftLastAccessTime.dwLowDateTime=0xbd61d940, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0x9af72900, ftLastWriteTime.dwHighDateTime=0x1bf16a4, nFileSizeHigh=0x0, nFileSizeLow=0x766, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0293236.WMF", cAlternateFileName="")) returned 1 [0036.473] FindNextFileW (in: hFindFile=0x381dc0, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9af72900, ftCreationTime.dwHighDateTime=0x1bf16a4, ftLastAccessTime.dwLowDateTime=0xbd61d940, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0x9af72900, ftLastWriteTime.dwHighDateTime=0x1bf16a4, nFileSizeHigh=0x0, nFileSizeLow=0x78a, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0293238.WMF", cAlternateFileName="")) returned 1 [0036.473] FindNextFileW (in: hFindFile=0x381dc0, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9c285600, ftCreationTime.dwHighDateTime=0x1bf16a4, ftLastAccessTime.dwLowDateTime=0xbd61d940, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0x9c285600, ftLastWriteTime.dwHighDateTime=0x1bf16a4, nFileSizeHigh=0x0, nFileSizeLow=0x88e, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0293240.WMF", cAlternateFileName="")) returned 1 [0036.473] FindNextFileW (in: hFindFile=0x381dc0, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x47a99d00, ftCreationTime.dwHighDateTime=0x1bf1523, ftLastAccessTime.dwLowDateTime=0xbd61d940, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0x47a99d00, ftLastWriteTime.dwHighDateTime=0x1bf1523, nFileSizeHigh=0x0, nFileSizeLow=0x92c, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0293570.WMF", cAlternateFileName="")) returned 1 [0036.473] FindNextFileW (in: hFindFile=0x381dc0, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb0911500, ftCreationTime.dwHighDateTime=0x1bf1523, ftLastAccessTime.dwLowDateTime=0xbd643aa0, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0xb0911500, ftLastWriteTime.dwHighDateTime=0x1bf1523, nFileSizeHigh=0x0, nFileSizeLow=0x15ea, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0293828.WMF", cAlternateFileName="")) returned 1 [0036.473] FindNextFileW (in: hFindFile=0x381dc0, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb7b82300, ftCreationTime.dwHighDateTime=0x1bf1523, ftLastAccessTime.dwLowDateTime=0xbd643aa0, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0xb7b82300, ftLastWriteTime.dwHighDateTime=0x1bf1523, nFileSizeHigh=0x0, nFileSizeLow=0x812, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0293844.WMF", cAlternateFileName="")) returned 1 [0036.473] FindNextFileW (in: hFindFile=0x381dc0, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x72dc8d00, ftCreationTime.dwHighDateTime=0x1bf0891, ftLastAccessTime.dwLowDateTime=0xbd643aa0, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0x72dc8d00, ftLastWriteTime.dwHighDateTime=0x1bf0891, nFileSizeHigh=0x0, nFileSizeLow=0x29e5, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0295241.GIF", cAlternateFileName="")) returned 1 [0036.474] FindNextFileW (in: hFindFile=0x381dc0, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7b4c2400, ftCreationTime.dwHighDateTime=0x1bf2c95, ftLastAccessTime.dwLowDateTime=0xbd643aa0, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0x7b4c2400, ftLastWriteTime.dwHighDateTime=0x1bf2c95, nFileSizeHigh=0x0, nFileSizeLow=0xcd52, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0297185.WMF", cAlternateFileName="")) returned 1 [0036.474] FindNextFileW (in: hFindFile=0x381dc0, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x74beac00, ftCreationTime.dwHighDateTime=0x1bf2c97, ftLastAccessTime.dwLowDateTime=0xbd643aa0, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0x74beac00, ftLastWriteTime.dwHighDateTime=0x1bf2c97, nFileSizeHigh=0x0, nFileSizeLow=0x6db8, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0297551.WMF", cAlternateFileName="")) returned 1 [0036.474] FindNextFileW (in: hFindFile=0x381dc0, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x50170400, ftCreationTime.dwHighDateTime=0x1bf2c98, ftLastAccessTime.dwLowDateTime=0xbd643aa0, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0x50170400, ftLastWriteTime.dwHighDateTime=0x1bf2c98, nFileSizeHigh=0x0, nFileSizeLow=0xa7c2, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0297707.WMF", cAlternateFileName="")) returned 1 [0036.474] FindNextFileW (in: hFindFile=0x381dc0, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x848ac000, ftCreationTime.dwHighDateTime=0x1bf2c98, ftLastAccessTime.dwLowDateTime=0xbd643aa0, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0x848ac000, ftLastWriteTime.dwHighDateTime=0x1bf2c98, nFileSizeHigh=0x0, nFileSizeLow=0x27ba, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0297749.WMF", cAlternateFileName="")) returned 1 [0036.474] FindNextFileW (in: hFindFile=0x381dc0, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xae3dea00, ftCreationTime.dwHighDateTime=0x1bf2c8c, ftLastAccessTime.dwLowDateTime=0xbd669c00, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0xae3dea00, ftLastWriteTime.dwHighDateTime=0x1bf2c8c, nFileSizeHigh=0x0, nFileSizeLow=0x197e, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0298653.WMF", cAlternateFileName="")) returned 1 [0036.474] FindNextFileW (in: hFindFile=0x381dc0, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2dcbb900, ftCreationTime.dwHighDateTime=0x1bf2c8d, ftLastAccessTime.dwLowDateTime=0xbd669c00, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0x2dcbb900, ftLastWriteTime.dwHighDateTime=0x1bf2c8d, nFileSizeHigh=0x0, nFileSizeLow=0x19a6, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0298897.WMF", cAlternateFileName="")) returned 1 [0036.474] FindNextFileW (in: hFindFile=0x381dc0, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x15fa3200, ftCreationTime.dwHighDateTime=0x1bf2c99, ftLastAccessTime.dwLowDateTime=0xbd669c00, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0x15fa3200, ftLastWriteTime.dwHighDateTime=0x1bf2c99, nFileSizeHigh=0x0, nFileSizeLow=0x163c, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0299125.WMF", cAlternateFileName="")) returned 1 [0036.474] FindNextFileW (in: hFindFile=0x381dc0, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x375b1e00, ftCreationTime.dwHighDateTime=0x1bf2c99, ftLastAccessTime.dwLowDateTime=0xbd669c00, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0x375b1e00, ftLastWriteTime.dwHighDateTime=0x1bf2c99, nFileSizeHigh=0x0, nFileSizeLow=0x23b6, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0299171.WMF", cAlternateFileName="")) returned 1 [0036.474] FindNextFileW (in: hFindFile=0x381dc0, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa08f6100, ftCreationTime.dwHighDateTime=0x1bf2c9a, ftLastAccessTime.dwLowDateTime=0xbd669c00, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0xa08f6100, ftLastWriteTime.dwHighDateTime=0x1bf2c9a, nFileSizeHigh=0x0, nFileSizeLow=0x62c8, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0299587.WMF", cAlternateFileName="")) returned 1 [0036.474] FindNextFileW (in: hFindFile=0x381dc0, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xbd2b9900, ftCreationTime.dwHighDateTime=0x1bf2c9a, ftLastAccessTime.dwLowDateTime=0xbd669c00, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0xbd2b9900, ftLastWriteTime.dwHighDateTime=0x1bf2c9a, nFileSizeHigh=0x0, nFileSizeLow=0x1310, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0299611.WMF", cAlternateFileName="")) returned 1 [0036.475] FindNextFileW (in: hFindFile=0x381dc0, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5e1a5400, ftCreationTime.dwHighDateTime=0x1bf2c9b, ftLastAccessTime.dwLowDateTime=0xbd68fd60, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0x5e1a5400, ftLastWriteTime.dwHighDateTime=0x1bf2c9b, nFileSizeHigh=0x0, nFileSizeLow=0x4322, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0299763.WMF", cAlternateFileName="")) returned 1 [0036.475] FindNextFileW (in: hFindFile=0x381dc0, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf0508500, ftCreationTime.dwHighDateTime=0x1bf3a1b, ftLastAccessTime.dwLowDateTime=0xbd68fd60, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0xf0508500, ftLastWriteTime.dwHighDateTime=0x1bf3a1b, nFileSizeHigh=0x0, nFileSizeLow=0x3465, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0300520.GIF", cAlternateFileName="")) returned 1 [0036.475] FindNextFileW (in: hFindFile=0x381dc0, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf9b61300, ftCreationTime.dwHighDateTime=0x1bf452c, ftLastAccessTime.dwLowDateTime=0xbd68fd60, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0xf9b61300, ftLastWriteTime.dwHighDateTime=0x1bf452c, nFileSizeHigh=0x0, nFileSizeLow=0x239c, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0300840.WMF", cAlternateFileName="")) returned 1 [0036.475] FindNextFileW (in: hFindFile=0x381dc0, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x616c5e00, ftCreationTime.dwHighDateTime=0x1bf452d, ftLastAccessTime.dwLowDateTime=0xbd68fd60, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0x616c5e00, ftLastWriteTime.dwHighDateTime=0x1bf452d, nFileSizeHigh=0x0, nFileSizeLow=0xdafc, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0300912.WMF", cAlternateFileName="")) returned 1 [0036.475] FindNextFileW (in: hFindFile=0x381dc0, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xfb340b00, ftCreationTime.dwHighDateTime=0x1bf452d, ftLastAccessTime.dwLowDateTime=0xbd68fd60, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0xfb340b00, ftLastWriteTime.dwHighDateTime=0x1bf452d, nFileSizeHigh=0x0, nFileSizeLow=0x2fd8, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0301050.WMF", cAlternateFileName="")) returned 1 [0036.475] FindNextFileW (in: hFindFile=0x381dc0, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf780800, ftCreationTime.dwHighDateTime=0x1bf452e, ftLastAccessTime.dwLowDateTime=0xbd68fd60, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0xf780800, ftLastWriteTime.dwHighDateTime=0x1bf452e, nFileSizeHigh=0x0, nFileSizeLow=0x224e, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0301076.WMF", cAlternateFileName="")) returned 1 [0036.475] FindNextFileW (in: hFindFile=0x381dc0, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf91e7c00, ftCreationTime.dwHighDateTime=0x1bf452e, ftLastAccessTime.dwLowDateTime=0xbd68fd60, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0xf91e7c00, ftLastWriteTime.dwHighDateTime=0x1bf452e, nFileSizeHigh=0x0, nFileSizeLow=0x953a, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0301252.WMF", cAlternateFileName="")) returned 1 [0036.475] FindNextFileW (in: hFindFile=0x381dc0, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5570900, ftCreationTime.dwHighDateTime=0x1bf4530, ftLastAccessTime.dwLowDateTime=0xbd6b5ec0, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0x5570900, ftLastWriteTime.dwHighDateTime=0x1bf4530, nFileSizeHigh=0x0, nFileSizeLow=0x1f40, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0301480.WMF", cAlternateFileName="")) returned 1 [0036.475] FindNextFileW (in: hFindFile=0x381dc0, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xced53d00, ftCreationTime.dwHighDateTime=0x1bf4a9f, ftLastAccessTime.dwLowDateTime=0xbd6b5ec0, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0xced53d00, ftLastWriteTime.dwHighDateTime=0x1bf4a9f, nFileSizeHigh=0x0, nFileSizeLow=0x5a2b, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0302827.JPG", cAlternateFileName="")) returned 1 [0036.475] FindNextFileW (in: hFindFile=0x381dc0, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x33a69b00, ftCreationTime.dwHighDateTime=0x1bf4b65, ftLastAccessTime.dwLowDateTime=0xbd6b5ec0, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0x33a69b00, ftLastWriteTime.dwHighDateTime=0x1bf4b65, nFileSizeHigh=0x0, nFileSizeLow=0x25c1, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0302953.JPG", cAlternateFileName="")) returned 1 [0036.476] FindNextFileW (in: hFindFile=0x381dc0, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xfa04dd00, ftCreationTime.dwHighDateTime=0x1bf4531, ftLastAccessTime.dwLowDateTime=0xbd6b5ec0, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0xfa04dd00, ftLastWriteTime.dwHighDateTime=0x1bf4531, nFileSizeHigh=0x0, nFileSizeLow=0x4d84, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0304933.WMF", cAlternateFileName="")) returned 1 [0036.476] FindNextFileW (in: hFindFile=0x381dc0, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3ab12600, ftCreationTime.dwHighDateTime=0x1bf4533, ftLastAccessTime.dwLowDateTime=0xbd6b5ec0, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0x3ab12600, ftLastWriteTime.dwHighDateTime=0x1bf4533, nFileSizeHigh=0x0, nFileSizeLow=0x5af0, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0305257.WMF", cAlternateFileName="")) returned 1 [0036.476] FindNextFileW (in: hFindFile=0x381dc0, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x494c0d00, ftCreationTime.dwHighDateTime=0x1bf4534, ftLastAccessTime.dwLowDateTime=0xbd6b5ec0, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0x494c0d00, ftLastWriteTime.dwHighDateTime=0x1bf4534, nFileSizeHigh=0x0, nFileSizeLow=0x3372, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0305493.WMF", cAlternateFileName="")) returned 1 [0036.476] FindNextFileW (in: hFindFile=0x381dc0, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb8598100, ftCreationTime.dwHighDateTime=0x1bf71c6, ftLastAccessTime.dwLowDateTime=0xbd6dc020, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0xb8598100, ftLastWriteTime.dwHighDateTime=0x1bf71c6, nFileSizeHigh=0x0, nFileSizeLow=0x60e4, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0315447.JPG", cAlternateFileName="")) returned 1 [0036.476] FindNextFileW (in: hFindFile=0x381dc0, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x653ad300, ftCreationTime.dwHighDateTime=0x1bfaf58, ftLastAccessTime.dwLowDateTime=0xbd6dc020, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0x653ad300, ftLastWriteTime.dwHighDateTime=0x1bfaf58, nFileSizeHigh=0x0, nFileSizeLow=0x5168, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0332268.WMF", cAlternateFileName="")) returned 1 [0036.476] FindNextFileW (in: hFindFile=0x381dc0, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x666c0000, ftCreationTime.dwHighDateTime=0x1bfaf58, ftLastAccessTime.dwLowDateTime=0xbd6dc020, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0x666c0000, ftLastWriteTime.dwHighDateTime=0x1bfaf58, nFileSizeHigh=0x0, nFileSizeLow=0x47c2, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0332364.WMF", cAlternateFileName="")) returned 1 [0036.476] FindNextFileW (in: hFindFile=0x381dc0, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc5ca1000, ftCreationTime.dwHighDateTime=0x1bfaf58, ftLastAccessTime.dwLowDateTime=0xbd6dc020, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0xc5ca1000, ftLastWriteTime.dwHighDateTime=0x1bfaf58, nFileSizeHigh=0x0, nFileSizeLow=0x1f64, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0335112.WMF", cAlternateFileName="")) returned 1 [0036.476] FindNextFileW (in: hFindFile=0x381dc0, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2c046200, ftCreationTime.dwHighDateTime=0x1bfaf5c, ftLastAccessTime.dwLowDateTime=0xbd6dc020, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0x2c046200, ftLastWriteTime.dwHighDateTime=0x1bfaf5c, nFileSizeHigh=0x0, nFileSizeLow=0xce9a, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0336075.WMF", cAlternateFileName="")) returned 1 [0036.476] FindNextFileW (in: hFindFile=0x381dc0, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0036.476] FindClose (in: hFindFile=0x381dc0 | out: hFindFile=0x381dc0) returned 1 [0036.477] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e77c) returned 1 [0036.477] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e788) returned 1 [0036.477] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e7bc) returned 1 [0036.477] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10", nBufferLength=0x105, lpBuffer=0x31e2c4, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10", lpFilePart=0x0) returned 0x30 [0036.477] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\", nBufferLength=0x105, lpBuffer=0x31e298, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\", lpFilePart=0x0) returned 0x31 [0036.477] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\*", lpFindFileData=0x31e4e4 | out: lpFindFileData=0x31e4e4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeec79e70, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xbd6dc020, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0xbd6dc020, ftLastWriteTime.dwHighDateTime=0x1d305f1, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x381dc0 [0036.478] FindNextFileW (in: hFindFile=0x381dc0, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeec79e70, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xbd6dc020, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0xbd6dc020, ftLastWriteTime.dwHighDateTime=0x1d305f1, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0036.478] FindNextFileW (in: hFindFile=0x381dc0, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeec79e70, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xeec79e70, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xeec79e70, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="1033", cAlternateFileName="")) returned 1 [0036.478] FindNextFileW (in: hFindFile=0x381dc0, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf2162900, ftCreationTime.dwHighDateTime=0x1ca9120, ftLastAccessTime.dwLowDateTime=0x51b925d0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xf2162900, ftLastWriteTime.dwHighDateTime=0x1ca9120, nFileSizeHigh=0x0, nFileSizeLow=0x3da0, dwReserved0=0x0, dwReserved1=0x0, cFileName="CAGCAT10.DLL", cAlternateFileName="")) returned 1 [0036.478] FindNextFileW (in: hFindFile=0x381dc0, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x130a0400, ftCreationTime.dwHighDateTime=0x1c07b1f, ftLastAccessTime.dwLowDateTime=0x60120f70, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x130a0400, ftLastWriteTime.dwHighDateTime=0x1c07b1f, nFileSizeHigh=0x0, nFileSizeLow=0x603d8, dwReserved0=0x0, dwReserved1=0x0, cFileName="CAGCAT10.MMW", cAlternateFileName="")) returned 1 [0036.478] FindNextFileW (in: hFindFile=0x381dc0, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x11ec5600, ftCreationTime.dwHighDateTime=0x1bd4c14, ftLastAccessTime.dwLowDateTime=0xbd180ea0, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0x11ec5600, ftLastWriteTime.dwHighDateTime=0x1bd4c14, nFileSizeHigh=0x0, nFileSizeLow=0x585a, dwReserved0=0x0, dwReserved1=0x0, cFileName="ELPHRG01.WAV", cAlternateFileName="")) returned 1 [0036.478] FindNextFileW (in: hFindFile=0x381dc0, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x63c1b400, ftCreationTime.dwHighDateTime=0x1bd216e, ftLastAccessTime.dwLowDateTime=0xbd3e24a0, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0x63c1b400, ftLastWriteTime.dwHighDateTime=0x1bd216e, nFileSizeHigh=0x0, nFileSizeLow=0x3602, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0088542.WMF", cAlternateFileName="")) returned 1 [0036.479] FindNextFileW (in: hFindFile=0x381dc0, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x68ad6a00, ftCreationTime.dwHighDateTime=0x1bcf887, ftLastAccessTime.dwLowDateTime=0xbd3e24a0, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0x68ad6a00, ftLastWriteTime.dwHighDateTime=0x1bcf887, nFileSizeHigh=0x0, nFileSizeLow=0x8880, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0090070.WMF", cAlternateFileName="")) returned 1 [0036.479] FindNextFileW (in: hFindFile=0x381dc0, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x59c88400, ftCreationTime.dwHighDateTime=0x1bd208e, ftLastAccessTime.dwLowDateTime=0xbd3e24a0, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0x59c88400, ftLastWriteTime.dwHighDateTime=0x1bd208e, nFileSizeHigh=0x0, nFileSizeLow=0x830a, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0090386.WMF", cAlternateFileName="")) returned 1 [0036.479] FindNextFileW (in: hFindFile=0x381dc0, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6e332700, ftCreationTime.dwHighDateTime=0x1bd3d86, ftLastAccessTime.dwLowDateTime=0xbd4548c0, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0x6e332700, ftLastWriteTime.dwHighDateTime=0x1bd3d86, nFileSizeHigh=0x0, nFileSizeLow=0x870a, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0149407.WMF", cAlternateFileName="")) returned 1 [0036.479] FindNextFileW (in: hFindFile=0x381dc0, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4fd5900, ftCreationTime.dwHighDateTime=0x1bd4249, ftLastAccessTime.dwLowDateTime=0xbd4548c0, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0x4fd5900, ftLastWriteTime.dwHighDateTime=0x1bd4249, nFileSizeHigh=0x0, nFileSizeLow=0x5eda, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0149481.WMF", cAlternateFileName="")) returned 1 [0036.479] FindNextFileW (in: hFindFile=0x381dc0, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3fe3f700, ftCreationTime.dwHighDateTime=0x1bd5067, ftLastAccessTime.dwLowDateTime=0xbd4548c0, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0x3fe3f700, ftLastWriteTime.dwHighDateTime=0x1bd5067, nFileSizeHigh=0x0, nFileSizeLow=0xa80a, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0149627.WMF", cAlternateFileName="")) returned 1 [0036.479] FindNextFileW (in: hFindFile=0x381dc0, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9dd2e700, ftCreationTime.dwHighDateTime=0x1bd6439, ftLastAccessTime.dwLowDateTime=0xbd4548c0, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0x9dd2e700, ftLastWriteTime.dwHighDateTime=0x1bd6439, nFileSizeHigh=0x0, nFileSizeLow=0x1ffa, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0149887.WMF", cAlternateFileName="")) returned 1 [0036.479] FindNextFileW (in: hFindFile=0x381dc0, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3fc87200, ftCreationTime.dwHighDateTime=0x1bd7ec5, ftLastAccessTime.dwLowDateTime=0xbd4548c0, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0x3fc87200, ftLastWriteTime.dwHighDateTime=0x1bd7ec5, nFileSizeHigh=0x0, nFileSizeLow=0x2068, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0157763.WMF", cAlternateFileName="")) returned 1 [0036.479] FindNextFileW (in: hFindFile=0x381dc0, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xaeffa900, ftCreationTime.dwHighDateTime=0x1bd94f9, ftLastAccessTime.dwLowDateTime=0xbd4548c0, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0xaeffa900, ftLastWriteTime.dwHighDateTime=0x1bd94f9, nFileSizeHigh=0x0, nFileSizeLow=0x1d94, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0157995.WMF", cAlternateFileName="")) returned 1 [0036.479] FindNextFileW (in: hFindFile=0x381dc0, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb9ba3e00, ftCreationTime.dwHighDateTime=0x1bd94f9, ftLastAccessTime.dwLowDateTime=0xbd47aa20, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0xb9ba3e00, ftLastWriteTime.dwHighDateTime=0x1bd94f9, nFileSizeHigh=0x0, nFileSizeLow=0x1426, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0158007.WMF", cAlternateFileName="")) returned 1 [0036.480] FindNextFileW (in: hFindFile=0x381dc0, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xdf00c800, ftCreationTime.dwHighDateTime=0x1bdf6f6, ftLastAccessTime.dwLowDateTime=0xbd47aa20, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0xdf00c800, ftLastWriteTime.dwHighDateTime=0x1bdf6f6, nFileSizeHigh=0x0, nFileSizeLow=0x4d38, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0183168.WMF", cAlternateFileName="")) returned 1 [0036.480] FindNextFileW (in: hFindFile=0x381dc0, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc9d86900, ftCreationTime.dwHighDateTime=0x1bdf6f7, ftLastAccessTime.dwLowDateTime=0xbd47aa20, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0xc9d86900, ftLastWriteTime.dwHighDateTime=0x1bdf6f7, nFileSizeHigh=0x0, nFileSizeLow=0x7018, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0183290.WMF", cAlternateFileName="")) returned 1 [0036.480] FindNextFileW (in: hFindFile=0x381dc0, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf8564400, ftCreationTime.dwHighDateTime=0x1bdf6f7, ftLastAccessTime.dwLowDateTime=0xbd47aa20, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0xf8564400, ftLastWriteTime.dwHighDateTime=0x1bdf6f7, nFileSizeHigh=0x0, nFileSizeLow=0x14fa, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0183328.WMF", cAlternateFileName="")) returned 1 [0036.480] FindNextFileW (in: hFindFile=0x381dc0, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf396a700, ftCreationTime.dwHighDateTime=0x1be0d1a, ftLastAccessTime.dwLowDateTime=0xbd47aa20, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0xf396a700, ftLastWriteTime.dwHighDateTime=0x1be0d1a, nFileSizeHigh=0x0, nFileSizeLow=0x171c, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0185604.WMF", cAlternateFileName="")) returned 1 [0036.480] FindNextFileW (in: hFindFile=0x381dc0, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xdc0fec00, ftCreationTime.dwHighDateTime=0x1be0d23, ftLastAccessTime.dwLowDateTime=0xbd47aa20, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0xdc0fec00, ftLastWriteTime.dwHighDateTime=0x1be0d23, nFileSizeHigh=0x0, nFileSizeLow=0x2f64, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0186002.WMF", cAlternateFileName="")) returned 1 [0036.480] FindNextFileW (in: hFindFile=0x381dc0, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xeb426a00, ftCreationTime.dwHighDateTime=0x1be0d22, ftLastAccessTime.dwLowDateTime=0xbd47aa20, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0xeb426a00, ftLastWriteTime.dwHighDateTime=0x1be0d22, nFileSizeHigh=0x0, nFileSizeLow=0x1b3a, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0186348.WMF", cAlternateFileName="")) returned 1 [0036.480] FindNextFileW (in: hFindFile=0x381dc0, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1b608300, ftCreationTime.dwHighDateTime=0x1be10fe, ftLastAccessTime.dwLowDateTime=0xbd4a0b80, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0x1b608300, ftLastWriteTime.dwHighDateTime=0x1be10fe, nFileSizeHigh=0x0, nFileSizeLow=0x4746, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0187423.WMF", cAlternateFileName="")) returned 1 [0036.480] FindNextFileW (in: hFindFile=0x381dc0, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc36d6a00, ftCreationTime.dwHighDateTime=0x1be2705, ftLastAccessTime.dwLowDateTime=0xbd4a0b80, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0xc36d6a00, ftLastWriteTime.dwHighDateTime=0x1be2705, nFileSizeHigh=0x0, nFileSizeLow=0x31da, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0195384.WMF", cAlternateFileName="")) returned 1 [0036.480] FindNextFileW (in: hFindFile=0x381dc0, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xfa438000, ftCreationTime.dwHighDateTime=0x1be2705, ftLastAccessTime.dwLowDateTime=0xbd4a0b80, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0xfa438000, ftLastWriteTime.dwHighDateTime=0x1be2705, nFileSizeHigh=0x0, nFileSizeLow=0x275c, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0195534.WMF", cAlternateFileName="")) returned 1 [0036.481] FindNextFileW (in: hFindFile=0x381dc0, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x455d9300, ftCreationTime.dwHighDateTime=0x1be2706, ftLastAccessTime.dwLowDateTime=0xbd4a0b80, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0x455d9300, ftLastWriteTime.dwHighDateTime=0x1be2706, nFileSizeHigh=0x0, nFileSizeLow=0xfca, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0195812.WMF", cAlternateFileName="")) returned 1 [0036.481] FindNextFileW (in: hFindFile=0x381dc0, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9ec5c200, ftCreationTime.dwHighDateTime=0x1be2706, ftLastAccessTime.dwLowDateTime=0xbd4a0b80, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0x9ec5c200, ftLastWriteTime.dwHighDateTime=0x1be2706, nFileSizeHigh=0x0, nFileSizeLow=0x7b2, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0196164.WMF", cAlternateFileName="")) returned 1 [0036.481] FindNextFileW (in: hFindFile=0x381dc0, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x81ec6b00, ftCreationTime.dwHighDateTime=0x1be390f, ftLastAccessTime.dwLowDateTime=0xbd4a0b80, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0x81ec6b00, ftLastWriteTime.dwHighDateTime=0x1be390f, nFileSizeHigh=0x0, nFileSizeLow=0x1216, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0196374.WMF", cAlternateFileName="")) returned 1 [0036.481] FindNextFileW (in: hFindFile=0x381dc0, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x929ce100, ftCreationTime.dwHighDateTime=0x1be390f, ftLastAccessTime.dwLowDateTime=0xbd4c6ce0, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0x929ce100, ftLastWriteTime.dwHighDateTime=0x1be390f, nFileSizeHigh=0x0, nFileSizeLow=0x8cbe, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0196400.WMF", cAlternateFileName="")) returned 1 [0036.481] FindNextFileW (in: hFindFile=0x381dc0, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x91fc00, ftCreationTime.dwHighDateTime=0x1bdf0c6, ftLastAccessTime.dwLowDateTime=0xbd4c6ce0, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0x91fc00, ftLastWriteTime.dwHighDateTime=0x1bdf0c6, nFileSizeHigh=0x0, nFileSizeLow=0x2518, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0199036.WMF", cAlternateFileName="")) returned 1 [0036.481] FindNextFileW (in: hFindFile=0x381dc0, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xebd55500, ftCreationTime.dwHighDateTime=0x1be05ec, ftLastAccessTime.dwLowDateTime=0xbd4c6ce0, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0xebd55500, ftLastWriteTime.dwHighDateTime=0x1be05ec, nFileSizeHigh=0x0, nFileSizeLow=0x8ec4, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0199283.WMF", cAlternateFileName="")) returned 1 [0036.481] FindNextFileW (in: hFindFile=0x381dc0, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x54b53500, ftCreationTime.dwHighDateTime=0x1be3e9a, ftLastAccessTime.dwLowDateTime=0xbd4c6ce0, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0x54b53500, ftLastWriteTime.dwHighDateTime=0x1be3e9a, nFileSizeHigh=0x0, nFileSizeLow=0xf5e, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0199549.WMF", cAlternateFileName="")) returned 1 [0036.481] FindNextFileW (in: hFindFile=0x381dc0, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8b8b4b00, ftCreationTime.dwHighDateTime=0x1be3e9a, ftLastAccessTime.dwLowDateTime=0xbd4c6ce0, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0x8b8b4b00, ftLastWriteTime.dwHighDateTime=0x1be3e9a, nFileSizeHigh=0x0, nFileSizeLow=0x341e, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0199661.WMF", cAlternateFileName="")) returned 1 [0036.481] FindNextFileW (in: hFindFile=0x381dc0, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb1b0eb00, ftCreationTime.dwHighDateTime=0x1be3e9a, ftLastAccessTime.dwLowDateTime=0xbd4c6ce0, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0xb1b0eb00, ftLastWriteTime.dwHighDateTime=0x1be3e9a, nFileSizeHigh=0x0, nFileSizeLow=0x900, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0199727.WMF", cAlternateFileName="")) returned 1 [0036.481] FindNextFileW (in: hFindFile=0x381dc0, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xbc6b8000, ftCreationTime.dwHighDateTime=0x1be3e9a, ftLastAccessTime.dwLowDateTime=0xbd4c6ce0, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0xbc6b8000, ftLastWriteTime.dwHighDateTime=0x1be3e9a, nFileSizeHigh=0x0, nFileSizeLow=0xaf0, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0199755.WMF", cAlternateFileName="")) returned 1 [0036.481] FindNextFileW (in: hFindFile=0x381dc0, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd311d700, ftCreationTime.dwHighDateTime=0x1be3e9a, ftLastAccessTime.dwLowDateTime=0xbd4ece40, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0xd311d700, ftLastWriteTime.dwHighDateTime=0x1be3e9a, nFileSizeHigh=0x0, nFileSizeLow=0x948, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0199805.WMF", cAlternateFileName="")) returned 1 [0036.482] FindNextFileW (in: hFindFile=0x381dc0, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x85ccab00, ftCreationTime.dwHighDateTime=0x1be4d5e, ftLastAccessTime.dwLowDateTime=0xbd4ece40, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0x85ccab00, ftLastWriteTime.dwHighDateTime=0x1be4d5e, nFileSizeHigh=0x0, nFileSizeLow=0x2398, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0205462.WMF", cAlternateFileName="")) returned 1 [0036.482] FindNextFileW (in: hFindFile=0x381dc0, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x89603200, ftCreationTime.dwHighDateTime=0x1be4d5e, ftLastAccessTime.dwLowDateTime=0xbd4ece40, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0x89603200, ftLastWriteTime.dwHighDateTime=0x1be4d5e, nFileSizeHigh=0x0, nFileSizeLow=0x11e2, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0205466.WMF", cAlternateFileName="")) returned 1 [0036.482] FindNextFileW (in: hFindFile=0x381dc0, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x14d9c300, ftCreationTime.dwHighDateTime=0x1be4d5f, ftLastAccessTime.dwLowDateTime=0xbd4ece40, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0x14d9c300, ftLastWriteTime.dwHighDateTime=0x1be4d5f, nFileSizeHigh=0x0, nFileSizeLow=0x17f2, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0205582.WMF", cAlternateFileName="")) returned 1 [0036.482] FindNextFileW (in: hFindFile=0x381dc0, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3e240a00, ftCreationTime.dwHighDateTime=0x1be560f, ftLastAccessTime.dwLowDateTime=0xbd4ece40, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0x3e240a00, ftLastWriteTime.dwHighDateTime=0x1be560f, nFileSizeHigh=0x0, nFileSizeLow=0xb34e, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0211949.WMF", cAlternateFileName="")) returned 1 [0036.482] FindNextFileW (in: hFindFile=0x381dc0, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x50527800, ftCreationTime.dwHighDateTime=0x1be5610, ftLastAccessTime.dwLowDateTime=0xbd4ece40, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0x50527800, ftLastWriteTime.dwHighDateTime=0x1be5610, nFileSizeHigh=0x0, nFileSizeLow=0x11be, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0212219.WMF", cAlternateFileName="")) returned 1 [0036.482] FindNextFileW (in: hFindFile=0x381dc0, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x56952400, ftCreationTime.dwHighDateTime=0x1be5611, ftLastAccessTime.dwLowDateTime=0xbd4ece40, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0x56952400, ftLastWriteTime.dwHighDateTime=0x1be5611, nFileSizeHigh=0x0, nFileSizeLow=0x248e, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0212661.WMF", cAlternateFileName="")) returned 1 [0036.482] FindNextFileW (in: hFindFile=0x381dc0, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6e6ca800, ftCreationTime.dwHighDateTime=0x1be5611, ftLastAccessTime.dwLowDateTime=0xbd512fa0, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0x6e6ca800, ftLastWriteTime.dwHighDateTime=0x1be5611, nFileSizeHigh=0x0, nFileSizeLow=0xb7a, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0212701.WMF", cAlternateFileName="")) returned 1 [0036.482] FindNextFileW (in: hFindFile=0x381dc0, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xdae7a700, ftCreationTime.dwHighDateTime=0x1be5611, ftLastAccessTime.dwLowDateTime=0xbd512fa0, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0xdae7a700, ftLastWriteTime.dwHighDateTime=0x1be5611, nFileSizeHigh=0x0, nFileSizeLow=0x2424, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0212957.WMF", cAlternateFileName="")) returned 1 [0036.482] FindNextFileW (in: hFindFile=0x381dc0, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8726e600, ftCreationTime.dwHighDateTime=0x1be59a2, ftLastAccessTime.dwLowDateTime=0xbd512fa0, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0x8726e600, ftLastWriteTime.dwHighDateTime=0x1be59a2, nFileSizeHigh=0x0, nFileSizeLow=0x68ba, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0214098.WAV", cAlternateFileName="")) returned 1 [0036.482] FindNextFileW (in: hFindFile=0x381dc0, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x32ba5a00, ftCreationTime.dwHighDateTime=0x1be1b5b, ftLastAccessTime.dwLowDateTime=0xbd512fa0, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0x32ba5a00, ftLastWriteTime.dwHighDateTime=0x1be1b5b, nFileSizeHigh=0x0, nFileSizeLow=0x1d3a, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0215086.WMF", cAlternateFileName="")) returned 1 [0036.483] FindNextFileW (in: hFindFile=0x381dc0, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x35c4ec00, ftCreationTime.dwHighDateTime=0x1be6c1a, ftLastAccessTime.dwLowDateTime=0xbd512fa0, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0x35c4ec00, ftLastWriteTime.dwHighDateTime=0x1be6c1a, nFileSizeHigh=0x0, nFileSizeLow=0x3138, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0216516.WMF", cAlternateFileName="")) returned 1 [0036.483] FindNextFileW (in: hFindFile=0x381dc0, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7e7ca500, ftCreationTime.dwHighDateTime=0x1be6c1a, ftLastAccessTime.dwLowDateTime=0xbd512fa0, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0x7e7ca500, ftLastWriteTime.dwHighDateTime=0x1be6c1a, nFileSizeHigh=0x0, nFileSizeLow=0x1c06, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0216588.WMF", cAlternateFileName="")) returned 1 [0036.483] FindNextFileW (in: hFindFile=0x381dc0, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xff3ba100, ftCreationTime.dwHighDateTime=0x1be6c1a, ftLastAccessTime.dwLowDateTime=0xbd512fa0, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0xff3ba100, ftLastWriteTime.dwHighDateTime=0x1be6c1a, nFileSizeHigh=0x0, nFileSizeLow=0x5d78, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0216724.WMF", cAlternateFileName="")) returned 1 [0036.483] FindNextFileW (in: hFindFile=0x381dc0, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x825cf700, ftCreationTime.dwHighDateTime=0x1be6c1b, ftLastAccessTime.dwLowDateTime=0xbd539100, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0x825cf700, ftLastWriteTime.dwHighDateTime=0x1be6c1b, nFileSizeHigh=0x0, nFileSizeLow=0x2dc4, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0216858.WMF", cAlternateFileName="")) returned 1 [0036.483] FindNextFileW (in: hFindFile=0x381dc0, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd8cb3500, ftCreationTime.dwHighDateTime=0x1be6c1d, ftLastAccessTime.dwLowDateTime=0xbd539100, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0xd8cb3500, ftLastWriteTime.dwHighDateTime=0x1be6c1d, nFileSizeHigh=0x0, nFileSizeLow=0x1aea, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0217698.WMF", cAlternateFileName="")) returned 1 [0036.483] FindNextFileW (in: hFindFile=0x381dc0, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7bfdb600, ftCreationTime.dwHighDateTime=0x1be7a36, ftLastAccessTime.dwLowDateTime=0xbd539100, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0x7bfdb600, ftLastWriteTime.dwHighDateTime=0x1be7a36, nFileSizeHigh=0x0, nFileSizeLow=0x3838, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0221903.WMF", cAlternateFileName="")) returned 1 [0036.483] FindNextFileW (in: hFindFile=0x381dc0, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7d7bae00, ftCreationTime.dwHighDateTime=0x1be7a37, ftLastAccessTime.dwLowDateTime=0xbd539100, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0x7d7bae00, ftLastWriteTime.dwHighDateTime=0x1be7a37, nFileSizeHigh=0x0, nFileSizeLow=0x78a, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0222015.WMF", cAlternateFileName="")) returned 1 [0036.483] FindNextFileW (in: hFindFile=0x381dc0, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7fde0800, ftCreationTime.dwHighDateTime=0x1be7a37, ftLastAccessTime.dwLowDateTime=0xbd539100, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0x7fde0800, ftLastWriteTime.dwHighDateTime=0x1be7a37, nFileSizeHigh=0x0, nFileSizeLow=0x632, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0222017.WMF", cAlternateFileName="")) returned 1 [0036.483] FindNextFileW (in: hFindFile=0x381dc0, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x82406200, ftCreationTime.dwHighDateTime=0x1be7a37, ftLastAccessTime.dwLowDateTime=0xbd539100, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0x82406200, ftLastWriteTime.dwHighDateTime=0x1be7a37, nFileSizeHigh=0x0, nFileSizeLow=0x58e, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0222019.WMF", cAlternateFileName="")) returned 1 [0036.483] FindNextFileW (in: hFindFile=0x381dc0, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x85d3e900, ftCreationTime.dwHighDateTime=0x1be7a37, ftLastAccessTime.dwLowDateTime=0xbd539100, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0x85d3e900, ftLastWriteTime.dwHighDateTime=0x1be7a37, nFileSizeHigh=0x0, nFileSizeLow=0x7c6, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0222021.WMF", cAlternateFileName="")) returned 1 [0036.483] FindNextFileW (in: hFindFile=0x381dc0, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7b0a7e00, ftCreationTime.dwHighDateTime=0x1be860b, ftLastAccessTime.dwLowDateTime=0xbd55f260, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0x7b0a7e00, ftLastWriteTime.dwHighDateTime=0x1be860b, nFileSizeHigh=0x0, nFileSizeLow=0xf5c, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0229385.WMF", cAlternateFileName="")) returned 1 [0036.484] FindNextFileW (in: hFindFile=0x381dc0, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7c3bab00, ftCreationTime.dwHighDateTime=0x1be860b, ftLastAccessTime.dwLowDateTime=0xbd55f260, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0x7c3bab00, ftLastWriteTime.dwHighDateTime=0x1be860b, nFileSizeHigh=0x0, nFileSizeLow=0xee0, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0229389.WMF", cAlternateFileName="")) returned 1 [0036.484] FindNextFileW (in: hFindFile=0x381dc0, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6fd64900, ftCreationTime.dwHighDateTime=0x1bc82e4, ftLastAccessTime.dwLowDateTime=0xbd55f260, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0x6fd64900, ftLastWriteTime.dwHighDateTime=0x1bc82e4, nFileSizeHigh=0x0, nFileSizeLow=0x30da, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0230876.WMF", cAlternateFileName="")) returned 1 [0036.484] FindNextFileW (in: hFindFile=0x381dc0, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xabe1b900, ftCreationTime.dwHighDateTime=0x1be516b, ftLastAccessTime.dwLowDateTime=0xbd55f260, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0xabe1b900, ftLastWriteTime.dwHighDateTime=0x1be516b, nFileSizeHigh=0x0, nFileSizeLow=0x77f0, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0233018.WMF", cAlternateFileName="")) returned 1 [0036.484] FindNextFileW (in: hFindFile=0x381dc0, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3c43c200, ftCreationTime.dwHighDateTime=0x1be1b5b, ftLastAccessTime.dwLowDateTime=0xbd55f260, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0x3c43c200, ftLastWriteTime.dwHighDateTime=0x1be1b5b, nFileSizeHigh=0x0, nFileSizeLow=0x1522, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0233070.WMF", cAlternateFileName="")) returned 1 [0036.484] FindNextFileW (in: hFindFile=0x381dc0, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x36d32e00, ftCreationTime.dwHighDateTime=0x1be56ed, ftLastAccessTime.dwLowDateTime=0xbd55f260, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0x36d32e00, ftLastWriteTime.dwHighDateTime=0x1be56ed, nFileSizeHigh=0x0, nFileSizeLow=0x80f8, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0233312.WMF", cAlternateFileName="")) returned 1 [0036.484] FindNextFileW (in: hFindFile=0x381dc0, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x23f92c00, ftCreationTime.dwHighDateTime=0x1be8094, ftLastAccessTime.dwLowDateTime=0xbd55f260, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0x23f92c00, ftLastWriteTime.dwHighDateTime=0x1be8094, nFileSizeHigh=0x0, nFileSizeLow=0x6632, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0234131.WMF", cAlternateFileName="")) returned 1 [0036.484] FindNextFileW (in: hFindFile=0x381dc0, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4a15c200, ftCreationTime.dwHighDateTime=0x1be7fe9, ftLastAccessTime.dwLowDateTime=0xbd5853c0, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0x4a15c200, ftLastWriteTime.dwHighDateTime=0x1be7fe9, nFileSizeHigh=0x0, nFileSizeLow=0xa87e, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0234266.WMF", cAlternateFileName="")) returned 1 [0036.484] FindNextFileW (in: hFindFile=0x381dc0, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1034e00, ftCreationTime.dwHighDateTime=0x1be75a5, ftLastAccessTime.dwLowDateTime=0xbd5853c0, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0x1034e00, ftLastWriteTime.dwHighDateTime=0x1be75a5, nFileSizeHigh=0x0, nFileSizeLow=0x27ee, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0234657.WMF", cAlternateFileName="")) returned 1 [0036.484] FindNextFileW (in: hFindFile=0x381dc0, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc9eeb500, ftCreationTime.dwHighDateTime=0x1bf2be6, ftLastAccessTime.dwLowDateTime=0xbd5853c0, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0xc9eeb500, ftLastWriteTime.dwHighDateTime=0x1bf2be6, nFileSizeHigh=0x0, nFileSizeLow=0xd4f, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0234687.GIF", cAlternateFileName="")) returned 1 [0036.484] FindNextFileW (in: hFindFile=0x381dc0, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x85566d00, ftCreationTime.dwHighDateTime=0x1be911f, ftLastAccessTime.dwLowDateTime=0xbd5853c0, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0x85566d00, ftLastWriteTime.dwHighDateTime=0x1be911f, nFileSizeHigh=0x0, nFileSizeLow=0x1820, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0235241.WMF", cAlternateFileName="")) returned 1 [0036.484] FindNextFileW (in: hFindFile=0x381dc0, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4c56b00, ftCreationTime.dwHighDateTime=0x1c0371d, ftLastAccessTime.dwLowDateTime=0xbd5853c0, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0x4c56b00, ftLastWriteTime.dwHighDateTime=0x1c0371d, nFileSizeHigh=0x0, nFileSizeLow=0xa24, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0235319.WMF", cAlternateFileName="")) returned 1 [0036.485] FindNextFileW (in: hFindFile=0x381dc0, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb0bd8800, ftCreationTime.dwHighDateTime=0x1be9cd9, ftLastAccessTime.dwLowDateTime=0xbd5853c0, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0xb0bd8800, ftLastWriteTime.dwHighDateTime=0x1be9cd9, nFileSizeHigh=0x0, nFileSizeLow=0x13d6, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0240695.WMF", cAlternateFileName="")) returned 1 [0036.485] FindNextFileW (in: hFindFile=0x381dc0, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc16dfe00, ftCreationTime.dwHighDateTime=0x1be9cd9, ftLastAccessTime.dwLowDateTime=0xbd5ab520, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0xc16dfe00, ftLastWriteTime.dwHighDateTime=0x1be9cd9, nFileSizeHigh=0x0, nFileSizeLow=0x1aa2, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0240719.WMF", cAlternateFileName="")) returned 1 [0036.485] FindNextFileW (in: hFindFile=0x381dc0, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x28d89700, ftCreationTime.dwHighDateTime=0x1beb2f4, ftLastAccessTime.dwLowDateTime=0xbd5ab520, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0x28d89700, ftLastWriteTime.dwHighDateTime=0x1beb2f4, nFileSizeHigh=0x0, nFileSizeLow=0x1498, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0251301.WMF", cAlternateFileName="")) returned 1 [0036.485] FindNextFileW (in: hFindFile=0x381dc0, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf384f00, ftCreationTime.dwHighDateTime=0x1beb2f6, ftLastAccessTime.dwLowDateTime=0xbd5ab520, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0xf384f00, ftLastWriteTime.dwHighDateTime=0x1beb2f6, nFileSizeHigh=0x0, nFileSizeLow=0x1232, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0251871.WMF", cAlternateFileName="")) returned 1 [0036.485] FindNextFileW (in: hFindFile=0x381dc0, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3db62a00, ftCreationTime.dwHighDateTime=0x1beb2f6, ftLastAccessTime.dwLowDateTime=0xbd5ab520, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0x3db62a00, ftLastWriteTime.dwHighDateTime=0x1beb2f6, nFileSizeHigh=0x0, nFileSizeLow=0x11b6, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0251925.WMF", cAlternateFileName="")) returned 1 [0036.485] FindNextFileW (in: hFindFile=0x381dc0, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xfb8de800, ftCreationTime.dwHighDateTime=0x1beb2f7, ftLastAccessTime.dwLowDateTime=0xbd5ab520, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0xfb8de800, ftLastWriteTime.dwHighDateTime=0x1beb2f7, nFileSizeHigh=0x0, nFileSizeLow=0x158c, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0252349.WMF", cAlternateFileName="")) returned 1 [0036.485] FindNextFileW (in: hFindFile=0x381dc0, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3fdf2000, ftCreationTime.dwHighDateTime=0x1beccca, ftLastAccessTime.dwLowDateTime=0xbd5ab520, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0x3fdf2000, ftLastWriteTime.dwHighDateTime=0x1beccca, nFileSizeHigh=0x0, nFileSizeLow=0xed0, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0278882.WMF", cAlternateFileName="")) returned 1 [0036.485] FindNextFileW (in: hFindFile=0x381dc0, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xecd0c800, ftCreationTime.dwHighDateTime=0x1bee443, ftLastAccessTime.dwLowDateTime=0xbd5ab520, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0xecd0c800, ftLastWriteTime.dwHighDateTime=0x1bee443, nFileSizeHigh=0x0, nFileSizeLow=0x4ffa, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0281904.WMF", cAlternateFileName="")) returned 1 [0036.485] FindNextFileW (in: hFindFile=0x381dc0, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe1a4f200, ftCreationTime.dwHighDateTime=0x1bed3d9, ftLastAccessTime.dwLowDateTime=0xbd5d1680, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0xe1a4f200, ftLastWriteTime.dwHighDateTime=0x1bed3d9, nFileSizeHigh=0x0, nFileSizeLow=0x4dc6, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0283209.GIF", cAlternateFileName="")) returned 1 [0036.485] FindNextFileW (in: hFindFile=0x381dc0, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb7ae3400, ftCreationTime.dwHighDateTime=0x1bea1cc, ftLastAccessTime.dwLowDateTime=0xbd5d1680, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0xb7ae3400, ftLastWriteTime.dwHighDateTime=0x1bea1cc, nFileSizeHigh=0x0, nFileSizeLow=0x62e3, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0284916.JPG", cAlternateFileName="")) returned 1 [0036.486] FindNextFileW (in: hFindFile=0x381dc0, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa68bc300, ftCreationTime.dwHighDateTime=0x1befd79, ftLastAccessTime.dwLowDateTime=0xbd5d1680, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0xa68bc300, ftLastWriteTime.dwHighDateTime=0x1befd79, nFileSizeHigh=0x0, nFileSizeLow=0x7876, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0285360.WMF", cAlternateFileName="")) returned 1 [0036.486] FindNextFileW (in: hFindFile=0x381dc0, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd63acb00, ftCreationTime.dwHighDateTime=0x1befd79, ftLastAccessTime.dwLowDateTime=0xbd5d1680, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0xd63acb00, ftLastWriteTime.dwHighDateTime=0x1befd79, nFileSizeHigh=0x0, nFileSizeLow=0x30e4, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0285410.WMF", cAlternateFileName="")) returned 1 [0036.486] FindNextFileW (in: hFindFile=0x381dc0, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x97d5a00, ftCreationTime.dwHighDateTime=0x1befd7a, ftLastAccessTime.dwLowDateTime=0xbd5d1680, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0x97d5a00, ftLastWriteTime.dwHighDateTime=0x1befd7a, nFileSizeHigh=0x0, nFileSizeLow=0x2448, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0285444.WMF", cAlternateFileName="")) returned 1 [0036.486] FindNextFileW (in: hFindFile=0x381dc0, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5d3c7300, ftCreationTime.dwHighDateTime=0x1befd7b, ftLastAccessTime.dwLowDateTime=0xbd5d1680, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0x5d3c7300, ftLastWriteTime.dwHighDateTime=0x1befd7b, nFileSizeHigh=0x0, nFileSizeLow=0x2a12, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0285698.WMF", cAlternateFileName="")) returned 1 [0036.486] FindNextFileW (in: hFindFile=0x381dc0, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9ecd1e00, ftCreationTime.dwHighDateTime=0x1befd7b, ftLastAccessTime.dwLowDateTime=0xbd5d1680, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0x9ecd1e00, ftLastWriteTime.dwHighDateTime=0x1befd7b, nFileSizeHigh=0x0, nFileSizeLow=0x958c, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0285750.WMF", cAlternateFileName="")) returned 1 [0036.486] FindNextFileW (in: hFindFile=0x381dc0, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x95908100, ftCreationTime.dwHighDateTime=0x1befd7c, ftLastAccessTime.dwLowDateTime=0xbd5f77e0, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0x95908100, ftLastWriteTime.dwHighDateTime=0x1befd7c, nFileSizeHigh=0x0, nFileSizeLow=0x3452, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0285926.WMF", cAlternateFileName="")) returned 1 [0036.486] FindNextFileW (in: hFindFile=0x381dc0, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xbf49a800, ftCreationTime.dwHighDateTime=0x1befd7c, ftLastAccessTime.dwLowDateTime=0xbd5f77e0, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0xbf49a800, ftLastWriteTime.dwHighDateTime=0x1befd7c, nFileSizeHigh=0x0, nFileSizeLow=0x9e0, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0286034.WMF", cAlternateFileName="")) returned 1 [0036.486] FindNextFileW (in: hFindFile=0x381dc0, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd5efff00, ftCreationTime.dwHighDateTime=0x1befd7c, ftLastAccessTime.dwLowDateTime=0xbd5f77e0, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0xd5efff00, ftLastWriteTime.dwHighDateTime=0x1befd7c, nFileSizeHigh=0x0, nFileSizeLow=0x9d0, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0286068.WMF", cAlternateFileName="")) returned 1 [0036.486] FindNextFileW (in: hFindFile=0x381dc0, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xaa019c00, ftCreationTime.dwHighDateTime=0x1bef57a, ftLastAccessTime.dwLowDateTime=0xbd5f77e0, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0xaa019c00, ftLastWriteTime.dwHighDateTime=0x1bef57a, nFileSizeHigh=0x0, nFileSizeLow=0xb21e, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0287005.WMF", cAlternateFileName="")) returned 1 [0036.486] FindNextFileW (in: hFindFile=0x381dc0, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x948c7400, ftCreationTime.dwHighDateTime=0x1bf1521, ftLastAccessTime.dwLowDateTime=0xbd5f77e0, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0x948c7400, ftLastWriteTime.dwHighDateTime=0x1bf1521, nFileSizeHigh=0x0, nFileSizeLow=0x76ea, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0291984.WMF", cAlternateFileName="")) returned 1 [0036.487] FindNextFileW (in: hFindFile=0x381dc0, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc9003000, ftCreationTime.dwHighDateTime=0x1bf1521, ftLastAccessTime.dwLowDateTime=0xbd5f77e0, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0xc9003000, ftLastWriteTime.dwHighDateTime=0x1bf1521, nFileSizeHigh=0x0, nFileSizeLow=0x7148, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0292020.WMF", cAlternateFileName="")) returned 1 [0036.487] FindNextFileW (in: hFindFile=0x381dc0, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4af05900, ftCreationTime.dwHighDateTime=0x1bf1522, ftLastAccessTime.dwLowDateTime=0xbd61d940, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0x4af05900, ftLastWriteTime.dwHighDateTime=0x1bf1522, nFileSizeHigh=0x0, nFileSizeLow=0x20ce, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0292152.WMF", cAlternateFileName="")) returned 1 [0036.487] FindNextFileW (in: hFindFile=0x381dc0, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x48b60800, ftCreationTime.dwHighDateTime=0x1bf16a4, ftLastAccessTime.dwLowDateTime=0xbd61d940, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0x48b60800, ftLastWriteTime.dwHighDateTime=0x1bf16a4, nFileSizeHigh=0x0, nFileSizeLow=0x998, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0292982.WMF", cAlternateFileName="")) returned 1 [0036.487] FindNextFileW (in: hFindFile=0x381dc0, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9af72900, ftCreationTime.dwHighDateTime=0x1bf16a4, ftLastAccessTime.dwLowDateTime=0xbd61d940, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0x9af72900, ftLastWriteTime.dwHighDateTime=0x1bf16a4, nFileSizeHigh=0x0, nFileSizeLow=0x5ba, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0293234.WMF", cAlternateFileName="")) returned 1 [0036.487] FindNextFileW (in: hFindFile=0x381dc0, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9af72900, ftCreationTime.dwHighDateTime=0x1bf16a4, ftLastAccessTime.dwLowDateTime=0xbd61d940, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0x9af72900, ftLastWriteTime.dwHighDateTime=0x1bf16a4, nFileSizeHigh=0x0, nFileSizeLow=0x766, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0293236.WMF", cAlternateFileName="")) returned 1 [0036.487] FindNextFileW (in: hFindFile=0x381dc0, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9af72900, ftCreationTime.dwHighDateTime=0x1bf16a4, ftLastAccessTime.dwLowDateTime=0xbd61d940, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0x9af72900, ftLastWriteTime.dwHighDateTime=0x1bf16a4, nFileSizeHigh=0x0, nFileSizeLow=0x78a, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0293238.WMF", cAlternateFileName="")) returned 1 [0036.487] FindNextFileW (in: hFindFile=0x381dc0, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9c285600, ftCreationTime.dwHighDateTime=0x1bf16a4, ftLastAccessTime.dwLowDateTime=0xbd61d940, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0x9c285600, ftLastWriteTime.dwHighDateTime=0x1bf16a4, nFileSizeHigh=0x0, nFileSizeLow=0x88e, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0293240.WMF", cAlternateFileName="")) returned 1 [0036.487] FindNextFileW (in: hFindFile=0x381dc0, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x47a99d00, ftCreationTime.dwHighDateTime=0x1bf1523, ftLastAccessTime.dwLowDateTime=0xbd61d940, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0x47a99d00, ftLastWriteTime.dwHighDateTime=0x1bf1523, nFileSizeHigh=0x0, nFileSizeLow=0x92c, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0293570.WMF", cAlternateFileName="")) returned 1 [0036.487] FindNextFileW (in: hFindFile=0x381dc0, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb0911500, ftCreationTime.dwHighDateTime=0x1bf1523, ftLastAccessTime.dwLowDateTime=0xbd643aa0, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0xb0911500, ftLastWriteTime.dwHighDateTime=0x1bf1523, nFileSizeHigh=0x0, nFileSizeLow=0x15ea, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0293828.WMF", cAlternateFileName="")) returned 1 [0036.487] FindNextFileW (in: hFindFile=0x381dc0, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb7b82300, ftCreationTime.dwHighDateTime=0x1bf1523, ftLastAccessTime.dwLowDateTime=0xbd643aa0, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0xb7b82300, ftLastWriteTime.dwHighDateTime=0x1bf1523, nFileSizeHigh=0x0, nFileSizeLow=0x812, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0293844.WMF", cAlternateFileName="")) returned 1 [0036.487] FindNextFileW (in: hFindFile=0x381dc0, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x72dc8d00, ftCreationTime.dwHighDateTime=0x1bf0891, ftLastAccessTime.dwLowDateTime=0xbd643aa0, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0x72dc8d00, ftLastWriteTime.dwHighDateTime=0x1bf0891, nFileSizeHigh=0x0, nFileSizeLow=0x29e5, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0295241.GIF", cAlternateFileName="")) returned 1 [0036.488] FindNextFileW (in: hFindFile=0x381dc0, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7b4c2400, ftCreationTime.dwHighDateTime=0x1bf2c95, ftLastAccessTime.dwLowDateTime=0xbd643aa0, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0x7b4c2400, ftLastWriteTime.dwHighDateTime=0x1bf2c95, nFileSizeHigh=0x0, nFileSizeLow=0xcd52, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0297185.WMF", cAlternateFileName="")) returned 1 [0036.488] FindNextFileW (in: hFindFile=0x381dc0, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x74beac00, ftCreationTime.dwHighDateTime=0x1bf2c97, ftLastAccessTime.dwLowDateTime=0xbd643aa0, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0x74beac00, ftLastWriteTime.dwHighDateTime=0x1bf2c97, nFileSizeHigh=0x0, nFileSizeLow=0x6db8, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0297551.WMF", cAlternateFileName="")) returned 1 [0036.488] FindNextFileW (in: hFindFile=0x381dc0, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x50170400, ftCreationTime.dwHighDateTime=0x1bf2c98, ftLastAccessTime.dwLowDateTime=0xbd643aa0, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0x50170400, ftLastWriteTime.dwHighDateTime=0x1bf2c98, nFileSizeHigh=0x0, nFileSizeLow=0xa7c2, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0297707.WMF", cAlternateFileName="")) returned 1 [0036.488] FindNextFileW (in: hFindFile=0x381dc0, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x848ac000, ftCreationTime.dwHighDateTime=0x1bf2c98, ftLastAccessTime.dwLowDateTime=0xbd643aa0, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0x848ac000, ftLastWriteTime.dwHighDateTime=0x1bf2c98, nFileSizeHigh=0x0, nFileSizeLow=0x27ba, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0297749.WMF", cAlternateFileName="")) returned 1 [0036.488] FindNextFileW (in: hFindFile=0x381dc0, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xae3dea00, ftCreationTime.dwHighDateTime=0x1bf2c8c, ftLastAccessTime.dwLowDateTime=0xbd669c00, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0xae3dea00, ftLastWriteTime.dwHighDateTime=0x1bf2c8c, nFileSizeHigh=0x0, nFileSizeLow=0x197e, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0298653.WMF", cAlternateFileName="")) returned 1 [0036.488] FindNextFileW (in: hFindFile=0x381dc0, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2dcbb900, ftCreationTime.dwHighDateTime=0x1bf2c8d, ftLastAccessTime.dwLowDateTime=0xbd669c00, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0x2dcbb900, ftLastWriteTime.dwHighDateTime=0x1bf2c8d, nFileSizeHigh=0x0, nFileSizeLow=0x19a6, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0298897.WMF", cAlternateFileName="")) returned 1 [0036.488] FindNextFileW (in: hFindFile=0x381dc0, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x15fa3200, ftCreationTime.dwHighDateTime=0x1bf2c99, ftLastAccessTime.dwLowDateTime=0xbd669c00, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0x15fa3200, ftLastWriteTime.dwHighDateTime=0x1bf2c99, nFileSizeHigh=0x0, nFileSizeLow=0x163c, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0299125.WMF", cAlternateFileName="")) returned 1 [0036.488] FindNextFileW (in: hFindFile=0x381dc0, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x375b1e00, ftCreationTime.dwHighDateTime=0x1bf2c99, ftLastAccessTime.dwLowDateTime=0xbd669c00, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0x375b1e00, ftLastWriteTime.dwHighDateTime=0x1bf2c99, nFileSizeHigh=0x0, nFileSizeLow=0x23b6, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0299171.WMF", cAlternateFileName="")) returned 1 [0036.488] FindNextFileW (in: hFindFile=0x381dc0, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa08f6100, ftCreationTime.dwHighDateTime=0x1bf2c9a, ftLastAccessTime.dwLowDateTime=0xbd669c00, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0xa08f6100, ftLastWriteTime.dwHighDateTime=0x1bf2c9a, nFileSizeHigh=0x0, nFileSizeLow=0x62c8, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0299587.WMF", cAlternateFileName="")) returned 1 [0036.489] FindNextFileW (in: hFindFile=0x381dc0, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xbd2b9900, ftCreationTime.dwHighDateTime=0x1bf2c9a, ftLastAccessTime.dwLowDateTime=0xbd669c00, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0xbd2b9900, ftLastWriteTime.dwHighDateTime=0x1bf2c9a, nFileSizeHigh=0x0, nFileSizeLow=0x1310, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0299611.WMF", cAlternateFileName="")) returned 1 [0036.489] FindNextFileW (in: hFindFile=0x381dc0, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5e1a5400, ftCreationTime.dwHighDateTime=0x1bf2c9b, ftLastAccessTime.dwLowDateTime=0xbd68fd60, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0x5e1a5400, ftLastWriteTime.dwHighDateTime=0x1bf2c9b, nFileSizeHigh=0x0, nFileSizeLow=0x4322, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0299763.WMF", cAlternateFileName="")) returned 1 [0036.489] FindNextFileW (in: hFindFile=0x381dc0, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf0508500, ftCreationTime.dwHighDateTime=0x1bf3a1b, ftLastAccessTime.dwLowDateTime=0xbd68fd60, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0xf0508500, ftLastWriteTime.dwHighDateTime=0x1bf3a1b, nFileSizeHigh=0x0, nFileSizeLow=0x3465, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0300520.GIF", cAlternateFileName="")) returned 1 [0036.489] FindNextFileW (in: hFindFile=0x381dc0, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf9b61300, ftCreationTime.dwHighDateTime=0x1bf452c, ftLastAccessTime.dwLowDateTime=0xbd68fd60, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0xf9b61300, ftLastWriteTime.dwHighDateTime=0x1bf452c, nFileSizeHigh=0x0, nFileSizeLow=0x239c, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0300840.WMF", cAlternateFileName="")) returned 1 [0036.489] FindNextFileW (in: hFindFile=0x381dc0, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x616c5e00, ftCreationTime.dwHighDateTime=0x1bf452d, ftLastAccessTime.dwLowDateTime=0xbd68fd60, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0x616c5e00, ftLastWriteTime.dwHighDateTime=0x1bf452d, nFileSizeHigh=0x0, nFileSizeLow=0xdafc, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0300912.WMF", cAlternateFileName="")) returned 1 [0036.489] FindNextFileW (in: hFindFile=0x381dc0, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xfb340b00, ftCreationTime.dwHighDateTime=0x1bf452d, ftLastAccessTime.dwLowDateTime=0xbd68fd60, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0xfb340b00, ftLastWriteTime.dwHighDateTime=0x1bf452d, nFileSizeHigh=0x0, nFileSizeLow=0x2fd8, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0301050.WMF", cAlternateFileName="")) returned 1 [0036.489] FindNextFileW (in: hFindFile=0x381dc0, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf780800, ftCreationTime.dwHighDateTime=0x1bf452e, ftLastAccessTime.dwLowDateTime=0xbd68fd60, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0xf780800, ftLastWriteTime.dwHighDateTime=0x1bf452e, nFileSizeHigh=0x0, nFileSizeLow=0x224e, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0301076.WMF", cAlternateFileName="")) returned 1 [0036.490] FindClose (in: hFindFile=0x381dc0 | out: hFindFile=0x381dc0) returned 1 [0036.491] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e77c) returned 1 [0036.491] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e788) returned 1 [0036.491] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e744) returned 1 [0036.491] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\1033", nBufferLength=0x105, lpBuffer=0x31e24c, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\1033", lpFilePart=0x0) returned 0x35 [0036.491] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\1033\\", nBufferLength=0x105, lpBuffer=0x31e220, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\1033\\", lpFilePart=0x0) returned 0x36 [0036.491] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\1033\\*", lpFindFileData=0x31e46c | out: lpFindFileData=0x31e46c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeec79e70, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xeec79e70, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xeec79e70, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x381dc0 [0036.492] FindClose (in: hFindFile=0x381dc0 | out: hFindFile=0x381dc0) returned 1 [0036.492] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e704) returned 1 [0036.492] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e710) returned 1 [0036.492] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e744) returned 1 [0036.492] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\1033", nBufferLength=0x105, lpBuffer=0x31e24c, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\1033", lpFilePart=0x0) returned 0x35 [0036.492] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\1033\\", nBufferLength=0x105, lpBuffer=0x31e220, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\1033\\", lpFilePart=0x0) returned 0x36 [0036.492] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\CAGCAT10\\1033\\*", lpFindFileData=0x31e46c | out: lpFindFileData=0x31e46c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeec79e70, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xeec79e70, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xeec79e70, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x381dc0 [0036.492] FindClose (in: hFindFile=0x381dc0 | out: hFindFile=0x381dc0) returned 1 [0036.492] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e704) returned 1 [0036.492] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e710) returned 1 [0036.492] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e7bc) returned 1 [0036.492] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14", nBufferLength=0x105, lpBuffer=0x31e2c4, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14", lpFilePart=0x0) returned 0x30 [0036.492] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\", nBufferLength=0x105, lpBuffer=0x31e298, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\", lpFilePart=0x0) returned 0x31 [0036.492] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\*", lpFindFileData=0x31e4e4 | out: lpFindFileData=0x31e4e4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeef015d0, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0x596c1850, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x596c1850, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x381dc0 [0036.536] FindClose (in: hFindFile=0x381dc0 | out: hFindFile=0x381dc0) returned 1 [0036.536] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e77c) returned 1 [0036.536] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e788) returned 1 [0036.536] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e7bc) returned 1 [0036.536] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14", nBufferLength=0x105, lpBuffer=0x31e2c4, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14", lpFilePart=0x0) returned 0x30 [0036.536] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\", nBufferLength=0x105, lpBuffer=0x31e298, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\", lpFilePart=0x0) returned 0x31 [0036.536] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\*", lpFindFileData=0x31e4e4 | out: lpFindFileData=0x31e4e4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeef015d0, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0x596c1850, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x596c1850, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x381dc0 [0036.536] FindClose (in: hFindFile=0x381dc0 | out: hFindFile=0x381dc0) returned 1 [0036.536] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e77c) returned 1 [0036.537] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e788) returned 1 [0036.537] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e744) returned 1 [0036.537] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\1033", nBufferLength=0x105, lpBuffer=0x31e24c, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\1033", lpFilePart=0x0) returned 0x35 [0036.537] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\1033\\", nBufferLength=0x105, lpBuffer=0x31e220, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\1033\\", lpFilePart=0x0) returned 0x36 [0036.537] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\1033\\*", lpFindFileData=0x31e46c | out: lpFindFileData=0x31e46c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeef015d0, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xeef015d0, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xeef015d0, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x381dc0 [0036.537] FindClose (in: hFindFile=0x381dc0 | out: hFindFile=0x381dc0) returned 1 [0036.537] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e704) returned 1 [0036.537] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e710) returned 1 [0036.537] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e744) returned 1 [0036.537] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\1033", nBufferLength=0x105, lpBuffer=0x31e24c, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\1033", lpFilePart=0x0) returned 0x35 [0036.537] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\1033\\", nBufferLength=0x105, lpBuffer=0x31e220, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\1033\\", lpFilePart=0x0) returned 0x36 [0036.537] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\1033\\*", lpFindFileData=0x31e46c | out: lpFindFileData=0x31e46c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeef015d0, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xeef015d0, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xeef015d0, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x381dc0 [0036.537] FindClose (in: hFindFile=0x381dc0 | out: hFindFile=0x381dc0) returned 1 [0036.537] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e704) returned 1 [0036.537] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e710) returned 1 [0036.537] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e744) returned 1 [0036.537] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\AUTOSHAP", nBufferLength=0x105, lpBuffer=0x31e24c, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\AUTOSHAP", lpFilePart=0x0) returned 0x39 [0036.537] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\AUTOSHAP\\", nBufferLength=0x105, lpBuffer=0x31e220, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\AUTOSHAP\\", lpFilePart=0x0) returned 0x3a [0036.538] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\AUTOSHAP\\*", lpFindFileData=0x31e46c | out: lpFindFileData=0x31e46c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x51767f50, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0xbcce4400, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0xbcce4400, ftLastWriteTime.dwHighDateTime=0x1d305f1, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x381dc0 [0037.039] FindClose (in: hFindFile=0x381dc0 | out: hFindFile=0x381dc0) returned 1 [0037.039] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e704) returned 1 [0037.039] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e710) returned 1 [0037.040] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e744) returned 1 [0037.040] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\AUTOSHAP", nBufferLength=0x105, lpBuffer=0x31e24c, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\AUTOSHAP", lpFilePart=0x0) returned 0x39 [0037.040] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\AUTOSHAP\\", nBufferLength=0x105, lpBuffer=0x31e220, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\AUTOSHAP\\", lpFilePart=0x0) returned 0x3a [0037.040] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\AUTOSHAP\\*", lpFindFileData=0x31e46c | out: lpFindFileData=0x31e46c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x51767f50, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0xbcce4400, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0xbcce4400, ftLastWriteTime.dwHighDateTime=0x1d305f1, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x381dc0 [0037.041] FindClose (in: hFindFile=0x381dc0 | out: hFindFile=0x381dc0) returned 1 [0037.041] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e704) returned 1 [0037.041] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e710) returned 1 [0037.041] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e744) returned 1 [0037.041] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS", nBufferLength=0x105, lpBuffer=0x31e24c, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS", lpFilePart=0x0) returned 0x38 [0037.042] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\", nBufferLength=0x105, lpBuffer=0x31e220, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\", lpFilePart=0x0) returned 0x39 [0037.042] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\*", lpFindFileData=0x31e46c | out: lpFindFileData=0x31e46c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5178e0b0, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0xbd42e760, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0xbd42e760, ftLastWriteTime.dwHighDateTime=0x1d305f1, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x381dc0 [0037.050] FindClose (in: hFindFile=0x381dc0 | out: hFindFile=0x381dc0) returned 1 [0037.051] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e704) returned 1 [0037.051] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e710) returned 1 [0037.051] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e744) returned 1 [0037.051] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS", nBufferLength=0x105, lpBuffer=0x31e24c, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS", lpFilePart=0x0) returned 0x38 [0037.051] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\", nBufferLength=0x105, lpBuffer=0x31e220, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\", lpFilePart=0x0) returned 0x39 [0037.051] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\*", lpFindFileData=0x31e46c | out: lpFindFileData=0x31e46c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5178e0b0, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0xbd42e760, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0xbd42e760, ftLastWriteTime.dwHighDateTime=0x1d305f1, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x381dc0 [0037.052] FindClose (in: hFindFile=0x381dc0 | out: hFindFile=0x381dc0) returned 1 [0037.053] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e704) returned 1 [0037.053] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e710) returned 1 [0037.053] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e744) returned 1 [0037.053] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\LINES", nBufferLength=0x105, lpBuffer=0x31e24c, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\LINES", lpFilePart=0x0) returned 0x36 [0037.053] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\LINES\\", nBufferLength=0x105, lpBuffer=0x31e220, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\LINES\\", lpFilePart=0x0) returned 0x37 [0037.053] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\LINES\\*", lpFindFileData=0x31e46c | out: lpFindFileData=0x31e46c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5178e0b0, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0xbd4548c0, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0xbd4548c0, ftLastWriteTime.dwHighDateTime=0x1d305f1, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x381dc0 [0037.057] FindClose (in: hFindFile=0x381dc0 | out: hFindFile=0x381dc0) returned 1 [0037.057] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e704) returned 1 [0037.057] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e710) returned 1 [0037.057] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e744) returned 1 [0037.057] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\LINES", nBufferLength=0x105, lpBuffer=0x31e24c, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\LINES", lpFilePart=0x0) returned 0x36 [0037.058] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\LINES\\", nBufferLength=0x105, lpBuffer=0x31e220, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\LINES\\", lpFilePart=0x0) returned 0x37 [0037.058] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\MEDIA\\OFFICE14\\LINES\\*", lpFindFileData=0x31e46c | out: lpFindFileData=0x31e46c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5178e0b0, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0xbd4548c0, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0xbd4548c0, ftLastWriteTime.dwHighDateTime=0x1d305f1, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x381dc0 [0037.059] FindClose (in: hFindFile=0x381dc0 | out: hFindFile=0x381dc0) returned 1 [0037.059] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e704) returned 1 [0037.059] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e710) returned 1 [0037.059] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e834) returned 1 [0037.059] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14", nBufferLength=0x105, lpBuffer=0x31e33c, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\Office14", lpFilePart=0x0) returned 0x2a [0037.059] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\", nBufferLength=0x105, lpBuffer=0x31e310, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\Office14\\", lpFilePart=0x0) returned 0x2b [0037.059] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\*", lpFindFileData=0x31e55c | out: lpFindFileData=0x31e55c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee2ce510, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xe5db9aa0, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0xe5db9aa0, ftLastWriteTime.dwHighDateTime=0x1d305f1, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x381dc0 [0037.076] FindClose (in: hFindFile=0x381dc0 | out: hFindFile=0x381dc0) returned 1 [0037.076] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e7f4) returned 1 [0037.076] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e800) returned 1 [0037.076] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e834) returned 1 [0037.076] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14", nBufferLength=0x105, lpBuffer=0x31e33c, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\Office14", lpFilePart=0x0) returned 0x2a [0037.076] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\", nBufferLength=0x105, lpBuffer=0x31e310, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\Office14\\", lpFilePart=0x0) returned 0x2b [0037.076] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\*", lpFindFileData=0x31e55c | out: lpFindFileData=0x31e55c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee2ce510, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xe5db9aa0, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0xe5db9aa0, ftLastWriteTime.dwHighDateTime=0x1d305f1, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x381dc0 [0037.086] FindClose (in: hFindFile=0x381dc0 | out: hFindFile=0x381dc0) returned 1 [0037.086] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e7f4) returned 1 [0037.086] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e800) returned 1 [0037.086] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Microsoft.BusinessData.xml", nBufferLength=0x105, lpBuffer=0x31e20c, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\Office14\\Microsoft.BusinessData.xml", lpFilePart=0x0) returned 0x45 [0037.086] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e700) returned 1 [0037.086] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Microsoft.BusinessData.xml" (normalized: "c:\\program files\\microsoft office\\office14\\microsoft.businessdata.xml"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x224 [0037.087] GetFileType (hFile=0x224) returned 0x1 [0037.087] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e6fc) returned 1 [0037.087] GetFileType (hFile=0x224) returned 0x1 [0037.087] GetFileSize (in: hFile=0x224, lpFileSizeHigh=0x31e808 | out: lpFileSizeHigh=0x31e808*=0x0) returned 0x5a768 [0037.088] ReadFile (in: hFile=0x224, lpBuffer=0x379be08, nNumberOfBytesToRead=0x5a768, lpNumberOfBytesRead=0x31e7b4, lpOverlapped=0x0 | out: lpBuffer=0x379be08*, lpNumberOfBytesRead=0x31e7b4*=0x5a768, lpOverlapped=0x0) returned 1 [0037.133] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Microsoft.BusinessData.xml", nBufferLength=0x105, lpBuffer=0x31e1f8, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\Office14\\Microsoft.BusinessData.xml", lpFilePart=0x0) returned 0x45 [0037.133] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e6ec) returned 1 [0037.133] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Microsoft.BusinessData.xml" (normalized: "c:\\program files\\microsoft office\\office14\\microsoft.businessdata.xml"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x224 [0037.137] GetFileType (hFile=0x224) returned 0x1 [0037.137] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e6e8) returned 1 [0037.137] GetFileType (hFile=0x224) returned 0x1 [0037.137] WriteFile (in: hFile=0x224, lpBuffer=0x3aef218*, nNumberOfBytesToWrite=0x5a770, lpNumberOfBytesWritten=0x31e7a8, lpOverlapped=0x0 | out: lpBuffer=0x3aef218*, lpNumberOfBytesWritten=0x31e7a8*=0x5a770, lpOverlapped=0x0) returned 1 [0037.143] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Microsoft.BusinessData.xml", nBufferLength=0x105, lpBuffer=0x31e32c, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\Office14\\Microsoft.BusinessData.xml", lpFilePart=0x0) returned 0x45 [0037.143] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Microsoft.BusinessData.xml", nBufferLength=0x105, lpBuffer=0x31e32c, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\Office14\\Microsoft.BusinessData.xml", lpFilePart=0x0) returned 0x45 [0037.143] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e78c) returned 1 [0037.143] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Microsoft.BusinessData.xml" (normalized: "c:\\program files\\microsoft office\\office14\\microsoft.businessdata.xml"), fInfoLevelId=0x0, lpFileInformation=0x31e808 | out: lpFileInformation=0x31e808*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x36c06100, ftCreationTime.dwHighDateTime=0x1ca24ad, ftLastAccessTime.dwLowDateTime=0x600aeb50, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xf9964d80, ftLastWriteTime.dwHighDateTime=0x1d6eb7e, nFileSizeHigh=0x0, nFileSizeLow=0x5a770)) returned 1 [0037.143] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e788) returned 1 [0037.143] MoveFileW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\Office14\\Microsoft.BusinessData.xml" (normalized: "c:\\program files\\microsoft office\\office14\\microsoft.businessdata.xml"), lpNewFileName="C:\\Program Files\\Microsoft Office\\Office14\\Microsoft.BusinessData.xml" (normalized: "c:\\program files\\microsoft office\\office14\\microsoft.businessdata.xml")) returned 1 [0037.148] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Microsoft.Office.BusinessApplications.Runtime.xml", nBufferLength=0x105, lpBuffer=0x31e20c, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\Office14\\Microsoft.Office.BusinessApplications.Runtime.xml", lpFilePart=0x0) returned 0x5c [0037.148] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e700) returned 1 [0037.149] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Microsoft.Office.BusinessApplications.Runtime.xml" (normalized: "c:\\program files\\microsoft office\\office14\\microsoft.office.businessapplications.runtime.xml"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x224 [0037.149] GetFileType (hFile=0x224) returned 0x1 [0037.149] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e6fc) returned 1 [0037.149] GetFileType (hFile=0x224) returned 0x1 [0037.149] GetFileSize (in: hFile=0x224, lpFileSizeHigh=0x31e808 | out: lpFileSizeHigh=0x31e808*=0x0) returned 0x295c [0037.149] ReadFile (in: hFile=0x224, lpBuffer=0x2781820, nNumberOfBytesToRead=0x295c, lpNumberOfBytesRead=0x31e7b4, lpOverlapped=0x0 | out: lpBuffer=0x2781820*, lpNumberOfBytesRead=0x31e7b4*=0x295c, lpOverlapped=0x0) returned 1 [0037.164] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Microsoft.Office.BusinessApplications.Runtime.xml", nBufferLength=0x105, lpBuffer=0x31e1f8, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\Office14\\Microsoft.Office.BusinessApplications.Runtime.xml", lpFilePart=0x0) returned 0x5c [0037.164] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e6ec) returned 1 [0037.164] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Microsoft.Office.BusinessApplications.Runtime.xml" (normalized: "c:\\program files\\microsoft office\\office14\\microsoft.office.businessapplications.runtime.xml"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x224 [0037.165] GetFileType (hFile=0x224) returned 0x1 [0037.165] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e6e8) returned 1 [0037.165] GetFileType (hFile=0x224) returned 0x1 [0037.165] WriteFile (in: hFile=0x224, lpBuffer=0x27db4e4*, nNumberOfBytesToWrite=0x2960, lpNumberOfBytesWritten=0x31e7a8, lpOverlapped=0x0 | out: lpBuffer=0x27db4e4*, lpNumberOfBytesWritten=0x31e7a8*=0x2960, lpOverlapped=0x0) returned 1 [0037.166] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Microsoft.Office.BusinessApplications.Runtime.xml", nBufferLength=0x105, lpBuffer=0x31e32c, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\Office14\\Microsoft.Office.BusinessApplications.Runtime.xml", lpFilePart=0x0) returned 0x5c [0037.166] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Microsoft.Office.BusinessApplications.Runtime.xml", nBufferLength=0x105, lpBuffer=0x31e32c, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\Office14\\Microsoft.Office.BusinessApplications.Runtime.xml", lpFilePart=0x0) returned 0x5c [0037.166] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e78c) returned 1 [0037.166] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Microsoft.Office.BusinessApplications.Runtime.xml" (normalized: "c:\\program files\\microsoft office\\office14\\microsoft.office.businessapplications.runtime.xml"), fInfoLevelId=0x0, lpFileInformation=0x31e808 | out: lpFileInformation=0x31e808*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe853200, ftCreationTime.dwHighDateTime=0x1ca24ae, ftLastAccessTime.dwLowDateTime=0x568a2e10, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xf99b1040, ftLastWriteTime.dwHighDateTime=0x1d6eb7e, nFileSizeHigh=0x0, nFileSizeLow=0x2960)) returned 1 [0037.166] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e788) returned 1 [0037.166] MoveFileW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\Office14\\Microsoft.Office.BusinessApplications.Runtime.xml" (normalized: "c:\\program files\\microsoft office\\office14\\microsoft.office.businessapplications.runtime.xml"), lpNewFileName="C:\\Program Files\\Microsoft Office\\Office14\\Microsoft.Office.BusinessApplications.Runtime.xml" (normalized: "c:\\program files\\microsoft office\\office14\\microsoft.office.businessapplications.runtime.xml")) returned 1 [0037.167] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Microsoft.Office.BusinessApplications.RuntimeUi.xml", nBufferLength=0x105, lpBuffer=0x31e20c, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\Office14\\Microsoft.Office.BusinessApplications.RuntimeUi.xml", lpFilePart=0x0) returned 0x5e [0037.167] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e700) returned 1 [0037.167] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Microsoft.Office.BusinessApplications.RuntimeUi.xml" (normalized: "c:\\program files\\microsoft office\\office14\\microsoft.office.businessapplications.runtimeui.xml"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x224 [0037.168] GetFileType (hFile=0x224) returned 0x1 [0037.168] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e6fc) returned 1 [0037.168] GetFileType (hFile=0x224) returned 0x1 [0037.168] GetFileSize (in: hFile=0x224, lpFileSizeHigh=0x31e808 | out: lpFileSizeHigh=0x31e808*=0x0) returned 0xb2 [0037.169] ReadFile (in: hFile=0x224, lpBuffer=0x27de400, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x31e7b4, lpOverlapped=0x0 | out: lpBuffer=0x27de400*, lpNumberOfBytesRead=0x31e7b4*=0xb2, lpOverlapped=0x0) returned 1 [0037.185] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Microsoft.Office.BusinessApplications.RuntimeUi.xml", nBufferLength=0x105, lpBuffer=0x31e1f8, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\Office14\\Microsoft.Office.BusinessApplications.RuntimeUi.xml", lpFilePart=0x0) returned 0x5e [0037.185] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e6ec) returned 1 [0037.185] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Microsoft.Office.BusinessApplications.RuntimeUi.xml" (normalized: "c:\\program files\\microsoft office\\office14\\microsoft.office.businessapplications.runtimeui.xml"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x224 [0037.186] GetFileType (hFile=0x224) returned 0x1 [0037.186] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e6e8) returned 1 [0037.186] GetFileType (hFile=0x224) returned 0x1 [0037.186] WriteFile (in: hFile=0x224, lpBuffer=0x282c640*, nNumberOfBytesToWrite=0xc0, lpNumberOfBytesWritten=0x31e77c, lpOverlapped=0x0 | out: lpBuffer=0x282c640*, lpNumberOfBytesWritten=0x31e77c*=0xc0, lpOverlapped=0x0) returned 1 [0037.187] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Microsoft.Office.BusinessApplications.RuntimeUi.xml", nBufferLength=0x105, lpBuffer=0x31e32c, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\Office14\\Microsoft.Office.BusinessApplications.RuntimeUi.xml", lpFilePart=0x0) returned 0x5e [0037.187] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Microsoft.Office.BusinessApplications.RuntimeUi.xml", nBufferLength=0x105, lpBuffer=0x31e32c, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\Office14\\Microsoft.Office.BusinessApplications.RuntimeUi.xml", lpFilePart=0x0) returned 0x5e [0037.187] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e78c) returned 1 [0037.187] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Microsoft.Office.BusinessApplications.RuntimeUi.xml" (normalized: "c:\\program files\\microsoft office\\office14\\microsoft.office.businessapplications.runtimeui.xml"), fInfoLevelId=0x0, lpFileInformation=0x31e808 | out: lpFileInformation=0x31e808*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd33c3f00, ftCreationTime.dwHighDateTime=0x1ca2551, ftLastAccessTime.dwLowDateTime=0x67a61010, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xf99d71a0, ftLastWriteTime.dwHighDateTime=0x1d6eb7e, nFileSizeHigh=0x0, nFileSizeLow=0xc0)) returned 1 [0037.187] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e788) returned 1 [0037.187] MoveFileW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\Office14\\Microsoft.Office.BusinessApplications.RuntimeUi.xml" (normalized: "c:\\program files\\microsoft office\\office14\\microsoft.office.businessapplications.runtimeui.xml"), lpNewFileName="C:\\Program Files\\Microsoft Office\\Office14\\Microsoft.Office.BusinessApplications.RuntimeUi.xml" (normalized: "c:\\program files\\microsoft office\\office14\\microsoft.office.businessapplications.runtimeui.xml")) returned 1 [0037.188] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Microsoft.Office.BusinessData.xml", nBufferLength=0x105, lpBuffer=0x31e20c, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\Office14\\Microsoft.Office.BusinessData.xml", lpFilePart=0x0) returned 0x4c [0037.188] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e700) returned 1 [0037.189] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Microsoft.Office.BusinessData.xml" (normalized: "c:\\program files\\microsoft office\\office14\\microsoft.office.businessdata.xml"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x224 [0037.189] GetFileType (hFile=0x224) returned 0x1 [0037.189] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e6fc) returned 1 [0037.189] GetFileType (hFile=0x224) returned 0x1 [0037.189] GetFileSize (in: hFile=0x224, lpFileSizeHigh=0x31e808 | out: lpFileSizeHigh=0x31e808*=0x0) returned 0x33737 [0037.189] ReadFile (in: hFile=0x224, lpBuffer=0x3b499a8, nNumberOfBytesToRead=0x33737, lpNumberOfBytesRead=0x31e7b4, lpOverlapped=0x0 | out: lpBuffer=0x3b499a8*, lpNumberOfBytesRead=0x31e7b4*=0x33737, lpOverlapped=0x0) returned 1 [0037.258] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Microsoft.Office.BusinessData.xml", nBufferLength=0x105, lpBuffer=0x31e1f8, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\Office14\\Microsoft.Office.BusinessData.xml", lpFilePart=0x0) returned 0x4c [0037.258] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e6ec) returned 1 [0037.258] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Microsoft.Office.BusinessData.xml" (normalized: "c:\\program files\\microsoft office\\office14\\microsoft.office.businessdata.xml"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x274 [0037.260] GetFileType (hFile=0x274) returned 0x1 [0037.260] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e6e8) returned 1 [0037.260] GetFileType (hFile=0x274) returned 0x1 [0037.260] WriteFile (in: hFile=0x274, lpBuffer=0x36e71d0*, nNumberOfBytesToWrite=0x33740, lpNumberOfBytesWritten=0x31e7a8, lpOverlapped=0x0 | out: lpBuffer=0x36e71d0*, lpNumberOfBytesWritten=0x31e7a8*=0x33740, lpOverlapped=0x0) returned 1 [0037.264] CloseHandle (hObject=0x274) returned 1 [0037.267] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Microsoft.Office.BusinessData.xml", nBufferLength=0x105, lpBuffer=0x31e32c, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\Office14\\Microsoft.Office.BusinessData.xml", lpFilePart=0x0) returned 0x4c [0037.267] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Microsoft.Office.BusinessData.xml", nBufferLength=0x105, lpBuffer=0x31e32c, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\Office14\\Microsoft.Office.BusinessData.xml", lpFilePart=0x0) returned 0x4c [0037.267] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e78c) returned 1 [0037.267] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Microsoft.Office.BusinessData.xml" (normalized: "c:\\program files\\microsoft office\\office14\\microsoft.office.businessdata.xml"), fInfoLevelId=0x0, lpFileInformation=0x31e808 | out: lpFileInformation=0x31e808*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe853200, ftCreationTime.dwHighDateTime=0x1ca24ae, ftLastAccessTime.dwLowDateTime=0x575e0870, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xf9a95880, ftLastWriteTime.dwHighDateTime=0x1d6eb7e, nFileSizeHigh=0x0, nFileSizeLow=0x33740)) returned 1 [0037.267] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e788) returned 1 [0037.267] MoveFileW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\Office14\\Microsoft.Office.BusinessData.xml" (normalized: "c:\\program files\\microsoft office\\office14\\microsoft.office.businessdata.xml"), lpNewFileName="C:\\Program Files\\Microsoft Office\\Office14\\Microsoft.Office.BusinessData.xml" (normalized: "c:\\program files\\microsoft office\\office14\\microsoft.office.businessdata.xml")) returned 1 [0037.268] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Microsoft.Office.Interop.InfoPath.SemiTrust.xml", nBufferLength=0x105, lpBuffer=0x31e20c, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\Office14\\Microsoft.Office.Interop.InfoPath.SemiTrust.xml", lpFilePart=0x0) returned 0x5a [0037.268] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e700) returned 1 [0037.268] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Microsoft.Office.Interop.InfoPath.SemiTrust.xml" (normalized: "c:\\program files\\microsoft office\\office14\\microsoft.office.interop.infopath.semitrust.xml"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x274 [0037.268] GetFileType (hFile=0x274) returned 0x1 [0037.268] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e6fc) returned 1 [0037.268] GetFileType (hFile=0x274) returned 0x1 [0037.268] GetFileSize (in: hFile=0x274, lpFileSizeHigh=0x31e808 | out: lpFileSizeHigh=0x31e808*=0x0) returned 0xc5265 [0037.270] ReadFile (in: hFile=0x274, lpBuffer=0x371a930, nNumberOfBytesToRead=0xc5265, lpNumberOfBytesRead=0x31e7b4, lpOverlapped=0x0 | out: lpBuffer=0x371a930*, lpNumberOfBytesRead=0x31e7b4*=0xc5265, lpOverlapped=0x0) returned 1 [0037.280] CloseHandle (hObject=0x274) returned 1 [0037.322] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Microsoft.Office.Interop.InfoPath.SemiTrust.xml", nBufferLength=0x105, lpBuffer=0x31e1f8, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\Office14\\Microsoft.Office.Interop.InfoPath.SemiTrust.xml", lpFilePart=0x0) returned 0x5a [0037.322] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e6ec) returned 1 [0037.322] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Microsoft.Office.Interop.InfoPath.SemiTrust.xml" (normalized: "c:\\program files\\microsoft office\\office14\\microsoft.office.interop.infopath.semitrust.xml"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x274 [0037.329] GetFileType (hFile=0x274) returned 0x1 [0037.329] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e6e8) returned 1 [0037.329] GetFileType (hFile=0x274) returned 0x1 [0037.329] WriteFile (in: hFile=0x274, lpBuffer=0x36194b0*, nNumberOfBytesToWrite=0xc5270, lpNumberOfBytesWritten=0x31e7a8, lpOverlapped=0x0 | out: lpBuffer=0x36194b0*, lpNumberOfBytesWritten=0x31e7a8*=0xc5270, lpOverlapped=0x0) returned 1 [0037.342] CloseHandle (hObject=0x274) returned 1 [0037.349] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Microsoft.Office.Interop.InfoPath.SemiTrust.xml", nBufferLength=0x105, lpBuffer=0x31e32c, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\Office14\\Microsoft.Office.Interop.InfoPath.SemiTrust.xml", lpFilePart=0x0) returned 0x5a [0037.349] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Microsoft.Office.Interop.InfoPath.SemiTrust.xml", nBufferLength=0x105, lpBuffer=0x31e32c, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\Office14\\Microsoft.Office.Interop.InfoPath.SemiTrust.xml", lpFilePart=0x0) returned 0x5a [0037.349] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e78c) returned 1 [0037.349] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Microsoft.Office.Interop.InfoPath.SemiTrust.xml" (normalized: "c:\\program files\\microsoft office\\office14\\microsoft.office.interop.infopath.semitrust.xml"), fInfoLevelId=0x0, lpFileInformation=0x31e808 | out: lpFileInformation=0x31e808*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8d265900, ftCreationTime.dwHighDateTime=0x1ca5630, ftLastAccessTime.dwLowDateTime=0x542d90d0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xf9b7a0c0, ftLastWriteTime.dwHighDateTime=0x1d6eb7e, nFileSizeHigh=0x0, nFileSizeLow=0xc5270)) returned 1 [0037.349] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e788) returned 1 [0037.349] MoveFileW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\Office14\\Microsoft.Office.Interop.InfoPath.SemiTrust.xml" (normalized: "c:\\program files\\microsoft office\\office14\\microsoft.office.interop.infopath.semitrust.xml"), lpNewFileName="C:\\Program Files\\Microsoft Office\\Office14\\Microsoft.Office.Interop.InfoPath.SemiTrust.xml" (normalized: "c:\\program files\\microsoft office\\office14\\microsoft.office.interop.infopath.semitrust.xml")) returned 1 [0037.350] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Microsoft.Office.Interop.InfoPath.Xml.xml", nBufferLength=0x105, lpBuffer=0x31e20c, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\Office14\\Microsoft.Office.Interop.InfoPath.Xml.xml", lpFilePart=0x0) returned 0x54 [0037.350] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e700) returned 1 [0037.350] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Microsoft.Office.Interop.InfoPath.Xml.xml" (normalized: "c:\\program files\\microsoft office\\office14\\microsoft.office.interop.infopath.xml.xml"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x274 [0037.351] GetFileType (hFile=0x274) returned 0x1 [0037.351] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e6fc) returned 1 [0037.351] GetFileType (hFile=0x274) returned 0x1 [0037.351] GetFileSize (in: hFile=0x274, lpFileSizeHigh=0x31e808 | out: lpFileSizeHigh=0x31e808*=0x0) returned 0x837d7 [0037.351] ReadFile (in: hFile=0x274, lpBuffer=0x37dfbb8, nNumberOfBytesToRead=0x837d7, lpNumberOfBytesRead=0x31e7b4, lpOverlapped=0x0 | out: lpBuffer=0x37dfbb8*, lpNumberOfBytesRead=0x31e7b4*=0x837d7, lpOverlapped=0x0) returned 1 [0037.357] CloseHandle (hObject=0x274) returned 1 [0037.420] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Microsoft.Office.Interop.InfoPath.Xml.xml", nBufferLength=0x105, lpBuffer=0x31e1f8, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\Office14\\Microsoft.Office.Interop.InfoPath.Xml.xml", lpFilePart=0x0) returned 0x54 [0037.420] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e6ec) returned 1 [0037.420] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Microsoft.Office.Interop.InfoPath.Xml.xml" (normalized: "c:\\program files\\microsoft office\\office14\\microsoft.office.interop.infopath.xml.xml"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x274 [0037.425] GetFileType (hFile=0x274) returned 0x1 [0037.425] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e6e8) returned 1 [0037.425] GetFileType (hFile=0x274) returned 0x1 [0037.425] WriteFile (in: hFile=0x274, lpBuffer=0x38633b0*, nNumberOfBytesToWrite=0x837e0, lpNumberOfBytesWritten=0x31e7a8, lpOverlapped=0x0 | out: lpBuffer=0x38633b0*, lpNumberOfBytesWritten=0x31e7a8*=0x837e0, lpOverlapped=0x0) returned 1 [0037.435] CloseHandle (hObject=0x274) returned 1 [0037.440] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Microsoft.Office.Interop.InfoPath.Xml.xml", nBufferLength=0x105, lpBuffer=0x31e32c, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\Office14\\Microsoft.Office.Interop.InfoPath.Xml.xml", lpFilePart=0x0) returned 0x54 [0037.440] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Microsoft.Office.Interop.InfoPath.Xml.xml", nBufferLength=0x105, lpBuffer=0x31e32c, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\Office14\\Microsoft.Office.Interop.InfoPath.Xml.xml", lpFilePart=0x0) returned 0x54 [0037.440] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e78c) returned 1 [0037.440] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Microsoft.Office.Interop.InfoPath.Xml.xml" (normalized: "c:\\program files\\microsoft office\\office14\\microsoft.office.interop.infopath.xml.xml"), fInfoLevelId=0x0, lpFileInformation=0x31e808 | out: lpFileInformation=0x31e808*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x62def200, ftCreationTime.dwHighDateTime=0x1c9bc30, ftLastAccessTime.dwLowDateTime=0x65d38290, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xf9c387a0, ftLastWriteTime.dwHighDateTime=0x1d6eb7e, nFileSizeHigh=0x0, nFileSizeLow=0x837e0)) returned 1 [0037.440] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e788) returned 1 [0037.440] MoveFileW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\Office14\\Microsoft.Office.Interop.InfoPath.Xml.xml" (normalized: "c:\\program files\\microsoft office\\office14\\microsoft.office.interop.infopath.xml.xml"), lpNewFileName="C:\\Program Files\\Microsoft Office\\Office14\\Microsoft.Office.Interop.InfoPath.Xml.xml" (normalized: "c:\\program files\\microsoft office\\office14\\microsoft.office.interop.infopath.xml.xml")) returned 1 [0037.440] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Microsoft.SharePoint.BusinessData.Administration.Client.xml", nBufferLength=0x105, lpBuffer=0x31e20c, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\Office14\\Microsoft.SharePoint.BusinessData.Administration.Client.xml", lpFilePart=0x0) returned 0x66 [0037.441] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e700) returned 1 [0037.441] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Microsoft.SharePoint.BusinessData.Administration.Client.xml" (normalized: "c:\\program files\\microsoft office\\office14\\microsoft.sharepoint.businessdata.administration.client.xml"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x274 [0037.441] GetFileType (hFile=0x274) returned 0x1 [0037.441] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e6fc) returned 1 [0037.441] GetFileType (hFile=0x274) returned 0x1 [0037.441] GetFileSize (in: hFile=0x274, lpFileSizeHigh=0x31e808 | out: lpFileSizeHigh=0x31e808*=0x0) returned 0x311b0 [0037.441] ReadFile (in: hFile=0x274, lpBuffer=0x37a3c60, nNumberOfBytesToRead=0x311b0, lpNumberOfBytesRead=0x31e7b4, lpOverlapped=0x0 | out: lpBuffer=0x37a3c60*, lpNumberOfBytesRead=0x31e7b4*=0x311b0, lpOverlapped=0x0) returned 1 [0037.444] CloseHandle (hObject=0x274) returned 1 [0037.494] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Microsoft.SharePoint.BusinessData.Administration.Client.xml", nBufferLength=0x105, lpBuffer=0x31e1f8, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\Office14\\Microsoft.SharePoint.BusinessData.Administration.Client.xml", lpFilePart=0x0) returned 0x66 [0037.494] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e6ec) returned 1 [0037.494] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Microsoft.SharePoint.BusinessData.Administration.Client.xml" (normalized: "c:\\program files\\microsoft office\\office14\\microsoft.sharepoint.businessdata.administration.client.xml"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x274 [0037.496] GetFileType (hFile=0x274) returned 0x1 [0037.496] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e6e8) returned 1 [0037.496] GetFileType (hFile=0x274) returned 0x1 [0037.496] WriteFile (in: hFile=0x274, lpBuffer=0x36194b0*, nNumberOfBytesToWrite=0x311c0, lpNumberOfBytesWritten=0x31e7a8, lpOverlapped=0x0 | out: lpBuffer=0x36194b0*, lpNumberOfBytesWritten=0x31e7a8*=0x311c0, lpOverlapped=0x0) returned 1 [0037.500] CloseHandle (hObject=0x274) returned 1 [0037.502] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Microsoft.SharePoint.BusinessData.Administration.Client.xml", nBufferLength=0x105, lpBuffer=0x31e32c, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\Office14\\Microsoft.SharePoint.BusinessData.Administration.Client.xml", lpFilePart=0x0) returned 0x66 [0037.502] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Microsoft.SharePoint.BusinessData.Administration.Client.xml", nBufferLength=0x105, lpBuffer=0x31e32c, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\Office14\\Microsoft.SharePoint.BusinessData.Administration.Client.xml", lpFilePart=0x0) returned 0x66 [0037.502] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e78c) returned 1 [0037.502] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Microsoft.SharePoint.BusinessData.Administration.Client.xml" (normalized: "c:\\program files\\microsoft office\\office14\\microsoft.sharepoint.businessdata.administration.client.xml"), fInfoLevelId=0x0, lpFileInformation=0x31e808 | out: lpFileInformation=0x31e808*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe853200, ftCreationTime.dwHighDateTime=0x1ca24ae, ftLastAccessTime.dwLowDateTime=0x5687ccb0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xf9cd0d20, ftLastWriteTime.dwHighDateTime=0x1d6eb7e, nFileSizeHigh=0x0, nFileSizeLow=0x311c0)) returned 1 [0037.502] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e788) returned 1 [0037.502] MoveFileW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\Office14\\Microsoft.SharePoint.BusinessData.Administration.Client.xml" (normalized: "c:\\program files\\microsoft office\\office14\\microsoft.sharepoint.businessdata.administration.client.xml"), lpNewFileName="C:\\Program Files\\Microsoft Office\\Office14\\Microsoft.SharePoint.BusinessData.Administration.Client.xml" (normalized: "c:\\program files\\microsoft office\\office14\\microsoft.sharepoint.businessdata.administration.client.xml")) returned 1 [0037.503] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\SketchPadTestSchema.xml", nBufferLength=0x105, lpBuffer=0x31e20c, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\Office14\\SketchPadTestSchema.xml", lpFilePart=0x0) returned 0x42 [0037.503] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e700) returned 1 [0037.503] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\SketchPadTestSchema.xml" (normalized: "c:\\program files\\microsoft office\\office14\\sketchpadtestschema.xml"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x274 [0037.503] GetFileType (hFile=0x274) returned 0x1 [0037.503] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e6fc) returned 1 [0037.503] GetFileType (hFile=0x274) returned 0x1 [0037.503] GetFileSize (in: hFile=0x274, lpFileSizeHigh=0x31e808 | out: lpFileSizeHigh=0x31e808*=0x0) returned 0x67 [0037.503] ReadFile (in: hFile=0x274, lpBuffer=0x2639808, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x31e7b4, lpOverlapped=0x0 | out: lpBuffer=0x2639808*, lpNumberOfBytesRead=0x31e7b4*=0x67, lpOverlapped=0x0) returned 1 [0037.504] CloseHandle (hObject=0x274) returned 1 [0037.543] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\SketchPadTestSchema.xml", nBufferLength=0x105, lpBuffer=0x31e1f8, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\Office14\\SketchPadTestSchema.xml", lpFilePart=0x0) returned 0x42 [0037.543] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e6ec) returned 1 [0037.544] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\SketchPadTestSchema.xml" (normalized: "c:\\program files\\microsoft office\\office14\\sketchpadtestschema.xml"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x274 [0037.544] GetFileType (hFile=0x274) returned 0x1 [0037.544] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e6e8) returned 1 [0037.544] GetFileType (hFile=0x274) returned 0x1 [0037.544] WriteFile (in: hFile=0x274, lpBuffer=0x2687f8c*, nNumberOfBytesToWrite=0x70, lpNumberOfBytesWritten=0x31e77c, lpOverlapped=0x0 | out: lpBuffer=0x2687f8c*, lpNumberOfBytesWritten=0x31e77c*=0x70, lpOverlapped=0x0) returned 1 [0037.545] CloseHandle (hObject=0x274) returned 1 [0037.546] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\SketchPadTestSchema.xml", nBufferLength=0x105, lpBuffer=0x31e32c, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\Office14\\SketchPadTestSchema.xml", lpFilePart=0x0) returned 0x42 [0037.546] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\SketchPadTestSchema.xml", nBufferLength=0x105, lpBuffer=0x31e32c, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\Office14\\SketchPadTestSchema.xml", lpFilePart=0x0) returned 0x42 [0037.546] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e78c) returned 1 [0037.546] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\SketchPadTestSchema.xml" (normalized: "c:\\program files\\microsoft office\\office14\\sketchpadtestschema.xml"), fInfoLevelId=0x0, lpFileInformation=0x31e808 | out: lpFileInformation=0x31e808*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd84a0f00, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0x5a980590, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xf9d43140, ftLastWriteTime.dwHighDateTime=0x1d6eb7e, nFileSizeHigh=0x0, nFileSizeLow=0x70)) returned 1 [0037.546] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e788) returned 1 [0037.546] MoveFileW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\Office14\\SketchPadTestSchema.xml" (normalized: "c:\\program files\\microsoft office\\office14\\sketchpadtestschema.xml"), lpNewFileName="C:\\Program Files\\Microsoft Office\\Office14\\SketchPadTestSchema.xml" (normalized: "c:\\program files\\microsoft office\\office14\\sketchpadtestschema.xml")) returned 1 [0037.547] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\SplashScreen.bmp", nBufferLength=0x105, lpBuffer=0x31e20c, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\Office14\\SplashScreen.bmp", lpFilePart=0x0) returned 0x3b [0037.547] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e700) returned 1 [0037.547] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\SplashScreen.bmp" (normalized: "c:\\program files\\microsoft office\\office14\\splashscreen.bmp"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x274 [0037.548] GetFileType (hFile=0x274) returned 0x1 [0037.548] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e6fc) returned 1 [0037.548] GetFileType (hFile=0x274) returned 0x1 [0037.548] GetFileSize (in: hFile=0x274, lpFileSizeHigh=0x31e808 | out: lpFileSizeHigh=0x31e808*=0x0) returned 0x173e8 [0037.548] ReadFile (in: hFile=0x274, lpBuffer=0x364a690, nNumberOfBytesToRead=0x173e8, lpNumberOfBytesRead=0x31e7b4, lpOverlapped=0x0 | out: lpBuffer=0x364a690*, lpNumberOfBytesRead=0x31e7b4*=0x173e8, lpOverlapped=0x0) returned 1 [0037.551] CloseHandle (hObject=0x274) returned 1 [0037.567] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\SplashScreen.bmp", nBufferLength=0x105, lpBuffer=0x31e1f8, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\Office14\\SplashScreen.bmp", lpFilePart=0x0) returned 0x3b [0037.567] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e6ec) returned 1 [0037.567] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\SplashScreen.bmp" (normalized: "c:\\program files\\microsoft office\\office14\\splashscreen.bmp"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x274 [0037.568] GetFileType (hFile=0x274) returned 0x1 [0037.568] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e6e8) returned 1 [0037.568] GetFileType (hFile=0x274) returned 0x1 [0037.568] WriteFile (in: hFile=0x274, lpBuffer=0x36bea78*, nNumberOfBytesToWrite=0x173f0, lpNumberOfBytesWritten=0x31e7a8, lpOverlapped=0x0 | out: lpBuffer=0x36bea78*, lpNumberOfBytesWritten=0x31e7a8*=0x173f0, lpOverlapped=0x0) returned 1 [0037.570] CloseHandle (hObject=0x274) returned 1 [0037.572] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\SplashScreen.bmp", nBufferLength=0x105, lpBuffer=0x31e32c, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\Office14\\SplashScreen.bmp", lpFilePart=0x0) returned 0x3b [0037.572] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\SplashScreen.bmp", nBufferLength=0x105, lpBuffer=0x31e32c, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\Office14\\SplashScreen.bmp", lpFilePart=0x0) returned 0x3b [0037.572] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e78c) returned 1 [0037.572] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\SplashScreen.bmp" (normalized: "c:\\program files\\microsoft office\\office14\\splashscreen.bmp"), fInfoLevelId=0x0, lpFileInformation=0x31e808 | out: lpFileInformation=0x31e808*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd718e200, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0x5aad71f0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xf9d8f400, ftLastWriteTime.dwHighDateTime=0x1d6eb7e, nFileSizeHigh=0x0, nFileSizeLow=0x173f0)) returned 1 [0037.572] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e788) returned 1 [0037.572] MoveFileW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\Office14\\SplashScreen.bmp" (normalized: "c:\\program files\\microsoft office\\office14\\splashscreen.bmp"), lpNewFileName="C:\\Program Files\\Microsoft Office\\Office14\\SplashScreen.bmp" (normalized: "c:\\program files\\microsoft office\\office14\\splashscreen.bmp")) returned 1 [0037.572] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e7bc) returned 1 [0037.572] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033", nBufferLength=0x105, lpBuffer=0x31e2c4, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\Office14\\1033", lpFilePart=0x0) returned 0x2f [0037.572] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\", nBufferLength=0x105, lpBuffer=0x31e298, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\Office14\\1033\\", lpFilePart=0x0) returned 0x30 [0037.573] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\*", lpFindFileData=0x31e4e4 | out: lpFindFileData=0x31e4e4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee2ce510, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xdf0acac0, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0xdf0acac0, ftLastWriteTime.dwHighDateTime=0x1d305f1, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x381cc0 [0037.574] FindNextFileW (in: hFindFile=0x381cc0, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee2ce510, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xdf0acac0, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0xdf0acac0, ftLastWriteTime.dwHighDateTime=0x1d305f1, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0037.575] FindNextFileW (in: hFindFile=0x381cc0, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa4e33900, ftCreationTime.dwHighDateTime=0x1cab7ec, ftLastAccessTime.dwLowDateTime=0x14e98550, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xa4e33900, ftLastWriteTime.dwHighDateTime=0x1cab7ec, nFileSizeHigh=0x0, nFileSizeLow=0x53b0, dwReserved0=0x0, dwReserved1=0x0, cFileName="ACCDDSUI.DLL", cAlternateFileName="")) returned 1 [0037.575] FindNextFileW (in: hFindFile=0x381cc0, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9d407000, ftCreationTime.dwHighDateTime=0x1ca8d26, ftLastAccessTime.dwLowDateTime=0x14ebe6b0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x9d407000, ftLastWriteTime.dwHighDateTime=0x1ca8d26, nFileSizeHigh=0x0, nFileSizeLow=0x79000, dwReserved0=0x0, dwReserved1=0x0, cFileName="ACCESS12.ACC", cAlternateFileName="")) returned 1 [0037.575] FindNextFileW (in: hFindFile=0x381cc0, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xadd30b00, ftCreationTime.dwHighDateTime=0x1cab7ea, ftLastAccessTime.dwLowDateTime=0x15087730, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xadd30b00, ftLastWriteTime.dwHighDateTime=0x1cab7ea, nFileSizeHigh=0x0, nFileSizeLow=0x33b8, dwReserved0=0x0, dwReserved1=0x0, cFileName="ACCOLKI.DLL", cAlternateFileName="")) returned 1 [0037.575] FindNextFileW (in: hFindFile=0x381cc0, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa6146600, ftCreationTime.dwHighDateTime=0x1cab7ec, ftLastAccessTime.dwLowDateTime=0x15087730, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xa6146600, ftLastWriteTime.dwHighDateTime=0x1cab7ec, nFileSizeHigh=0x0, nFileSizeLow=0x26b88, dwReserved0=0x0, dwReserved1=0x0, cFileName="ACCVDTUI.DLL", cAlternateFileName="")) returned 1 [0037.575] FindNextFileW (in: hFindFile=0x381cc0, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5a36c100, ftCreationTime.dwHighDateTime=0x1c6af9a, ftLastAccessTime.dwLowDateTime=0x150ad890, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x5a36c100, ftLastWriteTime.dwHighDateTime=0x1c6af9a, nFileSizeHigh=0x0, nFileSizeLow=0x53de0, dwReserved0=0x0, dwReserved1=0x0, cFileName="ACTIP10.HLP", cAlternateFileName="")) returned 1 [0037.575] FindNextFileW (in: hFindFile=0x381cc0, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xefafd800, ftCreationTime.dwHighDateTime=0x1ca674a, ftLastAccessTime.dwLowDateTime=0x150ad890, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xefafd800, ftLastWriteTime.dwHighDateTime=0x1ca674a, nFileSizeHigh=0x0, nFileSizeLow=0x43590, dwReserved0=0x0, dwReserved1=0x0, cFileName="ACWIZRC.DLL", cAlternateFileName="")) returned 1 [0037.575] FindNextFileW (in: hFindFile=0x381cc0, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb4ab4f00, ftCreationTime.dwHighDateTime=0x1cab7e5, ftLastAccessTime.dwLowDateTime=0x5054cac0, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0xb4ab4f00, ftLastWriteTime.dwHighDateTime=0x1cab7e5, nFileSizeHigh=0x0, nFileSizeLow=0x10f78, dwReserved0=0x0, dwReserved1=0x0, cFileName="AEC.VSL", cAlternateFileName="")) returned 1 [0037.576] FindNextFileW (in: hFindFile=0x381cc0, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8bf8d00, ftCreationTime.dwHighDateTime=0x1cab7e5, ftLastAccessTime.dwLowDateTime=0x5054cac0, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0xa8bf8d00, ftLastWriteTime.dwHighDateTime=0x1cab7e5, nFileSizeHigh=0x0, nFileSizeLow=0xa388, dwReserved0=0x0, dwReserved1=0x0, cFileName="AECUTILS.VSL", cAlternateFileName="")) returned 1 [0037.576] FindNextFileW (in: hFindFile=0x381cc0, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe2b17900, ftCreationTime.dwHighDateTime=0x1c55530, ftLastAccessTime.dwLowDateTime=0x50598d80, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0xe2b17900, ftLastWriteTime.dwHighDateTime=0x1c55530, nFileSizeHigh=0x0, nFileSizeLow=0x69e, dwReserved0=0x0, dwReserved1=0x0, cFileName="ASSET.VRD", cAlternateFileName="")) returned 1 [0037.576] FindNextFileW (in: hFindFile=0x381cc0, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc3375600, ftCreationTime.dwHighDateTime=0x1c2fe69, ftLastAccessTime.dwLowDateTime=0x505e5040, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0xc3375600, ftLastWriteTime.dwHighDateTime=0x1c2fe69, nFileSizeHigh=0x0, nFileSizeLow=0x10d, dwReserved0=0x0, dwReserved1=0x0, cFileName="BASIC.HTM", cAlternateFileName="")) returned 1 [0037.576] FindNextFileW (in: hFindFile=0x381cc0, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1d39f900, ftCreationTime.dwHighDateTime=0x1cac1f4, ftLastAccessTime.dwLowDateTime=0xeee1cd90, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0x1d39f900, ftLastWriteTime.dwHighDateTime=0x1cac1f4, nFileSizeHigh=0x0, nFileSizeLow=0x6180, dwReserved0=0x0, dwReserved1=0x0, cFileName="BCSRuntimeRes.dll", cAlternateFileName="BCSRUN~1.DLL")) returned 1 [0037.576] FindNextFileW (in: hFindFile=0x381cc0, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3b056800, ftCreationTime.dwHighDateTime=0x1cab7c9, ftLastAccessTime.dwLowDateTime=0xee2ce510, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0x3b056800, ftLastWriteTime.dwHighDateTime=0x1cab7c9, nFileSizeHigh=0x0, nFileSizeLow=0x2778, dwReserved0=0x0, dwReserved1=0x0, cFileName="BHOINTL.DLL", cAlternateFileName="")) returned 1 [0037.576] FindNextFileW (in: hFindFile=0x381cc0, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1e1bb530, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x1e1bb530, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x1e1bb530, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Bibliography", cAlternateFileName="BIBLIO~1")) returned 1 [0037.576] FindNextFileW (in: hFindFile=0x381cc0, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xac531400, ftCreationTime.dwHighDateTime=0x1cab7e5, ftLastAccessTime.dwLowDateTime=0x5067d5c0, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0xac531400, ftLastWriteTime.dwHighDateTime=0x1cab7e5, nFileSizeHigh=0x0, nFileSizeLow=0xb390, dwReserved0=0x0, dwReserved1=0x0, cFileName="BSTORM.VSL", cAlternateFileName="")) returned 1 [0037.576] FindNextFileW (in: hFindFile=0x381cc0, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe4d7e200, ftCreationTime.dwHighDateTime=0x1c9c49e, ftLastAccessTime.dwLowDateTime=0x506a3720, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0xe4d7e200, ftLastWriteTime.dwHighDateTime=0x1c9c49e, nFileSizeHigh=0x0, nFileSizeLow=0xd7a, dwReserved0=0x0, dwReserved1=0x0, cFileName="BW.CSS", cAlternateFileName="")) returned 1 [0037.576] FindNextFileW (in: hFindFile=0x381cc0, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xeb09b400, ftCreationTime.dwHighDateTime=0x1c55530, ftLastAccessTime.dwLowDateTime=0x506a3720, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0xeb09b400, ftLastWriteTime.dwHighDateTime=0x1c55530, nFileSizeHigh=0x0, nFileSizeLow=0x860, dwReserved0=0x0, dwReserved1=0x0, cFileName="CALEVENT.VRD", cAlternateFileName="")) returned 1 [0037.577] FindNextFileW (in: hFindFile=0x381cc0, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xbca8c600, ftCreationTime.dwHighDateTime=0x1cab7c8, ftLastAccessTime.dwLowDateTime=0xeec79e70, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xbca8c600, ftLastWriteTime.dwHighDateTime=0x1cab7c8, nFileSizeHigh=0x0, nFileSizeLow=0x2f90, dwReserved0=0x0, dwReserved1=0x0, cFileName="CERTINTL.DLL", cAlternateFileName="")) returned 1 [0037.577] FindNextFileW (in: hFindFile=0x381cc0, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x49538400, ftCreationTime.dwHighDateTime=0x1cab7c9, ftLastAccessTime.dwLowDateTime=0xeec9ffd0, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0x49538400, ftLastWriteTime.dwHighDateTime=0x1cab7c9, nFileSizeHigh=0x0, nFileSizeLow=0x4da8, dwReserved0=0x0, dwReserved1=0x0, cFileName="CLVWINTL.DLL", cAlternateFileName="")) returned 1 [0037.577] FindNextFileW (in: hFindFile=0x381cc0, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa0675200, ftCreationTime.dwHighDateTime=0x1cab7e5, ftLastAccessTime.dwLowDateTime=0x5073bca0, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0xa0675200, ftLastWriteTime.dwHighDateTime=0x1cab7e5, nFileSizeHigh=0x0, nFileSizeLow=0x8990, dwReserved0=0x0, dwReserved1=0x0, cFileName="CMAXRES.DLL", cAlternateFileName="")) returned 1 [0037.577] FindNextFileW (in: hFindFile=0x381cc0, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe4d7e200, ftCreationTime.dwHighDateTime=0x1c9c49e, ftLastAccessTime.dwLowDateTime=0x5073bca0, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0xe4d7e200, ftLastWriteTime.dwHighDateTime=0x1c9c49e, nFileSizeHigh=0x0, nFileSizeLow=0xd7a, dwReserved0=0x0, dwReserved1=0x0, cFileName="COFFEE.CSS", cAlternateFileName="")) returned 1 [0037.577] FindNextFileW (in: hFindFile=0x381cc0, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x62bc4600, ftCreationTime.dwHighDateTime=0x1ca911f, ftLastAccessTime.dwLowDateTime=0xeec9ffd0, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0x62bc4600, ftLastWriteTime.dwHighDateTime=0x1ca911f, nFileSizeHigh=0x0, nFileSizeLow=0x35be, dwReserved0=0x0, dwReserved1=0x0, cFileName="CollectSignatures_Init.xsn", cAlternateFileName="COLLEC~1.XSN")) returned 1 [0037.577] FindNextFileW (in: hFindFile=0x381cc0, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x618b1900, ftCreationTime.dwHighDateTime=0x1ca911f, ftLastAccessTime.dwLowDateTime=0xeecec290, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0x618b1900, ftLastWriteTime.dwHighDateTime=0x1ca911f, nFileSizeHigh=0x0, nFileSizeLow=0x36fb, dwReserved0=0x0, dwReserved1=0x0, cFileName="CollectSignatures_Sign.xsn", cAlternateFileName="COLLEC~2.XSN")) returned 1 [0037.577] FindNextFileW (in: hFindFile=0x381cc0, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x63409700, ftCreationTime.dwHighDateTime=0x1cab7c8, ftLastAccessTime.dwLowDateTime=0xeecec290, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0x63409700, ftLastWriteTime.dwHighDateTime=0x1cab7c8, nFileSizeHigh=0x0, nFileSizeLow=0x3f80, dwReserved0=0x0, dwReserved1=0x0, cFileName="ContactPickerIntl.dll", cAlternateFileName="CONTAC~1.DLL")) returned 1 [0037.577] FindNextFileW (in: hFindFile=0x381cc0, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x73908200, ftCreationTime.dwHighDateTime=0x1ca7ab5, ftLastAccessTime.dwLowDateTime=0xeecec290, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0x73908200, ftLastWriteTime.dwHighDateTime=0x1ca7ab5, nFileSizeHigh=0x0, nFileSizeLow=0x17b5, dwReserved0=0x0, dwReserved1=0x0, cFileName="CT_ROOTS.XML", cAlternateFileName="")) returned 1 [0037.577] FindNextFileW (in: hFindFile=0x381cc0, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeecec290, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xeef015d0, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xeef015d0, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="DataServices", cAlternateFileName="DATASE~1")) returned 1 [0037.578] FindNextFileW (in: hFindFile=0x381cc0, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa0675200, ftCreationTime.dwHighDateTime=0x1cab7e5, ftLastAccessTime.dwLowDateTime=0x50787f60, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0xa0675200, ftLastWriteTime.dwHighDateTime=0x1cab7e5, nFileSizeHigh=0x0, nFileSizeLow=0xcf98, dwReserved0=0x0, dwReserved1=0x0, cFileName="DBENGR.VSL", cAlternateFileName="")) returned 1 [0037.578] FindNextFileW (in: hFindFile=0x381cc0, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x78ea0a00, ftCreationTime.dwHighDateTime=0x1c32175, ftLastAccessTime.dwLowDateTime=0x50787f60, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0x78ea0a00, ftLastWriteTime.dwHighDateTime=0x1c32175, nFileSizeHigh=0x0, nFileSizeLow=0x76000, dwReserved0=0x0, dwReserved1=0x0, cFileName="DBSAMPLE.MDB", cAlternateFileName="")) returned 1 [0037.578] FindNextFileW (in: hFindFile=0x381cc0, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xac531400, ftCreationTime.dwHighDateTime=0x1cab7e5, ftLastAccessTime.dwLowDateTime=0x50787f60, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0xac531400, ftLastWriteTime.dwHighDateTime=0x1cab7e5, nFileSizeHigh=0x0, nFileSizeLow=0x28178, dwReserved0=0x0, dwReserved1=0x0, cFileName="DBWIZ.VSL", cAlternateFileName="")) returned 1 [0037.578] FindNextFileW (in: hFindFile=0x381cc0, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe4d7e200, ftCreationTime.dwHighDateTime=0x1c9c49e, ftLastAccessTime.dwLowDateTime=0x50787f60, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0xe4d7e200, ftLastWriteTime.dwHighDateTime=0x1c9c49e, nFileSizeHigh=0x0, nFileSizeLow=0xd7a, dwReserved0=0x0, dwReserved1=0x0, cFileName="DEFAULT.CSS", cAlternateFileName="")) returned 1 [0037.578] FindNextFileW (in: hFindFile=0x381cc0, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x66f81800, ftCreationTime.dwHighDateTime=0x1c913a0, ftLastAccessTime.dwLowDateTime=0xfd48ff70, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0x66f81800, ftLastWriteTime.dwHighDateTime=0x1c913a0, nFileSizeHigh=0x0, nFileSizeLow=0x19984, dwReserved0=0x0, dwReserved1=0x0, cFileName="Discussion.gta", cAlternateFileName="DISCUS~1.GTA")) returned 1 [0037.578] FindNextFileW (in: hFindFile=0x381cc0, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x45b12e00, ftCreationTime.dwHighDateTime=0x1ca99cf, ftLastAccessTime.dwLowDateTime=0xfd4b60d0, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0x45b12e00, ftLastWriteTime.dwHighDateTime=0x1ca99cf, nFileSizeHigh=0x0, nFileSizeLow=0x587c9, dwReserved0=0x0, dwReserved1=0x0, cFileName="Discussion14.gta", cAlternateFileName="DISCUS~2.GTA")) returned 1 [0037.578] FindNextFileW (in: hFindFile=0x381cc0, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc800ef00, ftCreationTime.dwHighDateTime=0x1cab7d2, ftLastAccessTime.dwLowDateTime=0x507ae0c0, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0xc800ef00, ftLastWriteTime.dwHighDateTime=0x1cab7d2, nFileSizeHigh=0x0, nFileSizeLow=0x2988, dwReserved0=0x0, dwReserved1=0x0, cFileName="DL_RES.DLL", cAlternateFileName="")) returned 1 [0037.578] FindNextFileW (in: hFindFile=0x381cc0, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf0ff9500, ftCreationTime.dwHighDateTime=0x1c55530, ftLastAccessTime.dwLowDateTime=0x507ae0c0, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0xf0ff9500, ftLastWriteTime.dwHighDateTime=0x1c55530, nFileSizeHigh=0x0, nFileSizeLow=0x6bb, dwReserved0=0x0, dwReserved1=0x0, cFileName="DOORSCHD.VRD", cAlternateFileName="")) returned 1 [0037.580] FindNextFileW (in: hFindFile=0x381cc0, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb117c800, ftCreationTime.dwHighDateTime=0x1cab7e5, ftLastAccessTime.dwLowDateTime=0x507ae0c0, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0xb117c800, ftLastWriteTime.dwHighDateTime=0x1cab7e5, nFileSizeHigh=0x0, nFileSizeLow=0xfd68, dwReserved0=0x0, dwReserved1=0x0, cFileName="DRILLDWN.VSL", cAlternateFileName="")) returned 1 [0037.581] FindNextFileW (in: hFindFile=0x381cc0, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4bb9dc00, ftCreationTime.dwHighDateTime=0x1cab7d1, ftLastAccessTime.dwLowDateTime=0x507d4220, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0x4bb9dc00, ftLastWriteTime.dwHighDateTime=0x1cab7d1, nFileSizeHigh=0x0, nFileSizeLow=0x9760, dwReserved0=0x0, dwReserved1=0x0, cFileName="DWGCNV.VSL", cAlternateFileName="")) returned 1 [0037.581] FindNextFileW (in: hFindFile=0x381cc0, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc800ef00, ftCreationTime.dwHighDateTime=0x1cab7d2, ftLastAccessTime.dwLowDateTime=0x507fa380, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0xc800ef00, ftLastWriteTime.dwHighDateTime=0x1cab7d2, nFileSizeHigh=0x0, nFileSizeLow=0x3f60, dwReserved0=0x0, dwReserved1=0x0, cFileName="DWGDPRES.DLL", cAlternateFileName="")) returned 1 [0037.581] FindNextFileW (in: hFindFile=0x381cc0, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x62bc4600, ftCreationTime.dwHighDateTime=0x1ca911f, ftLastAccessTime.dwLowDateTime=0xeed123f0, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0x62bc4600, ftLastWriteTime.dwHighDateTime=0x1ca911f, nFileSizeHigh=0x0, nFileSizeLow=0x388e, dwReserved0=0x0, dwReserved1=0x0, cFileName="EADOCUMENTAPPROVAL_INIT.XSN", cAlternateFileName="EADOCU~1.XSN")) returned 1 [0037.581] FindNextFileW (in: hFindFile=0x381cc0, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x618b1900, ftCreationTime.dwHighDateTime=0x1ca911f, ftLastAccessTime.dwLowDateTime=0xeed123f0, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0x618b1900, ftLastWriteTime.dwHighDateTime=0x1ca911f, nFileSizeHigh=0x0, nFileSizeLow=0x4d7e, dwReserved0=0x0, dwReserved1=0x0, cFileName="EADOCUMENTAPPROVAL_REVIEW.XSN", cAlternateFileName="EADOCU~2.XSN")) returned 1 [0037.581] FindNextFileW (in: hFindFile=0x381cc0, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xbdd9f300, ftCreationTime.dwHighDateTime=0x1cab7c8, ftLastAccessTime.dwLowDateTime=0xeed123f0, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xbdd9f300, ftLastWriteTime.dwHighDateTime=0x1cab7c8, nFileSizeHigh=0x0, nFileSizeLow=0xc990, dwReserved0=0x0, dwReserved1=0x0, cFileName="EAWFINTL.DLL", cAlternateFileName="")) returned 1 [0037.581] FindNextFileW (in: hFindFile=0x381cc0, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xad844100, ftCreationTime.dwHighDateTime=0x1cab7e5, ftLastAccessTime.dwLowDateTime=0x507fa380, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0xad844100, ftLastWriteTime.dwHighDateTime=0x1cab7e5, nFileSizeHigh=0x0, nFileSizeLow=0x4d80, dwReserved0=0x0, dwReserved1=0x0, cFileName="EDITRES.DLL", cAlternateFileName="")) returned 1 [0037.581] FindNextFileW (in: hFindFile=0x381cc0, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1e6b2600, ftCreationTime.dwHighDateTime=0x1cac1f4, ftLastAccessTime.dwLowDateTime=0xeed38550, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0x1e6b2600, ftLastWriteTime.dwHighDateTime=0x1cac1f4, nFileSizeHigh=0x0, nFileSizeLow=0x5f88, dwReserved0=0x0, dwReserved1=0x0, cFileName="EntityPickerIntl.dll", cAlternateFileName="ENTITY~1.DLL")) returned 1 [0037.581] FindNextFileW (in: hFindFile=0x381cc0, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe1e9b800, ftCreationTime.dwHighDateTime=0x1cac9b3, ftLastAccessTime.dwLowDateTime=0xee1a70, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xe1e9b800, ftLastWriteTime.dwHighDateTime=0x1cac9b3, nFileSizeHigh=0x0, nFileSizeLow=0x4388, dwReserved0=0x0, dwReserved1=0x0, cFileName="ENVELOPR.DLL", cAlternateFileName="")) returned 1 [0037.581] FindNextFileW (in: hFindFile=0x381cc0, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2411fa00, ftCreationTime.dwHighDateTime=0x1cac9b2, ftLastAccessTime.dwLowDateTime=0xee1a70, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x2411fa00, ftLastWriteTime.dwHighDateTime=0x1cac9b2, nFileSizeHigh=0x0, nFileSizeLow=0x3580, dwReserved0=0x0, dwReserved1=0x0, cFileName="ENVELOPR.DLL.IDX_DLL", cAlternateFileName="ENVELO~1.IDX")) returned 1 [0037.582] FindNextFileW (in: hFindFile=0x381cc0, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf9e19600, ftCreationTime.dwHighDateTime=0x1c56bc4, ftLastAccessTime.dwLowDateTime=0x508b8a60, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0xf9e19600, ftLastWriteTime.dwHighDateTime=0x1c56bc4, nFileSizeHigh=0x0, nFileSizeLow=0x6a3, dwReserved0=0x0, dwReserved1=0x0, cFileName="EQPLIST.VRD", cAlternateFileName="")) returned 1 [0037.582] FindNextFileW (in: hFindFile=0x381cc0, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8a197900, ftCreationTime.dwHighDateTime=0x1ca8073, ftLastAccessTime.dwLowDateTime=0xfa246eb0, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0x8a197900, ftLastWriteTime.dwHighDateTime=0x1ca8073, nFileSizeHigh=0x0, nFileSizeLow=0x6b2dfe, dwReserved0=0x0, dwReserved1=0x0, cFileName="EXCEL.DEV.HXS", cAlternateFileName="EXCELD~1.HXS")) returned 1 [0037.582] FindNextFileW (in: hFindFile=0x381cc0, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf2472900, ftCreationTime.dwHighDateTime=0x1c9ff31, ftLastAccessTime.dwLowDateTime=0xfa246eb0, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xf2472900, ftLastWriteTime.dwHighDateTime=0x1c9ff31, nFileSizeHigh=0x0, nFileSizeLow=0x281, dwReserved0=0x0, dwReserved1=0x0, cFileName="EXCEL.DEV_COL.HXC", cAlternateFileName="EXCELD~1.HXC")) returned 1 [0037.582] FindNextFileW (in: hFindFile=0x381cc0, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1c79b500, ftCreationTime.dwHighDateTime=0x1c561aa, ftLastAccessTime.dwLowDateTime=0xfa246eb0, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0x1c79b500, ftLastWriteTime.dwHighDateTime=0x1c561aa, nFileSizeHigh=0x0, nFileSizeLow=0xd1, dwReserved0=0x0, dwReserved1=0x0, cFileName="EXCEL.DEV_COL.HXT", cAlternateFileName="EXCELD~1.HXT")) returned 1 [0037.582] FindNextFileW (in: hFindFile=0x381cc0, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1c79b500, ftCreationTime.dwHighDateTime=0x1c561aa, ftLastAccessTime.dwLowDateTime=0xfa246eb0, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0x1c79b500, ftLastWriteTime.dwHighDateTime=0x1c561aa, nFileSizeHigh=0x0, nFileSizeLow=0x72, dwReserved0=0x0, dwReserved1=0x0, cFileName="EXCEL.DEV_F_COL.HXK", cAlternateFileName="EXCELD~1.HXK")) returned 1 [0037.582] FindNextFileW (in: hFindFile=0x381cc0, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1c79b500, ftCreationTime.dwHighDateTime=0x1c561aa, ftLastAccessTime.dwLowDateTime=0xfa246eb0, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0x1c79b500, ftLastWriteTime.dwHighDateTime=0x1c561aa, nFileSizeHigh=0x0, nFileSizeLow=0x71, dwReserved0=0x0, dwReserved1=0x0, cFileName="EXCEL.DEV_K_COL.HXK", cAlternateFileName="EXCELD~2.HXK")) returned 1 [0037.582] FindNextFileW (in: hFindFile=0x381cc0, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xdef99800, ftCreationTime.dwHighDateTime=0x1ca9370, ftLastAccessTime.dwLowDateTime=0xfa293170, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xdef99800, ftLastWriteTime.dwHighDateTime=0x1ca9370, nFileSizeHigh=0x0, nFileSizeLow=0x7770e6, dwReserved0=0x0, dwReserved1=0x0, cFileName="EXCEL.HXS", cAlternateFileName="")) returned 1 [0037.582] FindNextFileW (in: hFindFile=0x381cc0, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf2472900, ftCreationTime.dwHighDateTime=0x1c9ff31, ftLastAccessTime.dwLowDateTime=0xfa293170, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xf2472900, ftLastWriteTime.dwHighDateTime=0x1c9ff31, nFileSizeHigh=0x0, nFileSizeLow=0x26d, dwReserved0=0x0, dwReserved1=0x0, cFileName="EXCEL_COL.HXC", cAlternateFileName="EXCEL_~1.HXC")) returned 1 [0037.583] FindNextFileW (in: hFindFile=0x381cc0, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x17b50100, ftCreationTime.dwHighDateTime=0x1c561aa, ftLastAccessTime.dwLowDateTime=0xfa2b92d0, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0x17b50100, ftLastWriteTime.dwHighDateTime=0x1c561aa, nFileSizeHigh=0x0, nFileSizeLow=0xcd, dwReserved0=0x0, dwReserved1=0x0, cFileName="EXCEL_COL.HXT", cAlternateFileName="EXCEL_~1.HXT")) returned 1 [0037.583] FindNextFileW (in: hFindFile=0x381cc0, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x17b50100, ftCreationTime.dwHighDateTime=0x1c561aa, ftLastAccessTime.dwLowDateTime=0xfa2b92d0, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0x17b50100, ftLastWriteTime.dwHighDateTime=0x1c561aa, nFileSizeHigh=0x0, nFileSizeLow=0x72, dwReserved0=0x0, dwReserved1=0x0, cFileName="EXCEL_F_COL.HXK", cAlternateFileName="EXCEL_~1.HXK")) returned 1 [0037.583] FindNextFileW (in: hFindFile=0x381cc0, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x17b50100, ftCreationTime.dwHighDateTime=0x1c561aa, ftLastAccessTime.dwLowDateTime=0xfa5d8fb0, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0x17b50100, ftLastWriteTime.dwHighDateTime=0x1c561aa, nFileSizeHigh=0x0, nFileSizeLow=0x71, dwReserved0=0x0, dwReserved1=0x0, cFileName="EXCEL_K_COL.HXK", cAlternateFileName="EXCEL_~2.HXK")) returned 1 [0037.583] FindNextFileW (in: hFindFile=0x381cc0, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x89452700, ftCreationTime.dwHighDateTime=0x1cacb3b, ftLastAccessTime.dwLowDateTime=0x19ac4550, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x89452700, ftLastWriteTime.dwHighDateTime=0x1cacb3b, nFileSizeHigh=0x0, nFileSizeLow=0x2f80, dwReserved0=0x0, dwReserved1=0x0, cFileName="EXPTOOWS.DLL", cAlternateFileName="")) returned 1 [0037.583] FindNextFileW (in: hFindFile=0x381cc0, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x70cfb800, ftCreationTime.dwHighDateTime=0x1cac79b, ftLastAccessTime.dwLowDateTime=0x19ac4550, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x70cfb800, ftLastWriteTime.dwHighDateTime=0x1cac79b, nFileSizeHigh=0x0, nFileSizeLow=0x1c000, dwReserved0=0x0, dwReserved1=0x0, cFileName="EXPTOOWS.XLA", cAlternateFileName="")) returned 1 [0037.583] FindNextFileW (in: hFindFile=0x381cc0, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa52c0600, ftCreationTime.dwHighDateTime=0x1cab7e5, ftLastAccessTime.dwLowDateTime=0x508debc0, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0xa52c0600, ftLastWriteTime.dwHighDateTime=0x1cab7e5, nFileSizeHigh=0x0, nFileSizeLow=0x13f68, dwReserved0=0x0, dwReserved1=0x0, cFileName="FACILITY.VSL", cAlternateFileName="")) returned 1 [0037.583] FindNextFileW (in: hFindFile=0x381cc0, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x83340500, ftCreationTime.dwHighDateTime=0x1c937e6, ftLastAccessTime.dwLowDateTime=0x50904d20, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0x83340500, ftLastWriteTime.dwHighDateTime=0x1c937e6, nFileSizeHigh=0x0, nFileSizeLow=0x7ec, dwReserved0=0x0, dwReserved1=0x0, cFileName="FLOCH.VRD", cAlternateFileName="")) returned 1 [0037.583] FindNextFileW (in: hFindFile=0x381cc0, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe4d7e200, ftCreationTime.dwHighDateTime=0x1c9c49e, ftLastAccessTime.dwLowDateTime=0x50904d20, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0xe4d7e200, ftLastWriteTime.dwHighDateTime=0x1c9c49e, nFileSizeHigh=0x0, nFileSizeLow=0xd7a, dwReserved0=0x0, dwReserved1=0x0, cFileName="FOREST.CSS", cAlternateFileName="")) returned 1 [0037.583] FindNextFileW (in: hFindFile=0x381cc0, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe4d7e200, ftCreationTime.dwHighDateTime=0x1c9c49e, ftLastAccessTime.dwLowDateTime=0x50950fe0, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0xe4d7e200, ftLastWriteTime.dwHighDateTime=0x1c9c49e, nFileSizeHigh=0x0, nFileSizeLow=0xd7a, dwReserved0=0x0, dwReserved1=0x0, cFileName="GANTT.CSS", cAlternateFileName="")) returned 1 [0037.584] FindNextFileW (in: hFindFile=0x381cc0, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xfbba2a00, ftCreationTime.dwHighDateTime=0x1c55530, ftLastAccessTime.dwLowDateTime=0x50950fe0, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0xfbba2a00, ftLastWriteTime.dwHighDateTime=0x1c55530, nFileSizeHigh=0x0, nFileSizeLow=0x7fb, dwReserved0=0x0, dwReserved1=0x0, cFileName="GANTT.VRD", cAlternateFileName="")) returned 1 [0037.584] FindNextFileW (in: hFindFile=0x381cc0, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb4ab4f00, ftCreationTime.dwHighDateTime=0x1cab7e5, ftLastAccessTime.dwLowDateTime=0x50950fe0, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0xb4ab4f00, ftLastWriteTime.dwHighDateTime=0x1cab7e5, nFileSizeHigh=0x0, nFileSizeLow=0x4e570, dwReserved0=0x0, dwReserved1=0x0, cFileName="GANTT.VSL", cAlternateFileName="")) returned 1 [0037.584] FindNextFileW (in: hFindFile=0x381cc0, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x74d63000, ftCreationTime.dwHighDateTime=0x1bbd3c6, ftLastAccessTime.dwLowDateTime=0xeedd0ad0, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0x74d63000, ftLastWriteTime.dwHighDateTime=0x1bbd3c6, nFileSizeHigh=0x0, nFileSizeLow=0x2da00, dwReserved0=0x0, dwReserved1=0x0, cFileName="GR8GALRY.GRA", cAlternateFileName="")) returned 1 [0037.584] FindNextFileW (in: hFindFile=0x381cc0, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x61152c00, ftCreationTime.dwHighDateTime=0x1c6e5fa, ftLastAccessTime.dwLowDateTime=0xeedd0ad0, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0x61152c00, ftLastWriteTime.dwHighDateTime=0x1c6e5fa, nFileSizeHigh=0x0, nFileSizeLow=0x94f26, dwReserved0=0x0, dwReserved1=0x0, cFileName="GRAPH.HXS", cAlternateFileName="")) returned 1 [0037.584] FindNextFileW (in: hFindFile=0x381cc0, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf2472900, ftCreationTime.dwHighDateTime=0x1c9ff31, ftLastAccessTime.dwLowDateTime=0xeedd0ad0, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xf2472900, ftLastWriteTime.dwHighDateTime=0x1c9ff31, nFileSizeHigh=0x0, nFileSizeLow=0x26d, dwReserved0=0x0, dwReserved1=0x0, cFileName="GRAPH_COL.HXC", cAlternateFileName="GRAPH_~1.HXC")) returned 1 [0037.584] FindNextFileW (in: hFindFile=0x381cc0, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x27344a00, ftCreationTime.dwHighDateTime=0x1c561aa, ftLastAccessTime.dwLowDateTime=0xeedd0ad0, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0x27344a00, ftLastWriteTime.dwHighDateTime=0x1c561aa, nFileSizeHigh=0x0, nFileSizeLow=0xcd, dwReserved0=0x0, dwReserved1=0x0, cFileName="GRAPH_COL.HXT", cAlternateFileName="GRAPH_~1.HXT")) returned 1 [0037.586] FindNextFileW (in: hFindFile=0x381cc0, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x27344a00, ftCreationTime.dwHighDateTime=0x1c561aa, ftLastAccessTime.dwLowDateTime=0xeedd0ad0, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0x27344a00, ftLastWriteTime.dwHighDateTime=0x1c561aa, nFileSizeHigh=0x0, nFileSizeLow=0x72, dwReserved0=0x0, dwReserved1=0x0, cFileName="GRAPH_F_COL.HXK", cAlternateFileName="GRAPH_~1.HXK")) returned 1 [0037.586] FindNextFileW (in: hFindFile=0x381cc0, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x27344a00, ftCreationTime.dwHighDateTime=0x1c561aa, ftLastAccessTime.dwLowDateTime=0xeedd0ad0, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0x27344a00, ftLastWriteTime.dwHighDateTime=0x1c561aa, nFileSizeHigh=0x0, nFileSizeLow=0x71, dwReserved0=0x0, dwReserved1=0x0, cFileName="GRAPH_K_COL.HXK", cAlternateFileName="GRAPH_~2.HXK")) returned 1 [0037.586] FindNextFileW (in: hFindFile=0x381cc0, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8748a300, ftCreationTime.dwHighDateTime=0x1cac1e0, ftLastAccessTime.dwLowDateTime=0xeedf6c30, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0x8748a300, ftLastWriteTime.dwHighDateTime=0x1cac1e0, nFileSizeHigh=0x0, nFileSizeLow=0x32d80, dwReserved0=0x0, dwReserved1=0x0, cFileName="GRINTL32.DLL", cAlternateFileName="")) returned 1 [0037.586] FindNextFileW (in: hFindFile=0x381cc0, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3cc82600, ftCreationTime.dwHighDateTime=0x1cac1e2, ftLastAccessTime.dwLowDateTime=0xeedd0ad0, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0x3cc82600, ftLastWriteTime.dwHighDateTime=0x1cac1e2, nFileSizeHigh=0x0, nFileSizeLow=0x9380, dwReserved0=0x0, dwReserved1=0x0, cFileName="GRINTL32.DLL.IDX_DLL", cAlternateFileName="GRINTL~1.IDX")) returned 1 [0037.586] FindNextFileW (in: hFindFile=0x381cc0, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3cc82600, ftCreationTime.dwHighDateTime=0x1cac1e2, ftLastAccessTime.dwLowDateTime=0xeedf6c30, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0x3cc82600, ftLastWriteTime.dwHighDateTime=0x1cac1e2, nFileSizeHigh=0x0, nFileSizeLow=0x18780, dwReserved0=0x0, dwReserved1=0x0, cFileName="GRINTL32.REST.IDX_DLL", cAlternateFileName="GRINTL~2.IDX")) returned 1 [0037.587] FindNextFileW (in: hFindFile=0x381cc0, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8748a300, ftCreationTime.dwHighDateTime=0x1cac1e0, ftLastAccessTime.dwLowDateTime=0xeedf6c30, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0x8748a300, ftLastWriteTime.dwHighDateTime=0x1cac1e0, nFileSizeHigh=0x0, nFileSizeLow=0x3180, dwReserved0=0x0, dwReserved1=0x0, cFileName="GRLEX.DLL", cAlternateFileName="")) returned 1 [0037.587] FindNextFileW (in: hFindFile=0x381cc0, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xdd9dd600, ftCreationTime.dwHighDateTime=0x1cacb3e, ftLastAccessTime.dwLowDateTime=0xfd5e6bd0, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xdd9dd600, ftLastWriteTime.dwHighDateTime=0x1cacb3e, nFileSizeHigh=0x0, nFileSizeLow=0xbb9, dwReserved0=0x0, dwReserved1=0x0, cFileName="Groove Starter Template.xsn", cAlternateFileName="GROOVE~1.XSN")) returned 1 [0037.587] FindNextFileW (in: hFindFile=0x381cc0, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8c7bd300, ftCreationTime.dwHighDateTime=0x1ca8073, ftLastAccessTime.dwLowDateTime=0xfd5747b0, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0x8c7bd300, ftLastWriteTime.dwHighDateTime=0x1ca8073, nFileSizeHigh=0x0, nFileSizeLow=0x22c410, dwReserved0=0x0, dwReserved1=0x0, cFileName="GROOVE.HXS", cAlternateFileName="")) returned 1 [0037.587] FindNextFileW (in: hFindFile=0x381cc0, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd3f79f0, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xfd443cb0, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xfd443cb0, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="GrooveForms5", cAlternateFileName="GROOVE~1")) returned 1 [0037.587] FindNextFileW (in: hFindFile=0x381cc0, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8c91e000, ftCreationTime.dwHighDateTime=0x1cacb46, ftLastAccessTime.dwLowDateTime=0xfd5e6bd0, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0x8c91e000, ftLastWriteTime.dwHighDateTime=0x1cacb46, nFileSizeHigh=0x0, nFileSizeLow=0x863360, dwReserved0=0x0, dwReserved1=0x0, cFileName="GrooveIntlResource.dll", cAlternateFileName="GROOVE~1.DLL")) returned 1 [0037.587] FindNextFileW (in: hFindFile=0x381cc0, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf2472900, ftCreationTime.dwHighDateTime=0x1c9ff31, ftLastAccessTime.dwLowDateTime=0xfd59a910, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xf2472900, ftLastWriteTime.dwHighDateTime=0x1c9ff31, nFileSizeHigh=0x0, nFileSizeLow=0x272, dwReserved0=0x0, dwReserved1=0x0, cFileName="GROOVE_COL.HXC", cAlternateFileName="GROOVE~1.HXC")) returned 1 [0037.587] FindNextFileW (in: hFindFile=0x381cc0, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd5e7b500, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0xfd59a910, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xd5e7b500, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0xda, dwReserved0=0x0, dwReserved1=0x0, cFileName="GROOVE_COL.HXT", cAlternateFileName="GROOVE~1.HXT")) returned 1 [0037.587] FindNextFileW (in: hFindFile=0x381cc0, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd5e7b500, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0xfd59a910, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xd5e7b500, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0x6f, dwReserved0=0x0, dwReserved1=0x0, cFileName="GROOVE_F_COL.HXK", cAlternateFileName="GROOVE~1.HXK")) returned 1 [0037.588] FindNextFileW (in: hFindFile=0x381cc0, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd5e7b500, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0xfd59a910, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xd5e7b500, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0x6e, dwReserved0=0x0, dwReserved1=0x0, cFileName="GROOVE_K_COL.HXK", cAlternateFileName="GROOVE~2.HXK")) returned 1 [0037.588] FindNextFileW (in: hFindFile=0x381cc0, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa0675200, ftCreationTime.dwHighDateTime=0x1cab7e5, ftLastAccessTime.dwLowDateTime=0x50977140, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0xa0675200, ftLastWriteTime.dwHighDateTime=0x1cab7e5, nFileSizeHigh=0x0, nFileSizeLow=0x8d68, dwReserved0=0x0, dwReserved1=0x0, cFileName="HVAC.VSL", cAlternateFileName="")) returned 1 [0037.588] FindNextFileW (in: hFindFile=0x381cc0, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7ede00, ftCreationTime.dwHighDateTime=0x1c55531, ftLastAccessTime.dwLowDateTime=0x5099d2a0, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0x7ede00, ftLastWriteTime.dwHighDateTime=0x1c55531, nFileSizeHigh=0x0, nFileSizeLow=0x77f, dwReserved0=0x0, dwReserved1=0x0, cFileName="HVACDIFF.VRD", cAlternateFileName="")) returned 1 [0037.588] FindNextFileW (in: hFindFile=0x381cc0, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7ede00, ftCreationTime.dwHighDateTime=0x1c55531, ftLastAccessTime.dwLowDateTime=0x5099d2a0, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0x7ede00, ftLastWriteTime.dwHighDateTime=0x1c55531, nFileSizeHigh=0x0, nFileSizeLow=0x51d, dwReserved0=0x0, dwReserved1=0x0, cFileName="HVACDUCT.VRD", cAlternateFileName="")) returned 1 [0037.588] FindNextFileW (in: hFindFile=0x381cc0, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe1f53500, ftCreationTime.dwHighDateTime=0x1cacf2a, ftLastAccessTime.dwLowDateTime=0x11231710, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xe1f53500, ftLastWriteTime.dwHighDateTime=0x1cacf2a, nFileSizeHigh=0x0, nFileSizeLow=0x75790, dwReserved0=0x0, dwReserved1=0x0, cFileName="INFINTL.DLL", cAlternateFileName="")) returned 1 [0037.588] FindNextFileW (in: hFindFile=0x381cc0, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x98679500, ftCreationTime.dwHighDateTime=0x1ca8073, ftLastAccessTime.dwLowDateTime=0x11257870, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x98679500, ftLastWriteTime.dwHighDateTime=0x1ca8073, nFileSizeHigh=0x0, nFileSizeLow=0x174d06, dwReserved0=0x0, dwReserved1=0x0, cFileName="INFOPATH.HXS", cAlternateFileName="")) returned 1 [0037.588] FindNextFileW (in: hFindFile=0x381cc0, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x98679500, ftCreationTime.dwHighDateTime=0x1ca8073, ftLastAccessTime.dwLowDateTime=0x11257870, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x98679500, ftLastWriteTime.dwHighDateTime=0x1ca8073, nFileSizeHigh=0x0, nFileSizeLow=0x697e2, dwReserved0=0x0, dwReserved1=0x0, cFileName="INFOPATHEDITOR.HXS", cAlternateFileName="INFOPA~1.HXS")) returned 1 [0037.588] FindNextFileW (in: hFindFile=0x381cc0, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1c67200, ftCreationTime.dwHighDateTime=0x1c9ff32, ftLastAccessTime.dwLowDateTime=0x1127d9d0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x1c67200, ftLastWriteTime.dwHighDateTime=0x1c9ff32, nFileSizeHigh=0x0, nFileSizeLow=0x29a, dwReserved0=0x0, dwReserved1=0x0, cFileName="INFOPATHEDITOR_COL.HXC", cAlternateFileName="INFOPA~2.HXC")) returned 1 [0037.588] FindNextFileW (in: hFindFile=0x381cc0, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xbcc29600, ftCreationTime.dwHighDateTime=0x1c59321, ftLastAccessTime.dwLowDateTime=0x1127d9d0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xbcc29600, ftLastWriteTime.dwHighDateTime=0x1c59321, nFileSizeHigh=0x0, nFileSizeLow=0xd6, dwReserved0=0x0, dwReserved1=0x0, cFileName="INFOPATHEDITOR_COL.HXT", cAlternateFileName="INFOPA~2.HXT")) returned 1 [0037.589] FindNextFileW (in: hFindFile=0x381cc0, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xbcc29600, ftCreationTime.dwHighDateTime=0x1c59321, ftLastAccessTime.dwLowDateTime=0x1127d9d0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xbcc29600, ftLastWriteTime.dwHighDateTime=0x1c59321, nFileSizeHigh=0x0, nFileSizeLow=0x72, dwReserved0=0x0, dwReserved1=0x0, cFileName="INFOPATHEDITOR_F_COL.HXK", cAlternateFileName="INFOPA~3.HXK")) returned 1 [0037.589] FindNextFileW (in: hFindFile=0x381cc0, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xbcc29600, ftCreationTime.dwHighDateTime=0x1c59321, ftLastAccessTime.dwLowDateTime=0x1127d9d0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xbcc29600, ftLastWriteTime.dwHighDateTime=0x1c59321, nFileSizeHigh=0x0, nFileSizeLow=0x71, dwReserved0=0x0, dwReserved1=0x0, cFileName="INFOPATHEDITOR_K_COL.HXK", cAlternateFileName="INFOPA~4.HXK")) returned 1 [0037.589] FindNextFileW (in: hFindFile=0x381cc0, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1c67200, ftCreationTime.dwHighDateTime=0x1c9ff32, ftLastAccessTime.dwLowDateTime=0x11257870, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x1c67200, ftLastWriteTime.dwHighDateTime=0x1c9ff32, nFileSizeHigh=0x0, nFileSizeLow=0x27c, dwReserved0=0x0, dwReserved1=0x0, cFileName="INFOPATH_COL.HXC", cAlternateFileName="INFOPA~1.HXC")) returned 1 [0037.589] FindNextFileW (in: hFindFile=0x381cc0, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2f8c8500, ftCreationTime.dwHighDateTime=0x1c561aa, ftLastAccessTime.dwLowDateTime=0x11257870, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x2f8c8500, ftLastWriteTime.dwHighDateTime=0x1c561aa, nFileSizeHigh=0x0, nFileSizeLow=0xd0, dwReserved0=0x0, dwReserved1=0x0, cFileName="INFOPATH_COL.HXT", cAlternateFileName="INFOPA~1.HXT")) returned 1 [0037.589] FindNextFileW (in: hFindFile=0x381cc0, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2f8c8500, ftCreationTime.dwHighDateTime=0x1c561aa, ftLastAccessTime.dwLowDateTime=0x11257870, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x2f8c8500, ftLastWriteTime.dwHighDateTime=0x1c561aa, nFileSizeHigh=0x0, nFileSizeLow=0x72, dwReserved0=0x0, dwReserved1=0x0, cFileName="INFOPATH_F_COL.HXK", cAlternateFileName="INFOPA~1.HXK")) returned 1 [0037.589] FindNextFileW (in: hFindFile=0x381cc0, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2f8c8500, ftCreationTime.dwHighDateTime=0x1c561aa, ftLastAccessTime.dwLowDateTime=0x11257870, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x2f8c8500, ftLastWriteTime.dwHighDateTime=0x1c561aa, nFileSizeHigh=0x0, nFileSizeLow=0x71, dwReserved0=0x0, dwReserved1=0x0, cFileName="INFOPATH_K_COL.HXK", cAlternateFileName="INFOPA~2.HXK")) returned 1 [0037.589] FindNextFileW (in: hFindFile=0x381cc0, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x108a400, ftCreationTime.dwHighDateTime=0x1c56bc5, ftLastAccessTime.dwLowDateTime=0x509c3400, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0x108a400, ftLastWriteTime.dwHighDateTime=0x1c56bc5, nFileSizeHigh=0x0, nFileSizeLow=0x76b, dwReserved0=0x0, dwReserved1=0x0, cFileName="INSTLIST.VRD", cAlternateFileName="")) returned 1 [0037.589] FindNextFileW (in: hFindFile=0x381cc0, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x37deba00, ftCreationTime.dwHighDateTime=0x1c56bc5, ftLastAccessTime.dwLowDateTime=0x509c3400, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0x37deba00, ftLastWriteTime.dwHighDateTime=0x1c56bc5, nFileSizeHigh=0x0, nFileSizeLow=0x332, dwReserved0=0x0, dwReserved1=0x0, cFileName="INVENTRY.VRD", cAlternateFileName="")) returned 1 [0037.589] FindNextFileW (in: hFindFile=0x381cc0, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd3491f00, ftCreationTime.dwHighDateTime=0x1ca0f52, ftLastAccessTime.dwLowDateTime=0xc7a8630, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xd3491f00, ftLastWriteTime.dwHighDateTime=0x1ca0f52, nFileSizeHigh=0x0, nFileSizeLow=0x2bc8, dwReserved0=0x0, dwReserved1=0x0, cFileName="Invite or Link.one", cAlternateFileName="INVITE~1.ONE")) returned 1 [0037.594] FindNextFileW (in: hFindFile=0x381cc0, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe1f53500, ftCreationTime.dwHighDateTime=0x1cacf2a, ftLastAccessTime.dwLowDateTime=0x1127d9d0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xe1f53500, ftLastWriteTime.dwHighDateTime=0x1cacf2a, nFileSizeHigh=0x0, nFileSizeLow=0x22a590, dwReserved0=0x0, dwReserved1=0x0, cFileName="IPDSINTL.DLL", cAlternateFileName="")) returned 1 [0037.594] FindNextFileW (in: hFindFile=0x381cc0, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe1f53500, ftCreationTime.dwHighDateTime=0x1cacf2a, ftLastAccessTime.dwLowDateTime=0xeee1cd90, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xe1f53500, ftLastWriteTime.dwHighDateTime=0x1cacf2a, nFileSizeHigh=0x0, nFileSizeLow=0xd7b90, dwReserved0=0x0, dwReserved1=0x0, cFileName="IPEDINTL.DLL", cAlternateFileName="")) returned 1 [0037.594] FindNextFileW (in: hFindFile=0x381cc0, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe1f53500, ftCreationTime.dwHighDateTime=0x1cacf2a, ftLastAccessTime.dwLowDateTime=0x112a3b30, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xe1f53500, ftLastWriteTime.dwHighDateTime=0x1cacf2a, nFileSizeHigh=0x0, nFileSizeLow=0x3e7b0, dwReserved0=0x0, dwReserved1=0x0, cFileName="IPOLKINTL.DLL", cAlternateFileName="IPOLKI~1.DLL")) returned 1 [0037.595] FindNextFileW (in: hFindFile=0x381cc0, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x66f81800, ftCreationTime.dwHighDateTime=0x1c913a0, ftLastAccessTime.dwLowDateTime=0xfd5e6bd0, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0x66f81800, ftLastWriteTime.dwHighDateTime=0x1c913a0, nFileSizeHigh=0x0, nFileSizeLow=0x3cebf, dwReserved0=0x0, dwReserved1=0x0, cFileName="Issue Tracking.gta", cAlternateFileName="ISSUET~1.GTA")) returned 1 [0037.595] FindNextFileW (in: hFindFile=0x381cc0, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe3a6b500, ftCreationTime.dwHighDateTime=0x1c9c49e, ftLastAccessTime.dwLowDateTime=0x509e9560, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0xe3a6b500, ftLastWriteTime.dwHighDateTime=0x1c9c49e, nFileSizeHigh=0x0, nFileSizeLow=0xd7a, dwReserved0=0x0, dwReserved1=0x0, cFileName="JADE.CSS", cAlternateFileName="")) returned 1 [0037.595] FindNextFileW (in: hFindFile=0x381cc0, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xafe69b00, ftCreationTime.dwHighDateTime=0x1cab7e5, ftLastAccessTime.dwLowDateTime=0x50a35820, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0xafe69b00, ftLastWriteTime.dwHighDateTime=0x1cab7e5, nFileSizeHigh=0x0, nFileSizeLow=0x9980, dwReserved0=0x0, dwReserved1=0x0, cFileName="LGND.VSL", cAlternateFileName="")) returned 1 [0037.595] FindNextFileW (in: hFindFile=0x381cc0, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe1e9b800, ftCreationTime.dwHighDateTime=0x1cac9b3, ftLastAccessTime.dwLowDateTime=0xf2dd30, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xe1e9b800, ftLastWriteTime.dwHighDateTime=0x1cac9b3, nFileSizeHigh=0x0, nFileSizeLow=0x112970, dwReserved0=0x0, dwReserved1=0x0, cFileName="MAPIR.DLL", cAlternateFileName="")) returned 1 [0037.595] FindNextFileW (in: hFindFile=0x381cc0, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2411fa00, ftCreationTime.dwHighDateTime=0x1cac9b2, ftLastAccessTime.dwLowDateTime=0xf07bd0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x2411fa00, ftLastWriteTime.dwHighDateTime=0x1cac9b2, nFileSizeHigh=0x0, nFileSizeLow=0x1a780, dwReserved0=0x0, dwReserved1=0x0, cFileName="MAPIR.DLL.IDX_DLL", cAlternateFileName="MAPIRD~1.IDX")) returned 1 [0037.595] FindNextFileW (in: hFindFile=0x381cc0, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe31ae500, ftCreationTime.dwHighDateTime=0x1cac9b3, ftLastAccessTime.dwLowDateTime=0xf2dd30, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xe31ae500, ftLastWriteTime.dwHighDateTime=0x1cac9b3, nFileSizeHigh=0x0, nFileSizeLow=0x907d8, dwReserved0=0x0, dwReserved1=0x0, cFileName="MAPISHELLR.DLL", cAlternateFileName="MAPISH~1.DLL")) returned 1 [0037.595] FindNextFileW (in: hFindFile=0x381cc0, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8bf8d00, ftCreationTime.dwHighDateTime=0x1cab7e5, ftLastAccessTime.dwLowDateTime=0x50aa7c40, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0xa8bf8d00, ftLastWriteTime.dwHighDateTime=0x1cab7e5, nFileSizeHigh=0x0, nFileSizeLow=0x100fb0, dwReserved0=0x0, dwReserved1=0x0, cFileName="MERES.DLL", cAlternateFileName="")) returned 1 [0037.595] FindNextFileW (in: hFindFile=0x381cc0, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe105a200, ftCreationTime.dwHighDateTime=0x1cab7ca, ftLastAccessTime.dwLowDateTime=0x1ba28770, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xe105a200, ftLastWriteTime.dwHighDateTime=0x1cab7ca, nFileSizeHigh=0x0, nFileSizeLow=0x6cf68, dwReserved0=0x0, dwReserved1=0x0, cFileName="MOR6INT.DLL", cAlternateFileName="")) returned 1 [0037.595] FindNextFileW (in: hFindFile=0x381cc0, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf7146200, ftCreationTime.dwHighDateTime=0x1cab7cc, ftLastAccessTime.dwLowDateTime=0x1ba28770, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xf7146200, ftLastWriteTime.dwHighDateTime=0x1cab7cc, nFileSizeHigh=0x0, nFileSizeLow=0x9b80, dwReserved0=0x0, dwReserved1=0x0, cFileName="MOR6INT.REST.IDX_DLL", cAlternateFileName="MOR6IN~1.IDX")) returned 1 [0037.596] FindNextFileW (in: hFindFile=0x381cc0, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1b00b00, ftCreationTime.dwHighDateTime=0x1c55531, ftLastAccessTime.dwLowDateTime=0x50aa7c40, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0x1b00b00, ftLastWriteTime.dwHighDateTime=0x1c55531, nFileSizeHigh=0x0, nFileSizeLow=0x58c, dwReserved0=0x0, dwReserved1=0x0, cFileName="MOVE.VRD", cAlternateFileName="")) returned 1 [0037.596] FindNextFileW (in: hFindFile=0x381cc0, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa52c0600, ftCreationTime.dwHighDateTime=0x1cab7e5, ftLastAccessTime.dwLowDateTime=0x50aa7c40, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0xa52c0600, ftLastWriteTime.dwHighDateTime=0x1cab7e5, nFileSizeHigh=0x0, nFileSizeLow=0x3178, dwReserved0=0x0, dwReserved1=0x0, cFileName="MPXRES.DLL", cAlternateFileName="")) returned 1 [0037.596] FindNextFileW (in: hFindFile=0x381cc0, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x88e84c00, ftCreationTime.dwHighDateTime=0x1ca8073, ftLastAccessTime.dwLowDateTime=0x153cd570, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x88e84c00, ftLastWriteTime.dwHighDateTime=0x1ca8073, nFileSizeHigh=0x0, nFileSizeLow=0xa3f874, dwReserved0=0x0, dwReserved1=0x0, cFileName="MSACCESS.DEV.HXS", cAlternateFileName="MSACCE~1.HXS")) returned 1 [0037.596] FindNextFileW (in: hFindFile=0x381cc0, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf2472900, ftCreationTime.dwHighDateTime=0x1c9ff31, ftLastAccessTime.dwLowDateTime=0x153cd570, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xf2472900, ftLastWriteTime.dwHighDateTime=0x1c9ff31, nFileSizeHigh=0x0, nFileSizeLow=0x290, dwReserved0=0x0, dwReserved1=0x0, cFileName="MSACCESS.DEV_COL.HXC", cAlternateFileName="MSACCE~1.HXC")) returned 1 [0037.596] FindNextFileW (in: hFindFile=0x381cc0, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x37e4c000, ftCreationTime.dwHighDateTime=0x1c561aa, ftLastAccessTime.dwLowDateTime=0x153cd570, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x37e4c000, ftLastWriteTime.dwHighDateTime=0x1c561aa, nFileSizeHigh=0x0, nFileSizeLow=0xd4, dwReserved0=0x0, dwReserved1=0x0, cFileName="MSACCESS.DEV_COL.HXT", cAlternateFileName="MSACCE~1.HXT")) returned 1 [0037.596] FindNextFileW (in: hFindFile=0x381cc0, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x37e4c000, ftCreationTime.dwHighDateTime=0x1c561aa, ftLastAccessTime.dwLowDateTime=0x153cd570, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x37e4c000, ftLastWriteTime.dwHighDateTime=0x1c561aa, nFileSizeHigh=0x0, nFileSizeLow=0x72, dwReserved0=0x0, dwReserved1=0x0, cFileName="MSACCESS.DEV_F_COL.HXK", cAlternateFileName="MSACCE~1.HXK")) returned 1 [0037.596] FindNextFileW (in: hFindFile=0x381cc0, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x37e4c000, ftCreationTime.dwHighDateTime=0x1c561aa, ftLastAccessTime.dwLowDateTime=0x153cd570, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x37e4c000, ftLastWriteTime.dwHighDateTime=0x1c561aa, nFileSizeHigh=0x0, nFileSizeLow=0x71, dwReserved0=0x0, dwReserved1=0x0, cFileName="MSACCESS.DEV_K_COL.HXK", cAlternateFileName="MSACCE~2.HXK")) returned 1 [0037.596] FindNextFileW (in: hFindFile=0x381cc0, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x88e84c00, ftCreationTime.dwHighDateTime=0x1ca8073, ftLastAccessTime.dwLowDateTime=0x153f36d0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x88e84c00, ftLastWriteTime.dwHighDateTime=0x1ca8073, nFileSizeHigh=0x0, nFileSizeLow=0x3b2c12, dwReserved0=0x0, dwReserved1=0x0, cFileName="MSACCESS.HXS", cAlternateFileName="")) returned 1 [0037.597] FindNextFileW (in: hFindFile=0x381cc0, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf2472900, ftCreationTime.dwHighDateTime=0x1c9ff31, ftLastAccessTime.dwLowDateTime=0x153f36d0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xf2472900, ftLastWriteTime.dwHighDateTime=0x1c9ff31, nFileSizeHigh=0x0, nFileSizeLow=0x27c, dwReserved0=0x0, dwReserved1=0x0, cFileName="MSACCESS_COL.HXC", cAlternateFileName="MSACCE~2.HXC")) returned 1 [0037.597] FindNextFileW (in: hFindFile=0x381cc0, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x33200c00, ftCreationTime.dwHighDateTime=0x1c561aa, ftLastAccessTime.dwLowDateTime=0x153f36d0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x33200c00, ftLastWriteTime.dwHighDateTime=0x1c561aa, nFileSizeHigh=0x0, nFileSizeLow=0xd0, dwReserved0=0x0, dwReserved1=0x0, cFileName="MSACCESS_COL.HXT", cAlternateFileName="MSACCE~2.HXT")) returned 1 [0037.597] FindNextFileW (in: hFindFile=0x381cc0, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x33200c00, ftCreationTime.dwHighDateTime=0x1c561aa, ftLastAccessTime.dwLowDateTime=0x153f36d0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x33200c00, ftLastWriteTime.dwHighDateTime=0x1c561aa, nFileSizeHigh=0x0, nFileSizeLow=0x72, dwReserved0=0x0, dwReserved1=0x0, cFileName="MSACCESS_F_COL.HXK", cAlternateFileName="MSACCE~3.HXK")) returned 1 [0037.597] FindNextFileW (in: hFindFile=0x381cc0, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x33200c00, ftCreationTime.dwHighDateTime=0x1c561aa, ftLastAccessTime.dwLowDateTime=0x153f36d0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x33200c00, ftLastWriteTime.dwHighDateTime=0x1c561aa, nFileSizeHigh=0x0, nFileSizeLow=0x71, dwReserved0=0x0, dwReserved1=0x0, cFileName="MSACCESS_K_COL.HXK", cAlternateFileName="MSACCE~4.HXK")) returned 1 [0037.597] FindNextFileW (in: hFindFile=0x381cc0, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xadd30b00, ftCreationTime.dwHighDateTime=0x1cab7ea, ftLastAccessTime.dwLowDateTime=0x15419830, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xadd30b00, ftLastWriteTime.dwHighDateTime=0x1cab7ea, nFileSizeHigh=0x0, nFileSizeLow=0x127f80, dwReserved0=0x0, dwReserved1=0x0, cFileName="MSAIN.DLL", cAlternateFileName="")) returned 1 [0037.597] FindNextFileW (in: hFindFile=0x381cc0, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x589e0a00, ftCreationTime.dwHighDateTime=0x1c99224, ftLastAccessTime.dwLowDateTime=0x980ce30, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x589e0a00, ftLastWriteTime.dwHighDateTime=0x1c99224, nFileSizeHigh=0x0, nFileSizeLow=0x9382, dwReserved0=0x0, dwReserved1=0x0, cFileName="MSO.ACL", cAlternateFileName="")) returned 1 [0037.597] FindNextFileW (in: hFindFile=0x381cc0, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe15bf200, ftCreationTime.dwHighDateTime=0x1ca9370, ftLastAccessTime.dwLowDateTime=0xeeedb470, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xe15bf200, ftLastWriteTime.dwHighDateTime=0x1ca9370, nFileSizeHigh=0x0, nFileSizeLow=0x69560, dwReserved0=0x0, dwReserved1=0x0, cFileName="MSOUC.HXS", cAlternateFileName="")) returned 1 [0037.597] FindNextFileW (in: hFindFile=0x381cc0, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5c107b00, ftCreationTime.dwHighDateTime=0x1ca77cf, ftLastAccessTime.dwLowDateTime=0xeeedb470, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0x5c107b00, ftLastWriteTime.dwHighDateTime=0x1ca77cf, nFileSizeHigh=0x0, nFileSizeLow=0x26d, dwReserved0=0x0, dwReserved1=0x0, cFileName="MSOUC_COL.HXC", cAlternateFileName="MSOUC_~1.HXC")) returned 1 [0037.597] FindNextFileW (in: hFindFile=0x381cc0, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5c107b00, ftCreationTime.dwHighDateTime=0x1ca77cf, ftLastAccessTime.dwLowDateTime=0xeeedb470, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0x5c107b00, ftLastWriteTime.dwHighDateTime=0x1ca77cf, nFileSizeHigh=0x0, nFileSizeLow=0xcd, dwReserved0=0x0, dwReserved1=0x0, cFileName="MSOUC_COL.HXT", cAlternateFileName="MSOUC_~1.HXT")) returned 1 [0037.597] FindNextFileW (in: hFindFile=0x381cc0, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5c107b00, ftCreationTime.dwHighDateTime=0x1ca77cf, ftLastAccessTime.dwLowDateTime=0xeeedb470, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0x5c107b00, ftLastWriteTime.dwHighDateTime=0x1ca77cf, nFileSizeHigh=0x0, nFileSizeLow=0x72, dwReserved0=0x0, dwReserved1=0x0, cFileName="MSOUC_F_COL.HXK", cAlternateFileName="MSOUC_~1.HXK")) returned 1 [0037.597] FindNextFileW (in: hFindFile=0x381cc0, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5c107b00, ftCreationTime.dwHighDateTime=0x1ca77cf, ftLastAccessTime.dwLowDateTime=0xeeedb470, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0x5c107b00, ftLastWriteTime.dwHighDateTime=0x1ca77cf, nFileSizeHigh=0x0, nFileSizeLow=0x71, dwReserved0=0x0, dwReserved1=0x0, cFileName="MSOUC_K_COL.HXK", cAlternateFileName="MSOUC_~2.HXK")) returned 1 [0037.598] FindNextFileW (in: hFindFile=0x381cc0, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x91408700, ftCreationTime.dwHighDateTime=0x1ca8073, ftLastAccessTime.dwLowDateTime=0x1ba74a30, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x91408700, ftLastWriteTime.dwHighDateTime=0x1ca8073, nFileSizeHigh=0x0, nFileSizeLow=0x487dc8, dwReserved0=0x0, dwReserved1=0x0, cFileName="MSPUB.DEV.HXS", cAlternateFileName="MSPUBD~1.HXS")) returned 1 [0037.600] FindNextFileW (in: hFindFile=0x381cc0, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1c67200, ftCreationTime.dwHighDateTime=0x1c9ff32, ftLastAccessTime.dwLowDateTime=0x1ba74a30, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x1c67200, ftLastWriteTime.dwHighDateTime=0x1c9ff32, nFileSizeHigh=0x0, nFileSizeLow=0x281, dwReserved0=0x0, dwReserved1=0x0, cFileName="MSPUB.DEV_COL.HXC", cAlternateFileName="MSPUBD~1.HXC")) returned 1 [0037.600] FindNextFileW (in: hFindFile=0x381cc0, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3ddaa100, ftCreationTime.dwHighDateTime=0x1c561aa, ftLastAccessTime.dwLowDateTime=0x1ba74a30, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x3ddaa100, ftLastWriteTime.dwHighDateTime=0x1c561aa, nFileSizeHigh=0x0, nFileSizeLow=0xd1, dwReserved0=0x0, dwReserved1=0x0, cFileName="MSPUB.DEV_COL.HXT", cAlternateFileName="MSPUBD~1.HXT")) returned 1 [0037.600] FindNextFileW (in: hFindFile=0x381cc0, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3ddaa100, ftCreationTime.dwHighDateTime=0x1c561aa, ftLastAccessTime.dwLowDateTime=0x1ba74a30, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x3ddaa100, ftLastWriteTime.dwHighDateTime=0x1c561aa, nFileSizeHigh=0x0, nFileSizeLow=0x72, dwReserved0=0x0, dwReserved1=0x0, cFileName="MSPUB.DEV_F_COL.HXK", cAlternateFileName="MSPUBD~1.HXK")) returned 1 [0037.600] FindNextFileW (in: hFindFile=0x381cc0, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3ddaa100, ftCreationTime.dwHighDateTime=0x1c561aa, ftLastAccessTime.dwLowDateTime=0x1ba74a30, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x3ddaa100, ftLastWriteTime.dwHighDateTime=0x1c561aa, nFileSizeHigh=0x0, nFileSizeLow=0x71, dwReserved0=0x0, dwReserved1=0x0, cFileName="MSPUB.DEV_K_COL.HXK", cAlternateFileName="MSPUBD~2.HXK")) returned 1 [0037.601] FindNextFileW (in: hFindFile=0x381cc0, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9271b400, ftCreationTime.dwHighDateTime=0x1ca8073, ftLastAccessTime.dwLowDateTime=0x1ba9ab90, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x9271b400, ftLastWriteTime.dwHighDateTime=0x1ca8073, nFileSizeHigh=0x0, nFileSizeLow=0x1cc936, dwReserved0=0x0, dwReserved1=0x0, cFileName="MSPUB.HXS", cAlternateFileName="")) returned 1 [0037.601] FindNextFileW (in: hFindFile=0x381cc0, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8fe30400, ftCreationTime.dwHighDateTime=0x1c2a1b4, ftLastAccessTime.dwLowDateTime=0x1ba9ab90, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x8fe30400, ftLastWriteTime.dwHighDateTime=0x1c2a1b4, nFileSizeHigh=0x0, nFileSizeLow=0x2ef8, dwReserved0=0x0, dwReserved1=0x0, cFileName="MSPUB.OPG", cAlternateFileName="")) returned 1 [0037.601] FindNextFileW (in: hFindFile=0x381cc0, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1c67200, ftCreationTime.dwHighDateTime=0x1c9ff32, ftLastAccessTime.dwLowDateTime=0x1ba9ab90, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x1c67200, ftLastWriteTime.dwHighDateTime=0x1c9ff32, nFileSizeHigh=0x0, nFileSizeLow=0x26d, dwReserved0=0x0, dwReserved1=0x0, cFileName="MSPUB_COL.HXC", cAlternateFileName="MSPUB_~1.HXC")) returned 1 [0037.601] FindNextFileW (in: hFindFile=0x381cc0, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3b784700, ftCreationTime.dwHighDateTime=0x1c561aa, ftLastAccessTime.dwLowDateTime=0x1ba9ab90, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x3b784700, ftLastWriteTime.dwHighDateTime=0x1c561aa, nFileSizeHigh=0x0, nFileSizeLow=0xcd, dwReserved0=0x0, dwReserved1=0x0, cFileName="MSPUB_COL.HXT", cAlternateFileName="MSPUB_~1.HXT")) returned 1 [0037.601] FindNextFileW (in: hFindFile=0x381cc0, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3b784700, ftCreationTime.dwHighDateTime=0x1c561aa, ftLastAccessTime.dwLowDateTime=0x1ba9ab90, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x3b784700, ftLastWriteTime.dwHighDateTime=0x1c561aa, nFileSizeHigh=0x0, nFileSizeLow=0x72, dwReserved0=0x0, dwReserved1=0x0, cFileName="MSPUB_F_COL.HXK", cAlternateFileName="MSPUB_~1.HXK")) returned 1 [0037.601] FindNextFileW (in: hFindFile=0x381cc0, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3b784700, ftCreationTime.dwHighDateTime=0x1c561aa, ftLastAccessTime.dwLowDateTime=0x1ba9ab90, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x3b784700, ftLastWriteTime.dwHighDateTime=0x1c561aa, nFileSizeHigh=0x0, nFileSizeLow=0x71, dwReserved0=0x0, dwReserved1=0x0, cFileName="MSPUB_K_COL.HXK", cAlternateFileName="MSPUB_~2.HXK")) returned 1 [0037.601] FindNextFileW (in: hFindFile=0x381cc0, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd8527700, ftCreationTime.dwHighDateTime=0x1c33a9f, ftLastAccessTime.dwLowDateTime=0xeeedb470, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xd8527700, ftLastWriteTime.dwHighDateTime=0x1c33a9f, nFileSizeHigh=0x0, nFileSizeLow=0x7d682, dwReserved0=0x0, dwReserved1=0x0, cFileName="MSQRY32.CHM", cAlternateFileName="")) returned 1 [0037.601] FindNextFileW (in: hFindFile=0x381cc0, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe8c44700, ftCreationTime.dwHighDateTime=0x1cab7c8, ftLastAccessTime.dwLowDateTime=0xeeedb470, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xe8c44700, ftLastWriteTime.dwHighDateTime=0x1cab7c8, nFileSizeHigh=0x0, nFileSizeLow=0x15d58, dwReserved0=0x0, dwReserved1=0x0, cFileName="MSTINTL.DLL", cAlternateFileName="")) returned 1 [0037.601] FindNextFileW (in: hFindFile=0x381cc0, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x88e84c00, ftCreationTime.dwHighDateTime=0x1ca8073, ftLastAccessTime.dwLowDateTime=0xeeedb470, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0x88e84c00, ftLastWriteTime.dwHighDateTime=0x1ca8073, nFileSizeHigh=0x0, nFileSizeLow=0x5f254, dwReserved0=0x0, dwReserved1=0x0, cFileName="MSTORE.HXS", cAlternateFileName="")) returned 1 [0037.601] FindNextFileW (in: hFindFile=0x381cc0, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf2472900, ftCreationTime.dwHighDateTime=0x1c9ff31, ftLastAccessTime.dwLowDateTime=0xeef015d0, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xf2472900, ftLastWriteTime.dwHighDateTime=0x1c9ff31, nFileSizeHigh=0x0, nFileSizeLow=0x272, dwReserved0=0x0, dwReserved1=0x0, cFileName="MSTORE_COL.HXC", cAlternateFileName="MSTORE~1.HXC")) returned 1 [0037.601] FindNextFileW (in: hFindFile=0x381cc0, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x416e2800, ftCreationTime.dwHighDateTime=0x1c561aa, ftLastAccessTime.dwLowDateTime=0xeef015d0, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0x416e2800, ftLastWriteTime.dwHighDateTime=0x1c561aa, nFileSizeHigh=0x0, nFileSizeLow=0xce, dwReserved0=0x0, dwReserved1=0x0, cFileName="MSTORE_COL.HXT", cAlternateFileName="MSTORE~1.HXT")) returned 1 [0037.601] FindNextFileW (in: hFindFile=0x381cc0, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x416e2800, ftCreationTime.dwHighDateTime=0x1c561aa, ftLastAccessTime.dwLowDateTime=0xeef015d0, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0x416e2800, ftLastWriteTime.dwHighDateTime=0x1c561aa, nFileSizeHigh=0x0, nFileSizeLow=0x72, dwReserved0=0x0, dwReserved1=0x0, cFileName="MSTORE_F_COL.HXK", cAlternateFileName="MSTORE~1.HXK")) returned 1 [0037.601] FindNextFileW (in: hFindFile=0x381cc0, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x416e2800, ftCreationTime.dwHighDateTime=0x1c561aa, ftLastAccessTime.dwLowDateTime=0xeef015d0, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0x416e2800, ftLastWriteTime.dwHighDateTime=0x1c561aa, nFileSizeHigh=0x0, nFileSizeLow=0x71, dwReserved0=0x0, dwReserved1=0x0, cFileName="MSTORE_K_COL.HXK", cAlternateFileName="MSTORE~2.HXK")) returned 1 [0037.601] FindNextFileW (in: hFindFile=0x381cc0, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe3a6b500, ftCreationTime.dwHighDateTime=0x1c9c49e, ftLastAccessTime.dwLowDateTime=0x50acdda0, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0xe3a6b500, ftLastWriteTime.dwHighDateTime=0x1c9c49e, nFileSizeHigh=0x0, nFileSizeLow=0xd7a, dwReserved0=0x0, dwReserved1=0x0, cFileName="NETWORK.CSS", cAlternateFileName="")) returned 1 [0037.601] FindNextFileW (in: hFindFile=0x381cc0, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4126500, ftCreationTime.dwHighDateTime=0x1c55531, ftLastAccessTime.dwLowDateTime=0x50acdda0, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0x4126500, ftLastWriteTime.dwHighDateTime=0x1c55531, nFileSizeHigh=0x0, nFileSizeLow=0x734, dwReserved0=0x0, dwReserved1=0x0, cFileName="NETWORK1.VRD", cAlternateFileName="")) returned 1 [0037.601] FindNextFileW (in: hFindFile=0x381cc0, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4126500, ftCreationTime.dwHighDateTime=0x1c55531, ftLastAccessTime.dwLowDateTime=0x50acdda0, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0x4126500, ftLastWriteTime.dwHighDateTime=0x1c55531, nFileSizeHigh=0x0, nFileSizeLow=0x866, dwReserved0=0x0, dwReserved1=0x0, cFileName="NETWORK2.VRD", cAlternateFileName="")) returned 1 [0037.601] FindNextFileW (in: hFindFile=0x381cc0, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4126500, ftCreationTime.dwHighDateTime=0x1c55531, ftLastAccessTime.dwLowDateTime=0x50acdda0, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0x4126500, ftLastWriteTime.dwHighDateTime=0x1c55531, nFileSizeHigh=0x0, nFileSizeLow=0xcae, dwReserved0=0x0, dwReserved1=0x0, cFileName="NETWORK3.VRD", cAlternateFileName="")) returned 1 [0037.601] FindNextFileW (in: hFindFile=0x381cc0, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xeaeefd00, ftCreationTime.dwHighDateTime=0x1c2c076, ftLastAccessTime.dwLowDateTime=0x50acdda0, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0xeaeefd00, ftLastWriteTime.dwHighDateTime=0x1c2c076, nFileSizeHigh=0x0, nFileSizeLow=0x468, dwReserved0=0x0, dwReserved1=0x0, cFileName="OCCMPVRD.XML", cAlternateFileName="")) returned 1 [0037.601] FindNextFileW (in: hFindFile=0x381cc0, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4b675400, ftCreationTime.dwHighDateTime=0x1c2c0e2, ftLastAccessTime.dwLowDateTime=0x50acdda0, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0x4b675400, ftLastWriteTime.dwHighDateTime=0x1c2c0e2, nFileSizeHigh=0x0, nFileSizeLow=0x42c, dwReserved0=0x0, dwReserved1=0x0, cFileName="OCMODVRD.XML", cAlternateFileName="")) returned 1 [0037.602] FindNextFileW (in: hFindFile=0x381cc0, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xde567d00, ftCreationTime.dwHighDateTime=0x1cab7c9, ftLastAccessTime.dwLowDateTime=0xeef015d0, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xde567d00, ftLastWriteTime.dwHighDateTime=0x1cab7c9, nFileSizeHigh=0x0, nFileSizeLow=0x81380, dwReserved0=0x0, dwReserved1=0x0, cFileName="OFFOWCI.DLL", cAlternateFileName="")) returned 1 [0037.602] FindNextFileW (in: hFindFile=0x381cc0, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8c7bd300, ftCreationTime.dwHighDateTime=0x1ca8073, ftLastAccessTime.dwLowDateTime=0xeef27730, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0x8c7bd300, ftLastWriteTime.dwHighDateTime=0x1ca8073, nFileSizeHigh=0x0, nFileSizeLow=0x6fd04, dwReserved0=0x0, dwReserved1=0x0, cFileName="OIS.HXS", cAlternateFileName="")) returned 1 [0037.602] FindNextFileW (in: hFindFile=0x381cc0, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xcc74da00, ftCreationTime.dwHighDateTime=0x1cab7c9, ftLastAccessTime.dwLowDateTime=0xeef27730, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xcc74da00, ftLastWriteTime.dwHighDateTime=0x1cab7c9, nFileSizeHigh=0x0, nFileSizeLow=0x1f998, dwReserved0=0x0, dwReserved1=0x0, cFileName="OISINTL.DLL", cAlternateFileName="")) returned 1 [0037.602] FindNextFileW (in: hFindFile=0x381cc0, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1c67200, ftCreationTime.dwHighDateTime=0x1c9ff32, ftLastAccessTime.dwLowDateTime=0xeef27730, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0x1c67200, ftLastWriteTime.dwHighDateTime=0x1c9ff32, nFileSizeHigh=0x0, nFileSizeLow=0x263, dwReserved0=0x0, dwReserved1=0x0, cFileName="OIS_COL.HXC", cAlternateFileName="")) returned 1 [0037.602] FindNextFileW (in: hFindFile=0x381cc0, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4501af00, ftCreationTime.dwHighDateTime=0x1c561aa, ftLastAccessTime.dwLowDateTime=0xeef27730, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0x4501af00, ftLastWriteTime.dwHighDateTime=0x1c561aa, nFileSizeHigh=0x0, nFileSizeLow=0xcb, dwReserved0=0x0, dwReserved1=0x0, cFileName="OIS_COL.HXT", cAlternateFileName="")) returned 1 [0037.602] FindNextFileW (in: hFindFile=0x381cc0, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4501af00, ftCreationTime.dwHighDateTime=0x1c561aa, ftLastAccessTime.dwLowDateTime=0xeef27730, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0x4501af00, ftLastWriteTime.dwHighDateTime=0x1c561aa, nFileSizeHigh=0x0, nFileSizeLow=0x72, dwReserved0=0x0, dwReserved1=0x0, cFileName="OIS_F_COL.HXK", cAlternateFileName="OIS_F_~1.HXK")) returned 1 [0037.602] FindNextFileW (in: hFindFile=0x381cc0, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4501af00, ftCreationTime.dwHighDateTime=0x1c561aa, ftLastAccessTime.dwLowDateTime=0xeef27730, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0x4501af00, ftLastWriteTime.dwHighDateTime=0x1c561aa, nFileSizeHigh=0x0, nFileSizeLow=0x71, dwReserved0=0x0, dwReserved1=0x0, cFileName="OIS_K_COL.HXK", cAlternateFileName="OIS_K_~1.HXK")) returned 1 [0037.602] FindNextFileW (in: hFindFile=0x381cc0, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8de21e00, ftCreationTime.dwHighDateTime=0x1cab7cf, ftLastAccessTime.dwLowDateTime=0x137e510, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x8de21e00, ftLastWriteTime.dwHighDateTime=0x1cab7cf, nFileSizeHigh=0x0, nFileSizeLow=0x62180, dwReserved0=0x0, dwReserved1=0x0, cFileName="OMSINTL.DLL", cAlternateFileName="")) returned 1 [0037.602] FindNextFileW (in: hFindFile=0x381cc0, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x70618400, ftCreationTime.dwHighDateTime=0x1cab7d0, ftLastAccessTime.dwLowDateTime=0x137e510, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x70618400, ftLastWriteTime.dwHighDateTime=0x1cab7d0, nFileSizeHigh=0x0, nFileSizeLow=0x6180, dwReserved0=0x0, dwReserved1=0x0, cFileName="OMSINTL.DLL.IDX_DLL", cAlternateFileName="OMSINT~1.IDX")) returned 1 [0037.602] FindNextFileW (in: hFindFile=0x381cc0, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xeb7e9d00, ftCreationTime.dwHighDateTime=0x1cacf2a, ftLastAccessTime.dwLowDateTime=0xc7ce790, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xeb7e9d00, ftLastWriteTime.dwHighDateTime=0x1cacf2a, nFileSizeHigh=0x0, nFileSizeLow=0xdf88, dwReserved0=0x0, dwReserved1=0x0, cFileName="ONELEV.EXE", cAlternateFileName="")) returned 1 [0037.614] FindNextFileW (in: hFindFile=0x381cc0, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8c7bd300, ftCreationTime.dwHighDateTime=0x1ca8073, ftLastAccessTime.dwLowDateTime=0xc7ce790, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x8c7bd300, ftLastWriteTime.dwHighDateTime=0x1ca8073, nFileSizeHigh=0x0, nFileSizeLow=0x1ab7d0, dwReserved0=0x0, dwReserved1=0x0, cFileName="ONENOTE.HXS", cAlternateFileName="")) returned 1 [0037.614] FindNextFileW (in: hFindFile=0x381cc0, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xabfa4f00, ftCreationTime.dwHighDateTime=0x1cab7cc, ftLastAccessTime.dwLowDateTime=0xc81aa50, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xabfa4f00, ftLastWriteTime.dwHighDateTime=0x1cab7cc, nFileSizeHigh=0x0, nFileSizeLow=0x25e8, dwReserved0=0x0, dwReserved1=0x0, cFileName="OneNoteSyncPCIntl.dll", cAlternateFileName="ONENOT~1.DLL")) returned 1 [0037.615] FindNextFileW (in: hFindFile=0x381cc0, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1c67200, ftCreationTime.dwHighDateTime=0x1c9ff32, ftLastAccessTime.dwLowDateTime=0xc7ce790, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x1c67200, ftLastWriteTime.dwHighDateTime=0x1c9ff32, nFileSizeHigh=0x0, nFileSizeLow=0x277, dwReserved0=0x0, dwReserved1=0x0, cFileName="ONENOTE_COL.HXC", cAlternateFileName="ONENOT~1.HXC")) returned 1 [0037.615] FindNextFileW (in: hFindFile=0x381cc0, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x48953600, ftCreationTime.dwHighDateTime=0x1c561aa, ftLastAccessTime.dwLowDateTime=0xc7f48f0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x48953600, ftLastWriteTime.dwHighDateTime=0x1c561aa, nFileSizeHigh=0x0, nFileSizeLow=0xcf, dwReserved0=0x0, dwReserved1=0x0, cFileName="ONENOTE_COL.HXT", cAlternateFileName="ONENOT~1.HXT")) returned 1 [0037.615] FindNextFileW (in: hFindFile=0x381cc0, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x48953600, ftCreationTime.dwHighDateTime=0x1c561aa, ftLastAccessTime.dwLowDateTime=0xc7f48f0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x48953600, ftLastWriteTime.dwHighDateTime=0x1c561aa, nFileSizeHigh=0x0, nFileSizeLow=0x72, dwReserved0=0x0, dwReserved1=0x0, cFileName="ONENOTE_F_COL.HXK", cAlternateFileName="ONENOT~1.HXK")) returned 1 [0037.615] FindNextFileW (in: hFindFile=0x381cc0, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x48953600, ftCreationTime.dwHighDateTime=0x1c561aa, ftLastAccessTime.dwLowDateTime=0xc7f48f0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x48953600, ftLastWriteTime.dwHighDateTime=0x1c561aa, nFileSizeHigh=0x0, nFileSizeLow=0x71, dwReserved0=0x0, dwReserved1=0x0, cFileName="ONENOTE_K_COL.HXK", cAlternateFileName="ONENOT~2.HXK")) returned 1 [0037.615] FindNextFileW (in: hFindFile=0x381cc0, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb96d3b00, ftCreationTime.dwHighDateTime=0x1cacf2a, ftLastAccessTime.dwLowDateTime=0xc7f48f0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xb96d3b00, ftLastWriteTime.dwHighDateTime=0x1cacf2a, nFileSizeHigh=0x0, nFileSizeLow=0x148d68, dwReserved0=0x0, dwReserved1=0x0, cFileName="ONGuide.onepkg", cAlternateFileName="ONGUID~1.ONE")) returned 1 [0037.615] FindNextFileW (in: hFindFile=0x381cc0, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xeb7e9d00, ftCreationTime.dwHighDateTime=0x1cacf2a, ftLastAccessTime.dwLowDateTime=0xc81aa50, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xeb7e9d00, ftLastWriteTime.dwHighDateTime=0x1cacf2a, nFileSizeHigh=0x0, nFileSizeLow=0x341f90, dwReserved0=0x0, dwReserved1=0x0, cFileName="ONINTL.DLL", cAlternateFileName="")) returned 1 [0037.615] FindNextFileW (in: hFindFile=0x381cc0, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe3266200, ftCreationTime.dwHighDateTime=0x1cacf2a, ftLastAccessTime.dwLowDateTime=0xc7f48f0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xe3266200, ftLastWriteTime.dwHighDateTime=0x1cacf2a, nFileSizeHigh=0x0, nFileSizeLow=0x3b80, dwReserved0=0x0, dwReserved1=0x0, cFileName="ONINTL.DLL.IDX_DLL", cAlternateFileName="ONINTL~1.IDX")) returned 1 [0037.615] FindNextFileW (in: hFindFile=0x381cc0, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe3266200, ftCreationTime.dwHighDateTime=0x1cacf2a, ftLastAccessTime.dwLowDateTime=0xc81aa50, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xe3266200, ftLastWriteTime.dwHighDateTime=0x1cacf2a, nFileSizeHigh=0x0, nFileSizeLow=0x1bf80, dwReserved0=0x0, dwReserved1=0x0, cFileName="ONINTL.REST.IDX_DLL", cAlternateFileName="ONINTL~2.IDX")) returned 1 [0037.615] FindNextFileW (in: hFindFile=0x381cc0, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5439200, ftCreationTime.dwHighDateTime=0x1c55531, ftLastAccessTime.dwLowDateTime=0x50af3f00, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0x5439200, ftLastWriteTime.dwHighDateTime=0x1c55531, nFileSizeHigh=0x0, nFileSizeLow=0x648, dwReserved0=0x0, dwReserved1=0x0, cFileName="ORGCH.VRD", cAlternateFileName="")) returned 1 [0037.615] FindNextFileW (in: hFindFile=0x381cc0, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb117c800, ftCreationTime.dwHighDateTime=0x1cab7e5, ftLastAccessTime.dwLowDateTime=0x50b1a060, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0xb117c800, ftLastWriteTime.dwHighDateTime=0x1cab7e5, nFileSizeHigh=0x0, nFileSizeLow=0xdfa0, dwReserved0=0x0, dwReserved1=0x0, cFileName="ORGCHART.VSL", cAlternateFileName="")) returned 1 [0037.615] FindNextFileW (in: hFindFile=0x381cc0, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5439200, ftCreationTime.dwHighDateTime=0x1c55531, ftLastAccessTime.dwLowDateTime=0x50b1a060, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0x5439200, ftLastWriteTime.dwHighDateTime=0x1c55531, nFileSizeHigh=0x0, nFileSizeLow=0x44a, dwReserved0=0x0, dwReserved1=0x0, cFileName="ORGPOS.VRD", cAlternateFileName="")) returned 1 [0037.615] FindNextFileW (in: hFindFile=0x381cc0, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb5dc7c00, ftCreationTime.dwHighDateTime=0x1cab7e5, ftLastAccessTime.dwLowDateTime=0x50b1a060, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0xb5dc7c00, ftLastWriteTime.dwHighDateTime=0x1cab7e5, nFileSizeHigh=0x0, nFileSizeLow=0x105b0, dwReserved0=0x0, dwReserved1=0x0, cFileName="ORGWIZ.VSL", cAlternateFileName="")) returned 1 [0037.615] FindNextFileW (in: hFindFile=0x381cc0, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4c57a100, ftCreationTime.dwHighDateTime=0x1cac466, ftLastAccessTime.dwLowDateTime=0xeef4d890, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0x4c57a100, ftLastWriteTime.dwHighDateTime=0x1cac466, nFileSizeHigh=0x0, nFileSizeLow=0x4790, dwReserved0=0x0, dwReserved1=0x0, cFileName="ospintl.dll", cAlternateFileName="")) returned 1 [0037.615] FindNextFileW (in: hFindFile=0x381cc0, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xed8c4100, ftCreationTime.dwHighDateTime=0x1c67eda, ftLastAccessTime.dwLowDateTime=0x13a4670, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xed8c4100, ftLastWriteTime.dwHighDateTime=0x1c67eda, nFileSizeHigh=0x0, nFileSizeLow=0x16e00, dwReserved0=0x0, dwReserved1=0x0, cFileName="OUTFORM.DAT", cAlternateFileName="")) returned 1 [0037.615] FindNextFileW (in: hFindFile=0x381cc0, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd2fc5400, ftCreationTime.dwHighDateTime=0x1ca0f51, ftLastAccessTime.dwLowDateTime=0x13a4670, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xd2fc5400, ftLastWriteTime.dwHighDateTime=0x1ca0f51, nFileSizeHigh=0x0, nFileSizeLow=0x970, dwReserved0=0x0, dwReserved1=0x0, cFileName="OUTLBAR.INF", cAlternateFileName="")) returned 1 [0037.615] FindNextFileW (in: hFindFile=0x381cc0, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe7df9900, ftCreationTime.dwHighDateTime=0x1cac9b3, ftLastAccessTime.dwLowDateTime=0x13f0930, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xe7df9900, ftLastWriteTime.dwHighDateTime=0x1cac9b3, nFileSizeHigh=0x0, nFileSizeLow=0x644d70, dwReserved0=0x0, dwReserved1=0x0, cFileName="OUTLLIBR.DLL", cAlternateFileName="")) returned 1 [0037.615] FindNextFileW (in: hFindFile=0x381cc0, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2411fa00, ftCreationTime.dwHighDateTime=0x1cac9b2, ftLastAccessTime.dwLowDateTime=0x13a4670, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x2411fa00, ftLastWriteTime.dwHighDateTime=0x1cac9b2, nFileSizeHigh=0x0, nFileSizeLow=0x1d380, dwReserved0=0x0, dwReserved1=0x0, cFileName="OUTLLIBR.DLL.IDX_DLL", cAlternateFileName="OUTLLI~1.IDX")) returned 1 [0037.615] FindNextFileW (in: hFindFile=0x381cc0, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2411fa00, ftCreationTime.dwHighDateTime=0x1cac9b2, ftLastAccessTime.dwLowDateTime=0x1416a90, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x2411fa00, ftLastWriteTime.dwHighDateTime=0x1cac9b2, nFileSizeHigh=0x0, nFileSizeLow=0x46f80, dwReserved0=0x0, dwReserved1=0x0, cFileName="OUTLLIBR.REST.IDX_DLL", cAlternateFileName="OUTLLI~2.IDX")) returned 1 [0037.616] FindNextFileW (in: hFindFile=0x381cc0, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa80e2700, ftCreationTime.dwHighDateTime=0x1ca8f17, ftLastAccessTime.dwLowDateTime=0x1462d50, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xa80e2700, ftLastWriteTime.dwHighDateTime=0x1ca8f17, nFileSizeHigh=0x0, nFileSizeLow=0x6aa3d8, dwReserved0=0x0, dwReserved1=0x0, cFileName="OUTLOOK.DEV.HXS", cAlternateFileName="OUTLOO~1.HXS")) returned 1 [0037.616] FindNextFileW (in: hFindFile=0x381cc0, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1c67200, ftCreationTime.dwHighDateTime=0x1c9ff32, ftLastAccessTime.dwLowDateTime=0x1462d50, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x1c67200, ftLastWriteTime.dwHighDateTime=0x1c9ff32, nFileSizeHigh=0x0, nFileSizeLow=0x28b, dwReserved0=0x0, dwReserved1=0x0, cFileName="OUTLOOK.DEV_COL.HXC", cAlternateFileName="OUTLOO~1.HXC")) returned 1 [0037.616] FindNextFileW (in: hFindFile=0x381cc0, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4fbc4400, ftCreationTime.dwHighDateTime=0x1c561aa, ftLastAccessTime.dwLowDateTime=0x1462d50, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x4fbc4400, ftLastWriteTime.dwHighDateTime=0x1c561aa, nFileSizeHigh=0x0, nFileSizeLow=0xd3, dwReserved0=0x0, dwReserved1=0x0, cFileName="OUTLOOK.DEV_COL.HXT", cAlternateFileName="OUTLOO~1.HXT")) returned 1 [0037.616] FindNextFileW (in: hFindFile=0x381cc0, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4fbc4400, ftCreationTime.dwHighDateTime=0x1c561aa, ftLastAccessTime.dwLowDateTime=0x1462d50, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x4fbc4400, ftLastWriteTime.dwHighDateTime=0x1c561aa, nFileSizeHigh=0x0, nFileSizeLow=0x72, dwReserved0=0x0, dwReserved1=0x0, cFileName="OUTLOOK.DEV_F_COL.HXK", cAlternateFileName="OUTLOO~1.HXK")) returned 1 [0037.616] FindNextFileW (in: hFindFile=0x381cc0, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4fbc4400, ftCreationTime.dwHighDateTime=0x1c561aa, ftLastAccessTime.dwLowDateTime=0x1462d50, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x4fbc4400, ftLastWriteTime.dwHighDateTime=0x1c561aa, nFileSizeHigh=0x0, nFileSizeLow=0x71, dwReserved0=0x0, dwReserved1=0x0, cFileName="OUTLOOK.DEV_K_COL.HXK", cAlternateFileName="OUTLOO~2.HXK")) returned 1 [0037.616] FindNextFileW (in: hFindFile=0x381cc0, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3475b500, ftCreationTime.dwHighDateTime=0x1ca95bc, ftLastAccessTime.dwLowDateTime=0x1488eb0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x3475b500, ftLastWriteTime.dwHighDateTime=0x1ca95bc, nFileSizeHigh=0x0, nFileSizeLow=0x13a57c, dwReserved0=0x0, dwReserved1=0x0, cFileName="OUTLOOK.HOL", cAlternateFileName="")) returned 1 [0037.616] FindNextFileW (in: hFindFile=0x381cc0, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8ede2d00, ftCreationTime.dwHighDateTime=0x1ca8073, ftLastAccessTime.dwLowDateTime=0x14af010, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x8ede2d00, ftLastWriteTime.dwHighDateTime=0x1ca8073, nFileSizeHigh=0x0, nFileSizeLow=0x4c4c67, dwReserved0=0x0, dwReserved1=0x0, cFileName="OUTLOOK.HXS", cAlternateFileName="")) returned 1 [0037.616] FindNextFileW (in: hFindFile=0x381cc0, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1c67200, ftCreationTime.dwHighDateTime=0x1c9ff32, ftLastAccessTime.dwLowDateTime=0x14af010, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x1c67200, ftLastWriteTime.dwHighDateTime=0x1c9ff32, nFileSizeHigh=0x0, nFileSizeLow=0x277, dwReserved0=0x0, dwReserved1=0x0, cFileName="OUTLOOK_COL.HXC", cAlternateFileName="OUTLOO~2.HXC")) returned 1 [0037.616] FindNextFileW (in: hFindFile=0x381cc0, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4c28bd00, ftCreationTime.dwHighDateTime=0x1c561aa, ftLastAccessTime.dwLowDateTime=0x14af010, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x4c28bd00, ftLastWriteTime.dwHighDateTime=0x1c561aa, nFileSizeHigh=0x0, nFileSizeLow=0xcf, dwReserved0=0x0, dwReserved1=0x0, cFileName="OUTLOOK_COL.HXT", cAlternateFileName="OUTLOO~2.HXT")) returned 1 [0037.616] FindNextFileW (in: hFindFile=0x381cc0, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4c28bd00, ftCreationTime.dwHighDateTime=0x1c561aa, ftLastAccessTime.dwLowDateTime=0x14af010, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x4c28bd00, ftLastWriteTime.dwHighDateTime=0x1c561aa, nFileSizeHigh=0x0, nFileSizeLow=0x72, dwReserved0=0x0, dwReserved1=0x0, cFileName="OUTLOOK_F_COL.HXK", cAlternateFileName="OUTLOO~3.HXK")) returned 1 [0037.616] FindNextFileW (in: hFindFile=0x381cc0, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4c28bd00, ftCreationTime.dwHighDateTime=0x1c561aa, ftLastAccessTime.dwLowDateTime=0x14af010, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x4c28bd00, ftLastWriteTime.dwHighDateTime=0x1c561aa, nFileSizeHigh=0x0, nFileSizeLow=0x71, dwReserved0=0x0, dwReserved1=0x0, cFileName="OUTLOOK_K_COL.HXK", cAlternateFileName="OUTLOO~4.HXK")) returned 1 [0037.616] FindNextFileW (in: hFindFile=0x381cc0, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x40d55d00, ftCreationTime.dwHighDateTime=0x1c7cc60, ftLastAccessTime.dwLowDateTime=0x14af010, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x40d55d00, ftLastWriteTime.dwHighDateTime=0x1c7cc60, nFileSizeHigh=0x0, nFileSizeLow=0x227, dwReserved0=0x0, dwReserved1=0x0, cFileName="OUTLPERF.H", cAlternateFileName="")) returned 1 [0037.620] FindNextFileW (in: hFindFile=0x381cc0, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x40d55d00, ftCreationTime.dwHighDateTime=0x1c7cc60, ftLastAccessTime.dwLowDateTime=0x14af010, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x40d55d00, ftLastWriteTime.dwHighDateTime=0x1c7cc60, nFileSizeHigh=0x0, nFileSizeLow=0xa87, dwReserved0=0x0, dwReserved1=0x0, cFileName="OUTLPERF.INI", cAlternateFileName="")) returned 1 [0037.620] FindNextFileW (in: hFindFile=0x381cc0, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xdd250400, ftCreationTime.dwHighDateTime=0x1cac9b3, ftLastAccessTime.dwLowDateTime=0x14af010, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xdd250400, ftLastWriteTime.dwHighDateTime=0x1cac9b3, nFileSizeHigh=0x0, nFileSizeLow=0x1f760, dwReserved0=0x0, dwReserved1=0x0, cFileName="OUTLWVW.DLL", cAlternateFileName="")) returned 1 [0037.620] FindNextFileW (in: hFindFile=0x381cc0, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2411fa00, ftCreationTime.dwHighDateTime=0x1cac9b2, ftLastAccessTime.dwLowDateTime=0x14af010, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x2411fa00, ftLastWriteTime.dwHighDateTime=0x1cac9b2, nFileSizeHigh=0x0, nFileSizeLow=0x2b80, dwReserved0=0x0, dwReserved1=0x0, cFileName="OUTLWVW.DLL.IDX_DLL", cAlternateFileName="OUTLWV~1.IDX")) returned 1 [0037.620] FindNextFileW (in: hFindFile=0x381cc0, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe3a6b500, ftCreationTime.dwHighDateTime=0x1c9c49e, ftLastAccessTime.dwLowDateTime=0x50b66320, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0xe3a6b500, ftLastWriteTime.dwHighDateTime=0x1c9c49e, nFileSizeHigh=0x0, nFileSizeLow=0xd7a, dwReserved0=0x0, dwReserved1=0x0, cFileName="PASSPORT.CSS", cAlternateFileName="")) returned 1 [0037.620] FindNextFileW (in: hFindFile=0x381cc0, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe3a6b500, ftCreationTime.dwHighDateTime=0x1c9c49e, ftLastAccessTime.dwLowDateTime=0x50b66320, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0xe3a6b500, ftLastWriteTime.dwHighDateTime=0x1c9c49e, nFileSizeHigh=0x0, nFileSizeLow=0xd7a, dwReserved0=0x0, dwReserved1=0x0, cFileName="PASTEL.CSS", cAlternateFileName="")) returned 1 [0037.620] FindNextFileW (in: hFindFile=0x381cc0, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa0675200, ftCreationTime.dwHighDateTime=0x1cab7e5, ftLastAccessTime.dwLowDateTime=0x50b8c480, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0xa0675200, ftLastWriteTime.dwHighDateTime=0x1cab7e5, nFileSizeHigh=0x0, nFileSizeLow=0x14980, dwReserved0=0x0, dwReserved1=0x0, cFileName="PE.VSL", cAlternateFileName="")) returned 1 [0037.620] FindNextFileW (in: hFindFile=0x381cc0, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5cd5800, ftCreationTime.dwHighDateTime=0x1c56bc5, ftLastAccessTime.dwLowDateTime=0x50bfe8a0, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0x5cd5800, ftLastWriteTime.dwHighDateTime=0x1c56bc5, nFileSizeHigh=0x0, nFileSizeLow=0x780, dwReserved0=0x0, dwReserved1=0x0, cFileName="PIPELINE.VRD", cAlternateFileName="")) returned 1 [0037.620] FindNextFileW (in: hFindFile=0x381cc0, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x74bd800, ftCreationTime.dwHighDateTime=0x1cb71c8, ftLastAccessTime.dwLowDateTime=0xdf0d2c20, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0x74bd800, ftLastWriteTime.dwHighDateTime=0x1cb71c8, nFileSizeHigh=0x0, nFileSizeLow=0x33a380, dwReserved0=0x0, dwReserved1=0x0, cFileName="PJINTL.DLL", cAlternateFileName="")) returned 1 [0037.620] FindNextFileW (in: hFindFile=0x381cc0, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9a461000, ftCreationTime.dwHighDateTime=0x1cb7018, ftLastAccessTime.dwLowDateTime=0xdf0acac0, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0x9a461000, ftLastWriteTime.dwHighDateTime=0x1cb7018, nFileSizeHigh=0x0, nFileSizeLow=0x25b80, dwReserved0=0x0, dwReserved1=0x0, cFileName="PJINTLC.DLL", cAlternateFileName="")) returned 1 [0037.620] FindNextFileW (in: hFindFile=0x381cc0, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa52c0600, ftCreationTime.dwHighDateTime=0x1cab7e5, ftLastAccessTime.dwLowDateTime=0x50c24a00, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0xa52c0600, ftLastWriteTime.dwHighDateTime=0x1cab7e5, nFileSizeHigh=0x0, nFileSizeLow=0x2980, dwReserved0=0x0, dwReserved1=0x0, cFileName="PMENURES.DLL", cAlternateFileName="")) returned 1 [0037.620] FindNextFileW (in: hFindFile=0x381cc0, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x900f5a00, ftCreationTime.dwHighDateTime=0x1ca8073, ftLastAccessTime.dwLowDateTime=0xf5dfd790, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0x900f5a00, ftLastWriteTime.dwHighDateTime=0x1ca8073, nFileSizeHigh=0x0, nFileSizeLow=0x4cf264, dwReserved0=0x0, dwReserved1=0x0, cFileName="POWERPNT.DEV.HXS", cAlternateFileName="POWERP~1.HXS")) returned 1 [0037.620] FindNextFileW (in: hFindFile=0x381cc0, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1c67200, ftCreationTime.dwHighDateTime=0x1c9ff32, ftLastAccessTime.dwLowDateTime=0xf5dfd790, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0x1c67200, ftLastWriteTime.dwHighDateTime=0x1c9ff32, nFileSizeHigh=0x0, nFileSizeLow=0x290, dwReserved0=0x0, dwReserved1=0x0, cFileName="POWERPNT.DEV_COL.HXC", cAlternateFileName="POWERP~1.HXC")) returned 1 [0037.620] FindNextFileW (in: hFindFile=0x381cc0, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x56e35200, ftCreationTime.dwHighDateTime=0x1c561aa, ftLastAccessTime.dwLowDateTime=0xf5dfd790, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0x56e35200, ftLastWriteTime.dwHighDateTime=0x1c561aa, nFileSizeHigh=0x0, nFileSizeLow=0xd4, dwReserved0=0x0, dwReserved1=0x0, cFileName="POWERPNT.DEV_COL.HXT", cAlternateFileName="POWERP~1.HXT")) returned 1 [0037.620] FindNextFileW (in: hFindFile=0x381cc0, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x56e35200, ftCreationTime.dwHighDateTime=0x1c561aa, ftLastAccessTime.dwLowDateTime=0xf5dfd790, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0x56e35200, ftLastWriteTime.dwHighDateTime=0x1c561aa, nFileSizeHigh=0x0, nFileSizeLow=0x72, dwReserved0=0x0, dwReserved1=0x0, cFileName="POWERPNT.DEV_F_COL.HXK", cAlternateFileName="POWERP~1.HXK")) returned 1 [0037.620] FindNextFileW (in: hFindFile=0x381cc0, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x56e35200, ftCreationTime.dwHighDateTime=0x1c561aa, ftLastAccessTime.dwLowDateTime=0xf5dfd790, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0x56e35200, ftLastWriteTime.dwHighDateTime=0x1c561aa, nFileSizeHigh=0x0, nFileSizeLow=0x71, dwReserved0=0x0, dwReserved1=0x0, cFileName="POWERPNT.DEV_K_COL.HXK", cAlternateFileName="POWERP~2.HXK")) returned 1 [0037.620] FindNextFileW (in: hFindFile=0x381cc0, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe02ac500, ftCreationTime.dwHighDateTime=0x1ca9370, ftLastAccessTime.dwLowDateTime=0xf5e49a50, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xe02ac500, ftLastWriteTime.dwHighDateTime=0x1ca9370, nFileSizeHigh=0x0, nFileSizeLow=0x68013d, dwReserved0=0x0, dwReserved1=0x0, cFileName="POWERPNT.HXS", cAlternateFileName="")) returned 1 [0037.620] FindNextFileW (in: hFindFile=0x381cc0, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1c67200, ftCreationTime.dwHighDateTime=0x1c9ff32, ftLastAccessTime.dwLowDateTime=0xf5e49a50, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0x1c67200, ftLastWriteTime.dwHighDateTime=0x1c9ff32, nFileSizeHigh=0x0, nFileSizeLow=0x27c, dwReserved0=0x0, dwReserved1=0x0, cFileName="POWERPNT_COL.HXC", cAlternateFileName="POWERP~2.HXC")) returned 1 [0037.621] FindNextFileW (in: hFindFile=0x381cc0, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x534fcb00, ftCreationTime.dwHighDateTime=0x1c561aa, ftLastAccessTime.dwLowDateTime=0xf5e49a50, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0x534fcb00, ftLastWriteTime.dwHighDateTime=0x1c561aa, nFileSizeHigh=0x0, nFileSizeLow=0xd0, dwReserved0=0x0, dwReserved1=0x0, cFileName="POWERPNT_COL.HXT", cAlternateFileName="POWERP~2.HXT")) returned 1 [0037.621] FindNextFileW (in: hFindFile=0x381cc0, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x534fcb00, ftCreationTime.dwHighDateTime=0x1c561aa, ftLastAccessTime.dwLowDateTime=0xf5e49a50, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0x534fcb00, ftLastWriteTime.dwHighDateTime=0x1c561aa, nFileSizeHigh=0x0, nFileSizeLow=0x72, dwReserved0=0x0, dwReserved1=0x0, cFileName="POWERPNT_F_COL.HXK", cAlternateFileName="POWERP~3.HXK")) returned 1 [0037.621] FindNextFileW (in: hFindFile=0x381cc0, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x534fcb00, ftCreationTime.dwHighDateTime=0x1c561aa, ftLastAccessTime.dwLowDateTime=0xf5e49a50, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0x534fcb00, ftLastWriteTime.dwHighDateTime=0x1c561aa, nFileSizeHigh=0x0, nFileSizeLow=0x71, dwReserved0=0x0, dwReserved1=0x0, cFileName="POWERPNT_K_COL.HXK", cAlternateFileName="POWERP~4.HXK")) returned 1 [0037.621] FindNextFileW (in: hFindFile=0x381cc0, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xcab1b00, ftCreationTime.dwHighDateTime=0x1cabea2, ftLastAccessTime.dwLowDateTime=0xf5e6fbb0, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xcab1b00, ftLastWriteTime.dwHighDateTime=0x1cabea2, nFileSizeHigh=0x0, nFileSizeLow=0x139968, dwReserved0=0x0, dwReserved1=0x0, cFileName="PPINTL.DLL", cAlternateFileName="")) returned 1 [0037.621] FindNextFileW (in: hFindFile=0x381cc0, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x45e38b00, ftCreationTime.dwHighDateTime=0x1cabea2, ftLastAccessTime.dwLowDateTime=0xf5e49a50, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0x45e38b00, ftLastWriteTime.dwHighDateTime=0x1cabea2, nFileSizeHigh=0x0, nFileSizeLow=0x9580, dwReserved0=0x0, dwReserved1=0x0, cFileName="PPINTL.DLL.IDX_DLL", cAlternateFileName="PPINTL~1.IDX")) returned 1 [0037.621] FindNextFileW (in: hFindFile=0x381cc0, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x45e38b00, ftCreationTime.dwHighDateTime=0x1cabea2, ftLastAccessTime.dwLowDateTime=0xf5e6fbb0, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0x45e38b00, ftLastWriteTime.dwHighDateTime=0x1cabea2, nFileSizeHigh=0x0, nFileSizeLow=0x22180, dwReserved0=0x0, dwReserved1=0x0, cFileName="PPINTL.REST.IDX_DLL", cAlternateFileName="PPINTL~2.IDX")) returned 1 [0037.621] FindNextFileW (in: hFindFile=0x381cc0, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe3a6b500, ftCreationTime.dwHighDateTime=0x1c9c49e, ftLastAccessTime.dwLowDateTime=0x50c4ab60, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0xe3a6b500, ftLastWriteTime.dwHighDateTime=0x1c9c49e, nFileSizeHigh=0x0, nFileSizeLow=0xd7a, dwReserved0=0x0, dwReserved1=0x0, cFileName="PRIMARY.CSS", cAlternateFileName="")) returned 1 [0037.621] FindNextFileW (in: hFindFile=0x381cc0, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xac531400, ftCreationTime.dwHighDateTime=0x1cab7e5, ftLastAccessTime.dwLowDateTime=0x50c70cc0, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0xac531400, ftLastWriteTime.dwHighDateTime=0x1cab7e5, nFileSizeHigh=0x0, nFileSizeLow=0x21788, dwReserved0=0x0, dwReserved1=0x0, cFileName="PROPRPT.VSL", cAlternateFileName="")) returned 1 [0037.621] FindNextFileW (in: hFindFile=0x381cc0, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7e830b00, ftCreationTime.dwHighDateTime=0x1ca4730, ftLastAccessTime.dwLowDateTime=0x50c70cc0, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0x7e830b00, ftLastWriteTime.dwHighDateTime=0x1ca4730, nFileSizeHigh=0x0, nFileSizeLow=0x5c00, dwReserved0=0x0, dwReserved1=0x0, cFileName="PROPRPT.VSS", cAlternateFileName="")) returned 1 [0037.621] FindNextFileW (in: hFindFile=0x381cc0, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4722d700, ftCreationTime.dwHighDateTime=0x1c4bfe8, ftLastAccessTime.dwLowDateTime=0xfa64b3d0, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0x4722d700, ftLastWriteTime.dwHighDateTime=0x1c4bfe8, nFileSizeHigh=0x0, nFileSizeLow=0x4e00, dwReserved0=0x0, dwReserved1=0x0, cFileName="PROTTPLN.DOC", cAlternateFileName="")) returned 1 [0037.621] FindNextFileW (in: hFindFile=0x381cc0, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9744d100, ftCreationTime.dwHighDateTime=0x1c7e3af, ftLastAccessTime.dwLowDateTime=0xef00bf70, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0x9744d100, ftLastWriteTime.dwHighDateTime=0x1c7e3af, nFileSizeHigh=0x0, nFileSizeLow=0x3000, dwReserved0=0x0, dwReserved1=0x0, cFileName="PROTTPLN.PPT", cAlternateFileName="")) returned 1 [0037.621] FindNextFileW (in: hFindFile=0x381cc0, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x51dd6c00, ftCreationTime.dwHighDateTime=0x1c4bfe8, ftLastAccessTime.dwLowDateTime=0xf5e95d10, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0x51dd6c00, ftLastWriteTime.dwHighDateTime=0x1c4bfe8, nFileSizeHigh=0x0, nFileSizeLow=0x2200, dwReserved0=0x0, dwReserved1=0x0, cFileName="PROTTPLN.XLS", cAlternateFileName="")) returned 1 [0037.621] FindNextFileW (in: hFindFile=0x381cc0, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x45f1aa00, ftCreationTime.dwHighDateTime=0x1c4bfe8, ftLastAccessTime.dwLowDateTime=0xfa64b3d0, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0x45f1aa00, ftLastWriteTime.dwHighDateTime=0x1c4bfe8, nFileSizeHigh=0x0, nFileSizeLow=0x4e00, dwReserved0=0x0, dwReserved1=0x0, cFileName="PROTTPLV.DOC", cAlternateFileName="")) returned 1 [0037.621] FindNextFileW (in: hFindFile=0x381cc0, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9744d100, ftCreationTime.dwHighDateTime=0x1c7e3af, ftLastAccessTime.dwLowDateTime=0xef00bf70, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0x9744d100, ftLastWriteTime.dwHighDateTime=0x1c7e3af, nFileSizeHigh=0x0, nFileSizeLow=0x3000, dwReserved0=0x0, dwReserved1=0x0, cFileName="PROTTPLV.PPT", cAlternateFileName="")) returned 1 [0037.621] FindNextFileW (in: hFindFile=0x381cc0, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4d18b800, ftCreationTime.dwHighDateTime=0x1c4bfe8, ftLastAccessTime.dwLowDateTime=0xf5e95d10, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0x4d18b800, ftLastWriteTime.dwHighDateTime=0x1c4bfe8, nFileSizeHigh=0x0, nFileSizeLow=0x2200, dwReserved0=0x0, dwReserved1=0x0, cFileName="PROTTPLV.XLS", cAlternateFileName="")) returned 1 [0037.622] FindNextFileW (in: hFindFile=0x381cc0, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x99e7da00, ftCreationTime.dwHighDateTime=0x1c5c981, ftLastAccessTime.dwLowDateTime=0xc840bb0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x99e7da00, ftLastWriteTime.dwHighDateTime=0x1c5c981, nFileSizeHigh=0x0, nFileSizeLow=0x4f777, dwReserved0=0x0, dwReserved1=0x0, cFileName="PSRCHKEY.DAT", cAlternateFileName="")) returned 1 [0037.622] FindNextFileW (in: hFindFile=0x381cc0, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x33033d00, ftCreationTime.dwHighDateTime=0x1c56d62, ftLastAccessTime.dwLowDateTime=0xc866d10, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x33033d00, ftLastWriteTime.dwHighDateTime=0x1c56d62, nFileSizeHigh=0x0, nFileSizeLow=0x1f3978, dwReserved0=0x0, dwReserved1=0x0, cFileName="PSRCHLEX.DAT", cAlternateFileName="")) returned 1 [0037.622] FindNextFileW (in: hFindFile=0x381cc0, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x33033d00, ftCreationTime.dwHighDateTime=0x1c56d62, ftLastAccessTime.dwLowDateTime=0xc866d10, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x33033d00, ftLastWriteTime.dwHighDateTime=0x1c56d62, nFileSizeHigh=0x0, nFileSizeLow=0xcd64, dwReserved0=0x0, dwReserved1=0x0, cFileName="PSRCHLTS.DAT", cAlternateFileName="")) returned 1 [0037.622] FindNextFileW (in: hFindFile=0x381cc0, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x33033d00, ftCreationTime.dwHighDateTime=0x1c56d62, ftLastAccessTime.dwLowDateTime=0xc866d10, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x33033d00, ftLastWriteTime.dwHighDateTime=0x1c56d62, nFileSizeHigh=0x0, nFileSizeLow=0xd18, dwReserved0=0x0, dwReserved1=0x0, cFileName="PSRCHPHN.DAT", cAlternateFileName="")) returned 1 [0037.622] FindNextFileW (in: hFindFile=0x381cc0, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9b190700, ftCreationTime.dwHighDateTime=0x1c5c981, ftLastAccessTime.dwLowDateTime=0xc8d9130, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x9b190700, ftLastWriteTime.dwHighDateTime=0x1c5c981, nFileSizeHigh=0x0, nFileSizeLow=0xa03a47, dwReserved0=0x0, dwReserved1=0x0, cFileName="PSRCHSRN.DAT", cAlternateFileName="")) returned 1 [0037.622] FindNextFileW (in: hFindFile=0x381cc0, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe236cf00, ftCreationTime.dwHighDateTime=0x1cab7ca, ftLastAccessTime.dwLowDateTime=0x1bbcb690, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xe236cf00, ftLastWriteTime.dwHighDateTime=0x1cab7ca, nFileSizeHigh=0x0, nFileSizeLow=0x6a8b68, dwReserved0=0x0, dwReserved1=0x0, cFileName="PUB6INTL.DLL", cAlternateFileName="")) returned 1 [0037.622] FindNextFileW (in: hFindFile=0x381cc0, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf7146200, ftCreationTime.dwHighDateTime=0x1cab7cc, ftLastAccessTime.dwLowDateTime=0x1bb7f3d0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xf7146200, ftLastWriteTime.dwHighDateTime=0x1cab7cc, nFileSizeHigh=0x0, nFileSizeLow=0x10980, dwReserved0=0x0, dwReserved1=0x0, cFileName="PUB6INTL.DLL.IDX_DLL", cAlternateFileName="PUB6IN~1.IDX")) returned 1 [0037.622] FindNextFileW (in: hFindFile=0x381cc0, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf7146200, ftCreationTime.dwHighDateTime=0x1cab7cc, ftLastAccessTime.dwLowDateTime=0x1bbcb690, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xf7146200, ftLastWriteTime.dwHighDateTime=0x1cab7cc, nFileSizeHigh=0x0, nFileSizeLow=0x41b80, dwReserved0=0x0, dwReserved1=0x0, cFileName="PUB6INTL.REST.IDX_DLL", cAlternateFileName="PUB6IN~2.IDX")) returned 1 [0037.622] FindNextFileW (in: hFindFile=0x381cc0, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xaf925f00, ftCreationTime.dwHighDateTime=0x1c92dac, ftLastAccessTime.dwLowDateTime=0x1bbcb690, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xaf925f00, ftLastWriteTime.dwHighDateTime=0x1c92dac, nFileSizeHigh=0x0, nFileSizeLow=0x6e00, dwReserved0=0x0, dwReserved1=0x0, cFileName="PUBCOLOR.SCM", cAlternateFileName="")) returned 1 [0037.622] FindNextFileW (in: hFindFile=0x381cc0, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1ba28770, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x1bc89d70, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x1bc89d70, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="PUBFTSCM", cAlternateFileName="")) returned 1 [0037.623] FindNextFileW (in: hFindFile=0x381cc0, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1ba9ab90, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x1bde09d0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x1bde09d0, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="PUBSPAPR", cAlternateFileName="")) returned 1 [0037.623] FindNextFileW (in: hFindFile=0x381cc0, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc87ce900, ftCreationTime.dwHighDateTime=0x1ca9b87, ftLastAccessTime.dwLowDateTime=0x1bbf17f0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xc87ce900, ftLastWriteTime.dwHighDateTime=0x1ca9b87, nFileSizeHigh=0x0, nFileSizeLow=0x29d68, dwReserved0=0x0, dwReserved1=0x0, cFileName="PUBWZINT.DLL", cAlternateFileName="")) returned 1 [0037.623] FindNextFileW (in: hFindFile=0x381cc0, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9324cb00, ftCreationTime.dwHighDateTime=0x1ca9b88, ftLastAccessTime.dwLowDateTime=0x1bbf17f0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x9324cb00, ftLastWriteTime.dwHighDateTime=0x1ca9b88, nFileSizeHigh=0x0, nFileSizeLow=0x2a780, dwReserved0=0x0, dwReserved1=0x0, cFileName="PUBWZINT.REST.IDX_DLL", cAlternateFileName="PUBWZI~1.IDX")) returned 1 [0037.623] FindNextFileW (in: hFindFile=0x381cc0, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x32ad2d00, ftCreationTime.dwHighDateTime=0x1cab7c9, ftLastAccessTime.dwLowDateTime=0xef0320d0, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0x32ad2d00, ftLastWriteTime.dwHighDateTime=0x1cab7c9, nFileSizeHigh=0x0, nFileSizeLow=0x14760, dwReserved0=0x0, dwReserved1=0x0, cFileName="QRYINT32.DLL", cAlternateFileName="")) returned 1 [0037.623] FindNextFileW (in: hFindFile=0x381cc0, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1e3382f0, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x1e5274d0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x1e5274d0, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="QuickStyles", cAlternateFileName="QUICKS~1")) returned 1 [0037.623] FindNextFileW (in: hFindFile=0x381cc0, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x62bc4600, ftCreationTime.dwHighDateTime=0x1ca911f, ftLastAccessTime.dwLowDateTime=0xef0320d0, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0x62bc4600, ftLastWriteTime.dwHighDateTime=0x1ca911f, nFileSizeHigh=0x0, nFileSizeLow=0x39aa, dwReserved0=0x0, dwReserved1=0x0, cFileName="ReviewRouting_Init.xsn", cAlternateFileName="REVIEW~1.XSN")) returned 1 [0037.623] FindNextFileW (in: hFindFile=0x381cc0, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x63ed7300, ftCreationTime.dwHighDateTime=0x1ca911f, ftLastAccessTime.dwLowDateTime=0xef0320d0, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0x63ed7300, ftLastWriteTime.dwHighDateTime=0x1ca911f, nFileSizeHigh=0x0, nFileSizeLow=0x482d, dwReserved0=0x0, dwReserved1=0x0, cFileName="ReviewRouting_Review.xsn", cAlternateFileName="REVIEW~2.XSN")) returned 1 [0037.623] FindNextFileW (in: hFindFile=0x381cc0, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe3a6b500, ftCreationTime.dwHighDateTime=0x1c9c49e, ftLastAccessTime.dwLowDateTime=0x50d55500, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0xe3a6b500, ftLastWriteTime.dwHighDateTime=0x1c9c49e, nFileSizeHigh=0x0, nFileSizeLow=0xd7a, dwReserved0=0x0, dwReserved1=0x0, cFileName="ROSE.CSS", cAlternateFileName="")) returned 1 [0037.623] FindNextFileW (in: hFindFile=0x381cc0, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc1d3a600, ftCreationTime.dwHighDateTime=0x1be1dd7, ftLastAccessTime.dwLowDateTime=0x15419830, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xc1d3a600, ftLastWriteTime.dwHighDateTime=0x1be1dd7, nFileSizeHigh=0x0, nFileSizeLow=0xc06d, dwReserved0=0x0, dwReserved1=0x0, cFileName="RPLBRF35.CHM", cAlternateFileName="")) returned 1 [0037.623] FindNextFileW (in: hFindFile=0x381cc0, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa0675200, ftCreationTime.dwHighDateTime=0x1cab7e5, ftLastAccessTime.dwLowDateTime=0x50d55500, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0xa0675200, ftLastWriteTime.dwHighDateTime=0x1cab7e5, nFileSizeHigh=0x0, nFileSizeLow=0xbd68, dwReserved0=0x0, dwReserved1=0x0, cFileName="SAVASWEB.VSL", cAlternateFileName="")) returned 1 [0037.623] FindNextFileW (in: hFindFile=0x381cc0, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9271b400, ftCreationTime.dwHighDateTime=0x1ca8073, ftLastAccessTime.dwLowDateTime=0xef058230, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0x9271b400, ftLastWriteTime.dwHighDateTime=0x1ca8073, nFileSizeHigh=0x0, nFileSizeLow=0x61204, dwReserved0=0x0, dwReserved1=0x0, cFileName="SETLANG.HXS", cAlternateFileName="")) returned 1 [0037.623] FindNextFileW (in: hFindFile=0x381cc0, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1c67200, ftCreationTime.dwHighDateTime=0x1c9ff32, ftLastAccessTime.dwLowDateTime=0xef058230, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0x1c67200, ftLastWriteTime.dwHighDateTime=0x1c9ff32, nFileSizeHigh=0x0, nFileSizeLow=0x277, dwReserved0=0x0, dwReserved1=0x0, cFileName="SETLANG_COL.HXC", cAlternateFileName="SETLAN~1.HXC")) returned 1 [0037.636] FindClose (in: hFindFile=0x381cc0 | out: hFindFile=0x381cc0) returned 1 [0037.636] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e77c) returned 1 [0037.636] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e788) returned 1 [0037.636] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e7bc) returned 1 [0037.636] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033", nBufferLength=0x105, lpBuffer=0x31e2c4, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\Office14\\1033", lpFilePart=0x0) returned 0x2f [0037.636] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\", nBufferLength=0x105, lpBuffer=0x31e298, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\Office14\\1033\\", lpFilePart=0x0) returned 0x30 [0037.636] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\*", lpFindFileData=0x31e4e4 | out: lpFindFileData=0x31e4e4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee2ce510, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xdf0acac0, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0xdf0acac0, ftLastWriteTime.dwHighDateTime=0x1d305f1, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x381cc0 [0037.637] FindClose (in: hFindFile=0x381cc0 | out: hFindFile=0x381cc0) returned 1 [0037.637] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e77c) returned 1 [0037.637] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e788) returned 1 [0037.638] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e744) returned 1 [0037.638] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\Bibliography", nBufferLength=0x105, lpBuffer=0x31e24c, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\Office14\\1033\\Bibliography", lpFilePart=0x0) returned 0x3c [0037.638] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\Bibliography\\", nBufferLength=0x105, lpBuffer=0x31e220, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\Office14\\1033\\Bibliography\\", lpFilePart=0x0) returned 0x3d [0037.638] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\Bibliography\\*", lpFindFileData=0x31e46c | out: lpFindFileData=0x31e46c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1e1bb530, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x1e1bb530, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x1e1bb530, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x381cc0 [0037.639] FindClose (in: hFindFile=0x381cc0 | out: hFindFile=0x381cc0) returned 1 [0037.639] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e704) returned 1 [0037.639] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e710) returned 1 [0037.639] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e744) returned 1 [0037.639] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\Bibliography", nBufferLength=0x105, lpBuffer=0x31e24c, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\Office14\\1033\\Bibliography", lpFilePart=0x0) returned 0x3c [0037.639] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\Bibliography\\", nBufferLength=0x105, lpBuffer=0x31e220, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\Office14\\1033\\Bibliography\\", lpFilePart=0x0) returned 0x3d [0037.639] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\Bibliography\\*", lpFindFileData=0x31e46c | out: lpFindFileData=0x31e46c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1e1bb530, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x1e1bb530, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x1e1bb530, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x381cc0 [0037.639] FindClose (in: hFindFile=0x381cc0 | out: hFindFile=0x381cc0) returned 1 [0037.639] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e704) returned 1 [0037.639] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e710) returned 1 [0037.639] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e744) returned 1 [0037.639] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\DataServices", nBufferLength=0x105, lpBuffer=0x31e24c, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\Office14\\1033\\DataServices", lpFilePart=0x0) returned 0x3c [0037.639] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\DataServices\\", nBufferLength=0x105, lpBuffer=0x31e220, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\Office14\\1033\\DataServices\\", lpFilePart=0x0) returned 0x3d [0037.639] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\DataServices\\*", lpFindFileData=0x31e46c | out: lpFindFileData=0x31e46c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeecec290, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xeef015d0, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xeef015d0, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x381cc0 [0037.641] FindClose (in: hFindFile=0x381cc0 | out: hFindFile=0x381cc0) returned 1 [0037.642] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e704) returned 1 [0037.642] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e710) returned 1 [0037.642] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e744) returned 1 [0037.642] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\DataServices", nBufferLength=0x105, lpBuffer=0x31e24c, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\Office14\\1033\\DataServices", lpFilePart=0x0) returned 0x3c [0037.642] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\DataServices\\", nBufferLength=0x105, lpBuffer=0x31e220, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\Office14\\1033\\DataServices\\", lpFilePart=0x0) returned 0x3d [0037.642] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\DataServices\\*", lpFindFileData=0x31e46c | out: lpFindFileData=0x31e46c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeecec290, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xeef015d0, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xeef015d0, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x381cc0 [0037.643] FindClose (in: hFindFile=0x381cc0 | out: hFindFile=0x381cc0) returned 1 [0037.643] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e704) returned 1 [0037.643] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e710) returned 1 [0037.643] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e744) returned 1 [0037.644] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5", nBufferLength=0x105, lpBuffer=0x31e24c, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5", lpFilePart=0x0) returned 0x3c [0037.644] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\", nBufferLength=0x105, lpBuffer=0x31e220, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\", lpFilePart=0x0) returned 0x3d [0037.644] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\*", lpFindFileData=0x31e46c | out: lpFindFileData=0x31e46c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd3f79f0, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xfd443cb0, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xfd443cb0, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x381cc0 [0037.645] FindClose (in: hFindFile=0x381cc0 | out: hFindFile=0x381cc0) returned 1 [0037.646] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e704) returned 1 [0037.646] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e710) returned 1 [0037.646] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e744) returned 1 [0037.646] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5", nBufferLength=0x105, lpBuffer=0x31e24c, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5", lpFilePart=0x0) returned 0x3c [0037.646] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\", nBufferLength=0x105, lpBuffer=0x31e220, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\", lpFilePart=0x0) returned 0x3d [0037.646] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\*", lpFindFileData=0x31e46c | out: lpFindFileData=0x31e46c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd3f79f0, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xfd443cb0, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xfd443cb0, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x381cc0 [0037.647] FindClose (in: hFindFile=0x381cc0 | out: hFindFile=0x381cc0) returned 1 [0037.648] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e704) returned 1 [0037.648] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e710) returned 1 [0037.648] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e6cc) returned 1 [0037.648] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles", nBufferLength=0x105, lpBuffer=0x31e1d4, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles", lpFilePart=0x0) returned 0x48 [0037.648] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\", nBufferLength=0x105, lpBuffer=0x31e1a8, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\", lpFilePart=0x0) returned 0x49 [0037.648] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\*", lpFindFileData=0x31e3f4 | out: lpFindFileData=0x31e3f4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd3f79f0, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xfd6cb410, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xfd6cb410, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x381cc0 [0037.652] FindClose (in: hFindFile=0x381cc0 | out: hFindFile=0x381cc0) returned 1 [0037.653] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e68c) returned 1 [0037.653] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e698) returned 1 [0037.653] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e6cc) returned 1 [0037.653] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles", nBufferLength=0x105, lpBuffer=0x31e1d4, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles", lpFilePart=0x0) returned 0x48 [0037.653] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\", nBufferLength=0x105, lpBuffer=0x31e1a8, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\", lpFilePart=0x0) returned 0x49 [0037.653] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\*", lpFindFileData=0x31e3f4 | out: lpFindFileData=0x31e3f4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd3f79f0, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xfd6cb410, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xfd6cb410, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x381cc0 [0037.654] FindClose (in: hFindFile=0x381cc0 | out: hFindFile=0x381cc0) returned 1 [0037.654] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e68c) returned 1 [0037.654] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e698) returned 1 [0037.654] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\Adobe.css", nBufferLength=0x105, lpBuffer=0x31e0a4, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\Adobe.css", lpFilePart=0x0) returned 0x52 [0037.654] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e598) returned 1 [0037.655] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\Adobe.css" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\grooveforms5\\formsstyles\\adobe.css"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x274 [0037.657] GetFileType (hFile=0x274) returned 0x1 [0037.657] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e594) returned 1 [0037.657] GetFileType (hFile=0x274) returned 0x1 [0037.657] GetFileSize (in: hFile=0x274, lpFileSizeHigh=0x31e6a0 | out: lpFileSizeHigh=0x31e6a0*=0x0) returned 0x75c [0037.657] ReadFile (in: hFile=0x274, lpBuffer=0x27341b0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x31e64c, lpOverlapped=0x0 | out: lpBuffer=0x27341b0*, lpNumberOfBytesRead=0x31e64c*=0x75c, lpOverlapped=0x0) returned 1 [0037.672] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\Adobe.css", nBufferLength=0x105, lpBuffer=0x31e090, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\Adobe.css", lpFilePart=0x0) returned 0x52 [0037.672] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e584) returned 1 [0037.672] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\Adobe.css" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\grooveforms5\\formsstyles\\adobe.css"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x274 [0037.673] GetFileType (hFile=0x274) returned 0x1 [0037.673] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e580) returned 1 [0037.673] GetFileType (hFile=0x274) returned 0x1 [0037.673] WriteFile (in: hFile=0x274, lpBuffer=0x27845b4*, nNumberOfBytesToWrite=0x760, lpNumberOfBytesWritten=0x31e614, lpOverlapped=0x0 | out: lpBuffer=0x27845b4*, lpNumberOfBytesWritten=0x31e614*=0x760, lpOverlapped=0x0) returned 1 [0037.675] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\Adobe.css", nBufferLength=0x105, lpBuffer=0x31e1c4, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\Adobe.css", lpFilePart=0x0) returned 0x52 [0037.675] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\Adobe.css", nBufferLength=0x105, lpBuffer=0x31e1c4, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\Adobe.css", lpFilePart=0x0) returned 0x52 [0037.675] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e624) returned 1 [0037.675] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\Adobe.css" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\grooveforms5\\formsstyles\\adobe.css"), fInfoLevelId=0x0, lpFileInformation=0x31e6a0 | out: lpFileInformation=0x31e6a0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc8cac600, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0xfd3f79f0, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xf9e73c40, ftLastWriteTime.dwHighDateTime=0x1d6eb7e, nFileSizeHigh=0x0, nFileSizeLow=0x760)) returned 1 [0037.675] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e620) returned 1 [0037.675] MoveFileW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\Adobe.css" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\grooveforms5\\formsstyles\\adobe.css"), lpNewFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\Adobe.css" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\grooveforms5\\formsstyles\\adobe.css")) returned 1 [0037.677] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\Americana.css", nBufferLength=0x105, lpBuffer=0x31e0a4, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\Americana.css", lpFilePart=0x0) returned 0x56 [0037.677] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e598) returned 1 [0037.677] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\Americana.css" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\grooveforms5\\formsstyles\\americana.css"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x274 [0037.677] GetFileType (hFile=0x274) returned 0x1 [0037.677] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e594) returned 1 [0037.677] GetFileType (hFile=0x274) returned 0x1 [0037.678] GetFileSize (in: hFile=0x274, lpFileSizeHigh=0x31e6a0 | out: lpFileSizeHigh=0x31e6a0*=0x0) returned 0xb96 [0037.678] ReadFile (in: hFile=0x274, lpBuffer=0x2786424, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x31e64c, lpOverlapped=0x0 | out: lpBuffer=0x2786424*, lpNumberOfBytesRead=0x31e64c*=0xb96, lpOverlapped=0x0) returned 1 [0037.719] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\Americana.css", nBufferLength=0x105, lpBuffer=0x31e090, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\Americana.css", lpFilePart=0x0) returned 0x56 [0037.719] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e584) returned 1 [0037.719] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\Americana.css" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\grooveforms5\\formsstyles\\americana.css"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x274 [0037.720] GetFileType (hFile=0x274) returned 0x1 [0037.720] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e580) returned 1 [0037.720] GetFileType (hFile=0x274) returned 0x1 [0037.720] WriteFile (in: hFile=0x274, lpBuffer=0x26842bc*, nNumberOfBytesToWrite=0xba0, lpNumberOfBytesWritten=0x31e614, lpOverlapped=0x0 | out: lpBuffer=0x26842bc*, lpNumberOfBytesWritten=0x31e614*=0xba0, lpOverlapped=0x0) returned 1 [0037.721] CloseHandle (hObject=0x274) returned 1 [0037.722] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\Americana.css", nBufferLength=0x105, lpBuffer=0x31e1c4, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\Americana.css", lpFilePart=0x0) returned 0x56 [0037.722] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\Americana.css", nBufferLength=0x105, lpBuffer=0x31e1c4, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\Americana.css", lpFilePart=0x0) returned 0x56 [0037.722] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e624) returned 1 [0037.722] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\Americana.css" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\grooveforms5\\formsstyles\\americana.css"), fInfoLevelId=0x0, lpFileInformation=0x31e6a0 | out: lpFileInformation=0x31e6a0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc8cac600, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0xfd3f79f0, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xf9f0c1c0, ftLastWriteTime.dwHighDateTime=0x1d6eb7e, nFileSizeHigh=0x0, nFileSizeLow=0xba0)) returned 1 [0037.722] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e620) returned 1 [0037.722] MoveFileW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\Americana.css" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\grooveforms5\\formsstyles\\americana.css"), lpNewFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\Americana.css" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\grooveforms5\\formsstyles\\americana.css")) returned 1 [0037.722] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\BabyBlue.css", nBufferLength=0x105, lpBuffer=0x31e0a4, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\BabyBlue.css", lpFilePart=0x0) returned 0x55 [0037.722] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e598) returned 1 [0037.722] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\BabyBlue.css" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\grooveforms5\\formsstyles\\babyblue.css"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x274 [0037.723] GetFileType (hFile=0x274) returned 0x1 [0037.723] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e594) returned 1 [0037.723] GetFileType (hFile=0x274) returned 0x1 [0037.723] GetFileSize (in: hFile=0x274, lpFileSizeHigh=0x31e6a0 | out: lpFileSizeHigh=0x31e6a0*=0x0) returned 0xcb0 [0037.723] ReadFile (in: hFile=0x274, lpBuffer=0x2686250, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x31e64c, lpOverlapped=0x0 | out: lpBuffer=0x2686250*, lpNumberOfBytesRead=0x31e64c*=0xcb0, lpOverlapped=0x0) returned 1 [0037.724] CloseHandle (hObject=0x274) returned 1 [0037.738] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\BabyBlue.css", nBufferLength=0x105, lpBuffer=0x31e090, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\BabyBlue.css", lpFilePart=0x0) returned 0x55 [0037.738] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e584) returned 1 [0037.738] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\BabyBlue.css" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\grooveforms5\\formsstyles\\babyblue.css"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x274 [0037.739] GetFileType (hFile=0x274) returned 0x1 [0037.739] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e580) returned 1 [0037.739] GetFileType (hFile=0x274) returned 0x1 [0037.739] WriteFile (in: hFile=0x274, lpBuffer=0x26d82a8*, nNumberOfBytesToWrite=0xcc0, lpNumberOfBytesWritten=0x31e614, lpOverlapped=0x0 | out: lpBuffer=0x26d82a8*, lpNumberOfBytesWritten=0x31e614*=0xcc0, lpOverlapped=0x0) returned 1 [0037.740] CloseHandle (hObject=0x274) returned 1 [0037.741] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\BabyBlue.css", nBufferLength=0x105, lpBuffer=0x31e1c4, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\BabyBlue.css", lpFilePart=0x0) returned 0x55 [0037.741] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\BabyBlue.css", nBufferLength=0x105, lpBuffer=0x31e1c4, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\BabyBlue.css", lpFilePart=0x0) returned 0x55 [0037.741] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e624) returned 1 [0037.741] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\BabyBlue.css" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\grooveforms5\\formsstyles\\babyblue.css"), fInfoLevelId=0x0, lpFileInformation=0x31e6a0 | out: lpFileInformation=0x31e6a0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc8cac600, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0xfd3f79f0, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xf9f32320, ftLastWriteTime.dwHighDateTime=0x1d6eb7e, nFileSizeHigh=0x0, nFileSizeLow=0xcc0)) returned 1 [0037.741] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e620) returned 1 [0037.741] MoveFileW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\BabyBlue.css" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\grooveforms5\\formsstyles\\babyblue.css"), lpNewFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\BabyBlue.css" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\grooveforms5\\formsstyles\\babyblue.css")) returned 1 [0037.742] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\Beige.css", nBufferLength=0x105, lpBuffer=0x31e0a4, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\Beige.css", lpFilePart=0x0) returned 0x52 [0037.742] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e598) returned 1 [0037.742] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\Beige.css" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\grooveforms5\\formsstyles\\beige.css"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x274 [0037.742] GetFileType (hFile=0x274) returned 0x1 [0037.742] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e594) returned 1 [0037.742] GetFileType (hFile=0x274) returned 0x1 [0037.742] GetFileSize (in: hFile=0x274, lpFileSizeHigh=0x31e6a0 | out: lpFileSizeHigh=0x31e6a0*=0x0) returned 0x71f [0037.742] ReadFile (in: hFile=0x274, lpBuffer=0x26d9c98, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x31e64c, lpOverlapped=0x0 | out: lpBuffer=0x26d9c98*, lpNumberOfBytesRead=0x31e64c*=0x71f, lpOverlapped=0x0) returned 1 [0037.744] CloseHandle (hObject=0x274) returned 1 [0037.759] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\Beige.css", nBufferLength=0x105, lpBuffer=0x31e090, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\Beige.css", lpFilePart=0x0) returned 0x52 [0037.759] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e584) returned 1 [0037.759] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\Beige.css" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\grooveforms5\\formsstyles\\beige.css"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x274 [0037.759] GetFileType (hFile=0x274) returned 0x1 [0037.759] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e580) returned 1 [0037.760] GetFileType (hFile=0x274) returned 0x1 [0037.760] WriteFile (in: hFile=0x274, lpBuffer=0x2729f5c*, nNumberOfBytesToWrite=0x720, lpNumberOfBytesWritten=0x31e614, lpOverlapped=0x0 | out: lpBuffer=0x2729f5c*, lpNumberOfBytesWritten=0x31e614*=0x720, lpOverlapped=0x0) returned 1 [0037.760] CloseHandle (hObject=0x274) returned 1 [0037.761] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\Beige.css", nBufferLength=0x105, lpBuffer=0x31e1c4, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\Beige.css", lpFilePart=0x0) returned 0x52 [0037.761] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\Beige.css", nBufferLength=0x105, lpBuffer=0x31e1c4, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\Beige.css", lpFilePart=0x0) returned 0x52 [0037.761] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e624) returned 1 [0037.761] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\Beige.css" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\grooveforms5\\formsstyles\\beige.css"), fInfoLevelId=0x0, lpFileInformation=0x31e6a0 | out: lpFileInformation=0x31e6a0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc9fbf300, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0xfd3f79f0, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xf9f58480, ftLastWriteTime.dwHighDateTime=0x1d6eb7e, nFileSizeHigh=0x0, nFileSizeLow=0x720)) returned 1 [0037.761] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e620) returned 1 [0037.761] MoveFileW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\Beige.css" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\grooveforms5\\formsstyles\\beige.css"), lpNewFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\Beige.css" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\grooveforms5\\formsstyles\\beige.css")) returned 1 [0037.762] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\Biscay.css", nBufferLength=0x105, lpBuffer=0x31e0a4, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\Biscay.css", lpFilePart=0x0) returned 0x53 [0037.762] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e598) returned 1 [0037.762] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\Biscay.css" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\grooveforms5\\formsstyles\\biscay.css"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x274 [0037.763] GetFileType (hFile=0x274) returned 0x1 [0037.763] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e594) returned 1 [0037.763] GetFileType (hFile=0x274) returned 0x1 [0037.763] GetFileSize (in: hFile=0x274, lpFileSizeHigh=0x31e6a0 | out: lpFileSizeHigh=0x31e6a0*=0x0) returned 0xd80 [0037.763] ReadFile (in: hFile=0x274, lpBuffer=0x272bfa8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x31e64c, lpOverlapped=0x0 | out: lpBuffer=0x272bfa8*, lpNumberOfBytesRead=0x31e64c*=0xd80, lpOverlapped=0x0) returned 1 [0037.764] CloseHandle (hObject=0x274) returned 1 [0037.778] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\Biscay.css", nBufferLength=0x105, lpBuffer=0x31e090, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\Biscay.css", lpFilePart=0x0) returned 0x53 [0037.778] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e584) returned 1 [0037.778] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\Biscay.css" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\grooveforms5\\formsstyles\\biscay.css"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x274 [0037.779] GetFileType (hFile=0x274) returned 0x1 [0037.779] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e580) returned 1 [0037.779] GetFileType (hFile=0x274) returned 0x1 [0037.779] WriteFile (in: hFile=0x274, lpBuffer=0x277e2ac*, nNumberOfBytesToWrite=0xd90, lpNumberOfBytesWritten=0x31e614, lpOverlapped=0x0 | out: lpBuffer=0x277e2ac*, lpNumberOfBytesWritten=0x31e614*=0xd90, lpOverlapped=0x0) returned 1 [0037.780] CloseHandle (hObject=0x274) returned 1 [0037.781] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\Biscay.css", nBufferLength=0x105, lpBuffer=0x31e1c4, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\Biscay.css", lpFilePart=0x0) returned 0x53 [0037.781] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\Biscay.css", nBufferLength=0x105, lpBuffer=0x31e1c4, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\Biscay.css", lpFilePart=0x0) returned 0x53 [0037.781] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e624) returned 1 [0037.781] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\Biscay.css" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\grooveforms5\\formsstyles\\biscay.css"), fInfoLevelId=0x0, lpFileInformation=0x31e6a0 | out: lpFileInformation=0x31e6a0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc9fbf300, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0xfd48ff70, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xf9f7e5e0, ftLastWriteTime.dwHighDateTime=0x1d6eb7e, nFileSizeHigh=0x0, nFileSizeLow=0xd90)) returned 1 [0037.781] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e620) returned 1 [0037.781] MoveFileW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\Biscay.css" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\grooveforms5\\formsstyles\\biscay.css"), lpNewFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\Biscay.css" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\grooveforms5\\formsstyles\\biscay.css")) returned 1 [0037.781] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\BrightOrange.css", nBufferLength=0x105, lpBuffer=0x31e0a4, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\BrightOrange.css", lpFilePart=0x0) returned 0x59 [0037.781] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e598) returned 1 [0037.781] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\BrightOrange.css" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\grooveforms5\\formsstyles\\brightorange.css"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x274 [0037.798] GetFileType (hFile=0x274) returned 0x1 [0037.798] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e594) returned 1 [0037.798] GetFileType (hFile=0x274) returned 0x1 [0037.798] GetFileSize (in: hFile=0x274, lpFileSizeHigh=0x31e6a0 | out: lpFileSizeHigh=0x31e6a0*=0x0) returned 0xc3c [0037.798] ReadFile (in: hFile=0x274, lpBuffer=0x27801cc, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x31e64c, lpOverlapped=0x0 | out: lpBuffer=0x27801cc*, lpNumberOfBytesRead=0x31e64c*=0xc3c, lpOverlapped=0x0) returned 1 [0037.800] CloseHandle (hObject=0x274) returned 1 [0037.814] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\BrightOrange.css", nBufferLength=0x105, lpBuffer=0x31e090, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\BrightOrange.css", lpFilePart=0x0) returned 0x59 [0037.814] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e584) returned 1 [0037.814] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\BrightOrange.css" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\grooveforms5\\formsstyles\\brightorange.css"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x274 [0037.815] GetFileType (hFile=0x274) returned 0x1 [0037.815] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e580) returned 1 [0037.815] GetFileType (hFile=0x274) returned 0x1 [0037.815] WriteFile (in: hFile=0x274, lpBuffer=0x27d1e4c*, nNumberOfBytesToWrite=0xc40, lpNumberOfBytesWritten=0x31e614, lpOverlapped=0x0 | out: lpBuffer=0x27d1e4c*, lpNumberOfBytesWritten=0x31e614*=0xc40, lpOverlapped=0x0) returned 1 [0037.816] CloseHandle (hObject=0x274) returned 1 [0037.816] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\BrightOrange.css", nBufferLength=0x105, lpBuffer=0x31e1c4, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\BrightOrange.css", lpFilePart=0x0) returned 0x59 [0037.816] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\BrightOrange.css", nBufferLength=0x105, lpBuffer=0x31e1c4, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\BrightOrange.css", lpFilePart=0x0) returned 0x59 [0037.817] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e624) returned 1 [0037.817] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\BrightOrange.css" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\grooveforms5\\formsstyles\\brightorange.css"), fInfoLevelId=0x0, lpFileInformation=0x31e6a0 | out: lpFileInformation=0x31e6a0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc9fbf300, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0xfd48ff70, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xf9ff0a00, ftLastWriteTime.dwHighDateTime=0x1d6eb7e, nFileSizeHigh=0x0, nFileSizeLow=0xc40)) returned 1 [0037.817] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e620) returned 1 [0037.817] MoveFileW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\BrightOrange.css" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\grooveforms5\\formsstyles\\brightorange.css"), lpNewFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\BrightOrange.css" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\grooveforms5\\formsstyles\\brightorange.css")) returned 1 [0037.817] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\BrightYellow.css", nBufferLength=0x105, lpBuffer=0x31e0a4, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\BrightYellow.css", lpFilePart=0x0) returned 0x59 [0037.817] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e598) returned 1 [0037.817] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\BrightYellow.css" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\grooveforms5\\formsstyles\\brightyellow.css"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x274 [0037.817] GetFileType (hFile=0x274) returned 0x1 [0037.817] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e594) returned 1 [0037.817] GetFileType (hFile=0x274) returned 0x1 [0037.818] GetFileSize (in: hFile=0x274, lpFileSizeHigh=0x31e6a0 | out: lpFileSizeHigh=0x31e6a0*=0x0) returned 0xd03 [0037.818] ReadFile (in: hFile=0x274, lpBuffer=0x27d3e4c, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x31e64c, lpOverlapped=0x0 | out: lpBuffer=0x27d3e4c*, lpNumberOfBytesRead=0x31e64c*=0xd03, lpOverlapped=0x0) returned 1 [0037.819] CloseHandle (hObject=0x274) returned 1 [0037.833] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\BrightYellow.css", nBufferLength=0x105, lpBuffer=0x31e090, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\BrightYellow.css", lpFilePart=0x0) returned 0x59 [0037.833] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e584) returned 1 [0037.833] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\BrightYellow.css" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\grooveforms5\\formsstyles\\brightyellow.css"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x274 [0037.834] GetFileType (hFile=0x274) returned 0x1 [0037.834] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e580) returned 1 [0037.834] GetFileType (hFile=0x274) returned 0x1 [0037.834] WriteFile (in: hFile=0x274, lpBuffer=0x2825ee8*, nNumberOfBytesToWrite=0xd10, lpNumberOfBytesWritten=0x31e614, lpOverlapped=0x0 | out: lpBuffer=0x2825ee8*, lpNumberOfBytesWritten=0x31e614*=0xd10, lpOverlapped=0x0) returned 1 [0037.835] CloseHandle (hObject=0x274) returned 1 [0037.836] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\BrightYellow.css", nBufferLength=0x105, lpBuffer=0x31e1c4, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\BrightYellow.css", lpFilePart=0x0) returned 0x59 [0037.836] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\BrightYellow.css", nBufferLength=0x105, lpBuffer=0x31e1c4, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\BrightYellow.css", lpFilePart=0x0) returned 0x59 [0037.836] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e624) returned 1 [0037.836] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\BrightYellow.css" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\grooveforms5\\formsstyles\\brightyellow.css"), fInfoLevelId=0x0, lpFileInformation=0x31e6a0 | out: lpFileInformation=0x31e6a0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc9fbf300, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0xfd48ff70, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xfa016b60, ftLastWriteTime.dwHighDateTime=0x1d6eb7e, nFileSizeHigh=0x0, nFileSizeLow=0xd10)) returned 1 [0037.836] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e620) returned 1 [0037.836] MoveFileW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\BrightYellow.css" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\grooveforms5\\formsstyles\\brightyellow.css"), lpNewFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\BrightYellow.css" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\grooveforms5\\formsstyles\\brightyellow.css")) returned 1 [0037.836] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\Casual.css", nBufferLength=0x105, lpBuffer=0x31e0a4, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\Casual.css", lpFilePart=0x0) returned 0x53 [0037.836] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e598) returned 1 [0037.836] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\Casual.css" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\grooveforms5\\formsstyles\\casual.css"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x274 [0037.837] GetFileType (hFile=0x274) returned 0x1 [0037.837] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e594) returned 1 [0037.837] GetFileType (hFile=0x274) returned 0x1 [0037.837] GetFileSize (in: hFile=0x274, lpFileSizeHigh=0x31e6a0 | out: lpFileSizeHigh=0x31e6a0*=0x0) returned 0x766 [0037.837] ReadFile (in: hFile=0x274, lpBuffer=0x2827934, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x31e64c, lpOverlapped=0x0 | out: lpBuffer=0x2827934*, lpNumberOfBytesRead=0x31e64c*=0x766, lpOverlapped=0x0) returned 1 [0037.839] CloseHandle (hObject=0x274) returned 1 [0037.882] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\Casual.css", nBufferLength=0x105, lpBuffer=0x31e090, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\Casual.css", lpFilePart=0x0) returned 0x53 [0037.882] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e584) returned 1 [0037.882] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\Casual.css" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\grooveforms5\\formsstyles\\casual.css"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x274 [0037.883] GetFileType (hFile=0x274) returned 0x1 [0037.883] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e580) returned 1 [0037.883] GetFileType (hFile=0x274) returned 0x1 [0037.883] WriteFile (in: hFile=0x274, lpBuffer=0x267a0c0*, nNumberOfBytesToWrite=0x770, lpNumberOfBytesWritten=0x31e614, lpOverlapped=0x0 | out: lpBuffer=0x267a0c0*, lpNumberOfBytesWritten=0x31e614*=0x770, lpOverlapped=0x0) returned 1 [0037.884] CloseHandle (hObject=0x274) returned 1 [0037.884] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\Casual.css", nBufferLength=0x105, lpBuffer=0x31e1c4, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\Casual.css", lpFilePart=0x0) returned 0x53 [0037.884] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\Casual.css", nBufferLength=0x105, lpBuffer=0x31e1c4, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\Casual.css", lpFilePart=0x0) returned 0x53 [0037.885] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e624) returned 1 [0037.885] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\Casual.css" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\grooveforms5\\formsstyles\\casual.css"), fInfoLevelId=0x0, lpFileInformation=0x31e6a0 | out: lpFileInformation=0x31e6a0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xcb2d2000, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0xfd48ff70, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xfa088f80, ftLastWriteTime.dwHighDateTime=0x1d6eb7e, nFileSizeHigh=0x0, nFileSizeLow=0x770)) returned 1 [0037.885] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e620) returned 1 [0037.885] MoveFileW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\Casual.css" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\grooveforms5\\formsstyles\\casual.css"), lpNewFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\Casual.css" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\grooveforms5\\formsstyles\\casual.css")) returned 1 [0037.885] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\Desert.css", nBufferLength=0x105, lpBuffer=0x31e0a4, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\Desert.css", lpFilePart=0x0) returned 0x53 [0037.885] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e598) returned 1 [0037.885] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\Desert.css" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\grooveforms5\\formsstyles\\desert.css"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x274 [0037.885] GetFileType (hFile=0x274) returned 0x1 [0037.885] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e594) returned 1 [0037.885] GetFileType (hFile=0x274) returned 0x1 [0037.886] GetFileSize (in: hFile=0x274, lpFileSizeHigh=0x31e6a0 | out: lpFileSizeHigh=0x31e6a0*=0x0) returned 0xb0e [0037.886] ReadFile (in: hFile=0x274, lpBuffer=0x267be9c, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x31e64c, lpOverlapped=0x0 | out: lpBuffer=0x267be9c*, lpNumberOfBytesRead=0x31e64c*=0xb0e, lpOverlapped=0x0) returned 1 [0037.887] CloseHandle (hObject=0x274) returned 1 [0037.901] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\Desert.css", nBufferLength=0x105, lpBuffer=0x31e090, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\Desert.css", lpFilePart=0x0) returned 0x53 [0037.901] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e584) returned 1 [0037.901] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\Desert.css" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\grooveforms5\\formsstyles\\desert.css"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x274 [0037.902] GetFileType (hFile=0x274) returned 0x1 [0037.902] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e580) returned 1 [0037.902] GetFileType (hFile=0x274) returned 0x1 [0037.902] WriteFile (in: hFile=0x274, lpBuffer=0x26cd670*, nNumberOfBytesToWrite=0xb10, lpNumberOfBytesWritten=0x31e614, lpOverlapped=0x0 | out: lpBuffer=0x26cd670*, lpNumberOfBytesWritten=0x31e614*=0xb10, lpOverlapped=0x0) returned 1 [0037.903] CloseHandle (hObject=0x274) returned 1 [0037.904] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\Desert.css", nBufferLength=0x105, lpBuffer=0x31e1c4, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\Desert.css", lpFilePart=0x0) returned 0x53 [0037.904] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\Desert.css", nBufferLength=0x105, lpBuffer=0x31e1c4, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\Desert.css", lpFilePart=0x0) returned 0x53 [0037.904] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e624) returned 1 [0037.904] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\Desert.css" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\grooveforms5\\formsstyles\\desert.css"), fInfoLevelId=0x0, lpFileInformation=0x31e6a0 | out: lpFileInformation=0x31e6a0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xcb2d2000, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0xfd48ff70, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xfa0af0e0, ftLastWriteTime.dwHighDateTime=0x1d6eb7e, nFileSizeHigh=0x0, nFileSizeLow=0xb10)) returned 1 [0037.904] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e620) returned 1 [0037.904] MoveFileW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\Desert.css" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\grooveforms5\\formsstyles\\desert.css"), lpNewFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\Desert.css" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\grooveforms5\\formsstyles\\desert.css")) returned 1 [0037.905] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\Discussion.css", nBufferLength=0x105, lpBuffer=0x31e0a4, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\Discussion.css", lpFilePart=0x0) returned 0x57 [0037.905] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e598) returned 1 [0037.905] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\Discussion.css" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\grooveforms5\\formsstyles\\discussion.css"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x274 [0037.905] GetFileType (hFile=0x274) returned 0x1 [0037.905] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e594) returned 1 [0037.905] GetFileType (hFile=0x274) returned 0x1 [0037.905] GetFileSize (in: hFile=0x274, lpFileSizeHigh=0x31e6a0 | out: lpFileSizeHigh=0x31e6a0*=0x0) returned 0x173 [0037.905] ReadFile (in: hFile=0x274, lpBuffer=0x26ceac0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x31e64c, lpOverlapped=0x0 | out: lpBuffer=0x26ceac0*, lpNumberOfBytesRead=0x31e64c*=0x173, lpOverlapped=0x0) returned 1 [0037.906] CloseHandle (hObject=0x274) returned 1 [0037.919] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\Discussion.css", nBufferLength=0x105, lpBuffer=0x31e090, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\Discussion.css", lpFilePart=0x0) returned 0x57 [0037.920] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e584) returned 1 [0037.920] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\Discussion.css" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\grooveforms5\\formsstyles\\discussion.css"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x274 [0037.920] GetFileType (hFile=0x274) returned 0x1 [0037.920] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e580) returned 1 [0037.920] GetFileType (hFile=0x274) returned 0x1 [0037.920] WriteFile (in: hFile=0x274, lpBuffer=0x271d184*, nNumberOfBytesToWrite=0x180, lpNumberOfBytesWritten=0x31e614, lpOverlapped=0x0 | out: lpBuffer=0x271d184*, lpNumberOfBytesWritten=0x31e614*=0x180, lpOverlapped=0x0) returned 1 [0037.921] CloseHandle (hObject=0x274) returned 1 [0037.922] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\Discussion.css", nBufferLength=0x105, lpBuffer=0x31e1c4, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\Discussion.css", lpFilePart=0x0) returned 0x57 [0037.922] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\Discussion.css", nBufferLength=0x105, lpBuffer=0x31e1c4, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\Discussion.css", lpFilePart=0x0) returned 0x57 [0037.922] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e624) returned 1 [0037.922] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\Discussion.css" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\grooveforms5\\formsstyles\\discussion.css"), fInfoLevelId=0x0, lpFileInformation=0x31e6a0 | out: lpFileInformation=0x31e6a0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xcb2d2000, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0xfd48ff70, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xfa0d5240, ftLastWriteTime.dwHighDateTime=0x1d6eb7e, nFileSizeHigh=0x0, nFileSizeLow=0x180)) returned 1 [0037.922] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e620) returned 1 [0037.922] MoveFileW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\Discussion.css" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\grooveforms5\\formsstyles\\discussion.css"), lpNewFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\Discussion.css" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\grooveforms5\\formsstyles\\discussion.css")) returned 1 [0037.923] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\Earthy.css", nBufferLength=0x105, lpBuffer=0x31e0a4, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\Earthy.css", lpFilePart=0x0) returned 0x53 [0037.923] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e598) returned 1 [0037.923] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\Earthy.css" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\grooveforms5\\formsstyles\\earthy.css"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x274 [0037.924] GetFileType (hFile=0x274) returned 0x1 [0037.924] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e594) returned 1 [0037.924] GetFileType (hFile=0x274) returned 0x1 [0037.924] GetFileSize (in: hFile=0x274, lpFileSizeHigh=0x31e6a0 | out: lpFileSizeHigh=0x31e6a0*=0x0) returned 0x71e [0037.924] ReadFile (in: hFile=0x274, lpBuffer=0x271eb80, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x31e64c, lpOverlapped=0x0 | out: lpBuffer=0x271eb80*, lpNumberOfBytesRead=0x31e64c*=0x71e, lpOverlapped=0x0) returned 1 [0037.925] CloseHandle (hObject=0x274) returned 1 [0037.939] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\Earthy.css", nBufferLength=0x105, lpBuffer=0x31e090, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\Earthy.css", lpFilePart=0x0) returned 0x53 [0037.939] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e584) returned 1 [0037.939] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\Earthy.css" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\grooveforms5\\formsstyles\\earthy.css"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x274 [0037.940] GetFileType (hFile=0x274) returned 0x1 [0037.940] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e580) returned 1 [0037.941] GetFileType (hFile=0x274) returned 0x1 [0037.941] WriteFile (in: hFile=0x274, lpBuffer=0x276ee48*, nNumberOfBytesToWrite=0x720, lpNumberOfBytesWritten=0x31e614, lpOverlapped=0x0 | out: lpBuffer=0x276ee48*, lpNumberOfBytesWritten=0x31e614*=0x720, lpOverlapped=0x0) returned 1 [0037.941] CloseHandle (hObject=0x274) returned 1 [0037.942] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\Earthy.css", nBufferLength=0x105, lpBuffer=0x31e1c4, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\Earthy.css", lpFilePart=0x0) returned 0x53 [0037.942] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\Earthy.css", nBufferLength=0x105, lpBuffer=0x31e1c4, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\Earthy.css", lpFilePart=0x0) returned 0x53 [0037.942] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e624) returned 1 [0037.942] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\Earthy.css" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\grooveforms5\\formsstyles\\earthy.css"), fInfoLevelId=0x0, lpFileInformation=0x31e6a0 | out: lpFileInformation=0x31e6a0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xcb2d2000, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0xfd4b60d0, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xfa121500, ftLastWriteTime.dwHighDateTime=0x1d6eb7e, nFileSizeHigh=0x0, nFileSizeLow=0x720)) returned 1 [0037.943] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e620) returned 1 [0037.943] MoveFileW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\Earthy.css" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\grooveforms5\\formsstyles\\earthy.css"), lpNewFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\Earthy.css" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\grooveforms5\\formsstyles\\earthy.css")) returned 1 [0037.943] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\GrayCheck.css", nBufferLength=0x105, lpBuffer=0x31e0a4, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\GrayCheck.css", lpFilePart=0x0) returned 0x56 [0037.943] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e598) returned 1 [0037.943] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\GrayCheck.css" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\grooveforms5\\formsstyles\\graycheck.css"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x274 [0037.960] GetFileType (hFile=0x274) returned 0x1 [0037.960] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e594) returned 1 [0037.960] GetFileType (hFile=0x274) returned 0x1 [0037.960] GetFileSize (in: hFile=0x274, lpFileSizeHigh=0x31e6a0 | out: lpFileSizeHigh=0x31e6a0*=0x0) returned 0xbea [0037.960] ReadFile (in: hFile=0x274, lpBuffer=0x2770d0c, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x31e64c, lpOverlapped=0x0 | out: lpBuffer=0x2770d0c*, lpNumberOfBytesRead=0x31e64c*=0xbea, lpOverlapped=0x0) returned 1 [0037.962] CloseHandle (hObject=0x274) returned 1 [0037.976] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\GrayCheck.css", nBufferLength=0x105, lpBuffer=0x31e090, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\GrayCheck.css", lpFilePart=0x0) returned 0x56 [0037.976] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e584) returned 1 [0037.976] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\GrayCheck.css" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\grooveforms5\\formsstyles\\graycheck.css"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x274 [0037.976] GetFileType (hFile=0x274) returned 0x1 [0037.976] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e580) returned 1 [0037.976] GetFileType (hFile=0x274) returned 0x1 [0037.977] WriteFile (in: hFile=0x274, lpBuffer=0x27c27f4*, nNumberOfBytesToWrite=0xbf0, lpNumberOfBytesWritten=0x31e614, lpOverlapped=0x0 | out: lpBuffer=0x27c27f4*, lpNumberOfBytesWritten=0x31e614*=0xbf0, lpOverlapped=0x0) returned 1 [0037.977] CloseHandle (hObject=0x274) returned 1 [0037.980] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\GrayCheck.css", nBufferLength=0x105, lpBuffer=0x31e1c4, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\GrayCheck.css", lpFilePart=0x0) returned 0x56 [0037.980] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\GrayCheck.css", nBufferLength=0x105, lpBuffer=0x31e1c4, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\GrayCheck.css", lpFilePart=0x0) returned 0x56 [0037.980] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e624) returned 1 [0037.980] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\GrayCheck.css" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\grooveforms5\\formsstyles\\graycheck.css"), fInfoLevelId=0x0, lpFileInformation=0x31e6a0 | out: lpFileInformation=0x31e6a0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xcb2d2000, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0xfd5747b0, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xfa16d7c0, ftLastWriteTime.dwHighDateTime=0x1d6eb7e, nFileSizeHigh=0x0, nFileSizeLow=0xbf0)) returned 1 [0037.980] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e620) returned 1 [0037.980] MoveFileW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\GrayCheck.css" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\grooveforms5\\formsstyles\\graycheck.css"), lpNewFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\GrayCheck.css" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\grooveforms5\\formsstyles\\graycheck.css")) returned 1 [0037.981] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\GreenTea.css", nBufferLength=0x105, lpBuffer=0x31e0a4, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\GreenTea.css", lpFilePart=0x0) returned 0x55 [0037.981] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e598) returned 1 [0037.981] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\GreenTea.css" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\grooveforms5\\formsstyles\\greentea.css"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x274 [0037.981] GetFileType (hFile=0x274) returned 0x1 [0037.981] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e594) returned 1 [0037.981] GetFileType (hFile=0x274) returned 0x1 [0037.981] GetFileSize (in: hFile=0x274, lpFileSizeHigh=0x31e6a0 | out: lpFileSizeHigh=0x31e6a0*=0x0) returned 0x752 [0037.981] ReadFile (in: hFile=0x274, lpBuffer=0x27c422c, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x31e64c, lpOverlapped=0x0 | out: lpBuffer=0x27c422c*, lpNumberOfBytesRead=0x31e64c*=0x752, lpOverlapped=0x0) returned 1 [0037.983] CloseHandle (hObject=0x274) returned 1 [0037.997] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\GreenTea.css", nBufferLength=0x105, lpBuffer=0x31e090, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\GreenTea.css", lpFilePart=0x0) returned 0x55 [0037.997] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e584) returned 1 [0037.997] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\GreenTea.css" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\grooveforms5\\formsstyles\\greentea.css"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x274 [0037.997] GetFileType (hFile=0x274) returned 0x1 [0037.997] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e580) returned 1 [0037.997] GetFileType (hFile=0x274) returned 0x1 [0037.998] WriteFile (in: hFile=0x274, lpBuffer=0x2814648*, nNumberOfBytesToWrite=0x760, lpNumberOfBytesWritten=0x31e614, lpOverlapped=0x0 | out: lpBuffer=0x2814648*, lpNumberOfBytesWritten=0x31e614*=0x760, lpOverlapped=0x0) returned 1 [0037.998] CloseHandle (hObject=0x274) returned 1 [0037.999] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\GreenTea.css", nBufferLength=0x105, lpBuffer=0x31e1c4, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\GreenTea.css", lpFilePart=0x0) returned 0x55 [0037.999] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\GreenTea.css", nBufferLength=0x105, lpBuffer=0x31e1c4, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\GreenTea.css", lpFilePart=0x0) returned 0x55 [0037.999] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e624) returned 1 [0037.999] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\GreenTea.css" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\grooveforms5\\formsstyles\\greentea.css"), fInfoLevelId=0x0, lpFileInformation=0x31e6a0 | out: lpFileInformation=0x31e6a0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xcc5e4d00, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0xfd5747b0, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xfa193920, ftLastWriteTime.dwHighDateTime=0x1d6eb7e, nFileSizeHigh=0x0, nFileSizeLow=0x760)) returned 1 [0037.999] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e620) returned 1 [0037.999] MoveFileW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\GreenTea.css" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\grooveforms5\\formsstyles\\greentea.css"), lpNewFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\GreenTea.css" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\grooveforms5\\formsstyles\\greentea.css")) returned 1 [0038.000] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\LightSpirit.css", nBufferLength=0x105, lpBuffer=0x31e0a4, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\LightSpirit.css", lpFilePart=0x0) returned 0x58 [0038.000] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e598) returned 1 [0038.000] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\LightSpirit.css" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\grooveforms5\\formsstyles\\lightspirit.css"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x274 [0038.000] GetFileType (hFile=0x274) returned 0x1 [0038.001] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e594) returned 1 [0038.001] GetFileType (hFile=0x274) returned 0x1 [0038.001] GetFileSize (in: hFile=0x274, lpFileSizeHigh=0x31e6a0 | out: lpFileSizeHigh=0x31e6a0*=0x0) returned 0x7c4 [0038.001] ReadFile (in: hFile=0x274, lpBuffer=0x28160f4, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x31e64c, lpOverlapped=0x0 | out: lpBuffer=0x28160f4*, lpNumberOfBytesRead=0x31e64c*=0x7c4, lpOverlapped=0x0) returned 1 [0038.002] CloseHandle (hObject=0x274) returned 1 [0038.043] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\LightSpirit.css", nBufferLength=0x105, lpBuffer=0x31e090, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\LightSpirit.css", lpFilePart=0x0) returned 0x58 [0038.043] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e584) returned 1 [0038.043] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\LightSpirit.css" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\grooveforms5\\formsstyles\\lightspirit.css"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x274 [0038.044] GetFileType (hFile=0x274) returned 0x1 [0038.044] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e580) returned 1 [0038.044] GetFileType (hFile=0x274) returned 0x1 [0038.044] WriteFile (in: hFile=0x274, lpBuffer=0x266827c*, nNumberOfBytesToWrite=0x7d0, lpNumberOfBytesWritten=0x31e614, lpOverlapped=0x0 | out: lpBuffer=0x266827c*, lpNumberOfBytesWritten=0x31e614*=0x7d0, lpOverlapped=0x0) returned 1 [0038.045] CloseHandle (hObject=0x274) returned 1 [0038.046] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\LightSpirit.css", nBufferLength=0x105, lpBuffer=0x31e1c4, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\LightSpirit.css", lpFilePart=0x0) returned 0x58 [0038.046] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\LightSpirit.css", nBufferLength=0x105, lpBuffer=0x31e1c4, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\LightSpirit.css", lpFilePart=0x0) returned 0x58 [0038.046] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e624) returned 1 [0038.046] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\LightSpirit.css" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\grooveforms5\\formsstyles\\lightspirit.css"), fInfoLevelId=0x0, lpFileInformation=0x31e6a0 | out: lpFileInformation=0x31e6a0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xcc5e4d00, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0xfd632e90, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xfa205d40, ftLastWriteTime.dwHighDateTime=0x1d6eb7e, nFileSizeHigh=0x0, nFileSizeLow=0x7d0)) returned 1 [0038.046] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e620) returned 1 [0038.046] MoveFileW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\LightSpirit.css" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\grooveforms5\\formsstyles\\lightspirit.css"), lpNewFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\LightSpirit.css" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\grooveforms5\\formsstyles\\lightspirit.css")) returned 1 [0038.047] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\Lime.css", nBufferLength=0x105, lpBuffer=0x31e0a4, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\Lime.css", lpFilePart=0x0) returned 0x51 [0038.047] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e598) returned 1 [0038.047] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\Lime.css" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\grooveforms5\\formsstyles\\lime.css"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x274 [0038.047] GetFileType (hFile=0x274) returned 0x1 [0038.047] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e594) returned 1 [0038.047] GetFileType (hFile=0x274) returned 0x1 [0038.047] GetFileSize (in: hFile=0x274, lpFileSizeHigh=0x31e6a0 | out: lpFileSizeHigh=0x31e6a0*=0x0) returned 0xd77 [0038.047] ReadFile (in: hFile=0x274, lpBuffer=0x266a2d0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x31e64c, lpOverlapped=0x0 | out: lpBuffer=0x266a2d0*, lpNumberOfBytesRead=0x31e64c*=0xd77, lpOverlapped=0x0) returned 1 [0038.050] CloseHandle (hObject=0x274) returned 1 [0038.063] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\Lime.css", nBufferLength=0x105, lpBuffer=0x31e090, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\Lime.css", lpFilePart=0x0) returned 0x51 [0038.063] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e584) returned 1 [0038.064] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\Lime.css" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\grooveforms5\\formsstyles\\lime.css"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x274 [0038.064] GetFileType (hFile=0x274) returned 0x1 [0038.064] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e580) returned 1 [0038.064] GetFileType (hFile=0x274) returned 0x1 [0038.064] WriteFile (in: hFile=0x274, lpBuffer=0x26bc6d4*, nNumberOfBytesToWrite=0xd80, lpNumberOfBytesWritten=0x31e614, lpOverlapped=0x0 | out: lpBuffer=0x26bc6d4*, lpNumberOfBytesWritten=0x31e614*=0xd80, lpOverlapped=0x0) returned 1 [0038.066] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\Lime.css", nBufferLength=0x105, lpBuffer=0x31e1c4, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\Lime.css", lpFilePart=0x0) returned 0x51 [0038.066] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\Lime.css", nBufferLength=0x105, lpBuffer=0x31e1c4, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\Lime.css", lpFilePart=0x0) returned 0x51 [0038.066] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e624) returned 1 [0038.066] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\Lime.css" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\grooveforms5\\formsstyles\\lime.css"), fInfoLevelId=0x0, lpFileInformation=0x31e6a0 | out: lpFileInformation=0x31e6a0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xcc5e4d00, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0xfd632e90, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xfa252000, ftLastWriteTime.dwHighDateTime=0x1d6eb7e, nFileSizeHigh=0x0, nFileSizeLow=0xd80)) returned 1 [0038.066] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e620) returned 1 [0038.066] MoveFileW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\Lime.css" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\grooveforms5\\formsstyles\\lime.css"), lpNewFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\Lime.css" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\grooveforms5\\formsstyles\\lime.css")) returned 1 [0038.067] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\Maroon.css", nBufferLength=0x105, lpBuffer=0x31e0a4, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\Maroon.css", lpFilePart=0x0) returned 0x53 [0038.068] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e598) returned 1 [0038.068] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\Maroon.css" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\grooveforms5\\formsstyles\\maroon.css"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x274 [0038.068] GetFileType (hFile=0x274) returned 0x1 [0038.068] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e594) returned 1 [0038.068] GetFileType (hFile=0x274) returned 0x1 [0038.068] GetFileSize (in: hFile=0x274, lpFileSizeHigh=0x31e6a0 | out: lpFileSizeHigh=0x31e6a0*=0x0) returned 0x715 [0038.068] ReadFile (in: hFile=0x274, lpBuffer=0x26be0b0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x31e64c, lpOverlapped=0x0 | out: lpBuffer=0x26be0b0*, lpNumberOfBytesRead=0x31e64c*=0x715, lpOverlapped=0x0) returned 1 [0038.083] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\Maroon.css", nBufferLength=0x105, lpBuffer=0x31e090, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\Maroon.css", lpFilePart=0x0) returned 0x53 [0038.083] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e584) returned 1 [0038.083] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\Maroon.css" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\grooveforms5\\formsstyles\\maroon.css"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x274 [0038.084] GetFileType (hFile=0x274) returned 0x1 [0038.084] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e580) returned 1 [0038.084] GetFileType (hFile=0x274) returned 0x1 [0038.084] WriteFile (in: hFile=0x274, lpBuffer=0x270e380*, nNumberOfBytesToWrite=0x720, lpNumberOfBytesWritten=0x31e614, lpOverlapped=0x0 | out: lpBuffer=0x270e380*, lpNumberOfBytesWritten=0x31e614*=0x720, lpOverlapped=0x0) returned 1 [0038.085] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\Maroon.css", nBufferLength=0x105, lpBuffer=0x31e1c4, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\Maroon.css", lpFilePart=0x0) returned 0x53 [0038.085] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\Maroon.css", nBufferLength=0x105, lpBuffer=0x31e1c4, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\Maroon.css", lpFilePart=0x0) returned 0x53 [0038.085] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e624) returned 1 [0038.085] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\Maroon.css" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\grooveforms5\\formsstyles\\maroon.css"), fInfoLevelId=0x0, lpFileInformation=0x31e6a0 | out: lpFileInformation=0x31e6a0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xcc5e4d00, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0xfd632e90, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xfa278160, ftLastWriteTime.dwHighDateTime=0x1d6eb7e, nFileSizeHigh=0x0, nFileSizeLow=0x720)) returned 1 [0038.085] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e620) returned 1 [0038.085] MoveFileW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\Maroon.css" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\grooveforms5\\formsstyles\\maroon.css"), lpNewFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\Maroon.css" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\grooveforms5\\formsstyles\\maroon.css")) returned 1 [0038.086] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\Oasis.css", nBufferLength=0x105, lpBuffer=0x31e0a4, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\Oasis.css", lpFilePart=0x0) returned 0x52 [0038.086] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e598) returned 1 [0038.086] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\Oasis.css" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\grooveforms5\\formsstyles\\oasis.css"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x274 [0038.086] GetFileType (hFile=0x274) returned 0x1 [0038.086] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e594) returned 1 [0038.086] GetFileType (hFile=0x274) returned 0x1 [0038.086] GetFileSize (in: hFile=0x274, lpFileSizeHigh=0x31e6a0 | out: lpFileSizeHigh=0x31e6a0*=0x0) returned 0xd80 [0038.086] ReadFile (in: hFile=0x274, lpBuffer=0x27103c8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x31e64c, lpOverlapped=0x0 | out: lpBuffer=0x27103c8*, lpNumberOfBytesRead=0x31e64c*=0xd80, lpOverlapped=0x0) returned 1 [0038.101] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\Oasis.css", nBufferLength=0x105, lpBuffer=0x31e090, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\Oasis.css", lpFilePart=0x0) returned 0x52 [0038.101] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e584) returned 1 [0038.102] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\Oasis.css" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\grooveforms5\\formsstyles\\oasis.css"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x274 [0038.102] GetFileType (hFile=0x274) returned 0x1 [0038.102] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e580) returned 1 [0038.102] GetFileType (hFile=0x274) returned 0x1 [0038.102] WriteFile (in: hFile=0x274, lpBuffer=0x27626c8*, nNumberOfBytesToWrite=0xd90, lpNumberOfBytesWritten=0x31e614, lpOverlapped=0x0 | out: lpBuffer=0x27626c8*, lpNumberOfBytesWritten=0x31e614*=0xd90, lpOverlapped=0x0) returned 1 [0038.103] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\Oasis.css", nBufferLength=0x105, lpBuffer=0x31e1c4, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\Oasis.css", lpFilePart=0x0) returned 0x52 [0038.103] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\Oasis.css", nBufferLength=0x105, lpBuffer=0x31e1c4, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\Oasis.css", lpFilePart=0x0) returned 0x52 [0038.103] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e624) returned 1 [0038.103] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\Oasis.css" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\grooveforms5\\formsstyles\\oasis.css"), fInfoLevelId=0x0, lpFileInformation=0x31e6a0 | out: lpFileInformation=0x31e6a0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xcc5e4d00, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0xfd632e90, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xfa29e2c0, ftLastWriteTime.dwHighDateTime=0x1d6eb7e, nFileSizeHigh=0x0, nFileSizeLow=0xd90)) returned 1 [0038.103] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e620) returned 1 [0038.103] MoveFileW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\Oasis.css" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\grooveforms5\\formsstyles\\oasis.css"), lpNewFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\Oasis.css" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\grooveforms5\\formsstyles\\oasis.css")) returned 1 [0038.104] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\OliveGreen.css", nBufferLength=0x105, lpBuffer=0x31e0a4, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\OliveGreen.css", lpFilePart=0x0) returned 0x57 [0038.104] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e598) returned 1 [0038.104] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\OliveGreen.css" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\grooveforms5\\formsstyles\\olivegreen.css"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x274 [0038.105] GetFileType (hFile=0x274) returned 0x1 [0038.105] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e594) returned 1 [0038.105] GetFileType (hFile=0x274) returned 0x1 [0038.105] GetFileSize (in: hFile=0x274, lpFileSizeHigh=0x31e6a0 | out: lpFileSizeHigh=0x31e6a0*=0x0) returned 0x74f [0038.105] ReadFile (in: hFile=0x274, lpBuffer=0x27640f4, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x31e64c, lpOverlapped=0x0 | out: lpBuffer=0x27640f4*, lpNumberOfBytesRead=0x31e64c*=0x74f, lpOverlapped=0x0) returned 1 [0038.120] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\OliveGreen.css", nBufferLength=0x105, lpBuffer=0x31e090, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\OliveGreen.css", lpFilePart=0x0) returned 0x57 [0038.120] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e584) returned 1 [0038.120] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\OliveGreen.css" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\grooveforms5\\formsstyles\\olivegreen.css"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x274 [0038.121] GetFileType (hFile=0x274) returned 0x1 [0038.121] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e580) returned 1 [0038.121] GetFileType (hFile=0x274) returned 0x1 [0038.121] WriteFile (in: hFile=0x274, lpBuffer=0x27b44bc*, nNumberOfBytesToWrite=0x750, lpNumberOfBytesWritten=0x31e614, lpOverlapped=0x0 | out: lpBuffer=0x27b44bc*, lpNumberOfBytesWritten=0x31e614*=0x750, lpOverlapped=0x0) returned 1 [0038.122] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\OliveGreen.css", nBufferLength=0x105, lpBuffer=0x31e1c4, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\OliveGreen.css", lpFilePart=0x0) returned 0x57 [0038.122] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\OliveGreen.css", nBufferLength=0x105, lpBuffer=0x31e1c4, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\OliveGreen.css", lpFilePart=0x0) returned 0x57 [0038.122] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e624) returned 1 [0038.122] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\OliveGreen.css" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\grooveforms5\\formsstyles\\olivegreen.css"), fInfoLevelId=0x0, lpFileInformation=0x31e6a0 | out: lpFileInformation=0x31e6a0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xcd8f7a00, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0xfd658ff0, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xfa2c4420, ftLastWriteTime.dwHighDateTime=0x1d6eb7e, nFileSizeHigh=0x0, nFileSizeLow=0x750)) returned 1 [0038.122] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e620) returned 1 [0038.122] MoveFileW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\OliveGreen.css" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\grooveforms5\\formsstyles\\olivegreen.css"), lpNewFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\OliveGreen.css" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\grooveforms5\\formsstyles\\olivegreen.css")) returned 1 [0038.123] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\Premium.css", nBufferLength=0x105, lpBuffer=0x31e0a4, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\Premium.css", lpFilePart=0x0) returned 0x54 [0038.123] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e598) returned 1 [0038.123] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\Premium.css" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\grooveforms5\\formsstyles\\premium.css"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x274 [0038.123] GetFileType (hFile=0x274) returned 0x1 [0038.123] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e594) returned 1 [0038.123] GetFileType (hFile=0x274) returned 0x1 [0038.123] GetFileSize (in: hFile=0x274, lpFileSizeHigh=0x31e6a0 | out: lpFileSizeHigh=0x31e6a0*=0x0) returned 0x705 [0038.123] ReadFile (in: hFile=0x274, lpBuffer=0x27b5ea4, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x31e64c, lpOverlapped=0x0 | out: lpBuffer=0x27b5ea4*, lpNumberOfBytesRead=0x31e64c*=0x705, lpOverlapped=0x0) returned 1 [0038.138] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\Premium.css", nBufferLength=0x105, lpBuffer=0x31e090, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\Premium.css", lpFilePart=0x0) returned 0x54 [0038.138] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e584) returned 1 [0038.138] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\Premium.css" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\grooveforms5\\formsstyles\\premium.css"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x274 [0038.139] GetFileType (hFile=0x274) returned 0x1 [0038.139] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e580) returned 1 [0038.139] GetFileType (hFile=0x274) returned 0x1 [0038.139] WriteFile (in: hFile=0x274, lpBuffer=0x2806128*, nNumberOfBytesToWrite=0x710, lpNumberOfBytesWritten=0x31e614, lpOverlapped=0x0 | out: lpBuffer=0x2806128*, lpNumberOfBytesWritten=0x31e614*=0x710, lpOverlapped=0x0) returned 1 [0038.140] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\Premium.css", nBufferLength=0x105, lpBuffer=0x31e1c4, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\Premium.css", lpFilePart=0x0) returned 0x54 [0038.140] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\Premium.css", nBufferLength=0x105, lpBuffer=0x31e1c4, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\Premium.css", lpFilePart=0x0) returned 0x54 [0038.140] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e624) returned 1 [0038.140] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\Premium.css" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\grooveforms5\\formsstyles\\premium.css"), fInfoLevelId=0x0, lpFileInformation=0x31e6a0 | out: lpFileInformation=0x31e6a0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xcd8f7a00, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0xfd658ff0, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xfa2ea580, ftLastWriteTime.dwHighDateTime=0x1d6eb7e, nFileSizeHigh=0x0, nFileSizeLow=0x710)) returned 1 [0038.140] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e620) returned 1 [0038.140] MoveFileW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\Premium.css" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\grooveforms5\\formsstyles\\premium.css"), lpNewFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\Premium.css" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\grooveforms5\\formsstyles\\premium.css")) returned 1 [0038.141] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\Slate.css", nBufferLength=0x105, lpBuffer=0x31e0a4, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\Slate.css", lpFilePart=0x0) returned 0x52 [0038.141] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e598) returned 1 [0038.141] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\Slate.css" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\grooveforms5\\formsstyles\\slate.css"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x274 [0038.142] GetFileType (hFile=0x274) returned 0x1 [0038.142] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e594) returned 1 [0038.142] GetFileType (hFile=0x274) returned 0x1 [0038.142] GetFileSize (in: hFile=0x274, lpFileSizeHigh=0x31e6a0 | out: lpFileSizeHigh=0x31e6a0*=0x0) returned 0xdbf [0038.142] ReadFile (in: hFile=0x274, lpBuffer=0x2808230, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x31e64c, lpOverlapped=0x0 | out: lpBuffer=0x2808230*, lpNumberOfBytesRead=0x31e64c*=0xdbf, lpOverlapped=0x0) returned 1 [0038.185] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\Slate.css", nBufferLength=0x105, lpBuffer=0x31e090, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\Slate.css", lpFilePart=0x0) returned 0x52 [0038.185] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e584) returned 1 [0038.185] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\Slate.css" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\grooveforms5\\formsstyles\\slate.css"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x274 [0038.185] GetFileType (hFile=0x274) returned 0x1 [0038.185] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e580) returned 1 [0038.186] GetFileType (hFile=0x274) returned 0x1 [0038.186] WriteFile (in: hFile=0x274, lpBuffer=0x265ac6c*, nNumberOfBytesToWrite=0xdc0, lpNumberOfBytesWritten=0x31e614, lpOverlapped=0x0 | out: lpBuffer=0x265ac6c*, lpNumberOfBytesWritten=0x31e614*=0xdc0, lpOverlapped=0x0) returned 1 [0038.186] CloseHandle (hObject=0x274) returned 1 [0038.187] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\Slate.css", nBufferLength=0x105, lpBuffer=0x31e1c4, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\Slate.css", lpFilePart=0x0) returned 0x52 [0038.187] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\Slate.css", nBufferLength=0x105, lpBuffer=0x31e1c4, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\Slate.css", lpFilePart=0x0) returned 0x52 [0038.187] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e624) returned 1 [0038.187] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\Slate.css" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\grooveforms5\\formsstyles\\slate.css"), fInfoLevelId=0x0, lpFileInformation=0x31e6a0 | out: lpFileInformation=0x31e6a0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xcd8f7a00, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0xfd67f150, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xfa35c9a0, ftLastWriteTime.dwHighDateTime=0x1d6eb7e, nFileSizeHigh=0x0, nFileSizeLow=0xdc0)) returned 1 [0038.187] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e620) returned 1 [0038.187] MoveFileW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\Slate.css" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\grooveforms5\\formsstyles\\slate.css"), lpNewFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\Slate.css" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\grooveforms5\\formsstyles\\slate.css")) returned 1 [0038.188] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\SlateBlue.css", nBufferLength=0x105, lpBuffer=0x31e0a4, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\SlateBlue.css", lpFilePart=0x0) returned 0x56 [0038.188] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e598) returned 1 [0038.188] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\SlateBlue.css" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\grooveforms5\\formsstyles\\slateblue.css"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x274 [0038.188] GetFileType (hFile=0x274) returned 0x1 [0038.188] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e594) returned 1 [0038.188] GetFileType (hFile=0x274) returned 0x1 [0038.188] GetFileSize (in: hFile=0x274, lpFileSizeHigh=0x31e6a0 | out: lpFileSizeHigh=0x31e6a0*=0x0) returned 0x74e [0038.188] ReadFile (in: hFile=0x274, lpBuffer=0x265c694, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x31e64c, lpOverlapped=0x0 | out: lpBuffer=0x265c694*, lpNumberOfBytesRead=0x31e64c*=0x74e, lpOverlapped=0x0) returned 1 [0038.190] CloseHandle (hObject=0x274) returned 1 [0038.205] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\SlateBlue.css", nBufferLength=0x105, lpBuffer=0x31e090, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\SlateBlue.css", lpFilePart=0x0) returned 0x56 [0038.205] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e584) returned 1 [0038.205] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\SlateBlue.css" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\grooveforms5\\formsstyles\\slateblue.css"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x274 [0038.206] GetFileType (hFile=0x274) returned 0x1 [0038.206] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e580) returned 1 [0038.206] GetFileType (hFile=0x274) returned 0x1 [0038.206] WriteFile (in: hFile=0x274, lpBuffer=0x26acbb4*, nNumberOfBytesToWrite=0x750, lpNumberOfBytesWritten=0x31e614, lpOverlapped=0x0 | out: lpBuffer=0x26acbb4*, lpNumberOfBytesWritten=0x31e614*=0x750, lpOverlapped=0x0) returned 1 [0038.207] CloseHandle (hObject=0x274) returned 1 [0038.207] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\SlateBlue.css", nBufferLength=0x105, lpBuffer=0x31e1c4, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\SlateBlue.css", lpFilePart=0x0) returned 0x56 [0038.208] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\SlateBlue.css", nBufferLength=0x105, lpBuffer=0x31e1c4, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\SlateBlue.css", lpFilePart=0x0) returned 0x56 [0038.208] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e624) returned 1 [0038.208] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\SlateBlue.css" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\grooveforms5\\formsstyles\\slateblue.css"), fInfoLevelId=0x0, lpFileInformation=0x31e6a0 | out: lpFileInformation=0x31e6a0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xcd8f7a00, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0xfd67f150, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xfa3a8c60, ftLastWriteTime.dwHighDateTime=0x1d6eb7e, nFileSizeHigh=0x0, nFileSizeLow=0x750)) returned 1 [0038.208] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e620) returned 1 [0038.208] MoveFileW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\SlateBlue.css" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\grooveforms5\\formsstyles\\slateblue.css"), lpNewFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\SlateBlue.css" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\grooveforms5\\formsstyles\\slateblue.css")) returned 1 [0038.208] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\SoftBlue.css", nBufferLength=0x105, lpBuffer=0x31e0a4, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\SoftBlue.css", lpFilePart=0x0) returned 0x55 [0038.208] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e598) returned 1 [0038.208] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\SoftBlue.css" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\grooveforms5\\formsstyles\\softblue.css"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x274 [0038.209] GetFileType (hFile=0x274) returned 0x1 [0038.209] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e594) returned 1 [0038.209] GetFileType (hFile=0x274) returned 0x1 [0038.209] GetFileSize (in: hFile=0x274, lpFileSizeHigh=0x31e6a0 | out: lpFileSizeHigh=0x31e6a0*=0x0) returned 0xec4 [0038.209] ReadFile (in: hFile=0x274, lpBuffer=0x26aed5c, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x31e64c, lpOverlapped=0x0 | out: lpBuffer=0x26aed5c*, lpNumberOfBytesRead=0x31e64c*=0xec4, lpOverlapped=0x0) returned 1 [0038.211] CloseHandle (hObject=0x274) returned 1 [0038.224] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\SoftBlue.css", nBufferLength=0x105, lpBuffer=0x31e090, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\SoftBlue.css", lpFilePart=0x0) returned 0x55 [0038.225] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e584) returned 1 [0038.225] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\SoftBlue.css" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\grooveforms5\\formsstyles\\softblue.css"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x274 [0038.226] GetFileType (hFile=0x274) returned 0x1 [0038.226] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e580) returned 1 [0038.226] GetFileType (hFile=0x274) returned 0x1 [0038.226] WriteFile (in: hFile=0x274, lpBuffer=0x27016a4*, nNumberOfBytesToWrite=0xed0, lpNumberOfBytesWritten=0x31e614, lpOverlapped=0x0 | out: lpBuffer=0x27016a4*, lpNumberOfBytesWritten=0x31e614*=0xed0, lpOverlapped=0x0) returned 1 [0038.226] CloseHandle (hObject=0x274) returned 1 [0038.227] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\SoftBlue.css", nBufferLength=0x105, lpBuffer=0x31e1c4, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\SoftBlue.css", lpFilePart=0x0) returned 0x55 [0038.227] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\SoftBlue.css", nBufferLength=0x105, lpBuffer=0x31e1c4, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\SoftBlue.css", lpFilePart=0x0) returned 0x55 [0038.227] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e624) returned 1 [0038.227] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\SoftBlue.css" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\grooveforms5\\formsstyles\\softblue.css"), fInfoLevelId=0x0, lpFileInformation=0x31e6a0 | out: lpFileInformation=0x31e6a0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xcd8f7a00, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0xfd67f150, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xfa3cedc0, ftLastWriteTime.dwHighDateTime=0x1d6eb7e, nFileSizeHigh=0x0, nFileSizeLow=0xed0)) returned 1 [0038.227] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e620) returned 1 [0038.228] MoveFileW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\SoftBlue.css" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\grooveforms5\\formsstyles\\softblue.css"), lpNewFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\SoftBlue.css" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\grooveforms5\\formsstyles\\softblue.css")) returned 1 [0038.228] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\Solutions.css", nBufferLength=0x105, lpBuffer=0x31e0a4, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\Solutions.css", lpFilePart=0x0) returned 0x56 [0038.228] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e598) returned 1 [0038.228] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\Solutions.css" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\grooveforms5\\formsstyles\\solutions.css"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x274 [0038.228] GetFileType (hFile=0x274) returned 0x1 [0038.228] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e594) returned 1 [0038.228] GetFileType (hFile=0x274) returned 0x1 [0038.228] GetFileSize (in: hFile=0x274, lpFileSizeHigh=0x31e6a0 | out: lpFileSizeHigh=0x31e6a0*=0x0) returned 0x19cc [0038.228] ReadFile (in: hFile=0x274, lpBuffer=0x2702978, nNumberOfBytesToRead=0x19cc, lpNumberOfBytesRead=0x31e64c, lpOverlapped=0x0 | out: lpBuffer=0x2702978*, lpNumberOfBytesRead=0x31e64c*=0x19cc, lpOverlapped=0x0) returned 1 [0038.230] CloseHandle (hObject=0x274) returned 1 [0038.255] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\Solutions.css", nBufferLength=0x105, lpBuffer=0x31e090, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\Solutions.css", lpFilePart=0x0) returned 0x56 [0038.255] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e584) returned 1 [0038.255] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\Solutions.css" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\grooveforms5\\formsstyles\\solutions.css"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x274 [0038.256] GetFileType (hFile=0x274) returned 0x1 [0038.256] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e580) returned 1 [0038.256] GetFileType (hFile=0x274) returned 0x1 [0038.256] WriteFile (in: hFile=0x274, lpBuffer=0x275786c*, nNumberOfBytesToWrite=0x19d0, lpNumberOfBytesWritten=0x31e640, lpOverlapped=0x0 | out: lpBuffer=0x275786c*, lpNumberOfBytesWritten=0x31e640*=0x19d0, lpOverlapped=0x0) returned 1 [0038.257] CloseHandle (hObject=0x274) returned 1 [0038.258] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\Solutions.css", nBufferLength=0x105, lpBuffer=0x31e1c4, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\Solutions.css", lpFilePart=0x0) returned 0x56 [0038.258] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\Solutions.css", nBufferLength=0x105, lpBuffer=0x31e1c4, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\Solutions.css", lpFilePart=0x0) returned 0x56 [0038.258] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e624) returned 1 [0038.258] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\Solutions.css" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\grooveforms5\\formsstyles\\solutions.css"), fInfoLevelId=0x0, lpFileInformation=0x31e6a0 | out: lpFileInformation=0x31e6a0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xcec0a700, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0xfd67f150, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xfa41b080, ftLastWriteTime.dwHighDateTime=0x1d6eb7e, nFileSizeHigh=0x0, nFileSizeLow=0x19d0)) returned 1 [0038.258] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e620) returned 1 [0038.258] MoveFileW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\Solutions.css" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\grooveforms5\\formsstyles\\solutions.css"), lpNewFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\Solutions.css" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\grooveforms5\\formsstyles\\solutions.css")) returned 1 [0038.259] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\Solutions_Doc.css", nBufferLength=0x105, lpBuffer=0x31e0a4, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\Solutions_Doc.css", lpFilePart=0x0) returned 0x5a [0038.259] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e598) returned 1 [0038.259] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\Solutions_Doc.css" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\grooveforms5\\formsstyles\\solutions_doc.css"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x274 [0038.260] GetFileType (hFile=0x274) returned 0x1 [0038.260] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e594) returned 1 [0038.260] GetFileType (hFile=0x274) returned 0x1 [0038.260] GetFileSize (in: hFile=0x274, lpFileSizeHigh=0x31e6a0 | out: lpFileSizeHigh=0x31e6a0*=0x0) returned 0xf7 [0038.260] ReadFile (in: hFile=0x274, lpBuffer=0x275976c, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x31e64c, lpOverlapped=0x0 | out: lpBuffer=0x275976c*, lpNumberOfBytesRead=0x31e64c*=0xf7, lpOverlapped=0x0) returned 1 [0038.261] CloseHandle (hObject=0x274) returned 1 [0038.274] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\Solutions_Doc.css", nBufferLength=0x105, lpBuffer=0x31e090, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\Solutions_Doc.css", lpFilePart=0x0) returned 0x5a [0038.274] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e584) returned 1 [0038.274] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\Solutions_Doc.css" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\grooveforms5\\formsstyles\\solutions_doc.css"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x274 [0038.275] GetFileType (hFile=0x274) returned 0x1 [0038.275] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e580) returned 1 [0038.275] GetFileType (hFile=0x274) returned 0x1 [0038.275] WriteFile (in: hFile=0x274, lpBuffer=0x27a79dc*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x31e614, lpOverlapped=0x0 | out: lpBuffer=0x27a79dc*, lpNumberOfBytesWritten=0x31e614*=0x100, lpOverlapped=0x0) returned 1 [0038.276] CloseHandle (hObject=0x274) returned 1 [0038.277] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\Solutions_Doc.css", nBufferLength=0x105, lpBuffer=0x31e1c4, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\Solutions_Doc.css", lpFilePart=0x0) returned 0x5a [0038.277] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\Solutions_Doc.css", nBufferLength=0x105, lpBuffer=0x31e1c4, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\Solutions_Doc.css", lpFilePart=0x0) returned 0x5a [0038.277] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e624) returned 1 [0038.277] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\Solutions_Doc.css" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\grooveforms5\\formsstyles\\solutions_doc.css"), fInfoLevelId=0x0, lpFileInformation=0x31e6a0 | out: lpFileInformation=0x31e6a0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xcec0a700, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0xfd67f150, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xfa4411e0, ftLastWriteTime.dwHighDateTime=0x1d6eb7e, nFileSizeHigh=0x0, nFileSizeLow=0x100)) returned 1 [0038.277] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e620) returned 1 [0038.277] MoveFileW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\Solutions_Doc.css" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\grooveforms5\\formsstyles\\solutions_doc.css"), lpNewFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\Solutions_Doc.css" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\grooveforms5\\formsstyles\\solutions_doc.css")) returned 1 [0038.277] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\Solutions_Generic.css", nBufferLength=0x105, lpBuffer=0x31e0a4, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\Solutions_Generic.css", lpFilePart=0x0) returned 0x5e [0038.277] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e598) returned 1 [0038.277] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\Solutions_Generic.css" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\grooveforms5\\formsstyles\\solutions_generic.css"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x274 [0038.278] GetFileType (hFile=0x274) returned 0x1 [0038.278] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e594) returned 1 [0038.278] GetFileType (hFile=0x274) returned 0x1 [0038.278] GetFileSize (in: hFile=0x274, lpFileSizeHigh=0x31e6a0 | out: lpFileSizeHigh=0x31e6a0*=0x0) returned 0x55c [0038.278] ReadFile (in: hFile=0x274, lpBuffer=0x27a9250, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x31e64c, lpOverlapped=0x0 | out: lpBuffer=0x27a9250*, lpNumberOfBytesRead=0x31e64c*=0x55c, lpOverlapped=0x0) returned 1 [0038.280] CloseHandle (hObject=0x274) returned 1 [0038.293] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\Solutions_Generic.css", nBufferLength=0x105, lpBuffer=0x31e090, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\Solutions_Generic.css", lpFilePart=0x0) returned 0x5e [0038.293] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e584) returned 1 [0038.293] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\Solutions_Generic.css" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\grooveforms5\\formsstyles\\solutions_generic.css"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x274 [0038.294] GetFileType (hFile=0x274) returned 0x1 [0038.294] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e580) returned 1 [0038.294] GetFileType (hFile=0x274) returned 0x1 [0038.294] WriteFile (in: hFile=0x274, lpBuffer=0x27f8c84*, nNumberOfBytesToWrite=0x560, lpNumberOfBytesWritten=0x31e614, lpOverlapped=0x0 | out: lpBuffer=0x27f8c84*, lpNumberOfBytesWritten=0x31e614*=0x560, lpOverlapped=0x0) returned 1 [0038.295] CloseHandle (hObject=0x274) returned 1 [0038.295] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\Solutions_Generic.css", nBufferLength=0x105, lpBuffer=0x31e1c4, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\Solutions_Generic.css", lpFilePart=0x0) returned 0x5e [0038.295] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\Solutions_Generic.css", nBufferLength=0x105, lpBuffer=0x31e1c4, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\Solutions_Generic.css", lpFilePart=0x0) returned 0x5e [0038.295] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e624) returned 1 [0038.295] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\Solutions_Generic.css" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\grooveforms5\\formsstyles\\solutions_generic.css"), fInfoLevelId=0x0, lpFileInformation=0x31e6a0 | out: lpFileInformation=0x31e6a0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xcec0a700, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0xfd6a52b0, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xfa467340, ftLastWriteTime.dwHighDateTime=0x1d6eb7e, nFileSizeHigh=0x0, nFileSizeLow=0x560)) returned 1 [0038.295] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e620) returned 1 [0038.296] MoveFileW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\Solutions_Generic.css" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\grooveforms5\\formsstyles\\solutions_generic.css"), lpNewFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\Solutions_Generic.css" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\grooveforms5\\formsstyles\\solutions_generic.css")) returned 1 [0038.296] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\Solutions_Person.css", nBufferLength=0x105, lpBuffer=0x31e0a4, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\Solutions_Person.css", lpFilePart=0x0) returned 0x5d [0038.296] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e598) returned 1 [0038.296] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\Solutions_Person.css" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\grooveforms5\\formsstyles\\solutions_person.css"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x274 [0038.297] GetFileType (hFile=0x274) returned 0x1 [0038.297] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e594) returned 1 [0038.297] GetFileType (hFile=0x274) returned 0x1 [0038.297] GetFileSize (in: hFile=0x274, lpFileSizeHigh=0x31e6a0 | out: lpFileSizeHigh=0x31e6a0*=0x0) returned 0xa7 [0038.297] ReadFile (in: hFile=0x274, lpBuffer=0x27fa050, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x31e64c, lpOverlapped=0x0 | out: lpBuffer=0x27fa050*, lpNumberOfBytesRead=0x31e64c*=0xa7, lpOverlapped=0x0) returned 1 [0038.298] CloseHandle (hObject=0x274) returned 1 [0038.312] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\Solutions_Person.css", nBufferLength=0x105, lpBuffer=0x31e090, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\Solutions_Person.css", lpFilePart=0x0) returned 0x5d [0038.312] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e584) returned 1 [0038.312] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\Solutions_Person.css" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\grooveforms5\\formsstyles\\solutions_person.css"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x274 [0038.312] GetFileType (hFile=0x274) returned 0x1 [0038.313] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e580) returned 1 [0038.313] GetFileType (hFile=0x274) returned 0x1 [0038.313] WriteFile (in: hFile=0x274, lpBuffer=0x284822c*, nNumberOfBytesToWrite=0xb0, lpNumberOfBytesWritten=0x31e614, lpOverlapped=0x0 | out: lpBuffer=0x284822c*, lpNumberOfBytesWritten=0x31e614*=0xb0, lpOverlapped=0x0) returned 1 [0038.313] CloseHandle (hObject=0x274) returned 1 [0038.314] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\Solutions_Person.css", nBufferLength=0x105, lpBuffer=0x31e1c4, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\Solutions_Person.css", lpFilePart=0x0) returned 0x5d [0038.314] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\Solutions_Person.css", nBufferLength=0x105, lpBuffer=0x31e1c4, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\Solutions_Person.css", lpFilePart=0x0) returned 0x5d [0038.314] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e624) returned 1 [0038.314] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\Solutions_Person.css" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\grooveforms5\\formsstyles\\solutions_person.css"), fInfoLevelId=0x0, lpFileInformation=0x31e6a0 | out: lpFileInformation=0x31e6a0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xcff1d400, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0xfd6a52b0, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xfa4b3600, ftLastWriteTime.dwHighDateTime=0x1d6eb7e, nFileSizeHigh=0x0, nFileSizeLow=0xb0)) returned 1 [0038.314] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e620) returned 1 [0038.314] MoveFileW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\Solutions_Person.css" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\grooveforms5\\formsstyles\\solutions_person.css"), lpNewFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\Solutions_Person.css" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\grooveforms5\\formsstyles\\solutions_person.css")) returned 1 [0038.315] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\Solutions_Response.css", nBufferLength=0x105, lpBuffer=0x31e0a4, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\Solutions_Response.css", lpFilePart=0x0) returned 0x5f [0038.315] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e598) returned 1 [0038.315] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\Solutions_Response.css" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\grooveforms5\\formsstyles\\solutions_response.css"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x274 [0038.316] GetFileType (hFile=0x274) returned 0x1 [0038.316] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e594) returned 1 [0038.316] GetFileType (hFile=0x274) returned 0x1 [0038.316] GetFileSize (in: hFile=0x274, lpFileSizeHigh=0x31e6a0 | out: lpFileSizeHigh=0x31e6a0*=0x0) returned 0xab [0038.316] ReadFile (in: hFile=0x274, lpBuffer=0x28495fc, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x31e64c, lpOverlapped=0x0 | out: lpBuffer=0x28495fc*, lpNumberOfBytesRead=0x31e64c*=0xab, lpOverlapped=0x0) returned 1 [0038.317] CloseHandle (hObject=0x274) returned 1 [0038.359] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\Solutions_Response.css", nBufferLength=0x105, lpBuffer=0x31e090, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\Solutions_Response.css", lpFilePart=0x0) returned 0x5f [0038.359] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e584) returned 1 [0038.359] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\Solutions_Response.css" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\grooveforms5\\formsstyles\\solutions_response.css"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x274 [0038.360] GetFileType (hFile=0x274) returned 0x1 [0038.360] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e580) returned 1 [0038.360] GetFileType (hFile=0x274) returned 0x1 [0038.360] WriteFile (in: hFile=0x274, lpBuffer=0x2696aa0*, nNumberOfBytesToWrite=0xb0, lpNumberOfBytesWritten=0x31e614, lpOverlapped=0x0 | out: lpBuffer=0x2696aa0*, lpNumberOfBytesWritten=0x31e614*=0xb0, lpOverlapped=0x0) returned 1 [0038.362] CloseHandle (hObject=0x274) returned 1 [0038.362] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\Solutions_Response.css", nBufferLength=0x105, lpBuffer=0x31e1c4, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\Solutions_Response.css", lpFilePart=0x0) returned 0x5f [0038.362] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\Solutions_Response.css", nBufferLength=0x105, lpBuffer=0x31e1c4, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\Solutions_Response.css", lpFilePart=0x0) returned 0x5f [0038.362] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e624) returned 1 [0038.362] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\Solutions_Response.css" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\grooveforms5\\formsstyles\\solutions_response.css"), fInfoLevelId=0x0, lpFileInformation=0x31e6a0 | out: lpFileInformation=0x31e6a0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xcff1d400, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0xfd6a52b0, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xfa525a20, ftLastWriteTime.dwHighDateTime=0x1d6eb7e, nFileSizeHigh=0x0, nFileSizeLow=0xb0)) returned 1 [0038.363] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e620) returned 1 [0038.363] MoveFileW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\Solutions_Response.css" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\grooveforms5\\formsstyles\\solutions_response.css"), lpNewFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\Solutions_Response.css" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\grooveforms5\\formsstyles\\solutions_response.css")) returned 1 [0038.363] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\SpringGreen.css", nBufferLength=0x105, lpBuffer=0x31e0a4, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\SpringGreen.css", lpFilePart=0x0) returned 0x58 [0038.363] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e598) returned 1 [0038.363] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\SpringGreen.css" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\grooveforms5\\formsstyles\\springgreen.css"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x274 [0038.363] GetFileType (hFile=0x274) returned 0x1 [0038.363] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e594) returned 1 [0038.363] GetFileType (hFile=0x274) returned 0x1 [0038.363] GetFileSize (in: hFile=0x274, lpFileSizeHigh=0x31e6a0 | out: lpFileSizeHigh=0x31e6a0*=0x0) returned 0xd01 [0038.363] ReadFile (in: hFile=0x274, lpBuffer=0x2698ab4, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x31e64c, lpOverlapped=0x0 | out: lpBuffer=0x2698ab4*, lpNumberOfBytesRead=0x31e64c*=0xd01, lpOverlapped=0x0) returned 1 [0038.365] CloseHandle (hObject=0x274) returned 1 [0038.378] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\SpringGreen.css", nBufferLength=0x105, lpBuffer=0x31e090, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\SpringGreen.css", lpFilePart=0x0) returned 0x58 [0038.379] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e584) returned 1 [0038.379] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\SpringGreen.css" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\grooveforms5\\formsstyles\\springgreen.css"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x274 [0038.379] GetFileType (hFile=0x274) returned 0x1 [0038.379] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e580) returned 1 [0038.379] GetFileType (hFile=0x274) returned 0x1 [0038.380] WriteFile (in: hFile=0x274, lpBuffer=0x26eaca8*, nNumberOfBytesToWrite=0xd10, lpNumberOfBytesWritten=0x31e614, lpOverlapped=0x0 | out: lpBuffer=0x26eaca8*, lpNumberOfBytesWritten=0x31e614*=0xd10, lpOverlapped=0x0) returned 1 [0038.380] CloseHandle (hObject=0x274) returned 1 [0038.381] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\SpringGreen.css", nBufferLength=0x105, lpBuffer=0x31e1c4, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\SpringGreen.css", lpFilePart=0x0) returned 0x58 [0038.381] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\SpringGreen.css", nBufferLength=0x105, lpBuffer=0x31e1c4, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\SpringGreen.css", lpFilePart=0x0) returned 0x58 [0038.381] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e624) returned 1 [0038.381] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\SpringGreen.css" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\grooveforms5\\formsstyles\\springgreen.css"), fInfoLevelId=0x0, lpFileInformation=0x31e6a0 | out: lpFileInformation=0x31e6a0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xcff1d400, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0xfd6a52b0, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xfa54bb80, ftLastWriteTime.dwHighDateTime=0x1d6eb7e, nFileSizeHigh=0x0, nFileSizeLow=0xd10)) returned 1 [0038.381] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e620) returned 1 [0038.381] MoveFileW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\SpringGreen.css" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\grooveforms5\\formsstyles\\springgreen.css"), lpNewFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\SpringGreen.css" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\grooveforms5\\formsstyles\\springgreen.css")) returned 1 [0038.382] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\Sts.css", nBufferLength=0x105, lpBuffer=0x31e0a4, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\Sts.css", lpFilePart=0x0) returned 0x50 [0038.382] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e598) returned 1 [0038.382] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\Sts.css" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\grooveforms5\\formsstyles\\sts.css"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x274 [0038.382] GetFileType (hFile=0x274) returned 0x1 [0038.382] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e594) returned 1 [0038.382] GetFileType (hFile=0x274) returned 0x1 [0038.382] GetFileSize (in: hFile=0x274, lpFileSizeHigh=0x31e6a0 | out: lpFileSizeHigh=0x31e6a0*=0x0) returned 0x9fe [0038.382] ReadFile (in: hFile=0x274, lpBuffer=0x26ec980, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x31e64c, lpOverlapped=0x0 | out: lpBuffer=0x26ec980*, lpNumberOfBytesRead=0x31e64c*=0x9fe, lpOverlapped=0x0) returned 1 [0038.384] CloseHandle (hObject=0x274) returned 1 [0038.397] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\Sts.css", nBufferLength=0x105, lpBuffer=0x31e090, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\Sts.css", lpFilePart=0x0) returned 0x50 [0038.397] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e584) returned 1 [0038.397] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\Sts.css" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\grooveforms5\\formsstyles\\sts.css"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x274 [0038.398] GetFileType (hFile=0x274) returned 0x1 [0038.398] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e580) returned 1 [0038.398] GetFileType (hFile=0x274) returned 0x1 [0038.398] WriteFile (in: hFile=0x274, lpBuffer=0x273da9c*, nNumberOfBytesToWrite=0xa00, lpNumberOfBytesWritten=0x31e614, lpOverlapped=0x0 | out: lpBuffer=0x273da9c*, lpNumberOfBytesWritten=0x31e614*=0xa00, lpOverlapped=0x0) returned 1 [0038.399] CloseHandle (hObject=0x274) returned 1 [0038.400] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\Sts.css", nBufferLength=0x105, lpBuffer=0x31e1c4, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\Sts.css", lpFilePart=0x0) returned 0x50 [0038.400] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\Sts.css", nBufferLength=0x105, lpBuffer=0x31e1c4, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\Sts.css", lpFilePart=0x0) returned 0x50 [0038.400] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e624) returned 1 [0038.400] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\Sts.css" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\grooveforms5\\formsstyles\\sts.css"), fInfoLevelId=0x0, lpFileInformation=0x31e6a0 | out: lpFileInformation=0x31e6a0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xcff1d400, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0xfd6a52b0, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xfa571ce0, ftLastWriteTime.dwHighDateTime=0x1d6eb7e, nFileSizeHigh=0x0, nFileSizeLow=0xa00)) returned 1 [0038.400] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e620) returned 1 [0038.400] MoveFileW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\Sts.css" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\grooveforms5\\formsstyles\\sts.css"), lpNewFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\Sts.css" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\grooveforms5\\formsstyles\\sts.css")) returned 1 [0038.400] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\Sts2.css", nBufferLength=0x105, lpBuffer=0x31e0a4, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\Sts2.css", lpFilePart=0x0) returned 0x51 [0038.400] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e598) returned 1 [0038.401] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\Sts2.css" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\grooveforms5\\formsstyles\\sts2.css"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x274 [0038.402] GetFileType (hFile=0x274) returned 0x1 [0038.402] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e594) returned 1 [0038.402] GetFileType (hFile=0x274) returned 0x1 [0038.402] GetFileSize (in: hFile=0x274, lpFileSizeHigh=0x31e6a0 | out: lpFileSizeHigh=0x31e6a0*=0x0) returned 0xd6a [0038.402] ReadFile (in: hFile=0x274, lpBuffer=0x273fac4, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x31e64c, lpOverlapped=0x0 | out: lpBuffer=0x273fac4*, lpNumberOfBytesRead=0x31e64c*=0xd6a, lpOverlapped=0x0) returned 1 [0038.403] CloseHandle (hObject=0x274) returned 1 [0038.416] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\Sts2.css", nBufferLength=0x105, lpBuffer=0x31e090, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\Sts2.css", lpFilePart=0x0) returned 0x51 [0038.417] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e584) returned 1 [0038.417] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\Sts2.css" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\grooveforms5\\formsstyles\\sts2.css"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x274 [0038.417] GetFileType (hFile=0x274) returned 0x1 [0038.417] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e580) returned 1 [0038.417] GetFileType (hFile=0x274) returned 0x1 [0038.417] WriteFile (in: hFile=0x274, lpBuffer=0x2791d18*, nNumberOfBytesToWrite=0xd70, lpNumberOfBytesWritten=0x31e614, lpOverlapped=0x0 | out: lpBuffer=0x2791d18*, lpNumberOfBytesWritten=0x31e614*=0xd70, lpOverlapped=0x0) returned 1 [0038.418] CloseHandle (hObject=0x274) returned 1 [0038.419] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\Sts2.css", nBufferLength=0x105, lpBuffer=0x31e1c4, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\Sts2.css", lpFilePart=0x0) returned 0x51 [0038.419] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\Sts2.css", nBufferLength=0x105, lpBuffer=0x31e1c4, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\Sts2.css", lpFilePart=0x0) returned 0x51 [0038.419] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e624) returned 1 [0038.419] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\Sts2.css" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\grooveforms5\\formsstyles\\sts2.css"), fInfoLevelId=0x0, lpFileInformation=0x31e6a0 | out: lpFileInformation=0x31e6a0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xcff1d400, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0xfd6a52b0, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xfa597e40, ftLastWriteTime.dwHighDateTime=0x1d6eb7e, nFileSizeHigh=0x0, nFileSizeLow=0xd70)) returned 1 [0038.419] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e620) returned 1 [0038.419] MoveFileW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\Sts2.css" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\grooveforms5\\formsstyles\\sts2.css"), lpNewFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\Sts2.css" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\grooveforms5\\formsstyles\\sts2.css")) returned 1 [0038.420] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\Swirl.css", nBufferLength=0x105, lpBuffer=0x31e0a4, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\Swirl.css", lpFilePart=0x0) returned 0x52 [0038.420] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e598) returned 1 [0038.420] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\Swirl.css" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\grooveforms5\\formsstyles\\swirl.css"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x274 [0038.420] GetFileType (hFile=0x274) returned 0x1 [0038.420] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e594) returned 1 [0038.420] GetFileType (hFile=0x274) returned 0x1 [0038.420] GetFileSize (in: hFile=0x274, lpFileSizeHigh=0x31e6a0 | out: lpFileSizeHigh=0x31e6a0*=0x0) returned 0xd04 [0038.420] ReadFile (in: hFile=0x274, lpBuffer=0x2793cdc, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x31e64c, lpOverlapped=0x0 | out: lpBuffer=0x2793cdc*, lpNumberOfBytesRead=0x31e64c*=0xd04, lpOverlapped=0x0) returned 1 [0038.422] CloseHandle (hObject=0x274) returned 1 [0038.435] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\Swirl.css", nBufferLength=0x105, lpBuffer=0x31e090, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\Swirl.css", lpFilePart=0x0) returned 0x52 [0038.435] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e584) returned 1 [0038.435] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\Swirl.css" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\grooveforms5\\formsstyles\\swirl.css"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x274 [0038.436] GetFileType (hFile=0x274) returned 0x1 [0038.436] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e580) returned 1 [0038.436] GetFileType (hFile=0x274) returned 0x1 [0038.436] WriteFile (in: hFile=0x274, lpBuffer=0x27e5d58*, nNumberOfBytesToWrite=0xd10, lpNumberOfBytesWritten=0x31e614, lpOverlapped=0x0 | out: lpBuffer=0x27e5d58*, lpNumberOfBytesWritten=0x31e614*=0xd10, lpOverlapped=0x0) returned 1 [0038.437] CloseHandle (hObject=0x274) returned 1 [0038.438] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\Swirl.css", nBufferLength=0x105, lpBuffer=0x31e1c4, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\Swirl.css", lpFilePart=0x0) returned 0x52 [0038.438] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\Swirl.css", nBufferLength=0x105, lpBuffer=0x31e1c4, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\Swirl.css", lpFilePart=0x0) returned 0x52 [0038.438] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e624) returned 1 [0038.438] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\Swirl.css" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\grooveforms5\\formsstyles\\swirl.css"), fInfoLevelId=0x0, lpFileInformation=0x31e6a0 | out: lpFileInformation=0x31e6a0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd1230100, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0xfd6a52b0, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xfa5bdfa0, ftLastWriteTime.dwHighDateTime=0x1d6eb7e, nFileSizeHigh=0x0, nFileSizeLow=0xd10)) returned 1 [0038.438] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e620) returned 1 [0038.438] MoveFileW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\Swirl.css" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\grooveforms5\\formsstyles\\swirl.css"), lpNewFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\Swirl.css" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\grooveforms5\\formsstyles\\swirl.css")) returned 1 [0038.438] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\Teal.css", nBufferLength=0x105, lpBuffer=0x31e0a4, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\Teal.css", lpFilePart=0x0) returned 0x51 [0038.438] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e598) returned 1 [0038.438] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\Teal.css" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\grooveforms5\\formsstyles\\teal.css"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x274 [0038.439] GetFileType (hFile=0x274) returned 0x1 [0038.439] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e594) returned 1 [0038.439] GetFileType (hFile=0x274) returned 0x1 [0038.439] GetFileSize (in: hFile=0x274, lpFileSizeHigh=0x31e6a0 | out: lpFileSizeHigh=0x31e6a0*=0x0) returned 0x73c [0038.439] ReadFile (in: hFile=0x274, lpBuffer=0x27e7758, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x31e64c, lpOverlapped=0x0 | out: lpBuffer=0x27e7758*, lpNumberOfBytesRead=0x31e64c*=0x73c, lpOverlapped=0x0) returned 1 [0038.441] CloseHandle (hObject=0x274) returned 1 [0038.454] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\Teal.css", nBufferLength=0x105, lpBuffer=0x31e090, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\Teal.css", lpFilePart=0x0) returned 0x51 [0038.454] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e584) returned 1 [0038.454] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\Teal.css" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\grooveforms5\\formsstyles\\teal.css"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x274 [0038.455] GetFileType (hFile=0x274) returned 0x1 [0038.455] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e580) returned 1 [0038.455] GetFileType (hFile=0x274) returned 0x1 [0038.455] WriteFile (in: hFile=0x274, lpBuffer=0x2837ab8*, nNumberOfBytesToWrite=0x740, lpNumberOfBytesWritten=0x31e614, lpOverlapped=0x0 | out: lpBuffer=0x2837ab8*, lpNumberOfBytesWritten=0x31e614*=0x740, lpOverlapped=0x0) returned 1 [0038.456] CloseHandle (hObject=0x274) returned 1 [0038.457] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\Teal.css", nBufferLength=0x105, lpBuffer=0x31e1c4, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\Teal.css", lpFilePart=0x0) returned 0x51 [0038.457] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\Teal.css", nBufferLength=0x105, lpBuffer=0x31e1c4, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\Teal.css", lpFilePart=0x0) returned 0x51 [0038.457] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e624) returned 1 [0038.457] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\Teal.css" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\grooveforms5\\formsstyles\\teal.css"), fInfoLevelId=0x0, lpFileInformation=0x31e6a0 | out: lpFileInformation=0x31e6a0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd1230100, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0xfd6cb410, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xfa60a260, ftLastWriteTime.dwHighDateTime=0x1d6eb7e, nFileSizeHigh=0x0, nFileSizeLow=0x740)) returned 1 [0038.457] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e620) returned 1 [0038.457] MoveFileW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\Teal.css" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\grooveforms5\\formsstyles\\teal.css"), lpNewFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\Teal.css" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\grooveforms5\\formsstyles\\teal.css")) returned 1 [0038.457] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\TexturedBlue.css", nBufferLength=0x105, lpBuffer=0x31e0a4, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\TexturedBlue.css", lpFilePart=0x0) returned 0x59 [0038.457] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e598) returned 1 [0038.457] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\TexturedBlue.css" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\grooveforms5\\formsstyles\\texturedblue.css"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x274 [0038.458] GetFileType (hFile=0x274) returned 0x1 [0038.458] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e594) returned 1 [0038.458] GetFileType (hFile=0x274) returned 0x1 [0038.458] GetFileSize (in: hFile=0x274, lpFileSizeHigh=0x31e6a0 | out: lpFileSizeHigh=0x31e6a0*=0x0) returned 0x727 [0038.458] ReadFile (in: hFile=0x274, lpBuffer=0x28394bc, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x31e64c, lpOverlapped=0x0 | out: lpBuffer=0x28394bc*, lpNumberOfBytesRead=0x31e64c*=0x727, lpOverlapped=0x0) returned 1 [0038.459] CloseHandle (hObject=0x274) returned 1 [0038.500] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\TexturedBlue.css", nBufferLength=0x105, lpBuffer=0x31e090, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\TexturedBlue.css", lpFilePart=0x0) returned 0x59 [0038.500] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e584) returned 1 [0038.500] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\TexturedBlue.css" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\grooveforms5\\formsstyles\\texturedblue.css"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x274 [0038.501] GetFileType (hFile=0x274) returned 0x1 [0038.501] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e580) returned 1 [0038.501] GetFileType (hFile=0x274) returned 0x1 [0038.501] WriteFile (in: hFile=0x274, lpBuffer=0x2689e44*, nNumberOfBytesToWrite=0x730, lpNumberOfBytesWritten=0x31e614, lpOverlapped=0x0 | out: lpBuffer=0x2689e44*, lpNumberOfBytesWritten=0x31e614*=0x730, lpOverlapped=0x0) returned 1 [0038.503] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\TexturedBlue.css", nBufferLength=0x105, lpBuffer=0x31e1c4, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\TexturedBlue.css", lpFilePart=0x0) returned 0x59 [0038.503] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\TexturedBlue.css", nBufferLength=0x105, lpBuffer=0x31e1c4, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\TexturedBlue.css", lpFilePart=0x0) returned 0x59 [0038.503] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e624) returned 1 [0038.503] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\TexturedBlue.css" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\grooveforms5\\formsstyles\\texturedblue.css"), fInfoLevelId=0x0, lpFileInformation=0x31e6a0 | out: lpFileInformation=0x31e6a0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd1230100, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0xfd6cb410, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xfa67c680, ftLastWriteTime.dwHighDateTime=0x1d6eb7e, nFileSizeHigh=0x0, nFileSizeLow=0x730)) returned 1 [0038.503] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e620) returned 1 [0038.503] MoveFileW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\TexturedBlue.css" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\grooveforms5\\formsstyles\\texturedblue.css"), lpNewFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\TexturedBlue.css" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\grooveforms5\\formsstyles\\texturedblue.css")) returned 1 [0038.504] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\VelvetRose.css", nBufferLength=0x105, lpBuffer=0x31e0a4, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\VelvetRose.css", lpFilePart=0x0) returned 0x57 [0038.504] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e598) returned 1 [0038.504] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\VelvetRose.css" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\grooveforms5\\formsstyles\\velvetrose.css"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x274 [0038.504] GetFileType (hFile=0x274) returned 0x1 [0038.504] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e594) returned 1 [0038.504] GetFileType (hFile=0x274) returned 0x1 [0038.504] GetFileSize (in: hFile=0x274, lpFileSizeHigh=0x31e6a0 | out: lpFileSizeHigh=0x31e6a0*=0x0) returned 0x732 [0038.504] ReadFile (in: hFile=0x274, lpBuffer=0x268b86c, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x31e64c, lpOverlapped=0x0 | out: lpBuffer=0x268b86c*, lpNumberOfBytesRead=0x31e64c*=0x732, lpOverlapped=0x0) returned 1 [0038.519] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\VelvetRose.css", nBufferLength=0x105, lpBuffer=0x31e090, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\VelvetRose.css", lpFilePart=0x0) returned 0x57 [0038.519] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e584) returned 1 [0038.520] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\VelvetRose.css" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\grooveforms5\\formsstyles\\velvetrose.css"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x274 [0038.520] GetFileType (hFile=0x274) returned 0x1 [0038.520] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e580) returned 1 [0038.520] GetFileType (hFile=0x274) returned 0x1 [0038.520] WriteFile (in: hFile=0x274, lpBuffer=0x26dbd4c*, nNumberOfBytesToWrite=0x740, lpNumberOfBytesWritten=0x31e614, lpOverlapped=0x0 | out: lpBuffer=0x26dbd4c*, lpNumberOfBytesWritten=0x31e614*=0x740, lpOverlapped=0x0) returned 1 [0038.521] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\VelvetRose.css", nBufferLength=0x105, lpBuffer=0x31e1c4, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\VelvetRose.css", lpFilePart=0x0) returned 0x57 [0038.521] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\VelvetRose.css", nBufferLength=0x105, lpBuffer=0x31e1c4, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\VelvetRose.css", lpFilePart=0x0) returned 0x57 [0038.521] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e624) returned 1 [0038.521] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\VelvetRose.css" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\grooveforms5\\formsstyles\\velvetrose.css"), fInfoLevelId=0x0, lpFileInformation=0x31e6a0 | out: lpFileInformation=0x31e6a0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd1230100, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0xfd6cb410, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xfa6a27e0, ftLastWriteTime.dwHighDateTime=0x1d6eb7e, nFileSizeHigh=0x0, nFileSizeLow=0x740)) returned 1 [0038.521] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e620) returned 1 [0038.521] MoveFileW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\VelvetRose.css" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\grooveforms5\\formsstyles\\velvetrose.css"), lpNewFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\VelvetRose.css" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\grooveforms5\\formsstyles\\velvetrose.css")) returned 1 [0038.522] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e654) returned 1 [0038.522] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\Americana", nBufferLength=0x105, lpBuffer=0x31e15c, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\Americana", lpFilePart=0x0) returned 0x52 [0038.522] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\Americana\\", nBufferLength=0x105, lpBuffer=0x31e130, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\Americana\\", lpFilePart=0x0) returned 0x53 [0038.522] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\Americana\\*", lpFindFileData=0x31e37c | out: lpFindFileData=0x31e37c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd4b60d0, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xfd4b60d0, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xfd4b60d0, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x381e80 [0038.523] FindNextFileW (in: hFindFile=0x381e80, lpFindFileData=0x31e38c | out: lpFindFileData=0x31e38c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd4b60d0, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xfd4b60d0, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xfd4b60d0, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0038.523] FindNextFileW (in: hFindFile=0x381e80, lpFindFileData=0x31e38c | out: lpFindFileData=0x31e38c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc8cac600, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0xfd4b60d0, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xc8cac600, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0x155, dwReserved0=0x0, dwReserved1=0x0, cFileName="TAB_OFF.GIF", cAlternateFileName="")) returned 1 [0038.523] FindNextFileW (in: hFindFile=0x381e80, lpFindFileData=0x31e38c | out: lpFindFileData=0x31e38c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc8cac600, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0xfd4b60d0, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xc8cac600, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0xde, dwReserved0=0x0, dwReserved1=0x0, cFileName="TAB_ON.GIF", cAlternateFileName="")) returned 1 [0038.523] FindNextFileW (in: hFindFile=0x381e80, lpFindFileData=0x31e38c | out: lpFindFileData=0x31e38c*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0038.523] FindClose (in: hFindFile=0x381e80 | out: hFindFile=0x381e80) returned 1 [0038.523] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e614) returned 1 [0038.523] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e620) returned 1 [0038.523] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e654) returned 1 [0038.523] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\Americana", nBufferLength=0x105, lpBuffer=0x31e15c, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\Americana", lpFilePart=0x0) returned 0x52 [0038.523] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\Americana\\", nBufferLength=0x105, lpBuffer=0x31e130, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\Americana\\", lpFilePart=0x0) returned 0x53 [0038.523] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\Americana\\*", lpFindFileData=0x31e37c | out: lpFindFileData=0x31e37c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd4b60d0, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xfd4b60d0, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xfd4b60d0, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x381e80 [0038.524] FindNextFileW (in: hFindFile=0x381e80, lpFindFileData=0x31e38c | out: lpFindFileData=0x31e38c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd4b60d0, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xfd4b60d0, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xfd4b60d0, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0038.524] FindNextFileW (in: hFindFile=0x381e80, lpFindFileData=0x31e38c | out: lpFindFileData=0x31e38c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc8cac600, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0xfd4b60d0, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xc8cac600, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0x155, dwReserved0=0x0, dwReserved1=0x0, cFileName="TAB_OFF.GIF", cAlternateFileName="")) returned 1 [0038.524] FindNextFileW (in: hFindFile=0x381e80, lpFindFileData=0x31e38c | out: lpFindFileData=0x31e38c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc8cac600, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0xfd4b60d0, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xc8cac600, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0xde, dwReserved0=0x0, dwReserved1=0x0, cFileName="TAB_ON.GIF", cAlternateFileName="")) returned 1 [0038.524] FindNextFileW (in: hFindFile=0x381e80, lpFindFileData=0x31e38c | out: lpFindFileData=0x31e38c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc8cac600, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0xfd4b60d0, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xc8cac600, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0xde, dwReserved0=0x0, dwReserved1=0x0, cFileName="TAB_ON.GIF", cAlternateFileName="")) returned 0 [0038.524] FindClose (in: hFindFile=0x381e80 | out: hFindFile=0x381e80) returned 1 [0038.524] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e614) returned 1 [0038.524] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e620) returned 1 [0038.524] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e654) returned 1 [0038.524] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\BabyBlue", nBufferLength=0x105, lpBuffer=0x31e15c, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\BabyBlue", lpFilePart=0x0) returned 0x51 [0038.524] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\BabyBlue\\", nBufferLength=0x105, lpBuffer=0x31e130, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\BabyBlue\\", lpFilePart=0x0) returned 0x52 [0038.524] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\BabyBlue\\*", lpFindFileData=0x31e37c | out: lpFindFileData=0x31e37c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd48ff70, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xfd6cb410, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xfd6cb410, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x381e80 [0038.525] FindNextFileW (in: hFindFile=0x381e80, lpFindFileData=0x31e38c | out: lpFindFileData=0x31e38c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd48ff70, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xfd6cb410, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xfd6cb410, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0038.525] FindNextFileW (in: hFindFile=0x381e80, lpFindFileData=0x31e38c | out: lpFindFileData=0x31e38c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc8cac600, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0xfd48ff70, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xc8cac600, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0xb9, dwReserved0=0x0, dwReserved1=0x0, cFileName="BUTTON.GIF", cAlternateFileName="")) returned 1 [0038.525] FindNextFileW (in: hFindFile=0x381e80, lpFindFileData=0x31e38c | out: lpFindFileData=0x31e38c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc8cac600, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0xfd5e6bd0, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xc8cac600, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0xff, dwReserved0=0x0, dwReserved1=0x0, cFileName="HEADER.GIF", cAlternateFileName="")) returned 1 [0038.525] FindNextFileW (in: hFindFile=0x381e80, lpFindFileData=0x31e38c | out: lpFindFileData=0x31e38c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc9fbf300, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0xfd6a52b0, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xc9fbf300, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0x155, dwReserved0=0x0, dwReserved1=0x0, cFileName="TAB_OFF.GIF", cAlternateFileName="")) returned 1 [0038.525] FindNextFileW (in: hFindFile=0x381e80, lpFindFileData=0x31e38c | out: lpFindFileData=0x31e38c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc9fbf300, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0xfd6cb410, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xc9fbf300, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0xde, dwReserved0=0x0, dwReserved1=0x0, cFileName="TAB_ON.GIF", cAlternateFileName="")) returned 1 [0038.525] FindNextFileW (in: hFindFile=0x381e80, lpFindFileData=0x31e38c | out: lpFindFileData=0x31e38c*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0038.525] FindClose (in: hFindFile=0x381e80 | out: hFindFile=0x381e80) returned 1 [0038.525] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e614) returned 1 [0038.525] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e620) returned 1 [0038.525] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e654) returned 1 [0038.525] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\BabyBlue", nBufferLength=0x105, lpBuffer=0x31e15c, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\BabyBlue", lpFilePart=0x0) returned 0x51 [0038.525] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\BabyBlue\\", nBufferLength=0x105, lpBuffer=0x31e130, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\BabyBlue\\", lpFilePart=0x0) returned 0x52 [0038.525] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\BabyBlue\\*", lpFindFileData=0x31e37c | out: lpFindFileData=0x31e37c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd48ff70, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xfd6cb410, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xfd6cb410, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x381e80 [0038.526] FindNextFileW (in: hFindFile=0x381e80, lpFindFileData=0x31e38c | out: lpFindFileData=0x31e38c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd48ff70, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xfd6cb410, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xfd6cb410, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0038.526] FindNextFileW (in: hFindFile=0x381e80, lpFindFileData=0x31e38c | out: lpFindFileData=0x31e38c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc8cac600, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0xfd48ff70, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xc8cac600, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0xb9, dwReserved0=0x0, dwReserved1=0x0, cFileName="BUTTON.GIF", cAlternateFileName="")) returned 1 [0038.526] FindNextFileW (in: hFindFile=0x381e80, lpFindFileData=0x31e38c | out: lpFindFileData=0x31e38c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc8cac600, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0xfd5e6bd0, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xc8cac600, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0xff, dwReserved0=0x0, dwReserved1=0x0, cFileName="HEADER.GIF", cAlternateFileName="")) returned 1 [0038.526] FindNextFileW (in: hFindFile=0x381e80, lpFindFileData=0x31e38c | out: lpFindFileData=0x31e38c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc9fbf300, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0xfd6a52b0, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xc9fbf300, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0x155, dwReserved0=0x0, dwReserved1=0x0, cFileName="TAB_OFF.GIF", cAlternateFileName="")) returned 1 [0038.526] FindNextFileW (in: hFindFile=0x381e80, lpFindFileData=0x31e38c | out: lpFindFileData=0x31e38c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc9fbf300, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0xfd6cb410, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xc9fbf300, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0xde, dwReserved0=0x0, dwReserved1=0x0, cFileName="TAB_ON.GIF", cAlternateFileName="")) returned 1 [0038.526] FindNextFileW (in: hFindFile=0x381e80, lpFindFileData=0x31e38c | out: lpFindFileData=0x31e38c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc9fbf300, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0xfd6cb410, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xc9fbf300, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0xde, dwReserved0=0x0, dwReserved1=0x0, cFileName="TAB_ON.GIF", cAlternateFileName="")) returned 0 [0038.526] FindClose (in: hFindFile=0x381e80 | out: hFindFile=0x381e80) returned 1 [0038.527] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e614) returned 1 [0038.527] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e620) returned 1 [0038.527] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e654) returned 1 [0038.527] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\Biscay", nBufferLength=0x105, lpBuffer=0x31e15c, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\Biscay", lpFilePart=0x0) returned 0x4f [0038.527] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\Biscay\\", nBufferLength=0x105, lpBuffer=0x31e130, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\Biscay\\", lpFilePart=0x0) returned 0x50 [0038.527] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\Biscay\\*", lpFindFileData=0x31e37c | out: lpFindFileData=0x31e37c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd4b60d0, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xfd4dc230, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xfd4dc230, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x381e80 [0038.528] FindNextFileW (in: hFindFile=0x381e80, lpFindFileData=0x31e38c | out: lpFindFileData=0x31e38c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd4b60d0, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xfd4dc230, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xfd4dc230, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0038.528] FindNextFileW (in: hFindFile=0x381e80, lpFindFileData=0x31e38c | out: lpFindFileData=0x31e38c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc9fbf300, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0xfd4dc230, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xc9fbf300, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0x155, dwReserved0=0x0, dwReserved1=0x0, cFileName="TAB_OFF.GIF", cAlternateFileName="")) returned 1 [0038.528] FindNextFileW (in: hFindFile=0x381e80, lpFindFileData=0x31e38c | out: lpFindFileData=0x31e38c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc9fbf300, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0xfd4dc230, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xc9fbf300, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0xde, dwReserved0=0x0, dwReserved1=0x0, cFileName="TAB_ON.GIF", cAlternateFileName="")) returned 1 [0038.528] FindNextFileW (in: hFindFile=0x381e80, lpFindFileData=0x31e38c | out: lpFindFileData=0x31e38c*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0038.528] FindClose (in: hFindFile=0x381e80 | out: hFindFile=0x381e80) returned 1 [0038.528] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e614) returned 1 [0038.528] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e620) returned 1 [0038.528] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e654) returned 1 [0038.528] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\Biscay", nBufferLength=0x105, lpBuffer=0x31e15c, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\Biscay", lpFilePart=0x0) returned 0x4f [0038.528] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\Biscay\\", nBufferLength=0x105, lpBuffer=0x31e130, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\Biscay\\", lpFilePart=0x0) returned 0x50 [0038.528] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\Biscay\\*", lpFindFileData=0x31e37c | out: lpFindFileData=0x31e37c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd4b60d0, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xfd4dc230, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xfd4dc230, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x381e80 [0038.528] FindNextFileW (in: hFindFile=0x381e80, lpFindFileData=0x31e38c | out: lpFindFileData=0x31e38c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd4b60d0, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xfd4dc230, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xfd4dc230, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0038.529] FindNextFileW (in: hFindFile=0x381e80, lpFindFileData=0x31e38c | out: lpFindFileData=0x31e38c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc9fbf300, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0xfd4dc230, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xc9fbf300, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0x155, dwReserved0=0x0, dwReserved1=0x0, cFileName="TAB_OFF.GIF", cAlternateFileName="")) returned 1 [0038.529] FindNextFileW (in: hFindFile=0x381e80, lpFindFileData=0x31e38c | out: lpFindFileData=0x31e38c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc9fbf300, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0xfd4dc230, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xc9fbf300, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0xde, dwReserved0=0x0, dwReserved1=0x0, cFileName="TAB_ON.GIF", cAlternateFileName="")) returned 1 [0038.529] FindNextFileW (in: hFindFile=0x381e80, lpFindFileData=0x31e38c | out: lpFindFileData=0x31e38c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc9fbf300, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0xfd4dc230, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xc9fbf300, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0xde, dwReserved0=0x0, dwReserved1=0x0, cFileName="TAB_ON.GIF", cAlternateFileName="")) returned 0 [0038.529] FindClose (in: hFindFile=0x381e80 | out: hFindFile=0x381e80) returned 1 [0038.529] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e614) returned 1 [0038.529] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e620) returned 1 [0038.529] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e654) returned 1 [0038.529] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\BrightOrange", nBufferLength=0x105, lpBuffer=0x31e15c, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\BrightOrange", lpFilePart=0x0) returned 0x55 [0038.529] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\BrightOrange\\", nBufferLength=0x105, lpBuffer=0x31e130, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\BrightOrange\\", lpFilePart=0x0) returned 0x56 [0038.529] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\BrightOrange\\*", lpFindFileData=0x31e37c | out: lpFindFileData=0x31e37c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd4dc230, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xfd502390, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xfd502390, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x381e80 [0038.530] FindNextFileW (in: hFindFile=0x381e80, lpFindFileData=0x31e38c | out: lpFindFileData=0x31e38c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd4dc230, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xfd502390, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xfd502390, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0038.530] FindNextFileW (in: hFindFile=0x381e80, lpFindFileData=0x31e38c | out: lpFindFileData=0x31e38c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc9fbf300, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0xfd4dc230, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xc9fbf300, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0x143, dwReserved0=0x0, dwReserved1=0x0, cFileName="background.gif", cAlternateFileName="BACKGR~1.GIF")) returned 1 [0038.530] FindNextFileW (in: hFindFile=0x381e80, lpFindFileData=0x31e38c | out: lpFindFileData=0x31e38c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc9fbf300, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0xfd502390, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xc9fbf300, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0xb9, dwReserved0=0x0, dwReserved1=0x0, cFileName="BUTTON.GIF", cAlternateFileName="")) returned 1 [0038.530] FindNextFileW (in: hFindFile=0x381e80, lpFindFileData=0x31e38c | out: lpFindFileData=0x31e38c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc9fbf300, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0xfd502390, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xc9fbf300, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0x155, dwReserved0=0x0, dwReserved1=0x0, cFileName="TAB_OFF.GIF", cAlternateFileName="")) returned 1 [0038.531] FindNextFileW (in: hFindFile=0x381e80, lpFindFileData=0x31e38c | out: lpFindFileData=0x31e38c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc9fbf300, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0xfd502390, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xc9fbf300, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0xde, dwReserved0=0x0, dwReserved1=0x0, cFileName="TAB_ON.GIF", cAlternateFileName="")) returned 1 [0038.531] FindNextFileW (in: hFindFile=0x381e80, lpFindFileData=0x31e38c | out: lpFindFileData=0x31e38c*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0038.531] FindClose (in: hFindFile=0x381e80 | out: hFindFile=0x381e80) returned 1 [0038.531] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e614) returned 1 [0038.531] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e620) returned 1 [0038.531] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e654) returned 1 [0038.531] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\BrightOrange", nBufferLength=0x105, lpBuffer=0x31e15c, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\BrightOrange", lpFilePart=0x0) returned 0x55 [0038.531] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\BrightOrange\\", nBufferLength=0x105, lpBuffer=0x31e130, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\BrightOrange\\", lpFilePart=0x0) returned 0x56 [0038.531] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\BrightOrange\\*", lpFindFileData=0x31e37c | out: lpFindFileData=0x31e37c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd4dc230, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xfd502390, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xfd502390, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x381e80 [0038.531] FindNextFileW (in: hFindFile=0x381e80, lpFindFileData=0x31e38c | out: lpFindFileData=0x31e38c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd4dc230, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xfd502390, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xfd502390, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0038.531] FindNextFileW (in: hFindFile=0x381e80, lpFindFileData=0x31e38c | out: lpFindFileData=0x31e38c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc9fbf300, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0xfd4dc230, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xc9fbf300, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0x143, dwReserved0=0x0, dwReserved1=0x0, cFileName="background.gif", cAlternateFileName="BACKGR~1.GIF")) returned 1 [0038.531] FindNextFileW (in: hFindFile=0x381e80, lpFindFileData=0x31e38c | out: lpFindFileData=0x31e38c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc9fbf300, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0xfd502390, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xc9fbf300, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0xb9, dwReserved0=0x0, dwReserved1=0x0, cFileName="BUTTON.GIF", cAlternateFileName="")) returned 1 [0038.532] FindNextFileW (in: hFindFile=0x381e80, lpFindFileData=0x31e38c | out: lpFindFileData=0x31e38c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc9fbf300, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0xfd502390, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xc9fbf300, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0x155, dwReserved0=0x0, dwReserved1=0x0, cFileName="TAB_OFF.GIF", cAlternateFileName="")) returned 1 [0038.532] FindNextFileW (in: hFindFile=0x381e80, lpFindFileData=0x31e38c | out: lpFindFileData=0x31e38c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc9fbf300, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0xfd502390, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xc9fbf300, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0xde, dwReserved0=0x0, dwReserved1=0x0, cFileName="TAB_ON.GIF", cAlternateFileName="")) returned 1 [0038.532] FindNextFileW (in: hFindFile=0x381e80, lpFindFileData=0x31e38c | out: lpFindFileData=0x31e38c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc9fbf300, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0xfd502390, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xc9fbf300, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0xde, dwReserved0=0x0, dwReserved1=0x0, cFileName="TAB_ON.GIF", cAlternateFileName="")) returned 0 [0038.532] FindClose (in: hFindFile=0x381e80 | out: hFindFile=0x381e80) returned 1 [0038.532] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e614) returned 1 [0038.532] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e620) returned 1 [0038.532] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e654) returned 1 [0038.532] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\BrightYellow", nBufferLength=0x105, lpBuffer=0x31e15c, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\BrightYellow", lpFilePart=0x0) returned 0x55 [0038.532] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\BrightYellow\\", nBufferLength=0x105, lpBuffer=0x31e130, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\BrightYellow\\", lpFilePart=0x0) returned 0x56 [0038.532] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\BrightYellow\\*", lpFindFileData=0x31e37c | out: lpFindFileData=0x31e37c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd502390, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xfd5284f0, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xfd5284f0, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x381e80 [0038.533] FindNextFileW (in: hFindFile=0x381e80, lpFindFileData=0x31e38c | out: lpFindFileData=0x31e38c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd502390, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xfd5284f0, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xfd5284f0, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0038.533] FindNextFileW (in: hFindFile=0x381e80, lpFindFileData=0x31e38c | out: lpFindFileData=0x31e38c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc9fbf300, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0xfd502390, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xc9fbf300, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0x16f, dwReserved0=0x0, dwReserved1=0x0, cFileName="HEADER.GIF", cAlternateFileName="")) returned 1 [0038.533] FindNextFileW (in: hFindFile=0x381e80, lpFindFileData=0x31e38c | out: lpFindFileData=0x31e38c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xcb2d2000, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0xfd5284f0, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xcb2d2000, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0x155, dwReserved0=0x0, dwReserved1=0x0, cFileName="TAB_OFF.GIF", cAlternateFileName="")) returned 1 [0038.533] FindNextFileW (in: hFindFile=0x381e80, lpFindFileData=0x31e38c | out: lpFindFileData=0x31e38c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xcb2d2000, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0xfd5284f0, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xcb2d2000, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0xde, dwReserved0=0x0, dwReserved1=0x0, cFileName="TAB_ON.GIF", cAlternateFileName="")) returned 1 [0038.533] FindNextFileW (in: hFindFile=0x381e80, lpFindFileData=0x31e38c | out: lpFindFileData=0x31e38c*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0038.534] FindClose (in: hFindFile=0x381e80 | out: hFindFile=0x381e80) returned 1 [0038.534] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e614) returned 1 [0038.534] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e620) returned 1 [0038.534] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e654) returned 1 [0038.534] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\BrightYellow", nBufferLength=0x105, lpBuffer=0x31e15c, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\BrightYellow", lpFilePart=0x0) returned 0x55 [0038.534] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\BrightYellow\\", nBufferLength=0x105, lpBuffer=0x31e130, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\BrightYellow\\", lpFilePart=0x0) returned 0x56 [0038.534] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\BrightYellow\\*", lpFindFileData=0x31e37c | out: lpFindFileData=0x31e37c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd502390, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xfd5284f0, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xfd5284f0, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x381e80 [0038.534] FindNextFileW (in: hFindFile=0x381e80, lpFindFileData=0x31e38c | out: lpFindFileData=0x31e38c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd502390, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xfd5284f0, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xfd5284f0, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0038.534] FindNextFileW (in: hFindFile=0x381e80, lpFindFileData=0x31e38c | out: lpFindFileData=0x31e38c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc9fbf300, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0xfd502390, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xc9fbf300, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0x16f, dwReserved0=0x0, dwReserved1=0x0, cFileName="HEADER.GIF", cAlternateFileName="")) returned 1 [0038.534] FindNextFileW (in: hFindFile=0x381e80, lpFindFileData=0x31e38c | out: lpFindFileData=0x31e38c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xcb2d2000, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0xfd5284f0, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xcb2d2000, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0x155, dwReserved0=0x0, dwReserved1=0x0, cFileName="TAB_OFF.GIF", cAlternateFileName="")) returned 1 [0038.534] FindNextFileW (in: hFindFile=0x381e80, lpFindFileData=0x31e38c | out: lpFindFileData=0x31e38c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xcb2d2000, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0xfd5284f0, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xcb2d2000, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0xde, dwReserved0=0x0, dwReserved1=0x0, cFileName="TAB_ON.GIF", cAlternateFileName="")) returned 1 [0038.535] FindNextFileW (in: hFindFile=0x381e80, lpFindFileData=0x31e38c | out: lpFindFileData=0x31e38c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xcb2d2000, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0xfd5284f0, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xcb2d2000, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0xde, dwReserved0=0x0, dwReserved1=0x0, cFileName="TAB_ON.GIF", cAlternateFileName="")) returned 0 [0038.535] FindClose (in: hFindFile=0x381e80 | out: hFindFile=0x381e80) returned 1 [0038.535] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e614) returned 1 [0038.535] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e620) returned 1 [0038.535] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e654) returned 1 [0038.535] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\Desert", nBufferLength=0x105, lpBuffer=0x31e15c, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\Desert", lpFilePart=0x0) returned 0x4f [0038.535] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\Desert\\", nBufferLength=0x105, lpBuffer=0x31e130, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\Desert\\", lpFilePart=0x0) returned 0x50 [0038.535] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\Desert\\*", lpFindFileData=0x31e37c | out: lpFindFileData=0x31e37c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd5284f0, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xfd5284f0, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xfd5284f0, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x381e80 [0038.536] FindNextFileW (in: hFindFile=0x381e80, lpFindFileData=0x31e38c | out: lpFindFileData=0x31e38c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd5284f0, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xfd5284f0, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xfd5284f0, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0038.536] FindNextFileW (in: hFindFile=0x381e80, lpFindFileData=0x31e38c | out: lpFindFileData=0x31e38c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xcb2d2000, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0xfd5284f0, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xcb2d2000, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0x94, dwReserved0=0x0, dwReserved1=0x0, cFileName="HEADER.GIF", cAlternateFileName="")) returned 1 [0038.536] FindNextFileW (in: hFindFile=0x381e80, lpFindFileData=0x31e38c | out: lpFindFileData=0x31e38c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xcb2d2000, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0xfd5284f0, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xcb2d2000, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0x1f0, dwReserved0=0x0, dwReserved1=0x0, cFileName="TAB_OFF.GIF", cAlternateFileName="")) returned 1 [0038.536] FindNextFileW (in: hFindFile=0x381e80, lpFindFileData=0x31e38c | out: lpFindFileData=0x31e38c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xcb2d2000, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0xfd5284f0, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xcb2d2000, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0x401, dwReserved0=0x0, dwReserved1=0x0, cFileName="TAB_ON.GIF", cAlternateFileName="")) returned 1 [0038.536] FindNextFileW (in: hFindFile=0x381e80, lpFindFileData=0x31e38c | out: lpFindFileData=0x31e38c*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0038.536] FindClose (in: hFindFile=0x381e80 | out: hFindFile=0x381e80) returned 1 [0038.536] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e614) returned 1 [0038.536] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e620) returned 1 [0038.536] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e654) returned 1 [0038.536] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\Desert", nBufferLength=0x105, lpBuffer=0x31e15c, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\Desert", lpFilePart=0x0) returned 0x4f [0038.537] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\Desert\\", nBufferLength=0x105, lpBuffer=0x31e130, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\Desert\\", lpFilePart=0x0) returned 0x50 [0038.537] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\Desert\\*", lpFindFileData=0x31e37c | out: lpFindFileData=0x31e37c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd5284f0, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xfd5284f0, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xfd5284f0, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x381e80 [0038.537] FindNextFileW (in: hFindFile=0x381e80, lpFindFileData=0x31e38c | out: lpFindFileData=0x31e38c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd5284f0, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xfd5284f0, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xfd5284f0, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0038.537] FindNextFileW (in: hFindFile=0x381e80, lpFindFileData=0x31e38c | out: lpFindFileData=0x31e38c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xcb2d2000, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0xfd5284f0, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xcb2d2000, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0x94, dwReserved0=0x0, dwReserved1=0x0, cFileName="HEADER.GIF", cAlternateFileName="")) returned 1 [0038.537] FindNextFileW (in: hFindFile=0x381e80, lpFindFileData=0x31e38c | out: lpFindFileData=0x31e38c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xcb2d2000, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0xfd5284f0, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xcb2d2000, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0x1f0, dwReserved0=0x0, dwReserved1=0x0, cFileName="TAB_OFF.GIF", cAlternateFileName="")) returned 1 [0038.537] FindNextFileW (in: hFindFile=0x381e80, lpFindFileData=0x31e38c | out: lpFindFileData=0x31e38c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xcb2d2000, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0xfd5284f0, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xcb2d2000, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0x401, dwReserved0=0x0, dwReserved1=0x0, cFileName="TAB_ON.GIF", cAlternateFileName="")) returned 1 [0038.537] FindNextFileW (in: hFindFile=0x381e80, lpFindFileData=0x31e38c | out: lpFindFileData=0x31e38c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xcb2d2000, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0xfd5284f0, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xcb2d2000, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0x401, dwReserved0=0x0, dwReserved1=0x0, cFileName="TAB_ON.GIF", cAlternateFileName="")) returned 0 [0038.537] FindClose (in: hFindFile=0x381e80 | out: hFindFile=0x381e80) returned 1 [0038.537] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e614) returned 1 [0038.537] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e620) returned 1 [0038.538] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e654) returned 1 [0038.538] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\GrayCheck", nBufferLength=0x105, lpBuffer=0x31e15c, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\GrayCheck", lpFilePart=0x0) returned 0x52 [0038.538] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\GrayCheck\\", nBufferLength=0x105, lpBuffer=0x31e130, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\GrayCheck\\", lpFilePart=0x0) returned 0x53 [0038.538] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\GrayCheck\\*", lpFindFileData=0x31e37c | out: lpFindFileData=0x31e37c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd5284f0, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xfd5284f0, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xfd5284f0, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x381e80 [0038.538] FindNextFileW (in: hFindFile=0x381e80, lpFindFileData=0x31e38c | out: lpFindFileData=0x31e38c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd5284f0, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xfd5284f0, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xfd5284f0, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0038.539] FindNextFileW (in: hFindFile=0x381e80, lpFindFileData=0x31e38c | out: lpFindFileData=0x31e38c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xcb2d2000, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0xfd5284f0, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xcb2d2000, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0x1b8, dwReserved0=0x0, dwReserved1=0x0, cFileName="HEADER.GIF", cAlternateFileName="")) returned 1 [0038.539] FindNextFileW (in: hFindFile=0x381e80, lpFindFileData=0x31e38c | out: lpFindFileData=0x31e38c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xcc5e4d00, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0xfd5284f0, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xcc5e4d00, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0x155, dwReserved0=0x0, dwReserved1=0x0, cFileName="TAB_OFF.GIF", cAlternateFileName="")) returned 1 [0038.539] FindNextFileW (in: hFindFile=0x381e80, lpFindFileData=0x31e38c | out: lpFindFileData=0x31e38c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xcc5e4d00, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0xfd5284f0, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xcc5e4d00, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0xde, dwReserved0=0x0, dwReserved1=0x0, cFileName="TAB_ON.GIF", cAlternateFileName="")) returned 1 [0038.539] FindNextFileW (in: hFindFile=0x381e80, lpFindFileData=0x31e38c | out: lpFindFileData=0x31e38c*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0038.539] FindClose (in: hFindFile=0x381e80 | out: hFindFile=0x381e80) returned 1 [0038.539] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e614) returned 1 [0038.539] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e620) returned 1 [0038.539] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e654) returned 1 [0038.539] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\GrayCheck", nBufferLength=0x105, lpBuffer=0x31e15c, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\GrayCheck", lpFilePart=0x0) returned 0x52 [0038.539] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\GrayCheck\\", nBufferLength=0x105, lpBuffer=0x31e130, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\GrayCheck\\", lpFilePart=0x0) returned 0x53 [0038.539] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\GrayCheck\\*", lpFindFileData=0x31e37c | out: lpFindFileData=0x31e37c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd5284f0, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xfd5284f0, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xfd5284f0, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x381e80 [0038.539] FindNextFileW (in: hFindFile=0x381e80, lpFindFileData=0x31e38c | out: lpFindFileData=0x31e38c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd5284f0, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xfd5284f0, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xfd5284f0, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0038.540] FindNextFileW (in: hFindFile=0x381e80, lpFindFileData=0x31e38c | out: lpFindFileData=0x31e38c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xcb2d2000, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0xfd5284f0, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xcb2d2000, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0x1b8, dwReserved0=0x0, dwReserved1=0x0, cFileName="HEADER.GIF", cAlternateFileName="")) returned 1 [0038.540] FindNextFileW (in: hFindFile=0x381e80, lpFindFileData=0x31e38c | out: lpFindFileData=0x31e38c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xcc5e4d00, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0xfd5284f0, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xcc5e4d00, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0x155, dwReserved0=0x0, dwReserved1=0x0, cFileName="TAB_OFF.GIF", cAlternateFileName="")) returned 1 [0038.540] FindNextFileW (in: hFindFile=0x381e80, lpFindFileData=0x31e38c | out: lpFindFileData=0x31e38c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xcc5e4d00, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0xfd5284f0, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xcc5e4d00, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0xde, dwReserved0=0x0, dwReserved1=0x0, cFileName="TAB_ON.GIF", cAlternateFileName="")) returned 1 [0038.540] FindNextFileW (in: hFindFile=0x381e80, lpFindFileData=0x31e38c | out: lpFindFileData=0x31e38c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xcc5e4d00, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0xfd5284f0, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xcc5e4d00, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0xde, dwReserved0=0x0, dwReserved1=0x0, cFileName="TAB_ON.GIF", cAlternateFileName="")) returned 0 [0038.540] FindClose (in: hFindFile=0x381e80 | out: hFindFile=0x381e80) returned 1 [0038.540] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e614) returned 1 [0038.540] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e620) returned 1 [0038.540] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e654) returned 1 [0038.540] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\Lime", nBufferLength=0x105, lpBuffer=0x31e15c, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\Lime", lpFilePart=0x0) returned 0x4d [0038.540] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\Lime\\", nBufferLength=0x105, lpBuffer=0x31e130, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\Lime\\", lpFilePart=0x0) returned 0x4e [0038.540] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\Lime\\*", lpFindFileData=0x31e37c | out: lpFindFileData=0x31e37c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd5284f0, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xfd5284f0, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xfd5284f0, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x381e80 [0038.543] FindNextFileW (in: hFindFile=0x381e80, lpFindFileData=0x31e38c | out: lpFindFileData=0x31e38c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd5284f0, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xfd5284f0, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xfd5284f0, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0038.543] FindNextFileW (in: hFindFile=0x381e80, lpFindFileData=0x31e38c | out: lpFindFileData=0x31e38c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xcc5e4d00, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0xfd5284f0, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xcc5e4d00, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0x1ce, dwReserved0=0x0, dwReserved1=0x0, cFileName="TAB_OFF.GIF", cAlternateFileName="")) returned 1 [0038.543] FindNextFileW (in: hFindFile=0x381e80, lpFindFileData=0x31e38c | out: lpFindFileData=0x31e38c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xcc5e4d00, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0xfd5284f0, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xcc5e4d00, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0x10b, dwReserved0=0x0, dwReserved1=0x0, cFileName="TAB_ON.GIF", cAlternateFileName="")) returned 1 [0038.543] FindNextFileW (in: hFindFile=0x381e80, lpFindFileData=0x31e38c | out: lpFindFileData=0x31e38c*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0038.543] FindClose (in: hFindFile=0x381e80 | out: hFindFile=0x381e80) returned 1 [0038.543] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e614) returned 1 [0038.543] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e620) returned 1 [0038.543] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e654) returned 1 [0038.543] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\Lime", nBufferLength=0x105, lpBuffer=0x31e15c, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\Lime", lpFilePart=0x0) returned 0x4d [0038.543] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\Lime\\", nBufferLength=0x105, lpBuffer=0x31e130, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\Lime\\", lpFilePart=0x0) returned 0x4e [0038.543] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\Lime\\*", lpFindFileData=0x31e37c | out: lpFindFileData=0x31e37c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd5284f0, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xfd5284f0, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xfd5284f0, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x381e80 [0038.544] FindNextFileW (in: hFindFile=0x381e80, lpFindFileData=0x31e38c | out: lpFindFileData=0x31e38c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd5284f0, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xfd5284f0, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xfd5284f0, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0038.544] FindNextFileW (in: hFindFile=0x381e80, lpFindFileData=0x31e38c | out: lpFindFileData=0x31e38c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xcc5e4d00, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0xfd5284f0, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xcc5e4d00, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0x1ce, dwReserved0=0x0, dwReserved1=0x0, cFileName="TAB_OFF.GIF", cAlternateFileName="")) returned 1 [0038.544] FindNextFileW (in: hFindFile=0x381e80, lpFindFileData=0x31e38c | out: lpFindFileData=0x31e38c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xcc5e4d00, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0xfd5284f0, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xcc5e4d00, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0x10b, dwReserved0=0x0, dwReserved1=0x0, cFileName="TAB_ON.GIF", cAlternateFileName="")) returned 1 [0038.544] FindNextFileW (in: hFindFile=0x381e80, lpFindFileData=0x31e38c | out: lpFindFileData=0x31e38c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xcc5e4d00, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0xfd5284f0, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xcc5e4d00, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0x10b, dwReserved0=0x0, dwReserved1=0x0, cFileName="TAB_ON.GIF", cAlternateFileName="")) returned 0 [0038.544] FindClose (in: hFindFile=0x381e80 | out: hFindFile=0x381e80) returned 1 [0038.544] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e614) returned 1 [0038.544] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e620) returned 1 [0038.544] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e654) returned 1 [0038.544] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\Oasis", nBufferLength=0x105, lpBuffer=0x31e15c, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\Oasis", lpFilePart=0x0) returned 0x4e [0038.544] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\Oasis\\", nBufferLength=0x105, lpBuffer=0x31e130, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\Oasis\\", lpFilePart=0x0) returned 0x4f [0038.544] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\Oasis\\*", lpFindFileData=0x31e37c | out: lpFindFileData=0x31e37c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd5284f0, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xfd54e650, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xfd54e650, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x381e80 [0038.545] FindNextFileW (in: hFindFile=0x381e80, lpFindFileData=0x31e38c | out: lpFindFileData=0x31e38c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd5284f0, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xfd54e650, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xfd54e650, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0038.545] FindNextFileW (in: hFindFile=0x381e80, lpFindFileData=0x31e38c | out: lpFindFileData=0x31e38c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xcc5e4d00, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0xfd54e650, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xcc5e4d00, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0x86c, dwReserved0=0x0, dwReserved1=0x0, cFileName="HEADER.GIF", cAlternateFileName="")) returned 1 [0038.545] FindNextFileW (in: hFindFile=0x381e80, lpFindFileData=0x31e38c | out: lpFindFileData=0x31e38c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xcc5e4d00, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0xfd54e650, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xcc5e4d00, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0x1f0, dwReserved0=0x0, dwReserved1=0x0, cFileName="TAB_OFF.GIF", cAlternateFileName="")) returned 1 [0038.545] FindNextFileW (in: hFindFile=0x381e80, lpFindFileData=0x31e38c | out: lpFindFileData=0x31e38c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xcc5e4d00, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0xfd54e650, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xcc5e4d00, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0x401, dwReserved0=0x0, dwReserved1=0x0, cFileName="TAB_ON.GIF", cAlternateFileName="")) returned 1 [0038.546] FindNextFileW (in: hFindFile=0x381e80, lpFindFileData=0x31e38c | out: lpFindFileData=0x31e38c*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0038.546] FindClose (in: hFindFile=0x381e80 | out: hFindFile=0x381e80) returned 1 [0038.546] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e614) returned 1 [0038.546] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e620) returned 1 [0038.546] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e654) returned 1 [0038.546] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\Oasis", nBufferLength=0x105, lpBuffer=0x31e15c, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\Oasis", lpFilePart=0x0) returned 0x4e [0038.546] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\Oasis\\", nBufferLength=0x105, lpBuffer=0x31e130, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\Oasis\\", lpFilePart=0x0) returned 0x4f [0038.546] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\Oasis\\*", lpFindFileData=0x31e37c | out: lpFindFileData=0x31e37c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd5284f0, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xfd54e650, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xfd54e650, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x381e80 [0038.546] FindNextFileW (in: hFindFile=0x381e80, lpFindFileData=0x31e38c | out: lpFindFileData=0x31e38c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd5284f0, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xfd54e650, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xfd54e650, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0038.546] FindNextFileW (in: hFindFile=0x381e80, lpFindFileData=0x31e38c | out: lpFindFileData=0x31e38c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xcc5e4d00, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0xfd54e650, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xcc5e4d00, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0x86c, dwReserved0=0x0, dwReserved1=0x0, cFileName="HEADER.GIF", cAlternateFileName="")) returned 1 [0038.546] FindNextFileW (in: hFindFile=0x381e80, lpFindFileData=0x31e38c | out: lpFindFileData=0x31e38c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xcc5e4d00, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0xfd54e650, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xcc5e4d00, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0x1f0, dwReserved0=0x0, dwReserved1=0x0, cFileName="TAB_OFF.GIF", cAlternateFileName="")) returned 1 [0038.546] FindNextFileW (in: hFindFile=0x381e80, lpFindFileData=0x31e38c | out: lpFindFileData=0x31e38c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xcc5e4d00, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0xfd54e650, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xcc5e4d00, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0x401, dwReserved0=0x0, dwReserved1=0x0, cFileName="TAB_ON.GIF", cAlternateFileName="")) returned 1 [0038.547] FindNextFileW (in: hFindFile=0x381e80, lpFindFileData=0x31e38c | out: lpFindFileData=0x31e38c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xcc5e4d00, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0xfd54e650, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xcc5e4d00, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0x401, dwReserved0=0x0, dwReserved1=0x0, cFileName="TAB_ON.GIF", cAlternateFileName="")) returned 0 [0038.547] FindClose (in: hFindFile=0x381e80 | out: hFindFile=0x381e80) returned 1 [0038.547] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e614) returned 1 [0038.547] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e620) returned 1 [0038.547] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e654) returned 1 [0038.547] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\Slate", nBufferLength=0x105, lpBuffer=0x31e15c, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\Slate", lpFilePart=0x0) returned 0x4e [0038.547] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\Slate\\", nBufferLength=0x105, lpBuffer=0x31e130, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\Slate\\", lpFilePart=0x0) returned 0x4f [0038.547] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\Slate\\*", lpFindFileData=0x31e37c | out: lpFindFileData=0x31e37c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd54e650, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xfd54e650, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xfd54e650, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x381e80 [0038.548] FindNextFileW (in: hFindFile=0x381e80, lpFindFileData=0x31e38c | out: lpFindFileData=0x31e38c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd54e650, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xfd54e650, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xfd54e650, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0038.548] FindNextFileW (in: hFindFile=0x381e80, lpFindFileData=0x31e38c | out: lpFindFileData=0x31e38c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xcd8f7a00, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0xfd54e650, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xcd8f7a00, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0x16c, dwReserved0=0x0, dwReserved1=0x0, cFileName="TAB_OFF.GIF", cAlternateFileName="")) returned 1 [0038.548] FindNextFileW (in: hFindFile=0x381e80, lpFindFileData=0x31e38c | out: lpFindFileData=0x31e38c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xcd8f7a00, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0xfd54e650, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xcd8f7a00, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0x16c, dwReserved0=0x0, dwReserved1=0x0, cFileName="TAB_ON.GIF", cAlternateFileName="")) returned 1 [0038.548] FindNextFileW (in: hFindFile=0x381e80, lpFindFileData=0x31e38c | out: lpFindFileData=0x31e38c*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0038.548] FindClose (in: hFindFile=0x381e80 | out: hFindFile=0x381e80) returned 1 [0038.548] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e614) returned 1 [0038.548] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e620) returned 1 [0038.548] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e654) returned 1 [0038.549] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\Slate", nBufferLength=0x105, lpBuffer=0x31e15c, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\Slate", lpFilePart=0x0) returned 0x4e [0038.549] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\Slate\\", nBufferLength=0x105, lpBuffer=0x31e130, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\Slate\\", lpFilePart=0x0) returned 0x4f [0038.549] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\Slate\\*", lpFindFileData=0x31e37c | out: lpFindFileData=0x31e37c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd54e650, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xfd54e650, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xfd54e650, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x381e80 [0038.549] FindNextFileW (in: hFindFile=0x381e80, lpFindFileData=0x31e38c | out: lpFindFileData=0x31e38c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd54e650, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xfd54e650, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xfd54e650, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0038.549] FindNextFileW (in: hFindFile=0x381e80, lpFindFileData=0x31e38c | out: lpFindFileData=0x31e38c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xcd8f7a00, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0xfd54e650, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xcd8f7a00, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0x16c, dwReserved0=0x0, dwReserved1=0x0, cFileName="TAB_OFF.GIF", cAlternateFileName="")) returned 1 [0038.549] FindNextFileW (in: hFindFile=0x381e80, lpFindFileData=0x31e38c | out: lpFindFileData=0x31e38c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xcd8f7a00, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0xfd54e650, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xcd8f7a00, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0x16c, dwReserved0=0x0, dwReserved1=0x0, cFileName="TAB_ON.GIF", cAlternateFileName="")) returned 1 [0038.549] FindNextFileW (in: hFindFile=0x381e80, lpFindFileData=0x31e38c | out: lpFindFileData=0x31e38c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xcd8f7a00, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0xfd54e650, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xcd8f7a00, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0x16c, dwReserved0=0x0, dwReserved1=0x0, cFileName="TAB_ON.GIF", cAlternateFileName="")) returned 0 [0038.549] FindClose (in: hFindFile=0x381e80 | out: hFindFile=0x381e80) returned 1 [0038.549] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e614) returned 1 [0038.549] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e620) returned 1 [0038.549] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e654) returned 1 [0038.549] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\SoftBlue", nBufferLength=0x105, lpBuffer=0x31e15c, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\SoftBlue", lpFilePart=0x0) returned 0x51 [0038.549] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\SoftBlue\\", nBufferLength=0x105, lpBuffer=0x31e130, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\SoftBlue\\", lpFilePart=0x0) returned 0x52 [0038.549] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\SoftBlue\\*", lpFindFileData=0x31e37c | out: lpFindFileData=0x31e37c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd54e650, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xfd54e650, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xfd54e650, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x381e80 [0038.550] FindNextFileW (in: hFindFile=0x381e80, lpFindFileData=0x31e38c | out: lpFindFileData=0x31e38c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd54e650, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xfd54e650, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xfd54e650, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0038.550] FindNextFileW (in: hFindFile=0x381e80, lpFindFileData=0x31e38c | out: lpFindFileData=0x31e38c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xcd8f7a00, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0xfd54e650, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xcd8f7a00, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0x1afa, dwReserved0=0x0, dwReserved1=0x0, cFileName="background.gif", cAlternateFileName="BACKGR~1.GIF")) returned 1 [0038.550] FindNextFileW (in: hFindFile=0x381e80, lpFindFileData=0x31e38c | out: lpFindFileData=0x31e38c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xcd8f7a00, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0xfd54e650, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xcd8f7a00, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0x155, dwReserved0=0x0, dwReserved1=0x0, cFileName="TAB_OFF.GIF", cAlternateFileName="")) returned 1 [0038.550] FindNextFileW (in: hFindFile=0x381e80, lpFindFileData=0x31e38c | out: lpFindFileData=0x31e38c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xcec0a700, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0xfd54e650, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xcec0a700, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0xde, dwReserved0=0x0, dwReserved1=0x0, cFileName="TAB_ON.GIF", cAlternateFileName="")) returned 1 [0038.550] FindNextFileW (in: hFindFile=0x381e80, lpFindFileData=0x31e38c | out: lpFindFileData=0x31e38c*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0038.550] FindClose (in: hFindFile=0x381e80 | out: hFindFile=0x381e80) returned 1 [0038.550] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e614) returned 1 [0038.550] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e620) returned 1 [0038.550] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e654) returned 1 [0038.550] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\SoftBlue", nBufferLength=0x105, lpBuffer=0x31e15c, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\SoftBlue", lpFilePart=0x0) returned 0x51 [0038.550] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\SoftBlue\\", nBufferLength=0x105, lpBuffer=0x31e130, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\SoftBlue\\", lpFilePart=0x0) returned 0x52 [0038.551] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\SoftBlue\\*", lpFindFileData=0x31e37c | out: lpFindFileData=0x31e37c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd54e650, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xfd54e650, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xfd54e650, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x381e80 [0038.551] FindNextFileW (in: hFindFile=0x381e80, lpFindFileData=0x31e38c | out: lpFindFileData=0x31e38c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd54e650, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xfd54e650, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xfd54e650, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0038.551] FindNextFileW (in: hFindFile=0x381e80, lpFindFileData=0x31e38c | out: lpFindFileData=0x31e38c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xcd8f7a00, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0xfd54e650, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xcd8f7a00, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0x1afa, dwReserved0=0x0, dwReserved1=0x0, cFileName="background.gif", cAlternateFileName="BACKGR~1.GIF")) returned 1 [0038.551] FindNextFileW (in: hFindFile=0x381e80, lpFindFileData=0x31e38c | out: lpFindFileData=0x31e38c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xcd8f7a00, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0xfd54e650, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xcd8f7a00, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0x155, dwReserved0=0x0, dwReserved1=0x0, cFileName="TAB_OFF.GIF", cAlternateFileName="")) returned 1 [0038.551] FindNextFileW (in: hFindFile=0x381e80, lpFindFileData=0x31e38c | out: lpFindFileData=0x31e38c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xcec0a700, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0xfd54e650, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xcec0a700, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0xde, dwReserved0=0x0, dwReserved1=0x0, cFileName="TAB_ON.GIF", cAlternateFileName="")) returned 1 [0038.551] FindNextFileW (in: hFindFile=0x381e80, lpFindFileData=0x31e38c | out: lpFindFileData=0x31e38c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xcec0a700, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0xfd54e650, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xcec0a700, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0xde, dwReserved0=0x0, dwReserved1=0x0, cFileName="TAB_ON.GIF", cAlternateFileName="")) returned 0 [0038.551] FindClose (in: hFindFile=0x381e80 | out: hFindFile=0x381e80) returned 1 [0038.551] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e614) returned 1 [0038.551] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e620) returned 1 [0038.551] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e654) returned 1 [0038.551] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\Solutions", nBufferLength=0x105, lpBuffer=0x31e15c, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\Solutions", lpFilePart=0x0) returned 0x52 [0038.551] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\Solutions\\", nBufferLength=0x105, lpBuffer=0x31e130, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\Solutions\\", lpFilePart=0x0) returned 0x53 [0038.551] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\Solutions\\*", lpFindFileData=0x31e37c | out: lpFindFileData=0x31e37c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd67f150, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xfd6a52b0, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xfd6a52b0, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x381e80 [0038.553] FindNextFileW (in: hFindFile=0x381e80, lpFindFileData=0x31e38c | out: lpFindFileData=0x31e38c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd67f150, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xfd6a52b0, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xfd6a52b0, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0038.553] FindNextFileW (in: hFindFile=0x381e80, lpFindFileData=0x31e38c | out: lpFindFileData=0x31e38c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xcec0a700, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0xfd67f150, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xcec0a700, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0xe5, dwReserved0=0x0, dwReserved1=0x0, cFileName="arrow.png", cAlternateFileName="")) returned 1 [0038.553] FindNextFileW (in: hFindFile=0x381e80, lpFindFileData=0x31e38c | out: lpFindFileData=0x31e38c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xcec0a700, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0xfd67f150, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xcec0a700, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0x931, dwReserved0=0x0, dwReserved1=0x0, cFileName="Document.gif", cAlternateFileName="")) returned 1 [0038.553] FindNextFileW (in: hFindFile=0x381e80, lpFindFileData=0x31e38c | out: lpFindFileData=0x31e38c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xcec0a700, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0xfd6a52b0, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xcec0a700, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0x832, dwReserved0=0x0, dwReserved1=0x0, cFileName="Generic.gif", cAlternateFileName="")) returned 1 [0038.553] FindNextFileW (in: hFindFile=0x381e80, lpFindFileData=0x31e38c | out: lpFindFileData=0x31e38c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xcec0a700, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0xfd6a52b0, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xcec0a700, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0xe2, dwReserved0=0x0, dwReserved1=0x0, cFileName="gradient.png", cAlternateFileName="")) returned 1 [0038.553] FindNextFileW (in: hFindFile=0x381e80, lpFindFileData=0x31e38c | out: lpFindFileData=0x31e38c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xcec0a700, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0xfd6a52b0, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xcec0a700, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0x634, dwReserved0=0x0, dwReserved1=0x0, cFileName="Main.gif", cAlternateFileName="")) returned 1 [0038.553] FindNextFileW (in: hFindFile=0x381e80, lpFindFileData=0x31e38c | out: lpFindFileData=0x31e38c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xcec0a700, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0xfd6a52b0, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xcec0a700, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0x96a, dwReserved0=0x0, dwReserved1=0x0, cFileName="Person.gif", cAlternateFileName="")) returned 1 [0038.553] FindNextFileW (in: hFindFile=0x381e80, lpFindFileData=0x31e38c | out: lpFindFileData=0x31e38c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xcec0a700, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0xfd6a52b0, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xcec0a700, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0x68e, dwReserved0=0x0, dwReserved1=0x0, cFileName="Response.gif", cAlternateFileName="")) returned 1 [0038.553] FindNextFileW (in: hFindFile=0x381e80, lpFindFileData=0x31e38c | out: lpFindFileData=0x31e38c*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0038.553] FindClose (in: hFindFile=0x381e80 | out: hFindFile=0x381e80) returned 1 [0038.554] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e614) returned 1 [0038.554] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e620) returned 1 [0038.554] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e654) returned 1 [0038.554] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\Solutions", nBufferLength=0x105, lpBuffer=0x31e15c, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\Solutions", lpFilePart=0x0) returned 0x52 [0038.554] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\Solutions\\", nBufferLength=0x105, lpBuffer=0x31e130, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\Solutions\\", lpFilePart=0x0) returned 0x53 [0038.554] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\Solutions\\*", lpFindFileData=0x31e37c | out: lpFindFileData=0x31e37c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd67f150, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xfd6a52b0, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xfd6a52b0, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x381e80 [0038.555] FindNextFileW (in: hFindFile=0x381e80, lpFindFileData=0x31e38c | out: lpFindFileData=0x31e38c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd67f150, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xfd6a52b0, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xfd6a52b0, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0038.555] FindNextFileW (in: hFindFile=0x381e80, lpFindFileData=0x31e38c | out: lpFindFileData=0x31e38c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xcec0a700, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0xfd67f150, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xcec0a700, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0xe5, dwReserved0=0x0, dwReserved1=0x0, cFileName="arrow.png", cAlternateFileName="")) returned 1 [0038.555] FindNextFileW (in: hFindFile=0x381e80, lpFindFileData=0x31e38c | out: lpFindFileData=0x31e38c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xcec0a700, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0xfd67f150, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xcec0a700, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0x931, dwReserved0=0x0, dwReserved1=0x0, cFileName="Document.gif", cAlternateFileName="")) returned 1 [0038.555] FindNextFileW (in: hFindFile=0x381e80, lpFindFileData=0x31e38c | out: lpFindFileData=0x31e38c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xcec0a700, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0xfd6a52b0, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xcec0a700, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0x832, dwReserved0=0x0, dwReserved1=0x0, cFileName="Generic.gif", cAlternateFileName="")) returned 1 [0038.555] FindNextFileW (in: hFindFile=0x381e80, lpFindFileData=0x31e38c | out: lpFindFileData=0x31e38c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xcec0a700, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0xfd6a52b0, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xcec0a700, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0xe2, dwReserved0=0x0, dwReserved1=0x0, cFileName="gradient.png", cAlternateFileName="")) returned 1 [0038.555] FindNextFileW (in: hFindFile=0x381e80, lpFindFileData=0x31e38c | out: lpFindFileData=0x31e38c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xcec0a700, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0xfd6a52b0, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xcec0a700, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0x634, dwReserved0=0x0, dwReserved1=0x0, cFileName="Main.gif", cAlternateFileName="")) returned 1 [0038.555] FindNextFileW (in: hFindFile=0x381e80, lpFindFileData=0x31e38c | out: lpFindFileData=0x31e38c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xcec0a700, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0xfd6a52b0, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xcec0a700, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0x96a, dwReserved0=0x0, dwReserved1=0x0, cFileName="Person.gif", cAlternateFileName="")) returned 1 [0038.555] FindNextFileW (in: hFindFile=0x381e80, lpFindFileData=0x31e38c | out: lpFindFileData=0x31e38c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xcec0a700, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0xfd6a52b0, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xcec0a700, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0x68e, dwReserved0=0x0, dwReserved1=0x0, cFileName="Response.gif", cAlternateFileName="")) returned 1 [0038.555] FindNextFileW (in: hFindFile=0x381e80, lpFindFileData=0x31e38c | out: lpFindFileData=0x31e38c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xcec0a700, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0xfd6a52b0, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xcec0a700, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0x68e, dwReserved0=0x0, dwReserved1=0x0, cFileName="Response.gif", cAlternateFileName="")) returned 0 [0038.555] FindClose (in: hFindFile=0x381e80 | out: hFindFile=0x381e80) returned 1 [0038.556] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e614) returned 1 [0038.556] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e620) returned 1 [0038.556] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\Solutions\\arrow.png", nBufferLength=0x105, lpBuffer=0x31e02c, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\Solutions\\arrow.png", lpFilePart=0x0) returned 0x5c [0038.556] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e520) returned 1 [0038.556] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\Solutions\\arrow.png" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\grooveforms5\\formsstyles\\solutions\\arrow.png"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x274 [0038.557] GetFileType (hFile=0x274) returned 0x1 [0038.557] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e51c) returned 1 [0038.557] GetFileType (hFile=0x274) returned 0x1 [0038.557] GetFileSize (in: hFile=0x274, lpFileSizeHigh=0x31e628 | out: lpFileSizeHigh=0x31e628*=0x0) returned 0xe5 [0038.557] ReadFile (in: hFile=0x274, lpBuffer=0x26f8848, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x31e5d4, lpOverlapped=0x0 | out: lpBuffer=0x26f8848*, lpNumberOfBytesRead=0x31e5d4*=0xe5, lpOverlapped=0x0) returned 1 [0038.571] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\Solutions\\arrow.png", nBufferLength=0x105, lpBuffer=0x31e018, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\Solutions\\arrow.png", lpFilePart=0x0) returned 0x5c [0038.571] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e50c) returned 1 [0038.571] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\Solutions\\arrow.png" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\grooveforms5\\formsstyles\\solutions\\arrow.png"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x274 [0038.572] GetFileType (hFile=0x274) returned 0x1 [0038.572] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e508) returned 1 [0038.572] GetFileType (hFile=0x274) returned 0x1 [0038.572] WriteFile (in: hFile=0x274, lpBuffer=0x2746a8c*, nNumberOfBytesToWrite=0xf0, lpNumberOfBytesWritten=0x31e59c, lpOverlapped=0x0 | out: lpBuffer=0x2746a8c*, lpNumberOfBytesWritten=0x31e59c*=0xf0, lpOverlapped=0x0) returned 1 [0038.573] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\Solutions\\arrow.png", nBufferLength=0x105, lpBuffer=0x31e14c, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\Solutions\\arrow.png", lpFilePart=0x0) returned 0x5c [0038.573] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\Solutions\\arrow.png", nBufferLength=0x105, lpBuffer=0x31e14c, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\Solutions\\arrow.png", lpFilePart=0x0) returned 0x5c [0038.573] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e5ac) returned 1 [0038.573] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\Solutions\\arrow.png" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\grooveforms5\\formsstyles\\solutions\\arrow.png"), fInfoLevelId=0x0, lpFileInformation=0x31e628 | out: lpFileInformation=0x31e628*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xcec0a700, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0xfd67f150, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xfa714c00, ftLastWriteTime.dwHighDateTime=0x1d6eb7e, nFileSizeHigh=0x0, nFileSizeLow=0xf0)) returned 1 [0038.573] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e5a8) returned 1 [0038.573] MoveFileW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\Solutions\\arrow.png" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\grooveforms5\\formsstyles\\solutions\\arrow.png"), lpNewFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\Solutions\\arrow.png" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\grooveforms5\\formsstyles\\solutions\\arrow.png")) returned 1 [0038.574] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\Solutions\\gradient.png", nBufferLength=0x105, lpBuffer=0x31e02c, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\Solutions\\gradient.png", lpFilePart=0x0) returned 0x5f [0038.574] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e520) returned 1 [0038.574] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\Solutions\\gradient.png" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\grooveforms5\\formsstyles\\solutions\\gradient.png"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x274 [0038.575] GetFileType (hFile=0x274) returned 0x1 [0038.575] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e51c) returned 1 [0038.575] GetFileType (hFile=0x274) returned 0x1 [0038.575] GetFileSize (in: hFile=0x274, lpFileSizeHigh=0x31e628 | out: lpFileSizeHigh=0x31e628*=0x0) returned 0xe2 [0038.575] ReadFile (in: hFile=0x274, lpBuffer=0x2747eb0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x31e5d4, lpOverlapped=0x0 | out: lpBuffer=0x2747eb0*, lpNumberOfBytesRead=0x31e5d4*=0xe2, lpOverlapped=0x0) returned 1 [0038.589] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\Solutions\\gradient.png", nBufferLength=0x105, lpBuffer=0x31e018, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\Solutions\\gradient.png", lpFilePart=0x0) returned 0x5f [0038.589] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e50c) returned 1 [0038.589] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\Solutions\\gradient.png" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\grooveforms5\\formsstyles\\solutions\\gradient.png"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x274 [0038.590] GetFileType (hFile=0x274) returned 0x1 [0038.590] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e508) returned 1 [0038.590] GetFileType (hFile=0x274) returned 0x1 [0038.590] WriteFile (in: hFile=0x274, lpBuffer=0x2796104*, nNumberOfBytesToWrite=0xf0, lpNumberOfBytesWritten=0x31e59c, lpOverlapped=0x0 | out: lpBuffer=0x2796104*, lpNumberOfBytesWritten=0x31e59c*=0xf0, lpOverlapped=0x0) returned 1 [0038.591] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\Solutions\\gradient.png", nBufferLength=0x105, lpBuffer=0x31e14c, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\Solutions\\gradient.png", lpFilePart=0x0) returned 0x5f [0038.591] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\Solutions\\gradient.png", nBufferLength=0x105, lpBuffer=0x31e14c, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\Solutions\\gradient.png", lpFilePart=0x0) returned 0x5f [0038.591] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e5ac) returned 1 [0038.591] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\Solutions\\gradient.png" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\grooveforms5\\formsstyles\\solutions\\gradient.png"), fInfoLevelId=0x0, lpFileInformation=0x31e628 | out: lpFileInformation=0x31e628*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xcec0a700, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0xfd6a52b0, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xfa73ad60, ftLastWriteTime.dwHighDateTime=0x1d6eb7e, nFileSizeHigh=0x0, nFileSizeLow=0xf0)) returned 1 [0038.591] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e5a8) returned 1 [0038.591] MoveFileW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\Solutions\\gradient.png" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\grooveforms5\\formsstyles\\solutions\\gradient.png"), lpNewFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\Solutions\\gradient.png" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\grooveforms5\\formsstyles\\solutions\\gradient.png")) returned 1 [0038.592] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e654) returned 1 [0038.592] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\SpringGreen", nBufferLength=0x105, lpBuffer=0x31e15c, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\SpringGreen", lpFilePart=0x0) returned 0x54 [0038.592] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\SpringGreen\\", nBufferLength=0x105, lpBuffer=0x31e130, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\SpringGreen\\", lpFilePart=0x0) returned 0x55 [0038.592] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\SpringGreen\\*", lpFindFileData=0x31e37c | out: lpFindFileData=0x31e37c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd54e650, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xfd54e650, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xfd54e650, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x381b80 [0038.593] FindNextFileW (in: hFindFile=0x381b80, lpFindFileData=0x31e38c | out: lpFindFileData=0x31e38c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd54e650, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xfd54e650, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xfd54e650, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0038.593] FindNextFileW (in: hFindFile=0x381b80, lpFindFileData=0x31e38c | out: lpFindFileData=0x31e38c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xcff1d400, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0xfd54e650, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xcff1d400, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0x1ac, dwReserved0=0x0, dwReserved1=0x0, cFileName="BUTTON.GIF", cAlternateFileName="")) returned 1 [0038.593] FindNextFileW (in: hFindFile=0x381b80, lpFindFileData=0x31e38c | out: lpFindFileData=0x31e38c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xcff1d400, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0xfd54e650, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xcff1d400, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0x155, dwReserved0=0x0, dwReserved1=0x0, cFileName="TAB_OFF.GIF", cAlternateFileName="")) returned 1 [0038.593] FindNextFileW (in: hFindFile=0x381b80, lpFindFileData=0x31e38c | out: lpFindFileData=0x31e38c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xcff1d400, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0xfd54e650, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xcff1d400, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0xde, dwReserved0=0x0, dwReserved1=0x0, cFileName="TAB_ON.GIF", cAlternateFileName="")) returned 1 [0038.593] FindNextFileW (in: hFindFile=0x381b80, lpFindFileData=0x31e38c | out: lpFindFileData=0x31e38c*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0038.593] FindClose (in: hFindFile=0x381b80 | out: hFindFile=0x381b80) returned 1 [0038.593] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e614) returned 1 [0038.593] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e620) returned 1 [0038.593] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e654) returned 1 [0038.593] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\SpringGreen", nBufferLength=0x105, lpBuffer=0x31e15c, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\SpringGreen", lpFilePart=0x0) returned 0x54 [0038.593] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\SpringGreen\\", nBufferLength=0x105, lpBuffer=0x31e130, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\SpringGreen\\", lpFilePart=0x0) returned 0x55 [0038.594] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\SpringGreen\\*", lpFindFileData=0x31e37c | out: lpFindFileData=0x31e37c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd54e650, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xfd54e650, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xfd54e650, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x381b80 [0038.594] FindNextFileW (in: hFindFile=0x381b80, lpFindFileData=0x31e38c | out: lpFindFileData=0x31e38c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd54e650, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xfd54e650, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xfd54e650, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0038.594] FindNextFileW (in: hFindFile=0x381b80, lpFindFileData=0x31e38c | out: lpFindFileData=0x31e38c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xcff1d400, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0xfd54e650, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xcff1d400, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0x1ac, dwReserved0=0x0, dwReserved1=0x0, cFileName="BUTTON.GIF", cAlternateFileName="")) returned 1 [0038.594] FindNextFileW (in: hFindFile=0x381b80, lpFindFileData=0x31e38c | out: lpFindFileData=0x31e38c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xcff1d400, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0xfd54e650, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xcff1d400, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0x155, dwReserved0=0x0, dwReserved1=0x0, cFileName="TAB_OFF.GIF", cAlternateFileName="")) returned 1 [0038.594] FindNextFileW (in: hFindFile=0x381b80, lpFindFileData=0x31e38c | out: lpFindFileData=0x31e38c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xcff1d400, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0xfd54e650, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xcff1d400, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0xde, dwReserved0=0x0, dwReserved1=0x0, cFileName="TAB_ON.GIF", cAlternateFileName="")) returned 1 [0038.594] FindNextFileW (in: hFindFile=0x381b80, lpFindFileData=0x31e38c | out: lpFindFileData=0x31e38c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xcff1d400, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0xfd54e650, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xcff1d400, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0xde, dwReserved0=0x0, dwReserved1=0x0, cFileName="TAB_ON.GIF", cAlternateFileName="")) returned 0 [0038.594] FindClose (in: hFindFile=0x381b80 | out: hFindFile=0x381b80) returned 1 [0038.594] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e614) returned 1 [0038.594] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e620) returned 1 [0038.594] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e654) returned 1 [0038.594] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\STS2", nBufferLength=0x105, lpBuffer=0x31e15c, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\STS2", lpFilePart=0x0) returned 0x4d [0038.594] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\STS2\\", nBufferLength=0x105, lpBuffer=0x31e130, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\STS2\\", lpFilePart=0x0) returned 0x4e [0038.594] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\STS2\\*", lpFindFileData=0x31e37c | out: lpFindFileData=0x31e37c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd54e650, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xfd54e650, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xfd54e650, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x381b80 [0038.595] FindNextFileW (in: hFindFile=0x381b80, lpFindFileData=0x31e38c | out: lpFindFileData=0x31e38c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd54e650, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xfd54e650, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xfd54e650, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0038.595] FindNextFileW (in: hFindFile=0x381b80, lpFindFileData=0x31e38c | out: lpFindFileData=0x31e38c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xcff1d400, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0xfd54e650, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xcff1d400, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0xe9, dwReserved0=0x0, dwReserved1=0x0, cFileName="background.gif", cAlternateFileName="BACKGR~1.GIF")) returned 1 [0038.595] FindNextFileW (in: hFindFile=0x381b80, lpFindFileData=0x31e38c | out: lpFindFileData=0x31e38c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xcff1d400, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0xfd54e650, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xcff1d400, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0xcbd, dwReserved0=0x0, dwReserved1=0x0, cFileName="HEADER.GIF", cAlternateFileName="")) returned 1 [0038.595] FindNextFileW (in: hFindFile=0x381b80, lpFindFileData=0x31e38c | out: lpFindFileData=0x31e38c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xcff1d400, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0xfd54e650, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xcff1d400, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0x1ce, dwReserved0=0x0, dwReserved1=0x0, cFileName="TAB_OFF.GIF", cAlternateFileName="")) returned 1 [0038.595] FindNextFileW (in: hFindFile=0x381b80, lpFindFileData=0x31e38c | out: lpFindFileData=0x31e38c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xcff1d400, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0xfd54e650, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xcff1d400, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0x108, dwReserved0=0x0, dwReserved1=0x0, cFileName="TAB_ON.GIF", cAlternateFileName="")) returned 1 [0038.595] FindNextFileW (in: hFindFile=0x381b80, lpFindFileData=0x31e38c | out: lpFindFileData=0x31e38c*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0038.595] FindClose (in: hFindFile=0x381b80 | out: hFindFile=0x381b80) returned 1 [0038.595] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e614) returned 1 [0038.595] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e620) returned 1 [0038.595] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e654) returned 1 [0038.595] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\STS2", nBufferLength=0x105, lpBuffer=0x31e15c, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\STS2", lpFilePart=0x0) returned 0x4d [0038.595] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\STS2\\", nBufferLength=0x105, lpBuffer=0x31e130, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\STS2\\", lpFilePart=0x0) returned 0x4e [0038.595] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\STS2\\*", lpFindFileData=0x31e37c | out: lpFindFileData=0x31e37c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd54e650, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xfd54e650, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xfd54e650, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x381b80 [0038.596] FindNextFileW (in: hFindFile=0x381b80, lpFindFileData=0x31e38c | out: lpFindFileData=0x31e38c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd54e650, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xfd54e650, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xfd54e650, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0038.596] FindNextFileW (in: hFindFile=0x381b80, lpFindFileData=0x31e38c | out: lpFindFileData=0x31e38c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xcff1d400, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0xfd54e650, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xcff1d400, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0xe9, dwReserved0=0x0, dwReserved1=0x0, cFileName="background.gif", cAlternateFileName="BACKGR~1.GIF")) returned 1 [0038.596] FindNextFileW (in: hFindFile=0x381b80, lpFindFileData=0x31e38c | out: lpFindFileData=0x31e38c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xcff1d400, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0xfd54e650, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xcff1d400, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0xcbd, dwReserved0=0x0, dwReserved1=0x0, cFileName="HEADER.GIF", cAlternateFileName="")) returned 1 [0038.596] FindNextFileW (in: hFindFile=0x381b80, lpFindFileData=0x31e38c | out: lpFindFileData=0x31e38c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xcff1d400, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0xfd54e650, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xcff1d400, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0x1ce, dwReserved0=0x0, dwReserved1=0x0, cFileName="TAB_OFF.GIF", cAlternateFileName="")) returned 1 [0038.596] FindNextFileW (in: hFindFile=0x381b80, lpFindFileData=0x31e38c | out: lpFindFileData=0x31e38c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xcff1d400, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0xfd54e650, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xcff1d400, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0x108, dwReserved0=0x0, dwReserved1=0x0, cFileName="TAB_ON.GIF", cAlternateFileName="")) returned 1 [0038.596] FindNextFileW (in: hFindFile=0x381b80, lpFindFileData=0x31e38c | out: lpFindFileData=0x31e38c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xcff1d400, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0xfd54e650, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xcff1d400, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0x108, dwReserved0=0x0, dwReserved1=0x0, cFileName="TAB_ON.GIF", cAlternateFileName="")) returned 0 [0038.596] FindClose (in: hFindFile=0x381b80 | out: hFindFile=0x381b80) returned 1 [0038.596] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e614) returned 1 [0038.596] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e620) returned 1 [0038.596] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e654) returned 1 [0038.596] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\Swirl", nBufferLength=0x105, lpBuffer=0x31e15c, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\Swirl", lpFilePart=0x0) returned 0x4e [0038.596] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\Swirl\\", nBufferLength=0x105, lpBuffer=0x31e130, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\Swirl\\", lpFilePart=0x0) returned 0x4f [0038.596] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\Swirl\\*", lpFindFileData=0x31e37c | out: lpFindFileData=0x31e37c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd54e650, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xfd5747b0, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xfd5747b0, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x381b80 [0038.597] FindNextFileW (in: hFindFile=0x381b80, lpFindFileData=0x31e38c | out: lpFindFileData=0x31e38c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd54e650, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xfd5747b0, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xfd5747b0, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0038.597] FindNextFileW (in: hFindFile=0x381b80, lpFindFileData=0x31e38c | out: lpFindFileData=0x31e38c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd1230100, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0xfd54e650, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xd1230100, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0x32f, dwReserved0=0x0, dwReserved1=0x0, cFileName="background.gif", cAlternateFileName="BACKGR~1.GIF")) returned 1 [0038.597] FindNextFileW (in: hFindFile=0x381b80, lpFindFileData=0x31e38c | out: lpFindFileData=0x31e38c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd1230100, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0xfd5747b0, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xd1230100, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0x6993, dwReserved0=0x0, dwReserved1=0x0, cFileName="HEADER.GIF", cAlternateFileName="")) returned 1 [0038.597] FindNextFileW (in: hFindFile=0x381b80, lpFindFileData=0x31e38c | out: lpFindFileData=0x31e38c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd1230100, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0xfd5747b0, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xd1230100, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0x155, dwReserved0=0x0, dwReserved1=0x0, cFileName="TAB_OFF.GIF", cAlternateFileName="")) returned 1 [0038.597] FindNextFileW (in: hFindFile=0x381b80, lpFindFileData=0x31e38c | out: lpFindFileData=0x31e38c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd1230100, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0xfd5747b0, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xd1230100, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0xde, dwReserved0=0x0, dwReserved1=0x0, cFileName="TAB_ON.GIF", cAlternateFileName="")) returned 1 [0038.597] FindNextFileW (in: hFindFile=0x381b80, lpFindFileData=0x31e38c | out: lpFindFileData=0x31e38c*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0038.597] FindClose (in: hFindFile=0x381b80 | out: hFindFile=0x381b80) returned 1 [0038.597] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e614) returned 1 [0038.597] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e620) returned 1 [0038.597] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e654) returned 1 [0038.597] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\Swirl", nBufferLength=0x105, lpBuffer=0x31e15c, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\Swirl", lpFilePart=0x0) returned 0x4e [0038.597] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\Swirl\\", nBufferLength=0x105, lpBuffer=0x31e130, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\Swirl\\", lpFilePart=0x0) returned 0x4f [0038.597] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\Swirl\\*", lpFindFileData=0x31e37c | out: lpFindFileData=0x31e37c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd54e650, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xfd5747b0, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xfd5747b0, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x381b80 [0038.598] FindNextFileW (in: hFindFile=0x381b80, lpFindFileData=0x31e38c | out: lpFindFileData=0x31e38c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd54e650, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xfd5747b0, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xfd5747b0, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0038.598] FindNextFileW (in: hFindFile=0x381b80, lpFindFileData=0x31e38c | out: lpFindFileData=0x31e38c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd1230100, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0xfd54e650, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xd1230100, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0x32f, dwReserved0=0x0, dwReserved1=0x0, cFileName="background.gif", cAlternateFileName="BACKGR~1.GIF")) returned 1 [0038.598] FindNextFileW (in: hFindFile=0x381b80, lpFindFileData=0x31e38c | out: lpFindFileData=0x31e38c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd1230100, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0xfd5747b0, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xd1230100, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0x6993, dwReserved0=0x0, dwReserved1=0x0, cFileName="HEADER.GIF", cAlternateFileName="")) returned 1 [0038.598] FindNextFileW (in: hFindFile=0x381b80, lpFindFileData=0x31e38c | out: lpFindFileData=0x31e38c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd1230100, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0xfd5747b0, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xd1230100, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0x155, dwReserved0=0x0, dwReserved1=0x0, cFileName="TAB_OFF.GIF", cAlternateFileName="")) returned 1 [0038.598] FindNextFileW (in: hFindFile=0x381b80, lpFindFileData=0x31e38c | out: lpFindFileData=0x31e38c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd1230100, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0xfd5747b0, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xd1230100, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0xde, dwReserved0=0x0, dwReserved1=0x0, cFileName="TAB_ON.GIF", cAlternateFileName="")) returned 1 [0038.598] FindNextFileW (in: hFindFile=0x381b80, lpFindFileData=0x31e38c | out: lpFindFileData=0x31e38c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd1230100, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0xfd5747b0, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xd1230100, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0xde, dwReserved0=0x0, dwReserved1=0x0, cFileName="TAB_ON.GIF", cAlternateFileName="")) returned 0 [0038.598] FindClose (in: hFindFile=0x381b80 | out: hFindFile=0x381b80) returned 1 [0038.598] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e614) returned 1 [0038.598] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e620) returned 1 [0038.598] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e744) returned 1 [0038.598] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM", nBufferLength=0x105, lpBuffer=0x31e24c, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM", lpFilePart=0x0) returned 0x38 [0038.598] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\", nBufferLength=0x105, lpBuffer=0x31e220, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\", lpFilePart=0x0) returned 0x39 [0038.598] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\*", lpFindFileData=0x31e46c | out: lpFindFileData=0x31e46c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1ba28770, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x1bc89d70, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x1bc89d70, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x381b80 [0038.600] FindNextFileW (in: hFindFile=0x381b80, lpFindFileData=0x31e47c | out: lpFindFileData=0x31e47c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1ba28770, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x1bc89d70, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x1bc89d70, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0038.601] FindNextFileW (in: hFindFile=0x381b80, lpFindFileData=0x31e47c | out: lpFindFileData=0x31e47c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3c22e700, ftCreationTime.dwHighDateTime=0x1ca6669, ftLastAccessTime.dwLowDateTime=0x1ba28770, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x3c22e700, ftLastWriteTime.dwHighDateTime=0x1ca6669, nFileSizeHigh=0x0, nFileSizeLow=0xcb7, dwReserved0=0x0, dwReserved1=0x0, cFileName="FONTSCHM.INI", cAlternateFileName="")) returned 1 [0038.601] FindNextFileW (in: hFindFile=0x381b80, lpFindFileData=0x31e47c | out: lpFindFileData=0x31e47c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x47994900, ftCreationTime.dwHighDateTime=0x1ca1577, ftLastAccessTime.dwLowDateTime=0x1bbf17f0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x47994900, ftLastWriteTime.dwHighDateTime=0x1ca1577, nFileSizeHigh=0x0, nFileSizeLow=0x1eea6, dwReserved0=0x0, dwReserved1=0x0, cFileName="SCHEME01.CSS", cAlternateFileName="")) returned 1 [0038.601] FindNextFileW (in: hFindFile=0x381b80, lpFindFileData=0x31e47c | out: lpFindFileData=0x31e47c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2b96a700, ftCreationTime.dwHighDateTime=0x1ca1579, ftLastAccessTime.dwLowDateTime=0x1bbf17f0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x2b96a700, ftLastWriteTime.dwHighDateTime=0x1ca1579, nFileSizeHigh=0x0, nFileSizeLow=0x1fbbe, dwReserved0=0x0, dwReserved1=0x0, cFileName="SCHEME02.CSS", cAlternateFileName="")) returned 1 [0038.601] FindNextFileW (in: hFindFile=0x381b80, lpFindFileData=0x31e47c | out: lpFindFileData=0x31e47c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2a657a00, ftCreationTime.dwHighDateTime=0x1ca1579, ftLastAccessTime.dwLowDateTime=0x1bbf17f0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x2a657a00, ftLastWriteTime.dwHighDateTime=0x1ca1579, nFileSizeHigh=0x0, nFileSizeLow=0x1f024, dwReserved0=0x0, dwReserved1=0x0, cFileName="SCHEME03.CSS", cAlternateFileName="")) returned 1 [0038.601] FindNextFileW (in: hFindFile=0x381b80, lpFindFileData=0x31e47c | out: lpFindFileData=0x31e47c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x29344d00, ftCreationTime.dwHighDateTime=0x1ca1579, ftLastAccessTime.dwLowDateTime=0x1bbf17f0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x29344d00, ftLastWriteTime.dwHighDateTime=0x1ca1579, nFileSizeHigh=0x0, nFileSizeLow=0x1f4e2, dwReserved0=0x0, dwReserved1=0x0, cFileName="SCHEME04.CSS", cAlternateFileName="")) returned 1 [0038.601] FindNextFileW (in: hFindFile=0x381b80, lpFindFileData=0x31e47c | out: lpFindFileData=0x31e47c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x28032000, ftCreationTime.dwHighDateTime=0x1ca1579, ftLastAccessTime.dwLowDateTime=0x1bbf17f0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x28032000, ftLastWriteTime.dwHighDateTime=0x1ca1579, nFileSizeHigh=0x0, nFileSizeLow=0x1edba, dwReserved0=0x0, dwReserved1=0x0, cFileName="SCHEME05.CSS", cAlternateFileName="")) returned 1 [0038.601] FindNextFileW (in: hFindFile=0x381b80, lpFindFileData=0x31e47c | out: lpFindFileData=0x31e47c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x28032000, ftCreationTime.dwHighDateTime=0x1ca1579, ftLastAccessTime.dwLowDateTime=0x1bbf17f0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x28032000, ftLastWriteTime.dwHighDateTime=0x1ca1579, nFileSizeHigh=0x0, nFileSizeLow=0x1f2da, dwReserved0=0x0, dwReserved1=0x0, cFileName="SCHEME06.CSS", cAlternateFileName="")) returned 1 [0038.601] FindNextFileW (in: hFindFile=0x381b80, lpFindFileData=0x31e47c | out: lpFindFileData=0x31e47c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x26d1f300, ftCreationTime.dwHighDateTime=0x1ca1579, ftLastAccessTime.dwLowDateTime=0x1bbf17f0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x26d1f300, ftLastWriteTime.dwHighDateTime=0x1ca1579, nFileSizeHigh=0x0, nFileSizeLow=0x1ff56, dwReserved0=0x0, dwReserved1=0x0, cFileName="SCHEME07.CSS", cAlternateFileName="")) returned 1 [0038.601] FindNextFileW (in: hFindFile=0x381b80, lpFindFileData=0x31e47c | out: lpFindFileData=0x31e47c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x25a0c600, ftCreationTime.dwHighDateTime=0x1ca1579, ftLastAccessTime.dwLowDateTime=0x1bbf17f0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x25a0c600, ftLastWriteTime.dwHighDateTime=0x1ca1579, nFileSizeHigh=0x0, nFileSizeLow=0x1f998, dwReserved0=0x0, dwReserved1=0x0, cFileName="SCHEME08.CSS", cAlternateFileName="")) returned 1 [0038.601] FindNextFileW (in: hFindFile=0x381b80, lpFindFileData=0x31e47c | out: lpFindFileData=0x31e47c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x25a0c600, ftCreationTime.dwHighDateTime=0x1ca1579, ftLastAccessTime.dwLowDateTime=0x1bbf17f0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x25a0c600, ftLastWriteTime.dwHighDateTime=0x1ca1579, nFileSizeHigh=0x0, nFileSizeLow=0x20444, dwReserved0=0x0, dwReserved1=0x0, cFileName="SCHEME09.CSS", cAlternateFileName="")) returned 1 [0038.601] FindNextFileW (in: hFindFile=0x381b80, lpFindFileData=0x31e47c | out: lpFindFileData=0x31e47c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x233e6c00, ftCreationTime.dwHighDateTime=0x1ca1579, ftLastAccessTime.dwLowDateTime=0x1bbf17f0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x233e6c00, ftLastWriteTime.dwHighDateTime=0x1ca1579, nFileSizeHigh=0x0, nFileSizeLow=0x2072a, dwReserved0=0x0, dwReserved1=0x0, cFileName="SCHEME10.CSS", cAlternateFileName="")) returned 1 [0038.601] FindNextFileW (in: hFindFile=0x381b80, lpFindFileData=0x31e47c | out: lpFindFileData=0x31e47c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x220d3f00, ftCreationTime.dwHighDateTime=0x1ca1579, ftLastAccessTime.dwLowDateTime=0x1bbf17f0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x220d3f00, ftLastWriteTime.dwHighDateTime=0x1ca1579, nFileSizeHigh=0x0, nFileSizeLow=0x20030, dwReserved0=0x0, dwReserved1=0x0, cFileName="SCHEME11.CSS", cAlternateFileName="")) returned 1 [0038.601] FindNextFileW (in: hFindFile=0x381b80, lpFindFileData=0x31e47c | out: lpFindFileData=0x31e47c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x20dc1200, ftCreationTime.dwHighDateTime=0x1ca1579, ftLastAccessTime.dwLowDateTime=0x1bbf17f0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x20dc1200, ftLastWriteTime.dwHighDateTime=0x1ca1579, nFileSizeHigh=0x0, nFileSizeLow=0x1e09a, dwReserved0=0x0, dwReserved1=0x0, cFileName="SCHEME12.CSS", cAlternateFileName="")) returned 1 [0038.601] FindNextFileW (in: hFindFile=0x381b80, lpFindFileData=0x31e47c | out: lpFindFileData=0x31e47c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1faae500, ftCreationTime.dwHighDateTime=0x1ca1579, ftLastAccessTime.dwLowDateTime=0x1bc17950, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x1faae500, ftLastWriteTime.dwHighDateTime=0x1ca1579, nFileSizeHigh=0x0, nFileSizeLow=0x1ec9a, dwReserved0=0x0, dwReserved1=0x0, cFileName="SCHEME13.CSS", cAlternateFileName="")) returned 1 [0038.601] FindNextFileW (in: hFindFile=0x381b80, lpFindFileData=0x31e47c | out: lpFindFileData=0x31e47c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1faae500, ftCreationTime.dwHighDateTime=0x1ca1579, ftLastAccessTime.dwLowDateTime=0x1bc17950, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x1faae500, ftLastWriteTime.dwHighDateTime=0x1ca1579, nFileSizeHigh=0x0, nFileSizeLow=0x1f5cc, dwReserved0=0x0, dwReserved1=0x0, cFileName="SCHEME14.CSS", cAlternateFileName="")) returned 1 [0038.601] FindNextFileW (in: hFindFile=0x381b80, lpFindFileData=0x31e47c | out: lpFindFileData=0x31e47c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1e79b800, ftCreationTime.dwHighDateTime=0x1ca1579, ftLastAccessTime.dwLowDateTime=0x1bc17950, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x1e79b800, ftLastWriteTime.dwHighDateTime=0x1ca1579, nFileSizeHigh=0x0, nFileSizeLow=0x1e094, dwReserved0=0x0, dwReserved1=0x0, cFileName="SCHEME15.CSS", cAlternateFileName="")) returned 1 [0038.601] FindNextFileW (in: hFindFile=0x381b80, lpFindFileData=0x31e47c | out: lpFindFileData=0x31e47c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1d488b00, ftCreationTime.dwHighDateTime=0x1ca1579, ftLastAccessTime.dwLowDateTime=0x1bc17950, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x1d488b00, ftLastWriteTime.dwHighDateTime=0x1ca1579, nFileSizeHigh=0x0, nFileSizeLow=0x1f822, dwReserved0=0x0, dwReserved1=0x0, cFileName="SCHEME16.CSS", cAlternateFileName="")) returned 1 [0038.601] FindNextFileW (in: hFindFile=0x381b80, lpFindFileData=0x31e47c | out: lpFindFileData=0x31e47c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1c175e00, ftCreationTime.dwHighDateTime=0x1ca1579, ftLastAccessTime.dwLowDateTime=0x1bc17950, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x1c175e00, ftLastWriteTime.dwHighDateTime=0x1ca1579, nFileSizeHigh=0x0, nFileSizeLow=0x1eada, dwReserved0=0x0, dwReserved1=0x0, cFileName="SCHEME17.CSS", cAlternateFileName="")) returned 1 [0038.601] FindNextFileW (in: hFindFile=0x381b80, lpFindFileData=0x31e47c | out: lpFindFileData=0x31e47c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1ae63100, ftCreationTime.dwHighDateTime=0x1ca1579, ftLastAccessTime.dwLowDateTime=0x1bc17950, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x1ae63100, ftLastWriteTime.dwHighDateTime=0x1ca1579, nFileSizeHigh=0x0, nFileSizeLow=0x20438, dwReserved0=0x0, dwReserved1=0x0, cFileName="SCHEME18.CSS", cAlternateFileName="")) returned 1 [0038.601] FindNextFileW (in: hFindFile=0x381b80, lpFindFileData=0x31e47c | out: lpFindFileData=0x31e47c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x19b50400, ftCreationTime.dwHighDateTime=0x1ca1579, ftLastAccessTime.dwLowDateTime=0x1bc17950, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x19b50400, ftLastWriteTime.dwHighDateTime=0x1ca1579, nFileSizeHigh=0x0, nFileSizeLow=0x1fff2, dwReserved0=0x0, dwReserved1=0x0, cFileName="SCHEME19.CSS", cAlternateFileName="")) returned 1 [0038.601] FindNextFileW (in: hFindFile=0x381b80, lpFindFileData=0x31e47c | out: lpFindFileData=0x31e47c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1883d700, ftCreationTime.dwHighDateTime=0x1ca1579, ftLastAccessTime.dwLowDateTime=0x1bc17950, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x1883d700, ftLastWriteTime.dwHighDateTime=0x1ca1579, nFileSizeHigh=0x0, nFileSizeLow=0x1f6f0, dwReserved0=0x0, dwReserved1=0x0, cFileName="SCHEME20.CSS", cAlternateFileName="")) returned 1 [0038.601] FindNextFileW (in: hFindFile=0x381b80, lpFindFileData=0x31e47c | out: lpFindFileData=0x31e47c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1752aa00, ftCreationTime.dwHighDateTime=0x1ca1579, ftLastAccessTime.dwLowDateTime=0x1bc17950, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x1752aa00, ftLastWriteTime.dwHighDateTime=0x1ca1579, nFileSizeHigh=0x0, nFileSizeLow=0x1eae6, dwReserved0=0x0, dwReserved1=0x0, cFileName="SCHEME21.CSS", cAlternateFileName="")) returned 1 [0038.601] FindNextFileW (in: hFindFile=0x381b80, lpFindFileData=0x31e47c | out: lpFindFileData=0x31e47c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x14f05000, ftCreationTime.dwHighDateTime=0x1ca1579, ftLastAccessTime.dwLowDateTime=0x1bc17950, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x14f05000, ftLastWriteTime.dwHighDateTime=0x1ca1579, nFileSizeHigh=0x0, nFileSizeLow=0x1fcca, dwReserved0=0x0, dwReserved1=0x0, cFileName="SCHEME22.CSS", cAlternateFileName="")) returned 1 [0038.602] FindNextFileW (in: hFindFile=0x381b80, lpFindFileData=0x31e47c | out: lpFindFileData=0x31e47c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x13bf2300, ftCreationTime.dwHighDateTime=0x1ca1579, ftLastAccessTime.dwLowDateTime=0x1bc17950, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x13bf2300, ftLastWriteTime.dwHighDateTime=0x1ca1579, nFileSizeHigh=0x0, nFileSizeLow=0x1f5fa, dwReserved0=0x0, dwReserved1=0x0, cFileName="SCHEME23.CSS", cAlternateFileName="")) returned 1 [0038.602] FindNextFileW (in: hFindFile=0x381b80, lpFindFileData=0x31e47c | out: lpFindFileData=0x31e47c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x128df600, ftCreationTime.dwHighDateTime=0x1ca1579, ftLastAccessTime.dwLowDateTime=0x1bc17950, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x128df600, ftLastWriteTime.dwHighDateTime=0x1ca1579, nFileSizeHigh=0x0, nFileSizeLow=0x1ee38, dwReserved0=0x0, dwReserved1=0x0, cFileName="SCHEME24.CSS", cAlternateFileName="")) returned 1 [0038.602] FindNextFileW (in: hFindFile=0x381b80, lpFindFileData=0x31e47c | out: lpFindFileData=0x31e47c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x115cc900, ftCreationTime.dwHighDateTime=0x1ca1579, ftLastAccessTime.dwLowDateTime=0x1bc17950, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x115cc900, ftLastWriteTime.dwHighDateTime=0x1ca1579, nFileSizeHigh=0x0, nFileSizeLow=0x1fcee, dwReserved0=0x0, dwReserved1=0x0, cFileName="SCHEME25.CSS", cAlternateFileName="")) returned 1 [0038.602] FindNextFileW (in: hFindFile=0x381b80, lpFindFileData=0x31e47c | out: lpFindFileData=0x31e47c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x115cc900, ftCreationTime.dwHighDateTime=0x1ca1579, ftLastAccessTime.dwLowDateTime=0x1bc17950, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x115cc900, ftLastWriteTime.dwHighDateTime=0x1ca1579, nFileSizeHigh=0x0, nFileSizeLow=0x1d1b6, dwReserved0=0x0, dwReserved1=0x0, cFileName="SCHEME26.CSS", cAlternateFileName="")) returned 1 [0038.602] FindNextFileW (in: hFindFile=0x381b80, lpFindFileData=0x31e47c | out: lpFindFileData=0x31e47c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xefa6f00, ftCreationTime.dwHighDateTime=0x1ca1579, ftLastAccessTime.dwLowDateTime=0x1bc3dab0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xefa6f00, ftLastWriteTime.dwHighDateTime=0x1ca1579, nFileSizeHigh=0x0, nFileSizeLow=0x1e088, dwReserved0=0x0, dwReserved1=0x0, cFileName="SCHEME27.CSS", cAlternateFileName="")) returned 1 [0038.602] FindNextFileW (in: hFindFile=0x381b80, lpFindFileData=0x31e47c | out: lpFindFileData=0x31e47c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xefa6f00, ftCreationTime.dwHighDateTime=0x1ca1579, ftLastAccessTime.dwLowDateTime=0x1bc3dab0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xefa6f00, ftLastWriteTime.dwHighDateTime=0x1ca1579, nFileSizeHigh=0x0, nFileSizeLow=0x1d754, dwReserved0=0x0, dwReserved1=0x0, cFileName="SCHEME28.CSS", cAlternateFileName="")) returned 1 [0038.602] FindNextFileW (in: hFindFile=0x381b80, lpFindFileData=0x31e47c | out: lpFindFileData=0x31e47c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb66e800, ftCreationTime.dwHighDateTime=0x1ca1579, ftLastAccessTime.dwLowDateTime=0x1bc3dab0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xb66e800, ftLastWriteTime.dwHighDateTime=0x1ca1579, nFileSizeHigh=0x0, nFileSizeLow=0x1eb4a, dwReserved0=0x0, dwReserved1=0x0, cFileName="SCHEME29.CSS", cAlternateFileName="")) returned 1 [0038.602] FindNextFileW (in: hFindFile=0x381b80, lpFindFileData=0x31e47c | out: lpFindFileData=0x31e47c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa35bb00, ftCreationTime.dwHighDateTime=0x1ca1579, ftLastAccessTime.dwLowDateTime=0x1bc3dab0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xa35bb00, ftLastWriteTime.dwHighDateTime=0x1ca1579, nFileSizeHigh=0x0, nFileSizeLow=0x1d522, dwReserved0=0x0, dwReserved1=0x0, cFileName="SCHEME30.CSS", cAlternateFileName="")) returned 1 [0038.602] FindNextFileW (in: hFindFile=0x381b80, lpFindFileData=0x31e47c | out: lpFindFileData=0x31e47c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xff7b2600, ftCreationTime.dwHighDateTime=0x1ca1578, ftLastAccessTime.dwLowDateTime=0x1bc3dab0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xff7b2600, ftLastWriteTime.dwHighDateTime=0x1ca1578, nFileSizeHigh=0x0, nFileSizeLow=0x1d652, dwReserved0=0x0, dwReserved1=0x0, cFileName="SCHEME31.CSS", cAlternateFileName="")) returned 1 [0038.602] FindNextFileW (in: hFindFile=0x381b80, lpFindFileData=0x31e47c | out: lpFindFileData=0x31e47c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x43fda00, ftCreationTime.dwHighDateTime=0x1ca1579, ftLastAccessTime.dwLowDateTime=0x1bc3dab0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x43fda00, ftLastWriteTime.dwHighDateTime=0x1ca1579, nFileSizeHigh=0x0, nFileSizeLow=0x1eb20, dwReserved0=0x0, dwReserved1=0x0, cFileName="SCHEME32.CSS", cAlternateFileName="")) returned 1 [0038.602] FindNextFileW (in: hFindFile=0x381b80, lpFindFileData=0x31e47c | out: lpFindFileData=0x31e47c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8755100, ftCreationTime.dwHighDateTime=0x1ca1578, ftLastAccessTime.dwLowDateTime=0x1bc3dab0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xa8755100, ftLastWriteTime.dwHighDateTime=0x1ca1578, nFileSizeHigh=0x0, nFileSizeLow=0x1dcb0, dwReserved0=0x0, dwReserved1=0x0, cFileName="SCHEME33.CSS", cAlternateFileName="")) returned 1 [0038.610] FindNextFileW (in: hFindFile=0x381b80, lpFindFileData=0x31e47c | out: lpFindFileData=0x31e47c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9eebe900, ftCreationTime.dwHighDateTime=0x1ca1578, ftLastAccessTime.dwLowDateTime=0x1bc3dab0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x9eebe900, ftLastWriteTime.dwHighDateTime=0x1ca1578, nFileSizeHigh=0x0, nFileSizeLow=0x1d124, dwReserved0=0x0, dwReserved1=0x0, cFileName="SCHEME34.CSS", cAlternateFileName="")) returned 1 [0038.610] FindNextFileW (in: hFindFile=0x381b80, lpFindFileData=0x31e47c | out: lpFindFileData=0x31e47c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7ce4c100, ftCreationTime.dwHighDateTime=0x1c69a52, ftLastAccessTime.dwLowDateTime=0x1bc3dab0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x7ce4c100, ftLastWriteTime.dwHighDateTime=0x1c69a52, nFileSizeHigh=0x0, nFileSizeLow=0x202f0, dwReserved0=0x0, dwReserved1=0x0, cFileName="SCHEME35.CSS", cAlternateFileName="")) returned 1 [0038.611] FindNextFileW (in: hFindFile=0x381b80, lpFindFileData=0x31e47c | out: lpFindFileData=0x31e47c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x94315400, ftCreationTime.dwHighDateTime=0x1ca1578, ftLastAccessTime.dwLowDateTime=0x1bc3dab0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x94315400, ftLastWriteTime.dwHighDateTime=0x1ca1578, nFileSizeHigh=0x0, nFileSizeLow=0x1e12c, dwReserved0=0x0, dwReserved1=0x0, cFileName="SCHEME36.CSS", cAlternateFileName="")) returned 1 [0038.611] FindNextFileW (in: hFindFile=0x381b80, lpFindFileData=0x31e47c | out: lpFindFileData=0x31e47c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4ad35f00, ftCreationTime.dwHighDateTime=0x1c69a52, ftLastAccessTime.dwLowDateTime=0x1bc3dab0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x4ad35f00, ftLastWriteTime.dwHighDateTime=0x1c69a52, nFileSizeHigh=0x0, nFileSizeLow=0x205bc, dwReserved0=0x0, dwReserved1=0x0, cFileName="SCHEME37.CSS", cAlternateFileName="")) returned 1 [0038.611] FindNextFileW (in: hFindFile=0x381b80, lpFindFileData=0x31e47c | out: lpFindFileData=0x31e47c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8380de00, ftCreationTime.dwHighDateTime=0x1ca1578, ftLastAccessTime.dwLowDateTime=0x1bc3dab0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x8380de00, ftLastWriteTime.dwHighDateTime=0x1ca1578, nFileSizeHigh=0x0, nFileSizeLow=0x1f07c, dwReserved0=0x0, dwReserved1=0x0, cFileName="SCHEME38.CSS", cAlternateFileName="")) returned 1 [0038.611] FindNextFileW (in: hFindFile=0x381b80, lpFindFileData=0x31e47c | out: lpFindFileData=0x31e47c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7532c200, ftCreationTime.dwHighDateTime=0x1ca1578, ftLastAccessTime.dwLowDateTime=0x1bc3dab0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x7532c200, ftLastWriteTime.dwHighDateTime=0x1ca1578, nFileSizeHigh=0x0, nFileSizeLow=0x1e44c, dwReserved0=0x0, dwReserved1=0x0, cFileName="SCHEME39.CSS", cAlternateFileName="")) returned 1 [0038.611] FindNextFileW (in: hFindFile=0x381b80, lpFindFileData=0x31e47c | out: lpFindFileData=0x31e47c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6cda8700, ftCreationTime.dwHighDateTime=0x1ca1578, ftLastAccessTime.dwLowDateTime=0x1bc3dab0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x6cda8700, ftLastWriteTime.dwHighDateTime=0x1ca1578, nFileSizeHigh=0x0, nFileSizeLow=0x1eb4a, dwReserved0=0x0, dwReserved1=0x0, cFileName="SCHEME40.CSS", cAlternateFileName="")) returned 1 [0038.611] FindNextFileW (in: hFindFile=0x381b80, lpFindFileData=0x31e47c | out: lpFindFileData=0x31e47c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x621ff200, ftCreationTime.dwHighDateTime=0x1ca1578, ftLastAccessTime.dwLowDateTime=0x1bc63c10, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x621ff200, ftLastWriteTime.dwHighDateTime=0x1ca1578, nFileSizeHigh=0x0, nFileSizeLow=0x1e958, dwReserved0=0x0, dwReserved1=0x0, cFileName="SCHEME41.CSS", cAlternateFileName="")) returned 1 [0038.611] FindNextFileW (in: hFindFile=0x381b80, lpFindFileData=0x31e47c | out: lpFindFileData=0x31e47c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x56343000, ftCreationTime.dwHighDateTime=0x1ca1578, ftLastAccessTime.dwLowDateTime=0x1bc63c10, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x56343000, ftLastWriteTime.dwHighDateTime=0x1ca1578, nFileSizeHigh=0x0, nFileSizeLow=0x1d920, dwReserved0=0x0, dwReserved1=0x0, cFileName="SCHEME42.CSS", cAlternateFileName="")) returned 1 [0038.611] FindNextFileW (in: hFindFile=0x381b80, lpFindFileData=0x31e47c | out: lpFindFileData=0x31e47c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x47e61400, ftCreationTime.dwHighDateTime=0x1ca1578, ftLastAccessTime.dwLowDateTime=0x1bc63c10, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x47e61400, ftLastWriteTime.dwHighDateTime=0x1ca1578, nFileSizeHigh=0x0, nFileSizeLow=0x1e714, dwReserved0=0x0, dwReserved1=0x0, cFileName="SCHEME43.CSS", cAlternateFileName="")) returned 1 [0038.611] FindNextFileW (in: hFindFile=0x381b80, lpFindFileData=0x31e47c | out: lpFindFileData=0x31e47c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x37359e00, ftCreationTime.dwHighDateTime=0x1ca1578, ftLastAccessTime.dwLowDateTime=0x1bc63c10, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x37359e00, ftLastWriteTime.dwHighDateTime=0x1ca1578, nFileSizeHigh=0x0, nFileSizeLow=0x1ecfc, dwReserved0=0x0, dwReserved1=0x0, cFileName="SCHEME44.CSS", cAlternateFileName="")) returned 1 [0038.611] FindNextFileW (in: hFindFile=0x381b80, lpFindFileData=0x31e47c | out: lpFindFileData=0x31e47c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2c7b0900, ftCreationTime.dwHighDateTime=0x1ca1578, ftLastAccessTime.dwLowDateTime=0x1bc63c10, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x2c7b0900, ftLastWriteTime.dwHighDateTime=0x1ca1578, nFileSizeHigh=0x0, nFileSizeLow=0x1e6a6, dwReserved0=0x0, dwReserved1=0x0, cFileName="SCHEME45.CSS", cAlternateFileName="")) returned 1 [0038.611] FindNextFileW (in: hFindFile=0x381b80, lpFindFileData=0x31e47c | out: lpFindFileData=0x31e47c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1cfbc000, ftCreationTime.dwHighDateTime=0x1ca1578, ftLastAccessTime.dwLowDateTime=0x1bc63c10, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x1cfbc000, ftLastWriteTime.dwHighDateTime=0x1ca1578, nFileSizeHigh=0x0, nFileSizeLow=0x1fdb6, dwReserved0=0x0, dwReserved1=0x0, cFileName="SCHEME46.CSS", cAlternateFileName="")) returned 1 [0038.611] FindNextFileW (in: hFindFile=0x381b80, lpFindFileData=0x31e47c | out: lpFindFileData=0x31e47c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x14a38500, ftCreationTime.dwHighDateTime=0x1ca1578, ftLastAccessTime.dwLowDateTime=0x1bc63c10, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x14a38500, ftLastWriteTime.dwHighDateTime=0x1ca1578, nFileSizeHigh=0x0, nFileSizeLow=0x1f190, dwReserved0=0x0, dwReserved1=0x0, cFileName="SCHEME47.CSS", cAlternateFileName="")) returned 1 [0038.611] FindNextFileW (in: hFindFile=0x381b80, lpFindFileData=0x31e47c | out: lpFindFileData=0x31e47c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7869600, ftCreationTime.dwHighDateTime=0x1ca1578, ftLastAccessTime.dwLowDateTime=0x1bc63c10, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x7869600, ftLastWriteTime.dwHighDateTime=0x1ca1578, nFileSizeHigh=0x0, nFileSizeLow=0x1f984, dwReserved0=0x0, dwReserved1=0x0, cFileName="SCHEME48.CSS", cAlternateFileName="")) returned 1 [0038.611] FindNextFileW (in: hFindFile=0x381b80, lpFindFileData=0x31e47c | out: lpFindFileData=0x31e47c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xfa69a700, ftCreationTime.dwHighDateTime=0x1ca1577, ftLastAccessTime.dwLowDateTime=0x1bc63c10, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xfa69a700, ftLastWriteTime.dwHighDateTime=0x1ca1577, nFileSizeHigh=0x0, nFileSizeLow=0x1da6c, dwReserved0=0x0, dwReserved1=0x0, cFileName="SCHEME49.CSS", cAlternateFileName="")) returned 1 [0038.611] FindNextFileW (in: hFindFile=0x381b80, lpFindFileData=0x31e47c | out: lpFindFileData=0x31e47c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf0e03f00, ftCreationTime.dwHighDateTime=0x1ca1577, ftLastAccessTime.dwLowDateTime=0x1bc63c10, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xf0e03f00, ftLastWriteTime.dwHighDateTime=0x1ca1577, nFileSizeHigh=0x0, nFileSizeLow=0x1f018, dwReserved0=0x0, dwReserved1=0x0, cFileName="SCHEME50.CSS", cAlternateFileName="")) returned 1 [0038.611] FindNextFileW (in: hFindFile=0x381b80, lpFindFileData=0x31e47c | out: lpFindFileData=0x31e47c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1922be00, ftCreationTime.dwHighDateTime=0x1c69a7b, ftLastAccessTime.dwLowDateTime=0x1bc63c10, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x1922be00, ftLastWriteTime.dwHighDateTime=0x1c69a7b, nFileSizeHigh=0x0, nFileSizeLow=0x1df68, dwReserved0=0x0, dwReserved1=0x0, cFileName="SCHEME51.CSS", cAlternateFileName="")) returned 1 [0038.611] FindNextFileW (in: hFindFile=0x381b80, lpFindFileData=0x31e47c | out: lpFindFileData=0x31e47c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf1ce8a00, ftCreationTime.dwHighDateTime=0x1c69651, ftLastAccessTime.dwLowDateTime=0x1bc63c10, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xf1ce8a00, ftLastWriteTime.dwHighDateTime=0x1c69651, nFileSizeHigh=0x0, nFileSizeLow=0x1e254, dwReserved0=0x0, dwReserved1=0x0, cFileName="SCHEME52.CSS", cAlternateFileName="")) returned 1 [0038.611] FindNextFileW (in: hFindFile=0x381b80, lpFindFileData=0x31e47c | out: lpFindFileData=0x31e47c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x74d95100, ftCreationTime.dwHighDateTime=0x1c69a53, ftLastAccessTime.dwLowDateTime=0x1bc63c10, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x74d95100, ftLastWriteTime.dwHighDateTime=0x1c69a53, nFileSizeHigh=0x0, nFileSizeLow=0x1e6a4, dwReserved0=0x0, dwReserved1=0x0, cFileName="SCHEME53.CSS", cAlternateFileName="")) returned 1 [0038.611] FindNextFileW (in: hFindFile=0x381b80, lpFindFileData=0x31e47c | out: lpFindFileData=0x31e47c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x67c1eb00, ftCreationTime.dwHighDateTime=0x1c69597, ftLastAccessTime.dwLowDateTime=0x1bc89d70, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x67c1eb00, ftLastWriteTime.dwHighDateTime=0x1c69597, nFileSizeHigh=0x0, nFileSizeLow=0x1f064, dwReserved0=0x0, dwReserved1=0x0, cFileName="SCHEME54.CSS", cAlternateFileName="")) returned 1 [0038.611] FindNextFileW (in: hFindFile=0x381b80, lpFindFileData=0x31e47c | out: lpFindFileData=0x31e47c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2f2a2e00, ftCreationTime.dwHighDateTime=0x1ca1579, ftLastAccessTime.dwLowDateTime=0x1bc89d70, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x2f2a2e00, ftLastWriteTime.dwHighDateTime=0x1ca1579, nFileSizeHigh=0x0, nFileSizeLow=0x1e114, dwReserved0=0x0, dwReserved1=0x0, cFileName="SCHEME55.CSS", cAlternateFileName="")) returned 1 [0038.611] FindNextFileW (in: hFindFile=0x381b80, lpFindFileData=0x31e47c | out: lpFindFileData=0x31e47c*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0038.611] FindClose (in: hFindFile=0x381b80 | out: hFindFile=0x381b80) returned 1 [0038.612] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e704) returned 1 [0038.612] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e710) returned 1 [0038.612] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e744) returned 1 [0038.612] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM", nBufferLength=0x105, lpBuffer=0x31e24c, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM", lpFilePart=0x0) returned 0x38 [0038.612] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\", nBufferLength=0x105, lpBuffer=0x31e220, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\", lpFilePart=0x0) returned 0x39 [0038.612] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\*", lpFindFileData=0x31e46c | out: lpFindFileData=0x31e46c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1ba28770, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x1bc89d70, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x1bc89d70, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x381b80 [0038.613] FindNextFileW (in: hFindFile=0x381b80, lpFindFileData=0x31e47c | out: lpFindFileData=0x31e47c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1ba28770, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x1bc89d70, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x1bc89d70, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0038.613] FindNextFileW (in: hFindFile=0x381b80, lpFindFileData=0x31e47c | out: lpFindFileData=0x31e47c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3c22e700, ftCreationTime.dwHighDateTime=0x1ca6669, ftLastAccessTime.dwLowDateTime=0x1ba28770, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x3c22e700, ftLastWriteTime.dwHighDateTime=0x1ca6669, nFileSizeHigh=0x0, nFileSizeLow=0xcb7, dwReserved0=0x0, dwReserved1=0x0, cFileName="FONTSCHM.INI", cAlternateFileName="")) returned 1 [0038.613] FindNextFileW (in: hFindFile=0x381b80, lpFindFileData=0x31e47c | out: lpFindFileData=0x31e47c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x47994900, ftCreationTime.dwHighDateTime=0x1ca1577, ftLastAccessTime.dwLowDateTime=0x1bbf17f0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x47994900, ftLastWriteTime.dwHighDateTime=0x1ca1577, nFileSizeHigh=0x0, nFileSizeLow=0x1eea6, dwReserved0=0x0, dwReserved1=0x0, cFileName="SCHEME01.CSS", cAlternateFileName="")) returned 1 [0038.613] FindNextFileW (in: hFindFile=0x381b80, lpFindFileData=0x31e47c | out: lpFindFileData=0x31e47c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2b96a700, ftCreationTime.dwHighDateTime=0x1ca1579, ftLastAccessTime.dwLowDateTime=0x1bbf17f0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x2b96a700, ftLastWriteTime.dwHighDateTime=0x1ca1579, nFileSizeHigh=0x0, nFileSizeLow=0x1fbbe, dwReserved0=0x0, dwReserved1=0x0, cFileName="SCHEME02.CSS", cAlternateFileName="")) returned 1 [0038.613] FindNextFileW (in: hFindFile=0x381b80, lpFindFileData=0x31e47c | out: lpFindFileData=0x31e47c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2a657a00, ftCreationTime.dwHighDateTime=0x1ca1579, ftLastAccessTime.dwLowDateTime=0x1bbf17f0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x2a657a00, ftLastWriteTime.dwHighDateTime=0x1ca1579, nFileSizeHigh=0x0, nFileSizeLow=0x1f024, dwReserved0=0x0, dwReserved1=0x0, cFileName="SCHEME03.CSS", cAlternateFileName="")) returned 1 [0038.613] FindNextFileW (in: hFindFile=0x381b80, lpFindFileData=0x31e47c | out: lpFindFileData=0x31e47c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x29344d00, ftCreationTime.dwHighDateTime=0x1ca1579, ftLastAccessTime.dwLowDateTime=0x1bbf17f0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x29344d00, ftLastWriteTime.dwHighDateTime=0x1ca1579, nFileSizeHigh=0x0, nFileSizeLow=0x1f4e2, dwReserved0=0x0, dwReserved1=0x0, cFileName="SCHEME04.CSS", cAlternateFileName="")) returned 1 [0038.613] FindNextFileW (in: hFindFile=0x381b80, lpFindFileData=0x31e47c | out: lpFindFileData=0x31e47c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x28032000, ftCreationTime.dwHighDateTime=0x1ca1579, ftLastAccessTime.dwLowDateTime=0x1bbf17f0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x28032000, ftLastWriteTime.dwHighDateTime=0x1ca1579, nFileSizeHigh=0x0, nFileSizeLow=0x1edba, dwReserved0=0x0, dwReserved1=0x0, cFileName="SCHEME05.CSS", cAlternateFileName="")) returned 1 [0038.613] FindNextFileW (in: hFindFile=0x381b80, lpFindFileData=0x31e47c | out: lpFindFileData=0x31e47c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x28032000, ftCreationTime.dwHighDateTime=0x1ca1579, ftLastAccessTime.dwLowDateTime=0x1bbf17f0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x28032000, ftLastWriteTime.dwHighDateTime=0x1ca1579, nFileSizeHigh=0x0, nFileSizeLow=0x1f2da, dwReserved0=0x0, dwReserved1=0x0, cFileName="SCHEME06.CSS", cAlternateFileName="")) returned 1 [0038.613] FindNextFileW (in: hFindFile=0x381b80, lpFindFileData=0x31e47c | out: lpFindFileData=0x31e47c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x26d1f300, ftCreationTime.dwHighDateTime=0x1ca1579, ftLastAccessTime.dwLowDateTime=0x1bbf17f0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x26d1f300, ftLastWriteTime.dwHighDateTime=0x1ca1579, nFileSizeHigh=0x0, nFileSizeLow=0x1ff56, dwReserved0=0x0, dwReserved1=0x0, cFileName="SCHEME07.CSS", cAlternateFileName="")) returned 1 [0038.613] FindNextFileW (in: hFindFile=0x381b80, lpFindFileData=0x31e47c | out: lpFindFileData=0x31e47c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x25a0c600, ftCreationTime.dwHighDateTime=0x1ca1579, ftLastAccessTime.dwLowDateTime=0x1bbf17f0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x25a0c600, ftLastWriteTime.dwHighDateTime=0x1ca1579, nFileSizeHigh=0x0, nFileSizeLow=0x1f998, dwReserved0=0x0, dwReserved1=0x0, cFileName="SCHEME08.CSS", cAlternateFileName="")) returned 1 [0038.613] FindNextFileW (in: hFindFile=0x381b80, lpFindFileData=0x31e47c | out: lpFindFileData=0x31e47c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x25a0c600, ftCreationTime.dwHighDateTime=0x1ca1579, ftLastAccessTime.dwLowDateTime=0x1bbf17f0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x25a0c600, ftLastWriteTime.dwHighDateTime=0x1ca1579, nFileSizeHigh=0x0, nFileSizeLow=0x20444, dwReserved0=0x0, dwReserved1=0x0, cFileName="SCHEME09.CSS", cAlternateFileName="")) returned 1 [0038.614] FindNextFileW (in: hFindFile=0x381b80, lpFindFileData=0x31e47c | out: lpFindFileData=0x31e47c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x233e6c00, ftCreationTime.dwHighDateTime=0x1ca1579, ftLastAccessTime.dwLowDateTime=0x1bbf17f0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x233e6c00, ftLastWriteTime.dwHighDateTime=0x1ca1579, nFileSizeHigh=0x0, nFileSizeLow=0x2072a, dwReserved0=0x0, dwReserved1=0x0, cFileName="SCHEME10.CSS", cAlternateFileName="")) returned 1 [0038.614] FindNextFileW (in: hFindFile=0x381b80, lpFindFileData=0x31e47c | out: lpFindFileData=0x31e47c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x220d3f00, ftCreationTime.dwHighDateTime=0x1ca1579, ftLastAccessTime.dwLowDateTime=0x1bbf17f0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x220d3f00, ftLastWriteTime.dwHighDateTime=0x1ca1579, nFileSizeHigh=0x0, nFileSizeLow=0x20030, dwReserved0=0x0, dwReserved1=0x0, cFileName="SCHEME11.CSS", cAlternateFileName="")) returned 1 [0038.614] FindNextFileW (in: hFindFile=0x381b80, lpFindFileData=0x31e47c | out: lpFindFileData=0x31e47c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x20dc1200, ftCreationTime.dwHighDateTime=0x1ca1579, ftLastAccessTime.dwLowDateTime=0x1bbf17f0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x20dc1200, ftLastWriteTime.dwHighDateTime=0x1ca1579, nFileSizeHigh=0x0, nFileSizeLow=0x1e09a, dwReserved0=0x0, dwReserved1=0x0, cFileName="SCHEME12.CSS", cAlternateFileName="")) returned 1 [0038.614] FindNextFileW (in: hFindFile=0x381b80, lpFindFileData=0x31e47c | out: lpFindFileData=0x31e47c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1faae500, ftCreationTime.dwHighDateTime=0x1ca1579, ftLastAccessTime.dwLowDateTime=0x1bc17950, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x1faae500, ftLastWriteTime.dwHighDateTime=0x1ca1579, nFileSizeHigh=0x0, nFileSizeLow=0x1ec9a, dwReserved0=0x0, dwReserved1=0x0, cFileName="SCHEME13.CSS", cAlternateFileName="")) returned 1 [0038.614] FindNextFileW (in: hFindFile=0x381b80, lpFindFileData=0x31e47c | out: lpFindFileData=0x31e47c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1faae500, ftCreationTime.dwHighDateTime=0x1ca1579, ftLastAccessTime.dwLowDateTime=0x1bc17950, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x1faae500, ftLastWriteTime.dwHighDateTime=0x1ca1579, nFileSizeHigh=0x0, nFileSizeLow=0x1f5cc, dwReserved0=0x0, dwReserved1=0x0, cFileName="SCHEME14.CSS", cAlternateFileName="")) returned 1 [0038.614] FindNextFileW (in: hFindFile=0x381b80, lpFindFileData=0x31e47c | out: lpFindFileData=0x31e47c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1e79b800, ftCreationTime.dwHighDateTime=0x1ca1579, ftLastAccessTime.dwLowDateTime=0x1bc17950, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x1e79b800, ftLastWriteTime.dwHighDateTime=0x1ca1579, nFileSizeHigh=0x0, nFileSizeLow=0x1e094, dwReserved0=0x0, dwReserved1=0x0, cFileName="SCHEME15.CSS", cAlternateFileName="")) returned 1 [0038.614] FindNextFileW (in: hFindFile=0x381b80, lpFindFileData=0x31e47c | out: lpFindFileData=0x31e47c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1d488b00, ftCreationTime.dwHighDateTime=0x1ca1579, ftLastAccessTime.dwLowDateTime=0x1bc17950, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x1d488b00, ftLastWriteTime.dwHighDateTime=0x1ca1579, nFileSizeHigh=0x0, nFileSizeLow=0x1f822, dwReserved0=0x0, dwReserved1=0x0, cFileName="SCHEME16.CSS", cAlternateFileName="")) returned 1 [0038.614] FindNextFileW (in: hFindFile=0x381b80, lpFindFileData=0x31e47c | out: lpFindFileData=0x31e47c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1c175e00, ftCreationTime.dwHighDateTime=0x1ca1579, ftLastAccessTime.dwLowDateTime=0x1bc17950, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x1c175e00, ftLastWriteTime.dwHighDateTime=0x1ca1579, nFileSizeHigh=0x0, nFileSizeLow=0x1eada, dwReserved0=0x0, dwReserved1=0x0, cFileName="SCHEME17.CSS", cAlternateFileName="")) returned 1 [0038.614] FindNextFileW (in: hFindFile=0x381b80, lpFindFileData=0x31e47c | out: lpFindFileData=0x31e47c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1ae63100, ftCreationTime.dwHighDateTime=0x1ca1579, ftLastAccessTime.dwLowDateTime=0x1bc17950, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x1ae63100, ftLastWriteTime.dwHighDateTime=0x1ca1579, nFileSizeHigh=0x0, nFileSizeLow=0x20438, dwReserved0=0x0, dwReserved1=0x0, cFileName="SCHEME18.CSS", cAlternateFileName="")) returned 1 [0038.614] FindNextFileW (in: hFindFile=0x381b80, lpFindFileData=0x31e47c | out: lpFindFileData=0x31e47c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x19b50400, ftCreationTime.dwHighDateTime=0x1ca1579, ftLastAccessTime.dwLowDateTime=0x1bc17950, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x19b50400, ftLastWriteTime.dwHighDateTime=0x1ca1579, nFileSizeHigh=0x0, nFileSizeLow=0x1fff2, dwReserved0=0x0, dwReserved1=0x0, cFileName="SCHEME19.CSS", cAlternateFileName="")) returned 1 [0038.614] FindNextFileW (in: hFindFile=0x381b80, lpFindFileData=0x31e47c | out: lpFindFileData=0x31e47c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1883d700, ftCreationTime.dwHighDateTime=0x1ca1579, ftLastAccessTime.dwLowDateTime=0x1bc17950, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x1883d700, ftLastWriteTime.dwHighDateTime=0x1ca1579, nFileSizeHigh=0x0, nFileSizeLow=0x1f6f0, dwReserved0=0x0, dwReserved1=0x0, cFileName="SCHEME20.CSS", cAlternateFileName="")) returned 1 [0038.614] FindNextFileW (in: hFindFile=0x381b80, lpFindFileData=0x31e47c | out: lpFindFileData=0x31e47c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1752aa00, ftCreationTime.dwHighDateTime=0x1ca1579, ftLastAccessTime.dwLowDateTime=0x1bc17950, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x1752aa00, ftLastWriteTime.dwHighDateTime=0x1ca1579, nFileSizeHigh=0x0, nFileSizeLow=0x1eae6, dwReserved0=0x0, dwReserved1=0x0, cFileName="SCHEME21.CSS", cAlternateFileName="")) returned 1 [0038.614] FindNextFileW (in: hFindFile=0x381b80, lpFindFileData=0x31e47c | out: lpFindFileData=0x31e47c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x14f05000, ftCreationTime.dwHighDateTime=0x1ca1579, ftLastAccessTime.dwLowDateTime=0x1bc17950, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x14f05000, ftLastWriteTime.dwHighDateTime=0x1ca1579, nFileSizeHigh=0x0, nFileSizeLow=0x1fcca, dwReserved0=0x0, dwReserved1=0x0, cFileName="SCHEME22.CSS", cAlternateFileName="")) returned 1 [0038.614] FindNextFileW (in: hFindFile=0x381b80, lpFindFileData=0x31e47c | out: lpFindFileData=0x31e47c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x13bf2300, ftCreationTime.dwHighDateTime=0x1ca1579, ftLastAccessTime.dwLowDateTime=0x1bc17950, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x13bf2300, ftLastWriteTime.dwHighDateTime=0x1ca1579, nFileSizeHigh=0x0, nFileSizeLow=0x1f5fa, dwReserved0=0x0, dwReserved1=0x0, cFileName="SCHEME23.CSS", cAlternateFileName="")) returned 1 [0038.614] FindNextFileW (in: hFindFile=0x381b80, lpFindFileData=0x31e47c | out: lpFindFileData=0x31e47c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x128df600, ftCreationTime.dwHighDateTime=0x1ca1579, ftLastAccessTime.dwLowDateTime=0x1bc17950, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x128df600, ftLastWriteTime.dwHighDateTime=0x1ca1579, nFileSizeHigh=0x0, nFileSizeLow=0x1ee38, dwReserved0=0x0, dwReserved1=0x0, cFileName="SCHEME24.CSS", cAlternateFileName="")) returned 1 [0038.614] FindNextFileW (in: hFindFile=0x381b80, lpFindFileData=0x31e47c | out: lpFindFileData=0x31e47c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x115cc900, ftCreationTime.dwHighDateTime=0x1ca1579, ftLastAccessTime.dwLowDateTime=0x1bc17950, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x115cc900, ftLastWriteTime.dwHighDateTime=0x1ca1579, nFileSizeHigh=0x0, nFileSizeLow=0x1fcee, dwReserved0=0x0, dwReserved1=0x0, cFileName="SCHEME25.CSS", cAlternateFileName="")) returned 1 [0038.614] FindNextFileW (in: hFindFile=0x381b80, lpFindFileData=0x31e47c | out: lpFindFileData=0x31e47c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x115cc900, ftCreationTime.dwHighDateTime=0x1ca1579, ftLastAccessTime.dwLowDateTime=0x1bc17950, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x115cc900, ftLastWriteTime.dwHighDateTime=0x1ca1579, nFileSizeHigh=0x0, nFileSizeLow=0x1d1b6, dwReserved0=0x0, dwReserved1=0x0, cFileName="SCHEME26.CSS", cAlternateFileName="")) returned 1 [0038.614] FindNextFileW (in: hFindFile=0x381b80, lpFindFileData=0x31e47c | out: lpFindFileData=0x31e47c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xefa6f00, ftCreationTime.dwHighDateTime=0x1ca1579, ftLastAccessTime.dwLowDateTime=0x1bc3dab0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xefa6f00, ftLastWriteTime.dwHighDateTime=0x1ca1579, nFileSizeHigh=0x0, nFileSizeLow=0x1e088, dwReserved0=0x0, dwReserved1=0x0, cFileName="SCHEME27.CSS", cAlternateFileName="")) returned 1 [0038.614] FindNextFileW (in: hFindFile=0x381b80, lpFindFileData=0x31e47c | out: lpFindFileData=0x31e47c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xefa6f00, ftCreationTime.dwHighDateTime=0x1ca1579, ftLastAccessTime.dwLowDateTime=0x1bc3dab0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xefa6f00, ftLastWriteTime.dwHighDateTime=0x1ca1579, nFileSizeHigh=0x0, nFileSizeLow=0x1d754, dwReserved0=0x0, dwReserved1=0x0, cFileName="SCHEME28.CSS", cAlternateFileName="")) returned 1 [0038.614] FindNextFileW (in: hFindFile=0x381b80, lpFindFileData=0x31e47c | out: lpFindFileData=0x31e47c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb66e800, ftCreationTime.dwHighDateTime=0x1ca1579, ftLastAccessTime.dwLowDateTime=0x1bc3dab0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xb66e800, ftLastWriteTime.dwHighDateTime=0x1ca1579, nFileSizeHigh=0x0, nFileSizeLow=0x1eb4a, dwReserved0=0x0, dwReserved1=0x0, cFileName="SCHEME29.CSS", cAlternateFileName="")) returned 1 [0038.614] FindNextFileW (in: hFindFile=0x381b80, lpFindFileData=0x31e47c | out: lpFindFileData=0x31e47c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa35bb00, ftCreationTime.dwHighDateTime=0x1ca1579, ftLastAccessTime.dwLowDateTime=0x1bc3dab0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xa35bb00, ftLastWriteTime.dwHighDateTime=0x1ca1579, nFileSizeHigh=0x0, nFileSizeLow=0x1d522, dwReserved0=0x0, dwReserved1=0x0, cFileName="SCHEME30.CSS", cAlternateFileName="")) returned 1 [0038.614] FindNextFileW (in: hFindFile=0x381b80, lpFindFileData=0x31e47c | out: lpFindFileData=0x31e47c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xff7b2600, ftCreationTime.dwHighDateTime=0x1ca1578, ftLastAccessTime.dwLowDateTime=0x1bc3dab0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xff7b2600, ftLastWriteTime.dwHighDateTime=0x1ca1578, nFileSizeHigh=0x0, nFileSizeLow=0x1d652, dwReserved0=0x0, dwReserved1=0x0, cFileName="SCHEME31.CSS", cAlternateFileName="")) returned 1 [0038.615] FindClose (in: hFindFile=0x381b80 | out: hFindFile=0x381b80) returned 1 [0038.616] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e704) returned 1 [0038.616] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e710) returned 1 [0038.616] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e744) returned 1 [0038.616] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR", nBufferLength=0x105, lpBuffer=0x31e24c, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR", lpFilePart=0x0) returned 0x38 [0038.616] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\", nBufferLength=0x105, lpBuffer=0x31e220, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\", lpFilePart=0x0) returned 0x39 [0038.616] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\*", lpFindFileData=0x31e46c | out: lpFindFileData=0x31e46c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1ba9ab90, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x1bde09d0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x1bde09d0, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x381b80 [0038.622] FindClose (in: hFindFile=0x381b80 | out: hFindFile=0x381b80) returned 1 [0038.623] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e704) returned 1 [0038.623] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e710) returned 1 [0038.623] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e744) returned 1 [0038.623] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR", nBufferLength=0x105, lpBuffer=0x31e24c, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR", lpFilePart=0x0) returned 0x38 [0038.623] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\", nBufferLength=0x105, lpBuffer=0x31e220, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\", lpFilePart=0x0) returned 0x39 [0038.623] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\*", lpFindFileData=0x31e46c | out: lpFindFileData=0x31e46c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1ba9ab90, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x1bde09d0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x1bde09d0, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x381b80 [0038.624] FindClose (in: hFindFile=0x381b80 | out: hFindFile=0x381b80) returned 1 [0038.625] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e704) returned 1 [0038.625] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e710) returned 1 [0038.625] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e744) returned 1 [0038.625] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\QuickStyles", nBufferLength=0x105, lpBuffer=0x31e24c, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\Office14\\1033\\QuickStyles", lpFilePart=0x0) returned 0x3b [0038.625] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\QuickStyles\\", nBufferLength=0x105, lpBuffer=0x31e220, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\Office14\\1033\\QuickStyles\\", lpFilePart=0x0) returned 0x3c [0038.625] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\QuickStyles\\*", lpFindFileData=0x31e46c | out: lpFindFileData=0x31e46c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1e3382f0, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x1e5274d0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x1e5274d0, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x381b80 [0038.627] FindClose (in: hFindFile=0x381b80 | out: hFindFile=0x381b80) returned 1 [0038.628] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e704) returned 1 [0038.628] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e710) returned 1 [0038.628] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e744) returned 1 [0038.628] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\QuickStyles", nBufferLength=0x105, lpBuffer=0x31e24c, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\Office14\\1033\\QuickStyles", lpFilePart=0x0) returned 0x3b [0038.628] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\QuickStyles\\", nBufferLength=0x105, lpBuffer=0x31e220, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\Office14\\1033\\QuickStyles\\", lpFilePart=0x0) returned 0x3c [0038.628] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\QuickStyles\\*", lpFindFileData=0x31e46c | out: lpFindFileData=0x31e46c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1e3382f0, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x1e5274d0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x1e5274d0, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x381b80 [0038.629] FindClose (in: hFindFile=0x381b80 | out: hFindFile=0x381b80) returned 1 [0038.630] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e704) returned 1 [0038.630] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e710) returned 1 [0038.630] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e744) returned 1 [0038.630] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\Vsdir", nBufferLength=0x105, lpBuffer=0x31e24c, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\Office14\\1033\\Vsdir", lpFilePart=0x0) returned 0x35 [0038.630] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\Vsdir\\", nBufferLength=0x105, lpBuffer=0x31e220, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\Office14\\1033\\Vsdir\\", lpFilePart=0x0) returned 0x36 [0038.630] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\Vsdir\\*", lpFindFileData=0x31e46c | out: lpFindFileData=0x31e46c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x504da6a0, ftCreationTime.dwHighDateTime=0x1d305eb, ftLastAccessTime.dwLowDateTime=0x50f6a840, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0x50f6a840, ftLastWriteTime.dwHighDateTime=0x1d305eb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x381b80 [0038.631] FindClose (in: hFindFile=0x381b80 | out: hFindFile=0x381b80) returned 1 [0038.631] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e704) returned 1 [0038.631] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e710) returned 1 [0038.631] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e744) returned 1 [0038.631] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\Vsdir", nBufferLength=0x105, lpBuffer=0x31e24c, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\Office14\\1033\\Vsdir", lpFilePart=0x0) returned 0x35 [0038.631] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\Vsdir\\", nBufferLength=0x105, lpBuffer=0x31e220, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\Office14\\1033\\Vsdir\\", lpFilePart=0x0) returned 0x36 [0038.631] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\Vsdir\\*", lpFindFileData=0x31e46c | out: lpFindFileData=0x31e46c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x504da6a0, ftCreationTime.dwHighDateTime=0x1d305eb, ftLastAccessTime.dwLowDateTime=0x50f6a840, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0x50f6a840, ftLastWriteTime.dwHighDateTime=0x1d305eb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x381b80 [0038.631] FindClose (in: hFindFile=0x381b80 | out: hFindFile=0x381b80) returned 1 [0038.631] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e704) returned 1 [0038.631] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e710) returned 1 [0038.631] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e7bc) returned 1 [0038.631] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1036", nBufferLength=0x105, lpBuffer=0x31e2c4, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\Office14\\1036", lpFilePart=0x0) returned 0x2f [0038.631] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1036\\", nBufferLength=0x105, lpBuffer=0x31e298, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\Office14\\1036\\", lpFilePart=0x0) returned 0x30 [0038.631] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1036\\*", lpFindFileData=0x31e4e4 | out: lpFindFileData=0x31e4e4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x779e270, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x779e270, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x779e270, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x381b80 [0038.632] FindClose (in: hFindFile=0x381b80 | out: hFindFile=0x381b80) returned 1 [0038.632] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e77c) returned 1 [0038.632] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e788) returned 1 [0038.632] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e7bc) returned 1 [0038.632] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1036", nBufferLength=0x105, lpBuffer=0x31e2c4, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\Office14\\1036", lpFilePart=0x0) returned 0x2f [0038.633] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1036\\", nBufferLength=0x105, lpBuffer=0x31e298, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\Office14\\1036\\", lpFilePart=0x0) returned 0x30 [0038.633] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1036\\*", lpFindFileData=0x31e4e4 | out: lpFindFileData=0x31e4e4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x779e270, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x779e270, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x779e270, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x381b80 [0038.633] FindClose (in: hFindFile=0x381b80 | out: hFindFile=0x381b80) returned 1 [0038.633] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e77c) returned 1 [0038.633] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e788) returned 1 [0038.633] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e7bc) returned 1 [0038.633] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\3082", nBufferLength=0x105, lpBuffer=0x31e2c4, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\Office14\\3082", lpFilePart=0x0) returned 0x2f [0038.633] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\3082\\", nBufferLength=0x105, lpBuffer=0x31e298, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\Office14\\3082\\", lpFilePart=0x0) returned 0x30 [0038.633] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\3082\\*", lpFindFileData=0x31e4e4 | out: lpFindFileData=0x31e4e4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5a4f390, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x5a4f390, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x5a4f390, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x381b80 [0038.634] FindClose (in: hFindFile=0x381b80 | out: hFindFile=0x381b80) returned 1 [0038.634] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e77c) returned 1 [0038.634] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e788) returned 1 [0038.634] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e7bc) returned 1 [0038.634] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\3082", nBufferLength=0x105, lpBuffer=0x31e2c4, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\Office14\\3082", lpFilePart=0x0) returned 0x2f [0038.634] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\3082\\", nBufferLength=0x105, lpBuffer=0x31e298, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\Office14\\3082\\", lpFilePart=0x0) returned 0x30 [0038.634] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\3082\\*", lpFindFileData=0x31e4e4 | out: lpFindFileData=0x31e4e4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5a4f390, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x5a4f390, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x5a4f390, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x381b80 [0038.634] FindClose (in: hFindFile=0x381b80 | out: hFindFile=0x381b80) returned 1 [0038.634] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e77c) returned 1 [0038.634] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e788) returned 1 [0038.634] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e7bc) returned 1 [0038.634] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\AccessWeb", nBufferLength=0x105, lpBuffer=0x31e2c4, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\Office14\\AccessWeb", lpFilePart=0x0) returned 0x34 [0038.634] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\AccessWeb\\", nBufferLength=0x105, lpBuffer=0x31e298, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\Office14\\AccessWeb\\", lpFilePart=0x0) returned 0x35 [0038.634] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\AccessWeb\\*", lpFindFileData=0x31e4e4 | out: lpFindFileData=0x31e4e4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x50e7acd0, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x603a86d0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x603a86d0, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x381b80 [0038.635] FindClose (in: hFindFile=0x381b80 | out: hFindFile=0x381b80) returned 1 [0038.635] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e77c) returned 1 [0038.636] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e788) returned 1 [0038.636] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e7bc) returned 1 [0038.636] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\AccessWeb", nBufferLength=0x105, lpBuffer=0x31e2c4, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\Office14\\AccessWeb", lpFilePart=0x0) returned 0x34 [0038.636] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\AccessWeb\\", nBufferLength=0x105, lpBuffer=0x31e298, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\Office14\\AccessWeb\\", lpFilePart=0x0) returned 0x35 [0038.636] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\AccessWeb\\*", lpFindFileData=0x31e4e4 | out: lpFindFileData=0x31e4e4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x50e7acd0, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x603a86d0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x603a86d0, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x381b80 [0038.636] FindClose (in: hFindFile=0x381b80 | out: hFindFile=0x381b80) returned 1 [0038.636] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e77c) returned 1 [0038.636] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e788) returned 1 [0038.636] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e7bc) returned 1 [0038.636] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\ACCWIZ", nBufferLength=0x105, lpBuffer=0x31e2c4, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\Office14\\ACCWIZ", lpFilePart=0x0) returned 0x31 [0038.636] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\ACCWIZ\\", nBufferLength=0x105, lpBuffer=0x31e298, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\Office14\\ACCWIZ\\", lpFilePart=0x0) returned 0x32 [0038.636] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\ACCWIZ\\*", lpFindFileData=0x31e4e4 | out: lpFindFileData=0x31e4e4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x51174850, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x5ead0130, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x5ead0130, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x381b80 [0038.638] FindClose (in: hFindFile=0x381b80 | out: hFindFile=0x381b80) returned 1 [0038.638] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e77c) returned 1 [0038.638] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e788) returned 1 [0038.638] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e7bc) returned 1 [0038.638] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\ACCWIZ", nBufferLength=0x105, lpBuffer=0x31e2c4, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\Office14\\ACCWIZ", lpFilePart=0x0) returned 0x31 [0038.639] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\ACCWIZ\\", nBufferLength=0x105, lpBuffer=0x31e298, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\Office14\\ACCWIZ\\", lpFilePart=0x0) returned 0x32 [0038.639] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\ACCWIZ\\*", lpFindFileData=0x31e4e4 | out: lpFindFileData=0x31e4e4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x51174850, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x5ead0130, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x5ead0130, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x381b80 [0038.639] FindClose (in: hFindFile=0x381b80 | out: hFindFile=0x381b80) returned 1 [0038.640] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e77c) returned 1 [0038.640] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e788) returned 1 [0038.640] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e7bc) returned 1 [0038.640] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\ADDINS", nBufferLength=0x105, lpBuffer=0x31e2c4, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\Office14\\ADDINS", lpFilePart=0x0) returned 0x31 [0038.640] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\ADDINS\\", nBufferLength=0x105, lpBuffer=0x31e298, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\Office14\\ADDINS\\", lpFilePart=0x0) returned 0x32 [0038.640] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\ADDINS\\*", lpFindFileData=0x31e4e4 | out: lpFindFileData=0x31e4e4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfff68b70, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0x695e6e70, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x695e6e70, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x381b80 [0038.642] FindClose (in: hFindFile=0x381b80 | out: hFindFile=0x381b80) returned 1 [0038.643] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e77c) returned 1 [0038.643] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e788) returned 1 [0038.643] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e7bc) returned 1 [0038.643] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\ADDINS", nBufferLength=0x105, lpBuffer=0x31e2c4, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\Office14\\ADDINS", lpFilePart=0x0) returned 0x31 [0038.643] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\ADDINS\\", nBufferLength=0x105, lpBuffer=0x31e298, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\Office14\\ADDINS\\", lpFilePart=0x0) returned 0x32 [0038.643] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\ADDINS\\*", lpFindFileData=0x31e4e4 | out: lpFindFileData=0x31e4e4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfff68b70, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0x695e6e70, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x695e6e70, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x381b80 [0038.644] FindClose (in: hFindFile=0x381b80 | out: hFindFile=0x381b80) returned 1 [0038.644] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e77c) returned 1 [0038.644] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e788) returned 1 [0038.644] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e7bc) returned 1 [0038.644] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Bibliography", nBufferLength=0x105, lpBuffer=0x31e2c4, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\Office14\\Bibliography", lpFilePart=0x0) returned 0x37 [0038.644] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Bibliography\\", nBufferLength=0x105, lpBuffer=0x31e298, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\Office14\\Bibliography\\", lpFilePart=0x0) returned 0x38 [0038.644] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Bibliography\\*", lpFindFileData=0x31e4e4 | out: lpFindFileData=0x31e4e4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x51422110, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x5f409670, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x5f409670, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x381b80 [0038.647] FindClose (in: hFindFile=0x381b80 | out: hFindFile=0x381b80) returned 1 [0038.648] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e77c) returned 1 [0038.648] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e788) returned 1 [0038.648] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e7bc) returned 1 [0038.648] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Bibliography", nBufferLength=0x105, lpBuffer=0x31e2c4, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\Office14\\Bibliography", lpFilePart=0x0) returned 0x37 [0038.648] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Bibliography\\", nBufferLength=0x105, lpBuffer=0x31e298, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\Office14\\Bibliography\\", lpFilePart=0x0) returned 0x38 [0038.648] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Bibliography\\*", lpFindFileData=0x31e4e4 | out: lpFindFileData=0x31e4e4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x51422110, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x5f409670, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x5f409670, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x381b80 [0038.648] FindClose (in: hFindFile=0x381b80 | out: hFindFile=0x381b80) returned 1 [0038.649] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e77c) returned 1 [0038.649] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e788) returned 1 [0038.649] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e744) returned 1 [0038.649] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Bibliography\\Sort", nBufferLength=0x105, lpBuffer=0x31e24c, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\Office14\\Bibliography\\Sort", lpFilePart=0x0) returned 0x3c [0038.649] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Bibliography\\Sort\\", nBufferLength=0x105, lpBuffer=0x31e220, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\Office14\\Bibliography\\Sort\\", lpFilePart=0x0) returned 0x3d [0038.649] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Bibliography\\Sort\\*", lpFindFileData=0x31e46c | out: lpFindFileData=0x31e46c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x51767f50, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x70c9f7b0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x70c9f7b0, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x381b80 [0038.650] FindClose (in: hFindFile=0x381b80 | out: hFindFile=0x381b80) returned 1 [0038.650] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e704) returned 1 [0038.650] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e710) returned 1 [0038.650] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e744) returned 1 [0038.650] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Bibliography\\Sort", nBufferLength=0x105, lpBuffer=0x31e24c, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\Office14\\Bibliography\\Sort", lpFilePart=0x0) returned 0x3c [0038.650] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Bibliography\\Sort\\", nBufferLength=0x105, lpBuffer=0x31e220, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\Office14\\Bibliography\\Sort\\", lpFilePart=0x0) returned 0x3d [0038.650] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Bibliography\\Sort\\*", lpFindFileData=0x31e46c | out: lpFindFileData=0x31e46c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x51767f50, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x70c9f7b0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x70c9f7b0, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x381b80 [0038.651] FindClose (in: hFindFile=0x381b80 | out: hFindFile=0x381b80) returned 1 [0038.651] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e704) returned 1 [0038.651] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e710) returned 1 [0038.651] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e744) returned 1 [0038.651] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Bibliography\\Style", nBufferLength=0x105, lpBuffer=0x31e24c, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\Office14\\Bibliography\\Style", lpFilePart=0x0) returned 0x3d [0038.651] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Bibliography\\Style\\", nBufferLength=0x105, lpBuffer=0x31e220, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\Office14\\Bibliography\\Style\\", lpFilePart=0x0) returned 0x3e [0038.651] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Bibliography\\Style\\*", lpFindFileData=0x31e46c | out: lpFindFileData=0x31e46c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x51422110, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x69c4c990, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x69c4c990, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x381b80 [0038.652] FindClose (in: hFindFile=0x381b80 | out: hFindFile=0x381b80) returned 1 [0038.653] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e704) returned 1 [0038.653] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e710) returned 1 [0038.653] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e744) returned 1 [0038.653] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Bibliography\\Style", nBufferLength=0x105, lpBuffer=0x31e24c, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\Office14\\Bibliography\\Style", lpFilePart=0x0) returned 0x3d [0038.653] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Bibliography\\Style\\", nBufferLength=0x105, lpBuffer=0x31e220, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\Office14\\Bibliography\\Style\\", lpFilePart=0x0) returned 0x3e [0038.653] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Bibliography\\Style\\*", lpFindFileData=0x31e46c | out: lpFindFileData=0x31e46c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x51422110, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x69c4c990, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x69c4c990, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x381b80 [0038.654] FindClose (in: hFindFile=0x381b80 | out: hFindFile=0x381b80) returned 1 [0038.655] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e704) returned 1 [0038.655] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e710) returned 1 [0038.655] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e7bc) returned 1 [0038.655] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\BORDERS", nBufferLength=0x105, lpBuffer=0x31e2c4, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\Office14\\BORDERS", lpFilePart=0x0) returned 0x32 [0038.655] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\BORDERS\\", nBufferLength=0x105, lpBuffer=0x31e298, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\Office14\\BORDERS\\", lpFilePart=0x0) returned 0x33 [0038.656] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\BORDERS\\*", lpFindFileData=0x31e4e4 | out: lpFindFileData=0x31e4e4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x58b4ce70, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x69dc9750, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x69dc9750, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x381b80 [0038.658] FindClose (in: hFindFile=0x381b80 | out: hFindFile=0x381b80) returned 1 [0038.659] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e77c) returned 1 [0038.659] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e788) returned 1 [0038.659] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e7bc) returned 1 [0038.659] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\BORDERS", nBufferLength=0x105, lpBuffer=0x31e2c4, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\Office14\\BORDERS", lpFilePart=0x0) returned 0x32 [0038.659] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\BORDERS\\", nBufferLength=0x105, lpBuffer=0x31e298, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\Office14\\BORDERS\\", lpFilePart=0x0) returned 0x33 [0038.659] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\BORDERS\\*", lpFindFileData=0x31e4e4 | out: lpFindFileData=0x31e4e4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x58b4ce70, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x69dc9750, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x69dc9750, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x381b80 [0038.660] FindClose (in: hFindFile=0x381b80 | out: hFindFile=0x381b80) returned 1 [0038.660] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e77c) returned 1 [0038.660] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e788) returned 1 [0038.660] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e7bc) returned 1 [0038.660] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\CONVERT", nBufferLength=0x105, lpBuffer=0x31e2c4, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\Office14\\CONVERT", lpFilePart=0x0) returned 0x32 [0038.660] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\CONVERT\\", nBufferLength=0x105, lpBuffer=0x31e298, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\Office14\\CONVERT\\", lpFilePart=0x0) returned 0x33 [0038.660] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\CONVERT\\*", lpFindFileData=0x31e4e4 | out: lpFindFileData=0x31e4e4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfff68b70, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0x6d547830, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x6d547830, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x381b80 [0038.663] FindClose (in: hFindFile=0x381b80 | out: hFindFile=0x381b80) returned 1 [0038.664] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e77c) returned 1 [0038.664] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e788) returned 1 [0038.664] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e7bc) returned 1 [0038.664] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\CONVERT", nBufferLength=0x105, lpBuffer=0x31e2c4, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\Office14\\CONVERT", lpFilePart=0x0) returned 0x32 [0038.664] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\CONVERT\\", nBufferLength=0x105, lpBuffer=0x31e298, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\Office14\\CONVERT\\", lpFilePart=0x0) returned 0x33 [0038.664] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\CONVERT\\*", lpFindFileData=0x31e4e4 | out: lpFindFileData=0x31e4e4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfff68b70, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0x6d547830, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x6d547830, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x381b80 [0038.664] FindClose (in: hFindFile=0x381b80 | out: hFindFile=0x381b80) returned 1 [0038.665] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e77c) returned 1 [0038.665] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e788) returned 1 [0038.665] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e744) returned 1 [0038.665] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\CONVERT\\1033", nBufferLength=0x105, lpBuffer=0x31e24c, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\Office14\\CONVERT\\1033", lpFilePart=0x0) returned 0x37 [0038.665] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\CONVERT\\1033\\", nBufferLength=0x105, lpBuffer=0x31e220, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\Office14\\CONVERT\\1033\\", lpFilePart=0x0) returned 0x38 [0038.665] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\CONVERT\\1033\\*", lpFindFileData=0x31e46c | out: lpFindFileData=0x31e46c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xbe7ef0, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x21c6910, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x21c6910, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x381b80 [0038.668] FindClose (in: hFindFile=0x381b80 | out: hFindFile=0x381b80) returned 1 [0038.669] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e704) returned 1 [0038.669] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e710) returned 1 [0038.669] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e744) returned 1 [0038.669] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\CONVERT\\1033", nBufferLength=0x105, lpBuffer=0x31e24c, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\Office14\\CONVERT\\1033", lpFilePart=0x0) returned 0x37 [0038.669] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\CONVERT\\1033\\", nBufferLength=0x105, lpBuffer=0x31e220, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\Office14\\CONVERT\\1033\\", lpFilePart=0x0) returned 0x38 [0038.669] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\CONVERT\\1033\\*", lpFindFileData=0x31e46c | out: lpFindFileData=0x31e46c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xbe7ef0, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x21c6910, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x21c6910, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x381b80 [0038.670] FindClose (in: hFindFile=0x381b80 | out: hFindFile=0x381b80) returned 1 [0038.670] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e704) returned 1 [0038.670] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e710) returned 1 [0038.670] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e7bc) returned 1 [0038.670] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Document Parts", nBufferLength=0x105, lpBuffer=0x31e2c4, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\Office14\\Document Parts", lpFilePart=0x0) returned 0x39 [0038.670] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Document Parts\\", nBufferLength=0x105, lpBuffer=0x31e298, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\Office14\\Document Parts\\", lpFilePart=0x0) returned 0x3a [0038.670] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Document Parts\\*", lpFindFileData=0x31e4e4 | out: lpFindFileData=0x31e4e4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1e3382f0, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x1e3382f0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x1e3382f0, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x381b80 [0038.673] FindClose (in: hFindFile=0x381b80 | out: hFindFile=0x381b80) returned 1 [0038.673] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e77c) returned 1 [0038.673] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e788) returned 1 [0038.673] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e7bc) returned 1 [0038.673] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Document Parts", nBufferLength=0x105, lpBuffer=0x31e2c4, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\Office14\\Document Parts", lpFilePart=0x0) returned 0x39 [0038.674] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Document Parts\\", nBufferLength=0x105, lpBuffer=0x31e298, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\Office14\\Document Parts\\", lpFilePart=0x0) returned 0x3a [0038.674] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Document Parts\\*", lpFindFileData=0x31e4e4 | out: lpFindFileData=0x31e4e4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1e3382f0, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x1e3382f0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x1e3382f0, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x381b80 [0038.674] FindClose (in: hFindFile=0x381b80 | out: hFindFile=0x381b80) returned 1 [0038.674] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e77c) returned 1 [0038.674] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e788) returned 1 [0038.674] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e744) returned 1 [0038.674] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Document Parts\\1033", nBufferLength=0x105, lpBuffer=0x31e24c, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\Office14\\Document Parts\\1033", lpFilePart=0x0) returned 0x3e [0038.674] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Document Parts\\1033\\", nBufferLength=0x105, lpBuffer=0x31e220, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\Office14\\Document Parts\\1033\\", lpFilePart=0x0) returned 0x3f [0038.674] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Document Parts\\1033\\*", lpFindFileData=0x31e46c | out: lpFindFileData=0x31e46c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1e3382f0, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x1e3382f0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x1e3382f0, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x381b80 [0038.674] FindClose (in: hFindFile=0x381b80 | out: hFindFile=0x381b80) returned 1 [0038.674] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e704) returned 1 [0038.674] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e710) returned 1 [0038.674] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e744) returned 1 [0038.674] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Document Parts\\1033", nBufferLength=0x105, lpBuffer=0x31e24c, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\Office14\\Document Parts\\1033", lpFilePart=0x0) returned 0x3e [0038.674] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Document Parts\\1033\\", nBufferLength=0x105, lpBuffer=0x31e220, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\Office14\\Document Parts\\1033\\", lpFilePart=0x0) returned 0x3f [0038.674] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Document Parts\\1033\\*", lpFindFileData=0x31e46c | out: lpFindFileData=0x31e46c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1e3382f0, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x1e3382f0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x1e3382f0, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x381b80 [0038.675] FindClose (in: hFindFile=0x381b80 | out: hFindFile=0x381b80) returned 1 [0038.675] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e704) returned 1 [0038.675] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Document Parts\\1033\\14", nBufferLength=0x105, lpBuffer=0x31e1d4, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\Office14\\Document Parts\\1033\\14", lpFilePart=0x0) returned 0x41 [0038.675] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Document Parts\\1033\\14\\", nBufferLength=0x105, lpBuffer=0x31e1a8, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\Office14\\Document Parts\\1033\\14\\", lpFilePart=0x0) returned 0x42 [0038.675] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Document Parts\\1033\\14\\*", lpFindFileData=0x31e3f4 | out: lpFindFileData=0x31e3f4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1e3382f0, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x1e3382f0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x1e3382f0, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x381b80 [0038.675] FindClose (in: hFindFile=0x381b80 | out: hFindFile=0x381b80) returned 1 [0038.675] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Document Parts\\1033\\14", nBufferLength=0x105, lpBuffer=0x31e1d4, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\Office14\\Document Parts\\1033\\14", lpFilePart=0x0) returned 0x41 [0038.675] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Document Parts\\1033\\14\\", nBufferLength=0x105, lpBuffer=0x31e1a8, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\Office14\\Document Parts\\1033\\14\\", lpFilePart=0x0) returned 0x42 [0038.675] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Document Parts\\1033\\14\\*", lpFindFileData=0x31e3f4 | out: lpFindFileData=0x31e3f4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1e3382f0, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x1e3382f0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x1e3382f0, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x381b80 [0038.675] FindClose (in: hFindFile=0x381b80 | out: hFindFile=0x381b80) returned 1 [0038.675] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\FORMS", nBufferLength=0x105, lpBuffer=0x31e2c4, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\Office14\\FORMS", lpFilePart=0x0) returned 0x30 [0038.675] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\FORMS\\", nBufferLength=0x105, lpBuffer=0x31e298, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\Office14\\FORMS\\", lpFilePart=0x0) returned 0x31 [0038.676] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\FORMS\\*", lpFindFileData=0x31e4e4 | out: lpFindFileData=0x31e4e4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xccc730, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0xccc730, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xccc730, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x381b80 [0038.676] FindClose (in: hFindFile=0x381b80 | out: hFindFile=0x381b80) returned 1 [0038.676] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\FORMS", nBufferLength=0x105, lpBuffer=0x31e2c4, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\Office14\\FORMS", lpFilePart=0x0) returned 0x30 [0038.676] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\FORMS\\", nBufferLength=0x105, lpBuffer=0x31e298, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\Office14\\FORMS\\", lpFilePart=0x0) returned 0x31 [0038.676] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\FORMS\\*", lpFindFileData=0x31e4e4 | out: lpFindFileData=0x31e4e4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xccc730, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0xccc730, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xccc730, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x381b80 [0038.676] FindClose (in: hFindFile=0x381b80 | out: hFindFile=0x381b80) returned 1 [0038.676] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\FORMS\\1033", nBufferLength=0x105, lpBuffer=0x31e24c, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\Office14\\FORMS\\1033", lpFilePart=0x0) returned 0x35 [0038.676] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\FORMS\\1033\\", nBufferLength=0x105, lpBuffer=0x31e220, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\Office14\\FORMS\\1033\\", lpFilePart=0x0) returned 0x36 [0038.676] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\FORMS\\1033\\*", lpFindFileData=0x31e46c | out: lpFindFileData=0x31e46c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xccc730, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x21c6910, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x21c6910, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x381b80 [0038.680] FindClose (in: hFindFile=0x381b80 | out: hFindFile=0x381b80) returned 1 [0038.681] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\FORMS\\1033", nBufferLength=0x105, lpBuffer=0x31e24c, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\Office14\\FORMS\\1033", lpFilePart=0x0) returned 0x35 [0038.681] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\FORMS\\1033\\", nBufferLength=0x105, lpBuffer=0x31e220, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\Office14\\FORMS\\1033\\", lpFilePart=0x0) returned 0x36 [0038.681] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\FORMS\\1033\\*", lpFindFileData=0x31e46c | out: lpFindFileData=0x31e46c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xccc730, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x21c6910, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x21c6910, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x381b80 [0038.682] FindClose (in: hFindFile=0x381b80 | out: hFindFile=0x381b80) returned 1 [0038.683] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove", nBufferLength=0x105, lpBuffer=0x31e2c4, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\Office14\\Groove", lpFilePart=0x0) returned 0x31 [0038.683] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\", nBufferLength=0x105, lpBuffer=0x31e298, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\", lpFilePart=0x0) returned 0x32 [0038.683] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\*", lpFindFileData=0x31e4e4 | out: lpFindFileData=0x31e4e4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x50e7acd0, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x582abeb0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x582abeb0, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x381b80 [0038.685] FindClose (in: hFindFile=0x381b80 | out: hFindFile=0x381b80) returned 1 [0038.685] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove", nBufferLength=0x105, lpBuffer=0x31e2c4, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\Office14\\Groove", lpFilePart=0x0) returned 0x31 [0038.685] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\", nBufferLength=0x105, lpBuffer=0x31e298, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\", lpFilePart=0x0) returned 0x32 [0038.685] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\*", lpFindFileData=0x31e4e4 | out: lpFindFileData=0x31e4e4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x50e7acd0, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x582abeb0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x582abeb0, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x381b80 [0038.686] FindClose (in: hFindFile=0x381b80 | out: hFindFile=0x381b80) returned 1 [0038.687] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\Certificates", nBufferLength=0x105, lpBuffer=0x31e24c, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\Certificates", lpFilePart=0x0) returned 0x3e [0038.687] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\Certificates\\", nBufferLength=0x105, lpBuffer=0x31e220, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\Certificates\\", lpFilePart=0x0) returned 0x3f [0038.687] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\Certificates\\*", lpFindFileData=0x31e46c | out: lpFindFileData=0x31e46c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x582abeb0, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x5e490770, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x5e490770, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x381b80 [0038.689] FindClose (in: hFindFile=0x381b80 | out: hFindFile=0x381b80) returned 1 [0038.689] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\Certificates", nBufferLength=0x105, lpBuffer=0x31e24c, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\Certificates", lpFilePart=0x0) returned 0x3e [0038.689] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\Certificates\\", nBufferLength=0x105, lpBuffer=0x31e220, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\Certificates\\", lpFilePart=0x0) returned 0x3f [0038.689] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\Certificates\\*", lpFindFileData=0x31e46c | out: lpFindFileData=0x31e46c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x582abeb0, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x5e490770, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x5e490770, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x381b80 [0038.689] FindClose (in: hFindFile=0x381b80 | out: hFindFile=0x381b80) returned 1 [0038.689] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\Certificates\\groove.net", nBufferLength=0x105, lpBuffer=0x31e1d4, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\Certificates\\groove.net", lpFilePart=0x0) returned 0x49 [0038.689] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\Certificates\\groove.net\\", nBufferLength=0x105, lpBuffer=0x31e1a8, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\Certificates\\groove.net\\", lpFilePart=0x0) returned 0x4a [0038.689] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\Certificates\\groove.net\\*", lpFindFileData=0x31e3f4 | out: lpFindFileData=0x31e3f4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x582abeb0, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x6d2c00d0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x6d2c00d0, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x381b80 [0038.690] FindClose (in: hFindFile=0x381b80 | out: hFindFile=0x381b80) returned 1 [0038.690] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\Certificates\\groove.net", nBufferLength=0x105, lpBuffer=0x31e1d4, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\Certificates\\groove.net", lpFilePart=0x0) returned 0x49 [0038.690] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\Certificates\\groove.net\\", nBufferLength=0x105, lpBuffer=0x31e1a8, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\Certificates\\groove.net\\", lpFilePart=0x0) returned 0x4a [0038.690] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\Certificates\\groove.net\\*", lpFindFileData=0x31e3f4 | out: lpFindFileData=0x31e3f4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x582abeb0, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x6d2c00d0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x6d2c00d0, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x381b80 [0038.690] FindClose (in: hFindFile=0x381b80 | out: hFindFile=0x381b80) returned 1 [0038.690] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\Certificates\\groove.net\\Components", nBufferLength=0x105, lpBuffer=0x31e15c, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\Certificates\\groove.net\\Components", lpFilePart=0x0) returned 0x54 [0038.690] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\Certificates\\groove.net\\Components\\", nBufferLength=0x105, lpBuffer=0x31e130, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\Certificates\\groove.net\\Components\\", lpFilePart=0x0) returned 0x55 [0038.690] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\Certificates\\groove.net\\Components\\*", lpFindFileData=0x31e37c | out: lpFindFileData=0x31e37c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x6d2c00d0, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x6d2c00d0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x6d2c00d0, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x381b80 [0038.692] FindClose (in: hFindFile=0x381b80 | out: hFindFile=0x381b80) returned 1 [0038.692] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\Certificates\\groove.net\\Components", nBufferLength=0x105, lpBuffer=0x31e15c, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\Certificates\\groove.net\\Components", lpFilePart=0x0) returned 0x54 [0038.692] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\Certificates\\groove.net\\Components\\", nBufferLength=0x105, lpBuffer=0x31e130, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\Certificates\\groove.net\\Components\\", lpFilePart=0x0) returned 0x55 [0038.692] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\Certificates\\groove.net\\Components\\*", lpFindFileData=0x31e37c | out: lpFindFileData=0x31e37c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x6d2c00d0, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x6d2c00d0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x6d2c00d0, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x381b80 [0038.692] FindClose (in: hFindFile=0x381b80 | out: hFindFile=0x381b80) returned 1 [0038.692] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\Certificates\\groove.net\\ManagedObjects", nBufferLength=0x105, lpBuffer=0x31e15c, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\Certificates\\groove.net\\ManagedObjects", lpFilePart=0x0) returned 0x58 [0038.692] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\Certificates\\groove.net\\ManagedObjects\\", nBufferLength=0x105, lpBuffer=0x31e130, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\Certificates\\groove.net\\ManagedObjects\\", lpFilePart=0x0) returned 0x59 [0038.692] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\Certificates\\groove.net\\ManagedObjects\\*", lpFindFileData=0x31e37c | out: lpFindFileData=0x31e37c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5a95a430, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x5a95a430, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x5a95a430, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x381b80 [0038.693] FindClose (in: hFindFile=0x381b80 | out: hFindFile=0x381b80) returned 1 [0038.693] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\Certificates\\groove.net\\ManagedObjects", nBufferLength=0x105, lpBuffer=0x31e15c, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\Certificates\\groove.net\\ManagedObjects", lpFilePart=0x0) returned 0x58 [0038.693] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\Certificates\\groove.net\\ManagedObjects\\", nBufferLength=0x105, lpBuffer=0x31e130, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\Certificates\\groove.net\\ManagedObjects\\", lpFilePart=0x0) returned 0x59 [0038.694] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\Certificates\\groove.net\\ManagedObjects\\*", lpFindFileData=0x31e37c | out: lpFindFileData=0x31e37c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5a95a430, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x5a95a430, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x5a95a430, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x381b80 [0038.694] FindClose (in: hFindFile=0x381b80 | out: hFindFile=0x381b80) returned 1 [0038.694] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\Certificates\\groove.net\\Servers", nBufferLength=0x105, lpBuffer=0x31e15c, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\Certificates\\groove.net\\Servers", lpFilePart=0x0) returned 0x51 [0038.694] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\Certificates\\groove.net\\Servers\\", nBufferLength=0x105, lpBuffer=0x31e130, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\Certificates\\groove.net\\Servers\\", lpFilePart=0x0) returned 0x52 [0038.694] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\Certificates\\groove.net\\Servers\\*", lpFindFileData=0x31e37c | out: lpFindFileData=0x31e37c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x582abeb0, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x6d169470, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x6d169470, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x381b80 [0038.694] FindClose (in: hFindFile=0x381b80 | out: hFindFile=0x381b80) returned 1 [0038.694] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\Certificates\\groove.net\\Servers", nBufferLength=0x105, lpBuffer=0x31e15c, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\Certificates\\groove.net\\Servers", lpFilePart=0x0) returned 0x51 [0038.694] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\Certificates\\groove.net\\Servers\\", nBufferLength=0x105, lpBuffer=0x31e130, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\Certificates\\groove.net\\Servers\\", lpFilePart=0x0) returned 0x52 [0038.694] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\Certificates\\groove.net\\Servers\\*", lpFindFileData=0x31e37c | out: lpFindFileData=0x31e37c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x582abeb0, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x6d169470, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x6d169470, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x381b80 [0038.694] FindClose (in: hFindFile=0x381b80 | out: hFindFile=0x381b80) returned 1 [0038.694] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\Certificates\\Verisign", nBufferLength=0x105, lpBuffer=0x31e1d4, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\Certificates\\Verisign", lpFilePart=0x0) returned 0x47 [0038.695] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\Certificates\\Verisign\\", nBufferLength=0x105, lpBuffer=0x31e1a8, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\Certificates\\Verisign\\", lpFilePart=0x0) returned 0x48 [0038.695] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\Certificates\\Verisign\\*", lpFindFileData=0x31e3f4 | out: lpFindFileData=0x31e3f4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5e490770, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x5e490770, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x5e490770, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x381b80 [0038.696] FindClose (in: hFindFile=0x381b80 | out: hFindFile=0x381b80) returned 1 [0038.696] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\Certificates\\Verisign", nBufferLength=0x105, lpBuffer=0x31e1d4, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\Certificates\\Verisign", lpFilePart=0x0) returned 0x47 [0038.696] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\Certificates\\Verisign\\", nBufferLength=0x105, lpBuffer=0x31e1a8, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\Certificates\\Verisign\\", lpFilePart=0x0) returned 0x48 [0038.696] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\Certificates\\Verisign\\*", lpFindFileData=0x31e3f4 | out: lpFindFileData=0x31e3f4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5e490770, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x5e490770, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x5e490770, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x381b80 [0038.696] FindClose (in: hFindFile=0x381b80 | out: hFindFile=0x381b80) returned 1 [0038.697] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\Certificates\\Verisign\\Components", nBufferLength=0x105, lpBuffer=0x31e15c, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\Certificates\\Verisign\\Components", lpFilePart=0x0) returned 0x52 [0038.697] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\Certificates\\Verisign\\Components\\", nBufferLength=0x105, lpBuffer=0x31e130, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\Certificates\\Verisign\\Components\\", lpFilePart=0x0) returned 0x53 [0038.697] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\Certificates\\Verisign\\Components\\*", lpFindFileData=0x31e37c | out: lpFindFileData=0x31e37c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5e490770, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x70744630, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x70744630, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x381b80 [0038.698] FindClose (in: hFindFile=0x381b80 | out: hFindFile=0x381b80) returned 1 [0038.699] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\Certificates\\Verisign\\Components", nBufferLength=0x105, lpBuffer=0x31e15c, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\Certificates\\Verisign\\Components", lpFilePart=0x0) returned 0x52 [0038.699] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\Certificates\\Verisign\\Components\\", nBufferLength=0x105, lpBuffer=0x31e130, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\Certificates\\Verisign\\Components\\", lpFilePart=0x0) returned 0x53 [0038.699] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\Certificates\\Verisign\\Components\\*", lpFindFileData=0x31e37c | out: lpFindFileData=0x31e37c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5e490770, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x70744630, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x70744630, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x381b80 [0038.700] FindClose (in: hFindFile=0x381b80 | out: hFindFile=0x381b80) returned 1 [0038.700] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\Sounds", nBufferLength=0x105, lpBuffer=0x31e24c, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\Sounds", lpFilePart=0x0) returned 0x38 [0038.700] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\Sounds\\", nBufferLength=0x105, lpBuffer=0x31e220, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\Sounds\\", lpFilePart=0x0) returned 0x39 [0038.700] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\Sounds\\*", lpFindFileData=0x31e46c | out: lpFindFileData=0x31e46c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x51b925d0, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x52a72f50, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x52a72f50, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x381b80 [0038.702] FindClose (in: hFindFile=0x381b80 | out: hFindFile=0x381b80) returned 1 [0038.702] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\Sounds", nBufferLength=0x105, lpBuffer=0x31e24c, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\Sounds", lpFilePart=0x0) returned 0x38 [0038.702] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\Sounds\\", nBufferLength=0x105, lpBuffer=0x31e220, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\Sounds\\", lpFilePart=0x0) returned 0x39 [0038.702] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\Sounds\\*", lpFindFileData=0x31e46c | out: lpFindFileData=0x31e46c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x51b925d0, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x52a72f50, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x52a72f50, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x381b80 [0038.702] FindClose (in: hFindFile=0x381b80 | out: hFindFile=0x381b80) returned 1 [0038.702] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\Sounds\\People", nBufferLength=0x105, lpBuffer=0x31e1d4, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\Sounds\\People", lpFilePart=0x0) returned 0x3f [0038.702] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\Sounds\\People\\", nBufferLength=0x105, lpBuffer=0x31e1a8, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\Sounds\\People\\", lpFilePart=0x0) returned 0x40 [0038.703] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\Sounds\\People\\*", lpFindFileData=0x31e3f4 | out: lpFindFileData=0x31e3f4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x52a72f50, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x708e7550, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x708e7550, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x381b80 [0038.706] FindClose (in: hFindFile=0x381b80 | out: hFindFile=0x381b80) returned 1 [0038.706] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\Sounds\\People", nBufferLength=0x105, lpBuffer=0x31e1d4, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\Sounds\\People", lpFilePart=0x0) returned 0x3f [0038.706] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\Sounds\\People\\", nBufferLength=0x105, lpBuffer=0x31e1a8, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\Sounds\\People\\", lpFilePart=0x0) returned 0x40 [0038.707] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\Sounds\\People\\*", lpFindFileData=0x31e3f4 | out: lpFindFileData=0x31e3f4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x52a72f50, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x708e7550, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x708e7550, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x381b80 [0038.707] FindClose (in: hFindFile=0x381b80 | out: hFindFile=0x381b80) returned 1 [0038.708] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\Sounds\\People\\Whistling.wav", nBufferLength=0x105, lpBuffer=0x31e0a4, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\Sounds\\People\\Whistling.wav", lpFilePart=0x0) returned 0x4d [0038.708] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\Sounds\\People\\Whistling.wav" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\sounds\\people\\whistling.wav"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x274 [0038.710] GetFileType (hFile=0x274) returned 0x1 [0038.710] GetFileType (hFile=0x274) returned 0x1 [0038.710] GetFileSize (in: hFile=0x274, lpFileSizeHigh=0x31e6a0 | out: lpFileSizeHigh=0x31e6a0*=0x0) returned 0x7302 [0038.710] ReadFile (in: hFile=0x274, lpBuffer=0x281cec0, nNumberOfBytesToRead=0x7302, lpNumberOfBytesRead=0x31e64c, lpOverlapped=0x0 | out: lpBuffer=0x281cec0*, lpNumberOfBytesRead=0x31e64c*=0x7302, lpOverlapped=0x0) returned 1 [0038.728] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\Sounds\\People\\Whistling.wav", nBufferLength=0x105, lpBuffer=0x31e090, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\Sounds\\People\\Whistling.wav", lpFilePart=0x0) returned 0x4d [0038.728] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\Sounds\\People\\Whistling.wav" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\sounds\\people\\whistling.wav"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x274 [0038.729] GetFileType (hFile=0x274) returned 0x1 [0038.729] GetFileType (hFile=0x274) returned 0x1 [0038.729] WriteFile (in: hFile=0x274, lpBuffer=0x2695368*, nNumberOfBytesToWrite=0x7310, lpNumberOfBytesWritten=0x31e640, lpOverlapped=0x0 | out: lpBuffer=0x2695368*, lpNumberOfBytesWritten=0x31e640*=0x7310, lpOverlapped=0x0) returned 1 [0038.730] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\Sounds\\People\\Whistling.wav", nBufferLength=0x105, lpBuffer=0x31e1c4, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\Sounds\\People\\Whistling.wav", lpFilePart=0x0) returned 0x4d [0038.730] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\Sounds\\People\\Whistling.wav", nBufferLength=0x105, lpBuffer=0x31e1c4, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\Sounds\\People\\Whistling.wav", lpFilePart=0x0) returned 0x4d [0038.730] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\Sounds\\People\\Whistling.wav" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\sounds\\people\\whistling.wav"), fInfoLevelId=0x0, lpFileInformation=0x31e6a0 | out: lpFileInformation=0x31e6a0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6d003d00, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0x708e7550, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xfa8919c0, ftLastWriteTime.dwHighDateTime=0x1d6eb7e, nFileSizeHigh=0x0, nFileSizeLow=0x7310)) returned 1 [0038.730] MoveFileW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\Sounds\\People\\Whistling.wav" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\sounds\\people\\whistling.wav"), lpNewFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\Sounds\\People\\Whistling.wav" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\sounds\\people\\whistling.wav")) returned 1 [0038.732] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\Sounds\\Places", nBufferLength=0x105, lpBuffer=0x31e1d4, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\Sounds\\Places", lpFilePart=0x0) returned 0x3f [0038.732] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\Sounds\\Places\\", nBufferLength=0x105, lpBuffer=0x31e1a8, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\Sounds\\Places\\", lpFilePart=0x0) returned 0x40 [0038.732] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\Sounds\\Places\\*", lpFindFileData=0x31e3f4 | out: lpFindFileData=0x31e3f4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x51b925d0, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x6d547830, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x6d547830, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x381f00 [0038.734] FindClose (in: hFindFile=0x381f00 | out: hFindFile=0x381f00) returned 1 [0038.735] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\Sounds\\Places", nBufferLength=0x105, lpBuffer=0x31e1d4, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\Sounds\\Places", lpFilePart=0x0) returned 0x3f [0038.735] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\Sounds\\Places\\", nBufferLength=0x105, lpBuffer=0x31e1a8, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\Sounds\\Places\\", lpFilePart=0x0) returned 0x40 [0038.735] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\Sounds\\Places\\*", lpFindFileData=0x31e3f4 | out: lpFindFileData=0x31e3f4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x51b925d0, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x6d547830, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x6d547830, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x381f00 [0038.736] FindClose (in: hFindFile=0x381f00 | out: hFindFile=0x381f00) returned 1 [0038.737] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\Sounds\\Things", nBufferLength=0x105, lpBuffer=0x31e1d4, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\Sounds\\Things", lpFilePart=0x0) returned 0x3f [0038.737] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\Sounds\\Things\\", nBufferLength=0x105, lpBuffer=0x31e1a8, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\Sounds\\Things\\", lpFilePart=0x0) returned 0x40 [0038.737] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\Sounds\\Things\\*", lpFindFileData=0x31e3f4 | out: lpFindFileData=0x31e3f4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x51ce9230, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x6d299f70, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x6d299f70, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x381f00 [0038.741] FindClose (in: hFindFile=0x381f00 | out: hFindFile=0x381f00) returned 1 [0038.742] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\Sounds\\Things", nBufferLength=0x105, lpBuffer=0x31e1d4, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\Sounds\\Things", lpFilePart=0x0) returned 0x3f [0038.742] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\Sounds\\Things\\", nBufferLength=0x105, lpBuffer=0x31e1a8, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\Sounds\\Things\\", lpFilePart=0x0) returned 0x40 [0038.742] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\Sounds\\Things\\*", lpFindFileData=0x31e3f4 | out: lpFindFileData=0x31e3f4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x51ce9230, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x6d299f70, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x6d299f70, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x381f00 [0038.743] FindClose (in: hFindFile=0x381f00 | out: hFindFile=0x381f00) returned 1 [0038.743] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolBMPs", nBufferLength=0x105, lpBuffer=0x31e24c, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolBMPs", lpFilePart=0x0) returned 0x3a [0038.744] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolBMPs\\", nBufferLength=0x105, lpBuffer=0x31e220, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolBMPs\\", lpFilePart=0x0) returned 0x3b [0038.744] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolBMPs\\*", lpFindFileData=0x31e46c | out: lpFindFileData=0x31e46c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x51bb8730, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x709f1ef0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x709f1ef0, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x381f00 [0038.749] FindClose (in: hFindFile=0x381f00 | out: hFindFile=0x381f00) returned 1 [0038.750] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolBMPs", nBufferLength=0x105, lpBuffer=0x31e24c, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolBMPs", lpFilePart=0x0) returned 0x3a [0038.750] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolBMPs\\", nBufferLength=0x105, lpBuffer=0x31e220, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolBMPs\\", lpFilePart=0x0) returned 0x3b [0038.750] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolBMPs\\*", lpFindFileData=0x31e46c | out: lpFindFileData=0x31e46c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x51bb8730, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x709f1ef0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x709f1ef0, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x381f00 [0038.751] FindClose (in: hFindFile=0x381f00 | out: hFindFile=0x381f00) returned 1 [0038.752] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolBMPs\\CalendarToolIconImages.jpg", nBufferLength=0x105, lpBuffer=0x31e11c, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolBMPs\\CalendarToolIconImages.jpg", lpFilePart=0x0) returned 0x55 [0038.752] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolBMPs\\CalendarToolIconImages.jpg" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\toolbmps\\calendartooliconimages.jpg"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x274 [0038.753] GetFileType (hFile=0x274) returned 0x1 [0038.753] GetFileType (hFile=0x274) returned 0x1 [0038.753] GetFileSize (in: hFile=0x274, lpFileSizeHigh=0x31e718 | out: lpFileSizeHigh=0x31e718*=0x0) returned 0x14c9 [0038.753] ReadFile (in: hFile=0x274, lpBuffer=0x26b2f8c, nNumberOfBytesToRead=0x14c9, lpNumberOfBytesRead=0x31e6c4, lpOverlapped=0x0 | out: lpBuffer=0x26b2f8c*, lpNumberOfBytesRead=0x31e6c4*=0x14c9, lpOverlapped=0x0) returned 1 [0038.768] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolBMPs\\CalendarToolIconImages.jpg", nBufferLength=0x105, lpBuffer=0x31e108, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolBMPs\\CalendarToolIconImages.jpg", lpFilePart=0x0) returned 0x55 [0038.768] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolBMPs\\CalendarToolIconImages.jpg" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\toolbmps\\calendartooliconimages.jpg"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x274 [0038.769] GetFileType (hFile=0x274) returned 0x1 [0038.769] GetFileType (hFile=0x274) returned 0x1 [0038.769] WriteFile (in: hFile=0x274, lpBuffer=0x27066e0*, nNumberOfBytesToWrite=0x14d0, lpNumberOfBytesWritten=0x31e6b8, lpOverlapped=0x0 | out: lpBuffer=0x27066e0*, lpNumberOfBytesWritten=0x31e6b8*=0x14d0, lpOverlapped=0x0) returned 1 [0038.770] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolBMPs\\CalendarToolIconImages.jpg", nBufferLength=0x105, lpBuffer=0x31e23c, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolBMPs\\CalendarToolIconImages.jpg", lpFilePart=0x0) returned 0x55 [0038.770] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolBMPs\\CalendarToolIconImages.jpg", nBufferLength=0x105, lpBuffer=0x31e23c, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolBMPs\\CalendarToolIconImages.jpg", lpFilePart=0x0) returned 0x55 [0038.770] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolBMPs\\CalendarToolIconImages.jpg" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\toolbmps\\calendartooliconimages.jpg"), fInfoLevelId=0x0, lpFileInformation=0x31e718 | out: lpFileInformation=0x31e718*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7093c400, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0x51bb8730, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xfa903de0, ftLastWriteTime.dwHighDateTime=0x1d6eb7e, nFileSizeHigh=0x0, nFileSizeLow=0x14d0)) returned 1 [0038.770] MoveFileW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolBMPs\\CalendarToolIconImages.jpg" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\toolbmps\\calendartooliconimages.jpg"), lpNewFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolBMPs\\CalendarToolIconImages.jpg" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\toolbmps\\calendartooliconimages.jpg")) returned 1 [0038.771] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolBMPs\\CalendarToolIconImagesMask.bmp", nBufferLength=0x105, lpBuffer=0x31e11c, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolBMPs\\CalendarToolIconImagesMask.bmp", lpFilePart=0x0) returned 0x59 [0038.771] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolBMPs\\CalendarToolIconImagesMask.bmp" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\toolbmps\\calendartooliconimagesmask.bmp"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x274 [0038.771] GetFileType (hFile=0x274) returned 0x1 [0038.771] GetFileType (hFile=0x274) returned 0x1 [0038.771] GetFileSize (in: hFile=0x274, lpFileSizeHigh=0x31e718 | out: lpFileSizeHigh=0x31e718*=0x0) returned 0x538 [0038.771] ReadFile (in: hFile=0x274, lpBuffer=0x2708548, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x31e6c4, lpOverlapped=0x0 | out: lpBuffer=0x2708548*, lpNumberOfBytesRead=0x31e6c4*=0x538, lpOverlapped=0x0) returned 1 [0038.786] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolBMPs\\CalendarToolIconImagesMask.bmp", nBufferLength=0x105, lpBuffer=0x31e108, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolBMPs\\CalendarToolIconImagesMask.bmp", lpFilePart=0x0) returned 0x59 [0038.786] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolBMPs\\CalendarToolIconImagesMask.bmp" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\toolbmps\\calendartooliconimagesmask.bmp"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x274 [0038.787] GetFileType (hFile=0x274) returned 0x1 [0038.787] GetFileType (hFile=0x274) returned 0x1 [0038.787] WriteFile (in: hFile=0x274, lpBuffer=0x2757ee8*, nNumberOfBytesToWrite=0x540, lpNumberOfBytesWritten=0x31e68c, lpOverlapped=0x0 | out: lpBuffer=0x2757ee8*, lpNumberOfBytesWritten=0x31e68c*=0x540, lpOverlapped=0x0) returned 1 [0038.788] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolBMPs\\CalendarToolIconImagesMask.bmp", nBufferLength=0x105, lpBuffer=0x31e23c, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolBMPs\\CalendarToolIconImagesMask.bmp", lpFilePart=0x0) returned 0x59 [0038.788] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolBMPs\\CalendarToolIconImagesMask.bmp", nBufferLength=0x105, lpBuffer=0x31e23c, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolBMPs\\CalendarToolIconImagesMask.bmp", lpFilePart=0x0) returned 0x59 [0038.788] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolBMPs\\CalendarToolIconImagesMask.bmp" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\toolbmps\\calendartooliconimagesmask.bmp"), fInfoLevelId=0x0, lpFileInformation=0x31e718 | out: lpFileInformation=0x31e718*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7093c400, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0x51bb8730, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xfa929f40, ftLastWriteTime.dwHighDateTime=0x1d6eb7e, nFileSizeHigh=0x0, nFileSizeLow=0x540)) returned 1 [0038.788] MoveFileW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolBMPs\\CalendarToolIconImagesMask.bmp" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\toolbmps\\calendartooliconimagesmask.bmp"), lpNewFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolBMPs\\CalendarToolIconImagesMask.bmp" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\toolbmps\\calendartooliconimagesmask.bmp")) returned 1 [0038.789] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolBMPs\\ChessIconImages.bmp", nBufferLength=0x105, lpBuffer=0x31e11c, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolBMPs\\ChessIconImages.bmp", lpFilePart=0x0) returned 0x4e [0038.789] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolBMPs\\ChessIconImages.bmp" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\toolbmps\\chessiconimages.bmp"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x274 [0038.790] GetFileType (hFile=0x274) returned 0x1 [0038.790] GetFileType (hFile=0x274) returned 0x1 [0038.790] GetFileSize (in: hFile=0x274, lpFileSizeHigh=0x31e718 | out: lpFileSizeHigh=0x31e718*=0x0) returned 0xf38 [0038.790] ReadFile (in: hFile=0x274, lpBuffer=0x275a10c, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x31e6c4, lpOverlapped=0x0 | out: lpBuffer=0x275a10c*, lpNumberOfBytesRead=0x31e6c4*=0xf38, lpOverlapped=0x0) returned 1 [0038.805] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolBMPs\\ChessIconImages.bmp", nBufferLength=0x105, lpBuffer=0x31e108, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolBMPs\\ChessIconImages.bmp", lpFilePart=0x0) returned 0x4e [0038.805] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolBMPs\\ChessIconImages.bmp" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\toolbmps\\chessiconimages.bmp"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x274 [0038.806] GetFileType (hFile=0x274) returned 0x1 [0038.806] GetFileType (hFile=0x274) returned 0x1 [0038.806] WriteFile (in: hFile=0x274, lpBuffer=0x27acc80*, nNumberOfBytesToWrite=0xf40, lpNumberOfBytesWritten=0x31e68c, lpOverlapped=0x0 | out: lpBuffer=0x27acc80*, lpNumberOfBytesWritten=0x31e68c*=0xf40, lpOverlapped=0x0) returned 1 [0038.807] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolBMPs\\ChessIconImages.bmp", nBufferLength=0x105, lpBuffer=0x31e23c, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolBMPs\\ChessIconImages.bmp", lpFilePart=0x0) returned 0x4e [0038.807] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolBMPs\\ChessIconImages.bmp", nBufferLength=0x105, lpBuffer=0x31e23c, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolBMPs\\ChessIconImages.bmp", lpFilePart=0x0) returned 0x4e [0038.807] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolBMPs\\ChessIconImages.bmp" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\toolbmps\\chessiconimages.bmp"), fInfoLevelId=0x0, lpFileInformation=0x31e718 | out: lpFileInformation=0x31e718*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x71c4f100, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0x51c76e10, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xfa9500a0, ftLastWriteTime.dwHighDateTime=0x1d6eb7e, nFileSizeHigh=0x0, nFileSizeLow=0xf40)) returned 1 [0038.807] MoveFileW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolBMPs\\ChessIconImages.bmp" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\toolbmps\\chessiconimages.bmp"), lpNewFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolBMPs\\ChessIconImages.bmp" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\toolbmps\\chessiconimages.bmp")) returned 1 [0038.808] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolBMPs\\ChessIconImagesMask.bmp", nBufferLength=0x105, lpBuffer=0x31e11c, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolBMPs\\ChessIconImagesMask.bmp", lpFilePart=0x0) returned 0x52 [0038.808] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolBMPs\\ChessIconImagesMask.bmp" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\toolbmps\\chessiconimagesmask.bmp"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x274 [0038.808] GetFileType (hFile=0x274) returned 0x1 [0038.808] GetFileType (hFile=0x274) returned 0x1 [0038.808] GetFileSize (in: hFile=0x274, lpFileSizeHigh=0x31e718 | out: lpFileSizeHigh=0x31e718*=0x0) returned 0x938 [0038.808] ReadFile (in: hFile=0x274, lpBuffer=0x27ae88c, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x31e6c4, lpOverlapped=0x0 | out: lpBuffer=0x27ae88c*, lpNumberOfBytesRead=0x31e6c4*=0x938, lpOverlapped=0x0) returned 1 [0038.823] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolBMPs\\ChessIconImagesMask.bmp", nBufferLength=0x105, lpBuffer=0x31e108, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolBMPs\\ChessIconImagesMask.bmp", lpFilePart=0x0) returned 0x52 [0038.823] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolBMPs\\ChessIconImagesMask.bmp" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\toolbmps\\chessiconimagesmask.bmp"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x274 [0038.824] GetFileType (hFile=0x274) returned 0x1 [0038.824] GetFileType (hFile=0x274) returned 0x1 [0038.825] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolBMPs\\ChessIconImagesMask.bmp", nBufferLength=0x105, lpBuffer=0x31e23c, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolBMPs\\ChessIconImagesMask.bmp", lpFilePart=0x0) returned 0x52 [0038.825] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolBMPs\\ChessIconImagesMask.bmp", nBufferLength=0x105, lpBuffer=0x31e23c, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolBMPs\\ChessIconImagesMask.bmp", lpFilePart=0x0) returned 0x52 [0038.825] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolBMPs\\ChessIconImagesMask.bmp" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\toolbmps\\chessiconimagesmask.bmp"), fInfoLevelId=0x0, lpFileInformation=0x31e718 | out: lpFileInformation=0x31e718*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x71c4f100, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0x51c76e10, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xfa976200, ftLastWriteTime.dwHighDateTime=0x1d6eb7e, nFileSizeHigh=0x0, nFileSizeLow=0x940)) returned 1 [0038.825] MoveFileW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolBMPs\\ChessIconImagesMask.bmp" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\toolbmps\\chessiconimagesmask.bmp"), lpNewFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolBMPs\\ChessIconImagesMask.bmp" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\toolbmps\\chessiconimagesmask.bmp")) returned 1 [0038.825] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolBMPs\\CreateSpaceImage.jpg", nBufferLength=0x105, lpBuffer=0x31e11c, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolBMPs\\CreateSpaceImage.jpg", lpFilePart=0x0) returned 0x4f [0038.825] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolBMPs\\CreateSpaceImage.jpg" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\toolbmps\\createspaceimage.jpg"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x274 [0038.826] GetFileType (hFile=0x274) returned 0x1 [0038.826] GetFileType (hFile=0x274) returned 0x1 [0038.826] GetFileSize (in: hFile=0x274, lpFileSizeHigh=0x31e718 | out: lpFileSizeHigh=0x31e718*=0x0) returned 0x296b [0038.827] ReadFile (in: hFile=0x274, lpBuffer=0x28008dc, nNumberOfBytesToRead=0x296b, lpNumberOfBytesRead=0x31e6c4, lpOverlapped=0x0 | out: lpBuffer=0x28008dc*, lpNumberOfBytesRead=0x31e6c4*=0x296b, lpOverlapped=0x0) returned 1 [0038.844] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolBMPs\\CreateSpaceImage.jpg", nBufferLength=0x105, lpBuffer=0x31e108, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolBMPs\\CreateSpaceImage.jpg", lpFilePart=0x0) returned 0x4f [0038.845] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolBMPs\\CreateSpaceImage.jpg" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\toolbmps\\createspaceimage.jpg"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x274 [0038.845] GetFileType (hFile=0x274) returned 0x1 [0038.845] GetFileType (hFile=0x274) returned 0x1 [0038.846] WriteFile (in: hFile=0x274, lpBuffer=0x2659228*, nNumberOfBytesToWrite=0x2970, lpNumberOfBytesWritten=0x31e6b8, lpOverlapped=0x0 | out: lpBuffer=0x2659228*, lpNumberOfBytesWritten=0x31e6b8*=0x2970, lpOverlapped=0x0) returned 1 [0038.846] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolBMPs\\CreateSpaceImage.jpg", nBufferLength=0x105, lpBuffer=0x31e23c, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolBMPs\\CreateSpaceImage.jpg", lpFilePart=0x0) returned 0x4f [0038.847] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolBMPs\\CreateSpaceImage.jpg", nBufferLength=0x105, lpBuffer=0x31e23c, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolBMPs\\CreateSpaceImage.jpg", lpFilePart=0x0) returned 0x4f [0038.847] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolBMPs\\CreateSpaceImage.jpg" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\toolbmps\\createspaceimage.jpg"), fInfoLevelId=0x0, lpFileInformation=0x31e718 | out: lpFileInformation=0x31e718*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x71c4f100, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0x51d0f390, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xfa9c24c0, ftLastWriteTime.dwHighDateTime=0x1d6eb7e, nFileSizeHigh=0x0, nFileSizeLow=0x2970)) returned 1 [0038.847] MoveFileW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolBMPs\\CreateSpaceImage.jpg" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\toolbmps\\createspaceimage.jpg"), lpNewFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolBMPs\\CreateSpaceImage.jpg" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\toolbmps\\createspaceimage.jpg")) returned 1 [0038.848] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolBMPs\\CreateSpaceImageMask.bmp", nBufferLength=0x105, lpBuffer=0x31e11c, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolBMPs\\CreateSpaceImageMask.bmp", lpFilePart=0x0) returned 0x53 [0038.848] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolBMPs\\CreateSpaceImageMask.bmp" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\toolbmps\\createspaceimagemask.bmp"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x274 [0038.877] GetFileType (hFile=0x274) returned 0x1 [0038.877] GetFileType (hFile=0x274) returned 0x1 [0038.877] GetFileSize (in: hFile=0x274, lpFileSizeHigh=0x31e718 | out: lpFileSizeHigh=0x31e718*=0x0) returned 0xf78 [0038.877] ReadFile (in: hFile=0x274, lpBuffer=0x265cf28, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x31e6c4, lpOverlapped=0x0 | out: lpBuffer=0x265cf28*, lpNumberOfBytesRead=0x31e6c4*=0xf78, lpOverlapped=0x0) returned 1 [0038.892] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolBMPs\\CreateSpaceImageMask.bmp", nBufferLength=0x105, lpBuffer=0x31e108, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolBMPs\\CreateSpaceImageMask.bmp", lpFilePart=0x0) returned 0x53 [0038.892] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolBMPs\\CreateSpaceImageMask.bmp" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\toolbmps\\createspaceimagemask.bmp"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x274 [0038.893] GetFileType (hFile=0x274) returned 0x1 [0038.893] GetFileType (hFile=0x274) returned 0x1 [0038.893] WriteFile (in: hFile=0x274, lpBuffer=0x26afd4c*, nNumberOfBytesToWrite=0xf80, lpNumberOfBytesWritten=0x31e68c, lpOverlapped=0x0 | out: lpBuffer=0x26afd4c*, lpNumberOfBytesWritten=0x31e68c*=0xf80, lpOverlapped=0x0) returned 1 [0038.894] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolBMPs\\CreateSpaceImageMask.bmp", nBufferLength=0x105, lpBuffer=0x31e23c, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolBMPs\\CreateSpaceImageMask.bmp", lpFilePart=0x0) returned 0x53 [0038.894] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolBMPs\\CreateSpaceImageMask.bmp", nBufferLength=0x105, lpBuffer=0x31e23c, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolBMPs\\CreateSpaceImageMask.bmp", lpFilePart=0x0) returned 0x53 [0038.894] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolBMPs\\CreateSpaceImageMask.bmp" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\toolbmps\\createspaceimagemask.bmp"), fInfoLevelId=0x0, lpFileInformation=0x31e718 | out: lpFileInformation=0x31e718*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x71c4f100, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0x51d0f390, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xfaa348e0, ftLastWriteTime.dwHighDateTime=0x1d6eb7e, nFileSizeHigh=0x0, nFileSizeLow=0xf80)) returned 1 [0038.894] MoveFileW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolBMPs\\CreateSpaceImageMask.bmp" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\toolbmps\\createspaceimagemask.bmp"), lpNewFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolBMPs\\CreateSpaceImageMask.bmp" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\toolbmps\\createspaceimagemask.bmp")) returned 1 [0038.895] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolBMPs\\DataListIconImages.jpg", nBufferLength=0x105, lpBuffer=0x31e11c, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolBMPs\\DataListIconImages.jpg", lpFilePart=0x0) returned 0x51 [0038.895] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolBMPs\\DataListIconImages.jpg" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\toolbmps\\datalisticonimages.jpg"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x274 [0038.896] GetFileType (hFile=0x274) returned 0x1 [0038.896] GetFileType (hFile=0x274) returned 0x1 [0038.896] GetFileSize (in: hFile=0x274, lpFileSizeHigh=0x31e718 | out: lpFileSizeHigh=0x31e718*=0x0) returned 0x16c7 [0038.896] ReadFile (in: hFile=0x274, lpBuffer=0x26b1020, nNumberOfBytesToRead=0x16c7, lpNumberOfBytesRead=0x31e6c4, lpOverlapped=0x0 | out: lpBuffer=0x26b1020*, lpNumberOfBytesRead=0x31e6c4*=0x16c7, lpOverlapped=0x0) returned 1 [0038.911] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolBMPs\\DataListIconImages.jpg", nBufferLength=0x105, lpBuffer=0x31e108, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolBMPs\\DataListIconImages.jpg", lpFilePart=0x0) returned 0x51 [0038.911] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolBMPs\\DataListIconImages.jpg" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\toolbmps\\datalisticonimages.jpg"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x274 [0038.912] GetFileType (hFile=0x274) returned 0x1 [0038.912] GetFileType (hFile=0x274) returned 0x1 [0038.912] WriteFile (in: hFile=0x274, lpBuffer=0x2705018*, nNumberOfBytesToWrite=0x16d0, lpNumberOfBytesWritten=0x31e6b8, lpOverlapped=0x0 | out: lpBuffer=0x2705018*, lpNumberOfBytesWritten=0x31e6b8*=0x16d0, lpOverlapped=0x0) returned 1 [0038.913] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolBMPs\\DataListIconImages.jpg", nBufferLength=0x105, lpBuffer=0x31e23c, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolBMPs\\DataListIconImages.jpg", lpFilePart=0x0) returned 0x51 [0038.913] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolBMPs\\DataListIconImages.jpg", nBufferLength=0x105, lpBuffer=0x31e23c, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolBMPs\\DataListIconImages.jpg", lpFilePart=0x0) returned 0x51 [0038.913] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolBMPs\\DataListIconImages.jpg" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\toolbmps\\datalisticonimages.jpg"), fInfoLevelId=0x0, lpFileInformation=0x31e718 | out: lpFileInformation=0x31e718*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x71c4f100, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0x606ee510, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xfaa5aa40, ftLastWriteTime.dwHighDateTime=0x1d6eb7e, nFileSizeHigh=0x0, nFileSizeLow=0x16d0)) returned 1 [0038.913] MoveFileW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolBMPs\\DataListIconImages.jpg" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\toolbmps\\datalisticonimages.jpg"), lpNewFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolBMPs\\DataListIconImages.jpg" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\toolbmps\\datalisticonimages.jpg")) returned 1 [0038.914] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolBMPs\\DataListIconImagesMask.bmp", nBufferLength=0x105, lpBuffer=0x31e11c, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolBMPs\\DataListIconImagesMask.bmp", lpFilePart=0x0) returned 0x55 [0038.914] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolBMPs\\DataListIconImagesMask.bmp" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\toolbmps\\datalisticonimagesmask.bmp"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x274 [0038.914] GetFileType (hFile=0x274) returned 0x1 [0038.915] GetFileType (hFile=0x274) returned 0x1 [0038.915] GetFileSize (in: hFile=0x274, lpFileSizeHigh=0x31e718 | out: lpFileSizeHigh=0x31e718*=0x0) returned 0x708 [0038.915] ReadFile (in: hFile=0x274, lpBuffer=0x2707220, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x31e6c4, lpOverlapped=0x0 | out: lpBuffer=0x2707220*, lpNumberOfBytesRead=0x31e6c4*=0x708, lpOverlapped=0x0) returned 1 [0038.930] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolBMPs\\DataListIconImagesMask.bmp", nBufferLength=0x105, lpBuffer=0x31e108, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolBMPs\\DataListIconImagesMask.bmp", lpFilePart=0x0) returned 0x55 [0038.930] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolBMPs\\DataListIconImagesMask.bmp" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\toolbmps\\datalisticonimagesmask.bmp"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x274 [0038.931] GetFileType (hFile=0x274) returned 0x1 [0038.931] GetFileType (hFile=0x274) returned 0x1 [0038.931] WriteFile (in: hFile=0x274, lpBuffer=0x27574c0*, nNumberOfBytesToWrite=0x710, lpNumberOfBytesWritten=0x31e68c, lpOverlapped=0x0 | out: lpBuffer=0x27574c0*, lpNumberOfBytesWritten=0x31e68c*=0x710, lpOverlapped=0x0) returned 1 [0038.931] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolBMPs\\DataListIconImagesMask.bmp", nBufferLength=0x105, lpBuffer=0x31e23c, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolBMPs\\DataListIconImagesMask.bmp", lpFilePart=0x0) returned 0x55 [0038.932] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolBMPs\\DataListIconImagesMask.bmp", nBufferLength=0x105, lpBuffer=0x31e23c, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolBMPs\\DataListIconImagesMask.bmp", lpFilePart=0x0) returned 0x55 [0038.932] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolBMPs\\DataListIconImagesMask.bmp" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\toolbmps\\datalisticonimagesmask.bmp"), fInfoLevelId=0x0, lpFileInformation=0x31e718 | out: lpFileInformation=0x31e718*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x71c4f100, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0x606ee510, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xfaa80ba0, ftLastWriteTime.dwHighDateTime=0x1d6eb7e, nFileSizeHigh=0x0, nFileSizeLow=0x710)) returned 1 [0038.932] MoveFileW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolBMPs\\DataListIconImagesMask.bmp" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\toolbmps\\datalisticonimagesmask.bmp"), lpNewFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolBMPs\\DataListIconImagesMask.bmp" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\toolbmps\\datalisticonimagesmask.bmp")) returned 1 [0038.933] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolBMPs\\DataViewIconImages.jpg", nBufferLength=0x105, lpBuffer=0x31e11c, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolBMPs\\DataViewIconImages.jpg", lpFilePart=0x0) returned 0x51 [0038.933] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolBMPs\\DataViewIconImages.jpg" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\toolbmps\\dataviewiconimages.jpg"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x274 [0038.935] GetFileType (hFile=0x274) returned 0x1 [0038.935] GetFileType (hFile=0x274) returned 0x1 [0038.935] GetFileSize (in: hFile=0x274, lpFileSizeHigh=0x31e718 | out: lpFileSizeHigh=0x31e718*=0x0) returned 0x16c7 [0038.935] ReadFile (in: hFile=0x274, lpBuffer=0x275879c, nNumberOfBytesToRead=0x16c7, lpNumberOfBytesRead=0x31e6c4, lpOverlapped=0x0 | out: lpBuffer=0x275879c*, lpNumberOfBytesRead=0x31e6c4*=0x16c7, lpOverlapped=0x0) returned 1 [0038.950] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolBMPs\\DataViewIconImages.jpg", nBufferLength=0x105, lpBuffer=0x31e108, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolBMPs\\DataViewIconImages.jpg", lpFilePart=0x0) returned 0x51 [0038.950] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolBMPs\\DataViewIconImages.jpg" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\toolbmps\\dataviewiconimages.jpg"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x274 [0038.951] GetFileType (hFile=0x274) returned 0x1 [0038.951] GetFileType (hFile=0x274) returned 0x1 [0038.951] WriteFile (in: hFile=0x274, lpBuffer=0x27ac794*, nNumberOfBytesToWrite=0x16d0, lpNumberOfBytesWritten=0x31e6b8, lpOverlapped=0x0 | out: lpBuffer=0x27ac794*, lpNumberOfBytesWritten=0x31e6b8*=0x16d0, lpOverlapped=0x0) returned 1 [0038.952] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolBMPs\\DataViewIconImages.jpg", nBufferLength=0x105, lpBuffer=0x31e23c, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolBMPs\\DataViewIconImages.jpg", lpFilePart=0x0) returned 0x51 [0038.952] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolBMPs\\DataViewIconImages.jpg", nBufferLength=0x105, lpBuffer=0x31e23c, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolBMPs\\DataViewIconImages.jpg", lpFilePart=0x0) returned 0x51 [0038.952] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolBMPs\\DataViewIconImages.jpg" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\toolbmps\\dataviewiconimages.jpg"), fInfoLevelId=0x0, lpFileInformation=0x31e718 | out: lpFileInformation=0x31e718*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x72f61e00, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0x606ee510, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xfaaa6d00, ftLastWriteTime.dwHighDateTime=0x1d6eb7e, nFileSizeHigh=0x0, nFileSizeLow=0x16d0)) returned 1 [0038.952] MoveFileW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolBMPs\\DataViewIconImages.jpg" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\toolbmps\\dataviewiconimages.jpg"), lpNewFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolBMPs\\DataViewIconImages.jpg" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\toolbmps\\dataviewiconimages.jpg")) returned 1 [0038.953] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolBMPs\\DataViewIconImagesMask.bmp", nBufferLength=0x105, lpBuffer=0x31e11c, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolBMPs\\DataViewIconImagesMask.bmp", lpFilePart=0x0) returned 0x55 [0038.953] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolBMPs\\DataViewIconImagesMask.bmp" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\toolbmps\\dataviewiconimagesmask.bmp"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x274 [0038.954] GetFileType (hFile=0x274) returned 0x1 [0038.954] GetFileType (hFile=0x274) returned 0x1 [0038.954] GetFileSize (in: hFile=0x274, lpFileSizeHigh=0x31e718 | out: lpFileSizeHigh=0x31e718*=0x0) returned 0x708 [0038.954] ReadFile (in: hFile=0x274, lpBuffer=0x27ae99c, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x31e6c4, lpOverlapped=0x0 | out: lpBuffer=0x27ae99c*, lpNumberOfBytesRead=0x31e6c4*=0x708, lpOverlapped=0x0) returned 1 [0038.968] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolBMPs\\DataViewIconImagesMask.bmp", nBufferLength=0x105, lpBuffer=0x31e108, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolBMPs\\DataViewIconImagesMask.bmp", lpFilePart=0x0) returned 0x55 [0038.968] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolBMPs\\DataViewIconImagesMask.bmp" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\toolbmps\\dataviewiconimagesmask.bmp"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x274 [0038.969] GetFileType (hFile=0x274) returned 0x1 [0038.969] GetFileType (hFile=0x274) returned 0x1 [0038.970] MoveFileW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolBMPs\\DataViewIconImagesMask.bmp" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\toolbmps\\dataviewiconimagesmask.bmp"), lpNewFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolBMPs\\DataViewIconImagesMask.bmp" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\toolbmps\\dataviewiconimagesmask.bmp")) returned 1 [0038.971] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolBMPs\\DiscussionToolIconImages.jpg" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\toolbmps\\discussiontooliconimages.jpg"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x274 [0038.971] GetFileType (hFile=0x274) returned 0x1 [0038.971] GetFileType (hFile=0x274) returned 0x1 [0038.971] GetFileSize (in: hFile=0x274, lpFileSizeHigh=0x31e718 | out: lpFileSizeHigh=0x31e718*=0x0) returned 0x2eaf [0038.972] ReadFile (in: hFile=0x274, lpBuffer=0x27fff30, nNumberOfBytesToRead=0x2eaf, lpNumberOfBytesRead=0x31e6c4, lpOverlapped=0x0 | out: lpBuffer=0x27fff30*, lpNumberOfBytesRead=0x31e6c4*=0x2eaf, lpOverlapped=0x0) returned 1 [0038.989] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolBMPs\\DiscussionToolIconImages.jpg" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\toolbmps\\discussiontooliconimages.jpg"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x274 [0038.990] GetFileType (hFile=0x274) returned 0x1 [0038.990] GetFileType (hFile=0x274) returned 0x1 [0038.990] WriteFile (in: hFile=0x274, lpBuffer=0x265a754*, nNumberOfBytesToWrite=0x2eb0, lpNumberOfBytesWritten=0x31e6b8, lpOverlapped=0x0 | out: lpBuffer=0x265a754*, lpNumberOfBytesWritten=0x31e6b8*=0x2eb0, lpOverlapped=0x0) returned 1 [0038.991] MoveFileW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolBMPs\\DiscussionToolIconImages.jpg" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\toolbmps\\discussiontooliconimages.jpg"), lpNewFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolBMPs\\DiscussionToolIconImages.jpg" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\toolbmps\\discussiontooliconimages.jpg")) returned 1 [0038.992] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolBMPs\\DiscussionToolIconImagesMask.bmp" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\toolbmps\\discussiontooliconimagesmask.bmp"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x274 [0038.993] GetFileType (hFile=0x274) returned 0x1 [0038.993] GetFileType (hFile=0x274) returned 0x1 [0038.993] GetFileSize (in: hFile=0x274, lpFileSizeHigh=0x31e718 | out: lpFileSizeHigh=0x31e718*=0x0) returned 0x638 [0038.993] ReadFile (in: hFile=0x274, lpBuffer=0x265e0b4, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x31e6c4, lpOverlapped=0x0 | out: lpBuffer=0x265e0b4*, lpNumberOfBytesRead=0x31e6c4*=0x638, lpOverlapped=0x0) returned 1 [0039.008] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolBMPs\\DiscussionToolIconImagesMask.bmp" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\toolbmps\\discussiontooliconimagesmask.bmp"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x274 [0039.009] GetFileType (hFile=0x274) returned 0x1 [0039.009] GetFileType (hFile=0x274) returned 0x1 [0039.009] WriteFile (in: hFile=0x274, lpBuffer=0x26ae0b8*, nNumberOfBytesToWrite=0x640, lpNumberOfBytesWritten=0x31e68c, lpOverlapped=0x0 | out: lpBuffer=0x26ae0b8*, lpNumberOfBytesWritten=0x31e68c*=0x640, lpOverlapped=0x0) returned 1 [0039.010] MoveFileW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolBMPs\\DiscussionToolIconImagesMask.bmp" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\toolbmps\\discussiontooliconimagesmask.bmp"), lpNewFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolBMPs\\DiscussionToolIconImagesMask.bmp" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\toolbmps\\discussiontooliconimagesmask.bmp")) returned 1 [0039.011] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolBMPs\\Form_StatusImage.jpg" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\toolbmps\\form_statusimage.jpg"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x274 [0039.011] GetFileType (hFile=0x274) returned 0x1 [0039.011] GetFileType (hFile=0x274) returned 0x1 [0039.011] GetFileSize (in: hFile=0x274, lpFileSizeHigh=0x31e718 | out: lpFileSizeHigh=0x31e718*=0x0) returned 0x2a0f [0039.011] ReadFile (in: hFile=0x274, lpBuffer=0x26af3a4, nNumberOfBytesToRead=0x2a0f, lpNumberOfBytesRead=0x31e6c4, lpOverlapped=0x0 | out: lpBuffer=0x26af3a4*, lpNumberOfBytesRead=0x31e6c4*=0x2a0f, lpOverlapped=0x0) returned 1 [0039.027] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolBMPs\\Form_StatusImage.jpg" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\toolbmps\\form_statusimage.jpg"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x274 [0039.028] GetFileType (hFile=0x274) returned 0x1 [0039.028] GetFileType (hFile=0x274) returned 0x1 [0039.028] WriteFile (in: hFile=0x274, lpBuffer=0x27093dc*, nNumberOfBytesToWrite=0x2a10, lpNumberOfBytesWritten=0x31e6b8, lpOverlapped=0x0 | out: lpBuffer=0x27093dc*, lpNumberOfBytesWritten=0x31e6b8*=0x2a10, lpOverlapped=0x0) returned 1 [0039.029] MoveFileW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolBMPs\\Form_StatusImage.jpg" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\toolbmps\\form_statusimage.jpg"), lpNewFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolBMPs\\Form_StatusImage.jpg" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\toolbmps\\form_statusimage.jpg")) returned 1 [0039.030] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolBMPs\\Form_StatusImageMask.bmp" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\toolbmps\\form_statusimagemask.bmp"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x274 [0039.030] GetFileType (hFile=0x274) returned 0x1 [0039.030] GetFileType (hFile=0x274) returned 0x1 [0039.030] GetFileSize (in: hFile=0x274, lpFileSizeHigh=0x31e718 | out: lpFileSizeHigh=0x31e718*=0x0) returned 0x3618 [0039.030] ReadFile (in: hFile=0x274, lpBuffer=0x270c1f8, nNumberOfBytesToRead=0x3618, lpNumberOfBytesRead=0x31e6c4, lpOverlapped=0x0 | out: lpBuffer=0x270c1f8*, lpNumberOfBytesRead=0x31e6c4*=0x3618, lpOverlapped=0x0) returned 1 [0039.045] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolBMPs\\Form_StatusImageMask.bmp" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\toolbmps\\form_statusimagemask.bmp"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x274 [0039.046] GetFileType (hFile=0x274) returned 0x1 [0039.046] GetFileType (hFile=0x274) returned 0x1 [0039.046] WriteFile (in: hFile=0x274, lpBuffer=0x2769e7c*, nNumberOfBytesToWrite=0x3620, lpNumberOfBytesWritten=0x31e6b8, lpOverlapped=0x0 | out: lpBuffer=0x2769e7c*, lpNumberOfBytesWritten=0x31e6b8*=0x3620, lpOverlapped=0x0) returned 1 [0039.048] MoveFileW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolBMPs\\Form_StatusImageMask.bmp" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\toolbmps\\form_statusimagemask.bmp"), lpNewFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolBMPs\\Form_StatusImageMask.bmp" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\toolbmps\\form_statusimagemask.bmp")) returned 1 [0039.049] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolBMPs\\InformationIcon.jpg" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\toolbmps\\informationicon.jpg"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x274 [0039.049] GetFileType (hFile=0x274) returned 0x1 [0039.050] GetFileType (hFile=0x274) returned 0x1 [0039.050] GetFileSize (in: hFile=0x274, lpFileSizeHigh=0x31e718 | out: lpFileSizeHigh=0x31e718*=0x0) returned 0xbe5 [0039.050] ReadFile (in: hFile=0x274, lpBuffer=0x276e4d8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x31e6c4, lpOverlapped=0x0 | out: lpBuffer=0x276e4d8*, lpNumberOfBytesRead=0x31e6c4*=0xbe5, lpOverlapped=0x0) returned 1 [0039.064] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolBMPs\\InformationIcon.jpg" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\toolbmps\\informationicon.jpg"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x274 [0039.065] GetFileType (hFile=0x274) returned 0x1 [0039.065] GetFileType (hFile=0x274) returned 0x1 [0039.065] WriteFile (in: hFile=0x274, lpBuffer=0x27bffc0*, nNumberOfBytesToWrite=0xbf0, lpNumberOfBytesWritten=0x31e68c, lpOverlapped=0x0 | out: lpBuffer=0x27bffc0*, lpNumberOfBytesWritten=0x31e68c*=0xbf0, lpOverlapped=0x0) returned 1 [0039.066] MoveFileW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolBMPs\\InformationIcon.jpg" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\toolbmps\\informationicon.jpg"), lpNewFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolBMPs\\InformationIcon.jpg" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\toolbmps\\informationicon.jpg")) returned 1 [0039.067] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolBMPs\\InformationIconMask.bmp" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\toolbmps\\informationiconmask.bmp"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x274 [0039.067] GetFileType (hFile=0x274) returned 0x1 [0039.067] GetFileType (hFile=0x274) returned 0x1 [0039.067] GetFileSize (in: hFile=0x274, lpFileSizeHigh=0x31e718 | out: lpFileSizeHigh=0x31e718*=0x0) returned 0x838 [0039.067] ReadFile (in: hFile=0x274, lpBuffer=0x27c1acc, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x31e6c4, lpOverlapped=0x0 | out: lpBuffer=0x27c1acc*, lpNumberOfBytesRead=0x31e6c4*=0x838, lpOverlapped=0x0) returned 1 [0039.084] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolBMPs\\InformationIconMask.bmp" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\toolbmps\\informationiconmask.bmp"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x274 [0039.084] GetFileType (hFile=0x274) returned 0x1 [0039.084] GetFileType (hFile=0x274) returned 0x1 [0039.084] WriteFile (in: hFile=0x274, lpBuffer=0x2812350*, nNumberOfBytesToWrite=0x840, lpNumberOfBytesWritten=0x31e68c, lpOverlapped=0x0 | out: lpBuffer=0x2812350*, lpNumberOfBytesWritten=0x31e68c*=0x840, lpOverlapped=0x0) returned 1 [0039.087] MoveFileW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolBMPs\\InformationIconMask.bmp" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\toolbmps\\informationiconmask.bmp"), lpNewFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolBMPs\\InformationIconMask.bmp" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\toolbmps\\informationiconmask.bmp")) returned 1 [0039.088] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolBMPs\\LoginDialogBackground.jpg" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\toolbmps\\logindialogbackground.jpg"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x274 [0039.088] GetFileType (hFile=0x274) returned 0x1 [0039.088] GetFileType (hFile=0x274) returned 0x1 [0039.088] GetFileSize (in: hFile=0x274, lpFileSizeHigh=0x31e718 | out: lpFileSizeHigh=0x31e718*=0x0) returned 0xceed [0039.088] ReadFile (in: hFile=0x274, lpBuffer=0x2813630, nNumberOfBytesToRead=0xceed, lpNumberOfBytesRead=0x31e6c4, lpOverlapped=0x0 | out: lpBuffer=0x2813630*, lpNumberOfBytesRead=0x31e6c4*=0xceed, lpOverlapped=0x0) returned 1 [0039.106] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolBMPs\\LoginDialogBackground.jpg" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\toolbmps\\logindialogbackground.jpg"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x274 [0039.107] GetFileType (hFile=0x274) returned 0x1 [0039.108] GetFileType (hFile=0x274) returned 0x1 [0039.108] WriteFile (in: hFile=0x274, lpBuffer=0x268defc*, nNumberOfBytesToWrite=0xcef0, lpNumberOfBytesWritten=0x31e6b8, lpOverlapped=0x0 | out: lpBuffer=0x268defc*, lpNumberOfBytesWritten=0x31e6b8*=0xcef0, lpOverlapped=0x0) returned 1 [0039.109] MoveFileW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolBMPs\\LoginDialogBackground.jpg" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\toolbmps\\logindialogbackground.jpg"), lpNewFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolBMPs\\LoginDialogBackground.jpg" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\toolbmps\\logindialogbackground.jpg")) returned 1 [0039.111] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolBMPs\\LoginTool24x24Images.jpg" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\toolbmps\\logintool24x24images.jpg"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x274 [0039.111] GetFileType (hFile=0x274) returned 0x1 [0039.111] GetFileType (hFile=0x274) returned 0x1 [0039.111] GetFileSize (in: hFile=0x274, lpFileSizeHigh=0x31e718 | out: lpFileSizeHigh=0x31e718*=0x0) returned 0x1e93 [0039.111] ReadFile (in: hFile=0x274, lpBuffer=0x269b224, nNumberOfBytesToRead=0x1e93, lpNumberOfBytesRead=0x31e6c4, lpOverlapped=0x0 | out: lpBuffer=0x269b224*, lpNumberOfBytesRead=0x31e6c4*=0x1e93, lpOverlapped=0x0) returned 1 [0039.128] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolBMPs\\LoginTool24x24Images.jpg" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\toolbmps\\logintool24x24images.jpg"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x274 [0039.128] GetFileType (hFile=0x274) returned 0x1 [0039.128] GetFileType (hFile=0x274) returned 0x1 [0039.128] WriteFile (in: hFile=0x274, lpBuffer=0x26f1a88*, nNumberOfBytesToWrite=0x1ea0, lpNumberOfBytesWritten=0x31e6b8, lpOverlapped=0x0 | out: lpBuffer=0x26f1a88*, lpNumberOfBytesWritten=0x31e6b8*=0x1ea0, lpOverlapped=0x0) returned 1 [0039.129] MoveFileW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolBMPs\\LoginTool24x24Images.jpg" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\toolbmps\\logintool24x24images.jpg"), lpNewFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolBMPs\\LoginTool24x24Images.jpg" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\toolbmps\\logintool24x24images.jpg")) returned 1 [0039.130] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolBMPs\\LoginTool24x24ImagesMask.bmp" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\toolbmps\\logintool24x24imagesmask.bmp"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x274 [0039.131] GetFileType (hFile=0x274) returned 0x1 [0039.131] GetFileType (hFile=0x274) returned 0x1 [0039.131] GetFileSize (in: hFile=0x274, lpFileSizeHigh=0x31e718 | out: lpFileSizeHigh=0x31e718*=0x0) returned 0xaf8 [0039.132] ReadFile (in: hFile=0x274, lpBuffer=0x26f4868, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x31e6c4, lpOverlapped=0x0 | out: lpBuffer=0x26f4868*, lpNumberOfBytesRead=0x31e6c4*=0xaf8, lpOverlapped=0x0) returned 1 [0039.146] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolBMPs\\LoginTool24x24ImagesMask.bmp" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\toolbmps\\logintool24x24imagesmask.bmp"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x274 [0039.147] GetFileType (hFile=0x274) returned 0x1 [0039.147] GetFileType (hFile=0x274) returned 0x1 [0039.148] MoveFileW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolBMPs\\LoginTool24x24ImagesMask.bmp" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\toolbmps\\logintool24x24imagesmask.bmp"), lpNewFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolBMPs\\LoginTool24x24ImagesMask.bmp" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\toolbmps\\logintool24x24imagesmask.bmp")) returned 1 [0039.148] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolBMPs\\MessageAttachmentIconImages.jpg" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\toolbmps\\messageattachmenticonimages.jpg"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x274 [0039.148] GetFileType (hFile=0x274) returned 0x1 [0039.148] GetFileType (hFile=0x274) returned 0x1 [0039.149] GetFileSize (in: hFile=0x274, lpFileSizeHigh=0x31e718 | out: lpFileSizeHigh=0x31e718*=0x0) returned 0x25e5 [0039.149] ReadFile (in: hFile=0x274, lpBuffer=0x27471c8, nNumberOfBytesToRead=0x25e5, lpNumberOfBytesRead=0x31e6c4, lpOverlapped=0x0 | out: lpBuffer=0x27471c8*, lpNumberOfBytesRead=0x31e6c4*=0x25e5, lpOverlapped=0x0) returned 1 [0039.163] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolBMPs\\MessageAttachmentIconImages.jpg" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\toolbmps\\messageattachmenticonimages.jpg"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x274 [0039.164] GetFileType (hFile=0x274) returned 0x1 [0039.164] GetFileType (hFile=0x274) returned 0x1 [0039.164] WriteFile (in: hFile=0x274, lpBuffer=0x279fd60*, nNumberOfBytesToWrite=0x25f0, lpNumberOfBytesWritten=0x31e6b8, lpOverlapped=0x0 | out: lpBuffer=0x279fd60*, lpNumberOfBytesWritten=0x31e6b8*=0x25f0, lpOverlapped=0x0) returned 1 [0039.165] MoveFileW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolBMPs\\MessageAttachmentIconImages.jpg" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\toolbmps\\messageattachmenticonimages.jpg"), lpNewFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolBMPs\\MessageAttachmentIconImages.jpg" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\toolbmps\\messageattachmenticonimages.jpg")) returned 1 [0039.166] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolBMPs\\MessageAttachmentIconImagesMask.bmp" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\toolbmps\\messageattachmenticonimagesmask.bmp"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x274 [0039.167] GetFileType (hFile=0x274) returned 0x1 [0039.167] GetFileType (hFile=0x274) returned 0x1 [0039.167] GetFileSize (in: hFile=0x274, lpFileSizeHigh=0x31e718 | out: lpFileSizeHigh=0x31e718*=0x0) returned 0x838 [0039.167] ReadFile (in: hFile=0x274, lpBuffer=0x27a3028, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x31e6c4, lpOverlapped=0x0 | out: lpBuffer=0x27a3028*, lpNumberOfBytesRead=0x31e6c4*=0x838, lpOverlapped=0x0) returned 1 [0039.182] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolBMPs\\MessageAttachmentIconImagesMask.bmp" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\toolbmps\\messageattachmenticonimagesmask.bmp"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x274 [0039.183] GetFileType (hFile=0x274) returned 0x1 [0039.183] GetFileType (hFile=0x274) returned 0x1 [0039.184] MoveFileW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolBMPs\\MessageAttachmentIconImagesMask.bmp" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\toolbmps\\messageattachmenticonimagesmask.bmp"), lpNewFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolBMPs\\MessageAttachmentIconImagesMask.bmp" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\toolbmps\\messageattachmenticonimagesmask.bmp")) returned 1 [0039.184] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolBMPs\\MessageHistoryIconImages.jpg" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\toolbmps\\messagehistoryiconimages.jpg"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x274 [0039.185] GetFileType (hFile=0x274) returned 0x1 [0039.185] GetFileType (hFile=0x274) returned 0x1 [0039.185] GetFileSize (in: hFile=0x274, lpFileSizeHigh=0x31e718 | out: lpFileSizeHigh=0x31e718*=0x0) returned 0x22f6 [0039.185] ReadFile (in: hFile=0x274, lpBuffer=0x27f4bf8, nNumberOfBytesToRead=0x22f6, lpNumberOfBytesRead=0x31e6c4, lpOverlapped=0x0 | out: lpBuffer=0x27f4bf8*, lpNumberOfBytesRead=0x31e6c4*=0x22f6, lpOverlapped=0x0) returned 1 [0039.201] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolBMPs\\MessageHistoryIconImages.jpg" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\toolbmps\\messagehistoryiconimages.jpg"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x274 [0039.202] GetFileType (hFile=0x274) returned 0x1 [0039.202] GetFileType (hFile=0x274) returned 0x1 [0039.202] WriteFile (in: hFile=0x274, lpBuffer=0x284c8e0*, nNumberOfBytesToWrite=0x2300, lpNumberOfBytesWritten=0x31e6b8, lpOverlapped=0x0 | out: lpBuffer=0x284c8e0*, lpNumberOfBytesWritten=0x31e6b8*=0x2300, lpOverlapped=0x0) returned 1 [0039.203] MoveFileW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolBMPs\\MessageHistoryIconImages.jpg" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\toolbmps\\messagehistoryiconimages.jpg"), lpNewFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolBMPs\\MessageHistoryIconImages.jpg" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\toolbmps\\messagehistoryiconimages.jpg")) returned 1 [0039.204] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolBMPs\\MessageHistoryIconImagesMask.bmp" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\toolbmps\\messagehistoryiconimagesmask.bmp"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x274 [0039.204] GetFileType (hFile=0x274) returned 0x1 [0039.204] GetFileType (hFile=0x274) returned 0x1 [0039.204] GetFileSize (in: hFile=0x274, lpFileSizeHigh=0x31e718 | out: lpFileSizeHigh=0x31e718*=0x0) returned 0x140 [0039.204] ReadFile (in: hFile=0x274, lpBuffer=0x284f198, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x31e6c4, lpOverlapped=0x0 | out: lpBuffer=0x284f198*, lpNumberOfBytesRead=0x31e6c4*=0x140, lpOverlapped=0x0) returned 1 [0039.220] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolBMPs\\MessageHistoryIconImagesMask.bmp" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\toolbmps\\messagehistoryiconimagesmask.bmp"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x274 [0039.221] GetFileType (hFile=0x274) returned 0x1 [0039.221] GetFileType (hFile=0x274) returned 0x1 [0039.222] MoveFileW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolBMPs\\MessageHistoryIconImagesMask.bmp" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\toolbmps\\messagehistoryiconimagesmask.bmp"), lpNewFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolBMPs\\MessageHistoryIconImagesMask.bmp" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\toolbmps\\messagehistoryiconimagesmask.bmp")) returned 1 [0039.222] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolBMPs\\NotifierBackground.jpg" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\toolbmps\\notifierbackground.jpg"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x274 [0039.223] GetFileType (hFile=0x274) returned 0x1 [0039.223] GetFileType (hFile=0x274) returned 0x1 [0039.223] GetFileSize (in: hFile=0x274, lpFileSizeHigh=0x31e718 | out: lpFileSizeHigh=0x31e718*=0x0) returned 0x3efd [0039.223] ReadFile (in: hFile=0x274, lpBuffer=0x2691c90, nNumberOfBytesToRead=0x3efd, lpNumberOfBytesRead=0x31e6c4, lpOverlapped=0x0 | out: lpBuffer=0x2691c90*, lpNumberOfBytesRead=0x31e6c4*=0x3efd, lpOverlapped=0x0) returned 1 [0039.247] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolBMPs\\NotifierBackground.jpg" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\toolbmps\\notifierbackground.jpg"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x274 [0039.248] GetFileType (hFile=0x274) returned 0x1 [0039.248] GetFileType (hFile=0x274) returned 0x1 [0039.248] WriteFile (in: hFile=0x274, lpBuffer=0x26f26d4*, nNumberOfBytesToWrite=0x3f00, lpNumberOfBytesWritten=0x31e6b8, lpOverlapped=0x0 | out: lpBuffer=0x26f26d4*, lpNumberOfBytesWritten=0x31e6b8*=0x3f00, lpOverlapped=0x0) returned 1 [0039.249] MoveFileW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolBMPs\\NotifierBackground.jpg" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\toolbmps\\notifierbackground.jpg"), lpNewFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolBMPs\\NotifierBackground.jpg" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\toolbmps\\notifierbackground.jpg")) returned 1 [0039.250] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolBMPs\\NotifierBackgroundRTL.jpg" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\toolbmps\\notifierbackgroundrtl.jpg"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x274 [0039.250] GetFileType (hFile=0x274) returned 0x1 [0039.250] GetFileType (hFile=0x274) returned 0x1 [0039.250] GetFileSize (in: hFile=0x274, lpFileSizeHigh=0x31e718 | out: lpFileSizeHigh=0x31e718*=0x0) returned 0x40aa [0039.250] ReadFile (in: hFile=0x274, lpBuffer=0x26f69f4, nNumberOfBytesToRead=0x40aa, lpNumberOfBytesRead=0x31e6c4, lpOverlapped=0x0 | out: lpBuffer=0x26f69f4*, lpNumberOfBytesRead=0x31e6c4*=0x40aa, lpOverlapped=0x0) returned 1 [0039.266] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolBMPs\\NotifierBackgroundRTL.jpg" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\toolbmps\\notifierbackgroundrtl.jpg"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x274 [0039.267] GetFileType (hFile=0x274) returned 0x1 [0039.267] GetFileType (hFile=0x274) returned 0x1 [0039.267] WriteFile (in: hFile=0x274, lpBuffer=0x2757b4c*, nNumberOfBytesToWrite=0x40b0, lpNumberOfBytesWritten=0x31e6b8, lpOverlapped=0x0 | out: lpBuffer=0x2757b4c*, lpNumberOfBytesWritten=0x31e6b8*=0x40b0, lpOverlapped=0x0) returned 1 [0039.268] MoveFileW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolBMPs\\NotifierBackgroundRTL.jpg" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\toolbmps\\notifierbackgroundrtl.jpg"), lpNewFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolBMPs\\NotifierBackgroundRTL.jpg" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\toolbmps\\notifierbackgroundrtl.jpg")) returned 1 [0039.269] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolBMPs\\NotifierCloseButton.jpg" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\toolbmps\\notifierclosebutton.jpg"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x274 [0039.272] GetFileType (hFile=0x274) returned 0x1 [0039.272] GetFileType (hFile=0x274) returned 0x1 [0039.272] GetFileSize (in: hFile=0x274, lpFileSizeHigh=0x31e718 | out: lpFileSizeHigh=0x31e718*=0x0) returned 0x2f2 [0039.272] ReadFile (in: hFile=0x274, lpBuffer=0x275c330, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x31e6c4, lpOverlapped=0x0 | out: lpBuffer=0x275c330*, lpNumberOfBytesRead=0x31e6c4*=0x2f2, lpOverlapped=0x0) returned 1 [0039.287] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolBMPs\\NotifierCloseButton.jpg" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\toolbmps\\notifierclosebutton.jpg"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x274 [0039.288] GetFileType (hFile=0x274) returned 0x1 [0039.288] GetFileType (hFile=0x274) returned 0x1 [0039.288] WriteFile (in: hFile=0x274, lpBuffer=0x27ab17c*, nNumberOfBytesToWrite=0x300, lpNumberOfBytesWritten=0x31e68c, lpOverlapped=0x0 | out: lpBuffer=0x27ab17c*, lpNumberOfBytesWritten=0x31e68c*=0x300, lpOverlapped=0x0) returned 1 [0039.288] MoveFileW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolBMPs\\NotifierCloseButton.jpg" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\toolbmps\\notifierclosebutton.jpg"), lpNewFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolBMPs\\NotifierCloseButton.jpg" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\toolbmps\\notifierclosebutton.jpg")) returned 1 [0039.289] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolBMPs\\NotifierDisableDownArrow.jpg" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\toolbmps\\notifierdisabledownarrow.jpg"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x274 [0039.289] GetFileType (hFile=0x274) returned 0x1 [0039.290] GetFileType (hFile=0x274) returned 0x1 [0039.290] GetFileSize (in: hFile=0x274, lpFileSizeHigh=0x31e718 | out: lpFileSizeHigh=0x31e718*=0x0) returned 0x2cc [0039.290] ReadFile (in: hFile=0x274, lpBuffer=0x27ac740, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x31e6c4, lpOverlapped=0x0 | out: lpBuffer=0x27ac740*, lpNumberOfBytesRead=0x31e6c4*=0x2cc, lpOverlapped=0x0) returned 1 [0039.304] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolBMPs\\NotifierDisableDownArrow.jpg" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\toolbmps\\notifierdisabledownarrow.jpg"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x274 [0039.305] GetFileType (hFile=0x274) returned 0x1 [0039.305] GetFileType (hFile=0x274) returned 0x1 [0039.305] WriteFile (in: hFile=0x274, lpBuffer=0x27fb4a4*, nNumberOfBytesToWrite=0x2d0, lpNumberOfBytesWritten=0x31e68c, lpOverlapped=0x0 | out: lpBuffer=0x27fb4a4*, lpNumberOfBytesWritten=0x31e68c*=0x2d0, lpOverlapped=0x0) returned 1 [0039.306] MoveFileW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolBMPs\\NotifierDisableDownArrow.jpg" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\toolbmps\\notifierdisabledownarrow.jpg"), lpNewFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolBMPs\\NotifierDisableDownArrow.jpg" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\toolbmps\\notifierdisabledownarrow.jpg")) returned 1 [0039.307] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolBMPs\\NotifierDisableUpArrow.jpg" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\toolbmps\\notifierdisableuparrow.jpg"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x274 [0039.307] GetFileType (hFile=0x274) returned 0x1 [0039.307] GetFileType (hFile=0x274) returned 0x1 [0039.307] GetFileSize (in: hFile=0x274, lpFileSizeHigh=0x31e718 | out: lpFileSizeHigh=0x31e718*=0x0) returned 0x307 [0039.307] ReadFile (in: hFile=0x274, lpBuffer=0x27fcaac, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x31e6c4, lpOverlapped=0x0 | out: lpBuffer=0x27fcaac*, lpNumberOfBytesRead=0x31e6c4*=0x307, lpOverlapped=0x0) returned 1 [0039.323] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolBMPs\\NotifierDisableUpArrow.jpg" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\toolbmps\\notifierdisableuparrow.jpg"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x274 [0039.323] GetFileType (hFile=0x274) returned 0x1 [0039.324] GetFileType (hFile=0x274) returned 0x1 [0039.324] MoveFileW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolBMPs\\NotifierDisableUpArrow.jpg" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\toolbmps\\notifierdisableuparrow.jpg"), lpNewFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolBMPs\\NotifierDisableUpArrow.jpg" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\toolbmps\\notifierdisableuparrow.jpg")) returned 1 [0039.325] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolBMPs\\NotifierDownArrow.jpg" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\toolbmps\\notifierdownarrow.jpg"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x274 [0039.325] GetFileType (hFile=0x274) returned 0x1 [0039.325] GetFileType (hFile=0x274) returned 0x1 [0039.325] GetFileSize (in: hFile=0x274, lpFileSizeHigh=0x31e718 | out: lpFileSizeHigh=0x31e718*=0x0) returned 0x368 [0039.325] ReadFile (in: hFile=0x274, lpBuffer=0x284cf9c, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x31e6c4, lpOverlapped=0x0 | out: lpBuffer=0x284cf9c*, lpNumberOfBytesRead=0x31e6c4*=0x368, lpOverlapped=0x0) returned 1 [0039.341] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolBMPs\\NotifierDownArrow.jpg" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\toolbmps\\notifierdownarrow.jpg"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x274 [0039.342] GetFileType (hFile=0x274) returned 0x1 [0039.342] GetFileType (hFile=0x274) returned 0x1 [0039.344] MoveFileW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolBMPs\\NotifierDownArrow.jpg" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\toolbmps\\notifierdownarrow.jpg"), lpNewFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolBMPs\\NotifierDownArrow.jpg" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\toolbmps\\notifierdownarrow.jpg")) returned 1 [0039.344] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolBMPs\\NotifierUpArrow.jpg" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\toolbmps\\notifieruparrow.jpg"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x274 [0039.344] GetFileType (hFile=0x274) returned 0x1 [0039.344] GetFileType (hFile=0x274) returned 0x1 [0039.344] GetFileSize (in: hFile=0x274, lpFileSizeHigh=0x31e718 | out: lpFileSizeHigh=0x31e718*=0x0) returned 0x3c0 [0039.344] ReadFile (in: hFile=0x274, lpBuffer=0x269d8a8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x31e6c4, lpOverlapped=0x0 | out: lpBuffer=0x269d8a8*, lpNumberOfBytesRead=0x31e6c4*=0x3c0, lpOverlapped=0x0) returned 1 [0039.359] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolBMPs\\NotifierUpArrow.jpg" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\toolbmps\\notifieruparrow.jpg"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x274 [0039.360] GetFileType (hFile=0x274) returned 0x1 [0039.360] GetFileType (hFile=0x274) returned 0x1 [0039.360] WriteFile (in: hFile=0x274, lpBuffer=0x26ecc50*, nNumberOfBytesToWrite=0x3d0, lpNumberOfBytesWritten=0x31e68c, lpOverlapped=0x0 | out: lpBuffer=0x26ecc50*, lpNumberOfBytesWritten=0x31e68c*=0x3d0, lpOverlapped=0x0) returned 1 [0039.361] MoveFileW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolBMPs\\NotifierUpArrow.jpg" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\toolbmps\\notifieruparrow.jpg"), lpNewFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolBMPs\\NotifierUpArrow.jpg" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\toolbmps\\notifieruparrow.jpg")) returned 1 [0039.362] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolBMPs\\NotifierWindowMask.bmp" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\toolbmps\\notifierwindowmask.bmp"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x274 [0039.363] GetFileType (hFile=0x274) returned 0x1 [0039.363] GetFileType (hFile=0x274) returned 0x1 [0039.363] GetFileSize (in: hFile=0x274, lpFileSizeHigh=0x31e718 | out: lpFileSizeHigh=0x31e718*=0x0) returned 0x133a [0039.363] ReadFile (in: hFile=0x274, lpBuffer=0x26edf14, nNumberOfBytesToRead=0x133a, lpNumberOfBytesRead=0x31e6c4, lpOverlapped=0x0 | out: lpBuffer=0x26edf14*, lpNumberOfBytesRead=0x31e6c4*=0x133a, lpOverlapped=0x0) returned 1 [0039.380] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolBMPs\\NotifierWindowMask.bmp" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\toolbmps\\notifierwindowmask.bmp"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x274 [0039.381] GetFileType (hFile=0x274) returned 0x1 [0039.381] GetFileType (hFile=0x274) returned 0x1 [0039.381] WriteFile (in: hFile=0x274, lpBuffer=0x2740d3c*, nNumberOfBytesToWrite=0x1340, lpNumberOfBytesWritten=0x31e6b8, lpOverlapped=0x0 | out: lpBuffer=0x2740d3c*, lpNumberOfBytesWritten=0x31e6b8*=0x1340, lpOverlapped=0x0) returned 1 [0039.382] MoveFileW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolBMPs\\NotifierWindowMask.bmp" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\toolbmps\\notifierwindowmask.bmp"), lpNewFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolBMPs\\NotifierWindowMask.bmp" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\toolbmps\\notifierwindowmask.bmp")) returned 1 [0039.383] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolBMPs\\NotifierWindowMaskRTL.bmp" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\toolbmps\\notifierwindowmaskrtl.bmp"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x274 [0039.384] GetFileType (hFile=0x274) returned 0x1 [0039.384] GetFileType (hFile=0x274) returned 0x1 [0039.384] GetFileSize (in: hFile=0x274, lpFileSizeHigh=0x31e718 | out: lpFileSizeHigh=0x31e718*=0x0) returned 0x133a [0039.384] ReadFile (in: hFile=0x274, lpBuffer=0x274249c, nNumberOfBytesToRead=0x133a, lpNumberOfBytesRead=0x31e6c4, lpOverlapped=0x0 | out: lpBuffer=0x274249c*, lpNumberOfBytesRead=0x31e6c4*=0x133a, lpOverlapped=0x0) returned 1 [0039.400] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolBMPs\\NotifierWindowMaskRTL.bmp" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\toolbmps\\notifierwindowmaskrtl.bmp"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x274 [0039.400] GetFileType (hFile=0x274) returned 0x1 [0039.400] GetFileType (hFile=0x274) returned 0x1 [0039.400] WriteFile (in: hFile=0x274, lpBuffer=0x27952c4*, nNumberOfBytesToWrite=0x1340, lpNumberOfBytesWritten=0x31e6b8, lpOverlapped=0x0 | out: lpBuffer=0x27952c4*, lpNumberOfBytesWritten=0x31e6b8*=0x1340, lpOverlapped=0x0) returned 1 [0039.401] MoveFileW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolBMPs\\NotifierWindowMaskRTL.bmp" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\toolbmps\\notifierwindowmaskrtl.bmp"), lpNewFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolBMPs\\NotifierWindowMaskRTL.bmp" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\toolbmps\\notifierwindowmaskrtl.bmp")) returned 1 [0039.402] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolBMPs\\OutlineToolIconImages.jpg" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\toolbmps\\outlinetooliconimages.jpg"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x274 [0039.403] GetFileType (hFile=0x274) returned 0x1 [0039.403] GetFileType (hFile=0x274) returned 0x1 [0039.403] GetFileSize (in: hFile=0x274, lpFileSizeHigh=0x31e718 | out: lpFileSizeHigh=0x31e718*=0x0) returned 0x1e35 [0039.403] ReadFile (in: hFile=0x274, lpBuffer=0x2796a40, nNumberOfBytesToRead=0x1e35, lpNumberOfBytesRead=0x31e6c4, lpOverlapped=0x0 | out: lpBuffer=0x2796a40*, lpNumberOfBytesRead=0x31e6c4*=0x1e35, lpOverlapped=0x0) returned 1 [0039.418] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolBMPs\\OutlineToolIconImages.jpg" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\toolbmps\\outlinetooliconimages.jpg"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x274 [0039.419] GetFileType (hFile=0x274) returned 0x1 [0039.419] GetFileType (hFile=0x274) returned 0x1 [0039.419] WriteFile (in: hFile=0x274, lpBuffer=0x27ecf68*, nNumberOfBytesToWrite=0x1e40, lpNumberOfBytesWritten=0x31e6b8, lpOverlapped=0x0 | out: lpBuffer=0x27ecf68*, lpNumberOfBytesWritten=0x31e6b8*=0x1e40, lpOverlapped=0x0) returned 1 [0039.420] MoveFileW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolBMPs\\OutlineToolIconImages.jpg" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\toolbmps\\outlinetooliconimages.jpg"), lpNewFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolBMPs\\OutlineToolIconImages.jpg" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\toolbmps\\outlinetooliconimages.jpg")) returned 1 [0039.422] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolBMPs\\OutlineToolIconImagesMask.bmp" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\toolbmps\\outlinetooliconimagesmask.bmp"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x274 [0039.422] GetFileType (hFile=0x274) returned 0x1 [0039.422] GetFileType (hFile=0x274) returned 0x1 [0039.422] GetFileSize (in: hFile=0x274, lpFileSizeHigh=0x31e718 | out: lpFileSizeHigh=0x31e718*=0x0) returned 0x1938 [0039.422] ReadFile (in: hFile=0x274, lpBuffer=0x27ef1f4, nNumberOfBytesToRead=0x1938, lpNumberOfBytesRead=0x31e6c4, lpOverlapped=0x0 | out: lpBuffer=0x27ef1f4*, lpNumberOfBytesRead=0x31e6c4*=0x1938, lpOverlapped=0x0) returned 1 [0039.438] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolBMPs\\OutlineToolIconImagesMask.bmp" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\toolbmps\\outlinetooliconimagesmask.bmp"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x274 [0039.439] GetFileType (hFile=0x274) returned 0x1 [0039.439] GetFileType (hFile=0x274) returned 0x1 [0039.439] WriteFile (in: hFile=0x274, lpBuffer=0x2843e18*, nNumberOfBytesToWrite=0x1940, lpNumberOfBytesWritten=0x31e6b8, lpOverlapped=0x0 | out: lpBuffer=0x2843e18*, lpNumberOfBytesWritten=0x31e6b8*=0x1940, lpOverlapped=0x0) returned 1 [0039.440] MoveFileW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolBMPs\\OutlineToolIconImagesMask.bmp" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\toolbmps\\outlinetooliconimagesmask.bmp"), lpNewFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolBMPs\\OutlineToolIconImagesMask.bmp" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\toolbmps\\outlinetooliconimagesmask.bmp")) returned 1 [0039.441] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolBMPs\\OutofSyncIconImages.jpg" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\toolbmps\\outofsynciconimages.jpg"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x274 [0039.442] GetFileType (hFile=0x274) returned 0x1 [0039.442] GetFileType (hFile=0x274) returned 0x1 [0039.442] GetFileSize (in: hFile=0x274, lpFileSizeHigh=0x31e718 | out: lpFileSizeHigh=0x31e718*=0x0) returned 0xf8d [0039.442] ReadFile (in: hFile=0x274, lpBuffer=0x2846b48, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x31e6c4, lpOverlapped=0x0 | out: lpBuffer=0x2846b48*, lpNumberOfBytesRead=0x31e6c4*=0xf8d, lpOverlapped=0x0) returned 1 [0039.459] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolBMPs\\OutofSyncIconImages.jpg" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\toolbmps\\outofsynciconimages.jpg"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x274 [0039.460] GetFileType (hFile=0x274) returned 0x1 [0039.460] GetFileType (hFile=0x274) returned 0x1 [0039.460] WriteFile (in: hFile=0x274, lpBuffer=0x269a474*, nNumberOfBytesToWrite=0xf90, lpNumberOfBytesWritten=0x31e68c, lpOverlapped=0x0 | out: lpBuffer=0x269a474*, lpNumberOfBytesWritten=0x31e68c*=0xf90, lpOverlapped=0x0) returned 1 [0039.461] MoveFileW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolBMPs\\OutofSyncIconImages.jpg" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\toolbmps\\outofsynciconimages.jpg"), lpNewFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolBMPs\\OutofSyncIconImages.jpg" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\toolbmps\\outofsynciconimages.jpg")) returned 1 [0039.462] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolBMPs\\OutofSyncIconImagesMask.bmp" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\toolbmps\\outofsynciconimagesmask.bmp"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x274 [0039.463] GetFileType (hFile=0x274) returned 0x1 [0039.463] GetFileType (hFile=0x274) returned 0x1 [0039.463] GetFileSize (in: hFile=0x274, lpFileSizeHigh=0x31e718 | out: lpFileSizeHigh=0x31e718*=0x0) returned 0xc0 [0039.463] ReadFile (in: hFile=0x274, lpBuffer=0x269b828, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x31e6c4, lpOverlapped=0x0 | out: lpBuffer=0x269b828*, lpNumberOfBytesRead=0x31e6c4*=0xc0, lpOverlapped=0x0) returned 1 [0039.477] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolBMPs\\OutofSyncIconImagesMask.bmp" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\toolbmps\\outofsynciconimagesmask.bmp"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x274 [0039.478] GetFileType (hFile=0x274) returned 0x1 [0039.478] GetFileType (hFile=0x274) returned 0x1 [0039.478] WriteFile (in: hFile=0x274, lpBuffer=0x26e9ba4*, nNumberOfBytesToWrite=0xd0, lpNumberOfBytesWritten=0x31e68c, lpOverlapped=0x0 | out: lpBuffer=0x26e9ba4*, lpNumberOfBytesWritten=0x31e68c*=0xd0, lpOverlapped=0x0) returned 1 [0039.479] MoveFileW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolBMPs\\OutofSyncIconImagesMask.bmp" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\toolbmps\\outofsynciconimagesmask.bmp"), lpNewFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolBMPs\\OutofSyncIconImagesMask.bmp" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\toolbmps\\outofsynciconimagesmask.bmp")) returned 1 [0039.480] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolBMPs\\PicturesToolIconImages.jpg" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\toolbmps\\picturestooliconimages.jpg"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x274 [0039.481] GetFileType (hFile=0x274) returned 0x1 [0039.481] GetFileType (hFile=0x274) returned 0x1 [0039.481] GetFileSize (in: hFile=0x274, lpFileSizeHigh=0x31e718 | out: lpFileSizeHigh=0x31e718*=0x0) returned 0x5203 [0039.481] ReadFile (in: hFile=0x274, lpBuffer=0x26eae98, nNumberOfBytesToRead=0x5203, lpNumberOfBytesRead=0x31e6c4, lpOverlapped=0x0 | out: lpBuffer=0x26eae98*, lpNumberOfBytesRead=0x31e6c4*=0x5203, lpOverlapped=0x0) returned 1 [0039.685] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolBMPs\\PicturesToolIconImages.jpg" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\toolbmps\\picturestooliconimages.jpg"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x274 [0039.686] GetFileType (hFile=0x274) returned 0x1 [0039.686] GetFileType (hFile=0x274) returned 0x1 [0039.686] WriteFile (in: hFile=0x274, lpBuffer=0x27516d0*, nNumberOfBytesToWrite=0x5210, lpNumberOfBytesWritten=0x31e6b8, lpOverlapped=0x0 | out: lpBuffer=0x27516d0*, lpNumberOfBytesWritten=0x31e6b8*=0x5210, lpOverlapped=0x0) returned 1 [0039.698] MoveFileW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolBMPs\\PicturesToolIconImages.jpg" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\toolbmps\\picturestooliconimages.jpg"), lpNewFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolBMPs\\PicturesToolIconImages.jpg" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\toolbmps\\picturestooliconimages.jpg")) returned 1 [0039.700] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolBMPs\\PicturesToolIconImagesMask.bmp" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\toolbmps\\picturestooliconimagesmask.bmp"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x274 [0039.701] GetFileType (hFile=0x274) returned 0x1 [0039.701] GetFileType (hFile=0x274) returned 0x1 [0039.701] GetFileSize (in: hFile=0x274, lpFileSizeHigh=0x31e718 | out: lpFileSizeHigh=0x31e718*=0x0) returned 0x1238 [0039.701] ReadFile (in: hFile=0x274, lpBuffer=0x2756d34, nNumberOfBytesToRead=0x1238, lpNumberOfBytesRead=0x31e6c4, lpOverlapped=0x0 | out: lpBuffer=0x2756d34*, lpNumberOfBytesRead=0x31e6c4*=0x1238, lpOverlapped=0x0) returned 1 [0039.720] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolBMPs\\PicturesToolIconImagesMask.bmp" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\toolbmps\\picturestooliconimagesmask.bmp"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x274 [0039.721] GetFileType (hFile=0x274) returned 0x1 [0039.721] GetFileType (hFile=0x274) returned 0x1 [0039.721] WriteFile (in: hFile=0x274, lpBuffer=0x27a9658*, nNumberOfBytesToWrite=0x1240, lpNumberOfBytesWritten=0x31e6b8, lpOverlapped=0x0 | out: lpBuffer=0x27a9658*, lpNumberOfBytesWritten=0x31e6b8*=0x1240, lpOverlapped=0x0) returned 1 [0039.722] MoveFileW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolBMPs\\PicturesToolIconImagesMask.bmp" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\toolbmps\\picturestooliconimagesmask.bmp"), lpNewFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolBMPs\\PicturesToolIconImagesMask.bmp" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\toolbmps\\picturestooliconimagesmask.bmp")) returned 1 [0039.723] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolBMPs\\QuestionIcon.jpg" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\toolbmps\\questionicon.jpg"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x274 [0039.724] GetFileType (hFile=0x274) returned 0x1 [0039.724] GetFileType (hFile=0x274) returned 0x1 [0039.724] GetFileSize (in: hFile=0x274, lpFileSizeHigh=0x31e718 | out: lpFileSizeHigh=0x31e718*=0x0) returned 0xc1b [0039.724] ReadFile (in: hFile=0x274, lpBuffer=0x27ab8fc, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x31e6c4, lpOverlapped=0x0 | out: lpBuffer=0x27ab8fc*, lpNumberOfBytesRead=0x31e6c4*=0xc1b, lpOverlapped=0x0) returned 1 [0039.739] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolBMPs\\QuestionIcon.jpg" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\toolbmps\\questionicon.jpg"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x274 [0039.740] GetFileType (hFile=0x274) returned 0x1 [0039.740] GetFileType (hFile=0x274) returned 0x1 [0039.740] WriteFile (in: hFile=0x274, lpBuffer=0x27fd4c4*, nNumberOfBytesToWrite=0xc20, lpNumberOfBytesWritten=0x31e68c, lpOverlapped=0x0 | out: lpBuffer=0x27fd4c4*, lpNumberOfBytesWritten=0x31e68c*=0xc20, lpOverlapped=0x0) returned 1 [0039.741] MoveFileW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolBMPs\\QuestionIcon.jpg" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\toolbmps\\questionicon.jpg"), lpNewFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolBMPs\\QuestionIcon.jpg" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\toolbmps\\questionicon.jpg")) returned 1 [0039.742] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolBMPs\\QuestionIconMask.bmp" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\toolbmps\\questioniconmask.bmp"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x274 [0039.742] GetFileType (hFile=0x274) returned 0x1 [0039.742] GetFileType (hFile=0x274) returned 0x1 [0039.743] GetFileSize (in: hFile=0x274, lpFileSizeHigh=0x31e718 | out: lpFileSizeHigh=0x31e718*=0x0) returned 0x838 [0039.743] ReadFile (in: hFile=0x274, lpBuffer=0x27fefb4, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x31e6c4, lpOverlapped=0x0 | out: lpBuffer=0x27fefb4*, lpNumberOfBytesRead=0x31e6c4*=0x838, lpOverlapped=0x0) returned 1 [0039.757] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolBMPs\\QuestionIconMask.bmp" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\toolbmps\\questioniconmask.bmp"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x274 [0039.758] GetFileType (hFile=0x274) returned 0x1 [0039.758] GetFileType (hFile=0x274) returned 0x1 [0039.763] MoveFileW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolBMPs\\QuestionIconMask.bmp" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\toolbmps\\questioniconmask.bmp"), lpNewFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolBMPs\\QuestionIconMask.bmp" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\toolbmps\\questioniconmask.bmp")) returned 1 [0039.764] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolBMPs\\Shared16x16Images.jpg" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\toolbmps\\shared16x16images.jpg"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x274 [0039.765] GetFileType (hFile=0x274) returned 0x1 [0039.765] GetFileType (hFile=0x274) returned 0x1 [0039.765] GetFileSize (in: hFile=0x274, lpFileSizeHigh=0x31e718 | out: lpFileSizeHigh=0x31e718*=0x0) returned 0x64fa [0039.765] ReadFile (in: hFile=0x274, lpBuffer=0x265096c, nNumberOfBytesToRead=0x64fa, lpNumberOfBytesRead=0x31e6c4, lpOverlapped=0x0 | out: lpBuffer=0x265096c*, lpNumberOfBytesRead=0x31e6c4*=0x64fa, lpOverlapped=0x0) returned 1 [0039.780] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolBMPs\\Shared16x16Images.jpg" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\toolbmps\\shared16x16images.jpg"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x274 [0039.781] GetFileType (hFile=0x274) returned 0x1 [0039.781] GetFileType (hFile=0x274) returned 0x1 [0039.781] WriteFile (in: hFile=0x274, lpBuffer=0x26bd1b0*, nNumberOfBytesToWrite=0x6500, lpNumberOfBytesWritten=0x31e6b8, lpOverlapped=0x0 | out: lpBuffer=0x26bd1b0*, lpNumberOfBytesWritten=0x31e6b8*=0x6500, lpOverlapped=0x0) returned 1 [0039.783] MoveFileW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolBMPs\\Shared16x16Images.jpg" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\toolbmps\\shared16x16images.jpg"), lpNewFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolBMPs\\Shared16x16Images.jpg" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\toolbmps\\shared16x16images.jpg")) returned 1 [0039.784] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolBMPs\\Shared16x16ImagesMask.bmp" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\toolbmps\\shared16x16imagesmask.bmp"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x274 [0039.784] GetFileType (hFile=0x274) returned 0x1 [0039.784] GetFileType (hFile=0x274) returned 0x1 [0039.784] GetFileSize (in: hFile=0x274, lpFileSizeHigh=0x31e718 | out: lpFileSizeHigh=0x31e718*=0x0) returned 0xf38 [0039.784] ReadFile (in: hFile=0x274, lpBuffer=0x26c4a10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x31e6c4, lpOverlapped=0x0 | out: lpBuffer=0x26c4a10*, lpNumberOfBytesRead=0x31e6c4*=0xf38, lpOverlapped=0x0) returned 1 [0039.799] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolBMPs\\Shared16x16ImagesMask.bmp" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\toolbmps\\shared16x16imagesmask.bmp"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x274 [0039.800] GetFileType (hFile=0x274) returned 0x1 [0039.800] GetFileType (hFile=0x274) returned 0x1 [0039.800] WriteFile (in: hFile=0x274, lpBuffer=0x271759c*, nNumberOfBytesToWrite=0xf40, lpNumberOfBytesWritten=0x31e68c, lpOverlapped=0x0 | out: lpBuffer=0x271759c*, lpNumberOfBytesWritten=0x31e68c*=0xf40, lpOverlapped=0x0) returned 1 [0039.801] MoveFileW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolBMPs\\Shared16x16ImagesMask.bmp" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\toolbmps\\shared16x16imagesmask.bmp"), lpNewFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolBMPs\\Shared16x16ImagesMask.bmp" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\toolbmps\\shared16x16imagesmask.bmp")) returned 1 [0039.802] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolBMPs\\Shared24x24Images.jpg" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\toolbmps\\shared24x24images.jpg"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x274 [0039.802] GetFileType (hFile=0x274) returned 0x1 [0039.802] GetFileType (hFile=0x274) returned 0x1 [0039.802] GetFileSize (in: hFile=0x274, lpFileSizeHigh=0x31e718 | out: lpFileSizeHigh=0x31e718*=0x0) returned 0x1963 [0039.802] ReadFile (in: hFile=0x274, lpBuffer=0x2718874, nNumberOfBytesToRead=0x1963, lpNumberOfBytesRead=0x31e6c4, lpOverlapped=0x0 | out: lpBuffer=0x2718874*, lpNumberOfBytesRead=0x31e6c4*=0x1963, lpOverlapped=0x0) returned 1 [0039.817] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolBMPs\\Shared24x24Images.jpg" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\toolbmps\\shared24x24images.jpg"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x274 [0039.818] GetFileType (hFile=0x274) returned 0x1 [0039.818] GetFileType (hFile=0x274) returned 0x1 [0039.818] WriteFile (in: hFile=0x274, lpBuffer=0x276d58c*, nNumberOfBytesToWrite=0x1970, lpNumberOfBytesWritten=0x31e6b8, lpOverlapped=0x0 | out: lpBuffer=0x276d58c*, lpNumberOfBytesWritten=0x31e6b8*=0x1970, lpOverlapped=0x0) returned 1 [0039.819] MoveFileW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolBMPs\\Shared24x24Images.jpg" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\toolbmps\\shared24x24images.jpg"), lpNewFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolBMPs\\Shared24x24Images.jpg" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\toolbmps\\shared24x24images.jpg")) returned 1 [0039.820] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolBMPs\\Shared24x24ImagesMask.bmp" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\toolbmps\\shared24x24imagesmask.bmp"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x274 [0039.821] GetFileType (hFile=0x274) returned 0x1 [0039.821] GetFileType (hFile=0x274) returned 0x1 [0039.821] GetFileSize (in: hFile=0x274, lpFileSizeHigh=0x31e718 | out: lpFileSizeHigh=0x31e718*=0x0) returned 0x1638 [0039.821] ReadFile (in: hFile=0x274, lpBuffer=0x276f318, nNumberOfBytesToRead=0x1638, lpNumberOfBytesRead=0x31e6c4, lpOverlapped=0x0 | out: lpBuffer=0x276f318*, lpNumberOfBytesRead=0x31e6c4*=0x1638, lpOverlapped=0x0) returned 1 [0039.836] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolBMPs\\Shared24x24ImagesMask.bmp" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\toolbmps\\shared24x24imagesmask.bmp"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x274 [0039.837] GetFileType (hFile=0x274) returned 0x1 [0039.837] GetFileType (hFile=0x274) returned 0x1 [0039.837] WriteFile (in: hFile=0x274, lpBuffer=0x27c303c*, nNumberOfBytesToWrite=0x1640, lpNumberOfBytesWritten=0x31e6b8, lpOverlapped=0x0 | out: lpBuffer=0x27c303c*, lpNumberOfBytesWritten=0x31e6b8*=0x1640, lpOverlapped=0x0) returned 1 [0039.838] MoveFileW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolBMPs\\Shared24x24ImagesMask.bmp" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\toolbmps\\shared24x24imagesmask.bmp"), lpNewFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolBMPs\\Shared24x24ImagesMask.bmp" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\toolbmps\\shared24x24imagesmask.bmp")) returned 1 [0039.839] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolBMPs\\SketchIconImages.bmp" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\toolbmps\\sketchiconimages.bmp"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x274 [0039.839] GetFileType (hFile=0x274) returned 0x1 [0039.839] GetFileType (hFile=0x274) returned 0x1 [0039.839] GetFileSize (in: hFile=0x274, lpFileSizeHigh=0x31e718 | out: lpFileSizeHigh=0x31e718*=0x0) returned 0x2d38 [0039.839] ReadFile (in: hFile=0x274, lpBuffer=0x27c4aa4, nNumberOfBytesToRead=0x2d38, lpNumberOfBytesRead=0x31e6c4, lpOverlapped=0x0 | out: lpBuffer=0x27c4aa4*, lpNumberOfBytesRead=0x31e6c4*=0x2d38, lpOverlapped=0x0) returned 1 [0039.855] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolBMPs\\SketchIconImages.bmp" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\toolbmps\\sketchiconimages.bmp"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x274 [0039.856] GetFileType (hFile=0x274) returned 0x1 [0039.856] GetFileType (hFile=0x274) returned 0x1 [0039.856] WriteFile (in: hFile=0x274, lpBuffer=0x281fac8*, nNumberOfBytesToWrite=0x2d40, lpNumberOfBytesWritten=0x31e6b8, lpOverlapped=0x0 | out: lpBuffer=0x281fac8*, lpNumberOfBytesWritten=0x31e6b8*=0x2d40, lpOverlapped=0x0) returned 1 [0039.857] MoveFileW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolBMPs\\SketchIconImages.bmp" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\toolbmps\\sketchiconimages.bmp"), lpNewFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolBMPs\\SketchIconImages.bmp" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\toolbmps\\sketchiconimages.bmp")) returned 1 [0039.858] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolBMPs\\spacebackupicons.jpg" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\toolbmps\\spacebackupicons.jpg"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x274 [0039.859] GetFileType (hFile=0x274) returned 0x1 [0039.859] GetFileType (hFile=0x274) returned 0x1 [0039.859] GetFileSize (in: hFile=0x274, lpFileSizeHigh=0x31e718 | out: lpFileSizeHigh=0x31e718*=0x0) returned 0xd97 [0039.859] ReadFile (in: hFile=0x274, lpBuffer=0x28239a8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x31e6c4, lpOverlapped=0x0 | out: lpBuffer=0x28239a8*, lpNumberOfBytesRead=0x31e6c4*=0xd97, lpOverlapped=0x0) returned 1 [0039.876] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolBMPs\\spacebackupicons.jpg" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\toolbmps\\spacebackupicons.jpg"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x274 [0039.876] GetFileType (hFile=0x274) returned 0x1 [0039.876] GetFileType (hFile=0x274) returned 0x1 [0039.876] WriteFile (in: hFile=0x274, lpBuffer=0x2675c90*, nNumberOfBytesToWrite=0xda0, lpNumberOfBytesWritten=0x31e68c, lpOverlapped=0x0 | out: lpBuffer=0x2675c90*, lpNumberOfBytesWritten=0x31e68c*=0xda0, lpOverlapped=0x0) returned 1 [0039.877] MoveFileW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolBMPs\\spacebackupicons.jpg" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\toolbmps\\spacebackupicons.jpg"), lpNewFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolBMPs\\spacebackupicons.jpg" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\toolbmps\\spacebackupicons.jpg")) returned 1 [0039.878] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolBMPs\\spacebackupiconsmask.bmp" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\toolbmps\\spacebackupiconsmask.bmp"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x274 [0039.879] GetFileType (hFile=0x274) returned 0x1 [0039.879] GetFileType (hFile=0x274) returned 0x1 [0039.879] GetFileSize (in: hFile=0x274, lpFileSizeHigh=0x31e718 | out: lpFileSizeHigh=0x31e718*=0x0) returned 0x5a4 [0039.879] ReadFile (in: hFile=0x274, lpBuffer=0x267750c, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x31e6c4, lpOverlapped=0x0 | out: lpBuffer=0x267750c*, lpNumberOfBytesRead=0x31e6c4*=0x5a4, lpOverlapped=0x0) returned 1 [0039.894] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolBMPs\\spacebackupiconsmask.bmp" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\toolbmps\\spacebackupiconsmask.bmp"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x274 [0039.895] GetFileType (hFile=0x274) returned 0x1 [0039.895] GetFileType (hFile=0x274) returned 0x1 [0039.896] MoveFileW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolBMPs\\spacebackupiconsmask.bmp" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\toolbmps\\spacebackupiconsmask.bmp"), lpNewFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolBMPs\\spacebackupiconsmask.bmp" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\toolbmps\\spacebackupiconsmask.bmp")) returned 1 [0039.896] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolBMPs\\StopIconMask.bmp" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\toolbmps\\stopiconmask.bmp"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x274 [0039.897] GetFileType (hFile=0x274) returned 0x1 [0039.897] GetFileType (hFile=0x274) returned 0x1 [0039.897] GetFileSize (in: hFile=0x274, lpFileSizeHigh=0x31e718 | out: lpFileSizeHigh=0x31e718*=0x0) returned 0x838 [0039.897] ReadFile (in: hFile=0x274, lpBuffer=0x26c8d3c, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x31e6c4, lpOverlapped=0x0 | out: lpBuffer=0x26c8d3c*, lpNumberOfBytesRead=0x31e6c4*=0x838, lpOverlapped=0x0) returned 1 [0039.911] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolBMPs\\StopIconMask.bmp" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\toolbmps\\stopiconmask.bmp"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x274 [0039.912] GetFileType (hFile=0x274) returned 0x1 [0039.912] GetFileType (hFile=0x274) returned 0x1 [0039.913] MoveFileW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolBMPs\\StopIconMask.bmp" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\toolbmps\\stopiconmask.bmp"), lpNewFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolBMPs\\StopIconMask.bmp" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\toolbmps\\stopiconmask.bmp")) returned 1 [0039.913] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolBMPs\\TaskbarIconImages256Colors.bmp" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\toolbmps\\taskbariconimages256colors.bmp"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x274 [0039.914] GetFileType (hFile=0x274) returned 0x1 [0039.914] GetFileType (hFile=0x274) returned 0x1 [0039.914] GetFileSize (in: hFile=0x274, lpFileSizeHigh=0x31e718 | out: lpFileSizeHigh=0x31e718*=0x0) returned 0xf38 [0039.914] ReadFile (in: hFile=0x274, lpBuffer=0x271b7bc, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x31e6c4, lpOverlapped=0x0 | out: lpBuffer=0x271b7bc*, lpNumberOfBytesRead=0x31e6c4*=0xf38, lpOverlapped=0x0) returned 1 [0039.928] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolBMPs\\TaskbarIconImages256Colors.bmp" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\toolbmps\\taskbariconimages256colors.bmp"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x274 [0039.929] GetFileType (hFile=0x274) returned 0x1 [0039.929] GetFileType (hFile=0x274) returned 0x1 [0039.929] WriteFile (in: hFile=0x274, lpBuffer=0x276e35c*, nNumberOfBytesToWrite=0xf40, lpNumberOfBytesWritten=0x31e68c, lpOverlapped=0x0 | out: lpBuffer=0x276e35c*, lpNumberOfBytesWritten=0x31e68c*=0xf40, lpOverlapped=0x0) returned 1 [0039.930] MoveFileW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolBMPs\\TaskbarIconImages256Colors.bmp" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\toolbmps\\taskbariconimages256colors.bmp"), lpNewFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolBMPs\\TaskbarIconImages256Colors.bmp" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\toolbmps\\taskbariconimages256colors.bmp")) returned 1 [0039.931] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolBMPs\\TaskbarIconImagesMask256Colors.bmp" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\toolbmps\\taskbariconimagesmask256colors.bmp"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x274 [0039.931] GetFileType (hFile=0x274) returned 0x1 [0039.931] GetFileType (hFile=0x274) returned 0x1 [0039.931] GetFileSize (in: hFile=0x274, lpFileSizeHigh=0x31e718 | out: lpFileSizeHigh=0x31e718*=0x0) returned 0x540 [0039.932] ReadFile (in: hFile=0x274, lpBuffer=0x276fbc4, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x31e6c4, lpOverlapped=0x0 | out: lpBuffer=0x276fbc4*, lpNumberOfBytesRead=0x31e6c4*=0x540, lpOverlapped=0x0) returned 1 [0039.946] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolBMPs\\TaskbarIconImagesMask256Colors.bmp" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\toolbmps\\taskbariconimagesmask256colors.bmp"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x274 [0039.947] GetFileType (hFile=0x274) returned 0x1 [0039.947] GetFileType (hFile=0x274) returned 0x1 [0039.948] MoveFileW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolBMPs\\TaskbarIconImagesMask256Colors.bmp" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\toolbmps\\taskbariconimagesmask256colors.bmp"), lpNewFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolBMPs\\TaskbarIconImagesMask256Colors.bmp" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\toolbmps\\taskbariconimagesmask256colors.bmp")) returned 1 [0039.948] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolBMPs\\TipsImage.jpg" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\toolbmps\\tipsimage.jpg"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x274 [0039.949] GetFileType (hFile=0x274) returned 0x1 [0039.949] GetFileType (hFile=0x274) returned 0x1 [0039.949] GetFileSize (in: hFile=0x274, lpFileSizeHigh=0x31e718 | out: lpFileSizeHigh=0x31e718*=0x0) returned 0x2605 [0039.949] ReadFile (in: hFile=0x274, lpBuffer=0x27c08a4, nNumberOfBytesToRead=0x2605, lpNumberOfBytesRead=0x31e6c4, lpOverlapped=0x0 | out: lpBuffer=0x27c08a4*, lpNumberOfBytesRead=0x31e6c4*=0x2605, lpOverlapped=0x0) returned 1 [0039.964] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolBMPs\\TipsImage.jpg" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\toolbmps\\tipsimage.jpg"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x274 [0039.965] GetFileType (hFile=0x274) returned 0x1 [0039.965] GetFileType (hFile=0x274) returned 0x1 [0039.965] WriteFile (in: hFile=0x274, lpBuffer=0x28194dc*, nNumberOfBytesToWrite=0x2610, lpNumberOfBytesWritten=0x31e6b8, lpOverlapped=0x0 | out: lpBuffer=0x28194dc*, lpNumberOfBytesWritten=0x31e6b8*=0x2610, lpOverlapped=0x0) returned 1 [0039.966] MoveFileW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolBMPs\\TipsImage.jpg" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\toolbmps\\tipsimage.jpg"), lpNewFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolBMPs\\TipsImage.jpg" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\toolbmps\\tipsimage.jpg")) returned 1 [0039.967] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolBMPs\\TipsImageMask.bmp" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\toolbmps\\tipsimagemask.bmp"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x274 [0039.968] GetFileType (hFile=0x274) returned 0x1 [0039.968] GetFileType (hFile=0x274) returned 0x1 [0039.968] GetFileSize (in: hFile=0x274, lpFileSizeHigh=0x31e718 | out: lpFileSizeHigh=0x31e718*=0x0) returned 0x838 [0039.968] ReadFile (in: hFile=0x274, lpBuffer=0x281c6ec, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x31e6c4, lpOverlapped=0x0 | out: lpBuffer=0x281c6ec*, lpNumberOfBytesRead=0x31e6c4*=0x838, lpOverlapped=0x0) returned 1 [0039.985] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolBMPs\\TipsImageMask.bmp" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\toolbmps\\tipsimagemask.bmp"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x274 [0039.986] GetFileType (hFile=0x274) returned 0x1 [0039.986] GetFileType (hFile=0x274) returned 0x1 [0039.987] MoveFileW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolBMPs\\TipsImageMask.bmp" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\toolbmps\\tipsimagemask.bmp"), lpNewFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolBMPs\\TipsImageMask.bmp" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\toolbmps\\tipsimagemask.bmp")) returned 1 [0039.987] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolBMPs\\VeriSignLogo.jpg" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\toolbmps\\verisignlogo.jpg"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x274 [0039.987] GetFileType (hFile=0x274) returned 0x1 [0039.987] GetFileType (hFile=0x274) returned 0x1 [0039.987] GetFileSize (in: hFile=0x274, lpFileSizeHigh=0x31e718 | out: lpFileSizeHigh=0x31e718*=0x0) returned 0x450 [0039.988] ReadFile (in: hFile=0x274, lpBuffer=0x266e100, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x31e6c4, lpOverlapped=0x0 | out: lpBuffer=0x266e100*, lpNumberOfBytesRead=0x31e6c4*=0x450, lpOverlapped=0x0) returned 1 [0040.003] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolBMPs\\VeriSignLogo.jpg" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\toolbmps\\verisignlogo.jpg"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x274 [0040.003] GetFileType (hFile=0x274) returned 0x1 [0040.003] GetFileType (hFile=0x274) returned 0x1 [0040.003] WriteFile (in: hFile=0x274, lpBuffer=0x26bd76c*, nNumberOfBytesToWrite=0x460, lpNumberOfBytesWritten=0x31e68c, lpOverlapped=0x0 | out: lpBuffer=0x26bd76c*, lpNumberOfBytesWritten=0x31e68c*=0x460, lpOverlapped=0x0) returned 1 [0040.004] MoveFileW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolBMPs\\VeriSignLogo.jpg" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\toolbmps\\verisignlogo.jpg"), lpNewFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolBMPs\\VeriSignLogo.jpg" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\toolbmps\\verisignlogo.jpg")) returned 1 [0040.005] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolBMPs\\WebToolIconImages.jpg" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\toolbmps\\webtooliconimages.jpg"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x274 [0040.006] GetFileType (hFile=0x274) returned 0x1 [0040.006] GetFileType (hFile=0x274) returned 0x1 [0040.006] GetFileSize (in: hFile=0x274, lpFileSizeHigh=0x31e718 | out: lpFileSizeHigh=0x31e718*=0x0) returned 0x5431 [0040.006] ReadFile (in: hFile=0x274, lpBuffer=0x26bea1c, nNumberOfBytesToRead=0x5431, lpNumberOfBytesRead=0x31e6c4, lpOverlapped=0x0 | out: lpBuffer=0x26bea1c*, lpNumberOfBytesRead=0x31e6c4*=0x5431, lpOverlapped=0x0) returned 1 [0040.021] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolBMPs\\WebToolIconImages.jpg" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\toolbmps\\webtooliconimages.jpg"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x274 [0040.022] GetFileType (hFile=0x274) returned 0x1 [0040.022] GetFileType (hFile=0x274) returned 0x1 [0040.022] WriteFile (in: hFile=0x274, lpBuffer=0x2725d44*, nNumberOfBytesToWrite=0x5440, lpNumberOfBytesWritten=0x31e6b8, lpOverlapped=0x0 | out: lpBuffer=0x2725d44*, lpNumberOfBytesWritten=0x31e6b8*=0x5440, lpOverlapped=0x0) returned 1 [0040.023] MoveFileW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolBMPs\\WebToolIconImages.jpg" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\toolbmps\\webtooliconimages.jpg"), lpNewFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolBMPs\\WebToolIconImages.jpg" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\toolbmps\\webtooliconimages.jpg")) returned 1 [0040.025] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolBMPs\\WebToolIconImagesMask.bmp" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\toolbmps\\webtooliconimagesmask.bmp"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x274 [0040.025] GetFileType (hFile=0x274) returned 0x1 [0040.025] GetFileType (hFile=0x274) returned 0x1 [0040.025] GetFileSize (in: hFile=0x274, lpFileSizeHigh=0x31e718 | out: lpFileSizeHigh=0x31e718*=0x0) returned 0x1538 [0040.025] ReadFile (in: hFile=0x274, lpBuffer=0x272b5a0, nNumberOfBytesToRead=0x1538, lpNumberOfBytesRead=0x31e6c4, lpOverlapped=0x0 | out: lpBuffer=0x272b5a0*, lpNumberOfBytesRead=0x31e6c4*=0x1538, lpOverlapped=0x0) returned 1 [0040.040] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolBMPs\\WebToolIconImagesMask.bmp" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\toolbmps\\webtooliconimagesmask.bmp"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x274 [0040.040] GetFileType (hFile=0x274) returned 0x1 [0040.040] GetFileType (hFile=0x274) returned 0x1 [0040.040] WriteFile (in: hFile=0x274, lpBuffer=0x277edc4*, nNumberOfBytesToWrite=0x1540, lpNumberOfBytesWritten=0x31e6b8, lpOverlapped=0x0 | out: lpBuffer=0x277edc4*, lpNumberOfBytesWritten=0x31e6b8*=0x1540, lpOverlapped=0x0) returned 1 [0040.041] MoveFileW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolBMPs\\WebToolIconImagesMask.bmp" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\toolbmps\\webtooliconimagesmask.bmp"), lpNewFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolBMPs\\WebToolIconImagesMask.bmp" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\toolbmps\\webtooliconimagesmask.bmp")) returned 1 [0040.042] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolBMPs\\WebToolImages16x16.jpg" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\toolbmps\\webtoolimages16x16.jpg"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x274 [0040.042] GetFileType (hFile=0x274) returned 0x1 [0040.043] GetFileType (hFile=0x274) returned 0x1 [0040.043] GetFileSize (in: hFile=0x274, lpFileSizeHigh=0x31e718 | out: lpFileSizeHigh=0x31e718*=0x0) returned 0x1995 [0040.043] ReadFile (in: hFile=0x274, lpBuffer=0x2780734, nNumberOfBytesToRead=0x1995, lpNumberOfBytesRead=0x31e6c4, lpOverlapped=0x0 | out: lpBuffer=0x2780734*, lpNumberOfBytesRead=0x31e6c4*=0x1995, lpOverlapped=0x0) returned 1 [0040.058] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolBMPs\\WebToolImages16x16.jpg" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\toolbmps\\webtoolimages16x16.jpg"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x274 [0040.058] GetFileType (hFile=0x274) returned 0x1 [0040.058] GetFileType (hFile=0x274) returned 0x1 [0040.058] WriteFile (in: hFile=0x274, lpBuffer=0x27d553c*, nNumberOfBytesToWrite=0x19a0, lpNumberOfBytesWritten=0x31e6b8, lpOverlapped=0x0 | out: lpBuffer=0x27d553c*, lpNumberOfBytesWritten=0x31e6b8*=0x19a0, lpOverlapped=0x0) returned 1 [0040.059] MoveFileW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolBMPs\\WebToolImages16x16.jpg" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\toolbmps\\webtoolimages16x16.jpg"), lpNewFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolBMPs\\WebToolImages16x16.jpg" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\toolbmps\\webtoolimages16x16.jpg")) returned 1 [0040.060] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolBMPs\\WebToolImagesMask16x16.bmp" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\toolbmps\\webtoolimagesmask16x16.bmp"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x274 [0040.061] GetFileType (hFile=0x274) returned 0x1 [0040.061] GetFileType (hFile=0x274) returned 0x1 [0040.061] GetFileSize (in: hFile=0x274, lpFileSizeHigh=0x31e718 | out: lpFileSizeHigh=0x31e718*=0x0) returned 0x838 [0040.061] ReadFile (in: hFile=0x274, lpBuffer=0x27d7b44, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x31e6c4, lpOverlapped=0x0 | out: lpBuffer=0x27d7b44*, lpNumberOfBytesRead=0x31e6c4*=0x838, lpOverlapped=0x0) returned 1 [0040.076] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolBMPs\\WebToolImagesMask16x16.bmp" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\toolbmps\\webtoolimagesmask16x16.bmp"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x274 [0040.077] GetFileType (hFile=0x274) returned 0x1 [0040.077] GetFileType (hFile=0x274) returned 0x1 [0040.078] MoveFileW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolBMPs\\WebToolImagesMask16x16.bmp" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\toolbmps\\webtoolimagesmask16x16.bmp"), lpNewFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolBMPs\\WebToolImagesMask16x16.bmp" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\toolbmps\\webtoolimagesmask16x16.bmp")) returned 1 [0040.078] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolBMPs\\WSSFilesToolIconImages.jpg" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\toolbmps\\wssfilestooliconimages.jpg"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x274 [0040.079] GetFileType (hFile=0x274) returned 0x1 [0040.079] GetFileType (hFile=0x274) returned 0x1 [0040.079] GetFileSize (in: hFile=0x274, lpFileSizeHigh=0x31e718 | out: lpFileSizeHigh=0x31e718*=0x0) returned 0x2308 [0040.079] ReadFile (in: hFile=0x274, lpBuffer=0x28296c0, nNumberOfBytesToRead=0x2308, lpNumberOfBytesRead=0x31e6c4, lpOverlapped=0x0 | out: lpBuffer=0x28296c0*, lpNumberOfBytesRead=0x31e6c4*=0x2308, lpOverlapped=0x0) returned 1 [0040.096] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolBMPs\\WSSFilesToolIconImages.jpg" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\toolbmps\\wssfilestooliconimages.jpg"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x274 [0040.096] GetFileType (hFile=0x274) returned 0x1 [0040.096] GetFileType (hFile=0x274) returned 0x1 [0040.096] WriteFile (in: hFile=0x274, lpBuffer=0x2682ec8*, nNumberOfBytesToWrite=0x2310, lpNumberOfBytesWritten=0x31e6b8, lpOverlapped=0x0 | out: lpBuffer=0x2682ec8*, lpNumberOfBytesWritten=0x31e6b8*=0x2310, lpOverlapped=0x0) returned 1 [0040.097] MoveFileW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolBMPs\\WSSFilesToolIconImages.jpg" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\toolbmps\\wssfilestooliconimages.jpg"), lpNewFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolBMPs\\WSSFilesToolIconImages.jpg" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\toolbmps\\wssfilestooliconimages.jpg")) returned 1 [0040.099] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolBMPs\\WSSFilesToolIconImagesMask.bmp" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\toolbmps\\wssfilestooliconimagesmask.bmp"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x274 [0040.100] GetFileType (hFile=0x274) returned 0x1 [0040.100] GetFileType (hFile=0x274) returned 0x1 [0040.100] GetFileSize (in: hFile=0x274, lpFileSizeHigh=0x31e718 | out: lpFileSizeHigh=0x31e718*=0x0) returned 0x638 [0040.100] ReadFile (in: hFile=0x274, lpBuffer=0x2685c70, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x31e6c4, lpOverlapped=0x0 | out: lpBuffer=0x2685c70*, lpNumberOfBytesRead=0x31e6c4*=0x638, lpOverlapped=0x0) returned 1 [0040.114] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolBMPs\\WSSFilesToolIconImagesMask.bmp" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\toolbmps\\wssfilestooliconimagesmask.bmp"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x274 [0040.115] GetFileType (hFile=0x274) returned 0x1 [0040.115] GetFileType (hFile=0x274) returned 0x1 [0040.115] WriteFile (in: hFile=0x274, lpBuffer=0x26d5c6c*, nNumberOfBytesToWrite=0x640, lpNumberOfBytesWritten=0x31e68c, lpOverlapped=0x0 | out: lpBuffer=0x26d5c6c*, lpNumberOfBytesWritten=0x31e68c*=0x640, lpOverlapped=0x0) returned 1 [0040.116] MoveFileW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolBMPs\\WSSFilesToolIconImagesMask.bmp" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\toolbmps\\wssfilestooliconimagesmask.bmp"), lpNewFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolBMPs\\WSSFilesToolIconImagesMask.bmp" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\toolbmps\\wssfilestooliconimagesmask.bmp")) returned 1 [0040.127] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\Calendar\\CalendarToolIconImages.jpg" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\calendar\\calendartooliconimages.jpg"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x274 [0040.128] GetFileType (hFile=0x274) returned 0x1 [0040.128] GetFileType (hFile=0x274) returned 0x1 [0040.128] GetFileSize (in: hFile=0x274, lpFileSizeHigh=0x31e628 | out: lpFileSizeHigh=0x31e628*=0x0) returned 0x3424 [0040.128] ReadFile (in: hFile=0x274, lpBuffer=0x26df98c, nNumberOfBytesToRead=0x3424, lpNumberOfBytesRead=0x31e5d4, lpOverlapped=0x0 | out: lpBuffer=0x26df98c*, lpNumberOfBytesRead=0x31e5d4*=0x3424, lpOverlapped=0x0) returned 1 [0040.143] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\Calendar\\CalendarToolIconImages.jpg" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\calendar\\calendartooliconimages.jpg"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x274 [0040.144] GetFileType (hFile=0x274) returned 0x1 [0040.144] GetFileType (hFile=0x274) returned 0x1 [0040.144] WriteFile (in: hFile=0x274, lpBuffer=0x273cc60*, nNumberOfBytesToWrite=0x3430, lpNumberOfBytesWritten=0x31e5c8, lpOverlapped=0x0 | out: lpBuffer=0x273cc60*, lpNumberOfBytesWritten=0x31e5c8*=0x3430, lpOverlapped=0x0) returned 1 [0040.145] MoveFileW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\Calendar\\CalendarToolIconImages.jpg" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\calendar\\calendartooliconimages.jpg"), lpNewFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\Calendar\\CalendarToolIconImages.jpg" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\calendar\\calendartooliconimages.jpg")) returned 1 [0040.146] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\Calendar\\CalendarToolIconImagesMask.bmp" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\calendar\\calendartooliconimagesmask.bmp"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x274 [0040.147] GetFileType (hFile=0x274) returned 0x1 [0040.148] GetFileType (hFile=0x274) returned 0x1 [0040.148] GetFileSize (in: hFile=0x274, lpFileSizeHigh=0x31e628 | out: lpFileSizeHigh=0x31e628*=0x0) returned 0xc38 [0040.148] ReadFile (in: hFile=0x274, lpBuffer=0x27411c8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x31e5d4, lpOverlapped=0x0 | out: lpBuffer=0x27411c8*, lpNumberOfBytesRead=0x31e5d4*=0xc38, lpOverlapped=0x0) returned 1 [0040.162] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\Calendar\\CalendarToolIconImagesMask.bmp" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\calendar\\calendartooliconimagesmask.bmp"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x274 [0040.163] GetFileType (hFile=0x274) returned 0x1 [0040.163] GetFileType (hFile=0x274) returned 0x1 [0040.164] MoveFileW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\Calendar\\CalendarToolIconImagesMask.bmp" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\calendar\\calendartooliconimagesmask.bmp"), lpNewFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\Calendar\\CalendarToolIconImagesMask.bmp" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\calendar\\calendartooliconimagesmask.bmp")) returned 1 [0040.164] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\Calendar\\CalendarViewButtonImages.jpg" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\calendar\\calendarviewbuttonimages.jpg"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x274 [0040.165] GetFileType (hFile=0x274) returned 0x1 [0040.165] GetFileType (hFile=0x274) returned 0x1 [0040.165] GetFileSize (in: hFile=0x274, lpFileSizeHigh=0x31e628 | out: lpFileSizeHigh=0x31e628*=0x0) returned 0x3fa2 [0040.165] ReadFile (in: hFile=0x274, lpBuffer=0x279420c, nNumberOfBytesToRead=0x3fa2, lpNumberOfBytesRead=0x31e5d4, lpOverlapped=0x0 | out: lpBuffer=0x279420c*, lpNumberOfBytesRead=0x31e5d4*=0x3fa2, lpOverlapped=0x0) returned 1 [0040.180] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\Calendar\\CalendarViewButtonImages.jpg" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\calendar\\calendarviewbuttonimages.jpg"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x274 [0040.181] GetFileType (hFile=0x274) returned 0x1 [0040.181] GetFileType (hFile=0x274) returned 0x1 [0040.181] WriteFile (in: hFile=0x274, lpBuffer=0x27f4e64*, nNumberOfBytesToWrite=0x3fb0, lpNumberOfBytesWritten=0x31e5c8, lpOverlapped=0x0 | out: lpBuffer=0x27f4e64*, lpNumberOfBytesWritten=0x31e5c8*=0x3fb0, lpOverlapped=0x0) returned 1 [0040.182] MoveFileW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\Calendar\\CalendarViewButtonImages.jpg" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\calendar\\calendarviewbuttonimages.jpg"), lpNewFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\Calendar\\CalendarViewButtonImages.jpg" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\calendar\\calendarviewbuttonimages.jpg")) returned 1 [0040.183] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\Calendar\\GlobeButtonImage.jpg" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\calendar\\globebuttonimage.jpg"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x274 [0040.184] GetFileType (hFile=0x274) returned 0x1 [0040.184] GetFileType (hFile=0x274) returned 0x1 [0040.184] GetFileSize (in: hFile=0x274, lpFileSizeHigh=0x31e628 | out: lpFileSizeHigh=0x31e628*=0x0) returned 0x1b49 [0040.184] ReadFile (in: hFile=0x274, lpBuffer=0x27f92f0, nNumberOfBytesToRead=0x1b49, lpNumberOfBytesRead=0x31e5d4, lpOverlapped=0x0 | out: lpBuffer=0x27f92f0*, lpNumberOfBytesRead=0x31e5d4*=0x1b49, lpOverlapped=0x0) returned 1 [0040.199] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\Calendar\\GlobeButtonImage.jpg" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\calendar\\globebuttonimage.jpg"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x274 [0040.200] GetFileType (hFile=0x274) returned 0x1 [0040.200] GetFileType (hFile=0x274) returned 0x1 [0040.200] WriteFile (in: hFile=0x274, lpBuffer=0x284e968*, nNumberOfBytesToWrite=0x1b50, lpNumberOfBytesWritten=0x31e5c8, lpOverlapped=0x0 | out: lpBuffer=0x284e968*, lpNumberOfBytesWritten=0x31e5c8*=0x1b50, lpOverlapped=0x0) returned 1 [0040.201] MoveFileW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\Calendar\\GlobeButtonImage.jpg" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\calendar\\globebuttonimage.jpg"), lpNewFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\Calendar\\GlobeButtonImage.jpg" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\calendar\\globebuttonimage.jpg")) returned 1 [0040.202] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\Calendar\\GlobeButtonImageMask.bmp" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\calendar\\globebuttonimagemask.bmp"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x274 [0040.204] GetFileType (hFile=0x274) returned 0x1 [0040.204] GetFileType (hFile=0x274) returned 0x1 [0040.204] GetFileSize (in: hFile=0x274, lpFileSizeHigh=0x31e628 | out: lpFileSizeHigh=0x31e628*=0x0) returned 0x778 [0040.206] ReadFile (in: hFile=0x274, lpBuffer=0x264cfc4, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x31e5d4, lpOverlapped=0x0 | out: lpBuffer=0x264cfc4*, lpNumberOfBytesRead=0x31e5d4*=0x778, lpOverlapped=0x0) returned 1 [0040.221] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\Calendar\\GlobeButtonImageMask.bmp" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\calendar\\globebuttonimagemask.bmp"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x274 [0040.222] GetFileType (hFile=0x274) returned 0x1 [0040.222] GetFileType (hFile=0x274) returned 0x1 [0040.222] WriteFile (in: hFile=0x274, lpBuffer=0x269d610*, nNumberOfBytesToWrite=0x780, lpNumberOfBytesWritten=0x31e59c, lpOverlapped=0x0 | out: lpBuffer=0x269d610*, lpNumberOfBytesWritten=0x31e59c*=0x780, lpOverlapped=0x0) returned 1 [0040.223] MoveFileW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\Calendar\\GlobeButtonImageMask.bmp" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\calendar\\globebuttonimagemask.bmp"), lpNewFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\Calendar\\GlobeButtonImageMask.bmp" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\calendar\\globebuttonimagemask.bmp")) returned 1 [0040.228] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\CommonData\\AlertImage_Auto.jpg" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\commondata\\alertimage_auto.jpg"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x274 [0040.230] GetFileType (hFile=0x274) returned 0x1 [0040.230] GetFileType (hFile=0x274) returned 0x1 [0040.230] GetFileSize (in: hFile=0x274, lpFileSizeHigh=0x31e628 | out: lpFileSizeHigh=0x31e628*=0x0) returned 0x44c9 [0040.230] ReadFile (in: hFile=0x274, lpBuffer=0x26a8bec, nNumberOfBytesToRead=0x44c9, lpNumberOfBytesRead=0x31e5d4, lpOverlapped=0x0 | out: lpBuffer=0x26a8bec*, lpNumberOfBytesRead=0x31e5d4*=0x44c9, lpOverlapped=0x0) returned 1 [0040.260] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\CommonData\\AlertImage_Auto.jpg" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\commondata\\alertimage_auto.jpg"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x274 [0040.261] GetFileType (hFile=0x274) returned 0x1 [0040.261] GetFileType (hFile=0x274) returned 0x1 [0040.261] WriteFile (in: hFile=0x274, lpBuffer=0x270b1e4*, nNumberOfBytesToWrite=0x44d0, lpNumberOfBytesWritten=0x31e5c8, lpOverlapped=0x0 | out: lpBuffer=0x270b1e4*, lpNumberOfBytesWritten=0x31e5c8*=0x44d0, lpOverlapped=0x0) returned 1 [0040.262] MoveFileW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\CommonData\\AlertImage_Auto.jpg" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\commondata\\alertimage_auto.jpg"), lpNewFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\CommonData\\AlertImage_Auto.jpg" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\commondata\\alertimage_auto.jpg")) returned 1 [0040.263] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\CommonData\\AlertImage_AutoMask.bmp" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\commondata\\alertimage_automask.bmp"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x274 [0040.263] GetFileType (hFile=0x274) returned 0x1 [0040.264] GetFileType (hFile=0x274) returned 0x1 [0040.264] GetFileSize (in: hFile=0x274, lpFileSizeHigh=0x31e628 | out: lpFileSizeHigh=0x31e628*=0x0) returned 0x1c6e [0040.264] ReadFile (in: hFile=0x274, lpBuffer=0x270fb68, nNumberOfBytesToRead=0x1c6e, lpNumberOfBytesRead=0x31e5d4, lpOverlapped=0x0 | out: lpBuffer=0x270fb68*, lpNumberOfBytesRead=0x31e5d4*=0x1c6e, lpOverlapped=0x0) returned 1 [0040.280] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\CommonData\\AlertImage_AutoMask.bmp" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\commondata\\alertimage_automask.bmp"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x274 [0040.281] GetFileType (hFile=0x274) returned 0x1 [0040.281] GetFileType (hFile=0x274) returned 0x1 [0040.281] WriteFile (in: hFile=0x274, lpBuffer=0x2765780*, nNumberOfBytesToWrite=0x1c70, lpNumberOfBytesWritten=0x31e5c8, lpOverlapped=0x0 | out: lpBuffer=0x2765780*, lpNumberOfBytesWritten=0x31e5c8*=0x1c70, lpOverlapped=0x0) returned 1 [0040.282] MoveFileW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\CommonData\\AlertImage_AutoMask.bmp" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\commondata\\alertimage_automask.bmp"), lpNewFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\CommonData\\AlertImage_AutoMask.bmp" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\commondata\\alertimage_automask.bmp")) returned 1 [0040.284] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\CommonData\\AlertImage_ContactHigh.jpg" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\commondata\\alertimage_contacthigh.jpg"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x274 [0040.284] GetFileType (hFile=0x274) returned 0x1 [0040.284] GetFileType (hFile=0x274) returned 0x1 [0040.284] GetFileSize (in: hFile=0x274, lpFileSizeHigh=0x31e628 | out: lpFileSizeHigh=0x31e628*=0x0) returned 0x3356 [0040.284] ReadFile (in: hFile=0x274, lpBuffer=0x27678d0, nNumberOfBytesToRead=0x3356, lpNumberOfBytesRead=0x31e5d4, lpOverlapped=0x0 | out: lpBuffer=0x27678d0*, lpNumberOfBytesRead=0x31e5d4*=0x3356, lpOverlapped=0x0) returned 1 [0040.299] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\CommonData\\AlertImage_ContactHigh.jpg" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\commondata\\alertimage_contacthigh.jpg"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x274 [0040.300] GetFileType (hFile=0x274) returned 0x1 [0040.300] GetFileType (hFile=0x274) returned 0x1 [0040.300] WriteFile (in: hFile=0x274, lpBuffer=0x27c4798*, nNumberOfBytesToWrite=0x3360, lpNumberOfBytesWritten=0x31e5c8, lpOverlapped=0x0 | out: lpBuffer=0x27c4798*, lpNumberOfBytesWritten=0x31e5c8*=0x3360, lpOverlapped=0x0) returned 1 [0040.301] MoveFileW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\CommonData\\AlertImage_ContactHigh.jpg" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\commondata\\alertimage_contacthigh.jpg"), lpNewFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\CommonData\\AlertImage_ContactHigh.jpg" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\commondata\\alertimage_contacthigh.jpg")) returned 1 [0040.302] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\CommonData\\AlertImage_ContactHighMask.bmp" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\commondata\\alertimage_contacthighmask.bmp"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x274 [0040.302] GetFileType (hFile=0x274) returned 0x1 [0040.302] GetFileType (hFile=0x274) returned 0x1 [0040.302] GetFileSize (in: hFile=0x274, lpFileSizeHigh=0x31e628 | out: lpFileSizeHigh=0x31e628*=0x0) returned 0x1c70 [0040.303] ReadFile (in: hFile=0x274, lpBuffer=0x27c7ffc, nNumberOfBytesToRead=0x1c70, lpNumberOfBytesRead=0x31e5d4, lpOverlapped=0x0 | out: lpBuffer=0x27c7ffc*, lpNumberOfBytesRead=0x31e5d4*=0x1c70, lpOverlapped=0x0) returned 1 [0040.317] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\CommonData\\AlertImage_ContactHighMask.bmp" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\commondata\\alertimage_contacthighmask.bmp"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x274 [0040.318] GetFileType (hFile=0x274) returned 0x1 [0040.318] GetFileType (hFile=0x274) returned 0x1 [0040.318] WriteFile (in: hFile=0x274, lpBuffer=0x281dc60*, nNumberOfBytesToWrite=0x1c80, lpNumberOfBytesWritten=0x31e5c8, lpOverlapped=0x0 | out: lpBuffer=0x281dc60*, lpNumberOfBytesWritten=0x31e5c8*=0x1c80, lpOverlapped=0x0) returned 1 [0040.319] MoveFileW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\CommonData\\AlertImage_ContactHighMask.bmp" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\commondata\\alertimage_contacthighmask.bmp"), lpNewFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\CommonData\\AlertImage_ContactHighMask.bmp" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\commondata\\alertimage_contacthighmask.bmp")) returned 1 [0040.320] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\CommonData\\AlertImage_ContactLow.jpg" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\commondata\\alertimage_contactlow.jpg"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x274 [0040.320] GetFileType (hFile=0x274) returned 0x1 [0040.321] GetFileType (hFile=0x274) returned 0x1 [0040.321] GetFileSize (in: hFile=0x274, lpFileSizeHigh=0x31e628 | out: lpFileSizeHigh=0x31e628*=0x0) returned 0x2f79 [0040.321] ReadFile (in: hFile=0x274, lpBuffer=0x281fdf0, nNumberOfBytesToRead=0x2f79, lpNumberOfBytesRead=0x31e5d4, lpOverlapped=0x0 | out: lpBuffer=0x281fdf0*, lpNumberOfBytesRead=0x31e5d4*=0x2f79, lpOverlapped=0x0) returned 1 [0040.338] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\CommonData\\AlertImage_ContactLow.jpg" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\commondata\\alertimage_contactlow.jpg"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x274 [0040.338] GetFileType (hFile=0x274) returned 0x1 [0040.339] GetFileType (hFile=0x274) returned 0x1 [0040.339] WriteFile (in: hFile=0x274, lpBuffer=0x267f9c8*, nNumberOfBytesToWrite=0x2f80, lpNumberOfBytesWritten=0x31e5c8, lpOverlapped=0x0 | out: lpBuffer=0x267f9c8*, lpNumberOfBytesWritten=0x31e5c8*=0x2f80, lpOverlapped=0x0) returned 1 [0040.340] MoveFileW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\CommonData\\AlertImage_ContactLow.jpg" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\commondata\\alertimage_contactlow.jpg"), lpNewFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\CommonData\\AlertImage_ContactLow.jpg" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\commondata\\alertimage_contactlow.jpg")) returned 1 [0040.341] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\CommonData\\AlertImage_ContactLowMask.bmp" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\commondata\\alertimage_contactlowmask.bmp"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x274 [0040.342] GetFileType (hFile=0x274) returned 0x1 [0040.342] GetFileType (hFile=0x274) returned 0x1 [0040.342] GetFileSize (in: hFile=0x274, lpFileSizeHigh=0x31e628 | out: lpFileSizeHigh=0x31e628*=0x0) returned 0x1c70 [0040.342] ReadFile (in: hFile=0x274, lpBuffer=0x2682e44, nNumberOfBytesToRead=0x1c70, lpNumberOfBytesRead=0x31e5d4, lpOverlapped=0x0 | out: lpBuffer=0x2682e44*, lpNumberOfBytesRead=0x31e5d4*=0x1c70, lpOverlapped=0x0) returned 1 [0040.357] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\CommonData\\AlertImage_ContactLowMask.bmp" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\commondata\\alertimage_contactlowmask.bmp"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x274 [0040.357] GetFileType (hFile=0x274) returned 0x1 [0040.358] GetFileType (hFile=0x274) returned 0x1 [0040.358] WriteFile (in: hFile=0x274, lpBuffer=0x26d8c04*, nNumberOfBytesToWrite=0x1c80, lpNumberOfBytesWritten=0x31e5c8, lpOverlapped=0x0 | out: lpBuffer=0x26d8c04*, lpNumberOfBytesWritten=0x31e5c8*=0x1c80, lpOverlapped=0x0) returned 1 [0040.359] MoveFileW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\CommonData\\AlertImage_ContactLowMask.bmp" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\commondata\\alertimage_contactlowmask.bmp"), lpNewFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\CommonData\\AlertImage_ContactLowMask.bmp" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\commondata\\alertimage_contactlowmask.bmp")) returned 1 [0040.360] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\CommonData\\AlertImage_FileHigh.jpg" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\commondata\\alertimage_filehigh.jpg"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x274 [0040.360] GetFileType (hFile=0x274) returned 0x1 [0040.361] GetFileType (hFile=0x274) returned 0x1 [0040.361] GetFileSize (in: hFile=0x274, lpFileSizeHigh=0x31e628 | out: lpFileSizeHigh=0x31e628*=0x0) returned 0x480d [0040.361] ReadFile (in: hFile=0x274, lpBuffer=0x26dad88, nNumberOfBytesToRead=0x480d, lpNumberOfBytesRead=0x31e5d4, lpOverlapped=0x0 | out: lpBuffer=0x26dad88*, lpNumberOfBytesRead=0x31e5d4*=0x480d, lpOverlapped=0x0) returned 1 [0040.376] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\CommonData\\AlertImage_FileHigh.jpg" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\commondata\\alertimage_filehigh.jpg"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x274 [0040.377] GetFileType (hFile=0x274) returned 0x1 [0040.377] GetFileType (hFile=0x274) returned 0x1 [0040.377] WriteFile (in: hFile=0x274, lpBuffer=0x273e3c0*, nNumberOfBytesToWrite=0x4810, lpNumberOfBytesWritten=0x31e5c8, lpOverlapped=0x0 | out: lpBuffer=0x273e3c0*, lpNumberOfBytesWritten=0x31e5c8*=0x4810, lpOverlapped=0x0) returned 1 [0040.378] MoveFileW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\CommonData\\AlertImage_FileHigh.jpg" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\commondata\\alertimage_filehigh.jpg"), lpNewFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\CommonData\\AlertImage_FileHigh.jpg" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\commondata\\alertimage_filehigh.jpg")) returned 1 [0040.379] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\CommonData\\AlertImage_FileHighMask.bmp" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\commondata\\alertimage_filehighmask.bmp"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x274 [0040.379] GetFileType (hFile=0x274) returned 0x1 [0040.379] GetFileType (hFile=0x274) returned 0x1 [0040.379] GetFileSize (in: hFile=0x274, lpFileSizeHigh=0x31e628 | out: lpFileSizeHigh=0x31e628*=0x0) returned 0x1c6e [0040.379] ReadFile (in: hFile=0x274, lpBuffer=0x27430b4, nNumberOfBytesToRead=0x1c6e, lpNumberOfBytesRead=0x31e5d4, lpOverlapped=0x0 | out: lpBuffer=0x27430b4*, lpNumberOfBytesRead=0x31e5d4*=0x1c6e, lpOverlapped=0x0) returned 1 [0040.394] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\CommonData\\AlertImage_FileHighMask.bmp" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\commondata\\alertimage_filehighmask.bmp"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x274 [0040.395] GetFileType (hFile=0x274) returned 0x1 [0040.395] GetFileType (hFile=0x274) returned 0x1 [0040.395] WriteFile (in: hFile=0x274, lpBuffer=0x2798ccc*, nNumberOfBytesToWrite=0x1c70, lpNumberOfBytesWritten=0x31e5c8, lpOverlapped=0x0 | out: lpBuffer=0x2798ccc*, lpNumberOfBytesWritten=0x31e5c8*=0x1c70, lpOverlapped=0x0) returned 1 [0040.396] MoveFileW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\CommonData\\AlertImage_FileHighMask.bmp" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\commondata\\alertimage_filehighmask.bmp"), lpNewFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\CommonData\\AlertImage_FileHighMask.bmp" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\commondata\\alertimage_filehighmask.bmp")) returned 1 [0040.397] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\CommonData\\AlertImage_FileOff.jpg" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\commondata\\alertimage_fileoff.jpg"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x274 [0040.397] GetFileType (hFile=0x274) returned 0x1 [0040.398] GetFileType (hFile=0x274) returned 0x1 [0040.398] GetFileSize (in: hFile=0x274, lpFileSizeHigh=0x31e628 | out: lpFileSizeHigh=0x31e628*=0x0) returned 0x46de [0040.398] ReadFile (in: hFile=0x274, lpBuffer=0x279ae2c, nNumberOfBytesToRead=0x46de, lpNumberOfBytesRead=0x31e5d4, lpOverlapped=0x0 | out: lpBuffer=0x279ae2c*, lpNumberOfBytesRead=0x31e5d4*=0x46de, lpOverlapped=0x0) returned 1 [0040.413] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\CommonData\\AlertImage_FileOff.jpg" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\commondata\\alertimage_fileoff.jpg"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x274 [0040.413] GetFileType (hFile=0x274) returned 0x1 [0040.414] GetFileType (hFile=0x274) returned 0x1 [0040.414] WriteFile (in: hFile=0x274, lpBuffer=0x27fde74*, nNumberOfBytesToWrite=0x46e0, lpNumberOfBytesWritten=0x31e5c8, lpOverlapped=0x0 | out: lpBuffer=0x27fde74*, lpNumberOfBytesWritten=0x31e5c8*=0x46e0, lpOverlapped=0x0) returned 1 [0040.415] MoveFileW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\CommonData\\AlertImage_FileOff.jpg" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\commondata\\alertimage_fileoff.jpg"), lpNewFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\CommonData\\AlertImage_FileOff.jpg" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\commondata\\alertimage_fileoff.jpg")) returned 1 [0040.416] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\CommonData\\AlertImage_FileOffMask.bmp" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\commondata\\alertimage_fileoffmask.bmp"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x274 [0040.416] GetFileType (hFile=0x274) returned 0x1 [0040.416] GetFileType (hFile=0x274) returned 0x1 [0040.416] GetFileSize (in: hFile=0x274, lpFileSizeHigh=0x31e628 | out: lpFileSizeHigh=0x31e628*=0x0) returned 0x1c6e [0040.416] ReadFile (in: hFile=0x274, lpBuffer=0x2802a28, nNumberOfBytesToRead=0x1c6e, lpNumberOfBytesRead=0x31e5d4, lpOverlapped=0x0 | out: lpBuffer=0x2802a28*, lpNumberOfBytesRead=0x31e5d4*=0x1c6e, lpOverlapped=0x0) returned 1 [0040.436] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\CommonData\\AlertImage_FileOffMask.bmp" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\commondata\\alertimage_fileoffmask.bmp"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x274 [0040.436] GetFileType (hFile=0x274) returned 0x1 [0040.437] GetFileType (hFile=0x274) returned 0x1 [0040.437] WriteFile (in: hFile=0x274, lpBuffer=0x26573b8*, nNumberOfBytesToWrite=0x1c70, lpNumberOfBytesWritten=0x31e5c8, lpOverlapped=0x0 | out: lpBuffer=0x26573b8*, lpNumberOfBytesWritten=0x31e5c8*=0x1c70, lpOverlapped=0x0) returned 1 [0040.438] MoveFileW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\CommonData\\AlertImage_FileOffMask.bmp" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\commondata\\alertimage_fileoffmask.bmp"), lpNewFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\CommonData\\AlertImage_FileOffMask.bmp" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\commondata\\alertimage_fileoffmask.bmp")) returned 1 [0040.439] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\CommonData\\AlertImage_High.jpg" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\commondata\\alertimage_high.jpg"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x274 [0040.439] GetFileType (hFile=0x274) returned 0x1 [0040.439] GetFileType (hFile=0x274) returned 0x1 [0040.439] GetFileSize (in: hFile=0x274, lpFileSizeHigh=0x31e628 | out: lpFileSizeHigh=0x31e628*=0x0) returned 0x13ca [0040.439] ReadFile (in: hFile=0x274, lpBuffer=0x2659500, nNumberOfBytesToRead=0x13ca, lpNumberOfBytesRead=0x31e5d4, lpOverlapped=0x0 | out: lpBuffer=0x2659500*, lpNumberOfBytesRead=0x31e5d4*=0x13ca, lpOverlapped=0x0) returned 1 [0040.454] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\CommonData\\AlertImage_High.jpg" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\commondata\\alertimage_high.jpg"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x274 [0040.455] GetFileType (hFile=0x274) returned 0x1 [0040.455] GetFileType (hFile=0x274) returned 0x1 [0040.455] WriteFile (in: hFile=0x274, lpBuffer=0x26ac754*, nNumberOfBytesToWrite=0x13d0, lpNumberOfBytesWritten=0x31e5c8, lpOverlapped=0x0 | out: lpBuffer=0x26ac754*, lpNumberOfBytesWritten=0x31e5c8*=0x13d0, lpOverlapped=0x0) returned 1 [0040.456] MoveFileW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\CommonData\\AlertImage_High.jpg" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\commondata\\alertimage_high.jpg"), lpNewFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\CommonData\\AlertImage_High.jpg" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\commondata\\alertimage_high.jpg")) returned 1 [0040.457] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\CommonData\\AlertImage_HighMask.bmp" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\commondata\\alertimage_highmask.bmp"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x274 [0040.457] GetFileType (hFile=0x274) returned 0x1 [0040.457] GetFileType (hFile=0x274) returned 0x1 [0040.457] GetFileSize (in: hFile=0x274, lpFileSizeHigh=0x31e628 | out: lpFileSizeHigh=0x31e628*=0x0) returned 0x1c6e [0040.457] ReadFile (in: hFile=0x274, lpBuffer=0x26adfd8, nNumberOfBytesToRead=0x1c6e, lpNumberOfBytesRead=0x31e5d4, lpOverlapped=0x0 | out: lpBuffer=0x26adfd8*, lpNumberOfBytesRead=0x31e5d4*=0x1c6e, lpOverlapped=0x0) returned 1 [0040.472] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\CommonData\\AlertImage_HighMask.bmp" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\commondata\\alertimage_highmask.bmp"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x274 [0040.473] GetFileType (hFile=0x274) returned 0x1 [0040.473] GetFileType (hFile=0x274) returned 0x1 [0040.473] WriteFile (in: hFile=0x274, lpBuffer=0x2703bf0*, nNumberOfBytesToWrite=0x1c70, lpNumberOfBytesWritten=0x31e5c8, lpOverlapped=0x0 | out: lpBuffer=0x2703bf0*, lpNumberOfBytesWritten=0x31e5c8*=0x1c70, lpOverlapped=0x0) returned 1 [0040.474] MoveFileW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\CommonData\\AlertImage_HighMask.bmp" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\commondata\\alertimage_highmask.bmp"), lpNewFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\CommonData\\AlertImage_HighMask.bmp" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\commondata\\alertimage_highmask.bmp")) returned 1 [0040.475] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\CommonData\\AlertImage_Medium.jpg" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\commondata\\alertimage_medium.jpg"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x274 [0040.476] GetFileType (hFile=0x274) returned 0x1 [0040.476] GetFileType (hFile=0x274) returned 0x1 [0040.476] GetFileSize (in: hFile=0x274, lpFileSizeHigh=0x31e628 | out: lpFileSizeHigh=0x31e628*=0x0) returned 0x41de [0040.476] ReadFile (in: hFile=0x274, lpBuffer=0x2705d2c, nNumberOfBytesToRead=0x41de, lpNumberOfBytesRead=0x31e5d4, lpOverlapped=0x0 | out: lpBuffer=0x2705d2c*, lpNumberOfBytesRead=0x31e5d4*=0x41de, lpOverlapped=0x0) returned 1 [0040.491] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\CommonData\\AlertImage_Medium.jpg" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\commondata\\alertimage_medium.jpg"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x274 [0040.492] GetFileType (hFile=0x274) returned 0x1 [0040.492] GetFileType (hFile=0x274) returned 0x1 [0040.492] WriteFile (in: hFile=0x274, lpBuffer=0x2767474*, nNumberOfBytesToWrite=0x41e0, lpNumberOfBytesWritten=0x31e5c8, lpOverlapped=0x0 | out: lpBuffer=0x2767474*, lpNumberOfBytesWritten=0x31e5c8*=0x41e0, lpOverlapped=0x0) returned 1 [0040.493] MoveFileW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\CommonData\\AlertImage_Medium.jpg" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\commondata\\alertimage_medium.jpg"), lpNewFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\CommonData\\AlertImage_Medium.jpg" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\commondata\\alertimage_medium.jpg")) returned 1 [0040.495] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\CommonData\\AlertImage_MediumMAsk.bmp" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\commondata\\alertimage_mediummask.bmp"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x274 [0040.495] GetFileType (hFile=0x274) returned 0x1 [0040.495] GetFileType (hFile=0x274) returned 0x1 [0040.495] GetFileSize (in: hFile=0x274, lpFileSizeHigh=0x31e628 | out: lpFileSizeHigh=0x31e628*=0x0) returned 0x1c6e [0040.495] ReadFile (in: hFile=0x274, lpBuffer=0x276bb20, nNumberOfBytesToRead=0x1c6e, lpNumberOfBytesRead=0x31e5d4, lpOverlapped=0x0 | out: lpBuffer=0x276bb20*, lpNumberOfBytesRead=0x31e5d4*=0x1c6e, lpOverlapped=0x0) returned 1 [0040.511] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\CommonData\\AlertImage_MediumMAsk.bmp" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\commondata\\alertimage_mediummask.bmp"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x274 [0040.511] GetFileType (hFile=0x274) returned 0x1 [0040.512] GetFileType (hFile=0x274) returned 0x1 [0040.512] WriteFile (in: hFile=0x274, lpBuffer=0x27c1738*, nNumberOfBytesToWrite=0x1c70, lpNumberOfBytesWritten=0x31e5c8, lpOverlapped=0x0 | out: lpBuffer=0x27c1738*, lpNumberOfBytesWritten=0x31e5c8*=0x1c70, lpOverlapped=0x0) returned 1 [0040.513] MoveFileW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\CommonData\\AlertImage_MediumMAsk.bmp" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\commondata\\alertimage_mediummask.bmp"), lpNewFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\CommonData\\AlertImage_MediumMAsk.bmp" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\commondata\\alertimage_mediummask.bmp")) returned 1 [0040.514] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\CommonData\\AlertImage_Off.jpg" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\commondata\\alertimage_off.jpg"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x274 [0040.514] GetFileType (hFile=0x274) returned 0x1 [0040.514] GetFileType (hFile=0x274) returned 0x1 [0040.514] GetFileSize (in: hFile=0x274, lpFileSizeHigh=0x31e628 | out: lpFileSizeHigh=0x31e628*=0x0) returned 0x3e78 [0040.514] ReadFile (in: hFile=0x274, lpBuffer=0x27c3878, nNumberOfBytesToRead=0x3e78, lpNumberOfBytesRead=0x31e5d4, lpOverlapped=0x0 | out: lpBuffer=0x27c3878*, lpNumberOfBytesRead=0x31e5d4*=0x3e78, lpOverlapped=0x0) returned 1 [0040.530] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\CommonData\\AlertImage_Off.jpg" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\commondata\\alertimage_off.jpg"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x274 [0040.531] GetFileType (hFile=0x274) returned 0x1 [0040.531] GetFileType (hFile=0x274) returned 0x1 [0040.531] WriteFile (in: hFile=0x274, lpBuffer=0x2823edc*, nNumberOfBytesToWrite=0x3e80, lpNumberOfBytesWritten=0x31e5c8, lpOverlapped=0x0 | out: lpBuffer=0x2823edc*, lpNumberOfBytesWritten=0x31e5c8*=0x3e80, lpOverlapped=0x0) returned 1 [0040.533] MoveFileW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\CommonData\\AlertImage_Off.jpg" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\commondata\\alertimage_off.jpg"), lpNewFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\CommonData\\AlertImage_Off.jpg" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\commondata\\alertimage_off.jpg")) returned 1 [0040.534] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\CommonData\\AlertImage_OffMask.bmp" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\commondata\\alertimage_offmask.bmp"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x274 [0040.535] GetFileType (hFile=0x274) returned 0x1 [0040.535] GetFileType (hFile=0x274) returned 0x1 [0040.535] GetFileSize (in: hFile=0x274, lpFileSizeHigh=0x31e628 | out: lpFileSizeHigh=0x31e628*=0x0) returned 0x1c6e [0040.535] ReadFile (in: hFile=0x274, lpBuffer=0x2828200, nNumberOfBytesToRead=0x1c6e, lpNumberOfBytesRead=0x31e5d4, lpOverlapped=0x0 | out: lpBuffer=0x2828200*, lpNumberOfBytesRead=0x31e5d4*=0x1c6e, lpOverlapped=0x0) returned 1 [0040.553] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\CommonData\\AlertImage_OffMask.bmp" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\commondata\\alertimage_offmask.bmp"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x274 [0040.554] GetFileType (hFile=0x274) returned 0x1 [0040.554] GetFileType (hFile=0x274) returned 0x1 [0040.554] WriteFile (in: hFile=0x274, lpBuffer=0x267dda0*, nNumberOfBytesToWrite=0x1c70, lpNumberOfBytesWritten=0x31e5c8, lpOverlapped=0x0 | out: lpBuffer=0x267dda0*, lpNumberOfBytesWritten=0x31e5c8*=0x1c70, lpOverlapped=0x0) returned 1 [0040.555] MoveFileW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\CommonData\\AlertImage_OffMask.bmp" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\commondata\\alertimage_offmask.bmp"), lpNewFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\CommonData\\AlertImage_OffMask.bmp" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\commondata\\alertimage_offmask.bmp")) returned 1 [0040.555] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\CommonData\\CommsIncomingImage.jpg" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\commondata\\commsincomingimage.jpg"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x274 [0040.556] GetFileType (hFile=0x274) returned 0x1 [0040.556] GetFileType (hFile=0x274) returned 0x1 [0040.556] GetFileSize (in: hFile=0x274, lpFileSizeHigh=0x31e628 | out: lpFileSizeHigh=0x31e628*=0x0) returned 0x2256 [0040.556] ReadFile (in: hFile=0x274, lpBuffer=0x267fed4, nNumberOfBytesToRead=0x2256, lpNumberOfBytesRead=0x31e5d4, lpOverlapped=0x0 | out: lpBuffer=0x267fed4*, lpNumberOfBytesRead=0x31e5d4*=0x2256, lpOverlapped=0x0) returned 1 [0040.571] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\CommonData\\CommsIncomingImage.jpg" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\commondata\\commsincomingimage.jpg"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x274 [0040.572] GetFileType (hFile=0x274) returned 0x1 [0040.572] GetFileType (hFile=0x274) returned 0x1 [0040.572] WriteFile (in: hFile=0x274, lpBuffer=0x26d79f8*, nNumberOfBytesToWrite=0x2260, lpNumberOfBytesWritten=0x31e5c8, lpOverlapped=0x0 | out: lpBuffer=0x26d79f8*, lpNumberOfBytesWritten=0x31e5c8*=0x2260, lpOverlapped=0x0) returned 1 [0040.573] MoveFileW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\CommonData\\CommsIncomingImage.jpg" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\commondata\\commsincomingimage.jpg"), lpNewFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\CommonData\\CommsIncomingImage.jpg" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\commondata\\commsincomingimage.jpg")) returned 1 [0040.574] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\CommonData\\CommsIncomingImageMask.bmp" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\commondata\\commsincomingimagemask.bmp"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x274 [0040.574] GetFileType (hFile=0x274) returned 0x1 [0040.574] GetFileType (hFile=0x274) returned 0x1 [0040.574] GetFileSize (in: hFile=0x274, lpFileSizeHigh=0x31e628 | out: lpFileSizeHigh=0x31e628*=0x0) returned 0x9d8 [0040.574] ReadFile (in: hFile=0x274, lpBuffer=0x26dab10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x31e5d4, lpOverlapped=0x0 | out: lpBuffer=0x26dab10*, lpNumberOfBytesRead=0x31e5d4*=0x9d8, lpOverlapped=0x0) returned 1 [0040.589] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\CommonData\\CommsIncomingImageMask.bmp" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\commondata\\commsincomingimagemask.bmp"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x274 [0040.590] GetFileType (hFile=0x274) returned 0x1 [0040.590] GetFileType (hFile=0x274) returned 0x1 [0040.591] MoveFileW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\CommonData\\CommsIncomingImageMask.bmp" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\commondata\\commsincomingimagemask.bmp"), lpNewFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\CommonData\\CommsIncomingImageMask.bmp" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\commondata\\commsincomingimagemask.bmp")) returned 1 [0040.591] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\CommonData\\CommsIncomingImageMaskSmall.bmp" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\commondata\\commsincomingimagemasksmall.bmp"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x274 [0040.591] GetFileType (hFile=0x274) returned 0x1 [0040.591] GetFileType (hFile=0x274) returned 0x1 [0040.591] GetFileSize (in: hFile=0x274, lpFileSizeHigh=0x31e628 | out: lpFileSizeHigh=0x31e628*=0x0) returned 0x630 [0040.591] ReadFile (in: hFile=0x274, lpBuffer=0x272d5ac, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x31e5d4, lpOverlapped=0x0 | out: lpBuffer=0x272d5ac*, lpNumberOfBytesRead=0x31e5d4*=0x630, lpOverlapped=0x0) returned 1 [0040.606] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\CommonData\\CommsIncomingImageMaskSmall.bmp" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\commondata\\commsincomingimagemasksmall.bmp"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x274 [0040.607] GetFileType (hFile=0x274) returned 0x1 [0040.607] GetFileType (hFile=0x274) returned 0x1 [0040.607] WriteFile (in: hFile=0x274, lpBuffer=0x277d484*, nNumberOfBytesToWrite=0x640, lpNumberOfBytesWritten=0x31e59c, lpOverlapped=0x0 | out: lpBuffer=0x277d484*, lpNumberOfBytesWritten=0x31e59c*=0x640, lpOverlapped=0x0) returned 1 [0040.608] MoveFileW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\CommonData\\CommsIncomingImageMaskSmall.bmp" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\commondata\\commsincomingimagemasksmall.bmp"), lpNewFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\CommonData\\CommsIncomingImageMaskSmall.bmp" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\commondata\\commsincomingimagemasksmall.bmp")) returned 1 [0040.609] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\CommonData\\CommsIncomingImageSmall.jpg" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\commondata\\commsincomingimagesmall.jpg"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x274 [0040.609] GetFileType (hFile=0x274) returned 0x1 [0040.609] GetFileType (hFile=0x274) returned 0x1 [0040.609] GetFileSize (in: hFile=0x274, lpFileSizeHigh=0x31e628 | out: lpFileSizeHigh=0x31e628*=0x0) returned 0x1de3 [0040.609] ReadFile (in: hFile=0x274, lpBuffer=0x277e810, nNumberOfBytesToRead=0x1de3, lpNumberOfBytesRead=0x31e5d4, lpOverlapped=0x0 | out: lpBuffer=0x277e810*, lpNumberOfBytesRead=0x31e5d4*=0x1de3, lpOverlapped=0x0) returned 1 [0040.632] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\CommonData\\CommsIncomingImageSmall.jpg" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\commondata\\commsincomingimagesmall.jpg"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x274 [0040.633] GetFileType (hFile=0x274) returned 0x1 [0040.633] GetFileType (hFile=0x274) returned 0x1 [0040.633] WriteFile (in: hFile=0x274, lpBuffer=0x27d4ba8*, nNumberOfBytesToWrite=0x1df0, lpNumberOfBytesWritten=0x31e5c8, lpOverlapped=0x0 | out: lpBuffer=0x27d4ba8*, lpNumberOfBytesWritten=0x31e5c8*=0x1df0, lpOverlapped=0x0) returned 1 [0040.634] MoveFileW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\CommonData\\CommsIncomingImageSmall.jpg" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\commondata\\commsincomingimagesmall.jpg"), lpNewFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\CommonData\\CommsIncomingImageSmall.jpg" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\commondata\\commsincomingimagesmall.jpg")) returned 1 [0040.636] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\CommonData\\CommsOutgoingImage.jpg" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\commondata\\commsoutgoingimage.jpg"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x274 [0040.636] GetFileType (hFile=0x274) returned 0x1 [0040.636] GetFileType (hFile=0x274) returned 0x1 [0040.636] GetFileSize (in: hFile=0x274, lpFileSizeHigh=0x31e628 | out: lpFileSizeHigh=0x31e628*=0x0) returned 0x22c0 [0040.637] ReadFile (in: hFile=0x274, lpBuffer=0x27d6e88, nNumberOfBytesToRead=0x22c0, lpNumberOfBytesRead=0x31e5d4, lpOverlapped=0x0 | out: lpBuffer=0x27d6e88*, lpNumberOfBytesRead=0x31e5d4*=0x22c0, lpOverlapped=0x0) returned 1 [0040.652] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\CommonData\\CommsOutgoingImage.jpg" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\commondata\\commsoutgoingimage.jpg"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x274 [0040.652] GetFileType (hFile=0x274) returned 0x1 [0040.652] GetFileType (hFile=0x274) returned 0x1 [0040.653] WriteFile (in: hFile=0x274, lpBuffer=0x282ea7c*, nNumberOfBytesToWrite=0x22d0, lpNumberOfBytesWritten=0x31e5c8, lpOverlapped=0x0 | out: lpBuffer=0x282ea7c*, lpNumberOfBytesWritten=0x31e5c8*=0x22d0, lpOverlapped=0x0) returned 1 [0040.654] MoveFileW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\CommonData\\CommsOutgoingImage.jpg" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\commondata\\commsoutgoingimage.jpg"), lpNewFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\CommonData\\CommsOutgoingImage.jpg" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\commondata\\commsoutgoingimage.jpg")) returned 1 [0040.656] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\CommonData\\CommsOutgoingImageMask.bmp" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\commondata\\commsoutgoingimagemask.bmp"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x274 [0040.656] GetFileType (hFile=0x274) returned 0x1 [0040.656] GetFileType (hFile=0x274) returned 0x1 [0040.656] GetFileSize (in: hFile=0x274, lpFileSizeHigh=0x31e628 | out: lpFileSizeHigh=0x31e628*=0x0) returned 0x9d8 [0040.656] ReadFile (in: hFile=0x274, lpBuffer=0x2831c04, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x31e5d4, lpOverlapped=0x0 | out: lpBuffer=0x2831c04*, lpNumberOfBytesRead=0x31e5d4*=0x9d8, lpOverlapped=0x0) returned 1 [0040.673] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\CommonData\\CommsOutgoingImageMask.bmp" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\commondata\\commsoutgoingimagemask.bmp"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x274 [0040.674] GetFileType (hFile=0x274) returned 0x1 [0040.674] GetFileType (hFile=0x274) returned 0x1 [0040.674] WriteFile (in: hFile=0x274, lpBuffer=0x2681a2c*, nNumberOfBytesToWrite=0x9e0, lpNumberOfBytesWritten=0x31e59c, lpOverlapped=0x0 | out: lpBuffer=0x2681a2c*, lpNumberOfBytesWritten=0x31e59c*=0x9e0, lpOverlapped=0x0) returned 1 [0040.675] MoveFileW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\CommonData\\CommsOutgoingImageMask.bmp" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\commondata\\commsoutgoingimagemask.bmp"), lpNewFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\CommonData\\CommsOutgoingImageMask.bmp" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\commondata\\commsoutgoingimagemask.bmp")) returned 1 [0040.676] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\CommonData\\CommsOutgoingImageMaskSmall.bmp" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\commondata\\commsoutgoingimagemasksmall.bmp"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x274 [0040.676] GetFileType (hFile=0x274) returned 0x1 [0040.677] GetFileType (hFile=0x274) returned 0x1 [0040.677] GetFileSize (in: hFile=0x274, lpFileSizeHigh=0x31e628 | out: lpFileSizeHigh=0x31e628*=0x0) returned 0x630 [0040.677] ReadFile (in: hFile=0x274, lpBuffer=0x26833ec, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x31e5d4, lpOverlapped=0x0 | out: lpBuffer=0x26833ec*, lpNumberOfBytesRead=0x31e5d4*=0x630, lpOverlapped=0x0) returned 1 [0040.691] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\CommonData\\CommsOutgoingImageMaskSmall.bmp" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\commondata\\commsoutgoingimagemasksmall.bmp"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x274 [0040.692] GetFileType (hFile=0x274) returned 0x1 [0040.692] GetFileType (hFile=0x274) returned 0x1 [0040.692] WriteFile (in: hFile=0x274, lpBuffer=0x26d3420*, nNumberOfBytesToWrite=0x640, lpNumberOfBytesWritten=0x31e59c, lpOverlapped=0x0 | out: lpBuffer=0x26d3420*, lpNumberOfBytesWritten=0x31e59c*=0x640, lpOverlapped=0x0) returned 1 [0040.693] MoveFileW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\CommonData\\CommsOutgoingImageMaskSmall.bmp" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\commondata\\commsoutgoingimagemasksmall.bmp"), lpNewFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\CommonData\\CommsOutgoingImageMaskSmall.bmp" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\commondata\\commsoutgoingimagemasksmall.bmp")) returned 1 [0040.694] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\CommonData\\CommsOutgoingImageSmall.jpg" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\commondata\\commsoutgoingimagesmall.jpg"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x274 [0040.695] GetFileType (hFile=0x274) returned 0x1 [0040.695] GetFileType (hFile=0x274) returned 0x1 [0040.695] GetFileSize (in: hFile=0x274, lpFileSizeHigh=0x31e628 | out: lpFileSizeHigh=0x31e628*=0x0) returned 0x1dd7 [0040.695] ReadFile (in: hFile=0x274, lpBuffer=0x26d47ac, nNumberOfBytesToRead=0x1dd7, lpNumberOfBytesRead=0x31e5d4, lpOverlapped=0x0 | out: lpBuffer=0x26d47ac*, lpNumberOfBytesRead=0x31e5d4*=0x1dd7, lpOverlapped=0x0) returned 1 [0040.710] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\CommonData\\CommsOutgoingImageSmall.jpg" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\commondata\\commsoutgoingimagesmall.jpg"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x274 [0040.711] GetFileType (hFile=0x274) returned 0x1 [0040.711] GetFileType (hFile=0x274) returned 0x1 [0040.711] WriteFile (in: hFile=0x274, lpBuffer=0x272aaf4*, nNumberOfBytesToWrite=0x1de0, lpNumberOfBytesWritten=0x31e5c8, lpOverlapped=0x0 | out: lpBuffer=0x272aaf4*, lpNumberOfBytesWritten=0x31e5c8*=0x1de0, lpOverlapped=0x0) returned 1 [0040.712] MoveFileW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\CommonData\\CommsOutgoingImageSmall.jpg" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\commondata\\commsoutgoingimagesmall.jpg"), lpNewFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\CommonData\\CommsOutgoingImageSmall.jpg" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\commondata\\commsoutgoingimagesmall.jpg")) returned 1 [0040.713] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\CommonData\\MessageBoxIconImages.jpg" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\commondata\\messageboxiconimages.jpg"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x274 [0040.713] GetFileType (hFile=0x274) returned 0x1 [0040.714] GetFileType (hFile=0x274) returned 0x1 [0040.714] GetFileSize (in: hFile=0x274, lpFileSizeHigh=0x31e628 | out: lpFileSizeHigh=0x31e628*=0x0) returned 0x2798 [0040.714] ReadFile (in: hFile=0x274, lpBuffer=0x272cdcc, nNumberOfBytesToRead=0x2798, lpNumberOfBytesRead=0x31e5d4, lpOverlapped=0x0 | out: lpBuffer=0x272cdcc*, lpNumberOfBytesRead=0x31e5d4*=0x2798, lpOverlapped=0x0) returned 1 [0040.729] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\CommonData\\MessageBoxIconImages.jpg" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\commondata\\messageboxiconimages.jpg"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x274 [0040.730] GetFileType (hFile=0x274) returned 0x1 [0040.730] GetFileType (hFile=0x274) returned 0x1 [0040.730] WriteFile (in: hFile=0x274, lpBuffer=0x27861d0*, nNumberOfBytesToWrite=0x27a0, lpNumberOfBytesWritten=0x31e5c8, lpOverlapped=0x0 | out: lpBuffer=0x27861d0*, lpNumberOfBytesWritten=0x31e5c8*=0x27a0, lpOverlapped=0x0) returned 1 [0040.731] MoveFileW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\CommonData\\MessageBoxIconImages.jpg" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\commondata\\messageboxiconimages.jpg"), lpNewFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\CommonData\\MessageBoxIconImages.jpg" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\commondata\\messageboxiconimages.jpg")) returned 1 [0040.733] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\CommonData\\MessageBoxIconImagesMask.bmp" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\commondata\\messageboxiconimagesmask.bmp"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x274 [0040.734] GetFileType (hFile=0x274) returned 0x1 [0040.734] GetFileType (hFile=0x274) returned 0x1 [0040.734] GetFileSize (in: hFile=0x274, lpFileSizeHigh=0x31e628 | out: lpFileSizeHigh=0x31e628*=0x0) returned 0xc0 [0040.734] ReadFile (in: hFile=0x274, lpBuffer=0x2788f28, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x31e5d4, lpOverlapped=0x0 | out: lpBuffer=0x2788f28*, lpNumberOfBytesRead=0x31e5d4*=0xc0, lpOverlapped=0x0) returned 1 [0040.748] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\CommonData\\MessageBoxIconImagesMask.bmp" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\commondata\\messageboxiconimagesmask.bmp"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x274 [0040.749] GetFileType (hFile=0x274) returned 0x1 [0040.749] GetFileType (hFile=0x274) returned 0x1 [0040.750] MoveFileW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\CommonData\\MessageBoxIconImagesMask.bmp" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\commondata\\messageboxiconimagesmask.bmp"), lpNewFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\CommonData\\MessageBoxIconImagesMask.bmp" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\commondata\\messageboxiconimagesmask.bmp")) returned 1 [0040.750] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\CommonData\\UnreadIcon.jpg" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\commondata\\unreadicon.jpg"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x274 [0040.751] GetFileType (hFile=0x274) returned 0x1 [0040.751] GetFileType (hFile=0x274) returned 0x1 [0040.751] GetFileSize (in: hFile=0x274, lpFileSizeHigh=0x31e628 | out: lpFileSizeHigh=0x31e628*=0x0) returned 0x1fec [0040.751] ReadFile (in: hFile=0x274, lpBuffer=0x27d84c0, nNumberOfBytesToRead=0x1fec, lpNumberOfBytesRead=0x31e5d4, lpOverlapped=0x0 | out: lpBuffer=0x27d84c0*, lpNumberOfBytesRead=0x31e5d4*=0x1fec, lpOverlapped=0x0) returned 1 [0040.769] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\CommonData\\UnreadIcon.jpg" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\commondata\\unreadicon.jpg"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x274 [0040.770] GetFileType (hFile=0x274) returned 0x1 [0040.770] GetFileType (hFile=0x274) returned 0x1 [0040.770] WriteFile (in: hFile=0x274, lpBuffer=0x282f254*, nNumberOfBytesToWrite=0x1ff0, lpNumberOfBytesWritten=0x31e5c8, lpOverlapped=0x0 | out: lpBuffer=0x282f254*, lpNumberOfBytesWritten=0x31e5c8*=0x1ff0, lpOverlapped=0x0) returned 1 [0040.771] MoveFileW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\CommonData\\UnreadIcon.jpg" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\commondata\\unreadicon.jpg"), lpNewFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\CommonData\\UnreadIcon.jpg" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\commondata\\unreadicon.jpg")) returned 1 [0040.772] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\CommonData\\UnreadIconImages.jpg" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\commondata\\unreadiconimages.jpg"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x274 [0040.773] GetFileType (hFile=0x274) returned 0x1 [0040.773] GetFileType (hFile=0x274) returned 0x1 [0040.773] GetFileSize (in: hFile=0x274, lpFileSizeHigh=0x31e628 | out: lpFileSizeHigh=0x31e628*=0x0) returned 0x1ffe [0040.773] ReadFile (in: hFile=0x274, lpBuffer=0x28316c0, nNumberOfBytesToRead=0x1ffe, lpNumberOfBytesRead=0x31e5d4, lpOverlapped=0x0 | out: lpBuffer=0x28316c0*, lpNumberOfBytesRead=0x31e5d4*=0x1ffe, lpOverlapped=0x0) returned 1 [0040.790] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\CommonData\\UnreadIconImages.jpg" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\commondata\\unreadiconimages.jpg"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x274 [0040.791] GetFileType (hFile=0x274) returned 0x1 [0040.791] GetFileType (hFile=0x274) returned 0x1 [0040.791] WriteFile (in: hFile=0x274, lpBuffer=0x2689ac0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x31e5c8, lpOverlapped=0x0 | out: lpBuffer=0x2689ac0*, lpNumberOfBytesWritten=0x31e5c8*=0x2000, lpOverlapped=0x0) returned 1 [0040.792] MoveFileW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\CommonData\\UnreadIconImages.jpg" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\commondata\\unreadiconimages.jpg"), lpNewFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\CommonData\\UnreadIconImages.jpg" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\commondata\\unreadiconimages.jpg")) returned 1 [0040.793] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\CommonData\\UnreadIconImagesMask.bmp" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\commondata\\unreadiconimagesmask.bmp"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x274 [0040.793] GetFileType (hFile=0x274) returned 0x1 [0040.793] GetFileType (hFile=0x274) returned 0x1 [0040.793] GetFileSize (in: hFile=0x274, lpFileSizeHigh=0x31e628 | out: lpFileSizeHigh=0x31e628*=0x0) returned 0x5a4 [0040.793] ReadFile (in: hFile=0x274, lpBuffer=0x268c52c, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x31e5d4, lpOverlapped=0x0 | out: lpBuffer=0x268c52c*, lpNumberOfBytesRead=0x31e5d4*=0x5a4, lpOverlapped=0x0) returned 1 [0040.808] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\CommonData\\UnreadIconImagesMask.bmp" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\commondata\\unreadiconimagesmask.bmp"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x274 [0040.809] GetFileType (hFile=0x274) returned 0x1 [0040.809] GetFileType (hFile=0x274) returned 0x1 [0040.809] WriteFile (in: hFile=0x274, lpBuffer=0x26dc270*, nNumberOfBytesToWrite=0x5b0, lpNumberOfBytesWritten=0x31e59c, lpOverlapped=0x0 | out: lpBuffer=0x26dc270*, lpNumberOfBytesWritten=0x31e59c*=0x5b0, lpOverlapped=0x0) returned 1 [0040.810] MoveFileW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\CommonData\\UnreadIconImagesMask.bmp" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\commondata\\unreadiconimagesmask.bmp"), lpNewFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\CommonData\\UnreadIconImagesMask.bmp" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\commondata\\unreadiconimagesmask.bmp")) returned 1 [0040.811] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\Computers\\computericon.jpg" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\computers\\computericon.jpg"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x274 [0040.812] GetFileType (hFile=0x274) returned 0x1 [0040.812] GetFileType (hFile=0x274) returned 0x1 [0040.812] GetFileSize (in: hFile=0x274, lpFileSizeHigh=0x31e628 | out: lpFileSizeHigh=0x31e628*=0x0) returned 0xe1b [0040.812] ReadFile (in: hFile=0x274, lpBuffer=0x26e04bc, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x31e5d4, lpOverlapped=0x0 | out: lpBuffer=0x26e04bc*, lpNumberOfBytesRead=0x31e5d4*=0xe1b, lpOverlapped=0x0) returned 1 [0040.827] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\Computers\\computericon.jpg" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\computers\\computericon.jpg"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x274 [0040.828] GetFileType (hFile=0x274) returned 0x1 [0040.828] GetFileType (hFile=0x274) returned 0x1 [0040.828] WriteFile (in: hFile=0x274, lpBuffer=0x2732ab0*, nNumberOfBytesToWrite=0xe20, lpNumberOfBytesWritten=0x31e59c, lpOverlapped=0x0 | out: lpBuffer=0x2732ab0*, lpNumberOfBytesWritten=0x31e59c*=0xe20, lpOverlapped=0x0) returned 1 [0040.829] MoveFileW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\Computers\\computericon.jpg" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\computers\\computericon.jpg"), lpNewFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\Computers\\computericon.jpg" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\computers\\computericon.jpg")) returned 1 [0040.830] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\Computers\\computericonMask.bmp" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\computers\\computericonmask.bmp"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x274 [0040.830] GetFileType (hFile=0x274) returned 0x1 [0040.830] GetFileType (hFile=0x274) returned 0x1 [0040.830] GetFileSize (in: hFile=0x274, lpFileSizeHigh=0x31e628 | out: lpFileSizeHigh=0x31e628*=0x0) returned 0x838 [0040.830] ReadFile (in: hFile=0x274, lpBuffer=0x2734624, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x31e5d4, lpOverlapped=0x0 | out: lpBuffer=0x2734624*, lpNumberOfBytesRead=0x31e5d4*=0x838, lpOverlapped=0x0) returned 1 [0040.845] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\Computers\\computericonMask.bmp" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\computers\\computericonmask.bmp"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x274 [0040.846] GetFileType (hFile=0x274) returned 0x1 [0040.846] GetFileType (hFile=0x274) returned 0x1 [0040.846] WriteFile (in: hFile=0x274, lpBuffer=0x2784ec8*, nNumberOfBytesToWrite=0x840, lpNumberOfBytesWritten=0x31e59c, lpOverlapped=0x0 | out: lpBuffer=0x2784ec8*, lpNumberOfBytesWritten=0x31e59c*=0x840, lpOverlapped=0x0) returned 1 [0040.847] MoveFileW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\Computers\\computericonMask.bmp" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\computers\\computericonmask.bmp"), lpNewFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\Computers\\computericonMask.bmp" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\computers\\computericonmask.bmp")) returned 1 [0040.848] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\Discussion\\DiscussionToolIconImages.jpg" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\discussion\\discussiontooliconimages.jpg"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x274 [0040.849] GetFileType (hFile=0x274) returned 0x1 [0040.849] GetFileType (hFile=0x274) returned 0x1 [0040.849] GetFileSize (in: hFile=0x274, lpFileSizeHigh=0x31e628 | out: lpFileSizeHigh=0x31e628*=0x0) returned 0x393c [0040.849] ReadFile (in: hFile=0x274, lpBuffer=0x278848c, nNumberOfBytesToRead=0x393c, lpNumberOfBytesRead=0x31e5d4, lpOverlapped=0x0 | out: lpBuffer=0x278848c*, lpNumberOfBytesRead=0x31e5d4*=0x393c, lpOverlapped=0x0) returned 1 [0040.865] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\Discussion\\DiscussionToolIconImages.jpg" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\discussion\\discussiontooliconimages.jpg"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x274 [0040.866] GetFileType (hFile=0x274) returned 0x1 [0040.866] GetFileType (hFile=0x274) returned 0x1 [0040.866] WriteFile (in: hFile=0x274, lpBuffer=0x27e70b0*, nNumberOfBytesToWrite=0x3940, lpNumberOfBytesWritten=0x31e5c8, lpOverlapped=0x0 | out: lpBuffer=0x27e70b0*, lpNumberOfBytesWritten=0x31e5c8*=0x3940, lpOverlapped=0x0) returned 1 [0040.867] MoveFileW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\Discussion\\DiscussionToolIconImages.jpg" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\discussion\\discussiontooliconimages.jpg"), lpNewFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\Discussion\\DiscussionToolIconImages.jpg" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\discussion\\discussiontooliconimages.jpg")) returned 1 [0040.869] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\Discussion\\DiscussionToolIconImagesMask.bmp" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\discussion\\discussiontooliconimagesmask.bmp"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x274 [0040.873] GetFileType (hFile=0x274) returned 0x1 [0040.873] GetFileType (hFile=0x274) returned 0x1 [0040.873] GetFileSize (in: hFile=0x274, lpFileSizeHigh=0x31e628 | out: lpFileSizeHigh=0x31e628*=0x0) returned 0x1738 [0040.873] ReadFile (in: hFile=0x274, lpBuffer=0x27eaf0c, nNumberOfBytesToRead=0x1738, lpNumberOfBytesRead=0x31e5d4, lpOverlapped=0x0 | out: lpBuffer=0x27eaf0c*, lpNumberOfBytesRead=0x31e5d4*=0x1738, lpOverlapped=0x0) returned 1 [0040.887] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\Discussion\\DiscussionToolIconImagesMask.bmp" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\discussion\\discussiontooliconimagesmask.bmp"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x274 [0040.888] GetFileType (hFile=0x274) returned 0x1 [0040.888] GetFileType (hFile=0x274) returned 0x1 [0040.888] WriteFile (in: hFile=0x274, lpBuffer=0x283f130*, nNumberOfBytesToWrite=0x1740, lpNumberOfBytesWritten=0x31e5c8, lpOverlapped=0x0 | out: lpBuffer=0x283f130*, lpNumberOfBytesWritten=0x31e5c8*=0x1740, lpOverlapped=0x0) returned 1 [0040.889] MoveFileW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\Discussion\\DiscussionToolIconImagesMask.bmp" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\discussion\\discussiontooliconimagesmask.bmp"), lpNewFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\Discussion\\DiscussionToolIconImagesMask.bmp" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\discussion\\discussiontooliconimagesmask.bmp")) returned 1 [0040.891] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\DocumentShare\\WSSFilesToolHomePageBackground.jpg" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\documentshare\\wssfilestoolhomepagebackground.jpg"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x274 [0040.891] GetFileType (hFile=0x274) returned 0x1 [0040.892] GetFileType (hFile=0x274) returned 0x1 [0040.892] GetFileSize (in: hFile=0x274, lpFileSizeHigh=0x31e628 | out: lpFileSizeHigh=0x31e628*=0x0) returned 0xab11 [0040.892] ReadFile (in: hFile=0x274, lpBuffer=0x2842bfc, nNumberOfBytesToRead=0xab11, lpNumberOfBytesRead=0x31e5d4, lpOverlapped=0x0 | out: lpBuffer=0x2842bfc*, lpNumberOfBytesRead=0x31e5d4*=0xab11, lpOverlapped=0x0) returned 1 [0040.911] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\DocumentShare\\WSSFilesToolHomePageBackground.jpg" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\documentshare\\wssfilestoolhomepagebackground.jpg"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x274 [0040.912] GetFileType (hFile=0x274) returned 0x1 [0040.912] GetFileType (hFile=0x274) returned 0x1 [0040.912] WriteFile (in: hFile=0x274, lpBuffer=0x26b6d34*, nNumberOfBytesToWrite=0xab20, lpNumberOfBytesWritten=0x31e5c8, lpOverlapped=0x0 | out: lpBuffer=0x26b6d34*, lpNumberOfBytesWritten=0x31e5c8*=0xab20, lpOverlapped=0x0) returned 1 [0040.914] MoveFileW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\DocumentShare\\WSSFilesToolHomePageBackground.jpg" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\documentshare\\wssfilestoolhomepagebackground.jpg"), lpNewFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\DocumentShare\\WSSFilesToolHomePageBackground.jpg" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\documentshare\\wssfilestoolhomepagebackground.jpg")) returned 1 [0040.921] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveDocumentReview\\ActiveTabImage.jpg" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\groovedocumentreview\\activetabimage.jpg"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x274 [0040.922] GetFileType (hFile=0x274) returned 0x1 [0040.922] GetFileType (hFile=0x274) returned 0x1 [0040.922] GetFileSize (in: hFile=0x274, lpFileSizeHigh=0x31e628 | out: lpFileSizeHigh=0x31e628*=0x0) returned 0x2519 [0040.922] ReadFile (in: hFile=0x274, lpBuffer=0x26c5a7c, nNumberOfBytesToRead=0x2519, lpNumberOfBytesRead=0x31e5d4, lpOverlapped=0x0 | out: lpBuffer=0x26c5a7c*, lpNumberOfBytesRead=0x31e5d4*=0x2519, lpOverlapped=0x0) returned 1 [0040.942] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveDocumentReview\\ActiveTabImage.jpg" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\groovedocumentreview\\activetabimage.jpg"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x274 [0040.943] GetFileType (hFile=0x274) returned 0x1 [0040.943] GetFileType (hFile=0x274) returned 0x1 [0040.943] WriteFile (in: hFile=0x274, lpBuffer=0x271e360*, nNumberOfBytesToWrite=0x2520, lpNumberOfBytesWritten=0x31e5c8, lpOverlapped=0x0 | out: lpBuffer=0x271e360*, lpNumberOfBytesWritten=0x31e5c8*=0x2520, lpOverlapped=0x0) returned 1 [0040.944] MoveFileW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveDocumentReview\\ActiveTabImage.jpg" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\groovedocumentreview\\activetabimage.jpg"), lpNewFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveDocumentReview\\ActiveTabImage.jpg" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\groovedocumentreview\\activetabimage.jpg")) returned 1 [0040.945] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveDocumentReview\\ActiveTabImageMask.bmp" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\groovedocumentreview\\activetabimagemask.bmp"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x274 [0040.947] GetFileType (hFile=0x274) returned 0x1 [0040.947] GetFileType (hFile=0x274) returned 0x1 [0040.947] GetFileSize (in: hFile=0x274, lpFileSizeHigh=0x31e628 | out: lpFileSizeHigh=0x31e628*=0x0) returned 0xca8 [0040.947] ReadFile (in: hFile=0x274, lpBuffer=0x2721a28, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x31e5d4, lpOverlapped=0x0 | out: lpBuffer=0x2721a28*, lpNumberOfBytesRead=0x31e5d4*=0xca8, lpOverlapped=0x0) returned 1 [0040.962] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveDocumentReview\\ActiveTabImageMask.bmp" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\groovedocumentreview\\activetabimagemask.bmp"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x274 [0040.963] GetFileType (hFile=0x274) returned 0x1 [0040.963] GetFileType (hFile=0x274) returned 0x1 [0040.963] WriteFile (in: hFile=0x274, lpBuffer=0x2773918*, nNumberOfBytesToWrite=0xcb0, lpNumberOfBytesWritten=0x31e59c, lpOverlapped=0x0 | out: lpBuffer=0x2773918*, lpNumberOfBytesWritten=0x31e59c*=0xcb0, lpOverlapped=0x0) returned 1 [0040.964] MoveFileW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveDocumentReview\\ActiveTabImageMask.bmp" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\groovedocumentreview\\activetabimagemask.bmp"), lpNewFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveDocumentReview\\ActiveTabImageMask.bmp" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\groovedocumentreview\\activetabimagemask.bmp")) returned 1 [0040.965] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveDocumentReview\\BodyPaneBackground.jpg" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\groovedocumentreview\\bodypanebackground.jpg"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x274 [0040.966] GetFileType (hFile=0x274) returned 0x1 [0040.966] GetFileType (hFile=0x274) returned 0x1 [0040.966] GetFileSize (in: hFile=0x274, lpFileSizeHigh=0x31e628 | out: lpFileSizeHigh=0x31e628*=0x0) returned 0x9bd [0040.966] ReadFile (in: hFile=0x274, lpBuffer=0x2775670, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x31e5d4, lpOverlapped=0x0 | out: lpBuffer=0x2775670*, lpNumberOfBytesRead=0x31e5d4*=0x9bd, lpOverlapped=0x0) returned 1 [0040.982] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveDocumentReview\\BodyPaneBackground.jpg" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\groovedocumentreview\\bodypanebackground.jpg"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x274 [0040.983] GetFileType (hFile=0x274) returned 0x1 [0040.983] GetFileType (hFile=0x274) returned 0x1 [0040.984] MoveFileW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveDocumentReview\\BodyPaneBackground.jpg" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\groovedocumentreview\\bodypanebackground.jpg"), lpNewFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveDocumentReview\\BodyPaneBackground.jpg" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\groovedocumentreview\\bodypanebackground.jpg")) returned 1 [0040.984] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveDocumentReview\\InactiveTabImage.jpg" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\groovedocumentreview\\inactivetabimage.jpg"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x274 [0040.985] GetFileType (hFile=0x274) returned 0x1 [0040.985] GetFileType (hFile=0x274) returned 0x1 [0040.985] GetFileSize (in: hFile=0x274, lpFileSizeHigh=0x31e628 | out: lpFileSizeHigh=0x31e628*=0x0) returned 0x24ed [0040.985] ReadFile (in: hFile=0x274, lpBuffer=0x27c7a30, nNumberOfBytesToRead=0x24ed, lpNumberOfBytesRead=0x31e5d4, lpOverlapped=0x0 | out: lpBuffer=0x27c7a30*, lpNumberOfBytesRead=0x31e5d4*=0x24ed, lpOverlapped=0x0) returned 1 [0041.000] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveDocumentReview\\InactiveTabImage.jpg" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\groovedocumentreview\\inactivetabimage.jpg"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x274 [0041.001] GetFileType (hFile=0x274) returned 0x1 [0041.001] GetFileType (hFile=0x274) returned 0x1 [0041.001] WriteFile (in: hFile=0x274, lpBuffer=0x28200c8*, nNumberOfBytesToWrite=0x24f0, lpNumberOfBytesWritten=0x31e5c8, lpOverlapped=0x0 | out: lpBuffer=0x28200c8*, lpNumberOfBytesWritten=0x31e5c8*=0x24f0, lpOverlapped=0x0) returned 1 [0041.002] MoveFileW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveDocumentReview\\InactiveTabImage.jpg" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\groovedocumentreview\\inactivetabimage.jpg"), lpNewFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveDocumentReview\\InactiveTabImage.jpg" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\groovedocumentreview\\inactivetabimage.jpg")) returned 1 [0041.003] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveDocumentReview\\InactiveTabImageMask.bmp" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\groovedocumentreview\\inactivetabimagemask.bmp"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x274 [0041.004] GetFileType (hFile=0x274) returned 0x1 [0041.004] GetFileType (hFile=0x274) returned 0x1 [0041.004] GetFileSize (in: hFile=0x274, lpFileSizeHigh=0x31e628 | out: lpFileSizeHigh=0x31e628*=0x0) returned 0xca8 [0041.004] ReadFile (in: hFile=0x274, lpBuffer=0x2823778, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x31e5d4, lpOverlapped=0x0 | out: lpBuffer=0x2823778*, lpNumberOfBytesRead=0x31e5d4*=0xca8, lpOverlapped=0x0) returned 1 [0041.023] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveDocumentReview\\InactiveTabImageMask.bmp" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\groovedocumentreview\\inactivetabimagemask.bmp"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x274 [0041.024] GetFileType (hFile=0x274) returned 0x1 [0041.024] GetFileType (hFile=0x274) returned 0x1 [0041.024] WriteFile (in: hFile=0x274, lpBuffer=0x266bd80*, nNumberOfBytesToWrite=0xcb0, lpNumberOfBytesWritten=0x31e59c, lpOverlapped=0x0 | out: lpBuffer=0x266bd80*, lpNumberOfBytesWritten=0x31e59c*=0xcb0, lpOverlapped=0x0) returned 1 [0041.025] MoveFileW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveDocumentReview\\InactiveTabImageMask.bmp" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\groovedocumentreview\\inactivetabimagemask.bmp"), lpNewFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveDocumentReview\\InactiveTabImageMask.bmp" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\groovedocumentreview\\inactivetabimagemask.bmp")) returned 1 [0041.026] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveDocumentReview\\MarkupIconImages.jpg" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\groovedocumentreview\\markupiconimages.jpg"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x274 [0041.027] GetFileType (hFile=0x274) returned 0x1 [0041.027] GetFileType (hFile=0x274) returned 0x1 [0041.027] GetFileSize (in: hFile=0x274, lpFileSizeHigh=0x31e628 | out: lpFileSizeHigh=0x31e628*=0x0) returned 0x98b [0041.027] ReadFile (in: hFile=0x274, lpBuffer=0x266daa4, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x31e5d4, lpOverlapped=0x0 | out: lpBuffer=0x266daa4*, lpNumberOfBytesRead=0x31e5d4*=0x98b, lpOverlapped=0x0) returned 1 [0041.042] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveDocumentReview\\MarkupIconImages.jpg" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\groovedocumentreview\\markupiconimages.jpg"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x274 [0041.043] GetFileType (hFile=0x274) returned 0x1 [0041.043] GetFileType (hFile=0x274) returned 0x1 [0041.049] MoveFileW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveDocumentReview\\MarkupIconImages.jpg" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\groovedocumentreview\\markupiconimages.jpg"), lpNewFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveDocumentReview\\MarkupIconImages.jpg" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\groovedocumentreview\\markupiconimages.jpg")) returned 1 [0041.050] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveDocumentReview\\MarkupIconImagesMask.bmp" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\groovedocumentreview\\markupiconimagesmask.bmp"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x274 [0041.051] GetFileType (hFile=0x274) returned 0x1 [0041.051] GetFileType (hFile=0x274) returned 0x1 [0041.051] GetFileSize (in: hFile=0x274, lpFileSizeHigh=0x31e628 | out: lpFileSizeHigh=0x31e628*=0x0) returned 0x74 [0041.051] ReadFile (in: hFile=0x274, lpBuffer=0x26bff54, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x31e5d4, lpOverlapped=0x0 | out: lpBuffer=0x26bff54*, lpNumberOfBytesRead=0x31e5d4*=0x74, lpOverlapped=0x0) returned 1 [0041.065] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveDocumentReview\\MarkupIconImagesMask.bmp" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\groovedocumentreview\\markupiconimagesmask.bmp"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x274 [0041.066] GetFileType (hFile=0x274) returned 0x1 [0041.066] GetFileType (hFile=0x274) returned 0x1 [0041.066] WriteFile (in: hFile=0x274, lpBuffer=0x270e104*, nNumberOfBytesToWrite=0x80, lpNumberOfBytesWritten=0x31e59c, lpOverlapped=0x0 | out: lpBuffer=0x270e104*, lpNumberOfBytesWritten=0x31e59c*=0x80, lpOverlapped=0x0) returned 1 [0041.067] MoveFileW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveDocumentReview\\MarkupIconImagesMask.bmp" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\groovedocumentreview\\markupiconimagesmask.bmp"), lpNewFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveDocumentReview\\MarkupIconImagesMask.bmp" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\groovedocumentreview\\markupiconimagesmask.bmp")) returned 1 [0041.074] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\AddToViewArrow.jpg" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms\\addtoviewarrow.jpg"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x274 [0041.075] GetFileType (hFile=0x274) returned 0x1 [0041.076] GetFileType (hFile=0x274) returned 0x1 [0041.076] GetFileSize (in: hFile=0x274, lpFileSizeHigh=0x31e628 | out: lpFileSizeHigh=0x31e628*=0x0) returned 0xbe8 [0041.076] ReadFile (in: hFile=0x274, lpBuffer=0x27214ec, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x31e5d4, lpOverlapped=0x0 | out: lpBuffer=0x27214ec*, lpNumberOfBytesRead=0x31e5d4*=0xbe8, lpOverlapped=0x0) returned 1 [0041.091] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\AddToViewArrow.jpg" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms\\addtoviewarrow.jpg"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x274 [0041.091] GetFileType (hFile=0x274) returned 0x1 [0041.092] GetFileType (hFile=0x274) returned 0x1 [0041.093] MoveFileW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\AddToViewArrow.jpg" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms\\addtoviewarrow.jpg"), lpNewFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\AddToViewArrow.jpg" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms\\addtoviewarrow.jpg")) returned 1 [0041.093] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\AddToViewArrowMask.bmp" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms\\addtoviewarrowmask.bmp"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x274 [0041.093] GetFileType (hFile=0x274) returned 0x1 [0041.093] GetFileType (hFile=0x274) returned 0x1 [0041.093] GetFileSize (in: hFile=0x274, lpFileSizeHigh=0x31e628 | out: lpFileSizeHigh=0x31e628*=0x0) returned 0x924 [0041.093] ReadFile (in: hFile=0x274, lpBuffer=0x2774c78, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x31e5d4, lpOverlapped=0x0 | out: lpBuffer=0x2774c78*, lpNumberOfBytesRead=0x31e5d4*=0x924, lpOverlapped=0x0) returned 1 [0041.108] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\AddToViewArrowMask.bmp" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms\\addtoviewarrowmask.bmp"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x274 [0041.109] GetFileType (hFile=0x274) returned 0x1 [0041.109] GetFileType (hFile=0x274) returned 0x1 [0041.110] MoveFileW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\AddToViewArrowMask.bmp" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms\\addtoviewarrowmask.bmp"), lpNewFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\AddToViewArrowMask.bmp" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms\\addtoviewarrowmask.bmp")) returned 1 [0041.110] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\FormsBlankPage.html" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms\\formsblankpage.html"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x274 [0041.111] GetFileType (hFile=0x274) returned 0x1 [0041.111] GetFileType (hFile=0x274) returned 0x1 [0041.111] GetFileSize (in: hFile=0x274, lpFileSizeHigh=0x31e628 | out: lpFileSizeHigh=0x31e628*=0x0) returned 0x4b2 [0041.111] ReadFile (in: hFile=0x274, lpBuffer=0x27c7440, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x31e5d4, lpOverlapped=0x0 | out: lpBuffer=0x27c7440*, lpNumberOfBytesRead=0x31e5d4*=0x4b2, lpOverlapped=0x0) returned 1 [0041.126] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\FormsBlankPage.html" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms\\formsblankpage.html"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x274 [0041.127] GetFileType (hFile=0x274) returned 0x1 [0041.127] GetFileType (hFile=0x274) returned 0x1 [0041.128] MoveFileW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\FormsBlankPage.html" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms\\formsblankpage.html"), lpNewFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\FormsBlankPage.html" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms\\formsblankpage.html")) returned 1 [0041.128] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\FormsBrowserUpgrade.html" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms\\formsbrowserupgrade.html"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x274 [0041.129] GetFileType (hFile=0x274) returned 0x1 [0041.129] GetFileType (hFile=0x274) returned 0x1 [0041.129] GetFileSize (in: hFile=0x274, lpFileSizeHigh=0x31e628 | out: lpFileSizeHigh=0x31e628*=0x0) returned 0x7a7 [0041.129] ReadFile (in: hFile=0x274, lpBuffer=0x2818670, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x31e5d4, lpOverlapped=0x0 | out: lpBuffer=0x2818670*, lpNumberOfBytesRead=0x31e5d4*=0x7a7, lpOverlapped=0x0) returned 1 [0041.146] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\FormsBrowserUpgrade.html" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms\\formsbrowserupgrade.html"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x274 [0041.146] GetFileType (hFile=0x274) returned 0x1 [0041.146] GetFileType (hFile=0x274) returned 0x1 [0041.147] MoveFileW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\FormsBrowserUpgrade.html" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms\\formsbrowserupgrade.html"), lpNewFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\FormsBrowserUpgrade.html" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms\\formsbrowserupgrade.html")) returned 1 [0041.148] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\FormsDoNotTrust.html" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms\\formsdonottrust.html"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x274 [0041.148] GetFileType (hFile=0x274) returned 0x1 [0041.148] GetFileType (hFile=0x274) returned 0x1 [0041.148] GetFileSize (in: hFile=0x274, lpFileSizeHigh=0x31e628 | out: lpFileSizeHigh=0x31e628*=0x0) returned 0x805 [0041.149] ReadFile (in: hFile=0x274, lpBuffer=0x266cd64, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x31e5d4, lpOverlapped=0x0 | out: lpBuffer=0x266cd64*, lpNumberOfBytesRead=0x31e5d4*=0x805, lpOverlapped=0x0) returned 1 [0041.163] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\FormsDoNotTrust.html" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms\\formsdonottrust.html"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x274 [0041.164] GetFileType (hFile=0x274) returned 0x1 [0041.164] GetFileType (hFile=0x274) returned 0x1 [0041.165] MoveFileW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\FormsDoNotTrust.html" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms\\formsdonottrust.html"), lpNewFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\FormsDoNotTrust.html" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms\\formsdonottrust.html")) returned 1 [0041.165] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\FormsHomePage.html" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms\\formshomepage.html"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x274 [0041.166] GetFileType (hFile=0x274) returned 0x1 [0041.166] GetFileType (hFile=0x274) returned 0x1 [0041.166] GetFileSize (in: hFile=0x274, lpFileSizeHigh=0x31e628 | out: lpFileSizeHigh=0x31e628*=0x0) returned 0xc96 [0041.166] ReadFile (in: hFile=0x274, lpBuffer=0x26bf664, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x31e5d4, lpOverlapped=0x0 | out: lpBuffer=0x26bf664*, lpNumberOfBytesRead=0x31e5d4*=0xc96, lpOverlapped=0x0) returned 1 [0041.181] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\FormsHomePage.html" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms\\formshomepage.html"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x274 [0041.182] GetFileType (hFile=0x274) returned 0x1 [0041.182] GetFileType (hFile=0x274) returned 0x1 [0041.183] MoveFileW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\FormsHomePage.html" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms\\formshomepage.html"), lpNewFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\FormsHomePage.html" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms\\formshomepage.html")) returned 1 [0041.183] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\FormsHomePageStyle.css" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms\\formshomepagestyle.css"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x274 [0041.184] GetFileType (hFile=0x274) returned 0x1 [0041.184] GetFileType (hFile=0x274) returned 0x1 [0041.184] GetFileSize (in: hFile=0x274, lpFileSizeHigh=0x31e628 | out: lpFileSizeHigh=0x31e628*=0x0) returned 0x40c [0041.184] ReadFile (in: hFile=0x274, lpBuffer=0x2712c60, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x31e5d4, lpOverlapped=0x0 | out: lpBuffer=0x2712c60*, lpNumberOfBytesRead=0x31e5d4*=0x40c, lpOverlapped=0x0) returned 1 [0041.198] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\FormsHomePageStyle.css" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms\\formshomepagestyle.css"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x274 [0041.199] GetFileType (hFile=0x274) returned 0x1 [0041.199] GetFileType (hFile=0x274) returned 0x1 [0041.199] WriteFile (in: hFile=0x274, lpBuffer=0x276201c*, nNumberOfBytesToWrite=0x410, lpNumberOfBytesWritten=0x31e59c, lpOverlapped=0x0 | out: lpBuffer=0x276201c*, lpNumberOfBytesWritten=0x31e59c*=0x410, lpOverlapped=0x0) returned 1 [0041.200] MoveFileW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\FormsHomePageStyle.css" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms\\formshomepagestyle.css"), lpNewFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\FormsHomePageStyle.css" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms\\formshomepagestyle.css")) returned 1 [0041.202] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\FormsPreviewTemplate.html" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms\\formspreviewtemplate.html"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x274 [0041.202] GetFileType (hFile=0x274) returned 0x1 [0041.202] GetFileType (hFile=0x274) returned 0x1 [0041.202] GetFileSize (in: hFile=0x274, lpFileSizeHigh=0x31e628 | out: lpFileSizeHigh=0x31e628*=0x0) returned 0x3a2 [0041.203] ReadFile (in: hFile=0x274, lpBuffer=0x2763730, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x31e5d4, lpOverlapped=0x0 | out: lpBuffer=0x2763730*, lpNumberOfBytesRead=0x31e5d4*=0x3a2, lpOverlapped=0x0) returned 1 [0041.217] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\FormsPreviewTemplate.html" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms\\formspreviewtemplate.html"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x274 [0041.217] GetFileType (hFile=0x274) returned 0x1 [0041.217] GetFileType (hFile=0x274) returned 0x1 [0041.217] WriteFile (in: hFile=0x274, lpBuffer=0x27b2920*, nNumberOfBytesToWrite=0x3b0, lpNumberOfBytesWritten=0x31e59c, lpOverlapped=0x0 | out: lpBuffer=0x27b2920*, lpNumberOfBytesWritten=0x31e59c*=0x3b0, lpOverlapped=0x0) returned 1 [0041.218] MoveFileW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\FormsPreviewTemplate.html" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms\\formspreviewtemplate.html"), lpNewFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\FormsPreviewTemplate.html" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms\\formspreviewtemplate.html")) returned 1 [0041.219] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\FormsPrintTemplate.html" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms\\formsprinttemplate.html"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x274 [0041.220] GetFileType (hFile=0x274) returned 0x1 [0041.220] GetFileType (hFile=0x274) returned 0x1 [0041.220] GetFileSize (in: hFile=0x274, lpFileSizeHigh=0x31e628 | out: lpFileSizeHigh=0x31e628*=0x0) returned 0x262 [0041.220] ReadFile (in: hFile=0x274, lpBuffer=0x27b3ef4, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x31e5d4, lpOverlapped=0x0 | out: lpBuffer=0x27b3ef4*, lpNumberOfBytesRead=0x31e5d4*=0x262, lpOverlapped=0x0) returned 1 [0041.235] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\FormsPrintTemplate.html" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms\\formsprinttemplate.html"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x274 [0041.236] GetFileType (hFile=0x274) returned 0x1 [0041.236] GetFileType (hFile=0x274) returned 0x1 [0041.236] WriteFile (in: hFile=0x274, lpBuffer=0x2802a9c*, nNumberOfBytesToWrite=0x270, lpNumberOfBytesWritten=0x31e59c, lpOverlapped=0x0 | out: lpBuffer=0x2802a9c*, lpNumberOfBytesWritten=0x31e59c*=0x270, lpOverlapped=0x0) returned 1 [0041.237] MoveFileW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\FormsPrintTemplate.html" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms\\formsprinttemplate.html"), lpNewFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\FormsPrintTemplate.html" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms\\formsprinttemplate.html")) returned 1 [0041.238] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\FormsViewAttachmentIcons.jpg" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms\\formsviewattachmenticons.jpg"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x274 [0041.239] GetFileType (hFile=0x274) returned 0x1 [0041.239] GetFileType (hFile=0x274) returned 0x1 [0041.239] GetFileSize (in: hFile=0x274, lpFileSizeHigh=0x31e628 | out: lpFileSizeHigh=0x31e628*=0x0) returned 0x1499 [0041.239] ReadFile (in: hFile=0x274, lpBuffer=0x2803e28, nNumberOfBytesToRead=0x1499, lpNumberOfBytesRead=0x31e5d4, lpOverlapped=0x0 | out: lpBuffer=0x2803e28*, lpNumberOfBytesRead=0x31e5d4*=0x1499, lpOverlapped=0x0) returned 1 [0041.263] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\FormsViewAttachmentIcons.jpg" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms\\formsviewattachmenticons.jpg"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x274 [0041.264] GetFileType (hFile=0x274) returned 0x1 [0041.264] GetFileType (hFile=0x274) returned 0x1 [0041.264] WriteFile (in: hFile=0x274, lpBuffer=0x2658018*, nNumberOfBytesToWrite=0x14a0, lpNumberOfBytesWritten=0x31e5c8, lpOverlapped=0x0 | out: lpBuffer=0x2658018*, lpNumberOfBytesWritten=0x31e5c8*=0x14a0, lpOverlapped=0x0) returned 1 [0041.265] MoveFileW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\FormsViewAttachmentIcons.jpg" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms\\formsviewattachmenticons.jpg"), lpNewFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\FormsViewAttachmentIcons.jpg" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms\\formsviewattachmenticons.jpg")) returned 1 [0041.266] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\FormsViewAttachmentIconsMask.bmp" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms\\formsviewattachmenticonsmask.bmp"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x274 [0041.267] GetFileType (hFile=0x274) returned 0x1 [0041.267] GetFileType (hFile=0x274) returned 0x1 [0041.267] GetFileSize (in: hFile=0x274, lpFileSizeHigh=0x31e628 | out: lpFileSizeHigh=0x31e628*=0x0) returned 0x638 [0041.267] ReadFile (in: hFile=0x274, lpBuffer=0x265a028, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x31e5d4, lpOverlapped=0x0 | out: lpBuffer=0x265a028*, lpNumberOfBytesRead=0x31e5d4*=0x638, lpOverlapped=0x0) returned 1 [0041.282] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\FormsViewAttachmentIconsMask.bmp" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms\\formsviewattachmenticonsmask.bmp"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x274 [0041.283] GetFileType (hFile=0x274) returned 0x1 [0041.283] GetFileType (hFile=0x274) returned 0x1 [0041.283] WriteFile (in: hFile=0x274, lpBuffer=0x26aa05c*, nNumberOfBytesToWrite=0x640, lpNumberOfBytesWritten=0x31e59c, lpOverlapped=0x0 | out: lpBuffer=0x26aa05c*, lpNumberOfBytesWritten=0x31e59c*=0x640, lpOverlapped=0x0) returned 1 [0041.284] MoveFileW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\FormsViewAttachmentIconsMask.bmp" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms\\formsviewattachmenticonsmask.bmp"), lpNewFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\FormsViewAttachmentIconsMask.bmp" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms\\formsviewattachmenticonsmask.bmp")) returned 1 [0041.285] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\FormsViewFrame.html" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms\\formsviewframe.html"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x274 [0041.285] GetFileType (hFile=0x274) returned 0x1 [0041.286] GetFileType (hFile=0x274) returned 0x1 [0041.286] GetFileSize (in: hFile=0x274, lpFileSizeHigh=0x31e628 | out: lpFileSizeHigh=0x31e628*=0x0) returned 0xfa1 [0041.286] ReadFile (in: hFile=0x274, lpBuffer=0x26ac380, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x31e5d4, lpOverlapped=0x0 | out: lpBuffer=0x26ac380*, lpNumberOfBytesRead=0x31e5d4*=0xfa1, lpOverlapped=0x0) returned 1 [0041.301] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\FormsViewFrame.html" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms\\formsviewframe.html"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x274 [0041.301] GetFileType (hFile=0x274) returned 0x1 [0041.301] GetFileType (hFile=0x274) returned 0x1 [0041.302] MoveFileW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\FormsViewFrame.html" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms\\formsviewframe.html"), lpNewFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\FormsViewFrame.html" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms\\formsviewframe.html")) returned 1 [0041.303] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\FormToolImages.jpg" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms\\formtoolimages.jpg"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x274 [0041.303] GetFileType (hFile=0x274) returned 0x1 [0041.304] GetFileType (hFile=0x274) returned 0x1 [0041.304] GetFileSize (in: hFile=0x274, lpFileSizeHigh=0x31e628 | out: lpFileSizeHigh=0x31e628*=0x0) returned 0x1bfb [0041.304] ReadFile (in: hFile=0x274, lpBuffer=0x2700494, nNumberOfBytesToRead=0x1bfb, lpNumberOfBytesRead=0x31e5d4, lpOverlapped=0x0 | out: lpBuffer=0x2700494*, lpNumberOfBytesRead=0x31e5d4*=0x1bfb, lpOverlapped=0x0) returned 1 [0041.318] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\FormToolImages.jpg" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms\\formtoolimages.jpg"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x274 [0041.319] GetFileType (hFile=0x274) returned 0x1 [0041.319] GetFileType (hFile=0x274) returned 0x1 [0041.319] WriteFile (in: hFile=0x274, lpBuffer=0x2755e7c*, nNumberOfBytesToWrite=0x1c00, lpNumberOfBytesWritten=0x31e5c8, lpOverlapped=0x0 | out: lpBuffer=0x2755e7c*, lpNumberOfBytesWritten=0x31e5c8*=0x1c00, lpOverlapped=0x0) returned 1 [0041.320] MoveFileW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\FormToolImages.jpg" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms\\formtoolimages.jpg"), lpNewFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\FormToolImages.jpg" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms\\formtoolimages.jpg")) returned 1 [0041.321] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\GrooveFormsMetaData.xml" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms\\grooveformsmetadata.xml"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x274 [0041.322] GetFileType (hFile=0x274) returned 0x1 [0041.322] GetFileType (hFile=0x274) returned 0x1 [0041.322] GetFileSize (in: hFile=0x274, lpFileSizeHigh=0x31e628 | out: lpFileSizeHigh=0x31e628*=0x0) returned 0x167d1 [0041.322] ReadFile (in: hFile=0x274, lpBuffer=0x37052a8, nNumberOfBytesToRead=0x167d1, lpNumberOfBytesRead=0x31e5d4, lpOverlapped=0x0 | out: lpBuffer=0x37052a8*, lpNumberOfBytesRead=0x31e5d4*=0x167d1, lpOverlapped=0x0) returned 1 [0041.339] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\GrooveFormsMetaData.xml" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms\\grooveformsmetadata.xml"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x274 [0041.340] GetFileType (hFile=0x274) returned 0x1 [0041.340] GetFileType (hFile=0x274) returned 0x1 [0041.340] WriteFile (in: hFile=0x274, lpBuffer=0x3775a38*, nNumberOfBytesToWrite=0x167e0, lpNumberOfBytesWritten=0x31e5c8, lpOverlapped=0x0 | out: lpBuffer=0x3775a38*, lpNumberOfBytesWritten=0x31e5c8*=0x167e0, lpOverlapped=0x0) returned 1 [0041.343] MoveFileW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\GrooveFormsMetaData.xml" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms\\grooveformsmetadata.xml"), lpNewFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\GrooveFormsMetaData.xml" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms\\grooveformsmetadata.xml")) returned 1 [0041.344] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\ViewHeaderPreview.jpg" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms\\viewheaderpreview.jpg"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x274 [0041.345] GetFileType (hFile=0x274) returned 0x1 [0041.345] GetFileType (hFile=0x274) returned 0x1 [0041.345] GetFileSize (in: hFile=0x274, lpFileSizeHigh=0x31e628 | out: lpFileSizeHigh=0x31e628*=0x0) returned 0xd78 [0041.345] ReadFile (in: hFile=0x274, lpBuffer=0x27a6080, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x31e5d4, lpOverlapped=0x0 | out: lpBuffer=0x27a6080*, lpNumberOfBytesRead=0x31e5d4*=0xd78, lpOverlapped=0x0) returned 1 [0041.360] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\ViewHeaderPreview.jpg" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms\\viewheaderpreview.jpg"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x274 [0041.361] GetFileType (hFile=0x274) returned 0x1 [0041.361] GetFileType (hFile=0x274) returned 0x1 [0041.362] MoveFileW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\ViewHeaderPreview.jpg" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms\\viewheaderpreview.jpg"), lpNewFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\ViewHeaderPreview.jpg" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms\\viewheaderpreview.jpg")) returned 1 [0041.366] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\FieldTypePreview\\Attachments.jpg" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms\\fieldtypepreview\\attachments.jpg"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x274 [0041.367] GetFileType (hFile=0x274) returned 0x1 [0041.367] GetFileType (hFile=0x274) returned 0x1 [0041.367] GetFileSize (in: hFile=0x274, lpFileSizeHigh=0x31e5b0 | out: lpFileSizeHigh=0x31e5b0*=0x0) returned 0x368c [0041.367] ReadFile (in: hFile=0x274, lpBuffer=0x2801fb8, nNumberOfBytesToRead=0x368c, lpNumberOfBytesRead=0x31e55c, lpOverlapped=0x0 | out: lpBuffer=0x2801fb8*, lpNumberOfBytesRead=0x31e55c*=0x368c, lpOverlapped=0x0) returned 1 [0041.384] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\FieldTypePreview\\Attachments.jpg" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms\\fieldtypepreview\\attachments.jpg"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x274 [0041.385] GetFileType (hFile=0x274) returned 0x1 [0041.385] GetFileType (hFile=0x274) returned 0x1 [0041.385] WriteFile (in: hFile=0x274, lpBuffer=0x26637fc*, nNumberOfBytesToWrite=0x3690, lpNumberOfBytesWritten=0x31e550, lpOverlapped=0x0 | out: lpBuffer=0x26637fc*, lpNumberOfBytesWritten=0x31e550*=0x3690, lpOverlapped=0x0) returned 1 [0041.387] MoveFileW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\FieldTypePreview\\Attachments.jpg" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms\\fieldtypepreview\\attachments.jpg"), lpNewFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\FieldTypePreview\\Attachments.jpg" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms\\fieldtypepreview\\attachments.jpg")) returned 1 [0041.388] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\FieldTypePreview\\DigitalInk.jpg" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms\\fieldtypepreview\\digitalink.jpg"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x274 [0041.388] GetFileType (hFile=0x274) returned 0x1 [0041.388] GetFileType (hFile=0x274) returned 0x1 [0041.388] GetFileSize (in: hFile=0x274, lpFileSizeHigh=0x31e5b0 | out: lpFileSizeHigh=0x31e5b0*=0x0) returned 0x3e01 [0041.389] ReadFile (in: hFile=0x274, lpBuffer=0x266744c, nNumberOfBytesToRead=0x3e01, lpNumberOfBytesRead=0x31e55c, lpOverlapped=0x0 | out: lpBuffer=0x266744c*, lpNumberOfBytesRead=0x31e55c*=0x3e01, lpOverlapped=0x0) returned 1 [0041.403] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\FieldTypePreview\\DigitalInk.jpg" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms\\fieldtypepreview\\digitalink.jpg"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x274 [0041.404] GetFileType (hFile=0x274) returned 0x1 [0041.404] GetFileType (hFile=0x274) returned 0x1 [0041.404] WriteFile (in: hFile=0x274, lpBuffer=0x26c79e0*, nNumberOfBytesToWrite=0x3e10, lpNumberOfBytesWritten=0x31e550, lpOverlapped=0x0 | out: lpBuffer=0x26c79e0*, lpNumberOfBytesWritten=0x31e550*=0x3e10, lpOverlapped=0x0) returned 1 [0041.405] MoveFileW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\FieldTypePreview\\DigitalInk.jpg" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms\\fieldtypepreview\\digitalink.jpg"), lpNewFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\FieldTypePreview\\DigitalInk.jpg" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms\\fieldtypepreview\\digitalink.jpg")) returned 1 [0041.406] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\FieldTypePreview\\EmbeddedView.jpg" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms\\fieldtypepreview\\embeddedview.jpg"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x274 [0041.408] GetFileType (hFile=0x274) returned 0x1 [0041.408] GetFileType (hFile=0x274) returned 0x1 [0041.408] GetFileSize (in: hFile=0x274, lpFileSizeHigh=0x31e5b0 | out: lpFileSizeHigh=0x31e5b0*=0x0) returned 0x20e8 [0041.408] ReadFile (in: hFile=0x274, lpBuffer=0x26cbcec, nNumberOfBytesToRead=0x20e8, lpNumberOfBytesRead=0x31e55c, lpOverlapped=0x0 | out: lpBuffer=0x26cbcec*, lpNumberOfBytesRead=0x31e55c*=0x20e8, lpOverlapped=0x0) returned 1 [0041.423] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\FieldTypePreview\\EmbeddedView.jpg" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms\\fieldtypepreview\\embeddedview.jpg"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x274 [0041.423] GetFileType (hFile=0x274) returned 0x1 [0041.423] GetFileType (hFile=0x274) returned 0x1 [0041.423] WriteFile (in: hFile=0x274, lpBuffer=0x2722f80*, nNumberOfBytesToWrite=0x20f0, lpNumberOfBytesWritten=0x31e550, lpOverlapped=0x0 | out: lpBuffer=0x2722f80*, lpNumberOfBytesWritten=0x31e550*=0x20f0, lpOverlapped=0x0) returned 1 [0041.424] MoveFileW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\FieldTypePreview\\EmbeddedView.jpg" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms\\fieldtypepreview\\embeddedview.jpg"), lpNewFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\FieldTypePreview\\EmbeddedView.jpg" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms\\fieldtypepreview\\embeddedview.jpg")) returned 1 [0041.425] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\FieldTypePreview\\SectionHeading.jpg" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms\\fieldtypepreview\\sectionheading.jpg"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x274 [0041.429] GetFileType (hFile=0x274) returned 0x1 [0041.430] GetFileType (hFile=0x274) returned 0x1 [0041.430] GetFileSize (in: hFile=0x274, lpFileSizeHigh=0x31e5b0 | out: lpFileSizeHigh=0x31e5b0*=0x0) returned 0x3ad9 [0041.430] ReadFile (in: hFile=0x274, lpBuffer=0x272562c, nNumberOfBytesToRead=0x3ad9, lpNumberOfBytesRead=0x31e55c, lpOverlapped=0x0 | out: lpBuffer=0x272562c*, lpNumberOfBytesRead=0x31e55c*=0x3ad9, lpOverlapped=0x0) returned 1 [0041.444] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\FieldTypePreview\\SectionHeading.jpg" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms\\fieldtypepreview\\sectionheading.jpg"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x274 [0041.445] GetFileType (hFile=0x274) returned 0x1 [0041.445] GetFileType (hFile=0x274) returned 0x1 [0041.445] WriteFile (in: hFile=0x274, lpBuffer=0x2784a74*, nNumberOfBytesToWrite=0x3ae0, lpNumberOfBytesWritten=0x31e550, lpOverlapped=0x0 | out: lpBuffer=0x2784a74*, lpNumberOfBytesWritten=0x31e550*=0x3ae0, lpOverlapped=0x0) returned 1 [0041.447] MoveFileW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\FieldTypePreview\\SectionHeading.jpg" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms\\fieldtypepreview\\sectionheading.jpg"), lpNewFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\FieldTypePreview\\SectionHeading.jpg" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms\\fieldtypepreview\\sectionheading.jpg")) returned 1 [0041.448] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\FieldTypePreview\\StaticText.jpg" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms\\fieldtypepreview\\statictext.jpg"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x274 [0041.449] GetFileType (hFile=0x274) returned 0x1 [0041.449] GetFileType (hFile=0x274) returned 0x1 [0041.449] GetFileSize (in: hFile=0x274, lpFileSizeHigh=0x31e5b0 | out: lpFileSizeHigh=0x31e5b0*=0x0) returned 0x37a7 [0041.449] ReadFile (in: hFile=0x274, lpBuffer=0x2788a68, nNumberOfBytesToRead=0x37a7, lpNumberOfBytesRead=0x31e55c, lpOverlapped=0x0 | out: lpBuffer=0x2788a68*, lpNumberOfBytesRead=0x31e55c*=0x37a7, lpOverlapped=0x0) returned 1 [0041.472] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\FieldTypePreview\\StaticText.jpg" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms\\fieldtypepreview\\statictext.jpg"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x274 [0041.474] GetFileType (hFile=0x274) returned 0x1 [0041.474] GetFileType (hFile=0x274) returned 0x1 [0041.474] WriteFile (in: hFile=0x274, lpBuffer=0x27e6ec0*, nNumberOfBytesToWrite=0x37b0, lpNumberOfBytesWritten=0x31e550, lpOverlapped=0x0 | out: lpBuffer=0x27e6ec0*, lpNumberOfBytesWritten=0x31e550*=0x37b0, lpOverlapped=0x0) returned 1 [0041.475] MoveFileW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\FieldTypePreview\\StaticText.jpg" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms\\fieldtypepreview\\statictext.jpg"), lpNewFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\FieldTypePreview\\StaticText.jpg" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms\\fieldtypepreview\\statictext.jpg")) returned 1 [0041.476] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\FieldTypePreview\\UnformattedNumeric.jpg" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms\\fieldtypepreview\\unformattednumeric.jpg"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x274 [0041.477] GetFileType (hFile=0x274) returned 0x1 [0041.477] GetFileType (hFile=0x274) returned 0x1 [0041.477] GetFileSize (in: hFile=0x274, lpFileSizeHigh=0x31e5b0 | out: lpFileSizeHigh=0x31e5b0*=0x0) returned 0x4127 [0041.477] ReadFile (in: hFile=0x274, lpBuffer=0x27eabcc, nNumberOfBytesToRead=0x4127, lpNumberOfBytesRead=0x31e55c, lpOverlapped=0x0 | out: lpBuffer=0x27eabcc*, lpNumberOfBytesRead=0x31e55c*=0x4127, lpOverlapped=0x0) returned 1 [0041.492] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\FieldTypePreview\\UnformattedNumeric.jpg" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms\\fieldtypepreview\\unformattednumeric.jpg"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x274 [0041.493] GetFileType (hFile=0x274) returned 0x1 [0041.493] GetFileType (hFile=0x274) returned 0x1 [0041.493] WriteFile (in: hFile=0x274, lpBuffer=0x284bfa4*, nNumberOfBytesToWrite=0x4130, lpNumberOfBytesWritten=0x31e550, lpOverlapped=0x0 | out: lpBuffer=0x284bfa4*, lpNumberOfBytesWritten=0x31e550*=0x4130, lpOverlapped=0x0) returned 1 [0041.494] MoveFileW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\FieldTypePreview\\UnformattedNumeric.jpg" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms\\fieldtypepreview\\unformattednumeric.jpg"), lpNewFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\FieldTypePreview\\UnformattedNumeric.jpg" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms\\fieldtypepreview\\unformattednumeric.jpg")) returned 1 [0041.509] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\AddToViewArrow.jpg" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms3\\addtoviewarrow.jpg"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x274 [0041.510] GetFileType (hFile=0x274) returned 0x1 [0041.510] GetFileType (hFile=0x274) returned 0x1 [0041.510] GetFileSize (in: hFile=0x274, lpFileSizeHigh=0x31e628 | out: lpFileSizeHigh=0x31e628*=0x0) returned 0xbe8 [0041.510] ReadFile (in: hFile=0x274, lpBuffer=0x266695c, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x31e5d4, lpOverlapped=0x0 | out: lpBuffer=0x266695c*, lpNumberOfBytesRead=0x31e5d4*=0xbe8, lpOverlapped=0x0) returned 1 [0041.526] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\AddToViewArrow.jpg" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms3\\addtoviewarrow.jpg"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x274 [0041.527] GetFileType (hFile=0x274) returned 0x1 [0041.527] GetFileType (hFile=0x274) returned 0x1 [0041.527] WriteFile (in: hFile=0x274, lpBuffer=0x26b85c8*, nNumberOfBytesToWrite=0xbf0, lpNumberOfBytesWritten=0x31e59c, lpOverlapped=0x0 | out: lpBuffer=0x26b85c8*, lpNumberOfBytesWritten=0x31e59c*=0xbf0, lpOverlapped=0x0) returned 1 [0041.528] MoveFileW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\AddToViewArrow.jpg" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms3\\addtoviewarrow.jpg"), lpNewFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\AddToViewArrow.jpg" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms3\\addtoviewarrow.jpg")) returned 1 [0041.529] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\AddToViewArrowMask.bmp" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms3\\addtoviewarrowmask.bmp"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x274 [0041.529] GetFileType (hFile=0x274) returned 0x1 [0041.529] GetFileType (hFile=0x274) returned 0x1 [0041.529] GetFileSize (in: hFile=0x274, lpFileSizeHigh=0x31e628 | out: lpFileSizeHigh=0x31e628*=0x0) returned 0x924 [0041.529] ReadFile (in: hFile=0x274, lpBuffer=0x26ba244, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x31e5d4, lpOverlapped=0x0 | out: lpBuffer=0x26ba244*, lpNumberOfBytesRead=0x31e5d4*=0x924, lpOverlapped=0x0) returned 1 [0041.544] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\AddToViewArrowMask.bmp" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms3\\addtoviewarrowmask.bmp"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x274 [0041.544] GetFileType (hFile=0x274) returned 0x1 [0041.544] GetFileType (hFile=0x274) returned 0x1 [0041.544] WriteFile (in: hFile=0x274, lpBuffer=0x270afa8*, nNumberOfBytesToWrite=0x930, lpNumberOfBytesWritten=0x31e59c, lpOverlapped=0x0 | out: lpBuffer=0x270afa8*, lpNumberOfBytesWritten=0x31e59c*=0x930, lpOverlapped=0x0) returned 1 [0041.545] MoveFileW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\AddToViewArrowMask.bmp" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms3\\addtoviewarrowmask.bmp"), lpNewFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\AddToViewArrowMask.bmp" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms3\\addtoviewarrowmask.bmp")) returned 1 [0041.546] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsBlankPage.html" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms3\\formsblankpage.html"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x274 [0041.547] GetFileType (hFile=0x274) returned 0x1 [0041.547] GetFileType (hFile=0x274) returned 0x1 [0041.547] GetFileSize (in: hFile=0x274, lpFileSizeHigh=0x31e628 | out: lpFileSizeHigh=0x31e628*=0x0) returned 0x45d [0041.547] ReadFile (in: hFile=0x274, lpBuffer=0x270c9e8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x31e5d4, lpOverlapped=0x0 | out: lpBuffer=0x270c9e8*, lpNumberOfBytesRead=0x31e5d4*=0x45d, lpOverlapped=0x0) returned 1 [0041.562] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsBlankPage.html" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms3\\formsblankpage.html"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x274 [0041.563] GetFileType (hFile=0x274) returned 0x1 [0041.563] GetFileType (hFile=0x274) returned 0x1 [0041.563] MoveFileW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsBlankPage.html" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms3\\formsblankpage.html"), lpNewFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsBlankPage.html" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms3\\formsblankpage.html")) returned 1 [0041.564] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsBrowserUpgrade.html" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms3\\formsbrowserupgrade.html"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x274 [0041.564] GetFileType (hFile=0x274) returned 0x1 [0041.564] GetFileType (hFile=0x274) returned 0x1 [0041.564] GetFileSize (in: hFile=0x274, lpFileSizeHigh=0x31e628 | out: lpFileSizeHigh=0x31e628*=0x0) returned 0x850 [0041.564] ReadFile (in: hFile=0x274, lpBuffer=0x275dae0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x31e5d4, lpOverlapped=0x0 | out: lpBuffer=0x275dae0*, lpNumberOfBytesRead=0x31e5d4*=0x850, lpOverlapped=0x0) returned 1 [0041.579] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsBrowserUpgrade.html" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms3\\formsbrowserupgrade.html"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x274 [0041.579] GetFileType (hFile=0x274) returned 0x1 [0041.579] GetFileType (hFile=0x274) returned 0x1 [0041.580] WriteFile (in: hFile=0x274, lpBuffer=0x27ae440*, nNumberOfBytesToWrite=0x860, lpNumberOfBytesWritten=0x31e59c, lpOverlapped=0x0 | out: lpBuffer=0x27ae440*, lpNumberOfBytesWritten=0x31e59c*=0x860, lpOverlapped=0x0) returned 1 [0041.580] MoveFileW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsBrowserUpgrade.html" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms3\\formsbrowserupgrade.html"), lpNewFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsBrowserUpgrade.html" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms3\\formsbrowserupgrade.html")) returned 1 [0041.581] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsColorChart.html" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms3\\formscolorchart.html"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x274 [0041.582] GetFileType (hFile=0x274) returned 0x1 [0041.582] GetFileType (hFile=0x274) returned 0x1 [0041.582] GetFileSize (in: hFile=0x274, lpFileSizeHigh=0x31e628 | out: lpFileSizeHigh=0x31e628*=0x0) returned 0x2ed [0041.582] ReadFile (in: hFile=0x274, lpBuffer=0x27afa98, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x31e5d4, lpOverlapped=0x0 | out: lpBuffer=0x27afa98*, lpNumberOfBytesRead=0x31e5d4*=0x2ed, lpOverlapped=0x0) returned 1 [0041.596] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsColorChart.html" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms3\\formscolorchart.html"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x274 [0041.597] GetFileType (hFile=0x274) returned 0x1 [0041.597] GetFileType (hFile=0x274) returned 0x1 [0041.597] WriteFile (in: hFile=0x274, lpBuffer=0x27fe8ac*, nNumberOfBytesToWrite=0x2f0, lpNumberOfBytesWritten=0x31e59c, lpOverlapped=0x0 | out: lpBuffer=0x27fe8ac*, lpNumberOfBytesWritten=0x31e59c*=0x2f0, lpOverlapped=0x0) returned 1 [0041.597] MoveFileW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsColorChart.html" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms3\\formscolorchart.html"), lpNewFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsColorChart.html" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms3\\formscolorchart.html")) returned 1 [0041.598] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsFormTemplate.html" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms3\\formsformtemplate.html"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x274 [0041.599] GetFileType (hFile=0x274) returned 0x1 [0041.599] GetFileType (hFile=0x274) returned 0x1 [0041.599] GetFileSize (in: hFile=0x274, lpFileSizeHigh=0x31e628 | out: lpFileSizeHigh=0x31e628*=0x0) returned 0xc94 [0041.599] ReadFile (in: hFile=0x274, lpBuffer=0x28008a0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x31e5d4, lpOverlapped=0x0 | out: lpBuffer=0x28008a0*, lpNumberOfBytesRead=0x31e5d4*=0xc94, lpOverlapped=0x0) returned 1 [0041.625] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsFormTemplate.html" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms3\\formsformtemplate.html"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x274 [0041.625] GetFileType (hFile=0x274) returned 0x1 [0041.625] GetFileType (hFile=0x274) returned 0x1 [0041.625] WriteFile (in: hFile=0x274, lpBuffer=0x2653c24*, nNumberOfBytesToWrite=0xca0, lpNumberOfBytesWritten=0x31e59c, lpOverlapped=0x0 | out: lpBuffer=0x2653c24*, lpNumberOfBytesWritten=0x31e59c*=0xca0, lpOverlapped=0x0) returned 1 [0041.626] MoveFileW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsFormTemplate.html" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms3\\formsformtemplate.html"), lpNewFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsFormTemplate.html" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms3\\formsformtemplate.html")) returned 1 [0041.628] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsHomePage.html" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms3\\formshomepage.html"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x274 [0041.628] GetFileType (hFile=0x274) returned 0x1 [0041.628] GetFileType (hFile=0x274) returned 0x1 [0041.628] GetFileSize (in: hFile=0x274, lpFileSizeHigh=0x31e628 | out: lpFileSizeHigh=0x31e628*=0x0) returned 0xc7c [0041.628] ReadFile (in: hFile=0x274, lpBuffer=0x2655bf8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x31e5d4, lpOverlapped=0x0 | out: lpBuffer=0x2655bf8*, lpNumberOfBytesRead=0x31e5d4*=0xc7c, lpOverlapped=0x0) returned 1 [0041.643] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsHomePage.html" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms3\\formshomepage.html"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x274 [0041.644] GetFileType (hFile=0x274) returned 0x1 [0041.644] GetFileType (hFile=0x274) returned 0x1 [0041.644] WriteFile (in: hFile=0x274, lpBuffer=0x26a7b30*, nNumberOfBytesToWrite=0xc80, lpNumberOfBytesWritten=0x31e59c, lpOverlapped=0x0 | out: lpBuffer=0x26a7b30*, lpNumberOfBytesWritten=0x31e59c*=0xc80, lpOverlapped=0x0) returned 1 [0041.645] MoveFileW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsHomePage.html" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms3\\formshomepage.html"), lpNewFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsHomePage.html" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms3\\formshomepage.html")) returned 1 [0041.646] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsHomePageStyle.css" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms3\\formshomepagestyle.css"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x274 [0041.646] GetFileType (hFile=0x274) returned 0x1 [0041.647] GetFileType (hFile=0x274) returned 0x1 [0041.647] GetFileSize (in: hFile=0x274, lpFileSizeHigh=0x31e628 | out: lpFileSizeHigh=0x31e628*=0x0) returned 0x2ec [0041.647] ReadFile (in: hFile=0x274, lpBuffer=0x26a9188, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x31e5d4, lpOverlapped=0x0 | out: lpBuffer=0x26a9188*, lpNumberOfBytesRead=0x31e5d4*=0x2ec, lpOverlapped=0x0) returned 1 [0041.662] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsHomePageStyle.css" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms3\\formshomepagestyle.css"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x274 [0041.663] GetFileType (hFile=0x274) returned 0x1 [0041.663] GetFileType (hFile=0x274) returned 0x1 [0041.664] MoveFileW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsHomePageStyle.css" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms3\\formshomepagestyle.css"), lpNewFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsHomePageStyle.css" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms3\\formshomepagestyle.css")) returned 1 [0041.665] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsImageTemplate.html" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms3\\formsimagetemplate.html"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x274 [0041.665] GetFileType (hFile=0x274) returned 0x1 [0041.665] GetFileType (hFile=0x274) returned 0x1 [0041.665] GetFileSize (in: hFile=0x274, lpFileSizeHigh=0x31e628 | out: lpFileSizeHigh=0x31e628*=0x0) returned 0x7ee [0041.665] ReadFile (in: hFile=0x274, lpBuffer=0x26f9b00, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x31e5d4, lpOverlapped=0x0 | out: lpBuffer=0x26f9b00*, lpNumberOfBytesRead=0x31e5d4*=0x7ee, lpOverlapped=0x0) returned 1 [0041.681] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsImageTemplate.html" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms3\\formsimagetemplate.html"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x274 [0041.681] GetFileType (hFile=0x274) returned 0x1 [0041.682] GetFileType (hFile=0x274) returned 0x1 [0041.682] MoveFileW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsImageTemplate.html" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms3\\formsimagetemplate.html"), lpNewFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsImageTemplate.html" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms3\\formsimagetemplate.html")) returned 1 [0041.683] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsMacroTemplate.html" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms3\\formsmacrotemplate.html"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x274 [0041.683] GetFileType (hFile=0x274) returned 0x1 [0041.683] GetFileType (hFile=0x274) returned 0x1 [0041.683] GetFileSize (in: hFile=0x274, lpFileSizeHigh=0x31e628 | out: lpFileSizeHigh=0x31e628*=0x0) returned 0x856 [0041.683] ReadFile (in: hFile=0x274, lpBuffer=0x274bdec, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x31e5d4, lpOverlapped=0x0 | out: lpBuffer=0x274bdec*, lpNumberOfBytesRead=0x31e5d4*=0x856, lpOverlapped=0x0) returned 1 [0041.697] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsMacroTemplate.html" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms3\\formsmacrotemplate.html"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x274 [0041.698] GetFileType (hFile=0x274) returned 0x1 [0041.698] GetFileType (hFile=0x274) returned 0x1 [0041.699] MoveFileW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsMacroTemplate.html" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms3\\formsmacrotemplate.html"), lpNewFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsMacroTemplate.html" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms3\\formsmacrotemplate.html")) returned 1 [0041.699] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsPreviewTemplate.html" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms3\\formspreviewtemplate.html"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x274 [0041.700] GetFileType (hFile=0x274) returned 0x1 [0041.700] GetFileType (hFile=0x274) returned 0x1 [0041.700] GetFileSize (in: hFile=0x274, lpFileSizeHigh=0x31e628 | out: lpFileSizeHigh=0x31e628*=0x0) returned 0x46fe [0041.700] ReadFile (in: hFile=0x274, lpBuffer=0x279dab4, nNumberOfBytesToRead=0x46fe, lpNumberOfBytesRead=0x31e5d4, lpOverlapped=0x0 | out: lpBuffer=0x279dab4*, lpNumberOfBytesRead=0x31e5d4*=0x46fe, lpOverlapped=0x0) returned 1 [0041.715] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsPreviewTemplate.html" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms3\\formspreviewtemplate.html"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x274 [0041.716] GetFileType (hFile=0x274) returned 0x1 [0041.716] GetFileType (hFile=0x274) returned 0x1 [0041.716] WriteFile (in: hFile=0x274, lpBuffer=0x2800b9c*, nNumberOfBytesToWrite=0x4700, lpNumberOfBytesWritten=0x31e5c8, lpOverlapped=0x0 | out: lpBuffer=0x2800b9c*, lpNumberOfBytesWritten=0x31e5c8*=0x4700, lpOverlapped=0x0) returned 1 [0041.717] MoveFileW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsPreviewTemplate.html" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms3\\formspreviewtemplate.html"), lpNewFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsPreviewTemplate.html" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms3\\formspreviewtemplate.html")) returned 1 [0041.719] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsPrintTemplate.html" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms3\\formsprinttemplate.html"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x274 [0041.719] GetFileType (hFile=0x274) returned 0x1 [0041.719] GetFileType (hFile=0x274) returned 0x1 [0041.719] GetFileSize (in: hFile=0x274, lpFileSizeHigh=0x31e628 | out: lpFileSizeHigh=0x31e628*=0x0) returned 0x612 [0041.719] ReadFile (in: hFile=0x274, lpBuffer=0x2805db0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x31e5d4, lpOverlapped=0x0 | out: lpBuffer=0x2805db0*, lpNumberOfBytesRead=0x31e5d4*=0x612, lpOverlapped=0x0) returned 1 [0041.737] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsPrintTemplate.html" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms3\\formsprinttemplate.html"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x274 [0041.737] GetFileType (hFile=0x274) returned 0x1 [0041.737] GetFileType (hFile=0x274) returned 0x1 [0041.738] WriteFile (in: hFile=0x274, lpBuffer=0x26538f8*, nNumberOfBytesToWrite=0x620, lpNumberOfBytesWritten=0x31e59c, lpOverlapped=0x0 | out: lpBuffer=0x26538f8*, lpNumberOfBytesWritten=0x31e59c*=0x620, lpOverlapped=0x0) returned 1 [0041.738] MoveFileW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsPrintTemplate.html" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms3\\formsprinttemplate.html"), lpNewFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsPrintTemplate.html" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms3\\formsprinttemplate.html")) returned 1 [0041.739] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsViewAttachmentIcons.jpg" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms3\\formsviewattachmenticons.jpg"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x274 [0041.740] GetFileType (hFile=0x274) returned 0x1 [0041.740] GetFileType (hFile=0x274) returned 0x1 [0041.740] GetFileSize (in: hFile=0x274, lpFileSizeHigh=0x31e628 | out: lpFileSizeHigh=0x31e628*=0x0) returned 0x2ee3 [0041.740] ReadFile (in: hFile=0x274, lpBuffer=0x2654c8c, nNumberOfBytesToRead=0x2ee3, lpNumberOfBytesRead=0x31e5d4, lpOverlapped=0x0 | out: lpBuffer=0x2654c8c*, lpNumberOfBytesRead=0x31e5d4*=0x2ee3, lpOverlapped=0x0) returned 1 [0041.754] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsViewAttachmentIcons.jpg" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms3\\formsviewattachmenticons.jpg"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x274 [0041.755] GetFileType (hFile=0x274) returned 0x1 [0041.755] GetFileType (hFile=0x274) returned 0x1 [0041.755] WriteFile (in: hFile=0x274, lpBuffer=0x26b0680*, nNumberOfBytesToWrite=0x2ef0, lpNumberOfBytesWritten=0x31e5c8, lpOverlapped=0x0 | out: lpBuffer=0x26b0680*, lpNumberOfBytesWritten=0x31e5c8*=0x2ef0, lpOverlapped=0x0) returned 1 [0041.756] MoveFileW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsViewAttachmentIcons.jpg" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms3\\formsviewattachmenticons.jpg"), lpNewFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsViewAttachmentIcons.jpg" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms3\\formsviewattachmenticons.jpg")) returned 1 [0041.757] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsViewAttachmentIconsMask.bmp" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms3\\formsviewattachmenticonsmask.bmp"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x274 [0041.757] GetFileType (hFile=0x274) returned 0x1 [0041.757] GetFileType (hFile=0x274) returned 0x1 [0041.757] GetFileSize (in: hFile=0x274, lpFileSizeHigh=0x31e628 | out: lpFileSizeHigh=0x31e628*=0x0) returned 0x638 [0041.757] ReadFile (in: hFile=0x274, lpBuffer=0x26b40e0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x31e5d4, lpOverlapped=0x0 | out: lpBuffer=0x26b40e0*, lpNumberOfBytesRead=0x31e5d4*=0x638, lpOverlapped=0x0) returned 1 [0041.772] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsViewAttachmentIconsMask.bmp" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms3\\formsviewattachmenticonsmask.bmp"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x274 [0041.772] GetFileType (hFile=0x274) returned 0x1 [0041.772] GetFileType (hFile=0x274) returned 0x1 [0041.773] MoveFileW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsViewAttachmentIconsMask.bmp" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms3\\formsviewattachmenticonsmask.bmp"), lpNewFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsViewAttachmentIconsMask.bmp" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms3\\formsviewattachmenticonsmask.bmp")) returned 1 [0041.773] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsViewFrame.html" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms3\\formsviewframe.html"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x274 [0041.774] GetFileType (hFile=0x274) returned 0x1 [0041.774] GetFileType (hFile=0x274) returned 0x1 [0041.774] GetFileSize (in: hFile=0x274, lpFileSizeHigh=0x31e628 | out: lpFileSizeHigh=0x31e628*=0x0) returned 0x1313 [0041.774] ReadFile (in: hFile=0x274, lpBuffer=0x2705330, nNumberOfBytesToRead=0x1313, lpNumberOfBytesRead=0x31e5d4, lpOverlapped=0x0 | out: lpBuffer=0x2705330*, lpNumberOfBytesRead=0x31e5d4*=0x1313, lpOverlapped=0x0) returned 1 [0041.788] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsViewFrame.html" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms3\\formsviewframe.html"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x274 [0041.789] GetFileType (hFile=0x274) returned 0x1 [0041.789] GetFileType (hFile=0x274) returned 0x1 [0041.789] WriteFile (in: hFile=0x274, lpBuffer=0x27580b8*, nNumberOfBytesToWrite=0x1320, lpNumberOfBytesWritten=0x31e5c8, lpOverlapped=0x0 | out: lpBuffer=0x27580b8*, lpNumberOfBytesWritten=0x31e5c8*=0x1320, lpOverlapped=0x0) returned 1 [0041.790] MoveFileW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsViewFrame.html" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms3\\formsviewframe.html"), lpNewFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsViewFrame.html" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms3\\formsviewframe.html")) returned 1 [0041.791] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsViewTemplate.html" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms3\\formsviewtemplate.html"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x274 [0041.792] GetFileType (hFile=0x274) returned 0x1 [0041.792] GetFileType (hFile=0x274) returned 0x1 [0041.792] GetFileSize (in: hFile=0x274, lpFileSizeHigh=0x31e628 | out: lpFileSizeHigh=0x31e628*=0x0) returned 0xa89 [0041.792] ReadFile (in: hFile=0x274, lpBuffer=0x275a330, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x31e5d4, lpOverlapped=0x0 | out: lpBuffer=0x275a330*, lpNumberOfBytesRead=0x31e5d4*=0xa89, lpOverlapped=0x0) returned 1 [0041.806] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsViewTemplate.html" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms3\\formsviewtemplate.html"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x274 [0041.807] GetFileType (hFile=0x274) returned 0x1 [0041.807] GetFileType (hFile=0x274) returned 0x1 [0041.807] WriteFile (in: hFile=0x274, lpBuffer=0x27ab770*, nNumberOfBytesToWrite=0xa90, lpNumberOfBytesWritten=0x31e59c, lpOverlapped=0x0 | out: lpBuffer=0x27ab770*, lpNumberOfBytesWritten=0x31e59c*=0xa90, lpOverlapped=0x0) returned 1 [0041.808] MoveFileW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsViewTemplate.html" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms3\\formsviewtemplate.html"), lpNewFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsViewTemplate.html" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms3\\formsviewtemplate.html")) returned 1 [0041.809] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormToolImages.jpg" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms3\\formtoolimages.jpg"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x274 [0041.809] GetFileType (hFile=0x274) returned 0x1 [0041.809] GetFileType (hFile=0x274) returned 0x1 [0041.809] GetFileSize (in: hFile=0x274, lpFileSizeHigh=0x31e628 | out: lpFileSizeHigh=0x31e628*=0x0) returned 0x1bfb [0041.809] ReadFile (in: hFile=0x274, lpBuffer=0x27acabc, nNumberOfBytesToRead=0x1bfb, lpNumberOfBytesRead=0x31e5d4, lpOverlapped=0x0 | out: lpBuffer=0x27acabc*, lpNumberOfBytesRead=0x31e5d4*=0x1bfb, lpOverlapped=0x0) returned 1 [0041.823] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormToolImages.jpg" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms3\\formtoolimages.jpg"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x274 [0041.824] GetFileType (hFile=0x274) returned 0x1 [0041.824] GetFileType (hFile=0x274) returned 0x1 [0041.824] WriteFile (in: hFile=0x274, lpBuffer=0x28024a4*, nNumberOfBytesToWrite=0x1c00, lpNumberOfBytesWritten=0x31e5c8, lpOverlapped=0x0 | out: lpBuffer=0x28024a4*, lpNumberOfBytesWritten=0x31e5c8*=0x1c00, lpOverlapped=0x0) returned 1 [0041.825] MoveFileW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormToolImages.jpg" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms3\\formtoolimages.jpg"), lpNewFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormToolImages.jpg" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms3\\formtoolimages.jpg")) returned 1 [0041.826] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\ViewHeaderPreview.jpg" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms3\\viewheaderpreview.jpg"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x274 [0041.826] GetFileType (hFile=0x274) returned 0x1 [0041.826] GetFileType (hFile=0x274) returned 0x1 [0041.826] GetFileSize (in: hFile=0x274, lpFileSizeHigh=0x31e628 | out: lpFileSizeHigh=0x31e628*=0x0) returned 0xd78 [0041.826] ReadFile (in: hFile=0x274, lpBuffer=0x28054e8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x31e5d4, lpOverlapped=0x0 | out: lpBuffer=0x28054e8*, lpNumberOfBytesRead=0x31e5d4*=0xd78, lpOverlapped=0x0) returned 1 [0041.843] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\ViewHeaderPreview.jpg" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms3\\viewheaderpreview.jpg"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x274 [0041.844] GetFileType (hFile=0x274) returned 0x1 [0041.844] GetFileType (hFile=0x274) returned 0x1 [0041.844] WriteFile (in: hFile=0x274, lpBuffer=0x2657f2c*, nNumberOfBytesToWrite=0xd80, lpNumberOfBytesWritten=0x31e59c, lpOverlapped=0x0 | out: lpBuffer=0x2657f2c*, lpNumberOfBytesWritten=0x31e59c*=0xd80, lpOverlapped=0x0) returned 1 [0041.845] MoveFileW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\ViewHeaderPreview.jpg" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms3\\viewheaderpreview.jpg"), lpNewFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\ViewHeaderPreview.jpg" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms3\\viewheaderpreview.jpg")) returned 1 [0041.852] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\Adobe.css" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms3\\formsstyles\\adobe.css"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x274 [0041.853] GetFileType (hFile=0x274) returned 0x1 [0041.853] GetFileType (hFile=0x274) returned 0x1 [0041.853] GetFileSize (in: hFile=0x274, lpFileSizeHigh=0x31e5b0 | out: lpFileSizeHigh=0x31e5b0*=0x0) returned 0x3a1 [0041.853] ReadFile (in: hFile=0x274, lpBuffer=0x2666784, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x31e55c, lpOverlapped=0x0 | out: lpBuffer=0x2666784*, lpNumberOfBytesRead=0x31e55c*=0x3a1, lpOverlapped=0x0) returned 1 [0041.867] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\Adobe.css" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms3\\formsstyles\\adobe.css"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x274 [0041.868] GetFileType (hFile=0x274) returned 0x1 [0041.868] GetFileType (hFile=0x274) returned 0x1 [0041.868] WriteFile (in: hFile=0x274, lpBuffer=0x26b5aac*, nNumberOfBytesToWrite=0x3b0, lpNumberOfBytesWritten=0x31e524, lpOverlapped=0x0 | out: lpBuffer=0x26b5aac*, lpNumberOfBytesWritten=0x31e524*=0x3b0, lpOverlapped=0x0) returned 1 [0041.870] MoveFileW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\Adobe.css" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms3\\formsstyles\\adobe.css"), lpNewFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\Adobe.css" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms3\\formsstyles\\adobe.css")) returned 1 [0041.871] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\Americana.css" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms3\\formsstyles\\americana.css"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x274 [0041.871] GetFileType (hFile=0x274) returned 0x1 [0041.871] GetFileType (hFile=0x274) returned 0x1 [0041.871] GetFileSize (in: hFile=0x274, lpFileSizeHigh=0x31e5b0 | out: lpFileSizeHigh=0x31e5b0*=0x0) returned 0xa32 [0041.871] ReadFile (in: hFile=0x274, lpBuffer=0x26b783c, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x31e55c, lpOverlapped=0x0 | out: lpBuffer=0x26b783c*, lpNumberOfBytesRead=0x31e55c*=0xa32, lpOverlapped=0x0) returned 1 [0041.887] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\Americana.css" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms3\\formsstyles\\americana.css"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x274 [0041.888] GetFileType (hFile=0x274) returned 0x1 [0041.888] GetFileType (hFile=0x274) returned 0x1 [0041.889] MoveFileW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\Americana.css" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms3\\formsstyles\\americana.css"), lpNewFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\Americana.css" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms3\\formsstyles\\americana.css")) returned 1 [0041.889] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\BabyBlue.css" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms3\\formsstyles\\babyblue.css"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x274 [0041.890] GetFileType (hFile=0x274) returned 0x1 [0041.890] GetFileType (hFile=0x274) returned 0x1 [0041.890] GetFileSize (in: hFile=0x274, lpFileSizeHigh=0x31e5b0 | out: lpFileSizeHigh=0x31e5b0*=0x0) returned 0xc4f [0041.890] ReadFile (in: hFile=0x274, lpBuffer=0x270aaa0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x31e55c, lpOverlapped=0x0 | out: lpBuffer=0x270aaa0*, lpNumberOfBytesRead=0x31e55c*=0xc4f, lpOverlapped=0x0) returned 1 [0041.904] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\BabyBlue.css" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms3\\formsstyles\\babyblue.css"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x274 [0041.905] GetFileType (hFile=0x274) returned 0x1 [0041.905] GetFileType (hFile=0x274) returned 0x1 [0041.906] MoveFileW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\BabyBlue.css" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms3\\formsstyles\\babyblue.css"), lpNewFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\BabyBlue.css" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms3\\formsstyles\\babyblue.css")) returned 1 [0041.906] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\Biscay.css" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms3\\formsstyles\\biscay.css"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x274 [0041.908] GetFileType (hFile=0x274) returned 0x1 [0041.908] GetFileType (hFile=0x274) returned 0x1 [0041.908] GetFileSize (in: hFile=0x274, lpFileSizeHigh=0x31e5b0 | out: lpFileSizeHigh=0x31e5b0*=0x0) returned 0xd45 [0041.908] ReadFile (in: hFile=0x274, lpBuffer=0x275e82c, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x31e55c, lpOverlapped=0x0 | out: lpBuffer=0x275e82c*, lpNumberOfBytesRead=0x31e55c*=0xd45, lpOverlapped=0x0) returned 1 [0041.923] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\Biscay.css" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms3\\formsstyles\\biscay.css"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x274 [0041.924] GetFileType (hFile=0x274) returned 0x1 [0041.924] GetFileType (hFile=0x274) returned 0x1 [0041.924] MoveFileW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\Biscay.css" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms3\\formsstyles\\biscay.css"), lpNewFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\Biscay.css" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms3\\formsstyles\\biscay.css")) returned 1 [0041.925] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\BrightOrange.css" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms3\\formsstyles\\brightorange.css"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x274 [0041.926] GetFileType (hFile=0x274) returned 0x1 [0041.926] GetFileType (hFile=0x274) returned 0x1 [0041.926] GetFileSize (in: hFile=0x274, lpFileSizeHigh=0x31e5b0 | out: lpFileSizeHigh=0x31e5b0*=0x0) returned 0xd5b [0041.926] ReadFile (in: hFile=0x274, lpBuffer=0x27b2adc, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x31e55c, lpOverlapped=0x0 | out: lpBuffer=0x27b2adc*, lpNumberOfBytesRead=0x31e55c*=0xd5b, lpOverlapped=0x0) returned 1 [0041.943] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\BrightOrange.css" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms3\\formsstyles\\brightorange.css"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x274 [0041.944] GetFileType (hFile=0x274) returned 0x1 [0041.944] GetFileType (hFile=0x274) returned 0x1 [0041.945] MoveFileW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\BrightOrange.css" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms3\\formsstyles\\brightorange.css"), lpNewFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\BrightOrange.css" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms3\\formsstyles\\brightorange.css")) returned 1 [0041.945] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\BrightYellow.css" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms3\\formsstyles\\brightyellow.css"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x274 [0041.946] GetFileType (hFile=0x274) returned 0x1 [0041.946] GetFileType (hFile=0x274) returned 0x1 [0041.946] GetFileSize (in: hFile=0x274, lpFileSizeHigh=0x31e5b0 | out: lpFileSizeHigh=0x31e5b0*=0x0) returned 0xcb6 [0041.946] ReadFile (in: hFile=0x274, lpBuffer=0x2806d64, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x31e55c, lpOverlapped=0x0 | out: lpBuffer=0x2806d64*, lpNumberOfBytesRead=0x31e55c*=0xcb6, lpOverlapped=0x0) returned 1 [0041.963] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\BrightYellow.css" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms3\\formsstyles\\brightyellow.css"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x274 [0041.964] GetFileType (hFile=0x274) returned 0x1 [0041.964] GetFileType (hFile=0x274) returned 0x1 [0041.965] MoveFileW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\BrightYellow.css" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms3\\formsstyles\\brightyellow.css"), lpNewFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\BrightYellow.css" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms3\\formsstyles\\brightyellow.css")) returned 1 [0041.965] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\Casual.css" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms3\\formsstyles\\casual.css"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x274 [0041.966] GetFileType (hFile=0x274) returned 0x1 [0041.966] GetFileType (hFile=0x274) returned 0x1 [0041.967] GetFileSize (in: hFile=0x274, lpFileSizeHigh=0x31e5b0 | out: lpFileSizeHigh=0x31e5b0*=0x0) returned 0x3a2 [0041.967] ReadFile (in: hFile=0x274, lpBuffer=0x265c9b0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x31e55c, lpOverlapped=0x0 | out: lpBuffer=0x265c9b0*, lpNumberOfBytesRead=0x31e55c*=0x3a2, lpOverlapped=0x0) returned 1 [0042.005] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e494) returned 1 [0042.005] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\Casual.css" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms3\\formsstyles\\casual.css"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x274 [0042.006] GetFileType (hFile=0x274) returned 0x1 [0042.006] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e490) returned 1 [0042.006] GetFileType (hFile=0x274) returned 0x1 [0042.006] WriteFile (in: hFile=0x274, lpBuffer=0x26abcdc*, nNumberOfBytesToWrite=0x3b0, lpNumberOfBytesWritten=0x31e524, lpOverlapped=0x0 | out: lpBuffer=0x26abcdc*, lpNumberOfBytesWritten=0x31e524*=0x3b0, lpOverlapped=0x0) returned 1 [0042.007] CloseHandle (hObject=0x274) returned 1 [0042.008] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\Casual.css", nBufferLength=0x105, lpBuffer=0x31e0d4, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\Casual.css", lpFilePart=0x0) returned 0x69 [0042.008] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\Casual.css", nBufferLength=0x105, lpBuffer=0x31e0d4, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\Casual.css", lpFilePart=0x0) returned 0x69 [0042.008] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e534) returned 1 [0042.008] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\Casual.css" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms3\\formsstyles\\casual.css"), fInfoLevelId=0x0, lpFileInformation=0x31e5b0 | out: lpFileInformation=0x31e5b0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x90c38300, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0x603362b0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xfc7cfa80, ftLastWriteTime.dwHighDateTime=0x1d6eb7e, nFileSizeHigh=0x0, nFileSizeLow=0x3b0)) returned 1 [0042.008] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e530) returned 1 [0042.008] MoveFileW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\Casual.css" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms3\\formsstyles\\casual.css"), lpNewFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\Casual.css" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms3\\formsstyles\\casual.css")) returned 1 [0042.009] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\Country.css", nBufferLength=0x105, lpBuffer=0x31dfb4, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\Country.css", lpFilePart=0x0) returned 0x6a [0042.009] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e4a8) returned 1 [0042.009] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\Country.css" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms3\\formsstyles\\country.css"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x274 [0042.010] GetFileType (hFile=0x274) returned 0x1 [0042.010] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e4a4) returned 1 [0042.010] GetFileType (hFile=0x274) returned 0x1 [0042.010] GetFileSize (in: hFile=0x274, lpFileSizeHigh=0x31e5b0 | out: lpFileSizeHigh=0x31e5b0*=0x0) returned 0x373 [0042.010] ReadFile (in: hFile=0x274, lpBuffer=0x26ad3a4, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x31e55c, lpOverlapped=0x0 | out: lpBuffer=0x26ad3a4*, lpNumberOfBytesRead=0x31e55c*=0x373, lpOverlapped=0x0) returned 1 [0042.012] CloseHandle (hObject=0x274) returned 1 [0042.025] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\Country.css", nBufferLength=0x105, lpBuffer=0x31dfa0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\Country.css", lpFilePart=0x0) returned 0x6a [0042.025] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e494) returned 1 [0042.025] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\Country.css" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms3\\formsstyles\\country.css"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x274 [0042.025] GetFileType (hFile=0x274) returned 0x1 [0042.026] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e490) returned 1 [0042.026] GetFileType (hFile=0x274) returned 0x1 [0042.026] WriteFile (in: hFile=0x274, lpBuffer=0x26fc488*, nNumberOfBytesToWrite=0x380, lpNumberOfBytesWritten=0x31e524, lpOverlapped=0x0 | out: lpBuffer=0x26fc488*, lpNumberOfBytesWritten=0x31e524*=0x380, lpOverlapped=0x0) returned 1 [0042.027] CloseHandle (hObject=0x274) returned 1 [0042.027] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\Country.css", nBufferLength=0x105, lpBuffer=0x31e0d4, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\Country.css", lpFilePart=0x0) returned 0x6a [0042.027] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\Country.css", nBufferLength=0x105, lpBuffer=0x31e0d4, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\Country.css", lpFilePart=0x0) returned 0x6a [0042.027] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e534) returned 1 [0042.028] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\Country.css" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms3\\formsstyles\\country.css"), fInfoLevelId=0x0, lpFileInformation=0x31e5b0 | out: lpFileInformation=0x31e5b0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x90c38300, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0x604d91d0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xfc81bd40, ftLastWriteTime.dwHighDateTime=0x1d6eb7e, nFileSizeHigh=0x0, nFileSizeLow=0x380)) returned 1 [0042.028] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e530) returned 1 [0042.028] MoveFileW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\Country.css" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms3\\formsstyles\\country.css"), lpNewFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\Country.css" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms3\\formsstyles\\country.css")) returned 1 [0042.028] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\Desert.css", nBufferLength=0x105, lpBuffer=0x31dfb4, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\Desert.css", lpFilePart=0x0) returned 0x69 [0042.028] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e4a8) returned 1 [0042.028] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\Desert.css" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms3\\formsstyles\\desert.css"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x274 [0042.029] GetFileType (hFile=0x274) returned 0x1 [0042.029] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e4a4) returned 1 [0042.029] GetFileType (hFile=0x274) returned 0x1 [0042.029] GetFileSize (in: hFile=0x274, lpFileSizeHigh=0x31e5b0 | out: lpFileSizeHigh=0x31e5b0*=0x0) returned 0x977 [0042.029] ReadFile (in: hFile=0x274, lpBuffer=0x26fe158, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x31e55c, lpOverlapped=0x0 | out: lpBuffer=0x26fe158*, lpNumberOfBytesRead=0x31e55c*=0x977, lpOverlapped=0x0) returned 1 [0042.031] CloseHandle (hObject=0x274) returned 1 [0042.044] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\Desert.css", nBufferLength=0x105, lpBuffer=0x31dfa0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\Desert.css", lpFilePart=0x0) returned 0x69 [0042.044] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e494) returned 1 [0042.044] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\Desert.css" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms3\\formsstyles\\desert.css"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x274 [0042.045] GetFileType (hFile=0x274) returned 0x1 [0042.045] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e490) returned 1 [0042.045] GetFileType (hFile=0x274) returned 0x1 [0042.045] WriteFile (in: hFile=0x274, lpBuffer=0x274f034*, nNumberOfBytesToWrite=0x980, lpNumberOfBytesWritten=0x31e524, lpOverlapped=0x0 | out: lpBuffer=0x274f034*, lpNumberOfBytesWritten=0x31e524*=0x980, lpOverlapped=0x0) returned 1 [0042.046] CloseHandle (hObject=0x274) returned 1 [0042.046] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\Desert.css", nBufferLength=0x105, lpBuffer=0x31e0d4, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\Desert.css", lpFilePart=0x0) returned 0x69 [0042.046] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\Desert.css", nBufferLength=0x105, lpBuffer=0x31e0d4, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\Desert.css", lpFilePart=0x0) returned 0x69 [0042.047] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e534) returned 1 [0042.047] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\Desert.css" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms3\\formsstyles\\desert.css"), fInfoLevelId=0x0, lpFileInformation=0x31e5b0 | out: lpFileInformation=0x31e5b0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x91f4b000, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0x51da7910, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xfc841ea0, ftLastWriteTime.dwHighDateTime=0x1d6eb7e, nFileSizeHigh=0x0, nFileSizeLow=0x980)) returned 1 [0042.047] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e530) returned 1 [0042.047] MoveFileW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\Desert.css" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms3\\formsstyles\\desert.css"), lpNewFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\Desert.css" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms3\\formsstyles\\desert.css")) returned 1 [0042.047] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\Earthy.css", nBufferLength=0x105, lpBuffer=0x31dfb4, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\Earthy.css", lpFilePart=0x0) returned 0x69 [0042.047] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e4a8) returned 1 [0042.047] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\Earthy.css" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms3\\formsstyles\\earthy.css"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x274 [0042.047] GetFileType (hFile=0x274) returned 0x1 [0042.048] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e4a4) returned 1 [0042.048] GetFileType (hFile=0x274) returned 0x1 [0042.048] GetFileSize (in: hFile=0x274, lpFileSizeHigh=0x31e5b0 | out: lpFileSizeHigh=0x31e5b0*=0x0) returned 0x370 [0042.048] ReadFile (in: hFile=0x274, lpBuffer=0x27506f4, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x31e55c, lpOverlapped=0x0 | out: lpBuffer=0x27506f4*, lpNumberOfBytesRead=0x31e55c*=0x370, lpOverlapped=0x0) returned 1 [0042.049] CloseHandle (hObject=0x274) returned 1 [0042.063] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\Earthy.css", nBufferLength=0x105, lpBuffer=0x31dfa0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\Earthy.css", lpFilePart=0x0) returned 0x69 [0042.063] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e494) returned 1 [0042.063] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\Earthy.css" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms3\\formsstyles\\earthy.css"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x274 [0042.064] GetFileType (hFile=0x274) returned 0x1 [0042.064] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e490) returned 1 [0042.064] GetFileType (hFile=0x274) returned 0x1 [0042.064] WriteFile (in: hFile=0x274, lpBuffer=0x279f7d4*, nNumberOfBytesToWrite=0x380, lpNumberOfBytesWritten=0x31e524, lpOverlapped=0x0 | out: lpBuffer=0x279f7d4*, lpNumberOfBytesWritten=0x31e524*=0x380, lpOverlapped=0x0) returned 1 [0042.065] CloseHandle (hObject=0x274) returned 1 [0042.066] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\Earthy.css", nBufferLength=0x105, lpBuffer=0x31e0d4, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\Earthy.css", lpFilePart=0x0) returned 0x69 [0042.066] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\Earthy.css", nBufferLength=0x105, lpBuffer=0x31e0d4, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\Earthy.css", lpFilePart=0x0) returned 0x69 [0042.066] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e534) returned 1 [0042.066] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\Earthy.css" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms3\\formsstyles\\earthy.css"), fInfoLevelId=0x0, lpFileInformation=0x31e5b0 | out: lpFileInformation=0x31e5b0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x91f4b000, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0x51e3fe90, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xfc868000, ftLastWriteTime.dwHighDateTime=0x1d6eb7e, nFileSizeHigh=0x0, nFileSizeLow=0x380)) returned 1 [0042.066] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e530) returned 1 [0042.066] MoveFileW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\Earthy.css" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms3\\formsstyles\\earthy.css"), lpNewFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\Earthy.css" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms3\\formsstyles\\earthy.css")) returned 1 [0042.066] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\GrayCheck.css", nBufferLength=0x105, lpBuffer=0x31dfb4, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\GrayCheck.css", lpFilePart=0x0) returned 0x6c [0042.066] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e4a8) returned 1 [0042.066] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\GrayCheck.css" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms3\\formsstyles\\graycheck.css"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x274 [0042.067] GetFileType (hFile=0x274) returned 0x1 [0042.067] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e4a4) returned 1 [0042.067] GetFileType (hFile=0x274) returned 0x1 [0042.067] GetFileSize (in: hFile=0x274, lpFileSizeHigh=0x31e5b0 | out: lpFileSizeHigh=0x31e5b0*=0x0) returned 0xaf2 [0042.067] ReadFile (in: hFile=0x274, lpBuffer=0x27a1624, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x31e55c, lpOverlapped=0x0 | out: lpBuffer=0x27a1624*, lpNumberOfBytesRead=0x31e55c*=0xaf2, lpOverlapped=0x0) returned 1 [0042.069] CloseHandle (hObject=0x274) returned 1 [0042.082] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\GrayCheck.css", nBufferLength=0x105, lpBuffer=0x31dfa0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\GrayCheck.css", lpFilePart=0x0) returned 0x6c [0042.082] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e494) returned 1 [0042.082] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\GrayCheck.css" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms3\\formsstyles\\graycheck.css"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x274 [0042.083] GetFileType (hFile=0x274) returned 0x1 [0042.083] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e490) returned 1 [0042.083] GetFileType (hFile=0x274) returned 0x1 [0042.083] WriteFile (in: hFile=0x274, lpBuffer=0x27f2c90*, nNumberOfBytesToWrite=0xb00, lpNumberOfBytesWritten=0x31e524, lpOverlapped=0x0 | out: lpBuffer=0x27f2c90*, lpNumberOfBytesWritten=0x31e524*=0xb00, lpOverlapped=0x0) returned 1 [0042.084] CloseHandle (hObject=0x274) returned 1 [0042.085] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\GrayCheck.css", nBufferLength=0x105, lpBuffer=0x31e0d4, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\GrayCheck.css", lpFilePart=0x0) returned 0x6c [0042.085] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\GrayCheck.css", nBufferLength=0x105, lpBuffer=0x31e0d4, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\GrayCheck.css", lpFilePart=0x0) returned 0x6c [0042.085] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e534) returned 1 [0042.085] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\GrayCheck.css" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms3\\formsstyles\\graycheck.css"), fInfoLevelId=0x0, lpFileInformation=0x31e5b0 | out: lpFileInformation=0x31e5b0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x91f4b000, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0x61a91a90, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xfc88e160, ftLastWriteTime.dwHighDateTime=0x1d6eb7e, nFileSizeHigh=0x0, nFileSizeLow=0xb00)) returned 1 [0042.085] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e530) returned 1 [0042.085] MoveFileW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\GrayCheck.css" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms3\\formsstyles\\graycheck.css"), lpNewFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\GrayCheck.css" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms3\\formsstyles\\graycheck.css")) returned 1 [0042.086] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\GreenTea.css", nBufferLength=0x105, lpBuffer=0x31dfb4, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\GreenTea.css", lpFilePart=0x0) returned 0x6b [0042.086] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e4a8) returned 1 [0042.086] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\GreenTea.css" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms3\\formsstyles\\greentea.css"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x274 [0042.087] GetFileType (hFile=0x274) returned 0x1 [0042.087] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e4a4) returned 1 [0042.087] GetFileType (hFile=0x274) returned 0x1 [0042.087] GetFileSize (in: hFile=0x274, lpFileSizeHigh=0x31e5b0 | out: lpFileSizeHigh=0x31e5b0*=0x0) returned 0x3a4 [0042.087] ReadFile (in: hFile=0x274, lpBuffer=0x27f439c, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x31e55c, lpOverlapped=0x0 | out: lpBuffer=0x27f439c*, lpNumberOfBytesRead=0x31e55c*=0x3a4, lpOverlapped=0x0) returned 1 [0042.088] CloseHandle (hObject=0x274) returned 1 [0042.102] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\GreenTea.css", nBufferLength=0x105, lpBuffer=0x31dfa0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\GreenTea.css", lpFilePart=0x0) returned 0x6b [0042.102] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e494) returned 1 [0042.102] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\GreenTea.css" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms3\\formsstyles\\greentea.css"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x274 [0042.103] GetFileType (hFile=0x274) returned 0x1 [0042.103] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e490) returned 1 [0042.103] GetFileType (hFile=0x274) returned 0x1 [0042.103] WriteFile (in: hFile=0x274, lpBuffer=0x2843570*, nNumberOfBytesToWrite=0x3b0, lpNumberOfBytesWritten=0x31e524, lpOverlapped=0x0 | out: lpBuffer=0x2843570*, lpNumberOfBytesWritten=0x31e524*=0x3b0, lpOverlapped=0x0) returned 1 [0042.104] CloseHandle (hObject=0x274) returned 1 [0042.105] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\GreenTea.css", nBufferLength=0x105, lpBuffer=0x31e0d4, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\GreenTea.css", lpFilePart=0x0) returned 0x6b [0042.105] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\GreenTea.css", nBufferLength=0x105, lpBuffer=0x31e0d4, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\GreenTea.css", lpFilePart=0x0) returned 0x6b [0042.105] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e534) returned 1 [0042.105] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\GreenTea.css" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms3\\formsstyles\\greentea.css"), fInfoLevelId=0x0, lpFileInformation=0x31e5b0 | out: lpFileInformation=0x31e5b0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x91f4b000, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0x52c3bfd0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xfc8da420, ftLastWriteTime.dwHighDateTime=0x1d6eb7e, nFileSizeHigh=0x0, nFileSizeLow=0x3b0)) returned 1 [0042.105] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e530) returned 1 [0042.105] MoveFileW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\GreenTea.css" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms3\\formsstyles\\greentea.css"), lpNewFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\GreenTea.css" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms3\\formsstyles\\greentea.css")) returned 1 [0042.106] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\LightSpirit.css", nBufferLength=0x105, lpBuffer=0x31dfb4, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\LightSpirit.css", lpFilePart=0x0) returned 0x6e [0042.106] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e4a8) returned 1 [0042.106] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\LightSpirit.css" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms3\\formsstyles\\lightspirit.css"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x274 [0042.107] GetFileType (hFile=0x274) returned 0x1 [0042.107] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e4a4) returned 1 [0042.107] GetFileType (hFile=0x274) returned 0x1 [0042.107] GetFileSize (in: hFile=0x274, lpFileSizeHigh=0x31e5b0 | out: lpFileSizeHigh=0x31e5b0*=0x0) returned 0x411 [0042.107] ReadFile (in: hFile=0x274, lpBuffer=0x2844cf0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x31e55c, lpOverlapped=0x0 | out: lpBuffer=0x2844cf0*, lpNumberOfBytesRead=0x31e55c*=0x411, lpOverlapped=0x0) returned 1 [0042.109] CloseHandle (hObject=0x274) returned 1 [0042.148] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\LightSpirit.css", nBufferLength=0x105, lpBuffer=0x31dfa0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\LightSpirit.css", lpFilePart=0x0) returned 0x6e [0042.149] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e494) returned 1 [0042.149] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\LightSpirit.css" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms3\\formsstyles\\lightspirit.css"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x274 [0042.150] GetFileType (hFile=0x274) returned 0x1 [0042.150] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e490) returned 1 [0042.150] GetFileType (hFile=0x274) returned 0x1 [0042.150] WriteFile (in: hFile=0x274, lpBuffer=0x2693848*, nNumberOfBytesToWrite=0x420, lpNumberOfBytesWritten=0x31e524, lpOverlapped=0x0 | out: lpBuffer=0x2693848*, lpNumberOfBytesWritten=0x31e524*=0x420, lpOverlapped=0x0) returned 1 [0042.151] CloseHandle (hObject=0x274) returned 1 [0042.152] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\LightSpirit.css", nBufferLength=0x105, lpBuffer=0x31e0d4, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\LightSpirit.css", lpFilePart=0x0) returned 0x6e [0042.152] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\LightSpirit.css", nBufferLength=0x105, lpBuffer=0x31e0d4, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\LightSpirit.css", lpFilePart=0x0) returned 0x6e [0042.152] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e534) returned 1 [0042.152] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\LightSpirit.css" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms3\\formsstyles\\lightspirit.css"), fInfoLevelId=0x0, lpFileInformation=0x31e5b0 | out: lpFileInformation=0x31e5b0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x91f4b000, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0x6626d2b0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xfc94c840, ftLastWriteTime.dwHighDateTime=0x1d6eb7e, nFileSizeHigh=0x0, nFileSizeLow=0x420)) returned 1 [0042.152] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e530) returned 1 [0042.153] MoveFileW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\LightSpirit.css" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms3\\formsstyles\\lightspirit.css"), lpNewFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\LightSpirit.css" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms3\\formsstyles\\lightspirit.css")) returned 1 [0042.153] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\Lime.css", nBufferLength=0x105, lpBuffer=0x31dfb4, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\Lime.css", lpFilePart=0x0) returned 0x67 [0042.153] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e4a8) returned 1 [0042.153] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\Lime.css" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms3\\formsstyles\\lime.css"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x274 [0042.153] GetFileType (hFile=0x274) returned 0x1 [0042.153] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e4a4) returned 1 [0042.153] GetFileType (hFile=0x274) returned 0x1 [0042.153] GetFileSize (in: hFile=0x274, lpFileSizeHigh=0x31e5b0 | out: lpFileSizeHigh=0x31e5b0*=0x0) returned 0xcfb [0042.154] ReadFile (in: hFile=0x274, lpBuffer=0x26958a4, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x31e55c, lpOverlapped=0x0 | out: lpBuffer=0x26958a4*, lpNumberOfBytesRead=0x31e55c*=0xcfb, lpOverlapped=0x0) returned 1 [0042.155] CloseHandle (hObject=0x274) returned 1 [0042.169] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\Lime.css", nBufferLength=0x105, lpBuffer=0x31dfa0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\Lime.css", lpFilePart=0x0) returned 0x67 [0042.169] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e494) returned 1 [0042.169] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\Lime.css" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms3\\formsstyles\\lime.css"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x274 [0042.170] GetFileType (hFile=0x274) returned 0x1 [0042.170] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e490) returned 1 [0042.170] GetFileType (hFile=0x274) returned 0x1 [0042.170] WriteFile (in: hFile=0x274, lpBuffer=0x26e7a50*, nNumberOfBytesToWrite=0xd00, lpNumberOfBytesWritten=0x31e524, lpOverlapped=0x0 | out: lpBuffer=0x26e7a50*, lpNumberOfBytesWritten=0x31e524*=0xd00, lpOverlapped=0x0) returned 1 [0042.171] CloseHandle (hObject=0x274) returned 1 [0042.172] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\Lime.css", nBufferLength=0x105, lpBuffer=0x31e0d4, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\Lime.css", lpFilePart=0x0) returned 0x67 [0042.172] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\Lime.css", nBufferLength=0x105, lpBuffer=0x31e0d4, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\Lime.css", lpFilePart=0x0) returned 0x67 [0042.172] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e534) returned 1 [0042.172] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\Lime.css" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms3\\formsstyles\\lime.css"), fInfoLevelId=0x0, lpFileInformation=0x31e5b0 | out: lpFileInformation=0x31e5b0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x91f4b000, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0x6626d2b0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xfc9729a0, ftLastWriteTime.dwHighDateTime=0x1d6eb7e, nFileSizeHigh=0x0, nFileSizeLow=0xd00)) returned 1 [0042.172] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e530) returned 1 [0042.172] MoveFileW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\Lime.css" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms3\\formsstyles\\lime.css"), lpNewFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\Lime.css" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms3\\formsstyles\\lime.css")) returned 1 [0042.173] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\Maroon.css", nBufferLength=0x105, lpBuffer=0x31dfb4, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\Maroon.css", lpFilePart=0x0) returned 0x69 [0042.173] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e4a8) returned 1 [0042.173] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\Maroon.css" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms3\\formsstyles\\maroon.css"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x274 [0042.174] GetFileType (hFile=0x274) returned 0x1 [0042.174] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e4a4) returned 1 [0042.174] GetFileType (hFile=0x274) returned 0x1 [0042.174] GetFileSize (in: hFile=0x274, lpFileSizeHigh=0x31e5b0 | out: lpFileSizeHigh=0x31e5b0*=0x0) returned 0x362 [0042.174] ReadFile (in: hFile=0x274, lpBuffer=0x26e90fc, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x31e55c, lpOverlapped=0x0 | out: lpBuffer=0x26e90fc*, lpNumberOfBytesRead=0x31e55c*=0x362, lpOverlapped=0x0) returned 1 [0042.176] CloseHandle (hObject=0x274) returned 1 [0042.189] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\Maroon.css", nBufferLength=0x105, lpBuffer=0x31dfa0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\Maroon.css", lpFilePart=0x0) returned 0x69 [0042.190] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e494) returned 1 [0042.190] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\Maroon.css" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms3\\formsstyles\\maroon.css"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x274 [0042.190] GetFileType (hFile=0x274) returned 0x1 [0042.191] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e490) returned 1 [0042.191] GetFileType (hFile=0x274) returned 0x1 [0042.191] WriteFile (in: hFile=0x274, lpBuffer=0x273818c*, nNumberOfBytesToWrite=0x370, lpNumberOfBytesWritten=0x31e524, lpOverlapped=0x0 | out: lpBuffer=0x273818c*, lpNumberOfBytesWritten=0x31e524*=0x370, lpOverlapped=0x0) returned 1 [0042.191] CloseHandle (hObject=0x274) returned 1 [0042.192] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\Maroon.css", nBufferLength=0x105, lpBuffer=0x31e0d4, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\Maroon.css", lpFilePart=0x0) returned 0x69 [0042.192] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\Maroon.css", nBufferLength=0x105, lpBuffer=0x31e0d4, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\Maroon.css", lpFilePart=0x0) returned 0x69 [0042.192] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e534) returned 1 [0042.193] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\Maroon.css" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms3\\formsstyles\\maroon.css"), fInfoLevelId=0x0, lpFileInformation=0x31e5b0 | out: lpFileInformation=0x31e5b0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9325dd00, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0x582d2010, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xfc998b00, ftLastWriteTime.dwHighDateTime=0x1d6eb7e, nFileSizeHigh=0x0, nFileSizeLow=0x370)) returned 1 [0042.193] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e530) returned 1 [0042.193] MoveFileW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\Maroon.css" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms3\\formsstyles\\maroon.css"), lpNewFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\Maroon.css" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms3\\formsstyles\\maroon.css")) returned 1 [0042.193] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\Oasis.css", nBufferLength=0x105, lpBuffer=0x31dfb4, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\Oasis.css", lpFilePart=0x0) returned 0x68 [0042.193] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e4a8) returned 1 [0042.193] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\Oasis.css" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms3\\formsstyles\\oasis.css"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x274 [0042.194] GetFileType (hFile=0x274) returned 0x1 [0042.194] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e4a4) returned 1 [0042.194] GetFileType (hFile=0x274) returned 0x1 [0042.194] GetFileSize (in: hFile=0x274, lpFileSizeHigh=0x31e5b0 | out: lpFileSizeHigh=0x31e5b0*=0x0) returned 0xbf2 [0042.194] ReadFile (in: hFile=0x274, lpBuffer=0x273a0cc, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x31e55c, lpOverlapped=0x0 | out: lpBuffer=0x273a0cc*, lpNumberOfBytesRead=0x31e55c*=0xbf2, lpOverlapped=0x0) returned 1 [0042.196] CloseHandle (hObject=0x274) returned 1 [0042.210] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\Oasis.css", nBufferLength=0x105, lpBuffer=0x31dfa0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\Oasis.css", lpFilePart=0x0) returned 0x68 [0042.210] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e494) returned 1 [0042.210] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\Oasis.css" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms3\\formsstyles\\oasis.css"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x274 [0042.211] GetFileType (hFile=0x274) returned 0x1 [0042.211] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e490) returned 1 [0042.211] GetFileType (hFile=0x274) returned 0x1 [0042.211] WriteFile (in: hFile=0x274, lpBuffer=0x278bc28*, nNumberOfBytesToWrite=0xc00, lpNumberOfBytesWritten=0x31e524, lpOverlapped=0x0 | out: lpBuffer=0x278bc28*, lpNumberOfBytesWritten=0x31e524*=0xc00, lpOverlapped=0x0) returned 1 [0042.212] CloseHandle (hObject=0x274) returned 1 [0042.212] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\Oasis.css", nBufferLength=0x105, lpBuffer=0x31e0d4, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\Oasis.css", lpFilePart=0x0) returned 0x68 [0042.213] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\Oasis.css", nBufferLength=0x105, lpBuffer=0x31e0d4, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\Oasis.css", lpFilePart=0x0) returned 0x68 [0042.213] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e534) returned 1 [0042.213] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\Oasis.css" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms3\\formsstyles\\oasis.css"), fInfoLevelId=0x0, lpFileInformation=0x31e5b0 | out: lpFileInformation=0x31e5b0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9325dd00, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0x6b22b3b0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xfc9bec60, ftLastWriteTime.dwHighDateTime=0x1d6eb7e, nFileSizeHigh=0x0, nFileSizeLow=0xc00)) returned 1 [0042.213] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e530) returned 1 [0042.213] MoveFileW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\Oasis.css" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms3\\formsstyles\\oasis.css"), lpNewFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\Oasis.css" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms3\\formsstyles\\oasis.css")) returned 1 [0042.213] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\OliveGreen.css", nBufferLength=0x105, lpBuffer=0x31dfb4, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\OliveGreen.css", lpFilePart=0x0) returned 0x6d [0042.213] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e4a8) returned 1 [0042.213] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\OliveGreen.css" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms3\\formsstyles\\olivegreen.css"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x274 [0042.214] GetFileType (hFile=0x274) returned 0x1 [0042.214] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e4a4) returned 1 [0042.214] GetFileType (hFile=0x274) returned 0x1 [0042.214] GetFileSize (in: hFile=0x274, lpFileSizeHigh=0x31e5b0 | out: lpFileSizeHigh=0x31e5b0*=0x0) returned 0x38d [0042.214] ReadFile (in: hFile=0x274, lpBuffer=0x278d318, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x31e55c, lpOverlapped=0x0 | out: lpBuffer=0x278d318*, lpNumberOfBytesRead=0x31e55c*=0x38d, lpOverlapped=0x0) returned 1 [0042.216] CloseHandle (hObject=0x274) returned 1 [0042.229] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\OliveGreen.css", nBufferLength=0x105, lpBuffer=0x31dfa0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\OliveGreen.css", lpFilePart=0x0) returned 0x6d [0042.229] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e494) returned 1 [0042.229] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\OliveGreen.css" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms3\\formsstyles\\olivegreen.css"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x274 [0042.230] GetFileType (hFile=0x274) returned 0x1 [0042.230] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e490) returned 1 [0042.230] GetFileType (hFile=0x274) returned 0x1 [0042.230] WriteFile (in: hFile=0x274, lpBuffer=0x27dc44c*, nNumberOfBytesToWrite=0x390, lpNumberOfBytesWritten=0x31e524, lpOverlapped=0x0 | out: lpBuffer=0x27dc44c*, lpNumberOfBytesWritten=0x31e524*=0x390, lpOverlapped=0x0) returned 1 [0042.231] CloseHandle (hObject=0x274) returned 1 [0042.232] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\OliveGreen.css", nBufferLength=0x105, lpBuffer=0x31e0d4, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\OliveGreen.css", lpFilePart=0x0) returned 0x6d [0042.232] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\OliveGreen.css", nBufferLength=0x105, lpBuffer=0x31e0d4, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\OliveGreen.css", lpFilePart=0x0) returned 0x6d [0042.232] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e534) returned 1 [0042.232] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\OliveGreen.css" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms3\\formsstyles\\olivegreen.css"), fInfoLevelId=0x0, lpFileInformation=0x31e5b0 | out: lpFileInformation=0x31e5b0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9325dd00, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0x6bd79c30, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xfca0af20, ftLastWriteTime.dwHighDateTime=0x1d6eb7e, nFileSizeHigh=0x0, nFileSizeLow=0x390)) returned 1 [0042.232] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e530) returned 1 [0042.232] MoveFileW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\OliveGreen.css" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms3\\formsstyles\\olivegreen.css"), lpNewFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\OliveGreen.css" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms3\\formsstyles\\olivegreen.css")) returned 1 [0042.233] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\Premium.css", nBufferLength=0x105, lpBuffer=0x31dfb4, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\Premium.css", lpFilePart=0x0) returned 0x6a [0042.233] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e4a8) returned 1 [0042.233] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\Premium.css" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms3\\formsstyles\\premium.css"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x274 [0042.234] GetFileType (hFile=0x274) returned 0x1 [0042.234] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e4a4) returned 1 [0042.234] GetFileType (hFile=0x274) returned 0x1 [0042.234] GetFileSize (in: hFile=0x274, lpFileSizeHigh=0x31e5b0 | out: lpFileSizeHigh=0x31e5b0*=0x0) returned 0x348 [0042.234] ReadFile (in: hFile=0x274, lpBuffer=0x27ddaf8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x31e55c, lpOverlapped=0x0 | out: lpBuffer=0x27ddaf8*, lpNumberOfBytesRead=0x31e55c*=0x348, lpOverlapped=0x0) returned 1 [0042.239] CloseHandle (hObject=0x274) returned 1 [0042.260] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\Premium.css", nBufferLength=0x105, lpBuffer=0x31dfa0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\Premium.css", lpFilePart=0x0) returned 0x6a [0042.260] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e494) returned 1 [0042.260] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\Premium.css" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms3\\formsstyles\\premium.css"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x274 [0042.261] GetFileType (hFile=0x274) returned 0x1 [0042.261] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e490) returned 1 [0042.261] GetFileType (hFile=0x274) returned 0x1 [0042.261] WriteFile (in: hFile=0x274, lpBuffer=0x282cae4*, nNumberOfBytesToWrite=0x350, lpNumberOfBytesWritten=0x31e524, lpOverlapped=0x0 | out: lpBuffer=0x282cae4*, lpNumberOfBytesWritten=0x31e524*=0x350, lpOverlapped=0x0) returned 1 [0042.262] CloseHandle (hObject=0x274) returned 1 [0042.263] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\Premium.css", nBufferLength=0x105, lpBuffer=0x31e0d4, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\Premium.css", lpFilePart=0x0) returned 0x6a [0042.263] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\Premium.css", nBufferLength=0x105, lpBuffer=0x31e0d4, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\Premium.css", lpFilePart=0x0) returned 0x6a [0042.263] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e534) returned 1 [0042.263] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\Premium.css" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms3\\formsstyles\\premium.css"), fInfoLevelId=0x0, lpFileInformation=0x31e5b0 | out: lpFileInformation=0x31e5b0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9325dd00, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0x6d05ead0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xfca571e0, ftLastWriteTime.dwHighDateTime=0x1d6eb7e, nFileSizeHigh=0x0, nFileSizeLow=0x350)) returned 1 [0042.263] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e530) returned 1 [0042.263] MoveFileW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\Premium.css" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms3\\formsstyles\\premium.css"), lpNewFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\Premium.css" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms3\\formsstyles\\premium.css")) returned 1 [0042.264] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\Slate.css", nBufferLength=0x105, lpBuffer=0x31dfb4, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\Slate.css", lpFilePart=0x0) returned 0x68 [0042.264] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e4a8) returned 1 [0042.264] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\Slate.css" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms3\\formsstyles\\slate.css"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x274 [0042.264] GetFileType (hFile=0x274) returned 0x1 [0042.264] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e4a4) returned 1 [0042.264] GetFileType (hFile=0x274) returned 0x1 [0042.264] GetFileSize (in: hFile=0x274, lpFileSizeHigh=0x31e5b0 | out: lpFileSizeHigh=0x31e5b0*=0x0) returned 0xd41 [0042.264] ReadFile (in: hFile=0x274, lpBuffer=0x282eb7c, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x31e55c, lpOverlapped=0x0 | out: lpBuffer=0x282eb7c*, lpNumberOfBytesRead=0x31e55c*=0xd41, lpOverlapped=0x0) returned 1 [0042.296] CloseHandle (hObject=0x274) returned 1 [0042.340] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\Slate.css", nBufferLength=0x105, lpBuffer=0x31dfa0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\Slate.css", lpFilePart=0x0) returned 0x68 [0042.340] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e494) returned 1 [0042.341] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\Slate.css" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms3\\formsstyles\\slate.css"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x274 [0042.341] GetFileType (hFile=0x274) returned 0x1 [0042.342] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e490) returned 1 [0042.342] GetFileType (hFile=0x274) returned 0x1 [0042.342] WriteFile (in: hFile=0x274, lpBuffer=0x2681658*, nNumberOfBytesToWrite=0xd50, lpNumberOfBytesWritten=0x31e524, lpOverlapped=0x0 | out: lpBuffer=0x2681658*, lpNumberOfBytesWritten=0x31e524*=0xd50, lpOverlapped=0x0) returned 1 [0042.343] CloseHandle (hObject=0x274) returned 1 [0042.343] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\Slate.css", nBufferLength=0x105, lpBuffer=0x31e0d4, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\Slate.css", lpFilePart=0x0) returned 0x68 [0042.343] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\Slate.css", nBufferLength=0x105, lpBuffer=0x31e0d4, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\Slate.css", lpFilePart=0x0) returned 0x68 [0042.343] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e534) returned 1 [0042.344] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\Slate.css" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms3\\formsstyles\\slate.css"), fInfoLevelId=0x0, lpFileInformation=0x31e5b0 | out: lpFileInformation=0x31e5b0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9325dd00, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0x5a980590, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xfcb158c0, ftLastWriteTime.dwHighDateTime=0x1d6eb7e, nFileSizeHigh=0x0, nFileSizeLow=0xd50)) returned 1 [0042.344] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e530) returned 1 [0042.344] MoveFileW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\Slate.css" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms3\\formsstyles\\slate.css"), lpNewFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\Slate.css" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms3\\formsstyles\\slate.css")) returned 1 [0042.344] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\SlateBlue.css", nBufferLength=0x105, lpBuffer=0x31dfb4, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\SlateBlue.css", lpFilePart=0x0) returned 0x6c [0042.344] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e4a8) returned 1 [0042.344] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\SlateBlue.css" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms3\\formsstyles\\slateblue.css"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x274 [0042.345] GetFileType (hFile=0x274) returned 0x1 [0042.345] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e4a4) returned 1 [0042.345] GetFileType (hFile=0x274) returned 0x1 [0042.345] GetFileSize (in: hFile=0x274, lpFileSizeHigh=0x31e5b0 | out: lpFileSizeHigh=0x31e5b0*=0x0) returned 0x38c [0042.345] ReadFile (in: hFile=0x274, lpBuffer=0x2682d40, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x31e55c, lpOverlapped=0x0 | out: lpBuffer=0x2682d40*, lpNumberOfBytesRead=0x31e55c*=0x38c, lpOverlapped=0x0) returned 1 [0042.455] CloseHandle (hObject=0x274) returned 1 [0042.469] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\SlateBlue.css", nBufferLength=0x105, lpBuffer=0x31dfa0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\SlateBlue.css", lpFilePart=0x0) returned 0x6c [0042.469] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e494) returned 1 [0042.469] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\SlateBlue.css" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms3\\formsstyles\\slateblue.css"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x274 [0042.470] GetFileType (hFile=0x274) returned 0x1 [0042.470] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e490) returned 1 [0042.470] GetFileType (hFile=0x274) returned 0x1 [0042.470] WriteFile (in: hFile=0x274, lpBuffer=0x26d1fcc*, nNumberOfBytesToWrite=0x390, lpNumberOfBytesWritten=0x31e524, lpOverlapped=0x0 | out: lpBuffer=0x26d1fcc*, lpNumberOfBytesWritten=0x31e524*=0x390, lpOverlapped=0x0) returned 1 [0042.471] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\SlateBlue.css", nBufferLength=0x105, lpBuffer=0x31e0d4, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\SlateBlue.css", lpFilePart=0x0) returned 0x6c [0042.471] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\SlateBlue.css", nBufferLength=0x105, lpBuffer=0x31e0d4, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\SlateBlue.css", lpFilePart=0x0) returned 0x6c [0042.472] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e534) returned 1 [0042.472] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\SlateBlue.css" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms3\\formsstyles\\slateblue.css"), fInfoLevelId=0x0, lpFileInformation=0x31e5b0 | out: lpFileInformation=0x31e5b0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9325dd00, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0x6d2e6230, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xfcc463c0, ftLastWriteTime.dwHighDateTime=0x1d6eb7e, nFileSizeHigh=0x0, nFileSizeLow=0x390)) returned 1 [0042.472] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e530) returned 1 [0042.472] MoveFileW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\SlateBlue.css" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms3\\formsstyles\\slateblue.css"), lpNewFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\SlateBlue.css" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms3\\formsstyles\\slateblue.css")) returned 1 [0042.473] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\SoftBlue.css", nBufferLength=0x105, lpBuffer=0x31dfb4, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\SoftBlue.css", lpFilePart=0x0) returned 0x6b [0042.473] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e4a8) returned 1 [0042.473] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\SoftBlue.css" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms3\\formsstyles\\softblue.css"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x274 [0042.529] GetFileType (hFile=0x274) returned 0x1 [0042.529] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e4a4) returned 1 [0042.529] GetFileType (hFile=0x274) returned 0x1 [0042.529] GetFileSize (in: hFile=0x274, lpFileSizeHigh=0x31e5b0 | out: lpFileSizeHigh=0x31e5b0*=0x0) returned 0xe34 [0042.529] ReadFile (in: hFile=0x274, lpBuffer=0x26d4168, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x31e55c, lpOverlapped=0x0 | out: lpBuffer=0x26d4168*, lpNumberOfBytesRead=0x31e55c*=0xe34, lpOverlapped=0x0) returned 1 [0042.544] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\SoftBlue.css", nBufferLength=0x105, lpBuffer=0x31dfa0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\SoftBlue.css", lpFilePart=0x0) returned 0x6b [0042.544] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e494) returned 1 [0042.544] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\SoftBlue.css" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms3\\formsstyles\\softblue.css"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x274 [0042.545] GetFileType (hFile=0x274) returned 0x1 [0042.545] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e490) returned 1 [0042.545] GetFileType (hFile=0x274) returned 0x1 [0042.545] WriteFile (in: hFile=0x274, lpBuffer=0x272680c*, nNumberOfBytesToWrite=0xe40, lpNumberOfBytesWritten=0x31e524, lpOverlapped=0x0 | out: lpBuffer=0x272680c*, lpNumberOfBytesWritten=0x31e524*=0xe40, lpOverlapped=0x0) returned 1 [0042.546] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\SoftBlue.css", nBufferLength=0x105, lpBuffer=0x31e0d4, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\SoftBlue.css", lpFilePart=0x0) returned 0x6b [0042.546] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\SoftBlue.css", nBufferLength=0x105, lpBuffer=0x31e0d4, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\SoftBlue.css", lpFilePart=0x0) returned 0x6b [0042.546] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e534) returned 1 [0042.546] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\SoftBlue.css" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms3\\formsstyles\\softblue.css"), fInfoLevelId=0x0, lpFileInformation=0x31e5b0 | out: lpFileInformation=0x31e5b0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9325dd00, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0x5aad71f0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xfcd04aa0, ftLastWriteTime.dwHighDateTime=0x1d6eb7e, nFileSizeHigh=0x0, nFileSizeLow=0xe40)) returned 1 [0042.546] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e530) returned 1 [0042.546] MoveFileW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\SoftBlue.css" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms3\\formsstyles\\softblue.css"), lpNewFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\SoftBlue.css" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms3\\formsstyles\\softblue.css")) returned 1 [0042.547] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\SpringGreen.css", nBufferLength=0x105, lpBuffer=0x31dfb4, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\SpringGreen.css", lpFilePart=0x0) returned 0x6e [0042.547] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e4a8) returned 1 [0042.547] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\SpringGreen.css" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms3\\formsstyles\\springgreen.css"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x274 [0042.547] GetFileType (hFile=0x274) returned 0x1 [0042.548] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e4a4) returned 1 [0042.548] GetFileType (hFile=0x274) returned 0x1 [0042.548] GetFileSize (in: hFile=0x274, lpFileSizeHigh=0x31e5b0 | out: lpFileSizeHigh=0x31e5b0*=0x0) returned 0xc3a [0042.548] ReadFile (in: hFile=0x274, lpBuffer=0x27287b4, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x31e55c, lpOverlapped=0x0 | out: lpBuffer=0x27287b4*, lpNumberOfBytesRead=0x31e55c*=0xc3a, lpOverlapped=0x0) returned 1 [0042.564] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\SpringGreen.css", nBufferLength=0x105, lpBuffer=0x31dfa0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\SpringGreen.css", lpFilePart=0x0) returned 0x6e [0042.564] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e494) returned 1 [0042.564] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\SpringGreen.css" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms3\\formsstyles\\springgreen.css"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x274 [0042.565] GetFileType (hFile=0x274) returned 0x1 [0042.565] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e490) returned 1 [0042.565] GetFileType (hFile=0x274) returned 0x1 [0042.565] WriteFile (in: hFile=0x274, lpBuffer=0x277a460*, nNumberOfBytesToWrite=0xc40, lpNumberOfBytesWritten=0x31e524, lpOverlapped=0x0 | out: lpBuffer=0x277a460*, lpNumberOfBytesWritten=0x31e524*=0xc40, lpOverlapped=0x0) returned 1 [0042.566] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\SpringGreen.css", nBufferLength=0x105, lpBuffer=0x31e0d4, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\SpringGreen.css", lpFilePart=0x0) returned 0x6e [0042.566] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\SpringGreen.css", nBufferLength=0x105, lpBuffer=0x31e0d4, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\SpringGreen.css", lpFilePart=0x0) returned 0x6e [0042.566] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e534) returned 1 [0042.566] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\SpringGreen.css" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms3\\formsstyles\\springgreen.css"), fInfoLevelId=0x0, lpFileInformation=0x31e5b0 | out: lpFileInformation=0x31e5b0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x94570a00, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0x5ab49610, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xfcd2ac00, ftLastWriteTime.dwHighDateTime=0x1d6eb7e, nFileSizeHigh=0x0, nFileSizeLow=0xc40)) returned 1 [0042.566] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e530) returned 1 [0042.566] MoveFileW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\SpringGreen.css" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms3\\formsstyles\\springgreen.css"), lpNewFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\SpringGreen.css" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms3\\formsstyles\\springgreen.css")) returned 1 [0042.567] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\Sts.css", nBufferLength=0x105, lpBuffer=0x31dfb4, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\Sts.css", lpFilePart=0x0) returned 0x66 [0042.567] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e4a8) returned 1 [0042.567] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\Sts.css" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms3\\formsstyles\\sts.css"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x274 [0042.568] GetFileType (hFile=0x274) returned 0x1 [0042.568] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e4a4) returned 1 [0042.568] GetFileType (hFile=0x274) returned 0x1 [0042.568] GetFileSize (in: hFile=0x274, lpFileSizeHigh=0x31e5b0 | out: lpFileSizeHigh=0x31e5b0*=0x0) returned 0x736 [0042.568] ReadFile (in: hFile=0x274, lpBuffer=0x277bef4, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x31e55c, lpOverlapped=0x0 | out: lpBuffer=0x277bef4*, lpNumberOfBytesRead=0x31e55c*=0x736, lpOverlapped=0x0) returned 1 [0042.583] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\Sts.css", nBufferLength=0x105, lpBuffer=0x31dfa0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\Sts.css", lpFilePart=0x0) returned 0x66 [0042.583] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e494) returned 1 [0042.583] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\Sts.css" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms3\\formsstyles\\sts.css"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x274 [0042.584] GetFileType (hFile=0x274) returned 0x1 [0042.584] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e490) returned 1 [0042.584] GetFileType (hFile=0x274) returned 0x1 [0042.584] WriteFile (in: hFile=0x274, lpBuffer=0x27cc284*, nNumberOfBytesToWrite=0x740, lpNumberOfBytesWritten=0x31e524, lpOverlapped=0x0 | out: lpBuffer=0x27cc284*, lpNumberOfBytesWritten=0x31e524*=0x740, lpOverlapped=0x0) returned 1 [0042.585] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\Sts.css", nBufferLength=0x105, lpBuffer=0x31e0d4, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\Sts.css", lpFilePart=0x0) returned 0x66 [0042.585] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\Sts.css", nBufferLength=0x105, lpBuffer=0x31e0d4, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\Sts.css", lpFilePart=0x0) returned 0x66 [0042.585] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e534) returned 1 [0042.585] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\Sts.css" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms3\\formsstyles\\sts.css"), fInfoLevelId=0x0, lpFileInformation=0x31e5b0 | out: lpFileInformation=0x31e5b0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x94570a00, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0x6d3f0bd0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xfcd50d60, ftLastWriteTime.dwHighDateTime=0x1d6eb7e, nFileSizeHigh=0x0, nFileSizeLow=0x740)) returned 1 [0042.585] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e530) returned 1 [0042.585] MoveFileW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\Sts.css" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms3\\formsstyles\\sts.css"), lpNewFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\Sts.css" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms3\\formsstyles\\sts.css")) returned 1 [0042.587] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\Sts2.css", nBufferLength=0x105, lpBuffer=0x31dfb4, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\Sts2.css", lpFilePart=0x0) returned 0x67 [0042.587] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e4a8) returned 1 [0042.587] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\Sts2.css" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms3\\formsstyles\\sts2.css"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x274 [0042.587] GetFileType (hFile=0x274) returned 0x1 [0042.587] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e4a4) returned 1 [0042.587] GetFileType (hFile=0x274) returned 0x1 [0042.587] GetFileSize (in: hFile=0x274, lpFileSizeHigh=0x31e5b0 | out: lpFileSizeHigh=0x31e5b0*=0x0) returned 0xce8 [0042.587] ReadFile (in: hFile=0x274, lpBuffer=0x27ce2ac, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x31e55c, lpOverlapped=0x0 | out: lpBuffer=0x27ce2ac*, lpNumberOfBytesRead=0x31e55c*=0xce8, lpOverlapped=0x0) returned 1 [0042.602] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\Sts2.css", nBufferLength=0x105, lpBuffer=0x31dfa0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\Sts2.css", lpFilePart=0x0) returned 0x67 [0042.602] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e494) returned 1 [0042.602] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\Sts2.css" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms3\\formsstyles\\sts2.css"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x274 [0042.603] GetFileType (hFile=0x274) returned 0x1 [0042.603] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e490) returned 1 [0042.603] GetFileType (hFile=0x274) returned 0x1 [0042.603] WriteFile (in: hFile=0x274, lpBuffer=0x28202ac*, nNumberOfBytesToWrite=0xcf0, lpNumberOfBytesWritten=0x31e524, lpOverlapped=0x0 | out: lpBuffer=0x28202ac*, lpNumberOfBytesWritten=0x31e524*=0xcf0, lpOverlapped=0x0) returned 1 [0042.604] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\Sts2.css", nBufferLength=0x105, lpBuffer=0x31e0d4, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\Sts2.css", lpFilePart=0x0) returned 0x67 [0042.604] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\Sts2.css", nBufferLength=0x105, lpBuffer=0x31e0d4, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\Sts2.css", lpFilePart=0x0) returned 0x67 [0042.604] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e534) returned 1 [0042.604] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\Sts2.css" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms3\\formsstyles\\sts2.css"), fInfoLevelId=0x0, lpFileInformation=0x31e5b0 | out: lpFileInformation=0x31e5b0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x94570a00, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0x6d3f0bd0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xfcd9d020, ftLastWriteTime.dwHighDateTime=0x1d6eb7e, nFileSizeHigh=0x0, nFileSizeLow=0xcf0)) returned 1 [0042.604] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e530) returned 1 [0042.604] MoveFileW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\Sts2.css" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms3\\formsstyles\\sts2.css"), lpNewFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\Sts2.css" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms3\\formsstyles\\sts2.css")) returned 1 [0042.605] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\Swirl.css", nBufferLength=0x105, lpBuffer=0x31dfb4, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\Swirl.css", lpFilePart=0x0) returned 0x68 [0042.605] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e4a8) returned 1 [0042.605] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\Swirl.css" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms3\\formsstyles\\swirl.css"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x274 [0042.606] GetFileType (hFile=0x274) returned 0x1 [0042.606] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e4a4) returned 1 [0042.606] GetFileType (hFile=0x274) returned 0x1 [0042.606] GetFileSize (in: hFile=0x274, lpFileSizeHigh=0x31e5b0 | out: lpFileSizeHigh=0x31e5b0*=0x0) returned 0xc23 [0042.606] ReadFile (in: hFile=0x274, lpBuffer=0x2822214, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x31e55c, lpOverlapped=0x0 | out: lpBuffer=0x2822214*, lpNumberOfBytesRead=0x31e55c*=0xc23, lpOverlapped=0x0) returned 1 [0042.663] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\Swirl.css", nBufferLength=0x105, lpBuffer=0x31dfa0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\Swirl.css", lpFilePart=0x0) returned 0x68 [0042.663] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e494) returned 1 [0042.663] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\Swirl.css" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms3\\formsstyles\\swirl.css"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x274 [0042.664] GetFileType (hFile=0x274) returned 0x1 [0042.664] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e490) returned 1 [0042.664] GetFileType (hFile=0x274) returned 0x1 [0042.665] WriteFile (in: hFile=0x274, lpBuffer=0x2673d28*, nNumberOfBytesToWrite=0xc30, lpNumberOfBytesWritten=0x31e524, lpOverlapped=0x0 | out: lpBuffer=0x2673d28*, lpNumberOfBytesWritten=0x31e524*=0xc30, lpOverlapped=0x0) returned 1 [0042.669] CloseHandle (hObject=0x274) returned 1 [0042.670] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\Swirl.css", nBufferLength=0x105, lpBuffer=0x31e0d4, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\Swirl.css", lpFilePart=0x0) returned 0x68 [0042.670] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\Swirl.css", nBufferLength=0x105, lpBuffer=0x31e0d4, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\Swirl.css", lpFilePart=0x0) returned 0x68 [0042.670] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e534) returned 1 [0042.670] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\Swirl.css" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms3\\formsstyles\\swirl.css"), fInfoLevelId=0x0, lpFileInformation=0x31e5b0 | out: lpFileInformation=0x31e5b0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x95883700, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0x5ac7a110, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xfce355a0, ftLastWriteTime.dwHighDateTime=0x1d6eb7e, nFileSizeHigh=0x0, nFileSizeLow=0xc30)) returned 1 [0042.670] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e530) returned 1 [0042.670] MoveFileW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\Swirl.css" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms3\\formsstyles\\swirl.css"), lpNewFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\Swirl.css" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms3\\formsstyles\\swirl.css")) returned 1 [0042.671] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\Teal.css", nBufferLength=0x105, lpBuffer=0x31dfb4, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\Teal.css", lpFilePart=0x0) returned 0x67 [0042.671] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e4a8) returned 1 [0042.671] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\Teal.css" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms3\\formsstyles\\teal.css"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x274 [0042.672] GetFileType (hFile=0x274) returned 0x1 [0042.672] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e4a4) returned 1 [0042.672] GetFileType (hFile=0x274) returned 0x1 [0042.672] GetFileSize (in: hFile=0x274, lpFileSizeHigh=0x31e5b0 | out: lpFileSizeHigh=0x31e5b0*=0x0) returned 0x37a [0042.672] ReadFile (in: hFile=0x274, lpBuffer=0x26753ec, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x31e55c, lpOverlapped=0x0 | out: lpBuffer=0x26753ec*, lpNumberOfBytesRead=0x31e55c*=0x37a, lpOverlapped=0x0) returned 1 [0042.674] CloseHandle (hObject=0x274) returned 1 [0042.687] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\Teal.css", nBufferLength=0x105, lpBuffer=0x31dfa0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\Teal.css", lpFilePart=0x0) returned 0x67 [0042.687] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e494) returned 1 [0042.687] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\Teal.css" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms3\\formsstyles\\teal.css"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x274 [0042.688] GetFileType (hFile=0x274) returned 0x1 [0042.688] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e490) returned 1 [0042.688] GetFileType (hFile=0x274) returned 0x1 [0042.688] WriteFile (in: hFile=0x274, lpBuffer=0x26c4618*, nNumberOfBytesToWrite=0x380, lpNumberOfBytesWritten=0x31e524, lpOverlapped=0x0 | out: lpBuffer=0x26c4618*, lpNumberOfBytesWritten=0x31e524*=0x380, lpOverlapped=0x0) returned 1 [0042.689] CloseHandle (hObject=0x274) returned 1 [0042.690] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\Teal.css", nBufferLength=0x105, lpBuffer=0x31e0d4, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\Teal.css", lpFilePart=0x0) returned 0x67 [0042.690] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\Teal.css", nBufferLength=0x105, lpBuffer=0x31e0d4, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\Teal.css", lpFilePart=0x0) returned 0x67 [0042.690] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e534) returned 1 [0042.691] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\Teal.css" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms3\\formsstyles\\teal.css"), fInfoLevelId=0x0, lpFileInformation=0x31e5b0 | out: lpFileInformation=0x31e5b0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x95883700, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0x5acc63d0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xfce5b700, ftLastWriteTime.dwHighDateTime=0x1d6eb7e, nFileSizeHigh=0x0, nFileSizeLow=0x380)) returned 1 [0042.691] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e530) returned 1 [0042.691] MoveFileW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\Teal.css" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms3\\formsstyles\\teal.css"), lpNewFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\Teal.css" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms3\\formsstyles\\teal.css")) returned 1 [0042.691] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\TexturedBlue.css", nBufferLength=0x105, lpBuffer=0x31dfb4, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\TexturedBlue.css", lpFilePart=0x0) returned 0x6f [0042.691] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e4a8) returned 1 [0042.691] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\TexturedBlue.css" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms3\\formsstyles\\texturedblue.css"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x274 [0042.691] GetFileType (hFile=0x274) returned 0x1 [0042.691] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e4a4) returned 1 [0042.692] GetFileType (hFile=0x274) returned 0x1 [0042.692] GetFileSize (in: hFile=0x274, lpFileSizeHigh=0x31e5b0 | out: lpFileSizeHigh=0x31e5b0*=0x0) returned 0x37b [0042.692] ReadFile (in: hFile=0x274, lpBuffer=0x26c5cf4, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x31e55c, lpOverlapped=0x0 | out: lpBuffer=0x26c5cf4*, lpNumberOfBytesRead=0x31e55c*=0x37b, lpOverlapped=0x0) returned 1 [0042.693] CloseHandle (hObject=0x274) returned 1 [0042.707] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\TexturedBlue.css", nBufferLength=0x105, lpBuffer=0x31dfa0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\TexturedBlue.css", lpFilePart=0x0) returned 0x6f [0042.707] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e494) returned 1 [0042.707] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\TexturedBlue.css" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms3\\formsstyles\\texturedblue.css"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x274 [0042.708] GetFileType (hFile=0x274) returned 0x1 [0042.708] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e490) returned 1 [0042.708] GetFileType (hFile=0x274) returned 0x1 [0042.708] WriteFile (in: hFile=0x274, lpBuffer=0x2714de4*, nNumberOfBytesToWrite=0x380, lpNumberOfBytesWritten=0x31e524, lpOverlapped=0x0 | out: lpBuffer=0x2714de4*, lpNumberOfBytesWritten=0x31e524*=0x380, lpOverlapped=0x0) returned 1 [0042.709] CloseHandle (hObject=0x274) returned 1 [0042.709] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\TexturedBlue.css", nBufferLength=0x105, lpBuffer=0x31e0d4, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\TexturedBlue.css", lpFilePart=0x0) returned 0x6f [0042.710] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\TexturedBlue.css", nBufferLength=0x105, lpBuffer=0x31e0d4, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\TexturedBlue.css", lpFilePart=0x0) returned 0x6f [0042.710] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e534) returned 1 [0042.710] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\TexturedBlue.css" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms3\\formsstyles\\texturedblue.css"), fInfoLevelId=0x0, lpFileInformation=0x31e5b0 | out: lpFileInformation=0x31e5b0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x95883700, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0x6d462ff0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xfce81860, ftLastWriteTime.dwHighDateTime=0x1d6eb7e, nFileSizeHigh=0x0, nFileSizeLow=0x380)) returned 1 [0042.710] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e530) returned 1 [0042.710] MoveFileW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\TexturedBlue.css" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms3\\formsstyles\\texturedblue.css"), lpNewFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\TexturedBlue.css" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms3\\formsstyles\\texturedblue.css")) returned 1 [0042.710] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\VelvetRose.css", nBufferLength=0x105, lpBuffer=0x31dfb4, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\VelvetRose.css", lpFilePart=0x0) returned 0x6d [0042.710] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e4a8) returned 1 [0042.710] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\VelvetRose.css" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms3\\formsstyles\\velvetrose.css"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x274 [0042.711] GetFileType (hFile=0x274) returned 0x1 [0042.711] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e4a4) returned 1 [0042.711] GetFileType (hFile=0x274) returned 0x1 [0042.711] GetFileSize (in: hFile=0x274, lpFileSizeHigh=0x31e5b0 | out: lpFileSizeHigh=0x31e5b0*=0x0) returned 0x375 [0042.711] ReadFile (in: hFile=0x274, lpBuffer=0x27164d4, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x31e55c, lpOverlapped=0x0 | out: lpBuffer=0x27164d4*, lpNumberOfBytesRead=0x31e55c*=0x375, lpOverlapped=0x0) returned 1 [0042.712] CloseHandle (hObject=0x274) returned 1 [0042.725] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\VelvetRose.css", nBufferLength=0x105, lpBuffer=0x31dfa0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\VelvetRose.css", lpFilePart=0x0) returned 0x6d [0042.726] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e494) returned 1 [0042.726] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\VelvetRose.css" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms3\\formsstyles\\velvetrose.css"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x274 [0042.726] GetFileType (hFile=0x274) returned 0x1 [0042.726] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e490) returned 1 [0042.726] GetFileType (hFile=0x274) returned 0x1 [0042.727] WriteFile (in: hFile=0x274, lpBuffer=0x27655c0*, nNumberOfBytesToWrite=0x380, lpNumberOfBytesWritten=0x31e524, lpOverlapped=0x0 | out: lpBuffer=0x27655c0*, lpNumberOfBytesWritten=0x31e524*=0x380, lpOverlapped=0x0) returned 1 [0042.727] CloseHandle (hObject=0x274) returned 1 [0042.728] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\VelvetRose.css", nBufferLength=0x105, lpBuffer=0x31e0d4, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\VelvetRose.css", lpFilePart=0x0) returned 0x6d [0042.728] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\VelvetRose.css", nBufferLength=0x105, lpBuffer=0x31e0d4, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\VelvetRose.css", lpFilePart=0x0) returned 0x6d [0042.728] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e534) returned 1 [0042.728] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\VelvetRose.css" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms3\\formsstyles\\velvetrose.css"), fInfoLevelId=0x0, lpFileInformation=0x31e5b0 | out: lpFileInformation=0x31e5b0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x95883700, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0x5e490770, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xfcea79c0, ftLastWriteTime.dwHighDateTime=0x1d6eb7e, nFileSizeHigh=0x0, nFileSizeLow=0x380)) returned 1 [0042.729] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e530) returned 1 [0042.729] MoveFileW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\VelvetRose.css" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms3\\formsstyles\\velvetrose.css"), lpNewFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\VelvetRose.css" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms3\\formsstyles\\velvetrose.css")) returned 1 [0042.729] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e564) returned 1 [0042.729] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\Americana", nBufferLength=0x105, lpBuffer=0x31e06c, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\Americana", lpFilePart=0x0) returned 0x68 [0042.729] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\Americana\\", nBufferLength=0x105, lpBuffer=0x31e040, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\Americana\\", lpFilePart=0x0) returned 0x69 [0042.729] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\Americana\\*", lpFindFileData=0x31e28c | out: lpFindFileData=0x31e28c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x528d0030, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x618a28b0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x618a28b0, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x381f40 [0042.730] FindNextFileW (in: hFindFile=0x381f40, lpFindFileData=0x31e29c | out: lpFindFileData=0x31e29c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x528d0030, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x618a28b0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x618a28b0, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0042.730] FindNextFileW (in: hFindFile=0x381f40, lpFindFileData=0x31e29c | out: lpFindFileData=0x31e29c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8f925600, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0x528d0030, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x8f925600, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0x155, dwReserved0=0x0, dwReserved1=0x0, cFileName="TAB_OFF.GIF", cAlternateFileName="")) returned 1 [0042.730] FindNextFileW (in: hFindFile=0x381f40, lpFindFileData=0x31e29c | out: lpFindFileData=0x31e29c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8f925600, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0x618a28b0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x8f925600, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0xde, dwReserved0=0x0, dwReserved1=0x0, cFileName="TAB_ON.GIF", cAlternateFileName="")) returned 1 [0042.731] FindNextFileW (in: hFindFile=0x381f40, lpFindFileData=0x31e29c | out: lpFindFileData=0x31e29c*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0042.731] FindClose (in: hFindFile=0x381f40 | out: hFindFile=0x381f40) returned 1 [0042.731] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e524) returned 1 [0042.731] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e530) returned 1 [0042.731] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e564) returned 1 [0042.731] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\Americana", nBufferLength=0x105, lpBuffer=0x31e06c, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\Americana", lpFilePart=0x0) returned 0x68 [0042.731] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\Americana\\", nBufferLength=0x105, lpBuffer=0x31e040, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\Americana\\", lpFilePart=0x0) returned 0x69 [0042.731] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\Americana\\*", lpFindFileData=0x31e28c | out: lpFindFileData=0x31e28c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x528d0030, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x618a28b0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x618a28b0, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x381f40 [0042.731] FindNextFileW (in: hFindFile=0x381f40, lpFindFileData=0x31e29c | out: lpFindFileData=0x31e29c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x528d0030, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x618a28b0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x618a28b0, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0042.731] FindNextFileW (in: hFindFile=0x381f40, lpFindFileData=0x31e29c | out: lpFindFileData=0x31e29c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8f925600, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0x528d0030, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x8f925600, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0x155, dwReserved0=0x0, dwReserved1=0x0, cFileName="TAB_OFF.GIF", cAlternateFileName="")) returned 1 [0042.732] FindNextFileW (in: hFindFile=0x381f40, lpFindFileData=0x31e29c | out: lpFindFileData=0x31e29c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8f925600, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0x618a28b0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x8f925600, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0xde, dwReserved0=0x0, dwReserved1=0x0, cFileName="TAB_ON.GIF", cAlternateFileName="")) returned 1 [0042.732] FindNextFileW (in: hFindFile=0x381f40, lpFindFileData=0x31e29c | out: lpFindFileData=0x31e29c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8f925600, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0x618a28b0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x8f925600, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0xde, dwReserved0=0x0, dwReserved1=0x0, cFileName="TAB_ON.GIF", cAlternateFileName="")) returned 0 [0042.732] FindClose (in: hFindFile=0x381f40 | out: hFindFile=0x381f40) returned 1 [0042.732] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e524) returned 1 [0042.732] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e530) returned 1 [0042.732] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e564) returned 1 [0042.732] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\BabyBlue", nBufferLength=0x105, lpBuffer=0x31e06c, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\BabyBlue", lpFilePart=0x0) returned 0x67 [0042.732] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\BabyBlue\\", nBufferLength=0x105, lpBuffer=0x31e040, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\BabyBlue\\", lpFilePart=0x0) returned 0x68 [0042.732] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\BabyBlue\\*", lpFindFileData=0x31e28c | out: lpFindFileData=0x31e28c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x528d0030, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x618a28b0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x618a28b0, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x381f40 [0042.732] FindNextFileW (in: hFindFile=0x381f40, lpFindFileData=0x31e29c | out: lpFindFileData=0x31e29c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x528d0030, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x618a28b0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x618a28b0, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0042.733] FindNextFileW (in: hFindFile=0x381f40, lpFindFileData=0x31e29c | out: lpFindFileData=0x31e29c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8f925600, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0x528d0030, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x8f925600, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0xb9, dwReserved0=0x0, dwReserved1=0x0, cFileName="BUTTON.GIF", cAlternateFileName="")) returned 1 [0042.733] FindNextFileW (in: hFindFile=0x381f40, lpFindFileData=0x31e29c | out: lpFindFileData=0x31e29c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8f925600, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0x618a28b0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x8f925600, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0xff, dwReserved0=0x0, dwReserved1=0x0, cFileName="HEADER.GIF", cAlternateFileName="")) returned 1 [0042.733] FindNextFileW (in: hFindFile=0x381f40, lpFindFileData=0x31e29c | out: lpFindFileData=0x31e29c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8f925600, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0x618a28b0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x8f925600, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0x155, dwReserved0=0x0, dwReserved1=0x0, cFileName="TAB_OFF.GIF", cAlternateFileName="")) returned 1 [0042.733] FindNextFileW (in: hFindFile=0x381f40, lpFindFileData=0x31e29c | out: lpFindFileData=0x31e29c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8f925600, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0x528f6190, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x8f925600, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0xde, dwReserved0=0x0, dwReserved1=0x0, cFileName="TAB_ON.GIF", cAlternateFileName="")) returned 1 [0042.733] FindNextFileW (in: hFindFile=0x381f40, lpFindFileData=0x31e29c | out: lpFindFileData=0x31e29c*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0042.733] FindClose (in: hFindFile=0x381f40 | out: hFindFile=0x381f40) returned 1 [0042.733] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e524) returned 1 [0042.733] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e530) returned 1 [0042.733] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e564) returned 1 [0042.733] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\BabyBlue", nBufferLength=0x105, lpBuffer=0x31e06c, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\BabyBlue", lpFilePart=0x0) returned 0x67 [0042.733] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\BabyBlue\\", nBufferLength=0x105, lpBuffer=0x31e040, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\BabyBlue\\", lpFilePart=0x0) returned 0x68 [0042.733] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\BabyBlue\\*", lpFindFileData=0x31e28c | out: lpFindFileData=0x31e28c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x528d0030, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x618a28b0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x618a28b0, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x381f40 [0042.734] FindNextFileW (in: hFindFile=0x381f40, lpFindFileData=0x31e29c | out: lpFindFileData=0x31e29c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x528d0030, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x618a28b0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x618a28b0, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0042.734] FindNextFileW (in: hFindFile=0x381f40, lpFindFileData=0x31e29c | out: lpFindFileData=0x31e29c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8f925600, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0x528d0030, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x8f925600, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0xb9, dwReserved0=0x0, dwReserved1=0x0, cFileName="BUTTON.GIF", cAlternateFileName="")) returned 1 [0042.734] FindNextFileW (in: hFindFile=0x381f40, lpFindFileData=0x31e29c | out: lpFindFileData=0x31e29c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8f925600, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0x618a28b0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x8f925600, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0xff, dwReserved0=0x0, dwReserved1=0x0, cFileName="HEADER.GIF", cAlternateFileName="")) returned 1 [0042.734] FindNextFileW (in: hFindFile=0x381f40, lpFindFileData=0x31e29c | out: lpFindFileData=0x31e29c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8f925600, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0x618a28b0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x8f925600, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0x155, dwReserved0=0x0, dwReserved1=0x0, cFileName="TAB_OFF.GIF", cAlternateFileName="")) returned 1 [0042.734] FindNextFileW (in: hFindFile=0x381f40, lpFindFileData=0x31e29c | out: lpFindFileData=0x31e29c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8f925600, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0x528f6190, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x8f925600, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0xde, dwReserved0=0x0, dwReserved1=0x0, cFileName="TAB_ON.GIF", cAlternateFileName="")) returned 1 [0042.734] FindNextFileW (in: hFindFile=0x381f40, lpFindFileData=0x31e29c | out: lpFindFileData=0x31e29c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8f925600, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0x528f6190, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x8f925600, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0xde, dwReserved0=0x0, dwReserved1=0x0, cFileName="TAB_ON.GIF", cAlternateFileName="")) returned 0 [0042.734] FindClose (in: hFindFile=0x381f40 | out: hFindFile=0x381f40) returned 1 [0042.735] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e524) returned 1 [0042.735] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e530) returned 1 [0042.735] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e564) returned 1 [0042.735] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\Biscay", nBufferLength=0x105, lpBuffer=0x31e06c, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\Biscay", lpFilePart=0x0) returned 0x65 [0042.735] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\Biscay\\", nBufferLength=0x105, lpBuffer=0x31e040, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\Biscay\\", lpFilePart=0x0) returned 0x66 [0042.735] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\Biscay\\*", lpFindFileData=0x31e28c | out: lpFindFileData=0x31e28c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x528f6190, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x618a28b0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x618a28b0, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x381f40 [0042.736] FindNextFileW (in: hFindFile=0x381f40, lpFindFileData=0x31e29c | out: lpFindFileData=0x31e29c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x528f6190, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x618a28b0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x618a28b0, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0042.736] FindNextFileW (in: hFindFile=0x381f40, lpFindFileData=0x31e29c | out: lpFindFileData=0x31e29c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x90c38300, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0x528f6190, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x90c38300, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0x155, dwReserved0=0x0, dwReserved1=0x0, cFileName="TAB_OFF.GIF", cAlternateFileName="")) returned 1 [0042.736] FindNextFileW (in: hFindFile=0x381f40, lpFindFileData=0x31e29c | out: lpFindFileData=0x31e29c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x90c38300, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0x618a28b0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x90c38300, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0xde, dwReserved0=0x0, dwReserved1=0x0, cFileName="TAB_ON.GIF", cAlternateFileName="")) returned 1 [0042.736] FindNextFileW (in: hFindFile=0x381f40, lpFindFileData=0x31e29c | out: lpFindFileData=0x31e29c*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0042.736] FindClose (in: hFindFile=0x381f40 | out: hFindFile=0x381f40) returned 1 [0042.736] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e524) returned 1 [0042.736] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e530) returned 1 [0042.736] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e564) returned 1 [0042.736] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\Biscay", nBufferLength=0x105, lpBuffer=0x31e06c, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\Biscay", lpFilePart=0x0) returned 0x65 [0042.736] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\Biscay\\", nBufferLength=0x105, lpBuffer=0x31e040, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\Biscay\\", lpFilePart=0x0) returned 0x66 [0042.737] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\Biscay\\*", lpFindFileData=0x31e28c | out: lpFindFileData=0x31e28c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x528f6190, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x618a28b0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x618a28b0, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x381f40 [0042.737] FindNextFileW (in: hFindFile=0x381f40, lpFindFileData=0x31e29c | out: lpFindFileData=0x31e29c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x528f6190, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x618a28b0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x618a28b0, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0042.737] FindNextFileW (in: hFindFile=0x381f40, lpFindFileData=0x31e29c | out: lpFindFileData=0x31e29c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x90c38300, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0x528f6190, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x90c38300, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0x155, dwReserved0=0x0, dwReserved1=0x0, cFileName="TAB_OFF.GIF", cAlternateFileName="")) returned 1 [0042.737] FindNextFileW (in: hFindFile=0x381f40, lpFindFileData=0x31e29c | out: lpFindFileData=0x31e29c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x90c38300, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0x618a28b0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x90c38300, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0xde, dwReserved0=0x0, dwReserved1=0x0, cFileName="TAB_ON.GIF", cAlternateFileName="")) returned 1 [0042.737] FindNextFileW (in: hFindFile=0x381f40, lpFindFileData=0x31e29c | out: lpFindFileData=0x31e29c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x90c38300, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0x618a28b0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x90c38300, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0xde, dwReserved0=0x0, dwReserved1=0x0, cFileName="TAB_ON.GIF", cAlternateFileName="")) returned 0 [0042.737] FindClose (in: hFindFile=0x381f40 | out: hFindFile=0x381f40) returned 1 [0042.737] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e524) returned 1 [0042.737] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e530) returned 1 [0042.737] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e564) returned 1 [0042.738] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\BrightOrange", nBufferLength=0x105, lpBuffer=0x31e06c, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\BrightOrange", lpFilePart=0x0) returned 0x6b [0042.738] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\BrightOrange\\", nBufferLength=0x105, lpBuffer=0x31e040, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\BrightOrange\\", lpFilePart=0x0) returned 0x6c [0042.738] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\BrightOrange\\*", lpFindFileData=0x31e28c | out: lpFindFileData=0x31e28c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x528f6190, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x618a28b0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x618a28b0, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x381f40 [0042.738] FindNextFileW (in: hFindFile=0x381f40, lpFindFileData=0x31e29c | out: lpFindFileData=0x31e29c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x528f6190, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x618a28b0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x618a28b0, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0042.738] FindNextFileW (in: hFindFile=0x381f40, lpFindFileData=0x31e29c | out: lpFindFileData=0x31e29c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x90c38300, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0x528f6190, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x90c38300, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0x143, dwReserved0=0x0, dwReserved1=0x0, cFileName="background.gif", cAlternateFileName="BACKGR~1.GIF")) returned 1 [0042.738] FindNextFileW (in: hFindFile=0x381f40, lpFindFileData=0x31e29c | out: lpFindFileData=0x31e29c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x90c38300, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0x618a28b0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x90c38300, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0xb9, dwReserved0=0x0, dwReserved1=0x0, cFileName="button.gif", cAlternateFileName="")) returned 1 [0042.738] FindNextFileW (in: hFindFile=0x381f40, lpFindFileData=0x31e29c | out: lpFindFileData=0x31e29c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x90c38300, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0x528f6190, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x90c38300, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0x155, dwReserved0=0x0, dwReserved1=0x0, cFileName="tab_off.gif", cAlternateFileName="")) returned 1 [0042.738] FindNextFileW (in: hFindFile=0x381f40, lpFindFileData=0x31e29c | out: lpFindFileData=0x31e29c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x90c38300, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0x618a28b0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x90c38300, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0xde, dwReserved0=0x0, dwReserved1=0x0, cFileName="tab_on.gif", cAlternateFileName="")) returned 1 [0042.739] FindNextFileW (in: hFindFile=0x381f40, lpFindFileData=0x31e29c | out: lpFindFileData=0x31e29c*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0042.739] FindClose (in: hFindFile=0x381f40 | out: hFindFile=0x381f40) returned 1 [0042.739] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e524) returned 1 [0042.739] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e530) returned 1 [0042.739] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e564) returned 1 [0042.739] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\BrightOrange", nBufferLength=0x105, lpBuffer=0x31e06c, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\BrightOrange", lpFilePart=0x0) returned 0x6b [0042.739] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\BrightOrange\\", nBufferLength=0x105, lpBuffer=0x31e040, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\BrightOrange\\", lpFilePart=0x0) returned 0x6c [0042.739] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\BrightOrange\\*", lpFindFileData=0x31e28c | out: lpFindFileData=0x31e28c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x528f6190, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x618a28b0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x618a28b0, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x381f40 [0042.739] FindNextFileW (in: hFindFile=0x381f40, lpFindFileData=0x31e29c | out: lpFindFileData=0x31e29c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x528f6190, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x618a28b0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x618a28b0, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0042.739] FindNextFileW (in: hFindFile=0x381f40, lpFindFileData=0x31e29c | out: lpFindFileData=0x31e29c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x90c38300, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0x528f6190, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x90c38300, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0x143, dwReserved0=0x0, dwReserved1=0x0, cFileName="background.gif", cAlternateFileName="BACKGR~1.GIF")) returned 1 [0042.739] FindNextFileW (in: hFindFile=0x381f40, lpFindFileData=0x31e29c | out: lpFindFileData=0x31e29c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x90c38300, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0x618a28b0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x90c38300, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0xb9, dwReserved0=0x0, dwReserved1=0x0, cFileName="button.gif", cAlternateFileName="")) returned 1 [0042.740] FindNextFileW (in: hFindFile=0x381f40, lpFindFileData=0x31e29c | out: lpFindFileData=0x31e29c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x90c38300, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0x528f6190, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x90c38300, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0x155, dwReserved0=0x0, dwReserved1=0x0, cFileName="tab_off.gif", cAlternateFileName="")) returned 1 [0042.740] FindNextFileW (in: hFindFile=0x381f40, lpFindFileData=0x31e29c | out: lpFindFileData=0x31e29c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x90c38300, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0x618a28b0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x90c38300, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0xde, dwReserved0=0x0, dwReserved1=0x0, cFileName="tab_on.gif", cAlternateFileName="")) returned 1 [0042.740] FindNextFileW (in: hFindFile=0x381f40, lpFindFileData=0x31e29c | out: lpFindFileData=0x31e29c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x90c38300, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0x618a28b0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x90c38300, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0xde, dwReserved0=0x0, dwReserved1=0x0, cFileName="tab_on.gif", cAlternateFileName="")) returned 0 [0042.740] FindClose (in: hFindFile=0x381f40 | out: hFindFile=0x381f40) returned 1 [0042.740] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e524) returned 1 [0042.740] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e530) returned 1 [0042.740] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e564) returned 1 [0042.740] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\BrightYellow", nBufferLength=0x105, lpBuffer=0x31e06c, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\BrightYellow", lpFilePart=0x0) returned 0x6b [0042.740] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\BrightYellow\\", nBufferLength=0x105, lpBuffer=0x31e040, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\BrightYellow\\", lpFilePart=0x0) returned 0x6c [0042.740] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\BrightYellow\\*", lpFindFileData=0x31e28c | out: lpFindFileData=0x31e28c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x528f6190, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x618a28b0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x618a28b0, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x381f40 [0042.741] FindNextFileW (in: hFindFile=0x381f40, lpFindFileData=0x31e29c | out: lpFindFileData=0x31e29c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x528f6190, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x618a28b0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x618a28b0, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0042.741] FindNextFileW (in: hFindFile=0x381f40, lpFindFileData=0x31e29c | out: lpFindFileData=0x31e29c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x90c38300, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0x618a28b0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x90c38300, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0x16f, dwReserved0=0x0, dwReserved1=0x0, cFileName="HEADER.GIF", cAlternateFileName="")) returned 1 [0042.742] FindNextFileW (in: hFindFile=0x381f40, lpFindFileData=0x31e29c | out: lpFindFileData=0x31e29c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x90c38300, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0x528f6190, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x90c38300, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0x155, dwReserved0=0x0, dwReserved1=0x0, cFileName="TAB_OFF.GIF", cAlternateFileName="")) returned 1 [0042.742] FindNextFileW (in: hFindFile=0x381f40, lpFindFileData=0x31e29c | out: lpFindFileData=0x31e29c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x90c38300, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0x528f6190, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x90c38300, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0xde, dwReserved0=0x0, dwReserved1=0x0, cFileName="TAB_ON.GIF", cAlternateFileName="")) returned 1 [0042.742] FindNextFileW (in: hFindFile=0x381f40, lpFindFileData=0x31e29c | out: lpFindFileData=0x31e29c*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0042.742] FindClose (in: hFindFile=0x381f40 | out: hFindFile=0x381f40) returned 1 [0042.742] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e524) returned 1 [0042.742] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e530) returned 1 [0042.742] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e564) returned 1 [0042.742] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\BrightYellow", nBufferLength=0x105, lpBuffer=0x31e06c, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\BrightYellow", lpFilePart=0x0) returned 0x6b [0042.742] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\BrightYellow\\", nBufferLength=0x105, lpBuffer=0x31e040, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\BrightYellow\\", lpFilePart=0x0) returned 0x6c [0042.742] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\BrightYellow\\*", lpFindFileData=0x31e28c | out: lpFindFileData=0x31e28c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x528f6190, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x618a28b0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x618a28b0, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x381f40 [0042.742] FindNextFileW (in: hFindFile=0x381f40, lpFindFileData=0x31e29c | out: lpFindFileData=0x31e29c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x528f6190, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x618a28b0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x618a28b0, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0042.743] FindNextFileW (in: hFindFile=0x381f40, lpFindFileData=0x31e29c | out: lpFindFileData=0x31e29c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x90c38300, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0x618a28b0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x90c38300, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0x16f, dwReserved0=0x0, dwReserved1=0x0, cFileName="HEADER.GIF", cAlternateFileName="")) returned 1 [0042.743] FindNextFileW (in: hFindFile=0x381f40, lpFindFileData=0x31e29c | out: lpFindFileData=0x31e29c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x90c38300, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0x528f6190, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x90c38300, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0x155, dwReserved0=0x0, dwReserved1=0x0, cFileName="TAB_OFF.GIF", cAlternateFileName="")) returned 1 [0042.743] FindNextFileW (in: hFindFile=0x381f40, lpFindFileData=0x31e29c | out: lpFindFileData=0x31e29c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x90c38300, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0x528f6190, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x90c38300, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0xde, dwReserved0=0x0, dwReserved1=0x0, cFileName="TAB_ON.GIF", cAlternateFileName="")) returned 1 [0042.743] FindNextFileW (in: hFindFile=0x381f40, lpFindFileData=0x31e29c | out: lpFindFileData=0x31e29c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x90c38300, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0x528f6190, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x90c38300, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0xde, dwReserved0=0x0, dwReserved1=0x0, cFileName="TAB_ON.GIF", cAlternateFileName="")) returned 0 [0042.743] FindClose (in: hFindFile=0x381f40 | out: hFindFile=0x381f40) returned 1 [0042.743] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e524) returned 1 [0042.743] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e530) returned 1 [0042.743] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e564) returned 1 [0042.743] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\Desert", nBufferLength=0x105, lpBuffer=0x31e06c, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\Desert", lpFilePart=0x0) returned 0x65 [0042.743] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\Desert\\", nBufferLength=0x105, lpBuffer=0x31e040, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\Desert\\", lpFilePart=0x0) returned 0x66 [0042.743] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\Desert\\*", lpFindFileData=0x31e28c | out: lpFindFileData=0x31e28c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x528f6190, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x618a28b0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x618a28b0, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x381f40 [0042.744] FindNextFileW (in: hFindFile=0x381f40, lpFindFileData=0x31e29c | out: lpFindFileData=0x31e29c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x528f6190, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x618a28b0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x618a28b0, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0042.745] FindNextFileW (in: hFindFile=0x381f40, lpFindFileData=0x31e29c | out: lpFindFileData=0x31e29c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x91f4b000, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0x618a28b0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x91f4b000, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0x94, dwReserved0=0x0, dwReserved1=0x0, cFileName="HEADER.GIF", cAlternateFileName="")) returned 1 [0042.745] FindNextFileW (in: hFindFile=0x381f40, lpFindFileData=0x31e29c | out: lpFindFileData=0x31e29c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x91f4b000, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0x528f6190, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x91f4b000, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0x1f0, dwReserved0=0x0, dwReserved1=0x0, cFileName="TAB_OFF.GIF", cAlternateFileName="")) returned 1 [0042.745] FindNextFileW (in: hFindFile=0x381f40, lpFindFileData=0x31e29c | out: lpFindFileData=0x31e29c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x91f4b000, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0x618a28b0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x91f4b000, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0x401, dwReserved0=0x0, dwReserved1=0x0, cFileName="TAB_ON.GIF", cAlternateFileName="")) returned 1 [0042.745] FindNextFileW (in: hFindFile=0x381f40, lpFindFileData=0x31e29c | out: lpFindFileData=0x31e29c*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0042.745] FindClose (in: hFindFile=0x381f40 | out: hFindFile=0x381f40) returned 1 [0042.745] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e524) returned 1 [0042.745] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e530) returned 1 [0042.745] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e564) returned 1 [0042.745] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\Desert", nBufferLength=0x105, lpBuffer=0x31e06c, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\Desert", lpFilePart=0x0) returned 0x65 [0042.745] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\Desert\\", nBufferLength=0x105, lpBuffer=0x31e040, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\Desert\\", lpFilePart=0x0) returned 0x66 [0042.745] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\Desert\\*", lpFindFileData=0x31e28c | out: lpFindFileData=0x31e28c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x528f6190, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x618a28b0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x618a28b0, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x381f40 [0042.746] FindNextFileW (in: hFindFile=0x381f40, lpFindFileData=0x31e29c | out: lpFindFileData=0x31e29c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x528f6190, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x618a28b0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x618a28b0, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0042.746] FindNextFileW (in: hFindFile=0x381f40, lpFindFileData=0x31e29c | out: lpFindFileData=0x31e29c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x91f4b000, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0x618a28b0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x91f4b000, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0x94, dwReserved0=0x0, dwReserved1=0x0, cFileName="HEADER.GIF", cAlternateFileName="")) returned 1 [0042.746] FindNextFileW (in: hFindFile=0x381f40, lpFindFileData=0x31e29c | out: lpFindFileData=0x31e29c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x91f4b000, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0x528f6190, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x91f4b000, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0x1f0, dwReserved0=0x0, dwReserved1=0x0, cFileName="TAB_OFF.GIF", cAlternateFileName="")) returned 1 [0042.746] FindNextFileW (in: hFindFile=0x381f40, lpFindFileData=0x31e29c | out: lpFindFileData=0x31e29c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x91f4b000, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0x618a28b0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x91f4b000, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0x401, dwReserved0=0x0, dwReserved1=0x0, cFileName="TAB_ON.GIF", cAlternateFileName="")) returned 1 [0042.746] FindNextFileW (in: hFindFile=0x381f40, lpFindFileData=0x31e29c | out: lpFindFileData=0x31e29c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x91f4b000, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0x618a28b0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x91f4b000, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0x401, dwReserved0=0x0, dwReserved1=0x0, cFileName="TAB_ON.GIF", cAlternateFileName="")) returned 0 [0042.746] FindClose (in: hFindFile=0x381f40 | out: hFindFile=0x381f40) returned 1 [0042.746] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e524) returned 1 [0042.746] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e530) returned 1 [0042.747] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e564) returned 1 [0042.747] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\GrayCheck", nBufferLength=0x105, lpBuffer=0x31e06c, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\GrayCheck", lpFilePart=0x0) returned 0x68 [0042.747] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\GrayCheck\\", nBufferLength=0x105, lpBuffer=0x31e040, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\GrayCheck\\", lpFilePart=0x0) returned 0x69 [0042.747] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\GrayCheck\\*", lpFindFileData=0x31e28c | out: lpFindFileData=0x31e28c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x528f6190, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x618a28b0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x618a28b0, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x381f40 [0042.747] FindNextFileW (in: hFindFile=0x381f40, lpFindFileData=0x31e29c | out: lpFindFileData=0x31e29c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x528f6190, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x618a28b0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x618a28b0, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0042.747] FindNextFileW (in: hFindFile=0x381f40, lpFindFileData=0x31e29c | out: lpFindFileData=0x31e29c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x91f4b000, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0x528f6190, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x91f4b000, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0x1b8, dwReserved0=0x0, dwReserved1=0x0, cFileName="HEADER.GIF", cAlternateFileName="")) returned 1 [0042.747] FindNextFileW (in: hFindFile=0x381f40, lpFindFileData=0x31e29c | out: lpFindFileData=0x31e29c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x91f4b000, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0x528f6190, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x91f4b000, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0x155, dwReserved0=0x0, dwReserved1=0x0, cFileName="TAB_OFF.GIF", cAlternateFileName="")) returned 1 [0042.747] FindNextFileW (in: hFindFile=0x381f40, lpFindFileData=0x31e29c | out: lpFindFileData=0x31e29c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x91f4b000, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0x618a28b0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x91f4b000, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0xde, dwReserved0=0x0, dwReserved1=0x0, cFileName="TAB_ON.GIF", cAlternateFileName="")) returned 1 [0042.747] FindNextFileW (in: hFindFile=0x381f40, lpFindFileData=0x31e29c | out: lpFindFileData=0x31e29c*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0042.748] FindClose (in: hFindFile=0x381f40 | out: hFindFile=0x381f40) returned 1 [0042.748] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e524) returned 1 [0042.748] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e530) returned 1 [0042.748] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e564) returned 1 [0042.748] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\GrayCheck", nBufferLength=0x105, lpBuffer=0x31e06c, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\GrayCheck", lpFilePart=0x0) returned 0x68 [0042.748] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\GrayCheck\\", nBufferLength=0x105, lpBuffer=0x31e040, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\GrayCheck\\", lpFilePart=0x0) returned 0x69 [0042.748] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\GrayCheck\\*", lpFindFileData=0x31e28c | out: lpFindFileData=0x31e28c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x528f6190, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x618a28b0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x618a28b0, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x381f40 [0042.748] FindNextFileW (in: hFindFile=0x381f40, lpFindFileData=0x31e29c | out: lpFindFileData=0x31e29c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x528f6190, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x618a28b0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x618a28b0, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0042.748] FindNextFileW (in: hFindFile=0x381f40, lpFindFileData=0x31e29c | out: lpFindFileData=0x31e29c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x91f4b000, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0x528f6190, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x91f4b000, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0x1b8, dwReserved0=0x0, dwReserved1=0x0, cFileName="HEADER.GIF", cAlternateFileName="")) returned 1 [0042.748] FindNextFileW (in: hFindFile=0x381f40, lpFindFileData=0x31e29c | out: lpFindFileData=0x31e29c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x91f4b000, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0x528f6190, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x91f4b000, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0x155, dwReserved0=0x0, dwReserved1=0x0, cFileName="TAB_OFF.GIF", cAlternateFileName="")) returned 1 [0042.748] FindNextFileW (in: hFindFile=0x381f40, lpFindFileData=0x31e29c | out: lpFindFileData=0x31e29c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x91f4b000, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0x618a28b0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x91f4b000, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0xde, dwReserved0=0x0, dwReserved1=0x0, cFileName="TAB_ON.GIF", cAlternateFileName="")) returned 1 [0042.749] FindNextFileW (in: hFindFile=0x381f40, lpFindFileData=0x31e29c | out: lpFindFileData=0x31e29c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x91f4b000, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0x618a28b0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x91f4b000, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0xde, dwReserved0=0x0, dwReserved1=0x0, cFileName="TAB_ON.GIF", cAlternateFileName="")) returned 0 [0042.749] FindClose (in: hFindFile=0x381f40 | out: hFindFile=0x381f40) returned 1 [0042.749] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e524) returned 1 [0042.749] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e530) returned 1 [0042.749] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e564) returned 1 [0042.749] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\Lime", nBufferLength=0x105, lpBuffer=0x31e06c, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\Lime", lpFilePart=0x0) returned 0x63 [0042.749] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\Lime\\", nBufferLength=0x105, lpBuffer=0x31e040, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\Lime\\", lpFilePart=0x0) returned 0x64 [0042.749] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\Lime\\*", lpFindFileData=0x31e28c | out: lpFindFileData=0x31e28c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x528f6190, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x618a28b0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x618a28b0, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x381f40 [0042.751] FindNextFileW (in: hFindFile=0x381f40, lpFindFileData=0x31e29c | out: lpFindFileData=0x31e29c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x528f6190, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x618a28b0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x618a28b0, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0042.751] FindNextFileW (in: hFindFile=0x381f40, lpFindFileData=0x31e29c | out: lpFindFileData=0x31e29c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x91f4b000, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0x618a28b0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x91f4b000, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0x1ce, dwReserved0=0x0, dwReserved1=0x0, cFileName="TAB_OFF.GIF", cAlternateFileName="")) returned 1 [0042.751] FindNextFileW (in: hFindFile=0x381f40, lpFindFileData=0x31e29c | out: lpFindFileData=0x31e29c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9325dd00, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0x528f6190, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x9325dd00, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0x10b, dwReserved0=0x0, dwReserved1=0x0, cFileName="TAB_ON.GIF", cAlternateFileName="")) returned 1 [0042.751] FindNextFileW (in: hFindFile=0x381f40, lpFindFileData=0x31e29c | out: lpFindFileData=0x31e29c*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0042.751] FindClose (in: hFindFile=0x381f40 | out: hFindFile=0x381f40) returned 1 [0042.751] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e524) returned 1 [0042.751] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e530) returned 1 [0042.751] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e564) returned 1 [0042.751] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\Lime", nBufferLength=0x105, lpBuffer=0x31e06c, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\Lime", lpFilePart=0x0) returned 0x63 [0042.752] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\Lime\\", nBufferLength=0x105, lpBuffer=0x31e040, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\Lime\\", lpFilePart=0x0) returned 0x64 [0042.752] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\Lime\\*", lpFindFileData=0x31e28c | out: lpFindFileData=0x31e28c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x528f6190, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x618a28b0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x618a28b0, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x381f40 [0042.752] FindNextFileW (in: hFindFile=0x381f40, lpFindFileData=0x31e29c | out: lpFindFileData=0x31e29c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x528f6190, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x618a28b0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x618a28b0, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0042.752] FindNextFileW (in: hFindFile=0x381f40, lpFindFileData=0x31e29c | out: lpFindFileData=0x31e29c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x91f4b000, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0x618a28b0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x91f4b000, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0x1ce, dwReserved0=0x0, dwReserved1=0x0, cFileName="TAB_OFF.GIF", cAlternateFileName="")) returned 1 [0042.752] FindNextFileW (in: hFindFile=0x381f40, lpFindFileData=0x31e29c | out: lpFindFileData=0x31e29c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9325dd00, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0x528f6190, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x9325dd00, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0x10b, dwReserved0=0x0, dwReserved1=0x0, cFileName="TAB_ON.GIF", cAlternateFileName="")) returned 1 [0042.752] FindNextFileW (in: hFindFile=0x381f40, lpFindFileData=0x31e29c | out: lpFindFileData=0x31e29c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9325dd00, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0x528f6190, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x9325dd00, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0x10b, dwReserved0=0x0, dwReserved1=0x0, cFileName="TAB_ON.GIF", cAlternateFileName="")) returned 0 [0042.752] FindClose (in: hFindFile=0x381f40 | out: hFindFile=0x381f40) returned 1 [0042.752] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e524) returned 1 [0042.752] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e530) returned 1 [0042.752] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e564) returned 1 [0042.753] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\Oasis", nBufferLength=0x105, lpBuffer=0x31e06c, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\Oasis", lpFilePart=0x0) returned 0x64 [0042.753] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\Oasis\\", nBufferLength=0x105, lpBuffer=0x31e040, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\Oasis\\", lpFilePart=0x0) returned 0x65 [0042.753] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\Oasis\\*", lpFindFileData=0x31e28c | out: lpFindFileData=0x31e28c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x528f6190, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x618a28b0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x618a28b0, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x381f40 [0042.753] FindNextFileW (in: hFindFile=0x381f40, lpFindFileData=0x31e29c | out: lpFindFileData=0x31e29c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x528f6190, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x618a28b0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x618a28b0, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0042.753] FindNextFileW (in: hFindFile=0x381f40, lpFindFileData=0x31e29c | out: lpFindFileData=0x31e29c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9325dd00, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0x528f6190, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x9325dd00, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0x86c, dwReserved0=0x0, dwReserved1=0x0, cFileName="HEADER.GIF", cAlternateFileName="")) returned 1 [0042.753] FindNextFileW (in: hFindFile=0x381f40, lpFindFileData=0x31e29c | out: lpFindFileData=0x31e29c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9325dd00, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0x618a28b0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x9325dd00, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0x1f0, dwReserved0=0x0, dwReserved1=0x0, cFileName="TAB_OFF.GIF", cAlternateFileName="")) returned 1 [0042.753] FindNextFileW (in: hFindFile=0x381f40, lpFindFileData=0x31e29c | out: lpFindFileData=0x31e29c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9325dd00, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0x618a28b0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x9325dd00, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0x401, dwReserved0=0x0, dwReserved1=0x0, cFileName="TAB_ON.GIF", cAlternateFileName="")) returned 1 [0042.753] FindNextFileW (in: hFindFile=0x381f40, lpFindFileData=0x31e29c | out: lpFindFileData=0x31e29c*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0042.753] FindClose (in: hFindFile=0x381f40 | out: hFindFile=0x381f40) returned 1 [0042.755] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e524) returned 1 [0042.755] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e530) returned 1 [0042.756] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e564) returned 1 [0042.756] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\Oasis", nBufferLength=0x105, lpBuffer=0x31e06c, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\Oasis", lpFilePart=0x0) returned 0x64 [0042.756] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\Oasis\\", nBufferLength=0x105, lpBuffer=0x31e040, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\Oasis\\", lpFilePart=0x0) returned 0x65 [0042.756] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\Oasis\\*", lpFindFileData=0x31e28c | out: lpFindFileData=0x31e28c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x528f6190, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x618a28b0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x618a28b0, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x381f40 [0042.756] FindNextFileW (in: hFindFile=0x381f40, lpFindFileData=0x31e29c | out: lpFindFileData=0x31e29c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x528f6190, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x618a28b0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x618a28b0, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0042.756] FindNextFileW (in: hFindFile=0x381f40, lpFindFileData=0x31e29c | out: lpFindFileData=0x31e29c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9325dd00, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0x528f6190, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x9325dd00, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0x86c, dwReserved0=0x0, dwReserved1=0x0, cFileName="HEADER.GIF", cAlternateFileName="")) returned 1 [0042.756] FindNextFileW (in: hFindFile=0x381f40, lpFindFileData=0x31e29c | out: lpFindFileData=0x31e29c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9325dd00, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0x618a28b0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x9325dd00, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0x1f0, dwReserved0=0x0, dwReserved1=0x0, cFileName="TAB_OFF.GIF", cAlternateFileName="")) returned 1 [0042.756] FindNextFileW (in: hFindFile=0x381f40, lpFindFileData=0x31e29c | out: lpFindFileData=0x31e29c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9325dd00, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0x618a28b0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x9325dd00, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0x401, dwReserved0=0x0, dwReserved1=0x0, cFileName="TAB_ON.GIF", cAlternateFileName="")) returned 1 [0042.756] FindNextFileW (in: hFindFile=0x381f40, lpFindFileData=0x31e29c | out: lpFindFileData=0x31e29c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9325dd00, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0x618a28b0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x9325dd00, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0x401, dwReserved0=0x0, dwReserved1=0x0, cFileName="TAB_ON.GIF", cAlternateFileName="")) returned 0 [0042.757] FindClose (in: hFindFile=0x381f40 | out: hFindFile=0x381f40) returned 1 [0042.757] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e524) returned 1 [0042.757] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e530) returned 1 [0042.757] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e564) returned 1 [0042.757] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\Slate", nBufferLength=0x105, lpBuffer=0x31e06c, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\Slate", lpFilePart=0x0) returned 0x64 [0042.757] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\Slate\\", nBufferLength=0x105, lpBuffer=0x31e040, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\Slate\\", lpFilePart=0x0) returned 0x65 [0042.757] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\Slate\\*", lpFindFileData=0x31e28c | out: lpFindFileData=0x31e28c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x528f6190, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x618c8a10, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x618c8a10, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x381f40 [0042.758] FindNextFileW (in: hFindFile=0x381f40, lpFindFileData=0x31e29c | out: lpFindFileData=0x31e29c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x528f6190, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x618c8a10, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x618c8a10, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0042.758] FindNextFileW (in: hFindFile=0x381f40, lpFindFileData=0x31e29c | out: lpFindFileData=0x31e29c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9325dd00, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0x618c8a10, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x9325dd00, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0x16c, dwReserved0=0x0, dwReserved1=0x0, cFileName="TAB_OFF.GIF", cAlternateFileName="")) returned 1 [0042.758] FindNextFileW (in: hFindFile=0x381f40, lpFindFileData=0x31e29c | out: lpFindFileData=0x31e29c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9325dd00, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0x528f6190, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x9325dd00, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0x16c, dwReserved0=0x0, dwReserved1=0x0, cFileName="TAB_ON.GIF", cAlternateFileName="")) returned 1 [0042.758] FindNextFileW (in: hFindFile=0x381f40, lpFindFileData=0x31e29c | out: lpFindFileData=0x31e29c*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0042.758] FindClose (in: hFindFile=0x381f40 | out: hFindFile=0x381f40) returned 1 [0042.758] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e524) returned 1 [0042.758] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e530) returned 1 [0042.758] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e564) returned 1 [0042.758] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\Slate", nBufferLength=0x105, lpBuffer=0x31e06c, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\Slate", lpFilePart=0x0) returned 0x64 [0042.758] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\Slate\\", nBufferLength=0x105, lpBuffer=0x31e040, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\Slate\\", lpFilePart=0x0) returned 0x65 [0042.758] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\Slate\\*", lpFindFileData=0x31e28c | out: lpFindFileData=0x31e28c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x528f6190, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x618c8a10, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x618c8a10, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x381f40 [0042.759] FindNextFileW (in: hFindFile=0x381f40, lpFindFileData=0x31e29c | out: lpFindFileData=0x31e29c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x528f6190, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x618c8a10, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x618c8a10, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0042.759] FindNextFileW (in: hFindFile=0x381f40, lpFindFileData=0x31e29c | out: lpFindFileData=0x31e29c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9325dd00, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0x618c8a10, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x9325dd00, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0x16c, dwReserved0=0x0, dwReserved1=0x0, cFileName="TAB_OFF.GIF", cAlternateFileName="")) returned 1 [0042.759] FindNextFileW (in: hFindFile=0x381f40, lpFindFileData=0x31e29c | out: lpFindFileData=0x31e29c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9325dd00, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0x528f6190, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x9325dd00, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0x16c, dwReserved0=0x0, dwReserved1=0x0, cFileName="TAB_ON.GIF", cAlternateFileName="")) returned 1 [0042.759] FindNextFileW (in: hFindFile=0x381f40, lpFindFileData=0x31e29c | out: lpFindFileData=0x31e29c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9325dd00, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0x528f6190, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x9325dd00, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0x16c, dwReserved0=0x0, dwReserved1=0x0, cFileName="TAB_ON.GIF", cAlternateFileName="")) returned 0 [0042.759] FindClose (in: hFindFile=0x381f40 | out: hFindFile=0x381f40) returned 1 [0042.759] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e524) returned 1 [0042.759] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e530) returned 1 [0042.759] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e564) returned 1 [0042.759] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\SoftBlue", nBufferLength=0x105, lpBuffer=0x31e06c, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\SoftBlue", lpFilePart=0x0) returned 0x67 [0042.759] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\SoftBlue\\", nBufferLength=0x105, lpBuffer=0x31e040, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\SoftBlue\\", lpFilePart=0x0) returned 0x68 [0042.759] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\SoftBlue\\*", lpFindFileData=0x31e28c | out: lpFindFileData=0x31e28c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x528f6190, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x618c8a10, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x618c8a10, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x381f40 [0042.760] FindNextFileW (in: hFindFile=0x381f40, lpFindFileData=0x31e29c | out: lpFindFileData=0x31e29c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x528f6190, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x618c8a10, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x618c8a10, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0042.760] FindNextFileW (in: hFindFile=0x381f40, lpFindFileData=0x31e29c | out: lpFindFileData=0x31e29c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x94570a00, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0x528f6190, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x94570a00, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0x1afa, dwReserved0=0x0, dwReserved1=0x0, cFileName="background.gif", cAlternateFileName="BACKGR~1.GIF")) returned 1 [0042.760] FindNextFileW (in: hFindFile=0x381f40, lpFindFileData=0x31e29c | out: lpFindFileData=0x31e29c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x94570a00, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0x618c8a10, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x94570a00, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0x155, dwReserved0=0x0, dwReserved1=0x0, cFileName="tab_off.gif", cAlternateFileName="")) returned 1 [0042.761] FindNextFileW (in: hFindFile=0x381f40, lpFindFileData=0x31e29c | out: lpFindFileData=0x31e29c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x94570a00, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0x528f6190, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x94570a00, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0xde, dwReserved0=0x0, dwReserved1=0x0, cFileName="tab_on.gif", cAlternateFileName="")) returned 1 [0042.761] FindNextFileW (in: hFindFile=0x381f40, lpFindFileData=0x31e29c | out: lpFindFileData=0x31e29c*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0042.761] FindClose (in: hFindFile=0x381f40 | out: hFindFile=0x381f40) returned 1 [0042.761] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e524) returned 1 [0042.761] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e530) returned 1 [0042.761] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e564) returned 1 [0042.761] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\SoftBlue", nBufferLength=0x105, lpBuffer=0x31e06c, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\SoftBlue", lpFilePart=0x0) returned 0x67 [0042.761] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\SoftBlue\\", nBufferLength=0x105, lpBuffer=0x31e040, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\SoftBlue\\", lpFilePart=0x0) returned 0x68 [0042.761] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\SoftBlue\\*", lpFindFileData=0x31e28c | out: lpFindFileData=0x31e28c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x528f6190, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x618c8a10, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x618c8a10, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x381f40 [0042.761] FindNextFileW (in: hFindFile=0x381f40, lpFindFileData=0x31e29c | out: lpFindFileData=0x31e29c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x528f6190, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x618c8a10, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x618c8a10, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0042.761] FindNextFileW (in: hFindFile=0x381f40, lpFindFileData=0x31e29c | out: lpFindFileData=0x31e29c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x94570a00, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0x528f6190, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x94570a00, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0x1afa, dwReserved0=0x0, dwReserved1=0x0, cFileName="background.gif", cAlternateFileName="BACKGR~1.GIF")) returned 1 [0042.762] FindNextFileW (in: hFindFile=0x381f40, lpFindFileData=0x31e29c | out: lpFindFileData=0x31e29c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x94570a00, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0x618c8a10, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x94570a00, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0x155, dwReserved0=0x0, dwReserved1=0x0, cFileName="tab_off.gif", cAlternateFileName="")) returned 1 [0042.762] FindNextFileW (in: hFindFile=0x381f40, lpFindFileData=0x31e29c | out: lpFindFileData=0x31e29c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x94570a00, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0x528f6190, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x94570a00, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0xde, dwReserved0=0x0, dwReserved1=0x0, cFileName="tab_on.gif", cAlternateFileName="")) returned 1 [0042.762] FindNextFileW (in: hFindFile=0x381f40, lpFindFileData=0x31e29c | out: lpFindFileData=0x31e29c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x94570a00, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0x528f6190, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x94570a00, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0xde, dwReserved0=0x0, dwReserved1=0x0, cFileName="tab_on.gif", cAlternateFileName="")) returned 0 [0042.762] FindClose (in: hFindFile=0x381f40 | out: hFindFile=0x381f40) returned 1 [0042.762] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e524) returned 1 [0042.762] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e530) returned 1 [0042.762] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e564) returned 1 [0042.762] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\SpringGreen", nBufferLength=0x105, lpBuffer=0x31e06c, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\SpringGreen", lpFilePart=0x0) returned 0x6a [0042.762] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\SpringGreen\\", nBufferLength=0x105, lpBuffer=0x31e040, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\SpringGreen\\", lpFilePart=0x0) returned 0x6b [0042.762] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\SpringGreen\\*", lpFindFileData=0x31e28c | out: lpFindFileData=0x31e28c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x528f6190, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x618c8a10, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x618c8a10, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x381f40 [0042.763] FindNextFileW (in: hFindFile=0x381f40, lpFindFileData=0x31e29c | out: lpFindFileData=0x31e29c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x528f6190, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x618c8a10, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x618c8a10, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0042.763] FindNextFileW (in: hFindFile=0x381f40, lpFindFileData=0x31e29c | out: lpFindFileData=0x31e29c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x94570a00, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0x528f6190, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x94570a00, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0x1ac, dwReserved0=0x0, dwReserved1=0x0, cFileName="BUTTON.GIF", cAlternateFileName="")) returned 1 [0042.763] FindNextFileW (in: hFindFile=0x381f40, lpFindFileData=0x31e29c | out: lpFindFileData=0x31e29c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x94570a00, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0x618c8a10, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x94570a00, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0x155, dwReserved0=0x0, dwReserved1=0x0, cFileName="TAB_OFF.GIF", cAlternateFileName="")) returned 1 [0042.763] FindNextFileW (in: hFindFile=0x381f40, lpFindFileData=0x31e29c | out: lpFindFileData=0x31e29c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x94570a00, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0x618c8a10, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x94570a00, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0xde, dwReserved0=0x0, dwReserved1=0x0, cFileName="TAB_ON.GIF", cAlternateFileName="")) returned 1 [0042.763] FindNextFileW (in: hFindFile=0x381f40, lpFindFileData=0x31e29c | out: lpFindFileData=0x31e29c*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0042.763] FindClose (in: hFindFile=0x381f40 | out: hFindFile=0x381f40) returned 1 [0042.763] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e524) returned 1 [0042.763] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e530) returned 1 [0042.763] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e564) returned 1 [0042.763] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\SpringGreen", nBufferLength=0x105, lpBuffer=0x31e06c, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\SpringGreen", lpFilePart=0x0) returned 0x6a [0042.763] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\SpringGreen\\", nBufferLength=0x105, lpBuffer=0x31e040, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\SpringGreen\\", lpFilePart=0x0) returned 0x6b [0042.763] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\SpringGreen\\*", lpFindFileData=0x31e28c | out: lpFindFileData=0x31e28c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x528f6190, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x618c8a10, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x618c8a10, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x381f40 [0042.763] FindNextFileW (in: hFindFile=0x381f40, lpFindFileData=0x31e29c | out: lpFindFileData=0x31e29c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x528f6190, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x618c8a10, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x618c8a10, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0042.764] FindNextFileW (in: hFindFile=0x381f40, lpFindFileData=0x31e29c | out: lpFindFileData=0x31e29c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x94570a00, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0x528f6190, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x94570a00, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0x1ac, dwReserved0=0x0, dwReserved1=0x0, cFileName="BUTTON.GIF", cAlternateFileName="")) returned 1 [0042.764] FindNextFileW (in: hFindFile=0x381f40, lpFindFileData=0x31e29c | out: lpFindFileData=0x31e29c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x94570a00, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0x618c8a10, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x94570a00, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0x155, dwReserved0=0x0, dwReserved1=0x0, cFileName="TAB_OFF.GIF", cAlternateFileName="")) returned 1 [0042.764] FindNextFileW (in: hFindFile=0x381f40, lpFindFileData=0x31e29c | out: lpFindFileData=0x31e29c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x94570a00, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0x618c8a10, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x94570a00, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0xde, dwReserved0=0x0, dwReserved1=0x0, cFileName="TAB_ON.GIF", cAlternateFileName="")) returned 1 [0042.764] FindNextFileW (in: hFindFile=0x381f40, lpFindFileData=0x31e29c | out: lpFindFileData=0x31e29c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x94570a00, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0x618c8a10, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x94570a00, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0xde, dwReserved0=0x0, dwReserved1=0x0, cFileName="TAB_ON.GIF", cAlternateFileName="")) returned 0 [0042.764] FindClose (in: hFindFile=0x381f40 | out: hFindFile=0x381f40) returned 1 [0042.764] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e524) returned 1 [0042.764] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e530) returned 1 [0042.764] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e564) returned 1 [0042.764] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\STS2", nBufferLength=0x105, lpBuffer=0x31e06c, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\STS2", lpFilePart=0x0) returned 0x63 [0042.764] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\STS2\\", nBufferLength=0x105, lpBuffer=0x31e040, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\STS2\\", lpFilePart=0x0) returned 0x64 [0042.764] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\STS2\\*", lpFindFileData=0x31e28c | out: lpFindFileData=0x31e28c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x528f6190, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x618c8a10, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x618c8a10, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x381f40 [0042.765] FindNextFileW (in: hFindFile=0x381f40, lpFindFileData=0x31e29c | out: lpFindFileData=0x31e29c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x528f6190, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x618c8a10, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x618c8a10, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0042.765] FindNextFileW (in: hFindFile=0x381f40, lpFindFileData=0x31e29c | out: lpFindFileData=0x31e29c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x94570a00, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0x528f6190, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x94570a00, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0xe9, dwReserved0=0x0, dwReserved1=0x0, cFileName="background.gif", cAlternateFileName="BACKGR~1.GIF")) returned 1 [0042.765] FindNextFileW (in: hFindFile=0x381f40, lpFindFileData=0x31e29c | out: lpFindFileData=0x31e29c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x94570a00, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0x5291c2f0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x94570a00, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0xcbd, dwReserved0=0x0, dwReserved1=0x0, cFileName="header.gif", cAlternateFileName="")) returned 1 [0042.765] FindNextFileW (in: hFindFile=0x381f40, lpFindFileData=0x31e29c | out: lpFindFileData=0x31e29c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x94570a00, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0x618c8a10, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x94570a00, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0x1ce, dwReserved0=0x0, dwReserved1=0x0, cFileName="tab_off.gif", cAlternateFileName="")) returned 1 [0042.765] FindNextFileW (in: hFindFile=0x381f40, lpFindFileData=0x31e29c | out: lpFindFileData=0x31e29c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x94570a00, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0x618c8a10, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x94570a00, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0x108, dwReserved0=0x0, dwReserved1=0x0, cFileName="tab_on.gif", cAlternateFileName="")) returned 1 [0042.765] FindNextFileW (in: hFindFile=0x381f40, lpFindFileData=0x31e29c | out: lpFindFileData=0x31e29c*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0042.765] FindClose (in: hFindFile=0x381f40 | out: hFindFile=0x381f40) returned 1 [0042.765] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e524) returned 1 [0042.765] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e530) returned 1 [0042.765] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e564) returned 1 [0042.765] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\STS2", nBufferLength=0x105, lpBuffer=0x31e06c, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\STS2", lpFilePart=0x0) returned 0x63 [0042.765] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\STS2\\", nBufferLength=0x105, lpBuffer=0x31e040, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\STS2\\", lpFilePart=0x0) returned 0x64 [0042.765] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\STS2\\*", lpFindFileData=0x31e28c | out: lpFindFileData=0x31e28c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x528f6190, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x618c8a10, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x618c8a10, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x381f40 [0042.766] FindNextFileW (in: hFindFile=0x381f40, lpFindFileData=0x31e29c | out: lpFindFileData=0x31e29c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x528f6190, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x618c8a10, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x618c8a10, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0042.766] FindNextFileW (in: hFindFile=0x381f40, lpFindFileData=0x31e29c | out: lpFindFileData=0x31e29c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x94570a00, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0x528f6190, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x94570a00, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0xe9, dwReserved0=0x0, dwReserved1=0x0, cFileName="background.gif", cAlternateFileName="BACKGR~1.GIF")) returned 1 [0042.766] FindNextFileW (in: hFindFile=0x381f40, lpFindFileData=0x31e29c | out: lpFindFileData=0x31e29c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x94570a00, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0x5291c2f0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x94570a00, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0xcbd, dwReserved0=0x0, dwReserved1=0x0, cFileName="header.gif", cAlternateFileName="")) returned 1 [0042.766] FindNextFileW (in: hFindFile=0x381f40, lpFindFileData=0x31e29c | out: lpFindFileData=0x31e29c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x94570a00, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0x618c8a10, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x94570a00, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0x1ce, dwReserved0=0x0, dwReserved1=0x0, cFileName="tab_off.gif", cAlternateFileName="")) returned 1 [0042.766] FindNextFileW (in: hFindFile=0x381f40, lpFindFileData=0x31e29c | out: lpFindFileData=0x31e29c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x94570a00, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0x618c8a10, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x94570a00, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0x108, dwReserved0=0x0, dwReserved1=0x0, cFileName="tab_on.gif", cAlternateFileName="")) returned 1 [0042.766] FindNextFileW (in: hFindFile=0x381f40, lpFindFileData=0x31e29c | out: lpFindFileData=0x31e29c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x94570a00, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0x618c8a10, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x94570a00, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0x108, dwReserved0=0x0, dwReserved1=0x0, cFileName="tab_on.gif", cAlternateFileName="")) returned 0 [0042.766] FindClose (in: hFindFile=0x381f40 | out: hFindFile=0x381f40) returned 1 [0042.766] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e524) returned 1 [0042.766] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e530) returned 1 [0042.766] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e564) returned 1 [0042.766] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\Swirl", nBufferLength=0x105, lpBuffer=0x31e06c, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\Swirl", lpFilePart=0x0) returned 0x64 [0042.766] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\Swirl\\", nBufferLength=0x105, lpBuffer=0x31e040, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\Swirl\\", lpFilePart=0x0) returned 0x65 [0042.766] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\Swirl\\*", lpFindFileData=0x31e28c | out: lpFindFileData=0x31e28c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5291c2f0, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x618c8a10, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x618c8a10, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x381f40 [0042.766] FindNextFileW (in: hFindFile=0x381f40, lpFindFileData=0x31e29c | out: lpFindFileData=0x31e29c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5291c2f0, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x618c8a10, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x618c8a10, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0042.766] FindNextFileW (in: hFindFile=0x381f40, lpFindFileData=0x31e29c | out: lpFindFileData=0x31e29c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x95883700, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0x618c8a10, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x95883700, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0x32f, dwReserved0=0x0, dwReserved1=0x0, cFileName="background.gif", cAlternateFileName="BACKGR~1.GIF")) returned 1 [0042.766] FindNextFileW (in: hFindFile=0x381f40, lpFindFileData=0x31e29c | out: lpFindFileData=0x31e29c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x95883700, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0x5291c2f0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x95883700, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0x6993, dwReserved0=0x0, dwReserved1=0x0, cFileName="header.gif", cAlternateFileName="")) returned 1 [0042.767] FindNextFileW (in: hFindFile=0x381f40, lpFindFileData=0x31e29c | out: lpFindFileData=0x31e29c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x95883700, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0x5291c2f0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x95883700, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0x155, dwReserved0=0x0, dwReserved1=0x0, cFileName="tab_off.gif", cAlternateFileName="")) returned 1 [0042.767] FindNextFileW (in: hFindFile=0x381f40, lpFindFileData=0x31e29c | out: lpFindFileData=0x31e29c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x95883700, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0x618c8a10, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x95883700, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0xde, dwReserved0=0x0, dwReserved1=0x0, cFileName="tab_on.gif", cAlternateFileName="")) returned 1 [0042.767] FindNextFileW (in: hFindFile=0x381f40, lpFindFileData=0x31e29c | out: lpFindFileData=0x31e29c*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0042.767] FindClose (in: hFindFile=0x381f40 | out: hFindFile=0x381f40) returned 1 [0042.767] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e524) returned 1 [0042.767] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e530) returned 1 [0042.767] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e564) returned 1 [0042.767] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\Swirl", nBufferLength=0x105, lpBuffer=0x31e06c, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\Swirl", lpFilePart=0x0) returned 0x64 [0042.767] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\Swirl\\", nBufferLength=0x105, lpBuffer=0x31e040, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\Swirl\\", lpFilePart=0x0) returned 0x65 [0042.767] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\Swirl\\*", lpFindFileData=0x31e28c | out: lpFindFileData=0x31e28c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5291c2f0, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x618c8a10, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x618c8a10, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x381f40 [0042.767] FindNextFileW (in: hFindFile=0x381f40, lpFindFileData=0x31e29c | out: lpFindFileData=0x31e29c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5291c2f0, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x618c8a10, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x618c8a10, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0042.767] FindNextFileW (in: hFindFile=0x381f40, lpFindFileData=0x31e29c | out: lpFindFileData=0x31e29c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x95883700, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0x618c8a10, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x95883700, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0x32f, dwReserved0=0x0, dwReserved1=0x0, cFileName="background.gif", cAlternateFileName="BACKGR~1.GIF")) returned 1 [0042.767] FindNextFileW (in: hFindFile=0x381f40, lpFindFileData=0x31e29c | out: lpFindFileData=0x31e29c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x95883700, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0x5291c2f0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x95883700, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0x6993, dwReserved0=0x0, dwReserved1=0x0, cFileName="header.gif", cAlternateFileName="")) returned 1 [0042.767] FindNextFileW (in: hFindFile=0x381f40, lpFindFileData=0x31e29c | out: lpFindFileData=0x31e29c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x95883700, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0x5291c2f0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x95883700, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0x155, dwReserved0=0x0, dwReserved1=0x0, cFileName="tab_off.gif", cAlternateFileName="")) returned 1 [0042.767] FindNextFileW (in: hFindFile=0x381f40, lpFindFileData=0x31e29c | out: lpFindFileData=0x31e29c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x95883700, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0x618c8a10, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x95883700, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0xde, dwReserved0=0x0, dwReserved1=0x0, cFileName="tab_on.gif", cAlternateFileName="")) returned 1 [0042.767] FindNextFileW (in: hFindFile=0x381f40, lpFindFileData=0x31e29c | out: lpFindFileData=0x31e29c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x95883700, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0x618c8a10, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x95883700, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0xde, dwReserved0=0x0, dwReserved1=0x0, cFileName="tab_on.gif", cAlternateFileName="")) returned 0 [0042.767] FindClose (in: hFindFile=0x381f40 | out: hFindFile=0x381f40) returned 1 [0042.767] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e524) returned 1 [0042.767] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e530) returned 1 [0042.767] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e654) returned 1 [0042.768] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4", nBufferLength=0x105, lpBuffer=0x31e15c, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4", lpFilePart=0x0) returned 0x52 [0042.768] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\", nBufferLength=0x105, lpBuffer=0x31e130, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\", lpFilePart=0x0) returned 0x53 [0042.768] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\*", lpFindFileData=0x31e37c | out: lpFindFileData=0x31e37c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5127f1f0, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x706f8370, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x706f8370, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x381f40 [0042.770] FindNextFileW (in: hFindFile=0x381f40, lpFindFileData=0x31e38c | out: lpFindFileData=0x31e38c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5127f1f0, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x706f8370, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x706f8370, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0042.771] FindNextFileW (in: hFindFile=0x381f40, lpFindFileData=0x31e38c | out: lpFindFileData=0x31e38c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x991bbe00, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0x5eaf6290, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x991bbe00, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0x244, dwReserved0=0x0, dwReserved1=0x0, cFileName="ADD.GIF", cAlternateFileName="")) returned 1 [0042.771] FindNextFileW (in: hFindFile=0x381f40, lpFindFileData=0x31e38c | out: lpFindFileData=0x31e38c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x991bbe00, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0x5127f1f0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x991bbe00, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0xbe8, dwReserved0=0x0, dwReserved1=0x0, cFileName="AddToViewArrow.jpg", cAlternateFileName="ADDTOV~1.JPG")) returned 1 [0042.771] FindNextFileW (in: hFindFile=0x381f40, lpFindFileData=0x31e38c | out: lpFindFileData=0x31e38c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x991bbe00, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0x5eaf6290, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x991bbe00, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0x924, dwReserved0=0x0, dwReserved1=0x0, cFileName="AddToViewArrowMask.bmp", cAlternateFileName="ADDTOV~1.BMP")) returned 1 [0042.771] FindNextFileW (in: hFindFile=0x381f40, lpFindFileData=0x31e38c | out: lpFindFileData=0x31e38c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x991bbe00, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0x51767f50, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x991bbe00, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0xae8, dwReserved0=0x0, dwReserved1=0x0, cFileName="attention.gif", cAlternateFileName="ATTENT~1.GIF")) returned 1 [0042.771] FindNextFileW (in: hFindFile=0x381f40, lpFindFileData=0x31e38c | out: lpFindFileData=0x31e38c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x991bbe00, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0x5f61e9b0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x991bbe00, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0x614e, dwReserved0=0x0, dwReserved1=0x0, cFileName="BG_ADOBE.GIF", cAlternateFileName="")) returned 1 [0042.771] FindNextFileW (in: hFindFile=0x381f40, lpFindFileData=0x31e38c | out: lpFindFileData=0x31e38c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x991bbe00, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0x5197d290, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x991bbe00, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0x161d, dwReserved0=0x0, dwReserved1=0x0, cFileName="bg_Casual.gif", cAlternateFileName="BG_CAS~1.GIF")) returned 1 [0042.771] FindNextFileW (in: hFindFile=0x381f40, lpFindFileData=0x31e38c | out: lpFindFileData=0x31e38c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x991bbe00, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0x519a33f0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x991bbe00, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0x7dd3, dwReserved0=0x0, dwReserved1=0x0, cFileName="bg_Country.gif", cAlternateFileName="BG_COU~1.GIF")) returned 1 [0042.771] FindNextFileW (in: hFindFile=0x381f40, lpFindFileData=0x31e38c | out: lpFindFileData=0x31e38c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9a4ceb00, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0x519a33f0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x9a4ceb00, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0x132a, dwReserved0=0x0, dwReserved1=0x0, cFileName="bg_Earthy.gif", cAlternateFileName="BG_EAR~1.GIF")) returned 1 [0042.772] FindNextFileW (in: hFindFile=0x381f40, lpFindFileData=0x31e38c | out: lpFindFileData=0x31e38c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9a4ceb00, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0x5f644b10, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x9a4ceb00, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0x167bd, dwReserved0=0x0, dwReserved1=0x0, cFileName="bg_FormsHomePage.gif", cAlternateFileName="BG_FOR~1.GIF")) returned 1 [0042.772] FindNextFileW (in: hFindFile=0x381f40, lpFindFileData=0x31e38c | out: lpFindFileData=0x31e38c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9a4ceb00, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0x5f644b10, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x9a4ceb00, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0x4ebb, dwReserved0=0x0, dwReserved1=0x0, cFileName="bg_FormsHomePageBlank.gif", cAlternateFileName="BG_FOR~2.GIF")) returned 1 [0042.772] FindNextFileW (in: hFindFile=0x381f40, lpFindFileData=0x31e38c | out: lpFindFileData=0x31e38c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9a4ceb00, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0x5f644b10, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x9a4ceb00, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0x40f, dwReserved0=0x0, dwReserved1=0x0, cFileName="bg_FormsHomePageSlice.gif", cAlternateFileName="BG_FOR~3.GIF")) returned 1 [0042.772] FindNextFileW (in: hFindFile=0x381f40, lpFindFileData=0x31e38c | out: lpFindFileData=0x31e38c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9a4ceb00, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0x5f644b10, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x9a4ceb00, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0x5690, dwReserved0=0x0, dwReserved1=0x0, cFileName="bg_GreenTea.gif", cAlternateFileName="BG_GRE~1.GIF")) returned 1 [0042.772] FindNextFileW (in: hFindFile=0x381f40, lpFindFileData=0x31e38c | out: lpFindFileData=0x31e38c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9a4ceb00, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0x519a33f0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x9a4ceb00, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0x6a, dwReserved0=0x0, dwReserved1=0x0, cFileName="bg_Groove.gif", cAlternateFileName="BG_GRO~1.GIF")) returned 1 [0042.772] FindNextFileW (in: hFindFile=0x381f40, lpFindFileData=0x31e38c | out: lpFindFileData=0x31e38c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9a4ceb00, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0x519a33f0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x9a4ceb00, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0x21a6, dwReserved0=0x0, dwReserved1=0x0, cFileName="bg_LightSpirit.gif", cAlternateFileName="BG_LIG~1.GIF")) returned 1 [0042.772] FindNextFileW (in: hFindFile=0x381f40, lpFindFileData=0x31e38c | out: lpFindFileData=0x31e38c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9a4ceb00, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0x519a33f0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x9a4ceb00, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0x3d57, dwReserved0=0x0, dwReserved1=0x0, cFileName="bg_OliveGreen.gif", cAlternateFileName="BG_OLI~1.GIF")) returned 1 [0042.772] FindNextFileW (in: hFindFile=0x381f40, lpFindFileData=0x31e38c | out: lpFindFileData=0x31e38c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9a4ceb00, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0x5f66ac70, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x9a4ceb00, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0x1845, dwReserved0=0x0, dwReserved1=0x0, cFileName="bg_Premium.gif", cAlternateFileName="BG_PRE~1.GIF")) returned 1 [0042.772] FindNextFileW (in: hFindFile=0x381f40, lpFindFileData=0x31e38c | out: lpFindFileData=0x31e38c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9a4ceb00, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0x5f66ac70, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x9a4ceb00, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0x5141, dwReserved0=0x0, dwReserved1=0x0, cFileName="bg_SlateBlue.gif", cAlternateFileName="BG_SLA~1.GIF")) returned 1 [0042.772] FindNextFileW (in: hFindFile=0x381f40, lpFindFileData=0x31e38c | out: lpFindFileData=0x31e38c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9a4ceb00, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0x5f66ac70, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x9a4ceb00, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0x193c, dwReserved0=0x0, dwReserved1=0x0, cFileName="bg_TexturedBlue.gif", cAlternateFileName="BG_TEX~1.GIF")) returned 1 [0042.772] FindNextFileW (in: hFindFile=0x381f40, lpFindFileData=0x31e38c | out: lpFindFileData=0x31e38c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9a4ceb00, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0x519a33f0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x9a4ceb00, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0x3c64, dwReserved0=0x0, dwReserved1=0x0, cFileName="bg_VelvetRose.gif", cAlternateFileName="BG_VEL~1.GIF")) returned 1 [0042.772] FindNextFileW (in: hFindFile=0x381f40, lpFindFileData=0x31e38c | out: lpFindFileData=0x31e38c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9a4ceb00, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0x51b6c470, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x9a4ceb00, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0x171, dwReserved0=0x0, dwReserved1=0x0, cFileName="button_left.gif", cAlternateFileName="BUTTON~1.GIF")) returned 1 [0042.772] FindNextFileW (in: hFindFile=0x381f40, lpFindFileData=0x31e38c | out: lpFindFileData=0x31e38c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9b7e1800, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0x51b6c470, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x9b7e1800, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0x176, dwReserved0=0x0, dwReserved1=0x0, cFileName="button_left_over.gif", cAlternateFileName="BUTTON~2.GIF")) returned 1 [0042.772] FindNextFileW (in: hFindFile=0x381f40, lpFindFileData=0x31e38c | out: lpFindFileData=0x31e38c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9b7e1800, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0x51b925d0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x9b7e1800, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0xb5, dwReserved0=0x0, dwReserved1=0x0, cFileName="button_mid.gif", cAlternateFileName="BUTTON~3.GIF")) returned 1 [0042.772] FindNextFileW (in: hFindFile=0x381f40, lpFindFileData=0x31e38c | out: lpFindFileData=0x31e38c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9b7e1800, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0x60120f70, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x9b7e1800, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0xb7, dwReserved0=0x0, dwReserved1=0x0, cFileName="button_mid_over.gif", cAlternateFileName="BU1E84~1.GIF")) returned 1 [0042.772] FindNextFileW (in: hFindFile=0x381f40, lpFindFileData=0x31e38c | out: lpFindFileData=0x31e38c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9b7e1800, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0x51b925d0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x9b7e1800, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0x171, dwReserved0=0x0, dwReserved1=0x0, cFileName="button_right.gif", cAlternateFileName="BUTTON~4.GIF")) returned 1 [0042.772] FindNextFileW (in: hFindFile=0x381f40, lpFindFileData=0x31e38c | out: lpFindFileData=0x31e38c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9b7e1800, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0x51b925d0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x9b7e1800, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0x244, dwReserved0=0x0, dwReserved1=0x0, cFileName="button_right_over.gif", cAlternateFileName="BU4B4E~1.GIF")) returned 1 [0042.772] FindNextFileW (in: hFindFile=0x381f40, lpFindFileData=0x31e38c | out: lpFindFileData=0x31e38c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9b7e1800, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0x51bb8730, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x9b7e1800, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0x383, dwReserved0=0x0, dwReserved1=0x0, cFileName="CALENDAR.GIF", cAlternateFileName="")) returned 1 [0042.772] FindNextFileW (in: hFindFile=0x381f40, lpFindFileData=0x31e38c | out: lpFindFileData=0x31e38c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9b7e1800, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0x60760930, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x9b7e1800, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0x271, dwReserved0=0x0, dwReserved1=0x0, cFileName="DELETE.GIF", cAlternateFileName="")) returned 1 [0042.772] FindNextFileW (in: hFindFile=0x381f40, lpFindFileData=0x31e38c | out: lpFindFileData=0x31e38c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9b7e1800, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0x51fe2db0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x9b7e1800, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0x369, dwReserved0=0x0, dwReserved1=0x0, cFileName="ERROR.GIF", cAlternateFileName="")) returned 1 [0042.772] FindNextFileW (in: hFindFile=0x381f40, lpFindFileData=0x31e38c | out: lpFindFileData=0x31e38c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9b7e1800, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0x618a28b0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x9b7e1800, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0x13e, dwReserved0=0x0, dwReserved1=0x0, cFileName="FORM.ICO", cAlternateFileName="")) returned 1 [0042.772] FindNextFileW (in: hFindFile=0x381f40, lpFindFileData=0x31e38c | out: lpFindFileData=0x31e38c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9b7e1800, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0x618a28b0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x9b7e1800, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0x135f4, dwReserved0=0x0, dwReserved1=0x0, cFileName="FORM.JS", cAlternateFileName="")) returned 1 [0042.772] FindNextFileW (in: hFindFile=0x381f40, lpFindFileData=0x31e38c | out: lpFindFileData=0x31e38c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9b7e1800, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0x618c8a10, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x9b7e1800, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0x45f, dwReserved0=0x0, dwReserved1=0x0, cFileName="FormsBlankPage.html", cAlternateFileName="FORMSB~1.HTM")) returned 1 [0042.773] FindNextFileW (in: hFindFile=0x381f40, lpFindFileData=0x31e38c | out: lpFindFileData=0x31e38c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9b7e1800, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0x618c8a10, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x9b7e1800, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0x852, dwReserved0=0x0, dwReserved1=0x0, cFileName="FormsBrowserUpgrade.html", cAlternateFileName="FORMSB~2.HTM")) returned 1 [0042.777] FindNextFileW (in: hFindFile=0x381f40, lpFindFileData=0x31e38c | out: lpFindFileData=0x31e38c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9caf4500, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0x618c8a10, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x9caf4500, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0x2ef, dwReserved0=0x0, dwReserved1=0x0, cFileName="FormsColorChart.html", cAlternateFileName="FORMSC~1.HTM")) returned 1 [0042.777] FindNextFileW (in: hFindFile=0x381f40, lpFindFileData=0x31e38c | out: lpFindFileData=0x31e38c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9caf4500, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0x618c8a10, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x9caf4500, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0x115a, dwReserved0=0x0, dwReserved1=0x0, cFileName="FormsFormTemplate.html", cAlternateFileName="FORMSF~1.HTM")) returned 1 [0042.777] FindNextFileW (in: hFindFile=0x381f40, lpFindFileData=0x31e38c | out: lpFindFileData=0x31e38c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9caf4500, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0x5291c2f0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x9caf4500, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0xd9c, dwReserved0=0x0, dwReserved1=0x0, cFileName="FormsHomePage.html", cAlternateFileName="FORMSH~1.HTM")) returned 1 [0042.777] FindNextFileW (in: hFindFile=0x381f40, lpFindFileData=0x31e38c | out: lpFindFileData=0x31e38c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9caf4500, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0x618c8a10, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x9caf4500, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0x1e87, dwReserved0=0x0, dwReserved1=0x0, cFileName="FormsHomePageScript.js", cAlternateFileName="FORMSH~1.JS")) returned 1 [0042.777] FindNextFileW (in: hFindFile=0x381f40, lpFindFileData=0x31e38c | out: lpFindFileData=0x31e38c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9caf4500, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0x5291c2f0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x9caf4500, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0x314, dwReserved0=0x0, dwReserved1=0x0, cFileName="FormsHomePageStyle.css", cAlternateFileName="FORMSH~1.CSS")) returned 1 [0042.777] FindNextFileW (in: hFindFile=0x381f40, lpFindFileData=0x31e38c | out: lpFindFileData=0x31e38c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9caf4500, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0x5291c2f0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x9caf4500, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0x7f0, dwReserved0=0x0, dwReserved1=0x0, cFileName="FormsImageTemplate.html", cAlternateFileName="FORMSI~1.HTM")) returned 1 [0042.777] FindNextFileW (in: hFindFile=0x381f40, lpFindFileData=0x31e38c | out: lpFindFileData=0x31e38c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9caf4500, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0x5291c2f0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x9caf4500, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0x858, dwReserved0=0x0, dwReserved1=0x0, cFileName="FormsMacroTemplate.html", cAlternateFileName="FORMSM~1.HTM")) returned 1 [0042.777] FindNextFileW (in: hFindFile=0x381f40, lpFindFileData=0x31e38c | out: lpFindFileData=0x31e38c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9caf4500, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0x529685b0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x9caf4500, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0x46a3, dwReserved0=0x0, dwReserved1=0x0, cFileName="FormsPreviewTemplate.html", cAlternateFileName="FORMSP~1.HTM")) returned 1 [0042.778] FindNextFileW (in: hFindFile=0x381f40, lpFindFileData=0x31e38c | out: lpFindFileData=0x31e38c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9caf4500, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0x5298e710, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x9caf4500, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0x612, dwReserved0=0x0, dwReserved1=0x0, cFileName="FormsPrintTemplate.html", cAlternateFileName="FORMSP~2.HTM")) returned 1 [0042.778] FindNextFileW (in: hFindFile=0x381f40, lpFindFileData=0x31e38c | out: lpFindFileData=0x31e38c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5127f1f0, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x6d462ff0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x6d462ff0, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="FormsStyles", cAlternateFileName="FORMSS~1")) returned 1 [0042.778] FindNextFileW (in: hFindFile=0x381f40, lpFindFileData=0x31e38c | out: lpFindFileData=0x31e38c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa3d65300, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0x5298e710, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xa3d65300, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0x8f8, dwReserved0=0x0, dwReserved1=0x0, cFileName="FormsVersion1Warning.htm", cAlternateFileName="FORMSV~1.HTM")) returned 1 [0042.778] FindNextFileW (in: hFindFile=0x381f40, lpFindFileData=0x31e38c | out: lpFindFileData=0x31e38c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa3d65300, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0x618eeb70, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xa3d65300, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0x1499, dwReserved0=0x0, dwReserved1=0x0, cFileName="FormsViewAttachmentIcons.jpg", cAlternateFileName="FORMSV~1.JPG")) returned 1 [0042.778] FindNextFileW (in: hFindFile=0x381f40, lpFindFileData=0x31e38c | out: lpFindFileData=0x31e38c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa3d65300, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0x5298e710, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xa3d65300, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0x638, dwReserved0=0x0, dwReserved1=0x0, cFileName="FormsViewAttachmentIconsMask.bmp", cAlternateFileName="FORMSV~1.BMP")) returned 1 [0042.778] FindNextFileW (in: hFindFile=0x381f40, lpFindFileData=0x31e38c | out: lpFindFileData=0x31e38c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa3d65300, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0x529b4870, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xa3d65300, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0x164a, dwReserved0=0x0, dwReserved1=0x0, cFileName="FormsViewFrame.html", cAlternateFileName="FORMSV~2.HTM")) returned 1 [0042.778] FindNextFileW (in: hFindFile=0x381f40, lpFindFileData=0x31e38c | out: lpFindFileData=0x31e38c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa3d65300, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0x529b4870, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xa3d65300, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0xadf, dwReserved0=0x0, dwReserved1=0x0, cFileName="FormsViewTemplate.html", cAlternateFileName="FORMSV~3.HTM")) returned 1 [0042.778] FindNextFileW (in: hFindFile=0x381f40, lpFindFileData=0x31e38c | out: lpFindFileData=0x31e38c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa3d65300, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0x618eeb70, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xa3d65300, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0x1bfb, dwReserved0=0x0, dwReserved1=0x0, cFileName="FormToolImages.jpg", cAlternateFileName="FORMTO~1.JPG")) returned 1 [0042.778] FindNextFileW (in: hFindFile=0x381f40, lpFindFileData=0x31e38c | out: lpFindFileData=0x31e38c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9b7e1800, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0x618a28b0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x9b7e1800, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0x2577, dwReserved0=0x0, dwReserved1=0x0, cFileName="form_edit.js", cAlternateFileName="FORM_E~1.JS")) returned 1 [0042.778] FindNextFileW (in: hFindFile=0x381f40, lpFindFileData=0x31e38c | out: lpFindFileData=0x31e38c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa3d65300, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0x567e4730, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xa3d65300, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0x267, dwReserved0=0x0, dwReserved1=0x0, cFileName="LAUNCH.GIF", cAlternateFileName="")) returned 1 [0042.778] FindNextFileW (in: hFindFile=0x381f40, lpFindFileData=0x31e38c | out: lpFindFileData=0x31e38c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa3d65300, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0x58285d50, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xa3d65300, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0xa52f, dwReserved0=0x0, dwReserved1=0x0, cFileName="macroprogress.gif", cAlternateFileName="MACROP~1.GIF")) returned 1 [0042.778] FindNextFileW (in: hFindFile=0x381f40, lpFindFileData=0x31e38c | out: lpFindFileData=0x31e38c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa5078000, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0x5a76b250, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xa5078000, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0x21e5, dwReserved0=0x0, dwReserved1=0x0, cFileName="PublicFunctions.js", cAlternateFileName="PUBLIC~1.JS")) returned 1 [0042.778] FindNextFileW (in: hFindFile=0x381f40, lpFindFileData=0x31e38c | out: lpFindFileData=0x31e38c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa5078000, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0x6d227b50, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xa5078000, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0x350, dwReserved0=0x0, dwReserved1=0x0, cFileName="rtf_alignleft.gif", cAlternateFileName="RTF_AL~1.GIF")) returned 1 [0042.778] FindNextFileW (in: hFindFile=0x381f40, lpFindFileData=0x31e38c | out: lpFindFileData=0x31e38c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa5078000, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0x6d227b50, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xa5078000, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0x34f, dwReserved0=0x0, dwReserved1=0x0, cFileName="rtf_alignright.gif", cAlternateFileName="RTF_AL~2.GIF")) returned 1 [0042.778] FindNextFileW (in: hFindFile=0x381f40, lpFindFileData=0x31e38c | out: lpFindFileData=0x31e38c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa5078000, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0x5a8e8010, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xa5078000, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0x366, dwReserved0=0x0, dwReserved1=0x0, cFileName="RTF_BOLD.GIF", cAlternateFileName="")) returned 1 [0042.778] FindNextFileW (in: hFindFile=0x381f40, lpFindFileData=0x31e38c | out: lpFindFileData=0x31e38c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa5078000, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0x6d227b50, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xa5078000, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0x365, dwReserved0=0x0, dwReserved1=0x0, cFileName="rtf_bullets.gif", cAlternateFileName="RTF_BU~1.GIF")) returned 1 [0042.778] FindNextFileW (in: hFindFile=0x381f40, lpFindFileData=0x31e38c | out: lpFindFileData=0x31e38c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa5078000, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0x6d227b50, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xa5078000, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0x34f, dwReserved0=0x0, dwReserved1=0x0, cFileName="rtf_center.gif", cAlternateFileName="RTF_CE~1.GIF")) returned 1 [0042.778] FindNextFileW (in: hFindFile=0x381f40, lpFindFileData=0x31e38c | out: lpFindFileData=0x31e38c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa5078000, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0x6d227b50, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xa5078000, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0x3ec, dwReserved0=0x0, dwReserved1=0x0, cFileName="rtf_choosecolor.gif", cAlternateFileName="RTF_CH~1.GIF")) returned 1 [0042.778] FindNextFileW (in: hFindFile=0x381f40, lpFindFileData=0x31e38c | out: lpFindFileData=0x31e38c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa5078000, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0x6d227b50, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xa5078000, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0x37a, dwReserved0=0x0, dwReserved1=0x0, cFileName="rtf_choosefont.gif", cAlternateFileName="RTF_CH~2.GIF")) returned 1 [0042.778] FindNextFileW (in: hFindFile=0x381f40, lpFindFileData=0x31e38c | out: lpFindFileData=0x31e38c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa5078000, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0x5a8e8010, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xa5078000, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0x35f, dwReserved0=0x0, dwReserved1=0x0, cFileName="rtf_decreaseindent.gif", cAlternateFileName="RTF_DE~1.GIF")) returned 1 [0042.778] FindNextFileW (in: hFindFile=0x381f40, lpFindFileData=0x31e38c | out: lpFindFileData=0x31e38c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa5078000, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0x6d227b50, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xa5078000, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0xf1, dwReserved0=0x0, dwReserved1=0x0, cFileName="rtf_hyperlink.gif", cAlternateFileName="RTF_HY~1.GIF")) returned 1 [0042.779] FindNextFileW (in: hFindFile=0x381f40, lpFindFileData=0x31e38c | out: lpFindFileData=0x31e38c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa5078000, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0x5a8e8010, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xa5078000, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0x35d, dwReserved0=0x0, dwReserved1=0x0, cFileName="rtf_increaseindent.gif", cAlternateFileName="RTF_IN~1.GIF")) returned 1 [0042.779] FindNextFileW (in: hFindFile=0x381f40, lpFindFileData=0x31e38c | out: lpFindFileData=0x31e38c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa5078000, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0x5a90e170, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xa5078000, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0x354, dwReserved0=0x0, dwReserved1=0x0, cFileName="rtf_italic.gif", cAlternateFileName="RTF_IT~1.GIF")) returned 1 [0042.779] FindNextFileW (in: hFindFile=0x381f40, lpFindFileData=0x31e38c | out: lpFindFileData=0x31e38c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa638ad00, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0x5a90e170, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xa638ad00, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0x352, dwReserved0=0x0, dwReserved1=0x0, cFileName="rtf_justify.gif", cAlternateFileName="RTF_JU~1.GIF")) returned 1 [0042.779] FindNextFileW (in: hFindFile=0x381f40, lpFindFileData=0x31e38c | out: lpFindFileData=0x31e38c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa638ad00, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0x5a90e170, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xa638ad00, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0x373, dwReserved0=0x0, dwReserved1=0x0, cFileName="rtf_pressed.gif", cAlternateFileName="RTF_PR~1.GIF")) returned 1 [0042.779] FindNextFileW (in: hFindFile=0x381f40, lpFindFileData=0x31e38c | out: lpFindFileData=0x31e38c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa638ad00, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0x5a90e170, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xa638ad00, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0xa0, dwReserved0=0x0, dwReserved1=0x0, cFileName="rtf_spellcheck.gif", cAlternateFileName="RTF_SP~1.GIF")) returned 1 [0042.779] FindNextFileW (in: hFindFile=0x381f40, lpFindFileData=0x31e38c | out: lpFindFileData=0x31e38c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa638ad00, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0x6d24dcb0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xa638ad00, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0x35c, dwReserved0=0x0, dwReserved1=0x0, cFileName="rtf_underline.gif", cAlternateFileName="RTF_UN~1.GIF")) returned 1 [0042.779] FindNextFileW (in: hFindFile=0x381f40, lpFindFileData=0x31e38c | out: lpFindFileData=0x31e38c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa638ad00, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0x6d24dcb0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xa638ad00, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0x267, dwReserved0=0x0, dwReserved1=0x0, cFileName="SAVE.GIF", cAlternateFileName="")) returned 1 [0042.779] FindNextFileW (in: hFindFile=0x381f40, lpFindFileData=0x31e38c | out: lpFindFileData=0x31e38c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa638ad00, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0x6d416d30, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xa638ad00, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0x14307, dwReserved0=0x0, dwReserved1=0x0, cFileName="SUBMIT.JS", cAlternateFileName="")) returned 1 [0042.779] FindNextFileW (in: hFindFile=0x381f40, lpFindFileData=0x31e38c | out: lpFindFileData=0x31e38c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa638ad00, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0x70685f50, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xa638ad00, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0xca5a, dwReserved0=0x0, dwReserved1=0x0, cFileName="utilityfunctions.js", cAlternateFileName="UTILIT~1.JS")) returned 1 [0042.779] FindNextFileW (in: hFindFile=0x381f40, lpFindFileData=0x31e38c | out: lpFindFileData=0x31e38c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa638ad00, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0x70685f50, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xa638ad00, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0x64b3, dwReserved0=0x0, dwReserved1=0x0, cFileName="validation.js", cAlternateFileName="VALIDA~1.JS")) returned 1 [0042.779] FindNextFileW (in: hFindFile=0x381f40, lpFindFileData=0x31e38c | out: lpFindFileData=0x31e38c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa638ad00, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0x706f8370, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xa638ad00, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0x13e, dwReserved0=0x0, dwReserved1=0x0, cFileName="VIEW.ICO", cAlternateFileName="")) returned 1 [0042.779] FindNextFileW (in: hFindFile=0x381f40, lpFindFileData=0x31e38c | out: lpFindFileData=0x31e38c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa638ad00, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0x5e490770, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xa638ad00, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0x2095, dwReserved0=0x0, dwReserved1=0x0, cFileName="VIEW.JS", cAlternateFileName="")) returned 1 [0042.779] FindNextFileW (in: hFindFile=0x381f40, lpFindFileData=0x31e38c | out: lpFindFileData=0x31e38c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa638ad00, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0x706f8370, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xa638ad00, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0xd78, dwReserved0=0x0, dwReserved1=0x0, cFileName="ViewHeaderPreview.jpg", cAlternateFileName="VIEWHE~1.JPG")) returned 1 [0042.779] FindNextFileW (in: hFindFile=0x381f40, lpFindFileData=0x31e38c | out: lpFindFileData=0x31e38c*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0042.779] FindClose (in: hFindFile=0x381f40 | out: hFindFile=0x381f40) returned 1 [0042.780] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e614) returned 1 [0042.780] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e620) returned 1 [0042.780] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e654) returned 1 [0042.780] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4", nBufferLength=0x105, lpBuffer=0x31e15c, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4", lpFilePart=0x0) returned 0x52 [0042.780] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\", nBufferLength=0x105, lpBuffer=0x31e130, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\", lpFilePart=0x0) returned 0x53 [0042.780] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\*", lpFindFileData=0x31e37c | out: lpFindFileData=0x31e37c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5127f1f0, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x706f8370, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x706f8370, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x381f40 [0042.781] FindNextFileW (in: hFindFile=0x381f40, lpFindFileData=0x31e38c | out: lpFindFileData=0x31e38c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5127f1f0, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x706f8370, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x706f8370, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0042.781] FindNextFileW (in: hFindFile=0x381f40, lpFindFileData=0x31e38c | out: lpFindFileData=0x31e38c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x991bbe00, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0x5eaf6290, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x991bbe00, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0x244, dwReserved0=0x0, dwReserved1=0x0, cFileName="ADD.GIF", cAlternateFileName="")) returned 1 [0042.781] FindNextFileW (in: hFindFile=0x381f40, lpFindFileData=0x31e38c | out: lpFindFileData=0x31e38c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x991bbe00, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0x5127f1f0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x991bbe00, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0xbe8, dwReserved0=0x0, dwReserved1=0x0, cFileName="AddToViewArrow.jpg", cAlternateFileName="ADDTOV~1.JPG")) returned 1 [0042.781] FindNextFileW (in: hFindFile=0x381f40, lpFindFileData=0x31e38c | out: lpFindFileData=0x31e38c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x991bbe00, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0x5eaf6290, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x991bbe00, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0x924, dwReserved0=0x0, dwReserved1=0x0, cFileName="AddToViewArrowMask.bmp", cAlternateFileName="ADDTOV~1.BMP")) returned 1 [0042.781] FindNextFileW (in: hFindFile=0x381f40, lpFindFileData=0x31e38c | out: lpFindFileData=0x31e38c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x991bbe00, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0x51767f50, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x991bbe00, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0xae8, dwReserved0=0x0, dwReserved1=0x0, cFileName="attention.gif", cAlternateFileName="ATTENT~1.GIF")) returned 1 [0042.781] FindNextFileW (in: hFindFile=0x381f40, lpFindFileData=0x31e38c | out: lpFindFileData=0x31e38c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x991bbe00, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0x5f61e9b0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x991bbe00, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0x614e, dwReserved0=0x0, dwReserved1=0x0, cFileName="BG_ADOBE.GIF", cAlternateFileName="")) returned 1 [0042.781] FindNextFileW (in: hFindFile=0x381f40, lpFindFileData=0x31e38c | out: lpFindFileData=0x31e38c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x991bbe00, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0x5197d290, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x991bbe00, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0x161d, dwReserved0=0x0, dwReserved1=0x0, cFileName="bg_Casual.gif", cAlternateFileName="BG_CAS~1.GIF")) returned 1 [0042.781] FindNextFileW (in: hFindFile=0x381f40, lpFindFileData=0x31e38c | out: lpFindFileData=0x31e38c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x991bbe00, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0x519a33f0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x991bbe00, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0x7dd3, dwReserved0=0x0, dwReserved1=0x0, cFileName="bg_Country.gif", cAlternateFileName="BG_COU~1.GIF")) returned 1 [0042.781] FindNextFileW (in: hFindFile=0x381f40, lpFindFileData=0x31e38c | out: lpFindFileData=0x31e38c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9a4ceb00, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0x519a33f0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x9a4ceb00, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0x132a, dwReserved0=0x0, dwReserved1=0x0, cFileName="bg_Earthy.gif", cAlternateFileName="BG_EAR~1.GIF")) returned 1 [0042.781] FindNextFileW (in: hFindFile=0x381f40, lpFindFileData=0x31e38c | out: lpFindFileData=0x31e38c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9a4ceb00, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0x5f644b10, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x9a4ceb00, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0x167bd, dwReserved0=0x0, dwReserved1=0x0, cFileName="bg_FormsHomePage.gif", cAlternateFileName="BG_FOR~1.GIF")) returned 1 [0042.781] FindNextFileW (in: hFindFile=0x381f40, lpFindFileData=0x31e38c | out: lpFindFileData=0x31e38c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9a4ceb00, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0x5f644b10, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x9a4ceb00, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0x4ebb, dwReserved0=0x0, dwReserved1=0x0, cFileName="bg_FormsHomePageBlank.gif", cAlternateFileName="BG_FOR~2.GIF")) returned 1 [0042.781] FindNextFileW (in: hFindFile=0x381f40, lpFindFileData=0x31e38c | out: lpFindFileData=0x31e38c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9a4ceb00, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0x5f644b10, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x9a4ceb00, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0x40f, dwReserved0=0x0, dwReserved1=0x0, cFileName="bg_FormsHomePageSlice.gif", cAlternateFileName="BG_FOR~3.GIF")) returned 1 [0042.781] FindNextFileW (in: hFindFile=0x381f40, lpFindFileData=0x31e38c | out: lpFindFileData=0x31e38c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9a4ceb00, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0x5f644b10, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x9a4ceb00, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0x5690, dwReserved0=0x0, dwReserved1=0x0, cFileName="bg_GreenTea.gif", cAlternateFileName="BG_GRE~1.GIF")) returned 1 [0042.782] FindNextFileW (in: hFindFile=0x381f40, lpFindFileData=0x31e38c | out: lpFindFileData=0x31e38c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9a4ceb00, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0x519a33f0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x9a4ceb00, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0x6a, dwReserved0=0x0, dwReserved1=0x0, cFileName="bg_Groove.gif", cAlternateFileName="BG_GRO~1.GIF")) returned 1 [0042.782] FindNextFileW (in: hFindFile=0x381f40, lpFindFileData=0x31e38c | out: lpFindFileData=0x31e38c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9a4ceb00, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0x519a33f0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x9a4ceb00, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0x21a6, dwReserved0=0x0, dwReserved1=0x0, cFileName="bg_LightSpirit.gif", cAlternateFileName="BG_LIG~1.GIF")) returned 1 [0042.782] FindNextFileW (in: hFindFile=0x381f40, lpFindFileData=0x31e38c | out: lpFindFileData=0x31e38c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9a4ceb00, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0x519a33f0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x9a4ceb00, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0x3d57, dwReserved0=0x0, dwReserved1=0x0, cFileName="bg_OliveGreen.gif", cAlternateFileName="BG_OLI~1.GIF")) returned 1 [0042.782] FindNextFileW (in: hFindFile=0x381f40, lpFindFileData=0x31e38c | out: lpFindFileData=0x31e38c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9a4ceb00, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0x5f66ac70, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x9a4ceb00, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0x1845, dwReserved0=0x0, dwReserved1=0x0, cFileName="bg_Premium.gif", cAlternateFileName="BG_PRE~1.GIF")) returned 1 [0042.782] FindNextFileW (in: hFindFile=0x381f40, lpFindFileData=0x31e38c | out: lpFindFileData=0x31e38c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9a4ceb00, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0x5f66ac70, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x9a4ceb00, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0x5141, dwReserved0=0x0, dwReserved1=0x0, cFileName="bg_SlateBlue.gif", cAlternateFileName="BG_SLA~1.GIF")) returned 1 [0042.782] FindNextFileW (in: hFindFile=0x381f40, lpFindFileData=0x31e38c | out: lpFindFileData=0x31e38c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9a4ceb00, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0x5f66ac70, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x9a4ceb00, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0x193c, dwReserved0=0x0, dwReserved1=0x0, cFileName="bg_TexturedBlue.gif", cAlternateFileName="BG_TEX~1.GIF")) returned 1 [0042.782] FindNextFileW (in: hFindFile=0x381f40, lpFindFileData=0x31e38c | out: lpFindFileData=0x31e38c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9a4ceb00, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0x519a33f0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x9a4ceb00, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0x3c64, dwReserved0=0x0, dwReserved1=0x0, cFileName="bg_VelvetRose.gif", cAlternateFileName="BG_VEL~1.GIF")) returned 1 [0042.782] FindNextFileW (in: hFindFile=0x381f40, lpFindFileData=0x31e38c | out: lpFindFileData=0x31e38c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9a4ceb00, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0x51b6c470, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x9a4ceb00, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0x171, dwReserved0=0x0, dwReserved1=0x0, cFileName="button_left.gif", cAlternateFileName="BUTTON~1.GIF")) returned 1 [0042.782] FindNextFileW (in: hFindFile=0x381f40, lpFindFileData=0x31e38c | out: lpFindFileData=0x31e38c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9b7e1800, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0x51b6c470, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x9b7e1800, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0x176, dwReserved0=0x0, dwReserved1=0x0, cFileName="button_left_over.gif", cAlternateFileName="BUTTON~2.GIF")) returned 1 [0042.782] FindNextFileW (in: hFindFile=0x381f40, lpFindFileData=0x31e38c | out: lpFindFileData=0x31e38c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9b7e1800, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0x51b925d0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x9b7e1800, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0xb5, dwReserved0=0x0, dwReserved1=0x0, cFileName="button_mid.gif", cAlternateFileName="BUTTON~3.GIF")) returned 1 [0042.782] FindNextFileW (in: hFindFile=0x381f40, lpFindFileData=0x31e38c | out: lpFindFileData=0x31e38c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9b7e1800, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0x60120f70, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x9b7e1800, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0xb7, dwReserved0=0x0, dwReserved1=0x0, cFileName="button_mid_over.gif", cAlternateFileName="BU1E84~1.GIF")) returned 1 [0042.782] FindNextFileW (in: hFindFile=0x381f40, lpFindFileData=0x31e38c | out: lpFindFileData=0x31e38c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9b7e1800, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0x51b925d0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x9b7e1800, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0x171, dwReserved0=0x0, dwReserved1=0x0, cFileName="button_right.gif", cAlternateFileName="BUTTON~4.GIF")) returned 1 [0042.782] FindNextFileW (in: hFindFile=0x381f40, lpFindFileData=0x31e38c | out: lpFindFileData=0x31e38c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9b7e1800, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0x51b925d0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x9b7e1800, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0x244, dwReserved0=0x0, dwReserved1=0x0, cFileName="button_right_over.gif", cAlternateFileName="BU4B4E~1.GIF")) returned 1 [0042.782] FindNextFileW (in: hFindFile=0x381f40, lpFindFileData=0x31e38c | out: lpFindFileData=0x31e38c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9b7e1800, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0x51bb8730, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x9b7e1800, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0x383, dwReserved0=0x0, dwReserved1=0x0, cFileName="CALENDAR.GIF", cAlternateFileName="")) returned 1 [0042.782] FindNextFileW (in: hFindFile=0x381f40, lpFindFileData=0x31e38c | out: lpFindFileData=0x31e38c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9b7e1800, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0x60760930, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x9b7e1800, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0x271, dwReserved0=0x0, dwReserved1=0x0, cFileName="DELETE.GIF", cAlternateFileName="")) returned 1 [0042.782] FindNextFileW (in: hFindFile=0x381f40, lpFindFileData=0x31e38c | out: lpFindFileData=0x31e38c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9b7e1800, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0x51fe2db0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x9b7e1800, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0x369, dwReserved0=0x0, dwReserved1=0x0, cFileName="ERROR.GIF", cAlternateFileName="")) returned 1 [0042.782] FindNextFileW (in: hFindFile=0x381f40, lpFindFileData=0x31e38c | out: lpFindFileData=0x31e38c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9b7e1800, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0x618a28b0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x9b7e1800, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0x13e, dwReserved0=0x0, dwReserved1=0x0, cFileName="FORM.ICO", cAlternateFileName="")) returned 1 [0042.782] FindNextFileW (in: hFindFile=0x381f40, lpFindFileData=0x31e38c | out: lpFindFileData=0x31e38c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9b7e1800, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0x618a28b0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x9b7e1800, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0x135f4, dwReserved0=0x0, dwReserved1=0x0, cFileName="FORM.JS", cAlternateFileName="")) returned 1 [0042.782] FindNextFileW (in: hFindFile=0x381f40, lpFindFileData=0x31e38c | out: lpFindFileData=0x31e38c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9b7e1800, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0x618c8a10, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x9b7e1800, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0x45f, dwReserved0=0x0, dwReserved1=0x0, cFileName="FormsBlankPage.html", cAlternateFileName="FORMSB~1.HTM")) returned 1 [0042.782] FindNextFileW (in: hFindFile=0x381f40, lpFindFileData=0x31e38c | out: lpFindFileData=0x31e38c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9b7e1800, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0x618c8a10, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x9b7e1800, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0x852, dwReserved0=0x0, dwReserved1=0x0, cFileName="FormsBrowserUpgrade.html", cAlternateFileName="FORMSB~2.HTM")) returned 1 [0042.783] FindClose (in: hFindFile=0x381f40 | out: hFindFile=0x381f40) returned 1 [0042.784] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e614) returned 1 [0042.784] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e620) returned 1 [0042.784] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\AddToViewArrow.jpg", nBufferLength=0x105, lpBuffer=0x31e02c, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\AddToViewArrow.jpg", lpFilePart=0x0) returned 0x65 [0042.784] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e520) returned 1 [0042.784] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\AddToViewArrow.jpg" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms4\\addtoviewarrow.jpg"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x274 [0042.785] GetFileType (hFile=0x274) returned 0x1 [0042.785] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e51c) returned 1 [0042.785] GetFileType (hFile=0x274) returned 0x1 [0042.785] GetFileSize (in: hFile=0x274, lpFileSizeHigh=0x31e628 | out: lpFileSizeHigh=0x31e628*=0x0) returned 0xbe8 [0042.785] ReadFile (in: hFile=0x274, lpBuffer=0x27a29d4, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x31e5d4, lpOverlapped=0x0 | out: lpBuffer=0x27a29d4*, lpNumberOfBytesRead=0x31e5d4*=0xbe8, lpOverlapped=0x0) returned 1 [0042.800] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\AddToViewArrow.jpg", nBufferLength=0x105, lpBuffer=0x31e018, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\AddToViewArrow.jpg", lpFilePart=0x0) returned 0x65 [0042.800] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e50c) returned 1 [0042.800] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\AddToViewArrow.jpg" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms4\\addtoviewarrow.jpg"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x274 [0042.801] GetFileType (hFile=0x274) returned 0x1 [0042.801] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e508) returned 1 [0042.801] GetFileType (hFile=0x274) returned 0x1 [0042.801] WriteFile (in: hFile=0x274, lpBuffer=0x27f44e4*, nNumberOfBytesToWrite=0xbf0, lpNumberOfBytesWritten=0x31e59c, lpOverlapped=0x0 | out: lpBuffer=0x27f44e4*, lpNumberOfBytesWritten=0x31e59c*=0xbf0, lpOverlapped=0x0) returned 1 [0042.803] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\AddToViewArrow.jpg", nBufferLength=0x105, lpBuffer=0x31e14c, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\AddToViewArrow.jpg", lpFilePart=0x0) returned 0x65 [0042.803] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\AddToViewArrow.jpg", nBufferLength=0x105, lpBuffer=0x31e14c, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\AddToViewArrow.jpg", lpFilePart=0x0) returned 0x65 [0042.803] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e5ac) returned 1 [0042.803] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\AddToViewArrow.jpg" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms4\\addtoviewarrow.jpg"), fInfoLevelId=0x0, lpFileInformation=0x31e628 | out: lpFileInformation=0x31e628*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x991bbe00, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0x5127f1f0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xfcf660a0, ftLastWriteTime.dwHighDateTime=0x1d6eb7e, nFileSizeHigh=0x0, nFileSizeLow=0xbf0)) returned 1 [0042.803] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e5a8) returned 1 [0042.803] MoveFileW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\AddToViewArrow.jpg" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms4\\addtoviewarrow.jpg"), lpNewFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\AddToViewArrow.jpg" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms4\\addtoviewarrow.jpg")) returned 1 [0042.804] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\AddToViewArrowMask.bmp", nBufferLength=0x105, lpBuffer=0x31e02c, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\AddToViewArrowMask.bmp", lpFilePart=0x0) returned 0x69 [0042.804] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e520) returned 1 [0042.804] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\AddToViewArrowMask.bmp" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms4\\addtoviewarrowmask.bmp"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x274 [0042.804] GetFileType (hFile=0x274) returned 0x1 [0042.804] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e51c) returned 1 [0042.804] GetFileType (hFile=0x274) returned 0x1 [0042.804] GetFileSize (in: hFile=0x274, lpFileSizeHigh=0x31e628 | out: lpFileSizeHigh=0x31e628*=0x0) returned 0x924 [0042.804] ReadFile (in: hFile=0x274, lpBuffer=0x27f6160, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x31e5d4, lpOverlapped=0x0 | out: lpBuffer=0x27f6160*, lpNumberOfBytesRead=0x31e5d4*=0x924, lpOverlapped=0x0) returned 1 [0042.819] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\AddToViewArrowMask.bmp", nBufferLength=0x105, lpBuffer=0x31e018, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\AddToViewArrowMask.bmp", lpFilePart=0x0) returned 0x69 [0042.819] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e50c) returned 1 [0042.819] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\AddToViewArrowMask.bmp" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms4\\addtoviewarrowmask.bmp"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x274 [0042.820] GetFileType (hFile=0x274) returned 0x1 [0042.820] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e508) returned 1 [0042.820] GetFileType (hFile=0x274) returned 0x1 [0042.820] WriteFile (in: hFile=0x274, lpBuffer=0x2846ec4*, nNumberOfBytesToWrite=0x930, lpNumberOfBytesWritten=0x31e59c, lpOverlapped=0x0 | out: lpBuffer=0x2846ec4*, lpNumberOfBytesWritten=0x31e59c*=0x930, lpOverlapped=0x0) returned 1 [0042.821] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\AddToViewArrowMask.bmp", nBufferLength=0x105, lpBuffer=0x31e14c, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\AddToViewArrowMask.bmp", lpFilePart=0x0) returned 0x69 [0042.821] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\AddToViewArrowMask.bmp", nBufferLength=0x105, lpBuffer=0x31e14c, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\AddToViewArrowMask.bmp", lpFilePart=0x0) returned 0x69 [0042.821] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e5ac) returned 1 [0042.821] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\AddToViewArrowMask.bmp" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms4\\addtoviewarrowmask.bmp"), fInfoLevelId=0x0, lpFileInformation=0x31e628 | out: lpFileInformation=0x31e628*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x991bbe00, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0x5eaf6290, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xfcf8c200, ftLastWriteTime.dwHighDateTime=0x1d6eb7e, nFileSizeHigh=0x0, nFileSizeLow=0x930)) returned 1 [0042.821] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e5a8) returned 1 [0042.821] MoveFileW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\AddToViewArrowMask.bmp" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms4\\addtoviewarrowmask.bmp"), lpNewFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\AddToViewArrowMask.bmp" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms4\\addtoviewarrowmask.bmp")) returned 1 [0042.822] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsBlankPage.html", nBufferLength=0x105, lpBuffer=0x31e02c, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsBlankPage.html", lpFilePart=0x0) returned 0x66 [0042.822] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e520) returned 1 [0042.822] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsBlankPage.html" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms4\\formsblankpage.html"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x274 [0042.823] GetFileType (hFile=0x274) returned 0x1 [0042.823] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e51c) returned 1 [0042.823] GetFileType (hFile=0x274) returned 0x1 [0042.823] GetFileSize (in: hFile=0x274, lpFileSizeHigh=0x31e628 | out: lpFileSizeHigh=0x31e628*=0x0) returned 0x45f [0042.823] ReadFile (in: hFile=0x274, lpBuffer=0x2848904, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x31e5d4, lpOverlapped=0x0 | out: lpBuffer=0x2848904*, lpNumberOfBytesRead=0x31e5d4*=0x45f, lpOverlapped=0x0) returned 1 [0042.840] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsBlankPage.html", nBufferLength=0x105, lpBuffer=0x31e018, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsBlankPage.html", lpFilePart=0x0) returned 0x66 [0042.841] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e50c) returned 1 [0042.841] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsBlankPage.html" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms4\\formsblankpage.html"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x274 [0042.841] GetFileType (hFile=0x274) returned 0x1 [0042.841] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e508) returned 1 [0042.841] GetFileType (hFile=0x274) returned 0x1 [0042.842] WriteFile (in: hFile=0x274, lpBuffer=0x269516c*, nNumberOfBytesToWrite=0x460, lpNumberOfBytesWritten=0x31e59c, lpOverlapped=0x0 | out: lpBuffer=0x269516c*, lpNumberOfBytesWritten=0x31e59c*=0x460, lpOverlapped=0x0) returned 1 [0042.842] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsBlankPage.html", nBufferLength=0x105, lpBuffer=0x31e14c, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsBlankPage.html", lpFilePart=0x0) returned 0x66 [0042.842] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsBlankPage.html", nBufferLength=0x105, lpBuffer=0x31e14c, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsBlankPage.html", lpFilePart=0x0) returned 0x66 [0042.843] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e5ac) returned 1 [0042.843] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsBlankPage.html" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms4\\formsblankpage.html"), fInfoLevelId=0x0, lpFileInformation=0x31e628 | out: lpFileInformation=0x31e628*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9b7e1800, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0x618c8a10, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xfcfd84c0, ftLastWriteTime.dwHighDateTime=0x1d6eb7e, nFileSizeHigh=0x0, nFileSizeLow=0x460)) returned 1 [0042.843] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e5a8) returned 1 [0042.843] MoveFileW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsBlankPage.html" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms4\\formsblankpage.html"), lpNewFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsBlankPage.html" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms4\\formsblankpage.html")) returned 1 [0042.844] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsBrowserUpgrade.html", nBufferLength=0x105, lpBuffer=0x31e02c, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsBrowserUpgrade.html", lpFilePart=0x0) returned 0x6b [0042.844] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e520) returned 1 [0042.844] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsBrowserUpgrade.html" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms4\\formsbrowserupgrade.html"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x274 [0042.844] GetFileType (hFile=0x274) returned 0x1 [0042.844] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e51c) returned 1 [0042.845] GetFileType (hFile=0x274) returned 0x1 [0042.845] GetFileSize (in: hFile=0x274, lpFileSizeHigh=0x31e628 | out: lpFileSizeHigh=0x31e628*=0x0) returned 0x852 [0042.845] ReadFile (in: hFile=0x274, lpBuffer=0x2696d28, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x31e5d4, lpOverlapped=0x0 | out: lpBuffer=0x2696d28*, lpNumberOfBytesRead=0x31e5d4*=0x852, lpOverlapped=0x0) returned 1 [0042.940] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsBrowserUpgrade.html", nBufferLength=0x105, lpBuffer=0x31e018, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsBrowserUpgrade.html", lpFilePart=0x0) returned 0x6b [0042.940] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e50c) returned 1 [0042.940] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsBrowserUpgrade.html" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms4\\formsbrowserupgrade.html"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x274 [0042.941] GetFileType (hFile=0x274) returned 0x1 [0042.941] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e508) returned 1 [0042.941] GetFileType (hFile=0x274) returned 0x1 [0042.941] WriteFile (in: hFile=0x274, lpBuffer=0x26e77e4*, nNumberOfBytesToWrite=0x860, lpNumberOfBytesWritten=0x31e59c, lpOverlapped=0x0 | out: lpBuffer=0x26e77e4*, lpNumberOfBytesWritten=0x31e59c*=0x860, lpOverlapped=0x0) returned 1 [0042.942] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsBrowserUpgrade.html", nBufferLength=0x105, lpBuffer=0x31e14c, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsBrowserUpgrade.html", lpFilePart=0x0) returned 0x6b [0042.942] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsBrowserUpgrade.html", nBufferLength=0x105, lpBuffer=0x31e14c, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsBrowserUpgrade.html", lpFilePart=0x0) returned 0x6b [0042.942] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e5ac) returned 1 [0042.942] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsBrowserUpgrade.html" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms4\\formsbrowserupgrade.html"), fInfoLevelId=0x0, lpFileInformation=0x31e628 | out: lpFileInformation=0x31e628*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9b7e1800, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0x618c8a10, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xfd0bcd00, ftLastWriteTime.dwHighDateTime=0x1d6eb7e, nFileSizeHigh=0x0, nFileSizeLow=0x860)) returned 1 [0042.942] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e5a8) returned 1 [0042.942] MoveFileW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsBrowserUpgrade.html" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms4\\formsbrowserupgrade.html"), lpNewFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsBrowserUpgrade.html" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms4\\formsbrowserupgrade.html")) returned 1 [0042.944] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsColorChart.html", nBufferLength=0x105, lpBuffer=0x31e02c, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsColorChart.html", lpFilePart=0x0) returned 0x67 [0042.944] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e520) returned 1 [0042.944] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsColorChart.html" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms4\\formscolorchart.html"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x274 [0042.944] GetFileType (hFile=0x274) returned 0x1 [0042.944] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e51c) returned 1 [0042.944] GetFileType (hFile=0x274) returned 0x1 [0042.944] GetFileSize (in: hFile=0x274, lpFileSizeHigh=0x31e628 | out: lpFileSizeHigh=0x31e628*=0x0) returned 0x2ef [0042.944] ReadFile (in: hFile=0x274, lpBuffer=0x26e8e3c, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x31e5d4, lpOverlapped=0x0 | out: lpBuffer=0x26e8e3c*, lpNumberOfBytesRead=0x31e5d4*=0x2ef, lpOverlapped=0x0) returned 1 [0042.959] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsColorChart.html", nBufferLength=0x105, lpBuffer=0x31e018, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsColorChart.html", lpFilePart=0x0) returned 0x67 [0042.959] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e50c) returned 1 [0042.959] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsColorChart.html" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms4\\formscolorchart.html"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x274 [0042.960] GetFileType (hFile=0x274) returned 0x1 [0042.960] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e508) returned 1 [0042.960] GetFileType (hFile=0x274) returned 0x1 [0042.961] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsColorChart.html", nBufferLength=0x105, lpBuffer=0x31e14c, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsColorChart.html", lpFilePart=0x0) returned 0x67 [0042.961] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsColorChart.html", nBufferLength=0x105, lpBuffer=0x31e14c, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsColorChart.html", lpFilePart=0x0) returned 0x67 [0042.961] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e5ac) returned 1 [0042.961] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsColorChart.html" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms4\\formscolorchart.html"), fInfoLevelId=0x0, lpFileInformation=0x31e628 | out: lpFileInformation=0x31e628*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9caf4500, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0x618c8a10, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xfd0e2e60, ftLastWriteTime.dwHighDateTime=0x1d6eb7e, nFileSizeHigh=0x0, nFileSizeLow=0x2f0)) returned 1 [0042.961] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e5a8) returned 1 [0042.961] MoveFileW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsColorChart.html" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms4\\formscolorchart.html"), lpNewFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsColorChart.html" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms4\\formscolorchart.html")) returned 1 [0042.962] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsFormTemplate.html", nBufferLength=0x105, lpBuffer=0x31e02c, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsFormTemplate.html", lpFilePart=0x0) returned 0x69 [0042.962] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e520) returned 1 [0042.962] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsFormTemplate.html" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms4\\formsformtemplate.html"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x274 [0042.962] GetFileType (hFile=0x274) returned 0x1 [0042.962] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e51c) returned 1 [0042.962] GetFileType (hFile=0x274) returned 0x1 [0042.962] GetFileSize (in: hFile=0x274, lpFileSizeHigh=0x31e628 | out: lpFileSizeHigh=0x31e628*=0x0) returned 0x115a [0042.962] ReadFile (in: hFile=0x274, lpBuffer=0x2738fa4, nNumberOfBytesToRead=0x115a, lpNumberOfBytesRead=0x31e5d4, lpOverlapped=0x0 | out: lpBuffer=0x2738fa4*, lpNumberOfBytesRead=0x31e5d4*=0x115a, lpOverlapped=0x0) returned 1 [0042.979] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsFormTemplate.html", nBufferLength=0x105, lpBuffer=0x31e018, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsFormTemplate.html", lpFilePart=0x0) returned 0x69 [0042.979] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e50c) returned 1 [0042.979] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsFormTemplate.html" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms4\\formsformtemplate.html"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x274 [0042.981] GetFileType (hFile=0x274) returned 0x1 [0042.981] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e508) returned 1 [0042.981] GetFileType (hFile=0x274) returned 0x1 [0042.981] WriteFile (in: hFile=0x274, lpBuffer=0x278b46c*, nNumberOfBytesToWrite=0x1160, lpNumberOfBytesWritten=0x31e5c8, lpOverlapped=0x0 | out: lpBuffer=0x278b46c*, lpNumberOfBytesWritten=0x31e5c8*=0x1160, lpOverlapped=0x0) returned 1 [0042.982] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsFormTemplate.html", nBufferLength=0x105, lpBuffer=0x31e14c, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsFormTemplate.html", lpFilePart=0x0) returned 0x69 [0042.982] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsFormTemplate.html", nBufferLength=0x105, lpBuffer=0x31e14c, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsFormTemplate.html", lpFilePart=0x0) returned 0x69 [0042.982] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e5ac) returned 1 [0042.982] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsFormTemplate.html" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms4\\formsformtemplate.html"), fInfoLevelId=0x0, lpFileInformation=0x31e628 | out: lpFileInformation=0x31e628*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9caf4500, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0x618c8a10, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xfd12f120, ftLastWriteTime.dwHighDateTime=0x1d6eb7e, nFileSizeHigh=0x0, nFileSizeLow=0x1160)) returned 1 [0042.982] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e5a8) returned 1 [0042.982] MoveFileW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsFormTemplate.html" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms4\\formsformtemplate.html"), lpNewFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsFormTemplate.html" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms4\\formsformtemplate.html")) returned 1 [0042.984] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsHomePage.html", nBufferLength=0x105, lpBuffer=0x31e02c, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsHomePage.html", lpFilePart=0x0) returned 0x65 [0042.984] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e520) returned 1 [0042.984] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsHomePage.html" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms4\\formshomepage.html"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x274 [0042.984] GetFileType (hFile=0x274) returned 0x1 [0042.984] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e51c) returned 1 [0042.984] GetFileType (hFile=0x274) returned 0x1 [0042.984] GetFileSize (in: hFile=0x274, lpFileSizeHigh=0x31e628 | out: lpFileSizeHigh=0x31e628*=0x0) returned 0xd9c [0042.984] ReadFile (in: hFile=0x274, lpBuffer=0x278d838, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x31e5d4, lpOverlapped=0x0 | out: lpBuffer=0x278d838*, lpNumberOfBytesRead=0x31e5d4*=0xd9c, lpOverlapped=0x0) returned 1 [0042.999] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsHomePage.html", nBufferLength=0x105, lpBuffer=0x31e018, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsHomePage.html", lpFilePart=0x0) returned 0x65 [0043.000] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e50c) returned 1 [0043.000] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsHomePage.html" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms4\\formshomepage.html"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x274 [0043.000] GetFileType (hFile=0x274) returned 0x1 [0043.000] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e508) returned 1 [0043.000] GetFileType (hFile=0x274) returned 0x1 [0043.001] WriteFile (in: hFile=0x274, lpBuffer=0x27dfbb4*, nNumberOfBytesToWrite=0xda0, lpNumberOfBytesWritten=0x31e59c, lpOverlapped=0x0 | out: lpBuffer=0x27dfbb4*, lpNumberOfBytesWritten=0x31e59c*=0xda0, lpOverlapped=0x0) returned 1 [0043.007] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsHomePage.html", nBufferLength=0x105, lpBuffer=0x31e14c, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsHomePage.html", lpFilePart=0x0) returned 0x65 [0043.007] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsHomePage.html", nBufferLength=0x105, lpBuffer=0x31e14c, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsHomePage.html", lpFilePart=0x0) returned 0x65 [0043.007] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e5ac) returned 1 [0043.007] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsHomePage.html" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms4\\formshomepage.html"), fInfoLevelId=0x0, lpFileInformation=0x31e628 | out: lpFileInformation=0x31e628*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9caf4500, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0x5291c2f0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xfd155280, ftLastWriteTime.dwHighDateTime=0x1d6eb7e, nFileSizeHigh=0x0, nFileSizeLow=0xda0)) returned 1 [0043.007] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e5a8) returned 1 [0043.007] MoveFileW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsHomePage.html" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms4\\formshomepage.html"), lpNewFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsHomePage.html" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms4\\formshomepage.html")) returned 1 [0043.008] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsHomePageStyle.css", nBufferLength=0x105, lpBuffer=0x31e02c, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsHomePageStyle.css", lpFilePart=0x0) returned 0x69 [0043.008] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e520) returned 1 [0043.008] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsHomePageStyle.css" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms4\\formshomepagestyle.css"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x274 [0043.008] GetFileType (hFile=0x274) returned 0x1 [0043.008] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e51c) returned 1 [0043.009] GetFileType (hFile=0x274) returned 0x1 [0043.009] GetFileSize (in: hFile=0x274, lpFileSizeHigh=0x31e628 | out: lpFileSizeHigh=0x31e628*=0x0) returned 0x314 [0043.009] ReadFile (in: hFile=0x274, lpBuffer=0x27e1234, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x31e5d4, lpOverlapped=0x0 | out: lpBuffer=0x27e1234*, lpNumberOfBytesRead=0x31e5d4*=0x314, lpOverlapped=0x0) returned 1 [0043.024] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsHomePageStyle.css", nBufferLength=0x105, lpBuffer=0x31e018, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsHomePageStyle.css", lpFilePart=0x0) returned 0x69 [0043.024] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e50c) returned 1 [0043.024] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsHomePageStyle.css" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms4\\formshomepagestyle.css"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x274 [0043.025] GetFileType (hFile=0x274) returned 0x1 [0043.025] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e508) returned 1 [0043.025] GetFileType (hFile=0x274) returned 0x1 [0043.026] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsHomePageStyle.css", nBufferLength=0x105, lpBuffer=0x31e14c, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsHomePageStyle.css", lpFilePart=0x0) returned 0x69 [0043.026] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsHomePageStyle.css", nBufferLength=0x105, lpBuffer=0x31e14c, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsHomePageStyle.css", lpFilePart=0x0) returned 0x69 [0043.026] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e5ac) returned 1 [0043.026] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsHomePageStyle.css" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms4\\formshomepagestyle.css"), fInfoLevelId=0x0, lpFileInformation=0x31e628 | out: lpFileInformation=0x31e628*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9caf4500, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0x5291c2f0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xfd1a1540, ftLastWriteTime.dwHighDateTime=0x1d6eb7e, nFileSizeHigh=0x0, nFileSizeLow=0x320)) returned 1 [0043.026] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e5a8) returned 1 [0043.026] MoveFileW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsHomePageStyle.css" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms4\\formshomepagestyle.css"), lpNewFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsHomePageStyle.css" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms4\\formshomepagestyle.css")) returned 1 [0043.026] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsImageTemplate.html", nBufferLength=0x105, lpBuffer=0x31e02c, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsImageTemplate.html", lpFilePart=0x0) returned 0x6a [0043.026] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e520) returned 1 [0043.026] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsImageTemplate.html" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms4\\formsimagetemplate.html"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x274 [0043.027] GetFileType (hFile=0x274) returned 0x1 [0043.027] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e51c) returned 1 [0043.027] GetFileType (hFile=0x274) returned 0x1 [0043.027] GetFileSize (in: hFile=0x274, lpFileSizeHigh=0x31e628 | out: lpFileSizeHigh=0x31e628*=0x0) returned 0x7f0 [0043.027] ReadFile (in: hFile=0x274, lpBuffer=0x2831ca4, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x31e5d4, lpOverlapped=0x0 | out: lpBuffer=0x2831ca4*, lpNumberOfBytesRead=0x31e5d4*=0x7f0, lpOverlapped=0x0) returned 1 [0043.044] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsImageTemplate.html", nBufferLength=0x105, lpBuffer=0x31e018, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsImageTemplate.html", lpFilePart=0x0) returned 0x6a [0043.044] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e50c) returned 1 [0043.044] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsImageTemplate.html" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms4\\formsimagetemplate.html"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x274 [0043.045] GetFileType (hFile=0x274) returned 0x1 [0043.045] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e508) returned 1 [0043.045] GetFileType (hFile=0x274) returned 0x1 [0043.046] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsImageTemplate.html", nBufferLength=0x105, lpBuffer=0x31e14c, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsImageTemplate.html", lpFilePart=0x0) returned 0x6a [0043.046] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsImageTemplate.html", nBufferLength=0x105, lpBuffer=0x31e14c, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsImageTemplate.html", lpFilePart=0x0) returned 0x6a [0043.046] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e5ac) returned 1 [0043.046] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsImageTemplate.html" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms4\\formsimagetemplate.html"), fInfoLevelId=0x0, lpFileInformation=0x31e628 | out: lpFileInformation=0x31e628*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9caf4500, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0x5291c2f0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xfd1c76a0, ftLastWriteTime.dwHighDateTime=0x1d6eb7e, nFileSizeHigh=0x0, nFileSizeLow=0x800)) returned 1 [0043.046] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e5a8) returned 1 [0043.046] MoveFileW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsImageTemplate.html" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms4\\formsimagetemplate.html"), lpNewFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsImageTemplate.html" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms4\\formsimagetemplate.html")) returned 1 [0043.047] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsMacroTemplate.html", nBufferLength=0x105, lpBuffer=0x31e02c, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsMacroTemplate.html", lpFilePart=0x0) returned 0x6a [0043.047] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e520) returned 1 [0043.047] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsMacroTemplate.html" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms4\\formsmacrotemplate.html"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x274 [0043.047] GetFileType (hFile=0x274) returned 0x1 [0043.047] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e51c) returned 1 [0043.047] GetFileType (hFile=0x274) returned 0x1 [0043.047] GetFileSize (in: hFile=0x274, lpFileSizeHigh=0x31e628 | out: lpFileSizeHigh=0x31e628*=0x0) returned 0x858 [0043.047] ReadFile (in: hFile=0x274, lpBuffer=0x2684364, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x31e5d4, lpOverlapped=0x0 | out: lpBuffer=0x2684364*, lpNumberOfBytesRead=0x31e5d4*=0x858, lpOverlapped=0x0) returned 1 [0043.062] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsMacroTemplate.html", nBufferLength=0x105, lpBuffer=0x31e018, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsMacroTemplate.html", lpFilePart=0x0) returned 0x6a [0043.062] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e50c) returned 1 [0043.062] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsMacroTemplate.html" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms4\\formsmacrotemplate.html"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x274 [0043.063] GetFileType (hFile=0x274) returned 0x1 [0043.063] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e508) returned 1 [0043.063] GetFileType (hFile=0x274) returned 0x1 [0043.064] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsMacroTemplate.html", nBufferLength=0x105, lpBuffer=0x31e14c, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsMacroTemplate.html", lpFilePart=0x0) returned 0x6a [0043.064] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsMacroTemplate.html", nBufferLength=0x105, lpBuffer=0x31e14c, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsMacroTemplate.html", lpFilePart=0x0) returned 0x6a [0043.064] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e5ac) returned 1 [0043.064] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsMacroTemplate.html" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms4\\formsmacrotemplate.html"), fInfoLevelId=0x0, lpFileInformation=0x31e628 | out: lpFileInformation=0x31e628*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9caf4500, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0x5291c2f0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xfd1ed800, ftLastWriteTime.dwHighDateTime=0x1d6eb7e, nFileSizeHigh=0x0, nFileSizeLow=0x860)) returned 1 [0043.064] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e5a8) returned 1 [0043.064] MoveFileW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsMacroTemplate.html" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms4\\formsmacrotemplate.html"), lpNewFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsMacroTemplate.html" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms4\\formsmacrotemplate.html")) returned 1 [0043.064] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsPreviewTemplate.html", nBufferLength=0x105, lpBuffer=0x31e02c, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsPreviewTemplate.html", lpFilePart=0x0) returned 0x6c [0043.064] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e520) returned 1 [0043.064] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsPreviewTemplate.html" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms4\\formspreviewtemplate.html"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x274 [0043.065] GetFileType (hFile=0x274) returned 0x1 [0043.065] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e51c) returned 1 [0043.065] GetFileType (hFile=0x274) returned 0x1 [0043.065] GetFileSize (in: hFile=0x274, lpFileSizeHigh=0x31e628 | out: lpFileSizeHigh=0x31e628*=0x0) returned 0x46a3 [0043.065] ReadFile (in: hFile=0x274, lpBuffer=0x26d6184, nNumberOfBytesToRead=0x46a3, lpNumberOfBytesRead=0x31e5d4, lpOverlapped=0x0 | out: lpBuffer=0x26d6184*, lpNumberOfBytesRead=0x31e5d4*=0x46a3, lpOverlapped=0x0) returned 1 [0043.081] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsPreviewTemplate.html", nBufferLength=0x105, lpBuffer=0x31e018, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsPreviewTemplate.html", lpFilePart=0x0) returned 0x6c [0043.081] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e50c) returned 1 [0043.081] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsPreviewTemplate.html" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms4\\formspreviewtemplate.html"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x274 [0043.081] GetFileType (hFile=0x274) returned 0x1 [0043.082] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e508) returned 1 [0043.082] GetFileType (hFile=0x274) returned 0x1 [0043.082] WriteFile (in: hFile=0x274, lpBuffer=0x27390dc*, nNumberOfBytesToWrite=0x46b0, lpNumberOfBytesWritten=0x31e5c8, lpOverlapped=0x0 | out: lpBuffer=0x27390dc*, lpNumberOfBytesWritten=0x31e5c8*=0x46b0, lpOverlapped=0x0) returned 1 [0043.083] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsPreviewTemplate.html", nBufferLength=0x105, lpBuffer=0x31e14c, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsPreviewTemplate.html", lpFilePart=0x0) returned 0x6c [0043.083] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsPreviewTemplate.html", nBufferLength=0x105, lpBuffer=0x31e14c, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsPreviewTemplate.html", lpFilePart=0x0) returned 0x6c [0043.083] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e5ac) returned 1 [0043.083] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsPreviewTemplate.html" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms4\\formspreviewtemplate.html"), fInfoLevelId=0x0, lpFileInformation=0x31e628 | out: lpFileInformation=0x31e628*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9caf4500, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0x529685b0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xfd213960, ftLastWriteTime.dwHighDateTime=0x1d6eb7e, nFileSizeHigh=0x0, nFileSizeLow=0x46b0)) returned 1 [0043.083] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e5a8) returned 1 [0043.083] MoveFileW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsPreviewTemplate.html" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms4\\formspreviewtemplate.html"), lpNewFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsPreviewTemplate.html" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms4\\formspreviewtemplate.html")) returned 1 [0043.084] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsPrintTemplate.html", nBufferLength=0x105, lpBuffer=0x31e02c, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsPrintTemplate.html", lpFilePart=0x0) returned 0x6a [0043.085] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e520) returned 1 [0043.085] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsPrintTemplate.html" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms4\\formsprinttemplate.html"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x274 [0043.085] GetFileType (hFile=0x274) returned 0x1 [0043.085] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e51c) returned 1 [0043.085] GetFileType (hFile=0x274) returned 0x1 [0043.085] GetFileSize (in: hFile=0x274, lpFileSizeHigh=0x31e628 | out: lpFileSizeHigh=0x31e628*=0x0) returned 0x612 [0043.085] ReadFile (in: hFile=0x274, lpBuffer=0x273e2a0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x31e5d4, lpOverlapped=0x0 | out: lpBuffer=0x273e2a0*, lpNumberOfBytesRead=0x31e5d4*=0x612, lpOverlapped=0x0) returned 1 [0043.100] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsPrintTemplate.html", nBufferLength=0x105, lpBuffer=0x31e018, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsPrintTemplate.html", lpFilePart=0x0) returned 0x6a [0043.100] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e50c) returned 1 [0043.100] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsPrintTemplate.html" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms4\\formsprinttemplate.html"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x274 [0043.101] GetFileType (hFile=0x274) returned 0x1 [0043.101] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e508) returned 1 [0043.101] GetFileType (hFile=0x274) returned 0x1 [0043.101] WriteFile (in: hFile=0x274, lpBuffer=0x278e0bc*, nNumberOfBytesToWrite=0x620, lpNumberOfBytesWritten=0x31e59c, lpOverlapped=0x0 | out: lpBuffer=0x278e0bc*, lpNumberOfBytesWritten=0x31e59c*=0x620, lpOverlapped=0x0) returned 1 [0043.102] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsPrintTemplate.html", nBufferLength=0x105, lpBuffer=0x31e14c, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsPrintTemplate.html", lpFilePart=0x0) returned 0x6a [0043.102] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsPrintTemplate.html", nBufferLength=0x105, lpBuffer=0x31e14c, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsPrintTemplate.html", lpFilePart=0x0) returned 0x6a [0043.102] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e5ac) returned 1 [0043.102] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsPrintTemplate.html" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms4\\formsprinttemplate.html"), fInfoLevelId=0x0, lpFileInformation=0x31e628 | out: lpFileInformation=0x31e628*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9caf4500, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0x5298e710, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xfd239ac0, ftLastWriteTime.dwHighDateTime=0x1d6eb7e, nFileSizeHigh=0x0, nFileSizeLow=0x620)) returned 1 [0043.102] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e5a8) returned 1 [0043.102] MoveFileW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsPrintTemplate.html" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms4\\formsprinttemplate.html"), lpNewFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsPrintTemplate.html" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms4\\formsprinttemplate.html")) returned 1 [0043.103] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsViewAttachmentIcons.jpg", nBufferLength=0x105, lpBuffer=0x31e02c, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsViewAttachmentIcons.jpg", lpFilePart=0x0) returned 0x6f [0043.103] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e520) returned 1 [0043.103] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsViewAttachmentIcons.jpg" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms4\\formsviewattachmenticons.jpg"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x274 [0043.103] GetFileType (hFile=0x274) returned 0x1 [0043.103] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e51c) returned 1 [0043.103] GetFileType (hFile=0x274) returned 0x1 [0043.103] GetFileSize (in: hFile=0x274, lpFileSizeHigh=0x31e628 | out: lpFileSizeHigh=0x31e628*=0x0) returned 0x1499 [0043.103] ReadFile (in: hFile=0x274, lpBuffer=0x278f450, nNumberOfBytesToRead=0x1499, lpNumberOfBytesRead=0x31e5d4, lpOverlapped=0x0 | out: lpBuffer=0x278f450*, lpNumberOfBytesRead=0x31e5d4*=0x1499, lpOverlapped=0x0) returned 1 [0043.118] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsViewAttachmentIcons.jpg", nBufferLength=0x105, lpBuffer=0x31e018, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsViewAttachmentIcons.jpg", lpFilePart=0x0) returned 0x6f [0043.118] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e50c) returned 1 [0043.118] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsViewAttachmentIcons.jpg" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms4\\formsviewattachmenticons.jpg"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x274 [0043.119] GetFileType (hFile=0x274) returned 0x1 [0043.119] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e508) returned 1 [0043.119] GetFileType (hFile=0x274) returned 0x1 [0043.119] WriteFile (in: hFile=0x274, lpBuffer=0x27e2958*, nNumberOfBytesToWrite=0x14a0, lpNumberOfBytesWritten=0x31e5c8, lpOverlapped=0x0 | out: lpBuffer=0x27e2958*, lpNumberOfBytesWritten=0x31e5c8*=0x14a0, lpOverlapped=0x0) returned 1 [0043.120] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsViewAttachmentIcons.jpg", nBufferLength=0x105, lpBuffer=0x31e14c, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsViewAttachmentIcons.jpg", lpFilePart=0x0) returned 0x6f [0043.120] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsViewAttachmentIcons.jpg", nBufferLength=0x105, lpBuffer=0x31e14c, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsViewAttachmentIcons.jpg", lpFilePart=0x0) returned 0x6f [0043.120] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e5ac) returned 1 [0043.120] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsViewAttachmentIcons.jpg" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms4\\formsviewattachmenticons.jpg"), fInfoLevelId=0x0, lpFileInformation=0x31e628 | out: lpFileInformation=0x31e628*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa3d65300, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0x618eeb70, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xfd285d80, ftLastWriteTime.dwHighDateTime=0x1d6eb7e, nFileSizeHigh=0x0, nFileSizeLow=0x14a0)) returned 1 [0043.120] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e5a8) returned 1 [0043.120] MoveFileW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsViewAttachmentIcons.jpg" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms4\\formsviewattachmenticons.jpg"), lpNewFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsViewAttachmentIcons.jpg" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms4\\formsviewattachmenticons.jpg")) returned 1 [0043.121] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsViewAttachmentIconsMask.bmp", nBufferLength=0x105, lpBuffer=0x31e02c, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsViewAttachmentIconsMask.bmp", lpFilePart=0x0) returned 0x73 [0043.121] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e520) returned 1 [0043.121] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsViewAttachmentIconsMask.bmp" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms4\\formsviewattachmenticonsmask.bmp"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x274 [0043.121] GetFileType (hFile=0x274) returned 0x1 [0043.121] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e51c) returned 1 [0043.121] GetFileType (hFile=0x274) returned 0x1 [0043.121] GetFileSize (in: hFile=0x274, lpFileSizeHigh=0x31e628 | out: lpFileSizeHigh=0x31e628*=0x0) returned 0x638 [0043.121] ReadFile (in: hFile=0x274, lpBuffer=0x27e4968, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x31e5d4, lpOverlapped=0x0 | out: lpBuffer=0x27e4968*, lpNumberOfBytesRead=0x31e5d4*=0x638, lpOverlapped=0x0) returned 1 [0043.136] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsViewAttachmentIconsMask.bmp", nBufferLength=0x105, lpBuffer=0x31e018, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsViewAttachmentIconsMask.bmp", lpFilePart=0x0) returned 0x73 [0043.136] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e50c) returned 1 [0043.136] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsViewAttachmentIconsMask.bmp" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms4\\formsviewattachmenticonsmask.bmp"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x274 [0043.137] GetFileType (hFile=0x274) returned 0x1 [0043.137] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e508) returned 1 [0043.137] GetFileType (hFile=0x274) returned 0x1 [0043.137] WriteFile (in: hFile=0x274, lpBuffer=0x2834840*, nNumberOfBytesToWrite=0x640, lpNumberOfBytesWritten=0x31e59c, lpOverlapped=0x0 | out: lpBuffer=0x2834840*, lpNumberOfBytesWritten=0x31e59c*=0x640, lpOverlapped=0x0) returned 1 [0043.138] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsViewAttachmentIconsMask.bmp", nBufferLength=0x105, lpBuffer=0x31e14c, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsViewAttachmentIconsMask.bmp", lpFilePart=0x0) returned 0x73 [0043.138] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsViewAttachmentIconsMask.bmp", nBufferLength=0x105, lpBuffer=0x31e14c, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsViewAttachmentIconsMask.bmp", lpFilePart=0x0) returned 0x73 [0043.138] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e5ac) returned 1 [0043.138] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsViewAttachmentIconsMask.bmp" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms4\\formsviewattachmenticonsmask.bmp"), fInfoLevelId=0x0, lpFileInformation=0x31e628 | out: lpFileInformation=0x31e628*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa3d65300, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0x5298e710, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xfd2abee0, ftLastWriteTime.dwHighDateTime=0x1d6eb7e, nFileSizeHigh=0x0, nFileSizeLow=0x640)) returned 1 [0043.138] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e5a8) returned 1 [0043.138] MoveFileW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsViewAttachmentIconsMask.bmp" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms4\\formsviewattachmenticonsmask.bmp"), lpNewFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsViewAttachmentIconsMask.bmp" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms4\\formsviewattachmenticonsmask.bmp")) returned 1 [0043.139] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsViewFrame.html", nBufferLength=0x105, lpBuffer=0x31e02c, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsViewFrame.html", lpFilePart=0x0) returned 0x66 [0043.139] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e520) returned 1 [0043.139] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsViewFrame.html" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms4\\formsviewframe.html"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x274 [0043.139] GetFileType (hFile=0x274) returned 0x1 [0043.139] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e51c) returned 1 [0043.139] GetFileType (hFile=0x274) returned 0x1 [0043.139] GetFileSize (in: hFile=0x274, lpFileSizeHigh=0x31e628 | out: lpFileSizeHigh=0x31e628*=0x0) returned 0x164a [0043.139] ReadFile (in: hFile=0x274, lpBuffer=0x2835bb8, nNumberOfBytesToRead=0x164a, lpNumberOfBytesRead=0x31e5d4, lpOverlapped=0x0 | out: lpBuffer=0x2835bb8*, lpNumberOfBytesRead=0x31e5d4*=0x164a, lpOverlapped=0x0) returned 1 [0043.156] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsViewFrame.html", nBufferLength=0x105, lpBuffer=0x31e018, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsViewFrame.html", lpFilePart=0x0) returned 0x66 [0043.156] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e50c) returned 1 [0043.156] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsViewFrame.html" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms4\\formsviewframe.html"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x274 [0043.157] GetFileType (hFile=0x274) returned 0x1 [0043.157] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e508) returned 1 [0043.157] GetFileType (hFile=0x274) returned 0x1 [0043.157] WriteFile (in: hFile=0x274, lpBuffer=0x268a754*, nNumberOfBytesToWrite=0x1650, lpNumberOfBytesWritten=0x31e5c8, lpOverlapped=0x0 | out: lpBuffer=0x268a754*, lpNumberOfBytesWritten=0x31e5c8*=0x1650, lpOverlapped=0x0) returned 1 [0043.158] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsViewFrame.html", nBufferLength=0x105, lpBuffer=0x31e14c, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsViewFrame.html", lpFilePart=0x0) returned 0x66 [0043.158] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsViewFrame.html", nBufferLength=0x105, lpBuffer=0x31e14c, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsViewFrame.html", lpFilePart=0x0) returned 0x66 [0043.158] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e5ac) returned 1 [0043.158] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsViewFrame.html" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms4\\formsviewframe.html"), fInfoLevelId=0x0, lpFileInformation=0x31e628 | out: lpFileInformation=0x31e628*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa3d65300, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0x529b4870, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xfd2d2040, ftLastWriteTime.dwHighDateTime=0x1d6eb7e, nFileSizeHigh=0x0, nFileSizeLow=0x1650)) returned 1 [0043.158] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e5a8) returned 1 [0043.158] MoveFileW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsViewFrame.html" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms4\\formsviewframe.html"), lpNewFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsViewFrame.html" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms4\\formsviewframe.html")) returned 1 [0043.160] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsViewTemplate.html", nBufferLength=0x105, lpBuffer=0x31e02c, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsViewTemplate.html", lpFilePart=0x0) returned 0x69 [0043.160] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e520) returned 1 [0043.160] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsViewTemplate.html" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms4\\formsviewtemplate.html"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x274 [0043.160] GetFileType (hFile=0x274) returned 0x1 [0043.160] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e51c) returned 1 [0043.160] GetFileType (hFile=0x274) returned 0x1 [0043.160] GetFileSize (in: hFile=0x274, lpFileSizeHigh=0x31e628 | out: lpFileSizeHigh=0x31e628*=0x0) returned 0xadf [0043.160] ReadFile (in: hFile=0x274, lpBuffer=0x268cd50, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x31e5d4, lpOverlapped=0x0 | out: lpBuffer=0x268cd50*, lpNumberOfBytesRead=0x31e5d4*=0xadf, lpOverlapped=0x0) returned 1 [0043.176] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsViewTemplate.html", nBufferLength=0x105, lpBuffer=0x31e018, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsViewTemplate.html", lpFilePart=0x0) returned 0x69 [0043.176] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e50c) returned 1 [0043.176] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsViewTemplate.html" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms4\\formsviewtemplate.html"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x274 [0043.177] GetFileType (hFile=0x274) returned 0x1 [0043.177] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e508) returned 1 [0043.177] GetFileType (hFile=0x274) returned 0x1 [0043.177] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsViewTemplate.html", nBufferLength=0x105, lpBuffer=0x31e14c, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsViewTemplate.html", lpFilePart=0x0) returned 0x69 [0043.177] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsViewTemplate.html", nBufferLength=0x105, lpBuffer=0x31e14c, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsViewTemplate.html", lpFilePart=0x0) returned 0x69 [0043.178] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e5ac) returned 1 [0043.178] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsViewTemplate.html" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms4\\formsviewtemplate.html"), fInfoLevelId=0x0, lpFileInformation=0x31e628 | out: lpFileInformation=0x31e628*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa3d65300, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0x529b4870, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xfd2f81a0, ftLastWriteTime.dwHighDateTime=0x1d6eb7e, nFileSizeHigh=0x0, nFileSizeLow=0xae0)) returned 1 [0043.178] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e5a8) returned 1 [0043.178] MoveFileW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsViewTemplate.html" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms4\\formsviewtemplate.html"), lpNewFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsViewTemplate.html" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms4\\formsviewtemplate.html")) returned 1 [0043.178] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormToolImages.jpg", nBufferLength=0x105, lpBuffer=0x31e02c, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormToolImages.jpg", lpFilePart=0x0) returned 0x65 [0043.178] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e520) returned 1 [0043.178] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormToolImages.jpg" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms4\\formtoolimages.jpg"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x274 [0043.178] GetFileType (hFile=0x274) returned 0x1 [0043.178] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e51c) returned 1 [0043.178] GetFileType (hFile=0x274) returned 0x1 [0043.178] GetFileSize (in: hFile=0x274, lpFileSizeHigh=0x31e628 | out: lpFileSizeHigh=0x31e628*=0x0) returned 0x1bfb [0043.179] ReadFile (in: hFile=0x274, lpBuffer=0x26df7c4, nNumberOfBytesToRead=0x1bfb, lpNumberOfBytesRead=0x31e5d4, lpOverlapped=0x0 | out: lpBuffer=0x26df7c4*, lpNumberOfBytesRead=0x31e5d4*=0x1bfb, lpOverlapped=0x0) returned 1 [0043.193] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormToolImages.jpg", nBufferLength=0x105, lpBuffer=0x31e018, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormToolImages.jpg", lpFilePart=0x0) returned 0x65 [0043.193] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e50c) returned 1 [0043.193] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormToolImages.jpg" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms4\\formtoolimages.jpg"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x274 [0043.194] GetFileType (hFile=0x274) returned 0x1 [0043.194] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e508) returned 1 [0043.194] GetFileType (hFile=0x274) returned 0x1 [0043.194] WriteFile (in: hFile=0x274, lpBuffer=0x27351ac*, nNumberOfBytesToWrite=0x1c00, lpNumberOfBytesWritten=0x31e5c8, lpOverlapped=0x0 | out: lpBuffer=0x27351ac*, lpNumberOfBytesWritten=0x31e5c8*=0x1c00, lpOverlapped=0x0) returned 1 [0043.195] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormToolImages.jpg", nBufferLength=0x105, lpBuffer=0x31e14c, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormToolImages.jpg", lpFilePart=0x0) returned 0x65 [0043.195] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormToolImages.jpg", nBufferLength=0x105, lpBuffer=0x31e14c, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormToolImages.jpg", lpFilePart=0x0) returned 0x65 [0043.195] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e5ac) returned 1 [0043.195] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormToolImages.jpg" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms4\\formtoolimages.jpg"), fInfoLevelId=0x0, lpFileInformation=0x31e628 | out: lpFileInformation=0x31e628*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa3d65300, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0x618eeb70, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xfd31e300, ftLastWriteTime.dwHighDateTime=0x1d6eb7e, nFileSizeHigh=0x0, nFileSizeLow=0x1c00)) returned 1 [0043.195] MoveFileW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormToolImages.jpg" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms4\\formtoolimages.jpg"), lpNewFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormToolImages.jpg" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms4\\formtoolimages.jpg")) returned 1 [0043.196] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\ViewHeaderPreview.jpg", nBufferLength=0x105, lpBuffer=0x31e02c, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\ViewHeaderPreview.jpg", lpFilePart=0x0) returned 0x68 [0043.196] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\ViewHeaderPreview.jpg" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms4\\viewheaderpreview.jpg"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x274 [0043.196] GetFileType (hFile=0x274) returned 0x1 [0043.196] GetFileType (hFile=0x274) returned 0x1 [0043.197] GetFileSize (in: hFile=0x274, lpFileSizeHigh=0x31e628 | out: lpFileSizeHigh=0x31e628*=0x0) returned 0xd78 [0043.197] ReadFile (in: hFile=0x274, lpBuffer=0x2738220, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x31e5d4, lpOverlapped=0x0 | out: lpBuffer=0x2738220*, lpNumberOfBytesRead=0x31e5d4*=0xd78, lpOverlapped=0x0) returned 1 [0043.216] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\ViewHeaderPreview.jpg", nBufferLength=0x105, lpBuffer=0x31e018, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\ViewHeaderPreview.jpg", lpFilePart=0x0) returned 0x68 [0043.216] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\ViewHeaderPreview.jpg" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms4\\viewheaderpreview.jpg"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x274 [0043.217] GetFileType (hFile=0x274) returned 0x1 [0043.217] GetFileType (hFile=0x274) returned 0x1 [0043.217] WriteFile (in: hFile=0x274, lpBuffer=0x278a50c*, nNumberOfBytesToWrite=0xd80, lpNumberOfBytesWritten=0x31e59c, lpOverlapped=0x0 | out: lpBuffer=0x278a50c*, lpNumberOfBytesWritten=0x31e59c*=0xd80, lpOverlapped=0x0) returned 1 [0043.218] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\ViewHeaderPreview.jpg", nBufferLength=0x105, lpBuffer=0x31e14c, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\ViewHeaderPreview.jpg", lpFilePart=0x0) returned 0x68 [0043.218] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\ViewHeaderPreview.jpg", nBufferLength=0x105, lpBuffer=0x31e14c, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\ViewHeaderPreview.jpg", lpFilePart=0x0) returned 0x68 [0043.218] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\ViewHeaderPreview.jpg" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms4\\viewheaderpreview.jpg"), fInfoLevelId=0x0, lpFileInformation=0x31e628 | out: lpFileInformation=0x31e628*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa638ad00, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0x706f8370, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xfd36a5c0, ftLastWriteTime.dwHighDateTime=0x1d6eb7e, nFileSizeHigh=0x0, nFileSizeLow=0xd80)) returned 1 [0043.218] MoveFileW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\ViewHeaderPreview.jpg" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms4\\viewheaderpreview.jpg"), lpNewFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\ViewHeaderPreview.jpg" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms4\\viewheaderpreview.jpg")) returned 1 [0043.218] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles", nBufferLength=0x105, lpBuffer=0x31e0e4, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles", lpFilePart=0x0) returned 0x5e [0043.218] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\", nBufferLength=0x105, lpBuffer=0x31e0b8, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\", lpFilePart=0x0) returned 0x5f [0043.218] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\*", lpFindFileData=0x31e304 | out: lpFindFileData=0x31e304*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5127f1f0, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x6d462ff0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x6d462ff0, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x381d80 [0043.222] FindClose (in: hFindFile=0x381d80 | out: hFindFile=0x381d80) returned 1 [0043.223] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles", nBufferLength=0x105, lpBuffer=0x31e0e4, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles", lpFilePart=0x0) returned 0x5e [0043.223] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\", nBufferLength=0x105, lpBuffer=0x31e0b8, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\", lpFilePart=0x0) returned 0x5f [0043.223] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\*", lpFindFileData=0x31e304 | out: lpFindFileData=0x31e304*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5127f1f0, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x6d462ff0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x6d462ff0, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x381d80 [0043.224] FindClose (in: hFindFile=0x381d80 | out: hFindFile=0x381d80) returned 1 [0043.224] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\Adobe.css", nBufferLength=0x105, lpBuffer=0x31dfb4, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\Adobe.css", lpFilePart=0x0) returned 0x68 [0043.224] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\Adobe.css" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms4\\formsstyles\\adobe.css"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x274 [0043.225] GetFileType (hFile=0x274) returned 0x1 [0043.225] GetFileType (hFile=0x274) returned 0x1 [0043.225] GetFileSize (in: hFile=0x274, lpFileSizeHigh=0x31e5b0 | out: lpFileSizeHigh=0x31e5b0*=0x0) returned 0x75f [0043.225] ReadFile (in: hFile=0x274, lpBuffer=0x2799120, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x31e55c, lpOverlapped=0x0 | out: lpBuffer=0x2799120*, lpNumberOfBytesRead=0x31e55c*=0x75f, lpOverlapped=0x0) returned 1 [0043.240] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\Adobe.css", nBufferLength=0x105, lpBuffer=0x31dfa0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\Adobe.css", lpFilePart=0x0) returned 0x68 [0043.240] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\Adobe.css" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms4\\formsstyles\\adobe.css"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x274 [0043.241] GetFileType (hFile=0x274) returned 0x1 [0043.241] GetFileType (hFile=0x274) returned 0x1 [0043.242] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\Adobe.css", nBufferLength=0x105, lpBuffer=0x31e0d4, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\Adobe.css", lpFilePart=0x0) returned 0x68 [0043.242] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\Adobe.css", nBufferLength=0x105, lpBuffer=0x31e0d4, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\Adobe.css", lpFilePart=0x0) returned 0x68 [0043.242] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\Adobe.css" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms4\\formsstyles\\adobe.css"), fInfoLevelId=0x0, lpFileInformation=0x31e5b0 | out: lpFileInformation=0x31e5b0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9caf4500, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0x5127f1f0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xfd390720, ftLastWriteTime.dwHighDateTime=0x1d6eb7e, nFileSizeHigh=0x0, nFileSizeLow=0x760)) returned 1 [0043.242] MoveFileW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\Adobe.css" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms4\\formsstyles\\adobe.css"), lpNewFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\Adobe.css" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms4\\formsstyles\\adobe.css")) returned 1 [0043.242] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\Americana.css", nBufferLength=0x105, lpBuffer=0x31dfb4, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\Americana.css", lpFilePart=0x0) returned 0x6c [0043.242] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\Americana.css" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms4\\formsstyles\\americana.css"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x274 [0043.243] GetFileType (hFile=0x274) returned 0x1 [0043.243] GetFileType (hFile=0x274) returned 0x1 [0043.243] GetFileSize (in: hFile=0x274, lpFileSizeHigh=0x31e5b0 | out: lpFileSizeHigh=0x31e5b0*=0x0) returned 0xdf0 [0043.243] ReadFile (in: hFile=0x274, lpBuffer=0x27eb69c, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x31e55c, lpOverlapped=0x0 | out: lpBuffer=0x27eb69c*, lpNumberOfBytesRead=0x31e55c*=0xdf0, lpOverlapped=0x0) returned 1 [0043.266] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\Americana.css", nBufferLength=0x105, lpBuffer=0x31dfa0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\Americana.css", lpFilePart=0x0) returned 0x6c [0043.266] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\Americana.css" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms4\\formsstyles\\americana.css"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x274 [0043.267] GetFileType (hFile=0x274) returned 0x1 [0043.267] GetFileType (hFile=0x274) returned 0x1 [0043.268] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\Americana.css", nBufferLength=0x105, lpBuffer=0x31e0d4, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\Americana.css", lpFilePart=0x0) returned 0x6c [0043.268] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\Americana.css", nBufferLength=0x105, lpBuffer=0x31e0d4, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\Americana.css", lpFilePart=0x0) returned 0x6c [0043.268] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\Americana.css" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms4\\formsstyles\\americana.css"), fInfoLevelId=0x0, lpFileInformation=0x31e5b0 | out: lpFileInformation=0x31e5b0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9caf4500, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0x5eb686b0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xfd3dc9e0, ftLastWriteTime.dwHighDateTime=0x1d6eb7e, nFileSizeHigh=0x0, nFileSizeLow=0xe00)) returned 1 [0043.268] MoveFileW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\Americana.css" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms4\\formsstyles\\americana.css"), lpNewFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\Americana.css" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms4\\formsstyles\\americana.css")) returned 1 [0043.268] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\BabyBlue.css", nBufferLength=0x105, lpBuffer=0x31dfb4, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\BabyBlue.css", lpFilePart=0x0) returned 0x6b [0043.268] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\BabyBlue.css" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms4\\formsstyles\\babyblue.css"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x274 [0043.269] GetFileType (hFile=0x274) returned 0x1 [0043.269] GetFileType (hFile=0x274) returned 0x1 [0043.269] GetFileSize (in: hFile=0x274, lpFileSizeHigh=0x31e5b0 | out: lpFileSizeHigh=0x31e5b0*=0x0) returned 0x100d [0043.269] ReadFile (in: hFile=0x274, lpBuffer=0x283ef64, nNumberOfBytesToRead=0x100d, lpNumberOfBytesRead=0x31e55c, lpOverlapped=0x0 | out: lpBuffer=0x283ef64*, lpNumberOfBytesRead=0x31e55c*=0x100d, lpOverlapped=0x0) returned 1 [0043.286] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\BabyBlue.css", nBufferLength=0x105, lpBuffer=0x31dfa0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\BabyBlue.css", lpFilePart=0x0) returned 0x6b [0043.286] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\BabyBlue.css" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms4\\formsstyles\\babyblue.css"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x274 [0043.287] GetFileType (hFile=0x274) returned 0x1 [0043.287] GetFileType (hFile=0x274) returned 0x1 [0043.287] WriteFile (in: hFile=0x274, lpBuffer=0x2692e4c*, nNumberOfBytesToWrite=0x1010, lpNumberOfBytesWritten=0x31e550, lpOverlapped=0x0 | out: lpBuffer=0x2692e4c*, lpNumberOfBytesWritten=0x31e550*=0x1010, lpOverlapped=0x0) returned 1 [0043.288] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\BabyBlue.css", nBufferLength=0x105, lpBuffer=0x31e0d4, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\BabyBlue.css", lpFilePart=0x0) returned 0x6b [0043.288] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\BabyBlue.css", nBufferLength=0x105, lpBuffer=0x31e0d4, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\BabyBlue.css", lpFilePart=0x0) returned 0x6b [0043.288] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\BabyBlue.css" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms4\\formsstyles\\babyblue.css"), fInfoLevelId=0x0, lpFileInformation=0x31e5b0 | out: lpFileInformation=0x31e5b0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9de07200, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0x5f409670, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xfd402b40, ftLastWriteTime.dwHighDateTime=0x1d6eb7e, nFileSizeHigh=0x0, nFileSizeLow=0x1010)) returned 1 [0043.288] MoveFileW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\BabyBlue.css" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms4\\formsstyles\\babyblue.css"), lpNewFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\BabyBlue.css" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms4\\formsstyles\\babyblue.css")) returned 1 [0043.290] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\Biscay.css", nBufferLength=0x105, lpBuffer=0x31dfb4, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\Biscay.css", lpFilePart=0x0) returned 0x69 [0043.290] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\Biscay.css" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms4\\formsstyles\\biscay.css"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x274 [0043.291] GetFileType (hFile=0x274) returned 0x1 [0043.291] GetFileType (hFile=0x274) returned 0x1 [0043.291] GetFileSize (in: hFile=0x274, lpFileSizeHigh=0x31e5b0 | out: lpFileSizeHigh=0x31e5b0*=0x0) returned 0x1103 [0043.291] ReadFile (in: hFile=0x274, lpBuffer=0x2694310, nNumberOfBytesToRead=0x1103, lpNumberOfBytesRead=0x31e55c, lpOverlapped=0x0 | out: lpBuffer=0x2694310*, lpNumberOfBytesRead=0x31e55c*=0x1103, lpOverlapped=0x0) returned 1 [0043.307] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\Biscay.css", nBufferLength=0x105, lpBuffer=0x31dfa0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\Biscay.css", lpFilePart=0x0) returned 0x69 [0043.307] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\Biscay.css" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms4\\formsstyles\\biscay.css"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x274 [0043.308] GetFileType (hFile=0x274) returned 0x1 [0043.308] GetFileType (hFile=0x274) returned 0x1 [0043.308] WriteFile (in: hFile=0x274, lpBuffer=0x26e67a4*, nNumberOfBytesToWrite=0x1110, lpNumberOfBytesWritten=0x31e550, lpOverlapped=0x0 | out: lpBuffer=0x26e67a4*, lpNumberOfBytesWritten=0x31e550*=0x1110, lpOverlapped=0x0) returned 1 [0043.309] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\Biscay.css", nBufferLength=0x105, lpBuffer=0x31e0d4, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\Biscay.css", lpFilePart=0x0) returned 0x69 [0043.309] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\Biscay.css", nBufferLength=0x105, lpBuffer=0x31e0d4, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\Biscay.css", lpFilePart=0x0) returned 0x69 [0043.309] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\Biscay.css" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms4\\formsstyles\\biscay.css"), fInfoLevelId=0x0, lpFileInformation=0x31e5b0 | out: lpFileInformation=0x31e5b0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9de07200, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0x519a33f0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xfd44ee00, ftLastWriteTime.dwHighDateTime=0x1d6eb7e, nFileSizeHigh=0x0, nFileSizeLow=0x1110)) returned 1 [0043.309] MoveFileW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\Biscay.css" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms4\\formsstyles\\biscay.css"), lpNewFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\Biscay.css" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms4\\formsstyles\\biscay.css")) returned 1 [0043.310] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\BrightOrange.css", nBufferLength=0x105, lpBuffer=0x31dfb4, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\BrightOrange.css", lpFilePart=0x0) returned 0x6f [0043.311] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\BrightOrange.css" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms4\\formsstyles\\brightorange.css"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x274 [0043.311] GetFileType (hFile=0x274) returned 0x1 [0043.311] GetFileType (hFile=0x274) returned 0x1 [0043.311] GetFileSize (in: hFile=0x274, lpFileSizeHigh=0x31e5b0 | out: lpFileSizeHigh=0x31e5b0*=0x0) returned 0x10f1 [0043.311] ReadFile (in: hFile=0x274, lpBuffer=0x26e7d70, nNumberOfBytesToRead=0x10f1, lpNumberOfBytesRead=0x31e55c, lpOverlapped=0x0 | out: lpBuffer=0x26e7d70*, lpNumberOfBytesRead=0x31e55c*=0x10f1, lpOverlapped=0x0) returned 1 [0043.327] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\BrightOrange.css", nBufferLength=0x105, lpBuffer=0x31dfa0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\BrightOrange.css", lpFilePart=0x0) returned 0x6f [0043.327] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\BrightOrange.css" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms4\\formsstyles\\brightorange.css"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x274 [0043.328] GetFileType (hFile=0x274) returned 0x1 [0043.328] GetFileType (hFile=0x274) returned 0x1 [0043.328] WriteFile (in: hFile=0x274, lpBuffer=0x273a058*, nNumberOfBytesToWrite=0x1100, lpNumberOfBytesWritten=0x31e550, lpOverlapped=0x0 | out: lpBuffer=0x273a058*, lpNumberOfBytesWritten=0x31e550*=0x1100, lpOverlapped=0x0) returned 1 [0043.329] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\BrightOrange.css", nBufferLength=0x105, lpBuffer=0x31e0d4, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\BrightOrange.css", lpFilePart=0x0) returned 0x6f [0043.329] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\BrightOrange.css", nBufferLength=0x105, lpBuffer=0x31e0d4, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\BrightOrange.css", lpFilePart=0x0) returned 0x6f [0043.329] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\BrightOrange.css" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms4\\formsstyles\\brightorange.css"), fInfoLevelId=0x0, lpFileInformation=0x31e5b0 | out: lpFileInformation=0x31e5b0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9de07200, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0x51a87c30, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xfd474f60, ftLastWriteTime.dwHighDateTime=0x1d6eb7e, nFileSizeHigh=0x0, nFileSizeLow=0x1100)) returned 1 [0043.329] MoveFileW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\BrightOrange.css" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms4\\formsstyles\\brightorange.css"), lpNewFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\BrightOrange.css" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms4\\formsstyles\\brightorange.css")) returned 1 [0043.330] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\BrightYellow.css", nBufferLength=0x105, lpBuffer=0x31dfb4, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\BrightYellow.css", lpFilePart=0x0) returned 0x6f [0043.330] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\BrightYellow.css" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms4\\formsstyles\\brightyellow.css"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x274 [0043.331] GetFileType (hFile=0x274) returned 0x1 [0043.331] GetFileType (hFile=0x274) returned 0x1 [0043.331] GetFileSize (in: hFile=0x274, lpFileSizeHigh=0x31e5b0 | out: lpFileSizeHigh=0x31e5b0*=0x0) returned 0x1074 [0043.331] ReadFile (in: hFile=0x274, lpBuffer=0x273b644, nNumberOfBytesToRead=0x1074, lpNumberOfBytesRead=0x31e55c, lpOverlapped=0x0 | out: lpBuffer=0x273b644*, lpNumberOfBytesRead=0x31e55c*=0x1074, lpOverlapped=0x0) returned 1 [0043.349] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\BrightYellow.css", nBufferLength=0x105, lpBuffer=0x31dfa0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\BrightYellow.css", lpFilePart=0x0) returned 0x6f [0043.349] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\BrightYellow.css" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms4\\formsstyles\\brightyellow.css"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x274 [0043.350] GetFileType (hFile=0x274) returned 0x1 [0043.350] GetFileType (hFile=0x274) returned 0x1 [0043.350] WriteFile (in: hFile=0x274, lpBuffer=0x278d6a8*, nNumberOfBytesToWrite=0x1080, lpNumberOfBytesWritten=0x31e550, lpOverlapped=0x0 | out: lpBuffer=0x278d6a8*, lpNumberOfBytesWritten=0x31e550*=0x1080, lpOverlapped=0x0) returned 1 [0043.351] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\BrightYellow.css", nBufferLength=0x105, lpBuffer=0x31e0d4, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\BrightYellow.css", lpFilePart=0x0) returned 0x6f [0043.351] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\BrightYellow.css", nBufferLength=0x105, lpBuffer=0x31e0d4, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\BrightYellow.css", lpFilePart=0x0) returned 0x6f [0043.351] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\BrightYellow.css" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms4\\formsstyles\\brightyellow.css"), fInfoLevelId=0x0, lpFileInformation=0x31e5b0 | out: lpFileInformation=0x31e5b0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9f119f00, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0x51a87c30, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xfd49b0c0, ftLastWriteTime.dwHighDateTime=0x1d6eb7e, nFileSizeHigh=0x0, nFileSizeLow=0x1080)) returned 1 [0043.351] MoveFileW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\BrightYellow.css" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms4\\formsstyles\\brightyellow.css"), lpNewFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\BrightYellow.css" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms4\\formsstyles\\brightyellow.css")) returned 1 [0043.352] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\Casual.css", nBufferLength=0x105, lpBuffer=0x31dfb4, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\Casual.css", lpFilePart=0x0) returned 0x69 [0043.353] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\Casual.css" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms4\\formsstyles\\casual.css"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x274 [0043.353] GetFileType (hFile=0x274) returned 0x1 [0043.353] GetFileType (hFile=0x274) returned 0x1 [0043.353] GetFileSize (in: hFile=0x274, lpFileSizeHigh=0x31e5b0 | out: lpFileSizeHigh=0x31e5b0*=0x0) returned 0x760 [0043.353] ReadFile (in: hFile=0x274, lpBuffer=0x278f368, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x31e55c, lpOverlapped=0x0 | out: lpBuffer=0x278f368*, lpNumberOfBytesRead=0x31e55c*=0x760, lpOverlapped=0x0) returned 1 [0043.368] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\Casual.css", nBufferLength=0x105, lpBuffer=0x31dfa0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\Casual.css", lpFilePart=0x0) returned 0x69 [0043.368] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\Casual.css" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms4\\formsstyles\\casual.css"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x274 [0043.369] GetFileType (hFile=0x274) returned 0x1 [0043.369] GetFileType (hFile=0x274) returned 0x1 [0043.370] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\Casual.css", nBufferLength=0x105, lpBuffer=0x31e0d4, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\Casual.css", lpFilePart=0x0) returned 0x69 [0043.370] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\Casual.css", nBufferLength=0x105, lpBuffer=0x31e0d4, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\Casual.css", lpFilePart=0x0) returned 0x69 [0043.370] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\Casual.css" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms4\\formsstyles\\casual.css"), fInfoLevelId=0x0, lpFileInformation=0x31e5b0 | out: lpFileInformation=0x31e5b0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9f119f00, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0x603362b0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xfd4e7380, ftLastWriteTime.dwHighDateTime=0x1d6eb7e, nFileSizeHigh=0x0, nFileSizeLow=0x770)) returned 1 [0043.370] MoveFileW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\Casual.css" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms4\\formsstyles\\casual.css"), lpNewFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\Casual.css" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms4\\formsstyles\\casual.css")) returned 1 [0043.370] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\Country.css", nBufferLength=0x105, lpBuffer=0x31dfb4, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\Country.css", lpFilePart=0x0) returned 0x6a [0043.370] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\Country.css" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms4\\formsstyles\\country.css"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x274 [0043.371] GetFileType (hFile=0x274) returned 0x1 [0043.371] GetFileType (hFile=0x274) returned 0x1 [0043.371] GetFileSize (in: hFile=0x274, lpFileSizeHigh=0x31e5b0 | out: lpFileSizeHigh=0x31e5b0*=0x0) returned 0x731 [0043.371] ReadFile (in: hFile=0x274, lpBuffer=0x27e1280, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x31e55c, lpOverlapped=0x0 | out: lpBuffer=0x27e1280*, lpNumberOfBytesRead=0x31e55c*=0x731, lpOverlapped=0x0) returned 1 [0043.386] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\Country.css", nBufferLength=0x105, lpBuffer=0x31dfa0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\Country.css", lpFilePart=0x0) returned 0x6a [0043.386] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\Country.css" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms4\\formsstyles\\country.css"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x274 [0043.387] GetFileType (hFile=0x274) returned 0x1 [0043.387] GetFileType (hFile=0x274) returned 0x1 [0043.388] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\Country.css", nBufferLength=0x105, lpBuffer=0x31e0d4, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\Country.css", lpFilePart=0x0) returned 0x6a [0043.388] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\Country.css", nBufferLength=0x105, lpBuffer=0x31e0d4, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\Country.css", lpFilePart=0x0) returned 0x6a [0043.388] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\Country.css" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms4\\formsstyles\\country.css"), fInfoLevelId=0x0, lpFileInformation=0x31e5b0 | out: lpFileInformation=0x31e5b0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9f119f00, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0x51ce9230, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xfd50d4e0, ftLastWriteTime.dwHighDateTime=0x1d6eb7e, nFileSizeHigh=0x0, nFileSizeLow=0x740)) returned 1 [0043.388] MoveFileW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\Country.css" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms4\\formsstyles\\country.css"), lpNewFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\Country.css" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms4\\formsstyles\\country.css")) returned 1 [0043.388] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\Desert.css", nBufferLength=0x105, lpBuffer=0x31dfb4, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\Desert.css", lpFilePart=0x0) returned 0x69 [0043.388] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\Desert.css" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms4\\formsstyles\\desert.css"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x274 [0043.389] GetFileType (hFile=0x274) returned 0x1 [0043.389] GetFileType (hFile=0x274) returned 0x1 [0043.389] GetFileSize (in: hFile=0x274, lpFileSizeHigh=0x31e5b0 | out: lpFileSizeHigh=0x31e5b0*=0x0) returned 0xd35 [0043.389] ReadFile (in: hFile=0x274, lpBuffer=0x28336b4, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x31e55c, lpOverlapped=0x0 | out: lpBuffer=0x28336b4*, lpNumberOfBytesRead=0x31e55c*=0xd35, lpOverlapped=0x0) returned 1 [0043.406] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\Desert.css", nBufferLength=0x105, lpBuffer=0x31dfa0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\Desert.css", lpFilePart=0x0) returned 0x69 [0043.406] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\Desert.css" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms4\\formsstyles\\desert.css"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x274 [0043.407] GetFileType (hFile=0x274) returned 0x1 [0043.407] GetFileType (hFile=0x274) returned 0x1 [0043.408] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\Desert.css", nBufferLength=0x105, lpBuffer=0x31e0d4, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\Desert.css", lpFilePart=0x0) returned 0x69 [0043.408] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\Desert.css", nBufferLength=0x105, lpBuffer=0x31e0d4, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\Desert.css", lpFilePart=0x0) returned 0x69 [0043.408] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\Desert.css" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms4\\formsstyles\\desert.css"), fInfoLevelId=0x0, lpFileInformation=0x31e5b0 | out: lpFileInformation=0x31e5b0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9f119f00, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0x51da7910, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xfd533640, ftLastWriteTime.dwHighDateTime=0x1d6eb7e, nFileSizeHigh=0x0, nFileSizeLow=0xd40)) returned 1 [0043.408] MoveFileW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\Desert.css" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms4\\formsstyles\\desert.css"), lpNewFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\Desert.css" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms4\\formsstyles\\desert.css")) returned 1 [0043.409] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\Earthy.css", nBufferLength=0x105, lpBuffer=0x31dfb4, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\Earthy.css", lpFilePart=0x0) returned 0x69 [0043.409] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\Earthy.css" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms4\\formsstyles\\earthy.css"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x274 [0043.410] GetFileType (hFile=0x274) returned 0x1 [0043.410] GetFileType (hFile=0x274) returned 0x1 [0043.410] GetFileSize (in: hFile=0x274, lpFileSizeHigh=0x31e5b0 | out: lpFileSizeHigh=0x31e5b0*=0x0) returned 0x72e [0043.410] ReadFile (in: hFile=0x274, lpBuffer=0x2686fcc, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x31e55c, lpOverlapped=0x0 | out: lpBuffer=0x2686fcc*, lpNumberOfBytesRead=0x31e55c*=0x72e, lpOverlapped=0x0) returned 1 [0043.425] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\Earthy.css", nBufferLength=0x105, lpBuffer=0x31dfa0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\Earthy.css", lpFilePart=0x0) returned 0x69 [0043.425] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\Earthy.css" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms4\\formsstyles\\earthy.css"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x274 [0043.426] GetFileType (hFile=0x274) returned 0x1 [0043.426] GetFileType (hFile=0x274) returned 0x1 [0043.427] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\Earthy.css", nBufferLength=0x105, lpBuffer=0x31e0d4, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\Earthy.css", lpFilePart=0x0) returned 0x69 [0043.427] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\Earthy.css", nBufferLength=0x105, lpBuffer=0x31e0d4, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\Earthy.css", lpFilePart=0x0) returned 0x69 [0043.427] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\Earthy.css" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms4\\formsstyles\\earthy.css"), fInfoLevelId=0x0, lpFileInformation=0x31e5b0 | out: lpFileInformation=0x31e5b0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9f119f00, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0x60891430, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xfd5597a0, ftLastWriteTime.dwHighDateTime=0x1d6eb7e, nFileSizeHigh=0x0, nFileSizeLow=0x730)) returned 1 [0043.427] MoveFileW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\Earthy.css" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms4\\formsstyles\\earthy.css"), lpNewFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\Earthy.css" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms4\\formsstyles\\earthy.css")) returned 1 [0043.428] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\GrayCheck.css", nBufferLength=0x105, lpBuffer=0x31dfb4, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\GrayCheck.css", lpFilePart=0x0) returned 0x6c [0043.428] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\GrayCheck.css" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms4\\formsstyles\\graycheck.css"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x274 [0043.428] GetFileType (hFile=0x274) returned 0x1 [0043.428] GetFileType (hFile=0x274) returned 0x1 [0043.428] GetFileSize (in: hFile=0x274, lpFileSizeHigh=0x31e5b0 | out: lpFileSizeHigh=0x31e5b0*=0x0) returned 0xeb0 [0043.428] ReadFile (in: hFile=0x274, lpBuffer=0x26d9678, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x31e55c, lpOverlapped=0x0 | out: lpBuffer=0x26d9678*, lpNumberOfBytesRead=0x31e55c*=0xeb0, lpOverlapped=0x0) returned 1 [0043.443] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\GrayCheck.css", nBufferLength=0x105, lpBuffer=0x31dfa0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\GrayCheck.css", lpFilePart=0x0) returned 0x6c [0043.443] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\GrayCheck.css" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms4\\formsstyles\\graycheck.css"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x274 [0043.444] GetFileType (hFile=0x274) returned 0x1 [0043.444] GetFileType (hFile=0x274) returned 0x1 [0043.444] WriteFile (in: hFile=0x274, lpBuffer=0x272bfa4*, nNumberOfBytesToWrite=0xec0, lpNumberOfBytesWritten=0x31e524, lpOverlapped=0x0 | out: lpBuffer=0x272bfa4*, lpNumberOfBytesWritten=0x31e524*=0xec0, lpOverlapped=0x0) returned 1 [0043.445] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\GrayCheck.css", nBufferLength=0x105, lpBuffer=0x31e0d4, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\GrayCheck.css", lpFilePart=0x0) returned 0x6c [0043.445] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\GrayCheck.css", nBufferLength=0x105, lpBuffer=0x31e0d4, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\GrayCheck.css", lpFilePart=0x0) returned 0x6c [0043.445] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\GrayCheck.css" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms4\\formsstyles\\graycheck.css"), fInfoLevelId=0x0, lpFileInformation=0x31e5b0 | out: lpFileInformation=0x31e5b0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9f119f00, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0x61a91a90, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xfd57f900, ftLastWriteTime.dwHighDateTime=0x1d6eb7e, nFileSizeHigh=0x0, nFileSizeLow=0xec0)) returned 1 [0043.445] MoveFileW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\GrayCheck.css" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms4\\formsstyles\\graycheck.css"), lpNewFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\GrayCheck.css" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms4\\formsstyles\\graycheck.css")) returned 1 [0043.452] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\GreenTea.css", nBufferLength=0x105, lpBuffer=0x31dfb4, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\GreenTea.css", lpFilePart=0x0) returned 0x6b [0043.452] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\GreenTea.css" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms4\\formsstyles\\greentea.css"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x274 [0043.452] GetFileType (hFile=0x274) returned 0x1 [0043.452] GetFileType (hFile=0x274) returned 0x1 [0043.453] GetFileSize (in: hFile=0x274, lpFileSizeHigh=0x31e5b0 | out: lpFileSizeHigh=0x31e5b0*=0x0) returned 0x762 [0043.453] ReadFile (in: hFile=0x274, lpBuffer=0x272da70, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x31e55c, lpOverlapped=0x0 | out: lpBuffer=0x272da70*, lpNumberOfBytesRead=0x31e55c*=0x762, lpOverlapped=0x0) returned 1 [0043.468] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\GreenTea.css", nBufferLength=0x105, lpBuffer=0x31dfa0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\GreenTea.css", lpFilePart=0x0) returned 0x6b [0043.468] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\GreenTea.css" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms4\\formsstyles\\greentea.css"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x274 [0043.468] GetFileType (hFile=0x274) returned 0x1 [0043.468] GetFileType (hFile=0x274) returned 0x1 [0043.469] WriteFile (in: hFile=0x274, lpBuffer=0x277df08*, nNumberOfBytesToWrite=0x770, lpNumberOfBytesWritten=0x31e524, lpOverlapped=0x0 | out: lpBuffer=0x277df08*, lpNumberOfBytesWritten=0x31e524*=0x770, lpOverlapped=0x0) returned 1 [0043.469] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\GreenTea.css", nBufferLength=0x105, lpBuffer=0x31e0d4, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\GreenTea.css", lpFilePart=0x0) returned 0x6b [0043.469] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\GreenTea.css", nBufferLength=0x105, lpBuffer=0x31e0d4, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\GreenTea.css", lpFilePart=0x0) returned 0x6b [0043.470] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\GreenTea.css" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms4\\formsstyles\\greentea.css"), fInfoLevelId=0x0, lpFileInformation=0x31e5b0 | out: lpFileInformation=0x31e5b0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa042cc00, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0x52c3bfd0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xfd5cbbc0, ftLastWriteTime.dwHighDateTime=0x1d6eb7e, nFileSizeHigh=0x0, nFileSizeLow=0x770)) returned 1 [0043.470] MoveFileW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\GreenTea.css" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms4\\formsstyles\\greentea.css"), lpNewFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\GreenTea.css" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms4\\formsstyles\\greentea.css")) returned 1 [0043.471] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\LightSpirit.css", nBufferLength=0x105, lpBuffer=0x31dfb4, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\LightSpirit.css", lpFilePart=0x0) returned 0x6e [0043.471] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\LightSpirit.css" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms4\\formsstyles\\lightspirit.css"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x274 [0043.471] GetFileType (hFile=0x274) returned 0x1 [0043.471] GetFileType (hFile=0x274) returned 0x1 [0043.471] GetFileSize (in: hFile=0x274, lpFileSizeHigh=0x31e5b0 | out: lpFileSizeHigh=0x31e5b0*=0x0) returned 0x7cf [0043.471] ReadFile (in: hFile=0x274, lpBuffer=0x277fa44, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x31e55c, lpOverlapped=0x0 | out: lpBuffer=0x277fa44*, lpNumberOfBytesRead=0x31e55c*=0x7cf, lpOverlapped=0x0) returned 1 [0043.487] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\LightSpirit.css", nBufferLength=0x105, lpBuffer=0x31dfa0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\LightSpirit.css", lpFilePart=0x0) returned 0x6e [0043.487] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\LightSpirit.css" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms4\\formsstyles\\lightspirit.css"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x274 [0043.488] GetFileType (hFile=0x274) returned 0x1 [0043.488] GetFileType (hFile=0x274) returned 0x1 [0043.488] WriteFile (in: hFile=0x274, lpBuffer=0x27d00bc*, nNumberOfBytesToWrite=0x7d0, lpNumberOfBytesWritten=0x31e524, lpOverlapped=0x0 | out: lpBuffer=0x27d00bc*, lpNumberOfBytesWritten=0x31e524*=0x7d0, lpOverlapped=0x0) returned 1 [0043.489] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\LightSpirit.css", nBufferLength=0x105, lpBuffer=0x31e0d4, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\LightSpirit.css", lpFilePart=0x0) returned 0x6e [0043.489] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\LightSpirit.css", nBufferLength=0x105, lpBuffer=0x31e0d4, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\LightSpirit.css", lpFilePart=0x0) returned 0x6e [0043.489] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\LightSpirit.css" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms4\\formsstyles\\lightspirit.css"), fInfoLevelId=0x0, lpFileInformation=0x31e5b0 | out: lpFileInformation=0x31e5b0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa042cc00, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0x6626d2b0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xfd5f1d20, ftLastWriteTime.dwHighDateTime=0x1d6eb7e, nFileSizeHigh=0x0, nFileSizeLow=0x7d0)) returned 1 [0043.489] MoveFileW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\LightSpirit.css" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms4\\formsstyles\\lightspirit.css"), lpNewFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\LightSpirit.css" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms4\\formsstyles\\lightspirit.css")) returned 1 [0043.490] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\Lime.css", nBufferLength=0x105, lpBuffer=0x31dfb4, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\Lime.css", lpFilePart=0x0) returned 0x67 [0043.490] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\Lime.css" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms4\\formsstyles\\lime.css"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x274 [0043.490] GetFileType (hFile=0x274) returned 0x1 [0043.490] GetFileType (hFile=0x274) returned 0x1 [0043.490] GetFileSize (in: hFile=0x274, lpFileSizeHigh=0x31e5b0 | out: lpFileSizeHigh=0x31e5b0*=0x0) returned 0x1091 [0043.490] ReadFile (in: hFile=0x274, lpBuffer=0x27d1410, nNumberOfBytesToRead=0x1091, lpNumberOfBytesRead=0x31e55c, lpOverlapped=0x0 | out: lpBuffer=0x27d1410*, lpNumberOfBytesRead=0x31e55c*=0x1091, lpOverlapped=0x0) returned 1 [0043.505] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\Lime.css", nBufferLength=0x105, lpBuffer=0x31dfa0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\Lime.css", lpFilePart=0x0) returned 0x67 [0043.505] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\Lime.css" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms4\\formsstyles\\lime.css"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x274 [0043.506] GetFileType (hFile=0x274) returned 0x1 [0043.506] GetFileType (hFile=0x274) returned 0x1 [0043.506] WriteFile (in: hFile=0x274, lpBuffer=0x2823518*, nNumberOfBytesToWrite=0x10a0, lpNumberOfBytesWritten=0x31e550, lpOverlapped=0x0 | out: lpBuffer=0x2823518*, lpNumberOfBytesWritten=0x31e550*=0x10a0, lpOverlapped=0x0) returned 1 [0043.507] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\Lime.css", nBufferLength=0x105, lpBuffer=0x31e0d4, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\Lime.css", lpFilePart=0x0) returned 0x67 [0043.507] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\Lime.css", nBufferLength=0x105, lpBuffer=0x31e0d4, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\Lime.css", lpFilePart=0x0) returned 0x67 [0043.507] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\Lime.css" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms4\\formsstyles\\lime.css"), fInfoLevelId=0x0, lpFileInformation=0x31e5b0 | out: lpFileInformation=0x31e5b0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa042cc00, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0x66293410, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xfd617e80, ftLastWriteTime.dwHighDateTime=0x1d6eb7e, nFileSizeHigh=0x0, nFileSizeLow=0x10a0)) returned 1 [0043.507] MoveFileW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\Lime.css" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms4\\formsstyles\\lime.css"), lpNewFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\Lime.css" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms4\\formsstyles\\lime.css")) returned 1 [0043.508] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\Maroon.css", nBufferLength=0x105, lpBuffer=0x31dfb4, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\Maroon.css", lpFilePart=0x0) returned 0x69 [0043.508] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\Maroon.css" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms4\\formsstyles\\maroon.css"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x274 [0043.509] GetFileType (hFile=0x274) returned 0x1 [0043.509] GetFileType (hFile=0x274) returned 0x1 [0043.509] GetFileSize (in: hFile=0x274, lpFileSizeHigh=0x31e5b0 | out: lpFileSizeHigh=0x31e5b0*=0x0) returned 0x720 [0043.509] ReadFile (in: hFile=0x274, lpBuffer=0x2825178, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x31e55c, lpOverlapped=0x0 | out: lpBuffer=0x2825178*, lpNumberOfBytesRead=0x31e55c*=0x720, lpOverlapped=0x0) returned 1 [0043.526] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\Maroon.css", nBufferLength=0x105, lpBuffer=0x31dfa0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\Maroon.css", lpFilePart=0x0) returned 0x69 [0043.526] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\Maroon.css" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms4\\formsstyles\\maroon.css"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x274 [0043.527] GetFileType (hFile=0x274) returned 0x1 [0043.527] GetFileType (hFile=0x274) returned 0x1 [0043.528] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\Maroon.css", nBufferLength=0x105, lpBuffer=0x31e0d4, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\Maroon.css", lpFilePart=0x0) returned 0x69 [0043.528] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\Maroon.css", nBufferLength=0x105, lpBuffer=0x31e0d4, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\Maroon.css", lpFilePart=0x0) returned 0x69 [0043.528] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\Maroon.css" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms4\\formsstyles\\maroon.css"), fInfoLevelId=0x0, lpFileInformation=0x31e5b0 | out: lpFileInformation=0x31e5b0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa042cc00, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0x696f1810, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xfd664140, ftLastWriteTime.dwHighDateTime=0x1d6eb7e, nFileSizeHigh=0x0, nFileSizeLow=0x730)) returned 1 [0043.528] MoveFileW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\Maroon.css" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms4\\formsstyles\\maroon.css"), lpNewFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\Maroon.css" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms4\\formsstyles\\maroon.css")) returned 1 [0043.528] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\Oasis.css", nBufferLength=0x105, lpBuffer=0x31dfb4, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\Oasis.css", lpFilePart=0x0) returned 0x68 [0043.528] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\Oasis.css" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms4\\formsstyles\\oasis.css"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x274 [0043.528] GetFileType (hFile=0x274) returned 0x1 [0043.528] GetFileType (hFile=0x274) returned 0x1 [0043.529] GetFileSize (in: hFile=0x274, lpFileSizeHigh=0x31e5b0 | out: lpFileSizeHigh=0x31e5b0*=0x0) returned 0xfb0 [0043.529] ReadFile (in: hFile=0x274, lpBuffer=0x267719c, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x31e55c, lpOverlapped=0x0 | out: lpBuffer=0x267719c*, lpNumberOfBytesRead=0x31e55c*=0xfb0, lpOverlapped=0x0) returned 1 [0043.543] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\Oasis.css", nBufferLength=0x105, lpBuffer=0x31dfa0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\Oasis.css", lpFilePart=0x0) returned 0x68 [0043.544] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\Oasis.css" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms4\\formsstyles\\oasis.css"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x274 [0043.544] GetFileType (hFile=0x274) returned 0x1 [0043.544] GetFileType (hFile=0x274) returned 0x1 [0043.544] WriteFile (in: hFile=0x274, lpBuffer=0x26ca114*, nNumberOfBytesToWrite=0xfc0, lpNumberOfBytesWritten=0x31e524, lpOverlapped=0x0 | out: lpBuffer=0x26ca114*, lpNumberOfBytesWritten=0x31e524*=0xfc0, lpOverlapped=0x0) returned 1 [0043.545] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\Oasis.css", nBufferLength=0x105, lpBuffer=0x31e0d4, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\Oasis.css", lpFilePart=0x0) returned 0x68 [0043.545] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\Oasis.css", nBufferLength=0x105, lpBuffer=0x31e0d4, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\Oasis.css", lpFilePart=0x0) returned 0x68 [0043.545] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\Oasis.css" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms4\\formsstyles\\oasis.css"), fInfoLevelId=0x0, lpFileInformation=0x31e5b0 | out: lpFileInformation=0x31e5b0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa042cc00, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0x5969b6f0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xfd68a2a0, ftLastWriteTime.dwHighDateTime=0x1d6eb7e, nFileSizeHigh=0x0, nFileSizeLow=0xfc0)) returned 1 [0043.546] MoveFileW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\Oasis.css" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms4\\formsstyles\\oasis.css"), lpNewFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\Oasis.css" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms4\\formsstyles\\oasis.css")) returned 1 [0043.547] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\OliveGreen.css", nBufferLength=0x105, lpBuffer=0x31dfb4, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\OliveGreen.css", lpFilePart=0x0) returned 0x6d [0043.547] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\OliveGreen.css" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms4\\formsstyles\\olivegreen.css"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x274 [0043.547] GetFileType (hFile=0x274) returned 0x1 [0043.548] GetFileType (hFile=0x274) returned 0x1 [0043.548] GetFileSize (in: hFile=0x274, lpFileSizeHigh=0x31e5b0 | out: lpFileSizeHigh=0x31e5b0*=0x0) returned 0x74b [0043.548] ReadFile (in: hFile=0x274, lpBuffer=0x26cbbc0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x31e55c, lpOverlapped=0x0 | out: lpBuffer=0x26cbbc0*, lpNumberOfBytesRead=0x31e55c*=0x74b, lpOverlapped=0x0) returned 1 [0043.563] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\OliveGreen.css", nBufferLength=0x105, lpBuffer=0x31dfa0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\OliveGreen.css", lpFilePart=0x0) returned 0x6d [0043.563] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\OliveGreen.css" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms4\\formsstyles\\olivegreen.css"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x274 [0043.563] GetFileType (hFile=0x274) returned 0x1 [0043.563] GetFileType (hFile=0x274) returned 0x1 [0043.564] WriteFile (in: hFile=0x274, lpBuffer=0x271bfb8*, nNumberOfBytesToWrite=0x750, lpNumberOfBytesWritten=0x31e524, lpOverlapped=0x0 | out: lpBuffer=0x271bfb8*, lpNumberOfBytesWritten=0x31e524*=0x750, lpOverlapped=0x0) returned 1 [0043.565] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\OliveGreen.css", nBufferLength=0x105, lpBuffer=0x31e0d4, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\OliveGreen.css", lpFilePart=0x0) returned 0x6d [0043.565] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\OliveGreen.css", nBufferLength=0x105, lpBuffer=0x31e0d4, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\OliveGreen.css", lpFilePart=0x0) returned 0x6d [0043.565] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\OliveGreen.css" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms4\\formsstyles\\olivegreen.css"), fInfoLevelId=0x0, lpFileInformation=0x31e5b0 | out: lpFileInformation=0x31e5b0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa173f900, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0x597cc1f0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xfd6b0400, ftLastWriteTime.dwHighDateTime=0x1d6eb7e, nFileSizeHigh=0x0, nFileSizeLow=0x750)) returned 1 [0043.565] MoveFileW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\OliveGreen.css" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms4\\formsstyles\\olivegreen.css"), lpNewFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\OliveGreen.css" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms4\\formsstyles\\olivegreen.css")) returned 1 [0043.566] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\Premium.css", nBufferLength=0x105, lpBuffer=0x31dfb4, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\Premium.css", lpFilePart=0x0) returned 0x6a [0043.566] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\Premium.css" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms4\\formsstyles\\premium.css"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x274 [0043.567] GetFileType (hFile=0x274) returned 0x1 [0043.568] GetFileType (hFile=0x274) returned 0x1 [0043.568] GetFileSize (in: hFile=0x274, lpFileSizeHigh=0x31e5b0 | out: lpFileSizeHigh=0x31e5b0*=0x0) returned 0x706 [0043.568] ReadFile (in: hFile=0x274, lpBuffer=0x271da24, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x31e55c, lpOverlapped=0x0 | out: lpBuffer=0x271da24*, lpNumberOfBytesRead=0x31e55c*=0x706, lpOverlapped=0x0) returned 1 [0043.582] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\Premium.css", nBufferLength=0x105, lpBuffer=0x31dfa0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\Premium.css", lpFilePart=0x0) returned 0x6a [0043.583] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\Premium.css" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms4\\formsstyles\\premium.css"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x274 [0043.583] GetFileType (hFile=0x274) returned 0x1 [0043.583] GetFileType (hFile=0x274) returned 0x1 [0043.584] WriteFile (in: hFile=0x274, lpBuffer=0x276dcd4*, nNumberOfBytesToWrite=0x710, lpNumberOfBytesWritten=0x31e524, lpOverlapped=0x0 | out: lpBuffer=0x276dcd4*, lpNumberOfBytesWritten=0x31e524*=0x710, lpOverlapped=0x0) returned 1 [0043.584] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\Premium.css", nBufferLength=0x105, lpBuffer=0x31e0d4, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\Premium.css", lpFilePart=0x0) returned 0x6a [0043.585] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\Premium.css", nBufferLength=0x105, lpBuffer=0x31e0d4, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\Premium.css", lpFilePart=0x0) returned 0x6a [0043.585] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\Premium.css" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms4\\formsstyles\\premium.css"), fInfoLevelId=0x0, lpFileInformation=0x31e5b0 | out: lpFileInformation=0x31e5b0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa173f900, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0x5a6d2cd0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xfd6d6560, ftLastWriteTime.dwHighDateTime=0x1d6eb7e, nFileSizeHigh=0x0, nFileSizeLow=0x710)) returned 1 [0043.585] MoveFileW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\Premium.css" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms4\\formsstyles\\premium.css"), lpNewFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\Premium.css" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms4\\formsstyles\\premium.css")) returned 1 [0043.586] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\Slate.css", nBufferLength=0x105, lpBuffer=0x31dfb4, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\Slate.css", lpFilePart=0x0) returned 0x68 [0043.586] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\Slate.css" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms4\\formsstyles\\slate.css"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x274 [0043.587] GetFileType (hFile=0x274) returned 0x1 [0043.587] GetFileType (hFile=0x274) returned 0x1 [0043.587] GetFileSize (in: hFile=0x274, lpFileSizeHigh=0x31e5b0 | out: lpFileSizeHigh=0x31e5b0*=0x0) returned 0x10d7 [0043.587] ReadFile (in: hFile=0x274, lpBuffer=0x276f01c, nNumberOfBytesToRead=0x10d7, lpNumberOfBytesRead=0x31e55c, lpOverlapped=0x0 | out: lpBuffer=0x276f01c*, lpNumberOfBytesRead=0x31e55c*=0x10d7, lpOverlapped=0x0) returned 1 [0043.602] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\Slate.css", nBufferLength=0x105, lpBuffer=0x31dfa0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\Slate.css", lpFilePart=0x0) returned 0x68 [0043.602] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\Slate.css" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms4\\formsstyles\\slate.css"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x274 [0043.603] GetFileType (hFile=0x274) returned 0x1 [0043.603] GetFileType (hFile=0x274) returned 0x1 [0043.603] WriteFile (in: hFile=0x274, lpBuffer=0x27c1264*, nNumberOfBytesToWrite=0x10e0, lpNumberOfBytesWritten=0x31e550, lpOverlapped=0x0 | out: lpBuffer=0x27c1264*, lpNumberOfBytesWritten=0x31e550*=0x10e0, lpOverlapped=0x0) returned 1 [0043.604] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\Slate.css", nBufferLength=0x105, lpBuffer=0x31e0d4, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\Slate.css", lpFilePart=0x0) returned 0x68 [0043.604] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\Slate.css", nBufferLength=0x105, lpBuffer=0x31e0d4, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\Slate.css", lpFilePart=0x0) returned 0x68 [0043.604] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\Slate.css" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms4\\formsstyles\\slate.css"), fInfoLevelId=0x0, lpFileInformation=0x31e5b0 | out: lpFileInformation=0x31e5b0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa173f900, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0x6d2e6230, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xfd722820, ftLastWriteTime.dwHighDateTime=0x1d6eb7e, nFileSizeHigh=0x0, nFileSizeLow=0x10e0)) returned 1 [0043.604] MoveFileW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\Slate.css" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms4\\formsstyles\\slate.css"), lpNewFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\Slate.css" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms4\\formsstyles\\slate.css")) returned 1 [0043.605] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\SlateBlue.css", nBufferLength=0x105, lpBuffer=0x31dfb4, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\SlateBlue.css", lpFilePart=0x0) returned 0x6c [0043.605] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\SlateBlue.css" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms4\\formsstyles\\slateblue.css"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x274 [0043.605] GetFileType (hFile=0x274) returned 0x1 [0043.605] GetFileType (hFile=0x274) returned 0x1 [0043.606] GetFileSize (in: hFile=0x274, lpFileSizeHigh=0x31e5b0 | out: lpFileSizeHigh=0x31e5b0*=0x0) returned 0x74a [0043.606] ReadFile (in: hFile=0x274, lpBuffer=0x27c2f48, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x31e55c, lpOverlapped=0x0 | out: lpBuffer=0x27c2f48*, lpNumberOfBytesRead=0x31e55c*=0x74a, lpOverlapped=0x0) returned 1 [0043.620] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\SlateBlue.css", nBufferLength=0x105, lpBuffer=0x31dfa0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\SlateBlue.css", lpFilePart=0x0) returned 0x6c [0043.620] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\SlateBlue.css" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms4\\formsstyles\\slateblue.css"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x274 [0043.621] GetFileType (hFile=0x274) returned 0x1 [0043.621] GetFileType (hFile=0x274) returned 0x1 [0043.622] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\SlateBlue.css", nBufferLength=0x105, lpBuffer=0x31e0d4, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\SlateBlue.css", lpFilePart=0x0) returned 0x6c [0043.622] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\SlateBlue.css", nBufferLength=0x105, lpBuffer=0x31e0d4, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\SlateBlue.css", lpFilePart=0x0) returned 0x6c [0043.622] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\SlateBlue.css" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms4\\formsstyles\\slateblue.css"), fInfoLevelId=0x0, lpFileInformation=0x31e5b0 | out: lpFileInformation=0x31e5b0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa173f900, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0x6d2e6230, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xfd748980, ftLastWriteTime.dwHighDateTime=0x1d6eb7e, nFileSizeHigh=0x0, nFileSizeLow=0x750)) returned 1 [0043.622] MoveFileW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\SlateBlue.css" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms4\\formsstyles\\slateblue.css"), lpNewFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\SlateBlue.css" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms4\\formsstyles\\slateblue.css")) returned 1 [0043.623] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\SoftBlue.css", nBufferLength=0x105, lpBuffer=0x31dfb4, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\SoftBlue.css", lpFilePart=0x0) returned 0x6b [0043.623] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\SoftBlue.css" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms4\\formsstyles\\softblue.css"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x274 [0043.634] GetFileType (hFile=0x274) returned 0x1 [0043.634] GetFileType (hFile=0x274) returned 0x1 [0043.634] GetFileSize (in: hFile=0x274, lpFileSizeHigh=0x31e5b0 | out: lpFileSizeHigh=0x31e5b0*=0x0) returned 0x11ca [0043.634] ReadFile (in: hFile=0x274, lpBuffer=0x2814698, nNumberOfBytesToRead=0x11ca, lpNumberOfBytesRead=0x31e55c, lpOverlapped=0x0 | out: lpBuffer=0x2814698*, lpNumberOfBytesRead=0x31e55c*=0x11ca, lpOverlapped=0x0) returned 1 [0043.651] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\SoftBlue.css", nBufferLength=0x105, lpBuffer=0x31dfa0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\SoftBlue.css", lpFilePart=0x0) returned 0x6b [0043.651] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\SoftBlue.css" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms4\\formsstyles\\softblue.css"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x274 [0043.652] GetFileType (hFile=0x274) returned 0x1 [0043.652] GetFileType (hFile=0x274) returned 0x1 [0043.652] WriteFile (in: hFile=0x274, lpBuffer=0x2667868*, nNumberOfBytesToWrite=0x11d0, lpNumberOfBytesWritten=0x31e550, lpOverlapped=0x0 | out: lpBuffer=0x2667868*, lpNumberOfBytesWritten=0x31e550*=0x11d0, lpOverlapped=0x0) returned 1 [0043.653] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\SoftBlue.css", nBufferLength=0x105, lpBuffer=0x31e0d4, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\SoftBlue.css", lpFilePart=0x0) returned 0x6b [0043.653] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\SoftBlue.css", nBufferLength=0x105, lpBuffer=0x31e0d4, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\SoftBlue.css", lpFilePart=0x0) returned 0x6b [0043.653] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\SoftBlue.css" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms4\\formsstyles\\softblue.css"), fInfoLevelId=0x0, lpFileInformation=0x31e5b0 | out: lpFileInformation=0x31e5b0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa173f900, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0x6d37e7b0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xfd794c40, ftLastWriteTime.dwHighDateTime=0x1d6eb7e, nFileSizeHigh=0x0, nFileSizeLow=0x11d0)) returned 1 [0043.654] MoveFileW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\SoftBlue.css" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms4\\formsstyles\\softblue.css"), lpNewFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\SoftBlue.css" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms4\\formsstyles\\softblue.css")) returned 1 [0043.655] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\SpringGreen.css", nBufferLength=0x105, lpBuffer=0x31dfb4, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\SpringGreen.css", lpFilePart=0x0) returned 0x6e [0043.655] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\SpringGreen.css" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms4\\formsstyles\\springgreen.css"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x274 [0043.657] GetFileType (hFile=0x274) returned 0x1 [0043.657] GetFileType (hFile=0x274) returned 0x1 [0043.657] GetFileSize (in: hFile=0x274, lpFileSizeHigh=0x31e5b0 | out: lpFileSizeHigh=0x31e5b0*=0x0) returned 0xfd0 [0043.657] ReadFile (in: hFile=0x274, lpBuffer=0x2669edc, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x31e55c, lpOverlapped=0x0 | out: lpBuffer=0x2669edc*, lpNumberOfBytesRead=0x31e55c*=0xfd0, lpOverlapped=0x0) returned 1 [0043.672] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\SpringGreen.css", nBufferLength=0x105, lpBuffer=0x31dfa0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\SpringGreen.css", lpFilePart=0x0) returned 0x6e [0043.672] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\SpringGreen.css" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms4\\formsstyles\\springgreen.css"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x274 [0043.673] GetFileType (hFile=0x274) returned 0x1 [0043.673] GetFileType (hFile=0x274) returned 0x1 [0043.673] WriteFile (in: hFile=0x274, lpBuffer=0x26bcf0c*, nNumberOfBytesToWrite=0xfe0, lpNumberOfBytesWritten=0x31e524, lpOverlapped=0x0 | out: lpBuffer=0x26bcf0c*, lpNumberOfBytesWritten=0x31e524*=0xfe0, lpOverlapped=0x0) returned 1 [0043.674] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\SpringGreen.css", nBufferLength=0x105, lpBuffer=0x31e0d4, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\SpringGreen.css", lpFilePart=0x0) returned 0x6e [0043.674] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\SpringGreen.css", nBufferLength=0x105, lpBuffer=0x31e0d4, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\SpringGreen.css", lpFilePart=0x0) returned 0x6e [0043.674] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\SpringGreen.css" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms4\\formsstyles\\springgreen.css"), fInfoLevelId=0x0, lpFileInformation=0x31e5b0 | out: lpFileInformation=0x31e5b0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa173f900, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0x6d3a4910, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xfd7bada0, ftLastWriteTime.dwHighDateTime=0x1d6eb7e, nFileSizeHigh=0x0, nFileSizeLow=0xfe0)) returned 1 [0043.674] MoveFileW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\SpringGreen.css" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms4\\formsstyles\\springgreen.css"), lpNewFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\SpringGreen.css" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms4\\formsstyles\\springgreen.css")) returned 1 [0043.675] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\Sts.css", nBufferLength=0x105, lpBuffer=0x31dfb4, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\Sts.css", lpFilePart=0x0) returned 0x66 [0043.675] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\Sts.css" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms4\\formsstyles\\sts.css"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x274 [0043.676] GetFileType (hFile=0x274) returned 0x1 [0043.676] GetFileType (hFile=0x274) returned 0x1 [0043.676] GetFileSize (in: hFile=0x274, lpFileSizeHigh=0x31e5b0 | out: lpFileSizeHigh=0x31e5b0*=0x0) returned 0xadd [0043.676] ReadFile (in: hFile=0x274, lpBuffer=0x26bed48, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x31e55c, lpOverlapped=0x0 | out: lpBuffer=0x26bed48*, lpNumberOfBytesRead=0x31e55c*=0xadd, lpOverlapped=0x0) returned 1 [0043.691] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\Sts.css", nBufferLength=0x105, lpBuffer=0x31dfa0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\Sts.css", lpFilePart=0x0) returned 0x66 [0043.691] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\Sts.css" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms4\\formsstyles\\sts.css"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x274 [0043.692] GetFileType (hFile=0x274) returned 0x1 [0043.692] GetFileType (hFile=0x274) returned 0x1 [0043.693] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\Sts.css", nBufferLength=0x105, lpBuffer=0x31e0d4, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\Sts.css", lpFilePart=0x0) returned 0x66 [0043.693] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\Sts.css", nBufferLength=0x105, lpBuffer=0x31e0d4, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\Sts.css", lpFilePart=0x0) returned 0x66 [0043.693] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\Sts.css" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms4\\formsstyles\\sts.css"), fInfoLevelId=0x0, lpFileInformation=0x31e5b0 | out: lpFileInformation=0x31e5b0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa2a52600, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0x5abe1b90, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xfd7e0f00, ftLastWriteTime.dwHighDateTime=0x1d6eb7e, nFileSizeHigh=0x0, nFileSizeLow=0xae0)) returned 1 [0043.693] MoveFileW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\Sts.css" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms4\\formsstyles\\sts.css"), lpNewFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\Sts.css" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms4\\formsstyles\\sts.css")) returned 1 [0043.693] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\Sts2.css", nBufferLength=0x105, lpBuffer=0x31dfb4, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\Sts2.css", lpFilePart=0x0) returned 0x67 [0043.694] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\Sts2.css" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms4\\formsstyles\\sts2.css"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x274 [0043.694] GetFileType (hFile=0x274) returned 0x1 [0043.694] GetFileType (hFile=0x274) returned 0x1 [0043.694] GetFileSize (in: hFile=0x274, lpFileSizeHigh=0x31e5b0 | out: lpFileSizeHigh=0x31e5b0*=0x0) returned 0x107e [0043.695] ReadFile (in: hFile=0x274, lpBuffer=0x2711624, nNumberOfBytesToRead=0x107e, lpNumberOfBytesRead=0x31e55c, lpOverlapped=0x0 | out: lpBuffer=0x2711624*, lpNumberOfBytesRead=0x31e55c*=0x107e, lpOverlapped=0x0) returned 1 [0043.709] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\Sts2.css", nBufferLength=0x105, lpBuffer=0x31dfa0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\Sts2.css", lpFilePart=0x0) returned 0x67 [0043.710] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\Sts2.css" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms4\\formsstyles\\sts2.css"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x274 [0043.710] GetFileType (hFile=0x274) returned 0x1 [0043.711] GetFileType (hFile=0x274) returned 0x1 [0043.711] WriteFile (in: hFile=0x274, lpBuffer=0x276368c*, nNumberOfBytesToWrite=0x1080, lpNumberOfBytesWritten=0x31e550, lpOverlapped=0x0 | out: lpBuffer=0x276368c*, lpNumberOfBytesWritten=0x31e550*=0x1080, lpOverlapped=0x0) returned 1 [0043.712] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\Sts2.css", nBufferLength=0x105, lpBuffer=0x31e0d4, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\Sts2.css", lpFilePart=0x0) returned 0x67 [0043.712] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\Sts2.css", nBufferLength=0x105, lpBuffer=0x31e0d4, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\Sts2.css", lpFilePart=0x0) returned 0x67 [0043.712] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\Sts2.css" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms4\\formsstyles\\sts2.css"), fInfoLevelId=0x0, lpFileInformation=0x31e5b0 | out: lpFileInformation=0x31e5b0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa2a52600, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0x6d416d30, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xfd82d1c0, ftLastWriteTime.dwHighDateTime=0x1d6eb7e, nFileSizeHigh=0x0, nFileSizeLow=0x1080)) returned 1 [0043.712] MoveFileW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\Sts2.css" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms4\\formsstyles\\sts2.css"), lpNewFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\Sts2.css" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms4\\formsstyles\\sts2.css")) returned 1 [0043.713] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\Swirl.css", nBufferLength=0x105, lpBuffer=0x31dfb4, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\Swirl.css", lpFilePart=0x0) returned 0x68 [0043.713] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\Swirl.css" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms4\\formsstyles\\swirl.css"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x274 [0043.714] GetFileType (hFile=0x274) returned 0x1 [0043.714] GetFileType (hFile=0x274) returned 0x1 [0043.714] GetFileSize (in: hFile=0x274, lpFileSizeHigh=0x31e5b0 | out: lpFileSizeHigh=0x31e5b0*=0x0) returned 0xfb9 [0043.714] ReadFile (in: hFile=0x274, lpBuffer=0x2765b64, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x31e55c, lpOverlapped=0x0 | out: lpBuffer=0x2765b64*, lpNumberOfBytesRead=0x31e55c*=0xfb9, lpOverlapped=0x0) returned 1 [0043.729] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\Swirl.css", nBufferLength=0x105, lpBuffer=0x31dfa0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\Swirl.css", lpFilePart=0x0) returned 0x68 [0043.729] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\Swirl.css" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms4\\formsstyles\\swirl.css"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x274 [0043.730] GetFileType (hFile=0x274) returned 0x1 [0043.730] GetFileType (hFile=0x274) returned 0x1 [0043.730] WriteFile (in: hFile=0x274, lpBuffer=0x27b8978*, nNumberOfBytesToWrite=0xfc0, lpNumberOfBytesWritten=0x31e524, lpOverlapped=0x0 | out: lpBuffer=0x27b8978*, lpNumberOfBytesWritten=0x31e524*=0xfc0, lpOverlapped=0x0) returned 1 [0043.731] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\Swirl.css", nBufferLength=0x105, lpBuffer=0x31e0d4, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\Swirl.css", lpFilePart=0x0) returned 0x68 [0043.731] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\Swirl.css", nBufferLength=0x105, lpBuffer=0x31e0d4, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\Swirl.css", lpFilePart=0x0) returned 0x68 [0043.731] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\Swirl.css" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms4\\formsstyles\\swirl.css"), fInfoLevelId=0x0, lpFileInformation=0x31e5b0 | out: lpFileInformation=0x31e5b0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa2a52600, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0x5ac7a110, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xfd853320, ftLastWriteTime.dwHighDateTime=0x1d6eb7e, nFileSizeHigh=0x0, nFileSizeLow=0xfc0)) returned 1 [0043.731] MoveFileW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\Swirl.css" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms4\\formsstyles\\swirl.css"), lpNewFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\Swirl.css" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms4\\formsstyles\\swirl.css")) returned 1 [0043.732] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\Teal.css", nBufferLength=0x105, lpBuffer=0x31dfb4, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\Teal.css", lpFilePart=0x0) returned 0x67 [0043.733] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\Teal.css" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms4\\formsstyles\\teal.css"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x274 [0043.733] GetFileType (hFile=0x274) returned 0x1 [0043.733] GetFileType (hFile=0x274) returned 0x1 [0043.733] GetFileSize (in: hFile=0x274, lpFileSizeHigh=0x31e5b0 | out: lpFileSizeHigh=0x31e5b0*=0x0) returned 0x738 [0043.733] ReadFile (in: hFile=0x274, lpBuffer=0x27ba3f8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x31e55c, lpOverlapped=0x0 | out: lpBuffer=0x27ba3f8*, lpNumberOfBytesRead=0x31e55c*=0x738, lpOverlapped=0x0) returned 1 [0043.748] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\Teal.css", nBufferLength=0x105, lpBuffer=0x31dfa0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\Teal.css", lpFilePart=0x0) returned 0x67 [0043.748] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\Teal.css" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms4\\formsstyles\\teal.css"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x274 [0043.749] GetFileType (hFile=0x274) returned 0x1 [0043.749] GetFileType (hFile=0x274) returned 0x1 [0043.749] WriteFile (in: hFile=0x274, lpBuffer=0x280a788*, nNumberOfBytesToWrite=0x740, lpNumberOfBytesWritten=0x31e524, lpOverlapped=0x0 | out: lpBuffer=0x280a788*, lpNumberOfBytesWritten=0x31e524*=0x740, lpOverlapped=0x0) returned 1 [0043.750] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\Teal.css", nBufferLength=0x105, lpBuffer=0x31e0d4, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\Teal.css", lpFilePart=0x0) returned 0x67 [0043.750] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\Teal.css", nBufferLength=0x105, lpBuffer=0x31e0d4, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\Teal.css", lpFilePart=0x0) returned 0x67 [0043.750] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\Teal.css" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms4\\formsstyles\\teal.css"), fInfoLevelId=0x0, lpFileInformation=0x31e5b0 | out: lpFileInformation=0x31e5b0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa3d65300, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0x5acc63d0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xfd879480, ftLastWriteTime.dwHighDateTime=0x1d6eb7e, nFileSizeHigh=0x0, nFileSizeLow=0x740)) returned 1 [0043.750] MoveFileW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\Teal.css" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms4\\formsstyles\\teal.css"), lpNewFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\Teal.css" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms4\\formsstyles\\teal.css")) returned 1 [0043.751] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\TexturedBlue.css", nBufferLength=0x105, lpBuffer=0x31dfb4, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\TexturedBlue.css", lpFilePart=0x0) returned 0x6f [0043.751] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\TexturedBlue.css" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms4\\formsstyles\\texturedblue.css"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x274 [0043.752] GetFileType (hFile=0x274) returned 0x1 [0043.752] GetFileType (hFile=0x274) returned 0x1 [0043.752] GetFileSize (in: hFile=0x274, lpFileSizeHigh=0x31e5b0 | out: lpFileSizeHigh=0x31e5b0*=0x0) returned 0x739 [0043.752] ReadFile (in: hFile=0x274, lpBuffer=0x280c224, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x31e55c, lpOverlapped=0x0 | out: lpBuffer=0x280c224*, lpNumberOfBytesRead=0x31e55c*=0x739, lpOverlapped=0x0) returned 1 [0043.769] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\TexturedBlue.css", nBufferLength=0x105, lpBuffer=0x31dfa0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\TexturedBlue.css", lpFilePart=0x0) returned 0x6f [0043.769] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\TexturedBlue.css" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms4\\formsstyles\\texturedblue.css"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x274 [0043.770] GetFileType (hFile=0x274) returned 0x1 [0043.770] GetFileType (hFile=0x274) returned 0x1 [0043.770] WriteFile (in: hFile=0x274, lpBuffer=0x265bb40*, nNumberOfBytesToWrite=0x740, lpNumberOfBytesWritten=0x31e524, lpOverlapped=0x0 | out: lpBuffer=0x265bb40*, lpNumberOfBytesWritten=0x31e524*=0x740, lpOverlapped=0x0) returned 1 [0043.771] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\TexturedBlue.css", nBufferLength=0x105, lpBuffer=0x31e0d4, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\TexturedBlue.css", lpFilePart=0x0) returned 0x6f [0043.771] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\TexturedBlue.css", nBufferLength=0x105, lpBuffer=0x31e0d4, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\TexturedBlue.css", lpFilePart=0x0) returned 0x6f [0043.771] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\TexturedBlue.css" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms4\\formsstyles\\texturedblue.css"), fInfoLevelId=0x0, lpFileInformation=0x31e5b0 | out: lpFileInformation=0x31e5b0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa3d65300, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0x6d462ff0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xfd89f5e0, ftLastWriteTime.dwHighDateTime=0x1d6eb7e, nFileSizeHigh=0x0, nFileSizeLow=0x740)) returned 1 [0043.771] MoveFileW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\TexturedBlue.css" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms4\\formsstyles\\texturedblue.css"), lpNewFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\TexturedBlue.css" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms4\\formsstyles\\texturedblue.css")) returned 1 [0043.772] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\VelvetRose.css", nBufferLength=0x105, lpBuffer=0x31dfb4, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\VelvetRose.css", lpFilePart=0x0) returned 0x6d [0043.772] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\VelvetRose.css" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms4\\formsstyles\\velvetrose.css"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x274 [0043.772] GetFileType (hFile=0x274) returned 0x1 [0043.772] GetFileType (hFile=0x274) returned 0x1 [0043.772] GetFileSize (in: hFile=0x274, lpFileSizeHigh=0x31e5b0 | out: lpFileSizeHigh=0x31e5b0*=0x0) returned 0x733 [0043.772] ReadFile (in: hFile=0x274, lpBuffer=0x265d5ec, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x31e55c, lpOverlapped=0x0 | out: lpBuffer=0x265d5ec*, lpNumberOfBytesRead=0x31e55c*=0x733, lpOverlapped=0x0) returned 1 [0043.788] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\VelvetRose.css", nBufferLength=0x105, lpBuffer=0x31dfa0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\VelvetRose.css", lpFilePart=0x0) returned 0x6d [0043.788] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\VelvetRose.css" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms4\\formsstyles\\velvetrose.css"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x274 [0043.789] GetFileType (hFile=0x274) returned 0x1 [0043.789] GetFileType (hFile=0x274) returned 0x1 [0043.789] WriteFile (in: hFile=0x274, lpBuffer=0x26adaf8*, nNumberOfBytesToWrite=0x740, lpNumberOfBytesWritten=0x31e524, lpOverlapped=0x0 | out: lpBuffer=0x26adaf8*, lpNumberOfBytesWritten=0x31e524*=0x740, lpOverlapped=0x0) returned 1 [0043.790] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\VelvetRose.css", nBufferLength=0x105, lpBuffer=0x31e0d4, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\VelvetRose.css", lpFilePart=0x0) returned 0x6d [0043.790] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\VelvetRose.css", nBufferLength=0x105, lpBuffer=0x31e0d4, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\VelvetRose.css", lpFilePart=0x0) returned 0x6d [0043.790] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\VelvetRose.css" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms4\\formsstyles\\velvetrose.css"), fInfoLevelId=0x0, lpFileInformation=0x31e5b0 | out: lpFileInformation=0x31e5b0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa3d65300, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0x5e490770, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xfd8eb8a0, ftLastWriteTime.dwHighDateTime=0x1d6eb7e, nFileSizeHigh=0x0, nFileSizeLow=0x740)) returned 1 [0043.790] MoveFileW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\VelvetRose.css" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms4\\formsstyles\\velvetrose.css"), lpNewFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\VelvetRose.css" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms4\\formsstyles\\velvetrose.css")) returned 1 [0043.791] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\Americana", nBufferLength=0x105, lpBuffer=0x31e06c, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\Americana", lpFilePart=0x0) returned 0x68 [0043.791] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\Americana\\", nBufferLength=0x105, lpBuffer=0x31e040, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\Americana\\", lpFilePart=0x0) returned 0x69 [0043.791] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\Americana\\*", lpFindFileData=0x31e28c | out: lpFindFileData=0x31e28c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5133d8d0, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x5eb8e810, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x5eb8e810, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x381e80 [0043.791] FindClose (in: hFindFile=0x381e80 | out: hFindFile=0x381e80) returned 1 [0043.791] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\Americana", nBufferLength=0x105, lpBuffer=0x31e06c, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\Americana", lpFilePart=0x0) returned 0x68 [0043.791] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\Americana\\", nBufferLength=0x105, lpBuffer=0x31e040, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\Americana\\", lpFilePart=0x0) returned 0x69 [0043.791] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\Americana\\*", lpFindFileData=0x31e28c | out: lpFindFileData=0x31e28c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5133d8d0, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x5eb8e810, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x5eb8e810, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x381e80 [0043.792] FindClose (in: hFindFile=0x381e80 | out: hFindFile=0x381e80) returned 1 [0043.792] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\BabyBlue", nBufferLength=0x105, lpBuffer=0x31e06c, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\BabyBlue", lpFilePart=0x0) returned 0x67 [0043.792] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\BabyBlue\\", nBufferLength=0x105, lpBuffer=0x31e040, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\BabyBlue\\", lpFilePart=0x0) returned 0x68 [0043.792] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\BabyBlue\\*", lpFindFileData=0x31e28c | out: lpFindFileData=0x31e28c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x51767f50, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x5f42f7d0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x5f42f7d0, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x381e80 [0043.792] FindClose (in: hFindFile=0x381e80 | out: hFindFile=0x381e80) returned 1 [0043.792] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\BabyBlue", nBufferLength=0x105, lpBuffer=0x31e06c, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\BabyBlue", lpFilePart=0x0) returned 0x67 [0043.792] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\BabyBlue\\", nBufferLength=0x105, lpBuffer=0x31e040, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\BabyBlue\\", lpFilePart=0x0) returned 0x68 [0043.792] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\BabyBlue\\*", lpFindFileData=0x31e28c | out: lpFindFileData=0x31e28c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x51767f50, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x5f42f7d0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x5f42f7d0, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x381e80 [0043.792] FindClose (in: hFindFile=0x381e80 | out: hFindFile=0x381e80) returned 1 [0043.792] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\Biscay", nBufferLength=0x105, lpBuffer=0x31e06c, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\Biscay", lpFilePart=0x0) returned 0x65 [0043.793] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\Biscay\\", nBufferLength=0x105, lpBuffer=0x31e040, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\Biscay\\", lpFilePart=0x0) returned 0x66 [0043.793] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\Biscay\\*", lpFindFileData=0x31e28c | out: lpFindFileData=0x31e28c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x519a33f0, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x5f690dd0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x5f690dd0, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x381e80 [0043.793] FindClose (in: hFindFile=0x381e80 | out: hFindFile=0x381e80) returned 1 [0043.793] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\Biscay", nBufferLength=0x105, lpBuffer=0x31e06c, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\Biscay", lpFilePart=0x0) returned 0x65 [0043.793] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\Biscay\\", nBufferLength=0x105, lpBuffer=0x31e040, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\Biscay\\", lpFilePart=0x0) returned 0x66 [0043.793] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\Biscay\\*", lpFindFileData=0x31e28c | out: lpFindFileData=0x31e28c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x519a33f0, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x5f690dd0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x5f690dd0, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x381e80 [0043.793] FindClose (in: hFindFile=0x381e80 | out: hFindFile=0x381e80) returned 1 [0043.793] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\BrightOrange", nBufferLength=0x105, lpBuffer=0x31e06c, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\BrightOrange", lpFilePart=0x0) returned 0x6b [0043.793] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\BrightOrange\\", nBufferLength=0x105, lpBuffer=0x31e040, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\BrightOrange\\", lpFilePart=0x0) returned 0x6c [0043.793] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\BrightOrange\\*", lpFindFileData=0x31e28c | out: lpFindFileData=0x31e28c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x51a87c30, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x60062890, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x60062890, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x381e80 [0043.794] FindClose (in: hFindFile=0x381e80 | out: hFindFile=0x381e80) returned 1 [0043.794] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\BrightOrange", nBufferLength=0x105, lpBuffer=0x31e06c, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\BrightOrange", lpFilePart=0x0) returned 0x6b [0043.794] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\BrightOrange\\", nBufferLength=0x105, lpBuffer=0x31e040, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\BrightOrange\\", lpFilePart=0x0) returned 0x6c [0043.794] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\BrightOrange\\*", lpFindFileData=0x31e28c | out: lpFindFileData=0x31e28c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x51a87c30, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x60062890, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x60062890, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x381e80 [0043.794] FindClose (in: hFindFile=0x381e80 | out: hFindFile=0x381e80) returned 1 [0043.794] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\BrightYellow", nBufferLength=0x105, lpBuffer=0x31e06c, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\BrightYellow", lpFilePart=0x0) returned 0x6b [0043.794] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\BrightYellow\\", nBufferLength=0x105, lpBuffer=0x31e040, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\BrightYellow\\", lpFilePart=0x0) returned 0x6c [0043.794] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\BrightYellow\\*", lpFindFileData=0x31e28c | out: lpFindFileData=0x31e28c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x51a87c30, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x60062890, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x60062890, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x381e80 [0043.794] FindClose (in: hFindFile=0x381e80 | out: hFindFile=0x381e80) returned 1 [0043.795] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\BrightYellow", nBufferLength=0x105, lpBuffer=0x31e06c, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\BrightYellow", lpFilePart=0x0) returned 0x6b [0043.795] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\BrightYellow\\", nBufferLength=0x105, lpBuffer=0x31e040, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\BrightYellow\\", lpFilePart=0x0) returned 0x6c [0043.795] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\BrightYellow\\*", lpFindFileData=0x31e28c | out: lpFindFileData=0x31e28c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x51a87c30, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x60062890, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x60062890, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x381e80 [0043.795] FindClose (in: hFindFile=0x381e80 | out: hFindFile=0x381e80) returned 1 [0043.795] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\Desert", nBufferLength=0x105, lpBuffer=0x31e06c, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\Desert", lpFilePart=0x0) returned 0x65 [0043.795] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\Desert\\", nBufferLength=0x105, lpBuffer=0x31e040, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\Desert\\", lpFilePart=0x0) returned 0x66 [0043.795] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\Desert\\*", lpFindFileData=0x31e28c | out: lpFindFileData=0x31e28c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x51da7910, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x60760930, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x60760930, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x381e80 [0043.795] FindClose (in: hFindFile=0x381e80 | out: hFindFile=0x381e80) returned 1 [0043.795] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\Desert", nBufferLength=0x105, lpBuffer=0x31e06c, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\Desert", lpFilePart=0x0) returned 0x65 [0043.795] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\Desert\\", nBufferLength=0x105, lpBuffer=0x31e040, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\Desert\\", lpFilePart=0x0) returned 0x66 [0043.796] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\Desert\\*", lpFindFileData=0x31e28c | out: lpFindFileData=0x31e28c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x51da7910, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x60760930, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x60760930, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x381e80 [0043.796] FindClose (in: hFindFile=0x381e80 | out: hFindFile=0x381e80) returned 1 [0043.796] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\GrayCheck", nBufferLength=0x105, lpBuffer=0x31e06c, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\GrayCheck", lpFilePart=0x0) returned 0x68 [0043.796] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\GrayCheck\\", nBufferLength=0x105, lpBuffer=0x31e040, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\GrayCheck\\", lpFilePart=0x0) returned 0x69 [0043.796] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\GrayCheck\\*", lpFindFileData=0x31e28c | out: lpFindFileData=0x31e28c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x52c3bfd0, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x61ab7bf0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x61ab7bf0, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x381e80 [0043.797] FindClose (in: hFindFile=0x381e80 | out: hFindFile=0x381e80) returned 1 [0043.797] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\GrayCheck", nBufferLength=0x105, lpBuffer=0x31e06c, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\GrayCheck", lpFilePart=0x0) returned 0x68 [0043.797] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\GrayCheck\\", nBufferLength=0x105, lpBuffer=0x31e040, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\GrayCheck\\", lpFilePart=0x0) returned 0x69 [0043.797] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\GrayCheck\\*", lpFindFileData=0x31e28c | out: lpFindFileData=0x31e28c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x52c3bfd0, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x61ab7bf0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x61ab7bf0, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x381e80 [0043.797] FindClose (in: hFindFile=0x381e80 | out: hFindFile=0x381e80) returned 1 [0043.797] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\Lime", nBufferLength=0x105, lpBuffer=0x31e06c, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\Lime", lpFilePart=0x0) returned 0x63 [0043.797] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\Lime\\", nBufferLength=0x105, lpBuffer=0x31e040, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\Lime\\", lpFilePart=0x0) returned 0x64 [0043.797] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\Lime\\*", lpFindFileData=0x31e28c | out: lpFindFileData=0x31e28c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x568309f0, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x66293410, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x66293410, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x381e80 [0043.799] FindClose (in: hFindFile=0x381e80 | out: hFindFile=0x381e80) returned 1 [0043.799] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\Lime", nBufferLength=0x105, lpBuffer=0x31e06c, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\Lime", lpFilePart=0x0) returned 0x63 [0043.799] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\Lime\\", nBufferLength=0x105, lpBuffer=0x31e040, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\Lime\\", lpFilePart=0x0) returned 0x64 [0043.799] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\Lime\\*", lpFindFileData=0x31e28c | out: lpFindFileData=0x31e28c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x568309f0, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x66293410, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x66293410, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x381e80 [0043.799] FindClose (in: hFindFile=0x381e80 | out: hFindFile=0x381e80) returned 1 [0043.799] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\Oasis", nBufferLength=0x105, lpBuffer=0x31e06c, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\Oasis", lpFilePart=0x0) returned 0x64 [0043.800] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\Oasis\\", nBufferLength=0x105, lpBuffer=0x31e040, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\Oasis\\", lpFilePart=0x0) returned 0x65 [0043.800] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\Oasis\\*", lpFindFileData=0x31e28c | out: lpFindFileData=0x31e28c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5969b6f0, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x6b22b3b0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x6b22b3b0, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x381e80 [0043.801] FindClose (in: hFindFile=0x381e80 | out: hFindFile=0x381e80) returned 1 [0043.801] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\Oasis", nBufferLength=0x105, lpBuffer=0x31e06c, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\Oasis", lpFilePart=0x0) returned 0x64 [0043.801] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\Oasis\\", nBufferLength=0x105, lpBuffer=0x31e040, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\Oasis\\", lpFilePart=0x0) returned 0x65 [0043.801] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\Oasis\\*", lpFindFileData=0x31e28c | out: lpFindFileData=0x31e28c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5969b6f0, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x6b22b3b0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x6b22b3b0, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x381e80 [0043.801] FindClose (in: hFindFile=0x381e80 | out: hFindFile=0x381e80) returned 1 [0043.801] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\Slate", nBufferLength=0x105, lpBuffer=0x31e06c, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\Slate", lpFilePart=0x0) returned 0x64 [0043.801] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\Slate\\", nBufferLength=0x105, lpBuffer=0x31e040, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\Slate\\", lpFilePart=0x0) returned 0x65 [0043.801] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\Slate\\*", lpFindFileData=0x31e28c | out: lpFindFileData=0x31e28c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5a9f29b0, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x6d2e6230, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x6d2e6230, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x381e80 [0043.802] FindClose (in: hFindFile=0x381e80 | out: hFindFile=0x381e80) returned 1 [0043.802] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\Slate", nBufferLength=0x105, lpBuffer=0x31e06c, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\Slate", lpFilePart=0x0) returned 0x64 [0043.802] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\Slate\\", nBufferLength=0x105, lpBuffer=0x31e040, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\Slate\\", lpFilePart=0x0) returned 0x65 [0043.802] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\Slate\\*", lpFindFileData=0x31e28c | out: lpFindFileData=0x31e28c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5a9f29b0, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x6d2e6230, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x6d2e6230, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x381e80 [0043.803] FindClose (in: hFindFile=0x381e80 | out: hFindFile=0x381e80) returned 1 [0043.803] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\SoftBlue", nBufferLength=0x105, lpBuffer=0x31e06c, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\SoftBlue", lpFilePart=0x0) returned 0x67 [0043.803] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\SoftBlue\\", nBufferLength=0x105, lpBuffer=0x31e040, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\SoftBlue\\", lpFilePart=0x0) returned 0x68 [0043.803] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\SoftBlue\\*", lpFindFileData=0x31e28c | out: lpFindFileData=0x31e28c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5aad71f0, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x6d37e7b0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x6d37e7b0, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x381e80 [0043.803] FindClose (in: hFindFile=0x381e80 | out: hFindFile=0x381e80) returned 1 [0043.803] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\SoftBlue", nBufferLength=0x105, lpBuffer=0x31e06c, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\SoftBlue", lpFilePart=0x0) returned 0x67 [0043.803] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\SoftBlue\\", nBufferLength=0x105, lpBuffer=0x31e040, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\SoftBlue\\", lpFilePart=0x0) returned 0x68 [0043.803] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\SoftBlue\\*", lpFindFileData=0x31e28c | out: lpFindFileData=0x31e28c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5aad71f0, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x6d37e7b0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x6d37e7b0, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x381e80 [0043.803] FindClose (in: hFindFile=0x381e80 | out: hFindFile=0x381e80) returned 1 [0043.804] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\SpringGreen", nBufferLength=0x105, lpBuffer=0x31e06c, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\SpringGreen", lpFilePart=0x0) returned 0x6a [0043.804] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\SpringGreen\\", nBufferLength=0x105, lpBuffer=0x31e040, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\SpringGreen\\", lpFilePart=0x0) returned 0x6b [0043.804] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\SpringGreen\\*", lpFindFileData=0x31e28c | out: lpFindFileData=0x31e28c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5ab49610, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x6d3a4910, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x6d3a4910, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x381e80 [0043.805] FindClose (in: hFindFile=0x381e80 | out: hFindFile=0x381e80) returned 1 [0043.805] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\SpringGreen", nBufferLength=0x105, lpBuffer=0x31e06c, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\SpringGreen", lpFilePart=0x0) returned 0x6a [0043.805] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\SpringGreen\\", nBufferLength=0x105, lpBuffer=0x31e040, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\SpringGreen\\", lpFilePart=0x0) returned 0x6b [0043.805] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\SpringGreen\\*", lpFindFileData=0x31e28c | out: lpFindFileData=0x31e28c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5ab49610, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x6d3a4910, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x6d3a4910, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x381e80 [0043.805] FindClose (in: hFindFile=0x381e80 | out: hFindFile=0x381e80) returned 1 [0043.805] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\STS2", nBufferLength=0x105, lpBuffer=0x31e06c, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\STS2", lpFilePart=0x0) returned 0x63 [0043.805] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\STS2\\", nBufferLength=0x105, lpBuffer=0x31e040, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\STS2\\", lpFilePart=0x0) returned 0x64 [0043.805] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\STS2\\*", lpFindFileData=0x31e28c | out: lpFindFileData=0x31e28c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5abe1b90, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x6d416d30, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x6d416d30, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x381e80 [0043.805] FindClose (in: hFindFile=0x381e80 | out: hFindFile=0x381e80) returned 1 [0043.806] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\STS2", nBufferLength=0x105, lpBuffer=0x31e06c, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\STS2", lpFilePart=0x0) returned 0x63 [0043.806] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\STS2\\", nBufferLength=0x105, lpBuffer=0x31e040, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\STS2\\", lpFilePart=0x0) returned 0x64 [0043.806] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\STS2\\*", lpFindFileData=0x31e28c | out: lpFindFileData=0x31e28c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5abe1b90, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x6d416d30, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x6d416d30, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x381e80 [0043.806] FindClose (in: hFindFile=0x381e80 | out: hFindFile=0x381e80) returned 1 [0043.806] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\Swirl", nBufferLength=0x105, lpBuffer=0x31e06c, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\Swirl", lpFilePart=0x0) returned 0x64 [0043.806] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\Swirl\\", nBufferLength=0x105, lpBuffer=0x31e040, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\Swirl\\", lpFilePart=0x0) returned 0x65 [0043.806] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\Swirl\\*", lpFindFileData=0x31e28c | out: lpFindFileData=0x31e28c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5ac7a110, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x6d43ce90, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x6d43ce90, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x381e80 [0043.806] FindClose (in: hFindFile=0x381e80 | out: hFindFile=0x381e80) returned 1 [0043.806] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\Swirl", nBufferLength=0x105, lpBuffer=0x31e06c, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\Swirl", lpFilePart=0x0) returned 0x64 [0043.806] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\Swirl\\", nBufferLength=0x105, lpBuffer=0x31e040, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\Swirl\\", lpFilePart=0x0) returned 0x65 [0043.806] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\Swirl\\*", lpFindFileData=0x31e28c | out: lpFindFileData=0x31e28c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5ac7a110, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x6d43ce90, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x6d43ce90, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x381e80 [0043.807] FindClose (in: hFindFile=0x381e80 | out: hFindFile=0x381e80) returned 1 [0043.807] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms5", nBufferLength=0x105, lpBuffer=0x31e15c, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms5", lpFilePart=0x0) returned 0x52 [0043.807] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms5\\", nBufferLength=0x105, lpBuffer=0x31e130, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms5\\", lpFilePart=0x0) returned 0x53 [0043.807] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms5\\*", lpFindFileData=0x31e37c | out: lpFindFileData=0x31e37c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5127f1f0, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x70685f50, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x70685f50, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x381e80 [0043.810] FindClose (in: hFindFile=0x381e80 | out: hFindFile=0x381e80) returned 1 [0043.811] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms5", nBufferLength=0x105, lpBuffer=0x31e15c, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms5", lpFilePart=0x0) returned 0x52 [0043.811] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms5\\", nBufferLength=0x105, lpBuffer=0x31e130, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms5\\", lpFilePart=0x0) returned 0x53 [0043.811] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms5\\*", lpFindFileData=0x31e37c | out: lpFindFileData=0x31e37c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5127f1f0, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x70685f50, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x70685f50, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x381e80 [0043.812] FindClose (in: hFindFile=0x381e80 | out: hFindFile=0x381e80) returned 1 [0043.812] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms5\\FormsBlankPage.html", nBufferLength=0x105, lpBuffer=0x31e02c, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms5\\FormsBlankPage.html", lpFilePart=0x0) returned 0x66 [0043.812] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms5\\FormsBlankPage.html" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms5\\formsblankpage.html"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x274 [0043.813] GetFileType (hFile=0x274) returned 0x1 [0043.813] GetFileType (hFile=0x274) returned 0x1 [0043.813] GetFileSize (in: hFile=0x274, lpFileSizeHigh=0x31e628 | out: lpFileSizeHigh=0x31e628*=0x0) returned 0x43a [0043.813] ReadFile (in: hFile=0x274, lpBuffer=0x26e0894, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x31e5d4, lpOverlapped=0x0 | out: lpBuffer=0x26e0894*, lpNumberOfBytesRead=0x31e5d4*=0x43a, lpOverlapped=0x0) returned 1 [0043.828] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms5\\FormsBlankPage.html", nBufferLength=0x105, lpBuffer=0x31e018, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms5\\FormsBlankPage.html", lpFilePart=0x0) returned 0x66 [0043.828] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms5\\FormsBlankPage.html" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms5\\formsblankpage.html"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x274 [0043.829] GetFileType (hFile=0x274) returned 0x1 [0043.829] GetFileType (hFile=0x274) returned 0x1 [0043.829] WriteFile (in: hFile=0x274, lpBuffer=0x272fd38*, nNumberOfBytesToWrite=0x440, lpNumberOfBytesWritten=0x31e59c, lpOverlapped=0x0 | out: lpBuffer=0x272fd38*, lpNumberOfBytesWritten=0x31e59c*=0x440, lpOverlapped=0x0) returned 1 [0043.830] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms5\\FormsBlankPage.html", nBufferLength=0x105, lpBuffer=0x31e14c, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms5\\FormsBlankPage.html", lpFilePart=0x0) returned 0x66 [0043.830] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms5\\FormsBlankPage.html", nBufferLength=0x105, lpBuffer=0x31e14c, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms5\\FormsBlankPage.html", lpFilePart=0x0) returned 0x66 [0043.830] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms5\\FormsBlankPage.html" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms5\\formsblankpage.html"), fInfoLevelId=0x0, lpFileInformation=0x31e628 | out: lpFileInformation=0x31e628*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa89b0700, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0x5291c2f0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xfd937b60, ftLastWriteTime.dwHighDateTime=0x1d6eb7e, nFileSizeHigh=0x0, nFileSizeLow=0x440)) returned 1 [0043.830] MoveFileW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms5\\FormsBlankPage.html" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms5\\formsblankpage.html"), lpNewFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms5\\FormsBlankPage.html" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms5\\formsblankpage.html")) returned 1 [0043.831] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms5\\FormsBrowserUpgrade.html", nBufferLength=0x105, lpBuffer=0x31e02c, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms5\\FormsBrowserUpgrade.html", lpFilePart=0x0) returned 0x6b [0043.831] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms5\\FormsBrowserUpgrade.html" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms5\\formsbrowserupgrade.html"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x274 [0043.831] GetFileType (hFile=0x274) returned 0x1 [0043.831] GetFileType (hFile=0x274) returned 0x1 [0043.831] GetFileSize (in: hFile=0x274, lpFileSizeHigh=0x31e628 | out: lpFileSizeHigh=0x31e628*=0x0) returned 0x829 [0043.831] ReadFile (in: hFile=0x274, lpBuffer=0x27318cc, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x31e5d4, lpOverlapped=0x0 | out: lpBuffer=0x27318cc*, lpNumberOfBytesRead=0x31e5d4*=0x829, lpOverlapped=0x0) returned 1 [0043.847] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms5\\FormsBrowserUpgrade.html", nBufferLength=0x105, lpBuffer=0x31e018, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms5\\FormsBrowserUpgrade.html", lpFilePart=0x0) returned 0x6b [0043.847] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms5\\FormsBrowserUpgrade.html" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms5\\formsbrowserupgrade.html"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x274 [0043.848] GetFileType (hFile=0x274) returned 0x1 [0043.848] GetFileType (hFile=0x274) returned 0x1 [0043.848] WriteFile (in: hFile=0x274, lpBuffer=0x2782134*, nNumberOfBytesToWrite=0x830, lpNumberOfBytesWritten=0x31e59c, lpOverlapped=0x0 | out: lpBuffer=0x2782134*, lpNumberOfBytesWritten=0x31e59c*=0x830, lpOverlapped=0x0) returned 1 [0043.849] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms5\\FormsBrowserUpgrade.html", nBufferLength=0x105, lpBuffer=0x31e14c, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms5\\FormsBrowserUpgrade.html", lpFilePart=0x0) returned 0x6b [0043.849] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms5\\FormsBrowserUpgrade.html", nBufferLength=0x105, lpBuffer=0x31e14c, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms5\\FormsBrowserUpgrade.html", lpFilePart=0x0) returned 0x6b [0043.849] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms5\\FormsBrowserUpgrade.html" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms5\\formsbrowserupgrade.html"), fInfoLevelId=0x0, lpFileInformation=0x31e628 | out: lpFileInformation=0x31e628*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa89b0700, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0x618c8a10, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xfd95dcc0, ftLastWriteTime.dwHighDateTime=0x1d6eb7e, nFileSizeHigh=0x0, nFileSizeLow=0x830)) returned 1 [0043.849] MoveFileW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms5\\FormsBrowserUpgrade.html" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms5\\formsbrowserupgrade.html"), lpNewFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms5\\FormsBrowserUpgrade.html" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms5\\formsbrowserupgrade.html")) returned 1 [0043.850] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms5\\FormsColorChart.html", nBufferLength=0x105, lpBuffer=0x31e02c, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms5\\FormsColorChart.html", lpFilePart=0x0) returned 0x67 [0043.850] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms5\\FormsColorChart.html" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms5\\formscolorchart.html"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x274 [0043.850] GetFileType (hFile=0x274) returned 0x1 [0043.850] GetFileType (hFile=0x274) returned 0x1 [0043.850] GetFileSize (in: hFile=0x274, lpFileSizeHigh=0x31e628 | out: lpFileSizeHigh=0x31e628*=0x0) returned 0x2ef [0043.851] ReadFile (in: hFile=0x274, lpBuffer=0x278378c, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x31e5d4, lpOverlapped=0x0 | out: lpBuffer=0x278378c*, lpNumberOfBytesRead=0x31e5d4*=0x2ef, lpOverlapped=0x0) returned 1 [0043.865] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms5\\FormsColorChart.html", nBufferLength=0x105, lpBuffer=0x31e018, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms5\\FormsColorChart.html", lpFilePart=0x0) returned 0x67 [0043.865] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms5\\FormsColorChart.html" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms5\\formscolorchart.html"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x274 [0043.866] GetFileType (hFile=0x274) returned 0x1 [0043.866] GetFileType (hFile=0x274) returned 0x1 [0043.867] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms5\\FormsColorChart.html", nBufferLength=0x105, lpBuffer=0x31e14c, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms5\\FormsColorChart.html", lpFilePart=0x0) returned 0x67 [0043.867] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms5\\FormsColorChart.html", nBufferLength=0x105, lpBuffer=0x31e14c, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms5\\FormsColorChart.html", lpFilePart=0x0) returned 0x67 [0043.867] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms5\\FormsColorChart.html" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms5\\formscolorchart.html"), fInfoLevelId=0x0, lpFileInformation=0x31e628 | out: lpFileInformation=0x31e628*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa89b0700, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0x5291c2f0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xfd983e20, ftLastWriteTime.dwHighDateTime=0x1d6eb7e, nFileSizeHigh=0x0, nFileSizeLow=0x2f0)) returned 1 [0043.871] MoveFileW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms5\\FormsColorChart.html" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms5\\formscolorchart.html"), lpNewFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms5\\FormsColorChart.html" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms5\\formscolorchart.html")) returned 1 [0043.872] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms5\\FormsFormTemplate.html", nBufferLength=0x105, lpBuffer=0x31e02c, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms5\\FormsFormTemplate.html", lpFilePart=0x0) returned 0x69 [0043.872] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms5\\FormsFormTemplate.html" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms5\\formsformtemplate.html"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x274 [0043.872] GetFileType (hFile=0x274) returned 0x1 [0043.872] GetFileType (hFile=0x274) returned 0x1 [0043.872] GetFileSize (in: hFile=0x274, lpFileSizeHigh=0x31e628 | out: lpFileSizeHigh=0x31e628*=0x0) returned 0x13bb [0043.872] ReadFile (in: hFile=0x274, lpBuffer=0x27d38f4, nNumberOfBytesToRead=0x13bb, lpNumberOfBytesRead=0x31e5d4, lpOverlapped=0x0 | out: lpBuffer=0x27d38f4*, lpNumberOfBytesRead=0x31e5d4*=0x13bb, lpOverlapped=0x0) returned 1 [0043.888] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms5\\FormsFormTemplate.html", nBufferLength=0x105, lpBuffer=0x31e018, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms5\\FormsFormTemplate.html", lpFilePart=0x0) returned 0x69 [0043.888] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms5\\FormsFormTemplate.html" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms5\\formsformtemplate.html"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x274 [0043.889] GetFileType (hFile=0x274) returned 0x1 [0043.889] GetFileType (hFile=0x274) returned 0x1 [0043.889] WriteFile (in: hFile=0x274, lpBuffer=0x282699c*, nNumberOfBytesToWrite=0x13c0, lpNumberOfBytesWritten=0x31e5c8, lpOverlapped=0x0 | out: lpBuffer=0x282699c*, lpNumberOfBytesWritten=0x31e5c8*=0x13c0, lpOverlapped=0x0) returned 1 [0043.890] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms5\\FormsFormTemplate.html", nBufferLength=0x105, lpBuffer=0x31e14c, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms5\\FormsFormTemplate.html", lpFilePart=0x0) returned 0x69 [0043.890] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms5\\FormsFormTemplate.html", nBufferLength=0x105, lpBuffer=0x31e14c, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms5\\FormsFormTemplate.html", lpFilePart=0x0) returned 0x69 [0043.890] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms5\\FormsFormTemplate.html" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms5\\formsformtemplate.html"), fInfoLevelId=0x0, lpFileInformation=0x31e628 | out: lpFileInformation=0x31e628*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa89b0700, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0x5291c2f0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xfd9d00e0, ftLastWriteTime.dwHighDateTime=0x1d6eb7e, nFileSizeHigh=0x0, nFileSizeLow=0x13c0)) returned 1 [0043.890] MoveFileW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms5\\FormsFormTemplate.html" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms5\\formsformtemplate.html"), lpNewFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms5\\FormsFormTemplate.html" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms5\\formsformtemplate.html")) returned 1 [0043.891] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms5\\FormsFormTemplateRTL.html", nBufferLength=0x105, lpBuffer=0x31e02c, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms5\\FormsFormTemplateRTL.html", lpFilePart=0x0) returned 0x6c [0043.891] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms5\\FormsFormTemplateRTL.html" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms5\\formsformtemplatertl.html"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x274 [0043.891] GetFileType (hFile=0x274) returned 0x1 [0043.891] GetFileType (hFile=0x274) returned 0x1 [0043.891] GetFileSize (in: hFile=0x274, lpFileSizeHigh=0x31e628 | out: lpFileSizeHigh=0x31e628*=0x0) returned 0x13c5 [0043.891] ReadFile (in: hFile=0x274, lpBuffer=0x282823c, nNumberOfBytesToRead=0x13c5, lpNumberOfBytesRead=0x31e5d4, lpOverlapped=0x0 | out: lpBuffer=0x282823c*, lpNumberOfBytesRead=0x31e5d4*=0x13c5, lpOverlapped=0x0) returned 1 [0043.910] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms5\\FormsFormTemplateRTL.html", nBufferLength=0x105, lpBuffer=0x31e018, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms5\\FormsFormTemplateRTL.html", lpFilePart=0x0) returned 0x6c [0043.910] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms5\\FormsFormTemplateRTL.html" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms5\\formsformtemplatertl.html"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x274 [0043.911] GetFileType (hFile=0x274) returned 0x1 [0043.911] GetFileType (hFile=0x274) returned 0x1 [0043.911] WriteFile (in: hFile=0x274, lpBuffer=0x26779bc*, nNumberOfBytesToWrite=0x13d0, lpNumberOfBytesWritten=0x31e5c8, lpOverlapped=0x0 | out: lpBuffer=0x26779bc*, lpNumberOfBytesWritten=0x31e5c8*=0x13d0, lpOverlapped=0x0) returned 1 [0043.912] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms5\\FormsFormTemplateRTL.html", nBufferLength=0x105, lpBuffer=0x31e14c, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms5\\FormsFormTemplateRTL.html", lpFilePart=0x0) returned 0x6c [0043.912] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms5\\FormsFormTemplateRTL.html", nBufferLength=0x105, lpBuffer=0x31e14c, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms5\\FormsFormTemplateRTL.html", lpFilePart=0x0) returned 0x6c [0043.912] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms5\\FormsFormTemplateRTL.html" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms5\\formsformtemplatertl.html"), fInfoLevelId=0x0, lpFileInformation=0x31e628 | out: lpFileInformation=0x31e628*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x69fe8900, ftCreationTime.dwHighDateTime=0x1c7d303, ftLastAccessTime.dwLowDateTime=0x618c8a10, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xfd9f6240, ftLastWriteTime.dwHighDateTime=0x1d6eb7e, nFileSizeHigh=0x0, nFileSizeLow=0x13d0)) returned 1 [0043.912] MoveFileW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms5\\FormsFormTemplateRTL.html" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms5\\formsformtemplatertl.html"), lpNewFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms5\\FormsFormTemplateRTL.html" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms5\\formsformtemplatertl.html")) returned 1 [0043.913] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms5\\FormsImageTemplate.html", nBufferLength=0x105, lpBuffer=0x31e02c, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms5\\FormsImageTemplate.html", lpFilePart=0x0) returned 0x6a [0043.913] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms5\\FormsImageTemplate.html" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms5\\formsimagetemplate.html"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x274 [0043.913] GetFileType (hFile=0x274) returned 0x1 [0043.913] GetFileType (hFile=0x274) returned 0x1 [0043.913] GetFileSize (in: hFile=0x274, lpFileSizeHigh=0x31e628 | out: lpFileSizeHigh=0x31e628*=0x0) returned 0x8ab [0043.913] ReadFile (in: hFile=0x274, lpBuffer=0x2679b38, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x31e5d4, lpOverlapped=0x0 | out: lpBuffer=0x2679b38*, lpNumberOfBytesRead=0x31e5d4*=0x8ab, lpOverlapped=0x0) returned 1 [0043.931] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms5\\FormsImageTemplate.html", nBufferLength=0x105, lpBuffer=0x31e018, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms5\\FormsImageTemplate.html", lpFilePart=0x0) returned 0x6a [0043.931] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms5\\FormsImageTemplate.html" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms5\\formsimagetemplate.html"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x274 [0043.932] GetFileType (hFile=0x274) returned 0x1 [0043.932] GetFileType (hFile=0x274) returned 0x1 [0043.932] WriteFile (in: hFile=0x274, lpBuffer=0x26ca778*, nNumberOfBytesToWrite=0x8b0, lpNumberOfBytesWritten=0x31e59c, lpOverlapped=0x0 | out: lpBuffer=0x26ca778*, lpNumberOfBytesWritten=0x31e59c*=0x8b0, lpOverlapped=0x0) returned 1 [0043.933] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms5\\FormsImageTemplate.html", nBufferLength=0x105, lpBuffer=0x31e14c, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms5\\FormsImageTemplate.html", lpFilePart=0x0) returned 0x6a [0043.933] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms5\\FormsImageTemplate.html", nBufferLength=0x105, lpBuffer=0x31e14c, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms5\\FormsImageTemplate.html", lpFilePart=0x0) returned 0x6a [0043.933] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms5\\FormsImageTemplate.html" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms5\\formsimagetemplate.html"), fInfoLevelId=0x0, lpFileInformation=0x31e628 | out: lpFileInformation=0x31e628*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa89b0700, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0x618eeb70, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xfda42500, ftLastWriteTime.dwHighDateTime=0x1d6eb7e, nFileSizeHigh=0x0, nFileSizeLow=0x8b0)) returned 1 [0043.933] MoveFileW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms5\\FormsImageTemplate.html" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms5\\formsimagetemplate.html"), lpNewFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms5\\FormsImageTemplate.html" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms5\\formsimagetemplate.html")) returned 1 [0043.934] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms5\\FormsMacroTemplate.html", nBufferLength=0x105, lpBuffer=0x31e02c, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms5\\FormsMacroTemplate.html", lpFilePart=0x0) returned 0x6a [0043.934] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms5\\FormsMacroTemplate.html" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms5\\formsmacrotemplate.html"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x274 [0043.935] GetFileType (hFile=0x274) returned 0x1 [0043.935] GetFileType (hFile=0x274) returned 0x1 [0043.935] GetFileSize (in: hFile=0x274, lpFileSizeHigh=0x31e628 | out: lpFileSizeHigh=0x31e628*=0x0) returned 0x858 [0043.935] ReadFile (in: hFile=0x274, lpBuffer=0x26cc344, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x31e5d4, lpOverlapped=0x0 | out: lpBuffer=0x26cc344*, lpNumberOfBytesRead=0x31e5d4*=0x858, lpOverlapped=0x0) returned 1 [0043.950] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms5\\FormsMacroTemplate.html", nBufferLength=0x105, lpBuffer=0x31e018, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms5\\FormsMacroTemplate.html", lpFilePart=0x0) returned 0x6a [0043.950] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms5\\FormsMacroTemplate.html" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms5\\formsmacrotemplate.html"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x274 [0043.951] GetFileType (hFile=0x274) returned 0x1 [0043.951] GetFileType (hFile=0x274) returned 0x1 [0043.952] WriteFile (in: hFile=0x274, lpBuffer=0x271cc98*, nNumberOfBytesToWrite=0x860, lpNumberOfBytesWritten=0x31e59c, lpOverlapped=0x0 | out: lpBuffer=0x271cc98*, lpNumberOfBytesWritten=0x31e59c*=0x860, lpOverlapped=0x0) returned 1 [0043.952] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms5\\FormsMacroTemplate.html", nBufferLength=0x105, lpBuffer=0x31e14c, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms5\\FormsMacroTemplate.html", lpFilePart=0x0) returned 0x6a [0043.952] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms5\\FormsMacroTemplate.html", nBufferLength=0x105, lpBuffer=0x31e14c, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms5\\FormsMacroTemplate.html", lpFilePart=0x0) returned 0x6a [0043.953] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms5\\FormsMacroTemplate.html" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms5\\formsmacrotemplate.html"), fInfoLevelId=0x0, lpFileInformation=0x31e628 | out: lpFileInformation=0x31e628*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa89b0700, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0x52942450, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xfda68660, ftLastWriteTime.dwHighDateTime=0x1d6eb7e, nFileSizeHigh=0x0, nFileSizeLow=0x860)) returned 1 [0043.953] MoveFileW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms5\\FormsMacroTemplate.html" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms5\\formsmacrotemplate.html"), lpNewFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms5\\FormsMacroTemplate.html" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms5\\formsmacrotemplate.html")) returned 1 [0043.954] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms5\\FormsPreviewTemplate.html", nBufferLength=0x105, lpBuffer=0x31e02c, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms5\\FormsPreviewTemplate.html", lpFilePart=0x0) returned 0x6c [0043.954] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms5\\FormsPreviewTemplate.html" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms5\\formspreviewtemplate.html"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x274 [0043.954] GetFileType (hFile=0x274) returned 0x1 [0043.954] GetFileType (hFile=0x274) returned 0x1 [0043.954] GetFileSize (in: hFile=0x274, lpFileSizeHigh=0x31e628 | out: lpFileSizeHigh=0x31e628*=0x0) returned 0x46ff [0043.954] ReadFile (in: hFile=0x274, lpBuffer=0x271e008, nNumberOfBytesToRead=0x46ff, lpNumberOfBytesRead=0x31e5d4, lpOverlapped=0x0 | out: lpBuffer=0x271e008*, lpNumberOfBytesRead=0x31e5d4*=0x46ff, lpOverlapped=0x0) returned 1 [0044.006] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms5\\FormsPreviewTemplate.html", nBufferLength=0x105, lpBuffer=0x31e018, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms5\\FormsPreviewTemplate.html", lpFilePart=0x0) returned 0x6c [0044.006] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms5\\FormsPreviewTemplate.html" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms5\\formspreviewtemplate.html"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x274 [0044.007] GetFileType (hFile=0x274) returned 0x1 [0044.007] GetFileType (hFile=0x274) returned 0x1 [0044.007] WriteFile (in: hFile=0x274, lpBuffer=0x27810f0*, nNumberOfBytesToWrite=0x4700, lpNumberOfBytesWritten=0x31e5c8, lpOverlapped=0x0 | out: lpBuffer=0x27810f0*, lpNumberOfBytesWritten=0x31e5c8*=0x4700, lpOverlapped=0x0) returned 1 [0044.008] CloseHandle (hObject=0x274) returned 1 [0044.009] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms5\\FormsPreviewTemplate.html", nBufferLength=0x105, lpBuffer=0x31e14c, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms5\\FormsPreviewTemplate.html", lpFilePart=0x0) returned 0x6c [0044.009] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms5\\FormsPreviewTemplate.html", nBufferLength=0x105, lpBuffer=0x31e14c, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms5\\FormsPreviewTemplate.html", lpFilePart=0x0) returned 0x6c [0044.009] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms5\\FormsPreviewTemplate.html" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms5\\formspreviewtemplate.html"), fInfoLevelId=0x0, lpFileInformation=0x31e628 | out: lpFileInformation=0x31e628*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa89b0700, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0x5298e710, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xfdb00be0, ftLastWriteTime.dwHighDateTime=0x1d6eb7e, nFileSizeHigh=0x0, nFileSizeLow=0x4700)) returned 1 [0044.009] MoveFileW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms5\\FormsPreviewTemplate.html" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms5\\formspreviewtemplate.html"), lpNewFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms5\\FormsPreviewTemplate.html" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms5\\formspreviewtemplate.html")) returned 1 [0044.010] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms5\\FormsPreviewTemplateRTL.html", nBufferLength=0x105, lpBuffer=0x31e02c, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms5\\FormsPreviewTemplateRTL.html", lpFilePart=0x0) returned 0x6f [0044.010] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms5\\FormsPreviewTemplateRTL.html" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms5\\formspreviewtemplatertl.html"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x274 [0044.010] GetFileType (hFile=0x274) returned 0x1 [0044.010] GetFileType (hFile=0x274) returned 0x1 [0044.010] GetFileSize (in: hFile=0x274, lpFileSizeHigh=0x31e628 | out: lpFileSizeHigh=0x31e628*=0x0) returned 0x4709 [0044.010] ReadFile (in: hFile=0x274, lpBuffer=0x2785cf8, nNumberOfBytesToRead=0x4709, lpNumberOfBytesRead=0x31e5d4, lpOverlapped=0x0 | out: lpBuffer=0x2785cf8*, lpNumberOfBytesRead=0x31e5d4*=0x4709, lpOverlapped=0x0) returned 1 [0044.012] CloseHandle (hObject=0x274) returned 1 [0044.026] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms5\\FormsPreviewTemplateRTL.html", nBufferLength=0x105, lpBuffer=0x31e018, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms5\\FormsPreviewTemplateRTL.html", lpFilePart=0x0) returned 0x6f [0044.026] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e50c) returned 1 [0044.026] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms5\\FormsPreviewTemplateRTL.html" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms5\\formspreviewtemplatertl.html"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x274 [0044.027] GetFileType (hFile=0x274) returned 0x1 [0044.027] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e508) returned 1 [0044.027] GetFileType (hFile=0x274) returned 0x1 [0044.027] WriteFile (in: hFile=0x274, lpBuffer=0x27e8e30*, nNumberOfBytesToWrite=0x4710, lpNumberOfBytesWritten=0x31e5c8, lpOverlapped=0x0 | out: lpBuffer=0x27e8e30*, lpNumberOfBytesWritten=0x31e5c8*=0x4710, lpOverlapped=0x0) returned 1 [0044.028] CloseHandle (hObject=0x274) returned 1 [0044.029] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms5\\FormsPreviewTemplateRTL.html", nBufferLength=0x105, lpBuffer=0x31e14c, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms5\\FormsPreviewTemplateRTL.html", lpFilePart=0x0) returned 0x6f [0044.029] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms5\\FormsPreviewTemplateRTL.html", nBufferLength=0x105, lpBuffer=0x31e14c, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms5\\FormsPreviewTemplateRTL.html", lpFilePart=0x0) returned 0x6f [0044.029] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e5ac) returned 1 [0044.029] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms5\\FormsPreviewTemplateRTL.html" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms5\\formspreviewtemplatertl.html"), fInfoLevelId=0x0, lpFileInformation=0x31e628 | out: lpFileInformation=0x31e628*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x797dd200, ftCreationTime.dwHighDateTime=0x1c7d303, ftLastAccessTime.dwLowDateTime=0x618eeb70, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xfdb26d40, ftLastWriteTime.dwHighDateTime=0x1d6eb7e, nFileSizeHigh=0x0, nFileSizeLow=0x4710)) returned 1 [0044.029] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e5a8) returned 1 [0044.029] MoveFileW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms5\\FormsPreviewTemplateRTL.html" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms5\\formspreviewtemplatertl.html"), lpNewFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms5\\FormsPreviewTemplateRTL.html" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms5\\formspreviewtemplatertl.html")) returned 1 [0044.029] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms5\\FormsPrintTemplate.html", nBufferLength=0x105, lpBuffer=0x31e02c, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms5\\FormsPrintTemplate.html", lpFilePart=0x0) returned 0x6a [0044.029] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e520) returned 1 [0044.029] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms5\\FormsPrintTemplate.html" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms5\\formsprinttemplate.html"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x274 [0044.030] GetFileType (hFile=0x274) returned 0x1 [0044.030] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e51c) returned 1 [0044.030] GetFileType (hFile=0x274) returned 0x1 [0044.030] GetFileSize (in: hFile=0x274, lpFileSizeHigh=0x31e628 | out: lpFileSizeHigh=0x31e628*=0x0) returned 0x5bf [0044.030] ReadFile (in: hFile=0x274, lpBuffer=0x27ee014, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x31e5d4, lpOverlapped=0x0 | out: lpBuffer=0x27ee014*, lpNumberOfBytesRead=0x31e5d4*=0x5bf, lpOverlapped=0x0) returned 1 [0044.031] CloseHandle (hObject=0x274) returned 1 [0044.045] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms5\\FormsPrintTemplate.html", nBufferLength=0x105, lpBuffer=0x31e018, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms5\\FormsPrintTemplate.html", lpFilePart=0x0) returned 0x6a [0044.045] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e50c) returned 1 [0044.045] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms5\\FormsPrintTemplate.html" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms5\\formsprinttemplate.html"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x274 [0044.045] GetFileType (hFile=0x274) returned 0x1 [0044.045] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e508) returned 1 [0044.045] GetFileType (hFile=0x274) returned 0x1 [0044.046] WriteFile (in: hFile=0x274, lpBuffer=0x283dc44*, nNumberOfBytesToWrite=0x5c0, lpNumberOfBytesWritten=0x31e59c, lpOverlapped=0x0 | out: lpBuffer=0x283dc44*, lpNumberOfBytesWritten=0x31e59c*=0x5c0, lpOverlapped=0x0) returned 1 [0044.046] CloseHandle (hObject=0x274) returned 1 [0044.047] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms5\\FormsPrintTemplate.html", nBufferLength=0x105, lpBuffer=0x31e14c, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms5\\FormsPrintTemplate.html", lpFilePart=0x0) returned 0x6a [0044.047] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms5\\FormsPrintTemplate.html", nBufferLength=0x105, lpBuffer=0x31e14c, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms5\\FormsPrintTemplate.html", lpFilePart=0x0) returned 0x6a [0044.047] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e5ac) returned 1 [0044.047] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms5\\FormsPrintTemplate.html" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms5\\formsprinttemplate.html"), fInfoLevelId=0x0, lpFileInformation=0x31e628 | out: lpFileInformation=0x31e628*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa89b0700, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0x5298e710, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xfdb4cea0, ftLastWriteTime.dwHighDateTime=0x1d6eb7e, nFileSizeHigh=0x0, nFileSizeLow=0x5c0)) returned 1 [0044.047] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e5a8) returned 1 [0044.047] MoveFileW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms5\\FormsPrintTemplate.html" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms5\\formsprinttemplate.html"), lpNewFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms5\\FormsPrintTemplate.html" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms5\\formsprinttemplate.html")) returned 1 [0044.048] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms5\\FormsPrintTemplateRTL.html", nBufferLength=0x105, lpBuffer=0x31e02c, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms5\\FormsPrintTemplateRTL.html", lpFilePart=0x0) returned 0x6d [0044.048] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e520) returned 1 [0044.048] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms5\\FormsPrintTemplateRTL.html" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms5\\formsprinttemplatertl.html"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x274 [0044.048] GetFileType (hFile=0x274) returned 0x1 [0044.048] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e51c) returned 1 [0044.048] GetFileType (hFile=0x274) returned 0x1 [0044.048] GetFileSize (in: hFile=0x274, lpFileSizeHigh=0x31e628 | out: lpFileSizeHigh=0x31e628*=0x0) returned 0x5c9 [0044.048] ReadFile (in: hFile=0x274, lpBuffer=0x283f590, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x31e5d4, lpOverlapped=0x0 | out: lpBuffer=0x283f590*, lpNumberOfBytesRead=0x31e5d4*=0x5c9, lpOverlapped=0x0) returned 1 [0044.050] CloseHandle (hObject=0x274) returned 1 [0044.090] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms5\\FormsPrintTemplateRTL.html", nBufferLength=0x105, lpBuffer=0x31e018, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms5\\FormsPrintTemplateRTL.html", lpFilePart=0x0) returned 0x6d [0044.091] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e50c) returned 1 [0044.091] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms5\\FormsPrintTemplateRTL.html" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms5\\formsprinttemplatertl.html"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x274 [0044.092] GetFileType (hFile=0x274) returned 0x1 [0044.092] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e508) returned 1 [0044.092] GetFileType (hFile=0x274) returned 0x1 [0044.092] WriteFile (in: hFile=0x274, lpBuffer=0x268e40c*, nNumberOfBytesToWrite=0x5d0, lpNumberOfBytesWritten=0x31e59c, lpOverlapped=0x0 | out: lpBuffer=0x268e40c*, lpNumberOfBytesWritten=0x31e59c*=0x5d0, lpOverlapped=0x0) returned 1 [0044.093] CloseHandle (hObject=0x274) returned 1 [0044.093] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms5\\FormsPrintTemplateRTL.html", nBufferLength=0x105, lpBuffer=0x31e14c, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms5\\FormsPrintTemplateRTL.html", lpFilePart=0x0) returned 0x6d [0044.093] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms5\\FormsPrintTemplateRTL.html", nBufferLength=0x105, lpBuffer=0x31e14c, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms5\\FormsPrintTemplateRTL.html", lpFilePart=0x0) returned 0x6d [0044.093] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e5ac) returned 1 [0044.094] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms5\\FormsPrintTemplateRTL.html" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms5\\formsprinttemplatertl.html"), fInfoLevelId=0x0, lpFileInformation=0x31e628 | out: lpFileInformation=0x31e628*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8a2e4800, ftCreationTime.dwHighDateTime=0x1c7d303, ftLastAccessTime.dwLowDateTime=0x618eeb70, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xfdbbf2c0, ftLastWriteTime.dwHighDateTime=0x1d6eb7e, nFileSizeHigh=0x0, nFileSizeLow=0x5d0)) returned 1 [0044.094] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e5a8) returned 1 [0044.094] MoveFileW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms5\\FormsPrintTemplateRTL.html" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms5\\formsprinttemplatertl.html"), lpNewFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms5\\FormsPrintTemplateRTL.html" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms5\\formsprinttemplatertl.html")) returned 1 [0044.094] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms5\\FormsViewAttachmentIcons.jpg", nBufferLength=0x105, lpBuffer=0x31e02c, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms5\\FormsViewAttachmentIcons.jpg", lpFilePart=0x0) returned 0x6f [0044.094] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e520) returned 1 [0044.094] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms5\\FormsViewAttachmentIcons.jpg" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms5\\formsviewattachmenticons.jpg"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x274 [0044.094] GetFileType (hFile=0x274) returned 0x1 [0044.094] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e51c) returned 1 [0044.095] GetFileType (hFile=0x274) returned 0x1 [0044.095] GetFileSize (in: hFile=0x274, lpFileSizeHigh=0x31e628 | out: lpFileSizeHigh=0x31e628*=0x0) returned 0x1499 [0044.095] ReadFile (in: hFile=0x274, lpBuffer=0x268f790, nNumberOfBytesToRead=0x1499, lpNumberOfBytesRead=0x31e5d4, lpOverlapped=0x0 | out: lpBuffer=0x268f790*, lpNumberOfBytesRead=0x31e5d4*=0x1499, lpOverlapped=0x0) returned 1 [0044.096] CloseHandle (hObject=0x274) returned 1 [0044.110] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms5\\FormsViewAttachmentIcons.jpg", nBufferLength=0x105, lpBuffer=0x31e018, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms5\\FormsViewAttachmentIcons.jpg", lpFilePart=0x0) returned 0x6f [0044.110] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e50c) returned 1 [0044.110] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms5\\FormsViewAttachmentIcons.jpg" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms5\\formsviewattachmenticons.jpg"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x274 [0044.111] GetFileType (hFile=0x274) returned 0x1 [0044.111] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e508) returned 1 [0044.111] GetFileType (hFile=0x274) returned 0x1 [0044.111] WriteFile (in: hFile=0x274, lpBuffer=0x26e2df4*, nNumberOfBytesToWrite=0x14a0, lpNumberOfBytesWritten=0x31e5c8, lpOverlapped=0x0 | out: lpBuffer=0x26e2df4*, lpNumberOfBytesWritten=0x31e5c8*=0x14a0, lpOverlapped=0x0) returned 1 [0044.112] CloseHandle (hObject=0x274) returned 1 [0044.112] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms5\\FormsViewAttachmentIcons.jpg", nBufferLength=0x105, lpBuffer=0x31e14c, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms5\\FormsViewAttachmentIcons.jpg", lpFilePart=0x0) returned 0x6f [0044.112] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms5\\FormsViewAttachmentIcons.jpg", nBufferLength=0x105, lpBuffer=0x31e14c, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms5\\FormsViewAttachmentIcons.jpg", lpFilePart=0x0) returned 0x6f [0044.112] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e5ac) returned 1 [0044.112] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms5\\FormsViewAttachmentIcons.jpg" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms5\\formsviewattachmenticons.jpg"), fInfoLevelId=0x0, lpFileInformation=0x31e628 | out: lpFileInformation=0x31e628*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb0f34200, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0x5298e710, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xfdbe5420, ftLastWriteTime.dwHighDateTime=0x1d6eb7e, nFileSizeHigh=0x0, nFileSizeLow=0x14a0)) returned 1 [0044.112] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e5a8) returned 1 [0044.112] MoveFileW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms5\\FormsViewAttachmentIcons.jpg" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms5\\formsviewattachmenticons.jpg"), lpNewFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms5\\FormsViewAttachmentIcons.jpg" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms5\\formsviewattachmenticons.jpg")) returned 1 [0044.113] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms5\\FormsViewAttachmentIconsMask.bmp", nBufferLength=0x105, lpBuffer=0x31e02c, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms5\\FormsViewAttachmentIconsMask.bmp", lpFilePart=0x0) returned 0x73 [0044.113] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e520) returned 1 [0044.113] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms5\\FormsViewAttachmentIconsMask.bmp" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms5\\formsviewattachmenticonsmask.bmp"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x274 [0044.113] GetFileType (hFile=0x274) returned 0x1 [0044.113] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e51c) returned 1 [0044.113] GetFileType (hFile=0x274) returned 0x1 [0044.113] GetFileSize (in: hFile=0x274, lpFileSizeHigh=0x31e628 | out: lpFileSizeHigh=0x31e628*=0x0) returned 0x638 [0044.113] ReadFile (in: hFile=0x274, lpBuffer=0x26e4e04, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x31e5d4, lpOverlapped=0x0 | out: lpBuffer=0x26e4e04*, lpNumberOfBytesRead=0x31e5d4*=0x638, lpOverlapped=0x0) returned 1 [0044.115] CloseHandle (hObject=0x274) returned 1 [0044.128] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms5\\FormsViewAttachmentIconsMask.bmp", nBufferLength=0x105, lpBuffer=0x31e018, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms5\\FormsViewAttachmentIconsMask.bmp", lpFilePart=0x0) returned 0x73 [0044.128] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e50c) returned 1 [0044.128] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms5\\FormsViewAttachmentIconsMask.bmp" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms5\\formsviewattachmenticonsmask.bmp"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x274 [0044.129] GetFileType (hFile=0x274) returned 0x1 [0044.129] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e508) returned 1 [0044.129] GetFileType (hFile=0x274) returned 0x1 [0044.129] WriteFile (in: hFile=0x274, lpBuffer=0x2734cdc*, nNumberOfBytesToWrite=0x640, lpNumberOfBytesWritten=0x31e59c, lpOverlapped=0x0 | out: lpBuffer=0x2734cdc*, lpNumberOfBytesWritten=0x31e59c*=0x640, lpOverlapped=0x0) returned 1 [0044.130] CloseHandle (hObject=0x274) returned 1 [0044.130] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms5\\FormsViewAttachmentIconsMask.bmp", nBufferLength=0x105, lpBuffer=0x31e14c, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms5\\FormsViewAttachmentIconsMask.bmp", lpFilePart=0x0) returned 0x73 [0044.130] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms5\\FormsViewAttachmentIconsMask.bmp", nBufferLength=0x105, lpBuffer=0x31e14c, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms5\\FormsViewAttachmentIconsMask.bmp", lpFilePart=0x0) returned 0x73 [0044.130] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e5ac) returned 1 [0044.130] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms5\\FormsViewAttachmentIconsMask.bmp" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms5\\formsviewattachmenticonsmask.bmp"), fInfoLevelId=0x0, lpFileInformation=0x31e628 | out: lpFileInformation=0x31e628*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb2246f00, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0x618eeb70, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xfdc0b580, ftLastWriteTime.dwHighDateTime=0x1d6eb7e, nFileSizeHigh=0x0, nFileSizeLow=0x640)) returned 1 [0044.130] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e5a8) returned 1 [0044.130] MoveFileW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms5\\FormsViewAttachmentIconsMask.bmp" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms5\\formsviewattachmenticonsmask.bmp"), lpNewFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms5\\FormsViewAttachmentIconsMask.bmp" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms5\\formsviewattachmenticonsmask.bmp")) returned 1 [0044.131] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms5\\InfoPathWelcomeImage.jpg", nBufferLength=0x105, lpBuffer=0x31e02c, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms5\\InfoPathWelcomeImage.jpg", lpFilePart=0x0) returned 0x6b [0044.131] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e520) returned 1 [0044.131] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms5\\InfoPathWelcomeImage.jpg" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms5\\infopathwelcomeimage.jpg"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x274 [0044.131] GetFileType (hFile=0x274) returned 0x1 [0044.131] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e51c) returned 1 [0044.131] GetFileType (hFile=0x274) returned 0x1 [0044.131] GetFileSize (in: hFile=0x274, lpFileSizeHigh=0x31e628 | out: lpFileSizeHigh=0x31e628*=0x0) returned 0x14316 [0044.131] ReadFile (in: hFile=0x274, lpBuffer=0x273607c, nNumberOfBytesToRead=0x14316, lpNumberOfBytesRead=0x31e5d4, lpOverlapped=0x0 | out: lpBuffer=0x273607c*, lpNumberOfBytesRead=0x31e5d4*=0x14316, lpOverlapped=0x0) returned 1 [0044.134] CloseHandle (hObject=0x274) returned 1 [0044.150] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms5\\InfoPathWelcomeImage.jpg", nBufferLength=0x105, lpBuffer=0x31e018, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms5\\InfoPathWelcomeImage.jpg", lpFilePart=0x0) returned 0x6b [0044.150] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e50c) returned 1 [0044.150] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms5\\InfoPathWelcomeImage.jpg" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms5\\infopathwelcomeimage.jpg"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x274 [0044.151] GetFileType (hFile=0x274) returned 0x1 [0044.151] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e508) returned 1 [0044.151] GetFileType (hFile=0x274) returned 0x1 [0044.151] WriteFile (in: hFile=0x274, lpBuffer=0x27bf7d8*, nNumberOfBytesToWrite=0x14320, lpNumberOfBytesWritten=0x31e5c8, lpOverlapped=0x0 | out: lpBuffer=0x27bf7d8*, lpNumberOfBytesWritten=0x31e5c8*=0x14320, lpOverlapped=0x0) returned 1 [0044.153] CloseHandle (hObject=0x274) returned 1 [0044.154] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms5\\InfoPathWelcomeImage.jpg", nBufferLength=0x105, lpBuffer=0x31e14c, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms5\\InfoPathWelcomeImage.jpg", lpFilePart=0x0) returned 0x6b [0044.154] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms5\\InfoPathWelcomeImage.jpg", nBufferLength=0x105, lpBuffer=0x31e14c, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms5\\InfoPathWelcomeImage.jpg", lpFilePart=0x0) returned 0x6b [0044.155] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e5ac) returned 1 [0044.155] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms5\\InfoPathWelcomeImage.jpg" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms5\\infopathwelcomeimage.jpg"), fInfoLevelId=0x0, lpFileInformation=0x31e628 | out: lpFileInformation=0x31e628*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb2246f00, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0x61cf3090, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xfdc57840, ftLastWriteTime.dwHighDateTime=0x1d6eb7e, nFileSizeHigh=0x0, nFileSizeLow=0x14320)) returned 1 [0044.155] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e5a8) returned 1 [0044.155] MoveFileW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms5\\InfoPathWelcomeImage.jpg" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms5\\infopathwelcomeimage.jpg"), lpNewFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms5\\InfoPathWelcomeImage.jpg" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms5\\infopathwelcomeimage.jpg")) returned 1 [0044.155] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e654) returned 1 [0044.155] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveProjectToolset", nBufferLength=0x105, lpBuffer=0x31e15c, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveProjectToolset", lpFilePart=0x0) returned 0x5a [0044.155] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveProjectToolset\\", nBufferLength=0x105, lpBuffer=0x31e130, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveProjectToolset\\", lpFilePart=0x0) returned 0x5b [0044.155] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveProjectToolset\\*", lpFindFileData=0x31e37c | out: lpFindFileData=0x31e37c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x51a61ad0, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x70c9f7b0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x70c9f7b0, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x382000 [0044.158] FindNextFileW (in: hFindFile=0x382000, lpFindFileData=0x31e38c | out: lpFindFileData=0x31e38c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x51a61ad0, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x70c9f7b0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x70c9f7b0, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0044.159] FindNextFileW (in: hFindFile=0x382000, lpFindFileData=0x31e38c | out: lpFindFileData=0x31e38c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb3559c00, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0x51a61ad0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xb3559c00, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0x140b, dwReserved0=0x0, dwReserved1=0x0, cFileName="BriefcaseIcon.jpg", cAlternateFileName="BRIEFC~1.JPG")) returned 1 [0044.159] FindNextFileW (in: hFindFile=0x382000, lpFindFileData=0x31e38c | out: lpFindFileData=0x31e38c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb486c900, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0x51a87c30, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xb486c900, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0xf76, dwReserved0=0x0, dwReserved1=0x0, cFileName="BriefcaseIconMask.bmp", cAlternateFileName="BRIEFC~1.BMP")) returned 1 [0044.159] FindNextFileW (in: hFindFile=0x382000, lpFindFileData=0x31e38c | out: lpFindFileData=0x31e38c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb486c900, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0x60382570, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xb486c900, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0x32cd, dwReserved0=0x0, dwReserved1=0x0, cFileName="CircleIcons.jpg", cAlternateFileName="CIRCLE~1.JPG")) returned 1 [0044.159] FindNextFileW (in: hFindFile=0x382000, lpFindFileData=0x31e38c | out: lpFindFileData=0x31e38c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb486c900, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0x60382570, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xb486c900, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0x114c, dwReserved0=0x0, dwReserved1=0x0, cFileName="CircleIconsMask.bmp", cAlternateFileName="CIRCLE~1.BMP")) returned 1 [0044.159] FindNextFileW (in: hFindFile=0x382000, lpFindFileData=0x31e38c | out: lpFindFileData=0x31e38c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb486c900, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0x582d2010, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xb486c900, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0x26ba, dwReserved0=0x0, dwReserved1=0x0, cFileName="MeetingIcon.jpg", cAlternateFileName="MEETIN~1.JPG")) returned 1 [0044.159] FindNextFileW (in: hFindFile=0x382000, lpFindFileData=0x31e38c | out: lpFindFileData=0x31e38c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb486c900, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0x582d2010, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xb486c900, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0x6b8, dwReserved0=0x0, dwReserved1=0x0, cFileName="MeetingIconMask.bmp", cAlternateFileName="MEETIN~1.BMP")) returned 1 [0044.160] FindNextFileW (in: hFindFile=0x382000, lpFindFileData=0x31e38c | out: lpFindFileData=0x31e38c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb486c900, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0x6d084c30, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xb486c900, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0x19e9, dwReserved0=0x0, dwReserved1=0x0, cFileName="ProjectStatusIcons.jpg", cAlternateFileName="PROJEC~1.JPG")) returned 1 [0044.160] FindNextFileW (in: hFindFile=0x382000, lpFindFileData=0x31e38c | out: lpFindFileData=0x31e38c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb486c900, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0x5a71ef90, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xb486c900, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0xa10, dwReserved0=0x0, dwReserved1=0x0, cFileName="ProjectStatusIconsMask.bmp", cAlternateFileName="PROJEC~1.BMP")) returned 1 [0044.160] FindNextFileW (in: hFindFile=0x382000, lpFindFileData=0x31e38c | out: lpFindFileData=0x31e38c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb486c900, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0x6d084c30, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xb486c900, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0x200e, dwReserved0=0x0, dwReserved1=0x0, cFileName="ProjectTaskIcon.jpg", cAlternateFileName="PROJEC~2.JPG")) returned 1 [0044.160] FindNextFileW (in: hFindFile=0x382000, lpFindFileData=0x31e38c | out: lpFindFileData=0x31e38c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb486c900, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0x5a71ef90, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xb486c900, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0x79c, dwReserved0=0x0, dwReserved1=0x0, cFileName="ProjectTaskIconMask.bmp", cAlternateFileName="PROJEC~2.BMP")) returned 1 [0044.160] FindNextFileW (in: hFindFile=0x382000, lpFindFileData=0x31e38c | out: lpFindFileData=0x31e38c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x538bb350, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x538bb350, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x538bb350, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="ProjectTool", cAlternateFileName="PROJEC~1")) returned 1 [0044.160] FindNextFileW (in: hFindFile=0x382000, lpFindFileData=0x31e38c | out: lpFindFileData=0x31e38c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb5b7f600, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0x6d084c30, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xb5b7f600, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0x4f0a, dwReserved0=0x0, dwReserved1=0x0, cFileName="ProjectToolsetIconImages.jpg", cAlternateFileName="PROJEC~3.JPG")) returned 1 [0044.160] FindNextFileW (in: hFindFile=0x382000, lpFindFileData=0x31e38c | out: lpFindFileData=0x31e38c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb5b7f600, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0x6d084c30, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xb5b7f600, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0x2338, dwReserved0=0x0, dwReserved1=0x0, cFileName="ProjectToolsetIconImagesMask.bmp", cAlternateFileName="PROJEC~3.BMP")) returned 1 [0044.160] FindNextFileW (in: hFindFile=0x382000, lpFindFileData=0x31e38c | out: lpFindFileData=0x31e38c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb5b7f600, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0x6d3a4910, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xb5b7f600, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0x5f00, dwReserved0=0x0, dwReserved1=0x0, cFileName="SplashImage.jpg", cAlternateFileName="SPLASH~1.JPG")) returned 1 [0044.161] FindNextFileW (in: hFindFile=0x382000, lpFindFileData=0x31e38c | out: lpFindFileData=0x31e38c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb5b7f600, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0x6d3a4910, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xb5b7f600, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0x14078, dwReserved0=0x0, dwReserved1=0x0, cFileName="SplashImageMask.bmp", cAlternateFileName="SPLASH~1.BMP")) returned 1 [0044.161] FindNextFileW (in: hFindFile=0x382000, lpFindFileData=0x31e38c | out: lpFindFileData=0x31e38c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb5b7f600, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0x5aca0270, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xb5b7f600, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0x122, dwReserved0=0x0, dwReserved1=0x0, cFileName="TABMASK.BMP", cAlternateFileName="")) returned 1 [0044.161] FindNextFileW (in: hFindFile=0x382000, lpFindFileData=0x31e38c | out: lpFindFileData=0x31e38c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb5b7f600, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0x5aca0270, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xb5b7f600, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0x9b6, dwReserved0=0x0, dwReserved1=0x0, cFileName="TABOFF.JPG", cAlternateFileName="")) returned 1 [0044.161] FindNextFileW (in: hFindFile=0x382000, lpFindFileData=0x31e38c | out: lpFindFileData=0x31e38c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb5b7f600, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0x6d43ce90, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xb5b7f600, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0x9ef, dwReserved0=0x0, dwReserved1=0x0, cFileName="TABON.JPG", cAlternateFileName="")) returned 1 [0044.161] FindNextFileW (in: hFindFile=0x382000, lpFindFileData=0x31e38c | out: lpFindFileData=0x31e38c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb5b7f600, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0x5e5c1270, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xb5b7f600, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0xdff, dwReserved0=0x0, dwReserved1=0x0, cFileName="WHITEBOX.JPG", cAlternateFileName="")) returned 1 [0044.161] FindNextFileW (in: hFindFile=0x382000, lpFindFileData=0x31e38c | out: lpFindFileData=0x31e38c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb5b7f600, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0x5e5c1270, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xb5b7f600, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0x4d72, dwReserved0=0x0, dwReserved1=0x0, cFileName="WhiteboxMask.bmp", cAlternateFileName="WHITEB~1.BMP")) returned 1 [0044.161] FindNextFileW (in: hFindFile=0x382000, lpFindFileData=0x31e38c | out: lpFindFileData=0x31e38c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb6e92300, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0x70c9f7b0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xb6e92300, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0xc59, dwReserved0=0x0, dwReserved1=0x0, cFileName="ZoomIcons.jpg", cAlternateFileName="ZOOMIC~1.JPG")) returned 1 [0044.161] FindNextFileW (in: hFindFile=0x382000, lpFindFileData=0x31e38c | out: lpFindFileData=0x31e38c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb6e92300, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0x5e86eb30, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xb6e92300, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0x638, dwReserved0=0x0, dwReserved1=0x0, cFileName="ZoomIconsMask.bmp", cAlternateFileName="ZOOMIC~1.BMP")) returned 1 [0044.161] FindNextFileW (in: hFindFile=0x382000, lpFindFileData=0x31e38c | out: lpFindFileData=0x31e38c*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0044.162] FindClose (in: hFindFile=0x382000 | out: hFindFile=0x382000) returned 1 [0044.162] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e614) returned 1 [0044.162] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e620) returned 1 [0044.162] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e654) returned 1 [0044.162] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveProjectToolset", nBufferLength=0x105, lpBuffer=0x31e15c, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveProjectToolset", lpFilePart=0x0) returned 0x5a [0044.163] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveProjectToolset\\", nBufferLength=0x105, lpBuffer=0x31e130, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveProjectToolset\\", lpFilePart=0x0) returned 0x5b [0044.163] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveProjectToolset\\*", lpFindFileData=0x31e37c | out: lpFindFileData=0x31e37c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x51a61ad0, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x70c9f7b0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x70c9f7b0, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x382000 [0044.163] FindNextFileW (in: hFindFile=0x382000, lpFindFileData=0x31e38c | out: lpFindFileData=0x31e38c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x51a61ad0, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x70c9f7b0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x70c9f7b0, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0044.164] FindNextFileW (in: hFindFile=0x382000, lpFindFileData=0x31e38c | out: lpFindFileData=0x31e38c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb3559c00, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0x51a61ad0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xb3559c00, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0x140b, dwReserved0=0x0, dwReserved1=0x0, cFileName="BriefcaseIcon.jpg", cAlternateFileName="BRIEFC~1.JPG")) returned 1 [0044.164] FindNextFileW (in: hFindFile=0x382000, lpFindFileData=0x31e38c | out: lpFindFileData=0x31e38c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb486c900, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0x51a87c30, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xb486c900, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0xf76, dwReserved0=0x0, dwReserved1=0x0, cFileName="BriefcaseIconMask.bmp", cAlternateFileName="BRIEFC~1.BMP")) returned 1 [0044.164] FindNextFileW (in: hFindFile=0x382000, lpFindFileData=0x31e38c | out: lpFindFileData=0x31e38c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb486c900, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0x60382570, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xb486c900, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0x32cd, dwReserved0=0x0, dwReserved1=0x0, cFileName="CircleIcons.jpg", cAlternateFileName="CIRCLE~1.JPG")) returned 1 [0044.164] FindNextFileW (in: hFindFile=0x382000, lpFindFileData=0x31e38c | out: lpFindFileData=0x31e38c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb486c900, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0x60382570, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xb486c900, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0x114c, dwReserved0=0x0, dwReserved1=0x0, cFileName="CircleIconsMask.bmp", cAlternateFileName="CIRCLE~1.BMP")) returned 1 [0044.164] FindNextFileW (in: hFindFile=0x382000, lpFindFileData=0x31e38c | out: lpFindFileData=0x31e38c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb486c900, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0x582d2010, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xb486c900, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0x26ba, dwReserved0=0x0, dwReserved1=0x0, cFileName="MeetingIcon.jpg", cAlternateFileName="MEETIN~1.JPG")) returned 1 [0044.165] FindNextFileW (in: hFindFile=0x382000, lpFindFileData=0x31e38c | out: lpFindFileData=0x31e38c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb486c900, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0x582d2010, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xb486c900, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0x6b8, dwReserved0=0x0, dwReserved1=0x0, cFileName="MeetingIconMask.bmp", cAlternateFileName="MEETIN~1.BMP")) returned 1 [0044.165] FindNextFileW (in: hFindFile=0x382000, lpFindFileData=0x31e38c | out: lpFindFileData=0x31e38c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb486c900, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0x6d084c30, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xb486c900, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0x19e9, dwReserved0=0x0, dwReserved1=0x0, cFileName="ProjectStatusIcons.jpg", cAlternateFileName="PROJEC~1.JPG")) returned 1 [0044.165] FindNextFileW (in: hFindFile=0x382000, lpFindFileData=0x31e38c | out: lpFindFileData=0x31e38c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb486c900, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0x5a71ef90, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xb486c900, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0xa10, dwReserved0=0x0, dwReserved1=0x0, cFileName="ProjectStatusIconsMask.bmp", cAlternateFileName="PROJEC~1.BMP")) returned 1 [0044.165] FindNextFileW (in: hFindFile=0x382000, lpFindFileData=0x31e38c | out: lpFindFileData=0x31e38c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb486c900, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0x6d084c30, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xb486c900, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0x200e, dwReserved0=0x0, dwReserved1=0x0, cFileName="ProjectTaskIcon.jpg", cAlternateFileName="PROJEC~2.JPG")) returned 1 [0044.165] FindNextFileW (in: hFindFile=0x382000, lpFindFileData=0x31e38c | out: lpFindFileData=0x31e38c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb486c900, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0x5a71ef90, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xb486c900, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0x79c, dwReserved0=0x0, dwReserved1=0x0, cFileName="ProjectTaskIconMask.bmp", cAlternateFileName="PROJEC~2.BMP")) returned 1 [0044.165] FindNextFileW (in: hFindFile=0x382000, lpFindFileData=0x31e38c | out: lpFindFileData=0x31e38c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x538bb350, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x538bb350, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x538bb350, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="ProjectTool", cAlternateFileName="PROJEC~1")) returned 1 [0044.165] FindNextFileW (in: hFindFile=0x382000, lpFindFileData=0x31e38c | out: lpFindFileData=0x31e38c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb5b7f600, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0x6d084c30, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xb5b7f600, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0x4f0a, dwReserved0=0x0, dwReserved1=0x0, cFileName="ProjectToolsetIconImages.jpg", cAlternateFileName="PROJEC~3.JPG")) returned 1 [0044.166] FindNextFileW (in: hFindFile=0x382000, lpFindFileData=0x31e38c | out: lpFindFileData=0x31e38c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb5b7f600, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0x6d084c30, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xb5b7f600, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0x2338, dwReserved0=0x0, dwReserved1=0x0, cFileName="ProjectToolsetIconImagesMask.bmp", cAlternateFileName="PROJEC~3.BMP")) returned 1 [0044.166] FindNextFileW (in: hFindFile=0x382000, lpFindFileData=0x31e38c | out: lpFindFileData=0x31e38c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb5b7f600, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0x6d3a4910, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xb5b7f600, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0x5f00, dwReserved0=0x0, dwReserved1=0x0, cFileName="SplashImage.jpg", cAlternateFileName="SPLASH~1.JPG")) returned 1 [0044.166] FindNextFileW (in: hFindFile=0x382000, lpFindFileData=0x31e38c | out: lpFindFileData=0x31e38c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb5b7f600, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0x6d3a4910, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xb5b7f600, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0x14078, dwReserved0=0x0, dwReserved1=0x0, cFileName="SplashImageMask.bmp", cAlternateFileName="SPLASH~1.BMP")) returned 1 [0044.166] FindNextFileW (in: hFindFile=0x382000, lpFindFileData=0x31e38c | out: lpFindFileData=0x31e38c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb5b7f600, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0x5aca0270, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xb5b7f600, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0x122, dwReserved0=0x0, dwReserved1=0x0, cFileName="TABMASK.BMP", cAlternateFileName="")) returned 1 [0044.166] FindNextFileW (in: hFindFile=0x382000, lpFindFileData=0x31e38c | out: lpFindFileData=0x31e38c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb5b7f600, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0x5aca0270, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xb5b7f600, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0x9b6, dwReserved0=0x0, dwReserved1=0x0, cFileName="TABOFF.JPG", cAlternateFileName="")) returned 1 [0044.166] FindNextFileW (in: hFindFile=0x382000, lpFindFileData=0x31e38c | out: lpFindFileData=0x31e38c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb5b7f600, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0x6d43ce90, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xb5b7f600, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0x9ef, dwReserved0=0x0, dwReserved1=0x0, cFileName="TABON.JPG", cAlternateFileName="")) returned 1 [0044.167] FindNextFileW (in: hFindFile=0x382000, lpFindFileData=0x31e38c | out: lpFindFileData=0x31e38c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb5b7f600, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0x5e5c1270, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xb5b7f600, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0xdff, dwReserved0=0x0, dwReserved1=0x0, cFileName="WHITEBOX.JPG", cAlternateFileName="")) returned 1 [0044.167] FindNextFileW (in: hFindFile=0x382000, lpFindFileData=0x31e38c | out: lpFindFileData=0x31e38c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb5b7f600, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0x5e5c1270, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xb5b7f600, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0x4d72, dwReserved0=0x0, dwReserved1=0x0, cFileName="WhiteboxMask.bmp", cAlternateFileName="WHITEB~1.BMP")) returned 1 [0044.167] FindNextFileW (in: hFindFile=0x382000, lpFindFileData=0x31e38c | out: lpFindFileData=0x31e38c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb6e92300, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0x70c9f7b0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xb6e92300, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0xc59, dwReserved0=0x0, dwReserved1=0x0, cFileName="ZoomIcons.jpg", cAlternateFileName="ZOOMIC~1.JPG")) returned 1 [0044.167] FindNextFileW (in: hFindFile=0x382000, lpFindFileData=0x31e38c | out: lpFindFileData=0x31e38c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb6e92300, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0x5e86eb30, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xb6e92300, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0x638, dwReserved0=0x0, dwReserved1=0x0, cFileName="ZoomIconsMask.bmp", cAlternateFileName="ZOOMIC~1.BMP")) returned 1 [0044.167] FindNextFileW (in: hFindFile=0x382000, lpFindFileData=0x31e38c | out: lpFindFileData=0x31e38c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb6e92300, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0x5e86eb30, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xb6e92300, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0x638, dwReserved0=0x0, dwReserved1=0x0, cFileName="ZoomIconsMask.bmp", cAlternateFileName="ZOOMIC~1.BMP")) returned 0 [0044.167] FindClose (in: hFindFile=0x382000 | out: hFindFile=0x382000) returned 1 [0044.168] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e614) returned 1 [0044.168] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e620) returned 1 [0044.168] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveProjectToolset\\BriefcaseIcon.jpg", nBufferLength=0x105, lpBuffer=0x31e02c, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveProjectToolset\\BriefcaseIcon.jpg", lpFilePart=0x0) returned 0x6c [0044.168] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e520) returned 1 [0044.168] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveProjectToolset\\BriefcaseIcon.jpg" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveprojecttoolset\\briefcaseicon.jpg"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x274 [0044.169] GetFileType (hFile=0x274) returned 0x1 [0044.169] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e51c) returned 1 [0044.169] GetFileType (hFile=0x274) returned 0x1 [0044.169] GetFileSize (in: hFile=0x274, lpFileSizeHigh=0x31e628 | out: lpFileSizeHigh=0x31e628*=0x0) returned 0x140b [0044.169] ReadFile (in: hFile=0x274, lpBuffer=0x27dc3e4, nNumberOfBytesToRead=0x140b, lpNumberOfBytesRead=0x31e5d4, lpOverlapped=0x0 | out: lpBuffer=0x27dc3e4*, lpNumberOfBytesRead=0x31e5d4*=0x140b, lpOverlapped=0x0) returned 1 [0044.171] CloseHandle (hObject=0x274) returned 1 [0044.184] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveProjectToolset\\BriefcaseIcon.jpg", nBufferLength=0x105, lpBuffer=0x31e018, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveProjectToolset\\BriefcaseIcon.jpg", lpFilePart=0x0) returned 0x6c [0044.184] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e50c) returned 1 [0044.184] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveProjectToolset\\BriefcaseIcon.jpg" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveprojecttoolset\\briefcaseicon.jpg"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x274 [0044.185] GetFileType (hFile=0x274) returned 0x1 [0044.185] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e508) returned 1 [0044.185] GetFileType (hFile=0x274) returned 0x1 [0044.185] WriteFile (in: hFile=0x274, lpBuffer=0x282f61c*, nNumberOfBytesToWrite=0x1410, lpNumberOfBytesWritten=0x31e5c8, lpOverlapped=0x0 | out: lpBuffer=0x282f61c*, lpNumberOfBytesWritten=0x31e5c8*=0x1410, lpOverlapped=0x0) returned 1 [0044.186] CloseHandle (hObject=0x274) returned 1 [0044.189] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveProjectToolset\\BriefcaseIcon.jpg", nBufferLength=0x105, lpBuffer=0x31e14c, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveProjectToolset\\BriefcaseIcon.jpg", lpFilePart=0x0) returned 0x6c [0044.189] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveProjectToolset\\BriefcaseIcon.jpg", nBufferLength=0x105, lpBuffer=0x31e14c, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveProjectToolset\\BriefcaseIcon.jpg", lpFilePart=0x0) returned 0x6c [0044.189] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e5ac) returned 1 [0044.189] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveProjectToolset\\BriefcaseIcon.jpg" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveprojecttoolset\\briefcaseicon.jpg"), fInfoLevelId=0x0, lpFileInformation=0x31e628 | out: lpFileInformation=0x31e628*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb3559c00, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0x51a61ad0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xfdca3b00, ftLastWriteTime.dwHighDateTime=0x1d6eb7e, nFileSizeHigh=0x0, nFileSizeLow=0x1410)) returned 1 [0044.189] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e5a8) returned 1 [0044.189] MoveFileW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveProjectToolset\\BriefcaseIcon.jpg" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveprojecttoolset\\briefcaseicon.jpg"), lpNewFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveProjectToolset\\BriefcaseIcon.jpg" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveprojecttoolset\\briefcaseicon.jpg")) returned 1 [0044.189] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveProjectToolset\\BriefcaseIconMask.bmp", nBufferLength=0x105, lpBuffer=0x31e02c, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveProjectToolset\\BriefcaseIconMask.bmp", lpFilePart=0x0) returned 0x70 [0044.189] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e520) returned 1 [0044.190] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveProjectToolset\\BriefcaseIconMask.bmp" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveprojecttoolset\\briefcaseiconmask.bmp"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x274 [0044.190] GetFileType (hFile=0x274) returned 0x1 [0044.190] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e51c) returned 1 [0044.190] GetFileType (hFile=0x274) returned 0x1 [0044.190] GetFileSize (in: hFile=0x274, lpFileSizeHigh=0x31e628 | out: lpFileSizeHigh=0x31e628*=0x0) returned 0xf76 [0044.190] ReadFile (in: hFile=0x274, lpBuffer=0x2831e9c, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x31e5d4, lpOverlapped=0x0 | out: lpBuffer=0x2831e9c*, lpNumberOfBytesRead=0x31e5d4*=0xf76, lpOverlapped=0x0) returned 1 [0044.191] CloseHandle (hObject=0x274) returned 1 [0044.232] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveProjectToolset\\BriefcaseIconMask.bmp", nBufferLength=0x105, lpBuffer=0x31e018, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveProjectToolset\\BriefcaseIconMask.bmp", lpFilePart=0x0) returned 0x70 [0044.232] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e50c) returned 1 [0044.232] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveProjectToolset\\BriefcaseIconMask.bmp" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveprojecttoolset\\briefcaseiconmask.bmp"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x274 [0044.233] GetFileType (hFile=0x274) returned 0x1 [0044.233] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e508) returned 1 [0044.233] GetFileType (hFile=0x274) returned 0x1 [0044.233] WriteFile (in: hFile=0x274, lpBuffer=0x2684878*, nNumberOfBytesToWrite=0xf80, lpNumberOfBytesWritten=0x31e59c, lpOverlapped=0x0 | out: lpBuffer=0x2684878*, lpNumberOfBytesWritten=0x31e59c*=0xf80, lpOverlapped=0x0) returned 1 [0044.234] CloseHandle (hObject=0x274) returned 1 [0044.235] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveProjectToolset\\BriefcaseIconMask.bmp", nBufferLength=0x105, lpBuffer=0x31e14c, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveProjectToolset\\BriefcaseIconMask.bmp", lpFilePart=0x0) returned 0x70 [0044.235] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveProjectToolset\\BriefcaseIconMask.bmp", nBufferLength=0x105, lpBuffer=0x31e14c, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveProjectToolset\\BriefcaseIconMask.bmp", lpFilePart=0x0) returned 0x70 [0044.235] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e5ac) returned 1 [0044.235] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveProjectToolset\\BriefcaseIconMask.bmp" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveprojecttoolset\\briefcaseiconmask.bmp"), fInfoLevelId=0x0, lpFileInformation=0x31e628 | out: lpFileInformation=0x31e628*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb486c900, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0x51a87c30, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xfdd15f20, ftLastWriteTime.dwHighDateTime=0x1d6eb7e, nFileSizeHigh=0x0, nFileSizeLow=0xf80)) returned 1 [0044.235] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e5a8) returned 1 [0044.235] MoveFileW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveProjectToolset\\BriefcaseIconMask.bmp" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveprojecttoolset\\briefcaseiconmask.bmp"), lpNewFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveProjectToolset\\BriefcaseIconMask.bmp" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveprojecttoolset\\briefcaseiconmask.bmp")) returned 1 [0044.236] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveProjectToolset\\CircleIcons.jpg", nBufferLength=0x105, lpBuffer=0x31e02c, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveProjectToolset\\CircleIcons.jpg", lpFilePart=0x0) returned 0x6a [0044.236] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e520) returned 1 [0044.236] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveProjectToolset\\CircleIcons.jpg" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveprojecttoolset\\circleicons.jpg"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x274 [0044.237] GetFileType (hFile=0x274) returned 0x1 [0044.237] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e51c) returned 1 [0044.237] GetFileType (hFile=0x274) returned 0x1 [0044.237] GetFileSize (in: hFile=0x274, lpFileSizeHigh=0x31e628 | out: lpFileSizeHigh=0x31e628*=0x0) returned 0x32cd [0044.237] ReadFile (in: hFile=0x274, lpBuffer=0x2685be8, nNumberOfBytesToRead=0x32cd, lpNumberOfBytesRead=0x31e5d4, lpOverlapped=0x0 | out: lpBuffer=0x2685be8*, lpNumberOfBytesRead=0x31e5d4*=0x32cd, lpOverlapped=0x0) returned 1 [0044.239] CloseHandle (hObject=0x274) returned 1 [0044.260] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveProjectToolset\\CircleIcons.jpg", nBufferLength=0x105, lpBuffer=0x31e018, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveProjectToolset\\CircleIcons.jpg", lpFilePart=0x0) returned 0x6a [0044.260] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e50c) returned 1 [0044.260] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveProjectToolset\\CircleIcons.jpg" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveprojecttoolset\\circleicons.jpg"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x274 [0044.261] GetFileType (hFile=0x274) returned 0x1 [0044.261] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e508) returned 1 [0044.261] GetFileType (hFile=0x274) returned 0x1 [0044.261] WriteFile (in: hFile=0x274, lpBuffer=0x26e293c*, nNumberOfBytesToWrite=0x32d0, lpNumberOfBytesWritten=0x31e5c8, lpOverlapped=0x0 | out: lpBuffer=0x26e293c*, lpNumberOfBytesWritten=0x31e5c8*=0x32d0, lpOverlapped=0x0) returned 1 [0044.262] CloseHandle (hObject=0x274) returned 1 [0044.263] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveProjectToolset\\CircleIcons.jpg", nBufferLength=0x105, lpBuffer=0x31e14c, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveProjectToolset\\CircleIcons.jpg", lpFilePart=0x0) returned 0x6a [0044.263] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveProjectToolset\\CircleIcons.jpg", nBufferLength=0x105, lpBuffer=0x31e14c, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveProjectToolset\\CircleIcons.jpg", lpFilePart=0x0) returned 0x6a [0044.263] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e5ac) returned 1 [0044.263] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveProjectToolset\\CircleIcons.jpg" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveprojecttoolset\\circleicons.jpg"), fInfoLevelId=0x0, lpFileInformation=0x31e628 | out: lpFileInformation=0x31e628*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb486c900, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0x60382570, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xfdd621e0, ftLastWriteTime.dwHighDateTime=0x1d6eb7e, nFileSizeHigh=0x0, nFileSizeLow=0x32d0)) returned 1 [0044.263] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e5a8) returned 1 [0044.263] MoveFileW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveProjectToolset\\CircleIcons.jpg" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveprojecttoolset\\circleicons.jpg"), lpNewFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveProjectToolset\\CircleIcons.jpg" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveprojecttoolset\\circleicons.jpg")) returned 1 [0044.263] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveProjectToolset\\CircleIconsMask.bmp", nBufferLength=0x105, lpBuffer=0x31e02c, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveProjectToolset\\CircleIconsMask.bmp", lpFilePart=0x0) returned 0x6e [0044.263] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e520) returned 1 [0044.263] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveProjectToolset\\CircleIconsMask.bmp" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveprojecttoolset\\circleiconsmask.bmp"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x274 [0044.264] GetFileType (hFile=0x274) returned 0x1 [0044.264] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e51c) returned 1 [0044.264] GetFileType (hFile=0x274) returned 0x1 [0044.264] GetFileSize (in: hFile=0x274, lpFileSizeHigh=0x31e628 | out: lpFileSizeHigh=0x31e628*=0x0) returned 0x114c [0044.264] ReadFile (in: hFile=0x274, lpBuffer=0x26e60e0, nNumberOfBytesToRead=0x114c, lpNumberOfBytesRead=0x31e5d4, lpOverlapped=0x0 | out: lpBuffer=0x26e60e0*, lpNumberOfBytesRead=0x31e5d4*=0x114c, lpOverlapped=0x0) returned 1 [0044.273] CloseHandle (hObject=0x274) returned 1 [0044.287] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveProjectToolset\\CircleIconsMask.bmp", nBufferLength=0x105, lpBuffer=0x31e018, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveProjectToolset\\CircleIconsMask.bmp", lpFilePart=0x0) returned 0x6e [0044.287] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e50c) returned 1 [0044.287] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveProjectToolset\\CircleIconsMask.bmp" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveprojecttoolset\\circleiconsmask.bmp"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x274 [0044.288] GetFileType (hFile=0x274) returned 0x1 [0044.288] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e508) returned 1 [0044.288] GetFileType (hFile=0x274) returned 0x1 [0044.288] WriteFile (in: hFile=0x274, lpBuffer=0x2738554*, nNumberOfBytesToWrite=0x1150, lpNumberOfBytesWritten=0x31e5c8, lpOverlapped=0x0 | out: lpBuffer=0x2738554*, lpNumberOfBytesWritten=0x31e5c8*=0x1150, lpOverlapped=0x0) returned 1 [0044.289] CloseHandle (hObject=0x274) returned 1 [0044.290] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveProjectToolset\\CircleIconsMask.bmp", nBufferLength=0x105, lpBuffer=0x31e14c, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveProjectToolset\\CircleIconsMask.bmp", lpFilePart=0x0) returned 0x6e [0044.290] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveProjectToolset\\CircleIconsMask.bmp", nBufferLength=0x105, lpBuffer=0x31e14c, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveProjectToolset\\CircleIconsMask.bmp", lpFilePart=0x0) returned 0x6e [0044.290] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e5ac) returned 1 [0044.290] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveProjectToolset\\CircleIconsMask.bmp" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveprojecttoolset\\circleiconsmask.bmp"), fInfoLevelId=0x0, lpFileInformation=0x31e628 | out: lpFileInformation=0x31e628*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb486c900, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0x60382570, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xfddae4a0, ftLastWriteTime.dwHighDateTime=0x1d6eb7e, nFileSizeHigh=0x0, nFileSizeLow=0x1150)) returned 1 [0044.290] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e5a8) returned 1 [0044.290] MoveFileW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveProjectToolset\\CircleIconsMask.bmp" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveprojecttoolset\\circleiconsmask.bmp"), lpNewFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveProjectToolset\\CircleIconsMask.bmp" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveprojecttoolset\\circleiconsmask.bmp")) returned 1 [0044.291] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveProjectToolset\\MeetingIcon.jpg", nBufferLength=0x105, lpBuffer=0x31e02c, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveProjectToolset\\MeetingIcon.jpg", lpFilePart=0x0) returned 0x6a [0044.291] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e520) returned 1 [0044.291] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveProjectToolset\\MeetingIcon.jpg" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveprojecttoolset\\meetingicon.jpg"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x274 [0044.292] GetFileType (hFile=0x274) returned 0x1 [0044.292] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e51c) returned 1 [0044.292] GetFileType (hFile=0x274) returned 0x1 [0044.292] GetFileSize (in: hFile=0x274, lpFileSizeHigh=0x31e628 | out: lpFileSizeHigh=0x31e628*=0x0) returned 0x26ba [0044.292] ReadFile (in: hFile=0x274, lpBuffer=0x2739b88, nNumberOfBytesToRead=0x26ba, lpNumberOfBytesRead=0x31e5d4, lpOverlapped=0x0 | out: lpBuffer=0x2739b88*, lpNumberOfBytesRead=0x31e5d4*=0x26ba, lpOverlapped=0x0) returned 1 [0044.308] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveProjectToolset\\MeetingIcon.jpg", nBufferLength=0x105, lpBuffer=0x31e018, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveProjectToolset\\MeetingIcon.jpg", lpFilePart=0x0) returned 0x6a [0044.308] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e50c) returned 1 [0044.308] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveProjectToolset\\MeetingIcon.jpg" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveprojecttoolset\\meetingicon.jpg"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x274 [0044.309] GetFileType (hFile=0x274) returned 0x1 [0044.309] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e508) returned 1 [0044.309] GetFileType (hFile=0x274) returned 0x1 [0044.309] WriteFile (in: hFile=0x274, lpBuffer=0x2792b30*, nNumberOfBytesToWrite=0x26c0, lpNumberOfBytesWritten=0x31e5c8, lpOverlapped=0x0 | out: lpBuffer=0x2792b30*, lpNumberOfBytesWritten=0x31e5c8*=0x26c0, lpOverlapped=0x0) returned 1 [0044.310] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveProjectToolset\\MeetingIcon.jpg", nBufferLength=0x105, lpBuffer=0x31e14c, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveProjectToolset\\MeetingIcon.jpg", lpFilePart=0x0) returned 0x6a [0044.310] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveProjectToolset\\MeetingIcon.jpg", nBufferLength=0x105, lpBuffer=0x31e14c, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveProjectToolset\\MeetingIcon.jpg", lpFilePart=0x0) returned 0x6a [0044.310] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e5ac) returned 1 [0044.310] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveProjectToolset\\MeetingIcon.jpg" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveprojecttoolset\\meetingicon.jpg"), fInfoLevelId=0x0, lpFileInformation=0x31e628 | out: lpFileInformation=0x31e628*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb486c900, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0x582d2010, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xfddd4600, ftLastWriteTime.dwHighDateTime=0x1d6eb7e, nFileSizeHigh=0x0, nFileSizeLow=0x26c0)) returned 1 [0044.310] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e5a8) returned 1 [0044.310] MoveFileW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveProjectToolset\\MeetingIcon.jpg" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveprojecttoolset\\meetingicon.jpg"), lpNewFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveProjectToolset\\MeetingIcon.jpg" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveprojecttoolset\\meetingicon.jpg")) returned 1 [0044.312] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveProjectToolset\\MeetingIconMask.bmp", nBufferLength=0x105, lpBuffer=0x31e02c, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveProjectToolset\\MeetingIconMask.bmp", lpFilePart=0x0) returned 0x6e [0044.312] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e520) returned 1 [0044.312] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveProjectToolset\\MeetingIconMask.bmp" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveprojecttoolset\\meetingiconmask.bmp"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x274 [0044.312] GetFileType (hFile=0x274) returned 0x1 [0044.312] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e51c) returned 1 [0044.312] GetFileType (hFile=0x274) returned 0x1 [0044.312] GetFileSize (in: hFile=0x274, lpFileSizeHigh=0x31e628 | out: lpFileSizeHigh=0x31e628*=0x0) returned 0x6b8 [0044.312] ReadFile (in: hFile=0x274, lpBuffer=0x2795d88, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x31e5d4, lpOverlapped=0x0 | out: lpBuffer=0x2795d88*, lpNumberOfBytesRead=0x31e5d4*=0x6b8, lpOverlapped=0x0) returned 1 [0044.327] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveProjectToolset\\MeetingIconMask.bmp", nBufferLength=0x105, lpBuffer=0x31e018, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveProjectToolset\\MeetingIconMask.bmp", lpFilePart=0x0) returned 0x6e [0044.327] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e50c) returned 1 [0044.327] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveProjectToolset\\MeetingIconMask.bmp" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveprojecttoolset\\meetingiconmask.bmp"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x274 [0044.328] GetFileType (hFile=0x274) returned 0x1 [0044.328] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e508) returned 1 [0044.328] GetFileType (hFile=0x274) returned 0x1 [0044.328] WriteFile (in: hFile=0x274, lpBuffer=0x27e5ebc*, nNumberOfBytesToWrite=0x6c0, lpNumberOfBytesWritten=0x31e59c, lpOverlapped=0x0 | out: lpBuffer=0x27e5ebc*, lpNumberOfBytesWritten=0x31e59c*=0x6c0, lpOverlapped=0x0) returned 1 [0044.329] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveProjectToolset\\MeetingIconMask.bmp", nBufferLength=0x105, lpBuffer=0x31e14c, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveProjectToolset\\MeetingIconMask.bmp", lpFilePart=0x0) returned 0x6e [0044.329] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveProjectToolset\\MeetingIconMask.bmp", nBufferLength=0x105, lpBuffer=0x31e14c, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveProjectToolset\\MeetingIconMask.bmp", lpFilePart=0x0) returned 0x6e [0044.329] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e5ac) returned 1 [0044.329] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveProjectToolset\\MeetingIconMask.bmp" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveprojecttoolset\\meetingiconmask.bmp"), fInfoLevelId=0x0, lpFileInformation=0x31e628 | out: lpFileInformation=0x31e628*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb486c900, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0x582d2010, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xfddfa760, ftLastWriteTime.dwHighDateTime=0x1d6eb7e, nFileSizeHigh=0x0, nFileSizeLow=0x6c0)) returned 1 [0044.329] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e5a8) returned 1 [0044.330] MoveFileW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveProjectToolset\\MeetingIconMask.bmp" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveprojecttoolset\\meetingiconmask.bmp"), lpNewFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveProjectToolset\\MeetingIconMask.bmp" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveprojecttoolset\\meetingiconmask.bmp")) returned 1 [0044.331] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveProjectToolset\\ProjectStatusIcons.jpg", nBufferLength=0x105, lpBuffer=0x31e02c, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveProjectToolset\\ProjectStatusIcons.jpg", lpFilePart=0x0) returned 0x71 [0044.331] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e520) returned 1 [0044.331] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveProjectToolset\\ProjectStatusIcons.jpg" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveprojecttoolset\\projectstatusicons.jpg"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x274 [0044.332] GetFileType (hFile=0x274) returned 0x1 [0044.332] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e51c) returned 1 [0044.332] GetFileType (hFile=0x274) returned 0x1 [0044.332] GetFileSize (in: hFile=0x274, lpFileSizeHigh=0x31e628 | out: lpFileSizeHigh=0x31e628*=0x0) returned 0x19e9 [0044.332] ReadFile (in: hFile=0x274, lpBuffer=0x27e7240, nNumberOfBytesToRead=0x19e9, lpNumberOfBytesRead=0x31e5d4, lpOverlapped=0x0 | out: lpBuffer=0x27e7240*, lpNumberOfBytesRead=0x31e5d4*=0x19e9, lpOverlapped=0x0) returned 1 [0044.353] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveProjectToolset\\ProjectStatusIcons.jpg", nBufferLength=0x105, lpBuffer=0x31e018, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveProjectToolset\\ProjectStatusIcons.jpg", lpFilePart=0x0) returned 0x71 [0044.353] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e50c) returned 1 [0044.353] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveProjectToolset\\ProjectStatusIcons.jpg" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveprojecttoolset\\projectstatusicons.jpg"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x274 [0044.354] GetFileType (hFile=0x274) returned 0x1 [0044.355] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e508) returned 1 [0044.355] GetFileType (hFile=0x274) returned 0x1 [0044.355] WriteFile (in: hFile=0x274, lpBuffer=0x283c1d8*, nNumberOfBytesToWrite=0x19f0, lpNumberOfBytesWritten=0x31e5c8, lpOverlapped=0x0 | out: lpBuffer=0x283c1d8*, lpNumberOfBytesWritten=0x31e5c8*=0x19f0, lpOverlapped=0x0) returned 1 [0044.356] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveProjectToolset\\ProjectStatusIcons.jpg", nBufferLength=0x105, lpBuffer=0x31e14c, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveProjectToolset\\ProjectStatusIcons.jpg", lpFilePart=0x0) returned 0x71 [0044.356] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveProjectToolset\\ProjectStatusIcons.jpg", nBufferLength=0x105, lpBuffer=0x31e14c, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveProjectToolset\\ProjectStatusIcons.jpg", lpFilePart=0x0) returned 0x71 [0044.356] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e5ac) returned 1 [0044.356] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveProjectToolset\\ProjectStatusIcons.jpg" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveprojecttoolset\\projectstatusicons.jpg"), fInfoLevelId=0x0, lpFileInformation=0x31e628 | out: lpFileInformation=0x31e628*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb486c900, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0x6d084c30, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xfde46a20, ftLastWriteTime.dwHighDateTime=0x1d6eb7e, nFileSizeHigh=0x0, nFileSizeLow=0x19f0)) returned 1 [0044.356] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e5a8) returned 1 [0044.356] MoveFileW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveProjectToolset\\ProjectStatusIcons.jpg" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveprojecttoolset\\projectstatusicons.jpg"), lpNewFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveProjectToolset\\ProjectStatusIcons.jpg" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveprojecttoolset\\projectstatusicons.jpg")) returned 1 [0044.357] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveProjectToolset\\ProjectStatusIconsMask.bmp", nBufferLength=0x105, lpBuffer=0x31e02c, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveProjectToolset\\ProjectStatusIconsMask.bmp", lpFilePart=0x0) returned 0x75 [0044.357] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e520) returned 1 [0044.357] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveProjectToolset\\ProjectStatusIconsMask.bmp" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveprojecttoolset\\projectstatusiconsmask.bmp"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x274 [0044.358] GetFileType (hFile=0x274) returned 0x1 [0044.358] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e51c) returned 1 [0044.358] GetFileType (hFile=0x274) returned 0x1 [0044.358] GetFileSize (in: hFile=0x274, lpFileSizeHigh=0x31e628 | out: lpFileSizeHigh=0x31e628*=0x0) returned 0xa10 [0044.358] ReadFile (in: hFile=0x274, lpBuffer=0x283eb08, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x31e5d4, lpOverlapped=0x0 | out: lpBuffer=0x283eb08*, lpNumberOfBytesRead=0x31e5d4*=0xa10, lpOverlapped=0x0) returned 1 [0044.403] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveProjectToolset\\ProjectStatusIconsMask.bmp", nBufferLength=0x105, lpBuffer=0x31e018, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveProjectToolset\\ProjectStatusIconsMask.bmp", lpFilePart=0x0) returned 0x75 [0044.403] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e50c) returned 1 [0044.403] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveProjectToolset\\ProjectStatusIconsMask.bmp" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveprojecttoolset\\projectstatusiconsmask.bmp"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x274 [0044.404] GetFileType (hFile=0x274) returned 0x1 [0044.404] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e508) returned 1 [0044.404] GetFileType (hFile=0x274) returned 0x1 [0044.404] WriteFile (in: hFile=0x274, lpBuffer=0x268f7e4*, nNumberOfBytesToWrite=0xa20, lpNumberOfBytesWritten=0x31e59c, lpOverlapped=0x0 | out: lpBuffer=0x268f7e4*, lpNumberOfBytesWritten=0x31e59c*=0xa20, lpOverlapped=0x0) returned 1 [0044.405] CloseHandle (hObject=0x274) returned 1 [0044.406] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveProjectToolset\\ProjectStatusIconsMask.bmp", nBufferLength=0x105, lpBuffer=0x31e14c, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveProjectToolset\\ProjectStatusIconsMask.bmp", lpFilePart=0x0) returned 0x75 [0044.406] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveProjectToolset\\ProjectStatusIconsMask.bmp", nBufferLength=0x105, lpBuffer=0x31e14c, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveProjectToolset\\ProjectStatusIconsMask.bmp", lpFilePart=0x0) returned 0x75 [0044.406] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e5ac) returned 1 [0044.406] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveProjectToolset\\ProjectStatusIconsMask.bmp" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveprojecttoolset\\projectstatusiconsmask.bmp"), fInfoLevelId=0x0, lpFileInformation=0x31e628 | out: lpFileInformation=0x31e628*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb486c900, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0x5a71ef90, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xfdeb8e40, ftLastWriteTime.dwHighDateTime=0x1d6eb7e, nFileSizeHigh=0x0, nFileSizeLow=0xa20)) returned 1 [0044.407] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e5a8) returned 1 [0044.407] MoveFileW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveProjectToolset\\ProjectStatusIconsMask.bmp" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveprojecttoolset\\projectstatusiconsmask.bmp"), lpNewFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveProjectToolset\\ProjectStatusIconsMask.bmp" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveprojecttoolset\\projectstatusiconsmask.bmp")) returned 1 [0044.407] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveProjectToolset\\ProjectTaskIcon.jpg", nBufferLength=0x105, lpBuffer=0x31e02c, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveProjectToolset\\ProjectTaskIcon.jpg", lpFilePart=0x0) returned 0x6e [0044.407] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e520) returned 1 [0044.407] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveProjectToolset\\ProjectTaskIcon.jpg" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveprojecttoolset\\projecttaskicon.jpg"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x274 [0044.407] GetFileType (hFile=0x274) returned 0x1 [0044.407] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e51c) returned 1 [0044.407] GetFileType (hFile=0x274) returned 0x1 [0044.407] GetFileSize (in: hFile=0x274, lpFileSizeHigh=0x31e628 | out: lpFileSizeHigh=0x31e628*=0x0) returned 0x200e [0044.408] ReadFile (in: hFile=0x274, lpBuffer=0x2690b74, nNumberOfBytesToRead=0x200e, lpNumberOfBytesRead=0x31e5d4, lpOverlapped=0x0 | out: lpBuffer=0x2690b74*, lpNumberOfBytesRead=0x31e5d4*=0x200e, lpOverlapped=0x0) returned 1 [0044.409] CloseHandle (hObject=0x274) returned 1 [0044.423] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveProjectToolset\\ProjectTaskIcon.jpg", nBufferLength=0x105, lpBuffer=0x31e018, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveProjectToolset\\ProjectTaskIcon.jpg", lpFilePart=0x0) returned 0x6e [0044.423] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e50c) returned 1 [0044.423] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveProjectToolset\\ProjectTaskIcon.jpg" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveprojecttoolset\\projecttaskicon.jpg"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x274 [0044.424] GetFileType (hFile=0x274) returned 0x1 [0044.424] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e508) returned 1 [0044.424] GetFileType (hFile=0x274) returned 0x1 [0044.424] WriteFile (in: hFile=0x274, lpBuffer=0x26e7b08*, nNumberOfBytesToWrite=0x2010, lpNumberOfBytesWritten=0x31e5c8, lpOverlapped=0x0 | out: lpBuffer=0x26e7b08*, lpNumberOfBytesWritten=0x31e5c8*=0x2010, lpOverlapped=0x0) returned 1 [0044.425] CloseHandle (hObject=0x274) returned 1 [0044.426] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveProjectToolset\\ProjectTaskIcon.jpg", nBufferLength=0x105, lpBuffer=0x31e14c, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveProjectToolset\\ProjectTaskIcon.jpg", lpFilePart=0x0) returned 0x6e [0044.426] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveProjectToolset\\ProjectTaskIcon.jpg", nBufferLength=0x105, lpBuffer=0x31e14c, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveProjectToolset\\ProjectTaskIcon.jpg", lpFilePart=0x0) returned 0x6e [0044.426] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e5ac) returned 1 [0044.426] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveProjectToolset\\ProjectTaskIcon.jpg" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveprojecttoolset\\projecttaskicon.jpg"), fInfoLevelId=0x0, lpFileInformation=0x31e628 | out: lpFileInformation=0x31e628*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb486c900, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0x6d084c30, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xfdedefa0, ftLastWriteTime.dwHighDateTime=0x1d6eb7e, nFileSizeHigh=0x0, nFileSizeLow=0x2010)) returned 1 [0044.426] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e5a8) returned 1 [0044.427] MoveFileW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveProjectToolset\\ProjectTaskIcon.jpg" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveprojecttoolset\\projecttaskicon.jpg"), lpNewFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveProjectToolset\\ProjectTaskIcon.jpg" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveprojecttoolset\\projecttaskicon.jpg")) returned 1 [0044.427] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveProjectToolset\\ProjectTaskIconMask.bmp", nBufferLength=0x105, lpBuffer=0x31e02c, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveProjectToolset\\ProjectTaskIconMask.bmp", lpFilePart=0x0) returned 0x72 [0044.427] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e520) returned 1 [0044.427] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveProjectToolset\\ProjectTaskIconMask.bmp" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveprojecttoolset\\projecttaskiconmask.bmp"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x274 [0044.428] GetFileType (hFile=0x274) returned 0x1 [0044.428] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e51c) returned 1 [0044.428] GetFileType (hFile=0x274) returned 0x1 [0044.428] GetFileSize (in: hFile=0x274, lpFileSizeHigh=0x31e628 | out: lpFileSizeHigh=0x31e628*=0x0) returned 0x79c [0044.428] ReadFile (in: hFile=0x274, lpBuffer=0x26ea7c4, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x31e5d4, lpOverlapped=0x0 | out: lpBuffer=0x26ea7c4*, lpNumberOfBytesRead=0x31e5d4*=0x79c, lpOverlapped=0x0) returned 1 [0044.429] CloseHandle (hObject=0x274) returned 1 [0044.443] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveProjectToolset\\ProjectTaskIconMask.bmp", nBufferLength=0x105, lpBuffer=0x31e018, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveProjectToolset\\ProjectTaskIconMask.bmp", lpFilePart=0x0) returned 0x72 [0044.443] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e50c) returned 1 [0044.443] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveProjectToolset\\ProjectTaskIconMask.bmp" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveprojecttoolset\\projecttaskiconmask.bmp"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x274 [0044.444] GetFileType (hFile=0x274) returned 0x1 [0044.444] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e508) returned 1 [0044.444] GetFileType (hFile=0x274) returned 0x1 [0044.444] WriteFile (in: hFile=0x274, lpBuffer=0x273ad64*, nNumberOfBytesToWrite=0x7a0, lpNumberOfBytesWritten=0x31e59c, lpOverlapped=0x0 | out: lpBuffer=0x273ad64*, lpNumberOfBytesWritten=0x31e59c*=0x7a0, lpOverlapped=0x0) returned 1 [0044.445] CloseHandle (hObject=0x274) returned 1 [0044.446] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveProjectToolset\\ProjectTaskIconMask.bmp", nBufferLength=0x105, lpBuffer=0x31e14c, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveProjectToolset\\ProjectTaskIconMask.bmp", lpFilePart=0x0) returned 0x72 [0044.446] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveProjectToolset\\ProjectTaskIconMask.bmp", nBufferLength=0x105, lpBuffer=0x31e14c, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveProjectToolset\\ProjectTaskIconMask.bmp", lpFilePart=0x0) returned 0x72 [0044.446] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e5ac) returned 1 [0044.446] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveProjectToolset\\ProjectTaskIconMask.bmp" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveprojecttoolset\\projecttaskiconmask.bmp"), fInfoLevelId=0x0, lpFileInformation=0x31e628 | out: lpFileInformation=0x31e628*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb486c900, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0x5a71ef90, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xfdf2b260, ftLastWriteTime.dwHighDateTime=0x1d6eb7e, nFileSizeHigh=0x0, nFileSizeLow=0x7a0)) returned 1 [0044.446] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e5a8) returned 1 [0044.446] MoveFileW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveProjectToolset\\ProjectTaskIconMask.bmp" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveprojecttoolset\\projecttaskiconmask.bmp"), lpNewFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveProjectToolset\\ProjectTaskIconMask.bmp" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveprojecttoolset\\projecttaskiconmask.bmp")) returned 1 [0044.446] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveProjectToolset\\ProjectToolsetIconImages.jpg", nBufferLength=0x105, lpBuffer=0x31e02c, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveProjectToolset\\ProjectToolsetIconImages.jpg", lpFilePart=0x0) returned 0x77 [0044.446] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e520) returned 1 [0044.446] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveProjectToolset\\ProjectToolsetIconImages.jpg" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveprojecttoolset\\projecttoolseticonimages.jpg"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x274 [0044.447] GetFileType (hFile=0x274) returned 0x1 [0044.447] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e51c) returned 1 [0044.447] GetFileType (hFile=0x274) returned 0x1 [0044.447] GetFileSize (in: hFile=0x274, lpFileSizeHigh=0x31e628 | out: lpFileSizeHigh=0x31e628*=0x0) returned 0x4f0a [0044.447] ReadFile (in: hFile=0x274, lpBuffer=0x273c110, nNumberOfBytesToRead=0x4f0a, lpNumberOfBytesRead=0x31e5d4, lpOverlapped=0x0 | out: lpBuffer=0x273c110*, lpNumberOfBytesRead=0x31e5d4*=0x4f0a, lpOverlapped=0x0) returned 1 [0044.449] CloseHandle (hObject=0x274) returned 1 [0044.462] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveProjectToolset\\ProjectToolsetIconImages.jpg", nBufferLength=0x105, lpBuffer=0x31e018, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveProjectToolset\\ProjectToolsetIconImages.jpg", lpFilePart=0x0) returned 0x77 [0044.462] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e50c) returned 1 [0044.462] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveProjectToolset\\ProjectToolsetIconImages.jpg" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveprojecttoolset\\projecttoolseticonimages.jpg"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x274 [0044.463] GetFileType (hFile=0x274) returned 0x1 [0044.463] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e508) returned 1 [0044.463] GetFileType (hFile=0x274) returned 0x1 [0044.463] WriteFile (in: hFile=0x274, lpBuffer=0x27a1a48*, nNumberOfBytesToWrite=0x4f10, lpNumberOfBytesWritten=0x31e5c8, lpOverlapped=0x0 | out: lpBuffer=0x27a1a48*, lpNumberOfBytesWritten=0x31e5c8*=0x4f10, lpOverlapped=0x0) returned 1 [0044.464] CloseHandle (hObject=0x274) returned 1 [0044.465] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveProjectToolset\\ProjectToolsetIconImages.jpg", nBufferLength=0x105, lpBuffer=0x31e14c, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveProjectToolset\\ProjectToolsetIconImages.jpg", lpFilePart=0x0) returned 0x77 [0044.465] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveProjectToolset\\ProjectToolsetIconImages.jpg", nBufferLength=0x105, lpBuffer=0x31e14c, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveProjectToolset\\ProjectToolsetIconImages.jpg", lpFilePart=0x0) returned 0x77 [0044.465] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e5ac) returned 1 [0044.466] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveProjectToolset\\ProjectToolsetIconImages.jpg" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveprojecttoolset\\projecttoolseticonimages.jpg"), fInfoLevelId=0x0, lpFileInformation=0x31e628 | out: lpFileInformation=0x31e628*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb5b7f600, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0x6d084c30, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xfdf513c0, ftLastWriteTime.dwHighDateTime=0x1d6eb7e, nFileSizeHigh=0x0, nFileSizeLow=0x4f10)) returned 1 [0044.466] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e5a8) returned 1 [0044.466] MoveFileW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveProjectToolset\\ProjectToolsetIconImages.jpg" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveprojecttoolset\\projecttoolseticonimages.jpg"), lpNewFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveProjectToolset\\ProjectToolsetIconImages.jpg" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveprojecttoolset\\projecttoolseticonimages.jpg")) returned 1 [0044.466] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveProjectToolset\\ProjectToolsetIconImagesMask.bmp", nBufferLength=0x105, lpBuffer=0x31e02c, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveProjectToolset\\ProjectToolsetIconImagesMask.bmp", lpFilePart=0x0) returned 0x7b [0044.466] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e520) returned 1 [0044.466] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveProjectToolset\\ProjectToolsetIconImagesMask.bmp" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveprojecttoolset\\projecttoolseticonimagesmask.bmp"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x274 [0044.467] GetFileType (hFile=0x274) returned 0x1 [0044.467] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e51c) returned 1 [0044.467] GetFileType (hFile=0x274) returned 0x1 [0044.467] GetFileSize (in: hFile=0x274, lpFileSizeHigh=0x31e628 | out: lpFileSizeHigh=0x31e628*=0x0) returned 0x2338 [0044.467] ReadFile (in: hFile=0x274, lpBuffer=0x27a6ec4, nNumberOfBytesToRead=0x2338, lpNumberOfBytesRead=0x31e5d4, lpOverlapped=0x0 | out: lpBuffer=0x27a6ec4*, lpNumberOfBytesRead=0x31e5d4*=0x2338, lpOverlapped=0x0) returned 1 [0044.469] CloseHandle (hObject=0x274) returned 1 [0044.483] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveProjectToolset\\ProjectToolsetIconImagesMask.bmp", nBufferLength=0x105, lpBuffer=0x31e018, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveProjectToolset\\ProjectToolsetIconImagesMask.bmp", lpFilePart=0x0) returned 0x7b [0044.483] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e50c) returned 1 [0044.483] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveProjectToolset\\ProjectToolsetIconImagesMask.bmp" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveprojecttoolset\\projecttoolseticonimagesmask.bmp"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x274 [0044.484] GetFileType (hFile=0x274) returned 0x1 [0044.484] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e508) returned 1 [0044.484] GetFileType (hFile=0x274) returned 0x1 [0044.484] WriteFile (in: hFile=0x274, lpBuffer=0x27fece8*, nNumberOfBytesToWrite=0x2340, lpNumberOfBytesWritten=0x31e5c8, lpOverlapped=0x0 | out: lpBuffer=0x27fece8*, lpNumberOfBytesWritten=0x31e5c8*=0x2340, lpOverlapped=0x0) returned 1 [0044.485] CloseHandle (hObject=0x274) returned 1 [0044.485] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveProjectToolset\\ProjectToolsetIconImagesMask.bmp", nBufferLength=0x105, lpBuffer=0x31e14c, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveProjectToolset\\ProjectToolsetIconImagesMask.bmp", lpFilePart=0x0) returned 0x7b [0044.486] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveProjectToolset\\ProjectToolsetIconImagesMask.bmp", nBufferLength=0x105, lpBuffer=0x31e14c, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveProjectToolset\\ProjectToolsetIconImagesMask.bmp", lpFilePart=0x0) returned 0x7b [0044.486] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e5ac) returned 1 [0044.486] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveProjectToolset\\ProjectToolsetIconImagesMask.bmp" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveprojecttoolset\\projecttoolseticonimagesmask.bmp"), fInfoLevelId=0x0, lpFileInformation=0x31e628 | out: lpFileInformation=0x31e628*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb5b7f600, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0x6d084c30, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xfdf77520, ftLastWriteTime.dwHighDateTime=0x1d6eb7e, nFileSizeHigh=0x0, nFileSizeLow=0x2340)) returned 1 [0044.486] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e5a8) returned 1 [0044.486] MoveFileW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveProjectToolset\\ProjectToolsetIconImagesMask.bmp" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveprojecttoolset\\projecttoolseticonimagesmask.bmp"), lpNewFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveProjectToolset\\ProjectToolsetIconImagesMask.bmp" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveprojecttoolset\\projecttoolseticonimagesmask.bmp")) returned 1 [0044.486] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveProjectToolset\\SplashImage.jpg", nBufferLength=0x105, lpBuffer=0x31e02c, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveProjectToolset\\SplashImage.jpg", lpFilePart=0x0) returned 0x6a [0044.486] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e520) returned 1 [0044.486] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveProjectToolset\\SplashImage.jpg" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveprojecttoolset\\splashimage.jpg"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x274 [0044.487] GetFileType (hFile=0x274) returned 0x1 [0044.487] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e51c) returned 1 [0044.487] GetFileType (hFile=0x274) returned 0x1 [0044.487] GetFileSize (in: hFile=0x274, lpFileSizeHigh=0x31e628 | out: lpFileSizeHigh=0x31e628*=0x0) returned 0x5f00 [0044.487] ReadFile (in: hFile=0x274, lpBuffer=0x2801570, nNumberOfBytesToRead=0x5f00, lpNumberOfBytesRead=0x31e5d4, lpOverlapped=0x0 | out: lpBuffer=0x2801570*, lpNumberOfBytesRead=0x31e5d4*=0x5f00, lpOverlapped=0x0) returned 1 [0044.489] CloseHandle (hObject=0x274) returned 1 [0044.506] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveProjectToolset\\SplashImage.jpg", nBufferLength=0x105, lpBuffer=0x31e018, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveProjectToolset\\SplashImage.jpg", lpFilePart=0x0) returned 0x6a [0044.506] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e50c) returned 1 [0044.506] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveProjectToolset\\SplashImage.jpg" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveprojecttoolset\\splashimage.jpg"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x274 [0044.507] GetFileType (hFile=0x274) returned 0x1 [0044.507] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e508) returned 1 [0044.507] GetFileType (hFile=0x274) returned 0x1 [0044.507] WriteFile (in: hFile=0x274, lpBuffer=0x26713ac*, nNumberOfBytesToWrite=0x5f10, lpNumberOfBytesWritten=0x31e5c8, lpOverlapped=0x0 | out: lpBuffer=0x26713ac*, lpNumberOfBytesWritten=0x31e5c8*=0x5f10, lpOverlapped=0x0) returned 1 [0044.508] CloseHandle (hObject=0x274) returned 1 [0044.509] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveProjectToolset\\SplashImage.jpg", nBufferLength=0x105, lpBuffer=0x31e14c, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveProjectToolset\\SplashImage.jpg", lpFilePart=0x0) returned 0x6a [0044.510] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveProjectToolset\\SplashImage.jpg", nBufferLength=0x105, lpBuffer=0x31e14c, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveProjectToolset\\SplashImage.jpg", lpFilePart=0x0) returned 0x6a [0044.510] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e5ac) returned 1 [0044.510] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveProjectToolset\\SplashImage.jpg" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveprojecttoolset\\splashimage.jpg"), fInfoLevelId=0x0, lpFileInformation=0x31e628 | out: lpFileInformation=0x31e628*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb5b7f600, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0x6d3a4910, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xfdfc37e0, ftLastWriteTime.dwHighDateTime=0x1d6eb7e, nFileSizeHigh=0x0, nFileSizeLow=0x5f10)) returned 1 [0044.510] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e5a8) returned 1 [0044.510] MoveFileW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveProjectToolset\\SplashImage.jpg" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveprojecttoolset\\splashimage.jpg"), lpNewFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveProjectToolset\\SplashImage.jpg" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveprojecttoolset\\splashimage.jpg")) returned 1 [0044.510] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveProjectToolset\\SplashImageMask.bmp", nBufferLength=0x105, lpBuffer=0x31e02c, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveProjectToolset\\SplashImageMask.bmp", lpFilePart=0x0) returned 0x6e [0044.510] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e520) returned 1 [0044.510] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveProjectToolset\\SplashImageMask.bmp" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveprojecttoolset\\splashimagemask.bmp"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x274 [0044.511] GetFileType (hFile=0x274) returned 0x1 [0044.511] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e51c) returned 1 [0044.511] GetFileType (hFile=0x274) returned 0x1 [0044.511] GetFileSize (in: hFile=0x274, lpFileSizeHigh=0x31e628 | out: lpFileSizeHigh=0x31e628*=0x0) returned 0x14078 [0044.511] ReadFile (in: hFile=0x274, lpBuffer=0x2677790, nNumberOfBytesToRead=0x14078, lpNumberOfBytesRead=0x31e5d4, lpOverlapped=0x0 | out: lpBuffer=0x2677790*, lpNumberOfBytesRead=0x31e5d4*=0x14078, lpOverlapped=0x0) returned 1 [0044.513] CloseHandle (hObject=0x274) returned 1 [0044.528] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveProjectToolset\\SplashImageMask.bmp", nBufferLength=0x105, lpBuffer=0x31e018, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveProjectToolset\\SplashImageMask.bmp", lpFilePart=0x0) returned 0x6e [0044.528] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e50c) returned 1 [0044.528] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveProjectToolset\\SplashImageMask.bmp" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveprojecttoolset\\splashimagemask.bmp"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x274 [0044.529] GetFileType (hFile=0x274) returned 0x1 [0044.529] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e508) returned 1 [0044.529] GetFileType (hFile=0x274) returned 0x1 [0044.529] WriteFile (in: hFile=0x274, lpBuffer=0x2700864*, nNumberOfBytesToWrite=0x14080, lpNumberOfBytesWritten=0x31e5c8, lpOverlapped=0x0 | out: lpBuffer=0x2700864*, lpNumberOfBytesWritten=0x31e5c8*=0x14080, lpOverlapped=0x0) returned 1 [0044.531] CloseHandle (hObject=0x274) returned 1 [0044.533] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveProjectToolset\\SplashImageMask.bmp", nBufferLength=0x105, lpBuffer=0x31e14c, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveProjectToolset\\SplashImageMask.bmp", lpFilePart=0x0) returned 0x6e [0044.533] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveProjectToolset\\SplashImageMask.bmp", nBufferLength=0x105, lpBuffer=0x31e14c, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveProjectToolset\\SplashImageMask.bmp", lpFilePart=0x0) returned 0x6e [0044.533] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e5ac) returned 1 [0044.533] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveProjectToolset\\SplashImageMask.bmp" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveprojecttoolset\\splashimagemask.bmp"), fInfoLevelId=0x0, lpFileInformation=0x31e628 | out: lpFileInformation=0x31e628*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb5b7f600, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0x6d3a4910, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xfdfe9940, ftLastWriteTime.dwHighDateTime=0x1d6eb7e, nFileSizeHigh=0x0, nFileSizeLow=0x14080)) returned 1 [0044.533] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e5a8) returned 1 [0044.533] MoveFileW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveProjectToolset\\SplashImageMask.bmp" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveprojecttoolset\\splashimagemask.bmp"), lpNewFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveProjectToolset\\SplashImageMask.bmp" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveprojecttoolset\\splashimagemask.bmp")) returned 1 [0044.534] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveProjectToolset\\WhiteboxMask.bmp", nBufferLength=0x105, lpBuffer=0x31e02c, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveProjectToolset\\WhiteboxMask.bmp", lpFilePart=0x0) returned 0x6b [0044.534] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e520) returned 1 [0044.534] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveProjectToolset\\WhiteboxMask.bmp" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveprojecttoolset\\whiteboxmask.bmp"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x274 [0044.534] GetFileType (hFile=0x274) returned 0x1 [0044.534] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e51c) returned 1 [0044.534] GetFileType (hFile=0x274) returned 0x1 [0044.534] GetFileSize (in: hFile=0x274, lpFileSizeHigh=0x31e628 | out: lpFileSizeHigh=0x31e628*=0x0) returned 0x4d72 [0044.534] ReadFile (in: hFile=0x274, lpBuffer=0x2714e2c, nNumberOfBytesToRead=0x4d72, lpNumberOfBytesRead=0x31e5d4, lpOverlapped=0x0 | out: lpBuffer=0x2714e2c*, lpNumberOfBytesRead=0x31e5d4*=0x4d72, lpOverlapped=0x0) returned 1 [0044.536] CloseHandle (hObject=0x274) returned 1 [0044.576] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveProjectToolset\\WhiteboxMask.bmp", nBufferLength=0x105, lpBuffer=0x31e018, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveProjectToolset\\WhiteboxMask.bmp", lpFilePart=0x0) returned 0x6b [0044.576] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e50c) returned 1 [0044.576] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveProjectToolset\\WhiteboxMask.bmp" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveprojecttoolset\\whiteboxmask.bmp"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x274 [0044.577] GetFileType (hFile=0x274) returned 0x1 [0044.577] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e508) returned 1 [0044.577] GetFileType (hFile=0x274) returned 0x1 [0044.577] WriteFile (in: hFile=0x274, lpBuffer=0x2779f94*, nNumberOfBytesToWrite=0x4d80, lpNumberOfBytesWritten=0x31e5c8, lpOverlapped=0x0 | out: lpBuffer=0x2779f94*, lpNumberOfBytesWritten=0x31e5c8*=0x4d80, lpOverlapped=0x0) returned 1 [0044.578] CloseHandle (hObject=0x274) returned 1 [0044.579] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveProjectToolset\\WhiteboxMask.bmp", nBufferLength=0x105, lpBuffer=0x31e14c, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveProjectToolset\\WhiteboxMask.bmp", lpFilePart=0x0) returned 0x6b [0044.579] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveProjectToolset\\WhiteboxMask.bmp", nBufferLength=0x105, lpBuffer=0x31e14c, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveProjectToolset\\WhiteboxMask.bmp", lpFilePart=0x0) returned 0x6b [0044.579] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e5ac) returned 1 [0044.579] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveProjectToolset\\WhiteboxMask.bmp" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveprojecttoolset\\whiteboxmask.bmp"), fInfoLevelId=0x0, lpFileInformation=0x31e628 | out: lpFileInformation=0x31e628*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb5b7f600, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0x5e5c1270, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xfe05bd60, ftLastWriteTime.dwHighDateTime=0x1d6eb7e, nFileSizeHigh=0x0, nFileSizeLow=0x4d80)) returned 1 [0044.579] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e5a8) returned 1 [0044.579] MoveFileW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveProjectToolset\\WhiteboxMask.bmp" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveprojecttoolset\\whiteboxmask.bmp"), lpNewFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveProjectToolset\\WhiteboxMask.bmp" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveprojecttoolset\\whiteboxmask.bmp")) returned 1 [0044.580] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveProjectToolset\\ZoomIcons.jpg", nBufferLength=0x105, lpBuffer=0x31e02c, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveProjectToolset\\ZoomIcons.jpg", lpFilePart=0x0) returned 0x68 [0044.580] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e520) returned 1 [0044.580] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveProjectToolset\\ZoomIcons.jpg" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveprojecttoolset\\zoomicons.jpg"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x274 [0044.580] GetFileType (hFile=0x274) returned 0x1 [0044.580] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e51c) returned 1 [0044.581] GetFileType (hFile=0x274) returned 0x1 [0044.581] GetFileSize (in: hFile=0x274, lpFileSizeHigh=0x31e628 | out: lpFileSizeHigh=0x31e628*=0x0) returned 0xc59 [0044.581] ReadFile (in: hFile=0x274, lpBuffer=0x277fe3c, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x31e5d4, lpOverlapped=0x0 | out: lpBuffer=0x277fe3c*, lpNumberOfBytesRead=0x31e5d4*=0xc59, lpOverlapped=0x0) returned 1 [0044.583] CloseHandle (hObject=0x274) returned 1 [0044.596] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveProjectToolset\\ZoomIcons.jpg", nBufferLength=0x105, lpBuffer=0x31e018, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveProjectToolset\\ZoomIcons.jpg", lpFilePart=0x0) returned 0x68 [0044.596] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e50c) returned 1 [0044.596] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveProjectToolset\\ZoomIcons.jpg" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveprojecttoolset\\zoomicons.jpg"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x274 [0044.597] GetFileType (hFile=0x274) returned 0x1 [0044.597] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e508) returned 1 [0044.597] GetFileType (hFile=0x274) returned 0x1 [0044.597] WriteFile (in: hFile=0x274, lpBuffer=0x27d1b78*, nNumberOfBytesToWrite=0xc60, lpNumberOfBytesWritten=0x31e59c, lpOverlapped=0x0 | out: lpBuffer=0x27d1b78*, lpNumberOfBytesWritten=0x31e59c*=0xc60, lpOverlapped=0x0) returned 1 [0044.598] CloseHandle (hObject=0x274) returned 1 [0044.599] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveProjectToolset\\ZoomIcons.jpg", nBufferLength=0x105, lpBuffer=0x31e14c, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveProjectToolset\\ZoomIcons.jpg", lpFilePart=0x0) returned 0x68 [0044.599] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveProjectToolset\\ZoomIcons.jpg", nBufferLength=0x105, lpBuffer=0x31e14c, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveProjectToolset\\ZoomIcons.jpg", lpFilePart=0x0) returned 0x68 [0044.599] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e5ac) returned 1 [0044.599] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveProjectToolset\\ZoomIcons.jpg" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveprojecttoolset\\zoomicons.jpg"), fInfoLevelId=0x0, lpFileInformation=0x31e628 | out: lpFileInformation=0x31e628*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb6e92300, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0x70c9f7b0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xfe081ec0, ftLastWriteTime.dwHighDateTime=0x1d6eb7e, nFileSizeHigh=0x0, nFileSizeLow=0xc60)) returned 1 [0044.599] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e5a8) returned 1 [0044.599] MoveFileW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveProjectToolset\\ZoomIcons.jpg" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveprojecttoolset\\zoomicons.jpg"), lpNewFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveProjectToolset\\ZoomIcons.jpg" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveprojecttoolset\\zoomicons.jpg")) returned 1 [0044.599] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveProjectToolset\\ZoomIconsMask.bmp", nBufferLength=0x105, lpBuffer=0x31e02c, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveProjectToolset\\ZoomIconsMask.bmp", lpFilePart=0x0) returned 0x6c [0044.599] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e520) returned 1 [0044.599] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveProjectToolset\\ZoomIconsMask.bmp" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveprojecttoolset\\zoomiconsmask.bmp"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x274 [0044.600] GetFileType (hFile=0x274) returned 0x1 [0044.601] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e51c) returned 1 [0044.601] GetFileType (hFile=0x274) returned 0x1 [0044.601] GetFileSize (in: hFile=0x274, lpFileSizeHigh=0x31e628 | out: lpFileSizeHigh=0x31e628*=0x0) returned 0x638 [0044.601] ReadFile (in: hFile=0x274, lpBuffer=0x27d3514, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x31e5d4, lpOverlapped=0x0 | out: lpBuffer=0x27d3514*, lpNumberOfBytesRead=0x31e5d4*=0x638, lpOverlapped=0x0) returned 1 [0044.603] CloseHandle (hObject=0x274) returned 1 [0044.616] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveProjectToolset\\ZoomIconsMask.bmp", nBufferLength=0x105, lpBuffer=0x31e018, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveProjectToolset\\ZoomIconsMask.bmp", lpFilePart=0x0) returned 0x6c [0044.616] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e50c) returned 1 [0044.617] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveProjectToolset\\ZoomIconsMask.bmp" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveprojecttoolset\\zoomiconsmask.bmp"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x274 [0044.617] GetFileType (hFile=0x274) returned 0x1 [0044.617] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e508) returned 1 [0044.617] GetFileType (hFile=0x274) returned 0x1 [0044.617] WriteFile (in: hFile=0x274, lpBuffer=0x28233c0*, nNumberOfBytesToWrite=0x640, lpNumberOfBytesWritten=0x31e59c, lpOverlapped=0x0 | out: lpBuffer=0x28233c0*, lpNumberOfBytesWritten=0x31e59c*=0x640, lpOverlapped=0x0) returned 1 [0044.618] CloseHandle (hObject=0x274) returned 1 [0044.619] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveProjectToolset\\ZoomIconsMask.bmp", nBufferLength=0x105, lpBuffer=0x31e14c, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveProjectToolset\\ZoomIconsMask.bmp", lpFilePart=0x0) returned 0x6c [0044.619] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveProjectToolset\\ZoomIconsMask.bmp", nBufferLength=0x105, lpBuffer=0x31e14c, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveProjectToolset\\ZoomIconsMask.bmp", lpFilePart=0x0) returned 0x6c [0044.619] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e5ac) returned 1 [0044.619] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveProjectToolset\\ZoomIconsMask.bmp" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveprojecttoolset\\zoomiconsmask.bmp"), fInfoLevelId=0x0, lpFileInformation=0x31e628 | out: lpFileInformation=0x31e628*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb6e92300, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0x5e86eb30, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xfe0ce180, ftLastWriteTime.dwHighDateTime=0x1d6eb7e, nFileSizeHigh=0x0, nFileSizeLow=0x640)) returned 1 [0044.619] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e5a8) returned 1 [0044.619] MoveFileW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveProjectToolset\\ZoomIconsMask.bmp" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveprojecttoolset\\zoomiconsmask.bmp"), lpNewFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveProjectToolset\\ZoomIconsMask.bmp" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveprojecttoolset\\zoomiconsmask.bmp")) returned 1 [0044.620] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e5dc) returned 1 [0044.620] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveProjectToolset\\ProjectTool", nBufferLength=0x105, lpBuffer=0x31e0e4, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveProjectToolset\\ProjectTool", lpFilePart=0x0) returned 0x66 [0044.620] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveProjectToolset\\ProjectTool\\", nBufferLength=0x105, lpBuffer=0x31e0b8, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveProjectToolset\\ProjectTool\\", lpFilePart=0x0) returned 0x67 [0044.620] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveProjectToolset\\ProjectTool\\*", lpFindFileData=0x31e304 | out: lpFindFileData=0x31e304*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x538bb350, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x538bb350, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x538bb350, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x381c40 [0044.621] FindNextFileW (in: hFindFile=0x381c40, lpFindFileData=0x31e314 | out: lpFindFileData=0x31e314*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x538bb350, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x538bb350, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x538bb350, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0044.621] FindNextFileW (in: hFindFile=0x381c40, lpFindFileData=0x31e314 | out: lpFindFileData=0x31e314*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x538bb350, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x6073a7d0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x6073a7d0, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Project Report Type", cAlternateFileName="PROJEC~1")) returned 1 [0044.621] FindNextFileW (in: hFindFile=0x381c40, lpFindFileData=0x31e314 | out: lpFindFileData=0x31e314*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x538bb350, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x6073a7d0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x6073a7d0, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Project Report Type", cAlternateFileName="PROJEC~1")) returned 0 [0044.621] FindClose (in: hFindFile=0x381c40 | out: hFindFile=0x381c40) returned 1 [0044.622] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e59c) returned 1 [0044.622] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e5a8) returned 1 [0044.622] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e5dc) returned 1 [0044.622] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveProjectToolset\\ProjectTool", nBufferLength=0x105, lpBuffer=0x31e0e4, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveProjectToolset\\ProjectTool", lpFilePart=0x0) returned 0x66 [0044.622] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveProjectToolset\\ProjectTool\\", nBufferLength=0x105, lpBuffer=0x31e0b8, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveProjectToolset\\ProjectTool\\", lpFilePart=0x0) returned 0x67 [0044.622] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveProjectToolset\\ProjectTool\\*", lpFindFileData=0x31e304 | out: lpFindFileData=0x31e304*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x538bb350, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x538bb350, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x538bb350, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x381c40 [0044.622] FindNextFileW (in: hFindFile=0x381c40, lpFindFileData=0x31e314 | out: lpFindFileData=0x31e314*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x538bb350, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x538bb350, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x538bb350, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0044.622] FindNextFileW (in: hFindFile=0x381c40, lpFindFileData=0x31e314 | out: lpFindFileData=0x31e314*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x538bb350, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x6073a7d0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x6073a7d0, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Project Report Type", cAlternateFileName="PROJEC~1")) returned 1 [0044.622] FindNextFileW (in: hFindFile=0x381c40, lpFindFileData=0x31e314 | out: lpFindFileData=0x31e314*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0044.622] FindClose (in: hFindFile=0x381c40 | out: hFindFile=0x381c40) returned 1 [0044.622] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e59c) returned 1 [0044.622] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e5a8) returned 1 [0044.623] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e564) returned 1 [0044.623] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveProjectToolset\\ProjectTool\\Project Report Type", nBufferLength=0x105, lpBuffer=0x31e06c, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveProjectToolset\\ProjectTool\\Project Report Type", lpFilePart=0x0) returned 0x7a [0044.623] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveProjectToolset\\ProjectTool\\Project Report Type\\", nBufferLength=0x105, lpBuffer=0x31e040, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveProjectToolset\\ProjectTool\\Project Report Type\\", lpFilePart=0x0) returned 0x7b [0044.623] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveProjectToolset\\ProjectTool\\Project Report Type\\*", lpFindFileData=0x31e28c | out: lpFindFileData=0x31e28c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x538bb350, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x6073a7d0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x6073a7d0, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x381c40 [0044.623] FindNextFileW (in: hFindFile=0x381c40, lpFindFileData=0x31e29c | out: lpFindFileData=0x31e29c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x538bb350, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x6073a7d0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x6073a7d0, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0044.623] FindNextFileW (in: hFindFile=0x381c40, lpFindFileData=0x31e29c | out: lpFindFileData=0x31e29c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x6073a7d0, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x6073a7d0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x6073a7d0, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Basic", cAlternateFileName="")) returned 1 [0044.623] FindNextFileW (in: hFindFile=0x381c40, lpFindFileData=0x31e29c | out: lpFindFileData=0x31e29c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x538bb350, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x69c4c990, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x69c4c990, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Fancy", cAlternateFileName="")) returned 1 [0044.623] FindNextFileW (in: hFindFile=0x381c40, lpFindFileData=0x31e29c | out: lpFindFileData=0x31e29c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x538bb350, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x69c4c990, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x69c4c990, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Fancy", cAlternateFileName="")) returned 0 [0044.624] FindClose (in: hFindFile=0x381c40 | out: hFindFile=0x381c40) returned 1 [0044.624] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e524) returned 1 [0044.624] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e530) returned 1 [0044.624] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e564) returned 1 [0044.624] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveProjectToolset\\ProjectTool\\Project Report Type", nBufferLength=0x105, lpBuffer=0x31e06c, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveProjectToolset\\ProjectTool\\Project Report Type", lpFilePart=0x0) returned 0x7a [0044.624] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveProjectToolset\\ProjectTool\\Project Report Type\\", nBufferLength=0x105, lpBuffer=0x31e040, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveProjectToolset\\ProjectTool\\Project Report Type\\", lpFilePart=0x0) returned 0x7b [0044.624] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveProjectToolset\\ProjectTool\\Project Report Type\\*", lpFindFileData=0x31e28c | out: lpFindFileData=0x31e28c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x538bb350, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x6073a7d0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x6073a7d0, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x381c40 [0044.624] FindNextFileW (in: hFindFile=0x381c40, lpFindFileData=0x31e29c | out: lpFindFileData=0x31e29c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x538bb350, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x6073a7d0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x6073a7d0, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0044.624] FindNextFileW (in: hFindFile=0x381c40, lpFindFileData=0x31e29c | out: lpFindFileData=0x31e29c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x6073a7d0, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x6073a7d0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x6073a7d0, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Basic", cAlternateFileName="")) returned 1 [0044.624] FindNextFileW (in: hFindFile=0x381c40, lpFindFileData=0x31e29c | out: lpFindFileData=0x31e29c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x538bb350, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x69c4c990, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x69c4c990, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Fancy", cAlternateFileName="")) returned 1 [0044.624] FindNextFileW (in: hFindFile=0x381c40, lpFindFileData=0x31e29c | out: lpFindFileData=0x31e29c*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0044.625] FindClose (in: hFindFile=0x381c40 | out: hFindFile=0x381c40) returned 1 [0044.625] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e524) returned 1 [0044.625] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e530) returned 1 [0044.625] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e4ec) returned 1 [0044.625] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveProjectToolset\\ProjectTool\\Project Report Type\\Basic", nBufferLength=0x105, lpBuffer=0x31dff4, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveProjectToolset\\ProjectTool\\Project Report Type\\Basic", lpFilePart=0x0) returned 0x80 [0044.625] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveProjectToolset\\ProjectTool\\Project Report Type\\Basic\\", nBufferLength=0x105, lpBuffer=0x31dfc8, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveProjectToolset\\ProjectTool\\Project Report Type\\Basic\\", lpFilePart=0x0) returned 0x81 [0044.625] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveProjectToolset\\ProjectTool\\Project Report Type\\Basic\\*", lpFindFileData=0x31e214 | out: lpFindFileData=0x31e214*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x6073a7d0, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x6073a7d0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x6073a7d0, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x381c40 [0044.633] FindNextFileW (in: hFindFile=0x381c40, lpFindFileData=0x31e224 | out: lpFindFileData=0x31e224*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x6073a7d0, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x6073a7d0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x6073a7d0, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0044.633] FindNextFileW (in: hFindFile=0x381c40, lpFindFileData=0x31e224 | out: lpFindFileData=0x31e224*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb486c900, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0x6073a7d0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xb486c900, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0xced, dwReserved0=0x0, dwReserved1=0x0, cFileName="DEFAULT.XSL", cAlternateFileName="")) returned 1 [0044.633] FindNextFileW (in: hFindFile=0x381c40, lpFindFileData=0x31e224 | out: lpFindFileData=0x31e224*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0044.633] FindClose (in: hFindFile=0x381c40 | out: hFindFile=0x381c40) returned 1 [0044.634] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e4ac) returned 1 [0044.634] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e4b8) returned 1 [0044.634] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e4ec) returned 1 [0044.634] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveProjectToolset\\ProjectTool\\Project Report Type\\Basic", nBufferLength=0x105, lpBuffer=0x31dff4, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveProjectToolset\\ProjectTool\\Project Report Type\\Basic", lpFilePart=0x0) returned 0x80 [0044.634] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveProjectToolset\\ProjectTool\\Project Report Type\\Basic\\", nBufferLength=0x105, lpBuffer=0x31dfc8, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveProjectToolset\\ProjectTool\\Project Report Type\\Basic\\", lpFilePart=0x0) returned 0x81 [0044.634] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveProjectToolset\\ProjectTool\\Project Report Type\\Basic\\*", lpFindFileData=0x31e214 | out: lpFindFileData=0x31e214*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x6073a7d0, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x6073a7d0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x6073a7d0, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x381c40 [0044.634] FindNextFileW (in: hFindFile=0x381c40, lpFindFileData=0x31e224 | out: lpFindFileData=0x31e224*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x6073a7d0, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x6073a7d0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x6073a7d0, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0044.634] FindNextFileW (in: hFindFile=0x381c40, lpFindFileData=0x31e224 | out: lpFindFileData=0x31e224*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb486c900, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0x6073a7d0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xb486c900, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0xced, dwReserved0=0x0, dwReserved1=0x0, cFileName="DEFAULT.XSL", cAlternateFileName="")) returned 1 [0044.634] FindNextFileW (in: hFindFile=0x381c40, lpFindFileData=0x31e224 | out: lpFindFileData=0x31e224*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb486c900, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0x6073a7d0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xb486c900, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0xced, dwReserved0=0x0, dwReserved1=0x0, cFileName="DEFAULT.XSL", cAlternateFileName="")) returned 0 [0044.635] FindClose (in: hFindFile=0x381c40 | out: hFindFile=0x381c40) returned 1 [0044.635] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e4ac) returned 1 [0044.635] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e4b8) returned 1 [0044.635] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e4ec) returned 1 [0044.635] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveProjectToolset\\ProjectTool\\Project Report Type\\Fancy", nBufferLength=0x105, lpBuffer=0x31dff4, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveProjectToolset\\ProjectTool\\Project Report Type\\Fancy", lpFilePart=0x0) returned 0x80 [0044.635] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveProjectToolset\\ProjectTool\\Project Report Type\\Fancy\\", nBufferLength=0x105, lpBuffer=0x31dfc8, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveProjectToolset\\ProjectTool\\Project Report Type\\Fancy\\", lpFilePart=0x0) returned 0x81 [0044.635] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveProjectToolset\\ProjectTool\\Project Report Type\\Fancy\\*", lpFindFileData=0x31e214 | out: lpFindFileData=0x31e214*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x538bb350, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x69c4c990, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x69c4c990, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x381c40 [0044.636] FindNextFileW (in: hFindFile=0x381c40, lpFindFileData=0x31e224 | out: lpFindFileData=0x31e224*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x538bb350, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x69c4c990, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x69c4c990, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0044.637] FindNextFileW (in: hFindFile=0x381c40, lpFindFileData=0x31e224 | out: lpFindFileData=0x31e224*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb486c900, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0x61cccf30, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xb486c900, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0x16c5, dwReserved0=0x0, dwReserved1=0x0, cFileName="Hierarchy.js", cAlternateFileName="HIERAR~1.JS")) returned 1 [0044.637] FindNextFileW (in: hFindFile=0x381c40, lpFindFileData=0x31e224 | out: lpFindFileData=0x31e224*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb5b7f600, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0x538bb350, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xb5b7f600, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0x157e, dwReserved0=0x0, dwReserved1=0x0, cFileName="Hierarchy.xsl", cAlternateFileName="HIERAR~1.XSL")) returned 1 [0044.637] FindNextFileW (in: hFindFile=0x381c40, lpFindFileData=0x31e224 | out: lpFindFileData=0x31e224*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb5b7f600, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0x69c4c990, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xb5b7f600, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0x345, dwReserved0=0x0, dwReserved1=0x0, cFileName="MINUS.GIF", cAlternateFileName="")) returned 1 [0044.637] FindNextFileW (in: hFindFile=0x381c40, lpFindFileData=0x31e224 | out: lpFindFileData=0x31e224*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb5b7f600, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0x5a497830, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xb5b7f600, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0x349, dwReserved0=0x0, dwReserved1=0x0, cFileName="PLUS.GIF", cAlternateFileName="")) returned 1 [0044.637] FindNextFileW (in: hFindFile=0x381c40, lpFindFileData=0x31e224 | out: lpFindFileData=0x31e224*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb5b7f600, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0x5aad71f0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xb5b7f600, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0x327, dwReserved0=0x0, dwReserved1=0x0, cFileName="SPACER.GIF", cAlternateFileName="")) returned 1 [0044.637] FindNextFileW (in: hFindFile=0x381c40, lpFindFileData=0x31e224 | out: lpFindFileData=0x31e224*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0044.637] FindClose (in: hFindFile=0x381c40 | out: hFindFile=0x381c40) returned 1 [0044.638] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e4ac) returned 1 [0044.638] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e4b8) returned 1 [0044.638] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e4ec) returned 1 [0044.638] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveProjectToolset\\ProjectTool\\Project Report Type\\Fancy", nBufferLength=0x105, lpBuffer=0x31dff4, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveProjectToolset\\ProjectTool\\Project Report Type\\Fancy", lpFilePart=0x0) returned 0x80 [0044.638] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveProjectToolset\\ProjectTool\\Project Report Type\\Fancy\\", nBufferLength=0x105, lpBuffer=0x31dfc8, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveProjectToolset\\ProjectTool\\Project Report Type\\Fancy\\", lpFilePart=0x0) returned 0x81 [0044.638] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveProjectToolset\\ProjectTool\\Project Report Type\\Fancy\\*", lpFindFileData=0x31e214 | out: lpFindFileData=0x31e214*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x538bb350, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x69c4c990, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x69c4c990, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x381c40 [0044.639] FindNextFileW (in: hFindFile=0x381c40, lpFindFileData=0x31e224 | out: lpFindFileData=0x31e224*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x538bb350, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x69c4c990, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x69c4c990, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0044.639] FindNextFileW (in: hFindFile=0x381c40, lpFindFileData=0x31e224 | out: lpFindFileData=0x31e224*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb486c900, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0x61cccf30, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xb486c900, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0x16c5, dwReserved0=0x0, dwReserved1=0x0, cFileName="Hierarchy.js", cAlternateFileName="HIERAR~1.JS")) returned 1 [0044.639] FindNextFileW (in: hFindFile=0x381c40, lpFindFileData=0x31e224 | out: lpFindFileData=0x31e224*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb5b7f600, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0x538bb350, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xb5b7f600, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0x157e, dwReserved0=0x0, dwReserved1=0x0, cFileName="Hierarchy.xsl", cAlternateFileName="HIERAR~1.XSL")) returned 1 [0044.640] FindNextFileW (in: hFindFile=0x381c40, lpFindFileData=0x31e224 | out: lpFindFileData=0x31e224*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb5b7f600, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0x69c4c990, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xb5b7f600, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0x345, dwReserved0=0x0, dwReserved1=0x0, cFileName="MINUS.GIF", cAlternateFileName="")) returned 1 [0044.640] FindNextFileW (in: hFindFile=0x381c40, lpFindFileData=0x31e224 | out: lpFindFileData=0x31e224*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb5b7f600, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0x5a497830, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xb5b7f600, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0x349, dwReserved0=0x0, dwReserved1=0x0, cFileName="PLUS.GIF", cAlternateFileName="")) returned 1 [0044.640] FindNextFileW (in: hFindFile=0x381c40, lpFindFileData=0x31e224 | out: lpFindFileData=0x31e224*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb5b7f600, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0x5aad71f0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xb5b7f600, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0x327, dwReserved0=0x0, dwReserved1=0x0, cFileName="SPACER.GIF", cAlternateFileName="")) returned 1 [0044.640] FindNextFileW (in: hFindFile=0x381c40, lpFindFileData=0x31e224 | out: lpFindFileData=0x31e224*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb5b7f600, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0x5aad71f0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xb5b7f600, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0x327, dwReserved0=0x0, dwReserved1=0x0, cFileName="SPACER.GIF", cAlternateFileName="")) returned 0 [0044.640] FindClose (in: hFindFile=0x381c40 | out: hFindFile=0x381c40) returned 1 [0044.641] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e4ac) returned 1 [0044.641] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e4b8) returned 1 [0044.641] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e654) returned 1 [0044.641] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\Welcome Tool", nBufferLength=0x105, lpBuffer=0x31e15c, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\Welcome Tool", lpFilePart=0x0) returned 0x52 [0044.641] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\Welcome Tool\\", nBufferLength=0x105, lpBuffer=0x31e130, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\Welcome Tool\\", lpFilePart=0x0) returned 0x53 [0044.641] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\Welcome Tool\\*", lpFindFileData=0x31e37c | out: lpFindFileData=0x31e37c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x53907610, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x61cccf30, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x61cccf30, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x381c40 [0044.642] FindNextFileW (in: hFindFile=0x381c40, lpFindFileData=0x31e38c | out: lpFindFileData=0x31e38c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x53907610, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x61cccf30, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x61cccf30, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0044.642] FindNextFileW (in: hFindFile=0x381c40, lpFindFileData=0x31e38c | out: lpFindFileData=0x31e38c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xbbadd700, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0x61cccf30, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xbbadd700, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0x10f3, dwReserved0=0x0, dwReserved1=0x0, cFileName="IconImages.jpg", cAlternateFileName="ICONIM~1.JPG")) returned 1 [0044.642] FindNextFileW (in: hFindFile=0x381c40, lpFindFileData=0x31e38c | out: lpFindFileData=0x31e38c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xbcdf0400, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0x53907610, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xbcdf0400, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0xa38, dwReserved0=0x0, dwReserved1=0x0, cFileName="IconImagesMask.bmp", cAlternateFileName="ICONIM~1.BMP")) returned 1 [0044.642] FindNextFileW (in: hFindFile=0x381c40, lpFindFileData=0x31e38c | out: lpFindFileData=0x31e38c*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0044.642] FindClose (in: hFindFile=0x381c40 | out: hFindFile=0x381c40) returned 1 [0044.642] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e614) returned 1 [0044.642] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e620) returned 1 [0044.642] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e654) returned 1 [0044.643] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\Welcome Tool", nBufferLength=0x105, lpBuffer=0x31e15c, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\Welcome Tool", lpFilePart=0x0) returned 0x52 [0044.643] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\Welcome Tool\\", nBufferLength=0x105, lpBuffer=0x31e130, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\Welcome Tool\\", lpFilePart=0x0) returned 0x53 [0044.643] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\Welcome Tool\\*", lpFindFileData=0x31e37c | out: lpFindFileData=0x31e37c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x53907610, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x61cccf30, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x61cccf30, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x381c40 [0044.643] FindNextFileW (in: hFindFile=0x381c40, lpFindFileData=0x31e38c | out: lpFindFileData=0x31e38c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x53907610, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x61cccf30, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x61cccf30, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0044.643] FindNextFileW (in: hFindFile=0x381c40, lpFindFileData=0x31e38c | out: lpFindFileData=0x31e38c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xbbadd700, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0x61cccf30, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xbbadd700, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0x10f3, dwReserved0=0x0, dwReserved1=0x0, cFileName="IconImages.jpg", cAlternateFileName="ICONIM~1.JPG")) returned 1 [0044.643] FindNextFileW (in: hFindFile=0x381c40, lpFindFileData=0x31e38c | out: lpFindFileData=0x31e38c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xbcdf0400, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0x53907610, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xbcdf0400, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0xa38, dwReserved0=0x0, dwReserved1=0x0, cFileName="IconImagesMask.bmp", cAlternateFileName="ICONIM~1.BMP")) returned 1 [0044.643] FindNextFileW (in: hFindFile=0x381c40, lpFindFileData=0x31e38c | out: lpFindFileData=0x31e38c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xbcdf0400, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0x53907610, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xbcdf0400, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0xa38, dwReserved0=0x0, dwReserved1=0x0, cFileName="IconImagesMask.bmp", cAlternateFileName="ICONIM~1.BMP")) returned 0 [0044.643] FindClose (in: hFindFile=0x381c40 | out: hFindFile=0x381c40) returned 1 [0044.643] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e614) returned 1 [0044.643] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e620) returned 1 [0044.643] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\Welcome Tool\\IconImages.jpg", nBufferLength=0x105, lpBuffer=0x31e02c, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\Welcome Tool\\IconImages.jpg", lpFilePart=0x0) returned 0x61 [0044.643] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e520) returned 1 [0044.644] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\Welcome Tool\\IconImages.jpg" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\welcome tool\\iconimages.jpg"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x274 [0044.644] GetFileType (hFile=0x274) returned 0x1 [0044.644] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e51c) returned 1 [0044.644] GetFileType (hFile=0x274) returned 0x1 [0044.644] GetFileSize (in: hFile=0x274, lpFileSizeHigh=0x31e628 | out: lpFileSizeHigh=0x31e628*=0x0) returned 0x10f3 [0044.644] ReadFile (in: hFile=0x274, lpBuffer=0x2831940, nNumberOfBytesToRead=0x10f3, lpNumberOfBytesRead=0x31e5d4, lpOverlapped=0x0 | out: lpBuffer=0x2831940*, lpNumberOfBytesRead=0x31e5d4*=0x10f3, lpOverlapped=0x0) returned 1 [0044.689] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\Welcome Tool\\IconImages.jpg", nBufferLength=0x105, lpBuffer=0x31e018, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\Welcome Tool\\IconImages.jpg", lpFilePart=0x0) returned 0x61 [0044.689] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e50c) returned 1 [0044.689] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\Welcome Tool\\IconImages.jpg" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\welcome tool\\iconimages.jpg"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x274 [0044.690] GetFileType (hFile=0x274) returned 0x1 [0044.690] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e508) returned 1 [0044.690] GetFileType (hFile=0x274) returned 0x1 [0044.690] WriteFile (in: hFile=0x274, lpBuffer=0x267daf0*, nNumberOfBytesToWrite=0x1100, lpNumberOfBytesWritten=0x31e5c8, lpOverlapped=0x0 | out: lpBuffer=0x267daf0*, lpNumberOfBytesWritten=0x31e5c8*=0x1100, lpOverlapped=0x0) returned 1 [0044.691] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\Welcome Tool\\IconImages.jpg", nBufferLength=0x105, lpBuffer=0x31e14c, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\Welcome Tool\\IconImages.jpg", lpFilePart=0x0) returned 0x61 [0044.691] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\Welcome Tool\\IconImages.jpg", nBufferLength=0x105, lpBuffer=0x31e14c, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\Welcome Tool\\IconImages.jpg", lpFilePart=0x0) returned 0x61 [0044.692] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e5ac) returned 1 [0044.692] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\Welcome Tool\\IconImages.jpg" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\welcome tool\\iconimages.jpg"), fInfoLevelId=0x0, lpFileInformation=0x31e628 | out: lpFileInformation=0x31e628*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xbbadd700, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0x61cccf30, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xfe166700, ftLastWriteTime.dwHighDateTime=0x1d6eb7e, nFileSizeHigh=0x0, nFileSizeLow=0x1100)) returned 1 [0044.692] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e5a8) returned 1 [0044.692] MoveFileW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\Welcome Tool\\IconImages.jpg" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\welcome tool\\iconimages.jpg"), lpNewFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\Welcome Tool\\IconImages.jpg" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\welcome tool\\iconimages.jpg")) returned 1 [0044.693] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\Welcome Tool\\IconImagesMask.bmp", nBufferLength=0x105, lpBuffer=0x31e02c, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\Welcome Tool\\IconImagesMask.bmp", lpFilePart=0x0) returned 0x65 [0044.693] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e520) returned 1 [0044.693] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\Welcome Tool\\IconImagesMask.bmp" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\welcome tool\\iconimagesmask.bmp"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x274 [0044.693] GetFileType (hFile=0x274) returned 0x1 [0044.693] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e51c) returned 1 [0044.693] GetFileType (hFile=0x274) returned 0x1 [0044.693] GetFileSize (in: hFile=0x274, lpFileSizeHigh=0x31e628 | out: lpFileSizeHigh=0x31e628*=0x0) returned 0xa38 [0044.694] ReadFile (in: hFile=0x274, lpBuffer=0x267fab8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x31e5d4, lpOverlapped=0x0 | out: lpBuffer=0x267fab8*, lpNumberOfBytesRead=0x31e5d4*=0xa38, lpOverlapped=0x0) returned 1 [0044.696] CloseHandle (hObject=0x274) returned 1 [0044.709] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\Welcome Tool\\IconImagesMask.bmp", nBufferLength=0x105, lpBuffer=0x31e018, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\Welcome Tool\\IconImagesMask.bmp", lpFilePart=0x0) returned 0x65 [0044.709] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e50c) returned 1 [0044.709] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\Welcome Tool\\IconImagesMask.bmp" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\welcome tool\\iconimagesmask.bmp"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x274 [0044.710] GetFileType (hFile=0x274) returned 0x1 [0044.710] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e508) returned 1 [0044.710] GetFileType (hFile=0x274) returned 0x1 [0044.710] WriteFile (in: hFile=0x274, lpBuffer=0x26d0eb4*, nNumberOfBytesToWrite=0xa40, lpNumberOfBytesWritten=0x31e59c, lpOverlapped=0x0 | out: lpBuffer=0x26d0eb4*, lpNumberOfBytesWritten=0x31e59c*=0xa40, lpOverlapped=0x0) returned 1 [0044.711] CloseHandle (hObject=0x274) returned 1 [0044.712] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\Welcome Tool\\IconImagesMask.bmp", nBufferLength=0x105, lpBuffer=0x31e14c, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\Welcome Tool\\IconImagesMask.bmp", lpFilePart=0x0) returned 0x65 [0044.712] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\Welcome Tool\\IconImagesMask.bmp", nBufferLength=0x105, lpBuffer=0x31e14c, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\Welcome Tool\\IconImagesMask.bmp", lpFilePart=0x0) returned 0x65 [0044.712] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e5ac) returned 1 [0044.712] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\Welcome Tool\\IconImagesMask.bmp" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\welcome tool\\iconimagesmask.bmp"), fInfoLevelId=0x0, lpFileInformation=0x31e628 | out: lpFileInformation=0x31e628*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xbcdf0400, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0x53907610, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xfe1b29c0, ftLastWriteTime.dwHighDateTime=0x1d6eb7e, nFileSizeHigh=0x0, nFileSizeLow=0xa40)) returned 1 [0044.712] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e5a8) returned 1 [0044.712] MoveFileW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\Welcome Tool\\IconImagesMask.bmp" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\welcome tool\\iconimagesmask.bmp"), lpNewFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\Welcome Tool\\IconImagesMask.bmp" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\welcome tool\\iconimagesmask.bmp")) returned 1 [0044.712] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e744) returned 1 [0044.712] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolIcons", nBufferLength=0x105, lpBuffer=0x31e24c, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolIcons", lpFilePart=0x0) returned 0x3b [0044.712] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolIcons\\", nBufferLength=0x105, lpBuffer=0x31e220, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolIcons\\", lpFilePart=0x0) returned 0x3c [0044.712] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolIcons\\*", lpFindFileData=0x31e46c | out: lpFindFileData=0x31e46c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x52a4cdf0, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x709f1ef0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x709f1ef0, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x381dc0 [0044.715] FindNextFileW (in: hFindFile=0x381dc0, lpFindFileData=0x31e47c | out: lpFindFileData=0x31e47c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x52a4cdf0, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x709f1ef0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x709f1ef0, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0044.716] FindNextFileW (in: hFindFile=0x381dc0, lpFindFileData=0x31e47c | out: lpFindFileData=0x31e47c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xbcdf0400, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0x5eb686b0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xbcdf0400, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0xa2e, dwReserved0=0x0, dwReserved1=0x0, cFileName="ALERT.ICO", cAlternateFileName="")) returned 1 [0044.716] FindNextFileW (in: hFindFile=0x381dc0, lpFindFileData=0x31e47c | out: lpFindFileData=0x31e47c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xbcdf0400, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0x60382570, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xbcdf0400, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0xb2e, dwReserved0=0x0, dwReserved1=0x0, cFileName="CHEVRON.ICO", cAlternateFileName="")) returned 1 [0044.716] FindNextFileW (in: hFindFile=0x381dc0, lpFindFileData=0x31e47c | out: lpFindFileData=0x31e47c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xbcdf0400, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0x60440c50, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xbcdf0400, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0xa2e, dwReserved0=0x0, dwReserved1=0x0, cFileName="COMPUTER.ICO", cAlternateFileName="")) returned 1 [0044.716] FindNextFileW (in: hFindFile=0x381dc0, lpFindFileData=0x31e47c | out: lpFindFileData=0x31e47c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xbcdf0400, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0x604b3070, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xbcdf0400, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0xea6, dwReserved0=0x0, dwReserved1=0x0, cFileName="ContactSelector.ico", cAlternateFileName="CONTAC~1.ICO")) returned 1 [0044.716] FindNextFileW (in: hFindFile=0x381dc0, lpFindFileData=0x31e47c | out: lpFindFileData=0x31e47c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7e764200, ftCreationTime.dwHighDateTime=0x1c9ff6c, ftLastAccessTime.dwLowDateTime=0x52a4cdf0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x7e764200, ftLastWriteTime.dwHighDateTime=0x1c9ff6c, nFileSizeHigh=0x0, nFileSizeLow=0x6b6, dwReserved0=0x0, dwReserved1=0x0, cFileName="gfserrorfromgroove.ico", cAlternateFileName="GFSERR~1.ICO")) returned 1 [0044.716] FindNextFileW (in: hFindFile=0x381dc0, lpFindFileData=0x31e47c | out: lpFindFileData=0x31e47c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x78806100, ftCreationTime.dwHighDateTime=0x1c9ff6c, ftLastAccessTime.dwLowDateTime=0x52a4cdf0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x78806100, ftLastWriteTime.dwHighDateTime=0x1c9ff6c, nFileSizeHigh=0x0, nFileSizeLow=0x6b6, dwReserved0=0x0, dwReserved1=0x0, cFileName="gfserrortogroove.ico", cAlternateFileName="GFSERR~2.ICO")) returned 1 [0044.716] FindNextFileW (in: hFindFile=0x381dc0, lpFindFileData=0x31e47c | out: lpFindFileData=0x31e47c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xddee4300, ftCreationTime.dwHighDateTime=0x1c9dff9, ftLastAccessTime.dwLowDateTime=0x537fcc70, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xddee4300, ftLastWriteTime.dwHighDateTime=0x1c9dff9, nFileSizeHigh=0x0, nFileSizeLow=0x294dd, dwReserved0=0x0, dwReserved1=0x0, cFileName="GWE.ICO", cAlternateFileName="")) returned 1 [0044.716] FindNextFileW (in: hFindFile=0x381dc0, lpFindFileData=0x31e47c | out: lpFindFileData=0x31e47c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xbe103100, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0x5392d770, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xbe103100, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0x6b6, dwReserved0=0x0, dwReserved1=0x0, cFileName="INCOMING.ICO", cAlternateFileName="")) returned 1 [0044.717] FindNextFileW (in: hFindFile=0x381dc0, lpFindFileData=0x31e47c | out: lpFindFileData=0x31e47c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xbe103100, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0x5392d770, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xbe103100, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0x13e, dwReserved0=0x0, dwReserved1=0x0, cFileName="INDOMAIN.ICO", cAlternateFileName="")) returned 1 [0044.717] FindNextFileW (in: hFindFile=0x381dc0, lpFindFileData=0x31e47c | out: lpFindFileData=0x31e47c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xbf415e00, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0x582abeb0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xbf415e00, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0xa2e, dwReserved0=0x0, dwReserved1=0x0, cFileName="MAIL.ICO", cAlternateFileName="")) returned 1 [0044.717] FindNextFileW (in: hFindFile=0x381dc0, lpFindFileData=0x31e47c | out: lpFindFileData=0x31e47c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xbf415e00, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0x582d2010, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xbf415e00, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0x13e, dwReserved0=0x0, dwReserved1=0x0, cFileName="MANUAL.ICO", cAlternateFileName="")) returned 1 [0044.717] FindNextFileW (in: hFindFile=0x381dc0, lpFindFileData=0x31e47c | out: lpFindFileData=0x31e47c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xbf415e00, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0x69a5d7b0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xbf415e00, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0xb2e, dwReserved0=0x0, dwReserved1=0x0, cFileName="messageboxalert.ico", cAlternateFileName="MESSAG~2.ICO")) returned 1 [0044.717] FindNextFileW (in: hFindFile=0x381dc0, lpFindFileData=0x31e47c | out: lpFindFileData=0x31e47c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xbf415e00, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0x583906f0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xbf415e00, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0xb2e, dwReserved0=0x0, dwReserved1=0x0, cFileName="messageboxerror.ico", cAlternateFileName="MESSAG~1.ICO")) returned 1 [0044.717] FindNextFileW (in: hFindFile=0x381dc0, lpFindFileData=0x31e47c | out: lpFindFileData=0x31e47c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xbf415e00, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0x69a5d7b0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xbf415e00, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0xb2e, dwReserved0=0x0, dwReserved1=0x0, cFileName="messageboxinfo.ico", cAlternateFileName="MESSAG~3.ICO")) returned 1 [0044.717] FindNextFileW (in: hFindFile=0x381dc0, lpFindFileData=0x31e47c | out: lpFindFileData=0x31e47c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1608e400, ftCreationTime.dwHighDateTime=0x1ca03f6, ftLastAccessTime.dwLowDateTime=0x58b00bb0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x1608e400, ftLastWriteTime.dwHighDateTime=0x1ca03f6, nFileSizeHigh=0x0, nFileSizeLow=0x9f6, dwReserved0=0x0, dwReserved1=0x0, cFileName="ModifiedTelespace.ico", cAlternateFileName="MODIFI~1.ICO")) returned 1 [0044.717] FindNextFileW (in: hFindFile=0x381dc0, lpFindFileData=0x31e47c | out: lpFindFileData=0x31e47c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xbf415e00, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0x596e79b0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xbf415e00, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0xd6e, dwReserved0=0x0, dwReserved1=0x0, cFileName="OFFLINE.ICO", cAlternateFileName="")) returned 1 [0044.717] FindNextFileW (in: hFindFile=0x381dc0, lpFindFileData=0x31e47c | out: lpFindFileData=0x31e47c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xbf415e00, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0x597f2350, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xbf415e00, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0xd6e, dwReserved0=0x0, dwReserved1=0x0, cFileName="ONLINE.ICO", cAlternateFileName="")) returned 1 [0044.718] FindNextFileW (in: hFindFile=0x381dc0, lpFindFileData=0x31e47c | out: lpFindFileData=0x31e47c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xbf415e00, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0x6bf68e10, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xbf415e00, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0xd6e, dwReserved0=0x0, dwReserved1=0x0, cFileName="OnLineBusy.ico", cAlternateFileName="ONLINE~2.ICO")) returned 1 [0044.718] FindNextFileW (in: hFindFile=0x381dc0, lpFindFileData=0x31e47c | out: lpFindFileData=0x31e47c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc0728b00, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0x597f2350, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xc0728b00, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0xd6e, dwReserved0=0x0, dwReserved1=0x0, cFileName="OnLineIdle.ico", cAlternateFileName="ONLINE~1.ICO")) returned 1 [0044.718] FindNextFileW (in: hFindFile=0x381dc0, lpFindFileData=0x31e47c | out: lpFindFileData=0x31e47c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc0728b00, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0x59995270, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xc0728b00, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0x13e, dwReserved0=0x0, dwReserved1=0x0, cFileName="OutDomain.ico", cAlternateFileName="OUTDOM~1.ICO")) returned 1 [0044.718] FindNextFileW (in: hFindFile=0x381dc0, lpFindFileData=0x31e47c | out: lpFindFileData=0x31e47c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc0728b00, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0x6c23c830, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xc0728b00, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0x6b6, dwReserved0=0x0, dwReserved1=0x0, cFileName="OUTGOING.ICO", cAlternateFileName="")) returned 1 [0044.718] FindNextFileW (in: hFindFile=0x381dc0, lpFindFileData=0x31e47c | out: lpFindFileData=0x31e47c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc0728b00, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0x6cd3edf0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xc0728b00, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0x13e, dwReserved0=0x0, dwReserved1=0x0, cFileName="OutSyncPC.ico", cAlternateFileName="OUTSYN~1.ICO")) returned 1 [0044.718] FindNextFileW (in: hFindFile=0x381dc0, lpFindFileData=0x31e47c | out: lpFindFileData=0x31e47c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc0728b00, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0x6cdd7370, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xc0728b00, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0x6b6, dwReserved0=0x0, dwReserved1=0x0, cFileName="PersonalContact.ico", cAlternateFileName="PERSON~1.ICO")) returned 1 [0044.718] FindNextFileW (in: hFindFile=0x381dc0, lpFindFileData=0x31e47c | out: lpFindFileData=0x31e47c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc1a3b800, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0x5a95a430, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xc1a3b800, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0xb2e, dwReserved0=0x0, dwReserved1=0x0, cFileName="SessionMember.ico", cAlternateFileName="SESSIO~1.ICO")) returned 1 [0044.718] FindNextFileW (in: hFindFile=0x381dc0, lpFindFileData=0x31e47c | out: lpFindFileData=0x31e47c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc1a3b800, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0x6d299f70, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xc1a3b800, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0x9f6, dwReserved0=0x0, dwReserved1=0x0, cFileName="SessionOwner.ico", cAlternateFileName="SESSIO~2.ICO")) returned 1 [0044.718] FindNextFileW (in: hFindFile=0x381dc0, lpFindFileData=0x31e47c | out: lpFindFileData=0x31e47c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc1a3b800, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0x6d3a4910, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xc1a3b800, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0xb2e, dwReserved0=0x0, dwReserved1=0x0, cFileName="SpaceSelector.ico", cAlternateFileName="SPACES~1.ICO")) returned 1 [0044.719] FindNextFileW (in: hFindFile=0x381dc0, lpFindFileData=0x31e47c | out: lpFindFileData=0x31e47c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc1a3b800, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0x6d3caa70, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xc1a3b800, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0xb2e, dwReserved0=0x0, dwReserved1=0x0, cFileName="StatusAway.ico", cAlternateFileName="STATUS~1.ICO")) returned 1 [0044.719] FindNextFileW (in: hFindFile=0x381dc0, lpFindFileData=0x31e47c | out: lpFindFileData=0x31e47c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc1a3b800, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0x6d3caa70, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xc1a3b800, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0xb2e, dwReserved0=0x0, dwReserved1=0x0, cFileName="StatusDoNotDisturb.ico", cAlternateFileName="STATUS~2.ICO")) returned 1 [0044.719] FindNextFileW (in: hFindFile=0x381dc0, lpFindFileData=0x31e47c | out: lpFindFileData=0x31e47c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc1a3b800, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0x6d3caa70, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xc1a3b800, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0xb2e, dwReserved0=0x0, dwReserved1=0x0, cFileName="StatusOnline.ico", cAlternateFileName="STATUS~3.ICO")) returned 1 [0044.719] FindNextFileW (in: hFindFile=0x381dc0, lpFindFileData=0x31e47c | out: lpFindFileData=0x31e47c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc1a3b800, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0x5ae8f450, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xc1a3b800, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0x2796, dwReserved0=0x0, dwReserved1=0x0, cFileName="TOOLICON.ICO", cAlternateFileName="")) returned 1 [0044.719] FindNextFileW (in: hFindFile=0x381dc0, lpFindFileData=0x31e47c | out: lpFindFileData=0x31e47c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc2d4e500, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0x5e633690, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xc2d4e500, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0x2366, dwReserved0=0x0, dwReserved1=0x0, cFileName="WSS.ICO", cAlternateFileName="")) returned 1 [0044.719] FindNextFileW (in: hFindFile=0x381dc0, lpFindFileData=0x31e47c | out: lpFindFileData=0x31e47c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x430b200, ftCreationTime.dwHighDateTime=0x1c9d442, ftLastAccessTime.dwLowDateTime=0x709f1ef0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x430b200, ftLastWriteTime.dwHighDateTime=0x1c9d442, nFileSizeHigh=0x0, nFileSizeLow=0xb2e, dwReserved0=0x0, dwReserved1=0x0, cFileName="WSS_DocLib.ico", cAlternateFileName="WSS_DO~1.ICO")) returned 1 [0044.719] FindNextFileW (in: hFindFile=0x381dc0, lpFindFileData=0x31e47c | out: lpFindFileData=0x31e47c*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0044.719] FindClose (in: hFindFile=0x381dc0 | out: hFindFile=0x381dc0) returned 1 [0044.720] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e704) returned 1 [0044.720] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e710) returned 1 [0044.720] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e744) returned 1 [0044.720] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolIcons", nBufferLength=0x105, lpBuffer=0x31e24c, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolIcons", lpFilePart=0x0) returned 0x3b [0044.720] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolIcons\\", nBufferLength=0x105, lpBuffer=0x31e220, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolIcons\\", lpFilePart=0x0) returned 0x3c [0044.720] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolIcons\\*", lpFindFileData=0x31e46c | out: lpFindFileData=0x31e46c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x52a4cdf0, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x709f1ef0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x709f1ef0, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x381dc0 [0044.721] FindNextFileW (in: hFindFile=0x381dc0, lpFindFileData=0x31e47c | out: lpFindFileData=0x31e47c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x52a4cdf0, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x709f1ef0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x709f1ef0, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0044.721] FindNextFileW (in: hFindFile=0x381dc0, lpFindFileData=0x31e47c | out: lpFindFileData=0x31e47c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xbcdf0400, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0x5eb686b0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xbcdf0400, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0xa2e, dwReserved0=0x0, dwReserved1=0x0, cFileName="ALERT.ICO", cAlternateFileName="")) returned 1 [0044.721] FindNextFileW (in: hFindFile=0x381dc0, lpFindFileData=0x31e47c | out: lpFindFileData=0x31e47c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xbcdf0400, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0x60382570, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xbcdf0400, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0xb2e, dwReserved0=0x0, dwReserved1=0x0, cFileName="CHEVRON.ICO", cAlternateFileName="")) returned 1 [0044.721] FindNextFileW (in: hFindFile=0x381dc0, lpFindFileData=0x31e47c | out: lpFindFileData=0x31e47c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xbcdf0400, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0x60440c50, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xbcdf0400, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0xa2e, dwReserved0=0x0, dwReserved1=0x0, cFileName="COMPUTER.ICO", cAlternateFileName="")) returned 1 [0044.722] FindNextFileW (in: hFindFile=0x381dc0, lpFindFileData=0x31e47c | out: lpFindFileData=0x31e47c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xbcdf0400, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0x604b3070, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xbcdf0400, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0xea6, dwReserved0=0x0, dwReserved1=0x0, cFileName="ContactSelector.ico", cAlternateFileName="CONTAC~1.ICO")) returned 1 [0044.722] FindNextFileW (in: hFindFile=0x381dc0, lpFindFileData=0x31e47c | out: lpFindFileData=0x31e47c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7e764200, ftCreationTime.dwHighDateTime=0x1c9ff6c, ftLastAccessTime.dwLowDateTime=0x52a4cdf0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x7e764200, ftLastWriteTime.dwHighDateTime=0x1c9ff6c, nFileSizeHigh=0x0, nFileSizeLow=0x6b6, dwReserved0=0x0, dwReserved1=0x0, cFileName="gfserrorfromgroove.ico", cAlternateFileName="GFSERR~1.ICO")) returned 1 [0044.722] FindNextFileW (in: hFindFile=0x381dc0, lpFindFileData=0x31e47c | out: lpFindFileData=0x31e47c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x78806100, ftCreationTime.dwHighDateTime=0x1c9ff6c, ftLastAccessTime.dwLowDateTime=0x52a4cdf0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x78806100, ftLastWriteTime.dwHighDateTime=0x1c9ff6c, nFileSizeHigh=0x0, nFileSizeLow=0x6b6, dwReserved0=0x0, dwReserved1=0x0, cFileName="gfserrortogroove.ico", cAlternateFileName="GFSERR~2.ICO")) returned 1 [0044.722] FindNextFileW (in: hFindFile=0x381dc0, lpFindFileData=0x31e47c | out: lpFindFileData=0x31e47c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xddee4300, ftCreationTime.dwHighDateTime=0x1c9dff9, ftLastAccessTime.dwLowDateTime=0x537fcc70, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xddee4300, ftLastWriteTime.dwHighDateTime=0x1c9dff9, nFileSizeHigh=0x0, nFileSizeLow=0x294dd, dwReserved0=0x0, dwReserved1=0x0, cFileName="GWE.ICO", cAlternateFileName="")) returned 1 [0044.722] FindNextFileW (in: hFindFile=0x381dc0, lpFindFileData=0x31e47c | out: lpFindFileData=0x31e47c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xbe103100, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0x5392d770, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xbe103100, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0x6b6, dwReserved0=0x0, dwReserved1=0x0, cFileName="INCOMING.ICO", cAlternateFileName="")) returned 1 [0044.722] FindNextFileW (in: hFindFile=0x381dc0, lpFindFileData=0x31e47c | out: lpFindFileData=0x31e47c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xbe103100, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0x5392d770, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xbe103100, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0x13e, dwReserved0=0x0, dwReserved1=0x0, cFileName="INDOMAIN.ICO", cAlternateFileName="")) returned 1 [0044.723] FindNextFileW (in: hFindFile=0x381dc0, lpFindFileData=0x31e47c | out: lpFindFileData=0x31e47c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xbf415e00, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0x582abeb0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xbf415e00, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0xa2e, dwReserved0=0x0, dwReserved1=0x0, cFileName="MAIL.ICO", cAlternateFileName="")) returned 1 [0044.723] FindNextFileW (in: hFindFile=0x381dc0, lpFindFileData=0x31e47c | out: lpFindFileData=0x31e47c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xbf415e00, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0x582d2010, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xbf415e00, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0x13e, dwReserved0=0x0, dwReserved1=0x0, cFileName="MANUAL.ICO", cAlternateFileName="")) returned 1 [0044.723] FindNextFileW (in: hFindFile=0x381dc0, lpFindFileData=0x31e47c | out: lpFindFileData=0x31e47c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xbf415e00, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0x69a5d7b0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xbf415e00, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0xb2e, dwReserved0=0x0, dwReserved1=0x0, cFileName="messageboxalert.ico", cAlternateFileName="MESSAG~2.ICO")) returned 1 [0044.723] FindNextFileW (in: hFindFile=0x381dc0, lpFindFileData=0x31e47c | out: lpFindFileData=0x31e47c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xbf415e00, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0x583906f0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xbf415e00, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0xb2e, dwReserved0=0x0, dwReserved1=0x0, cFileName="messageboxerror.ico", cAlternateFileName="MESSAG~1.ICO")) returned 1 [0044.723] FindNextFileW (in: hFindFile=0x381dc0, lpFindFileData=0x31e47c | out: lpFindFileData=0x31e47c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xbf415e00, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0x69a5d7b0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xbf415e00, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0xb2e, dwReserved0=0x0, dwReserved1=0x0, cFileName="messageboxinfo.ico", cAlternateFileName="MESSAG~3.ICO")) returned 1 [0044.723] FindNextFileW (in: hFindFile=0x381dc0, lpFindFileData=0x31e47c | out: lpFindFileData=0x31e47c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1608e400, ftCreationTime.dwHighDateTime=0x1ca03f6, ftLastAccessTime.dwLowDateTime=0x58b00bb0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x1608e400, ftLastWriteTime.dwHighDateTime=0x1ca03f6, nFileSizeHigh=0x0, nFileSizeLow=0x9f6, dwReserved0=0x0, dwReserved1=0x0, cFileName="ModifiedTelespace.ico", cAlternateFileName="MODIFI~1.ICO")) returned 1 [0044.723] FindNextFileW (in: hFindFile=0x381dc0, lpFindFileData=0x31e47c | out: lpFindFileData=0x31e47c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xbf415e00, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0x596e79b0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xbf415e00, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0xd6e, dwReserved0=0x0, dwReserved1=0x0, cFileName="OFFLINE.ICO", cAlternateFileName="")) returned 1 [0044.724] FindNextFileW (in: hFindFile=0x381dc0, lpFindFileData=0x31e47c | out: lpFindFileData=0x31e47c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xbf415e00, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0x597f2350, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xbf415e00, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0xd6e, dwReserved0=0x0, dwReserved1=0x0, cFileName="ONLINE.ICO", cAlternateFileName="")) returned 1 [0044.724] FindNextFileW (in: hFindFile=0x381dc0, lpFindFileData=0x31e47c | out: lpFindFileData=0x31e47c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xbf415e00, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0x6bf68e10, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xbf415e00, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0xd6e, dwReserved0=0x0, dwReserved1=0x0, cFileName="OnLineBusy.ico", cAlternateFileName="ONLINE~2.ICO")) returned 1 [0044.724] FindNextFileW (in: hFindFile=0x381dc0, lpFindFileData=0x31e47c | out: lpFindFileData=0x31e47c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc0728b00, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0x597f2350, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xc0728b00, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0xd6e, dwReserved0=0x0, dwReserved1=0x0, cFileName="OnLineIdle.ico", cAlternateFileName="ONLINE~1.ICO")) returned 1 [0044.724] FindNextFileW (in: hFindFile=0x381dc0, lpFindFileData=0x31e47c | out: lpFindFileData=0x31e47c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc0728b00, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0x59995270, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xc0728b00, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0x13e, dwReserved0=0x0, dwReserved1=0x0, cFileName="OutDomain.ico", cAlternateFileName="OUTDOM~1.ICO")) returned 1 [0044.724] FindNextFileW (in: hFindFile=0x381dc0, lpFindFileData=0x31e47c | out: lpFindFileData=0x31e47c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc0728b00, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0x6c23c830, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xc0728b00, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0x6b6, dwReserved0=0x0, dwReserved1=0x0, cFileName="OUTGOING.ICO", cAlternateFileName="")) returned 1 [0044.724] FindNextFileW (in: hFindFile=0x381dc0, lpFindFileData=0x31e47c | out: lpFindFileData=0x31e47c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc0728b00, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0x6cd3edf0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xc0728b00, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0x13e, dwReserved0=0x0, dwReserved1=0x0, cFileName="OutSyncPC.ico", cAlternateFileName="OUTSYN~1.ICO")) returned 1 [0044.724] FindNextFileW (in: hFindFile=0x381dc0, lpFindFileData=0x31e47c | out: lpFindFileData=0x31e47c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc0728b00, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0x6cdd7370, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xc0728b00, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0x6b6, dwReserved0=0x0, dwReserved1=0x0, cFileName="PersonalContact.ico", cAlternateFileName="PERSON~1.ICO")) returned 1 [0044.725] FindNextFileW (in: hFindFile=0x381dc0, lpFindFileData=0x31e47c | out: lpFindFileData=0x31e47c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc1a3b800, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0x5a95a430, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xc1a3b800, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0xb2e, dwReserved0=0x0, dwReserved1=0x0, cFileName="SessionMember.ico", cAlternateFileName="SESSIO~1.ICO")) returned 1 [0044.725] FindNextFileW (in: hFindFile=0x381dc0, lpFindFileData=0x31e47c | out: lpFindFileData=0x31e47c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc1a3b800, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0x6d299f70, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xc1a3b800, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0x9f6, dwReserved0=0x0, dwReserved1=0x0, cFileName="SessionOwner.ico", cAlternateFileName="SESSIO~2.ICO")) returned 1 [0044.725] FindNextFileW (in: hFindFile=0x381dc0, lpFindFileData=0x31e47c | out: lpFindFileData=0x31e47c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc1a3b800, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0x6d3a4910, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xc1a3b800, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0xb2e, dwReserved0=0x0, dwReserved1=0x0, cFileName="SpaceSelector.ico", cAlternateFileName="SPACES~1.ICO")) returned 1 [0044.725] FindNextFileW (in: hFindFile=0x381dc0, lpFindFileData=0x31e47c | out: lpFindFileData=0x31e47c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc1a3b800, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0x6d3caa70, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xc1a3b800, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0xb2e, dwReserved0=0x0, dwReserved1=0x0, cFileName="StatusAway.ico", cAlternateFileName="STATUS~1.ICO")) returned 1 [0044.725] FindNextFileW (in: hFindFile=0x381dc0, lpFindFileData=0x31e47c | out: lpFindFileData=0x31e47c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc1a3b800, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0x6d3caa70, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xc1a3b800, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0xb2e, dwReserved0=0x0, dwReserved1=0x0, cFileName="StatusDoNotDisturb.ico", cAlternateFileName="STATUS~2.ICO")) returned 1 [0044.725] FindNextFileW (in: hFindFile=0x381dc0, lpFindFileData=0x31e47c | out: lpFindFileData=0x31e47c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc1a3b800, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0x6d3caa70, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xc1a3b800, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0xb2e, dwReserved0=0x0, dwReserved1=0x0, cFileName="StatusOnline.ico", cAlternateFileName="STATUS~3.ICO")) returned 1 [0044.726] FindNextFileW (in: hFindFile=0x381dc0, lpFindFileData=0x31e47c | out: lpFindFileData=0x31e47c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc1a3b800, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0x5ae8f450, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xc1a3b800, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0x2796, dwReserved0=0x0, dwReserved1=0x0, cFileName="TOOLICON.ICO", cAlternateFileName="")) returned 1 [0044.726] FindNextFileW (in: hFindFile=0x381dc0, lpFindFileData=0x31e47c | out: lpFindFileData=0x31e47c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc2d4e500, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0x5e633690, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xc2d4e500, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0x2366, dwReserved0=0x0, dwReserved1=0x0, cFileName="WSS.ICO", cAlternateFileName="")) returned 1 [0044.726] FindNextFileW (in: hFindFile=0x381dc0, lpFindFileData=0x31e47c | out: lpFindFileData=0x31e47c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x430b200, ftCreationTime.dwHighDateTime=0x1c9d442, ftLastAccessTime.dwLowDateTime=0x709f1ef0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x430b200, ftLastWriteTime.dwHighDateTime=0x1c9d442, nFileSizeHigh=0x0, nFileSizeLow=0xb2e, dwReserved0=0x0, dwReserved1=0x0, cFileName="WSS_DocLib.ico", cAlternateFileName="WSS_DO~1.ICO")) returned 1 [0044.726] FindNextFileW (in: hFindFile=0x381dc0, lpFindFileData=0x31e47c | out: lpFindFileData=0x31e47c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x430b200, ftCreationTime.dwHighDateTime=0x1c9d442, ftLastAccessTime.dwLowDateTime=0x709f1ef0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x430b200, ftLastWriteTime.dwHighDateTime=0x1c9d442, nFileSizeHigh=0x0, nFileSizeLow=0xb2e, dwReserved0=0x0, dwReserved1=0x0, cFileName="WSS_DocLib.ico", cAlternateFileName="WSS_DO~1.ICO")) returned 0 [0044.726] FindClose (in: hFindFile=0x381dc0 | out: hFindFile=0x381dc0) returned 1 [0044.727] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e704) returned 1 [0044.727] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e710) returned 1 [0044.727] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e744) returned 1 [0044.727] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\XML Files", nBufferLength=0x105, lpBuffer=0x31e24c, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\XML Files", lpFilePart=0x0) returned 0x3b [0044.727] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\XML Files\\", nBufferLength=0x105, lpBuffer=0x31e220, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\XML Files\\", lpFilePart=0x0) returned 0x3c [0044.727] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\XML Files\\*", lpFindFileData=0x31e46c | out: lpFindFileData=0x31e46c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x50e7acd0, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x6d3caa70, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x6d3caa70, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x381dc0 [0044.729] FindNextFileW (in: hFindFile=0x381dc0, lpFindFileData=0x31e47c | out: lpFindFileData=0x31e47c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x50e7acd0, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x6d3caa70, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x6d3caa70, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0044.729] FindNextFileW (in: hFindFile=0x381dc0, lpFindFileData=0x31e47c | out: lpFindFileData=0x31e47c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd279da00, ftCreationTime.dwHighDateTime=0x1c8a0cd, ftLastAccessTime.dwLowDateTime=0x600aeb50, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xd279da00, ftLastWriteTime.dwHighDateTime=0x1c8a0cd, nFileSizeHigh=0x0, nFileSizeLow=0x487, dwReserved0=0x0, dwReserved1=0x0, cFileName="builtincontrolsschema.xsd", cAlternateFileName="BUILTI~1.XSD")) returned 1 [0044.729] FindNextFileW (in: hFindFile=0x381dc0, lpFindFileData=0x31e47c | out: lpFindFileData=0x31e47c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd279da00, ftCreationTime.dwHighDateTime=0x1c8a0cd, ftLastAccessTime.dwLowDateTime=0x537646f0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xd279da00, ftLastWriteTime.dwHighDateTime=0x1c8a0cd, nFileSizeHigh=0x0, nFileSizeLow=0x5d5, dwReserved0=0x0, dwReserved1=0x0, cFileName="grvschema.xsd", cAlternateFileName="GRVSCH~1.XSD")) returned 1 [0044.729] FindNextFileW (in: hFindFile=0x381dc0, lpFindFileData=0x31e47c | out: lpFindFileData=0x31e47c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc2d4e500, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0x69a5d7b0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xc2d4e500, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0x14a, dwReserved0=0x0, dwReserved1=0x0, cFileName="Messenger.xml", cAlternateFileName="MESSEN~1.XML")) returned 1 [0044.729] FindNextFileW (in: hFindFile=0x381dc0, lpFindFileData=0x31e47c | out: lpFindFileData=0x31e47c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x50e7acd0, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x50e7acd0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x50e7acd0, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Space Templates", cAlternateFileName="SPACET~1")) returned 1 [0044.730] FindNextFileW (in: hFindFile=0x381dc0, lpFindFileData=0x31e47c | out: lpFindFileData=0x31e47c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1a42b900, ftCreationTime.dwHighDateTime=0x1c9d747, ftLastAccessTime.dwLowDateTime=0x5abbba30, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x1a42b900, ftLastWriteTime.dwHighDateTime=0x1c9d747, nFileSizeHigh=0x0, nFileSizeLow=0x17e2d, dwReserved0=0x0, dwReserved1=0x0, cFileName="StarterApplicationDescriptors.xml", cAlternateFileName="STARTE~1.XML")) returned 1 [0044.730] FindNextFileW (in: hFindFile=0x381dc0, lpFindFileData=0x31e47c | out: lpFindFileData=0x31e47c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc4061200, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0x6d3caa70, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xc4061200, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0x1b875, dwReserved0=0x0, dwReserved1=0x0, cFileName="StarterNotificationDescriptors.xml", cAlternateFileName="STARTE~3.XML")) returned 1 [0044.730] FindNextFileW (in: hFindFile=0x381dc0, lpFindFileData=0x31e47c | out: lpFindFileData=0x31e47c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x22545300, ftCreationTime.dwHighDateTime=0x1c9a48f, ftLastAccessTime.dwLowDateTime=0x5abe1b90, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x22545300, ftLastWriteTime.dwHighDateTime=0x1c9a48f, nFileSizeHigh=0x0, nFileSizeLow=0x1a553, dwReserved0=0x0, dwReserved1=0x0, cFileName="StarterToolTemplates.xml", cAlternateFileName="STARTE~2.XML")) returned 1 [0044.730] FindNextFileW (in: hFindFile=0x381dc0, lpFindFileData=0x31e47c | out: lpFindFileData=0x31e47c*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0044.730] FindClose (in: hFindFile=0x381dc0 | out: hFindFile=0x381dc0) returned 1 [0044.731] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e704) returned 1 [0044.731] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e710) returned 1 [0044.731] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e744) returned 1 [0044.731] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\XML Files", nBufferLength=0x105, lpBuffer=0x31e24c, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\XML Files", lpFilePart=0x0) returned 0x3b [0044.731] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\XML Files\\", nBufferLength=0x105, lpBuffer=0x31e220, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\XML Files\\", lpFilePart=0x0) returned 0x3c [0044.731] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\XML Files\\*", lpFindFileData=0x31e46c | out: lpFindFileData=0x31e46c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x50e7acd0, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x6d3caa70, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x6d3caa70, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x381dc0 [0044.732] FindNextFileW (in: hFindFile=0x381dc0, lpFindFileData=0x31e47c | out: lpFindFileData=0x31e47c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x50e7acd0, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x6d3caa70, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x6d3caa70, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0044.732] FindNextFileW (in: hFindFile=0x381dc0, lpFindFileData=0x31e47c | out: lpFindFileData=0x31e47c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd279da00, ftCreationTime.dwHighDateTime=0x1c8a0cd, ftLastAccessTime.dwLowDateTime=0x600aeb50, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xd279da00, ftLastWriteTime.dwHighDateTime=0x1c8a0cd, nFileSizeHigh=0x0, nFileSizeLow=0x487, dwReserved0=0x0, dwReserved1=0x0, cFileName="builtincontrolsschema.xsd", cAlternateFileName="BUILTI~1.XSD")) returned 1 [0044.732] FindNextFileW (in: hFindFile=0x381dc0, lpFindFileData=0x31e47c | out: lpFindFileData=0x31e47c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd279da00, ftCreationTime.dwHighDateTime=0x1c8a0cd, ftLastAccessTime.dwLowDateTime=0x537646f0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xd279da00, ftLastWriteTime.dwHighDateTime=0x1c8a0cd, nFileSizeHigh=0x0, nFileSizeLow=0x5d5, dwReserved0=0x0, dwReserved1=0x0, cFileName="grvschema.xsd", cAlternateFileName="GRVSCH~1.XSD")) returned 1 [0044.732] FindNextFileW (in: hFindFile=0x381dc0, lpFindFileData=0x31e47c | out: lpFindFileData=0x31e47c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc2d4e500, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0x69a5d7b0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xc2d4e500, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0x14a, dwReserved0=0x0, dwReserved1=0x0, cFileName="Messenger.xml", cAlternateFileName="MESSEN~1.XML")) returned 1 [0044.732] FindNextFileW (in: hFindFile=0x381dc0, lpFindFileData=0x31e47c | out: lpFindFileData=0x31e47c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x50e7acd0, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x50e7acd0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x50e7acd0, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Space Templates", cAlternateFileName="SPACET~1")) returned 1 [0044.733] FindNextFileW (in: hFindFile=0x381dc0, lpFindFileData=0x31e47c | out: lpFindFileData=0x31e47c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1a42b900, ftCreationTime.dwHighDateTime=0x1c9d747, ftLastAccessTime.dwLowDateTime=0x5abbba30, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x1a42b900, ftLastWriteTime.dwHighDateTime=0x1c9d747, nFileSizeHigh=0x0, nFileSizeLow=0x17e2d, dwReserved0=0x0, dwReserved1=0x0, cFileName="StarterApplicationDescriptors.xml", cAlternateFileName="STARTE~1.XML")) returned 1 [0044.733] FindNextFileW (in: hFindFile=0x381dc0, lpFindFileData=0x31e47c | out: lpFindFileData=0x31e47c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc4061200, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0x6d3caa70, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xc4061200, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0x1b875, dwReserved0=0x0, dwReserved1=0x0, cFileName="StarterNotificationDescriptors.xml", cAlternateFileName="STARTE~3.XML")) returned 1 [0044.733] FindNextFileW (in: hFindFile=0x381dc0, lpFindFileData=0x31e47c | out: lpFindFileData=0x31e47c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x22545300, ftCreationTime.dwHighDateTime=0x1c9a48f, ftLastAccessTime.dwLowDateTime=0x5abe1b90, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x22545300, ftLastWriteTime.dwHighDateTime=0x1c9a48f, nFileSizeHigh=0x0, nFileSizeLow=0x1a553, dwReserved0=0x0, dwReserved1=0x0, cFileName="StarterToolTemplates.xml", cAlternateFileName="STARTE~2.XML")) returned 1 [0044.733] FindNextFileW (in: hFindFile=0x381dc0, lpFindFileData=0x31e47c | out: lpFindFileData=0x31e47c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x22545300, ftCreationTime.dwHighDateTime=0x1c9a48f, ftLastAccessTime.dwLowDateTime=0x5abe1b90, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x22545300, ftLastWriteTime.dwHighDateTime=0x1c9a48f, nFileSizeHigh=0x0, nFileSizeLow=0x1a553, dwReserved0=0x0, dwReserved1=0x0, cFileName="StarterToolTemplates.xml", cAlternateFileName="STARTE~2.XML")) returned 0 [0044.733] FindClose (in: hFindFile=0x381dc0 | out: hFindFile=0x381dc0) returned 1 [0044.734] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e704) returned 1 [0044.734] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e710) returned 1 [0044.734] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\XML Files\\Messenger.xml", nBufferLength=0x105, lpBuffer=0x31e11c, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\XML Files\\Messenger.xml", lpFilePart=0x0) returned 0x49 [0044.734] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e610) returned 1 [0044.734] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\XML Files\\Messenger.xml" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\xml files\\messenger.xml"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x274 [0044.735] GetFileType (hFile=0x274) returned 0x1 [0044.735] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e60c) returned 1 [0044.735] GetFileType (hFile=0x274) returned 0x1 [0044.735] GetFileSize (in: hFile=0x274, lpFileSizeHigh=0x31e718 | out: lpFileSizeHigh=0x31e718*=0x0) returned 0x14a [0044.735] ReadFile (in: hFile=0x274, lpBuffer=0x26ddb14, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x31e6c4, lpOverlapped=0x0 | out: lpBuffer=0x26ddb14*, lpNumberOfBytesRead=0x31e6c4*=0x14a, lpOverlapped=0x0) returned 1 [0044.736] CloseHandle (hObject=0x274) returned 1 [0044.749] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\XML Files\\Messenger.xml", nBufferLength=0x105, lpBuffer=0x31e108, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\XML Files\\Messenger.xml", lpFilePart=0x0) returned 0x49 [0044.749] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e5fc) returned 1 [0044.749] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\XML Files\\Messenger.xml" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\xml files\\messenger.xml"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x274 [0044.750] GetFileType (hFile=0x274) returned 0x1 [0044.750] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e5f8) returned 1 [0044.750] GetFileType (hFile=0x274) returned 0x1 [0044.750] WriteFile (in: hFile=0x274, lpBuffer=0x272c0c0*, nNumberOfBytesToWrite=0x150, lpNumberOfBytesWritten=0x31e68c, lpOverlapped=0x0 | out: lpBuffer=0x272c0c0*, lpNumberOfBytesWritten=0x31e68c*=0x150, lpOverlapped=0x0) returned 1 [0044.751] CloseHandle (hObject=0x274) returned 1 [0044.752] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\XML Files\\Messenger.xml", nBufferLength=0x105, lpBuffer=0x31e23c, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\XML Files\\Messenger.xml", lpFilePart=0x0) returned 0x49 [0044.752] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\XML Files\\Messenger.xml", nBufferLength=0x105, lpBuffer=0x31e23c, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\XML Files\\Messenger.xml", lpFilePart=0x0) returned 0x49 [0044.752] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e69c) returned 1 [0044.752] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\XML Files\\Messenger.xml" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\xml files\\messenger.xml"), fInfoLevelId=0x0, lpFileInformation=0x31e718 | out: lpFileInformation=0x31e718*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc2d4e500, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0x69a5d7b0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xfe1fec80, ftLastWriteTime.dwHighDateTime=0x1d6eb7e, nFileSizeHigh=0x0, nFileSizeLow=0x150)) returned 1 [0044.752] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e698) returned 1 [0044.752] MoveFileW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\XML Files\\Messenger.xml" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\xml files\\messenger.xml"), lpNewFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\XML Files\\Messenger.xml" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\xml files\\messenger.xml")) returned 1 [0044.753] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\XML Files\\StarterApplicationDescriptors.xml", nBufferLength=0x105, lpBuffer=0x31e11c, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\XML Files\\StarterApplicationDescriptors.xml", lpFilePart=0x0) returned 0x5d [0044.753] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e610) returned 1 [0044.753] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\XML Files\\StarterApplicationDescriptors.xml" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\xml files\\starterapplicationdescriptors.xml"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x274 [0044.754] GetFileType (hFile=0x274) returned 0x1 [0044.754] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e60c) returned 1 [0044.754] GetFileType (hFile=0x274) returned 0x1 [0044.754] GetFileSize (in: hFile=0x274, lpFileSizeHigh=0x31e718 | out: lpFileSizeHigh=0x31e718*=0x0) returned 0x17e2d [0044.754] ReadFile (in: hFile=0x274, lpBuffer=0x3825570, nNumberOfBytesToRead=0x17e2d, lpNumberOfBytesRead=0x31e6c4, lpOverlapped=0x0 | out: lpBuffer=0x3825570*, lpNumberOfBytesRead=0x31e6c4*=0x17e2d, lpOverlapped=0x0) returned 1 [0044.756] CloseHandle (hObject=0x274) returned 1 [0044.772] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\XML Files\\StarterApplicationDescriptors.xml", nBufferLength=0x105, lpBuffer=0x31e108, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\XML Files\\StarterApplicationDescriptors.xml", lpFilePart=0x0) returned 0x5d [0044.772] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e5fc) returned 1 [0044.772] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\XML Files\\StarterApplicationDescriptors.xml" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\xml files\\starterapplicationdescriptors.xml"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x274 [0044.773] GetFileType (hFile=0x274) returned 0x1 [0044.774] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e5f8) returned 1 [0044.774] GetFileType (hFile=0x274) returned 0x1 [0044.774] WriteFile (in: hFile=0x274, lpBuffer=0x389cca0*, nNumberOfBytesToWrite=0x17e30, lpNumberOfBytesWritten=0x31e6b8, lpOverlapped=0x0 | out: lpBuffer=0x389cca0*, lpNumberOfBytesWritten=0x31e6b8*=0x17e30, lpOverlapped=0x0) returned 1 [0044.776] CloseHandle (hObject=0x274) returned 1 [0044.777] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\XML Files\\StarterApplicationDescriptors.xml", nBufferLength=0x105, lpBuffer=0x31e23c, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\XML Files\\StarterApplicationDescriptors.xml", lpFilePart=0x0) returned 0x5d [0044.777] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\XML Files\\StarterApplicationDescriptors.xml", nBufferLength=0x105, lpBuffer=0x31e23c, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\XML Files\\StarterApplicationDescriptors.xml", lpFilePart=0x0) returned 0x5d [0044.777] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e69c) returned 1 [0044.777] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\XML Files\\StarterApplicationDescriptors.xml" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\xml files\\starterapplicationdescriptors.xml"), fInfoLevelId=0x0, lpFileInformation=0x31e718 | out: lpFileInformation=0x31e718*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1a42b900, ftCreationTime.dwHighDateTime=0x1c9d747, ftLastAccessTime.dwLowDateTime=0x5abbba30, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xfe24af40, ftLastWriteTime.dwHighDateTime=0x1d6eb7e, nFileSizeHigh=0x0, nFileSizeLow=0x17e30)) returned 1 [0044.777] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e698) returned 1 [0044.777] MoveFileW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\XML Files\\StarterApplicationDescriptors.xml" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\xml files\\starterapplicationdescriptors.xml"), lpNewFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\XML Files\\StarterApplicationDescriptors.xml" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\xml files\\starterapplicationdescriptors.xml")) returned 1 [0044.778] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\XML Files\\StarterNotificationDescriptors.xml", nBufferLength=0x105, lpBuffer=0x31e11c, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\XML Files\\StarterNotificationDescriptors.xml", lpFilePart=0x0) returned 0x5e [0044.778] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e610) returned 1 [0044.778] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\XML Files\\StarterNotificationDescriptors.xml" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\xml files\\starternotificationdescriptors.xml"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x274 [0044.778] GetFileType (hFile=0x274) returned 0x1 [0044.778] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e60c) returned 1 [0044.778] GetFileType (hFile=0x274) returned 0x1 [0044.778] GetFileSize (in: hFile=0x274, lpFileSizeHigh=0x31e718 | out: lpFileSizeHigh=0x31e718*=0x0) returned 0x1b875 [0044.778] ReadFile (in: hFile=0x274, lpBuffer=0x38b4af0, nNumberOfBytesToRead=0x1b875, lpNumberOfBytesRead=0x31e6c4, lpOverlapped=0x0 | out: lpBuffer=0x38b4af0*, lpNumberOfBytesRead=0x31e6c4*=0x1b875, lpOverlapped=0x0) returned 1 [0044.781] CloseHandle (hObject=0x274) returned 1 [0044.797] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\XML Files\\StarterNotificationDescriptors.xml", nBufferLength=0x105, lpBuffer=0x31e108, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\XML Files\\StarterNotificationDescriptors.xml", lpFilePart=0x0) returned 0x5e [0044.797] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e5fc) returned 1 [0044.797] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\XML Files\\StarterNotificationDescriptors.xml" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\xml files\\starternotificationdescriptors.xml"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x274 [0044.799] GetFileType (hFile=0x274) returned 0x1 [0044.799] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e5f8) returned 1 [0044.799] GetFileType (hFile=0x274) returned 0x1 [0044.799] WriteFile (in: hFile=0x274, lpBuffer=0x39ab2d0*, nNumberOfBytesToWrite=0x1b880, lpNumberOfBytesWritten=0x31e6b8, lpOverlapped=0x0 | out: lpBuffer=0x39ab2d0*, lpNumberOfBytesWritten=0x31e6b8*=0x1b880, lpOverlapped=0x0) returned 1 [0044.801] CloseHandle (hObject=0x274) returned 1 [0044.802] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\XML Files\\StarterNotificationDescriptors.xml", nBufferLength=0x105, lpBuffer=0x31e23c, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\XML Files\\StarterNotificationDescriptors.xml", lpFilePart=0x0) returned 0x5e [0044.802] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\XML Files\\StarterNotificationDescriptors.xml", nBufferLength=0x105, lpBuffer=0x31e23c, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\XML Files\\StarterNotificationDescriptors.xml", lpFilePart=0x0) returned 0x5e [0044.802] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e69c) returned 1 [0044.803] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\XML Files\\StarterNotificationDescriptors.xml" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\xml files\\starternotificationdescriptors.xml"), fInfoLevelId=0x0, lpFileInformation=0x31e718 | out: lpFileInformation=0x31e718*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc4061200, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0x6d3caa70, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xfe2710a0, ftLastWriteTime.dwHighDateTime=0x1d6eb7e, nFileSizeHigh=0x0, nFileSizeLow=0x1b880)) returned 1 [0044.803] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e698) returned 1 [0044.803] MoveFileW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\XML Files\\StarterNotificationDescriptors.xml" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\xml files\\starternotificationdescriptors.xml"), lpNewFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\XML Files\\StarterNotificationDescriptors.xml" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\xml files\\starternotificationdescriptors.xml")) returned 1 [0044.803] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\XML Files\\StarterToolTemplates.xml", nBufferLength=0x105, lpBuffer=0x31e11c, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\XML Files\\StarterToolTemplates.xml", lpFilePart=0x0) returned 0x54 [0044.803] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e610) returned 1 [0044.803] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\XML Files\\StarterToolTemplates.xml" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\xml files\\startertooltemplates.xml"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x274 [0044.803] GetFileType (hFile=0x274) returned 0x1 [0044.803] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e60c) returned 1 [0044.803] GetFileType (hFile=0x274) returned 0x1 [0044.803] GetFileSize (in: hFile=0x274, lpFileSizeHigh=0x31e718 | out: lpFileSizeHigh=0x31e718*=0x0) returned 0x1a553 [0044.804] ReadFile (in: hFile=0x274, lpBuffer=0x39c6b70, nNumberOfBytesToRead=0x1a553, lpNumberOfBytesRead=0x31e6c4, lpOverlapped=0x0 | out: lpBuffer=0x39c6b70*, lpNumberOfBytesRead=0x31e6c4*=0x1a553, lpOverlapped=0x0) returned 1 [0044.808] CloseHandle (hObject=0x274) returned 1 [0044.828] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\XML Files\\StarterToolTemplates.xml", nBufferLength=0x105, lpBuffer=0x31e108, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\XML Files\\StarterToolTemplates.xml", lpFilePart=0x0) returned 0x54 [0044.829] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e5fc) returned 1 [0044.829] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\XML Files\\StarterToolTemplates.xml" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\xml files\\startertooltemplates.xml"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x274 [0044.832] GetFileType (hFile=0x274) returned 0x1 [0044.832] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e5f8) returned 1 [0044.832] GetFileType (hFile=0x274) returned 0x1 [0044.832] WriteFile (in: hFile=0x274, lpBuffer=0x3682a50*, nNumberOfBytesToWrite=0x1a560, lpNumberOfBytesWritten=0x31e6b8, lpOverlapped=0x0 | out: lpBuffer=0x3682a50*, lpNumberOfBytesWritten=0x31e6b8*=0x1a560, lpOverlapped=0x0) returned 1 [0044.834] CloseHandle (hObject=0x274) returned 1 [0044.836] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\XML Files\\StarterToolTemplates.xml", nBufferLength=0x105, lpBuffer=0x31e23c, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\XML Files\\StarterToolTemplates.xml", lpFilePart=0x0) returned 0x54 [0044.836] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\XML Files\\StarterToolTemplates.xml", nBufferLength=0x105, lpBuffer=0x31e23c, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\XML Files\\StarterToolTemplates.xml", lpFilePart=0x0) returned 0x54 [0044.836] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e69c) returned 1 [0044.836] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\XML Files\\StarterToolTemplates.xml" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\xml files\\startertooltemplates.xml"), fInfoLevelId=0x0, lpFileInformation=0x31e718 | out: lpFileInformation=0x31e718*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x22545300, ftCreationTime.dwHighDateTime=0x1c9a48f, ftLastAccessTime.dwLowDateTime=0x5abe1b90, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xfe2e34c0, ftLastWriteTime.dwHighDateTime=0x1d6eb7e, nFileSizeHigh=0x0, nFileSizeLow=0x1a560)) returned 1 [0044.836] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e698) returned 1 [0044.836] MoveFileW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\XML Files\\StarterToolTemplates.xml" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\xml files\\startertooltemplates.xml"), lpNewFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\XML Files\\StarterToolTemplates.xml" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\xml files\\startertooltemplates.xml")) returned 1 [0044.837] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e6cc) returned 1 [0044.837] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\XML Files\\Space Templates", nBufferLength=0x105, lpBuffer=0x31e1d4, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\XML Files\\Space Templates", lpFilePart=0x0) returned 0x4b [0044.837] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\XML Files\\Space Templates\\", nBufferLength=0x105, lpBuffer=0x31e1a8, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\XML Files\\Space Templates\\", lpFilePart=0x0) returned 0x4c [0044.837] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\XML Files\\Space Templates\\*", lpFindFileData=0x31e3f4 | out: lpFindFileData=0x31e3f4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x50e7acd0, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x50e7acd0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x50e7acd0, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x382000 [0044.837] FindNextFileW (in: hFindFile=0x382000, lpFindFileData=0x31e404 | out: lpFindFileData=0x31e404*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x50e7acd0, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x50e7acd0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x50e7acd0, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0044.837] FindNextFileW (in: hFindFile=0x382000, lpFindFileData=0x31e404 | out: lpFindFileData=0x31e404*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x50e7acd0, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x50e7acd0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x50e7acd0, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 0 [0044.837] FindClose (in: hFindFile=0x382000 | out: hFindFile=0x382000) returned 1 [0044.837] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e68c) returned 1 [0044.837] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e698) returned 1 [0044.838] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e6cc) returned 1 [0044.838] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\XML Files\\Space Templates", nBufferLength=0x105, lpBuffer=0x31e1d4, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\XML Files\\Space Templates", lpFilePart=0x0) returned 0x4b [0044.838] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\XML Files\\Space Templates\\", nBufferLength=0x105, lpBuffer=0x31e1a8, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\XML Files\\Space Templates\\", lpFilePart=0x0) returned 0x4c [0044.838] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\XML Files\\Space Templates\\*", lpFindFileData=0x31e3f4 | out: lpFindFileData=0x31e3f4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x50e7acd0, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x50e7acd0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x50e7acd0, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x382000 [0044.838] FindNextFileW (in: hFindFile=0x382000, lpFindFileData=0x31e404 | out: lpFindFileData=0x31e404*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x50e7acd0, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x50e7acd0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x50e7acd0, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0044.838] FindNextFileW (in: hFindFile=0x382000, lpFindFileData=0x31e404 | out: lpFindFileData=0x31e404*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x50e7acd0, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x50e7acd0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x50e7acd0, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 0 [0044.838] FindClose (in: hFindFile=0x382000 | out: hFindFile=0x382000) returned 1 [0044.838] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e68c) returned 1 [0044.838] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e698) returned 1 [0044.838] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e7bc) returned 1 [0044.838] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\InfoPathOM", nBufferLength=0x105, lpBuffer=0x31e2c4, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\Office14\\InfoPathOM", lpFilePart=0x0) returned 0x35 [0044.838] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\InfoPathOM\\", nBufferLength=0x105, lpBuffer=0x31e298, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\Office14\\InfoPathOM\\", lpFilePart=0x0) returned 0x36 [0044.839] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\InfoPathOM\\*", lpFindFileData=0x31e4e4 | out: lpFindFileData=0x31e4e4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x544ee410, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x64dbf390, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x64dbf390, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x382000 [0045.100] FindNextFileW (in: hFindFile=0x382000, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x544ee410, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x64dbf390, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x64dbf390, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0045.100] FindNextFileW (in: hFindFile=0x382000, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x545acaf0, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x64de54f0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x64de54f0, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="InfoPathOMFormServices", cAlternateFileName="INFOPA~2")) returned 1 [0045.100] FindNextFileW (in: hFindFile=0x382000, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x544ee410, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x64dbf390, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x64dbf390, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="InfoPathOMV12", cAlternateFileName="INFOPA~1")) returned 1 [0045.101] FindNextFileW (in: hFindFile=0x382000, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5c198900, ftCreationTime.dwHighDateTime=0x1cab7c8, ftLastAccessTime.dwLowDateTime=0x64dbf390, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x5c198900, ftLastWriteTime.dwHighDateTime=0x1cab7c8, nFileSizeHigh=0x0, nFileSizeLow=0xe770, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.Office.Infopath.dll", cAlternateFileName="MICROS~1.DLL")) returned 1 [0045.101] FindNextFileW (in: hFindFile=0x382000, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8d265900, ftCreationTime.dwHighDateTime=0x1ca5630, ftLastAccessTime.dwLowDateTime=0x544ee410, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x8d265900, ftLastWriteTime.dwHighDateTime=0x1ca5630, nFileSizeHigh=0x0, nFileSizeLow=0x3dddf, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.Office.InfoPath.xml", cAlternateFileName="MICROS~1.XML")) returned 1 [0045.101] FindNextFileW (in: hFindFile=0x382000, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0045.101] FindClose (in: hFindFile=0x382000 | out: hFindFile=0x382000) returned 1 [0045.102] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e77c) returned 1 [0045.102] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e788) returned 1 [0045.102] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e7bc) returned 1 [0045.102] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\InfoPathOM", nBufferLength=0x105, lpBuffer=0x31e2c4, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\Office14\\InfoPathOM", lpFilePart=0x0) returned 0x35 [0045.102] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\InfoPathOM\\", nBufferLength=0x105, lpBuffer=0x31e298, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\Office14\\InfoPathOM\\", lpFilePart=0x0) returned 0x36 [0045.102] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\InfoPathOM\\*", lpFindFileData=0x31e4e4 | out: lpFindFileData=0x31e4e4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x544ee410, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x64dbf390, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x64dbf390, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x382000 [0045.103] FindNextFileW (in: hFindFile=0x382000, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x544ee410, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x64dbf390, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x64dbf390, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0045.103] FindNextFileW (in: hFindFile=0x382000, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x545acaf0, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x64de54f0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x64de54f0, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="InfoPathOMFormServices", cAlternateFileName="INFOPA~2")) returned 1 [0045.103] FindNextFileW (in: hFindFile=0x382000, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x544ee410, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x64dbf390, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x64dbf390, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="InfoPathOMV12", cAlternateFileName="INFOPA~1")) returned 1 [0045.103] FindNextFileW (in: hFindFile=0x382000, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5c198900, ftCreationTime.dwHighDateTime=0x1cab7c8, ftLastAccessTime.dwLowDateTime=0x64dbf390, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x5c198900, ftLastWriteTime.dwHighDateTime=0x1cab7c8, nFileSizeHigh=0x0, nFileSizeLow=0xe770, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.Office.Infopath.dll", cAlternateFileName="MICROS~1.DLL")) returned 1 [0045.103] FindNextFileW (in: hFindFile=0x382000, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8d265900, ftCreationTime.dwHighDateTime=0x1ca5630, ftLastAccessTime.dwLowDateTime=0x544ee410, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x8d265900, ftLastWriteTime.dwHighDateTime=0x1ca5630, nFileSizeHigh=0x0, nFileSizeLow=0x3dddf, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.Office.InfoPath.xml", cAlternateFileName="MICROS~1.XML")) returned 1 [0045.104] FindNextFileW (in: hFindFile=0x382000, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8d265900, ftCreationTime.dwHighDateTime=0x1ca5630, ftLastAccessTime.dwLowDateTime=0x544ee410, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x8d265900, ftLastWriteTime.dwHighDateTime=0x1ca5630, nFileSizeHigh=0x0, nFileSizeLow=0x3dddf, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.Office.InfoPath.xml", cAlternateFileName="MICROS~1.XML")) returned 0 [0045.104] FindClose (in: hFindFile=0x382000 | out: hFindFile=0x382000) returned 1 [0045.104] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e77c) returned 1 [0045.104] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e788) returned 1 [0045.105] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\InfoPathOM\\Microsoft.Office.InfoPath.xml", nBufferLength=0x105, lpBuffer=0x31e194, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\Office14\\InfoPathOM\\Microsoft.Office.InfoPath.xml", lpFilePart=0x0) returned 0x53 [0045.105] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e688) returned 1 [0045.105] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\InfoPathOM\\Microsoft.Office.InfoPath.xml" (normalized: "c:\\program files\\microsoft office\\office14\\infopathom\\microsoft.office.infopath.xml"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x274 [0045.257] GetFileType (hFile=0x274) returned 0x1 [0045.257] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e684) returned 1 [0045.257] GetFileType (hFile=0x274) returned 0x1 [0045.257] GetFileSize (in: hFile=0x274, lpFileSizeHigh=0x31e790 | out: lpFileSizeHigh=0x31e790*=0x0) returned 0x3dddf [0045.257] ReadFile (in: hFile=0x274, lpBuffer=0x369cfd0, nNumberOfBytesToRead=0x3dddf, lpNumberOfBytesRead=0x31e73c, lpOverlapped=0x0 | out: lpBuffer=0x369cfd0*, lpNumberOfBytesRead=0x31e73c*=0x3dddf, lpOverlapped=0x0) returned 1 [0045.305] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\InfoPathOM\\Microsoft.Office.InfoPath.xml", nBufferLength=0x105, lpBuffer=0x31e180, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\Office14\\InfoPathOM\\Microsoft.Office.InfoPath.xml", lpFilePart=0x0) returned 0x53 [0045.305] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e674) returned 1 [0045.305] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\InfoPathOM\\Microsoft.Office.InfoPath.xml" (normalized: "c:\\program files\\microsoft office\\office14\\infopathom\\microsoft.office.infopath.xml"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x274 [0045.307] GetFileType (hFile=0x274) returned 0x1 [0045.307] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e670) returned 1 [0045.307] GetFileType (hFile=0x274) returned 0x1 [0045.307] WriteFile (in: hFile=0x274, lpBuffer=0x37d2570*, nNumberOfBytesToWrite=0x3dde0, lpNumberOfBytesWritten=0x31e730, lpOverlapped=0x0 | out: lpBuffer=0x37d2570*, lpNumberOfBytesWritten=0x31e730*=0x3dde0, lpOverlapped=0x0) returned 1 [0045.312] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\InfoPathOM\\Microsoft.Office.InfoPath.xml", nBufferLength=0x105, lpBuffer=0x31e2b4, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\Office14\\InfoPathOM\\Microsoft.Office.InfoPath.xml", lpFilePart=0x0) returned 0x53 [0045.312] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\InfoPathOM\\Microsoft.Office.InfoPath.xml", nBufferLength=0x105, lpBuffer=0x31e2b4, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\Office14\\InfoPathOM\\Microsoft.Office.InfoPath.xml", lpFilePart=0x0) returned 0x53 [0045.312] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e714) returned 1 [0045.312] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\InfoPathOM\\Microsoft.Office.InfoPath.xml" (normalized: "c:\\program files\\microsoft office\\office14\\infopathom\\microsoft.office.infopath.xml"), fInfoLevelId=0x0, lpFileInformation=0x31e790 | out: lpFileInformation=0x31e790*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8d265900, ftCreationTime.dwHighDateTime=0x1ca5630, ftLastAccessTime.dwLowDateTime=0x544ee410, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xfe759e00, ftLastWriteTime.dwHighDateTime=0x1d6eb7e, nFileSizeHigh=0x0, nFileSizeLow=0x3dde0)) returned 1 [0045.312] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e710) returned 1 [0045.312] MoveFileW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\Office14\\InfoPathOM\\Microsoft.Office.InfoPath.xml" (normalized: "c:\\program files\\microsoft office\\office14\\infopathom\\microsoft.office.infopath.xml"), lpNewFileName="C:\\Program Files\\Microsoft Office\\Office14\\InfoPathOM\\Microsoft.Office.InfoPath.xml" (normalized: "c:\\program files\\microsoft office\\office14\\infopathom\\microsoft.office.infopath.xml")) returned 1 [0045.315] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e744) returned 1 [0045.315] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\InfoPathOM\\InfoPathOMFormServices", nBufferLength=0x105, lpBuffer=0x31e24c, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\Office14\\InfoPathOM\\InfoPathOMFormServices", lpFilePart=0x0) returned 0x4c [0045.315] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\InfoPathOM\\InfoPathOMFormServices\\", nBufferLength=0x105, lpBuffer=0x31e220, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\Office14\\InfoPathOM\\InfoPathOMFormServices\\", lpFilePart=0x0) returned 0x4d [0045.315] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\InfoPathOM\\InfoPathOMFormServices\\*", lpFindFileData=0x31e46c | out: lpFindFileData=0x31e46c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x545acaf0, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x64de54f0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x64de54f0, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x381c40 [0045.317] FindNextFileW (in: hFindFile=0x381c40, lpFindFileData=0x31e47c | out: lpFindFileData=0x31e47c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x545acaf0, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x64de54f0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x64de54f0, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0045.317] FindNextFileW (in: hFindFile=0x381c40, lpFindFileData=0x31e47c | out: lpFindFileData=0x31e47c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x553a8c30, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x64de54f0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x64de54f0, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="InfoPathOMFormServicesV12", cAlternateFileName="INFOPA~1")) returned 1 [0045.317] FindNextFileW (in: hFindFile=0x381c40, lpFindFileData=0x31e47c | out: lpFindFileData=0x31e47c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5ae85c00, ftCreationTime.dwHighDateTime=0x1cab7c8, ftLastAccessTime.dwLowDateTime=0x64de54f0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x5ae85c00, ftLastWriteTime.dwHighDateTime=0x1cab7c8, nFileSizeHigh=0x0, nFileSizeLow=0xb770, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.Office.Infopath.dll", cAlternateFileName="MICROS~1.DLL")) returned 1 [0045.317] FindNextFileW (in: hFindFile=0x381c40, lpFindFileData=0x31e47c | out: lpFindFileData=0x31e47c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8d265900, ftCreationTime.dwHighDateTime=0x1ca5630, ftLastAccessTime.dwLowDateTime=0x55382ad0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x8d265900, ftLastWriteTime.dwHighDateTime=0x1ca5630, nFileSizeHigh=0x0, nFileSizeLow=0x3dddf, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.Office.InfoPath.xml", cAlternateFileName="MICROS~1.XML")) returned 1 [0045.318] FindNextFileW (in: hFindFile=0x381c40, lpFindFileData=0x31e47c | out: lpFindFileData=0x31e47c*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0045.318] FindClose (in: hFindFile=0x381c40 | out: hFindFile=0x381c40) returned 1 [0045.319] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e704) returned 1 [0045.319] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e710) returned 1 [0045.319] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e744) returned 1 [0045.319] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\InfoPathOM\\InfoPathOMFormServices", nBufferLength=0x105, lpBuffer=0x31e24c, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\Office14\\InfoPathOM\\InfoPathOMFormServices", lpFilePart=0x0) returned 0x4c [0045.319] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\InfoPathOM\\InfoPathOMFormServices\\", nBufferLength=0x105, lpBuffer=0x31e220, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\Office14\\InfoPathOM\\InfoPathOMFormServices\\", lpFilePart=0x0) returned 0x4d [0045.319] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\InfoPathOM\\InfoPathOMFormServices\\*", lpFindFileData=0x31e46c | out: lpFindFileData=0x31e46c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x545acaf0, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x64de54f0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x64de54f0, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x381c40 [0045.320] FindNextFileW (in: hFindFile=0x381c40, lpFindFileData=0x31e47c | out: lpFindFileData=0x31e47c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x545acaf0, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x64de54f0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x64de54f0, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0045.320] FindNextFileW (in: hFindFile=0x381c40, lpFindFileData=0x31e47c | out: lpFindFileData=0x31e47c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x553a8c30, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x64de54f0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x64de54f0, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="InfoPathOMFormServicesV12", cAlternateFileName="INFOPA~1")) returned 1 [0045.320] FindNextFileW (in: hFindFile=0x381c40, lpFindFileData=0x31e47c | out: lpFindFileData=0x31e47c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5ae85c00, ftCreationTime.dwHighDateTime=0x1cab7c8, ftLastAccessTime.dwLowDateTime=0x64de54f0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x5ae85c00, ftLastWriteTime.dwHighDateTime=0x1cab7c8, nFileSizeHigh=0x0, nFileSizeLow=0xb770, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.Office.Infopath.dll", cAlternateFileName="MICROS~1.DLL")) returned 1 [0045.320] FindNextFileW (in: hFindFile=0x381c40, lpFindFileData=0x31e47c | out: lpFindFileData=0x31e47c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8d265900, ftCreationTime.dwHighDateTime=0x1ca5630, ftLastAccessTime.dwLowDateTime=0x55382ad0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x8d265900, ftLastWriteTime.dwHighDateTime=0x1ca5630, nFileSizeHigh=0x0, nFileSizeLow=0x3dddf, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.Office.InfoPath.xml", cAlternateFileName="MICROS~1.XML")) returned 1 [0045.320] FindNextFileW (in: hFindFile=0x381c40, lpFindFileData=0x31e47c | out: lpFindFileData=0x31e47c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8d265900, ftCreationTime.dwHighDateTime=0x1ca5630, ftLastAccessTime.dwLowDateTime=0x55382ad0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x8d265900, ftLastWriteTime.dwHighDateTime=0x1ca5630, nFileSizeHigh=0x0, nFileSizeLow=0x3dddf, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.Office.InfoPath.xml", cAlternateFileName="MICROS~1.XML")) returned 0 [0045.320] FindClose (in: hFindFile=0x381c40 | out: hFindFile=0x381c40) returned 1 [0045.321] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e704) returned 1 [0045.321] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e710) returned 1 [0045.321] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\InfoPathOM\\InfoPathOMFormServices\\Microsoft.Office.InfoPath.xml", nBufferLength=0x105, lpBuffer=0x31e11c, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\Office14\\InfoPathOM\\InfoPathOMFormServices\\Microsoft.Office.InfoPath.xml", lpFilePart=0x0) returned 0x6a [0045.321] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e610) returned 1 [0045.321] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\InfoPathOM\\InfoPathOMFormServices\\Microsoft.Office.InfoPath.xml" (normalized: "c:\\program files\\microsoft office\\office14\\infopathom\\infopathomformservices\\microsoft.office.infopath.xml"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x274 [0045.323] GetFileType (hFile=0x274) returned 0x1 [0045.323] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e60c) returned 1 [0045.323] GetFileType (hFile=0x274) returned 0x1 [0045.323] GetFileSize (in: hFile=0x274, lpFileSizeHigh=0x31e718 | out: lpFileSizeHigh=0x31e718*=0x0) returned 0x3dddf [0045.323] ReadFile (in: hFile=0x274, lpBuffer=0x3810370, nNumberOfBytesToRead=0x3dddf, lpNumberOfBytesRead=0x31e6c4, lpOverlapped=0x0 | out: lpBuffer=0x3810370*, lpNumberOfBytesRead=0x31e6c4*=0x3dddf, lpOverlapped=0x0) returned 1 [0045.350] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\InfoPathOM\\InfoPathOMFormServices\\Microsoft.Office.InfoPath.xml", nBufferLength=0x105, lpBuffer=0x31e108, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\Office14\\InfoPathOM\\InfoPathOMFormServices\\Microsoft.Office.InfoPath.xml", lpFilePart=0x0) returned 0x6a [0045.350] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e5fc) returned 1 [0045.350] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\InfoPathOM\\InfoPathOMFormServices\\Microsoft.Office.InfoPath.xml" (normalized: "c:\\program files\\microsoft office\\office14\\infopathom\\infopathomformservices\\microsoft.office.infopath.xml"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x274 [0045.352] GetFileType (hFile=0x274) returned 0x1 [0045.352] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e5f8) returned 1 [0045.352] GetFileType (hFile=0x274) returned 0x1 [0045.352] WriteFile (in: hFile=0x274, lpBuffer=0x384e170*, nNumberOfBytesToWrite=0x3dde0, lpNumberOfBytesWritten=0x31e6b8, lpOverlapped=0x0 | out: lpBuffer=0x384e170*, lpNumberOfBytesWritten=0x31e6b8*=0x3dde0, lpOverlapped=0x0) returned 1 [0045.356] CloseHandle (hObject=0x274) returned 1 [0045.358] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\InfoPathOM\\InfoPathOMFormServices\\Microsoft.Office.InfoPath.xml", nBufferLength=0x105, lpBuffer=0x31e23c, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\Office14\\InfoPathOM\\InfoPathOMFormServices\\Microsoft.Office.InfoPath.xml", lpFilePart=0x0) returned 0x6a [0045.358] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\InfoPathOM\\InfoPathOMFormServices\\Microsoft.Office.InfoPath.xml", nBufferLength=0x105, lpBuffer=0x31e23c, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\Office14\\InfoPathOM\\InfoPathOMFormServices\\Microsoft.Office.InfoPath.xml", lpFilePart=0x0) returned 0x6a [0045.358] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e69c) returned 1 [0045.358] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\InfoPathOM\\InfoPathOMFormServices\\Microsoft.Office.InfoPath.xml" (normalized: "c:\\program files\\microsoft office\\office14\\infopathom\\infopathomformservices\\microsoft.office.infopath.xml"), fInfoLevelId=0x0, lpFileInformation=0x31e718 | out: lpFileInformation=0x31e718*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8d265900, ftCreationTime.dwHighDateTime=0x1ca5630, ftLastAccessTime.dwLowDateTime=0x55382ad0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xfe7cc220, ftLastWriteTime.dwHighDateTime=0x1d6eb7e, nFileSizeHigh=0x0, nFileSizeLow=0x3dde0)) returned 1 [0045.358] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e698) returned 1 [0045.358] MoveFileW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\Office14\\InfoPathOM\\InfoPathOMFormServices\\Microsoft.Office.InfoPath.xml" (normalized: "c:\\program files\\microsoft office\\office14\\infopathom\\infopathomformservices\\microsoft.office.infopath.xml"), lpNewFileName="C:\\Program Files\\Microsoft Office\\Office14\\InfoPathOM\\InfoPathOMFormServices\\Microsoft.Office.InfoPath.xml" (normalized: "c:\\program files\\microsoft office\\office14\\infopathom\\infopathomformservices\\microsoft.office.infopath.xml")) returned 1 [0045.358] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e6cc) returned 1 [0045.358] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\InfoPathOM\\InfoPathOMFormServices\\InfoPathOMFormServicesV12", nBufferLength=0x105, lpBuffer=0x31e1d4, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\Office14\\InfoPathOM\\InfoPathOMFormServices\\InfoPathOMFormServicesV12", lpFilePart=0x0) returned 0x66 [0045.358] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\InfoPathOM\\InfoPathOMFormServices\\InfoPathOMFormServicesV12\\", nBufferLength=0x105, lpBuffer=0x31e1a8, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\Office14\\InfoPathOM\\InfoPathOMFormServices\\InfoPathOMFormServicesV12\\", lpFilePart=0x0) returned 0x67 [0045.358] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\InfoPathOM\\InfoPathOMFormServices\\InfoPathOMFormServicesV12\\*", lpFindFileData=0x31e3f4 | out: lpFindFileData=0x31e3f4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x553a8c30, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x64de54f0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x64de54f0, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x382000 [0045.359] FindNextFileW (in: hFindFile=0x382000, lpFindFileData=0x31e404 | out: lpFindFileData=0x31e404*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x553a8c30, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x64de54f0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x64de54f0, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0045.359] FindNextFileW (in: hFindFile=0x382000, lpFindFileData=0x31e404 | out: lpFindFileData=0x31e404*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5ae85c00, ftCreationTime.dwHighDateTime=0x1cab7c8, ftLastAccessTime.dwLowDateTime=0x553a8c30, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x5ae85c00, ftLastWriteTime.dwHighDateTime=0x1cab7c8, nFileSizeHigh=0x0, nFileSizeLow=0xa770, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.Office.Infopath.dll", cAlternateFileName="MICROS~1.DLL")) returned 1 [0045.359] FindNextFileW (in: hFindFile=0x382000, lpFindFileData=0x31e404 | out: lpFindFileData=0x31e404*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8d265900, ftCreationTime.dwHighDateTime=0x1ca5630, ftLastAccessTime.dwLowDateTime=0x65c9fd10, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x8d265900, ftLastWriteTime.dwHighDateTime=0x1ca5630, nFileSizeHigh=0x0, nFileSizeLow=0x3dddf, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.Office.InfoPath.xml", cAlternateFileName="MICROS~1.XML")) returned 1 [0045.359] FindNextFileW (in: hFindFile=0x382000, lpFindFileData=0x31e404 | out: lpFindFileData=0x31e404*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0045.359] FindClose (in: hFindFile=0x382000 | out: hFindFile=0x382000) returned 1 [0045.359] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e68c) returned 1 [0045.359] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e698) returned 1 [0045.359] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e6cc) returned 1 [0045.359] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\InfoPathOM\\InfoPathOMFormServices\\InfoPathOMFormServicesV12", nBufferLength=0x105, lpBuffer=0x31e1d4, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\Office14\\InfoPathOM\\InfoPathOMFormServices\\InfoPathOMFormServicesV12", lpFilePart=0x0) returned 0x66 [0045.359] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\InfoPathOM\\InfoPathOMFormServices\\InfoPathOMFormServicesV12\\", nBufferLength=0x105, lpBuffer=0x31e1a8, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\Office14\\InfoPathOM\\InfoPathOMFormServices\\InfoPathOMFormServicesV12\\", lpFilePart=0x0) returned 0x67 [0045.360] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\InfoPathOM\\InfoPathOMFormServices\\InfoPathOMFormServicesV12\\*", lpFindFileData=0x31e3f4 | out: lpFindFileData=0x31e3f4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x553a8c30, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x64de54f0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x64de54f0, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x382000 [0045.360] FindNextFileW (in: hFindFile=0x382000, lpFindFileData=0x31e404 | out: lpFindFileData=0x31e404*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x553a8c30, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x64de54f0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x64de54f0, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0045.360] FindNextFileW (in: hFindFile=0x382000, lpFindFileData=0x31e404 | out: lpFindFileData=0x31e404*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5ae85c00, ftCreationTime.dwHighDateTime=0x1cab7c8, ftLastAccessTime.dwLowDateTime=0x553a8c30, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x5ae85c00, ftLastWriteTime.dwHighDateTime=0x1cab7c8, nFileSizeHigh=0x0, nFileSizeLow=0xa770, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.Office.Infopath.dll", cAlternateFileName="MICROS~1.DLL")) returned 1 [0045.360] FindNextFileW (in: hFindFile=0x382000, lpFindFileData=0x31e404 | out: lpFindFileData=0x31e404*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8d265900, ftCreationTime.dwHighDateTime=0x1ca5630, ftLastAccessTime.dwLowDateTime=0x65c9fd10, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x8d265900, ftLastWriteTime.dwHighDateTime=0x1ca5630, nFileSizeHigh=0x0, nFileSizeLow=0x3dddf, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.Office.InfoPath.xml", cAlternateFileName="MICROS~1.XML")) returned 1 [0045.360] FindNextFileW (in: hFindFile=0x382000, lpFindFileData=0x31e404 | out: lpFindFileData=0x31e404*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8d265900, ftCreationTime.dwHighDateTime=0x1ca5630, ftLastAccessTime.dwLowDateTime=0x65c9fd10, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x8d265900, ftLastWriteTime.dwHighDateTime=0x1ca5630, nFileSizeHigh=0x0, nFileSizeLow=0x3dddf, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.Office.InfoPath.xml", cAlternateFileName="MICROS~1.XML")) returned 0 [0045.360] FindClose (in: hFindFile=0x382000 | out: hFindFile=0x382000) returned 1 [0045.360] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e68c) returned 1 [0045.360] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e698) returned 1 [0045.361] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\InfoPathOM\\InfoPathOMFormServices\\InfoPathOMFormServicesV12\\Microsoft.Office.InfoPath.xml", nBufferLength=0x105, lpBuffer=0x31e0a4, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\Office14\\InfoPathOM\\InfoPathOMFormServices\\InfoPathOMFormServicesV12\\Microsoft.Office.InfoPath.xml", lpFilePart=0x0) returned 0x84 [0045.361] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e598) returned 1 [0045.361] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\InfoPathOM\\InfoPathOMFormServices\\InfoPathOMFormServicesV12\\Microsoft.Office.InfoPath.xml" (normalized: "c:\\program files\\microsoft office\\office14\\infopathom\\infopathomformservices\\infopathomformservicesv12\\microsoft.office.infopath.xml"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x274 [0045.362] GetFileType (hFile=0x274) returned 0x1 [0045.362] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e594) returned 1 [0045.362] GetFileType (hFile=0x274) returned 0x1 [0045.362] GetFileSize (in: hFile=0x274, lpFileSizeHigh=0x31e6a0 | out: lpFileSizeHigh=0x31e6a0*=0x0) returned 0x3dddf [0045.362] ReadFile (in: hFile=0x274, lpBuffer=0x36194b0, nNumberOfBytesToRead=0x3dddf, lpNumberOfBytesRead=0x31e64c, lpOverlapped=0x0 | out: lpBuffer=0x36194b0*, lpNumberOfBytesRead=0x31e64c*=0x3dddf, lpOverlapped=0x0) returned 1 [0045.365] CloseHandle (hObject=0x274) returned 1 [0045.409] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\InfoPathOM\\InfoPathOMFormServices\\InfoPathOMFormServicesV12\\Microsoft.Office.InfoPath.xml", nBufferLength=0x105, lpBuffer=0x31e090, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\Office14\\InfoPathOM\\InfoPathOMFormServices\\InfoPathOMFormServicesV12\\Microsoft.Office.InfoPath.xml", lpFilePart=0x0) returned 0x84 [0045.409] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e584) returned 1 [0045.409] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\InfoPathOM\\InfoPathOMFormServices\\InfoPathOMFormServicesV12\\Microsoft.Office.InfoPath.xml" (normalized: "c:\\program files\\microsoft office\\office14\\infopathom\\infopathomformservices\\infopathomformservicesv12\\microsoft.office.infopath.xml"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x274 [0045.411] GetFileType (hFile=0x274) returned 0x1 [0045.411] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e580) returned 1 [0045.411] GetFileType (hFile=0x274) returned 0x1 [0045.411] WriteFile (in: hFile=0x274, lpBuffer=0x374ea50*, nNumberOfBytesToWrite=0x3dde0, lpNumberOfBytesWritten=0x31e640, lpOverlapped=0x0 | out: lpBuffer=0x374ea50*, lpNumberOfBytesWritten=0x31e640*=0x3dde0, lpOverlapped=0x0) returned 1 [0045.415] CloseHandle (hObject=0x274) returned 1 [0045.417] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\InfoPathOM\\InfoPathOMFormServices\\InfoPathOMFormServicesV12\\Microsoft.Office.InfoPath.xml", nBufferLength=0x105, lpBuffer=0x31e1c4, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\Office14\\InfoPathOM\\InfoPathOMFormServices\\InfoPathOMFormServicesV12\\Microsoft.Office.InfoPath.xml", lpFilePart=0x0) returned 0x84 [0045.417] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\InfoPathOM\\InfoPathOMFormServices\\InfoPathOMFormServicesV12\\Microsoft.Office.InfoPath.xml", nBufferLength=0x105, lpBuffer=0x31e1c4, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\Office14\\InfoPathOM\\InfoPathOMFormServices\\InfoPathOMFormServicesV12\\Microsoft.Office.InfoPath.xml", lpFilePart=0x0) returned 0x84 [0045.417] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e624) returned 1 [0045.417] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\InfoPathOM\\InfoPathOMFormServices\\InfoPathOMFormServicesV12\\Microsoft.Office.InfoPath.xml" (normalized: "c:\\program files\\microsoft office\\office14\\infopathom\\infopathomformservices\\infopathomformservicesv12\\microsoft.office.infopath.xml"), fInfoLevelId=0x0, lpFileInformation=0x31e6a0 | out: lpFileInformation=0x31e6a0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8d265900, ftCreationTime.dwHighDateTime=0x1ca5630, ftLastAccessTime.dwLowDateTime=0x65c9fd10, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xfe8647a0, ftLastWriteTime.dwHighDateTime=0x1d6eb7e, nFileSizeHigh=0x0, nFileSizeLow=0x3dde0)) returned 1 [0045.417] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e620) returned 1 [0045.418] MoveFileW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\Office14\\InfoPathOM\\InfoPathOMFormServices\\InfoPathOMFormServicesV12\\Microsoft.Office.InfoPath.xml" (normalized: "c:\\program files\\microsoft office\\office14\\infopathom\\infopathomformservices\\infopathomformservicesv12\\microsoft.office.infopath.xml"), lpNewFileName="C:\\Program Files\\Microsoft Office\\Office14\\InfoPathOM\\InfoPathOMFormServices\\InfoPathOMFormServicesV12\\Microsoft.Office.InfoPath.xml" (normalized: "c:\\program files\\microsoft office\\office14\\infopathom\\infopathomformservices\\infopathomformservicesv12\\microsoft.office.infopath.xml")) returned 1 [0045.418] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e744) returned 1 [0045.418] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\InfoPathOM\\InfoPathOMV12", nBufferLength=0x105, lpBuffer=0x31e24c, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\Office14\\InfoPathOM\\InfoPathOMV12", lpFilePart=0x0) returned 0x43 [0045.418] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\InfoPathOM\\InfoPathOMV12\\", nBufferLength=0x105, lpBuffer=0x31e220, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\Office14\\InfoPathOM\\InfoPathOMV12\\", lpFilePart=0x0) returned 0x44 [0045.418] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\InfoPathOM\\InfoPathOMV12\\*", lpFindFileData=0x31e46c | out: lpFindFileData=0x31e46c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x544ee410, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x64dbf390, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x64dbf390, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x381e80 [0045.418] FindNextFileW (in: hFindFile=0x381e80, lpFindFileData=0x31e47c | out: lpFindFileData=0x31e47c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x544ee410, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x64dbf390, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x64dbf390, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0045.419] FindNextFileW (in: hFindFile=0x381e80, lpFindFileData=0x31e47c | out: lpFindFileData=0x31e47c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5c198900, ftCreationTime.dwHighDateTime=0x1cab7c8, ftLastAccessTime.dwLowDateTime=0x544ee410, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x5c198900, ftLastWriteTime.dwHighDateTime=0x1cab7c8, nFileSizeHigh=0x0, nFileSizeLow=0xd770, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.Office.Infopath.dll", cAlternateFileName="MICROS~1.DLL")) returned 1 [0045.419] FindNextFileW (in: hFindFile=0x381e80, lpFindFileData=0x31e47c | out: lpFindFileData=0x31e47c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8d265900, ftCreationTime.dwHighDateTime=0x1ca5630, ftLastAccessTime.dwLowDateTime=0x64dbf390, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x8d265900, ftLastWriteTime.dwHighDateTime=0x1ca5630, nFileSizeHigh=0x0, nFileSizeLow=0x3dddf, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.Office.InfoPath.xml", cAlternateFileName="MICROS~1.XML")) returned 1 [0045.419] FindNextFileW (in: hFindFile=0x381e80, lpFindFileData=0x31e47c | out: lpFindFileData=0x31e47c*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0045.419] FindClose (in: hFindFile=0x381e80 | out: hFindFile=0x381e80) returned 1 [0045.419] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e704) returned 1 [0045.419] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e710) returned 1 [0045.419] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e744) returned 1 [0045.419] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\InfoPathOM\\InfoPathOMV12", nBufferLength=0x105, lpBuffer=0x31e24c, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\Office14\\InfoPathOM\\InfoPathOMV12", lpFilePart=0x0) returned 0x43 [0045.419] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\InfoPathOM\\InfoPathOMV12\\", nBufferLength=0x105, lpBuffer=0x31e220, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\Office14\\InfoPathOM\\InfoPathOMV12\\", lpFilePart=0x0) returned 0x44 [0045.419] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\InfoPathOM\\InfoPathOMV12\\*", lpFindFileData=0x31e46c | out: lpFindFileData=0x31e46c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x544ee410, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x64dbf390, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x64dbf390, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x381e80 [0045.419] FindNextFileW (in: hFindFile=0x381e80, lpFindFileData=0x31e47c | out: lpFindFileData=0x31e47c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x544ee410, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x64dbf390, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x64dbf390, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0045.420] FindNextFileW (in: hFindFile=0x381e80, lpFindFileData=0x31e47c | out: lpFindFileData=0x31e47c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5c198900, ftCreationTime.dwHighDateTime=0x1cab7c8, ftLastAccessTime.dwLowDateTime=0x544ee410, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x5c198900, ftLastWriteTime.dwHighDateTime=0x1cab7c8, nFileSizeHigh=0x0, nFileSizeLow=0xd770, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.Office.Infopath.dll", cAlternateFileName="MICROS~1.DLL")) returned 1 [0045.420] FindNextFileW (in: hFindFile=0x381e80, lpFindFileData=0x31e47c | out: lpFindFileData=0x31e47c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8d265900, ftCreationTime.dwHighDateTime=0x1ca5630, ftLastAccessTime.dwLowDateTime=0x64dbf390, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x8d265900, ftLastWriteTime.dwHighDateTime=0x1ca5630, nFileSizeHigh=0x0, nFileSizeLow=0x3dddf, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.Office.InfoPath.xml", cAlternateFileName="MICROS~1.XML")) returned 1 [0045.420] FindNextFileW (in: hFindFile=0x381e80, lpFindFileData=0x31e47c | out: lpFindFileData=0x31e47c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8d265900, ftCreationTime.dwHighDateTime=0x1ca5630, ftLastAccessTime.dwLowDateTime=0x64dbf390, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x8d265900, ftLastWriteTime.dwHighDateTime=0x1ca5630, nFileSizeHigh=0x0, nFileSizeLow=0x3dddf, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.Office.InfoPath.xml", cAlternateFileName="MICROS~1.XML")) returned 0 [0045.420] FindClose (in: hFindFile=0x381e80 | out: hFindFile=0x381e80) returned 1 [0045.420] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e704) returned 1 [0045.420] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e710) returned 1 [0045.420] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\InfoPathOM\\InfoPathOMV12\\Microsoft.Office.InfoPath.xml", nBufferLength=0x105, lpBuffer=0x31e11c, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\Office14\\InfoPathOM\\InfoPathOMV12\\Microsoft.Office.InfoPath.xml", lpFilePart=0x0) returned 0x61 [0045.420] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e610) returned 1 [0045.420] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\InfoPathOM\\InfoPathOMV12\\Microsoft.Office.InfoPath.xml" (normalized: "c:\\program files\\microsoft office\\office14\\infopathom\\infopathomv12\\microsoft.office.infopath.xml"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x274 [0045.421] GetFileType (hFile=0x274) returned 0x1 [0045.421] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e60c) returned 1 [0045.421] GetFileType (hFile=0x274) returned 0x1 [0045.421] GetFileSize (in: hFile=0x274, lpFileSizeHigh=0x31e718 | out: lpFileSizeHigh=0x31e718*=0x0) returned 0x3dddf [0045.421] ReadFile (in: hFile=0x274, lpBuffer=0x378c850, nNumberOfBytesToRead=0x3dddf, lpNumberOfBytesRead=0x31e6c4, lpOverlapped=0x0 | out: lpBuffer=0x378c850*, lpNumberOfBytesRead=0x31e6c4*=0x3dddf, lpOverlapped=0x0) returned 1 [0045.424] CloseHandle (hObject=0x274) returned 1 [0045.445] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\InfoPathOM\\InfoPathOMV12\\Microsoft.Office.InfoPath.xml", nBufferLength=0x105, lpBuffer=0x31e108, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\Office14\\InfoPathOM\\InfoPathOMV12\\Microsoft.Office.InfoPath.xml", lpFilePart=0x0) returned 0x61 [0045.445] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e5fc) returned 1 [0045.446] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\InfoPathOM\\InfoPathOMV12\\Microsoft.Office.InfoPath.xml" (normalized: "c:\\program files\\microsoft office\\office14\\infopathom\\infopathomv12\\microsoft.office.infopath.xml"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x274 [0045.448] GetFileType (hFile=0x274) returned 0x1 [0045.448] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e5f8) returned 1 [0045.448] GetFileType (hFile=0x274) returned 0x1 [0045.448] WriteFile (in: hFile=0x274, lpBuffer=0x39ff2c0*, nNumberOfBytesToWrite=0x3dde0, lpNumberOfBytesWritten=0x31e6b8, lpOverlapped=0x0 | out: lpBuffer=0x39ff2c0*, lpNumberOfBytesWritten=0x31e6b8*=0x3dde0, lpOverlapped=0x0) returned 1 [0045.452] CloseHandle (hObject=0x274) returned 1 [0045.453] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\InfoPathOM\\InfoPathOMV12\\Microsoft.Office.InfoPath.xml", nBufferLength=0x105, lpBuffer=0x31e23c, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\Office14\\InfoPathOM\\InfoPathOMV12\\Microsoft.Office.InfoPath.xml", lpFilePart=0x0) returned 0x61 [0045.453] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\InfoPathOM\\InfoPathOMV12\\Microsoft.Office.InfoPath.xml", nBufferLength=0x105, lpBuffer=0x31e23c, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\Office14\\InfoPathOM\\InfoPathOMV12\\Microsoft.Office.InfoPath.xml", lpFilePart=0x0) returned 0x61 [0045.454] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e69c) returned 1 [0045.454] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\InfoPathOM\\InfoPathOMV12\\Microsoft.Office.InfoPath.xml" (normalized: "c:\\program files\\microsoft office\\office14\\infopathom\\infopathomv12\\microsoft.office.infopath.xml"), fInfoLevelId=0x0, lpFileInformation=0x31e718 | out: lpFileInformation=0x31e718*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8d265900, ftCreationTime.dwHighDateTime=0x1ca5630, ftLastAccessTime.dwLowDateTime=0x64dbf390, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xfe8b0a60, ftLastWriteTime.dwHighDateTime=0x1d6eb7e, nFileSizeHigh=0x0, nFileSizeLow=0x3dde0)) returned 1 [0045.454] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e698) returned 1 [0045.454] MoveFileW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\Office14\\InfoPathOM\\InfoPathOMV12\\Microsoft.Office.InfoPath.xml" (normalized: "c:\\program files\\microsoft office\\office14\\infopathom\\infopathomv12\\microsoft.office.infopath.xml"), lpNewFileName="C:\\Program Files\\Microsoft Office\\Office14\\InfoPathOM\\InfoPathOMV12\\Microsoft.Office.InfoPath.xml" (normalized: "c:\\program files\\microsoft office\\office14\\infopathom\\infopathomv12\\microsoft.office.infopath.xml")) returned 1 [0045.454] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e7bc) returned 1 [0045.454] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Library", nBufferLength=0x105, lpBuffer=0x31e2c4, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\Office14\\Library", lpFilePart=0x0) returned 0x32 [0045.454] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Library\\", nBufferLength=0x105, lpBuffer=0x31e298, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\Office14\\Library\\", lpFilePart=0x0) returned 0x33 [0045.454] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Library\\*", lpFindFileData=0x31e4e4 | out: lpFindFileData=0x31e4e4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfa1887d0, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0x51fe2db0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x51fe2db0, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x381c80 [0045.455] FindNextFileW (in: hFindFile=0x381c80, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfa1887d0, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0x51fe2db0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x51fe2db0, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0045.455] FindNextFileW (in: hFindFile=0x381c80, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfa1887d0, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xfa64b3d0, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xfa64b3d0, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Analysis", cAlternateFileName="")) returned 1 [0045.455] FindNextFileW (in: hFindFile=0x381c80, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6b4ffc00, ftCreationTime.dwHighDateTime=0x1cac1f6, ftLastAccessTime.dwLowDateTime=0x51fe2db0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x6b4ffc00, ftLastWriteTime.dwHighDateTime=0x1cac1f6, nFileSizeHigh=0x0, nFileSizeLow=0x62688, dwReserved0=0x0, dwReserved1=0x0, cFileName="EUROTOOL.XLAM", cAlternateFileName="EUROTO~1.XLA")) returned 1 [0045.455] FindNextFileW (in: hFindFile=0x381c80, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfa1ae930, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xfa671530, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xfa671530, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="SOLVER", cAlternateFileName="")) returned 1 [0045.455] FindNextFileW (in: hFindFile=0x381c80, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfa1ae930, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xfa671530, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xfa671530, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="SOLVER", cAlternateFileName="")) returned 0 [0045.455] FindClose (in: hFindFile=0x381c80 | out: hFindFile=0x381c80) returned 1 [0045.455] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e77c) returned 1 [0045.455] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e788) returned 1 [0045.455] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e7bc) returned 1 [0045.455] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Library", nBufferLength=0x105, lpBuffer=0x31e2c4, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\Office14\\Library", lpFilePart=0x0) returned 0x32 [0045.456] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Library\\", nBufferLength=0x105, lpBuffer=0x31e298, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\Office14\\Library\\", lpFilePart=0x0) returned 0x33 [0045.456] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Library\\*", lpFindFileData=0x31e4e4 | out: lpFindFileData=0x31e4e4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfa1887d0, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0x51fe2db0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x51fe2db0, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x381c80 [0045.456] FindNextFileW (in: hFindFile=0x381c80, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfa1887d0, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0x51fe2db0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x51fe2db0, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0045.456] FindNextFileW (in: hFindFile=0x381c80, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfa1887d0, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xfa64b3d0, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xfa64b3d0, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Analysis", cAlternateFileName="")) returned 1 [0045.456] FindNextFileW (in: hFindFile=0x381c80, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6b4ffc00, ftCreationTime.dwHighDateTime=0x1cac1f6, ftLastAccessTime.dwLowDateTime=0x51fe2db0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x6b4ffc00, ftLastWriteTime.dwHighDateTime=0x1cac1f6, nFileSizeHigh=0x0, nFileSizeLow=0x62688, dwReserved0=0x0, dwReserved1=0x0, cFileName="EUROTOOL.XLAM", cAlternateFileName="EUROTO~1.XLA")) returned 1 [0045.456] FindNextFileW (in: hFindFile=0x381c80, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfa1ae930, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xfa671530, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xfa671530, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="SOLVER", cAlternateFileName="")) returned 1 [0045.456] FindNextFileW (in: hFindFile=0x381c80, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0045.456] FindClose (in: hFindFile=0x381c80 | out: hFindFile=0x381c80) returned 1 [0045.456] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e77c) returned 1 [0045.456] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e788) returned 1 [0045.456] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e744) returned 1 [0045.457] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Library\\Analysis", nBufferLength=0x105, lpBuffer=0x31e24c, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\Office14\\Library\\Analysis", lpFilePart=0x0) returned 0x3b [0045.457] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Library\\Analysis\\", nBufferLength=0x105, lpBuffer=0x31e220, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\Office14\\Library\\Analysis\\", lpFilePart=0x0) returned 0x3c [0045.457] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Library\\Analysis\\*", lpFindFileData=0x31e46c | out: lpFindFileData=0x31e46c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfa1887d0, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xfa64b3d0, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xfa64b3d0, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x381c80 [0045.459] FindNextFileW (in: hFindFile=0x381c80, lpFindFileData=0x31e47c | out: lpFindFileData=0x31e47c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfa1887d0, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xfa64b3d0, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xfa64b3d0, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0045.459] FindNextFileW (in: hFindFile=0x381c80, lpFindFileData=0x31e47c | out: lpFindFileData=0x31e47c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6a1ecf00, ftCreationTime.dwHighDateTime=0x1cac1f6, ftLastAccessTime.dwLowDateTime=0xfa1ae930, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0x6a1ecf00, ftLastWriteTime.dwHighDateTime=0x1cac1f6, nFileSizeHigh=0x0, nFileSizeLow=0x3bb60, dwReserved0=0x0, dwReserved1=0x0, cFileName="ANALYS32.XLL", cAlternateFileName="")) returned 1 [0045.459] FindNextFileW (in: hFindFile=0x381c80, lpFindFileData=0x31e47c | out: lpFindFileData=0x31e47c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6a1ecf00, ftCreationTime.dwHighDateTime=0x1cac1f6, ftLastAccessTime.dwLowDateTime=0xfa1fabf0, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0x6a1ecf00, ftLastWriteTime.dwHighDateTime=0x1cac1f6, nFileSizeHigh=0x0, nFileSizeLow=0xe0c7, dwReserved0=0x0, dwReserved1=0x0, cFileName="ATPVBAEN.XLAM", cAlternateFileName="ATPVBA~1.XLA")) returned 1 [0045.459] FindNextFileW (in: hFindFile=0x381c80, lpFindFileData=0x31e47c | out: lpFindFileData=0x31e47c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6b4ffc00, ftCreationTime.dwHighDateTime=0x1cac1f6, ftLastAccessTime.dwLowDateTime=0xfa5ff110, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0x6b4ffc00, ftLastWriteTime.dwHighDateTime=0x1cac1f6, nFileSizeHigh=0x0, nFileSizeLow=0x6b62, dwReserved0=0x0, dwReserved1=0x0, cFileName="FUNCRES.XLAM", cAlternateFileName="FUNCRE~1.XLA")) returned 1 [0045.460] FindNextFileW (in: hFindFile=0x381c80, lpFindFileData=0x31e47c | out: lpFindFileData=0x31e47c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6a1ecf00, ftCreationTime.dwHighDateTime=0x1cac1f6, ftLastAccessTime.dwLowDateTime=0xfa64b3d0, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0x6a1ecf00, ftLastWriteTime.dwHighDateTime=0x1cac1f6, nFileSizeHigh=0x0, nFileSizeLow=0xcf2b, dwReserved0=0x0, dwReserved1=0x0, cFileName="PROCDB.XLAM", cAlternateFileName="PROCDB~1.XLA")) returned 1 [0045.460] FindNextFileW (in: hFindFile=0x381c80, lpFindFileData=0x31e47c | out: lpFindFileData=0x31e47c*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0045.460] FindClose (in: hFindFile=0x381c80 | out: hFindFile=0x381c80) returned 1 [0045.461] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e704) returned 1 [0045.461] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e710) returned 1 [0045.461] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e744) returned 1 [0045.461] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Library\\Analysis", nBufferLength=0x105, lpBuffer=0x31e24c, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\Office14\\Library\\Analysis", lpFilePart=0x0) returned 0x3b [0045.461] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Library\\Analysis\\", nBufferLength=0x105, lpBuffer=0x31e220, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\Office14\\Library\\Analysis\\", lpFilePart=0x0) returned 0x3c [0045.461] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Library\\Analysis\\*", lpFindFileData=0x31e46c | out: lpFindFileData=0x31e46c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfa1887d0, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xfa64b3d0, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xfa64b3d0, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x381c80 [0045.462] FindNextFileW (in: hFindFile=0x381c80, lpFindFileData=0x31e47c | out: lpFindFileData=0x31e47c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfa1887d0, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xfa64b3d0, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xfa64b3d0, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0045.462] FindNextFileW (in: hFindFile=0x381c80, lpFindFileData=0x31e47c | out: lpFindFileData=0x31e47c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6a1ecf00, ftCreationTime.dwHighDateTime=0x1cac1f6, ftLastAccessTime.dwLowDateTime=0xfa1ae930, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0x6a1ecf00, ftLastWriteTime.dwHighDateTime=0x1cac1f6, nFileSizeHigh=0x0, nFileSizeLow=0x3bb60, dwReserved0=0x0, dwReserved1=0x0, cFileName="ANALYS32.XLL", cAlternateFileName="")) returned 1 [0045.462] FindNextFileW (in: hFindFile=0x381c80, lpFindFileData=0x31e47c | out: lpFindFileData=0x31e47c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6a1ecf00, ftCreationTime.dwHighDateTime=0x1cac1f6, ftLastAccessTime.dwLowDateTime=0xfa1fabf0, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0x6a1ecf00, ftLastWriteTime.dwHighDateTime=0x1cac1f6, nFileSizeHigh=0x0, nFileSizeLow=0xe0c7, dwReserved0=0x0, dwReserved1=0x0, cFileName="ATPVBAEN.XLAM", cAlternateFileName="ATPVBA~1.XLA")) returned 1 [0045.462] FindNextFileW (in: hFindFile=0x381c80, lpFindFileData=0x31e47c | out: lpFindFileData=0x31e47c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6b4ffc00, ftCreationTime.dwHighDateTime=0x1cac1f6, ftLastAccessTime.dwLowDateTime=0xfa5ff110, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0x6b4ffc00, ftLastWriteTime.dwHighDateTime=0x1cac1f6, nFileSizeHigh=0x0, nFileSizeLow=0x6b62, dwReserved0=0x0, dwReserved1=0x0, cFileName="FUNCRES.XLAM", cAlternateFileName="FUNCRE~1.XLA")) returned 1 [0045.462] FindNextFileW (in: hFindFile=0x381c80, lpFindFileData=0x31e47c | out: lpFindFileData=0x31e47c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6a1ecf00, ftCreationTime.dwHighDateTime=0x1cac1f6, ftLastAccessTime.dwLowDateTime=0xfa64b3d0, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0x6a1ecf00, ftLastWriteTime.dwHighDateTime=0x1cac1f6, nFileSizeHigh=0x0, nFileSizeLow=0xcf2b, dwReserved0=0x0, dwReserved1=0x0, cFileName="PROCDB.XLAM", cAlternateFileName="PROCDB~1.XLA")) returned 1 [0045.462] FindNextFileW (in: hFindFile=0x381c80, lpFindFileData=0x31e47c | out: lpFindFileData=0x31e47c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6a1ecf00, ftCreationTime.dwHighDateTime=0x1cac1f6, ftLastAccessTime.dwLowDateTime=0xfa64b3d0, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0x6a1ecf00, ftLastWriteTime.dwHighDateTime=0x1cac1f6, nFileSizeHigh=0x0, nFileSizeLow=0xcf2b, dwReserved0=0x0, dwReserved1=0x0, cFileName="PROCDB.XLAM", cAlternateFileName="PROCDB~1.XLA")) returned 0 [0045.462] FindClose (in: hFindFile=0x381c80 | out: hFindFile=0x381c80) returned 1 [0045.463] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e704) returned 1 [0045.463] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e710) returned 1 [0045.463] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e744) returned 1 [0045.463] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Library\\SOLVER", nBufferLength=0x105, lpBuffer=0x31e24c, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\Office14\\Library\\SOLVER", lpFilePart=0x0) returned 0x39 [0045.463] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Library\\SOLVER\\", nBufferLength=0x105, lpBuffer=0x31e220, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\Office14\\Library\\SOLVER\\", lpFilePart=0x0) returned 0x3a [0045.463] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Library\\SOLVER\\*", lpFindFileData=0x31e46c | out: lpFindFileData=0x31e46c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfa1ae930, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xfa671530, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xfa671530, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x381c80 [0045.464] FindNextFileW (in: hFindFile=0x381c80, lpFindFileData=0x31e47c | out: lpFindFileData=0x31e47c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfa1ae930, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xfa671530, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xfa671530, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0045.464] FindNextFileW (in: hFindFile=0x381c80, lpFindFileData=0x31e47c | out: lpFindFileData=0x31e47c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6b4ffc00, ftCreationTime.dwHighDateTime=0x1cac1f6, ftLastAccessTime.dwLowDateTime=0xfa671530, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0x6b4ffc00, ftLastWriteTime.dwHighDateTime=0x1cac1f6, nFileSizeHigh=0x0, nFileSizeLow=0x6c340, dwReserved0=0x0, dwReserved1=0x0, cFileName="SOLVER.XLAM", cAlternateFileName="SOLVER~1.XLA")) returned 1 [0045.464] FindNextFileW (in: hFindFile=0x381c80, lpFindFileData=0x31e47c | out: lpFindFileData=0x31e47c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6a1ecf00, ftCreationTime.dwHighDateTime=0x1cac1f6, ftLastAccessTime.dwLowDateTime=0xfa671530, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0x6a1ecf00, ftLastWriteTime.dwHighDateTime=0x1cac1f6, nFileSizeHigh=0x0, nFileSizeLow=0x36158, dwReserved0=0x0, dwReserved1=0x0, cFileName="SOLVER32.DLL", cAlternateFileName="")) returned 1 [0045.464] FindNextFileW (in: hFindFile=0x381c80, lpFindFileData=0x31e47c | out: lpFindFileData=0x31e47c*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0045.464] FindClose (in: hFindFile=0x381c80 | out: hFindFile=0x381c80) returned 1 [0045.464] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e704) returned 1 [0045.464] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e710) returned 1 [0045.464] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e744) returned 1 [0045.464] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Library\\SOLVER", nBufferLength=0x105, lpBuffer=0x31e24c, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\Office14\\Library\\SOLVER", lpFilePart=0x0) returned 0x39 [0045.464] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Library\\SOLVER\\", nBufferLength=0x105, lpBuffer=0x31e220, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\Office14\\Library\\SOLVER\\", lpFilePart=0x0) returned 0x3a [0045.464] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Library\\SOLVER\\*", lpFindFileData=0x31e46c | out: lpFindFileData=0x31e46c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfa1ae930, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xfa671530, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xfa671530, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x381c80 [0045.465] FindNextFileW (in: hFindFile=0x381c80, lpFindFileData=0x31e47c | out: lpFindFileData=0x31e47c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfa1ae930, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xfa671530, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xfa671530, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0045.465] FindNextFileW (in: hFindFile=0x381c80, lpFindFileData=0x31e47c | out: lpFindFileData=0x31e47c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6b4ffc00, ftCreationTime.dwHighDateTime=0x1cac1f6, ftLastAccessTime.dwLowDateTime=0xfa671530, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0x6b4ffc00, ftLastWriteTime.dwHighDateTime=0x1cac1f6, nFileSizeHigh=0x0, nFileSizeLow=0x6c340, dwReserved0=0x0, dwReserved1=0x0, cFileName="SOLVER.XLAM", cAlternateFileName="SOLVER~1.XLA")) returned 1 [0045.465] FindNextFileW (in: hFindFile=0x381c80, lpFindFileData=0x31e47c | out: lpFindFileData=0x31e47c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6a1ecf00, ftCreationTime.dwHighDateTime=0x1cac1f6, ftLastAccessTime.dwLowDateTime=0xfa671530, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0x6a1ecf00, ftLastWriteTime.dwHighDateTime=0x1cac1f6, nFileSizeHigh=0x0, nFileSizeLow=0x36158, dwReserved0=0x0, dwReserved1=0x0, cFileName="SOLVER32.DLL", cAlternateFileName="")) returned 1 [0045.465] FindNextFileW (in: hFindFile=0x381c80, lpFindFileData=0x31e47c | out: lpFindFileData=0x31e47c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6a1ecf00, ftCreationTime.dwHighDateTime=0x1cac1f6, ftLastAccessTime.dwLowDateTime=0xfa671530, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0x6a1ecf00, ftLastWriteTime.dwHighDateTime=0x1cac1f6, nFileSizeHigh=0x0, nFileSizeLow=0x36158, dwReserved0=0x0, dwReserved1=0x0, cFileName="SOLVER32.DLL", cAlternateFileName="")) returned 0 [0045.465] FindClose (in: hFindFile=0x381c80 | out: hFindFile=0x381c80) returned 1 [0045.465] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e704) returned 1 [0045.465] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e710) returned 1 [0045.465] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e7bc) returned 1 [0045.465] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\MEDIA", nBufferLength=0x105, lpBuffer=0x31e2c4, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\Office14\\MEDIA", lpFilePart=0x0) returned 0x30 [0045.465] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\MEDIA\\", nBufferLength=0x105, lpBuffer=0x31e298, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\Office14\\MEDIA\\", lpFilePart=0x0) returned 0x31 [0045.465] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\MEDIA\\*", lpFindFileData=0x31e4e4 | out: lpFindFileData=0x31e4e4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x51a15810, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x708e7550, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x708e7550, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x381c80 [0045.468] FindNextFileW (in: hFindFile=0x381c80, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x51a15810, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x708e7550, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x708e7550, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0045.469] FindNextFileW (in: hFindFile=0x381c80, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb796bf00, ftCreationTime.dwHighDateTime=0x1bd8ab7, ftLastAccessTime.dwLowDateTime=0x5ebdaad0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xb796bf00, ftLastWriteTime.dwHighDateTime=0x1bd8ab7, nFileSizeHigh=0x0, nFileSizeLow=0x6daa, dwReserved0=0x0, dwReserved1=0x0, cFileName="APPLAUSE.WAV", cAlternateFileName="")) returned 1 [0045.469] FindNextFileW (in: hFindFile=0x381c80, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xdb46b000, ftCreationTime.dwHighDateTime=0x1bfbeee, ftLastAccessTime.dwLowDateTime=0x5ed57890, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xdb46b000, ftLastWriteTime.dwHighDateTime=0x1bfbeee, nFileSizeHigh=0x0, nFileSizeLow=0x59f6, dwReserved0=0x0, dwReserved1=0x0, cFileName="ARROW.WAV", cAlternateFileName="")) returned 1 [0045.469] FindNextFileW (in: hFindFile=0x381c80, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x90776900, ftCreationTime.dwHighDateTime=0x1bfbeeb, ftLastAccessTime.dwLowDateTime=0x51a15810, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x90776900, ftLastWriteTime.dwHighDateTime=0x1bfbeeb, nFileSizeHigh=0x0, nFileSizeLow=0x2f676, dwReserved0=0x0, dwReserved1=0x0, cFileName="BOMB.WAV", cAlternateFileName="")) returned 1 [0045.469] FindNextFileW (in: hFindFile=0x381c80, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x106db200, ftCreationTime.dwHighDateTime=0x1bfc6e8, ftLastAccessTime.dwLowDateTime=0x6003c730, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x106db200, ftLastWriteTime.dwHighDateTime=0x1bfc6e8, nFileSizeHigh=0x0, nFileSizeLow=0x10c2, dwReserved0=0x0, dwReserved1=0x0, cFileName="BREEZE.WAV", cAlternateFileName="")) returned 1 [0045.469] FindNextFileW (in: hFindFile=0x381c80, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1b50b600, ftCreationTime.dwHighDateTime=0x1bc8d47, ftLastAccessTime.dwLowDateTime=0x51c2ab50, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x1b50b600, ftLastWriteTime.dwHighDateTime=0x1bc8d47, nFileSizeHigh=0x0, nFileSizeLow=0x1594, dwReserved0=0x0, dwReserved1=0x0, cFileName="CAMERA.WAV", cAlternateFileName="")) returned 1 [0045.469] FindNextFileW (in: hFindFile=0x381c80, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1b50b600, ftCreationTime.dwHighDateTime=0x1bc8d47, ftLastAccessTime.dwLowDateTime=0x51c50cb0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x1b50b600, ftLastWriteTime.dwHighDateTime=0x1bc8d47, nFileSizeHigh=0x0, nFileSizeLow=0x1d7f, dwReserved0=0x0, dwReserved1=0x0, cFileName="CASHREG.WAV", cAlternateFileName="")) returned 1 [0045.469] FindNextFileW (in: hFindFile=0x381c80, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb796bf00, ftCreationTime.dwHighDateTime=0x1bd8ab7, ftLastAccessTime.dwLowDateTime=0x51c76e10, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xb796bf00, ftLastWriteTime.dwHighDateTime=0x1bd8ab7, nFileSizeHigh=0x0, nFileSizeLow=0x91be, dwReserved0=0x0, dwReserved1=0x0, cFileName="CHIMES.WAV", cAlternateFileName="")) returned 1 [0045.469] FindNextFileW (in: hFindFile=0x381c80, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xffbd3c00, ftCreationTime.dwHighDateTime=0x1bfc6e7, ftLastAccessTime.dwLowDateTime=0x51c76e10, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xffbd3c00, ftLastWriteTime.dwHighDateTime=0x1bfc6e7, nFileSizeHigh=0x0, nFileSizeLow=0x268, dwReserved0=0x0, dwReserved1=0x0, cFileName="CLICK.WAV", cAlternateFileName="")) returned 1 [0045.469] FindNextFileW (in: hFindFile=0x381c80, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xef0cc600, ftCreationTime.dwHighDateTime=0x1bfc6e7, ftLastAccessTime.dwLowDateTime=0x51c76e10, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xef0cc600, ftLastWriteTime.dwHighDateTime=0x1bfc6e7, nFileSizeHigh=0x0, nFileSizeLow=0x15bc, dwReserved0=0x0, dwReserved1=0x0, cFileName="COIN.WAV", cAlternateFileName="")) returned 1 [0045.470] FindNextFileW (in: hFindFile=0x381c80, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1b50b600, ftCreationTime.dwHighDateTime=0x1bc8d47, ftLastAccessTime.dwLowDateTime=0x607d2d50, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x1b50b600, ftLastWriteTime.dwHighDateTime=0x1bc8d47, nFileSizeHigh=0x0, nFileSizeLow=0x4be2, dwReserved0=0x0, dwReserved1=0x0, cFileName="DRUMROLL.WAV", cAlternateFileName="")) returned 1 [0045.470] FindNextFileW (in: hFindFile=0x381c80, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1b50b600, ftCreationTime.dwHighDateTime=0x1bc8d47, ftLastAccessTime.dwLowDateTime=0x60af2a30, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x1b50b600, ftLastWriteTime.dwHighDateTime=0x1bc8d47, nFileSizeHigh=0x0, nFileSizeLow=0x5c20, dwReserved0=0x0, dwReserved1=0x0, cFileName="EXPLODE.WAV", cAlternateFileName="")) returned 1 [0045.470] FindNextFileW (in: hFindFile=0x381c80, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb836b000, ftCreationTime.dwHighDateTime=0x1bfc6e7, ftLastAccessTime.dwLowDateTime=0x53822dd0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xb836b000, ftLastWriteTime.dwHighDateTime=0x1bfc6e7, nFileSizeHigh=0x0, nFileSizeLow=0xfbc, dwReserved0=0x0, dwReserved1=0x0, cFileName="HAMMER.WAV", cAlternateFileName="")) returned 1 [0045.470] FindNextFileW (in: hFindFile=0x381c80, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1b50b600, ftCreationTime.dwHighDateTime=0x1bc8d47, ftLastAccessTime.dwLowDateTime=0x66220ff0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x1b50b600, ftLastWriteTime.dwHighDateTime=0x1bc8d47, nFileSizeHigh=0x0, nFileSizeLow=0x72d, dwReserved0=0x0, dwReserved1=0x0, cFileName="LASER.WAV", cAlternateFileName="")) returned 1 [0045.470] FindNextFileW (in: hFindFile=0x381c80, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf4b5dc00, ftCreationTime.dwHighDateTime=0x1bfc6e6, ftLastAccessTime.dwLowDateTime=0x5a7913b0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xf4b5dc00, ftLastWriteTime.dwHighDateTime=0x1bfc6e6, nFileSizeHigh=0x0, nFileSizeLow=0x3d84, dwReserved0=0x0, dwReserved1=0x0, cFileName="PUSH.WAV", cAlternateFileName="")) returned 1 [0045.470] FindNextFileW (in: hFindFile=0x381c80, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3eba3e00, ftCreationTime.dwHighDateTime=0x1bfa2b0, ftLastAccessTime.dwLowDateTime=0x5ac7a110, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x3eba3e00, ftLastWriteTime.dwHighDateTime=0x1bfa2b0, nFileSizeHigh=0x0, nFileSizeLow=0x1664, dwReserved0=0x0, dwReserved1=0x0, cFileName="SUCTION.WAV", cAlternateFileName="")) returned 1 [0045.470] FindNextFileW (in: hFindFile=0x381c80, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb796bf00, ftCreationTime.dwHighDateTime=0x1bd8ab7, ftLastAccessTime.dwLowDateTime=0x6d56d990, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xb796bf00, ftLastWriteTime.dwHighDateTime=0x1bd8ab7, nFileSizeHigh=0x0, nFileSizeLow=0x121c, dwReserved0=0x0, dwReserved1=0x0, cFileName="TYPE.WAV", cAlternateFileName="")) returned 1 [0045.470] FindNextFileW (in: hFindFile=0x381c80, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xecdb8800, ftCreationTime.dwHighDateTime=0x1bfbeed, ftLastAccessTime.dwLowDateTime=0x7071e4d0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xecdb8800, ftLastWriteTime.dwHighDateTime=0x1bfbeed, nFileSizeHigh=0x0, nFileSizeLow=0x35c6, dwReserved0=0x0, dwReserved1=0x0, cFileName="VOLTAGE.WAV", cAlternateFileName="")) returned 1 [0045.470] FindNextFileW (in: hFindFile=0x381c80, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1b50b600, ftCreationTime.dwHighDateTime=0x1bc8d47, ftLastAccessTime.dwLowDateTime=0x5e5c1270, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x1b50b600, ftLastWriteTime.dwHighDateTime=0x1bc8d47, nFileSizeHigh=0x0, nFileSizeLow=0x6de, dwReserved0=0x0, dwReserved1=0x0, cFileName="WHOOSH.WAV", cAlternateFileName="")) returned 1 [0045.470] FindNextFileW (in: hFindFile=0x381c80, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xdcde5800, ftCreationTime.dwHighDateTime=0x1bfc6e6, ftLastAccessTime.dwLowDateTime=0x708e7550, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xdcde5800, ftLastWriteTime.dwHighDateTime=0x1bfc6e6, nFileSizeHigh=0x0, nFileSizeLow=0x2b84, dwReserved0=0x0, dwReserved1=0x0, cFileName="WIND.WAV", cAlternateFileName="")) returned 1 [0045.471] FindNextFileW (in: hFindFile=0x381c80, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0045.471] FindClose (in: hFindFile=0x381c80 | out: hFindFile=0x381c80) returned 1 [0045.471] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e77c) returned 1 [0045.471] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e788) returned 1 [0045.471] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e7bc) returned 1 [0045.471] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\MEDIA", nBufferLength=0x105, lpBuffer=0x31e2c4, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\Office14\\MEDIA", lpFilePart=0x0) returned 0x30 [0045.472] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\MEDIA\\", nBufferLength=0x105, lpBuffer=0x31e298, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\Office14\\MEDIA\\", lpFilePart=0x0) returned 0x31 [0045.472] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\MEDIA\\*", lpFindFileData=0x31e4e4 | out: lpFindFileData=0x31e4e4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x51a15810, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x708e7550, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x708e7550, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x381c80 [0045.472] FindNextFileW (in: hFindFile=0x381c80, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x51a15810, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x708e7550, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x708e7550, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0045.473] FindNextFileW (in: hFindFile=0x381c80, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb796bf00, ftCreationTime.dwHighDateTime=0x1bd8ab7, ftLastAccessTime.dwLowDateTime=0x5ebdaad0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xb796bf00, ftLastWriteTime.dwHighDateTime=0x1bd8ab7, nFileSizeHigh=0x0, nFileSizeLow=0x6daa, dwReserved0=0x0, dwReserved1=0x0, cFileName="APPLAUSE.WAV", cAlternateFileName="")) returned 1 [0045.473] FindNextFileW (in: hFindFile=0x381c80, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xdb46b000, ftCreationTime.dwHighDateTime=0x1bfbeee, ftLastAccessTime.dwLowDateTime=0x5ed57890, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xdb46b000, ftLastWriteTime.dwHighDateTime=0x1bfbeee, nFileSizeHigh=0x0, nFileSizeLow=0x59f6, dwReserved0=0x0, dwReserved1=0x0, cFileName="ARROW.WAV", cAlternateFileName="")) returned 1 [0045.473] FindNextFileW (in: hFindFile=0x381c80, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x90776900, ftCreationTime.dwHighDateTime=0x1bfbeeb, ftLastAccessTime.dwLowDateTime=0x51a15810, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x90776900, ftLastWriteTime.dwHighDateTime=0x1bfbeeb, nFileSizeHigh=0x0, nFileSizeLow=0x2f676, dwReserved0=0x0, dwReserved1=0x0, cFileName="BOMB.WAV", cAlternateFileName="")) returned 1 [0045.473] FindNextFileW (in: hFindFile=0x381c80, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x106db200, ftCreationTime.dwHighDateTime=0x1bfc6e8, ftLastAccessTime.dwLowDateTime=0x6003c730, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x106db200, ftLastWriteTime.dwHighDateTime=0x1bfc6e8, nFileSizeHigh=0x0, nFileSizeLow=0x10c2, dwReserved0=0x0, dwReserved1=0x0, cFileName="BREEZE.WAV", cAlternateFileName="")) returned 1 [0045.473] FindNextFileW (in: hFindFile=0x381c80, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1b50b600, ftCreationTime.dwHighDateTime=0x1bc8d47, ftLastAccessTime.dwLowDateTime=0x51c2ab50, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x1b50b600, ftLastWriteTime.dwHighDateTime=0x1bc8d47, nFileSizeHigh=0x0, nFileSizeLow=0x1594, dwReserved0=0x0, dwReserved1=0x0, cFileName="CAMERA.WAV", cAlternateFileName="")) returned 1 [0045.473] FindNextFileW (in: hFindFile=0x381c80, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1b50b600, ftCreationTime.dwHighDateTime=0x1bc8d47, ftLastAccessTime.dwLowDateTime=0x51c50cb0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x1b50b600, ftLastWriteTime.dwHighDateTime=0x1bc8d47, nFileSizeHigh=0x0, nFileSizeLow=0x1d7f, dwReserved0=0x0, dwReserved1=0x0, cFileName="CASHREG.WAV", cAlternateFileName="")) returned 1 [0045.473] FindNextFileW (in: hFindFile=0x381c80, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb796bf00, ftCreationTime.dwHighDateTime=0x1bd8ab7, ftLastAccessTime.dwLowDateTime=0x51c76e10, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xb796bf00, ftLastWriteTime.dwHighDateTime=0x1bd8ab7, nFileSizeHigh=0x0, nFileSizeLow=0x91be, dwReserved0=0x0, dwReserved1=0x0, cFileName="CHIMES.WAV", cAlternateFileName="")) returned 1 [0045.473] FindNextFileW (in: hFindFile=0x381c80, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xffbd3c00, ftCreationTime.dwHighDateTime=0x1bfc6e7, ftLastAccessTime.dwLowDateTime=0x51c76e10, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xffbd3c00, ftLastWriteTime.dwHighDateTime=0x1bfc6e7, nFileSizeHigh=0x0, nFileSizeLow=0x268, dwReserved0=0x0, dwReserved1=0x0, cFileName="CLICK.WAV", cAlternateFileName="")) returned 1 [0045.473] FindNextFileW (in: hFindFile=0x381c80, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xef0cc600, ftCreationTime.dwHighDateTime=0x1bfc6e7, ftLastAccessTime.dwLowDateTime=0x51c76e10, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xef0cc600, ftLastWriteTime.dwHighDateTime=0x1bfc6e7, nFileSizeHigh=0x0, nFileSizeLow=0x15bc, dwReserved0=0x0, dwReserved1=0x0, cFileName="COIN.WAV", cAlternateFileName="")) returned 1 [0045.473] FindNextFileW (in: hFindFile=0x381c80, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1b50b600, ftCreationTime.dwHighDateTime=0x1bc8d47, ftLastAccessTime.dwLowDateTime=0x607d2d50, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x1b50b600, ftLastWriteTime.dwHighDateTime=0x1bc8d47, nFileSizeHigh=0x0, nFileSizeLow=0x4be2, dwReserved0=0x0, dwReserved1=0x0, cFileName="DRUMROLL.WAV", cAlternateFileName="")) returned 1 [0045.474] FindNextFileW (in: hFindFile=0x381c80, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1b50b600, ftCreationTime.dwHighDateTime=0x1bc8d47, ftLastAccessTime.dwLowDateTime=0x60af2a30, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x1b50b600, ftLastWriteTime.dwHighDateTime=0x1bc8d47, nFileSizeHigh=0x0, nFileSizeLow=0x5c20, dwReserved0=0x0, dwReserved1=0x0, cFileName="EXPLODE.WAV", cAlternateFileName="")) returned 1 [0045.474] FindNextFileW (in: hFindFile=0x381c80, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb836b000, ftCreationTime.dwHighDateTime=0x1bfc6e7, ftLastAccessTime.dwLowDateTime=0x53822dd0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xb836b000, ftLastWriteTime.dwHighDateTime=0x1bfc6e7, nFileSizeHigh=0x0, nFileSizeLow=0xfbc, dwReserved0=0x0, dwReserved1=0x0, cFileName="HAMMER.WAV", cAlternateFileName="")) returned 1 [0045.474] FindNextFileW (in: hFindFile=0x381c80, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1b50b600, ftCreationTime.dwHighDateTime=0x1bc8d47, ftLastAccessTime.dwLowDateTime=0x66220ff0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x1b50b600, ftLastWriteTime.dwHighDateTime=0x1bc8d47, nFileSizeHigh=0x0, nFileSizeLow=0x72d, dwReserved0=0x0, dwReserved1=0x0, cFileName="LASER.WAV", cAlternateFileName="")) returned 1 [0045.474] FindNextFileW (in: hFindFile=0x381c80, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf4b5dc00, ftCreationTime.dwHighDateTime=0x1bfc6e6, ftLastAccessTime.dwLowDateTime=0x5a7913b0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xf4b5dc00, ftLastWriteTime.dwHighDateTime=0x1bfc6e6, nFileSizeHigh=0x0, nFileSizeLow=0x3d84, dwReserved0=0x0, dwReserved1=0x0, cFileName="PUSH.WAV", cAlternateFileName="")) returned 1 [0045.474] FindNextFileW (in: hFindFile=0x381c80, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3eba3e00, ftCreationTime.dwHighDateTime=0x1bfa2b0, ftLastAccessTime.dwLowDateTime=0x5ac7a110, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x3eba3e00, ftLastWriteTime.dwHighDateTime=0x1bfa2b0, nFileSizeHigh=0x0, nFileSizeLow=0x1664, dwReserved0=0x0, dwReserved1=0x0, cFileName="SUCTION.WAV", cAlternateFileName="")) returned 1 [0045.474] FindNextFileW (in: hFindFile=0x381c80, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb796bf00, ftCreationTime.dwHighDateTime=0x1bd8ab7, ftLastAccessTime.dwLowDateTime=0x6d56d990, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xb796bf00, ftLastWriteTime.dwHighDateTime=0x1bd8ab7, nFileSizeHigh=0x0, nFileSizeLow=0x121c, dwReserved0=0x0, dwReserved1=0x0, cFileName="TYPE.WAV", cAlternateFileName="")) returned 1 [0045.475] FindNextFileW (in: hFindFile=0x381c80, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xecdb8800, ftCreationTime.dwHighDateTime=0x1bfbeed, ftLastAccessTime.dwLowDateTime=0x7071e4d0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xecdb8800, ftLastWriteTime.dwHighDateTime=0x1bfbeed, nFileSizeHigh=0x0, nFileSizeLow=0x35c6, dwReserved0=0x0, dwReserved1=0x0, cFileName="VOLTAGE.WAV", cAlternateFileName="")) returned 1 [0045.475] FindNextFileW (in: hFindFile=0x381c80, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1b50b600, ftCreationTime.dwHighDateTime=0x1bc8d47, ftLastAccessTime.dwLowDateTime=0x5e5c1270, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x1b50b600, ftLastWriteTime.dwHighDateTime=0x1bc8d47, nFileSizeHigh=0x0, nFileSizeLow=0x6de, dwReserved0=0x0, dwReserved1=0x0, cFileName="WHOOSH.WAV", cAlternateFileName="")) returned 1 [0045.475] FindNextFileW (in: hFindFile=0x381c80, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xdcde5800, ftCreationTime.dwHighDateTime=0x1bfc6e6, ftLastAccessTime.dwLowDateTime=0x708e7550, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xdcde5800, ftLastWriteTime.dwHighDateTime=0x1bfc6e6, nFileSizeHigh=0x0, nFileSizeLow=0x2b84, dwReserved0=0x0, dwReserved1=0x0, cFileName="WIND.WAV", cAlternateFileName="")) returned 1 [0045.475] FindNextFileW (in: hFindFile=0x381c80, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xdcde5800, ftCreationTime.dwHighDateTime=0x1bfc6e6, ftLastAccessTime.dwLowDateTime=0x708e7550, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xdcde5800, ftLastWriteTime.dwHighDateTime=0x1bfc6e6, nFileSizeHigh=0x0, nFileSizeLow=0x2b84, dwReserved0=0x0, dwReserved1=0x0, cFileName="WIND.WAV", cAlternateFileName="")) returned 0 [0045.475] FindClose (in: hFindFile=0x381c80 | out: hFindFile=0x381c80) returned 1 [0045.476] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e77c) returned 1 [0045.476] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e788) returned 1 [0045.476] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e7bc) returned 1 [0045.476] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\OneNote", nBufferLength=0x105, lpBuffer=0x31e2c4, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\Office14\\OneNote", lpFilePart=0x0) returned 0x32 [0045.476] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\OneNote\\", nBufferLength=0x105, lpBuffer=0x31e298, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\Office14\\OneNote\\", lpFilePart=0x0) returned 0x33 [0045.476] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\OneNote\\*", lpFindFileData=0x31e4e4 | out: lpFindFileData=0x31e4e4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x50e7acd0, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x6c1f0570, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x6c1f0570, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x381c80 [0045.482] FindNextFileW (in: hFindFile=0x381c80, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x50e7acd0, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x6c1f0570, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x6c1f0570, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0045.482] FindNextFileW (in: hFindFile=0x381c80, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc5fd1300, ftCreationTime.dwHighDateTime=0x1c8e623, ftLastAccessTime.dwLowDateTime=0x6c1f0570, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xc5fd1300, ftLastWriteTime.dwHighDateTime=0x1c8e623, nFileSizeHigh=0x0, nFileSizeLow=0x1fa, dwReserved0=0x0, dwReserved1=0x0, cFileName="SendToOneNote-PipelineConfig.xml", cAlternateFileName="SENDTO~1.XML")) returned 1 [0045.482] FindNextFileW (in: hFindFile=0x381c80, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa7167100, ftCreationTime.dwHighDateTime=0x1c9d832, ftLastAccessTime.dwLowDateTime=0x598184b0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xa7167100, ftLastWriteTime.dwHighDateTime=0x1c9d832, nFileSizeHigh=0x0, nFileSizeLow=0x2580, dwReserved0=0x0, dwReserved1=0x0, cFileName="SendToOneNote.gpd", cAlternateFileName="SENDTO~1.GPD")) returned 1 [0045.482] FindNextFileW (in: hFindFile=0x381c80, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7d77db00, ftCreationTime.dwHighDateTime=0x1c8e25a, ftLastAccessTime.dwLowDateTime=0x6c1f0570, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x7d77db00, ftLastWriteTime.dwHighDateTime=0x1c8e25a, nFileSizeHigh=0x0, nFileSizeLow=0x7b, dwReserved0=0x0, dwReserved1=0x0, cFileName="SendToOneNote.ini", cAlternateFileName="SENDTO~1.INI")) returned 1 [0045.482] FindNextFileW (in: hFindFile=0x381c80, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xeb7e9d00, ftCreationTime.dwHighDateTime=0x1cacf2a, ftLastAccessTime.dwLowDateTime=0x5983e610, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xeb7e9d00, ftLastWriteTime.dwHighDateTime=0x1cacf2a, nFileSizeHigh=0x0, nFileSizeLow=0x1bf88, dwReserved0=0x0, dwReserved1=0x0, cFileName="SendToOneNOteFilter.dll", cAlternateFileName="SENDTO~1.DLL")) returned 1 [0045.482] FindNextFileW (in: hFindFile=0x381c80, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf5b7d200, ftCreationTime.dwHighDateTime=0x1c8edfe, ftLastAccessTime.dwLowDateTime=0x5983e610, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xf5b7d200, ftLastWriteTime.dwHighDateTime=0x1c8edfe, nFileSizeHigh=0x0, nFileSizeLow=0x51, dwReserved0=0x0, dwReserved1=0x0, cFileName="SendtoOneNoteFilter.gpd", cAlternateFileName="SENDTO~2.GPD")) returned 1 [0045.483] FindNextFileW (in: hFindFile=0x381c80, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2a1fd700, ftCreationTime.dwHighDateTime=0x1c8e624, ftLastAccessTime.dwLowDateTime=0x5983e610, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x2a1fd700, ftLastWriteTime.dwHighDateTime=0x1c8e624, nFileSizeHigh=0x0, nFileSizeLow=0x1ca2, dwReserved0=0x0, dwReserved1=0x0, cFileName="SendToOneNoteNames.gpd", cAlternateFileName="SENDTO~3.GPD")) returned 1 [0045.483] FindNextFileW (in: hFindFile=0x381c80, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xeb7e9d00, ftCreationTime.dwHighDateTime=0x1cacf2a, ftLastAccessTime.dwLowDateTime=0x6c2166d0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xeb7e9d00, ftLastWriteTime.dwHighDateTime=0x1cacf2a, nFileSizeHigh=0x0, nFileSizeLow=0xeb80, dwReserved0=0x0, dwReserved1=0x0, cFileName="SendToOneNoteUI.dll", cAlternateFileName="SENDTO~2.DLL")) returned 1 [0045.483] FindNextFileW (in: hFindFile=0x381c80, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0045.483] FindClose (in: hFindFile=0x381c80 | out: hFindFile=0x381c80) returned 1 [0045.484] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e77c) returned 1 [0045.484] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e788) returned 1 [0045.484] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e7bc) returned 1 [0045.484] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\OneNote", nBufferLength=0x105, lpBuffer=0x31e2c4, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\Office14\\OneNote", lpFilePart=0x0) returned 0x32 [0045.484] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\OneNote\\", nBufferLength=0x105, lpBuffer=0x31e298, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\Office14\\OneNote\\", lpFilePart=0x0) returned 0x33 [0045.484] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\OneNote\\*", lpFindFileData=0x31e4e4 | out: lpFindFileData=0x31e4e4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x50e7acd0, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x6c1f0570, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x6c1f0570, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x381c80 [0045.485] FindNextFileW (in: hFindFile=0x381c80, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x50e7acd0, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x6c1f0570, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x6c1f0570, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0045.485] FindNextFileW (in: hFindFile=0x381c80, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc5fd1300, ftCreationTime.dwHighDateTime=0x1c8e623, ftLastAccessTime.dwLowDateTime=0x6c1f0570, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xc5fd1300, ftLastWriteTime.dwHighDateTime=0x1c8e623, nFileSizeHigh=0x0, nFileSizeLow=0x1fa, dwReserved0=0x0, dwReserved1=0x0, cFileName="SendToOneNote-PipelineConfig.xml", cAlternateFileName="SENDTO~1.XML")) returned 1 [0045.485] FindNextFileW (in: hFindFile=0x381c80, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa7167100, ftCreationTime.dwHighDateTime=0x1c9d832, ftLastAccessTime.dwLowDateTime=0x598184b0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xa7167100, ftLastWriteTime.dwHighDateTime=0x1c9d832, nFileSizeHigh=0x0, nFileSizeLow=0x2580, dwReserved0=0x0, dwReserved1=0x0, cFileName="SendToOneNote.gpd", cAlternateFileName="SENDTO~1.GPD")) returned 1 [0045.485] FindNextFileW (in: hFindFile=0x381c80, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7d77db00, ftCreationTime.dwHighDateTime=0x1c8e25a, ftLastAccessTime.dwLowDateTime=0x6c1f0570, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x7d77db00, ftLastWriteTime.dwHighDateTime=0x1c8e25a, nFileSizeHigh=0x0, nFileSizeLow=0x7b, dwReserved0=0x0, dwReserved1=0x0, cFileName="SendToOneNote.ini", cAlternateFileName="SENDTO~1.INI")) returned 1 [0045.485] FindNextFileW (in: hFindFile=0x381c80, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xeb7e9d00, ftCreationTime.dwHighDateTime=0x1cacf2a, ftLastAccessTime.dwLowDateTime=0x5983e610, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xeb7e9d00, ftLastWriteTime.dwHighDateTime=0x1cacf2a, nFileSizeHigh=0x0, nFileSizeLow=0x1bf88, dwReserved0=0x0, dwReserved1=0x0, cFileName="SendToOneNOteFilter.dll", cAlternateFileName="SENDTO~1.DLL")) returned 1 [0045.485] FindNextFileW (in: hFindFile=0x381c80, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf5b7d200, ftCreationTime.dwHighDateTime=0x1c8edfe, ftLastAccessTime.dwLowDateTime=0x5983e610, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xf5b7d200, ftLastWriteTime.dwHighDateTime=0x1c8edfe, nFileSizeHigh=0x0, nFileSizeLow=0x51, dwReserved0=0x0, dwReserved1=0x0, cFileName="SendtoOneNoteFilter.gpd", cAlternateFileName="SENDTO~2.GPD")) returned 1 [0045.485] FindNextFileW (in: hFindFile=0x381c80, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2a1fd700, ftCreationTime.dwHighDateTime=0x1c8e624, ftLastAccessTime.dwLowDateTime=0x5983e610, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x2a1fd700, ftLastWriteTime.dwHighDateTime=0x1c8e624, nFileSizeHigh=0x0, nFileSizeLow=0x1ca2, dwReserved0=0x0, dwReserved1=0x0, cFileName="SendToOneNoteNames.gpd", cAlternateFileName="SENDTO~3.GPD")) returned 1 [0045.485] FindNextFileW (in: hFindFile=0x381c80, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xeb7e9d00, ftCreationTime.dwHighDateTime=0x1cacf2a, ftLastAccessTime.dwLowDateTime=0x6c2166d0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xeb7e9d00, ftLastWriteTime.dwHighDateTime=0x1cacf2a, nFileSizeHigh=0x0, nFileSizeLow=0xeb80, dwReserved0=0x0, dwReserved1=0x0, cFileName="SendToOneNoteUI.dll", cAlternateFileName="SENDTO~2.DLL")) returned 1 [0045.486] FindNextFileW (in: hFindFile=0x381c80, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xeb7e9d00, ftCreationTime.dwHighDateTime=0x1cacf2a, ftLastAccessTime.dwLowDateTime=0x6c2166d0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xeb7e9d00, ftLastWriteTime.dwHighDateTime=0x1cacf2a, nFileSizeHigh=0x0, nFileSizeLow=0xeb80, dwReserved0=0x0, dwReserved1=0x0, cFileName="SendToOneNoteUI.dll", cAlternateFileName="SENDTO~2.DLL")) returned 0 [0045.486] FindClose (in: hFindFile=0x381c80 | out: hFindFile=0x381c80) returned 1 [0045.486] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e77c) returned 1 [0045.486] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e788) returned 1 [0045.486] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\OneNote\\SendToOneNote-PipelineConfig.xml", nBufferLength=0x105, lpBuffer=0x31e194, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\Office14\\OneNote\\SendToOneNote-PipelineConfig.xml", lpFilePart=0x0) returned 0x53 [0045.487] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e688) returned 1 [0045.487] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\OneNote\\SendToOneNote-PipelineConfig.xml" (normalized: "c:\\program files\\microsoft office\\office14\\onenote\\sendtoonenote-pipelineconfig.xml"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x274 [0045.488] GetFileType (hFile=0x274) returned 0x1 [0045.488] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e684) returned 1 [0045.488] GetFileType (hFile=0x274) returned 0x1 [0045.488] GetFileSize (in: hFile=0x274, lpFileSizeHigh=0x31e790 | out: lpFileSizeHigh=0x31e790*=0x0) returned 0x1fa [0045.488] ReadFile (in: hFile=0x274, lpBuffer=0x26e4788, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x31e73c, lpOverlapped=0x0 | out: lpBuffer=0x26e4788*, lpNumberOfBytesRead=0x31e73c*=0x1fa, lpOverlapped=0x0) returned 1 [0045.489] CloseHandle (hObject=0x274) returned 1 [0045.527] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\OneNote\\SendToOneNote-PipelineConfig.xml", nBufferLength=0x105, lpBuffer=0x31e180, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\Office14\\OneNote\\SendToOneNote-PipelineConfig.xml", lpFilePart=0x0) returned 0x53 [0045.527] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e674) returned 1 [0045.527] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\OneNote\\SendToOneNote-PipelineConfig.xml" (normalized: "c:\\program files\\microsoft office\\office14\\onenote\\sendtoonenote-pipelineconfig.xml"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x274 [0045.528] GetFileType (hFile=0x274) returned 0x1 [0045.528] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e670) returned 1 [0045.528] GetFileType (hFile=0x274) returned 0x1 [0045.528] WriteFile (in: hFile=0x274, lpBuffer=0x27330e0*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x31e704, lpOverlapped=0x0 | out: lpBuffer=0x27330e0*, lpNumberOfBytesWritten=0x31e704*=0x200, lpOverlapped=0x0) returned 1 [0045.530] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\OneNote\\SendToOneNote-PipelineConfig.xml", nBufferLength=0x105, lpBuffer=0x31e2b4, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\Office14\\OneNote\\SendToOneNote-PipelineConfig.xml", lpFilePart=0x0) returned 0x53 [0045.530] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\OneNote\\SendToOneNote-PipelineConfig.xml", nBufferLength=0x105, lpBuffer=0x31e2b4, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\Office14\\OneNote\\SendToOneNote-PipelineConfig.xml", lpFilePart=0x0) returned 0x53 [0045.530] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e714) returned 1 [0045.530] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\OneNote\\SendToOneNote-PipelineConfig.xml" (normalized: "c:\\program files\\microsoft office\\office14\\onenote\\sendtoonenote-pipelineconfig.xml"), fInfoLevelId=0x0, lpFileInformation=0x31e790 | out: lpFileInformation=0x31e790*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc5fd1300, ftCreationTime.dwHighDateTime=0x1c8e623, ftLastAccessTime.dwLowDateTime=0x6c1f0570, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xfe96f140, ftLastWriteTime.dwHighDateTime=0x1d6eb7e, nFileSizeHigh=0x0, nFileSizeLow=0x200)) returned 1 [0045.530] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e710) returned 1 [0045.530] MoveFileW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\Office14\\OneNote\\SendToOneNote-PipelineConfig.xml" (normalized: "c:\\program files\\microsoft office\\office14\\onenote\\sendtoonenote-pipelineconfig.xml"), lpNewFileName="C:\\Program Files\\Microsoft Office\\Office14\\OneNote\\SendToOneNote-PipelineConfig.xml" (normalized: "c:\\program files\\microsoft office\\office14\\onenote\\sendtoonenote-pipelineconfig.xml")) returned 1 [0045.531] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e7bc) returned 1 [0045.531] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\OutlookAutoDiscover", nBufferLength=0x105, lpBuffer=0x31e2c4, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\Office14\\OutlookAutoDiscover", lpFilePart=0x0) returned 0x3e [0045.531] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\OutlookAutoDiscover\\", nBufferLength=0x105, lpBuffer=0x31e298, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\Office14\\OutlookAutoDiscover\\", lpFilePart=0x0) returned 0x3f [0045.531] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\OutlookAutoDiscover\\*", lpFindFileData=0x31e4e4 | out: lpFindFileData=0x31e4e4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5133d8d0, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x70c9f7b0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x70c9f7b0, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x381b40 [0045.533] FindNextFileW (in: hFindFile=0x381b40, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5133d8d0, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x70c9f7b0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x70c9f7b0, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0045.535] FindNextFileW (in: hFindFile=0x381b40, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xae54e300, ftCreationTime.dwHighDateTime=0x1c6e74b, ftLastAccessTime.dwLowDateTime=0x5133d8d0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xae54e300, ftLastWriteTime.dwHighDateTime=0x1c6e74b, nFileSizeHigh=0x0, nFileSizeLow=0x330, dwReserved0=0x0, dwReserved1=0x0, cFileName="AMERITECH.NET.XML", cAlternateFileName="AMERIT~1.XML")) returned 1 [0045.535] FindNextFileW (in: hFindFile=0x381b40, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xae54e300, ftCreationTime.dwHighDateTime=0x1c6e74b, ftLastAccessTime.dwLowDateTime=0x600aeb50, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xae54e300, ftLastWriteTime.dwHighDateTime=0x1c6e74b, nFileSizeHigh=0x0, nFileSizeLow=0x327, dwReserved0=0x0, dwReserved1=0x0, cFileName="BTINTERNET.NET.XML", cAlternateFileName="BTINTE~1.XML")) returned 1 [0045.535] FindNextFileW (in: hFindFile=0x381b40, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xae54e300, ftCreationTime.dwHighDateTime=0x1c6e74b, ftLastAccessTime.dwLowDateTime=0x51b201b0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xae54e300, ftLastWriteTime.dwHighDateTime=0x1c6e74b, nFileSizeHigh=0x0, nFileSizeLow=0x327, dwReserved0=0x0, dwReserved1=0x0, cFileName="BTOPENWORLD.COM.XML", cAlternateFileName="BTOPEN~1.XML")) returned 1 [0045.535] FindNextFileW (in: hFindFile=0x381b40, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xae54e300, ftCreationTime.dwHighDateTime=0x1c6e74b, ftLastAccessTime.dwLowDateTime=0x52837ab0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xae54e300, ftLastWriteTime.dwHighDateTime=0x1c6e74b, nFileSizeHigh=0x0, nFileSizeLow=0x328, dwReserved0=0x0, dwReserved1=0x0, cFileName="FLASH.NET.XML", cAlternateFileName="FLASHN~1.XML")) returned 1 [0045.535] FindNextFileW (in: hFindFile=0x381b40, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xae54e300, ftCreationTime.dwHighDateTime=0x1c6e74b, ftLastAccessTime.dwLowDateTime=0x6a513ab0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xae54e300, ftLastWriteTime.dwHighDateTime=0x1c6e74b, nFileSizeHigh=0x0, nFileSizeLow=0x332, dwReserved0=0x0, dwReserved1=0x0, cFileName="NL.ROGERS.COM.XML", cAlternateFileName="NLROGE~1.XML")) returned 1 [0045.535] FindNextFileW (in: hFindFile=0x381b40, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xae54e300, ftCreationTime.dwHighDateTime=0x1c6e74b, ftLastAccessTime.dwLowDateTime=0x6a87fa50, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xae54e300, ftLastWriteTime.dwHighDateTime=0x1c6e74b, nFileSizeHigh=0x0, nFileSizeLow=0x32a, dwReserved0=0x0, dwReserved1=0x0, cFileName="NVBELL.NET.XML", cAlternateFileName="NVBELL~1.XML")) returned 1 [0045.535] FindNextFileW (in: hFindFile=0x381b40, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xae54e300, ftCreationTime.dwHighDateTime=0x1c6e74b, ftLastAccessTime.dwLowDateTime=0x6cd64f50, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xae54e300, ftLastWriteTime.dwHighDateTime=0x1c6e74b, nFileSizeHigh=0x0, nFileSizeLow=0x32c, dwReserved0=0x0, dwReserved1=0x0, cFileName="PACBELL.NET.XML", cAlternateFileName="PACBEL~1.XML")) returned 1 [0045.535] FindNextFileW (in: hFindFile=0x381b40, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xae54e300, ftCreationTime.dwHighDateTime=0x1c6e74b, ftLastAccessTime.dwLowDateTime=0x5a71ef90, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xae54e300, ftLastWriteTime.dwHighDateTime=0x1c6e74b, nFileSizeHigh=0x0, nFileSizeLow=0x32c, dwReserved0=0x0, dwReserved1=0x0, cFileName="PRODIGY.NET.XML", cAlternateFileName="PRODIG~1.XML")) returned 1 [0045.535] FindNextFileW (in: hFindFile=0x381b40, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xae54e300, ftCreationTime.dwHighDateTime=0x1c6e74b, ftLastAccessTime.dwLowDateTime=0x6d227b50, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xae54e300, ftLastWriteTime.dwHighDateTime=0x1c6e74b, nFileSizeHigh=0x0, nFileSizeLow=0x332, dwReserved0=0x0, dwReserved1=0x0, cFileName="ROGERS.COM.XML", cAlternateFileName="ROGERS~1.XML")) returned 1 [0045.535] FindNextFileW (in: hFindFile=0x381b40, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xae54e300, ftCreationTime.dwHighDateTime=0x1c6e74b, ftLastAccessTime.dwLowDateTime=0x6d24dcb0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xae54e300, ftLastWriteTime.dwHighDateTime=0x1c6e74b, nFileSizeHigh=0x0, nFileSizeLow=0x330, dwReserved0=0x0, dwReserved1=0x0, cFileName="SBCGLOBAL.NET.XML", cAlternateFileName="SBCGLO~1.XML")) returned 1 [0045.535] FindNextFileW (in: hFindFile=0x381b40, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xae54e300, ftCreationTime.dwHighDateTime=0x1c6e74b, ftLastAccessTime.dwLowDateTime=0x6d2e6230, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xae54e300, ftLastWriteTime.dwHighDateTime=0x1c6e74b, nFileSizeHigh=0x0, nFileSizeLow=0x326, dwReserved0=0x0, dwReserved1=0x0, cFileName="SNET.NET.XML", cAlternateFileName="SNETNE~1.XML")) returned 1 [0045.535] FindNextFileW (in: hFindFile=0x381b40, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xae54e300, ftCreationTime.dwHighDateTime=0x1c6e74b, ftLastAccessTime.dwLowDateTime=0x6d416d30, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xae54e300, ftLastWriteTime.dwHighDateTime=0x1c6e74b, nFileSizeHigh=0x0, nFileSizeLow=0x32a, dwReserved0=0x0, dwReserved1=0x0, cFileName="SWBELL.NET.XML", cAlternateFileName="SWBELL~1.XML")) returned 1 [0045.535] FindNextFileW (in: hFindFile=0x381b40, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xae54e300, ftCreationTime.dwHighDateTime=0x1c6e74b, ftLastAccessTime.dwLowDateTime=0x5aca0270, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xae54e300, ftLastWriteTime.dwHighDateTime=0x1c6e74b, nFileSizeHigh=0x0, nFileSizeLow=0x327, dwReserved0=0x0, dwReserved1=0x0, cFileName="TALK21.COM.XML", cAlternateFileName="TALK21~1.XML")) returned 1 [0045.535] FindNextFileW (in: hFindFile=0x381b40, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xae54e300, ftCreationTime.dwHighDateTime=0x1c6e74b, ftLastAccessTime.dwLowDateTime=0x7084efd0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xae54e300, ftLastWriteTime.dwHighDateTime=0x1c6e74b, nFileSizeHigh=0x0, nFileSizeLow=0x326, dwReserved0=0x0, dwReserved1=0x0, cFileName="WANS.NET.XML", cAlternateFileName="WANSNE~1.XML")) returned 1 [0045.535] FindNextFileW (in: hFindFile=0x381b40, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xae54e300, ftCreationTime.dwHighDateTime=0x1c6e74b, ftLastAccessTime.dwLowDateTime=0x5e86eb30, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xae54e300, ftLastWriteTime.dwHighDateTime=0x1c6e74b, nFileSizeHigh=0x0, nFileSizeLow=0x324, dwReserved0=0x0, dwReserved1=0x0, cFileName="YAHOO.CA.XML", cAlternateFileName="YAHOOC~2.XML")) returned 1 [0045.536] FindNextFileW (in: hFindFile=0x381b40, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xae54e300, ftCreationTime.dwHighDateTime=0x1c6e74b, ftLastAccessTime.dwLowDateTime=0x70c79650, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xae54e300, ftLastWriteTime.dwHighDateTime=0x1c6e74b, nFileSizeHigh=0x0, nFileSizeLow=0x32a, dwReserved0=0x0, dwReserved1=0x0, cFileName="YAHOO.CO.ID.XML", cAlternateFileName="YA6C44~1.XML")) returned 1 [0045.536] FindNextFileW (in: hFindFile=0x381b40, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xae54e300, ftCreationTime.dwHighDateTime=0x1c6e74b, ftLastAccessTime.dwLowDateTime=0x5e86eb30, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xae54e300, ftLastWriteTime.dwHighDateTime=0x1c6e74b, nFileSizeHigh=0x0, nFileSizeLow=0x32a, dwReserved0=0x0, dwReserved1=0x0, cFileName="YAHOO.CO.IN.XML", cAlternateFileName="YA8E91~1.XML")) returned 1 [0045.536] FindNextFileW (in: hFindFile=0x381b40, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x17a900, ftCreationTime.dwHighDateTime=0x1c6ea7d, ftLastAccessTime.dwLowDateTime=0x5e86eb30, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x17a900, ftLastWriteTime.dwHighDateTime=0x1c6ea7d, nFileSizeHigh=0x0, nFileSizeLow=0x32b, dwReserved0=0x0, dwReserved1=0x0, cFileName="YAHOO.CO.JP.XML", cAlternateFileName="YAHOOC~3.XML")) returned 1 [0045.536] FindNextFileW (in: hFindFile=0x381b40, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xae54e300, ftCreationTime.dwHighDateTime=0x1c6e74b, ftLastAccessTime.dwLowDateTime=0x70c79650, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xae54e300, ftLastWriteTime.dwHighDateTime=0x1c6e74b, nFileSizeHigh=0x0, nFileSizeLow=0x326, dwReserved0=0x0, dwReserved1=0x0, cFileName="YAHOO.CO.KR.XML", cAlternateFileName="YAEF96~1.XML")) returned 1 [0045.536] FindNextFileW (in: hFindFile=0x381b40, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xae54e300, ftCreationTime.dwHighDateTime=0x1c6e74b, ftLastAccessTime.dwLowDateTime=0x5e86eb30, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xae54e300, ftLastWriteTime.dwHighDateTime=0x1c6e74b, nFileSizeHigh=0x0, nFileSizeLow=0x32c, dwReserved0=0x0, dwReserved1=0x0, cFileName="YAHOO.CO.NZ.XML", cAlternateFileName="YA186B~1.XML")) returned 1 [0045.536] FindNextFileW (in: hFindFile=0x381b40, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xae54e300, ftCreationTime.dwHighDateTime=0x1c6e74b, ftLastAccessTime.dwLowDateTime=0x5e86eb30, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xae54e300, ftLastWriteTime.dwHighDateTime=0x1c6e74b, nFileSizeHigh=0x0, nFileSizeLow=0x32a, dwReserved0=0x0, dwReserved1=0x0, cFileName="YAHOO.CO.TH.XML", cAlternateFileName="YACB7D~1.XML")) returned 1 [0045.536] FindNextFileW (in: hFindFile=0x381b40, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xae54e300, ftCreationTime.dwHighDateTime=0x1c6e74b, ftLastAccessTime.dwLowDateTime=0x5e86eb30, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xae54e300, ftLastWriteTime.dwHighDateTime=0x1c6e74b, nFileSizeHigh=0x0, nFileSizeLow=0x32a, dwReserved0=0x0, dwReserved1=0x0, cFileName="YAHOO.CO.UK.XML", cAlternateFileName="YAE791~1.XML")) returned 1 [0045.536] FindNextFileW (in: hFindFile=0x381b40, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xae54e300, ftCreationTime.dwHighDateTime=0x1c6e74b, ftLastAccessTime.dwLowDateTime=0x70c534f0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xae54e300, ftLastWriteTime.dwHighDateTime=0x1c6e74b, nFileSizeHigh=0x0, nFileSizeLow=0x32c, dwReserved0=0x0, dwReserved1=0x0, cFileName="YAHOO.COM.AR.XML", cAlternateFileName="YA81CD~1.XML")) returned 1 [0045.536] FindNextFileW (in: hFindFile=0x381b40, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xae54e300, ftCreationTime.dwHighDateTime=0x1c6e74b, ftLastAccessTime.dwLowDateTime=0x70c534f0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xae54e300, ftLastWriteTime.dwHighDateTime=0x1c6e74b, nFileSizeHigh=0x0, nFileSizeLow=0x32c, dwReserved0=0x0, dwReserved1=0x0, cFileName="YAHOO.COM.AU.XML", cAlternateFileName="YA02CD~1.XML")) returned 1 [0045.536] FindNextFileW (in: hFindFile=0x381b40, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xae54e300, ftCreationTime.dwHighDateTime=0x1c6e74b, ftLastAccessTime.dwLowDateTime=0x5e86eb30, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xae54e300, ftLastWriteTime.dwHighDateTime=0x1c6e74b, nFileSizeHigh=0x0, nFileSizeLow=0x32c, dwReserved0=0x0, dwReserved1=0x0, cFileName="YAHOO.COM.BR.XML", cAlternateFileName="YAHOOC~1.XML")) returned 1 [0045.536] FindNextFileW (in: hFindFile=0x381b40, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xae54e300, ftCreationTime.dwHighDateTime=0x1c6e74b, ftLastAccessTime.dwLowDateTime=0x5e86eb30, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xae54e300, ftLastWriteTime.dwHighDateTime=0x1c6e74b, nFileSizeHigh=0x0, nFileSizeLow=0x32c, dwReserved0=0x0, dwReserved1=0x0, cFileName="YAHOO.COM.CN.XML", cAlternateFileName="YAHOOC~4.XML")) returned 1 [0045.536] FindNextFileW (in: hFindFile=0x381b40, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xae54e300, ftCreationTime.dwHighDateTime=0x1c6e74b, ftLastAccessTime.dwLowDateTime=0x5e86eb30, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xae54e300, ftLastWriteTime.dwHighDateTime=0x1c6e74b, nFileSizeHigh=0x0, nFileSizeLow=0x32c, dwReserved0=0x0, dwReserved1=0x0, cFileName="YAHOO.COM.HK.XML", cAlternateFileName="YA56AC~1.XML")) returned 1 [0045.536] FindNextFileW (in: hFindFile=0x381b40, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xae54e300, ftCreationTime.dwHighDateTime=0x1c6e74b, ftLastAccessTime.dwLowDateTime=0x5e86eb30, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xae54e300, ftLastWriteTime.dwHighDateTime=0x1c6e74b, nFileSizeHigh=0x0, nFileSizeLow=0x326, dwReserved0=0x0, dwReserved1=0x0, cFileName="YAHOO.COM.MX.XML", cAlternateFileName="YAEA08~1.XML")) returned 1 [0045.536] FindNextFileW (in: hFindFile=0x381b40, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xae54e300, ftCreationTime.dwHighDateTime=0x1c6e74b, ftLastAccessTime.dwLowDateTime=0x5e86eb30, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xae54e300, ftLastWriteTime.dwHighDateTime=0x1c6e74b, nFileSizeHigh=0x0, nFileSizeLow=0x32c, dwReserved0=0x0, dwReserved1=0x0, cFileName="YAHOO.COM.MY.XML", cAlternateFileName="YA0670~1.XML")) returned 1 [0045.536] FindNextFileW (in: hFindFile=0x381b40, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xae54e300, ftCreationTime.dwHighDateTime=0x1c6e74b, ftLastAccessTime.dwLowDateTime=0x5e86eb30, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xae54e300, ftLastWriteTime.dwHighDateTime=0x1c6e74b, nFileSizeHigh=0x0, nFileSizeLow=0x32c, dwReserved0=0x0, dwReserved1=0x0, cFileName="YAHOO.COM.PH.XML", cAlternateFileName="YA6D1B~1.XML")) returned 1 [0045.536] FindNextFileW (in: hFindFile=0x381b40, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xae54e300, ftCreationTime.dwHighDateTime=0x1c6e74b, ftLastAccessTime.dwLowDateTime=0x70c9f7b0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xae54e300, ftLastWriteTime.dwHighDateTime=0x1c6e74b, nFileSizeHigh=0x0, nFileSizeLow=0x32c, dwReserved0=0x0, dwReserved1=0x0, cFileName="YAHOO.COM.SG.XML", cAlternateFileName="YAC50A~1.XML")) returned 1 [0045.536] FindNextFileW (in: hFindFile=0x381b40, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xae54e300, ftCreationTime.dwHighDateTime=0x1c6e74b, ftLastAccessTime.dwLowDateTime=0x5e86eb30, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xae54e300, ftLastWriteTime.dwHighDateTime=0x1c6e74b, nFileSizeHigh=0x0, nFileSizeLow=0x32c, dwReserved0=0x0, dwReserved1=0x0, cFileName="YAHOO.COM.TW.XML", cAlternateFileName="YAB0F6~1.XML")) returned 1 [0045.536] FindNextFileW (in: hFindFile=0x381b40, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xae54e300, ftCreationTime.dwHighDateTime=0x1c6e74b, ftLastAccessTime.dwLowDateTime=0x70c9f7b0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xae54e300, ftLastWriteTime.dwHighDateTime=0x1c6e74b, nFileSizeHigh=0x0, nFileSizeLow=0x32c, dwReserved0=0x0, dwReserved1=0x0, cFileName="YAHOO.COM.VN.XML", cAlternateFileName="YA38FD~1.XML")) returned 1 [0045.537] FindNextFileW (in: hFindFile=0x381b40, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xae54e300, ftCreationTime.dwHighDateTime=0x1c6e74b, ftLastAccessTime.dwLowDateTime=0x70c534f0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xae54e300, ftLastWriteTime.dwHighDateTime=0x1c6e74b, nFileSizeHigh=0x0, nFileSizeLow=0x326, dwReserved0=0x0, dwReserved1=0x0, cFileName="YAHOO.COM.XML", cAlternateFileName="YA531A~1.XML")) returned 1 [0045.537] FindNextFileW (in: hFindFile=0x381b40, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xae54e300, ftCreationTime.dwHighDateTime=0x1c6e74b, ftLastAccessTime.dwLowDateTime=0x5e86eb30, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xae54e300, ftLastWriteTime.dwHighDateTime=0x1c6e74b, nFileSizeHigh=0x0, nFileSizeLow=0x324, dwReserved0=0x0, dwReserved1=0x0, cFileName="YAHOO.DE.XML", cAlternateFileName="YAHOOD~1.XML")) returned 1 [0045.537] FindNextFileW (in: hFindFile=0x381b40, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xae54e300, ftCreationTime.dwHighDateTime=0x1c6e74b, ftLastAccessTime.dwLowDateTime=0x70c534f0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xae54e300, ftLastWriteTime.dwHighDateTime=0x1c6e74b, nFileSizeHigh=0x0, nFileSizeLow=0x328, dwReserved0=0x0, dwReserved1=0x0, cFileName="YAHOO.ES.XML", cAlternateFileName="YAHOOE~1.XML")) returned 1 [0045.537] FindNextFileW (in: hFindFile=0x381b40, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xae54e300, ftCreationTime.dwHighDateTime=0x1c6e74b, ftLastAccessTime.dwLowDateTime=0x70c534f0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xae54e300, ftLastWriteTime.dwHighDateTime=0x1c6e74b, nFileSizeHigh=0x0, nFileSizeLow=0x324, dwReserved0=0x0, dwReserved1=0x0, cFileName="YAHOO.FR.XML", cAlternateFileName="YAHOOF~1.XML")) returned 1 [0045.537] FindNextFileW (in: hFindFile=0x381b40, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xae54e300, ftCreationTime.dwHighDateTime=0x1c6e74b, ftLastAccessTime.dwLowDateTime=0x5e86eb30, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xae54e300, ftLastWriteTime.dwHighDateTime=0x1c6e74b, nFileSizeHigh=0x0, nFileSizeLow=0x326, dwReserved0=0x0, dwReserved1=0x0, cFileName="YAHOO.HK.XML", cAlternateFileName="YAHOOH~1.XML")) returned 1 [0045.537] FindNextFileW (in: hFindFile=0x381b40, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xae54e300, ftCreationTime.dwHighDateTime=0x1c6e74b, ftLastAccessTime.dwLowDateTime=0x5e86eb30, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xae54e300, ftLastWriteTime.dwHighDateTime=0x1c6e74b, nFileSizeHigh=0x0, nFileSizeLow=0x32a, dwReserved0=0x0, dwReserved1=0x0, cFileName="YAHOO.IE.XML", cAlternateFileName="YAHOOI~1.XML")) returned 1 [0045.537] FindNextFileW (in: hFindFile=0x381b40, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xae54e300, ftCreationTime.dwHighDateTime=0x1c6e74b, ftLastAccessTime.dwLowDateTime=0x70c79650, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xae54e300, ftLastWriteTime.dwHighDateTime=0x1c6e74b, nFileSizeHigh=0x0, nFileSizeLow=0x324, dwReserved0=0x0, dwReserved1=0x0, cFileName="YAHOO.IT.XML", cAlternateFileName="YAHOOI~2.XML")) returned 1 [0045.537] FindNextFileW (in: hFindFile=0x381b40, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x17a900, ftCreationTime.dwHighDateTime=0x1c6ea7d, ftLastAccessTime.dwLowDateTime=0x70c79650, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x17a900, ftLastWriteTime.dwHighDateTime=0x1c6ea7d, nFileSizeHigh=0x0, nFileSizeLow=0x331, dwReserved0=0x0, dwReserved1=0x0, cFileName="YAHOO.JP.XML", cAlternateFileName="YAHOOJ~1.XML")) returned 1 [0045.537] FindNextFileW (in: hFindFile=0x381b40, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xae54e300, ftCreationTime.dwHighDateTime=0x1c6e74b, ftLastAccessTime.dwLowDateTime=0x70c9f7b0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xae54e300, ftLastWriteTime.dwHighDateTime=0x1c6e74b, nFileSizeHigh=0x0, nFileSizeLow=0x326, dwReserved0=0x0, dwReserved1=0x0, cFileName="YAHOO.NO.XML", cAlternateFileName="YAHOON~1.XML")) returned 1 [0045.537] FindNextFileW (in: hFindFile=0x381b40, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xae54e300, ftCreationTime.dwHighDateTime=0x1c6e74b, ftLastAccessTime.dwLowDateTime=0x5e86eb30, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xae54e300, ftLastWriteTime.dwHighDateTime=0x1c6e74b, nFileSizeHigh=0x0, nFileSizeLow=0x326, dwReserved0=0x0, dwReserved1=0x0, cFileName="YAHOO.PL.XML", cAlternateFileName="YAHOOP~1.XML")) returned 1 [0045.537] FindNextFileW (in: hFindFile=0x381b40, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xae54e300, ftCreationTime.dwHighDateTime=0x1c6e74b, ftLastAccessTime.dwLowDateTime=0x70c9f7b0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xae54e300, ftLastWriteTime.dwHighDateTime=0x1c6e74b, nFileSizeHigh=0x0, nFileSizeLow=0x326, dwReserved0=0x0, dwReserved1=0x0, cFileName="YAHOO.SE.XML", cAlternateFileName="YAHOOS~1.XML")) returned 1 [0045.537] FindNextFileW (in: hFindFile=0x381b40, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0045.537] FindClose (in: hFindFile=0x381b40 | out: hFindFile=0x381b40) returned 1 [0045.538] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e77c) returned 1 [0045.538] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e788) returned 1 [0045.538] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e7bc) returned 1 [0045.538] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\OutlookAutoDiscover", nBufferLength=0x105, lpBuffer=0x31e2c4, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\Office14\\OutlookAutoDiscover", lpFilePart=0x0) returned 0x3e [0045.538] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\OutlookAutoDiscover\\", nBufferLength=0x105, lpBuffer=0x31e298, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\Office14\\OutlookAutoDiscover\\", lpFilePart=0x0) returned 0x3f [0045.538] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\OutlookAutoDiscover\\*", lpFindFileData=0x31e4e4 | out: lpFindFileData=0x31e4e4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5133d8d0, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x70c9f7b0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x70c9f7b0, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x381b40 [0045.539] FindNextFileW (in: hFindFile=0x381b40, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5133d8d0, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x70c9f7b0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x70c9f7b0, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0045.539] FindNextFileW (in: hFindFile=0x381b40, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xae54e300, ftCreationTime.dwHighDateTime=0x1c6e74b, ftLastAccessTime.dwLowDateTime=0x5133d8d0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xae54e300, ftLastWriteTime.dwHighDateTime=0x1c6e74b, nFileSizeHigh=0x0, nFileSizeLow=0x330, dwReserved0=0x0, dwReserved1=0x0, cFileName="AMERITECH.NET.XML", cAlternateFileName="AMERIT~1.XML")) returned 1 [0045.539] FindNextFileW (in: hFindFile=0x381b40, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xae54e300, ftCreationTime.dwHighDateTime=0x1c6e74b, ftLastAccessTime.dwLowDateTime=0x600aeb50, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xae54e300, ftLastWriteTime.dwHighDateTime=0x1c6e74b, nFileSizeHigh=0x0, nFileSizeLow=0x327, dwReserved0=0x0, dwReserved1=0x0, cFileName="BTINTERNET.NET.XML", cAlternateFileName="BTINTE~1.XML")) returned 1 [0045.539] FindNextFileW (in: hFindFile=0x381b40, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xae54e300, ftCreationTime.dwHighDateTime=0x1c6e74b, ftLastAccessTime.dwLowDateTime=0x51b201b0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xae54e300, ftLastWriteTime.dwHighDateTime=0x1c6e74b, nFileSizeHigh=0x0, nFileSizeLow=0x327, dwReserved0=0x0, dwReserved1=0x0, cFileName="BTOPENWORLD.COM.XML", cAlternateFileName="BTOPEN~1.XML")) returned 1 [0045.539] FindNextFileW (in: hFindFile=0x381b40, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xae54e300, ftCreationTime.dwHighDateTime=0x1c6e74b, ftLastAccessTime.dwLowDateTime=0x52837ab0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xae54e300, ftLastWriteTime.dwHighDateTime=0x1c6e74b, nFileSizeHigh=0x0, nFileSizeLow=0x328, dwReserved0=0x0, dwReserved1=0x0, cFileName="FLASH.NET.XML", cAlternateFileName="FLASHN~1.XML")) returned 1 [0045.539] FindNextFileW (in: hFindFile=0x381b40, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xae54e300, ftCreationTime.dwHighDateTime=0x1c6e74b, ftLastAccessTime.dwLowDateTime=0x6a513ab0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xae54e300, ftLastWriteTime.dwHighDateTime=0x1c6e74b, nFileSizeHigh=0x0, nFileSizeLow=0x332, dwReserved0=0x0, dwReserved1=0x0, cFileName="NL.ROGERS.COM.XML", cAlternateFileName="NLROGE~1.XML")) returned 1 [0045.539] FindNextFileW (in: hFindFile=0x381b40, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xae54e300, ftCreationTime.dwHighDateTime=0x1c6e74b, ftLastAccessTime.dwLowDateTime=0x6a87fa50, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xae54e300, ftLastWriteTime.dwHighDateTime=0x1c6e74b, nFileSizeHigh=0x0, nFileSizeLow=0x32a, dwReserved0=0x0, dwReserved1=0x0, cFileName="NVBELL.NET.XML", cAlternateFileName="NVBELL~1.XML")) returned 1 [0045.539] FindNextFileW (in: hFindFile=0x381b40, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xae54e300, ftCreationTime.dwHighDateTime=0x1c6e74b, ftLastAccessTime.dwLowDateTime=0x6cd64f50, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xae54e300, ftLastWriteTime.dwHighDateTime=0x1c6e74b, nFileSizeHigh=0x0, nFileSizeLow=0x32c, dwReserved0=0x0, dwReserved1=0x0, cFileName="PACBELL.NET.XML", cAlternateFileName="PACBEL~1.XML")) returned 1 [0045.539] FindNextFileW (in: hFindFile=0x381b40, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xae54e300, ftCreationTime.dwHighDateTime=0x1c6e74b, ftLastAccessTime.dwLowDateTime=0x5a71ef90, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xae54e300, ftLastWriteTime.dwHighDateTime=0x1c6e74b, nFileSizeHigh=0x0, nFileSizeLow=0x32c, dwReserved0=0x0, dwReserved1=0x0, cFileName="PRODIGY.NET.XML", cAlternateFileName="PRODIG~1.XML")) returned 1 [0045.539] FindNextFileW (in: hFindFile=0x381b40, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xae54e300, ftCreationTime.dwHighDateTime=0x1c6e74b, ftLastAccessTime.dwLowDateTime=0x6d227b50, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xae54e300, ftLastWriteTime.dwHighDateTime=0x1c6e74b, nFileSizeHigh=0x0, nFileSizeLow=0x332, dwReserved0=0x0, dwReserved1=0x0, cFileName="ROGERS.COM.XML", cAlternateFileName="ROGERS~1.XML")) returned 1 [0045.539] FindNextFileW (in: hFindFile=0x381b40, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xae54e300, ftCreationTime.dwHighDateTime=0x1c6e74b, ftLastAccessTime.dwLowDateTime=0x6d24dcb0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xae54e300, ftLastWriteTime.dwHighDateTime=0x1c6e74b, nFileSizeHigh=0x0, nFileSizeLow=0x330, dwReserved0=0x0, dwReserved1=0x0, cFileName="SBCGLOBAL.NET.XML", cAlternateFileName="SBCGLO~1.XML")) returned 1 [0045.539] FindNextFileW (in: hFindFile=0x381b40, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xae54e300, ftCreationTime.dwHighDateTime=0x1c6e74b, ftLastAccessTime.dwLowDateTime=0x6d2e6230, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xae54e300, ftLastWriteTime.dwHighDateTime=0x1c6e74b, nFileSizeHigh=0x0, nFileSizeLow=0x326, dwReserved0=0x0, dwReserved1=0x0, cFileName="SNET.NET.XML", cAlternateFileName="SNETNE~1.XML")) returned 1 [0045.540] FindNextFileW (in: hFindFile=0x381b40, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xae54e300, ftCreationTime.dwHighDateTime=0x1c6e74b, ftLastAccessTime.dwLowDateTime=0x6d416d30, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xae54e300, ftLastWriteTime.dwHighDateTime=0x1c6e74b, nFileSizeHigh=0x0, nFileSizeLow=0x32a, dwReserved0=0x0, dwReserved1=0x0, cFileName="SWBELL.NET.XML", cAlternateFileName="SWBELL~1.XML")) returned 1 [0045.540] FindNextFileW (in: hFindFile=0x381b40, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xae54e300, ftCreationTime.dwHighDateTime=0x1c6e74b, ftLastAccessTime.dwLowDateTime=0x5aca0270, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xae54e300, ftLastWriteTime.dwHighDateTime=0x1c6e74b, nFileSizeHigh=0x0, nFileSizeLow=0x327, dwReserved0=0x0, dwReserved1=0x0, cFileName="TALK21.COM.XML", cAlternateFileName="TALK21~1.XML")) returned 1 [0045.540] FindNextFileW (in: hFindFile=0x381b40, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xae54e300, ftCreationTime.dwHighDateTime=0x1c6e74b, ftLastAccessTime.dwLowDateTime=0x7084efd0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xae54e300, ftLastWriteTime.dwHighDateTime=0x1c6e74b, nFileSizeHigh=0x0, nFileSizeLow=0x326, dwReserved0=0x0, dwReserved1=0x0, cFileName="WANS.NET.XML", cAlternateFileName="WANSNE~1.XML")) returned 1 [0045.540] FindNextFileW (in: hFindFile=0x381b40, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xae54e300, ftCreationTime.dwHighDateTime=0x1c6e74b, ftLastAccessTime.dwLowDateTime=0x5e86eb30, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xae54e300, ftLastWriteTime.dwHighDateTime=0x1c6e74b, nFileSizeHigh=0x0, nFileSizeLow=0x324, dwReserved0=0x0, dwReserved1=0x0, cFileName="YAHOO.CA.XML", cAlternateFileName="YAHOOC~2.XML")) returned 1 [0045.540] FindNextFileW (in: hFindFile=0x381b40, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xae54e300, ftCreationTime.dwHighDateTime=0x1c6e74b, ftLastAccessTime.dwLowDateTime=0x70c79650, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xae54e300, ftLastWriteTime.dwHighDateTime=0x1c6e74b, nFileSizeHigh=0x0, nFileSizeLow=0x32a, dwReserved0=0x0, dwReserved1=0x0, cFileName="YAHOO.CO.ID.XML", cAlternateFileName="YA6C44~1.XML")) returned 1 [0045.540] FindNextFileW (in: hFindFile=0x381b40, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xae54e300, ftCreationTime.dwHighDateTime=0x1c6e74b, ftLastAccessTime.dwLowDateTime=0x5e86eb30, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xae54e300, ftLastWriteTime.dwHighDateTime=0x1c6e74b, nFileSizeHigh=0x0, nFileSizeLow=0x32a, dwReserved0=0x0, dwReserved1=0x0, cFileName="YAHOO.CO.IN.XML", cAlternateFileName="YA8E91~1.XML")) returned 1 [0045.540] FindNextFileW (in: hFindFile=0x381b40, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x17a900, ftCreationTime.dwHighDateTime=0x1c6ea7d, ftLastAccessTime.dwLowDateTime=0x5e86eb30, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x17a900, ftLastWriteTime.dwHighDateTime=0x1c6ea7d, nFileSizeHigh=0x0, nFileSizeLow=0x32b, dwReserved0=0x0, dwReserved1=0x0, cFileName="YAHOO.CO.JP.XML", cAlternateFileName="YAHOOC~3.XML")) returned 1 [0045.540] FindNextFileW (in: hFindFile=0x381b40, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xae54e300, ftCreationTime.dwHighDateTime=0x1c6e74b, ftLastAccessTime.dwLowDateTime=0x70c79650, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xae54e300, ftLastWriteTime.dwHighDateTime=0x1c6e74b, nFileSizeHigh=0x0, nFileSizeLow=0x326, dwReserved0=0x0, dwReserved1=0x0, cFileName="YAHOO.CO.KR.XML", cAlternateFileName="YAEF96~1.XML")) returned 1 [0045.540] FindNextFileW (in: hFindFile=0x381b40, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xae54e300, ftCreationTime.dwHighDateTime=0x1c6e74b, ftLastAccessTime.dwLowDateTime=0x5e86eb30, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xae54e300, ftLastWriteTime.dwHighDateTime=0x1c6e74b, nFileSizeHigh=0x0, nFileSizeLow=0x32c, dwReserved0=0x0, dwReserved1=0x0, cFileName="YAHOO.CO.NZ.XML", cAlternateFileName="YA186B~1.XML")) returned 1 [0045.540] FindNextFileW (in: hFindFile=0x381b40, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xae54e300, ftCreationTime.dwHighDateTime=0x1c6e74b, ftLastAccessTime.dwLowDateTime=0x5e86eb30, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xae54e300, ftLastWriteTime.dwHighDateTime=0x1c6e74b, nFileSizeHigh=0x0, nFileSizeLow=0x32a, dwReserved0=0x0, dwReserved1=0x0, cFileName="YAHOO.CO.TH.XML", cAlternateFileName="YACB7D~1.XML")) returned 1 [0045.540] FindNextFileW (in: hFindFile=0x381b40, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xae54e300, ftCreationTime.dwHighDateTime=0x1c6e74b, ftLastAccessTime.dwLowDateTime=0x5e86eb30, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xae54e300, ftLastWriteTime.dwHighDateTime=0x1c6e74b, nFileSizeHigh=0x0, nFileSizeLow=0x32a, dwReserved0=0x0, dwReserved1=0x0, cFileName="YAHOO.CO.UK.XML", cAlternateFileName="YAE791~1.XML")) returned 1 [0045.540] FindNextFileW (in: hFindFile=0x381b40, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xae54e300, ftCreationTime.dwHighDateTime=0x1c6e74b, ftLastAccessTime.dwLowDateTime=0x70c534f0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xae54e300, ftLastWriteTime.dwHighDateTime=0x1c6e74b, nFileSizeHigh=0x0, nFileSizeLow=0x32c, dwReserved0=0x0, dwReserved1=0x0, cFileName="YAHOO.COM.AR.XML", cAlternateFileName="YA81CD~1.XML")) returned 1 [0045.540] FindNextFileW (in: hFindFile=0x381b40, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xae54e300, ftCreationTime.dwHighDateTime=0x1c6e74b, ftLastAccessTime.dwLowDateTime=0x70c534f0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xae54e300, ftLastWriteTime.dwHighDateTime=0x1c6e74b, nFileSizeHigh=0x0, nFileSizeLow=0x32c, dwReserved0=0x0, dwReserved1=0x0, cFileName="YAHOO.COM.AU.XML", cAlternateFileName="YA02CD~1.XML")) returned 1 [0045.540] FindNextFileW (in: hFindFile=0x381b40, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xae54e300, ftCreationTime.dwHighDateTime=0x1c6e74b, ftLastAccessTime.dwLowDateTime=0x5e86eb30, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xae54e300, ftLastWriteTime.dwHighDateTime=0x1c6e74b, nFileSizeHigh=0x0, nFileSizeLow=0x32c, dwReserved0=0x0, dwReserved1=0x0, cFileName="YAHOO.COM.BR.XML", cAlternateFileName="YAHOOC~1.XML")) returned 1 [0045.540] FindNextFileW (in: hFindFile=0x381b40, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xae54e300, ftCreationTime.dwHighDateTime=0x1c6e74b, ftLastAccessTime.dwLowDateTime=0x5e86eb30, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xae54e300, ftLastWriteTime.dwHighDateTime=0x1c6e74b, nFileSizeHigh=0x0, nFileSizeLow=0x32c, dwReserved0=0x0, dwReserved1=0x0, cFileName="YAHOO.COM.CN.XML", cAlternateFileName="YAHOOC~4.XML")) returned 1 [0045.540] FindNextFileW (in: hFindFile=0x381b40, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xae54e300, ftCreationTime.dwHighDateTime=0x1c6e74b, ftLastAccessTime.dwLowDateTime=0x5e86eb30, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xae54e300, ftLastWriteTime.dwHighDateTime=0x1c6e74b, nFileSizeHigh=0x0, nFileSizeLow=0x32c, dwReserved0=0x0, dwReserved1=0x0, cFileName="YAHOO.COM.HK.XML", cAlternateFileName="YA56AC~1.XML")) returned 1 [0045.540] FindNextFileW (in: hFindFile=0x381b40, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xae54e300, ftCreationTime.dwHighDateTime=0x1c6e74b, ftLastAccessTime.dwLowDateTime=0x5e86eb30, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xae54e300, ftLastWriteTime.dwHighDateTime=0x1c6e74b, nFileSizeHigh=0x0, nFileSizeLow=0x326, dwReserved0=0x0, dwReserved1=0x0, cFileName="YAHOO.COM.MX.XML", cAlternateFileName="YAEA08~1.XML")) returned 1 [0045.540] FindNextFileW (in: hFindFile=0x381b40, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xae54e300, ftCreationTime.dwHighDateTime=0x1c6e74b, ftLastAccessTime.dwLowDateTime=0x5e86eb30, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xae54e300, ftLastWriteTime.dwHighDateTime=0x1c6e74b, nFileSizeHigh=0x0, nFileSizeLow=0x32c, dwReserved0=0x0, dwReserved1=0x0, cFileName="YAHOO.COM.MY.XML", cAlternateFileName="YA0670~1.XML")) returned 1 [0045.540] FindNextFileW (in: hFindFile=0x381b40, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xae54e300, ftCreationTime.dwHighDateTime=0x1c6e74b, ftLastAccessTime.dwLowDateTime=0x5e86eb30, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xae54e300, ftLastWriteTime.dwHighDateTime=0x1c6e74b, nFileSizeHigh=0x0, nFileSizeLow=0x32c, dwReserved0=0x0, dwReserved1=0x0, cFileName="YAHOO.COM.PH.XML", cAlternateFileName="YA6D1B~1.XML")) returned 1 [0045.540] FindNextFileW (in: hFindFile=0x381b40, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xae54e300, ftCreationTime.dwHighDateTime=0x1c6e74b, ftLastAccessTime.dwLowDateTime=0x70c9f7b0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xae54e300, ftLastWriteTime.dwHighDateTime=0x1c6e74b, nFileSizeHigh=0x0, nFileSizeLow=0x32c, dwReserved0=0x0, dwReserved1=0x0, cFileName="YAHOO.COM.SG.XML", cAlternateFileName="YAC50A~1.XML")) returned 1 [0045.540] FindNextFileW (in: hFindFile=0x381b40, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xae54e300, ftCreationTime.dwHighDateTime=0x1c6e74b, ftLastAccessTime.dwLowDateTime=0x5e86eb30, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xae54e300, ftLastWriteTime.dwHighDateTime=0x1c6e74b, nFileSizeHigh=0x0, nFileSizeLow=0x32c, dwReserved0=0x0, dwReserved1=0x0, cFileName="YAHOO.COM.TW.XML", cAlternateFileName="YAB0F6~1.XML")) returned 1 [0045.541] FindNextFileW (in: hFindFile=0x381b40, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xae54e300, ftCreationTime.dwHighDateTime=0x1c6e74b, ftLastAccessTime.dwLowDateTime=0x70c9f7b0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xae54e300, ftLastWriteTime.dwHighDateTime=0x1c6e74b, nFileSizeHigh=0x0, nFileSizeLow=0x32c, dwReserved0=0x0, dwReserved1=0x0, cFileName="YAHOO.COM.VN.XML", cAlternateFileName="YA38FD~1.XML")) returned 1 [0045.541] FindNextFileW (in: hFindFile=0x381b40, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xae54e300, ftCreationTime.dwHighDateTime=0x1c6e74b, ftLastAccessTime.dwLowDateTime=0x70c534f0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xae54e300, ftLastWriteTime.dwHighDateTime=0x1c6e74b, nFileSizeHigh=0x0, nFileSizeLow=0x326, dwReserved0=0x0, dwReserved1=0x0, cFileName="YAHOO.COM.XML", cAlternateFileName="YA531A~1.XML")) returned 1 [0045.541] FindNextFileW (in: hFindFile=0x381b40, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xae54e300, ftCreationTime.dwHighDateTime=0x1c6e74b, ftLastAccessTime.dwLowDateTime=0x5e86eb30, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xae54e300, ftLastWriteTime.dwHighDateTime=0x1c6e74b, nFileSizeHigh=0x0, nFileSizeLow=0x324, dwReserved0=0x0, dwReserved1=0x0, cFileName="YAHOO.DE.XML", cAlternateFileName="YAHOOD~1.XML")) returned 1 [0045.541] FindNextFileW (in: hFindFile=0x381b40, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xae54e300, ftCreationTime.dwHighDateTime=0x1c6e74b, ftLastAccessTime.dwLowDateTime=0x70c534f0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xae54e300, ftLastWriteTime.dwHighDateTime=0x1c6e74b, nFileSizeHigh=0x0, nFileSizeLow=0x328, dwReserved0=0x0, dwReserved1=0x0, cFileName="YAHOO.ES.XML", cAlternateFileName="YAHOOE~1.XML")) returned 1 [0045.541] FindNextFileW (in: hFindFile=0x381b40, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xae54e300, ftCreationTime.dwHighDateTime=0x1c6e74b, ftLastAccessTime.dwLowDateTime=0x70c534f0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xae54e300, ftLastWriteTime.dwHighDateTime=0x1c6e74b, nFileSizeHigh=0x0, nFileSizeLow=0x324, dwReserved0=0x0, dwReserved1=0x0, cFileName="YAHOO.FR.XML", cAlternateFileName="YAHOOF~1.XML")) returned 1 [0045.541] FindNextFileW (in: hFindFile=0x381b40, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xae54e300, ftCreationTime.dwHighDateTime=0x1c6e74b, ftLastAccessTime.dwLowDateTime=0x5e86eb30, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xae54e300, ftLastWriteTime.dwHighDateTime=0x1c6e74b, nFileSizeHigh=0x0, nFileSizeLow=0x326, dwReserved0=0x0, dwReserved1=0x0, cFileName="YAHOO.HK.XML", cAlternateFileName="YAHOOH~1.XML")) returned 1 [0045.541] FindNextFileW (in: hFindFile=0x381b40, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xae54e300, ftCreationTime.dwHighDateTime=0x1c6e74b, ftLastAccessTime.dwLowDateTime=0x5e86eb30, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xae54e300, ftLastWriteTime.dwHighDateTime=0x1c6e74b, nFileSizeHigh=0x0, nFileSizeLow=0x32a, dwReserved0=0x0, dwReserved1=0x0, cFileName="YAHOO.IE.XML", cAlternateFileName="YAHOOI~1.XML")) returned 1 [0045.541] FindNextFileW (in: hFindFile=0x381b40, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xae54e300, ftCreationTime.dwHighDateTime=0x1c6e74b, ftLastAccessTime.dwLowDateTime=0x70c79650, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xae54e300, ftLastWriteTime.dwHighDateTime=0x1c6e74b, nFileSizeHigh=0x0, nFileSizeLow=0x324, dwReserved0=0x0, dwReserved1=0x0, cFileName="YAHOO.IT.XML", cAlternateFileName="YAHOOI~2.XML")) returned 1 [0045.541] FindNextFileW (in: hFindFile=0x381b40, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x17a900, ftCreationTime.dwHighDateTime=0x1c6ea7d, ftLastAccessTime.dwLowDateTime=0x70c79650, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x17a900, ftLastWriteTime.dwHighDateTime=0x1c6ea7d, nFileSizeHigh=0x0, nFileSizeLow=0x331, dwReserved0=0x0, dwReserved1=0x0, cFileName="YAHOO.JP.XML", cAlternateFileName="YAHOOJ~1.XML")) returned 1 [0045.541] FindNextFileW (in: hFindFile=0x381b40, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xae54e300, ftCreationTime.dwHighDateTime=0x1c6e74b, ftLastAccessTime.dwLowDateTime=0x70c9f7b0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xae54e300, ftLastWriteTime.dwHighDateTime=0x1c6e74b, nFileSizeHigh=0x0, nFileSizeLow=0x326, dwReserved0=0x0, dwReserved1=0x0, cFileName="YAHOO.NO.XML", cAlternateFileName="YAHOON~1.XML")) returned 1 [0045.541] FindNextFileW (in: hFindFile=0x381b40, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xae54e300, ftCreationTime.dwHighDateTime=0x1c6e74b, ftLastAccessTime.dwLowDateTime=0x5e86eb30, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xae54e300, ftLastWriteTime.dwHighDateTime=0x1c6e74b, nFileSizeHigh=0x0, nFileSizeLow=0x326, dwReserved0=0x0, dwReserved1=0x0, cFileName="YAHOO.PL.XML", cAlternateFileName="YAHOOP~1.XML")) returned 1 [0045.541] FindNextFileW (in: hFindFile=0x381b40, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xae54e300, ftCreationTime.dwHighDateTime=0x1c6e74b, ftLastAccessTime.dwLowDateTime=0x70c9f7b0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xae54e300, ftLastWriteTime.dwHighDateTime=0x1c6e74b, nFileSizeHigh=0x0, nFileSizeLow=0x326, dwReserved0=0x0, dwReserved1=0x0, cFileName="YAHOO.SE.XML", cAlternateFileName="YAHOOS~1.XML")) returned 1 [0045.541] FindNextFileW (in: hFindFile=0x381b40, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xae54e300, ftCreationTime.dwHighDateTime=0x1c6e74b, ftLastAccessTime.dwLowDateTime=0x70c9f7b0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xae54e300, ftLastWriteTime.dwHighDateTime=0x1c6e74b, nFileSizeHigh=0x0, nFileSizeLow=0x326, dwReserved0=0x0, dwReserved1=0x0, cFileName="YAHOO.SE.XML", cAlternateFileName="YAHOOS~1.XML")) returned 0 [0045.541] FindClose (in: hFindFile=0x381b40 | out: hFindFile=0x381b40) returned 1 [0045.542] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e77c) returned 1 [0045.542] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e788) returned 1 [0045.542] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e7bc) returned 1 [0045.542] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PAGESIZE", nBufferLength=0x105, lpBuffer=0x31e2c4, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\Office14\\PAGESIZE", lpFilePart=0x0) returned 0x33 [0045.542] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PAGESIZE\\", nBufferLength=0x105, lpBuffer=0x31e298, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\Office14\\PAGESIZE\\", lpFilePart=0x0) returned 0x34 [0045.542] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PAGESIZE\\*", lpFindFileData=0x31e4e4 | out: lpFindFileData=0x31e4e4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x59d27370, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x6ce49790, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x6ce49790, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x381b40 [0045.547] FindNextFileW (in: hFindFile=0x381b40, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x59d27370, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x6ce49790, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x6ce49790, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0045.547] FindNextFileW (in: hFindFile=0x381b40, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb180a100, ftCreationTime.dwHighDateTime=0x1ca10e6, ftLastAccessTime.dwLowDateTime=0x59d27370, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xb180a100, ftLastWriteTime.dwHighDateTime=0x1ca10e6, nFileSizeHigh=0x0, nFileSizeLow=0xfb6, dwReserved0=0x0, dwReserved1=0x0, cFileName="PGLBL001.XML", cAlternateFileName="")) returned 1 [0045.547] FindNextFileW (in: hFindFile=0x381b40, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x61d99800, ftCreationTime.dwHighDateTime=0x1ca1a4b, ftLastAccessTime.dwLowDateTime=0x59d27370, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x61d99800, ftLastWriteTime.dwHighDateTime=0x1ca1a4b, nFileSizeHigh=0x0, nFileSizeLow=0x15b1fa, dwReserved0=0x0, dwReserved1=0x0, cFileName="PGLBL002.XML", cAlternateFileName="")) returned 1 [0045.547] FindNextFileW (in: hFindFile=0x381b40, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2c7ce900, ftCreationTime.dwHighDateTime=0x1c9f4a3, ftLastAccessTime.dwLowDateTime=0x5a340bd0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x2c7ce900, ftLastWriteTime.dwHighDateTime=0x1c9f4a3, nFileSizeHigh=0x0, nFileSizeLow=0x33a1a, dwReserved0=0x0, dwReserved1=0x0, cFileName="PGLBL010.XML", cAlternateFileName="")) returned 1 [0045.547] FindNextFileW (in: hFindFile=0x381b40, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x632f2e00, ftCreationTime.dwHighDateTime=0x1c66206, ftLastAccessTime.dwLowDateTime=0x5a340bd0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x632f2e00, ftLastWriteTime.dwHighDateTime=0x1c66206, nFileSizeHigh=0x0, nFileSizeLow=0x1390, dwReserved0=0x0, dwReserved1=0x0, cFileName="PGLBL011.XML", cAlternateFileName="")) returned 1 [0045.547] FindNextFileW (in: hFindFile=0x381b40, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9dea2700, ftCreationTime.dwHighDateTime=0x1ca1b37, ftLastAccessTime.dwLowDateTime=0x6cdfd4d0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x9dea2700, ftLastWriteTime.dwHighDateTime=0x1ca1b37, nFileSizeHigh=0x0, nFileSizeLow=0xa5178, dwReserved0=0x0, dwReserved1=0x0, cFileName="PGLBL012.XML", cAlternateFileName="")) returned 1 [0045.547] FindNextFileW (in: hFindFile=0x381b40, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xca994100, ftCreationTime.dwHighDateTime=0x1ca1b2d, ftLastAccessTime.dwLowDateTime=0x6cdfd4d0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xca994100, ftLastWriteTime.dwHighDateTime=0x1ca1b2d, nFileSizeHigh=0x0, nFileSizeLow=0x22cf0, dwReserved0=0x0, dwReserved1=0x0, cFileName="PGLBL016.XML", cAlternateFileName="")) returned 1 [0045.547] FindNextFileW (in: hFindFile=0x381b40, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x69d9ac00, ftCreationTime.dwHighDateTime=0x1c6c1cc, ftLastAccessTime.dwLowDateTime=0x5a340bd0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x69d9ac00, ftLastWriteTime.dwHighDateTime=0x1c6c1cc, nFileSizeHigh=0x0, nFileSizeLow=0x101bc, dwReserved0=0x0, dwReserved1=0x0, cFileName="PGLBL020.XML", cAlternateFileName="")) returned 1 [0045.547] FindNextFileW (in: hFindFile=0x381b40, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x93746100, ftCreationTime.dwHighDateTime=0x1ca1b28, ftLastAccessTime.dwLowDateTime=0x6cdfd4d0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x93746100, ftLastWriteTime.dwHighDateTime=0x1ca1b28, nFileSizeHigh=0x0, nFileSizeLow=0x24c9a, dwReserved0=0x0, dwReserved1=0x0, cFileName="PGLBL022.XML", cAlternateFileName="")) returned 1 [0045.547] FindNextFileW (in: hFindFile=0x381b40, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x632f2e00, ftCreationTime.dwHighDateTime=0x1c66206, ftLastAccessTime.dwLowDateTime=0x6cdfd4d0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x632f2e00, ftLastWriteTime.dwHighDateTime=0x1c66206, nFileSizeHigh=0x0, nFileSizeLow=0x1f4e6, dwReserved0=0x0, dwReserved1=0x0, cFileName="PGLBL026.XML", cAlternateFileName="")) returned 1 [0045.547] FindNextFileW (in: hFindFile=0x381b40, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x54389200, ftCreationTime.dwHighDateTime=0x1c9f606, ftLastAccessTime.dwLowDateTime=0x5a340bd0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x54389200, ftLastWriteTime.dwHighDateTime=0x1c9f606, nFileSizeHigh=0x0, nFileSizeLow=0x6d7e, dwReserved0=0x0, dwReserved1=0x0, cFileName="PGLBL027.XML", cAlternateFileName="")) returned 1 [0045.547] FindNextFileW (in: hFindFile=0x381b40, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3b28800, ftCreationTime.dwHighDateTime=0x1c9e3fe, ftLastAccessTime.dwLowDateTime=0x6cdfd4d0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x3b28800, ftLastWriteTime.dwHighDateTime=0x1c9e3fe, nFileSizeHigh=0x0, nFileSizeLow=0x266a4, dwReserved0=0x0, dwReserved1=0x0, cFileName="PGLBL044.XML", cAlternateFileName="")) returned 1 [0045.547] FindNextFileW (in: hFindFile=0x381b40, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x187aa500, ftCreationTime.dwHighDateTime=0x1c9fe1c, ftLastAccessTime.dwLowDateTime=0x5a366d30, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x187aa500, ftLastWriteTime.dwHighDateTime=0x1c9fe1c, nFileSizeHigh=0x0, nFileSizeLow=0x10e590, dwReserved0=0x0, dwReserved1=0x0, cFileName="PGLBL048.XML", cAlternateFileName="")) returned 1 [0045.547] FindNextFileW (in: hFindFile=0x381b40, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf22b5d00, ftCreationTime.dwHighDateTime=0x1c9f604, ftLastAccessTime.dwLowDateTime=0x5a366d30, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xf22b5d00, ftLastWriteTime.dwHighDateTime=0x1c9f604, nFileSizeHigh=0x0, nFileSizeLow=0x59f76, dwReserved0=0x0, dwReserved1=0x0, cFileName="PGLBL054.XML", cAlternateFileName="")) returned 1 [0045.547] FindNextFileW (in: hFindFile=0x381b40, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xecc9300, ftCreationTime.dwHighDateTime=0x1c6b6bd, ftLastAccessTime.dwLowDateTime=0x5a366d30, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xecc9300, ftLastWriteTime.dwHighDateTime=0x1c6b6bd, nFileSizeHigh=0x0, nFileSizeLow=0x26c44, dwReserved0=0x0, dwReserved1=0x0, cFileName="PGLBL058.XML", cAlternateFileName="")) returned 1 [0045.547] FindNextFileW (in: hFindFile=0x381b40, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6cc7d000, ftCreationTime.dwHighDateTime=0x1c68eef, ftLastAccessTime.dwLowDateTime=0x5a38ce90, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x6cc7d000, ftLastWriteTime.dwHighDateTime=0x1c68eef, nFileSizeHigh=0x0, nFileSizeLow=0x165d6, dwReserved0=0x0, dwReserved1=0x0, cFileName="PGLBL065.XML", cAlternateFileName="")) returned 1 [0045.547] FindNextFileW (in: hFindFile=0x381b40, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x902d7600, ftCreationTime.dwHighDateTime=0x1c69abe, ftLastAccessTime.dwLowDateTime=0x6cdfd4d0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x902d7600, ftLastWriteTime.dwHighDateTime=0x1c69abe, nFileSizeHigh=0x0, nFileSizeLow=0xacb30, dwReserved0=0x0, dwReserved1=0x0, cFileName="PGLBL075.XML", cAlternateFileName="")) returned 1 [0045.547] FindNextFileW (in: hFindFile=0x381b40, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xfbcd1600, ftCreationTime.dwHighDateTime=0x1c6c538, ftLastAccessTime.dwLowDateTime=0x6ce23630, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xfbcd1600, ftLastWriteTime.dwHighDateTime=0x1c6c538, nFileSizeHigh=0x0, nFileSizeLow=0x6134, dwReserved0=0x0, dwReserved1=0x0, cFileName="PGLBL077.XML", cAlternateFileName="")) returned 1 [0045.547] FindNextFileW (in: hFindFile=0x381b40, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe756a100, ftCreationTime.dwHighDateTime=0x1c6beda, ftLastAccessTime.dwLowDateTime=0x6ce23630, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xe756a100, ftLastWriteTime.dwHighDateTime=0x1c6beda, nFileSizeHigh=0x0, nFileSizeLow=0x753, dwReserved0=0x0, dwReserved1=0x0, cFileName="PGLBL078.XML", cAlternateFileName="")) returned 1 [0045.547] FindNextFileW (in: hFindFile=0x381b40, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x91fe6500, ftCreationTime.dwHighDateTime=0x1ca1b37, ftLastAccessTime.dwLowDateTime=0x6ce23630, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x91fe6500, ftLastWriteTime.dwHighDateTime=0x1ca1b37, nFileSizeHigh=0x0, nFileSizeLow=0xe944e, dwReserved0=0x0, dwReserved1=0x0, cFileName="PGLBL081.XML", cAlternateFileName="")) returned 1 [0045.548] FindNextFileW (in: hFindFile=0x381b40, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x67337900, ftCreationTime.dwHighDateTime=0x1ca0b56, ftLastAccessTime.dwLowDateTime=0x5a38ce90, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x67337900, ftLastWriteTime.dwHighDateTime=0x1ca0b56, nFileSizeHigh=0x0, nFileSizeLow=0x38d3a, dwReserved0=0x0, dwReserved1=0x0, cFileName="PGLBL082.XML", cAlternateFileName="")) returned 1 [0045.548] FindNextFileW (in: hFindFile=0x381b40, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xcf103000, ftCreationTime.dwHighDateTime=0x1ca25ea, ftLastAccessTime.dwLowDateTime=0x5a38ce90, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xcf103000, ftLastWriteTime.dwHighDateTime=0x1ca25ea, nFileSizeHigh=0x0, nFileSizeLow=0x8cda, dwReserved0=0x0, dwReserved1=0x0, cFileName="PGLBL083.XML", cAlternateFileName="")) returned 1 [0045.548] FindNextFileW (in: hFindFile=0x381b40, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa9141f00, ftCreationTime.dwHighDateTime=0x1c6d896, ftLastAccessTime.dwLowDateTime=0x6ce23630, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xa9141f00, ftLastWriteTime.dwHighDateTime=0x1c6d896, nFileSizeHigh=0x0, nFileSizeLow=0xab732, dwReserved0=0x0, dwReserved1=0x0, cFileName="PGLBL086.XML", cAlternateFileName="")) returned 1 [0045.548] FindNextFileW (in: hFindFile=0x381b40, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe8d69800, ftCreationTime.dwHighDateTime=0x1c6bedf, ftLastAccessTime.dwLowDateTime=0x5a38ce90, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xe8d69800, ftLastWriteTime.dwHighDateTime=0x1c6bedf, nFileSizeHigh=0x0, nFileSizeLow=0x13d8, dwReserved0=0x0, dwReserved1=0x0, cFileName="PGLBL087.XML", cAlternateFileName="")) returned 1 [0045.548] FindNextFileW (in: hFindFile=0x381b40, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe893cd00, ftCreationTime.dwHighDateTime=0x1ca0904, ftLastAccessTime.dwLowDateTime=0x6ce23630, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xe893cd00, ftLastWriteTime.dwHighDateTime=0x1ca0904, nFileSizeHigh=0x0, nFileSizeLow=0xb532, dwReserved0=0x0, dwReserved1=0x0, cFileName="PGLBL089.XML", cAlternateFileName="")) returned 1 [0045.548] FindNextFileW (in: hFindFile=0x381b40, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2a5c4800, ftCreationTime.dwHighDateTime=0x1c9fe1c, ftLastAccessTime.dwLowDateTime=0x6ce23630, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x2a5c4800, ftLastWriteTime.dwHighDateTime=0x1c9fe1c, nFileSizeHigh=0x0, nFileSizeLow=0x124b2, dwReserved0=0x0, dwReserved1=0x0, cFileName="PGLBL090.XML", cAlternateFileName="")) returned 1 [0045.548] FindNextFileW (in: hFindFile=0x381b40, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc4628f00, ftCreationTime.dwHighDateTime=0x1ca1b44, ftLastAccessTime.dwLowDateTime=0x6ce23630, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xc4628f00, ftLastWriteTime.dwHighDateTime=0x1ca1b44, nFileSizeHigh=0x0, nFileSizeLow=0x19a22, dwReserved0=0x0, dwReserved1=0x0, cFileName="PGLBL092.XML", cAlternateFileName="")) returned 1 [0045.548] FindNextFileW (in: hFindFile=0x381b40, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x206de900, ftCreationTime.dwHighDateTime=0x1ca1b2e, ftLastAccessTime.dwLowDateTime=0x6ce23630, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x206de900, ftLastWriteTime.dwHighDateTime=0x1ca1b2e, nFileSizeHigh=0x0, nFileSizeLow=0xb3da, dwReserved0=0x0, dwReserved1=0x0, cFileName="PGLBL093.XML", cAlternateFileName="")) returned 1 [0045.548] FindNextFileW (in: hFindFile=0x381b40, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x32b48300, ftCreationTime.dwHighDateTime=0x1c9fe1c, ftLastAccessTime.dwLowDateTime=0x6ce23630, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x32b48300, ftLastWriteTime.dwHighDateTime=0x1c9fe1c, nFileSizeHigh=0x0, nFileSizeLow=0x1a1e8, dwReserved0=0x0, dwReserved1=0x0, cFileName="PGLBL095.XML", cAlternateFileName="")) returned 1 [0045.548] FindNextFileW (in: hFindFile=0x381b40, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x39db9100, ftCreationTime.dwHighDateTime=0x1c9fe1c, ftLastAccessTime.dwLowDateTime=0x5a38ce90, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x39db9100, ftLastWriteTime.dwHighDateTime=0x1c9fe1c, nFileSizeHigh=0x0, nFileSizeLow=0x19ede, dwReserved0=0x0, dwReserved1=0x0, cFileName="PGLBL096.XML", cAlternateFileName="")) returned 1 [0045.548] FindNextFileW (in: hFindFile=0x381b40, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2f636100, ftCreationTime.dwHighDateTime=0x1c9ef1a, ftLastAccessTime.dwLowDateTime=0x5a38ce90, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x2f636100, ftLastWriteTime.dwHighDateTime=0x1c9ef1a, nFileSizeHigh=0x0, nFileSizeLow=0x80ba, dwReserved0=0x0, dwReserved1=0x0, cFileName="PGLBL097.XML", cAlternateFileName="")) returned 1 [0045.548] FindNextFileW (in: hFindFile=0x381b40, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2c357500, ftCreationTime.dwHighDateTime=0x1c6d897, ftLastAccessTime.dwLowDateTime=0x6ce23630, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x2c357500, ftLastWriteTime.dwHighDateTime=0x1c6d897, nFileSizeHigh=0x0, nFileSizeLow=0xe730, dwReserved0=0x0, dwReserved1=0x0, cFileName="PGLBL102.XML", cAlternateFileName="")) returned 1 [0045.548] FindNextFileW (in: hFindFile=0x381b40, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x45027800, ftCreationTime.dwHighDateTime=0x1ca0f15, ftLastAccessTime.dwLowDateTime=0x5a38ce90, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x45027800, ftLastWriteTime.dwHighDateTime=0x1ca0f15, nFileSizeHigh=0x0, nFileSizeLow=0x27aee, dwReserved0=0x0, dwReserved1=0x0, cFileName="PGLBL103.XML", cAlternateFileName="")) returned 1 [0045.548] FindNextFileW (in: hFindFile=0x381b40, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf61dc500, ftCreationTime.dwHighDateTime=0x1ca1702, ftLastAccessTime.dwLowDateTime=0x5a38ce90, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xf61dc500, ftLastWriteTime.dwHighDateTime=0x1ca1702, nFileSizeHigh=0x0, nFileSizeLow=0x1fcf2, dwReserved0=0x0, dwReserved1=0x0, cFileName="PGLBL104.XML", cAlternateFileName="")) returned 1 [0045.548] FindNextFileW (in: hFindFile=0x381b40, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7ffeb200, ftCreationTime.dwHighDateTime=0x1c9fa22, ftLastAccessTime.dwLowDateTime=0x6ce23630, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x7ffeb200, ftLastWriteTime.dwHighDateTime=0x1c9fa22, nFileSizeHigh=0x0, nFileSizeLow=0x15090, dwReserved0=0x0, dwReserved1=0x0, cFileName="PGLBL105.XML", cAlternateFileName="")) returned 1 [0045.549] FindNextFileW (in: hFindFile=0x381b40, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd2fb7700, ftCreationTime.dwHighDateTime=0x1ca1b41, ftLastAccessTime.dwLowDateTime=0x5a38ce90, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xd2fb7700, ftLastWriteTime.dwHighDateTime=0x1ca1b41, nFileSizeHigh=0x0, nFileSizeLow=0x9ae4, dwReserved0=0x0, dwReserved1=0x0, cFileName="PGLBL106.XML", cAlternateFileName="")) returned 1 [0045.549] FindNextFileW (in: hFindFile=0x381b40, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x45218b00, ftCreationTime.dwHighDateTime=0x1ca1b45, ftLastAccessTime.dwLowDateTime=0x6ce23630, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x45218b00, ftLastWriteTime.dwHighDateTime=0x1ca1b45, nFileSizeHigh=0x0, nFileSizeLow=0x1d5c6, dwReserved0=0x0, dwReserved1=0x0, cFileName="PGLBL107.XML", cAlternateFileName="")) returned 1 [0045.549] FindNextFileW (in: hFindFile=0x381b40, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x82e92800, ftCreationTime.dwHighDateTime=0x1c9f4a1, ftLastAccessTime.dwLowDateTime=0x5a3b2ff0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x82e92800, ftLastWriteTime.dwHighDateTime=0x1c9f4a1, nFileSizeHigh=0x0, nFileSizeLow=0x2dbec, dwReserved0=0x0, dwReserved1=0x0, cFileName="PGLBL108.XML", cAlternateFileName="")) returned 1 [0045.549] FindNextFileW (in: hFindFile=0x381b40, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb0b1600, ftCreationTime.dwHighDateTime=0x1ca14c1, ftLastAccessTime.dwLowDateTime=0x6ce23630, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xb0b1600, ftLastWriteTime.dwHighDateTime=0x1ca14c1, nFileSizeHigh=0x0, nFileSizeLow=0x2b6c, dwReserved0=0x0, dwReserved1=0x0, cFileName="PGLBL109.XML", cAlternateFileName="")) returned 1 [0045.549] FindNextFileW (in: hFindFile=0x381b40, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x643bf200, ftCreationTime.dwHighDateTime=0x1ca1a4b, ftLastAccessTime.dwLowDateTime=0x5a3b2ff0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x643bf200, ftLastWriteTime.dwHighDateTime=0x1ca1a4b, nFileSizeHigh=0x0, nFileSizeLow=0xcdbee, dwReserved0=0x0, dwReserved1=0x0, cFileName="PGLBL110.XML", cAlternateFileName="")) returned 1 [0045.549] FindNextFileW (in: hFindFile=0x381b40, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x656d1f00, ftCreationTime.dwHighDateTime=0x1ca1a4b, ftLastAccessTime.dwLowDateTime=0x6ce49790, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x656d1f00, ftLastWriteTime.dwHighDateTime=0x1ca1a4b, nFileSizeHigh=0x0, nFileSizeLow=0x40198, dwReserved0=0x0, dwReserved1=0x0, cFileName="PGLBL111.XML", cAlternateFileName="")) returned 1 [0045.549] FindNextFileW (in: hFindFile=0x381b40, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa07a0100, ftCreationTime.dwHighDateTime=0x1ca2c4b, ftLastAccessTime.dwLowDateTime=0x5a3b2ff0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xa07a0100, ftLastWriteTime.dwHighDateTime=0x1ca2c4b, nFileSizeHigh=0x0, nFileSizeLow=0x2247e, dwReserved0=0x0, dwReserved1=0x0, cFileName="PGMN001.XML", cAlternateFileName="")) returned 1 [0045.550] FindNextFileW (in: hFindFile=0x381b40, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x669e4c00, ftCreationTime.dwHighDateTime=0x1ca1a4b, ftLastAccessTime.dwLowDateTime=0x5a3b2ff0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x669e4c00, ftLastWriteTime.dwHighDateTime=0x1ca1a4b, nFileSizeHigh=0x0, nFileSizeLow=0xeb68, dwReserved0=0x0, dwReserved1=0x0, cFileName="PGMN002.XML", cAlternateFileName="")) returned 1 [0045.550] FindNextFileW (in: hFindFile=0x381b40, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2c7ce900, ftCreationTime.dwHighDateTime=0x1c9f4a3, ftLastAccessTime.dwLowDateTime=0x5a3b2ff0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x2c7ce900, ftLastWriteTime.dwHighDateTime=0x1c9f4a3, nFileSizeHigh=0x0, nFileSizeLow=0x1bc4, dwReserved0=0x0, dwReserved1=0x0, cFileName="PGMN010.XML", cAlternateFileName="")) returned 1 [0045.550] FindNextFileW (in: hFindFile=0x381b40, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x94fa5500, ftCreationTime.dwHighDateTime=0x1ca1b39, ftLastAccessTime.dwLowDateTime=0x6ce49790, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x94fa5500, ftLastWriteTime.dwHighDateTime=0x1ca1b39, nFileSizeHigh=0x0, nFileSizeLow=0xe2d8, dwReserved0=0x0, dwReserved1=0x0, cFileName="PGMN011.XML", cAlternateFileName="")) returned 1 [0045.550] FindNextFileW (in: hFindFile=0x381b40, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xfc63d500, ftCreationTime.dwHighDateTime=0x1ca1b38, ftLastAccessTime.dwLowDateTime=0x6ce49790, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xfc63d500, ftLastWriteTime.dwHighDateTime=0x1ca1b38, nFileSizeHigh=0x0, nFileSizeLow=0x2936, dwReserved0=0x0, dwReserved1=0x0, cFileName="PGMN020.XML", cAlternateFileName="")) returned 1 [0045.550] FindNextFileW (in: hFindFile=0x381b40, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x17af0200, ftCreationTime.dwHighDateTime=0x1ca06ab, ftLastAccessTime.dwLowDateTime=0x6ce49790, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x17af0200, ftLastWriteTime.dwHighDateTime=0x1ca06ab, nFileSizeHigh=0x0, nFileSizeLow=0x167d4, dwReserved0=0x0, dwReserved1=0x0, cFileName="PGMN022.XML", cAlternateFileName="")) returned 1 [0045.550] FindNextFileW (in: hFindFile=0x381b40, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x632f2e00, ftCreationTime.dwHighDateTime=0x1c66206, ftLastAccessTime.dwLowDateTime=0x5a3b2ff0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x632f2e00, ftLastWriteTime.dwHighDateTime=0x1c66206, nFileSizeHigh=0x0, nFileSizeLow=0x21be, dwReserved0=0x0, dwReserved1=0x0, cFileName="PGMN026.XML", cAlternateFileName="")) returned 1 [0045.550] FindNextFileW (in: hFindFile=0x381b40, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x54389200, ftCreationTime.dwHighDateTime=0x1c9f606, ftLastAccessTime.dwLowDateTime=0x5a3b2ff0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x54389200, ftLastWriteTime.dwHighDateTime=0x1c9f606, nFileSizeHigh=0x0, nFileSizeLow=0x5e2, dwReserved0=0x0, dwReserved1=0x0, cFileName="PGMN027.XML", cAlternateFileName="")) returned 1 [0045.550] FindNextFileW (in: hFindFile=0x381b40, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x60487100, ftCreationTime.dwHighDateTime=0x1c9e332, ftLastAccessTime.dwLowDateTime=0x6ce49790, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x60487100, ftLastWriteTime.dwHighDateTime=0x1c9e332, nFileSizeHigh=0x0, nFileSizeLow=0x1412, dwReserved0=0x0, dwReserved1=0x0, cFileName="PGMN044.XML", cAlternateFileName="")) returned 1 [0045.550] FindNextFileW (in: hFindFile=0x381b40, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4233cc00, ftCreationTime.dwHighDateTime=0x1c9fe1c, ftLastAccessTime.dwLowDateTime=0x5a3b2ff0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x4233cc00, ftLastWriteTime.dwHighDateTime=0x1c9fe1c, nFileSizeHigh=0x0, nFileSizeLow=0x9c4ca, dwReserved0=0x0, dwReserved1=0x0, cFileName="PGMN048.XML", cAlternateFileName="")) returned 1 [0045.550] FindClose (in: hFindFile=0x381b40 | out: hFindFile=0x381b40) returned 1 [0045.551] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e77c) returned 1 [0045.551] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e788) returned 1 [0045.551] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e7bc) returned 1 [0045.551] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PAGESIZE", nBufferLength=0x105, lpBuffer=0x31e2c4, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\Office14\\PAGESIZE", lpFilePart=0x0) returned 0x33 [0045.551] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PAGESIZE\\", nBufferLength=0x105, lpBuffer=0x31e298, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\Office14\\PAGESIZE\\", lpFilePart=0x0) returned 0x34 [0045.551] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PAGESIZE\\*", lpFindFileData=0x31e4e4 | out: lpFindFileData=0x31e4e4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x59d27370, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x6ce49790, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x6ce49790, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x381b40 [0045.552] FindClose (in: hFindFile=0x381b40 | out: hFindFile=0x381b40) returned 1 [0045.553] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e77c) returned 1 [0045.553] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e788) returned 1 [0045.553] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e7bc) returned 1 [0045.553] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PROOF", nBufferLength=0x105, lpBuffer=0x31e2c4, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\Office14\\PROOF", lpFilePart=0x0) returned 0x30 [0045.553] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PROOF\\", nBufferLength=0x105, lpBuffer=0x31e298, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\Office14\\PROOF\\", lpFilePart=0x0) returned 0x31 [0045.553] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PROOF\\*", lpFindFileData=0x31e4e4 | out: lpFindFileData=0x31e4e4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5481df0, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0xa6f6b5a0, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0xa6f6b5a0, ftLastWriteTime.dwHighDateTime=0x1d305eb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x381b40 [0045.556] FindClose (in: hFindFile=0x381b40 | out: hFindFile=0x381b40) returned 1 [0045.557] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e77c) returned 1 [0045.557] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e788) returned 1 [0045.557] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e7bc) returned 1 [0045.557] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PROOF", nBufferLength=0x105, lpBuffer=0x31e2c4, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\Office14\\PROOF", lpFilePart=0x0) returned 0x30 [0045.557] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PROOF\\", nBufferLength=0x105, lpBuffer=0x31e298, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\Office14\\PROOF\\", lpFilePart=0x0) returned 0x31 [0045.557] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PROOF\\*", lpFindFileData=0x31e4e4 | out: lpFindFileData=0x31e4e4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5481df0, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0xa6f6b5a0, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0xa6f6b5a0, ftLastWriteTime.dwHighDateTime=0x1d305eb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x381b40 [0045.558] FindClose (in: hFindFile=0x381b40 | out: hFindFile=0x381b40) returned 1 [0045.559] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e77c) returned 1 [0045.559] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e788) returned 1 [0045.559] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e744) returned 1 [0045.559] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PROOF\\1033", nBufferLength=0x105, lpBuffer=0x31e24c, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\Office14\\PROOF\\1033", lpFilePart=0x0) returned 0x35 [0045.559] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PROOF\\1033\\", nBufferLength=0x105, lpBuffer=0x31e220, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\Office14\\PROOF\\1033\\", lpFilePart=0x0) returned 0x36 [0045.559] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PROOF\\1033\\*", lpFindFileData=0x31e46c | out: lpFindFileData=0x31e46c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x97285f0, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x97285f0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x97285f0, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x381b40 [0045.561] FindClose (in: hFindFile=0x381b40 | out: hFindFile=0x381b40) returned 1 [0045.561] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e704) returned 1 [0045.561] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e710) returned 1 [0045.561] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e744) returned 1 [0045.561] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PROOF\\1033", nBufferLength=0x105, lpBuffer=0x31e24c, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\Office14\\PROOF\\1033", lpFilePart=0x0) returned 0x35 [0045.561] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PROOF\\1033\\", nBufferLength=0x105, lpBuffer=0x31e220, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\Office14\\PROOF\\1033\\", lpFilePart=0x0) returned 0x36 [0045.561] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PROOF\\1033\\*", lpFindFileData=0x31e46c | out: lpFindFileData=0x31e46c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x97285f0, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x97285f0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x97285f0, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x381b40 [0045.561] FindClose (in: hFindFile=0x381b40 | out: hFindFile=0x381b40) returned 1 [0045.562] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e704) returned 1 [0045.562] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e710) returned 1 [0045.562] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e744) returned 1 [0045.562] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PROOF\\1036", nBufferLength=0x105, lpBuffer=0x31e24c, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\Office14\\PROOF\\1036", lpFilePart=0x0) returned 0x35 [0045.562] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PROOF\\1036\\", nBufferLength=0x105, lpBuffer=0x31e220, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\Office14\\PROOF\\1036\\", lpFilePart=0x0) returned 0x36 [0045.562] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PROOF\\1036\\*", lpFindFileData=0x31e46c | out: lpFindFileData=0x31e46c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa44929a0, ftCreationTime.dwHighDateTime=0x1d305eb, ftLastAccessTime.dwLowDateTime=0xa44929a0, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0xa44929a0, ftLastWriteTime.dwHighDateTime=0x1d305eb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x381b40 [0045.562] FindClose (in: hFindFile=0x381b40 | out: hFindFile=0x381b40) returned 1 [0045.562] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e704) returned 1 [0045.562] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e710) returned 1 [0045.562] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e744) returned 1 [0045.562] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PROOF\\1036", nBufferLength=0x105, lpBuffer=0x31e24c, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\Office14\\PROOF\\1036", lpFilePart=0x0) returned 0x35 [0045.562] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PROOF\\1036\\", nBufferLength=0x105, lpBuffer=0x31e220, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\Office14\\PROOF\\1036\\", lpFilePart=0x0) returned 0x36 [0045.562] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PROOF\\1036\\*", lpFindFileData=0x31e46c | out: lpFindFileData=0x31e46c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa44929a0, ftCreationTime.dwHighDateTime=0x1d305eb, ftLastAccessTime.dwLowDateTime=0xa44929a0, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0xa44929a0, ftLastWriteTime.dwHighDateTime=0x1d305eb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x381b40 [0045.562] FindClose (in: hFindFile=0x381b40 | out: hFindFile=0x381b40) returned 1 [0045.563] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e704) returned 1 [0045.563] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e710) returned 1 [0045.563] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e744) returned 1 [0045.563] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PROOF\\3082", nBufferLength=0x105, lpBuffer=0x31e24c, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\Office14\\PROOF\\3082", lpFilePart=0x0) returned 0x35 [0045.563] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PROOF\\3082\\", nBufferLength=0x105, lpBuffer=0x31e220, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\Office14\\PROOF\\3082\\", lpFilePart=0x0) returned 0x36 [0045.563] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PROOF\\3082\\*", lpFindFileData=0x31e46c | out: lpFindFileData=0x31e46c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x54ce0b0, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x54ce0b0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x54ce0b0, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x381b40 [0045.563] FindClose (in: hFindFile=0x381b40 | out: hFindFile=0x381b40) returned 1 [0045.563] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e704) returned 1 [0045.563] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e710) returned 1 [0045.563] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e744) returned 1 [0045.563] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PROOF\\3082", nBufferLength=0x105, lpBuffer=0x31e24c, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\Office14\\PROOF\\3082", lpFilePart=0x0) returned 0x35 [0045.563] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PROOF\\3082\\", nBufferLength=0x105, lpBuffer=0x31e220, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\Office14\\PROOF\\3082\\", lpFilePart=0x0) returned 0x36 [0045.563] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PROOF\\3082\\*", lpFindFileData=0x31e46c | out: lpFindFileData=0x31e46c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x54ce0b0, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x54ce0b0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x54ce0b0, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x381b40 [0045.563] FindClose (in: hFindFile=0x381b40 | out: hFindFile=0x381b40) returned 1 [0045.563] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e704) returned 1 [0045.563] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e710) returned 1 [0045.564] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e7bc) returned 1 [0045.564] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PUBBA", nBufferLength=0x105, lpBuffer=0x31e2c4, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\Office14\\PUBBA", lpFilePart=0x0) returned 0x30 [0045.564] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PUBBA\\", nBufferLength=0x105, lpBuffer=0x31e298, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\Office14\\PUBBA\\", lpFilePart=0x0) returned 0x31 [0045.564] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PUBBA\\*", lpFindFileData=0x31e4e4 | out: lpFindFileData=0x31e4e4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x59413f90, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x6a1819b0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x6a1819b0, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x381b40 [0045.567] FindClose (in: hFindFile=0x381b40 | out: hFindFile=0x381b40) returned 1 [0045.567] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e77c) returned 1 [0045.567] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e788) returned 1 [0045.567] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e7bc) returned 1 [0045.567] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PUBBA", nBufferLength=0x105, lpBuffer=0x31e2c4, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\Office14\\PUBBA", lpFilePart=0x0) returned 0x30 [0045.567] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PUBBA\\", nBufferLength=0x105, lpBuffer=0x31e298, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\Office14\\PUBBA\\", lpFilePart=0x0) returned 0x31 [0045.568] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PUBBA\\*", lpFindFileData=0x31e4e4 | out: lpFindFileData=0x31e4e4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x59413f90, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x6a1819b0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x6a1819b0, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x381b40 [0045.568] FindClose (in: hFindFile=0x381b40 | out: hFindFile=0x381b40) returned 1 [0045.569] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e77c) returned 1 [0045.569] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e788) returned 1 [0045.569] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e7bc) returned 1 [0045.569] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ", nBufferLength=0x105, lpBuffer=0x31e2c4, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ", lpFilePart=0x0) returned 0x31 [0045.569] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\", nBufferLength=0x105, lpBuffer=0x31e298, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\", lpFilePart=0x0) returned 0x32 [0045.569] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\*", lpFindFileData=0x31e4e4 | out: lpFindFileData=0x31e4e4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x511e6c70, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x70959970, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x70959970, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x381b40 [0045.578] FindClose (in: hFindFile=0x381b40 | out: hFindFile=0x381b40) returned 1 [0045.579] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e77c) returned 1 [0045.579] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e788) returned 1 [0045.579] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e7bc) returned 1 [0045.580] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ", nBufferLength=0x105, lpBuffer=0x31e2c4, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ", lpFilePart=0x0) returned 0x31 [0045.580] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\", nBufferLength=0x105, lpBuffer=0x31e298, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\", lpFilePart=0x0) returned 0x32 [0045.580] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\PUBWIZ\\*", lpFindFileData=0x31e4e4 | out: lpFindFileData=0x31e4e4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x511e6c70, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x70959970, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x70959970, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x381b40 [0045.581] FindClose (in: hFindFile=0x381b40 | out: hFindFile=0x381b40) returned 1 [0045.582] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e77c) returned 1 [0045.582] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e788) returned 1 [0045.582] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e7bc) returned 1 [0045.582] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\QUERIES", nBufferLength=0x105, lpBuffer=0x31e2c4, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\Office14\\QUERIES", lpFilePart=0x0) returned 0x32 [0045.582] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\QUERIES\\", nBufferLength=0x105, lpBuffer=0x31e298, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\Office14\\QUERIES\\", lpFilePart=0x0) returned 0x33 [0045.582] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\QUERIES\\*", lpFindFileData=0x31e4e4 | out: lpFindFileData=0x31e4e4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfa5ff110, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xfa64b3d0, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xfa64b3d0, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x381b40 [0045.584] FindClose (in: hFindFile=0x381b40 | out: hFindFile=0x381b40) returned 1 [0045.585] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e77c) returned 1 [0045.585] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e788) returned 1 [0045.585] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e7bc) returned 1 [0045.585] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\QUERIES", nBufferLength=0x105, lpBuffer=0x31e2c4, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\Office14\\QUERIES", lpFilePart=0x0) returned 0x32 [0045.585] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\QUERIES\\", nBufferLength=0x105, lpBuffer=0x31e298, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\Office14\\QUERIES\\", lpFilePart=0x0) returned 0x33 [0045.585] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\QUERIES\\*", lpFindFileData=0x31e4e4 | out: lpFindFileData=0x31e4e4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfa5ff110, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xfa64b3d0, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xfa64b3d0, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x381b40 [0045.585] FindClose (in: hFindFile=0x381b40 | out: hFindFile=0x381b40) returned 1 [0045.586] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e77c) returned 1 [0045.586] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e788) returned 1 [0045.586] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e7bc) returned 1 [0045.586] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\SAMPLES", nBufferLength=0x105, lpBuffer=0x31e2c4, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\Office14\\SAMPLES", lpFilePart=0x0) returned 0x32 [0045.586] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\SAMPLES\\", nBufferLength=0x105, lpBuffer=0x31e298, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\Office14\\SAMPLES\\", lpFilePart=0x0) returned 0x33 [0045.586] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\SAMPLES\\*", lpFindFileData=0x31e4e4 | out: lpFindFileData=0x31e4e4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfa671530, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xfa671530, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xfa671530, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x381b40 [0045.587] FindClose (in: hFindFile=0x381b40 | out: hFindFile=0x381b40) returned 1 [0045.587] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e77c) returned 1 [0045.587] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e788) returned 1 [0045.587] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e7bc) returned 1 [0045.588] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\SAMPLES", nBufferLength=0x105, lpBuffer=0x31e2c4, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\Office14\\SAMPLES", lpFilePart=0x0) returned 0x32 [0045.588] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\SAMPLES\\", nBufferLength=0x105, lpBuffer=0x31e298, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\Office14\\SAMPLES\\", lpFilePart=0x0) returned 0x33 [0045.588] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\SAMPLES\\*", lpFindFileData=0x31e4e4 | out: lpFindFileData=0x31e4e4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfa671530, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xfa671530, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xfa671530, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x381b40 [0045.588] FindClose (in: hFindFile=0x381b40 | out: hFindFile=0x381b40) returned 1 [0045.588] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e77c) returned 1 [0045.588] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e788) returned 1 [0045.588] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e7bc) returned 1 [0045.588] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\STARTUP", nBufferLength=0x105, lpBuffer=0x31e2c4, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\Office14\\STARTUP", lpFilePart=0x0) returned 0x32 [0045.588] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\STARTUP\\", nBufferLength=0x105, lpBuffer=0x31e298, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\Office14\\STARTUP\\", lpFilePart=0x0) returned 0x33 [0045.588] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\STARTUP\\*", lpFindFileData=0x31e4e4 | out: lpFindFileData=0x31e4e4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x50e7acd0, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x50e7acd0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x50e7acd0, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x381b40 [0045.588] FindClose (in: hFindFile=0x381b40 | out: hFindFile=0x381b40) returned 1 [0045.588] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e77c) returned 1 [0045.588] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e788) returned 1 [0045.589] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e7bc) returned 1 [0045.589] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\STARTUP", nBufferLength=0x105, lpBuffer=0x31e2c4, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\Office14\\STARTUP", lpFilePart=0x0) returned 0x32 [0045.589] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\STARTUP\\", nBufferLength=0x105, lpBuffer=0x31e298, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\Office14\\STARTUP\\", lpFilePart=0x0) returned 0x33 [0045.589] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\STARTUP\\*", lpFindFileData=0x31e4e4 | out: lpFindFileData=0x31e4e4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x50e7acd0, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x50e7acd0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x50e7acd0, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x381b40 [0045.589] FindClose (in: hFindFile=0x381b40 | out: hFindFile=0x381b40) returned 1 [0045.589] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e77c) returned 1 [0045.589] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e788) returned 1 [0045.589] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e7bc) returned 1 [0045.589] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content", nBufferLength=0x105, lpBuffer=0x31e2c4, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content", lpFilePart=0x0) returned 0x38 [0045.589] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\", nBufferLength=0x105, lpBuffer=0x31e298, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\", lpFilePart=0x0) returned 0x39 [0045.589] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\*", lpFindFileData=0x31e4e4 | out: lpFindFileData=0x31e4e4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x504da6a0, ftCreationTime.dwHighDateTime=0x1d305eb, ftLastAccessTime.dwLowDateTime=0x504da6a0, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0x504da6a0, ftLastWriteTime.dwHighDateTime=0x1d305eb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x381b40 [0045.590] FindClose (in: hFindFile=0x381b40 | out: hFindFile=0x381b40) returned 1 [0045.590] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e77c) returned 1 [0045.590] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e788) returned 1 [0045.590] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e7bc) returned 1 [0045.590] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content", nBufferLength=0x105, lpBuffer=0x31e2c4, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content", lpFilePart=0x0) returned 0x38 [0045.590] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\", nBufferLength=0x105, lpBuffer=0x31e298, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\", lpFilePart=0x0) returned 0x39 [0045.590] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\*", lpFindFileData=0x31e4e4 | out: lpFindFileData=0x31e4e4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x504da6a0, ftCreationTime.dwHighDateTime=0x1d305eb, ftLastAccessTime.dwLowDateTime=0x504da6a0, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0x504da6a0, ftLastWriteTime.dwHighDateTime=0x1d305eb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x381b40 [0045.591] FindClose (in: hFindFile=0x381b40 | out: hFindFile=0x381b40) returned 1 [0045.591] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e77c) returned 1 [0045.591] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e788) returned 1 [0045.591] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e744) returned 1 [0045.591] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033", nBufferLength=0x105, lpBuffer=0x31e24c, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033", lpFilePart=0x0) returned 0x3d [0045.591] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\", nBufferLength=0x105, lpBuffer=0x31e220, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\", lpFilePart=0x0) returned 0x3e [0045.591] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\*", lpFindFileData=0x31e46c | out: lpFindFileData=0x31e46c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x504da6a0, ftCreationTime.dwHighDateTime=0x1d305eb, ftLastAccessTime.dwLowDateTime=0x52203420, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0x52203420, ftLastWriteTime.dwHighDateTime=0x1d305eb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x381b40 [0045.610] FindClose (in: hFindFile=0x381b40 | out: hFindFile=0x381b40) returned 1 [0045.611] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e704) returned 1 [0045.611] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e710) returned 1 [0045.611] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e744) returned 1 [0045.611] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033", nBufferLength=0x105, lpBuffer=0x31e24c, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033", lpFilePart=0x0) returned 0x3d [0045.612] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\", nBufferLength=0x105, lpBuffer=0x31e220, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\", lpFilePart=0x0) returned 0x3e [0045.612] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Visio Content\\1033\\*", lpFindFileData=0x31e46c | out: lpFindFileData=0x31e46c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x504da6a0, ftCreationTime.dwHighDateTime=0x1d305eb, ftLastAccessTime.dwLowDateTime=0x52203420, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0x52203420, ftLastWriteTime.dwHighDateTime=0x1d305eb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x381b40 [0045.614] FindClose (in: hFindFile=0x381b40 | out: hFindFile=0x381b40) returned 1 [0045.615] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e704) returned 1 [0045.615] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e710) returned 1 [0045.615] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e7bc) returned 1 [0045.615] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\XLSTART", nBufferLength=0x105, lpBuffer=0x31e2c4, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\Office14\\XLSTART", lpFilePart=0x0) returned 0x32 [0045.616] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\XLSTART\\", nBufferLength=0x105, lpBuffer=0x31e298, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\Office14\\XLSTART\\", lpFilePart=0x0) returned 0x33 [0045.616] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\XLSTART\\*", lpFindFileData=0x31e4e4 | out: lpFindFileData=0x31e4e4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x50e7acd0, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x50e7acd0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x50e7acd0, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x381b40 [0045.616] FindClose (in: hFindFile=0x381b40 | out: hFindFile=0x381b40) returned 1 [0045.616] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e77c) returned 1 [0045.616] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e788) returned 1 [0045.616] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e7bc) returned 1 [0045.616] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\XLSTART", nBufferLength=0x105, lpBuffer=0x31e2c4, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\Office14\\XLSTART", lpFilePart=0x0) returned 0x32 [0045.616] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\XLSTART\\", nBufferLength=0x105, lpBuffer=0x31e298, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\Office14\\XLSTART\\", lpFilePart=0x0) returned 0x33 [0045.616] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\XLSTART\\*", lpFindFileData=0x31e4e4 | out: lpFindFileData=0x31e4e4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x50e7acd0, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x50e7acd0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x50e7acd0, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x381b40 [0045.616] FindClose (in: hFindFile=0x381b40 | out: hFindFile=0x381b40) returned 1 [0045.616] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e77c) returned 1 [0045.616] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e788) returned 1 [0045.617] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e834) returned 1 [0045.617] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Stationery", nBufferLength=0x105, lpBuffer=0x31e33c, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\Stationery", lpFilePart=0x0) returned 0x2c [0045.617] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Stationery\\", nBufferLength=0x105, lpBuffer=0x31e310, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\Stationery\\", lpFilePart=0x0) returned 0x2d [0045.617] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Stationery\\*", lpFindFileData=0x31e55c | out: lpFindFileData=0x31e55c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd3eb50, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0xebb910, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xebb910, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x381b40 [0045.617] FindClose (in: hFindFile=0x381b40 | out: hFindFile=0x381b40) returned 1 [0045.618] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e7f4) returned 1 [0045.618] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e800) returned 1 [0045.618] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e834) returned 1 [0045.618] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Stationery", nBufferLength=0x105, lpBuffer=0x31e33c, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\Stationery", lpFilePart=0x0) returned 0x2c [0045.618] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Stationery\\", nBufferLength=0x105, lpBuffer=0x31e310, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\Stationery\\", lpFilePart=0x0) returned 0x2d [0045.618] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Stationery\\*", lpFindFileData=0x31e55c | out: lpFindFileData=0x31e55c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd3eb50, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0xebb910, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xebb910, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x381b40 [0045.618] FindClose (in: hFindFile=0x381b40 | out: hFindFile=0x381b40) returned 1 [0045.618] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e7f4) returned 1 [0045.618] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e800) returned 1 [0045.618] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e7bc) returned 1 [0045.618] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Stationery\\1033", nBufferLength=0x105, lpBuffer=0x31e2c4, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\Stationery\\1033", lpFilePart=0x0) returned 0x31 [0045.618] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Stationery\\1033\\", nBufferLength=0x105, lpBuffer=0x31e298, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\Stationery\\1033\\", lpFilePart=0x0) returned 0x32 [0045.618] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Stationery\\1033\\*", lpFindFileData=0x31e4e4 | out: lpFindFileData=0x31e4e4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xebb910, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x21c6910, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x21c6910, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x381b40 [0045.620] FindClose (in: hFindFile=0x381b40 | out: hFindFile=0x381b40) returned 1 [0045.620] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e77c) returned 1 [0045.621] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e788) returned 1 [0045.621] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e7bc) returned 1 [0045.621] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Stationery\\1033", nBufferLength=0x105, lpBuffer=0x31e2c4, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\Stationery\\1033", lpFilePart=0x0) returned 0x31 [0045.621] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Stationery\\1033\\", nBufferLength=0x105, lpBuffer=0x31e298, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\Stationery\\1033\\", lpFilePart=0x0) returned 0x32 [0045.621] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Stationery\\1033\\*", lpFindFileData=0x31e4e4 | out: lpFindFileData=0x31e4e4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xebb910, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x21c6910, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x21c6910, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x381b40 [0045.621] FindClose (in: hFindFile=0x381b40 | out: hFindFile=0x381b40) returned 1 [0045.622] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e77c) returned 1 [0045.622] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e788) returned 1 [0045.622] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e834) returned 1 [0045.622] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Templates", nBufferLength=0x105, lpBuffer=0x31e33c, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\Templates", lpFilePart=0x0) returned 0x2b [0045.622] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Templates\\", nBufferLength=0x105, lpBuffer=0x31e310, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\Templates\\", lpFilePart=0x0) returned 0x2c [0045.622] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Templates\\*", lpFindFileData=0x31e55c | out: lpFindFileData=0x31e55c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf59f9270, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0x50e7acd0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x50e7acd0, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x381b40 [0045.623] FindClose (in: hFindFile=0x381b40 | out: hFindFile=0x381b40) returned 1 [0045.623] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e7f4) returned 1 [0045.623] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e800) returned 1 [0045.623] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e834) returned 1 [0045.623] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Templates", nBufferLength=0x105, lpBuffer=0x31e33c, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\Templates", lpFilePart=0x0) returned 0x2b [0045.623] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Templates\\", nBufferLength=0x105, lpBuffer=0x31e310, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\Templates\\", lpFilePart=0x0) returned 0x2c [0045.623] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Templates\\*", lpFindFileData=0x31e55c | out: lpFindFileData=0x31e55c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf59f9270, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0x50e7acd0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x50e7acd0, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x381b40 [0045.624] FindClose (in: hFindFile=0x381b40 | out: hFindFile=0x381b40) returned 1 [0045.624] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e7f4) returned 1 [0045.624] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e800) returned 1 [0045.624] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e7bc) returned 1 [0045.624] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Templates\\1033", nBufferLength=0x105, lpBuffer=0x31e2c4, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\Templates\\1033", lpFilePart=0x0) returned 0x30 [0045.624] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Templates\\1033\\", nBufferLength=0x105, lpBuffer=0x31e298, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\Templates\\1033\\", lpFilePart=0x0) returned 0x31 [0045.624] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Templates\\1033\\*", lpFindFileData=0x31e4e4 | out: lpFindFileData=0x31e4e4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf59f9270, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xaf577d00, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0xaf577d00, ftLastWriteTime.dwHighDateTime=0x1d305f1, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x381b40 [0045.637] FindClose (in: hFindFile=0x381b40 | out: hFindFile=0x381b40) returned 1 [0045.638] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e77c) returned 1 [0045.638] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e788) returned 1 [0045.638] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e7bc) returned 1 [0045.638] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Templates\\1033", nBufferLength=0x105, lpBuffer=0x31e2c4, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\Templates\\1033", lpFilePart=0x0) returned 0x30 [0045.638] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Templates\\1033\\", nBufferLength=0x105, lpBuffer=0x31e298, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\Templates\\1033\\", lpFilePart=0x0) returned 0x31 [0045.638] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Templates\\1033\\*", lpFindFileData=0x31e4e4 | out: lpFindFileData=0x31e4e4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf59f9270, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xaf577d00, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0xaf577d00, ftLastWriteTime.dwHighDateTime=0x1d305f1, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x381b40 [0045.639] FindClose (in: hFindFile=0x381b40 | out: hFindFile=0x381b40) returned 1 [0045.640] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e77c) returned 1 [0045.640] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e788) returned 1 [0045.640] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e744) returned 1 [0045.640] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Templates\\1033\\Access", nBufferLength=0x105, lpBuffer=0x31e24c, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\Templates\\1033\\Access", lpFilePart=0x0) returned 0x37 [0045.640] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Templates\\1033\\Access\\", nBufferLength=0x105, lpBuffer=0x31e220, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\Templates\\1033\\Access\\", lpFilePart=0x0) returned 0x38 [0045.640] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Templates\\1033\\Access\\*", lpFindFileData=0x31e46c | out: lpFindFileData=0x31e46c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x14ebe6b0, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x15087730, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x15087730, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x381b40 [0045.643] FindClose (in: hFindFile=0x381b40 | out: hFindFile=0x381b40) returned 1 [0045.644] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e704) returned 1 [0045.644] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e710) returned 1 [0045.644] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e744) returned 1 [0045.644] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Templates\\1033\\Access", nBufferLength=0x105, lpBuffer=0x31e24c, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\Templates\\1033\\Access", lpFilePart=0x0) returned 0x37 [0045.644] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Templates\\1033\\Access\\", nBufferLength=0x105, lpBuffer=0x31e220, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\Templates\\1033\\Access\\", lpFilePart=0x0) returned 0x38 [0045.644] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Templates\\1033\\Access\\*", lpFindFileData=0x31e46c | out: lpFindFileData=0x31e46c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x14ebe6b0, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x15087730, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x15087730, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x381b40 [0045.645] FindClose (in: hFindFile=0x381b40 | out: hFindFile=0x381b40) returned 1 [0045.645] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e704) returned 1 [0045.645] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e710) returned 1 [0045.645] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e6cc) returned 1 [0045.645] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Templates\\1033\\Access\\DataType", nBufferLength=0x105, lpBuffer=0x31e1d4, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\Templates\\1033\\Access\\DataType", lpFilePart=0x0) returned 0x40 [0045.646] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Templates\\1033\\Access\\DataType\\", nBufferLength=0x105, lpBuffer=0x31e1a8, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\Templates\\1033\\Access\\DataType\\", lpFilePart=0x0) returned 0x41 [0045.646] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Templates\\1033\\Access\\DataType\\*", lpFindFileData=0x31e3f4 | out: lpFindFileData=0x31e3f4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x14f30ad0, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x14f56c30, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x14f56c30, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x381b40 [0045.649] FindClose (in: hFindFile=0x381b40 | out: hFindFile=0x381b40) returned 1 [0045.649] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e68c) returned 1 [0045.649] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e698) returned 1 [0045.649] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e6cc) returned 1 [0045.650] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Templates\\1033\\Access\\DataType", nBufferLength=0x105, lpBuffer=0x31e1d4, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\Templates\\1033\\Access\\DataType", lpFilePart=0x0) returned 0x40 [0045.650] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Templates\\1033\\Access\\DataType\\", nBufferLength=0x105, lpBuffer=0x31e1a8, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\Templates\\1033\\Access\\DataType\\", lpFilePart=0x0) returned 0x41 [0045.650] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Templates\\1033\\Access\\DataType\\*", lpFindFileData=0x31e3f4 | out: lpFindFileData=0x31e3f4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x14f30ad0, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x14f56c30, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x14f56c30, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x381b40 [0045.651] FindClose (in: hFindFile=0x381b40 | out: hFindFile=0x381b40) returned 1 [0045.652] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e68c) returned 1 [0045.652] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e698) returned 1 [0045.652] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e6cc) returned 1 [0045.652] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Templates\\1033\\Access\\Part", nBufferLength=0x105, lpBuffer=0x31e1d4, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\Templates\\1033\\Access\\Part", lpFilePart=0x0) returned 0x3c [0045.652] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Templates\\1033\\Access\\Part\\", nBufferLength=0x105, lpBuffer=0x31e1a8, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\Templates\\1033\\Access\\Part\\", lpFilePart=0x0) returned 0x3d [0045.652] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Templates\\1033\\Access\\Part\\*", lpFindFileData=0x31e3f4 | out: lpFindFileData=0x31e3f4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x14fa2ef0, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x150615d0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x150615d0, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x381b40 [0045.656] FindClose (in: hFindFile=0x381b40 | out: hFindFile=0x381b40) returned 1 [0045.658] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e68c) returned 1 [0045.658] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e698) returned 1 [0045.658] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e6cc) returned 1 [0045.658] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Templates\\1033\\Access\\Part", nBufferLength=0x105, lpBuffer=0x31e1d4, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\Templates\\1033\\Access\\Part", lpFilePart=0x0) returned 0x3c [0045.658] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Templates\\1033\\Access\\Part\\", nBufferLength=0x105, lpBuffer=0x31e1a8, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\Templates\\1033\\Access\\Part\\", lpFilePart=0x0) returned 0x3d [0045.658] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Templates\\1033\\Access\\Part\\*", lpFindFileData=0x31e3f4 | out: lpFindFileData=0x31e3f4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x14fa2ef0, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x150615d0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x150615d0, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x381b40 [0045.660] FindClose (in: hFindFile=0x381b40 | out: hFindFile=0x381b40) returned 1 [0045.660] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e68c) returned 1 [0045.660] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e698) returned 1 [0045.660] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e6cc) returned 1 [0045.660] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Templates\\1033\\Access\\WSS", nBufferLength=0x105, lpBuffer=0x31e1d4, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\Templates\\1033\\Access\\WSS", lpFilePart=0x0) returned 0x3b [0045.661] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Templates\\1033\\Access\\WSS\\", nBufferLength=0x105, lpBuffer=0x31e1a8, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\Templates\\1033\\Access\\WSS\\", lpFilePart=0x0) returned 0x3c [0045.661] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Templates\\1033\\Access\\WSS\\*", lpFindFileData=0x31e3f4 | out: lpFindFileData=0x31e3f4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x14ebe6b0, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x14ee4810, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x14ee4810, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x381b40 [0045.661] FindClose (in: hFindFile=0x381b40 | out: hFindFile=0x381b40) returned 1 [0045.661] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e68c) returned 1 [0045.661] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e698) returned 1 [0045.661] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e6cc) returned 1 [0045.661] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Templates\\1033\\Access\\WSS", nBufferLength=0x105, lpBuffer=0x31e1d4, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\Templates\\1033\\Access\\WSS", lpFilePart=0x0) returned 0x3b [0045.661] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Templates\\1033\\Access\\WSS\\", nBufferLength=0x105, lpBuffer=0x31e1a8, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\Templates\\1033\\Access\\WSS\\", lpFilePart=0x0) returned 0x3c [0045.661] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Templates\\1033\\Access\\WSS\\*", lpFindFileData=0x31e3f4 | out: lpFindFileData=0x31e3f4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x14ebe6b0, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x14ee4810, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x14ee4810, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x381b40 [0045.662] FindClose (in: hFindFile=0x381b40 | out: hFindFile=0x381b40) returned 1 [0045.662] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e68c) returned 1 [0045.662] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e698) returned 1 [0045.662] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e744) returned 1 [0045.662] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Templates\\1033\\FAX", nBufferLength=0x105, lpBuffer=0x31e24c, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\Templates\\1033\\FAX", lpFilePart=0x0) returned 0x34 [0045.662] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Templates\\1033\\FAX\\", nBufferLength=0x105, lpBuffer=0x31e220, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\Templates\\1033\\FAX\\", lpFilePart=0x0) returned 0x35 [0045.662] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Templates\\1033\\FAX\\*", lpFindFileData=0x31e46c | out: lpFindFileData=0x31e46c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1e3aa710, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x1e5274d0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x1e5274d0, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x381b40 [0045.665] FindClose (in: hFindFile=0x381b40 | out: hFindFile=0x381b40) returned 1 [0045.665] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e704) returned 1 [0045.665] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e710) returned 1 [0045.665] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e744) returned 1 [0045.665] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Templates\\1033\\FAX", nBufferLength=0x105, lpBuffer=0x31e24c, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\Templates\\1033\\FAX", lpFilePart=0x0) returned 0x34 [0045.665] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Templates\\1033\\FAX\\", nBufferLength=0x105, lpBuffer=0x31e220, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\Templates\\1033\\FAX\\", lpFilePart=0x0) returned 0x35 [0045.665] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Templates\\1033\\FAX\\*", lpFindFileData=0x31e46c | out: lpFindFileData=0x31e46c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1e3aa710, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x1e5274d0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x1e5274d0, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x381b40 [0045.667] FindClose (in: hFindFile=0x381b40 | out: hFindFile=0x381b40) returned 1 [0045.667] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e704) returned 1 [0045.667] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e710) returned 1 [0045.667] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e744) returned 1 [0045.667] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Templates\\1033\\ONENOTE", nBufferLength=0x105, lpBuffer=0x31e24c, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\Templates\\1033\\ONENOTE", lpFilePart=0x0) returned 0x38 [0045.667] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Templates\\1033\\ONENOTE\\", nBufferLength=0x105, lpBuffer=0x31e220, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\Templates\\1033\\ONENOTE\\", lpFilePart=0x0) returned 0x39 [0045.668] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Templates\\1033\\ONENOTE\\*", lpFindFileData=0x31e46c | out: lpFindFileData=0x31e46c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc75c370, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0xc75c370, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xc75c370, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x381b40 [0045.668] FindClose (in: hFindFile=0x381b40 | out: hFindFile=0x381b40) returned 1 [0045.668] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e704) returned 1 [0045.668] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e710) returned 1 [0045.668] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e744) returned 1 [0045.668] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Templates\\1033\\ONENOTE", nBufferLength=0x105, lpBuffer=0x31e24c, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\Templates\\1033\\ONENOTE", lpFilePart=0x0) returned 0x38 [0045.668] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Templates\\1033\\ONENOTE\\", nBufferLength=0x105, lpBuffer=0x31e220, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\Templates\\1033\\ONENOTE\\", lpFilePart=0x0) returned 0x39 [0045.668] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Templates\\1033\\ONENOTE\\*", lpFindFileData=0x31e46c | out: lpFindFileData=0x31e46c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc75c370, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0xc75c370, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xc75c370, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x381b40 [0045.669] FindClose (in: hFindFile=0x381b40 | out: hFindFile=0x381b40) returned 1 [0045.669] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e704) returned 1 [0045.669] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e710) returned 1 [0045.669] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e6cc) returned 1 [0045.669] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Templates\\1033\\ONENOTE\\14", nBufferLength=0x105, lpBuffer=0x31e1d4, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\Templates\\1033\\ONENOTE\\14", lpFilePart=0x0) returned 0x3b [0045.669] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Templates\\1033\\ONENOTE\\14\\", nBufferLength=0x105, lpBuffer=0x31e1a8, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\Templates\\1033\\ONENOTE\\14\\", lpFilePart=0x0) returned 0x3c [0045.669] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Templates\\1033\\ONENOTE\\14\\*", lpFindFileData=0x31e3f4 | out: lpFindFileData=0x31e3f4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc75c370, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0xc7a8630, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xc7a8630, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x381b40 [0045.672] FindClose (in: hFindFile=0x381b40 | out: hFindFile=0x381b40) returned 1 [0045.673] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e68c) returned 1 [0045.673] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e698) returned 1 [0045.673] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e6cc) returned 1 [0045.673] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Templates\\1033\\ONENOTE\\14", nBufferLength=0x105, lpBuffer=0x31e1d4, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\Templates\\1033\\ONENOTE\\14", lpFilePart=0x0) returned 0x3b [0045.673] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Templates\\1033\\ONENOTE\\14\\", nBufferLength=0x105, lpBuffer=0x31e1a8, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\Templates\\1033\\ONENOTE\\14\\", lpFilePart=0x0) returned 0x3c [0045.673] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Templates\\1033\\ONENOTE\\14\\*", lpFindFileData=0x31e3f4 | out: lpFindFileData=0x31e3f4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc75c370, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0xc7a8630, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xc7a8630, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x381b40 [0045.673] FindClose (in: hFindFile=0x381b40 | out: hFindFile=0x381b40) returned 1 [0045.673] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e68c) returned 1 [0045.673] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e698) returned 1 [0045.673] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e654) returned 1 [0045.673] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Templates\\1033\\ONENOTE\\14\\Notebook Templates", nBufferLength=0x105, lpBuffer=0x31e15c, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\Templates\\1033\\ONENOTE\\14\\Notebook Templates", lpFilePart=0x0) returned 0x4e [0045.673] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Templates\\1033\\ONENOTE\\14\\Notebook Templates\\", nBufferLength=0x105, lpBuffer=0x31e130, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\Templates\\1033\\ONENOTE\\14\\Notebook Templates\\", lpFilePart=0x0) returned 0x4f [0045.673] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Templates\\1033\\ONENOTE\\14\\Notebook Templates\\*", lpFindFileData=0x31e37c | out: lpFindFileData=0x31e37c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc7a8630, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0xc7a8630, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xc7a8630, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x381b40 [0045.674] FindClose (in: hFindFile=0x381b40 | out: hFindFile=0x381b40) returned 1 [0045.675] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e614) returned 1 [0045.675] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e620) returned 1 [0045.675] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e654) returned 1 [0045.675] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Templates\\1033\\ONENOTE\\14\\Notebook Templates", nBufferLength=0x105, lpBuffer=0x31e15c, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\Templates\\1033\\ONENOTE\\14\\Notebook Templates", lpFilePart=0x0) returned 0x4e [0045.675] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Templates\\1033\\ONENOTE\\14\\Notebook Templates\\", nBufferLength=0x105, lpBuffer=0x31e130, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\Templates\\1033\\ONENOTE\\14\\Notebook Templates\\", lpFilePart=0x0) returned 0x4f [0045.675] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Templates\\1033\\ONENOTE\\14\\Notebook Templates\\*", lpFindFileData=0x31e37c | out: lpFindFileData=0x31e37c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc7a8630, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0xc7a8630, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xc7a8630, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x381b40 [0045.675] FindClose (in: hFindFile=0x381b40 | out: hFindFile=0x381b40) returned 1 [0045.675] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e614) returned 1 [0045.675] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Templates\\1033\\ONENOTE\\14\\Stationery", nBufferLength=0x105, lpBuffer=0x31e15c, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\Templates\\1033\\ONENOTE\\14\\Stationery", lpFilePart=0x0) returned 0x46 [0045.675] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Templates\\1033\\ONENOTE\\14\\Stationery\\", nBufferLength=0x105, lpBuffer=0x31e130, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\Templates\\1033\\ONENOTE\\14\\Stationery\\", lpFilePart=0x0) returned 0x47 [0045.675] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Templates\\1033\\ONENOTE\\14\\Stationery\\*", lpFindFileData=0x31e37c | out: lpFindFileData=0x31e37c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc75c370, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0xc840bb0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xc840bb0, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x381b40 [0045.676] FindClose (in: hFindFile=0x381b40 | out: hFindFile=0x381b40) returned 1 [0045.676] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Templates\\1033\\ONENOTE\\14\\Stationery", nBufferLength=0x105, lpBuffer=0x31e15c, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\Templates\\1033\\ONENOTE\\14\\Stationery", lpFilePart=0x0) returned 0x46 [0045.676] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Templates\\1033\\ONENOTE\\14\\Stationery\\", nBufferLength=0x105, lpBuffer=0x31e130, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\Templates\\1033\\ONENOTE\\14\\Stationery\\", lpFilePart=0x0) returned 0x47 [0045.676] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Templates\\1033\\ONENOTE\\14\\Stationery\\*", lpFindFileData=0x31e37c | out: lpFindFileData=0x31e37c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc75c370, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0xc840bb0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xc840bb0, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x381b40 [0045.677] FindClose (in: hFindFile=0x381b40 | out: hFindFile=0x381b40) returned 1 [0045.677] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Templates\\Presentation Designs", nBufferLength=0x105, lpBuffer=0x31e2c4, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\Templates\\Presentation Designs", lpFilePart=0x0) returned 0x40 [0045.677] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Templates\\Presentation Designs\\", nBufferLength=0x105, lpBuffer=0x31e298, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\Templates\\Presentation Designs\\", lpFilePart=0x0) returned 0x41 [0045.677] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Templates\\Presentation Designs\\*", lpFindFileData=0x31e4e4 | out: lpFindFileData=0x31e4e4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x50e7acd0, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x696f1810, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x696f1810, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x381b40 [0045.677] FindClose (in: hFindFile=0x381b40 | out: hFindFile=0x381b40) returned 1 [0045.677] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Templates\\Presentation Designs", nBufferLength=0x105, lpBuffer=0x31e2c4, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\Templates\\Presentation Designs", lpFilePart=0x0) returned 0x40 [0045.677] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Templates\\Presentation Designs\\", nBufferLength=0x105, lpBuffer=0x31e298, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\Templates\\Presentation Designs\\", lpFilePart=0x0) returned 0x41 [0045.677] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Templates\\Presentation Designs\\*", lpFindFileData=0x31e4e4 | out: lpFindFileData=0x31e4e4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x50e7acd0, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x696f1810, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x696f1810, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x381b40 [0045.678] FindClose (in: hFindFile=0x381b40 | out: hFindFile=0x381b40) returned 1 [0045.678] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft SQL Server Compact Edition", nBufferLength=0x105, lpBuffer=0x31e3b4, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft SQL Server Compact Edition", lpFilePart=0x0) returned 0x35 [0045.678] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft SQL Server Compact Edition\\", nBufferLength=0x105, lpBuffer=0x31e388, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft SQL Server Compact Edition\\", lpFilePart=0x0) returned 0x36 [0045.678] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft SQL Server Compact Edition\\*", lpFindFileData=0x31e5d4 | out: lpFindFileData=0x31e5d4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x50e54b70, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0xd9947fa0, ftLastAccessTime.dwHighDateTime=0x1d5e82a, ftLastWriteTime.dwLowDateTime=0xd9947fa0, ftLastWriteTime.dwHighDateTime=0x1d5e82a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x381b40 [0045.678] FindClose (in: hFindFile=0x381b40 | out: hFindFile=0x381b40) returned 1 [0045.678] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft SQL Server Compact Edition", nBufferLength=0x105, lpBuffer=0x31e3b4, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft SQL Server Compact Edition", lpFilePart=0x0) returned 0x35 [0045.678] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft SQL Server Compact Edition\\", nBufferLength=0x105, lpBuffer=0x31e388, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft SQL Server Compact Edition\\", lpFilePart=0x0) returned 0x36 [0045.678] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft SQL Server Compact Edition\\*", lpFindFileData=0x31e5d4 | out: lpFindFileData=0x31e5d4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x50e54b70, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0xd9947fa0, ftLastAccessTime.dwHighDateTime=0x1d5e82a, ftLastWriteTime.dwLowDateTime=0xd9947fa0, ftLastWriteTime.dwHighDateTime=0x1d5e82a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x381b40 [0045.679] FindClose (in: hFindFile=0x381b40 | out: hFindFile=0x381b40) returned 1 [0045.679] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft SQL Server Compact Edition\\v3.5", nBufferLength=0x105, lpBuffer=0x31e33c, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft SQL Server Compact Edition\\v3.5", lpFilePart=0x0) returned 0x3a [0045.679] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft SQL Server Compact Edition\\v3.5\\", nBufferLength=0x105, lpBuffer=0x31e310, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft SQL Server Compact Edition\\v3.5\\", lpFilePart=0x0) returned 0x3b [0045.679] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft SQL Server Compact Edition\\v3.5\\*", lpFindFileData=0x31e55c | out: lpFindFileData=0x31e55c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x50e54b70, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x6d3a4910, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x6d3a4910, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x381b40 [0045.681] FindClose (in: hFindFile=0x381b40 | out: hFindFile=0x381b40) returned 1 [0045.682] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft SQL Server Compact Edition\\v3.5", nBufferLength=0x105, lpBuffer=0x31e33c, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft SQL Server Compact Edition\\v3.5", lpFilePart=0x0) returned 0x3a [0045.682] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft SQL Server Compact Edition\\v3.5\\", nBufferLength=0x105, lpBuffer=0x31e310, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft SQL Server Compact Edition\\v3.5\\", lpFilePart=0x0) returned 0x3b [0045.682] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft SQL Server Compact Edition\\v3.5\\*", lpFindFileData=0x31e55c | out: lpFindFileData=0x31e55c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x50e54b70, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x6d3a4910, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x6d3a4910, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x381b40 [0045.687] FindNextFileW (in: hFindFile=0x381b40, lpFindFileData=0x31e56c | out: lpFindFileData=0x31e56c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xdd805600, ftCreationTime.dwHighDateTime=0x1c8d68c, ftLastAccessTime.dwLowDateTime=0x5ab958d0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xdd805600, ftLastWriteTime.dwHighDateTime=0x1c8d68c, nFileSizeHigh=0x0, nFileSizeLow=0x15a40, dwReserved0=0x0, dwReserved1=0x0, cFileName="sqlceme35.dll", cAlternateFileName="SQLCEM~1.DLL")) returned 1 [0045.687] FindNextFileW (in: hFindFile=0x381b40, lpFindFileData=0x31e56c | out: lpFindFileData=0x31e56c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xdd805600, ftCreationTime.dwHighDateTime=0x1c8d68c, ftLastAccessTime.dwLowDateTime=0x6d3a4910, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xdd805600, ftLastWriteTime.dwHighDateTime=0x1c8d68c, nFileSizeHigh=0x0, nFileSizeLow=0x3fa40, dwReserved0=0x0, dwReserved1=0x0, cFileName="sqlceoledb35.dll", cAlternateFileName="SQLCEO~1.DLL")) returned 1 [0045.687] FindNextFileW (in: hFindFile=0x381b40, lpFindFileData=0x31e56c | out: lpFindFileData=0x31e56c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xdeb18300, ftCreationTime.dwHighDateTime=0x1c8d68c, ftLastAccessTime.dwLowDateTime=0x6d3caa70, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xdeb18300, ftLastWriteTime.dwHighDateTime=0x1c8d68c, nFileSizeHigh=0x0, nFileSizeLow=0x114e40, dwReserved0=0x0, dwReserved1=0x0, cFileName="sqlceqp35.dll", cAlternateFileName="SQLCEQ~1.DLL")) returned 1 [0045.687] FindNextFileW (in: hFindFile=0x381b40, lpFindFileData=0x31e56c | out: lpFindFileData=0x31e56c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xdeb18300, ftCreationTime.dwHighDateTime=0x1c8d68c, ftLastAccessTime.dwLowDateTime=0x5abbba30, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xdeb18300, ftLastWriteTime.dwHighDateTime=0x1c8d68c, nFileSizeHigh=0x0, nFileSizeLow=0x9d640, dwReserved0=0x0, dwReserved1=0x0, cFileName="sqlcese35.dll", cAlternateFileName="SQLCES~1.DLL")) returned 1 [0045.687] FindNextFileW (in: hFindFile=0x381b40, lpFindFileData=0x31e56c | out: lpFindFileData=0x31e56c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xdeb18300, ftCreationTime.dwHighDateTime=0x1c8d68c, ftLastAccessTime.dwLowDateTime=0x5abbba30, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xdeb18300, ftLastWriteTime.dwHighDateTime=0x1c8d68c, nFileSizeHigh=0x0, nFileSizeLow=0x9d640, dwReserved0=0x0, dwReserved1=0x0, cFileName="sqlcese35.dll", cAlternateFileName="SQLCES~1.DLL")) returned 0 [0045.687] FindClose (in: hFindFile=0x381b40 | out: hFindFile=0x381b40) returned 1 [0045.688] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e7f4) returned 1 [0045.688] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e800) returned 1 [0045.688] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e7bc) returned 1 [0045.688] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft SQL Server Compact Edition\\v3.5\\Desktop", nBufferLength=0x105, lpBuffer=0x31e2c4, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft SQL Server Compact Edition\\v3.5\\Desktop", lpFilePart=0x0) returned 0x42 [0045.688] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft SQL Server Compact Edition\\v3.5\\Desktop\\", nBufferLength=0x105, lpBuffer=0x31e298, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft SQL Server Compact Edition\\v3.5\\Desktop\\", lpFilePart=0x0) returned 0x43 [0045.688] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft SQL Server Compact Edition\\v3.5\\Desktop\\*", lpFindFileData=0x31e4e4 | out: lpFindFileData=0x31e4e4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x50e54b70, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x50e54b70, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x50e54b70, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x381b40 [0045.689] FindNextFileW (in: hFindFile=0x381b40, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x50e54b70, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x50e54b70, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x50e54b70, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0045.689] FindNextFileW (in: hFindFile=0x381b40, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x50e54b70, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x50e54b70, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x50e54b70, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 0 [0045.690] FindClose (in: hFindFile=0x381b40 | out: hFindFile=0x381b40) returned 1 [0045.690] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e77c) returned 1 [0045.690] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e788) returned 1 [0045.690] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e7bc) returned 1 [0045.690] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft SQL Server Compact Edition\\v3.5\\Desktop", nBufferLength=0x105, lpBuffer=0x31e2c4, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft SQL Server Compact Edition\\v3.5\\Desktop", lpFilePart=0x0) returned 0x42 [0045.690] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft SQL Server Compact Edition\\v3.5\\Desktop\\", nBufferLength=0x105, lpBuffer=0x31e298, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft SQL Server Compact Edition\\v3.5\\Desktop\\", lpFilePart=0x0) returned 0x43 [0045.690] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft SQL Server Compact Edition\\v3.5\\Desktop\\*", lpFindFileData=0x31e4e4 | out: lpFindFileData=0x31e4e4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x50e54b70, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x50e54b70, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x50e54b70, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x381b40 [0045.690] FindNextFileW (in: hFindFile=0x381b40, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x50e54b70, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x50e54b70, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x50e54b70, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0045.690] FindNextFileW (in: hFindFile=0x381b40, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x50e54b70, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x50e54b70, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x50e54b70, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 0 [0045.690] FindClose (in: hFindFile=0x381b40 | out: hFindFile=0x381b40) returned 1 [0045.690] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e77c) returned 1 [0045.691] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e788) returned 1 [0045.691] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e8ac) returned 1 [0045.691] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Sync Framework", nBufferLength=0x105, lpBuffer=0x31e3b4, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Sync Framework", lpFilePart=0x0) returned 0x29 [0045.691] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Sync Framework\\", nBufferLength=0x105, lpBuffer=0x31e388, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Sync Framework\\", lpFilePart=0x0) returned 0x2a [0045.691] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Sync Framework\\*", lpFindFileData=0x31e5d4 | out: lpFindFileData=0x31e5d4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x50e7acd0, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0xda90d160, ftLastAccessTime.dwHighDateTime=0x1d5e82a, ftLastWriteTime.dwLowDateTime=0xda90d160, ftLastWriteTime.dwHighDateTime=0x1d5e82a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x381b40 [0045.691] FindNextFileW (in: hFindFile=0x381b40, lpFindFileData=0x31e5e4 | out: lpFindFileData=0x31e5e4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x50e7acd0, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0xda90d160, ftLastAccessTime.dwHighDateTime=0x1d5e82a, ftLastWriteTime.dwLowDateTime=0xda90d160, ftLastWriteTime.dwHighDateTime=0x1d5e82a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0045.691] FindNextFileW (in: hFindFile=0x381b40, lpFindFileData=0x31e5e4 | out: lpFindFileData=0x31e5e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x88e70710, ftCreationTime.dwHighDateTime=0x1d58f08, ftLastAccessTime.dwLowDateTime=0x98ae00b0, ftLastAccessTime.dwHighDateTime=0x1d573db, ftLastWriteTime.dwLowDateTime=0x98ae00b0, ftLastWriteTime.dwHighDateTime=0x1d573db, nFileSizeHigh=0x0, nFileSizeLow=0x13a00, dwReserved0=0x0, dwReserved1=0x0, cFileName="chem-identification-conditional.exe", cAlternateFileName="CHEM-I~1.EXE")) returned 1 [0045.691] FindNextFileW (in: hFindFile=0x381b40, lpFindFileData=0x31e5e4 | out: lpFindFileData=0x31e5e4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x50e7acd0, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x6626d2b0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x6626d2b0, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="v1.0", cAlternateFileName="")) returned 1 [0045.691] FindNextFileW (in: hFindFile=0x381b40, lpFindFileData=0x31e5e4 | out: lpFindFileData=0x31e5e4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x50e7acd0, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x6626d2b0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x6626d2b0, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="v1.0", cAlternateFileName="")) returned 0 [0045.692] FindClose (in: hFindFile=0x381b40 | out: hFindFile=0x381b40) returned 1 [0045.692] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e86c) returned 1 [0045.692] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e878) returned 1 [0045.692] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e8ac) returned 1 [0045.692] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Sync Framework", nBufferLength=0x105, lpBuffer=0x31e3b4, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Sync Framework", lpFilePart=0x0) returned 0x29 [0045.692] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Sync Framework\\", nBufferLength=0x105, lpBuffer=0x31e388, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Sync Framework\\", lpFilePart=0x0) returned 0x2a [0045.692] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Sync Framework\\*", lpFindFileData=0x31e5d4 | out: lpFindFileData=0x31e5d4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x50e7acd0, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0xda90d160, ftLastAccessTime.dwHighDateTime=0x1d5e82a, ftLastWriteTime.dwLowDateTime=0xda90d160, ftLastWriteTime.dwHighDateTime=0x1d5e82a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x381b40 [0045.692] FindNextFileW (in: hFindFile=0x381b40, lpFindFileData=0x31e5e4 | out: lpFindFileData=0x31e5e4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x50e7acd0, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0xda90d160, ftLastAccessTime.dwHighDateTime=0x1d5e82a, ftLastWriteTime.dwLowDateTime=0xda90d160, ftLastWriteTime.dwHighDateTime=0x1d5e82a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0045.692] FindNextFileW (in: hFindFile=0x381b40, lpFindFileData=0x31e5e4 | out: lpFindFileData=0x31e5e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x88e70710, ftCreationTime.dwHighDateTime=0x1d58f08, ftLastAccessTime.dwLowDateTime=0x98ae00b0, ftLastAccessTime.dwHighDateTime=0x1d573db, ftLastWriteTime.dwLowDateTime=0x98ae00b0, ftLastWriteTime.dwHighDateTime=0x1d573db, nFileSizeHigh=0x0, nFileSizeLow=0x13a00, dwReserved0=0x0, dwReserved1=0x0, cFileName="chem-identification-conditional.exe", cAlternateFileName="CHEM-I~1.EXE")) returned 1 [0045.693] FindNextFileW (in: hFindFile=0x381b40, lpFindFileData=0x31e5e4 | out: lpFindFileData=0x31e5e4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x50e7acd0, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x6626d2b0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x6626d2b0, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="v1.0", cAlternateFileName="")) returned 1 [0045.693] FindNextFileW (in: hFindFile=0x381b40, lpFindFileData=0x31e5e4 | out: lpFindFileData=0x31e5e4*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0045.693] FindClose (in: hFindFile=0x381b40 | out: hFindFile=0x381b40) returned 1 [0045.693] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e86c) returned 1 [0045.693] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e878) returned 1 [0045.693] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e834) returned 1 [0045.693] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Sync Framework\\v1.0", nBufferLength=0x105, lpBuffer=0x31e33c, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Sync Framework\\v1.0", lpFilePart=0x0) returned 0x2e [0045.693] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Sync Framework\\v1.0\\", nBufferLength=0x105, lpBuffer=0x31e310, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Sync Framework\\v1.0\\", lpFilePart=0x0) returned 0x2f [0045.693] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Sync Framework\\v1.0\\*", lpFindFileData=0x31e55c | out: lpFindFileData=0x31e55c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x50e7acd0, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x6626d2b0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x6626d2b0, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x381b40 [0045.693] FindNextFileW (in: hFindFile=0x381b40, lpFindFileData=0x31e56c | out: lpFindFileData=0x31e56c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x50e7acd0, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x6626d2b0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x6626d2b0, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0045.694] FindNextFileW (in: hFindFile=0x381b40, lpFindFileData=0x31e56c | out: lpFindFileData=0x31e56c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x6626d2b0, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x6626d2b0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x6626d2b0, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Documentation", cAlternateFileName="DOCUME~1")) returned 1 [0045.694] FindNextFileW (in: hFindFile=0x381b40, lpFindFileData=0x31e56c | out: lpFindFileData=0x31e56c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x50e7acd0, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x50e7acd0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x50e7acd0, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Runtime", cAlternateFileName="")) returned 1 [0045.694] FindNextFileW (in: hFindFile=0x381b40, lpFindFileData=0x31e56c | out: lpFindFileData=0x31e56c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x50e7acd0, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x50e7acd0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x50e7acd0, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Runtime", cAlternateFileName="")) returned 0 [0045.694] FindClose (in: hFindFile=0x381b40 | out: hFindFile=0x381b40) returned 1 [0045.694] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e7f4) returned 1 [0045.694] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e800) returned 1 [0045.694] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e834) returned 1 [0045.694] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Sync Framework\\v1.0", nBufferLength=0x105, lpBuffer=0x31e33c, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Sync Framework\\v1.0", lpFilePart=0x0) returned 0x2e [0045.694] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Sync Framework\\v1.0\\", nBufferLength=0x105, lpBuffer=0x31e310, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Sync Framework\\v1.0\\", lpFilePart=0x0) returned 0x2f [0045.694] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Sync Framework\\v1.0\\*", lpFindFileData=0x31e55c | out: lpFindFileData=0x31e55c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x50e7acd0, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x6626d2b0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x6626d2b0, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x381b40 [0045.695] FindNextFileW (in: hFindFile=0x381b40, lpFindFileData=0x31e56c | out: lpFindFileData=0x31e56c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x50e7acd0, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x6626d2b0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x6626d2b0, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0045.695] FindNextFileW (in: hFindFile=0x381b40, lpFindFileData=0x31e56c | out: lpFindFileData=0x31e56c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x6626d2b0, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x6626d2b0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x6626d2b0, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Documentation", cAlternateFileName="DOCUME~1")) returned 1 [0045.695] FindNextFileW (in: hFindFile=0x381b40, lpFindFileData=0x31e56c | out: lpFindFileData=0x31e56c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x50e7acd0, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x50e7acd0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x50e7acd0, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Runtime", cAlternateFileName="")) returned 1 [0045.695] FindNextFileW (in: hFindFile=0x381b40, lpFindFileData=0x31e56c | out: lpFindFileData=0x31e56c*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0045.695] FindClose (in: hFindFile=0x381b40 | out: hFindFile=0x381b40) returned 1 [0045.695] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e7f4) returned 1 [0045.695] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e800) returned 1 [0045.695] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e7bc) returned 1 [0045.695] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Sync Framework\\v1.0\\Documentation", nBufferLength=0x105, lpBuffer=0x31e2c4, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Sync Framework\\v1.0\\Documentation", lpFilePart=0x0) returned 0x3c [0045.695] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Sync Framework\\v1.0\\Documentation\\", nBufferLength=0x105, lpBuffer=0x31e298, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Sync Framework\\v1.0\\Documentation\\", lpFilePart=0x0) returned 0x3d [0045.695] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Sync Framework\\v1.0\\Documentation\\*", lpFindFileData=0x31e4e4 | out: lpFindFileData=0x31e4e4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x6626d2b0, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x6626d2b0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x6626d2b0, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x381b40 [0045.697] FindNextFileW (in: hFindFile=0x381b40, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x6626d2b0, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x6626d2b0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x6626d2b0, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0045.697] FindNextFileW (in: hFindFile=0x381b40, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x6626d2b0, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x6626d2b0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x6626d2b0, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="1033", cAlternateFileName="")) returned 1 [0045.697] FindNextFileW (in: hFindFile=0x381b40, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x6626d2b0, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x6626d2b0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x6626d2b0, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="1033", cAlternateFileName="")) returned 0 [0045.697] FindClose (in: hFindFile=0x381b40 | out: hFindFile=0x381b40) returned 1 [0045.697] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e77c) returned 1 [0045.697] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e788) returned 1 [0045.697] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e7bc) returned 1 [0045.697] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Sync Framework\\v1.0\\Documentation", nBufferLength=0x105, lpBuffer=0x31e2c4, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Sync Framework\\v1.0\\Documentation", lpFilePart=0x0) returned 0x3c [0045.697] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Sync Framework\\v1.0\\Documentation\\", nBufferLength=0x105, lpBuffer=0x31e298, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Sync Framework\\v1.0\\Documentation\\", lpFilePart=0x0) returned 0x3d [0045.698] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Sync Framework\\v1.0\\Documentation\\*", lpFindFileData=0x31e4e4 | out: lpFindFileData=0x31e4e4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x6626d2b0, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x6626d2b0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x6626d2b0, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x381b40 [0045.698] FindNextFileW (in: hFindFile=0x381b40, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x6626d2b0, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x6626d2b0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x6626d2b0, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0045.698] FindNextFileW (in: hFindFile=0x381b40, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x6626d2b0, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x6626d2b0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x6626d2b0, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="1033", cAlternateFileName="")) returned 1 [0045.698] FindNextFileW (in: hFindFile=0x381b40, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0045.698] FindClose (in: hFindFile=0x381b40 | out: hFindFile=0x381b40) returned 1 [0045.698] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e77c) returned 1 [0045.698] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e788) returned 1 [0045.698] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e744) returned 1 [0045.698] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Sync Framework\\v1.0\\Documentation\\1033", nBufferLength=0x105, lpBuffer=0x31e24c, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Sync Framework\\v1.0\\Documentation\\1033", lpFilePart=0x0) returned 0x41 [0045.698] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Sync Framework\\v1.0\\Documentation\\1033\\", nBufferLength=0x105, lpBuffer=0x31e220, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Sync Framework\\v1.0\\Documentation\\1033\\", lpFilePart=0x0) returned 0x42 [0045.698] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Sync Framework\\v1.0\\Documentation\\1033\\*", lpFindFileData=0x31e46c | out: lpFindFileData=0x31e46c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x6626d2b0, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x6626d2b0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x6626d2b0, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x381b40 [0045.699] FindNextFileW (in: hFindFile=0x381b40, lpFindFileData=0x31e47c | out: lpFindFileData=0x31e47c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x6626d2b0, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x6626d2b0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x6626d2b0, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0045.700] FindNextFileW (in: hFindFile=0x381b40, lpFindFileData=0x31e47c | out: lpFindFileData=0x31e47c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x6626d2b0, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x6626d2b0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x6626d2b0, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="License Agreements", cAlternateFileName="LICENS~1")) returned 1 [0045.700] FindNextFileW (in: hFindFile=0x381b40, lpFindFileData=0x31e47c | out: lpFindFileData=0x31e47c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x6626d2b0, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x6626d2b0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x6626d2b0, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="License Agreements", cAlternateFileName="LICENS~1")) returned 0 [0045.700] FindClose (in: hFindFile=0x381b40 | out: hFindFile=0x381b40) returned 1 [0045.700] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e704) returned 1 [0045.700] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e710) returned 1 [0045.700] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e744) returned 1 [0045.700] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Sync Framework\\v1.0\\Documentation\\1033", nBufferLength=0x105, lpBuffer=0x31e24c, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Sync Framework\\v1.0\\Documentation\\1033", lpFilePart=0x0) returned 0x41 [0045.700] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Sync Framework\\v1.0\\Documentation\\1033\\", nBufferLength=0x105, lpBuffer=0x31e220, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Sync Framework\\v1.0\\Documentation\\1033\\", lpFilePart=0x0) returned 0x42 [0045.700] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Sync Framework\\v1.0\\Documentation\\1033\\*", lpFindFileData=0x31e46c | out: lpFindFileData=0x31e46c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x6626d2b0, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x6626d2b0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x6626d2b0, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x381b40 [0045.700] FindNextFileW (in: hFindFile=0x381b40, lpFindFileData=0x31e47c | out: lpFindFileData=0x31e47c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x6626d2b0, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x6626d2b0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x6626d2b0, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0045.700] FindNextFileW (in: hFindFile=0x381b40, lpFindFileData=0x31e47c | out: lpFindFileData=0x31e47c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x6626d2b0, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x6626d2b0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x6626d2b0, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="License Agreements", cAlternateFileName="LICENS~1")) returned 1 [0045.701] FindNextFileW (in: hFindFile=0x381b40, lpFindFileData=0x31e47c | out: lpFindFileData=0x31e47c*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0045.701] FindClose (in: hFindFile=0x381b40 | out: hFindFile=0x381b40) returned 1 [0045.701] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e704) returned 1 [0045.701] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e710) returned 1 [0045.701] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e6cc) returned 1 [0045.701] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Sync Framework\\v1.0\\Documentation\\1033\\License Agreements", nBufferLength=0x105, lpBuffer=0x31e1d4, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Sync Framework\\v1.0\\Documentation\\1033\\License Agreements", lpFilePart=0x0) returned 0x54 [0045.701] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Sync Framework\\v1.0\\Documentation\\1033\\License Agreements\\", nBufferLength=0x105, lpBuffer=0x31e1a8, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Sync Framework\\v1.0\\Documentation\\1033\\License Agreements\\", lpFilePart=0x0) returned 0x55 [0045.701] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Sync Framework\\v1.0\\Documentation\\1033\\License Agreements\\*", lpFindFileData=0x31e3f4 | out: lpFindFileData=0x31e3f4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x6626d2b0, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x6626d2b0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x6626d2b0, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x381b40 [0045.701] FindNextFileW (in: hFindFile=0x381b40, lpFindFileData=0x31e404 | out: lpFindFileData=0x31e404*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x6626d2b0, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x6626d2b0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x6626d2b0, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0045.701] FindNextFileW (in: hFindFile=0x381b40, lpFindFileData=0x31e404 | out: lpFindFileData=0x31e404*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xeb2b9400, ftCreationTime.dwHighDateTime=0x1c9c55a, ftLastAccessTime.dwLowDateTime=0x6626d2b0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xeb2b9400, ftLastWriteTime.dwHighDateTime=0x1c9c55a, nFileSizeHigh=0x0, nFileSizeLow=0x1afd7, dwReserved0=0x0, dwReserved1=0x0, cFileName="SynchronizationEula.rtf", cAlternateFileName="SYNCHR~1.RTF")) returned 1 [0045.702] FindNextFileW (in: hFindFile=0x381b40, lpFindFileData=0x31e404 | out: lpFindFileData=0x31e404*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0045.702] FindClose (in: hFindFile=0x381b40 | out: hFindFile=0x381b40) returned 1 [0045.702] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e68c) returned 1 [0045.702] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e698) returned 1 [0045.702] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e6cc) returned 1 [0045.702] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Sync Framework\\v1.0\\Documentation\\1033\\License Agreements", nBufferLength=0x105, lpBuffer=0x31e1d4, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Sync Framework\\v1.0\\Documentation\\1033\\License Agreements", lpFilePart=0x0) returned 0x54 [0045.702] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Sync Framework\\v1.0\\Documentation\\1033\\License Agreements\\", nBufferLength=0x105, lpBuffer=0x31e1a8, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Sync Framework\\v1.0\\Documentation\\1033\\License Agreements\\", lpFilePart=0x0) returned 0x55 [0045.702] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Sync Framework\\v1.0\\Documentation\\1033\\License Agreements\\*", lpFindFileData=0x31e3f4 | out: lpFindFileData=0x31e3f4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x6626d2b0, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x6626d2b0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x6626d2b0, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x381b40 [0045.702] FindNextFileW (in: hFindFile=0x381b40, lpFindFileData=0x31e404 | out: lpFindFileData=0x31e404*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x6626d2b0, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x6626d2b0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x6626d2b0, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0045.702] FindNextFileW (in: hFindFile=0x381b40, lpFindFileData=0x31e404 | out: lpFindFileData=0x31e404*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xeb2b9400, ftCreationTime.dwHighDateTime=0x1c9c55a, ftLastAccessTime.dwLowDateTime=0x6626d2b0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xeb2b9400, ftLastWriteTime.dwHighDateTime=0x1c9c55a, nFileSizeHigh=0x0, nFileSizeLow=0x1afd7, dwReserved0=0x0, dwReserved1=0x0, cFileName="SynchronizationEula.rtf", cAlternateFileName="SYNCHR~1.RTF")) returned 1 [0045.702] FindNextFileW (in: hFindFile=0x381b40, lpFindFileData=0x31e404 | out: lpFindFileData=0x31e404*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xeb2b9400, ftCreationTime.dwHighDateTime=0x1c9c55a, ftLastAccessTime.dwLowDateTime=0x6626d2b0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xeb2b9400, ftLastWriteTime.dwHighDateTime=0x1c9c55a, nFileSizeHigh=0x0, nFileSizeLow=0x1afd7, dwReserved0=0x0, dwReserved1=0x0, cFileName="SynchronizationEula.rtf", cAlternateFileName="SYNCHR~1.RTF")) returned 0 [0045.703] FindClose (in: hFindFile=0x381b40 | out: hFindFile=0x381b40) returned 1 [0045.703] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e68c) returned 1 [0045.703] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e698) returned 1 [0045.703] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Sync Framework\\v1.0\\Documentation\\1033\\License Agreements\\SynchronizationEula.rtf", nBufferLength=0x105, lpBuffer=0x31e0a4, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Sync Framework\\v1.0\\Documentation\\1033\\License Agreements\\SynchronizationEula.rtf", lpFilePart=0x0) returned 0x6c [0045.703] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e598) returned 1 [0045.703] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Sync Framework\\v1.0\\Documentation\\1033\\License Agreements\\SynchronizationEula.rtf" (normalized: "c:\\program files\\microsoft sync framework\\v1.0\\documentation\\1033\\license agreements\\synchronizationeula.rtf"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x274 [0045.703] GetFileType (hFile=0x274) returned 0x1 [0045.703] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e594) returned 1 [0045.703] GetFileType (hFile=0x274) returned 0x1 [0045.703] GetFileSize (in: hFile=0x274, lpFileSizeHigh=0x31e6a0 | out: lpFileSizeHigh=0x31e6a0*=0x0) returned 0x1afd7 [0045.703] ReadFile (in: hFile=0x274, lpBuffer=0x36194b0, nNumberOfBytesToRead=0x1afd7, lpNumberOfBytesRead=0x31e64c, lpOverlapped=0x0 | out: lpBuffer=0x36194b0*, lpNumberOfBytesRead=0x31e64c*=0x1afd7, lpOverlapped=0x0) returned 1 [0045.705] CloseHandle (hObject=0x274) returned 1 [0045.750] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Sync Framework\\v1.0\\Documentation\\1033\\License Agreements\\SynchronizationEula.rtf", nBufferLength=0x105, lpBuffer=0x31e090, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Sync Framework\\v1.0\\Documentation\\1033\\License Agreements\\SynchronizationEula.rtf", lpFilePart=0x0) returned 0x6c [0045.750] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e584) returned 1 [0045.750] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Sync Framework\\v1.0\\Documentation\\1033\\License Agreements\\SynchronizationEula.rtf" (normalized: "c:\\program files\\microsoft sync framework\\v1.0\\documentation\\1033\\license agreements\\synchronizationeula.rtf"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x274 [0045.751] GetFileType (hFile=0x274) returned 0x1 [0045.751] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e580) returned 1 [0045.751] GetFileType (hFile=0x274) returned 0x1 [0045.751] WriteFile (in: hFile=0x274, lpBuffer=0x36a0448*, nNumberOfBytesToWrite=0x1afe0, lpNumberOfBytesWritten=0x31e640, lpOverlapped=0x0 | out: lpBuffer=0x36a0448*, lpNumberOfBytesWritten=0x31e640*=0x1afe0, lpOverlapped=0x0) returned 1 [0045.753] CloseHandle (hObject=0x274) returned 1 [0045.755] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Sync Framework\\v1.0\\Documentation\\1033\\License Agreements\\SynchronizationEula.rtf", nBufferLength=0x105, lpBuffer=0x31e1c4, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Sync Framework\\v1.0\\Documentation\\1033\\License Agreements\\SynchronizationEula.rtf", lpFilePart=0x0) returned 0x6c [0045.755] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Sync Framework\\v1.0\\Documentation\\1033\\License Agreements\\SynchronizationEula.rtf", nBufferLength=0x105, lpBuffer=0x31e1c4, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Sync Framework\\v1.0\\Documentation\\1033\\License Agreements\\SynchronizationEula.rtf", lpFilePart=0x0) returned 0x6c [0045.755] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e624) returned 1 [0045.755] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Sync Framework\\v1.0\\Documentation\\1033\\License Agreements\\SynchronizationEula.rtf" (normalized: "c:\\program files\\microsoft sync framework\\v1.0\\documentation\\1033\\license agreements\\synchronizationeula.rtf"), fInfoLevelId=0x0, lpFileInformation=0x31e6a0 | out: lpFileInformation=0x31e6a0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xeb2b9400, ftCreationTime.dwHighDateTime=0x1c9c55a, ftLastAccessTime.dwLowDateTime=0x6626d2b0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xfebaa5e0, ftLastWriteTime.dwHighDateTime=0x1d6eb7e, nFileSizeHigh=0x0, nFileSizeLow=0x1afe0)) returned 1 [0045.756] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e620) returned 1 [0045.756] MoveFileW (lpExistingFileName="C:\\Program Files\\Microsoft Sync Framework\\v1.0\\Documentation\\1033\\License Agreements\\SynchronizationEula.rtf" (normalized: "c:\\program files\\microsoft sync framework\\v1.0\\documentation\\1033\\license agreements\\synchronizationeula.rtf"), lpNewFileName="C:\\Program Files\\Microsoft Sync Framework\\v1.0\\Documentation\\1033\\License Agreements\\SynchronizationEula.rtf" (normalized: "c:\\program files\\microsoft sync framework\\v1.0\\documentation\\1033\\license agreements\\synchronizationeula.rtf")) returned 1 [0045.756] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e7bc) returned 1 [0045.756] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Sync Framework\\v1.0\\Runtime", nBufferLength=0x105, lpBuffer=0x31e2c4, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Sync Framework\\v1.0\\Runtime", lpFilePart=0x0) returned 0x36 [0045.756] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Sync Framework\\v1.0\\Runtime\\", nBufferLength=0x105, lpBuffer=0x31e298, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Sync Framework\\v1.0\\Runtime\\", lpFilePart=0x0) returned 0x37 [0045.756] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Sync Framework\\v1.0\\Runtime\\*", lpFindFileData=0x31e4e4 | out: lpFindFileData=0x31e4e4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x50e7acd0, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x50e7acd0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x50e7acd0, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x381e80 [0045.756] FindNextFileW (in: hFindFile=0x381e80, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x50e7acd0, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x50e7acd0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x50e7acd0, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0045.757] FindNextFileW (in: hFindFile=0x381e80, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x50e7acd0, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x60c6f7f0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x60c6f7f0, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="x64", cAlternateFileName="")) returned 1 [0045.757] FindNextFileW (in: hFindFile=0x381e80, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x50e7acd0, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x60c6f7f0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x60c6f7f0, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="x64", cAlternateFileName="")) returned 0 [0045.757] FindClose (in: hFindFile=0x381e80 | out: hFindFile=0x381e80) returned 1 [0045.757] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e77c) returned 1 [0045.757] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e788) returned 1 [0045.757] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e7bc) returned 1 [0045.757] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Sync Framework\\v1.0\\Runtime", nBufferLength=0x105, lpBuffer=0x31e2c4, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Sync Framework\\v1.0\\Runtime", lpFilePart=0x0) returned 0x36 [0045.757] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Sync Framework\\v1.0\\Runtime\\", nBufferLength=0x105, lpBuffer=0x31e298, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Sync Framework\\v1.0\\Runtime\\", lpFilePart=0x0) returned 0x37 [0045.757] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Sync Framework\\v1.0\\Runtime\\*", lpFindFileData=0x31e4e4 | out: lpFindFileData=0x31e4e4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x50e7acd0, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x50e7acd0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x50e7acd0, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x381e80 [0045.757] FindNextFileW (in: hFindFile=0x381e80, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x50e7acd0, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x50e7acd0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x50e7acd0, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0045.758] FindNextFileW (in: hFindFile=0x381e80, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x50e7acd0, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x60c6f7f0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x60c6f7f0, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="x64", cAlternateFileName="")) returned 1 [0045.758] FindNextFileW (in: hFindFile=0x381e80, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0045.758] FindClose (in: hFindFile=0x381e80 | out: hFindFile=0x381e80) returned 1 [0045.758] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e77c) returned 1 [0045.758] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e788) returned 1 [0045.758] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e744) returned 1 [0045.758] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Sync Framework\\v1.0\\Runtime\\x64", nBufferLength=0x105, lpBuffer=0x31e24c, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Sync Framework\\v1.0\\Runtime\\x64", lpFilePart=0x0) returned 0x3a [0045.758] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Sync Framework\\v1.0\\Runtime\\x64\\", nBufferLength=0x105, lpBuffer=0x31e220, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Sync Framework\\v1.0\\Runtime\\x64\\", lpFilePart=0x0) returned 0x3b [0045.758] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Sync Framework\\v1.0\\Runtime\\x64\\*", lpFindFileData=0x31e46c | out: lpFindFileData=0x31e46c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x50e7acd0, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x60c6f7f0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x60c6f7f0, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x381e80 [0045.760] FindNextFileW (in: hFindFile=0x381e80, lpFindFileData=0x31e47c | out: lpFindFileData=0x31e47c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x50e7acd0, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x60c6f7f0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x60c6f7f0, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0045.761] FindNextFileW (in: hFindFile=0x381e80, lpFindFileData=0x31e47c | out: lpFindFileData=0x31e47c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x67cf6a00, ftCreationTime.dwHighDateTime=0x1c9c57d, ftLastAccessTime.dwLowDateTime=0x60c6f7f0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x67cf6a00, ftLastWriteTime.dwHighDateTime=0x1c9c57d, nFileSizeHigh=0x0, nFileSizeLow=0x38770, dwReserved0=0x0, dwReserved1=0x0, cFileName="FeedSync.dll", cAlternateFileName="")) returned 1 [0045.761] FindNextFileW (in: hFindFile=0x381e80, lpFindFileData=0x31e47c | out: lpFindFileData=0x31e47c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7c136700, ftCreationTime.dwHighDateTime=0x1c9c57d, ftLastAccessTime.dwLowDateTime=0x52290670, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x7c136700, ftLastWriteTime.dwHighDateTime=0x1c9c57d, nFileSizeHigh=0x0, nFileSizeLow=0x33760, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.Synchronization.dll", cAlternateFileName="MICROS~1.DLL")) returned 1 [0045.761] FindNextFileW (in: hFindFile=0x381e80, lpFindFileData=0x31e47c | out: lpFindFileData=0x31e47c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x522b67d0, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x522b67d0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x522b67d0, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="resources", cAlternateFileName="RESOUR~1")) returned 1 [0045.761] FindNextFileW (in: hFindFile=0x381e80, lpFindFileData=0x31e47c | out: lpFindFileData=0x31e47c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x67cf6a00, ftCreationTime.dwHighDateTime=0x1c9c57d, ftLastAccessTime.dwLowDateTime=0x60c6f7f0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x67cf6a00, ftLastWriteTime.dwHighDateTime=0x1c9c57d, nFileSizeHigh=0x0, nFileSizeLow=0x6db60, dwReserved0=0x0, dwReserved1=0x0, cFileName="Synchronization.dll", cAlternateFileName="SYNCHR~1.DLL")) returned 1 [0045.761] FindNextFileW (in: hFindFile=0x381e80, lpFindFileData=0x31e47c | out: lpFindFileData=0x31e47c*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0045.761] FindClose (in: hFindFile=0x381e80 | out: hFindFile=0x381e80) returned 1 [0045.762] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e704) returned 1 [0045.762] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e710) returned 1 [0045.762] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e744) returned 1 [0045.762] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Sync Framework\\v1.0\\Runtime\\x64", nBufferLength=0x105, lpBuffer=0x31e24c, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Sync Framework\\v1.0\\Runtime\\x64", lpFilePart=0x0) returned 0x3a [0045.762] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Sync Framework\\v1.0\\Runtime\\x64\\", nBufferLength=0x105, lpBuffer=0x31e220, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Sync Framework\\v1.0\\Runtime\\x64\\", lpFilePart=0x0) returned 0x3b [0045.762] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Sync Framework\\v1.0\\Runtime\\x64\\*", lpFindFileData=0x31e46c | out: lpFindFileData=0x31e46c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x50e7acd0, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x60c6f7f0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x60c6f7f0, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x381e80 [0045.763] FindNextFileW (in: hFindFile=0x381e80, lpFindFileData=0x31e47c | out: lpFindFileData=0x31e47c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x50e7acd0, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x60c6f7f0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x60c6f7f0, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0045.763] FindNextFileW (in: hFindFile=0x381e80, lpFindFileData=0x31e47c | out: lpFindFileData=0x31e47c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x67cf6a00, ftCreationTime.dwHighDateTime=0x1c9c57d, ftLastAccessTime.dwLowDateTime=0x60c6f7f0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x67cf6a00, ftLastWriteTime.dwHighDateTime=0x1c9c57d, nFileSizeHigh=0x0, nFileSizeLow=0x38770, dwReserved0=0x0, dwReserved1=0x0, cFileName="FeedSync.dll", cAlternateFileName="")) returned 1 [0045.763] FindNextFileW (in: hFindFile=0x381e80, lpFindFileData=0x31e47c | out: lpFindFileData=0x31e47c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7c136700, ftCreationTime.dwHighDateTime=0x1c9c57d, ftLastAccessTime.dwLowDateTime=0x52290670, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x7c136700, ftLastWriteTime.dwHighDateTime=0x1c9c57d, nFileSizeHigh=0x0, nFileSizeLow=0x33760, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.Synchronization.dll", cAlternateFileName="MICROS~1.DLL")) returned 1 [0045.763] FindNextFileW (in: hFindFile=0x381e80, lpFindFileData=0x31e47c | out: lpFindFileData=0x31e47c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x522b67d0, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x522b67d0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x522b67d0, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="resources", cAlternateFileName="RESOUR~1")) returned 1 [0045.764] FindNextFileW (in: hFindFile=0x381e80, lpFindFileData=0x31e47c | out: lpFindFileData=0x31e47c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x67cf6a00, ftCreationTime.dwHighDateTime=0x1c9c57d, ftLastAccessTime.dwLowDateTime=0x60c6f7f0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x67cf6a00, ftLastWriteTime.dwHighDateTime=0x1c9c57d, nFileSizeHigh=0x0, nFileSizeLow=0x6db60, dwReserved0=0x0, dwReserved1=0x0, cFileName="Synchronization.dll", cAlternateFileName="SYNCHR~1.DLL")) returned 1 [0045.764] FindNextFileW (in: hFindFile=0x381e80, lpFindFileData=0x31e47c | out: lpFindFileData=0x31e47c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x67cf6a00, ftCreationTime.dwHighDateTime=0x1c9c57d, ftLastAccessTime.dwLowDateTime=0x60c6f7f0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x67cf6a00, ftLastWriteTime.dwHighDateTime=0x1c9c57d, nFileSizeHigh=0x0, nFileSizeLow=0x6db60, dwReserved0=0x0, dwReserved1=0x0, cFileName="Synchronization.dll", cAlternateFileName="SYNCHR~1.DLL")) returned 0 [0045.764] FindClose (in: hFindFile=0x381e80 | out: hFindFile=0x381e80) returned 1 [0045.764] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e704) returned 1 [0045.764] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e710) returned 1 [0045.764] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e6cc) returned 1 [0045.765] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Sync Framework\\v1.0\\Runtime\\x64\\resources", nBufferLength=0x105, lpBuffer=0x31e1d4, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Sync Framework\\v1.0\\Runtime\\x64\\resources", lpFilePart=0x0) returned 0x44 [0045.765] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Sync Framework\\v1.0\\Runtime\\x64\\resources\\", nBufferLength=0x105, lpBuffer=0x31e1a8, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Sync Framework\\v1.0\\Runtime\\x64\\resources\\", lpFilePart=0x0) returned 0x45 [0045.765] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Sync Framework\\v1.0\\Runtime\\x64\\resources\\*", lpFindFileData=0x31e3f4 | out: lpFindFileData=0x31e3f4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x522b67d0, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x522b67d0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x522b67d0, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x381e80 [0045.766] FindNextFileW (in: hFindFile=0x381e80, lpFindFileData=0x31e404 | out: lpFindFileData=0x31e404*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x522b67d0, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x522b67d0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x522b67d0, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0045.766] FindNextFileW (in: hFindFile=0x381e80, lpFindFileData=0x31e404 | out: lpFindFileData=0x31e404*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x522b67d0, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x522b67d0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x522b67d0, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="1033", cAlternateFileName="")) returned 1 [0045.766] FindNextFileW (in: hFindFile=0x381e80, lpFindFileData=0x31e404 | out: lpFindFileData=0x31e404*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x522b67d0, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x522b67d0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x522b67d0, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="1033", cAlternateFileName="")) returned 0 [0045.766] FindClose (in: hFindFile=0x381e80 | out: hFindFile=0x381e80) returned 1 [0045.767] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e68c) returned 1 [0045.767] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e698) returned 1 [0045.767] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e6cc) returned 1 [0045.767] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Sync Framework\\v1.0\\Runtime\\x64\\resources", nBufferLength=0x105, lpBuffer=0x31e1d4, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Sync Framework\\v1.0\\Runtime\\x64\\resources", lpFilePart=0x0) returned 0x44 [0045.767] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Sync Framework\\v1.0\\Runtime\\x64\\resources\\", nBufferLength=0x105, lpBuffer=0x31e1a8, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Sync Framework\\v1.0\\Runtime\\x64\\resources\\", lpFilePart=0x0) returned 0x45 [0045.767] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Sync Framework\\v1.0\\Runtime\\x64\\resources\\*", lpFindFileData=0x31e3f4 | out: lpFindFileData=0x31e3f4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x522b67d0, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x522b67d0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x522b67d0, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x381e80 [0045.767] FindNextFileW (in: hFindFile=0x381e80, lpFindFileData=0x31e404 | out: lpFindFileData=0x31e404*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x522b67d0, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x522b67d0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x522b67d0, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0045.767] FindNextFileW (in: hFindFile=0x381e80, lpFindFileData=0x31e404 | out: lpFindFileData=0x31e404*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x522b67d0, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x522b67d0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x522b67d0, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="1033", cAlternateFileName="")) returned 1 [0045.767] FindNextFileW (in: hFindFile=0x381e80, lpFindFileData=0x31e404 | out: lpFindFileData=0x31e404*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0045.767] FindClose (in: hFindFile=0x381e80 | out: hFindFile=0x381e80) returned 1 [0045.767] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e68c) returned 1 [0045.768] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e698) returned 1 [0045.768] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e654) returned 1 [0045.768] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Sync Framework\\v1.0\\Runtime\\x64\\resources\\1033", nBufferLength=0x105, lpBuffer=0x31e15c, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Sync Framework\\v1.0\\Runtime\\x64\\resources\\1033", lpFilePart=0x0) returned 0x49 [0045.768] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Sync Framework\\v1.0\\Runtime\\x64\\resources\\1033\\", nBufferLength=0x105, lpBuffer=0x31e130, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Sync Framework\\v1.0\\Runtime\\x64\\resources\\1033\\", lpFilePart=0x0) returned 0x4a [0045.768] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Sync Framework\\v1.0\\Runtime\\x64\\resources\\1033\\*", lpFindFileData=0x31e37c | out: lpFindFileData=0x31e37c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x522b67d0, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x522b67d0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x522b67d0, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x381e80 [0045.768] FindNextFileW (in: hFindFile=0x381e80, lpFindFileData=0x31e38c | out: lpFindFileData=0x31e38c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x522b67d0, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x522b67d0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x522b67d0, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0045.768] FindNextFileW (in: hFindFile=0x381e80, lpFindFileData=0x31e38c | out: lpFindFileData=0x31e38c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5f772f00, ftCreationTime.dwHighDateTime=0x1c9c57d, ftLastAccessTime.dwLowDateTime=0x522b67d0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x5f772f00, ftLastWriteTime.dwHighDateTime=0x1c9c57d, nFileSizeHigh=0x0, nFileSizeLow=0x3170, dwReserved0=0x0, dwReserved1=0x0, cFileName="Synchronization.rll", cAlternateFileName="SYNCHR~1.RLL")) returned 1 [0045.768] FindNextFileW (in: hFindFile=0x381e80, lpFindFileData=0x31e38c | out: lpFindFileData=0x31e38c*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0045.768] FindClose (in: hFindFile=0x381e80 | out: hFindFile=0x381e80) returned 1 [0045.768] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e614) returned 1 [0045.769] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e620) returned 1 [0045.769] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e654) returned 1 [0045.769] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Sync Framework\\v1.0\\Runtime\\x64\\resources\\1033", nBufferLength=0x105, lpBuffer=0x31e15c, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Sync Framework\\v1.0\\Runtime\\x64\\resources\\1033", lpFilePart=0x0) returned 0x49 [0045.769] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Sync Framework\\v1.0\\Runtime\\x64\\resources\\1033\\", nBufferLength=0x105, lpBuffer=0x31e130, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Sync Framework\\v1.0\\Runtime\\x64\\resources\\1033\\", lpFilePart=0x0) returned 0x4a [0045.769] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Sync Framework\\v1.0\\Runtime\\x64\\resources\\1033\\*", lpFindFileData=0x31e37c | out: lpFindFileData=0x31e37c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x522b67d0, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x522b67d0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x522b67d0, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x381e80 [0045.769] FindNextFileW (in: hFindFile=0x381e80, lpFindFileData=0x31e38c | out: lpFindFileData=0x31e38c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x522b67d0, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x522b67d0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x522b67d0, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0045.769] FindNextFileW (in: hFindFile=0x381e80, lpFindFileData=0x31e38c | out: lpFindFileData=0x31e38c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5f772f00, ftCreationTime.dwHighDateTime=0x1c9c57d, ftLastAccessTime.dwLowDateTime=0x522b67d0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x5f772f00, ftLastWriteTime.dwHighDateTime=0x1c9c57d, nFileSizeHigh=0x0, nFileSizeLow=0x3170, dwReserved0=0x0, dwReserved1=0x0, cFileName="Synchronization.rll", cAlternateFileName="SYNCHR~1.RLL")) returned 1 [0045.769] FindNextFileW (in: hFindFile=0x381e80, lpFindFileData=0x31e38c | out: lpFindFileData=0x31e38c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5f772f00, ftCreationTime.dwHighDateTime=0x1c9c57d, ftLastAccessTime.dwLowDateTime=0x522b67d0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x5f772f00, ftLastWriteTime.dwHighDateTime=0x1c9c57d, nFileSizeHigh=0x0, nFileSizeLow=0x3170, dwReserved0=0x0, dwReserved1=0x0, cFileName="Synchronization.rll", cAlternateFileName="SYNCHR~1.RLL")) returned 0 [0045.769] FindClose (in: hFindFile=0x381e80 | out: hFindFile=0x381e80) returned 1 [0045.769] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e614) returned 1 [0045.769] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e620) returned 1 [0045.769] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e8ac) returned 1 [0045.770] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Synchronization Services", nBufferLength=0x105, lpBuffer=0x31e3b4, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Synchronization Services", lpFilePart=0x0) returned 0x33 [0045.770] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Synchronization Services\\", nBufferLength=0x105, lpBuffer=0x31e388, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Synchronization Services\\", lpFilePart=0x0) returned 0x34 [0045.770] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Synchronization Services\\*", lpFindFileData=0x31e5d4 | out: lpFindFileData=0x31e5d4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x594863b0, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0xd9a78aa0, ftLastAccessTime.dwHighDateTime=0x1d5e82a, ftLastWriteTime.dwLowDateTime=0xd9a78aa0, ftLastWriteTime.dwHighDateTime=0x1d5e82a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x381e80 [0045.770] FindNextFileW (in: hFindFile=0x381e80, lpFindFileData=0x31e5e4 | out: lpFindFileData=0x31e5e4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x594863b0, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0xd9a78aa0, ftLastAccessTime.dwHighDateTime=0x1d5e82a, ftLastWriteTime.dwLowDateTime=0xd9a78aa0, ftLastWriteTime.dwHighDateTime=0x1d5e82a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0045.770] FindNextFileW (in: hFindFile=0x381e80, lpFindFileData=0x31e5e4 | out: lpFindFileData=0x31e5e4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x594863b0, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x594863b0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x594863b0, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="ADO.NET", cAlternateFileName="")) returned 1 [0045.770] FindNextFileW (in: hFindFile=0x381e80, lpFindFileData=0x31e5e4 | out: lpFindFileData=0x31e5e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3373cfd0, ftCreationTime.dwHighDateTime=0x1d5e506, ftLastAccessTime.dwLowDateTime=0xdeaae8e0, ftLastAccessTime.dwHighDateTime=0x1d58dd9, ftLastWriteTime.dwLowDateTime=0xdeaae8e0, ftLastWriteTime.dwHighDateTime=0x1d58dd9, nFileSizeHigh=0x0, nFileSizeLow=0x13a00, dwReserved0=0x0, dwReserved1=0x0, cFileName="isspos.exe", cAlternateFileName="")) returned 1 [0045.771] FindNextFileW (in: hFindFile=0x381e80, lpFindFileData=0x31e5e4 | out: lpFindFileData=0x31e5e4*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0045.771] FindClose (in: hFindFile=0x381e80 | out: hFindFile=0x381e80) returned 1 [0045.771] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e86c) returned 1 [0045.771] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e878) returned 1 [0045.771] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e8ac) returned 1 [0045.771] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Synchronization Services", nBufferLength=0x105, lpBuffer=0x31e3b4, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Synchronization Services", lpFilePart=0x0) returned 0x33 [0045.771] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Synchronization Services\\", nBufferLength=0x105, lpBuffer=0x31e388, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Synchronization Services\\", lpFilePart=0x0) returned 0x34 [0045.771] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Synchronization Services\\*", lpFindFileData=0x31e5d4 | out: lpFindFileData=0x31e5d4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x594863b0, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0xd9a78aa0, ftLastAccessTime.dwHighDateTime=0x1d5e82a, ftLastWriteTime.dwLowDateTime=0xd9a78aa0, ftLastWriteTime.dwHighDateTime=0x1d5e82a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x381e80 [0045.771] FindNextFileW (in: hFindFile=0x381e80, lpFindFileData=0x31e5e4 | out: lpFindFileData=0x31e5e4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x594863b0, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0xd9a78aa0, ftLastAccessTime.dwHighDateTime=0x1d5e82a, ftLastWriteTime.dwLowDateTime=0xd9a78aa0, ftLastWriteTime.dwHighDateTime=0x1d5e82a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0045.772] FindNextFileW (in: hFindFile=0x381e80, lpFindFileData=0x31e5e4 | out: lpFindFileData=0x31e5e4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x594863b0, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x594863b0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x594863b0, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="ADO.NET", cAlternateFileName="")) returned 1 [0045.772] FindNextFileW (in: hFindFile=0x381e80, lpFindFileData=0x31e5e4 | out: lpFindFileData=0x31e5e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3373cfd0, ftCreationTime.dwHighDateTime=0x1d5e506, ftLastAccessTime.dwLowDateTime=0xdeaae8e0, ftLastAccessTime.dwHighDateTime=0x1d58dd9, ftLastWriteTime.dwLowDateTime=0xdeaae8e0, ftLastWriteTime.dwHighDateTime=0x1d58dd9, nFileSizeHigh=0x0, nFileSizeLow=0x13a00, dwReserved0=0x0, dwReserved1=0x0, cFileName="isspos.exe", cAlternateFileName="")) returned 1 [0045.772] FindNextFileW (in: hFindFile=0x381e80, lpFindFileData=0x31e5e4 | out: lpFindFileData=0x31e5e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3373cfd0, ftCreationTime.dwHighDateTime=0x1d5e506, ftLastAccessTime.dwLowDateTime=0xdeaae8e0, ftLastAccessTime.dwHighDateTime=0x1d58dd9, ftLastWriteTime.dwLowDateTime=0xdeaae8e0, ftLastWriteTime.dwHighDateTime=0x1d58dd9, nFileSizeHigh=0x0, nFileSizeLow=0x13a00, dwReserved0=0x0, dwReserved1=0x0, cFileName="isspos.exe", cAlternateFileName="")) returned 0 [0045.772] FindClose (in: hFindFile=0x381e80 | out: hFindFile=0x381e80) returned 1 [0045.772] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e86c) returned 1 [0045.772] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e878) returned 1 [0045.772] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e834) returned 1 [0045.772] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Synchronization Services\\ADO.NET", nBufferLength=0x105, lpBuffer=0x31e33c, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Synchronization Services\\ADO.NET", lpFilePart=0x0) returned 0x3b [0045.772] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Synchronization Services\\ADO.NET\\", nBufferLength=0x105, lpBuffer=0x31e310, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Synchronization Services\\ADO.NET\\", lpFilePart=0x0) returned 0x3c [0045.772] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Synchronization Services\\ADO.NET\\*", lpFindFileData=0x31e55c | out: lpFindFileData=0x31e55c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x594863b0, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x594863b0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x594863b0, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x381e80 [0045.773] FindNextFileW (in: hFindFile=0x381e80, lpFindFileData=0x31e56c | out: lpFindFileData=0x31e56c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x594863b0, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x594863b0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x594863b0, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0045.773] FindNextFileW (in: hFindFile=0x381e80, lpFindFileData=0x31e56c | out: lpFindFileData=0x31e56c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x594863b0, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x6a3248d0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x6a3248d0, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="v1.0", cAlternateFileName="")) returned 1 [0045.773] FindNextFileW (in: hFindFile=0x381e80, lpFindFileData=0x31e56c | out: lpFindFileData=0x31e56c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x594863b0, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x6a3248d0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x6a3248d0, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="v1.0", cAlternateFileName="")) returned 0 [0045.773] FindClose (in: hFindFile=0x381e80 | out: hFindFile=0x381e80) returned 1 [0045.775] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e7f4) returned 1 [0045.775] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e800) returned 1 [0045.775] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e834) returned 1 [0045.775] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Synchronization Services\\ADO.NET", nBufferLength=0x105, lpBuffer=0x31e33c, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Synchronization Services\\ADO.NET", lpFilePart=0x0) returned 0x3b [0045.775] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Synchronization Services\\ADO.NET\\", nBufferLength=0x105, lpBuffer=0x31e310, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Synchronization Services\\ADO.NET\\", lpFilePart=0x0) returned 0x3c [0045.775] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Synchronization Services\\ADO.NET\\*", lpFindFileData=0x31e55c | out: lpFindFileData=0x31e55c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x594863b0, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x594863b0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x594863b0, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x381e80 [0045.775] FindNextFileW (in: hFindFile=0x381e80, lpFindFileData=0x31e56c | out: lpFindFileData=0x31e56c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x594863b0, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x594863b0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x594863b0, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0045.776] FindNextFileW (in: hFindFile=0x381e80, lpFindFileData=0x31e56c | out: lpFindFileData=0x31e56c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x594863b0, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x6a3248d0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x6a3248d0, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="v1.0", cAlternateFileName="")) returned 1 [0045.776] FindNextFileW (in: hFindFile=0x381e80, lpFindFileData=0x31e56c | out: lpFindFileData=0x31e56c*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0045.776] FindClose (in: hFindFile=0x381e80 | out: hFindFile=0x381e80) returned 1 [0045.776] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e7f4) returned 1 [0045.776] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e800) returned 1 [0045.776] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e7bc) returned 1 [0045.776] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Synchronization Services\\ADO.NET\\v1.0", nBufferLength=0x105, lpBuffer=0x31e2c4, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Synchronization Services\\ADO.NET\\v1.0", lpFilePart=0x0) returned 0x40 [0045.776] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Synchronization Services\\ADO.NET\\v1.0\\", nBufferLength=0x105, lpBuffer=0x31e298, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Synchronization Services\\ADO.NET\\v1.0\\", lpFilePart=0x0) returned 0x41 [0045.776] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Synchronization Services\\ADO.NET\\v1.0\\*", lpFindFileData=0x31e4e4 | out: lpFindFileData=0x31e4e4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x594863b0, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x6a3248d0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x6a3248d0, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x381e80 [0045.778] FindNextFileW (in: hFindFile=0x381e80, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x594863b0, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x6a3248d0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x6a3248d0, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0045.779] FindNextFileW (in: hFindFile=0x381e80, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6b72c500, ftCreationTime.dwHighDateTime=0x1c8bd0c, ftLastAccessTime.dwLowDateTime=0x594863b0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x6b72c500, ftLastWriteTime.dwHighDateTime=0x1c8bd0c, nFileSizeHigh=0x0, nFileSizeLow=0x1c420, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.Synchronization.Data.dll", cAlternateFileName="MICROS~1.DLL")) returned 1 [0045.779] FindNextFileW (in: hFindFile=0x381e80, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6b72c500, ftCreationTime.dwHighDateTime=0x1c8bd0c, ftLastAccessTime.dwLowDateTime=0x6a3248d0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x6b72c500, ftLastWriteTime.dwHighDateTime=0x1c8bd0c, nFileSizeHigh=0x0, nFileSizeLow=0x1c420, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.Synchronization.Data.Server.dll", cAlternateFileName="MICROS~3.DLL")) returned 1 [0045.779] FindNextFileW (in: hFindFile=0x381e80, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x74481500, ftCreationTime.dwHighDateTime=0x1c8d683, ftLastAccessTime.dwLowDateTime=0x594863b0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x74481500, ftLastWriteTime.dwHighDateTime=0x1c8d683, nFileSizeHigh=0x0, nFileSizeLow=0x17450, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.Synchronization.Data.SqlServerCe.dll", cAlternateFileName="MICROS~2.DLL")) returned 1 [0045.779] FindNextFileW (in: hFindFile=0x381e80, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0045.779] FindClose (in: hFindFile=0x381e80 | out: hFindFile=0x381e80) returned 1 [0045.780] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e77c) returned 1 [0045.780] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e788) returned 1 [0045.780] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e7bc) returned 1 [0045.780] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Synchronization Services\\ADO.NET\\v1.0", nBufferLength=0x105, lpBuffer=0x31e2c4, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Synchronization Services\\ADO.NET\\v1.0", lpFilePart=0x0) returned 0x40 [0045.780] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Synchronization Services\\ADO.NET\\v1.0\\", nBufferLength=0x105, lpBuffer=0x31e298, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Synchronization Services\\ADO.NET\\v1.0\\", lpFilePart=0x0) returned 0x41 [0045.780] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Synchronization Services\\ADO.NET\\v1.0\\*", lpFindFileData=0x31e4e4 | out: lpFindFileData=0x31e4e4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x594863b0, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x6a3248d0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x6a3248d0, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x381e80 [0045.781] FindNextFileW (in: hFindFile=0x381e80, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x594863b0, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x6a3248d0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x6a3248d0, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0045.781] FindNextFileW (in: hFindFile=0x381e80, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6b72c500, ftCreationTime.dwHighDateTime=0x1c8bd0c, ftLastAccessTime.dwLowDateTime=0x594863b0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x6b72c500, ftLastWriteTime.dwHighDateTime=0x1c8bd0c, nFileSizeHigh=0x0, nFileSizeLow=0x1c420, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.Synchronization.Data.dll", cAlternateFileName="MICROS~1.DLL")) returned 1 [0045.781] FindNextFileW (in: hFindFile=0x381e80, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6b72c500, ftCreationTime.dwHighDateTime=0x1c8bd0c, ftLastAccessTime.dwLowDateTime=0x6a3248d0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x6b72c500, ftLastWriteTime.dwHighDateTime=0x1c8bd0c, nFileSizeHigh=0x0, nFileSizeLow=0x1c420, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.Synchronization.Data.Server.dll", cAlternateFileName="MICROS~3.DLL")) returned 1 [0045.781] FindNextFileW (in: hFindFile=0x381e80, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x74481500, ftCreationTime.dwHighDateTime=0x1c8d683, ftLastAccessTime.dwLowDateTime=0x594863b0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x74481500, ftLastWriteTime.dwHighDateTime=0x1c8d683, nFileSizeHigh=0x0, nFileSizeLow=0x17450, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.Synchronization.Data.SqlServerCe.dll", cAlternateFileName="MICROS~2.DLL")) returned 1 [0045.781] FindNextFileW (in: hFindFile=0x381e80, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x74481500, ftCreationTime.dwHighDateTime=0x1c8d683, ftLastAccessTime.dwLowDateTime=0x594863b0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x74481500, ftLastWriteTime.dwHighDateTime=0x1c8d683, nFileSizeHigh=0x0, nFileSizeLow=0x17450, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.Synchronization.Data.SqlServerCe.dll", cAlternateFileName="MICROS~2.DLL")) returned 0 [0045.781] FindClose (in: hFindFile=0x381e80 | out: hFindFile=0x381e80) returned 1 [0045.782] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e77c) returned 1 [0045.782] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e788) returned 1 [0045.782] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e8ac) returned 1 [0045.782] GetFullPathNameW (in: lpFileName="C:\\Program Files\\MSBuild", nBufferLength=0x105, lpBuffer=0x31e3b4, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\MSBuild", lpFilePart=0x0) returned 0x18 [0045.782] GetFullPathNameW (in: lpFileName="C:\\Program Files\\MSBuild\\", nBufferLength=0x105, lpBuffer=0x31e388, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\MSBuild\\", lpFilePart=0x0) returned 0x19 [0045.782] FindFirstFileW (in: lpFileName="C:\\Program Files\\MSBuild\\*", lpFindFileData=0x31e5d4 | out: lpFindFileData=0x31e5d4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x80020c30, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0xd9947fa0, ftLastAccessTime.dwHighDateTime=0x1d5e82a, ftLastWriteTime.dwLowDateTime=0xd9947fa0, ftLastWriteTime.dwHighDateTime=0x1d5e82a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x381e80 [0045.783] FindNextFileW (in: hFindFile=0x381e80, lpFindFileData=0x31e5e4 | out: lpFindFileData=0x31e5e4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x80020c30, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0xd9947fa0, ftLastAccessTime.dwHighDateTime=0x1d5e82a, ftLastWriteTime.dwLowDateTime=0xd9947fa0, ftLastWriteTime.dwHighDateTime=0x1d5e82a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0045.783] FindNextFileW (in: hFindFile=0x381e80, lpFindFileData=0x31e5e4 | out: lpFindFileData=0x31e5e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa648ff20, ftCreationTime.dwHighDateTime=0x1d5673f, ftLastAccessTime.dwLowDateTime=0x109a5db0, ftLastAccessTime.dwHighDateTime=0x1d57280, ftLastWriteTime.dwLowDateTime=0x109a5db0, ftLastWriteTime.dwHighDateTime=0x1d57280, nFileSizeHigh=0x0, nFileSizeLow=0x13a00, dwReserved0=0x0, dwReserved1=0x0, cFileName="alftp.exe", cAlternateFileName="")) returned 1 [0045.783] FindNextFileW (in: hFindFile=0x381e80, lpFindFileData=0x31e5e4 | out: lpFindFileData=0x31e5e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2bd2f390, ftCreationTime.dwHighDateTime=0x1d5a821, ftLastAccessTime.dwLowDateTime=0x6ed3dd70, ftLastAccessTime.dwHighDateTime=0x1d5d2c0, ftLastWriteTime.dwLowDateTime=0x6ed3dd70, ftLastWriteTime.dwHighDateTime=0x1d5d2c0, nFileSizeHigh=0x0, nFileSizeLow=0x13a00, dwReserved0=0x0, dwReserved1=0x0, cFileName="athletics champion steady.exe", cAlternateFileName="ATHLET~1.EXE")) returned 1 [0045.783] FindNextFileW (in: hFindFile=0x381e80, lpFindFileData=0x31e5e4 | out: lpFindFileData=0x31e5e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2c189d80, ftCreationTime.dwHighDateTime=0x1d590c7, ftLastAccessTime.dwLowDateTime=0xbfb36600, ftLastAccessTime.dwHighDateTime=0x1d5e721, ftLastWriteTime.dwLowDateTime=0xbfb36600, ftLastWriteTime.dwHighDateTime=0x1d5e721, nFileSizeHigh=0x0, nFileSizeLow=0x13a00, dwReserved0=0x0, dwReserved1=0x0, cFileName="batteries syntax compatibility.exe", cAlternateFileName="BATTER~1.EXE")) returned 1 [0045.783] FindNextFileW (in: hFindFile=0x381e80, lpFindFileData=0x31e5e4 | out: lpFindFileData=0x31e5e4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x80020c30, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x80020c30, ftLastAccessTime.dwHighDateTime=0x1ca0444, ftLastWriteTime.dwLowDateTime=0x80020c30, ftLastWriteTime.dwHighDateTime=0x1ca0444, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft", cAlternateFileName="MICROS~1")) returned 1 [0045.783] FindNextFileW (in: hFindFile=0x381e80, lpFindFileData=0x31e5e4 | out: lpFindFileData=0x31e5e4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x80020c30, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x80020c30, ftLastAccessTime.dwHighDateTime=0x1ca0444, ftLastWriteTime.dwLowDateTime=0x80020c30, ftLastWriteTime.dwHighDateTime=0x1ca0444, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft", cAlternateFileName="MICROS~1")) returned 0 [0045.783] FindClose (in: hFindFile=0x381e80 | out: hFindFile=0x381e80) returned 1 [0045.783] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e86c) returned 1 [0045.783] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e878) returned 1 [0045.783] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e8ac) returned 1 [0045.783] GetFullPathNameW (in: lpFileName="C:\\Program Files\\MSBuild", nBufferLength=0x105, lpBuffer=0x31e3b4, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\MSBuild", lpFilePart=0x0) returned 0x18 [0045.783] GetFullPathNameW (in: lpFileName="C:\\Program Files\\MSBuild\\", nBufferLength=0x105, lpBuffer=0x31e388, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\MSBuild\\", lpFilePart=0x0) returned 0x19 [0045.783] FindFirstFileW (in: lpFileName="C:\\Program Files\\MSBuild\\*", lpFindFileData=0x31e5d4 | out: lpFindFileData=0x31e5d4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x80020c30, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0xd9947fa0, ftLastAccessTime.dwHighDateTime=0x1d5e82a, ftLastWriteTime.dwLowDateTime=0xd9947fa0, ftLastWriteTime.dwHighDateTime=0x1d5e82a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x381e80 [0045.783] FindNextFileW (in: hFindFile=0x381e80, lpFindFileData=0x31e5e4 | out: lpFindFileData=0x31e5e4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x80020c30, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0xd9947fa0, ftLastAccessTime.dwHighDateTime=0x1d5e82a, ftLastWriteTime.dwLowDateTime=0xd9947fa0, ftLastWriteTime.dwHighDateTime=0x1d5e82a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0045.784] FindNextFileW (in: hFindFile=0x381e80, lpFindFileData=0x31e5e4 | out: lpFindFileData=0x31e5e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa648ff20, ftCreationTime.dwHighDateTime=0x1d5673f, ftLastAccessTime.dwLowDateTime=0x109a5db0, ftLastAccessTime.dwHighDateTime=0x1d57280, ftLastWriteTime.dwLowDateTime=0x109a5db0, ftLastWriteTime.dwHighDateTime=0x1d57280, nFileSizeHigh=0x0, nFileSizeLow=0x13a00, dwReserved0=0x0, dwReserved1=0x0, cFileName="alftp.exe", cAlternateFileName="")) returned 1 [0045.784] FindNextFileW (in: hFindFile=0x381e80, lpFindFileData=0x31e5e4 | out: lpFindFileData=0x31e5e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2bd2f390, ftCreationTime.dwHighDateTime=0x1d5a821, ftLastAccessTime.dwLowDateTime=0x6ed3dd70, ftLastAccessTime.dwHighDateTime=0x1d5d2c0, ftLastWriteTime.dwLowDateTime=0x6ed3dd70, ftLastWriteTime.dwHighDateTime=0x1d5d2c0, nFileSizeHigh=0x0, nFileSizeLow=0x13a00, dwReserved0=0x0, dwReserved1=0x0, cFileName="athletics champion steady.exe", cAlternateFileName="ATHLET~1.EXE")) returned 1 [0045.784] FindNextFileW (in: hFindFile=0x381e80, lpFindFileData=0x31e5e4 | out: lpFindFileData=0x31e5e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2c189d80, ftCreationTime.dwHighDateTime=0x1d590c7, ftLastAccessTime.dwLowDateTime=0xbfb36600, ftLastAccessTime.dwHighDateTime=0x1d5e721, ftLastWriteTime.dwLowDateTime=0xbfb36600, ftLastWriteTime.dwHighDateTime=0x1d5e721, nFileSizeHigh=0x0, nFileSizeLow=0x13a00, dwReserved0=0x0, dwReserved1=0x0, cFileName="batteries syntax compatibility.exe", cAlternateFileName="BATTER~1.EXE")) returned 1 [0045.784] FindNextFileW (in: hFindFile=0x381e80, lpFindFileData=0x31e5e4 | out: lpFindFileData=0x31e5e4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x80020c30, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x80020c30, ftLastAccessTime.dwHighDateTime=0x1ca0444, ftLastWriteTime.dwLowDateTime=0x80020c30, ftLastWriteTime.dwHighDateTime=0x1ca0444, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft", cAlternateFileName="MICROS~1")) returned 1 [0045.784] FindNextFileW (in: hFindFile=0x381e80, lpFindFileData=0x31e5e4 | out: lpFindFileData=0x31e5e4*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0045.784] FindClose (in: hFindFile=0x381e80 | out: hFindFile=0x381e80) returned 1 [0045.784] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e86c) returned 1 [0045.784] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e878) returned 1 [0045.784] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e834) returned 1 [0045.784] GetFullPathNameW (in: lpFileName="C:\\Program Files\\MSBuild\\Microsoft", nBufferLength=0x105, lpBuffer=0x31e33c, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\MSBuild\\Microsoft", lpFilePart=0x0) returned 0x22 [0045.784] GetFullPathNameW (in: lpFileName="C:\\Program Files\\MSBuild\\Microsoft\\", nBufferLength=0x105, lpBuffer=0x31e310, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\MSBuild\\Microsoft\\", lpFilePart=0x0) returned 0x23 [0045.784] FindFirstFileW (in: lpFileName="C:\\Program Files\\MSBuild\\Microsoft\\*", lpFindFileData=0x31e55c | out: lpFindFileData=0x31e55c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x80020c30, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x80020c30, ftLastAccessTime.dwHighDateTime=0x1ca0444, ftLastWriteTime.dwLowDateTime=0x80020c30, ftLastWriteTime.dwHighDateTime=0x1ca0444, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x381e80 [0045.785] FindNextFileW (in: hFindFile=0x381e80, lpFindFileData=0x31e56c | out: lpFindFileData=0x31e56c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x80020c30, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x80020c30, ftLastAccessTime.dwHighDateTime=0x1ca0444, ftLastWriteTime.dwLowDateTime=0x80020c30, ftLastWriteTime.dwHighDateTime=0x1ca0444, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0045.785] FindNextFileW (in: hFindFile=0x381e80, lpFindFileData=0x31e56c | out: lpFindFileData=0x31e56c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x80020c30, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x80020c30, ftLastAccessTime.dwHighDateTime=0x1ca0444, ftLastWriteTime.dwLowDateTime=0x80020c30, ftLastWriteTime.dwHighDateTime=0x1ca0444, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Windows Workflow Foundation", cAlternateFileName="WINDOW~1")) returned 1 [0045.785] FindNextFileW (in: hFindFile=0x381e80, lpFindFileData=0x31e56c | out: lpFindFileData=0x31e56c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x80020c30, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x80020c30, ftLastAccessTime.dwHighDateTime=0x1ca0444, ftLastWriteTime.dwLowDateTime=0x80020c30, ftLastWriteTime.dwHighDateTime=0x1ca0444, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Windows Workflow Foundation", cAlternateFileName="WINDOW~1")) returned 0 [0045.785] FindClose (in: hFindFile=0x381e80 | out: hFindFile=0x381e80) returned 1 [0045.785] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e7f4) returned 1 [0045.785] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e800) returned 1 [0045.785] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e834) returned 1 [0045.786] GetFullPathNameW (in: lpFileName="C:\\Program Files\\MSBuild\\Microsoft", nBufferLength=0x105, lpBuffer=0x31e33c, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\MSBuild\\Microsoft", lpFilePart=0x0) returned 0x22 [0045.786] GetFullPathNameW (in: lpFileName="C:\\Program Files\\MSBuild\\Microsoft\\", nBufferLength=0x105, lpBuffer=0x31e310, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\MSBuild\\Microsoft\\", lpFilePart=0x0) returned 0x23 [0045.786] FindFirstFileW (in: lpFileName="C:\\Program Files\\MSBuild\\Microsoft\\*", lpFindFileData=0x31e55c | out: lpFindFileData=0x31e55c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x80020c30, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x80020c30, ftLastAccessTime.dwHighDateTime=0x1ca0444, ftLastWriteTime.dwLowDateTime=0x80020c30, ftLastWriteTime.dwHighDateTime=0x1ca0444, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x381e80 [0045.786] FindNextFileW (in: hFindFile=0x381e80, lpFindFileData=0x31e56c | out: lpFindFileData=0x31e56c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x80020c30, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x80020c30, ftLastAccessTime.dwHighDateTime=0x1ca0444, ftLastWriteTime.dwLowDateTime=0x80020c30, ftLastWriteTime.dwHighDateTime=0x1ca0444, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0045.786] FindNextFileW (in: hFindFile=0x381e80, lpFindFileData=0x31e56c | out: lpFindFileData=0x31e56c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x80020c30, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x80020c30, ftLastAccessTime.dwHighDateTime=0x1ca0444, ftLastWriteTime.dwLowDateTime=0x80020c30, ftLastWriteTime.dwHighDateTime=0x1ca0444, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Windows Workflow Foundation", cAlternateFileName="WINDOW~1")) returned 1 [0045.786] FindNextFileW (in: hFindFile=0x381e80, lpFindFileData=0x31e56c | out: lpFindFileData=0x31e56c*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0045.786] FindClose (in: hFindFile=0x381e80 | out: hFindFile=0x381e80) returned 1 [0045.786] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e7f4) returned 1 [0045.786] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e800) returned 1 [0045.786] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e7bc) returned 1 [0045.786] GetFullPathNameW (in: lpFileName="C:\\Program Files\\MSBuild\\Microsoft\\Windows Workflow Foundation", nBufferLength=0x105, lpBuffer=0x31e2c4, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\MSBuild\\Microsoft\\Windows Workflow Foundation", lpFilePart=0x0) returned 0x3e [0045.786] GetFullPathNameW (in: lpFileName="C:\\Program Files\\MSBuild\\Microsoft\\Windows Workflow Foundation\\", nBufferLength=0x105, lpBuffer=0x31e298, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\MSBuild\\Microsoft\\Windows Workflow Foundation\\", lpFilePart=0x0) returned 0x3f [0045.787] FindFirstFileW (in: lpFileName="C:\\Program Files\\MSBuild\\Microsoft\\Windows Workflow Foundation\\*", lpFindFileData=0x31e4e4 | out: lpFindFileData=0x31e4e4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x80020c30, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x80020c30, ftLastAccessTime.dwHighDateTime=0x1ca0444, ftLastWriteTime.dwLowDateTime=0x80020c30, ftLastWriteTime.dwHighDateTime=0x1ca0444, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x381e80 [0045.787] FindNextFileW (in: hFindFile=0x381e80, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x80020c30, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x80020c30, ftLastAccessTime.dwHighDateTime=0x1ca0444, ftLastWriteTime.dwLowDateTime=0x80020c30, ftLastWriteTime.dwHighDateTime=0x1ca0444, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0045.787] FindNextFileW (in: hFindFile=0x381e80, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x80020c30, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x8038cbd7, ftLastAccessTime.dwHighDateTime=0x1ca0444, ftLastWriteTime.dwLowDateTime=0x8038cbd7, ftLastWriteTime.dwHighDateTime=0x1ca0444, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="v3.0", cAlternateFileName="")) returned 1 [0045.787] FindNextFileW (in: hFindFile=0x381e80, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x80020c30, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x8038cbd7, ftLastAccessTime.dwHighDateTime=0x1ca0444, ftLastWriteTime.dwLowDateTime=0x8038cbd7, ftLastWriteTime.dwHighDateTime=0x1ca0444, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="v3.5", cAlternateFileName="")) returned 1 [0045.787] FindNextFileW (in: hFindFile=0x381e80, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x80020c30, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x8038cbd7, ftLastAccessTime.dwHighDateTime=0x1ca0444, ftLastWriteTime.dwLowDateTime=0x8038cbd7, ftLastWriteTime.dwHighDateTime=0x1ca0444, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="v3.5", cAlternateFileName="")) returned 0 [0045.787] FindClose (in: hFindFile=0x381e80 | out: hFindFile=0x381e80) returned 1 [0045.787] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e77c) returned 1 [0045.787] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e788) returned 1 [0045.787] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e7bc) returned 1 [0045.787] GetFullPathNameW (in: lpFileName="C:\\Program Files\\MSBuild\\Microsoft\\Windows Workflow Foundation", nBufferLength=0x105, lpBuffer=0x31e2c4, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\MSBuild\\Microsoft\\Windows Workflow Foundation", lpFilePart=0x0) returned 0x3e [0045.787] GetFullPathNameW (in: lpFileName="C:\\Program Files\\MSBuild\\Microsoft\\Windows Workflow Foundation\\", nBufferLength=0x105, lpBuffer=0x31e298, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\MSBuild\\Microsoft\\Windows Workflow Foundation\\", lpFilePart=0x0) returned 0x3f [0045.787] FindFirstFileW (in: lpFileName="C:\\Program Files\\MSBuild\\Microsoft\\Windows Workflow Foundation\\*", lpFindFileData=0x31e4e4 | out: lpFindFileData=0x31e4e4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x80020c30, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x80020c30, ftLastAccessTime.dwHighDateTime=0x1ca0444, ftLastWriteTime.dwLowDateTime=0x80020c30, ftLastWriteTime.dwHighDateTime=0x1ca0444, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x381e80 [0045.788] FindNextFileW (in: hFindFile=0x381e80, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x80020c30, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x80020c30, ftLastAccessTime.dwHighDateTime=0x1ca0444, ftLastWriteTime.dwLowDateTime=0x80020c30, ftLastWriteTime.dwHighDateTime=0x1ca0444, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0045.788] FindNextFileW (in: hFindFile=0x381e80, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x80020c30, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x8038cbd7, ftLastAccessTime.dwHighDateTime=0x1ca0444, ftLastWriteTime.dwLowDateTime=0x8038cbd7, ftLastWriteTime.dwHighDateTime=0x1ca0444, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="v3.0", cAlternateFileName="")) returned 1 [0045.788] FindNextFileW (in: hFindFile=0x381e80, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x80020c30, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x8038cbd7, ftLastAccessTime.dwHighDateTime=0x1ca0444, ftLastWriteTime.dwLowDateTime=0x8038cbd7, ftLastWriteTime.dwHighDateTime=0x1ca0444, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="v3.5", cAlternateFileName="")) returned 1 [0045.788] FindNextFileW (in: hFindFile=0x381e80, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0045.788] FindClose (in: hFindFile=0x381e80 | out: hFindFile=0x381e80) returned 1 [0045.788] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e77c) returned 1 [0045.788] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e788) returned 1 [0045.788] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e744) returned 1 [0045.788] GetFullPathNameW (in: lpFileName="C:\\Program Files\\MSBuild\\Microsoft\\Windows Workflow Foundation\\v3.0", nBufferLength=0x105, lpBuffer=0x31e24c, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\MSBuild\\Microsoft\\Windows Workflow Foundation\\v3.0", lpFilePart=0x0) returned 0x43 [0045.788] GetFullPathNameW (in: lpFileName="C:\\Program Files\\MSBuild\\Microsoft\\Windows Workflow Foundation\\v3.0\\", nBufferLength=0x105, lpBuffer=0x31e220, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\MSBuild\\Microsoft\\Windows Workflow Foundation\\v3.0\\", lpFilePart=0x0) returned 0x44 [0045.788] FindFirstFileW (in: lpFileName="C:\\Program Files\\MSBuild\\Microsoft\\Windows Workflow Foundation\\v3.0\\*", lpFindFileData=0x31e46c | out: lpFindFileData=0x31e46c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x80020c30, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x8038cbd7, ftLastAccessTime.dwHighDateTime=0x1ca0444, ftLastWriteTime.dwLowDateTime=0x8038cbd7, ftLastWriteTime.dwHighDateTime=0x1ca0444, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x381e80 [0045.788] FindNextFileW (in: hFindFile=0x381e80, lpFindFileData=0x31e47c | out: lpFindFileData=0x31e47c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x80020c30, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x8038cbd7, ftLastAccessTime.dwHighDateTime=0x1ca0444, ftLastWriteTime.dwLowDateTime=0x8038cbd7, ftLastWriteTime.dwHighDateTime=0x1ca0444, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0045.788] FindNextFileW (in: hFindFile=0x381e80, lpFindFileData=0x31e47c | out: lpFindFileData=0x31e47c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8038cbd7, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x7bef7178, ftLastAccessTime.dwHighDateTime=0x1ca0444, ftLastWriteTime.dwLowDateTime=0x7bef7178, ftLastWriteTime.dwHighDateTime=0x1ca0444, nFileSizeHigh=0x0, nFileSizeLow=0x1276, dwReserved0=0x0, dwReserved1=0x0, cFileName="Workflow.Targets", cAlternateFileName="WORKFL~1.TAR")) returned 1 [0045.789] FindNextFileW (in: hFindFile=0x381e80, lpFindFileData=0x31e47c | out: lpFindFileData=0x31e47c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8038cbd7, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x7bef7178, ftLastAccessTime.dwHighDateTime=0x1ca0444, ftLastWriteTime.dwLowDateTime=0x7bef7178, ftLastWriteTime.dwHighDateTime=0x1ca0444, nFileSizeHigh=0x0, nFileSizeLow=0x143e, dwReserved0=0x0, dwReserved1=0x0, cFileName="Workflow.VisualBasic.Targets", cAlternateFileName="WORKFL~2.TAR")) returned 1 [0045.789] FindNextFileW (in: hFindFile=0x381e80, lpFindFileData=0x31e47c | out: lpFindFileData=0x31e47c*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0045.789] FindClose (in: hFindFile=0x381e80 | out: hFindFile=0x381e80) returned 1 [0045.789] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e704) returned 1 [0045.789] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e710) returned 1 [0045.789] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e744) returned 1 [0045.789] GetFullPathNameW (in: lpFileName="C:\\Program Files\\MSBuild\\Microsoft\\Windows Workflow Foundation\\v3.0", nBufferLength=0x105, lpBuffer=0x31e24c, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\MSBuild\\Microsoft\\Windows Workflow Foundation\\v3.0", lpFilePart=0x0) returned 0x43 [0045.789] GetFullPathNameW (in: lpFileName="C:\\Program Files\\MSBuild\\Microsoft\\Windows Workflow Foundation\\v3.0\\", nBufferLength=0x105, lpBuffer=0x31e220, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\MSBuild\\Microsoft\\Windows Workflow Foundation\\v3.0\\", lpFilePart=0x0) returned 0x44 [0045.789] FindFirstFileW (in: lpFileName="C:\\Program Files\\MSBuild\\Microsoft\\Windows Workflow Foundation\\v3.0\\*", lpFindFileData=0x31e46c | out: lpFindFileData=0x31e46c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x80020c30, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x8038cbd7, ftLastAccessTime.dwHighDateTime=0x1ca0444, ftLastWriteTime.dwLowDateTime=0x8038cbd7, ftLastWriteTime.dwHighDateTime=0x1ca0444, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x381e80 [0045.789] FindNextFileW (in: hFindFile=0x381e80, lpFindFileData=0x31e47c | out: lpFindFileData=0x31e47c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x80020c30, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x8038cbd7, ftLastAccessTime.dwHighDateTime=0x1ca0444, ftLastWriteTime.dwLowDateTime=0x8038cbd7, ftLastWriteTime.dwHighDateTime=0x1ca0444, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0045.789] FindNextFileW (in: hFindFile=0x381e80, lpFindFileData=0x31e47c | out: lpFindFileData=0x31e47c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8038cbd7, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x7bef7178, ftLastAccessTime.dwHighDateTime=0x1ca0444, ftLastWriteTime.dwLowDateTime=0x7bef7178, ftLastWriteTime.dwHighDateTime=0x1ca0444, nFileSizeHigh=0x0, nFileSizeLow=0x1276, dwReserved0=0x0, dwReserved1=0x0, cFileName="Workflow.Targets", cAlternateFileName="WORKFL~1.TAR")) returned 1 [0045.789] FindNextFileW (in: hFindFile=0x381e80, lpFindFileData=0x31e47c | out: lpFindFileData=0x31e47c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8038cbd7, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x7bef7178, ftLastAccessTime.dwHighDateTime=0x1ca0444, ftLastWriteTime.dwLowDateTime=0x7bef7178, ftLastWriteTime.dwHighDateTime=0x1ca0444, nFileSizeHigh=0x0, nFileSizeLow=0x143e, dwReserved0=0x0, dwReserved1=0x0, cFileName="Workflow.VisualBasic.Targets", cAlternateFileName="WORKFL~2.TAR")) returned 1 [0045.789] FindNextFileW (in: hFindFile=0x381e80, lpFindFileData=0x31e47c | out: lpFindFileData=0x31e47c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8038cbd7, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x7bef7178, ftLastAccessTime.dwHighDateTime=0x1ca0444, ftLastWriteTime.dwLowDateTime=0x7bef7178, ftLastWriteTime.dwHighDateTime=0x1ca0444, nFileSizeHigh=0x0, nFileSizeLow=0x143e, dwReserved0=0x0, dwReserved1=0x0, cFileName="Workflow.VisualBasic.Targets", cAlternateFileName="WORKFL~2.TAR")) returned 0 [0045.789] FindClose (in: hFindFile=0x381e80 | out: hFindFile=0x381e80) returned 1 [0045.790] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e704) returned 1 [0045.790] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e710) returned 1 [0045.790] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e744) returned 1 [0045.790] GetFullPathNameW (in: lpFileName="C:\\Program Files\\MSBuild\\Microsoft\\Windows Workflow Foundation\\v3.5", nBufferLength=0x105, lpBuffer=0x31e24c, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\MSBuild\\Microsoft\\Windows Workflow Foundation\\v3.5", lpFilePart=0x0) returned 0x43 [0045.790] GetFullPathNameW (in: lpFileName="C:\\Program Files\\MSBuild\\Microsoft\\Windows Workflow Foundation\\v3.5\\", nBufferLength=0x105, lpBuffer=0x31e220, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\MSBuild\\Microsoft\\Windows Workflow Foundation\\v3.5\\", lpFilePart=0x0) returned 0x44 [0045.790] FindFirstFileW (in: lpFileName="C:\\Program Files\\MSBuild\\Microsoft\\Windows Workflow Foundation\\v3.5\\*", lpFindFileData=0x31e46c | out: lpFindFileData=0x31e46c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x80020c30, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x8038cbd7, ftLastAccessTime.dwHighDateTime=0x1ca0444, ftLastWriteTime.dwLowDateTime=0x8038cbd7, ftLastWriteTime.dwHighDateTime=0x1ca0444, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x381e80 [0045.790] FindNextFileW (in: hFindFile=0x381e80, lpFindFileData=0x31e47c | out: lpFindFileData=0x31e47c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x80020c30, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x8038cbd7, ftLastAccessTime.dwHighDateTime=0x1ca0444, ftLastWriteTime.dwLowDateTime=0x8038cbd7, ftLastWriteTime.dwHighDateTime=0x1ca0444, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0045.790] FindNextFileW (in: hFindFile=0x381e80, lpFindFileData=0x31e47c | out: lpFindFileData=0x31e47c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x56230575, ftCreationTime.dwHighDateTime=0x1c9ea0a, ftLastAccessTime.dwLowDateTime=0x56230575, ftLastAccessTime.dwHighDateTime=0x1c9ea0a, ftLastWriteTime.dwLowDateTime=0x562566d3, ftLastWriteTime.dwHighDateTime=0x1c9ea0a, nFileSizeHigh=0x0, nFileSizeLow=0x1c01, dwReserved0=0x0, dwReserved1=0x0, cFileName="Workflow.Targets", cAlternateFileName="")) returned 1 [0045.790] FindNextFileW (in: hFindFile=0x381e80, lpFindFileData=0x31e47c | out: lpFindFileData=0x31e47c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8c9fc12, ftCreationTime.dwHighDateTime=0x1ca03fc, ftLastAccessTime.dwLowDateTime=0x8c9fc12, ftLastAccessTime.dwHighDateTime=0x1ca03fc, ftLastWriteTime.dwLowDateTime=0x5627c831, ftLastWriteTime.dwHighDateTime=0x1c9ea0a, nFileSizeHigh=0x0, nFileSizeLow=0x21e8, dwReserved0=0x0, dwReserved1=0x0, cFileName="Workflow.VisualBasic.Targets", cAlternateFileName="")) returned 1 [0045.790] FindNextFileW (in: hFindFile=0x381e80, lpFindFileData=0x31e47c | out: lpFindFileData=0x31e47c*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0045.790] FindClose (in: hFindFile=0x381e80 | out: hFindFile=0x381e80) returned 1 [0045.790] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e704) returned 1 [0045.790] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e710) returned 1 [0045.790] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e744) returned 1 [0045.790] GetFullPathNameW (in: lpFileName="C:\\Program Files\\MSBuild\\Microsoft\\Windows Workflow Foundation\\v3.5", nBufferLength=0x105, lpBuffer=0x31e24c, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\MSBuild\\Microsoft\\Windows Workflow Foundation\\v3.5", lpFilePart=0x0) returned 0x43 [0045.791] GetFullPathNameW (in: lpFileName="C:\\Program Files\\MSBuild\\Microsoft\\Windows Workflow Foundation\\v3.5\\", nBufferLength=0x105, lpBuffer=0x31e220, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\MSBuild\\Microsoft\\Windows Workflow Foundation\\v3.5\\", lpFilePart=0x0) returned 0x44 [0045.791] FindFirstFileW (in: lpFileName="C:\\Program Files\\MSBuild\\Microsoft\\Windows Workflow Foundation\\v3.5\\*", lpFindFileData=0x31e46c | out: lpFindFileData=0x31e46c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x80020c30, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x8038cbd7, ftLastAccessTime.dwHighDateTime=0x1ca0444, ftLastWriteTime.dwLowDateTime=0x8038cbd7, ftLastWriteTime.dwHighDateTime=0x1ca0444, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x381e80 [0045.791] FindNextFileW (in: hFindFile=0x381e80, lpFindFileData=0x31e47c | out: lpFindFileData=0x31e47c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x80020c30, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x8038cbd7, ftLastAccessTime.dwHighDateTime=0x1ca0444, ftLastWriteTime.dwLowDateTime=0x8038cbd7, ftLastWriteTime.dwHighDateTime=0x1ca0444, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0045.791] FindNextFileW (in: hFindFile=0x381e80, lpFindFileData=0x31e47c | out: lpFindFileData=0x31e47c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x56230575, ftCreationTime.dwHighDateTime=0x1c9ea0a, ftLastAccessTime.dwLowDateTime=0x56230575, ftLastAccessTime.dwHighDateTime=0x1c9ea0a, ftLastWriteTime.dwLowDateTime=0x562566d3, ftLastWriteTime.dwHighDateTime=0x1c9ea0a, nFileSizeHigh=0x0, nFileSizeLow=0x1c01, dwReserved0=0x0, dwReserved1=0x0, cFileName="Workflow.Targets", cAlternateFileName="")) returned 1 [0045.791] FindNextFileW (in: hFindFile=0x381e80, lpFindFileData=0x31e47c | out: lpFindFileData=0x31e47c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8c9fc12, ftCreationTime.dwHighDateTime=0x1ca03fc, ftLastAccessTime.dwLowDateTime=0x8c9fc12, ftLastAccessTime.dwHighDateTime=0x1ca03fc, ftLastWriteTime.dwLowDateTime=0x5627c831, ftLastWriteTime.dwHighDateTime=0x1c9ea0a, nFileSizeHigh=0x0, nFileSizeLow=0x21e8, dwReserved0=0x0, dwReserved1=0x0, cFileName="Workflow.VisualBasic.Targets", cAlternateFileName="")) returned 1 [0045.791] FindNextFileW (in: hFindFile=0x381e80, lpFindFileData=0x31e47c | out: lpFindFileData=0x31e47c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8c9fc12, ftCreationTime.dwHighDateTime=0x1ca03fc, ftLastAccessTime.dwLowDateTime=0x8c9fc12, ftLastAccessTime.dwHighDateTime=0x1ca03fc, ftLastWriteTime.dwLowDateTime=0x5627c831, ftLastWriteTime.dwHighDateTime=0x1c9ea0a, nFileSizeHigh=0x0, nFileSizeLow=0x21e8, dwReserved0=0x0, dwReserved1=0x0, cFileName="Workflow.VisualBasic.Targets", cAlternateFileName="")) returned 0 [0045.791] FindClose (in: hFindFile=0x381e80 | out: hFindFile=0x381e80) returned 1 [0045.791] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e704) returned 1 [0045.791] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e710) returned 1 [0045.791] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e8ac) returned 1 [0045.791] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Reference Assemblies", nBufferLength=0x105, lpBuffer=0x31e3b4, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Reference Assemblies", lpFilePart=0x0) returned 0x25 [0045.791] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Reference Assemblies\\", nBufferLength=0x105, lpBuffer=0x31e388, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Reference Assemblies\\", lpFilePart=0x0) returned 0x26 [0045.791] FindFirstFileW (in: lpFileName="C:\\Program Files\\Reference Assemblies\\*", lpFindFileData=0x31e5d4 | out: lpFindFileData=0x31e5d4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x80020c30, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0xda90d160, ftLastAccessTime.dwHighDateTime=0x1d5e82a, ftLastWriteTime.dwLowDateTime=0xda90d160, ftLastWriteTime.dwHighDateTime=0x1d5e82a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x381e80 [0045.792] FindNextFileW (in: hFindFile=0x381e80, lpFindFileData=0x31e5e4 | out: lpFindFileData=0x31e5e4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x80020c30, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0xda90d160, ftLastAccessTime.dwHighDateTime=0x1d5e82a, ftLastWriteTime.dwLowDateTime=0xda90d160, ftLastWriteTime.dwHighDateTime=0x1d5e82a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0045.792] FindNextFileW (in: hFindFile=0x381e80, lpFindFileData=0x31e5e4 | out: lpFindFileData=0x31e5e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf262ed20, ftCreationTime.dwHighDateTime=0x1d56556, ftLastAccessTime.dwLowDateTime=0x8bddc10, ftLastAccessTime.dwHighDateTime=0x1d5b39f, ftLastWriteTime.dwLowDateTime=0x8bddc10, ftLastWriteTime.dwHighDateTime=0x1d5b39f, nFileSizeHigh=0x0, nFileSizeLow=0x13a00, dwReserved0=0x0, dwReserved1=0x0, cFileName="3dftp.exe", cAlternateFileName="")) returned 1 [0045.792] FindNextFileW (in: hFindFile=0x381e80, lpFindFileData=0x31e5e4 | out: lpFindFileData=0x31e5e4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x80020c30, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x80020c30, ftLastAccessTime.dwHighDateTime=0x1ca0444, ftLastWriteTime.dwLowDateTime=0x80020c30, ftLastWriteTime.dwHighDateTime=0x1ca0444, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft", cAlternateFileName="MICROS~1")) returned 1 [0045.792] FindNextFileW (in: hFindFile=0x381e80, lpFindFileData=0x31e5e4 | out: lpFindFileData=0x31e5e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1342ec50, ftCreationTime.dwHighDateTime=0x1d5c46d, ftLastAccessTime.dwLowDateTime=0xc4eb3680, ftLastAccessTime.dwHighDateTime=0x1d5d5af, ftLastWriteTime.dwLowDateTime=0xc4eb3680, ftLastWriteTime.dwHighDateTime=0x1d5d5af, nFileSizeHigh=0x0, nFileSizeLow=0x13a00, dwReserved0=0x0, dwReserved1=0x0, cFileName="perfect-survive.exe", cAlternateFileName="PERFEC~1.EXE")) returned 1 [0045.792] FindNextFileW (in: hFindFile=0x381e80, lpFindFileData=0x31e5e4 | out: lpFindFileData=0x31e5e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe1f279b0, ftCreationTime.dwHighDateTime=0x1d595a3, ftLastAccessTime.dwLowDateTime=0x2bf754f0, ftLastAccessTime.dwHighDateTime=0x1d56e0c, ftLastWriteTime.dwLowDateTime=0x2bf754f0, ftLastWriteTime.dwHighDateTime=0x1d56e0c, nFileSizeHigh=0x0, nFileSizeLow=0x13a00, dwReserved0=0x0, dwReserved1=0x0, cFileName="performer_ultimate_essex.exe", cAlternateFileName="PERFOR~1.EXE")) returned 1 [0045.792] FindNextFileW (in: hFindFile=0x381e80, lpFindFileData=0x31e5e4 | out: lpFindFileData=0x31e5e4*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0045.792] FindClose (in: hFindFile=0x381e80 | out: hFindFile=0x381e80) returned 1 [0045.792] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e86c) returned 1 [0045.792] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e878) returned 1 [0045.792] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e8ac) returned 1 [0045.792] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Reference Assemblies", nBufferLength=0x105, lpBuffer=0x31e3b4, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Reference Assemblies", lpFilePart=0x0) returned 0x25 [0045.792] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Reference Assemblies\\", nBufferLength=0x105, lpBuffer=0x31e388, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Reference Assemblies\\", lpFilePart=0x0) returned 0x26 [0045.792] FindFirstFileW (in: lpFileName="C:\\Program Files\\Reference Assemblies\\*", lpFindFileData=0x31e5d4 | out: lpFindFileData=0x31e5d4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x80020c30, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0xda90d160, ftLastAccessTime.dwHighDateTime=0x1d5e82a, ftLastWriteTime.dwLowDateTime=0xda90d160, ftLastWriteTime.dwHighDateTime=0x1d5e82a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x381e80 [0045.792] FindNextFileW (in: hFindFile=0x381e80, lpFindFileData=0x31e5e4 | out: lpFindFileData=0x31e5e4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x80020c30, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0xda90d160, ftLastAccessTime.dwHighDateTime=0x1d5e82a, ftLastWriteTime.dwLowDateTime=0xda90d160, ftLastWriteTime.dwHighDateTime=0x1d5e82a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0045.793] FindNextFileW (in: hFindFile=0x381e80, lpFindFileData=0x31e5e4 | out: lpFindFileData=0x31e5e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf262ed20, ftCreationTime.dwHighDateTime=0x1d56556, ftLastAccessTime.dwLowDateTime=0x8bddc10, ftLastAccessTime.dwHighDateTime=0x1d5b39f, ftLastWriteTime.dwLowDateTime=0x8bddc10, ftLastWriteTime.dwHighDateTime=0x1d5b39f, nFileSizeHigh=0x0, nFileSizeLow=0x13a00, dwReserved0=0x0, dwReserved1=0x0, cFileName="3dftp.exe", cAlternateFileName="")) returned 1 [0045.793] FindNextFileW (in: hFindFile=0x381e80, lpFindFileData=0x31e5e4 | out: lpFindFileData=0x31e5e4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x80020c30, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x80020c30, ftLastAccessTime.dwHighDateTime=0x1ca0444, ftLastWriteTime.dwLowDateTime=0x80020c30, ftLastWriteTime.dwHighDateTime=0x1ca0444, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft", cAlternateFileName="MICROS~1")) returned 1 [0045.793] FindNextFileW (in: hFindFile=0x381e80, lpFindFileData=0x31e5e4 | out: lpFindFileData=0x31e5e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1342ec50, ftCreationTime.dwHighDateTime=0x1d5c46d, ftLastAccessTime.dwLowDateTime=0xc4eb3680, ftLastAccessTime.dwHighDateTime=0x1d5d5af, ftLastWriteTime.dwLowDateTime=0xc4eb3680, ftLastWriteTime.dwHighDateTime=0x1d5d5af, nFileSizeHigh=0x0, nFileSizeLow=0x13a00, dwReserved0=0x0, dwReserved1=0x0, cFileName="perfect-survive.exe", cAlternateFileName="PERFEC~1.EXE")) returned 1 [0045.793] FindNextFileW (in: hFindFile=0x381e80, lpFindFileData=0x31e5e4 | out: lpFindFileData=0x31e5e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe1f279b0, ftCreationTime.dwHighDateTime=0x1d595a3, ftLastAccessTime.dwLowDateTime=0x2bf754f0, ftLastAccessTime.dwHighDateTime=0x1d56e0c, ftLastWriteTime.dwLowDateTime=0x2bf754f0, ftLastWriteTime.dwHighDateTime=0x1d56e0c, nFileSizeHigh=0x0, nFileSizeLow=0x13a00, dwReserved0=0x0, dwReserved1=0x0, cFileName="performer_ultimate_essex.exe", cAlternateFileName="PERFOR~1.EXE")) returned 1 [0045.793] FindNextFileW (in: hFindFile=0x381e80, lpFindFileData=0x31e5e4 | out: lpFindFileData=0x31e5e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe1f279b0, ftCreationTime.dwHighDateTime=0x1d595a3, ftLastAccessTime.dwLowDateTime=0x2bf754f0, ftLastAccessTime.dwHighDateTime=0x1d56e0c, ftLastWriteTime.dwLowDateTime=0x2bf754f0, ftLastWriteTime.dwHighDateTime=0x1d56e0c, nFileSizeHigh=0x0, nFileSizeLow=0x13a00, dwReserved0=0x0, dwReserved1=0x0, cFileName="performer_ultimate_essex.exe", cAlternateFileName="PERFOR~1.EXE")) returned 0 [0045.793] FindClose (in: hFindFile=0x381e80 | out: hFindFile=0x381e80) returned 1 [0045.793] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e86c) returned 1 [0045.793] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e878) returned 1 [0045.793] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e834) returned 1 [0045.793] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Reference Assemblies\\Microsoft", nBufferLength=0x105, lpBuffer=0x31e33c, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Reference Assemblies\\Microsoft", lpFilePart=0x0) returned 0x2f [0045.793] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Reference Assemblies\\Microsoft\\", nBufferLength=0x105, lpBuffer=0x31e310, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Reference Assemblies\\Microsoft\\", lpFilePart=0x0) returned 0x30 [0045.793] FindFirstFileW (in: lpFileName="C:\\Program Files\\Reference Assemblies\\Microsoft\\*", lpFindFileData=0x31e55c | out: lpFindFileData=0x31e55c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x80020c30, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x80020c30, ftLastAccessTime.dwHighDateTime=0x1ca0444, ftLastWriteTime.dwLowDateTime=0x80020c30, ftLastWriteTime.dwHighDateTime=0x1ca0444, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x381e80 [0045.793] FindNextFileW (in: hFindFile=0x381e80, lpFindFileData=0x31e56c | out: lpFindFileData=0x31e56c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x80020c30, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x80020c30, ftLastAccessTime.dwHighDateTime=0x1ca0444, ftLastWriteTime.dwLowDateTime=0x80020c30, ftLastWriteTime.dwHighDateTime=0x1ca0444, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0045.794] FindNextFileW (in: hFindFile=0x381e80, lpFindFileData=0x31e56c | out: lpFindFileData=0x31e56c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x80020c30, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x80020c30, ftLastAccessTime.dwHighDateTime=0x1ca0444, ftLastWriteTime.dwLowDateTime=0x80020c30, ftLastWriteTime.dwHighDateTime=0x1ca0444, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Framework", cAlternateFileName="FRAMEW~1")) returned 1 [0045.794] FindNextFileW (in: hFindFile=0x381e80, lpFindFileData=0x31e56c | out: lpFindFileData=0x31e56c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x80020c30, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x80020c30, ftLastAccessTime.dwHighDateTime=0x1ca0444, ftLastWriteTime.dwLowDateTime=0x80020c30, ftLastWriteTime.dwHighDateTime=0x1ca0444, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Framework", cAlternateFileName="FRAMEW~1")) returned 0 [0045.794] FindClose (in: hFindFile=0x381e80 | out: hFindFile=0x381e80) returned 1 [0045.794] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e7f4) returned 1 [0045.794] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e800) returned 1 [0045.794] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e834) returned 1 [0045.794] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Reference Assemblies\\Microsoft", nBufferLength=0x105, lpBuffer=0x31e33c, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Reference Assemblies\\Microsoft", lpFilePart=0x0) returned 0x2f [0045.794] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Reference Assemblies\\Microsoft\\", nBufferLength=0x105, lpBuffer=0x31e310, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Reference Assemblies\\Microsoft\\", lpFilePart=0x0) returned 0x30 [0045.794] FindFirstFileW (in: lpFileName="C:\\Program Files\\Reference Assemblies\\Microsoft\\*", lpFindFileData=0x31e55c | out: lpFindFileData=0x31e55c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x80020c30, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x80020c30, ftLastAccessTime.dwHighDateTime=0x1ca0444, ftLastWriteTime.dwLowDateTime=0x80020c30, ftLastWriteTime.dwHighDateTime=0x1ca0444, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x381e80 [0045.794] FindNextFileW (in: hFindFile=0x381e80, lpFindFileData=0x31e56c | out: lpFindFileData=0x31e56c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x80020c30, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x80020c30, ftLastAccessTime.dwHighDateTime=0x1ca0444, ftLastWriteTime.dwLowDateTime=0x80020c30, ftLastWriteTime.dwHighDateTime=0x1ca0444, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0045.794] FindNextFileW (in: hFindFile=0x381e80, lpFindFileData=0x31e56c | out: lpFindFileData=0x31e56c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x80020c30, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x80020c30, ftLastAccessTime.dwHighDateTime=0x1ca0444, ftLastWriteTime.dwLowDateTime=0x80020c30, ftLastWriteTime.dwHighDateTime=0x1ca0444, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Framework", cAlternateFileName="FRAMEW~1")) returned 1 [0045.794] FindNextFileW (in: hFindFile=0x381e80, lpFindFileData=0x31e56c | out: lpFindFileData=0x31e56c*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0045.794] FindClose (in: hFindFile=0x381e80 | out: hFindFile=0x381e80) returned 1 [0045.794] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e7f4) returned 1 [0045.795] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e800) returned 1 [0045.795] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e7bc) returned 1 [0045.795] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Reference Assemblies\\Microsoft\\Framework", nBufferLength=0x105, lpBuffer=0x31e2c4, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Reference Assemblies\\Microsoft\\Framework", lpFilePart=0x0) returned 0x39 [0045.795] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Reference Assemblies\\Microsoft\\Framework\\", nBufferLength=0x105, lpBuffer=0x31e298, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Reference Assemblies\\Microsoft\\Framework\\", lpFilePart=0x0) returned 0x3a [0045.795] FindFirstFileW (in: lpFileName="C:\\Program Files\\Reference Assemblies\\Microsoft\\Framework\\*", lpFindFileData=0x31e4e4 | out: lpFindFileData=0x31e4e4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x80020c30, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x80020c30, ftLastAccessTime.dwHighDateTime=0x1ca0444, ftLastWriteTime.dwLowDateTime=0x80020c30, ftLastWriteTime.dwHighDateTime=0x1ca0444, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x381e80 [0045.795] FindNextFileW (in: hFindFile=0x381e80, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x80020c30, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x80020c30, ftLastAccessTime.dwHighDateTime=0x1ca0444, ftLastWriteTime.dwLowDateTime=0x80020c30, ftLastWriteTime.dwHighDateTime=0x1ca0444, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0045.795] FindNextFileW (in: hFindFile=0x381e80, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x80020c30, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x974da2e9, ftLastAccessTime.dwHighDateTime=0x1cb892c, ftLastWriteTime.dwLowDateTime=0x974da2e9, ftLastWriteTime.dwHighDateTime=0x1cb892c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="v3.0", cAlternateFileName="")) returned 1 [0045.795] FindNextFileW (in: hFindFile=0x381e80, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x80020c30, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x96e4e65d, ftLastAccessTime.dwHighDateTime=0x1cb892c, ftLastWriteTime.dwLowDateTime=0x96e4e65d, ftLastWriteTime.dwHighDateTime=0x1cb892c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="v3.5", cAlternateFileName="")) returned 1 [0045.795] FindNextFileW (in: hFindFile=0x381e80, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x80020c30, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x96e4e65d, ftLastAccessTime.dwHighDateTime=0x1cb892c, ftLastWriteTime.dwLowDateTime=0x96e4e65d, ftLastWriteTime.dwHighDateTime=0x1cb892c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="v3.5", cAlternateFileName="")) returned 0 [0045.795] FindClose (in: hFindFile=0x381e80 | out: hFindFile=0x381e80) returned 1 [0045.795] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e77c) returned 1 [0045.795] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e788) returned 1 [0045.795] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e7bc) returned 1 [0045.795] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Reference Assemblies\\Microsoft\\Framework", nBufferLength=0x105, lpBuffer=0x31e2c4, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Reference Assemblies\\Microsoft\\Framework", lpFilePart=0x0) returned 0x39 [0045.795] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Reference Assemblies\\Microsoft\\Framework\\", nBufferLength=0x105, lpBuffer=0x31e298, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Reference Assemblies\\Microsoft\\Framework\\", lpFilePart=0x0) returned 0x3a [0045.796] FindFirstFileW (in: lpFileName="C:\\Program Files\\Reference Assemblies\\Microsoft\\Framework\\*", lpFindFileData=0x31e4e4 | out: lpFindFileData=0x31e4e4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x80020c30, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x80020c30, ftLastAccessTime.dwHighDateTime=0x1ca0444, ftLastWriteTime.dwLowDateTime=0x80020c30, ftLastWriteTime.dwHighDateTime=0x1ca0444, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x381e80 [0045.796] FindNextFileW (in: hFindFile=0x381e80, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x80020c30, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x80020c30, ftLastAccessTime.dwHighDateTime=0x1ca0444, ftLastWriteTime.dwLowDateTime=0x80020c30, ftLastWriteTime.dwHighDateTime=0x1ca0444, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0045.796] FindNextFileW (in: hFindFile=0x381e80, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x80020c30, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x974da2e9, ftLastAccessTime.dwHighDateTime=0x1cb892c, ftLastWriteTime.dwLowDateTime=0x974da2e9, ftLastWriteTime.dwHighDateTime=0x1cb892c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="v3.0", cAlternateFileName="")) returned 1 [0045.796] FindNextFileW (in: hFindFile=0x381e80, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x80020c30, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x96e4e65d, ftLastAccessTime.dwHighDateTime=0x1cb892c, ftLastWriteTime.dwLowDateTime=0x96e4e65d, ftLastWriteTime.dwHighDateTime=0x1cb892c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="v3.5", cAlternateFileName="")) returned 1 [0045.796] FindNextFileW (in: hFindFile=0x381e80, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0045.796] FindClose (in: hFindFile=0x381e80 | out: hFindFile=0x381e80) returned 1 [0045.796] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e77c) returned 1 [0045.796] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e788) returned 1 [0045.796] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e744) returned 1 [0045.796] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Reference Assemblies\\Microsoft\\Framework\\v3.0", nBufferLength=0x105, lpBuffer=0x31e24c, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Reference Assemblies\\Microsoft\\Framework\\v3.0", lpFilePart=0x0) returned 0x3e [0045.796] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Reference Assemblies\\Microsoft\\Framework\\v3.0\\", nBufferLength=0x105, lpBuffer=0x31e220, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Reference Assemblies\\Microsoft\\Framework\\v3.0\\", lpFilePart=0x0) returned 0x3f [0045.796] FindFirstFileW (in: lpFileName="C:\\Program Files\\Reference Assemblies\\Microsoft\\Framework\\v3.0\\*", lpFindFileData=0x31e46c | out: lpFindFileData=0x31e46c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x80020c30, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x974da2e9, ftLastAccessTime.dwHighDateTime=0x1cb892c, ftLastWriteTime.dwLowDateTime=0x974da2e9, ftLastWriteTime.dwHighDateTime=0x1cb892c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x381e80 [0045.798] FindNextFileW (in: hFindFile=0x381e80, lpFindFileData=0x31e47c | out: lpFindFileData=0x31e47c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x80020c30, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x974da2e9, ftLastAccessTime.dwHighDateTime=0x1cb892c, ftLastWriteTime.dwLowDateTime=0x974da2e9, ftLastWriteTime.dwHighDateTime=0x1cb892c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0045.798] FindNextFileW (in: hFindFile=0x381e80, lpFindFileData=0x31e47c | out: lpFindFileData=0x31e47c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa981eb4a, ftCreationTime.dwHighDateTime=0x1cb892b, ftLastAccessTime.dwLowDateTime=0xa981eb4a, ftLastAccessTime.dwHighDateTime=0x1cb892b, ftLastWriteTime.dwLowDateTime=0xa981eb4a, ftLastWriteTime.dwHighDateTime=0x1cb892b, nFileSizeHigh=0x0, nFileSizeLow=0x92000, dwReserved0=0x0, dwReserved1=0x0, cFileName="PresentationBuildTasks.dll", cAlternateFileName="")) returned 1 [0045.798] FindNextFileW (in: hFindFile=0x381e80, lpFindFileData=0x31e47c | out: lpFindFileData=0x31e47c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa990338c, ftCreationTime.dwHighDateTime=0x1cb892b, ftLastAccessTime.dwLowDateTime=0xa990338c, ftLastAccessTime.dwHighDateTime=0x1cb892b, ftLastWriteTime.dwLowDateTime=0xa99757ac, ftLastWriteTime.dwHighDateTime=0x1cb892b, nFileSizeHigh=0x0, nFileSizeLow=0x3d0000, dwReserved0=0x0, dwReserved1=0x0, cFileName="PresentationCore.dll", cAlternateFileName="")) returned 1 [0045.798] FindNextFileW (in: hFindFile=0x381e80, lpFindFileData=0x31e47c | out: lpFindFileData=0x31e47c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x993ade39, ftCreationTime.dwHighDateTime=0x1ca041e, ftLastAccessTime.dwLowDateTime=0x993ade39, ftLastAccessTime.dwHighDateTime=0x1ca041e, ftLastWriteTime.dwLowDateTime=0x5b475983, ftLastWriteTime.dwHighDateTime=0x1c9ea0a, nFileSizeHigh=0x0, nFileSizeLow=0x30000, dwReserved0=0x0, dwReserved1=0x0, cFileName="PresentationFramework.Aero.dll", cAlternateFileName="")) returned 1 [0045.799] FindNextFileW (in: hFindFile=0x381e80, lpFindFileData=0x31e47c | out: lpFindFileData=0x31e47c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x994463ad, ftCreationTime.dwHighDateTime=0x1ca041e, ftLastAccessTime.dwLowDateTime=0x994463ad, ftLastAccessTime.dwHighDateTime=0x1ca041e, ftLastWriteTime.dwLowDateTime=0x5b72321f, ftLastWriteTime.dwHighDateTime=0x1c9ea0a, nFileSizeHigh=0x0, nFileSizeLow=0x22000, dwReserved0=0x0, dwReserved1=0x0, cFileName="PresentationFramework.Classic.dll", cAlternateFileName="")) returned 1 [0045.799] FindNextFileW (in: hFindFile=0x381e80, lpFindFileData=0x31e47c | out: lpFindFileData=0x31e47c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa981eb4a, ftCreationTime.dwHighDateTime=0x1cb892b, ftLastAccessTime.dwLowDateTime=0xa981eb4a, ftLastAccessTime.dwHighDateTime=0x1cb892b, ftLastWriteTime.dwLowDateTime=0xa98b70cb, ftLastWriteTime.dwHighDateTime=0x1cb892b, nFileSizeHigh=0x0, nFileSizeLow=0x46c000, dwReserved0=0x0, dwReserved1=0x0, cFileName="PresentationFramework.dll", cAlternateFileName="")) returned 1 [0045.799] FindNextFileW (in: hFindFile=0x381e80, lpFindFileData=0x31e47c | out: lpFindFileData=0x31e47c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x99e17da7, ftCreationTime.dwHighDateTime=0x1ca041e, ftLastAccessTime.dwLowDateTime=0x99e17da7, ftLastAccessTime.dwHighDateTime=0x1ca041e, ftLastWriteTime.dwLowDateTime=0x5b807a53, ftLastWriteTime.dwHighDateTime=0x1c9ea0a, nFileSizeHigh=0x0, nFileSizeLow=0x5d000, dwReserved0=0x0, dwReserved1=0x0, cFileName="PresentationFramework.Luna.dll", cAlternateFileName="")) returned 1 [0045.799] FindNextFileW (in: hFindFile=0x381e80, lpFindFileData=0x31e47c | out: lpFindFileData=0x31e47c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x99efc5d5, ftCreationTime.dwHighDateTime=0x1ca041e, ftLastAccessTime.dwLowDateTime=0x99efc5d5, ftLastAccessTime.dwHighDateTime=0x1ca041e, ftLastWriteTime.dwLowDateTime=0x5cc8f6ff, ftLastWriteTime.dwHighDateTime=0x1c9ea0a, nFileSizeHigh=0x0, nFileSizeLow=0x28000, dwReserved0=0x0, dwReserved1=0x0, cFileName="PresentationFramework.Royale.dll", cAlternateFileName="")) returned 1 [0045.799] FindNextFileW (in: hFindFile=0x381e80, lpFindFileData=0x31e47c | out: lpFindFileData=0x31e47c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa973a308, ftCreationTime.dwHighDateTime=0x1cb892b, ftLastAccessTime.dwLowDateTime=0xa973a308, ftLastAccessTime.dwHighDateTime=0x1cb892b, ftLastWriteTime.dwLowDateTime=0xa9760469, ftLastWriteTime.dwHighDateTime=0x1cb892b, nFileSizeHigh=0x0, nFileSizeLow=0x82000, dwReserved0=0x0, dwReserved1=0x0, cFileName="ReachFramework.dll", cAlternateFileName="")) returned 1 [0045.799] FindNextFileW (in: hFindFile=0x381e80, lpFindFileData=0x31e47c | out: lpFindFileData=0x31e47c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x80020c30, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x803feff7, ftLastAccessTime.dwHighDateTime=0x1ca0444, ftLastWriteTime.dwLowDateTime=0x803feff7, ftLastWriteTime.dwHighDateTime=0x1ca0444, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="RedistList", cAlternateFileName="REDIST~1")) returned 1 [0045.799] FindNextFileW (in: hFindFile=0x381e80, lpFindFileData=0x31e47c | out: lpFindFileData=0x31e47c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa9d79cd4, ftCreationTime.dwHighDateTime=0x1cb892b, ftLastAccessTime.dwLowDateTime=0xa9d79cd4, ftLastAccessTime.dwHighDateTime=0x1cb892b, ftLastWriteTime.dwLowDateTime=0xa9d9fe34, ftLastWriteTime.dwHighDateTime=0x1cb892b, nFileSizeHigh=0x0, nFileSizeLow=0x62000, dwReserved0=0x0, dwReserved1=0x0, cFileName="System.IdentityModel.dll", cAlternateFileName="")) returned 1 [0045.799] FindNextFileW (in: hFindFile=0x381e80, lpFindFileData=0x31e47c | out: lpFindFileData=0x31e47c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xaae31b18, ftCreationTime.dwHighDateTime=0x1ca041e, ftLastAccessTime.dwLowDateTime=0xaae31b18, ftLastAccessTime.dwHighDateTime=0x1ca041e, ftLastWriteTime.dwLowDateTime=0x53cd8e4b, ftLastWriteTime.dwHighDateTime=0x1c9ea0a, nFileSizeHigh=0x0, nFileSizeLow=0x1e000, dwReserved0=0x0, dwReserved1=0x0, cFileName="System.IdentityModel.Selectors.dll", cAlternateFileName="")) returned 1 [0045.799] FindNextFileW (in: hFindFile=0x381e80, lpFindFileData=0x31e47c | out: lpFindFileData=0x31e47c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xaaef01e9, ftCreationTime.dwHighDateTime=0x1ca041e, ftLastAccessTime.dwLowDateTime=0xaaef01e9, ftLastAccessTime.dwHighDateTime=0x1ca041e, ftLastWriteTime.dwLowDateTime=0x53d25107, ftLastWriteTime.dwHighDateTime=0x1c9ea0a, nFileSizeHigh=0x0, nFileSizeLow=0x20000, dwReserved0=0x0, dwReserved1=0x0, cFileName="System.IO.Log.dll", cAlternateFileName="")) returned 1 [0045.799] FindNextFileW (in: hFindFile=0x381e80, lpFindFileData=0x31e47c | out: lpFindFileData=0x31e47c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa98b70cb, ftCreationTime.dwHighDateTime=0x1cb892b, ftLastAccessTime.dwLowDateTime=0xa98b70cb, ftLastAccessTime.dwHighDateTime=0x1cb892b, ftLastWriteTime.dwLowDateTime=0xa98b70cb, ftLastWriteTime.dwHighDateTime=0x1cb892b, nFileSizeHigh=0x0, nFileSizeLow=0x57a00, dwReserved0=0x0, dwReserved1=0x0, cFileName="System.Printing.dll", cAlternateFileName="")) returned 1 [0045.799] FindNextFileW (in: hFindFile=0x381e80, lpFindFileData=0x31e47c | out: lpFindFileData=0x31e47c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa9ce1753, ftCreationTime.dwHighDateTime=0x1cb892b, ftLastAccessTime.dwLowDateTime=0xa9ce1753, ftLastAccessTime.dwHighDateTime=0x1cb892b, ftLastWriteTime.dwLowDateTime=0xa9d078b3, ftLastWriteTime.dwHighDateTime=0x1cb892b, nFileSizeHigh=0x0, nFileSizeLow=0xcf000, dwReserved0=0x0, dwReserved1=0x0, cFileName="System.Runtime.Serialization.dll", cAlternateFileName="")) returned 1 [0045.799] FindNextFileW (in: hFindFile=0x381e80, lpFindFileData=0x31e47c | out: lpFindFileData=0x31e47c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa9bfcf11, ftCreationTime.dwHighDateTime=0x1cb892b, ftLastAccessTime.dwLowDateTime=0xa9bfcf11, ftLastAccessTime.dwHighDateTime=0x1cb892b, ftLastWriteTime.dwLowDateTime=0xa9c6f332, ftLastWriteTime.dwHighDateTime=0x1cb892b, nFileSizeHigh=0x0, nFileSizeLow=0x515000, dwReserved0=0x0, dwReserved1=0x0, cFileName="System.ServiceModel.dll", cAlternateFileName="")) returned 1 [0045.799] FindNextFileW (in: hFindFile=0x381e80, lpFindFileData=0x31e47c | out: lpFindFileData=0x31e47c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9a53bf17, ftCreationTime.dwHighDateTime=0x1ca041e, ftLastAccessTime.dwLowDateTime=0x9a53bf17, ftLastAccessTime.dwHighDateTime=0x1ca041e, ftLastWriteTime.dwLowDateTime=0x5cf16e3d, ftLastWriteTime.dwHighDateTime=0x1c9ea0a, nFileSizeHigh=0x0, nFileSizeLow=0xa8000, dwReserved0=0x0, dwReserved1=0x0, cFileName="System.Speech.dll", cAlternateFileName="")) returned 1 [0045.799] FindNextFileW (in: hFindFile=0x381e80, lpFindFileData=0x31e47c | out: lpFindFileData=0x31e47c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa9655ac7, ftCreationTime.dwHighDateTime=0x1cb892b, ftLastAccessTime.dwLowDateTime=0xa9655ac7, ftLastAccessTime.dwHighDateTime=0x1cb892b, ftLastWriteTime.dwLowDateTime=0xa967bc27, ftLastWriteTime.dwHighDateTime=0x1cb892b, nFileSizeHigh=0x0, nFileSizeLow=0x103000, dwReserved0=0x0, dwReserved1=0x0, cFileName="System.Workflow.Activities.dll", cAlternateFileName="")) returned 1 [0045.799] FindNextFileW (in: hFindFile=0x381e80, lpFindFileData=0x31e47c | out: lpFindFileData=0x31e47c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa9609806, ftCreationTime.dwHighDateTime=0x1cb892b, ftLastAccessTime.dwLowDateTime=0xa9609806, ftLastAccessTime.dwHighDateTime=0x1cb892b, ftLastWriteTime.dwLowDateTime=0xa962f966, ftLastWriteTime.dwHighDateTime=0x1cb892b, nFileSizeHigh=0x0, nFileSizeLow=0x173000, dwReserved0=0x0, dwReserved1=0x0, cFileName="System.Workflow.ComponentModel.dll", cAlternateFileName="")) returned 1 [0045.800] FindNextFileW (in: hFindFile=0x381e80, lpFindFileData=0x31e47c | out: lpFindFileData=0x31e47c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa96a1d87, ftCreationTime.dwHighDateTime=0x1cb892b, ftLastAccessTime.dwLowDateTime=0xa96a1d87, ftLastAccessTime.dwHighDateTime=0x1cb892b, ftLastWriteTime.dwLowDateTime=0xa96c7ee8, ftLastWriteTime.dwHighDateTime=0x1cb892b, nFileSizeHigh=0x0, nFileSizeLow=0x6f000, dwReserved0=0x0, dwReserved1=0x0, cFileName="System.Workflow.Runtime.dll", cAlternateFileName="")) returned 1 [0045.800] FindNextFileW (in: hFindFile=0x381e80, lpFindFileData=0x31e47c | out: lpFindFileData=0x31e47c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9a72b0d0, ftCreationTime.dwHighDateTime=0x1ca041e, ftLastAccessTime.dwLowDateTime=0x9a72b0d0, ftLastAccessTime.dwHighDateTime=0x1ca041e, ftLastWriteTime.dwLowDateTime=0x5cfaf3b5, ftLastWriteTime.dwHighDateTime=0x1c9ea0a, nFileSizeHigh=0x0, nFileSizeLow=0x2a000, dwReserved0=0x0, dwReserved1=0x0, cFileName="UIAutomationClient.dll", cAlternateFileName="")) returned 1 [0045.800] FindNextFileW (in: hFindFile=0x381e80, lpFindFileData=0x31e47c | out: lpFindFileData=0x31e47c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9a8f412c, ftCreationTime.dwHighDateTime=0x1ca041e, ftLastAccessTime.dwLowDateTime=0x9a8f412c, ftLastAccessTime.dwHighDateTime=0x1ca041e, ftLastWriteTime.dwLowDateTime=0x5d04792d, ftLastWriteTime.dwHighDateTime=0x1c9ea0a, nFileSizeHigh=0x0, nFileSizeLow=0x5d000, dwReserved0=0x0, dwReserved1=0x0, cFileName="UIAutomationClientsideProviders.dll", cAlternateFileName="")) returned 1 [0045.800] FindNextFileW (in: hFindFile=0x381e80, lpFindFileData=0x31e47c | out: lpFindFileData=0x31e47c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9a98c6a0, ftCreationTime.dwHighDateTime=0x1ca041e, ftLastAccessTime.dwLowDateTime=0x9a98c6a0, ftLastAccessTime.dwHighDateTime=0x1ca041e, ftLastWriteTime.dwLowDateTime=0x5d106003, ftLastWriteTime.dwHighDateTime=0x1c9ea0a, nFileSizeHigh=0x0, nFileSizeLow=0xa000, dwReserved0=0x0, dwReserved1=0x0, cFileName="UIAutomationProvider.dll", cAlternateFileName="")) returned 1 [0045.800] FindNextFileW (in: hFindFile=0x381e80, lpFindFileData=0x31e47c | out: lpFindFileData=0x31e47c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9aa4ad71, ftCreationTime.dwHighDateTime=0x1ca041e, ftLastAccessTime.dwLowDateTime=0x9aa4ad71, ftLastAccessTime.dwHighDateTime=0x1ca041e, ftLastWriteTime.dwLowDateTime=0x5d17841d, ftLastWriteTime.dwHighDateTime=0x1c9ea0a, nFileSizeHigh=0x0, nFileSizeLow=0x18000, dwReserved0=0x0, dwReserved1=0x0, cFileName="UIAutomationTypes.dll", cAlternateFileName="")) returned 1 [0045.800] FindNextFileW (in: hFindFile=0x381e80, lpFindFileData=0x31e47c | out: lpFindFileData=0x31e47c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa97d2889, ftCreationTime.dwHighDateTime=0x1cb892b, ftLastAccessTime.dwLowDateTime=0xa97d2889, ftLastAccessTime.dwHighDateTime=0x1cb892b, ftLastWriteTime.dwLowDateTime=0xa97f89ea, ftLastWriteTime.dwHighDateTime=0x1cb892b, nFileSizeHigh=0x0, nFileSizeLow=0x110000, dwReserved0=0x0, dwReserved1=0x0, cFileName="WindowsBase.dll", cAlternateFileName="")) returned 1 [0045.800] FindNextFileW (in: hFindFile=0x381e80, lpFindFileData=0x31e47c | out: lpFindFileData=0x31e47c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9acf85fb, ftCreationTime.dwHighDateTime=0x1ca041e, ftLastAccessTime.dwLowDateTime=0x9acf85fb, ftLastAccessTime.dwHighDateTime=0x1ca041e, ftLastWriteTime.dwLowDateTime=0x5d2a8f0d, ftLastWriteTime.dwHighDateTime=0x1c9ea0a, nFileSizeHigh=0x0, nFileSizeLow=0x17000, dwReserved0=0x0, dwReserved1=0x0, cFileName="WindowsFormsIntegration.dll", cAlternateFileName="")) returned 1 [0045.800] FindNextFileW (in: hFindFile=0x381e80, lpFindFileData=0x31e47c | out: lpFindFileData=0x31e47c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x803d8e97, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x7bef7178, ftLastAccessTime.dwHighDateTime=0x1ca0444, ftLastWriteTime.dwLowDateTime=0x7bef7178, ftLastWriteTime.dwHighDateTime=0x1ca0444, nFileSizeHigh=0x0, nFileSizeLow=0xa12, dwReserved0=0x0, dwReserved1=0x0, cFileName="WinFXList.xml", cAlternateFileName="WINFXL~1.XML")) returned 1 [0045.800] FindNextFileW (in: hFindFile=0x381e80, lpFindFileData=0x31e47c | out: lpFindFileData=0x31e47c*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0045.800] FindClose (in: hFindFile=0x381e80 | out: hFindFile=0x381e80) returned 1 [0045.801] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e704) returned 1 [0045.801] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e710) returned 1 [0045.801] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e744) returned 1 [0045.801] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Reference Assemblies\\Microsoft\\Framework\\v3.0", nBufferLength=0x105, lpBuffer=0x31e24c, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Reference Assemblies\\Microsoft\\Framework\\v3.0", lpFilePart=0x0) returned 0x3e [0045.801] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Reference Assemblies\\Microsoft\\Framework\\v3.0\\", nBufferLength=0x105, lpBuffer=0x31e220, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Reference Assemblies\\Microsoft\\Framework\\v3.0\\", lpFilePart=0x0) returned 0x3f [0045.801] FindFirstFileW (in: lpFileName="C:\\Program Files\\Reference Assemblies\\Microsoft\\Framework\\v3.0\\*", lpFindFileData=0x31e46c | out: lpFindFileData=0x31e46c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x80020c30, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x974da2e9, ftLastAccessTime.dwHighDateTime=0x1cb892c, ftLastWriteTime.dwLowDateTime=0x974da2e9, ftLastWriteTime.dwHighDateTime=0x1cb892c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x381e80 [0045.802] FindNextFileW (in: hFindFile=0x381e80, lpFindFileData=0x31e47c | out: lpFindFileData=0x31e47c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x80020c30, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x974da2e9, ftLastAccessTime.dwHighDateTime=0x1cb892c, ftLastWriteTime.dwLowDateTime=0x974da2e9, ftLastWriteTime.dwHighDateTime=0x1cb892c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0045.802] FindNextFileW (in: hFindFile=0x381e80, lpFindFileData=0x31e47c | out: lpFindFileData=0x31e47c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa981eb4a, ftCreationTime.dwHighDateTime=0x1cb892b, ftLastAccessTime.dwLowDateTime=0xa981eb4a, ftLastAccessTime.dwHighDateTime=0x1cb892b, ftLastWriteTime.dwLowDateTime=0xa981eb4a, ftLastWriteTime.dwHighDateTime=0x1cb892b, nFileSizeHigh=0x0, nFileSizeLow=0x92000, dwReserved0=0x0, dwReserved1=0x0, cFileName="PresentationBuildTasks.dll", cAlternateFileName="")) returned 1 [0045.802] FindNextFileW (in: hFindFile=0x381e80, lpFindFileData=0x31e47c | out: lpFindFileData=0x31e47c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa990338c, ftCreationTime.dwHighDateTime=0x1cb892b, ftLastAccessTime.dwLowDateTime=0xa990338c, ftLastAccessTime.dwHighDateTime=0x1cb892b, ftLastWriteTime.dwLowDateTime=0xa99757ac, ftLastWriteTime.dwHighDateTime=0x1cb892b, nFileSizeHigh=0x0, nFileSizeLow=0x3d0000, dwReserved0=0x0, dwReserved1=0x0, cFileName="PresentationCore.dll", cAlternateFileName="")) returned 1 [0045.802] FindNextFileW (in: hFindFile=0x381e80, lpFindFileData=0x31e47c | out: lpFindFileData=0x31e47c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x993ade39, ftCreationTime.dwHighDateTime=0x1ca041e, ftLastAccessTime.dwLowDateTime=0x993ade39, ftLastAccessTime.dwHighDateTime=0x1ca041e, ftLastWriteTime.dwLowDateTime=0x5b475983, ftLastWriteTime.dwHighDateTime=0x1c9ea0a, nFileSizeHigh=0x0, nFileSizeLow=0x30000, dwReserved0=0x0, dwReserved1=0x0, cFileName="PresentationFramework.Aero.dll", cAlternateFileName="")) returned 1 [0045.802] FindNextFileW (in: hFindFile=0x381e80, lpFindFileData=0x31e47c | out: lpFindFileData=0x31e47c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x994463ad, ftCreationTime.dwHighDateTime=0x1ca041e, ftLastAccessTime.dwLowDateTime=0x994463ad, ftLastAccessTime.dwHighDateTime=0x1ca041e, ftLastWriteTime.dwLowDateTime=0x5b72321f, ftLastWriteTime.dwHighDateTime=0x1c9ea0a, nFileSizeHigh=0x0, nFileSizeLow=0x22000, dwReserved0=0x0, dwReserved1=0x0, cFileName="PresentationFramework.Classic.dll", cAlternateFileName="")) returned 1 [0045.802] FindNextFileW (in: hFindFile=0x381e80, lpFindFileData=0x31e47c | out: lpFindFileData=0x31e47c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa981eb4a, ftCreationTime.dwHighDateTime=0x1cb892b, ftLastAccessTime.dwLowDateTime=0xa981eb4a, ftLastAccessTime.dwHighDateTime=0x1cb892b, ftLastWriteTime.dwLowDateTime=0xa98b70cb, ftLastWriteTime.dwHighDateTime=0x1cb892b, nFileSizeHigh=0x0, nFileSizeLow=0x46c000, dwReserved0=0x0, dwReserved1=0x0, cFileName="PresentationFramework.dll", cAlternateFileName="")) returned 1 [0045.802] FindNextFileW (in: hFindFile=0x381e80, lpFindFileData=0x31e47c | out: lpFindFileData=0x31e47c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x99e17da7, ftCreationTime.dwHighDateTime=0x1ca041e, ftLastAccessTime.dwLowDateTime=0x99e17da7, ftLastAccessTime.dwHighDateTime=0x1ca041e, ftLastWriteTime.dwLowDateTime=0x5b807a53, ftLastWriteTime.dwHighDateTime=0x1c9ea0a, nFileSizeHigh=0x0, nFileSizeLow=0x5d000, dwReserved0=0x0, dwReserved1=0x0, cFileName="PresentationFramework.Luna.dll", cAlternateFileName="")) returned 1 [0045.802] FindNextFileW (in: hFindFile=0x381e80, lpFindFileData=0x31e47c | out: lpFindFileData=0x31e47c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x99efc5d5, ftCreationTime.dwHighDateTime=0x1ca041e, ftLastAccessTime.dwLowDateTime=0x99efc5d5, ftLastAccessTime.dwHighDateTime=0x1ca041e, ftLastWriteTime.dwLowDateTime=0x5cc8f6ff, ftLastWriteTime.dwHighDateTime=0x1c9ea0a, nFileSizeHigh=0x0, nFileSizeLow=0x28000, dwReserved0=0x0, dwReserved1=0x0, cFileName="PresentationFramework.Royale.dll", cAlternateFileName="")) returned 1 [0045.803] FindNextFileW (in: hFindFile=0x381e80, lpFindFileData=0x31e47c | out: lpFindFileData=0x31e47c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa973a308, ftCreationTime.dwHighDateTime=0x1cb892b, ftLastAccessTime.dwLowDateTime=0xa973a308, ftLastAccessTime.dwHighDateTime=0x1cb892b, ftLastWriteTime.dwLowDateTime=0xa9760469, ftLastWriteTime.dwHighDateTime=0x1cb892b, nFileSizeHigh=0x0, nFileSizeLow=0x82000, dwReserved0=0x0, dwReserved1=0x0, cFileName="ReachFramework.dll", cAlternateFileName="")) returned 1 [0045.803] FindNextFileW (in: hFindFile=0x381e80, lpFindFileData=0x31e47c | out: lpFindFileData=0x31e47c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x80020c30, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x803feff7, ftLastAccessTime.dwHighDateTime=0x1ca0444, ftLastWriteTime.dwLowDateTime=0x803feff7, ftLastWriteTime.dwHighDateTime=0x1ca0444, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="RedistList", cAlternateFileName="REDIST~1")) returned 1 [0045.803] FindNextFileW (in: hFindFile=0x381e80, lpFindFileData=0x31e47c | out: lpFindFileData=0x31e47c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa9d79cd4, ftCreationTime.dwHighDateTime=0x1cb892b, ftLastAccessTime.dwLowDateTime=0xa9d79cd4, ftLastAccessTime.dwHighDateTime=0x1cb892b, ftLastWriteTime.dwLowDateTime=0xa9d9fe34, ftLastWriteTime.dwHighDateTime=0x1cb892b, nFileSizeHigh=0x0, nFileSizeLow=0x62000, dwReserved0=0x0, dwReserved1=0x0, cFileName="System.IdentityModel.dll", cAlternateFileName="")) returned 1 [0045.803] FindNextFileW (in: hFindFile=0x381e80, lpFindFileData=0x31e47c | out: lpFindFileData=0x31e47c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xaae31b18, ftCreationTime.dwHighDateTime=0x1ca041e, ftLastAccessTime.dwLowDateTime=0xaae31b18, ftLastAccessTime.dwHighDateTime=0x1ca041e, ftLastWriteTime.dwLowDateTime=0x53cd8e4b, ftLastWriteTime.dwHighDateTime=0x1c9ea0a, nFileSizeHigh=0x0, nFileSizeLow=0x1e000, dwReserved0=0x0, dwReserved1=0x0, cFileName="System.IdentityModel.Selectors.dll", cAlternateFileName="")) returned 1 [0045.803] FindNextFileW (in: hFindFile=0x381e80, lpFindFileData=0x31e47c | out: lpFindFileData=0x31e47c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xaaef01e9, ftCreationTime.dwHighDateTime=0x1ca041e, ftLastAccessTime.dwLowDateTime=0xaaef01e9, ftLastAccessTime.dwHighDateTime=0x1ca041e, ftLastWriteTime.dwLowDateTime=0x53d25107, ftLastWriteTime.dwHighDateTime=0x1c9ea0a, nFileSizeHigh=0x0, nFileSizeLow=0x20000, dwReserved0=0x0, dwReserved1=0x0, cFileName="System.IO.Log.dll", cAlternateFileName="")) returned 1 [0045.803] FindNextFileW (in: hFindFile=0x381e80, lpFindFileData=0x31e47c | out: lpFindFileData=0x31e47c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa98b70cb, ftCreationTime.dwHighDateTime=0x1cb892b, ftLastAccessTime.dwLowDateTime=0xa98b70cb, ftLastAccessTime.dwHighDateTime=0x1cb892b, ftLastWriteTime.dwLowDateTime=0xa98b70cb, ftLastWriteTime.dwHighDateTime=0x1cb892b, nFileSizeHigh=0x0, nFileSizeLow=0x57a00, dwReserved0=0x0, dwReserved1=0x0, cFileName="System.Printing.dll", cAlternateFileName="")) returned 1 [0045.803] FindNextFileW (in: hFindFile=0x381e80, lpFindFileData=0x31e47c | out: lpFindFileData=0x31e47c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa9ce1753, ftCreationTime.dwHighDateTime=0x1cb892b, ftLastAccessTime.dwLowDateTime=0xa9ce1753, ftLastAccessTime.dwHighDateTime=0x1cb892b, ftLastWriteTime.dwLowDateTime=0xa9d078b3, ftLastWriteTime.dwHighDateTime=0x1cb892b, nFileSizeHigh=0x0, nFileSizeLow=0xcf000, dwReserved0=0x0, dwReserved1=0x0, cFileName="System.Runtime.Serialization.dll", cAlternateFileName="")) returned 1 [0045.803] FindNextFileW (in: hFindFile=0x381e80, lpFindFileData=0x31e47c | out: lpFindFileData=0x31e47c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa9bfcf11, ftCreationTime.dwHighDateTime=0x1cb892b, ftLastAccessTime.dwLowDateTime=0xa9bfcf11, ftLastAccessTime.dwHighDateTime=0x1cb892b, ftLastWriteTime.dwLowDateTime=0xa9c6f332, ftLastWriteTime.dwHighDateTime=0x1cb892b, nFileSizeHigh=0x0, nFileSizeLow=0x515000, dwReserved0=0x0, dwReserved1=0x0, cFileName="System.ServiceModel.dll", cAlternateFileName="")) returned 1 [0045.803] FindNextFileW (in: hFindFile=0x381e80, lpFindFileData=0x31e47c | out: lpFindFileData=0x31e47c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9a53bf17, ftCreationTime.dwHighDateTime=0x1ca041e, ftLastAccessTime.dwLowDateTime=0x9a53bf17, ftLastAccessTime.dwHighDateTime=0x1ca041e, ftLastWriteTime.dwLowDateTime=0x5cf16e3d, ftLastWriteTime.dwHighDateTime=0x1c9ea0a, nFileSizeHigh=0x0, nFileSizeLow=0xa8000, dwReserved0=0x0, dwReserved1=0x0, cFileName="System.Speech.dll", cAlternateFileName="")) returned 1 [0045.803] FindNextFileW (in: hFindFile=0x381e80, lpFindFileData=0x31e47c | out: lpFindFileData=0x31e47c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa9655ac7, ftCreationTime.dwHighDateTime=0x1cb892b, ftLastAccessTime.dwLowDateTime=0xa9655ac7, ftLastAccessTime.dwHighDateTime=0x1cb892b, ftLastWriteTime.dwLowDateTime=0xa967bc27, ftLastWriteTime.dwHighDateTime=0x1cb892b, nFileSizeHigh=0x0, nFileSizeLow=0x103000, dwReserved0=0x0, dwReserved1=0x0, cFileName="System.Workflow.Activities.dll", cAlternateFileName="")) returned 1 [0045.803] FindNextFileW (in: hFindFile=0x381e80, lpFindFileData=0x31e47c | out: lpFindFileData=0x31e47c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa9609806, ftCreationTime.dwHighDateTime=0x1cb892b, ftLastAccessTime.dwLowDateTime=0xa9609806, ftLastAccessTime.dwHighDateTime=0x1cb892b, ftLastWriteTime.dwLowDateTime=0xa962f966, ftLastWriteTime.dwHighDateTime=0x1cb892b, nFileSizeHigh=0x0, nFileSizeLow=0x173000, dwReserved0=0x0, dwReserved1=0x0, cFileName="System.Workflow.ComponentModel.dll", cAlternateFileName="")) returned 1 [0045.804] FindNextFileW (in: hFindFile=0x381e80, lpFindFileData=0x31e47c | out: lpFindFileData=0x31e47c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa96a1d87, ftCreationTime.dwHighDateTime=0x1cb892b, ftLastAccessTime.dwLowDateTime=0xa96a1d87, ftLastAccessTime.dwHighDateTime=0x1cb892b, ftLastWriteTime.dwLowDateTime=0xa96c7ee8, ftLastWriteTime.dwHighDateTime=0x1cb892b, nFileSizeHigh=0x0, nFileSizeLow=0x6f000, dwReserved0=0x0, dwReserved1=0x0, cFileName="System.Workflow.Runtime.dll", cAlternateFileName="")) returned 1 [0045.804] FindNextFileW (in: hFindFile=0x381e80, lpFindFileData=0x31e47c | out: lpFindFileData=0x31e47c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9a72b0d0, ftCreationTime.dwHighDateTime=0x1ca041e, ftLastAccessTime.dwLowDateTime=0x9a72b0d0, ftLastAccessTime.dwHighDateTime=0x1ca041e, ftLastWriteTime.dwLowDateTime=0x5cfaf3b5, ftLastWriteTime.dwHighDateTime=0x1c9ea0a, nFileSizeHigh=0x0, nFileSizeLow=0x2a000, dwReserved0=0x0, dwReserved1=0x0, cFileName="UIAutomationClient.dll", cAlternateFileName="")) returned 1 [0045.804] FindNextFileW (in: hFindFile=0x381e80, lpFindFileData=0x31e47c | out: lpFindFileData=0x31e47c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9a8f412c, ftCreationTime.dwHighDateTime=0x1ca041e, ftLastAccessTime.dwLowDateTime=0x9a8f412c, ftLastAccessTime.dwHighDateTime=0x1ca041e, ftLastWriteTime.dwLowDateTime=0x5d04792d, ftLastWriteTime.dwHighDateTime=0x1c9ea0a, nFileSizeHigh=0x0, nFileSizeLow=0x5d000, dwReserved0=0x0, dwReserved1=0x0, cFileName="UIAutomationClientsideProviders.dll", cAlternateFileName="")) returned 1 [0045.804] FindNextFileW (in: hFindFile=0x381e80, lpFindFileData=0x31e47c | out: lpFindFileData=0x31e47c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9a98c6a0, ftCreationTime.dwHighDateTime=0x1ca041e, ftLastAccessTime.dwLowDateTime=0x9a98c6a0, ftLastAccessTime.dwHighDateTime=0x1ca041e, ftLastWriteTime.dwLowDateTime=0x5d106003, ftLastWriteTime.dwHighDateTime=0x1c9ea0a, nFileSizeHigh=0x0, nFileSizeLow=0xa000, dwReserved0=0x0, dwReserved1=0x0, cFileName="UIAutomationProvider.dll", cAlternateFileName="")) returned 1 [0045.804] FindNextFileW (in: hFindFile=0x381e80, lpFindFileData=0x31e47c | out: lpFindFileData=0x31e47c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9aa4ad71, ftCreationTime.dwHighDateTime=0x1ca041e, ftLastAccessTime.dwLowDateTime=0x9aa4ad71, ftLastAccessTime.dwHighDateTime=0x1ca041e, ftLastWriteTime.dwLowDateTime=0x5d17841d, ftLastWriteTime.dwHighDateTime=0x1c9ea0a, nFileSizeHigh=0x0, nFileSizeLow=0x18000, dwReserved0=0x0, dwReserved1=0x0, cFileName="UIAutomationTypes.dll", cAlternateFileName="")) returned 1 [0045.804] FindNextFileW (in: hFindFile=0x381e80, lpFindFileData=0x31e47c | out: lpFindFileData=0x31e47c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa97d2889, ftCreationTime.dwHighDateTime=0x1cb892b, ftLastAccessTime.dwLowDateTime=0xa97d2889, ftLastAccessTime.dwHighDateTime=0x1cb892b, ftLastWriteTime.dwLowDateTime=0xa97f89ea, ftLastWriteTime.dwHighDateTime=0x1cb892b, nFileSizeHigh=0x0, nFileSizeLow=0x110000, dwReserved0=0x0, dwReserved1=0x0, cFileName="WindowsBase.dll", cAlternateFileName="")) returned 1 [0045.804] FindNextFileW (in: hFindFile=0x381e80, lpFindFileData=0x31e47c | out: lpFindFileData=0x31e47c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9acf85fb, ftCreationTime.dwHighDateTime=0x1ca041e, ftLastAccessTime.dwLowDateTime=0x9acf85fb, ftLastAccessTime.dwHighDateTime=0x1ca041e, ftLastWriteTime.dwLowDateTime=0x5d2a8f0d, ftLastWriteTime.dwHighDateTime=0x1c9ea0a, nFileSizeHigh=0x0, nFileSizeLow=0x17000, dwReserved0=0x0, dwReserved1=0x0, cFileName="WindowsFormsIntegration.dll", cAlternateFileName="")) returned 1 [0045.804] FindNextFileW (in: hFindFile=0x381e80, lpFindFileData=0x31e47c | out: lpFindFileData=0x31e47c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x803d8e97, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x7bef7178, ftLastAccessTime.dwHighDateTime=0x1ca0444, ftLastWriteTime.dwLowDateTime=0x7bef7178, ftLastWriteTime.dwHighDateTime=0x1ca0444, nFileSizeHigh=0x0, nFileSizeLow=0xa12, dwReserved0=0x0, dwReserved1=0x0, cFileName="WinFXList.xml", cAlternateFileName="WINFXL~1.XML")) returned 1 [0045.804] FindNextFileW (in: hFindFile=0x381e80, lpFindFileData=0x31e47c | out: lpFindFileData=0x31e47c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x803d8e97, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x7bef7178, ftLastAccessTime.dwHighDateTime=0x1ca0444, ftLastWriteTime.dwLowDateTime=0x7bef7178, ftLastWriteTime.dwHighDateTime=0x1ca0444, nFileSizeHigh=0x0, nFileSizeLow=0xa12, dwReserved0=0x0, dwReserved1=0x0, cFileName="WinFXList.xml", cAlternateFileName="WINFXL~1.XML")) returned 0 [0045.804] FindClose (in: hFindFile=0x381e80 | out: hFindFile=0x381e80) returned 1 [0045.805] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e704) returned 1 [0045.805] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e710) returned 1 [0045.805] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Reference Assemblies\\Microsoft\\Framework\\v3.0\\WinFXList.xml", nBufferLength=0x105, lpBuffer=0x31e11c, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Reference Assemblies\\Microsoft\\Framework\\v3.0\\WinFXList.xml", lpFilePart=0x0) returned 0x4c [0045.805] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e610) returned 1 [0045.805] CreateFileW (lpFileName="C:\\Program Files\\Reference Assemblies\\Microsoft\\Framework\\v3.0\\WinFXList.xml" (normalized: "c:\\program files\\reference assemblies\\microsoft\\framework\\v3.0\\winfxlist.xml"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x274 [0045.807] GetFileType (hFile=0x274) returned 0x1 [0045.807] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e60c) returned 1 [0045.807] GetFileType (hFile=0x274) returned 0x1 [0045.807] GetFileSize (in: hFile=0x274, lpFileSizeHigh=0x31e718 | out: lpFileSizeHigh=0x31e718*=0x0) returned 0xa12 [0045.807] ReadFile (in: hFile=0x274, lpBuffer=0x26a25d4, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x31e6c4, lpOverlapped=0x0 | out: lpBuffer=0x26a25d4*, lpNumberOfBytesRead=0x31e6c4*=0xa12, lpOverlapped=0x0) returned 1 [0045.822] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Reference Assemblies\\Microsoft\\Framework\\v3.0\\WinFXList.xml", nBufferLength=0x105, lpBuffer=0x31e108, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Reference Assemblies\\Microsoft\\Framework\\v3.0\\WinFXList.xml", lpFilePart=0x0) returned 0x4c [0045.822] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e5fc) returned 1 [0045.822] CreateFileW (lpFileName="C:\\Program Files\\Reference Assemblies\\Microsoft\\Framework\\v3.0\\WinFXList.xml" (normalized: "c:\\program files\\reference assemblies\\microsoft\\framework\\v3.0\\winfxlist.xml"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x274 [0045.823] GetFileType (hFile=0x274) returned 0x1 [0045.823] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e5f8) returned 1 [0045.823] GetFileType (hFile=0x274) returned 0x1 [0045.823] WriteFile (in: hFile=0x274, lpBuffer=0x26f37a0*, nNumberOfBytesToWrite=0xa20, lpNumberOfBytesWritten=0x31e68c, lpOverlapped=0x0 | out: lpBuffer=0x26f37a0*, lpNumberOfBytesWritten=0x31e68c*=0xa20, lpOverlapped=0x0) returned 1 [0045.825] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Reference Assemblies\\Microsoft\\Framework\\v3.0\\WinFXList.xml", nBufferLength=0x105, lpBuffer=0x31e23c, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Reference Assemblies\\Microsoft\\Framework\\v3.0\\WinFXList.xml", lpFilePart=0x0) returned 0x4c [0045.825] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Reference Assemblies\\Microsoft\\Framework\\v3.0\\WinFXList.xml", nBufferLength=0x105, lpBuffer=0x31e23c, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Reference Assemblies\\Microsoft\\Framework\\v3.0\\WinFXList.xml", lpFilePart=0x0) returned 0x4c [0045.825] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e69c) returned 1 [0045.825] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Reference Assemblies\\Microsoft\\Framework\\v3.0\\WinFXList.xml" (normalized: "c:\\program files\\reference assemblies\\microsoft\\framework\\v3.0\\winfxlist.xml"), fInfoLevelId=0x0, lpFileInformation=0x31e718 | out: lpFileInformation=0x31e718*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x803d8e97, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x7bef7178, ftLastAccessTime.dwHighDateTime=0x1ca0444, ftLastWriteTime.dwLowDateTime=0xfec42b60, ftLastWriteTime.dwHighDateTime=0x1d6eb7e, nFileSizeHigh=0x0, nFileSizeLow=0xa20)) returned 1 [0045.825] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e698) returned 1 [0045.825] MoveFileW (lpExistingFileName="C:\\Program Files\\Reference Assemblies\\Microsoft\\Framework\\v3.0\\WinFXList.xml" (normalized: "c:\\program files\\reference assemblies\\microsoft\\framework\\v3.0\\winfxlist.xml"), lpNewFileName="C:\\Program Files\\Reference Assemblies\\Microsoft\\Framework\\v3.0\\WinFXList.xml" (normalized: "c:\\program files\\reference assemblies\\microsoft\\framework\\v3.0\\winfxlist.xml")) returned 1 [0045.826] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e6cc) returned 1 [0045.826] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Reference Assemblies\\Microsoft\\Framework\\v3.0\\RedistList", nBufferLength=0x105, lpBuffer=0x31e1d4, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Reference Assemblies\\Microsoft\\Framework\\v3.0\\RedistList", lpFilePart=0x0) returned 0x49 [0045.826] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Reference Assemblies\\Microsoft\\Framework\\v3.0\\RedistList\\", nBufferLength=0x105, lpBuffer=0x31e1a8, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Reference Assemblies\\Microsoft\\Framework\\v3.0\\RedistList\\", lpFilePart=0x0) returned 0x4a [0045.826] FindFirstFileW (in: lpFileName="C:\\Program Files\\Reference Assemblies\\Microsoft\\Framework\\v3.0\\RedistList\\*", lpFindFileData=0x31e3f4 | out: lpFindFileData=0x31e3f4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x80020c30, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x803feff7, ftLastAccessTime.dwHighDateTime=0x1ca0444, ftLastWriteTime.dwLowDateTime=0x803feff7, ftLastWriteTime.dwHighDateTime=0x1ca0444, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x381c40 [0045.827] FindNextFileW (in: hFindFile=0x381c40, lpFindFileData=0x31e404 | out: lpFindFileData=0x31e404*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x80020c30, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x803feff7, ftLastAccessTime.dwHighDateTime=0x1ca0444, ftLastWriteTime.dwLowDateTime=0x803feff7, ftLastWriteTime.dwHighDateTime=0x1ca0444, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0045.827] FindNextFileW (in: hFindFile=0x381c40, lpFindFileData=0x31e404 | out: lpFindFileData=0x31e404*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x803feff7, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x7bf1d2d9, ftLastAccessTime.dwHighDateTime=0x1ca0444, ftLastWriteTime.dwLowDateTime=0x7bf1d2d9, ftLastWriteTime.dwHighDateTime=0x1ca0444, nFileSizeHigh=0x0, nFileSizeLow=0x1bd4, dwReserved0=0x0, dwReserved1=0x0, cFileName="FrameworkList.xml", cAlternateFileName="FRAMEW~1.XML")) returned 1 [0045.827] FindNextFileW (in: hFindFile=0x381c40, lpFindFileData=0x31e404 | out: lpFindFileData=0x31e404*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0045.827] FindClose (in: hFindFile=0x381c40 | out: hFindFile=0x381c40) returned 1 [0045.827] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e68c) returned 1 [0045.827] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e698) returned 1 [0045.827] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e6cc) returned 1 [0045.827] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Reference Assemblies\\Microsoft\\Framework\\v3.0\\RedistList", nBufferLength=0x105, lpBuffer=0x31e1d4, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Reference Assemblies\\Microsoft\\Framework\\v3.0\\RedistList", lpFilePart=0x0) returned 0x49 [0045.827] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Reference Assemblies\\Microsoft\\Framework\\v3.0\\RedistList\\", nBufferLength=0x105, lpBuffer=0x31e1a8, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Reference Assemblies\\Microsoft\\Framework\\v3.0\\RedistList\\", lpFilePart=0x0) returned 0x4a [0045.827] FindFirstFileW (in: lpFileName="C:\\Program Files\\Reference Assemblies\\Microsoft\\Framework\\v3.0\\RedistList\\*", lpFindFileData=0x31e3f4 | out: lpFindFileData=0x31e3f4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x80020c30, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x803feff7, ftLastAccessTime.dwHighDateTime=0x1ca0444, ftLastWriteTime.dwLowDateTime=0x803feff7, ftLastWriteTime.dwHighDateTime=0x1ca0444, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x381c40 [0045.827] FindNextFileW (in: hFindFile=0x381c40, lpFindFileData=0x31e404 | out: lpFindFileData=0x31e404*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x80020c30, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x803feff7, ftLastAccessTime.dwHighDateTime=0x1ca0444, ftLastWriteTime.dwLowDateTime=0x803feff7, ftLastWriteTime.dwHighDateTime=0x1ca0444, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0045.827] FindNextFileW (in: hFindFile=0x381c40, lpFindFileData=0x31e404 | out: lpFindFileData=0x31e404*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x803feff7, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x7bf1d2d9, ftLastAccessTime.dwHighDateTime=0x1ca0444, ftLastWriteTime.dwLowDateTime=0x7bf1d2d9, ftLastWriteTime.dwHighDateTime=0x1ca0444, nFileSizeHigh=0x0, nFileSizeLow=0x1bd4, dwReserved0=0x0, dwReserved1=0x0, cFileName="FrameworkList.xml", cAlternateFileName="FRAMEW~1.XML")) returned 1 [0045.827] FindNextFileW (in: hFindFile=0x381c40, lpFindFileData=0x31e404 | out: lpFindFileData=0x31e404*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x803feff7, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x7bf1d2d9, ftLastAccessTime.dwHighDateTime=0x1ca0444, ftLastWriteTime.dwLowDateTime=0x7bf1d2d9, ftLastWriteTime.dwHighDateTime=0x1ca0444, nFileSizeHigh=0x0, nFileSizeLow=0x1bd4, dwReserved0=0x0, dwReserved1=0x0, cFileName="FrameworkList.xml", cAlternateFileName="FRAMEW~1.XML")) returned 0 [0045.827] FindClose (in: hFindFile=0x381c40 | out: hFindFile=0x381c40) returned 1 [0045.828] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e68c) returned 1 [0045.828] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e698) returned 1 [0045.828] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Reference Assemblies\\Microsoft\\Framework\\v3.0\\RedistList\\FrameworkList.xml", nBufferLength=0x105, lpBuffer=0x31e0a4, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Reference Assemblies\\Microsoft\\Framework\\v3.0\\RedistList\\FrameworkList.xml", lpFilePart=0x0) returned 0x5b [0045.828] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e598) returned 1 [0045.828] CreateFileW (lpFileName="C:\\Program Files\\Reference Assemblies\\Microsoft\\Framework\\v3.0\\RedistList\\FrameworkList.xml" (normalized: "c:\\program files\\reference assemblies\\microsoft\\framework\\v3.0\\redistlist\\frameworklist.xml"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x274 [0045.828] GetFileType (hFile=0x274) returned 0x1 [0045.828] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e594) returned 1 [0045.828] GetFileType (hFile=0x274) returned 0x1 [0045.828] GetFileSize (in: hFile=0x274, lpFileSizeHigh=0x31e6a0 | out: lpFileSizeHigh=0x31e6a0*=0x0) returned 0x1bd4 [0045.828] ReadFile (in: hFile=0x274, lpBuffer=0x26f6550, nNumberOfBytesToRead=0x1bd4, lpNumberOfBytesRead=0x31e64c, lpOverlapped=0x0 | out: lpBuffer=0x26f6550*, lpNumberOfBytesRead=0x31e64c*=0x1bd4, lpOverlapped=0x0) returned 1 [0045.844] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Reference Assemblies\\Microsoft\\Framework\\v3.0\\RedistList\\FrameworkList.xml", nBufferLength=0x105, lpBuffer=0x31e090, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Reference Assemblies\\Microsoft\\Framework\\v3.0\\RedistList\\FrameworkList.xml", lpFilePart=0x0) returned 0x5b [0045.844] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e584) returned 1 [0045.844] CreateFileW (lpFileName="C:\\Program Files\\Reference Assemblies\\Microsoft\\Framework\\v3.0\\RedistList\\FrameworkList.xml" (normalized: "c:\\program files\\reference assemblies\\microsoft\\framework\\v3.0\\redistlist\\frameworklist.xml"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x274 [0045.845] GetFileType (hFile=0x274) returned 0x1 [0045.845] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e580) returned 1 [0045.845] GetFileType (hFile=0x274) returned 0x1 [0045.845] WriteFile (in: hFile=0x274, lpBuffer=0x274be94*, nNumberOfBytesToWrite=0x1be0, lpNumberOfBytesWritten=0x31e640, lpOverlapped=0x0 | out: lpBuffer=0x274be94*, lpNumberOfBytesWritten=0x31e640*=0x1be0, lpOverlapped=0x0) returned 1 [0045.846] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Reference Assemblies\\Microsoft\\Framework\\v3.0\\RedistList\\FrameworkList.xml", nBufferLength=0x105, lpBuffer=0x31e1c4, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Reference Assemblies\\Microsoft\\Framework\\v3.0\\RedistList\\FrameworkList.xml", lpFilePart=0x0) returned 0x5b [0045.846] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Reference Assemblies\\Microsoft\\Framework\\v3.0\\RedistList\\FrameworkList.xml", nBufferLength=0x105, lpBuffer=0x31e1c4, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Reference Assemblies\\Microsoft\\Framework\\v3.0\\RedistList\\FrameworkList.xml", lpFilePart=0x0) returned 0x5b [0045.846] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e624) returned 1 [0045.847] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Reference Assemblies\\Microsoft\\Framework\\v3.0\\RedistList\\FrameworkList.xml" (normalized: "c:\\program files\\reference assemblies\\microsoft\\framework\\v3.0\\redistlist\\frameworklist.xml"), fInfoLevelId=0x0, lpFileInformation=0x31e6a0 | out: lpFileInformation=0x31e6a0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x803feff7, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x7bf1d2d9, ftLastAccessTime.dwHighDateTime=0x1ca0444, ftLastWriteTime.dwLowDateTime=0xfec68cc0, ftLastWriteTime.dwHighDateTime=0x1d6eb7e, nFileSizeHigh=0x0, nFileSizeLow=0x1be0)) returned 1 [0045.847] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e620) returned 1 [0045.847] MoveFileW (lpExistingFileName="C:\\Program Files\\Reference Assemblies\\Microsoft\\Framework\\v3.0\\RedistList\\FrameworkList.xml" (normalized: "c:\\program files\\reference assemblies\\microsoft\\framework\\v3.0\\redistlist\\frameworklist.xml"), lpNewFileName="C:\\Program Files\\Reference Assemblies\\Microsoft\\Framework\\v3.0\\RedistList\\FrameworkList.xml" (normalized: "c:\\program files\\reference assemblies\\microsoft\\framework\\v3.0\\redistlist\\frameworklist.xml")) returned 1 [0045.848] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e744) returned 1 [0045.848] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Reference Assemblies\\Microsoft\\Framework\\v3.5", nBufferLength=0x105, lpBuffer=0x31e24c, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Reference Assemblies\\Microsoft\\Framework\\v3.5", lpFilePart=0x0) returned 0x3e [0045.848] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Reference Assemblies\\Microsoft\\Framework\\v3.5\\", nBufferLength=0x105, lpBuffer=0x31e220, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Reference Assemblies\\Microsoft\\Framework\\v3.5\\", lpFilePart=0x0) returned 0x3f [0045.848] FindFirstFileW (in: lpFileName="C:\\Program Files\\Reference Assemblies\\Microsoft\\Framework\\v3.5\\*", lpFindFileData=0x31e46c | out: lpFindFileData=0x31e46c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x80020c30, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x96e4e65d, ftLastAccessTime.dwHighDateTime=0x1cb892c, ftLastWriteTime.dwLowDateTime=0x96e4e65d, ftLastWriteTime.dwHighDateTime=0x1cb892c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x381c80 [0045.850] FindNextFileW (in: hFindFile=0x381c80, lpFindFileData=0x31e47c | out: lpFindFileData=0x31e47c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x80020c30, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x96e4e65d, ftLastAccessTime.dwHighDateTime=0x1cb892c, ftLastWriteTime.dwLowDateTime=0x96e4e65d, ftLastWriteTime.dwHighDateTime=0x1cb892c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0045.850] FindNextFileW (in: hFindFile=0x381c80, lpFindFileData=0x31e47c | out: lpFindFileData=0x31e47c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1efbd239, ftCreationTime.dwHighDateTime=0x1ca03fc, ftLastAccessTime.dwLowDateTime=0x1efbd239, ftLastAccessTime.dwHighDateTime=0x1ca03fc, ftLastWriteTime.dwLowDateTime=0x5ce0c4ab, ftLastWriteTime.dwHighDateTime=0x1c9ea0a, nFileSizeHigh=0x0, nFileSizeLow=0x1a000, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.Build.Conversion.v3.5.dll", cAlternateFileName="")) returned 1 [0045.850] FindNextFileW (in: hFindFile=0x381c80, lpFindFileData=0x31e47c | out: lpFindFileData=0x31e47c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xade574cb, ftCreationTime.dwHighDateTime=0x1cb892b, ftLastAccessTime.dwLowDateTime=0xade574cb, ftLastAccessTime.dwHighDateTime=0x1cb892b, ftLastWriteTime.dwLowDateTime=0xadfae12e, ftLastWriteTime.dwHighDateTime=0x1cb892b, nFileSizeHigh=0x0, nFileSizeLow=0x9c000, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.Build.Engine.dll", cAlternateFileName="")) returned 1 [0045.850] FindNextFileW (in: hFindFile=0x381c80, lpFindFileData=0x31e47c | out: lpFindFileData=0x31e47c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1f2b6d7d, ftCreationTime.dwHighDateTime=0x1ca03fc, ftLastAccessTime.dwLowDateTime=0x1f2b6d7d, ftLastAccessTime.dwHighDateTime=0x1ca03fc, ftLastWriteTime.dwLowDateTime=0x5cf16e3d, ftLastWriteTime.dwHighDateTime=0x1c9ea0a, nFileSizeHigh=0x0, nFileSizeLow=0x9000, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.Build.Framework.dll", cAlternateFileName="")) returned 1 [0045.850] FindNextFileW (in: hFindFile=0x381c80, lpFindFileData=0x31e47c | out: lpFindFileData=0x31e47c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xad64ea7d, ftCreationTime.dwHighDateTime=0x1cb892b, ftLastAccessTime.dwLowDateTime=0xad64ea7d, ftLastAccessTime.dwHighDateTime=0x1cb892b, ftLastWriteTime.dwLowDateTime=0xad674bdd, ftLastWriteTime.dwHighDateTime=0x1cb892b, nFileSizeHigh=0x0, nFileSizeLow=0x14000, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.Build.Utilities.v3.5.dll", cAlternateFileName="")) returned 1 [0045.850] FindNextFileW (in: hFindFile=0x381c80, lpFindFileData=0x31e47c | out: lpFindFileData=0x31e47c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1f40d9c2, ftCreationTime.dwHighDateTime=0x1ca03fc, ftLastAccessTime.dwLowDateTime=0x1f40d9c2, ftLastAccessTime.dwHighDateTime=0x1ca03fc, ftLastWriteTime.dwLowDateTime=0x5cffb671, ftLastWriteTime.dwHighDateTime=0x1c9ea0a, nFileSizeHigh=0x0, nFileSizeLow=0xa800, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.VisualC.STLCLR.dll", cAlternateFileName="")) returned 1 [0045.850] FindNextFileW (in: hFindFile=0x381c80, lpFindFileData=0x31e47c | out: lpFindFileData=0x31e47c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x80020c30, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x803d8e97, ftLastAccessTime.dwHighDateTime=0x1ca0444, ftLastWriteTime.dwLowDateTime=0x803d8e97, ftLastWriteTime.dwHighDateTime=0x1ca0444, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="RedistList", cAlternateFileName="REDIST~1")) returned 1 [0045.850] FindNextFileW (in: hFindFile=0x381c80, lpFindFileData=0x31e47c | out: lpFindFileData=0x31e47c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xad69ad3d, ftCreationTime.dwHighDateTime=0x1cb892b, ftLastAccessTime.dwLowDateTime=0xad69ad3d, ftLastAccessTime.dwHighDateTime=0x1cb892b, ftLastWriteTime.dwLowDateTime=0xad69ad3d, ftLastWriteTime.dwHighDateTime=0x1cb892b, nFileSizeHigh=0x0, nFileSizeLow=0xb000, dwReserved0=0x0, dwReserved1=0x0, cFileName="System.AddIn.Contract.dll", cAlternateFileName="")) returned 1 [0045.851] FindNextFileW (in: hFindFile=0x381c80, lpFindFileData=0x31e47c | out: lpFindFileData=0x31e47c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xace922ee, ftCreationTime.dwHighDateTime=0x1cb892b, ftLastAccessTime.dwLowDateTime=0xace922ee, ftLastAccessTime.dwHighDateTime=0x1cb892b, ftLastWriteTime.dwLowDateTime=0xacfe8f51, ftLastWriteTime.dwHighDateTime=0x1cb892b, nFileSizeHigh=0x0, nFileSizeLow=0x28000, dwReserved0=0x0, dwReserved1=0x0, cFileName="System.AddIn.dll", cAlternateFileName="")) returned 1 [0045.851] FindNextFileW (in: hFindFile=0x381c80, lpFindFileData=0x31e47c | out: lpFindFileData=0x31e47c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xac3b5e7a, ftCreationTime.dwHighDateTime=0x1cb892b, ftLastAccessTime.dwLowDateTime=0xac3b5e7a, ftLastAccessTime.dwHighDateTime=0x1cb892b, ftLastWriteTime.dwLowDateTime=0xac4c081c, ftLastWriteTime.dwHighDateTime=0x1cb892b, nFileSizeHigh=0x0, nFileSizeLow=0xe000, dwReserved0=0x0, dwReserved1=0x0, cFileName="System.ComponentModel.DataAnnotations.dll", cAlternateFileName="")) returned 1 [0045.851] FindNextFileW (in: hFindFile=0x381c80, lpFindFileData=0x31e47c | out: lpFindFileData=0x31e47c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xae496e97, ftCreationTime.dwHighDateTime=0x1cb892b, ftLastAccessTime.dwLowDateTime=0xae496e97, ftLastAccessTime.dwHighDateTime=0x1cb892b, ftLastWriteTime.dwLowDateTime=0xae5092b8, ftLastWriteTime.dwHighDateTime=0x1cb892b, nFileSizeHigh=0x0, nFileSizeLow=0xa3000, dwReserved0=0x0, dwReserved1=0x0, cFileName="System.Core.dll", cAlternateFileName="")) returned 1 [0045.851] FindNextFileW (in: hFindFile=0x381c80, lpFindFileData=0x31e47c | out: lpFindFileData=0x31e47c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xadfae12e, ftCreationTime.dwHighDateTime=0x1cb892b, ftLastAccessTime.dwLowDateTime=0xadfae12e, ftLastAccessTime.dwHighDateTime=0x1cb892b, ftLastWriteTime.dwLowDateTime=0xadfd428e, ftLastWriteTime.dwHighDateTime=0x1cb892b, nFileSizeHigh=0x0, nFileSizeLow=0xd000, dwReserved0=0x0, dwReserved1=0x0, cFileName="System.Data.DataSetExtensions.dll", cAlternateFileName="")) returned 1 [0045.851] FindNextFileW (in: hFindFile=0x381c80, lpFindFileData=0x31e47c | out: lpFindFileData=0x31e47c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xac558d9d, ftCreationTime.dwHighDateTime=0x1cb892b, ftLastAccessTime.dwLowDateTime=0xac558d9d, ftLastAccessTime.dwHighDateTime=0x1cb892b, ftLastWriteTime.dwLowDateTime=0xac6898a0, ftLastWriteTime.dwHighDateTime=0x1cb892b, nFileSizeHigh=0x0, nFileSizeLow=0x38000, dwReserved0=0x0, dwReserved1=0x0, cFileName="System.Data.Entity.Design.dll", cAlternateFileName="")) returned 1 [0045.851] FindNextFileW (in: hFindFile=0x381c80, lpFindFileData=0x31e47c | out: lpFindFileData=0x31e47c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb0a1495c, ftCreationTime.dwHighDateTime=0x1cb892b, ftLastAccessTime.dwLowDateTime=0xb0a1495c, ftLastAccessTime.dwHighDateTime=0x1cb892b, ftLastWriteTime.dwLowDateTime=0xb0a60c1c, ftLastWriteTime.dwHighDateTime=0x1cb892b, nFileSizeHigh=0x0, nFileSizeLow=0x2bf000, dwReserved0=0x0, dwReserved1=0x0, cFileName="System.Data.Entity.dll", cAlternateFileName="")) returned 1 [0045.851] FindNextFileW (in: hFindFile=0x381c80, lpFindFileData=0x31e47c | out: lpFindFileData=0x31e47c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xac6898a0, ftCreationTime.dwHighDateTime=0x1cb892b, ftLastAccessTime.dwLowDateTime=0xac6898a0, ftLastAccessTime.dwHighDateTime=0x1cb892b, ftLastWriteTime.dwLowDateTime=0xaca8ddc7, ftLastWriteTime.dwHighDateTime=0x1cb892b, nFileSizeHigh=0x0, nFileSizeLow=0xa7000, dwReserved0=0x0, dwReserved1=0x0, cFileName="System.Data.Linq.dll", cAlternateFileName="")) returned 1 [0045.851] FindNextFileW (in: hFindFile=0x381c80, lpFindFileData=0x31e47c | out: lpFindFileData=0x31e47c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xad6e6ffe, ftCreationTime.dwHighDateTime=0x1cb892b, ftLastAccessTime.dwLowDateTime=0xad6e6ffe, ftLastAccessTime.dwHighDateTime=0x1cb892b, ftLastWriteTime.dwLowDateTime=0xad7332be, ftLastWriteTime.dwHighDateTime=0x1cb892b, nFileSizeHigh=0x0, nFileSizeLow=0x71000, dwReserved0=0x0, dwReserved1=0x0, cFileName="System.Data.Services.Client.dll", cAlternateFileName="")) returned 1 [0045.851] FindNextFileW (in: hFindFile=0x381c80, lpFindFileData=0x31e47c | out: lpFindFileData=0x31e47c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb097c3db, ftCreationTime.dwHighDateTime=0x1cb892b, ftLastAccessTime.dwLowDateTime=0xb097c3db, ftLastAccessTime.dwHighDateTime=0x1cb892b, ftLastWriteTime.dwLowDateTime=0xb097c3db, ftLastWriteTime.dwHighDateTime=0x1cb892b, nFileSizeHigh=0x0, nFileSizeLow=0x28000, dwReserved0=0x0, dwReserved1=0x0, cFileName="System.Data.Services.Design.dll", cAlternateFileName="")) returned 1 [0045.851] FindNextFileW (in: hFindFile=0x381c80, lpFindFileData=0x31e47c | out: lpFindFileData=0x31e47c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb09a253b, ftCreationTime.dwHighDateTime=0x1cb892b, ftLastAccessTime.dwLowDateTime=0xb09a253b, ftLastAccessTime.dwHighDateTime=0x1cb892b, ftLastWriteTime.dwLowDateTime=0xb09c869b, ftLastWriteTime.dwHighDateTime=0x1cb892b, nFileSizeHigh=0x0, nFileSizeLow=0xa9000, dwReserved0=0x0, dwReserved1=0x0, cFileName="System.Data.Services.dll", cAlternateFileName="")) returned 1 [0045.851] FindNextFileW (in: hFindFile=0x381c80, lpFindFileData=0x31e47c | out: lpFindFileData=0x31e47c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xae5092b8, ftCreationTime.dwHighDateTime=0x1cb892b, ftLastAccessTime.dwLowDateTime=0xae5092b8, ftLastAccessTime.dwHighDateTime=0x1cb892b, ftLastWriteTime.dwLowDateTime=0xae555578, ftLastWriteTime.dwHighDateTime=0x1cb892b, nFileSizeHigh=0x0, nFileSizeLow=0x47000, dwReserved0=0x0, dwReserved1=0x0, cFileName="System.DirectoryServices.AccountManagement.dll", cAlternateFileName="")) returned 1 [0045.851] FindNextFileW (in: hFindFile=0x381c80, lpFindFileData=0x31e47c | out: lpFindFileData=0x31e47c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb093011a, ftCreationTime.dwHighDateTime=0x1cb892b, ftLastAccessTime.dwLowDateTime=0xb093011a, ftLastAccessTime.dwHighDateTime=0x1cb892b, ftLastWriteTime.dwLowDateTime=0xb095627b, ftLastWriteTime.dwHighDateTime=0x1cb892b, nFileSizeHigh=0x0, nFileSizeLow=0x23000, dwReserved0=0x0, dwReserved1=0x0, cFileName="System.Management.Instrumentation.dll", cAlternateFileName="")) returned 1 [0045.851] FindNextFileW (in: hFindFile=0x381c80, lpFindFileData=0x31e47c | out: lpFindFileData=0x31e47c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xacfe8f51, ftCreationTime.dwHighDateTime=0x1cb892b, ftLastAccessTime.dwLowDateTime=0xacfe8f51, ftLastAccessTime.dwHighDateTime=0x1cb892b, ftLastWriteTime.dwLowDateTime=0xad0cd792, ftLastWriteTime.dwHighDateTime=0x1cb892b, nFileSizeHigh=0x0, nFileSizeLow=0x3a000, dwReserved0=0x0, dwReserved1=0x0, cFileName="System.Net.dll", cAlternateFileName="")) returned 1 [0045.851] FindNextFileW (in: hFindFile=0x381c80, lpFindFileData=0x31e47c | out: lpFindFileData=0x31e47c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa96ee048, ftCreationTime.dwHighDateTime=0x1cb892b, ftLastAccessTime.dwLowDateTime=0xa96ee048, ftLastAccessTime.dwHighDateTime=0x1cb892b, ftLastWriteTime.dwLowDateTime=0xa96ee048, ftLastWriteTime.dwHighDateTime=0x1cb892b, nFileSizeHigh=0x0, nFileSizeLow=0x78000, dwReserved0=0x0, dwReserved1=0x0, cFileName="System.ServiceModel.Web.dll", cAlternateFileName="")) returned 1 [0045.851] FindClose (in: hFindFile=0x381c80 | out: hFindFile=0x381c80) returned 1 [0045.852] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e704) returned 1 [0045.852] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e710) returned 1 [0045.852] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e744) returned 1 [0045.852] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Reference Assemblies\\Microsoft\\Framework\\v3.5", nBufferLength=0x105, lpBuffer=0x31e24c, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Reference Assemblies\\Microsoft\\Framework\\v3.5", lpFilePart=0x0) returned 0x3e [0045.852] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Reference Assemblies\\Microsoft\\Framework\\v3.5\\", nBufferLength=0x105, lpBuffer=0x31e220, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Reference Assemblies\\Microsoft\\Framework\\v3.5\\", lpFilePart=0x0) returned 0x3f [0045.852] FindFirstFileW (in: lpFileName="C:\\Program Files\\Reference Assemblies\\Microsoft\\Framework\\v3.5\\*", lpFindFileData=0x31e46c | out: lpFindFileData=0x31e46c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x80020c30, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x96e4e65d, ftLastAccessTime.dwHighDateTime=0x1cb892c, ftLastWriteTime.dwLowDateTime=0x96e4e65d, ftLastWriteTime.dwHighDateTime=0x1cb892c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x381c80 [0045.853] FindClose (in: hFindFile=0x381c80 | out: hFindFile=0x381c80) returned 1 [0045.854] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e704) returned 1 [0045.854] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e710) returned 1 [0045.854] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e6cc) returned 1 [0045.854] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Reference Assemblies\\Microsoft\\Framework\\v3.5\\RedistList", nBufferLength=0x105, lpBuffer=0x31e1d4, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Reference Assemblies\\Microsoft\\Framework\\v3.5\\RedistList", lpFilePart=0x0) returned 0x49 [0045.854] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Reference Assemblies\\Microsoft\\Framework\\v3.5\\RedistList\\", nBufferLength=0x105, lpBuffer=0x31e1a8, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Reference Assemblies\\Microsoft\\Framework\\v3.5\\RedistList\\", lpFilePart=0x0) returned 0x4a [0045.854] FindFirstFileW (in: lpFileName="C:\\Program Files\\Reference Assemblies\\Microsoft\\Framework\\v3.5\\RedistList\\*", lpFindFileData=0x31e3f4 | out: lpFindFileData=0x31e3f4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x80020c30, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x803d8e97, ftLastAccessTime.dwHighDateTime=0x1ca0444, ftLastWriteTime.dwLowDateTime=0x803d8e97, ftLastWriteTime.dwHighDateTime=0x1ca0444, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x381c80 [0045.855] FindClose (in: hFindFile=0x381c80 | out: hFindFile=0x381c80) returned 1 [0045.855] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e68c) returned 1 [0045.855] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e698) returned 1 [0045.855] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e6cc) returned 1 [0045.855] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Reference Assemblies\\Microsoft\\Framework\\v3.5\\RedistList", nBufferLength=0x105, lpBuffer=0x31e1d4, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Reference Assemblies\\Microsoft\\Framework\\v3.5\\RedistList", lpFilePart=0x0) returned 0x49 [0045.855] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Reference Assemblies\\Microsoft\\Framework\\v3.5\\RedistList\\", nBufferLength=0x105, lpBuffer=0x31e1a8, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Reference Assemblies\\Microsoft\\Framework\\v3.5\\RedistList\\", lpFilePart=0x0) returned 0x4a [0045.856] FindFirstFileW (in: lpFileName="C:\\Program Files\\Reference Assemblies\\Microsoft\\Framework\\v3.5\\RedistList\\*", lpFindFileData=0x31e3f4 | out: lpFindFileData=0x31e3f4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x80020c30, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x803d8e97, ftLastAccessTime.dwHighDateTime=0x1ca0444, ftLastWriteTime.dwLowDateTime=0x803d8e97, ftLastWriteTime.dwHighDateTime=0x1ca0444, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x381c80 [0045.856] FindClose (in: hFindFile=0x381c80 | out: hFindFile=0x381c80) returned 1 [0045.856] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e68c) returned 1 [0045.856] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e698) returned 1 [0045.856] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Reference Assemblies\\Microsoft\\Framework\\v3.5\\RedistList\\FrameworkList.xml", nBufferLength=0x105, lpBuffer=0x31e0a4, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Reference Assemblies\\Microsoft\\Framework\\v3.5\\RedistList\\FrameworkList.xml", lpFilePart=0x0) returned 0x5b [0045.856] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e598) returned 1 [0045.856] CreateFileW (lpFileName="C:\\Program Files\\Reference Assemblies\\Microsoft\\Framework\\v3.5\\RedistList\\FrameworkList.xml" (normalized: "c:\\program files\\reference assemblies\\microsoft\\framework\\v3.5\\redistlist\\frameworklist.xml"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x274 [0045.857] GetFileType (hFile=0x274) returned 0x1 [0045.857] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e594) returned 1 [0045.857] GetFileType (hFile=0x274) returned 0x1 [0045.857] GetFileSize (in: hFile=0x274, lpFileSizeHigh=0x31e6a0 | out: lpFileSizeHigh=0x31e6a0*=0x0) returned 0x5ec3 [0045.857] ReadFile (in: hFile=0x274, lpBuffer=0x27591bc, nNumberOfBytesToRead=0x5ec3, lpNumberOfBytesRead=0x31e64c, lpOverlapped=0x0 | out: lpBuffer=0x27591bc*, lpNumberOfBytesRead=0x31e64c*=0x5ec3, lpOverlapped=0x0) returned 1 [0045.875] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Reference Assemblies\\Microsoft\\Framework\\v3.5\\RedistList\\FrameworkList.xml", nBufferLength=0x105, lpBuffer=0x31e090, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Reference Assemblies\\Microsoft\\Framework\\v3.5\\RedistList\\FrameworkList.xml", lpFilePart=0x0) returned 0x5b [0045.876] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e584) returned 1 [0045.876] CreateFileW (lpFileName="C:\\Program Files\\Reference Assemblies\\Microsoft\\Framework\\v3.5\\RedistList\\FrameworkList.xml" (normalized: "c:\\program files\\reference assemblies\\microsoft\\framework\\v3.5\\redistlist\\frameworklist.xml"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0xffffffff [0045.878] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31d3c0) returned 1 [0045.878] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e8ac) returned 1 [0045.878] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Uninstall Information", nBufferLength=0x105, lpBuffer=0x31e3b4, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Uninstall Information", lpFilePart=0x0) returned 0x26 [0045.878] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Uninstall Information\\", nBufferLength=0x105, lpBuffer=0x31e388, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Uninstall Information\\", lpFilePart=0x0) returned 0x27 [0045.879] FindFirstFileW (in: lpFileName="C:\\Program Files\\Uninstall Information\\*", lpFindFileData=0x31e5d4 | out: lpFindFileData=0x31e5d4*(dwFileAttributes=0x12, ftCreationTime.dwLowDateTime=0x4232b3dd, ftCreationTime.dwHighDateTime=0x1ca0441, ftLastAccessTime.dwLowDateTime=0xd99ba3c0, ftLastAccessTime.dwHighDateTime=0x1d5e82a, ftLastWriteTime.dwLowDateTime=0xd99ba3c0, ftLastWriteTime.dwHighDateTime=0x1d5e82a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x382000 [0045.879] FindNextFileW (in: hFindFile=0x382000, lpFindFileData=0x31e5e4 | out: lpFindFileData=0x31e5e4*(dwFileAttributes=0x12, ftCreationTime.dwLowDateTime=0x4232b3dd, ftCreationTime.dwHighDateTime=0x1ca0441, ftLastAccessTime.dwLowDateTime=0xd99ba3c0, ftLastAccessTime.dwHighDateTime=0x1d5e82a, ftLastWriteTime.dwLowDateTime=0xd99ba3c0, ftLastWriteTime.dwHighDateTime=0x1d5e82a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0045.879] FindNextFileW (in: hFindFile=0x382000, lpFindFileData=0x31e5e4 | out: lpFindFileData=0x31e5e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7d504af0, ftCreationTime.dwHighDateTime=0x1d5de7d, ftLastAccessTime.dwLowDateTime=0x5ec502b0, ftLastAccessTime.dwHighDateTime=0x1d5b966, ftLastWriteTime.dwLowDateTime=0x5ec502b0, ftLastWriteTime.dwHighDateTime=0x1d5b966, nFileSizeHigh=0x0, nFileSizeLow=0x13a00, dwReserved0=0x0, dwReserved1=0x0, cFileName="gmailnotifierpro.exe", cAlternateFileName="GMAILN~1.EXE")) returned 1 [0045.879] FindNextFileW (in: hFindFile=0x382000, lpFindFileData=0x31e5e4 | out: lpFindFileData=0x31e5e4*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0045.879] FindClose (in: hFindFile=0x382000 | out: hFindFile=0x382000) returned 1 [0045.879] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e86c) returned 1 [0045.879] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e878) returned 1 [0045.879] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e8ac) returned 1 [0045.879] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Uninstall Information", nBufferLength=0x105, lpBuffer=0x31e3b4, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Uninstall Information", lpFilePart=0x0) returned 0x26 [0045.879] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Uninstall Information\\", nBufferLength=0x105, lpBuffer=0x31e388, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Uninstall Information\\", lpFilePart=0x0) returned 0x27 [0045.880] FindFirstFileW (in: lpFileName="C:\\Program Files\\Uninstall Information\\*", lpFindFileData=0x31e5d4 | out: lpFindFileData=0x31e5d4*(dwFileAttributes=0x12, ftCreationTime.dwLowDateTime=0x4232b3dd, ftCreationTime.dwHighDateTime=0x1ca0441, ftLastAccessTime.dwLowDateTime=0xd99ba3c0, ftLastAccessTime.dwHighDateTime=0x1d5e82a, ftLastWriteTime.dwLowDateTime=0xd99ba3c0, ftLastWriteTime.dwHighDateTime=0x1d5e82a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x382000 [0045.880] FindNextFileW (in: hFindFile=0x382000, lpFindFileData=0x31e5e4 | out: lpFindFileData=0x31e5e4*(dwFileAttributes=0x12, ftCreationTime.dwLowDateTime=0x4232b3dd, ftCreationTime.dwHighDateTime=0x1ca0441, ftLastAccessTime.dwLowDateTime=0xd99ba3c0, ftLastAccessTime.dwHighDateTime=0x1d5e82a, ftLastWriteTime.dwLowDateTime=0xd99ba3c0, ftLastWriteTime.dwHighDateTime=0x1d5e82a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0045.880] FindNextFileW (in: hFindFile=0x382000, lpFindFileData=0x31e5e4 | out: lpFindFileData=0x31e5e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7d504af0, ftCreationTime.dwHighDateTime=0x1d5de7d, ftLastAccessTime.dwLowDateTime=0x5ec502b0, ftLastAccessTime.dwHighDateTime=0x1d5b966, ftLastWriteTime.dwLowDateTime=0x5ec502b0, ftLastWriteTime.dwHighDateTime=0x1d5b966, nFileSizeHigh=0x0, nFileSizeLow=0x13a00, dwReserved0=0x0, dwReserved1=0x0, cFileName="gmailnotifierpro.exe", cAlternateFileName="GMAILN~1.EXE")) returned 1 [0045.881] FindNextFileW (in: hFindFile=0x382000, lpFindFileData=0x31e5e4 | out: lpFindFileData=0x31e5e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7d504af0, ftCreationTime.dwHighDateTime=0x1d5de7d, ftLastAccessTime.dwLowDateTime=0x5ec502b0, ftLastAccessTime.dwHighDateTime=0x1d5b966, ftLastWriteTime.dwLowDateTime=0x5ec502b0, ftLastWriteTime.dwHighDateTime=0x1d5b966, nFileSizeHigh=0x0, nFileSizeLow=0x13a00, dwReserved0=0x0, dwReserved1=0x0, cFileName="gmailnotifierpro.exe", cAlternateFileName="GMAILN~1.EXE")) returned 0 [0045.881] FindClose (in: hFindFile=0x382000 | out: hFindFile=0x382000) returned 1 [0045.881] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e86c) returned 1 [0045.881] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e878) returned 1 [0045.881] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e8ac) returned 1 [0045.881] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Windows Defender", nBufferLength=0x105, lpBuffer=0x31e3b4, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Windows Defender", lpFilePart=0x0) returned 0x21 [0045.881] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Windows Defender\\", nBufferLength=0x105, lpBuffer=0x31e388, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Windows Defender\\", lpFilePart=0x0) returned 0x22 [0045.881] FindFirstFileW (in: lpFileName="C:\\Program Files\\Windows Defender\\*", lpFindFileData=0x31e5d4 | out: lpFindFileData=0x31e5d4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x80020c30, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0xda9332c0, ftLastAccessTime.dwHighDateTime=0x1d5e82a, ftLastWriteTime.dwLowDateTime=0xda9332c0, ftLastWriteTime.dwHighDateTime=0x1d5e82a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x382000 [0045.881] FindNextFileW (in: hFindFile=0x382000, lpFindFileData=0x31e5e4 | out: lpFindFileData=0x31e5e4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x80020c30, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0xda9332c0, ftLastAccessTime.dwHighDateTime=0x1d5e82a, ftLastWriteTime.dwLowDateTime=0xda9332c0, ftLastWriteTime.dwHighDateTime=0x1d5e82a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0045.882] FindNextFileW (in: hFindFile=0x382000, lpFindFileData=0x31e5e4 | out: lpFindFileData=0x31e5e4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1eab37af, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x23376857, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x1eab37af, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="en-US", cAlternateFileName="")) returned 1 [0045.882] FindNextFileW (in: hFindFile=0x382000, lpFindFileData=0x31e5e4 | out: lpFindFileData=0x31e5e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb7f33330, ftCreationTime.dwHighDateTime=0x1d5af24, ftLastAccessTime.dwLowDateTime=0xe1e9e850, ftLastAccessTime.dwHighDateTime=0x1d5e27d, ftLastWriteTime.dwLowDateTime=0xe1e9e850, ftLastWriteTime.dwHighDateTime=0x1d5e27d, nFileSizeHigh=0x0, nFileSizeLow=0x13a00, dwReserved0=0x0, dwReserved1=0x0, cFileName="made.exe", cAlternateFileName="")) returned 1 [0045.882] FindNextFileW (in: hFindFile=0x382000, lpFindFileData=0x31e5e4 | out: lpFindFileData=0x31e5e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc6f03c10, ftCreationTime.dwHighDateTime=0x1d59094, ftLastAccessTime.dwLowDateTime=0x3a9313f0, ftLastAccessTime.dwHighDateTime=0x1d5ba38, ftLastWriteTime.dwLowDateTime=0x3a9313f0, ftLastWriteTime.dwHighDateTime=0x1d5ba38, nFileSizeHigh=0x0, nFileSizeLow=0x13a00, dwReserved0=0x0, dwReserved1=0x0, cFileName="monthlylandscapesinspections.exe", cAlternateFileName="MONTHL~1.EXE")) returned 1 [0045.882] FindNextFileW (in: hFindFile=0x382000, lpFindFileData=0x31e5e4 | out: lpFindFileData=0x31e5e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x150a97a1, ftCreationTime.dwHighDateTime=0x1ca0415, ftLastAccessTime.dwLowDateTime=0x150a97a1, ftLastAccessTime.dwHighDateTime=0x1ca0415, ftLastWriteTime.dwLowDateTime=0x33b368d0, ftLastWriteTime.dwHighDateTime=0x1ca0424, nFileSizeHigh=0x0, nFileSizeLow=0x2a00, dwReserved0=0x0, dwReserved1=0x0, cFileName="MpAsDesc.dll", cAlternateFileName="")) returned 1 [0045.882] FindNextFileW (in: hFindFile=0x382000, lpFindFileData=0x31e5e4 | out: lpFindFileData=0x31e5e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2a1a0776, ftCreationTime.dwHighDateTime=0x1ca0415, ftLastAccessTime.dwLowDateTime=0x2a1a0776, ftLastAccessTime.dwHighDateTime=0x1ca0415, ftLastWriteTime.dwLowDateTime=0x33bf4fb0, ftLastWriteTime.dwHighDateTime=0x1ca0424, nFileSizeHigh=0x0, nFileSizeLow=0x8ba00, dwReserved0=0x0, dwReserved1=0x0, cFileName="MpClient.dll", cAlternateFileName="")) returned 1 [0045.882] FindNextFileW (in: hFindFile=0x382000, lpFindFileData=0x31e5e4 | out: lpFindFileData=0x31e5e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1f7bb298, ftCreationTime.dwHighDateTime=0x1ca0415, ftLastAccessTime.dwLowDateTime=0x1f7bb298, ftLastAccessTime.dwHighDateTime=0x1ca0415, ftLastWriteTime.dwLowDateTime=0xe86ec360, ftLastWriteTime.dwHighDateTime=0x1ca0423, nFileSizeHigh=0x0, nFileSizeLow=0x2ea00, dwReserved0=0x0, dwReserved1=0x0, cFileName="MpCmdRun.exe", cAlternateFileName="")) returned 1 [0045.882] FindNextFileW (in: hFindFile=0x382000, lpFindFileData=0x31e5e4 | out: lpFindFileData=0x31e5e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2070df03, ftCreationTime.dwHighDateTime=0x1ca0415, ftLastAccessTime.dwLowDateTime=0x2070df03, ftLastAccessTime.dwHighDateTime=0x1ca0415, ftLastWriteTime.dwLowDateTime=0x33cb3690, ftLastWriteTime.dwHighDateTime=0x1ca0424, nFileSizeHigh=0x0, nFileSizeLow=0x4ce00, dwReserved0=0x0, dwReserved1=0x0, cFileName="MpCommu.dll", cAlternateFileName="")) returned 1 [0045.882] FindNextFileW (in: hFindFile=0x382000, lpFindFileData=0x31e5e4 | out: lpFindFileData=0x31e5e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x15819bcb, ftCreationTime.dwHighDateTime=0x1ca0415, ftLastAccessTime.dwLowDateTime=0x15819bcb, ftLastAccessTime.dwHighDateTime=0x1ca0415, ftLastWriteTime.dwLowDateTime=0x7d1de1f0, ftLastWriteTime.dwHighDateTime=0x1ca0422, nFileSizeHigh=0x0, nFileSizeLow=0xcc00, dwReserved0=0x0, dwReserved1=0x0, cFileName="MpEvMsg.dll", cAlternateFileName="")) returned 1 [0045.883] FindNextFileW (in: hFindFile=0x382000, lpFindFileData=0x31e5e4 | out: lpFindFileData=0x31e5e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x18c9dd08, ftCreationTime.dwHighDateTime=0x1ca0415, ftLastAccessTime.dwLowDateTime=0x18c9dd08, ftLastAccessTime.dwHighDateTime=0x1ca0415, ftLastWriteTime.dwLowDateTime=0x33d01890, ftLastWriteTime.dwHighDateTime=0x1ca0424, nFileSizeHigh=0x0, nFileSizeLow=0xcc00, dwReserved0=0x0, dwReserved1=0x0, cFileName="MpOAV.dll", cAlternateFileName="")) returned 1 [0045.883] FindNextFileW (in: hFindFile=0x382000, lpFindFileData=0x31e5e4 | out: lpFindFileData=0x31e5e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1d4eb396, ftCreationTime.dwHighDateTime=0x1ca0415, ftLastAccessTime.dwLowDateTime=0x1d4eb396, ftLastAccessTime.dwHighDateTime=0x1ca0415, ftLastWriteTime.dwLowDateTime=0x33f88820, ftLastWriteTime.dwHighDateTime=0x1ca0424, nFileSizeHigh=0x0, nFileSizeLow=0x30e00, dwReserved0=0x0, dwReserved1=0x0, cFileName="MpRTP.dll", cAlternateFileName="")) returned 1 [0045.883] FindNextFileW (in: hFindFile=0x382000, lpFindFileData=0x31e5e4 | out: lpFindFileData=0x31e5e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x34b85c54, ftCreationTime.dwHighDateTime=0x1ca0415, ftLastAccessTime.dwLowDateTime=0x34b85c54, ftLastAccessTime.dwHighDateTime=0x1ca0415, ftLastWriteTime.dwLowDateTime=0x33f88820, ftLastWriteTime.dwHighDateTime=0x1ca0424, nFileSizeHigh=0x0, nFileSizeLow=0xf7000, dwReserved0=0x0, dwReserved1=0x0, cFileName="MpSvc.dll", cAlternateFileName="")) returned 1 [0045.883] FindNextFileW (in: hFindFile=0x382000, lpFindFileData=0x31e5e4 | out: lpFindFileData=0x31e5e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2afc28f9, ftCreationTime.dwHighDateTime=0x1ca0415, ftLastAccessTime.dwLowDateTime=0x2afc28f9, ftLastAccessTime.dwHighDateTime=0x1ca0415, ftLastWriteTime.dwLowDateTime=0xe8c21380, ftLastWriteTime.dwHighDateTime=0x1ca0423, nFileSizeHigh=0x0, nFileSizeLow=0xeaa00, dwReserved0=0x0, dwReserved1=0x0, cFileName="MSASCui.exe", cAlternateFileName="")) returned 1 [0045.883] FindNextFileW (in: hFindFile=0x382000, lpFindFileData=0x31e5e4 | out: lpFindFileData=0x31e5e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9e1b943a, ftCreationTime.dwHighDateTime=0x1cb892b, ftLastAccessTime.dwLowDateTime=0x9e1b943a, ftLastAccessTime.dwHighDateTime=0x1cb892b, ftLastWriteTime.dwLowDateTime=0x9e1b943a, ftLastWriteTime.dwHighDateTime=0x1cb892b, nFileSizeHigh=0x0, nFileSizeLow=0xee00, dwReserved0=0x0, dwReserved1=0x0, cFileName="MsMpCom.dll", cAlternateFileName="")) returned 1 [0045.883] FindNextFileW (in: hFindFile=0x382000, lpFindFileData=0x31e5e4 | out: lpFindFileData=0x31e5e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x144043c0, ftCreationTime.dwHighDateTime=0x1ca0415, ftLastAccessTime.dwLowDateTime=0x144043c0, ftLastAccessTime.dwHighDateTime=0x1ca0415, ftLastWriteTime.dwLowDateTime=0x94b72470, ftLastWriteTime.dwHighDateTime=0x1ca0422, nFileSizeHigh=0x0, nFileSizeLow=0x1200, dwReserved0=0x0, dwReserved1=0x0, cFileName="MsMpLics.dll", cAlternateFileName="")) returned 1 [0045.883] FindNextFileW (in: hFindFile=0x382000, lpFindFileData=0x31e5e4 | out: lpFindFileData=0x31e5e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1594a6b3, ftCreationTime.dwHighDateTime=0x1ca0415, ftLastAccessTime.dwLowDateTime=0x1594a6b3, ftLastAccessTime.dwHighDateTime=0x1ca0415, ftLastWriteTime.dwLowDateTime=0x36199360, ftLastWriteTime.dwHighDateTime=0x1ca0424, nFileSizeHigh=0x0, nFileSizeLow=0x77200, dwReserved0=0x0, dwReserved1=0x0, cFileName="MsMpRes.dll", cAlternateFileName="")) returned 1 [0045.883] FindNextFileW (in: hFindFile=0x382000, lpFindFileData=0x31e5e4 | out: lpFindFileData=0x31e5e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4cb64860, ftCreationTime.dwHighDateTime=0x1d58f39, ftLastAccessTime.dwLowDateTime=0x3d32b030, ftLastAccessTime.dwHighDateTime=0x1d5ad62, ftLastWriteTime.dwLowDateTime=0x3d32b030, ftLastWriteTime.dwHighDateTime=0x1d5ad62, nFileSizeHigh=0x0, nFileSizeLow=0x13a00, dwReserved0=0x0, dwReserved1=0x0, cFileName="notepad.exe", cAlternateFileName="")) returned 1 [0045.883] FindNextFileW (in: hFindFile=0x382000, lpFindFileData=0x31e5e4 | out: lpFindFileData=0x31e5e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xdd1f8cf0, ftCreationTime.dwHighDateTime=0x1d57098, ftLastAccessTime.dwLowDateTime=0x465f6df0, ftLastAccessTime.dwHighDateTime=0x1d5dda1, ftLastWriteTime.dwLowDateTime=0x465f6df0, ftLastWriteTime.dwHighDateTime=0x1d5dda1, nFileSizeHigh=0x0, nFileSizeLow=0x13a00, dwReserved0=0x0, dwReserved1=0x0, cFileName="scriptftp.exe", cAlternateFileName="SCRIPT~1.EXE")) returned 1 [0045.884] FindNextFileW (in: hFindFile=0x382000, lpFindFileData=0x31e5e4 | out: lpFindFileData=0x31e5e4*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0045.884] FindClose (in: hFindFile=0x382000 | out: hFindFile=0x382000) returned 1 [0045.884] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e86c) returned 1 [0045.884] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e878) returned 1 [0045.884] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e8ac) returned 1 [0045.884] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Windows Defender", nBufferLength=0x105, lpBuffer=0x31e3b4, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Windows Defender", lpFilePart=0x0) returned 0x21 [0045.884] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Windows Defender\\", nBufferLength=0x105, lpBuffer=0x31e388, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Windows Defender\\", lpFilePart=0x0) returned 0x22 [0045.884] FindFirstFileW (in: lpFileName="C:\\Program Files\\Windows Defender\\*", lpFindFileData=0x31e5d4 | out: lpFindFileData=0x31e5d4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x80020c30, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0xda9332c0, ftLastAccessTime.dwHighDateTime=0x1d5e82a, ftLastWriteTime.dwLowDateTime=0xda9332c0, ftLastWriteTime.dwHighDateTime=0x1d5e82a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x382000 [0045.884] FindNextFileW (in: hFindFile=0x382000, lpFindFileData=0x31e5e4 | out: lpFindFileData=0x31e5e4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x80020c30, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0xda9332c0, ftLastAccessTime.dwHighDateTime=0x1d5e82a, ftLastWriteTime.dwLowDateTime=0xda9332c0, ftLastWriteTime.dwHighDateTime=0x1d5e82a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0045.884] FindNextFileW (in: hFindFile=0x382000, lpFindFileData=0x31e5e4 | out: lpFindFileData=0x31e5e4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1eab37af, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x23376857, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x1eab37af, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="en-US", cAlternateFileName="")) returned 1 [0045.884] FindNextFileW (in: hFindFile=0x382000, lpFindFileData=0x31e5e4 | out: lpFindFileData=0x31e5e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb7f33330, ftCreationTime.dwHighDateTime=0x1d5af24, ftLastAccessTime.dwLowDateTime=0xe1e9e850, ftLastAccessTime.dwHighDateTime=0x1d5e27d, ftLastWriteTime.dwLowDateTime=0xe1e9e850, ftLastWriteTime.dwHighDateTime=0x1d5e27d, nFileSizeHigh=0x0, nFileSizeLow=0x13a00, dwReserved0=0x0, dwReserved1=0x0, cFileName="made.exe", cAlternateFileName="")) returned 1 [0045.885] FindNextFileW (in: hFindFile=0x382000, lpFindFileData=0x31e5e4 | out: lpFindFileData=0x31e5e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc6f03c10, ftCreationTime.dwHighDateTime=0x1d59094, ftLastAccessTime.dwLowDateTime=0x3a9313f0, ftLastAccessTime.dwHighDateTime=0x1d5ba38, ftLastWriteTime.dwLowDateTime=0x3a9313f0, ftLastWriteTime.dwHighDateTime=0x1d5ba38, nFileSizeHigh=0x0, nFileSizeLow=0x13a00, dwReserved0=0x0, dwReserved1=0x0, cFileName="monthlylandscapesinspections.exe", cAlternateFileName="MONTHL~1.EXE")) returned 1 [0045.885] FindNextFileW (in: hFindFile=0x382000, lpFindFileData=0x31e5e4 | out: lpFindFileData=0x31e5e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x150a97a1, ftCreationTime.dwHighDateTime=0x1ca0415, ftLastAccessTime.dwLowDateTime=0x150a97a1, ftLastAccessTime.dwHighDateTime=0x1ca0415, ftLastWriteTime.dwLowDateTime=0x33b368d0, ftLastWriteTime.dwHighDateTime=0x1ca0424, nFileSizeHigh=0x0, nFileSizeLow=0x2a00, dwReserved0=0x0, dwReserved1=0x0, cFileName="MpAsDesc.dll", cAlternateFileName="")) returned 1 [0045.885] FindNextFileW (in: hFindFile=0x382000, lpFindFileData=0x31e5e4 | out: lpFindFileData=0x31e5e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2a1a0776, ftCreationTime.dwHighDateTime=0x1ca0415, ftLastAccessTime.dwLowDateTime=0x2a1a0776, ftLastAccessTime.dwHighDateTime=0x1ca0415, ftLastWriteTime.dwLowDateTime=0x33bf4fb0, ftLastWriteTime.dwHighDateTime=0x1ca0424, nFileSizeHigh=0x0, nFileSizeLow=0x8ba00, dwReserved0=0x0, dwReserved1=0x0, cFileName="MpClient.dll", cAlternateFileName="")) returned 1 [0045.885] FindNextFileW (in: hFindFile=0x382000, lpFindFileData=0x31e5e4 | out: lpFindFileData=0x31e5e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1f7bb298, ftCreationTime.dwHighDateTime=0x1ca0415, ftLastAccessTime.dwLowDateTime=0x1f7bb298, ftLastAccessTime.dwHighDateTime=0x1ca0415, ftLastWriteTime.dwLowDateTime=0xe86ec360, ftLastWriteTime.dwHighDateTime=0x1ca0423, nFileSizeHigh=0x0, nFileSizeLow=0x2ea00, dwReserved0=0x0, dwReserved1=0x0, cFileName="MpCmdRun.exe", cAlternateFileName="")) returned 1 [0045.885] FindNextFileW (in: hFindFile=0x382000, lpFindFileData=0x31e5e4 | out: lpFindFileData=0x31e5e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2070df03, ftCreationTime.dwHighDateTime=0x1ca0415, ftLastAccessTime.dwLowDateTime=0x2070df03, ftLastAccessTime.dwHighDateTime=0x1ca0415, ftLastWriteTime.dwLowDateTime=0x33cb3690, ftLastWriteTime.dwHighDateTime=0x1ca0424, nFileSizeHigh=0x0, nFileSizeLow=0x4ce00, dwReserved0=0x0, dwReserved1=0x0, cFileName="MpCommu.dll", cAlternateFileName="")) returned 1 [0045.885] FindNextFileW (in: hFindFile=0x382000, lpFindFileData=0x31e5e4 | out: lpFindFileData=0x31e5e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x15819bcb, ftCreationTime.dwHighDateTime=0x1ca0415, ftLastAccessTime.dwLowDateTime=0x15819bcb, ftLastAccessTime.dwHighDateTime=0x1ca0415, ftLastWriteTime.dwLowDateTime=0x7d1de1f0, ftLastWriteTime.dwHighDateTime=0x1ca0422, nFileSizeHigh=0x0, nFileSizeLow=0xcc00, dwReserved0=0x0, dwReserved1=0x0, cFileName="MpEvMsg.dll", cAlternateFileName="")) returned 1 [0045.885] FindNextFileW (in: hFindFile=0x382000, lpFindFileData=0x31e5e4 | out: lpFindFileData=0x31e5e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x18c9dd08, ftCreationTime.dwHighDateTime=0x1ca0415, ftLastAccessTime.dwLowDateTime=0x18c9dd08, ftLastAccessTime.dwHighDateTime=0x1ca0415, ftLastWriteTime.dwLowDateTime=0x33d01890, ftLastWriteTime.dwHighDateTime=0x1ca0424, nFileSizeHigh=0x0, nFileSizeLow=0xcc00, dwReserved0=0x0, dwReserved1=0x0, cFileName="MpOAV.dll", cAlternateFileName="")) returned 1 [0045.886] FindNextFileW (in: hFindFile=0x382000, lpFindFileData=0x31e5e4 | out: lpFindFileData=0x31e5e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1d4eb396, ftCreationTime.dwHighDateTime=0x1ca0415, ftLastAccessTime.dwLowDateTime=0x1d4eb396, ftLastAccessTime.dwHighDateTime=0x1ca0415, ftLastWriteTime.dwLowDateTime=0x33f88820, ftLastWriteTime.dwHighDateTime=0x1ca0424, nFileSizeHigh=0x0, nFileSizeLow=0x30e00, dwReserved0=0x0, dwReserved1=0x0, cFileName="MpRTP.dll", cAlternateFileName="")) returned 1 [0045.886] FindNextFileW (in: hFindFile=0x382000, lpFindFileData=0x31e5e4 | out: lpFindFileData=0x31e5e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x34b85c54, ftCreationTime.dwHighDateTime=0x1ca0415, ftLastAccessTime.dwLowDateTime=0x34b85c54, ftLastAccessTime.dwHighDateTime=0x1ca0415, ftLastWriteTime.dwLowDateTime=0x33f88820, ftLastWriteTime.dwHighDateTime=0x1ca0424, nFileSizeHigh=0x0, nFileSizeLow=0xf7000, dwReserved0=0x0, dwReserved1=0x0, cFileName="MpSvc.dll", cAlternateFileName="")) returned 1 [0045.886] FindNextFileW (in: hFindFile=0x382000, lpFindFileData=0x31e5e4 | out: lpFindFileData=0x31e5e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2afc28f9, ftCreationTime.dwHighDateTime=0x1ca0415, ftLastAccessTime.dwLowDateTime=0x2afc28f9, ftLastAccessTime.dwHighDateTime=0x1ca0415, ftLastWriteTime.dwLowDateTime=0xe8c21380, ftLastWriteTime.dwHighDateTime=0x1ca0423, nFileSizeHigh=0x0, nFileSizeLow=0xeaa00, dwReserved0=0x0, dwReserved1=0x0, cFileName="MSASCui.exe", cAlternateFileName="")) returned 1 [0045.886] FindNextFileW (in: hFindFile=0x382000, lpFindFileData=0x31e5e4 | out: lpFindFileData=0x31e5e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9e1b943a, ftCreationTime.dwHighDateTime=0x1cb892b, ftLastAccessTime.dwLowDateTime=0x9e1b943a, ftLastAccessTime.dwHighDateTime=0x1cb892b, ftLastWriteTime.dwLowDateTime=0x9e1b943a, ftLastWriteTime.dwHighDateTime=0x1cb892b, nFileSizeHigh=0x0, nFileSizeLow=0xee00, dwReserved0=0x0, dwReserved1=0x0, cFileName="MsMpCom.dll", cAlternateFileName="")) returned 1 [0045.886] FindNextFileW (in: hFindFile=0x382000, lpFindFileData=0x31e5e4 | out: lpFindFileData=0x31e5e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x144043c0, ftCreationTime.dwHighDateTime=0x1ca0415, ftLastAccessTime.dwLowDateTime=0x144043c0, ftLastAccessTime.dwHighDateTime=0x1ca0415, ftLastWriteTime.dwLowDateTime=0x94b72470, ftLastWriteTime.dwHighDateTime=0x1ca0422, nFileSizeHigh=0x0, nFileSizeLow=0x1200, dwReserved0=0x0, dwReserved1=0x0, cFileName="MsMpLics.dll", cAlternateFileName="")) returned 1 [0045.886] FindNextFileW (in: hFindFile=0x382000, lpFindFileData=0x31e5e4 | out: lpFindFileData=0x31e5e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1594a6b3, ftCreationTime.dwHighDateTime=0x1ca0415, ftLastAccessTime.dwLowDateTime=0x1594a6b3, ftLastAccessTime.dwHighDateTime=0x1ca0415, ftLastWriteTime.dwLowDateTime=0x36199360, ftLastWriteTime.dwHighDateTime=0x1ca0424, nFileSizeHigh=0x0, nFileSizeLow=0x77200, dwReserved0=0x0, dwReserved1=0x0, cFileName="MsMpRes.dll", cAlternateFileName="")) returned 1 [0045.886] FindNextFileW (in: hFindFile=0x382000, lpFindFileData=0x31e5e4 | out: lpFindFileData=0x31e5e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4cb64860, ftCreationTime.dwHighDateTime=0x1d58f39, ftLastAccessTime.dwLowDateTime=0x3d32b030, ftLastAccessTime.dwHighDateTime=0x1d5ad62, ftLastWriteTime.dwLowDateTime=0x3d32b030, ftLastWriteTime.dwHighDateTime=0x1d5ad62, nFileSizeHigh=0x0, nFileSizeLow=0x13a00, dwReserved0=0x0, dwReserved1=0x0, cFileName="notepad.exe", cAlternateFileName="")) returned 1 [0045.887] FindNextFileW (in: hFindFile=0x382000, lpFindFileData=0x31e5e4 | out: lpFindFileData=0x31e5e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xdd1f8cf0, ftCreationTime.dwHighDateTime=0x1d57098, ftLastAccessTime.dwLowDateTime=0x465f6df0, ftLastAccessTime.dwHighDateTime=0x1d5dda1, ftLastWriteTime.dwLowDateTime=0x465f6df0, ftLastWriteTime.dwHighDateTime=0x1d5dda1, nFileSizeHigh=0x0, nFileSizeLow=0x13a00, dwReserved0=0x0, dwReserved1=0x0, cFileName="scriptftp.exe", cAlternateFileName="SCRIPT~1.EXE")) returned 1 [0045.887] FindNextFileW (in: hFindFile=0x382000, lpFindFileData=0x31e5e4 | out: lpFindFileData=0x31e5e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xdd1f8cf0, ftCreationTime.dwHighDateTime=0x1d57098, ftLastAccessTime.dwLowDateTime=0x465f6df0, ftLastAccessTime.dwHighDateTime=0x1d5dda1, ftLastWriteTime.dwLowDateTime=0x465f6df0, ftLastWriteTime.dwHighDateTime=0x1d5dda1, nFileSizeHigh=0x0, nFileSizeLow=0x13a00, dwReserved0=0x0, dwReserved1=0x0, cFileName="scriptftp.exe", cAlternateFileName="SCRIPT~1.EXE")) returned 0 [0045.887] FindClose (in: hFindFile=0x382000 | out: hFindFile=0x382000) returned 1 [0045.887] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e86c) returned 1 [0045.887] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e878) returned 1 [0045.887] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e834) returned 1 [0045.887] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Windows Defender\\en-US", nBufferLength=0x105, lpBuffer=0x31e33c, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Windows Defender\\en-US", lpFilePart=0x0) returned 0x27 [0045.887] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Windows Defender\\en-US\\", nBufferLength=0x105, lpBuffer=0x31e310, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Windows Defender\\en-US\\", lpFilePart=0x0) returned 0x28 [0045.887] FindFirstFileW (in: lpFileName="C:\\Program Files\\Windows Defender\\en-US\\*", lpFindFileData=0x31e55c | out: lpFindFileData=0x31e55c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1eab37af, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x23376857, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x1eab37af, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x382000 [0045.887] FindNextFileW (in: hFindFile=0x382000, lpFindFileData=0x31e56c | out: lpFindFileData=0x31e56c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1eab37af, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x23376857, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x1eab37af, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0045.888] FindNextFileW (in: hFindFile=0x382000, lpFindFileData=0x31e56c | out: lpFindFileData=0x31e56c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe494541, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0xe874c0b, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0xe494541, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x8a00, dwReserved0=0x0, dwReserved1=0x0, cFileName="MpAsDesc.dll.mui", cAlternateFileName="")) returned 1 [0045.888] FindNextFileW (in: hFindFile=0x382000, lpFindFileData=0x31e56c | out: lpFindFileData=0x31e56c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xdcd37ad, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0xe067905, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0xdcd37ad, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x3c00, dwReserved0=0x0, dwReserved1=0x0, cFileName="MpEvMsg.dll.mui", cAlternateFileName="")) returned 1 [0045.888] FindNextFileW (in: hFindFile=0x382000, lpFindFileData=0x31e56c | out: lpFindFileData=0x31e56c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe494541, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0xe874c0b, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0xe494541, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0xb600, dwReserved0=0x0, dwReserved1=0x0, cFileName="MsMpRes.dll.mui", cAlternateFileName="")) returned 1 [0045.888] FindNextFileW (in: hFindFile=0x382000, lpFindFileData=0x31e56c | out: lpFindFileData=0x31e56c*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0045.888] FindClose (in: hFindFile=0x382000 | out: hFindFile=0x382000) returned 1 [0045.888] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e7f4) returned 1 [0045.888] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e800) returned 1 [0045.888] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e834) returned 1 [0045.888] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Windows Defender\\en-US", nBufferLength=0x105, lpBuffer=0x31e33c, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Windows Defender\\en-US", lpFilePart=0x0) returned 0x27 [0045.888] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Windows Defender\\en-US\\", nBufferLength=0x105, lpBuffer=0x31e310, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Windows Defender\\en-US\\", lpFilePart=0x0) returned 0x28 [0045.888] FindFirstFileW (in: lpFileName="C:\\Program Files\\Windows Defender\\en-US\\*", lpFindFileData=0x31e55c | out: lpFindFileData=0x31e55c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1eab37af, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x23376857, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x1eab37af, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x382000 [0045.889] FindNextFileW (in: hFindFile=0x382000, lpFindFileData=0x31e56c | out: lpFindFileData=0x31e56c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1eab37af, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x23376857, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x1eab37af, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0045.889] FindNextFileW (in: hFindFile=0x382000, lpFindFileData=0x31e56c | out: lpFindFileData=0x31e56c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe494541, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0xe874c0b, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0xe494541, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x8a00, dwReserved0=0x0, dwReserved1=0x0, cFileName="MpAsDesc.dll.mui", cAlternateFileName="")) returned 1 [0045.889] FindNextFileW (in: hFindFile=0x382000, lpFindFileData=0x31e56c | out: lpFindFileData=0x31e56c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xdcd37ad, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0xe067905, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0xdcd37ad, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x3c00, dwReserved0=0x0, dwReserved1=0x0, cFileName="MpEvMsg.dll.mui", cAlternateFileName="")) returned 1 [0045.889] FindNextFileW (in: hFindFile=0x382000, lpFindFileData=0x31e56c | out: lpFindFileData=0x31e56c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe494541, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0xe874c0b, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0xe494541, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0xb600, dwReserved0=0x0, dwReserved1=0x0, cFileName="MsMpRes.dll.mui", cAlternateFileName="")) returned 1 [0045.889] FindNextFileW (in: hFindFile=0x382000, lpFindFileData=0x31e56c | out: lpFindFileData=0x31e56c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe494541, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0xe874c0b, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0xe494541, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0xb600, dwReserved0=0x0, dwReserved1=0x0, cFileName="MsMpRes.dll.mui", cAlternateFileName="")) returned 0 [0045.889] FindClose (in: hFindFile=0x382000 | out: hFindFile=0x382000) returned 1 [0045.889] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e7f4) returned 1 [0045.889] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e800) returned 1 [0045.889] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e8ac) returned 1 [0045.889] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Windows Journal", nBufferLength=0x105, lpBuffer=0x31e3b4, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Windows Journal", lpFilePart=0x0) returned 0x20 [0045.889] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Windows Journal\\", nBufferLength=0x105, lpBuffer=0x31e388, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Windows Journal\\", lpFilePart=0x0) returned 0x21 [0045.889] FindFirstFileW (in: lpFileName="C:\\Program Files\\Windows Journal\\*", lpFindFileData=0x31e5d4 | out: lpFindFileData=0x31e5d4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x9e177d26, ftCreationTime.dwHighDateTime=0x1cbf8eb, ftLastAccessTime.dwLowDateTime=0xd99e0520, ftLastAccessTime.dwHighDateTime=0x1d5e82a, ftLastWriteTime.dwLowDateTime=0xd99e0520, ftLastWriteTime.dwHighDateTime=0x1d5e82a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x382000 [0045.890] FindNextFileW (in: hFindFile=0x382000, lpFindFileData=0x31e5e4 | out: lpFindFileData=0x31e5e4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x9e177d26, ftCreationTime.dwHighDateTime=0x1cbf8eb, ftLastAccessTime.dwLowDateTime=0xd99e0520, ftLastAccessTime.dwHighDateTime=0x1d5e82a, ftLastWriteTime.dwLowDateTime=0xd99e0520, ftLastWriteTime.dwHighDateTime=0x1d5e82a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0045.890] FindNextFileW (in: hFindFile=0x382000, lpFindFileData=0x31e5e4 | out: lpFindFileData=0x31e5e4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x9e4268f4, ftCreationTime.dwHighDateTime=0x1cbf8eb, ftLastAccessTime.dwLowDateTime=0xaa35bb41, ftLastAccessTime.dwHighDateTime=0x1cbf8eb, ftLastWriteTime.dwLowDateTime=0x9e472dd2, ftLastWriteTime.dwHighDateTime=0x1cbf8eb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="en-US", cAlternateFileName="")) returned 1 [0045.890] FindNextFileW (in: hFindFile=0x382000, lpFindFileData=0x31e5e4 | out: lpFindFileData=0x31e5e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd7039100, ftCreationTime.dwHighDateTime=0x1d58c5d, ftLastAccessTime.dwLowDateTime=0x1f264830, ftLastAccessTime.dwHighDateTime=0x1d56b3c, ftLastWriteTime.dwLowDateTime=0x1f264830, ftLastWriteTime.dwHighDateTime=0x1d56b3c, nFileSizeHigh=0x0, nFileSizeLow=0x13a00, dwReserved0=0x0, dwReserved1=0x0, cFileName="gesuffer.exe", cAlternateFileName="")) returned 1 [0045.890] FindNextFileW (in: hFindFile=0x382000, lpFindFileData=0x31e5e4 | out: lpFindFileData=0x31e5e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x88c0db86, ftCreationTime.dwHighDateTime=0x1ca0416, ftLastAccessTime.dwLowDateTime=0x88c0db86, ftLastAccessTime.dwHighDateTime=0x1ca0416, ftLastWriteTime.dwLowDateTime=0x29c54b90, ftLastWriteTime.dwHighDateTime=0x1ca0424, nFileSizeHigh=0x0, nFileSizeLow=0xe3000, dwReserved0=0x0, dwReserved1=0x0, cFileName="InkSeg.dll", cAlternateFileName="")) returned 1 [0045.890] FindNextFileW (in: hFindFile=0x382000, lpFindFileData=0x31e5e4 | out: lpFindFileData=0x31e5e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8c554863, ftCreationTime.dwHighDateTime=0x1ca0416, ftLastAccessTime.dwLowDateTime=0x8c554863, ftLastAccessTime.dwHighDateTime=0x1ca0416, ftLastWriteTime.dwLowDateTime=0x2aeed770, ftLastWriteTime.dwHighDateTime=0x1ca0424, nFileSizeHigh=0x0, nFileSizeLow=0x154400, dwReserved0=0x0, dwReserved1=0x0, cFileName="JNTFiltr.dll", cAlternateFileName="")) returned 1 [0045.890] FindNextFileW (in: hFindFile=0x382000, lpFindFileData=0x31e5e4 | out: lpFindFileData=0x31e5e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8b77e99a, ftCreationTime.dwHighDateTime=0x1ca0416, ftLastAccessTime.dwLowDateTime=0x8b77e99a, ftLastAccessTime.dwHighDateTime=0x1ca0416, ftLastWriteTime.dwLowDateTime=0x2b043430, ftLastWriteTime.dwHighDateTime=0x1ca0424, nFileSizeHigh=0x0, nFileSizeLow=0x156800, dwReserved0=0x0, dwReserved1=0x0, cFileName="JNWDRV.dll", cAlternateFileName="")) returned 1 [0045.890] FindNextFileW (in: hFindFile=0x382000, lpFindFileData=0x31e5e4 | out: lpFindFileData=0x31e5e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x77861d5d, ftCreationTime.dwHighDateTime=0x1ca0416, ftLastAccessTime.dwLowDateTime=0x77861d5d, ftLastAccessTime.dwHighDateTime=0x1ca0416, ftLastWriteTime.dwLowDateTime=0x2b0b6020, ftLastWriteTime.dwHighDateTime=0x1ca0424, nFileSizeHigh=0x0, nFileSizeLow=0x18200, dwReserved0=0x0, dwReserved1=0x0, cFileName="jnwdui.dll", cAlternateFileName="")) returned 1 [0045.891] FindNextFileW (in: hFindFile=0x382000, lpFindFileData=0x31e5e4 | out: lpFindFileData=0x31e5e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x778fa2d1, ftCreationTime.dwHighDateTime=0x1ca0416, ftLastAccessTime.dwLowDateTime=0x778fa2d1, ftLastAccessTime.dwHighDateTime=0x1ca0416, ftLastWriteTime.dwLowDateTime=0x2b0b6020, ftLastWriteTime.dwHighDateTime=0x1ca0424, nFileSizeHigh=0x0, nFileSizeLow=0x6000, dwReserved0=0x0, dwReserved1=0x0, cFileName="jnwmon.dll", cAlternateFileName="")) returned 1 [0045.891] FindNextFileW (in: hFindFile=0x382000, lpFindFileData=0x31e5e4 | out: lpFindFileData=0x31e5e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x757cd2ce, ftCreationTime.dwHighDateTime=0x1ca0416, ftLastAccessTime.dwLowDateTime=0x757cd2ce, ftLastAccessTime.dwHighDateTime=0x1ca0416, ftLastWriteTime.dwLowDateTime=0x2b0b6020, ftLastWriteTime.dwHighDateTime=0x1ca0424, nFileSizeHigh=0x0, nFileSizeLow=0x6c00, dwReserved0=0x0, dwReserved1=0x0, cFileName="jnwppr.dll", cAlternateFileName="")) returned 1 [0045.891] FindNextFileW (in: hFindFile=0x382000, lpFindFileData=0x31e5e4 | out: lpFindFileData=0x31e5e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb1a4bf5a, ftCreationTime.dwHighDateTime=0x1cb892b, ftLastAccessTime.dwLowDateTime=0xb1a4bf5a, ftLastAccessTime.dwHighDateTime=0x1cb892b, ftLastWriteTime.dwLowDateTime=0xb1abe37b, ftLastWriteTime.dwHighDateTime=0x1cb892b, nFileSizeHigh=0x0, nFileSizeLow=0x210600, dwReserved0=0x0, dwReserved1=0x0, cFileName="Journal.exe", cAlternateFileName="")) returned 1 [0045.891] FindNextFileW (in: hFindFile=0x382000, lpFindFileData=0x31e5e4 | out: lpFindFileData=0x31e5e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x97b92e68, ftCreationTime.dwHighDateTime=0x1ca0416, ftLastAccessTime.dwLowDateTime=0x97b92e68, ftLastAccessTime.dwHighDateTime=0x1ca0416, ftLastWriteTime.dwLowDateTime=0x36740f70, ftLastWriteTime.dwHighDateTime=0x1ca0424, nFileSizeHigh=0x0, nFileSizeLow=0xa3400, dwReserved0=0x0, dwReserved1=0x0, cFileName="MSPVWCTL.DLL", cAlternateFileName="")) returned 1 [0045.891] FindNextFileW (in: hFindFile=0x382000, lpFindFileData=0x31e5e4 | out: lpFindFileData=0x31e5e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8d0a2fff, ftCreationTime.dwHighDateTime=0x1ca0416, ftLastAccessTime.dwLowDateTime=0x8d0a2fff, ftLastAccessTime.dwHighDateTime=0x1ca0416, ftLastWriteTime.dwLowDateTime=0x43278e40, ftLastWriteTime.dwHighDateTime=0x1ca0424, nFileSizeHigh=0x0, nFileSizeLow=0x1a6e00, dwReserved0=0x0, dwReserved1=0x0, cFileName="NBDoc.DLL", cAlternateFileName="")) returned 1 [0045.891] FindNextFileW (in: hFindFile=0x382000, lpFindFileData=0x31e5e4 | out: lpFindFileData=0x31e5e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x743456ac, ftCreationTime.dwHighDateTime=0x1ca0416, ftLastAccessTime.dwLowDateTime=0x743456ac, ftLastAccessTime.dwHighDateTime=0x1ca0416, ftLastWriteTime.dwLowDateTime=0x43278e40, ftLastWriteTime.dwHighDateTime=0x1ca0424, nFileSizeHigh=0x0, nFileSizeLow=0xf600, dwReserved0=0x0, dwReserved1=0x0, cFileName="NBMapTIP.dll", cAlternateFileName="")) returned 1 [0045.891] FindNextFileW (in: hFindFile=0x382000, lpFindFileData=0x31e5e4 | out: lpFindFileData=0x31e5e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2fc0a8c0, ftCreationTime.dwHighDateTime=0x1d5d103, ftLastAccessTime.dwLowDateTime=0xb8092100, ftLastAccessTime.dwHighDateTime=0x1d5d8f9, ftLastWriteTime.dwLowDateTime=0xb8092100, ftLastWriteTime.dwHighDateTime=0x1d5d8f9, nFileSizeHigh=0x0, nFileSizeLow=0x13a00, dwReserved0=0x0, dwReserved1=0x0, cFileName="outlook.exe", cAlternateFileName="")) returned 1 [0045.891] FindNextFileW (in: hFindFile=0x382000, lpFindFileData=0x31e5e4 | out: lpFindFileData=0x31e5e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x78d0fadc, ftCreationTime.dwHighDateTime=0x1ca0416, ftLastAccessTime.dwLowDateTime=0x78d0fadc, ftLastAccessTime.dwHighDateTime=0x1ca0416, ftLastWriteTime.dwLowDateTime=0xec410110, ftLastWriteTime.dwHighDateTime=0x1ca0423, nFileSizeHigh=0x0, nFileSizeLow=0xc800, dwReserved0=0x0, dwReserved1=0x0, cFileName="PDIALOG.exe", cAlternateFileName="")) returned 1 [0045.891] FindNextFileW (in: hFindFile=0x382000, lpFindFileData=0x31e5e4 | out: lpFindFileData=0x31e5e4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x9e472dd2, ftCreationTime.dwHighDateTime=0x1cbf8eb, ftLastAccessTime.dwLowDateTime=0xaa250a38, ftLastAccessTime.dwHighDateTime=0x1cbf8eb, ftLastWriteTime.dwLowDateTime=0x9e4e551f, ftLastWriteTime.dwHighDateTime=0x1cbf8eb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Templates", cAlternateFileName="TEMPLA~1")) returned 1 [0045.892] FindNextFileW (in: hFindFile=0x382000, lpFindFileData=0x31e5e4 | out: lpFindFileData=0x31e5e4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x9e472dd2, ftCreationTime.dwHighDateTime=0x1cbf8eb, ftLastAccessTime.dwLowDateTime=0xaa250a38, ftLastAccessTime.dwHighDateTime=0x1cbf8eb, ftLastWriteTime.dwLowDateTime=0x9e4e551f, ftLastWriteTime.dwHighDateTime=0x1cbf8eb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Templates", cAlternateFileName="TEMPLA~1")) returned 0 [0045.892] FindClose (in: hFindFile=0x382000 | out: hFindFile=0x382000) returned 1 [0045.892] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e86c) returned 1 [0045.892] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e878) returned 1 [0045.892] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e8ac) returned 1 [0045.892] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Windows Journal", nBufferLength=0x105, lpBuffer=0x31e3b4, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Windows Journal", lpFilePart=0x0) returned 0x20 [0045.892] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Windows Journal\\", nBufferLength=0x105, lpBuffer=0x31e388, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Windows Journal\\", lpFilePart=0x0) returned 0x21 [0045.892] FindFirstFileW (in: lpFileName="C:\\Program Files\\Windows Journal\\*", lpFindFileData=0x31e5d4 | out: lpFindFileData=0x31e5d4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x9e177d26, ftCreationTime.dwHighDateTime=0x1cbf8eb, ftLastAccessTime.dwLowDateTime=0xd99e0520, ftLastAccessTime.dwHighDateTime=0x1d5e82a, ftLastWriteTime.dwLowDateTime=0xd99e0520, ftLastWriteTime.dwHighDateTime=0x1d5e82a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x382000 [0045.892] FindNextFileW (in: hFindFile=0x382000, lpFindFileData=0x31e5e4 | out: lpFindFileData=0x31e5e4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x9e177d26, ftCreationTime.dwHighDateTime=0x1cbf8eb, ftLastAccessTime.dwLowDateTime=0xd99e0520, ftLastAccessTime.dwHighDateTime=0x1d5e82a, ftLastWriteTime.dwLowDateTime=0xd99e0520, ftLastWriteTime.dwHighDateTime=0x1d5e82a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0045.892] FindNextFileW (in: hFindFile=0x382000, lpFindFileData=0x31e5e4 | out: lpFindFileData=0x31e5e4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x9e4268f4, ftCreationTime.dwHighDateTime=0x1cbf8eb, ftLastAccessTime.dwLowDateTime=0xaa35bb41, ftLastAccessTime.dwHighDateTime=0x1cbf8eb, ftLastWriteTime.dwLowDateTime=0x9e472dd2, ftLastWriteTime.dwHighDateTime=0x1cbf8eb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="en-US", cAlternateFileName="")) returned 1 [0045.892] FindNextFileW (in: hFindFile=0x382000, lpFindFileData=0x31e5e4 | out: lpFindFileData=0x31e5e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd7039100, ftCreationTime.dwHighDateTime=0x1d58c5d, ftLastAccessTime.dwLowDateTime=0x1f264830, ftLastAccessTime.dwHighDateTime=0x1d56b3c, ftLastWriteTime.dwLowDateTime=0x1f264830, ftLastWriteTime.dwHighDateTime=0x1d56b3c, nFileSizeHigh=0x0, nFileSizeLow=0x13a00, dwReserved0=0x0, dwReserved1=0x0, cFileName="gesuffer.exe", cAlternateFileName="")) returned 1 [0045.893] FindNextFileW (in: hFindFile=0x382000, lpFindFileData=0x31e5e4 | out: lpFindFileData=0x31e5e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x88c0db86, ftCreationTime.dwHighDateTime=0x1ca0416, ftLastAccessTime.dwLowDateTime=0x88c0db86, ftLastAccessTime.dwHighDateTime=0x1ca0416, ftLastWriteTime.dwLowDateTime=0x29c54b90, ftLastWriteTime.dwHighDateTime=0x1ca0424, nFileSizeHigh=0x0, nFileSizeLow=0xe3000, dwReserved0=0x0, dwReserved1=0x0, cFileName="InkSeg.dll", cAlternateFileName="")) returned 1 [0045.893] FindNextFileW (in: hFindFile=0x382000, lpFindFileData=0x31e5e4 | out: lpFindFileData=0x31e5e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8c554863, ftCreationTime.dwHighDateTime=0x1ca0416, ftLastAccessTime.dwLowDateTime=0x8c554863, ftLastAccessTime.dwHighDateTime=0x1ca0416, ftLastWriteTime.dwLowDateTime=0x2aeed770, ftLastWriteTime.dwHighDateTime=0x1ca0424, nFileSizeHigh=0x0, nFileSizeLow=0x154400, dwReserved0=0x0, dwReserved1=0x0, cFileName="JNTFiltr.dll", cAlternateFileName="")) returned 1 [0045.893] FindNextFileW (in: hFindFile=0x382000, lpFindFileData=0x31e5e4 | out: lpFindFileData=0x31e5e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8b77e99a, ftCreationTime.dwHighDateTime=0x1ca0416, ftLastAccessTime.dwLowDateTime=0x8b77e99a, ftLastAccessTime.dwHighDateTime=0x1ca0416, ftLastWriteTime.dwLowDateTime=0x2b043430, ftLastWriteTime.dwHighDateTime=0x1ca0424, nFileSizeHigh=0x0, nFileSizeLow=0x156800, dwReserved0=0x0, dwReserved1=0x0, cFileName="JNWDRV.dll", cAlternateFileName="")) returned 1 [0045.893] FindNextFileW (in: hFindFile=0x382000, lpFindFileData=0x31e5e4 | out: lpFindFileData=0x31e5e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x77861d5d, ftCreationTime.dwHighDateTime=0x1ca0416, ftLastAccessTime.dwLowDateTime=0x77861d5d, ftLastAccessTime.dwHighDateTime=0x1ca0416, ftLastWriteTime.dwLowDateTime=0x2b0b6020, ftLastWriteTime.dwHighDateTime=0x1ca0424, nFileSizeHigh=0x0, nFileSizeLow=0x18200, dwReserved0=0x0, dwReserved1=0x0, cFileName="jnwdui.dll", cAlternateFileName="")) returned 1 [0045.893] FindNextFileW (in: hFindFile=0x382000, lpFindFileData=0x31e5e4 | out: lpFindFileData=0x31e5e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x778fa2d1, ftCreationTime.dwHighDateTime=0x1ca0416, ftLastAccessTime.dwLowDateTime=0x778fa2d1, ftLastAccessTime.dwHighDateTime=0x1ca0416, ftLastWriteTime.dwLowDateTime=0x2b0b6020, ftLastWriteTime.dwHighDateTime=0x1ca0424, nFileSizeHigh=0x0, nFileSizeLow=0x6000, dwReserved0=0x0, dwReserved1=0x0, cFileName="jnwmon.dll", cAlternateFileName="")) returned 1 [0045.893] FindNextFileW (in: hFindFile=0x382000, lpFindFileData=0x31e5e4 | out: lpFindFileData=0x31e5e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x757cd2ce, ftCreationTime.dwHighDateTime=0x1ca0416, ftLastAccessTime.dwLowDateTime=0x757cd2ce, ftLastAccessTime.dwHighDateTime=0x1ca0416, ftLastWriteTime.dwLowDateTime=0x2b0b6020, ftLastWriteTime.dwHighDateTime=0x1ca0424, nFileSizeHigh=0x0, nFileSizeLow=0x6c00, dwReserved0=0x0, dwReserved1=0x0, cFileName="jnwppr.dll", cAlternateFileName="")) returned 1 [0045.893] FindNextFileW (in: hFindFile=0x382000, lpFindFileData=0x31e5e4 | out: lpFindFileData=0x31e5e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb1a4bf5a, ftCreationTime.dwHighDateTime=0x1cb892b, ftLastAccessTime.dwLowDateTime=0xb1a4bf5a, ftLastAccessTime.dwHighDateTime=0x1cb892b, ftLastWriteTime.dwLowDateTime=0xb1abe37b, ftLastWriteTime.dwHighDateTime=0x1cb892b, nFileSizeHigh=0x0, nFileSizeLow=0x210600, dwReserved0=0x0, dwReserved1=0x0, cFileName="Journal.exe", cAlternateFileName="")) returned 1 [0045.894] FindNextFileW (in: hFindFile=0x382000, lpFindFileData=0x31e5e4 | out: lpFindFileData=0x31e5e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x97b92e68, ftCreationTime.dwHighDateTime=0x1ca0416, ftLastAccessTime.dwLowDateTime=0x97b92e68, ftLastAccessTime.dwHighDateTime=0x1ca0416, ftLastWriteTime.dwLowDateTime=0x36740f70, ftLastWriteTime.dwHighDateTime=0x1ca0424, nFileSizeHigh=0x0, nFileSizeLow=0xa3400, dwReserved0=0x0, dwReserved1=0x0, cFileName="MSPVWCTL.DLL", cAlternateFileName="")) returned 1 [0045.894] FindNextFileW (in: hFindFile=0x382000, lpFindFileData=0x31e5e4 | out: lpFindFileData=0x31e5e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8d0a2fff, ftCreationTime.dwHighDateTime=0x1ca0416, ftLastAccessTime.dwLowDateTime=0x8d0a2fff, ftLastAccessTime.dwHighDateTime=0x1ca0416, ftLastWriteTime.dwLowDateTime=0x43278e40, ftLastWriteTime.dwHighDateTime=0x1ca0424, nFileSizeHigh=0x0, nFileSizeLow=0x1a6e00, dwReserved0=0x0, dwReserved1=0x0, cFileName="NBDoc.DLL", cAlternateFileName="")) returned 1 [0045.894] FindNextFileW (in: hFindFile=0x382000, lpFindFileData=0x31e5e4 | out: lpFindFileData=0x31e5e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x743456ac, ftCreationTime.dwHighDateTime=0x1ca0416, ftLastAccessTime.dwLowDateTime=0x743456ac, ftLastAccessTime.dwHighDateTime=0x1ca0416, ftLastWriteTime.dwLowDateTime=0x43278e40, ftLastWriteTime.dwHighDateTime=0x1ca0424, nFileSizeHigh=0x0, nFileSizeLow=0xf600, dwReserved0=0x0, dwReserved1=0x0, cFileName="NBMapTIP.dll", cAlternateFileName="")) returned 1 [0045.894] FindNextFileW (in: hFindFile=0x382000, lpFindFileData=0x31e5e4 | out: lpFindFileData=0x31e5e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2fc0a8c0, ftCreationTime.dwHighDateTime=0x1d5d103, ftLastAccessTime.dwLowDateTime=0xb8092100, ftLastAccessTime.dwHighDateTime=0x1d5d8f9, ftLastWriteTime.dwLowDateTime=0xb8092100, ftLastWriteTime.dwHighDateTime=0x1d5d8f9, nFileSizeHigh=0x0, nFileSizeLow=0x13a00, dwReserved0=0x0, dwReserved1=0x0, cFileName="outlook.exe", cAlternateFileName="")) returned 1 [0045.894] FindNextFileW (in: hFindFile=0x382000, lpFindFileData=0x31e5e4 | out: lpFindFileData=0x31e5e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x78d0fadc, ftCreationTime.dwHighDateTime=0x1ca0416, ftLastAccessTime.dwLowDateTime=0x78d0fadc, ftLastAccessTime.dwHighDateTime=0x1ca0416, ftLastWriteTime.dwLowDateTime=0xec410110, ftLastWriteTime.dwHighDateTime=0x1ca0423, nFileSizeHigh=0x0, nFileSizeLow=0xc800, dwReserved0=0x0, dwReserved1=0x0, cFileName="PDIALOG.exe", cAlternateFileName="")) returned 1 [0045.894] FindNextFileW (in: hFindFile=0x382000, lpFindFileData=0x31e5e4 | out: lpFindFileData=0x31e5e4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x9e472dd2, ftCreationTime.dwHighDateTime=0x1cbf8eb, ftLastAccessTime.dwLowDateTime=0xaa250a38, ftLastAccessTime.dwHighDateTime=0x1cbf8eb, ftLastWriteTime.dwLowDateTime=0x9e4e551f, ftLastWriteTime.dwHighDateTime=0x1cbf8eb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Templates", cAlternateFileName="TEMPLA~1")) returned 1 [0045.894] FindNextFileW (in: hFindFile=0x382000, lpFindFileData=0x31e5e4 | out: lpFindFileData=0x31e5e4*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0045.894] FindClose (in: hFindFile=0x382000 | out: hFindFile=0x382000) returned 1 [0045.895] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e86c) returned 1 [0045.895] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e878) returned 1 [0045.895] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e834) returned 1 [0045.895] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Windows Journal\\en-US", nBufferLength=0x105, lpBuffer=0x31e33c, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Windows Journal\\en-US", lpFilePart=0x0) returned 0x26 [0045.895] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Windows Journal\\en-US\\", nBufferLength=0x105, lpBuffer=0x31e310, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Windows Journal\\en-US\\", lpFilePart=0x0) returned 0x27 [0045.895] FindFirstFileW (in: lpFileName="C:\\Program Files\\Windows Journal\\en-US\\*", lpFindFileData=0x31e55c | out: lpFindFileData=0x31e55c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x9e4268f4, ftCreationTime.dwHighDateTime=0x1cbf8eb, ftLastAccessTime.dwLowDateTime=0xaa35bb41, ftLastAccessTime.dwHighDateTime=0x1cbf8eb, ftLastWriteTime.dwLowDateTime=0x9e472dd2, ftLastWriteTime.dwHighDateTime=0x1cbf8eb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x382000 [0045.896] FindNextFileW (in: hFindFile=0x382000, lpFindFileData=0x31e56c | out: lpFindFileData=0x31e56c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x9e4268f4, ftCreationTime.dwHighDateTime=0x1cbf8eb, ftLastAccessTime.dwLowDateTime=0xaa35bb41, ftLastAccessTime.dwHighDateTime=0x1cbf8eb, ftLastWriteTime.dwLowDateTime=0x9e472dd2, ftLastWriteTime.dwHighDateTime=0x1cbf8eb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0045.897] FindNextFileW (in: hFindFile=0x382000, lpFindFileData=0x31e56c | out: lpFindFileData=0x31e56c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x110442fe, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x1138bee4, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x110442fe, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x800, dwReserved0=0x0, dwReserved1=0x0, cFileName="JNTFiltr.dll.mui", cAlternateFileName="")) returned 1 [0045.897] FindNextFileW (in: hFindFile=0x382000, lpFindFileData=0x31e56c | out: lpFindFileData=0x31e56c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x110442fe, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x1138bee4, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x110442fe, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x1600, dwReserved0=0x0, dwReserved1=0x0, cFileName="jnwdui.dll.mui", cAlternateFileName="")) returned 1 [0045.897] FindNextFileW (in: hFindFile=0x382000, lpFindFileData=0x31e56c | out: lpFindFileData=0x31e56c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x110442fe, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x1138bee4, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x110442fe, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0xa00, dwReserved0=0x0, dwReserved1=0x0, cFileName="jnwmon.dll.mui", cAlternateFileName="")) returned 1 [0045.897] FindNextFileW (in: hFindFile=0x382000, lpFindFileData=0x31e56c | out: lpFindFileData=0x31e56c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x110442fe, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x1138bee4, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x110442fe, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x15000, dwReserved0=0x0, dwReserved1=0x0, cFileName="Journal.exe.mui", cAlternateFileName="")) returned 1 [0045.897] FindNextFileW (in: hFindFile=0x382000, lpFindFileData=0x31e56c | out: lpFindFileData=0x31e56c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x110442fe, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x1138bee4, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x110442fe, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x1a00, dwReserved0=0x0, dwReserved1=0x0, cFileName="MSPVWCTL.DLL.mui", cAlternateFileName="")) returned 1 [0045.897] FindNextFileW (in: hFindFile=0x382000, lpFindFileData=0x31e56c | out: lpFindFileData=0x31e56c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x110442fe, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x1138bee4, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x110442fe, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0xa00, dwReserved0=0x0, dwReserved1=0x0, cFileName="NBMapTIP.dll.mui", cAlternateFileName="")) returned 1 [0045.897] FindNextFileW (in: hFindFile=0x382000, lpFindFileData=0x31e56c | out: lpFindFileData=0x31e56c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x110442fe, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x1138bee4, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x110442fe, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0xa00, dwReserved0=0x0, dwReserved1=0x0, cFileName="PDIALOG.exe.mui", cAlternateFileName="")) returned 1 [0045.897] FindNextFileW (in: hFindFile=0x382000, lpFindFileData=0x31e56c | out: lpFindFileData=0x31e56c*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0045.897] FindClose (in: hFindFile=0x382000 | out: hFindFile=0x382000) returned 1 [0045.898] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e7f4) returned 1 [0045.898] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e800) returned 1 [0045.898] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e834) returned 1 [0045.898] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Windows Journal\\en-US", nBufferLength=0x105, lpBuffer=0x31e33c, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Windows Journal\\en-US", lpFilePart=0x0) returned 0x26 [0045.898] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Windows Journal\\en-US\\", nBufferLength=0x105, lpBuffer=0x31e310, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Windows Journal\\en-US\\", lpFilePart=0x0) returned 0x27 [0045.898] FindFirstFileW (in: lpFileName="C:\\Program Files\\Windows Journal\\en-US\\*", lpFindFileData=0x31e55c | out: lpFindFileData=0x31e55c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x9e4268f4, ftCreationTime.dwHighDateTime=0x1cbf8eb, ftLastAccessTime.dwLowDateTime=0xaa35bb41, ftLastAccessTime.dwHighDateTime=0x1cbf8eb, ftLastWriteTime.dwLowDateTime=0x9e472dd2, ftLastWriteTime.dwHighDateTime=0x1cbf8eb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x382000 [0045.899] FindNextFileW (in: hFindFile=0x382000, lpFindFileData=0x31e56c | out: lpFindFileData=0x31e56c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x9e4268f4, ftCreationTime.dwHighDateTime=0x1cbf8eb, ftLastAccessTime.dwLowDateTime=0xaa35bb41, ftLastAccessTime.dwHighDateTime=0x1cbf8eb, ftLastWriteTime.dwLowDateTime=0x9e472dd2, ftLastWriteTime.dwHighDateTime=0x1cbf8eb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0045.899] FindNextFileW (in: hFindFile=0x382000, lpFindFileData=0x31e56c | out: lpFindFileData=0x31e56c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x110442fe, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x1138bee4, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x110442fe, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x800, dwReserved0=0x0, dwReserved1=0x0, cFileName="JNTFiltr.dll.mui", cAlternateFileName="")) returned 1 [0045.900] FindNextFileW (in: hFindFile=0x382000, lpFindFileData=0x31e56c | out: lpFindFileData=0x31e56c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x110442fe, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x1138bee4, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x110442fe, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x1600, dwReserved0=0x0, dwReserved1=0x0, cFileName="jnwdui.dll.mui", cAlternateFileName="")) returned 1 [0045.900] FindNextFileW (in: hFindFile=0x382000, lpFindFileData=0x31e56c | out: lpFindFileData=0x31e56c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x110442fe, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x1138bee4, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x110442fe, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0xa00, dwReserved0=0x0, dwReserved1=0x0, cFileName="jnwmon.dll.mui", cAlternateFileName="")) returned 1 [0045.900] FindNextFileW (in: hFindFile=0x382000, lpFindFileData=0x31e56c | out: lpFindFileData=0x31e56c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x110442fe, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x1138bee4, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x110442fe, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x15000, dwReserved0=0x0, dwReserved1=0x0, cFileName="Journal.exe.mui", cAlternateFileName="")) returned 1 [0045.900] FindNextFileW (in: hFindFile=0x382000, lpFindFileData=0x31e56c | out: lpFindFileData=0x31e56c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x110442fe, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x1138bee4, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x110442fe, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x1a00, dwReserved0=0x0, dwReserved1=0x0, cFileName="MSPVWCTL.DLL.mui", cAlternateFileName="")) returned 1 [0045.900] FindNextFileW (in: hFindFile=0x382000, lpFindFileData=0x31e56c | out: lpFindFileData=0x31e56c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x110442fe, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x1138bee4, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x110442fe, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0xa00, dwReserved0=0x0, dwReserved1=0x0, cFileName="NBMapTIP.dll.mui", cAlternateFileName="")) returned 1 [0045.900] FindNextFileW (in: hFindFile=0x382000, lpFindFileData=0x31e56c | out: lpFindFileData=0x31e56c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x110442fe, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x1138bee4, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x110442fe, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0xa00, dwReserved0=0x0, dwReserved1=0x0, cFileName="PDIALOG.exe.mui", cAlternateFileName="")) returned 1 [0045.900] FindNextFileW (in: hFindFile=0x382000, lpFindFileData=0x31e56c | out: lpFindFileData=0x31e56c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x110442fe, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x1138bee4, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x110442fe, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0xa00, dwReserved0=0x0, dwReserved1=0x0, cFileName="PDIALOG.exe.mui", cAlternateFileName="")) returned 0 [0045.900] FindClose (in: hFindFile=0x382000 | out: hFindFile=0x382000) returned 1 [0045.901] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e7f4) returned 1 [0045.901] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e800) returned 1 [0045.901] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e834) returned 1 [0045.901] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Windows Journal\\Templates", nBufferLength=0x105, lpBuffer=0x31e33c, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Windows Journal\\Templates", lpFilePart=0x0) returned 0x2a [0045.901] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Windows Journal\\Templates\\", nBufferLength=0x105, lpBuffer=0x31e310, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Windows Journal\\Templates\\", lpFilePart=0x0) returned 0x2b [0045.901] FindFirstFileW (in: lpFileName="C:\\Program Files\\Windows Journal\\Templates\\*", lpFindFileData=0x31e55c | out: lpFindFileData=0x31e55c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x9e472dd2, ftCreationTime.dwHighDateTime=0x1cbf8eb, ftLastAccessTime.dwLowDateTime=0xaa250a38, ftLastAccessTime.dwHighDateTime=0x1cbf8eb, ftLastWriteTime.dwLowDateTime=0x9e4e551f, ftLastWriteTime.dwHighDateTime=0x1cbf8eb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x382000 [0045.903] FindNextFileW (in: hFindFile=0x382000, lpFindFileData=0x31e56c | out: lpFindFileData=0x31e56c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x9e472dd2, ftCreationTime.dwHighDateTime=0x1cbf8eb, ftLastAccessTime.dwLowDateTime=0xaa250a38, ftLastAccessTime.dwHighDateTime=0x1cbf8eb, ftLastWriteTime.dwLowDateTime=0x9e4e551f, ftLastWriteTime.dwHighDateTime=0x1cbf8eb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0045.903] FindNextFileW (in: hFindFile=0x382000, lpFindFileData=0x31e56c | out: lpFindFileData=0x31e56c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc5570eaa, ftCreationTime.dwHighDateTime=0x1ca0416, ftLastAccessTime.dwLowDateTime=0xc5570eaa, ftLastAccessTime.dwHighDateTime=0x1ca0416, ftLastWriteTime.dwLowDateTime=0x46a6d3e7, ftLastWriteTime.dwHighDateTime=0x1c9ea0c, nFileSizeHigh=0x0, nFileSizeLow=0x155e, dwReserved0=0x0, dwReserved1=0x0, cFileName="blank.jtp", cAlternateFileName="")) returned 1 [0045.904] FindNextFileW (in: hFindFile=0x382000, lpFindFileData=0x31e56c | out: lpFindFileData=0x31e56c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc5597007, ftCreationTime.dwHighDateTime=0x1ca0416, ftLastAccessTime.dwLowDateTime=0xc5597007, ftLastAccessTime.dwHighDateTime=0x1ca0416, ftLastWriteTime.dwLowDateTime=0x46ca8869, ftLastWriteTime.dwHighDateTime=0x1c9ea0c, nFileSizeHigh=0x0, nFileSizeLow=0x2ce6, dwReserved0=0x0, dwReserved1=0x0, cFileName="Dotted_Line.jtp", cAlternateFileName="")) returned 1 [0045.904] FindNextFileW (in: hFindFile=0x382000, lpFindFileData=0x31e56c | out: lpFindFileData=0x31e56c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc55bd164, ftCreationTime.dwHighDateTime=0x1ca0416, ftLastAccessTime.dwLowDateTime=0xc55bd164, ftLastAccessTime.dwHighDateTime=0x1ca0416, ftLastWriteTime.dwLowDateTime=0x470d2eb1, ftLastWriteTime.dwHighDateTime=0x1c9ea0c, nFileSizeHigh=0x0, nFileSizeLow=0x361c, dwReserved0=0x0, dwReserved1=0x0, cFileName="Genko_1.jtp", cAlternateFileName="")) returned 1 [0045.904] FindNextFileW (in: hFindFile=0x382000, lpFindFileData=0x31e56c | out: lpFindFileData=0x31e56c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc560941e, ftCreationTime.dwHighDateTime=0x1ca0416, ftLastAccessTime.dwLowDateTime=0xc560941e, ftLastAccessTime.dwHighDateTime=0x1ca0416, ftLastWriteTime.dwLowDateTime=0x47191587, ftLastWriteTime.dwHighDateTime=0x1c9ea0c, nFileSizeHigh=0x0, nFileSizeLow=0x4c8c, dwReserved0=0x0, dwReserved1=0x0, cFileName="Genko_2.jtp", cAlternateFileName="")) returned 1 [0045.904] FindNextFileW (in: hFindFile=0x382000, lpFindFileData=0x31e56c | out: lpFindFileData=0x31e56c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc562f57b, ftCreationTime.dwHighDateTime=0x1ca0416, ftLastAccessTime.dwLowDateTime=0xc562f57b, ftLastAccessTime.dwHighDateTime=0x1ca0416, ftLastWriteTime.dwLowDateTime=0x476ec6bf, ftLastWriteTime.dwHighDateTime=0x1c9ea0c, nFileSizeHigh=0x0, nFileSizeLow=0x1e15c, dwReserved0=0x0, dwReserved1=0x0, cFileName="Graph.jtp", cAlternateFileName="")) returned 1 [0045.904] FindNextFileW (in: hFindFile=0x382000, lpFindFileData=0x31e56c | out: lpFindFileData=0x31e56c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc567b835, ftCreationTime.dwHighDateTime=0x1ca0416, ftLastAccessTime.dwLowDateTime=0xc567b835, ftLastAccessTime.dwHighDateTime=0x1ca0416, ftLastWriteTime.dwLowDateTime=0x47784c37, ftLastWriteTime.dwHighDateTime=0x1c9ea0c, nFileSizeHigh=0x0, nFileSizeLow=0x26f6e, dwReserved0=0x0, dwReserved1=0x0, cFileName="Memo.jtp", cAlternateFileName="")) returned 1 [0045.904] FindNextFileW (in: hFindFile=0x382000, lpFindFileData=0x31e56c | out: lpFindFileData=0x31e56c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc56a1992, ftCreationTime.dwHighDateTime=0x1ca0416, ftLastAccessTime.dwLowDateTime=0xc56a1992, ftLastAccessTime.dwHighDateTime=0x1ca0416, ftLastWriteTime.dwLowDateTime=0x47ea8dd7, ftLastWriteTime.dwHighDateTime=0x1c9ea0c, nFileSizeHigh=0x0, nFileSizeLow=0x275c, dwReserved0=0x0, dwReserved1=0x0, cFileName="Month_Calendar.jtp", cAlternateFileName="")) returned 1 [0045.904] FindNextFileW (in: hFindFile=0x382000, lpFindFileData=0x31e56c | out: lpFindFileData=0x31e56c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc56c7aef, ftCreationTime.dwHighDateTime=0x1ca0416, ftLastAccessTime.dwLowDateTime=0xc56c7aef, ftLastAccessTime.dwHighDateTime=0x1ca0416, ftLastWriteTime.dwLowDateTime=0x47f4134f, ftLastWriteTime.dwHighDateTime=0x1c9ea0c, nFileSizeHigh=0x0, nFileSizeLow=0x9f58, dwReserved0=0x0, dwReserved1=0x0, cFileName="Music.jtp", cAlternateFileName="")) returned 1 [0045.904] FindNextFileW (in: hFindFile=0x382000, lpFindFileData=0x31e56c | out: lpFindFileData=0x31e56c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc56edc4c, ftCreationTime.dwHighDateTime=0x1ca0416, ftLastAccessTime.dwLowDateTime=0xc56edc4c, ftLastAccessTime.dwHighDateTime=0x1ca0416, ftLastWriteTime.dwLowDateTime=0x47f4134f, ftLastWriteTime.dwHighDateTime=0x1c9ea0c, nFileSizeHigh=0x0, nFileSizeLow=0xa95a, dwReserved0=0x0, dwReserved1=0x0, cFileName="Seyes.jtp", cAlternateFileName="")) returned 1 [0045.904] FindNextFileW (in: hFindFile=0x382000, lpFindFileData=0x31e56c | out: lpFindFileData=0x31e56c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc5739f06, ftCreationTime.dwHighDateTime=0x1ca0416, ftLastAccessTime.dwLowDateTime=0xc5739f06, ftLastAccessTime.dwHighDateTime=0x1ca0416, ftLastWriteTime.dwLowDateTime=0x48795fdf, ftLastWriteTime.dwHighDateTime=0x1c9ea0c, nFileSizeHigh=0x0, nFileSizeLow=0x1575a, dwReserved0=0x0, dwReserved1=0x0, cFileName="Shorthand.jtp", cAlternateFileName="")) returned 1 [0045.904] FindNextFileW (in: hFindFile=0x382000, lpFindFileData=0x31e56c | out: lpFindFileData=0x31e56c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc5760063, ftCreationTime.dwHighDateTime=0x1ca0416, ftLastAccessTime.dwLowDateTime=0xc5760063, ftLastAccessTime.dwHighDateTime=0x1ca0416, ftLastWriteTime.dwLowDateTime=0x48e21c07, ftLastWriteTime.dwHighDateTime=0x1c9ea0c, nFileSizeHigh=0x0, nFileSizeLow=0x7f5a, dwReserved0=0x0, dwReserved1=0x0, cFileName="To_Do_List.jtp", cAlternateFileName="")) returned 1 [0045.904] FindNextFileW (in: hFindFile=0x382000, lpFindFileData=0x31e56c | out: lpFindFileData=0x31e56c*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0045.905] FindClose (in: hFindFile=0x382000 | out: hFindFile=0x382000) returned 1 [0045.905] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e7f4) returned 1 [0045.905] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e800) returned 1 [0045.905] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e834) returned 1 [0045.905] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Windows Journal\\Templates", nBufferLength=0x105, lpBuffer=0x31e33c, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Windows Journal\\Templates", lpFilePart=0x0) returned 0x2a [0045.905] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Windows Journal\\Templates\\", nBufferLength=0x105, lpBuffer=0x31e310, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Windows Journal\\Templates\\", lpFilePart=0x0) returned 0x2b [0045.905] FindFirstFileW (in: lpFileName="C:\\Program Files\\Windows Journal\\Templates\\*", lpFindFileData=0x31e55c | out: lpFindFileData=0x31e55c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x9e472dd2, ftCreationTime.dwHighDateTime=0x1cbf8eb, ftLastAccessTime.dwLowDateTime=0xaa250a38, ftLastAccessTime.dwHighDateTime=0x1cbf8eb, ftLastWriteTime.dwLowDateTime=0x9e4e551f, ftLastWriteTime.dwHighDateTime=0x1cbf8eb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x382000 [0045.906] FindNextFileW (in: hFindFile=0x382000, lpFindFileData=0x31e56c | out: lpFindFileData=0x31e56c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x9e472dd2, ftCreationTime.dwHighDateTime=0x1cbf8eb, ftLastAccessTime.dwLowDateTime=0xaa250a38, ftLastAccessTime.dwHighDateTime=0x1cbf8eb, ftLastWriteTime.dwLowDateTime=0x9e4e551f, ftLastWriteTime.dwHighDateTime=0x1cbf8eb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0045.906] FindNextFileW (in: hFindFile=0x382000, lpFindFileData=0x31e56c | out: lpFindFileData=0x31e56c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc5570eaa, ftCreationTime.dwHighDateTime=0x1ca0416, ftLastAccessTime.dwLowDateTime=0xc5570eaa, ftLastAccessTime.dwHighDateTime=0x1ca0416, ftLastWriteTime.dwLowDateTime=0x46a6d3e7, ftLastWriteTime.dwHighDateTime=0x1c9ea0c, nFileSizeHigh=0x0, nFileSizeLow=0x155e, dwReserved0=0x0, dwReserved1=0x0, cFileName="blank.jtp", cAlternateFileName="")) returned 1 [0045.906] FindNextFileW (in: hFindFile=0x382000, lpFindFileData=0x31e56c | out: lpFindFileData=0x31e56c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc5597007, ftCreationTime.dwHighDateTime=0x1ca0416, ftLastAccessTime.dwLowDateTime=0xc5597007, ftLastAccessTime.dwHighDateTime=0x1ca0416, ftLastWriteTime.dwLowDateTime=0x46ca8869, ftLastWriteTime.dwHighDateTime=0x1c9ea0c, nFileSizeHigh=0x0, nFileSizeLow=0x2ce6, dwReserved0=0x0, dwReserved1=0x0, cFileName="Dotted_Line.jtp", cAlternateFileName="")) returned 1 [0045.907] FindNextFileW (in: hFindFile=0x382000, lpFindFileData=0x31e56c | out: lpFindFileData=0x31e56c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc55bd164, ftCreationTime.dwHighDateTime=0x1ca0416, ftLastAccessTime.dwLowDateTime=0xc55bd164, ftLastAccessTime.dwHighDateTime=0x1ca0416, ftLastWriteTime.dwLowDateTime=0x470d2eb1, ftLastWriteTime.dwHighDateTime=0x1c9ea0c, nFileSizeHigh=0x0, nFileSizeLow=0x361c, dwReserved0=0x0, dwReserved1=0x0, cFileName="Genko_1.jtp", cAlternateFileName="")) returned 1 [0045.907] FindNextFileW (in: hFindFile=0x382000, lpFindFileData=0x31e56c | out: lpFindFileData=0x31e56c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc560941e, ftCreationTime.dwHighDateTime=0x1ca0416, ftLastAccessTime.dwLowDateTime=0xc560941e, ftLastAccessTime.dwHighDateTime=0x1ca0416, ftLastWriteTime.dwLowDateTime=0x47191587, ftLastWriteTime.dwHighDateTime=0x1c9ea0c, nFileSizeHigh=0x0, nFileSizeLow=0x4c8c, dwReserved0=0x0, dwReserved1=0x0, cFileName="Genko_2.jtp", cAlternateFileName="")) returned 1 [0045.907] FindNextFileW (in: hFindFile=0x382000, lpFindFileData=0x31e56c | out: lpFindFileData=0x31e56c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc562f57b, ftCreationTime.dwHighDateTime=0x1ca0416, ftLastAccessTime.dwLowDateTime=0xc562f57b, ftLastAccessTime.dwHighDateTime=0x1ca0416, ftLastWriteTime.dwLowDateTime=0x476ec6bf, ftLastWriteTime.dwHighDateTime=0x1c9ea0c, nFileSizeHigh=0x0, nFileSizeLow=0x1e15c, dwReserved0=0x0, dwReserved1=0x0, cFileName="Graph.jtp", cAlternateFileName="")) returned 1 [0045.907] FindNextFileW (in: hFindFile=0x382000, lpFindFileData=0x31e56c | out: lpFindFileData=0x31e56c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc567b835, ftCreationTime.dwHighDateTime=0x1ca0416, ftLastAccessTime.dwLowDateTime=0xc567b835, ftLastAccessTime.dwHighDateTime=0x1ca0416, ftLastWriteTime.dwLowDateTime=0x47784c37, ftLastWriteTime.dwHighDateTime=0x1c9ea0c, nFileSizeHigh=0x0, nFileSizeLow=0x26f6e, dwReserved0=0x0, dwReserved1=0x0, cFileName="Memo.jtp", cAlternateFileName="")) returned 1 [0045.907] FindNextFileW (in: hFindFile=0x382000, lpFindFileData=0x31e56c | out: lpFindFileData=0x31e56c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc56a1992, ftCreationTime.dwHighDateTime=0x1ca0416, ftLastAccessTime.dwLowDateTime=0xc56a1992, ftLastAccessTime.dwHighDateTime=0x1ca0416, ftLastWriteTime.dwLowDateTime=0x47ea8dd7, ftLastWriteTime.dwHighDateTime=0x1c9ea0c, nFileSizeHigh=0x0, nFileSizeLow=0x275c, dwReserved0=0x0, dwReserved1=0x0, cFileName="Month_Calendar.jtp", cAlternateFileName="")) returned 1 [0045.907] FindNextFileW (in: hFindFile=0x382000, lpFindFileData=0x31e56c | out: lpFindFileData=0x31e56c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc56c7aef, ftCreationTime.dwHighDateTime=0x1ca0416, ftLastAccessTime.dwLowDateTime=0xc56c7aef, ftLastAccessTime.dwHighDateTime=0x1ca0416, ftLastWriteTime.dwLowDateTime=0x47f4134f, ftLastWriteTime.dwHighDateTime=0x1c9ea0c, nFileSizeHigh=0x0, nFileSizeLow=0x9f58, dwReserved0=0x0, dwReserved1=0x0, cFileName="Music.jtp", cAlternateFileName="")) returned 1 [0045.907] FindNextFileW (in: hFindFile=0x382000, lpFindFileData=0x31e56c | out: lpFindFileData=0x31e56c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc56edc4c, ftCreationTime.dwHighDateTime=0x1ca0416, ftLastAccessTime.dwLowDateTime=0xc56edc4c, ftLastAccessTime.dwHighDateTime=0x1ca0416, ftLastWriteTime.dwLowDateTime=0x47f4134f, ftLastWriteTime.dwHighDateTime=0x1c9ea0c, nFileSizeHigh=0x0, nFileSizeLow=0xa95a, dwReserved0=0x0, dwReserved1=0x0, cFileName="Seyes.jtp", cAlternateFileName="")) returned 1 [0045.907] FindNextFileW (in: hFindFile=0x382000, lpFindFileData=0x31e56c | out: lpFindFileData=0x31e56c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc5739f06, ftCreationTime.dwHighDateTime=0x1ca0416, ftLastAccessTime.dwLowDateTime=0xc5739f06, ftLastAccessTime.dwHighDateTime=0x1ca0416, ftLastWriteTime.dwLowDateTime=0x48795fdf, ftLastWriteTime.dwHighDateTime=0x1c9ea0c, nFileSizeHigh=0x0, nFileSizeLow=0x1575a, dwReserved0=0x0, dwReserved1=0x0, cFileName="Shorthand.jtp", cAlternateFileName="")) returned 1 [0045.908] FindNextFileW (in: hFindFile=0x382000, lpFindFileData=0x31e56c | out: lpFindFileData=0x31e56c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc5760063, ftCreationTime.dwHighDateTime=0x1ca0416, ftLastAccessTime.dwLowDateTime=0xc5760063, ftLastAccessTime.dwHighDateTime=0x1ca0416, ftLastWriteTime.dwLowDateTime=0x48e21c07, ftLastWriteTime.dwHighDateTime=0x1c9ea0c, nFileSizeHigh=0x0, nFileSizeLow=0x7f5a, dwReserved0=0x0, dwReserved1=0x0, cFileName="To_Do_List.jtp", cAlternateFileName="")) returned 1 [0045.908] FindNextFileW (in: hFindFile=0x382000, lpFindFileData=0x31e56c | out: lpFindFileData=0x31e56c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc5760063, ftCreationTime.dwHighDateTime=0x1ca0416, ftLastAccessTime.dwLowDateTime=0xc5760063, ftLastAccessTime.dwHighDateTime=0x1ca0416, ftLastWriteTime.dwLowDateTime=0x48e21c07, ftLastWriteTime.dwHighDateTime=0x1c9ea0c, nFileSizeHigh=0x0, nFileSizeLow=0x7f5a, dwReserved0=0x0, dwReserved1=0x0, cFileName="To_Do_List.jtp", cAlternateFileName="")) returned 0 [0045.908] FindClose (in: hFindFile=0x382000 | out: hFindFile=0x382000) returned 1 [0045.908] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e7f4) returned 1 [0045.908] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e800) returned 1 [0045.908] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e8ac) returned 1 [0045.909] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Windows Mail", nBufferLength=0x105, lpBuffer=0x31e3b4, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Windows Mail", lpFilePart=0x0) returned 0x1d [0045.909] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Windows Mail\\", nBufferLength=0x105, lpBuffer=0x31e388, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Windows Mail\\", lpFilePart=0x0) returned 0x1e [0045.909] FindFirstFileW (in: lpFileName="C:\\Program Files\\Windows Mail\\*", lpFindFileData=0x31e5d4 | out: lpFindFileData=0x31e5d4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd885082, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xd996e100, ftLastAccessTime.dwHighDateTime=0x1d5e82a, ftLastWriteTime.dwLowDateTime=0xd996e100, ftLastWriteTime.dwHighDateTime=0x1d5e82a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x382000 [0045.909] FindNextFileW (in: hFindFile=0x382000, lpFindFileData=0x31e5e4 | out: lpFindFileData=0x31e5e4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd885082, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xd996e100, ftLastAccessTime.dwHighDateTime=0x1d5e82a, ftLastWriteTime.dwLowDateTime=0xd996e100, ftLastWriteTime.dwHighDateTime=0x1d5e82a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0045.909] FindNextFileW (in: hFindFile=0x382000, lpFindFileData=0x31e5e4 | out: lpFindFileData=0x31e5e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5e5f3960, ftCreationTime.dwHighDateTime=0x1d5cd59, ftLastAccessTime.dwLowDateTime=0x13cd0e90, ftLastAccessTime.dwHighDateTime=0x1d57c19, ftLastWriteTime.dwLowDateTime=0x13cd0e90, ftLastWriteTime.dwHighDateTime=0x1d57c19, nFileSizeHigh=0x0, nFileSizeLow=0x13a00, dwReserved0=0x0, dwReserved1=0x0, cFileName="coreftp.exe", cAlternateFileName="")) returned 1 [0045.909] FindNextFileW (in: hFindFile=0x382000, lpFindFileData=0x31e5e4 | out: lpFindFileData=0x31e5e4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1eb25fda, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x23ecb743, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x1eb25fda, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="en-US", cAlternateFileName="")) returned 1 [0045.909] FindNextFileW (in: hFindFile=0x382000, lpFindFileData=0x31e5e4 | out: lpFindFileData=0x31e5e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa7065be1, ftCreationTime.dwHighDateTime=0x1cb892b, ftLastAccessTime.dwLowDateTime=0xa7065be1, ftLastAccessTime.dwHighDateTime=0x1cb892b, ftLastWriteTime.dwLowDateTime=0xa70b1ea1, ftLastWriteTime.dwHighDateTime=0x1cb892b, nFileSizeHigh=0x0, nFileSizeLow=0x1fbe00, dwReserved0=0x0, dwReserved1=0x0, cFileName="msoe.dll", cAlternateFileName="")) returned 1 [0045.909] FindNextFileW (in: hFindFile=0x382000, lpFindFileData=0x31e5e4 | out: lpFindFileData=0x31e5e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xcc917413, ftCreationTime.dwHighDateTime=0x1ca0415, ftLastAccessTime.dwLowDateTime=0xcc917413, ftLastAccessTime.dwHighDateTime=0x1ca0415, ftLastWriteTime.dwLowDateTime=0x95a52df0, ftLastWriteTime.dwHighDateTime=0x1ca0422, nFileSizeHigh=0x0, nFileSizeLow=0x2b4a00, dwReserved0=0x0, dwReserved1=0x0, cFileName="MSOERES.dll", cAlternateFileName="")) returned 1 [0045.909] FindNextFileW (in: hFindFile=0x382000, lpFindFileData=0x31e5e4 | out: lpFindFileData=0x31e5e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa70b1ea1, ftCreationTime.dwHighDateTime=0x1cb892b, ftLastAccessTime.dwLowDateTime=0xa70b1ea1, ftLastAccessTime.dwHighDateTime=0x1cb892b, ftLastWriteTime.dwLowDateTime=0xa70b1ea1, ftLastWriteTime.dwHighDateTime=0x1cb892b, nFileSizeHigh=0x0, nFileSizeLow=0x16c00, dwReserved0=0x0, dwReserved1=0x0, cFileName="oeimport.dll", cAlternateFileName="")) returned 1 [0045.909] FindNextFileW (in: hFindFile=0x382000, lpFindFileData=0x31e5e4 | out: lpFindFileData=0x31e5e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x447884a0, ftCreationTime.dwHighDateTime=0x1d5ab50, ftLastAccessTime.dwLowDateTime=0x6b4eb120, ftLastAccessTime.dwHighDateTime=0x1d5b2bd, ftLastWriteTime.dwLowDateTime=0x6b4eb120, ftLastWriteTime.dwHighDateTime=0x1d5b2bd, nFileSizeHigh=0x0, nFileSizeLow=0x13a00, dwReserved0=0x0, dwReserved1=0x0, cFileName="unlocktribetrain.exe", cAlternateFileName="UNLOCK~1.EXE")) returned 1 [0045.910] FindNextFileW (in: hFindFile=0x382000, lpFindFileData=0x31e5e4 | out: lpFindFileData=0x31e5e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9d1f425d, ftCreationTime.dwHighDateTime=0x1cb892b, ftLastAccessTime.dwLowDateTime=0x9d1f425d, ftLastAccessTime.dwHighDateTime=0x1cb892b, ftLastWriteTime.dwLowDateTime=0x9d21a3bd, ftLastWriteTime.dwHighDateTime=0x1cb892b, nFileSizeHigh=0x0, nFileSizeLow=0x7e000, dwReserved0=0x0, dwReserved1=0x0, cFileName="wab.exe", cAlternateFileName="")) returned 1 [0045.910] FindNextFileW (in: hFindFile=0x382000, lpFindFileData=0x31e5e4 | out: lpFindFileData=0x31e5e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xbfa72e7a, ftCreationTime.dwHighDateTime=0x1ca0415, ftLastAccessTime.dwLowDateTime=0xbfa72e7a, ftLastAccessTime.dwHighDateTime=0x1ca0415, ftLastWriteTime.dwLowDateTime=0x4556f160, ftLastWriteTime.dwHighDateTime=0x1ca0424, nFileSizeHigh=0x0, nFileSizeLow=0x8a00, dwReserved0=0x0, dwReserved1=0x0, cFileName="wabfind.dll", cAlternateFileName="")) returned 1 [0045.910] FindNextFileW (in: hFindFile=0x382000, lpFindFileData=0x31e5e4 | out: lpFindFileData=0x31e5e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xbfddedd5, ftCreationTime.dwHighDateTime=0x1ca0415, ftLastAccessTime.dwLowDateTime=0xbfddedd5, ftLastAccessTime.dwHighDateTime=0x1ca0415, ftLastWriteTime.dwLowDateTime=0x4556f160, ftLastWriteTime.dwHighDateTime=0x1ca0424, nFileSizeHigh=0x0, nFileSizeLow=0xc400, dwReserved0=0x0, dwReserved1=0x0, cFileName="wabimp.dll", cAlternateFileName="")) returned 1 [0045.910] FindNextFileW (in: hFindFile=0x382000, lpFindFileData=0x31e5e4 | out: lpFindFileData=0x31e5e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xbf9da906, ftCreationTime.dwHighDateTime=0x1ca0415, ftLastAccessTime.dwLowDateTime=0xbf9da906, ftLastAccessTime.dwHighDateTime=0x1ca0415, ftLastWriteTime.dwLowDateTime=0xfa86dfb0, ftLastWriteTime.dwHighDateTime=0x1ca0423, nFileSizeHigh=0x0, nFileSizeLow=0x10800, dwReserved0=0x0, dwReserved1=0x0, cFileName="wabmig.exe", cAlternateFileName="")) returned 1 [0045.910] FindNextFileW (in: hFindFile=0x382000, lpFindFileData=0x31e5e4 | out: lpFindFileData=0x31e5e4*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0xc2062a1d, ftCreationTime.dwHighDateTime=0x1ca0415, ftLastAccessTime.dwLowDateTime=0xc2062a1d, ftLastAccessTime.dwHighDateTime=0x1ca0415, ftLastWriteTime.dwLowDateTime=0xfbe97cf0, ftLastWriteTime.dwHighDateTime=0x1ca0423, nFileSizeHigh=0x0, nFileSizeLow=0x61600, dwReserved0=0x0, dwReserved1=0x0, cFileName="WinMail.exe", cAlternateFileName="")) returned 1 [0045.910] FindNextFileW (in: hFindFile=0x382000, lpFindFileData=0x31e5e4 | out: lpFindFileData=0x31e5e4*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0045.910] FindClose (in: hFindFile=0x382000 | out: hFindFile=0x382000) returned 1 [0045.910] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e86c) returned 1 [0045.910] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e878) returned 1 [0045.910] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e8ac) returned 1 [0045.910] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Windows Mail", nBufferLength=0x105, lpBuffer=0x31e3b4, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Windows Mail", lpFilePart=0x0) returned 0x1d [0045.910] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Windows Mail\\", nBufferLength=0x105, lpBuffer=0x31e388, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Windows Mail\\", lpFilePart=0x0) returned 0x1e [0045.910] FindFirstFileW (in: lpFileName="C:\\Program Files\\Windows Mail\\*", lpFindFileData=0x31e5d4 | out: lpFindFileData=0x31e5d4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd885082, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xd996e100, ftLastAccessTime.dwHighDateTime=0x1d5e82a, ftLastWriteTime.dwLowDateTime=0xd996e100, ftLastWriteTime.dwHighDateTime=0x1d5e82a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x382000 [0045.910] FindNextFileW (in: hFindFile=0x382000, lpFindFileData=0x31e5e4 | out: lpFindFileData=0x31e5e4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd885082, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xd996e100, ftLastAccessTime.dwHighDateTime=0x1d5e82a, ftLastWriteTime.dwLowDateTime=0xd996e100, ftLastWriteTime.dwHighDateTime=0x1d5e82a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0045.911] FindNextFileW (in: hFindFile=0x382000, lpFindFileData=0x31e5e4 | out: lpFindFileData=0x31e5e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5e5f3960, ftCreationTime.dwHighDateTime=0x1d5cd59, ftLastAccessTime.dwLowDateTime=0x13cd0e90, ftLastAccessTime.dwHighDateTime=0x1d57c19, ftLastWriteTime.dwLowDateTime=0x13cd0e90, ftLastWriteTime.dwHighDateTime=0x1d57c19, nFileSizeHigh=0x0, nFileSizeLow=0x13a00, dwReserved0=0x0, dwReserved1=0x0, cFileName="coreftp.exe", cAlternateFileName="")) returned 1 [0045.911] FindNextFileW (in: hFindFile=0x382000, lpFindFileData=0x31e5e4 | out: lpFindFileData=0x31e5e4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1eb25fda, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x23ecb743, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x1eb25fda, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="en-US", cAlternateFileName="")) returned 1 [0045.911] FindNextFileW (in: hFindFile=0x382000, lpFindFileData=0x31e5e4 | out: lpFindFileData=0x31e5e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa7065be1, ftCreationTime.dwHighDateTime=0x1cb892b, ftLastAccessTime.dwLowDateTime=0xa7065be1, ftLastAccessTime.dwHighDateTime=0x1cb892b, ftLastWriteTime.dwLowDateTime=0xa70b1ea1, ftLastWriteTime.dwHighDateTime=0x1cb892b, nFileSizeHigh=0x0, nFileSizeLow=0x1fbe00, dwReserved0=0x0, dwReserved1=0x0, cFileName="msoe.dll", cAlternateFileName="")) returned 1 [0045.911] FindNextFileW (in: hFindFile=0x382000, lpFindFileData=0x31e5e4 | out: lpFindFileData=0x31e5e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xcc917413, ftCreationTime.dwHighDateTime=0x1ca0415, ftLastAccessTime.dwLowDateTime=0xcc917413, ftLastAccessTime.dwHighDateTime=0x1ca0415, ftLastWriteTime.dwLowDateTime=0x95a52df0, ftLastWriteTime.dwHighDateTime=0x1ca0422, nFileSizeHigh=0x0, nFileSizeLow=0x2b4a00, dwReserved0=0x0, dwReserved1=0x0, cFileName="MSOERES.dll", cAlternateFileName="")) returned 1 [0045.911] FindNextFileW (in: hFindFile=0x382000, lpFindFileData=0x31e5e4 | out: lpFindFileData=0x31e5e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa70b1ea1, ftCreationTime.dwHighDateTime=0x1cb892b, ftLastAccessTime.dwLowDateTime=0xa70b1ea1, ftLastAccessTime.dwHighDateTime=0x1cb892b, ftLastWriteTime.dwLowDateTime=0xa70b1ea1, ftLastWriteTime.dwHighDateTime=0x1cb892b, nFileSizeHigh=0x0, nFileSizeLow=0x16c00, dwReserved0=0x0, dwReserved1=0x0, cFileName="oeimport.dll", cAlternateFileName="")) returned 1 [0045.911] FindNextFileW (in: hFindFile=0x382000, lpFindFileData=0x31e5e4 | out: lpFindFileData=0x31e5e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x447884a0, ftCreationTime.dwHighDateTime=0x1d5ab50, ftLastAccessTime.dwLowDateTime=0x6b4eb120, ftLastAccessTime.dwHighDateTime=0x1d5b2bd, ftLastWriteTime.dwLowDateTime=0x6b4eb120, ftLastWriteTime.dwHighDateTime=0x1d5b2bd, nFileSizeHigh=0x0, nFileSizeLow=0x13a00, dwReserved0=0x0, dwReserved1=0x0, cFileName="unlocktribetrain.exe", cAlternateFileName="UNLOCK~1.EXE")) returned 1 [0045.911] FindNextFileW (in: hFindFile=0x382000, lpFindFileData=0x31e5e4 | out: lpFindFileData=0x31e5e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9d1f425d, ftCreationTime.dwHighDateTime=0x1cb892b, ftLastAccessTime.dwLowDateTime=0x9d1f425d, ftLastAccessTime.dwHighDateTime=0x1cb892b, ftLastWriteTime.dwLowDateTime=0x9d21a3bd, ftLastWriteTime.dwHighDateTime=0x1cb892b, nFileSizeHigh=0x0, nFileSizeLow=0x7e000, dwReserved0=0x0, dwReserved1=0x0, cFileName="wab.exe", cAlternateFileName="")) returned 1 [0045.912] FindNextFileW (in: hFindFile=0x382000, lpFindFileData=0x31e5e4 | out: lpFindFileData=0x31e5e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xbfa72e7a, ftCreationTime.dwHighDateTime=0x1ca0415, ftLastAccessTime.dwLowDateTime=0xbfa72e7a, ftLastAccessTime.dwHighDateTime=0x1ca0415, ftLastWriteTime.dwLowDateTime=0x4556f160, ftLastWriteTime.dwHighDateTime=0x1ca0424, nFileSizeHigh=0x0, nFileSizeLow=0x8a00, dwReserved0=0x0, dwReserved1=0x0, cFileName="wabfind.dll", cAlternateFileName="")) returned 1 [0045.912] FindNextFileW (in: hFindFile=0x382000, lpFindFileData=0x31e5e4 | out: lpFindFileData=0x31e5e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xbfddedd5, ftCreationTime.dwHighDateTime=0x1ca0415, ftLastAccessTime.dwLowDateTime=0xbfddedd5, ftLastAccessTime.dwHighDateTime=0x1ca0415, ftLastWriteTime.dwLowDateTime=0x4556f160, ftLastWriteTime.dwHighDateTime=0x1ca0424, nFileSizeHigh=0x0, nFileSizeLow=0xc400, dwReserved0=0x0, dwReserved1=0x0, cFileName="wabimp.dll", cAlternateFileName="")) returned 1 [0045.912] FindNextFileW (in: hFindFile=0x382000, lpFindFileData=0x31e5e4 | out: lpFindFileData=0x31e5e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xbf9da906, ftCreationTime.dwHighDateTime=0x1ca0415, ftLastAccessTime.dwLowDateTime=0xbf9da906, ftLastAccessTime.dwHighDateTime=0x1ca0415, ftLastWriteTime.dwLowDateTime=0xfa86dfb0, ftLastWriteTime.dwHighDateTime=0x1ca0423, nFileSizeHigh=0x0, nFileSizeLow=0x10800, dwReserved0=0x0, dwReserved1=0x0, cFileName="wabmig.exe", cAlternateFileName="")) returned 1 [0045.912] FindNextFileW (in: hFindFile=0x382000, lpFindFileData=0x31e5e4 | out: lpFindFileData=0x31e5e4*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0xc2062a1d, ftCreationTime.dwHighDateTime=0x1ca0415, ftLastAccessTime.dwLowDateTime=0xc2062a1d, ftLastAccessTime.dwHighDateTime=0x1ca0415, ftLastWriteTime.dwLowDateTime=0xfbe97cf0, ftLastWriteTime.dwHighDateTime=0x1ca0423, nFileSizeHigh=0x0, nFileSizeLow=0x61600, dwReserved0=0x0, dwReserved1=0x0, cFileName="WinMail.exe", cAlternateFileName="")) returned 1 [0045.912] FindNextFileW (in: hFindFile=0x382000, lpFindFileData=0x31e5e4 | out: lpFindFileData=0x31e5e4*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0xc2062a1d, ftCreationTime.dwHighDateTime=0x1ca0415, ftLastAccessTime.dwLowDateTime=0xc2062a1d, ftLastAccessTime.dwHighDateTime=0x1ca0415, ftLastWriteTime.dwLowDateTime=0xfbe97cf0, ftLastWriteTime.dwHighDateTime=0x1ca0423, nFileSizeHigh=0x0, nFileSizeLow=0x61600, dwReserved0=0x0, dwReserved1=0x0, cFileName="WinMail.exe", cAlternateFileName="")) returned 0 [0045.912] FindClose (in: hFindFile=0x382000 | out: hFindFile=0x382000) returned 1 [0045.912] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e86c) returned 1 [0045.912] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e878) returned 1 [0045.912] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e834) returned 1 [0045.912] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Windows Mail\\en-US", nBufferLength=0x105, lpBuffer=0x31e33c, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Windows Mail\\en-US", lpFilePart=0x0) returned 0x23 [0045.912] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Windows Mail\\en-US\\", nBufferLength=0x105, lpBuffer=0x31e310, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Windows Mail\\en-US\\", lpFilePart=0x0) returned 0x24 [0045.912] FindFirstFileW (in: lpFileName="C:\\Program Files\\Windows Mail\\en-US\\*", lpFindFileData=0x31e55c | out: lpFindFileData=0x31e55c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1eb25fda, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x23ecb743, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x1eb25fda, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x382000 [0045.913] FindNextFileW (in: hFindFile=0x382000, lpFindFileData=0x31e56c | out: lpFindFileData=0x31e56c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1eb25fda, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x23ecb743, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x1eb25fda, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0045.913] FindNextFileW (in: hFindFile=0x382000, lpFindFileData=0x31e56c | out: lpFindFileData=0x31e56c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe421d16, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0xe874c0b, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0xe421d16, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x7e800, dwReserved0=0x0, dwReserved1=0x0, cFileName="msoeres.dll.mui", cAlternateFileName="")) returned 1 [0045.913] FindNextFileW (in: hFindFile=0x382000, lpFindFileData=0x31e56c | out: lpFindFileData=0x31e56c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xdcd37ad, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0xe067905, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0xdcd37ad, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x1600, dwReserved0=0x0, dwReserved1=0x0, cFileName="WinMail.exe.mui", cAlternateFileName="")) returned 1 [0045.913] FindNextFileW (in: hFindFile=0x382000, lpFindFileData=0x31e56c | out: lpFindFileData=0x31e56c*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0045.913] FindClose (in: hFindFile=0x382000 | out: hFindFile=0x382000) returned 1 [0045.913] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e7f4) returned 1 [0045.913] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e800) returned 1 [0045.913] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e834) returned 1 [0045.913] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Windows Mail\\en-US", nBufferLength=0x105, lpBuffer=0x31e33c, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Windows Mail\\en-US", lpFilePart=0x0) returned 0x23 [0045.913] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Windows Mail\\en-US\\", nBufferLength=0x105, lpBuffer=0x31e310, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Windows Mail\\en-US\\", lpFilePart=0x0) returned 0x24 [0045.913] FindFirstFileW (in: lpFileName="C:\\Program Files\\Windows Mail\\en-US\\*", lpFindFileData=0x31e55c | out: lpFindFileData=0x31e55c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1eb25fda, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x23ecb743, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x1eb25fda, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x382000 [0045.913] FindNextFileW (in: hFindFile=0x382000, lpFindFileData=0x31e56c | out: lpFindFileData=0x31e56c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1eb25fda, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x23ecb743, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x1eb25fda, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0045.913] FindNextFileW (in: hFindFile=0x382000, lpFindFileData=0x31e56c | out: lpFindFileData=0x31e56c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe421d16, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0xe874c0b, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0xe421d16, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x7e800, dwReserved0=0x0, dwReserved1=0x0, cFileName="msoeres.dll.mui", cAlternateFileName="")) returned 1 [0045.914] FindNextFileW (in: hFindFile=0x382000, lpFindFileData=0x31e56c | out: lpFindFileData=0x31e56c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xdcd37ad, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0xe067905, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0xdcd37ad, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x1600, dwReserved0=0x0, dwReserved1=0x0, cFileName="WinMail.exe.mui", cAlternateFileName="")) returned 1 [0045.914] FindNextFileW (in: hFindFile=0x382000, lpFindFileData=0x31e56c | out: lpFindFileData=0x31e56c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xdcd37ad, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0xe067905, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0xdcd37ad, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x1600, dwReserved0=0x0, dwReserved1=0x0, cFileName="WinMail.exe.mui", cAlternateFileName="")) returned 0 [0045.914] FindClose (in: hFindFile=0x382000 | out: hFindFile=0x382000) returned 1 [0045.914] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e7f4) returned 1 [0045.914] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e800) returned 1 [0045.914] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e8ac) returned 1 [0045.914] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Windows Media Player", nBufferLength=0x105, lpBuffer=0x31e3b4, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Windows Media Player", lpFilePart=0x0) returned 0x25 [0045.914] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Windows Media Player\\", nBufferLength=0x105, lpBuffer=0x31e388, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Windows Media Player\\", lpFilePart=0x0) returned 0x26 [0045.914] FindFirstFileW (in: lpFileName="C:\\Program Files\\Windows Media Player\\*", lpFindFileData=0x31e5d4 | out: lpFindFileData=0x31e5d4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x80020c30, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0xd9994260, ftLastAccessTime.dwHighDateTime=0x1d5e82a, ftLastWriteTime.dwLowDateTime=0xd9994260, ftLastWriteTime.dwHighDateTime=0x1d5e82a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x382000 [0045.914] FindNextFileW (in: hFindFile=0x382000, lpFindFileData=0x31e5e4 | out: lpFindFileData=0x31e5e4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x80020c30, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0xd9994260, ftLastAccessTime.dwHighDateTime=0x1d5e82a, ftLastWriteTime.dwLowDateTime=0xd9994260, ftLastWriteTime.dwHighDateTime=0x1d5e82a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0045.914] FindNextFileW (in: hFindFile=0x382000, lpFindFileData=0x31e5e4 | out: lpFindFileData=0x31e5e4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1ead9a68, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x21ccca7f, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x1ead9a68, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="en-US", cAlternateFileName="")) returned 1 [0045.914] FindNextFileW (in: hFindFile=0x382000, lpFindFileData=0x31e5e4 | out: lpFindFileData=0x31e5e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2ab73560, ftCreationTime.dwHighDateTime=0x1d5a426, ftLastAccessTime.dwLowDateTime=0x3f0a40d0, ftLastAccessTime.dwHighDateTime=0x1d5697e, ftLastWriteTime.dwLowDateTime=0x3f0a40d0, ftLastWriteTime.dwHighDateTime=0x1d5697e, nFileSizeHigh=0x0, nFileSizeLow=0x13a00, dwReserved0=0x0, dwReserved1=0x0, cFileName="filezilla.exe", cAlternateFileName="FILEZI~1.EXE")) returned 1 [0045.915] FindNextFileW (in: hFindFile=0x382000, lpFindFileData=0x31e5e4 | out: lpFindFileData=0x31e5e4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x80020c30, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x80020c30, ftLastAccessTime.dwHighDateTime=0x1ca0444, ftLastWriteTime.dwLowDateTime=0x80020c30, ftLastWriteTime.dwHighDateTime=0x1ca0444, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Icons", cAlternateFileName="")) returned 1 [0045.915] FindNextFileW (in: hFindFile=0x382000, lpFindFileData=0x31e5e4 | out: lpFindFileData=0x31e5e4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x80020c30, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x80471418, ftLastAccessTime.dwHighDateTime=0x1ca0444, ftLastWriteTime.dwLowDateTime=0x80471418, ftLastWriteTime.dwHighDateTime=0x1ca0444, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Media Renderer", cAlternateFileName="MEDIAR~1")) returned 1 [0045.915] FindNextFileW (in: hFindFile=0x382000, lpFindFileData=0x31e5e4 | out: lpFindFileData=0x31e5e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6ba168ab, ftCreationTime.dwHighDateTime=0x1ca0419, ftLastAccessTime.dwLowDateTime=0x6ba168ab, ftLastAccessTime.dwHighDateTime=0x1ca0419, ftLastWriteTime.dwLowDateTime=0x3401fe00, ftLastWriteTime.dwHighDateTime=0x1ca0424, nFileSizeHigh=0x0, nFileSizeLow=0x47a00, dwReserved0=0x0, dwReserved1=0x0, cFileName="mpvis.DLL", cAlternateFileName="")) returned 1 [0045.915] FindNextFileW (in: hFindFile=0x382000, lpFindFileData=0x31e5e4 | out: lpFindFileData=0x31e5e4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x80020c30, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x8044b2b8, ftLastAccessTime.dwHighDateTime=0x1ca0444, ftLastWriteTime.dwLowDateTime=0x8044b2b8, ftLastWriteTime.dwHighDateTime=0x1ca0444, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Network Sharing", cAlternateFileName="NETWOR~1")) returned 1 [0045.915] FindNextFileW (in: hFindFile=0x382000, lpFindFileData=0x31e5e4 | out: lpFindFileData=0x31e5e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa925159f, ftCreationTime.dwHighDateTime=0x1cb892b, ftLastAccessTime.dwLowDateTime=0xa925159f, ftLastAccessTime.dwHighDateTime=0x1cb892b, ftLastWriteTime.dwLowDateTime=0xa9277700, ftLastWriteTime.dwHighDateTime=0x1cb892b, nFileSizeHigh=0x0, nFileSizeLow=0x1fb600, dwReserved0=0x0, dwReserved1=0x0, cFileName="setup_wm.exe", cAlternateFileName="")) returned 1 [0045.915] FindNextFileW (in: hFindFile=0x382000, lpFindFileData=0x31e5e4 | out: lpFindFileData=0x31e5e4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x80046d91, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x9874cd8b, ftLastAccessTime.dwHighDateTime=0x1cb892c, ftLastWriteTime.dwLowDateTime=0x9874cd8b, ftLastWriteTime.dwHighDateTime=0x1cb892c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Skins", cAlternateFileName="")) returned 1 [0045.915] FindNextFileW (in: hFindFile=0x382000, lpFindFileData=0x31e5e4 | out: lpFindFileData=0x31e5e4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x80020c30, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x80020c30, ftLastAccessTime.dwHighDateTime=0x1ca0444, ftLastWriteTime.dwLowDateTime=0x80020c30, ftLastWriteTime.dwHighDateTime=0x1ca0444, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Visualizations", cAlternateFileName="VISUAL~1")) returned 1 [0045.915] FindNextFileW (in: hFindFile=0x382000, lpFindFileData=0x31e5e4 | out: lpFindFileData=0x31e5e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8ee55f9, ftCreationTime.dwHighDateTime=0x1cb892b, ftLastAccessTime.dwLowDateTime=0xa8ee55f9, ftLastAccessTime.dwHighDateTime=0x1cb892b, ftLastWriteTime.dwLowDateTime=0xa8ee55f9, ftLastWriteTime.dwHighDateTime=0x1cb892b, nFileSizeHigh=0x0, nFileSizeLow=0x40400, dwReserved0=0x0, dwReserved1=0x0, cFileName="wmlaunch.exe", cAlternateFileName="")) returned 1 [0045.915] FindNextFileW (in: hFindFile=0x382000, lpFindFileData=0x31e5e4 | out: lpFindFileData=0x31e5e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8f0b759, ftCreationTime.dwHighDateTime=0x1cb892b, ftLastAccessTime.dwLowDateTime=0xa8f0b759, ftLastAccessTime.dwHighDateTime=0x1cb892b, ftLastWriteTime.dwLowDateTime=0xa8f0b759, ftLastWriteTime.dwHighDateTime=0x1cb892b, nFileSizeHigh=0x0, nFileSizeLow=0x19000, dwReserved0=0x0, dwReserved1=0x0, cFileName="wmpconfig.exe", cAlternateFileName="")) returned 1 [0045.915] FindNextFileW (in: hFindFile=0x382000, lpFindFileData=0x31e5e4 | out: lpFindFileData=0x31e5e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb0af919e, ftCreationTime.dwHighDateTime=0x1cb892b, ftLastAccessTime.dwLowDateTime=0xb0af919e, ftLastAccessTime.dwHighDateTime=0x1cb892b, ftLastWriteTime.dwLowDateTime=0xb0b1f2fe, ftLastWriteTime.dwHighDateTime=0x1cb892b, nFileSizeHigh=0x0, nFileSizeLow=0x128200, dwReserved0=0x0, dwReserved1=0x0, cFileName="WMPDMC.exe", cAlternateFileName="")) returned 1 [0045.915] FindNextFileW (in: hFindFile=0x382000, lpFindFileData=0x31e5e4 | out: lpFindFileData=0x31e5e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x52b88470, ftCreationTime.dwHighDateTime=0x1ca0419, ftLastAccessTime.dwLowDateTime=0x52b88470, ftLastAccessTime.dwHighDateTime=0x1ca0419, ftLastWriteTime.dwLowDateTime=0x4623b740, ftLastWriteTime.dwHighDateTime=0x1ca0424, nFileSizeHigh=0x0, nFileSizeLow=0x68200, dwReserved0=0x0, dwReserved1=0x0, cFileName="WMPDMCCore.dll", cAlternateFileName="")) returned 1 [0045.916] FindNextFileW (in: hFindFile=0x382000, lpFindFileData=0x31e5e4 | out: lpFindFileData=0x31e5e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5b1930c1, ftCreationTime.dwHighDateTime=0x1ca0419, ftLastAccessTime.dwLowDateTime=0x5b1930c1, ftLastAccessTime.dwHighDateTime=0x1ca0419, ftLastWriteTime.dwLowDateTime=0xfdb75f20, ftLastWriteTime.dwHighDateTime=0x1ca0423, nFileSizeHigh=0x0, nFileSizeLow=0x6c00, dwReserved0=0x0, dwReserved1=0x0, cFileName="wmpenc.exe", cAlternateFileName="")) returned 1 [0045.916] FindNextFileW (in: hFindFile=0x382000, lpFindFileData=0x31e5e4 | out: lpFindFileData=0x31e5e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8f318ba, ftCreationTime.dwHighDateTime=0x1cb892b, ftLastAccessTime.dwLowDateTime=0xa8f318ba, ftLastAccessTime.dwHighDateTime=0x1cb892b, ftLastWriteTime.dwLowDateTime=0xa8f318ba, ftLastWriteTime.dwHighDateTime=0x1cb892b, nFileSizeHigh=0x0, nFileSizeLow=0x28e00, dwReserved0=0x0, dwReserved1=0x0, cFileName="wmplayer.exe", cAlternateFileName="")) returned 1 [0045.916] FindNextFileW (in: hFindFile=0x382000, lpFindFileData=0x31e5e4 | out: lpFindFileData=0x31e5e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6431260b, ftCreationTime.dwHighDateTime=0x1ca0419, ftLastAccessTime.dwLowDateTime=0x6431260b, ftLastAccessTime.dwHighDateTime=0x1ca0419, ftLastWriteTime.dwLowDateTime=0x462abc20, ftLastWriteTime.dwHighDateTime=0x1ca0424, nFileSizeHigh=0x0, nFileSizeLow=0x28000, dwReserved0=0x0, dwReserved1=0x0, cFileName="WMPMediaSharing.dll", cAlternateFileName="")) returned 1 [0045.916] FindNextFileW (in: hFindFile=0x382000, lpFindFileData=0x31e5e4 | out: lpFindFileData=0x31e5e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb0b4545e, ftCreationTime.dwHighDateTime=0x1cb892b, ftLastAccessTime.dwLowDateTime=0xb0b4545e, ftLastAccessTime.dwHighDateTime=0x1cb892b, ftLastWriteTime.dwLowDateTime=0xb0b6b5be, ftLastWriteTime.dwHighDateTime=0x1cb892b, nFileSizeHigh=0x0, nFileSizeLow=0x174600, dwReserved0=0x0, dwReserved1=0x0, cFileName="wmpnetwk.exe", cAlternateFileName="")) returned 1 [0045.916] FindNextFileW (in: hFindFile=0x382000, lpFindFileData=0x31e5e4 | out: lpFindFileData=0x31e5e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x66334c83, ftCreationTime.dwHighDateTime=0x1ca0419, ftLastAccessTime.dwLowDateTime=0x66334c83, ftLastAccessTime.dwHighDateTime=0x1ca0419, ftLastWriteTime.dwLowDateTime=0xfe0cf930, ftLastWriteTime.dwHighDateTime=0x1ca0423, nFileSizeHigh=0x0, nFileSizeLow=0x11400, dwReserved0=0x0, dwReserved1=0x0, cFileName="wmpnscfg.exe", cAlternateFileName="")) returned 1 [0045.916] FindNextFileW (in: hFindFile=0x382000, lpFindFileData=0x31e5e4 | out: lpFindFileData=0x31e5e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x66e8341f, ftCreationTime.dwHighDateTime=0x1ca0419, ftLastAccessTime.dwLowDateTime=0x66e8341f, ftLastAccessTime.dwHighDateTime=0x1ca0419, ftLastWriteTime.dwLowDateTime=0x462d2d20, ftLastWriteTime.dwHighDateTime=0x1ca0424, nFileSizeHigh=0x0, nFileSizeLow=0x87200, dwReserved0=0x0, dwReserved1=0x0, cFileName="wmpnssci.dll", cAlternateFileName="")) returned 1 [0045.916] FindNextFileW (in: hFindFile=0x382000, lpFindFileData=0x31e5e4 | out: lpFindFileData=0x31e5e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4ff32e2e, ftCreationTime.dwHighDateTime=0x1ca0419, ftLastAccessTime.dwLowDateTime=0x4ff32e2e, ftLastAccessTime.dwHighDateTime=0x1ca0419, ftLastWriteTime.dwLowDateTime=0x462d2d20, ftLastWriteTime.dwHighDateTime=0x1ca0424, nFileSizeHigh=0x0, nFileSizeLow=0x8800, dwReserved0=0x0, dwReserved1=0x0, cFileName="WMPNSSUI.dll", cAlternateFileName="")) returned 1 [0045.916] FindNextFileW (in: hFindFile=0x382000, lpFindFileData=0x31e5e4 | out: lpFindFileData=0x31e5e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5dde8703, ftCreationTime.dwHighDateTime=0x1ca0419, ftLastAccessTime.dwLowDateTime=0x5dde8703, ftLastAccessTime.dwHighDateTime=0x1ca0419, ftLastWriteTime.dwLowDateTime=0xfe11b420, ftLastWriteTime.dwHighDateTime=0x1ca0423, nFileSizeHigh=0x0, nFileSizeLow=0x12800, dwReserved0=0x0, dwReserved1=0x0, cFileName="wmprph.exe", cAlternateFileName="")) returned 1 [0045.916] FindNextFileW (in: hFindFile=0x382000, lpFindFileData=0x31e5e4 | out: lpFindFileData=0x31e5e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8f318ba, ftCreationTime.dwHighDateTime=0x1cb892b, ftLastAccessTime.dwLowDateTime=0xa8f318ba, ftLastAccessTime.dwHighDateTime=0x1cb892b, ftLastWriteTime.dwLowDateTime=0xa8f318ba, ftLastWriteTime.dwHighDateTime=0x1cb892b, nFileSizeHigh=0x0, nFileSizeLow=0x19200, dwReserved0=0x0, dwReserved1=0x0, cFileName="wmpshare.exe", cAlternateFileName="")) returned 1 [0045.916] FindNextFileW (in: hFindFile=0x382000, lpFindFileData=0x31e5e4 | out: lpFindFileData=0x31e5e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x639ff2e2, ftCreationTime.dwHighDateTime=0x1ca0419, ftLastAccessTime.dwLowDateTime=0x639ff2e2, ftLastAccessTime.dwHighDateTime=0x1ca0419, ftLastWriteTime.dwLowDateTime=0xfe2737f0, ftLastWriteTime.dwHighDateTime=0x1ca0423, nFileSizeHigh=0x0, nFileSizeLow=0x28800, dwReserved0=0x0, dwReserved1=0x0, cFileName="WMPSideShowGadget.exe", cAlternateFileName="")) returned 1 [0045.916] FindNextFileW (in: hFindFile=0x382000, lpFindFileData=0x31e5e4 | out: lpFindFileData=0x31e5e4*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0045.916] FindClose (in: hFindFile=0x382000 | out: hFindFile=0x382000) returned 1 [0045.916] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e86c) returned 1 [0045.916] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e878) returned 1 [0045.916] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e8ac) returned 1 [0045.916] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Windows Media Player", nBufferLength=0x105, lpBuffer=0x31e3b4, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Windows Media Player", lpFilePart=0x0) returned 0x25 [0045.916] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Windows Media Player\\", nBufferLength=0x105, lpBuffer=0x31e388, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Windows Media Player\\", lpFilePart=0x0) returned 0x26 [0045.917] FindFirstFileW (in: lpFileName="C:\\Program Files\\Windows Media Player\\*", lpFindFileData=0x31e5d4 | out: lpFindFileData=0x31e5d4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x80020c30, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0xd9994260, ftLastAccessTime.dwHighDateTime=0x1d5e82a, ftLastWriteTime.dwLowDateTime=0xd9994260, ftLastWriteTime.dwHighDateTime=0x1d5e82a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x382000 [0045.917] FindNextFileW (in: hFindFile=0x382000, lpFindFileData=0x31e5e4 | out: lpFindFileData=0x31e5e4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x80020c30, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0xd9994260, ftLastAccessTime.dwHighDateTime=0x1d5e82a, ftLastWriteTime.dwLowDateTime=0xd9994260, ftLastWriteTime.dwHighDateTime=0x1d5e82a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0045.917] FindNextFileW (in: hFindFile=0x382000, lpFindFileData=0x31e5e4 | out: lpFindFileData=0x31e5e4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1ead9a68, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x21ccca7f, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x1ead9a68, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="en-US", cAlternateFileName="")) returned 1 [0045.917] FindNextFileW (in: hFindFile=0x382000, lpFindFileData=0x31e5e4 | out: lpFindFileData=0x31e5e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2ab73560, ftCreationTime.dwHighDateTime=0x1d5a426, ftLastAccessTime.dwLowDateTime=0x3f0a40d0, ftLastAccessTime.dwHighDateTime=0x1d5697e, ftLastWriteTime.dwLowDateTime=0x3f0a40d0, ftLastWriteTime.dwHighDateTime=0x1d5697e, nFileSizeHigh=0x0, nFileSizeLow=0x13a00, dwReserved0=0x0, dwReserved1=0x0, cFileName="filezilla.exe", cAlternateFileName="FILEZI~1.EXE")) returned 1 [0045.917] FindNextFileW (in: hFindFile=0x382000, lpFindFileData=0x31e5e4 | out: lpFindFileData=0x31e5e4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x80020c30, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x80020c30, ftLastAccessTime.dwHighDateTime=0x1ca0444, ftLastWriteTime.dwLowDateTime=0x80020c30, ftLastWriteTime.dwHighDateTime=0x1ca0444, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Icons", cAlternateFileName="")) returned 1 [0045.917] FindNextFileW (in: hFindFile=0x382000, lpFindFileData=0x31e5e4 | out: lpFindFileData=0x31e5e4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x80020c30, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x80471418, ftLastAccessTime.dwHighDateTime=0x1ca0444, ftLastWriteTime.dwLowDateTime=0x80471418, ftLastWriteTime.dwHighDateTime=0x1ca0444, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Media Renderer", cAlternateFileName="MEDIAR~1")) returned 1 [0045.917] FindNextFileW (in: hFindFile=0x382000, lpFindFileData=0x31e5e4 | out: lpFindFileData=0x31e5e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6ba168ab, ftCreationTime.dwHighDateTime=0x1ca0419, ftLastAccessTime.dwLowDateTime=0x6ba168ab, ftLastAccessTime.dwHighDateTime=0x1ca0419, ftLastWriteTime.dwLowDateTime=0x3401fe00, ftLastWriteTime.dwHighDateTime=0x1ca0424, nFileSizeHigh=0x0, nFileSizeLow=0x47a00, dwReserved0=0x0, dwReserved1=0x0, cFileName="mpvis.DLL", cAlternateFileName="")) returned 1 [0045.917] FindNextFileW (in: hFindFile=0x382000, lpFindFileData=0x31e5e4 | out: lpFindFileData=0x31e5e4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x80020c30, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x8044b2b8, ftLastAccessTime.dwHighDateTime=0x1ca0444, ftLastWriteTime.dwLowDateTime=0x8044b2b8, ftLastWriteTime.dwHighDateTime=0x1ca0444, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Network Sharing", cAlternateFileName="NETWOR~1")) returned 1 [0045.917] FindNextFileW (in: hFindFile=0x382000, lpFindFileData=0x31e5e4 | out: lpFindFileData=0x31e5e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa925159f, ftCreationTime.dwHighDateTime=0x1cb892b, ftLastAccessTime.dwLowDateTime=0xa925159f, ftLastAccessTime.dwHighDateTime=0x1cb892b, ftLastWriteTime.dwLowDateTime=0xa9277700, ftLastWriteTime.dwHighDateTime=0x1cb892b, nFileSizeHigh=0x0, nFileSizeLow=0x1fb600, dwReserved0=0x0, dwReserved1=0x0, cFileName="setup_wm.exe", cAlternateFileName="")) returned 1 [0045.917] FindNextFileW (in: hFindFile=0x382000, lpFindFileData=0x31e5e4 | out: lpFindFileData=0x31e5e4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x80046d91, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x9874cd8b, ftLastAccessTime.dwHighDateTime=0x1cb892c, ftLastWriteTime.dwLowDateTime=0x9874cd8b, ftLastWriteTime.dwHighDateTime=0x1cb892c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Skins", cAlternateFileName="")) returned 1 [0045.917] FindNextFileW (in: hFindFile=0x382000, lpFindFileData=0x31e5e4 | out: lpFindFileData=0x31e5e4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x80020c30, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x80020c30, ftLastAccessTime.dwHighDateTime=0x1ca0444, ftLastWriteTime.dwLowDateTime=0x80020c30, ftLastWriteTime.dwHighDateTime=0x1ca0444, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Visualizations", cAlternateFileName="VISUAL~1")) returned 1 [0045.918] FindNextFileW (in: hFindFile=0x382000, lpFindFileData=0x31e5e4 | out: lpFindFileData=0x31e5e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8ee55f9, ftCreationTime.dwHighDateTime=0x1cb892b, ftLastAccessTime.dwLowDateTime=0xa8ee55f9, ftLastAccessTime.dwHighDateTime=0x1cb892b, ftLastWriteTime.dwLowDateTime=0xa8ee55f9, ftLastWriteTime.dwHighDateTime=0x1cb892b, nFileSizeHigh=0x0, nFileSizeLow=0x40400, dwReserved0=0x0, dwReserved1=0x0, cFileName="wmlaunch.exe", cAlternateFileName="")) returned 1 [0045.918] FindNextFileW (in: hFindFile=0x382000, lpFindFileData=0x31e5e4 | out: lpFindFileData=0x31e5e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8f0b759, ftCreationTime.dwHighDateTime=0x1cb892b, ftLastAccessTime.dwLowDateTime=0xa8f0b759, ftLastAccessTime.dwHighDateTime=0x1cb892b, ftLastWriteTime.dwLowDateTime=0xa8f0b759, ftLastWriteTime.dwHighDateTime=0x1cb892b, nFileSizeHigh=0x0, nFileSizeLow=0x19000, dwReserved0=0x0, dwReserved1=0x0, cFileName="wmpconfig.exe", cAlternateFileName="")) returned 1 [0045.918] FindNextFileW (in: hFindFile=0x382000, lpFindFileData=0x31e5e4 | out: lpFindFileData=0x31e5e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb0af919e, ftCreationTime.dwHighDateTime=0x1cb892b, ftLastAccessTime.dwLowDateTime=0xb0af919e, ftLastAccessTime.dwHighDateTime=0x1cb892b, ftLastWriteTime.dwLowDateTime=0xb0b1f2fe, ftLastWriteTime.dwHighDateTime=0x1cb892b, nFileSizeHigh=0x0, nFileSizeLow=0x128200, dwReserved0=0x0, dwReserved1=0x0, cFileName="WMPDMC.exe", cAlternateFileName="")) returned 1 [0045.918] FindNextFileW (in: hFindFile=0x382000, lpFindFileData=0x31e5e4 | out: lpFindFileData=0x31e5e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x52b88470, ftCreationTime.dwHighDateTime=0x1ca0419, ftLastAccessTime.dwLowDateTime=0x52b88470, ftLastAccessTime.dwHighDateTime=0x1ca0419, ftLastWriteTime.dwLowDateTime=0x4623b740, ftLastWriteTime.dwHighDateTime=0x1ca0424, nFileSizeHigh=0x0, nFileSizeLow=0x68200, dwReserved0=0x0, dwReserved1=0x0, cFileName="WMPDMCCore.dll", cAlternateFileName="")) returned 1 [0045.918] FindNextFileW (in: hFindFile=0x382000, lpFindFileData=0x31e5e4 | out: lpFindFileData=0x31e5e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5b1930c1, ftCreationTime.dwHighDateTime=0x1ca0419, ftLastAccessTime.dwLowDateTime=0x5b1930c1, ftLastAccessTime.dwHighDateTime=0x1ca0419, ftLastWriteTime.dwLowDateTime=0xfdb75f20, ftLastWriteTime.dwHighDateTime=0x1ca0423, nFileSizeHigh=0x0, nFileSizeLow=0x6c00, dwReserved0=0x0, dwReserved1=0x0, cFileName="wmpenc.exe", cAlternateFileName="")) returned 1 [0045.918] FindNextFileW (in: hFindFile=0x382000, lpFindFileData=0x31e5e4 | out: lpFindFileData=0x31e5e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8f318ba, ftCreationTime.dwHighDateTime=0x1cb892b, ftLastAccessTime.dwLowDateTime=0xa8f318ba, ftLastAccessTime.dwHighDateTime=0x1cb892b, ftLastWriteTime.dwLowDateTime=0xa8f318ba, ftLastWriteTime.dwHighDateTime=0x1cb892b, nFileSizeHigh=0x0, nFileSizeLow=0x28e00, dwReserved0=0x0, dwReserved1=0x0, cFileName="wmplayer.exe", cAlternateFileName="")) returned 1 [0045.918] FindNextFileW (in: hFindFile=0x382000, lpFindFileData=0x31e5e4 | out: lpFindFileData=0x31e5e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6431260b, ftCreationTime.dwHighDateTime=0x1ca0419, ftLastAccessTime.dwLowDateTime=0x6431260b, ftLastAccessTime.dwHighDateTime=0x1ca0419, ftLastWriteTime.dwLowDateTime=0x462abc20, ftLastWriteTime.dwHighDateTime=0x1ca0424, nFileSizeHigh=0x0, nFileSizeLow=0x28000, dwReserved0=0x0, dwReserved1=0x0, cFileName="WMPMediaSharing.dll", cAlternateFileName="")) returned 1 [0045.918] FindNextFileW (in: hFindFile=0x382000, lpFindFileData=0x31e5e4 | out: lpFindFileData=0x31e5e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb0b4545e, ftCreationTime.dwHighDateTime=0x1cb892b, ftLastAccessTime.dwLowDateTime=0xb0b4545e, ftLastAccessTime.dwHighDateTime=0x1cb892b, ftLastWriteTime.dwLowDateTime=0xb0b6b5be, ftLastWriteTime.dwHighDateTime=0x1cb892b, nFileSizeHigh=0x0, nFileSizeLow=0x174600, dwReserved0=0x0, dwReserved1=0x0, cFileName="wmpnetwk.exe", cAlternateFileName="")) returned 1 [0045.918] FindNextFileW (in: hFindFile=0x382000, lpFindFileData=0x31e5e4 | out: lpFindFileData=0x31e5e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x66334c83, ftCreationTime.dwHighDateTime=0x1ca0419, ftLastAccessTime.dwLowDateTime=0x66334c83, ftLastAccessTime.dwHighDateTime=0x1ca0419, ftLastWriteTime.dwLowDateTime=0xfe0cf930, ftLastWriteTime.dwHighDateTime=0x1ca0423, nFileSizeHigh=0x0, nFileSizeLow=0x11400, dwReserved0=0x0, dwReserved1=0x0, cFileName="wmpnscfg.exe", cAlternateFileName="")) returned 1 [0045.918] FindNextFileW (in: hFindFile=0x382000, lpFindFileData=0x31e5e4 | out: lpFindFileData=0x31e5e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x66e8341f, ftCreationTime.dwHighDateTime=0x1ca0419, ftLastAccessTime.dwLowDateTime=0x66e8341f, ftLastAccessTime.dwHighDateTime=0x1ca0419, ftLastWriteTime.dwLowDateTime=0x462d2d20, ftLastWriteTime.dwHighDateTime=0x1ca0424, nFileSizeHigh=0x0, nFileSizeLow=0x87200, dwReserved0=0x0, dwReserved1=0x0, cFileName="wmpnssci.dll", cAlternateFileName="")) returned 1 [0045.919] FindNextFileW (in: hFindFile=0x382000, lpFindFileData=0x31e5e4 | out: lpFindFileData=0x31e5e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4ff32e2e, ftCreationTime.dwHighDateTime=0x1ca0419, ftLastAccessTime.dwLowDateTime=0x4ff32e2e, ftLastAccessTime.dwHighDateTime=0x1ca0419, ftLastWriteTime.dwLowDateTime=0x462d2d20, ftLastWriteTime.dwHighDateTime=0x1ca0424, nFileSizeHigh=0x0, nFileSizeLow=0x8800, dwReserved0=0x0, dwReserved1=0x0, cFileName="WMPNSSUI.dll", cAlternateFileName="")) returned 1 [0045.919] FindNextFileW (in: hFindFile=0x382000, lpFindFileData=0x31e5e4 | out: lpFindFileData=0x31e5e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5dde8703, ftCreationTime.dwHighDateTime=0x1ca0419, ftLastAccessTime.dwLowDateTime=0x5dde8703, ftLastAccessTime.dwHighDateTime=0x1ca0419, ftLastWriteTime.dwLowDateTime=0xfe11b420, ftLastWriteTime.dwHighDateTime=0x1ca0423, nFileSizeHigh=0x0, nFileSizeLow=0x12800, dwReserved0=0x0, dwReserved1=0x0, cFileName="wmprph.exe", cAlternateFileName="")) returned 1 [0045.919] FindNextFileW (in: hFindFile=0x382000, lpFindFileData=0x31e5e4 | out: lpFindFileData=0x31e5e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8f318ba, ftCreationTime.dwHighDateTime=0x1cb892b, ftLastAccessTime.dwLowDateTime=0xa8f318ba, ftLastAccessTime.dwHighDateTime=0x1cb892b, ftLastWriteTime.dwLowDateTime=0xa8f318ba, ftLastWriteTime.dwHighDateTime=0x1cb892b, nFileSizeHigh=0x0, nFileSizeLow=0x19200, dwReserved0=0x0, dwReserved1=0x0, cFileName="wmpshare.exe", cAlternateFileName="")) returned 1 [0045.919] FindNextFileW (in: hFindFile=0x382000, lpFindFileData=0x31e5e4 | out: lpFindFileData=0x31e5e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x639ff2e2, ftCreationTime.dwHighDateTime=0x1ca0419, ftLastAccessTime.dwLowDateTime=0x639ff2e2, ftLastAccessTime.dwHighDateTime=0x1ca0419, ftLastWriteTime.dwLowDateTime=0xfe2737f0, ftLastWriteTime.dwHighDateTime=0x1ca0423, nFileSizeHigh=0x0, nFileSizeLow=0x28800, dwReserved0=0x0, dwReserved1=0x0, cFileName="WMPSideShowGadget.exe", cAlternateFileName="")) returned 1 [0045.919] FindNextFileW (in: hFindFile=0x382000, lpFindFileData=0x31e5e4 | out: lpFindFileData=0x31e5e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x639ff2e2, ftCreationTime.dwHighDateTime=0x1ca0419, ftLastAccessTime.dwLowDateTime=0x639ff2e2, ftLastAccessTime.dwHighDateTime=0x1ca0419, ftLastWriteTime.dwLowDateTime=0xfe2737f0, ftLastWriteTime.dwHighDateTime=0x1ca0423, nFileSizeHigh=0x0, nFileSizeLow=0x28800, dwReserved0=0x0, dwReserved1=0x0, cFileName="WMPSideShowGadget.exe", cAlternateFileName="")) returned 0 [0045.919] FindClose (in: hFindFile=0x382000 | out: hFindFile=0x382000) returned 1 [0045.919] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e86c) returned 1 [0045.919] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e878) returned 1 [0045.919] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e834) returned 1 [0045.919] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Windows Media Player\\en-US", nBufferLength=0x105, lpBuffer=0x31e33c, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Windows Media Player\\en-US", lpFilePart=0x0) returned 0x2b [0045.919] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Windows Media Player\\en-US\\", nBufferLength=0x105, lpBuffer=0x31e310, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Windows Media Player\\en-US\\", lpFilePart=0x0) returned 0x2c [0045.919] FindFirstFileW (in: lpFileName="C:\\Program Files\\Windows Media Player\\en-US\\*", lpFindFileData=0x31e55c | out: lpFindFileData=0x31e55c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1ead9a68, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x21ccca7f, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x1ead9a68, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x382000 [0045.921] FindNextFileW (in: hFindFile=0x382000, lpFindFileData=0x31e56c | out: lpFindFileData=0x31e56c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1ead9a68, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x21ccca7f, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x1ead9a68, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0045.922] FindNextFileW (in: hFindFile=0x382000, lpFindFileData=0x31e56c | out: lpFindFileData=0x31e56c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xfdc7162, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x10b3266c, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0xfdc7162, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0xa00, dwReserved0=0x0, dwReserved1=0x0, cFileName="mpvis.dll.mui", cAlternateFileName="")) returned 1 [0045.922] FindNextFileW (in: hFindFile=0x382000, lpFindFileData=0x31e56c | out: lpFindFileData=0x31e56c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xfdc7162, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x10b3266c, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0xfdc7162, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0xdc00, dwReserved0=0x0, dwReserved1=0x0, cFileName="setup_wm.exe.mui", cAlternateFileName="")) returned 1 [0045.922] FindNextFileW (in: hFindFile=0x382000, lpFindFileData=0x31e56c | out: lpFindFileData=0x31e56c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xfdc7162, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x10b3266c, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0xfdc7162, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x800, dwReserved0=0x0, dwReserved1=0x0, cFileName="wmlaunch.exe.mui", cAlternateFileName="")) returned 1 [0045.922] FindNextFileW (in: hFindFile=0x382000, lpFindFileData=0x31e56c | out: lpFindFileData=0x31e56c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xfe3998d, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x10b3266c, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0xfe3998d, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x3a00, dwReserved0=0x0, dwReserved1=0x0, cFileName="WMPDMC.exe.mui", cAlternateFileName="")) returned 1 [0045.922] FindNextFileW (in: hFindFile=0x382000, lpFindFileData=0x31e56c | out: lpFindFileData=0x31e56c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xfe3998d, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x10b3266c, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0xfe3998d, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0xa00, dwReserved0=0x0, dwReserved1=0x0, cFileName="WMPDMCCore.dll.mui", cAlternateFileName="")) returned 1 [0045.922] FindNextFileW (in: hFindFile=0x382000, lpFindFileData=0x31e56c | out: lpFindFileData=0x31e56c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xfded41b, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x10b3266c, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0xfded41b, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0xc00, dwReserved0=0x0, dwReserved1=0x0, cFileName="wmplayer.exe.mui", cAlternateFileName="")) returned 1 [0045.922] FindNextFileW (in: hFindFile=0x382000, lpFindFileData=0x31e56c | out: lpFindFileData=0x31e56c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xfe3998d, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x10b3266c, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0xfe3998d, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0xa00, dwReserved0=0x0, dwReserved1=0x0, cFileName="WMPMediaSharing.dll.mui", cAlternateFileName="")) returned 1 [0045.922] FindNextFileW (in: hFindFile=0x382000, lpFindFileData=0x31e56c | out: lpFindFileData=0x31e56c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xfe3998d, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x10b3266c, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0xfe3998d, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x9200, dwReserved0=0x0, dwReserved1=0x0, cFileName="wmpnetwk.exe.mui", cAlternateFileName="")) returned 1 [0045.922] FindNextFileW (in: hFindFile=0x382000, lpFindFileData=0x31e56c | out: lpFindFileData=0x31e56c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xfe3998d, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x10b3266c, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0xfe3998d, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0xa00, dwReserved0=0x0, dwReserved1=0x0, cFileName="wmpnscfg.exe.mui", cAlternateFileName="")) returned 1 [0045.922] FindNextFileW (in: hFindFile=0x382000, lpFindFileData=0x31e56c | out: lpFindFileData=0x31e56c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xfe3998d, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x10b3266c, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0xfe3998d, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x1000, dwReserved0=0x0, dwReserved1=0x0, cFileName="wmpnssci.dll.mui", cAlternateFileName="")) returned 1 [0045.922] FindNextFileW (in: hFindFile=0x382000, lpFindFileData=0x31e56c | out: lpFindFileData=0x31e56c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xfe3998d, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x10b3266c, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0xfe3998d, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0xa00, dwReserved0=0x0, dwReserved1=0x0, cFileName="wmpnssui.dll.mui", cAlternateFileName="")) returned 1 [0045.922] FindNextFileW (in: hFindFile=0x382000, lpFindFileData=0x31e56c | out: lpFindFileData=0x31e56c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xfdc7162, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x10b3266c, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0xfdc7162, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0xe00, dwReserved0=0x0, dwReserved1=0x0, cFileName="WMPSideShowGadget.exe.mui", cAlternateFileName="")) returned 1 [0045.922] FindNextFileW (in: hFindFile=0x382000, lpFindFileData=0x31e56c | out: lpFindFileData=0x31e56c*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0045.922] FindClose (in: hFindFile=0x382000 | out: hFindFile=0x382000) returned 1 [0045.923] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e7f4) returned 1 [0045.923] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e800) returned 1 [0045.923] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e834) returned 1 [0045.923] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Windows Media Player\\en-US", nBufferLength=0x105, lpBuffer=0x31e33c, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Windows Media Player\\en-US", lpFilePart=0x0) returned 0x2b [0045.923] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Windows Media Player\\en-US\\", nBufferLength=0x105, lpBuffer=0x31e310, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Windows Media Player\\en-US\\", lpFilePart=0x0) returned 0x2c [0045.923] FindFirstFileW (in: lpFileName="C:\\Program Files\\Windows Media Player\\en-US\\*", lpFindFileData=0x31e55c | out: lpFindFileData=0x31e55c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1ead9a68, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x21ccca7f, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x1ead9a68, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x382000 [0045.924] FindNextFileW (in: hFindFile=0x382000, lpFindFileData=0x31e56c | out: lpFindFileData=0x31e56c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1ead9a68, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x21ccca7f, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x1ead9a68, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0045.924] FindNextFileW (in: hFindFile=0x382000, lpFindFileData=0x31e56c | out: lpFindFileData=0x31e56c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xfdc7162, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x10b3266c, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0xfdc7162, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0xa00, dwReserved0=0x0, dwReserved1=0x0, cFileName="mpvis.dll.mui", cAlternateFileName="")) returned 1 [0045.924] FindNextFileW (in: hFindFile=0x382000, lpFindFileData=0x31e56c | out: lpFindFileData=0x31e56c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xfdc7162, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x10b3266c, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0xfdc7162, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0xdc00, dwReserved0=0x0, dwReserved1=0x0, cFileName="setup_wm.exe.mui", cAlternateFileName="")) returned 1 [0045.924] FindNextFileW (in: hFindFile=0x382000, lpFindFileData=0x31e56c | out: lpFindFileData=0x31e56c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xfdc7162, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x10b3266c, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0xfdc7162, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x800, dwReserved0=0x0, dwReserved1=0x0, cFileName="wmlaunch.exe.mui", cAlternateFileName="")) returned 1 [0045.924] FindNextFileW (in: hFindFile=0x382000, lpFindFileData=0x31e56c | out: lpFindFileData=0x31e56c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xfe3998d, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x10b3266c, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0xfe3998d, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x3a00, dwReserved0=0x0, dwReserved1=0x0, cFileName="WMPDMC.exe.mui", cAlternateFileName="")) returned 1 [0045.924] FindNextFileW (in: hFindFile=0x382000, lpFindFileData=0x31e56c | out: lpFindFileData=0x31e56c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xfe3998d, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x10b3266c, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0xfe3998d, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0xa00, dwReserved0=0x0, dwReserved1=0x0, cFileName="WMPDMCCore.dll.mui", cAlternateFileName="")) returned 1 [0045.924] FindNextFileW (in: hFindFile=0x382000, lpFindFileData=0x31e56c | out: lpFindFileData=0x31e56c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xfded41b, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x10b3266c, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0xfded41b, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0xc00, dwReserved0=0x0, dwReserved1=0x0, cFileName="wmplayer.exe.mui", cAlternateFileName="")) returned 1 [0045.924] FindNextFileW (in: hFindFile=0x382000, lpFindFileData=0x31e56c | out: lpFindFileData=0x31e56c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xfe3998d, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x10b3266c, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0xfe3998d, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0xa00, dwReserved0=0x0, dwReserved1=0x0, cFileName="WMPMediaSharing.dll.mui", cAlternateFileName="")) returned 1 [0045.924] FindNextFileW (in: hFindFile=0x382000, lpFindFileData=0x31e56c | out: lpFindFileData=0x31e56c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xfe3998d, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x10b3266c, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0xfe3998d, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x9200, dwReserved0=0x0, dwReserved1=0x0, cFileName="wmpnetwk.exe.mui", cAlternateFileName="")) returned 1 [0045.924] FindNextFileW (in: hFindFile=0x382000, lpFindFileData=0x31e56c | out: lpFindFileData=0x31e56c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xfe3998d, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x10b3266c, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0xfe3998d, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0xa00, dwReserved0=0x0, dwReserved1=0x0, cFileName="wmpnscfg.exe.mui", cAlternateFileName="")) returned 1 [0045.924] FindNextFileW (in: hFindFile=0x382000, lpFindFileData=0x31e56c | out: lpFindFileData=0x31e56c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xfe3998d, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x10b3266c, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0xfe3998d, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x1000, dwReserved0=0x0, dwReserved1=0x0, cFileName="wmpnssci.dll.mui", cAlternateFileName="")) returned 1 [0045.924] FindNextFileW (in: hFindFile=0x382000, lpFindFileData=0x31e56c | out: lpFindFileData=0x31e56c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xfe3998d, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x10b3266c, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0xfe3998d, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0xa00, dwReserved0=0x0, dwReserved1=0x0, cFileName="wmpnssui.dll.mui", cAlternateFileName="")) returned 1 [0045.924] FindNextFileW (in: hFindFile=0x382000, lpFindFileData=0x31e56c | out: lpFindFileData=0x31e56c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xfdc7162, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x10b3266c, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0xfdc7162, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0xe00, dwReserved0=0x0, dwReserved1=0x0, cFileName="WMPSideShowGadget.exe.mui", cAlternateFileName="")) returned 1 [0045.924] FindNextFileW (in: hFindFile=0x382000, lpFindFileData=0x31e56c | out: lpFindFileData=0x31e56c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xfdc7162, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x10b3266c, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0xfdc7162, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0xe00, dwReserved0=0x0, dwReserved1=0x0, cFileName="WMPSideShowGadget.exe.mui", cAlternateFileName="")) returned 0 [0045.924] FindClose (in: hFindFile=0x382000 | out: hFindFile=0x382000) returned 1 [0045.925] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e7f4) returned 1 [0045.925] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e800) returned 1 [0045.925] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e834) returned 1 [0045.925] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Windows Media Player\\Icons", nBufferLength=0x105, lpBuffer=0x31e33c, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Windows Media Player\\Icons", lpFilePart=0x0) returned 0x2b [0045.925] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Windows Media Player\\Icons\\", nBufferLength=0x105, lpBuffer=0x31e310, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Windows Media Player\\Icons\\", lpFilePart=0x0) returned 0x2c [0045.925] FindFirstFileW (in: lpFileName="C:\\Program Files\\Windows Media Player\\Icons\\*", lpFindFileData=0x31e55c | out: lpFindFileData=0x31e55c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x80020c30, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x80020c30, ftLastAccessTime.dwHighDateTime=0x1ca0444, ftLastWriteTime.dwLowDateTime=0x80020c30, ftLastWriteTime.dwHighDateTime=0x1ca0444, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x382000 [0045.926] FindNextFileW (in: hFindFile=0x382000, lpFindFileData=0x31e56c | out: lpFindFileData=0x31e56c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x80020c30, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x80020c30, ftLastAccessTime.dwHighDateTime=0x1ca0444, ftLastWriteTime.dwLowDateTime=0x80020c30, ftLastWriteTime.dwHighDateTime=0x1ca0444, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0045.926] FindNextFileW (in: hFindFile=0x382000, lpFindFileData=0x31e56c | out: lpFindFileData=0x31e56c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x80020c30, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x80020c30, ftLastAccessTime.dwHighDateTime=0x1ca0444, ftLastWriteTime.dwLowDateTime=0x80020c30, ftLastWriteTime.dwHighDateTime=0x1ca0444, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 0 [0045.926] FindClose (in: hFindFile=0x382000 | out: hFindFile=0x382000) returned 1 [0045.926] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e7f4) returned 1 [0045.926] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e800) returned 1 [0045.926] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e834) returned 1 [0045.926] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Windows Media Player\\Icons", nBufferLength=0x105, lpBuffer=0x31e33c, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Windows Media Player\\Icons", lpFilePart=0x0) returned 0x2b [0045.926] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Windows Media Player\\Icons\\", nBufferLength=0x105, lpBuffer=0x31e310, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Windows Media Player\\Icons\\", lpFilePart=0x0) returned 0x2c [0045.926] FindFirstFileW (in: lpFileName="C:\\Program Files\\Windows Media Player\\Icons\\*", lpFindFileData=0x31e55c | out: lpFindFileData=0x31e55c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x80020c30, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x80020c30, ftLastAccessTime.dwHighDateTime=0x1ca0444, ftLastWriteTime.dwLowDateTime=0x80020c30, ftLastWriteTime.dwHighDateTime=0x1ca0444, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x382000 [0045.926] FindNextFileW (in: hFindFile=0x382000, lpFindFileData=0x31e56c | out: lpFindFileData=0x31e56c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x80020c30, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x80020c30, ftLastAccessTime.dwHighDateTime=0x1ca0444, ftLastWriteTime.dwLowDateTime=0x80020c30, ftLastWriteTime.dwHighDateTime=0x1ca0444, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0045.926] FindNextFileW (in: hFindFile=0x382000, lpFindFileData=0x31e56c | out: lpFindFileData=0x31e56c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x80020c30, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x80020c30, ftLastAccessTime.dwHighDateTime=0x1ca0444, ftLastWriteTime.dwLowDateTime=0x80020c30, ftLastWriteTime.dwHighDateTime=0x1ca0444, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 0 [0045.926] FindClose (in: hFindFile=0x382000 | out: hFindFile=0x382000) returned 1 [0045.926] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e7f4) returned 1 [0045.926] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e800) returned 1 [0045.926] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e834) returned 1 [0045.927] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Windows Media Player\\Media Renderer", nBufferLength=0x105, lpBuffer=0x31e33c, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Windows Media Player\\Media Renderer", lpFilePart=0x0) returned 0x34 [0045.927] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Windows Media Player\\Media Renderer\\", nBufferLength=0x105, lpBuffer=0x31e310, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Windows Media Player\\Media Renderer\\", lpFilePart=0x0) returned 0x35 [0045.927] FindFirstFileW (in: lpFileName="C:\\Program Files\\Windows Media Player\\Media Renderer\\*", lpFindFileData=0x31e55c | out: lpFindFileData=0x31e55c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x80020c30, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x80471418, ftLastAccessTime.dwHighDateTime=0x1ca0444, ftLastWriteTime.dwLowDateTime=0x80471418, ftLastWriteTime.dwHighDateTime=0x1ca0444, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x382000 [0045.928] FindNextFileW (in: hFindFile=0x382000, lpFindFileData=0x31e56c | out: lpFindFileData=0x31e56c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x80020c30, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x80471418, ftLastAccessTime.dwHighDateTime=0x1ca0444, ftLastWriteTime.dwLowDateTime=0x80471418, ftLastWriteTime.dwHighDateTime=0x1ca0444, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0045.929] FindClose (in: hFindFile=0x382000 | out: hFindFile=0x382000) returned 1 [0045.930] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e7f4) returned 1 [0045.930] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e800) returned 1 [0045.930] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e834) returned 1 [0045.930] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Windows Media Player\\Media Renderer", nBufferLength=0x105, lpBuffer=0x31e33c, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Windows Media Player\\Media Renderer", lpFilePart=0x0) returned 0x34 [0045.930] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Windows Media Player\\Media Renderer\\", nBufferLength=0x105, lpBuffer=0x31e310, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Windows Media Player\\Media Renderer\\", lpFilePart=0x0) returned 0x35 [0045.930] FindFirstFileW (in: lpFileName="C:\\Program Files\\Windows Media Player\\Media Renderer\\*", lpFindFileData=0x31e55c | out: lpFindFileData=0x31e55c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x80020c30, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x80471418, ftLastAccessTime.dwHighDateTime=0x1ca0444, ftLastWriteTime.dwLowDateTime=0x80471418, ftLastWriteTime.dwHighDateTime=0x1ca0444, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x382000 [0045.931] FindClose (in: hFindFile=0x382000 | out: hFindFile=0x382000) returned 1 [0045.931] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e7f4) returned 1 [0045.931] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e800) returned 1 [0045.932] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Windows Media Player\\Media Renderer\\avtransport.xml", nBufferLength=0x105, lpBuffer=0x31e20c, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Windows Media Player\\Media Renderer\\avtransport.xml", lpFilePart=0x0) returned 0x44 [0045.932] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e700) returned 1 [0045.932] CreateFileW (lpFileName="C:\\Program Files\\Windows Media Player\\Media Renderer\\avtransport.xml" (normalized: "c:\\program files\\windows media player\\media renderer\\avtransport.xml"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x274 [0045.934] GetFileType (hFile=0x274) returned 0x1 [0045.934] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e6fc) returned 1 [0045.934] GetFileType (hFile=0x274) returned 0x1 [0045.934] GetFileSize (in: hFile=0x274, lpFileSizeHigh=0x31e808 | out: lpFileSizeHigh=0x31e808*=0x0) returned 0x4d82 [0045.934] ReadFile (in: hFile=0x274, lpBuffer=0x27e817c, nNumberOfBytesToRead=0x4d82, lpNumberOfBytesRead=0x31e7b4, lpOverlapped=0x0 | out: lpBuffer=0x27e817c*, lpNumberOfBytesRead=0x31e7b4*=0x4d82, lpOverlapped=0x0) returned 1 [0045.966] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Windows Media Player\\Media Renderer\\avtransport.xml", nBufferLength=0x105, lpBuffer=0x31e1f8, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Windows Media Player\\Media Renderer\\avtransport.xml", lpFilePart=0x0) returned 0x44 [0045.966] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e6ec) returned 1 [0045.966] CreateFileW (lpFileName="C:\\Program Files\\Windows Media Player\\Media Renderer\\avtransport.xml" (normalized: "c:\\program files\\windows media player\\media renderer\\avtransport.xml"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0xffffffff [0045.968] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Windows Media Player\\Network Sharing", nBufferLength=0x105, lpBuffer=0x31e33c, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Windows Media Player\\Network Sharing", lpFilePart=0x0) returned 0x35 [0045.968] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Windows Media Player\\Network Sharing\\", nBufferLength=0x105, lpBuffer=0x31e310, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Windows Media Player\\Network Sharing\\", lpFilePart=0x0) returned 0x36 [0045.968] FindFirstFileW (in: lpFileName="C:\\Program Files\\Windows Media Player\\Network Sharing\\*", lpFindFileData=0x31e55c | out: lpFindFileData=0x31e55c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x80020c30, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x8044b2b8, ftLastAccessTime.dwHighDateTime=0x1ca0444, ftLastWriteTime.dwLowDateTime=0x8044b2b8, ftLastWriteTime.dwHighDateTime=0x1ca0444, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x381c40 [0045.970] FindNextFileW (in: hFindFile=0x381c40, lpFindFileData=0x31e56c | out: lpFindFileData=0x31e56c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x80020c30, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x8044b2b8, ftLastAccessTime.dwHighDateTime=0x1ca0444, ftLastWriteTime.dwLowDateTime=0x8044b2b8, ftLastWriteTime.dwHighDateTime=0x1ca0444, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0045.970] FindNextFileW (in: hFindFile=0x381c40, lpFindFileData=0x31e56c | out: lpFindFileData=0x31e56c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xaf365935, ftCreationTime.dwHighDateTime=0x1ca0408, ftLastAccessTime.dwLowDateTime=0xaf365935, ftLastAccessTime.dwHighDateTime=0x1ca0408, ftLastWriteTime.dwLowDateTime=0x6c2c7e17, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x152e, dwReserved0=0x0, dwReserved1=0x0, cFileName="ConnectionManager.xml", cAlternateFileName="")) returned 1 [0045.970] FindNextFileW (in: hFindFile=0x381c40, lpFindFileData=0x31e56c | out: lpFindFileData=0x31e56c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xaf365935, ftCreationTime.dwHighDateTime=0x1ca0408, ftLastAccessTime.dwLowDateTime=0xaf365935, ftLastAccessTime.dwHighDateTime=0x1ca0408, ftLastWriteTime.dwLowDateTime=0x6c2c7e17, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x2092, dwReserved0=0x0, dwReserved1=0x0, cFileName="ContentDirectory.xml", cAlternateFileName="")) returned 1 [0045.970] FindNextFileW (in: hFindFile=0x381c40, lpFindFileData=0x31e56c | out: lpFindFileData=0x31e56c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xaf38ba92, ftCreationTime.dwHighDateTime=0x1ca0408, ftLastAccessTime.dwLowDateTime=0xaf38ba92, ftLastAccessTime.dwHighDateTime=0x1ca0408, ftLastWriteTime.dwLowDateTime=0x6c2edf75, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0xa0e, dwReserved0=0x0, dwReserved1=0x0, cFileName="MediaReceiverRegistrar.xml", cAlternateFileName="")) returned 1 [0045.970] FindNextFileW (in: hFindFile=0x381c40, lpFindFileData=0x31e56c | out: lpFindFileData=0x31e56c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xaf38ba92, ftCreationTime.dwHighDateTime=0x1ca0408, ftLastAccessTime.dwLowDateTime=0xaf38ba92, ftLastAccessTime.dwHighDateTime=0x1ca0408, ftLastWriteTime.dwLowDateTime=0x6c2edf75, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x5352, dwReserved0=0x0, dwReserved1=0x0, cFileName="wmpnss_bw120.jpg", cAlternateFileName="")) returned 1 [0045.971] FindNextFileW (in: hFindFile=0x381c40, lpFindFileData=0x31e56c | out: lpFindFileData=0x31e56c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xaf38ba92, ftCreationTime.dwHighDateTime=0x1ca0408, ftLastAccessTime.dwLowDateTime=0xaf38ba92, ftLastAccessTime.dwHighDateTime=0x1ca0408, ftLastWriteTime.dwLowDateTime=0x6c2edf75, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x1922, dwReserved0=0x0, dwReserved1=0x0, cFileName="wmpnss_bw120.png", cAlternateFileName="")) returned 1 [0045.971] FindNextFileW (in: hFindFile=0x381c40, lpFindFileData=0x31e56c | out: lpFindFileData=0x31e56c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xaf3b1bef, ftCreationTime.dwHighDateTime=0x1ca0408, ftLastAccessTime.dwLowDateTime=0xaf3b1bef, ftLastAccessTime.dwHighDateTime=0x1ca0408, ftLastWriteTime.dwLowDateTime=0x6c2edf75, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0xc38, dwReserved0=0x0, dwReserved1=0x0, cFileName="wmpnss_bw32.bmp", cAlternateFileName="")) returned 1 [0045.971] FindNextFileW (in: hFindFile=0x381c40, lpFindFileData=0x31e56c | out: lpFindFileData=0x31e56c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xaf3b1bef, ftCreationTime.dwHighDateTime=0x1ca0408, ftLastAccessTime.dwLowDateTime=0xaf3b1bef, ftLastAccessTime.dwHighDateTime=0x1ca0408, ftLastWriteTime.dwLowDateTime=0x6c2edf75, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x231f, dwReserved0=0x0, dwReserved1=0x0, cFileName="wmpnss_bw32.jpg", cAlternateFileName="")) returned 1 [0045.971] FindNextFileW (in: hFindFile=0x381c40, lpFindFileData=0x31e56c | out: lpFindFileData=0x31e56c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xaf3d7d4c, ftCreationTime.dwHighDateTime=0x1ca0408, ftLastAccessTime.dwLowDateTime=0xaf3d7d4c, ftLastAccessTime.dwHighDateTime=0x1ca0408, ftLastWriteTime.dwLowDateTime=0x6c2edf75, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x980, dwReserved0=0x0, dwReserved1=0x0, cFileName="wmpnss_bw48.bmp", cAlternateFileName="")) returned 1 [0045.971] FindNextFileW (in: hFindFile=0x381c40, lpFindFileData=0x31e56c | out: lpFindFileData=0x31e56c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xaf3fdea9, ftCreationTime.dwHighDateTime=0x1ca0408, ftLastAccessTime.dwLowDateTime=0xaf3fdea9, ftLastAccessTime.dwHighDateTime=0x1ca0408, ftLastWriteTime.dwLowDateTime=0x6c2edf75, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x2aa0, dwReserved0=0x0, dwReserved1=0x0, cFileName="wmpnss_bw48.jpg", cAlternateFileName="")) returned 1 [0045.971] FindNextFileW (in: hFindFile=0x381c40, lpFindFileData=0x31e56c | out: lpFindFileData=0x31e56c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xaf3fdea9, ftCreationTime.dwHighDateTime=0x1ca0408, ftLastAccessTime.dwLowDateTime=0xaf3fdea9, ftLastAccessTime.dwHighDateTime=0x1ca0408, ftLastWriteTime.dwLowDateTime=0x6c2edf75, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x101c, dwReserved0=0x0, dwReserved1=0x0, cFileName="wmpnss_bw48.png", cAlternateFileName="")) returned 1 [0045.971] FindNextFileW (in: hFindFile=0x381c40, lpFindFileData=0x31e56c | out: lpFindFileData=0x31e56c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xaf3fdea9, ftCreationTime.dwHighDateTime=0x1ca0408, ftLastAccessTime.dwLowDateTime=0xaf3fdea9, ftLastAccessTime.dwHighDateTime=0x1ca0408, ftLastWriteTime.dwLowDateTime=0x6c3140d3, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x5788, dwReserved0=0x0, dwReserved1=0x0, cFileName="wmpnss_color120.jpg", cAlternateFileName="")) returned 1 [0045.971] FindNextFileW (in: hFindFile=0x381c40, lpFindFileData=0x31e56c | out: lpFindFileData=0x31e56c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xaf424006, ftCreationTime.dwHighDateTime=0x1ca0408, ftLastAccessTime.dwLowDateTime=0xaf424006, ftLastAccessTime.dwHighDateTime=0x1ca0408, ftLastWriteTime.dwLowDateTime=0x6c3140d3, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x2f4b, dwReserved0=0x0, dwReserved1=0x0, cFileName="wmpnss_color120.png", cAlternateFileName="")) returned 1 [0045.971] FindNextFileW (in: hFindFile=0x381c40, lpFindFileData=0x31e56c | out: lpFindFileData=0x31e56c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xaf424006, ftCreationTime.dwHighDateTime=0x1ca0408, ftLastAccessTime.dwLowDateTime=0xaf424006, ftLastAccessTime.dwHighDateTime=0x1ca0408, ftLastWriteTime.dwLowDateTime=0x6c3140d3, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0xc38, dwReserved0=0x0, dwReserved1=0x0, cFileName="wmpnss_color32.bmp", cAlternateFileName="")) returned 1 [0045.972] FindNextFileW (in: hFindFile=0x381c40, lpFindFileData=0x31e56c | out: lpFindFileData=0x31e56c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xaf44a163, ftCreationTime.dwHighDateTime=0x1ca0408, ftLastAccessTime.dwLowDateTime=0xaf44a163, ftLastAccessTime.dwHighDateTime=0x1ca0408, ftLastWriteTime.dwLowDateTime=0x6c3140d3, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x24cd, dwReserved0=0x0, dwReserved1=0x0, cFileName="wmpnss_color32.jpg", cAlternateFileName="")) returned 1 [0045.972] FindNextFileW (in: hFindFile=0x381c40, lpFindFileData=0x31e56c | out: lpFindFileData=0x31e56c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xaf44a163, ftCreationTime.dwHighDateTime=0x1ca0408, ftLastAccessTime.dwLowDateTime=0xaf44a163, ftLastAccessTime.dwHighDateTime=0x1ca0408, ftLastWriteTime.dwLowDateTime=0x6c3140d3, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x1b38, dwReserved0=0x0, dwReserved1=0x0, cFileName="wmpnss_color48.bmp", cAlternateFileName="")) returned 1 [0045.972] FindNextFileW (in: hFindFile=0x381c40, lpFindFileData=0x31e56c | out: lpFindFileData=0x31e56c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xaf44a163, ftCreationTime.dwHighDateTime=0x1ca0408, ftLastAccessTime.dwLowDateTime=0xaf44a163, ftLastAccessTime.dwHighDateTime=0x1ca0408, ftLastWriteTime.dwLowDateTime=0x6c3140d3, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x2c85, dwReserved0=0x0, dwReserved1=0x0, cFileName="wmpnss_color48.jpg", cAlternateFileName="")) returned 1 [0045.972] FindNextFileW (in: hFindFile=0x381c40, lpFindFileData=0x31e56c | out: lpFindFileData=0x31e56c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xaf4702c0, ftCreationTime.dwHighDateTime=0x1ca0408, ftLastAccessTime.dwLowDateTime=0xaf4702c0, ftLastAccessTime.dwHighDateTime=0x1ca0408, ftLastWriteTime.dwLowDateTime=0x6c3140d3, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x1532, dwReserved0=0x0, dwReserved1=0x0, cFileName="wmpnss_color48.png", cAlternateFileName="")) returned 1 [0045.972] FindNextFileW (in: hFindFile=0x381c40, lpFindFileData=0x31e56c | out: lpFindFileData=0x31e56c*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0045.972] FindClose (in: hFindFile=0x381c40 | out: hFindFile=0x381c40) returned 1 [0045.973] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Windows Media Player\\Network Sharing", nBufferLength=0x105, lpBuffer=0x31e33c, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Windows Media Player\\Network Sharing", lpFilePart=0x0) returned 0x35 [0045.973] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Windows Media Player\\Network Sharing\\", nBufferLength=0x105, lpBuffer=0x31e310, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Windows Media Player\\Network Sharing\\", lpFilePart=0x0) returned 0x36 [0045.973] FindFirstFileW (in: lpFileName="C:\\Program Files\\Windows Media Player\\Network Sharing\\*", lpFindFileData=0x31e55c | out: lpFindFileData=0x31e55c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x80020c30, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x8044b2b8, ftLastAccessTime.dwHighDateTime=0x1ca0444, ftLastWriteTime.dwLowDateTime=0x8044b2b8, ftLastWriteTime.dwHighDateTime=0x1ca0444, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x381c40 [0045.974] FindNextFileW (in: hFindFile=0x381c40, lpFindFileData=0x31e56c | out: lpFindFileData=0x31e56c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x80020c30, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x8044b2b8, ftLastAccessTime.dwHighDateTime=0x1ca0444, ftLastWriteTime.dwLowDateTime=0x8044b2b8, ftLastWriteTime.dwHighDateTime=0x1ca0444, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0045.974] FindNextFileW (in: hFindFile=0x381c40, lpFindFileData=0x31e56c | out: lpFindFileData=0x31e56c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xaf365935, ftCreationTime.dwHighDateTime=0x1ca0408, ftLastAccessTime.dwLowDateTime=0xaf365935, ftLastAccessTime.dwHighDateTime=0x1ca0408, ftLastWriteTime.dwLowDateTime=0x6c2c7e17, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x152e, dwReserved0=0x0, dwReserved1=0x0, cFileName="ConnectionManager.xml", cAlternateFileName="")) returned 1 [0045.974] FindNextFileW (in: hFindFile=0x381c40, lpFindFileData=0x31e56c | out: lpFindFileData=0x31e56c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xaf365935, ftCreationTime.dwHighDateTime=0x1ca0408, ftLastAccessTime.dwLowDateTime=0xaf365935, ftLastAccessTime.dwHighDateTime=0x1ca0408, ftLastWriteTime.dwLowDateTime=0x6c2c7e17, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x2092, dwReserved0=0x0, dwReserved1=0x0, cFileName="ContentDirectory.xml", cAlternateFileName="")) returned 1 [0045.975] FindNextFileW (in: hFindFile=0x381c40, lpFindFileData=0x31e56c | out: lpFindFileData=0x31e56c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xaf38ba92, ftCreationTime.dwHighDateTime=0x1ca0408, ftLastAccessTime.dwLowDateTime=0xaf38ba92, ftLastAccessTime.dwHighDateTime=0x1ca0408, ftLastWriteTime.dwLowDateTime=0x6c2edf75, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0xa0e, dwReserved0=0x0, dwReserved1=0x0, cFileName="MediaReceiverRegistrar.xml", cAlternateFileName="")) returned 1 [0045.975] FindNextFileW (in: hFindFile=0x381c40, lpFindFileData=0x31e56c | out: lpFindFileData=0x31e56c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xaf38ba92, ftCreationTime.dwHighDateTime=0x1ca0408, ftLastAccessTime.dwLowDateTime=0xaf38ba92, ftLastAccessTime.dwHighDateTime=0x1ca0408, ftLastWriteTime.dwLowDateTime=0x6c2edf75, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x5352, dwReserved0=0x0, dwReserved1=0x0, cFileName="wmpnss_bw120.jpg", cAlternateFileName="")) returned 1 [0045.975] FindNextFileW (in: hFindFile=0x381c40, lpFindFileData=0x31e56c | out: lpFindFileData=0x31e56c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xaf38ba92, ftCreationTime.dwHighDateTime=0x1ca0408, ftLastAccessTime.dwLowDateTime=0xaf38ba92, ftLastAccessTime.dwHighDateTime=0x1ca0408, ftLastWriteTime.dwLowDateTime=0x6c2edf75, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x1922, dwReserved0=0x0, dwReserved1=0x0, cFileName="wmpnss_bw120.png", cAlternateFileName="")) returned 1 [0045.975] FindNextFileW (in: hFindFile=0x381c40, lpFindFileData=0x31e56c | out: lpFindFileData=0x31e56c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xaf3b1bef, ftCreationTime.dwHighDateTime=0x1ca0408, ftLastAccessTime.dwLowDateTime=0xaf3b1bef, ftLastAccessTime.dwHighDateTime=0x1ca0408, ftLastWriteTime.dwLowDateTime=0x6c2edf75, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0xc38, dwReserved0=0x0, dwReserved1=0x0, cFileName="wmpnss_bw32.bmp", cAlternateFileName="")) returned 1 [0045.975] FindNextFileW (in: hFindFile=0x381c40, lpFindFileData=0x31e56c | out: lpFindFileData=0x31e56c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xaf3b1bef, ftCreationTime.dwHighDateTime=0x1ca0408, ftLastAccessTime.dwLowDateTime=0xaf3b1bef, ftLastAccessTime.dwHighDateTime=0x1ca0408, ftLastWriteTime.dwLowDateTime=0x6c2edf75, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x231f, dwReserved0=0x0, dwReserved1=0x0, cFileName="wmpnss_bw32.jpg", cAlternateFileName="")) returned 1 [0045.975] FindNextFileW (in: hFindFile=0x381c40, lpFindFileData=0x31e56c | out: lpFindFileData=0x31e56c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xaf3d7d4c, ftCreationTime.dwHighDateTime=0x1ca0408, ftLastAccessTime.dwLowDateTime=0xaf3d7d4c, ftLastAccessTime.dwHighDateTime=0x1ca0408, ftLastWriteTime.dwLowDateTime=0x6c2edf75, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x980, dwReserved0=0x0, dwReserved1=0x0, cFileName="wmpnss_bw48.bmp", cAlternateFileName="")) returned 1 [0045.975] FindNextFileW (in: hFindFile=0x381c40, lpFindFileData=0x31e56c | out: lpFindFileData=0x31e56c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xaf3fdea9, ftCreationTime.dwHighDateTime=0x1ca0408, ftLastAccessTime.dwLowDateTime=0xaf3fdea9, ftLastAccessTime.dwHighDateTime=0x1ca0408, ftLastWriteTime.dwLowDateTime=0x6c2edf75, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x2aa0, dwReserved0=0x0, dwReserved1=0x0, cFileName="wmpnss_bw48.jpg", cAlternateFileName="")) returned 1 [0045.976] FindNextFileW (in: hFindFile=0x381c40, lpFindFileData=0x31e56c | out: lpFindFileData=0x31e56c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xaf3fdea9, ftCreationTime.dwHighDateTime=0x1ca0408, ftLastAccessTime.dwLowDateTime=0xaf3fdea9, ftLastAccessTime.dwHighDateTime=0x1ca0408, ftLastWriteTime.dwLowDateTime=0x6c2edf75, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x101c, dwReserved0=0x0, dwReserved1=0x0, cFileName="wmpnss_bw48.png", cAlternateFileName="")) returned 1 [0045.976] FindNextFileW (in: hFindFile=0x381c40, lpFindFileData=0x31e56c | out: lpFindFileData=0x31e56c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xaf3fdea9, ftCreationTime.dwHighDateTime=0x1ca0408, ftLastAccessTime.dwLowDateTime=0xaf3fdea9, ftLastAccessTime.dwHighDateTime=0x1ca0408, ftLastWriteTime.dwLowDateTime=0x6c3140d3, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x5788, dwReserved0=0x0, dwReserved1=0x0, cFileName="wmpnss_color120.jpg", cAlternateFileName="")) returned 1 [0045.976] FindNextFileW (in: hFindFile=0x381c40, lpFindFileData=0x31e56c | out: lpFindFileData=0x31e56c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xaf424006, ftCreationTime.dwHighDateTime=0x1ca0408, ftLastAccessTime.dwLowDateTime=0xaf424006, ftLastAccessTime.dwHighDateTime=0x1ca0408, ftLastWriteTime.dwLowDateTime=0x6c3140d3, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x2f4b, dwReserved0=0x0, dwReserved1=0x0, cFileName="wmpnss_color120.png", cAlternateFileName="")) returned 1 [0045.976] FindNextFileW (in: hFindFile=0x381c40, lpFindFileData=0x31e56c | out: lpFindFileData=0x31e56c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xaf424006, ftCreationTime.dwHighDateTime=0x1ca0408, ftLastAccessTime.dwLowDateTime=0xaf424006, ftLastAccessTime.dwHighDateTime=0x1ca0408, ftLastWriteTime.dwLowDateTime=0x6c3140d3, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0xc38, dwReserved0=0x0, dwReserved1=0x0, cFileName="wmpnss_color32.bmp", cAlternateFileName="")) returned 1 [0045.976] FindNextFileW (in: hFindFile=0x381c40, lpFindFileData=0x31e56c | out: lpFindFileData=0x31e56c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xaf44a163, ftCreationTime.dwHighDateTime=0x1ca0408, ftLastAccessTime.dwLowDateTime=0xaf44a163, ftLastAccessTime.dwHighDateTime=0x1ca0408, ftLastWriteTime.dwLowDateTime=0x6c3140d3, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x24cd, dwReserved0=0x0, dwReserved1=0x0, cFileName="wmpnss_color32.jpg", cAlternateFileName="")) returned 1 [0045.976] FindNextFileW (in: hFindFile=0x381c40, lpFindFileData=0x31e56c | out: lpFindFileData=0x31e56c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xaf44a163, ftCreationTime.dwHighDateTime=0x1ca0408, ftLastAccessTime.dwLowDateTime=0xaf44a163, ftLastAccessTime.dwHighDateTime=0x1ca0408, ftLastWriteTime.dwLowDateTime=0x6c3140d3, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x1b38, dwReserved0=0x0, dwReserved1=0x0, cFileName="wmpnss_color48.bmp", cAlternateFileName="")) returned 1 [0045.976] FindNextFileW (in: hFindFile=0x381c40, lpFindFileData=0x31e56c | out: lpFindFileData=0x31e56c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xaf44a163, ftCreationTime.dwHighDateTime=0x1ca0408, ftLastAccessTime.dwLowDateTime=0xaf44a163, ftLastAccessTime.dwHighDateTime=0x1ca0408, ftLastWriteTime.dwLowDateTime=0x6c3140d3, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x2c85, dwReserved0=0x0, dwReserved1=0x0, cFileName="wmpnss_color48.jpg", cAlternateFileName="")) returned 1 [0045.977] FindNextFileW (in: hFindFile=0x381c40, lpFindFileData=0x31e56c | out: lpFindFileData=0x31e56c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xaf4702c0, ftCreationTime.dwHighDateTime=0x1ca0408, ftLastAccessTime.dwLowDateTime=0xaf4702c0, ftLastAccessTime.dwHighDateTime=0x1ca0408, ftLastWriteTime.dwLowDateTime=0x6c3140d3, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x1532, dwReserved0=0x0, dwReserved1=0x0, cFileName="wmpnss_color48.png", cAlternateFileName="")) returned 1 [0045.977] FindNextFileW (in: hFindFile=0x381c40, lpFindFileData=0x31e56c | out: lpFindFileData=0x31e56c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xaf4702c0, ftCreationTime.dwHighDateTime=0x1ca0408, ftLastAccessTime.dwLowDateTime=0xaf4702c0, ftLastAccessTime.dwHighDateTime=0x1ca0408, ftLastWriteTime.dwLowDateTime=0x6c3140d3, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x1532, dwReserved0=0x0, dwReserved1=0x0, cFileName="wmpnss_color48.png", cAlternateFileName="")) returned 0 [0045.977] FindClose (in: hFindFile=0x381c40 | out: hFindFile=0x381c40) returned 1 [0045.978] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Windows Media Player\\Network Sharing\\ConnectionManager.xml", nBufferLength=0x105, lpBuffer=0x31e20c, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Windows Media Player\\Network Sharing\\ConnectionManager.xml", lpFilePart=0x0) returned 0x4b [0045.978] CreateFileW (lpFileName="C:\\Program Files\\Windows Media Player\\Network Sharing\\ConnectionManager.xml" (normalized: "c:\\program files\\windows media player\\network sharing\\connectionmanager.xml"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x274 [0045.979] GetFileType (hFile=0x274) returned 0x1 [0045.979] GetFileType (hFile=0x274) returned 0x1 [0045.979] GetFileSize (in: hFile=0x274, lpFileSizeHigh=0x31e808 | out: lpFileSizeHigh=0x31e808*=0x0) returned 0x152e [0045.979] ReadFile (in: hFile=0x274, lpBuffer=0x265daac, nNumberOfBytesToRead=0x152e, lpNumberOfBytesRead=0x31e7b4, lpOverlapped=0x0 | out: lpBuffer=0x265daac*, lpNumberOfBytesRead=0x31e7b4*=0x152e, lpOverlapped=0x0) returned 1 [0045.981] CloseHandle (hObject=0x274) returned 1 [0046.020] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Windows Media Player\\Network Sharing\\ConnectionManager.xml", nBufferLength=0x105, lpBuffer=0x31e1f8, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Windows Media Player\\Network Sharing\\ConnectionManager.xml", lpFilePart=0x0) returned 0x4b [0046.020] CreateFileW (lpFileName="C:\\Program Files\\Windows Media Player\\Network Sharing\\ConnectionManager.xml" (normalized: "c:\\program files\\windows media player\\network sharing\\connectionmanager.xml"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0xffffffff [0046.021] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31d528) returned 1 [0046.021] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e834) returned 1 [0046.021] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Windows Media Player\\Skins", nBufferLength=0x105, lpBuffer=0x31e33c, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Windows Media Player\\Skins", lpFilePart=0x0) returned 0x2b [0046.021] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Windows Media Player\\Skins\\", nBufferLength=0x105, lpBuffer=0x31e310, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Windows Media Player\\Skins\\", lpFilePart=0x0) returned 0x2c [0046.021] FindFirstFileW (in: lpFileName="C:\\Program Files\\Windows Media Player\\Skins\\*", lpFindFileData=0x31e55c | out: lpFindFileData=0x31e55c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x80046d91, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x9874cd8b, ftLastAccessTime.dwHighDateTime=0x1cb892c, ftLastWriteTime.dwLowDateTime=0x9874cd8b, ftLastWriteTime.dwHighDateTime=0x1cb892c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x381b40 [0046.022] FindNextFileW (in: hFindFile=0x381b40, lpFindFileData=0x31e56c | out: lpFindFileData=0x31e56c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x80046d91, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x9874cd8b, ftLastAccessTime.dwHighDateTime=0x1cb892c, ftLastWriteTime.dwLowDateTime=0x9874cd8b, ftLastWriteTime.dwHighDateTime=0x1cb892c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0046.022] FindNextFileW (in: hFindFile=0x381b40, lpFindFileData=0x31e56c | out: lpFindFileData=0x31e56c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa9277700, ftCreationTime.dwHighDateTime=0x1cb892b, ftLastAccessTime.dwLowDateTime=0xa9277700, ftLastAccessTime.dwHighDateTime=0x1cb892b, ftLastWriteTime.dwLowDateTime=0xa9277700, ftLastWriteTime.dwHighDateTime=0x1cb892b, nFileSizeHigh=0x0, nFileSizeLow=0x10689, dwReserved0=0x0, dwReserved1=0x0, cFileName="Revert.wmz", cAlternateFileName="")) returned 1 [0046.022] FindNextFileW (in: hFindFile=0x381b40, lpFindFileData=0x31e56c | out: lpFindFileData=0x31e56c*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0046.022] FindClose (in: hFindFile=0x381b40 | out: hFindFile=0x381b40) returned 1 [0046.022] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e7f4) returned 1 [0046.022] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e800) returned 1 [0046.022] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e834) returned 1 [0046.022] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Windows Media Player\\Skins", nBufferLength=0x105, lpBuffer=0x31e33c, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Windows Media Player\\Skins", lpFilePart=0x0) returned 0x2b [0046.022] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Windows Media Player\\Skins\\", nBufferLength=0x105, lpBuffer=0x31e310, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Windows Media Player\\Skins\\", lpFilePart=0x0) returned 0x2c [0046.022] FindFirstFileW (in: lpFileName="C:\\Program Files\\Windows Media Player\\Skins\\*", lpFindFileData=0x31e55c | out: lpFindFileData=0x31e55c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x80046d91, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x9874cd8b, ftLastAccessTime.dwHighDateTime=0x1cb892c, ftLastWriteTime.dwLowDateTime=0x9874cd8b, ftLastWriteTime.dwHighDateTime=0x1cb892c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x381b40 [0046.023] FindNextFileW (in: hFindFile=0x381b40, lpFindFileData=0x31e56c | out: lpFindFileData=0x31e56c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x80046d91, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x9874cd8b, ftLastAccessTime.dwHighDateTime=0x1cb892c, ftLastWriteTime.dwLowDateTime=0x9874cd8b, ftLastWriteTime.dwHighDateTime=0x1cb892c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0046.023] FindNextFileW (in: hFindFile=0x381b40, lpFindFileData=0x31e56c | out: lpFindFileData=0x31e56c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa9277700, ftCreationTime.dwHighDateTime=0x1cb892b, ftLastAccessTime.dwLowDateTime=0xa9277700, ftLastAccessTime.dwHighDateTime=0x1cb892b, ftLastWriteTime.dwLowDateTime=0xa9277700, ftLastWriteTime.dwHighDateTime=0x1cb892b, nFileSizeHigh=0x0, nFileSizeLow=0x10689, dwReserved0=0x0, dwReserved1=0x0, cFileName="Revert.wmz", cAlternateFileName="")) returned 1 [0046.023] FindNextFileW (in: hFindFile=0x381b40, lpFindFileData=0x31e56c | out: lpFindFileData=0x31e56c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa9277700, ftCreationTime.dwHighDateTime=0x1cb892b, ftLastAccessTime.dwLowDateTime=0xa9277700, ftLastAccessTime.dwHighDateTime=0x1cb892b, ftLastWriteTime.dwLowDateTime=0xa9277700, ftLastWriteTime.dwHighDateTime=0x1cb892b, nFileSizeHigh=0x0, nFileSizeLow=0x10689, dwReserved0=0x0, dwReserved1=0x0, cFileName="Revert.wmz", cAlternateFileName="")) returned 0 [0046.023] FindClose (in: hFindFile=0x381b40 | out: hFindFile=0x381b40) returned 1 [0046.023] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e7f4) returned 1 [0046.023] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e800) returned 1 [0046.023] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e834) returned 1 [0046.023] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Windows Media Player\\Visualizations", nBufferLength=0x105, lpBuffer=0x31e33c, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Windows Media Player\\Visualizations", lpFilePart=0x0) returned 0x34 [0046.023] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Windows Media Player\\Visualizations\\", nBufferLength=0x105, lpBuffer=0x31e310, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Windows Media Player\\Visualizations\\", lpFilePart=0x0) returned 0x35 [0046.023] FindFirstFileW (in: lpFileName="C:\\Program Files\\Windows Media Player\\Visualizations\\*", lpFindFileData=0x31e55c | out: lpFindFileData=0x31e55c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x80020c30, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x80020c30, ftLastAccessTime.dwHighDateTime=0x1ca0444, ftLastWriteTime.dwLowDateTime=0x80020c30, ftLastWriteTime.dwHighDateTime=0x1ca0444, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x381b40 [0046.024] FindNextFileW (in: hFindFile=0x381b40, lpFindFileData=0x31e56c | out: lpFindFileData=0x31e56c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x80020c30, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x80020c30, ftLastAccessTime.dwHighDateTime=0x1ca0444, ftLastWriteTime.dwLowDateTime=0x80020c30, ftLastWriteTime.dwHighDateTime=0x1ca0444, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0046.024] FindNextFileW (in: hFindFile=0x381b40, lpFindFileData=0x31e56c | out: lpFindFileData=0x31e56c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x80020c30, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x80020c30, ftLastAccessTime.dwHighDateTime=0x1ca0444, ftLastWriteTime.dwLowDateTime=0x80020c30, ftLastWriteTime.dwHighDateTime=0x1ca0444, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 0 [0046.024] FindClose (in: hFindFile=0x381b40 | out: hFindFile=0x381b40) returned 1 [0046.024] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e7f4) returned 1 [0046.024] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e800) returned 1 [0046.024] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e834) returned 1 [0046.024] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Windows Media Player\\Visualizations", nBufferLength=0x105, lpBuffer=0x31e33c, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Windows Media Player\\Visualizations", lpFilePart=0x0) returned 0x34 [0046.024] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Windows Media Player\\Visualizations\\", nBufferLength=0x105, lpBuffer=0x31e310, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Windows Media Player\\Visualizations\\", lpFilePart=0x0) returned 0x35 [0046.024] FindFirstFileW (in: lpFileName="C:\\Program Files\\Windows Media Player\\Visualizations\\*", lpFindFileData=0x31e55c | out: lpFindFileData=0x31e55c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x80020c30, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x80020c30, ftLastAccessTime.dwHighDateTime=0x1ca0444, ftLastWriteTime.dwLowDateTime=0x80020c30, ftLastWriteTime.dwHighDateTime=0x1ca0444, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x381b40 [0046.025] FindNextFileW (in: hFindFile=0x381b40, lpFindFileData=0x31e56c | out: lpFindFileData=0x31e56c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x80020c30, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x80020c30, ftLastAccessTime.dwHighDateTime=0x1ca0444, ftLastWriteTime.dwLowDateTime=0x80020c30, ftLastWriteTime.dwHighDateTime=0x1ca0444, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0046.025] FindNextFileW (in: hFindFile=0x381b40, lpFindFileData=0x31e56c | out: lpFindFileData=0x31e56c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x80020c30, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x80020c30, ftLastAccessTime.dwHighDateTime=0x1ca0444, ftLastWriteTime.dwLowDateTime=0x80020c30, ftLastWriteTime.dwHighDateTime=0x1ca0444, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 0 [0046.025] FindClose (in: hFindFile=0x381b40 | out: hFindFile=0x381b40) returned 1 [0046.025] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e7f4) returned 1 [0046.025] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e800) returned 1 [0046.025] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e8ac) returned 1 [0046.025] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Windows NT", nBufferLength=0x105, lpBuffer=0x31e3b4, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Windows NT", lpFilePart=0x0) returned 0x1b [0046.025] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Windows NT\\", nBufferLength=0x105, lpBuffer=0x31e388, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Windows NT\\", lpFilePart=0x0) returned 0x1c [0046.025] FindFirstFileW (in: lpFileName="C:\\Program Files\\Windows NT\\*", lpFindFileData=0x31e5d4 | out: lpFindFileData=0x31e5d4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd8ab1dc, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xda90d160, ftLastAccessTime.dwHighDateTime=0x1d5e82a, ftLastWriteTime.dwLowDateTime=0xda90d160, ftLastWriteTime.dwHighDateTime=0x1d5e82a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x381b40 [0046.025] FindNextFileW (in: hFindFile=0x381b40, lpFindFileData=0x31e5e4 | out: lpFindFileData=0x31e5e4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd8ab1dc, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xda90d160, ftLastAccessTime.dwHighDateTime=0x1d5e82a, ftLastWriteTime.dwLowDateTime=0xda90d160, ftLastWriteTime.dwHighDateTime=0x1d5e82a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0046.026] FindNextFileW (in: hFindFile=0x381b40, lpFindFileData=0x31e5e4 | out: lpFindFileData=0x31e5e4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x80020c30, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x1eab37af, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x1eab37af, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Accessories", cAlternateFileName="ACCESS~1")) returned 1 [0046.026] FindNextFileW (in: hFindFile=0x381b40, lpFindFileData=0x31e5e4 | out: lpFindFileData=0x31e5e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb127e820, ftCreationTime.dwHighDateTime=0x1d5ac63, ftLastAccessTime.dwLowDateTime=0xaa144480, ftLastAccessTime.dwHighDateTime=0x1d575d0, ftLastWriteTime.dwLowDateTime=0xaa144480, ftLastWriteTime.dwHighDateTime=0x1d575d0, nFileSizeHigh=0x0, nFileSizeLow=0x13a00, dwReserved0=0x0, dwReserved1=0x0, cFileName="and_mba_subsidiary.exe", cAlternateFileName="AND_MB~1.EXE")) returned 1 [0046.026] FindNextFileW (in: hFindFile=0x381b40, lpFindFileData=0x31e5e4 | out: lpFindFileData=0x31e5e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x420f4ee0, ftCreationTime.dwHighDateTime=0x1d58f9b, ftLastAccessTime.dwLowDateTime=0xb1427430, ftLastAccessTime.dwHighDateTime=0x1d59429, ftLastWriteTime.dwLowDateTime=0xb1427430, ftLastWriteTime.dwHighDateTime=0x1d59429, nFileSizeHigh=0x0, nFileSizeLow=0x13a00, dwReserved0=0x0, dwReserved1=0x0, cFileName="oscartagged.exe", cAlternateFileName="OSCART~1.EXE")) returned 1 [0046.026] FindNextFileW (in: hFindFile=0x381b40, lpFindFileData=0x31e5e4 | out: lpFindFileData=0x31e5e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd1be24b0, ftCreationTime.dwHighDateTime=0x1d58651, ftLastAccessTime.dwLowDateTime=0xb4d6bbb0, ftLastAccessTime.dwHighDateTime=0x1d5a7f7, ftLastWriteTime.dwLowDateTime=0xb4d6bbb0, ftLastWriteTime.dwHighDateTime=0x1d5a7f7, nFileSizeHigh=0x0, nFileSizeLow=0x13a00, dwReserved0=0x0, dwReserved1=0x0, cFileName="pond mike aircraft.exe", cAlternateFileName="PONDMI~1.EXE")) returned 1 [0046.026] FindNextFileW (in: hFindFile=0x381b40, lpFindFileData=0x31e5e4 | out: lpFindFileData=0x31e5e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd0790c50, ftCreationTime.dwHighDateTime=0x1d5e22c, ftLastAccessTime.dwLowDateTime=0xcc16a740, ftLastAccessTime.dwHighDateTime=0x1d5dbc3, ftLastWriteTime.dwLowDateTime=0xcc16a740, ftLastWriteTime.dwHighDateTime=0x1d5dbc3, nFileSizeHigh=0x0, nFileSizeLow=0x13a00, dwReserved0=0x0, dwReserved1=0x0, cFileName="subsidiaries looks boxed.exe", cAlternateFileName="SUBSID~1.EXE")) returned 1 [0046.026] FindNextFileW (in: hFindFile=0x381b40, lpFindFileData=0x31e5e4 | out: lpFindFileData=0x31e5e4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd8ab1dc, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x1eab37af, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x1eab37af, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="TableTextService", cAlternateFileName="TABLET~1")) returned 1 [0046.026] FindNextFileW (in: hFindFile=0x381b40, lpFindFileData=0x31e5e4 | out: lpFindFileData=0x31e5e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1a3cea00, ftCreationTime.dwHighDateTime=0x1d5e0c0, ftLastAccessTime.dwLowDateTime=0x756f08d0, ftLastAccessTime.dwHighDateTime=0x1d58595, ftLastWriteTime.dwLowDateTime=0x756f08d0, ftLastWriteTime.dwHighDateTime=0x1d58595, nFileSizeHigh=0x0, nFileSizeLow=0x13a00, dwReserved0=0x0, dwReserved1=0x0, cFileName="trillian.exe", cAlternateFileName="")) returned 1 [0046.026] FindNextFileW (in: hFindFile=0x381b40, lpFindFileData=0x31e5e4 | out: lpFindFileData=0x31e5e4*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0046.027] FindClose (in: hFindFile=0x381b40 | out: hFindFile=0x381b40) returned 1 [0046.027] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e86c) returned 1 [0046.027] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e878) returned 1 [0046.027] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e8ac) returned 1 [0046.027] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Windows NT", nBufferLength=0x105, lpBuffer=0x31e3b4, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Windows NT", lpFilePart=0x0) returned 0x1b [0046.027] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Windows NT\\", nBufferLength=0x105, lpBuffer=0x31e388, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Windows NT\\", lpFilePart=0x0) returned 0x1c [0046.027] FindFirstFileW (in: lpFileName="C:\\Program Files\\Windows NT\\*", lpFindFileData=0x31e5d4 | out: lpFindFileData=0x31e5d4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd8ab1dc, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xda90d160, ftLastAccessTime.dwHighDateTime=0x1d5e82a, ftLastWriteTime.dwLowDateTime=0xda90d160, ftLastWriteTime.dwHighDateTime=0x1d5e82a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x381b40 [0046.027] FindNextFileW (in: hFindFile=0x381b40, lpFindFileData=0x31e5e4 | out: lpFindFileData=0x31e5e4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd8ab1dc, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xda90d160, ftLastAccessTime.dwHighDateTime=0x1d5e82a, ftLastWriteTime.dwLowDateTime=0xda90d160, ftLastWriteTime.dwHighDateTime=0x1d5e82a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0046.027] FindNextFileW (in: hFindFile=0x381b40, lpFindFileData=0x31e5e4 | out: lpFindFileData=0x31e5e4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x80020c30, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x1eab37af, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x1eab37af, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Accessories", cAlternateFileName="ACCESS~1")) returned 1 [0046.027] FindNextFileW (in: hFindFile=0x381b40, lpFindFileData=0x31e5e4 | out: lpFindFileData=0x31e5e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb127e820, ftCreationTime.dwHighDateTime=0x1d5ac63, ftLastAccessTime.dwLowDateTime=0xaa144480, ftLastAccessTime.dwHighDateTime=0x1d575d0, ftLastWriteTime.dwLowDateTime=0xaa144480, ftLastWriteTime.dwHighDateTime=0x1d575d0, nFileSizeHigh=0x0, nFileSizeLow=0x13a00, dwReserved0=0x0, dwReserved1=0x0, cFileName="and_mba_subsidiary.exe", cAlternateFileName="AND_MB~1.EXE")) returned 1 [0046.028] FindNextFileW (in: hFindFile=0x381b40, lpFindFileData=0x31e5e4 | out: lpFindFileData=0x31e5e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x420f4ee0, ftCreationTime.dwHighDateTime=0x1d58f9b, ftLastAccessTime.dwLowDateTime=0xb1427430, ftLastAccessTime.dwHighDateTime=0x1d59429, ftLastWriteTime.dwLowDateTime=0xb1427430, ftLastWriteTime.dwHighDateTime=0x1d59429, nFileSizeHigh=0x0, nFileSizeLow=0x13a00, dwReserved0=0x0, dwReserved1=0x0, cFileName="oscartagged.exe", cAlternateFileName="OSCART~1.EXE")) returned 1 [0046.028] FindNextFileW (in: hFindFile=0x381b40, lpFindFileData=0x31e5e4 | out: lpFindFileData=0x31e5e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd1be24b0, ftCreationTime.dwHighDateTime=0x1d58651, ftLastAccessTime.dwLowDateTime=0xb4d6bbb0, ftLastAccessTime.dwHighDateTime=0x1d5a7f7, ftLastWriteTime.dwLowDateTime=0xb4d6bbb0, ftLastWriteTime.dwHighDateTime=0x1d5a7f7, nFileSizeHigh=0x0, nFileSizeLow=0x13a00, dwReserved0=0x0, dwReserved1=0x0, cFileName="pond mike aircraft.exe", cAlternateFileName="PONDMI~1.EXE")) returned 1 [0046.028] FindNextFileW (in: hFindFile=0x381b40, lpFindFileData=0x31e5e4 | out: lpFindFileData=0x31e5e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd0790c50, ftCreationTime.dwHighDateTime=0x1d5e22c, ftLastAccessTime.dwLowDateTime=0xcc16a740, ftLastAccessTime.dwHighDateTime=0x1d5dbc3, ftLastWriteTime.dwLowDateTime=0xcc16a740, ftLastWriteTime.dwHighDateTime=0x1d5dbc3, nFileSizeHigh=0x0, nFileSizeLow=0x13a00, dwReserved0=0x0, dwReserved1=0x0, cFileName="subsidiaries looks boxed.exe", cAlternateFileName="SUBSID~1.EXE")) returned 1 [0046.028] FindNextFileW (in: hFindFile=0x381b40, lpFindFileData=0x31e5e4 | out: lpFindFileData=0x31e5e4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd8ab1dc, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x1eab37af, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x1eab37af, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="TableTextService", cAlternateFileName="TABLET~1")) returned 1 [0046.028] FindNextFileW (in: hFindFile=0x381b40, lpFindFileData=0x31e5e4 | out: lpFindFileData=0x31e5e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1a3cea00, ftCreationTime.dwHighDateTime=0x1d5e0c0, ftLastAccessTime.dwLowDateTime=0x756f08d0, ftLastAccessTime.dwHighDateTime=0x1d58595, ftLastWriteTime.dwLowDateTime=0x756f08d0, ftLastWriteTime.dwHighDateTime=0x1d58595, nFileSizeHigh=0x0, nFileSizeLow=0x13a00, dwReserved0=0x0, dwReserved1=0x0, cFileName="trillian.exe", cAlternateFileName="")) returned 1 [0046.028] FindNextFileW (in: hFindFile=0x381b40, lpFindFileData=0x31e5e4 | out: lpFindFileData=0x31e5e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1a3cea00, ftCreationTime.dwHighDateTime=0x1d5e0c0, ftLastAccessTime.dwLowDateTime=0x756f08d0, ftLastAccessTime.dwHighDateTime=0x1d58595, ftLastWriteTime.dwLowDateTime=0x756f08d0, ftLastWriteTime.dwHighDateTime=0x1d58595, nFileSizeHigh=0x0, nFileSizeLow=0x13a00, dwReserved0=0x0, dwReserved1=0x0, cFileName="trillian.exe", cAlternateFileName="")) returned 0 [0046.028] FindClose (in: hFindFile=0x381b40 | out: hFindFile=0x381b40) returned 1 [0046.029] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e86c) returned 1 [0046.029] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e878) returned 1 [0046.029] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e834) returned 1 [0046.029] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Windows NT\\Accessories", nBufferLength=0x105, lpBuffer=0x31e33c, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Windows NT\\Accessories", lpFilePart=0x0) returned 0x27 [0046.029] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Windows NT\\Accessories\\", nBufferLength=0x105, lpBuffer=0x31e310, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Windows NT\\Accessories\\", lpFilePart=0x0) returned 0x28 [0046.029] FindFirstFileW (in: lpFileName="C:\\Program Files\\Windows NT\\Accessories\\*", lpFindFileData=0x31e55c | out: lpFindFileData=0x31e55c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x80020c30, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x1eab37af, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x1eab37af, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x381b40 [0046.029] FindNextFileW (in: hFindFile=0x381b40, lpFindFileData=0x31e56c | out: lpFindFileData=0x31e56c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x80020c30, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x1eab37af, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x1eab37af, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0046.029] FindNextFileW (in: hFindFile=0x381b40, lpFindFileData=0x31e56c | out: lpFindFileData=0x31e56c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1eab37af, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x23ef19fc, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x1eab37af, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="en-US", cAlternateFileName="")) returned 1 [0046.029] FindNextFileW (in: hFindFile=0x381b40, lpFindFileData=0x31e56c | out: lpFindFileData=0x31e56c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9e3a861e, ftCreationTime.dwHighDateTime=0x1cb892b, ftLastAccessTime.dwLowDateTime=0x9e3a861e, ftLastAccessTime.dwHighDateTime=0x1cb892b, ftLastWriteTime.dwLowDateTime=0x9e7acb45, ftLastWriteTime.dwHighDateTime=0x1cb892b, nFileSizeHigh=0x0, nFileSizeLow=0x45f000, dwReserved0=0x0, dwReserved1=0x0, cFileName="wordpad.exe", cAlternateFileName="")) returned 1 [0046.029] FindNextFileW (in: hFindFile=0x381b40, lpFindFileData=0x31e56c | out: lpFindFileData=0x31e56c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xea54dff0, ftCreationTime.dwHighDateTime=0x1ca0415, ftLastAccessTime.dwLowDateTime=0xea54dff0, ftLastAccessTime.dwHighDateTime=0x1ca0415, ftLastWriteTime.dwLowDateTime=0x464289e0, ftLastWriteTime.dwHighDateTime=0x1ca0424, nFileSizeHigh=0x0, nFileSizeLow=0x3a000, dwReserved0=0x0, dwReserved1=0x0, cFileName="WordpadFilter.dll", cAlternateFileName="")) returned 1 [0046.030] FindNextFileW (in: hFindFile=0x381b40, lpFindFileData=0x31e56c | out: lpFindFileData=0x31e56c*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0046.030] FindClose (in: hFindFile=0x381b40 | out: hFindFile=0x381b40) returned 1 [0046.030] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e7f4) returned 1 [0046.030] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e800) returned 1 [0046.030] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e834) returned 1 [0046.030] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Windows NT\\Accessories", nBufferLength=0x105, lpBuffer=0x31e33c, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Windows NT\\Accessories", lpFilePart=0x0) returned 0x27 [0046.030] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Windows NT\\Accessories\\", nBufferLength=0x105, lpBuffer=0x31e310, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Windows NT\\Accessories\\", lpFilePart=0x0) returned 0x28 [0046.030] FindFirstFileW (in: lpFileName="C:\\Program Files\\Windows NT\\Accessories\\*", lpFindFileData=0x31e55c | out: lpFindFileData=0x31e55c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x80020c30, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x1eab37af, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x1eab37af, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x381b40 [0046.030] FindNextFileW (in: hFindFile=0x381b40, lpFindFileData=0x31e56c | out: lpFindFileData=0x31e56c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x80020c30, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x1eab37af, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x1eab37af, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0046.030] FindNextFileW (in: hFindFile=0x381b40, lpFindFileData=0x31e56c | out: lpFindFileData=0x31e56c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1eab37af, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x23ef19fc, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x1eab37af, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="en-US", cAlternateFileName="")) returned 1 [0046.031] FindNextFileW (in: hFindFile=0x381b40, lpFindFileData=0x31e56c | out: lpFindFileData=0x31e56c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9e3a861e, ftCreationTime.dwHighDateTime=0x1cb892b, ftLastAccessTime.dwLowDateTime=0x9e3a861e, ftLastAccessTime.dwHighDateTime=0x1cb892b, ftLastWriteTime.dwLowDateTime=0x9e7acb45, ftLastWriteTime.dwHighDateTime=0x1cb892b, nFileSizeHigh=0x0, nFileSizeLow=0x45f000, dwReserved0=0x0, dwReserved1=0x0, cFileName="wordpad.exe", cAlternateFileName="")) returned 1 [0046.031] FindNextFileW (in: hFindFile=0x381b40, lpFindFileData=0x31e56c | out: lpFindFileData=0x31e56c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xea54dff0, ftCreationTime.dwHighDateTime=0x1ca0415, ftLastAccessTime.dwLowDateTime=0xea54dff0, ftLastAccessTime.dwHighDateTime=0x1ca0415, ftLastWriteTime.dwLowDateTime=0x464289e0, ftLastWriteTime.dwHighDateTime=0x1ca0424, nFileSizeHigh=0x0, nFileSizeLow=0x3a000, dwReserved0=0x0, dwReserved1=0x0, cFileName="WordpadFilter.dll", cAlternateFileName="")) returned 1 [0046.031] FindNextFileW (in: hFindFile=0x381b40, lpFindFileData=0x31e56c | out: lpFindFileData=0x31e56c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xea54dff0, ftCreationTime.dwHighDateTime=0x1ca0415, ftLastAccessTime.dwLowDateTime=0xea54dff0, ftLastAccessTime.dwHighDateTime=0x1ca0415, ftLastWriteTime.dwLowDateTime=0x464289e0, ftLastWriteTime.dwHighDateTime=0x1ca0424, nFileSizeHigh=0x0, nFileSizeLow=0x3a000, dwReserved0=0x0, dwReserved1=0x0, cFileName="WordpadFilter.dll", cAlternateFileName="")) returned 0 [0046.031] FindClose (in: hFindFile=0x381b40 | out: hFindFile=0x381b40) returned 1 [0046.031] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e7f4) returned 1 [0046.031] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e800) returned 1 [0046.031] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e7bc) returned 1 [0046.031] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Windows NT\\Accessories\\en-US", nBufferLength=0x105, lpBuffer=0x31e2c4, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Windows NT\\Accessories\\en-US", lpFilePart=0x0) returned 0x2d [0046.031] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Windows NT\\Accessories\\en-US\\", nBufferLength=0x105, lpBuffer=0x31e298, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Windows NT\\Accessories\\en-US\\", lpFilePart=0x0) returned 0x2e [0046.031] FindFirstFileW (in: lpFileName="C:\\Program Files\\Windows NT\\Accessories\\en-US\\*", lpFindFileData=0x31e4e4 | out: lpFindFileData=0x31e4e4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1eab37af, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x23ef19fc, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x1eab37af, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x381b40 [0046.032] FindNextFileW (in: hFindFile=0x381b40, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1eab37af, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x23ef19fc, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x1eab37af, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0046.032] FindNextFileW (in: hFindFile=0x381b40, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe421d16, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0xe874c0b, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0xe421d16, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0xca00, dwReserved0=0x0, dwReserved1=0x0, cFileName="wordpad.exe.mui", cAlternateFileName="")) returned 1 [0046.032] FindNextFileW (in: hFindFile=0x381b40, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0046.032] FindClose (in: hFindFile=0x381b40 | out: hFindFile=0x381b40) returned 1 [0046.032] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e77c) returned 1 [0046.032] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e788) returned 1 [0046.032] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e7bc) returned 1 [0046.032] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Windows NT\\Accessories\\en-US", nBufferLength=0x105, lpBuffer=0x31e2c4, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Windows NT\\Accessories\\en-US", lpFilePart=0x0) returned 0x2d [0046.032] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Windows NT\\Accessories\\en-US\\", nBufferLength=0x105, lpBuffer=0x31e298, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Windows NT\\Accessories\\en-US\\", lpFilePart=0x0) returned 0x2e [0046.032] FindFirstFileW (in: lpFileName="C:\\Program Files\\Windows NT\\Accessories\\en-US\\*", lpFindFileData=0x31e4e4 | out: lpFindFileData=0x31e4e4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1eab37af, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x23ef19fc, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x1eab37af, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x381b40 [0046.032] FindNextFileW (in: hFindFile=0x381b40, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1eab37af, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x23ef19fc, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x1eab37af, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0046.033] FindNextFileW (in: hFindFile=0x381b40, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe421d16, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0xe874c0b, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0xe421d16, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0xca00, dwReserved0=0x0, dwReserved1=0x0, cFileName="wordpad.exe.mui", cAlternateFileName="")) returned 1 [0046.033] FindNextFileW (in: hFindFile=0x381b40, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe421d16, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0xe874c0b, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0xe421d16, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0xca00, dwReserved0=0x0, dwReserved1=0x0, cFileName="wordpad.exe.mui", cAlternateFileName="")) returned 0 [0046.033] FindClose (in: hFindFile=0x381b40 | out: hFindFile=0x381b40) returned 1 [0046.033] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e77c) returned 1 [0046.033] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e788) returned 1 [0046.033] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e834) returned 1 [0046.033] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Windows NT\\TableTextService", nBufferLength=0x105, lpBuffer=0x31e33c, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Windows NT\\TableTextService", lpFilePart=0x0) returned 0x2c [0046.033] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Windows NT\\TableTextService\\", nBufferLength=0x105, lpBuffer=0x31e310, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Windows NT\\TableTextService\\", lpFilePart=0x0) returned 0x2d [0046.033] FindFirstFileW (in: lpFileName="C:\\Program Files\\Windows NT\\TableTextService\\*", lpFindFileData=0x31e55c | out: lpFindFileData=0x31e55c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd8ab1dc, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x1eab37af, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x1eab37af, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x381b40 [0046.033] FindNextFileW (in: hFindFile=0x381b40, lpFindFileData=0x31e56c | out: lpFindFileData=0x31e56c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd8ab1dc, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x1eab37af, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x1eab37af, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0046.034] FindNextFileW (in: hFindFile=0x381b40, lpFindFileData=0x31e56c | out: lpFindFileData=0x31e56c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1eab37af, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x23ef19fc, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x1eab37af, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="en-US", cAlternateFileName="")) returned 1 [0046.034] FindNextFileW (in: hFindFile=0x381b40, lpFindFileData=0x31e56c | out: lpFindFileData=0x31e56c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x46672035, ftCreationTime.dwHighDateTime=0x1ca0413, ftLastAccessTime.dwLowDateTime=0x46672035, ftLastAccessTime.dwHighDateTime=0x1ca0413, ftLastWriteTime.dwLowDateTime=0x449faf50, ftLastWriteTime.dwHighDateTime=0x1ca0424, nFileSizeHigh=0x0, nFileSizeLow=0x5bc00, dwReserved0=0x0, dwReserved1=0x0, cFileName="TableTextService.dll", cAlternateFileName="")) returned 1 [0046.034] FindNextFileW (in: hFindFile=0x381b40, lpFindFileData=0x31e56c | out: lpFindFileData=0x31e56c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x72d933d2, ftCreationTime.dwHighDateTime=0x1ca0400, ftLastAccessTime.dwLowDateTime=0x72d933d2, ftLastAccessTime.dwHighDateTime=0x1ca0400, ftLastWriteTime.dwLowDateTime=0x6e10ff3, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x3f54, dwReserved0=0x0, dwReserved1=0x0, cFileName="TableTextServiceAmharic.txt", cAlternateFileName="")) returned 1 [0046.034] FindNextFileW (in: hFindFile=0x381b40, lpFindFileData=0x31e56c | out: lpFindFileData=0x31e56c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x72a73731, ftCreationTime.dwHighDateTime=0x1ca0400, ftLastAccessTime.dwLowDateTime=0x72a73731, ftLastAccessTime.dwHighDateTime=0x1ca0400, ftLastWriteTime.dwLowDateTime=0x6e8340d, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x136bf6, dwReserved0=0x0, dwReserved1=0x0, cFileName="TableTextServiceArray.txt", cAlternateFileName="")) returned 1 [0046.034] FindNextFileW (in: hFindFile=0x381b40, lpFindFileData=0x31e56c | out: lpFindFileData=0x31e56c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6e8340d, ftCreationTime.dwHighDateTime=0x1c9ea0f, ftLastAccessTime.dwLowDateTime=0x6e8340d, ftLastAccessTime.dwHighDateTime=0x1c9ea0f, ftLastWriteTime.dwLowDateTime=0x6f1b985, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0xef486, dwReserved0=0x0, dwReserved1=0x0, cFileName="TableTextServiceDaYi.txt", cAlternateFileName="")) returned 1 [0046.034] FindNextFileW (in: hFindFile=0x381b40, lpFindFileData=0x31e56c | out: lpFindFileData=0x31e56c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x72ae5b48, ftCreationTime.dwHighDateTime=0x1ca0400, ftLastAccessTime.dwLowDateTime=0x72ae5b48, ftLastAccessTime.dwHighDateTime=0x1ca0400, ftLastWriteTime.dwLowDateTime=0x72ada55, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x196b56, dwReserved0=0x0, dwReserved1=0x0, cFileName="TableTextServiceSimplifiedQuanPin.txt", cAlternateFileName="")) returned 1 [0046.034] FindNextFileW (in: hFindFile=0x381b40, lpFindFileData=0x31e56c | out: lpFindFileData=0x31e56c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x72b57f5f, ftCreationTime.dwHighDateTime=0x1ca0400, ftLastAccessTime.dwLowDateTime=0x72b57f5f, ftLastAccessTime.dwHighDateTime=0x1ca0400, ftLastWriteTime.dwLowDateTime=0x736c12b, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x160e36, dwReserved0=0x0, dwReserved1=0x0, cFileName="TableTextServiceSimplifiedShuangPin.txt", cAlternateFileName="")) returned 1 [0046.034] FindNextFileW (in: hFindFile=0x381b40, lpFindFileData=0x31e56c | out: lpFindFileData=0x31e56c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x72ba4219, ftCreationTime.dwHighDateTime=0x1ca0400, ftLastAccessTime.dwLowDateTime=0x72ba4219, ftLastAccessTime.dwHighDateTime=0x1ca0400, ftLastWriteTime.dwLowDateTime=0x742a801, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x1b9fb0, dwReserved0=0x0, dwReserved1=0x0, cFileName="TableTextServiceSimplifiedZhengMa.txt", cAlternateFileName="")) returned 1 [0046.035] FindNextFileW (in: hFindFile=0x381b40, lpFindFileData=0x31e56c | out: lpFindFileData=0x31e56c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x72d6d275, ftCreationTime.dwHighDateTime=0x1ca0400, ftLastAccessTime.dwLowDateTime=0x72d6d275, ftLastAccessTime.dwHighDateTime=0x1ca0400, ftLastWriteTime.dwLowDateTime=0x742a801, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0xafa8, dwReserved0=0x0, dwReserved1=0x0, cFileName="TableTextServiceYi.txt", cAlternateFileName="")) returned 1 [0046.035] FindNextFileW (in: hFindFile=0x381b40, lpFindFileData=0x31e56c | out: lpFindFileData=0x31e56c*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0046.035] FindClose (in: hFindFile=0x381b40 | out: hFindFile=0x381b40) returned 1 [0046.035] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e7f4) returned 1 [0046.035] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e800) returned 1 [0046.035] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e834) returned 1 [0046.035] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Windows NT\\TableTextService", nBufferLength=0x105, lpBuffer=0x31e33c, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Windows NT\\TableTextService", lpFilePart=0x0) returned 0x2c [0046.035] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Windows NT\\TableTextService\\", nBufferLength=0x105, lpBuffer=0x31e310, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Windows NT\\TableTextService\\", lpFilePart=0x0) returned 0x2d [0046.035] FindFirstFileW (in: lpFileName="C:\\Program Files\\Windows NT\\TableTextService\\*", lpFindFileData=0x31e55c | out: lpFindFileData=0x31e55c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd8ab1dc, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x1eab37af, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x1eab37af, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x381b40 [0046.035] FindNextFileW (in: hFindFile=0x381b40, lpFindFileData=0x31e56c | out: lpFindFileData=0x31e56c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd8ab1dc, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x1eab37af, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x1eab37af, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0046.036] FindNextFileW (in: hFindFile=0x381b40, lpFindFileData=0x31e56c | out: lpFindFileData=0x31e56c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1eab37af, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x23ef19fc, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x1eab37af, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="en-US", cAlternateFileName="")) returned 1 [0046.036] FindNextFileW (in: hFindFile=0x381b40, lpFindFileData=0x31e56c | out: lpFindFileData=0x31e56c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x46672035, ftCreationTime.dwHighDateTime=0x1ca0413, ftLastAccessTime.dwLowDateTime=0x46672035, ftLastAccessTime.dwHighDateTime=0x1ca0413, ftLastWriteTime.dwLowDateTime=0x449faf50, ftLastWriteTime.dwHighDateTime=0x1ca0424, nFileSizeHigh=0x0, nFileSizeLow=0x5bc00, dwReserved0=0x0, dwReserved1=0x0, cFileName="TableTextService.dll", cAlternateFileName="")) returned 1 [0046.036] FindNextFileW (in: hFindFile=0x381b40, lpFindFileData=0x31e56c | out: lpFindFileData=0x31e56c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x72d933d2, ftCreationTime.dwHighDateTime=0x1ca0400, ftLastAccessTime.dwLowDateTime=0x72d933d2, ftLastAccessTime.dwHighDateTime=0x1ca0400, ftLastWriteTime.dwLowDateTime=0x6e10ff3, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x3f54, dwReserved0=0x0, dwReserved1=0x0, cFileName="TableTextServiceAmharic.txt", cAlternateFileName="")) returned 1 [0046.036] FindNextFileW (in: hFindFile=0x381b40, lpFindFileData=0x31e56c | out: lpFindFileData=0x31e56c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x72a73731, ftCreationTime.dwHighDateTime=0x1ca0400, ftLastAccessTime.dwLowDateTime=0x72a73731, ftLastAccessTime.dwHighDateTime=0x1ca0400, ftLastWriteTime.dwLowDateTime=0x6e8340d, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x136bf6, dwReserved0=0x0, dwReserved1=0x0, cFileName="TableTextServiceArray.txt", cAlternateFileName="")) returned 1 [0046.036] FindNextFileW (in: hFindFile=0x381b40, lpFindFileData=0x31e56c | out: lpFindFileData=0x31e56c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6e8340d, ftCreationTime.dwHighDateTime=0x1c9ea0f, ftLastAccessTime.dwLowDateTime=0x6e8340d, ftLastAccessTime.dwHighDateTime=0x1c9ea0f, ftLastWriteTime.dwLowDateTime=0x6f1b985, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0xef486, dwReserved0=0x0, dwReserved1=0x0, cFileName="TableTextServiceDaYi.txt", cAlternateFileName="")) returned 1 [0046.036] FindNextFileW (in: hFindFile=0x381b40, lpFindFileData=0x31e56c | out: lpFindFileData=0x31e56c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x72ae5b48, ftCreationTime.dwHighDateTime=0x1ca0400, ftLastAccessTime.dwLowDateTime=0x72ae5b48, ftLastAccessTime.dwHighDateTime=0x1ca0400, ftLastWriteTime.dwLowDateTime=0x72ada55, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x196b56, dwReserved0=0x0, dwReserved1=0x0, cFileName="TableTextServiceSimplifiedQuanPin.txt", cAlternateFileName="")) returned 1 [0046.037] FindNextFileW (in: hFindFile=0x381b40, lpFindFileData=0x31e56c | out: lpFindFileData=0x31e56c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x72b57f5f, ftCreationTime.dwHighDateTime=0x1ca0400, ftLastAccessTime.dwLowDateTime=0x72b57f5f, ftLastAccessTime.dwHighDateTime=0x1ca0400, ftLastWriteTime.dwLowDateTime=0x736c12b, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x160e36, dwReserved0=0x0, dwReserved1=0x0, cFileName="TableTextServiceSimplifiedShuangPin.txt", cAlternateFileName="")) returned 1 [0046.037] FindNextFileW (in: hFindFile=0x381b40, lpFindFileData=0x31e56c | out: lpFindFileData=0x31e56c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x72ba4219, ftCreationTime.dwHighDateTime=0x1ca0400, ftLastAccessTime.dwLowDateTime=0x72ba4219, ftLastAccessTime.dwHighDateTime=0x1ca0400, ftLastWriteTime.dwLowDateTime=0x742a801, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x1b9fb0, dwReserved0=0x0, dwReserved1=0x0, cFileName="TableTextServiceSimplifiedZhengMa.txt", cAlternateFileName="")) returned 1 [0046.037] FindNextFileW (in: hFindFile=0x381b40, lpFindFileData=0x31e56c | out: lpFindFileData=0x31e56c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x72d6d275, ftCreationTime.dwHighDateTime=0x1ca0400, ftLastAccessTime.dwLowDateTime=0x72d6d275, ftLastAccessTime.dwHighDateTime=0x1ca0400, ftLastWriteTime.dwLowDateTime=0x742a801, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0xafa8, dwReserved0=0x0, dwReserved1=0x0, cFileName="TableTextServiceYi.txt", cAlternateFileName="")) returned 1 [0046.037] FindNextFileW (in: hFindFile=0x381b40, lpFindFileData=0x31e56c | out: lpFindFileData=0x31e56c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x72d6d275, ftCreationTime.dwHighDateTime=0x1ca0400, ftLastAccessTime.dwLowDateTime=0x72d6d275, ftLastAccessTime.dwHighDateTime=0x1ca0400, ftLastWriteTime.dwLowDateTime=0x742a801, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0xafa8, dwReserved0=0x0, dwReserved1=0x0, cFileName="TableTextServiceYi.txt", cAlternateFileName="")) returned 0 [0046.037] FindClose (in: hFindFile=0x381b40 | out: hFindFile=0x381b40) returned 1 [0046.037] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e7f4) returned 1 [0046.037] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e800) returned 1 [0046.037] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Windows NT\\TableTextService\\TableTextServiceAmharic.txt", nBufferLength=0x105, lpBuffer=0x31e20c, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Windows NT\\TableTextService\\TableTextServiceAmharic.txt", lpFilePart=0x0) returned 0x48 [0046.037] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e700) returned 1 [0046.037] CreateFileW (lpFileName="C:\\Program Files\\Windows NT\\TableTextService\\TableTextServiceAmharic.txt" (normalized: "c:\\program files\\windows nt\\tabletextservice\\tabletextserviceamharic.txt"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x274 [0046.038] GetFileType (hFile=0x274) returned 0x1 [0046.038] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e6fc) returned 1 [0046.038] GetFileType (hFile=0x274) returned 0x1 [0046.038] GetFileSize (in: hFile=0x274, lpFileSizeHigh=0x31e808 | out: lpFileSizeHigh=0x31e808*=0x0) returned 0x3f54 [0046.038] ReadFile (in: hFile=0x274, lpBuffer=0x26bd278, nNumberOfBytesToRead=0x3f54, lpNumberOfBytesRead=0x31e7b4, lpOverlapped=0x0 | out: lpBuffer=0x26bd278*, lpNumberOfBytesRead=0x31e7b4*=0x3f54, lpOverlapped=0x0) returned 1 [0046.040] CloseHandle (hObject=0x274) returned 1 [0046.080] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Windows NT\\TableTextService\\TableTextServiceAmharic.txt", nBufferLength=0x105, lpBuffer=0x31e1f8, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Windows NT\\TableTextService\\TableTextServiceAmharic.txt", lpFilePart=0x0) returned 0x48 [0046.080] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e6ec) returned 1 [0046.080] CreateFileW (lpFileName="C:\\Program Files\\Windows NT\\TableTextService\\TableTextServiceAmharic.txt" (normalized: "c:\\program files\\windows nt\\tabletextservice\\tabletextserviceamharic.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0xffffffff [0046.081] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31d528) returned 1 [0046.081] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e8ac) returned 1 [0046.081] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Windows Photo Viewer", nBufferLength=0x105, lpBuffer=0x31e3b4, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Windows Photo Viewer", lpFilePart=0x0) returned 0x25 [0046.081] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Windows Photo Viewer\\", nBufferLength=0x105, lpBuffer=0x31e388, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Windows Photo Viewer\\", lpFilePart=0x0) returned 0x26 [0046.081] FindFirstFileW (in: lpFileName="C:\\Program Files\\Windows Photo Viewer\\*", lpFindFileData=0x31e5d4 | out: lpFindFileData=0x31e5d4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x80020c30, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0xd9a78aa0, ftLastAccessTime.dwHighDateTime=0x1d5e82a, ftLastWriteTime.dwLowDateTime=0xd9a78aa0, ftLastWriteTime.dwHighDateTime=0x1d5e82a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x381d40 [0046.081] FindNextFileW (in: hFindFile=0x381d40, lpFindFileData=0x31e5e4 | out: lpFindFileData=0x31e5e4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x80020c30, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0xd9a78aa0, ftLastAccessTime.dwHighDateTime=0x1d5e82a, ftLastWriteTime.dwLowDateTime=0xd9a78aa0, ftLastWriteTime.dwHighDateTime=0x1d5e82a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0046.082] FindNextFileW (in: hFindFile=0x381d40, lpFindFileData=0x31e5e4 | out: lpFindFileData=0x31e5e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x61f491a0, ftCreationTime.dwHighDateTime=0x1d5bb30, ftLastAccessTime.dwLowDateTime=0x497d3700, ftLastAccessTime.dwHighDateTime=0x1d5a85f, ftLastWriteTime.dwLowDateTime=0x497d3700, ftLastWriteTime.dwHighDateTime=0x1d5a85f, nFileSizeHigh=0x0, nFileSizeLow=0x13a00, dwReserved0=0x0, dwReserved1=0x0, cFileName="creditservice.exe", cAlternateFileName="CREDIT~1.EXE")) returned 1 [0046.082] FindNextFileW (in: hFindFile=0x381d40, lpFindFileData=0x31e5e4 | out: lpFindFileData=0x31e5e4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1eab37af, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x22cc0dd2, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x1eab37af, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="en-US", cAlternateFileName="")) returned 1 [0046.082] FindNextFileW (in: hFindFile=0x381d40, lpFindFileData=0x31e5e4 | out: lpFindFileData=0x31e5e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x39995bb0, ftCreationTime.dwHighDateTime=0x1d58f38, ftLastAccessTime.dwLowDateTime=0xe19fd9b0, ftLastAccessTime.dwHighDateTime=0x1d5a766, ftLastWriteTime.dwLowDateTime=0xe19fd9b0, ftLastWriteTime.dwHighDateTime=0x1d5a766, nFileSizeHigh=0x0, nFileSizeLow=0x13a00, dwReserved0=0x0, dwReserved1=0x0, cFileName="excerpt.exe", cAlternateFileName="")) returned 1 [0046.082] FindNextFileW (in: hFindFile=0x381d40, lpFindFileData=0x31e5e4 | out: lpFindFileData=0x31e5e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xbc989970, ftCreationTime.dwHighDateTime=0x1d56564, ftLastAccessTime.dwLowDateTime=0xd3000f30, ftLastAccessTime.dwHighDateTime=0x1d5c5fa, ftLastWriteTime.dwLowDateTime=0xd3000f30, ftLastWriteTime.dwHighDateTime=0x1d5c5fa, nFileSizeHigh=0x0, nFileSizeLow=0x13a00, dwReserved0=0x0, dwReserved1=0x0, cFileName="fling.exe", cAlternateFileName="")) returned 1 [0046.082] FindNextFileW (in: hFindFile=0x381d40, lpFindFileData=0x31e5e4 | out: lpFindFileData=0x31e5e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6424db50, ftCreationTime.dwHighDateTime=0x1d5d8cd, ftLastAccessTime.dwLowDateTime=0xe322b6c0, ftLastAccessTime.dwHighDateTime=0x1d592fa, ftLastWriteTime.dwLowDateTime=0xe322b6c0, ftLastWriteTime.dwHighDateTime=0x1d592fa, nFileSizeHigh=0x0, nFileSizeLow=0x13a00, dwReserved0=0x0, dwReserved1=0x0, cFileName="freedom_psp_empty.exe", cAlternateFileName="FREEDO~1.EXE")) returned 1 [0046.082] FindNextFileW (in: hFindFile=0x381d40, lpFindFileData=0x31e5e4 | out: lpFindFileData=0x31e5e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8ea0f40f, ftCreationTime.dwHighDateTime=0x1ca0419, ftLastAccessTime.dwLowDateTime=0x8ea0f40f, ftLastAccessTime.dwHighDateTime=0x1ca0419, ftLastWriteTime.dwLowDateTime=0x85cc42cd, ftLastWriteTime.dwHighDateTime=0x1ca0424, nFileSizeHigh=0x0, nFileSizeLow=0x16f18, dwReserved0=0x0, dwReserved1=0x0, cFileName="ImagingDevices.exe", cAlternateFileName="")) returned 1 [0046.086] FindNextFileW (in: hFindFile=0x381d40, lpFindFileData=0x31e5e4 | out: lpFindFileData=0x31e5e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb1054327, ftCreationTime.dwHighDateTime=0x1cb892b, ftLastAccessTime.dwLowDateTime=0xb1054327, ftLastAccessTime.dwHighDateTime=0x1cb892b, ftLastWriteTime.dwLowDateTime=0xb1184e2a, ftLastWriteTime.dwHighDateTime=0x1cb892b, nFileSizeHigh=0x0, nFileSizeLow=0x25e800, dwReserved0=0x0, dwReserved1=0x0, cFileName="ImagingEngine.dll", cAlternateFileName="")) returned 1 [0046.088] FindNextFileW (in: hFindFile=0x381d40, lpFindFileData=0x31e5e4 | out: lpFindFileData=0x31e5e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb102e1c7, ftCreationTime.dwHighDateTime=0x1cb892b, ftLastAccessTime.dwLowDateTime=0xb102e1c7, ftLastAccessTime.dwHighDateTime=0x1cb892b, ftLastWriteTime.dwLowDateTime=0xb1054327, ftLastWriteTime.dwHighDateTime=0x1cb892b, nFileSizeHigh=0x0, nFileSizeLow=0x10bc00, dwReserved0=0x0, dwReserved1=0x0, cFileName="PhotoAcq.dll", cAlternateFileName="")) returned 1 [0046.089] FindNextFileW (in: hFindFile=0x381d40, lpFindFileData=0x31e5e4 | out: lpFindFileData=0x31e5e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8b623846, ftCreationTime.dwHighDateTime=0x1ca0419, ftLastAccessTime.dwLowDateTime=0x8b623846, ftLastAccessTime.dwHighDateTime=0x1ca0419, ftLastWriteTime.dwLowDateTime=0x43a82ff0, ftLastWriteTime.dwHighDateTime=0x1ca0424, nFileSizeHigh=0x0, nFileSizeLow=0xc600, dwReserved0=0x0, dwReserved1=0x0, cFileName="PhotoBase.dll", cAlternateFileName="")) returned 1 [0046.089] FindNextFileW (in: hFindFile=0x381d40, lpFindFileData=0x31e5e4 | out: lpFindFileData=0x31e5e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb121d3ab, ftCreationTime.dwHighDateTime=0x1cb892b, ftLastAccessTime.dwLowDateTime=0xb121d3ab, ftLastAccessTime.dwHighDateTime=0x1cb892b, ftLastWriteTime.dwLowDateTime=0xb13c02ce, ftLastWriteTime.dwHighDateTime=0x1cb892b, nFileSizeHigh=0x0, nFileSizeLow=0x1a5c00, dwReserved0=0x0, dwReserved1=0x0, cFileName="PhotoViewer.dll", cAlternateFileName="")) returned 1 [0046.089] FindNextFileW (in: hFindFile=0x381d40, lpFindFileData=0x31e5e4 | out: lpFindFileData=0x31e5e4*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0046.090] FindClose (in: hFindFile=0x381d40 | out: hFindFile=0x381d40) returned 1 [0046.090] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e86c) returned 1 [0046.090] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e878) returned 1 [0046.090] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e8ac) returned 1 [0046.090] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Windows Photo Viewer", nBufferLength=0x105, lpBuffer=0x31e3b4, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Windows Photo Viewer", lpFilePart=0x0) returned 0x25 [0046.090] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Windows Photo Viewer\\", nBufferLength=0x105, lpBuffer=0x31e388, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Windows Photo Viewer\\", lpFilePart=0x0) returned 0x26 [0046.090] FindFirstFileW (in: lpFileName="C:\\Program Files\\Windows Photo Viewer\\*", lpFindFileData=0x31e5d4 | out: lpFindFileData=0x31e5d4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x80020c30, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0xd9a78aa0, ftLastAccessTime.dwHighDateTime=0x1d5e82a, ftLastWriteTime.dwLowDateTime=0xd9a78aa0, ftLastWriteTime.dwHighDateTime=0x1d5e82a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x381d40 [0046.090] FindNextFileW (in: hFindFile=0x381d40, lpFindFileData=0x31e5e4 | out: lpFindFileData=0x31e5e4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x80020c30, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0xd9a78aa0, ftLastAccessTime.dwHighDateTime=0x1d5e82a, ftLastWriteTime.dwLowDateTime=0xd9a78aa0, ftLastWriteTime.dwHighDateTime=0x1d5e82a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0046.090] FindNextFileW (in: hFindFile=0x381d40, lpFindFileData=0x31e5e4 | out: lpFindFileData=0x31e5e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x61f491a0, ftCreationTime.dwHighDateTime=0x1d5bb30, ftLastAccessTime.dwLowDateTime=0x497d3700, ftLastAccessTime.dwHighDateTime=0x1d5a85f, ftLastWriteTime.dwLowDateTime=0x497d3700, ftLastWriteTime.dwHighDateTime=0x1d5a85f, nFileSizeHigh=0x0, nFileSizeLow=0x13a00, dwReserved0=0x0, dwReserved1=0x0, cFileName="creditservice.exe", cAlternateFileName="CREDIT~1.EXE")) returned 1 [0046.091] FindNextFileW (in: hFindFile=0x381d40, lpFindFileData=0x31e5e4 | out: lpFindFileData=0x31e5e4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1eab37af, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x22cc0dd2, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x1eab37af, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="en-US", cAlternateFileName="")) returned 1 [0046.091] FindNextFileW (in: hFindFile=0x381d40, lpFindFileData=0x31e5e4 | out: lpFindFileData=0x31e5e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x39995bb0, ftCreationTime.dwHighDateTime=0x1d58f38, ftLastAccessTime.dwLowDateTime=0xe19fd9b0, ftLastAccessTime.dwHighDateTime=0x1d5a766, ftLastWriteTime.dwLowDateTime=0xe19fd9b0, ftLastWriteTime.dwHighDateTime=0x1d5a766, nFileSizeHigh=0x0, nFileSizeLow=0x13a00, dwReserved0=0x0, dwReserved1=0x0, cFileName="excerpt.exe", cAlternateFileName="")) returned 1 [0046.091] FindNextFileW (in: hFindFile=0x381d40, lpFindFileData=0x31e5e4 | out: lpFindFileData=0x31e5e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xbc989970, ftCreationTime.dwHighDateTime=0x1d56564, ftLastAccessTime.dwLowDateTime=0xd3000f30, ftLastAccessTime.dwHighDateTime=0x1d5c5fa, ftLastWriteTime.dwLowDateTime=0xd3000f30, ftLastWriteTime.dwHighDateTime=0x1d5c5fa, nFileSizeHigh=0x0, nFileSizeLow=0x13a00, dwReserved0=0x0, dwReserved1=0x0, cFileName="fling.exe", cAlternateFileName="")) returned 1 [0046.091] FindNextFileW (in: hFindFile=0x381d40, lpFindFileData=0x31e5e4 | out: lpFindFileData=0x31e5e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6424db50, ftCreationTime.dwHighDateTime=0x1d5d8cd, ftLastAccessTime.dwLowDateTime=0xe322b6c0, ftLastAccessTime.dwHighDateTime=0x1d592fa, ftLastWriteTime.dwLowDateTime=0xe322b6c0, ftLastWriteTime.dwHighDateTime=0x1d592fa, nFileSizeHigh=0x0, nFileSizeLow=0x13a00, dwReserved0=0x0, dwReserved1=0x0, cFileName="freedom_psp_empty.exe", cAlternateFileName="FREEDO~1.EXE")) returned 1 [0046.091] FindNextFileW (in: hFindFile=0x381d40, lpFindFileData=0x31e5e4 | out: lpFindFileData=0x31e5e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8ea0f40f, ftCreationTime.dwHighDateTime=0x1ca0419, ftLastAccessTime.dwLowDateTime=0x8ea0f40f, ftLastAccessTime.dwHighDateTime=0x1ca0419, ftLastWriteTime.dwLowDateTime=0x85cc42cd, ftLastWriteTime.dwHighDateTime=0x1ca0424, nFileSizeHigh=0x0, nFileSizeLow=0x16f18, dwReserved0=0x0, dwReserved1=0x0, cFileName="ImagingDevices.exe", cAlternateFileName="")) returned 1 [0046.091] FindNextFileW (in: hFindFile=0x381d40, lpFindFileData=0x31e5e4 | out: lpFindFileData=0x31e5e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb1054327, ftCreationTime.dwHighDateTime=0x1cb892b, ftLastAccessTime.dwLowDateTime=0xb1054327, ftLastAccessTime.dwHighDateTime=0x1cb892b, ftLastWriteTime.dwLowDateTime=0xb1184e2a, ftLastWriteTime.dwHighDateTime=0x1cb892b, nFileSizeHigh=0x0, nFileSizeLow=0x25e800, dwReserved0=0x0, dwReserved1=0x0, cFileName="ImagingEngine.dll", cAlternateFileName="")) returned 1 [0046.091] FindNextFileW (in: hFindFile=0x381d40, lpFindFileData=0x31e5e4 | out: lpFindFileData=0x31e5e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb102e1c7, ftCreationTime.dwHighDateTime=0x1cb892b, ftLastAccessTime.dwLowDateTime=0xb102e1c7, ftLastAccessTime.dwHighDateTime=0x1cb892b, ftLastWriteTime.dwLowDateTime=0xb1054327, ftLastWriteTime.dwHighDateTime=0x1cb892b, nFileSizeHigh=0x0, nFileSizeLow=0x10bc00, dwReserved0=0x0, dwReserved1=0x0, cFileName="PhotoAcq.dll", cAlternateFileName="")) returned 1 [0046.092] FindNextFileW (in: hFindFile=0x381d40, lpFindFileData=0x31e5e4 | out: lpFindFileData=0x31e5e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8b623846, ftCreationTime.dwHighDateTime=0x1ca0419, ftLastAccessTime.dwLowDateTime=0x8b623846, ftLastAccessTime.dwHighDateTime=0x1ca0419, ftLastWriteTime.dwLowDateTime=0x43a82ff0, ftLastWriteTime.dwHighDateTime=0x1ca0424, nFileSizeHigh=0x0, nFileSizeLow=0xc600, dwReserved0=0x0, dwReserved1=0x0, cFileName="PhotoBase.dll", cAlternateFileName="")) returned 1 [0046.092] FindNextFileW (in: hFindFile=0x381d40, lpFindFileData=0x31e5e4 | out: lpFindFileData=0x31e5e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb121d3ab, ftCreationTime.dwHighDateTime=0x1cb892b, ftLastAccessTime.dwLowDateTime=0xb121d3ab, ftLastAccessTime.dwHighDateTime=0x1cb892b, ftLastWriteTime.dwLowDateTime=0xb13c02ce, ftLastWriteTime.dwHighDateTime=0x1cb892b, nFileSizeHigh=0x0, nFileSizeLow=0x1a5c00, dwReserved0=0x0, dwReserved1=0x0, cFileName="PhotoViewer.dll", cAlternateFileName="")) returned 1 [0046.092] FindNextFileW (in: hFindFile=0x381d40, lpFindFileData=0x31e5e4 | out: lpFindFileData=0x31e5e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb121d3ab, ftCreationTime.dwHighDateTime=0x1cb892b, ftLastAccessTime.dwLowDateTime=0xb121d3ab, ftLastAccessTime.dwHighDateTime=0x1cb892b, ftLastWriteTime.dwLowDateTime=0xb13c02ce, ftLastWriteTime.dwHighDateTime=0x1cb892b, nFileSizeHigh=0x0, nFileSizeLow=0x1a5c00, dwReserved0=0x0, dwReserved1=0x0, cFileName="PhotoViewer.dll", cAlternateFileName="")) returned 0 [0046.092] FindClose (in: hFindFile=0x381d40 | out: hFindFile=0x381d40) returned 1 [0046.092] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e86c) returned 1 [0046.092] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e878) returned 1 [0046.092] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e834) returned 1 [0046.092] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Windows Photo Viewer\\en-US", nBufferLength=0x105, lpBuffer=0x31e33c, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Windows Photo Viewer\\en-US", lpFilePart=0x0) returned 0x2b [0046.092] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Windows Photo Viewer\\en-US\\", nBufferLength=0x105, lpBuffer=0x31e310, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Windows Photo Viewer\\en-US\\", lpFilePart=0x0) returned 0x2c [0046.092] FindFirstFileW (in: lpFileName="C:\\Program Files\\Windows Photo Viewer\\en-US\\*", lpFindFileData=0x31e55c | out: lpFindFileData=0x31e55c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1eab37af, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x22cc0dd2, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x1eab37af, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x381d40 [0046.093] FindNextFileW (in: hFindFile=0x381d40, lpFindFileData=0x31e56c | out: lpFindFileData=0x31e56c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1eab37af, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x22cc0dd2, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x1eab37af, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0046.093] FindNextFileW (in: hFindFile=0x381d40, lpFindFileData=0x31e56c | out: lpFindFileData=0x31e56c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x11090870, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x1138bee4, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x11090870, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0xa00, dwReserved0=0x0, dwReserved1=0x0, cFileName="ImagingDevices.exe.mui", cAlternateFileName="")) returned 1 [0046.093] FindNextFileW (in: hFindFile=0x381d40, lpFindFileData=0x31e56c | out: lpFindFileData=0x31e56c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x11090870, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x1138bee4, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x11090870, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x4c00, dwReserved0=0x0, dwReserved1=0x0, cFileName="PhotoAcq.dll.mui", cAlternateFileName="")) returned 1 [0046.093] FindNextFileW (in: hFindFile=0x381d40, lpFindFileData=0x31e56c | out: lpFindFileData=0x31e56c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x11090870, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x1138bee4, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x11090870, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x4400, dwReserved0=0x0, dwReserved1=0x0, cFileName="PhotoViewer.dll.mui", cAlternateFileName="")) returned 1 [0046.093] FindNextFileW (in: hFindFile=0x381d40, lpFindFileData=0x31e56c | out: lpFindFileData=0x31e56c*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0046.093] FindClose (in: hFindFile=0x381d40 | out: hFindFile=0x381d40) returned 1 [0046.093] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e7f4) returned 1 [0046.093] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e800) returned 1 [0046.093] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e834) returned 1 [0046.093] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Windows Photo Viewer\\en-US", nBufferLength=0x105, lpBuffer=0x31e33c, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Windows Photo Viewer\\en-US", lpFilePart=0x0) returned 0x2b [0046.094] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Windows Photo Viewer\\en-US\\", nBufferLength=0x105, lpBuffer=0x31e310, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Windows Photo Viewer\\en-US\\", lpFilePart=0x0) returned 0x2c [0046.094] FindFirstFileW (in: lpFileName="C:\\Program Files\\Windows Photo Viewer\\en-US\\*", lpFindFileData=0x31e55c | out: lpFindFileData=0x31e55c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1eab37af, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x22cc0dd2, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x1eab37af, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x381d40 [0046.094] FindNextFileW (in: hFindFile=0x381d40, lpFindFileData=0x31e56c | out: lpFindFileData=0x31e56c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1eab37af, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x22cc0dd2, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x1eab37af, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0046.094] FindNextFileW (in: hFindFile=0x381d40, lpFindFileData=0x31e56c | out: lpFindFileData=0x31e56c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x11090870, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x1138bee4, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x11090870, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0xa00, dwReserved0=0x0, dwReserved1=0x0, cFileName="ImagingDevices.exe.mui", cAlternateFileName="")) returned 1 [0046.094] FindNextFileW (in: hFindFile=0x381d40, lpFindFileData=0x31e56c | out: lpFindFileData=0x31e56c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x11090870, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x1138bee4, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x11090870, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x4c00, dwReserved0=0x0, dwReserved1=0x0, cFileName="PhotoAcq.dll.mui", cAlternateFileName="")) returned 1 [0046.094] FindNextFileW (in: hFindFile=0x381d40, lpFindFileData=0x31e56c | out: lpFindFileData=0x31e56c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x11090870, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x1138bee4, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x11090870, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x4400, dwReserved0=0x0, dwReserved1=0x0, cFileName="PhotoViewer.dll.mui", cAlternateFileName="")) returned 1 [0046.094] FindNextFileW (in: hFindFile=0x381d40, lpFindFileData=0x31e56c | out: lpFindFileData=0x31e56c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x11090870, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x1138bee4, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x11090870, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x4400, dwReserved0=0x0, dwReserved1=0x0, cFileName="PhotoViewer.dll.mui", cAlternateFileName="")) returned 0 [0046.094] FindClose (in: hFindFile=0x381d40 | out: hFindFile=0x381d40) returned 1 [0046.095] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e7f4) returned 1 [0046.095] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e800) returned 1 [0046.095] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e8ac) returned 1 [0046.095] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Windows Portable Devices", nBufferLength=0x105, lpBuffer=0x31e3b4, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Windows Portable Devices", lpFilePart=0x0) returned 0x29 [0046.095] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Windows Portable Devices\\", nBufferLength=0x105, lpBuffer=0x31e388, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Windows Portable Devices\\", lpFilePart=0x0) returned 0x2a [0046.095] FindFirstFileW (in: lpFileName="C:\\Program Files\\Windows Portable Devices\\*", lpFindFileData=0x31e5d4 | out: lpFindFileData=0x31e5d4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x80046d91, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0xd92e2480, ftLastAccessTime.dwHighDateTime=0x1d5e82a, ftLastWriteTime.dwLowDateTime=0xd92e2480, ftLastWriteTime.dwHighDateTime=0x1d5e82a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x381d40 [0046.095] FindNextFileW (in: hFindFile=0x381d40, lpFindFileData=0x31e5e4 | out: lpFindFileData=0x31e5e4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x80046d91, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0xd92e2480, ftLastAccessTime.dwHighDateTime=0x1d5e82a, ftLastWriteTime.dwLowDateTime=0xd92e2480, ftLastWriteTime.dwHighDateTime=0x1d5e82a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0046.095] FindNextFileW (in: hFindFile=0x381d40, lpFindFileData=0x31e5e4 | out: lpFindFileData=0x31e5e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd1c4a940, ftCreationTime.dwHighDateTime=0x1d58852, ftLastAccessTime.dwLowDateTime=0x48563f0, ftLastAccessTime.dwHighDateTime=0x1d5d7b9, ftLastWriteTime.dwLowDateTime=0x48563f0, ftLastWriteTime.dwHighDateTime=0x1d5d7b9, nFileSizeHigh=0x0, nFileSizeLow=0x13a00, dwReserved0=0x0, dwReserved1=0x0, cFileName="img boxes leisure.exe", cAlternateFileName="IMGBOX~1.EXE")) returned 1 [0046.095] FindNextFileW (in: hFindFile=0x381d40, lpFindFileData=0x31e5e4 | out: lpFindFileData=0x31e5e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa93f44c2, ftCreationTime.dwHighDateTime=0x1cb892b, ftLastAccessTime.dwLowDateTime=0xa93f44c2, ftLastAccessTime.dwHighDateTime=0x1cb892b, ftLastWriteTime.dwLowDateTime=0xa93f44c2, ftLastWriteTime.dwHighDateTime=0x1cb892b, nFileSizeHigh=0x0, nFileSizeLow=0x3bc00, dwReserved0=0x0, dwReserved1=0x0, cFileName="sqmapi.dll", cAlternateFileName="")) returned 1 [0046.095] FindNextFileW (in: hFindFile=0x381d40, lpFindFileData=0x31e5e4 | out: lpFindFileData=0x31e5e4*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0046.095] FindClose (in: hFindFile=0x381d40 | out: hFindFile=0x381d40) returned 1 [0046.096] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e86c) returned 1 [0046.096] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e878) returned 1 [0046.096] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e8ac) returned 1 [0046.096] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Windows Portable Devices", nBufferLength=0x105, lpBuffer=0x31e3b4, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Windows Portable Devices", lpFilePart=0x0) returned 0x29 [0046.096] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Windows Portable Devices\\", nBufferLength=0x105, lpBuffer=0x31e388, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Windows Portable Devices\\", lpFilePart=0x0) returned 0x2a [0046.096] FindFirstFileW (in: lpFileName="C:\\Program Files\\Windows Portable Devices\\*", lpFindFileData=0x31e5d4 | out: lpFindFileData=0x31e5d4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x80046d91, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0xd92e2480, ftLastAccessTime.dwHighDateTime=0x1d5e82a, ftLastWriteTime.dwLowDateTime=0xd92e2480, ftLastWriteTime.dwHighDateTime=0x1d5e82a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x381d40 [0046.096] FindNextFileW (in: hFindFile=0x381d40, lpFindFileData=0x31e5e4 | out: lpFindFileData=0x31e5e4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x80046d91, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0xd92e2480, ftLastAccessTime.dwHighDateTime=0x1d5e82a, ftLastWriteTime.dwLowDateTime=0xd92e2480, ftLastWriteTime.dwHighDateTime=0x1d5e82a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0046.096] FindNextFileW (in: hFindFile=0x381d40, lpFindFileData=0x31e5e4 | out: lpFindFileData=0x31e5e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd1c4a940, ftCreationTime.dwHighDateTime=0x1d58852, ftLastAccessTime.dwLowDateTime=0x48563f0, ftLastAccessTime.dwHighDateTime=0x1d5d7b9, ftLastWriteTime.dwLowDateTime=0x48563f0, ftLastWriteTime.dwHighDateTime=0x1d5d7b9, nFileSizeHigh=0x0, nFileSizeLow=0x13a00, dwReserved0=0x0, dwReserved1=0x0, cFileName="img boxes leisure.exe", cAlternateFileName="IMGBOX~1.EXE")) returned 1 [0046.096] FindNextFileW (in: hFindFile=0x381d40, lpFindFileData=0x31e5e4 | out: lpFindFileData=0x31e5e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa93f44c2, ftCreationTime.dwHighDateTime=0x1cb892b, ftLastAccessTime.dwLowDateTime=0xa93f44c2, ftLastAccessTime.dwHighDateTime=0x1cb892b, ftLastWriteTime.dwLowDateTime=0xa93f44c2, ftLastWriteTime.dwHighDateTime=0x1cb892b, nFileSizeHigh=0x0, nFileSizeLow=0x3bc00, dwReserved0=0x0, dwReserved1=0x0, cFileName="sqmapi.dll", cAlternateFileName="")) returned 1 [0046.096] FindNextFileW (in: hFindFile=0x381d40, lpFindFileData=0x31e5e4 | out: lpFindFileData=0x31e5e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa93f44c2, ftCreationTime.dwHighDateTime=0x1cb892b, ftLastAccessTime.dwLowDateTime=0xa93f44c2, ftLastAccessTime.dwHighDateTime=0x1cb892b, ftLastWriteTime.dwLowDateTime=0xa93f44c2, ftLastWriteTime.dwHighDateTime=0x1cb892b, nFileSizeHigh=0x0, nFileSizeLow=0x3bc00, dwReserved0=0x0, dwReserved1=0x0, cFileName="sqmapi.dll", cAlternateFileName="")) returned 0 [0046.096] FindClose (in: hFindFile=0x381d40 | out: hFindFile=0x381d40) returned 1 [0046.097] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e86c) returned 1 [0046.097] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e878) returned 1 [0046.097] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e8ac) returned 1 [0046.097] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Windows Sidebar", nBufferLength=0x105, lpBuffer=0x31e3b4, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Windows Sidebar", lpFilePart=0x0) returned 0x20 [0046.097] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Windows Sidebar\\", nBufferLength=0x105, lpBuffer=0x31e388, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Windows Sidebar\\", lpFilePart=0x0) returned 0x21 [0046.097] FindFirstFileW (in: lpFileName="C:\\Program Files\\Windows Sidebar\\*", lpFindFileData=0x31e5d4 | out: lpFindFileData=0x31e5d4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x80046d91, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0xd9a06680, ftLastAccessTime.dwHighDateTime=0x1d5e82a, ftLastWriteTime.dwLowDateTime=0xd9a06680, ftLastWriteTime.dwHighDateTime=0x1d5e82a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x381d40 [0046.097] FindNextFileW (in: hFindFile=0x381d40, lpFindFileData=0x31e5e4 | out: lpFindFileData=0x31e5e4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x80046d91, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0xd9a06680, ftLastAccessTime.dwHighDateTime=0x1d5e82a, ftLastWriteTime.dwLowDateTime=0xd9a06680, ftLastWriteTime.dwHighDateTime=0x1d5e82a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0046.097] FindNextFileW (in: hFindFile=0x381d40, lpFindFileData=0x31e5e4 | out: lpFindFileData=0x31e5e4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1eb25fda, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x237a3493, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x1eb25fda, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="en-US", cAlternateFileName="")) returned 1 [0046.097] FindNextFileW (in: hFindFile=0x381d40, lpFindFileData=0x31e5e4 | out: lpFindFileData=0x31e5e4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x80046d91, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0xa1afe884, ftLastAccessTime.dwHighDateTime=0x1cbf8eb, ftLastWriteTime.dwLowDateTime=0xa1afe884, ftLastWriteTime.dwHighDateTime=0x1cbf8eb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Gadgets", cAlternateFileName="")) returned 1 [0046.097] FindNextFileW (in: hFindFile=0x381d40, lpFindFileData=0x31e5e4 | out: lpFindFileData=0x31e5e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc3a23f20, ftCreationTime.dwHighDateTime=0x1d58547, ftLastAccessTime.dwLowDateTime=0xbde9f470, ftLastAccessTime.dwHighDateTime=0x1d562fa, ftLastWriteTime.dwLowDateTime=0xbde9f470, ftLastWriteTime.dwHighDateTime=0x1d562fa, nFileSizeHigh=0x0, nFileSizeLow=0x13a00, dwReserved0=0x0, dwReserved1=0x0, cFileName="regions.exe", cAlternateFileName="")) returned 1 [0046.097] FindNextFileW (in: hFindFile=0x381d40, lpFindFileData=0x31e5e4 | out: lpFindFileData=0x31e5e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7d8b118c, ftCreationTime.dwHighDateTime=0x1ca0415, ftLastAccessTime.dwLowDateTime=0x7d8b118c, ftLastAccessTime.dwHighDateTime=0x1ca0415, ftLastWriteTime.dwLowDateTime=0x43f45420, ftLastWriteTime.dwHighDateTime=0x1ca0424, nFileSizeHigh=0x0, nFileSizeLow=0x15600, dwReserved0=0x0, dwReserved1=0x0, cFileName="sbdrop.dll", cAlternateFileName="")) returned 1 [0046.098] FindNextFileW (in: hFindFile=0x381d40, lpFindFileData=0x31e5e4 | out: lpFindFileData=0x31e5e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x80497579, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x7bf43439, ftLastAccessTime.dwHighDateTime=0x1ca0444, ftLastWriteTime.dwLowDateTime=0x7bf43439, ftLastWriteTime.dwHighDateTime=0x1ca0444, nFileSizeHigh=0x0, nFileSizeLow=0x50, dwReserved0=0x0, dwReserved1=0x0, cFileName="settings.ini", cAlternateFileName="")) returned 1 [0046.098] FindNextFileW (in: hFindFile=0x381d40, lpFindFileData=0x31e5e4 | out: lpFindFileData=0x31e5e4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x80046d91, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x80046d91, ftLastAccessTime.dwHighDateTime=0x1ca0444, ftLastWriteTime.dwLowDateTime=0x80046d91, ftLastWriteTime.dwHighDateTime=0x1ca0444, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Shared Gadgets", cAlternateFileName="SHARED~1")) returned 1 [0046.098] FindNextFileW (in: hFindFile=0x381d40, lpFindFileData=0x31e5e4 | out: lpFindFileData=0x31e5e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa896430f, ftCreationTime.dwHighDateTime=0x1cb892b, ftLastAccessTime.dwLowDateTime=0xa896430f, ftLastAccessTime.dwHighDateTime=0x1cb892b, ftLastWriteTime.dwLowDateTime=0xa898a46f, ftLastWriteTime.dwHighDateTime=0x1cb892b, nFileSizeHigh=0x0, nFileSizeLow=0x168400, dwReserved0=0x0, dwReserved1=0x0, cFileName="sidebar.exe", cAlternateFileName="")) returned 1 [0046.098] FindNextFileW (in: hFindFile=0x381d40, lpFindFileData=0x31e5e4 | out: lpFindFileData=0x31e5e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3e135460, ftCreationTime.dwHighDateTime=0x1d58d72, ftLastAccessTime.dwLowDateTime=0xff2afd70, ftLastAccessTime.dwHighDateTime=0x1d58236, ftLastWriteTime.dwLowDateTime=0xff2afd70, ftLastWriteTime.dwHighDateTime=0x1d58236, nFileSizeHigh=0x0, nFileSizeLow=0x13a00, dwReserved0=0x0, dwReserved1=0x0, cFileName="webdrive.exe", cAlternateFileName="")) returned 1 [0046.098] FindNextFileW (in: hFindFile=0x381d40, lpFindFileData=0x31e5e4 | out: lpFindFileData=0x31e5e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7abe9733, ftCreationTime.dwHighDateTime=0x1ca0415, ftLastAccessTime.dwLowDateTime=0x7abe9733, ftLastAccessTime.dwHighDateTime=0x1ca0415, ftLastWriteTime.dwLowDateTime=0x45aefc70, ftLastWriteTime.dwHighDateTime=0x1ca0424, nFileSizeHigh=0x0, nFileSizeLow=0x27e00, dwReserved0=0x0, dwReserved1=0x0, cFileName="wlsrvc.dll", cAlternateFileName="")) returned 1 [0046.098] FindNextFileW (in: hFindFile=0x381d40, lpFindFileData=0x31e5e4 | out: lpFindFileData=0x31e5e4*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0046.098] FindClose (in: hFindFile=0x381d40 | out: hFindFile=0x381d40) returned 1 [0046.099] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e86c) returned 1 [0046.099] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e878) returned 1 [0046.099] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e8ac) returned 1 [0046.099] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Windows Sidebar", nBufferLength=0x105, lpBuffer=0x31e3b4, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Windows Sidebar", lpFilePart=0x0) returned 0x20 [0046.099] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Windows Sidebar\\", nBufferLength=0x105, lpBuffer=0x31e388, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Windows Sidebar\\", lpFilePart=0x0) returned 0x21 [0046.099] FindFirstFileW (in: lpFileName="C:\\Program Files\\Windows Sidebar\\*", lpFindFileData=0x31e5d4 | out: lpFindFileData=0x31e5d4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x80046d91, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0xd9a06680, ftLastAccessTime.dwHighDateTime=0x1d5e82a, ftLastWriteTime.dwLowDateTime=0xd9a06680, ftLastWriteTime.dwHighDateTime=0x1d5e82a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x381d40 [0046.099] FindNextFileW (in: hFindFile=0x381d40, lpFindFileData=0x31e5e4 | out: lpFindFileData=0x31e5e4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x80046d91, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0xd9a06680, ftLastAccessTime.dwHighDateTime=0x1d5e82a, ftLastWriteTime.dwLowDateTime=0xd9a06680, ftLastWriteTime.dwHighDateTime=0x1d5e82a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0046.099] FindNextFileW (in: hFindFile=0x381d40, lpFindFileData=0x31e5e4 | out: lpFindFileData=0x31e5e4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1eb25fda, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x237a3493, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x1eb25fda, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="en-US", cAlternateFileName="")) returned 1 [0046.099] FindNextFileW (in: hFindFile=0x381d40, lpFindFileData=0x31e5e4 | out: lpFindFileData=0x31e5e4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x80046d91, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0xa1afe884, ftLastAccessTime.dwHighDateTime=0x1cbf8eb, ftLastWriteTime.dwLowDateTime=0xa1afe884, ftLastWriteTime.dwHighDateTime=0x1cbf8eb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Gadgets", cAlternateFileName="")) returned 1 [0046.099] FindNextFileW (in: hFindFile=0x381d40, lpFindFileData=0x31e5e4 | out: lpFindFileData=0x31e5e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc3a23f20, ftCreationTime.dwHighDateTime=0x1d58547, ftLastAccessTime.dwLowDateTime=0xbde9f470, ftLastAccessTime.dwHighDateTime=0x1d562fa, ftLastWriteTime.dwLowDateTime=0xbde9f470, ftLastWriteTime.dwHighDateTime=0x1d562fa, nFileSizeHigh=0x0, nFileSizeLow=0x13a00, dwReserved0=0x0, dwReserved1=0x0, cFileName="regions.exe", cAlternateFileName="")) returned 1 [0046.099] FindNextFileW (in: hFindFile=0x381d40, lpFindFileData=0x31e5e4 | out: lpFindFileData=0x31e5e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7d8b118c, ftCreationTime.dwHighDateTime=0x1ca0415, ftLastAccessTime.dwLowDateTime=0x7d8b118c, ftLastAccessTime.dwHighDateTime=0x1ca0415, ftLastWriteTime.dwLowDateTime=0x43f45420, ftLastWriteTime.dwHighDateTime=0x1ca0424, nFileSizeHigh=0x0, nFileSizeLow=0x15600, dwReserved0=0x0, dwReserved1=0x0, cFileName="sbdrop.dll", cAlternateFileName="")) returned 1 [0046.100] FindNextFileW (in: hFindFile=0x381d40, lpFindFileData=0x31e5e4 | out: lpFindFileData=0x31e5e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x80497579, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x7bf43439, ftLastAccessTime.dwHighDateTime=0x1ca0444, ftLastWriteTime.dwLowDateTime=0x7bf43439, ftLastWriteTime.dwHighDateTime=0x1ca0444, nFileSizeHigh=0x0, nFileSizeLow=0x50, dwReserved0=0x0, dwReserved1=0x0, cFileName="settings.ini", cAlternateFileName="")) returned 1 [0046.100] FindNextFileW (in: hFindFile=0x381d40, lpFindFileData=0x31e5e4 | out: lpFindFileData=0x31e5e4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x80046d91, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x80046d91, ftLastAccessTime.dwHighDateTime=0x1ca0444, ftLastWriteTime.dwLowDateTime=0x80046d91, ftLastWriteTime.dwHighDateTime=0x1ca0444, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Shared Gadgets", cAlternateFileName="SHARED~1")) returned 1 [0046.100] FindNextFileW (in: hFindFile=0x381d40, lpFindFileData=0x31e5e4 | out: lpFindFileData=0x31e5e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa896430f, ftCreationTime.dwHighDateTime=0x1cb892b, ftLastAccessTime.dwLowDateTime=0xa896430f, ftLastAccessTime.dwHighDateTime=0x1cb892b, ftLastWriteTime.dwLowDateTime=0xa898a46f, ftLastWriteTime.dwHighDateTime=0x1cb892b, nFileSizeHigh=0x0, nFileSizeLow=0x168400, dwReserved0=0x0, dwReserved1=0x0, cFileName="sidebar.exe", cAlternateFileName="")) returned 1 [0046.100] FindNextFileW (in: hFindFile=0x381d40, lpFindFileData=0x31e5e4 | out: lpFindFileData=0x31e5e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3e135460, ftCreationTime.dwHighDateTime=0x1d58d72, ftLastAccessTime.dwLowDateTime=0xff2afd70, ftLastAccessTime.dwHighDateTime=0x1d58236, ftLastWriteTime.dwLowDateTime=0xff2afd70, ftLastWriteTime.dwHighDateTime=0x1d58236, nFileSizeHigh=0x0, nFileSizeLow=0x13a00, dwReserved0=0x0, dwReserved1=0x0, cFileName="webdrive.exe", cAlternateFileName="")) returned 1 [0046.100] FindNextFileW (in: hFindFile=0x381d40, lpFindFileData=0x31e5e4 | out: lpFindFileData=0x31e5e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7abe9733, ftCreationTime.dwHighDateTime=0x1ca0415, ftLastAccessTime.dwLowDateTime=0x7abe9733, ftLastAccessTime.dwHighDateTime=0x1ca0415, ftLastWriteTime.dwLowDateTime=0x45aefc70, ftLastWriteTime.dwHighDateTime=0x1ca0424, nFileSizeHigh=0x0, nFileSizeLow=0x27e00, dwReserved0=0x0, dwReserved1=0x0, cFileName="wlsrvc.dll", cAlternateFileName="")) returned 1 [0046.100] FindNextFileW (in: hFindFile=0x381d40, lpFindFileData=0x31e5e4 | out: lpFindFileData=0x31e5e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7abe9733, ftCreationTime.dwHighDateTime=0x1ca0415, ftLastAccessTime.dwLowDateTime=0x7abe9733, ftLastAccessTime.dwHighDateTime=0x1ca0415, ftLastWriteTime.dwLowDateTime=0x45aefc70, ftLastWriteTime.dwHighDateTime=0x1ca0424, nFileSizeHigh=0x0, nFileSizeLow=0x27e00, dwReserved0=0x0, dwReserved1=0x0, cFileName="wlsrvc.dll", cAlternateFileName="")) returned 0 [0046.100] FindClose (in: hFindFile=0x381d40 | out: hFindFile=0x381d40) returned 1 [0046.100] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e86c) returned 1 [0046.100] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e878) returned 1 [0046.101] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e834) returned 1 [0046.101] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Windows Sidebar\\en-US", nBufferLength=0x105, lpBuffer=0x31e33c, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Windows Sidebar\\en-US", lpFilePart=0x0) returned 0x26 [0046.101] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Windows Sidebar\\en-US\\", nBufferLength=0x105, lpBuffer=0x31e310, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Windows Sidebar\\en-US\\", lpFilePart=0x0) returned 0x27 [0046.101] FindFirstFileW (in: lpFileName="C:\\Program Files\\Windows Sidebar\\en-US\\*", lpFindFileData=0x31e55c | out: lpFindFileData=0x31e55c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1eb25fda, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x237a3493, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x1eb25fda, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x381d40 [0046.101] FindNextFileW (in: hFindFile=0x381d40, lpFindFileData=0x31e56c | out: lpFindFileData=0x31e56c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1eb25fda, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x237a3493, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x1eb25fda, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0046.101] FindNextFileW (in: hFindFile=0x381d40, lpFindFileData=0x31e56c | out: lpFindFileData=0x31e56c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x119103a1, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x11c7e240, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x119103a1, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x800, dwReserved0=0x0, dwReserved1=0x0, cFileName="sbdrop.dll.mui", cAlternateFileName="")) returned 1 [0046.101] FindNextFileW (in: hFindFile=0x381d40, lpFindFileData=0x31e56c | out: lpFindFileData=0x31e56c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x119103a1, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x11c7e240, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x119103a1, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x4a00, dwReserved0=0x0, dwReserved1=0x0, cFileName="Sidebar.exe.mui", cAlternateFileName="")) returned 1 [0046.101] FindNextFileW (in: hFindFile=0x381d40, lpFindFileData=0x31e56c | out: lpFindFileData=0x31e56c*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0046.101] FindClose (in: hFindFile=0x381d40 | out: hFindFile=0x381d40) returned 1 [0046.102] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e7f4) returned 1 [0046.102] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e800) returned 1 [0046.102] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e834) returned 1 [0046.102] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Windows Sidebar\\en-US", nBufferLength=0x105, lpBuffer=0x31e33c, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Windows Sidebar\\en-US", lpFilePart=0x0) returned 0x26 [0046.102] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Windows Sidebar\\en-US\\", nBufferLength=0x105, lpBuffer=0x31e310, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Windows Sidebar\\en-US\\", lpFilePart=0x0) returned 0x27 [0046.102] FindFirstFileW (in: lpFileName="C:\\Program Files\\Windows Sidebar\\en-US\\*", lpFindFileData=0x31e55c | out: lpFindFileData=0x31e55c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1eb25fda, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x237a3493, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x1eb25fda, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x381d40 [0046.102] FindNextFileW (in: hFindFile=0x381d40, lpFindFileData=0x31e56c | out: lpFindFileData=0x31e56c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1eb25fda, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x237a3493, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x1eb25fda, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0046.102] FindNextFileW (in: hFindFile=0x381d40, lpFindFileData=0x31e56c | out: lpFindFileData=0x31e56c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x119103a1, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x11c7e240, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x119103a1, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x800, dwReserved0=0x0, dwReserved1=0x0, cFileName="sbdrop.dll.mui", cAlternateFileName="")) returned 1 [0046.102] FindNextFileW (in: hFindFile=0x381d40, lpFindFileData=0x31e56c | out: lpFindFileData=0x31e56c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x119103a1, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x11c7e240, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x119103a1, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x4a00, dwReserved0=0x0, dwReserved1=0x0, cFileName="Sidebar.exe.mui", cAlternateFileName="")) returned 1 [0046.102] FindNextFileW (in: hFindFile=0x381d40, lpFindFileData=0x31e56c | out: lpFindFileData=0x31e56c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x119103a1, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x11c7e240, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x119103a1, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x4a00, dwReserved0=0x0, dwReserved1=0x0, cFileName="Sidebar.exe.mui", cAlternateFileName="")) returned 0 [0046.102] FindClose (in: hFindFile=0x381d40 | out: hFindFile=0x381d40) returned 1 [0046.103] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e7f4) returned 1 [0046.103] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e800) returned 1 [0046.103] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e834) returned 1 [0046.103] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Windows Sidebar\\Gadgets", nBufferLength=0x105, lpBuffer=0x31e33c, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Windows Sidebar\\Gadgets", lpFilePart=0x0) returned 0x28 [0046.103] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Windows Sidebar\\Gadgets\\", nBufferLength=0x105, lpBuffer=0x31e310, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Windows Sidebar\\Gadgets\\", lpFilePart=0x0) returned 0x29 [0046.103] FindFirstFileW (in: lpFileName="C:\\Program Files\\Windows Sidebar\\Gadgets\\*", lpFindFileData=0x31e55c | out: lpFindFileData=0x31e55c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x80046d91, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0xa1afe884, ftLastAccessTime.dwHighDateTime=0x1cbf8eb, ftLastWriteTime.dwLowDateTime=0xa1afe884, ftLastWriteTime.dwHighDateTime=0x1cbf8eb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x381d40 [0046.105] FindNextFileW (in: hFindFile=0x381d40, lpFindFileData=0x31e56c | out: lpFindFileData=0x31e56c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x80046d91, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0xa1afe884, ftLastAccessTime.dwHighDateTime=0x1cbf8eb, ftLastWriteTime.dwLowDateTime=0xa1afe884, ftLastWriteTime.dwHighDateTime=0x1cbf8eb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0046.105] FindNextFileW (in: hFindFile=0x381d40, lpFindFileData=0x31e56c | out: lpFindFileData=0x31e56c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x80046d91, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x1eaffd21, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x1eaffd21, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Calendar.Gadget", cAlternateFileName="CALEND~1.GAD")) returned 1 [0046.105] FindNextFileW (in: hFindFile=0x381d40, lpFindFileData=0x31e56c | out: lpFindFileData=0x31e56c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x80046d91, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x1eaffd21, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x1eaffd21, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Clock.Gadget", cAlternateFileName="CLOCK~1.GAD")) returned 1 [0046.105] FindNextFileW (in: hFindFile=0x381d40, lpFindFileData=0x31e56c | out: lpFindFileData=0x31e56c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x80046d91, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x1eaffd21, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x1eaffd21, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="CPU.Gadget", cAlternateFileName="CPU~1.GAD")) returned 1 [0046.105] FindNextFileW (in: hFindFile=0x381d40, lpFindFileData=0x31e56c | out: lpFindFileData=0x31e56c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x80046d91, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x1eb25fda, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x1eb25fda, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Currency.Gadget", cAlternateFileName="CURREN~1.GAD")) returned 1 [0046.106] FindNextFileW (in: hFindFile=0x381d40, lpFindFileData=0x31e56c | out: lpFindFileData=0x31e56c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa1afe884, ftCreationTime.dwHighDateTime=0x1cbf8eb, ftLastAccessTime.dwLowDateTime=0xaa8df54c, ftLastAccessTime.dwHighDateTime=0x1cbf8eb, ftLastWriteTime.dwLowDateTime=0xa1cc85b8, ftLastWriteTime.dwHighDateTime=0x1cbf8eb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="MediaCenter.Gadget", cAlternateFileName="MEDIAC~1.GAD")) returned 1 [0046.106] FindNextFileW (in: hFindFile=0x381d40, lpFindFileData=0x31e56c | out: lpFindFileData=0x31e56c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x80046d91, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x1eb25fda, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x1eb25fda, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="PicturePuzzle.Gadget", cAlternateFileName="PICTUR~1.GAD")) returned 1 [0046.106] FindNextFileW (in: hFindFile=0x381d40, lpFindFileData=0x31e56c | out: lpFindFileData=0x31e56c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x80046d91, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x1eb25fda, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x1eb25fda, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="RSSFeeds.Gadget", cAlternateFileName="RSSFEE~1.GAD")) returned 1 [0046.106] FindNextFileW (in: hFindFile=0x381d40, lpFindFileData=0x31e56c | out: lpFindFileData=0x31e56c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x80046d91, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x1eaffd21, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x1eaffd21, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="SlideShow.Gadget", cAlternateFileName="SLIDES~1.GAD")) returned 1 [0046.106] FindNextFileW (in: hFindFile=0x381d40, lpFindFileData=0x31e56c | out: lpFindFileData=0x31e56c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x80046d91, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x1eaffd21, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x1eaffd21, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Weather.Gadget", cAlternateFileName="WEATHE~1.GAD")) returned 1 [0046.106] FindNextFileW (in: hFindFile=0x381d40, lpFindFileData=0x31e56c | out: lpFindFileData=0x31e56c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x80046d91, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x1eaffd21, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x1eaffd21, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Weather.Gadget", cAlternateFileName="WEATHE~1.GAD")) returned 0 [0046.107] FindClose (in: hFindFile=0x381d40 | out: hFindFile=0x381d40) returned 1 [0046.107] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e7f4) returned 1 [0046.107] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e800) returned 1 [0046.107] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e834) returned 1 [0046.107] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Windows Sidebar\\Gadgets", nBufferLength=0x105, lpBuffer=0x31e33c, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Windows Sidebar\\Gadgets", lpFilePart=0x0) returned 0x28 [0046.107] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Windows Sidebar\\Gadgets\\", nBufferLength=0x105, lpBuffer=0x31e310, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Windows Sidebar\\Gadgets\\", lpFilePart=0x0) returned 0x29 [0046.107] FindFirstFileW (in: lpFileName="C:\\Program Files\\Windows Sidebar\\Gadgets\\*", lpFindFileData=0x31e55c | out: lpFindFileData=0x31e55c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x80046d91, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0xa1afe884, ftLastAccessTime.dwHighDateTime=0x1cbf8eb, ftLastWriteTime.dwLowDateTime=0xa1afe884, ftLastWriteTime.dwHighDateTime=0x1cbf8eb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x381d40 [0046.108] FindNextFileW (in: hFindFile=0x381d40, lpFindFileData=0x31e56c | out: lpFindFileData=0x31e56c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x80046d91, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0xa1afe884, ftLastAccessTime.dwHighDateTime=0x1cbf8eb, ftLastWriteTime.dwLowDateTime=0xa1afe884, ftLastWriteTime.dwHighDateTime=0x1cbf8eb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0046.108] FindNextFileW (in: hFindFile=0x381d40, lpFindFileData=0x31e56c | out: lpFindFileData=0x31e56c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x80046d91, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x1eaffd21, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x1eaffd21, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Calendar.Gadget", cAlternateFileName="CALEND~1.GAD")) returned 1 [0046.108] FindNextFileW (in: hFindFile=0x381d40, lpFindFileData=0x31e56c | out: lpFindFileData=0x31e56c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x80046d91, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x1eaffd21, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x1eaffd21, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Clock.Gadget", cAlternateFileName="CLOCK~1.GAD")) returned 1 [0046.109] FindNextFileW (in: hFindFile=0x381d40, lpFindFileData=0x31e56c | out: lpFindFileData=0x31e56c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x80046d91, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x1eaffd21, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x1eaffd21, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="CPU.Gadget", cAlternateFileName="CPU~1.GAD")) returned 1 [0046.109] FindNextFileW (in: hFindFile=0x381d40, lpFindFileData=0x31e56c | out: lpFindFileData=0x31e56c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x80046d91, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x1eb25fda, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x1eb25fda, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Currency.Gadget", cAlternateFileName="CURREN~1.GAD")) returned 1 [0046.109] FindNextFileW (in: hFindFile=0x381d40, lpFindFileData=0x31e56c | out: lpFindFileData=0x31e56c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa1afe884, ftCreationTime.dwHighDateTime=0x1cbf8eb, ftLastAccessTime.dwLowDateTime=0xaa8df54c, ftLastAccessTime.dwHighDateTime=0x1cbf8eb, ftLastWriteTime.dwLowDateTime=0xa1cc85b8, ftLastWriteTime.dwHighDateTime=0x1cbf8eb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="MediaCenter.Gadget", cAlternateFileName="MEDIAC~1.GAD")) returned 1 [0046.109] FindNextFileW (in: hFindFile=0x381d40, lpFindFileData=0x31e56c | out: lpFindFileData=0x31e56c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x80046d91, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x1eb25fda, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x1eb25fda, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="PicturePuzzle.Gadget", cAlternateFileName="PICTUR~1.GAD")) returned 1 [0046.109] FindNextFileW (in: hFindFile=0x381d40, lpFindFileData=0x31e56c | out: lpFindFileData=0x31e56c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x80046d91, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x1eb25fda, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x1eb25fda, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="RSSFeeds.Gadget", cAlternateFileName="RSSFEE~1.GAD")) returned 1 [0046.109] FindNextFileW (in: hFindFile=0x381d40, lpFindFileData=0x31e56c | out: lpFindFileData=0x31e56c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x80046d91, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x1eaffd21, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x1eaffd21, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="SlideShow.Gadget", cAlternateFileName="SLIDES~1.GAD")) returned 1 [0046.109] FindNextFileW (in: hFindFile=0x381d40, lpFindFileData=0x31e56c | out: lpFindFileData=0x31e56c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x80046d91, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x1eaffd21, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x1eaffd21, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Weather.Gadget", cAlternateFileName="WEATHE~1.GAD")) returned 1 [0046.109] FindNextFileW (in: hFindFile=0x381d40, lpFindFileData=0x31e56c | out: lpFindFileData=0x31e56c*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0046.109] FindClose (in: hFindFile=0x381d40 | out: hFindFile=0x381d40) returned 1 [0046.110] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e7f4) returned 1 [0046.110] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e800) returned 1 [0046.110] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e7bc) returned 1 [0046.110] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Windows Sidebar\\Gadgets\\Calendar.Gadget", nBufferLength=0x105, lpBuffer=0x31e2c4, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Windows Sidebar\\Gadgets\\Calendar.Gadget", lpFilePart=0x0) returned 0x38 [0046.110] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Windows Sidebar\\Gadgets\\Calendar.Gadget\\", nBufferLength=0x105, lpBuffer=0x31e298, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Windows Sidebar\\Gadgets\\Calendar.Gadget\\", lpFilePart=0x0) returned 0x39 [0046.110] FindFirstFileW (in: lpFileName="C:\\Program Files\\Windows Sidebar\\Gadgets\\Calendar.Gadget\\*", lpFindFileData=0x31e4e4 | out: lpFindFileData=0x31e4e4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x80046d91, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x1eaffd21, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x1eaffd21, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x381d40 [0046.111] FindNextFileW (in: hFindFile=0x381d40, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x80046d91, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x1eaffd21, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x1eaffd21, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0046.111] FindNextFileW (in: hFindFile=0x381d40, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x842ddbeb, ftCreationTime.dwHighDateTime=0x1ca0403, ftLastAccessTime.dwLowDateTime=0x842ddbeb, ftLastAccessTime.dwHighDateTime=0x1ca0403, ftLastWriteTime.dwLowDateTime=0x27ed4187, ftLastWriteTime.dwHighDateTime=0x1c9ea0e, nFileSizeHigh=0x0, nFileSizeLow=0x1a74, dwReserved0=0x0, dwReserved1=0x0, cFileName="drag.png", cAlternateFileName="")) returned 1 [0046.112] FindNextFileW (in: hFindFile=0x381d40, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1eaffd21, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x235ff6a0, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x1eaffd21, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="en-US", cAlternateFileName="")) returned 1 [0046.112] FindNextFileW (in: hFindFile=0x381d40, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x28135767, ftCreationTime.dwHighDateTime=0x1c9ea0e, ftLastAccessTime.dwLowDateTime=0x28135767, ftLastAccessTime.dwHighDateTime=0x1c9ea0e, ftLastWriteTime.dwLowDateTime=0x28135767, ftLastWriteTime.dwHighDateTime=0x1c9ea0e, nFileSizeHigh=0x0, nFileSizeLow=0xd13, dwReserved0=0x0, dwReserved1=0x0, cFileName="icon.png", cAlternateFileName="")) returned 1 [0046.112] FindNextFileW (in: hFindFile=0x381d40, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x80046d91, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x805ee1db, ftLastAccessTime.dwHighDateTime=0x1ca0444, ftLastWriteTime.dwLowDateTime=0x805ee1db, ftLastWriteTime.dwHighDateTime=0x1ca0444, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="images", cAlternateFileName="")) returned 1 [0046.112] FindNextFileW (in: hFindFile=0x381d40, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x842b7a8e, ftCreationTime.dwHighDateTime=0x1ca0403, ftLastAccessTime.dwLowDateTime=0x842b7a8e, ftLastAccessTime.dwHighDateTime=0x1ca0403, ftLastWriteTime.dwLowDateTime=0x284ed995, ftLastWriteTime.dwHighDateTime=0x1c9ea0e, nFileSizeHigh=0x0, nFileSizeLow=0x1816, dwReserved0=0x0, dwReserved1=0x0, cFileName="logo.png", cAlternateFileName="")) returned 1 [0046.112] FindNextFileW (in: hFindFile=0x381d40, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0046.112] FindClose (in: hFindFile=0x381d40 | out: hFindFile=0x381d40) returned 1 [0046.112] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e77c) returned 1 [0046.112] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e788) returned 1 [0046.112] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e7bc) returned 1 [0046.112] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Windows Sidebar\\Gadgets\\Calendar.Gadget", nBufferLength=0x105, lpBuffer=0x31e2c4, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Windows Sidebar\\Gadgets\\Calendar.Gadget", lpFilePart=0x0) returned 0x38 [0046.112] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Windows Sidebar\\Gadgets\\Calendar.Gadget\\", nBufferLength=0x105, lpBuffer=0x31e298, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Windows Sidebar\\Gadgets\\Calendar.Gadget\\", lpFilePart=0x0) returned 0x39 [0046.112] FindFirstFileW (in: lpFileName="C:\\Program Files\\Windows Sidebar\\Gadgets\\Calendar.Gadget\\*", lpFindFileData=0x31e4e4 | out: lpFindFileData=0x31e4e4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x80046d91, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x1eaffd21, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x1eaffd21, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x381d40 [0046.112] FindNextFileW (in: hFindFile=0x381d40, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x80046d91, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x1eaffd21, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x1eaffd21, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0046.113] FindNextFileW (in: hFindFile=0x381d40, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x842ddbeb, ftCreationTime.dwHighDateTime=0x1ca0403, ftLastAccessTime.dwLowDateTime=0x842ddbeb, ftLastAccessTime.dwHighDateTime=0x1ca0403, ftLastWriteTime.dwLowDateTime=0x27ed4187, ftLastWriteTime.dwHighDateTime=0x1c9ea0e, nFileSizeHigh=0x0, nFileSizeLow=0x1a74, dwReserved0=0x0, dwReserved1=0x0, cFileName="drag.png", cAlternateFileName="")) returned 1 [0046.113] FindNextFileW (in: hFindFile=0x381d40, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1eaffd21, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x235ff6a0, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x1eaffd21, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="en-US", cAlternateFileName="")) returned 1 [0046.113] FindNextFileW (in: hFindFile=0x381d40, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x28135767, ftCreationTime.dwHighDateTime=0x1c9ea0e, ftLastAccessTime.dwLowDateTime=0x28135767, ftLastAccessTime.dwHighDateTime=0x1c9ea0e, ftLastWriteTime.dwLowDateTime=0x28135767, ftLastWriteTime.dwHighDateTime=0x1c9ea0e, nFileSizeHigh=0x0, nFileSizeLow=0xd13, dwReserved0=0x0, dwReserved1=0x0, cFileName="icon.png", cAlternateFileName="")) returned 1 [0046.113] FindNextFileW (in: hFindFile=0x381d40, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x80046d91, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x805ee1db, ftLastAccessTime.dwHighDateTime=0x1ca0444, ftLastWriteTime.dwLowDateTime=0x805ee1db, ftLastWriteTime.dwHighDateTime=0x1ca0444, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="images", cAlternateFileName="")) returned 1 [0046.113] FindNextFileW (in: hFindFile=0x381d40, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x842b7a8e, ftCreationTime.dwHighDateTime=0x1ca0403, ftLastAccessTime.dwLowDateTime=0x842b7a8e, ftLastAccessTime.dwHighDateTime=0x1ca0403, ftLastWriteTime.dwLowDateTime=0x284ed995, ftLastWriteTime.dwHighDateTime=0x1c9ea0e, nFileSizeHigh=0x0, nFileSizeLow=0x1816, dwReserved0=0x0, dwReserved1=0x0, cFileName="logo.png", cAlternateFileName="")) returned 1 [0046.113] FindNextFileW (in: hFindFile=0x381d40, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x842b7a8e, ftCreationTime.dwHighDateTime=0x1ca0403, ftLastAccessTime.dwLowDateTime=0x842b7a8e, ftLastAccessTime.dwHighDateTime=0x1ca0403, ftLastWriteTime.dwLowDateTime=0x284ed995, ftLastWriteTime.dwHighDateTime=0x1c9ea0e, nFileSizeHigh=0x0, nFileSizeLow=0x1816, dwReserved0=0x0, dwReserved1=0x0, cFileName="logo.png", cAlternateFileName="")) returned 0 [0046.113] FindClose (in: hFindFile=0x381d40 | out: hFindFile=0x381d40) returned 1 [0046.113] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e77c) returned 1 [0046.113] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e788) returned 1 [0046.113] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Windows Sidebar\\Gadgets\\Calendar.Gadget\\drag.png", nBufferLength=0x105, lpBuffer=0x31e194, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Windows Sidebar\\Gadgets\\Calendar.Gadget\\drag.png", lpFilePart=0x0) returned 0x41 [0046.113] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e688) returned 1 [0046.113] CreateFileW (lpFileName="C:\\Program Files\\Windows Sidebar\\Gadgets\\Calendar.Gadget\\drag.png" (normalized: "c:\\program files\\windows sidebar\\gadgets\\calendar.gadget\\drag.png"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x274 [0046.114] GetFileType (hFile=0x274) returned 0x1 [0046.115] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e684) returned 1 [0046.115] GetFileType (hFile=0x274) returned 0x1 [0046.115] GetFileSize (in: hFile=0x274, lpFileSizeHigh=0x31e790 | out: lpFileSizeHigh=0x31e790*=0x0) returned 0x1a74 [0046.115] ReadFile (in: hFile=0x274, lpBuffer=0x27305ac, nNumberOfBytesToRead=0x1a74, lpNumberOfBytesRead=0x31e73c, lpOverlapped=0x0 | out: lpBuffer=0x27305ac*, lpNumberOfBytesRead=0x31e73c*=0x1a74, lpOverlapped=0x0) returned 1 [0046.156] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Windows Sidebar\\Gadgets\\Calendar.Gadget\\drag.png", nBufferLength=0x105, lpBuffer=0x31e180, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Windows Sidebar\\Gadgets\\Calendar.Gadget\\drag.png", lpFilePart=0x0) returned 0x41 [0046.156] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e674) returned 1 [0046.156] CreateFileW (lpFileName="C:\\Program Files\\Windows Sidebar\\Gadgets\\Calendar.Gadget\\drag.png" (normalized: "c:\\program files\\windows sidebar\\gadgets\\calendar.gadget\\drag.png"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0xffffffff [0046.158] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31d4b0) returned 1 [0046.158] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e7bc) returned 1 [0046.158] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Windows Sidebar\\Gadgets\\Clock.Gadget", nBufferLength=0x105, lpBuffer=0x31e2c4, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Windows Sidebar\\Gadgets\\Clock.Gadget", lpFilePart=0x0) returned 0x35 [0046.158] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Windows Sidebar\\Gadgets\\Clock.Gadget\\", nBufferLength=0x105, lpBuffer=0x31e298, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Windows Sidebar\\Gadgets\\Clock.Gadget\\", lpFilePart=0x0) returned 0x36 [0046.158] FindFirstFileW (in: lpFileName="C:\\Program Files\\Windows Sidebar\\Gadgets\\Clock.Gadget\\*", lpFindFileData=0x31e4e4 | out: lpFindFileData=0x31e4e4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x80046d91, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x1eaffd21, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x1eaffd21, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x381d00 [0046.159] FindNextFileW (in: hFindFile=0x381d00, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x80046d91, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x1eaffd21, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x1eaffd21, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0046.159] FindNextFileW (in: hFindFile=0x381d00, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8439c2bc, ftCreationTime.dwHighDateTime=0x1ca0403, ftLastAccessTime.dwLowDateTime=0x8439c2bc, ftLastAccessTime.dwHighDateTime=0x1ca0403, ftLastWriteTime.dwLowDateTime=0x2855fdaf, ftLastWriteTime.dwHighDateTime=0x1c9ea0e, nFileSizeHigh=0x0, nFileSizeLow=0x5b85, dwReserved0=0x0, dwReserved1=0x0, cFileName="drag.png", cAlternateFileName="")) returned 1 [0046.159] FindNextFileW (in: hFindFile=0x381d00, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1eaffd21, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x22eb1137, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x1eaffd21, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="en-US", cAlternateFileName="")) returned 1 [0046.159] FindNextFileW (in: hFindFile=0x381d00, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x285ac06b, ftCreationTime.dwHighDateTime=0x1c9ea0e, ftLastAccessTime.dwLowDateTime=0x285ac06b, ftLastAccessTime.dwHighDateTime=0x1c9ea0e, ftLastWriteTime.dwLowDateTime=0x285ac06b, ftLastWriteTime.dwHighDateTime=0x1c9ea0e, nFileSizeHigh=0x0, nFileSizeLow=0x2e0c, dwReserved0=0x0, dwReserved1=0x0, cFileName="icon.png", cAlternateFileName="")) returned 1 [0046.160] FindNextFileW (in: hFindFile=0x381d00, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x80046d91, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x805c807b, ftLastAccessTime.dwHighDateTime=0x1ca0444, ftLastWriteTime.dwLowDateTime=0x805c807b, ftLastWriteTime.dwHighDateTime=0x1ca0444, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="images", cAlternateFileName="")) returned 1 [0046.160] FindNextFileW (in: hFindFile=0x381d00, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x843c2419, ftCreationTime.dwHighDateTime=0x1ca0403, ftLastAccessTime.dwLowDateTime=0x843c2419, ftLastAccessTime.dwHighDateTime=0x1ca0403, ftLastWriteTime.dwLowDateTime=0x28e73115, ftLastWriteTime.dwHighDateTime=0x1c9ea0e, nFileSizeHigh=0x0, nFileSizeLow=0x1816, dwReserved0=0x0, dwReserved1=0x0, cFileName="logo.png", cAlternateFileName="")) returned 1 [0046.160] FindNextFileW (in: hFindFile=0x381d00, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0046.160] FindClose (in: hFindFile=0x381d00 | out: hFindFile=0x381d00) returned 1 [0046.160] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e77c) returned 1 [0046.160] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e788) returned 1 [0046.160] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e7bc) returned 1 [0046.160] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Windows Sidebar\\Gadgets\\Clock.Gadget", nBufferLength=0x105, lpBuffer=0x31e2c4, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Windows Sidebar\\Gadgets\\Clock.Gadget", lpFilePart=0x0) returned 0x35 [0046.160] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Windows Sidebar\\Gadgets\\Clock.Gadget\\", nBufferLength=0x105, lpBuffer=0x31e298, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Windows Sidebar\\Gadgets\\Clock.Gadget\\", lpFilePart=0x0) returned 0x36 [0046.161] FindFirstFileW (in: lpFileName="C:\\Program Files\\Windows Sidebar\\Gadgets\\Clock.Gadget\\*", lpFindFileData=0x31e4e4 | out: lpFindFileData=0x31e4e4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x80046d91, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x1eaffd21, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x1eaffd21, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x381d00 [0046.161] FindNextFileW (in: hFindFile=0x381d00, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x80046d91, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x1eaffd21, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x1eaffd21, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0046.161] FindNextFileW (in: hFindFile=0x381d00, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8439c2bc, ftCreationTime.dwHighDateTime=0x1ca0403, ftLastAccessTime.dwLowDateTime=0x8439c2bc, ftLastAccessTime.dwHighDateTime=0x1ca0403, ftLastWriteTime.dwLowDateTime=0x2855fdaf, ftLastWriteTime.dwHighDateTime=0x1c9ea0e, nFileSizeHigh=0x0, nFileSizeLow=0x5b85, dwReserved0=0x0, dwReserved1=0x0, cFileName="drag.png", cAlternateFileName="")) returned 1 [0046.161] FindNextFileW (in: hFindFile=0x381d00, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1eaffd21, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x22eb1137, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x1eaffd21, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="en-US", cAlternateFileName="")) returned 1 [0046.161] FindNextFileW (in: hFindFile=0x381d00, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x285ac06b, ftCreationTime.dwHighDateTime=0x1c9ea0e, ftLastAccessTime.dwLowDateTime=0x285ac06b, ftLastAccessTime.dwHighDateTime=0x1c9ea0e, ftLastWriteTime.dwLowDateTime=0x285ac06b, ftLastWriteTime.dwHighDateTime=0x1c9ea0e, nFileSizeHigh=0x0, nFileSizeLow=0x2e0c, dwReserved0=0x0, dwReserved1=0x0, cFileName="icon.png", cAlternateFileName="")) returned 1 [0046.161] FindNextFileW (in: hFindFile=0x381d00, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x80046d91, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x805c807b, ftLastAccessTime.dwHighDateTime=0x1ca0444, ftLastWriteTime.dwLowDateTime=0x805c807b, ftLastWriteTime.dwHighDateTime=0x1ca0444, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="images", cAlternateFileName="")) returned 1 [0046.161] FindNextFileW (in: hFindFile=0x381d00, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x843c2419, ftCreationTime.dwHighDateTime=0x1ca0403, ftLastAccessTime.dwLowDateTime=0x843c2419, ftLastAccessTime.dwHighDateTime=0x1ca0403, ftLastWriteTime.dwLowDateTime=0x28e73115, ftLastWriteTime.dwHighDateTime=0x1c9ea0e, nFileSizeHigh=0x0, nFileSizeLow=0x1816, dwReserved0=0x0, dwReserved1=0x0, cFileName="logo.png", cAlternateFileName="")) returned 1 [0046.162] FindNextFileW (in: hFindFile=0x381d00, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x843c2419, ftCreationTime.dwHighDateTime=0x1ca0403, ftLastAccessTime.dwLowDateTime=0x843c2419, ftLastAccessTime.dwHighDateTime=0x1ca0403, ftLastWriteTime.dwLowDateTime=0x28e73115, ftLastWriteTime.dwHighDateTime=0x1c9ea0e, nFileSizeHigh=0x0, nFileSizeLow=0x1816, dwReserved0=0x0, dwReserved1=0x0, cFileName="logo.png", cAlternateFileName="")) returned 0 [0046.162] FindClose (in: hFindFile=0x381d00 | out: hFindFile=0x381d00) returned 1 [0046.162] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e77c) returned 1 [0046.162] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e788) returned 1 [0046.162] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Windows Sidebar\\Gadgets\\Clock.Gadget\\drag.png", nBufferLength=0x105, lpBuffer=0x31e194, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Windows Sidebar\\Gadgets\\Clock.Gadget\\drag.png", lpFilePart=0x0) returned 0x3e [0046.162] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e688) returned 1 [0046.162] CreateFileW (lpFileName="C:\\Program Files\\Windows Sidebar\\Gadgets\\Clock.Gadget\\drag.png" (normalized: "c:\\program files\\windows sidebar\\gadgets\\clock.gadget\\drag.png"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x274 [0046.167] GetFileType (hFile=0x274) returned 0x1 [0046.167] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e684) returned 1 [0046.167] GetFileType (hFile=0x274) returned 0x1 [0046.167] GetFileSize (in: hFile=0x274, lpFileSizeHigh=0x31e790 | out: lpFileSizeHigh=0x31e790*=0x0) returned 0x5b85 [0046.167] ReadFile (in: hFile=0x274, lpBuffer=0x2789a44, nNumberOfBytesToRead=0x5b85, lpNumberOfBytesRead=0x31e73c, lpOverlapped=0x0 | out: lpBuffer=0x2789a44*, lpNumberOfBytesRead=0x31e73c*=0x5b85, lpOverlapped=0x0) returned 1 [0046.168] CloseHandle (hObject=0x274) returned 1 [0046.209] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Windows Sidebar\\Gadgets\\Clock.Gadget\\drag.png", nBufferLength=0x105, lpBuffer=0x31e180, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Windows Sidebar\\Gadgets\\Clock.Gadget\\drag.png", lpFilePart=0x0) returned 0x3e [0046.209] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e674) returned 1 [0046.209] CreateFileW (lpFileName="C:\\Program Files\\Windows Sidebar\\Gadgets\\Clock.Gadget\\drag.png" (normalized: "c:\\program files\\windows sidebar\\gadgets\\clock.gadget\\drag.png"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0xffffffff [0046.210] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31d4b0) returned 1 [0046.210] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e7bc) returned 1 [0046.210] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Windows Sidebar\\Gadgets\\CPU.Gadget", nBufferLength=0x105, lpBuffer=0x31e2c4, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Windows Sidebar\\Gadgets\\CPU.Gadget", lpFilePart=0x0) returned 0x33 [0046.211] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Windows Sidebar\\Gadgets\\CPU.Gadget\\", nBufferLength=0x105, lpBuffer=0x31e298, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Windows Sidebar\\Gadgets\\CPU.Gadget\\", lpFilePart=0x0) returned 0x34 [0046.211] FindFirstFileW (in: lpFileName="C:\\Program Files\\Windows Sidebar\\Gadgets\\CPU.Gadget\\*", lpFindFileData=0x31e4e4 | out: lpFindFileData=0x31e4e4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x80046d91, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x1eaffd21, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x1eaffd21, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x381f00 [0046.211] FindNextFileW (in: hFindFile=0x381f00, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x80046d91, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x1eaffd21, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x1eaffd21, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0046.212] FindNextFileW (in: hFindFile=0x381f00, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8538749b, ftCreationTime.dwHighDateTime=0x1ca0403, ftLastAccessTime.dwLowDateTime=0x8538749b, ftLastAccessTime.dwHighDateTime=0x1ca0403, ftLastWriteTime.dwLowDateTime=0x29088439, ftLastWriteTime.dwHighDateTime=0x1c9ea0e, nFileSizeHigh=0x0, nFileSizeLow=0x4f1c, dwReserved0=0x0, dwReserved1=0x0, cFileName="drag.png", cAlternateFileName="")) returned 1 [0046.212] FindNextFileW (in: hFindFile=0x381f00, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1eaffd21, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x23730c68, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x1eaffd21, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="en-US", cAlternateFileName="")) returned 1 [0046.212] FindNextFileW (in: hFindFile=0x381f00, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x290ae597, ftCreationTime.dwHighDateTime=0x1c9ea0e, ftLastAccessTime.dwLowDateTime=0x290ae597, ftLastAccessTime.dwHighDateTime=0x1c9ea0e, ftLastWriteTime.dwLowDateTime=0x290d46f5, ftLastWriteTime.dwHighDateTime=0x1c9ea0e, nFileSizeHigh=0x0, nFileSizeLow=0x23e2, dwReserved0=0x0, dwReserved1=0x0, cFileName="icon.png", cAlternateFileName="")) returned 1 [0046.212] FindNextFileW (in: hFindFile=0x381f00, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x80046d91, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x8057bdba, ftLastAccessTime.dwHighDateTime=0x1ca0444, ftLastWriteTime.dwLowDateTime=0x8057bdba, ftLastWriteTime.dwHighDateTime=0x1ca0444, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="images", cAlternateFileName="")) returned 1 [0046.212] FindNextFileW (in: hFindFile=0x381f00, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8538749b, ftCreationTime.dwHighDateTime=0x1ca0403, ftLastAccessTime.dwLowDateTime=0x8538749b, ftLastAccessTime.dwHighDateTime=0x1ca0403, ftLastWriteTime.dwLowDateTime=0x291b8f29, ftLastWriteTime.dwHighDateTime=0x1c9ea0e, nFileSizeHigh=0x0, nFileSizeLow=0x1816, dwReserved0=0x0, dwReserved1=0x0, cFileName="logo.png", cAlternateFileName="")) returned 1 [0046.212] FindNextFileW (in: hFindFile=0x381f00, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0046.212] FindClose (in: hFindFile=0x381f00 | out: hFindFile=0x381f00) returned 1 [0046.212] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e77c) returned 1 [0046.212] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e788) returned 1 [0046.212] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e7bc) returned 1 [0046.213] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Windows Sidebar\\Gadgets\\CPU.Gadget", nBufferLength=0x105, lpBuffer=0x31e2c4, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Windows Sidebar\\Gadgets\\CPU.Gadget", lpFilePart=0x0) returned 0x33 [0046.213] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Windows Sidebar\\Gadgets\\CPU.Gadget\\", nBufferLength=0x105, lpBuffer=0x31e298, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Windows Sidebar\\Gadgets\\CPU.Gadget\\", lpFilePart=0x0) returned 0x34 [0046.213] FindFirstFileW (in: lpFileName="C:\\Program Files\\Windows Sidebar\\Gadgets\\CPU.Gadget\\*", lpFindFileData=0x31e4e4 | out: lpFindFileData=0x31e4e4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x80046d91, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x1eaffd21, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x1eaffd21, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x381f00 [0046.213] FindNextFileW (in: hFindFile=0x381f00, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x80046d91, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x1eaffd21, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x1eaffd21, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0046.213] FindNextFileW (in: hFindFile=0x381f00, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8538749b, ftCreationTime.dwHighDateTime=0x1ca0403, ftLastAccessTime.dwLowDateTime=0x8538749b, ftLastAccessTime.dwHighDateTime=0x1ca0403, ftLastWriteTime.dwLowDateTime=0x29088439, ftLastWriteTime.dwHighDateTime=0x1c9ea0e, nFileSizeHigh=0x0, nFileSizeLow=0x4f1c, dwReserved0=0x0, dwReserved1=0x0, cFileName="drag.png", cAlternateFileName="")) returned 1 [0046.213] FindNextFileW (in: hFindFile=0x381f00, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1eaffd21, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x23730c68, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x1eaffd21, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="en-US", cAlternateFileName="")) returned 1 [0046.213] FindNextFileW (in: hFindFile=0x381f00, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x290ae597, ftCreationTime.dwHighDateTime=0x1c9ea0e, ftLastAccessTime.dwLowDateTime=0x290ae597, ftLastAccessTime.dwHighDateTime=0x1c9ea0e, ftLastWriteTime.dwLowDateTime=0x290d46f5, ftLastWriteTime.dwHighDateTime=0x1c9ea0e, nFileSizeHigh=0x0, nFileSizeLow=0x23e2, dwReserved0=0x0, dwReserved1=0x0, cFileName="icon.png", cAlternateFileName="")) returned 1 [0046.213] FindNextFileW (in: hFindFile=0x381f00, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x80046d91, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x8057bdba, ftLastAccessTime.dwHighDateTime=0x1ca0444, ftLastWriteTime.dwLowDateTime=0x8057bdba, ftLastWriteTime.dwHighDateTime=0x1ca0444, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="images", cAlternateFileName="")) returned 1 [0046.214] FindNextFileW (in: hFindFile=0x381f00, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8538749b, ftCreationTime.dwHighDateTime=0x1ca0403, ftLastAccessTime.dwLowDateTime=0x8538749b, ftLastAccessTime.dwHighDateTime=0x1ca0403, ftLastWriteTime.dwLowDateTime=0x291b8f29, ftLastWriteTime.dwHighDateTime=0x1c9ea0e, nFileSizeHigh=0x0, nFileSizeLow=0x1816, dwReserved0=0x0, dwReserved1=0x0, cFileName="logo.png", cAlternateFileName="")) returned 1 [0046.214] FindNextFileW (in: hFindFile=0x381f00, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8538749b, ftCreationTime.dwHighDateTime=0x1ca0403, ftLastAccessTime.dwLowDateTime=0x8538749b, ftLastAccessTime.dwHighDateTime=0x1ca0403, ftLastWriteTime.dwLowDateTime=0x291b8f29, ftLastWriteTime.dwHighDateTime=0x1c9ea0e, nFileSizeHigh=0x0, nFileSizeLow=0x1816, dwReserved0=0x0, dwReserved1=0x0, cFileName="logo.png", cAlternateFileName="")) returned 0 [0046.214] FindClose (in: hFindFile=0x381f00 | out: hFindFile=0x381f00) returned 1 [0046.214] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e77c) returned 1 [0046.214] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e788) returned 1 [0046.214] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Windows Sidebar\\Gadgets\\CPU.Gadget\\drag.png", nBufferLength=0x105, lpBuffer=0x31e194, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Windows Sidebar\\Gadgets\\CPU.Gadget\\drag.png", lpFilePart=0x0) returned 0x3c [0046.214] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e688) returned 1 [0046.214] CreateFileW (lpFileName="C:\\Program Files\\Windows Sidebar\\Gadgets\\CPU.Gadget\\drag.png" (normalized: "c:\\program files\\windows sidebar\\gadgets\\cpu.gadget\\drag.png"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x274 [0046.223] GetFileType (hFile=0x274) returned 0x1 [0046.223] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e684) returned 1 [0046.223] GetFileType (hFile=0x274) returned 0x1 [0046.223] GetFileSize (in: hFile=0x274, lpFileSizeHigh=0x31e790 | out: lpFileSizeHigh=0x31e790*=0x0) returned 0x4f1c [0046.223] ReadFile (in: hFile=0x274, lpBuffer=0x27fb47c, nNumberOfBytesToRead=0x4f1c, lpNumberOfBytesRead=0x31e73c, lpOverlapped=0x0 | out: lpBuffer=0x27fb47c*, lpNumberOfBytesRead=0x31e73c*=0x4f1c, lpOverlapped=0x0) returned 1 [0046.228] CloseHandle (hObject=0x274) returned 1 [0046.278] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Windows Sidebar\\Gadgets\\CPU.Gadget\\drag.png", nBufferLength=0x105, lpBuffer=0x31e180, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Windows Sidebar\\Gadgets\\CPU.Gadget\\drag.png", lpFilePart=0x0) returned 0x3c [0046.278] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e674) returned 1 [0046.278] CreateFileW (lpFileName="C:\\Program Files\\Windows Sidebar\\Gadgets\\CPU.Gadget\\drag.png" (normalized: "c:\\program files\\windows sidebar\\gadgets\\cpu.gadget\\drag.png"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0xffffffff [0046.280] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31d4b0) returned 1 [0046.280] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e7bc) returned 1 [0046.280] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Windows Sidebar\\Gadgets\\Currency.Gadget", nBufferLength=0x105, lpBuffer=0x31e2c4, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Windows Sidebar\\Gadgets\\Currency.Gadget", lpFilePart=0x0) returned 0x38 [0046.280] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Windows Sidebar\\Gadgets\\Currency.Gadget\\", nBufferLength=0x105, lpBuffer=0x31e298, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Windows Sidebar\\Gadgets\\Currency.Gadget\\", lpFilePart=0x0) returned 0x39 [0046.280] FindFirstFileW (in: lpFileName="C:\\Program Files\\Windows Sidebar\\Gadgets\\Currency.Gadget\\*", lpFindFileData=0x31e4e4 | out: lpFindFileData=0x31e4e4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x80046d91, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x1eb25fda, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x1eb25fda, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x381c80 [0046.281] FindNextFileW (in: hFindFile=0x381c80, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x80046d91, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x1eb25fda, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x1eb25fda, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0046.281] FindNextFileW (in: hFindFile=0x381c80, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x871223e6, ftCreationTime.dwHighDateTime=0x1ca0403, ftLastAccessTime.dwLowDateTime=0x871223e6, ftLastAccessTime.dwHighDateTime=0x1ca0403, ftLastWriteTime.dwLowDateTime=0x296096cf, ftLastWriteTime.dwHighDateTime=0x1c9ea0e, nFileSizeHigh=0x0, nFileSizeLow=0x406b, dwReserved0=0x0, dwReserved1=0x0, cFileName="drag.png", cAlternateFileName="")) returned 1 [0046.281] FindNextFileW (in: hFindFile=0x381c80, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1eb25fda, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x23671ecb, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x1eb25fda, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="en-US", cAlternateFileName="")) returned 1 [0046.281] FindNextFileW (in: hFindFile=0x381c80, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x296c7da5, ftCreationTime.dwHighDateTime=0x1c9ea0e, ftLastAccessTime.dwLowDateTime=0x296c7da5, ftLastAccessTime.dwHighDateTime=0x1c9ea0e, ftLastWriteTime.dwLowDateTime=0x296c7da5, ftLastWriteTime.dwHighDateTime=0x1c9ea0e, nFileSizeHigh=0x0, nFileSizeLow=0x1ae9, dwReserved0=0x0, dwReserved1=0x0, cFileName="icon.png", cAlternateFileName="")) returned 1 [0046.281] FindNextFileW (in: hFindFile=0x381c80, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x80046d91, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x8063a49c, ftLastAccessTime.dwHighDateTime=0x1ca0444, ftLastWriteTime.dwLowDateTime=0x8063a49c, ftLastWriteTime.dwHighDateTime=0x1ca0444, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="images", cAlternateFileName="")) returned 1 [0046.281] FindNextFileW (in: hFindFile=0x381c80, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x870fc289, ftCreationTime.dwHighDateTime=0x1ca0403, ftLastAccessTime.dwLowDateTime=0x870fc289, ftLastAccessTime.dwHighDateTime=0x1ca0403, ftLastWriteTime.dwLowDateTime=0x29e5e35f, ftLastWriteTime.dwHighDateTime=0x1c9ea0e, nFileSizeHigh=0x0, nFileSizeLow=0x172a, dwReserved0=0x0, dwReserved1=0x0, cFileName="logo.png", cAlternateFileName="")) returned 1 [0046.282] FindNextFileW (in: hFindFile=0x381c80, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0046.282] FindClose (in: hFindFile=0x381c80 | out: hFindFile=0x381c80) returned 1 [0046.282] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e77c) returned 1 [0046.282] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e788) returned 1 [0046.282] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e7bc) returned 1 [0046.282] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Windows Sidebar\\Gadgets\\Currency.Gadget", nBufferLength=0x105, lpBuffer=0x31e2c4, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Windows Sidebar\\Gadgets\\Currency.Gadget", lpFilePart=0x0) returned 0x38 [0046.282] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Windows Sidebar\\Gadgets\\Currency.Gadget\\", nBufferLength=0x105, lpBuffer=0x31e298, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Windows Sidebar\\Gadgets\\Currency.Gadget\\", lpFilePart=0x0) returned 0x39 [0046.282] FindFirstFileW (in: lpFileName="C:\\Program Files\\Windows Sidebar\\Gadgets\\Currency.Gadget\\*", lpFindFileData=0x31e4e4 | out: lpFindFileData=0x31e4e4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x80046d91, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x1eb25fda, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x1eb25fda, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x381c80 [0046.282] FindNextFileW (in: hFindFile=0x381c80, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x80046d91, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x1eb25fda, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x1eb25fda, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0046.282] FindNextFileW (in: hFindFile=0x381c80, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x871223e6, ftCreationTime.dwHighDateTime=0x1ca0403, ftLastAccessTime.dwLowDateTime=0x871223e6, ftLastAccessTime.dwHighDateTime=0x1ca0403, ftLastWriteTime.dwLowDateTime=0x296096cf, ftLastWriteTime.dwHighDateTime=0x1c9ea0e, nFileSizeHigh=0x0, nFileSizeLow=0x406b, dwReserved0=0x0, dwReserved1=0x0, cFileName="drag.png", cAlternateFileName="")) returned 1 [0046.283] FindNextFileW (in: hFindFile=0x381c80, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1eb25fda, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x23671ecb, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x1eb25fda, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="en-US", cAlternateFileName="")) returned 1 [0046.283] FindNextFileW (in: hFindFile=0x381c80, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x296c7da5, ftCreationTime.dwHighDateTime=0x1c9ea0e, ftLastAccessTime.dwLowDateTime=0x296c7da5, ftLastAccessTime.dwHighDateTime=0x1c9ea0e, ftLastWriteTime.dwLowDateTime=0x296c7da5, ftLastWriteTime.dwHighDateTime=0x1c9ea0e, nFileSizeHigh=0x0, nFileSizeLow=0x1ae9, dwReserved0=0x0, dwReserved1=0x0, cFileName="icon.png", cAlternateFileName="")) returned 1 [0046.283] FindNextFileW (in: hFindFile=0x381c80, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x80046d91, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x8063a49c, ftLastAccessTime.dwHighDateTime=0x1ca0444, ftLastWriteTime.dwLowDateTime=0x8063a49c, ftLastWriteTime.dwHighDateTime=0x1ca0444, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="images", cAlternateFileName="")) returned 1 [0046.283] FindNextFileW (in: hFindFile=0x381c80, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x870fc289, ftCreationTime.dwHighDateTime=0x1ca0403, ftLastAccessTime.dwLowDateTime=0x870fc289, ftLastAccessTime.dwHighDateTime=0x1ca0403, ftLastWriteTime.dwLowDateTime=0x29e5e35f, ftLastWriteTime.dwHighDateTime=0x1c9ea0e, nFileSizeHigh=0x0, nFileSizeLow=0x172a, dwReserved0=0x0, dwReserved1=0x0, cFileName="logo.png", cAlternateFileName="")) returned 1 [0046.283] FindNextFileW (in: hFindFile=0x381c80, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x870fc289, ftCreationTime.dwHighDateTime=0x1ca0403, ftLastAccessTime.dwLowDateTime=0x870fc289, ftLastAccessTime.dwHighDateTime=0x1ca0403, ftLastWriteTime.dwLowDateTime=0x29e5e35f, ftLastWriteTime.dwHighDateTime=0x1c9ea0e, nFileSizeHigh=0x0, nFileSizeLow=0x172a, dwReserved0=0x0, dwReserved1=0x0, cFileName="logo.png", cAlternateFileName="")) returned 0 [0046.283] FindClose (in: hFindFile=0x381c80 | out: hFindFile=0x381c80) returned 1 [0046.283] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e77c) returned 1 [0046.283] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e788) returned 1 [0046.283] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Windows Sidebar\\Gadgets\\Currency.Gadget\\drag.png", nBufferLength=0x105, lpBuffer=0x31e194, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Windows Sidebar\\Gadgets\\Currency.Gadget\\drag.png", lpFilePart=0x0) returned 0x41 [0046.283] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e688) returned 1 [0046.284] CreateFileW (lpFileName="C:\\Program Files\\Windows Sidebar\\Gadgets\\Currency.Gadget\\drag.png" (normalized: "c:\\program files\\windows sidebar\\gadgets\\currency.gadget\\drag.png"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x274 [0046.285] GetFileType (hFile=0x274) returned 0x1 [0046.285] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e684) returned 1 [0046.285] GetFileType (hFile=0x274) returned 0x1 [0046.285] GetFileSize (in: hFile=0x274, lpFileSizeHigh=0x31e790 | out: lpFileSizeHigh=0x31e790*=0x0) returned 0x406b [0046.285] ReadFile (in: hFile=0x274, lpBuffer=0x2678838, nNumberOfBytesToRead=0x406b, lpNumberOfBytesRead=0x31e73c, lpOverlapped=0x0 | out: lpBuffer=0x2678838*, lpNumberOfBytesRead=0x31e73c*=0x406b, lpOverlapped=0x0) returned 1 [0046.287] CloseHandle (hObject=0x274) returned 1 [0046.327] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Windows Sidebar\\Gadgets\\Currency.Gadget\\drag.png", nBufferLength=0x105, lpBuffer=0x31e180, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Windows Sidebar\\Gadgets\\Currency.Gadget\\drag.png", lpFilePart=0x0) returned 0x41 [0046.327] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e674) returned 1 [0046.327] CreateFileW (lpFileName="C:\\Program Files\\Windows Sidebar\\Gadgets\\Currency.Gadget\\drag.png" (normalized: "c:\\program files\\windows sidebar\\gadgets\\currency.gadget\\drag.png"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0xffffffff [0046.329] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31d4b0) returned 1 [0046.329] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e7bc) returned 1 [0046.329] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Windows Sidebar\\Gadgets\\MediaCenter.Gadget", nBufferLength=0x105, lpBuffer=0x31e2c4, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Windows Sidebar\\Gadgets\\MediaCenter.Gadget", lpFilePart=0x0) returned 0x3b [0046.329] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Windows Sidebar\\Gadgets\\MediaCenter.Gadget\\", nBufferLength=0x105, lpBuffer=0x31e298, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Windows Sidebar\\Gadgets\\MediaCenter.Gadget\\", lpFilePart=0x0) returned 0x3c [0046.329] FindFirstFileW (in: lpFileName="C:\\Program Files\\Windows Sidebar\\Gadgets\\MediaCenter.Gadget\\*", lpFindFileData=0x31e4e4 | out: lpFindFileData=0x31e4e4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa1afe884, ftCreationTime.dwHighDateTime=0x1cbf8eb, ftLastAccessTime.dwLowDateTime=0xaa8df54c, ftLastAccessTime.dwHighDateTime=0x1cbf8eb, ftLastWriteTime.dwLowDateTime=0xa1cc85b8, ftLastWriteTime.dwHighDateTime=0x1cbf8eb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x381e00 [0046.331] FindNextFileW (in: hFindFile=0x381e00, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa1afe884, ftCreationTime.dwHighDateTime=0x1cbf8eb, ftLastAccessTime.dwLowDateTime=0xaa8df54c, ftLastAccessTime.dwHighDateTime=0x1cbf8eb, ftLastWriteTime.dwLowDateTime=0xa1cc85b8, ftLastWriteTime.dwHighDateTime=0x1cbf8eb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0046.331] FindNextFileW (in: hFindFile=0x381e00, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa1b24af3, ftCreationTime.dwHighDateTime=0x1cbf8eb, ftLastAccessTime.dwLowDateTime=0xaa9057bb, ftLastAccessTime.dwHighDateTime=0x1cbf8eb, ftLastWriteTime.dwLowDateTime=0xa1b4ad62, ftLastWriteTime.dwHighDateTime=0x1cbf8eb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="css", cAlternateFileName="")) returned 1 [0046.331] FindNextFileW (in: hFindFile=0x381e00, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa1b4ad62, ftCreationTime.dwHighDateTime=0x1cbf8eb, ftLastAccessTime.dwLowDateTime=0xaa48ceb9, ftLastAccessTime.dwHighDateTime=0x1cbf8eb, ftLastWriteTime.dwLowDateTime=0xa1b4ad62, ftLastWriteTime.dwHighDateTime=0x1cbf8eb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="en-US", cAlternateFileName="")) returned 1 [0046.331] FindNextFileW (in: hFindFile=0x381e00, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc9015ef3, ftCreationTime.dwHighDateTime=0x1ca0408, ftLastAccessTime.dwLowDateTime=0xc9015ef3, ftLastAccessTime.dwHighDateTime=0x1ca0408, ftLastWriteTime.dwLowDateTime=0x3fb81591, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x19f2, dwReserved0=0x0, dwReserved1=0x0, cFileName="flyout.html", cAlternateFileName="")) returned 1 [0046.331] FindNextFileW (in: hFindFile=0x381e00, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa1b4ad62, ftCreationTime.dwHighDateTime=0x1cbf8eb, ftLastAccessTime.dwLowDateTime=0xaa9057bb, ftLastAccessTime.dwHighDateTime=0x1cbf8eb, ftLastWriteTime.dwLowDateTime=0xa1cc85b8, ftLastWriteTime.dwHighDateTime=0x1cbf8eb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="images", cAlternateFileName="")) returned 1 [0046.331] FindNextFileW (in: hFindFile=0x381e00, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa1cc85b8, ftCreationTime.dwHighDateTime=0x1cbf8eb, ftLastAccessTime.dwLowDateTime=0xaa9057bb, ftLastAccessTime.dwHighDateTime=0x1cbf8eb, ftLastWriteTime.dwLowDateTime=0xa1cc85b8, ftLastWriteTime.dwHighDateTime=0x1cbf8eb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="js", cAlternateFileName="")) returned 1 [0046.332] FindNextFileW (in: hFindFile=0x381e00, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc8fefd96, ftCreationTime.dwHighDateTime=0x1ca0408, ftLastAccessTime.dwLowDateTime=0xc8fefd96, ftLastAccessTime.dwHighDateTime=0x1ca0408, ftLastWriteTime.dwLowDateTime=0x3fbf39ab, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x294e, dwReserved0=0x0, dwReserved1=0x0, cFileName="main.html", cAlternateFileName="")) returned 1 [0046.332] FindNextFileW (in: hFindFile=0x381e00, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc9a59d04, ftCreationTime.dwHighDateTime=0x1ca0408, ftLastAccessTime.dwLowDateTime=0x9e9e7900, ftLastAccessTime.dwHighDateTime=0x1ca0424, ftLastWriteTime.dwLowDateTime=0xe17d845, ftLastWriteTime.dwHighDateTime=0x1ca0425, nFileSizeHigh=0x0, nFileSizeLow=0xd000, dwReserved0=0x0, dwReserved1=0x0, cFileName="MCESidebarCtrl.dll", cAlternateFileName="")) returned 1 [0046.332] FindNextFileW (in: hFindFile=0x381e00, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc9015ef3, ftCreationTime.dwHighDateTime=0x1ca0408, ftLastAccessTime.dwLowDateTime=0xc9015ef3, ftLastAccessTime.dwHighDateTime=0x1ca0408, ftLastWriteTime.dwLowDateTime=0x3fbf39ab, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x5862, dwReserved0=0x0, dwReserved1=0x0, cFileName="settings.html", cAlternateFileName="")) returned 1 [0046.332] FindNextFileW (in: hFindFile=0x381e00, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0046.332] FindClose (in: hFindFile=0x381e00 | out: hFindFile=0x381e00) returned 1 [0046.333] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e77c) returned 1 [0046.333] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e788) returned 1 [0046.333] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e7bc) returned 1 [0046.333] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Windows Sidebar\\Gadgets\\MediaCenter.Gadget", nBufferLength=0x105, lpBuffer=0x31e2c4, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Windows Sidebar\\Gadgets\\MediaCenter.Gadget", lpFilePart=0x0) returned 0x3b [0046.333] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Windows Sidebar\\Gadgets\\MediaCenter.Gadget\\", nBufferLength=0x105, lpBuffer=0x31e298, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Windows Sidebar\\Gadgets\\MediaCenter.Gadget\\", lpFilePart=0x0) returned 0x3c [0046.333] FindFirstFileW (in: lpFileName="C:\\Program Files\\Windows Sidebar\\Gadgets\\MediaCenter.Gadget\\*", lpFindFileData=0x31e4e4 | out: lpFindFileData=0x31e4e4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa1afe884, ftCreationTime.dwHighDateTime=0x1cbf8eb, ftLastAccessTime.dwLowDateTime=0xaa8df54c, ftLastAccessTime.dwHighDateTime=0x1cbf8eb, ftLastWriteTime.dwLowDateTime=0xa1cc85b8, ftLastWriteTime.dwHighDateTime=0x1cbf8eb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x381e00 [0046.334] FindNextFileW (in: hFindFile=0x381e00, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa1afe884, ftCreationTime.dwHighDateTime=0x1cbf8eb, ftLastAccessTime.dwLowDateTime=0xaa8df54c, ftLastAccessTime.dwHighDateTime=0x1cbf8eb, ftLastWriteTime.dwLowDateTime=0xa1cc85b8, ftLastWriteTime.dwHighDateTime=0x1cbf8eb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0046.334] FindNextFileW (in: hFindFile=0x381e00, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa1b24af3, ftCreationTime.dwHighDateTime=0x1cbf8eb, ftLastAccessTime.dwLowDateTime=0xaa9057bb, ftLastAccessTime.dwHighDateTime=0x1cbf8eb, ftLastWriteTime.dwLowDateTime=0xa1b4ad62, ftLastWriteTime.dwHighDateTime=0x1cbf8eb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="css", cAlternateFileName="")) returned 1 [0046.334] FindNextFileW (in: hFindFile=0x381e00, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa1b4ad62, ftCreationTime.dwHighDateTime=0x1cbf8eb, ftLastAccessTime.dwLowDateTime=0xaa48ceb9, ftLastAccessTime.dwHighDateTime=0x1cbf8eb, ftLastWriteTime.dwLowDateTime=0xa1b4ad62, ftLastWriteTime.dwHighDateTime=0x1cbf8eb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="en-US", cAlternateFileName="")) returned 1 [0046.334] FindNextFileW (in: hFindFile=0x381e00, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc9015ef3, ftCreationTime.dwHighDateTime=0x1ca0408, ftLastAccessTime.dwLowDateTime=0xc9015ef3, ftLastAccessTime.dwHighDateTime=0x1ca0408, ftLastWriteTime.dwLowDateTime=0x3fb81591, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x19f2, dwReserved0=0x0, dwReserved1=0x0, cFileName="flyout.html", cAlternateFileName="")) returned 1 [0046.334] FindNextFileW (in: hFindFile=0x381e00, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa1b4ad62, ftCreationTime.dwHighDateTime=0x1cbf8eb, ftLastAccessTime.dwLowDateTime=0xaa9057bb, ftLastAccessTime.dwHighDateTime=0x1cbf8eb, ftLastWriteTime.dwLowDateTime=0xa1cc85b8, ftLastWriteTime.dwHighDateTime=0x1cbf8eb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="images", cAlternateFileName="")) returned 1 [0046.334] FindNextFileW (in: hFindFile=0x381e00, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa1cc85b8, ftCreationTime.dwHighDateTime=0x1cbf8eb, ftLastAccessTime.dwLowDateTime=0xaa9057bb, ftLastAccessTime.dwHighDateTime=0x1cbf8eb, ftLastWriteTime.dwLowDateTime=0xa1cc85b8, ftLastWriteTime.dwHighDateTime=0x1cbf8eb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="js", cAlternateFileName="")) returned 1 [0046.335] FindNextFileW (in: hFindFile=0x381e00, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc8fefd96, ftCreationTime.dwHighDateTime=0x1ca0408, ftLastAccessTime.dwLowDateTime=0xc8fefd96, ftLastAccessTime.dwHighDateTime=0x1ca0408, ftLastWriteTime.dwLowDateTime=0x3fbf39ab, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x294e, dwReserved0=0x0, dwReserved1=0x0, cFileName="main.html", cAlternateFileName="")) returned 1 [0046.335] FindNextFileW (in: hFindFile=0x381e00, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc9a59d04, ftCreationTime.dwHighDateTime=0x1ca0408, ftLastAccessTime.dwLowDateTime=0x9e9e7900, ftLastAccessTime.dwHighDateTime=0x1ca0424, ftLastWriteTime.dwLowDateTime=0xe17d845, ftLastWriteTime.dwHighDateTime=0x1ca0425, nFileSizeHigh=0x0, nFileSizeLow=0xd000, dwReserved0=0x0, dwReserved1=0x0, cFileName="MCESidebarCtrl.dll", cAlternateFileName="")) returned 1 [0046.335] FindNextFileW (in: hFindFile=0x381e00, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc9015ef3, ftCreationTime.dwHighDateTime=0x1ca0408, ftLastAccessTime.dwLowDateTime=0xc9015ef3, ftLastAccessTime.dwHighDateTime=0x1ca0408, ftLastWriteTime.dwLowDateTime=0x3fbf39ab, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x5862, dwReserved0=0x0, dwReserved1=0x0, cFileName="settings.html", cAlternateFileName="")) returned 1 [0046.335] FindNextFileW (in: hFindFile=0x381e00, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc9015ef3, ftCreationTime.dwHighDateTime=0x1ca0408, ftLastAccessTime.dwLowDateTime=0xc9015ef3, ftLastAccessTime.dwHighDateTime=0x1ca0408, ftLastWriteTime.dwLowDateTime=0x3fbf39ab, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x5862, dwReserved0=0x0, dwReserved1=0x0, cFileName="settings.html", cAlternateFileName="")) returned 0 [0046.335] FindClose (in: hFindFile=0x381e00 | out: hFindFile=0x381e00) returned 1 [0046.336] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e77c) returned 1 [0046.336] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e788) returned 1 [0046.336] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Windows Sidebar\\Gadgets\\MediaCenter.Gadget\\flyout.html", nBufferLength=0x105, lpBuffer=0x31e194, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Windows Sidebar\\Gadgets\\MediaCenter.Gadget\\flyout.html", lpFilePart=0x0) returned 0x47 [0046.336] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e688) returned 1 [0046.336] CreateFileW (lpFileName="C:\\Program Files\\Windows Sidebar\\Gadgets\\MediaCenter.Gadget\\flyout.html" (normalized: "c:\\program files\\windows sidebar\\gadgets\\mediacenter.gadget\\flyout.html"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x274 [0046.337] GetFileType (hFile=0x274) returned 0x1 [0046.337] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e684) returned 1 [0046.337] GetFileType (hFile=0x274) returned 0x1 [0046.337] GetFileSize (in: hFile=0x274, lpFileSizeHigh=0x31e790 | out: lpFileSizeHigh=0x31e790*=0x0) returned 0x19f2 [0046.337] ReadFile (in: hFile=0x274, lpBuffer=0x26e0d5c, nNumberOfBytesToRead=0x19f2, lpNumberOfBytesRead=0x31e73c, lpOverlapped=0x0 | out: lpBuffer=0x26e0d5c*, lpNumberOfBytesRead=0x31e73c*=0x19f2, lpOverlapped=0x0) returned 1 [0046.339] CloseHandle (hObject=0x274) returned 1 [0046.378] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Windows Sidebar\\Gadgets\\MediaCenter.Gadget\\flyout.html", nBufferLength=0x105, lpBuffer=0x31e180, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Windows Sidebar\\Gadgets\\MediaCenter.Gadget\\flyout.html", lpFilePart=0x0) returned 0x47 [0046.378] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e674) returned 1 [0046.378] CreateFileW (lpFileName="C:\\Program Files\\Windows Sidebar\\Gadgets\\MediaCenter.Gadget\\flyout.html" (normalized: "c:\\program files\\windows sidebar\\gadgets\\mediacenter.gadget\\flyout.html"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0xffffffff [0046.379] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31d4b0) returned 1 [0046.379] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e7bc) returned 1 [0046.380] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Windows Sidebar\\Gadgets\\PicturePuzzle.Gadget", nBufferLength=0x105, lpBuffer=0x31e2c4, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Windows Sidebar\\Gadgets\\PicturePuzzle.Gadget", lpFilePart=0x0) returned 0x3d [0046.380] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Windows Sidebar\\Gadgets\\PicturePuzzle.Gadget\\", nBufferLength=0x105, lpBuffer=0x31e298, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Windows Sidebar\\Gadgets\\PicturePuzzle.Gadget\\", lpFilePart=0x0) returned 0x3e [0046.380] FindFirstFileW (in: lpFileName="C:\\Program Files\\Windows Sidebar\\Gadgets\\PicturePuzzle.Gadget\\*", lpFindFileData=0x31e4e4 | out: lpFindFileData=0x31e4e4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x80046d91, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x1eb25fda, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x1eb25fda, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x381d40 [0046.381] FindNextFileW (in: hFindFile=0x381d40, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x80046d91, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x1eb25fda, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x1eb25fda, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0046.381] FindNextFileW (in: hFindFile=0x381d40, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x85b69cdc, ftCreationTime.dwHighDateTime=0x1ca0403, ftLastAccessTime.dwLowDateTime=0x85b69cdc, ftLastAccessTime.dwHighDateTime=0x1ca0403, ftLastWriteTime.dwLowDateTime=0x38816739, ftLastWriteTime.dwHighDateTime=0x1c9ea0e, nFileSizeHigh=0x0, nFileSizeLow=0x7a53, dwReserved0=0x0, dwReserved1=0x0, cFileName="drag.png", cAlternateFileName="")) returned 1 [0046.381] FindNextFileW (in: hFindFile=0x381d40, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1eb25fda, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x22fbc446, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x1eb25fda, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="en-US", cAlternateFileName="")) returned 1 [0046.381] FindNextFileW (in: hFindFile=0x381d40, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x388629f5, ftCreationTime.dwHighDateTime=0x1c9ea0e, ftLastAccessTime.dwLowDateTime=0x388629f5, ftLastAccessTime.dwHighDateTime=0x1c9ea0e, ftLastWriteTime.dwLowDateTime=0x38888b53, ftLastWriteTime.dwHighDateTime=0x1c9ea0e, nFileSizeHigh=0x0, nFileSizeLow=0x255b, dwReserved0=0x0, dwReserved1=0x0, cFileName="icon.png", cAlternateFileName="")) returned 1 [0046.381] FindNextFileW (in: hFindFile=0x381d40, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x80046d91, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x806605fc, ftLastAccessTime.dwHighDateTime=0x1ca0444, ftLastWriteTime.dwLowDateTime=0x806605fc, ftLastWriteTime.dwHighDateTime=0x1ca0444, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Images", cAlternateFileName="")) returned 1 [0046.381] FindNextFileW (in: hFindFile=0x381d40, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x85b8fe39, ftCreationTime.dwHighDateTime=0x1ca0403, ftLastAccessTime.dwLowDateTime=0x85b8fe39, ftLastAccessTime.dwHighDateTime=0x1ca0403, ftLastWriteTime.dwLowDateTime=0x3bdf1625, ftLastWriteTime.dwHighDateTime=0x1c9ea0e, nFileSizeHigh=0x0, nFileSizeLow=0x1816, dwReserved0=0x0, dwReserved1=0x0, cFileName="logo.png", cAlternateFileName="")) returned 1 [0046.381] FindNextFileW (in: hFindFile=0x381d40, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0046.381] FindClose (in: hFindFile=0x381d40 | out: hFindFile=0x381d40) returned 1 [0046.382] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e77c) returned 1 [0046.382] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e788) returned 1 [0046.382] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e7bc) returned 1 [0046.382] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Windows Sidebar\\Gadgets\\PicturePuzzle.Gadget", nBufferLength=0x105, lpBuffer=0x31e2c4, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Windows Sidebar\\Gadgets\\PicturePuzzle.Gadget", lpFilePart=0x0) returned 0x3d [0046.382] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Windows Sidebar\\Gadgets\\PicturePuzzle.Gadget\\", nBufferLength=0x105, lpBuffer=0x31e298, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Windows Sidebar\\Gadgets\\PicturePuzzle.Gadget\\", lpFilePart=0x0) returned 0x3e [0046.382] FindFirstFileW (in: lpFileName="C:\\Program Files\\Windows Sidebar\\Gadgets\\PicturePuzzle.Gadget\\*", lpFindFileData=0x31e4e4 | out: lpFindFileData=0x31e4e4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x80046d91, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x1eb25fda, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x1eb25fda, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x381d40 [0046.382] FindNextFileW (in: hFindFile=0x381d40, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x80046d91, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x1eb25fda, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x1eb25fda, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0046.382] FindNextFileW (in: hFindFile=0x381d40, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x85b69cdc, ftCreationTime.dwHighDateTime=0x1ca0403, ftLastAccessTime.dwLowDateTime=0x85b69cdc, ftLastAccessTime.dwHighDateTime=0x1ca0403, ftLastWriteTime.dwLowDateTime=0x38816739, ftLastWriteTime.dwHighDateTime=0x1c9ea0e, nFileSizeHigh=0x0, nFileSizeLow=0x7a53, dwReserved0=0x0, dwReserved1=0x0, cFileName="drag.png", cAlternateFileName="")) returned 1 [0046.382] FindNextFileW (in: hFindFile=0x381d40, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1eb25fda, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x22fbc446, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x1eb25fda, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="en-US", cAlternateFileName="")) returned 1 [0046.382] FindNextFileW (in: hFindFile=0x381d40, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x388629f5, ftCreationTime.dwHighDateTime=0x1c9ea0e, ftLastAccessTime.dwLowDateTime=0x388629f5, ftLastAccessTime.dwHighDateTime=0x1c9ea0e, ftLastWriteTime.dwLowDateTime=0x38888b53, ftLastWriteTime.dwHighDateTime=0x1c9ea0e, nFileSizeHigh=0x0, nFileSizeLow=0x255b, dwReserved0=0x0, dwReserved1=0x0, cFileName="icon.png", cAlternateFileName="")) returned 1 [0046.383] FindNextFileW (in: hFindFile=0x381d40, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x80046d91, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x806605fc, ftLastAccessTime.dwHighDateTime=0x1ca0444, ftLastWriteTime.dwLowDateTime=0x806605fc, ftLastWriteTime.dwHighDateTime=0x1ca0444, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Images", cAlternateFileName="")) returned 1 [0046.383] FindNextFileW (in: hFindFile=0x381d40, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x85b8fe39, ftCreationTime.dwHighDateTime=0x1ca0403, ftLastAccessTime.dwLowDateTime=0x85b8fe39, ftLastAccessTime.dwHighDateTime=0x1ca0403, ftLastWriteTime.dwLowDateTime=0x3bdf1625, ftLastWriteTime.dwHighDateTime=0x1c9ea0e, nFileSizeHigh=0x0, nFileSizeLow=0x1816, dwReserved0=0x0, dwReserved1=0x0, cFileName="logo.png", cAlternateFileName="")) returned 1 [0046.383] FindNextFileW (in: hFindFile=0x381d40, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x85b8fe39, ftCreationTime.dwHighDateTime=0x1ca0403, ftLastAccessTime.dwLowDateTime=0x85b8fe39, ftLastAccessTime.dwHighDateTime=0x1ca0403, ftLastWriteTime.dwLowDateTime=0x3bdf1625, ftLastWriteTime.dwHighDateTime=0x1c9ea0e, nFileSizeHigh=0x0, nFileSizeLow=0x1816, dwReserved0=0x0, dwReserved1=0x0, cFileName="logo.png", cAlternateFileName="")) returned 0 [0046.383] FindClose (in: hFindFile=0x381d40 | out: hFindFile=0x381d40) returned 1 [0046.383] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e77c) returned 1 [0046.383] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e788) returned 1 [0046.383] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Windows Sidebar\\Gadgets\\PicturePuzzle.Gadget\\drag.png", nBufferLength=0x105, lpBuffer=0x31e194, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Windows Sidebar\\Gadgets\\PicturePuzzle.Gadget\\drag.png", lpFilePart=0x0) returned 0x46 [0046.383] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e688) returned 1 [0046.383] CreateFileW (lpFileName="C:\\Program Files\\Windows Sidebar\\Gadgets\\PicturePuzzle.Gadget\\drag.png" (normalized: "c:\\program files\\windows sidebar\\gadgets\\picturepuzzle.gadget\\drag.png"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x274 [0046.384] GetFileType (hFile=0x274) returned 0x1 [0046.384] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e684) returned 1 [0046.384] GetFileType (hFile=0x274) returned 0x1 [0046.384] GetFileSize (in: hFile=0x274, lpFileSizeHigh=0x31e790 | out: lpFileSizeHigh=0x31e790*=0x0) returned 0x7a53 [0046.384] ReadFile (in: hFile=0x274, lpBuffer=0x273a204, nNumberOfBytesToRead=0x7a53, lpNumberOfBytesRead=0x31e73c, lpOverlapped=0x0 | out: lpBuffer=0x273a204*, lpNumberOfBytesRead=0x31e73c*=0x7a53, lpOverlapped=0x0) returned 1 [0046.386] CloseHandle (hObject=0x274) returned 1 [0046.426] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Windows Sidebar\\Gadgets\\PicturePuzzle.Gadget\\drag.png", nBufferLength=0x105, lpBuffer=0x31e180, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Windows Sidebar\\Gadgets\\PicturePuzzle.Gadget\\drag.png", lpFilePart=0x0) returned 0x46 [0046.426] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e674) returned 1 [0046.426] CreateFileW (lpFileName="C:\\Program Files\\Windows Sidebar\\Gadgets\\PicturePuzzle.Gadget\\drag.png" (normalized: "c:\\program files\\windows sidebar\\gadgets\\picturepuzzle.gadget\\drag.png"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0xffffffff [0046.427] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31d4b0) returned 1 [0046.427] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e7bc) returned 1 [0046.428] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Windows Sidebar\\Gadgets\\RSSFeeds.Gadget", nBufferLength=0x105, lpBuffer=0x31e2c4, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Windows Sidebar\\Gadgets\\RSSFeeds.Gadget", lpFilePart=0x0) returned 0x38 [0046.428] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Windows Sidebar\\Gadgets\\RSSFeeds.Gadget\\", nBufferLength=0x105, lpBuffer=0x31e298, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Windows Sidebar\\Gadgets\\RSSFeeds.Gadget\\", lpFilePart=0x0) returned 0x39 [0046.428] FindFirstFileW (in: lpFileName="C:\\Program Files\\Windows Sidebar\\Gadgets\\RSSFeeds.Gadget\\*", lpFindFileData=0x31e4e4 | out: lpFindFileData=0x31e4e4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x80046d91, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x1eb25fda, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x1eb25fda, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x382040 [0046.429] FindNextFileW (in: hFindFile=0x382040, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x80046d91, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x1eb25fda, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x1eb25fda, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0046.429] FindNextFileW (in: hFindFile=0x382040, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x85c4e50a, ftCreationTime.dwHighDateTime=0x1ca0403, ftLastAccessTime.dwLowDateTime=0x85c4e50a, ftLastAccessTime.dwHighDateTime=0x1ca0403, ftLastWriteTime.dwLowDateTime=0x3cdb6711, ftLastWriteTime.dwHighDateTime=0x1c9ea0e, nFileSizeHigh=0x0, nFileSizeLow=0x2141, dwReserved0=0x0, dwReserved1=0x0, cFileName="drag.png", cAlternateFileName="")) returned 1 [0046.429] FindNextFileW (in: hFindFile=0x382040, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1eb25fda, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x22e64bc5, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x1eb25fda, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="en-US", cAlternateFileName="")) returned 1 [0046.429] FindNextFileW (in: hFindFile=0x382040, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3ce029cd, ftCreationTime.dwHighDateTime=0x1c9ea0e, ftLastAccessTime.dwLowDateTime=0x3ce029cd, ftLastAccessTime.dwHighDateTime=0x1c9ea0e, ftLastWriteTime.dwLowDateTime=0x3ce029cd, ftLastWriteTime.dwHighDateTime=0x1c9ea0e, nFileSizeHigh=0x0, nFileSizeLow=0x1d07, dwReserved0=0x0, dwReserved1=0x0, cFileName="icon.png", cAlternateFileName="")) returned 1 [0046.429] FindNextFileW (in: hFindFile=0x382040, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x80046d91, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x8061433b, ftLastAccessTime.dwHighDateTime=0x1ca0444, ftLastWriteTime.dwLowDateTime=0x8061433b, ftLastWriteTime.dwHighDateTime=0x1ca0444, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="images", cAlternateFileName="")) returned 1 [0046.430] FindNextFileW (in: hFindFile=0x382040, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x85c283ad, ftCreationTime.dwHighDateTime=0x1ca0403, ftLastAccessTime.dwLowDateTime=0x85c283ad, ftLastAccessTime.dwHighDateTime=0x1ca0403, ftLastWriteTime.dwLowDateTime=0x3cff1b93, ftLastWriteTime.dwHighDateTime=0x1c9ea0e, nFileSizeHigh=0x0, nFileSizeLow=0x1816, dwReserved0=0x0, dwReserved1=0x0, cFileName="logo.png", cAlternateFileName="")) returned 1 [0046.430] FindNextFileW (in: hFindFile=0x382040, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0046.430] FindClose (in: hFindFile=0x382040 | out: hFindFile=0x382040) returned 1 [0046.430] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e77c) returned 1 [0046.430] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e788) returned 1 [0046.430] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e7bc) returned 1 [0046.430] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Windows Sidebar\\Gadgets\\RSSFeeds.Gadget", nBufferLength=0x105, lpBuffer=0x31e2c4, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Windows Sidebar\\Gadgets\\RSSFeeds.Gadget", lpFilePart=0x0) returned 0x38 [0046.430] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Windows Sidebar\\Gadgets\\RSSFeeds.Gadget\\", nBufferLength=0x105, lpBuffer=0x31e298, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Windows Sidebar\\Gadgets\\RSSFeeds.Gadget\\", lpFilePart=0x0) returned 0x39 [0046.430] FindFirstFileW (in: lpFileName="C:\\Program Files\\Windows Sidebar\\Gadgets\\RSSFeeds.Gadget\\*", lpFindFileData=0x31e4e4 | out: lpFindFileData=0x31e4e4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x80046d91, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x1eb25fda, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x1eb25fda, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x382040 [0046.430] FindNextFileW (in: hFindFile=0x382040, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x80046d91, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x1eb25fda, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x1eb25fda, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0046.431] FindNextFileW (in: hFindFile=0x382040, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x85c4e50a, ftCreationTime.dwHighDateTime=0x1ca0403, ftLastAccessTime.dwLowDateTime=0x85c4e50a, ftLastAccessTime.dwHighDateTime=0x1ca0403, ftLastWriteTime.dwLowDateTime=0x3cdb6711, ftLastWriteTime.dwHighDateTime=0x1c9ea0e, nFileSizeHigh=0x0, nFileSizeLow=0x2141, dwReserved0=0x0, dwReserved1=0x0, cFileName="drag.png", cAlternateFileName="")) returned 1 [0046.431] FindNextFileW (in: hFindFile=0x382040, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1eb25fda, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x22e64bc5, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x1eb25fda, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="en-US", cAlternateFileName="")) returned 1 [0046.431] FindNextFileW (in: hFindFile=0x382040, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3ce029cd, ftCreationTime.dwHighDateTime=0x1c9ea0e, ftLastAccessTime.dwLowDateTime=0x3ce029cd, ftLastAccessTime.dwHighDateTime=0x1c9ea0e, ftLastWriteTime.dwLowDateTime=0x3ce029cd, ftLastWriteTime.dwHighDateTime=0x1c9ea0e, nFileSizeHigh=0x0, nFileSizeLow=0x1d07, dwReserved0=0x0, dwReserved1=0x0, cFileName="icon.png", cAlternateFileName="")) returned 1 [0046.431] FindNextFileW (in: hFindFile=0x382040, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x80046d91, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x8061433b, ftLastAccessTime.dwHighDateTime=0x1ca0444, ftLastWriteTime.dwLowDateTime=0x8061433b, ftLastWriteTime.dwHighDateTime=0x1ca0444, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="images", cAlternateFileName="")) returned 1 [0046.431] FindNextFileW (in: hFindFile=0x382040, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x85c283ad, ftCreationTime.dwHighDateTime=0x1ca0403, ftLastAccessTime.dwLowDateTime=0x85c283ad, ftLastAccessTime.dwHighDateTime=0x1ca0403, ftLastWriteTime.dwLowDateTime=0x3cff1b93, ftLastWriteTime.dwHighDateTime=0x1c9ea0e, nFileSizeHigh=0x0, nFileSizeLow=0x1816, dwReserved0=0x0, dwReserved1=0x0, cFileName="logo.png", cAlternateFileName="")) returned 1 [0046.431] FindNextFileW (in: hFindFile=0x382040, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x85c283ad, ftCreationTime.dwHighDateTime=0x1ca0403, ftLastAccessTime.dwLowDateTime=0x85c283ad, ftLastAccessTime.dwHighDateTime=0x1ca0403, ftLastWriteTime.dwLowDateTime=0x3cff1b93, ftLastWriteTime.dwHighDateTime=0x1c9ea0e, nFileSizeHigh=0x0, nFileSizeLow=0x1816, dwReserved0=0x0, dwReserved1=0x0, cFileName="logo.png", cAlternateFileName="")) returned 0 [0046.431] FindClose (in: hFindFile=0x382040 | out: hFindFile=0x382040) returned 1 [0046.431] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e77c) returned 1 [0046.432] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e788) returned 1 [0046.432] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Windows Sidebar\\Gadgets\\RSSFeeds.Gadget\\drag.png", nBufferLength=0x105, lpBuffer=0x31e194, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Windows Sidebar\\Gadgets\\RSSFeeds.Gadget\\drag.png", lpFilePart=0x0) returned 0x41 [0046.432] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e688) returned 1 [0046.432] CreateFileW (lpFileName="C:\\Program Files\\Windows Sidebar\\Gadgets\\RSSFeeds.Gadget\\drag.png" (normalized: "c:\\program files\\windows sidebar\\gadgets\\rssfeeds.gadget\\drag.png"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x274 [0046.433] GetFileType (hFile=0x274) returned 0x1 [0046.433] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e684) returned 1 [0046.433] GetFileType (hFile=0x274) returned 0x1 [0046.433] GetFileSize (in: hFile=0x274, lpFileSizeHigh=0x31e790 | out: lpFileSizeHigh=0x31e790*=0x0) returned 0x2141 [0046.433] ReadFile (in: hFile=0x274, lpBuffer=0x27b770c, nNumberOfBytesToRead=0x2141, lpNumberOfBytesRead=0x31e73c, lpOverlapped=0x0 | out: lpBuffer=0x27b770c*, lpNumberOfBytesRead=0x31e73c*=0x2141, lpOverlapped=0x0) returned 1 [0046.435] CloseHandle (hObject=0x274) returned 1 [0046.475] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Windows Sidebar\\Gadgets\\RSSFeeds.Gadget\\drag.png", nBufferLength=0x105, lpBuffer=0x31e180, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Windows Sidebar\\Gadgets\\RSSFeeds.Gadget\\drag.png", lpFilePart=0x0) returned 0x41 [0046.475] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e674) returned 1 [0046.475] CreateFileW (lpFileName="C:\\Program Files\\Windows Sidebar\\Gadgets\\RSSFeeds.Gadget\\drag.png" (normalized: "c:\\program files\\windows sidebar\\gadgets\\rssfeeds.gadget\\drag.png"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0xffffffff [0046.476] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31d4b0) returned 1 [0046.476] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e7bc) returned 1 [0046.476] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Windows Sidebar\\Gadgets\\SlideShow.Gadget", nBufferLength=0x105, lpBuffer=0x31e2c4, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Windows Sidebar\\Gadgets\\SlideShow.Gadget", lpFilePart=0x0) returned 0x39 [0046.476] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Windows Sidebar\\Gadgets\\SlideShow.Gadget\\", nBufferLength=0x105, lpBuffer=0x31e298, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Windows Sidebar\\Gadgets\\SlideShow.Gadget\\", lpFilePart=0x0) returned 0x3a [0046.476] FindFirstFileW (in: lpFileName="C:\\Program Files\\Windows Sidebar\\Gadgets\\SlideShow.Gadget\\*", lpFindFileData=0x31e4e4 | out: lpFindFileData=0x31e4e4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x80046d91, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x1eaffd21, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x1eaffd21, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x381f40 [0046.477] FindNextFileW (in: hFindFile=0x381f40, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x80046d91, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x1eaffd21, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x1eaffd21, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0046.477] FindNextFileW (in: hFindFile=0x381f40, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x86bc72d2, ftCreationTime.dwHighDateTime=0x1ca0403, ftLastAccessTime.dwLowDateTime=0x86bc72d2, ftLastAccessTime.dwHighDateTime=0x1ca0403, ftLastWriteTime.dwLowDateTime=0x3d3f607d, ftLastWriteTime.dwHighDateTime=0x1c9ea0e, nFileSizeHigh=0x0, nFileSizeLow=0x7575, dwReserved0=0x0, dwReserved1=0x0, cFileName="drag.png", cAlternateFileName="")) returned 1 [0046.478] FindNextFileW (in: hFindFile=0x381f40, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1eaffd21, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x24022fc4, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x1eb25fda, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="en-US", cAlternateFileName="")) returned 1 [0046.478] FindNextFileW (in: hFindFile=0x381f40, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3d442339, ftCreationTime.dwHighDateTime=0x1c9ea0e, ftLastAccessTime.dwLowDateTime=0x3d442339, ftLastAccessTime.dwHighDateTime=0x1c9ea0e, ftLastWriteTime.dwLowDateTime=0x3d442339, ftLastWriteTime.dwHighDateTime=0x1c9ea0e, nFileSizeHigh=0x0, nFileSizeLow=0x2732, dwReserved0=0x0, dwReserved1=0x0, cFileName="icon.png", cAlternateFileName="")) returned 1 [0046.478] FindNextFileW (in: hFindFile=0x381f40, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x80046d91, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x805ee1db, ftLastAccessTime.dwHighDateTime=0x1ca0444, ftLastWriteTime.dwLowDateTime=0x805ee1db, ftLastWriteTime.dwHighDateTime=0x1ca0444, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="images", cAlternateFileName="")) returned 1 [0046.478] FindNextFileW (in: hFindFile=0x381f40, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x86b7b018, ftCreationTime.dwHighDateTime=0x1ca0403, ftLastAccessTime.dwLowDateTime=0x86b7b018, ftLastAccessTime.dwHighDateTime=0x1ca0403, ftLastWriteTime.dwLowDateTime=0x3db4037b, ftLastWriteTime.dwHighDateTime=0x1c9ea0e, nFileSizeHigh=0x0, nFileSizeLow=0x1816, dwReserved0=0x0, dwReserved1=0x0, cFileName="logo.png", cAlternateFileName="")) returned 1 [0046.478] FindNextFileW (in: hFindFile=0x381f40, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0046.478] FindClose (in: hFindFile=0x381f40 | out: hFindFile=0x381f40) returned 1 [0046.478] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e77c) returned 1 [0046.478] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e788) returned 1 [0046.478] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e7bc) returned 1 [0046.478] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Windows Sidebar\\Gadgets\\SlideShow.Gadget", nBufferLength=0x105, lpBuffer=0x31e2c4, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Windows Sidebar\\Gadgets\\SlideShow.Gadget", lpFilePart=0x0) returned 0x39 [0046.478] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Windows Sidebar\\Gadgets\\SlideShow.Gadget\\", nBufferLength=0x105, lpBuffer=0x31e298, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Windows Sidebar\\Gadgets\\SlideShow.Gadget\\", lpFilePart=0x0) returned 0x3a [0046.479] FindFirstFileW (in: lpFileName="C:\\Program Files\\Windows Sidebar\\Gadgets\\SlideShow.Gadget\\*", lpFindFileData=0x31e4e4 | out: lpFindFileData=0x31e4e4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x80046d91, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x1eaffd21, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x1eaffd21, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x381f40 [0046.479] FindNextFileW (in: hFindFile=0x381f40, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x80046d91, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x1eaffd21, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x1eaffd21, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0046.479] FindNextFileW (in: hFindFile=0x381f40, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x86bc72d2, ftCreationTime.dwHighDateTime=0x1ca0403, ftLastAccessTime.dwLowDateTime=0x86bc72d2, ftLastAccessTime.dwHighDateTime=0x1ca0403, ftLastWriteTime.dwLowDateTime=0x3d3f607d, ftLastWriteTime.dwHighDateTime=0x1c9ea0e, nFileSizeHigh=0x0, nFileSizeLow=0x7575, dwReserved0=0x0, dwReserved1=0x0, cFileName="drag.png", cAlternateFileName="")) returned 1 [0046.479] FindNextFileW (in: hFindFile=0x381f40, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1eaffd21, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x24022fc4, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x1eb25fda, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="en-US", cAlternateFileName="")) returned 1 [0046.479] FindNextFileW (in: hFindFile=0x381f40, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3d442339, ftCreationTime.dwHighDateTime=0x1c9ea0e, ftLastAccessTime.dwLowDateTime=0x3d442339, ftLastAccessTime.dwHighDateTime=0x1c9ea0e, ftLastWriteTime.dwLowDateTime=0x3d442339, ftLastWriteTime.dwHighDateTime=0x1c9ea0e, nFileSizeHigh=0x0, nFileSizeLow=0x2732, dwReserved0=0x0, dwReserved1=0x0, cFileName="icon.png", cAlternateFileName="")) returned 1 [0046.479] FindNextFileW (in: hFindFile=0x381f40, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x80046d91, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x805ee1db, ftLastAccessTime.dwHighDateTime=0x1ca0444, ftLastWriteTime.dwLowDateTime=0x805ee1db, ftLastWriteTime.dwHighDateTime=0x1ca0444, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="images", cAlternateFileName="")) returned 1 [0046.479] FindNextFileW (in: hFindFile=0x381f40, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x86b7b018, ftCreationTime.dwHighDateTime=0x1ca0403, ftLastAccessTime.dwLowDateTime=0x86b7b018, ftLastAccessTime.dwHighDateTime=0x1ca0403, ftLastWriteTime.dwLowDateTime=0x3db4037b, ftLastWriteTime.dwHighDateTime=0x1c9ea0e, nFileSizeHigh=0x0, nFileSizeLow=0x1816, dwReserved0=0x0, dwReserved1=0x0, cFileName="logo.png", cAlternateFileName="")) returned 1 [0046.480] FindNextFileW (in: hFindFile=0x381f40, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x86b7b018, ftCreationTime.dwHighDateTime=0x1ca0403, ftLastAccessTime.dwLowDateTime=0x86b7b018, ftLastAccessTime.dwHighDateTime=0x1ca0403, ftLastWriteTime.dwLowDateTime=0x3db4037b, ftLastWriteTime.dwHighDateTime=0x1c9ea0e, nFileSizeHigh=0x0, nFileSizeLow=0x1816, dwReserved0=0x0, dwReserved1=0x0, cFileName="logo.png", cAlternateFileName="")) returned 0 [0046.480] FindClose (in: hFindFile=0x381f40 | out: hFindFile=0x381f40) returned 1 [0046.480] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e77c) returned 1 [0046.480] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e788) returned 1 [0046.480] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Windows Sidebar\\Gadgets\\SlideShow.Gadget\\drag.png", nBufferLength=0x105, lpBuffer=0x31e194, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Windows Sidebar\\Gadgets\\SlideShow.Gadget\\drag.png", lpFilePart=0x0) returned 0x42 [0046.480] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e688) returned 1 [0046.480] CreateFileW (lpFileName="C:\\Program Files\\Windows Sidebar\\Gadgets\\SlideShow.Gadget\\drag.png" (normalized: "c:\\program files\\windows sidebar\\gadgets\\slideshow.gadget\\drag.png"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x274 [0046.487] GetFileType (hFile=0x274) returned 0x1 [0046.487] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e684) returned 1 [0046.487] GetFileType (hFile=0x274) returned 0x1 [0046.487] GetFileSize (in: hFile=0x274, lpFileSizeHigh=0x31e790 | out: lpFileSizeHigh=0x31e790*=0x0) returned 0x7575 [0046.488] ReadFile (in: hFile=0x274, lpBuffer=0x2813600, nNumberOfBytesToRead=0x7575, lpNumberOfBytesRead=0x31e73c, lpOverlapped=0x0 | out: lpBuffer=0x2813600*, lpNumberOfBytesRead=0x31e73c*=0x7575, lpOverlapped=0x0) returned 1 [0046.532] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Windows Sidebar\\Gadgets\\SlideShow.Gadget\\drag.png", nBufferLength=0x105, lpBuffer=0x31e180, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Windows Sidebar\\Gadgets\\SlideShow.Gadget\\drag.png", lpFilePart=0x0) returned 0x42 [0046.532] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e674) returned 1 [0046.532] CreateFileW (lpFileName="C:\\Program Files\\Windows Sidebar\\Gadgets\\SlideShow.Gadget\\drag.png" (normalized: "c:\\program files\\windows sidebar\\gadgets\\slideshow.gadget\\drag.png"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0xffffffff [0046.533] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31d4b0) returned 1 [0046.533] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e7bc) returned 1 [0046.533] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Windows Sidebar\\Gadgets\\Weather.Gadget", nBufferLength=0x105, lpBuffer=0x31e2c4, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Windows Sidebar\\Gadgets\\Weather.Gadget", lpFilePart=0x0) returned 0x37 [0046.533] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Windows Sidebar\\Gadgets\\Weather.Gadget\\", nBufferLength=0x105, lpBuffer=0x31e298, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Windows Sidebar\\Gadgets\\Weather.Gadget\\", lpFilePart=0x0) returned 0x38 [0046.534] FindFirstFileW (in: lpFileName="C:\\Program Files\\Windows Sidebar\\Gadgets\\Weather.Gadget\\*", lpFindFileData=0x31e4e4 | out: lpFindFileData=0x31e4e4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x80046d91, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x1eaffd21, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x1eaffd21, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x381e80 [0046.535] FindNextFileW (in: hFindFile=0x381e80, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x80046d91, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x1eaffd21, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x1eaffd21, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0046.535] FindNextFileW (in: hFindFile=0x381e80, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x876a3657, ftCreationTime.dwHighDateTime=0x1ca0403, ftLastAccessTime.dwLowDateTime=0x876a3657, ftLastAccessTime.dwHighDateTime=0x1ca0403, ftLastWriteTime.dwLowDateTime=0x2a5f4919, ftLastWriteTime.dwHighDateTime=0x1c9ea0e, nFileSizeHigh=0x0, nFileSizeLow=0x3260, dwReserved0=0x0, dwReserved1=0x0, cFileName="drag.png", cAlternateFileName="")) returned 1 [0046.535] FindNextFileW (in: hFindFile=0x381e80, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1eaffd21, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x22c02035, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x1eaffd21, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="en-US", cAlternateFileName="")) returned 1 [0046.535] FindNextFileW (in: hFindFile=0x381e80, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2a61aa77, ftCreationTime.dwHighDateTime=0x1c9ea0e, ftLastAccessTime.dwLowDateTime=0x2a61aa77, ftLastAccessTime.dwHighDateTime=0x1c9ea0e, ftLastWriteTime.dwLowDateTime=0x2a640bd5, ftLastWriteTime.dwHighDateTime=0x1c9ea0e, nFileSizeHigh=0x0, nFileSizeLow=0x32a0, dwReserved0=0x0, dwReserved1=0x0, cFileName="icon.png", cAlternateFileName="")) returned 1 [0046.535] FindNextFileW (in: hFindFile=0x381e80, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x80046d91, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x8052fafa, ftLastAccessTime.dwHighDateTime=0x1ca0444, ftLastWriteTime.dwLowDateTime=0x8052fafa, ftLastWriteTime.dwHighDateTime=0x1ca0444, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="images", cAlternateFileName="")) returned 1 [0046.536] FindNextFileW (in: hFindFile=0x381e80, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8765739d, ftCreationTime.dwHighDateTime=0x1ca0403, ftLastAccessTime.dwLowDateTime=0x8765739d, ftLastAccessTime.dwHighDateTime=0x1ca0403, ftLastWriteTime.dwLowDateTime=0x372d03b7, ftLastWriteTime.dwHighDateTime=0x1c9ea0e, nFileSizeHigh=0x0, nFileSizeLow=0x172a, dwReserved0=0x0, dwReserved1=0x0, cFileName="logo.png", cAlternateFileName="")) returned 1 [0046.536] FindNextFileW (in: hFindFile=0x381e80, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0046.536] FindClose (in: hFindFile=0x381e80 | out: hFindFile=0x381e80) returned 1 [0046.536] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e77c) returned 1 [0046.536] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e788) returned 1 [0046.536] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e7bc) returned 1 [0046.536] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Windows Sidebar\\Gadgets\\Weather.Gadget", nBufferLength=0x105, lpBuffer=0x31e2c4, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Windows Sidebar\\Gadgets\\Weather.Gadget", lpFilePart=0x0) returned 0x37 [0046.536] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Windows Sidebar\\Gadgets\\Weather.Gadget\\", nBufferLength=0x105, lpBuffer=0x31e298, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Windows Sidebar\\Gadgets\\Weather.Gadget\\", lpFilePart=0x0) returned 0x38 [0046.536] FindFirstFileW (in: lpFileName="C:\\Program Files\\Windows Sidebar\\Gadgets\\Weather.Gadget\\*", lpFindFileData=0x31e4e4 | out: lpFindFileData=0x31e4e4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x80046d91, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x1eaffd21, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x1eaffd21, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x381e80 [0046.536] FindNextFileW (in: hFindFile=0x381e80, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x80046d91, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x1eaffd21, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x1eaffd21, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0046.537] FindNextFileW (in: hFindFile=0x381e80, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x876a3657, ftCreationTime.dwHighDateTime=0x1ca0403, ftLastAccessTime.dwLowDateTime=0x876a3657, ftLastAccessTime.dwHighDateTime=0x1ca0403, ftLastWriteTime.dwLowDateTime=0x2a5f4919, ftLastWriteTime.dwHighDateTime=0x1c9ea0e, nFileSizeHigh=0x0, nFileSizeLow=0x3260, dwReserved0=0x0, dwReserved1=0x0, cFileName="drag.png", cAlternateFileName="")) returned 1 [0046.537] FindNextFileW (in: hFindFile=0x381e80, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1eaffd21, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x22c02035, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x1eaffd21, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="en-US", cAlternateFileName="")) returned 1 [0046.537] FindNextFileW (in: hFindFile=0x381e80, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2a61aa77, ftCreationTime.dwHighDateTime=0x1c9ea0e, ftLastAccessTime.dwLowDateTime=0x2a61aa77, ftLastAccessTime.dwHighDateTime=0x1c9ea0e, ftLastWriteTime.dwLowDateTime=0x2a640bd5, ftLastWriteTime.dwHighDateTime=0x1c9ea0e, nFileSizeHigh=0x0, nFileSizeLow=0x32a0, dwReserved0=0x0, dwReserved1=0x0, cFileName="icon.png", cAlternateFileName="")) returned 1 [0046.537] FindNextFileW (in: hFindFile=0x381e80, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x80046d91, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x8052fafa, ftLastAccessTime.dwHighDateTime=0x1ca0444, ftLastWriteTime.dwLowDateTime=0x8052fafa, ftLastWriteTime.dwHighDateTime=0x1ca0444, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="images", cAlternateFileName="")) returned 1 [0046.537] FindNextFileW (in: hFindFile=0x381e80, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8765739d, ftCreationTime.dwHighDateTime=0x1ca0403, ftLastAccessTime.dwLowDateTime=0x8765739d, ftLastAccessTime.dwHighDateTime=0x1ca0403, ftLastWriteTime.dwLowDateTime=0x372d03b7, ftLastWriteTime.dwHighDateTime=0x1c9ea0e, nFileSizeHigh=0x0, nFileSizeLow=0x172a, dwReserved0=0x0, dwReserved1=0x0, cFileName="logo.png", cAlternateFileName="")) returned 1 [0046.537] FindNextFileW (in: hFindFile=0x381e80, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8765739d, ftCreationTime.dwHighDateTime=0x1ca0403, ftLastAccessTime.dwLowDateTime=0x8765739d, ftLastAccessTime.dwHighDateTime=0x1ca0403, ftLastWriteTime.dwLowDateTime=0x372d03b7, ftLastWriteTime.dwHighDateTime=0x1c9ea0e, nFileSizeHigh=0x0, nFileSizeLow=0x172a, dwReserved0=0x0, dwReserved1=0x0, cFileName="logo.png", cAlternateFileName="")) returned 0 [0046.537] FindClose (in: hFindFile=0x381e80 | out: hFindFile=0x381e80) returned 1 [0046.537] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e77c) returned 1 [0046.537] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e788) returned 1 [0046.538] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Windows Sidebar\\Gadgets\\Weather.Gadget\\drag.png", nBufferLength=0x105, lpBuffer=0x31e194, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Windows Sidebar\\Gadgets\\Weather.Gadget\\drag.png", lpFilePart=0x0) returned 0x40 [0046.538] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e688) returned 1 [0046.538] CreateFileW (lpFileName="C:\\Program Files\\Windows Sidebar\\Gadgets\\Weather.Gadget\\drag.png" (normalized: "c:\\program files\\windows sidebar\\gadgets\\weather.gadget\\drag.png"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x274 [0046.539] GetFileType (hFile=0x274) returned 0x1 [0046.539] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e684) returned 1 [0046.539] GetFileType (hFile=0x274) returned 0x1 [0046.539] GetFileSize (in: hFile=0x274, lpFileSizeHigh=0x31e790 | out: lpFileSizeHigh=0x31e790*=0x0) returned 0x3260 [0046.539] ReadFile (in: hFile=0x274, lpBuffer=0x26a0d70, nNumberOfBytesToRead=0x3260, lpNumberOfBytesRead=0x31e73c, lpOverlapped=0x0 | out: lpBuffer=0x26a0d70*, lpNumberOfBytesRead=0x31e73c*=0x3260, lpOverlapped=0x0) returned 1 [0046.541] CloseHandle (hObject=0x274) returned 1 [0046.580] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Windows Sidebar\\Gadgets\\Weather.Gadget\\drag.png", nBufferLength=0x105, lpBuffer=0x31e180, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Windows Sidebar\\Gadgets\\Weather.Gadget\\drag.png", lpFilePart=0x0) returned 0x40 [0046.580] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e674) returned 1 [0046.580] CreateFileW (lpFileName="C:\\Program Files\\Windows Sidebar\\Gadgets\\Weather.Gadget\\drag.png" (normalized: "c:\\program files\\windows sidebar\\gadgets\\weather.gadget\\drag.png"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0xffffffff [0046.581] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31d4b0) returned 1 [0046.581] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e834) returned 1 [0046.581] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Windows Sidebar\\Shared Gadgets", nBufferLength=0x105, lpBuffer=0x31e33c, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Windows Sidebar\\Shared Gadgets", lpFilePart=0x0) returned 0x2f [0046.581] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Windows Sidebar\\Shared Gadgets\\", nBufferLength=0x105, lpBuffer=0x31e310, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Windows Sidebar\\Shared Gadgets\\", lpFilePart=0x0) returned 0x30 [0046.581] FindFirstFileW (in: lpFileName="C:\\Program Files\\Windows Sidebar\\Shared Gadgets\\*", lpFindFileData=0x31e55c | out: lpFindFileData=0x31e55c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x80046d91, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x80046d91, ftLastAccessTime.dwHighDateTime=0x1ca0444, ftLastWriteTime.dwLowDateTime=0x80046d91, ftLastWriteTime.dwHighDateTime=0x1ca0444, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x381c40 [0046.582] FindNextFileW (in: hFindFile=0x381c40, lpFindFileData=0x31e56c | out: lpFindFileData=0x31e56c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x80046d91, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x80046d91, ftLastAccessTime.dwHighDateTime=0x1ca0444, ftLastWriteTime.dwLowDateTime=0x80046d91, ftLastWriteTime.dwHighDateTime=0x1ca0444, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0046.582] FindNextFileW (in: hFindFile=0x381c40, lpFindFileData=0x31e56c | out: lpFindFileData=0x31e56c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x80046d91, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x80046d91, ftLastAccessTime.dwHighDateTime=0x1ca0444, ftLastWriteTime.dwLowDateTime=0x80046d91, ftLastWriteTime.dwHighDateTime=0x1ca0444, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 0 [0046.582] FindClose (in: hFindFile=0x381c40 | out: hFindFile=0x381c40) returned 1 [0046.582] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e7f4) returned 1 [0046.582] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e800) returned 1 [0046.582] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e834) returned 1 [0046.582] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Windows Sidebar\\Shared Gadgets", nBufferLength=0x105, lpBuffer=0x31e33c, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Windows Sidebar\\Shared Gadgets", lpFilePart=0x0) returned 0x2f [0046.582] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Windows Sidebar\\Shared Gadgets\\", nBufferLength=0x105, lpBuffer=0x31e310, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Windows Sidebar\\Shared Gadgets\\", lpFilePart=0x0) returned 0x30 [0046.582] FindFirstFileW (in: lpFileName="C:\\Program Files\\Windows Sidebar\\Shared Gadgets\\*", lpFindFileData=0x31e55c | out: lpFindFileData=0x31e55c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x80046d91, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x80046d91, ftLastAccessTime.dwHighDateTime=0x1ca0444, ftLastWriteTime.dwLowDateTime=0x80046d91, ftLastWriteTime.dwHighDateTime=0x1ca0444, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x381c40 [0046.582] FindNextFileW (in: hFindFile=0x381c40, lpFindFileData=0x31e56c | out: lpFindFileData=0x31e56c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x80046d91, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x80046d91, ftLastAccessTime.dwHighDateTime=0x1ca0444, ftLastWriteTime.dwLowDateTime=0x80046d91, ftLastWriteTime.dwHighDateTime=0x1ca0444, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0046.583] FindNextFileW (in: hFindFile=0x381c40, lpFindFileData=0x31e56c | out: lpFindFileData=0x31e56c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x80046d91, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x80046d91, ftLastAccessTime.dwHighDateTime=0x1ca0444, ftLastWriteTime.dwLowDateTime=0x80046d91, ftLastWriteTime.dwHighDateTime=0x1ca0444, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 0 [0046.583] FindClose (in: hFindFile=0x381c40 | out: hFindFile=0x381c40) returned 1 [0046.583] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e7f4) returned 1 [0046.583] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e800) returned 1 [0046.583] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e924) returned 1 [0046.583] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)", nBufferLength=0x105, lpBuffer=0x31e42c, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)", lpFilePart=0x0) returned 0x16 [0046.583] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\", nBufferLength=0x105, lpBuffer=0x31e400, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\", lpFilePart=0x0) returned 0x17 [0046.583] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\*", lpFindFileData=0x31e64c | out: lpFindFileData=0x31e64c*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0xfd8ab1dc, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x10f11a30, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x10f11a30, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x381c40 [0046.583] FindNextFileW (in: hFindFile=0x381c40, lpFindFileData=0x31e65c | out: lpFindFileData=0x31e65c*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0xfd8ab1dc, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x10f11a30, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x10f11a30, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0046.583] FindNextFileW (in: hFindFile=0x381c40, lpFindFileData=0x31e65c | out: lpFindFileData=0x31e65c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7cf40b40, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0xd9a78aa0, ftLastAccessTime.dwHighDateTime=0x1d5e82a, ftLastWriteTime.dwLowDateTime=0xd9a78aa0, ftLastWriteTime.dwHighDateTime=0x1d5e82a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Adobe", cAlternateFileName="")) returned 1 [0046.584] FindNextFileW (in: hFindFile=0x381c40, lpFindFileData=0x31e65c | out: lpFindFileData=0x31e65c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd8ab1dc, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xd92961c0, ftLastAccessTime.dwHighDateTime=0x1d5e82a, ftLastWriteTime.dwLowDateTime=0xd92961c0, ftLastWriteTime.dwHighDateTime=0x1d5e82a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Common Files", cAlternateFileName="COMMON~1")) returned 1 [0046.584] FindNextFileW (in: hFindFile=0x381c40, lpFindFileData=0x31e65c | out: lpFindFileData=0x31e65c*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0x286e4016, ftCreationTime.dwHighDateTime=0x1ca043f, ftLastAccessTime.dwLowDateTime=0x286e4016, ftLastAccessTime.dwHighDateTime=0x1ca043f, ftLastWriteTime.dwLowDateTime=0x28ae853d, ftLastWriteTime.dwHighDateTime=0x1ca043f, nFileSizeHigh=0x0, nFileSizeLow=0xae, dwReserved0=0x0, dwReserved1=0x0, cFileName="desktop.ini", cAlternateFileName="")) returned 1 [0046.584] FindNextFileW (in: hFindFile=0x381c40, lpFindFileData=0x31e65c | out: lpFindFileData=0x31e65c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x6c82ea80, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0xa547efa0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0xa547efa0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Google", cAlternateFileName="")) returned 1 [0046.584] FindNextFileW (in: hFindFile=0x381c40, lpFindFileData=0x31e65c | out: lpFindFileData=0x31e65c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd8f7490, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xd9a06680, ftLastAccessTime.dwHighDateTime=0x1d5e82a, ftLastWriteTime.dwLowDateTime=0xd9a06680, ftLastWriteTime.dwHighDateTime=0x1d5e82a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Internet Explorer", cAlternateFileName="INTERN~1")) returned 1 [0046.584] FindNextFileW (in: hFindFile=0x381c40, lpFindFileData=0x31e65c | out: lpFindFileData=0x31e65c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x734f7d60, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0xd9a2c7e0, ftLastAccessTime.dwHighDateTime=0x1d5e82a, ftLastWriteTime.dwLowDateTime=0xd9a2c7e0, ftLastWriteTime.dwHighDateTime=0x1d5e82a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Java", cAlternateFileName="")) returned 1 [0046.584] FindNextFileW (in: hFindFile=0x381c40, lpFindFileData=0x31e65c | out: lpFindFileData=0x31e65c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfa1ae930, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xfa1ae930, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xfa1ae930, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft Analysis Services", cAlternateFileName="MICROS~2")) returned 1 [0046.584] FindNextFileW (in: hFindFile=0x381c40, lpFindFileData=0x31e65c | out: lpFindFileData=0x31e65c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xef0a44f0, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xd99ba3c0, ftLastAccessTime.dwHighDateTime=0x1d5e82a, ftLastWriteTime.dwLowDateTime=0xd99ba3c0, ftLastWriteTime.dwHighDateTime=0x1d5e82a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft Office", cAlternateFileName="MICROS~1")) returned 1 [0046.585] FindNextFileW (in: hFindFile=0x381c40, lpFindFileData=0x31e65c | out: lpFindFileData=0x31e65c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x10f11a30, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0xd9a2c7e0, ftLastAccessTime.dwHighDateTime=0x1d5e82a, ftLastWriteTime.dwLowDateTime=0xd9a2c7e0, ftLastWriteTime.dwHighDateTime=0x1d5e82a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft Visual Studio 8", cAlternateFileName="MICROS~3")) returned 1 [0046.585] FindNextFileW (in: hFindFile=0x381c40, lpFindFileData=0x31e65c | out: lpFindFileData=0x31e65c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1f1bbe30, ftCreationTime.dwHighDateTime=0x1d2dda2, ftLastAccessTime.dwLowDateTime=0xd93a0b60, ftLastAccessTime.dwHighDateTime=0x1d5e82a, ftLastWriteTime.dwLowDateTime=0xd93a0b60, ftLastWriteTime.dwHighDateTime=0x1d5e82a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.NET", cAlternateFileName="MICROS~1.NET")) returned 1 [0046.585] FindNextFileW (in: hFindFile=0x381c40, lpFindFileData=0x31e65c | out: lpFindFileData=0x31e65c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xaeef6000, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xd92e2480, ftLastAccessTime.dwHighDateTime=0x1d5e82a, ftLastWriteTime.dwLowDateTime=0xd92e2480, ftLastWriteTime.dwHighDateTime=0x1d5e82a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Mozilla Firefox", cAlternateFileName="MOZILL~1")) returned 1 [0046.585] FindNextFileW (in: hFindFile=0x381c40, lpFindFileData=0x31e65c | out: lpFindFileData=0x31e65c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xaf770e60, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xb08409c0, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0xb08409c0, ftLastWriteTime.dwHighDateTime=0x1d2dda4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Mozilla Maintenance Service", cAlternateFileName="MOZILL~2")) returned 1 [0046.585] FindNextFileW (in: hFindFile=0x381c40, lpFindFileData=0x31e65c | out: lpFindFileData=0x31e65c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x80105472, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0xd9a9ec00, ftLastAccessTime.dwHighDateTime=0x1d5e82a, ftLastWriteTime.dwLowDateTime=0xd9a9ec00, ftLastWriteTime.dwHighDateTime=0x1d5e82a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="MSBuild", cAlternateFileName="")) returned 1 [0046.585] FindNextFileW (in: hFindFile=0x381c40, lpFindFileData=0x31e65c | out: lpFindFileData=0x31e65c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x80105472, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0xd9a52940, ftLastAccessTime.dwHighDateTime=0x1d5e82a, ftLastWriteTime.dwLowDateTime=0xd9a52940, ftLastWriteTime.dwHighDateTime=0x1d5e82a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Reference Assemblies", cAlternateFileName="REFERE~1")) returned 1 [0046.585] FindNextFileW (in: hFindFile=0x381c40, lpFindFileData=0x31e65c | out: lpFindFileData=0x31e65c*(dwFileAttributes=0x12, ftCreationTime.dwLowDateTime=0x8907f814, ftCreationTime.dwHighDateTime=0x1ca043f, ftLastAccessTime.dwLowDateTime=0xd9a78aa0, ftLastAccessTime.dwHighDateTime=0x1d5e82a, ftLastWriteTime.dwLowDateTime=0xd9a78aa0, ftLastWriteTime.dwHighDateTime=0x1d5e82a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Uninstall Information", cAlternateFileName="UNINST~1")) returned 1 [0046.586] FindNextFileW (in: hFindFile=0x381c40, lpFindFileData=0x31e65c | out: lpFindFileData=0x31e65c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x80105472, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0xd9a2c7e0, ftLastAccessTime.dwHighDateTime=0x1d5e82a, ftLastWriteTime.dwLowDateTime=0xd9a2c7e0, ftLastWriteTime.dwHighDateTime=0x1d5e82a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Windows Defender", cAlternateFileName="WINDOW~3")) returned 1 [0046.586] FindNextFileW (in: hFindFile=0x381c40, lpFindFileData=0x31e65c | out: lpFindFileData=0x31e65c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd91d5ea, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xd9a9ec00, ftLastAccessTime.dwHighDateTime=0x1d5e82a, ftLastWriteTime.dwLowDateTime=0xd9a9ec00, ftLastWriteTime.dwHighDateTime=0x1d5e82a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Windows Mail", cAlternateFileName="WINDOW~1")) returned 1 [0046.586] FindNextFileW (in: hFindFile=0x381c40, lpFindFileData=0x31e65c | out: lpFindFileData=0x31e65c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x80105472, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0xd9a2c7e0, ftLastAccessTime.dwHighDateTime=0x1d5e82a, ftLastWriteTime.dwLowDateTime=0xd9a2c7e0, ftLastWriteTime.dwHighDateTime=0x1d5e82a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Windows Media Player", cAlternateFileName="WI54FB~1")) returned 1 [0046.586] FindNextFileW (in: hFindFile=0x381c40, lpFindFileData=0x31e65c | out: lpFindFileData=0x31e65c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd943744, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xda90d160, ftLastAccessTime.dwHighDateTime=0x1d5e82a, ftLastWriteTime.dwLowDateTime=0xda90d160, ftLastWriteTime.dwHighDateTime=0x1d5e82a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Windows NT", cAlternateFileName="WINDOW~2")) returned 1 [0046.586] FindNextFileW (in: hFindFile=0x381c40, lpFindFileData=0x31e65c | out: lpFindFileData=0x31e65c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x80105472, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0xd9ac4d60, ftLastAccessTime.dwHighDateTime=0x1d5e82a, ftLastWriteTime.dwLowDateTime=0xd9ac4d60, ftLastWriteTime.dwHighDateTime=0x1d5e82a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Windows Photo Viewer", cAlternateFileName="WINDOW~4")) returned 1 [0046.586] FindNextFileW (in: hFindFile=0x381c40, lpFindFileData=0x31e65c | out: lpFindFileData=0x31e65c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8012b5d2, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x9b7348a4, ftLastAccessTime.dwHighDateTime=0x1cb892c, ftLastWriteTime.dwLowDateTime=0x9b7348a4, ftLastWriteTime.dwHighDateTime=0x1cb892c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Windows Portable Devices", cAlternateFileName="WIBFE5~1")) returned 1 [0046.587] FindNextFileW (in: hFindFile=0x381c40, lpFindFileData=0x31e65c | out: lpFindFileData=0x31e65c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8012b5d2, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0xd9a9ec00, ftLastAccessTime.dwHighDateTime=0x1d5e82a, ftLastWriteTime.dwLowDateTime=0xd9a9ec00, ftLastWriteTime.dwHighDateTime=0x1d5e82a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Windows Sidebar", cAlternateFileName="WI4223~1")) returned 1 [0046.587] FindNextFileW (in: hFindFile=0x381c40, lpFindFileData=0x31e65c | out: lpFindFileData=0x31e65c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8012b5d2, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0xd9a9ec00, ftLastAccessTime.dwHighDateTime=0x1d5e82a, ftLastWriteTime.dwLowDateTime=0xd9a9ec00, ftLastWriteTime.dwHighDateTime=0x1d5e82a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Windows Sidebar", cAlternateFileName="WI4223~1")) returned 0 [0046.587] FindClose (in: hFindFile=0x381c40 | out: hFindFile=0x381c40) returned 1 [0046.587] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e8e4) returned 1 [0046.587] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e8f0) returned 1 [0046.587] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e924) returned 1 [0046.587] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)", nBufferLength=0x105, lpBuffer=0x31e42c, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)", lpFilePart=0x0) returned 0x16 [0046.587] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\", nBufferLength=0x105, lpBuffer=0x31e400, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\", lpFilePart=0x0) returned 0x17 [0046.587] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\*", lpFindFileData=0x31e64c | out: lpFindFileData=0x31e64c*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0xfd8ab1dc, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x10f11a30, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x10f11a30, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x381c40 [0046.587] FindNextFileW (in: hFindFile=0x381c40, lpFindFileData=0x31e65c | out: lpFindFileData=0x31e65c*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0xfd8ab1dc, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x10f11a30, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x10f11a30, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0046.588] FindNextFileW (in: hFindFile=0x381c40, lpFindFileData=0x31e65c | out: lpFindFileData=0x31e65c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7cf40b40, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0xd9a78aa0, ftLastAccessTime.dwHighDateTime=0x1d5e82a, ftLastWriteTime.dwLowDateTime=0xd9a78aa0, ftLastWriteTime.dwHighDateTime=0x1d5e82a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Adobe", cAlternateFileName="")) returned 1 [0046.588] FindNextFileW (in: hFindFile=0x381c40, lpFindFileData=0x31e65c | out: lpFindFileData=0x31e65c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd8ab1dc, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xd92961c0, ftLastAccessTime.dwHighDateTime=0x1d5e82a, ftLastWriteTime.dwLowDateTime=0xd92961c0, ftLastWriteTime.dwHighDateTime=0x1d5e82a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Common Files", cAlternateFileName="COMMON~1")) returned 1 [0046.588] FindNextFileW (in: hFindFile=0x381c40, lpFindFileData=0x31e65c | out: lpFindFileData=0x31e65c*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0x286e4016, ftCreationTime.dwHighDateTime=0x1ca043f, ftLastAccessTime.dwLowDateTime=0x286e4016, ftLastAccessTime.dwHighDateTime=0x1ca043f, ftLastWriteTime.dwLowDateTime=0x28ae853d, ftLastWriteTime.dwHighDateTime=0x1ca043f, nFileSizeHigh=0x0, nFileSizeLow=0xae, dwReserved0=0x0, dwReserved1=0x0, cFileName="desktop.ini", cAlternateFileName="")) returned 1 [0046.588] FindNextFileW (in: hFindFile=0x381c40, lpFindFileData=0x31e65c | out: lpFindFileData=0x31e65c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x6c82ea80, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0xa547efa0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0xa547efa0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Google", cAlternateFileName="")) returned 1 [0046.588] FindNextFileW (in: hFindFile=0x381c40, lpFindFileData=0x31e65c | out: lpFindFileData=0x31e65c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd8f7490, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xd9a06680, ftLastAccessTime.dwHighDateTime=0x1d5e82a, ftLastWriteTime.dwLowDateTime=0xd9a06680, ftLastWriteTime.dwHighDateTime=0x1d5e82a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Internet Explorer", cAlternateFileName="INTERN~1")) returned 1 [0046.588] FindNextFileW (in: hFindFile=0x381c40, lpFindFileData=0x31e65c | out: lpFindFileData=0x31e65c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x734f7d60, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0xd9a2c7e0, ftLastAccessTime.dwHighDateTime=0x1d5e82a, ftLastWriteTime.dwLowDateTime=0xd9a2c7e0, ftLastWriteTime.dwHighDateTime=0x1d5e82a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Java", cAlternateFileName="")) returned 1 [0046.588] FindNextFileW (in: hFindFile=0x381c40, lpFindFileData=0x31e65c | out: lpFindFileData=0x31e65c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfa1ae930, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xfa1ae930, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xfa1ae930, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft Analysis Services", cAlternateFileName="MICROS~2")) returned 1 [0046.589] FindNextFileW (in: hFindFile=0x381c40, lpFindFileData=0x31e65c | out: lpFindFileData=0x31e65c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xef0a44f0, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xd99ba3c0, ftLastAccessTime.dwHighDateTime=0x1d5e82a, ftLastWriteTime.dwLowDateTime=0xd99ba3c0, ftLastWriteTime.dwHighDateTime=0x1d5e82a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft Office", cAlternateFileName="MICROS~1")) returned 1 [0046.589] FindNextFileW (in: hFindFile=0x381c40, lpFindFileData=0x31e65c | out: lpFindFileData=0x31e65c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x10f11a30, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0xd9a2c7e0, ftLastAccessTime.dwHighDateTime=0x1d5e82a, ftLastWriteTime.dwLowDateTime=0xd9a2c7e0, ftLastWriteTime.dwHighDateTime=0x1d5e82a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft Visual Studio 8", cAlternateFileName="MICROS~3")) returned 1 [0046.589] FindNextFileW (in: hFindFile=0x381c40, lpFindFileData=0x31e65c | out: lpFindFileData=0x31e65c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1f1bbe30, ftCreationTime.dwHighDateTime=0x1d2dda2, ftLastAccessTime.dwLowDateTime=0xd93a0b60, ftLastAccessTime.dwHighDateTime=0x1d5e82a, ftLastWriteTime.dwLowDateTime=0xd93a0b60, ftLastWriteTime.dwHighDateTime=0x1d5e82a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.NET", cAlternateFileName="MICROS~1.NET")) returned 1 [0046.589] FindNextFileW (in: hFindFile=0x381c40, lpFindFileData=0x31e65c | out: lpFindFileData=0x31e65c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xaeef6000, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xd92e2480, ftLastAccessTime.dwHighDateTime=0x1d5e82a, ftLastWriteTime.dwLowDateTime=0xd92e2480, ftLastWriteTime.dwHighDateTime=0x1d5e82a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Mozilla Firefox", cAlternateFileName="MOZILL~1")) returned 1 [0046.589] FindNextFileW (in: hFindFile=0x381c40, lpFindFileData=0x31e65c | out: lpFindFileData=0x31e65c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xaf770e60, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xb08409c0, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0xb08409c0, ftLastWriteTime.dwHighDateTime=0x1d2dda4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Mozilla Maintenance Service", cAlternateFileName="MOZILL~2")) returned 1 [0046.589] FindNextFileW (in: hFindFile=0x381c40, lpFindFileData=0x31e65c | out: lpFindFileData=0x31e65c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x80105472, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0xd9a9ec00, ftLastAccessTime.dwHighDateTime=0x1d5e82a, ftLastWriteTime.dwLowDateTime=0xd9a9ec00, ftLastWriteTime.dwHighDateTime=0x1d5e82a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="MSBuild", cAlternateFileName="")) returned 1 [0046.589] FindNextFileW (in: hFindFile=0x381c40, lpFindFileData=0x31e65c | out: lpFindFileData=0x31e65c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x80105472, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0xd9a52940, ftLastAccessTime.dwHighDateTime=0x1d5e82a, ftLastWriteTime.dwLowDateTime=0xd9a52940, ftLastWriteTime.dwHighDateTime=0x1d5e82a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Reference Assemblies", cAlternateFileName="REFERE~1")) returned 1 [0046.589] FindNextFileW (in: hFindFile=0x381c40, lpFindFileData=0x31e65c | out: lpFindFileData=0x31e65c*(dwFileAttributes=0x12, ftCreationTime.dwLowDateTime=0x8907f814, ftCreationTime.dwHighDateTime=0x1ca043f, ftLastAccessTime.dwLowDateTime=0xd9a78aa0, ftLastAccessTime.dwHighDateTime=0x1d5e82a, ftLastWriteTime.dwLowDateTime=0xd9a78aa0, ftLastWriteTime.dwHighDateTime=0x1d5e82a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Uninstall Information", cAlternateFileName="UNINST~1")) returned 1 [0046.589] FindNextFileW (in: hFindFile=0x381c40, lpFindFileData=0x31e65c | out: lpFindFileData=0x31e65c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x80105472, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0xd9a2c7e0, ftLastAccessTime.dwHighDateTime=0x1d5e82a, ftLastWriteTime.dwLowDateTime=0xd9a2c7e0, ftLastWriteTime.dwHighDateTime=0x1d5e82a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Windows Defender", cAlternateFileName="WINDOW~3")) returned 1 [0046.590] FindNextFileW (in: hFindFile=0x381c40, lpFindFileData=0x31e65c | out: lpFindFileData=0x31e65c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd91d5ea, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xd9a9ec00, ftLastAccessTime.dwHighDateTime=0x1d5e82a, ftLastWriteTime.dwLowDateTime=0xd9a9ec00, ftLastWriteTime.dwHighDateTime=0x1d5e82a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Windows Mail", cAlternateFileName="WINDOW~1")) returned 1 [0046.590] FindNextFileW (in: hFindFile=0x381c40, lpFindFileData=0x31e65c | out: lpFindFileData=0x31e65c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x80105472, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0xd9a2c7e0, ftLastAccessTime.dwHighDateTime=0x1d5e82a, ftLastWriteTime.dwLowDateTime=0xd9a2c7e0, ftLastWriteTime.dwHighDateTime=0x1d5e82a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Windows Media Player", cAlternateFileName="WI54FB~1")) returned 1 [0046.590] FindNextFileW (in: hFindFile=0x381c40, lpFindFileData=0x31e65c | out: lpFindFileData=0x31e65c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd943744, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xda90d160, ftLastAccessTime.dwHighDateTime=0x1d5e82a, ftLastWriteTime.dwLowDateTime=0xda90d160, ftLastWriteTime.dwHighDateTime=0x1d5e82a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Windows NT", cAlternateFileName="WINDOW~2")) returned 1 [0046.590] FindNextFileW (in: hFindFile=0x381c40, lpFindFileData=0x31e65c | out: lpFindFileData=0x31e65c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x80105472, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0xd9ac4d60, ftLastAccessTime.dwHighDateTime=0x1d5e82a, ftLastWriteTime.dwLowDateTime=0xd9ac4d60, ftLastWriteTime.dwHighDateTime=0x1d5e82a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Windows Photo Viewer", cAlternateFileName="WINDOW~4")) returned 1 [0046.590] FindNextFileW (in: hFindFile=0x381c40, lpFindFileData=0x31e65c | out: lpFindFileData=0x31e65c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8012b5d2, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x9b7348a4, ftLastAccessTime.dwHighDateTime=0x1cb892c, ftLastWriteTime.dwLowDateTime=0x9b7348a4, ftLastWriteTime.dwHighDateTime=0x1cb892c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Windows Portable Devices", cAlternateFileName="WIBFE5~1")) returned 1 [0046.590] FindNextFileW (in: hFindFile=0x381c40, lpFindFileData=0x31e65c | out: lpFindFileData=0x31e65c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8012b5d2, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0xd9a9ec00, ftLastAccessTime.dwHighDateTime=0x1d5e82a, ftLastWriteTime.dwLowDateTime=0xd9a9ec00, ftLastWriteTime.dwHighDateTime=0x1d5e82a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Windows Sidebar", cAlternateFileName="WI4223~1")) returned 1 [0046.590] FindNextFileW (in: hFindFile=0x381c40, lpFindFileData=0x31e65c | out: lpFindFileData=0x31e65c*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0046.590] FindClose (in: hFindFile=0x381c40 | out: hFindFile=0x381c40) returned 1 [0046.591] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e8e4) returned 1 [0046.591] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e8f0) returned 1 [0046.591] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e8ac) returned 1 [0046.591] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe", nBufferLength=0x105, lpBuffer=0x31e3b4, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe", lpFilePart=0x0) returned 0x1c [0046.591] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\", nBufferLength=0x105, lpBuffer=0x31e388, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\", lpFilePart=0x0) returned 0x1d [0046.591] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\*", lpFindFileData=0x31e5d4 | out: lpFindFileData=0x31e5d4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7cf40b40, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0xd9a78aa0, ftLastAccessTime.dwHighDateTime=0x1d5e82a, ftLastWriteTime.dwLowDateTime=0xd9a78aa0, ftLastWriteTime.dwHighDateTime=0x1d5e82a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x381c40 [0046.591] FindNextFileW (in: hFindFile=0x381c40, lpFindFileData=0x31e5e4 | out: lpFindFileData=0x31e5e4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7cf40b40, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0xd9a78aa0, ftLastAccessTime.dwHighDateTime=0x1d5e82a, ftLastWriteTime.dwLowDateTime=0xd9a78aa0, ftLastWriteTime.dwHighDateTime=0x1d5e82a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0046.591] FindNextFileW (in: hFindFile=0x381c40, lpFindFileData=0x31e5e4 | out: lpFindFileData=0x31e5e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x41eb9e50, ftCreationTime.dwHighDateTime=0x1d5d7e9, ftLastAccessTime.dwLowDateTime=0xc7454fb0, ftLastAccessTime.dwHighDateTime=0x1d5bb6f, ftLastWriteTime.dwLowDateTime=0xc7454fb0, ftLastWriteTime.dwHighDateTime=0x1d5bb6f, nFileSizeHigh=0x0, nFileSizeLow=0x13a00, dwReserved0=0x0, dwReserved1=0x0, cFileName="fpos.exe", cAlternateFileName="")) returned 1 [0046.591] FindNextFileW (in: hFindFile=0x381c40, lpFindFileData=0x31e5e4 | out: lpFindFileData=0x31e5e4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7cf40b40, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x81ed8ae0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x81ed8ae0, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Reader 10.0", cAlternateFileName="READER~1.0")) returned 1 [0046.591] FindNextFileW (in: hFindFile=0x381c40, lpFindFileData=0x31e5e4 | out: lpFindFileData=0x31e5e4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7cf40b40, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x81ed8ae0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x81ed8ae0, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Reader 10.0", cAlternateFileName="READER~1.0")) returned 0 [0046.592] FindClose (in: hFindFile=0x381c40 | out: hFindFile=0x381c40) returned 1 [0046.592] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e86c) returned 1 [0046.592] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e878) returned 1 [0046.592] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e8ac) returned 1 [0046.592] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe", nBufferLength=0x105, lpBuffer=0x31e3b4, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe", lpFilePart=0x0) returned 0x1c [0046.592] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\", nBufferLength=0x105, lpBuffer=0x31e388, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\", lpFilePart=0x0) returned 0x1d [0046.592] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\*", lpFindFileData=0x31e5d4 | out: lpFindFileData=0x31e5d4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7cf40b40, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0xd9a78aa0, ftLastAccessTime.dwHighDateTime=0x1d5e82a, ftLastWriteTime.dwLowDateTime=0xd9a78aa0, ftLastWriteTime.dwHighDateTime=0x1d5e82a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x381c40 [0046.592] FindNextFileW (in: hFindFile=0x381c40, lpFindFileData=0x31e5e4 | out: lpFindFileData=0x31e5e4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7cf40b40, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0xd9a78aa0, ftLastAccessTime.dwHighDateTime=0x1d5e82a, ftLastWriteTime.dwLowDateTime=0xd9a78aa0, ftLastWriteTime.dwHighDateTime=0x1d5e82a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0046.592] FindNextFileW (in: hFindFile=0x381c40, lpFindFileData=0x31e5e4 | out: lpFindFileData=0x31e5e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x41eb9e50, ftCreationTime.dwHighDateTime=0x1d5d7e9, ftLastAccessTime.dwLowDateTime=0xc7454fb0, ftLastAccessTime.dwHighDateTime=0x1d5bb6f, ftLastWriteTime.dwLowDateTime=0xc7454fb0, ftLastWriteTime.dwHighDateTime=0x1d5bb6f, nFileSizeHigh=0x0, nFileSizeLow=0x13a00, dwReserved0=0x0, dwReserved1=0x0, cFileName="fpos.exe", cAlternateFileName="")) returned 1 [0046.592] FindNextFileW (in: hFindFile=0x381c40, lpFindFileData=0x31e5e4 | out: lpFindFileData=0x31e5e4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7cf40b40, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x81ed8ae0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x81ed8ae0, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Reader 10.0", cAlternateFileName="READER~1.0")) returned 1 [0046.593] FindNextFileW (in: hFindFile=0x381c40, lpFindFileData=0x31e5e4 | out: lpFindFileData=0x31e5e4*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0046.593] FindClose (in: hFindFile=0x381c40 | out: hFindFile=0x381c40) returned 1 [0046.593] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e86c) returned 1 [0046.593] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e878) returned 1 [0046.593] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e834) returned 1 [0046.593] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0", nBufferLength=0x105, lpBuffer=0x31e33c, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0", lpFilePart=0x0) returned 0x28 [0046.593] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\", nBufferLength=0x105, lpBuffer=0x31e310, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\", lpFilePart=0x0) returned 0x29 [0046.593] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\*", lpFindFileData=0x31e55c | out: lpFindFileData=0x31e55c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7cf40b40, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x81ed8ae0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x81ed8ae0, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x381c40 [0046.593] FindNextFileW (in: hFindFile=0x381c40, lpFindFileData=0x31e56c | out: lpFindFileData=0x31e56c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7cf40b40, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x81ed8ae0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x81ed8ae0, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0046.594] FindNextFileW (in: hFindFile=0x381c40, lpFindFileData=0x31e56c | out: lpFindFileData=0x31e56c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9b058100, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x807ef720, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9b058100, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x4268, dwReserved0=0x0, dwReserved1=0x0, cFileName="Benioku.htm", cAlternateFileName="")) returned 1 [0046.595] FindNextFileW (in: hFindFile=0x381c40, lpFindFileData=0x31e56c | out: lpFindFileData=0x31e56c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9b058100, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x807ef720, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9b058100, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x42ba, dwReserved0=0x0, dwReserved1=0x0, cFileName="Berime.htm", cAlternateFileName="")) returned 1 [0046.595] FindNextFileW (in: hFindFile=0x381c40, lpFindFileData=0x31e56c | out: lpFindFileData=0x31e56c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7ffe6ce0, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x7ffe6ce0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x7ffe6ce0, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Esl", cAlternateFileName="")) returned 1 [0046.595] FindNextFileW (in: hFindFile=0x381c40, lpFindFileData=0x31e56c | out: lpFindFileData=0x31e56c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9d67db00, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x81ed8ae0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9d67db00, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x4288, dwReserved0=0x0, dwReserved1=0x0, cFileName="IrakHau.htm", cAlternateFileName="")) returned 1 [0046.595] FindNextFileW (in: hFindFile=0x381c40, lpFindFileData=0x31e56c | out: lpFindFileData=0x31e56c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9640cd00, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7feb61e0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9640cd00, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x423b, dwReserved0=0x0, dwReserved1=0x0, cFileName="Leame.htm", cAlternateFileName="")) returned 1 [0046.595] FindNextFileW (in: hFindFile=0x381c40, lpFindFileData=0x31e56c | out: lpFindFileData=0x31e56c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9640cd00, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7fe90080, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9640cd00, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x41e3, dwReserved0=0x0, dwReserved1=0x0, cFileName="LeesMij.htm", cAlternateFileName="")) returned 1 [0046.595] FindNextFileW (in: hFindFile=0x381c40, lpFindFileData=0x31e56c | out: lpFindFileData=0x31e56c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9640cd00, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7fe90080, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9640cd00, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x4289, dwReserved0=0x0, dwReserved1=0x0, cFileName="Leggimi.htm", cAlternateFileName="")) returned 1 [0046.595] FindNextFileW (in: hFindFile=0x381c40, lpFindFileData=0x31e56c | out: lpFindFileData=0x31e56c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x98a32700, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7feb61e0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x98a32700, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x4273, dwReserved0=0x0, dwReserved1=0x0, cFileName="LeiaMe.htm", cAlternateFileName="")) returned 1 [0046.595] FindNextFileW (in: hFindFile=0x381c40, lpFindFileData=0x31e56c | out: lpFindFileData=0x31e56c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x950fa000, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7fe90080, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x950fa000, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x42b6, dwReserved0=0x0, dwReserved1=0x0, cFileName="Liesmich.htm", cAlternateFileName="")) returned 1 [0046.596] FindNextFileW (in: hFindFile=0x381c40, lpFindFileData=0x31e56c | out: lpFindFileData=0x31e56c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x950fa000, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7f82a560, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x950fa000, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x43c7, dwReserved0=0x0, dwReserved1=0x0, cFileName="Lisezmoi.htm", cAlternateFileName="")) returned 1 [0046.596] FindNextFileW (in: hFindFile=0x381c40, lpFindFileData=0x31e56c | out: lpFindFileData=0x31e56c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9c36ae00, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x81ed8ae0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9c36ae00, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x41fc, dwReserved0=0x0, dwReserved1=0x0, cFileName="Llegiu-me.htm", cAlternateFileName="LLEGIU~1.HTM")) returned 1 [0046.596] FindNextFileW (in: hFindFile=0x381c40, lpFindFileData=0x31e56c | out: lpFindFileData=0x31e56c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9640cd00, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7fe90080, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9640cd00, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x434e, dwReserved0=0x0, dwReserved1=0x0, cFileName="LueMinut.htm", cAlternateFileName="")) returned 1 [0046.596] FindNextFileW (in: hFindFile=0x381c40, lpFindFileData=0x31e56c | out: lpFindFileData=0x31e56c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7cf40b40, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x83849600, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x83849600, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Reader", cAlternateFileName="")) returned 1 [0046.596] FindNextFileW (in: hFindFile=0x381c40, lpFindFileData=0x31e56c | out: lpFindFileData=0x31e56c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x950fa000, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7feb61e0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x950fa000, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x4176, dwReserved0=0x0, dwReserved1=0x0, cFileName="ReadMe.htm", cAlternateFileName="")) returned 1 [0046.596] FindNextFileW (in: hFindFile=0x381c40, lpFindFileData=0x31e56c | out: lpFindFileData=0x31e56c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x99d45400, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x8000ce40, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x99d45400, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x3f71, dwReserved0=0x0, dwReserved1=0x0, cFileName="ReadMeCS.htm", cAlternateFileName="")) returned 1 [0046.596] FindNextFileW (in: hFindFile=0x381c40, lpFindFileData=0x31e56c | out: lpFindFileData=0x31e56c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x99d45400, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7fe90080, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x99d45400, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x3fa1, dwReserved0=0x0, dwReserved1=0x0, cFileName="ReadMeCT.htm", cAlternateFileName="")) returned 1 [0046.596] FindNextFileW (in: hFindFile=0x381c40, lpFindFileData=0x31e56c | out: lpFindFileData=0x31e56c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x99d45400, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x80815880, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x99d45400, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x4623, dwReserved0=0x0, dwReserved1=0x0, cFileName="ReadMeCZE.htm", cAlternateFileName="REE3F7~1.HTM")) returned 1 [0046.596] FindNextFileW (in: hFindFile=0x381c40, lpFindFileData=0x31e56c | out: lpFindFileData=0x31e56c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9b058100, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x80861b40, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9b058100, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x42aa, dwReserved0=0x0, dwReserved1=0x0, cFileName="ReadMeHRV.htm", cAlternateFileName="RE2D2E~1.HTM")) returned 1 [0046.597] FindNextFileW (in: hFindFile=0x381c40, lpFindFileData=0x31e56c | out: lpFindFileData=0x31e56c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9b058100, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x807ef720, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9b058100, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x4274, dwReserved0=0x0, dwReserved1=0x0, cFileName="ReadMeHUN.htm", cAlternateFileName="RE50AF~1.HTM")) returned 1 [0046.597] FindNextFileW (in: hFindFile=0x381c40, lpFindFileData=0x31e56c | out: lpFindFileData=0x31e56c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9640cd00, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7fe90080, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9640cd00, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x17b8, dwReserved0=0x0, dwReserved1=0x0, cFileName="ReadMeJ.htm", cAlternateFileName="")) returned 1 [0046.597] FindNextFileW (in: hFindFile=0x381c40, lpFindFileData=0x31e56c | out: lpFindFileData=0x31e56c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x99d45400, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7fe90080, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x99d45400, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x4090, dwReserved0=0x0, dwReserved1=0x0, cFileName="ReadMeK.htm", cAlternateFileName="")) returned 1 [0046.597] FindNextFileW (in: hFindFile=0x381c40, lpFindFileData=0x31e56c | out: lpFindFileData=0x31e56c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9b058100, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x807ef720, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9b058100, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x4444, dwReserved0=0x0, dwReserved1=0x0, cFileName="ReadMePOL.htm", cAlternateFileName="RECE99~1.HTM")) returned 1 [0046.597] FindNextFileW (in: hFindFile=0x381c40, lpFindFileData=0x31e56c | out: lpFindFileData=0x31e56c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9b058100, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x807ef720, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9b058100, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x4318, dwReserved0=0x0, dwReserved1=0x0, cFileName="ReadMeRUM.htm", cAlternateFileName="README~4.HTM")) returned 1 [0046.597] FindNextFileW (in: hFindFile=0x381c40, lpFindFileData=0x31e56c | out: lpFindFileData=0x31e56c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9b058100, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x807ef720, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9b058100, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x4872, dwReserved0=0x0, dwReserved1=0x0, cFileName="ReadMeRUS.htm", cAlternateFileName="README~3.HTM")) returned 1 [0046.597] FindNextFileW (in: hFindFile=0x381c40, lpFindFileData=0x31e56c | out: lpFindFileData=0x31e56c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9c36ae00, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x807ef720, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9c36ae00, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x43b7, dwReserved0=0x0, dwReserved1=0x0, cFileName="ReadMeSKY.htm", cAlternateFileName="README~2.HTM")) returned 1 [0046.598] FindNextFileW (in: hFindFile=0x381c40, lpFindFileData=0x31e56c | out: lpFindFileData=0x31e56c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9c36ae00, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x807ef720, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9c36ae00, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x4995, dwReserved0=0x0, dwReserved1=0x0, cFileName="ReadMeUKR.htm", cAlternateFileName="README~1.HTM")) returned 1 [0046.598] FindNextFileW (in: hFindFile=0x381c40, lpFindFileData=0x31e56c | out: lpFindFileData=0x31e56c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7cfb2f60, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x833608a0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x833608a0, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Resource", cAlternateFileName="")) returned 1 [0046.598] FindNextFileW (in: hFindFile=0x381c40, lpFindFileData=0x31e56c | out: lpFindFileData=0x31e56c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7cf66ca0, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x7cf66ca0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x7cf66ca0, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Setup Files", cAlternateFileName="SETUPF~1")) returned 1 [0046.598] FindNextFileW (in: hFindFile=0x381c40, lpFindFileData=0x31e56c | out: lpFindFileData=0x31e56c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9640cd00, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7fe90080, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9640cd00, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x41c1, dwReserved0=0x0, dwReserved1=0x0, cFileName="Vigtigt.htm", cAlternateFileName="")) returned 1 [0046.598] FindNextFileW (in: hFindFile=0x381c40, lpFindFileData=0x31e56c | out: lpFindFileData=0x31e56c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x98a32700, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7fe90080, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x98a32700, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x41b2, dwReserved0=0x0, dwReserved1=0x0, cFileName="Viktig.htm", cAlternateFileName="")) returned 1 [0046.598] FindNextFileW (in: hFindFile=0x381c40, lpFindFileData=0x31e56c | out: lpFindFileData=0x31e56c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9640cd00, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7fe90080, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9640cd00, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x4214, dwReserved0=0x0, dwReserved1=0x0, cFileName="Viktigt.htm", cAlternateFileName="")) returned 1 [0046.598] FindNextFileW (in: hFindFile=0x381c40, lpFindFileData=0x31e56c | out: lpFindFileData=0x31e56c*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0046.598] FindClose (in: hFindFile=0x381c40 | out: hFindFile=0x381c40) returned 1 [0046.599] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e7f4) returned 1 [0046.599] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e800) returned 1 [0046.599] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e834) returned 1 [0046.599] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0", nBufferLength=0x105, lpBuffer=0x31e33c, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0", lpFilePart=0x0) returned 0x28 [0046.599] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\", nBufferLength=0x105, lpBuffer=0x31e310, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\", lpFilePart=0x0) returned 0x29 [0046.599] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\*", lpFindFileData=0x31e55c | out: lpFindFileData=0x31e55c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7cf40b40, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x81ed8ae0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x81ed8ae0, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x381c40 [0046.599] FindNextFileW (in: hFindFile=0x381c40, lpFindFileData=0x31e56c | out: lpFindFileData=0x31e56c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7cf40b40, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x81ed8ae0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x81ed8ae0, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0046.599] FindNextFileW (in: hFindFile=0x381c40, lpFindFileData=0x31e56c | out: lpFindFileData=0x31e56c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9b058100, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x807ef720, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9b058100, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x4268, dwReserved0=0x0, dwReserved1=0x0, cFileName="Benioku.htm", cAlternateFileName="")) returned 1 [0046.599] FindNextFileW (in: hFindFile=0x381c40, lpFindFileData=0x31e56c | out: lpFindFileData=0x31e56c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9b058100, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x807ef720, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9b058100, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x42ba, dwReserved0=0x0, dwReserved1=0x0, cFileName="Berime.htm", cAlternateFileName="")) returned 1 [0046.600] FindNextFileW (in: hFindFile=0x381c40, lpFindFileData=0x31e56c | out: lpFindFileData=0x31e56c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7ffe6ce0, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x7ffe6ce0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x7ffe6ce0, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Esl", cAlternateFileName="")) returned 1 [0046.600] FindNextFileW (in: hFindFile=0x381c40, lpFindFileData=0x31e56c | out: lpFindFileData=0x31e56c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9d67db00, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x81ed8ae0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9d67db00, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x4288, dwReserved0=0x0, dwReserved1=0x0, cFileName="IrakHau.htm", cAlternateFileName="")) returned 1 [0046.600] FindNextFileW (in: hFindFile=0x381c40, lpFindFileData=0x31e56c | out: lpFindFileData=0x31e56c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9640cd00, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7feb61e0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9640cd00, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x423b, dwReserved0=0x0, dwReserved1=0x0, cFileName="Leame.htm", cAlternateFileName="")) returned 1 [0046.600] FindNextFileW (in: hFindFile=0x381c40, lpFindFileData=0x31e56c | out: lpFindFileData=0x31e56c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9640cd00, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7fe90080, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9640cd00, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x41e3, dwReserved0=0x0, dwReserved1=0x0, cFileName="LeesMij.htm", cAlternateFileName="")) returned 1 [0046.600] FindNextFileW (in: hFindFile=0x381c40, lpFindFileData=0x31e56c | out: lpFindFileData=0x31e56c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9640cd00, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7fe90080, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9640cd00, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x4289, dwReserved0=0x0, dwReserved1=0x0, cFileName="Leggimi.htm", cAlternateFileName="")) returned 1 [0046.600] FindNextFileW (in: hFindFile=0x381c40, lpFindFileData=0x31e56c | out: lpFindFileData=0x31e56c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x98a32700, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7feb61e0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x98a32700, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x4273, dwReserved0=0x0, dwReserved1=0x0, cFileName="LeiaMe.htm", cAlternateFileName="")) returned 1 [0046.600] FindNextFileW (in: hFindFile=0x381c40, lpFindFileData=0x31e56c | out: lpFindFileData=0x31e56c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x950fa000, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7fe90080, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x950fa000, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x42b6, dwReserved0=0x0, dwReserved1=0x0, cFileName="Liesmich.htm", cAlternateFileName="")) returned 1 [0046.600] FindNextFileW (in: hFindFile=0x381c40, lpFindFileData=0x31e56c | out: lpFindFileData=0x31e56c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x950fa000, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7f82a560, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x950fa000, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x43c7, dwReserved0=0x0, dwReserved1=0x0, cFileName="Lisezmoi.htm", cAlternateFileName="")) returned 1 [0046.601] FindNextFileW (in: hFindFile=0x381c40, lpFindFileData=0x31e56c | out: lpFindFileData=0x31e56c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9c36ae00, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x81ed8ae0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9c36ae00, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x41fc, dwReserved0=0x0, dwReserved1=0x0, cFileName="Llegiu-me.htm", cAlternateFileName="LLEGIU~1.HTM")) returned 1 [0046.601] FindNextFileW (in: hFindFile=0x381c40, lpFindFileData=0x31e56c | out: lpFindFileData=0x31e56c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9640cd00, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7fe90080, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9640cd00, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x434e, dwReserved0=0x0, dwReserved1=0x0, cFileName="LueMinut.htm", cAlternateFileName="")) returned 1 [0046.601] FindNextFileW (in: hFindFile=0x381c40, lpFindFileData=0x31e56c | out: lpFindFileData=0x31e56c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7cf40b40, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x83849600, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x83849600, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Reader", cAlternateFileName="")) returned 1 [0046.601] FindNextFileW (in: hFindFile=0x381c40, lpFindFileData=0x31e56c | out: lpFindFileData=0x31e56c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x950fa000, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7feb61e0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x950fa000, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x4176, dwReserved0=0x0, dwReserved1=0x0, cFileName="ReadMe.htm", cAlternateFileName="")) returned 1 [0046.601] FindNextFileW (in: hFindFile=0x381c40, lpFindFileData=0x31e56c | out: lpFindFileData=0x31e56c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x99d45400, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x8000ce40, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x99d45400, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x3f71, dwReserved0=0x0, dwReserved1=0x0, cFileName="ReadMeCS.htm", cAlternateFileName="")) returned 1 [0046.601] FindNextFileW (in: hFindFile=0x381c40, lpFindFileData=0x31e56c | out: lpFindFileData=0x31e56c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x99d45400, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7fe90080, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x99d45400, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x3fa1, dwReserved0=0x0, dwReserved1=0x0, cFileName="ReadMeCT.htm", cAlternateFileName="")) returned 1 [0046.601] FindNextFileW (in: hFindFile=0x381c40, lpFindFileData=0x31e56c | out: lpFindFileData=0x31e56c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x99d45400, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x80815880, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x99d45400, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x4623, dwReserved0=0x0, dwReserved1=0x0, cFileName="ReadMeCZE.htm", cAlternateFileName="REE3F7~1.HTM")) returned 1 [0046.602] FindNextFileW (in: hFindFile=0x381c40, lpFindFileData=0x31e56c | out: lpFindFileData=0x31e56c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9b058100, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x80861b40, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9b058100, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x42aa, dwReserved0=0x0, dwReserved1=0x0, cFileName="ReadMeHRV.htm", cAlternateFileName="RE2D2E~1.HTM")) returned 1 [0046.602] FindNextFileW (in: hFindFile=0x381c40, lpFindFileData=0x31e56c | out: lpFindFileData=0x31e56c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9b058100, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x807ef720, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9b058100, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x4274, dwReserved0=0x0, dwReserved1=0x0, cFileName="ReadMeHUN.htm", cAlternateFileName="RE50AF~1.HTM")) returned 1 [0046.602] FindNextFileW (in: hFindFile=0x381c40, lpFindFileData=0x31e56c | out: lpFindFileData=0x31e56c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9640cd00, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7fe90080, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9640cd00, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x17b8, dwReserved0=0x0, dwReserved1=0x0, cFileName="ReadMeJ.htm", cAlternateFileName="")) returned 1 [0046.602] FindNextFileW (in: hFindFile=0x381c40, lpFindFileData=0x31e56c | out: lpFindFileData=0x31e56c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x99d45400, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7fe90080, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x99d45400, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x4090, dwReserved0=0x0, dwReserved1=0x0, cFileName="ReadMeK.htm", cAlternateFileName="")) returned 1 [0046.602] FindNextFileW (in: hFindFile=0x381c40, lpFindFileData=0x31e56c | out: lpFindFileData=0x31e56c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9b058100, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x807ef720, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9b058100, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x4444, dwReserved0=0x0, dwReserved1=0x0, cFileName="ReadMePOL.htm", cAlternateFileName="RECE99~1.HTM")) returned 1 [0046.602] FindNextFileW (in: hFindFile=0x381c40, lpFindFileData=0x31e56c | out: lpFindFileData=0x31e56c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9b058100, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x807ef720, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9b058100, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x4318, dwReserved0=0x0, dwReserved1=0x0, cFileName="ReadMeRUM.htm", cAlternateFileName="README~4.HTM")) returned 1 [0046.602] FindNextFileW (in: hFindFile=0x381c40, lpFindFileData=0x31e56c | out: lpFindFileData=0x31e56c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9b058100, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x807ef720, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9b058100, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x4872, dwReserved0=0x0, dwReserved1=0x0, cFileName="ReadMeRUS.htm", cAlternateFileName="README~3.HTM")) returned 1 [0046.603] FindNextFileW (in: hFindFile=0x381c40, lpFindFileData=0x31e56c | out: lpFindFileData=0x31e56c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9c36ae00, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x807ef720, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9c36ae00, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x43b7, dwReserved0=0x0, dwReserved1=0x0, cFileName="ReadMeSKY.htm", cAlternateFileName="README~2.HTM")) returned 1 [0046.603] FindNextFileW (in: hFindFile=0x381c40, lpFindFileData=0x31e56c | out: lpFindFileData=0x31e56c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9c36ae00, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x807ef720, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9c36ae00, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x4995, dwReserved0=0x0, dwReserved1=0x0, cFileName="ReadMeUKR.htm", cAlternateFileName="README~1.HTM")) returned 1 [0046.603] FindNextFileW (in: hFindFile=0x381c40, lpFindFileData=0x31e56c | out: lpFindFileData=0x31e56c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7cfb2f60, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x833608a0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x833608a0, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Resource", cAlternateFileName="")) returned 1 [0046.603] FindNextFileW (in: hFindFile=0x381c40, lpFindFileData=0x31e56c | out: lpFindFileData=0x31e56c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7cf66ca0, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x7cf66ca0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x7cf66ca0, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Setup Files", cAlternateFileName="SETUPF~1")) returned 1 [0046.603] FindNextFileW (in: hFindFile=0x381c40, lpFindFileData=0x31e56c | out: lpFindFileData=0x31e56c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9640cd00, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7fe90080, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9640cd00, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x41c1, dwReserved0=0x0, dwReserved1=0x0, cFileName="Vigtigt.htm", cAlternateFileName="")) returned 1 [0046.603] FindNextFileW (in: hFindFile=0x381c40, lpFindFileData=0x31e56c | out: lpFindFileData=0x31e56c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x98a32700, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7fe90080, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x98a32700, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x41b2, dwReserved0=0x0, dwReserved1=0x0, cFileName="Viktig.htm", cAlternateFileName="")) returned 1 [0046.603] FindNextFileW (in: hFindFile=0x381c40, lpFindFileData=0x31e56c | out: lpFindFileData=0x31e56c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9640cd00, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7fe90080, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9640cd00, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x4214, dwReserved0=0x0, dwReserved1=0x0, cFileName="Viktigt.htm", cAlternateFileName="")) returned 1 [0046.603] FindNextFileW (in: hFindFile=0x381c40, lpFindFileData=0x31e56c | out: lpFindFileData=0x31e56c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9640cd00, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7fe90080, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9640cd00, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x4214, dwReserved0=0x0, dwReserved1=0x0, cFileName="Viktigt.htm", cAlternateFileName="")) returned 0 [0046.603] FindClose (in: hFindFile=0x381c40 | out: hFindFile=0x381c40) returned 1 [0046.603] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e7f4) returned 1 [0046.603] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e800) returned 1 [0046.603] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e7bc) returned 1 [0046.603] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Esl", nBufferLength=0x105, lpBuffer=0x31e2c4, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Esl", lpFilePart=0x0) returned 0x2c [0046.603] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Esl\\", nBufferLength=0x105, lpBuffer=0x31e298, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Esl\\", lpFilePart=0x0) returned 0x2d [0046.603] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Esl\\*", lpFindFileData=0x31e4e4 | out: lpFindFileData=0x31e4e4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7ffe6ce0, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x7ffe6ce0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x7ffe6ce0, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x381c40 [0046.604] FindNextFileW (in: hFindFile=0x381c40, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7ffe6ce0, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x7ffe6ce0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x7ffe6ce0, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0046.604] FindNextFileW (in: hFindFile=0x381c40, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x950fa000, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7ffe6ce0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x950fa000, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x19798, dwReserved0=0x0, dwReserved1=0x0, cFileName="AiodLite.dll", cAlternateFileName="")) returned 1 [0046.604] FindNextFileW (in: hFindFile=0x381c40, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0046.604] FindClose (in: hFindFile=0x381c40 | out: hFindFile=0x381c40) returned 1 [0046.604] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e77c) returned 1 [0046.604] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e788) returned 1 [0046.604] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e7bc) returned 1 [0046.604] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Esl", nBufferLength=0x105, lpBuffer=0x31e2c4, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Esl", lpFilePart=0x0) returned 0x2c [0046.604] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Esl\\", nBufferLength=0x105, lpBuffer=0x31e298, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Esl\\", lpFilePart=0x0) returned 0x2d [0046.604] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Esl\\*", lpFindFileData=0x31e4e4 | out: lpFindFileData=0x31e4e4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7ffe6ce0, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x7ffe6ce0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x7ffe6ce0, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x381c40 [0046.604] FindNextFileW (in: hFindFile=0x381c40, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7ffe6ce0, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x7ffe6ce0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x7ffe6ce0, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0046.604] FindNextFileW (in: hFindFile=0x381c40, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x950fa000, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7ffe6ce0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x950fa000, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x19798, dwReserved0=0x0, dwReserved1=0x0, cFileName="AiodLite.dll", cAlternateFileName="")) returned 1 [0046.605] FindNextFileW (in: hFindFile=0x381c40, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x950fa000, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7ffe6ce0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x950fa000, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x19798, dwReserved0=0x0, dwReserved1=0x0, cFileName="AiodLite.dll", cAlternateFileName="")) returned 0 [0046.605] FindClose (in: hFindFile=0x381c40 | out: hFindFile=0x381c40) returned 1 [0046.605] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e77c) returned 1 [0046.605] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e788) returned 1 [0046.605] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e7bc) returned 1 [0046.605] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader", nBufferLength=0x105, lpBuffer=0x31e2c4, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader", lpFilePart=0x0) returned 0x2f [0046.605] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\", nBufferLength=0x105, lpBuffer=0x31e298, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\", lpFilePart=0x0) returned 0x30 [0046.605] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\*", lpFindFileData=0x31e4e4 | out: lpFindFileData=0x31e4e4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7cf40b40, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x83849600, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x83849600, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x381c40 [0046.605] FindNextFileW (in: hFindFile=0x381c40, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7cf40b40, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x83849600, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x83849600, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0046.605] FindNextFileW (in: hFindFile=0x381c40, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x950fa000, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x8202f740, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x950fa000, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x32398, dwReserved0=0x0, dwReserved1=0x0, cFileName="A3DUtils.dll", cAlternateFileName="")) returned 1 [0046.605] FindNextFileW (in: hFindFile=0x381c40, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x950fa000, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x803069c0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x950fa000, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0xc7d88, dwReserved0=0x0, dwReserved1=0x0, cFileName="ACE.dll", cAlternateFileName="")) returned 1 [0046.605] FindNextFileW (in: hFindFile=0x381c40, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x93de7300, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x81d81e80, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x93de7300, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x47f98, dwReserved0=0x0, dwReserved1=0x0, cFileName="AcroBroker.exe", cAlternateFileName="ACROBR~1.EXE")) returned 1 [0046.605] FindNextFileW (in: hFindFile=0x381c40, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x950fa000, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7ffe6ce0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x950fa000, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0xf798, dwReserved0=0x0, dwReserved1=0x0, cFileName="Acrofx32.dll", cAlternateFileName="")) returned 1 [0046.605] FindNextFileW (in: hFindFile=0x381c40, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x950fa000, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x8051bd00, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x950fa000, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x16a0398, dwReserved0=0x0, dwReserved1=0x0, cFileName="AcroRd32.dll", cAlternateFileName="")) returned 1 [0046.605] FindNextFileW (in: hFindFile=0x381c40, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x950fa000, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7fe90080, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x950fa000, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x13ad98, dwReserved0=0x0, dwReserved1=0x0, cFileName="AcroRd32.exe", cAlternateFileName="")) returned 1 [0046.606] FindNextFileW (in: hFindFile=0x381c40, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x950fa000, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x803069c0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x950fa000, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x45a0, dwReserved0=0x0, dwReserved1=0x0, cFileName="AcroRd32Info.exe", cAlternateFileName="ACRORD~1.EXE")) returned 1 [0046.606] FindNextFileW (in: hFindFile=0x381c40, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x93de7300, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x81e8c820, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x93de7300, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0xbfa8, dwReserved0=0x0, dwReserved1=0x0, cFileName="AcroTextExtractor.exe", cAlternateFileName="ACROTE~1.EXE")) returned 1 [0046.606] FindNextFileW (in: hFindFile=0x381c40, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x950fa000, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x820095e0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x950fa000, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x5c0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Adobe.Reader.Dependencies.manifest", cAlternateFileName="ADOBER~1.MAN")) returned 1 [0046.606] FindNextFileW (in: hFindFile=0x381c40, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x950fa000, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x80541e60, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x950fa000, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x128fa0, dwReserved0=0x0, dwReserved1=0x0, cFileName="AdobeCollabSync.exe", cAlternateFileName="ADOBEC~1.EXE")) returned 1 [0046.606] FindNextFileW (in: hFindFile=0x381c40, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x93de7300, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7de214c0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x93de7300, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0xb8fa0, dwReserved0=0x0, dwReserved1=0x0, cFileName="AdobeLinguistic.dll", cAlternateFileName="ADOBEL~1.DLL")) returned 1 [0046.606] FindNextFileW (in: hFindFile=0x381c40, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x950fa000, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x81fe3480, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x950fa000, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x37398, dwReserved0=0x0, dwReserved1=0x0, cFileName="adoberfp.dll", cAlternateFileName="")) returned 1 [0046.606] FindNextFileW (in: hFindFile=0x381c40, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x950fa000, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x803069c0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x950fa000, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x4a598, dwReserved0=0x0, dwReserved1=0x0, cFileName="AdobeXMP.dll", cAlternateFileName="")) returned 1 [0046.606] FindNextFileW (in: hFindFile=0x381c40, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x93de7300, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x80352c80, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x93de7300, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x53f988, dwReserved0=0x0, dwReserved1=0x0, cFileName="AGM.dll", cAlternateFileName="")) returned 1 [0046.606] FindNextFileW (in: hFindFile=0x381c40, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x93de7300, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x8058e120, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x93de7300, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x6bf, dwReserved0=0x0, dwReserved1=0x0, cFileName="AGMGPUOptIn.ini", cAlternateFileName="AGMGPU~1.INI")) returned 1 [0046.606] FindNextFileW (in: hFindFile=0x381c40, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x93de7300, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x8026e440, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x93de7300, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x366c8, dwReserved0=0x0, dwReserved1=0x0, cFileName="ahclient.dll", cAlternateFileName="")) returned 1 [0046.606] FindNextFileW (in: hFindFile=0x381c40, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x802ba700, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x81efec40, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x81efec40, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="AIR", cAlternateFileName="")) returned 1 [0046.606] FindNextFileW (in: hFindFile=0x381c40, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x93de7300, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x81e8c820, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x93de7300, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x5ef398, dwReserved0=0x0, dwReserved1=0x0, cFileName="authplay.dll", cAlternateFileName="")) returned 1 [0046.606] FindNextFileW (in: hFindFile=0x381c40, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x950fa000, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x8051bd00, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x950fa000, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x2a9a0, dwReserved0=0x0, dwReserved1=0x0, cFileName="AXE8SharedExpat.dll", cAlternateFileName="AXE8SH~1.DLL")) returned 1 [0046.606] FindNextFileW (in: hFindFile=0x381c40, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x93de7300, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x80378de0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x93de7300, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x91590, dwReserved0=0x0, dwReserved1=0x0, cFileName="AXSLE.dll", cAlternateFileName="")) returned 1 [0046.606] FindNextFileW (in: hFindFile=0x381c40, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x950fa000, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x8051bd00, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x950fa000, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x1af88, dwReserved0=0x0, dwReserved1=0x0, cFileName="BIB.dll", cAlternateFileName="")) returned 1 [0046.606] FindNextFileW (in: hFindFile=0x381c40, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x93de7300, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x80378de0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x93de7300, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x25b98, dwReserved0=0x0, dwReserved1=0x0, cFileName="BIBUtils.dll", cAlternateFileName="")) returned 1 [0046.606] FindNextFileW (in: hFindFile=0x381c40, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7cf66ca0, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x7d95e8c0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x7d95e8c0, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Browser", cAlternateFileName="")) returned 1 [0046.606] FindNextFileW (in: hFindFile=0x381c40, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x93de7300, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x802ba700, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x93de7300, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x1b4000, dwReserved0=0x0, dwReserved1=0x0, cFileName="ccme_base.dll", cAlternateFileName="CCME_B~1.DLL")) returned 1 [0046.606] FindNextFileW (in: hFindFile=0x381c40, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x93de7300, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7ff9aa20, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x93de7300, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x2aa998, dwReserved0=0x0, dwReserved1=0x0, cFileName="CoolType.dll", cAlternateFileName="")) returned 1 [0046.606] FindNextFileW (in: hFindFile=0x381c40, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x93de7300, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x802945a0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x93de7300, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x1c1000, dwReserved0=0x0, dwReserved1=0x0, cFileName="cryptocme2.dll", cAlternateFileName="CRYPTO~1.DLL")) returned 1 [0046.606] FindNextFileW (in: hFindFile=0x381c40, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x93de7300, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x8026e440, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x93de7300, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x647, dwReserved0=0x0, dwReserved1=0x0, cFileName="cryptocme2.sig", cAlternateFileName="CRYPTO~1.SIG")) returned 1 [0046.607] FindNextFileW (in: hFindFile=0x381c40, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x950fa000, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x81df42a0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x950fa000, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x17190, dwReserved0=0x0, dwReserved1=0x0, cFileName="Eula.exe", cAlternateFileName="")) returned 1 [0046.607] FindNextFileW (in: hFindFile=0x381c40, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x93de7300, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x820095e0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x93de7300, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0xa3ba0, dwReserved0=0x0, dwReserved1=0x0, cFileName="ExtendScript.dll", cAlternateFileName="EXTEND~1.DLL")) returned 1 [0046.607] FindNextFileW (in: hFindFile=0x381c40, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x950fa000, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x8202f740, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x950fa000, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0xb03a8, dwReserved0=0x0, dwReserved1=0x0, cFileName="icucnv40.dll", cAlternateFileName="")) returned 1 [0046.607] FindNextFileW (in: hFindFile=0x381c40, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x950fa000, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x8202f740, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x950fa000, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x17790, dwReserved0=0x0, dwReserved1=0x0, cFileName="icudt40.dll", cAlternateFileName="")) returned 1 [0046.607] FindNextFileW (in: hFindFile=0x381c40, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x950fa000, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x837d71e0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x950fa000, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0xd46fa8, dwReserved0=0x0, dwReserved1=0x0, cFileName="icudt40_full.dll", cAlternateFileName="ICUDT4~1.DLL")) returned 1 [0046.607] FindNextFileW (in: hFindFile=0x381c40, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x950fa000, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x83849600, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x950fa000, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x1131a8, dwReserved0=0x0, dwReserved1=0x0, cFileName="icuuc40.dll", cAlternateFileName="")) returned 1 [0046.607] FindNextFileW (in: hFindFile=0x381c40, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7cfb2f60, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x81efec40, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x81efec40, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="IDTemplates", cAlternateFileName="IDTEMP~1")) returned 1 [0046.607] FindNextFileW (in: hFindFile=0x381c40, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7ffe6ce0, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x7ffe6ce0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x7ffe6ce0, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Javascripts", cAlternateFileName="JAVASC~1")) returned 1 [0046.607] FindNextFileW (in: hFindFile=0x381c40, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x93de7300, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7ffc0b80, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x93de7300, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0xa6790, dwReserved0=0x0, dwReserved1=0x0, cFileName="JP2KLib.dll", cAlternateFileName="")) returned 1 [0046.607] FindNextFileW (in: hFindFile=0x381c40, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x80a50d20, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x81efec40, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x81efec40, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Legal", cAlternateFileName="")) returned 1 [0046.607] FindNextFileW (in: hFindFile=0x381c40, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7d618a80, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x7d853f20, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x7d853f20, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Locale", cAlternateFileName="")) returned 1 [0046.607] FindNextFileW (in: hFindFile=0x381c40, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x950fa000, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x81e1a400, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x950fa000, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x59de0, dwReserved0=0x0, dwReserved1=0x0, cFileName="logsession.dll", cAlternateFileName="LOGSES~1.DLL")) returned 1 [0046.607] FindNextFileW (in: hFindFile=0x381c40, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x93de7300, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x81df42a0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x93de7300, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x4d1e0, dwReserved0=0x0, dwReserved1=0x0, cFileName="LogTransport2.exe", cAlternateFileName="LOGTRA~1.EXE")) returned 1 [0046.607] FindNextFileW (in: hFindFile=0x381c40, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x93de7300, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7d618a80, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x93de7300, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0xb9808, dwReserved0=0x0, dwReserved1=0x0, cFileName="Onix32.dll", cAlternateFileName="")) returned 1 [0046.607] FindNextFileW (in: hFindFile=0x381c40, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x950fa000, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x802e0860, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x950fa000, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x14ba0, dwReserved0=0x0, dwReserved1=0x0, cFileName="PDFPrevHndlr.dll", cAlternateFileName="PDFPRE~1.DLL")) returned 1 [0046.607] FindNextFileW (in: hFindFile=0x381c40, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x950fa000, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x80541e60, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x950fa000, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x724ee, dwReserved0=0x0, dwReserved1=0x0, cFileName="PDFSigQFormalRep.pdf", cAlternateFileName="PDFSIG~1.PDF")) returned 1 [0046.607] FindNextFileW (in: hFindFile=0x381c40, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x950fa000, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x80600540, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x950fa000, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x18dd88, dwReserved0=0x0, dwReserved1=0x0, cFileName="pe.dll", cAlternateFileName="")) returned 1 [0046.607] FindNextFileW (in: hFindFile=0x381c40, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x950fa000, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x83529920, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x950fa000, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x41a8, dwReserved0=0x0, dwReserved1=0x0, cFileName="piaglbreakfinder.dll", cAlternateFileName="PIAGLB~1.DLL")) returned 1 [0046.607] FindNextFileW (in: hFindFile=0x381c40, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7cfb2f60, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x82ff4900, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x82ff4900, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="plug_ins", cAlternateFileName="")) returned 1 [0046.607] FindNextFileW (in: hFindFile=0x381c40, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7dbbfec0, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x7dc322e0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x7dc322e0, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="plug_ins3d", cAlternateFileName="PLUG_I~1")) returned 1 [0046.607] FindNextFileW (in: hFindFile=0x381c40, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x93de7300, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x80378de0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x93de7300, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x1a4, dwReserved0=0x0, dwReserved1=0x0, cFileName="pmd.cer", cAlternateFileName="")) returned 1 [0046.607] FindNextFileW (in: hFindFile=0x381c40, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x950fa000, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x80378de0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x950fa000, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x8b98, dwReserved0=0x0, dwReserved1=0x0, cFileName="reader_sl.exe", cAlternateFileName="READER~1.EXE")) returned 1 [0046.608] FindNextFileW (in: hFindFile=0x381c40, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x93de7300, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7dc322e0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x93de7300, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x21af90, dwReserved0=0x0, dwReserved1=0x0, cFileName="rt3d.dll", cAlternateFileName="")) returned 1 [0046.608] FindNextFileW (in: hFindFile=0x381c40, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x950fa000, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x81d5bd20, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x950fa000, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x44a, dwReserved0=0x0, dwReserved1=0x0, cFileName="RTC.der", cAlternateFileName="")) returned 1 [0046.608] FindNextFileW (in: hFindFile=0x381c40, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x93de7300, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x81fe3480, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x93de7300, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x8ff90, dwReserved0=0x0, dwReserved1=0x0, cFileName="ScCore.dll", cAlternateFileName="")) returned 1 [0046.608] FindNextFileW (in: hFindFile=0x381c40, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x820095e0, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x820095e0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x820095e0, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Services", cAlternateFileName="")) returned 1 [0046.608] FindNextFileW (in: hFindFile=0x381c40, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7ffc0b80, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x7ffc0b80, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x7ffc0b80, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="SPPlugins", cAlternateFileName="SPPLUG~1")) returned 1 [0046.608] FindNextFileW (in: hFindFile=0x381c40, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x93de7300, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x81d81e80, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x93de7300, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x3cd90, dwReserved0=0x0, dwReserved1=0x0, cFileName="sqlite.dll", cAlternateFileName="")) returned 1 [0046.608] FindNextFileW (in: hFindFile=0x381c40, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x801fc020, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x8026e440, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x8026e440, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Tracker", cAlternateFileName="")) returned 1 [0046.608] FindNextFileW (in: hFindFile=0x381c40, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x93de7300, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x801fc020, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x93de7300, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x4398, dwReserved0=0x0, dwReserved1=0x0, cFileName="ViewerPS.dll", cAlternateFileName="")) returned 1 [0046.608] FindNextFileW (in: hFindFile=0x381c40, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x950fa000, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x8202f740, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x950fa000, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x11f98, dwReserved0=0x0, dwReserved1=0x0, cFileName="wow_helper.exe", cAlternateFileName="WOW_HE~1.EXE")) returned 1 [0046.608] FindNextFileW (in: hFindFile=0x381c40, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0046.608] FindClose (in: hFindFile=0x381c40 | out: hFindFile=0x381c40) returned 1 [0046.608] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e77c) returned 1 [0046.608] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e788) returned 1 [0046.608] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e7bc) returned 1 [0046.608] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader", nBufferLength=0x105, lpBuffer=0x31e2c4, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader", lpFilePart=0x0) returned 0x2f [0046.608] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\", nBufferLength=0x105, lpBuffer=0x31e298, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\", lpFilePart=0x0) returned 0x30 [0046.608] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\*", lpFindFileData=0x31e4e4 | out: lpFindFileData=0x31e4e4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7cf40b40, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x83849600, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x83849600, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x381c40 [0046.608] FindNextFileW (in: hFindFile=0x381c40, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7cf40b40, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x83849600, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x83849600, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0046.608] FindNextFileW (in: hFindFile=0x381c40, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x950fa000, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x8202f740, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x950fa000, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x32398, dwReserved0=0x0, dwReserved1=0x0, cFileName="A3DUtils.dll", cAlternateFileName="")) returned 1 [0046.608] FindNextFileW (in: hFindFile=0x381c40, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x950fa000, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x803069c0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x950fa000, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0xc7d88, dwReserved0=0x0, dwReserved1=0x0, cFileName="ACE.dll", cAlternateFileName="")) returned 1 [0046.609] FindNextFileW (in: hFindFile=0x381c40, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x93de7300, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x81d81e80, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x93de7300, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x47f98, dwReserved0=0x0, dwReserved1=0x0, cFileName="AcroBroker.exe", cAlternateFileName="ACROBR~1.EXE")) returned 1 [0046.609] FindNextFileW (in: hFindFile=0x381c40, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x950fa000, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7ffe6ce0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x950fa000, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0xf798, dwReserved0=0x0, dwReserved1=0x0, cFileName="Acrofx32.dll", cAlternateFileName="")) returned 1 [0046.609] FindNextFileW (in: hFindFile=0x381c40, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x950fa000, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x8051bd00, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x950fa000, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x16a0398, dwReserved0=0x0, dwReserved1=0x0, cFileName="AcroRd32.dll", cAlternateFileName="")) returned 1 [0046.609] FindNextFileW (in: hFindFile=0x381c40, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x950fa000, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7fe90080, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x950fa000, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x13ad98, dwReserved0=0x0, dwReserved1=0x0, cFileName="AcroRd32.exe", cAlternateFileName="")) returned 1 [0046.609] FindNextFileW (in: hFindFile=0x381c40, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x950fa000, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x803069c0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x950fa000, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x45a0, dwReserved0=0x0, dwReserved1=0x0, cFileName="AcroRd32Info.exe", cAlternateFileName="ACRORD~1.EXE")) returned 1 [0046.609] FindNextFileW (in: hFindFile=0x381c40, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x93de7300, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x81e8c820, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x93de7300, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0xbfa8, dwReserved0=0x0, dwReserved1=0x0, cFileName="AcroTextExtractor.exe", cAlternateFileName="ACROTE~1.EXE")) returned 1 [0046.609] FindNextFileW (in: hFindFile=0x381c40, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x950fa000, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x820095e0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x950fa000, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x5c0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Adobe.Reader.Dependencies.manifest", cAlternateFileName="ADOBER~1.MAN")) returned 1 [0046.609] FindNextFileW (in: hFindFile=0x381c40, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x950fa000, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x80541e60, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x950fa000, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x128fa0, dwReserved0=0x0, dwReserved1=0x0, cFileName="AdobeCollabSync.exe", cAlternateFileName="ADOBEC~1.EXE")) returned 1 [0046.609] FindNextFileW (in: hFindFile=0x381c40, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x93de7300, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7de214c0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x93de7300, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0xb8fa0, dwReserved0=0x0, dwReserved1=0x0, cFileName="AdobeLinguistic.dll", cAlternateFileName="ADOBEL~1.DLL")) returned 1 [0046.609] FindNextFileW (in: hFindFile=0x381c40, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x950fa000, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x81fe3480, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x950fa000, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x37398, dwReserved0=0x0, dwReserved1=0x0, cFileName="adoberfp.dll", cAlternateFileName="")) returned 1 [0046.609] FindNextFileW (in: hFindFile=0x381c40, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x950fa000, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x803069c0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x950fa000, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x4a598, dwReserved0=0x0, dwReserved1=0x0, cFileName="AdobeXMP.dll", cAlternateFileName="")) returned 1 [0046.609] FindNextFileW (in: hFindFile=0x381c40, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x93de7300, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x80352c80, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x93de7300, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x53f988, dwReserved0=0x0, dwReserved1=0x0, cFileName="AGM.dll", cAlternateFileName="")) returned 1 [0046.609] FindNextFileW (in: hFindFile=0x381c40, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x93de7300, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x8058e120, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x93de7300, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x6bf, dwReserved0=0x0, dwReserved1=0x0, cFileName="AGMGPUOptIn.ini", cAlternateFileName="AGMGPU~1.INI")) returned 1 [0046.609] FindNextFileW (in: hFindFile=0x381c40, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x93de7300, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x8026e440, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x93de7300, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x366c8, dwReserved0=0x0, dwReserved1=0x0, cFileName="ahclient.dll", cAlternateFileName="")) returned 1 [0046.609] FindNextFileW (in: hFindFile=0x381c40, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x802ba700, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x81efec40, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x81efec40, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="AIR", cAlternateFileName="")) returned 1 [0046.609] FindNextFileW (in: hFindFile=0x381c40, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x93de7300, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x81e8c820, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x93de7300, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x5ef398, dwReserved0=0x0, dwReserved1=0x0, cFileName="authplay.dll", cAlternateFileName="")) returned 1 [0046.609] FindNextFileW (in: hFindFile=0x381c40, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x950fa000, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x8051bd00, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x950fa000, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x2a9a0, dwReserved0=0x0, dwReserved1=0x0, cFileName="AXE8SharedExpat.dll", cAlternateFileName="AXE8SH~1.DLL")) returned 1 [0046.609] FindNextFileW (in: hFindFile=0x381c40, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x93de7300, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x80378de0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x93de7300, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x91590, dwReserved0=0x0, dwReserved1=0x0, cFileName="AXSLE.dll", cAlternateFileName="")) returned 1 [0046.609] FindNextFileW (in: hFindFile=0x381c40, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x950fa000, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x8051bd00, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x950fa000, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x1af88, dwReserved0=0x0, dwReserved1=0x0, cFileName="BIB.dll", cAlternateFileName="")) returned 1 [0046.609] FindNextFileW (in: hFindFile=0x381c40, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x93de7300, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x80378de0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x93de7300, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x25b98, dwReserved0=0x0, dwReserved1=0x0, cFileName="BIBUtils.dll", cAlternateFileName="")) returned 1 [0046.609] FindNextFileW (in: hFindFile=0x381c40, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7cf66ca0, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x7d95e8c0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x7d95e8c0, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Browser", cAlternateFileName="")) returned 1 [0046.609] FindNextFileW (in: hFindFile=0x381c40, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x93de7300, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x802ba700, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x93de7300, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x1b4000, dwReserved0=0x0, dwReserved1=0x0, cFileName="ccme_base.dll", cAlternateFileName="CCME_B~1.DLL")) returned 1 [0046.609] FindNextFileW (in: hFindFile=0x381c40, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x93de7300, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7ff9aa20, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x93de7300, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x2aa998, dwReserved0=0x0, dwReserved1=0x0, cFileName="CoolType.dll", cAlternateFileName="")) returned 1 [0046.610] FindNextFileW (in: hFindFile=0x381c40, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x93de7300, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x802945a0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x93de7300, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x1c1000, dwReserved0=0x0, dwReserved1=0x0, cFileName="cryptocme2.dll", cAlternateFileName="CRYPTO~1.DLL")) returned 1 [0046.610] FindNextFileW (in: hFindFile=0x381c40, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x93de7300, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x8026e440, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x93de7300, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x647, dwReserved0=0x0, dwReserved1=0x0, cFileName="cryptocme2.sig", cAlternateFileName="CRYPTO~1.SIG")) returned 1 [0046.610] FindNextFileW (in: hFindFile=0x381c40, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x950fa000, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x81df42a0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x950fa000, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x17190, dwReserved0=0x0, dwReserved1=0x0, cFileName="Eula.exe", cAlternateFileName="")) returned 1 [0046.610] FindNextFileW (in: hFindFile=0x381c40, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x93de7300, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x820095e0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x93de7300, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0xa3ba0, dwReserved0=0x0, dwReserved1=0x0, cFileName="ExtendScript.dll", cAlternateFileName="EXTEND~1.DLL")) returned 1 [0046.610] FindNextFileW (in: hFindFile=0x381c40, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x950fa000, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x8202f740, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x950fa000, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0xb03a8, dwReserved0=0x0, dwReserved1=0x0, cFileName="icucnv40.dll", cAlternateFileName="")) returned 1 [0046.610] FindNextFileW (in: hFindFile=0x381c40, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x950fa000, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x8202f740, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x950fa000, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x17790, dwReserved0=0x0, dwReserved1=0x0, cFileName="icudt40.dll", cAlternateFileName="")) returned 1 [0046.610] FindNextFileW (in: hFindFile=0x381c40, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x950fa000, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x837d71e0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x950fa000, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0xd46fa8, dwReserved0=0x0, dwReserved1=0x0, cFileName="icudt40_full.dll", cAlternateFileName="ICUDT4~1.DLL")) returned 1 [0046.610] FindNextFileW (in: hFindFile=0x381c40, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x950fa000, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x83849600, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x950fa000, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x1131a8, dwReserved0=0x0, dwReserved1=0x0, cFileName="icuuc40.dll", cAlternateFileName="")) returned 1 [0046.610] FindNextFileW (in: hFindFile=0x381c40, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7cfb2f60, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x81efec40, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x81efec40, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="IDTemplates", cAlternateFileName="IDTEMP~1")) returned 1 [0046.610] FindNextFileW (in: hFindFile=0x381c40, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7ffe6ce0, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x7ffe6ce0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x7ffe6ce0, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Javascripts", cAlternateFileName="JAVASC~1")) returned 1 [0046.610] FindNextFileW (in: hFindFile=0x381c40, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x93de7300, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7ffc0b80, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x93de7300, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0xa6790, dwReserved0=0x0, dwReserved1=0x0, cFileName="JP2KLib.dll", cAlternateFileName="")) returned 1 [0046.610] FindNextFileW (in: hFindFile=0x381c40, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x80a50d20, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x81efec40, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x81efec40, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Legal", cAlternateFileName="")) returned 1 [0046.610] FindNextFileW (in: hFindFile=0x381c40, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7d618a80, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x7d853f20, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x7d853f20, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Locale", cAlternateFileName="")) returned 1 [0046.610] FindNextFileW (in: hFindFile=0x381c40, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x950fa000, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x81e1a400, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x950fa000, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x59de0, dwReserved0=0x0, dwReserved1=0x0, cFileName="logsession.dll", cAlternateFileName="LOGSES~1.DLL")) returned 1 [0046.610] FindNextFileW (in: hFindFile=0x381c40, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x93de7300, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x81df42a0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x93de7300, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x4d1e0, dwReserved0=0x0, dwReserved1=0x0, cFileName="LogTransport2.exe", cAlternateFileName="LOGTRA~1.EXE")) returned 1 [0046.610] FindNextFileW (in: hFindFile=0x381c40, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x93de7300, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7d618a80, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x93de7300, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0xb9808, dwReserved0=0x0, dwReserved1=0x0, cFileName="Onix32.dll", cAlternateFileName="")) returned 1 [0046.610] FindNextFileW (in: hFindFile=0x381c40, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x950fa000, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x802e0860, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x950fa000, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x14ba0, dwReserved0=0x0, dwReserved1=0x0, cFileName="PDFPrevHndlr.dll", cAlternateFileName="PDFPRE~1.DLL")) returned 1 [0046.610] FindNextFileW (in: hFindFile=0x381c40, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x950fa000, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x80541e60, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x950fa000, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x724ee, dwReserved0=0x0, dwReserved1=0x0, cFileName="PDFSigQFormalRep.pdf", cAlternateFileName="PDFSIG~1.PDF")) returned 1 [0046.610] FindNextFileW (in: hFindFile=0x381c40, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x950fa000, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x80600540, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x950fa000, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x18dd88, dwReserved0=0x0, dwReserved1=0x0, cFileName="pe.dll", cAlternateFileName="")) returned 1 [0046.610] FindNextFileW (in: hFindFile=0x381c40, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x950fa000, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x83529920, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x950fa000, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x41a8, dwReserved0=0x0, dwReserved1=0x0, cFileName="piaglbreakfinder.dll", cAlternateFileName="PIAGLB~1.DLL")) returned 1 [0046.610] FindNextFileW (in: hFindFile=0x381c40, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7cfb2f60, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x82ff4900, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x82ff4900, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="plug_ins", cAlternateFileName="")) returned 1 [0046.610] FindNextFileW (in: hFindFile=0x381c40, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7dbbfec0, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x7dc322e0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x7dc322e0, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="plug_ins3d", cAlternateFileName="PLUG_I~1")) returned 1 [0046.610] FindNextFileW (in: hFindFile=0x381c40, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x93de7300, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x80378de0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x93de7300, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x1a4, dwReserved0=0x0, dwReserved1=0x0, cFileName="pmd.cer", cAlternateFileName="")) returned 1 [0046.611] FindNextFileW (in: hFindFile=0x381c40, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x950fa000, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x80378de0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x950fa000, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x8b98, dwReserved0=0x0, dwReserved1=0x0, cFileName="reader_sl.exe", cAlternateFileName="READER~1.EXE")) returned 1 [0046.611] FindNextFileW (in: hFindFile=0x381c40, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x93de7300, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7dc322e0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x93de7300, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x21af90, dwReserved0=0x0, dwReserved1=0x0, cFileName="rt3d.dll", cAlternateFileName="")) returned 1 [0046.611] FindNextFileW (in: hFindFile=0x381c40, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x950fa000, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x81d5bd20, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x950fa000, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x44a, dwReserved0=0x0, dwReserved1=0x0, cFileName="RTC.der", cAlternateFileName="")) returned 1 [0046.611] FindNextFileW (in: hFindFile=0x381c40, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x93de7300, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x81fe3480, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x93de7300, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x8ff90, dwReserved0=0x0, dwReserved1=0x0, cFileName="ScCore.dll", cAlternateFileName="")) returned 1 [0046.611] FindNextFileW (in: hFindFile=0x381c40, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x820095e0, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x820095e0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x820095e0, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Services", cAlternateFileName="")) returned 1 [0046.611] FindNextFileW (in: hFindFile=0x381c40, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7ffc0b80, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x7ffc0b80, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x7ffc0b80, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="SPPlugins", cAlternateFileName="SPPLUG~1")) returned 1 [0046.611] FindNextFileW (in: hFindFile=0x381c40, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x93de7300, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x81d81e80, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x93de7300, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x3cd90, dwReserved0=0x0, dwReserved1=0x0, cFileName="sqlite.dll", cAlternateFileName="")) returned 1 [0046.611] FindNextFileW (in: hFindFile=0x381c40, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x801fc020, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x8026e440, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x8026e440, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Tracker", cAlternateFileName="")) returned 1 [0046.611] FindClose (in: hFindFile=0x381c40 | out: hFindFile=0x381c40) returned 1 [0046.611] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e77c) returned 1 [0046.611] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e788) returned 1 [0046.612] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\PDFSigQFormalRep.pdf", nBufferLength=0x105, lpBuffer=0x31e194, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\PDFSigQFormalRep.pdf", lpFilePart=0x0) returned 0x44 [0046.612] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e688) returned 1 [0046.612] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\PDFSigQFormalRep.pdf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\pdfsigqformalrep.pdf"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x274 [0046.613] GetFileType (hFile=0x274) returned 0x1 [0046.613] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e684) returned 1 [0046.613] GetFileType (hFile=0x274) returned 0x1 [0046.613] GetFileSize (in: hFile=0x274, lpFileSizeHigh=0x31e790 | out: lpFileSizeHigh=0x31e790*=0x0) returned 0x724ee [0046.613] ReadFile (in: hFile=0x274, lpBuffer=0x36bb448, nNumberOfBytesToRead=0x724ee, lpNumberOfBytesRead=0x31e73c, lpOverlapped=0x0 | out: lpBuffer=0x36bb448*, lpNumberOfBytesRead=0x31e73c*=0x724ee, lpOverlapped=0x0) returned 1 [0046.688] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\PDFSigQFormalRep.pdf", nBufferLength=0x105, lpBuffer=0x31e180, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\PDFSigQFormalRep.pdf", lpFilePart=0x0) returned 0x44 [0046.688] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e674) returned 1 [0046.688] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\PDFSigQFormalRep.pdf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\pdfsigqformalrep.pdf"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x274 [0046.692] GetFileType (hFile=0x274) returned 0x1 [0046.692] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e670) returned 1 [0046.692] GetFileType (hFile=0x274) returned 0x1 [0046.692] WriteFile (in: hFile=0x274, lpBuffer=0x38f6d38*, nNumberOfBytesToWrite=0x724f0, lpNumberOfBytesWritten=0x31e730, lpOverlapped=0x0 | out: lpBuffer=0x38f6d38*, lpNumberOfBytesWritten=0x31e730*=0x724f0, lpOverlapped=0x0) returned 1 [0046.700] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\PDFSigQFormalRep.pdf", nBufferLength=0x105, lpBuffer=0x31e2b4, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\PDFSigQFormalRep.pdf", lpFilePart=0x0) returned 0x44 [0046.700] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\PDFSigQFormalRep.pdf", nBufferLength=0x105, lpBuffer=0x31e2b4, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\PDFSigQFormalRep.pdf", lpFilePart=0x0) returned 0x44 [0046.700] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e714) returned 1 [0046.700] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\PDFSigQFormalRep.pdf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\pdfsigqformalrep.pdf"), fInfoLevelId=0x0, lpFileInformation=0x31e790 | out: lpFileInformation=0x31e790*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x950fa000, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x80541e60, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0xff497860, ftLastWriteTime.dwHighDateTime=0x1d6eb7e, nFileSizeHigh=0x0, nFileSizeLow=0x724f0)) returned 1 [0046.700] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e710) returned 1 [0046.700] MoveFileW (lpExistingFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\PDFSigQFormalRep.pdf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\pdfsigqformalrep.pdf"), lpNewFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\PDFSigQFormalRep.pdf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\pdfsigqformalrep.pdf")) returned 1 [0046.705] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e744) returned 1 [0046.705] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\AIR", nBufferLength=0x105, lpBuffer=0x31e24c, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\AIR", lpFilePart=0x0) returned 0x33 [0046.706] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\AIR\\", nBufferLength=0x105, lpBuffer=0x31e220, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\AIR\\", lpFilePart=0x0) returned 0x34 [0046.706] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\AIR\\*", lpFindFileData=0x31e46c | out: lpFindFileData=0x31e46c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x802ba700, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x81efec40, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x81efec40, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x381d40 [0046.718] FindClose (in: hFindFile=0x381d40 | out: hFindFile=0x381d40) returned 1 [0046.719] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e704) returned 1 [0046.719] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e710) returned 1 [0046.719] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e744) returned 1 [0046.719] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\AIR", nBufferLength=0x105, lpBuffer=0x31e24c, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\AIR", lpFilePart=0x0) returned 0x33 [0046.719] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\AIR\\", nBufferLength=0x105, lpBuffer=0x31e220, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\AIR\\", lpFilePart=0x0) returned 0x34 [0046.719] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\AIR\\*", lpFindFileData=0x31e46c | out: lpFindFileData=0x31e46c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x802ba700, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x81efec40, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x81efec40, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x381d40 [0046.720] FindClose (in: hFindFile=0x381d40 | out: hFindFile=0x381d40) returned 1 [0046.720] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e704) returned 1 [0046.720] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e710) returned 1 [0046.720] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e744) returned 1 [0046.720] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Browser", nBufferLength=0x105, lpBuffer=0x31e24c, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Browser", lpFilePart=0x0) returned 0x37 [0046.720] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Browser\\", nBufferLength=0x105, lpBuffer=0x31e220, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Browser\\", lpFilePart=0x0) returned 0x38 [0046.720] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Browser\\*", lpFindFileData=0x31e46c | out: lpFindFileData=0x31e46c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7cf66ca0, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x7d95e8c0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x7d95e8c0, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x381d40 [0046.722] FindClose (in: hFindFile=0x381d40 | out: hFindFile=0x381d40) returned 1 [0046.723] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e704) returned 1 [0046.723] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e710) returned 1 [0046.723] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e744) returned 1 [0046.723] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Browser", nBufferLength=0x105, lpBuffer=0x31e24c, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Browser", lpFilePart=0x0) returned 0x37 [0046.723] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Browser\\", nBufferLength=0x105, lpBuffer=0x31e220, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Browser\\", lpFilePart=0x0) returned 0x38 [0046.723] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Browser\\*", lpFindFileData=0x31e46c | out: lpFindFileData=0x31e46c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7cf66ca0, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x7d95e8c0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x7d95e8c0, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x381d40 [0046.724] FindClose (in: hFindFile=0x381d40 | out: hFindFile=0x381d40) returned 1 [0046.725] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e704) returned 1 [0046.725] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e710) returned 1 [0046.725] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e744) returned 1 [0046.725] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates", nBufferLength=0x105, lpBuffer=0x31e24c, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates", lpFilePart=0x0) returned 0x3b [0046.725] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\", nBufferLength=0x105, lpBuffer=0x31e220, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\", lpFilePart=0x0) returned 0x3c [0046.725] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\*", lpFindFileData=0x31e46c | out: lpFindFileData=0x31e46c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7cfb2f60, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x81efec40, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x81efec40, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x381d40 [0046.727] FindClose (in: hFindFile=0x381d40 | out: hFindFile=0x381d40) returned 1 [0046.728] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e704) returned 1 [0046.728] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e710) returned 1 [0046.728] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e744) returned 1 [0046.728] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates", nBufferLength=0x105, lpBuffer=0x31e24c, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates", lpFilePart=0x0) returned 0x3b [0046.728] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\", nBufferLength=0x105, lpBuffer=0x31e220, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\", lpFilePart=0x0) returned 0x3c [0046.728] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\*", lpFindFileData=0x31e46c | out: lpFindFileData=0x31e46c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7cfb2f60, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x81efec40, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x81efec40, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x381d40 [0046.729] FindClose (in: hFindFile=0x381d40 | out: hFindFile=0x381d40) returned 1 [0046.730] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e704) returned 1 [0046.730] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e710) returned 1 [0046.730] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e6cc) returned 1 [0046.730] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\CAT", nBufferLength=0x105, lpBuffer=0x31e1d4, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\CAT", lpFilePart=0x0) returned 0x3f [0046.730] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\CAT\\", nBufferLength=0x105, lpBuffer=0x31e1a8, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\CAT\\", lpFilePart=0x0) returned 0x40 [0046.730] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\CAT\\*", lpFindFileData=0x31e3f4 | out: lpFindFileData=0x31e3f4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x81efec40, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x81efec40, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x81efec40, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x381d40 [0046.732] FindClose (in: hFindFile=0x381d40 | out: hFindFile=0x381d40) returned 1 [0046.732] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e68c) returned 1 [0046.732] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e698) returned 1 [0046.732] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e6cc) returned 1 [0046.732] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\CAT", nBufferLength=0x105, lpBuffer=0x31e1d4, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\CAT", lpFilePart=0x0) returned 0x3f [0046.732] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\CAT\\", nBufferLength=0x105, lpBuffer=0x31e1a8, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\CAT\\", lpFilePart=0x0) returned 0x40 [0046.732] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\CAT\\*", lpFindFileData=0x31e3f4 | out: lpFindFileData=0x31e3f4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x81efec40, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x81efec40, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x81efec40, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x381d40 [0046.732] FindClose (in: hFindFile=0x381d40 | out: hFindFile=0x381d40) returned 1 [0046.732] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e68c) returned 1 [0046.732] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e698) returned 1 [0046.733] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\CAT\\AdobeID.pdf", nBufferLength=0x105, lpBuffer=0x31e0a4, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\CAT\\AdobeID.pdf", lpFilePart=0x0) returned 0x4b [0046.733] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e598) returned 1 [0046.733] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\CAT\\AdobeID.pdf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\idtemplates\\cat\\adobeid.pdf"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x274 [0046.733] GetFileType (hFile=0x274) returned 0x1 [0046.733] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e594) returned 1 [0046.733] GetFileType (hFile=0x274) returned 0x1 [0046.733] GetFileSize (in: hFile=0x274, lpFileSizeHigh=0x31e6a0 | out: lpFileSizeHigh=0x31e6a0*=0x0) returned 0x11ff6 [0046.733] ReadFile (in: hFile=0x274, lpBuffer=0x277ccd8, nNumberOfBytesToRead=0x11ff6, lpNumberOfBytesRead=0x31e64c, lpOverlapped=0x0 | out: lpBuffer=0x277ccd8*, lpNumberOfBytesRead=0x31e64c*=0x11ff6, lpOverlapped=0x0) returned 1 [0046.754] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\CAT\\AdobeID.pdf", nBufferLength=0x105, lpBuffer=0x31e090, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\CAT\\AdobeID.pdf", lpFilePart=0x0) returned 0x4b [0046.754] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e584) returned 1 [0046.754] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\CAT\\AdobeID.pdf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\idtemplates\\cat\\adobeid.pdf"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x274 [0046.755] GetFileType (hFile=0x274) returned 0x1 [0046.755] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e580) returned 1 [0046.755] GetFileType (hFile=0x274) returned 0x1 [0046.755] WriteFile (in: hFile=0x274, lpBuffer=0x2652bb4*, nNumberOfBytesToWrite=0x12000, lpNumberOfBytesWritten=0x31e640, lpOverlapped=0x0 | out: lpBuffer=0x2652bb4*, lpNumberOfBytesWritten=0x31e640*=0x12000, lpOverlapped=0x0) returned 1 [0046.757] CloseHandle (hObject=0x274) returned 1 [0046.758] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\CAT\\AdobeID.pdf", nBufferLength=0x105, lpBuffer=0x31e1c4, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\CAT\\AdobeID.pdf", lpFilePart=0x0) returned 0x4b [0046.759] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\CAT\\AdobeID.pdf", nBufferLength=0x105, lpBuffer=0x31e1c4, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\CAT\\AdobeID.pdf", lpFilePart=0x0) returned 0x4b [0046.759] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e624) returned 1 [0046.759] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\CAT\\AdobeID.pdf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\idtemplates\\cat\\adobeid.pdf"), fInfoLevelId=0x0, lpFileInformation=0x31e6a0 | out: lpFileInformation=0x31e6a0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9c36ae00, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x81efec40, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0xff52fde0, ftLastWriteTime.dwHighDateTime=0x1d6eb7e, nFileSizeHigh=0x0, nFileSizeLow=0x12000)) returned 1 [0046.759] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e620) returned 1 [0046.759] MoveFileW (lpExistingFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\CAT\\AdobeID.pdf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\idtemplates\\cat\\adobeid.pdf"), lpNewFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\CAT\\AdobeID.pdf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\idtemplates\\cat\\adobeid.pdf")) returned 1 [0046.759] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\CAT\\DefaultID.pdf", nBufferLength=0x105, lpBuffer=0x31e0a4, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\CAT\\DefaultID.pdf", lpFilePart=0x0) returned 0x4d [0046.759] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e598) returned 1 [0046.759] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\CAT\\DefaultID.pdf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\idtemplates\\cat\\defaultid.pdf"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x274 [0046.759] GetFileType (hFile=0x274) returned 0x1 [0046.759] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e594) returned 1 [0046.759] GetFileType (hFile=0x274) returned 0x1 [0046.760] GetFileSize (in: hFile=0x274, lpFileSizeHigh=0x31e6a0 | out: lpFileSizeHigh=0x31e6a0*=0x0) returned 0x11581 [0046.760] ReadFile (in: hFile=0x274, lpBuffer=0x2664f70, nNumberOfBytesToRead=0x11581, lpNumberOfBytesRead=0x31e64c, lpOverlapped=0x0 | out: lpBuffer=0x2664f70*, lpNumberOfBytesRead=0x31e64c*=0x11581, lpOverlapped=0x0) returned 1 [0046.761] CloseHandle (hObject=0x274) returned 1 [0046.802] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\CAT\\DefaultID.pdf", nBufferLength=0x105, lpBuffer=0x31e090, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\CAT\\DefaultID.pdf", lpFilePart=0x0) returned 0x4d [0046.802] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e584) returned 1 [0046.802] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\CAT\\DefaultID.pdf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\idtemplates\\cat\\defaultid.pdf"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x274 [0046.803] GetFileType (hFile=0x274) returned 0x1 [0046.803] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e580) returned 1 [0046.803] GetFileType (hFile=0x274) returned 0x1 [0046.804] WriteFile (in: hFile=0x274, lpBuffer=0x26e5f78*, nNumberOfBytesToWrite=0x11590, lpNumberOfBytesWritten=0x31e640, lpOverlapped=0x0 | out: lpBuffer=0x26e5f78*, lpNumberOfBytesWritten=0x31e640*=0x11590, lpOverlapped=0x0) returned 1 [0046.805] CloseHandle (hObject=0x274) returned 1 [0046.806] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\CAT\\DefaultID.pdf", nBufferLength=0x105, lpBuffer=0x31e1c4, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\CAT\\DefaultID.pdf", lpFilePart=0x0) returned 0x4d [0046.806] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\CAT\\DefaultID.pdf", nBufferLength=0x105, lpBuffer=0x31e1c4, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\CAT\\DefaultID.pdf", lpFilePart=0x0) returned 0x4d [0046.807] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e624) returned 1 [0046.807] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\CAT\\DefaultID.pdf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\idtemplates\\cat\\defaultid.pdf"), fInfoLevelId=0x0, lpFileInformation=0x31e6a0 | out: lpFileInformation=0x31e6a0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9c36ae00, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x81efec40, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0xff5a2200, ftLastWriteTime.dwHighDateTime=0x1d6eb7e, nFileSizeHigh=0x0, nFileSizeLow=0x11590)) returned 1 [0046.807] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e620) returned 1 [0046.807] MoveFileW (lpExistingFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\CAT\\DefaultID.pdf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\idtemplates\\cat\\defaultid.pdf"), lpNewFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\CAT\\DefaultID.pdf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\idtemplates\\cat\\defaultid.pdf")) returned 1 [0046.807] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e6cc) returned 1 [0046.807] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\CHS", nBufferLength=0x105, lpBuffer=0x31e1d4, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\CHS", lpFilePart=0x0) returned 0x3f [0046.807] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\CHS\\", nBufferLength=0x105, lpBuffer=0x31e1a8, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\CHS\\", lpFilePart=0x0) returned 0x40 [0046.807] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\CHS\\*", lpFindFileData=0x31e3f4 | out: lpFindFileData=0x31e3f4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8039ef40, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x8039ef40, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x8039ef40, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x381e80 [0046.808] FindNextFileW (in: hFindFile=0x381e80, lpFindFileData=0x31e404 | out: lpFindFileData=0x31e404*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8039ef40, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x8039ef40, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x8039ef40, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0046.809] FindNextFileW (in: hFindFile=0x381e80, lpFindFileData=0x31e404 | out: lpFindFileData=0x31e404*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x99d45400, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x8039ef40, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x99d45400, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x20cc1, dwReserved0=0x0, dwReserved1=0x0, cFileName="AdobeID.pdf", cAlternateFileName="")) returned 1 [0046.809] FindNextFileW (in: hFindFile=0x381e80, lpFindFileData=0x31e404 | out: lpFindFileData=0x31e404*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x99d45400, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x8039ef40, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x99d45400, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x207b0, dwReserved0=0x0, dwReserved1=0x0, cFileName="DefaultID.pdf", cAlternateFileName="DEFAUL~1.PDF")) returned 1 [0046.809] FindNextFileW (in: hFindFile=0x381e80, lpFindFileData=0x31e404 | out: lpFindFileData=0x31e404*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0046.809] FindClose (in: hFindFile=0x381e80 | out: hFindFile=0x381e80) returned 1 [0046.809] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e68c) returned 1 [0046.809] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e698) returned 1 [0046.809] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e6cc) returned 1 [0046.809] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\CHS", nBufferLength=0x105, lpBuffer=0x31e1d4, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\CHS", lpFilePart=0x0) returned 0x3f [0046.809] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\CHS\\", nBufferLength=0x105, lpBuffer=0x31e1a8, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\CHS\\", lpFilePart=0x0) returned 0x40 [0046.809] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\CHS\\*", lpFindFileData=0x31e3f4 | out: lpFindFileData=0x31e3f4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8039ef40, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x8039ef40, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x8039ef40, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x381e80 [0046.810] FindNextFileW (in: hFindFile=0x381e80, lpFindFileData=0x31e404 | out: lpFindFileData=0x31e404*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8039ef40, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x8039ef40, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x8039ef40, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0046.810] FindNextFileW (in: hFindFile=0x381e80, lpFindFileData=0x31e404 | out: lpFindFileData=0x31e404*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x99d45400, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x8039ef40, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x99d45400, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x20cc1, dwReserved0=0x0, dwReserved1=0x0, cFileName="AdobeID.pdf", cAlternateFileName="")) returned 1 [0046.810] FindNextFileW (in: hFindFile=0x381e80, lpFindFileData=0x31e404 | out: lpFindFileData=0x31e404*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x99d45400, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x8039ef40, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x99d45400, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x207b0, dwReserved0=0x0, dwReserved1=0x0, cFileName="DefaultID.pdf", cAlternateFileName="DEFAUL~1.PDF")) returned 1 [0046.810] FindNextFileW (in: hFindFile=0x381e80, lpFindFileData=0x31e404 | out: lpFindFileData=0x31e404*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x99d45400, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x8039ef40, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x99d45400, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x207b0, dwReserved0=0x0, dwReserved1=0x0, cFileName="DefaultID.pdf", cAlternateFileName="DEFAUL~1.PDF")) returned 0 [0046.810] FindClose (in: hFindFile=0x381e80 | out: hFindFile=0x381e80) returned 1 [0046.810] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e68c) returned 1 [0046.810] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e698) returned 1 [0046.810] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\CHS\\AdobeID.pdf", nBufferLength=0x105, lpBuffer=0x31e0a4, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\CHS\\AdobeID.pdf", lpFilePart=0x0) returned 0x4b [0046.810] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e598) returned 1 [0046.810] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\CHS\\AdobeID.pdf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\idtemplates\\chs\\adobeid.pdf"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x274 [0046.811] GetFileType (hFile=0x274) returned 0x1 [0046.811] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e594) returned 1 [0046.811] GetFileType (hFile=0x274) returned 0x1 [0046.811] GetFileSize (in: hFile=0x274, lpFileSizeHigh=0x31e6a0 | out: lpFileSizeHigh=0x31e6a0*=0x0) returned 0x20cc1 [0046.811] ReadFile (in: hFile=0x274, lpBuffer=0x365ffd0, nNumberOfBytesToRead=0x20cc1, lpNumberOfBytesRead=0x31e64c, lpOverlapped=0x0 | out: lpBuffer=0x365ffd0*, lpNumberOfBytesRead=0x31e64c*=0x20cc1, lpOverlapped=0x0) returned 1 [0046.814] CloseHandle (hObject=0x274) returned 1 [0046.834] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\CHS\\AdobeID.pdf", nBufferLength=0x105, lpBuffer=0x31e090, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\CHS\\AdobeID.pdf", lpFilePart=0x0) returned 0x4b [0046.834] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e584) returned 1 [0046.835] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\CHS\\AdobeID.pdf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\idtemplates\\chs\\adobeid.pdf"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x274 [0046.836] GetFileType (hFile=0x274) returned 0x1 [0046.836] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e580) returned 1 [0046.836] GetFileType (hFile=0x274) returned 0x1 [0046.836] WriteFile (in: hFile=0x274, lpBuffer=0x3704010*, nNumberOfBytesToWrite=0x20cd0, lpNumberOfBytesWritten=0x31e640, lpOverlapped=0x0 | out: lpBuffer=0x3704010*, lpNumberOfBytesWritten=0x31e640*=0x20cd0, lpOverlapped=0x0) returned 1 [0046.839] CloseHandle (hObject=0x274) returned 1 [0046.840] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\CHS\\AdobeID.pdf", nBufferLength=0x105, lpBuffer=0x31e1c4, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\CHS\\AdobeID.pdf", lpFilePart=0x0) returned 0x4b [0046.840] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\CHS\\AdobeID.pdf", nBufferLength=0x105, lpBuffer=0x31e1c4, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\CHS\\AdobeID.pdf", lpFilePart=0x0) returned 0x4b [0046.840] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e624) returned 1 [0046.840] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\CHS\\AdobeID.pdf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\idtemplates\\chs\\adobeid.pdf"), fInfoLevelId=0x0, lpFileInformation=0x31e6a0 | out: lpFileInformation=0x31e6a0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x99d45400, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x8039ef40, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0xff5ee4c0, ftLastWriteTime.dwHighDateTime=0x1d6eb7e, nFileSizeHigh=0x0, nFileSizeLow=0x20cd0)) returned 1 [0046.840] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e620) returned 1 [0046.841] MoveFileW (lpExistingFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\CHS\\AdobeID.pdf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\idtemplates\\chs\\adobeid.pdf"), lpNewFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\CHS\\AdobeID.pdf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\idtemplates\\chs\\adobeid.pdf")) returned 1 [0046.841] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\CHS\\DefaultID.pdf", nBufferLength=0x105, lpBuffer=0x31e0a4, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\CHS\\DefaultID.pdf", lpFilePart=0x0) returned 0x4d [0046.841] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e598) returned 1 [0046.841] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\CHS\\DefaultID.pdf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\idtemplates\\chs\\defaultid.pdf"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x274 [0046.841] GetFileType (hFile=0x274) returned 0x1 [0046.841] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e594) returned 1 [0046.841] GetFileType (hFile=0x274) returned 0x1 [0046.841] GetFileSize (in: hFile=0x274, lpFileSizeHigh=0x31e6a0 | out: lpFileSizeHigh=0x31e6a0*=0x0) returned 0x207b0 [0046.842] ReadFile (in: hFile=0x274, lpBuffer=0x3724d00, nNumberOfBytesToRead=0x207b0, lpNumberOfBytesRead=0x31e64c, lpOverlapped=0x0 | out: lpBuffer=0x3724d00*, lpNumberOfBytesRead=0x31e64c*=0x207b0, lpOverlapped=0x0) returned 1 [0046.846] CloseHandle (hObject=0x274) returned 1 [0046.923] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\CHS\\DefaultID.pdf", nBufferLength=0x105, lpBuffer=0x31e090, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\CHS\\DefaultID.pdf", lpFilePart=0x0) returned 0x4d [0046.923] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e584) returned 1 [0046.923] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\CHS\\DefaultID.pdf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\idtemplates\\chs\\defaultid.pdf"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x274 [0046.925] GetFileType (hFile=0x274) returned 0x1 [0046.925] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e580) returned 1 [0046.925] GetFileType (hFile=0x274) returned 0x1 [0046.925] WriteFile (in: hFile=0x274, lpBuffer=0x37c73f0*, nNumberOfBytesToWrite=0x207c0, lpNumberOfBytesWritten=0x31e640, lpOverlapped=0x0 | out: lpBuffer=0x37c73f0*, lpNumberOfBytesWritten=0x31e640*=0x207c0, lpOverlapped=0x0) returned 1 [0046.952] CloseHandle (hObject=0x274) returned 1 [0046.953] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\CHS\\DefaultID.pdf", nBufferLength=0x105, lpBuffer=0x31e1c4, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\CHS\\DefaultID.pdf", lpFilePart=0x0) returned 0x4d [0046.954] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\CHS\\DefaultID.pdf", nBufferLength=0x105, lpBuffer=0x31e1c4, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\CHS\\DefaultID.pdf", lpFilePart=0x0) returned 0x4d [0046.954] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e624) returned 1 [0046.954] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\CHS\\DefaultID.pdf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\idtemplates\\chs\\defaultid.pdf"), fInfoLevelId=0x0, lpFileInformation=0x31e6a0 | out: lpFileInformation=0x31e6a0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x99d45400, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x8039ef40, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0xff6f8e60, ftLastWriteTime.dwHighDateTime=0x1d6eb7e, nFileSizeHigh=0x0, nFileSizeLow=0x207c0)) returned 1 [0046.954] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e620) returned 1 [0046.954] MoveFileW (lpExistingFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\CHS\\DefaultID.pdf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\idtemplates\\chs\\defaultid.pdf"), lpNewFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\CHS\\DefaultID.pdf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\idtemplates\\chs\\defaultid.pdf")) returned 1 [0046.954] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e6cc) returned 1 [0046.954] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\CHT", nBufferLength=0x105, lpBuffer=0x31e1d4, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\CHT", lpFilePart=0x0) returned 0x3f [0046.954] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\CHT\\", nBufferLength=0x105, lpBuffer=0x31e1a8, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\CHT\\", lpFilePart=0x0) returned 0x40 [0046.954] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\CHT\\*", lpFindFileData=0x31e3f4 | out: lpFindFileData=0x31e3f4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8039ef40, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x8039ef40, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x8039ef40, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x381f80 [0046.969] FindNextFileW (in: hFindFile=0x381f80, lpFindFileData=0x31e404 | out: lpFindFileData=0x31e404*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8039ef40, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x8039ef40, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x8039ef40, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0046.969] FindNextFileW (in: hFindFile=0x381f80, lpFindFileData=0x31e404 | out: lpFindFileData=0x31e404*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x99d45400, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x8039ef40, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x99d45400, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x561b, dwReserved0=0x0, dwReserved1=0x0, cFileName="AdobeID.pdf", cAlternateFileName="")) returned 1 [0046.969] FindNextFileW (in: hFindFile=0x381f80, lpFindFileData=0x31e404 | out: lpFindFileData=0x31e404*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x99d45400, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x8039ef40, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x99d45400, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x510a, dwReserved0=0x0, dwReserved1=0x0, cFileName="DefaultID.pdf", cAlternateFileName="DEFAUL~1.PDF")) returned 1 [0046.969] FindNextFileW (in: hFindFile=0x381f80, lpFindFileData=0x31e404 | out: lpFindFileData=0x31e404*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0046.969] FindClose (in: hFindFile=0x381f80 | out: hFindFile=0x381f80) returned 1 [0046.970] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e68c) returned 1 [0046.970] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e698) returned 1 [0046.970] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e6cc) returned 1 [0046.970] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\CHT", nBufferLength=0x105, lpBuffer=0x31e1d4, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\CHT", lpFilePart=0x0) returned 0x3f [0046.970] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\CHT\\", nBufferLength=0x105, lpBuffer=0x31e1a8, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\CHT\\", lpFilePart=0x0) returned 0x40 [0046.970] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\CHT\\*", lpFindFileData=0x31e3f4 | out: lpFindFileData=0x31e3f4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8039ef40, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x8039ef40, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x8039ef40, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x381f80 [0046.970] FindNextFileW (in: hFindFile=0x381f80, lpFindFileData=0x31e404 | out: lpFindFileData=0x31e404*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8039ef40, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x8039ef40, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x8039ef40, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0046.970] FindNextFileW (in: hFindFile=0x381f80, lpFindFileData=0x31e404 | out: lpFindFileData=0x31e404*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x99d45400, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x8039ef40, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x99d45400, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x561b, dwReserved0=0x0, dwReserved1=0x0, cFileName="AdobeID.pdf", cAlternateFileName="")) returned 1 [0046.971] FindNextFileW (in: hFindFile=0x381f80, lpFindFileData=0x31e404 | out: lpFindFileData=0x31e404*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x99d45400, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x8039ef40, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x99d45400, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x510a, dwReserved0=0x0, dwReserved1=0x0, cFileName="DefaultID.pdf", cAlternateFileName="DEFAUL~1.PDF")) returned 1 [0046.971] FindNextFileW (in: hFindFile=0x381f80, lpFindFileData=0x31e404 | out: lpFindFileData=0x31e404*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x99d45400, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x8039ef40, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x99d45400, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x510a, dwReserved0=0x0, dwReserved1=0x0, cFileName="DefaultID.pdf", cAlternateFileName="DEFAUL~1.PDF")) returned 0 [0046.971] FindClose (in: hFindFile=0x381f80 | out: hFindFile=0x381f80) returned 1 [0046.971] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e68c) returned 1 [0046.971] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e698) returned 1 [0046.971] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\CHT\\AdobeID.pdf", nBufferLength=0x105, lpBuffer=0x31e0a4, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\CHT\\AdobeID.pdf", lpFilePart=0x0) returned 0x4b [0046.971] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e598) returned 1 [0046.971] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\CHT\\AdobeID.pdf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\idtemplates\\cht\\adobeid.pdf"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x274 [0046.971] GetFileType (hFile=0x274) returned 0x1 [0046.971] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e594) returned 1 [0046.971] GetFileType (hFile=0x274) returned 0x1 [0046.971] GetFileSize (in: hFile=0x274, lpFileSizeHigh=0x31e6a0 | out: lpFileSizeHigh=0x31e6a0*=0x0) returned 0x561b [0046.972] ReadFile (in: hFile=0x274, lpBuffer=0x2795374, nNumberOfBytesToRead=0x561b, lpNumberOfBytesRead=0x31e64c, lpOverlapped=0x0 | out: lpBuffer=0x2795374*, lpNumberOfBytesRead=0x31e64c*=0x561b, lpOverlapped=0x0) returned 1 [0046.973] CloseHandle (hObject=0x274) returned 1 [0046.987] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\CHT\\AdobeID.pdf", nBufferLength=0x105, lpBuffer=0x31e090, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\CHT\\AdobeID.pdf", lpFilePart=0x0) returned 0x4b [0046.987] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e584) returned 1 [0046.987] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\CHT\\AdobeID.pdf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\idtemplates\\cht\\adobeid.pdf"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x274 [0046.988] GetFileType (hFile=0x274) returned 0x1 [0046.988] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e580) returned 1 [0046.988] GetFileType (hFile=0x274) returned 0x1 [0046.988] WriteFile (in: hFile=0x274, lpBuffer=0x27fcffc*, nNumberOfBytesToWrite=0x5620, lpNumberOfBytesWritten=0x31e640, lpOverlapped=0x0 | out: lpBuffer=0x27fcffc*, lpNumberOfBytesWritten=0x31e640*=0x5620, lpOverlapped=0x0) returned 1 [0046.989] CloseHandle (hObject=0x274) returned 1 [0046.990] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\CHT\\AdobeID.pdf", nBufferLength=0x105, lpBuffer=0x31e1c4, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\CHT\\AdobeID.pdf", lpFilePart=0x0) returned 0x4b [0046.990] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\CHT\\AdobeID.pdf", nBufferLength=0x105, lpBuffer=0x31e1c4, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\CHT\\AdobeID.pdf", lpFilePart=0x0) returned 0x4b [0046.990] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e624) returned 1 [0046.991] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\CHT\\AdobeID.pdf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\idtemplates\\cht\\adobeid.pdf"), fInfoLevelId=0x0, lpFileInformation=0x31e6a0 | out: lpFileInformation=0x31e6a0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x99d45400, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x8039ef40, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0xff76b280, ftLastWriteTime.dwHighDateTime=0x1d6eb7e, nFileSizeHigh=0x0, nFileSizeLow=0x5620)) returned 1 [0046.991] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e620) returned 1 [0046.991] MoveFileW (lpExistingFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\CHT\\AdobeID.pdf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\idtemplates\\cht\\adobeid.pdf"), lpNewFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\CHT\\AdobeID.pdf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\idtemplates\\cht\\adobeid.pdf")) returned 1 [0046.991] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\CHT\\DefaultID.pdf", nBufferLength=0x105, lpBuffer=0x31e0a4, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\CHT\\DefaultID.pdf", lpFilePart=0x0) returned 0x4d [0046.991] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e598) returned 1 [0046.991] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\CHT\\DefaultID.pdf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\idtemplates\\cht\\defaultid.pdf"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x274 [0046.991] GetFileType (hFile=0x274) returned 0x1 [0046.991] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e594) returned 1 [0046.991] GetFileType (hFile=0x274) returned 0x1 [0046.991] GetFileSize (in: hFile=0x274, lpFileSizeHigh=0x31e6a0 | out: lpFileSizeHigh=0x31e6a0*=0x0) returned 0x510a [0046.991] ReadFile (in: hFile=0x274, lpBuffer=0x28029d8, nNumberOfBytesToRead=0x510a, lpNumberOfBytesRead=0x31e64c, lpOverlapped=0x0 | out: lpBuffer=0x28029d8*, lpNumberOfBytesRead=0x31e64c*=0x510a, lpOverlapped=0x0) returned 1 [0046.993] CloseHandle (hObject=0x274) returned 1 [0047.008] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\CHT\\DefaultID.pdf", nBufferLength=0x105, lpBuffer=0x31e090, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\CHT\\DefaultID.pdf", lpFilePart=0x0) returned 0x4d [0047.008] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e584) returned 1 [0047.008] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\CHT\\DefaultID.pdf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\idtemplates\\cht\\defaultid.pdf"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x274 [0047.009] GetFileType (hFile=0x274) returned 0x1 [0047.009] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e580) returned 1 [0047.009] GetFileType (hFile=0x274) returned 0x1 [0047.009] WriteFile (in: hFile=0x274, lpBuffer=0x2868d10*, nNumberOfBytesToWrite=0x5110, lpNumberOfBytesWritten=0x31e640, lpOverlapped=0x0 | out: lpBuffer=0x2868d10*, lpNumberOfBytesWritten=0x31e640*=0x5110, lpOverlapped=0x0) returned 1 [0047.010] CloseHandle (hObject=0x274) returned 1 [0047.010] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\CHT\\DefaultID.pdf", nBufferLength=0x105, lpBuffer=0x31e1c4, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\CHT\\DefaultID.pdf", lpFilePart=0x0) returned 0x4d [0047.010] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\CHT\\DefaultID.pdf", nBufferLength=0x105, lpBuffer=0x31e1c4, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\CHT\\DefaultID.pdf", lpFilePart=0x0) returned 0x4d [0047.010] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e624) returned 1 [0047.010] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\CHT\\DefaultID.pdf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\idtemplates\\cht\\defaultid.pdf"), fInfoLevelId=0x0, lpFileInformation=0x31e6a0 | out: lpFileInformation=0x31e6a0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x99d45400, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x8039ef40, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0xff7913e0, ftLastWriteTime.dwHighDateTime=0x1d6eb7e, nFileSizeHigh=0x0, nFileSizeLow=0x5110)) returned 1 [0047.010] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e620) returned 1 [0047.010] MoveFileW (lpExistingFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\CHT\\DefaultID.pdf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\idtemplates\\cht\\defaultid.pdf"), lpNewFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\CHT\\DefaultID.pdf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\idtemplates\\cht\\defaultid.pdf")) returned 1 [0047.010] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e6cc) returned 1 [0047.011] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\CZE", nBufferLength=0x105, lpBuffer=0x31e1d4, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\CZE", lpFilePart=0x0) returned 0x3f [0047.011] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\CZE\\", nBufferLength=0x105, lpBuffer=0x31e1a8, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\CZE\\", lpFilePart=0x0) returned 0x40 [0047.011] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\CZE\\*", lpFindFileData=0x31e3f4 | out: lpFindFileData=0x31e3f4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x80a2abc0, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x80a50d20, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x80a50d20, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x381d00 [0047.012] FindNextFileW (in: hFindFile=0x381d00, lpFindFileData=0x31e404 | out: lpFindFileData=0x31e404*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x80a2abc0, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x80a50d20, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x80a50d20, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0047.012] FindNextFileW (in: hFindFile=0x381d00, lpFindFileData=0x31e404 | out: lpFindFileData=0x31e404*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x99d45400, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x80a50d20, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x99d45400, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x16057, dwReserved0=0x0, dwReserved1=0x0, cFileName="AdobeID.pdf", cAlternateFileName="")) returned 1 [0047.012] FindNextFileW (in: hFindFile=0x381d00, lpFindFileData=0x31e404 | out: lpFindFileData=0x31e404*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x99d45400, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x80a2abc0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x99d45400, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x155af, dwReserved0=0x0, dwReserved1=0x0, cFileName="DefaultID.pdf", cAlternateFileName="DEFAUL~1.PDF")) returned 1 [0047.012] FindNextFileW (in: hFindFile=0x381d00, lpFindFileData=0x31e404 | out: lpFindFileData=0x31e404*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0047.012] FindClose (in: hFindFile=0x381d00 | out: hFindFile=0x381d00) returned 1 [0047.012] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e68c) returned 1 [0047.012] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e698) returned 1 [0047.012] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e6cc) returned 1 [0047.012] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\CZE", nBufferLength=0x105, lpBuffer=0x31e1d4, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\CZE", lpFilePart=0x0) returned 0x3f [0047.012] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\CZE\\", nBufferLength=0x105, lpBuffer=0x31e1a8, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\CZE\\", lpFilePart=0x0) returned 0x40 [0047.012] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\CZE\\*", lpFindFileData=0x31e3f4 | out: lpFindFileData=0x31e3f4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x80a2abc0, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x80a50d20, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x80a50d20, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x381d00 [0047.013] FindNextFileW (in: hFindFile=0x381d00, lpFindFileData=0x31e404 | out: lpFindFileData=0x31e404*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x80a2abc0, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x80a50d20, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x80a50d20, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0047.013] FindNextFileW (in: hFindFile=0x381d00, lpFindFileData=0x31e404 | out: lpFindFileData=0x31e404*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x99d45400, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x80a50d20, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x99d45400, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x16057, dwReserved0=0x0, dwReserved1=0x0, cFileName="AdobeID.pdf", cAlternateFileName="")) returned 1 [0047.013] FindNextFileW (in: hFindFile=0x381d00, lpFindFileData=0x31e404 | out: lpFindFileData=0x31e404*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x99d45400, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x80a2abc0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x99d45400, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x155af, dwReserved0=0x0, dwReserved1=0x0, cFileName="DefaultID.pdf", cAlternateFileName="DEFAUL~1.PDF")) returned 1 [0047.013] FindNextFileW (in: hFindFile=0x381d00, lpFindFileData=0x31e404 | out: lpFindFileData=0x31e404*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x99d45400, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x80a2abc0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x99d45400, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x155af, dwReserved0=0x0, dwReserved1=0x0, cFileName="DefaultID.pdf", cAlternateFileName="DEFAUL~1.PDF")) returned 0 [0047.013] FindClose (in: hFindFile=0x381d00 | out: hFindFile=0x381d00) returned 1 [0047.013] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e68c) returned 1 [0047.013] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e698) returned 1 [0047.013] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\CZE\\AdobeID.pdf", nBufferLength=0x105, lpBuffer=0x31e0a4, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\CZE\\AdobeID.pdf", lpFilePart=0x0) returned 0x4b [0047.013] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e598) returned 1 [0047.013] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\CZE\\AdobeID.pdf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\idtemplates\\cze\\adobeid.pdf"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x274 [0047.022] GetFileType (hFile=0x274) returned 0x1 [0047.022] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e594) returned 1 [0047.023] GetFileType (hFile=0x274) returned 0x1 [0047.023] GetFileSize (in: hFile=0x274, lpFileSizeHigh=0x31e6a0 | out: lpFileSizeHigh=0x31e6a0*=0x0) returned 0x16057 [0047.023] ReadFile (in: hFile=0x274, lpBuffer=0x37e7bd0, nNumberOfBytesToRead=0x16057, lpNumberOfBytesRead=0x31e64c, lpOverlapped=0x0 | out: lpBuffer=0x37e7bd0*, lpNumberOfBytesRead=0x31e64c*=0x16057, lpOverlapped=0x0) returned 1 [0047.026] CloseHandle (hObject=0x274) returned 1 [0047.044] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\CZE\\AdobeID.pdf", nBufferLength=0x105, lpBuffer=0x31e090, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\CZE\\AdobeID.pdf", lpFilePart=0x0) returned 0x4b [0047.044] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e584) returned 1 [0047.044] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\CZE\\AdobeID.pdf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\idtemplates\\cze\\adobeid.pdf"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x274 [0047.045] GetFileType (hFile=0x274) returned 0x1 [0047.046] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e580) returned 1 [0047.046] GetFileType (hFile=0x274) returned 0x1 [0047.046] WriteFile (in: hFile=0x274, lpBuffer=0x3855de8*, nNumberOfBytesToWrite=0x16060, lpNumberOfBytesWritten=0x31e640, lpOverlapped=0x0 | out: lpBuffer=0x3855de8*, lpNumberOfBytesWritten=0x31e640*=0x16060, lpOverlapped=0x0) returned 1 [0047.047] CloseHandle (hObject=0x274) returned 1 [0047.048] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\CZE\\AdobeID.pdf", nBufferLength=0x105, lpBuffer=0x31e1c4, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\CZE\\AdobeID.pdf", lpFilePart=0x0) returned 0x4b [0047.048] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\CZE\\AdobeID.pdf", nBufferLength=0x105, lpBuffer=0x31e1c4, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\CZE\\AdobeID.pdf", lpFilePart=0x0) returned 0x4b [0047.048] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e624) returned 1 [0047.048] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\CZE\\AdobeID.pdf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\idtemplates\\cze\\adobeid.pdf"), fInfoLevelId=0x0, lpFileInformation=0x31e6a0 | out: lpFileInformation=0x31e6a0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x99d45400, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x80a50d20, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0xff7dd6a0, ftLastWriteTime.dwHighDateTime=0x1d6eb7e, nFileSizeHigh=0x0, nFileSizeLow=0x16060)) returned 1 [0047.048] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e620) returned 1 [0047.048] MoveFileW (lpExistingFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\CZE\\AdobeID.pdf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\idtemplates\\cze\\adobeid.pdf"), lpNewFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\CZE\\AdobeID.pdf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\idtemplates\\cze\\adobeid.pdf")) returned 1 [0047.048] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\CZE\\DefaultID.pdf", nBufferLength=0x105, lpBuffer=0x31e0a4, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\CZE\\DefaultID.pdf", lpFilePart=0x0) returned 0x4d [0047.048] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e598) returned 1 [0047.048] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\CZE\\DefaultID.pdf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\idtemplates\\cze\\defaultid.pdf"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x274 [0047.048] GetFileType (hFile=0x274) returned 0x1 [0047.048] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e594) returned 1 [0047.048] GetFileType (hFile=0x274) returned 0x1 [0047.048] GetFileSize (in: hFile=0x274, lpFileSizeHigh=0x31e6a0 | out: lpFileSizeHigh=0x31e6a0*=0x0) returned 0x155af [0047.049] ReadFile (in: hFile=0x274, lpBuffer=0x386be68, nNumberOfBytesToRead=0x155af, lpNumberOfBytesRead=0x31e64c, lpOverlapped=0x0 | out: lpBuffer=0x386be68*, lpNumberOfBytesRead=0x31e64c*=0x155af, lpOverlapped=0x0) returned 1 [0047.052] CloseHandle (hObject=0x274) returned 1 [0047.071] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\CZE\\DefaultID.pdf", nBufferLength=0x105, lpBuffer=0x31e090, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\CZE\\DefaultID.pdf", lpFilePart=0x0) returned 0x4d [0047.071] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e584) returned 1 [0047.071] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\CZE\\DefaultID.pdf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\idtemplates\\cze\\defaultid.pdf"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x274 [0047.073] GetFileType (hFile=0x274) returned 0x1 [0047.073] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e580) returned 1 [0047.073] GetFileType (hFile=0x274) returned 0x1 [0047.073] WriteFile (in: hFile=0x274, lpBuffer=0x38d6b18*, nNumberOfBytesToWrite=0x155b0, lpNumberOfBytesWritten=0x31e640, lpOverlapped=0x0 | out: lpBuffer=0x38d6b18*, lpNumberOfBytesWritten=0x31e640*=0x155b0, lpOverlapped=0x0) returned 1 [0047.074] CloseHandle (hObject=0x274) returned 1 [0047.075] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\CZE\\DefaultID.pdf", nBufferLength=0x105, lpBuffer=0x31e1c4, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\CZE\\DefaultID.pdf", lpFilePart=0x0) returned 0x4d [0047.075] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\CZE\\DefaultID.pdf", nBufferLength=0x105, lpBuffer=0x31e1c4, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\CZE\\DefaultID.pdf", lpFilePart=0x0) returned 0x4d [0047.075] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e624) returned 1 [0047.075] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\CZE\\DefaultID.pdf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\idtemplates\\cze\\defaultid.pdf"), fInfoLevelId=0x0, lpFileInformation=0x31e6a0 | out: lpFileInformation=0x31e6a0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x99d45400, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x80a2abc0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0xff829960, ftLastWriteTime.dwHighDateTime=0x1d6eb7e, nFileSizeHigh=0x0, nFileSizeLow=0x155b0)) returned 1 [0047.075] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e620) returned 1 [0047.075] MoveFileW (lpExistingFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\CZE\\DefaultID.pdf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\idtemplates\\cze\\defaultid.pdf"), lpNewFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\CZE\\DefaultID.pdf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\idtemplates\\cze\\defaultid.pdf")) returned 1 [0047.075] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e6cc) returned 1 [0047.075] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\DAN", nBufferLength=0x105, lpBuffer=0x31e1d4, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\DAN", lpFilePart=0x0) returned 0x3f [0047.075] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\DAN\\", nBufferLength=0x105, lpBuffer=0x31e1a8, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\DAN\\", lpFilePart=0x0) returned 0x40 [0047.075] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\DAN\\*", lpFindFileData=0x31e3f4 | out: lpFindFileData=0x31e3f4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x80378de0, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x80378de0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x80378de0, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x381e40 [0047.081] FindNextFileW (in: hFindFile=0x381e40, lpFindFileData=0x31e404 | out: lpFindFileData=0x31e404*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x80378de0, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x80378de0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x80378de0, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0047.081] FindNextFileW (in: hFindFile=0x381e40, lpFindFileData=0x31e404 | out: lpFindFileData=0x31e404*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9640cd00, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x80378de0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9640cd00, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x106ec, dwReserved0=0x0, dwReserved1=0x0, cFileName="AdobeID.pdf", cAlternateFileName="")) returned 1 [0047.081] FindNextFileW (in: hFindFile=0x381e40, lpFindFileData=0x31e404 | out: lpFindFileData=0x31e404*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9640cd00, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x80378de0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9640cd00, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x101ce, dwReserved0=0x0, dwReserved1=0x0, cFileName="DefaultID.pdf", cAlternateFileName="DEFAUL~1.PDF")) returned 1 [0047.081] FindNextFileW (in: hFindFile=0x381e40, lpFindFileData=0x31e404 | out: lpFindFileData=0x31e404*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0047.081] FindClose (in: hFindFile=0x381e40 | out: hFindFile=0x381e40) returned 1 [0047.081] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e68c) returned 1 [0047.081] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e698) returned 1 [0047.081] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e6cc) returned 1 [0047.082] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\DAN", nBufferLength=0x105, lpBuffer=0x31e1d4, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\DAN", lpFilePart=0x0) returned 0x3f [0047.082] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\DAN\\", nBufferLength=0x105, lpBuffer=0x31e1a8, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\DAN\\", lpFilePart=0x0) returned 0x40 [0047.082] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\DAN\\*", lpFindFileData=0x31e3f4 | out: lpFindFileData=0x31e3f4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x80378de0, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x80378de0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x80378de0, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x381e40 [0047.082] FindNextFileW (in: hFindFile=0x381e40, lpFindFileData=0x31e404 | out: lpFindFileData=0x31e404*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x80378de0, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x80378de0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x80378de0, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0047.082] FindNextFileW (in: hFindFile=0x381e40, lpFindFileData=0x31e404 | out: lpFindFileData=0x31e404*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9640cd00, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x80378de0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9640cd00, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x106ec, dwReserved0=0x0, dwReserved1=0x0, cFileName="AdobeID.pdf", cAlternateFileName="")) returned 1 [0047.082] FindNextFileW (in: hFindFile=0x381e40, lpFindFileData=0x31e404 | out: lpFindFileData=0x31e404*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9640cd00, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x80378de0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9640cd00, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x101ce, dwReserved0=0x0, dwReserved1=0x0, cFileName="DefaultID.pdf", cAlternateFileName="DEFAUL~1.PDF")) returned 1 [0047.082] FindNextFileW (in: hFindFile=0x381e40, lpFindFileData=0x31e404 | out: lpFindFileData=0x31e404*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9640cd00, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x80378de0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9640cd00, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x101ce, dwReserved0=0x0, dwReserved1=0x0, cFileName="DefaultID.pdf", cAlternateFileName="DEFAUL~1.PDF")) returned 0 [0047.082] FindClose (in: hFindFile=0x381e40 | out: hFindFile=0x381e40) returned 1 [0047.082] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e68c) returned 1 [0047.082] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e698) returned 1 [0047.082] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\DAN\\AdobeID.pdf", nBufferLength=0x105, lpBuffer=0x31e0a4, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\DAN\\AdobeID.pdf", lpFilePart=0x0) returned 0x4b [0047.083] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e598) returned 1 [0047.083] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\DAN\\AdobeID.pdf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\idtemplates\\dan\\adobeid.pdf"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x274 [0047.083] GetFileType (hFile=0x274) returned 0x1 [0047.083] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e594) returned 1 [0047.083] GetFileType (hFile=0x274) returned 0x1 [0047.083] GetFileSize (in: hFile=0x274, lpFileSizeHigh=0x31e6a0 | out: lpFileSizeHigh=0x31e6a0*=0x0) returned 0x106ec [0047.083] ReadFile (in: hFile=0x274, lpBuffer=0x290bc7c, nNumberOfBytesToRead=0x106ec, lpNumberOfBytesRead=0x31e64c, lpOverlapped=0x0 | out: lpBuffer=0x290bc7c*, lpNumberOfBytesRead=0x31e64c*=0x106ec, lpOverlapped=0x0) returned 1 [0047.095] CloseHandle (hObject=0x274) returned 1 [0047.139] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\DAN\\AdobeID.pdf", nBufferLength=0x105, lpBuffer=0x31e090, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\DAN\\AdobeID.pdf", lpFilePart=0x0) returned 0x4b [0047.140] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e584) returned 1 [0047.140] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\DAN\\AdobeID.pdf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\idtemplates\\dan\\adobeid.pdf"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x274 [0047.141] GetFileType (hFile=0x274) returned 0x1 [0047.141] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e580) returned 1 [0047.141] GetFileType (hFile=0x274) returned 0x1 [0047.141] WriteFile (in: hFile=0x274, lpBuffer=0x2694dac*, nNumberOfBytesToWrite=0x106f0, lpNumberOfBytesWritten=0x31e640, lpOverlapped=0x0 | out: lpBuffer=0x2694dac*, lpNumberOfBytesWritten=0x31e640*=0x106f0, lpOverlapped=0x0) returned 1 [0047.143] CloseHandle (hObject=0x274) returned 1 [0047.143] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\DAN\\AdobeID.pdf", nBufferLength=0x105, lpBuffer=0x31e1c4, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\DAN\\AdobeID.pdf", lpFilePart=0x0) returned 0x4b [0047.143] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\DAN\\AdobeID.pdf", nBufferLength=0x105, lpBuffer=0x31e1c4, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\DAN\\AdobeID.pdf", lpFilePart=0x0) returned 0x4b [0047.143] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e624) returned 1 [0047.143] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\DAN\\AdobeID.pdf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\idtemplates\\dan\\adobeid.pdf"), fInfoLevelId=0x0, lpFileInformation=0x31e6a0 | out: lpFileInformation=0x31e6a0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9640cd00, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x80378de0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0xff8c1ee0, ftLastWriteTime.dwHighDateTime=0x1d6eb7e, nFileSizeHigh=0x0, nFileSizeLow=0x106f0)) returned 1 [0047.143] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e620) returned 1 [0047.143] MoveFileW (lpExistingFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\DAN\\AdobeID.pdf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\idtemplates\\dan\\adobeid.pdf"), lpNewFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\DAN\\AdobeID.pdf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\idtemplates\\dan\\adobeid.pdf")) returned 1 [0047.143] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\DAN\\DefaultID.pdf", nBufferLength=0x105, lpBuffer=0x31e0a4, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\DAN\\DefaultID.pdf", lpFilePart=0x0) returned 0x4d [0047.143] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e598) returned 1 [0047.143] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\DAN\\DefaultID.pdf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\idtemplates\\dan\\defaultid.pdf"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x274 [0047.144] GetFileType (hFile=0x274) returned 0x1 [0047.144] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e594) returned 1 [0047.144] GetFileType (hFile=0x274) returned 0x1 [0047.144] GetFileSize (in: hFile=0x274, lpFileSizeHigh=0x31e6a0 | out: lpFileSizeHigh=0x31e6a0*=0x0) returned 0x101ce [0047.144] ReadFile (in: hFile=0x274, lpBuffer=0x26a5858, nNumberOfBytesToRead=0x101ce, lpNumberOfBytesRead=0x31e64c, lpOverlapped=0x0 | out: lpBuffer=0x26a5858*, lpNumberOfBytesRead=0x31e64c*=0x101ce, lpOverlapped=0x0) returned 1 [0047.168] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\DAN\\DefaultID.pdf", nBufferLength=0x105, lpBuffer=0x31e090, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\DAN\\DefaultID.pdf", lpFilePart=0x0) returned 0x4d [0047.168] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e584) returned 1 [0047.168] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\DAN\\DefaultID.pdf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\idtemplates\\dan\\defaultid.pdf"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x274 [0047.169] GetFileType (hFile=0x274) returned 0x1 [0047.169] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e580) returned 1 [0047.169] GetFileType (hFile=0x274) returned 0x1 [0047.170] WriteFile (in: hFile=0x274, lpBuffer=0x2722d20*, nNumberOfBytesToWrite=0x101d0, lpNumberOfBytesWritten=0x31e640, lpOverlapped=0x0 | out: lpBuffer=0x2722d20*, lpNumberOfBytesWritten=0x31e640*=0x101d0, lpOverlapped=0x0) returned 1 [0047.172] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\DAN\\DefaultID.pdf", nBufferLength=0x105, lpBuffer=0x31e1c4, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\DAN\\DefaultID.pdf", lpFilePart=0x0) returned 0x4d [0047.172] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\DAN\\DefaultID.pdf", nBufferLength=0x105, lpBuffer=0x31e1c4, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\DAN\\DefaultID.pdf", lpFilePart=0x0) returned 0x4d [0047.172] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e624) returned 1 [0047.172] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\DAN\\DefaultID.pdf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\idtemplates\\dan\\defaultid.pdf"), fInfoLevelId=0x0, lpFileInformation=0x31e6a0 | out: lpFileInformation=0x31e6a0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9640cd00, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x80378de0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0xff90e1a0, ftLastWriteTime.dwHighDateTime=0x1d6eb7e, nFileSizeHigh=0x0, nFileSizeLow=0x101d0)) returned 1 [0047.172] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e620) returned 1 [0047.172] MoveFileW (lpExistingFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\DAN\\DefaultID.pdf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\idtemplates\\dan\\defaultid.pdf"), lpNewFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\DAN\\DefaultID.pdf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\idtemplates\\dan\\defaultid.pdf")) returned 1 [0047.172] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e6cc) returned 1 [0047.172] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\DEU", nBufferLength=0x105, lpBuffer=0x31e1d4, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\DEU", lpFilePart=0x0) returned 0x3f [0047.172] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\DEU\\", nBufferLength=0x105, lpBuffer=0x31e1a8, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\DEU\\", lpFilePart=0x0) returned 0x40 [0047.172] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\DEU\\*", lpFindFileData=0x31e3f4 | out: lpFindFileData=0x31e3f4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8058e120, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x805b4280, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x805b4280, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x382080 [0047.182] FindNextFileW (in: hFindFile=0x382080, lpFindFileData=0x31e404 | out: lpFindFileData=0x31e404*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8058e120, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x805b4280, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x805b4280, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0047.183] FindNextFileW (in: hFindFile=0x382080, lpFindFileData=0x31e404 | out: lpFindFileData=0x31e404*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x950fa000, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x8058e120, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x950fa000, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x106d4, dwReserved0=0x0, dwReserved1=0x0, cFileName="AdobeID.pdf", cAlternateFileName="")) returned 1 [0047.183] FindNextFileW (in: hFindFile=0x382080, lpFindFileData=0x31e404 | out: lpFindFileData=0x31e404*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x950fa000, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x805b4280, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x950fa000, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x101bc, dwReserved0=0x0, dwReserved1=0x0, cFileName="DefaultID.pdf", cAlternateFileName="DEFAUL~1.PDF")) returned 1 [0047.183] FindNextFileW (in: hFindFile=0x382080, lpFindFileData=0x31e404 | out: lpFindFileData=0x31e404*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0047.183] FindClose (in: hFindFile=0x382080 | out: hFindFile=0x382080) returned 1 [0047.183] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e68c) returned 1 [0047.183] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e698) returned 1 [0047.183] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e6cc) returned 1 [0047.183] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\DEU", nBufferLength=0x105, lpBuffer=0x31e1d4, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\DEU", lpFilePart=0x0) returned 0x3f [0047.183] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\DEU\\", nBufferLength=0x105, lpBuffer=0x31e1a8, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\DEU\\", lpFilePart=0x0) returned 0x40 [0047.183] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\DEU\\*", lpFindFileData=0x31e3f4 | out: lpFindFileData=0x31e3f4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8058e120, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x805b4280, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x805b4280, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x382080 [0047.183] FindNextFileW (in: hFindFile=0x382080, lpFindFileData=0x31e404 | out: lpFindFileData=0x31e404*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8058e120, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x805b4280, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x805b4280, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0047.183] FindNextFileW (in: hFindFile=0x382080, lpFindFileData=0x31e404 | out: lpFindFileData=0x31e404*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x950fa000, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x8058e120, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x950fa000, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x106d4, dwReserved0=0x0, dwReserved1=0x0, cFileName="AdobeID.pdf", cAlternateFileName="")) returned 1 [0047.184] FindNextFileW (in: hFindFile=0x382080, lpFindFileData=0x31e404 | out: lpFindFileData=0x31e404*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x950fa000, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x805b4280, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x950fa000, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x101bc, dwReserved0=0x0, dwReserved1=0x0, cFileName="DefaultID.pdf", cAlternateFileName="DEFAUL~1.PDF")) returned 1 [0047.184] FindNextFileW (in: hFindFile=0x382080, lpFindFileData=0x31e404 | out: lpFindFileData=0x31e404*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x950fa000, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x805b4280, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x950fa000, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x101bc, dwReserved0=0x0, dwReserved1=0x0, cFileName="DefaultID.pdf", cAlternateFileName="DEFAUL~1.PDF")) returned 0 [0047.184] FindClose (in: hFindFile=0x382080 | out: hFindFile=0x382080) returned 1 [0047.184] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e68c) returned 1 [0047.184] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e698) returned 1 [0047.184] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\DEU\\AdobeID.pdf", nBufferLength=0x105, lpBuffer=0x31e0a4, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\DEU\\AdobeID.pdf", lpFilePart=0x0) returned 0x4b [0047.184] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e598) returned 1 [0047.184] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\DEU\\AdobeID.pdf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\idtemplates\\deu\\adobeid.pdf"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x274 [0047.184] GetFileType (hFile=0x274) returned 0x1 [0047.184] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e594) returned 1 [0047.184] GetFileType (hFile=0x274) returned 0x1 [0047.184] GetFileSize (in: hFile=0x274, lpFileSizeHigh=0x31e6a0 | out: lpFileSizeHigh=0x31e6a0*=0x0) returned 0x106d4 [0047.184] ReadFile (in: hFile=0x274, lpBuffer=0x2734e50, nNumberOfBytesToRead=0x106d4, lpNumberOfBytesRead=0x31e64c, lpOverlapped=0x0 | out: lpBuffer=0x2734e50*, lpNumberOfBytesRead=0x31e64c*=0x106d4, lpOverlapped=0x0) returned 1 [0047.213] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\DEU\\AdobeID.pdf", nBufferLength=0x105, lpBuffer=0x31e090, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\DEU\\AdobeID.pdf", lpFilePart=0x0) returned 0x4b [0047.213] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e584) returned 1 [0047.213] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\DEU\\AdobeID.pdf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\idtemplates\\deu\\adobeid.pdf"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x274 [0047.214] GetFileType (hFile=0x274) returned 0x1 [0047.214] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e580) returned 1 [0047.214] GetFileType (hFile=0x274) returned 0x1 [0047.214] WriteFile (in: hFile=0x274, lpBuffer=0x264f744*, nNumberOfBytesToWrite=0x106e0, lpNumberOfBytesWritten=0x31e640, lpOverlapped=0x0 | out: lpBuffer=0x264f744*, lpNumberOfBytesWritten=0x31e640*=0x106e0, lpOverlapped=0x0) returned 1 [0047.216] CloseHandle (hObject=0x274) returned 1 [0047.216] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\DEU\\AdobeID.pdf", nBufferLength=0x105, lpBuffer=0x31e1c4, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\DEU\\AdobeID.pdf", lpFilePart=0x0) returned 0x4b [0047.216] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\DEU\\AdobeID.pdf", nBufferLength=0x105, lpBuffer=0x31e1c4, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\DEU\\AdobeID.pdf", lpFilePart=0x0) returned 0x4b [0047.216] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e624) returned 1 [0047.216] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\DEU\\AdobeID.pdf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\idtemplates\\deu\\adobeid.pdf"), fInfoLevelId=0x0, lpFileInformation=0x31e6a0 | out: lpFileInformation=0x31e6a0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x950fa000, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x8058e120, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0xff9805c0, ftLastWriteTime.dwHighDateTime=0x1d6eb7e, nFileSizeHigh=0x0, nFileSizeLow=0x106e0)) returned 1 [0047.216] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e620) returned 1 [0047.216] MoveFileW (lpExistingFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\DEU\\AdobeID.pdf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\idtemplates\\deu\\adobeid.pdf"), lpNewFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\DEU\\AdobeID.pdf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\idtemplates\\deu\\adobeid.pdf")) returned 1 [0047.216] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\DEU\\DefaultID.pdf", nBufferLength=0x105, lpBuffer=0x31e0a4, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\DEU\\DefaultID.pdf", lpFilePart=0x0) returned 0x4d [0047.216] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e598) returned 1 [0047.216] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\DEU\\DefaultID.pdf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\idtemplates\\deu\\defaultid.pdf"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x274 [0047.216] GetFileType (hFile=0x274) returned 0x1 [0047.217] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e594) returned 1 [0047.217] GetFileType (hFile=0x274) returned 0x1 [0047.217] GetFileSize (in: hFile=0x274, lpFileSizeHigh=0x31e6a0 | out: lpFileSizeHigh=0x31e6a0*=0x0) returned 0x101bc [0047.217] ReadFile (in: hFile=0x274, lpBuffer=0x26601e0, nNumberOfBytesToRead=0x101bc, lpNumberOfBytesRead=0x31e64c, lpOverlapped=0x0 | out: lpBuffer=0x26601e0*, lpNumberOfBytesRead=0x31e64c*=0x101bc, lpOverlapped=0x0) returned 1 [0047.225] CloseHandle (hObject=0x274) returned 1 [0047.274] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\DEU\\DefaultID.pdf", nBufferLength=0x105, lpBuffer=0x31e090, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\DEU\\DefaultID.pdf", lpFilePart=0x0) returned 0x4d [0047.274] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e584) returned 1 [0047.274] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\DEU\\DefaultID.pdf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\idtemplates\\deu\\defaultid.pdf"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x274 [0047.278] GetFileType (hFile=0x274) returned 0x1 [0047.278] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e580) returned 1 [0047.278] GetFileType (hFile=0x274) returned 0x1 [0047.278] WriteFile (in: hFile=0x274, lpBuffer=0x26dd674*, nNumberOfBytesToWrite=0x101c0, lpNumberOfBytesWritten=0x31e640, lpOverlapped=0x0 | out: lpBuffer=0x26dd674*, lpNumberOfBytesWritten=0x31e640*=0x101c0, lpOverlapped=0x0) returned 1 [0047.279] CloseHandle (hObject=0x274) returned 1 [0047.280] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\DEU\\DefaultID.pdf", nBufferLength=0x105, lpBuffer=0x31e1c4, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\DEU\\DefaultID.pdf", lpFilePart=0x0) returned 0x4d [0047.280] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\DEU\\DefaultID.pdf", nBufferLength=0x105, lpBuffer=0x31e1c4, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\DEU\\DefaultID.pdf", lpFilePart=0x0) returned 0x4d [0047.280] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e624) returned 1 [0047.280] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\DEU\\DefaultID.pdf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\idtemplates\\deu\\defaultid.pdf"), fInfoLevelId=0x0, lpFileInformation=0x31e6a0 | out: lpFileInformation=0x31e6a0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x950fa000, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x805b4280, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0xffa18b40, ftLastWriteTime.dwHighDateTime=0x1d6eb7e, nFileSizeHigh=0x0, nFileSizeLow=0x101c0)) returned 1 [0047.280] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e620) returned 1 [0047.280] MoveFileW (lpExistingFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\DEU\\DefaultID.pdf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\idtemplates\\deu\\defaultid.pdf"), lpNewFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\DEU\\DefaultID.pdf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\idtemplates\\deu\\defaultid.pdf")) returned 1 [0047.280] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e6cc) returned 1 [0047.280] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\ENU", nBufferLength=0x105, lpBuffer=0x31e1d4, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\ENU", lpFilePart=0x0) returned 0x3f [0047.280] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\ENU\\", nBufferLength=0x105, lpBuffer=0x31e1a8, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\ENU\\", lpFilePart=0x0) returned 0x40 [0047.280] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\ENU\\*", lpFindFileData=0x31e3f4 | out: lpFindFileData=0x31e3f4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8058e120, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x8058e120, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x8058e120, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x381d40 [0047.290] FindNextFileW (in: hFindFile=0x381d40, lpFindFileData=0x31e404 | out: lpFindFileData=0x31e404*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8058e120, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x8058e120, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x8058e120, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0047.290] FindNextFileW (in: hFindFile=0x381d40, lpFindFileData=0x31e404 | out: lpFindFileData=0x31e404*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x93de7300, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x8058e120, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x93de7300, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x14096, dwReserved0=0x0, dwReserved1=0x0, cFileName="AdobeID.pdf", cAlternateFileName="")) returned 1 [0047.291] FindNextFileW (in: hFindFile=0x381d40, lpFindFileData=0x31e404 | out: lpFindFileData=0x31e404*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x950fa000, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x8058e120, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x950fa000, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x13b0b, dwReserved0=0x0, dwReserved1=0x0, cFileName="DefaultID.pdf", cAlternateFileName="DEFAUL~1.PDF")) returned 1 [0047.291] FindNextFileW (in: hFindFile=0x381d40, lpFindFileData=0x31e404 | out: lpFindFileData=0x31e404*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0047.291] FindClose (in: hFindFile=0x381d40 | out: hFindFile=0x381d40) returned 1 [0047.291] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e68c) returned 1 [0047.291] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e698) returned 1 [0047.291] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e6cc) returned 1 [0047.291] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\ENU", nBufferLength=0x105, lpBuffer=0x31e1d4, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\ENU", lpFilePart=0x0) returned 0x3f [0047.291] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\ENU\\", nBufferLength=0x105, lpBuffer=0x31e1a8, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\ENU\\", lpFilePart=0x0) returned 0x40 [0047.291] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\ENU\\*", lpFindFileData=0x31e3f4 | out: lpFindFileData=0x31e3f4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8058e120, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x8058e120, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x8058e120, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x381d40 [0047.291] FindNextFileW (in: hFindFile=0x381d40, lpFindFileData=0x31e404 | out: lpFindFileData=0x31e404*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8058e120, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x8058e120, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x8058e120, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0047.291] FindNextFileW (in: hFindFile=0x381d40, lpFindFileData=0x31e404 | out: lpFindFileData=0x31e404*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x93de7300, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x8058e120, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x93de7300, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x14096, dwReserved0=0x0, dwReserved1=0x0, cFileName="AdobeID.pdf", cAlternateFileName="")) returned 1 [0047.292] FindNextFileW (in: hFindFile=0x381d40, lpFindFileData=0x31e404 | out: lpFindFileData=0x31e404*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x950fa000, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x8058e120, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x950fa000, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x13b0b, dwReserved0=0x0, dwReserved1=0x0, cFileName="DefaultID.pdf", cAlternateFileName="DEFAUL~1.PDF")) returned 1 [0047.292] FindNextFileW (in: hFindFile=0x381d40, lpFindFileData=0x31e404 | out: lpFindFileData=0x31e404*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x950fa000, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x8058e120, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x950fa000, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x13b0b, dwReserved0=0x0, dwReserved1=0x0, cFileName="DefaultID.pdf", cAlternateFileName="DEFAUL~1.PDF")) returned 0 [0047.292] FindClose (in: hFindFile=0x381d40 | out: hFindFile=0x381d40) returned 1 [0047.292] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e68c) returned 1 [0047.292] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e698) returned 1 [0047.292] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\ENU\\AdobeID.pdf", nBufferLength=0x105, lpBuffer=0x31e0a4, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\ENU\\AdobeID.pdf", lpFilePart=0x0) returned 0x4b [0047.292] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e598) returned 1 [0047.292] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\ENU\\AdobeID.pdf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\idtemplates\\enu\\adobeid.pdf"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x274 [0047.292] GetFileType (hFile=0x274) returned 0x1 [0047.292] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e594) returned 1 [0047.292] GetFileType (hFile=0x274) returned 0x1 [0047.292] GetFileSize (in: hFile=0x274, lpFileSizeHigh=0x31e6a0 | out: lpFileSizeHigh=0x31e6a0*=0x0) returned 0x14096 [0047.292] ReadFile (in: hFile=0x274, lpBuffer=0x26ef794, nNumberOfBytesToRead=0x14096, lpNumberOfBytesRead=0x31e64c, lpOverlapped=0x0 | out: lpBuffer=0x26ef794*, lpNumberOfBytesRead=0x31e64c*=0x14096, lpOverlapped=0x0) returned 1 [0047.315] CloseHandle (hObject=0x274) returned 1 [0047.331] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\ENU\\AdobeID.pdf", nBufferLength=0x105, lpBuffer=0x31e090, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\ENU\\AdobeID.pdf", lpFilePart=0x0) returned 0x4b [0047.331] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e584) returned 1 [0047.331] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\ENU\\AdobeID.pdf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\idtemplates\\enu\\adobeid.pdf"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x274 [0047.332] GetFileType (hFile=0x274) returned 0x1 [0047.332] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e580) returned 1 [0047.332] GetFileType (hFile=0x274) returned 0x1 [0047.332] WriteFile (in: hFile=0x274, lpBuffer=0x2778770*, nNumberOfBytesToWrite=0x140a0, lpNumberOfBytesWritten=0x31e640, lpOverlapped=0x0 | out: lpBuffer=0x2778770*, lpNumberOfBytesWritten=0x31e640*=0x140a0, lpOverlapped=0x0) returned 1 [0047.334] CloseHandle (hObject=0x274) returned 1 [0047.334] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\ENU\\AdobeID.pdf", nBufferLength=0x105, lpBuffer=0x31e1c4, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\ENU\\AdobeID.pdf", lpFilePart=0x0) returned 0x4b [0047.334] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\ENU\\AdobeID.pdf", nBufferLength=0x105, lpBuffer=0x31e1c4, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\ENU\\AdobeID.pdf", lpFilePart=0x0) returned 0x4b [0047.334] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e624) returned 1 [0047.334] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\ENU\\AdobeID.pdf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\idtemplates\\enu\\adobeid.pdf"), fInfoLevelId=0x0, lpFileInformation=0x31e6a0 | out: lpFileInformation=0x31e6a0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x93de7300, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x8058e120, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0xffab10c0, ftLastWriteTime.dwHighDateTime=0x1d6eb7e, nFileSizeHigh=0x0, nFileSizeLow=0x140a0)) returned 1 [0047.334] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e620) returned 1 [0047.334] MoveFileW (lpExistingFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\ENU\\AdobeID.pdf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\idtemplates\\enu\\adobeid.pdf"), lpNewFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\ENU\\AdobeID.pdf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\idtemplates\\enu\\adobeid.pdf")) returned 1 [0047.335] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\ENU\\DefaultID.pdf", nBufferLength=0x105, lpBuffer=0x31e0a4, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\ENU\\DefaultID.pdf", lpFilePart=0x0) returned 0x4d [0047.335] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e598) returned 1 [0047.335] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\ENU\\DefaultID.pdf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\idtemplates\\enu\\defaultid.pdf"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x274 [0047.335] GetFileType (hFile=0x274) returned 0x1 [0047.335] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e594) returned 1 [0047.335] GetFileType (hFile=0x274) returned 0x1 [0047.335] GetFileSize (in: hFile=0x274, lpFileSizeHigh=0x31e6a0 | out: lpFileSizeHigh=0x31e6a0*=0x0) returned 0x13b0b [0047.335] ReadFile (in: hFile=0x274, lpBuffer=0x278cbcc, nNumberOfBytesToRead=0x13b0b, lpNumberOfBytesRead=0x31e64c, lpOverlapped=0x0 | out: lpBuffer=0x278cbcc*, lpNumberOfBytesRead=0x31e64c*=0x13b0b, lpOverlapped=0x0) returned 1 [0047.346] CloseHandle (hObject=0x274) returned 1 [0047.362] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\ENU\\DefaultID.pdf", nBufferLength=0x105, lpBuffer=0x31e090, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\ENU\\DefaultID.pdf", lpFilePart=0x0) returned 0x4d [0047.362] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e584) returned 1 [0047.362] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\ENU\\DefaultID.pdf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\idtemplates\\enu\\defaultid.pdf"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x274 [0047.363] GetFileType (hFile=0x274) returned 0x1 [0047.363] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e580) returned 1 [0047.363] GetFileType (hFile=0x274) returned 0x1 [0047.364] WriteFile (in: hFile=0x274, lpBuffer=0x2814af8*, nNumberOfBytesToWrite=0x13b10, lpNumberOfBytesWritten=0x31e640, lpOverlapped=0x0 | out: lpBuffer=0x2814af8*, lpNumberOfBytesWritten=0x31e640*=0x13b10, lpOverlapped=0x0) returned 1 [0047.365] CloseHandle (hObject=0x274) returned 1 [0047.365] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\ENU\\DefaultID.pdf", nBufferLength=0x105, lpBuffer=0x31e1c4, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\ENU\\DefaultID.pdf", lpFilePart=0x0) returned 0x4d [0047.365] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\ENU\\DefaultID.pdf", nBufferLength=0x105, lpBuffer=0x31e1c4, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\ENU\\DefaultID.pdf", lpFilePart=0x0) returned 0x4d [0047.365] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e624) returned 1 [0047.365] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\ENU\\DefaultID.pdf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\idtemplates\\enu\\defaultid.pdf"), fInfoLevelId=0x0, lpFileInformation=0x31e6a0 | out: lpFileInformation=0x31e6a0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x950fa000, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x8058e120, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0xffafd380, ftLastWriteTime.dwHighDateTime=0x1d6eb7e, nFileSizeHigh=0x0, nFileSizeLow=0x13b10)) returned 1 [0047.366] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e620) returned 1 [0047.366] MoveFileW (lpExistingFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\ENU\\DefaultID.pdf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\idtemplates\\enu\\defaultid.pdf"), lpNewFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\ENU\\DefaultID.pdf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\idtemplates\\enu\\defaultid.pdf")) returned 1 [0047.366] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e6cc) returned 1 [0047.366] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\ESP", nBufferLength=0x105, lpBuffer=0x31e1d4, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\ESP", lpFilePart=0x0) returned 0x3f [0047.366] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\ESP\\", nBufferLength=0x105, lpBuffer=0x31e1a8, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\ESP\\", lpFilePart=0x0) returned 0x40 [0047.366] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\ESP\\*", lpFindFileData=0x31e3f4 | out: lpFindFileData=0x31e3f4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x805b4280, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x805b4280, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x805b4280, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x381fc0 [0047.368] FindNextFileW (in: hFindFile=0x381fc0, lpFindFileData=0x31e404 | out: lpFindFileData=0x31e404*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x805b4280, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x805b4280, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x805b4280, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0047.368] FindNextFileW (in: hFindFile=0x381fc0, lpFindFileData=0x31e404 | out: lpFindFileData=0x31e404*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9640cd00, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x805b4280, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9640cd00, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x109db, dwReserved0=0x0, dwReserved1=0x0, cFileName="AdobeID.pdf", cAlternateFileName="")) returned 1 [0047.368] FindNextFileW (in: hFindFile=0x381fc0, lpFindFileData=0x31e404 | out: lpFindFileData=0x31e404*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9640cd00, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x805b4280, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9640cd00, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x104bf, dwReserved0=0x0, dwReserved1=0x0, cFileName="DefaultID.pdf", cAlternateFileName="DEFAUL~1.PDF")) returned 1 [0047.368] FindNextFileW (in: hFindFile=0x381fc0, lpFindFileData=0x31e404 | out: lpFindFileData=0x31e404*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0047.368] FindClose (in: hFindFile=0x381fc0 | out: hFindFile=0x381fc0) returned 1 [0047.368] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e68c) returned 1 [0047.368] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e698) returned 1 [0047.369] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e6cc) returned 1 [0047.369] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\ESP", nBufferLength=0x105, lpBuffer=0x31e1d4, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\ESP", lpFilePart=0x0) returned 0x3f [0047.369] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\ESP\\", nBufferLength=0x105, lpBuffer=0x31e1a8, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\ESP\\", lpFilePart=0x0) returned 0x40 [0047.369] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\ESP\\*", lpFindFileData=0x31e3f4 | out: lpFindFileData=0x31e3f4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x805b4280, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x805b4280, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x805b4280, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x381fc0 [0047.369] FindNextFileW (in: hFindFile=0x381fc0, lpFindFileData=0x31e404 | out: lpFindFileData=0x31e404*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x805b4280, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x805b4280, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x805b4280, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0047.369] FindNextFileW (in: hFindFile=0x381fc0, lpFindFileData=0x31e404 | out: lpFindFileData=0x31e404*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9640cd00, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x805b4280, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9640cd00, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x109db, dwReserved0=0x0, dwReserved1=0x0, cFileName="AdobeID.pdf", cAlternateFileName="")) returned 1 [0047.369] FindNextFileW (in: hFindFile=0x381fc0, lpFindFileData=0x31e404 | out: lpFindFileData=0x31e404*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9640cd00, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x805b4280, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9640cd00, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x104bf, dwReserved0=0x0, dwReserved1=0x0, cFileName="DefaultID.pdf", cAlternateFileName="DEFAUL~1.PDF")) returned 1 [0047.369] FindNextFileW (in: hFindFile=0x381fc0, lpFindFileData=0x31e404 | out: lpFindFileData=0x31e404*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9640cd00, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x805b4280, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9640cd00, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x104bf, dwReserved0=0x0, dwReserved1=0x0, cFileName="DefaultID.pdf", cAlternateFileName="DEFAUL~1.PDF")) returned 0 [0047.369] FindClose (in: hFindFile=0x381fc0 | out: hFindFile=0x381fc0) returned 1 [0047.369] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e68c) returned 1 [0047.370] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e698) returned 1 [0047.370] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\ESP\\AdobeID.pdf", nBufferLength=0x105, lpBuffer=0x31e0a4, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\ESP\\AdobeID.pdf", lpFilePart=0x0) returned 0x4b [0047.370] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e598) returned 1 [0047.370] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\ESP\\AdobeID.pdf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\idtemplates\\esp\\adobeid.pdf"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x274 [0047.370] GetFileType (hFile=0x274) returned 0x1 [0047.370] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e594) returned 1 [0047.370] GetFileType (hFile=0x274) returned 0x1 [0047.370] GetFileSize (in: hFile=0x274, lpFileSizeHigh=0x31e6a0 | out: lpFileSizeHigh=0x31e6a0*=0x0) returned 0x109db [0047.370] ReadFile (in: hFile=0x274, lpBuffer=0x282a568, nNumberOfBytesToRead=0x109db, lpNumberOfBytesRead=0x31e64c, lpOverlapped=0x0 | out: lpBuffer=0x282a568*, lpNumberOfBytesRead=0x31e64c*=0x109db, lpOverlapped=0x0) returned 1 [0047.378] CloseHandle (hObject=0x274) returned 1 [0047.393] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\ESP\\AdobeID.pdf", nBufferLength=0x105, lpBuffer=0x31e090, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\ESP\\AdobeID.pdf", lpFilePart=0x0) returned 0x4b [0047.393] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e584) returned 1 [0047.393] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\ESP\\AdobeID.pdf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\idtemplates\\esp\\adobeid.pdf"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x274 [0047.394] GetFileType (hFile=0x274) returned 0x1 [0047.394] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e580) returned 1 [0047.394] GetFileType (hFile=0x274) returned 0x1 [0047.394] WriteFile (in: hFile=0x274, lpBuffer=0x28a9104*, nNumberOfBytesToWrite=0x109e0, lpNumberOfBytesWritten=0x31e640, lpOverlapped=0x0 | out: lpBuffer=0x28a9104*, lpNumberOfBytesWritten=0x31e640*=0x109e0, lpOverlapped=0x0) returned 1 [0047.396] CloseHandle (hObject=0x274) returned 1 [0047.396] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\ESP\\AdobeID.pdf", nBufferLength=0x105, lpBuffer=0x31e1c4, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\ESP\\AdobeID.pdf", lpFilePart=0x0) returned 0x4b [0047.399] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\ESP\\AdobeID.pdf", nBufferLength=0x105, lpBuffer=0x31e1c4, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\ESP\\AdobeID.pdf", lpFilePart=0x0) returned 0x4b [0047.399] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e624) returned 1 [0047.399] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\ESP\\AdobeID.pdf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\idtemplates\\esp\\adobeid.pdf"), fInfoLevelId=0x0, lpFileInformation=0x31e6a0 | out: lpFileInformation=0x31e6a0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9640cd00, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x805b4280, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0xffb49640, ftLastWriteTime.dwHighDateTime=0x1d6eb7e, nFileSizeHigh=0x0, nFileSizeLow=0x109e0)) returned 1 [0047.399] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e620) returned 1 [0047.399] MoveFileW (lpExistingFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\ESP\\AdobeID.pdf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\idtemplates\\esp\\adobeid.pdf"), lpNewFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\ESP\\AdobeID.pdf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\idtemplates\\esp\\adobeid.pdf")) returned 1 [0047.399] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\ESP\\DefaultID.pdf", nBufferLength=0x105, lpBuffer=0x31e0a4, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\ESP\\DefaultID.pdf", lpFilePart=0x0) returned 0x4d [0047.399] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e598) returned 1 [0047.399] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\ESP\\DefaultID.pdf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\idtemplates\\esp\\defaultid.pdf"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x274 [0047.400] GetFileType (hFile=0x274) returned 0x1 [0047.400] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e594) returned 1 [0047.400] GetFileType (hFile=0x274) returned 0x1 [0047.400] GetFileSize (in: hFile=0x274, lpFileSizeHigh=0x31e6a0 | out: lpFileSizeHigh=0x31e6a0*=0x0) returned 0x104bf [0047.400] ReadFile (in: hFile=0x274, lpBuffer=0x26710bc, nNumberOfBytesToRead=0x104bf, lpNumberOfBytesRead=0x31e64c, lpOverlapped=0x0 | out: lpBuffer=0x26710bc*, lpNumberOfBytesRead=0x31e64c*=0x104bf, lpOverlapped=0x0) returned 1 [0047.402] CloseHandle (hObject=0x274) returned 1 [0047.443] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\ESP\\DefaultID.pdf", nBufferLength=0x105, lpBuffer=0x31e090, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\ESP\\DefaultID.pdf", lpFilePart=0x0) returned 0x4d [0047.443] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e584) returned 1 [0047.443] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\ESP\\DefaultID.pdf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\idtemplates\\esp\\defaultid.pdf"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x274 [0047.445] GetFileType (hFile=0x274) returned 0x1 [0047.445] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e580) returned 1 [0047.445] GetFileType (hFile=0x274) returned 0x1 [0047.445] WriteFile (in: hFile=0x274, lpBuffer=0x26eee54*, nNumberOfBytesToWrite=0x104c0, lpNumberOfBytesWritten=0x31e640, lpOverlapped=0x0 | out: lpBuffer=0x26eee54*, lpNumberOfBytesWritten=0x31e640*=0x104c0, lpOverlapped=0x0) returned 1 [0047.446] CloseHandle (hObject=0x274) returned 1 [0047.446] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\ESP\\DefaultID.pdf", nBufferLength=0x105, lpBuffer=0x31e1c4, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\ESP\\DefaultID.pdf", lpFilePart=0x0) returned 0x4d [0047.446] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\ESP\\DefaultID.pdf", nBufferLength=0x105, lpBuffer=0x31e1c4, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\ESP\\DefaultID.pdf", lpFilePart=0x0) returned 0x4d [0047.447] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e624) returned 1 [0047.447] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\ESP\\DefaultID.pdf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\idtemplates\\esp\\defaultid.pdf"), fInfoLevelId=0x0, lpFileInformation=0x31e6a0 | out: lpFileInformation=0x31e6a0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9640cd00, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x805b4280, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0xffbbba60, ftLastWriteTime.dwHighDateTime=0x1d6eb7e, nFileSizeHigh=0x0, nFileSizeLow=0x104c0)) returned 1 [0047.447] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e620) returned 1 [0047.447] MoveFileW (lpExistingFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\ESP\\DefaultID.pdf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\idtemplates\\esp\\defaultid.pdf"), lpNewFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\ESP\\DefaultID.pdf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\idtemplates\\esp\\defaultid.pdf")) returned 1 [0047.447] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e6cc) returned 1 [0047.447] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\EUQ", nBufferLength=0x105, lpBuffer=0x31e1d4, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\EUQ", lpFilePart=0x0) returned 0x3f [0047.447] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\EUQ\\", nBufferLength=0x105, lpBuffer=0x31e1a8, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\EUQ\\", lpFilePart=0x0) returned 0x40 [0047.447] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\EUQ\\*", lpFindFileData=0x31e3f4 | out: lpFindFileData=0x31e3f4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7cfb2f60, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x7cfb2f60, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x7cfb2f60, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x381fc0 [0047.448] FindNextFileW (in: hFindFile=0x381fc0, lpFindFileData=0x31e404 | out: lpFindFileData=0x31e404*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7cfb2f60, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x7cfb2f60, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x7cfb2f60, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0047.448] FindNextFileW (in: hFindFile=0x381fc0, lpFindFileData=0x31e404 | out: lpFindFileData=0x31e404*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7cfb2f60, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x7cfb2f60, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x7cfb2f60, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 0 [0047.448] FindClose (in: hFindFile=0x381fc0 | out: hFindFile=0x381fc0) returned 1 [0047.448] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e68c) returned 1 [0047.448] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e698) returned 1 [0047.448] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e6cc) returned 1 [0047.448] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\EUQ", nBufferLength=0x105, lpBuffer=0x31e1d4, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\EUQ", lpFilePart=0x0) returned 0x3f [0047.448] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\EUQ\\", nBufferLength=0x105, lpBuffer=0x31e1a8, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\EUQ\\", lpFilePart=0x0) returned 0x40 [0047.448] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\EUQ\\*", lpFindFileData=0x31e3f4 | out: lpFindFileData=0x31e3f4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7cfb2f60, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x7cfb2f60, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x7cfb2f60, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x381fc0 [0047.448] FindNextFileW (in: hFindFile=0x381fc0, lpFindFileData=0x31e404 | out: lpFindFileData=0x31e404*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7cfb2f60, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x7cfb2f60, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x7cfb2f60, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0047.448] FindNextFileW (in: hFindFile=0x381fc0, lpFindFileData=0x31e404 | out: lpFindFileData=0x31e404*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7cfb2f60, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x7cfb2f60, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x7cfb2f60, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 0 [0047.449] FindClose (in: hFindFile=0x381fc0 | out: hFindFile=0x381fc0) returned 1 [0047.449] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e68c) returned 1 [0047.449] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e698) returned 1 [0047.449] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e6cc) returned 1 [0047.449] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\FRA", nBufferLength=0x105, lpBuffer=0x31e1d4, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\FRA", lpFilePart=0x0) returned 0x3f [0047.449] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\FRA\\", nBufferLength=0x105, lpBuffer=0x31e1a8, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\FRA\\", lpFilePart=0x0) returned 0x40 [0047.449] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\FRA\\*", lpFindFileData=0x31e3f4 | out: lpFindFileData=0x31e3f4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x805b4280, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x805b4280, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x805b4280, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x381fc0 [0047.450] FindNextFileW (in: hFindFile=0x381fc0, lpFindFileData=0x31e404 | out: lpFindFileData=0x31e404*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x805b4280, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x805b4280, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x805b4280, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0047.450] FindNextFileW (in: hFindFile=0x381fc0, lpFindFileData=0x31e404 | out: lpFindFileData=0x31e404*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x950fa000, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x805b4280, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x950fa000, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x10ab0, dwReserved0=0x0, dwReserved1=0x0, cFileName="AdobeID.pdf", cAlternateFileName="")) returned 1 [0047.450] FindNextFileW (in: hFindFile=0x381fc0, lpFindFileData=0x31e404 | out: lpFindFileData=0x31e404*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x950fa000, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x805b4280, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x950fa000, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x10596, dwReserved0=0x0, dwReserved1=0x0, cFileName="DefaultID.pdf", cAlternateFileName="DEFAUL~1.PDF")) returned 1 [0047.450] FindNextFileW (in: hFindFile=0x381fc0, lpFindFileData=0x31e404 | out: lpFindFileData=0x31e404*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0047.450] FindClose (in: hFindFile=0x381fc0 | out: hFindFile=0x381fc0) returned 1 [0047.450] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e68c) returned 1 [0047.450] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e698) returned 1 [0047.450] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e6cc) returned 1 [0047.450] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\FRA", nBufferLength=0x105, lpBuffer=0x31e1d4, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\FRA", lpFilePart=0x0) returned 0x3f [0047.450] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\FRA\\", nBufferLength=0x105, lpBuffer=0x31e1a8, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\FRA\\", lpFilePart=0x0) returned 0x40 [0047.451] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\FRA\\*", lpFindFileData=0x31e3f4 | out: lpFindFileData=0x31e3f4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x805b4280, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x805b4280, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x805b4280, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x381fc0 [0047.451] FindNextFileW (in: hFindFile=0x381fc0, lpFindFileData=0x31e404 | out: lpFindFileData=0x31e404*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x805b4280, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x805b4280, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x805b4280, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0047.451] FindNextFileW (in: hFindFile=0x381fc0, lpFindFileData=0x31e404 | out: lpFindFileData=0x31e404*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x950fa000, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x805b4280, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x950fa000, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x10ab0, dwReserved0=0x0, dwReserved1=0x0, cFileName="AdobeID.pdf", cAlternateFileName="")) returned 1 [0047.451] FindNextFileW (in: hFindFile=0x381fc0, lpFindFileData=0x31e404 | out: lpFindFileData=0x31e404*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x950fa000, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x805b4280, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x950fa000, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x10596, dwReserved0=0x0, dwReserved1=0x0, cFileName="DefaultID.pdf", cAlternateFileName="DEFAUL~1.PDF")) returned 1 [0047.451] FindNextFileW (in: hFindFile=0x381fc0, lpFindFileData=0x31e404 | out: lpFindFileData=0x31e404*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x950fa000, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x805b4280, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x950fa000, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x10596, dwReserved0=0x0, dwReserved1=0x0, cFileName="DefaultID.pdf", cAlternateFileName="DEFAUL~1.PDF")) returned 0 [0047.451] FindClose (in: hFindFile=0x381fc0 | out: hFindFile=0x381fc0) returned 1 [0047.451] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e68c) returned 1 [0047.451] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e698) returned 1 [0047.451] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\FRA\\AdobeID.pdf", nBufferLength=0x105, lpBuffer=0x31e0a4, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\FRA\\AdobeID.pdf", lpFilePart=0x0) returned 0x4b [0047.452] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e598) returned 1 [0047.452] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\FRA\\AdobeID.pdf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\idtemplates\\fra\\adobeid.pdf"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x274 [0047.452] GetFileType (hFile=0x274) returned 0x1 [0047.452] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e594) returned 1 [0047.452] GetFileType (hFile=0x274) returned 0x1 [0047.452] GetFileSize (in: hFile=0x274, lpFileSizeHigh=0x31e6a0 | out: lpFileSizeHigh=0x31e6a0*=0x0) returned 0x10ab0 [0047.452] ReadFile (in: hFile=0x274, lpBuffer=0x27026e4, nNumberOfBytesToRead=0x10ab0, lpNumberOfBytesRead=0x31e64c, lpOverlapped=0x0 | out: lpBuffer=0x27026e4*, lpNumberOfBytesRead=0x31e64c*=0x10ab0, lpOverlapped=0x0) returned 1 [0047.455] CloseHandle (hObject=0x274) returned 1 [0047.470] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\FRA\\AdobeID.pdf", nBufferLength=0x105, lpBuffer=0x31e090, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\FRA\\AdobeID.pdf", lpFilePart=0x0) returned 0x4b [0047.470] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e584) returned 1 [0047.470] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\FRA\\AdobeID.pdf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\idtemplates\\fra\\adobeid.pdf"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x274 [0047.472] GetFileType (hFile=0x274) returned 0x1 [0047.472] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e580) returned 1 [0047.472] GetFileType (hFile=0x274) returned 0x1 [0047.472] WriteFile (in: hFile=0x274, lpBuffer=0x278151c*, nNumberOfBytesToWrite=0x10ac0, lpNumberOfBytesWritten=0x31e640, lpOverlapped=0x0 | out: lpBuffer=0x278151c*, lpNumberOfBytesWritten=0x31e640*=0x10ac0, lpOverlapped=0x0) returned 1 [0047.474] CloseHandle (hObject=0x274) returned 1 [0047.474] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\FRA\\AdobeID.pdf", nBufferLength=0x105, lpBuffer=0x31e1c4, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\FRA\\AdobeID.pdf", lpFilePart=0x0) returned 0x4b [0047.474] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\FRA\\AdobeID.pdf", nBufferLength=0x105, lpBuffer=0x31e1c4, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\FRA\\AdobeID.pdf", lpFilePart=0x0) returned 0x4b [0047.474] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e624) returned 1 [0047.474] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\FRA\\AdobeID.pdf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\idtemplates\\fra\\adobeid.pdf"), fInfoLevelId=0x0, lpFileInformation=0x31e6a0 | out: lpFileInformation=0x31e6a0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x950fa000, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x805b4280, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0xffc07d20, ftLastWriteTime.dwHighDateTime=0x1d6eb7e, nFileSizeHigh=0x0, nFileSizeLow=0x10ac0)) returned 1 [0047.474] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e620) returned 1 [0047.474] MoveFileW (lpExistingFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\FRA\\AdobeID.pdf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\idtemplates\\fra\\adobeid.pdf"), lpNewFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\FRA\\AdobeID.pdf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\idtemplates\\fra\\adobeid.pdf")) returned 1 [0047.474] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\FRA\\DefaultID.pdf", nBufferLength=0x105, lpBuffer=0x31e0a4, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\FRA\\DefaultID.pdf", lpFilePart=0x0) returned 0x4d [0047.474] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e598) returned 1 [0047.474] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\FRA\\DefaultID.pdf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\idtemplates\\fra\\defaultid.pdf"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x274 [0047.475] GetFileType (hFile=0x274) returned 0x1 [0047.475] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e594) returned 1 [0047.475] GetFileType (hFile=0x274) returned 0x1 [0047.475] GetFileSize (in: hFile=0x274, lpFileSizeHigh=0x31e6a0 | out: lpFileSizeHigh=0x31e6a0*=0x0) returned 0x10596 [0047.475] ReadFile (in: hFile=0x274, lpBuffer=0x2792398, nNumberOfBytesToRead=0x10596, lpNumberOfBytesRead=0x31e64c, lpOverlapped=0x0 | out: lpBuffer=0x2792398*, lpNumberOfBytesRead=0x31e64c*=0x10596, lpOverlapped=0x0) returned 1 [0047.480] CloseHandle (hObject=0x274) returned 1 [0047.495] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\FRA\\DefaultID.pdf", nBufferLength=0x105, lpBuffer=0x31e090, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\FRA\\DefaultID.pdf", lpFilePart=0x0) returned 0x4d [0047.495] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e584) returned 1 [0047.495] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\FRA\\DefaultID.pdf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\idtemplates\\fra\\defaultid.pdf"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x274 [0047.496] GetFileType (hFile=0x274) returned 0x1 [0047.497] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e580) returned 1 [0047.497] GetFileType (hFile=0x274) returned 0x1 [0047.497] WriteFile (in: hFile=0x274, lpBuffer=0x2810274*, nNumberOfBytesToWrite=0x105a0, lpNumberOfBytesWritten=0x31e640, lpOverlapped=0x0 | out: lpBuffer=0x2810274*, lpNumberOfBytesWritten=0x31e640*=0x105a0, lpOverlapped=0x0) returned 1 [0047.498] CloseHandle (hObject=0x274) returned 1 [0047.498] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\FRA\\DefaultID.pdf", nBufferLength=0x105, lpBuffer=0x31e1c4, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\FRA\\DefaultID.pdf", lpFilePart=0x0) returned 0x4d [0047.498] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\FRA\\DefaultID.pdf", nBufferLength=0x105, lpBuffer=0x31e1c4, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\FRA\\DefaultID.pdf", lpFilePart=0x0) returned 0x4d [0047.498] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e624) returned 1 [0047.498] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\FRA\\DefaultID.pdf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\idtemplates\\fra\\defaultid.pdf"), fInfoLevelId=0x0, lpFileInformation=0x31e6a0 | out: lpFileInformation=0x31e6a0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x950fa000, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x805b4280, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0xffc2de80, ftLastWriteTime.dwHighDateTime=0x1d6eb7e, nFileSizeHigh=0x0, nFileSizeLow=0x105a0)) returned 1 [0047.499] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e620) returned 1 [0047.499] MoveFileW (lpExistingFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\FRA\\DefaultID.pdf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\idtemplates\\fra\\defaultid.pdf"), lpNewFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\FRA\\DefaultID.pdf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\idtemplates\\fra\\defaultid.pdf")) returned 1 [0047.499] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e6cc) returned 1 [0047.499] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\HRV", nBufferLength=0x105, lpBuffer=0x31e1d4, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\HRV", lpFilePart=0x0) returned 0x3f [0047.499] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\HRV\\", nBufferLength=0x105, lpBuffer=0x31e1a8, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\HRV\\", lpFilePart=0x0) returned 0x40 [0047.499] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\HRV\\*", lpFindFileData=0x31e3f4 | out: lpFindFileData=0x31e3f4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x80a2abc0, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x80a2abc0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x80a2abc0, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x381d40 [0047.499] FindNextFileW (in: hFindFile=0x381d40, lpFindFileData=0x31e404 | out: lpFindFileData=0x31e404*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x80a2abc0, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x80a2abc0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x80a2abc0, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0047.500] FindNextFileW (in: hFindFile=0x381d40, lpFindFileData=0x31e404 | out: lpFindFileData=0x31e404*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9b058100, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x80a2abc0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9b058100, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x43b5, dwReserved0=0x0, dwReserved1=0x0, cFileName="AdobeID.pdf", cAlternateFileName="")) returned 1 [0047.500] FindNextFileW (in: hFindFile=0x381d40, lpFindFileData=0x31e404 | out: lpFindFileData=0x31e404*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9b058100, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x80a2abc0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9b058100, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x3e95, dwReserved0=0x0, dwReserved1=0x0, cFileName="DefaultID.pdf", cAlternateFileName="DEFAUL~1.PDF")) returned 1 [0047.500] FindNextFileW (in: hFindFile=0x381d40, lpFindFileData=0x31e404 | out: lpFindFileData=0x31e404*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0047.500] FindClose (in: hFindFile=0x381d40 | out: hFindFile=0x381d40) returned 1 [0047.500] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e68c) returned 1 [0047.500] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e698) returned 1 [0047.500] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e6cc) returned 1 [0047.500] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\HRV", nBufferLength=0x105, lpBuffer=0x31e1d4, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\HRV", lpFilePart=0x0) returned 0x3f [0047.500] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\HRV\\", nBufferLength=0x105, lpBuffer=0x31e1a8, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\HRV\\", lpFilePart=0x0) returned 0x40 [0047.500] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\HRV\\*", lpFindFileData=0x31e3f4 | out: lpFindFileData=0x31e3f4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x80a2abc0, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x80a2abc0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x80a2abc0, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x381d40 [0047.500] FindNextFileW (in: hFindFile=0x381d40, lpFindFileData=0x31e404 | out: lpFindFileData=0x31e404*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x80a2abc0, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x80a2abc0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x80a2abc0, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0047.501] FindNextFileW (in: hFindFile=0x381d40, lpFindFileData=0x31e404 | out: lpFindFileData=0x31e404*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9b058100, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x80a2abc0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9b058100, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x43b5, dwReserved0=0x0, dwReserved1=0x0, cFileName="AdobeID.pdf", cAlternateFileName="")) returned 1 [0047.501] FindNextFileW (in: hFindFile=0x381d40, lpFindFileData=0x31e404 | out: lpFindFileData=0x31e404*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9b058100, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x80a2abc0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9b058100, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x3e95, dwReserved0=0x0, dwReserved1=0x0, cFileName="DefaultID.pdf", cAlternateFileName="DEFAUL~1.PDF")) returned 1 [0047.501] FindNextFileW (in: hFindFile=0x381d40, lpFindFileData=0x31e404 | out: lpFindFileData=0x31e404*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9b058100, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x80a2abc0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9b058100, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x3e95, dwReserved0=0x0, dwReserved1=0x0, cFileName="DefaultID.pdf", cAlternateFileName="DEFAUL~1.PDF")) returned 0 [0047.501] FindClose (in: hFindFile=0x381d40 | out: hFindFile=0x381d40) returned 1 [0047.501] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e68c) returned 1 [0047.501] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e698) returned 1 [0047.501] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\HRV\\AdobeID.pdf", nBufferLength=0x105, lpBuffer=0x31e0a4, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\HRV\\AdobeID.pdf", lpFilePart=0x0) returned 0x4b [0047.501] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e598) returned 1 [0047.501] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\HRV\\AdobeID.pdf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\idtemplates\\hrv\\adobeid.pdf"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x274 [0047.501] GetFileType (hFile=0x274) returned 0x1 [0047.501] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e594) returned 1 [0047.501] GetFileType (hFile=0x274) returned 0x1 [0047.501] GetFileSize (in: hFile=0x274, lpFileSizeHigh=0x31e6a0 | out: lpFileSizeHigh=0x31e6a0*=0x0) returned 0x43b5 [0047.502] ReadFile (in: hFile=0x274, lpBuffer=0x2822774, nNumberOfBytesToRead=0x43b5, lpNumberOfBytesRead=0x31e64c, lpOverlapped=0x0 | out: lpBuffer=0x2822774*, lpNumberOfBytesRead=0x31e64c*=0x43b5, lpOverlapped=0x0) returned 1 [0047.504] CloseHandle (hObject=0x274) returned 1 [0047.518] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\HRV\\AdobeID.pdf", nBufferLength=0x105, lpBuffer=0x31e090, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\HRV\\AdobeID.pdf", lpFilePart=0x0) returned 0x4b [0047.518] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e584) returned 1 [0047.518] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\HRV\\AdobeID.pdf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\idtemplates\\hrv\\adobeid.pdf"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x274 [0047.519] GetFileType (hFile=0x274) returned 0x1 [0047.519] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e580) returned 1 [0047.519] GetFileType (hFile=0x274) returned 0x1 [0047.519] WriteFile (in: hFile=0x274, lpBuffer=0x288481c*, nNumberOfBytesToWrite=0x43c0, lpNumberOfBytesWritten=0x31e640, lpOverlapped=0x0 | out: lpBuffer=0x288481c*, lpNumberOfBytesWritten=0x31e640*=0x43c0, lpOverlapped=0x0) returned 1 [0047.521] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\HRV\\AdobeID.pdf", nBufferLength=0x105, lpBuffer=0x31e1c4, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\HRV\\AdobeID.pdf", lpFilePart=0x0) returned 0x4b [0047.521] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\HRV\\AdobeID.pdf", nBufferLength=0x105, lpBuffer=0x31e1c4, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\HRV\\AdobeID.pdf", lpFilePart=0x0) returned 0x4b [0047.521] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e624) returned 1 [0047.521] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\HRV\\AdobeID.pdf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\idtemplates\\hrv\\adobeid.pdf"), fInfoLevelId=0x0, lpFileInformation=0x31e6a0 | out: lpFileInformation=0x31e6a0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9b058100, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x80a2abc0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0xffc7a140, ftLastWriteTime.dwHighDateTime=0x1d6eb7e, nFileSizeHigh=0x0, nFileSizeLow=0x43c0)) returned 1 [0047.521] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e620) returned 1 [0047.521] MoveFileW (lpExistingFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\HRV\\AdobeID.pdf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\idtemplates\\hrv\\adobeid.pdf"), lpNewFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\HRV\\AdobeID.pdf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\idtemplates\\hrv\\adobeid.pdf")) returned 1 [0047.522] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\HRV\\DefaultID.pdf", nBufferLength=0x105, lpBuffer=0x31e0a4, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\HRV\\DefaultID.pdf", lpFilePart=0x0) returned 0x4d [0047.522] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e598) returned 1 [0047.522] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\HRV\\DefaultID.pdf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\idtemplates\\hrv\\defaultid.pdf"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x274 [0047.522] GetFileType (hFile=0x274) returned 0x1 [0047.522] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e594) returned 1 [0047.522] GetFileType (hFile=0x274) returned 0x1 [0047.522] GetFileSize (in: hFile=0x274, lpFileSizeHigh=0x31e6a0 | out: lpFileSizeHigh=0x31e6a0*=0x0) returned 0x3e95 [0047.522] ReadFile (in: hFile=0x274, lpBuffer=0x2888f98, nNumberOfBytesToRead=0x3e95, lpNumberOfBytesRead=0x31e64c, lpOverlapped=0x0 | out: lpBuffer=0x2888f98*, lpNumberOfBytesRead=0x31e64c*=0x3e95, lpOverlapped=0x0) returned 1 [0047.570] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\HRV\\DefaultID.pdf", nBufferLength=0x105, lpBuffer=0x31e090, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\HRV\\DefaultID.pdf", lpFilePart=0x0) returned 0x4d [0047.570] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e584) returned 1 [0047.570] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\HRV\\DefaultID.pdf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\idtemplates\\hrv\\defaultid.pdf"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x274 [0047.571] GetFileType (hFile=0x274) returned 0x1 [0047.571] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e580) returned 1 [0047.571] GetFileType (hFile=0x274) returned 0x1 [0047.571] WriteFile (in: hFile=0x274, lpBuffer=0x26c4acc*, nNumberOfBytesToWrite=0x3ea0, lpNumberOfBytesWritten=0x31e640, lpOverlapped=0x0 | out: lpBuffer=0x26c4acc*, lpNumberOfBytesWritten=0x31e640*=0x3ea0, lpOverlapped=0x0) returned 1 [0047.572] CloseHandle (hObject=0x274) returned 1 [0047.572] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\HRV\\DefaultID.pdf", nBufferLength=0x105, lpBuffer=0x31e1c4, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\HRV\\DefaultID.pdf", lpFilePart=0x0) returned 0x4d [0047.572] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\HRV\\DefaultID.pdf", nBufferLength=0x105, lpBuffer=0x31e1c4, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\HRV\\DefaultID.pdf", lpFilePart=0x0) returned 0x4d [0047.572] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e624) returned 1 [0047.573] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\HRV\\DefaultID.pdf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\idtemplates\\hrv\\defaultid.pdf"), fInfoLevelId=0x0, lpFileInformation=0x31e6a0 | out: lpFileInformation=0x31e6a0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9b058100, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x80a2abc0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0xffcec560, ftLastWriteTime.dwHighDateTime=0x1d6eb7e, nFileSizeHigh=0x0, nFileSizeLow=0x3ea0)) returned 1 [0047.573] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e620) returned 1 [0047.573] MoveFileW (lpExistingFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\HRV\\DefaultID.pdf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\idtemplates\\hrv\\defaultid.pdf"), lpNewFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\HRV\\DefaultID.pdf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\idtemplates\\hrv\\defaultid.pdf")) returned 1 [0047.573] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e6cc) returned 1 [0047.573] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\HUN", nBufferLength=0x105, lpBuffer=0x31e1d4, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\HUN", lpFilePart=0x0) returned 0x3f [0047.573] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\HUN\\", nBufferLength=0x105, lpBuffer=0x31e1a8, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\HUN\\", lpFilePart=0x0) returned 0x40 [0047.573] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\HUN\\*", lpFindFileData=0x31e3f4 | out: lpFindFileData=0x31e3f4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x80a2abc0, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x80a2abc0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x80a2abc0, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x381dc0 [0047.582] FindNextFileW (in: hFindFile=0x381dc0, lpFindFileData=0x31e404 | out: lpFindFileData=0x31e404*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x80a2abc0, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x80a2abc0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x80a2abc0, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0047.583] FindNextFileW (in: hFindFile=0x381dc0, lpFindFileData=0x31e404 | out: lpFindFileData=0x31e404*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9b058100, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x80a2abc0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9b058100, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x16097, dwReserved0=0x0, dwReserved1=0x0, cFileName="AdobeID.pdf", cAlternateFileName="")) returned 1 [0047.583] FindNextFileW (in: hFindFile=0x381dc0, lpFindFileData=0x31e404 | out: lpFindFileData=0x31e404*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9b058100, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x80a2abc0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9b058100, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x15db2, dwReserved0=0x0, dwReserved1=0x0, cFileName="DefaultID.pdf", cAlternateFileName="DEFAUL~1.PDF")) returned 1 [0047.583] FindNextFileW (in: hFindFile=0x381dc0, lpFindFileData=0x31e404 | out: lpFindFileData=0x31e404*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0047.583] FindClose (in: hFindFile=0x381dc0 | out: hFindFile=0x381dc0) returned 1 [0047.583] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e68c) returned 1 [0047.583] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e698) returned 1 [0047.583] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e6cc) returned 1 [0047.583] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\HUN", nBufferLength=0x105, lpBuffer=0x31e1d4, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\HUN", lpFilePart=0x0) returned 0x3f [0047.583] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\HUN\\", nBufferLength=0x105, lpBuffer=0x31e1a8, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\HUN\\", lpFilePart=0x0) returned 0x40 [0047.583] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\HUN\\*", lpFindFileData=0x31e3f4 | out: lpFindFileData=0x31e3f4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x80a2abc0, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x80a2abc0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x80a2abc0, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x381dc0 [0047.583] FindNextFileW (in: hFindFile=0x381dc0, lpFindFileData=0x31e404 | out: lpFindFileData=0x31e404*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x80a2abc0, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x80a2abc0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x80a2abc0, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0047.584] FindNextFileW (in: hFindFile=0x381dc0, lpFindFileData=0x31e404 | out: lpFindFileData=0x31e404*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9b058100, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x80a2abc0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9b058100, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x16097, dwReserved0=0x0, dwReserved1=0x0, cFileName="AdobeID.pdf", cAlternateFileName="")) returned 1 [0047.584] FindNextFileW (in: hFindFile=0x381dc0, lpFindFileData=0x31e404 | out: lpFindFileData=0x31e404*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9b058100, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x80a2abc0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9b058100, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x15db2, dwReserved0=0x0, dwReserved1=0x0, cFileName="DefaultID.pdf", cAlternateFileName="DEFAUL~1.PDF")) returned 1 [0047.584] FindNextFileW (in: hFindFile=0x381dc0, lpFindFileData=0x31e404 | out: lpFindFileData=0x31e404*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9b058100, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x80a2abc0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9b058100, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x15db2, dwReserved0=0x0, dwReserved1=0x0, cFileName="DefaultID.pdf", cAlternateFileName="DEFAUL~1.PDF")) returned 0 [0047.584] FindClose (in: hFindFile=0x381dc0 | out: hFindFile=0x381dc0) returned 1 [0047.584] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e68c) returned 1 [0047.584] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e698) returned 1 [0047.584] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\HUN\\AdobeID.pdf", nBufferLength=0x105, lpBuffer=0x31e0a4, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\HUN\\AdobeID.pdf", lpFilePart=0x0) returned 0x4b [0047.584] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e598) returned 1 [0047.584] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\HUN\\AdobeID.pdf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\idtemplates\\hun\\adobeid.pdf"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x274 [0047.584] GetFileType (hFile=0x274) returned 0x1 [0047.584] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e594) returned 1 [0047.585] GetFileType (hFile=0x274) returned 0x1 [0047.585] GetFileSize (in: hFile=0x274, lpFileSizeHigh=0x31e6a0 | out: lpFileSizeHigh=0x31e6a0*=0x0) returned 0x16097 [0047.585] ReadFile (in: hFile=0x274, lpBuffer=0x372db50, nNumberOfBytesToRead=0x16097, lpNumberOfBytesRead=0x31e64c, lpOverlapped=0x0 | out: lpBuffer=0x372db50*, lpNumberOfBytesRead=0x31e64c*=0x16097, lpOverlapped=0x0) returned 1 [0047.596] CloseHandle (hObject=0x274) returned 1 [0047.614] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\HUN\\AdobeID.pdf", nBufferLength=0x105, lpBuffer=0x31e090, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\HUN\\AdobeID.pdf", lpFilePart=0x0) returned 0x4b [0047.614] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e584) returned 1 [0047.614] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\HUN\\AdobeID.pdf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\idtemplates\\hun\\adobeid.pdf"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x274 [0047.616] GetFileType (hFile=0x274) returned 0x1 [0047.616] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e580) returned 1 [0047.616] GetFileType (hFile=0x274) returned 0x1 [0047.616] WriteFile (in: hFile=0x274, lpBuffer=0x379bea8*, nNumberOfBytesToWrite=0x160a0, lpNumberOfBytesWritten=0x31e640, lpOverlapped=0x0 | out: lpBuffer=0x379bea8*, lpNumberOfBytesWritten=0x31e640*=0x160a0, lpOverlapped=0x0) returned 1 [0047.618] CloseHandle (hObject=0x274) returned 1 [0047.618] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\HUN\\AdobeID.pdf", nBufferLength=0x105, lpBuffer=0x31e1c4, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\HUN\\AdobeID.pdf", lpFilePart=0x0) returned 0x4b [0047.618] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\HUN\\AdobeID.pdf", nBufferLength=0x105, lpBuffer=0x31e1c4, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\HUN\\AdobeID.pdf", lpFilePart=0x0) returned 0x4b [0047.618] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e624) returned 1 [0047.618] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\HUN\\AdobeID.pdf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\idtemplates\\hun\\adobeid.pdf"), fInfoLevelId=0x0, lpFileInformation=0x31e6a0 | out: lpFileInformation=0x31e6a0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9b058100, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x80a2abc0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0xffd5e980, ftLastWriteTime.dwHighDateTime=0x1d6eb7e, nFileSizeHigh=0x0, nFileSizeLow=0x160a0)) returned 1 [0047.618] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e620) returned 1 [0047.618] MoveFileW (lpExistingFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\HUN\\AdobeID.pdf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\idtemplates\\hun\\adobeid.pdf"), lpNewFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\HUN\\AdobeID.pdf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\idtemplates\\hun\\adobeid.pdf")) returned 1 [0047.618] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\HUN\\DefaultID.pdf", nBufferLength=0x105, lpBuffer=0x31e0a4, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\HUN\\DefaultID.pdf", lpFilePart=0x0) returned 0x4d [0047.618] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e598) returned 1 [0047.618] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\HUN\\DefaultID.pdf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\idtemplates\\hun\\defaultid.pdf"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x274 [0047.619] GetFileType (hFile=0x274) returned 0x1 [0047.619] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e594) returned 1 [0047.619] GetFileType (hFile=0x274) returned 0x1 [0047.619] GetFileSize (in: hFile=0x274, lpFileSizeHigh=0x31e6a0 | out: lpFileSizeHigh=0x31e6a0*=0x0) returned 0x15db2 [0047.619] ReadFile (in: hFile=0x274, lpBuffer=0x37b1f68, nNumberOfBytesToRead=0x15db2, lpNumberOfBytesRead=0x31e64c, lpOverlapped=0x0 | out: lpBuffer=0x37b1f68*, lpNumberOfBytesRead=0x31e64c*=0x15db2, lpOverlapped=0x0) returned 1 [0047.641] CloseHandle (hObject=0x274) returned 1 [0047.667] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\HUN\\DefaultID.pdf", nBufferLength=0x105, lpBuffer=0x31e090, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\HUN\\DefaultID.pdf", lpFilePart=0x0) returned 0x4d [0047.667] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e584) returned 1 [0047.667] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\HUN\\DefaultID.pdf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\idtemplates\\hun\\defaultid.pdf"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x274 [0047.668] GetFileType (hFile=0x274) returned 0x1 [0047.668] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e580) returned 1 [0047.668] GetFileType (hFile=0x274) returned 0x1 [0047.668] WriteFile (in: hFile=0x274, lpBuffer=0x381f458*, nNumberOfBytesToWrite=0x15dc0, lpNumberOfBytesWritten=0x31e640, lpOverlapped=0x0 | out: lpBuffer=0x381f458*, lpNumberOfBytesWritten=0x31e640*=0x15dc0, lpOverlapped=0x0) returned 1 [0047.670] CloseHandle (hObject=0x274) returned 1 [0047.670] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\HUN\\DefaultID.pdf", nBufferLength=0x105, lpBuffer=0x31e1c4, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\HUN\\DefaultID.pdf", lpFilePart=0x0) returned 0x4d [0047.670] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\HUN\\DefaultID.pdf", nBufferLength=0x105, lpBuffer=0x31e1c4, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\HUN\\DefaultID.pdf", lpFilePart=0x0) returned 0x4d [0047.671] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e624) returned 1 [0047.671] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\HUN\\DefaultID.pdf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\idtemplates\\hun\\defaultid.pdf"), fInfoLevelId=0x0, lpFileInformation=0x31e6a0 | out: lpFileInformation=0x31e6a0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9b058100, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x80a2abc0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0xffdd0da0, ftLastWriteTime.dwHighDateTime=0x1d6eb7e, nFileSizeHigh=0x0, nFileSizeLow=0x15dc0)) returned 1 [0047.671] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e620) returned 1 [0047.671] MoveFileW (lpExistingFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\HUN\\DefaultID.pdf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\idtemplates\\hun\\defaultid.pdf"), lpNewFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\HUN\\DefaultID.pdf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\idtemplates\\hun\\defaultid.pdf")) returned 1 [0047.671] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e6cc) returned 1 [0047.671] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\ITA", nBufferLength=0x105, lpBuffer=0x31e1d4, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\ITA", lpFilePart=0x0) returned 0x3f [0047.671] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\ITA\\", nBufferLength=0x105, lpBuffer=0x31e1a8, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\ITA\\", lpFilePart=0x0) returned 0x40 [0047.671] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\ITA\\*", lpFindFileData=0x31e3f4 | out: lpFindFileData=0x31e3f4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x805b4280, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x805da3e0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x805da3e0, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x381d40 [0047.672] FindNextFileW (in: hFindFile=0x381d40, lpFindFileData=0x31e404 | out: lpFindFileData=0x31e404*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x805b4280, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x805da3e0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x805da3e0, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0047.672] FindNextFileW (in: hFindFile=0x381d40, lpFindFileData=0x31e404 | out: lpFindFileData=0x31e404*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9640cd00, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x805b4280, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9640cd00, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x10913, dwReserved0=0x0, dwReserved1=0x0, cFileName="AdobeID.pdf", cAlternateFileName="")) returned 1 [0047.672] FindNextFileW (in: hFindFile=0x381d40, lpFindFileData=0x31e404 | out: lpFindFileData=0x31e404*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9640cd00, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x805da3e0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9640cd00, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x103f8, dwReserved0=0x0, dwReserved1=0x0, cFileName="DefaultID.pdf", cAlternateFileName="DEFAUL~1.PDF")) returned 1 [0047.672] FindNextFileW (in: hFindFile=0x381d40, lpFindFileData=0x31e404 | out: lpFindFileData=0x31e404*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0047.672] FindClose (in: hFindFile=0x381d40 | out: hFindFile=0x381d40) returned 1 [0047.672] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e68c) returned 1 [0047.672] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e698) returned 1 [0047.672] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e6cc) returned 1 [0047.672] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\ITA", nBufferLength=0x105, lpBuffer=0x31e1d4, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\ITA", lpFilePart=0x0) returned 0x3f [0047.672] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\ITA\\", nBufferLength=0x105, lpBuffer=0x31e1a8, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\ITA\\", lpFilePart=0x0) returned 0x40 [0047.672] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\ITA\\*", lpFindFileData=0x31e3f4 | out: lpFindFileData=0x31e3f4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x805b4280, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x805da3e0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x805da3e0, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x381d40 [0047.673] FindNextFileW (in: hFindFile=0x381d40, lpFindFileData=0x31e404 | out: lpFindFileData=0x31e404*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x805b4280, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x805da3e0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x805da3e0, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0047.673] FindNextFileW (in: hFindFile=0x381d40, lpFindFileData=0x31e404 | out: lpFindFileData=0x31e404*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9640cd00, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x805b4280, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9640cd00, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x10913, dwReserved0=0x0, dwReserved1=0x0, cFileName="AdobeID.pdf", cAlternateFileName="")) returned 1 [0047.673] FindNextFileW (in: hFindFile=0x381d40, lpFindFileData=0x31e404 | out: lpFindFileData=0x31e404*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9640cd00, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x805da3e0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9640cd00, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x103f8, dwReserved0=0x0, dwReserved1=0x0, cFileName="DefaultID.pdf", cAlternateFileName="DEFAUL~1.PDF")) returned 1 [0047.673] FindNextFileW (in: hFindFile=0x381d40, lpFindFileData=0x31e404 | out: lpFindFileData=0x31e404*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9640cd00, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x805da3e0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9640cd00, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x103f8, dwReserved0=0x0, dwReserved1=0x0, cFileName="DefaultID.pdf", cAlternateFileName="DEFAUL~1.PDF")) returned 0 [0047.673] FindClose (in: hFindFile=0x381d40 | out: hFindFile=0x381d40) returned 1 [0047.673] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e68c) returned 1 [0047.673] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e698) returned 1 [0047.673] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\ITA\\AdobeID.pdf", nBufferLength=0x105, lpBuffer=0x31e0a4, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\ITA\\AdobeID.pdf", lpFilePart=0x0) returned 0x4b [0047.673] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e598) returned 1 [0047.673] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\ITA\\AdobeID.pdf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\idtemplates\\ita\\adobeid.pdf"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x274 [0047.674] GetFileType (hFile=0x274) returned 0x1 [0047.674] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e594) returned 1 [0047.674] GetFileType (hFile=0x274) returned 0x1 [0047.674] GetFileSize (in: hFile=0x274, lpFileSizeHigh=0x31e6a0 | out: lpFileSizeHigh=0x31e6a0*=0x0) returned 0x10913 [0047.674] ReadFile (in: hFile=0x274, lpBuffer=0x2766930, nNumberOfBytesToRead=0x10913, lpNumberOfBytesRead=0x31e64c, lpOverlapped=0x0 | out: lpBuffer=0x2766930*, lpNumberOfBytesRead=0x31e64c*=0x10913, lpOverlapped=0x0) returned 1 [0047.676] CloseHandle (hObject=0x274) returned 1 [0047.691] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\ITA\\AdobeID.pdf", nBufferLength=0x105, lpBuffer=0x31e090, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\ITA\\AdobeID.pdf", lpFilePart=0x0) returned 0x4b [0047.692] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e584) returned 1 [0047.692] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\ITA\\AdobeID.pdf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\idtemplates\\ita\\adobeid.pdf"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x274 [0047.693] GetFileType (hFile=0x274) returned 0x1 [0047.693] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e580) returned 1 [0047.693] GetFileType (hFile=0x274) returned 0x1 [0047.693] WriteFile (in: hFile=0x274, lpBuffer=0x27e528c*, nNumberOfBytesToWrite=0x10920, lpNumberOfBytesWritten=0x31e640, lpOverlapped=0x0 | out: lpBuffer=0x27e528c*, lpNumberOfBytesWritten=0x31e640*=0x10920, lpOverlapped=0x0) returned 1 [0047.694] CloseHandle (hObject=0x274) returned 1 [0047.695] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\ITA\\AdobeID.pdf", nBufferLength=0x105, lpBuffer=0x31e1c4, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\ITA\\AdobeID.pdf", lpFilePart=0x0) returned 0x4b [0047.695] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\ITA\\AdobeID.pdf", nBufferLength=0x105, lpBuffer=0x31e1c4, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\ITA\\AdobeID.pdf", lpFilePart=0x0) returned 0x4b [0047.695] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e624) returned 1 [0047.695] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\ITA\\AdobeID.pdf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\idtemplates\\ita\\adobeid.pdf"), fInfoLevelId=0x0, lpFileInformation=0x31e6a0 | out: lpFileInformation=0x31e6a0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9640cd00, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x805b4280, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0xffe1d060, ftLastWriteTime.dwHighDateTime=0x1d6eb7e, nFileSizeHigh=0x0, nFileSizeLow=0x10920)) returned 1 [0047.695] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e620) returned 1 [0047.695] MoveFileW (lpExistingFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\ITA\\AdobeID.pdf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\idtemplates\\ita\\adobeid.pdf"), lpNewFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\ITA\\AdobeID.pdf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\idtemplates\\ita\\adobeid.pdf")) returned 1 [0047.695] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\ITA\\DefaultID.pdf", nBufferLength=0x105, lpBuffer=0x31e0a4, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\ITA\\DefaultID.pdf", lpFilePart=0x0) returned 0x4d [0047.695] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e598) returned 1 [0047.695] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\ITA\\DefaultID.pdf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\idtemplates\\ita\\defaultid.pdf"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x274 [0047.695] GetFileType (hFile=0x274) returned 0x1 [0047.695] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e594) returned 1 [0047.696] GetFileType (hFile=0x274) returned 0x1 [0047.696] GetFileSize (in: hFile=0x274, lpFileSizeHigh=0x31e6a0 | out: lpFileSizeHigh=0x31e6a0*=0x0) returned 0x103f8 [0047.696] ReadFile (in: hFile=0x274, lpBuffer=0x27f5f68, nNumberOfBytesToRead=0x103f8, lpNumberOfBytesRead=0x31e64c, lpOverlapped=0x0 | out: lpBuffer=0x27f5f68*, lpNumberOfBytesRead=0x31e64c*=0x103f8, lpOverlapped=0x0) returned 1 [0047.697] CloseHandle (hObject=0x274) returned 1 [0047.712] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\ITA\\DefaultID.pdf", nBufferLength=0x105, lpBuffer=0x31e090, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\ITA\\DefaultID.pdf", lpFilePart=0x0) returned 0x4d [0047.712] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e584) returned 1 [0047.712] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\ITA\\DefaultID.pdf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\idtemplates\\ita\\defaultid.pdf"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x274 [0047.714] GetFileType (hFile=0x274) returned 0x1 [0047.714] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e580) returned 1 [0047.714] GetFileType (hFile=0x274) returned 0x1 [0047.714] WriteFile (in: hFile=0x274, lpBuffer=0x2873960*, nNumberOfBytesToWrite=0x10400, lpNumberOfBytesWritten=0x31e640, lpOverlapped=0x0 | out: lpBuffer=0x2873960*, lpNumberOfBytesWritten=0x31e640*=0x10400, lpOverlapped=0x0) returned 1 [0047.715] CloseHandle (hObject=0x274) returned 1 [0047.715] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\ITA\\DefaultID.pdf", nBufferLength=0x105, lpBuffer=0x31e1c4, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\ITA\\DefaultID.pdf", lpFilePart=0x0) returned 0x4d [0047.715] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\ITA\\DefaultID.pdf", nBufferLength=0x105, lpBuffer=0x31e1c4, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\ITA\\DefaultID.pdf", lpFilePart=0x0) returned 0x4d [0047.716] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e624) returned 1 [0047.716] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\ITA\\DefaultID.pdf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\idtemplates\\ita\\defaultid.pdf"), fInfoLevelId=0x0, lpFileInformation=0x31e6a0 | out: lpFileInformation=0x31e6a0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9640cd00, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x805da3e0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0xffe431c0, ftLastWriteTime.dwHighDateTime=0x1d6eb7e, nFileSizeHigh=0x0, nFileSizeLow=0x10400)) returned 1 [0047.716] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e620) returned 1 [0047.716] MoveFileW (lpExistingFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\ITA\\DefaultID.pdf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\idtemplates\\ita\\defaultid.pdf"), lpNewFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\ITA\\DefaultID.pdf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\idtemplates\\ita\\defaultid.pdf")) returned 1 [0047.716] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e6cc) returned 1 [0047.716] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\JPN", nBufferLength=0x105, lpBuffer=0x31e1d4, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\JPN", lpFilePart=0x0) returned 0x3f [0047.719] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\JPN\\", nBufferLength=0x105, lpBuffer=0x31e1a8, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\JPN\\", lpFilePart=0x0) returned 0x40 [0047.719] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\JPN\\*", lpFindFileData=0x31e3f4 | out: lpFindFileData=0x31e3f4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x805da3e0, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x805da3e0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x805da3e0, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x381d80 [0047.719] FindNextFileW (in: hFindFile=0x381d80, lpFindFileData=0x31e404 | out: lpFindFileData=0x31e404*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x805da3e0, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x805da3e0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x805da3e0, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0047.719] FindNextFileW (in: hFindFile=0x381d80, lpFindFileData=0x31e404 | out: lpFindFileData=0x31e404*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x950fa000, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x805da3e0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x950fa000, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x5944, dwReserved0=0x0, dwReserved1=0x0, cFileName="AdobeID.pdf", cAlternateFileName="")) returned 1 [0047.719] FindNextFileW (in: hFindFile=0x381d80, lpFindFileData=0x31e404 | out: lpFindFileData=0x31e404*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9640cd00, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x805da3e0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9640cd00, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x5404, dwReserved0=0x0, dwReserved1=0x0, cFileName="DefaultID.pdf", cAlternateFileName="DEFAUL~1.PDF")) returned 1 [0047.719] FindNextFileW (in: hFindFile=0x381d80, lpFindFileData=0x31e404 | out: lpFindFileData=0x31e404*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0047.719] FindClose (in: hFindFile=0x381d80 | out: hFindFile=0x381d80) returned 1 [0047.720] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e68c) returned 1 [0047.720] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e698) returned 1 [0047.720] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e6cc) returned 1 [0047.720] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\JPN", nBufferLength=0x105, lpBuffer=0x31e1d4, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\JPN", lpFilePart=0x0) returned 0x3f [0047.720] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\JPN\\", nBufferLength=0x105, lpBuffer=0x31e1a8, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\JPN\\", lpFilePart=0x0) returned 0x40 [0047.720] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\JPN\\*", lpFindFileData=0x31e3f4 | out: lpFindFileData=0x31e3f4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x805da3e0, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x805da3e0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x805da3e0, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x381d80 [0047.720] FindNextFileW (in: hFindFile=0x381d80, lpFindFileData=0x31e404 | out: lpFindFileData=0x31e404*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x805da3e0, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x805da3e0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x805da3e0, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0047.720] FindNextFileW (in: hFindFile=0x381d80, lpFindFileData=0x31e404 | out: lpFindFileData=0x31e404*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x950fa000, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x805da3e0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x950fa000, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x5944, dwReserved0=0x0, dwReserved1=0x0, cFileName="AdobeID.pdf", cAlternateFileName="")) returned 1 [0047.720] FindNextFileW (in: hFindFile=0x381d80, lpFindFileData=0x31e404 | out: lpFindFileData=0x31e404*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9640cd00, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x805da3e0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9640cd00, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x5404, dwReserved0=0x0, dwReserved1=0x0, cFileName="DefaultID.pdf", cAlternateFileName="DEFAUL~1.PDF")) returned 1 [0047.721] FindNextFileW (in: hFindFile=0x381d80, lpFindFileData=0x31e404 | out: lpFindFileData=0x31e404*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9640cd00, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x805da3e0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9640cd00, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x5404, dwReserved0=0x0, dwReserved1=0x0, cFileName="DefaultID.pdf", cAlternateFileName="DEFAUL~1.PDF")) returned 0 [0047.721] FindClose (in: hFindFile=0x381d80 | out: hFindFile=0x381d80) returned 1 [0047.721] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e68c) returned 1 [0047.721] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e698) returned 1 [0047.721] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\JPN\\AdobeID.pdf", nBufferLength=0x105, lpBuffer=0x31e0a4, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\JPN\\AdobeID.pdf", lpFilePart=0x0) returned 0x4b [0047.721] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e598) returned 1 [0047.721] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\JPN\\AdobeID.pdf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\idtemplates\\jpn\\adobeid.pdf"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x274 [0047.721] GetFileType (hFile=0x274) returned 0x1 [0047.721] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e594) returned 1 [0047.721] GetFileType (hFile=0x274) returned 0x1 [0047.721] GetFileSize (in: hFile=0x274, lpFileSizeHigh=0x31e6a0 | out: lpFileSizeHigh=0x31e6a0*=0x0) returned 0x5944 [0047.721] ReadFile (in: hFile=0x274, lpBuffer=0x2672bd0, nNumberOfBytesToRead=0x5944, lpNumberOfBytesRead=0x31e64c, lpOverlapped=0x0 | out: lpBuffer=0x2672bd0*, lpNumberOfBytesRead=0x31e64c*=0x5944, lpOverlapped=0x0) returned 1 [0047.729] CloseHandle (hObject=0x274) returned 1 [0047.768] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\JPN\\AdobeID.pdf", nBufferLength=0x105, lpBuffer=0x31e090, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\JPN\\AdobeID.pdf", lpFilePart=0x0) returned 0x4b [0047.768] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e584) returned 1 [0047.768] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\JPN\\AdobeID.pdf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\idtemplates\\jpn\\adobeid.pdf"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x274 [0047.769] GetFileType (hFile=0x274) returned 0x1 [0047.769] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e580) returned 1 [0047.769] GetFileType (hFile=0x274) returned 0x1 [0047.769] WriteFile (in: hFile=0x274, lpBuffer=0x26db9a0*, nNumberOfBytesToWrite=0x5950, lpNumberOfBytesWritten=0x31e640, lpOverlapped=0x0 | out: lpBuffer=0x26db9a0*, lpNumberOfBytesWritten=0x31e640*=0x5950, lpOverlapped=0x0) returned 1 [0047.770] CloseHandle (hObject=0x274) returned 1 [0047.770] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\JPN\\AdobeID.pdf", nBufferLength=0x105, lpBuffer=0x31e1c4, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\JPN\\AdobeID.pdf", lpFilePart=0x0) returned 0x4b [0047.770] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\JPN\\AdobeID.pdf", nBufferLength=0x105, lpBuffer=0x31e1c4, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\JPN\\AdobeID.pdf", lpFilePart=0x0) returned 0x4b [0047.770] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e624) returned 1 [0047.770] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\JPN\\AdobeID.pdf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\idtemplates\\jpn\\adobeid.pdf"), fInfoLevelId=0x0, lpFileInformation=0x31e6a0 | out: lpFileInformation=0x31e6a0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x950fa000, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x805da3e0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0xffedb740, ftLastWriteTime.dwHighDateTime=0x1d6eb7e, nFileSizeHigh=0x0, nFileSizeLow=0x5950)) returned 1 [0047.770] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e620) returned 1 [0047.770] MoveFileW (lpExistingFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\JPN\\AdobeID.pdf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\idtemplates\\jpn\\adobeid.pdf"), lpNewFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\JPN\\AdobeID.pdf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\idtemplates\\jpn\\adobeid.pdf")) returned 1 [0047.771] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\JPN\\DefaultID.pdf", nBufferLength=0x105, lpBuffer=0x31e0a4, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\JPN\\DefaultID.pdf", lpFilePart=0x0) returned 0x4d [0047.771] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e598) returned 1 [0047.771] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\JPN\\DefaultID.pdf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\idtemplates\\jpn\\defaultid.pdf"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x274 [0047.772] GetFileType (hFile=0x274) returned 0x1 [0047.772] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e594) returned 1 [0047.772] GetFileType (hFile=0x274) returned 0x1 [0047.772] GetFileSize (in: hFile=0x274, lpFileSizeHigh=0x31e6a0 | out: lpFileSizeHigh=0x31e6a0*=0x0) returned 0x5404 [0047.772] ReadFile (in: hFile=0x274, lpBuffer=0x26e16ac, nNumberOfBytesToRead=0x5404, lpNumberOfBytesRead=0x31e64c, lpOverlapped=0x0 | out: lpBuffer=0x26e16ac*, lpNumberOfBytesRead=0x31e64c*=0x5404, lpOverlapped=0x0) returned 1 [0047.773] CloseHandle (hObject=0x274) returned 1 [0047.787] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\JPN\\DefaultID.pdf", nBufferLength=0x105, lpBuffer=0x31e090, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\JPN\\DefaultID.pdf", lpFilePart=0x0) returned 0x4d [0047.787] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e584) returned 1 [0047.787] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\JPN\\DefaultID.pdf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\idtemplates\\jpn\\defaultid.pdf"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x274 [0047.790] GetFileType (hFile=0x274) returned 0x1 [0047.791] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e580) returned 1 [0047.791] GetFileType (hFile=0x274) returned 0x1 [0047.791] WriteFile (in: hFile=0x274, lpBuffer=0x27488e0*, nNumberOfBytesToWrite=0x5410, lpNumberOfBytesWritten=0x31e640, lpOverlapped=0x0 | out: lpBuffer=0x27488e0*, lpNumberOfBytesWritten=0x31e640*=0x5410, lpOverlapped=0x0) returned 1 [0047.792] CloseHandle (hObject=0x274) returned 1 [0047.792] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\JPN\\DefaultID.pdf", nBufferLength=0x105, lpBuffer=0x31e1c4, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\JPN\\DefaultID.pdf", lpFilePart=0x0) returned 0x4d [0047.792] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\JPN\\DefaultID.pdf", nBufferLength=0x105, lpBuffer=0x31e1c4, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\JPN\\DefaultID.pdf", lpFilePart=0x0) returned 0x4d [0047.792] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e624) returned 1 [0047.792] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\JPN\\DefaultID.pdf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\idtemplates\\jpn\\defaultid.pdf"), fInfoLevelId=0x0, lpFileInformation=0x31e6a0 | out: lpFileInformation=0x31e6a0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9640cd00, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x805da3e0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0xfff018a0, ftLastWriteTime.dwHighDateTime=0x1d6eb7e, nFileSizeHigh=0x0, nFileSizeLow=0x5410)) returned 1 [0047.792] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e620) returned 1 [0047.792] MoveFileW (lpExistingFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\JPN\\DefaultID.pdf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\idtemplates\\jpn\\defaultid.pdf"), lpNewFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\JPN\\DefaultID.pdf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\idtemplates\\jpn\\defaultid.pdf")) returned 1 [0047.792] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e6cc) returned 1 [0047.792] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\KOR", nBufferLength=0x105, lpBuffer=0x31e1d4, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\KOR", lpFilePart=0x0) returned 0x3f [0047.792] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\KOR\\", nBufferLength=0x105, lpBuffer=0x31e1a8, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\KOR\\", lpFilePart=0x0) returned 0x40 [0047.793] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\KOR\\*", lpFindFileData=0x31e3f4 | out: lpFindFileData=0x31e3f4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x805da3e0, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x805da3e0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x805da3e0, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x381c80 [0047.793] FindNextFileW (in: hFindFile=0x381c80, lpFindFileData=0x31e404 | out: lpFindFileData=0x31e404*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x805da3e0, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x805da3e0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x805da3e0, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0047.793] FindNextFileW (in: hFindFile=0x381c80, lpFindFileData=0x31e404 | out: lpFindFileData=0x31e404*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x98a32700, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x805da3e0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x98a32700, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x592a, dwReserved0=0x0, dwReserved1=0x0, cFileName="AdobeID.pdf", cAlternateFileName="")) returned 1 [0047.793] FindNextFileW (in: hFindFile=0x381c80, lpFindFileData=0x31e404 | out: lpFindFileData=0x31e404*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x98a32700, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x805da3e0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x98a32700, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x5416, dwReserved0=0x0, dwReserved1=0x0, cFileName="DefaultID.pdf", cAlternateFileName="DEFAUL~1.PDF")) returned 1 [0047.793] FindNextFileW (in: hFindFile=0x381c80, lpFindFileData=0x31e404 | out: lpFindFileData=0x31e404*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0047.793] FindClose (in: hFindFile=0x381c80 | out: hFindFile=0x381c80) returned 1 [0047.793] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e68c) returned 1 [0047.793] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e698) returned 1 [0047.793] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e6cc) returned 1 [0047.793] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\KOR", nBufferLength=0x105, lpBuffer=0x31e1d4, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\KOR", lpFilePart=0x0) returned 0x3f [0047.793] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\KOR\\", nBufferLength=0x105, lpBuffer=0x31e1a8, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\KOR\\", lpFilePart=0x0) returned 0x40 [0047.794] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\KOR\\*", lpFindFileData=0x31e3f4 | out: lpFindFileData=0x31e3f4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x805da3e0, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x805da3e0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x805da3e0, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x381c80 [0047.794] FindNextFileW (in: hFindFile=0x381c80, lpFindFileData=0x31e404 | out: lpFindFileData=0x31e404*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x805da3e0, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x805da3e0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x805da3e0, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0047.794] FindNextFileW (in: hFindFile=0x381c80, lpFindFileData=0x31e404 | out: lpFindFileData=0x31e404*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x98a32700, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x805da3e0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x98a32700, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x592a, dwReserved0=0x0, dwReserved1=0x0, cFileName="AdobeID.pdf", cAlternateFileName="")) returned 1 [0047.794] FindNextFileW (in: hFindFile=0x381c80, lpFindFileData=0x31e404 | out: lpFindFileData=0x31e404*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x98a32700, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x805da3e0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x98a32700, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x5416, dwReserved0=0x0, dwReserved1=0x0, cFileName="DefaultID.pdf", cAlternateFileName="DEFAUL~1.PDF")) returned 1 [0047.794] FindNextFileW (in: hFindFile=0x381c80, lpFindFileData=0x31e404 | out: lpFindFileData=0x31e404*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x98a32700, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x805da3e0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x98a32700, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x5416, dwReserved0=0x0, dwReserved1=0x0, cFileName="DefaultID.pdf", cAlternateFileName="DEFAUL~1.PDF")) returned 0 [0047.794] FindClose (in: hFindFile=0x381c80 | out: hFindFile=0x381c80) returned 1 [0047.794] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e68c) returned 1 [0047.794] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e698) returned 1 [0047.794] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\KOR\\AdobeID.pdf", nBufferLength=0x105, lpBuffer=0x31e0a4, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\KOR\\AdobeID.pdf", lpFilePart=0x0) returned 0x4b [0047.794] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e598) returned 1 [0047.794] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\KOR\\AdobeID.pdf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\idtemplates\\kor\\adobeid.pdf"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x274 [0047.795] GetFileType (hFile=0x274) returned 0x1 [0047.795] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e594) returned 1 [0047.795] GetFileType (hFile=0x274) returned 0x1 [0047.795] GetFileSize (in: hFile=0x274, lpFileSizeHigh=0x31e6a0 | out: lpFileSizeHigh=0x31e6a0*=0x0) returned 0x592a [0047.795] ReadFile (in: hFile=0x274, lpBuffer=0x274fc50, nNumberOfBytesToRead=0x592a, lpNumberOfBytesRead=0x31e64c, lpOverlapped=0x0 | out: lpBuffer=0x274fc50*, lpNumberOfBytesRead=0x31e64c*=0x592a, lpOverlapped=0x0) returned 1 [0047.796] CloseHandle (hObject=0x274) returned 1 [0047.810] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\KOR\\AdobeID.pdf", nBufferLength=0x105, lpBuffer=0x31e090, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\KOR\\AdobeID.pdf", lpFilePart=0x0) returned 0x4b [0047.810] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e584) returned 1 [0047.810] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\KOR\\AdobeID.pdf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\idtemplates\\kor\\adobeid.pdf"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x274 [0047.811] GetFileType (hFile=0x274) returned 0x1 [0047.811] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e580) returned 1 [0047.811] GetFileType (hFile=0x274) returned 0x1 [0047.811] WriteFile (in: hFile=0x274, lpBuffer=0x27b8828*, nNumberOfBytesToWrite=0x5930, lpNumberOfBytesWritten=0x31e640, lpOverlapped=0x0 | out: lpBuffer=0x27b8828*, lpNumberOfBytesWritten=0x31e640*=0x5930, lpOverlapped=0x0) returned 1 [0047.812] CloseHandle (hObject=0x274) returned 1 [0047.812] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\KOR\\AdobeID.pdf", nBufferLength=0x105, lpBuffer=0x31e1c4, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\KOR\\AdobeID.pdf", lpFilePart=0x0) returned 0x4b [0047.812] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\KOR\\AdobeID.pdf", nBufferLength=0x105, lpBuffer=0x31e1c4, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\KOR\\AdobeID.pdf", lpFilePart=0x0) returned 0x4b [0047.813] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e624) returned 1 [0047.813] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\KOR\\AdobeID.pdf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\idtemplates\\kor\\adobeid.pdf"), fInfoLevelId=0x0, lpFileInformation=0x31e6a0 | out: lpFileInformation=0x31e6a0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x98a32700, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x805da3e0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0xfff27a00, ftLastWriteTime.dwHighDateTime=0x1d6eb7e, nFileSizeHigh=0x0, nFileSizeLow=0x5930)) returned 1 [0047.813] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e620) returned 1 [0047.813] MoveFileW (lpExistingFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\KOR\\AdobeID.pdf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\idtemplates\\kor\\adobeid.pdf"), lpNewFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\KOR\\AdobeID.pdf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\idtemplates\\kor\\adobeid.pdf")) returned 1 [0047.813] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\KOR\\DefaultID.pdf", nBufferLength=0x105, lpBuffer=0x31e0a4, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\KOR\\DefaultID.pdf", lpFilePart=0x0) returned 0x4d [0047.813] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e598) returned 1 [0047.813] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\KOR\\DefaultID.pdf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\idtemplates\\kor\\defaultid.pdf"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x274 [0047.813] GetFileType (hFile=0x274) returned 0x1 [0047.813] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e594) returned 1 [0047.813] GetFileType (hFile=0x274) returned 0x1 [0047.813] GetFileSize (in: hFile=0x274, lpFileSizeHigh=0x31e6a0 | out: lpFileSizeHigh=0x31e6a0*=0x0) returned 0x5416 [0047.814] ReadFile (in: hFile=0x274, lpBuffer=0x27be514, nNumberOfBytesToRead=0x5416, lpNumberOfBytesRead=0x31e64c, lpOverlapped=0x0 | out: lpBuffer=0x27be514*, lpNumberOfBytesRead=0x31e64c*=0x5416, lpOverlapped=0x0) returned 1 [0047.815] CloseHandle (hObject=0x274) returned 1 [0047.829] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\KOR\\DefaultID.pdf", nBufferLength=0x105, lpBuffer=0x31e090, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\KOR\\DefaultID.pdf", lpFilePart=0x0) returned 0x4d [0047.829] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e584) returned 1 [0047.829] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\KOR\\DefaultID.pdf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\idtemplates\\kor\\defaultid.pdf"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x274 [0047.830] GetFileType (hFile=0x274) returned 0x1 [0047.830] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e580) returned 1 [0047.830] GetFileType (hFile=0x274) returned 0x1 [0047.830] WriteFile (in: hFile=0x274, lpBuffer=0x282579c*, nNumberOfBytesToWrite=0x5420, lpNumberOfBytesWritten=0x31e640, lpOverlapped=0x0 | out: lpBuffer=0x282579c*, lpNumberOfBytesWritten=0x31e640*=0x5420, lpOverlapped=0x0) returned 1 [0047.831] CloseHandle (hObject=0x274) returned 1 [0047.831] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\KOR\\DefaultID.pdf", nBufferLength=0x105, lpBuffer=0x31e1c4, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\KOR\\DefaultID.pdf", lpFilePart=0x0) returned 0x4d [0047.831] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\KOR\\DefaultID.pdf", nBufferLength=0x105, lpBuffer=0x31e1c4, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\KOR\\DefaultID.pdf", lpFilePart=0x0) returned 0x4d [0047.831] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e624) returned 1 [0047.831] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\KOR\\DefaultID.pdf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\idtemplates\\kor\\defaultid.pdf"), fInfoLevelId=0x0, lpFileInformation=0x31e6a0 | out: lpFileInformation=0x31e6a0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x98a32700, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x805da3e0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0xfff73cc0, ftLastWriteTime.dwHighDateTime=0x1d6eb7e, nFileSizeHigh=0x0, nFileSizeLow=0x5420)) returned 1 [0047.831] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e620) returned 1 [0047.831] MoveFileW (lpExistingFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\KOR\\DefaultID.pdf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\idtemplates\\kor\\defaultid.pdf"), lpNewFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\KOR\\DefaultID.pdf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\idtemplates\\kor\\defaultid.pdf")) returned 1 [0047.832] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e6cc) returned 1 [0047.832] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\NLD", nBufferLength=0x105, lpBuffer=0x31e1d4, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\NLD", lpFilePart=0x0) returned 0x3f [0047.832] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\NLD\\", nBufferLength=0x105, lpBuffer=0x31e1a8, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\NLD\\", lpFilePart=0x0) returned 0x40 [0047.832] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\NLD\\*", lpFindFileData=0x31e3f4 | out: lpFindFileData=0x31e3f4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x805da3e0, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x805da3e0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x805da3e0, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x381d40 [0047.833] FindNextFileW (in: hFindFile=0x381d40, lpFindFileData=0x31e404 | out: lpFindFileData=0x31e404*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x805da3e0, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x805da3e0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x805da3e0, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0047.833] FindNextFileW (in: hFindFile=0x381d40, lpFindFileData=0x31e404 | out: lpFindFileData=0x31e404*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9640cd00, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x805da3e0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9640cd00, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x10929, dwReserved0=0x0, dwReserved1=0x0, cFileName="AdobeID.pdf", cAlternateFileName="")) returned 1 [0047.833] FindNextFileW (in: hFindFile=0x381d40, lpFindFileData=0x31e404 | out: lpFindFileData=0x31e404*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9640cd00, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x805da3e0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9640cd00, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x10405, dwReserved0=0x0, dwReserved1=0x0, cFileName="DefaultID.pdf", cAlternateFileName="DEFAUL~1.PDF")) returned 1 [0047.833] FindNextFileW (in: hFindFile=0x381d40, lpFindFileData=0x31e404 | out: lpFindFileData=0x31e404*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0047.833] FindClose (in: hFindFile=0x381d40 | out: hFindFile=0x381d40) returned 1 [0047.833] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e68c) returned 1 [0047.833] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e698) returned 1 [0047.833] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e6cc) returned 1 [0047.833] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\NLD", nBufferLength=0x105, lpBuffer=0x31e1d4, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\NLD", lpFilePart=0x0) returned 0x3f [0047.833] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\NLD\\", nBufferLength=0x105, lpBuffer=0x31e1a8, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\NLD\\", lpFilePart=0x0) returned 0x40 [0047.834] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\NLD\\*", lpFindFileData=0x31e3f4 | out: lpFindFileData=0x31e3f4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x805da3e0, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x805da3e0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x805da3e0, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x381d40 [0047.834] FindNextFileW (in: hFindFile=0x381d40, lpFindFileData=0x31e404 | out: lpFindFileData=0x31e404*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x805da3e0, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x805da3e0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x805da3e0, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0047.834] FindNextFileW (in: hFindFile=0x381d40, lpFindFileData=0x31e404 | out: lpFindFileData=0x31e404*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9640cd00, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x805da3e0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9640cd00, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x10929, dwReserved0=0x0, dwReserved1=0x0, cFileName="AdobeID.pdf", cAlternateFileName="")) returned 1 [0047.834] FindNextFileW (in: hFindFile=0x381d40, lpFindFileData=0x31e404 | out: lpFindFileData=0x31e404*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9640cd00, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x805da3e0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9640cd00, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x10405, dwReserved0=0x0, dwReserved1=0x0, cFileName="DefaultID.pdf", cAlternateFileName="DEFAUL~1.PDF")) returned 1 [0047.834] FindNextFileW (in: hFindFile=0x381d40, lpFindFileData=0x31e404 | out: lpFindFileData=0x31e404*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9640cd00, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x805da3e0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9640cd00, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x10405, dwReserved0=0x0, dwReserved1=0x0, cFileName="DefaultID.pdf", cAlternateFileName="DEFAUL~1.PDF")) returned 0 [0047.834] FindClose (in: hFindFile=0x381d40 | out: hFindFile=0x381d40) returned 1 [0047.834] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e68c) returned 1 [0047.834] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e698) returned 1 [0047.834] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\NLD\\AdobeID.pdf", nBufferLength=0x105, lpBuffer=0x31e0a4, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\NLD\\AdobeID.pdf", lpFilePart=0x0) returned 0x4b [0047.834] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e598) returned 1 [0047.834] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\NLD\\AdobeID.pdf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\idtemplates\\nld\\adobeid.pdf"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x274 [0047.835] GetFileType (hFile=0x274) returned 0x1 [0047.835] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e594) returned 1 [0047.835] GetFileType (hFile=0x274) returned 0x1 [0047.835] GetFileSize (in: hFile=0x274, lpFileSizeHigh=0x31e6a0 | out: lpFileSizeHigh=0x31e6a0*=0x0) returned 0x10929 [0047.835] ReadFile (in: hFile=0x274, lpBuffer=0x282cb1c, nNumberOfBytesToRead=0x10929, lpNumberOfBytesRead=0x31e64c, lpOverlapped=0x0 | out: lpBuffer=0x282cb1c*, lpNumberOfBytesRead=0x31e64c*=0x10929, lpOverlapped=0x0) returned 1 [0047.882] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\NLD\\AdobeID.pdf", nBufferLength=0x105, lpBuffer=0x31e090, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\NLD\\AdobeID.pdf", lpFilePart=0x0) returned 0x4b [0047.882] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e584) returned 1 [0047.882] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\NLD\\AdobeID.pdf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\idtemplates\\nld\\adobeid.pdf"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x274 [0047.883] GetFileType (hFile=0x274) returned 0x1 [0047.883] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e580) returned 1 [0047.883] GetFileType (hFile=0x274) returned 0x1 [0047.883] WriteFile (in: hFile=0x274, lpBuffer=0x26bc268*, nNumberOfBytesToWrite=0x10930, lpNumberOfBytesWritten=0x31e640, lpOverlapped=0x0 | out: lpBuffer=0x26bc268*, lpNumberOfBytesWritten=0x31e640*=0x10930, lpOverlapped=0x0) returned 1 [0047.885] CloseHandle (hObject=0x274) returned 1 [0047.885] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\NLD\\AdobeID.pdf", nBufferLength=0x105, lpBuffer=0x31e1c4, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\NLD\\AdobeID.pdf", lpFilePart=0x0) returned 0x4b [0047.885] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\NLD\\AdobeID.pdf", nBufferLength=0x105, lpBuffer=0x31e1c4, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\NLD\\AdobeID.pdf", lpFilePart=0x0) returned 0x4b [0047.885] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e624) returned 1 [0047.885] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\NLD\\AdobeID.pdf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\idtemplates\\nld\\adobeid.pdf"), fInfoLevelId=0x0, lpFileInformation=0x31e6a0 | out: lpFileInformation=0x31e6a0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9640cd00, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x805da3e0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0xfffe60e0, ftLastWriteTime.dwHighDateTime=0x1d6eb7e, nFileSizeHigh=0x0, nFileSizeLow=0x10930)) returned 1 [0047.885] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e620) returned 1 [0047.885] MoveFileW (lpExistingFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\NLD\\AdobeID.pdf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\idtemplates\\nld\\adobeid.pdf"), lpNewFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\NLD\\AdobeID.pdf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\idtemplates\\nld\\adobeid.pdf")) returned 1 [0047.886] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\NLD\\DefaultID.pdf", nBufferLength=0x105, lpBuffer=0x31e0a4, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\NLD\\DefaultID.pdf", lpFilePart=0x0) returned 0x4d [0047.886] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e598) returned 1 [0047.886] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\NLD\\DefaultID.pdf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\idtemplates\\nld\\defaultid.pdf"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x274 [0047.886] GetFileType (hFile=0x274) returned 0x1 [0047.886] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e594) returned 1 [0047.886] GetFileType (hFile=0x274) returned 0x1 [0047.886] GetFileSize (in: hFile=0x274, lpFileSizeHigh=0x31e6a0 | out: lpFileSizeHigh=0x31e6a0*=0x0) returned 0x10405 [0047.886] ReadFile (in: hFile=0x274, lpBuffer=0x26ccf54, nNumberOfBytesToRead=0x10405, lpNumberOfBytesRead=0x31e64c, lpOverlapped=0x0 | out: lpBuffer=0x26ccf54*, lpNumberOfBytesRead=0x31e64c*=0x10405, lpOverlapped=0x0) returned 1 [0047.889] CloseHandle (hObject=0x274) returned 1 [0047.905] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\NLD\\DefaultID.pdf", nBufferLength=0x105, lpBuffer=0x31e090, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\NLD\\DefaultID.pdf", lpFilePart=0x0) returned 0x4d [0047.905] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e584) returned 1 [0047.905] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\NLD\\DefaultID.pdf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\idtemplates\\nld\\defaultid.pdf"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x274 [0047.906] GetFileType (hFile=0x274) returned 0x1 [0047.906] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e580) returned 1 [0047.906] GetFileType (hFile=0x274) returned 0x1 [0047.906] WriteFile (in: hFile=0x274, lpBuffer=0x274aadc*, nNumberOfBytesToWrite=0x10410, lpNumberOfBytesWritten=0x31e640, lpOverlapped=0x0 | out: lpBuffer=0x274aadc*, lpNumberOfBytesWritten=0x31e640*=0x10410, lpOverlapped=0x0) returned 1 [0047.907] CloseHandle (hObject=0x274) returned 1 [0047.908] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\NLD\\DefaultID.pdf", nBufferLength=0x105, lpBuffer=0x31e1c4, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\NLD\\DefaultID.pdf", lpFilePart=0x0) returned 0x4d [0047.908] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\NLD\\DefaultID.pdf", nBufferLength=0x105, lpBuffer=0x31e1c4, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\NLD\\DefaultID.pdf", lpFilePart=0x0) returned 0x4d [0047.908] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e624) returned 1 [0047.908] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\NLD\\DefaultID.pdf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\idtemplates\\nld\\defaultid.pdf"), fInfoLevelId=0x0, lpFileInformation=0x31e6a0 | out: lpFileInformation=0x31e6a0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9640cd00, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x805da3e0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0xc240, ftLastWriteTime.dwHighDateTime=0x1d6eb7f, nFileSizeHigh=0x0, nFileSizeLow=0x10410)) returned 1 [0047.908] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e620) returned 1 [0047.908] MoveFileW (lpExistingFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\NLD\\DefaultID.pdf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\idtemplates\\nld\\defaultid.pdf"), lpNewFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\NLD\\DefaultID.pdf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\idtemplates\\nld\\defaultid.pdf")) returned 1 [0047.908] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e6cc) returned 1 [0047.908] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\NOR", nBufferLength=0x105, lpBuffer=0x31e1d4, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\NOR", lpFilePart=0x0) returned 0x3f [0047.908] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\NOR\\", nBufferLength=0x105, lpBuffer=0x31e1a8, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\NOR\\", lpFilePart=0x0) returned 0x40 [0047.909] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\NOR\\*", lpFindFileData=0x31e3f4 | out: lpFindFileData=0x31e3f4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x805da3e0, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x805da3e0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x805da3e0, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x381dc0 [0047.909] FindNextFileW (in: hFindFile=0x381dc0, lpFindFileData=0x31e404 | out: lpFindFileData=0x31e404*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x805da3e0, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x805da3e0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x805da3e0, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0047.909] FindNextFileW (in: hFindFile=0x381dc0, lpFindFileData=0x31e404 | out: lpFindFileData=0x31e404*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9640cd00, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x805da3e0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9640cd00, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x10956, dwReserved0=0x0, dwReserved1=0x0, cFileName="AdobeID.pdf", cAlternateFileName="")) returned 1 [0047.909] FindNextFileW (in: hFindFile=0x381dc0, lpFindFileData=0x31e404 | out: lpFindFileData=0x31e404*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x98a32700, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x805da3e0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x98a32700, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x1043a, dwReserved0=0x0, dwReserved1=0x0, cFileName="DefaultID.pdf", cAlternateFileName="DEFAUL~1.PDF")) returned 1 [0047.909] FindNextFileW (in: hFindFile=0x381dc0, lpFindFileData=0x31e404 | out: lpFindFileData=0x31e404*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0047.909] FindClose (in: hFindFile=0x381dc0 | out: hFindFile=0x381dc0) returned 1 [0047.909] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e68c) returned 1 [0047.909] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e698) returned 1 [0047.909] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e6cc) returned 1 [0047.909] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\NOR", nBufferLength=0x105, lpBuffer=0x31e1d4, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\NOR", lpFilePart=0x0) returned 0x3f [0047.910] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\NOR\\", nBufferLength=0x105, lpBuffer=0x31e1a8, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\NOR\\", lpFilePart=0x0) returned 0x40 [0047.910] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\NOR\\*", lpFindFileData=0x31e3f4 | out: lpFindFileData=0x31e3f4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x805da3e0, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x805da3e0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x805da3e0, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x381dc0 [0047.910] FindNextFileW (in: hFindFile=0x381dc0, lpFindFileData=0x31e404 | out: lpFindFileData=0x31e404*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x805da3e0, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x805da3e0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x805da3e0, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0047.910] FindNextFileW (in: hFindFile=0x381dc0, lpFindFileData=0x31e404 | out: lpFindFileData=0x31e404*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9640cd00, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x805da3e0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9640cd00, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x10956, dwReserved0=0x0, dwReserved1=0x0, cFileName="AdobeID.pdf", cAlternateFileName="")) returned 1 [0047.910] FindNextFileW (in: hFindFile=0x381dc0, lpFindFileData=0x31e404 | out: lpFindFileData=0x31e404*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x98a32700, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x805da3e0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x98a32700, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x1043a, dwReserved0=0x0, dwReserved1=0x0, cFileName="DefaultID.pdf", cAlternateFileName="DEFAUL~1.PDF")) returned 1 [0047.910] FindNextFileW (in: hFindFile=0x381dc0, lpFindFileData=0x31e404 | out: lpFindFileData=0x31e404*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x98a32700, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x805da3e0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x98a32700, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x1043a, dwReserved0=0x0, dwReserved1=0x0, cFileName="DefaultID.pdf", cAlternateFileName="DEFAUL~1.PDF")) returned 0 [0047.910] FindClose (in: hFindFile=0x381dc0 | out: hFindFile=0x381dc0) returned 1 [0047.910] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e68c) returned 1 [0047.910] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e698) returned 1 [0047.911] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\NOR\\AdobeID.pdf", nBufferLength=0x105, lpBuffer=0x31e0a4, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\NOR\\AdobeID.pdf", lpFilePart=0x0) returned 0x4b [0047.911] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e598) returned 1 [0047.911] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\NOR\\AdobeID.pdf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\idtemplates\\nor\\adobeid.pdf"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x274 [0047.911] GetFileType (hFile=0x274) returned 0x1 [0047.911] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e594) returned 1 [0047.911] GetFileType (hFile=0x274) returned 0x1 [0047.912] GetFileSize (in: hFile=0x274, lpFileSizeHigh=0x31e6a0 | out: lpFileSizeHigh=0x31e6a0*=0x0) returned 0x10956 [0047.912] ReadFile (in: hFile=0x274, lpBuffer=0x275ce4c, nNumberOfBytesToRead=0x10956, lpNumberOfBytesRead=0x31e64c, lpOverlapped=0x0 | out: lpBuffer=0x275ce4c*, lpNumberOfBytesRead=0x31e64c*=0x10956, lpOverlapped=0x0) returned 1 [0047.913] CloseHandle (hObject=0x274) returned 1 [0047.928] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\NOR\\AdobeID.pdf", nBufferLength=0x105, lpBuffer=0x31e090, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\NOR\\AdobeID.pdf", lpFilePart=0x0) returned 0x4b [0047.929] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e584) returned 1 [0047.929] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\NOR\\AdobeID.pdf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\idtemplates\\nor\\adobeid.pdf"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x274 [0047.930] GetFileType (hFile=0x274) returned 0x1 [0047.930] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e580) returned 1 [0047.930] GetFileType (hFile=0x274) returned 0x1 [0047.930] WriteFile (in: hFile=0x274, lpBuffer=0x27db868*, nNumberOfBytesToWrite=0x10960, lpNumberOfBytesWritten=0x31e640, lpOverlapped=0x0 | out: lpBuffer=0x27db868*, lpNumberOfBytesWritten=0x31e640*=0x10960, lpOverlapped=0x0) returned 1 [0047.931] CloseHandle (hObject=0x274) returned 1 [0047.932] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\NOR\\AdobeID.pdf", nBufferLength=0x105, lpBuffer=0x31e1c4, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\NOR\\AdobeID.pdf", lpFilePart=0x0) returned 0x4b [0047.932] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\NOR\\AdobeID.pdf", nBufferLength=0x105, lpBuffer=0x31e1c4, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\NOR\\AdobeID.pdf", lpFilePart=0x0) returned 0x4b [0047.932] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e624) returned 1 [0047.932] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\NOR\\AdobeID.pdf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\idtemplates\\nor\\adobeid.pdf"), fInfoLevelId=0x0, lpFileInformation=0x31e6a0 | out: lpFileInformation=0x31e6a0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9640cd00, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x805da3e0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x58500, ftLastWriteTime.dwHighDateTime=0x1d6eb7f, nFileSizeHigh=0x0, nFileSizeLow=0x10960)) returned 1 [0047.932] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e620) returned 1 [0047.932] MoveFileW (lpExistingFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\NOR\\AdobeID.pdf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\idtemplates\\nor\\adobeid.pdf"), lpNewFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\NOR\\AdobeID.pdf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\idtemplates\\nor\\adobeid.pdf")) returned 1 [0047.932] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\NOR\\DefaultID.pdf", nBufferLength=0x105, lpBuffer=0x31e0a4, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\NOR\\DefaultID.pdf", lpFilePart=0x0) returned 0x4d [0047.932] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e598) returned 1 [0047.932] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\NOR\\DefaultID.pdf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\idtemplates\\nor\\defaultid.pdf"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x274 [0047.932] GetFileType (hFile=0x274) returned 0x1 [0047.932] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e594) returned 1 [0047.933] GetFileType (hFile=0x274) returned 0x1 [0047.933] GetFileSize (in: hFile=0x274, lpFileSizeHigh=0x31e6a0 | out: lpFileSizeHigh=0x31e6a0*=0x0) returned 0x1043a [0047.933] ReadFile (in: hFile=0x274, lpBuffer=0x27ec584, nNumberOfBytesToRead=0x1043a, lpNumberOfBytesRead=0x31e64c, lpOverlapped=0x0 | out: lpBuffer=0x27ec584*, lpNumberOfBytesRead=0x31e64c*=0x1043a, lpOverlapped=0x0) returned 1 [0047.934] CloseHandle (hObject=0x274) returned 1 [0047.950] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\NOR\\DefaultID.pdf", nBufferLength=0x105, lpBuffer=0x31e090, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\NOR\\DefaultID.pdf", lpFilePart=0x0) returned 0x4d [0047.950] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e584) returned 1 [0047.950] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\NOR\\DefaultID.pdf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\idtemplates\\nor\\defaultid.pdf"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x274 [0047.951] GetFileType (hFile=0x274) returned 0x1 [0047.951] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e580) returned 1 [0047.951] GetFileType (hFile=0x274) returned 0x1 [0047.951] WriteFile (in: hFile=0x274, lpBuffer=0x286a040*, nNumberOfBytesToWrite=0x10440, lpNumberOfBytesWritten=0x31e640, lpOverlapped=0x0 | out: lpBuffer=0x286a040*, lpNumberOfBytesWritten=0x31e640*=0x10440, lpOverlapped=0x0) returned 1 [0047.953] CloseHandle (hObject=0x274) returned 1 [0047.953] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\NOR\\DefaultID.pdf", nBufferLength=0x105, lpBuffer=0x31e1c4, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\NOR\\DefaultID.pdf", lpFilePart=0x0) returned 0x4d [0047.953] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\NOR\\DefaultID.pdf", nBufferLength=0x105, lpBuffer=0x31e1c4, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\NOR\\DefaultID.pdf", lpFilePart=0x0) returned 0x4d [0047.953] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e624) returned 1 [0047.953] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\NOR\\DefaultID.pdf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\idtemplates\\nor\\defaultid.pdf"), fInfoLevelId=0x0, lpFileInformation=0x31e6a0 | out: lpFileInformation=0x31e6a0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x98a32700, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x805da3e0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x7e660, ftLastWriteTime.dwHighDateTime=0x1d6eb7f, nFileSizeHigh=0x0, nFileSizeLow=0x10440)) returned 1 [0047.953] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e620) returned 1 [0047.953] MoveFileW (lpExistingFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\NOR\\DefaultID.pdf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\idtemplates\\nor\\defaultid.pdf"), lpNewFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\NOR\\DefaultID.pdf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\idtemplates\\nor\\defaultid.pdf")) returned 1 [0047.953] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e6cc) returned 1 [0047.953] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\POL", nBufferLength=0x105, lpBuffer=0x31e1d4, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\POL", lpFilePart=0x0) returned 0x3f [0047.953] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\POL\\", nBufferLength=0x105, lpBuffer=0x31e1a8, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\POL\\", lpFilePart=0x0) returned 0x40 [0047.954] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\POL\\*", lpFindFileData=0x31e3f4 | out: lpFindFileData=0x31e3f4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x80a2abc0, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x80a2abc0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x80a2abc0, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x381fc0 [0047.955] FindNextFileW (in: hFindFile=0x381fc0, lpFindFileData=0x31e404 | out: lpFindFileData=0x31e404*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x80a2abc0, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x80a2abc0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x80a2abc0, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0047.955] FindNextFileW (in: hFindFile=0x381fc0, lpFindFileData=0x31e404 | out: lpFindFileData=0x31e404*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9b058100, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x80a2abc0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9b058100, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x26ca2, dwReserved0=0x0, dwReserved1=0x0, cFileName="AdobeID.pdf", cAlternateFileName="")) returned 1 [0047.956] FindNextFileW (in: hFindFile=0x381fc0, lpFindFileData=0x31e404 | out: lpFindFileData=0x31e404*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9b058100, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x80a2abc0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9b058100, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x25d4a, dwReserved0=0x0, dwReserved1=0x0, cFileName="DefaultID.pdf", cAlternateFileName="DEFAUL~1.PDF")) returned 1 [0047.956] FindNextFileW (in: hFindFile=0x381fc0, lpFindFileData=0x31e404 | out: lpFindFileData=0x31e404*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0047.956] FindClose (in: hFindFile=0x381fc0 | out: hFindFile=0x381fc0) returned 1 [0047.956] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e68c) returned 1 [0047.956] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e698) returned 1 [0047.956] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e6cc) returned 1 [0047.956] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\POL", nBufferLength=0x105, lpBuffer=0x31e1d4, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\POL", lpFilePart=0x0) returned 0x3f [0047.956] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\POL\\", nBufferLength=0x105, lpBuffer=0x31e1a8, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\POL\\", lpFilePart=0x0) returned 0x40 [0047.956] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\POL\\*", lpFindFileData=0x31e3f4 | out: lpFindFileData=0x31e3f4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x80a2abc0, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x80a2abc0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x80a2abc0, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x381fc0 [0047.956] FindNextFileW (in: hFindFile=0x381fc0, lpFindFileData=0x31e404 | out: lpFindFileData=0x31e404*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x80a2abc0, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x80a2abc0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x80a2abc0, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0047.956] FindNextFileW (in: hFindFile=0x381fc0, lpFindFileData=0x31e404 | out: lpFindFileData=0x31e404*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9b058100, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x80a2abc0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9b058100, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x26ca2, dwReserved0=0x0, dwReserved1=0x0, cFileName="AdobeID.pdf", cAlternateFileName="")) returned 1 [0047.957] FindNextFileW (in: hFindFile=0x381fc0, lpFindFileData=0x31e404 | out: lpFindFileData=0x31e404*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9b058100, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x80a2abc0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9b058100, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x25d4a, dwReserved0=0x0, dwReserved1=0x0, cFileName="DefaultID.pdf", cAlternateFileName="DEFAUL~1.PDF")) returned 1 [0047.957] FindNextFileW (in: hFindFile=0x381fc0, lpFindFileData=0x31e404 | out: lpFindFileData=0x31e404*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9b058100, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x80a2abc0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9b058100, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x25d4a, dwReserved0=0x0, dwReserved1=0x0, cFileName="DefaultID.pdf", cAlternateFileName="DEFAUL~1.PDF")) returned 0 [0047.957] FindClose (in: hFindFile=0x381fc0 | out: hFindFile=0x381fc0) returned 1 [0047.957] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e68c) returned 1 [0047.957] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e698) returned 1 [0047.957] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\POL\\AdobeID.pdf", nBufferLength=0x105, lpBuffer=0x31e0a4, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\POL\\AdobeID.pdf", lpFilePart=0x0) returned 0x4b [0047.957] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e598) returned 1 [0047.957] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\POL\\AdobeID.pdf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\idtemplates\\pol\\adobeid.pdf"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x274 [0047.957] GetFileType (hFile=0x274) returned 0x1 [0047.957] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e594) returned 1 [0047.957] GetFileType (hFile=0x274) returned 0x1 [0047.957] GetFileSize (in: hFile=0x274, lpFileSizeHigh=0x31e6a0 | out: lpFileSizeHigh=0x31e6a0*=0x0) returned 0x26ca2 [0047.958] ReadFile (in: hFile=0x274, lpBuffer=0x38fa238, nNumberOfBytesToRead=0x26ca2, lpNumberOfBytesRead=0x31e64c, lpOverlapped=0x0 | out: lpBuffer=0x38fa238*, lpNumberOfBytesRead=0x31e64c*=0x26ca2, lpOverlapped=0x0) returned 1 [0047.968] CloseHandle (hObject=0x274) returned 1 [0048.015] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\POL\\AdobeID.pdf", nBufferLength=0x105, lpBuffer=0x31e090, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\POL\\AdobeID.pdf", lpFilePart=0x0) returned 0x4b [0048.015] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e584) returned 1 [0048.015] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\POL\\AdobeID.pdf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\idtemplates\\pol\\adobeid.pdf"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x274 [0048.017] GetFileType (hFile=0x274) returned 0x1 [0048.017] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e580) returned 1 [0048.017] GetFileType (hFile=0x274) returned 0x1 [0048.017] WriteFile (in: hFile=0x274, lpBuffer=0x36b4790*, nNumberOfBytesToWrite=0x26cb0, lpNumberOfBytesWritten=0x31e640, lpOverlapped=0x0 | out: lpBuffer=0x36b4790*, lpNumberOfBytesWritten=0x31e640*=0x26cb0, lpOverlapped=0x0) returned 1 [0048.020] CloseHandle (hObject=0x274) returned 1 [0048.020] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\POL\\AdobeID.pdf", nBufferLength=0x105, lpBuffer=0x31e1c4, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\POL\\AdobeID.pdf", lpFilePart=0x0) returned 0x4b [0048.020] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\POL\\AdobeID.pdf", nBufferLength=0x105, lpBuffer=0x31e1c4, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\POL\\AdobeID.pdf", lpFilePart=0x0) returned 0x4b [0048.020] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e624) returned 1 [0048.020] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\POL\\AdobeID.pdf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\idtemplates\\pol\\adobeid.pdf"), fInfoLevelId=0x0, lpFileInformation=0x31e6a0 | out: lpFileInformation=0x31e6a0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9b058100, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x80a2abc0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x13cd40, ftLastWriteTime.dwHighDateTime=0x1d6eb7f, nFileSizeHigh=0x0, nFileSizeLow=0x26cb0)) returned 1 [0048.020] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e620) returned 1 [0048.020] MoveFileW (lpExistingFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\POL\\AdobeID.pdf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\idtemplates\\pol\\adobeid.pdf"), lpNewFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\POL\\AdobeID.pdf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\idtemplates\\pol\\adobeid.pdf")) returned 1 [0048.021] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\POL\\DefaultID.pdf", nBufferLength=0x105, lpBuffer=0x31e0a4, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\POL\\DefaultID.pdf", lpFilePart=0x0) returned 0x4d [0048.021] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e598) returned 1 [0048.021] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\POL\\DefaultID.pdf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\idtemplates\\pol\\defaultid.pdf"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x274 [0048.021] GetFileType (hFile=0x274) returned 0x1 [0048.021] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e594) returned 1 [0048.021] GetFileType (hFile=0x274) returned 0x1 [0048.021] GetFileSize (in: hFile=0x274, lpFileSizeHigh=0x31e6a0 | out: lpFileSizeHigh=0x31e6a0*=0x0) returned 0x25d4a [0048.022] ReadFile (in: hFile=0x274, lpBuffer=0x36db460, nNumberOfBytesToRead=0x25d4a, lpNumberOfBytesRead=0x31e64c, lpOverlapped=0x0 | out: lpBuffer=0x36db460*, lpNumberOfBytesRead=0x31e64c*=0x25d4a, lpOverlapped=0x0) returned 1 [0048.024] CloseHandle (hObject=0x274) returned 1 [0048.042] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\POL\\DefaultID.pdf", nBufferLength=0x105, lpBuffer=0x31e090, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\POL\\DefaultID.pdf", lpFilePart=0x0) returned 0x4d [0048.042] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e584) returned 1 [0048.042] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\POL\\DefaultID.pdf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\idtemplates\\pol\\defaultid.pdf"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x274 [0048.044] GetFileType (hFile=0x274) returned 0x1 [0048.044] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e580) returned 1 [0048.044] GetFileType (hFile=0x274) returned 0x1 [0048.044] WriteFile (in: hFile=0x274, lpBuffer=0x3798728*, nNumberOfBytesToWrite=0x25d50, lpNumberOfBytesWritten=0x31e640, lpOverlapped=0x0 | out: lpBuffer=0x3798728*, lpNumberOfBytesWritten=0x31e640*=0x25d50, lpOverlapped=0x0) returned 1 [0048.047] CloseHandle (hObject=0x274) returned 1 [0048.047] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\POL\\DefaultID.pdf", nBufferLength=0x105, lpBuffer=0x31e1c4, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\POL\\DefaultID.pdf", lpFilePart=0x0) returned 0x4d [0048.047] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\POL\\DefaultID.pdf", nBufferLength=0x105, lpBuffer=0x31e1c4, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\POL\\DefaultID.pdf", lpFilePart=0x0) returned 0x4d [0048.047] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e624) returned 1 [0048.047] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\POL\\DefaultID.pdf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\idtemplates\\pol\\defaultid.pdf"), fInfoLevelId=0x0, lpFileInformation=0x31e6a0 | out: lpFileInformation=0x31e6a0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9b058100, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x80a2abc0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x162ea0, ftLastWriteTime.dwHighDateTime=0x1d6eb7f, nFileSizeHigh=0x0, nFileSizeLow=0x25d50)) returned 1 [0048.047] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e620) returned 1 [0048.047] MoveFileW (lpExistingFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\POL\\DefaultID.pdf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\idtemplates\\pol\\defaultid.pdf"), lpNewFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\POL\\DefaultID.pdf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\idtemplates\\pol\\defaultid.pdf")) returned 1 [0048.047] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e6cc) returned 1 [0048.048] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\PTB", nBufferLength=0x105, lpBuffer=0x31e1d4, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\PTB", lpFilePart=0x0) returned 0x3f [0048.048] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\PTB\\", nBufferLength=0x105, lpBuffer=0x31e1a8, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\PTB\\", lpFilePart=0x0) returned 0x40 [0048.048] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\PTB\\*", lpFindFileData=0x31e3f4 | out: lpFindFileData=0x31e3f4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x805b4280, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x805b4280, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x805b4280, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x381d00 [0048.048] FindNextFileW (in: hFindFile=0x381d00, lpFindFileData=0x31e404 | out: lpFindFileData=0x31e404*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x805b4280, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x805b4280, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x805b4280, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0048.048] FindNextFileW (in: hFindFile=0x381d00, lpFindFileData=0x31e404 | out: lpFindFileData=0x31e404*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x98a32700, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x805b4280, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x98a32700, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x11426, dwReserved0=0x0, dwReserved1=0x0, cFileName="AdobeID.pdf", cAlternateFileName="")) returned 1 [0048.048] FindNextFileW (in: hFindFile=0x381d00, lpFindFileData=0x31e404 | out: lpFindFileData=0x31e404*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x98a32700, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x805b4280, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x98a32700, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x10f09, dwReserved0=0x0, dwReserved1=0x0, cFileName="DefaultID.pdf", cAlternateFileName="DEFAUL~1.PDF")) returned 1 [0048.048] FindNextFileW (in: hFindFile=0x381d00, lpFindFileData=0x31e404 | out: lpFindFileData=0x31e404*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0048.048] FindClose (in: hFindFile=0x381d00 | out: hFindFile=0x381d00) returned 1 [0048.049] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e68c) returned 1 [0048.049] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e698) returned 1 [0048.049] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e6cc) returned 1 [0048.049] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\PTB", nBufferLength=0x105, lpBuffer=0x31e1d4, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\PTB", lpFilePart=0x0) returned 0x3f [0048.049] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\PTB\\", nBufferLength=0x105, lpBuffer=0x31e1a8, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\PTB\\", lpFilePart=0x0) returned 0x40 [0048.049] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\PTB\\*", lpFindFileData=0x31e3f4 | out: lpFindFileData=0x31e3f4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x805b4280, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x805b4280, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x805b4280, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x381d00 [0048.049] FindNextFileW (in: hFindFile=0x381d00, lpFindFileData=0x31e404 | out: lpFindFileData=0x31e404*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x805b4280, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x805b4280, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x805b4280, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0048.049] FindNextFileW (in: hFindFile=0x381d00, lpFindFileData=0x31e404 | out: lpFindFileData=0x31e404*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x98a32700, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x805b4280, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x98a32700, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x11426, dwReserved0=0x0, dwReserved1=0x0, cFileName="AdobeID.pdf", cAlternateFileName="")) returned 1 [0048.049] FindNextFileW (in: hFindFile=0x381d00, lpFindFileData=0x31e404 | out: lpFindFileData=0x31e404*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x98a32700, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x805b4280, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x98a32700, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x10f09, dwReserved0=0x0, dwReserved1=0x0, cFileName="DefaultID.pdf", cAlternateFileName="DEFAUL~1.PDF")) returned 1 [0048.049] FindNextFileW (in: hFindFile=0x381d00, lpFindFileData=0x31e404 | out: lpFindFileData=0x31e404*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x98a32700, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x805b4280, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x98a32700, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x10f09, dwReserved0=0x0, dwReserved1=0x0, cFileName="DefaultID.pdf", cAlternateFileName="DEFAUL~1.PDF")) returned 0 [0048.050] FindClose (in: hFindFile=0x381d00 | out: hFindFile=0x381d00) returned 1 [0048.050] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e68c) returned 1 [0048.050] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e698) returned 1 [0048.050] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\PTB\\AdobeID.pdf", nBufferLength=0x105, lpBuffer=0x31e0a4, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\PTB\\AdobeID.pdf", lpFilePart=0x0) returned 0x4b [0048.050] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e598) returned 1 [0048.050] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\PTB\\AdobeID.pdf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\idtemplates\\ptb\\adobeid.pdf"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x274 [0048.050] GetFileType (hFile=0x274) returned 0x1 [0048.050] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e594) returned 1 [0048.050] GetFileType (hFile=0x274) returned 0x1 [0048.050] GetFileSize (in: hFile=0x274, lpFileSizeHigh=0x31e6a0 | out: lpFileSizeHigh=0x31e6a0*=0x0) returned 0x11426 [0048.050] ReadFile (in: hFile=0x274, lpBuffer=0x26c4c54, nNumberOfBytesToRead=0x11426, lpNumberOfBytesRead=0x31e64c, lpOverlapped=0x0 | out: lpBuffer=0x26c4c54*, lpNumberOfBytesRead=0x31e64c*=0x11426, lpOverlapped=0x0) returned 1 [0048.059] CloseHandle (hObject=0x274) returned 1 [0048.074] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\PTB\\AdobeID.pdf", nBufferLength=0x105, lpBuffer=0x31e090, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\PTB\\AdobeID.pdf", lpFilePart=0x0) returned 0x4b [0048.074] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e584) returned 1 [0048.074] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\PTB\\AdobeID.pdf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\idtemplates\\ptb\\adobeid.pdf"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x274 [0048.075] GetFileType (hFile=0x274) returned 0x1 [0048.075] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e580) returned 1 [0048.075] GetFileType (hFile=0x274) returned 0x1 [0048.076] WriteFile (in: hFile=0x274, lpBuffer=0x27456e0*, nNumberOfBytesToWrite=0x11430, lpNumberOfBytesWritten=0x31e640, lpOverlapped=0x0 | out: lpBuffer=0x27456e0*, lpNumberOfBytesWritten=0x31e640*=0x11430, lpOverlapped=0x0) returned 1 [0048.077] CloseHandle (hObject=0x274) returned 1 [0048.077] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\PTB\\AdobeID.pdf", nBufferLength=0x105, lpBuffer=0x31e1c4, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\PTB\\AdobeID.pdf", lpFilePart=0x0) returned 0x4b [0048.078] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\PTB\\AdobeID.pdf", nBufferLength=0x105, lpBuffer=0x31e1c4, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\PTB\\AdobeID.pdf", lpFilePart=0x0) returned 0x4b [0048.078] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e624) returned 1 [0048.078] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\PTB\\AdobeID.pdf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\idtemplates\\ptb\\adobeid.pdf"), fInfoLevelId=0x0, lpFileInformation=0x31e6a0 | out: lpFileInformation=0x31e6a0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x98a32700, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x805b4280, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x1af160, ftLastWriteTime.dwHighDateTime=0x1d6eb7f, nFileSizeHigh=0x0, nFileSizeLow=0x11430)) returned 1 [0048.078] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e620) returned 1 [0048.078] MoveFileW (lpExistingFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\PTB\\AdobeID.pdf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\idtemplates\\ptb\\adobeid.pdf"), lpNewFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\PTB\\AdobeID.pdf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\idtemplates\\ptb\\adobeid.pdf")) returned 1 [0048.078] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\PTB\\DefaultID.pdf", nBufferLength=0x105, lpBuffer=0x31e0a4, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\PTB\\DefaultID.pdf", lpFilePart=0x0) returned 0x4d [0048.078] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e598) returned 1 [0048.078] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\PTB\\DefaultID.pdf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\idtemplates\\ptb\\defaultid.pdf"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x274 [0048.078] GetFileType (hFile=0x274) returned 0x1 [0048.078] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e594) returned 1 [0048.078] GetFileType (hFile=0x274) returned 0x1 [0048.079] GetFileSize (in: hFile=0x274, lpFileSizeHigh=0x31e6a0 | out: lpFileSizeHigh=0x31e6a0*=0x0) returned 0x10f09 [0048.079] ReadFile (in: hFile=0x274, lpBuffer=0x2756ecc, nNumberOfBytesToRead=0x10f09, lpNumberOfBytesRead=0x31e64c, lpOverlapped=0x0 | out: lpBuffer=0x2756ecc*, lpNumberOfBytesRead=0x31e64c*=0x10f09, lpOverlapped=0x0) returned 1 [0048.081] CloseHandle (hObject=0x274) returned 1 [0048.096] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\PTB\\DefaultID.pdf", nBufferLength=0x105, lpBuffer=0x31e090, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\PTB\\DefaultID.pdf", lpFilePart=0x0) returned 0x4d [0048.096] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e584) returned 1 [0048.096] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\PTB\\DefaultID.pdf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\idtemplates\\ptb\\defaultid.pdf"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x274 [0048.097] GetFileType (hFile=0x274) returned 0x1 [0048.097] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e580) returned 1 [0048.097] GetFileType (hFile=0x274) returned 0x1 [0048.097] WriteFile (in: hFile=0x274, lpBuffer=0x27d69f8*, nNumberOfBytesToWrite=0x10f10, lpNumberOfBytesWritten=0x31e640, lpOverlapped=0x0 | out: lpBuffer=0x27d69f8*, lpNumberOfBytesWritten=0x31e640*=0x10f10, lpOverlapped=0x0) returned 1 [0048.099] CloseHandle (hObject=0x274) returned 1 [0048.099] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\PTB\\DefaultID.pdf", nBufferLength=0x105, lpBuffer=0x31e1c4, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\PTB\\DefaultID.pdf", lpFilePart=0x0) returned 0x4d [0048.099] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\PTB\\DefaultID.pdf", nBufferLength=0x105, lpBuffer=0x31e1c4, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\PTB\\DefaultID.pdf", lpFilePart=0x0) returned 0x4d [0048.099] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e624) returned 1 [0048.099] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\PTB\\DefaultID.pdf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\idtemplates\\ptb\\defaultid.pdf"), fInfoLevelId=0x0, lpFileInformation=0x31e6a0 | out: lpFileInformation=0x31e6a0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x98a32700, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x805b4280, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x1fb420, ftLastWriteTime.dwHighDateTime=0x1d6eb7f, nFileSizeHigh=0x0, nFileSizeLow=0x10f10)) returned 1 [0048.099] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e620) returned 1 [0048.099] MoveFileW (lpExistingFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\PTB\\DefaultID.pdf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\idtemplates\\ptb\\defaultid.pdf"), lpNewFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\PTB\\DefaultID.pdf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\idtemplates\\ptb\\defaultid.pdf")) returned 1 [0048.100] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e6cc) returned 1 [0048.100] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\RUM", nBufferLength=0x105, lpBuffer=0x31e1d4, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\RUM", lpFilePart=0x0) returned 0x3f [0048.100] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\RUM\\", nBufferLength=0x105, lpBuffer=0x31e1a8, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\RUM\\", lpFilePart=0x0) returned 0x40 [0048.100] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\RUM\\*", lpFindFileData=0x31e3f4 | out: lpFindFileData=0x31e3f4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x80a2abc0, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x80a2abc0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x80a2abc0, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x381e00 [0048.103] FindNextFileW (in: hFindFile=0x381e00, lpFindFileData=0x31e404 | out: lpFindFileData=0x31e404*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x80a2abc0, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x80a2abc0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x80a2abc0, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0048.103] FindNextFileW (in: hFindFile=0x381e00, lpFindFileData=0x31e404 | out: lpFindFileData=0x31e404*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9b058100, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x80a2abc0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9b058100, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x5891, dwReserved0=0x0, dwReserved1=0x0, cFileName="AdobeID.pdf", cAlternateFileName="")) returned 1 [0048.103] FindNextFileW (in: hFindFile=0x381e00, lpFindFileData=0x31e404 | out: lpFindFileData=0x31e404*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9b058100, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x80a2abc0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9b058100, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x5be8, dwReserved0=0x0, dwReserved1=0x0, cFileName="DefaultID.pdf", cAlternateFileName="DEFAUL~1.PDF")) returned 1 [0048.104] FindNextFileW (in: hFindFile=0x381e00, lpFindFileData=0x31e404 | out: lpFindFileData=0x31e404*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0048.104] FindClose (in: hFindFile=0x381e00 | out: hFindFile=0x381e00) returned 1 [0048.104] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e68c) returned 1 [0048.104] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e698) returned 1 [0048.104] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e6cc) returned 1 [0048.104] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\RUM", nBufferLength=0x105, lpBuffer=0x31e1d4, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\RUM", lpFilePart=0x0) returned 0x3f [0048.104] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\RUM\\", nBufferLength=0x105, lpBuffer=0x31e1a8, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\RUM\\", lpFilePart=0x0) returned 0x40 [0048.104] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\RUM\\*", lpFindFileData=0x31e3f4 | out: lpFindFileData=0x31e3f4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x80a2abc0, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x80a2abc0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x80a2abc0, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x381e00 [0048.104] FindNextFileW (in: hFindFile=0x381e00, lpFindFileData=0x31e404 | out: lpFindFileData=0x31e404*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x80a2abc0, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x80a2abc0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x80a2abc0, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0048.104] FindNextFileW (in: hFindFile=0x381e00, lpFindFileData=0x31e404 | out: lpFindFileData=0x31e404*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9b058100, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x80a2abc0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9b058100, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x5891, dwReserved0=0x0, dwReserved1=0x0, cFileName="AdobeID.pdf", cAlternateFileName="")) returned 1 [0048.104] FindNextFileW (in: hFindFile=0x381e00, lpFindFileData=0x31e404 | out: lpFindFileData=0x31e404*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9b058100, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x80a2abc0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9b058100, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x5be8, dwReserved0=0x0, dwReserved1=0x0, cFileName="DefaultID.pdf", cAlternateFileName="DEFAUL~1.PDF")) returned 1 [0048.105] FindNextFileW (in: hFindFile=0x381e00, lpFindFileData=0x31e404 | out: lpFindFileData=0x31e404*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9b058100, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x80a2abc0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9b058100, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x5be8, dwReserved0=0x0, dwReserved1=0x0, cFileName="DefaultID.pdf", cAlternateFileName="DEFAUL~1.PDF")) returned 0 [0048.105] FindClose (in: hFindFile=0x381e00 | out: hFindFile=0x381e00) returned 1 [0048.105] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e68c) returned 1 [0048.105] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e698) returned 1 [0048.105] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\RUM\\AdobeID.pdf", nBufferLength=0x105, lpBuffer=0x31e0a4, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\RUM\\AdobeID.pdf", lpFilePart=0x0) returned 0x4b [0048.105] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e598) returned 1 [0048.105] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\RUM\\AdobeID.pdf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\idtemplates\\rum\\adobeid.pdf"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x274 [0048.105] GetFileType (hFile=0x274) returned 0x1 [0048.105] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e594) returned 1 [0048.105] GetFileType (hFile=0x274) returned 0x1 [0048.105] GetFileSize (in: hFile=0x274, lpFileSizeHigh=0x31e6a0 | out: lpFileSizeHigh=0x31e6a0*=0x0) returned 0x5891 [0048.105] ReadFile (in: hFile=0x274, lpBuffer=0x27e9868, nNumberOfBytesToRead=0x5891, lpNumberOfBytesRead=0x31e64c, lpOverlapped=0x0 | out: lpBuffer=0x27e9868*, lpNumberOfBytesRead=0x31e64c*=0x5891, lpOverlapped=0x0) returned 1 [0048.116] CloseHandle (hObject=0x274) returned 1 [0048.156] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\RUM\\AdobeID.pdf", nBufferLength=0x105, lpBuffer=0x31e090, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\RUM\\AdobeID.pdf", lpFilePart=0x0) returned 0x4b [0048.156] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e584) returned 1 [0048.156] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\RUM\\AdobeID.pdf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\idtemplates\\rum\\adobeid.pdf"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x274 [0048.157] GetFileType (hFile=0x274) returned 0x1 [0048.158] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e580) returned 1 [0048.158] GetFileType (hFile=0x274) returned 0x1 [0048.158] WriteFile (in: hFile=0x274, lpBuffer=0x26580c0*, nNumberOfBytesToWrite=0x58a0, lpNumberOfBytesWritten=0x31e640, lpOverlapped=0x0 | out: lpBuffer=0x26580c0*, lpNumberOfBytesWritten=0x31e640*=0x58a0, lpOverlapped=0x0) returned 1 [0048.159] CloseHandle (hObject=0x274) returned 1 [0048.159] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\RUM\\AdobeID.pdf", nBufferLength=0x105, lpBuffer=0x31e1c4, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\RUM\\AdobeID.pdf", lpFilePart=0x0) returned 0x4b [0048.159] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\RUM\\AdobeID.pdf", nBufferLength=0x105, lpBuffer=0x31e1c4, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\RUM\\AdobeID.pdf", lpFilePart=0x0) returned 0x4b [0048.159] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e624) returned 1 [0048.159] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\RUM\\AdobeID.pdf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\idtemplates\\rum\\adobeid.pdf"), fInfoLevelId=0x0, lpFileInformation=0x31e6a0 | out: lpFileInformation=0x31e6a0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9b058100, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x80a2abc0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x2939a0, ftLastWriteTime.dwHighDateTime=0x1d6eb7f, nFileSizeHigh=0x0, nFileSizeLow=0x58a0)) returned 1 [0048.159] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e620) returned 1 [0048.159] MoveFileW (lpExistingFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\RUM\\AdobeID.pdf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\idtemplates\\rum\\adobeid.pdf"), lpNewFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\RUM\\AdobeID.pdf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\idtemplates\\rum\\adobeid.pdf")) returned 1 [0048.159] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\RUM\\DefaultID.pdf", nBufferLength=0x105, lpBuffer=0x31e0a4, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\RUM\\DefaultID.pdf", lpFilePart=0x0) returned 0x4d [0048.160] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e598) returned 1 [0048.160] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\RUM\\DefaultID.pdf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\idtemplates\\rum\\defaultid.pdf"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x274 [0048.160] GetFileType (hFile=0x274) returned 0x1 [0048.160] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e594) returned 1 [0048.160] GetFileType (hFile=0x274) returned 0x1 [0048.160] GetFileSize (in: hFile=0x274, lpFileSizeHigh=0x31e6a0 | out: lpFileSizeHigh=0x31e6a0*=0x0) returned 0x5be8 [0048.160] ReadFile (in: hFile=0x274, lpBuffer=0x265dd1c, nNumberOfBytesToRead=0x5be8, lpNumberOfBytesRead=0x31e64c, lpOverlapped=0x0 | out: lpBuffer=0x265dd1c*, lpNumberOfBytesRead=0x31e64c*=0x5be8, lpOverlapped=0x0) returned 1 [0048.167] CloseHandle (hObject=0x274) returned 1 [0048.181] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\RUM\\DefaultID.pdf", nBufferLength=0x105, lpBuffer=0x31e090, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\RUM\\DefaultID.pdf", lpFilePart=0x0) returned 0x4d [0048.181] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e584) returned 1 [0048.181] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\RUM\\DefaultID.pdf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\idtemplates\\rum\\defaultid.pdf"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x274 [0048.182] GetFileType (hFile=0x274) returned 0x1 [0048.182] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e580) returned 1 [0048.182] GetFileType (hFile=0x274) returned 0x1 [0048.182] WriteFile (in: hFile=0x274, lpBuffer=0x26c780c*, nNumberOfBytesToWrite=0x5bf0, lpNumberOfBytesWritten=0x31e640, lpOverlapped=0x0 | out: lpBuffer=0x26c780c*, lpNumberOfBytesWritten=0x31e640*=0x5bf0, lpOverlapped=0x0) returned 1 [0048.183] CloseHandle (hObject=0x274) returned 1 [0048.183] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\RUM\\DefaultID.pdf", nBufferLength=0x105, lpBuffer=0x31e1c4, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\RUM\\DefaultID.pdf", lpFilePart=0x0) returned 0x4d [0048.183] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\RUM\\DefaultID.pdf", nBufferLength=0x105, lpBuffer=0x31e1c4, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\RUM\\DefaultID.pdf", lpFilePart=0x0) returned 0x4d [0048.183] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e624) returned 1 [0048.183] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\RUM\\DefaultID.pdf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\idtemplates\\rum\\defaultid.pdf"), fInfoLevelId=0x0, lpFileInformation=0x31e6a0 | out: lpFileInformation=0x31e6a0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9b058100, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x80a2abc0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x2b9b00, ftLastWriteTime.dwHighDateTime=0x1d6eb7f, nFileSizeHigh=0x0, nFileSizeLow=0x5bf0)) returned 1 [0048.183] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e620) returned 1 [0048.184] MoveFileW (lpExistingFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\RUM\\DefaultID.pdf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\idtemplates\\rum\\defaultid.pdf"), lpNewFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\RUM\\DefaultID.pdf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\idtemplates\\rum\\defaultid.pdf")) returned 1 [0048.184] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e6cc) returned 1 [0048.184] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\RUS", nBufferLength=0x105, lpBuffer=0x31e1d4, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\RUS", lpFilePart=0x0) returned 0x3f [0048.184] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\RUS\\", nBufferLength=0x105, lpBuffer=0x31e1a8, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\RUS\\", lpFilePart=0x0) returned 0x40 [0048.184] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\RUS\\*", lpFindFileData=0x31e3f4 | out: lpFindFileData=0x31e3f4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x80a04a60, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x80a04a60, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x80a04a60, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x381d00 [0048.184] FindNextFileW (in: hFindFile=0x381d00, lpFindFileData=0x31e404 | out: lpFindFileData=0x31e404*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x80a04a60, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x80a04a60, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x80a04a60, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0048.184] FindNextFileW (in: hFindFile=0x381d00, lpFindFileData=0x31e404 | out: lpFindFileData=0x31e404*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9b058100, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x80a04a60, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9b058100, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x1e071, dwReserved0=0x0, dwReserved1=0x0, cFileName="AdobeID.pdf", cAlternateFileName="")) returned 1 [0048.185] FindNextFileW (in: hFindFile=0x381d00, lpFindFileData=0x31e404 | out: lpFindFileData=0x31e404*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9b058100, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x80a04a60, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9b058100, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x1d17f, dwReserved0=0x0, dwReserved1=0x0, cFileName="DefaultID.pdf", cAlternateFileName="DEFAUL~1.PDF")) returned 1 [0048.185] FindNextFileW (in: hFindFile=0x381d00, lpFindFileData=0x31e404 | out: lpFindFileData=0x31e404*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0048.185] FindClose (in: hFindFile=0x381d00 | out: hFindFile=0x381d00) returned 1 [0048.185] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e68c) returned 1 [0048.185] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e698) returned 1 [0048.185] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e6cc) returned 1 [0048.185] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\RUS", nBufferLength=0x105, lpBuffer=0x31e1d4, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\RUS", lpFilePart=0x0) returned 0x3f [0048.185] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\RUS\\", nBufferLength=0x105, lpBuffer=0x31e1a8, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\RUS\\", lpFilePart=0x0) returned 0x40 [0048.185] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\RUS\\*", lpFindFileData=0x31e3f4 | out: lpFindFileData=0x31e3f4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x80a04a60, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x80a04a60, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x80a04a60, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x381d00 [0048.185] FindNextFileW (in: hFindFile=0x381d00, lpFindFileData=0x31e404 | out: lpFindFileData=0x31e404*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x80a04a60, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x80a04a60, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x80a04a60, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0048.185] FindNextFileW (in: hFindFile=0x381d00, lpFindFileData=0x31e404 | out: lpFindFileData=0x31e404*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9b058100, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x80a04a60, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9b058100, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x1e071, dwReserved0=0x0, dwReserved1=0x0, cFileName="AdobeID.pdf", cAlternateFileName="")) returned 1 [0048.186] FindNextFileW (in: hFindFile=0x381d00, lpFindFileData=0x31e404 | out: lpFindFileData=0x31e404*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9b058100, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x80a04a60, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9b058100, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x1d17f, dwReserved0=0x0, dwReserved1=0x0, cFileName="DefaultID.pdf", cAlternateFileName="DEFAUL~1.PDF")) returned 1 [0048.186] FindNextFileW (in: hFindFile=0x381d00, lpFindFileData=0x31e404 | out: lpFindFileData=0x31e404*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9b058100, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x80a04a60, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9b058100, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x1d17f, dwReserved0=0x0, dwReserved1=0x0, cFileName="DefaultID.pdf", cAlternateFileName="DEFAUL~1.PDF")) returned 0 [0048.186] FindClose (in: hFindFile=0x381d00 | out: hFindFile=0x381d00) returned 1 [0048.186] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e68c) returned 1 [0048.186] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e698) returned 1 [0048.186] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\RUS\\AdobeID.pdf", nBufferLength=0x105, lpBuffer=0x31e0a4, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\RUS\\AdobeID.pdf", lpFilePart=0x0) returned 0x4b [0048.186] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e598) returned 1 [0048.186] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\RUS\\AdobeID.pdf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\idtemplates\\rus\\adobeid.pdf"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x274 [0048.186] GetFileType (hFile=0x274) returned 0x1 [0048.186] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e594) returned 1 [0048.186] GetFileType (hFile=0x274) returned 0x1 [0048.187] GetFileSize (in: hFile=0x274, lpFileSizeHigh=0x31e6a0 | out: lpFileSizeHigh=0x31e6a0*=0x0) returned 0x1e071 [0048.187] ReadFile (in: hFile=0x274, lpBuffer=0x3802b18, nNumberOfBytesToRead=0x1e071, lpNumberOfBytesRead=0x31e64c, lpOverlapped=0x0 | out: lpBuffer=0x3802b18*, lpNumberOfBytesRead=0x31e64c*=0x1e071, lpOverlapped=0x0) returned 1 [0048.190] CloseHandle (hObject=0x274) returned 1 [0048.208] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\RUS\\AdobeID.pdf", nBufferLength=0x105, lpBuffer=0x31e090, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\RUS\\AdobeID.pdf", lpFilePart=0x0) returned 0x4b [0048.208] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e584) returned 1 [0048.208] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\RUS\\AdobeID.pdf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\idtemplates\\rus\\adobeid.pdf"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x274 [0048.209] GetFileType (hFile=0x274) returned 0x1 [0048.209] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e580) returned 1 [0048.209] GetFileType (hFile=0x274) returned 0x1 [0048.209] WriteFile (in: hFile=0x274, lpBuffer=0x3898dc8*, nNumberOfBytesToWrite=0x1e080, lpNumberOfBytesWritten=0x31e640, lpOverlapped=0x0 | out: lpBuffer=0x3898dc8*, lpNumberOfBytesWritten=0x31e640*=0x1e080, lpOverlapped=0x0) returned 1 [0048.212] CloseHandle (hObject=0x274) returned 1 [0048.212] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\RUS\\AdobeID.pdf", nBufferLength=0x105, lpBuffer=0x31e1c4, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\RUS\\AdobeID.pdf", lpFilePart=0x0) returned 0x4b [0048.212] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\RUS\\AdobeID.pdf", nBufferLength=0x105, lpBuffer=0x31e1c4, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\RUS\\AdobeID.pdf", lpFilePart=0x0) returned 0x4b [0048.212] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e624) returned 1 [0048.212] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\RUS\\AdobeID.pdf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\idtemplates\\rus\\adobeid.pdf"), fInfoLevelId=0x0, lpFileInformation=0x31e6a0 | out: lpFileInformation=0x31e6a0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9b058100, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x80a04a60, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x305dc0, ftLastWriteTime.dwHighDateTime=0x1d6eb7f, nFileSizeHigh=0x0, nFileSizeLow=0x1e080)) returned 1 [0048.212] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e620) returned 1 [0048.212] MoveFileW (lpExistingFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\RUS\\AdobeID.pdf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\idtemplates\\rus\\adobeid.pdf"), lpNewFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\RUS\\AdobeID.pdf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\idtemplates\\rus\\adobeid.pdf")) returned 1 [0048.213] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\RUS\\DefaultID.pdf", nBufferLength=0x105, lpBuffer=0x31e0a4, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\RUS\\DefaultID.pdf", lpFilePart=0x0) returned 0x4d [0048.213] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e598) returned 1 [0048.213] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\RUS\\DefaultID.pdf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\idtemplates\\rus\\defaultid.pdf"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x274 [0048.213] GetFileType (hFile=0x274) returned 0x1 [0048.213] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e594) returned 1 [0048.213] GetFileType (hFile=0x274) returned 0x1 [0048.213] GetFileSize (in: hFile=0x274, lpFileSizeHigh=0x31e6a0 | out: lpFileSizeHigh=0x31e6a0*=0x0) returned 0x1d17f [0048.213] ReadFile (in: hFile=0x274, lpBuffer=0x38b6e68, nNumberOfBytesToRead=0x1d17f, lpNumberOfBytesRead=0x31e64c, lpOverlapped=0x0 | out: lpBuffer=0x38b6e68*, lpNumberOfBytesRead=0x31e64c*=0x1d17f, lpOverlapped=0x0) returned 1 [0048.216] CloseHandle (hObject=0x274) returned 1 [0048.245] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\RUS\\DefaultID.pdf", nBufferLength=0x105, lpBuffer=0x31e090, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\RUS\\DefaultID.pdf", lpFilePart=0x0) returned 0x4d [0048.245] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e584) returned 1 [0048.245] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\RUS\\DefaultID.pdf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\idtemplates\\rus\\defaultid.pdf"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x274 [0048.246] GetFileType (hFile=0x274) returned 0x1 [0048.246] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e580) returned 1 [0048.246] GetFileType (hFile=0x274) returned 0x1 [0048.246] WriteFile (in: hFile=0x274, lpBuffer=0x38d4008*, nNumberOfBytesToWrite=0x1d180, lpNumberOfBytesWritten=0x31e640, lpOverlapped=0x0 | out: lpBuffer=0x38d4008*, lpNumberOfBytesWritten=0x31e640*=0x1d180, lpOverlapped=0x0) returned 1 [0048.249] CloseHandle (hObject=0x274) returned 1 [0048.249] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\RUS\\DefaultID.pdf", nBufferLength=0x105, lpBuffer=0x31e1c4, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\RUS\\DefaultID.pdf", lpFilePart=0x0) returned 0x4d [0048.249] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\RUS\\DefaultID.pdf", nBufferLength=0x105, lpBuffer=0x31e1c4, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\RUS\\DefaultID.pdf", lpFilePart=0x0) returned 0x4d [0048.249] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e624) returned 1 [0048.249] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\RUS\\DefaultID.pdf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\idtemplates\\rus\\defaultid.pdf"), fInfoLevelId=0x0, lpFileInformation=0x31e6a0 | out: lpFileInformation=0x31e6a0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9b058100, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x80a04a60, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x352080, ftLastWriteTime.dwHighDateTime=0x1d6eb7f, nFileSizeHigh=0x0, nFileSizeLow=0x1d180)) returned 1 [0048.249] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e620) returned 1 [0048.249] MoveFileW (lpExistingFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\RUS\\DefaultID.pdf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\idtemplates\\rus\\defaultid.pdf"), lpNewFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\RUS\\DefaultID.pdf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\idtemplates\\rus\\defaultid.pdf")) returned 1 [0048.249] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e6cc) returned 1 [0048.249] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\SKY", nBufferLength=0x105, lpBuffer=0x31e1d4, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\SKY", lpFilePart=0x0) returned 0x3f [0048.249] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\SKY\\", nBufferLength=0x105, lpBuffer=0x31e1a8, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\SKY\\", lpFilePart=0x0) returned 0x40 [0048.249] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\SKY\\*", lpFindFileData=0x31e3f4 | out: lpFindFileData=0x31e3f4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x80a04a60, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x80a04a60, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x80a04a60, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x381e00 [0048.252] FindNextFileW (in: hFindFile=0x381e00, lpFindFileData=0x31e404 | out: lpFindFileData=0x31e404*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x80a04a60, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x80a04a60, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x80a04a60, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0048.252] FindNextFileW (in: hFindFile=0x381e00, lpFindFileData=0x31e404 | out: lpFindFileData=0x31e404*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9c36ae00, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x80a04a60, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9c36ae00, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x161fc, dwReserved0=0x0, dwReserved1=0x0, cFileName="AdobeID.pdf", cAlternateFileName="")) returned 1 [0048.252] FindNextFileW (in: hFindFile=0x381e00, lpFindFileData=0x31e404 | out: lpFindFileData=0x31e404*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9c36ae00, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x80a04a60, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9c36ae00, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x13d46, dwReserved0=0x0, dwReserved1=0x0, cFileName="DefaultID.pdf", cAlternateFileName="DEFAUL~1.PDF")) returned 1 [0048.252] FindNextFileW (in: hFindFile=0x381e00, lpFindFileData=0x31e404 | out: lpFindFileData=0x31e404*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0048.252] FindClose (in: hFindFile=0x381e00 | out: hFindFile=0x381e00) returned 1 [0048.252] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e68c) returned 1 [0048.252] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e698) returned 1 [0048.252] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e6cc) returned 1 [0048.252] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\SKY", nBufferLength=0x105, lpBuffer=0x31e1d4, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\SKY", lpFilePart=0x0) returned 0x3f [0048.253] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\SKY\\", nBufferLength=0x105, lpBuffer=0x31e1a8, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\SKY\\", lpFilePart=0x0) returned 0x40 [0048.253] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\SKY\\*", lpFindFileData=0x31e3f4 | out: lpFindFileData=0x31e3f4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x80a04a60, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x80a04a60, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x80a04a60, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x381e00 [0048.253] FindNextFileW (in: hFindFile=0x381e00, lpFindFileData=0x31e404 | out: lpFindFileData=0x31e404*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x80a04a60, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x80a04a60, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x80a04a60, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0048.253] FindNextFileW (in: hFindFile=0x381e00, lpFindFileData=0x31e404 | out: lpFindFileData=0x31e404*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9c36ae00, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x80a04a60, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9c36ae00, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x161fc, dwReserved0=0x0, dwReserved1=0x0, cFileName="AdobeID.pdf", cAlternateFileName="")) returned 1 [0048.253] FindNextFileW (in: hFindFile=0x381e00, lpFindFileData=0x31e404 | out: lpFindFileData=0x31e404*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9c36ae00, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x80a04a60, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9c36ae00, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x13d46, dwReserved0=0x0, dwReserved1=0x0, cFileName="DefaultID.pdf", cAlternateFileName="DEFAUL~1.PDF")) returned 1 [0048.253] FindNextFileW (in: hFindFile=0x381e00, lpFindFileData=0x31e404 | out: lpFindFileData=0x31e404*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9c36ae00, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x80a04a60, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9c36ae00, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x13d46, dwReserved0=0x0, dwReserved1=0x0, cFileName="DefaultID.pdf", cAlternateFileName="DEFAUL~1.PDF")) returned 0 [0048.253] FindClose (in: hFindFile=0x381e00 | out: hFindFile=0x381e00) returned 1 [0048.253] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e68c) returned 1 [0048.253] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e698) returned 1 [0048.253] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\SKY\\AdobeID.pdf", nBufferLength=0x105, lpBuffer=0x31e0a4, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\SKY\\AdobeID.pdf", lpFilePart=0x0) returned 0x4b [0048.254] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e598) returned 1 [0048.254] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\SKY\\AdobeID.pdf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\idtemplates\\sky\\adobeid.pdf"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x274 [0048.254] GetFileType (hFile=0x274) returned 0x1 [0048.254] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e594) returned 1 [0048.254] GetFileType (hFile=0x274) returned 0x1 [0048.254] GetFileSize (in: hFile=0x274, lpFileSizeHigh=0x31e6a0 | out: lpFileSizeHigh=0x31e6a0*=0x0) returned 0x161fc [0048.254] ReadFile (in: hFile=0x274, lpBuffer=0x38f11a8, nNumberOfBytesToRead=0x161fc, lpNumberOfBytesRead=0x31e64c, lpOverlapped=0x0 | out: lpBuffer=0x38f11a8*, lpNumberOfBytesRead=0x31e64c*=0x161fc, lpOverlapped=0x0) returned 1 [0048.257] CloseHandle (hObject=0x274) returned 1 [0048.298] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\SKY\\AdobeID.pdf", nBufferLength=0x105, lpBuffer=0x31e090, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\SKY\\AdobeID.pdf", lpFilePart=0x0) returned 0x4b [0048.298] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e584) returned 1 [0048.298] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\SKY\\AdobeID.pdf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\idtemplates\\sky\\adobeid.pdf"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x274 [0048.299] GetFileType (hFile=0x274) returned 0x1 [0048.299] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e580) returned 1 [0048.299] GetFileType (hFile=0x274) returned 0x1 [0048.299] WriteFile (in: hFile=0x274, lpBuffer=0x36458b0*, nNumberOfBytesToWrite=0x16200, lpNumberOfBytesWritten=0x31e640, lpOverlapped=0x0 | out: lpBuffer=0x36458b0*, lpNumberOfBytesWritten=0x31e640*=0x16200, lpOverlapped=0x0) returned 1 [0048.301] CloseHandle (hObject=0x274) returned 1 [0048.301] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\SKY\\AdobeID.pdf", nBufferLength=0x105, lpBuffer=0x31e1c4, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\SKY\\AdobeID.pdf", lpFilePart=0x0) returned 0x4b [0048.301] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\SKY\\AdobeID.pdf", nBufferLength=0x105, lpBuffer=0x31e1c4, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\SKY\\AdobeID.pdf", lpFilePart=0x0) returned 0x4b [0048.301] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e624) returned 1 [0048.301] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\SKY\\AdobeID.pdf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\idtemplates\\sky\\adobeid.pdf"), fInfoLevelId=0x0, lpFileInformation=0x31e6a0 | out: lpFileInformation=0x31e6a0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9c36ae00, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x80a04a60, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x3ea600, ftLastWriteTime.dwHighDateTime=0x1d6eb7f, nFileSizeHigh=0x0, nFileSizeLow=0x16200)) returned 1 [0048.301] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e620) returned 1 [0048.301] MoveFileW (lpExistingFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\SKY\\AdobeID.pdf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\idtemplates\\sky\\adobeid.pdf"), lpNewFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\SKY\\AdobeID.pdf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\idtemplates\\sky\\adobeid.pdf")) returned 1 [0048.302] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\SKY\\DefaultID.pdf", nBufferLength=0x105, lpBuffer=0x31e0a4, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\SKY\\DefaultID.pdf", lpFilePart=0x0) returned 0x4d [0048.302] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e598) returned 1 [0048.302] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\SKY\\DefaultID.pdf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\idtemplates\\sky\\defaultid.pdf"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x274 [0048.302] GetFileType (hFile=0x274) returned 0x1 [0048.302] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e594) returned 1 [0048.302] GetFileType (hFile=0x274) returned 0x1 [0048.302] GetFileSize (in: hFile=0x274, lpFileSizeHigh=0x31e6a0 | out: lpFileSizeHigh=0x31e6a0*=0x0) returned 0x13d46 [0048.302] ReadFile (in: hFile=0x274, lpBuffer=0x267db9c, nNumberOfBytesToRead=0x13d46, lpNumberOfBytesRead=0x31e64c, lpOverlapped=0x0 | out: lpBuffer=0x267db9c*, lpNumberOfBytesRead=0x31e64c*=0x13d46, lpOverlapped=0x0) returned 1 [0048.320] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\SKY\\DefaultID.pdf", nBufferLength=0x105, lpBuffer=0x31e090, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\SKY\\DefaultID.pdf", lpFilePart=0x0) returned 0x4d [0048.320] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e584) returned 1 [0048.320] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\SKY\\DefaultID.pdf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\idtemplates\\sky\\defaultid.pdf"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x274 [0048.321] GetFileType (hFile=0x274) returned 0x1 [0048.322] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e580) returned 1 [0048.322] GetFileType (hFile=0x274) returned 0x1 [0048.322] WriteFile (in: hFile=0x274, lpBuffer=0x2706188*, nNumberOfBytesToWrite=0x13d50, lpNumberOfBytesWritten=0x31e640, lpOverlapped=0x0 | out: lpBuffer=0x2706188*, lpNumberOfBytesWritten=0x31e640*=0x13d50, lpOverlapped=0x0) returned 1 [0048.324] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\SKY\\DefaultID.pdf", nBufferLength=0x105, lpBuffer=0x31e1c4, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\SKY\\DefaultID.pdf", lpFilePart=0x0) returned 0x4d [0048.324] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\SKY\\DefaultID.pdf", nBufferLength=0x105, lpBuffer=0x31e1c4, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\SKY\\DefaultID.pdf", lpFilePart=0x0) returned 0x4d [0048.324] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e624) returned 1 [0048.324] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\SKY\\DefaultID.pdf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\idtemplates\\sky\\defaultid.pdf"), fInfoLevelId=0x0, lpFileInformation=0x31e6a0 | out: lpFileInformation=0x31e6a0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9c36ae00, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x80a04a60, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x410760, ftLastWriteTime.dwHighDateTime=0x1d6eb7f, nFileSizeHigh=0x0, nFileSizeLow=0x13d50)) returned 1 [0048.324] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e620) returned 1 [0048.324] MoveFileW (lpExistingFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\SKY\\DefaultID.pdf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\idtemplates\\sky\\defaultid.pdf"), lpNewFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\SKY\\DefaultID.pdf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\idtemplates\\sky\\defaultid.pdf")) returned 1 [0048.324] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e6cc) returned 1 [0048.324] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\SLV", nBufferLength=0x105, lpBuffer=0x31e1d4, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\SLV", lpFilePart=0x0) returned 0x3f [0048.325] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\SLV\\", nBufferLength=0x105, lpBuffer=0x31e1a8, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\SLV\\", lpFilePart=0x0) returned 0x40 [0048.325] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\SLV\\*", lpFindFileData=0x31e3f4 | out: lpFindFileData=0x31e3f4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x80a04a60, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x80a04a60, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x80a04a60, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x381d00 [0048.327] FindNextFileW (in: hFindFile=0x381d00, lpFindFileData=0x31e404 | out: lpFindFileData=0x31e404*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x80a04a60, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x80a04a60, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x80a04a60, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0048.327] FindNextFileW (in: hFindFile=0x381d00, lpFindFileData=0x31e404 | out: lpFindFileData=0x31e404*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9b058100, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x80a04a60, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9b058100, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x6133, dwReserved0=0x0, dwReserved1=0x0, cFileName="AdobeID.pdf", cAlternateFileName="")) returned 1 [0048.327] FindNextFileW (in: hFindFile=0x381d00, lpFindFileData=0x31e404 | out: lpFindFileData=0x31e404*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9b058100, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x80a04a60, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9b058100, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x5aac, dwReserved0=0x0, dwReserved1=0x0, cFileName="DefaultID.pdf", cAlternateFileName="DEFAUL~1.PDF")) returned 1 [0048.327] FindNextFileW (in: hFindFile=0x381d00, lpFindFileData=0x31e404 | out: lpFindFileData=0x31e404*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0048.327] FindClose (in: hFindFile=0x381d00 | out: hFindFile=0x381d00) returned 1 [0048.327] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e68c) returned 1 [0048.327] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e698) returned 1 [0048.328] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e6cc) returned 1 [0048.328] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\SLV", nBufferLength=0x105, lpBuffer=0x31e1d4, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\SLV", lpFilePart=0x0) returned 0x3f [0048.328] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\SLV\\", nBufferLength=0x105, lpBuffer=0x31e1a8, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\SLV\\", lpFilePart=0x0) returned 0x40 [0048.328] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\SLV\\*", lpFindFileData=0x31e3f4 | out: lpFindFileData=0x31e3f4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x80a04a60, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x80a04a60, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x80a04a60, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x381d00 [0048.328] FindNextFileW (in: hFindFile=0x381d00, lpFindFileData=0x31e404 | out: lpFindFileData=0x31e404*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x80a04a60, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x80a04a60, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x80a04a60, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0048.328] FindNextFileW (in: hFindFile=0x381d00, lpFindFileData=0x31e404 | out: lpFindFileData=0x31e404*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9b058100, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x80a04a60, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9b058100, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x6133, dwReserved0=0x0, dwReserved1=0x0, cFileName="AdobeID.pdf", cAlternateFileName="")) returned 1 [0048.328] FindNextFileW (in: hFindFile=0x381d00, lpFindFileData=0x31e404 | out: lpFindFileData=0x31e404*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9b058100, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x80a04a60, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9b058100, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x5aac, dwReserved0=0x0, dwReserved1=0x0, cFileName="DefaultID.pdf", cAlternateFileName="DEFAUL~1.PDF")) returned 1 [0048.328] FindNextFileW (in: hFindFile=0x381d00, lpFindFileData=0x31e404 | out: lpFindFileData=0x31e404*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9b058100, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x80a04a60, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9b058100, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x5aac, dwReserved0=0x0, dwReserved1=0x0, cFileName="DefaultID.pdf", cAlternateFileName="DEFAUL~1.PDF")) returned 0 [0048.328] FindClose (in: hFindFile=0x381d00 | out: hFindFile=0x381d00) returned 1 [0048.328] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e68c) returned 1 [0048.328] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e698) returned 1 [0048.329] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\SLV\\AdobeID.pdf", nBufferLength=0x105, lpBuffer=0x31e0a4, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\SLV\\AdobeID.pdf", lpFilePart=0x0) returned 0x4b [0048.329] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e598) returned 1 [0048.329] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\SLV\\AdobeID.pdf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\idtemplates\\slv\\adobeid.pdf"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x274 [0048.329] GetFileType (hFile=0x274) returned 0x1 [0048.329] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e594) returned 1 [0048.329] GetFileType (hFile=0x274) returned 0x1 [0048.329] GetFileSize (in: hFile=0x274, lpFileSizeHigh=0x31e6a0 | out: lpFileSizeHigh=0x31e6a0*=0x0) returned 0x6133 [0048.329] ReadFile (in: hFile=0x274, lpBuffer=0x271be38, nNumberOfBytesToRead=0x6133, lpNumberOfBytesRead=0x31e64c, lpOverlapped=0x0 | out: lpBuffer=0x271be38*, lpNumberOfBytesRead=0x31e64c*=0x6133, lpOverlapped=0x0) returned 1 [0048.350] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\SLV\\AdobeID.pdf", nBufferLength=0x105, lpBuffer=0x31e090, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\SLV\\AdobeID.pdf", lpFilePart=0x0) returned 0x4b [0048.350] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e584) returned 1 [0048.350] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\SLV\\AdobeID.pdf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\idtemplates\\slv\\adobeid.pdf"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x274 [0048.351] GetFileType (hFile=0x274) returned 0x1 [0048.351] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e580) returned 1 [0048.351] GetFileType (hFile=0x274) returned 0x1 [0048.351] WriteFile (in: hFile=0x274, lpBuffer=0x2787260*, nNumberOfBytesToWrite=0x6140, lpNumberOfBytesWritten=0x31e640, lpOverlapped=0x0 | out: lpBuffer=0x2787260*, lpNumberOfBytesWritten=0x31e640*=0x6140, lpOverlapped=0x0) returned 1 [0048.352] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\SLV\\AdobeID.pdf", nBufferLength=0x105, lpBuffer=0x31e1c4, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\SLV\\AdobeID.pdf", lpFilePart=0x0) returned 0x4b [0048.352] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\SLV\\AdobeID.pdf", nBufferLength=0x105, lpBuffer=0x31e1c4, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\SLV\\AdobeID.pdf", lpFilePart=0x0) returned 0x4b [0048.352] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e624) returned 1 [0048.352] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\SLV\\AdobeID.pdf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\idtemplates\\slv\\adobeid.pdf"), fInfoLevelId=0x0, lpFileInformation=0x31e6a0 | out: lpFileInformation=0x31e6a0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9b058100, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x80a04a60, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x45ca20, ftLastWriteTime.dwHighDateTime=0x1d6eb7f, nFileSizeHigh=0x0, nFileSizeLow=0x6140)) returned 1 [0048.352] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e620) returned 1 [0048.352] MoveFileW (lpExistingFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\SLV\\AdobeID.pdf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\idtemplates\\slv\\adobeid.pdf"), lpNewFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\SLV\\AdobeID.pdf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\idtemplates\\slv\\adobeid.pdf")) returned 1 [0048.353] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\SLV\\DefaultID.pdf", nBufferLength=0x105, lpBuffer=0x31e0a4, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\SLV\\DefaultID.pdf", lpFilePart=0x0) returned 0x4d [0048.353] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e598) returned 1 [0048.353] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\SLV\\DefaultID.pdf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\idtemplates\\slv\\defaultid.pdf"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x274 [0048.353] GetFileType (hFile=0x274) returned 0x1 [0048.353] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e594) returned 1 [0048.353] GetFileType (hFile=0x274) returned 0x1 [0048.353] GetFileSize (in: hFile=0x274, lpFileSizeHigh=0x31e6a0 | out: lpFileSizeHigh=0x31e6a0*=0x0) returned 0x5aac [0048.353] ReadFile (in: hFile=0x274, lpBuffer=0x278d75c, nNumberOfBytesToRead=0x5aac, lpNumberOfBytesRead=0x31e64c, lpOverlapped=0x0 | out: lpBuffer=0x278d75c*, lpNumberOfBytesRead=0x31e64c*=0x5aac, lpOverlapped=0x0) returned 1 [0048.371] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\SLV\\DefaultID.pdf", nBufferLength=0x105, lpBuffer=0x31e090, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\SLV\\DefaultID.pdf", lpFilePart=0x0) returned 0x4d [0048.371] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e584) returned 1 [0048.371] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\SLV\\DefaultID.pdf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\idtemplates\\slv\\defaultid.pdf"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x274 [0048.372] GetFileType (hFile=0x274) returned 0x1 [0048.372] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e580) returned 1 [0048.372] GetFileType (hFile=0x274) returned 0x1 [0048.372] WriteFile (in: hFile=0x274, lpBuffer=0x27f6ab0*, nNumberOfBytesToWrite=0x5ab0, lpNumberOfBytesWritten=0x31e640, lpOverlapped=0x0 | out: lpBuffer=0x27f6ab0*, lpNumberOfBytesWritten=0x31e640*=0x5ab0, lpOverlapped=0x0) returned 1 [0048.373] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\SLV\\DefaultID.pdf", nBufferLength=0x105, lpBuffer=0x31e1c4, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\SLV\\DefaultID.pdf", lpFilePart=0x0) returned 0x4d [0048.373] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\SLV\\DefaultID.pdf", nBufferLength=0x105, lpBuffer=0x31e1c4, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\SLV\\DefaultID.pdf", lpFilePart=0x0) returned 0x4d [0048.374] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e624) returned 1 [0048.374] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\SLV\\DefaultID.pdf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\idtemplates\\slv\\defaultid.pdf"), fInfoLevelId=0x0, lpFileInformation=0x31e6a0 | out: lpFileInformation=0x31e6a0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9b058100, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x80a04a60, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x482b80, ftLastWriteTime.dwHighDateTime=0x1d6eb7f, nFileSizeHigh=0x0, nFileSizeLow=0x5ab0)) returned 1 [0048.374] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e620) returned 1 [0048.374] MoveFileW (lpExistingFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\SLV\\DefaultID.pdf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\idtemplates\\slv\\defaultid.pdf"), lpNewFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\SLV\\DefaultID.pdf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\idtemplates\\slv\\defaultid.pdf")) returned 1 [0048.374] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e6cc) returned 1 [0048.374] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\SUO", nBufferLength=0x105, lpBuffer=0x31e1d4, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\SUO", lpFilePart=0x0) returned 0x3f [0048.374] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\SUO\\", nBufferLength=0x105, lpBuffer=0x31e1a8, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\SUO\\", lpFilePart=0x0) returned 0x40 [0048.374] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\SUO\\*", lpFindFileData=0x31e3f4 | out: lpFindFileData=0x31e3f4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x805b4280, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x805b4280, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x805b4280, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x381e40 [0048.374] FindNextFileW (in: hFindFile=0x381e40, lpFindFileData=0x31e404 | out: lpFindFileData=0x31e404*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x805b4280, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x805b4280, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x805b4280, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0048.375] FindNextFileW (in: hFindFile=0x381e40, lpFindFileData=0x31e404 | out: lpFindFileData=0x31e404*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9640cd00, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x805b4280, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9640cd00, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x107e2, dwReserved0=0x0, dwReserved1=0x0, cFileName="AdobeID.pdf", cAlternateFileName="")) returned 1 [0048.375] FindNextFileW (in: hFindFile=0x381e40, lpFindFileData=0x31e404 | out: lpFindFileData=0x31e404*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9640cd00, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x805b4280, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9640cd00, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x102c8, dwReserved0=0x0, dwReserved1=0x0, cFileName="DefaultID.pdf", cAlternateFileName="DEFAUL~1.PDF")) returned 1 [0048.375] FindNextFileW (in: hFindFile=0x381e40, lpFindFileData=0x31e404 | out: lpFindFileData=0x31e404*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0048.375] FindClose (in: hFindFile=0x381e40 | out: hFindFile=0x381e40) returned 1 [0048.375] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e68c) returned 1 [0048.375] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e698) returned 1 [0048.375] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e6cc) returned 1 [0048.375] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\SUO", nBufferLength=0x105, lpBuffer=0x31e1d4, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\SUO", lpFilePart=0x0) returned 0x3f [0048.375] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\SUO\\", nBufferLength=0x105, lpBuffer=0x31e1a8, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\SUO\\", lpFilePart=0x0) returned 0x40 [0048.375] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\SUO\\*", lpFindFileData=0x31e3f4 | out: lpFindFileData=0x31e3f4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x805b4280, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x805b4280, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x805b4280, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x381e40 [0048.375] FindNextFileW (in: hFindFile=0x381e40, lpFindFileData=0x31e404 | out: lpFindFileData=0x31e404*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x805b4280, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x805b4280, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x805b4280, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0048.375] FindNextFileW (in: hFindFile=0x381e40, lpFindFileData=0x31e404 | out: lpFindFileData=0x31e404*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9640cd00, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x805b4280, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9640cd00, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x107e2, dwReserved0=0x0, dwReserved1=0x0, cFileName="AdobeID.pdf", cAlternateFileName="")) returned 1 [0048.376] FindNextFileW (in: hFindFile=0x381e40, lpFindFileData=0x31e404 | out: lpFindFileData=0x31e404*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9640cd00, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x805b4280, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9640cd00, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x102c8, dwReserved0=0x0, dwReserved1=0x0, cFileName="DefaultID.pdf", cAlternateFileName="DEFAUL~1.PDF")) returned 1 [0048.376] FindNextFileW (in: hFindFile=0x381e40, lpFindFileData=0x31e404 | out: lpFindFileData=0x31e404*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9640cd00, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x805b4280, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9640cd00, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x102c8, dwReserved0=0x0, dwReserved1=0x0, cFileName="DefaultID.pdf", cAlternateFileName="DEFAUL~1.PDF")) returned 0 [0048.376] FindClose (in: hFindFile=0x381e40 | out: hFindFile=0x381e40) returned 1 [0048.376] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e68c) returned 1 [0048.376] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e698) returned 1 [0048.376] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\SUO\\AdobeID.pdf", nBufferLength=0x105, lpBuffer=0x31e0a4, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\SUO\\AdobeID.pdf", lpFilePart=0x0) returned 0x4b [0048.376] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e598) returned 1 [0048.376] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\SUO\\AdobeID.pdf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\idtemplates\\suo\\adobeid.pdf"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x274 [0048.376] GetFileType (hFile=0x274) returned 0x1 [0048.377] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e594) returned 1 [0048.377] GetFileType (hFile=0x274) returned 0x1 [0048.377] GetFileSize (in: hFile=0x274, lpFileSizeHigh=0x31e6a0 | out: lpFileSizeHigh=0x31e6a0*=0x0) returned 0x107e2 [0048.377] ReadFile (in: hFile=0x274, lpBuffer=0x27fe4c0, nNumberOfBytesToRead=0x107e2, lpNumberOfBytesRead=0x31e64c, lpOverlapped=0x0 | out: lpBuffer=0x27fe4c0*, lpNumberOfBytesRead=0x31e64c*=0x107e2, lpOverlapped=0x0) returned 1 [0048.440] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\SUO\\AdobeID.pdf", nBufferLength=0x105, lpBuffer=0x31e090, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\SUO\\AdobeID.pdf", lpFilePart=0x0) returned 0x4b [0048.440] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e584) returned 1 [0048.440] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\SUO\\AdobeID.pdf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\idtemplates\\suo\\adobeid.pdf"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x274 [0048.443] GetFileType (hFile=0x274) returned 0x1 [0048.443] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e580) returned 1 [0048.443] GetFileType (hFile=0x274) returned 0x1 [0048.443] WriteFile (in: hFile=0x274, lpBuffer=0x268d888*, nNumberOfBytesToWrite=0x107f0, lpNumberOfBytesWritten=0x31e640, lpOverlapped=0x0 | out: lpBuffer=0x268d888*, lpNumberOfBytesWritten=0x31e640*=0x107f0, lpOverlapped=0x0) returned 1 [0048.445] CloseHandle (hObject=0x274) returned 1 [0048.445] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\SUO\\AdobeID.pdf", nBufferLength=0x105, lpBuffer=0x31e1c4, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\SUO\\AdobeID.pdf", lpFilePart=0x0) returned 0x4b [0048.445] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\SUO\\AdobeID.pdf", nBufferLength=0x105, lpBuffer=0x31e1c4, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\SUO\\AdobeID.pdf", lpFilePart=0x0) returned 0x4b [0048.445] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e624) returned 1 [0048.445] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\SUO\\AdobeID.pdf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\idtemplates\\suo\\adobeid.pdf"), fInfoLevelId=0x0, lpFileInformation=0x31e6a0 | out: lpFileInformation=0x31e6a0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9640cd00, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x805b4280, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x541260, ftLastWriteTime.dwHighDateTime=0x1d6eb7f, nFileSizeHigh=0x0, nFileSizeLow=0x107f0)) returned 1 [0048.445] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e620) returned 1 [0048.445] MoveFileW (lpExistingFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\SUO\\AdobeID.pdf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\idtemplates\\suo\\adobeid.pdf"), lpNewFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\SUO\\AdobeID.pdf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\idtemplates\\suo\\adobeid.pdf")) returned 1 [0048.447] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\SUO\\DefaultID.pdf", nBufferLength=0x105, lpBuffer=0x31e0a4, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\SUO\\DefaultID.pdf", lpFilePart=0x0) returned 0x4d [0048.447] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e598) returned 1 [0048.447] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\SUO\\DefaultID.pdf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\idtemplates\\suo\\defaultid.pdf"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x274 [0048.447] GetFileType (hFile=0x274) returned 0x1 [0048.447] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e594) returned 1 [0048.447] GetFileType (hFile=0x274) returned 0x1 [0048.447] GetFileSize (in: hFile=0x274, lpFileSizeHigh=0x31e6a0 | out: lpFileSizeHigh=0x31e6a0*=0x0) returned 0x102c8 [0048.447] ReadFile (in: hFile=0x274, lpBuffer=0x269e434, nNumberOfBytesToRead=0x102c8, lpNumberOfBytesRead=0x31e64c, lpOverlapped=0x0 | out: lpBuffer=0x269e434*, lpNumberOfBytesRead=0x31e64c*=0x102c8, lpOverlapped=0x0) returned 1 [0048.449] CloseHandle (hObject=0x274) returned 1 [0048.464] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\SUO\\DefaultID.pdf", nBufferLength=0x105, lpBuffer=0x31e090, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\SUO\\DefaultID.pdf", lpFilePart=0x0) returned 0x4d [0048.464] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e584) returned 1 [0048.464] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\SUO\\DefaultID.pdf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\idtemplates\\suo\\defaultid.pdf"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x274 [0048.466] GetFileType (hFile=0x274) returned 0x1 [0048.466] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e580) returned 1 [0048.466] GetFileType (hFile=0x274) returned 0x1 [0048.466] WriteFile (in: hFile=0x274, lpBuffer=0x271bbf8*, nNumberOfBytesToWrite=0x102d0, lpNumberOfBytesWritten=0x31e640, lpOverlapped=0x0 | out: lpBuffer=0x271bbf8*, lpNumberOfBytesWritten=0x31e640*=0x102d0, lpOverlapped=0x0) returned 1 [0048.467] CloseHandle (hObject=0x274) returned 1 [0048.467] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\SUO\\DefaultID.pdf", nBufferLength=0x105, lpBuffer=0x31e1c4, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\SUO\\DefaultID.pdf", lpFilePart=0x0) returned 0x4d [0048.468] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\SUO\\DefaultID.pdf", nBufferLength=0x105, lpBuffer=0x31e1c4, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\SUO\\DefaultID.pdf", lpFilePart=0x0) returned 0x4d [0048.468] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e624) returned 1 [0048.468] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\SUO\\DefaultID.pdf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\idtemplates\\suo\\defaultid.pdf"), fInfoLevelId=0x0, lpFileInformation=0x31e6a0 | out: lpFileInformation=0x31e6a0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9640cd00, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x805b4280, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x5673c0, ftLastWriteTime.dwHighDateTime=0x1d6eb7f, nFileSizeHigh=0x0, nFileSizeLow=0x102d0)) returned 1 [0048.468] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e620) returned 1 [0048.468] MoveFileW (lpExistingFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\SUO\\DefaultID.pdf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\idtemplates\\suo\\defaultid.pdf"), lpNewFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\SUO\\DefaultID.pdf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\idtemplates\\suo\\defaultid.pdf")) returned 1 [0048.468] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e6cc) returned 1 [0048.468] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\SVE", nBufferLength=0x105, lpBuffer=0x31e1d4, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\SVE", lpFilePart=0x0) returned 0x3f [0048.468] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\SVE\\", nBufferLength=0x105, lpBuffer=0x31e1a8, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\SVE\\", lpFilePart=0x0) returned 0x40 [0048.468] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\SVE\\*", lpFindFileData=0x31e3f4 | out: lpFindFileData=0x31e3f4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x805da3e0, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x80600540, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x80600540, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x381d00 [0048.469] FindNextFileW (in: hFindFile=0x381d00, lpFindFileData=0x31e404 | out: lpFindFileData=0x31e404*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x805da3e0, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x80600540, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x80600540, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0048.469] FindNextFileW (in: hFindFile=0x381d00, lpFindFileData=0x31e404 | out: lpFindFileData=0x31e404*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9640cd00, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x805da3e0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9640cd00, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x12696, dwReserved0=0x0, dwReserved1=0x0, cFileName="AdobeID.pdf", cAlternateFileName="")) returned 1 [0048.469] FindNextFileW (in: hFindFile=0x381d00, lpFindFileData=0x31e404 | out: lpFindFileData=0x31e404*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9640cd00, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x80600540, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9640cd00, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x11c35, dwReserved0=0x0, dwReserved1=0x0, cFileName="DefaultID.pdf", cAlternateFileName="DEFAUL~1.PDF")) returned 1 [0048.469] FindNextFileW (in: hFindFile=0x381d00, lpFindFileData=0x31e404 | out: lpFindFileData=0x31e404*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0048.469] FindClose (in: hFindFile=0x381d00 | out: hFindFile=0x381d00) returned 1 [0048.469] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e68c) returned 1 [0048.469] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e698) returned 1 [0048.469] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e6cc) returned 1 [0048.469] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\SVE", nBufferLength=0x105, lpBuffer=0x31e1d4, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\SVE", lpFilePart=0x0) returned 0x3f [0048.470] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\SVE\\", nBufferLength=0x105, lpBuffer=0x31e1a8, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\SVE\\", lpFilePart=0x0) returned 0x40 [0048.470] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\SVE\\*", lpFindFileData=0x31e3f4 | out: lpFindFileData=0x31e3f4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x805da3e0, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x80600540, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x80600540, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x381d00 [0048.470] FindNextFileW (in: hFindFile=0x381d00, lpFindFileData=0x31e404 | out: lpFindFileData=0x31e404*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x805da3e0, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x80600540, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x80600540, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0048.470] FindNextFileW (in: hFindFile=0x381d00, lpFindFileData=0x31e404 | out: lpFindFileData=0x31e404*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9640cd00, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x805da3e0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9640cd00, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x12696, dwReserved0=0x0, dwReserved1=0x0, cFileName="AdobeID.pdf", cAlternateFileName="")) returned 1 [0048.470] FindNextFileW (in: hFindFile=0x381d00, lpFindFileData=0x31e404 | out: lpFindFileData=0x31e404*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9640cd00, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x80600540, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9640cd00, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x11c35, dwReserved0=0x0, dwReserved1=0x0, cFileName="DefaultID.pdf", cAlternateFileName="DEFAUL~1.PDF")) returned 1 [0048.470] FindNextFileW (in: hFindFile=0x381d00, lpFindFileData=0x31e404 | out: lpFindFileData=0x31e404*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9640cd00, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x80600540, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9640cd00, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x11c35, dwReserved0=0x0, dwReserved1=0x0, cFileName="DefaultID.pdf", cAlternateFileName="DEFAUL~1.PDF")) returned 0 [0048.470] FindClose (in: hFindFile=0x381d00 | out: hFindFile=0x381d00) returned 1 [0048.470] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e68c) returned 1 [0048.471] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e698) returned 1 [0048.471] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\SVE\\AdobeID.pdf", nBufferLength=0x105, lpBuffer=0x31e0a4, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\SVE\\AdobeID.pdf", lpFilePart=0x0) returned 0x4b [0048.471] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e598) returned 1 [0048.471] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\SVE\\AdobeID.pdf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\idtemplates\\sve\\adobeid.pdf"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x274 [0048.471] GetFileType (hFile=0x274) returned 0x1 [0048.471] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e594) returned 1 [0048.471] GetFileType (hFile=0x274) returned 0x1 [0048.471] GetFileSize (in: hFile=0x274, lpFileSizeHigh=0x31e6a0 | out: lpFileSizeHigh=0x31e6a0*=0x0) returned 0x12696 [0048.471] ReadFile (in: hFile=0x274, lpBuffer=0x272de28, nNumberOfBytesToRead=0x12696, lpNumberOfBytesRead=0x31e64c, lpOverlapped=0x0 | out: lpBuffer=0x272de28*, lpNumberOfBytesRead=0x31e64c*=0x12696, lpOverlapped=0x0) returned 1 [0048.475] CloseHandle (hObject=0x274) returned 1 [0048.491] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\SVE\\AdobeID.pdf", nBufferLength=0x105, lpBuffer=0x31e090, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\SVE\\AdobeID.pdf", lpFilePart=0x0) returned 0x4b [0048.491] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e584) returned 1 [0048.491] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\SVE\\AdobeID.pdf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\idtemplates\\sve\\adobeid.pdf"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x274 [0048.492] GetFileType (hFile=0x274) returned 0x1 [0048.492] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e580) returned 1 [0048.492] GetFileType (hFile=0x274) returned 0x1 [0048.492] WriteFile (in: hFile=0x274, lpBuffer=0x27b2004*, nNumberOfBytesToWrite=0x126a0, lpNumberOfBytesWritten=0x31e640, lpOverlapped=0x0 | out: lpBuffer=0x27b2004*, lpNumberOfBytesWritten=0x31e640*=0x126a0, lpOverlapped=0x0) returned 1 [0048.494] CloseHandle (hObject=0x274) returned 1 [0048.494] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\SVE\\AdobeID.pdf", nBufferLength=0x105, lpBuffer=0x31e1c4, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\SVE\\AdobeID.pdf", lpFilePart=0x0) returned 0x4b [0048.494] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\SVE\\AdobeID.pdf", nBufferLength=0x105, lpBuffer=0x31e1c4, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\SVE\\AdobeID.pdf", lpFilePart=0x0) returned 0x4b [0048.494] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e624) returned 1 [0048.494] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\SVE\\AdobeID.pdf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\idtemplates\\sve\\adobeid.pdf"), fInfoLevelId=0x0, lpFileInformation=0x31e6a0 | out: lpFileInformation=0x31e6a0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9640cd00, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x805da3e0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x5b3680, ftLastWriteTime.dwHighDateTime=0x1d6eb7f, nFileSizeHigh=0x0, nFileSizeLow=0x126a0)) returned 1 [0048.495] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e620) returned 1 [0048.495] MoveFileW (lpExistingFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\SVE\\AdobeID.pdf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\idtemplates\\sve\\adobeid.pdf"), lpNewFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\SVE\\AdobeID.pdf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\idtemplates\\sve\\adobeid.pdf")) returned 1 [0048.495] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\SVE\\DefaultID.pdf", nBufferLength=0x105, lpBuffer=0x31e0a4, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\SVE\\DefaultID.pdf", lpFilePart=0x0) returned 0x4d [0048.495] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e598) returned 1 [0048.495] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\SVE\\DefaultID.pdf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\idtemplates\\sve\\defaultid.pdf"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x274 [0048.496] GetFileType (hFile=0x274) returned 0x1 [0048.496] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e594) returned 1 [0048.496] GetFileType (hFile=0x274) returned 0x1 [0048.496] GetFileSize (in: hFile=0x274, lpFileSizeHigh=0x31e6a0 | out: lpFileSizeHigh=0x31e6a0*=0x0) returned 0x11c35 [0048.496] ReadFile (in: hFile=0x274, lpBuffer=0x27c4a60, nNumberOfBytesToRead=0x11c35, lpNumberOfBytesRead=0x31e64c, lpOverlapped=0x0 | out: lpBuffer=0x27c4a60*, lpNumberOfBytesRead=0x31e64c*=0x11c35, lpOverlapped=0x0) returned 1 [0048.498] CloseHandle (hObject=0x274) returned 1 [0048.515] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\SVE\\DefaultID.pdf", nBufferLength=0x105, lpBuffer=0x31e090, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\SVE\\DefaultID.pdf", lpFilePart=0x0) returned 0x4d [0048.515] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e584) returned 1 [0048.515] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\SVE\\DefaultID.pdf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\idtemplates\\sve\\defaultid.pdf"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x274 [0048.516] GetFileType (hFile=0x274) returned 0x1 [0048.516] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e580) returned 1 [0048.516] GetFileType (hFile=0x274) returned 0x1 [0048.516] WriteFile (in: hFile=0x274, lpBuffer=0x2651d54*, nNumberOfBytesToWrite=0x11c40, lpNumberOfBytesWritten=0x31e640, lpOverlapped=0x0 | out: lpBuffer=0x2651d54*, lpNumberOfBytesWritten=0x31e640*=0x11c40, lpOverlapped=0x0) returned 1 [0048.518] CloseHandle (hObject=0x274) returned 1 [0048.518] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\SVE\\DefaultID.pdf", nBufferLength=0x105, lpBuffer=0x31e1c4, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\SVE\\DefaultID.pdf", lpFilePart=0x0) returned 0x4d [0048.518] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\SVE\\DefaultID.pdf", nBufferLength=0x105, lpBuffer=0x31e1c4, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\SVE\\DefaultID.pdf", lpFilePart=0x0) returned 0x4d [0048.518] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e624) returned 1 [0048.518] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\SVE\\DefaultID.pdf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\idtemplates\\sve\\defaultid.pdf"), fInfoLevelId=0x0, lpFileInformation=0x31e6a0 | out: lpFileInformation=0x31e6a0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9640cd00, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x80600540, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x5ff940, ftLastWriteTime.dwHighDateTime=0x1d6eb7f, nFileSizeHigh=0x0, nFileSizeLow=0x11c40)) returned 1 [0048.518] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e620) returned 1 [0048.518] MoveFileW (lpExistingFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\SVE\\DefaultID.pdf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\idtemplates\\sve\\defaultid.pdf"), lpNewFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\SVE\\DefaultID.pdf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\idtemplates\\sve\\defaultid.pdf")) returned 1 [0048.519] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e6cc) returned 1 [0048.519] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\TUR", nBufferLength=0x105, lpBuffer=0x31e1d4, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\TUR", lpFilePart=0x0) returned 0x3f [0048.519] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\TUR\\", nBufferLength=0x105, lpBuffer=0x31e1a8, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\TUR\\", lpFilePart=0x0) returned 0x40 [0048.519] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\TUR\\*", lpFindFileData=0x31e3f4 | out: lpFindFileData=0x31e3f4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x809de900, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x80a04a60, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x80a04a60, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x381f40 [0048.520] FindNextFileW (in: hFindFile=0x381f40, lpFindFileData=0x31e404 | out: lpFindFileData=0x31e404*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x809de900, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x80a04a60, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x80a04a60, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0048.520] FindNextFileW (in: hFindFile=0x381f40, lpFindFileData=0x31e404 | out: lpFindFileData=0x31e404*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9b058100, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x80a04a60, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9b058100, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x49db0, dwReserved0=0x0, dwReserved1=0x0, cFileName="AdobeID.pdf", cAlternateFileName="")) returned 1 [0048.520] FindNextFileW (in: hFindFile=0x381f40, lpFindFileData=0x31e404 | out: lpFindFileData=0x31e404*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9b058100, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x80a04a60, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9b058100, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x48d8f, dwReserved0=0x0, dwReserved1=0x0, cFileName="DefaultID.pdf", cAlternateFileName="DEFAUL~1.PDF")) returned 1 [0048.520] FindNextFileW (in: hFindFile=0x381f40, lpFindFileData=0x31e404 | out: lpFindFileData=0x31e404*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0048.520] FindClose (in: hFindFile=0x381f40 | out: hFindFile=0x381f40) returned 1 [0048.522] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e68c) returned 1 [0048.522] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e698) returned 1 [0048.522] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e6cc) returned 1 [0048.523] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\TUR", nBufferLength=0x105, lpBuffer=0x31e1d4, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\TUR", lpFilePart=0x0) returned 0x3f [0048.523] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\TUR\\", nBufferLength=0x105, lpBuffer=0x31e1a8, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\TUR\\", lpFilePart=0x0) returned 0x40 [0048.523] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\TUR\\*", lpFindFileData=0x31e3f4 | out: lpFindFileData=0x31e3f4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x809de900, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x80a04a60, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x80a04a60, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x381f40 [0048.523] FindNextFileW (in: hFindFile=0x381f40, lpFindFileData=0x31e404 | out: lpFindFileData=0x31e404*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x809de900, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x80a04a60, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x80a04a60, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0048.523] FindNextFileW (in: hFindFile=0x381f40, lpFindFileData=0x31e404 | out: lpFindFileData=0x31e404*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9b058100, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x80a04a60, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9b058100, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x49db0, dwReserved0=0x0, dwReserved1=0x0, cFileName="AdobeID.pdf", cAlternateFileName="")) returned 1 [0048.523] FindNextFileW (in: hFindFile=0x381f40, lpFindFileData=0x31e404 | out: lpFindFileData=0x31e404*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9b058100, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x80a04a60, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9b058100, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x48d8f, dwReserved0=0x0, dwReserved1=0x0, cFileName="DefaultID.pdf", cAlternateFileName="DEFAUL~1.PDF")) returned 1 [0048.523] FindNextFileW (in: hFindFile=0x381f40, lpFindFileData=0x31e404 | out: lpFindFileData=0x31e404*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9b058100, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x80a04a60, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9b058100, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x48d8f, dwReserved0=0x0, dwReserved1=0x0, cFileName="DefaultID.pdf", cAlternateFileName="DEFAUL~1.PDF")) returned 0 [0048.523] FindClose (in: hFindFile=0x381f40 | out: hFindFile=0x381f40) returned 1 [0048.523] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e68c) returned 1 [0048.524] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e698) returned 1 [0048.524] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\TUR\\AdobeID.pdf", nBufferLength=0x105, lpBuffer=0x31e0a4, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\TUR\\AdobeID.pdf", lpFilePart=0x0) returned 0x4b [0048.524] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e598) returned 1 [0048.524] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\TUR\\AdobeID.pdf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\idtemplates\\tur\\adobeid.pdf"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x274 [0048.524] GetFileType (hFile=0x274) returned 0x1 [0048.524] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e594) returned 1 [0048.524] GetFileType (hFile=0x274) returned 0x1 [0048.524] GetFileSize (in: hFile=0x274, lpFileSizeHigh=0x31e6a0 | out: lpFileSizeHigh=0x31e6a0*=0x0) returned 0x49db0 [0048.524] ReadFile (in: hFile=0x274, lpBuffer=0x370d0b0, nNumberOfBytesToRead=0x49db0, lpNumberOfBytesRead=0x31e64c, lpOverlapped=0x0 | out: lpBuffer=0x370d0b0*, lpNumberOfBytesRead=0x31e64c*=0x49db0, lpOverlapped=0x0) returned 1 [0048.538] CloseHandle (hObject=0x274) returned 1 [0048.586] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\TUR\\AdobeID.pdf", nBufferLength=0x105, lpBuffer=0x31e090, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\TUR\\AdobeID.pdf", lpFilePart=0x0) returned 0x4b [0048.586] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e584) returned 1 [0048.586] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\TUR\\AdobeID.pdf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\idtemplates\\tur\\adobeid.pdf"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x274 [0048.589] GetFileType (hFile=0x274) returned 0x1 [0048.589] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e580) returned 1 [0048.589] GetFileType (hFile=0x274) returned 0x1 [0048.589] WriteFile (in: hFile=0x274, lpBuffer=0x3978388*, nNumberOfBytesToWrite=0x49dc0, lpNumberOfBytesWritten=0x31e640, lpOverlapped=0x0 | out: lpBuffer=0x3978388*, lpNumberOfBytesWritten=0x31e640*=0x49dc0, lpOverlapped=0x0) returned 1 [0048.594] CloseHandle (hObject=0x274) returned 1 [0048.595] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\TUR\\AdobeID.pdf", nBufferLength=0x105, lpBuffer=0x31e1c4, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\TUR\\AdobeID.pdf", lpFilePart=0x0) returned 0x4b [0048.595] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\TUR\\AdobeID.pdf", nBufferLength=0x105, lpBuffer=0x31e1c4, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\TUR\\AdobeID.pdf", lpFilePart=0x0) returned 0x4b [0048.595] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e624) returned 1 [0048.595] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\TUR\\AdobeID.pdf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\idtemplates\\tur\\adobeid.pdf"), fInfoLevelId=0x0, lpFileInformation=0x31e6a0 | out: lpFileInformation=0x31e6a0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9b058100, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x80a04a60, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x6be020, ftLastWriteTime.dwHighDateTime=0x1d6eb7f, nFileSizeHigh=0x0, nFileSizeLow=0x49dc0)) returned 1 [0048.595] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e620) returned 1 [0048.595] MoveFileW (lpExistingFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\TUR\\AdobeID.pdf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\idtemplates\\tur\\adobeid.pdf"), lpNewFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\TUR\\AdobeID.pdf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\idtemplates\\tur\\adobeid.pdf")) returned 1 [0048.595] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\TUR\\DefaultID.pdf", nBufferLength=0x105, lpBuffer=0x31e0a4, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\TUR\\DefaultID.pdf", lpFilePart=0x0) returned 0x4d [0048.595] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e598) returned 1 [0048.595] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\TUR\\DefaultID.pdf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\idtemplates\\tur\\defaultid.pdf"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x274 [0048.595] GetFileType (hFile=0x274) returned 0x1 [0048.596] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e594) returned 1 [0048.596] GetFileType (hFile=0x274) returned 0x1 [0048.596] GetFileSize (in: hFile=0x274, lpFileSizeHigh=0x31e6a0 | out: lpFileSizeHigh=0x31e6a0*=0x0) returned 0x48d8f [0048.599] ReadFile (in: hFile=0x274, lpBuffer=0x36194b0, nNumberOfBytesToRead=0x48d8f, lpNumberOfBytesRead=0x31e64c, lpOverlapped=0x0 | out: lpBuffer=0x36194b0*, lpNumberOfBytesRead=0x31e64c*=0x48d8f, lpOverlapped=0x0) returned 1 [0048.613] CloseHandle (hObject=0x274) returned 1 [0048.668] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\TUR\\DefaultID.pdf", nBufferLength=0x105, lpBuffer=0x31e090, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\TUR\\DefaultID.pdf", lpFilePart=0x0) returned 0x4d [0048.668] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e584) returned 1 [0048.668] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\TUR\\DefaultID.pdf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\idtemplates\\tur\\defaultid.pdf"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x274 [0048.671] GetFileType (hFile=0x274) returned 0x1 [0048.671] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e580) returned 1 [0048.671] GetFileType (hFile=0x274) returned 0x1 [0048.671] WriteFile (in: hFile=0x274, lpBuffer=0x37858c0*, nNumberOfBytesToWrite=0x48d90, lpNumberOfBytesWritten=0x31e640, lpOverlapped=0x0 | out: lpBuffer=0x37858c0*, lpNumberOfBytesWritten=0x31e640*=0x48d90, lpOverlapped=0x0) returned 1 [0048.676] CloseHandle (hObject=0x274) returned 1 [0048.677] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\TUR\\DefaultID.pdf", nBufferLength=0x105, lpBuffer=0x31e1c4, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\TUR\\DefaultID.pdf", lpFilePart=0x0) returned 0x4d [0048.677] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\TUR\\DefaultID.pdf", nBufferLength=0x105, lpBuffer=0x31e1c4, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\TUR\\DefaultID.pdf", lpFilePart=0x0) returned 0x4d [0048.677] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e624) returned 1 [0048.677] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\TUR\\DefaultID.pdf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\idtemplates\\tur\\defaultid.pdf"), fInfoLevelId=0x0, lpFileInformation=0x31e6a0 | out: lpFileInformation=0x31e6a0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9b058100, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x80a04a60, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x77c700, ftLastWriteTime.dwHighDateTime=0x1d6eb7f, nFileSizeHigh=0x0, nFileSizeLow=0x48d90)) returned 1 [0048.677] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e620) returned 1 [0048.677] MoveFileW (lpExistingFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\TUR\\DefaultID.pdf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\idtemplates\\tur\\defaultid.pdf"), lpNewFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\TUR\\DefaultID.pdf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\idtemplates\\tur\\defaultid.pdf")) returned 1 [0048.677] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e6cc) returned 1 [0048.677] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\UKR", nBufferLength=0x105, lpBuffer=0x31e1d4, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\UKR", lpFilePart=0x0) returned 0x3f [0048.677] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\UKR\\", nBufferLength=0x105, lpBuffer=0x31e1a8, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\UKR\\", lpFilePart=0x0) returned 0x40 [0048.677] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\UKR\\*", lpFindFileData=0x31e3f4 | out: lpFindFileData=0x31e3f4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x80861b40, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x809de900, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x809de900, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x381f40 [0048.678] FindNextFileW (in: hFindFile=0x381f40, lpFindFileData=0x31e404 | out: lpFindFileData=0x31e404*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x80861b40, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x809de900, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x809de900, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0048.678] FindNextFileW (in: hFindFile=0x381f40, lpFindFileData=0x31e404 | out: lpFindFileData=0x31e404*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9c36ae00, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x80861b40, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9c36ae00, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x197f2, dwReserved0=0x0, dwReserved1=0x0, cFileName="AdobeID.pdf", cAlternateFileName="")) returned 1 [0048.678] FindNextFileW (in: hFindFile=0x381f40, lpFindFileData=0x31e404 | out: lpFindFileData=0x31e404*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9c36ae00, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x809de900, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9c36ae00, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x48d20, dwReserved0=0x0, dwReserved1=0x0, cFileName="DefaultID.pdf", cAlternateFileName="DEFAUL~1.PDF")) returned 1 [0048.678] FindNextFileW (in: hFindFile=0x381f40, lpFindFileData=0x31e404 | out: lpFindFileData=0x31e404*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0048.678] FindClose (in: hFindFile=0x381f40 | out: hFindFile=0x381f40) returned 1 [0048.678] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e68c) returned 1 [0048.678] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e698) returned 1 [0048.678] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e6cc) returned 1 [0048.678] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\UKR", nBufferLength=0x105, lpBuffer=0x31e1d4, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\UKR", lpFilePart=0x0) returned 0x3f [0048.678] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\UKR\\", nBufferLength=0x105, lpBuffer=0x31e1a8, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\UKR\\", lpFilePart=0x0) returned 0x40 [0048.679] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\UKR\\*", lpFindFileData=0x31e3f4 | out: lpFindFileData=0x31e3f4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x80861b40, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x809de900, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x809de900, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x381f40 [0048.679] FindNextFileW (in: hFindFile=0x381f40, lpFindFileData=0x31e404 | out: lpFindFileData=0x31e404*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x80861b40, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x809de900, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x809de900, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0048.679] FindNextFileW (in: hFindFile=0x381f40, lpFindFileData=0x31e404 | out: lpFindFileData=0x31e404*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9c36ae00, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x80861b40, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9c36ae00, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x197f2, dwReserved0=0x0, dwReserved1=0x0, cFileName="AdobeID.pdf", cAlternateFileName="")) returned 1 [0048.679] FindNextFileW (in: hFindFile=0x381f40, lpFindFileData=0x31e404 | out: lpFindFileData=0x31e404*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9c36ae00, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x809de900, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9c36ae00, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x48d20, dwReserved0=0x0, dwReserved1=0x0, cFileName="DefaultID.pdf", cAlternateFileName="DEFAUL~1.PDF")) returned 1 [0048.679] FindNextFileW (in: hFindFile=0x381f40, lpFindFileData=0x31e404 | out: lpFindFileData=0x31e404*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9c36ae00, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x809de900, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9c36ae00, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x48d20, dwReserved0=0x0, dwReserved1=0x0, cFileName="DefaultID.pdf", cAlternateFileName="DEFAUL~1.PDF")) returned 0 [0048.679] FindClose (in: hFindFile=0x381f40 | out: hFindFile=0x381f40) returned 1 [0048.679] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e68c) returned 1 [0048.679] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e698) returned 1 [0048.679] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\UKR\\AdobeID.pdf", nBufferLength=0x105, lpBuffer=0x31e0a4, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\UKR\\AdobeID.pdf", lpFilePart=0x0) returned 0x4b [0048.679] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e598) returned 1 [0048.680] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\UKR\\AdobeID.pdf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\idtemplates\\ukr\\adobeid.pdf"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x274 [0048.680] GetFileType (hFile=0x274) returned 0x1 [0048.680] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e594) returned 1 [0048.680] GetFileType (hFile=0x274) returned 0x1 [0048.680] GetFileSize (in: hFile=0x274, lpFileSizeHigh=0x31e6a0 | out: lpFileSizeHigh=0x31e6a0*=0x0) returned 0x197f2 [0048.680] ReadFile (in: hFile=0x274, lpBuffer=0x37ce670, nNumberOfBytesToRead=0x197f2, lpNumberOfBytesRead=0x31e64c, lpOverlapped=0x0 | out: lpBuffer=0x37ce670*, lpNumberOfBytesRead=0x31e64c*=0x197f2, lpOverlapped=0x0) returned 1 [0048.692] CloseHandle (hObject=0x274) returned 1 [0048.711] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\UKR\\AdobeID.pdf", nBufferLength=0x105, lpBuffer=0x31e090, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\UKR\\AdobeID.pdf", lpFilePart=0x0) returned 0x4b [0048.711] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e584) returned 1 [0048.711] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\UKR\\AdobeID.pdf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\idtemplates\\ukr\\adobeid.pdf"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x274 [0048.712] GetFileType (hFile=0x274) returned 0x1 [0048.712] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e580) returned 1 [0048.712] GetFileType (hFile=0x274) returned 0x1 [0048.712] WriteFile (in: hFile=0x274, lpBuffer=0x384dea0*, nNumberOfBytesToWrite=0x19800, lpNumberOfBytesWritten=0x31e640, lpOverlapped=0x0 | out: lpBuffer=0x384dea0*, lpNumberOfBytesWritten=0x31e640*=0x19800, lpOverlapped=0x0) returned 1 [0048.714] CloseHandle (hObject=0x274) returned 1 [0048.715] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\UKR\\AdobeID.pdf", nBufferLength=0x105, lpBuffer=0x31e1c4, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\UKR\\AdobeID.pdf", lpFilePart=0x0) returned 0x4b [0048.715] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\UKR\\AdobeID.pdf", nBufferLength=0x105, lpBuffer=0x31e1c4, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\UKR\\AdobeID.pdf", lpFilePart=0x0) returned 0x4b [0048.715] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e624) returned 1 [0048.715] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\UKR\\AdobeID.pdf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\idtemplates\\ukr\\adobeid.pdf"), fInfoLevelId=0x0, lpFileInformation=0x31e6a0 | out: lpFileInformation=0x31e6a0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9c36ae00, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x80861b40, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x7c89c0, ftLastWriteTime.dwHighDateTime=0x1d6eb7f, nFileSizeHigh=0x0, nFileSizeLow=0x19800)) returned 1 [0048.715] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e620) returned 1 [0048.715] MoveFileW (lpExistingFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\UKR\\AdobeID.pdf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\idtemplates\\ukr\\adobeid.pdf"), lpNewFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\UKR\\AdobeID.pdf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\idtemplates\\ukr\\adobeid.pdf")) returned 1 [0048.715] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\UKR\\DefaultID.pdf", nBufferLength=0x105, lpBuffer=0x31e0a4, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\UKR\\DefaultID.pdf", lpFilePart=0x0) returned 0x4d [0048.715] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e598) returned 1 [0048.715] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\UKR\\DefaultID.pdf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\idtemplates\\ukr\\defaultid.pdf"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x274 [0048.716] GetFileType (hFile=0x274) returned 0x1 [0048.716] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e594) returned 1 [0048.716] GetFileType (hFile=0x274) returned 0x1 [0048.716] GetFileSize (in: hFile=0x274, lpFileSizeHigh=0x31e6a0 | out: lpFileSizeHigh=0x31e6a0*=0x0) returned 0x48d20 [0048.716] ReadFile (in: hFile=0x274, lpBuffer=0x38676c0, nNumberOfBytesToRead=0x48d20, lpNumberOfBytesRead=0x31e64c, lpOverlapped=0x0 | out: lpBuffer=0x38676c0*, lpNumberOfBytesRead=0x31e64c*=0x48d20, lpOverlapped=0x0) returned 1 [0048.724] CloseHandle (hObject=0x274) returned 1 [0048.751] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\UKR\\DefaultID.pdf", nBufferLength=0x105, lpBuffer=0x31e090, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\UKR\\DefaultID.pdf", lpFilePart=0x0) returned 0x4d [0048.751] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e584) returned 1 [0048.751] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\UKR\\DefaultID.pdf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\idtemplates\\ukr\\defaultid.pdf"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x274 [0048.754] GetFileType (hFile=0x274) returned 0x1 [0048.754] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e580) returned 1 [0048.754] GetFileType (hFile=0x274) returned 0x1 [0048.754] WriteFile (in: hFile=0x274, lpBuffer=0x36aaf10*, nNumberOfBytesToWrite=0x48d30, lpNumberOfBytesWritten=0x31e640, lpOverlapped=0x0 | out: lpBuffer=0x36aaf10*, lpNumberOfBytesWritten=0x31e640*=0x48d30, lpOverlapped=0x0) returned 1 [0048.759] CloseHandle (hObject=0x274) returned 1 [0048.759] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\UKR\\DefaultID.pdf", nBufferLength=0x105, lpBuffer=0x31e1c4, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\UKR\\DefaultID.pdf", lpFilePart=0x0) returned 0x4d [0048.760] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\UKR\\DefaultID.pdf", nBufferLength=0x105, lpBuffer=0x31e1c4, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\UKR\\DefaultID.pdf", lpFilePart=0x0) returned 0x4d [0048.760] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e624) returned 1 [0048.760] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\UKR\\DefaultID.pdf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\idtemplates\\ukr\\defaultid.pdf"), fInfoLevelId=0x0, lpFileInformation=0x31e6a0 | out: lpFileInformation=0x31e6a0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9c36ae00, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x809de900, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x83ade0, ftLastWriteTime.dwHighDateTime=0x1d6eb7f, nFileSizeHigh=0x0, nFileSizeLow=0x48d30)) returned 1 [0048.760] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e620) returned 1 [0048.760] MoveFileW (lpExistingFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\UKR\\DefaultID.pdf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\idtemplates\\ukr\\defaultid.pdf"), lpNewFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\UKR\\DefaultID.pdf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\idtemplates\\ukr\\defaultid.pdf")) returned 1 [0048.760] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e744) returned 1 [0048.760] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Javascripts", nBufferLength=0x105, lpBuffer=0x31e24c, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Javascripts", lpFilePart=0x0) returned 0x3b [0048.760] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Javascripts\\", nBufferLength=0x105, lpBuffer=0x31e220, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Javascripts\\", lpFilePart=0x0) returned 0x3c [0048.760] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Javascripts\\*", lpFindFileData=0x31e46c | out: lpFindFileData=0x31e46c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7ffe6ce0, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x7ffe6ce0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x7ffe6ce0, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x381e40 [0048.761] FindNextFileW (in: hFindFile=0x381e40, lpFindFileData=0x31e47c | out: lpFindFileData=0x31e47c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7ffe6ce0, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x7ffe6ce0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x7ffe6ce0, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0048.761] FindNextFileW (in: hFindFile=0x381e40, lpFindFileData=0x31e47c | out: lpFindFileData=0x31e47c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x950fa000, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x8000ce40, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x950fa000, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x121ba8, dwReserved0=0x0, dwReserved1=0x0, cFileName="JSByteCodeWin.bin", cAlternateFileName="JSBYTE~1.BIN")) returned 1 [0048.761] FindNextFileW (in: hFindFile=0x381e40, lpFindFileData=0x31e47c | out: lpFindFileData=0x31e47c*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0048.761] FindClose (in: hFindFile=0x381e40 | out: hFindFile=0x381e40) returned 1 [0048.761] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e704) returned 1 [0048.761] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e710) returned 1 [0048.761] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e744) returned 1 [0048.761] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Javascripts", nBufferLength=0x105, lpBuffer=0x31e24c, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Javascripts", lpFilePart=0x0) returned 0x3b [0048.762] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Javascripts\\", nBufferLength=0x105, lpBuffer=0x31e220, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Javascripts\\", lpFilePart=0x0) returned 0x3c [0048.762] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Javascripts\\*", lpFindFileData=0x31e46c | out: lpFindFileData=0x31e46c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7ffe6ce0, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x7ffe6ce0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x7ffe6ce0, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x381e40 [0048.762] FindNextFileW (in: hFindFile=0x381e40, lpFindFileData=0x31e47c | out: lpFindFileData=0x31e47c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7ffe6ce0, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x7ffe6ce0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x7ffe6ce0, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0048.762] FindNextFileW (in: hFindFile=0x381e40, lpFindFileData=0x31e47c | out: lpFindFileData=0x31e47c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x950fa000, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x8000ce40, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x950fa000, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x121ba8, dwReserved0=0x0, dwReserved1=0x0, cFileName="JSByteCodeWin.bin", cAlternateFileName="JSBYTE~1.BIN")) returned 1 [0048.762] FindNextFileW (in: hFindFile=0x381e40, lpFindFileData=0x31e47c | out: lpFindFileData=0x31e47c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x950fa000, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x8000ce40, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x950fa000, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x121ba8, dwReserved0=0x0, dwReserved1=0x0, cFileName="JSByteCodeWin.bin", cAlternateFileName="JSBYTE~1.BIN")) returned 0 [0048.762] FindClose (in: hFindFile=0x381e40 | out: hFindFile=0x381e40) returned 1 [0048.762] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e704) returned 1 [0048.762] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e710) returned 1 [0048.762] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e744) returned 1 [0048.762] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Legal", nBufferLength=0x105, lpBuffer=0x31e24c, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Legal", lpFilePart=0x0) returned 0x35 [0048.762] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Legal\\", nBufferLength=0x105, lpBuffer=0x31e220, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Legal\\", lpFilePart=0x0) returned 0x36 [0048.763] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Legal\\*", lpFindFileData=0x31e46c | out: lpFindFileData=0x31e46c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x80a50d20, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x81efec40, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x81efec40, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x381e40 [0048.771] FindNextFileW (in: hFindFile=0x381e40, lpFindFileData=0x31e47c | out: lpFindFileData=0x31e47c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x80a50d20, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x81efec40, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x81efec40, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0048.771] FindNextFileW (in: hFindFile=0x381e40, lpFindFileData=0x31e47c | out: lpFindFileData=0x31e47c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x81efec40, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x81efec40, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x81efec40, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="CAT", cAlternateFileName="")) returned 1 [0048.771] FindNextFileW (in: hFindFile=0x381e40, lpFindFileData=0x31e47c | out: lpFindFileData=0x31e47c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x81df42a0, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x81df42a0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x81df42a0, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="CHS", cAlternateFileName="")) returned 1 [0048.771] FindNextFileW (in: hFindFile=0x381e40, lpFindFileData=0x31e47c | out: lpFindFileData=0x31e47c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x81df42a0, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x81df42a0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x81df42a0, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="CHT", cAlternateFileName="")) returned 1 [0048.771] FindNextFileW (in: hFindFile=0x381e40, lpFindFileData=0x31e47c | out: lpFindFileData=0x31e47c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x81cc37a0, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x81ce9900, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x81ce9900, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="CZE", cAlternateFileName="")) returned 1 [0048.772] FindNextFileW (in: hFindFile=0x381e40, lpFindFileData=0x31e47c | out: lpFindFileData=0x31e47c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x81dce140, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x81dce140, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x81dce140, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="DAN", cAlternateFileName="")) returned 1 [0048.772] FindNextFileW (in: hFindFile=0x381e40, lpFindFileData=0x31e47c | out: lpFindFileData=0x31e47c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x81df42a0, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x81df42a0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x81df42a0, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="DEU", cAlternateFileName="")) returned 1 [0048.772] FindNextFileW (in: hFindFile=0x381e40, lpFindFileData=0x31e47c | out: lpFindFileData=0x31e47c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x81da7fe0, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x81dce140, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x81dce140, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="ENU", cAlternateFileName="")) returned 1 [0048.772] FindNextFileW (in: hFindFile=0x381e40, lpFindFileData=0x31e47c | out: lpFindFileData=0x31e47c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x81da7fe0, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x81da7fe0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x81da7fe0, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="ESP", cAlternateFileName="")) returned 1 [0048.772] FindNextFileW (in: hFindFile=0x381e40, lpFindFileData=0x31e47c | out: lpFindFileData=0x31e47c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x81efec40, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x81efec40, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x81efec40, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="EUQ", cAlternateFileName="")) returned 1 [0048.772] FindNextFileW (in: hFindFile=0x381e40, lpFindFileData=0x31e47c | out: lpFindFileData=0x31e47c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x81da7fe0, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x81da7fe0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x81da7fe0, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="FRA", cAlternateFileName="")) returned 1 [0048.772] FindNextFileW (in: hFindFile=0x381e40, lpFindFileData=0x31e47c | out: lpFindFileData=0x31e47c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x81ce9900, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x81ce9900, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x81ce9900, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="HRV", cAlternateFileName="")) returned 1 [0048.773] FindNextFileW (in: hFindFile=0x381e40, lpFindFileData=0x31e47c | out: lpFindFileData=0x31e47c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x80a76e80, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x81cc37a0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x81cc37a0, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="HUN", cAlternateFileName="")) returned 1 [0048.773] FindNextFileW (in: hFindFile=0x381e40, lpFindFileData=0x31e47c | out: lpFindFileData=0x31e47c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x81da7fe0, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x81da7fe0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x81da7fe0, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="ITA", cAlternateFileName="")) returned 1 [0048.773] FindNextFileW (in: hFindFile=0x381e40, lpFindFileData=0x31e47c | out: lpFindFileData=0x31e47c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x81dce140, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x81dce140, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x81dce140, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="JPN", cAlternateFileName="")) returned 1 [0048.773] FindNextFileW (in: hFindFile=0x381e40, lpFindFileData=0x31e47c | out: lpFindFileData=0x31e47c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x81d81e80, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x81d81e80, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x81d81e80, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="KOR", cAlternateFileName="")) returned 1 [0048.773] FindNextFileW (in: hFindFile=0x381e40, lpFindFileData=0x31e47c | out: lpFindFileData=0x31e47c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x81dce140, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x81dce140, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x81dce140, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="NLD", cAlternateFileName="")) returned 1 [0048.773] FindNextFileW (in: hFindFile=0x381e40, lpFindFileData=0x31e47c | out: lpFindFileData=0x31e47c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x81da7fe0, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x81da7fe0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x81da7fe0, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="NOR", cAlternateFileName="")) returned 1 [0048.773] FindNextFileW (in: hFindFile=0x381e40, lpFindFileData=0x31e47c | out: lpFindFileData=0x31e47c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x80a76e80, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x80a76e80, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x80a76e80, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="POL", cAlternateFileName="")) returned 1 [0048.774] FindNextFileW (in: hFindFile=0x381e40, lpFindFileData=0x31e47c | out: lpFindFileData=0x31e47c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x81d81e80, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x81d81e80, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x81d81e80, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="PTB", cAlternateFileName="")) returned 1 [0048.774] FindNextFileW (in: hFindFile=0x381e40, lpFindFileData=0x31e47c | out: lpFindFileData=0x31e47c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x80a76e80, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x80a76e80, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x80a76e80, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="RUM", cAlternateFileName="")) returned 1 [0048.774] FindNextFileW (in: hFindFile=0x381e40, lpFindFileData=0x31e47c | out: lpFindFileData=0x31e47c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x80a50d20, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x80a76e80, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x80a76e80, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="RUS", cAlternateFileName="")) returned 1 [0048.774] FindNextFileW (in: hFindFile=0x381e40, lpFindFileData=0x31e47c | out: lpFindFileData=0x31e47c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x80a50d20, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x80a50d20, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x80a50d20, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="SKY", cAlternateFileName="")) returned 1 [0048.774] FindNextFileW (in: hFindFile=0x381e40, lpFindFileData=0x31e47c | out: lpFindFileData=0x31e47c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x80a50d20, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x80a50d20, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x80a50d20, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="SLV", cAlternateFileName="")) returned 1 [0048.774] FindNextFileW (in: hFindFile=0x381e40, lpFindFileData=0x31e47c | out: lpFindFileData=0x31e47c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x81dce140, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x81dce140, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x81dce140, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="SUO", cAlternateFileName="")) returned 1 [0048.774] FindNextFileW (in: hFindFile=0x381e40, lpFindFileData=0x31e47c | out: lpFindFileData=0x31e47c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x81d81e80, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x81d81e80, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x81d81e80, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="SVE", cAlternateFileName="")) returned 1 [0048.775] FindNextFileW (in: hFindFile=0x381e40, lpFindFileData=0x31e47c | out: lpFindFileData=0x31e47c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x80a50d20, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x80a50d20, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x80a50d20, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="TUR", cAlternateFileName="")) returned 1 [0048.775] FindNextFileW (in: hFindFile=0x381e40, lpFindFileData=0x31e47c | out: lpFindFileData=0x31e47c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x80a50d20, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x80a50d20, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x80a50d20, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="UKR", cAlternateFileName="")) returned 1 [0048.775] FindNextFileW (in: hFindFile=0x381e40, lpFindFileData=0x31e47c | out: lpFindFileData=0x31e47c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x80a50d20, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x80a50d20, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x80a50d20, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="UKR", cAlternateFileName="")) returned 0 [0048.775] FindClose (in: hFindFile=0x381e40 | out: hFindFile=0x381e40) returned 1 [0048.776] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e704) returned 1 [0048.776] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e710) returned 1 [0048.776] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e744) returned 1 [0048.776] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Legal", nBufferLength=0x105, lpBuffer=0x31e24c, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Legal", lpFilePart=0x0) returned 0x35 [0048.776] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Legal\\", nBufferLength=0x105, lpBuffer=0x31e220, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Legal\\", lpFilePart=0x0) returned 0x36 [0048.776] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Legal\\*", lpFindFileData=0x31e46c | out: lpFindFileData=0x31e46c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x80a50d20, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x81efec40, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x81efec40, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x381e40 [0048.777] FindNextFileW (in: hFindFile=0x381e40, lpFindFileData=0x31e47c | out: lpFindFileData=0x31e47c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x80a50d20, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x81efec40, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x81efec40, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0048.777] FindNextFileW (in: hFindFile=0x381e40, lpFindFileData=0x31e47c | out: lpFindFileData=0x31e47c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x81efec40, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x81efec40, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x81efec40, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="CAT", cAlternateFileName="")) returned 1 [0048.777] FindNextFileW (in: hFindFile=0x381e40, lpFindFileData=0x31e47c | out: lpFindFileData=0x31e47c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x81df42a0, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x81df42a0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x81df42a0, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="CHS", cAlternateFileName="")) returned 1 [0048.777] FindNextFileW (in: hFindFile=0x381e40, lpFindFileData=0x31e47c | out: lpFindFileData=0x31e47c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x81df42a0, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x81df42a0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x81df42a0, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="CHT", cAlternateFileName="")) returned 1 [0048.777] FindNextFileW (in: hFindFile=0x381e40, lpFindFileData=0x31e47c | out: lpFindFileData=0x31e47c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x81cc37a0, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x81ce9900, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x81ce9900, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="CZE", cAlternateFileName="")) returned 1 [0048.777] FindNextFileW (in: hFindFile=0x381e40, lpFindFileData=0x31e47c | out: lpFindFileData=0x31e47c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x81dce140, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x81dce140, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x81dce140, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="DAN", cAlternateFileName="")) returned 1 [0048.778] FindNextFileW (in: hFindFile=0x381e40, lpFindFileData=0x31e47c | out: lpFindFileData=0x31e47c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x81df42a0, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x81df42a0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x81df42a0, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="DEU", cAlternateFileName="")) returned 1 [0048.778] FindNextFileW (in: hFindFile=0x381e40, lpFindFileData=0x31e47c | out: lpFindFileData=0x31e47c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x81da7fe0, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x81dce140, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x81dce140, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="ENU", cAlternateFileName="")) returned 1 [0048.778] FindNextFileW (in: hFindFile=0x381e40, lpFindFileData=0x31e47c | out: lpFindFileData=0x31e47c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x81da7fe0, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x81da7fe0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x81da7fe0, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="ESP", cAlternateFileName="")) returned 1 [0048.778] FindNextFileW (in: hFindFile=0x381e40, lpFindFileData=0x31e47c | out: lpFindFileData=0x31e47c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x81efec40, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x81efec40, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x81efec40, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="EUQ", cAlternateFileName="")) returned 1 [0048.778] FindNextFileW (in: hFindFile=0x381e40, lpFindFileData=0x31e47c | out: lpFindFileData=0x31e47c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x81da7fe0, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x81da7fe0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x81da7fe0, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="FRA", cAlternateFileName="")) returned 1 [0048.778] FindNextFileW (in: hFindFile=0x381e40, lpFindFileData=0x31e47c | out: lpFindFileData=0x31e47c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x81ce9900, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x81ce9900, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x81ce9900, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="HRV", cAlternateFileName="")) returned 1 [0048.778] FindNextFileW (in: hFindFile=0x381e40, lpFindFileData=0x31e47c | out: lpFindFileData=0x31e47c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x80a76e80, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x81cc37a0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x81cc37a0, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="HUN", cAlternateFileName="")) returned 1 [0048.778] FindNextFileW (in: hFindFile=0x381e40, lpFindFileData=0x31e47c | out: lpFindFileData=0x31e47c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x81da7fe0, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x81da7fe0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x81da7fe0, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="ITA", cAlternateFileName="")) returned 1 [0048.778] FindNextFileW (in: hFindFile=0x381e40, lpFindFileData=0x31e47c | out: lpFindFileData=0x31e47c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x81dce140, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x81dce140, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x81dce140, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="JPN", cAlternateFileName="")) returned 1 [0048.779] FindNextFileW (in: hFindFile=0x381e40, lpFindFileData=0x31e47c | out: lpFindFileData=0x31e47c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x81d81e80, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x81d81e80, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x81d81e80, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="KOR", cAlternateFileName="")) returned 1 [0048.779] FindNextFileW (in: hFindFile=0x381e40, lpFindFileData=0x31e47c | out: lpFindFileData=0x31e47c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x81dce140, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x81dce140, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x81dce140, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="NLD", cAlternateFileName="")) returned 1 [0048.779] FindNextFileW (in: hFindFile=0x381e40, lpFindFileData=0x31e47c | out: lpFindFileData=0x31e47c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x81da7fe0, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x81da7fe0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x81da7fe0, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="NOR", cAlternateFileName="")) returned 1 [0048.779] FindNextFileW (in: hFindFile=0x381e40, lpFindFileData=0x31e47c | out: lpFindFileData=0x31e47c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x80a76e80, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x80a76e80, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x80a76e80, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="POL", cAlternateFileName="")) returned 1 [0048.779] FindNextFileW (in: hFindFile=0x381e40, lpFindFileData=0x31e47c | out: lpFindFileData=0x31e47c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x81d81e80, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x81d81e80, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x81d81e80, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="PTB", cAlternateFileName="")) returned 1 [0048.779] FindNextFileW (in: hFindFile=0x381e40, lpFindFileData=0x31e47c | out: lpFindFileData=0x31e47c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x80a76e80, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x80a76e80, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x80a76e80, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="RUM", cAlternateFileName="")) returned 1 [0048.779] FindNextFileW (in: hFindFile=0x381e40, lpFindFileData=0x31e47c | out: lpFindFileData=0x31e47c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x80a50d20, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x80a76e80, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x80a76e80, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="RUS", cAlternateFileName="")) returned 1 [0048.779] FindNextFileW (in: hFindFile=0x381e40, lpFindFileData=0x31e47c | out: lpFindFileData=0x31e47c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x80a50d20, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x80a50d20, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x80a50d20, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="SKY", cAlternateFileName="")) returned 1 [0048.779] FindNextFileW (in: hFindFile=0x381e40, lpFindFileData=0x31e47c | out: lpFindFileData=0x31e47c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x80a50d20, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x80a50d20, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x80a50d20, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="SLV", cAlternateFileName="")) returned 1 [0048.780] FindNextFileW (in: hFindFile=0x381e40, lpFindFileData=0x31e47c | out: lpFindFileData=0x31e47c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x81dce140, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x81dce140, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x81dce140, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="SUO", cAlternateFileName="")) returned 1 [0048.780] FindNextFileW (in: hFindFile=0x381e40, lpFindFileData=0x31e47c | out: lpFindFileData=0x31e47c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x81d81e80, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x81d81e80, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x81d81e80, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="SVE", cAlternateFileName="")) returned 1 [0048.780] FindNextFileW (in: hFindFile=0x381e40, lpFindFileData=0x31e47c | out: lpFindFileData=0x31e47c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x80a50d20, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x80a50d20, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x80a50d20, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="TUR", cAlternateFileName="")) returned 1 [0048.780] FindNextFileW (in: hFindFile=0x381e40, lpFindFileData=0x31e47c | out: lpFindFileData=0x31e47c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x80a50d20, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x80a50d20, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x80a50d20, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="UKR", cAlternateFileName="")) returned 1 [0048.780] FindNextFileW (in: hFindFile=0x381e40, lpFindFileData=0x31e47c | out: lpFindFileData=0x31e47c*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0048.780] FindClose (in: hFindFile=0x381e40 | out: hFindFile=0x381e40) returned 1 [0048.781] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e704) returned 1 [0048.781] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e710) returned 1 [0048.781] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e6cc) returned 1 [0048.781] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Legal\\CAT", nBufferLength=0x105, lpBuffer=0x31e1d4, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Legal\\CAT", lpFilePart=0x0) returned 0x39 [0048.781] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Legal\\CAT\\", nBufferLength=0x105, lpBuffer=0x31e1a8, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Legal\\CAT\\", lpFilePart=0x0) returned 0x3a [0048.781] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Legal\\CAT\\*", lpFindFileData=0x31e3f4 | out: lpFindFileData=0x31e3f4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x81efec40, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x81efec40, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x81efec40, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x381e40 [0048.789] FindNextFileW (in: hFindFile=0x381e40, lpFindFileData=0x31e404 | out: lpFindFileData=0x31e404*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x81efec40, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x81efec40, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x81efec40, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0048.789] FindNextFileW (in: hFindFile=0x381e40, lpFindFileData=0x31e404 | out: lpFindFileData=0x31e404*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9c36ae00, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x81efec40, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9c36ae00, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x49c, dwReserved0=0x0, dwReserved1=0x0, cFileName="eula.ini", cAlternateFileName="")) returned 1 [0048.789] FindNextFileW (in: hFindFile=0x381e40, lpFindFileData=0x31e404 | out: lpFindFileData=0x31e404*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9c36ae00, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x81efec40, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9c36ae00, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0xd11a, dwReserved0=0x0, dwReserved1=0x0, cFileName="license.html", cAlternateFileName="LICENS~1.HTM")) returned 1 [0048.789] FindNextFileW (in: hFindFile=0x381e40, lpFindFileData=0x31e404 | out: lpFindFileData=0x31e404*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0048.789] FindClose (in: hFindFile=0x381e40 | out: hFindFile=0x381e40) returned 1 [0048.789] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e68c) returned 1 [0048.789] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e698) returned 1 [0048.789] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e6cc) returned 1 [0048.789] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Legal\\CAT", nBufferLength=0x105, lpBuffer=0x31e1d4, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Legal\\CAT", lpFilePart=0x0) returned 0x39 [0048.789] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Legal\\CAT\\", nBufferLength=0x105, lpBuffer=0x31e1a8, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Legal\\CAT\\", lpFilePart=0x0) returned 0x3a [0048.789] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Legal\\CAT\\*", lpFindFileData=0x31e3f4 | out: lpFindFileData=0x31e3f4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x81efec40, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x81efec40, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x81efec40, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x381e40 [0048.790] FindNextFileW (in: hFindFile=0x381e40, lpFindFileData=0x31e404 | out: lpFindFileData=0x31e404*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x81efec40, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x81efec40, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x81efec40, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0048.790] FindNextFileW (in: hFindFile=0x381e40, lpFindFileData=0x31e404 | out: lpFindFileData=0x31e404*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9c36ae00, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x81efec40, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9c36ae00, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x49c, dwReserved0=0x0, dwReserved1=0x0, cFileName="eula.ini", cAlternateFileName="")) returned 1 [0048.790] FindNextFileW (in: hFindFile=0x381e40, lpFindFileData=0x31e404 | out: lpFindFileData=0x31e404*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9c36ae00, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x81efec40, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9c36ae00, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0xd11a, dwReserved0=0x0, dwReserved1=0x0, cFileName="license.html", cAlternateFileName="LICENS~1.HTM")) returned 1 [0048.790] FindNextFileW (in: hFindFile=0x381e40, lpFindFileData=0x31e404 | out: lpFindFileData=0x31e404*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9c36ae00, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x81efec40, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9c36ae00, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0xd11a, dwReserved0=0x0, dwReserved1=0x0, cFileName="license.html", cAlternateFileName="LICENS~1.HTM")) returned 0 [0048.790] FindClose (in: hFindFile=0x381e40 | out: hFindFile=0x381e40) returned 1 [0048.790] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e68c) returned 1 [0048.790] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e698) returned 1 [0048.790] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Legal\\CAT\\license.html", nBufferLength=0x105, lpBuffer=0x31e0a4, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Legal\\CAT\\license.html", lpFilePart=0x0) returned 0x46 [0048.790] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e598) returned 1 [0048.790] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Legal\\CAT\\license.html" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\legal\\cat\\license.html"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x274 [0048.792] GetFileType (hFile=0x274) returned 0x1 [0048.792] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e594) returned 1 [0048.792] GetFileType (hFile=0x274) returned 0x1 [0048.792] GetFileSize (in: hFile=0x274, lpFileSizeHigh=0x31e6a0 | out: lpFileSizeHigh=0x31e6a0*=0x0) returned 0xd11a [0048.792] ReadFile (in: hFile=0x274, lpBuffer=0x263776c, nNumberOfBytesToRead=0xd11a, lpNumberOfBytesRead=0x31e64c, lpOverlapped=0x0 | out: lpBuffer=0x263776c*, lpNumberOfBytesRead=0x31e64c*=0xd11a, lpOverlapped=0x0) returned 1 [0048.802] CloseHandle (hObject=0x274) returned 1 [0048.842] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Legal\\CAT\\license.html", nBufferLength=0x105, lpBuffer=0x31e090, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Legal\\CAT\\license.html", lpFilePart=0x0) returned 0x46 [0048.842] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e584) returned 1 [0048.842] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Legal\\CAT\\license.html" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\legal\\cat\\license.html"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x274 [0048.843] GetFileType (hFile=0x274) returned 0x1 [0048.843] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e580) returned 1 [0048.852] GetFileType (hFile=0x274) returned 0x1 [0048.852] WriteFile (in: hFile=0x274, lpBuffer=0x26aba24*, nNumberOfBytesToWrite=0xd120, lpNumberOfBytesWritten=0x31e640, lpOverlapped=0x0 | out: lpBuffer=0x26aba24*, lpNumberOfBytesWritten=0x31e640*=0xd120, lpOverlapped=0x0) returned 1 [0048.882] CloseHandle (hObject=0x274) returned 1 [0048.882] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Legal\\CAT\\license.html", nBufferLength=0x105, lpBuffer=0x31e1c4, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Legal\\CAT\\license.html", lpFilePart=0x0) returned 0x46 [0048.882] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Legal\\CAT\\license.html", nBufferLength=0x105, lpBuffer=0x31e1c4, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Legal\\CAT\\license.html", lpFilePart=0x0) returned 0x46 [0048.882] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e624) returned 1 [0048.882] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Legal\\CAT\\license.html" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\legal\\cat\\license.html"), fInfoLevelId=0x0, lpFileInformation=0x31e6a0 | out: lpFileInformation=0x31e6a0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9c36ae00, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x81efec40, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x96b8e0, ftLastWriteTime.dwHighDateTime=0x1d6eb7f, nFileSizeHigh=0x0, nFileSizeLow=0xd120)) returned 1 [0048.882] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e620) returned 1 [0048.882] MoveFileW (lpExistingFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Legal\\CAT\\license.html" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\legal\\cat\\license.html"), lpNewFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Legal\\CAT\\license.html" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\legal\\cat\\license.html")) returned 1 [0048.883] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e6cc) returned 1 [0048.883] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Legal\\CHS", nBufferLength=0x105, lpBuffer=0x31e1d4, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Legal\\CHS", lpFilePart=0x0) returned 0x39 [0048.883] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Legal\\CHS\\", nBufferLength=0x105, lpBuffer=0x31e1a8, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Legal\\CHS\\", lpFilePart=0x0) returned 0x3a [0048.883] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Legal\\CHS\\*", lpFindFileData=0x31e3f4 | out: lpFindFileData=0x31e3f4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x81df42a0, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x81df42a0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x81df42a0, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x381f40 [0048.899] FindNextFileW (in: hFindFile=0x381f40, lpFindFileData=0x31e404 | out: lpFindFileData=0x31e404*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x81df42a0, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x81df42a0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x81df42a0, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0048.899] FindNextFileW (in: hFindFile=0x381f40, lpFindFileData=0x31e404 | out: lpFindFileData=0x31e404*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x99d45400, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x81df42a0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x99d45400, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x1d8, dwReserved0=0x0, dwReserved1=0x0, cFileName="eula.ini", cAlternateFileName="")) returned 1 [0048.899] FindNextFileW (in: hFindFile=0x381f40, lpFindFileData=0x31e404 | out: lpFindFileData=0x31e404*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x99d45400, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x81df42a0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x99d45400, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x12dac, dwReserved0=0x0, dwReserved1=0x0, cFileName="license.html", cAlternateFileName="LICENS~1.HTM")) returned 1 [0048.899] FindNextFileW (in: hFindFile=0x381f40, lpFindFileData=0x31e404 | out: lpFindFileData=0x31e404*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0048.899] FindClose (in: hFindFile=0x381f40 | out: hFindFile=0x381f40) returned 1 [0048.899] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e68c) returned 1 [0048.900] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e698) returned 1 [0048.900] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e6cc) returned 1 [0048.900] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Legal\\CHS", nBufferLength=0x105, lpBuffer=0x31e1d4, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Legal\\CHS", lpFilePart=0x0) returned 0x39 [0048.900] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Legal\\CHS\\", nBufferLength=0x105, lpBuffer=0x31e1a8, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Legal\\CHS\\", lpFilePart=0x0) returned 0x3a [0048.900] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Legal\\CHS\\*", lpFindFileData=0x31e3f4 | out: lpFindFileData=0x31e3f4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x81df42a0, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x81df42a0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x81df42a0, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x381f40 [0048.900] FindNextFileW (in: hFindFile=0x381f40, lpFindFileData=0x31e404 | out: lpFindFileData=0x31e404*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x81df42a0, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x81df42a0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x81df42a0, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0048.900] FindNextFileW (in: hFindFile=0x381f40, lpFindFileData=0x31e404 | out: lpFindFileData=0x31e404*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x99d45400, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x81df42a0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x99d45400, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x1d8, dwReserved0=0x0, dwReserved1=0x0, cFileName="eula.ini", cAlternateFileName="")) returned 1 [0048.900] FindNextFileW (in: hFindFile=0x381f40, lpFindFileData=0x31e404 | out: lpFindFileData=0x31e404*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x99d45400, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x81df42a0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x99d45400, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x12dac, dwReserved0=0x0, dwReserved1=0x0, cFileName="license.html", cAlternateFileName="LICENS~1.HTM")) returned 1 [0048.900] FindNextFileW (in: hFindFile=0x381f40, lpFindFileData=0x31e404 | out: lpFindFileData=0x31e404*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x99d45400, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x81df42a0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x99d45400, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x12dac, dwReserved0=0x0, dwReserved1=0x0, cFileName="license.html", cAlternateFileName="LICENS~1.HTM")) returned 0 [0048.900] FindClose (in: hFindFile=0x381f40 | out: hFindFile=0x381f40) returned 1 [0048.901] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e68c) returned 1 [0048.901] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e698) returned 1 [0048.901] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Legal\\CHS\\license.html", nBufferLength=0x105, lpBuffer=0x31e0a4, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Legal\\CHS\\license.html", lpFilePart=0x0) returned 0x46 [0048.901] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e598) returned 1 [0048.901] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Legal\\CHS\\license.html" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\legal\\chs\\license.html"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x274 [0048.915] GetFileType (hFile=0x274) returned 0x1 [0048.915] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e594) returned 1 [0048.915] GetFileType (hFile=0x274) returned 0x1 [0048.916] GetFileSize (in: hFile=0x274, lpFileSizeHigh=0x31e6a0 | out: lpFileSizeHigh=0x31e6a0*=0x0) returned 0x12dac [0048.916] ReadFile (in: hFile=0x274, lpBuffer=0x26ba8e4, nNumberOfBytesToRead=0x12dac, lpNumberOfBytesRead=0x31e64c, lpOverlapped=0x0 | out: lpBuffer=0x26ba8e4*, lpNumberOfBytesRead=0x31e64c*=0x12dac, lpOverlapped=0x0) returned 1 [0048.932] CloseHandle (hObject=0x274) returned 1 [0048.972] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Legal\\CHS\\license.html", nBufferLength=0x105, lpBuffer=0x31e090, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Legal\\CHS\\license.html", lpFilePart=0x0) returned 0x46 [0048.972] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e584) returned 1 [0048.972] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Legal\\CHS\\license.html" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\legal\\chs\\license.html"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x274 [0048.974] GetFileType (hFile=0x274) returned 0x1 [0048.974] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e580) returned 1 [0048.974] GetFileType (hFile=0x274) returned 0x1 [0048.974] WriteFile (in: hFile=0x274, lpBuffer=0x273ffec*, nNumberOfBytesToWrite=0x12db0, lpNumberOfBytesWritten=0x31e640, lpOverlapped=0x0 | out: lpBuffer=0x273ffec*, lpNumberOfBytesWritten=0x31e640*=0x12db0, lpOverlapped=0x0) returned 1 [0048.976] CloseHandle (hObject=0x274) returned 1 [0048.976] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Legal\\CHS\\license.html", nBufferLength=0x105, lpBuffer=0x31e1c4, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Legal\\CHS\\license.html", lpFilePart=0x0) returned 0x46 [0048.976] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Legal\\CHS\\license.html", nBufferLength=0x105, lpBuffer=0x31e1c4, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Legal\\CHS\\license.html", lpFilePart=0x0) returned 0x46 [0048.976] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e624) returned 1 [0048.976] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Legal\\CHS\\license.html" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\legal\\chs\\license.html"), fInfoLevelId=0x0, lpFileInformation=0x31e6a0 | out: lpFileInformation=0x31e6a0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x99d45400, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x81df42a0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0xa50120, ftLastWriteTime.dwHighDateTime=0x1d6eb7f, nFileSizeHigh=0x0, nFileSizeLow=0x12db0)) returned 1 [0048.976] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e620) returned 1 [0048.984] MoveFileW (lpExistingFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Legal\\CHS\\license.html" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\legal\\chs\\license.html"), lpNewFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Legal\\CHS\\license.html" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\legal\\chs\\license.html")) returned 1 [0048.984] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e6cc) returned 1 [0048.984] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Legal\\CHT", nBufferLength=0x105, lpBuffer=0x31e1d4, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Legal\\CHT", lpFilePart=0x0) returned 0x39 [0048.984] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Legal\\CHT\\", nBufferLength=0x105, lpBuffer=0x31e1a8, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Legal\\CHT\\", lpFilePart=0x0) returned 0x3a [0048.984] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Legal\\CHT\\*", lpFindFileData=0x31e3f4 | out: lpFindFileData=0x31e3f4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x81df42a0, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x81df42a0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x81df42a0, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x381d80 [0049.032] FindNextFileW (in: hFindFile=0x381d80, lpFindFileData=0x31e404 | out: lpFindFileData=0x31e404*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x81df42a0, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x81df42a0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x81df42a0, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0049.032] FindNextFileW (in: hFindFile=0x381d80, lpFindFileData=0x31e404 | out: lpFindFileData=0x31e404*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x99d45400, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x81df42a0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x99d45400, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x1e0, dwReserved0=0x0, dwReserved1=0x0, cFileName="eula.ini", cAlternateFileName="")) returned 1 [0049.032] FindNextFileW (in: hFindFile=0x381d80, lpFindFileData=0x31e404 | out: lpFindFileData=0x31e404*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x99d45400, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x81df42a0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x99d45400, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x13a5b, dwReserved0=0x0, dwReserved1=0x0, cFileName="license.html", cAlternateFileName="LICENS~1.HTM")) returned 1 [0049.033] FindNextFileW (in: hFindFile=0x381d80, lpFindFileData=0x31e404 | out: lpFindFileData=0x31e404*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0049.033] FindClose (in: hFindFile=0x381d80 | out: hFindFile=0x381d80) returned 1 [0049.033] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e68c) returned 1 [0049.033] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e698) returned 1 [0049.033] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e6cc) returned 1 [0049.033] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Legal\\CHT", nBufferLength=0x105, lpBuffer=0x31e1d4, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Legal\\CHT", lpFilePart=0x0) returned 0x39 [0049.033] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Legal\\CHT\\", nBufferLength=0x105, lpBuffer=0x31e1a8, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Legal\\CHT\\", lpFilePart=0x0) returned 0x3a [0049.033] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Legal\\CHT\\*", lpFindFileData=0x31e3f4 | out: lpFindFileData=0x31e3f4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x81df42a0, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x81df42a0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x81df42a0, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x381d80 [0049.033] FindNextFileW (in: hFindFile=0x381d80, lpFindFileData=0x31e404 | out: lpFindFileData=0x31e404*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x81df42a0, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x81df42a0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x81df42a0, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0049.033] FindNextFileW (in: hFindFile=0x381d80, lpFindFileData=0x31e404 | out: lpFindFileData=0x31e404*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x99d45400, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x81df42a0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x99d45400, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x1e0, dwReserved0=0x0, dwReserved1=0x0, cFileName="eula.ini", cAlternateFileName="")) returned 1 [0049.034] FindNextFileW (in: hFindFile=0x381d80, lpFindFileData=0x31e404 | out: lpFindFileData=0x31e404*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x99d45400, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x81df42a0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x99d45400, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x13a5b, dwReserved0=0x0, dwReserved1=0x0, cFileName="license.html", cAlternateFileName="LICENS~1.HTM")) returned 1 [0049.034] FindNextFileW (in: hFindFile=0x381d80, lpFindFileData=0x31e404 | out: lpFindFileData=0x31e404*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x99d45400, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x81df42a0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x99d45400, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x13a5b, dwReserved0=0x0, dwReserved1=0x0, cFileName="license.html", cAlternateFileName="LICENS~1.HTM")) returned 0 [0049.034] FindClose (in: hFindFile=0x381d80 | out: hFindFile=0x381d80) returned 1 [0049.034] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e68c) returned 1 [0049.034] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e698) returned 1 [0049.034] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Legal\\CHT\\license.html", nBufferLength=0x105, lpBuffer=0x31e0a4, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Legal\\CHT\\license.html", lpFilePart=0x0) returned 0x46 [0049.034] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e598) returned 1 [0049.034] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Legal\\CHT\\license.html" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\legal\\cht\\license.html"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x274 [0049.034] GetFileType (hFile=0x274) returned 0x1 [0049.034] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e594) returned 1 [0049.034] GetFileType (hFile=0x274) returned 0x1 [0049.034] GetFileSize (in: hFile=0x274, lpFileSizeHigh=0x31e6a0 | out: lpFileSizeHigh=0x31e6a0*=0x0) returned 0x13a5b [0049.035] ReadFile (in: hFile=0x274, lpBuffer=0x2754b3c, nNumberOfBytesToRead=0x13a5b, lpNumberOfBytesRead=0x31e64c, lpOverlapped=0x0 | out: lpBuffer=0x2754b3c*, lpNumberOfBytesRead=0x31e64c*=0x13a5b, lpOverlapped=0x0) returned 1 [0049.046] CloseHandle (hObject=0x274) returned 1 [0049.072] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Legal\\CHT\\license.html", nBufferLength=0x105, lpBuffer=0x31e090, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Legal\\CHT\\license.html", lpFilePart=0x0) returned 0x46 [0049.072] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e584) returned 1 [0049.072] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Legal\\CHT\\license.html" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\legal\\cht\\license.html"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x274 [0049.073] GetFileType (hFile=0x274) returned 0x1 [0049.074] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e580) returned 1 [0049.074] GetFileType (hFile=0x274) returned 0x1 [0049.074] WriteFile (in: hFile=0x274, lpBuffer=0x27dc858*, nNumberOfBytesToWrite=0x13a60, lpNumberOfBytesWritten=0x31e640, lpOverlapped=0x0 | out: lpBuffer=0x27dc858*, lpNumberOfBytesWritten=0x31e640*=0x13a60, lpOverlapped=0x0) returned 1 [0049.083] CloseHandle (hObject=0x274) returned 1 [0049.083] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Legal\\CHT\\license.html", nBufferLength=0x105, lpBuffer=0x31e1c4, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Legal\\CHT\\license.html", lpFilePart=0x0) returned 0x46 [0049.083] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Legal\\CHT\\license.html", nBufferLength=0x105, lpBuffer=0x31e1c4, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Legal\\CHT\\license.html", lpFilePart=0x0) returned 0x46 [0049.083] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e624) returned 1 [0049.083] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Legal\\CHT\\license.html" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\legal\\cht\\license.html"), fInfoLevelId=0x0, lpFileInformation=0x31e6a0 | out: lpFileInformation=0x31e6a0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x99d45400, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x81df42a0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0xb5aac0, ftLastWriteTime.dwHighDateTime=0x1d6eb7f, nFileSizeHigh=0x0, nFileSizeLow=0x13a60)) returned 1 [0049.083] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e620) returned 1 [0049.083] MoveFileW (lpExistingFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Legal\\CHT\\license.html" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\legal\\cht\\license.html"), lpNewFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Legal\\CHT\\license.html" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\legal\\cht\\license.html")) returned 1 [0049.084] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e6cc) returned 1 [0049.084] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Legal\\CZE", nBufferLength=0x105, lpBuffer=0x31e1d4, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Legal\\CZE", lpFilePart=0x0) returned 0x39 [0049.084] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Legal\\CZE\\", nBufferLength=0x105, lpBuffer=0x31e1a8, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Legal\\CZE\\", lpFilePart=0x0) returned 0x3a [0049.084] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Legal\\CZE\\*", lpFindFileData=0x31e3f4 | out: lpFindFileData=0x31e3f4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x81cc37a0, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x81ce9900, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x81ce9900, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x381d00 [0049.117] FindNextFileW (in: hFindFile=0x381d00, lpFindFileData=0x31e404 | out: lpFindFileData=0x31e404*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x81cc37a0, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x81ce9900, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x81ce9900, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0049.117] FindNextFileW (in: hFindFile=0x381d00, lpFindFileData=0x31e404 | out: lpFindFileData=0x31e404*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x99d45400, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x81cc37a0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x99d45400, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x3a8, dwReserved0=0x0, dwReserved1=0x0, cFileName="eula.ini", cAlternateFileName="")) returned 1 [0049.118] FindNextFileW (in: hFindFile=0x381d00, lpFindFileData=0x31e404 | out: lpFindFileData=0x31e404*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x99d45400, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x81ce9900, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x99d45400, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x112b7, dwReserved0=0x0, dwReserved1=0x0, cFileName="license.html", cAlternateFileName="LICENS~1.HTM")) returned 1 [0049.119] FindNextFileW (in: hFindFile=0x381d00, lpFindFileData=0x31e404 | out: lpFindFileData=0x31e404*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0049.119] FindClose (in: hFindFile=0x381d00 | out: hFindFile=0x381d00) returned 1 [0049.119] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e68c) returned 1 [0049.119] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e698) returned 1 [0049.119] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e6cc) returned 1 [0049.119] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Legal\\CZE", nBufferLength=0x105, lpBuffer=0x31e1d4, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Legal\\CZE", lpFilePart=0x0) returned 0x39 [0049.119] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Legal\\CZE\\", nBufferLength=0x105, lpBuffer=0x31e1a8, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Legal\\CZE\\", lpFilePart=0x0) returned 0x3a [0049.119] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Legal\\CZE\\*", lpFindFileData=0x31e3f4 | out: lpFindFileData=0x31e3f4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x81cc37a0, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x81ce9900, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x81ce9900, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x381d00 [0049.120] FindNextFileW (in: hFindFile=0x381d00, lpFindFileData=0x31e404 | out: lpFindFileData=0x31e404*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x81cc37a0, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x81ce9900, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x81ce9900, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0049.120] FindNextFileW (in: hFindFile=0x381d00, lpFindFileData=0x31e404 | out: lpFindFileData=0x31e404*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x99d45400, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x81cc37a0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x99d45400, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x3a8, dwReserved0=0x0, dwReserved1=0x0, cFileName="eula.ini", cAlternateFileName="")) returned 1 [0049.120] FindNextFileW (in: hFindFile=0x381d00, lpFindFileData=0x31e404 | out: lpFindFileData=0x31e404*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x99d45400, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x81ce9900, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x99d45400, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x112b7, dwReserved0=0x0, dwReserved1=0x0, cFileName="license.html", cAlternateFileName="LICENS~1.HTM")) returned 1 [0049.120] FindNextFileW (in: hFindFile=0x381d00, lpFindFileData=0x31e404 | out: lpFindFileData=0x31e404*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x99d45400, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x81ce9900, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x99d45400, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x112b7, dwReserved0=0x0, dwReserved1=0x0, cFileName="license.html", cAlternateFileName="LICENS~1.HTM")) returned 0 [0049.120] FindClose (in: hFindFile=0x381d00 | out: hFindFile=0x381d00) returned 1 [0049.120] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e68c) returned 1 [0049.120] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e698) returned 1 [0049.120] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Legal\\CZE\\license.html", nBufferLength=0x105, lpBuffer=0x31e0a4, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Legal\\CZE\\license.html", lpFilePart=0x0) returned 0x46 [0049.120] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e598) returned 1 [0049.120] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Legal\\CZE\\license.html" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\legal\\cze\\license.html"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x274 [0049.130] GetFileType (hFile=0x274) returned 0x1 [0049.131] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e594) returned 1 [0049.131] GetFileType (hFile=0x274) returned 0x1 [0049.131] GetFileSize (in: hFile=0x274, lpFileSizeHigh=0x31e6a0 | out: lpFileSizeHigh=0x31e6a0*=0x0) returned 0x112b7 [0049.131] ReadFile (in: hFile=0x274, lpBuffer=0x27f2058, nNumberOfBytesToRead=0x112b7, lpNumberOfBytesRead=0x31e64c, lpOverlapped=0x0 | out: lpBuffer=0x27f2058*, lpNumberOfBytesRead=0x31e64c*=0x112b7, lpOverlapped=0x0) returned 1 [0049.147] CloseHandle (hObject=0x274) returned 1 [0049.196] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Legal\\CZE\\license.html", nBufferLength=0x105, lpBuffer=0x31e090, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Legal\\CZE\\license.html", lpFilePart=0x0) returned 0x46 [0049.196] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e584) returned 1 [0049.196] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Legal\\CZE\\license.html" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\legal\\cze\\license.html"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x274 [0049.197] GetFileType (hFile=0x274) returned 0x1 [0049.197] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e580) returned 1 [0049.197] GetFileType (hFile=0x274) returned 0x1 [0049.197] WriteFile (in: hFile=0x274, lpBuffer=0x2684e14*, nNumberOfBytesToWrite=0x112c0, lpNumberOfBytesWritten=0x31e640, lpOverlapped=0x0 | out: lpBuffer=0x2684e14*, lpNumberOfBytesWritten=0x31e640*=0x112c0, lpOverlapped=0x0) returned 1 [0049.199] CloseHandle (hObject=0x274) returned 1 [0049.199] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Legal\\CZE\\license.html", nBufferLength=0x105, lpBuffer=0x31e1c4, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Legal\\CZE\\license.html", lpFilePart=0x0) returned 0x46 [0049.199] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Legal\\CZE\\license.html", nBufferLength=0x105, lpBuffer=0x31e1c4, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Legal\\CZE\\license.html", lpFilePart=0x0) returned 0x46 [0049.199] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e624) returned 1 [0049.199] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Legal\\CZE\\license.html" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\legal\\cze\\license.html"), fInfoLevelId=0x0, lpFileInformation=0x31e6a0 | out: lpFileInformation=0x31e6a0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x99d45400, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x81ce9900, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0xc65460, ftLastWriteTime.dwHighDateTime=0x1d6eb7f, nFileSizeHigh=0x0, nFileSizeLow=0x112c0)) returned 1 [0049.199] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e620) returned 1 [0049.199] MoveFileW (lpExistingFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Legal\\CZE\\license.html" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\legal\\cze\\license.html"), lpNewFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Legal\\CZE\\license.html" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\legal\\cze\\license.html")) returned 1 [0049.200] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e6cc) returned 1 [0049.200] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Legal\\DAN", nBufferLength=0x105, lpBuffer=0x31e1d4, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Legal\\DAN", lpFilePart=0x0) returned 0x39 [0049.200] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Legal\\DAN\\", nBufferLength=0x105, lpBuffer=0x31e1a8, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Legal\\DAN\\", lpFilePart=0x0) returned 0x3a [0049.200] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Legal\\DAN\\*", lpFindFileData=0x31e3f4 | out: lpFindFileData=0x31e3f4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x81dce140, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x81dce140, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x81dce140, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x381e80 [0049.201] FindNextFileW (in: hFindFile=0x381e80, lpFindFileData=0x31e404 | out: lpFindFileData=0x31e404*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x81dce140, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x81dce140, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x81dce140, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0049.201] FindNextFileW (in: hFindFile=0x381e80, lpFindFileData=0x31e404 | out: lpFindFileData=0x31e404*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9640cd00, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x81dce140, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9640cd00, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x416, dwReserved0=0x0, dwReserved1=0x0, cFileName="eula.ini", cAlternateFileName="")) returned 1 [0049.201] FindNextFileW (in: hFindFile=0x381e80, lpFindFileData=0x31e404 | out: lpFindFileData=0x31e404*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9640cd00, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x81dce140, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9640cd00, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0xbd79, dwReserved0=0x0, dwReserved1=0x0, cFileName="license.html", cAlternateFileName="LICENS~1.HTM")) returned 1 [0049.201] FindNextFileW (in: hFindFile=0x381e80, lpFindFileData=0x31e404 | out: lpFindFileData=0x31e404*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0049.201] FindClose (in: hFindFile=0x381e80 | out: hFindFile=0x381e80) returned 1 [0049.201] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e68c) returned 1 [0049.201] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e698) returned 1 [0049.201] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e6cc) returned 1 [0049.202] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Legal\\DAN", nBufferLength=0x105, lpBuffer=0x31e1d4, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Legal\\DAN", lpFilePart=0x0) returned 0x39 [0049.202] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Legal\\DAN\\", nBufferLength=0x105, lpBuffer=0x31e1a8, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Legal\\DAN\\", lpFilePart=0x0) returned 0x3a [0049.202] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Legal\\DAN\\*", lpFindFileData=0x31e3f4 | out: lpFindFileData=0x31e3f4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x81dce140, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x81dce140, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x81dce140, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x381e80 [0049.202] FindNextFileW (in: hFindFile=0x381e80, lpFindFileData=0x31e404 | out: lpFindFileData=0x31e404*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x81dce140, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x81dce140, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x81dce140, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0049.202] FindNextFileW (in: hFindFile=0x381e80, lpFindFileData=0x31e404 | out: lpFindFileData=0x31e404*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9640cd00, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x81dce140, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9640cd00, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x416, dwReserved0=0x0, dwReserved1=0x0, cFileName="eula.ini", cAlternateFileName="")) returned 1 [0049.202] FindNextFileW (in: hFindFile=0x381e80, lpFindFileData=0x31e404 | out: lpFindFileData=0x31e404*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9640cd00, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x81dce140, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9640cd00, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0xbd79, dwReserved0=0x0, dwReserved1=0x0, cFileName="license.html", cAlternateFileName="LICENS~1.HTM")) returned 1 [0049.202] FindNextFileW (in: hFindFile=0x381e80, lpFindFileData=0x31e404 | out: lpFindFileData=0x31e404*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9640cd00, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x81dce140, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9640cd00, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0xbd79, dwReserved0=0x0, dwReserved1=0x0, cFileName="license.html", cAlternateFileName="LICENS~1.HTM")) returned 0 [0049.202] FindClose (in: hFindFile=0x381e80 | out: hFindFile=0x381e80) returned 1 [0049.202] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e68c) returned 1 [0049.203] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e698) returned 1 [0049.203] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Legal\\DAN\\license.html", nBufferLength=0x105, lpBuffer=0x31e0a4, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Legal\\DAN\\license.html", lpFilePart=0x0) returned 0x46 [0049.203] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e598) returned 1 [0049.203] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Legal\\DAN\\license.html" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\legal\\dan\\license.html"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x274 [0049.213] GetFileType (hFile=0x274) returned 0x1 [0049.213] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e594) returned 1 [0049.213] GetFileType (hFile=0x274) returned 0x1 [0049.213] GetFileSize (in: hFile=0x274, lpFileSizeHigh=0x31e6a0 | out: lpFileSizeHigh=0x31e6a0*=0x0) returned 0xbd79 [0049.213] ReadFile (in: hFile=0x274, lpBuffer=0x2697e74, nNumberOfBytesToRead=0xbd79, lpNumberOfBytesRead=0x31e64c, lpOverlapped=0x0 | out: lpBuffer=0x2697e74*, lpNumberOfBytesRead=0x31e64c*=0xbd79, lpOverlapped=0x0) returned 1 [0049.214] CloseHandle (hObject=0x274) returned 1 [0049.268] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Legal\\DAN\\license.html", nBufferLength=0x105, lpBuffer=0x31e090, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Legal\\DAN\\license.html", lpFilePart=0x0) returned 0x46 [0049.268] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e584) returned 1 [0049.268] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Legal\\DAN\\license.html" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\legal\\dan\\license.html"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x274 [0049.269] GetFileType (hFile=0x274) returned 0x1 [0049.269] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e580) returned 1 [0049.269] GetFileType (hFile=0x274) returned 0x1 [0049.269] WriteFile (in: hFile=0x274, lpBuffer=0x270864c*, nNumberOfBytesToWrite=0xbd80, lpNumberOfBytesWritten=0x31e640, lpOverlapped=0x0 | out: lpBuffer=0x270864c*, lpNumberOfBytesWritten=0x31e640*=0xbd80, lpOverlapped=0x0) returned 1 [0049.271] CloseHandle (hObject=0x274) returned 1 [0049.271] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Legal\\DAN\\license.html", nBufferLength=0x105, lpBuffer=0x31e1c4, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Legal\\DAN\\license.html", lpFilePart=0x0) returned 0x46 [0049.271] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Legal\\DAN\\license.html", nBufferLength=0x105, lpBuffer=0x31e1c4, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Legal\\DAN\\license.html", lpFilePart=0x0) returned 0x46 [0049.271] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e624) returned 1 [0049.271] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Legal\\DAN\\license.html" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\legal\\dan\\license.html"), fInfoLevelId=0x0, lpFileInformation=0x31e6a0 | out: lpFileInformation=0x31e6a0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9640cd00, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x81dce140, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0xd23b40, ftLastWriteTime.dwHighDateTime=0x1d6eb7f, nFileSizeHigh=0x0, nFileSizeLow=0xbd80)) returned 1 [0049.271] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e620) returned 1 [0049.271] MoveFileW (lpExistingFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Legal\\DAN\\license.html" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\legal\\dan\\license.html"), lpNewFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Legal\\DAN\\license.html" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\legal\\dan\\license.html")) returned 1 [0049.272] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e6cc) returned 1 [0049.272] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Legal\\DEU", nBufferLength=0x105, lpBuffer=0x31e1d4, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Legal\\DEU", lpFilePart=0x0) returned 0x39 [0049.272] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Legal\\DEU\\", nBufferLength=0x105, lpBuffer=0x31e1a8, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Legal\\DEU\\", lpFilePart=0x0) returned 0x3a [0049.272] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Legal\\DEU\\*", lpFindFileData=0x31e3f4 | out: lpFindFileData=0x31e3f4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x81df42a0, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x81df42a0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x81df42a0, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x381dc0 [0049.272] FindNextFileW (in: hFindFile=0x381dc0, lpFindFileData=0x31e404 | out: lpFindFileData=0x31e404*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x81df42a0, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x81df42a0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x81df42a0, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0049.272] FindNextFileW (in: hFindFile=0x381dc0, lpFindFileData=0x31e404 | out: lpFindFileData=0x31e404*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x950fa000, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x81df42a0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x950fa000, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x524, dwReserved0=0x0, dwReserved1=0x0, cFileName="eula.ini", cAlternateFileName="")) returned 1 [0049.272] FindNextFileW (in: hFindFile=0x381dc0, lpFindFileData=0x31e404 | out: lpFindFileData=0x31e404*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x950fa000, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x81df42a0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x950fa000, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0xc750, dwReserved0=0x0, dwReserved1=0x0, cFileName="license.html", cAlternateFileName="LICENS~1.HTM")) returned 1 [0049.272] FindNextFileW (in: hFindFile=0x381dc0, lpFindFileData=0x31e404 | out: lpFindFileData=0x31e404*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0049.273] FindClose (in: hFindFile=0x381dc0 | out: hFindFile=0x381dc0) returned 1 [0049.273] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e68c) returned 1 [0049.273] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e698) returned 1 [0049.273] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e6cc) returned 1 [0049.273] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Legal\\DEU", nBufferLength=0x105, lpBuffer=0x31e1d4, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Legal\\DEU", lpFilePart=0x0) returned 0x39 [0049.273] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Legal\\DEU\\", nBufferLength=0x105, lpBuffer=0x31e1a8, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Legal\\DEU\\", lpFilePart=0x0) returned 0x3a [0049.273] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Legal\\DEU\\*", lpFindFileData=0x31e3f4 | out: lpFindFileData=0x31e3f4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x81df42a0, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x81df42a0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x81df42a0, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x381dc0 [0049.273] FindNextFileW (in: hFindFile=0x381dc0, lpFindFileData=0x31e404 | out: lpFindFileData=0x31e404*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x81df42a0, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x81df42a0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x81df42a0, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0049.273] FindNextFileW (in: hFindFile=0x381dc0, lpFindFileData=0x31e404 | out: lpFindFileData=0x31e404*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x950fa000, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x81df42a0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x950fa000, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x524, dwReserved0=0x0, dwReserved1=0x0, cFileName="eula.ini", cAlternateFileName="")) returned 1 [0049.273] FindNextFileW (in: hFindFile=0x381dc0, lpFindFileData=0x31e404 | out: lpFindFileData=0x31e404*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x950fa000, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x81df42a0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x950fa000, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0xc750, dwReserved0=0x0, dwReserved1=0x0, cFileName="license.html", cAlternateFileName="LICENS~1.HTM")) returned 1 [0049.273] FindNextFileW (in: hFindFile=0x381dc0, lpFindFileData=0x31e404 | out: lpFindFileData=0x31e404*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x950fa000, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x81df42a0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x950fa000, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0xc750, dwReserved0=0x0, dwReserved1=0x0, cFileName="license.html", cAlternateFileName="LICENS~1.HTM")) returned 0 [0049.274] FindClose (in: hFindFile=0x381dc0 | out: hFindFile=0x381dc0) returned 1 [0049.274] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e68c) returned 1 [0049.274] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e698) returned 1 [0049.274] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Legal\\DEU\\license.html", nBufferLength=0x105, lpBuffer=0x31e0a4, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Legal\\DEU\\license.html", lpFilePart=0x0) returned 0x46 [0049.274] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e598) returned 1 [0049.274] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Legal\\DEU\\license.html" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\legal\\deu\\license.html"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x274 [0049.274] GetFileType (hFile=0x274) returned 0x1 [0049.274] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e594) returned 1 [0049.274] GetFileType (hFile=0x274) returned 0x1 [0049.274] GetFileSize (in: hFile=0x274, lpFileSizeHigh=0x31e6a0 | out: lpFileSizeHigh=0x31e6a0*=0x0) returned 0xc750 [0049.274] ReadFile (in: hFile=0x274, lpBuffer=0x271616c, nNumberOfBytesToRead=0xc750, lpNumberOfBytesRead=0x31e64c, lpOverlapped=0x0 | out: lpBuffer=0x271616c*, lpNumberOfBytesRead=0x31e64c*=0xc750, lpOverlapped=0x0) returned 1 [0049.295] CloseHandle (hObject=0x274) returned 1 [0049.310] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Legal\\DEU\\license.html", nBufferLength=0x105, lpBuffer=0x31e090, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Legal\\DEU\\license.html", lpFilePart=0x0) returned 0x46 [0049.310] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e584) returned 1 [0049.310] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Legal\\DEU\\license.html" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\legal\\deu\\license.html"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x274 [0049.311] GetFileType (hFile=0x274) returned 0x1 [0049.311] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e580) returned 1 [0049.312] GetFileType (hFile=0x274) returned 0x1 [0049.312] WriteFile (in: hFile=0x274, lpBuffer=0x2788584*, nNumberOfBytesToWrite=0xc760, lpNumberOfBytesWritten=0x31e640, lpOverlapped=0x0 | out: lpBuffer=0x2788584*, lpNumberOfBytesWritten=0x31e640*=0xc760, lpOverlapped=0x0) returned 1 [0049.313] CloseHandle (hObject=0x274) returned 1 [0049.313] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Legal\\DEU\\license.html", nBufferLength=0x105, lpBuffer=0x31e1c4, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Legal\\DEU\\license.html", lpFilePart=0x0) returned 0x46 [0049.313] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Legal\\DEU\\license.html", nBufferLength=0x105, lpBuffer=0x31e1c4, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Legal\\DEU\\license.html", lpFilePart=0x0) returned 0x46 [0049.314] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e624) returned 1 [0049.314] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Legal\\DEU\\license.html" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\legal\\deu\\license.html"), fInfoLevelId=0x0, lpFileInformation=0x31e6a0 | out: lpFileInformation=0x31e6a0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x950fa000, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x81df42a0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0xd95f60, ftLastWriteTime.dwHighDateTime=0x1d6eb7f, nFileSizeHigh=0x0, nFileSizeLow=0xc760)) returned 1 [0049.314] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e620) returned 1 [0049.314] MoveFileW (lpExistingFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Legal\\DEU\\license.html" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\legal\\deu\\license.html"), lpNewFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Legal\\DEU\\license.html" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\legal\\deu\\license.html")) returned 1 [0049.314] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e6cc) returned 1 [0049.314] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Legal\\ENU", nBufferLength=0x105, lpBuffer=0x31e1d4, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Legal\\ENU", lpFilePart=0x0) returned 0x39 [0049.314] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Legal\\ENU\\", nBufferLength=0x105, lpBuffer=0x31e1a8, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Legal\\ENU\\", lpFilePart=0x0) returned 0x3a [0049.314] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Legal\\ENU\\*", lpFindFileData=0x31e3f4 | out: lpFindFileData=0x31e3f4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x81da7fe0, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x81dce140, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x81dce140, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x381fc0 [0049.324] FindNextFileW (in: hFindFile=0x381fc0, lpFindFileData=0x31e404 | out: lpFindFileData=0x31e404*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x81da7fe0, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x81dce140, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x81dce140, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0049.324] FindNextFileW (in: hFindFile=0x381fc0, lpFindFileData=0x31e404 | out: lpFindFileData=0x31e404*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x950fa000, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x81dce140, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x950fa000, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x410, dwReserved0=0x0, dwReserved1=0x0, cFileName="eula.ini", cAlternateFileName="")) returned 1 [0049.324] FindNextFileW (in: hFindFile=0x381fc0, lpFindFileData=0x31e404 | out: lpFindFileData=0x31e404*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x950fa000, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x81dce140, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x950fa000, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0xa835, dwReserved0=0x0, dwReserved1=0x0, cFileName="license.html", cAlternateFileName="LICENS~1.HTM")) returned 1 [0049.324] FindNextFileW (in: hFindFile=0x381fc0, lpFindFileData=0x31e404 | out: lpFindFileData=0x31e404*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0049.324] FindClose (in: hFindFile=0x381fc0 | out: hFindFile=0x381fc0) returned 1 [0049.324] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e68c) returned 1 [0049.324] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e698) returned 1 [0049.324] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e6cc) returned 1 [0049.324] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Legal\\ENU", nBufferLength=0x105, lpBuffer=0x31e1d4, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Legal\\ENU", lpFilePart=0x0) returned 0x39 [0049.324] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Legal\\ENU\\", nBufferLength=0x105, lpBuffer=0x31e1a8, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Legal\\ENU\\", lpFilePart=0x0) returned 0x3a [0049.324] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Legal\\ENU\\*", lpFindFileData=0x31e3f4 | out: lpFindFileData=0x31e3f4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x81da7fe0, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x81dce140, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x81dce140, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x381fc0 [0049.325] FindNextFileW (in: hFindFile=0x381fc0, lpFindFileData=0x31e404 | out: lpFindFileData=0x31e404*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x81da7fe0, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x81dce140, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x81dce140, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0049.325] FindNextFileW (in: hFindFile=0x381fc0, lpFindFileData=0x31e404 | out: lpFindFileData=0x31e404*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x950fa000, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x81dce140, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x950fa000, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x410, dwReserved0=0x0, dwReserved1=0x0, cFileName="eula.ini", cAlternateFileName="")) returned 1 [0049.325] FindNextFileW (in: hFindFile=0x381fc0, lpFindFileData=0x31e404 | out: lpFindFileData=0x31e404*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x950fa000, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x81dce140, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x950fa000, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0xa835, dwReserved0=0x0, dwReserved1=0x0, cFileName="license.html", cAlternateFileName="LICENS~1.HTM")) returned 1 [0049.325] FindNextFileW (in: hFindFile=0x381fc0, lpFindFileData=0x31e404 | out: lpFindFileData=0x31e404*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x950fa000, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x81dce140, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x950fa000, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0xa835, dwReserved0=0x0, dwReserved1=0x0, cFileName="license.html", cAlternateFileName="LICENS~1.HTM")) returned 0 [0049.325] FindClose (in: hFindFile=0x381fc0 | out: hFindFile=0x381fc0) returned 1 [0049.325] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e68c) returned 1 [0049.325] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e698) returned 1 [0049.325] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Legal\\ENU\\license.html", nBufferLength=0x105, lpBuffer=0x31e0a4, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Legal\\ENU\\license.html", lpFilePart=0x0) returned 0x46 [0049.325] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e598) returned 1 [0049.325] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Legal\\ENU\\license.html" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\legal\\enu\\license.html"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x274 [0049.326] GetFileType (hFile=0x274) returned 0x1 [0049.326] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e594) returned 1 [0049.326] GetFileType (hFile=0x274) returned 0x1 [0049.326] GetFileSize (in: hFile=0x274, lpFileSizeHigh=0x31e6a0 | out: lpFileSizeHigh=0x31e6a0*=0x0) returned 0xa835 [0049.326] ReadFile (in: hFile=0x274, lpBuffer=0x2796a84, nNumberOfBytesToRead=0xa835, lpNumberOfBytesRead=0x31e64c, lpOverlapped=0x0 | out: lpBuffer=0x2796a84*, lpNumberOfBytesRead=0x31e64c*=0xa835, lpOverlapped=0x0) returned 1 [0049.328] CloseHandle (hObject=0x274) returned 1 [0049.342] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Legal\\ENU\\license.html", nBufferLength=0x105, lpBuffer=0x31e090, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Legal\\ENU\\license.html", lpFilePart=0x0) returned 0x46 [0049.342] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e584) returned 1 [0049.342] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Legal\\ENU\\license.html" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\legal\\enu\\license.html"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x274 [0049.344] GetFileType (hFile=0x274) returned 0x1 [0049.344] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e580) returned 1 [0049.344] GetFileType (hFile=0x274) returned 0x1 [0049.344] WriteFile (in: hFile=0x274, lpBuffer=0x2803140*, nNumberOfBytesToWrite=0xa840, lpNumberOfBytesWritten=0x31e640, lpOverlapped=0x0 | out: lpBuffer=0x2803140*, lpNumberOfBytesWritten=0x31e640*=0xa840, lpOverlapped=0x0) returned 1 [0049.345] CloseHandle (hObject=0x274) returned 1 [0049.345] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Legal\\ENU\\license.html", nBufferLength=0x105, lpBuffer=0x31e1c4, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Legal\\ENU\\license.html", lpFilePart=0x0) returned 0x46 [0049.345] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Legal\\ENU\\license.html", nBufferLength=0x105, lpBuffer=0x31e1c4, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Legal\\ENU\\license.html", lpFilePart=0x0) returned 0x46 [0049.345] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e624) returned 1 [0049.345] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Legal\\ENU\\license.html" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\legal\\enu\\license.html"), fInfoLevelId=0x0, lpFileInformation=0x31e6a0 | out: lpFileInformation=0x31e6a0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x950fa000, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x81dce140, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0xde2220, ftLastWriteTime.dwHighDateTime=0x1d6eb7f, nFileSizeHigh=0x0, nFileSizeLow=0xa840)) returned 1 [0049.345] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e620) returned 1 [0049.345] MoveFileW (lpExistingFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Legal\\ENU\\license.html" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\legal\\enu\\license.html"), lpNewFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Legal\\ENU\\license.html" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\legal\\enu\\license.html")) returned 1 [0049.346] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e6cc) returned 1 [0049.346] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Legal\\ESP", nBufferLength=0x105, lpBuffer=0x31e1d4, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Legal\\ESP", lpFilePart=0x0) returned 0x39 [0049.346] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Legal\\ESP\\", nBufferLength=0x105, lpBuffer=0x31e1a8, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Legal\\ESP\\", lpFilePart=0x0) returned 0x3a [0049.346] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Legal\\ESP\\*", lpFindFileData=0x31e3f4 | out: lpFindFileData=0x31e3f4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x81da7fe0, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x81da7fe0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x81da7fe0, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x381e00 [0049.349] FindNextFileW (in: hFindFile=0x381e00, lpFindFileData=0x31e404 | out: lpFindFileData=0x31e404*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x81da7fe0, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x81da7fe0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x81da7fe0, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0049.349] FindNextFileW (in: hFindFile=0x381e00, lpFindFileData=0x31e404 | out: lpFindFileData=0x31e404*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9640cd00, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x81da7fe0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9640cd00, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x4a8, dwReserved0=0x0, dwReserved1=0x0, cFileName="eula.ini", cAlternateFileName="")) returned 1 [0049.349] FindNextFileW (in: hFindFile=0x381e00, lpFindFileData=0x31e404 | out: lpFindFileData=0x31e404*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9640cd00, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x81da7fe0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9640cd00, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0xcd60, dwReserved0=0x0, dwReserved1=0x0, cFileName="license.html", cAlternateFileName="LICENS~1.HTM")) returned 1 [0049.349] FindNextFileW (in: hFindFile=0x381e00, lpFindFileData=0x31e404 | out: lpFindFileData=0x31e404*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0049.349] FindClose (in: hFindFile=0x381e00 | out: hFindFile=0x381e00) returned 1 [0049.349] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e68c) returned 1 [0049.349] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e698) returned 1 [0049.349] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e6cc) returned 1 [0049.349] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Legal\\ESP", nBufferLength=0x105, lpBuffer=0x31e1d4, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Legal\\ESP", lpFilePart=0x0) returned 0x39 [0049.349] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Legal\\ESP\\", nBufferLength=0x105, lpBuffer=0x31e1a8, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Legal\\ESP\\", lpFilePart=0x0) returned 0x3a [0049.349] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Legal\\ESP\\*", lpFindFileData=0x31e3f4 | out: lpFindFileData=0x31e3f4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x81da7fe0, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x81da7fe0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x81da7fe0, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x381e00 [0049.350] FindNextFileW (in: hFindFile=0x381e00, lpFindFileData=0x31e404 | out: lpFindFileData=0x31e404*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x81da7fe0, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x81da7fe0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x81da7fe0, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0049.350] FindNextFileW (in: hFindFile=0x381e00, lpFindFileData=0x31e404 | out: lpFindFileData=0x31e404*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9640cd00, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x81da7fe0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9640cd00, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x4a8, dwReserved0=0x0, dwReserved1=0x0, cFileName="eula.ini", cAlternateFileName="")) returned 1 [0049.350] FindNextFileW (in: hFindFile=0x381e00, lpFindFileData=0x31e404 | out: lpFindFileData=0x31e404*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9640cd00, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x81da7fe0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9640cd00, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0xcd60, dwReserved0=0x0, dwReserved1=0x0, cFileName="license.html", cAlternateFileName="LICENS~1.HTM")) returned 1 [0049.350] FindNextFileW (in: hFindFile=0x381e00, lpFindFileData=0x31e404 | out: lpFindFileData=0x31e404*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9640cd00, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x81da7fe0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9640cd00, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0xcd60, dwReserved0=0x0, dwReserved1=0x0, cFileName="license.html", cAlternateFileName="LICENS~1.HTM")) returned 0 [0049.350] FindClose (in: hFindFile=0x381e00 | out: hFindFile=0x381e00) returned 1 [0049.350] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e68c) returned 1 [0049.350] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e698) returned 1 [0049.350] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Legal\\ESP\\license.html", nBufferLength=0x105, lpBuffer=0x31e0a4, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Legal\\ESP\\license.html", lpFilePart=0x0) returned 0x46 [0049.350] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e598) returned 1 [0049.350] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Legal\\ESP\\license.html" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\legal\\esp\\license.html"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x274 [0049.351] GetFileType (hFile=0x274) returned 0x1 [0049.351] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e594) returned 1 [0049.351] GetFileType (hFile=0x274) returned 0x1 [0049.351] GetFileSize (in: hFile=0x274, lpFileSizeHigh=0x31e6a0 | out: lpFileSizeHigh=0x31e6a0*=0x0) returned 0xcd60 [0049.351] ReadFile (in: hFile=0x274, lpBuffer=0x280f720, nNumberOfBytesToRead=0xcd60, lpNumberOfBytesRead=0x31e64c, lpOverlapped=0x0 | out: lpBuffer=0x280f720*, lpNumberOfBytesRead=0x31e64c*=0xcd60, lpOverlapped=0x0) returned 1 [0049.353] CloseHandle (hObject=0x274) returned 1 [0049.395] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Legal\\ESP\\license.html", nBufferLength=0x105, lpBuffer=0x31e090, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Legal\\ESP\\license.html", lpFilePart=0x0) returned 0x46 [0049.395] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e584) returned 1 [0049.395] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Legal\\ESP\\license.html" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\legal\\esp\\license.html"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x274 [0049.396] GetFileType (hFile=0x274) returned 0x1 [0049.396] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e580) returned 1 [0049.396] GetFileType (hFile=0x274) returned 0x1 [0049.396] WriteFile (in: hFile=0x274, lpBuffer=0x2690128*, nNumberOfBytesToWrite=0xcd70, lpNumberOfBytesWritten=0x31e640, lpOverlapped=0x0 | out: lpBuffer=0x2690128*, lpNumberOfBytesWritten=0x31e640*=0xcd70, lpOverlapped=0x0) returned 1 [0049.398] CloseHandle (hObject=0x274) returned 1 [0049.398] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Legal\\ESP\\license.html", nBufferLength=0x105, lpBuffer=0x31e1c4, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Legal\\ESP\\license.html", lpFilePart=0x0) returned 0x46 [0049.398] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Legal\\ESP\\license.html", nBufferLength=0x105, lpBuffer=0x31e1c4, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Legal\\ESP\\license.html", lpFilePart=0x0) returned 0x46 [0049.398] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e624) returned 1 [0049.398] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Legal\\ESP\\license.html" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\legal\\esp\\license.html"), fInfoLevelId=0x0, lpFileInformation=0x31e6a0 | out: lpFileInformation=0x31e6a0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9640cd00, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x81da7fe0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0xe54640, ftLastWriteTime.dwHighDateTime=0x1d6eb7f, nFileSizeHigh=0x0, nFileSizeLow=0xcd70)) returned 1 [0049.398] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e620) returned 1 [0049.398] MoveFileW (lpExistingFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Legal\\ESP\\license.html" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\legal\\esp\\license.html"), lpNewFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Legal\\ESP\\license.html" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\legal\\esp\\license.html")) returned 1 [0049.399] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e6cc) returned 1 [0049.399] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Legal\\EUQ", nBufferLength=0x105, lpBuffer=0x31e1d4, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Legal\\EUQ", lpFilePart=0x0) returned 0x39 [0049.399] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Legal\\EUQ\\", nBufferLength=0x105, lpBuffer=0x31e1a8, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Legal\\EUQ\\", lpFilePart=0x0) returned 0x3a [0049.399] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Legal\\EUQ\\*", lpFindFileData=0x31e3f4 | out: lpFindFileData=0x31e3f4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x81efec40, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x81efec40, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x81efec40, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x381e40 [0049.399] FindNextFileW (in: hFindFile=0x381e40, lpFindFileData=0x31e404 | out: lpFindFileData=0x31e404*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x81efec40, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x81efec40, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x81efec40, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0049.399] FindNextFileW (in: hFindFile=0x381e40, lpFindFileData=0x31e404 | out: lpFindFileData=0x31e404*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9d67db00, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x81efec40, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9d67db00, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x462, dwReserved0=0x0, dwReserved1=0x0, cFileName="eula.ini", cAlternateFileName="")) returned 1 [0049.399] FindNextFileW (in: hFindFile=0x381e40, lpFindFileData=0x31e404 | out: lpFindFileData=0x31e404*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9d67db00, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x81efec40, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9d67db00, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0xaedb, dwReserved0=0x0, dwReserved1=0x0, cFileName="license.html", cAlternateFileName="LICENS~1.HTM")) returned 1 [0049.399] FindNextFileW (in: hFindFile=0x381e40, lpFindFileData=0x31e404 | out: lpFindFileData=0x31e404*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0049.400] FindClose (in: hFindFile=0x381e40 | out: hFindFile=0x381e40) returned 1 [0049.400] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e68c) returned 1 [0049.400] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e698) returned 1 [0049.400] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e6cc) returned 1 [0049.400] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Legal\\EUQ", nBufferLength=0x105, lpBuffer=0x31e1d4, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Legal\\EUQ", lpFilePart=0x0) returned 0x39 [0049.400] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Legal\\EUQ\\", nBufferLength=0x105, lpBuffer=0x31e1a8, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Legal\\EUQ\\", lpFilePart=0x0) returned 0x3a [0049.400] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Legal\\EUQ\\*", lpFindFileData=0x31e3f4 | out: lpFindFileData=0x31e3f4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x81efec40, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x81efec40, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x81efec40, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x381e40 [0049.400] FindNextFileW (in: hFindFile=0x381e40, lpFindFileData=0x31e404 | out: lpFindFileData=0x31e404*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x81efec40, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x81efec40, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x81efec40, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0049.400] FindNextFileW (in: hFindFile=0x381e40, lpFindFileData=0x31e404 | out: lpFindFileData=0x31e404*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9d67db00, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x81efec40, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9d67db00, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x462, dwReserved0=0x0, dwReserved1=0x0, cFileName="eula.ini", cAlternateFileName="")) returned 1 [0049.400] FindNextFileW (in: hFindFile=0x381e40, lpFindFileData=0x31e404 | out: lpFindFileData=0x31e404*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9d67db00, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x81efec40, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9d67db00, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0xaedb, dwReserved0=0x0, dwReserved1=0x0, cFileName="license.html", cAlternateFileName="LICENS~1.HTM")) returned 1 [0049.400] FindNextFileW (in: hFindFile=0x381e40, lpFindFileData=0x31e404 | out: lpFindFileData=0x31e404*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9d67db00, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x81efec40, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9d67db00, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0xaedb, dwReserved0=0x0, dwReserved1=0x0, cFileName="license.html", cAlternateFileName="LICENS~1.HTM")) returned 0 [0049.401] FindClose (in: hFindFile=0x381e40 | out: hFindFile=0x381e40) returned 1 [0049.401] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e68c) returned 1 [0049.401] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e698) returned 1 [0049.401] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Legal\\EUQ\\license.html", nBufferLength=0x105, lpBuffer=0x31e0a4, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Legal\\EUQ\\license.html", lpFilePart=0x0) returned 0x46 [0049.401] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e598) returned 1 [0049.401] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Legal\\EUQ\\license.html" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\legal\\euq\\license.html"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x274 [0049.401] GetFileType (hFile=0x274) returned 0x1 [0049.401] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e594) returned 1 [0049.401] GetFileType (hFile=0x274) returned 0x1 [0049.401] GetFileSize (in: hFile=0x274, lpFileSizeHigh=0x31e6a0 | out: lpFileSizeHigh=0x31e6a0*=0x0) returned 0xaedb [0049.401] ReadFile (in: hFile=0x274, lpBuffer=0x269ec38, nNumberOfBytesToRead=0xaedb, lpNumberOfBytesRead=0x31e64c, lpOverlapped=0x0 | out: lpBuffer=0x269ec38*, lpNumberOfBytesRead=0x31e64c*=0xaedb, lpOverlapped=0x0) returned 1 [0049.405] CloseHandle (hObject=0x274) returned 1 [0049.419] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Legal\\EUQ\\license.html", nBufferLength=0x105, lpBuffer=0x31e090, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Legal\\EUQ\\license.html", lpFilePart=0x0) returned 0x46 [0049.419] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e584) returned 1 [0049.419] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Legal\\EUQ\\license.html" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\legal\\euq\\license.html"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x274 [0049.420] GetFileType (hFile=0x274) returned 0x1 [0049.420] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e580) returned 1 [0049.420] GetFileType (hFile=0x274) returned 0x1 [0049.421] WriteFile (in: hFile=0x274, lpBuffer=0x270c830*, nNumberOfBytesToWrite=0xaee0, lpNumberOfBytesWritten=0x31e640, lpOverlapped=0x0 | out: lpBuffer=0x270c830*, lpNumberOfBytesWritten=0x31e640*=0xaee0, lpOverlapped=0x0) returned 1 [0049.422] CloseHandle (hObject=0x274) returned 1 [0049.422] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Legal\\EUQ\\license.html", nBufferLength=0x105, lpBuffer=0x31e1c4, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Legal\\EUQ\\license.html", lpFilePart=0x0) returned 0x46 [0049.422] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Legal\\EUQ\\license.html", nBufferLength=0x105, lpBuffer=0x31e1c4, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Legal\\EUQ\\license.html", lpFilePart=0x0) returned 0x46 [0049.422] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e624) returned 1 [0049.422] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Legal\\EUQ\\license.html" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\legal\\euq\\license.html"), fInfoLevelId=0x0, lpFileInformation=0x31e6a0 | out: lpFileInformation=0x31e6a0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9d67db00, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x81efec40, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0xea0900, ftLastWriteTime.dwHighDateTime=0x1d6eb7f, nFileSizeHigh=0x0, nFileSizeLow=0xaee0)) returned 1 [0049.422] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e620) returned 1 [0049.422] MoveFileW (lpExistingFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Legal\\EUQ\\license.html" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\legal\\euq\\license.html"), lpNewFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Legal\\EUQ\\license.html" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\legal\\euq\\license.html")) returned 1 [0049.423] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e6cc) returned 1 [0049.423] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Legal\\FRA", nBufferLength=0x105, lpBuffer=0x31e1d4, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Legal\\FRA", lpFilePart=0x0) returned 0x39 [0049.423] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Legal\\FRA\\", nBufferLength=0x105, lpBuffer=0x31e1a8, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Legal\\FRA\\", lpFilePart=0x0) returned 0x3a [0049.423] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Legal\\FRA\\*", lpFindFileData=0x31e3f4 | out: lpFindFileData=0x31e3f4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x81da7fe0, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x81da7fe0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x81da7fe0, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x381f40 [0049.433] FindNextFileW (in: hFindFile=0x381f40, lpFindFileData=0x31e404 | out: lpFindFileData=0x31e404*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x81da7fe0, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x81da7fe0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x81da7fe0, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0049.434] FindNextFileW (in: hFindFile=0x381f40, lpFindFileData=0x31e404 | out: lpFindFileData=0x31e404*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x950fa000, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x81da7fe0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x950fa000, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x4d8, dwReserved0=0x0, dwReserved1=0x0, cFileName="eula.ini", cAlternateFileName="")) returned 1 [0049.434] FindNextFileW (in: hFindFile=0x381f40, lpFindFileData=0x31e404 | out: lpFindFileData=0x31e404*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x950fa000, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x81da7fe0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x950fa000, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0xe94c, dwReserved0=0x0, dwReserved1=0x0, cFileName="license.html", cAlternateFileName="LICENS~1.HTM")) returned 1 [0049.434] FindNextFileW (in: hFindFile=0x381f40, lpFindFileData=0x31e404 | out: lpFindFileData=0x31e404*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0049.434] FindClose (in: hFindFile=0x381f40 | out: hFindFile=0x381f40) returned 1 [0049.434] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e68c) returned 1 [0049.434] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e698) returned 1 [0049.434] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e6cc) returned 1 [0049.434] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Legal\\FRA", nBufferLength=0x105, lpBuffer=0x31e1d4, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Legal\\FRA", lpFilePart=0x0) returned 0x39 [0049.434] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Legal\\FRA\\", nBufferLength=0x105, lpBuffer=0x31e1a8, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Legal\\FRA\\", lpFilePart=0x0) returned 0x3a [0049.434] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Legal\\FRA\\*", lpFindFileData=0x31e3f4 | out: lpFindFileData=0x31e3f4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x81da7fe0, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x81da7fe0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x81da7fe0, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x381f40 [0049.434] FindNextFileW (in: hFindFile=0x381f40, lpFindFileData=0x31e404 | out: lpFindFileData=0x31e404*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x81da7fe0, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x81da7fe0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x81da7fe0, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0049.435] FindNextFileW (in: hFindFile=0x381f40, lpFindFileData=0x31e404 | out: lpFindFileData=0x31e404*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x950fa000, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x81da7fe0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x950fa000, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x4d8, dwReserved0=0x0, dwReserved1=0x0, cFileName="eula.ini", cAlternateFileName="")) returned 1 [0049.435] FindNextFileW (in: hFindFile=0x381f40, lpFindFileData=0x31e404 | out: lpFindFileData=0x31e404*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x950fa000, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x81da7fe0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x950fa000, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0xe94c, dwReserved0=0x0, dwReserved1=0x0, cFileName="license.html", cAlternateFileName="LICENS~1.HTM")) returned 1 [0049.435] FindNextFileW (in: hFindFile=0x381f40, lpFindFileData=0x31e404 | out: lpFindFileData=0x31e404*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x950fa000, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x81da7fe0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x950fa000, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0xe94c, dwReserved0=0x0, dwReserved1=0x0, cFileName="license.html", cAlternateFileName="LICENS~1.HTM")) returned 0 [0049.435] FindClose (in: hFindFile=0x381f40 | out: hFindFile=0x381f40) returned 1 [0049.435] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e68c) returned 1 [0049.435] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e698) returned 1 [0049.435] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Legal\\FRA\\license.html", nBufferLength=0x105, lpBuffer=0x31e0a4, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Legal\\FRA\\license.html", lpFilePart=0x0) returned 0x46 [0049.435] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e598) returned 1 [0049.435] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Legal\\FRA\\license.html" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\legal\\fra\\license.html"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x274 [0049.435] GetFileType (hFile=0x274) returned 0x1 [0049.435] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e594) returned 1 [0049.435] GetFileType (hFile=0x274) returned 0x1 [0049.436] GetFileSize (in: hFile=0x274, lpFileSizeHigh=0x31e6a0 | out: lpFileSizeHigh=0x31e6a0*=0x0) returned 0xe94c [0049.436] ReadFile (in: hFile=0x274, lpBuffer=0x27194b0, nNumberOfBytesToRead=0xe94c, lpNumberOfBytesRead=0x31e64c, lpOverlapped=0x0 | out: lpBuffer=0x27194b0*, lpNumberOfBytesRead=0x31e64c*=0xe94c, lpOverlapped=0x0) returned 1 [0049.438] CloseHandle (hObject=0x274) returned 1 [0049.453] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Legal\\FRA\\license.html", nBufferLength=0x105, lpBuffer=0x31e090, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Legal\\FRA\\license.html", lpFilePart=0x0) returned 0x46 [0049.453] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e584) returned 1 [0049.453] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Legal\\FRA\\license.html" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\legal\\fra\\license.html"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x274 [0049.454] GetFileType (hFile=0x274) returned 0x1 [0049.454] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e580) returned 1 [0049.454] GetFileType (hFile=0x274) returned 0x1 [0049.454] WriteFile (in: hFile=0x274, lpBuffer=0x2791e98*, nNumberOfBytesToWrite=0xe950, lpNumberOfBytesWritten=0x31e640, lpOverlapped=0x0 | out: lpBuffer=0x2791e98*, lpNumberOfBytesWritten=0x31e640*=0xe950, lpOverlapped=0x0) returned 1 [0049.455] CloseHandle (hObject=0x274) returned 1 [0049.456] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Legal\\FRA\\license.html", nBufferLength=0x105, lpBuffer=0x31e1c4, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Legal\\FRA\\license.html", lpFilePart=0x0) returned 0x46 [0049.456] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Legal\\FRA\\license.html", nBufferLength=0x105, lpBuffer=0x31e1c4, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Legal\\FRA\\license.html", lpFilePart=0x0) returned 0x46 [0049.456] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e624) returned 1 [0049.456] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Legal\\FRA\\license.html" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\legal\\fra\\license.html"), fInfoLevelId=0x0, lpFileInformation=0x31e6a0 | out: lpFileInformation=0x31e6a0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x950fa000, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x81da7fe0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0xeecbc0, ftLastWriteTime.dwHighDateTime=0x1d6eb7f, nFileSizeHigh=0x0, nFileSizeLow=0xe950)) returned 1 [0049.456] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e620) returned 1 [0049.456] MoveFileW (lpExistingFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Legal\\FRA\\license.html" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\legal\\fra\\license.html"), lpNewFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Legal\\FRA\\license.html" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\legal\\fra\\license.html")) returned 1 [0049.456] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e6cc) returned 1 [0049.456] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Legal\\HRV", nBufferLength=0x105, lpBuffer=0x31e1d4, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Legal\\HRV", lpFilePart=0x0) returned 0x39 [0049.456] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Legal\\HRV\\", nBufferLength=0x105, lpBuffer=0x31e1a8, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Legal\\HRV\\", lpFilePart=0x0) returned 0x3a [0049.456] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Legal\\HRV\\*", lpFindFileData=0x31e3f4 | out: lpFindFileData=0x31e3f4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x81ce9900, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x81ce9900, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x81ce9900, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x381c80 [0049.457] FindNextFileW (in: hFindFile=0x381c80, lpFindFileData=0x31e404 | out: lpFindFileData=0x31e404*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x81ce9900, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x81ce9900, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x81ce9900, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0049.457] FindNextFileW (in: hFindFile=0x381c80, lpFindFileData=0x31e404 | out: lpFindFileData=0x31e404*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9b058100, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x81ce9900, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9b058100, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x470, dwReserved0=0x0, dwReserved1=0x0, cFileName="eula.ini", cAlternateFileName="")) returned 1 [0049.457] FindNextFileW (in: hFindFile=0x381c80, lpFindFileData=0x31e404 | out: lpFindFileData=0x31e404*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9b058100, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x81ce9900, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9b058100, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0xc490, dwReserved0=0x0, dwReserved1=0x0, cFileName="license.html", cAlternateFileName="LICENS~1.HTM")) returned 1 [0049.457] FindNextFileW (in: hFindFile=0x381c80, lpFindFileData=0x31e404 | out: lpFindFileData=0x31e404*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0049.457] FindClose (in: hFindFile=0x381c80 | out: hFindFile=0x381c80) returned 1 [0049.457] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e68c) returned 1 [0049.457] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e698) returned 1 [0049.457] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e6cc) returned 1 [0049.457] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Legal\\HRV", nBufferLength=0x105, lpBuffer=0x31e1d4, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Legal\\HRV", lpFilePart=0x0) returned 0x39 [0049.457] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Legal\\HRV\\", nBufferLength=0x105, lpBuffer=0x31e1a8, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Legal\\HRV\\", lpFilePart=0x0) returned 0x3a [0049.457] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Legal\\HRV\\*", lpFindFileData=0x31e3f4 | out: lpFindFileData=0x31e3f4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x81ce9900, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x81ce9900, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x81ce9900, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x381c80 [0049.457] FindNextFileW (in: hFindFile=0x381c80, lpFindFileData=0x31e404 | out: lpFindFileData=0x31e404*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x81ce9900, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x81ce9900, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x81ce9900, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0049.458] FindNextFileW (in: hFindFile=0x381c80, lpFindFileData=0x31e404 | out: lpFindFileData=0x31e404*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9b058100, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x81ce9900, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9b058100, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x470, dwReserved0=0x0, dwReserved1=0x0, cFileName="eula.ini", cAlternateFileName="")) returned 1 [0049.458] FindNextFileW (in: hFindFile=0x381c80, lpFindFileData=0x31e404 | out: lpFindFileData=0x31e404*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9b058100, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x81ce9900, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9b058100, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0xc490, dwReserved0=0x0, dwReserved1=0x0, cFileName="license.html", cAlternateFileName="LICENS~1.HTM")) returned 1 [0049.458] FindNextFileW (in: hFindFile=0x381c80, lpFindFileData=0x31e404 | out: lpFindFileData=0x31e404*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9b058100, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x81ce9900, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9b058100, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0xc490, dwReserved0=0x0, dwReserved1=0x0, cFileName="license.html", cAlternateFileName="LICENS~1.HTM")) returned 0 [0049.458] FindClose (in: hFindFile=0x381c80 | out: hFindFile=0x381c80) returned 1 [0049.458] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e68c) returned 1 [0049.458] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e698) returned 1 [0049.458] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Legal\\HRV\\license.html", nBufferLength=0x105, lpBuffer=0x31e0a4, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Legal\\HRV\\license.html", lpFilePart=0x0) returned 0x46 [0049.458] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e598) returned 1 [0049.458] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Legal\\HRV\\license.html" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\legal\\hrv\\license.html"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x274 [0049.463] GetFileType (hFile=0x274) returned 0x1 [0049.463] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e594) returned 1 [0049.463] GetFileType (hFile=0x274) returned 0x1 [0049.463] GetFileSize (in: hFile=0x274, lpFileSizeHigh=0x31e6a0 | out: lpFileSizeHigh=0x31e6a0*=0x0) returned 0xc490 [0049.463] ReadFile (in: hFile=0x274, lpBuffer=0x27a2588, nNumberOfBytesToRead=0xc490, lpNumberOfBytesRead=0x31e64c, lpOverlapped=0x0 | out: lpBuffer=0x27a2588*, lpNumberOfBytesRead=0x31e64c*=0xc490, lpOverlapped=0x0) returned 1 [0049.480] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Legal\\HRV\\license.html", nBufferLength=0x105, lpBuffer=0x31e090, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Legal\\HRV\\license.html", lpFilePart=0x0) returned 0x46 [0049.480] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e584) returned 1 [0049.480] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Legal\\HRV\\license.html" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\legal\\hrv\\license.html"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x274 [0049.481] GetFileType (hFile=0x274) returned 0x1 [0049.481] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e580) returned 1 [0049.481] GetFileType (hFile=0x274) returned 0x1 [0049.481] WriteFile (in: hFile=0x274, lpBuffer=0x2814160*, nNumberOfBytesToWrite=0xc4a0, lpNumberOfBytesWritten=0x31e640, lpOverlapped=0x0 | out: lpBuffer=0x2814160*, lpNumberOfBytesWritten=0x31e640*=0xc4a0, lpOverlapped=0x0) returned 1 [0049.483] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Legal\\HRV\\license.html", nBufferLength=0x105, lpBuffer=0x31e1c4, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Legal\\HRV\\license.html", lpFilePart=0x0) returned 0x46 [0049.483] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Legal\\HRV\\license.html", nBufferLength=0x105, lpBuffer=0x31e1c4, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Legal\\HRV\\license.html", lpFilePart=0x0) returned 0x46 [0049.483] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e624) returned 1 [0049.483] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Legal\\HRV\\license.html" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\legal\\hrv\\license.html"), fInfoLevelId=0x0, lpFileInformation=0x31e6a0 | out: lpFileInformation=0x31e6a0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9b058100, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x81ce9900, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0xf12d20, ftLastWriteTime.dwHighDateTime=0x1d6eb7f, nFileSizeHigh=0x0, nFileSizeLow=0xc4a0)) returned 1 [0049.483] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e620) returned 1 [0049.484] MoveFileW (lpExistingFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Legal\\HRV\\license.html" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\legal\\hrv\\license.html"), lpNewFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Legal\\HRV\\license.html" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\legal\\hrv\\license.html")) returned 1 [0049.484] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e6cc) returned 1 [0049.484] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Legal\\HUN", nBufferLength=0x105, lpBuffer=0x31e1d4, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Legal\\HUN", lpFilePart=0x0) returned 0x39 [0049.484] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Legal\\HUN\\", nBufferLength=0x105, lpBuffer=0x31e1a8, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Legal\\HUN\\", lpFilePart=0x0) returned 0x3a [0049.484] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Legal\\HUN\\*", lpFindFileData=0x31e3f4 | out: lpFindFileData=0x31e3f4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x80a76e80, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x81cc37a0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x81cc37a0, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x381b40 [0049.484] FindNextFileW (in: hFindFile=0x381b40, lpFindFileData=0x31e404 | out: lpFindFileData=0x31e404*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x80a76e80, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x81cc37a0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x81cc37a0, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0049.484] FindNextFileW (in: hFindFile=0x381b40, lpFindFileData=0x31e404 | out: lpFindFileData=0x31e404*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9b058100, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x81c9d640, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9b058100, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x4a4, dwReserved0=0x0, dwReserved1=0x0, cFileName="eula.ini", cAlternateFileName="")) returned 1 [0049.484] FindNextFileW (in: hFindFile=0x381b40, lpFindFileData=0x31e404 | out: lpFindFileData=0x31e404*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9b058100, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x81cc37a0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9b058100, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x11ef3, dwReserved0=0x0, dwReserved1=0x0, cFileName="license.html", cAlternateFileName="LICENS~1.HTM")) returned 1 [0049.485] FindNextFileW (in: hFindFile=0x381b40, lpFindFileData=0x31e404 | out: lpFindFileData=0x31e404*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0049.485] FindClose (in: hFindFile=0x381b40 | out: hFindFile=0x381b40) returned 1 [0049.485] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e68c) returned 1 [0049.485] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e698) returned 1 [0049.485] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e6cc) returned 1 [0049.485] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Legal\\HUN", nBufferLength=0x105, lpBuffer=0x31e1d4, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Legal\\HUN", lpFilePart=0x0) returned 0x39 [0049.485] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Legal\\HUN\\", nBufferLength=0x105, lpBuffer=0x31e1a8, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Legal\\HUN\\", lpFilePart=0x0) returned 0x3a [0049.485] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Legal\\HUN\\*", lpFindFileData=0x31e3f4 | out: lpFindFileData=0x31e3f4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x80a76e80, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x81cc37a0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x81cc37a0, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x381b40 [0049.485] FindNextFileW (in: hFindFile=0x381b40, lpFindFileData=0x31e404 | out: lpFindFileData=0x31e404*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x80a76e80, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x81cc37a0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x81cc37a0, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0049.485] FindNextFileW (in: hFindFile=0x381b40, lpFindFileData=0x31e404 | out: lpFindFileData=0x31e404*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9b058100, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x81c9d640, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9b058100, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x4a4, dwReserved0=0x0, dwReserved1=0x0, cFileName="eula.ini", cAlternateFileName="")) returned 1 [0049.485] FindNextFileW (in: hFindFile=0x381b40, lpFindFileData=0x31e404 | out: lpFindFileData=0x31e404*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9b058100, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x81cc37a0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9b058100, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x11ef3, dwReserved0=0x0, dwReserved1=0x0, cFileName="license.html", cAlternateFileName="LICENS~1.HTM")) returned 1 [0049.486] FindNextFileW (in: hFindFile=0x381b40, lpFindFileData=0x31e404 | out: lpFindFileData=0x31e404*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9b058100, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x81cc37a0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9b058100, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x11ef3, dwReserved0=0x0, dwReserved1=0x0, cFileName="license.html", cAlternateFileName="LICENS~1.HTM")) returned 0 [0049.486] FindClose (in: hFindFile=0x381b40 | out: hFindFile=0x381b40) returned 1 [0049.486] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e68c) returned 1 [0049.486] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e698) returned 1 [0049.486] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Legal\\HUN\\license.html", nBufferLength=0x105, lpBuffer=0x31e0a4, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Legal\\HUN\\license.html", lpFilePart=0x0) returned 0x46 [0049.486] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e598) returned 1 [0049.486] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Legal\\HUN\\license.html" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\legal\\hun\\license.html"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x274 [0049.486] GetFileType (hFile=0x274) returned 0x1 [0049.486] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e594) returned 1 [0049.486] GetFileType (hFile=0x274) returned 0x1 [0049.486] GetFileSize (in: hFile=0x274, lpFileSizeHigh=0x31e6a0 | out: lpFileSizeHigh=0x31e6a0*=0x0) returned 0x11ef3 [0049.486] ReadFile (in: hFile=0x274, lpBuffer=0x28223a0, nNumberOfBytesToRead=0x11ef3, lpNumberOfBytesRead=0x31e64c, lpOverlapped=0x0 | out: lpBuffer=0x28223a0*, lpNumberOfBytesRead=0x31e64c*=0x11ef3, lpOverlapped=0x0) returned 1 [0049.538] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Legal\\HUN\\license.html", nBufferLength=0x105, lpBuffer=0x31e090, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Legal\\HUN\\license.html", lpFilePart=0x0) returned 0x46 [0049.538] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e584) returned 1 [0049.538] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Legal\\HUN\\license.html" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\legal\\hun\\license.html"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x274 [0049.539] GetFileType (hFile=0x274) returned 0x1 [0049.539] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e580) returned 1 [0049.539] GetFileType (hFile=0x274) returned 0x1 [0049.539] WriteFile (in: hFile=0x274, lpBuffer=0x26b73d8*, nNumberOfBytesToWrite=0x11f00, lpNumberOfBytesWritten=0x31e640, lpOverlapped=0x0 | out: lpBuffer=0x26b73d8*, lpNumberOfBytesWritten=0x31e640*=0x11f00, lpOverlapped=0x0) returned 1 [0049.541] CloseHandle (hObject=0x274) returned 1 [0049.541] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Legal\\HUN\\license.html", nBufferLength=0x105, lpBuffer=0x31e1c4, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Legal\\HUN\\license.html", lpFilePart=0x0) returned 0x46 [0049.541] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Legal\\HUN\\license.html", nBufferLength=0x105, lpBuffer=0x31e1c4, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Legal\\HUN\\license.html", lpFilePart=0x0) returned 0x46 [0049.541] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e624) returned 1 [0049.541] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Legal\\HUN\\license.html" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\legal\\hun\\license.html"), fInfoLevelId=0x0, lpFileInformation=0x31e6a0 | out: lpFileInformation=0x31e6a0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9b058100, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x81cc37a0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0xfab2a0, ftLastWriteTime.dwHighDateTime=0x1d6eb7f, nFileSizeHigh=0x0, nFileSizeLow=0x11f00)) returned 1 [0049.541] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e620) returned 1 [0049.541] MoveFileW (lpExistingFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Legal\\HUN\\license.html" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\legal\\hun\\license.html"), lpNewFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Legal\\HUN\\license.html" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\legal\\hun\\license.html")) returned 1 [0049.542] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e6cc) returned 1 [0049.542] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Legal\\ITA", nBufferLength=0x105, lpBuffer=0x31e1d4, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Legal\\ITA", lpFilePart=0x0) returned 0x39 [0049.542] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Legal\\ITA\\", nBufferLength=0x105, lpBuffer=0x31e1a8, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Legal\\ITA\\", lpFilePart=0x0) returned 0x3a [0049.542] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Legal\\ITA\\*", lpFindFileData=0x31e3f4 | out: lpFindFileData=0x31e3f4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x81da7fe0, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x81da7fe0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x81da7fe0, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x381e80 [0049.546] FindNextFileW (in: hFindFile=0x381e80, lpFindFileData=0x31e404 | out: lpFindFileData=0x31e404*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x81da7fe0, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x81da7fe0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x81da7fe0, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0049.546] FindNextFileW (in: hFindFile=0x381e80, lpFindFileData=0x31e404 | out: lpFindFileData=0x31e404*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9640cd00, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x81da7fe0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9640cd00, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x48e, dwReserved0=0x0, dwReserved1=0x0, cFileName="eula.ini", cAlternateFileName="")) returned 1 [0049.546] FindNextFileW (in: hFindFile=0x381e80, lpFindFileData=0x31e404 | out: lpFindFileData=0x31e404*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9640cd00, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x81da7fe0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9640cd00, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0xc60d, dwReserved0=0x0, dwReserved1=0x0, cFileName="license.html", cAlternateFileName="LICENS~1.HTM")) returned 1 [0049.546] FindNextFileW (in: hFindFile=0x381e80, lpFindFileData=0x31e404 | out: lpFindFileData=0x31e404*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0049.546] FindClose (in: hFindFile=0x381e80 | out: hFindFile=0x381e80) returned 1 [0049.546] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e68c) returned 1 [0049.546] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e698) returned 1 [0049.547] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e6cc) returned 1 [0049.547] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Legal\\ITA", nBufferLength=0x105, lpBuffer=0x31e1d4, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Legal\\ITA", lpFilePart=0x0) returned 0x39 [0049.547] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Legal\\ITA\\", nBufferLength=0x105, lpBuffer=0x31e1a8, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Legal\\ITA\\", lpFilePart=0x0) returned 0x3a [0049.547] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Legal\\ITA\\*", lpFindFileData=0x31e3f4 | out: lpFindFileData=0x31e3f4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x81da7fe0, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x81da7fe0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x81da7fe0, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x381e80 [0049.547] FindNextFileW (in: hFindFile=0x381e80, lpFindFileData=0x31e404 | out: lpFindFileData=0x31e404*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x81da7fe0, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x81da7fe0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x81da7fe0, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0049.547] FindNextFileW (in: hFindFile=0x381e80, lpFindFileData=0x31e404 | out: lpFindFileData=0x31e404*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9640cd00, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x81da7fe0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9640cd00, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x48e, dwReserved0=0x0, dwReserved1=0x0, cFileName="eula.ini", cAlternateFileName="")) returned 1 [0049.547] FindNextFileW (in: hFindFile=0x381e80, lpFindFileData=0x31e404 | out: lpFindFileData=0x31e404*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9640cd00, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x81da7fe0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9640cd00, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0xc60d, dwReserved0=0x0, dwReserved1=0x0, cFileName="license.html", cAlternateFileName="LICENS~1.HTM")) returned 1 [0049.547] FindNextFileW (in: hFindFile=0x381e80, lpFindFileData=0x31e404 | out: lpFindFileData=0x31e404*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9640cd00, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x81da7fe0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9640cd00, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0xc60d, dwReserved0=0x0, dwReserved1=0x0, cFileName="license.html", cAlternateFileName="LICENS~1.HTM")) returned 0 [0049.547] FindClose (in: hFindFile=0x381e80 | out: hFindFile=0x381e80) returned 1 [0049.548] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e68c) returned 1 [0049.548] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e698) returned 1 [0049.548] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Legal\\ITA\\license.html", nBufferLength=0x105, lpBuffer=0x31e0a4, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Legal\\ITA\\license.html", lpFilePart=0x0) returned 0x46 [0049.548] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e598) returned 1 [0049.548] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Legal\\ITA\\license.html" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\legal\\ita\\license.html"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x274 [0049.548] GetFileType (hFile=0x274) returned 0x1 [0049.548] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e594) returned 1 [0049.548] GetFileType (hFile=0x274) returned 0x1 [0049.548] GetFileSize (in: hFile=0x274, lpFileSizeHigh=0x31e6a0 | out: lpFileSizeHigh=0x31e6a0*=0x0) returned 0xc60d [0049.548] ReadFile (in: hFile=0x274, lpBuffer=0x26cb078, nNumberOfBytesToRead=0xc60d, lpNumberOfBytesRead=0x31e64c, lpOverlapped=0x0 | out: lpBuffer=0x26cb078*, lpNumberOfBytesRead=0x31e64c*=0xc60d, lpOverlapped=0x0) returned 1 [0049.550] CloseHandle (hObject=0x274) returned 1 [0049.565] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Legal\\ITA\\license.html", nBufferLength=0x105, lpBuffer=0x31e090, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Legal\\ITA\\license.html", lpFilePart=0x0) returned 0x46 [0049.565] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e584) returned 1 [0049.565] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Legal\\ITA\\license.html" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\legal\\ita\\license.html"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x274 [0049.566] GetFileType (hFile=0x274) returned 0x1 [0049.566] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e580) returned 1 [0049.566] GetFileType (hFile=0x274) returned 0x1 [0049.566] WriteFile (in: hFile=0x274, lpBuffer=0x273d200*, nNumberOfBytesToWrite=0xc610, lpNumberOfBytesWritten=0x31e640, lpOverlapped=0x0 | out: lpBuffer=0x273d200*, lpNumberOfBytesWritten=0x31e640*=0xc610, lpOverlapped=0x0) returned 1 [0049.568] CloseHandle (hObject=0x274) returned 1 [0049.568] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Legal\\ITA\\license.html", nBufferLength=0x105, lpBuffer=0x31e1c4, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Legal\\ITA\\license.html", lpFilePart=0x0) returned 0x46 [0049.568] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Legal\\ITA\\license.html", nBufferLength=0x105, lpBuffer=0x31e1c4, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Legal\\ITA\\license.html", lpFilePart=0x0) returned 0x46 [0049.568] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e624) returned 1 [0049.568] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Legal\\ITA\\license.html" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\legal\\ita\\license.html"), fInfoLevelId=0x0, lpFileInformation=0x31e6a0 | out: lpFileInformation=0x31e6a0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9640cd00, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x81da7fe0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0xff7560, ftLastWriteTime.dwHighDateTime=0x1d6eb7f, nFileSizeHigh=0x0, nFileSizeLow=0xc610)) returned 1 [0049.568] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e620) returned 1 [0049.568] MoveFileW (lpExistingFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Legal\\ITA\\license.html" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\legal\\ita\\license.html"), lpNewFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Legal\\ITA\\license.html" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\legal\\ita\\license.html")) returned 1 [0049.568] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e6cc) returned 1 [0049.568] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Legal\\JPN", nBufferLength=0x105, lpBuffer=0x31e1d4, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Legal\\JPN", lpFilePart=0x0) returned 0x39 [0049.569] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Legal\\JPN\\", nBufferLength=0x105, lpBuffer=0x31e1a8, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Legal\\JPN\\", lpFilePart=0x0) returned 0x3a [0049.569] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Legal\\JPN\\*", lpFindFileData=0x31e3f4 | out: lpFindFileData=0x31e3f4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x81dce140, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x81dce140, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x81dce140, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x381dc0 [0049.578] FindNextFileW (in: hFindFile=0x381dc0, lpFindFileData=0x31e404 | out: lpFindFileData=0x31e404*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x81dce140, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x81dce140, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x81dce140, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0049.579] FindNextFileW (in: hFindFile=0x381dc0, lpFindFileData=0x31e404 | out: lpFindFileData=0x31e404*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9640cd00, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x81dce140, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9640cd00, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x298, dwReserved0=0x0, dwReserved1=0x0, cFileName="eula.ini", cAlternateFileName="")) returned 1 [0049.579] FindNextFileW (in: hFindFile=0x381dc0, lpFindFileData=0x31e404 | out: lpFindFileData=0x31e404*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9640cd00, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x81dce140, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9640cd00, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x1dc34, dwReserved0=0x0, dwReserved1=0x0, cFileName="license.html", cAlternateFileName="LICENS~1.HTM")) returned 1 [0049.579] FindNextFileW (in: hFindFile=0x381dc0, lpFindFileData=0x31e404 | out: lpFindFileData=0x31e404*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0049.579] FindClose (in: hFindFile=0x381dc0 | out: hFindFile=0x381dc0) returned 1 [0049.579] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e68c) returned 1 [0049.579] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e698) returned 1 [0049.579] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e6cc) returned 1 [0049.579] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Legal\\JPN", nBufferLength=0x105, lpBuffer=0x31e1d4, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Legal\\JPN", lpFilePart=0x0) returned 0x39 [0049.579] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Legal\\JPN\\", nBufferLength=0x105, lpBuffer=0x31e1a8, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Legal\\JPN\\", lpFilePart=0x0) returned 0x3a [0049.579] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Legal\\JPN\\*", lpFindFileData=0x31e3f4 | out: lpFindFileData=0x31e3f4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x81dce140, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x81dce140, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x81dce140, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x381dc0 [0049.579] FindNextFileW (in: hFindFile=0x381dc0, lpFindFileData=0x31e404 | out: lpFindFileData=0x31e404*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x81dce140, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x81dce140, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x81dce140, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0049.579] FindNextFileW (in: hFindFile=0x381dc0, lpFindFileData=0x31e404 | out: lpFindFileData=0x31e404*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9640cd00, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x81dce140, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9640cd00, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x298, dwReserved0=0x0, dwReserved1=0x0, cFileName="eula.ini", cAlternateFileName="")) returned 1 [0049.580] FindNextFileW (in: hFindFile=0x381dc0, lpFindFileData=0x31e404 | out: lpFindFileData=0x31e404*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9640cd00, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x81dce140, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9640cd00, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x1dc34, dwReserved0=0x0, dwReserved1=0x0, cFileName="license.html", cAlternateFileName="LICENS~1.HTM")) returned 1 [0049.580] FindNextFileW (in: hFindFile=0x381dc0, lpFindFileData=0x31e404 | out: lpFindFileData=0x31e404*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9640cd00, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x81dce140, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9640cd00, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x1dc34, dwReserved0=0x0, dwReserved1=0x0, cFileName="license.html", cAlternateFileName="LICENS~1.HTM")) returned 0 [0049.580] FindClose (in: hFindFile=0x381dc0 | out: hFindFile=0x381dc0) returned 1 [0049.580] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e68c) returned 1 [0049.580] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e698) returned 1 [0049.580] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Legal\\JPN\\license.html", nBufferLength=0x105, lpBuffer=0x31e0a4, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Legal\\JPN\\license.html", lpFilePart=0x0) returned 0x46 [0049.580] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e598) returned 1 [0049.580] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Legal\\JPN\\license.html" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\legal\\jpn\\license.html"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x274 [0049.580] GetFileType (hFile=0x274) returned 0x1 [0049.580] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e594) returned 1 [0049.580] GetFileType (hFile=0x274) returned 0x1 [0049.580] GetFileSize (in: hFile=0x274, lpFileSizeHigh=0x31e6a0 | out: lpFileSizeHigh=0x31e6a0*=0x0) returned 0x1dc34 [0049.581] ReadFile (in: hFile=0x274, lpBuffer=0x3824f80, nNumberOfBytesToRead=0x1dc34, lpNumberOfBytesRead=0x31e64c, lpOverlapped=0x0 | out: lpBuffer=0x3824f80*, lpNumberOfBytesRead=0x31e64c*=0x1dc34, lpOverlapped=0x0) returned 1 [0049.592] CloseHandle (hObject=0x274) returned 1 [0049.610] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Legal\\JPN\\license.html", nBufferLength=0x105, lpBuffer=0x31e090, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Legal\\JPN\\license.html", lpFilePart=0x0) returned 0x46 [0049.611] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e584) returned 1 [0049.611] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Legal\\JPN\\license.html" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\legal\\jpn\\license.html"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x274 [0049.612] GetFileType (hFile=0x274) returned 0x1 [0049.612] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e580) returned 1 [0049.612] GetFileType (hFile=0x274) returned 0x1 [0049.612] WriteFile (in: hFile=0x274, lpBuffer=0x399b350*, nNumberOfBytesToWrite=0x1dc40, lpNumberOfBytesWritten=0x31e640, lpOverlapped=0x0 | out: lpBuffer=0x399b350*, lpNumberOfBytesWritten=0x31e640*=0x1dc40, lpOverlapped=0x0) returned 1 [0049.615] CloseHandle (hObject=0x274) returned 1 [0049.615] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Legal\\JPN\\license.html", nBufferLength=0x105, lpBuffer=0x31e1c4, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Legal\\JPN\\license.html", lpFilePart=0x0) returned 0x46 [0049.615] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Legal\\JPN\\license.html", nBufferLength=0x105, lpBuffer=0x31e1c4, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Legal\\JPN\\license.html", lpFilePart=0x0) returned 0x46 [0049.615] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e624) returned 1 [0049.615] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Legal\\JPN\\license.html" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\legal\\jpn\\license.html"), fInfoLevelId=0x0, lpFileInformation=0x31e6a0 | out: lpFileInformation=0x31e6a0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9640cd00, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x81dce140, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x1069980, ftLastWriteTime.dwHighDateTime=0x1d6eb7f, nFileSizeHigh=0x0, nFileSizeLow=0x1dc40)) returned 1 [0049.615] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e620) returned 1 [0049.615] MoveFileW (lpExistingFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Legal\\JPN\\license.html" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\legal\\jpn\\license.html"), lpNewFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Legal\\JPN\\license.html" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\legal\\jpn\\license.html")) returned 1 [0049.615] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e6cc) returned 1 [0049.615] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Legal\\KOR", nBufferLength=0x105, lpBuffer=0x31e1d4, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Legal\\KOR", lpFilePart=0x0) returned 0x39 [0049.616] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Legal\\KOR\\", nBufferLength=0x105, lpBuffer=0x31e1a8, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Legal\\KOR\\", lpFilePart=0x0) returned 0x3a [0049.616] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Legal\\KOR\\*", lpFindFileData=0x31e3f4 | out: lpFindFileData=0x31e3f4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x81d81e80, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x81d81e80, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x81d81e80, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x381fc0 [0049.621] FindNextFileW (in: hFindFile=0x381fc0, lpFindFileData=0x31e404 | out: lpFindFileData=0x31e404*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x81d81e80, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x81d81e80, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x81d81e80, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0049.621] FindNextFileW (in: hFindFile=0x381fc0, lpFindFileData=0x31e404 | out: lpFindFileData=0x31e404*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x99d45400, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x81d81e80, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x99d45400, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x260, dwReserved0=0x0, dwReserved1=0x0, cFileName="eula.ini", cAlternateFileName="")) returned 1 [0049.621] FindNextFileW (in: hFindFile=0x381fc0, lpFindFileData=0x31e404 | out: lpFindFileData=0x31e404*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x99d45400, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x81d81e80, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x99d45400, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x18e95, dwReserved0=0x0, dwReserved1=0x0, cFileName="license.html", cAlternateFileName="LICENS~1.HTM")) returned 1 [0049.621] FindNextFileW (in: hFindFile=0x381fc0, lpFindFileData=0x31e404 | out: lpFindFileData=0x31e404*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0049.622] FindClose (in: hFindFile=0x381fc0 | out: hFindFile=0x381fc0) returned 1 [0049.622] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e68c) returned 1 [0049.622] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e698) returned 1 [0049.622] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e6cc) returned 1 [0049.622] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Legal\\KOR", nBufferLength=0x105, lpBuffer=0x31e1d4, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Legal\\KOR", lpFilePart=0x0) returned 0x39 [0049.622] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Legal\\KOR\\", nBufferLength=0x105, lpBuffer=0x31e1a8, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Legal\\KOR\\", lpFilePart=0x0) returned 0x3a [0049.622] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Legal\\KOR\\*", lpFindFileData=0x31e3f4 | out: lpFindFileData=0x31e3f4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x81d81e80, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x81d81e80, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x81d81e80, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x381fc0 [0049.622] FindNextFileW (in: hFindFile=0x381fc0, lpFindFileData=0x31e404 | out: lpFindFileData=0x31e404*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x81d81e80, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x81d81e80, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x81d81e80, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0049.622] FindNextFileW (in: hFindFile=0x381fc0, lpFindFileData=0x31e404 | out: lpFindFileData=0x31e404*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x99d45400, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x81d81e80, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x99d45400, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x260, dwReserved0=0x0, dwReserved1=0x0, cFileName="eula.ini", cAlternateFileName="")) returned 1 [0049.622] FindNextFileW (in: hFindFile=0x381fc0, lpFindFileData=0x31e404 | out: lpFindFileData=0x31e404*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x99d45400, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x81d81e80, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x99d45400, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x18e95, dwReserved0=0x0, dwReserved1=0x0, cFileName="license.html", cAlternateFileName="LICENS~1.HTM")) returned 1 [0049.623] FindNextFileW (in: hFindFile=0x381fc0, lpFindFileData=0x31e404 | out: lpFindFileData=0x31e404*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x99d45400, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x81d81e80, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x99d45400, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x18e95, dwReserved0=0x0, dwReserved1=0x0, cFileName="license.html", cAlternateFileName="LICENS~1.HTM")) returned 0 [0049.623] FindClose (in: hFindFile=0x381fc0 | out: hFindFile=0x381fc0) returned 1 [0049.623] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e68c) returned 1 [0049.623] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e698) returned 1 [0049.623] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Legal\\KOR\\license.html", nBufferLength=0x105, lpBuffer=0x31e0a4, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Legal\\KOR\\license.html", lpFilePart=0x0) returned 0x46 [0049.623] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e598) returned 1 [0049.623] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Legal\\KOR\\license.html" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\legal\\kor\\license.html"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x274 [0049.623] GetFileType (hFile=0x274) returned 0x1 [0049.623] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e594) returned 1 [0049.623] GetFileType (hFile=0x274) returned 0x1 [0049.623] GetFileSize (in: hFile=0x274, lpFileSizeHigh=0x31e6a0 | out: lpFileSizeHigh=0x31e6a0*=0x0) returned 0x18e95 [0049.624] ReadFile (in: hFile=0x274, lpBuffer=0x39b8fb0, nNumberOfBytesToRead=0x18e95, lpNumberOfBytesRead=0x31e64c, lpOverlapped=0x0 | out: lpBuffer=0x39b8fb0*, lpNumberOfBytesRead=0x31e64c*=0x18e95, lpOverlapped=0x0) returned 1 [0049.627] CloseHandle (hObject=0x274) returned 1 [0049.647] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Legal\\KOR\\license.html", nBufferLength=0x105, lpBuffer=0x31e090, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Legal\\KOR\\license.html", lpFilePart=0x0) returned 0x46 [0049.647] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e584) returned 1 [0049.647] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Legal\\KOR\\license.html" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\legal\\kor\\license.html"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x274 [0049.648] GetFileType (hFile=0x274) returned 0x1 [0049.648] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e580) returned 1 [0049.649] GetFileType (hFile=0x274) returned 0x1 [0049.649] WriteFile (in: hFile=0x274, lpBuffer=0x367cf50*, nNumberOfBytesToWrite=0x18ea0, lpNumberOfBytesWritten=0x31e640, lpOverlapped=0x0 | out: lpBuffer=0x367cf50*, lpNumberOfBytesWritten=0x31e640*=0x18ea0, lpOverlapped=0x0) returned 1 [0049.651] CloseHandle (hObject=0x274) returned 1 [0049.651] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Legal\\KOR\\license.html", nBufferLength=0x105, lpBuffer=0x31e1c4, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Legal\\KOR\\license.html", lpFilePart=0x0) returned 0x46 [0049.651] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Legal\\KOR\\license.html", nBufferLength=0x105, lpBuffer=0x31e1c4, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Legal\\KOR\\license.html", lpFilePart=0x0) returned 0x46 [0049.651] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e624) returned 1 [0049.651] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Legal\\KOR\\license.html" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\legal\\kor\\license.html"), fInfoLevelId=0x0, lpFileInformation=0x31e6a0 | out: lpFileInformation=0x31e6a0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x99d45400, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x81d81e80, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x10b5c40, ftLastWriteTime.dwHighDateTime=0x1d6eb7f, nFileSizeHigh=0x0, nFileSizeLow=0x18ea0)) returned 1 [0049.651] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e620) returned 1 [0049.651] MoveFileW (lpExistingFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Legal\\KOR\\license.html" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\legal\\kor\\license.html"), lpNewFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Legal\\KOR\\license.html" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\legal\\kor\\license.html")) returned 1 [0049.651] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e6cc) returned 1 [0049.651] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Legal\\NLD", nBufferLength=0x105, lpBuffer=0x31e1d4, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Legal\\NLD", lpFilePart=0x0) returned 0x39 [0049.651] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Legal\\NLD\\", nBufferLength=0x105, lpBuffer=0x31e1a8, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Legal\\NLD\\", lpFilePart=0x0) returned 0x3a [0049.652] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Legal\\NLD\\*", lpFindFileData=0x31e3f4 | out: lpFindFileData=0x31e3f4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x81dce140, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x81dce140, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x81dce140, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x381e40 [0049.652] FindNextFileW (in: hFindFile=0x381e40, lpFindFileData=0x31e404 | out: lpFindFileData=0x31e404*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x81dce140, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x81dce140, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x81dce140, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0049.652] FindNextFileW (in: hFindFile=0x381e40, lpFindFileData=0x31e404 | out: lpFindFileData=0x31e404*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9640cd00, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x81dce140, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9640cd00, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x514, dwReserved0=0x0, dwReserved1=0x0, cFileName="eula.ini", cAlternateFileName="")) returned 1 [0049.652] FindNextFileW (in: hFindFile=0x381e40, lpFindFileData=0x31e404 | out: lpFindFileData=0x31e404*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9640cd00, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x81df42a0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9640cd00, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0xc288, dwReserved0=0x0, dwReserved1=0x0, cFileName="license.html", cAlternateFileName="LICENS~1.HTM")) returned 1 [0049.652] FindNextFileW (in: hFindFile=0x381e40, lpFindFileData=0x31e404 | out: lpFindFileData=0x31e404*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0049.652] FindClose (in: hFindFile=0x381e40 | out: hFindFile=0x381e40) returned 1 [0049.652] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e68c) returned 1 [0049.652] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e698) returned 1 [0049.652] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e6cc) returned 1 [0049.653] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Legal\\NLD", nBufferLength=0x105, lpBuffer=0x31e1d4, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Legal\\NLD", lpFilePart=0x0) returned 0x39 [0049.653] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Legal\\NLD\\", nBufferLength=0x105, lpBuffer=0x31e1a8, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Legal\\NLD\\", lpFilePart=0x0) returned 0x3a [0049.653] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Legal\\NLD\\*", lpFindFileData=0x31e3f4 | out: lpFindFileData=0x31e3f4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x81dce140, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x81dce140, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x81dce140, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x381e40 [0049.653] FindNextFileW (in: hFindFile=0x381e40, lpFindFileData=0x31e404 | out: lpFindFileData=0x31e404*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x81dce140, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x81dce140, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x81dce140, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0049.653] FindNextFileW (in: hFindFile=0x381e40, lpFindFileData=0x31e404 | out: lpFindFileData=0x31e404*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9640cd00, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x81dce140, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9640cd00, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x514, dwReserved0=0x0, dwReserved1=0x0, cFileName="eula.ini", cAlternateFileName="")) returned 1 [0049.653] FindNextFileW (in: hFindFile=0x381e40, lpFindFileData=0x31e404 | out: lpFindFileData=0x31e404*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9640cd00, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x81df42a0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9640cd00, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0xc288, dwReserved0=0x0, dwReserved1=0x0, cFileName="license.html", cAlternateFileName="LICENS~1.HTM")) returned 1 [0049.653] FindNextFileW (in: hFindFile=0x381e40, lpFindFileData=0x31e404 | out: lpFindFileData=0x31e404*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9640cd00, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x81df42a0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9640cd00, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0xc288, dwReserved0=0x0, dwReserved1=0x0, cFileName="license.html", cAlternateFileName="LICENS~1.HTM")) returned 0 [0049.653] FindClose (in: hFindFile=0x381e40 | out: hFindFile=0x381e40) returned 1 [0049.653] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e68c) returned 1 [0049.653] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e698) returned 1 [0049.654] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Legal\\NLD\\license.html", nBufferLength=0x105, lpBuffer=0x31e0a4, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Legal\\NLD\\license.html", lpFilePart=0x0) returned 0x46 [0049.654] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e598) returned 1 [0049.654] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Legal\\NLD\\license.html" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\legal\\nld\\license.html"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x274 [0049.654] GetFileType (hFile=0x274) returned 0x1 [0049.654] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e594) returned 1 [0049.654] GetFileType (hFile=0x274) returned 0x1 [0049.654] GetFileSize (in: hFile=0x274, lpFileSizeHigh=0x31e6a0 | out: lpFileSizeHigh=0x31e6a0*=0x0) returned 0xc288 [0049.654] ReadFile (in: hFile=0x274, lpBuffer=0x2630634, nNumberOfBytesToRead=0xc288, lpNumberOfBytesRead=0x31e64c, lpOverlapped=0x0 | out: lpBuffer=0x2630634*, lpNumberOfBytesRead=0x31e64c*=0xc288, lpOverlapped=0x0) returned 1 [0049.657] CloseHandle (hObject=0x274) returned 1 [0049.698] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Legal\\NLD\\license.html", nBufferLength=0x105, lpBuffer=0x31e090, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Legal\\NLD\\license.html", lpFilePart=0x0) returned 0x46 [0049.698] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e584) returned 1 [0049.698] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Legal\\NLD\\license.html" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\legal\\nld\\license.html"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x274 [0049.699] GetFileType (hFile=0x274) returned 0x1 [0049.699] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e580) returned 1 [0049.699] GetFileType (hFile=0x274) returned 0x1 [0049.699] WriteFile (in: hFile=0x274, lpBuffer=0x26a1d38*, nNumberOfBytesToWrite=0xc290, lpNumberOfBytesWritten=0x31e640, lpOverlapped=0x0 | out: lpBuffer=0x26a1d38*, lpNumberOfBytesWritten=0x31e640*=0xc290, lpOverlapped=0x0) returned 1 [0049.701] CloseHandle (hObject=0x274) returned 1 [0049.701] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Legal\\NLD\\license.html", nBufferLength=0x105, lpBuffer=0x31e1c4, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Legal\\NLD\\license.html", lpFilePart=0x0) returned 0x46 [0049.701] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Legal\\NLD\\license.html", nBufferLength=0x105, lpBuffer=0x31e1c4, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Legal\\NLD\\license.html", lpFilePart=0x0) returned 0x46 [0049.701] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e624) returned 1 [0049.701] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Legal\\NLD\\license.html" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\legal\\nld\\license.html"), fInfoLevelId=0x0, lpFileInformation=0x31e6a0 | out: lpFileInformation=0x31e6a0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9640cd00, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x81df42a0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x1128060, ftLastWriteTime.dwHighDateTime=0x1d6eb7f, nFileSizeHigh=0x0, nFileSizeLow=0xc290)) returned 1 [0049.701] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e620) returned 1 [0049.701] MoveFileW (lpExistingFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Legal\\NLD\\license.html" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\legal\\nld\\license.html"), lpNewFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Legal\\NLD\\license.html" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\legal\\nld\\license.html")) returned 1 [0049.701] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e6cc) returned 1 [0049.701] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Legal\\NOR", nBufferLength=0x105, lpBuffer=0x31e1d4, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Legal\\NOR", lpFilePart=0x0) returned 0x39 [0049.701] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Legal\\NOR\\", nBufferLength=0x105, lpBuffer=0x31e1a8, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Legal\\NOR\\", lpFilePart=0x0) returned 0x3a [0049.701] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Legal\\NOR\\*", lpFindFileData=0x31e3f4 | out: lpFindFileData=0x31e3f4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x81da7fe0, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x81da7fe0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x81da7fe0, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x381f40 [0049.702] FindNextFileW (in: hFindFile=0x381f40, lpFindFileData=0x31e404 | out: lpFindFileData=0x31e404*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x81da7fe0, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x81da7fe0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x81da7fe0, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0049.702] FindNextFileW (in: hFindFile=0x381f40, lpFindFileData=0x31e404 | out: lpFindFileData=0x31e404*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x98a32700, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x81da7fe0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x98a32700, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x410, dwReserved0=0x0, dwReserved1=0x0, cFileName="eula.ini", cAlternateFileName="")) returned 1 [0049.702] FindNextFileW (in: hFindFile=0x381f40, lpFindFileData=0x31e404 | out: lpFindFileData=0x31e404*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x98a32700, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x81da7fe0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x98a32700, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0xba2a, dwReserved0=0x0, dwReserved1=0x0, cFileName="license.html", cAlternateFileName="LICENS~1.HTM")) returned 1 [0049.702] FindNextFileW (in: hFindFile=0x381f40, lpFindFileData=0x31e404 | out: lpFindFileData=0x31e404*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0049.702] FindClose (in: hFindFile=0x381f40 | out: hFindFile=0x381f40) returned 1 [0049.702] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e68c) returned 1 [0049.702] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e698) returned 1 [0049.702] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e6cc) returned 1 [0049.702] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Legal\\NOR", nBufferLength=0x105, lpBuffer=0x31e1d4, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Legal\\NOR", lpFilePart=0x0) returned 0x39 [0049.702] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Legal\\NOR\\", nBufferLength=0x105, lpBuffer=0x31e1a8, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Legal\\NOR\\", lpFilePart=0x0) returned 0x3a [0049.703] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Legal\\NOR\\*", lpFindFileData=0x31e3f4 | out: lpFindFileData=0x31e3f4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x81da7fe0, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x81da7fe0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x81da7fe0, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x381f40 [0049.703] FindNextFileW (in: hFindFile=0x381f40, lpFindFileData=0x31e404 | out: lpFindFileData=0x31e404*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x81da7fe0, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x81da7fe0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x81da7fe0, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0049.703] FindNextFileW (in: hFindFile=0x381f40, lpFindFileData=0x31e404 | out: lpFindFileData=0x31e404*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x98a32700, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x81da7fe0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x98a32700, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x410, dwReserved0=0x0, dwReserved1=0x0, cFileName="eula.ini", cAlternateFileName="")) returned 1 [0049.703] FindNextFileW (in: hFindFile=0x381f40, lpFindFileData=0x31e404 | out: lpFindFileData=0x31e404*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x98a32700, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x81da7fe0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x98a32700, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0xba2a, dwReserved0=0x0, dwReserved1=0x0, cFileName="license.html", cAlternateFileName="LICENS~1.HTM")) returned 1 [0049.703] FindNextFileW (in: hFindFile=0x381f40, lpFindFileData=0x31e404 | out: lpFindFileData=0x31e404*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x98a32700, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x81da7fe0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x98a32700, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0xba2a, dwReserved0=0x0, dwReserved1=0x0, cFileName="license.html", cAlternateFileName="LICENS~1.HTM")) returned 0 [0049.703] FindClose (in: hFindFile=0x381f40 | out: hFindFile=0x381f40) returned 1 [0049.703] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e68c) returned 1 [0049.703] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e698) returned 1 [0049.703] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Legal\\NOR\\license.html", nBufferLength=0x105, lpBuffer=0x31e0a4, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Legal\\NOR\\license.html", lpFilePart=0x0) returned 0x46 [0049.703] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e598) returned 1 [0049.704] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Legal\\NOR\\license.html" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\legal\\nor\\license.html"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x274 [0049.704] GetFileType (hFile=0x274) returned 0x1 [0049.704] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e594) returned 1 [0049.704] GetFileType (hFile=0x274) returned 0x1 [0049.704] GetFileSize (in: hFile=0x274, lpFileSizeHigh=0x31e6a0 | out: lpFileSizeHigh=0x31e6a0*=0x0) returned 0xba2a [0049.704] ReadFile (in: hFile=0x274, lpBuffer=0x26afd68, nNumberOfBytesToRead=0xba2a, lpNumberOfBytesRead=0x31e64c, lpOverlapped=0x0 | out: lpBuffer=0x26afd68*, lpNumberOfBytesRead=0x31e64c*=0xba2a, lpOverlapped=0x0) returned 1 [0049.718] CloseHandle (hObject=0x274) returned 1 [0049.733] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Legal\\NOR\\license.html", nBufferLength=0x105, lpBuffer=0x31e090, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Legal\\NOR\\license.html", lpFilePart=0x0) returned 0x46 [0049.733] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e584) returned 1 [0049.733] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Legal\\NOR\\license.html" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\legal\\nor\\license.html"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x274 [0049.734] GetFileType (hFile=0x274) returned 0x1 [0049.734] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e580) returned 1 [0049.734] GetFileType (hFile=0x274) returned 0x1 [0049.734] WriteFile (in: hFile=0x274, lpBuffer=0x271f9f4*, nNumberOfBytesToWrite=0xba30, lpNumberOfBytesWritten=0x31e640, lpOverlapped=0x0 | out: lpBuffer=0x271f9f4*, lpNumberOfBytesWritten=0x31e640*=0xba30, lpOverlapped=0x0) returned 1 [0049.735] CloseHandle (hObject=0x274) returned 1 [0049.736] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Legal\\NOR\\license.html", nBufferLength=0x105, lpBuffer=0x31e1c4, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Legal\\NOR\\license.html", lpFilePart=0x0) returned 0x46 [0049.736] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Legal\\NOR\\license.html", nBufferLength=0x105, lpBuffer=0x31e1c4, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Legal\\NOR\\license.html", lpFilePart=0x0) returned 0x46 [0049.736] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e624) returned 1 [0049.736] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Legal\\NOR\\license.html" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\legal\\nor\\license.html"), fInfoLevelId=0x0, lpFileInformation=0x31e6a0 | out: lpFileInformation=0x31e6a0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x98a32700, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x81da7fe0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x119a480, ftLastWriteTime.dwHighDateTime=0x1d6eb7f, nFileSizeHigh=0x0, nFileSizeLow=0xba30)) returned 1 [0049.736] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e620) returned 1 [0049.736] MoveFileW (lpExistingFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Legal\\NOR\\license.html" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\legal\\nor\\license.html"), lpNewFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Legal\\NOR\\license.html" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\legal\\nor\\license.html")) returned 1 [0049.736] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e6cc) returned 1 [0049.736] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Legal\\POL", nBufferLength=0x105, lpBuffer=0x31e1d4, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Legal\\POL", lpFilePart=0x0) returned 0x39 [0049.736] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Legal\\POL\\", nBufferLength=0x105, lpBuffer=0x31e1a8, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Legal\\POL\\", lpFilePart=0x0) returned 0x3a [0049.736] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Legal\\POL\\*", lpFindFileData=0x31e3f4 | out: lpFindFileData=0x31e3f4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x80a76e80, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x80a76e80, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x80a76e80, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x382080 [0049.737] FindNextFileW (in: hFindFile=0x382080, lpFindFileData=0x31e404 | out: lpFindFileData=0x31e404*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x80a76e80, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x80a76e80, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x80a76e80, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0049.738] FindNextFileW (in: hFindFile=0x382080, lpFindFileData=0x31e404 | out: lpFindFileData=0x31e404*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9b058100, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x80a76e80, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9b058100, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x470, dwReserved0=0x0, dwReserved1=0x0, cFileName="eula.ini", cAlternateFileName="")) returned 1 [0049.738] FindNextFileW (in: hFindFile=0x382080, lpFindFileData=0x31e404 | out: lpFindFileData=0x31e404*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9b058100, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x80a76e80, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9b058100, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0xf0a0, dwReserved0=0x0, dwReserved1=0x0, cFileName="license.html", cAlternateFileName="LICENS~1.HTM")) returned 1 [0049.738] FindNextFileW (in: hFindFile=0x382080, lpFindFileData=0x31e404 | out: lpFindFileData=0x31e404*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0049.738] FindClose (in: hFindFile=0x382080 | out: hFindFile=0x382080) returned 1 [0049.738] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e68c) returned 1 [0049.738] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e698) returned 1 [0049.738] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e6cc) returned 1 [0049.738] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Legal\\POL", nBufferLength=0x105, lpBuffer=0x31e1d4, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Legal\\POL", lpFilePart=0x0) returned 0x39 [0049.738] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Legal\\POL\\", nBufferLength=0x105, lpBuffer=0x31e1a8, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Legal\\POL\\", lpFilePart=0x0) returned 0x3a [0049.738] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Legal\\POL\\*", lpFindFileData=0x31e3f4 | out: lpFindFileData=0x31e3f4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x80a76e80, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x80a76e80, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x80a76e80, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x382080 [0049.738] FindNextFileW (in: hFindFile=0x382080, lpFindFileData=0x31e404 | out: lpFindFileData=0x31e404*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x80a76e80, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x80a76e80, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x80a76e80, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0049.739] FindNextFileW (in: hFindFile=0x382080, lpFindFileData=0x31e404 | out: lpFindFileData=0x31e404*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9b058100, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x80a76e80, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9b058100, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x470, dwReserved0=0x0, dwReserved1=0x0, cFileName="eula.ini", cAlternateFileName="")) returned 1 [0049.739] FindNextFileW (in: hFindFile=0x382080, lpFindFileData=0x31e404 | out: lpFindFileData=0x31e404*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9b058100, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x80a76e80, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9b058100, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0xf0a0, dwReserved0=0x0, dwReserved1=0x0, cFileName="license.html", cAlternateFileName="LICENS~1.HTM")) returned 1 [0049.739] FindNextFileW (in: hFindFile=0x382080, lpFindFileData=0x31e404 | out: lpFindFileData=0x31e404*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9b058100, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x80a76e80, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9b058100, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0xf0a0, dwReserved0=0x0, dwReserved1=0x0, cFileName="license.html", cAlternateFileName="LICENS~1.HTM")) returned 0 [0049.739] FindClose (in: hFindFile=0x382080 | out: hFindFile=0x382080) returned 1 [0049.739] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e68c) returned 1 [0049.739] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e698) returned 1 [0049.739] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Legal\\POL\\license.html", nBufferLength=0x105, lpBuffer=0x31e0a4, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Legal\\POL\\license.html", lpFilePart=0x0) returned 0x46 [0049.739] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e598) returned 1 [0049.739] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Legal\\POL\\license.html" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\legal\\pol\\license.html"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x274 [0049.739] GetFileType (hFile=0x274) returned 0x1 [0049.739] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e594) returned 1 [0049.739] GetFileType (hFile=0x274) returned 0x1 [0049.739] GetFileSize (in: hFile=0x274, lpFileSizeHigh=0x31e6a0 | out: lpFileSizeHigh=0x31e6a0*=0x0) returned 0xf0a0 [0049.740] ReadFile (in: hFile=0x274, lpBuffer=0x272d1c4, nNumberOfBytesToRead=0xf0a0, lpNumberOfBytesRead=0x31e64c, lpOverlapped=0x0 | out: lpBuffer=0x272d1c4*, lpNumberOfBytesRead=0x31e64c*=0xf0a0, lpOverlapped=0x0) returned 1 [0049.750] CloseHandle (hObject=0x274) returned 1 [0049.766] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Legal\\POL\\license.html", nBufferLength=0x105, lpBuffer=0x31e090, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Legal\\POL\\license.html", lpFilePart=0x0) returned 0x46 [0049.766] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e584) returned 1 [0049.766] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Legal\\POL\\license.html" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\legal\\pol\\license.html"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x274 [0049.767] GetFileType (hFile=0x274) returned 0x1 [0049.767] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e580) returned 1 [0049.767] GetFileType (hFile=0x274) returned 0x1 [0049.767] WriteFile (in: hFile=0x274, lpBuffer=0x27a71cc*, nNumberOfBytesToWrite=0xf0b0, lpNumberOfBytesWritten=0x31e640, lpOverlapped=0x0 | out: lpBuffer=0x27a71cc*, lpNumberOfBytesWritten=0x31e640*=0xf0b0, lpOverlapped=0x0) returned 1 [0049.769] CloseHandle (hObject=0x274) returned 1 [0049.769] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Legal\\POL\\license.html", nBufferLength=0x105, lpBuffer=0x31e1c4, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Legal\\POL\\license.html", lpFilePart=0x0) returned 0x46 [0049.769] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Legal\\POL\\license.html", nBufferLength=0x105, lpBuffer=0x31e1c4, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Legal\\POL\\license.html", lpFilePart=0x0) returned 0x46 [0049.769] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e624) returned 1 [0049.769] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Legal\\POL\\license.html" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\legal\\pol\\license.html"), fInfoLevelId=0x0, lpFileInformation=0x31e6a0 | out: lpFileInformation=0x31e6a0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9b058100, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x80a76e80, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x11e6740, ftLastWriteTime.dwHighDateTime=0x1d6eb7f, nFileSizeHigh=0x0, nFileSizeLow=0xf0b0)) returned 1 [0049.769] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e620) returned 1 [0049.769] MoveFileW (lpExistingFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Legal\\POL\\license.html" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\legal\\pol\\license.html"), lpNewFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Legal\\POL\\license.html" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\legal\\pol\\license.html")) returned 1 [0049.769] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e6cc) returned 1 [0049.769] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Legal\\PTB", nBufferLength=0x105, lpBuffer=0x31e1d4, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Legal\\PTB", lpFilePart=0x0) returned 0x39 [0049.770] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Legal\\PTB\\", nBufferLength=0x105, lpBuffer=0x31e1a8, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Legal\\PTB\\", lpFilePart=0x0) returned 0x3a [0049.770] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Legal\\PTB\\*", lpFindFileData=0x31e3f4 | out: lpFindFileData=0x31e3f4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x81d81e80, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x81d81e80, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x81d81e80, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x381e00 [0049.777] FindNextFileW (in: hFindFile=0x381e00, lpFindFileData=0x31e404 | out: lpFindFileData=0x31e404*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x81d81e80, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x81d81e80, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x81d81e80, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0049.778] FindNextFileW (in: hFindFile=0x381e00, lpFindFileData=0x31e404 | out: lpFindFileData=0x31e404*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x98a32700, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x81d81e80, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x98a32700, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x470, dwReserved0=0x0, dwReserved1=0x0, cFileName="eula.ini", cAlternateFileName="")) returned 1 [0049.778] FindNextFileW (in: hFindFile=0x381e00, lpFindFileData=0x31e404 | out: lpFindFileData=0x31e404*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x98a32700, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x81d81e80, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x98a32700, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0xd746, dwReserved0=0x0, dwReserved1=0x0, cFileName="license.html", cAlternateFileName="LICENS~1.HTM")) returned 1 [0049.778] FindNextFileW (in: hFindFile=0x381e00, lpFindFileData=0x31e404 | out: lpFindFileData=0x31e404*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0049.778] FindClose (in: hFindFile=0x381e00 | out: hFindFile=0x381e00) returned 1 [0049.778] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e68c) returned 1 [0049.778] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e698) returned 1 [0049.778] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e6cc) returned 1 [0049.778] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Legal\\PTB", nBufferLength=0x105, lpBuffer=0x31e1d4, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Legal\\PTB", lpFilePart=0x0) returned 0x39 [0049.778] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Legal\\PTB\\", nBufferLength=0x105, lpBuffer=0x31e1a8, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Legal\\PTB\\", lpFilePart=0x0) returned 0x3a [0049.778] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Legal\\PTB\\*", lpFindFileData=0x31e3f4 | out: lpFindFileData=0x31e3f4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x81d81e80, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x81d81e80, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x81d81e80, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x381e00 [0049.778] FindNextFileW (in: hFindFile=0x381e00, lpFindFileData=0x31e404 | out: lpFindFileData=0x31e404*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x81d81e80, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x81d81e80, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x81d81e80, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0049.778] FindNextFileW (in: hFindFile=0x381e00, lpFindFileData=0x31e404 | out: lpFindFileData=0x31e404*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x98a32700, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x81d81e80, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x98a32700, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x470, dwReserved0=0x0, dwReserved1=0x0, cFileName="eula.ini", cAlternateFileName="")) returned 1 [0049.779] FindNextFileW (in: hFindFile=0x381e00, lpFindFileData=0x31e404 | out: lpFindFileData=0x31e404*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x98a32700, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x81d81e80, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x98a32700, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0xd746, dwReserved0=0x0, dwReserved1=0x0, cFileName="license.html", cAlternateFileName="LICENS~1.HTM")) returned 1 [0049.779] FindNextFileW (in: hFindFile=0x381e00, lpFindFileData=0x31e404 | out: lpFindFileData=0x31e404*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x98a32700, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x81d81e80, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x98a32700, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0xd746, dwReserved0=0x0, dwReserved1=0x0, cFileName="license.html", cAlternateFileName="LICENS~1.HTM")) returned 0 [0049.779] FindClose (in: hFindFile=0x381e00 | out: hFindFile=0x381e00) returned 1 [0049.779] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e68c) returned 1 [0049.779] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e698) returned 1 [0049.779] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Legal\\PTB\\license.html", nBufferLength=0x105, lpBuffer=0x31e0a4, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Legal\\PTB\\license.html", lpFilePart=0x0) returned 0x46 [0049.779] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e598) returned 1 [0049.779] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Legal\\PTB\\license.html" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\legal\\ptb\\license.html"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x274 [0049.779] GetFileType (hFile=0x274) returned 0x1 [0049.779] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e594) returned 1 [0049.779] GetFileType (hFile=0x274) returned 0x1 [0049.779] GetFileSize (in: hFile=0x274, lpFileSizeHigh=0x31e6a0 | out: lpFileSizeHigh=0x31e6a0*=0x0) returned 0xd746 [0049.779] ReadFile (in: hFile=0x274, lpBuffer=0x27b801c, nNumberOfBytesToRead=0xd746, lpNumberOfBytesRead=0x31e64c, lpOverlapped=0x0 | out: lpBuffer=0x27b801c*, lpNumberOfBytesRead=0x31e64c*=0xd746, lpOverlapped=0x0) returned 1 [0049.796] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Legal\\PTB\\license.html", nBufferLength=0x105, lpBuffer=0x31e090, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Legal\\PTB\\license.html", lpFilePart=0x0) returned 0x46 [0049.796] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e584) returned 1 [0049.797] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Legal\\PTB\\license.html" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\legal\\ptb\\license.html"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x274 [0049.798] GetFileType (hFile=0x274) returned 0x1 [0049.798] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e580) returned 1 [0049.798] GetFileType (hFile=0x274) returned 0x1 [0049.798] WriteFile (in: hFile=0x274, lpBuffer=0x282d408*, nNumberOfBytesToWrite=0xd750, lpNumberOfBytesWritten=0x31e640, lpOverlapped=0x0 | out: lpBuffer=0x282d408*, lpNumberOfBytesWritten=0x31e640*=0xd750, lpOverlapped=0x0) returned 1 [0049.800] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Legal\\PTB\\license.html", nBufferLength=0x105, lpBuffer=0x31e1c4, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Legal\\PTB\\license.html", lpFilePart=0x0) returned 0x46 [0049.800] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Legal\\PTB\\license.html", nBufferLength=0x105, lpBuffer=0x31e1c4, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Legal\\PTB\\license.html", lpFilePart=0x0) returned 0x46 [0049.800] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e624) returned 1 [0049.800] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Legal\\PTB\\license.html" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\legal\\ptb\\license.html"), fInfoLevelId=0x0, lpFileInformation=0x31e6a0 | out: lpFileInformation=0x31e6a0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x98a32700, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x81d81e80, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x1232a00, ftLastWriteTime.dwHighDateTime=0x1d6eb7f, nFileSizeHigh=0x0, nFileSizeLow=0xd750)) returned 1 [0049.800] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e620) returned 1 [0049.800] MoveFileW (lpExistingFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Legal\\PTB\\license.html" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\legal\\ptb\\license.html"), lpNewFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Legal\\PTB\\license.html" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\legal\\ptb\\license.html")) returned 1 [0049.800] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e6cc) returned 1 [0049.801] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Legal\\RUM", nBufferLength=0x105, lpBuffer=0x31e1d4, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Legal\\RUM", lpFilePart=0x0) returned 0x39 [0049.801] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Legal\\RUM\\", nBufferLength=0x105, lpBuffer=0x31e1a8, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Legal\\RUM\\", lpFilePart=0x0) returned 0x3a [0049.801] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Legal\\RUM\\*", lpFindFileData=0x31e3f4 | out: lpFindFileData=0x31e3f4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x80a76e80, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x80a76e80, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x80a76e80, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x381d00 [0049.809] FindNextFileW (in: hFindFile=0x381d00, lpFindFileData=0x31e404 | out: lpFindFileData=0x31e404*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x80a76e80, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x80a76e80, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x80a76e80, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0049.809] FindNextFileW (in: hFindFile=0x381d00, lpFindFileData=0x31e404 | out: lpFindFileData=0x31e404*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9b058100, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x80a76e80, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9b058100, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x4d6, dwReserved0=0x0, dwReserved1=0x0, cFileName="eula.ini", cAlternateFileName="")) returned 1 [0049.809] FindNextFileW (in: hFindFile=0x381d00, lpFindFileData=0x31e404 | out: lpFindFileData=0x31e404*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9b058100, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x80a76e80, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9b058100, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0xe796, dwReserved0=0x0, dwReserved1=0x0, cFileName="license.html", cAlternateFileName="LICENS~1.HTM")) returned 1 [0049.809] FindNextFileW (in: hFindFile=0x381d00, lpFindFileData=0x31e404 | out: lpFindFileData=0x31e404*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0049.809] FindClose (in: hFindFile=0x381d00 | out: hFindFile=0x381d00) returned 1 [0049.809] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e68c) returned 1 [0049.809] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e698) returned 1 [0049.809] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e6cc) returned 1 [0049.809] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Legal\\RUM", nBufferLength=0x105, lpBuffer=0x31e1d4, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Legal\\RUM", lpFilePart=0x0) returned 0x39 [0049.812] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Legal\\RUM\\", nBufferLength=0x105, lpBuffer=0x31e1a8, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Legal\\RUM\\", lpFilePart=0x0) returned 0x3a [0049.812] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Legal\\RUM\\*", lpFindFileData=0x31e3f4 | out: lpFindFileData=0x31e3f4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x80a76e80, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x80a76e80, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x80a76e80, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x381f40 [0049.812] FindNextFileW (in: hFindFile=0x381f40, lpFindFileData=0x31e404 | out: lpFindFileData=0x31e404*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x80a76e80, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x80a76e80, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x80a76e80, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0049.812] FindNextFileW (in: hFindFile=0x381f40, lpFindFileData=0x31e404 | out: lpFindFileData=0x31e404*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9b058100, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x80a76e80, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9b058100, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x4d6, dwReserved0=0x0, dwReserved1=0x0, cFileName="eula.ini", cAlternateFileName="")) returned 1 [0049.812] FindNextFileW (in: hFindFile=0x381f40, lpFindFileData=0x31e404 | out: lpFindFileData=0x31e404*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9b058100, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x80a76e80, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9b058100, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0xe796, dwReserved0=0x0, dwReserved1=0x0, cFileName="license.html", cAlternateFileName="LICENS~1.HTM")) returned 1 [0049.812] FindNextFileW (in: hFindFile=0x381f40, lpFindFileData=0x31e404 | out: lpFindFileData=0x31e404*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9b058100, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x80a76e80, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9b058100, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0xe796, dwReserved0=0x0, dwReserved1=0x0, cFileName="license.html", cAlternateFileName="LICENS~1.HTM")) returned 0 [0049.813] FindClose (in: hFindFile=0x381f40 | out: hFindFile=0x381f40) returned 1 [0049.813] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e68c) returned 1 [0049.813] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e698) returned 1 [0049.813] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Legal\\RUM\\license.html", nBufferLength=0x105, lpBuffer=0x31e0a4, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Legal\\RUM\\license.html", lpFilePart=0x0) returned 0x46 [0049.813] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e598) returned 1 [0049.813] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Legal\\RUM\\license.html" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\legal\\rum\\license.html"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x274 [0049.813] GetFileType (hFile=0x274) returned 0x1 [0049.813] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e594) returned 1 [0049.813] GetFileType (hFile=0x274) returned 0x1 [0049.813] GetFileSize (in: hFile=0x274, lpFileSizeHigh=0x31e6a0 | out: lpFileSizeHigh=0x31e6a0*=0x0) returned 0xe796 [0049.813] ReadFile (in: hFile=0x274, lpBuffer=0x262f854, nNumberOfBytesToRead=0xe796, lpNumberOfBytesRead=0x31e64c, lpOverlapped=0x0 | out: lpBuffer=0x262f854*, lpNumberOfBytesRead=0x31e64c*=0xe796, lpOverlapped=0x0) returned 1 [0049.866] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Legal\\RUM\\license.html", nBufferLength=0x105, lpBuffer=0x31e090, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Legal\\RUM\\license.html", lpFilePart=0x0) returned 0x46 [0049.866] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e584) returned 1 [0049.866] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Legal\\RUM\\license.html" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\legal\\rum\\license.html"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x274 [0049.867] GetFileType (hFile=0x274) returned 0x1 [0049.867] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e580) returned 1 [0049.867] GetFileType (hFile=0x274) returned 0x1 [0049.867] WriteFile (in: hFile=0x274, lpBuffer=0x26a7e8c*, nNumberOfBytesToWrite=0xe7a0, lpNumberOfBytesWritten=0x31e640, lpOverlapped=0x0 | out: lpBuffer=0x26a7e8c*, lpNumberOfBytesWritten=0x31e640*=0xe7a0, lpOverlapped=0x0) returned 1 [0049.869] CloseHandle (hObject=0x274) returned 1 [0049.869] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Legal\\RUM\\license.html", nBufferLength=0x105, lpBuffer=0x31e1c4, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Legal\\RUM\\license.html", lpFilePart=0x0) returned 0x46 [0049.869] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Legal\\RUM\\license.html", nBufferLength=0x105, lpBuffer=0x31e1c4, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Legal\\RUM\\license.html", lpFilePart=0x0) returned 0x46 [0049.869] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e624) returned 1 [0049.869] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Legal\\RUM\\license.html" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\legal\\rum\\license.html"), fInfoLevelId=0x0, lpFileInformation=0x31e6a0 | out: lpFileInformation=0x31e6a0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9b058100, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x80a76e80, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x12caf80, ftLastWriteTime.dwHighDateTime=0x1d6eb7f, nFileSizeHigh=0x0, nFileSizeLow=0xe7a0)) returned 1 [0049.869] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e620) returned 1 [0049.869] MoveFileW (lpExistingFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Legal\\RUM\\license.html" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\legal\\rum\\license.html"), lpNewFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Legal\\RUM\\license.html" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\legal\\rum\\license.html")) returned 1 [0049.869] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e6cc) returned 1 [0049.869] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Legal\\RUS", nBufferLength=0x105, lpBuffer=0x31e1d4, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Legal\\RUS", lpFilePart=0x0) returned 0x39 [0049.869] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Legal\\RUS\\", nBufferLength=0x105, lpBuffer=0x31e1a8, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Legal\\RUS\\", lpFilePart=0x0) returned 0x3a [0049.869] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Legal\\RUS\\*", lpFindFileData=0x31e3f4 | out: lpFindFileData=0x31e3f4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x80a50d20, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x80a76e80, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x80a76e80, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x381e00 [0049.870] FindNextFileW (in: hFindFile=0x381e00, lpFindFileData=0x31e404 | out: lpFindFileData=0x31e404*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x80a50d20, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x80a76e80, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x80a76e80, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0049.871] FindNextFileW (in: hFindFile=0x381e00, lpFindFileData=0x31e404 | out: lpFindFileData=0x31e404*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9b058100, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x80a50d20, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9b058100, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x578, dwReserved0=0x0, dwReserved1=0x0, cFileName="eula.ini", cAlternateFileName="")) returned 1 [0049.871] FindNextFileW (in: hFindFile=0x381e00, lpFindFileData=0x31e404 | out: lpFindFileData=0x31e404*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9b058100, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x80a76e80, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9b058100, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x3ece3, dwReserved0=0x0, dwReserved1=0x0, cFileName="license.html", cAlternateFileName="LICENS~1.HTM")) returned 1 [0049.871] FindNextFileW (in: hFindFile=0x381e00, lpFindFileData=0x31e404 | out: lpFindFileData=0x31e404*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0049.871] FindClose (in: hFindFile=0x381e00 | out: hFindFile=0x381e00) returned 1 [0049.871] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e68c) returned 1 [0049.871] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e698) returned 1 [0049.871] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e6cc) returned 1 [0049.871] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Legal\\RUS", nBufferLength=0x105, lpBuffer=0x31e1d4, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Legal\\RUS", lpFilePart=0x0) returned 0x39 [0049.871] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Legal\\RUS\\", nBufferLength=0x105, lpBuffer=0x31e1a8, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Legal\\RUS\\", lpFilePart=0x0) returned 0x3a [0049.871] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Legal\\RUS\\*", lpFindFileData=0x31e3f4 | out: lpFindFileData=0x31e3f4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x80a50d20, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x80a76e80, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x80a76e80, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x381e00 [0049.871] FindNextFileW (in: hFindFile=0x381e00, lpFindFileData=0x31e404 | out: lpFindFileData=0x31e404*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x80a50d20, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x80a76e80, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x80a76e80, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0049.872] FindNextFileW (in: hFindFile=0x381e00, lpFindFileData=0x31e404 | out: lpFindFileData=0x31e404*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9b058100, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x80a50d20, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9b058100, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x578, dwReserved0=0x0, dwReserved1=0x0, cFileName="eula.ini", cAlternateFileName="")) returned 1 [0049.872] FindNextFileW (in: hFindFile=0x381e00, lpFindFileData=0x31e404 | out: lpFindFileData=0x31e404*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9b058100, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x80a76e80, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9b058100, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x3ece3, dwReserved0=0x0, dwReserved1=0x0, cFileName="license.html", cAlternateFileName="LICENS~1.HTM")) returned 1 [0049.872] FindNextFileW (in: hFindFile=0x381e00, lpFindFileData=0x31e404 | out: lpFindFileData=0x31e404*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9b058100, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x80a76e80, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9b058100, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x3ece3, dwReserved0=0x0, dwReserved1=0x0, cFileName="license.html", cAlternateFileName="LICENS~1.HTM")) returned 0 [0049.872] FindClose (in: hFindFile=0x381e00 | out: hFindFile=0x381e00) returned 1 [0049.872] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e68c) returned 1 [0049.872] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e698) returned 1 [0049.872] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Legal\\RUS\\license.html", nBufferLength=0x105, lpBuffer=0x31e0a4, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Legal\\RUS\\license.html", lpFilePart=0x0) returned 0x46 [0049.872] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e598) returned 1 [0049.872] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Legal\\RUS\\license.html" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\legal\\rus\\license.html"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x274 [0049.872] GetFileType (hFile=0x274) returned 0x1 [0049.872] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e594) returned 1 [0049.872] GetFileType (hFile=0x274) returned 0x1 [0049.873] GetFileSize (in: hFile=0x274, lpFileSizeHigh=0x31e6a0 | out: lpFileSizeHigh=0x31e6a0*=0x0) returned 0x3ece3 [0049.873] ReadFile (in: hFile=0x274, lpBuffer=0x371b6d0, nNumberOfBytesToRead=0x3ece3, lpNumberOfBytesRead=0x31e64c, lpOverlapped=0x0 | out: lpBuffer=0x371b6d0*, lpNumberOfBytesRead=0x31e64c*=0x3ece3, lpOverlapped=0x0) returned 1 [0049.876] CloseHandle (hObject=0x274) returned 1 [0049.896] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Legal\\RUS\\license.html", nBufferLength=0x105, lpBuffer=0x31e090, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Legal\\RUS\\license.html", lpFilePart=0x0) returned 0x46 [0049.896] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e584) returned 1 [0049.896] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Legal\\RUS\\license.html" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\legal\\rus\\license.html"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x274 [0049.898] GetFileType (hFile=0x274) returned 0x1 [0049.898] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e580) returned 1 [0049.898] GetFileType (hFile=0x274) returned 0x1 [0049.898] WriteFile (in: hFile=0x274, lpBuffer=0x38557b0*, nNumberOfBytesToWrite=0x3ecf0, lpNumberOfBytesWritten=0x31e640, lpOverlapped=0x0 | out: lpBuffer=0x38557b0*, lpNumberOfBytesWritten=0x31e640*=0x3ecf0, lpOverlapped=0x0) returned 1 [0049.903] CloseHandle (hObject=0x274) returned 1 [0049.903] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Legal\\RUS\\license.html", nBufferLength=0x105, lpBuffer=0x31e1c4, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Legal\\RUS\\license.html", lpFilePart=0x0) returned 0x46 [0049.903] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Legal\\RUS\\license.html", nBufferLength=0x105, lpBuffer=0x31e1c4, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Legal\\RUS\\license.html", lpFilePart=0x0) returned 0x46 [0049.903] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e624) returned 1 [0049.903] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Legal\\RUS\\license.html" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\legal\\rus\\license.html"), fInfoLevelId=0x0, lpFileInformation=0x31e6a0 | out: lpFileInformation=0x31e6a0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9b058100, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x80a76e80, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x1317240, ftLastWriteTime.dwHighDateTime=0x1d6eb7f, nFileSizeHigh=0x0, nFileSizeLow=0x3ecf0)) returned 1 [0049.903] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e620) returned 1 [0049.904] MoveFileW (lpExistingFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Legal\\RUS\\license.html" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\legal\\rus\\license.html"), lpNewFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Legal\\RUS\\license.html" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\legal\\rus\\license.html")) returned 1 [0049.904] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e6cc) returned 1 [0049.904] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Legal\\SKY", nBufferLength=0x105, lpBuffer=0x31e1d4, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Legal\\SKY", lpFilePart=0x0) returned 0x39 [0049.904] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Legal\\SKY\\", nBufferLength=0x105, lpBuffer=0x31e1a8, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Legal\\SKY\\", lpFilePart=0x0) returned 0x3a [0049.904] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Legal\\SKY\\*", lpFindFileData=0x31e3f4 | out: lpFindFileData=0x31e3f4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x80a50d20, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x80a50d20, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x80a50d20, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x382080 [0049.905] FindNextFileW (in: hFindFile=0x382080, lpFindFileData=0x31e404 | out: lpFindFileData=0x31e404*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x80a50d20, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x80a50d20, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x80a50d20, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0049.905] FindNextFileW (in: hFindFile=0x382080, lpFindFileData=0x31e404 | out: lpFindFileData=0x31e404*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9c36ae00, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x80a50d20, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9c36ae00, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x478, dwReserved0=0x0, dwReserved1=0x0, cFileName="eula.ini", cAlternateFileName="")) returned 1 [0049.905] FindNextFileW (in: hFindFile=0x382080, lpFindFileData=0x31e404 | out: lpFindFileData=0x31e404*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9c36ae00, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x80a50d20, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9c36ae00, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x10d39, dwReserved0=0x0, dwReserved1=0x0, cFileName="license.html", cAlternateFileName="LICENS~1.HTM")) returned 1 [0049.905] FindNextFileW (in: hFindFile=0x382080, lpFindFileData=0x31e404 | out: lpFindFileData=0x31e404*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0049.905] FindClose (in: hFindFile=0x382080 | out: hFindFile=0x382080) returned 1 [0049.905] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e68c) returned 1 [0049.905] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e698) returned 1 [0049.905] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e6cc) returned 1 [0049.905] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Legal\\SKY", nBufferLength=0x105, lpBuffer=0x31e1d4, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Legal\\SKY", lpFilePart=0x0) returned 0x39 [0049.905] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Legal\\SKY\\", nBufferLength=0x105, lpBuffer=0x31e1a8, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Legal\\SKY\\", lpFilePart=0x0) returned 0x3a [0049.906] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Legal\\SKY\\*", lpFindFileData=0x31e3f4 | out: lpFindFileData=0x31e3f4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x80a50d20, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x80a50d20, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x80a50d20, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x382080 [0049.906] FindNextFileW (in: hFindFile=0x382080, lpFindFileData=0x31e404 | out: lpFindFileData=0x31e404*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x80a50d20, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x80a50d20, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x80a50d20, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0049.906] FindNextFileW (in: hFindFile=0x382080, lpFindFileData=0x31e404 | out: lpFindFileData=0x31e404*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9c36ae00, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x80a50d20, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9c36ae00, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x478, dwReserved0=0x0, dwReserved1=0x0, cFileName="eula.ini", cAlternateFileName="")) returned 1 [0049.906] FindNextFileW (in: hFindFile=0x382080, lpFindFileData=0x31e404 | out: lpFindFileData=0x31e404*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9c36ae00, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x80a50d20, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9c36ae00, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x10d39, dwReserved0=0x0, dwReserved1=0x0, cFileName="license.html", cAlternateFileName="LICENS~1.HTM")) returned 1 [0049.906] FindNextFileW (in: hFindFile=0x382080, lpFindFileData=0x31e404 | out: lpFindFileData=0x31e404*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9c36ae00, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x80a50d20, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9c36ae00, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x10d39, dwReserved0=0x0, dwReserved1=0x0, cFileName="license.html", cAlternateFileName="LICENS~1.HTM")) returned 0 [0049.906] FindClose (in: hFindFile=0x382080 | out: hFindFile=0x382080) returned 1 [0049.906] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e68c) returned 1 [0049.906] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e698) returned 1 [0049.906] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Legal\\SKY\\license.html", nBufferLength=0x105, lpBuffer=0x31e0a4, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Legal\\SKY\\license.html", lpFilePart=0x0) returned 0x46 [0049.906] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e598) returned 1 [0049.907] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Legal\\SKY\\license.html" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\legal\\sky\\license.html"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x274 [0049.907] GetFileType (hFile=0x274) returned 0x1 [0049.907] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e594) returned 1 [0049.907] GetFileType (hFile=0x274) returned 0x1 [0049.907] GetFileSize (in: hFile=0x274, lpFileSizeHigh=0x31e6a0 | out: lpFileSizeHigh=0x31e6a0*=0x0) returned 0x10d39 [0049.907] ReadFile (in: hFile=0x274, lpBuffer=0x2706f64, nNumberOfBytesToRead=0x10d39, lpNumberOfBytesRead=0x31e64c, lpOverlapped=0x0 | out: lpBuffer=0x2706f64*, lpNumberOfBytesRead=0x31e64c*=0x10d39, lpOverlapped=0x0) returned 1 [0049.909] CloseHandle (hObject=0x274) returned 1 [0049.924] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Legal\\SKY\\license.html", nBufferLength=0x105, lpBuffer=0x31e090, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Legal\\SKY\\license.html", lpFilePart=0x0) returned 0x46 [0049.924] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e584) returned 1 [0049.924] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Legal\\SKY\\license.html" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\legal\\sky\\license.html"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x274 [0049.926] GetFileType (hFile=0x274) returned 0x1 [0049.926] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e580) returned 1 [0049.926] GetFileType (hFile=0x274) returned 0x1 [0049.926] WriteFile (in: hFile=0x274, lpBuffer=0x2786520*, nNumberOfBytesToWrite=0x10d40, lpNumberOfBytesWritten=0x31e640, lpOverlapped=0x0 | out: lpBuffer=0x2786520*, lpNumberOfBytesWritten=0x31e640*=0x10d40, lpOverlapped=0x0) returned 1 [0049.927] CloseHandle (hObject=0x274) returned 1 [0049.927] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Legal\\SKY\\license.html", nBufferLength=0x105, lpBuffer=0x31e1c4, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Legal\\SKY\\license.html", lpFilePart=0x0) returned 0x46 [0049.928] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Legal\\SKY\\license.html", nBufferLength=0x105, lpBuffer=0x31e1c4, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Legal\\SKY\\license.html", lpFilePart=0x0) returned 0x46 [0049.928] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e624) returned 1 [0049.928] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Legal\\SKY\\license.html" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\legal\\sky\\license.html"), fInfoLevelId=0x0, lpFileInformation=0x31e6a0 | out: lpFileInformation=0x31e6a0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9c36ae00, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x80a50d20, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x1363500, ftLastWriteTime.dwHighDateTime=0x1d6eb7f, nFileSizeHigh=0x0, nFileSizeLow=0x10d40)) returned 1 [0049.928] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e620) returned 1 [0049.928] MoveFileW (lpExistingFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Legal\\SKY\\license.html" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\legal\\sky\\license.html"), lpNewFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Legal\\SKY\\license.html" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\legal\\sky\\license.html")) returned 1 [0049.928] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e6cc) returned 1 [0049.928] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Legal\\SLV", nBufferLength=0x105, lpBuffer=0x31e1d4, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Legal\\SLV", lpFilePart=0x0) returned 0x39 [0049.928] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Legal\\SLV\\", nBufferLength=0x105, lpBuffer=0x31e1a8, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Legal\\SLV\\", lpFilePart=0x0) returned 0x3a [0049.928] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Legal\\SLV\\*", lpFindFileData=0x31e3f4 | out: lpFindFileData=0x31e3f4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x80a50d20, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x80a50d20, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x80a50d20, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x381e40 [0049.929] FindNextFileW (in: hFindFile=0x381e40, lpFindFileData=0x31e404 | out: lpFindFileData=0x31e404*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x80a50d20, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x80a50d20, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x80a50d20, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0049.929] FindNextFileW (in: hFindFile=0x381e40, lpFindFileData=0x31e404 | out: lpFindFileData=0x31e404*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9b058100, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x80a50d20, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9b058100, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x440, dwReserved0=0x0, dwReserved1=0x0, cFileName="eula.ini", cAlternateFileName="")) returned 1 [0049.930] FindNextFileW (in: hFindFile=0x381e40, lpFindFileData=0x31e404 | out: lpFindFileData=0x31e404*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9b058100, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x80a50d20, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9b058100, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0xc2f5, dwReserved0=0x0, dwReserved1=0x0, cFileName="license.html", cAlternateFileName="LICENS~1.HTM")) returned 1 [0049.930] FindNextFileW (in: hFindFile=0x381e40, lpFindFileData=0x31e404 | out: lpFindFileData=0x31e404*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0049.930] FindClose (in: hFindFile=0x381e40 | out: hFindFile=0x381e40) returned 1 [0049.930] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e68c) returned 1 [0049.930] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e698) returned 1 [0049.930] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e6cc) returned 1 [0049.930] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Legal\\SLV", nBufferLength=0x105, lpBuffer=0x31e1d4, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Legal\\SLV", lpFilePart=0x0) returned 0x39 [0049.930] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Legal\\SLV\\", nBufferLength=0x105, lpBuffer=0x31e1a8, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Legal\\SLV\\", lpFilePart=0x0) returned 0x3a [0049.930] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Legal\\SLV\\*", lpFindFileData=0x31e3f4 | out: lpFindFileData=0x31e3f4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x80a50d20, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x80a50d20, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x80a50d20, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x381e40 [0049.930] FindNextFileW (in: hFindFile=0x381e40, lpFindFileData=0x31e404 | out: lpFindFileData=0x31e404*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x80a50d20, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x80a50d20, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x80a50d20, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0049.930] FindNextFileW (in: hFindFile=0x381e40, lpFindFileData=0x31e404 | out: lpFindFileData=0x31e404*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9b058100, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x80a50d20, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9b058100, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x440, dwReserved0=0x0, dwReserved1=0x0, cFileName="eula.ini", cAlternateFileName="")) returned 1 [0049.931] FindNextFileW (in: hFindFile=0x381e40, lpFindFileData=0x31e404 | out: lpFindFileData=0x31e404*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9b058100, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x80a50d20, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9b058100, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0xc2f5, dwReserved0=0x0, dwReserved1=0x0, cFileName="license.html", cAlternateFileName="LICENS~1.HTM")) returned 1 [0049.931] FindNextFileW (in: hFindFile=0x381e40, lpFindFileData=0x31e404 | out: lpFindFileData=0x31e404*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9b058100, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x80a50d20, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9b058100, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0xc2f5, dwReserved0=0x0, dwReserved1=0x0, cFileName="license.html", cAlternateFileName="LICENS~1.HTM")) returned 0 [0049.931] FindClose (in: hFindFile=0x381e40 | out: hFindFile=0x381e40) returned 1 [0049.931] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e68c) returned 1 [0049.931] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e698) returned 1 [0049.931] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Legal\\SLV\\license.html", nBufferLength=0x105, lpBuffer=0x31e0a4, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Legal\\SLV\\license.html", lpFilePart=0x0) returned 0x46 [0049.931] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e598) returned 1 [0049.931] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Legal\\SLV\\license.html" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\legal\\slv\\license.html"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x274 [0049.931] GetFileType (hFile=0x274) returned 0x1 [0049.931] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e594) returned 1 [0049.931] GetFileType (hFile=0x274) returned 0x1 [0049.931] GetFileSize (in: hFile=0x274, lpFileSizeHigh=0x31e6a0 | out: lpFileSizeHigh=0x31e6a0*=0x0) returned 0xc2f5 [0049.931] ReadFile (in: hFile=0x274, lpBuffer=0x2799000, nNumberOfBytesToRead=0xc2f5, lpNumberOfBytesRead=0x31e64c, lpOverlapped=0x0 | out: lpBuffer=0x2799000*, lpNumberOfBytesRead=0x31e64c*=0xc2f5, lpOverlapped=0x0) returned 1 [0049.942] CloseHandle (hObject=0x274) returned 1 [0049.957] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Legal\\SLV\\license.html", nBufferLength=0x105, lpBuffer=0x31e090, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Legal\\SLV\\license.html", lpFilePart=0x0) returned 0x46 [0049.957] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e584) returned 1 [0049.957] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Legal\\SLV\\license.html" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\legal\\slv\\license.html"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x274 [0049.958] GetFileType (hFile=0x274) returned 0x1 [0049.958] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e580) returned 1 [0049.958] GetFileType (hFile=0x274) returned 0x1 [0049.958] WriteFile (in: hFile=0x274, lpBuffer=0x280a6fc*, nNumberOfBytesToWrite=0xc300, lpNumberOfBytesWritten=0x31e640, lpOverlapped=0x0 | out: lpBuffer=0x280a6fc*, lpNumberOfBytesWritten=0x31e640*=0xc300, lpOverlapped=0x0) returned 1 [0049.959] CloseHandle (hObject=0x274) returned 1 [0049.960] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Legal\\SLV\\license.html", nBufferLength=0x105, lpBuffer=0x31e1c4, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Legal\\SLV\\license.html", lpFilePart=0x0) returned 0x46 [0049.960] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Legal\\SLV\\license.html", nBufferLength=0x105, lpBuffer=0x31e1c4, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Legal\\SLV\\license.html", lpFilePart=0x0) returned 0x46 [0049.960] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e624) returned 1 [0049.960] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Legal\\SLV\\license.html" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\legal\\slv\\license.html"), fInfoLevelId=0x0, lpFileInformation=0x31e6a0 | out: lpFileInformation=0x31e6a0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9b058100, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x80a50d20, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x13af7c0, ftLastWriteTime.dwHighDateTime=0x1d6eb7f, nFileSizeHigh=0x0, nFileSizeLow=0xc300)) returned 1 [0049.960] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e620) returned 1 [0049.960] MoveFileW (lpExistingFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Legal\\SLV\\license.html" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\legal\\slv\\license.html"), lpNewFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Legal\\SLV\\license.html" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\legal\\slv\\license.html")) returned 1 [0049.960] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e6cc) returned 1 [0049.960] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Legal\\SUO", nBufferLength=0x105, lpBuffer=0x31e1d4, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Legal\\SUO", lpFilePart=0x0) returned 0x39 [0049.960] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Legal\\SUO\\", nBufferLength=0x105, lpBuffer=0x31e1a8, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Legal\\SUO\\", lpFilePart=0x0) returned 0x3a [0049.960] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Legal\\SUO\\*", lpFindFileData=0x31e3f4 | out: lpFindFileData=0x31e3f4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x81dce140, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x81dce140, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x81dce140, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x381d00 [0049.961] FindNextFileW (in: hFindFile=0x381d00, lpFindFileData=0x31e404 | out: lpFindFileData=0x31e404*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x81dce140, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x81dce140, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x81dce140, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0049.961] FindNextFileW (in: hFindFile=0x381d00, lpFindFileData=0x31e404 | out: lpFindFileData=0x31e404*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9640cd00, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x81dce140, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9640cd00, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x402, dwReserved0=0x0, dwReserved1=0x0, cFileName="eula.ini", cAlternateFileName="")) returned 1 [0049.961] FindNextFileW (in: hFindFile=0x381d00, lpFindFileData=0x31e404 | out: lpFindFileData=0x31e404*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9640cd00, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x81dce140, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9640cd00, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0xd34f, dwReserved0=0x0, dwReserved1=0x0, cFileName="license.html", cAlternateFileName="LICENS~1.HTM")) returned 1 [0049.961] FindNextFileW (in: hFindFile=0x381d00, lpFindFileData=0x31e404 | out: lpFindFileData=0x31e404*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0049.961] FindClose (in: hFindFile=0x381d00 | out: hFindFile=0x381d00) returned 1 [0049.961] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e68c) returned 1 [0049.961] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e698) returned 1 [0049.961] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e6cc) returned 1 [0049.961] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Legal\\SUO", nBufferLength=0x105, lpBuffer=0x31e1d4, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Legal\\SUO", lpFilePart=0x0) returned 0x39 [0049.961] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Legal\\SUO\\", nBufferLength=0x105, lpBuffer=0x31e1a8, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Legal\\SUO\\", lpFilePart=0x0) returned 0x3a [0049.961] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Legal\\SUO\\*", lpFindFileData=0x31e3f4 | out: lpFindFileData=0x31e3f4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x81dce140, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x81dce140, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x81dce140, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x381d00 [0049.962] FindNextFileW (in: hFindFile=0x381d00, lpFindFileData=0x31e404 | out: lpFindFileData=0x31e404*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x81dce140, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x81dce140, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x81dce140, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0049.962] FindNextFileW (in: hFindFile=0x381d00, lpFindFileData=0x31e404 | out: lpFindFileData=0x31e404*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9640cd00, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x81dce140, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9640cd00, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x402, dwReserved0=0x0, dwReserved1=0x0, cFileName="eula.ini", cAlternateFileName="")) returned 1 [0049.962] FindNextFileW (in: hFindFile=0x381d00, lpFindFileData=0x31e404 | out: lpFindFileData=0x31e404*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9640cd00, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x81dce140, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9640cd00, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0xd34f, dwReserved0=0x0, dwReserved1=0x0, cFileName="license.html", cAlternateFileName="LICENS~1.HTM")) returned 1 [0049.962] FindNextFileW (in: hFindFile=0x381d00, lpFindFileData=0x31e404 | out: lpFindFileData=0x31e404*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9640cd00, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x81dce140, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9640cd00, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0xd34f, dwReserved0=0x0, dwReserved1=0x0, cFileName="license.html", cAlternateFileName="LICENS~1.HTM")) returned 0 [0049.962] FindClose (in: hFindFile=0x381d00 | out: hFindFile=0x381d00) returned 1 [0049.962] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e68c) returned 1 [0049.962] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e698) returned 1 [0049.962] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Legal\\SUO\\license.html", nBufferLength=0x105, lpBuffer=0x31e0a4, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Legal\\SUO\\license.html", lpFilePart=0x0) returned 0x46 [0049.962] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e598) returned 1 [0049.962] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Legal\\SUO\\license.html" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\legal\\suo\\license.html"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x274 [0049.963] GetFileType (hFile=0x274) returned 0x1 [0049.963] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e594) returned 1 [0049.963] GetFileType (hFile=0x274) returned 0x1 [0049.963] GetFileSize (in: hFile=0x274, lpFileSizeHigh=0x31e6a0 | out: lpFileSizeHigh=0x31e6a0*=0x0) returned 0xd34f [0049.963] ReadFile (in: hFile=0x274, lpBuffer=0x281879c, nNumberOfBytesToRead=0xd34f, lpNumberOfBytesRead=0x31e64c, lpOverlapped=0x0 | out: lpBuffer=0x281879c*, lpNumberOfBytesRead=0x31e64c*=0xd34f, lpOverlapped=0x0) returned 1 [0049.973] CloseHandle (hObject=0x274) returned 1 [0050.016] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Legal\\SUO\\license.html", nBufferLength=0x105, lpBuffer=0x31e090, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Legal\\SUO\\license.html", lpFilePart=0x0) returned 0x46 [0050.016] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e584) returned 1 [0050.016] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Legal\\SUO\\license.html" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\legal\\suo\\license.html"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x274 [0050.017] GetFileType (hFile=0x274) returned 0x1 [0050.017] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e580) returned 1 [0050.017] GetFileType (hFile=0x274) returned 0x1 [0050.017] WriteFile (in: hFile=0x274, lpBuffer=0x269a994*, nNumberOfBytesToWrite=0xd350, lpNumberOfBytesWritten=0x31e640, lpOverlapped=0x0 | out: lpBuffer=0x269a994*, lpNumberOfBytesWritten=0x31e640*=0xd350, lpOverlapped=0x0) returned 1 [0050.019] CloseHandle (hObject=0x274) returned 1 [0050.019] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Legal\\SUO\\license.html", nBufferLength=0x105, lpBuffer=0x31e1c4, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Legal\\SUO\\license.html", lpFilePart=0x0) returned 0x46 [0050.019] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Legal\\SUO\\license.html", nBufferLength=0x105, lpBuffer=0x31e1c4, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Legal\\SUO\\license.html", lpFilePart=0x0) returned 0x46 [0050.019] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e624) returned 1 [0050.019] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Legal\\SUO\\license.html" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\legal\\suo\\license.html"), fInfoLevelId=0x0, lpFileInformation=0x31e6a0 | out: lpFileInformation=0x31e6a0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9640cd00, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x81dce140, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x1447d40, ftLastWriteTime.dwHighDateTime=0x1d6eb7f, nFileSizeHigh=0x0, nFileSizeLow=0xd350)) returned 1 [0050.019] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e620) returned 1 [0050.019] MoveFileW (lpExistingFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Legal\\SUO\\license.html" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\legal\\suo\\license.html"), lpNewFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Legal\\SUO\\license.html" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\legal\\suo\\license.html")) returned 1 [0050.019] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e6cc) returned 1 [0050.019] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Legal\\SVE", nBufferLength=0x105, lpBuffer=0x31e1d4, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Legal\\SVE", lpFilePart=0x0) returned 0x39 [0050.019] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Legal\\SVE\\", nBufferLength=0x105, lpBuffer=0x31e1a8, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Legal\\SVE\\", lpFilePart=0x0) returned 0x3a [0050.019] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Legal\\SVE\\*", lpFindFileData=0x31e3f4 | out: lpFindFileData=0x31e3f4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x81d81e80, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x81d81e80, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x81d81e80, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x381d80 [0050.020] FindNextFileW (in: hFindFile=0x381d80, lpFindFileData=0x31e404 | out: lpFindFileData=0x31e404*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x81d81e80, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x81d81e80, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x81d81e80, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0050.020] FindNextFileW (in: hFindFile=0x381d80, lpFindFileData=0x31e404 | out: lpFindFileData=0x31e404*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9640cd00, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x81d81e80, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9640cd00, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x3f6, dwReserved0=0x0, dwReserved1=0x0, cFileName="eula.ini", cAlternateFileName="")) returned 1 [0050.020] FindNextFileW (in: hFindFile=0x381d80, lpFindFileData=0x31e404 | out: lpFindFileData=0x31e404*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9640cd00, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x81d81e80, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9640cd00, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0xc8bf, dwReserved0=0x0, dwReserved1=0x0, cFileName="license.html", cAlternateFileName="LICENS~1.HTM")) returned 1 [0050.020] FindNextFileW (in: hFindFile=0x381d80, lpFindFileData=0x31e404 | out: lpFindFileData=0x31e404*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0050.020] FindClose (in: hFindFile=0x381d80 | out: hFindFile=0x381d80) returned 1 [0050.020] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e68c) returned 1 [0050.020] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e698) returned 1 [0050.020] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e6cc) returned 1 [0050.020] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Legal\\SVE", nBufferLength=0x105, lpBuffer=0x31e1d4, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Legal\\SVE", lpFilePart=0x0) returned 0x39 [0050.020] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Legal\\SVE\\", nBufferLength=0x105, lpBuffer=0x31e1a8, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Legal\\SVE\\", lpFilePart=0x0) returned 0x3a [0050.020] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Legal\\SVE\\*", lpFindFileData=0x31e3f4 | out: lpFindFileData=0x31e3f4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x81d81e80, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x81d81e80, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x81d81e80, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x381d80 [0050.021] FindNextFileW (in: hFindFile=0x381d80, lpFindFileData=0x31e404 | out: lpFindFileData=0x31e404*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x81d81e80, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x81d81e80, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x81d81e80, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0050.021] FindNextFileW (in: hFindFile=0x381d80, lpFindFileData=0x31e404 | out: lpFindFileData=0x31e404*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9640cd00, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x81d81e80, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9640cd00, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x3f6, dwReserved0=0x0, dwReserved1=0x0, cFileName="eula.ini", cAlternateFileName="")) returned 1 [0050.021] FindNextFileW (in: hFindFile=0x381d80, lpFindFileData=0x31e404 | out: lpFindFileData=0x31e404*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9640cd00, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x81d81e80, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9640cd00, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0xc8bf, dwReserved0=0x0, dwReserved1=0x0, cFileName="license.html", cAlternateFileName="LICENS~1.HTM")) returned 1 [0050.021] FindNextFileW (in: hFindFile=0x381d80, lpFindFileData=0x31e404 | out: lpFindFileData=0x31e404*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9640cd00, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x81d81e80, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9640cd00, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0xc8bf, dwReserved0=0x0, dwReserved1=0x0, cFileName="license.html", cAlternateFileName="LICENS~1.HTM")) returned 0 [0050.021] FindClose (in: hFindFile=0x381d80 | out: hFindFile=0x381d80) returned 1 [0050.021] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e68c) returned 1 [0050.021] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e698) returned 1 [0050.021] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Legal\\SVE\\license.html", nBufferLength=0x105, lpBuffer=0x31e0a4, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Legal\\SVE\\license.html", lpFilePart=0x0) returned 0x46 [0050.021] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e598) returned 1 [0050.021] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Legal\\SVE\\license.html" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\legal\\sve\\license.html"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x274 [0050.022] GetFileType (hFile=0x274) returned 0x1 [0050.022] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e594) returned 1 [0050.022] GetFileType (hFile=0x274) returned 0x1 [0050.022] GetFileSize (in: hFile=0x274, lpFileSizeHigh=0x31e6a0 | out: lpFileSizeHigh=0x31e6a0*=0x0) returned 0xc8bf [0050.022] ReadFile (in: hFile=0x274, lpBuffer=0x26a9a84, nNumberOfBytesToRead=0xc8bf, lpNumberOfBytesRead=0x31e64c, lpOverlapped=0x0 | out: lpBuffer=0x26a9a84*, lpNumberOfBytesRead=0x31e64c*=0xc8bf, lpOverlapped=0x0) returned 1 [0050.024] CloseHandle (hObject=0x274) returned 1 [0050.038] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Legal\\SVE\\license.html", nBufferLength=0x105, lpBuffer=0x31e090, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Legal\\SVE\\license.html", lpFilePart=0x0) returned 0x46 [0050.038] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e584) returned 1 [0050.039] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Legal\\SVE\\license.html" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\legal\\sve\\license.html"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x274 [0050.040] GetFileType (hFile=0x274) returned 0x1 [0050.040] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e580) returned 1 [0050.040] GetFileType (hFile=0x274) returned 0x1 [0050.040] WriteFile (in: hFile=0x274, lpBuffer=0x271c41c*, nNumberOfBytesToWrite=0xc8c0, lpNumberOfBytesWritten=0x31e640, lpOverlapped=0x0 | out: lpBuffer=0x271c41c*, lpNumberOfBytesWritten=0x31e640*=0xc8c0, lpOverlapped=0x0) returned 1 [0050.041] CloseHandle (hObject=0x274) returned 1 [0050.041] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Legal\\SVE\\license.html", nBufferLength=0x105, lpBuffer=0x31e1c4, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Legal\\SVE\\license.html", lpFilePart=0x0) returned 0x46 [0050.041] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Legal\\SVE\\license.html", nBufferLength=0x105, lpBuffer=0x31e1c4, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Legal\\SVE\\license.html", lpFilePart=0x0) returned 0x46 [0050.041] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e624) returned 1 [0050.041] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Legal\\SVE\\license.html" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\legal\\sve\\license.html"), fInfoLevelId=0x0, lpFileInformation=0x31e6a0 | out: lpFileInformation=0x31e6a0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9640cd00, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x81d81e80, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x146dea0, ftLastWriteTime.dwHighDateTime=0x1d6eb7f, nFileSizeHigh=0x0, nFileSizeLow=0xc8c0)) returned 1 [0050.041] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e620) returned 1 [0050.042] MoveFileW (lpExistingFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Legal\\SVE\\license.html" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\legal\\sve\\license.html"), lpNewFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Legal\\SVE\\license.html" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\legal\\sve\\license.html")) returned 1 [0050.042] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e6cc) returned 1 [0050.042] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Legal\\TUR", nBufferLength=0x105, lpBuffer=0x31e1d4, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Legal\\TUR", lpFilePart=0x0) returned 0x39 [0050.042] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Legal\\TUR\\", nBufferLength=0x105, lpBuffer=0x31e1a8, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Legal\\TUR\\", lpFilePart=0x0) returned 0x3a [0050.042] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Legal\\TUR\\*", lpFindFileData=0x31e3f4 | out: lpFindFileData=0x31e3f4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x80a50d20, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x80a50d20, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x80a50d20, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x382000 [0050.043] FindNextFileW (in: hFindFile=0x382000, lpFindFileData=0x31e404 | out: lpFindFileData=0x31e404*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x80a50d20, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x80a50d20, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x80a50d20, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0050.043] FindNextFileW (in: hFindFile=0x382000, lpFindFileData=0x31e404 | out: lpFindFileData=0x31e404*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9b058100, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x80a50d20, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9b058100, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x41e, dwReserved0=0x0, dwReserved1=0x0, cFileName="eula.ini", cAlternateFileName="")) returned 1 [0050.043] FindNextFileW (in: hFindFile=0x382000, lpFindFileData=0x31e404 | out: lpFindFileData=0x31e404*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9b058100, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x80a50d20, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9b058100, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0xfa69, dwReserved0=0x0, dwReserved1=0x0, cFileName="license.html", cAlternateFileName="LICENS~1.HTM")) returned 1 [0050.043] FindNextFileW (in: hFindFile=0x382000, lpFindFileData=0x31e404 | out: lpFindFileData=0x31e404*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0050.043] FindClose (in: hFindFile=0x382000 | out: hFindFile=0x382000) returned 1 [0050.043] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e68c) returned 1 [0050.043] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e698) returned 1 [0050.044] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e6cc) returned 1 [0050.044] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Legal\\TUR", nBufferLength=0x105, lpBuffer=0x31e1d4, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Legal\\TUR", lpFilePart=0x0) returned 0x39 [0050.044] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Legal\\TUR\\", nBufferLength=0x105, lpBuffer=0x31e1a8, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Legal\\TUR\\", lpFilePart=0x0) returned 0x3a [0050.044] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Legal\\TUR\\*", lpFindFileData=0x31e3f4 | out: lpFindFileData=0x31e3f4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x80a50d20, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x80a50d20, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x80a50d20, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x382000 [0050.044] FindNextFileW (in: hFindFile=0x382000, lpFindFileData=0x31e404 | out: lpFindFileData=0x31e404*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x80a50d20, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x80a50d20, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x80a50d20, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0050.044] FindNextFileW (in: hFindFile=0x382000, lpFindFileData=0x31e404 | out: lpFindFileData=0x31e404*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9b058100, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x80a50d20, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9b058100, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x41e, dwReserved0=0x0, dwReserved1=0x0, cFileName="eula.ini", cAlternateFileName="")) returned 1 [0050.044] FindNextFileW (in: hFindFile=0x382000, lpFindFileData=0x31e404 | out: lpFindFileData=0x31e404*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9b058100, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x80a50d20, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9b058100, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0xfa69, dwReserved0=0x0, dwReserved1=0x0, cFileName="license.html", cAlternateFileName="LICENS~1.HTM")) returned 1 [0050.044] FindNextFileW (in: hFindFile=0x382000, lpFindFileData=0x31e404 | out: lpFindFileData=0x31e404*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9b058100, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x80a50d20, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9b058100, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0xfa69, dwReserved0=0x0, dwReserved1=0x0, cFileName="license.html", cAlternateFileName="LICENS~1.HTM")) returned 0 [0050.044] FindClose (in: hFindFile=0x382000 | out: hFindFile=0x382000) returned 1 [0050.045] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e68c) returned 1 [0050.045] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e698) returned 1 [0050.045] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Legal\\TUR\\license.html", nBufferLength=0x105, lpBuffer=0x31e0a4, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Legal\\TUR\\license.html", lpFilePart=0x0) returned 0x46 [0050.045] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e598) returned 1 [0050.045] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Legal\\TUR\\license.html" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\legal\\tur\\license.html"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x274 [0050.045] GetFileType (hFile=0x274) returned 0x1 [0050.045] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e594) returned 1 [0050.045] GetFileType (hFile=0x274) returned 0x1 [0050.045] GetFileSize (in: hFile=0x274, lpFileSizeHigh=0x31e6a0 | out: lpFileSizeHigh=0x31e6a0*=0x0) returned 0xfa69 [0050.045] ReadFile (in: hFile=0x274, lpBuffer=0x272aa7c, nNumberOfBytesToRead=0xfa69, lpNumberOfBytesRead=0x31e64c, lpOverlapped=0x0 | out: lpBuffer=0x272aa7c*, lpNumberOfBytesRead=0x31e64c*=0xfa69, lpOverlapped=0x0) returned 1 [0050.056] CloseHandle (hObject=0x274) returned 1 [0050.071] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Legal\\TUR\\license.html", nBufferLength=0x105, lpBuffer=0x31e090, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Legal\\TUR\\license.html", lpFilePart=0x0) returned 0x46 [0050.071] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e584) returned 1 [0050.071] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Legal\\TUR\\license.html" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\legal\\tur\\license.html"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x274 [0050.072] GetFileType (hFile=0x274) returned 0x1 [0050.072] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e580) returned 1 [0050.072] GetFileType (hFile=0x274) returned 0x1 [0050.072] WriteFile (in: hFile=0x274, lpBuffer=0x27a67c8*, nNumberOfBytesToWrite=0xfa70, lpNumberOfBytesWritten=0x31e640, lpOverlapped=0x0 | out: lpBuffer=0x27a67c8*, lpNumberOfBytesWritten=0x31e640*=0xfa70, lpOverlapped=0x0) returned 1 [0050.074] CloseHandle (hObject=0x274) returned 1 [0050.074] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Legal\\TUR\\license.html", nBufferLength=0x105, lpBuffer=0x31e1c4, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Legal\\TUR\\license.html", lpFilePart=0x0) returned 0x46 [0050.074] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Legal\\TUR\\license.html", nBufferLength=0x105, lpBuffer=0x31e1c4, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Legal\\TUR\\license.html", lpFilePart=0x0) returned 0x46 [0050.074] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e624) returned 1 [0050.074] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Legal\\TUR\\license.html" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\legal\\tur\\license.html"), fInfoLevelId=0x0, lpFileInformation=0x31e6a0 | out: lpFileInformation=0x31e6a0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9b058100, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x80a50d20, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x14ba160, ftLastWriteTime.dwHighDateTime=0x1d6eb7f, nFileSizeHigh=0x0, nFileSizeLow=0xfa70)) returned 1 [0050.074] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e620) returned 1 [0050.074] MoveFileW (lpExistingFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Legal\\TUR\\license.html" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\legal\\tur\\license.html"), lpNewFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Legal\\TUR\\license.html" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\legal\\tur\\license.html")) returned 1 [0050.075] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e6cc) returned 1 [0050.075] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Legal\\UKR", nBufferLength=0x105, lpBuffer=0x31e1d4, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Legal\\UKR", lpFilePart=0x0) returned 0x39 [0050.075] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Legal\\UKR\\", nBufferLength=0x105, lpBuffer=0x31e1a8, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Legal\\UKR\\", lpFilePart=0x0) returned 0x3a [0050.075] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Legal\\UKR\\*", lpFindFileData=0x31e3f4 | out: lpFindFileData=0x31e3f4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x80a50d20, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x80a50d20, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x80a50d20, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x381d40 [0050.075] FindNextFileW (in: hFindFile=0x381d40, lpFindFileData=0x31e404 | out: lpFindFileData=0x31e404*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x80a50d20, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x80a50d20, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x80a50d20, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0050.075] FindNextFileW (in: hFindFile=0x381d40, lpFindFileData=0x31e404 | out: lpFindFileData=0x31e404*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9c36ae00, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x80a50d20, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9c36ae00, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x4a0, dwReserved0=0x0, dwReserved1=0x0, cFileName="eula.ini", cAlternateFileName="")) returned 1 [0050.075] FindNextFileW (in: hFindFile=0x381d40, lpFindFileData=0x31e404 | out: lpFindFileData=0x31e404*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9c36ae00, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x80a50d20, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9c36ae00, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x3a6af, dwReserved0=0x0, dwReserved1=0x0, cFileName="license.html", cAlternateFileName="LICENS~1.HTM")) returned 1 [0050.076] FindNextFileW (in: hFindFile=0x381d40, lpFindFileData=0x31e404 | out: lpFindFileData=0x31e404*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0050.076] FindClose (in: hFindFile=0x381d40 | out: hFindFile=0x381d40) returned 1 [0050.076] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e68c) returned 1 [0050.076] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e698) returned 1 [0050.076] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e6cc) returned 1 [0050.076] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Legal\\UKR", nBufferLength=0x105, lpBuffer=0x31e1d4, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Legal\\UKR", lpFilePart=0x0) returned 0x39 [0050.076] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Legal\\UKR\\", nBufferLength=0x105, lpBuffer=0x31e1a8, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Legal\\UKR\\", lpFilePart=0x0) returned 0x3a [0050.076] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Legal\\UKR\\*", lpFindFileData=0x31e3f4 | out: lpFindFileData=0x31e3f4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x80a50d20, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x80a50d20, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x80a50d20, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x381d40 [0050.076] FindNextFileW (in: hFindFile=0x381d40, lpFindFileData=0x31e404 | out: lpFindFileData=0x31e404*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x80a50d20, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x80a50d20, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x80a50d20, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0050.076] FindNextFileW (in: hFindFile=0x381d40, lpFindFileData=0x31e404 | out: lpFindFileData=0x31e404*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9c36ae00, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x80a50d20, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9c36ae00, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x4a0, dwReserved0=0x0, dwReserved1=0x0, cFileName="eula.ini", cAlternateFileName="")) returned 1 [0050.076] FindNextFileW (in: hFindFile=0x381d40, lpFindFileData=0x31e404 | out: lpFindFileData=0x31e404*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9c36ae00, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x80a50d20, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9c36ae00, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x3a6af, dwReserved0=0x0, dwReserved1=0x0, cFileName="license.html", cAlternateFileName="LICENS~1.HTM")) returned 1 [0050.076] FindNextFileW (in: hFindFile=0x381d40, lpFindFileData=0x31e404 | out: lpFindFileData=0x31e404*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9c36ae00, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x80a50d20, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9c36ae00, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x3a6af, dwReserved0=0x0, dwReserved1=0x0, cFileName="license.html", cAlternateFileName="LICENS~1.HTM")) returned 0 [0050.077] FindClose (in: hFindFile=0x381d40 | out: hFindFile=0x381d40) returned 1 [0050.077] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e68c) returned 1 [0050.077] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e698) returned 1 [0050.077] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Legal\\UKR\\license.html", nBufferLength=0x105, lpBuffer=0x31e0a4, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Legal\\UKR\\license.html", lpFilePart=0x0) returned 0x46 [0050.077] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e598) returned 1 [0050.077] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Legal\\UKR\\license.html" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\legal\\ukr\\license.html"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x274 [0050.077] GetFileType (hFile=0x274) returned 0x1 [0050.077] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e594) returned 1 [0050.077] GetFileType (hFile=0x274) returned 0x1 [0050.077] GetFileSize (in: hFile=0x274, lpFileSizeHigh=0x31e6a0 | out: lpFileSizeHigh=0x31e6a0*=0x0) returned 0x3a6af [0050.081] ReadFile (in: hFile=0x274, lpBuffer=0x36194b0, nNumberOfBytesToRead=0x3a6af, lpNumberOfBytesRead=0x31e64c, lpOverlapped=0x0 | out: lpBuffer=0x36194b0*, lpNumberOfBytesRead=0x31e64c*=0x3a6af, lpOverlapped=0x0) returned 1 [0050.103] CloseHandle (hObject=0x274) returned 1 [0050.151] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Legal\\UKR\\license.html", nBufferLength=0x105, lpBuffer=0x31e090, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Legal\\UKR\\license.html", lpFilePart=0x0) returned 0x46 [0050.151] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e584) returned 1 [0050.151] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Legal\\UKR\\license.html" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\legal\\ukr\\license.html"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x274 [0050.153] GetFileType (hFile=0x274) returned 0x1 [0050.153] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e580) returned 1 [0050.153] GetFileType (hFile=0x274) returned 0x1 [0050.154] WriteFile (in: hFile=0x274, lpBuffer=0x373d660*, nNumberOfBytesToWrite=0x3a6b0, lpNumberOfBytesWritten=0x31e640, lpOverlapped=0x0 | out: lpBuffer=0x373d660*, lpNumberOfBytesWritten=0x31e640*=0x3a6b0, lpOverlapped=0x0) returned 1 [0050.157] CloseHandle (hObject=0x274) returned 1 [0050.157] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Legal\\UKR\\license.html", nBufferLength=0x105, lpBuffer=0x31e1c4, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Legal\\UKR\\license.html", lpFilePart=0x0) returned 0x46 [0050.157] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Legal\\UKR\\license.html", nBufferLength=0x105, lpBuffer=0x31e1c4, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Legal\\UKR\\license.html", lpFilePart=0x0) returned 0x46 [0050.158] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e624) returned 1 [0050.158] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Legal\\UKR\\license.html" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\legal\\ukr\\license.html"), fInfoLevelId=0x0, lpFileInformation=0x31e6a0 | out: lpFileInformation=0x31e6a0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9c36ae00, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x80a50d20, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x159e9a0, ftLastWriteTime.dwHighDateTime=0x1d6eb7f, nFileSizeHigh=0x0, nFileSizeLow=0x3a6b0)) returned 1 [0050.158] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e620) returned 1 [0050.158] MoveFileW (lpExistingFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Legal\\UKR\\license.html" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\legal\\ukr\\license.html"), lpNewFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Legal\\UKR\\license.html" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\legal\\ukr\\license.html")) returned 1 [0050.158] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e744) returned 1 [0050.158] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale", nBufferLength=0x105, lpBuffer=0x31e24c, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale", lpFilePart=0x0) returned 0x36 [0050.158] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\", nBufferLength=0x105, lpBuffer=0x31e220, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\", lpFilePart=0x0) returned 0x37 [0050.158] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\*", lpFindFileData=0x31e46c | out: lpFindFileData=0x31e46c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7d618a80, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x7d853f20, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x7d853f20, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x381d80 [0050.161] FindNextFileW (in: hFindFile=0x381d80, lpFindFileData=0x31e47c | out: lpFindFileData=0x31e47c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7d618a80, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x7d853f20, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x7d853f20, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0050.161] FindNextFileW (in: hFindFile=0x381d80, lpFindFileData=0x31e47c | out: lpFindFileData=0x31e47c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7d853f20, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x833608a0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x833608a0, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="ca_ES", cAlternateFileName="")) returned 1 [0050.161] FindNextFileW (in: hFindFile=0x381d80, lpFindFileData=0x31e47c | out: lpFindFileData=0x31e47c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7d7bb9a0, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x832ee480, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x832ee480, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="cs_CZ", cAlternateFileName="")) returned 1 [0050.161] FindNextFileW (in: hFindFile=0x381d80, lpFindFileData=0x31e47c | out: lpFindFileData=0x31e47c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7d723420, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x82fce7a0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x82fce7a0, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="da_DK", cAlternateFileName="")) returned 1 [0050.161] FindNextFileW (in: hFindFile=0x381d80, lpFindFileData=0x31e47c | out: lpFindFileData=0x31e47c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7d723420, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x82f5c380, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x82f5c380, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="de_DE", cAlternateFileName="")) returned 1 [0050.162] FindNextFileW (in: hFindFile=0x381d80, lpFindFileData=0x31e47c | out: lpFindFileData=0x31e47c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7d63ebe0, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x82ec3e00, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x82ec3e00, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="es_ES", cAlternateFileName="")) returned 1 [0050.162] FindNextFileW (in: hFindFile=0x381d80, lpFindFileData=0x31e47c | out: lpFindFileData=0x31e47c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7d853f20, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x833608a0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x833608a0, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="eu_ES", cAlternateFileName="")) returned 1 [0050.162] FindNextFileW (in: hFindFile=0x381d80, lpFindFileData=0x31e47c | out: lpFindFileData=0x31e47c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7d723420, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x82fce7a0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x82fce7a0, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="fi_FI", cAlternateFileName="")) returned 1 [0050.162] FindNextFileW (in: hFindFile=0x381d80, lpFindFileData=0x31e47c | out: lpFindFileData=0x31e47c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7d749580, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x82f824e0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x82f824e0, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="fr_FR", cAlternateFileName="")) returned 1 [0050.162] FindNextFileW (in: hFindFile=0x381d80, lpFindFileData=0x31e47c | out: lpFindFileData=0x31e47c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7d7bb9a0, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x832ee480, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x832ee480, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="hr_HR", cAlternateFileName="")) returned 1 [0050.162] FindNextFileW (in: hFindFile=0x381d80, lpFindFileData=0x31e47c | out: lpFindFileData=0x31e47c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7d7bb9a0, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x832c8320, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x832c8320, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="hu_HU", cAlternateFileName="")) returned 1 [0050.162] FindNextFileW (in: hFindFile=0x381d80, lpFindFileData=0x31e47c | out: lpFindFileData=0x31e47c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7d63ebe0, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x82f5c380, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x82f5c380, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="it_IT", cAlternateFileName="")) returned 1 [0050.163] FindNextFileW (in: hFindFile=0x381d80, lpFindFileData=0x31e47c | out: lpFindFileData=0x31e47c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7d749580, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x82f5c380, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x82f5c380, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="ja_JP", cAlternateFileName="")) returned 1 [0050.163] FindNextFileW (in: hFindFile=0x381d80, lpFindFileData=0x31e47c | out: lpFindFileData=0x31e47c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7d6d7160, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x82ee9f60, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x82ee9f60, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="ko_KR", cAlternateFileName="")) returned 1 [0050.163] FindNextFileW (in: hFindFile=0x381d80, lpFindFileData=0x31e47c | out: lpFindFileData=0x31e47c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7d749580, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x82ec3e00, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x82ec3e00, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="nb_NO", cAlternateFileName="")) returned 1 [0050.163] FindNextFileW (in: hFindFile=0x381d80, lpFindFileData=0x31e47c | out: lpFindFileData=0x31e47c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7d795840, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x82ee9f60, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x82ee9f60, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="nl_NL", cAlternateFileName="")) returned 1 [0050.163] FindNextFileW (in: hFindFile=0x381d80, lpFindFileData=0x31e47c | out: lpFindFileData=0x31e47c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7d7bb9a0, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x832c8320, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x832c8320, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="pl_PL", cAlternateFileName="")) returned 1 [0050.163] FindNextFileW (in: hFindFile=0x381d80, lpFindFileData=0x31e47c | out: lpFindFileData=0x31e47c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7d749580, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x82ec3e00, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x82ec3e00, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="pt_BR", cAlternateFileName="")) returned 1 [0050.163] FindNextFileW (in: hFindFile=0x381d80, lpFindFileData=0x31e47c | out: lpFindFileData=0x31e47c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7d7bb9a0, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x832c8320, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x832c8320, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="ro_RO", cAlternateFileName="")) returned 1 [0050.164] FindNextFileW (in: hFindFile=0x381d80, lpFindFileData=0x31e47c | out: lpFindFileData=0x31e47c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7d7bb9a0, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x832c8320, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x832c8320, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="ru_RU", cAlternateFileName="")) returned 1 [0050.164] FindNextFileW (in: hFindFile=0x381d80, lpFindFileData=0x31e47c | out: lpFindFileData=0x31e47c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7d7bb9a0, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x832c8320, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x832c8320, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="sk_SK", cAlternateFileName="")) returned 1 [0050.164] FindNextFileW (in: hFindFile=0x381d80, lpFindFileData=0x31e47c | out: lpFindFileData=0x31e47c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7d7bb9a0, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x832a21c0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x832a21c0, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="sl_SI", cAlternateFileName="")) returned 1 [0050.164] FindNextFileW (in: hFindFile=0x381d80, lpFindFileData=0x31e47c | out: lpFindFileData=0x31e47c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7d749580, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x82ec3e00, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x82ec3e00, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="sv_SE", cAlternateFileName="")) returned 1 [0050.164] FindNextFileW (in: hFindFile=0x381d80, lpFindFileData=0x31e47c | out: lpFindFileData=0x31e47c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7d795840, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x832a21c0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x832a21c0, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="tr_TR", cAlternateFileName="")) returned 1 [0050.164] FindNextFileW (in: hFindFile=0x381d80, lpFindFileData=0x31e47c | out: lpFindFileData=0x31e47c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7d795840, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x832a21c0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x832a21c0, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="uk_UA", cAlternateFileName="")) returned 1 [0050.164] FindNextFileW (in: hFindFile=0x381d80, lpFindFileData=0x31e47c | out: lpFindFileData=0x31e47c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7d6d7160, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x82fce7a0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x82fce7a0, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="zh_CN", cAlternateFileName="")) returned 1 [0050.165] FindNextFileW (in: hFindFile=0x381d80, lpFindFileData=0x31e47c | out: lpFindFileData=0x31e47c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7d618a80, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x82fce7a0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x82fce7a0, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="zh_TW", cAlternateFileName="")) returned 1 [0050.165] FindNextFileW (in: hFindFile=0x381d80, lpFindFileData=0x31e47c | out: lpFindFileData=0x31e47c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7d618a80, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x82fce7a0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x82fce7a0, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="zh_TW", cAlternateFileName="")) returned 0 [0050.165] FindClose (in: hFindFile=0x381d80 | out: hFindFile=0x381d80) returned 1 [0050.165] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e704) returned 1 [0050.166] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e710) returned 1 [0050.166] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e744) returned 1 [0050.166] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale", nBufferLength=0x105, lpBuffer=0x31e24c, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale", lpFilePart=0x0) returned 0x36 [0050.166] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\", nBufferLength=0x105, lpBuffer=0x31e220, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\", lpFilePart=0x0) returned 0x37 [0050.166] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\*", lpFindFileData=0x31e46c | out: lpFindFileData=0x31e46c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7d618a80, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x7d853f20, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x7d853f20, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x381d80 [0050.167] FindNextFileW (in: hFindFile=0x381d80, lpFindFileData=0x31e47c | out: lpFindFileData=0x31e47c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7d618a80, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x7d853f20, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x7d853f20, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0050.167] FindNextFileW (in: hFindFile=0x381d80, lpFindFileData=0x31e47c | out: lpFindFileData=0x31e47c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7d853f20, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x833608a0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x833608a0, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="ca_ES", cAlternateFileName="")) returned 1 [0050.167] FindNextFileW (in: hFindFile=0x381d80, lpFindFileData=0x31e47c | out: lpFindFileData=0x31e47c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7d7bb9a0, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x832ee480, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x832ee480, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="cs_CZ", cAlternateFileName="")) returned 1 [0050.167] FindNextFileW (in: hFindFile=0x381d80, lpFindFileData=0x31e47c | out: lpFindFileData=0x31e47c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7d723420, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x82fce7a0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x82fce7a0, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="da_DK", cAlternateFileName="")) returned 1 [0050.167] FindNextFileW (in: hFindFile=0x381d80, lpFindFileData=0x31e47c | out: lpFindFileData=0x31e47c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7d723420, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x82f5c380, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x82f5c380, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="de_DE", cAlternateFileName="")) returned 1 [0050.167] FindNextFileW (in: hFindFile=0x381d80, lpFindFileData=0x31e47c | out: lpFindFileData=0x31e47c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7d63ebe0, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x82ec3e00, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x82ec3e00, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="es_ES", cAlternateFileName="")) returned 1 [0050.167] FindNextFileW (in: hFindFile=0x381d80, lpFindFileData=0x31e47c | out: lpFindFileData=0x31e47c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7d853f20, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x833608a0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x833608a0, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="eu_ES", cAlternateFileName="")) returned 1 [0050.167] FindNextFileW (in: hFindFile=0x381d80, lpFindFileData=0x31e47c | out: lpFindFileData=0x31e47c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7d723420, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x82fce7a0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x82fce7a0, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="fi_FI", cAlternateFileName="")) returned 1 [0050.167] FindNextFileW (in: hFindFile=0x381d80, lpFindFileData=0x31e47c | out: lpFindFileData=0x31e47c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7d749580, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x82f824e0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x82f824e0, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="fr_FR", cAlternateFileName="")) returned 1 [0050.168] FindNextFileW (in: hFindFile=0x381d80, lpFindFileData=0x31e47c | out: lpFindFileData=0x31e47c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7d7bb9a0, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x832ee480, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x832ee480, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="hr_HR", cAlternateFileName="")) returned 1 [0050.168] FindNextFileW (in: hFindFile=0x381d80, lpFindFileData=0x31e47c | out: lpFindFileData=0x31e47c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7d7bb9a0, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x832c8320, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x832c8320, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="hu_HU", cAlternateFileName="")) returned 1 [0050.168] FindNextFileW (in: hFindFile=0x381d80, lpFindFileData=0x31e47c | out: lpFindFileData=0x31e47c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7d63ebe0, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x82f5c380, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x82f5c380, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="it_IT", cAlternateFileName="")) returned 1 [0050.168] FindNextFileW (in: hFindFile=0x381d80, lpFindFileData=0x31e47c | out: lpFindFileData=0x31e47c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7d749580, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x82f5c380, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x82f5c380, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="ja_JP", cAlternateFileName="")) returned 1 [0050.168] FindNextFileW (in: hFindFile=0x381d80, lpFindFileData=0x31e47c | out: lpFindFileData=0x31e47c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7d6d7160, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x82ee9f60, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x82ee9f60, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="ko_KR", cAlternateFileName="")) returned 1 [0050.168] FindNextFileW (in: hFindFile=0x381d80, lpFindFileData=0x31e47c | out: lpFindFileData=0x31e47c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7d749580, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x82ec3e00, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x82ec3e00, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="nb_NO", cAlternateFileName="")) returned 1 [0050.168] FindNextFileW (in: hFindFile=0x381d80, lpFindFileData=0x31e47c | out: lpFindFileData=0x31e47c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7d795840, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x82ee9f60, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x82ee9f60, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="nl_NL", cAlternateFileName="")) returned 1 [0050.168] FindNextFileW (in: hFindFile=0x381d80, lpFindFileData=0x31e47c | out: lpFindFileData=0x31e47c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7d7bb9a0, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x832c8320, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x832c8320, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="pl_PL", cAlternateFileName="")) returned 1 [0050.168] FindNextFileW (in: hFindFile=0x381d80, lpFindFileData=0x31e47c | out: lpFindFileData=0x31e47c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7d749580, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x82ec3e00, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x82ec3e00, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="pt_BR", cAlternateFileName="")) returned 1 [0050.169] FindNextFileW (in: hFindFile=0x381d80, lpFindFileData=0x31e47c | out: lpFindFileData=0x31e47c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7d7bb9a0, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x832c8320, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x832c8320, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="ro_RO", cAlternateFileName="")) returned 1 [0050.169] FindNextFileW (in: hFindFile=0x381d80, lpFindFileData=0x31e47c | out: lpFindFileData=0x31e47c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7d7bb9a0, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x832c8320, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x832c8320, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="ru_RU", cAlternateFileName="")) returned 1 [0050.169] FindNextFileW (in: hFindFile=0x381d80, lpFindFileData=0x31e47c | out: lpFindFileData=0x31e47c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7d7bb9a0, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x832c8320, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x832c8320, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="sk_SK", cAlternateFileName="")) returned 1 [0050.169] FindNextFileW (in: hFindFile=0x381d80, lpFindFileData=0x31e47c | out: lpFindFileData=0x31e47c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7d7bb9a0, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x832a21c0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x832a21c0, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="sl_SI", cAlternateFileName="")) returned 1 [0050.169] FindNextFileW (in: hFindFile=0x381d80, lpFindFileData=0x31e47c | out: lpFindFileData=0x31e47c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7d749580, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x82ec3e00, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x82ec3e00, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="sv_SE", cAlternateFileName="")) returned 1 [0050.169] FindNextFileW (in: hFindFile=0x381d80, lpFindFileData=0x31e47c | out: lpFindFileData=0x31e47c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7d795840, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x832a21c0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x832a21c0, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="tr_TR", cAlternateFileName="")) returned 1 [0050.169] FindNextFileW (in: hFindFile=0x381d80, lpFindFileData=0x31e47c | out: lpFindFileData=0x31e47c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7d795840, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x832a21c0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x832a21c0, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="uk_UA", cAlternateFileName="")) returned 1 [0050.169] FindNextFileW (in: hFindFile=0x381d80, lpFindFileData=0x31e47c | out: lpFindFileData=0x31e47c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7d6d7160, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x82fce7a0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x82fce7a0, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="zh_CN", cAlternateFileName="")) returned 1 [0050.169] FindNextFileW (in: hFindFile=0x381d80, lpFindFileData=0x31e47c | out: lpFindFileData=0x31e47c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7d618a80, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x82fce7a0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x82fce7a0, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="zh_TW", cAlternateFileName="")) returned 1 [0050.169] FindNextFileW (in: hFindFile=0x381d80, lpFindFileData=0x31e47c | out: lpFindFileData=0x31e47c*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0050.170] FindClose (in: hFindFile=0x381d80 | out: hFindFile=0x381d80) returned 1 [0050.170] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e704) returned 1 [0050.170] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e710) returned 1 [0050.170] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e6cc) returned 1 [0050.170] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\ca_ES", nBufferLength=0x105, lpBuffer=0x31e1d4, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\ca_ES", lpFilePart=0x0) returned 0x3c [0050.170] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\ca_ES\\", nBufferLength=0x105, lpBuffer=0x31e1a8, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\ca_ES\\", lpFilePart=0x0) returned 0x3d [0050.171] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\ca_ES\\*", lpFindFileData=0x31e3f4 | out: lpFindFileData=0x31e3f4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7d853f20, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x833608a0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x833608a0, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x381d80 [0050.174] FindNextFileW (in: hFindFile=0x381d80, lpFindFileData=0x31e404 | out: lpFindFileData=0x31e404*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7d853f20, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x833608a0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x833608a0, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0050.174] FindNextFileW (in: hFindFile=0x381d80, lpFindFileData=0x31e404 | out: lpFindFileData=0x31e404*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9c36ae00, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7dbbfec0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9c36ae00, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0xb000, dwReserved0=0x0, dwReserved1=0x0, cFileName="accessibility.CAT", cAlternateFileName="ACCESS~1.CAT")) returned 1 [0050.175] FindNextFileW (in: hFindFile=0x381d80, lpFindFileData=0x31e404 | out: lpFindFileData=0x31e404*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9c36ae00, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x833145e0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9c36ae00, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x6dc00, dwReserved0=0x0, dwReserved1=0x0, cFileName="Acroform.CAT", cAlternateFileName="")) returned 1 [0050.175] FindNextFileW (in: hFindFile=0x381d80, lpFindFileData=0x31e404 | out: lpFindFileData=0x31e404*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9c36ae00, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x81efec40, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9c36ae00, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x1a00, dwReserved0=0x0, dwReserved1=0x0, cFileName="AdobeCollabSync.CAT", cAlternateFileName="ADOBEC~1.CAT")) returned 1 [0050.175] FindNextFileW (in: hFindFile=0x381d80, lpFindFileData=0x31e404 | out: lpFindFileData=0x31e404*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9c36ae00, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x833608a0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9c36ae00, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x7d400, dwReserved0=0x0, dwReserved1=0x0, cFileName="Annots.CAT", cAlternateFileName="")) returned 1 [0050.175] FindNextFileW (in: hFindFile=0x381d80, lpFindFileData=0x31e404 | out: lpFindFileData=0x31e404*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9c36ae00, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x820558a0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9c36ae00, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x3800, dwReserved0=0x0, dwReserved1=0x0, cFileName="BRdlang32.CAT", cAlternateFileName="BRDLAN~1.CAT")) returned 1 [0050.175] FindNextFileW (in: hFindFile=0x381d80, lpFindFileData=0x31e404 | out: lpFindFileData=0x31e404*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9c36ae00, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x833145e0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9c36ae00, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x1fe00, dwReserved0=0x0, dwReserved1=0x0, cFileName="Checkers.CAT", cAlternateFileName="")) returned 1 [0050.175] FindNextFileW (in: hFindFile=0x381d80, lpFindFileData=0x31e404 | out: lpFindFileData=0x31e404*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9c36ae00, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x833145e0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9c36ae00, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x20400, dwReserved0=0x0, dwReserved1=0x0, cFileName="DigSig.CAT", cAlternateFileName="")) returned 1 [0050.175] FindNextFileW (in: hFindFile=0x381d80, lpFindFileData=0x31e404 | out: lpFindFileData=0x31e404*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9c36ae00, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x833145e0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9c36ae00, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x4c00, dwReserved0=0x0, dwReserved1=0x0, cFileName="DVA.CAT", cAlternateFileName="")) returned 1 [0050.175] FindNextFileW (in: hFindFile=0x381d80, lpFindFileData=0x31e404 | out: lpFindFileData=0x31e404*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9c36ae00, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x833608a0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9c36ae00, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x1a00, dwReserved0=0x0, dwReserved1=0x0, cFileName="eBook.CAT", cAlternateFileName="")) returned 1 [0050.176] FindNextFileW (in: hFindFile=0x381d80, lpFindFileData=0x31e404 | out: lpFindFileData=0x31e404*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9c36ae00, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x833145e0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9c36ae00, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0xa400, dwReserved0=0x0, dwReserved1=0x0, cFileName="EScript.CAT", cAlternateFileName="")) returned 1 [0050.176] FindNextFileW (in: hFindFile=0x381d80, lpFindFileData=0x31e404 | out: lpFindFileData=0x31e404*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9c36ae00, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x833145e0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9c36ae00, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0xe00, dwReserved0=0x0, dwReserved1=0x0, cFileName="IA32.CAT", cAlternateFileName="")) returned 1 [0050.176] FindNextFileW (in: hFindFile=0x381d80, lpFindFileData=0x31e404 | out: lpFindFileData=0x31e404*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9c36ae00, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7db99d60, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9c36ae00, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x13600, dwReserved0=0x0, dwReserved1=0x0, cFileName="makeaccessible.CAT", cAlternateFileName="MAKEAC~1.CAT")) returned 1 [0050.176] FindNextFileW (in: hFindFile=0x381d80, lpFindFileData=0x31e404 | out: lpFindFileData=0x31e404*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9c36ae00, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7d853f20, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9c36ae00, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x14200, dwReserved0=0x0, dwReserved1=0x0, cFileName="Multimedia.CAT", cAlternateFileName="MULTIM~1.CAT")) returned 1 [0050.176] FindNextFileW (in: hFindFile=0x381d80, lpFindFileData=0x31e404 | out: lpFindFileData=0x31e404*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9c36ae00, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7db99d60, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9c36ae00, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x2e00, dwReserved0=0x0, dwReserved1=0x0, cFileName="pddom.CAT", cAlternateFileName="")) returned 1 [0050.176] FindNextFileW (in: hFindFile=0x381d80, lpFindFileData=0x31e404 | out: lpFindFileData=0x31e404*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9c36ae00, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x832ee480, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9c36ae00, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x85c00, dwReserved0=0x0, dwReserved1=0x0, cFileName="PPKLite.CAT", cAlternateFileName="")) returned 1 [0050.176] FindNextFileW (in: hFindFile=0x381d80, lpFindFileData=0x31e404 | out: lpFindFileData=0x31e404*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9c36ae00, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x81ed8ae0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9c36ae00, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x158e00, dwReserved0=0x0, dwReserved1=0x0, cFileName="RdLang32.CAT", cAlternateFileName="")) returned 1 [0050.176] FindNextFileW (in: hFindFile=0x381d80, lpFindFileData=0x31e404 | out: lpFindFileData=0x31e404*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9c36ae00, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x8333a740, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9c36ae00, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x2c00, dwReserved0=0x0, dwReserved1=0x0, cFileName="ReadOutLoud.CAT", cAlternateFileName="READOU~1.CAT")) returned 1 [0050.176] FindNextFileW (in: hFindFile=0x381d80, lpFindFileData=0x31e404 | out: lpFindFileData=0x31e404*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9c36ae00, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7db99d60, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9c36ae00, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x1200, dwReserved0=0x0, dwReserved1=0x0, cFileName="reflow.CAT", cAlternateFileName="")) returned 1 [0050.177] FindNextFileW (in: hFindFile=0x381d80, lpFindFileData=0x31e404 | out: lpFindFileData=0x31e404*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9c36ae00, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7db99d60, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9c36ae00, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x4c00, dwReserved0=0x0, dwReserved1=0x0, cFileName="SaveAsRTF.CAT", cAlternateFileName="SAVEAS~1.CAT")) returned 1 [0050.177] FindNextFileW (in: hFindFile=0x381d80, lpFindFileData=0x31e404 | out: lpFindFileData=0x31e404*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9c36ae00, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x832ee480, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9c36ae00, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x6000, dwReserved0=0x0, dwReserved1=0x0, cFileName="Search.CAT", cAlternateFileName="")) returned 1 [0050.177] FindNextFileW (in: hFindFile=0x381d80, lpFindFileData=0x31e404 | out: lpFindFileData=0x31e404*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9c36ae00, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x833145e0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9c36ae00, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x4200, dwReserved0=0x0, dwReserved1=0x0, cFileName="SendMail.CAT", cAlternateFileName="")) returned 1 [0050.177] FindNextFileW (in: hFindFile=0x381d80, lpFindFileData=0x31e404 | out: lpFindFileData=0x31e404*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x81f24da0, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x81f971c0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x81f971c0, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Services", cAlternateFileName="")) returned 1 [0050.177] FindNextFileW (in: hFindFile=0x381d80, lpFindFileData=0x31e404 | out: lpFindFileData=0x31e404*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9c36ae00, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7f498460, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9c36ae00, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x2a00, dwReserved0=0x0, dwReserved1=0x0, cFileName="Spelling.CAT", cAlternateFileName="")) returned 1 [0050.177] FindNextFileW (in: hFindFile=0x381d80, lpFindFileData=0x31e404 | out: lpFindFileData=0x31e404*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9c36ae00, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7f5309e0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9c36ae00, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x2a00, dwReserved0=0x0, dwReserved1=0x0, cFileName="updater.CAT", cAlternateFileName="")) returned 1 [0050.177] FindNextFileW (in: hFindFile=0x381d80, lpFindFileData=0x31e404 | out: lpFindFileData=0x31e404*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9c36ae00, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x832ee480, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9c36ae00, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x7200, dwReserved0=0x0, dwReserved1=0x0, cFileName="WebLink.CAT", cAlternateFileName="")) returned 1 [0050.177] FindNextFileW (in: hFindFile=0x381d80, lpFindFileData=0x31e404 | out: lpFindFileData=0x31e404*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0050.177] FindClose (in: hFindFile=0x381d80 | out: hFindFile=0x381d80) returned 1 [0050.178] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e68c) returned 1 [0050.178] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e698) returned 1 [0050.178] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e6cc) returned 1 [0050.178] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\ca_ES", nBufferLength=0x105, lpBuffer=0x31e1d4, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\ca_ES", lpFilePart=0x0) returned 0x3c [0050.178] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\ca_ES\\", nBufferLength=0x105, lpBuffer=0x31e1a8, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\ca_ES\\", lpFilePart=0x0) returned 0x3d [0050.178] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\ca_ES\\*", lpFindFileData=0x31e3f4 | out: lpFindFileData=0x31e3f4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7d853f20, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x833608a0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x833608a0, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x381d80 [0050.179] FindNextFileW (in: hFindFile=0x381d80, lpFindFileData=0x31e404 | out: lpFindFileData=0x31e404*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7d853f20, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x833608a0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x833608a0, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0050.179] FindNextFileW (in: hFindFile=0x381d80, lpFindFileData=0x31e404 | out: lpFindFileData=0x31e404*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9c36ae00, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7dbbfec0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9c36ae00, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0xb000, dwReserved0=0x0, dwReserved1=0x0, cFileName="accessibility.CAT", cAlternateFileName="ACCESS~1.CAT")) returned 1 [0050.179] FindNextFileW (in: hFindFile=0x381d80, lpFindFileData=0x31e404 | out: lpFindFileData=0x31e404*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9c36ae00, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x833145e0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9c36ae00, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x6dc00, dwReserved0=0x0, dwReserved1=0x0, cFileName="Acroform.CAT", cAlternateFileName="")) returned 1 [0050.180] FindNextFileW (in: hFindFile=0x381d80, lpFindFileData=0x31e404 | out: lpFindFileData=0x31e404*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9c36ae00, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x81efec40, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9c36ae00, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x1a00, dwReserved0=0x0, dwReserved1=0x0, cFileName="AdobeCollabSync.CAT", cAlternateFileName="ADOBEC~1.CAT")) returned 1 [0050.180] FindNextFileW (in: hFindFile=0x381d80, lpFindFileData=0x31e404 | out: lpFindFileData=0x31e404*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9c36ae00, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x833608a0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9c36ae00, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x7d400, dwReserved0=0x0, dwReserved1=0x0, cFileName="Annots.CAT", cAlternateFileName="")) returned 1 [0050.180] FindNextFileW (in: hFindFile=0x381d80, lpFindFileData=0x31e404 | out: lpFindFileData=0x31e404*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9c36ae00, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x820558a0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9c36ae00, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x3800, dwReserved0=0x0, dwReserved1=0x0, cFileName="BRdlang32.CAT", cAlternateFileName="BRDLAN~1.CAT")) returned 1 [0050.180] FindNextFileW (in: hFindFile=0x381d80, lpFindFileData=0x31e404 | out: lpFindFileData=0x31e404*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9c36ae00, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x833145e0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9c36ae00, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x1fe00, dwReserved0=0x0, dwReserved1=0x0, cFileName="Checkers.CAT", cAlternateFileName="")) returned 1 [0050.180] FindNextFileW (in: hFindFile=0x381d80, lpFindFileData=0x31e404 | out: lpFindFileData=0x31e404*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9c36ae00, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x833145e0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9c36ae00, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x20400, dwReserved0=0x0, dwReserved1=0x0, cFileName="DigSig.CAT", cAlternateFileName="")) returned 1 [0050.180] FindNextFileW (in: hFindFile=0x381d80, lpFindFileData=0x31e404 | out: lpFindFileData=0x31e404*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9c36ae00, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x833145e0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9c36ae00, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x4c00, dwReserved0=0x0, dwReserved1=0x0, cFileName="DVA.CAT", cAlternateFileName="")) returned 1 [0050.180] FindNextFileW (in: hFindFile=0x381d80, lpFindFileData=0x31e404 | out: lpFindFileData=0x31e404*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9c36ae00, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x833608a0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9c36ae00, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x1a00, dwReserved0=0x0, dwReserved1=0x0, cFileName="eBook.CAT", cAlternateFileName="")) returned 1 [0050.180] FindNextFileW (in: hFindFile=0x381d80, lpFindFileData=0x31e404 | out: lpFindFileData=0x31e404*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9c36ae00, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x833145e0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9c36ae00, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0xa400, dwReserved0=0x0, dwReserved1=0x0, cFileName="EScript.CAT", cAlternateFileName="")) returned 1 [0050.180] FindNextFileW (in: hFindFile=0x381d80, lpFindFileData=0x31e404 | out: lpFindFileData=0x31e404*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9c36ae00, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x833145e0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9c36ae00, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0xe00, dwReserved0=0x0, dwReserved1=0x0, cFileName="IA32.CAT", cAlternateFileName="")) returned 1 [0050.180] FindNextFileW (in: hFindFile=0x381d80, lpFindFileData=0x31e404 | out: lpFindFileData=0x31e404*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9c36ae00, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7db99d60, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9c36ae00, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x13600, dwReserved0=0x0, dwReserved1=0x0, cFileName="makeaccessible.CAT", cAlternateFileName="MAKEAC~1.CAT")) returned 1 [0050.181] FindNextFileW (in: hFindFile=0x381d80, lpFindFileData=0x31e404 | out: lpFindFileData=0x31e404*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9c36ae00, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7d853f20, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9c36ae00, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x14200, dwReserved0=0x0, dwReserved1=0x0, cFileName="Multimedia.CAT", cAlternateFileName="MULTIM~1.CAT")) returned 1 [0050.181] FindNextFileW (in: hFindFile=0x381d80, lpFindFileData=0x31e404 | out: lpFindFileData=0x31e404*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9c36ae00, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7db99d60, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9c36ae00, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x2e00, dwReserved0=0x0, dwReserved1=0x0, cFileName="pddom.CAT", cAlternateFileName="")) returned 1 [0050.181] FindNextFileW (in: hFindFile=0x381d80, lpFindFileData=0x31e404 | out: lpFindFileData=0x31e404*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9c36ae00, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x832ee480, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9c36ae00, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x85c00, dwReserved0=0x0, dwReserved1=0x0, cFileName="PPKLite.CAT", cAlternateFileName="")) returned 1 [0050.181] FindNextFileW (in: hFindFile=0x381d80, lpFindFileData=0x31e404 | out: lpFindFileData=0x31e404*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9c36ae00, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x81ed8ae0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9c36ae00, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x158e00, dwReserved0=0x0, dwReserved1=0x0, cFileName="RdLang32.CAT", cAlternateFileName="")) returned 1 [0050.181] FindNextFileW (in: hFindFile=0x381d80, lpFindFileData=0x31e404 | out: lpFindFileData=0x31e404*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9c36ae00, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x8333a740, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9c36ae00, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x2c00, dwReserved0=0x0, dwReserved1=0x0, cFileName="ReadOutLoud.CAT", cAlternateFileName="READOU~1.CAT")) returned 1 [0050.181] FindNextFileW (in: hFindFile=0x381d80, lpFindFileData=0x31e404 | out: lpFindFileData=0x31e404*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9c36ae00, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7db99d60, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9c36ae00, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x1200, dwReserved0=0x0, dwReserved1=0x0, cFileName="reflow.CAT", cAlternateFileName="")) returned 1 [0050.181] FindNextFileW (in: hFindFile=0x381d80, lpFindFileData=0x31e404 | out: lpFindFileData=0x31e404*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9c36ae00, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7db99d60, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9c36ae00, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x4c00, dwReserved0=0x0, dwReserved1=0x0, cFileName="SaveAsRTF.CAT", cAlternateFileName="SAVEAS~1.CAT")) returned 1 [0050.181] FindNextFileW (in: hFindFile=0x381d80, lpFindFileData=0x31e404 | out: lpFindFileData=0x31e404*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9c36ae00, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x832ee480, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9c36ae00, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x6000, dwReserved0=0x0, dwReserved1=0x0, cFileName="Search.CAT", cAlternateFileName="")) returned 1 [0050.181] FindNextFileW (in: hFindFile=0x381d80, lpFindFileData=0x31e404 | out: lpFindFileData=0x31e404*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9c36ae00, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x833145e0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9c36ae00, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x4200, dwReserved0=0x0, dwReserved1=0x0, cFileName="SendMail.CAT", cAlternateFileName="")) returned 1 [0050.182] FindNextFileW (in: hFindFile=0x381d80, lpFindFileData=0x31e404 | out: lpFindFileData=0x31e404*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x81f24da0, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x81f971c0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x81f971c0, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Services", cAlternateFileName="")) returned 1 [0050.182] FindNextFileW (in: hFindFile=0x381d80, lpFindFileData=0x31e404 | out: lpFindFileData=0x31e404*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9c36ae00, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7f498460, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9c36ae00, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x2a00, dwReserved0=0x0, dwReserved1=0x0, cFileName="Spelling.CAT", cAlternateFileName="")) returned 1 [0050.182] FindNextFileW (in: hFindFile=0x381d80, lpFindFileData=0x31e404 | out: lpFindFileData=0x31e404*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9c36ae00, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7f5309e0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9c36ae00, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x2a00, dwReserved0=0x0, dwReserved1=0x0, cFileName="updater.CAT", cAlternateFileName="")) returned 1 [0050.182] FindNextFileW (in: hFindFile=0x381d80, lpFindFileData=0x31e404 | out: lpFindFileData=0x31e404*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9c36ae00, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x832ee480, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9c36ae00, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x7200, dwReserved0=0x0, dwReserved1=0x0, cFileName="WebLink.CAT", cAlternateFileName="")) returned 1 [0050.182] FindNextFileW (in: hFindFile=0x381d80, lpFindFileData=0x31e404 | out: lpFindFileData=0x31e404*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9c36ae00, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x832ee480, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9c36ae00, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x7200, dwReserved0=0x0, dwReserved1=0x0, cFileName="WebLink.CAT", cAlternateFileName="")) returned 0 [0050.182] FindClose (in: hFindFile=0x381d80 | out: hFindFile=0x381d80) returned 1 [0050.183] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e68c) returned 1 [0050.183] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e698) returned 1 [0050.183] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e654) returned 1 [0050.183] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\ca_ES\\Services", nBufferLength=0x105, lpBuffer=0x31e15c, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\ca_ES\\Services", lpFilePart=0x0) returned 0x45 [0050.183] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\ca_ES\\Services\\", nBufferLength=0x105, lpBuffer=0x31e130, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\ca_ES\\Services\\", lpFilePart=0x0) returned 0x46 [0050.183] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\ca_ES\\Services\\*", lpFindFileData=0x31e37c | out: lpFindFileData=0x31e37c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x81f24da0, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x81f971c0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x81f971c0, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x381d80 [0050.185] FindNextFileW (in: hFindFile=0x381d80, lpFindFileData=0x31e38c | out: lpFindFileData=0x31e38c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x81f24da0, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x81f971c0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x81f971c0, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0050.185] FindNextFileW (in: hFindFile=0x381d80, lpFindFileData=0x31e38c | out: lpFindFileData=0x31e38c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9c36ae00, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x81f24da0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9c36ae00, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x9586, dwReserved0=0x0, dwReserved1=0x0, cFileName="DEXShare.asfx", cAlternateFileName="DEXSHA~1.ASF")) returned 1 [0050.185] FindNextFileW (in: hFindFile=0x381d80, lpFindFileData=0x31e38c | out: lpFindFileData=0x31e38c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9c36ae00, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x81f971c0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9c36ae00, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0xe8, dwReserved0=0x0, dwReserved1=0x0, cFileName="Services.asfx", cAlternateFileName="SERVIC~1.ASF")) returned 1 [0050.185] FindNextFileW (in: hFindFile=0x381d80, lpFindFileData=0x31e38c | out: lpFindFileData=0x31e38c*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0050.185] FindClose (in: hFindFile=0x381d80 | out: hFindFile=0x381d80) returned 1 [0050.185] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e614) returned 1 [0050.186] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e620) returned 1 [0050.186] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e654) returned 1 [0050.186] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\ca_ES\\Services", nBufferLength=0x105, lpBuffer=0x31e15c, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\ca_ES\\Services", lpFilePart=0x0) returned 0x45 [0050.186] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\ca_ES\\Services\\", nBufferLength=0x105, lpBuffer=0x31e130, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\ca_ES\\Services\\", lpFilePart=0x0) returned 0x46 [0050.186] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\ca_ES\\Services\\*", lpFindFileData=0x31e37c | out: lpFindFileData=0x31e37c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x81f24da0, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x81f971c0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x81f971c0, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x381d80 [0050.186] FindNextFileW (in: hFindFile=0x381d80, lpFindFileData=0x31e38c | out: lpFindFileData=0x31e38c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x81f24da0, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x81f971c0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x81f971c0, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0050.186] FindNextFileW (in: hFindFile=0x381d80, lpFindFileData=0x31e38c | out: lpFindFileData=0x31e38c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9c36ae00, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x81f24da0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9c36ae00, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x9586, dwReserved0=0x0, dwReserved1=0x0, cFileName="DEXShare.asfx", cAlternateFileName="DEXSHA~1.ASF")) returned 1 [0050.186] FindNextFileW (in: hFindFile=0x381d80, lpFindFileData=0x31e38c | out: lpFindFileData=0x31e38c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9c36ae00, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x81f971c0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9c36ae00, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0xe8, dwReserved0=0x0, dwReserved1=0x0, cFileName="Services.asfx", cAlternateFileName="SERVIC~1.ASF")) returned 1 [0050.186] FindNextFileW (in: hFindFile=0x381d80, lpFindFileData=0x31e38c | out: lpFindFileData=0x31e38c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9c36ae00, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x81f971c0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9c36ae00, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0xe8, dwReserved0=0x0, dwReserved1=0x0, cFileName="Services.asfx", cAlternateFileName="SERVIC~1.ASF")) returned 0 [0050.186] FindClose (in: hFindFile=0x381d80 | out: hFindFile=0x381d80) returned 1 [0050.186] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e614) returned 1 [0050.186] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e620) returned 1 [0050.187] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e6cc) returned 1 [0050.187] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\cs_CZ", nBufferLength=0x105, lpBuffer=0x31e1d4, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\cs_CZ", lpFilePart=0x0) returned 0x3c [0050.187] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\cs_CZ\\", nBufferLength=0x105, lpBuffer=0x31e1a8, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\cs_CZ\\", lpFilePart=0x0) returned 0x3d [0050.187] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\cs_CZ\\*", lpFindFileData=0x31e3f4 | out: lpFindFileData=0x31e3f4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7d7bb9a0, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x832ee480, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x832ee480, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x381d80 [0050.191] FindNextFileW (in: hFindFile=0x381d80, lpFindFileData=0x31e404 | out: lpFindFileData=0x31e404*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7d7bb9a0, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x832ee480, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x832ee480, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0050.191] FindNextFileW (in: hFindFile=0x381d80, lpFindFileData=0x31e404 | out: lpFindFileData=0x31e404*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x99d45400, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7db73c00, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x99d45400, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0xa800, dwReserved0=0x0, dwReserved1=0x0, cFileName="accessibility.CZE", cAlternateFileName="ACCESS~1.CZE")) returned 1 [0050.191] FindNextFileW (in: hFindFile=0x381d80, lpFindFileData=0x31e404 | out: lpFindFileData=0x31e404*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x99d45400, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x83209c40, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x99d45400, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x63e00, dwReserved0=0x0, dwReserved1=0x0, cFileName="Acroform.CZE", cAlternateFileName="")) returned 1 [0050.191] FindNextFileW (in: hFindFile=0x381d80, lpFindFileData=0x31e404 | out: lpFindFileData=0x31e404*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x99d45400, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x81d35bc0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x99d45400, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x1a00, dwReserved0=0x0, dwReserved1=0x0, cFileName="AdobeCollabSync.CZE", cAlternateFileName="ADOBEC~1.CZE")) returned 1 [0050.191] FindNextFileW (in: hFindFile=0x381d80, lpFindFileData=0x31e404 | out: lpFindFileData=0x31e404*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x99d45400, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x832ee480, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x99d45400, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x76c00, dwReserved0=0x0, dwReserved1=0x0, cFileName="Annots.CZE", cAlternateFileName="")) returned 1 [0050.192] FindNextFileW (in: hFindFile=0x381d80, lpFindFileData=0x31e404 | out: lpFindFileData=0x31e404*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x99d45400, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x820558a0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x99d45400, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x3200, dwReserved0=0x0, dwReserved1=0x0, cFileName="BRdlang32.CZE", cAlternateFileName="BRDLAN~1.CZE")) returned 1 [0050.192] FindNextFileW (in: hFindFile=0x381d80, lpFindFileData=0x31e404 | out: lpFindFileData=0x31e404*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x99d45400, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x83209c40, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x99d45400, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x1da00, dwReserved0=0x0, dwReserved1=0x0, cFileName="Checkers.CZE", cAlternateFileName="")) returned 1 [0050.192] FindNextFileW (in: hFindFile=0x381d80, lpFindFileData=0x31e404 | out: lpFindFileData=0x31e404*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x99d45400, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x83209c40, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x99d45400, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x1e000, dwReserved0=0x0, dwReserved1=0x0, cFileName="DigSig.CZE", cAlternateFileName="")) returned 1 [0050.192] FindNextFileW (in: hFindFile=0x381d80, lpFindFileData=0x31e404 | out: lpFindFileData=0x31e404*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x99d45400, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x83209c40, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x99d45400, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x4600, dwReserved0=0x0, dwReserved1=0x0, cFileName="DVA.CZE", cAlternateFileName="")) returned 1 [0050.192] FindNextFileW (in: hFindFile=0x381d80, lpFindFileData=0x31e404 | out: lpFindFileData=0x31e404*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x99d45400, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x8327c060, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x99d45400, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x1a00, dwReserved0=0x0, dwReserved1=0x0, cFileName="eBook.CZE", cAlternateFileName="")) returned 1 [0050.192] FindNextFileW (in: hFindFile=0x381d80, lpFindFileData=0x31e404 | out: lpFindFileData=0x31e404*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x99d45400, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x83209c40, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x99d45400, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x9c00, dwReserved0=0x0, dwReserved1=0x0, cFileName="EScript.CZE", cAlternateFileName="")) returned 1 [0050.192] FindNextFileW (in: hFindFile=0x381d80, lpFindFileData=0x31e404 | out: lpFindFileData=0x31e404*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x99d45400, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x83209c40, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x99d45400, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0xe00, dwReserved0=0x0, dwReserved1=0x0, cFileName="IA32.CZE", cAlternateFileName="")) returned 1 [0050.192] FindNextFileW (in: hFindFile=0x381d80, lpFindFileData=0x31e404 | out: lpFindFileData=0x31e404*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x99d45400, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7db4daa0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x99d45400, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x11a00, dwReserved0=0x0, dwReserved1=0x0, cFileName="makeaccessible.CZE", cAlternateFileName="MAKEAC~1.CZE")) returned 1 [0050.192] FindNextFileW (in: hFindFile=0x381d80, lpFindFileData=0x31e404 | out: lpFindFileData=0x31e404*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x99d45400, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7d7bb9a0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x99d45400, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x13200, dwReserved0=0x0, dwReserved1=0x0, cFileName="Multimedia.CZE", cAlternateFileName="MULTIM~1.CZE")) returned 1 [0050.192] FindNextFileW (in: hFindFile=0x381d80, lpFindFileData=0x31e404 | out: lpFindFileData=0x31e404*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x99d45400, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7db27940, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x99d45400, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x2a00, dwReserved0=0x0, dwReserved1=0x0, cFileName="pddom.CZE", cAlternateFileName="")) returned 1 [0050.192] FindNextFileW (in: hFindFile=0x381d80, lpFindFileData=0x31e404 | out: lpFindFileData=0x31e404*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x99d45400, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x83209c40, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x99d45400, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x7d000, dwReserved0=0x0, dwReserved1=0x0, cFileName="PPKLite.CZE", cAlternateFileName="")) returned 1 [0050.192] FindNextFileW (in: hFindFile=0x381d80, lpFindFileData=0x31e404 | out: lpFindFileData=0x31e404*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x99d45400, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x807c95c0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x99d45400, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x145000, dwReserved0=0x0, dwReserved1=0x0, cFileName="RdLang32.CZE", cAlternateFileName="")) returned 1 [0050.192] FindNextFileW (in: hFindFile=0x381d80, lpFindFileData=0x31e404 | out: lpFindFileData=0x31e404*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x99d45400, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x832a21c0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x99d45400, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x2a00, dwReserved0=0x0, dwReserved1=0x0, cFileName="ReadOutLoud.CZE", cAlternateFileName="READOU~1.CZE")) returned 1 [0050.192] FindNextFileW (in: hFindFile=0x381d80, lpFindFileData=0x31e404 | out: lpFindFileData=0x31e404*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x99d45400, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7db017e0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x99d45400, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x1200, dwReserved0=0x0, dwReserved1=0x0, cFileName="reflow.CZE", cAlternateFileName="")) returned 1 [0050.192] FindNextFileW (in: hFindFile=0x381d80, lpFindFileData=0x31e404 | out: lpFindFileData=0x31e404*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x99d45400, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7dadb680, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x99d45400, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x4600, dwReserved0=0x0, dwReserved1=0x0, cFileName="SaveAsRTF.CZE", cAlternateFileName="SAVEAS~1.CZE")) returned 1 [0050.192] FindNextFileW (in: hFindFile=0x381d80, lpFindFileData=0x31e404 | out: lpFindFileData=0x31e404*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x99d45400, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x8322fda0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x99d45400, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x5a00, dwReserved0=0x0, dwReserved1=0x0, cFileName="Search.CZE", cAlternateFileName="")) returned 1 [0050.192] FindNextFileW (in: hFindFile=0x381d80, lpFindFileData=0x31e404 | out: lpFindFileData=0x31e404*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x99d45400, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x8322fda0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x99d45400, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x3c00, dwReserved0=0x0, dwReserved1=0x0, cFileName="SendMail.CZE", cAlternateFileName="")) returned 1 [0050.192] FindNextFileW (in: hFindFile=0x381d80, lpFindFileData=0x31e404 | out: lpFindFileData=0x31e404*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x81f971c0, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x81fe3480, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x81fe3480, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Services", cAlternateFileName="")) returned 1 [0050.193] FindNextFileW (in: hFindFile=0x381d80, lpFindFileData=0x31e404 | out: lpFindFileData=0x31e404*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x99d45400, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7e0106a0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x99d45400, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x2800, dwReserved0=0x0, dwReserved1=0x0, cFileName="Spelling.CZE", cAlternateFileName="")) returned 1 [0050.193] FindNextFileW (in: hFindFile=0x381d80, lpFindFileData=0x31e404 | out: lpFindFileData=0x31e404*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x99d45400, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7f5309e0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x99d45400, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x2a00, dwReserved0=0x0, dwReserved1=0x0, cFileName="updater.CZE", cAlternateFileName="")) returned 1 [0050.193] FindNextFileW (in: hFindFile=0x381d80, lpFindFileData=0x31e404 | out: lpFindFileData=0x31e404*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x99d45400, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x8322fda0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x99d45400, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x6c00, dwReserved0=0x0, dwReserved1=0x0, cFileName="WebLink.CZE", cAlternateFileName="")) returned 1 [0050.193] FindNextFileW (in: hFindFile=0x381d80, lpFindFileData=0x31e404 | out: lpFindFileData=0x31e404*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0050.193] FindClose (in: hFindFile=0x381d80 | out: hFindFile=0x381d80) returned 1 [0050.193] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e68c) returned 1 [0050.193] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e698) returned 1 [0050.194] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e6cc) returned 1 [0050.194] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\cs_CZ", nBufferLength=0x105, lpBuffer=0x31e1d4, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\cs_CZ", lpFilePart=0x0) returned 0x3c [0050.194] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\cs_CZ\\", nBufferLength=0x105, lpBuffer=0x31e1a8, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\cs_CZ\\", lpFilePart=0x0) returned 0x3d [0050.194] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\cs_CZ\\*", lpFindFileData=0x31e3f4 | out: lpFindFileData=0x31e3f4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7d7bb9a0, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x832ee480, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x832ee480, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x381d80 [0050.194] FindNextFileW (in: hFindFile=0x381d80, lpFindFileData=0x31e404 | out: lpFindFileData=0x31e404*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7d7bb9a0, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x832ee480, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x832ee480, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0050.194] FindNextFileW (in: hFindFile=0x381d80, lpFindFileData=0x31e404 | out: lpFindFileData=0x31e404*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x99d45400, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7db73c00, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x99d45400, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0xa800, dwReserved0=0x0, dwReserved1=0x0, cFileName="accessibility.CZE", cAlternateFileName="ACCESS~1.CZE")) returned 1 [0050.195] FindNextFileW (in: hFindFile=0x381d80, lpFindFileData=0x31e404 | out: lpFindFileData=0x31e404*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x99d45400, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x83209c40, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x99d45400, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x63e00, dwReserved0=0x0, dwReserved1=0x0, cFileName="Acroform.CZE", cAlternateFileName="")) returned 1 [0050.195] FindNextFileW (in: hFindFile=0x381d80, lpFindFileData=0x31e404 | out: lpFindFileData=0x31e404*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x99d45400, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x81d35bc0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x99d45400, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x1a00, dwReserved0=0x0, dwReserved1=0x0, cFileName="AdobeCollabSync.CZE", cAlternateFileName="ADOBEC~1.CZE")) returned 1 [0050.195] FindNextFileW (in: hFindFile=0x381d80, lpFindFileData=0x31e404 | out: lpFindFileData=0x31e404*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x99d45400, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x832ee480, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x99d45400, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x76c00, dwReserved0=0x0, dwReserved1=0x0, cFileName="Annots.CZE", cAlternateFileName="")) returned 1 [0050.195] FindNextFileW (in: hFindFile=0x381d80, lpFindFileData=0x31e404 | out: lpFindFileData=0x31e404*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x99d45400, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x820558a0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x99d45400, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x3200, dwReserved0=0x0, dwReserved1=0x0, cFileName="BRdlang32.CZE", cAlternateFileName="BRDLAN~1.CZE")) returned 1 [0050.195] FindNextFileW (in: hFindFile=0x381d80, lpFindFileData=0x31e404 | out: lpFindFileData=0x31e404*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x99d45400, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x83209c40, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x99d45400, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x1da00, dwReserved0=0x0, dwReserved1=0x0, cFileName="Checkers.CZE", cAlternateFileName="")) returned 1 [0050.195] FindNextFileW (in: hFindFile=0x381d80, lpFindFileData=0x31e404 | out: lpFindFileData=0x31e404*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x99d45400, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x83209c40, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x99d45400, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x1e000, dwReserved0=0x0, dwReserved1=0x0, cFileName="DigSig.CZE", cAlternateFileName="")) returned 1 [0050.195] FindNextFileW (in: hFindFile=0x381d80, lpFindFileData=0x31e404 | out: lpFindFileData=0x31e404*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x99d45400, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x83209c40, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x99d45400, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x4600, dwReserved0=0x0, dwReserved1=0x0, cFileName="DVA.CZE", cAlternateFileName="")) returned 1 [0050.195] FindNextFileW (in: hFindFile=0x381d80, lpFindFileData=0x31e404 | out: lpFindFileData=0x31e404*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x99d45400, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x8327c060, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x99d45400, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x1a00, dwReserved0=0x0, dwReserved1=0x0, cFileName="eBook.CZE", cAlternateFileName="")) returned 1 [0050.195] FindNextFileW (in: hFindFile=0x381d80, lpFindFileData=0x31e404 | out: lpFindFileData=0x31e404*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x99d45400, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x83209c40, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x99d45400, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x9c00, dwReserved0=0x0, dwReserved1=0x0, cFileName="EScript.CZE", cAlternateFileName="")) returned 1 [0050.195] FindNextFileW (in: hFindFile=0x381d80, lpFindFileData=0x31e404 | out: lpFindFileData=0x31e404*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x99d45400, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x83209c40, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x99d45400, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0xe00, dwReserved0=0x0, dwReserved1=0x0, cFileName="IA32.CZE", cAlternateFileName="")) returned 1 [0050.195] FindNextFileW (in: hFindFile=0x381d80, lpFindFileData=0x31e404 | out: lpFindFileData=0x31e404*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x99d45400, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7db4daa0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x99d45400, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x11a00, dwReserved0=0x0, dwReserved1=0x0, cFileName="makeaccessible.CZE", cAlternateFileName="MAKEAC~1.CZE")) returned 1 [0050.195] FindNextFileW (in: hFindFile=0x381d80, lpFindFileData=0x31e404 | out: lpFindFileData=0x31e404*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x99d45400, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7d7bb9a0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x99d45400, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x13200, dwReserved0=0x0, dwReserved1=0x0, cFileName="Multimedia.CZE", cAlternateFileName="MULTIM~1.CZE")) returned 1 [0050.195] FindNextFileW (in: hFindFile=0x381d80, lpFindFileData=0x31e404 | out: lpFindFileData=0x31e404*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x99d45400, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7db27940, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x99d45400, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x2a00, dwReserved0=0x0, dwReserved1=0x0, cFileName="pddom.CZE", cAlternateFileName="")) returned 1 [0050.195] FindNextFileW (in: hFindFile=0x381d80, lpFindFileData=0x31e404 | out: lpFindFileData=0x31e404*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x99d45400, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x83209c40, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x99d45400, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x7d000, dwReserved0=0x0, dwReserved1=0x0, cFileName="PPKLite.CZE", cAlternateFileName="")) returned 1 [0050.195] FindNextFileW (in: hFindFile=0x381d80, lpFindFileData=0x31e404 | out: lpFindFileData=0x31e404*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x99d45400, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x807c95c0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x99d45400, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x145000, dwReserved0=0x0, dwReserved1=0x0, cFileName="RdLang32.CZE", cAlternateFileName="")) returned 1 [0050.195] FindNextFileW (in: hFindFile=0x381d80, lpFindFileData=0x31e404 | out: lpFindFileData=0x31e404*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x99d45400, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x832a21c0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x99d45400, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x2a00, dwReserved0=0x0, dwReserved1=0x0, cFileName="ReadOutLoud.CZE", cAlternateFileName="READOU~1.CZE")) returned 1 [0050.195] FindNextFileW (in: hFindFile=0x381d80, lpFindFileData=0x31e404 | out: lpFindFileData=0x31e404*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x99d45400, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7db017e0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x99d45400, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x1200, dwReserved0=0x0, dwReserved1=0x0, cFileName="reflow.CZE", cAlternateFileName="")) returned 1 [0050.195] FindNextFileW (in: hFindFile=0x381d80, lpFindFileData=0x31e404 | out: lpFindFileData=0x31e404*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x99d45400, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7dadb680, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x99d45400, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x4600, dwReserved0=0x0, dwReserved1=0x0, cFileName="SaveAsRTF.CZE", cAlternateFileName="SAVEAS~1.CZE")) returned 1 [0050.196] FindNextFileW (in: hFindFile=0x381d80, lpFindFileData=0x31e404 | out: lpFindFileData=0x31e404*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x99d45400, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x8322fda0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x99d45400, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x5a00, dwReserved0=0x0, dwReserved1=0x0, cFileName="Search.CZE", cAlternateFileName="")) returned 1 [0050.196] FindNextFileW (in: hFindFile=0x381d80, lpFindFileData=0x31e404 | out: lpFindFileData=0x31e404*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x99d45400, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x8322fda0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x99d45400, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x3c00, dwReserved0=0x0, dwReserved1=0x0, cFileName="SendMail.CZE", cAlternateFileName="")) returned 1 [0050.196] FindNextFileW (in: hFindFile=0x381d80, lpFindFileData=0x31e404 | out: lpFindFileData=0x31e404*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x81f971c0, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x81fe3480, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x81fe3480, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Services", cAlternateFileName="")) returned 1 [0050.196] FindNextFileW (in: hFindFile=0x381d80, lpFindFileData=0x31e404 | out: lpFindFileData=0x31e404*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x99d45400, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7e0106a0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x99d45400, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x2800, dwReserved0=0x0, dwReserved1=0x0, cFileName="Spelling.CZE", cAlternateFileName="")) returned 1 [0050.196] FindNextFileW (in: hFindFile=0x381d80, lpFindFileData=0x31e404 | out: lpFindFileData=0x31e404*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x99d45400, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7f5309e0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x99d45400, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x2a00, dwReserved0=0x0, dwReserved1=0x0, cFileName="updater.CZE", cAlternateFileName="")) returned 1 [0050.196] FindNextFileW (in: hFindFile=0x381d80, lpFindFileData=0x31e404 | out: lpFindFileData=0x31e404*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x99d45400, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x8322fda0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x99d45400, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x6c00, dwReserved0=0x0, dwReserved1=0x0, cFileName="WebLink.CZE", cAlternateFileName="")) returned 1 [0050.196] FindNextFileW (in: hFindFile=0x381d80, lpFindFileData=0x31e404 | out: lpFindFileData=0x31e404*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x99d45400, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x8322fda0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x99d45400, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x6c00, dwReserved0=0x0, dwReserved1=0x0, cFileName="WebLink.CZE", cAlternateFileName="")) returned 0 [0050.196] FindClose (in: hFindFile=0x381d80 | out: hFindFile=0x381d80) returned 1 [0050.197] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e68c) returned 1 [0050.197] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e698) returned 1 [0050.197] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e654) returned 1 [0050.197] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\cs_CZ\\Services", nBufferLength=0x105, lpBuffer=0x31e15c, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\cs_CZ\\Services", lpFilePart=0x0) returned 0x45 [0050.197] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\cs_CZ\\Services\\", nBufferLength=0x105, lpBuffer=0x31e130, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\cs_CZ\\Services\\", lpFilePart=0x0) returned 0x46 [0050.197] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\cs_CZ\\Services\\*", lpFindFileData=0x31e37c | out: lpFindFileData=0x31e37c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x81f971c0, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x81fe3480, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x81fe3480, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x381d80 [0050.204] FindNextFileW (in: hFindFile=0x381d80, lpFindFileData=0x31e38c | out: lpFindFileData=0x31e38c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x81f971c0, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x81fe3480, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x81fe3480, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0050.204] FindNextFileW (in: hFindFile=0x381d80, lpFindFileData=0x31e38c | out: lpFindFileData=0x31e38c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x99d45400, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x81fe3480, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x99d45400, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x9342, dwReserved0=0x0, dwReserved1=0x0, cFileName="DEXShare.asfx", cAlternateFileName="DEXSHA~1.ASF")) returned 1 [0050.204] FindNextFileW (in: hFindFile=0x381d80, lpFindFileData=0x31e38c | out: lpFindFileData=0x31e38c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x99d45400, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x81f971c0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x99d45400, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0xe5, dwReserved0=0x0, dwReserved1=0x0, cFileName="Services.asfx", cAlternateFileName="SERVIC~1.ASF")) returned 1 [0050.204] FindNextFileW (in: hFindFile=0x381d80, lpFindFileData=0x31e38c | out: lpFindFileData=0x31e38c*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0050.204] FindClose (in: hFindFile=0x381d80 | out: hFindFile=0x381d80) returned 1 [0050.204] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e614) returned 1 [0050.204] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e620) returned 1 [0050.204] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e654) returned 1 [0050.204] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\cs_CZ\\Services", nBufferLength=0x105, lpBuffer=0x31e15c, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\cs_CZ\\Services", lpFilePart=0x0) returned 0x45 [0050.204] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\cs_CZ\\Services\\", nBufferLength=0x105, lpBuffer=0x31e130, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\cs_CZ\\Services\\", lpFilePart=0x0) returned 0x46 [0050.204] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\cs_CZ\\Services\\*", lpFindFileData=0x31e37c | out: lpFindFileData=0x31e37c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x81f971c0, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x81fe3480, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x81fe3480, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x381d80 [0050.205] FindNextFileW (in: hFindFile=0x381d80, lpFindFileData=0x31e38c | out: lpFindFileData=0x31e38c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x81f971c0, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x81fe3480, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x81fe3480, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0050.205] FindNextFileW (in: hFindFile=0x381d80, lpFindFileData=0x31e38c | out: lpFindFileData=0x31e38c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x99d45400, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x81fe3480, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x99d45400, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x9342, dwReserved0=0x0, dwReserved1=0x0, cFileName="DEXShare.asfx", cAlternateFileName="DEXSHA~1.ASF")) returned 1 [0050.205] FindNextFileW (in: hFindFile=0x381d80, lpFindFileData=0x31e38c | out: lpFindFileData=0x31e38c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x99d45400, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x81f971c0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x99d45400, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0xe5, dwReserved0=0x0, dwReserved1=0x0, cFileName="Services.asfx", cAlternateFileName="SERVIC~1.ASF")) returned 1 [0050.205] FindNextFileW (in: hFindFile=0x381d80, lpFindFileData=0x31e38c | out: lpFindFileData=0x31e38c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x99d45400, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x81f971c0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x99d45400, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0xe5, dwReserved0=0x0, dwReserved1=0x0, cFileName="Services.asfx", cAlternateFileName="SERVIC~1.ASF")) returned 0 [0050.205] FindClose (in: hFindFile=0x381d80 | out: hFindFile=0x381d80) returned 1 [0050.205] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e614) returned 1 [0050.205] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e620) returned 1 [0050.205] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e6cc) returned 1 [0050.205] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\da_DK", nBufferLength=0x105, lpBuffer=0x31e1d4, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\da_DK", lpFilePart=0x0) returned 0x3c [0050.205] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\da_DK\\", nBufferLength=0x105, lpBuffer=0x31e1a8, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\da_DK\\", lpFilePart=0x0) returned 0x3d [0050.205] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\da_DK\\*", lpFindFileData=0x31e3f4 | out: lpFindFileData=0x31e3f4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7d723420, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x82fce7a0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x82fce7a0, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x381d80 [0050.207] FindNextFileW (in: hFindFile=0x381d80, lpFindFileData=0x31e404 | out: lpFindFileData=0x31e404*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7d723420, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x82fce7a0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x82fce7a0, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0050.207] FindNextFileW (in: hFindFile=0x381d80, lpFindFileData=0x31e404 | out: lpFindFileData=0x31e404*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9640cd00, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7d9aab80, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9640cd00, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0xa600, dwReserved0=0x0, dwReserved1=0x0, cFileName="accessibility.DAN", cAlternateFileName="ACCESS~1.DAN")) returned 1 [0050.207] FindNextFileW (in: hFindFile=0x381d80, lpFindFileData=0x31e404 | out: lpFindFileData=0x31e404*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9640cd00, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x82caeac0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9640cd00, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x64600, dwReserved0=0x0, dwReserved1=0x0, cFileName="Acroform.DAN", cAlternateFileName="")) returned 1 [0050.207] FindNextFileW (in: hFindFile=0x381d80, lpFindFileData=0x31e404 | out: lpFindFileData=0x31e404*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9640cd00, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x801fc020, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9640cd00, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x1a00, dwReserved0=0x0, dwReserved1=0x0, cFileName="AdobeCollabSync.DAN", cAlternateFileName="ADOBEC~1.DAN")) returned 1 [0050.207] FindNextFileW (in: hFindFile=0x381d80, lpFindFileData=0x31e404 | out: lpFindFileData=0x31e404*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9640cd00, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x82db9460, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9640cd00, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x76400, dwReserved0=0x0, dwReserved1=0x0, cFileName="Annots.DAN", cAlternateFileName="")) returned 1 [0050.207] FindNextFileW (in: hFindFile=0x381d80, lpFindFileData=0x31e404 | out: lpFindFileData=0x31e404*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9640cd00, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x820558a0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9640cd00, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x3400, dwReserved0=0x0, dwReserved1=0x0, cFileName="BRdlang32.DAN", cAlternateFileName="BRDLAN~1.DAN")) returned 1 [0050.207] FindNextFileW (in: hFindFile=0x381d80, lpFindFileData=0x31e404 | out: lpFindFileData=0x31e404*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9640cd00, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x82cd4c20, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9640cd00, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x1de00, dwReserved0=0x0, dwReserved1=0x0, cFileName="Checkers.DAN", cAlternateFileName="")) returned 1 [0050.207] FindNextFileW (in: hFindFile=0x381d80, lpFindFileData=0x31e404 | out: lpFindFileData=0x31e404*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9640cd00, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x82caeac0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9640cd00, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x1f200, dwReserved0=0x0, dwReserved1=0x0, cFileName="DigSig.DAN", cAlternateFileName="")) returned 1 [0050.207] FindNextFileW (in: hFindFile=0x381d80, lpFindFileData=0x31e404 | out: lpFindFileData=0x31e404*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9640cd00, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x82cd4c20, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9640cd00, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x4a00, dwReserved0=0x0, dwReserved1=0x0, cFileName="DVA.DAN", cAlternateFileName="")) returned 1 [0050.207] FindNextFileW (in: hFindFile=0x381d80, lpFindFileData=0x31e404 | out: lpFindFileData=0x31e404*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9640cd00, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x82e519e0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9640cd00, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x1a00, dwReserved0=0x0, dwReserved1=0x0, cFileName="eBook.DAN", cAlternateFileName="")) returned 1 [0050.207] FindNextFileW (in: hFindFile=0x381d80, lpFindFileData=0x31e404 | out: lpFindFileData=0x31e404*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9640cd00, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x82caeac0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9640cd00, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x9e00, dwReserved0=0x0, dwReserved1=0x0, cFileName="EScript.DAN", cAlternateFileName="")) returned 1 [0050.208] FindNextFileW (in: hFindFile=0x381d80, lpFindFileData=0x31e404 | out: lpFindFileData=0x31e404*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9640cd00, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x82cd4c20, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9640cd00, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0xe00, dwReserved0=0x0, dwReserved1=0x0, cFileName="IA32.DAN", cAlternateFileName="")) returned 1 [0050.208] FindNextFileW (in: hFindFile=0x381d80, lpFindFileData=0x31e404 | out: lpFindFileData=0x31e404*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9640cd00, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7da1cfa0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9640cd00, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x12800, dwReserved0=0x0, dwReserved1=0x0, cFileName="makeaccessible.DAN", cAlternateFileName="MAKEAC~1.DAN")) returned 1 [0050.208] FindNextFileW (in: hFindFile=0x381d80, lpFindFileData=0x31e404 | out: lpFindFileData=0x31e404*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9640cd00, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7d723420, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9640cd00, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x13400, dwReserved0=0x0, dwReserved1=0x0, cFileName="Multimedia.DAN", cAlternateFileName="MULTIM~1.DAN")) returned 1 [0050.208] FindNextFileW (in: hFindFile=0x381d80, lpFindFileData=0x31e404 | out: lpFindFileData=0x31e404*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9640cd00, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7d9f6e40, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9640cd00, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x2c00, dwReserved0=0x0, dwReserved1=0x0, cFileName="pddom.DAN", cAlternateFileName="")) returned 1 [0050.208] FindNextFileW (in: hFindFile=0x381d80, lpFindFileData=0x31e404 | out: lpFindFileData=0x31e404*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9640cd00, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x82cd4c20, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9640cd00, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x7f000, dwReserved0=0x0, dwReserved1=0x0, cFileName="PPKLITE.DAN", cAlternateFileName="")) returned 1 [0050.208] FindNextFileW (in: hFindFile=0x381d80, lpFindFileData=0x31e404 | out: lpFindFileData=0x31e404*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9640cd00, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7f89c980, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9640cd00, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x144c00, dwReserved0=0x0, dwReserved1=0x0, cFileName="RdLang32.DAN", cAlternateFileName="")) returned 1 [0050.208] FindNextFileW (in: hFindFile=0x381d80, lpFindFileData=0x31e404 | out: lpFindFileData=0x31e404*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9640cd00, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x82fce7a0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9640cd00, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x2a00, dwReserved0=0x0, dwReserved1=0x0, cFileName="ReadOutLoud.DAN", cAlternateFileName="READOU~1.DAN")) returned 1 [0050.208] FindNextFileW (in: hFindFile=0x381d80, lpFindFileData=0x31e404 | out: lpFindFileData=0x31e404*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9640cd00, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7d984a20, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9640cd00, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x1200, dwReserved0=0x0, dwReserved1=0x0, cFileName="reflow.DAN", cAlternateFileName="")) returned 1 [0050.208] FindNextFileW (in: hFindFile=0x381d80, lpFindFileData=0x31e404 | out: lpFindFileData=0x31e404*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9640cd00, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7da8f3c0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9640cd00, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x4600, dwReserved0=0x0, dwReserved1=0x0, cFileName="SaveAsRTF.DAN", cAlternateFileName="SAVEAS~1.DAN")) returned 1 [0050.208] FindNextFileW (in: hFindFile=0x381d80, lpFindFileData=0x31e404 | out: lpFindFileData=0x31e404*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9640cd00, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x82cd4c20, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9640cd00, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x5c00, dwReserved0=0x0, dwReserved1=0x0, cFileName="Search.DAN", cAlternateFileName="")) returned 1 [0050.208] FindNextFileW (in: hFindFile=0x381d80, lpFindFileData=0x31e404 | out: lpFindFileData=0x31e404*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9640cd00, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x82cd4c20, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9640cd00, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x3e00, dwReserved0=0x0, dwReserved1=0x0, cFileName="SendMail.DAN", cAlternateFileName="")) returned 1 [0050.208] FindNextFileW (in: hFindFile=0x381d80, lpFindFileData=0x31e404 | out: lpFindFileData=0x31e404*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x81f971c0, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x81fe3480, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x81fe3480, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Services", cAlternateFileName="")) returned 1 [0050.208] FindNextFileW (in: hFindFile=0x381d80, lpFindFileData=0x31e404 | out: lpFindFileData=0x31e404*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9640cd00, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7ddfb360, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9640cd00, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x2800, dwReserved0=0x0, dwReserved1=0x0, cFileName="Spelling.DAN", cAlternateFileName="")) returned 1 [0050.208] FindNextFileW (in: hFindFile=0x381d80, lpFindFileData=0x31e404 | out: lpFindFileData=0x31e404*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9640cd00, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7f4be5c0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9640cd00, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x2a00, dwReserved0=0x0, dwReserved1=0x0, cFileName="updater.DAN", cAlternateFileName="")) returned 1 [0050.208] FindNextFileW (in: hFindFile=0x381d80, lpFindFileData=0x31e404 | out: lpFindFileData=0x31e404*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9640cd00, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x82caeac0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9640cd00, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x6e00, dwReserved0=0x0, dwReserved1=0x0, cFileName="Weblink.DAN", cAlternateFileName="")) returned 1 [0050.208] FindNextFileW (in: hFindFile=0x381d80, lpFindFileData=0x31e404 | out: lpFindFileData=0x31e404*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0050.208] FindClose (in: hFindFile=0x381d80 | out: hFindFile=0x381d80) returned 1 [0050.209] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e68c) returned 1 [0050.209] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e698) returned 1 [0050.209] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e6cc) returned 1 [0050.209] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\da_DK", nBufferLength=0x105, lpBuffer=0x31e1d4, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\da_DK", lpFilePart=0x0) returned 0x3c [0050.209] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\da_DK\\", nBufferLength=0x105, lpBuffer=0x31e1a8, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\da_DK\\", lpFilePart=0x0) returned 0x3d [0050.209] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\da_DK\\*", lpFindFileData=0x31e3f4 | out: lpFindFileData=0x31e3f4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7d723420, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x82fce7a0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x82fce7a0, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x381d80 [0050.210] FindNextFileW (in: hFindFile=0x381d80, lpFindFileData=0x31e404 | out: lpFindFileData=0x31e404*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7d723420, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x82fce7a0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x82fce7a0, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0050.210] FindNextFileW (in: hFindFile=0x381d80, lpFindFileData=0x31e404 | out: lpFindFileData=0x31e404*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9640cd00, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7d9aab80, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9640cd00, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0xa600, dwReserved0=0x0, dwReserved1=0x0, cFileName="accessibility.DAN", cAlternateFileName="ACCESS~1.DAN")) returned 1 [0050.210] FindNextFileW (in: hFindFile=0x381d80, lpFindFileData=0x31e404 | out: lpFindFileData=0x31e404*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9640cd00, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x82caeac0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9640cd00, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x64600, dwReserved0=0x0, dwReserved1=0x0, cFileName="Acroform.DAN", cAlternateFileName="")) returned 1 [0050.210] FindNextFileW (in: hFindFile=0x381d80, lpFindFileData=0x31e404 | out: lpFindFileData=0x31e404*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9640cd00, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x801fc020, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9640cd00, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x1a00, dwReserved0=0x0, dwReserved1=0x0, cFileName="AdobeCollabSync.DAN", cAlternateFileName="ADOBEC~1.DAN")) returned 1 [0050.210] FindNextFileW (in: hFindFile=0x381d80, lpFindFileData=0x31e404 | out: lpFindFileData=0x31e404*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9640cd00, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x82db9460, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9640cd00, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x76400, dwReserved0=0x0, dwReserved1=0x0, cFileName="Annots.DAN", cAlternateFileName="")) returned 1 [0050.210] FindNextFileW (in: hFindFile=0x381d80, lpFindFileData=0x31e404 | out: lpFindFileData=0x31e404*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9640cd00, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x820558a0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9640cd00, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x3400, dwReserved0=0x0, dwReserved1=0x0, cFileName="BRdlang32.DAN", cAlternateFileName="BRDLAN~1.DAN")) returned 1 [0050.210] FindNextFileW (in: hFindFile=0x381d80, lpFindFileData=0x31e404 | out: lpFindFileData=0x31e404*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9640cd00, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x82cd4c20, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9640cd00, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x1de00, dwReserved0=0x0, dwReserved1=0x0, cFileName="Checkers.DAN", cAlternateFileName="")) returned 1 [0050.210] FindNextFileW (in: hFindFile=0x381d80, lpFindFileData=0x31e404 | out: lpFindFileData=0x31e404*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9640cd00, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x82caeac0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9640cd00, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x1f200, dwReserved0=0x0, dwReserved1=0x0, cFileName="DigSig.DAN", cAlternateFileName="")) returned 1 [0050.210] FindNextFileW (in: hFindFile=0x381d80, lpFindFileData=0x31e404 | out: lpFindFileData=0x31e404*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9640cd00, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x82cd4c20, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9640cd00, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x4a00, dwReserved0=0x0, dwReserved1=0x0, cFileName="DVA.DAN", cAlternateFileName="")) returned 1 [0050.210] FindNextFileW (in: hFindFile=0x381d80, lpFindFileData=0x31e404 | out: lpFindFileData=0x31e404*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9640cd00, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x82e519e0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9640cd00, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x1a00, dwReserved0=0x0, dwReserved1=0x0, cFileName="eBook.DAN", cAlternateFileName="")) returned 1 [0050.210] FindNextFileW (in: hFindFile=0x381d80, lpFindFileData=0x31e404 | out: lpFindFileData=0x31e404*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9640cd00, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x82caeac0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9640cd00, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x9e00, dwReserved0=0x0, dwReserved1=0x0, cFileName="EScript.DAN", cAlternateFileName="")) returned 1 [0050.210] FindNextFileW (in: hFindFile=0x381d80, lpFindFileData=0x31e404 | out: lpFindFileData=0x31e404*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9640cd00, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x82cd4c20, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9640cd00, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0xe00, dwReserved0=0x0, dwReserved1=0x0, cFileName="IA32.DAN", cAlternateFileName="")) returned 1 [0050.210] FindNextFileW (in: hFindFile=0x381d80, lpFindFileData=0x31e404 | out: lpFindFileData=0x31e404*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9640cd00, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7da1cfa0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9640cd00, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x12800, dwReserved0=0x0, dwReserved1=0x0, cFileName="makeaccessible.DAN", cAlternateFileName="MAKEAC~1.DAN")) returned 1 [0050.210] FindNextFileW (in: hFindFile=0x381d80, lpFindFileData=0x31e404 | out: lpFindFileData=0x31e404*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9640cd00, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7d723420, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9640cd00, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x13400, dwReserved0=0x0, dwReserved1=0x0, cFileName="Multimedia.DAN", cAlternateFileName="MULTIM~1.DAN")) returned 1 [0050.210] FindNextFileW (in: hFindFile=0x381d80, lpFindFileData=0x31e404 | out: lpFindFileData=0x31e404*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9640cd00, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7d9f6e40, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9640cd00, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x2c00, dwReserved0=0x0, dwReserved1=0x0, cFileName="pddom.DAN", cAlternateFileName="")) returned 1 [0050.210] FindNextFileW (in: hFindFile=0x381d80, lpFindFileData=0x31e404 | out: lpFindFileData=0x31e404*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9640cd00, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x82cd4c20, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9640cd00, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x7f000, dwReserved0=0x0, dwReserved1=0x0, cFileName="PPKLITE.DAN", cAlternateFileName="")) returned 1 [0050.210] FindNextFileW (in: hFindFile=0x381d80, lpFindFileData=0x31e404 | out: lpFindFileData=0x31e404*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9640cd00, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7f89c980, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9640cd00, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x144c00, dwReserved0=0x0, dwReserved1=0x0, cFileName="RdLang32.DAN", cAlternateFileName="")) returned 1 [0050.210] FindNextFileW (in: hFindFile=0x381d80, lpFindFileData=0x31e404 | out: lpFindFileData=0x31e404*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9640cd00, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x82fce7a0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9640cd00, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x2a00, dwReserved0=0x0, dwReserved1=0x0, cFileName="ReadOutLoud.DAN", cAlternateFileName="READOU~1.DAN")) returned 1 [0050.211] FindNextFileW (in: hFindFile=0x381d80, lpFindFileData=0x31e404 | out: lpFindFileData=0x31e404*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9640cd00, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7d984a20, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9640cd00, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x1200, dwReserved0=0x0, dwReserved1=0x0, cFileName="reflow.DAN", cAlternateFileName="")) returned 1 [0050.211] FindNextFileW (in: hFindFile=0x381d80, lpFindFileData=0x31e404 | out: lpFindFileData=0x31e404*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9640cd00, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7da8f3c0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9640cd00, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x4600, dwReserved0=0x0, dwReserved1=0x0, cFileName="SaveAsRTF.DAN", cAlternateFileName="SAVEAS~1.DAN")) returned 1 [0050.211] FindNextFileW (in: hFindFile=0x381d80, lpFindFileData=0x31e404 | out: lpFindFileData=0x31e404*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9640cd00, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x82cd4c20, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9640cd00, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x5c00, dwReserved0=0x0, dwReserved1=0x0, cFileName="Search.DAN", cAlternateFileName="")) returned 1 [0050.211] FindNextFileW (in: hFindFile=0x381d80, lpFindFileData=0x31e404 | out: lpFindFileData=0x31e404*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9640cd00, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x82cd4c20, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9640cd00, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x3e00, dwReserved0=0x0, dwReserved1=0x0, cFileName="SendMail.DAN", cAlternateFileName="")) returned 1 [0050.211] FindNextFileW (in: hFindFile=0x381d80, lpFindFileData=0x31e404 | out: lpFindFileData=0x31e404*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x81f971c0, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x81fe3480, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x81fe3480, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Services", cAlternateFileName="")) returned 1 [0050.211] FindNextFileW (in: hFindFile=0x381d80, lpFindFileData=0x31e404 | out: lpFindFileData=0x31e404*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9640cd00, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7ddfb360, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9640cd00, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x2800, dwReserved0=0x0, dwReserved1=0x0, cFileName="Spelling.DAN", cAlternateFileName="")) returned 1 [0050.211] FindNextFileW (in: hFindFile=0x381d80, lpFindFileData=0x31e404 | out: lpFindFileData=0x31e404*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9640cd00, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7f4be5c0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9640cd00, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x2a00, dwReserved0=0x0, dwReserved1=0x0, cFileName="updater.DAN", cAlternateFileName="")) returned 1 [0050.211] FindNextFileW (in: hFindFile=0x381d80, lpFindFileData=0x31e404 | out: lpFindFileData=0x31e404*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9640cd00, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x82caeac0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9640cd00, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x6e00, dwReserved0=0x0, dwReserved1=0x0, cFileName="Weblink.DAN", cAlternateFileName="")) returned 1 [0050.211] FindNextFileW (in: hFindFile=0x381d80, lpFindFileData=0x31e404 | out: lpFindFileData=0x31e404*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9640cd00, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x82caeac0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9640cd00, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x6e00, dwReserved0=0x0, dwReserved1=0x0, cFileName="Weblink.DAN", cAlternateFileName="")) returned 0 [0050.211] FindClose (in: hFindFile=0x381d80 | out: hFindFile=0x381d80) returned 1 [0050.212] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e68c) returned 1 [0050.212] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e698) returned 1 [0050.212] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e654) returned 1 [0050.212] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\da_DK\\Services", nBufferLength=0x105, lpBuffer=0x31e15c, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\da_DK\\Services", lpFilePart=0x0) returned 0x45 [0050.212] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\da_DK\\Services\\", nBufferLength=0x105, lpBuffer=0x31e130, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\da_DK\\Services\\", lpFilePart=0x0) returned 0x46 [0050.212] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\da_DK\\Services\\*", lpFindFileData=0x31e37c | out: lpFindFileData=0x31e37c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x81f971c0, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x81fe3480, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x81fe3480, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x381d80 [0050.213] FindNextFileW (in: hFindFile=0x381d80, lpFindFileData=0x31e38c | out: lpFindFileData=0x31e38c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x81f971c0, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x81fe3480, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x81fe3480, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0050.213] FindNextFileW (in: hFindFile=0x381d80, lpFindFileData=0x31e38c | out: lpFindFileData=0x31e38c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9640cd00, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x81fe3480, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9640cd00, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x8ca7, dwReserved0=0x0, dwReserved1=0x0, cFileName="DEXShare.asfx", cAlternateFileName="DEXSHA~1.ASF")) returned 1 [0050.213] FindNextFileW (in: hFindFile=0x381d80, lpFindFileData=0x31e38c | out: lpFindFileData=0x31e38c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9640cd00, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x81f971c0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9640cd00, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0xe1, dwReserved0=0x0, dwReserved1=0x0, cFileName="Services.asfx", cAlternateFileName="SERVIC~1.ASF")) returned 1 [0050.213] FindNextFileW (in: hFindFile=0x381d80, lpFindFileData=0x31e38c | out: lpFindFileData=0x31e38c*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0050.213] FindClose (in: hFindFile=0x381d80 | out: hFindFile=0x381d80) returned 1 [0050.213] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e614) returned 1 [0050.213] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e620) returned 1 [0050.213] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e654) returned 1 [0050.213] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\da_DK\\Services", nBufferLength=0x105, lpBuffer=0x31e15c, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\da_DK\\Services", lpFilePart=0x0) returned 0x45 [0050.213] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\da_DK\\Services\\", nBufferLength=0x105, lpBuffer=0x31e130, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\da_DK\\Services\\", lpFilePart=0x0) returned 0x46 [0050.213] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\da_DK\\Services\\*", lpFindFileData=0x31e37c | out: lpFindFileData=0x31e37c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x81f971c0, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x81fe3480, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x81fe3480, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x381d80 [0050.213] FindNextFileW (in: hFindFile=0x381d80, lpFindFileData=0x31e38c | out: lpFindFileData=0x31e38c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x81f971c0, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x81fe3480, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x81fe3480, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0050.213] FindNextFileW (in: hFindFile=0x381d80, lpFindFileData=0x31e38c | out: lpFindFileData=0x31e38c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9640cd00, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x81fe3480, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9640cd00, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x8ca7, dwReserved0=0x0, dwReserved1=0x0, cFileName="DEXShare.asfx", cAlternateFileName="DEXSHA~1.ASF")) returned 1 [0050.213] FindNextFileW (in: hFindFile=0x381d80, lpFindFileData=0x31e38c | out: lpFindFileData=0x31e38c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9640cd00, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x81f971c0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9640cd00, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0xe1, dwReserved0=0x0, dwReserved1=0x0, cFileName="Services.asfx", cAlternateFileName="SERVIC~1.ASF")) returned 1 [0050.213] FindNextFileW (in: hFindFile=0x381d80, lpFindFileData=0x31e38c | out: lpFindFileData=0x31e38c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9640cd00, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x81f971c0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9640cd00, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0xe1, dwReserved0=0x0, dwReserved1=0x0, cFileName="Services.asfx", cAlternateFileName="SERVIC~1.ASF")) returned 0 [0050.213] FindClose (in: hFindFile=0x381d80 | out: hFindFile=0x381d80) returned 1 [0050.213] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e614) returned 1 [0050.213] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e620) returned 1 [0050.213] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e6cc) returned 1 [0050.213] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\de_DE", nBufferLength=0x105, lpBuffer=0x31e1d4, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\de_DE", lpFilePart=0x0) returned 0x3c [0050.214] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\de_DE\\", nBufferLength=0x105, lpBuffer=0x31e1a8, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\de_DE\\", lpFilePart=0x0) returned 0x3d [0050.214] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\de_DE\\*", lpFindFileData=0x31e3f4 | out: lpFindFileData=0x31e3f4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7d723420, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x82f5c380, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x82f5c380, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x381d80 [0050.225] FindNextFileW (in: hFindFile=0x381d80, lpFindFileData=0x31e404 | out: lpFindFileData=0x31e404*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7d723420, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x82f5c380, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x82f5c380, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0050.225] FindNextFileW (in: hFindFile=0x381d80, lpFindFileData=0x31e404 | out: lpFindFileData=0x31e404*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x950fa000, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7d984a20, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x950fa000, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0xb000, dwReserved0=0x0, dwReserved1=0x0, cFileName="accessibility.DEU", cAlternateFileName="ACCESS~1.DEU")) returned 1 [0050.225] FindNextFileW (in: hFindFile=0x381d80, lpFindFileData=0x31e404 | out: lpFindFileData=0x31e404*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x950fa000, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x82ba4120, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x950fa000, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x6c800, dwReserved0=0x0, dwReserved1=0x0, cFileName="Acroform.DEU", cAlternateFileName="")) returned 1 [0050.225] FindNextFileW (in: hFindFile=0x381d80, lpFindFileData=0x31e404 | out: lpFindFileData=0x31e404*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x950fa000, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x801d5ec0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x950fa000, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x1a00, dwReserved0=0x0, dwReserved1=0x0, cFileName="AdobeCollabSync.DEU", cAlternateFileName="ADOBEC~1.DEU")) returned 1 [0050.225] FindNextFileW (in: hFindFile=0x381d80, lpFindFileData=0x31e404 | out: lpFindFileData=0x31e404*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x950fa000, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x82a99780, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x950fa000, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x80a00, dwReserved0=0x0, dwReserved1=0x0, cFileName="Annots.DEU", cAlternateFileName="")) returned 1 [0050.225] FindNextFileW (in: hFindFile=0x381d80, lpFindFileData=0x31e404 | out: lpFindFileData=0x31e404*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x950fa000, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x820558a0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x950fa000, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x3600, dwReserved0=0x0, dwReserved1=0x0, cFileName="BRdlang32.DEU", cAlternateFileName="BRDLAN~1.DEU")) returned 1 [0050.226] FindNextFileW (in: hFindFile=0x381d80, lpFindFileData=0x31e404 | out: lpFindFileData=0x31e404*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x950fa000, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x82bca280, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x950fa000, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x1fe00, dwReserved0=0x0, dwReserved1=0x0, cFileName="Checkers.DEU", cAlternateFileName="")) returned 1 [0050.226] FindClose (in: hFindFile=0x381d80 | out: hFindFile=0x381d80) returned 1 [0050.227] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e68c) returned 1 [0050.227] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e698) returned 1 [0050.227] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e6cc) returned 1 [0050.227] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\de_DE", nBufferLength=0x105, lpBuffer=0x31e1d4, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\de_DE", lpFilePart=0x0) returned 0x3c [0050.227] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\de_DE\\", nBufferLength=0x105, lpBuffer=0x31e1a8, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\de_DE\\", lpFilePart=0x0) returned 0x3d [0050.227] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\de_DE\\*", lpFindFileData=0x31e3f4 | out: lpFindFileData=0x31e3f4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7d723420, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x82f5c380, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x82f5c380, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x381d80 [0050.228] FindClose (in: hFindFile=0x381d80 | out: hFindFile=0x381d80) returned 1 [0050.229] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e68c) returned 1 [0050.229] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e698) returned 1 [0050.229] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e654) returned 1 [0050.229] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\de_DE\\Services", nBufferLength=0x105, lpBuffer=0x31e15c, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\de_DE\\Services", lpFilePart=0x0) returned 0x45 [0050.229] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\de_DE\\Services\\", nBufferLength=0x105, lpBuffer=0x31e130, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\de_DE\\Services\\", lpFilePart=0x0) returned 0x46 [0050.229] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\de_DE\\Services\\*", lpFindFileData=0x31e37c | out: lpFindFileData=0x31e37c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x81f71060, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x81fe3480, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x81fe3480, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x381d80 [0050.230] FindClose (in: hFindFile=0x381d80 | out: hFindFile=0x381d80) returned 1 [0050.230] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e614) returned 1 [0050.230] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e620) returned 1 [0050.230] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e654) returned 1 [0050.230] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\de_DE\\Services", nBufferLength=0x105, lpBuffer=0x31e15c, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\de_DE\\Services", lpFilePart=0x0) returned 0x45 [0050.230] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\de_DE\\Services\\", nBufferLength=0x105, lpBuffer=0x31e130, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\de_DE\\Services\\", lpFilePart=0x0) returned 0x46 [0050.230] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\de_DE\\Services\\*", lpFindFileData=0x31e37c | out: lpFindFileData=0x31e37c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x81f71060, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x81fe3480, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x81fe3480, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x381d80 [0050.231] FindClose (in: hFindFile=0x381d80 | out: hFindFile=0x381d80) returned 1 [0050.231] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e614) returned 1 [0050.231] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e620) returned 1 [0050.231] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e6cc) returned 1 [0050.231] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\es_ES", nBufferLength=0x105, lpBuffer=0x31e1d4, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\es_ES", lpFilePart=0x0) returned 0x3c [0050.231] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\es_ES\\", nBufferLength=0x105, lpBuffer=0x31e1a8, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\es_ES\\", lpFilePart=0x0) returned 0x3d [0050.231] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\es_ES\\*", lpFindFileData=0x31e3f4 | out: lpFindFileData=0x31e3f4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7d63ebe0, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x82ec3e00, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x82ec3e00, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x381d80 [0050.241] FindClose (in: hFindFile=0x381d80 | out: hFindFile=0x381d80) returned 1 [0050.242] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e68c) returned 1 [0050.242] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e698) returned 1 [0050.242] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e6cc) returned 1 [0050.242] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\es_ES", nBufferLength=0x105, lpBuffer=0x31e1d4, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\es_ES", lpFilePart=0x0) returned 0x3c [0050.242] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\es_ES\\", nBufferLength=0x105, lpBuffer=0x31e1a8, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\es_ES\\", lpFilePart=0x0) returned 0x3d [0050.242] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\es_ES\\*", lpFindFileData=0x31e3f4 | out: lpFindFileData=0x31e3f4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7d63ebe0, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x82ec3e00, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x82ec3e00, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x381d80 [0050.243] FindClose (in: hFindFile=0x381d80 | out: hFindFile=0x381d80) returned 1 [0050.244] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e68c) returned 1 [0050.244] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e698) returned 1 [0050.244] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e654) returned 1 [0050.244] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\es_ES\\Services", nBufferLength=0x105, lpBuffer=0x31e15c, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\es_ES\\Services", lpFilePart=0x0) returned 0x45 [0050.244] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\es_ES\\Services\\", nBufferLength=0x105, lpBuffer=0x31e130, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\es_ES\\Services\\", lpFilePart=0x0) returned 0x46 [0050.244] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\es_ES\\Services\\*", lpFindFileData=0x31e37c | out: lpFindFileData=0x31e37c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x81f24da0, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x81f24da0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x81f24da0, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x381d80 [0050.245] FindClose (in: hFindFile=0x381d80 | out: hFindFile=0x381d80) returned 1 [0050.245] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e614) returned 1 [0050.245] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e620) returned 1 [0050.245] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e654) returned 1 [0050.245] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\es_ES\\Services", nBufferLength=0x105, lpBuffer=0x31e15c, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\es_ES\\Services", lpFilePart=0x0) returned 0x45 [0050.245] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\es_ES\\Services\\", nBufferLength=0x105, lpBuffer=0x31e130, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\es_ES\\Services\\", lpFilePart=0x0) returned 0x46 [0050.245] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\es_ES\\Services\\*", lpFindFileData=0x31e37c | out: lpFindFileData=0x31e37c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x81f24da0, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x81f24da0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x81f24da0, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x381d80 [0050.245] FindClose (in: hFindFile=0x381d80 | out: hFindFile=0x381d80) returned 1 [0050.245] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e614) returned 1 [0050.245] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e620) returned 1 [0050.245] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e6cc) returned 1 [0050.245] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\eu_ES", nBufferLength=0x105, lpBuffer=0x31e1d4, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\eu_ES", lpFilePart=0x0) returned 0x3c [0050.245] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\eu_ES\\", nBufferLength=0x105, lpBuffer=0x31e1a8, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\eu_ES\\", lpFilePart=0x0) returned 0x3d [0050.245] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\eu_ES\\*", lpFindFileData=0x31e3f4 | out: lpFindFileData=0x31e3f4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7d853f20, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x833608a0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x833608a0, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x381d80 [0050.270] FindClose (in: hFindFile=0x381d80 | out: hFindFile=0x381d80) returned 1 [0050.271] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e68c) returned 1 [0050.271] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e698) returned 1 [0050.271] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e6cc) returned 1 [0050.271] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\eu_ES", nBufferLength=0x105, lpBuffer=0x31e1d4, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\eu_ES", lpFilePart=0x0) returned 0x3c [0050.271] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\eu_ES\\", nBufferLength=0x105, lpBuffer=0x31e1a8, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\eu_ES\\", lpFilePart=0x0) returned 0x3d [0050.271] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\eu_ES\\*", lpFindFileData=0x31e3f4 | out: lpFindFileData=0x31e3f4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7d853f20, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x833608a0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x833608a0, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x381d80 [0050.272] FindClose (in: hFindFile=0x381d80 | out: hFindFile=0x381d80) returned 1 [0050.273] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e68c) returned 1 [0050.273] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e698) returned 1 [0050.273] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e654) returned 1 [0050.273] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\eu_ES\\Services", nBufferLength=0x105, lpBuffer=0x31e15c, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\eu_ES\\Services", lpFilePart=0x0) returned 0x45 [0050.273] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\eu_ES\\Services\\", nBufferLength=0x105, lpBuffer=0x31e130, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\eu_ES\\Services\\", lpFilePart=0x0) returned 0x46 [0050.273] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\eu_ES\\Services\\*", lpFindFileData=0x31e37c | out: lpFindFileData=0x31e37c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x81f71060, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x81fbd320, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x81fbd320, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x381d80 [0050.274] FindClose (in: hFindFile=0x381d80 | out: hFindFile=0x381d80) returned 1 [0050.274] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e614) returned 1 [0050.274] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e620) returned 1 [0050.274] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e654) returned 1 [0050.274] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\eu_ES\\Services", nBufferLength=0x105, lpBuffer=0x31e15c, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\eu_ES\\Services", lpFilePart=0x0) returned 0x45 [0050.274] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\eu_ES\\Services\\", nBufferLength=0x105, lpBuffer=0x31e130, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\eu_ES\\Services\\", lpFilePart=0x0) returned 0x46 [0050.274] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\eu_ES\\Services\\*", lpFindFileData=0x31e37c | out: lpFindFileData=0x31e37c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x81f71060, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x81fbd320, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x81fbd320, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x381d80 [0050.274] FindClose (in: hFindFile=0x381d80 | out: hFindFile=0x381d80) returned 1 [0050.274] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e614) returned 1 [0050.274] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e620) returned 1 [0050.274] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e6cc) returned 1 [0050.274] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\fi_FI", nBufferLength=0x105, lpBuffer=0x31e1d4, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\fi_FI", lpFilePart=0x0) returned 0x3c [0050.274] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\fi_FI\\", nBufferLength=0x105, lpBuffer=0x31e1a8, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\fi_FI\\", lpFilePart=0x0) returned 0x3d [0050.274] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\fi_FI\\*", lpFindFileData=0x31e3f4 | out: lpFindFileData=0x31e3f4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7d723420, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x82fce7a0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x82fce7a0, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x381d80 [0050.286] FindClose (in: hFindFile=0x381d80 | out: hFindFile=0x381d80) returned 1 [0050.286] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e68c) returned 1 [0050.286] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e698) returned 1 [0050.286] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e6cc) returned 1 [0050.286] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\fi_FI", nBufferLength=0x105, lpBuffer=0x31e1d4, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\fi_FI", lpFilePart=0x0) returned 0x3c [0050.286] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\fi_FI\\", nBufferLength=0x105, lpBuffer=0x31e1a8, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\fi_FI\\", lpFilePart=0x0) returned 0x3d [0050.286] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\fi_FI\\*", lpFindFileData=0x31e3f4 | out: lpFindFileData=0x31e3f4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7d723420, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x82fce7a0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x82fce7a0, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x381d80 [0050.287] FindClose (in: hFindFile=0x381d80 | out: hFindFile=0x381d80) returned 1 [0050.288] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e68c) returned 1 [0050.288] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e698) returned 1 [0050.288] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e654) returned 1 [0050.288] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\fi_FI\\Services", nBufferLength=0x105, lpBuffer=0x31e15c, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\fi_FI\\Services", lpFilePart=0x0) returned 0x45 [0050.288] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\fi_FI\\Services\\", nBufferLength=0x105, lpBuffer=0x31e130, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\fi_FI\\Services\\", lpFilePart=0x0) returned 0x46 [0050.288] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\fi_FI\\Services\\*", lpFindFileData=0x31e37c | out: lpFindFileData=0x31e37c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x81f71060, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x81fbd320, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x81fbd320, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x381d80 [0050.299] FindClose (in: hFindFile=0x381d80 | out: hFindFile=0x381d80) returned 1 [0050.299] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e614) returned 1 [0050.299] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e620) returned 1 [0050.299] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e654) returned 1 [0050.299] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\fi_FI\\Services", nBufferLength=0x105, lpBuffer=0x31e15c, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\fi_FI\\Services", lpFilePart=0x0) returned 0x45 [0050.299] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\fi_FI\\Services\\", nBufferLength=0x105, lpBuffer=0x31e130, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\fi_FI\\Services\\", lpFilePart=0x0) returned 0x46 [0050.300] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\fi_FI\\Services\\*", lpFindFileData=0x31e37c | out: lpFindFileData=0x31e37c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x81f71060, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x81fbd320, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x81fbd320, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x381d80 [0050.300] FindClose (in: hFindFile=0x381d80 | out: hFindFile=0x381d80) returned 1 [0050.300] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e614) returned 1 [0050.300] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e620) returned 1 [0050.300] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e6cc) returned 1 [0050.300] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\fr_FR", nBufferLength=0x105, lpBuffer=0x31e1d4, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\fr_FR", lpFilePart=0x0) returned 0x3c [0050.300] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\fr_FR\\", nBufferLength=0x105, lpBuffer=0x31e1a8, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\fr_FR\\", lpFilePart=0x0) returned 0x3d [0050.300] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\fr_FR\\*", lpFindFileData=0x31e3f4 | out: lpFindFileData=0x31e3f4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7d749580, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x82f824e0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x82f824e0, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x381d80 [0050.302] FindClose (in: hFindFile=0x381d80 | out: hFindFile=0x381d80) returned 1 [0050.303] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e68c) returned 1 [0050.303] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e698) returned 1 [0050.303] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e6cc) returned 1 [0050.303] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\fr_FR", nBufferLength=0x105, lpBuffer=0x31e1d4, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\fr_FR", lpFilePart=0x0) returned 0x3c [0050.303] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\fr_FR\\", nBufferLength=0x105, lpBuffer=0x31e1a8, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\fr_FR\\", lpFilePart=0x0) returned 0x3d [0050.303] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\fr_FR\\*", lpFindFileData=0x31e3f4 | out: lpFindFileData=0x31e3f4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7d749580, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x82f824e0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x82f824e0, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x381d80 [0050.304] FindClose (in: hFindFile=0x381d80 | out: hFindFile=0x381d80) returned 1 [0050.304] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e68c) returned 1 [0050.304] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e698) returned 1 [0050.304] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e654) returned 1 [0050.304] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\fr_FR\\Services", nBufferLength=0x105, lpBuffer=0x31e15c, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\fr_FR\\Services", lpFilePart=0x0) returned 0x45 [0050.304] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\fr_FR\\Services\\", nBufferLength=0x105, lpBuffer=0x31e130, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\fr_FR\\Services\\", lpFilePart=0x0) returned 0x46 [0050.305] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\fr_FR\\Services\\*", lpFindFileData=0x31e37c | out: lpFindFileData=0x31e37c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x81f71060, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x81fe3480, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x81fe3480, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x381d80 [0050.305] FindClose (in: hFindFile=0x381d80 | out: hFindFile=0x381d80) returned 1 [0050.305] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e614) returned 1 [0050.305] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e620) returned 1 [0050.305] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e654) returned 1 [0050.306] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\fr_FR\\Services", nBufferLength=0x105, lpBuffer=0x31e15c, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\fr_FR\\Services", lpFilePart=0x0) returned 0x45 [0050.306] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\fr_FR\\Services\\", nBufferLength=0x105, lpBuffer=0x31e130, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\fr_FR\\Services\\", lpFilePart=0x0) returned 0x46 [0050.306] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\fr_FR\\Services\\*", lpFindFileData=0x31e37c | out: lpFindFileData=0x31e37c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x81f71060, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x81fe3480, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x81fe3480, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x381d80 [0050.306] FindClose (in: hFindFile=0x381d80 | out: hFindFile=0x381d80) returned 1 [0050.306] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e614) returned 1 [0050.306] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e620) returned 1 [0050.306] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e6cc) returned 1 [0050.306] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\hr_HR", nBufferLength=0x105, lpBuffer=0x31e1d4, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\hr_HR", lpFilePart=0x0) returned 0x3c [0050.306] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\hr_HR\\", nBufferLength=0x105, lpBuffer=0x31e1a8, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\hr_HR\\", lpFilePart=0x0) returned 0x3d [0050.306] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\hr_HR\\*", lpFindFileData=0x31e3f4 | out: lpFindFileData=0x31e3f4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7d7bb9a0, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x832ee480, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x832ee480, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x381d80 [0050.312] FindClose (in: hFindFile=0x381d80 | out: hFindFile=0x381d80) returned 1 [0050.313] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e68c) returned 1 [0050.313] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e698) returned 1 [0050.313] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e6cc) returned 1 [0050.313] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\hr_HR", nBufferLength=0x105, lpBuffer=0x31e1d4, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\hr_HR", lpFilePart=0x0) returned 0x3c [0050.313] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\hr_HR\\", nBufferLength=0x105, lpBuffer=0x31e1a8, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\hr_HR\\", lpFilePart=0x0) returned 0x3d [0050.313] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\hr_HR\\*", lpFindFileData=0x31e3f4 | out: lpFindFileData=0x31e3f4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7d7bb9a0, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x832ee480, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x832ee480, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x381d80 [0050.314] FindClose (in: hFindFile=0x381d80 | out: hFindFile=0x381d80) returned 1 [0050.315] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e68c) returned 1 [0050.315] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e698) returned 1 [0050.315] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e654) returned 1 [0050.315] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\hr_HR\\Services", nBufferLength=0x105, lpBuffer=0x31e15c, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\hr_HR\\Services", lpFilePart=0x0) returned 0x45 [0050.315] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\hr_HR\\Services\\", nBufferLength=0x105, lpBuffer=0x31e130, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\hr_HR\\Services\\", lpFilePart=0x0) returned 0x46 [0050.315] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\hr_HR\\Services\\*", lpFindFileData=0x31e37c | out: lpFindFileData=0x31e37c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x81f71060, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x81fbd320, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x81fbd320, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x381d80 [0050.316] FindClose (in: hFindFile=0x381d80 | out: hFindFile=0x381d80) returned 1 [0050.316] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e614) returned 1 [0050.316] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e620) returned 1 [0050.316] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e654) returned 1 [0050.316] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\hr_HR\\Services", nBufferLength=0x105, lpBuffer=0x31e15c, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\hr_HR\\Services", lpFilePart=0x0) returned 0x45 [0050.316] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\hr_HR\\Services\\", nBufferLength=0x105, lpBuffer=0x31e130, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\hr_HR\\Services\\", lpFilePart=0x0) returned 0x46 [0050.316] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\hr_HR\\Services\\*", lpFindFileData=0x31e37c | out: lpFindFileData=0x31e37c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x81f71060, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x81fbd320, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x81fbd320, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x381d80 [0050.317] FindClose (in: hFindFile=0x381d80 | out: hFindFile=0x381d80) returned 1 [0050.317] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e614) returned 1 [0050.317] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e620) returned 1 [0050.317] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e6cc) returned 1 [0050.317] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\hu_HU", nBufferLength=0x105, lpBuffer=0x31e1d4, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\hu_HU", lpFilePart=0x0) returned 0x3c [0050.317] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\hu_HU\\", nBufferLength=0x105, lpBuffer=0x31e1a8, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\hu_HU\\", lpFilePart=0x0) returned 0x3d [0050.317] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\hu_HU\\*", lpFindFileData=0x31e3f4 | out: lpFindFileData=0x31e3f4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7d7bb9a0, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x832c8320, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x832c8320, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x381d80 [0050.326] FindClose (in: hFindFile=0x381d80 | out: hFindFile=0x381d80) returned 1 [0050.326] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e68c) returned 1 [0050.326] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e698) returned 1 [0050.326] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e6cc) returned 1 [0050.326] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\hu_HU", nBufferLength=0x105, lpBuffer=0x31e1d4, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\hu_HU", lpFilePart=0x0) returned 0x3c [0050.327] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\hu_HU\\", nBufferLength=0x105, lpBuffer=0x31e1a8, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\hu_HU\\", lpFilePart=0x0) returned 0x3d [0050.327] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\hu_HU\\*", lpFindFileData=0x31e3f4 | out: lpFindFileData=0x31e3f4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7d7bb9a0, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x832c8320, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x832c8320, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x381d80 [0050.327] FindClose (in: hFindFile=0x381d80 | out: hFindFile=0x381d80) returned 1 [0050.328] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e68c) returned 1 [0050.328] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e698) returned 1 [0050.328] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e654) returned 1 [0050.328] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\hu_HU\\Services", nBufferLength=0x105, lpBuffer=0x31e15c, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\hu_HU\\Services", lpFilePart=0x0) returned 0x45 [0050.328] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\hu_HU\\Services\\", nBufferLength=0x105, lpBuffer=0x31e130, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\hu_HU\\Services\\", lpFilePart=0x0) returned 0x46 [0050.328] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\hu_HU\\Services\\*", lpFindFileData=0x31e37c | out: lpFindFileData=0x31e37c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x81f71060, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x81fbd320, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x81fbd320, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x381d80 [0050.329] FindClose (in: hFindFile=0x381d80 | out: hFindFile=0x381d80) returned 1 [0050.329] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e614) returned 1 [0050.329] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e620) returned 1 [0050.329] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e654) returned 1 [0050.329] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\hu_HU\\Services", nBufferLength=0x105, lpBuffer=0x31e15c, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\hu_HU\\Services", lpFilePart=0x0) returned 0x45 [0050.329] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\hu_HU\\Services\\", nBufferLength=0x105, lpBuffer=0x31e130, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\hu_HU\\Services\\", lpFilePart=0x0) returned 0x46 [0050.329] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\hu_HU\\Services\\*", lpFindFileData=0x31e37c | out: lpFindFileData=0x31e37c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x81f71060, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x81fbd320, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x81fbd320, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x381d80 [0050.329] FindClose (in: hFindFile=0x381d80 | out: hFindFile=0x381d80) returned 1 [0050.329] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e614) returned 1 [0050.329] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e620) returned 1 [0050.329] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e6cc) returned 1 [0050.330] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\it_IT", nBufferLength=0x105, lpBuffer=0x31e1d4, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\it_IT", lpFilePart=0x0) returned 0x3c [0050.330] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\it_IT\\", nBufferLength=0x105, lpBuffer=0x31e1a8, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\it_IT\\", lpFilePart=0x0) returned 0x3d [0050.330] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\it_IT\\*", lpFindFileData=0x31e3f4 | out: lpFindFileData=0x31e3f4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7d63ebe0, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x82f5c380, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x82f5c380, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x381d80 [0050.339] FindClose (in: hFindFile=0x381d80 | out: hFindFile=0x381d80) returned 1 [0050.340] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e68c) returned 1 [0050.340] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e698) returned 1 [0050.340] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e6cc) returned 1 [0050.340] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\it_IT", nBufferLength=0x105, lpBuffer=0x31e1d4, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\it_IT", lpFilePart=0x0) returned 0x3c [0050.340] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\it_IT\\", nBufferLength=0x105, lpBuffer=0x31e1a8, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\it_IT\\", lpFilePart=0x0) returned 0x3d [0050.340] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\it_IT\\*", lpFindFileData=0x31e3f4 | out: lpFindFileData=0x31e3f4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7d63ebe0, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x82f5c380, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x82f5c380, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x381d80 [0050.341] FindClose (in: hFindFile=0x381d80 | out: hFindFile=0x381d80) returned 1 [0050.341] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e68c) returned 1 [0050.341] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e698) returned 1 [0050.341] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e654) returned 1 [0050.342] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\it_IT\\Services", nBufferLength=0x105, lpBuffer=0x31e15c, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\it_IT\\Services", lpFilePart=0x0) returned 0x45 [0050.342] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\it_IT\\Services\\", nBufferLength=0x105, lpBuffer=0x31e130, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\it_IT\\Services\\", lpFilePart=0x0) returned 0x46 [0050.342] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\it_IT\\Services\\*", lpFindFileData=0x31e37c | out: lpFindFileData=0x31e37c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x81f71060, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x81fbd320, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x81fbd320, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x381d80 [0050.343] FindClose (in: hFindFile=0x381d80 | out: hFindFile=0x381d80) returned 1 [0050.343] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e614) returned 1 [0050.343] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e620) returned 1 [0050.343] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e654) returned 1 [0050.343] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\it_IT\\Services", nBufferLength=0x105, lpBuffer=0x31e15c, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\it_IT\\Services", lpFilePart=0x0) returned 0x45 [0050.343] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\it_IT\\Services\\", nBufferLength=0x105, lpBuffer=0x31e130, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\it_IT\\Services\\", lpFilePart=0x0) returned 0x46 [0050.343] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\it_IT\\Services\\*", lpFindFileData=0x31e37c | out: lpFindFileData=0x31e37c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x81f71060, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x81fbd320, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x81fbd320, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x381d80 [0050.343] FindClose (in: hFindFile=0x381d80 | out: hFindFile=0x381d80) returned 1 [0050.343] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e614) returned 1 [0050.343] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e620) returned 1 [0050.343] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e6cc) returned 1 [0050.343] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\ja_JP", nBufferLength=0x105, lpBuffer=0x31e1d4, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\ja_JP", lpFilePart=0x0) returned 0x3c [0050.344] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\ja_JP\\", nBufferLength=0x105, lpBuffer=0x31e1a8, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\ja_JP\\", lpFilePart=0x0) returned 0x3d [0050.344] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\ja_JP\\*", lpFindFileData=0x31e3f4 | out: lpFindFileData=0x31e3f4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7d749580, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x82f5c380, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x82f5c380, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x381d80 [0050.355] FindClose (in: hFindFile=0x381d80 | out: hFindFile=0x381d80) returned 1 [0050.355] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e68c) returned 1 [0050.355] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e698) returned 1 [0050.355] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e6cc) returned 1 [0050.355] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\ja_JP", nBufferLength=0x105, lpBuffer=0x31e1d4, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\ja_JP", lpFilePart=0x0) returned 0x3c [0050.355] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\ja_JP\\", nBufferLength=0x105, lpBuffer=0x31e1a8, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\ja_JP\\", lpFilePart=0x0) returned 0x3d [0050.355] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\ja_JP\\*", lpFindFileData=0x31e3f4 | out: lpFindFileData=0x31e3f4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7d749580, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x82f5c380, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x82f5c380, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x381d80 [0050.356] FindClose (in: hFindFile=0x381d80 | out: hFindFile=0x381d80) returned 1 [0050.357] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e68c) returned 1 [0050.357] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e698) returned 1 [0050.357] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e654) returned 1 [0050.357] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\ja_JP\\Services", nBufferLength=0x105, lpBuffer=0x31e15c, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\ja_JP\\Services", lpFilePart=0x0) returned 0x45 [0050.357] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\ja_JP\\Services\\", nBufferLength=0x105, lpBuffer=0x31e130, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\ja_JP\\Services\\", lpFilePart=0x0) returned 0x46 [0050.357] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\ja_JP\\Services\\*", lpFindFileData=0x31e37c | out: lpFindFileData=0x31e37c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x81f71060, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x81fbd320, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x81fbd320, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x381d80 [0050.358] FindClose (in: hFindFile=0x381d80 | out: hFindFile=0x381d80) returned 1 [0050.358] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e614) returned 1 [0050.358] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e620) returned 1 [0050.358] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e654) returned 1 [0050.358] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\ja_JP\\Services", nBufferLength=0x105, lpBuffer=0x31e15c, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\ja_JP\\Services", lpFilePart=0x0) returned 0x45 [0050.358] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\ja_JP\\Services\\", nBufferLength=0x105, lpBuffer=0x31e130, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\ja_JP\\Services\\", lpFilePart=0x0) returned 0x46 [0050.358] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\ja_JP\\Services\\*", lpFindFileData=0x31e37c | out: lpFindFileData=0x31e37c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x81f71060, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x81fbd320, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x81fbd320, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x381d80 [0050.358] FindClose (in: hFindFile=0x381d80 | out: hFindFile=0x381d80) returned 1 [0050.358] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e614) returned 1 [0050.358] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e620) returned 1 [0050.358] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e6cc) returned 1 [0050.358] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\ko_KR", nBufferLength=0x105, lpBuffer=0x31e1d4, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\ko_KR", lpFilePart=0x0) returned 0x3c [0050.359] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\ko_KR\\", nBufferLength=0x105, lpBuffer=0x31e1a8, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\ko_KR\\", lpFilePart=0x0) returned 0x3d [0050.359] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\ko_KR\\*", lpFindFileData=0x31e3f4 | out: lpFindFileData=0x31e3f4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7d6d7160, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x82ee9f60, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x82ee9f60, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x381d80 [0050.370] FindClose (in: hFindFile=0x381d80 | out: hFindFile=0x381d80) returned 1 [0050.370] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e68c) returned 1 [0050.370] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e698) returned 1 [0050.370] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e6cc) returned 1 [0050.370] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\ko_KR", nBufferLength=0x105, lpBuffer=0x31e1d4, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\ko_KR", lpFilePart=0x0) returned 0x3c [0050.370] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\ko_KR\\", nBufferLength=0x105, lpBuffer=0x31e1a8, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\ko_KR\\", lpFilePart=0x0) returned 0x3d [0050.370] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\ko_KR\\*", lpFindFileData=0x31e3f4 | out: lpFindFileData=0x31e3f4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7d6d7160, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x82ee9f60, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x82ee9f60, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x381d80 [0050.371] FindClose (in: hFindFile=0x381d80 | out: hFindFile=0x381d80) returned 1 [0050.372] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e68c) returned 1 [0050.372] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e698) returned 1 [0050.372] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e654) returned 1 [0050.372] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\ko_KR\\Services", nBufferLength=0x105, lpBuffer=0x31e15c, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\ko_KR\\Services", lpFilePart=0x0) returned 0x45 [0050.372] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\ko_KR\\Services\\", nBufferLength=0x105, lpBuffer=0x31e130, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\ko_KR\\Services\\", lpFilePart=0x0) returned 0x46 [0050.372] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\ko_KR\\Services\\*", lpFindFileData=0x31e37c | out: lpFindFileData=0x31e37c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x81f71060, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x81fbd320, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x81fbd320, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x381d80 [0050.374] FindClose (in: hFindFile=0x381d80 | out: hFindFile=0x381d80) returned 1 [0050.374] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e614) returned 1 [0050.374] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e620) returned 1 [0050.374] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e654) returned 1 [0050.374] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\ko_KR\\Services", nBufferLength=0x105, lpBuffer=0x31e15c, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\ko_KR\\Services", lpFilePart=0x0) returned 0x45 [0050.374] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\ko_KR\\Services\\", nBufferLength=0x105, lpBuffer=0x31e130, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\ko_KR\\Services\\", lpFilePart=0x0) returned 0x46 [0050.374] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\ko_KR\\Services\\*", lpFindFileData=0x31e37c | out: lpFindFileData=0x31e37c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x81f71060, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x81fbd320, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x81fbd320, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x381d80 [0050.374] FindClose (in: hFindFile=0x381d80 | out: hFindFile=0x381d80) returned 1 [0050.374] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e614) returned 1 [0050.374] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e620) returned 1 [0050.374] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e6cc) returned 1 [0050.374] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\nb_NO", nBufferLength=0x105, lpBuffer=0x31e1d4, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\nb_NO", lpFilePart=0x0) returned 0x3c [0050.374] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\nb_NO\\", nBufferLength=0x105, lpBuffer=0x31e1a8, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\nb_NO\\", lpFilePart=0x0) returned 0x3d [0050.374] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\nb_NO\\*", lpFindFileData=0x31e3f4 | out: lpFindFileData=0x31e3f4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7d749580, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x82ec3e00, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x82ec3e00, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x381d80 [0050.384] FindClose (in: hFindFile=0x381d80 | out: hFindFile=0x381d80) returned 1 [0050.385] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e68c) returned 1 [0050.385] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e698) returned 1 [0050.385] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e6cc) returned 1 [0050.385] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\nb_NO", nBufferLength=0x105, lpBuffer=0x31e1d4, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\nb_NO", lpFilePart=0x0) returned 0x3c [0050.385] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\nb_NO\\", nBufferLength=0x105, lpBuffer=0x31e1a8, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\nb_NO\\", lpFilePart=0x0) returned 0x3d [0050.385] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\nb_NO\\*", lpFindFileData=0x31e3f4 | out: lpFindFileData=0x31e3f4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7d749580, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x82ec3e00, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x82ec3e00, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x381d80 [0050.386] FindClose (in: hFindFile=0x381d80 | out: hFindFile=0x381d80) returned 1 [0050.387] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e68c) returned 1 [0050.387] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e698) returned 1 [0050.387] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e654) returned 1 [0050.387] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\nb_NO\\Services", nBufferLength=0x105, lpBuffer=0x31e15c, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\nb_NO\\Services", lpFilePart=0x0) returned 0x45 [0050.387] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\nb_NO\\Services\\", nBufferLength=0x105, lpBuffer=0x31e130, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\nb_NO\\Services\\", lpFilePart=0x0) returned 0x46 [0050.387] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\nb_NO\\Services\\*", lpFindFileData=0x31e37c | out: lpFindFileData=0x31e37c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x81f71060, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x81fbd320, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x81fbd320, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x381d80 [0050.388] FindClose (in: hFindFile=0x381d80 | out: hFindFile=0x381d80) returned 1 [0050.388] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e614) returned 1 [0050.388] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e620) returned 1 [0050.388] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e654) returned 1 [0050.388] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\nb_NO\\Services", nBufferLength=0x105, lpBuffer=0x31e15c, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\nb_NO\\Services", lpFilePart=0x0) returned 0x45 [0050.388] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\nb_NO\\Services\\", nBufferLength=0x105, lpBuffer=0x31e130, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\nb_NO\\Services\\", lpFilePart=0x0) returned 0x46 [0050.388] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\nb_NO\\Services\\*", lpFindFileData=0x31e37c | out: lpFindFileData=0x31e37c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x81f71060, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x81fbd320, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x81fbd320, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x381d80 [0050.388] FindClose (in: hFindFile=0x381d80 | out: hFindFile=0x381d80) returned 1 [0050.388] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e614) returned 1 [0050.388] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e620) returned 1 [0050.388] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e6cc) returned 1 [0050.388] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\nl_NL", nBufferLength=0x105, lpBuffer=0x31e1d4, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\nl_NL", lpFilePart=0x0) returned 0x3c [0050.388] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\nl_NL\\", nBufferLength=0x105, lpBuffer=0x31e1a8, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\nl_NL\\", lpFilePart=0x0) returned 0x3d [0050.388] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\nl_NL\\*", lpFindFileData=0x31e3f4 | out: lpFindFileData=0x31e3f4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7d795840, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x82ee9f60, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x82ee9f60, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x381d80 [0050.391] FindClose (in: hFindFile=0x381d80 | out: hFindFile=0x381d80) returned 1 [0050.391] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e68c) returned 1 [0050.391] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e698) returned 1 [0050.391] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e6cc) returned 1 [0050.392] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\nl_NL", nBufferLength=0x105, lpBuffer=0x31e1d4, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\nl_NL", lpFilePart=0x0) returned 0x3c [0050.392] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\nl_NL\\", nBufferLength=0x105, lpBuffer=0x31e1a8, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\nl_NL\\", lpFilePart=0x0) returned 0x3d [0050.392] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\nl_NL\\*", lpFindFileData=0x31e3f4 | out: lpFindFileData=0x31e3f4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7d795840, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x82ee9f60, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x82ee9f60, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x381d80 [0050.392] FindClose (in: hFindFile=0x381d80 | out: hFindFile=0x381d80) returned 1 [0050.393] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e68c) returned 1 [0050.393] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e698) returned 1 [0050.393] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e654) returned 1 [0050.393] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\nl_NL\\Services", nBufferLength=0x105, lpBuffer=0x31e15c, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\nl_NL\\Services", lpFilePart=0x0) returned 0x45 [0050.393] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\nl_NL\\Services\\", nBufferLength=0x105, lpBuffer=0x31e130, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\nl_NL\\Services\\", lpFilePart=0x0) returned 0x46 [0050.393] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\nl_NL\\Services\\*", lpFindFileData=0x31e37c | out: lpFindFileData=0x31e37c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x81f4af00, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x81fbd320, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x81fbd320, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x381d80 [0050.395] FindClose (in: hFindFile=0x381d80 | out: hFindFile=0x381d80) returned 1 [0050.395] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e614) returned 1 [0050.395] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e620) returned 1 [0050.395] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e654) returned 1 [0050.395] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\nl_NL\\Services", nBufferLength=0x105, lpBuffer=0x31e15c, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\nl_NL\\Services", lpFilePart=0x0) returned 0x45 [0050.395] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\nl_NL\\Services\\", nBufferLength=0x105, lpBuffer=0x31e130, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\nl_NL\\Services\\", lpFilePart=0x0) returned 0x46 [0050.395] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\nl_NL\\Services\\*", lpFindFileData=0x31e37c | out: lpFindFileData=0x31e37c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x81f4af00, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x81fbd320, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x81fbd320, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x381d80 [0050.395] FindClose (in: hFindFile=0x381d80 | out: hFindFile=0x381d80) returned 1 [0050.395] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e614) returned 1 [0050.395] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e620) returned 1 [0050.395] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e6cc) returned 1 [0050.395] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\pl_PL", nBufferLength=0x105, lpBuffer=0x31e1d4, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\pl_PL", lpFilePart=0x0) returned 0x3c [0050.395] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\pl_PL\\", nBufferLength=0x105, lpBuffer=0x31e1a8, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\pl_PL\\", lpFilePart=0x0) returned 0x3d [0050.395] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\pl_PL\\*", lpFindFileData=0x31e3f4 | out: lpFindFileData=0x31e3f4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7d7bb9a0, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x832c8320, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x832c8320, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x381d80 [0050.405] FindClose (in: hFindFile=0x381d80 | out: hFindFile=0x381d80) returned 1 [0050.406] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e68c) returned 1 [0050.406] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e698) returned 1 [0050.406] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e6cc) returned 1 [0050.406] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\pl_PL", nBufferLength=0x105, lpBuffer=0x31e1d4, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\pl_PL", lpFilePart=0x0) returned 0x3c [0050.406] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\pl_PL\\", nBufferLength=0x105, lpBuffer=0x31e1a8, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\pl_PL\\", lpFilePart=0x0) returned 0x3d [0050.406] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\pl_PL\\*", lpFindFileData=0x31e3f4 | out: lpFindFileData=0x31e3f4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7d7bb9a0, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x832c8320, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x832c8320, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x381d80 [0050.407] FindClose (in: hFindFile=0x381d80 | out: hFindFile=0x381d80) returned 1 [0050.407] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e68c) returned 1 [0050.407] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e698) returned 1 [0050.407] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e654) returned 1 [0050.407] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\pl_PL\\Services", nBufferLength=0x105, lpBuffer=0x31e15c, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\pl_PL\\Services", lpFilePart=0x0) returned 0x45 [0050.407] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\pl_PL\\Services\\", nBufferLength=0x105, lpBuffer=0x31e130, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\pl_PL\\Services\\", lpFilePart=0x0) returned 0x46 [0050.407] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\pl_PL\\Services\\*", lpFindFileData=0x31e37c | out: lpFindFileData=0x31e37c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x81f4af00, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x81fbd320, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x81fbd320, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x381d80 [0050.408] FindClose (in: hFindFile=0x381d80 | out: hFindFile=0x381d80) returned 1 [0050.408] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e614) returned 1 [0050.408] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e620) returned 1 [0050.408] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e654) returned 1 [0050.408] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\pl_PL\\Services", nBufferLength=0x105, lpBuffer=0x31e15c, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\pl_PL\\Services", lpFilePart=0x0) returned 0x45 [0050.408] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\pl_PL\\Services\\", nBufferLength=0x105, lpBuffer=0x31e130, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\pl_PL\\Services\\", lpFilePart=0x0) returned 0x46 [0050.408] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\pl_PL\\Services\\*", lpFindFileData=0x31e37c | out: lpFindFileData=0x31e37c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x81f4af00, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x81fbd320, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x81fbd320, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x381d80 [0050.409] FindClose (in: hFindFile=0x381d80 | out: hFindFile=0x381d80) returned 1 [0050.409] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e614) returned 1 [0050.409] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e620) returned 1 [0050.409] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e6cc) returned 1 [0050.409] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\pt_BR", nBufferLength=0x105, lpBuffer=0x31e1d4, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\pt_BR", lpFilePart=0x0) returned 0x3c [0050.409] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\pt_BR\\", nBufferLength=0x105, lpBuffer=0x31e1a8, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\pt_BR\\", lpFilePart=0x0) returned 0x3d [0050.409] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\pt_BR\\*", lpFindFileData=0x31e3f4 | out: lpFindFileData=0x31e3f4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7d749580, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x82ec3e00, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x82ec3e00, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x381d80 [0050.419] FindClose (in: hFindFile=0x381d80 | out: hFindFile=0x381d80) returned 1 [0050.420] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e68c) returned 1 [0050.420] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e698) returned 1 [0050.420] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e6cc) returned 1 [0050.420] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\pt_BR", nBufferLength=0x105, lpBuffer=0x31e1d4, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\pt_BR", lpFilePart=0x0) returned 0x3c [0050.420] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\pt_BR\\", nBufferLength=0x105, lpBuffer=0x31e1a8, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\pt_BR\\", lpFilePart=0x0) returned 0x3d [0050.420] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\pt_BR\\*", lpFindFileData=0x31e3f4 | out: lpFindFileData=0x31e3f4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7d749580, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x82ec3e00, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x82ec3e00, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x381d80 [0050.421] FindClose (in: hFindFile=0x381d80 | out: hFindFile=0x381d80) returned 1 [0050.421] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e68c) returned 1 [0050.421] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e698) returned 1 [0050.422] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e654) returned 1 [0050.422] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\pt_BR\\Services", nBufferLength=0x105, lpBuffer=0x31e15c, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\pt_BR\\Services", lpFilePart=0x0) returned 0x45 [0050.422] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\pt_BR\\Services\\", nBufferLength=0x105, lpBuffer=0x31e130, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\pt_BR\\Services\\", lpFilePart=0x0) returned 0x46 [0050.422] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\pt_BR\\Services\\*", lpFindFileData=0x31e37c | out: lpFindFileData=0x31e37c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x81f4af00, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x81fbd320, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x81fbd320, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x381d80 [0050.423] FindClose (in: hFindFile=0x381d80 | out: hFindFile=0x381d80) returned 1 [0050.423] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e614) returned 1 [0050.423] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e620) returned 1 [0050.423] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e654) returned 1 [0050.423] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\pt_BR\\Services", nBufferLength=0x105, lpBuffer=0x31e15c, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\pt_BR\\Services", lpFilePart=0x0) returned 0x45 [0050.423] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\pt_BR\\Services\\", nBufferLength=0x105, lpBuffer=0x31e130, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\pt_BR\\Services\\", lpFilePart=0x0) returned 0x46 [0050.423] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\pt_BR\\Services\\*", lpFindFileData=0x31e37c | out: lpFindFileData=0x31e37c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x81f4af00, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x81fbd320, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x81fbd320, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x381d80 [0050.423] FindClose (in: hFindFile=0x381d80 | out: hFindFile=0x381d80) returned 1 [0050.424] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e614) returned 1 [0050.424] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e620) returned 1 [0050.424] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e6cc) returned 1 [0050.424] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\ro_RO", nBufferLength=0x105, lpBuffer=0x31e1d4, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\ro_RO", lpFilePart=0x0) returned 0x3c [0050.424] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\ro_RO\\", nBufferLength=0x105, lpBuffer=0x31e1a8, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\ro_RO\\", lpFilePart=0x0) returned 0x3d [0050.424] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\ro_RO\\*", lpFindFileData=0x31e3f4 | out: lpFindFileData=0x31e3f4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7d7bb9a0, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x832c8320, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x832c8320, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x381d80 [0050.434] FindClose (in: hFindFile=0x381d80 | out: hFindFile=0x381d80) returned 1 [0050.434] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e68c) returned 1 [0050.434] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e698) returned 1 [0050.434] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e6cc) returned 1 [0050.434] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\ro_RO", nBufferLength=0x105, lpBuffer=0x31e1d4, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\ro_RO", lpFilePart=0x0) returned 0x3c [0050.435] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\ro_RO\\", nBufferLength=0x105, lpBuffer=0x31e1a8, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\ro_RO\\", lpFilePart=0x0) returned 0x3d [0050.435] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\ro_RO\\*", lpFindFileData=0x31e3f4 | out: lpFindFileData=0x31e3f4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7d7bb9a0, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x832c8320, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x832c8320, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x381d80 [0050.436] FindClose (in: hFindFile=0x381d80 | out: hFindFile=0x381d80) returned 1 [0050.436] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e68c) returned 1 [0050.436] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e698) returned 1 [0050.436] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e654) returned 1 [0050.436] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\ro_RO\\Services", nBufferLength=0x105, lpBuffer=0x31e15c, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\ro_RO\\Services", lpFilePart=0x0) returned 0x45 [0050.436] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\ro_RO\\Services\\", nBufferLength=0x105, lpBuffer=0x31e130, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\ro_RO\\Services\\", lpFilePart=0x0) returned 0x46 [0050.436] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\ro_RO\\Services\\*", lpFindFileData=0x31e37c | out: lpFindFileData=0x31e37c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x81f4af00, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x81f971c0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x81f971c0, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x381d80 [0050.437] FindClose (in: hFindFile=0x381d80 | out: hFindFile=0x381d80) returned 1 [0050.437] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e614) returned 1 [0050.437] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e620) returned 1 [0050.437] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e654) returned 1 [0050.437] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\ro_RO\\Services", nBufferLength=0x105, lpBuffer=0x31e15c, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\ro_RO\\Services", lpFilePart=0x0) returned 0x45 [0050.437] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\ro_RO\\Services\\", nBufferLength=0x105, lpBuffer=0x31e130, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\ro_RO\\Services\\", lpFilePart=0x0) returned 0x46 [0050.438] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\ro_RO\\Services\\*", lpFindFileData=0x31e37c | out: lpFindFileData=0x31e37c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x81f4af00, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x81f971c0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x81f971c0, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x381d80 [0050.438] FindClose (in: hFindFile=0x381d80 | out: hFindFile=0x381d80) returned 1 [0050.438] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e614) returned 1 [0050.438] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e620) returned 1 [0050.438] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e6cc) returned 1 [0050.438] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\ru_RU", nBufferLength=0x105, lpBuffer=0x31e1d4, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\ru_RU", lpFilePart=0x0) returned 0x3c [0050.438] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\ru_RU\\", nBufferLength=0x105, lpBuffer=0x31e1a8, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\ru_RU\\", lpFilePart=0x0) returned 0x3d [0050.438] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\ru_RU\\*", lpFindFileData=0x31e3f4 | out: lpFindFileData=0x31e3f4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7d7bb9a0, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x832c8320, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x832c8320, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x381d80 [0050.440] FindClose (in: hFindFile=0x381d80 | out: hFindFile=0x381d80) returned 1 [0050.440] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e68c) returned 1 [0050.441] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e698) returned 1 [0050.441] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e6cc) returned 1 [0050.441] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\ru_RU", nBufferLength=0x105, lpBuffer=0x31e1d4, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\ru_RU", lpFilePart=0x0) returned 0x3c [0050.441] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\ru_RU\\", nBufferLength=0x105, lpBuffer=0x31e1a8, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\ru_RU\\", lpFilePart=0x0) returned 0x3d [0050.441] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\ru_RU\\*", lpFindFileData=0x31e3f4 | out: lpFindFileData=0x31e3f4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7d7bb9a0, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x832c8320, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x832c8320, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x381d80 [0050.441] FindClose (in: hFindFile=0x381d80 | out: hFindFile=0x381d80) returned 1 [0050.442] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e68c) returned 1 [0050.442] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e698) returned 1 [0050.442] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e654) returned 1 [0050.442] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\ru_RU\\Services", nBufferLength=0x105, lpBuffer=0x31e15c, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\ru_RU\\Services", lpFilePart=0x0) returned 0x45 [0050.442] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\ru_RU\\Services\\", nBufferLength=0x105, lpBuffer=0x31e130, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\ru_RU\\Services\\", lpFilePart=0x0) returned 0x46 [0050.442] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\ru_RU\\Services\\*", lpFindFileData=0x31e37c | out: lpFindFileData=0x31e37c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x81f4af00, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x81f971c0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x81f971c0, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x381d80 [0050.444] FindClose (in: hFindFile=0x381d80 | out: hFindFile=0x381d80) returned 1 [0050.444] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e614) returned 1 [0050.444] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e620) returned 1 [0050.444] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e654) returned 1 [0050.444] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\ru_RU\\Services", nBufferLength=0x105, lpBuffer=0x31e15c, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\ru_RU\\Services", lpFilePart=0x0) returned 0x45 [0050.444] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\ru_RU\\Services\\", nBufferLength=0x105, lpBuffer=0x31e130, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\ru_RU\\Services\\", lpFilePart=0x0) returned 0x46 [0050.444] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\ru_RU\\Services\\*", lpFindFileData=0x31e37c | out: lpFindFileData=0x31e37c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x81f4af00, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x81f971c0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x81f971c0, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x381d80 [0050.444] FindClose (in: hFindFile=0x381d80 | out: hFindFile=0x381d80) returned 1 [0050.444] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e614) returned 1 [0050.444] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e620) returned 1 [0050.444] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e6cc) returned 1 [0050.444] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\sk_SK", nBufferLength=0x105, lpBuffer=0x31e1d4, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\sk_SK", lpFilePart=0x0) returned 0x3c [0050.444] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\sk_SK\\", nBufferLength=0x105, lpBuffer=0x31e1a8, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\sk_SK\\", lpFilePart=0x0) returned 0x3d [0050.444] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\sk_SK\\*", lpFindFileData=0x31e3f4 | out: lpFindFileData=0x31e3f4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7d7bb9a0, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x832c8320, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x832c8320, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x381d80 [0050.446] FindClose (in: hFindFile=0x381d80 | out: hFindFile=0x381d80) returned 1 [0050.447] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e68c) returned 1 [0050.447] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e698) returned 1 [0050.447] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e6cc) returned 1 [0050.447] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\sk_SK", nBufferLength=0x105, lpBuffer=0x31e1d4, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\sk_SK", lpFilePart=0x0) returned 0x3c [0050.447] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\sk_SK\\", nBufferLength=0x105, lpBuffer=0x31e1a8, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\sk_SK\\", lpFilePart=0x0) returned 0x3d [0050.447] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\sk_SK\\*", lpFindFileData=0x31e3f4 | out: lpFindFileData=0x31e3f4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7d7bb9a0, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x832c8320, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x832c8320, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x381d80 [0050.448] FindClose (in: hFindFile=0x381d80 | out: hFindFile=0x381d80) returned 1 [0050.448] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e68c) returned 1 [0050.448] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e698) returned 1 [0050.448] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e654) returned 1 [0050.448] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\sk_SK\\Services", nBufferLength=0x105, lpBuffer=0x31e15c, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\sk_SK\\Services", lpFilePart=0x0) returned 0x45 [0050.448] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\sk_SK\\Services\\", nBufferLength=0x105, lpBuffer=0x31e130, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\sk_SK\\Services\\", lpFilePart=0x0) returned 0x46 [0050.449] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\sk_SK\\Services\\*", lpFindFileData=0x31e37c | out: lpFindFileData=0x31e37c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x81f4af00, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x81f971c0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x81f971c0, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x381d80 [0050.449] FindClose (in: hFindFile=0x381d80 | out: hFindFile=0x381d80) returned 1 [0050.449] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e614) returned 1 [0050.449] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e620) returned 1 [0050.449] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e654) returned 1 [0050.449] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\sk_SK\\Services", nBufferLength=0x105, lpBuffer=0x31e15c, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\sk_SK\\Services", lpFilePart=0x0) returned 0x45 [0050.450] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\sk_SK\\Services\\", nBufferLength=0x105, lpBuffer=0x31e130, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\sk_SK\\Services\\", lpFilePart=0x0) returned 0x46 [0050.450] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\sk_SK\\Services\\*", lpFindFileData=0x31e37c | out: lpFindFileData=0x31e37c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x81f4af00, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x81f971c0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x81f971c0, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x381d80 [0050.450] FindClose (in: hFindFile=0x381d80 | out: hFindFile=0x381d80) returned 1 [0050.450] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e614) returned 1 [0050.450] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\sl_SI", nBufferLength=0x105, lpBuffer=0x31e1d4, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\sl_SI", lpFilePart=0x0) returned 0x3c [0050.450] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\sl_SI\\", nBufferLength=0x105, lpBuffer=0x31e1a8, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\sl_SI\\", lpFilePart=0x0) returned 0x3d [0050.450] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\sl_SI\\*", lpFindFileData=0x31e3f4 | out: lpFindFileData=0x31e3f4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7d7bb9a0, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x832a21c0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x832a21c0, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x381d80 [0050.461] FindClose (in: hFindFile=0x381d80 | out: hFindFile=0x381d80) returned 1 [0050.462] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\sl_SI", nBufferLength=0x105, lpBuffer=0x31e1d4, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\sl_SI", lpFilePart=0x0) returned 0x3c [0050.462] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\sl_SI\\", nBufferLength=0x105, lpBuffer=0x31e1a8, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\sl_SI\\", lpFilePart=0x0) returned 0x3d [0050.462] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\sl_SI\\*", lpFindFileData=0x31e3f4 | out: lpFindFileData=0x31e3f4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7d7bb9a0, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x832a21c0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x832a21c0, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x381d80 [0050.463] FindClose (in: hFindFile=0x381d80 | out: hFindFile=0x381d80) returned 1 [0050.464] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\sl_SI\\Services", nBufferLength=0x105, lpBuffer=0x31e15c, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\sl_SI\\Services", lpFilePart=0x0) returned 0x45 [0050.464] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\sl_SI\\Services\\", nBufferLength=0x105, lpBuffer=0x31e130, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\sl_SI\\Services\\", lpFilePart=0x0) returned 0x46 [0050.464] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\sl_SI\\Services\\*", lpFindFileData=0x31e37c | out: lpFindFileData=0x31e37c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x81f4af00, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x81f971c0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x81f971c0, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x381d80 [0050.465] FindClose (in: hFindFile=0x381d80 | out: hFindFile=0x381d80) returned 1 [0050.465] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\sl_SI\\Services", nBufferLength=0x105, lpBuffer=0x31e15c, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\sl_SI\\Services", lpFilePart=0x0) returned 0x45 [0050.465] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\sl_SI\\Services\\", nBufferLength=0x105, lpBuffer=0x31e130, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\sl_SI\\Services\\", lpFilePart=0x0) returned 0x46 [0050.465] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\sl_SI\\Services\\*", lpFindFileData=0x31e37c | out: lpFindFileData=0x31e37c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x81f4af00, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x81f971c0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x81f971c0, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x381d80 [0050.465] FindClose (in: hFindFile=0x381d80 | out: hFindFile=0x381d80) returned 1 [0050.465] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\sv_SE", nBufferLength=0x105, lpBuffer=0x31e1d4, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\sv_SE", lpFilePart=0x0) returned 0x3c [0050.465] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\sv_SE\\", nBufferLength=0x105, lpBuffer=0x31e1a8, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\sv_SE\\", lpFilePart=0x0) returned 0x3d [0050.466] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\sv_SE\\*", lpFindFileData=0x31e3f4 | out: lpFindFileData=0x31e3f4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7d749580, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x82ec3e00, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x82ec3e00, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x381d80 [0050.476] FindClose (in: hFindFile=0x381d80 | out: hFindFile=0x381d80) returned 1 [0050.477] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\sv_SE", nBufferLength=0x105, lpBuffer=0x31e1d4, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\sv_SE", lpFilePart=0x0) returned 0x3c [0050.477] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\sv_SE\\", nBufferLength=0x105, lpBuffer=0x31e1a8, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\sv_SE\\", lpFilePart=0x0) returned 0x3d [0050.477] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\sv_SE\\*", lpFindFileData=0x31e3f4 | out: lpFindFileData=0x31e3f4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7d749580, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x82ec3e00, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x82ec3e00, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x381d80 [0050.477] FindClose (in: hFindFile=0x381d80 | out: hFindFile=0x381d80) returned 1 [0050.478] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\sv_SE\\Services", nBufferLength=0x105, lpBuffer=0x31e15c, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\sv_SE\\Services", lpFilePart=0x0) returned 0x45 [0050.478] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\sv_SE\\Services\\", nBufferLength=0x105, lpBuffer=0x31e130, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\sv_SE\\Services\\", lpFilePart=0x0) returned 0x46 [0050.478] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\sv_SE\\Services\\*", lpFindFileData=0x31e37c | out: lpFindFileData=0x31e37c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x81f4af00, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x81f971c0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x81f971c0, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x381d80 [0050.479] FindClose (in: hFindFile=0x381d80 | out: hFindFile=0x381d80) returned 1 [0050.479] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\sv_SE\\Services", nBufferLength=0x105, lpBuffer=0x31e15c, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\sv_SE\\Services", lpFilePart=0x0) returned 0x45 [0050.479] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\sv_SE\\Services\\", nBufferLength=0x105, lpBuffer=0x31e130, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\sv_SE\\Services\\", lpFilePart=0x0) returned 0x46 [0050.479] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\sv_SE\\Services\\*", lpFindFileData=0x31e37c | out: lpFindFileData=0x31e37c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x81f4af00, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x81f971c0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x81f971c0, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x381d80 [0050.479] FindClose (in: hFindFile=0x381d80 | out: hFindFile=0x381d80) returned 1 [0050.479] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\tr_TR", nBufferLength=0x105, lpBuffer=0x31e1d4, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\tr_TR", lpFilePart=0x0) returned 0x3c [0050.479] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\tr_TR\\", nBufferLength=0x105, lpBuffer=0x31e1a8, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\tr_TR\\", lpFilePart=0x0) returned 0x3d [0050.479] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\tr_TR\\*", lpFindFileData=0x31e3f4 | out: lpFindFileData=0x31e3f4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7d795840, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x832a21c0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x832a21c0, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x381d80 [0050.490] FindClose (in: hFindFile=0x381d80 | out: hFindFile=0x381d80) returned 1 [0050.491] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\tr_TR", nBufferLength=0x105, lpBuffer=0x31e1d4, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\tr_TR", lpFilePart=0x0) returned 0x3c [0050.491] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\tr_TR\\", nBufferLength=0x105, lpBuffer=0x31e1a8, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\tr_TR\\", lpFilePart=0x0) returned 0x3d [0050.491] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\tr_TR\\*", lpFindFileData=0x31e3f4 | out: lpFindFileData=0x31e3f4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7d795840, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x832a21c0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x832a21c0, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x381d80 [0050.492] FindClose (in: hFindFile=0x381d80 | out: hFindFile=0x381d80) returned 1 [0050.492] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\tr_TR\\Services", nBufferLength=0x105, lpBuffer=0x31e15c, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\tr_TR\\Services", lpFilePart=0x0) returned 0x45 [0050.492] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\tr_TR\\Services\\", nBufferLength=0x105, lpBuffer=0x31e130, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\tr_TR\\Services\\", lpFilePart=0x0) returned 0x46 [0050.492] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\tr_TR\\Services\\*", lpFindFileData=0x31e37c | out: lpFindFileData=0x31e37c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x81f4af00, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x81f971c0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x81f971c0, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x381d80 [0050.494] FindClose (in: hFindFile=0x381d80 | out: hFindFile=0x381d80) returned 1 [0050.494] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\tr_TR\\Services", nBufferLength=0x105, lpBuffer=0x31e15c, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\tr_TR\\Services", lpFilePart=0x0) returned 0x45 [0050.494] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\tr_TR\\Services\\", nBufferLength=0x105, lpBuffer=0x31e130, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\tr_TR\\Services\\", lpFilePart=0x0) returned 0x46 [0050.494] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\tr_TR\\Services\\*", lpFindFileData=0x31e37c | out: lpFindFileData=0x31e37c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x81f4af00, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x81f971c0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x81f971c0, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x381d80 [0050.494] FindClose (in: hFindFile=0x381d80 | out: hFindFile=0x381d80) returned 1 [0050.494] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\uk_UA", nBufferLength=0x105, lpBuffer=0x31e1d4, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\uk_UA", lpFilePart=0x0) returned 0x3c [0050.494] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\uk_UA\\", nBufferLength=0x105, lpBuffer=0x31e1a8, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\uk_UA\\", lpFilePart=0x0) returned 0x3d [0050.494] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\uk_UA\\*", lpFindFileData=0x31e3f4 | out: lpFindFileData=0x31e3f4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7d795840, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x832a21c0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x832a21c0, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x381d80 [0050.497] FindClose (in: hFindFile=0x381d80 | out: hFindFile=0x381d80) returned 1 [0050.498] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\uk_UA", nBufferLength=0x105, lpBuffer=0x31e1d4, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\uk_UA", lpFilePart=0x0) returned 0x3c [0050.498] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\uk_UA\\", nBufferLength=0x105, lpBuffer=0x31e1a8, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\uk_UA\\", lpFilePart=0x0) returned 0x3d [0050.498] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\uk_UA\\*", lpFindFileData=0x31e3f4 | out: lpFindFileData=0x31e3f4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7d795840, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x832a21c0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x832a21c0, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x381d80 [0050.499] FindClose (in: hFindFile=0x381d80 | out: hFindFile=0x381d80) returned 1 [0050.500] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\uk_UA\\Services", nBufferLength=0x105, lpBuffer=0x31e15c, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\uk_UA\\Services", lpFilePart=0x0) returned 0x45 [0050.500] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\uk_UA\\Services\\", nBufferLength=0x105, lpBuffer=0x31e130, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\uk_UA\\Services\\", lpFilePart=0x0) returned 0x46 [0050.500] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\uk_UA\\Services\\*", lpFindFileData=0x31e37c | out: lpFindFileData=0x31e37c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x81f4af00, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x81f971c0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x81f971c0, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x381d80 [0050.500] FindClose (in: hFindFile=0x381d80 | out: hFindFile=0x381d80) returned 1 [0050.505] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\uk_UA\\Services", nBufferLength=0x105, lpBuffer=0x31e15c, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\uk_UA\\Services", lpFilePart=0x0) returned 0x45 [0050.505] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\uk_UA\\Services\\", nBufferLength=0x105, lpBuffer=0x31e130, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\uk_UA\\Services\\", lpFilePart=0x0) returned 0x46 [0050.505] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\uk_UA\\Services\\*", lpFindFileData=0x31e37c | out: lpFindFileData=0x31e37c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x81f4af00, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x81f971c0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x81f971c0, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x381d80 [0050.505] FindClose (in: hFindFile=0x381d80 | out: hFindFile=0x381d80) returned 1 [0050.505] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\zh_CN", nBufferLength=0x105, lpBuffer=0x31e1d4, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\zh_CN", lpFilePart=0x0) returned 0x3c [0050.505] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\zh_CN\\", nBufferLength=0x105, lpBuffer=0x31e1a8, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\zh_CN\\", lpFilePart=0x0) returned 0x3d [0050.505] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\zh_CN\\*", lpFindFileData=0x31e3f4 | out: lpFindFileData=0x31e3f4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7d6d7160, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x82fce7a0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x82fce7a0, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x381d80 [0050.507] FindClose (in: hFindFile=0x381d80 | out: hFindFile=0x381d80) returned 1 [0050.508] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\zh_CN", nBufferLength=0x105, lpBuffer=0x31e1d4, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\zh_CN", lpFilePart=0x0) returned 0x3c [0050.508] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\zh_CN\\", nBufferLength=0x105, lpBuffer=0x31e1a8, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\zh_CN\\", lpFilePart=0x0) returned 0x3d [0050.508] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\zh_CN\\*", lpFindFileData=0x31e3f4 | out: lpFindFileData=0x31e3f4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7d6d7160, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x82fce7a0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x82fce7a0, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x381d80 [0050.509] FindClose (in: hFindFile=0x381d80 | out: hFindFile=0x381d80) returned 1 [0050.510] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\zh_CN\\Services", nBufferLength=0x105, lpBuffer=0x31e15c, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\zh_CN\\Services", lpFilePart=0x0) returned 0x45 [0050.510] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\zh_CN\\Services\\", nBufferLength=0x105, lpBuffer=0x31e130, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\zh_CN\\Services\\", lpFilePart=0x0) returned 0x46 [0050.510] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\zh_CN\\Services\\*", lpFindFileData=0x31e37c | out: lpFindFileData=0x31e37c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x81f4af00, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x81f971c0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x81f971c0, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x381d80 [0050.511] FindClose (in: hFindFile=0x381d80 | out: hFindFile=0x381d80) returned 1 [0050.511] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\zh_CN\\Services", nBufferLength=0x105, lpBuffer=0x31e15c, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\zh_CN\\Services", lpFilePart=0x0) returned 0x45 [0050.511] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\zh_CN\\Services\\", nBufferLength=0x105, lpBuffer=0x31e130, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\zh_CN\\Services\\", lpFilePart=0x0) returned 0x46 [0050.511] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\zh_CN\\Services\\*", lpFindFileData=0x31e37c | out: lpFindFileData=0x31e37c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x81f4af00, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x81f971c0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x81f971c0, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x381d80 [0050.511] FindClose (in: hFindFile=0x381d80 | out: hFindFile=0x381d80) returned 1 [0050.511] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\zh_TW", nBufferLength=0x105, lpBuffer=0x31e1d4, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\zh_TW", lpFilePart=0x0) returned 0x3c [0050.512] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\zh_TW\\", nBufferLength=0x105, lpBuffer=0x31e1a8, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\zh_TW\\", lpFilePart=0x0) returned 0x3d [0050.512] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\zh_TW\\*", lpFindFileData=0x31e3f4 | out: lpFindFileData=0x31e3f4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7d618a80, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x82fce7a0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x82fce7a0, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x381d80 [0050.513] FindClose (in: hFindFile=0x381d80 | out: hFindFile=0x381d80) returned 1 [0050.514] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\zh_TW", nBufferLength=0x105, lpBuffer=0x31e1d4, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\zh_TW", lpFilePart=0x0) returned 0x3c [0050.514] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\zh_TW\\", nBufferLength=0x105, lpBuffer=0x31e1a8, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\zh_TW\\", lpFilePart=0x0) returned 0x3d [0050.514] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\zh_TW\\*", lpFindFileData=0x31e3f4 | out: lpFindFileData=0x31e3f4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7d618a80, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x82fce7a0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x82fce7a0, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x381d80 [0050.515] FindClose (in: hFindFile=0x381d80 | out: hFindFile=0x381d80) returned 1 [0050.515] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\zh_TW\\Services", nBufferLength=0x105, lpBuffer=0x31e15c, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\zh_TW\\Services", lpFilePart=0x0) returned 0x45 [0050.515] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\zh_TW\\Services\\", nBufferLength=0x105, lpBuffer=0x31e130, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\zh_TW\\Services\\", lpFilePart=0x0) returned 0x46 [0050.516] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\zh_TW\\Services\\*", lpFindFileData=0x31e37c | out: lpFindFileData=0x31e37c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x81f24da0, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x81f971c0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x81f971c0, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x381d80 [0050.516] FindClose (in: hFindFile=0x381d80 | out: hFindFile=0x381d80) returned 1 [0050.516] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\zh_TW\\Services", nBufferLength=0x105, lpBuffer=0x31e15c, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\zh_TW\\Services", lpFilePart=0x0) returned 0x45 [0050.516] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\zh_TW\\Services\\", nBufferLength=0x105, lpBuffer=0x31e130, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\zh_TW\\Services\\", lpFilePart=0x0) returned 0x46 [0050.516] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Locale\\zh_TW\\Services\\*", lpFindFileData=0x31e37c | out: lpFindFileData=0x31e37c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x81f24da0, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x81f971c0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x81f971c0, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x381d80 [0050.517] FindClose (in: hFindFile=0x381d80 | out: hFindFile=0x381d80) returned 1 [0050.517] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins", nBufferLength=0x105, lpBuffer=0x31e24c, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins", lpFilePart=0x0) returned 0x38 [0050.517] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\", nBufferLength=0x105, lpBuffer=0x31e220, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\", lpFilePart=0x0) returned 0x39 [0050.517] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\*", lpFindFileData=0x31e46c | out: lpFindFileData=0x31e46c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7cfb2f60, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x82ff4900, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x82ff4900, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x381d80 [0050.518] FindClose (in: hFindFile=0x381d80 | out: hFindFile=0x381d80) returned 1 [0050.518] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins", nBufferLength=0x105, lpBuffer=0x31e24c, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins", lpFilePart=0x0) returned 0x38 [0050.518] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\", nBufferLength=0x105, lpBuffer=0x31e220, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\", lpFilePart=0x0) returned 0x39 [0050.518] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\*", lpFindFileData=0x31e46c | out: lpFindFileData=0x31e46c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7cfb2f60, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x82ff4900, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x82ff4900, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x381d80 [0050.519] FindClose (in: hFindFile=0x381d80 | out: hFindFile=0x381d80) returned 1 [0050.520] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\AcroForm", nBufferLength=0x105, lpBuffer=0x31e1d4, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\AcroForm", lpFilePart=0x0) returned 0x41 [0050.520] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\AcroForm\\", nBufferLength=0x105, lpBuffer=0x31e1a8, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\AcroForm\\", lpFilePart=0x0) returned 0x42 [0050.520] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\AcroForm\\*", lpFindFileData=0x31e3f4 | out: lpFindFileData=0x31e3f4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x82e05720, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x82e519e0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x82e519e0, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x381d80 [0050.521] FindClose (in: hFindFile=0x381d80 | out: hFindFile=0x381d80) returned 1 [0050.521] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\AcroForm", nBufferLength=0x105, lpBuffer=0x31e1d4, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\AcroForm", lpFilePart=0x0) returned 0x41 [0050.521] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\AcroForm\\", nBufferLength=0x105, lpBuffer=0x31e1a8, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\AcroForm\\", lpFilePart=0x0) returned 0x42 [0050.521] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\AcroForm\\*", lpFindFileData=0x31e3f4 | out: lpFindFileData=0x31e3f4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x82e05720, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x82e519e0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x82e519e0, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x381d80 [0050.521] FindClose (in: hFindFile=0x381d80 | out: hFindFile=0x381d80) returned 1 [0050.521] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\AcroForm\\PMP", nBufferLength=0x105, lpBuffer=0x31e15c, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\AcroForm\\PMP", lpFilePart=0x0) returned 0x45 [0050.521] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\AcroForm\\PMP\\", nBufferLength=0x105, lpBuffer=0x31e130, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\AcroForm\\PMP\\", lpFilePart=0x0) returned 0x46 [0050.521] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\AcroForm\\PMP\\*", lpFindFileData=0x31e37c | out: lpFindFileData=0x31e37c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x82e519e0, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x82ff4900, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x82ff4900, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x381d80 [0050.531] FindClose (in: hFindFile=0x381d80 | out: hFindFile=0x381d80) returned 1 [0050.531] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\AcroForm\\PMP", nBufferLength=0x105, lpBuffer=0x31e15c, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\AcroForm\\PMP", lpFilePart=0x0) returned 0x45 [0050.532] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\AcroForm\\PMP\\", nBufferLength=0x105, lpBuffer=0x31e130, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\AcroForm\\PMP\\", lpFilePart=0x0) returned 0x46 [0050.532] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\AcroForm\\PMP\\*", lpFindFileData=0x31e37c | out: lpFindFileData=0x31e37c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x82e519e0, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x82ff4900, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x82ff4900, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x381d80 [0050.532] FindClose (in: hFindFile=0x381d80 | out: hFindFile=0x381d80) returned 1 [0050.532] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations", nBufferLength=0x105, lpBuffer=0x31e1d4, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations", lpFilePart=0x0) returned 0x44 [0050.532] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\", nBufferLength=0x105, lpBuffer=0x31e1a8, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\", lpFilePart=0x0) returned 0x45 [0050.532] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\*", lpFindFileData=0x31e3f4 | out: lpFindFileData=0x31e3f4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7f804400, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x7f804400, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x7f804400, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x381d80 [0050.533] FindClose (in: hFindFile=0x381d80 | out: hFindFile=0x381d80) returned 1 [0050.533] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations", nBufferLength=0x105, lpBuffer=0x31e1d4, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations", lpFilePart=0x0) returned 0x44 [0050.533] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\", nBufferLength=0x105, lpBuffer=0x31e1a8, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\", lpFilePart=0x0) returned 0x45 [0050.533] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\*", lpFindFileData=0x31e3f4 | out: lpFindFileData=0x31e3f4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7f804400, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x7f804400, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x7f804400, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x381d80 [0050.533] FindClose (in: hFindFile=0x381d80 | out: hFindFile=0x381d80) returned 1 [0050.533] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps", nBufferLength=0x105, lpBuffer=0x31e15c, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps", lpFilePart=0x0) returned 0x4b [0050.533] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\", nBufferLength=0x105, lpBuffer=0x31e130, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\", lpFilePart=0x0) returned 0x4c [0050.533] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\*", lpFindFileData=0x31e37c | out: lpFindFileData=0x31e37c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7f804400, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x81eb2980, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x81eb2980, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x381d80 [0050.544] FindClose (in: hFindFile=0x381d80 | out: hFindFile=0x381d80) returned 1 [0050.545] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps", nBufferLength=0x105, lpBuffer=0x31e15c, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps", lpFilePart=0x0) returned 0x4b [0050.545] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\", nBufferLength=0x105, lpBuffer=0x31e130, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\", lpFilePart=0x0) returned 0x4c [0050.545] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\*", lpFindFileData=0x31e37c | out: lpFindFileData=0x31e37c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7f804400, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x81eb2980, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x81eb2980, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x381d80 [0050.545] FindClose (in: hFindFile=0x381d80 | out: hFindFile=0x381d80) returned 1 [0050.546] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\Words.pdf", nBufferLength=0x105, lpBuffer=0x31e02c, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\Words.pdf", lpFilePart=0x0) returned 0x55 [0050.546] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\Words.pdf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\words.pdf"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x274 [0050.547] GetFileType (hFile=0x274) returned 0x1 [0050.547] GetFileType (hFile=0x274) returned 0x1 [0050.547] GetFileSize (in: hFile=0x274, lpFileSizeHigh=0x31e628 | out: lpFileSizeHigh=0x31e628*=0x0) returned 0x1b772 [0050.547] ReadFile (in: hFile=0x274, lpBuffer=0x3777d30, nNumberOfBytesToRead=0x1b772, lpNumberOfBytesRead=0x31e5d4, lpOverlapped=0x0 | out: lpBuffer=0x3777d30*, lpNumberOfBytesRead=0x31e5d4*=0x1b772, lpOverlapped=0x0) returned 1 [0050.569] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\Words.pdf", nBufferLength=0x105, lpBuffer=0x31e018, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\Words.pdf", lpFilePart=0x0) returned 0x55 [0050.569] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\Words.pdf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\words.pdf"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x274 [0050.571] GetFileType (hFile=0x274) returned 0x1 [0050.571] GetFileType (hFile=0x274) returned 0x1 [0050.571] WriteFile (in: hFile=0x274, lpBuffer=0x38012e0*, nNumberOfBytesToWrite=0x1b780, lpNumberOfBytesWritten=0x31e5c8, lpOverlapped=0x0 | out: lpBuffer=0x38012e0*, lpNumberOfBytesWritten=0x31e5c8*=0x1b780, lpOverlapped=0x0) returned 1 [0050.573] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\Words.pdf", nBufferLength=0x105, lpBuffer=0x31e14c, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\Words.pdf", lpFilePart=0x0) returned 0x55 [0050.573] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\Words.pdf", nBufferLength=0x105, lpBuffer=0x31e14c, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\Words.pdf", lpFilePart=0x0) returned 0x55 [0050.574] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\Words.pdf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\words.pdf"), fInfoLevelId=0x0, lpFileInformation=0x31e628 | out: lpFileInformation=0x31e628*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x950fa000, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7fe69f20, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x197cd60, ftLastWriteTime.dwHighDateTime=0x1d6eb7f, nFileSizeHigh=0x0, nFileSizeLow=0x1b780)) returned 1 [0050.574] MoveFileW (lpExistingFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\Words.pdf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\words.pdf"), lpNewFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\Words.pdf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\words.pdf")) returned 1 [0050.574] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\CAT", nBufferLength=0x105, lpBuffer=0x31e0e4, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\CAT", lpFilePart=0x0) returned 0x4f [0050.574] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\CAT\\", nBufferLength=0x105, lpBuffer=0x31e0b8, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\CAT\\", lpFilePart=0x0) returned 0x50 [0050.574] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\CAT\\*", lpFindFileData=0x31e304 | out: lpFindFileData=0x31e304*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x81eb2980, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x81eb2980, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x81eb2980, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x381f80 [0050.578] FindClose (in: hFindFile=0x381f80 | out: hFindFile=0x381f80) returned 1 [0050.579] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\CAT", nBufferLength=0x105, lpBuffer=0x31e0e4, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\CAT", lpFilePart=0x0) returned 0x4f [0050.579] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\CAT\\", nBufferLength=0x105, lpBuffer=0x31e0b8, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\CAT\\", lpFilePart=0x0) returned 0x50 [0050.579] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\CAT\\*", lpFindFileData=0x31e304 | out: lpFindFileData=0x31e304*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x81eb2980, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x81eb2980, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x81eb2980, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x381f80 [0050.580] FindClose (in: hFindFile=0x381f80 | out: hFindFile=0x381f80) returned 1 [0050.580] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\CAT\\Dynamic.pdf", nBufferLength=0x105, lpBuffer=0x31dfb4, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\CAT\\Dynamic.pdf", lpFilePart=0x0) returned 0x5b [0050.580] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\CAT\\Dynamic.pdf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\cat\\dynamic.pdf"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x274 [0050.581] GetFileType (hFile=0x274) returned 0x1 [0050.581] GetFileType (hFile=0x274) returned 0x1 [0050.581] GetFileSize (in: hFile=0x274, lpFileSizeHigh=0x31e5b0 | out: lpFileSizeHigh=0x31e5b0*=0x0) returned 0xcdd8 [0050.581] ReadFile (in: hFile=0x274, lpBuffer=0x27c07b8, nNumberOfBytesToRead=0xcdd8, lpNumberOfBytesRead=0x31e55c, lpOverlapped=0x0 | out: lpBuffer=0x27c07b8*, lpNumberOfBytesRead=0x31e55c*=0xcdd8, lpOverlapped=0x0) returned 1 [0050.608] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\CAT\\Dynamic.pdf", nBufferLength=0x105, lpBuffer=0x31dfa0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\CAT\\Dynamic.pdf", lpFilePart=0x0) returned 0x5b [0050.608] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\CAT\\Dynamic.pdf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\cat\\dynamic.pdf"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x274 [0050.609] GetFileType (hFile=0x274) returned 0x1 [0050.609] GetFileType (hFile=0x274) returned 0x1 [0050.610] WriteFile (in: hFile=0x274, lpBuffer=0x263e244*, nNumberOfBytesToWrite=0xcde0, lpNumberOfBytesWritten=0x31e550, lpOverlapped=0x0 | out: lpBuffer=0x263e244*, lpNumberOfBytesWritten=0x31e550*=0xcde0, lpOverlapped=0x0) returned 1 [0050.612] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\CAT\\Dynamic.pdf", nBufferLength=0x105, lpBuffer=0x31e0d4, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\CAT\\Dynamic.pdf", lpFilePart=0x0) returned 0x5b [0050.612] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\CAT\\Dynamic.pdf", nBufferLength=0x105, lpBuffer=0x31e0d4, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\CAT\\Dynamic.pdf", lpFilePart=0x0) returned 0x5b [0050.612] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\CAT\\Dynamic.pdf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\cat\\dynamic.pdf"), fInfoLevelId=0x0, lpFileInformation=0x31e5b0 | out: lpFileInformation=0x31e5b0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9c36ae00, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x81eb2980, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x19ef180, ftLastWriteTime.dwHighDateTime=0x1d6eb7f, nFileSizeHigh=0x0, nFileSizeLow=0xcde0)) returned 1 [0050.612] MoveFileW (lpExistingFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\CAT\\Dynamic.pdf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\cat\\dynamic.pdf"), lpNewFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\CAT\\Dynamic.pdf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\cat\\dynamic.pdf")) returned 1 [0050.612] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\CAT\\Faces.pdf", nBufferLength=0x105, lpBuffer=0x31dfb4, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\CAT\\Faces.pdf", lpFilePart=0x0) returned 0x59 [0050.612] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\CAT\\Faces.pdf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\cat\\faces.pdf"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x274 [0050.613] GetFileType (hFile=0x274) returned 0x1 [0050.613] GetFileType (hFile=0x274) returned 0x1 [0050.613] GetFileSize (in: hFile=0x274, lpFileSizeHigh=0x31e5b0 | out: lpFileSizeHigh=0x31e5b0*=0x0) returned 0x892d [0050.613] ReadFile (in: hFile=0x274, lpBuffer=0x264b450, nNumberOfBytesToRead=0x892d, lpNumberOfBytesRead=0x31e55c, lpOverlapped=0x0 | out: lpBuffer=0x264b450*, lpNumberOfBytesRead=0x31e55c*=0x892d, lpOverlapped=0x0) returned 1 [0050.655] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\CAT\\Faces.pdf", nBufferLength=0x105, lpBuffer=0x31dfa0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\CAT\\Faces.pdf", lpFilePart=0x0) returned 0x59 [0050.655] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\CAT\\Faces.pdf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\cat\\faces.pdf"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x274 [0050.658] GetFileType (hFile=0x274) returned 0x1 [0050.658] GetFileType (hFile=0x274) returned 0x1 [0050.658] WriteFile (in: hFile=0x274, lpBuffer=0x26c3184*, nNumberOfBytesToWrite=0x8930, lpNumberOfBytesWritten=0x31e550, lpOverlapped=0x0 | out: lpBuffer=0x26c3184*, lpNumberOfBytesWritten=0x31e550*=0x8930, lpOverlapped=0x0) returned 1 [0050.660] MoveFileW (lpExistingFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\CAT\\Faces.pdf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\cat\\faces.pdf"), lpNewFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\CAT\\Faces.pdf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\cat\\faces.pdf")) returned 1 [0050.660] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\CAT\\Pointers.pdf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\cat\\pointers.pdf"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x274 [0050.661] GetFileType (hFile=0x274) returned 0x1 [0050.661] GetFileType (hFile=0x274) returned 0x1 [0050.661] GetFileSize (in: hFile=0x274, lpFileSizeHigh=0x31e5b0 | out: lpFileSizeHigh=0x31e5b0*=0x0) returned 0xc084 [0050.661] ReadFile (in: hFile=0x274, lpBuffer=0x26cbee0, nNumberOfBytesToRead=0xc084, lpNumberOfBytesRead=0x31e55c, lpOverlapped=0x0 | out: lpBuffer=0x26cbee0*, lpNumberOfBytesRead=0x31e55c*=0xc084, lpOverlapped=0x0) returned 1 [0050.679] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\CAT\\Pointers.pdf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\cat\\pointers.pdf"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x274 [0050.680] GetFileType (hFile=0x274) returned 0x1 [0050.680] GetFileType (hFile=0x274) returned 0x1 [0050.680] WriteFile (in: hFile=0x274, lpBuffer=0x273ce88*, nNumberOfBytesToWrite=0xc090, lpNumberOfBytesWritten=0x31e550, lpOverlapped=0x0 | out: lpBuffer=0x273ce88*, lpNumberOfBytesWritten=0x31e550*=0xc090, lpOverlapped=0x0) returned 1 [0050.681] MoveFileW (lpExistingFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\CAT\\Pointers.pdf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\cat\\pointers.pdf"), lpNewFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\CAT\\Pointers.pdf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\cat\\pointers.pdf")) returned 1 [0050.682] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\CAT\\SignHere.pdf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\cat\\signhere.pdf"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x274 [0050.682] GetFileType (hFile=0x274) returned 0x1 [0050.682] GetFileType (hFile=0x274) returned 0x1 [0050.682] GetFileSize (in: hFile=0x274, lpFileSizeHigh=0x31e5b0 | out: lpFileSizeHigh=0x31e5b0*=0x0) returned 0x8c96 [0050.682] ReadFile (in: hFile=0x274, lpBuffer=0x2749364, nNumberOfBytesToRead=0x8c96, lpNumberOfBytesRead=0x31e55c, lpOverlapped=0x0 | out: lpBuffer=0x2749364*, lpNumberOfBytesRead=0x31e55c*=0x8c96, lpOverlapped=0x0) returned 1 [0050.698] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\CAT\\SignHere.pdf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\cat\\signhere.pdf"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x274 [0050.707] GetFileType (hFile=0x274) returned 0x1 [0050.707] GetFileType (hFile=0x274) returned 0x1 [0050.708] WriteFile (in: hFile=0x274, lpBuffer=0x27c206c*, nNumberOfBytesToWrite=0x8ca0, lpNumberOfBytesWritten=0x31e550, lpOverlapped=0x0 | out: lpBuffer=0x27c206c*, lpNumberOfBytesWritten=0x31e550*=0x8ca0, lpOverlapped=0x0) returned 1 [0050.717] MoveFileW (lpExistingFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\CAT\\SignHere.pdf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\cat\\signhere.pdf"), lpNewFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\CAT\\SignHere.pdf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\cat\\signhere.pdf")) returned 1 [0050.717] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\CAT\\Standard.pdf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\cat\\standard.pdf"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x274 [0050.718] GetFileType (hFile=0x274) returned 0x1 [0050.718] GetFileType (hFile=0x274) returned 0x1 [0050.718] GetFileSize (in: hFile=0x274, lpFileSizeHigh=0x31e5b0 | out: lpFileSizeHigh=0x31e5b0*=0x0) returned 0x2eb9e [0050.718] ReadFile (in: hFile=0x274, lpBuffer=0x384e760, nNumberOfBytesToRead=0x2eb9e, lpNumberOfBytesRead=0x31e55c, lpOverlapped=0x0 | out: lpBuffer=0x384e760*, lpNumberOfBytesRead=0x31e55c*=0x2eb9e, lpOverlapped=0x0) returned 1 [0050.750] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e494) returned 1 [0050.750] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\CAT\\Standard.pdf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\cat\\standard.pdf"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x274 [0050.752] GetFileType (hFile=0x274) returned 0x1 [0050.752] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e490) returned 1 [0050.752] GetFileType (hFile=0x274) returned 0x1 [0050.752] WriteFile (in: hFile=0x274, lpBuffer=0x387d320*, nNumberOfBytesToWrite=0x2eba0, lpNumberOfBytesWritten=0x31e550, lpOverlapped=0x0 | out: lpBuffer=0x387d320*, lpNumberOfBytesWritten=0x31e550*=0x2eba0, lpOverlapped=0x0) returned 1 [0050.756] CloseHandle (hObject=0x274) returned 1 [0050.756] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\CAT\\Standard.pdf", nBufferLength=0x105, lpBuffer=0x31e0d4, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\CAT\\Standard.pdf", lpFilePart=0x0) returned 0x5c [0050.756] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\CAT\\Standard.pdf", nBufferLength=0x105, lpBuffer=0x31e0d4, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\CAT\\Standard.pdf", lpFilePart=0x0) returned 0x5c [0050.756] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e534) returned 1 [0050.756] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\CAT\\Standard.pdf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\cat\\standard.pdf"), fInfoLevelId=0x0, lpFileInformation=0x31e5b0 | out: lpFileInformation=0x31e5b0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9c36ae00, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x81eb2980, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x1b45de0, ftLastWriteTime.dwHighDateTime=0x1d6eb7f, nFileSizeHigh=0x0, nFileSizeLow=0x2eba0)) returned 1 [0050.756] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e530) returned 1 [0050.756] MoveFileW (lpExistingFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\CAT\\Standard.pdf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\cat\\standard.pdf"), lpNewFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\CAT\\Standard.pdf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\cat\\standard.pdf")) returned 1 [0050.757] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\CAT\\StandardBusiness.pdf", nBufferLength=0x105, lpBuffer=0x31dfb4, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\CAT\\StandardBusiness.pdf", lpFilePart=0x0) returned 0x64 [0050.757] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e4a8) returned 1 [0050.757] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\CAT\\StandardBusiness.pdf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\cat\\standardbusiness.pdf"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x274 [0050.757] GetFileType (hFile=0x274) returned 0x1 [0050.757] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e4a4) returned 1 [0050.757] GetFileType (hFile=0x274) returned 0x1 [0050.757] GetFileSize (in: hFile=0x274, lpFileSizeHigh=0x31e5b0 | out: lpFileSizeHigh=0x31e5b0*=0x0) returned 0x9a88d [0050.757] ReadFile (in: hFile=0x274, lpBuffer=0x36194b0, nNumberOfBytesToRead=0x9a88d, lpNumberOfBytesRead=0x31e55c, lpOverlapped=0x0 | out: lpBuffer=0x36194b0*, lpNumberOfBytesRead=0x31e55c*=0x9a88d, lpOverlapped=0x0) returned 1 [0050.771] CloseHandle (hObject=0x274) returned 1 [0050.831] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\CAT\\StandardBusiness.pdf", nBufferLength=0x105, lpBuffer=0x31dfa0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\CAT\\StandardBusiness.pdf", lpFilePart=0x0) returned 0x64 [0050.831] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e494) returned 1 [0050.831] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\CAT\\StandardBusiness.pdf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\cat\\standardbusiness.pdf"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x274 [0050.836] GetFileType (hFile=0x274) returned 0x1 [0050.837] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e490) returned 1 [0050.837] GetFileType (hFile=0x274) returned 0x1 [0050.837] WriteFile (in: hFile=0x274, lpBuffer=0x36b3d60*, nNumberOfBytesToWrite=0x9a890, lpNumberOfBytesWritten=0x31e550, lpOverlapped=0x0 | out: lpBuffer=0x36b3d60*, lpNumberOfBytesWritten=0x31e550*=0x9a890, lpOverlapped=0x0) returned 1 [0050.847] CloseHandle (hObject=0x274) returned 1 [0050.848] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\CAT\\StandardBusiness.pdf", nBufferLength=0x105, lpBuffer=0x31e0d4, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\CAT\\StandardBusiness.pdf", lpFilePart=0x0) returned 0x64 [0050.848] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\CAT\\StandardBusiness.pdf", nBufferLength=0x105, lpBuffer=0x31e0d4, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\CAT\\StandardBusiness.pdf", lpFilePart=0x0) returned 0x64 [0050.848] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e534) returned 1 [0050.848] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\CAT\\StandardBusiness.pdf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\cat\\standardbusiness.pdf"), fInfoLevelId=0x0, lpFileInformation=0x31e5b0 | out: lpFileInformation=0x31e5b0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9c36ae00, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x81eb2980, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x1c2a620, ftLastWriteTime.dwHighDateTime=0x1d6eb7f, nFileSizeHigh=0x0, nFileSizeLow=0x9a890)) returned 1 [0050.848] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e530) returned 1 [0050.848] MoveFileW (lpExistingFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\CAT\\StandardBusiness.pdf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\cat\\standardbusiness.pdf"), lpNewFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\CAT\\StandardBusiness.pdf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\cat\\standardbusiness.pdf")) returned 1 [0050.848] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e5dc) returned 1 [0050.848] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\CHS", nBufferLength=0x105, lpBuffer=0x31e0e4, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\CHS", lpFilePart=0x0) returned 0x4f [0050.848] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\CHS\\", nBufferLength=0x105, lpBuffer=0x31e0b8, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\CHS\\", lpFilePart=0x0) returned 0x50 [0050.848] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\CHS\\*", lpFindFileData=0x31e304 | out: lpFindFileData=0x31e304*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8000ce40, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x8000ce40, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x8000ce40, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x381d40 [0050.858] FindNextFileW (in: hFindFile=0x381d40, lpFindFileData=0x31e314 | out: lpFindFileData=0x31e314*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8000ce40, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x8000ce40, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x8000ce40, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0050.858] FindNextFileW (in: hFindFile=0x381d40, lpFindFileData=0x31e314 | out: lpFindFileData=0x31e314*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x99d45400, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x8000ce40, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x99d45400, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x13e0e, dwReserved0=0x0, dwReserved1=0x0, cFileName="Dynamic.pdf", cAlternateFileName="")) returned 1 [0050.858] FindNextFileW (in: hFindFile=0x381d40, lpFindFileData=0x31e314 | out: lpFindFileData=0x31e314*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x99d45400, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x8000ce40, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x99d45400, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0xaf90, dwReserved0=0x0, dwReserved1=0x0, cFileName="Hanko.pdf", cAlternateFileName="")) returned 1 [0050.858] FindNextFileW (in: hFindFile=0x381d40, lpFindFileData=0x31e314 | out: lpFindFileData=0x31e314*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x99d45400, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x8000ce40, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x99d45400, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0xc0af, dwReserved0=0x0, dwReserved1=0x0, cFileName="SignHere.pdf", cAlternateFileName="")) returned 1 [0050.859] FindNextFileW (in: hFindFile=0x381d40, lpFindFileData=0x31e314 | out: lpFindFileData=0x31e314*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x99d45400, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x8000ce40, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x99d45400, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x217ce, dwReserved0=0x0, dwReserved1=0x0, cFileName="StandardBusiness.pdf", cAlternateFileName="STANDA~1.PDF")) returned 1 [0050.859] FindNextFileW (in: hFindFile=0x381d40, lpFindFileData=0x31e314 | out: lpFindFileData=0x31e314*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0050.859] FindClose (in: hFindFile=0x381d40 | out: hFindFile=0x381d40) returned 1 [0050.859] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e59c) returned 1 [0050.859] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e5a8) returned 1 [0050.859] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e5dc) returned 1 [0050.859] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\CHS", nBufferLength=0x105, lpBuffer=0x31e0e4, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\CHS", lpFilePart=0x0) returned 0x4f [0050.859] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\CHS\\", nBufferLength=0x105, lpBuffer=0x31e0b8, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\CHS\\", lpFilePart=0x0) returned 0x50 [0050.859] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\CHS\\*", lpFindFileData=0x31e304 | out: lpFindFileData=0x31e304*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8000ce40, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x8000ce40, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x8000ce40, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x381d40 [0050.859] FindNextFileW (in: hFindFile=0x381d40, lpFindFileData=0x31e314 | out: lpFindFileData=0x31e314*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8000ce40, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x8000ce40, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x8000ce40, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0050.860] FindNextFileW (in: hFindFile=0x381d40, lpFindFileData=0x31e314 | out: lpFindFileData=0x31e314*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x99d45400, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x8000ce40, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x99d45400, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x13e0e, dwReserved0=0x0, dwReserved1=0x0, cFileName="Dynamic.pdf", cAlternateFileName="")) returned 1 [0050.860] FindNextFileW (in: hFindFile=0x381d40, lpFindFileData=0x31e314 | out: lpFindFileData=0x31e314*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x99d45400, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x8000ce40, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x99d45400, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0xaf90, dwReserved0=0x0, dwReserved1=0x0, cFileName="Hanko.pdf", cAlternateFileName="")) returned 1 [0050.860] FindNextFileW (in: hFindFile=0x381d40, lpFindFileData=0x31e314 | out: lpFindFileData=0x31e314*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x99d45400, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x8000ce40, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x99d45400, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0xc0af, dwReserved0=0x0, dwReserved1=0x0, cFileName="SignHere.pdf", cAlternateFileName="")) returned 1 [0050.860] FindNextFileW (in: hFindFile=0x381d40, lpFindFileData=0x31e314 | out: lpFindFileData=0x31e314*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x99d45400, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x8000ce40, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x99d45400, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x217ce, dwReserved0=0x0, dwReserved1=0x0, cFileName="StandardBusiness.pdf", cAlternateFileName="STANDA~1.PDF")) returned 1 [0050.860] FindNextFileW (in: hFindFile=0x381d40, lpFindFileData=0x31e314 | out: lpFindFileData=0x31e314*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x99d45400, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x8000ce40, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x99d45400, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x217ce, dwReserved0=0x0, dwReserved1=0x0, cFileName="StandardBusiness.pdf", cAlternateFileName="STANDA~1.PDF")) returned 0 [0050.860] FindClose (in: hFindFile=0x381d40 | out: hFindFile=0x381d40) returned 1 [0050.860] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e59c) returned 1 [0050.860] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e5a8) returned 1 [0050.860] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\CHS\\Dynamic.pdf", nBufferLength=0x105, lpBuffer=0x31dfb4, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\CHS\\Dynamic.pdf", lpFilePart=0x0) returned 0x5b [0050.860] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e4a8) returned 1 [0050.860] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\CHS\\Dynamic.pdf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\chs\\dynamic.pdf"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x274 [0050.883] GetFileType (hFile=0x274) returned 0x1 [0050.883] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e4a4) returned 1 [0050.883] GetFileType (hFile=0x274) returned 0x1 [0050.884] GetFileSize (in: hFile=0x274, lpFileSizeHigh=0x31e5b0 | out: lpFileSizeHigh=0x31e5b0*=0x0) returned 0x13e0e [0050.884] ReadFile (in: hFile=0x274, lpBuffer=0x2632e84, nNumberOfBytesToRead=0x13e0e, lpNumberOfBytesRead=0x31e55c, lpOverlapped=0x0 | out: lpBuffer=0x2632e84*, lpNumberOfBytesRead=0x31e55c*=0x13e0e, lpOverlapped=0x0) returned 1 [0050.897] CloseHandle (hObject=0x274) returned 1 [0051.016] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\CHS\\Dynamic.pdf", nBufferLength=0x105, lpBuffer=0x31dfa0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\CHS\\Dynamic.pdf", lpFilePart=0x0) returned 0x5b [0051.016] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e494) returned 1 [0051.016] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\CHS\\Dynamic.pdf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\chs\\dynamic.pdf"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x274 [0051.017] GetFileType (hFile=0x274) returned 0x1 [0051.017] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e490) returned 1 [0051.017] GetFileType (hFile=0x274) returned 0x1 [0051.017] WriteFile (in: hFile=0x274, lpBuffer=0x26bb80c*, nNumberOfBytesToWrite=0x13e10, lpNumberOfBytesWritten=0x31e550, lpOverlapped=0x0 | out: lpBuffer=0x26bb80c*, lpNumberOfBytesWritten=0x31e550*=0x13e10, lpOverlapped=0x0) returned 1 [0051.019] CloseHandle (hObject=0x274) returned 1 [0051.019] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\CHS\\Dynamic.pdf", nBufferLength=0x105, lpBuffer=0x31e0d4, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\CHS\\Dynamic.pdf", lpFilePart=0x0) returned 0x5b [0051.019] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\CHS\\Dynamic.pdf", nBufferLength=0x105, lpBuffer=0x31e0d4, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\CHS\\Dynamic.pdf", lpFilePart=0x0) returned 0x5b [0051.019] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e534) returned 1 [0051.019] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\CHS\\Dynamic.pdf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\chs\\dynamic.pdf"), fInfoLevelId=0x0, lpFileInformation=0x31e5b0 | out: lpFileInformation=0x31e5b0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x99d45400, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x8000ce40, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x1dcd540, ftLastWriteTime.dwHighDateTime=0x1d6eb7f, nFileSizeHigh=0x0, nFileSizeLow=0x13e10)) returned 1 [0051.019] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e530) returned 1 [0051.020] MoveFileW (lpExistingFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\CHS\\Dynamic.pdf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\chs\\dynamic.pdf"), lpNewFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\CHS\\Dynamic.pdf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\chs\\dynamic.pdf")) returned 1 [0051.020] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\CHS\\Hanko.pdf", nBufferLength=0x105, lpBuffer=0x31dfb4, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\CHS\\Hanko.pdf", lpFilePart=0x0) returned 0x59 [0051.020] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e4a8) returned 1 [0051.020] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\CHS\\Hanko.pdf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\chs\\hanko.pdf"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x274 [0051.020] GetFileType (hFile=0x274) returned 0x1 [0051.020] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e4a4) returned 1 [0051.020] GetFileType (hFile=0x274) returned 0x1 [0051.020] GetFileSize (in: hFile=0x274, lpFileSizeHigh=0x31e5b0 | out: lpFileSizeHigh=0x31e5b0*=0x0) returned 0xaf90 [0051.020] ReadFile (in: hFile=0x274, lpBuffer=0x26cfa48, nNumberOfBytesToRead=0xaf90, lpNumberOfBytesRead=0x31e55c, lpOverlapped=0x0 | out: lpBuffer=0x26cfa48*, lpNumberOfBytesRead=0x31e55c*=0xaf90, lpOverlapped=0x0) returned 1 [0051.031] CloseHandle (hObject=0x274) returned 1 [0051.048] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\CHS\\Hanko.pdf", nBufferLength=0x105, lpBuffer=0x31dfa0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\CHS\\Hanko.pdf", lpFilePart=0x0) returned 0x59 [0051.048] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e494) returned 1 [0051.048] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\CHS\\Hanko.pdf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\chs\\hanko.pdf"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x274 [0051.050] GetFileType (hFile=0x274) returned 0x1 [0051.050] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e490) returned 1 [0051.050] GetFileType (hFile=0x274) returned 0x1 [0051.051] WriteFile (in: hFile=0x274, lpBuffer=0x273d720*, nNumberOfBytesToWrite=0xafa0, lpNumberOfBytesWritten=0x31e550, lpOverlapped=0x0 | out: lpBuffer=0x273d720*, lpNumberOfBytesWritten=0x31e550*=0xafa0, lpOverlapped=0x0) returned 1 [0051.052] CloseHandle (hObject=0x274) returned 1 [0051.052] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\CHS\\Hanko.pdf", nBufferLength=0x105, lpBuffer=0x31e0d4, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\CHS\\Hanko.pdf", lpFilePart=0x0) returned 0x59 [0051.052] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\CHS\\Hanko.pdf", nBufferLength=0x105, lpBuffer=0x31e0d4, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\CHS\\Hanko.pdf", lpFilePart=0x0) returned 0x59 [0051.052] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e534) returned 1 [0051.052] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\CHS\\Hanko.pdf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\chs\\hanko.pdf"), fInfoLevelId=0x0, lpFileInformation=0x31e5b0 | out: lpFileInformation=0x31e5b0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x99d45400, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x8000ce40, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x1e19800, ftLastWriteTime.dwHighDateTime=0x1d6eb7f, nFileSizeHigh=0x0, nFileSizeLow=0xafa0)) returned 1 [0051.052] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e530) returned 1 [0051.052] MoveFileW (lpExistingFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\CHS\\Hanko.pdf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\chs\\hanko.pdf"), lpNewFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\CHS\\Hanko.pdf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\chs\\hanko.pdf")) returned 1 [0051.053] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\CHS\\SignHere.pdf", nBufferLength=0x105, lpBuffer=0x31dfb4, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\CHS\\SignHere.pdf", lpFilePart=0x0) returned 0x5c [0051.053] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e4a8) returned 1 [0051.053] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\CHS\\SignHere.pdf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\chs\\signhere.pdf"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x274 [0051.053] GetFileType (hFile=0x274) returned 0x1 [0051.053] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e4a4) returned 1 [0051.053] GetFileType (hFile=0x274) returned 0x1 [0051.053] GetFileSize (in: hFile=0x274, lpFileSizeHigh=0x31e5b0 | out: lpFileSizeHigh=0x31e5b0*=0x0) returned 0xc0af [0051.053] ReadFile (in: hFile=0x274, lpBuffer=0x2748aec, nNumberOfBytesToRead=0xc0af, lpNumberOfBytesRead=0x31e55c, lpOverlapped=0x0 | out: lpBuffer=0x2748aec*, lpNumberOfBytesRead=0x31e55c*=0xc0af, lpOverlapped=0x0) returned 1 [0051.063] CloseHandle (hObject=0x274) returned 1 [0051.078] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\CHS\\SignHere.pdf", nBufferLength=0x105, lpBuffer=0x31dfa0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\CHS\\SignHere.pdf", lpFilePart=0x0) returned 0x5c [0051.078] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e494) returned 1 [0051.078] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\CHS\\SignHere.pdf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\chs\\signhere.pdf"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x274 [0051.079] GetFileType (hFile=0x274) returned 0x1 [0051.079] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e490) returned 1 [0051.079] GetFileType (hFile=0x274) returned 0x1 [0051.079] WriteFile (in: hFile=0x274, lpBuffer=0x27b9af8*, nNumberOfBytesToWrite=0xc0b0, lpNumberOfBytesWritten=0x31e550, lpOverlapped=0x0 | out: lpBuffer=0x27b9af8*, lpNumberOfBytesWritten=0x31e550*=0xc0b0, lpOverlapped=0x0) returned 1 [0051.084] CloseHandle (hObject=0x274) returned 1 [0051.084] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\CHS\\SignHere.pdf", nBufferLength=0x105, lpBuffer=0x31e0d4, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\CHS\\SignHere.pdf", lpFilePart=0x0) returned 0x5c [0051.084] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\CHS\\SignHere.pdf", nBufferLength=0x105, lpBuffer=0x31e0d4, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\CHS\\SignHere.pdf", lpFilePart=0x0) returned 0x5c [0051.084] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e534) returned 1 [0051.085] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\CHS\\SignHere.pdf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\chs\\signhere.pdf"), fInfoLevelId=0x0, lpFileInformation=0x31e5b0 | out: lpFileInformation=0x31e5b0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x99d45400, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x8000ce40, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x1e65ac0, ftLastWriteTime.dwHighDateTime=0x1d6eb7f, nFileSizeHigh=0x0, nFileSizeLow=0xc0b0)) returned 1 [0051.085] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e530) returned 1 [0051.085] MoveFileW (lpExistingFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\CHS\\SignHere.pdf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\chs\\signhere.pdf"), lpNewFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\CHS\\SignHere.pdf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\chs\\signhere.pdf")) returned 1 [0051.085] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\CHS\\StandardBusiness.pdf", nBufferLength=0x105, lpBuffer=0x31dfb4, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\CHS\\StandardBusiness.pdf", lpFilePart=0x0) returned 0x64 [0051.085] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e4a8) returned 1 [0051.085] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\CHS\\StandardBusiness.pdf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\chs\\standardbusiness.pdf"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x274 [0051.085] GetFileType (hFile=0x274) returned 0x1 [0051.085] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e4a4) returned 1 [0051.085] GetFileType (hFile=0x274) returned 0x1 [0051.085] GetFileSize (in: hFile=0x274, lpFileSizeHigh=0x31e5b0 | out: lpFileSizeHigh=0x31e5b0*=0x0) returned 0x217ce [0051.086] ReadFile (in: hFile=0x274, lpBuffer=0x37a42d0, nNumberOfBytesToRead=0x217ce, lpNumberOfBytesRead=0x31e55c, lpOverlapped=0x0 | out: lpBuffer=0x37a42d0*, lpNumberOfBytesRead=0x31e55c*=0x217ce, lpOverlapped=0x0) returned 1 [0051.098] CloseHandle (hObject=0x274) returned 1 [0051.116] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\CHS\\StandardBusiness.pdf", nBufferLength=0x105, lpBuffer=0x31dfa0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\CHS\\StandardBusiness.pdf", lpFilePart=0x0) returned 0x64 [0051.116] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e494) returned 1 [0051.116] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\CHS\\StandardBusiness.pdf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\chs\\standardbusiness.pdf"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x274 [0051.118] GetFileType (hFile=0x274) returned 0x1 [0051.118] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e490) returned 1 [0051.118] GetFileType (hFile=0x274) returned 0x1 [0051.118] WriteFile (in: hFile=0x274, lpBuffer=0x384ba20*, nNumberOfBytesToWrite=0x217d0, lpNumberOfBytesWritten=0x31e550, lpOverlapped=0x0 | out: lpBuffer=0x384ba20*, lpNumberOfBytesWritten=0x31e550*=0x217d0, lpOverlapped=0x0) returned 1 [0051.121] CloseHandle (hObject=0x274) returned 1 [0051.121] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\CHS\\StandardBusiness.pdf", nBufferLength=0x105, lpBuffer=0x31e0d4, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\CHS\\StandardBusiness.pdf", lpFilePart=0x0) returned 0x64 [0051.121] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\CHS\\StandardBusiness.pdf", nBufferLength=0x105, lpBuffer=0x31e0d4, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\CHS\\StandardBusiness.pdf", lpFilePart=0x0) returned 0x64 [0051.121] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e534) returned 1 [0051.121] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\CHS\\StandardBusiness.pdf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\chs\\standardbusiness.pdf"), fInfoLevelId=0x0, lpFileInformation=0x31e5b0 | out: lpFileInformation=0x31e5b0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x99d45400, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x8000ce40, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x1eb1d80, ftLastWriteTime.dwHighDateTime=0x1d6eb7f, nFileSizeHigh=0x0, nFileSizeLow=0x217d0)) returned 1 [0051.125] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e530) returned 1 [0051.125] MoveFileW (lpExistingFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\CHS\\StandardBusiness.pdf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\chs\\standardbusiness.pdf"), lpNewFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\CHS\\StandardBusiness.pdf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\chs\\standardbusiness.pdf")) returned 1 [0051.125] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e5dc) returned 1 [0051.125] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\CHT", nBufferLength=0x105, lpBuffer=0x31e0e4, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\CHT", lpFilePart=0x0) returned 0x4f [0051.125] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\CHT\\", nBufferLength=0x105, lpBuffer=0x31e0b8, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\CHT\\", lpFilePart=0x0) returned 0x50 [0051.125] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\CHT\\*", lpFindFileData=0x31e304 | out: lpFindFileData=0x31e304*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7ff28600, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x7ff4e760, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x7ff4e760, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x381dc0 [0051.129] FindNextFileW (in: hFindFile=0x381dc0, lpFindFileData=0x31e314 | out: lpFindFileData=0x31e314*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7ff28600, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x7ff4e760, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x7ff4e760, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0051.129] FindNextFileW (in: hFindFile=0x381dc0, lpFindFileData=0x31e314 | out: lpFindFileData=0x31e314*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x99d45400, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7ff28600, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x99d45400, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x132cc, dwReserved0=0x0, dwReserved1=0x0, cFileName="Dynamic.pdf", cAlternateFileName="")) returned 1 [0051.129] FindNextFileW (in: hFindFile=0x381dc0, lpFindFileData=0x31e314 | out: lpFindFileData=0x31e314*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x99d45400, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7ff4e760, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x99d45400, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0xb7c2, dwReserved0=0x0, dwReserved1=0x0, cFileName="Hanko.pdf", cAlternateFileName="")) returned 1 [0051.129] FindNextFileW (in: hFindFile=0x381dc0, lpFindFileData=0x31e314 | out: lpFindFileData=0x31e314*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x99d45400, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7ff4e760, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x99d45400, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x1182b, dwReserved0=0x0, dwReserved1=0x0, cFileName="SignHere.pdf", cAlternateFileName="")) returned 1 [0051.129] FindNextFileW (in: hFindFile=0x381dc0, lpFindFileData=0x31e314 | out: lpFindFileData=0x31e314*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x99d45400, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7ff4e760, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x99d45400, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x322cc, dwReserved0=0x0, dwReserved1=0x0, cFileName="StandardBusiness.pdf", cAlternateFileName="STANDA~1.PDF")) returned 1 [0051.129] FindNextFileW (in: hFindFile=0x381dc0, lpFindFileData=0x31e314 | out: lpFindFileData=0x31e314*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0051.129] FindClose (in: hFindFile=0x381dc0 | out: hFindFile=0x381dc0) returned 1 [0051.129] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e59c) returned 1 [0051.129] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e5a8) returned 1 [0051.129] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e5dc) returned 1 [0051.130] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\CHT", nBufferLength=0x105, lpBuffer=0x31e0e4, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\CHT", lpFilePart=0x0) returned 0x4f [0051.130] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\CHT\\", nBufferLength=0x105, lpBuffer=0x31e0b8, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\CHT\\", lpFilePart=0x0) returned 0x50 [0051.130] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\CHT\\*", lpFindFileData=0x31e304 | out: lpFindFileData=0x31e304*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7ff28600, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x7ff4e760, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x7ff4e760, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x381dc0 [0051.130] FindNextFileW (in: hFindFile=0x381dc0, lpFindFileData=0x31e314 | out: lpFindFileData=0x31e314*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7ff28600, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x7ff4e760, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x7ff4e760, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0051.130] FindNextFileW (in: hFindFile=0x381dc0, lpFindFileData=0x31e314 | out: lpFindFileData=0x31e314*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x99d45400, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7ff28600, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x99d45400, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x132cc, dwReserved0=0x0, dwReserved1=0x0, cFileName="Dynamic.pdf", cAlternateFileName="")) returned 1 [0051.130] FindNextFileW (in: hFindFile=0x381dc0, lpFindFileData=0x31e314 | out: lpFindFileData=0x31e314*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x99d45400, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7ff4e760, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x99d45400, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0xb7c2, dwReserved0=0x0, dwReserved1=0x0, cFileName="Hanko.pdf", cAlternateFileName="")) returned 1 [0051.130] FindNextFileW (in: hFindFile=0x381dc0, lpFindFileData=0x31e314 | out: lpFindFileData=0x31e314*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x99d45400, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7ff4e760, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x99d45400, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x1182b, dwReserved0=0x0, dwReserved1=0x0, cFileName="SignHere.pdf", cAlternateFileName="")) returned 1 [0051.130] FindNextFileW (in: hFindFile=0x381dc0, lpFindFileData=0x31e314 | out: lpFindFileData=0x31e314*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x99d45400, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7ff4e760, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x99d45400, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x322cc, dwReserved0=0x0, dwReserved1=0x0, cFileName="StandardBusiness.pdf", cAlternateFileName="STANDA~1.PDF")) returned 1 [0051.131] FindNextFileW (in: hFindFile=0x381dc0, lpFindFileData=0x31e314 | out: lpFindFileData=0x31e314*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x99d45400, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7ff4e760, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x99d45400, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x322cc, dwReserved0=0x0, dwReserved1=0x0, cFileName="StandardBusiness.pdf", cAlternateFileName="STANDA~1.PDF")) returned 0 [0051.131] FindClose (in: hFindFile=0x381dc0 | out: hFindFile=0x381dc0) returned 1 [0051.131] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e59c) returned 1 [0051.131] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e5a8) returned 1 [0051.131] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\CHT\\Dynamic.pdf", nBufferLength=0x105, lpBuffer=0x31dfb4, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\CHT\\Dynamic.pdf", lpFilePart=0x0) returned 0x5b [0051.131] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e4a8) returned 1 [0051.131] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\CHT\\Dynamic.pdf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\cht\\dynamic.pdf"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x274 [0051.131] GetFileType (hFile=0x274) returned 0x1 [0051.131] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e4a4) returned 1 [0051.131] GetFileType (hFile=0x274) returned 0x1 [0051.131] GetFileSize (in: hFile=0x274, lpFileSizeHigh=0x31e5b0 | out: lpFileSizeHigh=0x31e5b0*=0x0) returned 0x132cc [0051.131] ReadFile (in: hFile=0x274, lpBuffer=0x2815a50, nNumberOfBytesToRead=0x132cc, lpNumberOfBytesRead=0x31e55c, lpOverlapped=0x0 | out: lpBuffer=0x2815a50*, lpNumberOfBytesRead=0x31e55c*=0x132cc, lpOverlapped=0x0) returned 1 [0051.140] CloseHandle (hObject=0x274) returned 1 [0051.187] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\CHT\\Dynamic.pdf", nBufferLength=0x105, lpBuffer=0x31dfa0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\CHT\\Dynamic.pdf", lpFilePart=0x0) returned 0x5b [0051.187] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e494) returned 1 [0051.187] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\CHT\\Dynamic.pdf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\cht\\dynamic.pdf"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x274 [0051.190] GetFileType (hFile=0x274) returned 0x1 [0051.190] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e490) returned 1 [0051.190] GetFileType (hFile=0x274) returned 0x1 [0051.190] WriteFile (in: hFile=0x274, lpBuffer=0x26afb9c*, nNumberOfBytesToWrite=0x132d0, lpNumberOfBytesWritten=0x31e550, lpOverlapped=0x0 | out: lpBuffer=0x26afb9c*, lpNumberOfBytesWritten=0x31e550*=0x132d0, lpOverlapped=0x0) returned 1 [0051.192] CloseHandle (hObject=0x274) returned 1 [0051.192] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\CHT\\Dynamic.pdf", nBufferLength=0x105, lpBuffer=0x31e0d4, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\CHT\\Dynamic.pdf", lpFilePart=0x0) returned 0x5b [0051.192] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\CHT\\Dynamic.pdf", nBufferLength=0x105, lpBuffer=0x31e0d4, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\CHT\\Dynamic.pdf", lpFilePart=0x0) returned 0x5b [0051.192] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e534) returned 1 [0051.192] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\CHT\\Dynamic.pdf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\cht\\dynamic.pdf"), fInfoLevelId=0x0, lpFileInformation=0x31e5b0 | out: lpFileInformation=0x31e5b0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x99d45400, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7ff28600, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x1f70460, ftLastWriteTime.dwHighDateTime=0x1d6eb7f, nFileSizeHigh=0x0, nFileSizeLow=0x132d0)) returned 1 [0051.192] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e530) returned 1 [0051.192] MoveFileW (lpExistingFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\CHT\\Dynamic.pdf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\cht\\dynamic.pdf"), lpNewFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\CHT\\Dynamic.pdf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\cht\\dynamic.pdf")) returned 1 [0051.192] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\CHT\\Hanko.pdf", nBufferLength=0x105, lpBuffer=0x31dfb4, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\CHT\\Hanko.pdf", lpFilePart=0x0) returned 0x59 [0051.193] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e4a8) returned 1 [0051.193] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\CHT\\Hanko.pdf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\cht\\hanko.pdf"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x274 [0051.200] GetFileType (hFile=0x274) returned 0x1 [0051.200] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e4a4) returned 1 [0051.200] GetFileType (hFile=0x274) returned 0x1 [0051.200] GetFileSize (in: hFile=0x274, lpFileSizeHigh=0x31e5b0 | out: lpFileSizeHigh=0x31e5b0*=0x0) returned 0xb7c2 [0051.200] ReadFile (in: hFile=0x274, lpBuffer=0x26c3298, nNumberOfBytesToRead=0xb7c2, lpNumberOfBytesRead=0x31e55c, lpOverlapped=0x0 | out: lpBuffer=0x26c3298*, lpNumberOfBytesRead=0x31e55c*=0xb7c2, lpOverlapped=0x0) returned 1 [0051.212] CloseHandle (hObject=0x274) returned 1 [0051.227] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\CHT\\Hanko.pdf", nBufferLength=0x105, lpBuffer=0x31dfa0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\CHT\\Hanko.pdf", lpFilePart=0x0) returned 0x59 [0051.227] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e494) returned 1 [0051.227] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\CHT\\Hanko.pdf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\cht\\hanko.pdf"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x274 [0051.228] GetFileType (hFile=0x274) returned 0x1 [0051.228] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e490) returned 1 [0051.228] GetFileType (hFile=0x274) returned 0x1 [0051.228] WriteFile (in: hFile=0x274, lpBuffer=0x2732960*, nNumberOfBytesToWrite=0xb7d0, lpNumberOfBytesWritten=0x31e550, lpOverlapped=0x0 | out: lpBuffer=0x2732960*, lpNumberOfBytesWritten=0x31e550*=0xb7d0, lpOverlapped=0x0) returned 1 [0051.230] CloseHandle (hObject=0x274) returned 1 [0051.230] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\CHT\\Hanko.pdf", nBufferLength=0x105, lpBuffer=0x31e0d4, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\CHT\\Hanko.pdf", lpFilePart=0x0) returned 0x59 [0051.230] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\CHT\\Hanko.pdf", nBufferLength=0x105, lpBuffer=0x31e0d4, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\CHT\\Hanko.pdf", lpFilePart=0x0) returned 0x59 [0051.230] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e534) returned 1 [0051.230] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\CHT\\Hanko.pdf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\cht\\hanko.pdf"), fInfoLevelId=0x0, lpFileInformation=0x31e5b0 | out: lpFileInformation=0x31e5b0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x99d45400, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7ff4e760, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x1fbc720, ftLastWriteTime.dwHighDateTime=0x1d6eb7f, nFileSizeHigh=0x0, nFileSizeLow=0xb7d0)) returned 1 [0051.230] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e530) returned 1 [0051.230] MoveFileW (lpExistingFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\CHT\\Hanko.pdf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\cht\\hanko.pdf"), lpNewFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\CHT\\Hanko.pdf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\cht\\hanko.pdf")) returned 1 [0051.231] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\CHT\\SignHere.pdf", nBufferLength=0x105, lpBuffer=0x31dfb4, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\CHT\\SignHere.pdf", lpFilePart=0x0) returned 0x5c [0051.232] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e4a8) returned 1 [0051.232] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\CHT\\SignHere.pdf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\cht\\signhere.pdf"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x274 [0051.232] GetFileType (hFile=0x274) returned 0x1 [0051.232] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e4a4) returned 1 [0051.232] GetFileType (hFile=0x274) returned 0x1 [0051.232] GetFileSize (in: hFile=0x274, lpFileSizeHigh=0x31e5b0 | out: lpFileSizeHigh=0x31e5b0*=0x0) returned 0x1182b [0051.232] ReadFile (in: hFile=0x274, lpBuffer=0x273e55c, nNumberOfBytesToRead=0x1182b, lpNumberOfBytesRead=0x31e55c, lpOverlapped=0x0 | out: lpBuffer=0x273e55c*, lpNumberOfBytesRead=0x31e55c*=0x1182b, lpOverlapped=0x0) returned 1 [0051.240] CloseHandle (hObject=0x274) returned 1 [0051.267] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\CHT\\SignHere.pdf", nBufferLength=0x105, lpBuffer=0x31dfa0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\CHT\\SignHere.pdf", lpFilePart=0x0) returned 0x5c [0051.267] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e494) returned 1 [0051.267] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\CHT\\SignHere.pdf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\cht\\signhere.pdf"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x274 [0051.268] GetFileType (hFile=0x274) returned 0x1 [0051.268] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e490) returned 1 [0051.268] GetFileType (hFile=0x274) returned 0x1 [0051.268] WriteFile (in: hFile=0x274, lpBuffer=0x27bfbe8*, nNumberOfBytesToWrite=0x11830, lpNumberOfBytesWritten=0x31e550, lpOverlapped=0x0 | out: lpBuffer=0x27bfbe8*, lpNumberOfBytesWritten=0x31e550*=0x11830, lpOverlapped=0x0) returned 1 [0051.270] CloseHandle (hObject=0x274) returned 1 [0051.270] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\CHT\\SignHere.pdf", nBufferLength=0x105, lpBuffer=0x31e0d4, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\CHT\\SignHere.pdf", lpFilePart=0x0) returned 0x5c [0051.270] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\CHT\\SignHere.pdf", nBufferLength=0x105, lpBuffer=0x31e0d4, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\CHT\\SignHere.pdf", lpFilePart=0x0) returned 0x5c [0051.270] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e534) returned 1 [0051.270] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\CHT\\SignHere.pdf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\cht\\signhere.pdf"), fInfoLevelId=0x0, lpFileInformation=0x31e5b0 | out: lpFileInformation=0x31e5b0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x99d45400, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7ff4e760, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x202eb40, ftLastWriteTime.dwHighDateTime=0x1d6eb7f, nFileSizeHigh=0x0, nFileSizeLow=0x11830)) returned 1 [0051.270] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e530) returned 1 [0051.270] MoveFileW (lpExistingFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\CHT\\SignHere.pdf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\cht\\signhere.pdf"), lpNewFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\CHT\\SignHere.pdf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\cht\\signhere.pdf")) returned 1 [0051.270] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\CHT\\StandardBusiness.pdf", nBufferLength=0x105, lpBuffer=0x31dfb4, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\CHT\\StandardBusiness.pdf", lpFilePart=0x0) returned 0x64 [0051.270] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e4a8) returned 1 [0051.270] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\CHT\\StandardBusiness.pdf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\cht\\standardbusiness.pdf"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x274 [0051.271] GetFileType (hFile=0x274) returned 0x1 [0051.271] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e4a4) returned 1 [0051.271] GetFileType (hFile=0x274) returned 0x1 [0051.271] GetFileSize (in: hFile=0x274, lpFileSizeHigh=0x31e5b0 | out: lpFileSizeHigh=0x31e5b0*=0x0) returned 0x322cc [0051.271] ReadFile (in: hFile=0x274, lpBuffer=0x38cd7b0, nNumberOfBytesToRead=0x322cc, lpNumberOfBytesRead=0x31e55c, lpOverlapped=0x0 | out: lpBuffer=0x38cd7b0*, lpNumberOfBytesRead=0x31e55c*=0x322cc, lpOverlapped=0x0) returned 1 [0051.284] CloseHandle (hObject=0x274) returned 1 [0051.346] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\CHT\\StandardBusiness.pdf", nBufferLength=0x105, lpBuffer=0x31dfa0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\CHT\\StandardBusiness.pdf", lpFilePart=0x0) returned 0x64 [0051.346] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e494) returned 1 [0051.346] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\CHT\\StandardBusiness.pdf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\cht\\standardbusiness.pdf"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x274 [0051.348] GetFileType (hFile=0x274) returned 0x1 [0051.348] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e490) returned 1 [0051.349] GetFileType (hFile=0x274) returned 0x1 [0051.349] WriteFile (in: hFile=0x274, lpBuffer=0x38ffa98*, nNumberOfBytesToWrite=0x322d0, lpNumberOfBytesWritten=0x31e550, lpOverlapped=0x0 | out: lpBuffer=0x38ffa98*, lpNumberOfBytesWritten=0x31e550*=0x322d0, lpOverlapped=0x0) returned 1 [0051.354] CloseHandle (hObject=0x274) returned 1 [0051.354] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\CHT\\StandardBusiness.pdf", nBufferLength=0x105, lpBuffer=0x31e0d4, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\CHT\\StandardBusiness.pdf", lpFilePart=0x0) returned 0x64 [0051.354] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\CHT\\StandardBusiness.pdf", nBufferLength=0x105, lpBuffer=0x31e0d4, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\CHT\\StandardBusiness.pdf", lpFilePart=0x0) returned 0x64 [0051.354] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e534) returned 1 [0051.354] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\CHT\\StandardBusiness.pdf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\cht\\standardbusiness.pdf"), fInfoLevelId=0x0, lpFileInformation=0x31e5b0 | out: lpFileInformation=0x31e5b0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x99d45400, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7ff4e760, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x20ed220, ftLastWriteTime.dwHighDateTime=0x1d6eb7f, nFileSizeHigh=0x0, nFileSizeLow=0x322d0)) returned 1 [0051.354] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e530) returned 1 [0051.354] MoveFileW (lpExistingFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\CHT\\StandardBusiness.pdf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\cht\\standardbusiness.pdf"), lpNewFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\CHT\\StandardBusiness.pdf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\cht\\standardbusiness.pdf")) returned 1 [0051.355] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e5dc) returned 1 [0051.355] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\CZE", nBufferLength=0x105, lpBuffer=0x31e0e4, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\CZE", lpFilePart=0x0) returned 0x4f [0051.355] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\CZE\\", nBufferLength=0x105, lpBuffer=0x31e0b8, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\CZE\\", lpFilePart=0x0) returned 0x50 [0051.355] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\CZE\\*", lpFindFileData=0x31e304 | out: lpFindFileData=0x31e304*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8070aee0, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x80731040, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x80731040, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x381d00 [0051.377] FindNextFileW (in: hFindFile=0x381d00, lpFindFileData=0x31e314 | out: lpFindFileData=0x31e314*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8070aee0, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x80731040, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x80731040, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0051.377] FindNextFileW (in: hFindFile=0x381d00, lpFindFileData=0x31e314 | out: lpFindFileData=0x31e314*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x99d45400, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x80731040, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x99d45400, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x7d00, dwReserved0=0x0, dwReserved1=0x0, cFileName="Dynamic.pdf", cAlternateFileName="")) returned 1 [0051.377] FindNextFileW (in: hFindFile=0x381d00, lpFindFileData=0x31e314 | out: lpFindFileData=0x31e314*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x99d45400, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x80731040, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x99d45400, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x8770, dwReserved0=0x0, dwReserved1=0x0, cFileName="Faces.pdf", cAlternateFileName="")) returned 1 [0051.377] FindNextFileW (in: hFindFile=0x381d00, lpFindFileData=0x31e314 | out: lpFindFileData=0x31e314*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x99d45400, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x8070aee0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x99d45400, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0xb7dc, dwReserved0=0x0, dwReserved1=0x0, cFileName="Pointers.pdf", cAlternateFileName="")) returned 1 [0051.377] FindNextFileW (in: hFindFile=0x381d00, lpFindFileData=0x31e314 | out: lpFindFileData=0x31e314*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x99d45400, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x80731040, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x99d45400, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x5274b, dwReserved0=0x0, dwReserved1=0x0, cFileName="SignHere.pdf", cAlternateFileName="")) returned 1 [0051.377] FindNextFileW (in: hFindFile=0x381d00, lpFindFileData=0x31e314 | out: lpFindFileData=0x31e314*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x99d45400, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x8070aee0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x99d45400, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x2c339, dwReserved0=0x0, dwReserved1=0x0, cFileName="Standard.pdf", cAlternateFileName="")) returned 1 [0051.377] FindNextFileW (in: hFindFile=0x381d00, lpFindFileData=0x31e314 | out: lpFindFileData=0x31e314*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x99d45400, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x80731040, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x99d45400, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x15c7a, dwReserved0=0x0, dwReserved1=0x0, cFileName="StandardBusiness.pdf", cAlternateFileName="STANDA~1.PDF")) returned 1 [0051.378] FindNextFileW (in: hFindFile=0x381d00, lpFindFileData=0x31e314 | out: lpFindFileData=0x31e314*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0051.378] FindClose (in: hFindFile=0x381d00 | out: hFindFile=0x381d00) returned 1 [0051.378] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e59c) returned 1 [0051.378] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e5a8) returned 1 [0051.378] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e5dc) returned 1 [0051.378] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\CZE", nBufferLength=0x105, lpBuffer=0x31e0e4, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\CZE", lpFilePart=0x0) returned 0x4f [0051.379] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\CZE\\", nBufferLength=0x105, lpBuffer=0x31e0b8, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\CZE\\", lpFilePart=0x0) returned 0x50 [0051.379] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\CZE\\*", lpFindFileData=0x31e304 | out: lpFindFileData=0x31e304*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8070aee0, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x80731040, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x80731040, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x381d00 [0051.379] FindNextFileW (in: hFindFile=0x381d00, lpFindFileData=0x31e314 | out: lpFindFileData=0x31e314*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8070aee0, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x80731040, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x80731040, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0051.380] FindNextFileW (in: hFindFile=0x381d00, lpFindFileData=0x31e314 | out: lpFindFileData=0x31e314*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x99d45400, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x80731040, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x99d45400, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x7d00, dwReserved0=0x0, dwReserved1=0x0, cFileName="Dynamic.pdf", cAlternateFileName="")) returned 1 [0051.380] FindNextFileW (in: hFindFile=0x381d00, lpFindFileData=0x31e314 | out: lpFindFileData=0x31e314*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x99d45400, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x80731040, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x99d45400, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x8770, dwReserved0=0x0, dwReserved1=0x0, cFileName="Faces.pdf", cAlternateFileName="")) returned 1 [0051.380] FindNextFileW (in: hFindFile=0x381d00, lpFindFileData=0x31e314 | out: lpFindFileData=0x31e314*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x99d45400, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x8070aee0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x99d45400, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0xb7dc, dwReserved0=0x0, dwReserved1=0x0, cFileName="Pointers.pdf", cAlternateFileName="")) returned 1 [0051.380] FindNextFileW (in: hFindFile=0x381d00, lpFindFileData=0x31e314 | out: lpFindFileData=0x31e314*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x99d45400, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x80731040, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x99d45400, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x5274b, dwReserved0=0x0, dwReserved1=0x0, cFileName="SignHere.pdf", cAlternateFileName="")) returned 1 [0051.380] FindNextFileW (in: hFindFile=0x381d00, lpFindFileData=0x31e314 | out: lpFindFileData=0x31e314*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x99d45400, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x8070aee0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x99d45400, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x2c339, dwReserved0=0x0, dwReserved1=0x0, cFileName="Standard.pdf", cAlternateFileName="")) returned 1 [0051.380] FindNextFileW (in: hFindFile=0x381d00, lpFindFileData=0x31e314 | out: lpFindFileData=0x31e314*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x99d45400, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x80731040, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x99d45400, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x15c7a, dwReserved0=0x0, dwReserved1=0x0, cFileName="StandardBusiness.pdf", cAlternateFileName="STANDA~1.PDF")) returned 1 [0051.380] FindNextFileW (in: hFindFile=0x381d00, lpFindFileData=0x31e314 | out: lpFindFileData=0x31e314*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x99d45400, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x80731040, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x99d45400, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x15c7a, dwReserved0=0x0, dwReserved1=0x0, cFileName="StandardBusiness.pdf", cAlternateFileName="STANDA~1.PDF")) returned 0 [0051.381] FindClose (in: hFindFile=0x381d00 | out: hFindFile=0x381d00) returned 1 [0051.381] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e59c) returned 1 [0051.381] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e5a8) returned 1 [0051.381] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\CZE\\Dynamic.pdf", nBufferLength=0x105, lpBuffer=0x31dfb4, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\CZE\\Dynamic.pdf", lpFilePart=0x0) returned 0x5b [0051.381] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e4a8) returned 1 [0051.381] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\CZE\\Dynamic.pdf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\cze\\dynamic.pdf"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x274 [0051.383] GetFileType (hFile=0x274) returned 0x1 [0051.383] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e4a4) returned 1 [0051.383] GetFileType (hFile=0x274) returned 0x1 [0051.383] GetFileSize (in: hFile=0x274, lpFileSizeHigh=0x31e5b0 | out: lpFileSizeHigh=0x31e5b0*=0x0) returned 0x7d00 [0051.383] ReadFile (in: hFile=0x274, lpBuffer=0x2647150, nNumberOfBytesToRead=0x7d00, lpNumberOfBytesRead=0x31e55c, lpOverlapped=0x0 | out: lpBuffer=0x2647150*, lpNumberOfBytesRead=0x31e55c*=0x7d00, lpOverlapped=0x0) returned 1 [0051.388] CloseHandle (hObject=0x274) returned 1 [0051.430] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\CZE\\Dynamic.pdf", nBufferLength=0x105, lpBuffer=0x31dfa0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\CZE\\Dynamic.pdf", lpFilePart=0x0) returned 0x5b [0051.430] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e494) returned 1 [0051.430] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\CZE\\Dynamic.pdf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\cze\\dynamic.pdf"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x274 [0051.431] GetFileType (hFile=0x274) returned 0x1 [0051.431] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e490) returned 1 [0051.431] GetFileType (hFile=0x274) returned 0x1 [0051.431] WriteFile (in: hFile=0x274, lpBuffer=0x268af40*, nNumberOfBytesToWrite=0x7d10, lpNumberOfBytesWritten=0x31e550, lpOverlapped=0x0 | out: lpBuffer=0x268af40*, lpNumberOfBytesWritten=0x31e550*=0x7d10, lpOverlapped=0x0) returned 1 [0051.434] CloseHandle (hObject=0x274) returned 1 [0051.434] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\CZE\\Dynamic.pdf", nBufferLength=0x105, lpBuffer=0x31e0d4, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\CZE\\Dynamic.pdf", lpFilePart=0x0) returned 0x5b [0051.434] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\CZE\\Dynamic.pdf", nBufferLength=0x105, lpBuffer=0x31e0d4, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\CZE\\Dynamic.pdf", lpFilePart=0x0) returned 0x5b [0051.434] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e534) returned 1 [0051.434] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\CZE\\Dynamic.pdf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\cze\\dynamic.pdf"), fInfoLevelId=0x0, lpFileInformation=0x31e5b0 | out: lpFileInformation=0x31e5b0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x99d45400, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x80731040, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x21d1a60, ftLastWriteTime.dwHighDateTime=0x1d6eb7f, nFileSizeHigh=0x0, nFileSizeLow=0x7d10)) returned 1 [0051.435] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e530) returned 1 [0051.435] MoveFileW (lpExistingFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\CZE\\Dynamic.pdf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\cze\\dynamic.pdf"), lpNewFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\CZE\\Dynamic.pdf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\cze\\dynamic.pdf")) returned 1 [0051.435] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\CZE\\Faces.pdf", nBufferLength=0x105, lpBuffer=0x31dfb4, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\CZE\\Faces.pdf", lpFilePart=0x0) returned 0x59 [0051.435] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e4a8) returned 1 [0051.435] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\CZE\\Faces.pdf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\cze\\faces.pdf"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x274 [0051.435] GetFileType (hFile=0x274) returned 0x1 [0051.435] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e4a4) returned 1 [0051.435] GetFileType (hFile=0x274) returned 0x1 [0051.435] GetFileSize (in: hFile=0x274, lpFileSizeHigh=0x31e5b0 | out: lpFileSizeHigh=0x31e5b0*=0x0) returned 0x8770 [0051.435] ReadFile (in: hFile=0x274, lpBuffer=0x269307c, nNumberOfBytesToRead=0x8770, lpNumberOfBytesRead=0x31e55c, lpOverlapped=0x0 | out: lpBuffer=0x269307c*, lpNumberOfBytesRead=0x31e55c*=0x8770, lpOverlapped=0x0) returned 1 [0051.445] CloseHandle (hObject=0x274) returned 1 [0051.486] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\CZE\\Faces.pdf", nBufferLength=0x105, lpBuffer=0x31dfa0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\CZE\\Faces.pdf", lpFilePart=0x0) returned 0x59 [0051.486] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e494) returned 1 [0051.486] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\CZE\\Faces.pdf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\cze\\faces.pdf"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x274 [0051.487] GetFileType (hFile=0x274) returned 0x1 [0051.487] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e490) returned 1 [0051.487] GetFileType (hFile=0x274) returned 0x1 [0051.487] WriteFile (in: hFile=0x274, lpBuffer=0x270a53c*, nNumberOfBytesToWrite=0x8780, lpNumberOfBytesWritten=0x31e550, lpOverlapped=0x0 | out: lpBuffer=0x270a53c*, lpNumberOfBytesWritten=0x31e550*=0x8780, lpOverlapped=0x0) returned 1 [0051.488] CloseHandle (hObject=0x274) returned 1 [0051.488] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\CZE\\Faces.pdf", nBufferLength=0x105, lpBuffer=0x31e0d4, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\CZE\\Faces.pdf", lpFilePart=0x0) returned 0x59 [0051.488] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\CZE\\Faces.pdf", nBufferLength=0x105, lpBuffer=0x31e0d4, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\CZE\\Faces.pdf", lpFilePart=0x0) returned 0x59 [0051.488] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e534) returned 1 [0051.488] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\CZE\\Faces.pdf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\cze\\faces.pdf"), fInfoLevelId=0x0, lpFileInformation=0x31e5b0 | out: lpFileInformation=0x31e5b0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x99d45400, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x80731040, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x2243e80, ftLastWriteTime.dwHighDateTime=0x1d6eb7f, nFileSizeHigh=0x0, nFileSizeLow=0x8780)) returned 1 [0051.488] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e530) returned 1 [0051.489] MoveFileW (lpExistingFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\CZE\\Faces.pdf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\cze\\faces.pdf"), lpNewFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\CZE\\Faces.pdf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\cze\\faces.pdf")) returned 1 [0051.489] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\CZE\\Pointers.pdf", nBufferLength=0x105, lpBuffer=0x31dfb4, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\CZE\\Pointers.pdf", lpFilePart=0x0) returned 0x5c [0051.489] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e4a8) returned 1 [0051.489] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\CZE\\Pointers.pdf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\cze\\pointers.pdf"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x274 [0051.489] GetFileType (hFile=0x274) returned 0x1 [0051.489] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e4a4) returned 1 [0051.489] GetFileType (hFile=0x274) returned 0x1 [0051.489] GetFileSize (in: hFile=0x274, lpFileSizeHigh=0x31e5b0 | out: lpFileSizeHigh=0x31e5b0*=0x0) returned 0xb7dc [0051.489] ReadFile (in: hFile=0x274, lpBuffer=0x27130e8, nNumberOfBytesToRead=0xb7dc, lpNumberOfBytesRead=0x31e55c, lpOverlapped=0x0 | out: lpBuffer=0x27130e8*, lpNumberOfBytesRead=0x31e55c*=0xb7dc, lpOverlapped=0x0) returned 1 [0051.492] CloseHandle (hObject=0x274) returned 1 [0051.507] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\CZE\\Pointers.pdf", nBufferLength=0x105, lpBuffer=0x31dfa0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\CZE\\Pointers.pdf", lpFilePart=0x0) returned 0x5c [0051.507] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e494) returned 1 [0051.507] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\CZE\\Pointers.pdf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\cze\\pointers.pdf"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x274 [0051.508] GetFileType (hFile=0x274) returned 0x1 [0051.508] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e490) returned 1 [0051.508] GetFileType (hFile=0x274) returned 0x1 [0051.508] WriteFile (in: hFile=0x274, lpBuffer=0x2782680*, nNumberOfBytesToWrite=0xb7e0, lpNumberOfBytesWritten=0x31e550, lpOverlapped=0x0 | out: lpBuffer=0x2782680*, lpNumberOfBytesWritten=0x31e550*=0xb7e0, lpOverlapped=0x0) returned 1 [0051.510] CloseHandle (hObject=0x274) returned 1 [0051.510] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\CZE\\Pointers.pdf", nBufferLength=0x105, lpBuffer=0x31e0d4, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\CZE\\Pointers.pdf", lpFilePart=0x0) returned 0x5c [0051.510] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\CZE\\Pointers.pdf", nBufferLength=0x105, lpBuffer=0x31e0d4, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\CZE\\Pointers.pdf", lpFilePart=0x0) returned 0x5c [0051.510] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e534) returned 1 [0051.510] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\CZE\\Pointers.pdf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\cze\\pointers.pdf"), fInfoLevelId=0x0, lpFileInformation=0x31e5b0 | out: lpFileInformation=0x31e5b0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x99d45400, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x8070aee0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x2269fe0, ftLastWriteTime.dwHighDateTime=0x1d6eb7f, nFileSizeHigh=0x0, nFileSizeLow=0xb7e0)) returned 1 [0051.510] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e530) returned 1 [0051.510] MoveFileW (lpExistingFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\CZE\\Pointers.pdf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\cze\\pointers.pdf"), lpNewFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\CZE\\Pointers.pdf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\cze\\pointers.pdf")) returned 1 [0051.511] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\CZE\\SignHere.pdf", nBufferLength=0x105, lpBuffer=0x31dfb4, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\CZE\\SignHere.pdf", lpFilePart=0x0) returned 0x5c [0051.511] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e4a8) returned 1 [0051.511] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\CZE\\SignHere.pdf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\cze\\signhere.pdf"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x274 [0051.511] GetFileType (hFile=0x274) returned 0x1 [0051.511] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e4a4) returned 1 [0051.511] GetFileType (hFile=0x274) returned 0x1 [0051.511] GetFileSize (in: hFile=0x274, lpFileSizeHigh=0x31e5b0 | out: lpFileSizeHigh=0x31e5b0*=0x0) returned 0x5274b [0051.512] ReadFile (in: hFile=0x274, lpBuffer=0x3948d48, nNumberOfBytesToRead=0x5274b, lpNumberOfBytesRead=0x31e55c, lpOverlapped=0x0 | out: lpBuffer=0x3948d48*, lpNumberOfBytesRead=0x31e55c*=0x5274b, lpOverlapped=0x0) returned 1 [0051.523] CloseHandle (hObject=0x274) returned 1 [0051.547] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\CZE\\SignHere.pdf", nBufferLength=0x105, lpBuffer=0x31dfa0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\CZE\\SignHere.pdf", lpFilePart=0x0) returned 0x5c [0051.547] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e494) returned 1 [0051.547] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\CZE\\SignHere.pdf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\cze\\signhere.pdf"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x274 [0051.550] GetFileType (hFile=0x274) returned 0x1 [0051.550] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e490) returned 1 [0051.550] GetFileType (hFile=0x274) returned 0x1 [0051.550] WriteFile (in: hFile=0x274, lpBuffer=0x3a40370*, nNumberOfBytesToWrite=0x52750, lpNumberOfBytesWritten=0x31e550, lpOverlapped=0x0 | out: lpBuffer=0x3a40370*, lpNumberOfBytesWritten=0x31e550*=0x52750, lpOverlapped=0x0) returned 1 [0051.556] CloseHandle (hObject=0x274) returned 1 [0051.557] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\CZE\\SignHere.pdf", nBufferLength=0x105, lpBuffer=0x31e0d4, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\CZE\\SignHere.pdf", lpFilePart=0x0) returned 0x5c [0051.557] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\CZE\\SignHere.pdf", nBufferLength=0x105, lpBuffer=0x31e0d4, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\CZE\\SignHere.pdf", lpFilePart=0x0) returned 0x5c [0051.557] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e534) returned 1 [0051.557] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\CZE\\SignHere.pdf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\cze\\signhere.pdf"), fInfoLevelId=0x0, lpFileInformation=0x31e5b0 | out: lpFileInformation=0x31e5b0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x99d45400, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x80731040, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x22dc400, ftLastWriteTime.dwHighDateTime=0x1d6eb7f, nFileSizeHigh=0x0, nFileSizeLow=0x52750)) returned 1 [0051.557] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e530) returned 1 [0051.557] MoveFileW (lpExistingFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\CZE\\SignHere.pdf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\cze\\signhere.pdf"), lpNewFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\CZE\\SignHere.pdf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\cze\\signhere.pdf")) returned 1 [0051.557] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\CZE\\Standard.pdf", nBufferLength=0x105, lpBuffer=0x31dfb4, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\CZE\\Standard.pdf", lpFilePart=0x0) returned 0x5c [0051.557] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e4a8) returned 1 [0051.557] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\CZE\\Standard.pdf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\cze\\standard.pdf"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x274 [0051.557] GetFileType (hFile=0x274) returned 0x1 [0051.557] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e4a4) returned 1 [0051.557] GetFileType (hFile=0x274) returned 0x1 [0051.558] GetFileSize (in: hFile=0x274, lpFileSizeHigh=0x31e5b0 | out: lpFileSizeHigh=0x31e5b0*=0x0) returned 0x2c339 [0051.558] ReadFile (in: hFile=0x274, lpBuffer=0x36be350, nNumberOfBytesToRead=0x2c339, lpNumberOfBytesRead=0x31e55c, lpOverlapped=0x0 | out: lpBuffer=0x36be350*, lpNumberOfBytesRead=0x31e55c*=0x2c339, lpOverlapped=0x0) returned 1 [0051.567] CloseHandle (hObject=0x274) returned 1 [0051.588] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\CZE\\Standard.pdf", nBufferLength=0x105, lpBuffer=0x31dfa0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\CZE\\Standard.pdf", lpFilePart=0x0) returned 0x5c [0051.588] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e494) returned 1 [0051.588] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\CZE\\Standard.pdf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\cze\\standard.pdf"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x274 [0051.590] GetFileType (hFile=0x274) returned 0x1 [0051.590] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e490) returned 1 [0051.590] GetFileType (hFile=0x274) returned 0x1 [0051.590] WriteFile (in: hFile=0x274, lpBuffer=0x36ea6a8*, nNumberOfBytesToWrite=0x2c340, lpNumberOfBytesWritten=0x31e550, lpOverlapped=0x0 | out: lpBuffer=0x36ea6a8*, lpNumberOfBytesWritten=0x31e550*=0x2c340, lpOverlapped=0x0) returned 1 [0051.593] CloseHandle (hObject=0x274) returned 1 [0051.593] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\CZE\\Standard.pdf", nBufferLength=0x105, lpBuffer=0x31e0d4, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\CZE\\Standard.pdf", lpFilePart=0x0) returned 0x5c [0051.593] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\CZE\\Standard.pdf", nBufferLength=0x105, lpBuffer=0x31e0d4, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\CZE\\Standard.pdf", lpFilePart=0x0) returned 0x5c [0051.593] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e534) returned 1 [0051.593] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\CZE\\Standard.pdf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\cze\\standard.pdf"), fInfoLevelId=0x0, lpFileInformation=0x31e5b0 | out: lpFileInformation=0x31e5b0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x99d45400, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x8070aee0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x234e820, ftLastWriteTime.dwHighDateTime=0x1d6eb7f, nFileSizeHigh=0x0, nFileSizeLow=0x2c340)) returned 1 [0051.594] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e530) returned 1 [0051.594] MoveFileW (lpExistingFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\CZE\\Standard.pdf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\cze\\standard.pdf"), lpNewFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\CZE\\Standard.pdf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\cze\\standard.pdf")) returned 1 [0051.594] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\CZE\\StandardBusiness.pdf", nBufferLength=0x105, lpBuffer=0x31dfb4, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\CZE\\StandardBusiness.pdf", lpFilePart=0x0) returned 0x64 [0051.594] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e4a8) returned 1 [0051.594] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\CZE\\StandardBusiness.pdf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\cze\\standardbusiness.pdf"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x274 [0051.594] GetFileType (hFile=0x274) returned 0x1 [0051.594] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e4a4) returned 1 [0051.594] GetFileType (hFile=0x274) returned 0x1 [0051.594] GetFileSize (in: hFile=0x274, lpFileSizeHigh=0x31e5b0 | out: lpFileSizeHigh=0x31e5b0*=0x0) returned 0x15c7a [0051.594] ReadFile (in: hFile=0x274, lpBuffer=0x3716a08, nNumberOfBytesToRead=0x15c7a, lpNumberOfBytesRead=0x31e55c, lpOverlapped=0x0 | out: lpBuffer=0x3716a08*, lpNumberOfBytesRead=0x31e55c*=0x15c7a, lpOverlapped=0x0) returned 1 [0051.602] CloseHandle (hObject=0x274) returned 1 [0051.645] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\CZE\\StandardBusiness.pdf", nBufferLength=0x105, lpBuffer=0x31dfa0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\CZE\\StandardBusiness.pdf", lpFilePart=0x0) returned 0x64 [0051.645] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e494) returned 1 [0051.645] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\CZE\\StandardBusiness.pdf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\cze\\standardbusiness.pdf"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x274 [0051.647] GetFileType (hFile=0x274) returned 0x1 [0051.647] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e490) returned 1 [0051.647] GetFileType (hFile=0x274) returned 0x1 [0051.647] WriteFile (in: hFile=0x274, lpBuffer=0x365aa40*, nNumberOfBytesToWrite=0x15c80, lpNumberOfBytesWritten=0x31e550, lpOverlapped=0x0 | out: lpBuffer=0x365aa40*, lpNumberOfBytesWritten=0x31e550*=0x15c80, lpOverlapped=0x0) returned 1 [0051.649] CloseHandle (hObject=0x274) returned 1 [0051.649] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\CZE\\StandardBusiness.pdf", nBufferLength=0x105, lpBuffer=0x31e0d4, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\CZE\\StandardBusiness.pdf", lpFilePart=0x0) returned 0x64 [0051.649] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\CZE\\StandardBusiness.pdf", nBufferLength=0x105, lpBuffer=0x31e0d4, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\CZE\\StandardBusiness.pdf", lpFilePart=0x0) returned 0x64 [0051.649] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e534) returned 1 [0051.649] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\CZE\\StandardBusiness.pdf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\cze\\standardbusiness.pdf"), fInfoLevelId=0x0, lpFileInformation=0x31e5b0 | out: lpFileInformation=0x31e5b0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x99d45400, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x80731040, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x23c0c40, ftLastWriteTime.dwHighDateTime=0x1d6eb7f, nFileSizeHigh=0x0, nFileSizeLow=0x15c80)) returned 1 [0051.649] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e530) returned 1 [0051.649] MoveFileW (lpExistingFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\CZE\\StandardBusiness.pdf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\cze\\standardbusiness.pdf"), lpNewFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\CZE\\StandardBusiness.pdf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\cze\\standardbusiness.pdf")) returned 1 [0051.649] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e5dc) returned 1 [0051.650] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\DAN", nBufferLength=0x105, lpBuffer=0x31e0e4, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\DAN", lpFilePart=0x0) returned 0x4f [0051.650] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\DAN\\", nBufferLength=0x105, lpBuffer=0x31e0b8, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\DAN\\", lpFilePart=0x0) returned 0x50 [0051.650] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\DAN\\*", lpFindFileData=0x31e304 | out: lpFindFileData=0x31e304*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7ff4e760, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x7ff4e760, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x7ff4e760, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x381f40 [0051.650] FindNextFileW (in: hFindFile=0x381f40, lpFindFileData=0x31e314 | out: lpFindFileData=0x31e314*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7ff4e760, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x7ff4e760, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x7ff4e760, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0051.650] FindNextFileW (in: hFindFile=0x381f40, lpFindFileData=0x31e314 | out: lpFindFileData=0x31e314*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9640cd00, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7ff4e760, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9640cd00, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0xe6d5, dwReserved0=0x0, dwReserved1=0x0, cFileName="Dynamic.pdf", cAlternateFileName="")) returned 1 [0051.650] FindNextFileW (in: hFindFile=0x381f40, lpFindFileData=0x31e314 | out: lpFindFileData=0x31e314*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9640cd00, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7ff4e760, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9640cd00, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x9306, dwReserved0=0x0, dwReserved1=0x0, cFileName="SignHere.pdf", cAlternateFileName="")) returned 1 [0051.650] FindNextFileW (in: hFindFile=0x381f40, lpFindFileData=0x31e314 | out: lpFindFileData=0x31e314*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9640cd00, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7ff4e760, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9640cd00, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x18757, dwReserved0=0x0, dwReserved1=0x0, cFileName="StandardBusiness.pdf", cAlternateFileName="STANDA~1.PDF")) returned 1 [0051.650] FindNextFileW (in: hFindFile=0x381f40, lpFindFileData=0x31e314 | out: lpFindFileData=0x31e314*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0051.651] FindClose (in: hFindFile=0x381f40 | out: hFindFile=0x381f40) returned 1 [0051.651] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e59c) returned 1 [0051.651] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e5a8) returned 1 [0051.651] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e5dc) returned 1 [0051.651] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\DAN", nBufferLength=0x105, lpBuffer=0x31e0e4, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\DAN", lpFilePart=0x0) returned 0x4f [0051.651] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\DAN\\", nBufferLength=0x105, lpBuffer=0x31e0b8, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\DAN\\", lpFilePart=0x0) returned 0x50 [0051.651] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\DAN\\*", lpFindFileData=0x31e304 | out: lpFindFileData=0x31e304*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7ff4e760, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x7ff4e760, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x7ff4e760, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x381f40 [0051.651] FindNextFileW (in: hFindFile=0x381f40, lpFindFileData=0x31e314 | out: lpFindFileData=0x31e314*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7ff4e760, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x7ff4e760, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x7ff4e760, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0051.651] FindNextFileW (in: hFindFile=0x381f40, lpFindFileData=0x31e314 | out: lpFindFileData=0x31e314*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9640cd00, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7ff4e760, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9640cd00, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0xe6d5, dwReserved0=0x0, dwReserved1=0x0, cFileName="Dynamic.pdf", cAlternateFileName="")) returned 1 [0051.651] FindNextFileW (in: hFindFile=0x381f40, lpFindFileData=0x31e314 | out: lpFindFileData=0x31e314*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9640cd00, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7ff4e760, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9640cd00, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x9306, dwReserved0=0x0, dwReserved1=0x0, cFileName="SignHere.pdf", cAlternateFileName="")) returned 1 [0051.651] FindNextFileW (in: hFindFile=0x381f40, lpFindFileData=0x31e314 | out: lpFindFileData=0x31e314*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9640cd00, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7ff4e760, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9640cd00, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x18757, dwReserved0=0x0, dwReserved1=0x0, cFileName="StandardBusiness.pdf", cAlternateFileName="STANDA~1.PDF")) returned 1 [0051.651] FindNextFileW (in: hFindFile=0x381f40, lpFindFileData=0x31e314 | out: lpFindFileData=0x31e314*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9640cd00, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7ff4e760, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9640cd00, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x18757, dwReserved0=0x0, dwReserved1=0x0, cFileName="StandardBusiness.pdf", cAlternateFileName="STANDA~1.PDF")) returned 0 [0051.652] FindClose (in: hFindFile=0x381f40 | out: hFindFile=0x381f40) returned 1 [0051.652] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e59c) returned 1 [0051.652] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e5a8) returned 1 [0051.652] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\DAN\\Dynamic.pdf", nBufferLength=0x105, lpBuffer=0x31dfb4, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\DAN\\Dynamic.pdf", lpFilePart=0x0) returned 0x5b [0051.652] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e4a8) returned 1 [0051.652] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\DAN\\Dynamic.pdf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\dan\\dynamic.pdf"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x274 [0051.660] GetFileType (hFile=0x274) returned 0x1 [0051.660] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e4a4) returned 1 [0051.660] GetFileType (hFile=0x274) returned 0x1 [0051.661] GetFileSize (in: hFile=0x274, lpFileSizeHigh=0x31e5b0 | out: lpFileSizeHigh=0x31e5b0*=0x0) returned 0xe6d5 [0051.661] ReadFile (in: hFile=0x274, lpBuffer=0x267ff0c, nNumberOfBytesToRead=0xe6d5, lpNumberOfBytesRead=0x31e55c, lpOverlapped=0x0 | out: lpBuffer=0x267ff0c*, lpNumberOfBytesRead=0x31e55c*=0xe6d5, lpOverlapped=0x0) returned 1 [0051.662] CloseHandle (hObject=0x274) returned 1 [0051.677] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\DAN\\Dynamic.pdf", nBufferLength=0x105, lpBuffer=0x31dfa0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\DAN\\Dynamic.pdf", lpFilePart=0x0) returned 0x5b [0051.677] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e494) returned 1 [0051.677] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\DAN\\Dynamic.pdf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\dan\\dynamic.pdf"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x274 [0051.679] GetFileType (hFile=0x274) returned 0x1 [0051.679] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e490) returned 1 [0051.679] GetFileType (hFile=0x274) returned 0x1 [0051.679] WriteFile (in: hFile=0x274, lpBuffer=0x26f81a8*, nNumberOfBytesToWrite=0xe6e0, lpNumberOfBytesWritten=0x31e550, lpOverlapped=0x0 | out: lpBuffer=0x26f81a8*, lpNumberOfBytesWritten=0x31e550*=0xe6e0, lpOverlapped=0x0) returned 1 [0051.680] CloseHandle (hObject=0x274) returned 1 [0051.680] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\DAN\\Dynamic.pdf", nBufferLength=0x105, lpBuffer=0x31e0d4, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\DAN\\Dynamic.pdf", lpFilePart=0x0) returned 0x5b [0051.680] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\DAN\\Dynamic.pdf", nBufferLength=0x105, lpBuffer=0x31e0d4, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\DAN\\Dynamic.pdf", lpFilePart=0x0) returned 0x5b [0051.680] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e534) returned 1 [0051.680] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\DAN\\Dynamic.pdf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\dan\\dynamic.pdf"), fInfoLevelId=0x0, lpFileInformation=0x31e5b0 | out: lpFileInformation=0x31e5b0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9640cd00, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7ff4e760, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x240cf00, ftLastWriteTime.dwHighDateTime=0x1d6eb7f, nFileSizeHigh=0x0, nFileSizeLow=0xe6e0)) returned 1 [0051.680] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e530) returned 1 [0051.681] MoveFileW (lpExistingFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\DAN\\Dynamic.pdf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\dan\\dynamic.pdf"), lpNewFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\DAN\\Dynamic.pdf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\dan\\dynamic.pdf")) returned 1 [0051.681] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\DAN\\SignHere.pdf", nBufferLength=0x105, lpBuffer=0x31dfb4, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\DAN\\SignHere.pdf", lpFilePart=0x0) returned 0x5c [0051.681] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e4a8) returned 1 [0051.681] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\DAN\\SignHere.pdf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\dan\\signhere.pdf"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x274 [0051.681] GetFileType (hFile=0x274) returned 0x1 [0051.681] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e4a4) returned 1 [0051.681] GetFileType (hFile=0x274) returned 0x1 [0051.681] GetFileSize (in: hFile=0x274, lpFileSizeHigh=0x31e5b0 | out: lpFileSizeHigh=0x31e5b0*=0x0) returned 0x9306 [0051.681] ReadFile (in: hFile=0x274, lpBuffer=0x2706cc4, nNumberOfBytesToRead=0x9306, lpNumberOfBytesRead=0x31e55c, lpOverlapped=0x0 | out: lpBuffer=0x2706cc4*, lpNumberOfBytesRead=0x31e55c*=0x9306, lpOverlapped=0x0) returned 1 [0051.683] CloseHandle (hObject=0x274) returned 1 [0051.697] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\DAN\\SignHere.pdf", nBufferLength=0x105, lpBuffer=0x31dfa0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\DAN\\SignHere.pdf", lpFilePart=0x0) returned 0x5c [0051.697] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e494) returned 1 [0051.697] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\DAN\\SignHere.pdf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\dan\\signhere.pdf"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x274 [0051.698] GetFileType (hFile=0x274) returned 0x1 [0051.698] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e490) returned 1 [0051.698] GetFileType (hFile=0x274) returned 0x1 [0051.698] WriteFile (in: hFile=0x274, lpBuffer=0x27819fc*, nNumberOfBytesToWrite=0x9310, lpNumberOfBytesWritten=0x31e550, lpOverlapped=0x0 | out: lpBuffer=0x27819fc*, lpNumberOfBytesWritten=0x31e550*=0x9310, lpOverlapped=0x0) returned 1 [0051.700] CloseHandle (hObject=0x274) returned 1 [0051.700] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\DAN\\SignHere.pdf", nBufferLength=0x105, lpBuffer=0x31e0d4, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\DAN\\SignHere.pdf", lpFilePart=0x0) returned 0x5c [0051.700] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\DAN\\SignHere.pdf", nBufferLength=0x105, lpBuffer=0x31e0d4, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\DAN\\SignHere.pdf", lpFilePart=0x0) returned 0x5c [0051.700] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e534) returned 1 [0051.700] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\DAN\\SignHere.pdf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\dan\\signhere.pdf"), fInfoLevelId=0x0, lpFileInformation=0x31e5b0 | out: lpFileInformation=0x31e5b0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9640cd00, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7ff4e760, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x24591c0, ftLastWriteTime.dwHighDateTime=0x1d6eb7f, nFileSizeHigh=0x0, nFileSizeLow=0x9310)) returned 1 [0051.700] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e530) returned 1 [0051.700] MoveFileW (lpExistingFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\DAN\\SignHere.pdf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\dan\\signhere.pdf"), lpNewFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\DAN\\SignHere.pdf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\dan\\signhere.pdf")) returned 1 [0051.700] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\DAN\\StandardBusiness.pdf", nBufferLength=0x105, lpBuffer=0x31dfb4, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\DAN\\StandardBusiness.pdf", lpFilePart=0x0) returned 0x64 [0051.701] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e4a8) returned 1 [0051.701] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\DAN\\StandardBusiness.pdf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\dan\\standardbusiness.pdf"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x274 [0051.701] GetFileType (hFile=0x274) returned 0x1 [0051.701] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e4a4) returned 1 [0051.701] GetFileType (hFile=0x274) returned 0x1 [0051.701] GetFileSize (in: hFile=0x274, lpFileSizeHigh=0x31e5b0 | out: lpFileSizeHigh=0x31e5b0*=0x0) returned 0x18757 [0051.701] ReadFile (in: hFile=0x274, lpBuffer=0x368d4a0, nNumberOfBytesToRead=0x18757, lpNumberOfBytesRead=0x31e55c, lpOverlapped=0x0 | out: lpBuffer=0x368d4a0*, lpNumberOfBytesRead=0x31e55c*=0x18757, lpOverlapped=0x0) returned 1 [0051.706] CloseHandle (hObject=0x274) returned 1 [0051.723] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\DAN\\StandardBusiness.pdf", nBufferLength=0x105, lpBuffer=0x31dfa0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\DAN\\StandardBusiness.pdf", lpFilePart=0x0) returned 0x64 [0051.723] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e494) returned 1 [0051.723] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\DAN\\StandardBusiness.pdf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\dan\\standardbusiness.pdf"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x274 [0051.725] GetFileType (hFile=0x274) returned 0x1 [0051.725] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e490) returned 1 [0051.725] GetFileType (hFile=0x274) returned 0x1 [0051.725] WriteFile (in: hFile=0x274, lpBuffer=0x37fd168*, nNumberOfBytesToWrite=0x18760, lpNumberOfBytesWritten=0x31e550, lpOverlapped=0x0 | out: lpBuffer=0x37fd168*, lpNumberOfBytesWritten=0x31e550*=0x18760, lpOverlapped=0x0) returned 1 [0051.727] CloseHandle (hObject=0x274) returned 1 [0051.727] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\DAN\\StandardBusiness.pdf", nBufferLength=0x105, lpBuffer=0x31e0d4, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\DAN\\StandardBusiness.pdf", lpFilePart=0x0) returned 0x64 [0051.727] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\DAN\\StandardBusiness.pdf", nBufferLength=0x105, lpBuffer=0x31e0d4, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\DAN\\StandardBusiness.pdf", lpFilePart=0x0) returned 0x64 [0051.727] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e534) returned 1 [0051.727] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\DAN\\StandardBusiness.pdf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\dan\\standardbusiness.pdf"), fInfoLevelId=0x0, lpFileInformation=0x31e5b0 | out: lpFileInformation=0x31e5b0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9640cd00, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7ff4e760, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x247f320, ftLastWriteTime.dwHighDateTime=0x1d6eb7f, nFileSizeHigh=0x0, nFileSizeLow=0x18760)) returned 1 [0051.727] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e530) returned 1 [0051.727] MoveFileW (lpExistingFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\DAN\\StandardBusiness.pdf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\dan\\standardbusiness.pdf"), lpNewFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\DAN\\StandardBusiness.pdf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\dan\\standardbusiness.pdf")) returned 1 [0051.728] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e5dc) returned 1 [0051.728] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\DEU", nBufferLength=0x105, lpBuffer=0x31e0e4, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\DEU", lpFilePart=0x0) returned 0x4f [0051.728] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\DEU\\", nBufferLength=0x105, lpBuffer=0x31e0b8, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\DEU\\", lpFilePart=0x0) returned 0x50 [0051.728] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\DEU\\*", lpFindFileData=0x31e304 | out: lpFindFileData=0x31e304*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7fedc340, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x7fedc340, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x7fedc340, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x381d40 [0051.752] FindNextFileW (in: hFindFile=0x381d40, lpFindFileData=0x31e314 | out: lpFindFileData=0x31e314*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7fedc340, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x7fedc340, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x7fedc340, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0051.752] FindNextFileW (in: hFindFile=0x381d40, lpFindFileData=0x31e314 | out: lpFindFileData=0x31e314*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x950fa000, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7fedc340, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x950fa000, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0xcadf, dwReserved0=0x0, dwReserved1=0x0, cFileName="Dynamic.pdf", cAlternateFileName="")) returned 1 [0051.752] FindNextFileW (in: hFindFile=0x381d40, lpFindFileData=0x31e314 | out: lpFindFileData=0x31e314*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x950fa000, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7fedc340, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x950fa000, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0xa36f, dwReserved0=0x0, dwReserved1=0x0, cFileName="SignHere.pdf", cAlternateFileName="")) returned 1 [0051.752] FindNextFileW (in: hFindFile=0x381d40, lpFindFileData=0x31e314 | out: lpFindFileData=0x31e314*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x950fa000, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7fedc340, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x950fa000, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x178c0, dwReserved0=0x0, dwReserved1=0x0, cFileName="StandardBusiness.pdf", cAlternateFileName="STANDA~1.PDF")) returned 1 [0051.752] FindNextFileW (in: hFindFile=0x381d40, lpFindFileData=0x31e314 | out: lpFindFileData=0x31e314*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0051.753] FindClose (in: hFindFile=0x381d40 | out: hFindFile=0x381d40) returned 1 [0051.753] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e59c) returned 1 [0051.753] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e5a8) returned 1 [0051.753] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e5dc) returned 1 [0051.753] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\DEU", nBufferLength=0x105, lpBuffer=0x31e0e4, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\DEU", lpFilePart=0x0) returned 0x4f [0051.753] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\DEU\\", nBufferLength=0x105, lpBuffer=0x31e0b8, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\DEU\\", lpFilePart=0x0) returned 0x50 [0051.753] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\DEU\\*", lpFindFileData=0x31e304 | out: lpFindFileData=0x31e304*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7fedc340, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x7fedc340, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x7fedc340, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x381d40 [0051.753] FindNextFileW (in: hFindFile=0x381d40, lpFindFileData=0x31e314 | out: lpFindFileData=0x31e314*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7fedc340, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x7fedc340, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x7fedc340, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0051.753] FindNextFileW (in: hFindFile=0x381d40, lpFindFileData=0x31e314 | out: lpFindFileData=0x31e314*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x950fa000, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7fedc340, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x950fa000, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0xcadf, dwReserved0=0x0, dwReserved1=0x0, cFileName="Dynamic.pdf", cAlternateFileName="")) returned 1 [0051.753] FindNextFileW (in: hFindFile=0x381d40, lpFindFileData=0x31e314 | out: lpFindFileData=0x31e314*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x950fa000, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7fedc340, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x950fa000, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0xa36f, dwReserved0=0x0, dwReserved1=0x0, cFileName="SignHere.pdf", cAlternateFileName="")) returned 1 [0051.753] FindNextFileW (in: hFindFile=0x381d40, lpFindFileData=0x31e314 | out: lpFindFileData=0x31e314*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x950fa000, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7fedc340, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x950fa000, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x178c0, dwReserved0=0x0, dwReserved1=0x0, cFileName="StandardBusiness.pdf", cAlternateFileName="STANDA~1.PDF")) returned 1 [0051.753] FindNextFileW (in: hFindFile=0x381d40, lpFindFileData=0x31e314 | out: lpFindFileData=0x31e314*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x950fa000, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7fedc340, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x950fa000, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x178c0, dwReserved0=0x0, dwReserved1=0x0, cFileName="StandardBusiness.pdf", cAlternateFileName="STANDA~1.PDF")) returned 0 [0051.754] FindClose (in: hFindFile=0x381d40 | out: hFindFile=0x381d40) returned 1 [0051.754] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e59c) returned 1 [0051.754] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e5a8) returned 1 [0051.754] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\DEU\\Dynamic.pdf", nBufferLength=0x105, lpBuffer=0x31dfb4, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\DEU\\Dynamic.pdf", lpFilePart=0x0) returned 0x5b [0051.754] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e4a8) returned 1 [0051.754] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\DEU\\Dynamic.pdf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\deu\\dynamic.pdf"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x274 [0051.754] GetFileType (hFile=0x274) returned 0x1 [0051.754] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e4a4) returned 1 [0051.754] GetFileType (hFile=0x274) returned 0x1 [0051.754] GetFileSize (in: hFile=0x274, lpFileSizeHigh=0x31e5b0 | out: lpFileSizeHigh=0x31e5b0*=0x0) returned 0xcadf [0051.754] ReadFile (in: hFile=0x274, lpBuffer=0x27da814, nNumberOfBytesToRead=0xcadf, lpNumberOfBytesRead=0x31e55c, lpOverlapped=0x0 | out: lpBuffer=0x27da814*, lpNumberOfBytesRead=0x31e55c*=0xcadf, lpOverlapped=0x0) returned 1 [0051.770] CloseHandle (hObject=0x274) returned 1 [0051.814] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\DEU\\Dynamic.pdf", nBufferLength=0x105, lpBuffer=0x31dfa0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\DEU\\Dynamic.pdf", lpFilePart=0x0) returned 0x5b [0051.814] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e494) returned 1 [0051.814] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\DEU\\Dynamic.pdf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\deu\\dynamic.pdf"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x274 [0051.815] GetFileType (hFile=0x274) returned 0x1 [0051.815] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e490) returned 1 [0051.815] GetFileType (hFile=0x274) returned 0x1 [0051.815] WriteFile (in: hFile=0x274, lpBuffer=0x265a92c*, nNumberOfBytesToWrite=0xcae0, lpNumberOfBytesWritten=0x31e550, lpOverlapped=0x0 | out: lpBuffer=0x265a92c*, lpNumberOfBytesWritten=0x31e550*=0xcae0, lpOverlapped=0x0) returned 1 [0051.817] CloseHandle (hObject=0x274) returned 1 [0051.817] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\DEU\\Dynamic.pdf", nBufferLength=0x105, lpBuffer=0x31e0d4, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\DEU\\Dynamic.pdf", lpFilePart=0x0) returned 0x5b [0051.817] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\DEU\\Dynamic.pdf", nBufferLength=0x105, lpBuffer=0x31e0d4, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\DEU\\Dynamic.pdf", lpFilePart=0x0) returned 0x5b [0051.817] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e534) returned 1 [0051.817] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\DEU\\Dynamic.pdf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\deu\\dynamic.pdf"), fInfoLevelId=0x0, lpFileInformation=0x31e5b0 | out: lpFileInformation=0x31e5b0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x950fa000, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7fedc340, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x2563b60, ftLastWriteTime.dwHighDateTime=0x1d6eb7f, nFileSizeHigh=0x0, nFileSizeLow=0xcae0)) returned 1 [0051.817] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e530) returned 1 [0051.817] MoveFileW (lpExistingFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\DEU\\Dynamic.pdf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\deu\\dynamic.pdf"), lpNewFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\DEU\\Dynamic.pdf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\deu\\dynamic.pdf")) returned 1 [0051.817] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\DEU\\SignHere.pdf", nBufferLength=0x105, lpBuffer=0x31dfb4, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\DEU\\SignHere.pdf", lpFilePart=0x0) returned 0x5c [0051.817] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e4a8) returned 1 [0051.817] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\DEU\\SignHere.pdf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\deu\\signhere.pdf"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x274 [0051.818] GetFileType (hFile=0x274) returned 0x1 [0051.818] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e4a4) returned 1 [0051.818] GetFileType (hFile=0x274) returned 0x1 [0051.818] GetFileSize (in: hFile=0x274, lpFileSizeHigh=0x31e5b0 | out: lpFileSizeHigh=0x31e5b0*=0x0) returned 0xa36f [0051.818] ReadFile (in: hFile=0x274, lpBuffer=0x2667848, nNumberOfBytesToRead=0xa36f, lpNumberOfBytesRead=0x31e55c, lpOverlapped=0x0 | out: lpBuffer=0x2667848*, lpNumberOfBytesRead=0x31e55c*=0xa36f, lpOverlapped=0x0) returned 1 [0051.826] CloseHandle (hObject=0x274) returned 1 [0051.842] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\DEU\\SignHere.pdf", nBufferLength=0x105, lpBuffer=0x31dfa0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\DEU\\SignHere.pdf", lpFilePart=0x0) returned 0x5c [0051.842] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e494) returned 1 [0051.842] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\DEU\\SignHere.pdf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\deu\\signhere.pdf"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x274 [0051.843] GetFileType (hFile=0x274) returned 0x1 [0051.843] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e490) returned 1 [0051.843] GetFileType (hFile=0x274) returned 0x1 [0051.843] WriteFile (in: hFile=0x274, lpBuffer=0x26e78bc*, nNumberOfBytesToWrite=0xa370, lpNumberOfBytesWritten=0x31e550, lpOverlapped=0x0 | out: lpBuffer=0x26e78bc*, lpNumberOfBytesWritten=0x31e550*=0xa370, lpOverlapped=0x0) returned 1 [0051.844] CloseHandle (hObject=0x274) returned 1 [0051.844] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\DEU\\SignHere.pdf", nBufferLength=0x105, lpBuffer=0x31e0d4, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\DEU\\SignHere.pdf", lpFilePart=0x0) returned 0x5c [0051.844] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\DEU\\SignHere.pdf", nBufferLength=0x105, lpBuffer=0x31e0d4, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\DEU\\SignHere.pdf", lpFilePart=0x0) returned 0x5c [0051.844] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e534) returned 1 [0051.844] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\DEU\\SignHere.pdf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\deu\\signhere.pdf"), fInfoLevelId=0x0, lpFileInformation=0x31e5b0 | out: lpFileInformation=0x31e5b0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x950fa000, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7fedc340, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x25afe20, ftLastWriteTime.dwHighDateTime=0x1d6eb7f, nFileSizeHigh=0x0, nFileSizeLow=0xa370)) returned 1 [0051.844] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e530) returned 1 [0051.845] MoveFileW (lpExistingFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\DEU\\SignHere.pdf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\deu\\signhere.pdf"), lpNewFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\DEU\\SignHere.pdf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\deu\\signhere.pdf")) returned 1 [0051.845] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\DEU\\StandardBusiness.pdf", nBufferLength=0x105, lpBuffer=0x31dfb4, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\DEU\\StandardBusiness.pdf", lpFilePart=0x0) returned 0x64 [0051.845] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e4a8) returned 1 [0051.845] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\DEU\\StandardBusiness.pdf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\deu\\standardbusiness.pdf"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x274 [0051.845] GetFileType (hFile=0x274) returned 0x1 [0051.845] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e4a4) returned 1 [0051.845] GetFileType (hFile=0x274) returned 0x1 [0051.845] GetFileSize (in: hFile=0x274, lpFileSizeHigh=0x31e5b0 | out: lpFileSizeHigh=0x31e5b0*=0x0) returned 0x178c0 [0051.845] ReadFile (in: hFile=0x274, lpBuffer=0x36a5c18, nNumberOfBytesToRead=0x178c0, lpNumberOfBytesRead=0x31e55c, lpOverlapped=0x0 | out: lpBuffer=0x36a5c18*, lpNumberOfBytesRead=0x31e55c*=0x178c0, lpOverlapped=0x0) returned 1 [0051.877] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\DEU\\StandardBusiness.pdf", nBufferLength=0x105, lpBuffer=0x31dfa0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\DEU\\StandardBusiness.pdf", lpFilePart=0x0) returned 0x64 [0051.877] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e494) returned 1 [0051.877] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\DEU\\StandardBusiness.pdf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\deu\\standardbusiness.pdf"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x274 [0051.879] GetFileType (hFile=0x274) returned 0x1 [0051.879] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e490) returned 1 [0051.879] GetFileType (hFile=0x274) returned 0x1 [0051.879] WriteFile (in: hFile=0x274, lpBuffer=0x388d208*, nNumberOfBytesToWrite=0x178d0, lpNumberOfBytesWritten=0x31e550, lpOverlapped=0x0 | out: lpBuffer=0x388d208*, lpNumberOfBytesWritten=0x31e550*=0x178d0, lpOverlapped=0x0) returned 1 [0051.881] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\DEU\\StandardBusiness.pdf", nBufferLength=0x105, lpBuffer=0x31e0d4, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\DEU\\StandardBusiness.pdf", lpFilePart=0x0) returned 0x64 [0051.881] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\DEU\\StandardBusiness.pdf", nBufferLength=0x105, lpBuffer=0x31e0d4, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\DEU\\StandardBusiness.pdf", lpFilePart=0x0) returned 0x64 [0051.881] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e534) returned 1 [0051.882] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\DEU\\StandardBusiness.pdf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\deu\\standardbusiness.pdf"), fInfoLevelId=0x0, lpFileInformation=0x31e5b0 | out: lpFileInformation=0x31e5b0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x950fa000, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7fedc340, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x25fc0e0, ftLastWriteTime.dwHighDateTime=0x1d6eb7f, nFileSizeHigh=0x0, nFileSizeLow=0x178d0)) returned 1 [0051.882] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e530) returned 1 [0051.882] MoveFileW (lpExistingFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\DEU\\StandardBusiness.pdf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\deu\\standardbusiness.pdf"), lpNewFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\DEU\\StandardBusiness.pdf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\deu\\standardbusiness.pdf")) returned 1 [0051.882] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e5dc) returned 1 [0051.882] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\ENU", nBufferLength=0x105, lpBuffer=0x31e0e4, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\ENU", lpFilePart=0x0) returned 0x4f [0051.882] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\ENU\\", nBufferLength=0x105, lpBuffer=0x31e0b8, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\ENU\\", lpFilePart=0x0) returned 0x50 [0051.882] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\ENU\\*", lpFindFileData=0x31e304 | out: lpFindFileData=0x31e304*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7fedc340, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x7ff024a0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x7ff024a0, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x381e00 [0051.886] FindNextFileW (in: hFindFile=0x381e00, lpFindFileData=0x31e314 | out: lpFindFileData=0x31e314*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7fedc340, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x7ff024a0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x7ff024a0, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0051.886] FindNextFileW (in: hFindFile=0x381e00, lpFindFileData=0x31e314 | out: lpFindFileData=0x31e314*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x950fa000, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7ff024a0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x950fa000, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0xdf82, dwReserved0=0x0, dwReserved1=0x0, cFileName="Dynamic.pdf", cAlternateFileName="")) returned 1 [0051.886] FindNextFileW (in: hFindFile=0x381e00, lpFindFileData=0x31e314 | out: lpFindFileData=0x31e314*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x93de7300, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7ff024a0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x93de7300, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x9f16, dwReserved0=0x0, dwReserved1=0x0, cFileName="SignHere.pdf", cAlternateFileName="")) returned 1 [0051.886] FindNextFileW (in: hFindFile=0x381e00, lpFindFileData=0x31e314 | out: lpFindFileData=0x31e314*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x93de7300, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7fedc340, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x93de7300, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x1a8db, dwReserved0=0x0, dwReserved1=0x0, cFileName="StandardBusiness.pdf", cAlternateFileName="STANDA~1.PDF")) returned 1 [0051.887] FindNextFileW (in: hFindFile=0x381e00, lpFindFileData=0x31e314 | out: lpFindFileData=0x31e314*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0051.887] FindClose (in: hFindFile=0x381e00 | out: hFindFile=0x381e00) returned 1 [0051.887] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e59c) returned 1 [0051.887] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e5a8) returned 1 [0051.887] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e5dc) returned 1 [0051.887] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\ENU", nBufferLength=0x105, lpBuffer=0x31e0e4, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\ENU", lpFilePart=0x0) returned 0x4f [0051.887] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\ENU\\", nBufferLength=0x105, lpBuffer=0x31e0b8, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\ENU\\", lpFilePart=0x0) returned 0x50 [0051.887] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\ENU\\*", lpFindFileData=0x31e304 | out: lpFindFileData=0x31e304*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7fedc340, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x7ff024a0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x7ff024a0, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x381e00 [0051.887] FindNextFileW (in: hFindFile=0x381e00, lpFindFileData=0x31e314 | out: lpFindFileData=0x31e314*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7fedc340, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x7ff024a0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x7ff024a0, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0051.887] FindNextFileW (in: hFindFile=0x381e00, lpFindFileData=0x31e314 | out: lpFindFileData=0x31e314*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x950fa000, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7ff024a0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x950fa000, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0xdf82, dwReserved0=0x0, dwReserved1=0x0, cFileName="Dynamic.pdf", cAlternateFileName="")) returned 1 [0051.887] FindNextFileW (in: hFindFile=0x381e00, lpFindFileData=0x31e314 | out: lpFindFileData=0x31e314*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x93de7300, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7ff024a0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x93de7300, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x9f16, dwReserved0=0x0, dwReserved1=0x0, cFileName="SignHere.pdf", cAlternateFileName="")) returned 1 [0051.888] FindNextFileW (in: hFindFile=0x381e00, lpFindFileData=0x31e314 | out: lpFindFileData=0x31e314*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x93de7300, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7fedc340, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x93de7300, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x1a8db, dwReserved0=0x0, dwReserved1=0x0, cFileName="StandardBusiness.pdf", cAlternateFileName="STANDA~1.PDF")) returned 1 [0051.888] FindNextFileW (in: hFindFile=0x381e00, lpFindFileData=0x31e314 | out: lpFindFileData=0x31e314*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x93de7300, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7fedc340, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x93de7300, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x1a8db, dwReserved0=0x0, dwReserved1=0x0, cFileName="StandardBusiness.pdf", cAlternateFileName="STANDA~1.PDF")) returned 0 [0051.888] FindClose (in: hFindFile=0x381e00 | out: hFindFile=0x381e00) returned 1 [0051.888] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e59c) returned 1 [0051.888] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e5a8) returned 1 [0051.888] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\ENU\\Dynamic.pdf", nBufferLength=0x105, lpBuffer=0x31dfb4, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\ENU\\Dynamic.pdf", lpFilePart=0x0) returned 0x5b [0051.888] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e4a8) returned 1 [0051.888] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\ENU\\Dynamic.pdf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\enu\\dynamic.pdf"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x274 [0051.888] GetFileType (hFile=0x274) returned 0x1 [0051.888] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e4a4) returned 1 [0051.888] GetFileType (hFile=0x274) returned 0x1 [0051.888] GetFileSize (in: hFile=0x274, lpFileSizeHigh=0x31e5b0 | out: lpFileSizeHigh=0x31e5b0*=0x0) returned 0xdf82 [0051.888] ReadFile (in: hFile=0x274, lpBuffer=0x2741738, nNumberOfBytesToRead=0xdf82, lpNumberOfBytesRead=0x31e55c, lpOverlapped=0x0 | out: lpBuffer=0x2741738*, lpNumberOfBytesRead=0x31e55c*=0xdf82, lpOverlapped=0x0) returned 1 [0051.911] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\ENU\\Dynamic.pdf", nBufferLength=0x105, lpBuffer=0x31dfa0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\ENU\\Dynamic.pdf", lpFilePart=0x0) returned 0x5b [0051.911] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e494) returned 1 [0051.911] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\ENU\\Dynamic.pdf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\enu\\dynamic.pdf"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x274 [0051.913] GetFileType (hFile=0x274) returned 0x1 [0051.913] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e490) returned 1 [0051.913] GetFileType (hFile=0x274) returned 0x1 [0051.913] WriteFile (in: hFile=0x274, lpBuffer=0x27b83e4*, nNumberOfBytesToWrite=0xdf90, lpNumberOfBytesWritten=0x31e550, lpOverlapped=0x0 | out: lpBuffer=0x27b83e4*, lpNumberOfBytesWritten=0x31e550*=0xdf90, lpOverlapped=0x0) returned 1 [0051.914] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\ENU\\Dynamic.pdf", nBufferLength=0x105, lpBuffer=0x31e0d4, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\ENU\\Dynamic.pdf", lpFilePart=0x0) returned 0x5b [0051.914] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\ENU\\Dynamic.pdf", nBufferLength=0x105, lpBuffer=0x31e0d4, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\ENU\\Dynamic.pdf", lpFilePart=0x0) returned 0x5b [0051.914] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e534) returned 1 [0051.914] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\ENU\\Dynamic.pdf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\enu\\dynamic.pdf"), fInfoLevelId=0x0, lpFileInformation=0x31e5b0 | out: lpFileInformation=0x31e5b0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x950fa000, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7ff024a0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x26483a0, ftLastWriteTime.dwHighDateTime=0x1d6eb7f, nFileSizeHigh=0x0, nFileSizeLow=0xdf90)) returned 1 [0051.914] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e530) returned 1 [0051.915] MoveFileW (lpExistingFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\ENU\\Dynamic.pdf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\enu\\dynamic.pdf"), lpNewFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\ENU\\Dynamic.pdf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\enu\\dynamic.pdf")) returned 1 [0051.915] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\ENU\\SignHere.pdf", nBufferLength=0x105, lpBuffer=0x31dfb4, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\ENU\\SignHere.pdf", lpFilePart=0x0) returned 0x5c [0051.915] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e4a8) returned 1 [0051.915] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\ENU\\SignHere.pdf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\enu\\signhere.pdf"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x274 [0051.915] GetFileType (hFile=0x274) returned 0x1 [0051.915] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e4a4) returned 1 [0051.915] GetFileType (hFile=0x274) returned 0x1 [0051.915] GetFileSize (in: hFile=0x274, lpFileSizeHigh=0x31e5b0 | out: lpFileSizeHigh=0x31e5b0*=0x0) returned 0x9f16 [0051.915] ReadFile (in: hFile=0x274, lpBuffer=0x27c67b0, nNumberOfBytesToRead=0x9f16, lpNumberOfBytesRead=0x31e55c, lpOverlapped=0x0 | out: lpBuffer=0x27c67b0*, lpNumberOfBytesRead=0x31e55c*=0x9f16, lpOverlapped=0x0) returned 1 [0051.945] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\ENU\\SignHere.pdf", nBufferLength=0x105, lpBuffer=0x31dfa0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\ENU\\SignHere.pdf", lpFilePart=0x0) returned 0x5c [0051.945] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e494) returned 1 [0051.945] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\ENU\\SignHere.pdf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\enu\\signhere.pdf"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x274 [0051.946] GetFileType (hFile=0x274) returned 0x1 [0051.946] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e490) returned 1 [0051.946] GetFileType (hFile=0x274) returned 0x1 [0051.946] WriteFile (in: hFile=0x274, lpBuffer=0x265bd9c*, nNumberOfBytesToWrite=0x9f20, lpNumberOfBytesWritten=0x31e550, lpOverlapped=0x0 | out: lpBuffer=0x265bd9c*, lpNumberOfBytesWritten=0x31e550*=0x9f20, lpOverlapped=0x0) returned 1 [0051.948] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\ENU\\SignHere.pdf", nBufferLength=0x105, lpBuffer=0x31e0d4, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\ENU\\SignHere.pdf", lpFilePart=0x0) returned 0x5c [0051.948] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\ENU\\SignHere.pdf", nBufferLength=0x105, lpBuffer=0x31e0d4, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\ENU\\SignHere.pdf", lpFilePart=0x0) returned 0x5c [0051.948] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e534) returned 1 [0051.948] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\ENU\\SignHere.pdf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\enu\\signhere.pdf"), fInfoLevelId=0x0, lpFileInformation=0x31e5b0 | out: lpFileInformation=0x31e5b0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x93de7300, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7ff024a0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x2694660, ftLastWriteTime.dwHighDateTime=0x1d6eb7f, nFileSizeHigh=0x0, nFileSizeLow=0x9f20)) returned 1 [0051.948] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e530) returned 1 [0051.948] MoveFileW (lpExistingFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\ENU\\SignHere.pdf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\enu\\signhere.pdf"), lpNewFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\ENU\\SignHere.pdf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\enu\\signhere.pdf")) returned 1 [0051.949] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\ENU\\StandardBusiness.pdf", nBufferLength=0x105, lpBuffer=0x31dfb4, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\ENU\\StandardBusiness.pdf", lpFilePart=0x0) returned 0x64 [0051.949] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e4a8) returned 1 [0051.949] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\ENU\\StandardBusiness.pdf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\enu\\standardbusiness.pdf"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x274 [0051.949] GetFileType (hFile=0x274) returned 0x1 [0051.949] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e4a4) returned 1 [0051.949] GetFileType (hFile=0x274) returned 0x1 [0051.949] GetFileSize (in: hFile=0x274, lpFileSizeHigh=0x31e5b0 | out: lpFileSizeHigh=0x31e5b0*=0x0) returned 0x1a8db [0051.949] ReadFile (in: hFile=0x274, lpBuffer=0x38c0a18, nNumberOfBytesToRead=0x1a8db, lpNumberOfBytesRead=0x31e55c, lpOverlapped=0x0 | out: lpBuffer=0x38c0a18*, lpNumberOfBytesRead=0x31e55c*=0x1a8db, lpOverlapped=0x0) returned 1 [0051.957] CloseHandle (hObject=0x274) returned 1 [0052.002] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\ENU\\StandardBusiness.pdf", nBufferLength=0x105, lpBuffer=0x31dfa0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\ENU\\StandardBusiness.pdf", lpFilePart=0x0) returned 0x64 [0052.002] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e494) returned 1 [0052.002] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\ENU\\StandardBusiness.pdf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\enu\\standardbusiness.pdf"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x274 [0052.004] GetFileType (hFile=0x274) returned 0x1 [0052.004] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e490) returned 1 [0052.004] GetFileType (hFile=0x274) returned 0x1 [0052.004] WriteFile (in: hFile=0x274, lpBuffer=0x39456b0*, nNumberOfBytesToWrite=0x1a8e0, lpNumberOfBytesWritten=0x31e550, lpOverlapped=0x0 | out: lpBuffer=0x39456b0*, lpNumberOfBytesWritten=0x31e550*=0x1a8e0, lpOverlapped=0x0) returned 1 [0052.006] CloseHandle (hObject=0x274) returned 1 [0052.006] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\ENU\\StandardBusiness.pdf", nBufferLength=0x105, lpBuffer=0x31e0d4, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\ENU\\StandardBusiness.pdf", lpFilePart=0x0) returned 0x64 [0052.006] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\ENU\\StandardBusiness.pdf", nBufferLength=0x105, lpBuffer=0x31e0d4, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\ENU\\StandardBusiness.pdf", lpFilePart=0x0) returned 0x64 [0052.006] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e534) returned 1 [0052.006] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\ENU\\StandardBusiness.pdf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\enu\\standardbusiness.pdf"), fInfoLevelId=0x0, lpFileInformation=0x31e5b0 | out: lpFileInformation=0x31e5b0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x93de7300, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7fedc340, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x272cbe0, ftLastWriteTime.dwHighDateTime=0x1d6eb7f, nFileSizeHigh=0x0, nFileSizeLow=0x1a8e0)) returned 1 [0052.006] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e530) returned 1 [0052.006] MoveFileW (lpExistingFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\ENU\\StandardBusiness.pdf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\enu\\standardbusiness.pdf"), lpNewFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\ENU\\StandardBusiness.pdf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\enu\\standardbusiness.pdf")) returned 1 [0052.007] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e5dc) returned 1 [0052.007] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\ESP", nBufferLength=0x105, lpBuffer=0x31e0e4, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\ESP", lpFilePart=0x0) returned 0x4f [0052.007] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\ESP\\", nBufferLength=0x105, lpBuffer=0x31e0b8, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\ESP\\", lpFilePart=0x0) returned 0x50 [0052.007] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\ESP\\*", lpFindFileData=0x31e304 | out: lpFindFileData=0x31e304*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7ff4e760, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x7ff4e760, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x7ff4e760, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x381e00 [0052.007] FindNextFileW (in: hFindFile=0x381e00, lpFindFileData=0x31e314 | out: lpFindFileData=0x31e314*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7ff4e760, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x7ff4e760, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x7ff4e760, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0052.007] FindNextFileW (in: hFindFile=0x381e00, lpFindFileData=0x31e314 | out: lpFindFileData=0x31e314*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9640cd00, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7ff4e760, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9640cd00, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0xcdd8, dwReserved0=0x0, dwReserved1=0x0, cFileName="Dynamic.pdf", cAlternateFileName="")) returned 1 [0052.007] FindNextFileW (in: hFindFile=0x381e00, lpFindFileData=0x31e314 | out: lpFindFileData=0x31e314*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9640cd00, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7ff4e760, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9640cd00, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x8c96, dwReserved0=0x0, dwReserved1=0x0, cFileName="SignHere.pdf", cAlternateFileName="")) returned 1 [0052.008] FindNextFileW (in: hFindFile=0x381e00, lpFindFileData=0x31e314 | out: lpFindFileData=0x31e314*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9640cd00, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7ff748c0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9640cd00, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x9a88d, dwReserved0=0x0, dwReserved1=0x0, cFileName="StandardBusiness.pdf", cAlternateFileName="STANDA~1.PDF")) returned 1 [0052.008] FindNextFileW (in: hFindFile=0x381e00, lpFindFileData=0x31e314 | out: lpFindFileData=0x31e314*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0052.008] FindClose (in: hFindFile=0x381e00 | out: hFindFile=0x381e00) returned 1 [0052.008] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e59c) returned 1 [0052.008] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e5a8) returned 1 [0052.008] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e5dc) returned 1 [0052.008] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\ESP", nBufferLength=0x105, lpBuffer=0x31e0e4, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\ESP", lpFilePart=0x0) returned 0x4f [0052.008] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\ESP\\", nBufferLength=0x105, lpBuffer=0x31e0b8, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\ESP\\", lpFilePart=0x0) returned 0x50 [0052.008] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\ESP\\*", lpFindFileData=0x31e304 | out: lpFindFileData=0x31e304*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7ff4e760, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x7ff4e760, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x7ff4e760, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x381e00 [0052.008] FindNextFileW (in: hFindFile=0x381e00, lpFindFileData=0x31e314 | out: lpFindFileData=0x31e314*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7ff4e760, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x7ff4e760, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x7ff4e760, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0052.008] FindNextFileW (in: hFindFile=0x381e00, lpFindFileData=0x31e314 | out: lpFindFileData=0x31e314*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9640cd00, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7ff4e760, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9640cd00, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0xcdd8, dwReserved0=0x0, dwReserved1=0x0, cFileName="Dynamic.pdf", cAlternateFileName="")) returned 1 [0052.009] FindNextFileW (in: hFindFile=0x381e00, lpFindFileData=0x31e314 | out: lpFindFileData=0x31e314*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9640cd00, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7ff4e760, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9640cd00, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x8c96, dwReserved0=0x0, dwReserved1=0x0, cFileName="SignHere.pdf", cAlternateFileName="")) returned 1 [0052.009] FindNextFileW (in: hFindFile=0x381e00, lpFindFileData=0x31e314 | out: lpFindFileData=0x31e314*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9640cd00, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7ff748c0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9640cd00, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x9a88d, dwReserved0=0x0, dwReserved1=0x0, cFileName="StandardBusiness.pdf", cAlternateFileName="STANDA~1.PDF")) returned 1 [0052.009] FindNextFileW (in: hFindFile=0x381e00, lpFindFileData=0x31e314 | out: lpFindFileData=0x31e314*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9640cd00, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7ff748c0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9640cd00, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x9a88d, dwReserved0=0x0, dwReserved1=0x0, cFileName="StandardBusiness.pdf", cAlternateFileName="STANDA~1.PDF")) returned 0 [0052.009] FindClose (in: hFindFile=0x381e00 | out: hFindFile=0x381e00) returned 1 [0052.009] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e59c) returned 1 [0052.009] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e5a8) returned 1 [0052.009] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\ESP\\Dynamic.pdf", nBufferLength=0x105, lpBuffer=0x31dfb4, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\ESP\\Dynamic.pdf", lpFilePart=0x0) returned 0x5b [0052.009] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e4a8) returned 1 [0052.009] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\ESP\\Dynamic.pdf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\esp\\dynamic.pdf"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x274 [0052.010] GetFileType (hFile=0x274) returned 0x1 [0052.010] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e4a4) returned 1 [0052.010] GetFileType (hFile=0x274) returned 0x1 [0052.010] GetFileSize (in: hFile=0x274, lpFileSizeHigh=0x31e5b0 | out: lpFileSizeHigh=0x31e5b0*=0x0) returned 0xcdd8 [0052.010] ReadFile (in: hFile=0x274, lpBuffer=0x26b591c, nNumberOfBytesToRead=0xcdd8, lpNumberOfBytesRead=0x31e55c, lpOverlapped=0x0 | out: lpBuffer=0x26b591c*, lpNumberOfBytesRead=0x31e55c*=0xcdd8, lpOverlapped=0x0) returned 1 [0052.012] CloseHandle (hObject=0x274) returned 1 [0052.027] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\ESP\\Dynamic.pdf", nBufferLength=0x105, lpBuffer=0x31dfa0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\ESP\\Dynamic.pdf", lpFilePart=0x0) returned 0x5b [0052.027] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e494) returned 1 [0052.027] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\ESP\\Dynamic.pdf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\esp\\dynamic.pdf"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x274 [0052.028] GetFileType (hFile=0x274) returned 0x1 [0052.028] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e490) returned 1 [0052.028] GetFileType (hFile=0x274) returned 0x1 [0052.028] WriteFile (in: hFile=0x274, lpBuffer=0x27290b4*, nNumberOfBytesToWrite=0xcde0, lpNumberOfBytesWritten=0x31e550, lpOverlapped=0x0 | out: lpBuffer=0x27290b4*, lpNumberOfBytesWritten=0x31e550*=0xcde0, lpOverlapped=0x0) returned 1 [0052.030] CloseHandle (hObject=0x274) returned 1 [0052.030] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\ESP\\Dynamic.pdf", nBufferLength=0x105, lpBuffer=0x31e0d4, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\ESP\\Dynamic.pdf", lpFilePart=0x0) returned 0x5b [0052.030] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\ESP\\Dynamic.pdf", nBufferLength=0x105, lpBuffer=0x31e0d4, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\ESP\\Dynamic.pdf", lpFilePart=0x0) returned 0x5b [0052.030] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e534) returned 1 [0052.030] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\ESP\\Dynamic.pdf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\esp\\dynamic.pdf"), fInfoLevelId=0x0, lpFileInformation=0x31e5b0 | out: lpFileInformation=0x31e5b0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9640cd00, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7ff4e760, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x2778ea0, ftLastWriteTime.dwHighDateTime=0x1d6eb7f, nFileSizeHigh=0x0, nFileSizeLow=0xcde0)) returned 1 [0052.030] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e530) returned 1 [0052.030] MoveFileW (lpExistingFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\ESP\\Dynamic.pdf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\esp\\dynamic.pdf"), lpNewFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\ESP\\Dynamic.pdf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\esp\\dynamic.pdf")) returned 1 [0052.030] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\ESP\\SignHere.pdf", nBufferLength=0x105, lpBuffer=0x31dfb4, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\ESP\\SignHere.pdf", lpFilePart=0x0) returned 0x5c [0052.030] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e4a8) returned 1 [0052.030] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\ESP\\SignHere.pdf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\esp\\signhere.pdf"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x274 [0052.031] GetFileType (hFile=0x274) returned 0x1 [0052.031] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e4a4) returned 1 [0052.031] GetFileType (hFile=0x274) returned 0x1 [0052.031] GetFileSize (in: hFile=0x274, lpFileSizeHigh=0x31e5b0 | out: lpFileSizeHigh=0x31e5b0*=0x0) returned 0x8c96 [0052.031] ReadFile (in: hFile=0x274, lpBuffer=0x27362d0, nNumberOfBytesToRead=0x8c96, lpNumberOfBytesRead=0x31e55c, lpOverlapped=0x0 | out: lpBuffer=0x27362d0*, lpNumberOfBytesRead=0x31e55c*=0x8c96, lpOverlapped=0x0) returned 1 [0052.034] CloseHandle (hObject=0x274) returned 1 [0052.073] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\ESP\\SignHere.pdf", nBufferLength=0x105, lpBuffer=0x31dfa0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\ESP\\SignHere.pdf", lpFilePart=0x0) returned 0x5c [0052.073] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e494) returned 1 [0052.073] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\ESP\\SignHere.pdf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\esp\\signhere.pdf"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x274 [0052.074] GetFileType (hFile=0x274) returned 0x1 [0052.074] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e490) returned 1 [0052.074] GetFileType (hFile=0x274) returned 0x1 [0052.074] WriteFile (in: hFile=0x274, lpBuffer=0x27aefd8*, nNumberOfBytesToWrite=0x8ca0, lpNumberOfBytesWritten=0x31e550, lpOverlapped=0x0 | out: lpBuffer=0x27aefd8*, lpNumberOfBytesWritten=0x31e550*=0x8ca0, lpOverlapped=0x0) returned 1 [0052.076] CloseHandle (hObject=0x274) returned 1 [0052.076] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\ESP\\SignHere.pdf", nBufferLength=0x105, lpBuffer=0x31e0d4, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\ESP\\SignHere.pdf", lpFilePart=0x0) returned 0x5c [0052.076] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\ESP\\SignHere.pdf", nBufferLength=0x105, lpBuffer=0x31e0d4, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\ESP\\SignHere.pdf", lpFilePart=0x0) returned 0x5c [0052.076] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e534) returned 1 [0052.076] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\ESP\\SignHere.pdf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\esp\\signhere.pdf"), fInfoLevelId=0x0, lpFileInformation=0x31e5b0 | out: lpFileInformation=0x31e5b0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9640cd00, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7ff4e760, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x27eb2c0, ftLastWriteTime.dwHighDateTime=0x1d6eb7f, nFileSizeHigh=0x0, nFileSizeLow=0x8ca0)) returned 1 [0052.076] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e530) returned 1 [0052.076] MoveFileW (lpExistingFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\ESP\\SignHere.pdf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\esp\\signhere.pdf"), lpNewFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\ESP\\SignHere.pdf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\esp\\signhere.pdf")) returned 1 [0052.076] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\ESP\\StandardBusiness.pdf", nBufferLength=0x105, lpBuffer=0x31dfb4, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\ESP\\StandardBusiness.pdf", lpFilePart=0x0) returned 0x64 [0052.076] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e4a8) returned 1 [0052.077] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\ESP\\StandardBusiness.pdf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\esp\\standardbusiness.pdf"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x274 [0052.077] GetFileType (hFile=0x274) returned 0x1 [0052.077] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e4a4) returned 1 [0052.077] GetFileType (hFile=0x274) returned 0x1 [0052.077] GetFileSize (in: hFile=0x274, lpFileSizeHigh=0x31e5b0 | out: lpFileSizeHigh=0x31e5b0*=0x0) returned 0x9a88d [0052.077] ReadFile (in: hFile=0x274, lpBuffer=0x3979b70, nNumberOfBytesToRead=0x9a88d, lpNumberOfBytesRead=0x31e55c, lpOverlapped=0x0 | out: lpBuffer=0x3979b70*, lpNumberOfBytesRead=0x31e55c*=0x9a88d, lpOverlapped=0x0) returned 1 [0052.089] CloseHandle (hObject=0x274) returned 1 [0052.129] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\ESP\\StandardBusiness.pdf", nBufferLength=0x105, lpBuffer=0x31dfa0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\ESP\\StandardBusiness.pdf", lpFilePart=0x0) returned 0x64 [0052.129] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e494) returned 1 [0052.129] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\ESP\\StandardBusiness.pdf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\esp\\standardbusiness.pdf"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x274 [0052.134] GetFileType (hFile=0x274) returned 0x1 [0052.134] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e490) returned 1 [0052.134] GetFileType (hFile=0x274) returned 0x1 [0052.134] WriteFile (in: hFile=0x274, lpBuffer=0x3883710*, nNumberOfBytesToWrite=0x9a890, lpNumberOfBytesWritten=0x31e550, lpOverlapped=0x0 | out: lpBuffer=0x3883710*, lpNumberOfBytesWritten=0x31e550*=0x9a890, lpOverlapped=0x0) returned 1 [0052.145] CloseHandle (hObject=0x274) returned 1 [0052.145] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\ESP\\StandardBusiness.pdf", nBufferLength=0x105, lpBuffer=0x31e0d4, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\ESP\\StandardBusiness.pdf", lpFilePart=0x0) returned 0x64 [0052.145] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\ESP\\StandardBusiness.pdf", nBufferLength=0x105, lpBuffer=0x31e0d4, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\ESP\\StandardBusiness.pdf", lpFilePart=0x0) returned 0x64 [0052.145] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e534) returned 1 [0052.145] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\ESP\\StandardBusiness.pdf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\esp\\standardbusiness.pdf"), fInfoLevelId=0x0, lpFileInformation=0x31e5b0 | out: lpFileInformation=0x31e5b0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9640cd00, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7ff748c0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x2883840, ftLastWriteTime.dwHighDateTime=0x1d6eb7f, nFileSizeHigh=0x0, nFileSizeLow=0x9a890)) returned 1 [0052.145] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e530) returned 1 [0052.145] MoveFileW (lpExistingFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\ESP\\StandardBusiness.pdf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\esp\\standardbusiness.pdf"), lpNewFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\ESP\\StandardBusiness.pdf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\esp\\standardbusiness.pdf")) returned 1 [0052.145] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e5dc) returned 1 [0052.145] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\EUQ", nBufferLength=0x105, lpBuffer=0x31e0e4, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\EUQ", lpFilePart=0x0) returned 0x4f [0052.145] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\EUQ\\", nBufferLength=0x105, lpBuffer=0x31e0b8, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\EUQ\\", lpFilePart=0x0) returned 0x50 [0052.145] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\EUQ\\*", lpFindFileData=0x31e304 | out: lpFindFileData=0x31e304*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x81e8c820, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x81eb2980, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x81eb2980, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x381dc0 [0052.148] FindNextFileW (in: hFindFile=0x381dc0, lpFindFileData=0x31e314 | out: lpFindFileData=0x31e314*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x81e8c820, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x81eb2980, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x81eb2980, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0052.148] FindNextFileW (in: hFindFile=0x381dc0, lpFindFileData=0x31e314 | out: lpFindFileData=0x31e314*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9d67db00, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x81e8c820, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9d67db00, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0xcdd8, dwReserved0=0x0, dwReserved1=0x0, cFileName="Dynamic.pdf", cAlternateFileName="")) returned 1 [0052.148] FindNextFileW (in: hFindFile=0x381dc0, lpFindFileData=0x31e314 | out: lpFindFileData=0x31e314*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9d67db00, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x81e8c820, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9d67db00, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x892d, dwReserved0=0x0, dwReserved1=0x0, cFileName="Faces.pdf", cAlternateFileName="")) returned 1 [0052.148] FindNextFileW (in: hFindFile=0x381dc0, lpFindFileData=0x31e314 | out: lpFindFileData=0x31e314*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9d67db00, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x81e8c820, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9d67db00, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0xc084, dwReserved0=0x0, dwReserved1=0x0, cFileName="Pointers.pdf", cAlternateFileName="")) returned 1 [0052.148] FindNextFileW (in: hFindFile=0x381dc0, lpFindFileData=0x31e314 | out: lpFindFileData=0x31e314*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9d67db00, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x81eb2980, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9d67db00, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x8c96, dwReserved0=0x0, dwReserved1=0x0, cFileName="SignHere.pdf", cAlternateFileName="")) returned 1 [0052.148] FindNextFileW (in: hFindFile=0x381dc0, lpFindFileData=0x31e314 | out: lpFindFileData=0x31e314*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9d67db00, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x81e8c820, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9d67db00, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x2eb9e, dwReserved0=0x0, dwReserved1=0x0, cFileName="Standard.pdf", cAlternateFileName="")) returned 1 [0052.148] FindNextFileW (in: hFindFile=0x381dc0, lpFindFileData=0x31e314 | out: lpFindFileData=0x31e314*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9d67db00, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x81eb2980, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9d67db00, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x9a88d, dwReserved0=0x0, dwReserved1=0x0, cFileName="StandardBusiness.pdf", cAlternateFileName="STANDA~1.PDF")) returned 1 [0052.148] FindNextFileW (in: hFindFile=0x381dc0, lpFindFileData=0x31e314 | out: lpFindFileData=0x31e314*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0052.149] FindClose (in: hFindFile=0x381dc0 | out: hFindFile=0x381dc0) returned 1 [0052.149] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e59c) returned 1 [0052.149] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e5a8) returned 1 [0052.149] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e5dc) returned 1 [0052.149] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\EUQ", nBufferLength=0x105, lpBuffer=0x31e0e4, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\EUQ", lpFilePart=0x0) returned 0x4f [0052.149] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\EUQ\\", nBufferLength=0x105, lpBuffer=0x31e0b8, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\EUQ\\", lpFilePart=0x0) returned 0x50 [0052.149] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\EUQ\\*", lpFindFileData=0x31e304 | out: lpFindFileData=0x31e304*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x81e8c820, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x81eb2980, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x81eb2980, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x381dc0 [0052.150] FindNextFileW (in: hFindFile=0x381dc0, lpFindFileData=0x31e314 | out: lpFindFileData=0x31e314*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x81e8c820, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x81eb2980, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x81eb2980, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0052.150] FindNextFileW (in: hFindFile=0x381dc0, lpFindFileData=0x31e314 | out: lpFindFileData=0x31e314*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9d67db00, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x81e8c820, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9d67db00, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0xcdd8, dwReserved0=0x0, dwReserved1=0x0, cFileName="Dynamic.pdf", cAlternateFileName="")) returned 1 [0052.151] FindNextFileW (in: hFindFile=0x381dc0, lpFindFileData=0x31e314 | out: lpFindFileData=0x31e314*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9d67db00, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x81e8c820, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9d67db00, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x892d, dwReserved0=0x0, dwReserved1=0x0, cFileName="Faces.pdf", cAlternateFileName="")) returned 1 [0052.151] FindNextFileW (in: hFindFile=0x381dc0, lpFindFileData=0x31e314 | out: lpFindFileData=0x31e314*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9d67db00, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x81e8c820, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9d67db00, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0xc084, dwReserved0=0x0, dwReserved1=0x0, cFileName="Pointers.pdf", cAlternateFileName="")) returned 1 [0052.151] FindNextFileW (in: hFindFile=0x381dc0, lpFindFileData=0x31e314 | out: lpFindFileData=0x31e314*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9d67db00, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x81eb2980, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9d67db00, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x8c96, dwReserved0=0x0, dwReserved1=0x0, cFileName="SignHere.pdf", cAlternateFileName="")) returned 1 [0052.151] FindNextFileW (in: hFindFile=0x381dc0, lpFindFileData=0x31e314 | out: lpFindFileData=0x31e314*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9d67db00, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x81e8c820, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9d67db00, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x2eb9e, dwReserved0=0x0, dwReserved1=0x0, cFileName="Standard.pdf", cAlternateFileName="")) returned 1 [0052.151] FindNextFileW (in: hFindFile=0x381dc0, lpFindFileData=0x31e314 | out: lpFindFileData=0x31e314*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9d67db00, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x81eb2980, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9d67db00, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x9a88d, dwReserved0=0x0, dwReserved1=0x0, cFileName="StandardBusiness.pdf", cAlternateFileName="STANDA~1.PDF")) returned 1 [0052.151] FindNextFileW (in: hFindFile=0x381dc0, lpFindFileData=0x31e314 | out: lpFindFileData=0x31e314*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9d67db00, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x81eb2980, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9d67db00, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x9a88d, dwReserved0=0x0, dwReserved1=0x0, cFileName="StandardBusiness.pdf", cAlternateFileName="STANDA~1.PDF")) returned 0 [0052.152] FindClose (in: hFindFile=0x381dc0 | out: hFindFile=0x381dc0) returned 1 [0052.152] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e59c) returned 1 [0052.152] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e5a8) returned 1 [0052.152] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\EUQ\\Dynamic.pdf", nBufferLength=0x105, lpBuffer=0x31dfb4, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\EUQ\\Dynamic.pdf", lpFilePart=0x0) returned 0x5b [0052.152] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e4a8) returned 1 [0052.152] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\EUQ\\Dynamic.pdf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\euq\\dynamic.pdf"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x274 [0052.154] GetFileType (hFile=0x274) returned 0x1 [0052.154] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e4a4) returned 1 [0052.154] GetFileType (hFile=0x274) returned 0x1 [0052.154] GetFileSize (in: hFile=0x274, lpFileSizeHigh=0x31e5b0 | out: lpFileSizeHigh=0x31e5b0*=0x0) returned 0xcdd8 [0052.154] ReadFile (in: hFile=0x274, lpBuffer=0x265f1e8, nNumberOfBytesToRead=0xcdd8, lpNumberOfBytesRead=0x31e55c, lpOverlapped=0x0 | out: lpBuffer=0x265f1e8*, lpNumberOfBytesRead=0x31e55c*=0xcdd8, lpOverlapped=0x0) returned 1 [0052.159] CloseHandle (hObject=0x274) returned 1 [0052.202] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\EUQ\\Dynamic.pdf", nBufferLength=0x105, lpBuffer=0x31dfa0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\EUQ\\Dynamic.pdf", lpFilePart=0x0) returned 0x5b [0052.202] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e494) returned 1 [0052.202] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\EUQ\\Dynamic.pdf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\euq\\dynamic.pdf"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x274 [0052.203] GetFileType (hFile=0x274) returned 0x1 [0052.203] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e490) returned 1 [0052.204] GetFileType (hFile=0x274) returned 0x1 [0052.204] WriteFile (in: hFile=0x274, lpBuffer=0x2649e6c*, nNumberOfBytesToWrite=0xcde0, lpNumberOfBytesWritten=0x31e550, lpOverlapped=0x0 | out: lpBuffer=0x2649e6c*, lpNumberOfBytesWritten=0x31e550*=0xcde0, lpOverlapped=0x0) returned 1 [0052.205] CloseHandle (hObject=0x274) returned 1 [0052.205] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\EUQ\\Dynamic.pdf", nBufferLength=0x105, lpBuffer=0x31e0d4, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\EUQ\\Dynamic.pdf", lpFilePart=0x0) returned 0x5b [0052.205] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\EUQ\\Dynamic.pdf", nBufferLength=0x105, lpBuffer=0x31e0d4, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\EUQ\\Dynamic.pdf", lpFilePart=0x0) returned 0x5b [0052.205] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e534) returned 1 [0052.205] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\EUQ\\Dynamic.pdf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\euq\\dynamic.pdf"), fInfoLevelId=0x0, lpFileInformation=0x31e5b0 | out: lpFileInformation=0x31e5b0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9d67db00, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x81e8c820, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x291bdc0, ftLastWriteTime.dwHighDateTime=0x1d6eb7f, nFileSizeHigh=0x0, nFileSizeLow=0xcde0)) returned 1 [0052.205] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e530) returned 1 [0052.205] MoveFileW (lpExistingFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\EUQ\\Dynamic.pdf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\euq\\dynamic.pdf"), lpNewFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\EUQ\\Dynamic.pdf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\euq\\dynamic.pdf")) returned 1 [0052.206] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\EUQ\\Faces.pdf", nBufferLength=0x105, lpBuffer=0x31dfb4, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\EUQ\\Faces.pdf", lpFilePart=0x0) returned 0x59 [0052.206] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e4a8) returned 1 [0052.206] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\EUQ\\Faces.pdf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\euq\\faces.pdf"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x274 [0052.206] GetFileType (hFile=0x274) returned 0x1 [0052.206] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e4a4) returned 1 [0052.206] GetFileType (hFile=0x274) returned 0x1 [0052.206] GetFileSize (in: hFile=0x274, lpFileSizeHigh=0x31e5b0 | out: lpFileSizeHigh=0x31e5b0*=0x0) returned 0x892d [0052.206] ReadFile (in: hFile=0x274, lpBuffer=0x2657078, nNumberOfBytesToRead=0x892d, lpNumberOfBytesRead=0x31e55c, lpOverlapped=0x0 | out: lpBuffer=0x2657078*, lpNumberOfBytesRead=0x31e55c*=0x892d, lpOverlapped=0x0) returned 1 [0052.209] CloseHandle (hObject=0x274) returned 1 [0052.263] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\EUQ\\Faces.pdf", nBufferLength=0x105, lpBuffer=0x31dfa0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\EUQ\\Faces.pdf", lpFilePart=0x0) returned 0x59 [0052.263] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e494) returned 1 [0052.263] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\EUQ\\Faces.pdf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\euq\\faces.pdf"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x274 [0052.264] GetFileType (hFile=0x274) returned 0x1 [0052.264] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e490) returned 1 [0052.264] GetFileType (hFile=0x274) returned 0x1 [0052.265] WriteFile (in: hFile=0x274, lpBuffer=0x26cedac*, nNumberOfBytesToWrite=0x8930, lpNumberOfBytesWritten=0x31e550, lpOverlapped=0x0 | out: lpBuffer=0x26cedac*, lpNumberOfBytesWritten=0x31e550*=0x8930, lpOverlapped=0x0) returned 1 [0052.266] CloseHandle (hObject=0x274) returned 1 [0052.266] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\EUQ\\Faces.pdf", nBufferLength=0x105, lpBuffer=0x31e0d4, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\EUQ\\Faces.pdf", lpFilePart=0x0) returned 0x59 [0052.266] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\EUQ\\Faces.pdf", nBufferLength=0x105, lpBuffer=0x31e0d4, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\EUQ\\Faces.pdf", lpFilePart=0x0) returned 0x59 [0052.266] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e534) returned 1 [0052.266] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\EUQ\\Faces.pdf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\euq\\faces.pdf"), fInfoLevelId=0x0, lpFileInformation=0x31e5b0 | out: lpFileInformation=0x31e5b0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9d67db00, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x81e8c820, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x29b4340, ftLastWriteTime.dwHighDateTime=0x1d6eb7f, nFileSizeHigh=0x0, nFileSizeLow=0x8930)) returned 1 [0052.266] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e530) returned 1 [0052.266] MoveFileW (lpExistingFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\EUQ\\Faces.pdf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\euq\\faces.pdf"), lpNewFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\EUQ\\Faces.pdf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\euq\\faces.pdf")) returned 1 [0052.266] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\EUQ\\Pointers.pdf", nBufferLength=0x105, lpBuffer=0x31dfb4, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\EUQ\\Pointers.pdf", lpFilePart=0x0) returned 0x5c [0052.266] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e4a8) returned 1 [0052.267] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\EUQ\\Pointers.pdf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\euq\\pointers.pdf"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x274 [0052.267] GetFileType (hFile=0x274) returned 0x1 [0052.267] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e4a4) returned 1 [0052.267] GetFileType (hFile=0x274) returned 0x1 [0052.267] GetFileSize (in: hFile=0x274, lpFileSizeHigh=0x31e5b0 | out: lpFileSizeHigh=0x31e5b0*=0x0) returned 0xc084 [0052.267] ReadFile (in: hFile=0x274, lpBuffer=0x26d7b08, nNumberOfBytesToRead=0xc084, lpNumberOfBytesRead=0x31e55c, lpOverlapped=0x0 | out: lpBuffer=0x26d7b08*, lpNumberOfBytesRead=0x31e55c*=0xc084, lpOverlapped=0x0) returned 1 [0052.273] CloseHandle (hObject=0x274) returned 1 [0052.290] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\EUQ\\Pointers.pdf", nBufferLength=0x105, lpBuffer=0x31dfa0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\EUQ\\Pointers.pdf", lpFilePart=0x0) returned 0x5c [0052.290] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e494) returned 1 [0052.290] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\EUQ\\Pointers.pdf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\euq\\pointers.pdf"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x274 [0052.291] GetFileType (hFile=0x274) returned 0x1 [0052.291] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e490) returned 1 [0052.291] GetFileType (hFile=0x274) returned 0x1 [0052.291] WriteFile (in: hFile=0x274, lpBuffer=0x2748ab0*, nNumberOfBytesToWrite=0xc090, lpNumberOfBytesWritten=0x31e550, lpOverlapped=0x0 | out: lpBuffer=0x2748ab0*, lpNumberOfBytesWritten=0x31e550*=0xc090, lpOverlapped=0x0) returned 1 [0052.292] CloseHandle (hObject=0x274) returned 1 [0052.292] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\EUQ\\Pointers.pdf", nBufferLength=0x105, lpBuffer=0x31e0d4, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\EUQ\\Pointers.pdf", lpFilePart=0x0) returned 0x5c [0052.292] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\EUQ\\Pointers.pdf", nBufferLength=0x105, lpBuffer=0x31e0d4, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\EUQ\\Pointers.pdf", lpFilePart=0x0) returned 0x5c [0052.293] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e534) returned 1 [0052.293] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\EUQ\\Pointers.pdf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\euq\\pointers.pdf"), fInfoLevelId=0x0, lpFileInformation=0x31e5b0 | out: lpFileInformation=0x31e5b0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9d67db00, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x81e8c820, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x2a00600, ftLastWriteTime.dwHighDateTime=0x1d6eb7f, nFileSizeHigh=0x0, nFileSizeLow=0xc090)) returned 1 [0052.293] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e530) returned 1 [0052.293] MoveFileW (lpExistingFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\EUQ\\Pointers.pdf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\euq\\pointers.pdf"), lpNewFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\EUQ\\Pointers.pdf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\euq\\pointers.pdf")) returned 1 [0052.293] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\EUQ\\SignHere.pdf", nBufferLength=0x105, lpBuffer=0x31dfb4, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\EUQ\\SignHere.pdf", lpFilePart=0x0) returned 0x5c [0052.293] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e4a8) returned 1 [0052.293] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\EUQ\\SignHere.pdf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\euq\\signhere.pdf"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x274 [0052.293] GetFileType (hFile=0x274) returned 0x1 [0052.293] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e4a4) returned 1 [0052.293] GetFileType (hFile=0x274) returned 0x1 [0052.293] GetFileSize (in: hFile=0x274, lpFileSizeHigh=0x31e5b0 | out: lpFileSizeHigh=0x31e5b0*=0x0) returned 0x8c96 [0052.293] ReadFile (in: hFile=0x274, lpBuffer=0x2754f8c, nNumberOfBytesToRead=0x8c96, lpNumberOfBytesRead=0x31e55c, lpOverlapped=0x0 | out: lpBuffer=0x2754f8c*, lpNumberOfBytesRead=0x31e55c*=0x8c96, lpOverlapped=0x0) returned 1 [0052.303] CloseHandle (hObject=0x274) returned 1 [0052.319] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\EUQ\\SignHere.pdf", nBufferLength=0x105, lpBuffer=0x31dfa0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\EUQ\\SignHere.pdf", lpFilePart=0x0) returned 0x5c [0052.319] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e494) returned 1 [0052.319] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\EUQ\\SignHere.pdf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\euq\\signhere.pdf"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x274 [0052.320] GetFileType (hFile=0x274) returned 0x1 [0052.320] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e490) returned 1 [0052.320] GetFileType (hFile=0x274) returned 0x1 [0052.320] WriteFile (in: hFile=0x274, lpBuffer=0x27cdc94*, nNumberOfBytesToWrite=0x8ca0, lpNumberOfBytesWritten=0x31e550, lpOverlapped=0x0 | out: lpBuffer=0x27cdc94*, lpNumberOfBytesWritten=0x31e550*=0x8ca0, lpOverlapped=0x0) returned 1 [0052.321] CloseHandle (hObject=0x274) returned 1 [0052.321] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\EUQ\\SignHere.pdf", nBufferLength=0x105, lpBuffer=0x31e0d4, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\EUQ\\SignHere.pdf", lpFilePart=0x0) returned 0x5c [0052.321] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\EUQ\\SignHere.pdf", nBufferLength=0x105, lpBuffer=0x31e0d4, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\EUQ\\SignHere.pdf", lpFilePart=0x0) returned 0x5c [0052.322] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e534) returned 1 [0052.322] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\EUQ\\SignHere.pdf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\euq\\signhere.pdf"), fInfoLevelId=0x0, lpFileInformation=0x31e5b0 | out: lpFileInformation=0x31e5b0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9d67db00, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x81eb2980, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x2a26760, ftLastWriteTime.dwHighDateTime=0x1d6eb7f, nFileSizeHigh=0x0, nFileSizeLow=0x8ca0)) returned 1 [0052.322] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e530) returned 1 [0052.322] MoveFileW (lpExistingFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\EUQ\\SignHere.pdf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\euq\\signhere.pdf"), lpNewFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\EUQ\\SignHere.pdf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\euq\\signhere.pdf")) returned 1 [0052.323] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\EUQ\\Standard.pdf", nBufferLength=0x105, lpBuffer=0x31dfb4, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\EUQ\\Standard.pdf", lpFilePart=0x0) returned 0x5c [0052.323] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e4a8) returned 1 [0052.323] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\EUQ\\Standard.pdf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\euq\\standard.pdf"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x274 [0052.323] GetFileType (hFile=0x274) returned 0x1 [0052.323] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e4a4) returned 1 [0052.323] GetFileType (hFile=0x274) returned 0x1 [0052.323] GetFileSize (in: hFile=0x274, lpFileSizeHigh=0x31e5b0 | out: lpFileSizeHigh=0x31e5b0*=0x0) returned 0x2eb9e [0052.324] ReadFile (in: hFile=0x274, lpBuffer=0x364b190, nNumberOfBytesToRead=0x2eb9e, lpNumberOfBytesRead=0x31e55c, lpOverlapped=0x0 | out: lpBuffer=0x364b190*, lpNumberOfBytesRead=0x31e55c*=0x2eb9e, lpOverlapped=0x0) returned 1 [0052.347] CloseHandle (hObject=0x274) returned 1 [0052.382] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\EUQ\\Standard.pdf", nBufferLength=0x105, lpBuffer=0x31dfa0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\EUQ\\Standard.pdf", lpFilePart=0x0) returned 0x5c [0052.382] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e494) returned 1 [0052.382] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\EUQ\\Standard.pdf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\euq\\standard.pdf"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x274 [0052.384] GetFileType (hFile=0x274) returned 0x1 [0052.384] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e490) returned 1 [0052.384] GetFileType (hFile=0x274) returned 0x1 [0052.384] WriteFile (in: hFile=0x274, lpBuffer=0x3734bf0*, nNumberOfBytesToWrite=0x2eba0, lpNumberOfBytesWritten=0x31e550, lpOverlapped=0x0 | out: lpBuffer=0x3734bf0*, lpNumberOfBytesWritten=0x31e550*=0x2eba0, lpOverlapped=0x0) returned 1 [0052.389] CloseHandle (hObject=0x274) returned 1 [0052.389] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\EUQ\\Standard.pdf", nBufferLength=0x105, lpBuffer=0x31e0d4, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\EUQ\\Standard.pdf", lpFilePart=0x0) returned 0x5c [0052.389] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\EUQ\\Standard.pdf", nBufferLength=0x105, lpBuffer=0x31e0d4, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\EUQ\\Standard.pdf", lpFilePart=0x0) returned 0x5c [0052.389] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e534) returned 1 [0052.389] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\EUQ\\Standard.pdf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\euq\\standard.pdf"), fInfoLevelId=0x0, lpFileInformation=0x31e5b0 | out: lpFileInformation=0x31e5b0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9d67db00, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x81e8c820, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x2ae4e40, ftLastWriteTime.dwHighDateTime=0x1d6eb7f, nFileSizeHigh=0x0, nFileSizeLow=0x2eba0)) returned 1 [0052.389] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e530) returned 1 [0052.389] MoveFileW (lpExistingFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\EUQ\\Standard.pdf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\euq\\standard.pdf"), lpNewFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\EUQ\\Standard.pdf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\euq\\standard.pdf")) returned 1 [0052.390] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\EUQ\\StandardBusiness.pdf", nBufferLength=0x105, lpBuffer=0x31dfb4, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\EUQ\\StandardBusiness.pdf", lpFilePart=0x0) returned 0x64 [0052.390] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e4a8) returned 1 [0052.390] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\EUQ\\StandardBusiness.pdf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\euq\\standardbusiness.pdf"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x274 [0052.390] GetFileType (hFile=0x274) returned 0x1 [0052.390] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e4a4) returned 1 [0052.390] GetFileType (hFile=0x274) returned 0x1 [0052.390] GetFileSize (in: hFile=0x274, lpFileSizeHigh=0x31e5b0 | out: lpFileSizeHigh=0x31e5b0*=0x0) returned 0x9a88d [0052.391] ReadFile (in: hFile=0x274, lpBuffer=0x37637b0, nNumberOfBytesToRead=0x9a88d, lpNumberOfBytesRead=0x31e55c, lpOverlapped=0x0 | out: lpBuffer=0x37637b0*, lpNumberOfBytesRead=0x31e55c*=0x9a88d, lpOverlapped=0x0) returned 1 [0052.411] CloseHandle (hObject=0x274) returned 1 [0052.480] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\EUQ\\StandardBusiness.pdf", nBufferLength=0x105, lpBuffer=0x31dfa0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\EUQ\\StandardBusiness.pdf", lpFilePart=0x0) returned 0x64 [0052.480] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e494) returned 1 [0052.480] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\EUQ\\StandardBusiness.pdf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\euq\\standardbusiness.pdf"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x274 [0052.485] GetFileType (hFile=0x274) returned 0x1 [0052.485] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e490) returned 1 [0052.485] GetFileType (hFile=0x274) returned 0x1 [0052.485] WriteFile (in: hFile=0x274, lpBuffer=0x39331a0*, nNumberOfBytesToWrite=0x9a890, lpNumberOfBytesWritten=0x31e550, lpOverlapped=0x0 | out: lpBuffer=0x39331a0*, lpNumberOfBytesWritten=0x31e550*=0x9a890, lpOverlapped=0x0) returned 1 [0052.495] CloseHandle (hObject=0x274) returned 1 [0052.495] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\EUQ\\StandardBusiness.pdf", nBufferLength=0x105, lpBuffer=0x31e0d4, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\EUQ\\StandardBusiness.pdf", lpFilePart=0x0) returned 0x64 [0052.495] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\EUQ\\StandardBusiness.pdf", nBufferLength=0x105, lpBuffer=0x31e0d4, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\EUQ\\StandardBusiness.pdf", lpFilePart=0x0) returned 0x64 [0052.496] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e534) returned 1 [0052.496] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\EUQ\\StandardBusiness.pdf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\euq\\standardbusiness.pdf"), fInfoLevelId=0x0, lpFileInformation=0x31e5b0 | out: lpFileInformation=0x31e5b0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9d67db00, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x81eb2980, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x2bef7e0, ftLastWriteTime.dwHighDateTime=0x1d6eb7f, nFileSizeHigh=0x0, nFileSizeLow=0x9a890)) returned 1 [0052.496] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e530) returned 1 [0052.496] MoveFileW (lpExistingFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\EUQ\\StandardBusiness.pdf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\euq\\standardbusiness.pdf"), lpNewFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\EUQ\\StandardBusiness.pdf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\euq\\standardbusiness.pdf")) returned 1 [0052.496] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e5dc) returned 1 [0052.496] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\FRA", nBufferLength=0x105, lpBuffer=0x31e0e4, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\FRA", lpFilePart=0x0) returned 0x4f [0052.496] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\FRA\\", nBufferLength=0x105, lpBuffer=0x31e0b8, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\FRA\\", lpFilePart=0x0) returned 0x50 [0052.496] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\FRA\\*", lpFindFileData=0x31e304 | out: lpFindFileData=0x31e304*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7feb61e0, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x7feb61e0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x7feb61e0, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x381dc0 [0052.503] FindNextFileW (in: hFindFile=0x381dc0, lpFindFileData=0x31e314 | out: lpFindFileData=0x31e314*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7feb61e0, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x7feb61e0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x7feb61e0, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0052.503] FindNextFileW (in: hFindFile=0x381dc0, lpFindFileData=0x31e314 | out: lpFindFileData=0x31e314*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x950fa000, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7feb61e0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x950fa000, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x30eb7, dwReserved0=0x0, dwReserved1=0x0, cFileName="Dynamic.pdf", cAlternateFileName="")) returned 1 [0052.504] FindNextFileW (in: hFindFile=0x381dc0, lpFindFileData=0x31e314 | out: lpFindFileData=0x31e314*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x950fa000, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7feb61e0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x950fa000, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x9d75, dwReserved0=0x0, dwReserved1=0x0, cFileName="SignHere.pdf", cAlternateFileName="")) returned 1 [0052.504] FindNextFileW (in: hFindFile=0x381dc0, lpFindFileData=0x31e314 | out: lpFindFileData=0x31e314*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x950fa000, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7feb61e0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x950fa000, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x44925, dwReserved0=0x0, dwReserved1=0x0, cFileName="StandardBusiness.pdf", cAlternateFileName="STANDA~1.PDF")) returned 1 [0052.504] FindNextFileW (in: hFindFile=0x381dc0, lpFindFileData=0x31e314 | out: lpFindFileData=0x31e314*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0052.504] FindClose (in: hFindFile=0x381dc0 | out: hFindFile=0x381dc0) returned 1 [0052.504] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e59c) returned 1 [0052.504] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e5a8) returned 1 [0052.504] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e5dc) returned 1 [0052.504] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\FRA", nBufferLength=0x105, lpBuffer=0x31e0e4, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\FRA", lpFilePart=0x0) returned 0x4f [0052.504] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\FRA\\", nBufferLength=0x105, lpBuffer=0x31e0b8, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\FRA\\", lpFilePart=0x0) returned 0x50 [0052.504] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\FRA\\*", lpFindFileData=0x31e304 | out: lpFindFileData=0x31e304*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7feb61e0, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x7feb61e0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x7feb61e0, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x381dc0 [0052.504] FindNextFileW (in: hFindFile=0x381dc0, lpFindFileData=0x31e314 | out: lpFindFileData=0x31e314*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7feb61e0, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x7feb61e0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x7feb61e0, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0052.505] FindNextFileW (in: hFindFile=0x381dc0, lpFindFileData=0x31e314 | out: lpFindFileData=0x31e314*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x950fa000, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7feb61e0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x950fa000, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x30eb7, dwReserved0=0x0, dwReserved1=0x0, cFileName="Dynamic.pdf", cAlternateFileName="")) returned 1 [0052.505] FindNextFileW (in: hFindFile=0x381dc0, lpFindFileData=0x31e314 | out: lpFindFileData=0x31e314*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x950fa000, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7feb61e0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x950fa000, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x9d75, dwReserved0=0x0, dwReserved1=0x0, cFileName="SignHere.pdf", cAlternateFileName="")) returned 1 [0052.505] FindNextFileW (in: hFindFile=0x381dc0, lpFindFileData=0x31e314 | out: lpFindFileData=0x31e314*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x950fa000, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7feb61e0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x950fa000, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x44925, dwReserved0=0x0, dwReserved1=0x0, cFileName="StandardBusiness.pdf", cAlternateFileName="STANDA~1.PDF")) returned 1 [0052.505] FindNextFileW (in: hFindFile=0x381dc0, lpFindFileData=0x31e314 | out: lpFindFileData=0x31e314*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x950fa000, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7feb61e0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x950fa000, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x44925, dwReserved0=0x0, dwReserved1=0x0, cFileName="StandardBusiness.pdf", cAlternateFileName="STANDA~1.PDF")) returned 0 [0052.505] FindClose (in: hFindFile=0x381dc0 | out: hFindFile=0x381dc0) returned 1 [0052.505] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e59c) returned 1 [0052.505] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e5a8) returned 1 [0052.505] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\FRA\\Dynamic.pdf", nBufferLength=0x105, lpBuffer=0x31dfb4, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\FRA\\Dynamic.pdf", lpFilePart=0x0) returned 0x5b [0052.505] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e4a8) returned 1 [0052.505] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\FRA\\Dynamic.pdf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\fra\\dynamic.pdf"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x274 [0052.506] GetFileType (hFile=0x274) returned 0x1 [0052.506] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e4a4) returned 1 [0052.506] GetFileType (hFile=0x274) returned 0x1 [0052.506] GetFileSize (in: hFile=0x274, lpFileSizeHigh=0x31e5b0 | out: lpFileSizeHigh=0x31e5b0*=0x0) returned 0x30eb7 [0052.506] ReadFile (in: hFile=0x274, lpBuffer=0x37fe060, nNumberOfBytesToRead=0x30eb7, lpNumberOfBytesRead=0x31e55c, lpOverlapped=0x0 | out: lpBuffer=0x37fe060*, lpNumberOfBytesRead=0x31e55c*=0x30eb7, lpOverlapped=0x0) returned 1 [0052.518] CloseHandle (hObject=0x274) returned 1 [0052.563] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\FRA\\Dynamic.pdf", nBufferLength=0x105, lpBuffer=0x31dfa0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\FRA\\Dynamic.pdf", lpFilePart=0x0) returned 0x5b [0052.563] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e494) returned 1 [0052.563] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\FRA\\Dynamic.pdf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\fra\\dynamic.pdf"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x274 [0052.565] GetFileType (hFile=0x274) returned 0x1 [0052.565] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e490) returned 1 [0052.565] GetFileType (hFile=0x274) returned 0x1 [0052.565] WriteFile (in: hFile=0x274, lpBuffer=0x3a2f7d0*, nNumberOfBytesToWrite=0x30ec0, lpNumberOfBytesWritten=0x31e550, lpOverlapped=0x0 | out: lpBuffer=0x3a2f7d0*, lpNumberOfBytesWritten=0x31e550*=0x30ec0, lpOverlapped=0x0) returned 1 [0052.569] CloseHandle (hObject=0x274) returned 1 [0052.569] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\FRA\\Dynamic.pdf", nBufferLength=0x105, lpBuffer=0x31e0d4, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\FRA\\Dynamic.pdf", lpFilePart=0x0) returned 0x5b [0052.569] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\FRA\\Dynamic.pdf", nBufferLength=0x105, lpBuffer=0x31e0d4, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\FRA\\Dynamic.pdf", lpFilePart=0x0) returned 0x5b [0052.569] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e534) returned 1 [0052.569] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\FRA\\Dynamic.pdf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\fra\\dynamic.pdf"), fInfoLevelId=0x0, lpFileInformation=0x31e5b0 | out: lpFileInformation=0x31e5b0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x950fa000, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7feb61e0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x2c87d60, ftLastWriteTime.dwHighDateTime=0x1d6eb7f, nFileSizeHigh=0x0, nFileSizeLow=0x30ec0)) returned 1 [0052.569] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e530) returned 1 [0052.569] MoveFileW (lpExistingFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\FRA\\Dynamic.pdf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\fra\\dynamic.pdf"), lpNewFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\FRA\\Dynamic.pdf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\fra\\dynamic.pdf")) returned 1 [0052.569] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\FRA\\SignHere.pdf", nBufferLength=0x105, lpBuffer=0x31dfb4, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\FRA\\SignHere.pdf", lpFilePart=0x0) returned 0x5c [0052.569] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e4a8) returned 1 [0052.569] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\FRA\\SignHere.pdf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\fra\\signhere.pdf"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x274 [0052.570] GetFileType (hFile=0x274) returned 0x1 [0052.570] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e4a4) returned 1 [0052.570] GetFileType (hFile=0x274) returned 0x1 [0052.570] GetFileSize (in: hFile=0x274, lpFileSizeHigh=0x31e5b0 | out: lpFileSizeHigh=0x31e5b0*=0x0) returned 0x9d75 [0052.570] ReadFile (in: hFile=0x274, lpBuffer=0x26ae2a0, nNumberOfBytesToRead=0x9d75, lpNumberOfBytesRead=0x31e55c, lpOverlapped=0x0 | out: lpBuffer=0x26ae2a0*, lpNumberOfBytesRead=0x31e55c*=0x9d75, lpOverlapped=0x0) returned 1 [0052.571] CloseHandle (hObject=0x274) returned 1 [0052.586] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\FRA\\SignHere.pdf", nBufferLength=0x105, lpBuffer=0x31dfa0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\FRA\\SignHere.pdf", lpFilePart=0x0) returned 0x5c [0052.586] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e494) returned 1 [0052.586] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\FRA\\SignHere.pdf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\fra\\signhere.pdf"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x274 [0052.587] GetFileType (hFile=0x274) returned 0x1 [0052.587] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e490) returned 1 [0052.587] GetFileType (hFile=0x274) returned 0x1 [0052.587] WriteFile (in: hFile=0x274, lpBuffer=0x272c408*, nNumberOfBytesToWrite=0x9d80, lpNumberOfBytesWritten=0x31e550, lpOverlapped=0x0 | out: lpBuffer=0x272c408*, lpNumberOfBytesWritten=0x31e550*=0x9d80, lpOverlapped=0x0) returned 1 [0052.589] CloseHandle (hObject=0x274) returned 1 [0052.589] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\FRA\\SignHere.pdf", nBufferLength=0x105, lpBuffer=0x31e0d4, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\FRA\\SignHere.pdf", lpFilePart=0x0) returned 0x5c [0052.589] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\FRA\\SignHere.pdf", nBufferLength=0x105, lpBuffer=0x31e0d4, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\FRA\\SignHere.pdf", lpFilePart=0x0) returned 0x5c [0052.589] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e534) returned 1 [0052.589] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\FRA\\SignHere.pdf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\fra\\signhere.pdf"), fInfoLevelId=0x0, lpFileInformation=0x31e5b0 | out: lpFileInformation=0x31e5b0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x950fa000, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7feb61e0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x2cd4020, ftLastWriteTime.dwHighDateTime=0x1d6eb7f, nFileSizeHigh=0x0, nFileSizeLow=0x9d80)) returned 1 [0052.589] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e530) returned 1 [0052.589] MoveFileW (lpExistingFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\FRA\\SignHere.pdf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\fra\\signhere.pdf"), lpNewFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\FRA\\SignHere.pdf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\fra\\signhere.pdf")) returned 1 [0052.589] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\FRA\\StandardBusiness.pdf", nBufferLength=0x105, lpBuffer=0x31dfb4, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\FRA\\StandardBusiness.pdf", lpFilePart=0x0) returned 0x64 [0052.589] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e4a8) returned 1 [0052.590] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\FRA\\StandardBusiness.pdf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\fra\\standardbusiness.pdf"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x274 [0052.590] GetFileType (hFile=0x274) returned 0x1 [0052.590] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e4a4) returned 1 [0052.590] GetFileType (hFile=0x274) returned 0x1 [0052.590] GetFileSize (in: hFile=0x274, lpFileSizeHigh=0x31e5b0 | out: lpFileSizeHigh=0x31e5b0*=0x0) returned 0x44925 [0052.590] ReadFile (in: hFile=0x274, lpBuffer=0x3a606b0, nNumberOfBytesToRead=0x44925, lpNumberOfBytesRead=0x31e55c, lpOverlapped=0x0 | out: lpBuffer=0x3a606b0*, lpNumberOfBytesRead=0x31e55c*=0x44925, lpOverlapped=0x0) returned 1 [0052.598] CloseHandle (hObject=0x274) returned 1 [0052.628] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\FRA\\StandardBusiness.pdf", nBufferLength=0x105, lpBuffer=0x31dfa0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\FRA\\StandardBusiness.pdf", lpFilePart=0x0) returned 0x64 [0052.628] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e494) returned 1 [0052.628] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\FRA\\StandardBusiness.pdf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\fra\\standardbusiness.pdf"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x274 [0052.631] GetFileType (hFile=0x274) returned 0x1 [0052.631] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e490) returned 1 [0052.631] GetFileType (hFile=0x274) returned 0x1 [0052.631] WriteFile (in: hFile=0x274, lpBuffer=0x372b990*, nNumberOfBytesToWrite=0x44930, lpNumberOfBytesWritten=0x31e550, lpOverlapped=0x0 | out: lpBuffer=0x372b990*, lpNumberOfBytesWritten=0x31e550*=0x44930, lpOverlapped=0x0) returned 1 [0052.636] CloseHandle (hObject=0x274) returned 1 [0052.636] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\FRA\\StandardBusiness.pdf", nBufferLength=0x105, lpBuffer=0x31e0d4, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\FRA\\StandardBusiness.pdf", lpFilePart=0x0) returned 0x64 [0052.636] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\FRA\\StandardBusiness.pdf", nBufferLength=0x105, lpBuffer=0x31e0d4, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\FRA\\StandardBusiness.pdf", lpFilePart=0x0) returned 0x64 [0052.636] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e534) returned 1 [0052.636] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\FRA\\StandardBusiness.pdf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\fra\\standardbusiness.pdf"), fInfoLevelId=0x0, lpFileInformation=0x31e5b0 | out: lpFileInformation=0x31e5b0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x950fa000, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7feb61e0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x2d46440, ftLastWriteTime.dwHighDateTime=0x1d6eb7f, nFileSizeHigh=0x0, nFileSizeLow=0x44930)) returned 1 [0052.636] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e530) returned 1 [0052.636] MoveFileW (lpExistingFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\FRA\\StandardBusiness.pdf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\fra\\standardbusiness.pdf"), lpNewFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\FRA\\StandardBusiness.pdf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\fra\\standardbusiness.pdf")) returned 1 [0052.637] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e5dc) returned 1 [0052.637] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\HRV", nBufferLength=0x105, lpBuffer=0x31e0e4, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\HRV", lpFilePart=0x0) returned 0x4f [0052.637] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\HRV\\", nBufferLength=0x105, lpBuffer=0x31e0b8, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\HRV\\", lpFilePart=0x0) returned 0x50 [0052.637] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\HRV\\*", lpFindFileData=0x31e304 | out: lpFindFileData=0x31e304*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8070aee0, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x8070aee0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x8070aee0, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x381dc0 [0052.647] FindNextFileW (in: hFindFile=0x381dc0, lpFindFileData=0x31e314 | out: lpFindFileData=0x31e314*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8070aee0, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x8070aee0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x8070aee0, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0052.648] FindNextFileW (in: hFindFile=0x381dc0, lpFindFileData=0x31e314 | out: lpFindFileData=0x31e314*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9b058100, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x8070aee0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9b058100, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x21a02, dwReserved0=0x0, dwReserved1=0x0, cFileName="Dynamic.pdf", cAlternateFileName="")) returned 1 [0052.648] FindNextFileW (in: hFindFile=0x381dc0, lpFindFileData=0x31e314 | out: lpFindFileData=0x31e314*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9b058100, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x8070aee0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9b058100, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x80f5, dwReserved0=0x0, dwReserved1=0x0, cFileName="Faces.pdf", cAlternateFileName="")) returned 1 [0052.648] FindNextFileW (in: hFindFile=0x381dc0, lpFindFileData=0x31e314 | out: lpFindFileData=0x31e314*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9b058100, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x8070aee0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9b058100, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0xb731, dwReserved0=0x0, dwReserved1=0x0, cFileName="Pointers.pdf", cAlternateFileName="")) returned 1 [0052.648] FindNextFileW (in: hFindFile=0x381dc0, lpFindFileData=0x31e314 | out: lpFindFileData=0x31e314*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9b058100, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x8070aee0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9b058100, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0xb6cc, dwReserved0=0x0, dwReserved1=0x0, cFileName="SignHere.pdf", cAlternateFileName="")) returned 1 [0052.648] FindNextFileW (in: hFindFile=0x381dc0, lpFindFileData=0x31e314 | out: lpFindFileData=0x31e314*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9b058100, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x8070aee0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9b058100, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x1c4f5, dwReserved0=0x0, dwReserved1=0x0, cFileName="Standard.pdf", cAlternateFileName="")) returned 1 [0052.648] FindNextFileW (in: hFindFile=0x381dc0, lpFindFileData=0x31e314 | out: lpFindFileData=0x31e314*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9b058100, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x8070aee0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9b058100, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x1b7c1, dwReserved0=0x0, dwReserved1=0x0, cFileName="StandardBusiness.pdf", cAlternateFileName="STANDA~1.PDF")) returned 1 [0052.648] FindNextFileW (in: hFindFile=0x381dc0, lpFindFileData=0x31e314 | out: lpFindFileData=0x31e314*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0052.648] FindClose (in: hFindFile=0x381dc0 | out: hFindFile=0x381dc0) returned 1 [0052.649] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e59c) returned 1 [0052.649] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e5a8) returned 1 [0052.649] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e5dc) returned 1 [0052.649] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\HRV", nBufferLength=0x105, lpBuffer=0x31e0e4, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\HRV", lpFilePart=0x0) returned 0x4f [0052.649] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\HRV\\", nBufferLength=0x105, lpBuffer=0x31e0b8, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\HRV\\", lpFilePart=0x0) returned 0x50 [0052.649] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\HRV\\*", lpFindFileData=0x31e304 | out: lpFindFileData=0x31e304*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8070aee0, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x8070aee0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x8070aee0, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x381dc0 [0052.650] FindNextFileW (in: hFindFile=0x381dc0, lpFindFileData=0x31e314 | out: lpFindFileData=0x31e314*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8070aee0, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x8070aee0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x8070aee0, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0052.650] FindNextFileW (in: hFindFile=0x381dc0, lpFindFileData=0x31e314 | out: lpFindFileData=0x31e314*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9b058100, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x8070aee0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9b058100, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x21a02, dwReserved0=0x0, dwReserved1=0x0, cFileName="Dynamic.pdf", cAlternateFileName="")) returned 1 [0052.651] FindNextFileW (in: hFindFile=0x381dc0, lpFindFileData=0x31e314 | out: lpFindFileData=0x31e314*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9b058100, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x8070aee0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9b058100, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x80f5, dwReserved0=0x0, dwReserved1=0x0, cFileName="Faces.pdf", cAlternateFileName="")) returned 1 [0052.651] FindNextFileW (in: hFindFile=0x381dc0, lpFindFileData=0x31e314 | out: lpFindFileData=0x31e314*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9b058100, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x8070aee0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9b058100, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0xb731, dwReserved0=0x0, dwReserved1=0x0, cFileName="Pointers.pdf", cAlternateFileName="")) returned 1 [0052.651] FindNextFileW (in: hFindFile=0x381dc0, lpFindFileData=0x31e314 | out: lpFindFileData=0x31e314*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9b058100, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x8070aee0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9b058100, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0xb6cc, dwReserved0=0x0, dwReserved1=0x0, cFileName="SignHere.pdf", cAlternateFileName="")) returned 1 [0052.651] FindNextFileW (in: hFindFile=0x381dc0, lpFindFileData=0x31e314 | out: lpFindFileData=0x31e314*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9b058100, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x8070aee0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9b058100, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x1c4f5, dwReserved0=0x0, dwReserved1=0x0, cFileName="Standard.pdf", cAlternateFileName="")) returned 1 [0052.651] FindNextFileW (in: hFindFile=0x381dc0, lpFindFileData=0x31e314 | out: lpFindFileData=0x31e314*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9b058100, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x8070aee0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9b058100, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x1b7c1, dwReserved0=0x0, dwReserved1=0x0, cFileName="StandardBusiness.pdf", cAlternateFileName="STANDA~1.PDF")) returned 1 [0052.651] FindNextFileW (in: hFindFile=0x381dc0, lpFindFileData=0x31e314 | out: lpFindFileData=0x31e314*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9b058100, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x8070aee0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9b058100, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x1b7c1, dwReserved0=0x0, dwReserved1=0x0, cFileName="StandardBusiness.pdf", cAlternateFileName="STANDA~1.PDF")) returned 0 [0052.651] FindClose (in: hFindFile=0x381dc0 | out: hFindFile=0x381dc0) returned 1 [0052.652] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e59c) returned 1 [0052.652] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e5a8) returned 1 [0052.652] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\HRV\\Dynamic.pdf", nBufferLength=0x105, lpBuffer=0x31dfb4, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\HRV\\Dynamic.pdf", lpFilePart=0x0) returned 0x5b [0052.652] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e4a8) returned 1 [0052.652] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\HRV\\Dynamic.pdf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\hrv\\dynamic.pdf"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x274 [0052.653] GetFileType (hFile=0x274) returned 0x1 [0052.654] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e4a4) returned 1 [0052.654] GetFileType (hFile=0x274) returned 0x1 [0052.654] GetFileSize (in: hFile=0x274, lpFileSizeHigh=0x31e5b0 | out: lpFileSizeHigh=0x31e5b0*=0x0) returned 0x21a02 [0052.654] ReadFile (in: hFile=0x274, lpBuffer=0x37702e0, nNumberOfBytesToRead=0x21a02, lpNumberOfBytesRead=0x31e55c, lpOverlapped=0x0 | out: lpBuffer=0x37702e0*, lpNumberOfBytesRead=0x31e55c*=0x21a02, lpOverlapped=0x0) returned 1 [0052.659] CloseHandle (hObject=0x274) returned 1 [0052.700] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\HRV\\Dynamic.pdf", nBufferLength=0x105, lpBuffer=0x31dfa0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\HRV\\Dynamic.pdf", lpFilePart=0x0) returned 0x5b [0052.700] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e494) returned 1 [0052.700] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\HRV\\Dynamic.pdf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\hrv\\dynamic.pdf"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x274 [0052.702] GetFileType (hFile=0x274) returned 0x1 [0052.702] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e490) returned 1 [0052.702] GetFileType (hFile=0x274) returned 0x1 [0052.702] WriteFile (in: hFile=0x274, lpBuffer=0x3818560*, nNumberOfBytesToWrite=0x21a10, lpNumberOfBytesWritten=0x31e550, lpOverlapped=0x0 | out: lpBuffer=0x3818560*, lpNumberOfBytesWritten=0x31e550*=0x21a10, lpOverlapped=0x0) returned 1 [0052.704] CloseHandle (hObject=0x274) returned 1 [0052.705] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\HRV\\Dynamic.pdf", nBufferLength=0x105, lpBuffer=0x31e0d4, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\HRV\\Dynamic.pdf", lpFilePart=0x0) returned 0x5b [0052.705] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\HRV\\Dynamic.pdf", nBufferLength=0x105, lpBuffer=0x31e0d4, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\HRV\\Dynamic.pdf", lpFilePart=0x0) returned 0x5b [0052.705] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e534) returned 1 [0052.705] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\HRV\\Dynamic.pdf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\hrv\\dynamic.pdf"), fInfoLevelId=0x0, lpFileInformation=0x31e5b0 | out: lpFileInformation=0x31e5b0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9b058100, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x8070aee0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x2dde9c0, ftLastWriteTime.dwHighDateTime=0x1d6eb7f, nFileSizeHigh=0x0, nFileSizeLow=0x21a10)) returned 1 [0052.705] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e530) returned 1 [0052.705] MoveFileW (lpExistingFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\HRV\\Dynamic.pdf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\hrv\\dynamic.pdf"), lpNewFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\HRV\\Dynamic.pdf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\hrv\\dynamic.pdf")) returned 1 [0052.705] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\HRV\\Faces.pdf", nBufferLength=0x105, lpBuffer=0x31dfb4, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\HRV\\Faces.pdf", lpFilePart=0x0) returned 0x59 [0052.705] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e4a8) returned 1 [0052.705] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\HRV\\Faces.pdf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\hrv\\faces.pdf"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x274 [0052.705] GetFileType (hFile=0x274) returned 0x1 [0052.705] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e4a4) returned 1 [0052.705] GetFileType (hFile=0x274) returned 0x1 [0052.706] GetFileSize (in: hFile=0x274, lpFileSizeHigh=0x31e5b0 | out: lpFileSizeHigh=0x31e5b0*=0x0) returned 0x80f5 [0052.706] ReadFile (in: hFile=0x274, lpBuffer=0x26af454, nNumberOfBytesToRead=0x80f5, lpNumberOfBytesRead=0x31e55c, lpOverlapped=0x0 | out: lpBuffer=0x26af454*, lpNumberOfBytesRead=0x31e55c*=0x80f5, lpOverlapped=0x0) returned 1 [0052.717] CloseHandle (hObject=0x274) returned 1 [0052.731] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\HRV\\Faces.pdf", nBufferLength=0x105, lpBuffer=0x31dfa0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\HRV\\Faces.pdf", lpFilePart=0x0) returned 0x59 [0052.731] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e494) returned 1 [0052.731] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\HRV\\Faces.pdf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\hrv\\faces.pdf"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x274 [0052.732] GetFileType (hFile=0x274) returned 0x1 [0052.732] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e490) returned 1 [0052.732] GetFileType (hFile=0x274) returned 0x1 [0052.732] WriteFile (in: hFile=0x274, lpBuffer=0x2724d90*, nNumberOfBytesToWrite=0x8100, lpNumberOfBytesWritten=0x31e550, lpOverlapped=0x0 | out: lpBuffer=0x2724d90*, lpNumberOfBytesWritten=0x31e550*=0x8100, lpOverlapped=0x0) returned 1 [0052.733] CloseHandle (hObject=0x274) returned 1 [0052.734] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\HRV\\Faces.pdf", nBufferLength=0x105, lpBuffer=0x31e0d4, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\HRV\\Faces.pdf", lpFilePart=0x0) returned 0x59 [0052.734] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\HRV\\Faces.pdf", nBufferLength=0x105, lpBuffer=0x31e0d4, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\HRV\\Faces.pdf", lpFilePart=0x0) returned 0x59 [0052.734] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e534) returned 1 [0052.734] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\HRV\\Faces.pdf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\hrv\\faces.pdf"), fInfoLevelId=0x0, lpFileInformation=0x31e5b0 | out: lpFileInformation=0x31e5b0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9b058100, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x8070aee0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x2e2ac80, ftLastWriteTime.dwHighDateTime=0x1d6eb7f, nFileSizeHigh=0x0, nFileSizeLow=0x8100)) returned 1 [0052.734] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e530) returned 1 [0052.734] MoveFileW (lpExistingFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\HRV\\Faces.pdf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\hrv\\faces.pdf"), lpNewFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\HRV\\Faces.pdf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\hrv\\faces.pdf")) returned 1 [0052.734] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\HRV\\Pointers.pdf", nBufferLength=0x105, lpBuffer=0x31dfb4, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\HRV\\Pointers.pdf", lpFilePart=0x0) returned 0x5c [0052.734] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e4a8) returned 1 [0052.734] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\HRV\\Pointers.pdf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\hrv\\pointers.pdf"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x274 [0052.734] GetFileType (hFile=0x274) returned 0x1 [0052.734] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e4a4) returned 1 [0052.734] GetFileType (hFile=0x274) returned 0x1 [0052.735] GetFileSize (in: hFile=0x274, lpFileSizeHigh=0x31e5b0 | out: lpFileSizeHigh=0x31e5b0*=0x0) returned 0xb731 [0052.735] ReadFile (in: hFile=0x274, lpBuffer=0x2736c00, nNumberOfBytesToRead=0xb731, lpNumberOfBytesRead=0x31e55c, lpOverlapped=0x0 | out: lpBuffer=0x2736c00*, lpNumberOfBytesRead=0x31e55c*=0xb731, lpOverlapped=0x0) returned 1 [0052.749] CloseHandle (hObject=0x274) returned 1 [0052.791] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\HRV\\Pointers.pdf", nBufferLength=0x105, lpBuffer=0x31dfa0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\HRV\\Pointers.pdf", lpFilePart=0x0) returned 0x5c [0052.791] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e494) returned 1 [0052.791] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\HRV\\Pointers.pdf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\hrv\\pointers.pdf"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x274 [0052.792] GetFileType (hFile=0x274) returned 0x1 [0052.792] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e490) returned 1 [0052.792] GetFileType (hFile=0x274) returned 0x1 [0052.792] WriteFile (in: hFile=0x274, lpBuffer=0x26b9d90*, nNumberOfBytesToWrite=0xb740, lpNumberOfBytesWritten=0x31e550, lpOverlapped=0x0 | out: lpBuffer=0x26b9d90*, lpNumberOfBytesWritten=0x31e550*=0xb740, lpOverlapped=0x0) returned 1 [0052.794] CloseHandle (hObject=0x274) returned 1 [0052.794] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\HRV\\Pointers.pdf", nBufferLength=0x105, lpBuffer=0x31e0d4, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\HRV\\Pointers.pdf", lpFilePart=0x0) returned 0x5c [0052.794] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\HRV\\Pointers.pdf", nBufferLength=0x105, lpBuffer=0x31e0d4, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\HRV\\Pointers.pdf", lpFilePart=0x0) returned 0x5c [0052.794] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e534) returned 1 [0052.794] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\HRV\\Pointers.pdf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\hrv\\pointers.pdf"), fInfoLevelId=0x0, lpFileInformation=0x31e5b0 | out: lpFileInformation=0x31e5b0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9b058100, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x8070aee0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x2ec3200, ftLastWriteTime.dwHighDateTime=0x1d6eb7f, nFileSizeHigh=0x0, nFileSizeLow=0xb740)) returned 1 [0052.794] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e530) returned 1 [0052.794] MoveFileW (lpExistingFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\HRV\\Pointers.pdf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\hrv\\pointers.pdf"), lpNewFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\HRV\\Pointers.pdf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\hrv\\pointers.pdf")) returned 1 [0052.794] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\HRV\\SignHere.pdf", nBufferLength=0x105, lpBuffer=0x31dfb4, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\HRV\\SignHere.pdf", lpFilePart=0x0) returned 0x5c [0052.794] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e4a8) returned 1 [0052.795] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\HRV\\SignHere.pdf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\hrv\\signhere.pdf"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x274 [0052.795] GetFileType (hFile=0x274) returned 0x1 [0052.795] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e4a4) returned 1 [0052.795] GetFileType (hFile=0x274) returned 0x1 [0052.795] GetFileSize (in: hFile=0x274, lpFileSizeHigh=0x31e5b0 | out: lpFileSizeHigh=0x31e5b0*=0x0) returned 0xb6cc [0052.795] ReadFile (in: hFile=0x274, lpBuffer=0x26c591c, nNumberOfBytesToRead=0xb6cc, lpNumberOfBytesRead=0x31e55c, lpOverlapped=0x0 | out: lpBuffer=0x26c591c*, lpNumberOfBytesRead=0x31e55c*=0xb6cc, lpOverlapped=0x0) returned 1 [0052.799] CloseHandle (hObject=0x274) returned 1 [0052.814] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\HRV\\SignHere.pdf", nBufferLength=0x105, lpBuffer=0x31dfa0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\HRV\\SignHere.pdf", lpFilePart=0x0) returned 0x5c [0052.814] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e494) returned 1 [0052.814] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\HRV\\SignHere.pdf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\hrv\\signhere.pdf"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x274 [0052.815] GetFileType (hFile=0x274) returned 0x1 [0052.815] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e490) returned 1 [0052.815] GetFileType (hFile=0x274) returned 0x1 [0052.815] WriteFile (in: hFile=0x274, lpBuffer=0x2734b84*, nNumberOfBytesToWrite=0xb6d0, lpNumberOfBytesWritten=0x31e550, lpOverlapped=0x0 | out: lpBuffer=0x2734b84*, lpNumberOfBytesWritten=0x31e550*=0xb6d0, lpOverlapped=0x0) returned 1 [0052.816] CloseHandle (hObject=0x274) returned 1 [0052.816] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\HRV\\SignHere.pdf", nBufferLength=0x105, lpBuffer=0x31e0d4, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\HRV\\SignHere.pdf", lpFilePart=0x0) returned 0x5c [0052.816] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\HRV\\SignHere.pdf", nBufferLength=0x105, lpBuffer=0x31e0d4, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\HRV\\SignHere.pdf", lpFilePart=0x0) returned 0x5c [0052.816] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e534) returned 1 [0052.816] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\HRV\\SignHere.pdf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\hrv\\signhere.pdf"), fInfoLevelId=0x0, lpFileInformation=0x31e5b0 | out: lpFileInformation=0x31e5b0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9b058100, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x8070aee0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x2ee9360, ftLastWriteTime.dwHighDateTime=0x1d6eb7f, nFileSizeHigh=0x0, nFileSizeLow=0xb6d0)) returned 1 [0052.817] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e530) returned 1 [0052.817] MoveFileW (lpExistingFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\HRV\\SignHere.pdf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\hrv\\signhere.pdf"), lpNewFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\HRV\\SignHere.pdf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\hrv\\signhere.pdf")) returned 1 [0052.817] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\HRV\\Standard.pdf", nBufferLength=0x105, lpBuffer=0x31dfb4, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\HRV\\Standard.pdf", lpFilePart=0x0) returned 0x5c [0052.817] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e4a8) returned 1 [0052.817] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\HRV\\Standard.pdf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\hrv\\standard.pdf"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x274 [0052.817] GetFileType (hFile=0x274) returned 0x1 [0052.817] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e4a4) returned 1 [0052.817] GetFileType (hFile=0x274) returned 0x1 [0052.817] GetFileSize (in: hFile=0x274, lpFileSizeHigh=0x31e5b0 | out: lpFileSizeHigh=0x31e5b0*=0x0) returned 0x1c4f5 [0052.817] ReadFile (in: hFile=0x274, lpBuffer=0x3867bb0, nNumberOfBytesToRead=0x1c4f5, lpNumberOfBytesRead=0x31e55c, lpOverlapped=0x0 | out: lpBuffer=0x3867bb0*, lpNumberOfBytesRead=0x31e55c*=0x1c4f5, lpOverlapped=0x0) returned 1 [0052.820] CloseHandle (hObject=0x274) returned 1 [0052.836] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\HRV\\Standard.pdf", nBufferLength=0x105, lpBuffer=0x31dfa0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\HRV\\Standard.pdf", lpFilePart=0x0) returned 0x5c [0052.836] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e494) returned 1 [0052.836] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\HRV\\Standard.pdf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\hrv\\standard.pdf"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x274 [0052.837] GetFileType (hFile=0x274) returned 0x1 [0052.837] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e490) returned 1 [0052.837] GetFileType (hFile=0x274) returned 0x1 [0052.837] WriteFile (in: hFile=0x274, lpBuffer=0x38f54e8*, nNumberOfBytesToWrite=0x1c500, lpNumberOfBytesWritten=0x31e550, lpOverlapped=0x0 | out: lpBuffer=0x38f54e8*, lpNumberOfBytesWritten=0x31e550*=0x1c500, lpOverlapped=0x0) returned 1 [0052.872] CloseHandle (hObject=0x274) returned 1 [0052.872] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\HRV\\Standard.pdf", nBufferLength=0x105, lpBuffer=0x31e0d4, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\HRV\\Standard.pdf", lpFilePart=0x0) returned 0x5c [0052.872] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\HRV\\Standard.pdf", nBufferLength=0x105, lpBuffer=0x31e0d4, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\HRV\\Standard.pdf", lpFilePart=0x0) returned 0x5c [0052.872] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e534) returned 1 [0052.872] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\HRV\\Standard.pdf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\hrv\\standard.pdf"), fInfoLevelId=0x0, lpFileInformation=0x31e5b0 | out: lpFileInformation=0x31e5b0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9b058100, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x8070aee0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x2f818e0, ftLastWriteTime.dwHighDateTime=0x1d6eb7f, nFileSizeHigh=0x0, nFileSizeLow=0x1c500)) returned 1 [0052.872] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e530) returned 1 [0052.872] MoveFileW (lpExistingFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\HRV\\Standard.pdf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\hrv\\standard.pdf"), lpNewFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\HRV\\Standard.pdf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\hrv\\standard.pdf")) returned 1 [0052.873] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\HRV\\StandardBusiness.pdf", nBufferLength=0x105, lpBuffer=0x31dfb4, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\HRV\\StandardBusiness.pdf", lpFilePart=0x0) returned 0x64 [0052.873] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e4a8) returned 1 [0052.873] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\HRV\\StandardBusiness.pdf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\hrv\\standardbusiness.pdf"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x274 [0052.873] GetFileType (hFile=0x274) returned 0x1 [0052.873] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e4a4) returned 1 [0052.873] GetFileType (hFile=0x274) returned 0x1 [0052.873] GetFileSize (in: hFile=0x274, lpFileSizeHigh=0x31e5b0 | out: lpFileSizeHigh=0x31e5b0*=0x0) returned 0x1b7c1 [0052.873] ReadFile (in: hFile=0x274, lpBuffer=0x3911a08, nNumberOfBytesToRead=0x1b7c1, lpNumberOfBytesRead=0x31e55c, lpOverlapped=0x0 | out: lpBuffer=0x3911a08*, lpNumberOfBytesRead=0x31e55c*=0x1b7c1, lpOverlapped=0x0) returned 1 [0052.887] CloseHandle (hObject=0x274) returned 1 [0052.910] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\HRV\\StandardBusiness.pdf", nBufferLength=0x105, lpBuffer=0x31dfa0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\HRV\\StandardBusiness.pdf", lpFilePart=0x0) returned 0x64 [0052.910] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e494) returned 1 [0052.910] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\HRV\\StandardBusiness.pdf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\hrv\\standardbusiness.pdf"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x274 [0052.911] GetFileType (hFile=0x274) returned 0x1 [0052.911] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e490) returned 1 [0052.911] GetFileType (hFile=0x274) returned 0x1 [0052.911] WriteFile (in: hFile=0x274, lpBuffer=0x3687410*, nNumberOfBytesToWrite=0x1b7d0, lpNumberOfBytesWritten=0x31e550, lpOverlapped=0x0 | out: lpBuffer=0x3687410*, lpNumberOfBytesWritten=0x31e550*=0x1b7d0, lpOverlapped=0x0) returned 1 [0052.913] CloseHandle (hObject=0x274) returned 1 [0052.914] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\HRV\\StandardBusiness.pdf", nBufferLength=0x105, lpBuffer=0x31e0d4, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\HRV\\StandardBusiness.pdf", lpFilePart=0x0) returned 0x64 [0052.914] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\HRV\\StandardBusiness.pdf", nBufferLength=0x105, lpBuffer=0x31e0d4, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\HRV\\StandardBusiness.pdf", lpFilePart=0x0) returned 0x64 [0052.914] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e534) returned 1 [0052.914] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\HRV\\StandardBusiness.pdf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\hrv\\standardbusiness.pdf"), fInfoLevelId=0x0, lpFileInformation=0x31e5b0 | out: lpFileInformation=0x31e5b0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9b058100, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x8070aee0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x2fcdba0, ftLastWriteTime.dwHighDateTime=0x1d6eb7f, nFileSizeHigh=0x0, nFileSizeLow=0x1b7d0)) returned 1 [0052.914] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e530) returned 1 [0052.914] MoveFileW (lpExistingFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\HRV\\StandardBusiness.pdf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\hrv\\standardbusiness.pdf"), lpNewFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\HRV\\StandardBusiness.pdf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\hrv\\standardbusiness.pdf")) returned 1 [0052.914] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e5dc) returned 1 [0052.914] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\HUN", nBufferLength=0x105, lpBuffer=0x31e0e4, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\HUN", lpFilePart=0x0) returned 0x4f [0052.914] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\HUN\\", nBufferLength=0x105, lpBuffer=0x31e0b8, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\HUN\\", lpFilePart=0x0) returned 0x50 [0052.914] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\HUN\\*", lpFindFileData=0x31e304 | out: lpFindFileData=0x31e304*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x806e4d80, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x806e4d80, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x806e4d80, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x381d00 [0052.924] FindNextFileW (in: hFindFile=0x381d00, lpFindFileData=0x31e314 | out: lpFindFileData=0x31e314*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x806e4d80, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x806e4d80, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x806e4d80, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0052.924] FindNextFileW (in: hFindFile=0x381d00, lpFindFileData=0x31e314 | out: lpFindFileData=0x31e314*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9b058100, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x806e4d80, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9b058100, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0xbb3e, dwReserved0=0x0, dwReserved1=0x0, cFileName="Dynamic.pdf", cAlternateFileName="")) returned 1 [0052.924] FindNextFileW (in: hFindFile=0x381d00, lpFindFileData=0x31e314 | out: lpFindFileData=0x31e314*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9b058100, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x806e4d80, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9b058100, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x80f5, dwReserved0=0x0, dwReserved1=0x0, cFileName="Faces.pdf", cAlternateFileName="")) returned 1 [0052.924] FindNextFileW (in: hFindFile=0x381d00, lpFindFileData=0x31e314 | out: lpFindFileData=0x31e314*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9b058100, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x806e4d80, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9b058100, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0xb731, dwReserved0=0x0, dwReserved1=0x0, cFileName="Pointers.pdf", cAlternateFileName="")) returned 1 [0052.924] FindNextFileW (in: hFindFile=0x381d00, lpFindFileData=0x31e314 | out: lpFindFileData=0x31e314*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9b058100, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x806e4d80, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9b058100, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x9083, dwReserved0=0x0, dwReserved1=0x0, cFileName="SignHere.pdf", cAlternateFileName="")) returned 1 [0052.924] FindNextFileW (in: hFindFile=0x381d00, lpFindFileData=0x31e314 | out: lpFindFileData=0x31e314*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9b058100, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x806e4d80, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9b058100, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x1c4f5, dwReserved0=0x0, dwReserved1=0x0, cFileName="Standard.pdf", cAlternateFileName="")) returned 1 [0052.924] FindNextFileW (in: hFindFile=0x381d00, lpFindFileData=0x31e314 | out: lpFindFileData=0x31e314*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9b058100, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x806e4d80, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9b058100, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x17b14, dwReserved0=0x0, dwReserved1=0x0, cFileName="StandardBusiness.pdf", cAlternateFileName="STANDA~1.PDF")) returned 1 [0052.924] FindNextFileW (in: hFindFile=0x381d00, lpFindFileData=0x31e314 | out: lpFindFileData=0x31e314*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0052.925] FindClose (in: hFindFile=0x381d00 | out: hFindFile=0x381d00) returned 1 [0052.925] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e59c) returned 1 [0052.925] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e5a8) returned 1 [0052.925] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e5dc) returned 1 [0052.925] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\HUN", nBufferLength=0x105, lpBuffer=0x31e0e4, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\HUN", lpFilePart=0x0) returned 0x4f [0052.925] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\HUN\\", nBufferLength=0x105, lpBuffer=0x31e0b8, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\HUN\\", lpFilePart=0x0) returned 0x50 [0052.925] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\HUN\\*", lpFindFileData=0x31e304 | out: lpFindFileData=0x31e304*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x806e4d80, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x806e4d80, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x806e4d80, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x381d00 [0052.926] FindNextFileW (in: hFindFile=0x381d00, lpFindFileData=0x31e314 | out: lpFindFileData=0x31e314*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x806e4d80, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x806e4d80, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x806e4d80, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0052.926] FindNextFileW (in: hFindFile=0x381d00, lpFindFileData=0x31e314 | out: lpFindFileData=0x31e314*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9b058100, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x806e4d80, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9b058100, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0xbb3e, dwReserved0=0x0, dwReserved1=0x0, cFileName="Dynamic.pdf", cAlternateFileName="")) returned 1 [0052.927] FindNextFileW (in: hFindFile=0x381d00, lpFindFileData=0x31e314 | out: lpFindFileData=0x31e314*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9b058100, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x806e4d80, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9b058100, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x80f5, dwReserved0=0x0, dwReserved1=0x0, cFileName="Faces.pdf", cAlternateFileName="")) returned 1 [0052.927] FindNextFileW (in: hFindFile=0x381d00, lpFindFileData=0x31e314 | out: lpFindFileData=0x31e314*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9b058100, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x806e4d80, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9b058100, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0xb731, dwReserved0=0x0, dwReserved1=0x0, cFileName="Pointers.pdf", cAlternateFileName="")) returned 1 [0052.927] FindNextFileW (in: hFindFile=0x381d00, lpFindFileData=0x31e314 | out: lpFindFileData=0x31e314*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9b058100, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x806e4d80, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9b058100, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x9083, dwReserved0=0x0, dwReserved1=0x0, cFileName="SignHere.pdf", cAlternateFileName="")) returned 1 [0052.927] FindNextFileW (in: hFindFile=0x381d00, lpFindFileData=0x31e314 | out: lpFindFileData=0x31e314*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9b058100, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x806e4d80, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9b058100, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x1c4f5, dwReserved0=0x0, dwReserved1=0x0, cFileName="Standard.pdf", cAlternateFileName="")) returned 1 [0052.927] FindNextFileW (in: hFindFile=0x381d00, lpFindFileData=0x31e314 | out: lpFindFileData=0x31e314*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9b058100, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x806e4d80, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9b058100, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x17b14, dwReserved0=0x0, dwReserved1=0x0, cFileName="StandardBusiness.pdf", cAlternateFileName="STANDA~1.PDF")) returned 1 [0052.927] FindNextFileW (in: hFindFile=0x381d00, lpFindFileData=0x31e314 | out: lpFindFileData=0x31e314*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9b058100, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x806e4d80, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9b058100, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x17b14, dwReserved0=0x0, dwReserved1=0x0, cFileName="StandardBusiness.pdf", cAlternateFileName="STANDA~1.PDF")) returned 0 [0052.927] FindClose (in: hFindFile=0x381d00 | out: hFindFile=0x381d00) returned 1 [0052.928] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e59c) returned 1 [0052.928] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e5a8) returned 1 [0052.928] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\HUN\\Dynamic.pdf", nBufferLength=0x105, lpBuffer=0x31dfb4, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\HUN\\Dynamic.pdf", lpFilePart=0x0) returned 0x5b [0052.928] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e4a8) returned 1 [0052.928] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\HUN\\Dynamic.pdf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\hun\\dynamic.pdf"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x274 [0052.930] GetFileType (hFile=0x274) returned 0x1 [0052.930] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e4a4) returned 1 [0052.930] GetFileType (hFile=0x274) returned 0x1 [0052.930] GetFileSize (in: hFile=0x274, lpFileSizeHigh=0x31e5b0 | out: lpFileSizeHigh=0x31e5b0*=0x0) returned 0xbb3e [0052.930] ReadFile (in: hFile=0x274, lpBuffer=0x263372c, nNumberOfBytesToRead=0xbb3e, lpNumberOfBytesRead=0x31e55c, lpOverlapped=0x0 | out: lpBuffer=0x263372c*, lpNumberOfBytesRead=0x31e55c*=0xbb3e, lpOverlapped=0x0) returned 1 [0052.932] CloseHandle (hObject=0x274) returned 1 [0052.973] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\HUN\\Dynamic.pdf", nBufferLength=0x105, lpBuffer=0x31dfa0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\HUN\\Dynamic.pdf", lpFilePart=0x0) returned 0x5b [0052.973] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e494) returned 1 [0052.973] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\HUN\\Dynamic.pdf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\hun\\dynamic.pdf"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x274 [0052.974] GetFileType (hFile=0x274) returned 0x1 [0052.974] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e490) returned 1 [0052.974] GetFileType (hFile=0x274) returned 0x1 [0052.974] WriteFile (in: hFile=0x274, lpBuffer=0x26a3844*, nNumberOfBytesToWrite=0xbb40, lpNumberOfBytesWritten=0x31e550, lpOverlapped=0x0 | out: lpBuffer=0x26a3844*, lpNumberOfBytesWritten=0x31e550*=0xbb40, lpOverlapped=0x0) returned 1 [0052.976] CloseHandle (hObject=0x274) returned 1 [0052.976] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\HUN\\Dynamic.pdf", nBufferLength=0x105, lpBuffer=0x31e0d4, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\HUN\\Dynamic.pdf", lpFilePart=0x0) returned 0x5b [0052.976] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\HUN\\Dynamic.pdf", nBufferLength=0x105, lpBuffer=0x31e0d4, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\HUN\\Dynamic.pdf", lpFilePart=0x0) returned 0x5b [0052.976] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e534) returned 1 [0052.976] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\HUN\\Dynamic.pdf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\hun\\dynamic.pdf"), fInfoLevelId=0x0, lpFileInformation=0x31e5b0 | out: lpFileInformation=0x31e5b0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9b058100, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x806e4d80, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x3066120, ftLastWriteTime.dwHighDateTime=0x1d6eb7f, nFileSizeHigh=0x0, nFileSizeLow=0xbb40)) returned 1 [0052.976] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e530) returned 1 [0052.976] MoveFileW (lpExistingFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\HUN\\Dynamic.pdf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\hun\\dynamic.pdf"), lpNewFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\HUN\\Dynamic.pdf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\hun\\dynamic.pdf")) returned 1 [0052.976] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\HUN\\Faces.pdf", nBufferLength=0x105, lpBuffer=0x31dfb4, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\HUN\\Faces.pdf", lpFilePart=0x0) returned 0x59 [0052.976] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e4a8) returned 1 [0052.976] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\HUN\\Faces.pdf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\hun\\faces.pdf"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x274 [0052.977] GetFileType (hFile=0x274) returned 0x1 [0052.977] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e4a4) returned 1 [0052.977] GetFileType (hFile=0x274) returned 0x1 [0052.977] GetFileSize (in: hFile=0x274, lpFileSizeHigh=0x31e5b0 | out: lpFileSizeHigh=0x31e5b0*=0x0) returned 0x80f5 [0052.977] ReadFile (in: hFile=0x274, lpBuffer=0x26af7b0, nNumberOfBytesToRead=0x80f5, lpNumberOfBytesRead=0x31e55c, lpOverlapped=0x0 | out: lpBuffer=0x26af7b0*, lpNumberOfBytesRead=0x31e55c*=0x80f5, lpOverlapped=0x0) returned 1 [0052.984] CloseHandle (hObject=0x274) returned 1 [0052.999] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\HUN\\Faces.pdf", nBufferLength=0x105, lpBuffer=0x31dfa0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\HUN\\Faces.pdf", lpFilePart=0x0) returned 0x59 [0052.999] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e494) returned 1 [0052.999] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\HUN\\Faces.pdf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\hun\\faces.pdf"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x274 [0053.004] GetFileType (hFile=0x274) returned 0x1 [0053.004] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e490) returned 1 [0053.004] GetFileType (hFile=0x274) returned 0x1 [0053.004] WriteFile (in: hFile=0x274, lpBuffer=0x2724a98*, nNumberOfBytesToWrite=0x8100, lpNumberOfBytesWritten=0x31e550, lpOverlapped=0x0 | out: lpBuffer=0x2724a98*, lpNumberOfBytesWritten=0x31e550*=0x8100, lpOverlapped=0x0) returned 1 [0053.006] CloseHandle (hObject=0x274) returned 1 [0053.006] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\HUN\\Faces.pdf", nBufferLength=0x105, lpBuffer=0x31e0d4, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\HUN\\Faces.pdf", lpFilePart=0x0) returned 0x59 [0053.006] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\HUN\\Faces.pdf", nBufferLength=0x105, lpBuffer=0x31e0d4, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\HUN\\Faces.pdf", lpFilePart=0x0) returned 0x59 [0053.006] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e534) returned 1 [0053.006] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\HUN\\Faces.pdf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\hun\\faces.pdf"), fInfoLevelId=0x0, lpFileInformation=0x31e5b0 | out: lpFileInformation=0x31e5b0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9b058100, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x806e4d80, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x30b23e0, ftLastWriteTime.dwHighDateTime=0x1d6eb7f, nFileSizeHigh=0x0, nFileSizeLow=0x8100)) returned 1 [0053.006] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e530) returned 1 [0053.006] MoveFileW (lpExistingFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\HUN\\Faces.pdf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\hun\\faces.pdf"), lpNewFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\HUN\\Faces.pdf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\hun\\faces.pdf")) returned 1 [0053.006] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\HUN\\Pointers.pdf", nBufferLength=0x105, lpBuffer=0x31dfb4, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\HUN\\Pointers.pdf", lpFilePart=0x0) returned 0x5c [0053.006] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e4a8) returned 1 [0053.006] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\HUN\\Pointers.pdf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\hun\\pointers.pdf"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x274 [0053.007] GetFileType (hFile=0x274) returned 0x1 [0053.007] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e4a4) returned 1 [0053.007] GetFileType (hFile=0x274) returned 0x1 [0053.007] GetFileSize (in: hFile=0x274, lpFileSizeHigh=0x31e5b0 | out: lpFileSizeHigh=0x31e5b0*=0x0) returned 0xb731 [0053.007] ReadFile (in: hFile=0x274, lpBuffer=0x272cfc4, nNumberOfBytesToRead=0xb731, lpNumberOfBytesRead=0x31e55c, lpOverlapped=0x0 | out: lpBuffer=0x272cfc4*, lpNumberOfBytesRead=0x31e55c*=0xb731, lpOverlapped=0x0) returned 1 [0053.014] CloseHandle (hObject=0x274) returned 1 [0053.028] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\HUN\\Pointers.pdf", nBufferLength=0x105, lpBuffer=0x31dfa0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\HUN\\Pointers.pdf", lpFilePart=0x0) returned 0x5c [0053.029] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e494) returned 1 [0053.029] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\HUN\\Pointers.pdf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\hun\\pointers.pdf"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x274 [0053.030] GetFileType (hFile=0x274) returned 0x1 [0053.030] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e490) returned 1 [0053.030] GetFileType (hFile=0x274) returned 0x1 [0053.030] WriteFile (in: hFile=0x274, lpBuffer=0x279c380*, nNumberOfBytesToWrite=0xb740, lpNumberOfBytesWritten=0x31e550, lpOverlapped=0x0 | out: lpBuffer=0x279c380*, lpNumberOfBytesWritten=0x31e550*=0xb740, lpOverlapped=0x0) returned 1 [0053.031] CloseHandle (hObject=0x274) returned 1 [0053.031] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\HUN\\Pointers.pdf", nBufferLength=0x105, lpBuffer=0x31e0d4, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\HUN\\Pointers.pdf", lpFilePart=0x0) returned 0x5c [0053.031] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\HUN\\Pointers.pdf", nBufferLength=0x105, lpBuffer=0x31e0d4, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\HUN\\Pointers.pdf", lpFilePart=0x0) returned 0x5c [0053.031] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e534) returned 1 [0053.031] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\HUN\\Pointers.pdf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\hun\\pointers.pdf"), fInfoLevelId=0x0, lpFileInformation=0x31e5b0 | out: lpFileInformation=0x31e5b0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9b058100, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x806e4d80, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x30fe6a0, ftLastWriteTime.dwHighDateTime=0x1d6eb7f, nFileSizeHigh=0x0, nFileSizeLow=0xb740)) returned 1 [0053.031] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e530) returned 1 [0053.032] MoveFileW (lpExistingFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\HUN\\Pointers.pdf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\hun\\pointers.pdf"), lpNewFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\HUN\\Pointers.pdf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\hun\\pointers.pdf")) returned 1 [0053.032] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\HUN\\SignHere.pdf", nBufferLength=0x105, lpBuffer=0x31dfb4, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\HUN\\SignHere.pdf", lpFilePart=0x0) returned 0x5c [0053.032] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e4a8) returned 1 [0053.032] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\HUN\\SignHere.pdf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\hun\\signhere.pdf"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x274 [0053.032] GetFileType (hFile=0x274) returned 0x1 [0053.032] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e4a4) returned 1 [0053.032] GetFileType (hFile=0x274) returned 0x1 [0053.032] GetFileSize (in: hFile=0x274, lpFileSizeHigh=0x31e5b0 | out: lpFileSizeHigh=0x31e5b0*=0x0) returned 0x9083 [0053.032] ReadFile (in: hFile=0x274, lpBuffer=0x27a7f0c, nNumberOfBytesToRead=0x9083, lpNumberOfBytesRead=0x31e55c, lpOverlapped=0x0 | out: lpBuffer=0x27a7f0c*, lpNumberOfBytesRead=0x31e55c*=0x9083, lpOverlapped=0x0) returned 1 [0053.034] CloseHandle (hObject=0x274) returned 1 [0053.049] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\HUN\\SignHere.pdf", nBufferLength=0x105, lpBuffer=0x31dfa0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\HUN\\SignHere.pdf", lpFilePart=0x0) returned 0x5c [0053.049] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e494) returned 1 [0053.049] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\HUN\\SignHere.pdf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\hun\\signhere.pdf"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x274 [0053.050] GetFileType (hFile=0x274) returned 0x1 [0053.050] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e490) returned 1 [0053.050] GetFileType (hFile=0x274) returned 0x1 [0053.050] WriteFile (in: hFile=0x274, lpBuffer=0x2821fc4*, nNumberOfBytesToWrite=0x9090, lpNumberOfBytesWritten=0x31e550, lpOverlapped=0x0 | out: lpBuffer=0x2821fc4*, lpNumberOfBytesWritten=0x31e550*=0x9090, lpOverlapped=0x0) returned 1 [0053.051] CloseHandle (hObject=0x274) returned 1 [0053.051] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\HUN\\SignHere.pdf", nBufferLength=0x105, lpBuffer=0x31e0d4, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\HUN\\SignHere.pdf", lpFilePart=0x0) returned 0x5c [0053.051] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\HUN\\SignHere.pdf", nBufferLength=0x105, lpBuffer=0x31e0d4, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\HUN\\SignHere.pdf", lpFilePart=0x0) returned 0x5c [0053.051] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e534) returned 1 [0053.051] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\HUN\\SignHere.pdf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\hun\\signhere.pdf"), fInfoLevelId=0x0, lpFileInformation=0x31e5b0 | out: lpFileInformation=0x31e5b0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9b058100, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x806e4d80, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x3124800, ftLastWriteTime.dwHighDateTime=0x1d6eb7f, nFileSizeHigh=0x0, nFileSizeLow=0x9090)) returned 1 [0053.051] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e530) returned 1 [0053.051] MoveFileW (lpExistingFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\HUN\\SignHere.pdf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\hun\\signhere.pdf"), lpNewFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\HUN\\SignHere.pdf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\hun\\signhere.pdf")) returned 1 [0053.052] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\HUN\\Standard.pdf", nBufferLength=0x105, lpBuffer=0x31dfb4, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\HUN\\Standard.pdf", lpFilePart=0x0) returned 0x5c [0053.052] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e4a8) returned 1 [0053.052] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\HUN\\Standard.pdf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\hun\\standard.pdf"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x274 [0053.052] GetFileType (hFile=0x274) returned 0x1 [0053.052] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e4a4) returned 1 [0053.052] GetFileType (hFile=0x274) returned 0x1 [0053.052] GetFileSize (in: hFile=0x274, lpFileSizeHigh=0x31e5b0 | out: lpFileSizeHigh=0x31e5b0*=0x0) returned 0x1c4f5 [0053.052] ReadFile (in: hFile=0x274, lpBuffer=0x36d1100, nNumberOfBytesToRead=0x1c4f5, lpNumberOfBytesRead=0x31e55c, lpOverlapped=0x0 | out: lpBuffer=0x36d1100*, lpNumberOfBytesRead=0x31e55c*=0x1c4f5, lpOverlapped=0x0) returned 1 [0053.054] CloseHandle (hObject=0x274) returned 1 [0053.098] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\HUN\\Standard.pdf", nBufferLength=0x105, lpBuffer=0x31dfa0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\HUN\\Standard.pdf", lpFilePart=0x0) returned 0x5c [0053.098] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e494) returned 1 [0053.098] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\HUN\\Standard.pdf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\hun\\standard.pdf"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x274 [0053.099] GetFileType (hFile=0x274) returned 0x1 [0053.099] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e490) returned 1 [0053.099] GetFileType (hFile=0x274) returned 0x1 [0053.099] WriteFile (in: hFile=0x274, lpBuffer=0x375ea38*, nNumberOfBytesToWrite=0x1c500, lpNumberOfBytesWritten=0x31e550, lpOverlapped=0x0 | out: lpBuffer=0x375ea38*, lpNumberOfBytesWritten=0x31e550*=0x1c500, lpOverlapped=0x0) returned 1 [0053.102] CloseHandle (hObject=0x274) returned 1 [0053.102] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\HUN\\Standard.pdf", nBufferLength=0x105, lpBuffer=0x31e0d4, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\HUN\\Standard.pdf", lpFilePart=0x0) returned 0x5c [0053.102] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\HUN\\Standard.pdf", nBufferLength=0x105, lpBuffer=0x31e0d4, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\HUN\\Standard.pdf", lpFilePart=0x0) returned 0x5c [0053.102] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e534) returned 1 [0053.102] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\HUN\\Standard.pdf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\hun\\standard.pdf"), fInfoLevelId=0x0, lpFileInformation=0x31e5b0 | out: lpFileInformation=0x31e5b0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9b058100, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x806e4d80, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x3196c20, ftLastWriteTime.dwHighDateTime=0x1d6eb7f, nFileSizeHigh=0x0, nFileSizeLow=0x1c500)) returned 1 [0053.102] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e530) returned 1 [0053.102] MoveFileW (lpExistingFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\HUN\\Standard.pdf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\hun\\standard.pdf"), lpNewFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\HUN\\Standard.pdf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\hun\\standard.pdf")) returned 1 [0053.102] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\HUN\\StandardBusiness.pdf", nBufferLength=0x105, lpBuffer=0x31dfb4, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\HUN\\StandardBusiness.pdf", lpFilePart=0x0) returned 0x64 [0053.102] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e4a8) returned 1 [0053.102] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\HUN\\StandardBusiness.pdf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\hun\\standardbusiness.pdf"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x274 [0053.103] GetFileType (hFile=0x274) returned 0x1 [0053.103] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e4a4) returned 1 [0053.103] GetFileType (hFile=0x274) returned 0x1 [0053.103] GetFileSize (in: hFile=0x274, lpFileSizeHigh=0x31e5b0 | out: lpFileSizeHigh=0x31e5b0*=0x0) returned 0x17b14 [0053.103] ReadFile (in: hFile=0x274, lpBuffer=0x377af58, nNumberOfBytesToRead=0x17b14, lpNumberOfBytesRead=0x31e55c, lpOverlapped=0x0 | out: lpBuffer=0x377af58*, lpNumberOfBytesRead=0x31e55c*=0x17b14, lpOverlapped=0x0) returned 1 [0053.105] CloseHandle (hObject=0x274) returned 1 [0053.121] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\HUN\\StandardBusiness.pdf", nBufferLength=0x105, lpBuffer=0x31dfa0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\HUN\\StandardBusiness.pdf", lpFilePart=0x0) returned 0x64 [0053.121] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e494) returned 1 [0053.121] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\HUN\\StandardBusiness.pdf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\hun\\standardbusiness.pdf"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x274 [0053.122] GetFileType (hFile=0x274) returned 0x1 [0053.122] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e490) returned 1 [0053.122] GetFileType (hFile=0x274) returned 0x1 [0053.122] WriteFile (in: hFile=0x274, lpBuffer=0x37f1728*, nNumberOfBytesToWrite=0x17b20, lpNumberOfBytesWritten=0x31e550, lpOverlapped=0x0 | out: lpBuffer=0x37f1728*, lpNumberOfBytesWritten=0x31e550*=0x17b20, lpOverlapped=0x0) returned 1 [0053.124] CloseHandle (hObject=0x274) returned 1 [0053.124] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\HUN\\StandardBusiness.pdf", nBufferLength=0x105, lpBuffer=0x31e0d4, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\HUN\\StandardBusiness.pdf", lpFilePart=0x0) returned 0x64 [0053.124] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\HUN\\StandardBusiness.pdf", nBufferLength=0x105, lpBuffer=0x31e0d4, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\HUN\\StandardBusiness.pdf", lpFilePart=0x0) returned 0x64 [0053.124] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e534) returned 1 [0053.124] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\HUN\\StandardBusiness.pdf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\hun\\standardbusiness.pdf"), fInfoLevelId=0x0, lpFileInformation=0x31e5b0 | out: lpFileInformation=0x31e5b0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9b058100, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x806e4d80, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x31e2ee0, ftLastWriteTime.dwHighDateTime=0x1d6eb7f, nFileSizeHigh=0x0, nFileSizeLow=0x17b20)) returned 1 [0053.124] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e530) returned 1 [0053.124] MoveFileW (lpExistingFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\HUN\\StandardBusiness.pdf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\hun\\standardbusiness.pdf"), lpNewFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\HUN\\StandardBusiness.pdf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\hun\\standardbusiness.pdf")) returned 1 [0053.125] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e5dc) returned 1 [0053.125] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\ITA", nBufferLength=0x105, lpBuffer=0x31e0e4, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\ITA", lpFilePart=0x0) returned 0x4f [0053.125] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\ITA\\", nBufferLength=0x105, lpBuffer=0x31e0b8, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\ITA\\", lpFilePart=0x0) returned 0x50 [0053.125] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\ITA\\*", lpFindFileData=0x31e304 | out: lpFindFileData=0x31e304*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7fedc340, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x7fedc340, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x7fedc340, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x381d40 [0053.126] FindNextFileW (in: hFindFile=0x381d40, lpFindFileData=0x31e314 | out: lpFindFileData=0x31e314*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7fedc340, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x7fedc340, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x7fedc340, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0053.126] FindNextFileW (in: hFindFile=0x381d40, lpFindFileData=0x31e314 | out: lpFindFileData=0x31e314*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9640cd00, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7fedc340, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9640cd00, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0xca88, dwReserved0=0x0, dwReserved1=0x0, cFileName="Dynamic.pdf", cAlternateFileName="")) returned 1 [0053.126] FindNextFileW (in: hFindFile=0x381d40, lpFindFileData=0x31e314 | out: lpFindFileData=0x31e314*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9640cd00, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7fedc340, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9640cd00, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x8ff9, dwReserved0=0x0, dwReserved1=0x0, cFileName="SignHere.pdf", cAlternateFileName="")) returned 1 [0053.126] FindNextFileW (in: hFindFile=0x381d40, lpFindFileData=0x31e314 | out: lpFindFileData=0x31e314*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9640cd00, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7fedc340, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9640cd00, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x18575, dwReserved0=0x0, dwReserved1=0x0, cFileName="StandardBusiness.pdf", cAlternateFileName="STANDA~1.PDF")) returned 1 [0053.127] FindNextFileW (in: hFindFile=0x381d40, lpFindFileData=0x31e314 | out: lpFindFileData=0x31e314*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0053.127] FindClose (in: hFindFile=0x381d40 | out: hFindFile=0x381d40) returned 1 [0053.127] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e59c) returned 1 [0053.127] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e5a8) returned 1 [0053.127] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e5dc) returned 1 [0053.127] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\ITA", nBufferLength=0x105, lpBuffer=0x31e0e4, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\ITA", lpFilePart=0x0) returned 0x4f [0053.127] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\ITA\\", nBufferLength=0x105, lpBuffer=0x31e0b8, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\ITA\\", lpFilePart=0x0) returned 0x50 [0053.127] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\ITA\\*", lpFindFileData=0x31e304 | out: lpFindFileData=0x31e304*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7fedc340, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x7fedc340, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x7fedc340, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x381d40 [0053.127] FindNextFileW (in: hFindFile=0x381d40, lpFindFileData=0x31e314 | out: lpFindFileData=0x31e314*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7fedc340, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x7fedc340, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x7fedc340, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0053.127] FindNextFileW (in: hFindFile=0x381d40, lpFindFileData=0x31e314 | out: lpFindFileData=0x31e314*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9640cd00, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7fedc340, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9640cd00, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0xca88, dwReserved0=0x0, dwReserved1=0x0, cFileName="Dynamic.pdf", cAlternateFileName="")) returned 1 [0053.127] FindNextFileW (in: hFindFile=0x381d40, lpFindFileData=0x31e314 | out: lpFindFileData=0x31e314*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9640cd00, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7fedc340, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9640cd00, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x8ff9, dwReserved0=0x0, dwReserved1=0x0, cFileName="SignHere.pdf", cAlternateFileName="")) returned 1 [0053.128] FindNextFileW (in: hFindFile=0x381d40, lpFindFileData=0x31e314 | out: lpFindFileData=0x31e314*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9640cd00, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7fedc340, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9640cd00, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x18575, dwReserved0=0x0, dwReserved1=0x0, cFileName="StandardBusiness.pdf", cAlternateFileName="STANDA~1.PDF")) returned 1 [0053.128] FindNextFileW (in: hFindFile=0x381d40, lpFindFileData=0x31e314 | out: lpFindFileData=0x31e314*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9640cd00, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7fedc340, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9640cd00, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x18575, dwReserved0=0x0, dwReserved1=0x0, cFileName="StandardBusiness.pdf", cAlternateFileName="STANDA~1.PDF")) returned 0 [0053.128] FindClose (in: hFindFile=0x381d40 | out: hFindFile=0x381d40) returned 1 [0053.128] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e59c) returned 1 [0053.128] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e5a8) returned 1 [0053.128] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\ITA\\Dynamic.pdf", nBufferLength=0x105, lpBuffer=0x31dfb4, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\ITA\\Dynamic.pdf", lpFilePart=0x0) returned 0x5b [0053.128] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e4a8) returned 1 [0053.128] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\ITA\\Dynamic.pdf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\ita\\dynamic.pdf"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x274 [0053.128] GetFileType (hFile=0x274) returned 0x1 [0053.128] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e4a4) returned 1 [0053.128] GetFileType (hFile=0x274) returned 0x1 [0053.128] GetFileSize (in: hFile=0x274, lpFileSizeHigh=0x31e5b0 | out: lpFileSizeHigh=0x31e5b0*=0x0) returned 0xca88 [0053.128] ReadFile (in: hFile=0x274, lpBuffer=0x26c8898, nNumberOfBytesToRead=0xca88, lpNumberOfBytesRead=0x31e55c, lpOverlapped=0x0 | out: lpBuffer=0x26c8898*, lpNumberOfBytesRead=0x31e55c*=0xca88, lpOverlapped=0x0) returned 1 [0053.130] CloseHandle (hObject=0x274) returned 1 [0053.145] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\ITA\\Dynamic.pdf", nBufferLength=0x105, lpBuffer=0x31dfa0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\ITA\\Dynamic.pdf", lpFilePart=0x0) returned 0x5b [0053.145] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e494) returned 1 [0053.145] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\ITA\\Dynamic.pdf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\ita\\dynamic.pdf"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x274 [0053.146] GetFileType (hFile=0x274) returned 0x1 [0053.146] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e490) returned 1 [0053.146] GetFileType (hFile=0x274) returned 0x1 [0053.146] WriteFile (in: hFile=0x274, lpBuffer=0x273b640*, nNumberOfBytesToWrite=0xca90, lpNumberOfBytesWritten=0x31e550, lpOverlapped=0x0 | out: lpBuffer=0x273b640*, lpNumberOfBytesWritten=0x31e550*=0xca90, lpOverlapped=0x0) returned 1 [0053.148] CloseHandle (hObject=0x274) returned 1 [0053.148] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\ITA\\Dynamic.pdf", nBufferLength=0x105, lpBuffer=0x31e0d4, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\ITA\\Dynamic.pdf", lpFilePart=0x0) returned 0x5b [0053.148] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\ITA\\Dynamic.pdf", nBufferLength=0x105, lpBuffer=0x31e0d4, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\ITA\\Dynamic.pdf", lpFilePart=0x0) returned 0x5b [0053.148] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e534) returned 1 [0053.148] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\ITA\\Dynamic.pdf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\ita\\dynamic.pdf"), fInfoLevelId=0x0, lpFileInformation=0x31e5b0 | out: lpFileInformation=0x31e5b0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9640cd00, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7fedc340, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x3209040, ftLastWriteTime.dwHighDateTime=0x1d6eb7f, nFileSizeHigh=0x0, nFileSizeLow=0xca90)) returned 1 [0053.148] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e530) returned 1 [0053.148] MoveFileW (lpExistingFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\ITA\\Dynamic.pdf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\ita\\dynamic.pdf"), lpNewFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\ITA\\Dynamic.pdf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\ita\\dynamic.pdf")) returned 1 [0053.148] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\ITA\\SignHere.pdf", nBufferLength=0x105, lpBuffer=0x31dfb4, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\ITA\\SignHere.pdf", lpFilePart=0x0) returned 0x5c [0053.148] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e4a8) returned 1 [0053.148] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\ITA\\SignHere.pdf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\ita\\signhere.pdf"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x274 [0053.149] GetFileType (hFile=0x274) returned 0x1 [0053.149] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e4a4) returned 1 [0053.149] GetFileType (hFile=0x274) returned 0x1 [0053.149] GetFileSize (in: hFile=0x274, lpFileSizeHigh=0x31e5b0 | out: lpFileSizeHigh=0x31e5b0*=0x0) returned 0x8ff9 [0053.149] ReadFile (in: hFile=0x274, lpBuffer=0x274850c, nNumberOfBytesToRead=0x8ff9, lpNumberOfBytesRead=0x31e55c, lpOverlapped=0x0 | out: lpBuffer=0x274850c*, lpNumberOfBytesRead=0x31e55c*=0x8ff9, lpOverlapped=0x0) returned 1 [0053.151] CloseHandle (hObject=0x274) returned 1 [0053.165] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\ITA\\SignHere.pdf", nBufferLength=0x105, lpBuffer=0x31dfa0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\ITA\\SignHere.pdf", lpFilePart=0x0) returned 0x5c [0053.165] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e494) returned 1 [0053.165] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\ITA\\SignHere.pdf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\ita\\signhere.pdf"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x274 [0053.166] GetFileType (hFile=0x274) returned 0x1 [0053.166] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e490) returned 1 [0053.166] GetFileType (hFile=0x274) returned 0x1 [0053.166] WriteFile (in: hFile=0x274, lpBuffer=0x27c22f4*, nNumberOfBytesToWrite=0x9000, lpNumberOfBytesWritten=0x31e550, lpOverlapped=0x0 | out: lpBuffer=0x27c22f4*, lpNumberOfBytesWritten=0x31e550*=0x9000, lpOverlapped=0x0) returned 1 [0053.167] CloseHandle (hObject=0x274) returned 1 [0053.168] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\ITA\\SignHere.pdf", nBufferLength=0x105, lpBuffer=0x31e0d4, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\ITA\\SignHere.pdf", lpFilePart=0x0) returned 0x5c [0053.168] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\ITA\\SignHere.pdf", nBufferLength=0x105, lpBuffer=0x31e0d4, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\ITA\\SignHere.pdf", lpFilePart=0x0) returned 0x5c [0053.168] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e534) returned 1 [0053.168] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\ITA\\SignHere.pdf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\ita\\signhere.pdf"), fInfoLevelId=0x0, lpFileInformation=0x31e5b0 | out: lpFileInformation=0x31e5b0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9640cd00, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7fedc340, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x3255300, ftLastWriteTime.dwHighDateTime=0x1d6eb7f, nFileSizeHigh=0x0, nFileSizeLow=0x9000)) returned 1 [0053.168] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e530) returned 1 [0053.168] MoveFileW (lpExistingFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\ITA\\SignHere.pdf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\ita\\signhere.pdf"), lpNewFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\ITA\\SignHere.pdf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\ita\\signhere.pdf")) returned 1 [0053.168] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\ITA\\StandardBusiness.pdf", nBufferLength=0x105, lpBuffer=0x31dfb4, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\ITA\\StandardBusiness.pdf", lpFilePart=0x0) returned 0x64 [0053.168] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e4a8) returned 1 [0053.168] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\ITA\\StandardBusiness.pdf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\ita\\standardbusiness.pdf"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x274 [0053.168] GetFileType (hFile=0x274) returned 0x1 [0053.168] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e4a4) returned 1 [0053.168] GetFileType (hFile=0x274) returned 0x1 [0053.169] GetFileSize (in: hFile=0x274, lpFileSizeHigh=0x31e5b0 | out: lpFileSizeHigh=0x31e5b0*=0x0) returned 0x18575 [0053.169] ReadFile (in: hFile=0x274, lpBuffer=0x3822788, nNumberOfBytesToRead=0x18575, lpNumberOfBytesRead=0x31e55c, lpOverlapped=0x0 | out: lpBuffer=0x3822788*, lpNumberOfBytesRead=0x31e55c*=0x18575, lpOverlapped=0x0) returned 1 [0053.171] CloseHandle (hObject=0x274) returned 1 [0053.187] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\ITA\\StandardBusiness.pdf", nBufferLength=0x105, lpBuffer=0x31dfa0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\ITA\\StandardBusiness.pdf", lpFilePart=0x0) returned 0x64 [0053.187] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e494) returned 1 [0053.187] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\ITA\\StandardBusiness.pdf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\ita\\standardbusiness.pdf"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x274 [0053.188] GetFileType (hFile=0x274) returned 0x1 [0053.188] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e490) returned 1 [0053.188] GetFileType (hFile=0x274) returned 0x1 [0053.188] WriteFile (in: hFile=0x274, lpBuffer=0x389c340*, nNumberOfBytesToWrite=0x18580, lpNumberOfBytesWritten=0x31e550, lpOverlapped=0x0 | out: lpBuffer=0x389c340*, lpNumberOfBytesWritten=0x31e550*=0x18580, lpOverlapped=0x0) returned 1 [0053.190] CloseHandle (hObject=0x274) returned 1 [0053.191] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\ITA\\StandardBusiness.pdf", nBufferLength=0x105, lpBuffer=0x31e0d4, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\ITA\\StandardBusiness.pdf", lpFilePart=0x0) returned 0x64 [0053.191] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\ITA\\StandardBusiness.pdf", nBufferLength=0x105, lpBuffer=0x31e0d4, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\ITA\\StandardBusiness.pdf", lpFilePart=0x0) returned 0x64 [0053.191] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e534) returned 1 [0053.191] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\ITA\\StandardBusiness.pdf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\ita\\standardbusiness.pdf"), fInfoLevelId=0x0, lpFileInformation=0x31e5b0 | out: lpFileInformation=0x31e5b0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9640cd00, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7fedc340, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x327b460, ftLastWriteTime.dwHighDateTime=0x1d6eb7f, nFileSizeHigh=0x0, nFileSizeLow=0x18580)) returned 1 [0053.191] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e530) returned 1 [0053.191] MoveFileW (lpExistingFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\ITA\\StandardBusiness.pdf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\ita\\standardbusiness.pdf"), lpNewFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\ITA\\StandardBusiness.pdf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\ita\\standardbusiness.pdf")) returned 1 [0053.191] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e5dc) returned 1 [0053.191] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\JPN", nBufferLength=0x105, lpBuffer=0x31e0e4, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\JPN", lpFilePart=0x0) returned 0x4f [0053.191] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\JPN\\", nBufferLength=0x105, lpBuffer=0x31e0b8, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\JPN\\", lpFilePart=0x0) returned 0x50 [0053.191] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\JPN\\*", lpFindFileData=0x31e304 | out: lpFindFileData=0x31e304*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7ff024a0, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x7ff024a0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x7ff024a0, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x381f80 [0053.192] FindNextFileW (in: hFindFile=0x381f80, lpFindFileData=0x31e314 | out: lpFindFileData=0x31e314*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7ff024a0, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x7ff024a0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x7ff024a0, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0053.192] FindNextFileW (in: hFindFile=0x381f80, lpFindFileData=0x31e314 | out: lpFindFileData=0x31e314*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9640cd00, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7ff024a0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9640cd00, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0xcc2c, dwReserved0=0x0, dwReserved1=0x0, cFileName="Dynamic.pdf", cAlternateFileName="")) returned 1 [0053.193] FindNextFileW (in: hFindFile=0x381f80, lpFindFileData=0x31e314 | out: lpFindFileData=0x31e314*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9640cd00, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7ff024a0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9640cd00, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0xffc9, dwReserved0=0x0, dwReserved1=0x0, cFileName="Hanko.pdf", cAlternateFileName="")) returned 1 [0053.193] FindNextFileW (in: hFindFile=0x381f80, lpFindFileData=0x31e314 | out: lpFindFileData=0x31e314*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9640cd00, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7ff024a0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9640cd00, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0xa447, dwReserved0=0x0, dwReserved1=0x0, cFileName="SignHere.pdf", cAlternateFileName="")) returned 1 [0053.193] FindNextFileW (in: hFindFile=0x381f80, lpFindFileData=0x31e314 | out: lpFindFileData=0x31e314*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9640cd00, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7ff024a0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9640cd00, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x1c005, dwReserved0=0x0, dwReserved1=0x0, cFileName="StandardBusiness.pdf", cAlternateFileName="STANDA~1.PDF")) returned 1 [0053.193] FindNextFileW (in: hFindFile=0x381f80, lpFindFileData=0x31e314 | out: lpFindFileData=0x31e314*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0053.193] FindClose (in: hFindFile=0x381f80 | out: hFindFile=0x381f80) returned 1 [0053.193] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e59c) returned 1 [0053.193] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e5a8) returned 1 [0053.193] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e5dc) returned 1 [0053.193] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\JPN", nBufferLength=0x105, lpBuffer=0x31e0e4, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\JPN", lpFilePart=0x0) returned 0x4f [0053.193] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\JPN\\", nBufferLength=0x105, lpBuffer=0x31e0b8, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\JPN\\", lpFilePart=0x0) returned 0x50 [0053.193] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\JPN\\*", lpFindFileData=0x31e304 | out: lpFindFileData=0x31e304*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7ff024a0, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x7ff024a0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x7ff024a0, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x381f80 [0053.194] FindNextFileW (in: hFindFile=0x381f80, lpFindFileData=0x31e314 | out: lpFindFileData=0x31e314*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7ff024a0, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x7ff024a0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x7ff024a0, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0053.194] FindNextFileW (in: hFindFile=0x381f80, lpFindFileData=0x31e314 | out: lpFindFileData=0x31e314*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9640cd00, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7ff024a0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9640cd00, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0xcc2c, dwReserved0=0x0, dwReserved1=0x0, cFileName="Dynamic.pdf", cAlternateFileName="")) returned 1 [0053.194] FindNextFileW (in: hFindFile=0x381f80, lpFindFileData=0x31e314 | out: lpFindFileData=0x31e314*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9640cd00, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7ff024a0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9640cd00, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0xffc9, dwReserved0=0x0, dwReserved1=0x0, cFileName="Hanko.pdf", cAlternateFileName="")) returned 1 [0053.194] FindNextFileW (in: hFindFile=0x381f80, lpFindFileData=0x31e314 | out: lpFindFileData=0x31e314*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9640cd00, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7ff024a0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9640cd00, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0xa447, dwReserved0=0x0, dwReserved1=0x0, cFileName="SignHere.pdf", cAlternateFileName="")) returned 1 [0053.194] FindNextFileW (in: hFindFile=0x381f80, lpFindFileData=0x31e314 | out: lpFindFileData=0x31e314*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9640cd00, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7ff024a0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9640cd00, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x1c005, dwReserved0=0x0, dwReserved1=0x0, cFileName="StandardBusiness.pdf", cAlternateFileName="STANDA~1.PDF")) returned 1 [0053.194] FindNextFileW (in: hFindFile=0x381f80, lpFindFileData=0x31e314 | out: lpFindFileData=0x31e314*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9640cd00, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7ff024a0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9640cd00, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x1c005, dwReserved0=0x0, dwReserved1=0x0, cFileName="StandardBusiness.pdf", cAlternateFileName="STANDA~1.PDF")) returned 0 [0053.194] FindClose (in: hFindFile=0x381f80 | out: hFindFile=0x381f80) returned 1 [0053.194] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e59c) returned 1 [0053.194] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e5a8) returned 1 [0053.194] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\JPN\\Dynamic.pdf", nBufferLength=0x105, lpBuffer=0x31dfb4, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\JPN\\Dynamic.pdf", lpFilePart=0x0) returned 0x5b [0053.195] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e4a8) returned 1 [0053.195] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\JPN\\Dynamic.pdf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\jpn\\dynamic.pdf"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x274 [0053.195] GetFileType (hFile=0x274) returned 0x1 [0053.195] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e4a4) returned 1 [0053.195] GetFileType (hFile=0x274) returned 0x1 [0053.195] GetFileSize (in: hFile=0x274, lpFileSizeHigh=0x31e5b0 | out: lpFileSizeHigh=0x31e5b0*=0x0) returned 0xcc2c [0053.195] ReadFile (in: hFile=0x274, lpBuffer=0x281b1a4, nNumberOfBytesToRead=0xcc2c, lpNumberOfBytesRead=0x31e55c, lpOverlapped=0x0 | out: lpBuffer=0x281b1a4*, lpNumberOfBytesRead=0x31e55c*=0xcc2c, lpOverlapped=0x0) returned 1 [0053.258] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\JPN\\Dynamic.pdf", nBufferLength=0x105, lpBuffer=0x31dfa0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\JPN\\Dynamic.pdf", lpFilePart=0x0) returned 0x5b [0053.258] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e494) returned 1 [0053.258] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\JPN\\Dynamic.pdf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\jpn\\dynamic.pdf"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x274 [0053.259] GetFileType (hFile=0x274) returned 0x1 [0053.260] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e490) returned 1 [0053.260] GetFileType (hFile=0x274) returned 0x1 [0053.260] WriteFile (in: hFile=0x274, lpBuffer=0x269b8d0*, nNumberOfBytesToWrite=0xcc30, lpNumberOfBytesWritten=0x31e550, lpOverlapped=0x0 | out: lpBuffer=0x269b8d0*, lpNumberOfBytesWritten=0x31e550*=0xcc30, lpOverlapped=0x0) returned 1 [0053.261] CloseHandle (hObject=0x274) returned 1 [0053.261] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\JPN\\Dynamic.pdf", nBufferLength=0x105, lpBuffer=0x31e0d4, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\JPN\\Dynamic.pdf", lpFilePart=0x0) returned 0x5b [0053.261] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\JPN\\Dynamic.pdf", nBufferLength=0x105, lpBuffer=0x31e0d4, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\JPN\\Dynamic.pdf", lpFilePart=0x0) returned 0x5b [0053.261] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e534) returned 1 [0053.261] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\JPN\\Dynamic.pdf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\jpn\\dynamic.pdf"), fInfoLevelId=0x0, lpFileInformation=0x31e5b0 | out: lpFileInformation=0x31e5b0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9640cd00, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7ff024a0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x3339b40, ftLastWriteTime.dwHighDateTime=0x1d6eb7f, nFileSizeHigh=0x0, nFileSizeLow=0xcc30)) returned 1 [0053.261] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e530) returned 1 [0053.261] MoveFileW (lpExistingFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\JPN\\Dynamic.pdf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\jpn\\dynamic.pdf"), lpNewFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\JPN\\Dynamic.pdf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\jpn\\dynamic.pdf")) returned 1 [0053.262] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\JPN\\Hanko.pdf", nBufferLength=0x105, lpBuffer=0x31dfb4, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\JPN\\Hanko.pdf", lpFilePart=0x0) returned 0x59 [0053.262] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e4a8) returned 1 [0053.262] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\JPN\\Hanko.pdf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\jpn\\hanko.pdf"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x274 [0053.262] GetFileType (hFile=0x274) returned 0x1 [0053.262] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e4a4) returned 1 [0053.262] GetFileType (hFile=0x274) returned 0x1 [0053.262] GetFileSize (in: hFile=0x274, lpFileSizeHigh=0x31e5b0 | out: lpFileSizeHigh=0x31e5b0*=0x0) returned 0xffc9 [0053.262] ReadFile (in: hFile=0x274, lpBuffer=0x26a892c, nNumberOfBytesToRead=0xffc9, lpNumberOfBytesRead=0x31e55c, lpOverlapped=0x0 | out: lpBuffer=0x26a892c*, lpNumberOfBytesRead=0x31e55c*=0xffc9, lpOverlapped=0x0) returned 1 [0053.265] CloseHandle (hObject=0x274) returned 1 [0053.280] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\JPN\\Hanko.pdf", nBufferLength=0x105, lpBuffer=0x31dfa0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\JPN\\Hanko.pdf", lpFilePart=0x0) returned 0x59 [0053.280] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e494) returned 1 [0053.280] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\JPN\\Hanko.pdf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\jpn\\hanko.pdf"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x274 [0053.281] GetFileType (hFile=0x274) returned 0x1 [0053.281] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e490) returned 1 [0053.281] GetFileType (hFile=0x274) returned 0x1 [0053.281] WriteFile (in: hFile=0x274, lpBuffer=0x27257f4*, nNumberOfBytesToWrite=0xffd0, lpNumberOfBytesWritten=0x31e550, lpOverlapped=0x0 | out: lpBuffer=0x27257f4*, lpNumberOfBytesWritten=0x31e550*=0xffd0, lpOverlapped=0x0) returned 1 [0053.283] CloseHandle (hObject=0x274) returned 1 [0053.283] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\JPN\\Hanko.pdf", nBufferLength=0x105, lpBuffer=0x31e0d4, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\JPN\\Hanko.pdf", lpFilePart=0x0) returned 0x59 [0053.283] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\JPN\\Hanko.pdf", nBufferLength=0x105, lpBuffer=0x31e0d4, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\JPN\\Hanko.pdf", lpFilePart=0x0) returned 0x59 [0053.283] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e534) returned 1 [0053.283] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\JPN\\Hanko.pdf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\jpn\\hanko.pdf"), fInfoLevelId=0x0, lpFileInformation=0x31e5b0 | out: lpFileInformation=0x31e5b0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9640cd00, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7ff024a0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x335fca0, ftLastWriteTime.dwHighDateTime=0x1d6eb7f, nFileSizeHigh=0x0, nFileSizeLow=0xffd0)) returned 1 [0053.283] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e530) returned 1 [0053.283] MoveFileW (lpExistingFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\JPN\\Hanko.pdf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\jpn\\hanko.pdf"), lpNewFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\JPN\\Hanko.pdf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\jpn\\hanko.pdf")) returned 1 [0053.283] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\JPN\\SignHere.pdf", nBufferLength=0x105, lpBuffer=0x31dfb4, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\JPN\\SignHere.pdf", lpFilePart=0x0) returned 0x5c [0053.283] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e4a8) returned 1 [0053.283] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\JPN\\SignHere.pdf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\jpn\\signhere.pdf"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x274 [0053.284] GetFileType (hFile=0x274) returned 0x1 [0053.284] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e4a4) returned 1 [0053.284] GetFileType (hFile=0x274) returned 0x1 [0053.284] GetFileSize (in: hFile=0x274, lpFileSizeHigh=0x31e5b0 | out: lpFileSizeHigh=0x31e5b0*=0x0) returned 0xa447 [0053.284] ReadFile (in: hFile=0x274, lpBuffer=0x2735bf0, nNumberOfBytesToRead=0xa447, lpNumberOfBytesRead=0x31e55c, lpOverlapped=0x0 | out: lpBuffer=0x2735bf0*, lpNumberOfBytesRead=0x31e55c*=0xa447, lpOverlapped=0x0) returned 1 [0053.286] CloseHandle (hObject=0x274) returned 1 [0053.304] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\JPN\\SignHere.pdf", nBufferLength=0x105, lpBuffer=0x31dfa0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\JPN\\SignHere.pdf", lpFilePart=0x0) returned 0x5c [0053.304] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e494) returned 1 [0053.305] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\JPN\\SignHere.pdf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\jpn\\signhere.pdf"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x274 [0053.306] GetFileType (hFile=0x274) returned 0x1 [0053.306] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e490) returned 1 [0053.306] GetFileType (hFile=0x274) returned 0x1 [0053.306] WriteFile (in: hFile=0x274, lpBuffer=0x27b5f68*, nNumberOfBytesToWrite=0xa450, lpNumberOfBytesWritten=0x31e550, lpOverlapped=0x0 | out: lpBuffer=0x27b5f68*, lpNumberOfBytesWritten=0x31e550*=0xa450, lpOverlapped=0x0) returned 1 [0053.308] CloseHandle (hObject=0x274) returned 1 [0053.308] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\JPN\\SignHere.pdf", nBufferLength=0x105, lpBuffer=0x31e0d4, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\JPN\\SignHere.pdf", lpFilePart=0x0) returned 0x5c [0053.308] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\JPN\\SignHere.pdf", nBufferLength=0x105, lpBuffer=0x31e0d4, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\JPN\\SignHere.pdf", lpFilePart=0x0) returned 0x5c [0053.308] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e534) returned 1 [0053.308] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\JPN\\SignHere.pdf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\jpn\\signhere.pdf"), fInfoLevelId=0x0, lpFileInformation=0x31e5b0 | out: lpFileInformation=0x31e5b0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9640cd00, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7ff024a0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x33abf60, ftLastWriteTime.dwHighDateTime=0x1d6eb7f, nFileSizeHigh=0x0, nFileSizeLow=0xa450)) returned 1 [0053.308] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e530) returned 1 [0053.308] MoveFileW (lpExistingFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\JPN\\SignHere.pdf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\jpn\\signhere.pdf"), lpNewFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\JPN\\SignHere.pdf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\jpn\\signhere.pdf")) returned 1 [0053.308] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\JPN\\StandardBusiness.pdf", nBufferLength=0x105, lpBuffer=0x31dfb4, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\JPN\\StandardBusiness.pdf", lpFilePart=0x0) returned 0x64 [0053.308] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e4a8) returned 1 [0053.309] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\JPN\\StandardBusiness.pdf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\jpn\\standardbusiness.pdf"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x274 [0053.309] GetFileType (hFile=0x274) returned 0x1 [0053.309] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e4a4) returned 1 [0053.309] GetFileType (hFile=0x274) returned 0x1 [0053.310] GetFileSize (in: hFile=0x274, lpFileSizeHigh=0x31e5b0 | out: lpFileSizeHigh=0x31e5b0*=0x0) returned 0x1c005 [0053.310] ReadFile (in: hFile=0x274, lpBuffer=0x38ee0e0, nNumberOfBytesToRead=0x1c005, lpNumberOfBytesRead=0x31e55c, lpOverlapped=0x0 | out: lpBuffer=0x38ee0e0*, lpNumberOfBytesRead=0x31e55c*=0x1c005, lpOverlapped=0x0) returned 1 [0053.312] CloseHandle (hObject=0x274) returned 1 [0053.331] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\JPN\\StandardBusiness.pdf", nBufferLength=0x105, lpBuffer=0x31dfa0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\JPN\\StandardBusiness.pdf", lpFilePart=0x0) returned 0x64 [0053.331] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e494) returned 1 [0053.331] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\JPN\\StandardBusiness.pdf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\jpn\\standardbusiness.pdf"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x274 [0053.332] GetFileType (hFile=0x274) returned 0x1 [0053.332] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e490) returned 1 [0053.332] GetFileType (hFile=0x274) returned 0x1 [0053.332] WriteFile (in: hFile=0x274, lpBuffer=0x36514d0*, nNumberOfBytesToWrite=0x1c010, lpNumberOfBytesWritten=0x31e550, lpOverlapped=0x0 | out: lpBuffer=0x36514d0*, lpNumberOfBytesWritten=0x31e550*=0x1c010, lpOverlapped=0x0) returned 1 [0053.335] CloseHandle (hObject=0x274) returned 1 [0053.335] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\JPN\\StandardBusiness.pdf", nBufferLength=0x105, lpBuffer=0x31e0d4, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\JPN\\StandardBusiness.pdf", lpFilePart=0x0) returned 0x64 [0053.335] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\JPN\\StandardBusiness.pdf", nBufferLength=0x105, lpBuffer=0x31e0d4, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\JPN\\StandardBusiness.pdf", lpFilePart=0x0) returned 0x64 [0053.335] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e534) returned 1 [0053.335] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\JPN\\StandardBusiness.pdf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\jpn\\standardbusiness.pdf"), fInfoLevelId=0x0, lpFileInformation=0x31e5b0 | out: lpFileInformation=0x31e5b0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9640cd00, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7ff024a0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x33d20c0, ftLastWriteTime.dwHighDateTime=0x1d6eb7f, nFileSizeHigh=0x0, nFileSizeLow=0x1c010)) returned 1 [0053.335] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e530) returned 1 [0053.335] MoveFileW (lpExistingFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\JPN\\StandardBusiness.pdf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\jpn\\standardbusiness.pdf"), lpNewFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\JPN\\StandardBusiness.pdf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\jpn\\standardbusiness.pdf")) returned 1 [0053.335] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e5dc) returned 1 [0053.335] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\KOR", nBufferLength=0x105, lpBuffer=0x31e0e4, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\KOR", lpFilePart=0x0) returned 0x4f [0053.335] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\KOR\\", nBufferLength=0x105, lpBuffer=0x31e0b8, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\KOR\\", lpFilePart=0x0) returned 0x50 [0053.335] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\KOR\\*", lpFindFileData=0x31e304 | out: lpFindFileData=0x31e304*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7ff024a0, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x7ff28600, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x7ff28600, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x381dc0 [0053.336] FindNextFileW (in: hFindFile=0x381dc0, lpFindFileData=0x31e314 | out: lpFindFileData=0x31e314*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7ff024a0, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x7ff28600, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x7ff28600, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0053.336] FindNextFileW (in: hFindFile=0x381dc0, lpFindFileData=0x31e314 | out: lpFindFileData=0x31e314*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x98a32700, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7ff28600, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x98a32700, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x12b04, dwReserved0=0x0, dwReserved1=0x0, cFileName="Dynamic.pdf", cAlternateFileName="")) returned 1 [0053.336] FindNextFileW (in: hFindFile=0x381dc0, lpFindFileData=0x31e314 | out: lpFindFileData=0x31e314*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x98a32700, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7ff28600, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x98a32700, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0xeac1, dwReserved0=0x0, dwReserved1=0x0, cFileName="Hanko.pdf", cAlternateFileName="")) returned 1 [0053.336] FindNextFileW (in: hFindFile=0x381dc0, lpFindFileData=0x31e314 | out: lpFindFileData=0x31e314*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x98a32700, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7ff28600, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x98a32700, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0xd074, dwReserved0=0x0, dwReserved1=0x0, cFileName="SignHere.pdf", cAlternateFileName="")) returned 1 [0053.336] FindNextFileW (in: hFindFile=0x381dc0, lpFindFileData=0x31e314 | out: lpFindFileData=0x31e314*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x98a32700, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7ff28600, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x98a32700, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x24f7f, dwReserved0=0x0, dwReserved1=0x0, cFileName="StandardBusiness.pdf", cAlternateFileName="STANDA~1.PDF")) returned 1 [0053.336] FindNextFileW (in: hFindFile=0x381dc0, lpFindFileData=0x31e314 | out: lpFindFileData=0x31e314*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0053.337] FindClose (in: hFindFile=0x381dc0 | out: hFindFile=0x381dc0) returned 1 [0053.337] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e59c) returned 1 [0053.337] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e5a8) returned 1 [0053.337] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e5dc) returned 1 [0053.337] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\KOR", nBufferLength=0x105, lpBuffer=0x31e0e4, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\KOR", lpFilePart=0x0) returned 0x4f [0053.337] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\KOR\\", nBufferLength=0x105, lpBuffer=0x31e0b8, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\KOR\\", lpFilePart=0x0) returned 0x50 [0053.337] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\KOR\\*", lpFindFileData=0x31e304 | out: lpFindFileData=0x31e304*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7ff024a0, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x7ff28600, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x7ff28600, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x381dc0 [0053.337] FindNextFileW (in: hFindFile=0x381dc0, lpFindFileData=0x31e314 | out: lpFindFileData=0x31e314*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7ff024a0, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x7ff28600, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x7ff28600, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0053.337] FindNextFileW (in: hFindFile=0x381dc0, lpFindFileData=0x31e314 | out: lpFindFileData=0x31e314*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x98a32700, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7ff28600, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x98a32700, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x12b04, dwReserved0=0x0, dwReserved1=0x0, cFileName="Dynamic.pdf", cAlternateFileName="")) returned 1 [0053.337] FindNextFileW (in: hFindFile=0x381dc0, lpFindFileData=0x31e314 | out: lpFindFileData=0x31e314*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x98a32700, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7ff28600, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x98a32700, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0xeac1, dwReserved0=0x0, dwReserved1=0x0, cFileName="Hanko.pdf", cAlternateFileName="")) returned 1 [0053.337] FindNextFileW (in: hFindFile=0x381dc0, lpFindFileData=0x31e314 | out: lpFindFileData=0x31e314*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x98a32700, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7ff28600, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x98a32700, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0xd074, dwReserved0=0x0, dwReserved1=0x0, cFileName="SignHere.pdf", cAlternateFileName="")) returned 1 [0053.338] FindNextFileW (in: hFindFile=0x381dc0, lpFindFileData=0x31e314 | out: lpFindFileData=0x31e314*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x98a32700, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7ff28600, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x98a32700, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x24f7f, dwReserved0=0x0, dwReserved1=0x0, cFileName="StandardBusiness.pdf", cAlternateFileName="STANDA~1.PDF")) returned 1 [0053.338] FindNextFileW (in: hFindFile=0x381dc0, lpFindFileData=0x31e314 | out: lpFindFileData=0x31e314*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x98a32700, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7ff28600, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x98a32700, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x24f7f, dwReserved0=0x0, dwReserved1=0x0, cFileName="StandardBusiness.pdf", cAlternateFileName="STANDA~1.PDF")) returned 0 [0053.338] FindClose (in: hFindFile=0x381dc0 | out: hFindFile=0x381dc0) returned 1 [0053.338] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e59c) returned 1 [0053.338] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e5a8) returned 1 [0053.338] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\KOR\\Dynamic.pdf", nBufferLength=0x105, lpBuffer=0x31dfb4, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\KOR\\Dynamic.pdf", lpFilePart=0x0) returned 0x5b [0053.338] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e4a8) returned 1 [0053.338] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\KOR\\Dynamic.pdf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\kor\\dynamic.pdf"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x274 [0053.338] GetFileType (hFile=0x274) returned 0x1 [0053.338] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e4a4) returned 1 [0053.338] GetFileType (hFile=0x274) returned 0x1 [0053.338] GetFileSize (in: hFile=0x274, lpFileSizeHigh=0x31e5b0 | out: lpFileSizeHigh=0x31e5b0*=0x0) returned 0x12b04 [0053.338] ReadFile (in: hFile=0x274, lpBuffer=0x2632e04, nNumberOfBytesToRead=0x12b04, lpNumberOfBytesRead=0x31e55c, lpOverlapped=0x0 | out: lpBuffer=0x2632e04*, lpNumberOfBytesRead=0x31e55c*=0x12b04, lpOverlapped=0x0) returned 1 [0053.341] CloseHandle (hObject=0x274) returned 1 [0053.380] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\KOR\\Dynamic.pdf", nBufferLength=0x105, lpBuffer=0x31dfa0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\KOR\\Dynamic.pdf", lpFilePart=0x0) returned 0x5b [0053.380] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e494) returned 1 [0053.380] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\KOR\\Dynamic.pdf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\kor\\dynamic.pdf"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x274 [0053.381] GetFileType (hFile=0x274) returned 0x1 [0053.382] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e490) returned 1 [0053.382] GetFileType (hFile=0x274) returned 0x1 [0053.382] WriteFile (in: hFile=0x274, lpBuffer=0x26b7e88*, nNumberOfBytesToWrite=0x12b10, lpNumberOfBytesWritten=0x31e550, lpOverlapped=0x0 | out: lpBuffer=0x26b7e88*, lpNumberOfBytesWritten=0x31e550*=0x12b10, lpOverlapped=0x0) returned 1 [0053.383] CloseHandle (hObject=0x274) returned 1 [0053.384] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\KOR\\Dynamic.pdf", nBufferLength=0x105, lpBuffer=0x31e0d4, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\KOR\\Dynamic.pdf", lpFilePart=0x0) returned 0x5b [0053.384] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\KOR\\Dynamic.pdf", nBufferLength=0x105, lpBuffer=0x31e0d4, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\KOR\\Dynamic.pdf", lpFilePart=0x0) returned 0x5b [0053.384] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e534) returned 1 [0053.384] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\KOR\\Dynamic.pdf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\kor\\dynamic.pdf"), fInfoLevelId=0x0, lpFileInformation=0x31e5b0 | out: lpFileInformation=0x31e5b0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x98a32700, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7ff28600, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x34444e0, ftLastWriteTime.dwHighDateTime=0x1d6eb7f, nFileSizeHigh=0x0, nFileSizeLow=0x12b10)) returned 1 [0053.384] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e530) returned 1 [0053.384] MoveFileW (lpExistingFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\KOR\\Dynamic.pdf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\kor\\dynamic.pdf"), lpNewFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\KOR\\Dynamic.pdf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\kor\\dynamic.pdf")) returned 1 [0053.384] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\KOR\\Hanko.pdf", nBufferLength=0x105, lpBuffer=0x31dfb4, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\KOR\\Hanko.pdf", lpFilePart=0x0) returned 0x59 [0053.384] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e4a8) returned 1 [0053.384] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\KOR\\Hanko.pdf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\kor\\hanko.pdf"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x274 [0053.384] GetFileType (hFile=0x274) returned 0x1 [0053.384] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e4a4) returned 1 [0053.385] GetFileType (hFile=0x274) returned 0x1 [0053.385] GetFileSize (in: hFile=0x274, lpFileSizeHigh=0x31e5b0 | out: lpFileSizeHigh=0x31e5b0*=0x0) returned 0xeac1 [0053.385] ReadFile (in: hFile=0x274, lpBuffer=0x26cadc4, nNumberOfBytesToRead=0xeac1, lpNumberOfBytesRead=0x31e55c, lpOverlapped=0x0 | out: lpBuffer=0x26cadc4*, lpNumberOfBytesRead=0x31e55c*=0xeac1, lpOverlapped=0x0) returned 1 [0053.387] CloseHandle (hObject=0x274) returned 1 [0053.402] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\KOR\\Hanko.pdf", nBufferLength=0x105, lpBuffer=0x31dfa0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\KOR\\Hanko.pdf", lpFilePart=0x0) returned 0x59 [0053.402] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e494) returned 1 [0053.402] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\KOR\\Hanko.pdf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\kor\\hanko.pdf"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x274 [0053.403] GetFileType (hFile=0x274) returned 0x1 [0053.403] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e490) returned 1 [0053.403] GetFileType (hFile=0x274) returned 0x1 [0053.403] WriteFile (in: hFile=0x274, lpBuffer=0x2743c30*, nNumberOfBytesToWrite=0xead0, lpNumberOfBytesWritten=0x31e550, lpOverlapped=0x0 | out: lpBuffer=0x2743c30*, lpNumberOfBytesWritten=0x31e550*=0xead0, lpOverlapped=0x0) returned 1 [0053.404] CloseHandle (hObject=0x274) returned 1 [0053.404] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\KOR\\Hanko.pdf", nBufferLength=0x105, lpBuffer=0x31e0d4, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\KOR\\Hanko.pdf", lpFilePart=0x0) returned 0x59 [0053.405] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\KOR\\Hanko.pdf", nBufferLength=0x105, lpBuffer=0x31e0d4, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\KOR\\Hanko.pdf", lpFilePart=0x0) returned 0x59 [0053.405] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e534) returned 1 [0053.405] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\KOR\\Hanko.pdf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\kor\\hanko.pdf"), fInfoLevelId=0x0, lpFileInformation=0x31e5b0 | out: lpFileInformation=0x31e5b0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x98a32700, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7ff28600, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x34907a0, ftLastWriteTime.dwHighDateTime=0x1d6eb7f, nFileSizeHigh=0x0, nFileSizeLow=0xead0)) returned 1 [0053.405] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e530) returned 1 [0053.405] MoveFileW (lpExistingFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\KOR\\Hanko.pdf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\kor\\hanko.pdf"), lpNewFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\KOR\\Hanko.pdf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\kor\\hanko.pdf")) returned 1 [0053.405] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\KOR\\SignHere.pdf", nBufferLength=0x105, lpBuffer=0x31dfb4, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\KOR\\SignHere.pdf", lpFilePart=0x0) returned 0x5c [0053.405] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e4a8) returned 1 [0053.405] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\KOR\\SignHere.pdf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\kor\\signhere.pdf"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x274 [0053.406] GetFileType (hFile=0x274) returned 0x1 [0053.406] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e4a4) returned 1 [0053.406] GetFileType (hFile=0x274) returned 0x1 [0053.406] GetFileSize (in: hFile=0x274, lpFileSizeHigh=0x31e5b0 | out: lpFileSizeHigh=0x31e5b0*=0x0) returned 0xd074 [0053.406] ReadFile (in: hFile=0x274, lpBuffer=0x2752b2c, nNumberOfBytesToRead=0xd074, lpNumberOfBytesRead=0x31e55c, lpOverlapped=0x0 | out: lpBuffer=0x2752b2c*, lpNumberOfBytesRead=0x31e55c*=0xd074, lpOverlapped=0x0) returned 1 [0053.408] CloseHandle (hObject=0x274) returned 1 [0053.423] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\KOR\\SignHere.pdf", nBufferLength=0x105, lpBuffer=0x31dfa0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\KOR\\SignHere.pdf", lpFilePart=0x0) returned 0x5c [0053.423] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e494) returned 1 [0053.423] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\KOR\\SignHere.pdf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\kor\\signhere.pdf"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x274 [0053.424] GetFileType (hFile=0x274) returned 0x1 [0053.424] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e490) returned 1 [0053.424] GetFileType (hFile=0x274) returned 0x1 [0053.424] WriteFile (in: hFile=0x274, lpBuffer=0x27c6aa4*, nNumberOfBytesToWrite=0xd080, lpNumberOfBytesWritten=0x31e550, lpOverlapped=0x0 | out: lpBuffer=0x27c6aa4*, lpNumberOfBytesWritten=0x31e550*=0xd080, lpOverlapped=0x0) returned 1 [0053.426] CloseHandle (hObject=0x274) returned 1 [0053.426] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\KOR\\SignHere.pdf", nBufferLength=0x105, lpBuffer=0x31e0d4, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\KOR\\SignHere.pdf", lpFilePart=0x0) returned 0x5c [0053.426] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\KOR\\SignHere.pdf", nBufferLength=0x105, lpBuffer=0x31e0d4, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\KOR\\SignHere.pdf", lpFilePart=0x0) returned 0x5c [0053.426] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e534) returned 1 [0053.426] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\KOR\\SignHere.pdf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\kor\\signhere.pdf"), fInfoLevelId=0x0, lpFileInformation=0x31e5b0 | out: lpFileInformation=0x31e5b0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x98a32700, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7ff28600, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x34b6900, ftLastWriteTime.dwHighDateTime=0x1d6eb7f, nFileSizeHigh=0x0, nFileSizeLow=0xd080)) returned 1 [0053.426] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e530) returned 1 [0053.426] MoveFileW (lpExistingFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\KOR\\SignHere.pdf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\kor\\signhere.pdf"), lpNewFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\KOR\\SignHere.pdf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\kor\\signhere.pdf")) returned 1 [0053.426] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\KOR\\StandardBusiness.pdf", nBufferLength=0x105, lpBuffer=0x31dfb4, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\KOR\\StandardBusiness.pdf", lpFilePart=0x0) returned 0x64 [0053.426] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e4a8) returned 1 [0053.426] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\KOR\\StandardBusiness.pdf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\kor\\standardbusiness.pdf"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x274 [0053.427] GetFileType (hFile=0x274) returned 0x1 [0053.427] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e4a4) returned 1 [0053.427] GetFileType (hFile=0x274) returned 0x1 [0053.427] GetFileSize (in: hFile=0x274, lpFileSizeHigh=0x31e5b0 | out: lpFileSizeHigh=0x31e5b0*=0x0) returned 0x24f7f [0053.427] ReadFile (in: hFile=0x274, lpBuffer=0x36ca1c0, nNumberOfBytesToRead=0x24f7f, lpNumberOfBytesRead=0x31e55c, lpOverlapped=0x0 | out: lpBuffer=0x36ca1c0*, lpNumberOfBytesRead=0x31e55c*=0x24f7f, lpOverlapped=0x0) returned 1 [0053.429] CloseHandle (hObject=0x274) returned 1 [0053.446] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\KOR\\StandardBusiness.pdf", nBufferLength=0x105, lpBuffer=0x31dfa0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\KOR\\StandardBusiness.pdf", lpFilePart=0x0) returned 0x64 [0053.446] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e494) returned 1 [0053.446] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\KOR\\StandardBusiness.pdf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\kor\\standardbusiness.pdf"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x274 [0053.448] GetFileType (hFile=0x274) returned 0x1 [0053.448] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e490) returned 1 [0053.448] GetFileType (hFile=0x274) returned 0x1 [0053.448] WriteFile (in: hFile=0x274, lpBuffer=0x3782f80*, nNumberOfBytesToWrite=0x24f80, lpNumberOfBytesWritten=0x31e550, lpOverlapped=0x0 | out: lpBuffer=0x3782f80*, lpNumberOfBytesWritten=0x31e550*=0x24f80, lpOverlapped=0x0) returned 1 [0053.451] CloseHandle (hObject=0x274) returned 1 [0053.451] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\KOR\\StandardBusiness.pdf", nBufferLength=0x105, lpBuffer=0x31e0d4, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\KOR\\StandardBusiness.pdf", lpFilePart=0x0) returned 0x64 [0053.451] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\KOR\\StandardBusiness.pdf", nBufferLength=0x105, lpBuffer=0x31e0d4, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\KOR\\StandardBusiness.pdf", lpFilePart=0x0) returned 0x64 [0053.451] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e534) returned 1 [0053.451] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\KOR\\StandardBusiness.pdf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\kor\\standardbusiness.pdf"), fInfoLevelId=0x0, lpFileInformation=0x31e5b0 | out: lpFileInformation=0x31e5b0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x98a32700, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7ff28600, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x3502bc0, ftLastWriteTime.dwHighDateTime=0x1d6eb7f, nFileSizeHigh=0x0, nFileSizeLow=0x24f80)) returned 1 [0053.451] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e530) returned 1 [0053.451] MoveFileW (lpExistingFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\KOR\\StandardBusiness.pdf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\kor\\standardbusiness.pdf"), lpNewFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\KOR\\StandardBusiness.pdf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\kor\\standardbusiness.pdf")) returned 1 [0053.451] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e5dc) returned 1 [0053.451] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\NLD", nBufferLength=0x105, lpBuffer=0x31e0e4, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\NLD", lpFilePart=0x0) returned 0x4f [0053.451] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\NLD\\", nBufferLength=0x105, lpBuffer=0x31e0b8, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\NLD\\", lpFilePart=0x0) returned 0x50 [0053.451] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\NLD\\*", lpFindFileData=0x31e304 | out: lpFindFileData=0x31e304*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7feb61e0, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x7fedc340, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x7fedc340, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x381e80 [0053.453] FindNextFileW (in: hFindFile=0x381e80, lpFindFileData=0x31e314 | out: lpFindFileData=0x31e314*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7feb61e0, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x7fedc340, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x7fedc340, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0053.453] FindNextFileW (in: hFindFile=0x381e80, lpFindFileData=0x31e314 | out: lpFindFileData=0x31e314*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9640cd00, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7feb61e0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9640cd00, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0xff3a, dwReserved0=0x0, dwReserved1=0x0, cFileName="Dynamic.pdf", cAlternateFileName="")) returned 1 [0053.453] FindNextFileW (in: hFindFile=0x381e80, lpFindFileData=0x31e314 | out: lpFindFileData=0x31e314*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9640cd00, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7fedc340, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9640cd00, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x9542, dwReserved0=0x0, dwReserved1=0x0, cFileName="SignHere.pdf", cAlternateFileName="")) returned 1 [0053.453] FindNextFileW (in: hFindFile=0x381e80, lpFindFileData=0x31e314 | out: lpFindFileData=0x31e314*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9640cd00, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7feb61e0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9640cd00, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x180e0, dwReserved0=0x0, dwReserved1=0x0, cFileName="StandardBusiness.pdf", cAlternateFileName="STANDA~1.PDF")) returned 1 [0053.453] FindNextFileW (in: hFindFile=0x381e80, lpFindFileData=0x31e314 | out: lpFindFileData=0x31e314*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0053.453] FindClose (in: hFindFile=0x381e80 | out: hFindFile=0x381e80) returned 1 [0053.453] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e59c) returned 1 [0053.453] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e5a8) returned 1 [0053.453] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e5dc) returned 1 [0053.453] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\NLD", nBufferLength=0x105, lpBuffer=0x31e0e4, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\NLD", lpFilePart=0x0) returned 0x4f [0053.453] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\NLD\\", nBufferLength=0x105, lpBuffer=0x31e0b8, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\NLD\\", lpFilePart=0x0) returned 0x50 [0053.454] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\NLD\\*", lpFindFileData=0x31e304 | out: lpFindFileData=0x31e304*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7feb61e0, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x7fedc340, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x7fedc340, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x381e80 [0053.454] FindNextFileW (in: hFindFile=0x381e80, lpFindFileData=0x31e314 | out: lpFindFileData=0x31e314*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7feb61e0, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x7fedc340, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x7fedc340, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0053.454] FindNextFileW (in: hFindFile=0x381e80, lpFindFileData=0x31e314 | out: lpFindFileData=0x31e314*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9640cd00, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7feb61e0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9640cd00, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0xff3a, dwReserved0=0x0, dwReserved1=0x0, cFileName="Dynamic.pdf", cAlternateFileName="")) returned 1 [0053.454] FindNextFileW (in: hFindFile=0x381e80, lpFindFileData=0x31e314 | out: lpFindFileData=0x31e314*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9640cd00, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7fedc340, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9640cd00, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x9542, dwReserved0=0x0, dwReserved1=0x0, cFileName="SignHere.pdf", cAlternateFileName="")) returned 1 [0053.454] FindNextFileW (in: hFindFile=0x381e80, lpFindFileData=0x31e314 | out: lpFindFileData=0x31e314*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9640cd00, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7feb61e0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9640cd00, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x180e0, dwReserved0=0x0, dwReserved1=0x0, cFileName="StandardBusiness.pdf", cAlternateFileName="STANDA~1.PDF")) returned 1 [0053.454] FindNextFileW (in: hFindFile=0x381e80, lpFindFileData=0x31e314 | out: lpFindFileData=0x31e314*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9640cd00, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7feb61e0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9640cd00, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x180e0, dwReserved0=0x0, dwReserved1=0x0, cFileName="StandardBusiness.pdf", cAlternateFileName="STANDA~1.PDF")) returned 0 [0053.454] FindClose (in: hFindFile=0x381e80 | out: hFindFile=0x381e80) returned 1 [0053.454] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e59c) returned 1 [0053.454] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e5a8) returned 1 [0053.454] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\NLD\\Dynamic.pdf", nBufferLength=0x105, lpBuffer=0x31dfb4, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\NLD\\Dynamic.pdf", lpFilePart=0x0) returned 0x5b [0053.454] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e4a8) returned 1 [0053.454] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\NLD\\Dynamic.pdf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\nld\\dynamic.pdf"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x274 [0053.455] GetFileType (hFile=0x274) returned 0x1 [0053.455] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e4a4) returned 1 [0053.455] GetFileType (hFile=0x274) returned 0x1 [0053.455] GetFileSize (in: hFile=0x274, lpFileSizeHigh=0x31e5b0 | out: lpFileSizeHigh=0x31e5b0*=0x0) returned 0xff3a [0053.455] ReadFile (in: hFile=0x274, lpBuffer=0x2823624, nNumberOfBytesToRead=0xff3a, lpNumberOfBytesRead=0x31e55c, lpOverlapped=0x0 | out: lpBuffer=0x2823624*, lpNumberOfBytesRead=0x31e55c*=0xff3a, lpOverlapped=0x0) returned 1 [0053.457] CloseHandle (hObject=0x274) returned 1 [0053.498] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\NLD\\Dynamic.pdf", nBufferLength=0x105, lpBuffer=0x31dfa0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\NLD\\Dynamic.pdf", lpFilePart=0x0) returned 0x5b [0053.498] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e494) returned 1 [0053.498] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\NLD\\Dynamic.pdf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\nld\\dynamic.pdf"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x274 [0053.499] GetFileType (hFile=0x274) returned 0x1 [0053.499] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e490) returned 1 [0053.499] GetFileType (hFile=0x274) returned 0x1 [0053.499] WriteFile (in: hFile=0x274, lpBuffer=0x26ace50*, nNumberOfBytesToWrite=0xff40, lpNumberOfBytesWritten=0x31e550, lpOverlapped=0x0 | out: lpBuffer=0x26ace50*, lpNumberOfBytesWritten=0x31e550*=0xff40, lpOverlapped=0x0) returned 1 [0053.501] CloseHandle (hObject=0x274) returned 1 [0053.501] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\NLD\\Dynamic.pdf", nBufferLength=0x105, lpBuffer=0x31e0d4, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\NLD\\Dynamic.pdf", lpFilePart=0x0) returned 0x5b [0053.501] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\NLD\\Dynamic.pdf", nBufferLength=0x105, lpBuffer=0x31e0d4, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\NLD\\Dynamic.pdf", lpFilePart=0x0) returned 0x5b [0053.501] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e534) returned 1 [0053.501] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\NLD\\Dynamic.pdf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\nld\\dynamic.pdf"), fInfoLevelId=0x0, lpFileInformation=0x31e5b0 | out: lpFileInformation=0x31e5b0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9640cd00, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7feb61e0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x3574fe0, ftLastWriteTime.dwHighDateTime=0x1d6eb7f, nFileSizeHigh=0x0, nFileSizeLow=0xff40)) returned 1 [0053.501] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e530) returned 1 [0053.501] MoveFileW (lpExistingFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\NLD\\Dynamic.pdf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\nld\\dynamic.pdf"), lpNewFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\NLD\\Dynamic.pdf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\nld\\dynamic.pdf")) returned 1 [0053.501] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\NLD\\SignHere.pdf", nBufferLength=0x105, lpBuffer=0x31dfb4, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\NLD\\SignHere.pdf", lpFilePart=0x0) returned 0x5c [0053.501] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e4a8) returned 1 [0053.501] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\NLD\\SignHere.pdf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\nld\\signhere.pdf"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x274 [0053.502] GetFileType (hFile=0x274) returned 0x1 [0053.502] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e4a4) returned 1 [0053.502] GetFileType (hFile=0x274) returned 0x1 [0053.502] GetFileSize (in: hFile=0x274, lpFileSizeHigh=0x31e5b0 | out: lpFileSizeHigh=0x31e5b0*=0x0) returned 0x9542 [0053.502] ReadFile (in: hFile=0x274, lpBuffer=0x26bd1cc, nNumberOfBytesToRead=0x9542, lpNumberOfBytesRead=0x31e55c, lpOverlapped=0x0 | out: lpBuffer=0x26bd1cc*, lpNumberOfBytesRead=0x31e55c*=0x9542, lpOverlapped=0x0) returned 1 [0053.504] CloseHandle (hObject=0x274) returned 1 [0053.518] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\NLD\\SignHere.pdf", nBufferLength=0x105, lpBuffer=0x31dfa0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\NLD\\SignHere.pdf", lpFilePart=0x0) returned 0x5c [0053.518] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e494) returned 1 [0053.518] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\NLD\\SignHere.pdf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\nld\\signhere.pdf"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x274 [0053.519] GetFileType (hFile=0x274) returned 0x1 [0053.519] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e490) returned 1 [0053.519] GetFileType (hFile=0x274) returned 0x1 [0053.519] WriteFile (in: hFile=0x274, lpBuffer=0x2738ba0*, nNumberOfBytesToWrite=0x9550, lpNumberOfBytesWritten=0x31e550, lpOverlapped=0x0 | out: lpBuffer=0x2738ba0*, lpNumberOfBytesWritten=0x31e550*=0x9550, lpOverlapped=0x0) returned 1 [0053.521] CloseHandle (hObject=0x274) returned 1 [0053.521] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\NLD\\SignHere.pdf", nBufferLength=0x105, lpBuffer=0x31e0d4, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\NLD\\SignHere.pdf", lpFilePart=0x0) returned 0x5c [0053.521] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\NLD\\SignHere.pdf", nBufferLength=0x105, lpBuffer=0x31e0d4, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\NLD\\SignHere.pdf", lpFilePart=0x0) returned 0x5c [0053.521] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e534) returned 1 [0053.521] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\NLD\\SignHere.pdf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\nld\\signhere.pdf"), fInfoLevelId=0x0, lpFileInformation=0x31e5b0 | out: lpFileInformation=0x31e5b0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9640cd00, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7fedc340, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x359b140, ftLastWriteTime.dwHighDateTime=0x1d6eb7f, nFileSizeHigh=0x0, nFileSizeLow=0x9550)) returned 1 [0053.521] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e530) returned 1 [0053.521] MoveFileW (lpExistingFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\NLD\\SignHere.pdf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\nld\\signhere.pdf"), lpNewFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\NLD\\SignHere.pdf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\nld\\signhere.pdf")) returned 1 [0053.521] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\NLD\\StandardBusiness.pdf", nBufferLength=0x105, lpBuffer=0x31dfb4, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\NLD\\StandardBusiness.pdf", lpFilePart=0x0) returned 0x64 [0053.521] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e4a8) returned 1 [0053.521] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\NLD\\StandardBusiness.pdf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\nld\\standardbusiness.pdf"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x274 [0053.522] GetFileType (hFile=0x274) returned 0x1 [0053.522] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e4a4) returned 1 [0053.522] GetFileType (hFile=0x274) returned 0x1 [0053.522] GetFileSize (in: hFile=0x274, lpFileSizeHigh=0x31e5b0 | out: lpFileSizeHigh=0x31e5b0*=0x0) returned 0x180e0 [0053.522] ReadFile (in: hFile=0x274, lpBuffer=0x37c7da0, nNumberOfBytesToRead=0x180e0, lpNumberOfBytesRead=0x31e55c, lpOverlapped=0x0 | out: lpBuffer=0x37c7da0*, lpNumberOfBytesRead=0x31e55c*=0x180e0, lpOverlapped=0x0) returned 1 [0053.524] CloseHandle (hObject=0x274) returned 1 [0053.540] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\NLD\\StandardBusiness.pdf", nBufferLength=0x105, lpBuffer=0x31dfa0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\NLD\\StandardBusiness.pdf", lpFilePart=0x0) returned 0x64 [0053.540] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e494) returned 1 [0053.540] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\NLD\\StandardBusiness.pdf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\nld\\standardbusiness.pdf"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x274 [0053.541] GetFileType (hFile=0x274) returned 0x1 [0053.541] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e490) returned 1 [0053.541] GetFileType (hFile=0x274) returned 0x1 [0053.541] WriteFile (in: hFile=0x274, lpBuffer=0x3840280*, nNumberOfBytesToWrite=0x180f0, lpNumberOfBytesWritten=0x31e550, lpOverlapped=0x0 | out: lpBuffer=0x3840280*, lpNumberOfBytesWritten=0x31e550*=0x180f0, lpOverlapped=0x0) returned 1 [0053.543] CloseHandle (hObject=0x274) returned 1 [0053.546] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\NLD\\StandardBusiness.pdf", nBufferLength=0x105, lpBuffer=0x31e0d4, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\NLD\\StandardBusiness.pdf", lpFilePart=0x0) returned 0x64 [0053.546] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\NLD\\StandardBusiness.pdf", nBufferLength=0x105, lpBuffer=0x31e0d4, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\NLD\\StandardBusiness.pdf", lpFilePart=0x0) returned 0x64 [0053.546] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e534) returned 1 [0053.546] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\NLD\\StandardBusiness.pdf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\nld\\standardbusiness.pdf"), fInfoLevelId=0x0, lpFileInformation=0x31e5b0 | out: lpFileInformation=0x31e5b0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9640cd00, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7feb61e0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x35e7400, ftLastWriteTime.dwHighDateTime=0x1d6eb7f, nFileSizeHigh=0x0, nFileSizeLow=0x180f0)) returned 1 [0053.546] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e530) returned 1 [0053.546] MoveFileW (lpExistingFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\NLD\\StandardBusiness.pdf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\nld\\standardbusiness.pdf"), lpNewFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\NLD\\StandardBusiness.pdf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\nld\\standardbusiness.pdf")) returned 1 [0053.546] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e5dc) returned 1 [0053.546] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\NOR", nBufferLength=0x105, lpBuffer=0x31e0e4, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\NOR", lpFilePart=0x0) returned 0x4f [0053.546] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\NOR\\", nBufferLength=0x105, lpBuffer=0x31e0b8, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\NOR\\", lpFilePart=0x0) returned 0x50 [0053.546] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\NOR\\*", lpFindFileData=0x31e304 | out: lpFindFileData=0x31e304*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7ff28600, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x7ff28600, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x7ff28600, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x381f80 [0053.547] FindNextFileW (in: hFindFile=0x381f80, lpFindFileData=0x31e314 | out: lpFindFileData=0x31e314*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7ff28600, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x7ff28600, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x7ff28600, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0053.547] FindNextFileW (in: hFindFile=0x381f80, lpFindFileData=0x31e314 | out: lpFindFileData=0x31e314*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x98a32700, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7ff28600, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x98a32700, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0xfbd7, dwReserved0=0x0, dwReserved1=0x0, cFileName="Dynamic.pdf", cAlternateFileName="")) returned 1 [0053.547] FindNextFileW (in: hFindFile=0x381f80, lpFindFileData=0x31e314 | out: lpFindFileData=0x31e314*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x98a32700, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7ff28600, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x98a32700, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x95a4, dwReserved0=0x0, dwReserved1=0x0, cFileName="SignHere.pdf", cAlternateFileName="")) returned 1 [0053.547] FindNextFileW (in: hFindFile=0x381f80, lpFindFileData=0x31e314 | out: lpFindFileData=0x31e314*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x98a32700, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7ff28600, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x98a32700, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x17ff8, dwReserved0=0x0, dwReserved1=0x0, cFileName="StandardBusiness.pdf", cAlternateFileName="STANDA~1.PDF")) returned 1 [0053.547] FindNextFileW (in: hFindFile=0x381f80, lpFindFileData=0x31e314 | out: lpFindFileData=0x31e314*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0053.547] FindClose (in: hFindFile=0x381f80 | out: hFindFile=0x381f80) returned 1 [0053.547] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e59c) returned 1 [0053.547] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e5a8) returned 1 [0053.547] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e5dc) returned 1 [0053.547] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\NOR", nBufferLength=0x105, lpBuffer=0x31e0e4, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\NOR", lpFilePart=0x0) returned 0x4f [0053.547] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\NOR\\", nBufferLength=0x105, lpBuffer=0x31e0b8, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\NOR\\", lpFilePart=0x0) returned 0x50 [0053.547] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\NOR\\*", lpFindFileData=0x31e304 | out: lpFindFileData=0x31e304*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7ff28600, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x7ff28600, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x7ff28600, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x381f80 [0053.548] FindNextFileW (in: hFindFile=0x381f80, lpFindFileData=0x31e314 | out: lpFindFileData=0x31e314*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7ff28600, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x7ff28600, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x7ff28600, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0053.548] FindNextFileW (in: hFindFile=0x381f80, lpFindFileData=0x31e314 | out: lpFindFileData=0x31e314*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x98a32700, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7ff28600, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x98a32700, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0xfbd7, dwReserved0=0x0, dwReserved1=0x0, cFileName="Dynamic.pdf", cAlternateFileName="")) returned 1 [0053.548] FindNextFileW (in: hFindFile=0x381f80, lpFindFileData=0x31e314 | out: lpFindFileData=0x31e314*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x98a32700, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7ff28600, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x98a32700, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x95a4, dwReserved0=0x0, dwReserved1=0x0, cFileName="SignHere.pdf", cAlternateFileName="")) returned 1 [0053.548] FindNextFileW (in: hFindFile=0x381f80, lpFindFileData=0x31e314 | out: lpFindFileData=0x31e314*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x98a32700, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7ff28600, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x98a32700, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x17ff8, dwReserved0=0x0, dwReserved1=0x0, cFileName="StandardBusiness.pdf", cAlternateFileName="STANDA~1.PDF")) returned 1 [0053.548] FindNextFileW (in: hFindFile=0x381f80, lpFindFileData=0x31e314 | out: lpFindFileData=0x31e314*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x98a32700, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7ff28600, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x98a32700, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x17ff8, dwReserved0=0x0, dwReserved1=0x0, cFileName="StandardBusiness.pdf", cAlternateFileName="STANDA~1.PDF")) returned 0 [0053.548] FindClose (in: hFindFile=0x381f80 | out: hFindFile=0x381f80) returned 1 [0053.548] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e59c) returned 1 [0053.548] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e5a8) returned 1 [0053.548] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\NOR\\Dynamic.pdf", nBufferLength=0x105, lpBuffer=0x31dfb4, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\NOR\\Dynamic.pdf", lpFilePart=0x0) returned 0x5b [0053.548] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e4a8) returned 1 [0053.549] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\NOR\\Dynamic.pdf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\nor\\dynamic.pdf"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x274 [0053.549] GetFileType (hFile=0x274) returned 0x1 [0053.549] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e4a4) returned 1 [0053.549] GetFileType (hFile=0x274) returned 0x1 [0053.549] GetFileSize (in: hFile=0x274, lpFileSizeHigh=0x31e5b0 | out: lpFileSizeHigh=0x31e5b0*=0x0) returned 0xfbd7 [0053.549] ReadFile (in: hFile=0x274, lpBuffer=0x2791bfc, nNumberOfBytesToRead=0xfbd7, lpNumberOfBytesRead=0x31e55c, lpOverlapped=0x0 | out: lpBuffer=0x2791bfc*, lpNumberOfBytesRead=0x31e55c*=0xfbd7, lpOverlapped=0x0) returned 1 [0053.567] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\NOR\\Dynamic.pdf", nBufferLength=0x105, lpBuffer=0x31dfa0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\NOR\\Dynamic.pdf", lpFilePart=0x0) returned 0x5b [0053.567] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e494) returned 1 [0053.567] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\NOR\\Dynamic.pdf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\nor\\dynamic.pdf"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x274 [0053.568] GetFileType (hFile=0x274) returned 0x1 [0053.568] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e490) returned 1 [0053.568] GetFileType (hFile=0x274) returned 0x1 [0053.568] WriteFile (in: hFile=0x274, lpBuffer=0x280dd98*, nNumberOfBytesToWrite=0xfbe0, lpNumberOfBytesWritten=0x31e550, lpOverlapped=0x0 | out: lpBuffer=0x280dd98*, lpNumberOfBytesWritten=0x31e550*=0xfbe0, lpOverlapped=0x0) returned 1 [0053.570] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\NOR\\Dynamic.pdf", nBufferLength=0x105, lpBuffer=0x31e0d4, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\NOR\\Dynamic.pdf", lpFilePart=0x0) returned 0x5b [0053.570] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\NOR\\Dynamic.pdf", nBufferLength=0x105, lpBuffer=0x31e0d4, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\NOR\\Dynamic.pdf", lpFilePart=0x0) returned 0x5b [0053.570] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e534) returned 1 [0053.570] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\NOR\\Dynamic.pdf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\nor\\dynamic.pdf"), fInfoLevelId=0x0, lpFileInformation=0x31e5b0 | out: lpFileInformation=0x31e5b0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x98a32700, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7ff28600, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x360d560, ftLastWriteTime.dwHighDateTime=0x1d6eb7f, nFileSizeHigh=0x0, nFileSizeLow=0xfbe0)) returned 1 [0053.570] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e530) returned 1 [0053.570] MoveFileW (lpExistingFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\NOR\\Dynamic.pdf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\nor\\dynamic.pdf"), lpNewFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\NOR\\Dynamic.pdf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\nor\\dynamic.pdf")) returned 1 [0053.571] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\NOR\\SignHere.pdf", nBufferLength=0x105, lpBuffer=0x31dfb4, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\NOR\\SignHere.pdf", lpFilePart=0x0) returned 0x5c [0053.571] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e4a8) returned 1 [0053.571] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\NOR\\SignHere.pdf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\nor\\signhere.pdf"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x274 [0053.571] GetFileType (hFile=0x274) returned 0x1 [0053.571] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e4a4) returned 1 [0053.571] GetFileType (hFile=0x274) returned 0x1 [0053.571] GetFileSize (in: hFile=0x274, lpFileSizeHigh=0x31e5b0 | out: lpFileSizeHigh=0x31e5b0*=0x0) returned 0x95a4 [0053.571] ReadFile (in: hFile=0x274, lpBuffer=0x281ddb4, nNumberOfBytesToRead=0x95a4, lpNumberOfBytesRead=0x31e55c, lpOverlapped=0x0 | out: lpBuffer=0x281ddb4*, lpNumberOfBytesRead=0x31e55c*=0x95a4, lpOverlapped=0x0) returned 1 [0053.614] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\NOR\\SignHere.pdf", nBufferLength=0x105, lpBuffer=0x31dfa0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\NOR\\SignHere.pdf", lpFilePart=0x0) returned 0x5c [0053.614] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e494) returned 1 [0053.614] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\NOR\\SignHere.pdf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\nor\\signhere.pdf"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x274 [0053.615] GetFileType (hFile=0x274) returned 0x1 [0053.615] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e490) returned 1 [0053.615] GetFileType (hFile=0x274) returned 0x1 [0053.615] WriteFile (in: hFile=0x274, lpBuffer=0x26a35b0*, nNumberOfBytesToWrite=0x95b0, lpNumberOfBytesWritten=0x31e550, lpOverlapped=0x0 | out: lpBuffer=0x26a35b0*, lpNumberOfBytesWritten=0x31e550*=0x95b0, lpOverlapped=0x0) returned 1 [0053.616] CloseHandle (hObject=0x274) returned 1 [0053.616] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\NOR\\SignHere.pdf", nBufferLength=0x105, lpBuffer=0x31e0d4, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\NOR\\SignHere.pdf", lpFilePart=0x0) returned 0x5c [0053.616] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\NOR\\SignHere.pdf", nBufferLength=0x105, lpBuffer=0x31e0d4, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\NOR\\SignHere.pdf", lpFilePart=0x0) returned 0x5c [0053.616] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e534) returned 1 [0053.616] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\NOR\\SignHere.pdf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\nor\\signhere.pdf"), fInfoLevelId=0x0, lpFileInformation=0x31e5b0 | out: lpFileInformation=0x31e5b0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x98a32700, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7ff28600, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x367f980, ftLastWriteTime.dwHighDateTime=0x1d6eb7f, nFileSizeHigh=0x0, nFileSizeLow=0x95b0)) returned 1 [0053.617] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e530) returned 1 [0053.617] MoveFileW (lpExistingFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\NOR\\SignHere.pdf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\nor\\signhere.pdf"), lpNewFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\NOR\\SignHere.pdf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\nor\\signhere.pdf")) returned 1 [0053.617] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\NOR\\StandardBusiness.pdf", nBufferLength=0x105, lpBuffer=0x31dfb4, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\NOR\\StandardBusiness.pdf", lpFilePart=0x0) returned 0x64 [0053.617] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e4a8) returned 1 [0053.617] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\NOR\\StandardBusiness.pdf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\nor\\standardbusiness.pdf"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x274 [0053.617] GetFileType (hFile=0x274) returned 0x1 [0053.617] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e4a4) returned 1 [0053.617] GetFileType (hFile=0x274) returned 0x1 [0053.617] GetFileSize (in: hFile=0x274, lpFileSizeHigh=0x31e5b0 | out: lpFileSizeHigh=0x31e5b0*=0x0) returned 0x17ff8 [0053.618] ReadFile (in: hFile=0x274, lpBuffer=0x3877b50, nNumberOfBytesToRead=0x17ff8, lpNumberOfBytesRead=0x31e55c, lpOverlapped=0x0 | out: lpBuffer=0x3877b50*, lpNumberOfBytesRead=0x31e55c*=0x17ff8, lpOverlapped=0x0) returned 1 [0053.620] CloseHandle (hObject=0x274) returned 1 [0053.636] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\NOR\\StandardBusiness.pdf", nBufferLength=0x105, lpBuffer=0x31dfa0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\NOR\\StandardBusiness.pdf", lpFilePart=0x0) returned 0x64 [0053.636] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e494) returned 1 [0053.636] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\NOR\\StandardBusiness.pdf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\nor\\standardbusiness.pdf"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x274 [0053.637] GetFileType (hFile=0x274) returned 0x1 [0053.637] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e490) returned 1 [0053.637] GetFileType (hFile=0x274) returned 0x1 [0053.637] WriteFile (in: hFile=0x274, lpBuffer=0x38bfb88*, nNumberOfBytesToWrite=0x18000, lpNumberOfBytesWritten=0x31e550, lpOverlapped=0x0 | out: lpBuffer=0x38bfb88*, lpNumberOfBytesWritten=0x31e550*=0x18000, lpOverlapped=0x0) returned 1 [0053.640] CloseHandle (hObject=0x274) returned 1 [0053.640] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\NOR\\StandardBusiness.pdf", nBufferLength=0x105, lpBuffer=0x31e0d4, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\NOR\\StandardBusiness.pdf", lpFilePart=0x0) returned 0x64 [0053.640] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\NOR\\StandardBusiness.pdf", nBufferLength=0x105, lpBuffer=0x31e0d4, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\NOR\\StandardBusiness.pdf", lpFilePart=0x0) returned 0x64 [0053.640] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e534) returned 1 [0053.640] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\NOR\\StandardBusiness.pdf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\nor\\standardbusiness.pdf"), fInfoLevelId=0x0, lpFileInformation=0x31e5b0 | out: lpFileInformation=0x31e5b0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x98a32700, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7ff28600, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x36cbc40, ftLastWriteTime.dwHighDateTime=0x1d6eb7f, nFileSizeHigh=0x0, nFileSizeLow=0x18000)) returned 1 [0053.640] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e530) returned 1 [0053.640] MoveFileW (lpExistingFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\NOR\\StandardBusiness.pdf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\nor\\standardbusiness.pdf"), lpNewFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\NOR\\StandardBusiness.pdf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\nor\\standardbusiness.pdf")) returned 1 [0053.640] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e5dc) returned 1 [0053.640] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\POL", nBufferLength=0x105, lpBuffer=0x31e0e4, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\POL", lpFilePart=0x0) returned 0x4f [0053.640] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\POL\\", nBufferLength=0x105, lpBuffer=0x31e0b8, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\POL\\", lpFilePart=0x0) returned 0x50 [0053.641] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\POL\\*", lpFindFileData=0x31e304 | out: lpFindFileData=0x31e304*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x806bec20, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x806e4d80, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x806e4d80, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x381e00 [0053.643] FindNextFileW (in: hFindFile=0x381e00, lpFindFileData=0x31e314 | out: lpFindFileData=0x31e314*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x806bec20, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x806e4d80, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x806e4d80, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0053.643] FindNextFileW (in: hFindFile=0x381e00, lpFindFileData=0x31e314 | out: lpFindFileData=0x31e314*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9b058100, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x806e4d80, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9b058100, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x907a, dwReserved0=0x0, dwReserved1=0x0, cFileName="Dynamic.pdf", cAlternateFileName="")) returned 1 [0053.643] FindNextFileW (in: hFindFile=0x381e00, lpFindFileData=0x31e314 | out: lpFindFileData=0x31e314*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9b058100, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x806bec20, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9b058100, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x80f5, dwReserved0=0x0, dwReserved1=0x0, cFileName="Faces.pdf", cAlternateFileName="")) returned 1 [0053.643] FindNextFileW (in: hFindFile=0x381e00, lpFindFileData=0x31e314 | out: lpFindFileData=0x31e314*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9b058100, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x806bec20, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9b058100, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0xb731, dwReserved0=0x0, dwReserved1=0x0, cFileName="Pointers.pdf", cAlternateFileName="")) returned 1 [0053.643] FindNextFileW (in: hFindFile=0x381e00, lpFindFileData=0x31e314 | out: lpFindFileData=0x31e314*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9b058100, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x806bec20, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9b058100, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x4fff9, dwReserved0=0x0, dwReserved1=0x0, cFileName="SignHere.pdf", cAlternateFileName="")) returned 1 [0053.644] FindNextFileW (in: hFindFile=0x381e00, lpFindFileData=0x31e314 | out: lpFindFileData=0x31e314*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9b058100, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x806bec20, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9b058100, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x1c4f5, dwReserved0=0x0, dwReserved1=0x0, cFileName="Standard.pdf", cAlternateFileName="")) returned 1 [0053.644] FindNextFileW (in: hFindFile=0x381e00, lpFindFileData=0x31e314 | out: lpFindFileData=0x31e314*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9b058100, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x806bec20, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9b058100, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x10873, dwReserved0=0x0, dwReserved1=0x0, cFileName="StandardBusiness.pdf", cAlternateFileName="STANDA~1.PDF")) returned 1 [0053.644] FindNextFileW (in: hFindFile=0x381e00, lpFindFileData=0x31e314 | out: lpFindFileData=0x31e314*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0053.644] FindClose (in: hFindFile=0x381e00 | out: hFindFile=0x381e00) returned 1 [0053.644] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e59c) returned 1 [0053.645] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e5a8) returned 1 [0053.645] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e5dc) returned 1 [0053.645] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\POL", nBufferLength=0x105, lpBuffer=0x31e0e4, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\POL", lpFilePart=0x0) returned 0x4f [0053.645] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\POL\\", nBufferLength=0x105, lpBuffer=0x31e0b8, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\POL\\", lpFilePart=0x0) returned 0x50 [0053.645] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\POL\\*", lpFindFileData=0x31e304 | out: lpFindFileData=0x31e304*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x806bec20, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x806e4d80, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x806e4d80, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x381e00 [0053.645] FindNextFileW (in: hFindFile=0x381e00, lpFindFileData=0x31e314 | out: lpFindFileData=0x31e314*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x806bec20, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x806e4d80, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x806e4d80, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0053.646] FindNextFileW (in: hFindFile=0x381e00, lpFindFileData=0x31e314 | out: lpFindFileData=0x31e314*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9b058100, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x806e4d80, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9b058100, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x907a, dwReserved0=0x0, dwReserved1=0x0, cFileName="Dynamic.pdf", cAlternateFileName="")) returned 1 [0053.646] FindNextFileW (in: hFindFile=0x381e00, lpFindFileData=0x31e314 | out: lpFindFileData=0x31e314*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9b058100, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x806bec20, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9b058100, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x80f5, dwReserved0=0x0, dwReserved1=0x0, cFileName="Faces.pdf", cAlternateFileName="")) returned 1 [0053.646] FindNextFileW (in: hFindFile=0x381e00, lpFindFileData=0x31e314 | out: lpFindFileData=0x31e314*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9b058100, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x806bec20, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9b058100, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0xb731, dwReserved0=0x0, dwReserved1=0x0, cFileName="Pointers.pdf", cAlternateFileName="")) returned 1 [0053.646] FindNextFileW (in: hFindFile=0x381e00, lpFindFileData=0x31e314 | out: lpFindFileData=0x31e314*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9b058100, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x806bec20, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9b058100, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x4fff9, dwReserved0=0x0, dwReserved1=0x0, cFileName="SignHere.pdf", cAlternateFileName="")) returned 1 [0053.646] FindNextFileW (in: hFindFile=0x381e00, lpFindFileData=0x31e314 | out: lpFindFileData=0x31e314*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9b058100, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x806bec20, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9b058100, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x1c4f5, dwReserved0=0x0, dwReserved1=0x0, cFileName="Standard.pdf", cAlternateFileName="")) returned 1 [0053.646] FindNextFileW (in: hFindFile=0x381e00, lpFindFileData=0x31e314 | out: lpFindFileData=0x31e314*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9b058100, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x806bec20, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9b058100, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x10873, dwReserved0=0x0, dwReserved1=0x0, cFileName="StandardBusiness.pdf", cAlternateFileName="STANDA~1.PDF")) returned 1 [0053.647] FindNextFileW (in: hFindFile=0x381e00, lpFindFileData=0x31e314 | out: lpFindFileData=0x31e314*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9b058100, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x806bec20, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9b058100, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x10873, dwReserved0=0x0, dwReserved1=0x0, cFileName="StandardBusiness.pdf", cAlternateFileName="STANDA~1.PDF")) returned 0 [0053.647] FindClose (in: hFindFile=0x381e00 | out: hFindFile=0x381e00) returned 1 [0053.647] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e59c) returned 1 [0053.647] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e5a8) returned 1 [0053.647] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\POL\\Dynamic.pdf", nBufferLength=0x105, lpBuffer=0x31dfb4, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\POL\\Dynamic.pdf", lpFilePart=0x0) returned 0x5b [0053.647] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e4a8) returned 1 [0053.647] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\POL\\Dynamic.pdf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\pol\\dynamic.pdf"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x274 [0053.648] GetFileType (hFile=0x274) returned 0x1 [0053.648] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e4a4) returned 1 [0053.649] GetFileType (hFile=0x274) returned 0x1 [0053.649] GetFileSize (in: hFile=0x274, lpFileSizeHigh=0x31e5b0 | out: lpFileSizeHigh=0x31e5b0*=0x0) returned 0x907a [0053.649] ReadFile (in: hFile=0x274, lpBuffer=0x26fd344, nNumberOfBytesToRead=0x907a, lpNumberOfBytesRead=0x31e55c, lpOverlapped=0x0 | out: lpBuffer=0x26fd344*, lpNumberOfBytesRead=0x31e55c*=0x907a, lpOverlapped=0x0) returned 1 [0053.650] CloseHandle (hObject=0x274) returned 1 [0053.667] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\POL\\Dynamic.pdf", nBufferLength=0x105, lpBuffer=0x31dfa0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\POL\\Dynamic.pdf", lpFilePart=0x0) returned 0x5b [0053.667] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e494) returned 1 [0053.667] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\POL\\Dynamic.pdf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\pol\\dynamic.pdf"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x274 [0053.668] GetFileType (hFile=0x274) returned 0x1 [0053.668] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e490) returned 1 [0053.668] GetFileType (hFile=0x274) returned 0x1 [0053.668] WriteFile (in: hFile=0x274, lpBuffer=0x27773ac*, nNumberOfBytesToWrite=0x9080, lpNumberOfBytesWritten=0x31e550, lpOverlapped=0x0 | out: lpBuffer=0x27773ac*, lpNumberOfBytesWritten=0x31e550*=0x9080, lpOverlapped=0x0) returned 1 [0053.669] CloseHandle (hObject=0x274) returned 1 [0053.669] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\POL\\Dynamic.pdf", nBufferLength=0x105, lpBuffer=0x31e0d4, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\POL\\Dynamic.pdf", lpFilePart=0x0) returned 0x5b [0053.669] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\POL\\Dynamic.pdf", nBufferLength=0x105, lpBuffer=0x31e0d4, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\POL\\Dynamic.pdf", lpFilePart=0x0) returned 0x5b [0053.669] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e534) returned 1 [0053.669] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\POL\\Dynamic.pdf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\pol\\dynamic.pdf"), fInfoLevelId=0x0, lpFileInformation=0x31e5b0 | out: lpFileInformation=0x31e5b0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9b058100, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x806e4d80, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x3717f00, ftLastWriteTime.dwHighDateTime=0x1d6eb7f, nFileSizeHigh=0x0, nFileSizeLow=0x9080)) returned 1 [0053.669] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e530) returned 1 [0053.669] MoveFileW (lpExistingFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\POL\\Dynamic.pdf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\pol\\dynamic.pdf"), lpNewFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\POL\\Dynamic.pdf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\pol\\dynamic.pdf")) returned 1 [0053.670] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\POL\\Faces.pdf", nBufferLength=0x105, lpBuffer=0x31dfb4, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\POL\\Faces.pdf", lpFilePart=0x0) returned 0x59 [0053.670] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e4a8) returned 1 [0053.670] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\POL\\Faces.pdf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\pol\\faces.pdf"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x274 [0053.670] GetFileType (hFile=0x274) returned 0x1 [0053.670] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e4a4) returned 1 [0053.670] GetFileType (hFile=0x274) returned 0x1 [0053.670] GetFileSize (in: hFile=0x274, lpFileSizeHigh=0x31e5b0 | out: lpFileSizeHigh=0x31e5b0*=0x0) returned 0x80f5 [0053.670] ReadFile (in: hFile=0x274, lpBuffer=0x2780858, nNumberOfBytesToRead=0x80f5, lpNumberOfBytesRead=0x31e55c, lpOverlapped=0x0 | out: lpBuffer=0x2780858*, lpNumberOfBytesRead=0x31e55c*=0x80f5, lpOverlapped=0x0) returned 1 [0053.672] CloseHandle (hObject=0x274) returned 1 [0053.686] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\POL\\Faces.pdf", nBufferLength=0x105, lpBuffer=0x31dfa0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\POL\\Faces.pdf", lpFilePart=0x0) returned 0x59 [0053.686] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e494) returned 1 [0053.686] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\POL\\Faces.pdf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\pol\\faces.pdf"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x274 [0053.687] GetFileType (hFile=0x274) returned 0x1 [0053.687] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e490) returned 1 [0053.687] GetFileType (hFile=0x274) returned 0x1 [0053.687] WriteFile (in: hFile=0x274, lpBuffer=0x27f5b40*, nNumberOfBytesToWrite=0x8100, lpNumberOfBytesWritten=0x31e550, lpOverlapped=0x0 | out: lpBuffer=0x27f5b40*, lpNumberOfBytesWritten=0x31e550*=0x8100, lpOverlapped=0x0) returned 1 [0053.689] CloseHandle (hObject=0x274) returned 1 [0053.689] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\POL\\Faces.pdf", nBufferLength=0x105, lpBuffer=0x31e0d4, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\POL\\Faces.pdf", lpFilePart=0x0) returned 0x59 [0053.689] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\POL\\Faces.pdf", nBufferLength=0x105, lpBuffer=0x31e0d4, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\POL\\Faces.pdf", lpFilePart=0x0) returned 0x59 [0053.689] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e534) returned 1 [0053.689] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\POL\\Faces.pdf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\pol\\faces.pdf"), fInfoLevelId=0x0, lpFileInformation=0x31e5b0 | out: lpFileInformation=0x31e5b0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9b058100, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x806bec20, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x373e060, ftLastWriteTime.dwHighDateTime=0x1d6eb7f, nFileSizeHigh=0x0, nFileSizeLow=0x8100)) returned 1 [0053.689] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e530) returned 1 [0053.689] MoveFileW (lpExistingFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\POL\\Faces.pdf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\pol\\faces.pdf"), lpNewFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\POL\\Faces.pdf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\pol\\faces.pdf")) returned 1 [0053.689] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\POL\\Pointers.pdf", nBufferLength=0x105, lpBuffer=0x31dfb4, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\POL\\Pointers.pdf", lpFilePart=0x0) returned 0x5c [0053.689] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e4a8) returned 1 [0053.689] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\POL\\Pointers.pdf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\pol\\pointers.pdf"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x274 [0053.689] GetFileType (hFile=0x274) returned 0x1 [0053.689] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e4a4) returned 1 [0053.690] GetFileType (hFile=0x274) returned 0x1 [0053.690] GetFileSize (in: hFile=0x274, lpFileSizeHigh=0x31e5b0 | out: lpFileSizeHigh=0x31e5b0*=0x0) returned 0xb731 [0053.690] ReadFile (in: hFile=0x274, lpBuffer=0x27fe06c, nNumberOfBytesToRead=0xb731, lpNumberOfBytesRead=0x31e55c, lpOverlapped=0x0 | out: lpBuffer=0x27fe06c*, lpNumberOfBytesRead=0x31e55c*=0xb731, lpOverlapped=0x0) returned 1 [0053.692] CloseHandle (hObject=0x274) returned 1 [0053.735] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\POL\\Pointers.pdf", nBufferLength=0x105, lpBuffer=0x31dfa0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\POL\\Pointers.pdf", lpFilePart=0x0) returned 0x5c [0053.735] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e494) returned 1 [0053.735] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\POL\\Pointers.pdf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\pol\\pointers.pdf"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x274 [0053.736] GetFileType (hFile=0x274) returned 0x1 [0053.736] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e490) returned 1 [0053.736] GetFileType (hFile=0x274) returned 0x1 [0053.736] WriteFile (in: hFile=0x274, lpBuffer=0x265e644*, nNumberOfBytesToWrite=0xb740, lpNumberOfBytesWritten=0x31e550, lpOverlapped=0x0 | out: lpBuffer=0x265e644*, lpNumberOfBytesWritten=0x31e550*=0xb740, lpOverlapped=0x0) returned 1 [0053.737] CloseHandle (hObject=0x274) returned 1 [0053.737] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\POL\\Pointers.pdf", nBufferLength=0x105, lpBuffer=0x31e0d4, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\POL\\Pointers.pdf", lpFilePart=0x0) returned 0x5c [0053.737] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\POL\\Pointers.pdf", nBufferLength=0x105, lpBuffer=0x31e0d4, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\POL\\Pointers.pdf", lpFilePart=0x0) returned 0x5c [0053.737] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e534) returned 1 [0053.737] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\POL\\Pointers.pdf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\pol\\pointers.pdf"), fInfoLevelId=0x0, lpFileInformation=0x31e5b0 | out: lpFileInformation=0x31e5b0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9b058100, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x806bec20, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x37b0480, ftLastWriteTime.dwHighDateTime=0x1d6eb7f, nFileSizeHigh=0x0, nFileSizeLow=0xb740)) returned 1 [0053.737] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e530) returned 1 [0053.738] MoveFileW (lpExistingFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\POL\\Pointers.pdf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\pol\\pointers.pdf"), lpNewFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\POL\\Pointers.pdf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\pol\\pointers.pdf")) returned 1 [0053.738] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\POL\\SignHere.pdf", nBufferLength=0x105, lpBuffer=0x31dfb4, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\POL\\SignHere.pdf", lpFilePart=0x0) returned 0x5c [0053.738] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e4a8) returned 1 [0053.738] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\POL\\SignHere.pdf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\pol\\signhere.pdf"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x274 [0053.738] GetFileType (hFile=0x274) returned 0x1 [0053.738] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e4a4) returned 1 [0053.738] GetFileType (hFile=0x274) returned 0x1 [0053.738] GetFileSize (in: hFile=0x274, lpFileSizeHigh=0x31e5b0 | out: lpFileSizeHigh=0x31e5b0*=0x0) returned 0x4fff9 [0053.739] ReadFile (in: hFile=0x274, lpBuffer=0x3630330, nNumberOfBytesToRead=0x4fff9, lpNumberOfBytesRead=0x31e55c, lpOverlapped=0x0 | out: lpBuffer=0x3630330*, lpNumberOfBytesRead=0x31e55c*=0x4fff9, lpOverlapped=0x0) returned 1 [0053.752] CloseHandle (hObject=0x274) returned 1 [0053.781] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\POL\\SignHere.pdf", nBufferLength=0x105, lpBuffer=0x31dfa0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\POL\\SignHere.pdf", lpFilePart=0x0) returned 0x5c [0053.781] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e494) returned 1 [0053.781] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\POL\\SignHere.pdf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\pol\\signhere.pdf"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x274 [0053.784] GetFileType (hFile=0x274) returned 0x1 [0053.784] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e490) returned 1 [0053.784] GetFileType (hFile=0x274) returned 0x1 [0053.784] WriteFile (in: hFile=0x274, lpBuffer=0x37c0368*, nNumberOfBytesToWrite=0x50000, lpNumberOfBytesWritten=0x31e550, lpOverlapped=0x0 | out: lpBuffer=0x37c0368*, lpNumberOfBytesWritten=0x31e550*=0x50000, lpOverlapped=0x0) returned 1 [0053.790] CloseHandle (hObject=0x274) returned 1 [0053.790] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\POL\\SignHere.pdf", nBufferLength=0x105, lpBuffer=0x31e0d4, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\POL\\SignHere.pdf", lpFilePart=0x0) returned 0x5c [0053.790] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\POL\\SignHere.pdf", nBufferLength=0x105, lpBuffer=0x31e0d4, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\POL\\SignHere.pdf", lpFilePart=0x0) returned 0x5c [0053.790] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e534) returned 1 [0053.790] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\POL\\SignHere.pdf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\pol\\signhere.pdf"), fInfoLevelId=0x0, lpFileInformation=0x31e5b0 | out: lpFileInformation=0x31e5b0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9b058100, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x806bec20, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x3848a00, ftLastWriteTime.dwHighDateTime=0x1d6eb7f, nFileSizeHigh=0x0, nFileSizeLow=0x50000)) returned 1 [0053.790] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e530) returned 1 [0053.790] MoveFileW (lpExistingFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\POL\\SignHere.pdf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\pol\\signhere.pdf"), lpNewFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\POL\\SignHere.pdf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\pol\\signhere.pdf")) returned 1 [0053.790] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\POL\\Standard.pdf", nBufferLength=0x105, lpBuffer=0x31dfb4, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\POL\\Standard.pdf", lpFilePart=0x0) returned 0x5c [0053.790] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e4a8) returned 1 [0053.790] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\POL\\Standard.pdf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\pol\\standard.pdf"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x274 [0053.791] GetFileType (hFile=0x274) returned 0x1 [0053.791] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e4a4) returned 1 [0053.791] GetFileType (hFile=0x274) returned 0x1 [0053.791] GetFileSize (in: hFile=0x274, lpFileSizeHigh=0x31e5b0 | out: lpFileSizeHigh=0x31e5b0*=0x0) returned 0x1c4f5 [0053.791] ReadFile (in: hFile=0x274, lpBuffer=0x3810388, nNumberOfBytesToRead=0x1c4f5, lpNumberOfBytesRead=0x31e55c, lpOverlapped=0x0 | out: lpBuffer=0x3810388*, lpNumberOfBytesRead=0x31e55c*=0x1c4f5, lpOverlapped=0x0) returned 1 [0053.794] CloseHandle (hObject=0x274) returned 1 [0053.813] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\POL\\Standard.pdf", nBufferLength=0x105, lpBuffer=0x31dfa0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\POL\\Standard.pdf", lpFilePart=0x0) returned 0x5c [0053.813] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e494) returned 1 [0053.814] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\POL\\Standard.pdf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\pol\\standard.pdf"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x274 [0053.815] GetFileType (hFile=0x274) returned 0x1 [0053.815] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e490) returned 1 [0053.815] GetFileType (hFile=0x274) returned 0x1 [0053.815] WriteFile (in: hFile=0x274, lpBuffer=0x389dcc0*, nNumberOfBytesToWrite=0x1c500, lpNumberOfBytesWritten=0x31e550, lpOverlapped=0x0 | out: lpBuffer=0x389dcc0*, lpNumberOfBytesWritten=0x31e550*=0x1c500, lpOverlapped=0x0) returned 1 [0053.817] CloseHandle (hObject=0x274) returned 1 [0053.818] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\POL\\Standard.pdf", nBufferLength=0x105, lpBuffer=0x31e0d4, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\POL\\Standard.pdf", lpFilePart=0x0) returned 0x5c [0053.818] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\POL\\Standard.pdf", nBufferLength=0x105, lpBuffer=0x31e0d4, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\POL\\Standard.pdf", lpFilePart=0x0) returned 0x5c [0053.818] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e534) returned 1 [0053.818] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\POL\\Standard.pdf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\pol\\standard.pdf"), fInfoLevelId=0x0, lpFileInformation=0x31e5b0 | out: lpFileInformation=0x31e5b0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9b058100, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x806bec20, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x386eb60, ftLastWriteTime.dwHighDateTime=0x1d6eb7f, nFileSizeHigh=0x0, nFileSizeLow=0x1c500)) returned 1 [0053.818] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e530) returned 1 [0053.818] MoveFileW (lpExistingFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\POL\\Standard.pdf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\pol\\standard.pdf"), lpNewFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\POL\\Standard.pdf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\pol\\standard.pdf")) returned 1 [0053.818] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\POL\\StandardBusiness.pdf", nBufferLength=0x105, lpBuffer=0x31dfb4, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\POL\\StandardBusiness.pdf", lpFilePart=0x0) returned 0x64 [0053.818] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e4a8) returned 1 [0053.818] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\POL\\StandardBusiness.pdf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\pol\\standardbusiness.pdf"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x274 [0053.819] GetFileType (hFile=0x274) returned 0x1 [0053.819] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e4a4) returned 1 [0053.819] GetFileType (hFile=0x274) returned 0x1 [0053.819] GetFileSize (in: hFile=0x274, lpFileSizeHigh=0x31e5b0 | out: lpFileSizeHigh=0x31e5b0*=0x0) returned 0x10873 [0053.819] ReadFile (in: hFile=0x274, lpBuffer=0x27047c8, nNumberOfBytesToRead=0x10873, lpNumberOfBytesRead=0x31e55c, lpOverlapped=0x0 | out: lpBuffer=0x27047c8*, lpNumberOfBytesRead=0x31e55c*=0x10873, lpOverlapped=0x0) returned 1 [0053.821] CloseHandle (hObject=0x274) returned 1 [0053.837] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\POL\\StandardBusiness.pdf", nBufferLength=0x105, lpBuffer=0x31dfa0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\POL\\StandardBusiness.pdf", lpFilePart=0x0) returned 0x64 [0053.838] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e494) returned 1 [0053.838] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\POL\\StandardBusiness.pdf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\pol\\standardbusiness.pdf"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x274 [0053.839] GetFileType (hFile=0x274) returned 0x1 [0053.839] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e490) returned 1 [0053.839] GetFileType (hFile=0x274) returned 0x1 [0053.839] WriteFile (in: hFile=0x274, lpBuffer=0x2782f44*, nNumberOfBytesToWrite=0x10880, lpNumberOfBytesWritten=0x31e550, lpOverlapped=0x0 | out: lpBuffer=0x2782f44*, lpNumberOfBytesWritten=0x31e550*=0x10880, lpOverlapped=0x0) returned 1 [0053.841] CloseHandle (hObject=0x274) returned 1 [0053.841] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\POL\\StandardBusiness.pdf", nBufferLength=0x105, lpBuffer=0x31e0d4, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\POL\\StandardBusiness.pdf", lpFilePart=0x0) returned 0x64 [0053.841] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\POL\\StandardBusiness.pdf", nBufferLength=0x105, lpBuffer=0x31e0d4, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\POL\\StandardBusiness.pdf", lpFilePart=0x0) returned 0x64 [0053.841] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e534) returned 1 [0053.841] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\POL\\StandardBusiness.pdf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\pol\\standardbusiness.pdf"), fInfoLevelId=0x0, lpFileInformation=0x31e5b0 | out: lpFileInformation=0x31e5b0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9b058100, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x806bec20, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x38bae20, ftLastWriteTime.dwHighDateTime=0x1d6eb7f, nFileSizeHigh=0x0, nFileSizeLow=0x10880)) returned 1 [0053.841] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e530) returned 1 [0053.841] MoveFileW (lpExistingFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\POL\\StandardBusiness.pdf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\pol\\standardbusiness.pdf"), lpNewFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\POL\\StandardBusiness.pdf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\pol\\standardbusiness.pdf")) returned 1 [0053.841] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e5dc) returned 1 [0053.841] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\PTB", nBufferLength=0x105, lpBuffer=0x31e0e4, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\PTB", lpFilePart=0x0) returned 0x4f [0053.841] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\PTB\\", nBufferLength=0x105, lpBuffer=0x31e0b8, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\PTB\\", lpFilePart=0x0) returned 0x50 [0053.842] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\PTB\\*", lpFindFileData=0x31e304 | out: lpFindFileData=0x31e304*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7ff748c0, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x7ff748c0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x7ff748c0, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x381e00 [0053.842] FindNextFileW (in: hFindFile=0x381e00, lpFindFileData=0x31e314 | out: lpFindFileData=0x31e314*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7ff748c0, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x7ff748c0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x7ff748c0, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0053.842] FindNextFileW (in: hFindFile=0x381e00, lpFindFileData=0x31e314 | out: lpFindFileData=0x31e314*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x98a32700, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7ff748c0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x98a32700, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0xc4a8, dwReserved0=0x0, dwReserved1=0x0, cFileName="Dynamic.pdf", cAlternateFileName="")) returned 1 [0053.842] FindNextFileW (in: hFindFile=0x381e00, lpFindFileData=0x31e314 | out: lpFindFileData=0x31e314*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x98a32700, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7ff748c0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x98a32700, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x9c53, dwReserved0=0x0, dwReserved1=0x0, cFileName="SignHere.pdf", cAlternateFileName="")) returned 1 [0053.842] FindNextFileW (in: hFindFile=0x381e00, lpFindFileData=0x31e314 | out: lpFindFileData=0x31e314*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x98a32700, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7ff748c0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x98a32700, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x19c87, dwReserved0=0x0, dwReserved1=0x0, cFileName="StandardBusiness.pdf", cAlternateFileName="STANDA~1.PDF")) returned 1 [0053.842] FindNextFileW (in: hFindFile=0x381e00, lpFindFileData=0x31e314 | out: lpFindFileData=0x31e314*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0053.842] FindClose (in: hFindFile=0x381e00 | out: hFindFile=0x381e00) returned 1 [0053.843] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e59c) returned 1 [0053.843] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e5a8) returned 1 [0053.843] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e5dc) returned 1 [0053.843] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\PTB", nBufferLength=0x105, lpBuffer=0x31e0e4, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\PTB", lpFilePart=0x0) returned 0x4f [0053.843] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\PTB\\", nBufferLength=0x105, lpBuffer=0x31e0b8, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\PTB\\", lpFilePart=0x0) returned 0x50 [0053.843] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\PTB\\*", lpFindFileData=0x31e304 | out: lpFindFileData=0x31e304*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7ff748c0, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x7ff748c0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x7ff748c0, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x381e00 [0053.843] FindNextFileW (in: hFindFile=0x381e00, lpFindFileData=0x31e314 | out: lpFindFileData=0x31e314*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7ff748c0, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x7ff748c0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x7ff748c0, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0053.843] FindNextFileW (in: hFindFile=0x381e00, lpFindFileData=0x31e314 | out: lpFindFileData=0x31e314*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x98a32700, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7ff748c0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x98a32700, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0xc4a8, dwReserved0=0x0, dwReserved1=0x0, cFileName="Dynamic.pdf", cAlternateFileName="")) returned 1 [0053.843] FindNextFileW (in: hFindFile=0x381e00, lpFindFileData=0x31e314 | out: lpFindFileData=0x31e314*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x98a32700, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7ff748c0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x98a32700, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x9c53, dwReserved0=0x0, dwReserved1=0x0, cFileName="SignHere.pdf", cAlternateFileName="")) returned 1 [0053.843] FindNextFileW (in: hFindFile=0x381e00, lpFindFileData=0x31e314 | out: lpFindFileData=0x31e314*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x98a32700, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7ff748c0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x98a32700, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x19c87, dwReserved0=0x0, dwReserved1=0x0, cFileName="StandardBusiness.pdf", cAlternateFileName="STANDA~1.PDF")) returned 1 [0053.844] FindNextFileW (in: hFindFile=0x381e00, lpFindFileData=0x31e314 | out: lpFindFileData=0x31e314*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x98a32700, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7ff748c0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x98a32700, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x19c87, dwReserved0=0x0, dwReserved1=0x0, cFileName="StandardBusiness.pdf", cAlternateFileName="STANDA~1.PDF")) returned 0 [0053.844] FindClose (in: hFindFile=0x381e00 | out: hFindFile=0x381e00) returned 1 [0053.844] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e59c) returned 1 [0053.844] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e5a8) returned 1 [0053.844] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\PTB\\Dynamic.pdf", nBufferLength=0x105, lpBuffer=0x31dfb4, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\PTB\\Dynamic.pdf", lpFilePart=0x0) returned 0x5b [0053.844] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e4a8) returned 1 [0053.844] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\PTB\\Dynamic.pdf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\ptb\\dynamic.pdf"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x274 [0053.844] GetFileType (hFile=0x274) returned 0x1 [0053.844] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e4a4) returned 1 [0053.844] GetFileType (hFile=0x274) returned 0x1 [0053.844] GetFileSize (in: hFile=0x274, lpFileSizeHigh=0x31e5b0 | out: lpFileSizeHigh=0x31e5b0*=0x0) returned 0xc4a8 [0053.844] ReadFile (in: hFile=0x274, lpBuffer=0x279606c, nNumberOfBytesToRead=0xc4a8, lpNumberOfBytesRead=0x31e55c, lpOverlapped=0x0 | out: lpBuffer=0x279606c*, lpNumberOfBytesRead=0x31e55c*=0xc4a8, lpOverlapped=0x0) returned 1 [0053.848] CloseHandle (hObject=0x274) returned 1 [0053.864] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\PTB\\Dynamic.pdf", nBufferLength=0x105, lpBuffer=0x31dfa0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\PTB\\Dynamic.pdf", lpFilePart=0x0) returned 0x5b [0053.864] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e494) returned 1 [0053.864] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\PTB\\Dynamic.pdf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\ptb\\dynamic.pdf"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x274 [0053.865] GetFileType (hFile=0x274) returned 0x1 [0053.865] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e490) returned 1 [0053.865] GetFileType (hFile=0x274) returned 0x1 [0053.865] WriteFile (in: hFile=0x274, lpBuffer=0x2807c74*, nNumberOfBytesToWrite=0xc4b0, lpNumberOfBytesWritten=0x31e550, lpOverlapped=0x0 | out: lpBuffer=0x2807c74*, lpNumberOfBytesWritten=0x31e550*=0xc4b0, lpOverlapped=0x0) returned 1 [0053.867] CloseHandle (hObject=0x274) returned 1 [0053.867] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\PTB\\Dynamic.pdf", nBufferLength=0x105, lpBuffer=0x31e0d4, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\PTB\\Dynamic.pdf", lpFilePart=0x0) returned 0x5b [0053.867] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\PTB\\Dynamic.pdf", nBufferLength=0x105, lpBuffer=0x31e0d4, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\PTB\\Dynamic.pdf", lpFilePart=0x0) returned 0x5b [0053.867] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e534) returned 1 [0053.867] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\PTB\\Dynamic.pdf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\ptb\\dynamic.pdf"), fInfoLevelId=0x0, lpFileInformation=0x31e5b0 | out: lpFileInformation=0x31e5b0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x98a32700, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7ff748c0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x38e0f80, ftLastWriteTime.dwHighDateTime=0x1d6eb7f, nFileSizeHigh=0x0, nFileSizeLow=0xc4b0)) returned 1 [0053.867] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e530) returned 1 [0053.867] MoveFileW (lpExistingFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\PTB\\Dynamic.pdf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\ptb\\dynamic.pdf"), lpNewFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\PTB\\Dynamic.pdf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\ptb\\dynamic.pdf")) returned 1 [0053.868] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\PTB\\SignHere.pdf", nBufferLength=0x105, lpBuffer=0x31dfb4, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\PTB\\SignHere.pdf", lpFilePart=0x0) returned 0x5c [0053.868] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e4a8) returned 1 [0053.868] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\PTB\\SignHere.pdf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\ptb\\signhere.pdf"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x274 [0053.868] GetFileType (hFile=0x274) returned 0x1 [0053.868] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e4a4) returned 1 [0053.868] GetFileType (hFile=0x274) returned 0x1 [0053.868] GetFileSize (in: hFile=0x274, lpFileSizeHigh=0x31e5b0 | out: lpFileSizeHigh=0x31e5b0*=0x0) returned 0x9c53 [0053.868] ReadFile (in: hFile=0x274, lpBuffer=0x2814560, nNumberOfBytesToRead=0x9c53, lpNumberOfBytesRead=0x31e55c, lpOverlapped=0x0 | out: lpBuffer=0x2814560*, lpNumberOfBytesRead=0x31e55c*=0x9c53, lpOverlapped=0x0) returned 1 [0053.869] CloseHandle (hObject=0x274) returned 1 [0053.911] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\PTB\\SignHere.pdf", nBufferLength=0x105, lpBuffer=0x31dfa0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\PTB\\SignHere.pdf", lpFilePart=0x0) returned 0x5c [0053.911] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e494) returned 1 [0053.911] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\PTB\\SignHere.pdf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\ptb\\signhere.pdf"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x274 [0053.912] GetFileType (hFile=0x274) returned 0x1 [0053.912] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e490) returned 1 [0053.912] GetFileType (hFile=0x274) returned 0x1 [0053.912] WriteFile (in: hFile=0x274, lpBuffer=0x269c53c*, nNumberOfBytesToWrite=0x9c60, lpNumberOfBytesWritten=0x31e550, lpOverlapped=0x0 | out: lpBuffer=0x269c53c*, lpNumberOfBytesWritten=0x31e550*=0x9c60, lpOverlapped=0x0) returned 1 [0053.913] CloseHandle (hObject=0x274) returned 1 [0053.914] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\PTB\\SignHere.pdf", nBufferLength=0x105, lpBuffer=0x31e0d4, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\PTB\\SignHere.pdf", lpFilePart=0x0) returned 0x5c [0053.914] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\PTB\\SignHere.pdf", nBufferLength=0x105, lpBuffer=0x31e0d4, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\PTB\\SignHere.pdf", lpFilePart=0x0) returned 0x5c [0053.914] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e534) returned 1 [0053.914] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\PTB\\SignHere.pdf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\ptb\\signhere.pdf"), fInfoLevelId=0x0, lpFileInformation=0x31e5b0 | out: lpFileInformation=0x31e5b0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x98a32700, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7ff748c0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x39533a0, ftLastWriteTime.dwHighDateTime=0x1d6eb7f, nFileSizeHigh=0x0, nFileSizeLow=0x9c60)) returned 1 [0053.914] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e530) returned 1 [0053.914] MoveFileW (lpExistingFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\PTB\\SignHere.pdf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\ptb\\signhere.pdf"), lpNewFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\PTB\\SignHere.pdf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\ptb\\signhere.pdf")) returned 1 [0053.915] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\PTB\\StandardBusiness.pdf", nBufferLength=0x105, lpBuffer=0x31dfb4, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\PTB\\StandardBusiness.pdf", lpFilePart=0x0) returned 0x64 [0053.915] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e4a8) returned 1 [0053.915] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\PTB\\StandardBusiness.pdf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\ptb\\standardbusiness.pdf"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x274 [0053.915] GetFileType (hFile=0x274) returned 0x1 [0053.915] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e4a4) returned 1 [0053.915] GetFileType (hFile=0x274) returned 0x1 [0053.915] GetFileSize (in: hFile=0x274, lpFileSizeHigh=0x31e5b0 | out: lpFileSizeHigh=0x31e5b0*=0x0) returned 0x19c87 [0053.915] ReadFile (in: hFile=0x274, lpBuffer=0x38f3c40, nNumberOfBytesToRead=0x19c87, lpNumberOfBytesRead=0x31e55c, lpOverlapped=0x0 | out: lpBuffer=0x38f3c40*, lpNumberOfBytesRead=0x31e55c*=0x19c87, lpOverlapped=0x0) returned 1 [0053.920] CloseHandle (hObject=0x274) returned 1 [0053.940] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\PTB\\StandardBusiness.pdf", nBufferLength=0x105, lpBuffer=0x31dfa0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\PTB\\StandardBusiness.pdf", lpFilePart=0x0) returned 0x64 [0053.940] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e494) returned 1 [0053.940] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\PTB\\StandardBusiness.pdf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\ptb\\standardbusiness.pdf"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x274 [0053.941] GetFileType (hFile=0x274) returned 0x1 [0053.941] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e490) returned 1 [0053.941] GetFileType (hFile=0x274) returned 0x1 [0053.941] WriteFile (in: hFile=0x274, lpBuffer=0x3666a70*, nNumberOfBytesToWrite=0x19c90, lpNumberOfBytesWritten=0x31e550, lpOverlapped=0x0 | out: lpBuffer=0x3666a70*, lpNumberOfBytesWritten=0x31e550*=0x19c90, lpOverlapped=0x0) returned 1 [0053.943] CloseHandle (hObject=0x274) returned 1 [0053.943] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\PTB\\StandardBusiness.pdf", nBufferLength=0x105, lpBuffer=0x31e0d4, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\PTB\\StandardBusiness.pdf", lpFilePart=0x0) returned 0x64 [0053.943] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\PTB\\StandardBusiness.pdf", nBufferLength=0x105, lpBuffer=0x31e0d4, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\PTB\\StandardBusiness.pdf", lpFilePart=0x0) returned 0x64 [0053.944] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e534) returned 1 [0053.944] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\PTB\\StandardBusiness.pdf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\ptb\\standardbusiness.pdf"), fInfoLevelId=0x0, lpFileInformation=0x31e5b0 | out: lpFileInformation=0x31e5b0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x98a32700, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7ff748c0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x399f660, ftLastWriteTime.dwHighDateTime=0x1d6eb7f, nFileSizeHigh=0x0, nFileSizeLow=0x19c90)) returned 1 [0053.944] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e530) returned 1 [0053.944] MoveFileW (lpExistingFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\PTB\\StandardBusiness.pdf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\ptb\\standardbusiness.pdf"), lpNewFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\PTB\\StandardBusiness.pdf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\ptb\\standardbusiness.pdf")) returned 1 [0053.944] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e5dc) returned 1 [0053.944] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\RUM", nBufferLength=0x105, lpBuffer=0x31e0e4, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\RUM", lpFilePart=0x0) returned 0x4f [0053.944] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\RUM\\", nBufferLength=0x105, lpBuffer=0x31e0b8, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\RUM\\", lpFilePart=0x0) returned 0x50 [0053.944] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\RUM\\*", lpFindFileData=0x31e304 | out: lpFindFileData=0x31e304*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x80698ac0, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x806bec20, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x806bec20, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x381c80 [0053.949] FindNextFileW (in: hFindFile=0x381c80, lpFindFileData=0x31e314 | out: lpFindFileData=0x31e314*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x80698ac0, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x806bec20, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x806bec20, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0053.949] FindNextFileW (in: hFindFile=0x381c80, lpFindFileData=0x31e314 | out: lpFindFileData=0x31e314*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9b058100, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x806bec20, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9b058100, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x15fc8, dwReserved0=0x0, dwReserved1=0x0, cFileName="Dynamic.pdf", cAlternateFileName="")) returned 1 [0053.949] FindNextFileW (in: hFindFile=0x381c80, lpFindFileData=0x31e314 | out: lpFindFileData=0x31e314*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9b058100, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x806bec20, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9b058100, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x80f5, dwReserved0=0x0, dwReserved1=0x0, cFileName="Faces.pdf", cAlternateFileName="")) returned 1 [0053.949] FindNextFileW (in: hFindFile=0x381c80, lpFindFileData=0x31e314 | out: lpFindFileData=0x31e314*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9b058100, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x80698ac0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9b058100, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0xb731, dwReserved0=0x0, dwReserved1=0x0, cFileName="Pointers.pdf", cAlternateFileName="")) returned 1 [0053.949] FindNextFileW (in: hFindFile=0x381c80, lpFindFileData=0x31e314 | out: lpFindFileData=0x31e314*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9b058100, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x80698ac0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9b058100, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0xe736, dwReserved0=0x0, dwReserved1=0x0, cFileName="SignHere.pdf", cAlternateFileName="")) returned 1 [0053.949] FindNextFileW (in: hFindFile=0x381c80, lpFindFileData=0x31e314 | out: lpFindFileData=0x31e314*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9b058100, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x806bec20, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9b058100, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x1c4f5, dwReserved0=0x0, dwReserved1=0x0, cFileName="Standard.pdf", cAlternateFileName="")) returned 1 [0053.949] FindNextFileW (in: hFindFile=0x381c80, lpFindFileData=0x31e314 | out: lpFindFileData=0x31e314*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9b058100, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x80698ac0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9b058100, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x2fe62, dwReserved0=0x0, dwReserved1=0x0, cFileName="StandardBusiness.pdf", cAlternateFileName="STANDA~1.PDF")) returned 1 [0053.950] FindNextFileW (in: hFindFile=0x381c80, lpFindFileData=0x31e314 | out: lpFindFileData=0x31e314*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0053.950] FindClose (in: hFindFile=0x381c80 | out: hFindFile=0x381c80) returned 1 [0053.950] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e59c) returned 1 [0053.950] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e5a8) returned 1 [0053.950] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e5dc) returned 1 [0053.950] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\RUM", nBufferLength=0x105, lpBuffer=0x31e0e4, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\RUM", lpFilePart=0x0) returned 0x4f [0053.951] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\RUM\\", nBufferLength=0x105, lpBuffer=0x31e0b8, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\RUM\\", lpFilePart=0x0) returned 0x50 [0053.951] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\RUM\\*", lpFindFileData=0x31e304 | out: lpFindFileData=0x31e304*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x80698ac0, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x806bec20, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x806bec20, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x381c80 [0053.951] FindNextFileW (in: hFindFile=0x381c80, lpFindFileData=0x31e314 | out: lpFindFileData=0x31e314*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x80698ac0, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x806bec20, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x806bec20, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0053.952] FindNextFileW (in: hFindFile=0x381c80, lpFindFileData=0x31e314 | out: lpFindFileData=0x31e314*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9b058100, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x806bec20, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9b058100, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x15fc8, dwReserved0=0x0, dwReserved1=0x0, cFileName="Dynamic.pdf", cAlternateFileName="")) returned 1 [0053.952] FindNextFileW (in: hFindFile=0x381c80, lpFindFileData=0x31e314 | out: lpFindFileData=0x31e314*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9b058100, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x806bec20, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9b058100, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x80f5, dwReserved0=0x0, dwReserved1=0x0, cFileName="Faces.pdf", cAlternateFileName="")) returned 1 [0053.952] FindNextFileW (in: hFindFile=0x381c80, lpFindFileData=0x31e314 | out: lpFindFileData=0x31e314*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9b058100, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x80698ac0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9b058100, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0xb731, dwReserved0=0x0, dwReserved1=0x0, cFileName="Pointers.pdf", cAlternateFileName="")) returned 1 [0053.952] FindNextFileW (in: hFindFile=0x381c80, lpFindFileData=0x31e314 | out: lpFindFileData=0x31e314*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9b058100, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x80698ac0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9b058100, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0xe736, dwReserved0=0x0, dwReserved1=0x0, cFileName="SignHere.pdf", cAlternateFileName="")) returned 1 [0053.952] FindNextFileW (in: hFindFile=0x381c80, lpFindFileData=0x31e314 | out: lpFindFileData=0x31e314*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9b058100, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x806bec20, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9b058100, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x1c4f5, dwReserved0=0x0, dwReserved1=0x0, cFileName="Standard.pdf", cAlternateFileName="")) returned 1 [0053.952] FindNextFileW (in: hFindFile=0x381c80, lpFindFileData=0x31e314 | out: lpFindFileData=0x31e314*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9b058100, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x80698ac0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9b058100, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x2fe62, dwReserved0=0x0, dwReserved1=0x0, cFileName="StandardBusiness.pdf", cAlternateFileName="STANDA~1.PDF")) returned 1 [0053.952] FindNextFileW (in: hFindFile=0x381c80, lpFindFileData=0x31e314 | out: lpFindFileData=0x31e314*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9b058100, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x80698ac0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9b058100, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x2fe62, dwReserved0=0x0, dwReserved1=0x0, cFileName="StandardBusiness.pdf", cAlternateFileName="STANDA~1.PDF")) returned 0 [0053.953] FindClose (in: hFindFile=0x381c80 | out: hFindFile=0x381c80) returned 1 [0053.953] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e59c) returned 1 [0053.953] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e5a8) returned 1 [0053.953] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\RUM\\Dynamic.pdf", nBufferLength=0x105, lpBuffer=0x31dfb4, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\RUM\\Dynamic.pdf", lpFilePart=0x0) returned 0x5b [0053.953] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e4a8) returned 1 [0053.953] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\RUM\\Dynamic.pdf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\rum\\dynamic.pdf"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x274 [0053.955] GetFileType (hFile=0x274) returned 0x1 [0053.955] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e4a4) returned 1 [0053.955] GetFileType (hFile=0x274) returned 0x1 [0053.955] GetFileSize (in: hFile=0x274, lpFileSizeHigh=0x31e5b0 | out: lpFileSizeHigh=0x31e5b0*=0x0) returned 0x15fc8 [0053.955] ReadFile (in: hFile=0x274, lpBuffer=0x3680720, nNumberOfBytesToRead=0x15fc8, lpNumberOfBytesRead=0x31e55c, lpOverlapped=0x0 | out: lpBuffer=0x3680720*, lpNumberOfBytesRead=0x31e55c*=0x15fc8, lpOverlapped=0x0) returned 1 [0053.962] CloseHandle (hObject=0x274) returned 1 [0054.015] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\RUM\\Dynamic.pdf", nBufferLength=0x105, lpBuffer=0x31dfa0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\RUM\\Dynamic.pdf", lpFilePart=0x0) returned 0x5b [0054.015] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e494) returned 1 [0054.015] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\RUM\\Dynamic.pdf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\rum\\dynamic.pdf"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x274 [0054.016] GetFileType (hFile=0x274) returned 0x1 [0054.016] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e490) returned 1 [0054.016] GetFileType (hFile=0x274) returned 0x1 [0054.016] WriteFile (in: hFile=0x274, lpBuffer=0x36ee668*, nNumberOfBytesToWrite=0x15fd0, lpNumberOfBytesWritten=0x31e550, lpOverlapped=0x0 | out: lpBuffer=0x36ee668*, lpNumberOfBytesWritten=0x31e550*=0x15fd0, lpOverlapped=0x0) returned 1 [0054.018] CloseHandle (hObject=0x274) returned 1 [0054.018] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\RUM\\Dynamic.pdf", nBufferLength=0x105, lpBuffer=0x31e0d4, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\RUM\\Dynamic.pdf", lpFilePart=0x0) returned 0x5b [0054.019] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\RUM\\Dynamic.pdf", nBufferLength=0x105, lpBuffer=0x31e0d4, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\RUM\\Dynamic.pdf", lpFilePart=0x0) returned 0x5b [0054.019] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e534) returned 1 [0054.019] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\RUM\\Dynamic.pdf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\rum\\dynamic.pdf"), fInfoLevelId=0x0, lpFileInformation=0x31e5b0 | out: lpFileInformation=0x31e5b0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9b058100, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x806bec20, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x3a5dd40, ftLastWriteTime.dwHighDateTime=0x1d6eb7f, nFileSizeHigh=0x0, nFileSizeLow=0x15fd0)) returned 1 [0054.019] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e530) returned 1 [0054.019] MoveFileW (lpExistingFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\RUM\\Dynamic.pdf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\rum\\dynamic.pdf"), lpNewFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\RUM\\Dynamic.pdf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\rum\\dynamic.pdf")) returned 1 [0054.019] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\RUM\\Faces.pdf", nBufferLength=0x105, lpBuffer=0x31dfb4, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\RUM\\Faces.pdf", lpFilePart=0x0) returned 0x59 [0054.019] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e4a8) returned 1 [0054.019] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\RUM\\Faces.pdf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\rum\\faces.pdf"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x274 [0054.019] GetFileType (hFile=0x274) returned 0x1 [0054.019] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e4a4) returned 1 [0054.020] GetFileType (hFile=0x274) returned 0x1 [0054.020] GetFileSize (in: hFile=0x274, lpFileSizeHigh=0x31e5b0 | out: lpFileSizeHigh=0x31e5b0*=0x0) returned 0x80f5 [0054.020] ReadFile (in: hFile=0x274, lpBuffer=0x2680810, nNumberOfBytesToRead=0x80f5, lpNumberOfBytesRead=0x31e55c, lpOverlapped=0x0 | out: lpBuffer=0x2680810*, lpNumberOfBytesRead=0x31e55c*=0x80f5, lpOverlapped=0x0) returned 1 [0054.029] CloseHandle (hObject=0x274) returned 1 [0054.044] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\RUM\\Faces.pdf", nBufferLength=0x105, lpBuffer=0x31dfa0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\RUM\\Faces.pdf", lpFilePart=0x0) returned 0x59 [0054.044] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e494) returned 1 [0054.044] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\RUM\\Faces.pdf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\rum\\faces.pdf"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x274 [0054.045] GetFileType (hFile=0x274) returned 0x1 [0054.045] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e490) returned 1 [0054.045] GetFileType (hFile=0x274) returned 0x1 [0054.045] WriteFile (in: hFile=0x274, lpBuffer=0x26f5af8*, nNumberOfBytesToWrite=0x8100, lpNumberOfBytesWritten=0x31e550, lpOverlapped=0x0 | out: lpBuffer=0x26f5af8*, lpNumberOfBytesWritten=0x31e550*=0x8100, lpOverlapped=0x0) returned 1 [0054.046] CloseHandle (hObject=0x274) returned 1 [0054.046] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\RUM\\Faces.pdf", nBufferLength=0x105, lpBuffer=0x31e0d4, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\RUM\\Faces.pdf", lpFilePart=0x0) returned 0x59 [0054.046] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\RUM\\Faces.pdf", nBufferLength=0x105, lpBuffer=0x31e0d4, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\RUM\\Faces.pdf", lpFilePart=0x0) returned 0x59 [0054.046] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e534) returned 1 [0054.046] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\RUM\\Faces.pdf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\rum\\faces.pdf"), fInfoLevelId=0x0, lpFileInformation=0x31e5b0 | out: lpFileInformation=0x31e5b0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9b058100, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x806bec20, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x3aaa000, ftLastWriteTime.dwHighDateTime=0x1d6eb7f, nFileSizeHigh=0x0, nFileSizeLow=0x8100)) returned 1 [0054.046] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e530) returned 1 [0054.046] MoveFileW (lpExistingFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\RUM\\Faces.pdf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\rum\\faces.pdf"), lpNewFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\RUM\\Faces.pdf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\rum\\faces.pdf")) returned 1 [0054.047] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\RUM\\Pointers.pdf", nBufferLength=0x105, lpBuffer=0x31dfb4, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\RUM\\Pointers.pdf", lpFilePart=0x0) returned 0x5c [0054.047] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e4a8) returned 1 [0054.047] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\RUM\\Pointers.pdf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\rum\\pointers.pdf"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x274 [0054.047] GetFileType (hFile=0x274) returned 0x1 [0054.047] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e4a4) returned 1 [0054.047] GetFileType (hFile=0x274) returned 0x1 [0054.047] GetFileSize (in: hFile=0x274, lpFileSizeHigh=0x31e5b0 | out: lpFileSizeHigh=0x31e5b0*=0x0) returned 0xb731 [0054.047] ReadFile (in: hFile=0x274, lpBuffer=0x26fe024, nNumberOfBytesToRead=0xb731, lpNumberOfBytesRead=0x31e55c, lpOverlapped=0x0 | out: lpBuffer=0x26fe024*, lpNumberOfBytesRead=0x31e55c*=0xb731, lpOverlapped=0x0) returned 1 [0054.049] CloseHandle (hObject=0x274) returned 1 [0054.064] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\RUM\\Pointers.pdf", nBufferLength=0x105, lpBuffer=0x31dfa0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\RUM\\Pointers.pdf", lpFilePart=0x0) returned 0x5c [0054.064] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e494) returned 1 [0054.064] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\RUM\\Pointers.pdf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\rum\\pointers.pdf"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x274 [0054.066] GetFileType (hFile=0x274) returned 0x1 [0054.066] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e490) returned 1 [0054.066] GetFileType (hFile=0x274) returned 0x1 [0054.066] WriteFile (in: hFile=0x274, lpBuffer=0x276d3e0*, nNumberOfBytesToWrite=0xb740, lpNumberOfBytesWritten=0x31e550, lpOverlapped=0x0 | out: lpBuffer=0x276d3e0*, lpNumberOfBytesWritten=0x31e550*=0xb740, lpOverlapped=0x0) returned 1 [0054.067] CloseHandle (hObject=0x274) returned 1 [0054.067] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\RUM\\Pointers.pdf", nBufferLength=0x105, lpBuffer=0x31e0d4, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\RUM\\Pointers.pdf", lpFilePart=0x0) returned 0x5c [0054.067] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\RUM\\Pointers.pdf", nBufferLength=0x105, lpBuffer=0x31e0d4, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\RUM\\Pointers.pdf", lpFilePart=0x0) returned 0x5c [0054.067] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e534) returned 1 [0054.067] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\RUM\\Pointers.pdf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\rum\\pointers.pdf"), fInfoLevelId=0x0, lpFileInformation=0x31e5b0 | out: lpFileInformation=0x31e5b0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9b058100, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x80698ac0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x3ad0160, ftLastWriteTime.dwHighDateTime=0x1d6eb7f, nFileSizeHigh=0x0, nFileSizeLow=0xb740)) returned 1 [0054.067] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e530) returned 1 [0054.067] MoveFileW (lpExistingFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\RUM\\Pointers.pdf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\rum\\pointers.pdf"), lpNewFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\RUM\\Pointers.pdf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\rum\\pointers.pdf")) returned 1 [0054.068] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\RUM\\SignHere.pdf", nBufferLength=0x105, lpBuffer=0x31dfb4, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\RUM\\SignHere.pdf", lpFilePart=0x0) returned 0x5c [0054.068] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e4a8) returned 1 [0054.068] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\RUM\\SignHere.pdf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\rum\\signhere.pdf"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x274 [0054.068] GetFileType (hFile=0x274) returned 0x1 [0054.068] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e4a4) returned 1 [0054.068] GetFileType (hFile=0x274) returned 0x1 [0054.068] GetFileSize (in: hFile=0x274, lpFileSizeHigh=0x31e5b0 | out: lpFileSizeHigh=0x31e5b0*=0x0) returned 0xe736 [0054.068] ReadFile (in: hFile=0x274, lpBuffer=0x2778f6c, nNumberOfBytesToRead=0xe736, lpNumberOfBytesRead=0x31e55c, lpOverlapped=0x0 | out: lpBuffer=0x2778f6c*, lpNumberOfBytesRead=0x31e55c*=0xe736, lpOverlapped=0x0) returned 1 [0054.073] CloseHandle (hObject=0x274) returned 1 [0054.088] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\RUM\\SignHere.pdf", nBufferLength=0x105, lpBuffer=0x31dfa0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\RUM\\SignHere.pdf", lpFilePart=0x0) returned 0x5c [0054.088] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e494) returned 1 [0054.088] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\RUM\\SignHere.pdf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\rum\\signhere.pdf"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x274 [0054.089] GetFileType (hFile=0x274) returned 0x1 [0054.089] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e490) returned 1 [0054.089] GetFileType (hFile=0x274) returned 0x1 [0054.089] WriteFile (in: hFile=0x274, lpBuffer=0x27f1328*, nNumberOfBytesToWrite=0xe740, lpNumberOfBytesWritten=0x31e550, lpOverlapped=0x0 | out: lpBuffer=0x27f1328*, lpNumberOfBytesWritten=0x31e550*=0xe740, lpOverlapped=0x0) returned 1 [0054.091] CloseHandle (hObject=0x274) returned 1 [0054.091] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\RUM\\SignHere.pdf", nBufferLength=0x105, lpBuffer=0x31e0d4, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\RUM\\SignHere.pdf", lpFilePart=0x0) returned 0x5c [0054.091] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\RUM\\SignHere.pdf", nBufferLength=0x105, lpBuffer=0x31e0d4, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\RUM\\SignHere.pdf", lpFilePart=0x0) returned 0x5c [0054.091] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e534) returned 1 [0054.091] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\RUM\\SignHere.pdf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\rum\\signhere.pdf"), fInfoLevelId=0x0, lpFileInformation=0x31e5b0 | out: lpFileInformation=0x31e5b0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9b058100, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x80698ac0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x3b1c420, ftLastWriteTime.dwHighDateTime=0x1d6eb7f, nFileSizeHigh=0x0, nFileSizeLow=0xe740)) returned 1 [0054.091] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e530) returned 1 [0054.091] MoveFileW (lpExistingFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\RUM\\SignHere.pdf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\rum\\signhere.pdf"), lpNewFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\RUM\\SignHere.pdf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\rum\\signhere.pdf")) returned 1 [0054.091] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\RUM\\Standard.pdf", nBufferLength=0x105, lpBuffer=0x31dfb4, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\RUM\\Standard.pdf", lpFilePart=0x0) returned 0x5c [0054.091] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e4a8) returned 1 [0054.091] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\RUM\\Standard.pdf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\rum\\standard.pdf"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x274 [0054.092] GetFileType (hFile=0x274) returned 0x1 [0054.092] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e4a4) returned 1 [0054.092] GetFileType (hFile=0x274) returned 0x1 [0054.092] GetFileSize (in: hFile=0x274, lpFileSizeHigh=0x31e5b0 | out: lpFileSizeHigh=0x31e5b0*=0x0) returned 0x1c4f5 [0054.092] ReadFile (in: hFile=0x274, lpBuffer=0x3738358, nNumberOfBytesToRead=0x1c4f5, lpNumberOfBytesRead=0x31e55c, lpOverlapped=0x0 | out: lpBuffer=0x3738358*, lpNumberOfBytesRead=0x31e55c*=0x1c4f5, lpOverlapped=0x0) returned 1 [0054.144] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\RUM\\Standard.pdf", nBufferLength=0x105, lpBuffer=0x31dfa0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\RUM\\Standard.pdf", lpFilePart=0x0) returned 0x5c [0054.144] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e494) returned 1 [0054.145] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\RUM\\Standard.pdf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\rum\\standard.pdf"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x274 [0054.146] GetFileType (hFile=0x274) returned 0x1 [0054.146] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e490) returned 1 [0054.146] GetFileType (hFile=0x274) returned 0x1 [0054.146] WriteFile (in: hFile=0x274, lpBuffer=0x37c5c90*, nNumberOfBytesToWrite=0x1c500, lpNumberOfBytesWritten=0x31e550, lpOverlapped=0x0 | out: lpBuffer=0x37c5c90*, lpNumberOfBytesWritten=0x31e550*=0x1c500, lpOverlapped=0x0) returned 1 [0054.149] CloseHandle (hObject=0x274) returned 1 [0054.149] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\RUM\\Standard.pdf", nBufferLength=0x105, lpBuffer=0x31e0d4, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\RUM\\Standard.pdf", lpFilePart=0x0) returned 0x5c [0054.149] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\RUM\\Standard.pdf", nBufferLength=0x105, lpBuffer=0x31e0d4, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\RUM\\Standard.pdf", lpFilePart=0x0) returned 0x5c [0054.149] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e534) returned 1 [0054.149] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\RUM\\Standard.pdf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\rum\\standard.pdf"), fInfoLevelId=0x0, lpFileInformation=0x31e5b0 | out: lpFileInformation=0x31e5b0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9b058100, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x806bec20, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x3bb49a0, ftLastWriteTime.dwHighDateTime=0x1d6eb7f, nFileSizeHigh=0x0, nFileSizeLow=0x1c500)) returned 1 [0054.149] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e530) returned 1 [0054.149] MoveFileW (lpExistingFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\RUM\\Standard.pdf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\rum\\standard.pdf"), lpNewFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\RUM\\Standard.pdf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\rum\\standard.pdf")) returned 1 [0054.150] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\RUM\\StandardBusiness.pdf", nBufferLength=0x105, lpBuffer=0x31dfb4, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\RUM\\StandardBusiness.pdf", lpFilePart=0x0) returned 0x64 [0054.150] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e4a8) returned 1 [0054.150] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\RUM\\StandardBusiness.pdf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\rum\\standardbusiness.pdf"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x274 [0054.150] GetFileType (hFile=0x274) returned 0x1 [0054.150] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e4a4) returned 1 [0054.150] GetFileType (hFile=0x274) returned 0x1 [0054.150] GetFileSize (in: hFile=0x274, lpFileSizeHigh=0x31e5b0 | out: lpFileSizeHigh=0x31e5b0*=0x0) returned 0x2fe62 [0054.150] ReadFile (in: hFile=0x274, lpBuffer=0x37e21b0, nNumberOfBytesToRead=0x2fe62, lpNumberOfBytesRead=0x31e55c, lpOverlapped=0x0 | out: lpBuffer=0x37e21b0*, lpNumberOfBytesRead=0x31e55c*=0x2fe62, lpOverlapped=0x0) returned 1 [0054.159] CloseHandle (hObject=0x274) returned 1 [0054.180] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\RUM\\StandardBusiness.pdf", nBufferLength=0x105, lpBuffer=0x31dfa0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\RUM\\StandardBusiness.pdf", lpFilePart=0x0) returned 0x64 [0054.180] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e494) returned 1 [0054.180] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\RUM\\StandardBusiness.pdf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\rum\\standardbusiness.pdf"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x274 [0054.182] GetFileType (hFile=0x274) returned 0x1 [0054.182] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e490) returned 1 [0054.182] GetFileType (hFile=0x274) returned 0x1 [0054.182] WriteFile (in: hFile=0x274, lpBuffer=0x3927588*, nNumberOfBytesToWrite=0x2fe70, lpNumberOfBytesWritten=0x31e550, lpOverlapped=0x0 | out: lpBuffer=0x3927588*, lpNumberOfBytesWritten=0x31e550*=0x2fe70, lpOverlapped=0x0) returned 1 [0054.185] CloseHandle (hObject=0x274) returned 1 [0054.185] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\RUM\\StandardBusiness.pdf", nBufferLength=0x105, lpBuffer=0x31e0d4, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\RUM\\StandardBusiness.pdf", lpFilePart=0x0) returned 0x64 [0054.185] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\RUM\\StandardBusiness.pdf", nBufferLength=0x105, lpBuffer=0x31e0d4, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\RUM\\StandardBusiness.pdf", lpFilePart=0x0) returned 0x64 [0054.186] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e534) returned 1 [0054.186] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\RUM\\StandardBusiness.pdf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\rum\\standardbusiness.pdf"), fInfoLevelId=0x0, lpFileInformation=0x31e5b0 | out: lpFileInformation=0x31e5b0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9b058100, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x80698ac0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x3c00c60, ftLastWriteTime.dwHighDateTime=0x1d6eb7f, nFileSizeHigh=0x0, nFileSizeLow=0x2fe70)) returned 1 [0054.186] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e530) returned 1 [0054.186] MoveFileW (lpExistingFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\RUM\\StandardBusiness.pdf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\rum\\standardbusiness.pdf"), lpNewFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\RUM\\StandardBusiness.pdf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\rum\\standardbusiness.pdf")) returned 1 [0054.186] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e5dc) returned 1 [0054.186] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\RUS", nBufferLength=0x105, lpBuffer=0x31e0e4, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\RUS", lpFilePart=0x0) returned 0x4f [0054.186] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\RUS\\", nBufferLength=0x105, lpBuffer=0x31e0b8, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\RUS\\", lpFilePart=0x0) returned 0x50 [0054.186] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\RUS\\*", lpFindFileData=0x31e304 | out: lpFindFileData=0x31e304*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x80672960, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x80698ac0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x80698ac0, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x381e00 [0054.195] FindNextFileW (in: hFindFile=0x381e00, lpFindFileData=0x31e314 | out: lpFindFileData=0x31e314*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x80672960, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x80698ac0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x80698ac0, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0054.196] FindNextFileW (in: hFindFile=0x381e00, lpFindFileData=0x31e314 | out: lpFindFileData=0x31e314*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9b058100, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x80698ac0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9b058100, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0xeac7, dwReserved0=0x0, dwReserved1=0x0, cFileName="Dynamic.pdf", cAlternateFileName="")) returned 1 [0054.196] FindNextFileW (in: hFindFile=0x381e00, lpFindFileData=0x31e314 | out: lpFindFileData=0x31e314*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9b058100, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x80698ac0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9b058100, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x80f5, dwReserved0=0x0, dwReserved1=0x0, cFileName="Faces.pdf", cAlternateFileName="")) returned 1 [0054.196] FindNextFileW (in: hFindFile=0x381e00, lpFindFileData=0x31e314 | out: lpFindFileData=0x31e314*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9b058100, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x80698ac0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9b058100, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0xb731, dwReserved0=0x0, dwReserved1=0x0, cFileName="Pointers.pdf", cAlternateFileName="")) returned 1 [0054.196] FindNextFileW (in: hFindFile=0x381e00, lpFindFileData=0x31e314 | out: lpFindFileData=0x31e314*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9b058100, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x80672960, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9b058100, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0xa118, dwReserved0=0x0, dwReserved1=0x0, cFileName="SignHere.pdf", cAlternateFileName="")) returned 1 [0054.196] FindNextFileW (in: hFindFile=0x381e00, lpFindFileData=0x31e314 | out: lpFindFileData=0x31e314*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9b058100, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x80698ac0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9b058100, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x1c4f5, dwReserved0=0x0, dwReserved1=0x0, cFileName="Standard.pdf", cAlternateFileName="")) returned 1 [0054.196] FindNextFileW (in: hFindFile=0x381e00, lpFindFileData=0x31e314 | out: lpFindFileData=0x31e314*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9b058100, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x80672960, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9b058100, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x1ac4e, dwReserved0=0x0, dwReserved1=0x0, cFileName="StandardBusiness.pdf", cAlternateFileName="STANDA~1.PDF")) returned 1 [0054.196] FindNextFileW (in: hFindFile=0x381e00, lpFindFileData=0x31e314 | out: lpFindFileData=0x31e314*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0054.196] FindClose (in: hFindFile=0x381e00 | out: hFindFile=0x381e00) returned 1 [0054.197] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e59c) returned 1 [0054.197] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e5a8) returned 1 [0054.197] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e5dc) returned 1 [0054.197] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\RUS", nBufferLength=0x105, lpBuffer=0x31e0e4, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\RUS", lpFilePart=0x0) returned 0x4f [0054.197] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\RUS\\", nBufferLength=0x105, lpBuffer=0x31e0b8, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\RUS\\", lpFilePart=0x0) returned 0x50 [0054.197] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\RUS\\*", lpFindFileData=0x31e304 | out: lpFindFileData=0x31e304*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x80672960, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x80698ac0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x80698ac0, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x381e00 [0054.198] FindNextFileW (in: hFindFile=0x381e00, lpFindFileData=0x31e314 | out: lpFindFileData=0x31e314*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x80672960, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x80698ac0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x80698ac0, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0054.198] FindNextFileW (in: hFindFile=0x381e00, lpFindFileData=0x31e314 | out: lpFindFileData=0x31e314*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9b058100, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x80698ac0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9b058100, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0xeac7, dwReserved0=0x0, dwReserved1=0x0, cFileName="Dynamic.pdf", cAlternateFileName="")) returned 1 [0054.198] FindNextFileW (in: hFindFile=0x381e00, lpFindFileData=0x31e314 | out: lpFindFileData=0x31e314*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9b058100, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x80698ac0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9b058100, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x80f5, dwReserved0=0x0, dwReserved1=0x0, cFileName="Faces.pdf", cAlternateFileName="")) returned 1 [0054.198] FindNextFileW (in: hFindFile=0x381e00, lpFindFileData=0x31e314 | out: lpFindFileData=0x31e314*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9b058100, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x80698ac0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9b058100, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0xb731, dwReserved0=0x0, dwReserved1=0x0, cFileName="Pointers.pdf", cAlternateFileName="")) returned 1 [0054.199] FindNextFileW (in: hFindFile=0x381e00, lpFindFileData=0x31e314 | out: lpFindFileData=0x31e314*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9b058100, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x80672960, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9b058100, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0xa118, dwReserved0=0x0, dwReserved1=0x0, cFileName="SignHere.pdf", cAlternateFileName="")) returned 1 [0054.199] FindNextFileW (in: hFindFile=0x381e00, lpFindFileData=0x31e314 | out: lpFindFileData=0x31e314*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9b058100, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x80698ac0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9b058100, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x1c4f5, dwReserved0=0x0, dwReserved1=0x0, cFileName="Standard.pdf", cAlternateFileName="")) returned 1 [0054.199] FindNextFileW (in: hFindFile=0x381e00, lpFindFileData=0x31e314 | out: lpFindFileData=0x31e314*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9b058100, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x80672960, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9b058100, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x1ac4e, dwReserved0=0x0, dwReserved1=0x0, cFileName="StandardBusiness.pdf", cAlternateFileName="STANDA~1.PDF")) returned 1 [0054.199] FindNextFileW (in: hFindFile=0x381e00, lpFindFileData=0x31e314 | out: lpFindFileData=0x31e314*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9b058100, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x80672960, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9b058100, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x1ac4e, dwReserved0=0x0, dwReserved1=0x0, cFileName="StandardBusiness.pdf", cAlternateFileName="STANDA~1.PDF")) returned 0 [0054.199] FindClose (in: hFindFile=0x381e00 | out: hFindFile=0x381e00) returned 1 [0054.200] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e59c) returned 1 [0054.200] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e5a8) returned 1 [0054.200] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\RUS\\Dynamic.pdf", nBufferLength=0x105, lpBuffer=0x31dfb4, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\RUS\\Dynamic.pdf", lpFilePart=0x0) returned 0x5b [0054.200] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e4a8) returned 1 [0054.200] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\RUS\\Dynamic.pdf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\rus\\dynamic.pdf"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x274 [0054.201] GetFileType (hFile=0x274) returned 0x1 [0054.201] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e4a4) returned 1 [0054.201] GetFileType (hFile=0x274) returned 0x1 [0054.201] GetFileSize (in: hFile=0x274, lpFileSizeHigh=0x31e5b0 | out: lpFileSizeHigh=0x31e5b0*=0x0) returned 0xeac7 [0054.201] ReadFile (in: hFile=0x274, lpBuffer=0x269de30, nNumberOfBytesToRead=0xeac7, lpNumberOfBytesRead=0x31e55c, lpOverlapped=0x0 | out: lpBuffer=0x269de30*, lpNumberOfBytesRead=0x31e55c*=0xeac7, lpOverlapped=0x0) returned 1 [0054.215] CloseHandle (hObject=0x274) returned 1 [0054.230] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\RUS\\Dynamic.pdf", nBufferLength=0x105, lpBuffer=0x31dfa0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\RUS\\Dynamic.pdf", lpFilePart=0x0) returned 0x5b [0054.230] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e494) returned 1 [0054.230] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\RUS\\Dynamic.pdf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\rus\\dynamic.pdf"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x274 [0054.231] GetFileType (hFile=0x274) returned 0x1 [0054.231] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e490) returned 1 [0054.232] GetFileType (hFile=0x274) returned 0x1 [0054.232] WriteFile (in: hFile=0x274, lpBuffer=0x2716c9c*, nNumberOfBytesToWrite=0xead0, lpNumberOfBytesWritten=0x31e550, lpOverlapped=0x0 | out: lpBuffer=0x2716c9c*, lpNumberOfBytesWritten=0x31e550*=0xead0, lpOverlapped=0x0) returned 1 [0054.233] CloseHandle (hObject=0x274) returned 1 [0054.233] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\RUS\\Dynamic.pdf", nBufferLength=0x105, lpBuffer=0x31e0d4, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\RUS\\Dynamic.pdf", lpFilePart=0x0) returned 0x5b [0054.233] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\RUS\\Dynamic.pdf", nBufferLength=0x105, lpBuffer=0x31e0d4, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\RUS\\Dynamic.pdf", lpFilePart=0x0) returned 0x5b [0054.233] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e534) returned 1 [0054.233] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\RUS\\Dynamic.pdf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\rus\\dynamic.pdf"), fInfoLevelId=0x0, lpFileInformation=0x31e5b0 | out: lpFileInformation=0x31e5b0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9b058100, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x80698ac0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x3c73080, ftLastWriteTime.dwHighDateTime=0x1d6eb7f, nFileSizeHigh=0x0, nFileSizeLow=0xead0)) returned 1 [0054.233] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e530) returned 1 [0054.234] MoveFileW (lpExistingFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\RUS\\Dynamic.pdf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\rus\\dynamic.pdf"), lpNewFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\RUS\\Dynamic.pdf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\rus\\dynamic.pdf")) returned 1 [0054.234] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\RUS\\Faces.pdf", nBufferLength=0x105, lpBuffer=0x31dfb4, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\RUS\\Faces.pdf", lpFilePart=0x0) returned 0x59 [0054.234] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e4a8) returned 1 [0054.234] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\RUS\\Faces.pdf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\rus\\faces.pdf"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x274 [0054.234] GetFileType (hFile=0x274) returned 0x1 [0054.234] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e4a4) returned 1 [0054.234] GetFileType (hFile=0x274) returned 0x1 [0054.234] GetFileSize (in: hFile=0x274, lpFileSizeHigh=0x31e5b0 | out: lpFileSizeHigh=0x31e5b0*=0x0) returned 0x80f5 [0054.234] ReadFile (in: hFile=0x274, lpBuffer=0x2725b98, nNumberOfBytesToRead=0x80f5, lpNumberOfBytesRead=0x31e55c, lpOverlapped=0x0 | out: lpBuffer=0x2725b98*, lpNumberOfBytesRead=0x31e55c*=0x80f5, lpOverlapped=0x0) returned 1 [0054.251] CloseHandle (hObject=0x274) returned 1 [0054.266] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\RUS\\Faces.pdf", nBufferLength=0x105, lpBuffer=0x31dfa0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\RUS\\Faces.pdf", lpFilePart=0x0) returned 0x59 [0054.266] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e494) returned 1 [0054.266] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\RUS\\Faces.pdf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\rus\\faces.pdf"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x274 [0054.267] GetFileType (hFile=0x274) returned 0x1 [0054.267] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e490) returned 1 [0054.267] GetFileType (hFile=0x274) returned 0x1 [0054.267] WriteFile (in: hFile=0x274, lpBuffer=0x279ae80*, nNumberOfBytesToWrite=0x8100, lpNumberOfBytesWritten=0x31e550, lpOverlapped=0x0 | out: lpBuffer=0x279ae80*, lpNumberOfBytesWritten=0x31e550*=0x8100, lpOverlapped=0x0) returned 1 [0054.268] CloseHandle (hObject=0x274) returned 1 [0054.268] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\RUS\\Faces.pdf", nBufferLength=0x105, lpBuffer=0x31e0d4, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\RUS\\Faces.pdf", lpFilePart=0x0) returned 0x59 [0054.268] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\RUS\\Faces.pdf", nBufferLength=0x105, lpBuffer=0x31e0d4, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\RUS\\Faces.pdf", lpFilePart=0x0) returned 0x59 [0054.268] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e534) returned 1 [0054.268] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\RUS\\Faces.pdf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\rus\\faces.pdf"), fInfoLevelId=0x0, lpFileInformation=0x31e5b0 | out: lpFileInformation=0x31e5b0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9b058100, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x80698ac0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x3cbf340, ftLastWriteTime.dwHighDateTime=0x1d6eb7f, nFileSizeHigh=0x0, nFileSizeLow=0x8100)) returned 1 [0054.268] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e530) returned 1 [0054.268] MoveFileW (lpExistingFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\RUS\\Faces.pdf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\rus\\faces.pdf"), lpNewFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\RUS\\Faces.pdf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\rus\\faces.pdf")) returned 1 [0054.269] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\RUS\\Pointers.pdf", nBufferLength=0x105, lpBuffer=0x31dfb4, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\RUS\\Pointers.pdf", lpFilePart=0x0) returned 0x5c [0054.269] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e4a8) returned 1 [0054.269] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\RUS\\Pointers.pdf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\rus\\pointers.pdf"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x274 [0054.269] GetFileType (hFile=0x274) returned 0x1 [0054.269] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e4a4) returned 1 [0054.269] GetFileType (hFile=0x274) returned 0x1 [0054.269] GetFileSize (in: hFile=0x274, lpFileSizeHigh=0x31e5b0 | out: lpFileSizeHigh=0x31e5b0*=0x0) returned 0xb731 [0054.269] ReadFile (in: hFile=0x274, lpBuffer=0x27a33ac, nNumberOfBytesToRead=0xb731, lpNumberOfBytesRead=0x31e55c, lpOverlapped=0x0 | out: lpBuffer=0x27a33ac*, lpNumberOfBytesRead=0x31e55c*=0xb731, lpOverlapped=0x0) returned 1 [0054.272] CloseHandle (hObject=0x274) returned 1 [0054.291] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\RUS\\Pointers.pdf", nBufferLength=0x105, lpBuffer=0x31dfa0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\RUS\\Pointers.pdf", lpFilePart=0x0) returned 0x5c [0054.291] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e494) returned 1 [0054.291] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\RUS\\Pointers.pdf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\rus\\pointers.pdf"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x274 [0054.292] GetFileType (hFile=0x274) returned 0x1 [0054.292] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e490) returned 1 [0054.292] GetFileType (hFile=0x274) returned 0x1 [0054.292] WriteFile (in: hFile=0x274, lpBuffer=0x26471c8*, nNumberOfBytesToWrite=0xb740, lpNumberOfBytesWritten=0x31e550, lpOverlapped=0x0 | out: lpBuffer=0x26471c8*, lpNumberOfBytesWritten=0x31e550*=0xb740, lpOverlapped=0x0) returned 1 [0054.294] CloseHandle (hObject=0x274) returned 1 [0054.294] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\RUS\\Pointers.pdf", nBufferLength=0x105, lpBuffer=0x31e0d4, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\RUS\\Pointers.pdf", lpFilePart=0x0) returned 0x5c [0054.294] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\RUS\\Pointers.pdf", nBufferLength=0x105, lpBuffer=0x31e0d4, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\RUS\\Pointers.pdf", lpFilePart=0x0) returned 0x5c [0054.294] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e534) returned 1 [0054.294] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\RUS\\Pointers.pdf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\rus\\pointers.pdf"), fInfoLevelId=0x0, lpFileInformation=0x31e5b0 | out: lpFileInformation=0x31e5b0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9b058100, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x80698ac0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x3d0b600, ftLastWriteTime.dwHighDateTime=0x1d6eb7f, nFileSizeHigh=0x0, nFileSizeLow=0xb740)) returned 1 [0054.294] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e530) returned 1 [0054.294] MoveFileW (lpExistingFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\RUS\\Pointers.pdf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\rus\\pointers.pdf"), lpNewFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\RUS\\Pointers.pdf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\rus\\pointers.pdf")) returned 1 [0054.295] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\RUS\\SignHere.pdf", nBufferLength=0x105, lpBuffer=0x31dfb4, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\RUS\\SignHere.pdf", lpFilePart=0x0) returned 0x5c [0054.295] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e4a8) returned 1 [0054.295] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\RUS\\SignHere.pdf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\rus\\signhere.pdf"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x274 [0054.295] GetFileType (hFile=0x274) returned 0x1 [0054.295] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e4a4) returned 1 [0054.295] GetFileType (hFile=0x274) returned 0x1 [0054.295] GetFileSize (in: hFile=0x274, lpFileSizeHigh=0x31e5b0 | out: lpFileSizeHigh=0x31e5b0*=0x0) returned 0xa118 [0054.295] ReadFile (in: hFile=0x274, lpBuffer=0x2652d54, nNumberOfBytesToRead=0xa118, lpNumberOfBytesRead=0x31e55c, lpOverlapped=0x0 | out: lpBuffer=0x2652d54*, lpNumberOfBytesRead=0x31e55c*=0xa118, lpOverlapped=0x0) returned 1 [0054.301] CloseHandle (hObject=0x274) returned 1 [0054.342] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\RUS\\SignHere.pdf", nBufferLength=0x105, lpBuffer=0x31dfa0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\RUS\\SignHere.pdf", lpFilePart=0x0) returned 0x5c [0054.342] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e494) returned 1 [0054.342] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\RUS\\SignHere.pdf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\rus\\signhere.pdf"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x274 [0054.343] GetFileType (hFile=0x274) returned 0x1 [0054.343] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e490) returned 1 [0054.343] GetFileType (hFile=0x274) returned 0x1 [0054.343] WriteFile (in: hFile=0x274, lpBuffer=0x26d2234*, nNumberOfBytesToWrite=0xa120, lpNumberOfBytesWritten=0x31e550, lpOverlapped=0x0 | out: lpBuffer=0x26d2234*, lpNumberOfBytesWritten=0x31e550*=0xa120, lpOverlapped=0x0) returned 1 [0054.344] CloseHandle (hObject=0x274) returned 1 [0054.344] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\RUS\\SignHere.pdf", nBufferLength=0x105, lpBuffer=0x31e0d4, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\RUS\\SignHere.pdf", lpFilePart=0x0) returned 0x5c [0054.345] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\RUS\\SignHere.pdf", nBufferLength=0x105, lpBuffer=0x31e0d4, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\RUS\\SignHere.pdf", lpFilePart=0x0) returned 0x5c [0054.345] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e534) returned 1 [0054.345] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\RUS\\SignHere.pdf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\rus\\signhere.pdf"), fInfoLevelId=0x0, lpFileInformation=0x31e5b0 | out: lpFileInformation=0x31e5b0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9b058100, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x80672960, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x3d7da20, ftLastWriteTime.dwHighDateTime=0x1d6eb7f, nFileSizeHigh=0x0, nFileSizeLow=0xa120)) returned 1 [0054.345] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e530) returned 1 [0054.345] MoveFileW (lpExistingFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\RUS\\SignHere.pdf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\rus\\signhere.pdf"), lpNewFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\RUS\\SignHere.pdf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\rus\\signhere.pdf")) returned 1 [0054.345] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\RUS\\Standard.pdf", nBufferLength=0x105, lpBuffer=0x31dfb4, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\RUS\\Standard.pdf", lpFilePart=0x0) returned 0x5c [0054.345] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e4a8) returned 1 [0054.345] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\RUS\\Standard.pdf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\rus\\standard.pdf"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x274 [0054.345] GetFileType (hFile=0x274) returned 0x1 [0054.345] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e4a4) returned 1 [0054.345] GetFileType (hFile=0x274) returned 0x1 [0054.346] GetFileSize (in: hFile=0x274, lpFileSizeHigh=0x31e5b0 | out: lpFileSizeHigh=0x31e5b0*=0x0) returned 0x1c4f5 [0054.346] ReadFile (in: hFile=0x274, lpBuffer=0x3630330, nNumberOfBytesToRead=0x1c4f5, lpNumberOfBytesRead=0x31e55c, lpOverlapped=0x0 | out: lpBuffer=0x3630330*, lpNumberOfBytesRead=0x31e55c*=0x1c4f5, lpOverlapped=0x0) returned 1 [0054.350] CloseHandle (hObject=0x274) returned 1 [0054.371] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\RUS\\Standard.pdf", nBufferLength=0x105, lpBuffer=0x31dfa0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\RUS\\Standard.pdf", lpFilePart=0x0) returned 0x5c [0054.372] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e494) returned 1 [0054.372] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\RUS\\Standard.pdf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\rus\\standard.pdf"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x274 [0054.373] GetFileType (hFile=0x274) returned 0x1 [0054.373] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e490) returned 1 [0054.373] GetFileType (hFile=0x274) returned 0x1 [0054.373] WriteFile (in: hFile=0x274, lpBuffer=0x36bdc68*, nNumberOfBytesToWrite=0x1c500, lpNumberOfBytesWritten=0x31e550, lpOverlapped=0x0 | out: lpBuffer=0x36bdc68*, lpNumberOfBytesWritten=0x31e550*=0x1c500, lpOverlapped=0x0) returned 1 [0054.375] CloseHandle (hObject=0x274) returned 1 [0054.376] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\RUS\\Standard.pdf", nBufferLength=0x105, lpBuffer=0x31e0d4, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\RUS\\Standard.pdf", lpFilePart=0x0) returned 0x5c [0054.376] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\RUS\\Standard.pdf", nBufferLength=0x105, lpBuffer=0x31e0d4, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\RUS\\Standard.pdf", lpFilePart=0x0) returned 0x5c [0054.376] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e534) returned 1 [0054.376] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\RUS\\Standard.pdf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\rus\\standard.pdf"), fInfoLevelId=0x0, lpFileInformation=0x31e5b0 | out: lpFileInformation=0x31e5b0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9b058100, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x80698ac0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x3dc9ce0, ftLastWriteTime.dwHighDateTime=0x1d6eb7f, nFileSizeHigh=0x0, nFileSizeLow=0x1c500)) returned 1 [0054.376] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e530) returned 1 [0054.376] MoveFileW (lpExistingFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\RUS\\Standard.pdf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\rus\\standard.pdf"), lpNewFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\RUS\\Standard.pdf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\rus\\standard.pdf")) returned 1 [0054.376] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\RUS\\StandardBusiness.pdf", nBufferLength=0x105, lpBuffer=0x31dfb4, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\RUS\\StandardBusiness.pdf", lpFilePart=0x0) returned 0x64 [0054.376] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e4a8) returned 1 [0054.376] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\RUS\\StandardBusiness.pdf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\rus\\standardbusiness.pdf"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x274 [0054.376] GetFileType (hFile=0x274) returned 0x1 [0054.376] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e4a4) returned 1 [0054.376] GetFileType (hFile=0x274) returned 0x1 [0054.377] GetFileSize (in: hFile=0x274, lpFileSizeHigh=0x31e5b0 | out: lpFileSizeHigh=0x31e5b0*=0x0) returned 0x1ac4e [0054.377] ReadFile (in: hFile=0x274, lpBuffer=0x36da188, nNumberOfBytesToRead=0x1ac4e, lpNumberOfBytesRead=0x31e55c, lpOverlapped=0x0 | out: lpBuffer=0x36da188*, lpNumberOfBytesRead=0x31e55c*=0x1ac4e, lpOverlapped=0x0) returned 1 [0054.387] CloseHandle (hObject=0x274) returned 1 [0054.406] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\RUS\\StandardBusiness.pdf", nBufferLength=0x105, lpBuffer=0x31dfa0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\RUS\\StandardBusiness.pdf", lpFilePart=0x0) returned 0x64 [0054.406] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e494) returned 1 [0054.406] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\RUS\\StandardBusiness.pdf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\rus\\standardbusiness.pdf"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x274 [0054.408] GetFileType (hFile=0x274) returned 0x1 [0054.408] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e490) returned 1 [0054.408] GetFileType (hFile=0x274) returned 0x1 [0054.408] WriteFile (in: hFile=0x274, lpBuffer=0x375ff58*, nNumberOfBytesToWrite=0x1ac50, lpNumberOfBytesWritten=0x31e550, lpOverlapped=0x0 | out: lpBuffer=0x375ff58*, lpNumberOfBytesWritten=0x31e550*=0x1ac50, lpOverlapped=0x0) returned 1 [0054.410] CloseHandle (hObject=0x274) returned 1 [0054.410] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\RUS\\StandardBusiness.pdf", nBufferLength=0x105, lpBuffer=0x31e0d4, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\RUS\\StandardBusiness.pdf", lpFilePart=0x0) returned 0x64 [0054.410] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\RUS\\StandardBusiness.pdf", nBufferLength=0x105, lpBuffer=0x31e0d4, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\RUS\\StandardBusiness.pdf", lpFilePart=0x0) returned 0x64 [0054.410] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e534) returned 1 [0054.410] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\RUS\\StandardBusiness.pdf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\rus\\standardbusiness.pdf"), fInfoLevelId=0x0, lpFileInformation=0x31e5b0 | out: lpFileInformation=0x31e5b0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9b058100, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x80672960, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x3e15fa0, ftLastWriteTime.dwHighDateTime=0x1d6eb7f, nFileSizeHigh=0x0, nFileSizeLow=0x1ac50)) returned 1 [0054.410] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e530) returned 1 [0054.410] MoveFileW (lpExistingFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\RUS\\StandardBusiness.pdf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\rus\\standardbusiness.pdf"), lpNewFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\RUS\\StandardBusiness.pdf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\rus\\standardbusiness.pdf")) returned 1 [0054.411] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e5dc) returned 1 [0054.411] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\SKY", nBufferLength=0x105, lpBuffer=0x31e0e4, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\SKY", lpFilePart=0x0) returned 0x4f [0054.411] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\SKY\\", nBufferLength=0x105, lpBuffer=0x31e0b8, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\SKY\\", lpFilePart=0x0) returned 0x50 [0054.411] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\SKY\\*", lpFindFileData=0x31e304 | out: lpFindFileData=0x31e304*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8064c800, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x80672960, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x80672960, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x381e80 [0054.413] FindNextFileW (in: hFindFile=0x381e80, lpFindFileData=0x31e314 | out: lpFindFileData=0x31e314*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8064c800, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x80672960, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x80672960, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0054.413] FindNextFileW (in: hFindFile=0x381e80, lpFindFileData=0x31e314 | out: lpFindFileData=0x31e314*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9c36ae00, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x80672960, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9c36ae00, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0xa85d, dwReserved0=0x0, dwReserved1=0x0, cFileName="Dynamic.pdf", cAlternateFileName="")) returned 1 [0054.413] FindNextFileW (in: hFindFile=0x381e80, lpFindFileData=0x31e314 | out: lpFindFileData=0x31e314*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9c36ae00, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x80672960, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9c36ae00, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x80f5, dwReserved0=0x0, dwReserved1=0x0, cFileName="Faces.pdf", cAlternateFileName="")) returned 1 [0054.413] FindNextFileW (in: hFindFile=0x381e80, lpFindFileData=0x31e314 | out: lpFindFileData=0x31e314*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9c36ae00, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x80672960, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9c36ae00, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0xb731, dwReserved0=0x0, dwReserved1=0x0, cFileName="Pointers.pdf", cAlternateFileName="")) returned 1 [0054.413] FindNextFileW (in: hFindFile=0x381e80, lpFindFileData=0x31e314 | out: lpFindFileData=0x31e314*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9c36ae00, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x80672960, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9c36ae00, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0xb9dd, dwReserved0=0x0, dwReserved1=0x0, cFileName="SignHere.pdf", cAlternateFileName="")) returned 1 [0054.413] FindNextFileW (in: hFindFile=0x381e80, lpFindFileData=0x31e314 | out: lpFindFileData=0x31e314*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9c36ae00, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x80672960, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9c36ae00, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x1c4f5, dwReserved0=0x0, dwReserved1=0x0, cFileName="Standard.pdf", cAlternateFileName="")) returned 1 [0054.413] FindNextFileW (in: hFindFile=0x381e80, lpFindFileData=0x31e314 | out: lpFindFileData=0x31e314*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9c36ae00, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x80672960, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9c36ae00, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x14758, dwReserved0=0x0, dwReserved1=0x0, cFileName="StandardBusiness.pdf", cAlternateFileName="STANDA~1.PDF")) returned 1 [0054.414] FindNextFileW (in: hFindFile=0x381e80, lpFindFileData=0x31e314 | out: lpFindFileData=0x31e314*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0054.414] FindClose (in: hFindFile=0x381e80 | out: hFindFile=0x381e80) returned 1 [0054.414] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e59c) returned 1 [0054.414] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e5a8) returned 1 [0054.414] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e5dc) returned 1 [0054.414] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\SKY", nBufferLength=0x105, lpBuffer=0x31e0e4, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\SKY", lpFilePart=0x0) returned 0x4f [0054.414] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\SKY\\", nBufferLength=0x105, lpBuffer=0x31e0b8, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\SKY\\", lpFilePart=0x0) returned 0x50 [0054.415] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\SKY\\*", lpFindFileData=0x31e304 | out: lpFindFileData=0x31e304*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8064c800, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x80672960, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x80672960, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x381e80 [0054.415] FindNextFileW (in: hFindFile=0x381e80, lpFindFileData=0x31e314 | out: lpFindFileData=0x31e314*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8064c800, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x80672960, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x80672960, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0054.416] FindNextFileW (in: hFindFile=0x381e80, lpFindFileData=0x31e314 | out: lpFindFileData=0x31e314*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9c36ae00, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x80672960, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9c36ae00, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0xa85d, dwReserved0=0x0, dwReserved1=0x0, cFileName="Dynamic.pdf", cAlternateFileName="")) returned 1 [0054.416] FindNextFileW (in: hFindFile=0x381e80, lpFindFileData=0x31e314 | out: lpFindFileData=0x31e314*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9c36ae00, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x80672960, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9c36ae00, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x80f5, dwReserved0=0x0, dwReserved1=0x0, cFileName="Faces.pdf", cAlternateFileName="")) returned 1 [0054.416] FindNextFileW (in: hFindFile=0x381e80, lpFindFileData=0x31e314 | out: lpFindFileData=0x31e314*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9c36ae00, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x80672960, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9c36ae00, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0xb731, dwReserved0=0x0, dwReserved1=0x0, cFileName="Pointers.pdf", cAlternateFileName="")) returned 1 [0054.416] FindNextFileW (in: hFindFile=0x381e80, lpFindFileData=0x31e314 | out: lpFindFileData=0x31e314*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9c36ae00, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x80672960, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9c36ae00, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0xb9dd, dwReserved0=0x0, dwReserved1=0x0, cFileName="SignHere.pdf", cAlternateFileName="")) returned 1 [0054.416] FindNextFileW (in: hFindFile=0x381e80, lpFindFileData=0x31e314 | out: lpFindFileData=0x31e314*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9c36ae00, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x80672960, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9c36ae00, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x1c4f5, dwReserved0=0x0, dwReserved1=0x0, cFileName="Standard.pdf", cAlternateFileName="")) returned 1 [0054.416] FindNextFileW (in: hFindFile=0x381e80, lpFindFileData=0x31e314 | out: lpFindFileData=0x31e314*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9c36ae00, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x80672960, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9c36ae00, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x14758, dwReserved0=0x0, dwReserved1=0x0, cFileName="StandardBusiness.pdf", cAlternateFileName="STANDA~1.PDF")) returned 1 [0054.416] FindNextFileW (in: hFindFile=0x381e80, lpFindFileData=0x31e314 | out: lpFindFileData=0x31e314*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9c36ae00, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x80672960, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9c36ae00, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x14758, dwReserved0=0x0, dwReserved1=0x0, cFileName="StandardBusiness.pdf", cAlternateFileName="STANDA~1.PDF")) returned 0 [0054.416] FindClose (in: hFindFile=0x381e80 | out: hFindFile=0x381e80) returned 1 [0054.417] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e59c) returned 1 [0054.417] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e5a8) returned 1 [0054.417] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\SKY\\Dynamic.pdf", nBufferLength=0x105, lpBuffer=0x31dfb4, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\SKY\\Dynamic.pdf", lpFilePart=0x0) returned 0x5b [0054.417] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e4a8) returned 1 [0054.417] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\SKY\\Dynamic.pdf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\sky\\dynamic.pdf"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x274 [0054.419] GetFileType (hFile=0x274) returned 0x1 [0054.419] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e4a4) returned 1 [0054.419] GetFileType (hFile=0x274) returned 0x1 [0054.419] GetFileSize (in: hFile=0x274, lpFileSizeHigh=0x31e5b0 | out: lpFileSizeHigh=0x31e5b0*=0x0) returned 0xa85d [0054.419] ReadFile (in: hFile=0x274, lpBuffer=0x2779c18, nNumberOfBytesToRead=0xa85d, lpNumberOfBytesRead=0x31e55c, lpOverlapped=0x0 | out: lpBuffer=0x2779c18*, lpNumberOfBytesRead=0x31e55c*=0xa85d, lpOverlapped=0x0) returned 1 [0054.421] CloseHandle (hObject=0x274) returned 1 [0054.460] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\SKY\\Dynamic.pdf", nBufferLength=0x105, lpBuffer=0x31dfa0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\SKY\\Dynamic.pdf", lpFilePart=0x0) returned 0x5b [0054.460] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e494) returned 1 [0054.460] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\SKY\\Dynamic.pdf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\sky\\dynamic.pdf"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x274 [0054.461] GetFileType (hFile=0x274) returned 0x1 [0054.462] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e490) returned 1 [0054.462] GetFileType (hFile=0x274) returned 0x1 [0054.462] WriteFile (in: hFile=0x274, lpBuffer=0x27e6334*, nNumberOfBytesToWrite=0xa860, lpNumberOfBytesWritten=0x31e550, lpOverlapped=0x0 | out: lpBuffer=0x27e6334*, lpNumberOfBytesWritten=0x31e550*=0xa860, lpOverlapped=0x0) returned 1 [0054.463] CloseHandle (hObject=0x274) returned 1 [0054.463] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\SKY\\Dynamic.pdf", nBufferLength=0x105, lpBuffer=0x31e0d4, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\SKY\\Dynamic.pdf", lpFilePart=0x0) returned 0x5b [0054.463] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\SKY\\Dynamic.pdf", nBufferLength=0x105, lpBuffer=0x31e0d4, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\SKY\\Dynamic.pdf", lpFilePart=0x0) returned 0x5b [0054.463] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e534) returned 1 [0054.463] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\SKY\\Dynamic.pdf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\sky\\dynamic.pdf"), fInfoLevelId=0x0, lpFileInformation=0x31e5b0 | out: lpFileInformation=0x31e5b0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9c36ae00, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x80672960, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x3eae520, ftLastWriteTime.dwHighDateTime=0x1d6eb7f, nFileSizeHigh=0x0, nFileSizeLow=0xa860)) returned 1 [0054.463] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e530) returned 1 [0054.463] MoveFileW (lpExistingFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\SKY\\Dynamic.pdf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\sky\\dynamic.pdf"), lpNewFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\SKY\\Dynamic.pdf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\sky\\dynamic.pdf")) returned 1 [0054.464] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\SKY\\Faces.pdf", nBufferLength=0x105, lpBuffer=0x31dfb4, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\SKY\\Faces.pdf", lpFilePart=0x0) returned 0x59 [0054.464] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e4a8) returned 1 [0054.464] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\SKY\\Faces.pdf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\sky\\faces.pdf"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x274 [0054.464] GetFileType (hFile=0x274) returned 0x1 [0054.464] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e4a4) returned 1 [0054.464] GetFileType (hFile=0x274) returned 0x1 [0054.464] GetFileSize (in: hFile=0x274, lpFileSizeHigh=0x31e5b0 | out: lpFileSizeHigh=0x31e5b0*=0x0) returned 0x80f5 [0054.464] ReadFile (in: hFile=0x274, lpBuffer=0x27f0fc0, nNumberOfBytesToRead=0x80f5, lpNumberOfBytesRead=0x31e55c, lpOverlapped=0x0 | out: lpBuffer=0x27f0fc0*, lpNumberOfBytesRead=0x31e55c*=0x80f5, lpOverlapped=0x0) returned 1 [0054.466] CloseHandle (hObject=0x274) returned 1 [0054.483] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\SKY\\Faces.pdf", nBufferLength=0x105, lpBuffer=0x31dfa0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\SKY\\Faces.pdf", lpFilePart=0x0) returned 0x59 [0054.483] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e494) returned 1 [0054.483] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\SKY\\Faces.pdf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\sky\\faces.pdf"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x274 [0054.484] GetFileType (hFile=0x274) returned 0x1 [0054.484] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e490) returned 1 [0054.484] GetFileType (hFile=0x274) returned 0x1 [0054.484] WriteFile (in: hFile=0x274, lpBuffer=0x2670444*, nNumberOfBytesToWrite=0x8100, lpNumberOfBytesWritten=0x31e550, lpOverlapped=0x0 | out: lpBuffer=0x2670444*, lpNumberOfBytesWritten=0x31e550*=0x8100, lpOverlapped=0x0) returned 1 [0054.485] CloseHandle (hObject=0x274) returned 1 [0054.485] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\SKY\\Faces.pdf", nBufferLength=0x105, lpBuffer=0x31e0d4, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\SKY\\Faces.pdf", lpFilePart=0x0) returned 0x59 [0054.485] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\SKY\\Faces.pdf", nBufferLength=0x105, lpBuffer=0x31e0d4, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\SKY\\Faces.pdf", lpFilePart=0x0) returned 0x59 [0054.485] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e534) returned 1 [0054.485] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\SKY\\Faces.pdf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\sky\\faces.pdf"), fInfoLevelId=0x0, lpFileInformation=0x31e5b0 | out: lpFileInformation=0x31e5b0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9c36ae00, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x80672960, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x3ed4680, ftLastWriteTime.dwHighDateTime=0x1d6eb7f, nFileSizeHigh=0x0, nFileSizeLow=0x8100)) returned 1 [0054.486] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e530) returned 1 [0054.486] MoveFileW (lpExistingFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\SKY\\Faces.pdf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\sky\\faces.pdf"), lpNewFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\SKY\\Faces.pdf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\sky\\faces.pdf")) returned 1 [0054.486] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\SKY\\Pointers.pdf", nBufferLength=0x105, lpBuffer=0x31dfb4, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\SKY\\Pointers.pdf", lpFilePart=0x0) returned 0x5c [0054.486] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e4a8) returned 1 [0054.486] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\SKY\\Pointers.pdf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\sky\\pointers.pdf"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x274 [0054.486] GetFileType (hFile=0x274) returned 0x1 [0054.486] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e4a4) returned 1 [0054.486] GetFileType (hFile=0x274) returned 0x1 [0054.486] GetFileSize (in: hFile=0x274, lpFileSizeHigh=0x31e5b0 | out: lpFileSizeHigh=0x31e5b0*=0x0) returned 0xb731 [0054.486] ReadFile (in: hFile=0x274, lpBuffer=0x2678970, nNumberOfBytesToRead=0xb731, lpNumberOfBytesRead=0x31e55c, lpOverlapped=0x0 | out: lpBuffer=0x2678970*, lpNumberOfBytesRead=0x31e55c*=0xb731, lpOverlapped=0x0) returned 1 [0054.488] CloseHandle (hObject=0x274) returned 1 [0054.529] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\SKY\\Pointers.pdf", nBufferLength=0x105, lpBuffer=0x31dfa0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\SKY\\Pointers.pdf", lpFilePart=0x0) returned 0x5c [0054.529] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e494) returned 1 [0054.529] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\SKY\\Pointers.pdf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\sky\\pointers.pdf"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x274 [0054.530] GetFileType (hFile=0x274) returned 0x1 [0054.530] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e490) returned 1 [0054.530] GetFileType (hFile=0x274) returned 0x1 [0054.530] WriteFile (in: hFile=0x274, lpBuffer=0x26e7e88*, nNumberOfBytesToWrite=0xb740, lpNumberOfBytesWritten=0x31e550, lpOverlapped=0x0 | out: lpBuffer=0x26e7e88*, lpNumberOfBytesWritten=0x31e550*=0xb740, lpOverlapped=0x0) returned 1 [0054.532] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\SKY\\Pointers.pdf", nBufferLength=0x105, lpBuffer=0x31e0d4, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\SKY\\Pointers.pdf", lpFilePart=0x0) returned 0x5c [0054.532] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\SKY\\Pointers.pdf", nBufferLength=0x105, lpBuffer=0x31e0d4, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\SKY\\Pointers.pdf", lpFilePart=0x0) returned 0x5c [0054.532] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e534) returned 1 [0054.532] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\SKY\\Pointers.pdf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\sky\\pointers.pdf"), fInfoLevelId=0x0, lpFileInformation=0x31e5b0 | out: lpFileInformation=0x31e5b0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9c36ae00, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x80672960, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x3f46aa0, ftLastWriteTime.dwHighDateTime=0x1d6eb7f, nFileSizeHigh=0x0, nFileSizeLow=0xb740)) returned 1 [0054.532] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e530) returned 1 [0054.532] MoveFileW (lpExistingFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\SKY\\Pointers.pdf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\sky\\pointers.pdf"), lpNewFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\SKY\\Pointers.pdf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\sky\\pointers.pdf")) returned 1 [0054.533] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\SKY\\SignHere.pdf", nBufferLength=0x105, lpBuffer=0x31dfb4, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\SKY\\SignHere.pdf", lpFilePart=0x0) returned 0x5c [0054.533] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e4a8) returned 1 [0054.533] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\SKY\\SignHere.pdf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\sky\\signhere.pdf"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x274 [0054.533] GetFileType (hFile=0x274) returned 0x1 [0054.533] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e4a4) returned 1 [0054.533] GetFileType (hFile=0x274) returned 0x1 [0054.533] GetFileSize (in: hFile=0x274, lpFileSizeHigh=0x31e5b0 | out: lpFileSizeHigh=0x31e5b0*=0x0) returned 0xb9dd [0054.533] ReadFile (in: hFile=0x274, lpBuffer=0x26f3a14, nNumberOfBytesToRead=0xb9dd, lpNumberOfBytesRead=0x31e55c, lpOverlapped=0x0 | out: lpBuffer=0x26f3a14*, lpNumberOfBytesRead=0x31e55c*=0xb9dd, lpOverlapped=0x0) returned 1 [0054.549] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\SKY\\SignHere.pdf", nBufferLength=0x105, lpBuffer=0x31dfa0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\SKY\\SignHere.pdf", lpFilePart=0x0) returned 0x5c [0054.550] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e494) returned 1 [0054.550] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\SKY\\SignHere.pdf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\sky\\signhere.pdf"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x274 [0054.551] GetFileType (hFile=0x274) returned 0x1 [0054.551] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e490) returned 1 [0054.551] GetFileType (hFile=0x274) returned 0x1 [0054.551] WriteFile (in: hFile=0x274, lpBuffer=0x27635b0*, nNumberOfBytesToWrite=0xb9e0, lpNumberOfBytesWritten=0x31e550, lpOverlapped=0x0 | out: lpBuffer=0x27635b0*, lpNumberOfBytesWritten=0x31e550*=0xb9e0, lpOverlapped=0x0) returned 1 [0054.552] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\SKY\\SignHere.pdf", nBufferLength=0x105, lpBuffer=0x31e0d4, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\SKY\\SignHere.pdf", lpFilePart=0x0) returned 0x5c [0054.552] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\SKY\\SignHere.pdf", nBufferLength=0x105, lpBuffer=0x31e0d4, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\SKY\\SignHere.pdf", lpFilePart=0x0) returned 0x5c [0054.552] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e534) returned 1 [0054.552] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\SKY\\SignHere.pdf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\sky\\signhere.pdf"), fInfoLevelId=0x0, lpFileInformation=0x31e5b0 | out: lpFileInformation=0x31e5b0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9c36ae00, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x80672960, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x3f6cc00, ftLastWriteTime.dwHighDateTime=0x1d6eb7f, nFileSizeHigh=0x0, nFileSizeLow=0xb9e0)) returned 1 [0054.552] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e530) returned 1 [0054.552] MoveFileW (lpExistingFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\SKY\\SignHere.pdf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\sky\\signhere.pdf"), lpNewFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\SKY\\SignHere.pdf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\sky\\signhere.pdf")) returned 1 [0054.553] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\SKY\\Standard.pdf", nBufferLength=0x105, lpBuffer=0x31dfb4, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\SKY\\Standard.pdf", lpFilePart=0x0) returned 0x5c [0054.553] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e4a8) returned 1 [0054.553] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\SKY\\Standard.pdf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\sky\\standard.pdf"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x274 [0054.553] GetFileType (hFile=0x274) returned 0x1 [0054.553] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e4a4) returned 1 [0054.553] GetFileType (hFile=0x274) returned 0x1 [0054.553] GetFileSize (in: hFile=0x274, lpFileSizeHigh=0x31e5b0 | out: lpFileSizeHigh=0x31e5b0*=0x0) returned 0x1c4f5 [0054.553] ReadFile (in: hFile=0x274, lpBuffer=0x37bdec8, nNumberOfBytesToRead=0x1c4f5, lpNumberOfBytesRead=0x31e55c, lpOverlapped=0x0 | out: lpBuffer=0x37bdec8*, lpNumberOfBytesRead=0x31e55c*=0x1c4f5, lpOverlapped=0x0) returned 1 [0054.575] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\SKY\\Standard.pdf", nBufferLength=0x105, lpBuffer=0x31dfa0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\SKY\\Standard.pdf", lpFilePart=0x0) returned 0x5c [0054.575] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e494) returned 1 [0054.575] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\SKY\\Standard.pdf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\sky\\standard.pdf"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x274 [0054.577] GetFileType (hFile=0x274) returned 0x1 [0054.577] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e490) returned 1 [0054.577] GetFileType (hFile=0x274) returned 0x1 [0054.577] WriteFile (in: hFile=0x274, lpBuffer=0x384b800*, nNumberOfBytesToWrite=0x1c500, lpNumberOfBytesWritten=0x31e550, lpOverlapped=0x0 | out: lpBuffer=0x384b800*, lpNumberOfBytesWritten=0x31e550*=0x1c500, lpOverlapped=0x0) returned 1 [0054.579] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\SKY\\Standard.pdf", nBufferLength=0x105, lpBuffer=0x31e0d4, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\SKY\\Standard.pdf", lpFilePart=0x0) returned 0x5c [0054.579] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\SKY\\Standard.pdf", nBufferLength=0x105, lpBuffer=0x31e0d4, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\SKY\\Standard.pdf", lpFilePart=0x0) returned 0x5c [0054.579] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e534) returned 1 [0054.579] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\SKY\\Standard.pdf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\sky\\standard.pdf"), fInfoLevelId=0x0, lpFileInformation=0x31e5b0 | out: lpFileInformation=0x31e5b0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9c36ae00, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x80672960, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x3fb8ec0, ftLastWriteTime.dwHighDateTime=0x1d6eb7f, nFileSizeHigh=0x0, nFileSizeLow=0x1c500)) returned 1 [0054.579] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e530) returned 1 [0054.579] MoveFileW (lpExistingFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\SKY\\Standard.pdf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\sky\\standard.pdf"), lpNewFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\SKY\\Standard.pdf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\sky\\standard.pdf")) returned 1 [0054.580] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\SKY\\StandardBusiness.pdf", nBufferLength=0x105, lpBuffer=0x31dfb4, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\SKY\\StandardBusiness.pdf", lpFilePart=0x0) returned 0x64 [0054.580] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e4a8) returned 1 [0054.580] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\SKY\\StandardBusiness.pdf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\sky\\standardbusiness.pdf"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x274 [0054.580] GetFileType (hFile=0x274) returned 0x1 [0054.580] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e4a4) returned 1 [0054.580] GetFileType (hFile=0x274) returned 0x1 [0054.580] GetFileSize (in: hFile=0x274, lpFileSizeHigh=0x31e5b0 | out: lpFileSizeHigh=0x31e5b0*=0x0) returned 0x14758 [0054.580] ReadFile (in: hFile=0x274, lpBuffer=0x27bc63c, nNumberOfBytesToRead=0x14758, lpNumberOfBytesRead=0x31e55c, lpOverlapped=0x0 | out: lpBuffer=0x27bc63c*, lpNumberOfBytesRead=0x31e55c*=0x14758, lpOverlapped=0x0) returned 1 [0054.597] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\SKY\\StandardBusiness.pdf", nBufferLength=0x105, lpBuffer=0x31dfa0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\SKY\\StandardBusiness.pdf", lpFilePart=0x0) returned 0x64 [0054.597] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e494) returned 1 [0054.597] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\SKY\\StandardBusiness.pdf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\sky\\standardbusiness.pdf"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x274 [0054.599] GetFileType (hFile=0x274) returned 0x1 [0054.599] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e490) returned 1 [0054.599] GetFileType (hFile=0x274) returned 0x1 [0054.599] WriteFile (in: hFile=0x274, lpBuffer=0x2846a54*, nNumberOfBytesToWrite=0x14760, lpNumberOfBytesWritten=0x31e550, lpOverlapped=0x0 | out: lpBuffer=0x2846a54*, lpNumberOfBytesWritten=0x31e550*=0x14760, lpOverlapped=0x0) returned 1 [0054.601] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\SKY\\StandardBusiness.pdf", nBufferLength=0x105, lpBuffer=0x31e0d4, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\SKY\\StandardBusiness.pdf", lpFilePart=0x0) returned 0x64 [0054.601] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\SKY\\StandardBusiness.pdf", nBufferLength=0x105, lpBuffer=0x31e0d4, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\SKY\\StandardBusiness.pdf", lpFilePart=0x0) returned 0x64 [0054.601] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e534) returned 1 [0054.601] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\SKY\\StandardBusiness.pdf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\sky\\standardbusiness.pdf"), fInfoLevelId=0x0, lpFileInformation=0x31e5b0 | out: lpFileInformation=0x31e5b0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9c36ae00, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x80672960, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x4005180, ftLastWriteTime.dwHighDateTime=0x1d6eb7f, nFileSizeHigh=0x0, nFileSizeLow=0x14760)) returned 1 [0054.601] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e530) returned 1 [0054.601] MoveFileW (lpExistingFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\SKY\\StandardBusiness.pdf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\sky\\standardbusiness.pdf"), lpNewFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\SKY\\StandardBusiness.pdf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\sky\\standardbusiness.pdf")) returned 1 [0054.601] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e5dc) returned 1 [0054.601] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\SLV", nBufferLength=0x105, lpBuffer=0x31e0e4, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\SLV", lpFilePart=0x0) returned 0x4f [0054.601] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\SLV\\", nBufferLength=0x105, lpBuffer=0x31e0b8, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\SLV\\", lpFilePart=0x0) returned 0x50 [0054.601] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\SLV\\*", lpFindFileData=0x31e304 | out: lpFindFileData=0x31e304*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8064c800, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x8064c800, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x8064c800, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x382080 [0054.604] FindNextFileW (in: hFindFile=0x382080, lpFindFileData=0x31e314 | out: lpFindFileData=0x31e314*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8064c800, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x8064c800, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x8064c800, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0054.604] FindNextFileW (in: hFindFile=0x382080, lpFindFileData=0x31e314 | out: lpFindFileData=0x31e314*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9b058100, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x8064c800, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9b058100, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x1e146, dwReserved0=0x0, dwReserved1=0x0, cFileName="Dynamic.pdf", cAlternateFileName="")) returned 1 [0054.604] FindNextFileW (in: hFindFile=0x382080, lpFindFileData=0x31e314 | out: lpFindFileData=0x31e314*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9b058100, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x8064c800, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9b058100, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x80f5, dwReserved0=0x0, dwReserved1=0x0, cFileName="Faces.pdf", cAlternateFileName="")) returned 1 [0054.604] FindNextFileW (in: hFindFile=0x382080, lpFindFileData=0x31e314 | out: lpFindFileData=0x31e314*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9b058100, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x8064c800, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9b058100, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0xb731, dwReserved0=0x0, dwReserved1=0x0, cFileName="Pointers.pdf", cAlternateFileName="")) returned 1 [0054.604] FindNextFileW (in: hFindFile=0x382080, lpFindFileData=0x31e314 | out: lpFindFileData=0x31e314*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9b058100, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x8064c800, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9b058100, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x12fb3, dwReserved0=0x0, dwReserved1=0x0, cFileName="SignHere.pdf", cAlternateFileName="")) returned 1 [0054.606] FindNextFileW (in: hFindFile=0x382080, lpFindFileData=0x31e314 | out: lpFindFileData=0x31e314*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9b058100, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x8064c800, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9b058100, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x1c4f5, dwReserved0=0x0, dwReserved1=0x0, cFileName="Standard.pdf", cAlternateFileName="")) returned 1 [0054.607] FindNextFileW (in: hFindFile=0x382080, lpFindFileData=0x31e314 | out: lpFindFileData=0x31e314*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9b058100, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x8064c800, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9b058100, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x26254, dwReserved0=0x0, dwReserved1=0x0, cFileName="StandardBusiness.pdf", cAlternateFileName="STANDA~1.PDF")) returned 1 [0054.607] FindNextFileW (in: hFindFile=0x382080, lpFindFileData=0x31e314 | out: lpFindFileData=0x31e314*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0054.607] FindClose (in: hFindFile=0x382080 | out: hFindFile=0x382080) returned 1 [0054.607] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e59c) returned 1 [0054.607] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e5a8) returned 1 [0054.607] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e5dc) returned 1 [0054.608] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\SLV", nBufferLength=0x105, lpBuffer=0x31e0e4, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\SLV", lpFilePart=0x0) returned 0x4f [0054.608] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\SLV\\", nBufferLength=0x105, lpBuffer=0x31e0b8, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\SLV\\", lpFilePart=0x0) returned 0x50 [0054.608] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\SLV\\*", lpFindFileData=0x31e304 | out: lpFindFileData=0x31e304*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8064c800, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x8064c800, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x8064c800, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x382080 [0054.608] FindNextFileW (in: hFindFile=0x382080, lpFindFileData=0x31e314 | out: lpFindFileData=0x31e314*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8064c800, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x8064c800, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x8064c800, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0054.609] FindNextFileW (in: hFindFile=0x382080, lpFindFileData=0x31e314 | out: lpFindFileData=0x31e314*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9b058100, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x8064c800, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9b058100, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x1e146, dwReserved0=0x0, dwReserved1=0x0, cFileName="Dynamic.pdf", cAlternateFileName="")) returned 1 [0054.609] FindNextFileW (in: hFindFile=0x382080, lpFindFileData=0x31e314 | out: lpFindFileData=0x31e314*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9b058100, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x8064c800, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9b058100, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x80f5, dwReserved0=0x0, dwReserved1=0x0, cFileName="Faces.pdf", cAlternateFileName="")) returned 1 [0054.609] FindNextFileW (in: hFindFile=0x382080, lpFindFileData=0x31e314 | out: lpFindFileData=0x31e314*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9b058100, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x8064c800, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9b058100, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0xb731, dwReserved0=0x0, dwReserved1=0x0, cFileName="Pointers.pdf", cAlternateFileName="")) returned 1 [0054.609] FindNextFileW (in: hFindFile=0x382080, lpFindFileData=0x31e314 | out: lpFindFileData=0x31e314*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9b058100, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x8064c800, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9b058100, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x12fb3, dwReserved0=0x0, dwReserved1=0x0, cFileName="SignHere.pdf", cAlternateFileName="")) returned 1 [0054.609] FindNextFileW (in: hFindFile=0x382080, lpFindFileData=0x31e314 | out: lpFindFileData=0x31e314*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9b058100, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x8064c800, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9b058100, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x1c4f5, dwReserved0=0x0, dwReserved1=0x0, cFileName="Standard.pdf", cAlternateFileName="")) returned 1 [0054.609] FindNextFileW (in: hFindFile=0x382080, lpFindFileData=0x31e314 | out: lpFindFileData=0x31e314*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9b058100, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x8064c800, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9b058100, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x26254, dwReserved0=0x0, dwReserved1=0x0, cFileName="StandardBusiness.pdf", cAlternateFileName="STANDA~1.PDF")) returned 1 [0054.609] FindNextFileW (in: hFindFile=0x382080, lpFindFileData=0x31e314 | out: lpFindFileData=0x31e314*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9b058100, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x8064c800, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9b058100, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x26254, dwReserved0=0x0, dwReserved1=0x0, cFileName="StandardBusiness.pdf", cAlternateFileName="STANDA~1.PDF")) returned 0 [0054.610] FindClose (in: hFindFile=0x382080 | out: hFindFile=0x382080) returned 1 [0054.610] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e59c) returned 1 [0054.610] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e5a8) returned 1 [0054.610] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\SLV\\Dynamic.pdf", nBufferLength=0x105, lpBuffer=0x31dfb4, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\SLV\\Dynamic.pdf", lpFilePart=0x0) returned 0x5b [0054.610] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e4a8) returned 1 [0054.610] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\SLV\\Dynamic.pdf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\slv\\dynamic.pdf"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x274 [0054.611] GetFileType (hFile=0x274) returned 0x1 [0054.611] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e4a4) returned 1 [0054.611] GetFileType (hFile=0x274) returned 0x1 [0054.611] GetFileSize (in: hFile=0x274, lpFileSizeHigh=0x31e5b0 | out: lpFileSizeHigh=0x31e5b0*=0x0) returned 0x1e146 [0054.612] ReadFile (in: hFile=0x274, lpBuffer=0x3890be0, nNumberOfBytesToRead=0x1e146, lpNumberOfBytesRead=0x31e55c, lpOverlapped=0x0 | out: lpBuffer=0x3890be0*, lpNumberOfBytesRead=0x31e55c*=0x1e146, lpOverlapped=0x0) returned 1 [0054.615] CloseHandle (hObject=0x274) returned 1 [0054.662] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\SLV\\Dynamic.pdf", nBufferLength=0x105, lpBuffer=0x31dfa0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\SLV\\Dynamic.pdf", lpFilePart=0x0) returned 0x5b [0054.662] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e494) returned 1 [0054.662] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\SLV\\Dynamic.pdf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\slv\\dynamic.pdf"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x274 [0054.663] GetFileType (hFile=0x274) returned 0x1 [0054.663] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e490) returned 1 [0054.663] GetFileType (hFile=0x274) returned 0x1 [0054.663] WriteFile (in: hFile=0x274, lpBuffer=0x38aed48*, nNumberOfBytesToWrite=0x1e150, lpNumberOfBytesWritten=0x31e550, lpOverlapped=0x0 | out: lpBuffer=0x38aed48*, lpNumberOfBytesWritten=0x31e550*=0x1e150, lpOverlapped=0x0) returned 1 [0054.665] CloseHandle (hObject=0x274) returned 1 [0054.666] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\SLV\\Dynamic.pdf", nBufferLength=0x105, lpBuffer=0x31e0d4, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\SLV\\Dynamic.pdf", lpFilePart=0x0) returned 0x5b [0054.666] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\SLV\\Dynamic.pdf", nBufferLength=0x105, lpBuffer=0x31e0d4, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\SLV\\Dynamic.pdf", lpFilePart=0x0) returned 0x5b [0054.666] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e534) returned 1 [0054.666] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\SLV\\Dynamic.pdf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\slv\\dynamic.pdf"), fInfoLevelId=0x0, lpFileInformation=0x31e5b0 | out: lpFileInformation=0x31e5b0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9b058100, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x8064c800, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x409d700, ftLastWriteTime.dwHighDateTime=0x1d6eb7f, nFileSizeHigh=0x0, nFileSizeLow=0x1e150)) returned 1 [0054.666] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e530) returned 1 [0054.666] MoveFileW (lpExistingFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\SLV\\Dynamic.pdf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\slv\\dynamic.pdf"), lpNewFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\SLV\\Dynamic.pdf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\slv\\dynamic.pdf")) returned 1 [0054.666] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\SLV\\Faces.pdf", nBufferLength=0x105, lpBuffer=0x31dfb4, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\SLV\\Faces.pdf", lpFilePart=0x0) returned 0x59 [0054.666] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e4a8) returned 1 [0054.666] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\SLV\\Faces.pdf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\slv\\faces.pdf"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x274 [0054.667] GetFileType (hFile=0x274) returned 0x1 [0054.667] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e4a4) returned 1 [0054.667] GetFileType (hFile=0x274) returned 0x1 [0054.667] GetFileSize (in: hFile=0x274, lpFileSizeHigh=0x31e5b0 | out: lpFileSizeHigh=0x31e5b0*=0x0) returned 0x80f5 [0054.667] ReadFile (in: hFile=0x274, lpBuffer=0x2630688, nNumberOfBytesToRead=0x80f5, lpNumberOfBytesRead=0x31e55c, lpOverlapped=0x0 | out: lpBuffer=0x2630688*, lpNumberOfBytesRead=0x31e55c*=0x80f5, lpOverlapped=0x0) returned 1 [0054.668] CloseHandle (hObject=0x274) returned 1 [0054.707] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\SLV\\Faces.pdf", nBufferLength=0x105, lpBuffer=0x31dfa0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\SLV\\Faces.pdf", lpFilePart=0x0) returned 0x59 [0054.707] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e494) returned 1 [0054.707] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\SLV\\Faces.pdf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\slv\\faces.pdf"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x274 [0054.708] GetFileType (hFile=0x274) returned 0x1 [0054.708] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e490) returned 1 [0054.708] GetFileType (hFile=0x274) returned 0x1 [0054.708] WriteFile (in: hFile=0x274, lpBuffer=0x26a5acc*, nNumberOfBytesToWrite=0x8100, lpNumberOfBytesWritten=0x31e550, lpOverlapped=0x0 | out: lpBuffer=0x26a5acc*, lpNumberOfBytesWritten=0x31e550*=0x8100, lpOverlapped=0x0) returned 1 [0054.710] CloseHandle (hObject=0x274) returned 1 [0054.710] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\SLV\\Faces.pdf", nBufferLength=0x105, lpBuffer=0x31e0d4, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\SLV\\Faces.pdf", lpFilePart=0x0) returned 0x59 [0054.710] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\SLV\\Faces.pdf", nBufferLength=0x105, lpBuffer=0x31e0d4, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\SLV\\Faces.pdf", lpFilePart=0x0) returned 0x59 [0054.710] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e534) returned 1 [0054.710] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\SLV\\Faces.pdf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\slv\\faces.pdf"), fInfoLevelId=0x0, lpFileInformation=0x31e5b0 | out: lpFileInformation=0x31e5b0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9b058100, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x8064c800, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x410fb20, ftLastWriteTime.dwHighDateTime=0x1d6eb7f, nFileSizeHigh=0x0, nFileSizeLow=0x8100)) returned 1 [0054.710] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e530) returned 1 [0054.710] MoveFileW (lpExistingFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\SLV\\Faces.pdf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\slv\\faces.pdf"), lpNewFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\SLV\\Faces.pdf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\slv\\faces.pdf")) returned 1 [0054.711] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\SLV\\Pointers.pdf", nBufferLength=0x105, lpBuffer=0x31dfb4, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\SLV\\Pointers.pdf", lpFilePart=0x0) returned 0x5c [0054.711] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e4a8) returned 1 [0054.711] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\SLV\\Pointers.pdf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\slv\\pointers.pdf"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x274 [0054.711] GetFileType (hFile=0x274) returned 0x1 [0054.711] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e4a4) returned 1 [0054.711] GetFileType (hFile=0x274) returned 0x1 [0054.711] GetFileSize (in: hFile=0x274, lpFileSizeHigh=0x31e5b0 | out: lpFileSizeHigh=0x31e5b0*=0x0) returned 0xb731 [0054.711] ReadFile (in: hFile=0x274, lpBuffer=0x26adff8, nNumberOfBytesToRead=0xb731, lpNumberOfBytesRead=0x31e55c, lpOverlapped=0x0 | out: lpBuffer=0x26adff8*, lpNumberOfBytesRead=0x31e55c*=0xb731, lpOverlapped=0x0) returned 1 [0054.713] CloseHandle (hObject=0x274) returned 1 [0054.727] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\SLV\\Pointers.pdf", nBufferLength=0x105, lpBuffer=0x31dfa0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\SLV\\Pointers.pdf", lpFilePart=0x0) returned 0x5c [0054.727] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e494) returned 1 [0054.727] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\SLV\\Pointers.pdf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\slv\\pointers.pdf"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x274 [0054.728] GetFileType (hFile=0x274) returned 0x1 [0054.728] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e490) returned 1 [0054.728] GetFileType (hFile=0x274) returned 0x1 [0054.728] WriteFile (in: hFile=0x274, lpBuffer=0x271d3b4*, nNumberOfBytesToWrite=0xb740, lpNumberOfBytesWritten=0x31e550, lpOverlapped=0x0 | out: lpBuffer=0x271d3b4*, lpNumberOfBytesWritten=0x31e550*=0xb740, lpOverlapped=0x0) returned 1 [0054.729] CloseHandle (hObject=0x274) returned 1 [0054.729] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\SLV\\Pointers.pdf", nBufferLength=0x105, lpBuffer=0x31e0d4, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\SLV\\Pointers.pdf", lpFilePart=0x0) returned 0x5c [0054.729] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\SLV\\Pointers.pdf", nBufferLength=0x105, lpBuffer=0x31e0d4, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\SLV\\Pointers.pdf", lpFilePart=0x0) returned 0x5c [0054.730] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e534) returned 1 [0054.730] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\SLV\\Pointers.pdf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\slv\\pointers.pdf"), fInfoLevelId=0x0, lpFileInformation=0x31e5b0 | out: lpFileInformation=0x31e5b0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9b058100, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x8064c800, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x4135c80, ftLastWriteTime.dwHighDateTime=0x1d6eb7f, nFileSizeHigh=0x0, nFileSizeLow=0xb740)) returned 1 [0054.730] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e530) returned 1 [0054.730] MoveFileW (lpExistingFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\SLV\\Pointers.pdf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\slv\\pointers.pdf"), lpNewFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\SLV\\Pointers.pdf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\slv\\pointers.pdf")) returned 1 [0054.730] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\SLV\\SignHere.pdf", nBufferLength=0x105, lpBuffer=0x31dfb4, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\SLV\\SignHere.pdf", lpFilePart=0x0) returned 0x5c [0054.730] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e4a8) returned 1 [0054.730] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\SLV\\SignHere.pdf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\slv\\signhere.pdf"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x274 [0054.730] GetFileType (hFile=0x274) returned 0x1 [0054.730] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e4a4) returned 1 [0054.730] GetFileType (hFile=0x274) returned 0x1 [0054.730] GetFileSize (in: hFile=0x274, lpFileSizeHigh=0x31e5b0 | out: lpFileSizeHigh=0x31e5b0*=0x0) returned 0x12fb3 [0054.730] ReadFile (in: hFile=0x274, lpBuffer=0x2728f40, nNumberOfBytesToRead=0x12fb3, lpNumberOfBytesRead=0x31e55c, lpOverlapped=0x0 | out: lpBuffer=0x2728f40*, lpNumberOfBytesRead=0x31e55c*=0x12fb3, lpOverlapped=0x0) returned 1 [0054.732] CloseHandle (hObject=0x274) returned 1 [0054.747] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\SLV\\SignHere.pdf", nBufferLength=0x105, lpBuffer=0x31dfa0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\SLV\\SignHere.pdf", lpFilePart=0x0) returned 0x5c [0054.748] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e494) returned 1 [0054.748] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\SLV\\SignHere.pdf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\slv\\signhere.pdf"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x274 [0054.749] GetFileType (hFile=0x274) returned 0x1 [0054.749] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e490) returned 1 [0054.749] GetFileType (hFile=0x274) returned 0x1 [0054.749] WriteFile (in: hFile=0x274, lpBuffer=0x27aec7c*, nNumberOfBytesToWrite=0x12fc0, lpNumberOfBytesWritten=0x31e550, lpOverlapped=0x0 | out: lpBuffer=0x27aec7c*, lpNumberOfBytesWritten=0x31e550*=0x12fc0, lpOverlapped=0x0) returned 1 [0054.750] CloseHandle (hObject=0x274) returned 1 [0054.751] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\SLV\\SignHere.pdf", nBufferLength=0x105, lpBuffer=0x31e0d4, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\SLV\\SignHere.pdf", lpFilePart=0x0) returned 0x5c [0054.751] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\SLV\\SignHere.pdf", nBufferLength=0x105, lpBuffer=0x31e0d4, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\SLV\\SignHere.pdf", lpFilePart=0x0) returned 0x5c [0054.751] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e534) returned 1 [0054.751] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\SLV\\SignHere.pdf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\slv\\signhere.pdf"), fInfoLevelId=0x0, lpFileInformation=0x31e5b0 | out: lpFileInformation=0x31e5b0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9b058100, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x8064c800, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x415bde0, ftLastWriteTime.dwHighDateTime=0x1d6eb7f, nFileSizeHigh=0x0, nFileSizeLow=0x12fc0)) returned 1 [0054.751] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e530) returned 1 [0054.751] MoveFileW (lpExistingFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\SLV\\SignHere.pdf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\slv\\signhere.pdf"), lpNewFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\SLV\\SignHere.pdf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\slv\\signhere.pdf")) returned 1 [0054.751] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\SLV\\Standard.pdf", nBufferLength=0x105, lpBuffer=0x31dfb4, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\SLV\\Standard.pdf", lpFilePart=0x0) returned 0x5c [0054.751] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e4a8) returned 1 [0054.751] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\SLV\\Standard.pdf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\slv\\standard.pdf"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x274 [0054.751] GetFileType (hFile=0x274) returned 0x1 [0054.751] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e4a4) returned 1 [0054.751] GetFileType (hFile=0x274) returned 0x1 [0054.752] GetFileSize (in: hFile=0x274, lpFileSizeHigh=0x31e5b0 | out: lpFileSizeHigh=0x31e5b0*=0x0) returned 0x1c4f5 [0054.752] ReadFile (in: hFile=0x274, lpBuffer=0x363f430, nNumberOfBytesToRead=0x1c4f5, lpNumberOfBytesRead=0x31e55c, lpOverlapped=0x0 | out: lpBuffer=0x363f430*, lpNumberOfBytesRead=0x31e55c*=0x1c4f5, lpOverlapped=0x0) returned 1 [0054.763] CloseHandle (hObject=0x274) returned 1 [0054.779] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\SLV\\Standard.pdf", nBufferLength=0x105, lpBuffer=0x31dfa0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\SLV\\Standard.pdf", lpFilePart=0x0) returned 0x5c [0054.779] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e494) returned 1 [0054.780] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\SLV\\Standard.pdf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\slv\\standard.pdf"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x274 [0054.781] GetFileType (hFile=0x274) returned 0x1 [0054.781] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e490) returned 1 [0054.781] GetFileType (hFile=0x274) returned 0x1 [0054.781] WriteFile (in: hFile=0x274, lpBuffer=0x36ccd68*, nNumberOfBytesToWrite=0x1c500, lpNumberOfBytesWritten=0x31e550, lpOverlapped=0x0 | out: lpBuffer=0x36ccd68*, lpNumberOfBytesWritten=0x31e550*=0x1c500, lpOverlapped=0x0) returned 1 [0054.783] CloseHandle (hObject=0x274) returned 1 [0054.783] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\SLV\\Standard.pdf", nBufferLength=0x105, lpBuffer=0x31e0d4, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\SLV\\Standard.pdf", lpFilePart=0x0) returned 0x5c [0054.783] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\SLV\\Standard.pdf", nBufferLength=0x105, lpBuffer=0x31e0d4, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\SLV\\Standard.pdf", lpFilePart=0x0) returned 0x5c [0054.783] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e534) returned 1 [0054.783] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\SLV\\Standard.pdf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\slv\\standard.pdf"), fInfoLevelId=0x0, lpFileInformation=0x31e5b0 | out: lpFileInformation=0x31e5b0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9b058100, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x8064c800, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x41a80a0, ftLastWriteTime.dwHighDateTime=0x1d6eb7f, nFileSizeHigh=0x0, nFileSizeLow=0x1c500)) returned 1 [0054.784] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e530) returned 1 [0054.784] MoveFileW (lpExistingFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\SLV\\Standard.pdf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\slv\\standard.pdf"), lpNewFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\SLV\\Standard.pdf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\slv\\standard.pdf")) returned 1 [0054.784] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\SLV\\StandardBusiness.pdf", nBufferLength=0x105, lpBuffer=0x31dfb4, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\SLV\\StandardBusiness.pdf", lpFilePart=0x0) returned 0x64 [0054.784] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e4a8) returned 1 [0054.784] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\SLV\\StandardBusiness.pdf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\slv\\standardbusiness.pdf"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x274 [0054.784] GetFileType (hFile=0x274) returned 0x1 [0054.784] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e4a4) returned 1 [0054.784] GetFileType (hFile=0x274) returned 0x1 [0054.784] GetFileSize (in: hFile=0x274, lpFileSizeHigh=0x31e5b0 | out: lpFileSizeHigh=0x31e5b0*=0x0) returned 0x26254 [0054.784] ReadFile (in: hFile=0x274, lpBuffer=0x36e9288, nNumberOfBytesToRead=0x26254, lpNumberOfBytesRead=0x31e55c, lpOverlapped=0x0 | out: lpBuffer=0x36e9288*, lpNumberOfBytesRead=0x31e55c*=0x26254, lpOverlapped=0x0) returned 1 [0054.787] CloseHandle (hObject=0x274) returned 1 [0054.830] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\SLV\\StandardBusiness.pdf", nBufferLength=0x105, lpBuffer=0x31dfa0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\SLV\\StandardBusiness.pdf", lpFilePart=0x0) returned 0x64 [0054.830] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e494) returned 1 [0054.830] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\SLV\\StandardBusiness.pdf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\slv\\standardbusiness.pdf"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x274 [0054.832] GetFileType (hFile=0x274) returned 0x1 [0054.832] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e490) returned 1 [0054.832] GetFileType (hFile=0x274) returned 0x1 [0054.832] WriteFile (in: hFile=0x274, lpBuffer=0x37a7e98*, nNumberOfBytesToWrite=0x26260, lpNumberOfBytesWritten=0x31e550, lpOverlapped=0x0 | out: lpBuffer=0x37a7e98*, lpNumberOfBytesWritten=0x31e550*=0x26260, lpOverlapped=0x0) returned 1 [0054.835] CloseHandle (hObject=0x274) returned 1 [0054.835] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\SLV\\StandardBusiness.pdf", nBufferLength=0x105, lpBuffer=0x31e0d4, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\SLV\\StandardBusiness.pdf", lpFilePart=0x0) returned 0x64 [0054.835] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\SLV\\StandardBusiness.pdf", nBufferLength=0x105, lpBuffer=0x31e0d4, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\SLV\\StandardBusiness.pdf", lpFilePart=0x0) returned 0x64 [0054.835] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e534) returned 1 [0054.835] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\SLV\\StandardBusiness.pdf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\slv\\standardbusiness.pdf"), fInfoLevelId=0x0, lpFileInformation=0x31e5b0 | out: lpFileInformation=0x31e5b0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9b058100, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x8064c800, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x4240620, ftLastWriteTime.dwHighDateTime=0x1d6eb7f, nFileSizeHigh=0x0, nFileSizeLow=0x26260)) returned 1 [0054.835] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e530) returned 1 [0054.836] MoveFileW (lpExistingFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\SLV\\StandardBusiness.pdf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\slv\\standardbusiness.pdf"), lpNewFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\SLV\\StandardBusiness.pdf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\slv\\standardbusiness.pdf")) returned 1 [0054.836] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e5dc) returned 1 [0054.836] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\SUO", nBufferLength=0x105, lpBuffer=0x31e0e4, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\SUO", lpFilePart=0x0) returned 0x4f [0054.836] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\SUO\\", nBufferLength=0x105, lpBuffer=0x31e0b8, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\SUO\\", lpFilePart=0x0) returned 0x50 [0054.836] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\SUO\\*", lpFindFileData=0x31e304 | out: lpFindFileData=0x31e304*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7f804400, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x7f804400, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x7f804400, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x381f40 [0054.836] FindNextFileW (in: hFindFile=0x381f40, lpFindFileData=0x31e314 | out: lpFindFileData=0x31e314*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7f804400, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x7f804400, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x7f804400, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0054.836] FindNextFileW (in: hFindFile=0x381f40, lpFindFileData=0x31e314 | out: lpFindFileData=0x31e314*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9640cd00, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7f804400, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9640cd00, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0xe7e1, dwReserved0=0x0, dwReserved1=0x0, cFileName="Dynamic.pdf", cAlternateFileName="")) returned 1 [0054.837] FindNextFileW (in: hFindFile=0x381f40, lpFindFileData=0x31e314 | out: lpFindFileData=0x31e314*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9640cd00, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7f82a560, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9640cd00, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x9cbb, dwReserved0=0x0, dwReserved1=0x0, cFileName="SignHere.pdf", cAlternateFileName="")) returned 1 [0054.837] FindNextFileW (in: hFindFile=0x381f40, lpFindFileData=0x31e314 | out: lpFindFileData=0x31e314*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9640cd00, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7f804400, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9640cd00, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x16f99, dwReserved0=0x0, dwReserved1=0x0, cFileName="StandardBusiness.pdf", cAlternateFileName="STANDA~1.PDF")) returned 1 [0054.837] FindNextFileW (in: hFindFile=0x381f40, lpFindFileData=0x31e314 | out: lpFindFileData=0x31e314*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0054.837] FindClose (in: hFindFile=0x381f40 | out: hFindFile=0x381f40) returned 1 [0054.837] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e59c) returned 1 [0054.837] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e5a8) returned 1 [0054.837] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e5dc) returned 1 [0054.837] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\SUO", nBufferLength=0x105, lpBuffer=0x31e0e4, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\SUO", lpFilePart=0x0) returned 0x4f [0054.837] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\SUO\\", nBufferLength=0x105, lpBuffer=0x31e0b8, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\SUO\\", lpFilePart=0x0) returned 0x50 [0054.837] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\SUO\\*", lpFindFileData=0x31e304 | out: lpFindFileData=0x31e304*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7f804400, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x7f804400, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x7f804400, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x381f40 [0054.837] FindNextFileW (in: hFindFile=0x381f40, lpFindFileData=0x31e314 | out: lpFindFileData=0x31e314*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7f804400, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x7f804400, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x7f804400, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0054.838] FindNextFileW (in: hFindFile=0x381f40, lpFindFileData=0x31e314 | out: lpFindFileData=0x31e314*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9640cd00, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7f804400, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9640cd00, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0xe7e1, dwReserved0=0x0, dwReserved1=0x0, cFileName="Dynamic.pdf", cAlternateFileName="")) returned 1 [0054.838] FindNextFileW (in: hFindFile=0x381f40, lpFindFileData=0x31e314 | out: lpFindFileData=0x31e314*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9640cd00, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7f82a560, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9640cd00, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x9cbb, dwReserved0=0x0, dwReserved1=0x0, cFileName="SignHere.pdf", cAlternateFileName="")) returned 1 [0054.838] FindNextFileW (in: hFindFile=0x381f40, lpFindFileData=0x31e314 | out: lpFindFileData=0x31e314*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9640cd00, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7f804400, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9640cd00, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x16f99, dwReserved0=0x0, dwReserved1=0x0, cFileName="StandardBusiness.pdf", cAlternateFileName="STANDA~1.PDF")) returned 1 [0054.838] FindNextFileW (in: hFindFile=0x381f40, lpFindFileData=0x31e314 | out: lpFindFileData=0x31e314*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9640cd00, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7f804400, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9640cd00, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x16f99, dwReserved0=0x0, dwReserved1=0x0, cFileName="StandardBusiness.pdf", cAlternateFileName="STANDA~1.PDF")) returned 0 [0054.838] FindClose (in: hFindFile=0x381f40 | out: hFindFile=0x381f40) returned 1 [0054.838] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e59c) returned 1 [0054.838] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e5a8) returned 1 [0054.838] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\SUO\\Dynamic.pdf", nBufferLength=0x105, lpBuffer=0x31dfb4, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\SUO\\Dynamic.pdf", lpFilePart=0x0) returned 0x5b [0054.838] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e4a8) returned 1 [0054.838] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\SUO\\Dynamic.pdf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\suo\\dynamic.pdf"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x274 [0054.874] GetFileType (hFile=0x274) returned 0x1 [0054.874] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e4a4) returned 1 [0054.874] GetFileType (hFile=0x274) returned 0x1 [0054.874] GetFileSize (in: hFile=0x274, lpFileSizeHigh=0x31e5b0 | out: lpFileSizeHigh=0x31e5b0*=0x0) returned 0xe7e1 [0054.875] ReadFile (in: hFile=0x274, lpBuffer=0x265ed84, nNumberOfBytesToRead=0xe7e1, lpNumberOfBytesRead=0x31e55c, lpOverlapped=0x0 | out: lpBuffer=0x265ed84*, lpNumberOfBytesRead=0x31e55c*=0xe7e1, lpOverlapped=0x0) returned 1 [0054.877] CloseHandle (hObject=0x274) returned 1 [0054.892] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\SUO\\Dynamic.pdf", nBufferLength=0x105, lpBuffer=0x31dfa0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\SUO\\Dynamic.pdf", lpFilePart=0x0) returned 0x5b [0054.892] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e494) returned 1 [0054.892] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\SUO\\Dynamic.pdf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\suo\\dynamic.pdf"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x274 [0054.893] GetFileType (hFile=0x274) returned 0x1 [0054.893] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e490) returned 1 [0054.893] GetFileType (hFile=0x274) returned 0x1 [0054.893] WriteFile (in: hFile=0x274, lpBuffer=0x26d74ac*, nNumberOfBytesToWrite=0xe7f0, lpNumberOfBytesWritten=0x31e550, lpOverlapped=0x0 | out: lpBuffer=0x26d74ac*, lpNumberOfBytesWritten=0x31e550*=0xe7f0, lpOverlapped=0x0) returned 1 [0054.895] CloseHandle (hObject=0x274) returned 1 [0054.895] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\SUO\\Dynamic.pdf", nBufferLength=0x105, lpBuffer=0x31e0d4, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\SUO\\Dynamic.pdf", lpFilePart=0x0) returned 0x5b [0054.895] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\SUO\\Dynamic.pdf", nBufferLength=0x105, lpBuffer=0x31e0d4, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\SUO\\Dynamic.pdf", lpFilePart=0x0) returned 0x5b [0054.895] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e534) returned 1 [0054.895] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\SUO\\Dynamic.pdf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\suo\\dynamic.pdf"), fInfoLevelId=0x0, lpFileInformation=0x31e5b0 | out: lpFileInformation=0x31e5b0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9640cd00, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7f804400, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x42b2a40, ftLastWriteTime.dwHighDateTime=0x1d6eb7f, nFileSizeHigh=0x0, nFileSizeLow=0xe7f0)) returned 1 [0054.895] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e530) returned 1 [0054.895] MoveFileW (lpExistingFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\SUO\\Dynamic.pdf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\suo\\dynamic.pdf"), lpNewFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\SUO\\Dynamic.pdf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\suo\\dynamic.pdf")) returned 1 [0054.895] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\SUO\\SignHere.pdf", nBufferLength=0x105, lpBuffer=0x31dfb4, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\SUO\\SignHere.pdf", lpFilePart=0x0) returned 0x5c [0054.895] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e4a8) returned 1 [0054.895] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\SUO\\SignHere.pdf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\suo\\signhere.pdf"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x274 [0054.896] GetFileType (hFile=0x274) returned 0x1 [0054.896] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e4a4) returned 1 [0054.896] GetFileType (hFile=0x274) returned 0x1 [0054.896] GetFileSize (in: hFile=0x274, lpFileSizeHigh=0x31e5b0 | out: lpFileSizeHigh=0x31e5b0*=0x0) returned 0x9cbb [0054.896] ReadFile (in: hFile=0x274, lpBuffer=0x26e60d8, nNumberOfBytesToRead=0x9cbb, lpNumberOfBytesRead=0x31e55c, lpOverlapped=0x0 | out: lpBuffer=0x26e60d8*, lpNumberOfBytesRead=0x31e55c*=0x9cbb, lpOverlapped=0x0) returned 1 [0054.898] CloseHandle (hObject=0x274) returned 1 [0054.912] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\SUO\\SignHere.pdf", nBufferLength=0x105, lpBuffer=0x31dfa0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\SUO\\SignHere.pdf", lpFilePart=0x0) returned 0x5c [0054.912] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e494) returned 1 [0054.913] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\SUO\\SignHere.pdf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\suo\\signhere.pdf"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x274 [0054.914] GetFileType (hFile=0x274) returned 0x1 [0054.914] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e490) returned 1 [0054.914] GetFileType (hFile=0x274) returned 0x1 [0054.914] WriteFile (in: hFile=0x274, lpBuffer=0x2763e80*, nNumberOfBytesToWrite=0x9cc0, lpNumberOfBytesWritten=0x31e550, lpOverlapped=0x0 | out: lpBuffer=0x2763e80*, lpNumberOfBytesWritten=0x31e550*=0x9cc0, lpOverlapped=0x0) returned 1 [0054.915] CloseHandle (hObject=0x274) returned 1 [0054.915] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\SUO\\SignHere.pdf", nBufferLength=0x105, lpBuffer=0x31e0d4, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\SUO\\SignHere.pdf", lpFilePart=0x0) returned 0x5c [0054.915] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\SUO\\SignHere.pdf", nBufferLength=0x105, lpBuffer=0x31e0d4, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\SUO\\SignHere.pdf", lpFilePart=0x0) returned 0x5c [0054.915] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e534) returned 1 [0054.915] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\SUO\\SignHere.pdf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\suo\\signhere.pdf"), fInfoLevelId=0x0, lpFileInformation=0x31e5b0 | out: lpFileInformation=0x31e5b0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9640cd00, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7f82a560, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x42fed00, ftLastWriteTime.dwHighDateTime=0x1d6eb7f, nFileSizeHigh=0x0, nFileSizeLow=0x9cc0)) returned 1 [0054.915] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e530) returned 1 [0054.915] MoveFileW (lpExistingFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\SUO\\SignHere.pdf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\suo\\signhere.pdf"), lpNewFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\SUO\\SignHere.pdf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\suo\\signhere.pdf")) returned 1 [0054.916] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\SUO\\StandardBusiness.pdf", nBufferLength=0x105, lpBuffer=0x31dfb4, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\SUO\\StandardBusiness.pdf", lpFilePart=0x0) returned 0x64 [0054.916] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e4a8) returned 1 [0054.916] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\SUO\\StandardBusiness.pdf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\suo\\standardbusiness.pdf"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x274 [0054.916] GetFileType (hFile=0x274) returned 0x1 [0054.916] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e4a4) returned 1 [0054.916] GetFileType (hFile=0x274) returned 0x1 [0054.916] GetFileSize (in: hFile=0x274, lpFileSizeHigh=0x31e5b0 | out: lpFileSizeHigh=0x31e5b0*=0x0) returned 0x16f99 [0054.916] ReadFile (in: hFile=0x274, lpBuffer=0x37eb0f8, nNumberOfBytesToRead=0x16f99, lpNumberOfBytesRead=0x31e55c, lpOverlapped=0x0 | out: lpBuffer=0x37eb0f8*, lpNumberOfBytesRead=0x31e55c*=0x16f99, lpOverlapped=0x0) returned 1 [0054.918] CloseHandle (hObject=0x274) returned 1 [0054.934] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\SUO\\StandardBusiness.pdf", nBufferLength=0x105, lpBuffer=0x31dfa0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\SUO\\StandardBusiness.pdf", lpFilePart=0x0) returned 0x64 [0054.934] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e494) returned 1 [0054.934] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\SUO\\StandardBusiness.pdf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\suo\\standardbusiness.pdf"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x274 [0054.936] GetFileType (hFile=0x274) returned 0x1 [0054.936] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e490) returned 1 [0054.936] GetFileType (hFile=0x274) returned 0x1 [0054.936] WriteFile (in: hFile=0x274, lpBuffer=0x385df50*, nNumberOfBytesToWrite=0x16fa0, lpNumberOfBytesWritten=0x31e550, lpOverlapped=0x0 | out: lpBuffer=0x385df50*, lpNumberOfBytesWritten=0x31e550*=0x16fa0, lpOverlapped=0x0) returned 1 [0054.938] CloseHandle (hObject=0x274) returned 1 [0054.938] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\SUO\\StandardBusiness.pdf", nBufferLength=0x105, lpBuffer=0x31e0d4, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\SUO\\StandardBusiness.pdf", lpFilePart=0x0) returned 0x64 [0054.938] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\SUO\\StandardBusiness.pdf", nBufferLength=0x105, lpBuffer=0x31e0d4, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\SUO\\StandardBusiness.pdf", lpFilePart=0x0) returned 0x64 [0054.938] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e534) returned 1 [0054.938] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\SUO\\StandardBusiness.pdf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\suo\\standardbusiness.pdf"), fInfoLevelId=0x0, lpFileInformation=0x31e5b0 | out: lpFileInformation=0x31e5b0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9640cd00, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7f804400, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x4324e60, ftLastWriteTime.dwHighDateTime=0x1d6eb7f, nFileSizeHigh=0x0, nFileSizeLow=0x16fa0)) returned 1 [0054.938] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e530) returned 1 [0054.938] MoveFileW (lpExistingFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\SUO\\StandardBusiness.pdf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\suo\\standardbusiness.pdf"), lpNewFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\SUO\\StandardBusiness.pdf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\suo\\standardbusiness.pdf")) returned 1 [0054.938] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e5dc) returned 1 [0054.939] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\SVE", nBufferLength=0x105, lpBuffer=0x31e0e4, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\SVE", lpFilePart=0x0) returned 0x4f [0054.939] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\SVE\\", nBufferLength=0x105, lpBuffer=0x31e0b8, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\SVE\\", lpFilePart=0x0) returned 0x50 [0054.939] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\SVE\\*", lpFindFileData=0x31e304 | out: lpFindFileData=0x31e304*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7ff024a0, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x7ff024a0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x7ff024a0, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x382000 [0054.940] FindNextFileW (in: hFindFile=0x382000, lpFindFileData=0x31e314 | out: lpFindFileData=0x31e314*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7ff024a0, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x7ff024a0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x7ff024a0, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0054.940] FindNextFileW (in: hFindFile=0x382000, lpFindFileData=0x31e314 | out: lpFindFileData=0x31e314*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9640cd00, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7ff024a0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9640cd00, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0xe5af, dwReserved0=0x0, dwReserved1=0x0, cFileName="Dynamic.pdf", cAlternateFileName="")) returned 1 [0054.940] FindNextFileW (in: hFindFile=0x382000, lpFindFileData=0x31e314 | out: lpFindFileData=0x31e314*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9640cd00, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7ff024a0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9640cd00, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0xa6a0, dwReserved0=0x0, dwReserved1=0x0, cFileName="SignHere.pdf", cAlternateFileName="")) returned 1 [0054.940] FindNextFileW (in: hFindFile=0x382000, lpFindFileData=0x31e314 | out: lpFindFileData=0x31e314*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9640cd00, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7ff024a0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9640cd00, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x18efb, dwReserved0=0x0, dwReserved1=0x0, cFileName="StandardBusiness.pdf", cAlternateFileName="STANDA~1.PDF")) returned 1 [0054.941] FindNextFileW (in: hFindFile=0x382000, lpFindFileData=0x31e314 | out: lpFindFileData=0x31e314*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0054.941] FindClose (in: hFindFile=0x382000 | out: hFindFile=0x382000) returned 1 [0054.941] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e59c) returned 1 [0054.941] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e5a8) returned 1 [0054.941] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e5dc) returned 1 [0054.941] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\SVE", nBufferLength=0x105, lpBuffer=0x31e0e4, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\SVE", lpFilePart=0x0) returned 0x4f [0054.941] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\SVE\\", nBufferLength=0x105, lpBuffer=0x31e0b8, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\SVE\\", lpFilePart=0x0) returned 0x50 [0054.941] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\SVE\\*", lpFindFileData=0x31e304 | out: lpFindFileData=0x31e304*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7ff024a0, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x7ff024a0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x7ff024a0, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x382000 [0054.941] FindNextFileW (in: hFindFile=0x382000, lpFindFileData=0x31e314 | out: lpFindFileData=0x31e314*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7ff024a0, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x7ff024a0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x7ff024a0, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0054.941] FindNextFileW (in: hFindFile=0x382000, lpFindFileData=0x31e314 | out: lpFindFileData=0x31e314*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9640cd00, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7ff024a0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9640cd00, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0xe5af, dwReserved0=0x0, dwReserved1=0x0, cFileName="Dynamic.pdf", cAlternateFileName="")) returned 1 [0054.941] FindNextFileW (in: hFindFile=0x382000, lpFindFileData=0x31e314 | out: lpFindFileData=0x31e314*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9640cd00, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7ff024a0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9640cd00, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0xa6a0, dwReserved0=0x0, dwReserved1=0x0, cFileName="SignHere.pdf", cAlternateFileName="")) returned 1 [0054.941] FindNextFileW (in: hFindFile=0x382000, lpFindFileData=0x31e314 | out: lpFindFileData=0x31e314*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9640cd00, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7ff024a0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9640cd00, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x18efb, dwReserved0=0x0, dwReserved1=0x0, cFileName="StandardBusiness.pdf", cAlternateFileName="STANDA~1.PDF")) returned 1 [0054.942] FindNextFileW (in: hFindFile=0x382000, lpFindFileData=0x31e314 | out: lpFindFileData=0x31e314*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9640cd00, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7ff024a0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9640cd00, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x18efb, dwReserved0=0x0, dwReserved1=0x0, cFileName="StandardBusiness.pdf", cAlternateFileName="STANDA~1.PDF")) returned 0 [0054.942] FindClose (in: hFindFile=0x382000 | out: hFindFile=0x382000) returned 1 [0054.942] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e59c) returned 1 [0054.942] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e5a8) returned 1 [0054.942] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\SVE\\Dynamic.pdf", nBufferLength=0x105, lpBuffer=0x31dfb4, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\SVE\\Dynamic.pdf", lpFilePart=0x0) returned 0x5b [0054.942] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e4a8) returned 1 [0054.942] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\SVE\\Dynamic.pdf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\sve\\dynamic.pdf"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x274 [0054.942] GetFileType (hFile=0x274) returned 0x1 [0054.942] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e4a4) returned 1 [0054.942] GetFileType (hFile=0x274) returned 0x1 [0054.942] GetFileSize (in: hFile=0x274, lpFileSizeHigh=0x31e5b0 | out: lpFileSizeHigh=0x31e5b0*=0x0) returned 0xe5af [0054.942] ReadFile (in: hFile=0x274, lpBuffer=0x27bd644, nNumberOfBytesToRead=0xe5af, lpNumberOfBytesRead=0x31e55c, lpOverlapped=0x0 | out: lpBuffer=0x27bd644*, lpNumberOfBytesRead=0x31e55c*=0xe5af, lpOverlapped=0x0) returned 1 [0054.946] CloseHandle (hObject=0x274) returned 1 [0054.964] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\SVE\\Dynamic.pdf", nBufferLength=0x105, lpBuffer=0x31dfa0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\SVE\\Dynamic.pdf", lpFilePart=0x0) returned 0x5b [0054.964] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e494) returned 1 [0054.964] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\SVE\\Dynamic.pdf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\sve\\dynamic.pdf"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x274 [0054.965] GetFileType (hFile=0x274) returned 0x1 [0054.965] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e490) returned 1 [0054.965] GetFileType (hFile=0x274) returned 0x1 [0054.965] WriteFile (in: hFile=0x274, lpBuffer=0x263f728*, nNumberOfBytesToWrite=0xe5b0, lpNumberOfBytesWritten=0x31e550, lpOverlapped=0x0 | out: lpBuffer=0x263f728*, lpNumberOfBytesWritten=0x31e550*=0xe5b0, lpOverlapped=0x0) returned 1 [0054.967] CloseHandle (hObject=0x274) returned 1 [0054.967] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\SVE\\Dynamic.pdf", nBufferLength=0x105, lpBuffer=0x31e0d4, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\SVE\\Dynamic.pdf", lpFilePart=0x0) returned 0x5b [0054.967] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\SVE\\Dynamic.pdf", nBufferLength=0x105, lpBuffer=0x31e0d4, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\SVE\\Dynamic.pdf", lpFilePart=0x0) returned 0x5b [0054.967] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e534) returned 1 [0054.967] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\SVE\\Dynamic.pdf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\sve\\dynamic.pdf"), fInfoLevelId=0x0, lpFileInformation=0x31e5b0 | out: lpFileInformation=0x31e5b0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9640cd00, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7ff024a0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x4371120, ftLastWriteTime.dwHighDateTime=0x1d6eb7f, nFileSizeHigh=0x0, nFileSizeLow=0xe5b0)) returned 1 [0054.967] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e530) returned 1 [0054.967] MoveFileW (lpExistingFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\SVE\\Dynamic.pdf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\sve\\dynamic.pdf"), lpNewFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\SVE\\Dynamic.pdf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\sve\\dynamic.pdf")) returned 1 [0054.967] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\SVE\\SignHere.pdf", nBufferLength=0x105, lpBuffer=0x31dfb4, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\SVE\\SignHere.pdf", lpFilePart=0x0) returned 0x5c [0054.967] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e4a8) returned 1 [0054.967] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\SVE\\SignHere.pdf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\sve\\signhere.pdf"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x274 [0054.968] GetFileType (hFile=0x274) returned 0x1 [0054.968] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e4a4) returned 1 [0054.968] GetFileType (hFile=0x274) returned 0x1 [0054.968] GetFileSize (in: hFile=0x274, lpFileSizeHigh=0x31e5b0 | out: lpFileSizeHigh=0x31e5b0*=0x0) returned 0xa6a0 [0054.968] ReadFile (in: hFile=0x274, lpBuffer=0x264e114, nNumberOfBytesToRead=0xa6a0, lpNumberOfBytesRead=0x31e55c, lpOverlapped=0x0 | out: lpBuffer=0x264e114*, lpNumberOfBytesRead=0x31e55c*=0xa6a0, lpOverlapped=0x0) returned 1 [0054.970] CloseHandle (hObject=0x274) returned 1 [0055.009] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\SVE\\SignHere.pdf", nBufferLength=0x105, lpBuffer=0x31dfa0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\SVE\\SignHere.pdf", lpFilePart=0x0) returned 0x5c [0055.009] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e494) returned 1 [0055.009] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\SVE\\SignHere.pdf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\sve\\signhere.pdf"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x274 [0055.010] GetFileType (hFile=0x274) returned 0x1 [0055.010] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e490) returned 1 [0055.010] GetFileType (hFile=0x274) returned 0x1 [0055.010] WriteFile (in: hFile=0x274, lpBuffer=0x26ba478*, nNumberOfBytesToWrite=0xa6b0, lpNumberOfBytesWritten=0x31e550, lpOverlapped=0x0 | out: lpBuffer=0x26ba478*, lpNumberOfBytesWritten=0x31e550*=0xa6b0, lpOverlapped=0x0) returned 1 [0055.012] CloseHandle (hObject=0x274) returned 1 [0055.012] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\SVE\\SignHere.pdf", nBufferLength=0x105, lpBuffer=0x31e0d4, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\SVE\\SignHere.pdf", lpFilePart=0x0) returned 0x5c [0055.012] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\SVE\\SignHere.pdf", nBufferLength=0x105, lpBuffer=0x31e0d4, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\SVE\\SignHere.pdf", lpFilePart=0x0) returned 0x5c [0055.012] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e534) returned 1 [0055.012] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\SVE\\SignHere.pdf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\sve\\signhere.pdf"), fInfoLevelId=0x0, lpFileInformation=0x31e5b0 | out: lpFileInformation=0x31e5b0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9640cd00, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7ff024a0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x43e3540, ftLastWriteTime.dwHighDateTime=0x1d6eb7f, nFileSizeHigh=0x0, nFileSizeLow=0xa6b0)) returned 1 [0055.012] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e530) returned 1 [0055.012] MoveFileW (lpExistingFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\SVE\\SignHere.pdf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\sve\\signhere.pdf"), lpNewFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\SVE\\SignHere.pdf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\sve\\signhere.pdf")) returned 1 [0055.013] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\SVE\\StandardBusiness.pdf", nBufferLength=0x105, lpBuffer=0x31dfb4, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\SVE\\StandardBusiness.pdf", lpFilePart=0x0) returned 0x64 [0055.013] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e4a8) returned 1 [0055.013] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\SVE\\StandardBusiness.pdf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\sve\\standardbusiness.pdf"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x274 [0055.013] GetFileType (hFile=0x274) returned 0x1 [0055.013] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e4a4) returned 1 [0055.013] GetFileType (hFile=0x274) returned 0x1 [0055.013] GetFileSize (in: hFile=0x274, lpFileSizeHigh=0x31e5b0 | out: lpFileSizeHigh=0x31e5b0*=0x0) returned 0x18efb [0055.013] ReadFile (in: hFile=0x274, lpBuffer=0x3943e08, nNumberOfBytesToRead=0x18efb, lpNumberOfBytesRead=0x31e55c, lpOverlapped=0x0 | out: lpBuffer=0x3943e08*, lpNumberOfBytesRead=0x31e55c*=0x18efb, lpOverlapped=0x0) returned 1 [0055.036] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\SVE\\StandardBusiness.pdf", nBufferLength=0x105, lpBuffer=0x31dfa0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\SVE\\StandardBusiness.pdf", lpFilePart=0x0) returned 0x64 [0055.036] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e494) returned 1 [0055.036] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\SVE\\StandardBusiness.pdf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\sve\\standardbusiness.pdf"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x274 [0055.037] GetFileType (hFile=0x274) returned 0x1 [0055.037] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e490) returned 1 [0055.037] GetFileType (hFile=0x274) returned 0x1 [0055.037] WriteFile (in: hFile=0x274, lpBuffer=0x364b2b0*, nNumberOfBytesToWrite=0x18f00, lpNumberOfBytesWritten=0x31e550, lpOverlapped=0x0 | out: lpBuffer=0x364b2b0*, lpNumberOfBytesWritten=0x31e550*=0x18f00, lpOverlapped=0x0) returned 1 [0055.039] CloseHandle (hObject=0x274) returned 1 [0055.040] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\SVE\\StandardBusiness.pdf", nBufferLength=0x105, lpBuffer=0x31e0d4, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\SVE\\StandardBusiness.pdf", lpFilePart=0x0) returned 0x64 [0055.040] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\SVE\\StandardBusiness.pdf", nBufferLength=0x105, lpBuffer=0x31e0d4, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\SVE\\StandardBusiness.pdf", lpFilePart=0x0) returned 0x64 [0055.040] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e534) returned 1 [0055.040] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\SVE\\StandardBusiness.pdf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\sve\\standardbusiness.pdf"), fInfoLevelId=0x0, lpFileInformation=0x31e5b0 | out: lpFileInformation=0x31e5b0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9640cd00, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7ff024a0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x442f800, ftLastWriteTime.dwHighDateTime=0x1d6eb7f, nFileSizeHigh=0x0, nFileSizeLow=0x18f00)) returned 1 [0055.040] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e530) returned 1 [0055.040] MoveFileW (lpExistingFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\SVE\\StandardBusiness.pdf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\sve\\standardbusiness.pdf"), lpNewFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\SVE\\StandardBusiness.pdf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\sve\\standardbusiness.pdf")) returned 1 [0055.040] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e5dc) returned 1 [0055.040] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\TUR", nBufferLength=0x105, lpBuffer=0x31e0e4, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\TUR", lpFilePart=0x0) returned 0x4f [0055.040] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\TUR\\", nBufferLength=0x105, lpBuffer=0x31e0b8, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\TUR\\", lpFilePart=0x0) returned 0x50 [0055.040] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\TUR\\*", lpFindFileData=0x31e304 | out: lpFindFileData=0x31e304*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x806266a0, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x8064c800, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x8064c800, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x382080 [0055.043] FindNextFileW (in: hFindFile=0x382080, lpFindFileData=0x31e314 | out: lpFindFileData=0x31e314*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x806266a0, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x8064c800, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x8064c800, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0055.043] FindNextFileW (in: hFindFile=0x382080, lpFindFileData=0x31e314 | out: lpFindFileData=0x31e314*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9b058100, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x8064c800, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9b058100, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0xe27c, dwReserved0=0x0, dwReserved1=0x0, cFileName="Dynamic.pdf", cAlternateFileName="")) returned 1 [0055.043] FindNextFileW (in: hFindFile=0x382080, lpFindFileData=0x31e314 | out: lpFindFileData=0x31e314*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9b058100, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x8064c800, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9b058100, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x80f5, dwReserved0=0x0, dwReserved1=0x0, cFileName="Faces.pdf", cAlternateFileName="")) returned 1 [0055.043] FindNextFileW (in: hFindFile=0x382080, lpFindFileData=0x31e314 | out: lpFindFileData=0x31e314*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9b058100, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x806266a0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9b058100, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0xb731, dwReserved0=0x0, dwReserved1=0x0, cFileName="Pointers.pdf", cAlternateFileName="")) returned 1 [0055.043] FindNextFileW (in: hFindFile=0x382080, lpFindFileData=0x31e314 | out: lpFindFileData=0x31e314*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9b058100, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x806266a0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9b058100, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x992b, dwReserved0=0x0, dwReserved1=0x0, cFileName="SignHere.pdf", cAlternateFileName="")) returned 1 [0055.043] FindNextFileW (in: hFindFile=0x382080, lpFindFileData=0x31e314 | out: lpFindFileData=0x31e314*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9b058100, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x8064c800, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9b058100, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x1c4f5, dwReserved0=0x0, dwReserved1=0x0, cFileName="Standard.pdf", cAlternateFileName="")) returned 1 [0055.044] FindNextFileW (in: hFindFile=0x382080, lpFindFileData=0x31e314 | out: lpFindFileData=0x31e314*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9b058100, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x806266a0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9b058100, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x1804a, dwReserved0=0x0, dwReserved1=0x0, cFileName="StandardBusiness.pdf", cAlternateFileName="STANDA~1.PDF")) returned 1 [0055.044] FindNextFileW (in: hFindFile=0x382080, lpFindFileData=0x31e314 | out: lpFindFileData=0x31e314*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0055.044] FindClose (in: hFindFile=0x382080 | out: hFindFile=0x382080) returned 1 [0055.044] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e59c) returned 1 [0055.044] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e5a8) returned 1 [0055.044] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e5dc) returned 1 [0055.045] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\TUR", nBufferLength=0x105, lpBuffer=0x31e0e4, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\TUR", lpFilePart=0x0) returned 0x4f [0055.045] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\TUR\\", nBufferLength=0x105, lpBuffer=0x31e0b8, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\TUR\\", lpFilePart=0x0) returned 0x50 [0055.045] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\TUR\\*", lpFindFileData=0x31e304 | out: lpFindFileData=0x31e304*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x806266a0, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x8064c800, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x8064c800, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x382080 [0055.045] FindNextFileW (in: hFindFile=0x382080, lpFindFileData=0x31e314 | out: lpFindFileData=0x31e314*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x806266a0, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x8064c800, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x8064c800, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0055.046] FindNextFileW (in: hFindFile=0x382080, lpFindFileData=0x31e314 | out: lpFindFileData=0x31e314*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9b058100, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x8064c800, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9b058100, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0xe27c, dwReserved0=0x0, dwReserved1=0x0, cFileName="Dynamic.pdf", cAlternateFileName="")) returned 1 [0055.046] FindNextFileW (in: hFindFile=0x382080, lpFindFileData=0x31e314 | out: lpFindFileData=0x31e314*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9b058100, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x8064c800, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9b058100, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x80f5, dwReserved0=0x0, dwReserved1=0x0, cFileName="Faces.pdf", cAlternateFileName="")) returned 1 [0055.046] FindNextFileW (in: hFindFile=0x382080, lpFindFileData=0x31e314 | out: lpFindFileData=0x31e314*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9b058100, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x806266a0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9b058100, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0xb731, dwReserved0=0x0, dwReserved1=0x0, cFileName="Pointers.pdf", cAlternateFileName="")) returned 1 [0055.046] FindNextFileW (in: hFindFile=0x382080, lpFindFileData=0x31e314 | out: lpFindFileData=0x31e314*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9b058100, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x806266a0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9b058100, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x992b, dwReserved0=0x0, dwReserved1=0x0, cFileName="SignHere.pdf", cAlternateFileName="")) returned 1 [0055.046] FindNextFileW (in: hFindFile=0x382080, lpFindFileData=0x31e314 | out: lpFindFileData=0x31e314*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9b058100, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x8064c800, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9b058100, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x1c4f5, dwReserved0=0x0, dwReserved1=0x0, cFileName="Standard.pdf", cAlternateFileName="")) returned 1 [0055.046] FindNextFileW (in: hFindFile=0x382080, lpFindFileData=0x31e314 | out: lpFindFileData=0x31e314*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9b058100, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x806266a0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9b058100, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x1804a, dwReserved0=0x0, dwReserved1=0x0, cFileName="StandardBusiness.pdf", cAlternateFileName="STANDA~1.PDF")) returned 1 [0055.046] FindNextFileW (in: hFindFile=0x382080, lpFindFileData=0x31e314 | out: lpFindFileData=0x31e314*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9b058100, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x806266a0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9b058100, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x1804a, dwReserved0=0x0, dwReserved1=0x0, cFileName="StandardBusiness.pdf", cAlternateFileName="STANDA~1.PDF")) returned 0 [0055.047] FindClose (in: hFindFile=0x382080 | out: hFindFile=0x382080) returned 1 [0055.047] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e59c) returned 1 [0055.047] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e5a8) returned 1 [0055.047] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\TUR\\Dynamic.pdf", nBufferLength=0x105, lpBuffer=0x31dfb4, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\TUR\\Dynamic.pdf", lpFilePart=0x0) returned 0x5b [0055.047] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e4a8) returned 1 [0055.047] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\TUR\\Dynamic.pdf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\tur\\dynamic.pdf"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x274 [0055.049] GetFileType (hFile=0x274) returned 0x1 [0055.049] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e4a4) returned 1 [0055.049] GetFileType (hFile=0x274) returned 0x1 [0055.049] GetFileSize (in: hFile=0x274, lpFileSizeHigh=0x31e5b0 | out: lpFileSizeHigh=0x31e5b0*=0x0) returned 0xe27c [0055.049] ReadFile (in: hFile=0x274, lpBuffer=0x26334d0, nNumberOfBytesToRead=0xe27c, lpNumberOfBytesRead=0x31e55c, lpOverlapped=0x0 | out: lpBuffer=0x26334d0*, lpNumberOfBytesRead=0x31e55c*=0xe27c, lpOverlapped=0x0) returned 1 [0055.051] CloseHandle (hObject=0x274) returned 1 [0055.093] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\TUR\\Dynamic.pdf", nBufferLength=0x105, lpBuffer=0x31dfa0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\TUR\\Dynamic.pdf", lpFilePart=0x0) returned 0x5b [0055.093] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e494) returned 1 [0055.093] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\TUR\\Dynamic.pdf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\tur\\dynamic.pdf"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x274 [0055.094] GetFileType (hFile=0x274) returned 0x1 [0055.094] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e490) returned 1 [0055.094] GetFileType (hFile=0x274) returned 0x1 [0055.094] WriteFile (in: hFile=0x274, lpBuffer=0x26aaba4*, nNumberOfBytesToWrite=0xe280, lpNumberOfBytesWritten=0x31e550, lpOverlapped=0x0 | out: lpBuffer=0x26aaba4*, lpNumberOfBytesWritten=0x31e550*=0xe280, lpOverlapped=0x0) returned 1 [0055.096] CloseHandle (hObject=0x274) returned 1 [0055.096] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\TUR\\Dynamic.pdf", nBufferLength=0x105, lpBuffer=0x31e0d4, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\TUR\\Dynamic.pdf", lpFilePart=0x0) returned 0x5b [0055.096] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\TUR\\Dynamic.pdf", nBufferLength=0x105, lpBuffer=0x31e0d4, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\TUR\\Dynamic.pdf", lpFilePart=0x0) returned 0x5b [0055.096] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e534) returned 1 [0055.096] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\TUR\\Dynamic.pdf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\tur\\dynamic.pdf"), fInfoLevelId=0x0, lpFileInformation=0x31e5b0 | out: lpFileInformation=0x31e5b0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9b058100, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x8064c800, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x44a1c20, ftLastWriteTime.dwHighDateTime=0x1d6eb7f, nFileSizeHigh=0x0, nFileSizeLow=0xe280)) returned 1 [0055.096] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e530) returned 1 [0055.096] MoveFileW (lpExistingFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\TUR\\Dynamic.pdf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\tur\\dynamic.pdf"), lpNewFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\TUR\\Dynamic.pdf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\tur\\dynamic.pdf")) returned 1 [0055.096] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\TUR\\Faces.pdf", nBufferLength=0x105, lpBuffer=0x31dfb4, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\TUR\\Faces.pdf", lpFilePart=0x0) returned 0x59 [0055.096] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e4a8) returned 1 [0055.096] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\TUR\\Faces.pdf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\tur\\faces.pdf"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x274 [0055.097] GetFileType (hFile=0x274) returned 0x1 [0055.097] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e4a4) returned 1 [0055.097] GetFileType (hFile=0x274) returned 0x1 [0055.097] GetFileSize (in: hFile=0x274, lpFileSizeHigh=0x31e5b0 | out: lpFileSizeHigh=0x31e5b0*=0x0) returned 0x80f5 [0055.097] ReadFile (in: hFile=0x274, lpBuffer=0x26b9250, nNumberOfBytesToRead=0x80f5, lpNumberOfBytesRead=0x31e55c, lpOverlapped=0x0 | out: lpBuffer=0x26b9250*, lpNumberOfBytesRead=0x31e55c*=0x80f5, lpOverlapped=0x0) returned 1 [0055.104] CloseHandle (hObject=0x274) returned 1 [0055.118] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\TUR\\Faces.pdf", nBufferLength=0x105, lpBuffer=0x31dfa0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\TUR\\Faces.pdf", lpFilePart=0x0) returned 0x59 [0055.118] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e494) returned 1 [0055.118] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\TUR\\Faces.pdf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\tur\\faces.pdf"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x274 [0055.119] GetFileType (hFile=0x274) returned 0x1 [0055.119] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e490) returned 1 [0055.119] GetFileType (hFile=0x274) returned 0x1 [0055.119] WriteFile (in: hFile=0x274, lpBuffer=0x272e538*, nNumberOfBytesToWrite=0x8100, lpNumberOfBytesWritten=0x31e550, lpOverlapped=0x0 | out: lpBuffer=0x272e538*, lpNumberOfBytesWritten=0x31e550*=0x8100, lpOverlapped=0x0) returned 1 [0055.120] CloseHandle (hObject=0x274) returned 1 [0055.121] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\TUR\\Faces.pdf", nBufferLength=0x105, lpBuffer=0x31e0d4, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\TUR\\Faces.pdf", lpFilePart=0x0) returned 0x59 [0055.121] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\TUR\\Faces.pdf", nBufferLength=0x105, lpBuffer=0x31e0d4, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\TUR\\Faces.pdf", lpFilePart=0x0) returned 0x59 [0055.121] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e534) returned 1 [0055.121] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\TUR\\Faces.pdf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\tur\\faces.pdf"), fInfoLevelId=0x0, lpFileInformation=0x31e5b0 | out: lpFileInformation=0x31e5b0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9b058100, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x8064c800, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x44edee0, ftLastWriteTime.dwHighDateTime=0x1d6eb7f, nFileSizeHigh=0x0, nFileSizeLow=0x8100)) returned 1 [0055.121] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e530) returned 1 [0055.121] MoveFileW (lpExistingFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\TUR\\Faces.pdf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\tur\\faces.pdf"), lpNewFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\TUR\\Faces.pdf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\tur\\faces.pdf")) returned 1 [0055.121] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\TUR\\Pointers.pdf", nBufferLength=0x105, lpBuffer=0x31dfb4, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\TUR\\Pointers.pdf", lpFilePart=0x0) returned 0x5c [0055.121] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e4a8) returned 1 [0055.121] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\TUR\\Pointers.pdf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\tur\\pointers.pdf"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x274 [0055.121] GetFileType (hFile=0x274) returned 0x1 [0055.121] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e4a4) returned 1 [0055.121] GetFileType (hFile=0x274) returned 0x1 [0055.122] GetFileSize (in: hFile=0x274, lpFileSizeHigh=0x31e5b0 | out: lpFileSizeHigh=0x31e5b0*=0x0) returned 0xb731 [0055.122] ReadFile (in: hFile=0x274, lpBuffer=0x2736a64, nNumberOfBytesToRead=0xb731, lpNumberOfBytesRead=0x31e55c, lpOverlapped=0x0 | out: lpBuffer=0x2736a64*, lpNumberOfBytesRead=0x31e55c*=0xb731, lpOverlapped=0x0) returned 1 [0055.123] CloseHandle (hObject=0x274) returned 1 [0055.138] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\TUR\\Pointers.pdf", nBufferLength=0x105, lpBuffer=0x31dfa0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\TUR\\Pointers.pdf", lpFilePart=0x0) returned 0x5c [0055.138] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e494) returned 1 [0055.138] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\TUR\\Pointers.pdf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\tur\\pointers.pdf"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x274 [0055.139] GetFileType (hFile=0x274) returned 0x1 [0055.139] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e490) returned 1 [0055.139] GetFileType (hFile=0x274) returned 0x1 [0055.139] WriteFile (in: hFile=0x274, lpBuffer=0x27a5e20*, nNumberOfBytesToWrite=0xb740, lpNumberOfBytesWritten=0x31e550, lpOverlapped=0x0 | out: lpBuffer=0x27a5e20*, lpNumberOfBytesWritten=0x31e550*=0xb740, lpOverlapped=0x0) returned 1 [0055.140] CloseHandle (hObject=0x274) returned 1 [0055.140] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\TUR\\Pointers.pdf", nBufferLength=0x105, lpBuffer=0x31e0d4, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\TUR\\Pointers.pdf", lpFilePart=0x0) returned 0x5c [0055.140] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\TUR\\Pointers.pdf", nBufferLength=0x105, lpBuffer=0x31e0d4, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\TUR\\Pointers.pdf", lpFilePart=0x0) returned 0x5c [0055.140] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e534) returned 1 [0055.140] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\TUR\\Pointers.pdf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\tur\\pointers.pdf"), fInfoLevelId=0x0, lpFileInformation=0x31e5b0 | out: lpFileInformation=0x31e5b0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9b058100, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x806266a0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x4514040, ftLastWriteTime.dwHighDateTime=0x1d6eb7f, nFileSizeHigh=0x0, nFileSizeLow=0xb740)) returned 1 [0055.140] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e530) returned 1 [0055.140] MoveFileW (lpExistingFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\TUR\\Pointers.pdf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\tur\\pointers.pdf"), lpNewFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\TUR\\Pointers.pdf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\tur\\pointers.pdf")) returned 1 [0055.141] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\TUR\\SignHere.pdf", nBufferLength=0x105, lpBuffer=0x31dfb4, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\TUR\\SignHere.pdf", lpFilePart=0x0) returned 0x5c [0055.141] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e4a8) returned 1 [0055.141] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\TUR\\SignHere.pdf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\tur\\signhere.pdf"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x274 [0055.141] GetFileType (hFile=0x274) returned 0x1 [0055.141] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e4a4) returned 1 [0055.141] GetFileType (hFile=0x274) returned 0x1 [0055.141] GetFileSize (in: hFile=0x274, lpFileSizeHigh=0x31e5b0 | out: lpFileSizeHigh=0x31e5b0*=0x0) returned 0x992b [0055.141] ReadFile (in: hFile=0x274, lpBuffer=0x27b19ac, nNumberOfBytesToRead=0x992b, lpNumberOfBytesRead=0x31e55c, lpOverlapped=0x0 | out: lpBuffer=0x27b19ac*, lpNumberOfBytesRead=0x31e55c*=0x992b, lpOverlapped=0x0) returned 1 [0055.143] CloseHandle (hObject=0x274) returned 1 [0055.157] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\TUR\\SignHere.pdf", nBufferLength=0x105, lpBuffer=0x31dfa0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\TUR\\SignHere.pdf", lpFilePart=0x0) returned 0x5c [0055.157] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e494) returned 1 [0055.157] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\TUR\\SignHere.pdf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\tur\\signhere.pdf"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x274 [0055.158] GetFileType (hFile=0x274) returned 0x1 [0055.158] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e490) returned 1 [0055.158] GetFileType (hFile=0x274) returned 0x1 [0055.159] WriteFile (in: hFile=0x274, lpBuffer=0x282e584*, nNumberOfBytesToWrite=0x9930, lpNumberOfBytesWritten=0x31e550, lpOverlapped=0x0 | out: lpBuffer=0x282e584*, lpNumberOfBytesWritten=0x31e550*=0x9930, lpOverlapped=0x0) returned 1 [0055.160] CloseHandle (hObject=0x274) returned 1 [0055.160] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\TUR\\SignHere.pdf", nBufferLength=0x105, lpBuffer=0x31e0d4, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\TUR\\SignHere.pdf", lpFilePart=0x0) returned 0x5c [0055.160] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\TUR\\SignHere.pdf", nBufferLength=0x105, lpBuffer=0x31e0d4, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\TUR\\SignHere.pdf", lpFilePart=0x0) returned 0x5c [0055.160] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e534) returned 1 [0055.160] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\TUR\\SignHere.pdf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\tur\\signhere.pdf"), fInfoLevelId=0x0, lpFileInformation=0x31e5b0 | out: lpFileInformation=0x31e5b0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9b058100, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x806266a0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x453a1a0, ftLastWriteTime.dwHighDateTime=0x1d6eb7f, nFileSizeHigh=0x0, nFileSizeLow=0x9930)) returned 1 [0055.160] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e530) returned 1 [0055.160] MoveFileW (lpExistingFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\TUR\\SignHere.pdf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\tur\\signhere.pdf"), lpNewFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\TUR\\SignHere.pdf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\tur\\signhere.pdf")) returned 1 [0055.160] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\TUR\\Standard.pdf", nBufferLength=0x105, lpBuffer=0x31dfb4, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\TUR\\Standard.pdf", lpFilePart=0x0) returned 0x5c [0055.161] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e4a8) returned 1 [0055.161] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\TUR\\Standard.pdf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\tur\\standard.pdf"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x274 [0055.161] GetFileType (hFile=0x274) returned 0x1 [0055.161] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e4a4) returned 1 [0055.161] GetFileType (hFile=0x274) returned 0x1 [0055.161] GetFileSize (in: hFile=0x274, lpFileSizeHigh=0x31e5b0 | out: lpFileSizeHigh=0x31e5b0*=0x0) returned 0x1c4f5 [0055.161] ReadFile (in: hFile=0x274, lpBuffer=0x36806d0, nNumberOfBytesToRead=0x1c4f5, lpNumberOfBytesRead=0x31e55c, lpOverlapped=0x0 | out: lpBuffer=0x36806d0*, lpNumberOfBytesRead=0x31e55c*=0x1c4f5, lpOverlapped=0x0) returned 1 [0055.163] CloseHandle (hObject=0x274) returned 1 [0055.206] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\TUR\\Standard.pdf", nBufferLength=0x105, lpBuffer=0x31dfa0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\TUR\\Standard.pdf", lpFilePart=0x0) returned 0x5c [0055.206] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e494) returned 1 [0055.206] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\TUR\\Standard.pdf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\tur\\standard.pdf"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x274 [0055.208] GetFileType (hFile=0x274) returned 0x1 [0055.208] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e490) returned 1 [0055.208] GetFileType (hFile=0x274) returned 0x1 [0055.208] WriteFile (in: hFile=0x274, lpBuffer=0x370e008*, nNumberOfBytesToWrite=0x1c500, lpNumberOfBytesWritten=0x31e550, lpOverlapped=0x0 | out: lpBuffer=0x370e008*, lpNumberOfBytesWritten=0x31e550*=0x1c500, lpOverlapped=0x0) returned 1 [0055.210] CloseHandle (hObject=0x274) returned 1 [0055.210] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\TUR\\Standard.pdf", nBufferLength=0x105, lpBuffer=0x31e0d4, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\TUR\\Standard.pdf", lpFilePart=0x0) returned 0x5c [0055.211] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\TUR\\Standard.pdf", nBufferLength=0x105, lpBuffer=0x31e0d4, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\TUR\\Standard.pdf", lpFilePart=0x0) returned 0x5c [0055.211] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e534) returned 1 [0055.211] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\TUR\\Standard.pdf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\tur\\standard.pdf"), fInfoLevelId=0x0, lpFileInformation=0x31e5b0 | out: lpFileInformation=0x31e5b0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9b058100, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x8064c800, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x45d2720, ftLastWriteTime.dwHighDateTime=0x1d6eb7f, nFileSizeHigh=0x0, nFileSizeLow=0x1c500)) returned 1 [0055.211] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e530) returned 1 [0055.211] MoveFileW (lpExistingFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\TUR\\Standard.pdf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\tur\\standard.pdf"), lpNewFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\TUR\\Standard.pdf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\tur\\standard.pdf")) returned 1 [0055.211] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\TUR\\StandardBusiness.pdf", nBufferLength=0x105, lpBuffer=0x31dfb4, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\TUR\\StandardBusiness.pdf", lpFilePart=0x0) returned 0x64 [0055.211] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e4a8) returned 1 [0055.211] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\TUR\\StandardBusiness.pdf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\tur\\standardbusiness.pdf"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x274 [0055.211] GetFileType (hFile=0x274) returned 0x1 [0055.211] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e4a4) returned 1 [0055.211] GetFileType (hFile=0x274) returned 0x1 [0055.211] GetFileSize (in: hFile=0x274, lpFileSizeHigh=0x31e5b0 | out: lpFileSizeHigh=0x31e5b0*=0x0) returned 0x1804a [0055.212] ReadFile (in: hFile=0x274, lpBuffer=0x372a528, nNumberOfBytesToRead=0x1804a, lpNumberOfBytesRead=0x31e55c, lpOverlapped=0x0 | out: lpBuffer=0x372a528*, lpNumberOfBytesRead=0x31e55c*=0x1804a, lpOverlapped=0x0) returned 1 [0055.214] CloseHandle (hObject=0x274) returned 1 [0055.229] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\TUR\\StandardBusiness.pdf", nBufferLength=0x105, lpBuffer=0x31dfa0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\TUR\\StandardBusiness.pdf", lpFilePart=0x0) returned 0x64 [0055.229] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e494) returned 1 [0055.229] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\TUR\\StandardBusiness.pdf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\tur\\standardbusiness.pdf"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x274 [0055.231] GetFileType (hFile=0x274) returned 0x1 [0055.231] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e490) returned 1 [0055.231] GetFileType (hFile=0x274) returned 0x1 [0055.231] WriteFile (in: hFile=0x274, lpBuffer=0x37a26f0*, nNumberOfBytesToWrite=0x18050, lpNumberOfBytesWritten=0x31e550, lpOverlapped=0x0 | out: lpBuffer=0x37a26f0*, lpNumberOfBytesWritten=0x31e550*=0x18050, lpOverlapped=0x0) returned 1 [0055.233] CloseHandle (hObject=0x274) returned 1 [0055.233] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\TUR\\StandardBusiness.pdf", nBufferLength=0x105, lpBuffer=0x31e0d4, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\TUR\\StandardBusiness.pdf", lpFilePart=0x0) returned 0x64 [0055.233] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\TUR\\StandardBusiness.pdf", nBufferLength=0x105, lpBuffer=0x31e0d4, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\TUR\\StandardBusiness.pdf", lpFilePart=0x0) returned 0x64 [0055.233] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e534) returned 1 [0055.233] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\TUR\\StandardBusiness.pdf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\tur\\standardbusiness.pdf"), fInfoLevelId=0x0, lpFileInformation=0x31e5b0 | out: lpFileInformation=0x31e5b0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9b058100, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x806266a0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x45f8880, ftLastWriteTime.dwHighDateTime=0x1d6eb7f, nFileSizeHigh=0x0, nFileSizeLow=0x18050)) returned 1 [0055.233] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e530) returned 1 [0055.233] MoveFileW (lpExistingFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\TUR\\StandardBusiness.pdf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\tur\\standardbusiness.pdf"), lpNewFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\TUR\\StandardBusiness.pdf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\tur\\standardbusiness.pdf")) returned 1 [0055.233] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e5dc) returned 1 [0055.233] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\UKR", nBufferLength=0x105, lpBuffer=0x31e0e4, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\UKR", lpFilePart=0x0) returned 0x4f [0055.233] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\UKR\\", nBufferLength=0x105, lpBuffer=0x31e0b8, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\UKR\\", lpFilePart=0x0) returned 0x50 [0055.233] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\UKR\\*", lpFindFileData=0x31e304 | out: lpFindFileData=0x31e304*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x80600540, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x806266a0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x806266a0, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x381f40 [0055.235] FindNextFileW (in: hFindFile=0x381f40, lpFindFileData=0x31e314 | out: lpFindFileData=0x31e314*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x80600540, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x806266a0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x806266a0, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0055.235] FindNextFileW (in: hFindFile=0x381f40, lpFindFileData=0x31e314 | out: lpFindFileData=0x31e314*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9c36ae00, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x806266a0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9c36ae00, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x18b15, dwReserved0=0x0, dwReserved1=0x0, cFileName="Dynamic.pdf", cAlternateFileName="")) returned 1 [0055.235] FindNextFileW (in: hFindFile=0x381f40, lpFindFileData=0x31e314 | out: lpFindFileData=0x31e314*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9c36ae00, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x806266a0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9c36ae00, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x80f5, dwReserved0=0x0, dwReserved1=0x0, cFileName="Faces.pdf", cAlternateFileName="")) returned 1 [0055.235] FindNextFileW (in: hFindFile=0x381f40, lpFindFileData=0x31e314 | out: lpFindFileData=0x31e314*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9c36ae00, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x806266a0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9c36ae00, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0xb731, dwReserved0=0x0, dwReserved1=0x0, cFileName="Pointers.pdf", cAlternateFileName="")) returned 1 [0055.236] FindNextFileW (in: hFindFile=0x381f40, lpFindFileData=0x31e314 | out: lpFindFileData=0x31e314*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9c36ae00, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x806266a0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9c36ae00, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0xb189, dwReserved0=0x0, dwReserved1=0x0, cFileName="SignHere.pdf", cAlternateFileName="")) returned 1 [0055.236] FindNextFileW (in: hFindFile=0x381f40, lpFindFileData=0x31e314 | out: lpFindFileData=0x31e314*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9c36ae00, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x806266a0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9c36ae00, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x1c4f5, dwReserved0=0x0, dwReserved1=0x0, cFileName="Standard.pdf", cAlternateFileName="")) returned 1 [0055.236] FindNextFileW (in: hFindFile=0x381f40, lpFindFileData=0x31e314 | out: lpFindFileData=0x31e314*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9c36ae00, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x806266a0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9c36ae00, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x58891, dwReserved0=0x0, dwReserved1=0x0, cFileName="StandardBusiness.pdf", cAlternateFileName="STANDA~1.PDF")) returned 1 [0055.236] FindNextFileW (in: hFindFile=0x381f40, lpFindFileData=0x31e314 | out: lpFindFileData=0x31e314*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0055.236] FindClose (in: hFindFile=0x381f40 | out: hFindFile=0x381f40) returned 1 [0055.237] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e59c) returned 1 [0055.237] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e5a8) returned 1 [0055.237] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e5dc) returned 1 [0055.237] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\UKR", nBufferLength=0x105, lpBuffer=0x31e0e4, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\UKR", lpFilePart=0x0) returned 0x4f [0055.237] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\UKR\\", nBufferLength=0x105, lpBuffer=0x31e0b8, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\UKR\\", lpFilePart=0x0) returned 0x50 [0055.237] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\UKR\\*", lpFindFileData=0x31e304 | out: lpFindFileData=0x31e304*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x80600540, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x806266a0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x806266a0, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x381f40 [0055.238] FindNextFileW (in: hFindFile=0x381f40, lpFindFileData=0x31e314 | out: lpFindFileData=0x31e314*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x80600540, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x806266a0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x806266a0, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0055.238] FindNextFileW (in: hFindFile=0x381f40, lpFindFileData=0x31e314 | out: lpFindFileData=0x31e314*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9c36ae00, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x806266a0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9c36ae00, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x18b15, dwReserved0=0x0, dwReserved1=0x0, cFileName="Dynamic.pdf", cAlternateFileName="")) returned 1 [0055.238] FindNextFileW (in: hFindFile=0x381f40, lpFindFileData=0x31e314 | out: lpFindFileData=0x31e314*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9c36ae00, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x806266a0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9c36ae00, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x80f5, dwReserved0=0x0, dwReserved1=0x0, cFileName="Faces.pdf", cAlternateFileName="")) returned 1 [0055.238] FindNextFileW (in: hFindFile=0x381f40, lpFindFileData=0x31e314 | out: lpFindFileData=0x31e314*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9c36ae00, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x806266a0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9c36ae00, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0xb731, dwReserved0=0x0, dwReserved1=0x0, cFileName="Pointers.pdf", cAlternateFileName="")) returned 1 [0055.238] FindNextFileW (in: hFindFile=0x381f40, lpFindFileData=0x31e314 | out: lpFindFileData=0x31e314*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9c36ae00, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x806266a0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9c36ae00, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0xb189, dwReserved0=0x0, dwReserved1=0x0, cFileName="SignHere.pdf", cAlternateFileName="")) returned 1 [0055.238] FindNextFileW (in: hFindFile=0x381f40, lpFindFileData=0x31e314 | out: lpFindFileData=0x31e314*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9c36ae00, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x806266a0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9c36ae00, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x1c4f5, dwReserved0=0x0, dwReserved1=0x0, cFileName="Standard.pdf", cAlternateFileName="")) returned 1 [0055.238] FindNextFileW (in: hFindFile=0x381f40, lpFindFileData=0x31e314 | out: lpFindFileData=0x31e314*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9c36ae00, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x806266a0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9c36ae00, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x58891, dwReserved0=0x0, dwReserved1=0x0, cFileName="StandardBusiness.pdf", cAlternateFileName="STANDA~1.PDF")) returned 1 [0055.239] FindNextFileW (in: hFindFile=0x381f40, lpFindFileData=0x31e314 | out: lpFindFileData=0x31e314*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9c36ae00, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x806266a0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9c36ae00, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x58891, dwReserved0=0x0, dwReserved1=0x0, cFileName="StandardBusiness.pdf", cAlternateFileName="STANDA~1.PDF")) returned 0 [0055.239] FindClose (in: hFindFile=0x381f40 | out: hFindFile=0x381f40) returned 1 [0055.239] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e59c) returned 1 [0055.239] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e5a8) returned 1 [0055.240] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\UKR\\Dynamic.pdf", nBufferLength=0x105, lpBuffer=0x31dfb4, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\UKR\\Dynamic.pdf", lpFilePart=0x0) returned 0x5b [0055.250] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e4a8) returned 1 [0055.250] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\UKR\\Dynamic.pdf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\ukr\\dynamic.pdf"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x274 [0055.252] GetFileType (hFile=0x274) returned 0x1 [0055.252] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e4a4) returned 1 [0055.252] GetFileType (hFile=0x274) returned 0x1 [0055.252] GetFileSize (in: hFile=0x274, lpFileSizeHigh=0x31e5b0 | out: lpFileSizeHigh=0x31e5b0*=0x0) returned 0x18b15 [0055.252] ReadFile (in: hFile=0x274, lpBuffer=0x37ba760, nNumberOfBytesToRead=0x18b15, lpNumberOfBytesRead=0x31e55c, lpOverlapped=0x0 | out: lpBuffer=0x37ba760*, lpNumberOfBytesRead=0x31e55c*=0x18b15, lpOverlapped=0x0) returned 1 [0055.254] CloseHandle (hObject=0x274) returned 1 [0055.270] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\UKR\\Dynamic.pdf", nBufferLength=0x105, lpBuffer=0x31dfa0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\UKR\\Dynamic.pdf", lpFilePart=0x0) returned 0x5b [0055.270] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e494) returned 1 [0055.270] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\UKR\\Dynamic.pdf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\ukr\\dynamic.pdf"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x274 [0055.272] GetFileType (hFile=0x274) returned 0x1 [0055.272] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e490) returned 1 [0055.272] GetFileType (hFile=0x274) returned 0x1 [0055.272] WriteFile (in: hFile=0x274, lpBuffer=0x3835f38*, nNumberOfBytesToWrite=0x18b20, lpNumberOfBytesWritten=0x31e550, lpOverlapped=0x0 | out: lpBuffer=0x3835f38*, lpNumberOfBytesWritten=0x31e550*=0x18b20, lpOverlapped=0x0) returned 1 [0055.274] CloseHandle (hObject=0x274) returned 1 [0055.274] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\UKR\\Dynamic.pdf", nBufferLength=0x105, lpBuffer=0x31e0d4, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\UKR\\Dynamic.pdf", lpFilePart=0x0) returned 0x5b [0055.274] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\UKR\\Dynamic.pdf", nBufferLength=0x105, lpBuffer=0x31e0d4, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\UKR\\Dynamic.pdf", lpFilePart=0x0) returned 0x5b [0055.274] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e534) returned 1 [0055.274] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\UKR\\Dynamic.pdf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\ukr\\dynamic.pdf"), fInfoLevelId=0x0, lpFileInformation=0x31e5b0 | out: lpFileInformation=0x31e5b0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9c36ae00, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x806266a0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x466aca0, ftLastWriteTime.dwHighDateTime=0x1d6eb7f, nFileSizeHigh=0x0, nFileSizeLow=0x18b20)) returned 1 [0055.274] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e530) returned 1 [0055.274] MoveFileW (lpExistingFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\UKR\\Dynamic.pdf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\ukr\\dynamic.pdf"), lpNewFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\UKR\\Dynamic.pdf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\ukr\\dynamic.pdf")) returned 1 [0055.274] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\UKR\\Faces.pdf", nBufferLength=0x105, lpBuffer=0x31dfb4, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\UKR\\Faces.pdf", lpFilePart=0x0) returned 0x59 [0055.274] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e4a8) returned 1 [0055.274] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\UKR\\Faces.pdf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\ukr\\faces.pdf"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x274 [0055.275] GetFileType (hFile=0x274) returned 0x1 [0055.275] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e4a4) returned 1 [0055.275] GetFileType (hFile=0x274) returned 0x1 [0055.275] GetFileSize (in: hFile=0x274, lpFileSizeHigh=0x31e5b0 | out: lpFileSizeHigh=0x31e5b0*=0x0) returned 0x80f5 [0055.275] ReadFile (in: hFile=0x274, lpBuffer=0x271ae64, nNumberOfBytesToRead=0x80f5, lpNumberOfBytesRead=0x31e55c, lpOverlapped=0x0 | out: lpBuffer=0x271ae64*, lpNumberOfBytesRead=0x31e55c*=0x80f5, lpOverlapped=0x0) returned 1 [0055.276] CloseHandle (hObject=0x274) returned 1 [0055.290] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\UKR\\Faces.pdf", nBufferLength=0x105, lpBuffer=0x31dfa0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\UKR\\Faces.pdf", lpFilePart=0x0) returned 0x59 [0055.290] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e494) returned 1 [0055.290] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\UKR\\Faces.pdf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\ukr\\faces.pdf"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x274 [0055.291] GetFileType (hFile=0x274) returned 0x1 [0055.291] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e490) returned 1 [0055.291] GetFileType (hFile=0x274) returned 0x1 [0055.291] WriteFile (in: hFile=0x274, lpBuffer=0x279014c*, nNumberOfBytesToWrite=0x8100, lpNumberOfBytesWritten=0x31e550, lpOverlapped=0x0 | out: lpBuffer=0x279014c*, lpNumberOfBytesWritten=0x31e550*=0x8100, lpOverlapped=0x0) returned 1 [0055.293] CloseHandle (hObject=0x274) returned 1 [0055.293] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\UKR\\Faces.pdf", nBufferLength=0x105, lpBuffer=0x31e0d4, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\UKR\\Faces.pdf", lpFilePart=0x0) returned 0x59 [0055.293] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\UKR\\Faces.pdf", nBufferLength=0x105, lpBuffer=0x31e0d4, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\UKR\\Faces.pdf", lpFilePart=0x0) returned 0x59 [0055.293] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e534) returned 1 [0055.293] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\UKR\\Faces.pdf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\ukr\\faces.pdf"), fInfoLevelId=0x0, lpFileInformation=0x31e5b0 | out: lpFileInformation=0x31e5b0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9c36ae00, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x806266a0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x4690e00, ftLastWriteTime.dwHighDateTime=0x1d6eb7f, nFileSizeHigh=0x0, nFileSizeLow=0x8100)) returned 1 [0055.293] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e530) returned 1 [0055.293] MoveFileW (lpExistingFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\UKR\\Faces.pdf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\ukr\\faces.pdf"), lpNewFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\UKR\\Faces.pdf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\ukr\\faces.pdf")) returned 1 [0055.293] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\UKR\\Pointers.pdf", nBufferLength=0x105, lpBuffer=0x31dfb4, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\UKR\\Pointers.pdf", lpFilePart=0x0) returned 0x5c [0055.293] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e4a8) returned 1 [0055.293] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\UKR\\Pointers.pdf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\ukr\\pointers.pdf"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x274 [0055.293] GetFileType (hFile=0x274) returned 0x1 [0055.294] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e4a4) returned 1 [0055.294] GetFileType (hFile=0x274) returned 0x1 [0055.294] GetFileSize (in: hFile=0x274, lpFileSizeHigh=0x31e5b0 | out: lpFileSizeHigh=0x31e5b0*=0x0) returned 0xb731 [0055.294] ReadFile (in: hFile=0x274, lpBuffer=0x2798678, nNumberOfBytesToRead=0xb731, lpNumberOfBytesRead=0x31e55c, lpOverlapped=0x0 | out: lpBuffer=0x2798678*, lpNumberOfBytesRead=0x31e55c*=0xb731, lpOverlapped=0x0) returned 1 [0055.295] CloseHandle (hObject=0x274) returned 1 [0055.310] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\UKR\\Pointers.pdf", nBufferLength=0x105, lpBuffer=0x31dfa0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\UKR\\Pointers.pdf", lpFilePart=0x0) returned 0x5c [0055.310] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e494) returned 1 [0055.310] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\UKR\\Pointers.pdf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\ukr\\pointers.pdf"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x274 [0055.311] GetFileType (hFile=0x274) returned 0x1 [0055.311] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e490) returned 1 [0055.311] GetFileType (hFile=0x274) returned 0x1 [0055.311] WriteFile (in: hFile=0x274, lpBuffer=0x2807a34*, nNumberOfBytesToWrite=0xb740, lpNumberOfBytesWritten=0x31e550, lpOverlapped=0x0 | out: lpBuffer=0x2807a34*, lpNumberOfBytesWritten=0x31e550*=0xb740, lpOverlapped=0x0) returned 1 [0055.312] CloseHandle (hObject=0x274) returned 1 [0055.312] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\UKR\\Pointers.pdf", nBufferLength=0x105, lpBuffer=0x31e0d4, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\UKR\\Pointers.pdf", lpFilePart=0x0) returned 0x5c [0055.312] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\UKR\\Pointers.pdf", nBufferLength=0x105, lpBuffer=0x31e0d4, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\UKR\\Pointers.pdf", lpFilePart=0x0) returned 0x5c [0055.312] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e534) returned 1 [0055.312] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\UKR\\Pointers.pdf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\ukr\\pointers.pdf"), fInfoLevelId=0x0, lpFileInformation=0x31e5b0 | out: lpFileInformation=0x31e5b0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9c36ae00, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x806266a0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x46b6f60, ftLastWriteTime.dwHighDateTime=0x1d6eb7f, nFileSizeHigh=0x0, nFileSizeLow=0xb740)) returned 1 [0055.313] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e530) returned 1 [0055.313] MoveFileW (lpExistingFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\UKR\\Pointers.pdf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\ukr\\pointers.pdf"), lpNewFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\UKR\\Pointers.pdf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\ukr\\pointers.pdf")) returned 1 [0055.313] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\UKR\\SignHere.pdf", nBufferLength=0x105, lpBuffer=0x31dfb4, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\UKR\\SignHere.pdf", lpFilePart=0x0) returned 0x5c [0055.313] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e4a8) returned 1 [0055.313] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\UKR\\SignHere.pdf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\ukr\\signhere.pdf"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x274 [0055.313] GetFileType (hFile=0x274) returned 0x1 [0055.313] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e4a4) returned 1 [0055.313] GetFileType (hFile=0x274) returned 0x1 [0055.313] GetFileSize (in: hFile=0x274, lpFileSizeHigh=0x31e5b0 | out: lpFileSizeHigh=0x31e5b0*=0x0) returned 0xb189 [0055.313] ReadFile (in: hFile=0x274, lpBuffer=0x28135c0, nNumberOfBytesToRead=0xb189, lpNumberOfBytesRead=0x31e55c, lpOverlapped=0x0 | out: lpBuffer=0x28135c0*, lpNumberOfBytesRead=0x31e55c*=0xb189, lpOverlapped=0x0) returned 1 [0055.315] CloseHandle (hObject=0x274) returned 1 [0055.357] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\UKR\\SignHere.pdf", nBufferLength=0x105, lpBuffer=0x31dfa0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\UKR\\SignHere.pdf", lpFilePart=0x0) returned 0x5c [0055.357] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e494) returned 1 [0055.357] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\UKR\\SignHere.pdf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\ukr\\signhere.pdf"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x274 [0055.358] GetFileType (hFile=0x274) returned 0x1 [0055.358] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e490) returned 1 [0055.358] GetFileType (hFile=0x274) returned 0x1 [0055.358] WriteFile (in: hFile=0x274, lpBuffer=0x268d3f4*, nNumberOfBytesToWrite=0xb190, lpNumberOfBytesWritten=0x31e550, lpOverlapped=0x0 | out: lpBuffer=0x268d3f4*, lpNumberOfBytesWritten=0x31e550*=0xb190, lpOverlapped=0x0) returned 1 [0055.360] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\UKR\\SignHere.pdf", nBufferLength=0x105, lpBuffer=0x31e0d4, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\UKR\\SignHere.pdf", lpFilePart=0x0) returned 0x5c [0055.360] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\UKR\\SignHere.pdf", nBufferLength=0x105, lpBuffer=0x31e0d4, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\UKR\\SignHere.pdf", lpFilePart=0x0) returned 0x5c [0055.360] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e534) returned 1 [0055.360] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\UKR\\SignHere.pdf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\ukr\\signhere.pdf"), fInfoLevelId=0x0, lpFileInformation=0x31e5b0 | out: lpFileInformation=0x31e5b0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9c36ae00, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x806266a0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x4729380, ftLastWriteTime.dwHighDateTime=0x1d6eb7f, nFileSizeHigh=0x0, nFileSizeLow=0xb190)) returned 1 [0055.360] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e530) returned 1 [0055.360] MoveFileW (lpExistingFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\UKR\\SignHere.pdf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\ukr\\signhere.pdf"), lpNewFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\UKR\\SignHere.pdf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\ukr\\signhere.pdf")) returned 1 [0055.361] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\UKR\\Standard.pdf", nBufferLength=0x105, lpBuffer=0x31dfb4, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\UKR\\Standard.pdf", lpFilePart=0x0) returned 0x5c [0055.361] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e4a8) returned 1 [0055.361] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\UKR\\Standard.pdf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\ukr\\standard.pdf"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x274 [0055.361] GetFileType (hFile=0x274) returned 0x1 [0055.361] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e4a4) returned 1 [0055.361] GetFileType (hFile=0x274) returned 0x1 [0055.361] GetFileSize (in: hFile=0x274, lpFileSizeHigh=0x31e5b0 | out: lpFileSizeHigh=0x31e5b0*=0x0) returned 0x1c4f5 [0055.361] ReadFile (in: hFile=0x274, lpBuffer=0x387bc18, nNumberOfBytesToRead=0x1c4f5, lpNumberOfBytesRead=0x31e55c, lpOverlapped=0x0 | out: lpBuffer=0x387bc18*, lpNumberOfBytesRead=0x31e55c*=0x1c4f5, lpOverlapped=0x0) returned 1 [0055.382] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\UKR\\Standard.pdf", nBufferLength=0x105, lpBuffer=0x31dfa0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\UKR\\Standard.pdf", lpFilePart=0x0) returned 0x5c [0055.382] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e494) returned 1 [0055.383] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\UKR\\Standard.pdf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\ukr\\standard.pdf"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x274 [0055.384] GetFileType (hFile=0x274) returned 0x1 [0055.384] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e490) returned 1 [0055.384] GetFileType (hFile=0x274) returned 0x1 [0055.384] WriteFile (in: hFile=0x274, lpBuffer=0x3898130*, nNumberOfBytesToWrite=0x1c500, lpNumberOfBytesWritten=0x31e550, lpOverlapped=0x0 | out: lpBuffer=0x3898130*, lpNumberOfBytesWritten=0x31e550*=0x1c500, lpOverlapped=0x0) returned 1 [0055.386] CloseHandle (hObject=0x274) returned 1 [0055.387] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\UKR\\Standard.pdf", nBufferLength=0x105, lpBuffer=0x31e0d4, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\UKR\\Standard.pdf", lpFilePart=0x0) returned 0x5c [0055.387] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\UKR\\Standard.pdf", nBufferLength=0x105, lpBuffer=0x31e0d4, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\UKR\\Standard.pdf", lpFilePart=0x0) returned 0x5c [0055.387] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e534) returned 1 [0055.387] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\UKR\\Standard.pdf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\ukr\\standard.pdf"), fInfoLevelId=0x0, lpFileInformation=0x31e5b0 | out: lpFileInformation=0x31e5b0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9c36ae00, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x806266a0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x4775640, ftLastWriteTime.dwHighDateTime=0x1d6eb7f, nFileSizeHigh=0x0, nFileSizeLow=0x1c500)) returned 1 [0055.387] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e530) returned 1 [0055.387] MoveFileW (lpExistingFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\UKR\\Standard.pdf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\ukr\\standard.pdf"), lpNewFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\UKR\\Standard.pdf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\ukr\\standard.pdf")) returned 1 [0055.387] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\UKR\\StandardBusiness.pdf", nBufferLength=0x105, lpBuffer=0x31dfb4, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\UKR\\StandardBusiness.pdf", lpFilePart=0x0) returned 0x64 [0055.387] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e4a8) returned 1 [0055.387] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\UKR\\StandardBusiness.pdf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\ukr\\standardbusiness.pdf"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x274 [0055.387] GetFileType (hFile=0x274) returned 0x1 [0055.388] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e4a4) returned 1 [0055.388] GetFileType (hFile=0x274) returned 0x1 [0055.388] GetFileSize (in: hFile=0x274, lpFileSizeHigh=0x31e5b0 | out: lpFileSizeHigh=0x31e5b0*=0x0) returned 0x58891 [0055.388] ReadFile (in: hFile=0x274, lpBuffer=0x36194b0, nNumberOfBytesToRead=0x58891, lpNumberOfBytesRead=0x31e55c, lpOverlapped=0x0 | out: lpBuffer=0x36194b0*, lpNumberOfBytesRead=0x31e55c*=0x58891, lpOverlapped=0x0) returned 1 [0055.392] CloseHandle (hObject=0x274) returned 1 [0055.439] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\UKR\\StandardBusiness.pdf", nBufferLength=0x105, lpBuffer=0x31dfa0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\UKR\\StandardBusiness.pdf", lpFilePart=0x0) returned 0x64 [0055.439] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e494) returned 1 [0055.439] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\UKR\\StandardBusiness.pdf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\ukr\\standardbusiness.pdf"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x274 [0055.442] GetFileType (hFile=0x274) returned 0x1 [0055.442] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e490) returned 1 [0055.442] GetFileType (hFile=0x274) returned 0x1 [0055.442] WriteFile (in: hFile=0x274, lpBuffer=0x37d4000*, nNumberOfBytesToWrite=0x588a0, lpNumberOfBytesWritten=0x31e550, lpOverlapped=0x0 | out: lpBuffer=0x37d4000*, lpNumberOfBytesWritten=0x31e550*=0x588a0, lpOverlapped=0x0) returned 1 [0055.448] CloseHandle (hObject=0x274) returned 1 [0055.449] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\UKR\\StandardBusiness.pdf", nBufferLength=0x105, lpBuffer=0x31e0d4, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\UKR\\StandardBusiness.pdf", lpFilePart=0x0) returned 0x64 [0055.449] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\UKR\\StandardBusiness.pdf", nBufferLength=0x105, lpBuffer=0x31e0d4, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\UKR\\StandardBusiness.pdf", lpFilePart=0x0) returned 0x64 [0055.449] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e534) returned 1 [0055.449] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\UKR\\StandardBusiness.pdf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\ukr\\standardbusiness.pdf"), fInfoLevelId=0x0, lpFileInformation=0x31e5b0 | out: lpFileInformation=0x31e5b0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9c36ae00, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x806266a0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x480dbc0, ftLastWriteTime.dwHighDateTime=0x1d6eb7f, nFileSizeHigh=0x0, nFileSizeLow=0x588a0)) returned 1 [0055.449] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e530) returned 1 [0055.449] MoveFileW (lpExistingFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\UKR\\StandardBusiness.pdf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\ukr\\standardbusiness.pdf"), lpNewFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\UKR\\StandardBusiness.pdf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\ukr\\standardbusiness.pdf")) returned 1 [0055.449] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e6cc) returned 1 [0055.449] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia", nBufferLength=0x105, lpBuffer=0x31e1d4, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia", lpFilePart=0x0) returned 0x43 [0055.449] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\", nBufferLength=0x105, lpBuffer=0x31e1a8, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\", lpFilePart=0x0) returned 0x44 [0055.449] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\*", lpFindFileData=0x31e3f4 | out: lpFindFileData=0x31e3f4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7cfb2f60, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x7d853f20, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x7d853f20, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x381d40 [0055.453] FindNextFileW (in: hFindFile=0x381d40, lpFindFileData=0x31e404 | out: lpFindFileData=0x31e404*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7cfb2f60, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x7d853f20, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x7d853f20, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0055.453] FindNextFileW (in: hFindFile=0x381d40, lpFindFileData=0x31e404 | out: lpFindFileData=0x31e404*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7cfb2f60, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x7d87a080, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x7d87a080, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="MPP", cAlternateFileName="")) returned 1 [0055.453] FindNextFileW (in: hFindFile=0x381d40, lpFindFileData=0x31e404 | out: lpFindFileData=0x31e404*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7d82ddc0, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x7d853f20, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x7d853f20, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="MPP_CZE", cAlternateFileName="")) returned 1 [0055.453] FindNextFileW (in: hFindFile=0x381d40, lpFindFileData=0x31e404 | out: lpFindFileData=0x31e404*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7d853f20, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x7d853f20, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x7d853f20, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="MPP_HRV", cAlternateFileName="")) returned 1 [0055.453] FindNextFileW (in: hFindFile=0x381d40, lpFindFileData=0x31e404 | out: lpFindFileData=0x31e404*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7d82ddc0, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x7d82ddc0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x7d82ddc0, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="MPP_HUN", cAlternateFileName="")) returned 1 [0055.454] FindNextFileW (in: hFindFile=0x381d40, lpFindFileData=0x31e404 | out: lpFindFileData=0x31e404*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7d82ddc0, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x7d82ddc0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x7d82ddc0, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="MPP_POL", cAlternateFileName="")) returned 1 [0055.454] FindNextFileW (in: hFindFile=0x381d40, lpFindFileData=0x31e404 | out: lpFindFileData=0x31e404*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7d807c60, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x7d82ddc0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x7d82ddc0, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="MPP_RUM", cAlternateFileName="")) returned 1 [0055.454] FindNextFileW (in: hFindFile=0x381d40, lpFindFileData=0x31e404 | out: lpFindFileData=0x31e404*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7d807c60, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x7d807c60, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x7d807c60, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="MPP_RUS", cAlternateFileName="")) returned 1 [0055.454] FindNextFileW (in: hFindFile=0x381d40, lpFindFileData=0x31e404 | out: lpFindFileData=0x31e404*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7d807c60, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x7d807c60, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x7d807c60, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="MPP_SKY", cAlternateFileName="")) returned 1 [0055.454] FindNextFileW (in: hFindFile=0x381d40, lpFindFileData=0x31e404 | out: lpFindFileData=0x31e404*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7d7e1b00, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x7d807c60, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x7d807c60, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="MPP_SLV", cAlternateFileName="")) returned 1 [0055.454] FindNextFileW (in: hFindFile=0x381d40, lpFindFileData=0x31e404 | out: lpFindFileData=0x31e404*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7d7e1b00, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x7d7e1b00, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x7d7e1b00, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="MPP_TUR", cAlternateFileName="")) returned 1 [0055.454] FindNextFileW (in: hFindFile=0x381d40, lpFindFileData=0x31e404 | out: lpFindFileData=0x31e404*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7d7e1b00, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x7d7e1b00, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x7d7e1b00, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="MPP_UKR", cAlternateFileName="")) returned 1 [0055.455] FindNextFileW (in: hFindFile=0x381d40, lpFindFileData=0x31e404 | out: lpFindFileData=0x31e404*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7d7e1b00, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x7d7e1b00, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x7d7e1b00, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="MPP_UKR", cAlternateFileName="")) returned 0 [0055.455] FindClose (in: hFindFile=0x381d40 | out: hFindFile=0x381d40) returned 1 [0055.455] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e68c) returned 1 [0055.455] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e698) returned 1 [0055.455] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e6cc) returned 1 [0055.455] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia", nBufferLength=0x105, lpBuffer=0x31e1d4, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia", lpFilePart=0x0) returned 0x43 [0055.455] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\", nBufferLength=0x105, lpBuffer=0x31e1a8, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\", lpFilePart=0x0) returned 0x44 [0055.456] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\*", lpFindFileData=0x31e3f4 | out: lpFindFileData=0x31e3f4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7cfb2f60, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x7d853f20, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x7d853f20, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x381d40 [0055.456] FindNextFileW (in: hFindFile=0x381d40, lpFindFileData=0x31e404 | out: lpFindFileData=0x31e404*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7cfb2f60, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x7d853f20, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x7d853f20, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0055.456] FindNextFileW (in: hFindFile=0x381d40, lpFindFileData=0x31e404 | out: lpFindFileData=0x31e404*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7cfb2f60, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x7d87a080, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x7d87a080, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="MPP", cAlternateFileName="")) returned 1 [0055.457] FindNextFileW (in: hFindFile=0x381d40, lpFindFileData=0x31e404 | out: lpFindFileData=0x31e404*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7d82ddc0, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x7d853f20, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x7d853f20, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="MPP_CZE", cAlternateFileName="")) returned 1 [0055.457] FindNextFileW (in: hFindFile=0x381d40, lpFindFileData=0x31e404 | out: lpFindFileData=0x31e404*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7d853f20, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x7d853f20, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x7d853f20, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="MPP_HRV", cAlternateFileName="")) returned 1 [0055.457] FindNextFileW (in: hFindFile=0x381d40, lpFindFileData=0x31e404 | out: lpFindFileData=0x31e404*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7d82ddc0, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x7d82ddc0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x7d82ddc0, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="MPP_HUN", cAlternateFileName="")) returned 1 [0055.457] FindNextFileW (in: hFindFile=0x381d40, lpFindFileData=0x31e404 | out: lpFindFileData=0x31e404*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7d82ddc0, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x7d82ddc0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x7d82ddc0, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="MPP_POL", cAlternateFileName="")) returned 1 [0055.457] FindNextFileW (in: hFindFile=0x381d40, lpFindFileData=0x31e404 | out: lpFindFileData=0x31e404*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7d807c60, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x7d82ddc0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x7d82ddc0, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="MPP_RUM", cAlternateFileName="")) returned 1 [0055.457] FindNextFileW (in: hFindFile=0x381d40, lpFindFileData=0x31e404 | out: lpFindFileData=0x31e404*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7d807c60, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x7d807c60, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x7d807c60, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="MPP_RUS", cAlternateFileName="")) returned 1 [0055.457] FindNextFileW (in: hFindFile=0x381d40, lpFindFileData=0x31e404 | out: lpFindFileData=0x31e404*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7d807c60, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x7d807c60, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x7d807c60, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="MPP_SKY", cAlternateFileName="")) returned 1 [0055.457] FindNextFileW (in: hFindFile=0x381d40, lpFindFileData=0x31e404 | out: lpFindFileData=0x31e404*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7d7e1b00, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x7d807c60, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x7d807c60, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="MPP_SLV", cAlternateFileName="")) returned 1 [0055.457] FindNextFileW (in: hFindFile=0x381d40, lpFindFileData=0x31e404 | out: lpFindFileData=0x31e404*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7d7e1b00, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x7d7e1b00, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x7d7e1b00, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="MPP_TUR", cAlternateFileName="")) returned 1 [0055.458] FindNextFileW (in: hFindFile=0x381d40, lpFindFileData=0x31e404 | out: lpFindFileData=0x31e404*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7d7e1b00, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x7d7e1b00, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x7d7e1b00, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="MPP_UKR", cAlternateFileName="")) returned 1 [0055.458] FindNextFileW (in: hFindFile=0x381d40, lpFindFileData=0x31e404 | out: lpFindFileData=0x31e404*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0055.458] FindClose (in: hFindFile=0x381d40 | out: hFindFile=0x381d40) returned 1 [0055.459] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e68c) returned 1 [0055.459] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e698) returned 1 [0055.459] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e654) returned 1 [0055.459] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP", nBufferLength=0x105, lpBuffer=0x31e15c, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP", lpFilePart=0x0) returned 0x47 [0055.459] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP\\", nBufferLength=0x105, lpBuffer=0x31e130, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP\\", lpFilePart=0x0) returned 0x48 [0055.459] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP\\*", lpFindFileData=0x31e37c | out: lpFindFileData=0x31e37c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7cfb2f60, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x7d87a080, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x7d87a080, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x381d40 [0055.462] FindNextFileW (in: hFindFile=0x381d40, lpFindFileData=0x31e38c | out: lpFindFileData=0x31e38c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7cfb2f60, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x7d87a080, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x7d87a080, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0055.465] FindNextFileW (in: hFindFile=0x381d40, lpFindFileData=0x31e38c | out: lpFindFileData=0x31e38c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9c36ae00, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7d87a080, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9c36ae00, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0xa00, dwReserved0=0x0, dwReserved1=0x0, cFileName="Flash.CAT", cAlternateFileName="")) returned 1 [0055.465] FindNextFileW (in: hFindFile=0x381d40, lpFindFileData=0x31e38c | out: lpFindFileData=0x31e38c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x99d45400, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7d6d7160, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x99d45400, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0xa00, dwReserved0=0x0, dwReserved1=0x0, cFileName="Flash.CHS", cAlternateFileName="")) returned 1 [0055.465] FindNextFileW (in: hFindFile=0x381d40, lpFindFileData=0x31e38c | out: lpFindFileData=0x31e38c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x99d45400, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7d6fd2c0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x99d45400, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0xa00, dwReserved0=0x0, dwReserved1=0x0, cFileName="Flash.CHT", cAlternateFileName="")) returned 1 [0055.465] FindNextFileW (in: hFindFile=0x381d40, lpFindFileData=0x31e38c | out: lpFindFileData=0x31e38c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9640cd00, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7d68aea0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9640cd00, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0xa00, dwReserved0=0x0, dwReserved1=0x0, cFileName="Flash.DAN", cAlternateFileName="")) returned 1 [0055.466] FindNextFileW (in: hFindFile=0x381d40, lpFindFileData=0x31e38c | out: lpFindFileData=0x31e38c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x950fa000, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7d749580, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x950fa000, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0xa00, dwReserved0=0x0, dwReserved1=0x0, cFileName="Flash.DEU", cAlternateFileName="")) returned 1 [0055.466] FindNextFileW (in: hFindFile=0x381d40, lpFindFileData=0x31e38c | out: lpFindFileData=0x31e38c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9640cd00, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7d6fd2c0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9640cd00, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0xa00, dwReserved0=0x0, dwReserved1=0x0, cFileName="Flash.ESP", cAlternateFileName="")) returned 1 [0055.466] FindNextFileW (in: hFindFile=0x381d40, lpFindFileData=0x31e38c | out: lpFindFileData=0x31e38c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9d67db00, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7d87a080, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9d67db00, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0xa00, dwReserved0=0x0, dwReserved1=0x0, cFileName="Flash.EUQ", cAlternateFileName="")) returned 1 [0055.466] FindNextFileW (in: hFindFile=0x381d40, lpFindFileData=0x31e38c | out: lpFindFileData=0x31e38c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x950fa000, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7d664d40, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x950fa000, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0xa00, dwReserved0=0x0, dwReserved1=0x0, cFileName="Flash.FRA", cAlternateFileName="")) returned 1 [0055.466] FindNextFileW (in: hFindFile=0x381d40, lpFindFileData=0x31e38c | out: lpFindFileData=0x31e38c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9640cd00, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7d63ebe0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9640cd00, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0xa00, dwReserved0=0x0, dwReserved1=0x0, cFileName="Flash.ITA", cAlternateFileName="")) returned 1 [0055.466] FindNextFileW (in: hFindFile=0x381d40, lpFindFileData=0x31e38c | out: lpFindFileData=0x31e38c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x950fa000, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7d664d40, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x950fa000, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0xa00, dwReserved0=0x0, dwReserved1=0x0, cFileName="Flash.JPN", cAlternateFileName="")) returned 1 [0055.466] FindNextFileW (in: hFindFile=0x381d40, lpFindFileData=0x31e38c | out: lpFindFileData=0x31e38c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x98a32700, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7d6fd2c0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x98a32700, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0xa00, dwReserved0=0x0, dwReserved1=0x0, cFileName="Flash.KOR", cAlternateFileName="")) returned 1 [0055.466] FindNextFileW (in: hFindFile=0x381d40, lpFindFileData=0x31e38c | out: lpFindFileData=0x31e38c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x93de7300, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7d723420, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x93de7300, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x1d800, dwReserved0=0x0, dwReserved1=0x0, cFileName="Flash.mpp", cAlternateFileName="")) returned 1 [0055.467] FindNextFileW (in: hFindFile=0x381d40, lpFindFileData=0x31e38c | out: lpFindFileData=0x31e38c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9640cd00, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7d6b1000, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9640cd00, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0xa00, dwReserved0=0x0, dwReserved1=0x0, cFileName="Flash.NLD", cAlternateFileName="")) returned 1 [0055.467] FindNextFileW (in: hFindFile=0x381d40, lpFindFileData=0x31e38c | out: lpFindFileData=0x31e38c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x98a32700, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7d76f6e0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x98a32700, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0xa00, dwReserved0=0x0, dwReserved1=0x0, cFileName="Flash.NOR", cAlternateFileName="")) returned 1 [0055.467] FindNextFileW (in: hFindFile=0x381d40, lpFindFileData=0x31e38c | out: lpFindFileData=0x31e38c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x98a32700, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7d795840, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x98a32700, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0xa00, dwReserved0=0x0, dwReserved1=0x0, cFileName="Flash.PTB", cAlternateFileName="")) returned 1 [0055.467] FindNextFileW (in: hFindFile=0x381d40, lpFindFileData=0x31e38c | out: lpFindFileData=0x31e38c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9640cd00, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7d664d40, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9640cd00, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0xa00, dwReserved0=0x0, dwReserved1=0x0, cFileName="Flash.SUO", cAlternateFileName="")) returned 1 [0055.467] FindNextFileW (in: hFindFile=0x381d40, lpFindFileData=0x31e38c | out: lpFindFileData=0x31e38c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9640cd00, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7d795840, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9640cd00, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0xa00, dwReserved0=0x0, dwReserved1=0x0, cFileName="Flash.SVE", cAlternateFileName="")) returned 1 [0055.467] FindNextFileW (in: hFindFile=0x381d40, lpFindFileData=0x31e38c | out: lpFindFileData=0x31e38c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9c36ae00, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7d87a080, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9c36ae00, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x2000, dwReserved0=0x0, dwReserved1=0x0, cFileName="Mcimpp.CAT", cAlternateFileName="")) returned 1 [0055.467] FindNextFileW (in: hFindFile=0x381d40, lpFindFileData=0x31e38c | out: lpFindFileData=0x31e38c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x99d45400, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7d6d7160, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x99d45400, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x1a00, dwReserved0=0x0, dwReserved1=0x0, cFileName="MCIMPP.CHS", cAlternateFileName="")) returned 1 [0055.467] FindNextFileW (in: hFindFile=0x381d40, lpFindFileData=0x31e38c | out: lpFindFileData=0x31e38c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x99d45400, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7d6fd2c0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x99d45400, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x1a00, dwReserved0=0x0, dwReserved1=0x0, cFileName="MCIMPP.CHT", cAlternateFileName="")) returned 1 [0055.467] FindNextFileW (in: hFindFile=0x381d40, lpFindFileData=0x31e38c | out: lpFindFileData=0x31e38c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9640cd00, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7d664d40, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9640cd00, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x2000, dwReserved0=0x0, dwReserved1=0x0, cFileName="Mcimpp.DAN", cAlternateFileName="")) returned 1 [0055.468] FindNextFileW (in: hFindFile=0x381d40, lpFindFileData=0x31e38c | out: lpFindFileData=0x31e38c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x950fa000, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7d749580, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x950fa000, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x2000, dwReserved0=0x0, dwReserved1=0x0, cFileName="Mcimpp.DEU", cAlternateFileName="")) returned 1 [0055.468] FindNextFileW (in: hFindFile=0x381d40, lpFindFileData=0x31e38c | out: lpFindFileData=0x31e38c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9640cd00, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7d6fd2c0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9640cd00, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x2000, dwReserved0=0x0, dwReserved1=0x0, cFileName="Mcimpp.ESP", cAlternateFileName="")) returned 1 [0055.468] FindNextFileW (in: hFindFile=0x381d40, lpFindFileData=0x31e38c | out: lpFindFileData=0x31e38c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9d67db00, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7d87a080, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9d67db00, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x2000, dwReserved0=0x0, dwReserved1=0x0, cFileName="Mcimpp.EUQ", cAlternateFileName="")) returned 1 [0055.468] FindNextFileW (in: hFindFile=0x381d40, lpFindFileData=0x31e38c | out: lpFindFileData=0x31e38c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x950fa000, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7d664d40, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x950fa000, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x2000, dwReserved0=0x0, dwReserved1=0x0, cFileName="Mcimpp.FRA", cAlternateFileName="")) returned 1 [0055.468] FindNextFileW (in: hFindFile=0x381d40, lpFindFileData=0x31e38c | out: lpFindFileData=0x31e38c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9640cd00, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7d63ebe0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9640cd00, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x2000, dwReserved0=0x0, dwReserved1=0x0, cFileName="Mcimpp.ITA", cAlternateFileName="")) returned 1 [0055.468] FindNextFileW (in: hFindFile=0x381d40, lpFindFileData=0x31e38c | out: lpFindFileData=0x31e38c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x950fa000, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7d664d40, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x950fa000, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x1c00, dwReserved0=0x0, dwReserved1=0x0, cFileName="Mcimpp.JPN", cAlternateFileName="")) returned 1 [0055.468] FindNextFileW (in: hFindFile=0x381d40, lpFindFileData=0x31e38c | out: lpFindFileData=0x31e38c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x98a32700, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7d6fd2c0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x98a32700, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x1c00, dwReserved0=0x0, dwReserved1=0x0, cFileName="Mcimpp.KOR", cAlternateFileName="")) returned 1 [0055.468] FindNextFileW (in: hFindFile=0x381d40, lpFindFileData=0x31e38c | out: lpFindFileData=0x31e38c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x93de7300, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7d723420, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x93de7300, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x16e00, dwReserved0=0x0, dwReserved1=0x0, cFileName="MCIMPP.mpp", cAlternateFileName="")) returned 1 [0055.468] FindNextFileW (in: hFindFile=0x381d40, lpFindFileData=0x31e38c | out: lpFindFileData=0x31e38c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9640cd00, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7d68aea0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9640cd00, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x2000, dwReserved0=0x0, dwReserved1=0x0, cFileName="Mcimpp.NLD", cAlternateFileName="")) returned 1 [0055.469] FindNextFileW (in: hFindFile=0x381d40, lpFindFileData=0x31e38c | out: lpFindFileData=0x31e38c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x98a32700, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7d76f6e0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x98a32700, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x1e00, dwReserved0=0x0, dwReserved1=0x0, cFileName="Mcimpp.NOR", cAlternateFileName="")) returned 1 [0055.469] FindNextFileW (in: hFindFile=0x381d40, lpFindFileData=0x31e38c | out: lpFindFileData=0x31e38c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x98a32700, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7d795840, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x98a32700, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x2000, dwReserved0=0x0, dwReserved1=0x0, cFileName="MCIMPP.PTB", cAlternateFileName="")) returned 1 [0055.469] FindNextFileW (in: hFindFile=0x381d40, lpFindFileData=0x31e38c | out: lpFindFileData=0x31e38c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9640cd00, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7d664d40, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9640cd00, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x1e00, dwReserved0=0x0, dwReserved1=0x0, cFileName="Mcimpp.SUO", cAlternateFileName="")) returned 1 [0055.469] FindNextFileW (in: hFindFile=0x381d40, lpFindFileData=0x31e38c | out: lpFindFileData=0x31e38c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9640cd00, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7d795840, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9640cd00, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x1e00, dwReserved0=0x0, dwReserved1=0x0, cFileName="MCIMPP.SVE", cAlternateFileName="")) returned 1 [0055.469] FindNextFileW (in: hFindFile=0x381d40, lpFindFileData=0x31e38c | out: lpFindFileData=0x31e38c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9c36ae00, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7d853f20, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9c36ae00, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0xa00, dwReserved0=0x0, dwReserved1=0x0, cFileName="QuickTime.CAT", cAlternateFileName="QUICKT~1.CAT")) returned 1 [0055.471] FindNextFileW (in: hFindFile=0x381d40, lpFindFileData=0x31e38c | out: lpFindFileData=0x31e38c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x99d45400, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7d6d7160, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x99d45400, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0xa00, dwReserved0=0x0, dwReserved1=0x0, cFileName="QuickTime.CHS", cAlternateFileName="QUICKT~1.CHS")) returned 1 [0055.471] FindNextFileW (in: hFindFile=0x381d40, lpFindFileData=0x31e38c | out: lpFindFileData=0x31e38c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x99d45400, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7d6fd2c0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x99d45400, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0xa00, dwReserved0=0x0, dwReserved1=0x0, cFileName="QuickTime.CHT", cAlternateFileName="QUICKT~1.CHT")) returned 1 [0055.471] FindNextFileW (in: hFindFile=0x381d40, lpFindFileData=0x31e38c | out: lpFindFileData=0x31e38c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9640cd00, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7d68aea0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9640cd00, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0xa00, dwReserved0=0x0, dwReserved1=0x0, cFileName="QuickTime.DAN", cAlternateFileName="QUICKT~1.DAN")) returned 1 [0055.471] FindNextFileW (in: hFindFile=0x381d40, lpFindFileData=0x31e38c | out: lpFindFileData=0x31e38c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x950fa000, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7d749580, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x950fa000, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0xa00, dwReserved0=0x0, dwReserved1=0x0, cFileName="QuickTime.DEU", cAlternateFileName="QUICKT~1.DEU")) returned 1 [0055.471] FindNextFileW (in: hFindFile=0x381d40, lpFindFileData=0x31e38c | out: lpFindFileData=0x31e38c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9640cd00, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7d6fd2c0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9640cd00, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0xa00, dwReserved0=0x0, dwReserved1=0x0, cFileName="QuickTime.ESP", cAlternateFileName="QUICKT~1.ESP")) returned 1 [0055.471] FindNextFileW (in: hFindFile=0x381d40, lpFindFileData=0x31e38c | out: lpFindFileData=0x31e38c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9d67db00, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7d87a080, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9d67db00, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0xa00, dwReserved0=0x0, dwReserved1=0x0, cFileName="QuickTime.EUQ", cAlternateFileName="QUICKT~1.EUQ")) returned 1 [0055.471] FindNextFileW (in: hFindFile=0x381d40, lpFindFileData=0x31e38c | out: lpFindFileData=0x31e38c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x950fa000, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7d664d40, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x950fa000, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0xa00, dwReserved0=0x0, dwReserved1=0x0, cFileName="QuickTime.FRA", cAlternateFileName="QUICKT~1.FRA")) returned 1 [0055.472] FindNextFileW (in: hFindFile=0x381d40, lpFindFileData=0x31e38c | out: lpFindFileData=0x31e38c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9640cd00, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7d63ebe0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9640cd00, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0xa00, dwReserved0=0x0, dwReserved1=0x0, cFileName="QuickTime.ITA", cAlternateFileName="QUICKT~1.ITA")) returned 1 [0055.472] FindNextFileW (in: hFindFile=0x381d40, lpFindFileData=0x31e38c | out: lpFindFileData=0x31e38c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9640cd00, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7d664d40, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9640cd00, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0xa00, dwReserved0=0x0, dwReserved1=0x0, cFileName="QuickTime.JPN", cAlternateFileName="QUICKT~1.JPN")) returned 1 [0055.472] FindNextFileW (in: hFindFile=0x381d40, lpFindFileData=0x31e38c | out: lpFindFileData=0x31e38c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x98a32700, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7d6fd2c0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x98a32700, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0xa00, dwReserved0=0x0, dwReserved1=0x0, cFileName="QuickTime.KOR", cAlternateFileName="QUICKT~1.KOR")) returned 1 [0055.472] FindNextFileW (in: hFindFile=0x381d40, lpFindFileData=0x31e38c | out: lpFindFileData=0x31e38c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x950fa000, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7d723420, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x950fa000, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x44000, dwReserved0=0x0, dwReserved1=0x0, cFileName="QuickTime.mpp", cAlternateFileName="QUICKT~1.MPP")) returned 1 [0055.472] FindNextFileW (in: hFindFile=0x381d40, lpFindFileData=0x31e38c | out: lpFindFileData=0x31e38c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9640cd00, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7d68aea0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9640cd00, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0xa00, dwReserved0=0x0, dwReserved1=0x0, cFileName="QuickTime.NLD", cAlternateFileName="QUICKT~1.NLD")) returned 1 [0055.472] FindNextFileW (in: hFindFile=0x381d40, lpFindFileData=0x31e38c | out: lpFindFileData=0x31e38c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x98a32700, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7d76f6e0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x98a32700, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0xa00, dwReserved0=0x0, dwReserved1=0x0, cFileName="QuickTime.NOR", cAlternateFileName="QUICKT~1.NOR")) returned 1 [0055.472] FindNextFileW (in: hFindFile=0x381d40, lpFindFileData=0x31e38c | out: lpFindFileData=0x31e38c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x98a32700, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7d795840, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x98a32700, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0xa00, dwReserved0=0x0, dwReserved1=0x0, cFileName="QuickTime.PTB", cAlternateFileName="QUICKT~1.PTB")) returned 1 [0055.472] FindNextFileW (in: hFindFile=0x381d40, lpFindFileData=0x31e38c | out: lpFindFileData=0x31e38c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9640cd00, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7d63ebe0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9640cd00, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0xa00, dwReserved0=0x0, dwReserved1=0x0, cFileName="QuickTime.SUO", cAlternateFileName="QUICKT~1.SUO")) returned 1 [0055.473] FindNextFileW (in: hFindFile=0x381d40, lpFindFileData=0x31e38c | out: lpFindFileData=0x31e38c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9640cd00, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7d795840, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9640cd00, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0xa00, dwReserved0=0x0, dwReserved1=0x0, cFileName="QuickTime.SVE", cAlternateFileName="QUICKT~1.SVE")) returned 1 [0055.473] FindNextFileW (in: hFindFile=0x381d40, lpFindFileData=0x31e38c | out: lpFindFileData=0x31e38c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9c36ae00, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7d853f20, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9c36ae00, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0xa00, dwReserved0=0x0, dwReserved1=0x0, cFileName="WindowsMedia.CAT", cAlternateFileName="WINDOW~1.CAT")) returned 1 [0055.473] FindNextFileW (in: hFindFile=0x381d40, lpFindFileData=0x31e38c | out: lpFindFileData=0x31e38c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x99d45400, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7d6d7160, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x99d45400, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0xa00, dwReserved0=0x0, dwReserved1=0x0, cFileName="WindowsMedia.CHS", cAlternateFileName="WINDOW~1.CHS")) returned 1 [0055.473] FindNextFileW (in: hFindFile=0x381d40, lpFindFileData=0x31e38c | out: lpFindFileData=0x31e38c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x99d45400, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7d6fd2c0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x99d45400, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0xa00, dwReserved0=0x0, dwReserved1=0x0, cFileName="WindowsMedia.CHT", cAlternateFileName="WINDOW~1.CHT")) returned 1 [0055.473] FindNextFileW (in: hFindFile=0x381d40, lpFindFileData=0x31e38c | out: lpFindFileData=0x31e38c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9640cd00, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7d68aea0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9640cd00, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0xa00, dwReserved0=0x0, dwReserved1=0x0, cFileName="WindowsMedia.DAN", cAlternateFileName="WINDOW~1.DAN")) returned 1 [0055.473] FindNextFileW (in: hFindFile=0x381d40, lpFindFileData=0x31e38c | out: lpFindFileData=0x31e38c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x950fa000, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7d749580, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x950fa000, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0xa00, dwReserved0=0x0, dwReserved1=0x0, cFileName="WindowsMedia.DEU", cAlternateFileName="WINDOW~1.DEU")) returned 1 [0055.473] FindNextFileW (in: hFindFile=0x381d40, lpFindFileData=0x31e38c | out: lpFindFileData=0x31e38c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9640cd00, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7d6fd2c0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9640cd00, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0xa00, dwReserved0=0x0, dwReserved1=0x0, cFileName="WindowsMedia.ESP", cAlternateFileName="WINDOW~1.ESP")) returned 1 [0055.473] FindNextFileW (in: hFindFile=0x381d40, lpFindFileData=0x31e38c | out: lpFindFileData=0x31e38c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9d67db00, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7d87a080, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9d67db00, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0xa00, dwReserved0=0x0, dwReserved1=0x0, cFileName="WindowsMedia.EUQ", cAlternateFileName="WINDOW~1.EUQ")) returned 1 [0055.474] FindNextFileW (in: hFindFile=0x381d40, lpFindFileData=0x31e38c | out: lpFindFileData=0x31e38c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x950fa000, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7d664d40, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x950fa000, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0xa00, dwReserved0=0x0, dwReserved1=0x0, cFileName="WindowsMedia.FRA", cAlternateFileName="WINDOW~1.FRA")) returned 1 [0055.474] FindNextFileW (in: hFindFile=0x381d40, lpFindFileData=0x31e38c | out: lpFindFileData=0x31e38c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9640cd00, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7d63ebe0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9640cd00, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0xa00, dwReserved0=0x0, dwReserved1=0x0, cFileName="WindowsMedia.ITA", cAlternateFileName="WINDOW~1.ITA")) returned 1 [0055.474] FindNextFileW (in: hFindFile=0x381d40, lpFindFileData=0x31e38c | out: lpFindFileData=0x31e38c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9640cd00, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7d664d40, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9640cd00, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0xa00, dwReserved0=0x0, dwReserved1=0x0, cFileName="WindowsMedia.JPN", cAlternateFileName="WINDOW~1.JPN")) returned 1 [0055.474] FindNextFileW (in: hFindFile=0x381d40, lpFindFileData=0x31e38c | out: lpFindFileData=0x31e38c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x98a32700, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7d6fd2c0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x98a32700, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0xa00, dwReserved0=0x0, dwReserved1=0x0, cFileName="WindowsMedia.KOR", cAlternateFileName="WINDOW~1.KOR")) returned 1 [0055.474] FindNextFileW (in: hFindFile=0x381d40, lpFindFileData=0x31e38c | out: lpFindFileData=0x31e38c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x950fa000, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7d723420, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x950fa000, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x35400, dwReserved0=0x0, dwReserved1=0x0, cFileName="WindowsMedia.mpp", cAlternateFileName="WINDOW~1.MPP")) returned 1 [0055.474] FindNextFileW (in: hFindFile=0x381d40, lpFindFileData=0x31e38c | out: lpFindFileData=0x31e38c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9640cd00, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7d6d7160, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9640cd00, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0xa00, dwReserved0=0x0, dwReserved1=0x0, cFileName="WindowsMedia.NLD", cAlternateFileName="WINDOW~1.NLD")) returned 1 [0055.474] FindNextFileW (in: hFindFile=0x381d40, lpFindFileData=0x31e38c | out: lpFindFileData=0x31e38c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x98a32700, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7d76f6e0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x98a32700, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0xa00, dwReserved0=0x0, dwReserved1=0x0, cFileName="WindowsMedia.NOR", cAlternateFileName="WINDOW~1.NOR")) returned 1 [0055.474] FindNextFileW (in: hFindFile=0x381d40, lpFindFileData=0x31e38c | out: lpFindFileData=0x31e38c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x98a32700, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7d795840, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x98a32700, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0xa00, dwReserved0=0x0, dwReserved1=0x0, cFileName="WindowsMedia.PTB", cAlternateFileName="WINDOW~1.PTB")) returned 1 [0055.475] FindNextFileW (in: hFindFile=0x381d40, lpFindFileData=0x31e38c | out: lpFindFileData=0x31e38c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9640cd00, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7d664d40, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9640cd00, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0xa00, dwReserved0=0x0, dwReserved1=0x0, cFileName="WindowsMedia.SUO", cAlternateFileName="WINDOW~1.SUO")) returned 1 [0055.475] FindNextFileW (in: hFindFile=0x381d40, lpFindFileData=0x31e38c | out: lpFindFileData=0x31e38c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9640cd00, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7d795840, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9640cd00, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0xa00, dwReserved0=0x0, dwReserved1=0x0, cFileName="WindowsMedia.SVE", cAlternateFileName="WINDOW~1.SVE")) returned 1 [0055.475] FindNextFileW (in: hFindFile=0x381d40, lpFindFileData=0x31e38c | out: lpFindFileData=0x31e38c*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0055.475] FindClose (in: hFindFile=0x381d40 | out: hFindFile=0x381d40) returned 1 [0055.476] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e614) returned 1 [0055.476] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e620) returned 1 [0055.476] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e654) returned 1 [0055.476] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP", nBufferLength=0x105, lpBuffer=0x31e15c, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP", lpFilePart=0x0) returned 0x47 [0055.476] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP\\", nBufferLength=0x105, lpBuffer=0x31e130, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP\\", lpFilePart=0x0) returned 0x48 [0055.476] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP\\*", lpFindFileData=0x31e37c | out: lpFindFileData=0x31e37c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7cfb2f60, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x7d87a080, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x7d87a080, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x381d40 [0055.477] FindNextFileW (in: hFindFile=0x381d40, lpFindFileData=0x31e38c | out: lpFindFileData=0x31e38c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7cfb2f60, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x7d87a080, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x7d87a080, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0055.477] FindNextFileW (in: hFindFile=0x381d40, lpFindFileData=0x31e38c | out: lpFindFileData=0x31e38c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9c36ae00, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7d87a080, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9c36ae00, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0xa00, dwReserved0=0x0, dwReserved1=0x0, cFileName="Flash.CAT", cAlternateFileName="")) returned 1 [0055.477] FindNextFileW (in: hFindFile=0x381d40, lpFindFileData=0x31e38c | out: lpFindFileData=0x31e38c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x99d45400, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7d6d7160, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x99d45400, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0xa00, dwReserved0=0x0, dwReserved1=0x0, cFileName="Flash.CHS", cAlternateFileName="")) returned 1 [0055.477] FindNextFileW (in: hFindFile=0x381d40, lpFindFileData=0x31e38c | out: lpFindFileData=0x31e38c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x99d45400, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7d6fd2c0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x99d45400, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0xa00, dwReserved0=0x0, dwReserved1=0x0, cFileName="Flash.CHT", cAlternateFileName="")) returned 1 [0055.477] FindNextFileW (in: hFindFile=0x381d40, lpFindFileData=0x31e38c | out: lpFindFileData=0x31e38c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9640cd00, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7d68aea0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9640cd00, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0xa00, dwReserved0=0x0, dwReserved1=0x0, cFileName="Flash.DAN", cAlternateFileName="")) returned 1 [0055.477] FindNextFileW (in: hFindFile=0x381d40, lpFindFileData=0x31e38c | out: lpFindFileData=0x31e38c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x950fa000, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7d749580, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x950fa000, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0xa00, dwReserved0=0x0, dwReserved1=0x0, cFileName="Flash.DEU", cAlternateFileName="")) returned 1 [0055.477] FindNextFileW (in: hFindFile=0x381d40, lpFindFileData=0x31e38c | out: lpFindFileData=0x31e38c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9640cd00, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7d6fd2c0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9640cd00, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0xa00, dwReserved0=0x0, dwReserved1=0x0, cFileName="Flash.ESP", cAlternateFileName="")) returned 1 [0055.477] FindNextFileW (in: hFindFile=0x381d40, lpFindFileData=0x31e38c | out: lpFindFileData=0x31e38c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9d67db00, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7d87a080, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9d67db00, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0xa00, dwReserved0=0x0, dwReserved1=0x0, cFileName="Flash.EUQ", cAlternateFileName="")) returned 1 [0055.478] FindNextFileW (in: hFindFile=0x381d40, lpFindFileData=0x31e38c | out: lpFindFileData=0x31e38c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x950fa000, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7d664d40, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x950fa000, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0xa00, dwReserved0=0x0, dwReserved1=0x0, cFileName="Flash.FRA", cAlternateFileName="")) returned 1 [0055.478] FindNextFileW (in: hFindFile=0x381d40, lpFindFileData=0x31e38c | out: lpFindFileData=0x31e38c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9640cd00, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7d63ebe0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9640cd00, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0xa00, dwReserved0=0x0, dwReserved1=0x0, cFileName="Flash.ITA", cAlternateFileName="")) returned 1 [0055.478] FindNextFileW (in: hFindFile=0x381d40, lpFindFileData=0x31e38c | out: lpFindFileData=0x31e38c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x950fa000, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7d664d40, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x950fa000, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0xa00, dwReserved0=0x0, dwReserved1=0x0, cFileName="Flash.JPN", cAlternateFileName="")) returned 1 [0055.478] FindNextFileW (in: hFindFile=0x381d40, lpFindFileData=0x31e38c | out: lpFindFileData=0x31e38c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x98a32700, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7d6fd2c0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x98a32700, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0xa00, dwReserved0=0x0, dwReserved1=0x0, cFileName="Flash.KOR", cAlternateFileName="")) returned 1 [0055.478] FindNextFileW (in: hFindFile=0x381d40, lpFindFileData=0x31e38c | out: lpFindFileData=0x31e38c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x93de7300, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7d723420, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x93de7300, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x1d800, dwReserved0=0x0, dwReserved1=0x0, cFileName="Flash.mpp", cAlternateFileName="")) returned 1 [0055.478] FindNextFileW (in: hFindFile=0x381d40, lpFindFileData=0x31e38c | out: lpFindFileData=0x31e38c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9640cd00, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7d6b1000, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9640cd00, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0xa00, dwReserved0=0x0, dwReserved1=0x0, cFileName="Flash.NLD", cAlternateFileName="")) returned 1 [0055.478] FindNextFileW (in: hFindFile=0x381d40, lpFindFileData=0x31e38c | out: lpFindFileData=0x31e38c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x98a32700, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7d76f6e0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x98a32700, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0xa00, dwReserved0=0x0, dwReserved1=0x0, cFileName="Flash.NOR", cAlternateFileName="")) returned 1 [0055.478] FindNextFileW (in: hFindFile=0x381d40, lpFindFileData=0x31e38c | out: lpFindFileData=0x31e38c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x98a32700, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7d795840, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x98a32700, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0xa00, dwReserved0=0x0, dwReserved1=0x0, cFileName="Flash.PTB", cAlternateFileName="")) returned 1 [0055.478] FindNextFileW (in: hFindFile=0x381d40, lpFindFileData=0x31e38c | out: lpFindFileData=0x31e38c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9640cd00, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7d664d40, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9640cd00, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0xa00, dwReserved0=0x0, dwReserved1=0x0, cFileName="Flash.SUO", cAlternateFileName="")) returned 1 [0055.479] FindNextFileW (in: hFindFile=0x381d40, lpFindFileData=0x31e38c | out: lpFindFileData=0x31e38c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9640cd00, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7d795840, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9640cd00, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0xa00, dwReserved0=0x0, dwReserved1=0x0, cFileName="Flash.SVE", cAlternateFileName="")) returned 1 [0055.479] FindNextFileW (in: hFindFile=0x381d40, lpFindFileData=0x31e38c | out: lpFindFileData=0x31e38c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9c36ae00, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7d87a080, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9c36ae00, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x2000, dwReserved0=0x0, dwReserved1=0x0, cFileName="Mcimpp.CAT", cAlternateFileName="")) returned 1 [0055.479] FindNextFileW (in: hFindFile=0x381d40, lpFindFileData=0x31e38c | out: lpFindFileData=0x31e38c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x99d45400, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7d6d7160, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x99d45400, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x1a00, dwReserved0=0x0, dwReserved1=0x0, cFileName="MCIMPP.CHS", cAlternateFileName="")) returned 1 [0055.479] FindNextFileW (in: hFindFile=0x381d40, lpFindFileData=0x31e38c | out: lpFindFileData=0x31e38c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x99d45400, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7d6fd2c0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x99d45400, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x1a00, dwReserved0=0x0, dwReserved1=0x0, cFileName="MCIMPP.CHT", cAlternateFileName="")) returned 1 [0055.479] FindNextFileW (in: hFindFile=0x381d40, lpFindFileData=0x31e38c | out: lpFindFileData=0x31e38c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9640cd00, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7d664d40, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9640cd00, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x2000, dwReserved0=0x0, dwReserved1=0x0, cFileName="Mcimpp.DAN", cAlternateFileName="")) returned 1 [0055.479] FindNextFileW (in: hFindFile=0x381d40, lpFindFileData=0x31e38c | out: lpFindFileData=0x31e38c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x950fa000, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7d749580, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x950fa000, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x2000, dwReserved0=0x0, dwReserved1=0x0, cFileName="Mcimpp.DEU", cAlternateFileName="")) returned 1 [0055.479] FindNextFileW (in: hFindFile=0x381d40, lpFindFileData=0x31e38c | out: lpFindFileData=0x31e38c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9640cd00, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7d6fd2c0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9640cd00, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x2000, dwReserved0=0x0, dwReserved1=0x0, cFileName="Mcimpp.ESP", cAlternateFileName="")) returned 1 [0055.479] FindNextFileW (in: hFindFile=0x381d40, lpFindFileData=0x31e38c | out: lpFindFileData=0x31e38c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9d67db00, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7d87a080, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9d67db00, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x2000, dwReserved0=0x0, dwReserved1=0x0, cFileName="Mcimpp.EUQ", cAlternateFileName="")) returned 1 [0055.479] FindNextFileW (in: hFindFile=0x381d40, lpFindFileData=0x31e38c | out: lpFindFileData=0x31e38c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x950fa000, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7d664d40, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x950fa000, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x2000, dwReserved0=0x0, dwReserved1=0x0, cFileName="Mcimpp.FRA", cAlternateFileName="")) returned 1 [0055.479] FindNextFileW (in: hFindFile=0x381d40, lpFindFileData=0x31e38c | out: lpFindFileData=0x31e38c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9640cd00, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7d63ebe0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9640cd00, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x2000, dwReserved0=0x0, dwReserved1=0x0, cFileName="Mcimpp.ITA", cAlternateFileName="")) returned 1 [0055.480] FindNextFileW (in: hFindFile=0x381d40, lpFindFileData=0x31e38c | out: lpFindFileData=0x31e38c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x950fa000, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7d664d40, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x950fa000, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x1c00, dwReserved0=0x0, dwReserved1=0x0, cFileName="Mcimpp.JPN", cAlternateFileName="")) returned 1 [0055.480] FindNextFileW (in: hFindFile=0x381d40, lpFindFileData=0x31e38c | out: lpFindFileData=0x31e38c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x98a32700, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7d6fd2c0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x98a32700, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x1c00, dwReserved0=0x0, dwReserved1=0x0, cFileName="Mcimpp.KOR", cAlternateFileName="")) returned 1 [0055.480] FindNextFileW (in: hFindFile=0x381d40, lpFindFileData=0x31e38c | out: lpFindFileData=0x31e38c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x93de7300, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7d723420, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x93de7300, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x16e00, dwReserved0=0x0, dwReserved1=0x0, cFileName="MCIMPP.mpp", cAlternateFileName="")) returned 1 [0055.480] FindNextFileW (in: hFindFile=0x381d40, lpFindFileData=0x31e38c | out: lpFindFileData=0x31e38c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9640cd00, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7d68aea0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9640cd00, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x2000, dwReserved0=0x0, dwReserved1=0x0, cFileName="Mcimpp.NLD", cAlternateFileName="")) returned 1 [0055.480] FindNextFileW (in: hFindFile=0x381d40, lpFindFileData=0x31e38c | out: lpFindFileData=0x31e38c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x98a32700, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7d76f6e0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x98a32700, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x1e00, dwReserved0=0x0, dwReserved1=0x0, cFileName="Mcimpp.NOR", cAlternateFileName="")) returned 1 [0055.480] FindNextFileW (in: hFindFile=0x381d40, lpFindFileData=0x31e38c | out: lpFindFileData=0x31e38c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x98a32700, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7d795840, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x98a32700, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x2000, dwReserved0=0x0, dwReserved1=0x0, cFileName="MCIMPP.PTB", cAlternateFileName="")) returned 1 [0055.480] FindNextFileW (in: hFindFile=0x381d40, lpFindFileData=0x31e38c | out: lpFindFileData=0x31e38c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9640cd00, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7d664d40, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9640cd00, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x1e00, dwReserved0=0x0, dwReserved1=0x0, cFileName="Mcimpp.SUO", cAlternateFileName="")) returned 1 [0055.480] FindNextFileW (in: hFindFile=0x381d40, lpFindFileData=0x31e38c | out: lpFindFileData=0x31e38c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9640cd00, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7d795840, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9640cd00, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x1e00, dwReserved0=0x0, dwReserved1=0x0, cFileName="MCIMPP.SVE", cAlternateFileName="")) returned 1 [0055.480] FindNextFileW (in: hFindFile=0x381d40, lpFindFileData=0x31e38c | out: lpFindFileData=0x31e38c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9c36ae00, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7d853f20, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9c36ae00, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0xa00, dwReserved0=0x0, dwReserved1=0x0, cFileName="QuickTime.CAT", cAlternateFileName="QUICKT~1.CAT")) returned 1 [0055.480] FindNextFileW (in: hFindFile=0x381d40, lpFindFileData=0x31e38c | out: lpFindFileData=0x31e38c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x99d45400, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7d6d7160, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x99d45400, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0xa00, dwReserved0=0x0, dwReserved1=0x0, cFileName="QuickTime.CHS", cAlternateFileName="QUICKT~1.CHS")) returned 1 [0055.480] FindNextFileW (in: hFindFile=0x381d40, lpFindFileData=0x31e38c | out: lpFindFileData=0x31e38c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x99d45400, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7d6fd2c0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x99d45400, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0xa00, dwReserved0=0x0, dwReserved1=0x0, cFileName="QuickTime.CHT", cAlternateFileName="QUICKT~1.CHT")) returned 1 [0055.480] FindNextFileW (in: hFindFile=0x381d40, lpFindFileData=0x31e38c | out: lpFindFileData=0x31e38c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9640cd00, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7d68aea0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9640cd00, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0xa00, dwReserved0=0x0, dwReserved1=0x0, cFileName="QuickTime.DAN", cAlternateFileName="QUICKT~1.DAN")) returned 1 [0055.480] FindNextFileW (in: hFindFile=0x381d40, lpFindFileData=0x31e38c | out: lpFindFileData=0x31e38c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x950fa000, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7d749580, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x950fa000, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0xa00, dwReserved0=0x0, dwReserved1=0x0, cFileName="QuickTime.DEU", cAlternateFileName="QUICKT~1.DEU")) returned 1 [0055.480] FindNextFileW (in: hFindFile=0x381d40, lpFindFileData=0x31e38c | out: lpFindFileData=0x31e38c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9640cd00, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7d6fd2c0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9640cd00, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0xa00, dwReserved0=0x0, dwReserved1=0x0, cFileName="QuickTime.ESP", cAlternateFileName="QUICKT~1.ESP")) returned 1 [0055.480] FindNextFileW (in: hFindFile=0x381d40, lpFindFileData=0x31e38c | out: lpFindFileData=0x31e38c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9d67db00, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7d87a080, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9d67db00, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0xa00, dwReserved0=0x0, dwReserved1=0x0, cFileName="QuickTime.EUQ", cAlternateFileName="QUICKT~1.EUQ")) returned 1 [0055.481] FindNextFileW (in: hFindFile=0x381d40, lpFindFileData=0x31e38c | out: lpFindFileData=0x31e38c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x950fa000, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7d664d40, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x950fa000, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0xa00, dwReserved0=0x0, dwReserved1=0x0, cFileName="QuickTime.FRA", cAlternateFileName="QUICKT~1.FRA")) returned 1 [0055.481] FindNextFileW (in: hFindFile=0x381d40, lpFindFileData=0x31e38c | out: lpFindFileData=0x31e38c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9640cd00, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7d63ebe0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9640cd00, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0xa00, dwReserved0=0x0, dwReserved1=0x0, cFileName="QuickTime.ITA", cAlternateFileName="QUICKT~1.ITA")) returned 1 [0055.481] FindNextFileW (in: hFindFile=0x381d40, lpFindFileData=0x31e38c | out: lpFindFileData=0x31e38c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9640cd00, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7d664d40, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9640cd00, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0xa00, dwReserved0=0x0, dwReserved1=0x0, cFileName="QuickTime.JPN", cAlternateFileName="QUICKT~1.JPN")) returned 1 [0055.481] FindNextFileW (in: hFindFile=0x381d40, lpFindFileData=0x31e38c | out: lpFindFileData=0x31e38c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x98a32700, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7d6fd2c0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x98a32700, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0xa00, dwReserved0=0x0, dwReserved1=0x0, cFileName="QuickTime.KOR", cAlternateFileName="QUICKT~1.KOR")) returned 1 [0055.481] FindNextFileW (in: hFindFile=0x381d40, lpFindFileData=0x31e38c | out: lpFindFileData=0x31e38c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x950fa000, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7d723420, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x950fa000, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x44000, dwReserved0=0x0, dwReserved1=0x0, cFileName="QuickTime.mpp", cAlternateFileName="QUICKT~1.MPP")) returned 1 [0055.481] FindNextFileW (in: hFindFile=0x381d40, lpFindFileData=0x31e38c | out: lpFindFileData=0x31e38c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9640cd00, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7d68aea0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9640cd00, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0xa00, dwReserved0=0x0, dwReserved1=0x0, cFileName="QuickTime.NLD", cAlternateFileName="QUICKT~1.NLD")) returned 1 [0055.481] FindNextFileW (in: hFindFile=0x381d40, lpFindFileData=0x31e38c | out: lpFindFileData=0x31e38c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x98a32700, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7d76f6e0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x98a32700, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0xa00, dwReserved0=0x0, dwReserved1=0x0, cFileName="QuickTime.NOR", cAlternateFileName="QUICKT~1.NOR")) returned 1 [0055.481] FindNextFileW (in: hFindFile=0x381d40, lpFindFileData=0x31e38c | out: lpFindFileData=0x31e38c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x98a32700, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7d795840, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x98a32700, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0xa00, dwReserved0=0x0, dwReserved1=0x0, cFileName="QuickTime.PTB", cAlternateFileName="QUICKT~1.PTB")) returned 1 [0055.481] FindNextFileW (in: hFindFile=0x381d40, lpFindFileData=0x31e38c | out: lpFindFileData=0x31e38c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9640cd00, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7d63ebe0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9640cd00, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0xa00, dwReserved0=0x0, dwReserved1=0x0, cFileName="QuickTime.SUO", cAlternateFileName="QUICKT~1.SUO")) returned 1 [0055.481] FindNextFileW (in: hFindFile=0x381d40, lpFindFileData=0x31e38c | out: lpFindFileData=0x31e38c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9640cd00, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7d795840, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9640cd00, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0xa00, dwReserved0=0x0, dwReserved1=0x0, cFileName="QuickTime.SVE", cAlternateFileName="QUICKT~1.SVE")) returned 1 [0055.481] FindNextFileW (in: hFindFile=0x381d40, lpFindFileData=0x31e38c | out: lpFindFileData=0x31e38c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9c36ae00, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7d853f20, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9c36ae00, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0xa00, dwReserved0=0x0, dwReserved1=0x0, cFileName="WindowsMedia.CAT", cAlternateFileName="WINDOW~1.CAT")) returned 1 [0055.481] FindNextFileW (in: hFindFile=0x381d40, lpFindFileData=0x31e38c | out: lpFindFileData=0x31e38c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x99d45400, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7d6d7160, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x99d45400, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0xa00, dwReserved0=0x0, dwReserved1=0x0, cFileName="WindowsMedia.CHS", cAlternateFileName="WINDOW~1.CHS")) returned 1 [0055.481] FindNextFileW (in: hFindFile=0x381d40, lpFindFileData=0x31e38c | out: lpFindFileData=0x31e38c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x99d45400, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7d6fd2c0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x99d45400, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0xa00, dwReserved0=0x0, dwReserved1=0x0, cFileName="WindowsMedia.CHT", cAlternateFileName="WINDOW~1.CHT")) returned 1 [0055.481] FindNextFileW (in: hFindFile=0x381d40, lpFindFileData=0x31e38c | out: lpFindFileData=0x31e38c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9640cd00, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7d68aea0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9640cd00, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0xa00, dwReserved0=0x0, dwReserved1=0x0, cFileName="WindowsMedia.DAN", cAlternateFileName="WINDOW~1.DAN")) returned 1 [0055.481] FindNextFileW (in: hFindFile=0x381d40, lpFindFileData=0x31e38c | out: lpFindFileData=0x31e38c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x950fa000, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7d749580, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x950fa000, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0xa00, dwReserved0=0x0, dwReserved1=0x0, cFileName="WindowsMedia.DEU", cAlternateFileName="WINDOW~1.DEU")) returned 1 [0055.481] FindNextFileW (in: hFindFile=0x381d40, lpFindFileData=0x31e38c | out: lpFindFileData=0x31e38c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9640cd00, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7d6fd2c0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9640cd00, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0xa00, dwReserved0=0x0, dwReserved1=0x0, cFileName="WindowsMedia.ESP", cAlternateFileName="WINDOW~1.ESP")) returned 1 [0055.481] FindNextFileW (in: hFindFile=0x381d40, lpFindFileData=0x31e38c | out: lpFindFileData=0x31e38c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9d67db00, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7d87a080, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9d67db00, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0xa00, dwReserved0=0x0, dwReserved1=0x0, cFileName="WindowsMedia.EUQ", cAlternateFileName="WINDOW~1.EUQ")) returned 1 [0055.482] FindNextFileW (in: hFindFile=0x381d40, lpFindFileData=0x31e38c | out: lpFindFileData=0x31e38c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x950fa000, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7d664d40, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x950fa000, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0xa00, dwReserved0=0x0, dwReserved1=0x0, cFileName="WindowsMedia.FRA", cAlternateFileName="WINDOW~1.FRA")) returned 1 [0055.482] FindNextFileW (in: hFindFile=0x381d40, lpFindFileData=0x31e38c | out: lpFindFileData=0x31e38c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9640cd00, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7d63ebe0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9640cd00, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0xa00, dwReserved0=0x0, dwReserved1=0x0, cFileName="WindowsMedia.ITA", cAlternateFileName="WINDOW~1.ITA")) returned 1 [0055.482] FindNextFileW (in: hFindFile=0x381d40, lpFindFileData=0x31e38c | out: lpFindFileData=0x31e38c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9640cd00, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7d664d40, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9640cd00, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0xa00, dwReserved0=0x0, dwReserved1=0x0, cFileName="WindowsMedia.JPN", cAlternateFileName="WINDOW~1.JPN")) returned 1 [0055.482] FindNextFileW (in: hFindFile=0x381d40, lpFindFileData=0x31e38c | out: lpFindFileData=0x31e38c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x98a32700, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7d6fd2c0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x98a32700, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0xa00, dwReserved0=0x0, dwReserved1=0x0, cFileName="WindowsMedia.KOR", cAlternateFileName="WINDOW~1.KOR")) returned 1 [0055.482] FindNextFileW (in: hFindFile=0x381d40, lpFindFileData=0x31e38c | out: lpFindFileData=0x31e38c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x950fa000, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7d723420, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x950fa000, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x35400, dwReserved0=0x0, dwReserved1=0x0, cFileName="WindowsMedia.mpp", cAlternateFileName="WINDOW~1.MPP")) returned 1 [0055.482] FindNextFileW (in: hFindFile=0x381d40, lpFindFileData=0x31e38c | out: lpFindFileData=0x31e38c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9640cd00, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7d6d7160, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9640cd00, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0xa00, dwReserved0=0x0, dwReserved1=0x0, cFileName="WindowsMedia.NLD", cAlternateFileName="WINDOW~1.NLD")) returned 1 [0055.482] FindNextFileW (in: hFindFile=0x381d40, lpFindFileData=0x31e38c | out: lpFindFileData=0x31e38c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x98a32700, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7d76f6e0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x98a32700, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0xa00, dwReserved0=0x0, dwReserved1=0x0, cFileName="WindowsMedia.NOR", cAlternateFileName="WINDOW~1.NOR")) returned 1 [0055.482] FindNextFileW (in: hFindFile=0x381d40, lpFindFileData=0x31e38c | out: lpFindFileData=0x31e38c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x98a32700, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7d795840, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x98a32700, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0xa00, dwReserved0=0x0, dwReserved1=0x0, cFileName="WindowsMedia.PTB", cAlternateFileName="WINDOW~1.PTB")) returned 1 [0055.482] FindNextFileW (in: hFindFile=0x381d40, lpFindFileData=0x31e38c | out: lpFindFileData=0x31e38c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9640cd00, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7d664d40, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9640cd00, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0xa00, dwReserved0=0x0, dwReserved1=0x0, cFileName="WindowsMedia.SUO", cAlternateFileName="WINDOW~1.SUO")) returned 1 [0055.482] FindNextFileW (in: hFindFile=0x381d40, lpFindFileData=0x31e38c | out: lpFindFileData=0x31e38c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9640cd00, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7d795840, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9640cd00, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0xa00, dwReserved0=0x0, dwReserved1=0x0, cFileName="WindowsMedia.SVE", cAlternateFileName="WINDOW~1.SVE")) returned 1 [0055.482] FindNextFileW (in: hFindFile=0x381d40, lpFindFileData=0x31e38c | out: lpFindFileData=0x31e38c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9640cd00, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7d795840, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9640cd00, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0xa00, dwReserved0=0x0, dwReserved1=0x0, cFileName="WindowsMedia.SVE", cAlternateFileName="WINDOW~1.SVE")) returned 0 [0055.482] FindClose (in: hFindFile=0x381d40 | out: hFindFile=0x381d40) returned 1 [0055.483] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e614) returned 1 [0055.483] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e620) returned 1 [0055.483] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e654) returned 1 [0055.483] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP_CZE", nBufferLength=0x105, lpBuffer=0x31e15c, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP_CZE", lpFilePart=0x0) returned 0x4b [0055.483] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP_CZE\\", nBufferLength=0x105, lpBuffer=0x31e130, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP_CZE\\", lpFilePart=0x0) returned 0x4c [0055.483] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP_CZE\\*", lpFindFileData=0x31e37c | out: lpFindFileData=0x31e37c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7d82ddc0, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x7d853f20, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x7d853f20, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x381d40 [0055.484] FindNextFileW (in: hFindFile=0x381d40, lpFindFileData=0x31e38c | out: lpFindFileData=0x31e38c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7d82ddc0, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x7d853f20, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x7d853f20, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0055.484] FindNextFileW (in: hFindFile=0x381d40, lpFindFileData=0x31e38c | out: lpFindFileData=0x31e38c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x99d45400, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7d82ddc0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x99d45400, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0xa00, dwReserved0=0x0, dwReserved1=0x0, cFileName="Flash.CZE", cAlternateFileName="")) returned 1 [0055.484] FindNextFileW (in: hFindFile=0x381d40, lpFindFileData=0x31e38c | out: lpFindFileData=0x31e38c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x99d45400, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7d853f20, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x99d45400, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x2000, dwReserved0=0x0, dwReserved1=0x0, cFileName="Mcimpp.CZE", cAlternateFileName="")) returned 1 [0055.484] FindNextFileW (in: hFindFile=0x381d40, lpFindFileData=0x31e38c | out: lpFindFileData=0x31e38c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x99d45400, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7d853f20, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x99d45400, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0xa00, dwReserved0=0x0, dwReserved1=0x0, cFileName="QuickTime.CZE", cAlternateFileName="QUICKT~1.CZE")) returned 1 [0055.484] FindNextFileW (in: hFindFile=0x381d40, lpFindFileData=0x31e38c | out: lpFindFileData=0x31e38c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x99d45400, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7d853f20, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x99d45400, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0xa00, dwReserved0=0x0, dwReserved1=0x0, cFileName="WindowsMedia.CZE", cAlternateFileName="WINDOW~1.CZE")) returned 1 [0055.484] FindNextFileW (in: hFindFile=0x381d40, lpFindFileData=0x31e38c | out: lpFindFileData=0x31e38c*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0055.484] FindClose (in: hFindFile=0x381d40 | out: hFindFile=0x381d40) returned 1 [0055.484] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e614) returned 1 [0055.485] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e620) returned 1 [0055.485] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e654) returned 1 [0055.485] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP_CZE", nBufferLength=0x105, lpBuffer=0x31e15c, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP_CZE", lpFilePart=0x0) returned 0x4b [0055.485] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP_CZE\\", nBufferLength=0x105, lpBuffer=0x31e130, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP_CZE\\", lpFilePart=0x0) returned 0x4c [0055.485] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP_CZE\\*", lpFindFileData=0x31e37c | out: lpFindFileData=0x31e37c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7d82ddc0, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x7d853f20, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x7d853f20, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x381d40 [0055.485] FindNextFileW (in: hFindFile=0x381d40, lpFindFileData=0x31e38c | out: lpFindFileData=0x31e38c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7d82ddc0, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x7d853f20, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x7d853f20, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0055.485] FindNextFileW (in: hFindFile=0x381d40, lpFindFileData=0x31e38c | out: lpFindFileData=0x31e38c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x99d45400, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7d82ddc0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x99d45400, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0xa00, dwReserved0=0x0, dwReserved1=0x0, cFileName="Flash.CZE", cAlternateFileName="")) returned 1 [0055.485] FindNextFileW (in: hFindFile=0x381d40, lpFindFileData=0x31e38c | out: lpFindFileData=0x31e38c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x99d45400, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7d853f20, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x99d45400, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x2000, dwReserved0=0x0, dwReserved1=0x0, cFileName="Mcimpp.CZE", cAlternateFileName="")) returned 1 [0055.485] FindNextFileW (in: hFindFile=0x381d40, lpFindFileData=0x31e38c | out: lpFindFileData=0x31e38c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x99d45400, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7d853f20, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x99d45400, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0xa00, dwReserved0=0x0, dwReserved1=0x0, cFileName="QuickTime.CZE", cAlternateFileName="QUICKT~1.CZE")) returned 1 [0055.485] FindNextFileW (in: hFindFile=0x381d40, lpFindFileData=0x31e38c | out: lpFindFileData=0x31e38c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x99d45400, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7d853f20, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x99d45400, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0xa00, dwReserved0=0x0, dwReserved1=0x0, cFileName="WindowsMedia.CZE", cAlternateFileName="WINDOW~1.CZE")) returned 1 [0055.485] FindNextFileW (in: hFindFile=0x381d40, lpFindFileData=0x31e38c | out: lpFindFileData=0x31e38c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x99d45400, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7d853f20, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x99d45400, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0xa00, dwReserved0=0x0, dwReserved1=0x0, cFileName="WindowsMedia.CZE", cAlternateFileName="WINDOW~1.CZE")) returned 0 [0055.485] FindClose (in: hFindFile=0x381d40 | out: hFindFile=0x381d40) returned 1 [0055.485] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e614) returned 1 [0055.485] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e620) returned 1 [0055.485] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e654) returned 1 [0055.485] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP_HRV", nBufferLength=0x105, lpBuffer=0x31e15c, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP_HRV", lpFilePart=0x0) returned 0x4b [0055.485] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP_HRV\\", nBufferLength=0x105, lpBuffer=0x31e130, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP_HRV\\", lpFilePart=0x0) returned 0x4c [0055.486] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP_HRV\\*", lpFindFileData=0x31e37c | out: lpFindFileData=0x31e37c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7d853f20, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x7d853f20, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x7d853f20, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x381d40 [0055.486] FindNextFileW (in: hFindFile=0x381d40, lpFindFileData=0x31e38c | out: lpFindFileData=0x31e38c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7d853f20, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x7d853f20, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x7d853f20, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0055.486] FindNextFileW (in: hFindFile=0x381d40, lpFindFileData=0x31e38c | out: lpFindFileData=0x31e38c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9b058100, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7d853f20, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9b058100, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0xa00, dwReserved0=0x0, dwReserved1=0x0, cFileName="Flash.HRV", cAlternateFileName="")) returned 1 [0055.486] FindNextFileW (in: hFindFile=0x381d40, lpFindFileData=0x31e38c | out: lpFindFileData=0x31e38c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9b058100, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7d853f20, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9b058100, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x2000, dwReserved0=0x0, dwReserved1=0x0, cFileName="MCIMPP.HRV", cAlternateFileName="")) returned 1 [0055.486] FindNextFileW (in: hFindFile=0x381d40, lpFindFileData=0x31e38c | out: lpFindFileData=0x31e38c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9b058100, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7d853f20, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9b058100, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0xa00, dwReserved0=0x0, dwReserved1=0x0, cFileName="QuickTime.HRV", cAlternateFileName="QUICKT~1.HRV")) returned 1 [0055.486] FindNextFileW (in: hFindFile=0x381d40, lpFindFileData=0x31e38c | out: lpFindFileData=0x31e38c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9b058100, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7d853f20, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9b058100, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0xa00, dwReserved0=0x0, dwReserved1=0x0, cFileName="WindowsMedia.HRV", cAlternateFileName="WINDOW~1.HRV")) returned 1 [0055.487] FindNextFileW (in: hFindFile=0x381d40, lpFindFileData=0x31e38c | out: lpFindFileData=0x31e38c*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0055.487] FindClose (in: hFindFile=0x381d40 | out: hFindFile=0x381d40) returned 1 [0055.487] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e614) returned 1 [0055.487] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e620) returned 1 [0055.487] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e654) returned 1 [0055.487] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP_HRV", nBufferLength=0x105, lpBuffer=0x31e15c, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP_HRV", lpFilePart=0x0) returned 0x4b [0055.487] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP_HRV\\", nBufferLength=0x105, lpBuffer=0x31e130, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP_HRV\\", lpFilePart=0x0) returned 0x4c [0055.487] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP_HRV\\*", lpFindFileData=0x31e37c | out: lpFindFileData=0x31e37c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7d853f20, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x7d853f20, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x7d853f20, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x381d40 [0055.487] FindNextFileW (in: hFindFile=0x381d40, lpFindFileData=0x31e38c | out: lpFindFileData=0x31e38c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7d853f20, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x7d853f20, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x7d853f20, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0055.487] FindNextFileW (in: hFindFile=0x381d40, lpFindFileData=0x31e38c | out: lpFindFileData=0x31e38c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9b058100, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7d853f20, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9b058100, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0xa00, dwReserved0=0x0, dwReserved1=0x0, cFileName="Flash.HRV", cAlternateFileName="")) returned 1 [0055.487] FindNextFileW (in: hFindFile=0x381d40, lpFindFileData=0x31e38c | out: lpFindFileData=0x31e38c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9b058100, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7d853f20, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9b058100, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x2000, dwReserved0=0x0, dwReserved1=0x0, cFileName="MCIMPP.HRV", cAlternateFileName="")) returned 1 [0055.487] FindNextFileW (in: hFindFile=0x381d40, lpFindFileData=0x31e38c | out: lpFindFileData=0x31e38c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9b058100, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7d853f20, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9b058100, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0xa00, dwReserved0=0x0, dwReserved1=0x0, cFileName="QuickTime.HRV", cAlternateFileName="QUICKT~1.HRV")) returned 1 [0055.487] FindNextFileW (in: hFindFile=0x381d40, lpFindFileData=0x31e38c | out: lpFindFileData=0x31e38c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9b058100, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7d853f20, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9b058100, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0xa00, dwReserved0=0x0, dwReserved1=0x0, cFileName="WindowsMedia.HRV", cAlternateFileName="WINDOW~1.HRV")) returned 1 [0055.487] FindNextFileW (in: hFindFile=0x381d40, lpFindFileData=0x31e38c | out: lpFindFileData=0x31e38c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9b058100, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7d853f20, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9b058100, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0xa00, dwReserved0=0x0, dwReserved1=0x0, cFileName="WindowsMedia.HRV", cAlternateFileName="WINDOW~1.HRV")) returned 0 [0055.487] FindClose (in: hFindFile=0x381d40 | out: hFindFile=0x381d40) returned 1 [0055.487] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e614) returned 1 [0055.487] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e620) returned 1 [0055.487] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e654) returned 1 [0055.487] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP_HUN", nBufferLength=0x105, lpBuffer=0x31e15c, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP_HUN", lpFilePart=0x0) returned 0x4b [0055.487] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP_HUN\\", nBufferLength=0x105, lpBuffer=0x31e130, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP_HUN\\", lpFilePart=0x0) returned 0x4c [0055.487] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP_HUN\\*", lpFindFileData=0x31e37c | out: lpFindFileData=0x31e37c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7d82ddc0, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x7d82ddc0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x7d82ddc0, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x381d40 [0055.488] FindNextFileW (in: hFindFile=0x381d40, lpFindFileData=0x31e38c | out: lpFindFileData=0x31e38c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7d82ddc0, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x7d82ddc0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x7d82ddc0, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0055.488] FindNextFileW (in: hFindFile=0x381d40, lpFindFileData=0x31e38c | out: lpFindFileData=0x31e38c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9b058100, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7d82ddc0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9b058100, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0xa00, dwReserved0=0x0, dwReserved1=0x0, cFileName="Flash.HUN", cAlternateFileName="")) returned 1 [0055.488] FindNextFileW (in: hFindFile=0x381d40, lpFindFileData=0x31e38c | out: lpFindFileData=0x31e38c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9b058100, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7d82ddc0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9b058100, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x2000, dwReserved0=0x0, dwReserved1=0x0, cFileName="Mcimpp.HUN", cAlternateFileName="")) returned 1 [0055.488] FindNextFileW (in: hFindFile=0x381d40, lpFindFileData=0x31e38c | out: lpFindFileData=0x31e38c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9b058100, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7d82ddc0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9b058100, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0xa00, dwReserved0=0x0, dwReserved1=0x0, cFileName="QuickTime.HUN", cAlternateFileName="QUICKT~1.HUN")) returned 1 [0055.488] FindNextFileW (in: hFindFile=0x381d40, lpFindFileData=0x31e38c | out: lpFindFileData=0x31e38c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9b058100, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7d82ddc0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9b058100, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0xa00, dwReserved0=0x0, dwReserved1=0x0, cFileName="WindowsMedia.HUN", cAlternateFileName="WINDOW~1.HUN")) returned 1 [0055.488] FindNextFileW (in: hFindFile=0x381d40, lpFindFileData=0x31e38c | out: lpFindFileData=0x31e38c*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0055.488] FindClose (in: hFindFile=0x381d40 | out: hFindFile=0x381d40) returned 1 [0055.489] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e614) returned 1 [0055.489] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e620) returned 1 [0055.489] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e654) returned 1 [0055.489] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP_HUN", nBufferLength=0x105, lpBuffer=0x31e15c, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP_HUN", lpFilePart=0x0) returned 0x4b [0055.489] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP_HUN\\", nBufferLength=0x105, lpBuffer=0x31e130, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP_HUN\\", lpFilePart=0x0) returned 0x4c [0055.489] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP_HUN\\*", lpFindFileData=0x31e37c | out: lpFindFileData=0x31e37c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7d82ddc0, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x7d82ddc0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x7d82ddc0, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x381d40 [0055.489] FindNextFileW (in: hFindFile=0x381d40, lpFindFileData=0x31e38c | out: lpFindFileData=0x31e38c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7d82ddc0, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x7d82ddc0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x7d82ddc0, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0055.489] FindNextFileW (in: hFindFile=0x381d40, lpFindFileData=0x31e38c | out: lpFindFileData=0x31e38c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9b058100, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7d82ddc0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9b058100, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0xa00, dwReserved0=0x0, dwReserved1=0x0, cFileName="Flash.HUN", cAlternateFileName="")) returned 1 [0055.489] FindNextFileW (in: hFindFile=0x381d40, lpFindFileData=0x31e38c | out: lpFindFileData=0x31e38c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9b058100, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7d82ddc0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9b058100, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x2000, dwReserved0=0x0, dwReserved1=0x0, cFileName="Mcimpp.HUN", cAlternateFileName="")) returned 1 [0055.489] FindNextFileW (in: hFindFile=0x381d40, lpFindFileData=0x31e38c | out: lpFindFileData=0x31e38c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9b058100, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7d82ddc0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9b058100, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0xa00, dwReserved0=0x0, dwReserved1=0x0, cFileName="QuickTime.HUN", cAlternateFileName="QUICKT~1.HUN")) returned 1 [0055.489] FindNextFileW (in: hFindFile=0x381d40, lpFindFileData=0x31e38c | out: lpFindFileData=0x31e38c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9b058100, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7d82ddc0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9b058100, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0xa00, dwReserved0=0x0, dwReserved1=0x0, cFileName="WindowsMedia.HUN", cAlternateFileName="WINDOW~1.HUN")) returned 1 [0055.489] FindNextFileW (in: hFindFile=0x381d40, lpFindFileData=0x31e38c | out: lpFindFileData=0x31e38c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9b058100, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7d82ddc0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9b058100, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0xa00, dwReserved0=0x0, dwReserved1=0x0, cFileName="WindowsMedia.HUN", cAlternateFileName="WINDOW~1.HUN")) returned 0 [0055.489] FindClose (in: hFindFile=0x381d40 | out: hFindFile=0x381d40) returned 1 [0055.489] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e614) returned 1 [0055.489] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e620) returned 1 [0055.489] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e654) returned 1 [0055.490] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP_POL", nBufferLength=0x105, lpBuffer=0x31e15c, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP_POL", lpFilePart=0x0) returned 0x4b [0055.490] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP_POL\\", nBufferLength=0x105, lpBuffer=0x31e130, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP_POL\\", lpFilePart=0x0) returned 0x4c [0055.490] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP_POL\\*", lpFindFileData=0x31e37c | out: lpFindFileData=0x31e37c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7d82ddc0, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x7d82ddc0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x7d82ddc0, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x381d40 [0055.490] FindNextFileW (in: hFindFile=0x381d40, lpFindFileData=0x31e38c | out: lpFindFileData=0x31e38c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7d82ddc0, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x7d82ddc0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x7d82ddc0, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0055.490] FindNextFileW (in: hFindFile=0x381d40, lpFindFileData=0x31e38c | out: lpFindFileData=0x31e38c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9b058100, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7d82ddc0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9b058100, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0xa00, dwReserved0=0x0, dwReserved1=0x0, cFileName="Flash.POL", cAlternateFileName="")) returned 1 [0055.490] FindNextFileW (in: hFindFile=0x381d40, lpFindFileData=0x31e38c | out: lpFindFileData=0x31e38c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9b058100, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7d82ddc0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9b058100, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x2000, dwReserved0=0x0, dwReserved1=0x0, cFileName="Mcimpp.POL", cAlternateFileName="")) returned 1 [0055.490] FindNextFileW (in: hFindFile=0x381d40, lpFindFileData=0x31e38c | out: lpFindFileData=0x31e38c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9b058100, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7d82ddc0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9b058100, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0xa00, dwReserved0=0x0, dwReserved1=0x0, cFileName="QuickTime.POL", cAlternateFileName="QUICKT~1.POL")) returned 1 [0055.491] FindNextFileW (in: hFindFile=0x381d40, lpFindFileData=0x31e38c | out: lpFindFileData=0x31e38c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9b058100, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7d82ddc0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9b058100, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0xa00, dwReserved0=0x0, dwReserved1=0x0, cFileName="WindowsMedia.POL", cAlternateFileName="WINDOW~1.POL")) returned 1 [0055.491] FindNextFileW (in: hFindFile=0x381d40, lpFindFileData=0x31e38c | out: lpFindFileData=0x31e38c*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0055.491] FindClose (in: hFindFile=0x381d40 | out: hFindFile=0x381d40) returned 1 [0055.491] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e614) returned 1 [0055.491] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e620) returned 1 [0055.491] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e654) returned 1 [0055.491] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP_POL", nBufferLength=0x105, lpBuffer=0x31e15c, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP_POL", lpFilePart=0x0) returned 0x4b [0055.491] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP_POL\\", nBufferLength=0x105, lpBuffer=0x31e130, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP_POL\\", lpFilePart=0x0) returned 0x4c [0055.491] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP_POL\\*", lpFindFileData=0x31e37c | out: lpFindFileData=0x31e37c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7d82ddc0, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x7d82ddc0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x7d82ddc0, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x381d40 [0055.491] FindNextFileW (in: hFindFile=0x381d40, lpFindFileData=0x31e38c | out: lpFindFileData=0x31e38c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7d82ddc0, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x7d82ddc0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x7d82ddc0, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0055.491] FindNextFileW (in: hFindFile=0x381d40, lpFindFileData=0x31e38c | out: lpFindFileData=0x31e38c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9b058100, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7d82ddc0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9b058100, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0xa00, dwReserved0=0x0, dwReserved1=0x0, cFileName="Flash.POL", cAlternateFileName="")) returned 1 [0055.491] FindNextFileW (in: hFindFile=0x381d40, lpFindFileData=0x31e38c | out: lpFindFileData=0x31e38c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9b058100, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7d82ddc0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9b058100, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x2000, dwReserved0=0x0, dwReserved1=0x0, cFileName="Mcimpp.POL", cAlternateFileName="")) returned 1 [0055.491] FindNextFileW (in: hFindFile=0x381d40, lpFindFileData=0x31e38c | out: lpFindFileData=0x31e38c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9b058100, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7d82ddc0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9b058100, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0xa00, dwReserved0=0x0, dwReserved1=0x0, cFileName="QuickTime.POL", cAlternateFileName="QUICKT~1.POL")) returned 1 [0055.491] FindNextFileW (in: hFindFile=0x381d40, lpFindFileData=0x31e38c | out: lpFindFileData=0x31e38c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9b058100, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7d82ddc0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9b058100, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0xa00, dwReserved0=0x0, dwReserved1=0x0, cFileName="WindowsMedia.POL", cAlternateFileName="WINDOW~1.POL")) returned 1 [0055.491] FindNextFileW (in: hFindFile=0x381d40, lpFindFileData=0x31e38c | out: lpFindFileData=0x31e38c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9b058100, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7d82ddc0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9b058100, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0xa00, dwReserved0=0x0, dwReserved1=0x0, cFileName="WindowsMedia.POL", cAlternateFileName="WINDOW~1.POL")) returned 0 [0055.491] FindClose (in: hFindFile=0x381d40 | out: hFindFile=0x381d40) returned 1 [0055.491] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e614) returned 1 [0055.491] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e620) returned 1 [0055.491] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e654) returned 1 [0055.491] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP_RUM", nBufferLength=0x105, lpBuffer=0x31e15c, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP_RUM", lpFilePart=0x0) returned 0x4b [0055.491] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP_RUM\\", nBufferLength=0x105, lpBuffer=0x31e130, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP_RUM\\", lpFilePart=0x0) returned 0x4c [0055.491] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP_RUM\\*", lpFindFileData=0x31e37c | out: lpFindFileData=0x31e37c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7d807c60, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x7d82ddc0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x7d82ddc0, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x381d40 [0055.492] FindNextFileW (in: hFindFile=0x381d40, lpFindFileData=0x31e38c | out: lpFindFileData=0x31e38c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7d807c60, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x7d82ddc0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x7d82ddc0, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0055.492] FindNextFileW (in: hFindFile=0x381d40, lpFindFileData=0x31e38c | out: lpFindFileData=0x31e38c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9b058100, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7d807c60, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9b058100, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0xa00, dwReserved0=0x0, dwReserved1=0x0, cFileName="Flash.RUM", cAlternateFileName="")) returned 1 [0055.492] FindNextFileW (in: hFindFile=0x381d40, lpFindFileData=0x31e38c | out: lpFindFileData=0x31e38c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9b058100, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7d807c60, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9b058100, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x2000, dwReserved0=0x0, dwReserved1=0x0, cFileName="MCIMPP.RUM", cAlternateFileName="")) returned 1 [0055.492] FindNextFileW (in: hFindFile=0x381d40, lpFindFileData=0x31e38c | out: lpFindFileData=0x31e38c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9b058100, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7d82ddc0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9b058100, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0xa00, dwReserved0=0x0, dwReserved1=0x0, cFileName="QuickTime.RUM", cAlternateFileName="QUICKT~1.RUM")) returned 1 [0055.492] FindNextFileW (in: hFindFile=0x381d40, lpFindFileData=0x31e38c | out: lpFindFileData=0x31e38c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9b058100, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7d82ddc0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9b058100, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0xa00, dwReserved0=0x0, dwReserved1=0x0, cFileName="WindowsMedia.RUM", cAlternateFileName="WINDOW~1.RUM")) returned 1 [0055.492] FindNextFileW (in: hFindFile=0x381d40, lpFindFileData=0x31e38c | out: lpFindFileData=0x31e38c*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0055.492] FindClose (in: hFindFile=0x381d40 | out: hFindFile=0x381d40) returned 1 [0055.493] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e614) returned 1 [0055.493] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e620) returned 1 [0055.493] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e654) returned 1 [0055.493] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP_RUM", nBufferLength=0x105, lpBuffer=0x31e15c, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP_RUM", lpFilePart=0x0) returned 0x4b [0055.493] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP_RUM\\", nBufferLength=0x105, lpBuffer=0x31e130, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP_RUM\\", lpFilePart=0x0) returned 0x4c [0055.493] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP_RUM\\*", lpFindFileData=0x31e37c | out: lpFindFileData=0x31e37c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7d807c60, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x7d82ddc0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x7d82ddc0, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x381d40 [0055.493] FindNextFileW (in: hFindFile=0x381d40, lpFindFileData=0x31e38c | out: lpFindFileData=0x31e38c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7d807c60, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x7d82ddc0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x7d82ddc0, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0055.493] FindNextFileW (in: hFindFile=0x381d40, lpFindFileData=0x31e38c | out: lpFindFileData=0x31e38c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9b058100, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7d807c60, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9b058100, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0xa00, dwReserved0=0x0, dwReserved1=0x0, cFileName="Flash.RUM", cAlternateFileName="")) returned 1 [0055.493] FindNextFileW (in: hFindFile=0x381d40, lpFindFileData=0x31e38c | out: lpFindFileData=0x31e38c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9b058100, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7d807c60, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9b058100, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x2000, dwReserved0=0x0, dwReserved1=0x0, cFileName="MCIMPP.RUM", cAlternateFileName="")) returned 1 [0055.493] FindNextFileW (in: hFindFile=0x381d40, lpFindFileData=0x31e38c | out: lpFindFileData=0x31e38c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9b058100, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7d82ddc0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9b058100, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0xa00, dwReserved0=0x0, dwReserved1=0x0, cFileName="QuickTime.RUM", cAlternateFileName="QUICKT~1.RUM")) returned 1 [0055.493] FindNextFileW (in: hFindFile=0x381d40, lpFindFileData=0x31e38c | out: lpFindFileData=0x31e38c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9b058100, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7d82ddc0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9b058100, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0xa00, dwReserved0=0x0, dwReserved1=0x0, cFileName="WindowsMedia.RUM", cAlternateFileName="WINDOW~1.RUM")) returned 1 [0055.493] FindNextFileW (in: hFindFile=0x381d40, lpFindFileData=0x31e38c | out: lpFindFileData=0x31e38c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9b058100, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7d82ddc0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9b058100, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0xa00, dwReserved0=0x0, dwReserved1=0x0, cFileName="WindowsMedia.RUM", cAlternateFileName="WINDOW~1.RUM")) returned 0 [0055.493] FindClose (in: hFindFile=0x381d40 | out: hFindFile=0x381d40) returned 1 [0055.493] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e614) returned 1 [0055.493] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e620) returned 1 [0055.493] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e654) returned 1 [0055.493] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP_RUS", nBufferLength=0x105, lpBuffer=0x31e15c, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP_RUS", lpFilePart=0x0) returned 0x4b [0055.493] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP_RUS\\", nBufferLength=0x105, lpBuffer=0x31e130, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP_RUS\\", lpFilePart=0x0) returned 0x4c [0055.493] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP_RUS\\*", lpFindFileData=0x31e37c | out: lpFindFileData=0x31e37c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7d807c60, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x7d807c60, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x7d807c60, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x381d40 [0055.494] FindNextFileW (in: hFindFile=0x381d40, lpFindFileData=0x31e38c | out: lpFindFileData=0x31e38c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7d807c60, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x7d807c60, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x7d807c60, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0055.494] FindNextFileW (in: hFindFile=0x381d40, lpFindFileData=0x31e38c | out: lpFindFileData=0x31e38c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9b058100, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7d807c60, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9b058100, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0xa00, dwReserved0=0x0, dwReserved1=0x0, cFileName="Flash.RUS", cAlternateFileName="")) returned 1 [0055.494] FindNextFileW (in: hFindFile=0x381d40, lpFindFileData=0x31e38c | out: lpFindFileData=0x31e38c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9b058100, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7d807c60, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9b058100, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x2000, dwReserved0=0x0, dwReserved1=0x0, cFileName="MCIMPP.RUS", cAlternateFileName="")) returned 1 [0055.494] FindNextFileW (in: hFindFile=0x381d40, lpFindFileData=0x31e38c | out: lpFindFileData=0x31e38c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9b058100, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7d807c60, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9b058100, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0xa00, dwReserved0=0x0, dwReserved1=0x0, cFileName="QuickTime.RUS", cAlternateFileName="QUICKT~1.RUS")) returned 1 [0055.494] FindNextFileW (in: hFindFile=0x381d40, lpFindFileData=0x31e38c | out: lpFindFileData=0x31e38c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9b058100, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7d807c60, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9b058100, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0xa00, dwReserved0=0x0, dwReserved1=0x0, cFileName="WindowsMedia.RUS", cAlternateFileName="WINDOW~1.RUS")) returned 1 [0055.494] FindNextFileW (in: hFindFile=0x381d40, lpFindFileData=0x31e38c | out: lpFindFileData=0x31e38c*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0055.494] FindClose (in: hFindFile=0x381d40 | out: hFindFile=0x381d40) returned 1 [0055.494] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e614) returned 1 [0055.494] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e620) returned 1 [0055.494] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e654) returned 1 [0055.495] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP_RUS", nBufferLength=0x105, lpBuffer=0x31e15c, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP_RUS", lpFilePart=0x0) returned 0x4b [0055.495] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP_RUS\\", nBufferLength=0x105, lpBuffer=0x31e130, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP_RUS\\", lpFilePart=0x0) returned 0x4c [0055.495] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP_RUS\\*", lpFindFileData=0x31e37c | out: lpFindFileData=0x31e37c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7d807c60, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x7d807c60, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x7d807c60, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x381d40 [0055.495] FindNextFileW (in: hFindFile=0x381d40, lpFindFileData=0x31e38c | out: lpFindFileData=0x31e38c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7d807c60, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x7d807c60, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x7d807c60, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0055.495] FindNextFileW (in: hFindFile=0x381d40, lpFindFileData=0x31e38c | out: lpFindFileData=0x31e38c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9b058100, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7d807c60, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9b058100, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0xa00, dwReserved0=0x0, dwReserved1=0x0, cFileName="Flash.RUS", cAlternateFileName="")) returned 1 [0055.495] FindNextFileW (in: hFindFile=0x381d40, lpFindFileData=0x31e38c | out: lpFindFileData=0x31e38c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9b058100, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7d807c60, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9b058100, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x2000, dwReserved0=0x0, dwReserved1=0x0, cFileName="MCIMPP.RUS", cAlternateFileName="")) returned 1 [0055.495] FindNextFileW (in: hFindFile=0x381d40, lpFindFileData=0x31e38c | out: lpFindFileData=0x31e38c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9b058100, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7d807c60, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9b058100, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0xa00, dwReserved0=0x0, dwReserved1=0x0, cFileName="QuickTime.RUS", cAlternateFileName="QUICKT~1.RUS")) returned 1 [0055.495] FindNextFileW (in: hFindFile=0x381d40, lpFindFileData=0x31e38c | out: lpFindFileData=0x31e38c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9b058100, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7d807c60, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9b058100, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0xa00, dwReserved0=0x0, dwReserved1=0x0, cFileName="WindowsMedia.RUS", cAlternateFileName="WINDOW~1.RUS")) returned 1 [0055.495] FindNextFileW (in: hFindFile=0x381d40, lpFindFileData=0x31e38c | out: lpFindFileData=0x31e38c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9b058100, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7d807c60, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9b058100, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0xa00, dwReserved0=0x0, dwReserved1=0x0, cFileName="WindowsMedia.RUS", cAlternateFileName="WINDOW~1.RUS")) returned 0 [0055.495] FindClose (in: hFindFile=0x381d40 | out: hFindFile=0x381d40) returned 1 [0055.495] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e614) returned 1 [0055.495] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e620) returned 1 [0055.495] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e654) returned 1 [0055.495] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP_SKY", nBufferLength=0x105, lpBuffer=0x31e15c, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP_SKY", lpFilePart=0x0) returned 0x4b [0055.495] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP_SKY\\", nBufferLength=0x105, lpBuffer=0x31e130, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP_SKY\\", lpFilePart=0x0) returned 0x4c [0055.495] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP_SKY\\*", lpFindFileData=0x31e37c | out: lpFindFileData=0x31e37c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7d807c60, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x7d807c60, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x7d807c60, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x381d40 [0055.496] FindNextFileW (in: hFindFile=0x381d40, lpFindFileData=0x31e38c | out: lpFindFileData=0x31e38c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7d807c60, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x7d807c60, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x7d807c60, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0055.496] FindNextFileW (in: hFindFile=0x381d40, lpFindFileData=0x31e38c | out: lpFindFileData=0x31e38c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9c36ae00, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7d807c60, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9c36ae00, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0xa00, dwReserved0=0x0, dwReserved1=0x0, cFileName="Flash.SKY", cAlternateFileName="")) returned 1 [0055.496] FindNextFileW (in: hFindFile=0x381d40, lpFindFileData=0x31e38c | out: lpFindFileData=0x31e38c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9c36ae00, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7d807c60, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9c36ae00, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x2000, dwReserved0=0x0, dwReserved1=0x0, cFileName="Mcimpp.SKY", cAlternateFileName="")) returned 1 [0055.496] FindNextFileW (in: hFindFile=0x381d40, lpFindFileData=0x31e38c | out: lpFindFileData=0x31e38c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9c36ae00, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7d807c60, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9c36ae00, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0xa00, dwReserved0=0x0, dwReserved1=0x0, cFileName="QuickTime.SKY", cAlternateFileName="QUICKT~1.SKY")) returned 1 [0055.496] FindNextFileW (in: hFindFile=0x381d40, lpFindFileData=0x31e38c | out: lpFindFileData=0x31e38c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9c36ae00, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7d807c60, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9c36ae00, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0xa00, dwReserved0=0x0, dwReserved1=0x0, cFileName="WindowsMedia.SKY", cAlternateFileName="WINDOW~1.SKY")) returned 1 [0055.496] FindNextFileW (in: hFindFile=0x381d40, lpFindFileData=0x31e38c | out: lpFindFileData=0x31e38c*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0055.496] FindClose (in: hFindFile=0x381d40 | out: hFindFile=0x381d40) returned 1 [0055.496] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e614) returned 1 [0055.496] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e620) returned 1 [0055.496] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e654) returned 1 [0055.496] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP_SKY", nBufferLength=0x105, lpBuffer=0x31e15c, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP_SKY", lpFilePart=0x0) returned 0x4b [0055.496] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP_SKY\\", nBufferLength=0x105, lpBuffer=0x31e130, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP_SKY\\", lpFilePart=0x0) returned 0x4c [0055.497] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP_SKY\\*", lpFindFileData=0x31e37c | out: lpFindFileData=0x31e37c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7d807c60, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x7d807c60, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x7d807c60, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x381d40 [0055.497] FindNextFileW (in: hFindFile=0x381d40, lpFindFileData=0x31e38c | out: lpFindFileData=0x31e38c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7d807c60, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x7d807c60, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x7d807c60, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0055.497] FindNextFileW (in: hFindFile=0x381d40, lpFindFileData=0x31e38c | out: lpFindFileData=0x31e38c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9c36ae00, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7d807c60, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9c36ae00, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0xa00, dwReserved0=0x0, dwReserved1=0x0, cFileName="Flash.SKY", cAlternateFileName="")) returned 1 [0055.497] FindNextFileW (in: hFindFile=0x381d40, lpFindFileData=0x31e38c | out: lpFindFileData=0x31e38c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9c36ae00, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7d807c60, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9c36ae00, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x2000, dwReserved0=0x0, dwReserved1=0x0, cFileName="Mcimpp.SKY", cAlternateFileName="")) returned 1 [0055.497] FindNextFileW (in: hFindFile=0x381d40, lpFindFileData=0x31e38c | out: lpFindFileData=0x31e38c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9c36ae00, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7d807c60, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9c36ae00, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0xa00, dwReserved0=0x0, dwReserved1=0x0, cFileName="QuickTime.SKY", cAlternateFileName="QUICKT~1.SKY")) returned 1 [0055.497] FindNextFileW (in: hFindFile=0x381d40, lpFindFileData=0x31e38c | out: lpFindFileData=0x31e38c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9c36ae00, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7d807c60, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9c36ae00, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0xa00, dwReserved0=0x0, dwReserved1=0x0, cFileName="WindowsMedia.SKY", cAlternateFileName="WINDOW~1.SKY")) returned 1 [0055.497] FindClose (in: hFindFile=0x381d40 | out: hFindFile=0x381d40) returned 1 [0055.497] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e614) returned 1 [0055.497] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e620) returned 1 [0055.498] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e654) returned 1 [0055.498] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP_SLV", nBufferLength=0x105, lpBuffer=0x31e15c, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP_SLV", lpFilePart=0x0) returned 0x4b [0055.498] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP_SLV\\", nBufferLength=0x105, lpBuffer=0x31e130, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP_SLV\\", lpFilePart=0x0) returned 0x4c [0055.498] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP_SLV\\*", lpFindFileData=0x31e37c | out: lpFindFileData=0x31e37c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7d7e1b00, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x7d807c60, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x7d807c60, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x381d40 [0055.499] FindClose (in: hFindFile=0x381d40 | out: hFindFile=0x381d40) returned 1 [0055.499] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e614) returned 1 [0055.499] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e620) returned 1 [0055.499] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e654) returned 1 [0055.499] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP_SLV", nBufferLength=0x105, lpBuffer=0x31e15c, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP_SLV", lpFilePart=0x0) returned 0x4b [0055.499] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP_SLV\\", nBufferLength=0x105, lpBuffer=0x31e130, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP_SLV\\", lpFilePart=0x0) returned 0x4c [0055.499] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP_SLV\\*", lpFindFileData=0x31e37c | out: lpFindFileData=0x31e37c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7d7e1b00, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x7d807c60, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x7d807c60, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x381d40 [0055.499] FindClose (in: hFindFile=0x381d40 | out: hFindFile=0x381d40) returned 1 [0055.499] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e614) returned 1 [0055.499] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e620) returned 1 [0055.499] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e654) returned 1 [0055.499] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP_TUR", nBufferLength=0x105, lpBuffer=0x31e15c, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP_TUR", lpFilePart=0x0) returned 0x4b [0055.499] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP_TUR\\", nBufferLength=0x105, lpBuffer=0x31e130, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP_TUR\\", lpFilePart=0x0) returned 0x4c [0055.499] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP_TUR\\*", lpFindFileData=0x31e37c | out: lpFindFileData=0x31e37c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7d7e1b00, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x7d7e1b00, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x7d7e1b00, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x381d40 [0055.500] FindClose (in: hFindFile=0x381d40 | out: hFindFile=0x381d40) returned 1 [0055.500] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e614) returned 1 [0055.500] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e620) returned 1 [0055.500] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e654) returned 1 [0055.500] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP_TUR", nBufferLength=0x105, lpBuffer=0x31e15c, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP_TUR", lpFilePart=0x0) returned 0x4b [0055.500] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP_TUR\\", nBufferLength=0x105, lpBuffer=0x31e130, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP_TUR\\", lpFilePart=0x0) returned 0x4c [0055.500] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP_TUR\\*", lpFindFileData=0x31e37c | out: lpFindFileData=0x31e37c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7d7e1b00, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x7d7e1b00, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x7d7e1b00, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x381d40 [0055.500] FindClose (in: hFindFile=0x381d40 | out: hFindFile=0x381d40) returned 1 [0055.500] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e614) returned 1 [0055.500] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e620) returned 1 [0055.500] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e654) returned 1 [0055.500] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP_UKR", nBufferLength=0x105, lpBuffer=0x31e15c, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP_UKR", lpFilePart=0x0) returned 0x4b [0055.500] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP_UKR\\", nBufferLength=0x105, lpBuffer=0x31e130, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP_UKR\\", lpFilePart=0x0) returned 0x4c [0055.501] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP_UKR\\*", lpFindFileData=0x31e37c | out: lpFindFileData=0x31e37c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7d7e1b00, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x7d7e1b00, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x7d7e1b00, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x381d40 [0055.501] FindClose (in: hFindFile=0x381d40 | out: hFindFile=0x381d40) returned 1 [0055.501] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e614) returned 1 [0055.501] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e620) returned 1 [0055.501] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e654) returned 1 [0055.501] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP_UKR", nBufferLength=0x105, lpBuffer=0x31e15c, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP_UKR", lpFilePart=0x0) returned 0x4b [0055.501] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP_UKR\\", nBufferLength=0x105, lpBuffer=0x31e130, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP_UKR\\", lpFilePart=0x0) returned 0x4c [0055.502] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Multimedia\\MPP_UKR\\*", lpFindFileData=0x31e37c | out: lpFindFileData=0x31e37c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7d7e1b00, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x7d7e1b00, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x7d7e1b00, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x381d40 [0055.502] FindClose (in: hFindFile=0x381d40 | out: hFindFile=0x381d40) returned 1 [0055.502] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e614) returned 1 [0055.502] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e620) returned 1 [0055.502] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e744) returned 1 [0055.502] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins3d", nBufferLength=0x105, lpBuffer=0x31e24c, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins3d", lpFilePart=0x0) returned 0x3a [0055.502] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins3d\\", nBufferLength=0x105, lpBuffer=0x31e220, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins3d\\", lpFilePart=0x0) returned 0x3b [0055.502] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins3d\\*", lpFindFileData=0x31e46c | out: lpFindFileData=0x31e46c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7dbbfec0, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x7dc322e0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x7dc322e0, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x381d40 [0055.504] FindClose (in: hFindFile=0x381d40 | out: hFindFile=0x381d40) returned 1 [0055.505] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e704) returned 1 [0055.505] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e710) returned 1 [0055.505] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e744) returned 1 [0055.505] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins3d", nBufferLength=0x105, lpBuffer=0x31e24c, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins3d", lpFilePart=0x0) returned 0x3a [0055.505] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins3d\\", nBufferLength=0x105, lpBuffer=0x31e220, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins3d\\", lpFilePart=0x0) returned 0x3b [0055.505] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins3d\\*", lpFindFileData=0x31e46c | out: lpFindFileData=0x31e46c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7dbbfec0, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x7dc322e0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x7dc322e0, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x381d40 [0055.506] FindClose (in: hFindFile=0x381d40 | out: hFindFile=0x381d40) returned 1 [0055.506] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e704) returned 1 [0055.506] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e710) returned 1 [0055.506] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e6cc) returned 1 [0055.507] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins3d\\prc", nBufferLength=0x105, lpBuffer=0x31e1d4, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins3d\\prc", lpFilePart=0x0) returned 0x3e [0055.507] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins3d\\prc\\", nBufferLength=0x105, lpBuffer=0x31e1a8, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins3d\\prc\\", lpFilePart=0x0) returned 0x3f [0055.507] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins3d\\prc\\*", lpFindFileData=0x31e3f4 | out: lpFindFileData=0x31e3f4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7dbbfec0, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x7dbbfec0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x7dbbfec0, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x381d40 [0055.508] FindClose (in: hFindFile=0x381d40 | out: hFindFile=0x381d40) returned 1 [0055.508] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e68c) returned 1 [0055.508] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e698) returned 1 [0055.508] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e6cc) returned 1 [0055.508] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins3d\\prc", nBufferLength=0x105, lpBuffer=0x31e1d4, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins3d\\prc", lpFilePart=0x0) returned 0x3e [0055.508] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins3d\\prc\\", nBufferLength=0x105, lpBuffer=0x31e1a8, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins3d\\prc\\", lpFilePart=0x0) returned 0x3f [0055.508] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins3d\\prc\\*", lpFindFileData=0x31e3f4 | out: lpFindFileData=0x31e3f4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7dbbfec0, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x7dbbfec0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x7dbbfec0, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x381d40 [0055.509] FindClose (in: hFindFile=0x381d40 | out: hFindFile=0x381d40) returned 1 [0055.509] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e68c) returned 1 [0055.509] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e698) returned 1 [0055.509] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e744) returned 1 [0055.509] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Services", nBufferLength=0x105, lpBuffer=0x31e24c, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Services", lpFilePart=0x0) returned 0x38 [0055.509] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Services\\", nBufferLength=0x105, lpBuffer=0x31e220, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Services\\", lpFilePart=0x0) returned 0x39 [0055.509] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Services\\*", lpFindFileData=0x31e46c | out: lpFindFileData=0x31e46c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x820095e0, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x820095e0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x820095e0, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x381d40 [0055.510] FindClose (in: hFindFile=0x381d40 | out: hFindFile=0x381d40) returned 1 [0055.510] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e704) returned 1 [0055.510] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e710) returned 1 [0055.510] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e744) returned 1 [0055.510] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Services", nBufferLength=0x105, lpBuffer=0x31e24c, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Services", lpFilePart=0x0) returned 0x38 [0055.510] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Services\\", nBufferLength=0x105, lpBuffer=0x31e220, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Services\\", lpFilePart=0x0) returned 0x39 [0055.510] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Services\\*", lpFindFileData=0x31e46c | out: lpFindFileData=0x31e46c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x820095e0, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x820095e0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x820095e0, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x381d40 [0055.510] FindClose (in: hFindFile=0x381d40 | out: hFindFile=0x381d40) returned 1 [0055.510] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e704) returned 1 [0055.510] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e710) returned 1 [0055.510] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e744) returned 1 [0055.510] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\SPPlugins", nBufferLength=0x105, lpBuffer=0x31e24c, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\SPPlugins", lpFilePart=0x0) returned 0x39 [0055.510] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\SPPlugins\\", nBufferLength=0x105, lpBuffer=0x31e220, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\SPPlugins\\", lpFilePart=0x0) returned 0x3a [0055.510] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\SPPlugins\\*", lpFindFileData=0x31e46c | out: lpFindFileData=0x31e46c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7ffc0b80, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x7ffc0b80, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x7ffc0b80, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x381d40 [0055.511] FindClose (in: hFindFile=0x381d40 | out: hFindFile=0x381d40) returned 1 [0055.512] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e704) returned 1 [0055.512] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e710) returned 1 [0055.512] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e744) returned 1 [0055.512] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\SPPlugins", nBufferLength=0x105, lpBuffer=0x31e24c, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\SPPlugins", lpFilePart=0x0) returned 0x39 [0055.512] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\SPPlugins\\", nBufferLength=0x105, lpBuffer=0x31e220, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\SPPlugins\\", lpFilePart=0x0) returned 0x3a [0055.512] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\SPPlugins\\*", lpFindFileData=0x31e46c | out: lpFindFileData=0x31e46c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7ffc0b80, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x7ffc0b80, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x7ffc0b80, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x381d40 [0055.512] FindClose (in: hFindFile=0x381d40 | out: hFindFile=0x381d40) returned 1 [0055.512] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e704) returned 1 [0055.512] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e710) returned 1 [0055.512] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e744) returned 1 [0055.512] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Tracker", nBufferLength=0x105, lpBuffer=0x31e24c, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Tracker", lpFilePart=0x0) returned 0x37 [0055.512] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Tracker\\", nBufferLength=0x105, lpBuffer=0x31e220, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Tracker\\", lpFilePart=0x0) returned 0x38 [0055.512] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Tracker\\*", lpFindFileData=0x31e46c | out: lpFindFileData=0x31e46c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x801fc020, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x8026e440, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x8026e440, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x381d40 [0055.516] FindClose (in: hFindFile=0x381d40 | out: hFindFile=0x381d40) returned 1 [0055.517] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e704) returned 1 [0055.517] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e710) returned 1 [0055.517] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e744) returned 1 [0055.517] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Tracker", nBufferLength=0x105, lpBuffer=0x31e24c, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Tracker", lpFilePart=0x0) returned 0x37 [0055.517] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Tracker\\", nBufferLength=0x105, lpBuffer=0x31e220, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Tracker\\", lpFilePart=0x0) returned 0x38 [0055.517] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Tracker\\*", lpFindFileData=0x31e46c | out: lpFindFileData=0x31e46c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x801fc020, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x8026e440, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x8026e440, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x381d40 [0055.518] FindClose (in: hFindFile=0x381d40 | out: hFindFile=0x381d40) returned 1 [0055.519] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e704) returned 1 [0055.519] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e710) returned 1 [0055.519] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Tracker\\main.css", nBufferLength=0x105, lpBuffer=0x31e11c, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Tracker\\main.css", lpFilePart=0x0) returned 0x40 [0055.519] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e610) returned 1 [0055.519] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Tracker\\main.css" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\tracker\\main.css"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x274 [0055.521] GetFileType (hFile=0x274) returned 0x1 [0055.521] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e60c) returned 1 [0055.521] GetFileType (hFile=0x274) returned 0x1 [0055.521] GetFileSize (in: hFile=0x274, lpFileSizeHigh=0x31e718 | out: lpFileSizeHigh=0x31e718*=0x0) returned 0x2e9a [0055.521] ReadFile (in: hFile=0x274, lpBuffer=0x26bcbf0, nNumberOfBytesToRead=0x2e9a, lpNumberOfBytesRead=0x31e6c4, lpOverlapped=0x0 | out: lpBuffer=0x26bcbf0*, lpNumberOfBytesRead=0x31e6c4*=0x2e9a, lpOverlapped=0x0) returned 1 [0055.536] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Tracker\\main.css", nBufferLength=0x105, lpBuffer=0x31e108, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Tracker\\main.css", lpFilePart=0x0) returned 0x40 [0055.536] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e5fc) returned 1 [0055.536] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Tracker\\main.css" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\tracker\\main.css"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x274 [0055.537] GetFileType (hFile=0x274) returned 0x1 [0055.537] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e5f8) returned 1 [0055.537] GetFileType (hFile=0x274) returned 0x1 [0055.537] WriteFile (in: hFile=0x274, lpBuffer=0x27182f8*, nNumberOfBytesToWrite=0x2ea0, lpNumberOfBytesWritten=0x31e6b8, lpOverlapped=0x0 | out: lpBuffer=0x27182f8*, lpNumberOfBytesWritten=0x31e6b8*=0x2ea0, lpOverlapped=0x0) returned 1 [0055.538] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Tracker\\main.css", nBufferLength=0x105, lpBuffer=0x31e23c, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Tracker\\main.css", lpFilePart=0x0) returned 0x40 [0055.538] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Tracker\\main.css", nBufferLength=0x105, lpBuffer=0x31e23c, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Tracker\\main.css", lpFilePart=0x0) returned 0x40 [0055.538] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e69c) returned 1 [0055.538] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Tracker\\main.css" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\tracker\\main.css"), fInfoLevelId=0x0, lpFileInformation=0x31e718 | out: lpFileInformation=0x31e718*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x93de7300, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x801fc020, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x48f2400, ftLastWriteTime.dwHighDateTime=0x1d6eb7f, nFileSizeHigh=0x0, nFileSizeLow=0x2ea0)) returned 1 [0055.538] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e698) returned 1 [0055.538] MoveFileW (lpExistingFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Tracker\\main.css" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\tracker\\main.css"), lpNewFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Tracker\\main.css" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\tracker\\main.css")) returned 1 [0055.539] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e7bc) returned 1 [0055.539] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource", nBufferLength=0x105, lpBuffer=0x31e2c4, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource", lpFilePart=0x0) returned 0x31 [0055.539] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\", nBufferLength=0x105, lpBuffer=0x31e298, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\", lpFilePart=0x0) returned 0x32 [0055.539] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\*", lpFindFileData=0x31e4e4 | out: lpFindFileData=0x31e4e4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7cfb2f60, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x833608a0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x833608a0, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x382080 [0055.541] FindClose (in: hFindFile=0x382080 | out: hFindFile=0x382080) returned 1 [0055.542] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e77c) returned 1 [0055.542] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e788) returned 1 [0055.542] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e7bc) returned 1 [0055.542] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource", nBufferLength=0x105, lpBuffer=0x31e2c4, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource", lpFilePart=0x0) returned 0x31 [0055.542] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\", nBufferLength=0x105, lpBuffer=0x31e298, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\", lpFilePart=0x0) returned 0x32 [0055.542] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\*", lpFindFileData=0x31e4e4 | out: lpFindFileData=0x31e4e4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7cfb2f60, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x833608a0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x833608a0, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x382080 [0055.543] FindClose (in: hFindFile=0x382080 | out: hFindFile=0x382080) returned 1 [0055.543] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e77c) returned 1 [0055.543] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e788) returned 1 [0055.543] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\ENUtxt.pdf", nBufferLength=0x105, lpBuffer=0x31e194, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\ENUtxt.pdf", lpFilePart=0x0) returned 0x3c [0055.544] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e688) returned 1 [0055.544] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\ENUtxt.pdf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\enutxt.pdf"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x274 [0055.545] GetFileType (hFile=0x274) returned 0x1 [0055.545] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e684) returned 1 [0055.545] GetFileType (hFile=0x274) returned 0x1 [0055.545] GetFileSize (in: hFile=0x274, lpFileSizeHigh=0x31e790 | out: lpFileSizeHigh=0x31e790*=0x0) returned 0x1d9e [0055.545] ReadFile (in: hFile=0x274, lpBuffer=0x271dca0, nNumberOfBytesToRead=0x1d9e, lpNumberOfBytesRead=0x31e73c, lpOverlapped=0x0 | out: lpBuffer=0x271dca0*, lpNumberOfBytesRead=0x31e73c*=0x1d9e, lpOverlapped=0x0) returned 1 [0055.561] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\ENUtxt.pdf", nBufferLength=0x105, lpBuffer=0x31e180, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\ENUtxt.pdf", lpFilePart=0x0) returned 0x3c [0055.561] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e674) returned 1 [0055.561] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\ENUtxt.pdf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\enutxt.pdf"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x274 [0055.561] GetFileType (hFile=0x274) returned 0x1 [0055.562] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e670) returned 1 [0055.562] GetFileType (hFile=0x274) returned 0x1 [0055.562] WriteFile (in: hFile=0x274, lpBuffer=0x2773ea8*, nNumberOfBytesToWrite=0x1da0, lpNumberOfBytesWritten=0x31e730, lpOverlapped=0x0 | out: lpBuffer=0x2773ea8*, lpNumberOfBytesWritten=0x31e730*=0x1da0, lpOverlapped=0x0) returned 1 [0055.562] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\ENUtxt.pdf", nBufferLength=0x105, lpBuffer=0x31e2b4, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\ENUtxt.pdf", lpFilePart=0x0) returned 0x3c [0055.563] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\ENUtxt.pdf", nBufferLength=0x105, lpBuffer=0x31e2b4, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\ENUtxt.pdf", lpFilePart=0x0) returned 0x3c [0055.563] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e714) returned 1 [0055.563] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\ENUtxt.pdf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\enutxt.pdf"), fInfoLevelId=0x0, lpFileInformation=0x31e790 | out: lpFileInformation=0x31e790*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x950fa000, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7feb61e0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x4918560, ftLastWriteTime.dwHighDateTime=0x1d6eb7f, nFileSizeHigh=0x0, nFileSizeLow=0x1da0)) returned 1 [0055.563] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e710) returned 1 [0055.563] MoveFileW (lpExistingFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\ENUtxt.pdf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\enutxt.pdf"), lpNewFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\ENUtxt.pdf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\enutxt.pdf")) returned 1 [0055.563] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e744) returned 1 [0055.563] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\CIDFont", nBufferLength=0x105, lpBuffer=0x31e24c, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\CIDFont", lpFilePart=0x0) returned 0x39 [0055.563] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\CIDFont\\", nBufferLength=0x105, lpBuffer=0x31e220, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\CIDFont\\", lpFilePart=0x0) returned 0x3a [0055.563] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\CIDFont\\*", lpFindFileData=0x31e46c | out: lpFindFileData=0x31e46c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7f934f00, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x80163aa0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x80163aa0, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x381c80 [0055.565] FindClose (in: hFindFile=0x381c80 | out: hFindFile=0x381c80) returned 1 [0055.566] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e704) returned 1 [0055.566] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e710) returned 1 [0055.566] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e744) returned 1 [0055.566] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\CIDFont", nBufferLength=0x105, lpBuffer=0x31e24c, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\CIDFont", lpFilePart=0x0) returned 0x39 [0055.566] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\CIDFont\\", nBufferLength=0x105, lpBuffer=0x31e220, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\CIDFont\\", lpFilePart=0x0) returned 0x3a [0055.566] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\CIDFont\\*", lpFindFileData=0x31e46c | out: lpFindFileData=0x31e46c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7f934f00, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x80163aa0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x80163aa0, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x381c80 [0055.567] FindClose (in: hFindFile=0x381c80 | out: hFindFile=0x381c80) returned 1 [0055.568] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e704) returned 1 [0055.568] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e710) returned 1 [0055.568] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e744) returned 1 [0055.568] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\CMap", nBufferLength=0x105, lpBuffer=0x31e24c, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\CMap", lpFilePart=0x0) returned 0x36 [0055.568] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\CMap\\", nBufferLength=0x105, lpBuffer=0x31e220, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\CMap\\", lpFilePart=0x0) returned 0x37 [0055.568] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\CMap\\*", lpFindFileData=0x31e46c | out: lpFindFileData=0x31e46c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7f556b40, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x800a53c0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x800a53c0, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x381c80 [0055.577] FindClose (in: hFindFile=0x381c80 | out: hFindFile=0x381c80) returned 1 [0055.578] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e704) returned 1 [0055.578] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e710) returned 1 [0055.578] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e744) returned 1 [0055.578] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\CMap", nBufferLength=0x105, lpBuffer=0x31e24c, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\CMap", lpFilePart=0x0) returned 0x36 [0055.578] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\CMap\\", nBufferLength=0x105, lpBuffer=0x31e220, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\CMap\\", lpFilePart=0x0) returned 0x37 [0055.578] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\CMap\\*", lpFindFileData=0x31e46c | out: lpFindFileData=0x31e46c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7f556b40, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x800a53c0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x800a53c0, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x381c80 [0055.580] FindClose (in: hFindFile=0x381c80 | out: hFindFile=0x381c80) returned 1 [0055.580] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e704) returned 1 [0055.580] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e710) returned 1 [0055.581] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e744) returned 1 [0055.581] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Font", nBufferLength=0x105, lpBuffer=0x31e24c, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Font", lpFilePart=0x0) returned 0x36 [0055.581] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Font\\", nBufferLength=0x105, lpBuffer=0x31e220, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Font\\", lpFilePart=0x0) returned 0x37 [0055.581] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Font\\*", lpFindFileData=0x31e46c | out: lpFindFileData=0x31e46c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7f556b40, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x83680580, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x83680580, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x381c80 [0055.584] FindClose (in: hFindFile=0x381c80 | out: hFindFile=0x381c80) returned 1 [0055.585] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e704) returned 1 [0055.585] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e710) returned 1 [0055.585] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e744) returned 1 [0055.585] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Font", nBufferLength=0x105, lpBuffer=0x31e24c, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Font", lpFilePart=0x0) returned 0x36 [0055.585] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Font\\", nBufferLength=0x105, lpBuffer=0x31e220, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Font\\", lpFilePart=0x0) returned 0x37 [0055.585] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Font\\*", lpFindFileData=0x31e46c | out: lpFindFileData=0x31e46c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7f556b40, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x83680580, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x83680580, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x381c80 [0055.586] FindClose (in: hFindFile=0x381c80 | out: hFindFile=0x381c80) returned 1 [0055.587] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e704) returned 1 [0055.587] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e710) returned 1 [0055.587] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e6cc) returned 1 [0055.587] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Font\\PFM", nBufferLength=0x105, lpBuffer=0x31e1d4, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Font\\PFM", lpFilePart=0x0) returned 0x3a [0055.587] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Font\\PFM\\", nBufferLength=0x105, lpBuffer=0x31e1a8, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Font\\PFM\\", lpFilePart=0x0) returned 0x3b [0055.587] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Font\\PFM\\*", lpFindFileData=0x31e3f4 | out: lpFindFileData=0x31e3f4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7f556b40, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x7f556b40, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x7f556b40, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x381c80 [0055.588] FindClose (in: hFindFile=0x381c80 | out: hFindFile=0x381c80) returned 1 [0055.588] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e68c) returned 1 [0055.588] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e698) returned 1 [0055.588] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e6cc) returned 1 [0055.588] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Font\\PFM", nBufferLength=0x105, lpBuffer=0x31e1d4, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Font\\PFM", lpFilePart=0x0) returned 0x3a [0055.588] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Font\\PFM\\", nBufferLength=0x105, lpBuffer=0x31e1a8, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Font\\PFM\\", lpFilePart=0x0) returned 0x3b [0055.588] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Font\\PFM\\*", lpFindFileData=0x31e3f4 | out: lpFindFileData=0x31e3f4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7f556b40, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x7f556b40, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x7f556b40, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x381c80 [0055.588] FindClose (in: hFindFile=0x381c80 | out: hFindFile=0x381c80) returned 1 [0055.588] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e68c) returned 1 [0055.588] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e698) returned 1 [0055.588] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e744) returned 1 [0055.588] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics", nBufferLength=0x105, lpBuffer=0x31e24c, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics", lpFilePart=0x0) returned 0x3d [0055.588] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\", nBufferLength=0x105, lpBuffer=0x31e220, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\", lpFilePart=0x0) returned 0x3e [0055.588] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\*", lpFindFileData=0x31e46c | out: lpFindFileData=0x31e46c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7cfb2f60, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x7dcf09c0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x7dcf09c0, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x381c80 [0055.589] FindClose (in: hFindFile=0x381c80 | out: hFindFile=0x381c80) returned 1 [0055.589] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e704) returned 1 [0055.589] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e710) returned 1 [0055.589] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e744) returned 1 [0055.589] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics", nBufferLength=0x105, lpBuffer=0x31e24c, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics", lpFilePart=0x0) returned 0x3d [0055.589] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\", nBufferLength=0x105, lpBuffer=0x31e220, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\", lpFilePart=0x0) returned 0x3e [0055.589] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\*", lpFindFileData=0x31e46c | out: lpFindFileData=0x31e46c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7cfb2f60, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x7dcf09c0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x7dcf09c0, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x381c80 [0055.589] FindClose (in: hFindFile=0x381c80 | out: hFindFile=0x381c80) returned 1 [0055.589] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e704) returned 1 [0055.589] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e710) returned 1 [0055.589] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e6cc) returned 1 [0055.589] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2", nBufferLength=0x105, lpBuffer=0x31e1d4, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2", lpFilePart=0x0) returned 0x4c [0055.589] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\", nBufferLength=0x105, lpBuffer=0x31e1a8, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\", lpFilePart=0x0) returned 0x4d [0055.589] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\*", lpFindFileData=0x31e3f4 | out: lpFindFileData=0x31e3f4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7dcf09c0, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x7f472300, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x7f472300, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x381c80 [0055.602] FindClose (in: hFindFile=0x381c80 | out: hFindFile=0x381c80) returned 1 [0055.603] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e68c) returned 1 [0055.603] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e698) returned 1 [0055.603] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e6cc) returned 1 [0055.603] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2", nBufferLength=0x105, lpBuffer=0x31e1d4, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2", lpFilePart=0x0) returned 0x4c [0055.603] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\", nBufferLength=0x105, lpBuffer=0x31e1a8, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\", lpFilePart=0x0) returned 0x4d [0055.603] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\*", lpFindFileData=0x31e3f4 | out: lpFindFileData=0x31e3f4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7dcf09c0, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x7f472300, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x7f472300, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x381c80 [0055.605] FindClose (in: hFindFile=0x381c80 | out: hFindFile=0x381c80) returned 1 [0055.606] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e68c) returned 1 [0055.606] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e698) returned 1 [0055.606] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.ar.txt", nBufferLength=0x105, lpBuffer=0x31e0a4, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.ar.txt", lpFilePart=0x0) returned 0x68 [0055.606] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e598) returned 1 [0055.606] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.ar.txt" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.ar.txt"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x274 [0055.608] GetFileType (hFile=0x274) returned 0x1 [0055.608] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e594) returned 1 [0055.608] GetFileType (hFile=0x274) returned 0x1 [0055.608] GetFileSize (in: hFile=0x274, lpFileSizeHigh=0x31e6a0 | out: lpFileSizeHigh=0x31e6a0*=0x0) returned 0x6c88 [0055.608] ReadFile (in: hFile=0x274, lpBuffer=0x27ca9d8, nNumberOfBytesToRead=0x6c88, lpNumberOfBytesRead=0x31e64c, lpOverlapped=0x0 | out: lpBuffer=0x27ca9d8*, lpNumberOfBytesRead=0x31e64c*=0x6c88, lpOverlapped=0x0) returned 1 [0055.625] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.ar.txt", nBufferLength=0x105, lpBuffer=0x31e090, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.ar.txt", lpFilePart=0x0) returned 0x68 [0055.625] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e584) returned 1 [0055.625] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.ar.txt" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.ar.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x274 [0055.626] GetFileType (hFile=0x274) returned 0x1 [0055.626] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e580) returned 1 [0055.626] GetFileType (hFile=0x274) returned 0x1 [0055.626] WriteFile (in: hFile=0x274, lpBuffer=0x264c63c*, nNumberOfBytesToWrite=0x6c90, lpNumberOfBytesWritten=0x31e640, lpOverlapped=0x0 | out: lpBuffer=0x264c63c*, lpNumberOfBytesWritten=0x31e640*=0x6c90, lpOverlapped=0x0) returned 1 [0055.627] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.ar.txt", nBufferLength=0x105, lpBuffer=0x31e1c4, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.ar.txt", lpFilePart=0x0) returned 0x68 [0055.627] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.ar.txt", nBufferLength=0x105, lpBuffer=0x31e1c4, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.ar.txt", lpFilePart=0x0) returned 0x68 [0055.627] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e624) returned 1 [0055.628] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.ar.txt" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.ar.txt"), fInfoLevelId=0x0, lpFileInformation=0x31e6a0 | out: lpFileInformation=0x31e6a0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x93de7300, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7f472300, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x49b0ae0, ftLastWriteTime.dwHighDateTime=0x1d6eb7f, nFileSizeHigh=0x0, nFileSizeLow=0x6c90)) returned 1 [0055.628] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e620) returned 1 [0055.628] MoveFileW (lpExistingFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.ar.txt" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.ar.txt"), lpNewFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.ar.txt" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.ar.txt")) returned 1 [0055.628] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.ar_AE.txt", nBufferLength=0x105, lpBuffer=0x31e0a4, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.ar_AE.txt", lpFilePart=0x0) returned 0x6b [0055.628] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e598) returned 1 [0055.628] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.ar_AE.txt" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.ar_ae.txt"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x274 [0055.629] GetFileType (hFile=0x274) returned 0x1 [0055.629] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e594) returned 1 [0055.629] GetFileType (hFile=0x274) returned 0x1 [0055.629] GetFileSize (in: hFile=0x274, lpFileSizeHigh=0x31e6a0 | out: lpFileSizeHigh=0x31e6a0*=0x0) returned 0x6c88 [0055.629] ReadFile (in: hFile=0x274, lpBuffer=0x26537bc, nNumberOfBytesToRead=0x6c88, lpNumberOfBytesRead=0x31e64c, lpOverlapped=0x0 | out: lpBuffer=0x26537bc*, lpNumberOfBytesRead=0x31e64c*=0x6c88, lpOverlapped=0x0) returned 1 [0055.645] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.ar_AE.txt", nBufferLength=0x105, lpBuffer=0x31e090, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.ar_AE.txt", lpFilePart=0x0) returned 0x6b [0055.645] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e584) returned 1 [0055.645] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.ar_AE.txt" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.ar_ae.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x274 [0055.646] GetFileType (hFile=0x274) returned 0x1 [0055.646] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e580) returned 1 [0055.646] GetFileType (hFile=0x274) returned 0x1 [0055.646] WriteFile (in: hFile=0x274, lpBuffer=0x26c25cc*, nNumberOfBytesToWrite=0x6c90, lpNumberOfBytesWritten=0x31e640, lpOverlapped=0x0 | out: lpBuffer=0x26c25cc*, lpNumberOfBytesWritten=0x31e640*=0x6c90, lpOverlapped=0x0) returned 1 [0055.647] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.ar_AE.txt", nBufferLength=0x105, lpBuffer=0x31e1c4, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.ar_AE.txt", lpFilePart=0x0) returned 0x6b [0055.647] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.ar_AE.txt", nBufferLength=0x105, lpBuffer=0x31e1c4, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.ar_AE.txt", lpFilePart=0x0) returned 0x6b [0055.647] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e624) returned 1 [0055.647] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.ar_AE.txt" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.ar_ae.txt"), fInfoLevelId=0x0, lpFileInformation=0x31e6a0 | out: lpFileInformation=0x31e6a0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x93de7300, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7f472300, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x49fcda0, ftLastWriteTime.dwHighDateTime=0x1d6eb7f, nFileSizeHigh=0x0, nFileSizeLow=0x6c90)) returned 1 [0055.647] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e620) returned 1 [0055.647] MoveFileW (lpExistingFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.ar_AE.txt" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.ar_ae.txt"), lpNewFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.ar_AE.txt" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.ar_ae.txt")) returned 1 [0055.648] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.ar_BH.txt", nBufferLength=0x105, lpBuffer=0x31e0a4, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.ar_BH.txt", lpFilePart=0x0) returned 0x6b [0055.648] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e598) returned 1 [0055.648] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.ar_BH.txt" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.ar_bh.txt"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x274 [0055.648] GetFileType (hFile=0x274) returned 0x1 [0055.648] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e594) returned 1 [0055.648] GetFileType (hFile=0x274) returned 0x1 [0055.648] GetFileSize (in: hFile=0x274, lpFileSizeHigh=0x31e6a0 | out: lpFileSizeHigh=0x31e6a0*=0x0) returned 0x6c96 [0055.648] ReadFile (in: hFile=0x274, lpBuffer=0x26c9760, nNumberOfBytesToRead=0x6c96, lpNumberOfBytesRead=0x31e64c, lpOverlapped=0x0 | out: lpBuffer=0x26c9760*, lpNumberOfBytesRead=0x31e64c*=0x6c96, lpOverlapped=0x0) returned 1 [0055.665] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.ar_BH.txt", nBufferLength=0x105, lpBuffer=0x31e090, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.ar_BH.txt", lpFilePart=0x0) returned 0x6b [0055.665] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e584) returned 1 [0055.665] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.ar_BH.txt" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.ar_bh.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x274 [0055.666] GetFileType (hFile=0x274) returned 0x1 [0055.666] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e580) returned 1 [0055.666] GetFileType (hFile=0x274) returned 0x1 [0055.666] WriteFile (in: hFile=0x274, lpBuffer=0x2738468*, nNumberOfBytesToWrite=0x6ca0, lpNumberOfBytesWritten=0x31e640, lpOverlapped=0x0 | out: lpBuffer=0x2738468*, lpNumberOfBytesWritten=0x31e640*=0x6ca0, lpOverlapped=0x0) returned 1 [0055.667] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.ar_BH.txt", nBufferLength=0x105, lpBuffer=0x31e1c4, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.ar_BH.txt", lpFilePart=0x0) returned 0x6b [0055.667] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.ar_BH.txt", nBufferLength=0x105, lpBuffer=0x31e1c4, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.ar_BH.txt", lpFilePart=0x0) returned 0x6b [0055.667] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e624) returned 1 [0055.667] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.ar_BH.txt" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.ar_bh.txt"), fInfoLevelId=0x0, lpFileInformation=0x31e6a0 | out: lpFileInformation=0x31e6a0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x93de7300, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7f472300, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x4a22f00, ftLastWriteTime.dwHighDateTime=0x1d6eb7f, nFileSizeHigh=0x0, nFileSizeLow=0x6ca0)) returned 1 [0055.668] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e620) returned 1 [0055.668] MoveFileW (lpExistingFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.ar_BH.txt" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.ar_bh.txt"), lpNewFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.ar_BH.txt" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.ar_bh.txt")) returned 1 [0055.668] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.ar_DZ.txt", nBufferLength=0x105, lpBuffer=0x31e0a4, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.ar_DZ.txt", lpFilePart=0x0) returned 0x6b [0055.668] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e598) returned 1 [0055.668] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.ar_DZ.txt" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.ar_dz.txt"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x274 [0055.668] GetFileType (hFile=0x274) returned 0x1 [0055.668] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e594) returned 1 [0055.668] GetFileType (hFile=0x274) returned 0x1 [0055.668] GetFileSize (in: hFile=0x274, lpFileSizeHigh=0x31e6a0 | out: lpFileSizeHigh=0x31e6a0*=0x0) returned 0x6c96 [0055.668] ReadFile (in: hFile=0x274, lpBuffer=0x273f60c, nNumberOfBytesToRead=0x6c96, lpNumberOfBytesRead=0x31e64c, lpOverlapped=0x0 | out: lpBuffer=0x273f60c*, lpNumberOfBytesRead=0x31e64c*=0x6c96, lpOverlapped=0x0) returned 1 [0055.684] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.ar_DZ.txt", nBufferLength=0x105, lpBuffer=0x31e090, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.ar_DZ.txt", lpFilePart=0x0) returned 0x6b [0055.684] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e584) returned 1 [0055.684] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.ar_DZ.txt" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.ar_dz.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x274 [0055.685] GetFileType (hFile=0x274) returned 0x1 [0055.685] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e580) returned 1 [0055.685] GetFileType (hFile=0x274) returned 0x1 [0055.685] WriteFile (in: hFile=0x274, lpBuffer=0x27ae314*, nNumberOfBytesToWrite=0x6ca0, lpNumberOfBytesWritten=0x31e640, lpOverlapped=0x0 | out: lpBuffer=0x27ae314*, lpNumberOfBytesWritten=0x31e640*=0x6ca0, lpOverlapped=0x0) returned 1 [0055.687] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.ar_DZ.txt", nBufferLength=0x105, lpBuffer=0x31e1c4, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.ar_DZ.txt", lpFilePart=0x0) returned 0x6b [0055.687] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.ar_DZ.txt", nBufferLength=0x105, lpBuffer=0x31e1c4, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.ar_DZ.txt", lpFilePart=0x0) returned 0x6b [0055.687] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e624) returned 1 [0055.687] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.ar_DZ.txt" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.ar_dz.txt"), fInfoLevelId=0x0, lpFileInformation=0x31e6a0 | out: lpFileInformation=0x31e6a0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x950fa000, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7f472300, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x4a49060, ftLastWriteTime.dwHighDateTime=0x1d6eb7f, nFileSizeHigh=0x0, nFileSizeLow=0x6ca0)) returned 1 [0055.687] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e620) returned 1 [0055.687] MoveFileW (lpExistingFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.ar_DZ.txt" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.ar_dz.txt"), lpNewFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.ar_DZ.txt" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.ar_dz.txt")) returned 1 [0055.687] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.ar_EG.txt", nBufferLength=0x105, lpBuffer=0x31e0a4, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.ar_EG.txt", lpFilePart=0x0) returned 0x6b [0055.687] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e598) returned 1 [0055.687] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.ar_EG.txt" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.ar_eg.txt"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x274 [0055.687] GetFileType (hFile=0x274) returned 0x1 [0055.688] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e594) returned 1 [0055.688] GetFileType (hFile=0x274) returned 0x1 [0055.688] GetFileSize (in: hFile=0x274, lpFileSizeHigh=0x31e6a0 | out: lpFileSizeHigh=0x31e6a0*=0x0) returned 0x6c96 [0055.688] ReadFile (in: hFile=0x274, lpBuffer=0x27b54b8, nNumberOfBytesToRead=0x6c96, lpNumberOfBytesRead=0x31e64c, lpOverlapped=0x0 | out: lpBuffer=0x27b54b8*, lpNumberOfBytesRead=0x31e64c*=0x6c96, lpOverlapped=0x0) returned 1 [0055.703] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.ar_EG.txt", nBufferLength=0x105, lpBuffer=0x31e090, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.ar_EG.txt", lpFilePart=0x0) returned 0x6b [0055.703] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e584) returned 1 [0055.703] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.ar_EG.txt" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.ar_eg.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x274 [0055.704] GetFileType (hFile=0x274) returned 0x1 [0055.704] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e580) returned 1 [0055.704] GetFileType (hFile=0x274) returned 0x1 [0055.704] WriteFile (in: hFile=0x274, lpBuffer=0x28241c0*, nNumberOfBytesToWrite=0x6ca0, lpNumberOfBytesWritten=0x31e640, lpOverlapped=0x0 | out: lpBuffer=0x28241c0*, lpNumberOfBytesWritten=0x31e640*=0x6ca0, lpOverlapped=0x0) returned 1 [0055.706] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.ar_EG.txt", nBufferLength=0x105, lpBuffer=0x31e1c4, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.ar_EG.txt", lpFilePart=0x0) returned 0x6b [0055.706] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.ar_EG.txt", nBufferLength=0x105, lpBuffer=0x31e1c4, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.ar_EG.txt", lpFilePart=0x0) returned 0x6b [0055.706] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e624) returned 1 [0055.706] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.ar_EG.txt" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.ar_eg.txt"), fInfoLevelId=0x0, lpFileInformation=0x31e6a0 | out: lpFileInformation=0x31e6a0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x93de7300, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7f472300, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x4a6f1c0, ftLastWriteTime.dwHighDateTime=0x1d6eb7f, nFileSizeHigh=0x0, nFileSizeLow=0x6ca0)) returned 1 [0055.706] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e620) returned 1 [0055.706] MoveFileW (lpExistingFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.ar_EG.txt" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.ar_eg.txt"), lpNewFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.ar_EG.txt" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.ar_eg.txt")) returned 1 [0055.706] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.ar_IN.txt", nBufferLength=0x105, lpBuffer=0x31e0a4, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.ar_IN.txt", lpFilePart=0x0) returned 0x6b [0055.706] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e598) returned 1 [0055.706] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.ar_IN.txt" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.ar_in.txt"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x274 [0055.707] GetFileType (hFile=0x274) returned 0x1 [0055.707] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e594) returned 1 [0055.707] GetFileType (hFile=0x274) returned 0x1 [0055.707] GetFileSize (in: hFile=0x274, lpFileSizeHigh=0x31e6a0 | out: lpFileSizeHigh=0x31e6a0*=0x0) returned 0x6c96 [0055.707] ReadFile (in: hFile=0x274, lpBuffer=0x282b364, nNumberOfBytesToRead=0x6c96, lpNumberOfBytesRead=0x31e64c, lpOverlapped=0x0 | out: lpBuffer=0x282b364*, lpNumberOfBytesRead=0x31e64c*=0x6c96, lpOverlapped=0x0) returned 1 [0055.725] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.ar_IN.txt", nBufferLength=0x105, lpBuffer=0x31e090, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.ar_IN.txt", lpFilePart=0x0) returned 0x6b [0055.725] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e584) returned 1 [0055.725] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.ar_IN.txt" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.ar_in.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x274 [0055.726] GetFileType (hFile=0x274) returned 0x1 [0055.726] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e580) returned 1 [0055.726] GetFileType (hFile=0x274) returned 0x1 [0055.726] WriteFile (in: hFile=0x274, lpBuffer=0x26a1128*, nNumberOfBytesToWrite=0x6ca0, lpNumberOfBytesWritten=0x31e640, lpOverlapped=0x0 | out: lpBuffer=0x26a1128*, lpNumberOfBytesWritten=0x31e640*=0x6ca0, lpOverlapped=0x0) returned 1 [0055.727] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.ar_IN.txt", nBufferLength=0x105, lpBuffer=0x31e1c4, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.ar_IN.txt", lpFilePart=0x0) returned 0x6b [0055.727] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.ar_IN.txt", nBufferLength=0x105, lpBuffer=0x31e1c4, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.ar_IN.txt", lpFilePart=0x0) returned 0x6b [0055.727] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e624) returned 1 [0055.727] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.ar_IN.txt" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.ar_in.txt"), fInfoLevelId=0x0, lpFileInformation=0x31e6a0 | out: lpFileInformation=0x31e6a0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x93de7300, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7f472300, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x4abb480, ftLastWriteTime.dwHighDateTime=0x1d6eb7f, nFileSizeHigh=0x0, nFileSizeLow=0x6ca0)) returned 1 [0055.727] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e620) returned 1 [0055.727] MoveFileW (lpExistingFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.ar_IN.txt" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.ar_in.txt"), lpNewFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.ar_IN.txt" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.ar_in.txt")) returned 1 [0055.727] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.ar_IQ.txt", nBufferLength=0x105, lpBuffer=0x31e0a4, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.ar_IQ.txt", lpFilePart=0x0) returned 0x6b [0055.728] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e598) returned 1 [0055.728] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.ar_IQ.txt" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.ar_iq.txt"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x274 [0055.728] GetFileType (hFile=0x274) returned 0x1 [0055.728] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e594) returned 1 [0055.728] GetFileType (hFile=0x274) returned 0x1 [0055.728] GetFileSize (in: hFile=0x274, lpFileSizeHigh=0x31e6a0 | out: lpFileSizeHigh=0x31e6a0*=0x0) returned 0x6c96 [0055.728] ReadFile (in: hFile=0x274, lpBuffer=0x26a82cc, nNumberOfBytesToRead=0x6c96, lpNumberOfBytesRead=0x31e64c, lpOverlapped=0x0 | out: lpBuffer=0x26a82cc*, lpNumberOfBytesRead=0x31e64c*=0x6c96, lpOverlapped=0x0) returned 1 [0055.744] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.ar_IQ.txt", nBufferLength=0x105, lpBuffer=0x31e090, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.ar_IQ.txt", lpFilePart=0x0) returned 0x6b [0055.744] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e584) returned 1 [0055.744] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.ar_IQ.txt" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.ar_iq.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x274 [0055.745] GetFileType (hFile=0x274) returned 0x1 [0055.745] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e580) returned 1 [0055.745] GetFileType (hFile=0x274) returned 0x1 [0055.745] WriteFile (in: hFile=0x274, lpBuffer=0x2717130*, nNumberOfBytesToWrite=0x6ca0, lpNumberOfBytesWritten=0x31e640, lpOverlapped=0x0 | out: lpBuffer=0x2717130*, lpNumberOfBytesWritten=0x31e640*=0x6ca0, lpOverlapped=0x0) returned 1 [0055.746] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.ar_IQ.txt", nBufferLength=0x105, lpBuffer=0x31e1c4, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.ar_IQ.txt", lpFilePart=0x0) returned 0x6b [0055.746] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.ar_IQ.txt", nBufferLength=0x105, lpBuffer=0x31e1c4, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.ar_IQ.txt", lpFilePart=0x0) returned 0x6b [0055.746] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e624) returned 1 [0055.746] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.ar_IQ.txt" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.ar_iq.txt"), fInfoLevelId=0x0, lpFileInformation=0x31e6a0 | out: lpFileInformation=0x31e6a0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x93de7300, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7f472300, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x4ae15e0, ftLastWriteTime.dwHighDateTime=0x1d6eb7f, nFileSizeHigh=0x0, nFileSizeLow=0x6ca0)) returned 1 [0055.746] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e620) returned 1 [0055.746] MoveFileW (lpExistingFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.ar_IQ.txt" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.ar_iq.txt"), lpNewFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.ar_IQ.txt" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.ar_iq.txt")) returned 1 [0055.747] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.ar_JO.txt", nBufferLength=0x105, lpBuffer=0x31e0a4, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.ar_JO.txt", lpFilePart=0x0) returned 0x6b [0055.747] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e598) returned 1 [0055.747] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.ar_JO.txt" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.ar_jo.txt"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x274 [0055.747] GetFileType (hFile=0x274) returned 0x1 [0055.747] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e594) returned 1 [0055.747] GetFileType (hFile=0x274) returned 0x1 [0055.747] GetFileSize (in: hFile=0x274, lpFileSizeHigh=0x31e6a0 | out: lpFileSizeHigh=0x31e6a0*=0x0) returned 0x6c96 [0055.747] ReadFile (in: hFile=0x274, lpBuffer=0x271e2d4, nNumberOfBytesToRead=0x6c96, lpNumberOfBytesRead=0x31e64c, lpOverlapped=0x0 | out: lpBuffer=0x271e2d4*, lpNumberOfBytesRead=0x31e64c*=0x6c96, lpOverlapped=0x0) returned 1 [0055.770] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.ar_JO.txt", nBufferLength=0x105, lpBuffer=0x31e090, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.ar_JO.txt", lpFilePart=0x0) returned 0x6b [0055.770] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e584) returned 1 [0055.770] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.ar_JO.txt" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.ar_jo.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x274 [0055.771] GetFileType (hFile=0x274) returned 0x1 [0055.771] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e580) returned 1 [0055.771] GetFileType (hFile=0x274) returned 0x1 [0055.772] WriteFile (in: hFile=0x274, lpBuffer=0x278cfdc*, nNumberOfBytesToWrite=0x6ca0, lpNumberOfBytesWritten=0x31e640, lpOverlapped=0x0 | out: lpBuffer=0x278cfdc*, lpNumberOfBytesWritten=0x31e640*=0x6ca0, lpOverlapped=0x0) returned 1 [0055.773] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.ar_JO.txt", nBufferLength=0x105, lpBuffer=0x31e1c4, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.ar_JO.txt", lpFilePart=0x0) returned 0x6b [0055.773] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.ar_JO.txt", nBufferLength=0x105, lpBuffer=0x31e1c4, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.ar_JO.txt", lpFilePart=0x0) returned 0x6b [0055.773] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e624) returned 1 [0055.773] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.ar_JO.txt" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.ar_jo.txt"), fInfoLevelId=0x0, lpFileInformation=0x31e6a0 | out: lpFileInformation=0x31e6a0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x93de7300, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7f44c1a0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x4b2d8a0, ftLastWriteTime.dwHighDateTime=0x1d6eb7f, nFileSizeHigh=0x0, nFileSizeLow=0x6ca0)) returned 1 [0055.773] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e620) returned 1 [0055.773] MoveFileW (lpExistingFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.ar_JO.txt" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.ar_jo.txt"), lpNewFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.ar_JO.txt" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.ar_jo.txt")) returned 1 [0055.773] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.ar_KW.txt", nBufferLength=0x105, lpBuffer=0x31e0a4, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.ar_KW.txt", lpFilePart=0x0) returned 0x6b [0055.773] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e598) returned 1 [0055.773] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.ar_KW.txt" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.ar_kw.txt"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x274 [0055.774] GetFileType (hFile=0x274) returned 0x1 [0055.774] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e594) returned 1 [0055.774] GetFileType (hFile=0x274) returned 0x1 [0055.774] GetFileSize (in: hFile=0x274, lpFileSizeHigh=0x31e6a0 | out: lpFileSizeHigh=0x31e6a0*=0x0) returned 0x6c96 [0055.774] ReadFile (in: hFile=0x274, lpBuffer=0x2794180, nNumberOfBytesToRead=0x6c96, lpNumberOfBytesRead=0x31e64c, lpOverlapped=0x0 | out: lpBuffer=0x2794180*, lpNumberOfBytesRead=0x31e64c*=0x6c96, lpOverlapped=0x0) returned 1 [0055.789] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.ar_KW.txt", nBufferLength=0x105, lpBuffer=0x31e090, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.ar_KW.txt", lpFilePart=0x0) returned 0x6b [0055.789] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e584) returned 1 [0055.789] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.ar_KW.txt" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.ar_kw.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x274 [0055.790] GetFileType (hFile=0x274) returned 0x1 [0055.790] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e580) returned 1 [0055.790] GetFileType (hFile=0x274) returned 0x1 [0055.790] WriteFile (in: hFile=0x274, lpBuffer=0x2802e88*, nNumberOfBytesToWrite=0x6ca0, lpNumberOfBytesWritten=0x31e640, lpOverlapped=0x0 | out: lpBuffer=0x2802e88*, lpNumberOfBytesWritten=0x31e640*=0x6ca0, lpOverlapped=0x0) returned 1 [0055.792] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.ar_KW.txt", nBufferLength=0x105, lpBuffer=0x31e1c4, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.ar_KW.txt", lpFilePart=0x0) returned 0x6b [0055.792] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.ar_KW.txt", nBufferLength=0x105, lpBuffer=0x31e1c4, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.ar_KW.txt", lpFilePart=0x0) returned 0x6b [0055.792] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e624) returned 1 [0055.792] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.ar_KW.txt" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.ar_kw.txt"), fInfoLevelId=0x0, lpFileInformation=0x31e6a0 | out: lpFileInformation=0x31e6a0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x93de7300, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7f44c1a0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x4b53a00, ftLastWriteTime.dwHighDateTime=0x1d6eb7f, nFileSizeHigh=0x0, nFileSizeLow=0x6ca0)) returned 1 [0055.792] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e620) returned 1 [0055.792] MoveFileW (lpExistingFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.ar_KW.txt" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.ar_kw.txt"), lpNewFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.ar_KW.txt" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.ar_kw.txt")) returned 1 [0055.792] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.ar_LB.txt", nBufferLength=0x105, lpBuffer=0x31e0a4, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.ar_LB.txt", lpFilePart=0x0) returned 0x6b [0055.792] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e598) returned 1 [0055.792] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.ar_LB.txt" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.ar_lb.txt"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x274 [0055.793] GetFileType (hFile=0x274) returned 0x1 [0055.793] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e594) returned 1 [0055.793] GetFileType (hFile=0x274) returned 0x1 [0055.793] GetFileSize (in: hFile=0x274, lpFileSizeHigh=0x31e6a0 | out: lpFileSizeHigh=0x31e6a0*=0x0) returned 0x6c96 [0055.793] ReadFile (in: hFile=0x274, lpBuffer=0x280a02c, nNumberOfBytesToRead=0x6c96, lpNumberOfBytesRead=0x31e64c, lpOverlapped=0x0 | out: lpBuffer=0x280a02c*, lpNumberOfBytesRead=0x31e64c*=0x6c96, lpOverlapped=0x0) returned 1 [0055.811] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.ar_LB.txt", nBufferLength=0x105, lpBuffer=0x31e090, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.ar_LB.txt", lpFilePart=0x0) returned 0x6b [0055.811] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e584) returned 1 [0055.811] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.ar_LB.txt" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.ar_lb.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x274 [0055.812] GetFileType (hFile=0x274) returned 0x1 [0055.812] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e580) returned 1 [0055.812] GetFileType (hFile=0x274) returned 0x1 [0055.812] WriteFile (in: hFile=0x274, lpBuffer=0x268d788*, nNumberOfBytesToWrite=0x6ca0, lpNumberOfBytesWritten=0x31e640, lpOverlapped=0x0 | out: lpBuffer=0x268d788*, lpNumberOfBytesWritten=0x31e640*=0x6ca0, lpOverlapped=0x0) returned 1 [0055.813] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.ar_LB.txt", nBufferLength=0x105, lpBuffer=0x31e1c4, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.ar_LB.txt", lpFilePart=0x0) returned 0x6b [0055.813] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.ar_LB.txt", nBufferLength=0x105, lpBuffer=0x31e1c4, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.ar_LB.txt", lpFilePart=0x0) returned 0x6b [0055.813] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e624) returned 1 [0055.814] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.ar_LB.txt" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.ar_lb.txt"), fInfoLevelId=0x0, lpFileInformation=0x31e6a0 | out: lpFileInformation=0x31e6a0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x93de7300, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7f44c1a0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x4b79b60, ftLastWriteTime.dwHighDateTime=0x1d6eb7f, nFileSizeHigh=0x0, nFileSizeLow=0x6ca0)) returned 1 [0055.814] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e620) returned 1 [0055.814] MoveFileW (lpExistingFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.ar_LB.txt" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.ar_lb.txt"), lpNewFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.ar_LB.txt" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.ar_lb.txt")) returned 1 [0055.814] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.ar_LY.txt", nBufferLength=0x105, lpBuffer=0x31e0a4, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.ar_LY.txt", lpFilePart=0x0) returned 0x6b [0055.814] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e598) returned 1 [0055.814] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.ar_LY.txt" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.ar_ly.txt"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x274 [0055.814] GetFileType (hFile=0x274) returned 0x1 [0055.814] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e594) returned 1 [0055.814] GetFileType (hFile=0x274) returned 0x1 [0055.814] GetFileSize (in: hFile=0x274, lpFileSizeHigh=0x31e6a0 | out: lpFileSizeHigh=0x31e6a0*=0x0) returned 0x6c96 [0055.814] ReadFile (in: hFile=0x274, lpBuffer=0x269492c, nNumberOfBytesToRead=0x6c96, lpNumberOfBytesRead=0x31e64c, lpOverlapped=0x0 | out: lpBuffer=0x269492c*, lpNumberOfBytesRead=0x31e64c*=0x6c96, lpOverlapped=0x0) returned 1 [0055.830] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.ar_LY.txt", nBufferLength=0x105, lpBuffer=0x31e090, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.ar_LY.txt", lpFilePart=0x0) returned 0x6b [0055.830] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e584) returned 1 [0055.830] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.ar_LY.txt" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.ar_ly.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x274 [0055.831] GetFileType (hFile=0x274) returned 0x1 [0055.831] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e580) returned 1 [0055.831] GetFileType (hFile=0x274) returned 0x1 [0055.831] WriteFile (in: hFile=0x274, lpBuffer=0x2703790*, nNumberOfBytesToWrite=0x6ca0, lpNumberOfBytesWritten=0x31e640, lpOverlapped=0x0 | out: lpBuffer=0x2703790*, lpNumberOfBytesWritten=0x31e640*=0x6ca0, lpOverlapped=0x0) returned 1 [0055.832] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.ar_LY.txt", nBufferLength=0x105, lpBuffer=0x31e1c4, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.ar_LY.txt", lpFilePart=0x0) returned 0x6b [0055.833] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.ar_LY.txt", nBufferLength=0x105, lpBuffer=0x31e1c4, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.ar_LY.txt", lpFilePart=0x0) returned 0x6b [0055.833] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e624) returned 1 [0055.833] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.ar_LY.txt" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.ar_ly.txt"), fInfoLevelId=0x0, lpFileInformation=0x31e6a0 | out: lpFileInformation=0x31e6a0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x93de7300, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7f44c1a0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x4b9fcc0, ftLastWriteTime.dwHighDateTime=0x1d6eb7f, nFileSizeHigh=0x0, nFileSizeLow=0x6ca0)) returned 1 [0055.833] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e620) returned 1 [0055.833] MoveFileW (lpExistingFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.ar_LY.txt" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.ar_ly.txt"), lpNewFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.ar_LY.txt" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.ar_ly.txt")) returned 1 [0055.833] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.ar_MA.txt", nBufferLength=0x105, lpBuffer=0x31e0a4, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.ar_MA.txt", lpFilePart=0x0) returned 0x6b [0055.833] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e598) returned 1 [0055.834] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.ar_MA.txt" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.ar_ma.txt"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x274 [0055.834] GetFileType (hFile=0x274) returned 0x1 [0055.834] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e594) returned 1 [0055.834] GetFileType (hFile=0x274) returned 0x1 [0055.834] GetFileSize (in: hFile=0x274, lpFileSizeHigh=0x31e6a0 | out: lpFileSizeHigh=0x31e6a0*=0x0) returned 0x6c96 [0055.834] ReadFile (in: hFile=0x274, lpBuffer=0x270a934, nNumberOfBytesToRead=0x6c96, lpNumberOfBytesRead=0x31e64c, lpOverlapped=0x0 | out: lpBuffer=0x270a934*, lpNumberOfBytesRead=0x31e64c*=0x6c96, lpOverlapped=0x0) returned 1 [0055.873] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.ar_MA.txt", nBufferLength=0x105, lpBuffer=0x31e090, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.ar_MA.txt", lpFilePart=0x0) returned 0x6b [0055.873] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e584) returned 1 [0055.873] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.ar_MA.txt" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.ar_ma.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x274 [0055.877] GetFileType (hFile=0x274) returned 0x1 [0055.877] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e580) returned 1 [0055.877] GetFileType (hFile=0x274) returned 0x1 [0055.877] WriteFile (in: hFile=0x274, lpBuffer=0x277963c*, nNumberOfBytesToWrite=0x6ca0, lpNumberOfBytesWritten=0x31e640, lpOverlapped=0x0 | out: lpBuffer=0x277963c*, lpNumberOfBytesWritten=0x31e640*=0x6ca0, lpOverlapped=0x0) returned 1 [0055.879] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.ar_MA.txt", nBufferLength=0x105, lpBuffer=0x31e1c4, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.ar_MA.txt", lpFilePart=0x0) returned 0x6b [0055.879] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.ar_MA.txt", nBufferLength=0x105, lpBuffer=0x31e1c4, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.ar_MA.txt", lpFilePart=0x0) returned 0x6b [0055.879] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e624) returned 1 [0055.879] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.ar_MA.txt" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.ar_ma.txt"), fInfoLevelId=0x0, lpFileInformation=0x31e6a0 | out: lpFileInformation=0x31e6a0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x950fa000, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7f3d9d80, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x4c120e0, ftLastWriteTime.dwHighDateTime=0x1d6eb7f, nFileSizeHigh=0x0, nFileSizeLow=0x6ca0)) returned 1 [0055.879] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e620) returned 1 [0055.879] MoveFileW (lpExistingFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.ar_MA.txt" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.ar_ma.txt"), lpNewFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.ar_MA.txt" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.ar_ma.txt")) returned 1 [0055.880] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.ar_OM.txt", nBufferLength=0x105, lpBuffer=0x31e0a4, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.ar_OM.txt", lpFilePart=0x0) returned 0x6b [0055.880] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e598) returned 1 [0055.880] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.ar_OM.txt" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.ar_om.txt"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x274 [0055.880] GetFileType (hFile=0x274) returned 0x1 [0055.880] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e594) returned 1 [0055.880] GetFileType (hFile=0x274) returned 0x1 [0055.880] GetFileSize (in: hFile=0x274, lpFileSizeHigh=0x31e6a0 | out: lpFileSizeHigh=0x31e6a0*=0x0) returned 0x6c96 [0055.881] ReadFile (in: hFile=0x274, lpBuffer=0x27807e0, nNumberOfBytesToRead=0x6c96, lpNumberOfBytesRead=0x31e64c, lpOverlapped=0x0 | out: lpBuffer=0x27807e0*, lpNumberOfBytesRead=0x31e64c*=0x6c96, lpOverlapped=0x0) returned 1 [0055.904] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.ar_OM.txt", nBufferLength=0x105, lpBuffer=0x31e090, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.ar_OM.txt", lpFilePart=0x0) returned 0x6b [0055.904] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e584) returned 1 [0055.905] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.ar_OM.txt" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.ar_om.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x274 [0055.906] GetFileType (hFile=0x274) returned 0x1 [0055.906] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e580) returned 1 [0055.906] GetFileType (hFile=0x274) returned 0x1 [0055.906] WriteFile (in: hFile=0x274, lpBuffer=0x27ef4e8*, nNumberOfBytesToWrite=0x6ca0, lpNumberOfBytesWritten=0x31e640, lpOverlapped=0x0 | out: lpBuffer=0x27ef4e8*, lpNumberOfBytesWritten=0x31e640*=0x6ca0, lpOverlapped=0x0) returned 1 [0055.907] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.ar_OM.txt", nBufferLength=0x105, lpBuffer=0x31e1c4, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.ar_OM.txt", lpFilePart=0x0) returned 0x6b [0055.907] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.ar_OM.txt", nBufferLength=0x105, lpBuffer=0x31e1c4, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.ar_OM.txt", lpFilePart=0x0) returned 0x6b [0055.907] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e624) returned 1 [0055.907] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.ar_OM.txt" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.ar_om.txt"), fInfoLevelId=0x0, lpFileInformation=0x31e6a0 | out: lpFileInformation=0x31e6a0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x93de7300, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7f3b3c20, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x4c5e3a0, ftLastWriteTime.dwHighDateTime=0x1d6eb7f, nFileSizeHigh=0x0, nFileSizeLow=0x6ca0)) returned 1 [0055.907] MoveFileW (lpExistingFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.ar_OM.txt" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.ar_om.txt"), lpNewFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.ar_OM.txt" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.ar_om.txt")) returned 1 [0055.908] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.ar_QA.txt", nBufferLength=0x105, lpBuffer=0x31e0a4, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.ar_QA.txt", lpFilePart=0x0) returned 0x6b [0055.908] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.ar_QA.txt" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.ar_qa.txt"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x274 [0055.909] GetFileType (hFile=0x274) returned 0x1 [0055.909] GetFileType (hFile=0x274) returned 0x1 [0055.909] GetFileSize (in: hFile=0x274, lpFileSizeHigh=0x31e6a0 | out: lpFileSizeHigh=0x31e6a0*=0x0) returned 0x6c96 [0055.909] ReadFile (in: hFile=0x274, lpBuffer=0x27f668c, nNumberOfBytesToRead=0x6c96, lpNumberOfBytesRead=0x31e64c, lpOverlapped=0x0 | out: lpBuffer=0x27f668c*, lpNumberOfBytesRead=0x31e64c*=0x6c96, lpOverlapped=0x0) returned 1 [0055.924] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.ar_QA.txt", nBufferLength=0x105, lpBuffer=0x31e090, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.ar_QA.txt", lpFilePart=0x0) returned 0x6b [0055.925] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.ar_QA.txt" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.ar_qa.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x274 [0055.925] GetFileType (hFile=0x274) returned 0x1 [0055.926] GetFileType (hFile=0x274) returned 0x1 [0055.926] WriteFile (in: hFile=0x274, lpBuffer=0x2865394*, nNumberOfBytesToWrite=0x6ca0, lpNumberOfBytesWritten=0x31e640, lpOverlapped=0x0 | out: lpBuffer=0x2865394*, lpNumberOfBytesWritten=0x31e640*=0x6ca0, lpOverlapped=0x0) returned 1 [0055.927] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.ar_QA.txt", nBufferLength=0x105, lpBuffer=0x31e1c4, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.ar_QA.txt", lpFilePart=0x0) returned 0x6b [0055.927] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.ar_QA.txt", nBufferLength=0x105, lpBuffer=0x31e1c4, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.ar_QA.txt", lpFilePart=0x0) returned 0x6b [0055.927] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.ar_QA.txt" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.ar_qa.txt"), fInfoLevelId=0x0, lpFileInformation=0x31e6a0 | out: lpFileInformation=0x31e6a0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x93de7300, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7f3b3c20, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x4caa660, ftLastWriteTime.dwHighDateTime=0x1d6eb7f, nFileSizeHigh=0x0, nFileSizeLow=0x6ca0)) returned 1 [0055.927] MoveFileW (lpExistingFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.ar_QA.txt" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.ar_qa.txt"), lpNewFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.ar_QA.txt" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.ar_qa.txt")) returned 1 [0055.927] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.ar_SA.txt", nBufferLength=0x105, lpBuffer=0x31e0a4, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.ar_SA.txt", lpFilePart=0x0) returned 0x6b [0055.928] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.ar_SA.txt" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.ar_sa.txt"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x274 [0055.928] GetFileType (hFile=0x274) returned 0x1 [0055.928] GetFileType (hFile=0x274) returned 0x1 [0055.928] GetFileSize (in: hFile=0x274, lpFileSizeHigh=0x31e6a0 | out: lpFileSizeHigh=0x31e6a0*=0x0) returned 0x6c96 [0055.930] ReadFile (in: hFile=0x274, lpBuffer=0x26611cc, nNumberOfBytesToRead=0x6c96, lpNumberOfBytesRead=0x31e64c, lpOverlapped=0x0 | out: lpBuffer=0x26611cc*, lpNumberOfBytesRead=0x31e64c*=0x6c96, lpOverlapped=0x0) returned 1 [0055.945] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.ar_SA.txt", nBufferLength=0x105, lpBuffer=0x31e090, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.ar_SA.txt", lpFilePart=0x0) returned 0x6b [0055.945] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.ar_SA.txt" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.ar_sa.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x274 [0055.946] GetFileType (hFile=0x274) returned 0x1 [0055.946] GetFileType (hFile=0x274) returned 0x1 [0055.946] WriteFile (in: hFile=0x274, lpBuffer=0x26d0030*, nNumberOfBytesToWrite=0x6ca0, lpNumberOfBytesWritten=0x31e640, lpOverlapped=0x0 | out: lpBuffer=0x26d0030*, lpNumberOfBytesWritten=0x31e640*=0x6ca0, lpOverlapped=0x0) returned 1 [0055.947] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.ar_SA.txt", nBufferLength=0x105, lpBuffer=0x31e1c4, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.ar_SA.txt", lpFilePart=0x0) returned 0x6b [0055.947] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.ar_SA.txt", nBufferLength=0x105, lpBuffer=0x31e1c4, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.ar_SA.txt", lpFilePart=0x0) returned 0x6b [0055.947] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.ar_SA.txt" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.ar_sa.txt"), fInfoLevelId=0x0, lpFileInformation=0x31e6a0 | out: lpFileInformation=0x31e6a0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x93de7300, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7f3b3c20, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x4cd07c0, ftLastWriteTime.dwHighDateTime=0x1d6eb7f, nFileSizeHigh=0x0, nFileSizeLow=0x6ca0)) returned 1 [0055.947] MoveFileW (lpExistingFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.ar_SA.txt" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.ar_sa.txt"), lpNewFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.ar_SA.txt" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.ar_sa.txt")) returned 1 [0055.947] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.ar_SD.txt", nBufferLength=0x105, lpBuffer=0x31e0a4, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.ar_SD.txt", lpFilePart=0x0) returned 0x6b [0055.948] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.ar_SD.txt" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.ar_sd.txt"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x274 [0055.948] GetFileType (hFile=0x274) returned 0x1 [0055.948] GetFileType (hFile=0x274) returned 0x1 [0055.948] GetFileSize (in: hFile=0x274, lpFileSizeHigh=0x31e6a0 | out: lpFileSizeHigh=0x31e6a0*=0x0) returned 0x6c96 [0055.948] ReadFile (in: hFile=0x274, lpBuffer=0x26d71d4, nNumberOfBytesToRead=0x6c96, lpNumberOfBytesRead=0x31e64c, lpOverlapped=0x0 | out: lpBuffer=0x26d71d4*, lpNumberOfBytesRead=0x31e64c*=0x6c96, lpOverlapped=0x0) returned 1 [0055.963] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.ar_SD.txt", nBufferLength=0x105, lpBuffer=0x31e090, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.ar_SD.txt", lpFilePart=0x0) returned 0x6b [0055.963] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.ar_SD.txt" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.ar_sd.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x274 [0055.964] GetFileType (hFile=0x274) returned 0x1 [0055.964] GetFileType (hFile=0x274) returned 0x1 [0055.964] WriteFile (in: hFile=0x274, lpBuffer=0x2745edc*, nNumberOfBytesToWrite=0x6ca0, lpNumberOfBytesWritten=0x31e640, lpOverlapped=0x0 | out: lpBuffer=0x2745edc*, lpNumberOfBytesWritten=0x31e640*=0x6ca0, lpOverlapped=0x0) returned 1 [0055.966] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.ar_SD.txt", nBufferLength=0x105, lpBuffer=0x31e1c4, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.ar_SD.txt", lpFilePart=0x0) returned 0x6b [0055.966] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.ar_SD.txt", nBufferLength=0x105, lpBuffer=0x31e1c4, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.ar_SD.txt", lpFilePart=0x0) returned 0x6b [0055.966] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.ar_SD.txt" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.ar_sd.txt"), fInfoLevelId=0x0, lpFileInformation=0x31e6a0 | out: lpFileInformation=0x31e6a0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x93de7300, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7f3b3c20, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x4cf6920, ftLastWriteTime.dwHighDateTime=0x1d6eb7f, nFileSizeHigh=0x0, nFileSizeLow=0x6ca0)) returned 1 [0055.966] MoveFileW (lpExistingFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.ar_SD.txt" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.ar_sd.txt"), lpNewFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.ar_SD.txt" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.ar_sd.txt")) returned 1 [0055.966] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.ar_SY.txt", nBufferLength=0x105, lpBuffer=0x31e0a4, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.ar_SY.txt", lpFilePart=0x0) returned 0x6b [0055.966] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.ar_SY.txt" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.ar_sy.txt"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x274 [0055.966] GetFileType (hFile=0x274) returned 0x1 [0055.966] GetFileType (hFile=0x274) returned 0x1 [0055.966] GetFileSize (in: hFile=0x274, lpFileSizeHigh=0x31e6a0 | out: lpFileSizeHigh=0x31e6a0*=0x0) returned 0x6c96 [0055.967] ReadFile (in: hFile=0x274, lpBuffer=0x274d080, nNumberOfBytesToRead=0x6c96, lpNumberOfBytesRead=0x31e64c, lpOverlapped=0x0 | out: lpBuffer=0x274d080*, lpNumberOfBytesRead=0x31e64c*=0x6c96, lpOverlapped=0x0) returned 1 [0055.982] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.ar_SY.txt", nBufferLength=0x105, lpBuffer=0x31e090, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.ar_SY.txt", lpFilePart=0x0) returned 0x6b [0055.982] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.ar_SY.txt" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.ar_sy.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x274 [0055.983] GetFileType (hFile=0x274) returned 0x1 [0055.983] GetFileType (hFile=0x274) returned 0x1 [0055.983] WriteFile (in: hFile=0x274, lpBuffer=0x27bbd88*, nNumberOfBytesToWrite=0x6ca0, lpNumberOfBytesWritten=0x31e640, lpOverlapped=0x0 | out: lpBuffer=0x27bbd88*, lpNumberOfBytesWritten=0x31e640*=0x6ca0, lpOverlapped=0x0) returned 1 [0055.985] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.ar_SY.txt", nBufferLength=0x105, lpBuffer=0x31e1c4, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.ar_SY.txt", lpFilePart=0x0) returned 0x6b [0055.985] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.ar_SY.txt", nBufferLength=0x105, lpBuffer=0x31e1c4, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.ar_SY.txt", lpFilePart=0x0) returned 0x6b [0055.985] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.ar_SY.txt" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.ar_sy.txt"), fInfoLevelId=0x0, lpFileInformation=0x31e6a0 | out: lpFileInformation=0x31e6a0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x950fa000, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7f3b3c20, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x4d1ca80, ftLastWriteTime.dwHighDateTime=0x1d6eb7f, nFileSizeHigh=0x0, nFileSizeLow=0x6ca0)) returned 1 [0055.985] MoveFileW (lpExistingFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.ar_SY.txt" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.ar_sy.txt"), lpNewFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.ar_SY.txt" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.ar_sy.txt")) returned 1 [0055.985] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.ar_TN.txt", nBufferLength=0x105, lpBuffer=0x31e0a4, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.ar_TN.txt", lpFilePart=0x0) returned 0x6b [0055.985] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.ar_TN.txt" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.ar_tn.txt"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x274 [0055.986] GetFileType (hFile=0x274) returned 0x1 [0055.986] GetFileType (hFile=0x274) returned 0x1 [0055.986] GetFileSize (in: hFile=0x274, lpFileSizeHigh=0x31e6a0 | out: lpFileSizeHigh=0x31e6a0*=0x0) returned 0x6c96 [0055.986] ReadFile (in: hFile=0x274, lpBuffer=0x27c2f2c, nNumberOfBytesToRead=0x6c96, lpNumberOfBytesRead=0x31e64c, lpOverlapped=0x0 | out: lpBuffer=0x27c2f2c*, lpNumberOfBytesRead=0x31e64c*=0x6c96, lpOverlapped=0x0) returned 1 [0056.002] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.ar_TN.txt", nBufferLength=0x105, lpBuffer=0x31e090, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.ar_TN.txt", lpFilePart=0x0) returned 0x6b [0056.002] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.ar_TN.txt" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.ar_tn.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x274 [0056.003] GetFileType (hFile=0x274) returned 0x1 [0056.003] GetFileType (hFile=0x274) returned 0x1 [0056.003] WriteFile (in: hFile=0x274, lpBuffer=0x2831c34*, nNumberOfBytesToWrite=0x6ca0, lpNumberOfBytesWritten=0x31e640, lpOverlapped=0x0 | out: lpBuffer=0x2831c34*, lpNumberOfBytesWritten=0x31e640*=0x6ca0, lpOverlapped=0x0) returned 1 [0056.004] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.ar_TN.txt", nBufferLength=0x105, lpBuffer=0x31e1c4, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.ar_TN.txt", lpFilePart=0x0) returned 0x6b [0056.004] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.ar_TN.txt", nBufferLength=0x105, lpBuffer=0x31e1c4, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.ar_TN.txt", lpFilePart=0x0) returned 0x6b [0056.004] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.ar_TN.txt" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.ar_tn.txt"), fInfoLevelId=0x0, lpFileInformation=0x31e6a0 | out: lpFileInformation=0x31e6a0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x93de7300, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7f3b3c20, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x4d68d40, ftLastWriteTime.dwHighDateTime=0x1d6eb7f, nFileSizeHigh=0x0, nFileSizeLow=0x6ca0)) returned 1 [0056.004] MoveFileW (lpExistingFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.ar_TN.txt" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.ar_tn.txt"), lpNewFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.ar_TN.txt" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.ar_tn.txt")) returned 1 [0056.004] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.ar_YE.txt", nBufferLength=0x105, lpBuffer=0x31e0a4, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.ar_YE.txt", lpFilePart=0x0) returned 0x6b [0056.005] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.ar_YE.txt" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.ar_ye.txt"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x274 [0056.005] GetFileType (hFile=0x274) returned 0x1 [0056.005] GetFileType (hFile=0x274) returned 0x1 [0056.005] GetFileSize (in: hFile=0x274, lpFileSizeHigh=0x31e6a0 | out: lpFileSizeHigh=0x31e6a0*=0x0) returned 0x6c96 [0056.005] ReadFile (in: hFile=0x274, lpBuffer=0x2838dd8, nNumberOfBytesToRead=0x6c96, lpNumberOfBytesRead=0x31e64c, lpOverlapped=0x0 | out: lpBuffer=0x2838dd8*, lpNumberOfBytesRead=0x31e64c*=0x6c96, lpOverlapped=0x0) returned 1 [0056.022] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.ar_YE.txt", nBufferLength=0x105, lpBuffer=0x31e090, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.ar_YE.txt", lpFilePart=0x0) returned 0x6b [0056.022] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.ar_YE.txt" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.ar_ye.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x274 [0056.023] GetFileType (hFile=0x274) returned 0x1 [0056.023] GetFileType (hFile=0x274) returned 0x1 [0056.023] WriteFile (in: hFile=0x274, lpBuffer=0x26aea2c*, nNumberOfBytesToWrite=0x6ca0, lpNumberOfBytesWritten=0x31e640, lpOverlapped=0x0 | out: lpBuffer=0x26aea2c*, lpNumberOfBytesWritten=0x31e640*=0x6ca0, lpOverlapped=0x0) returned 1 [0056.024] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.ar_YE.txt", nBufferLength=0x105, lpBuffer=0x31e1c4, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.ar_YE.txt", lpFilePart=0x0) returned 0x6b [0056.024] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.ar_YE.txt", nBufferLength=0x105, lpBuffer=0x31e1c4, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.ar_YE.txt", lpFilePart=0x0) returned 0x6b [0056.024] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.ar_YE.txt" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.ar_ye.txt"), fInfoLevelId=0x0, lpFileInformation=0x31e6a0 | out: lpFileInformation=0x31e6a0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x93de7300, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7f472300, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x4d8eea0, ftLastWriteTime.dwHighDateTime=0x1d6eb7f, nFileSizeHigh=0x0, nFileSizeLow=0x6ca0)) returned 1 [0056.024] MoveFileW (lpExistingFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.ar_YE.txt" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.ar_ye.txt"), lpNewFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.ar_YE.txt" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.ar_ye.txt")) returned 1 [0056.025] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.bg.txt", nBufferLength=0x105, lpBuffer=0x31e0a4, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.bg.txt", lpFilePart=0x0) returned 0x68 [0056.025] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.bg.txt" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.bg.txt"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x274 [0056.026] GetFileType (hFile=0x274) returned 0x1 [0056.026] GetFileType (hFile=0x274) returned 0x1 [0056.026] GetFileSize (in: hFile=0x274, lpFileSizeHigh=0x31e6a0 | out: lpFileSizeHigh=0x31e6a0*=0x0) returned 0x6cde [0056.026] ReadFile (in: hFile=0x274, lpBuffer=0x26b5bc4, nNumberOfBytesToRead=0x6cde, lpNumberOfBytesRead=0x31e64c, lpOverlapped=0x0 | out: lpBuffer=0x26b5bc4*, lpNumberOfBytesRead=0x31e64c*=0x6cde, lpOverlapped=0x0) returned 1 [0056.041] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.bg.txt", nBufferLength=0x105, lpBuffer=0x31e090, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.bg.txt", lpFilePart=0x0) returned 0x68 [0056.041] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.bg.txt" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.bg.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x274 [0056.042] GetFileType (hFile=0x274) returned 0x1 [0056.042] GetFileType (hFile=0x274) returned 0x1 [0056.042] WriteFile (in: hFile=0x274, lpBuffer=0x2724b68*, nNumberOfBytesToWrite=0x6ce0, lpNumberOfBytesWritten=0x31e640, lpOverlapped=0x0 | out: lpBuffer=0x2724b68*, lpNumberOfBytesWritten=0x31e640*=0x6ce0, lpOverlapped=0x0) returned 1 [0056.043] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.bg.txt", nBufferLength=0x105, lpBuffer=0x31e1c4, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.bg.txt", lpFilePart=0x0) returned 0x68 [0056.043] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.bg.txt", nBufferLength=0x105, lpBuffer=0x31e1c4, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.bg.txt", lpFilePart=0x0) returned 0x68 [0056.044] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.bg.txt" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.bg.txt"), fInfoLevelId=0x0, lpFileInformation=0x31e6a0 | out: lpFileInformation=0x31e6a0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x93de7300, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7f38dac0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x4db5000, ftLastWriteTime.dwHighDateTime=0x1d6eb7f, nFileSizeHigh=0x0, nFileSizeLow=0x6ce0)) returned 1 [0056.044] MoveFileW (lpExistingFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.bg.txt" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.bg.txt"), lpNewFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.bg.txt" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.bg.txt")) returned 1 [0056.044] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.bg_BG.txt", nBufferLength=0x105, lpBuffer=0x31e0a4, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.bg_BG.txt", lpFilePart=0x0) returned 0x6b [0056.044] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.bg_BG.txt" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.bg_bg.txt"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x274 [0056.044] GetFileType (hFile=0x274) returned 0x1 [0056.044] GetFileType (hFile=0x274) returned 0x1 [0056.044] GetFileSize (in: hFile=0x274, lpFileSizeHigh=0x31e6a0 | out: lpFileSizeHigh=0x31e6a0*=0x0) returned 0x6cde [0056.044] ReadFile (in: hFile=0x274, lpBuffer=0x272bd38, nNumberOfBytesToRead=0x6cde, lpNumberOfBytesRead=0x31e64c, lpOverlapped=0x0 | out: lpBuffer=0x272bd38*, lpNumberOfBytesRead=0x31e64c*=0x6cde, lpOverlapped=0x0) returned 1 [0056.060] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.bg_BG.txt", nBufferLength=0x105, lpBuffer=0x31e090, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.bg_BG.txt", lpFilePart=0x0) returned 0x6b [0056.060] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.bg_BG.txt" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.bg_bg.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x274 [0056.061] GetFileType (hFile=0x274) returned 0x1 [0056.061] GetFileType (hFile=0x274) returned 0x1 [0056.061] WriteFile (in: hFile=0x274, lpBuffer=0x279ab80*, nNumberOfBytesToWrite=0x6ce0, lpNumberOfBytesWritten=0x31e640, lpOverlapped=0x0 | out: lpBuffer=0x279ab80*, lpNumberOfBytesWritten=0x31e640*=0x6ce0, lpOverlapped=0x0) returned 1 [0056.062] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.bg_BG.txt", nBufferLength=0x105, lpBuffer=0x31e1c4, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.bg_BG.txt", lpFilePart=0x0) returned 0x6b [0056.062] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.bg_BG.txt", nBufferLength=0x105, lpBuffer=0x31e1c4, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.bg_BG.txt", lpFilePart=0x0) returned 0x6b [0056.062] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.bg_BG.txt" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.bg_bg.txt"), fInfoLevelId=0x0, lpFileInformation=0x31e6a0 | out: lpFileInformation=0x31e6a0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x950fa000, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7f38dac0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x4ddb160, ftLastWriteTime.dwHighDateTime=0x1d6eb7f, nFileSizeHigh=0x0, nFileSizeLow=0x6ce0)) returned 1 [0056.062] MoveFileW (lpExistingFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.bg_BG.txt" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.bg_bg.txt"), lpNewFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.bg_BG.txt" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.bg_bg.txt")) returned 1 [0056.063] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.ca.txt", nBufferLength=0x105, lpBuffer=0x31e0a4, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.ca.txt", lpFilePart=0x0) returned 0x68 [0056.063] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.ca.txt" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.ca.txt"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x274 [0056.063] GetFileType (hFile=0x274) returned 0x1 [0056.063] GetFileType (hFile=0x274) returned 0x1 [0056.063] GetFileSize (in: hFile=0x274, lpFileSizeHigh=0x31e6a0 | out: lpFileSizeHigh=0x31e6a0*=0x0) returned 0x6cdc [0056.063] ReadFile (in: hFile=0x274, lpBuffer=0x27a1d58, nNumberOfBytesToRead=0x6cdc, lpNumberOfBytesRead=0x31e64c, lpOverlapped=0x0 | out: lpBuffer=0x27a1d58*, lpNumberOfBytesRead=0x31e64c*=0x6cdc, lpOverlapped=0x0) returned 1 [0056.078] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.ca.txt", nBufferLength=0x105, lpBuffer=0x31e090, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.ca.txt", lpFilePart=0x0) returned 0x68 [0056.078] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.ca.txt" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.ca.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x274 [0056.079] GetFileType (hFile=0x274) returned 0x1 [0056.079] GetFileType (hFile=0x274) returned 0x1 [0056.079] WriteFile (in: hFile=0x274, lpBuffer=0x2810b9c*, nNumberOfBytesToWrite=0x6ce0, lpNumberOfBytesWritten=0x31e640, lpOverlapped=0x0 | out: lpBuffer=0x2810b9c*, lpNumberOfBytesWritten=0x31e640*=0x6ce0, lpOverlapped=0x0) returned 1 [0056.081] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.ca.txt", nBufferLength=0x105, lpBuffer=0x31e1c4, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.ca.txt", lpFilePart=0x0) returned 0x68 [0056.081] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.ca.txt", nBufferLength=0x105, lpBuffer=0x31e1c4, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.ca.txt", lpFilePart=0x0) returned 0x68 [0056.081] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.ca.txt" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.ca.txt"), fInfoLevelId=0x0, lpFileInformation=0x31e6a0 | out: lpFileInformation=0x31e6a0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x93de7300, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7f38dac0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x4e012c0, ftLastWriteTime.dwHighDateTime=0x1d6eb7f, nFileSizeHigh=0x0, nFileSizeLow=0x6ce0)) returned 1 [0056.081] MoveFileW (lpExistingFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.ca.txt" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.ca.txt"), lpNewFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.ca.txt" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.ca.txt")) returned 1 [0056.081] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.ca_ES.txt", nBufferLength=0x105, lpBuffer=0x31e0a4, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.ca_ES.txt", lpFilePart=0x0) returned 0x6b [0056.081] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.ca_ES.txt" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.ca_es.txt"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x274 [0056.082] GetFileType (hFile=0x274) returned 0x1 [0056.082] GetFileType (hFile=0x274) returned 0x1 [0056.082] GetFileSize (in: hFile=0x274, lpFileSizeHigh=0x31e6a0 | out: lpFileSizeHigh=0x31e6a0*=0x0) returned 0x6cdc [0056.082] ReadFile (in: hFile=0x274, lpBuffer=0x2817d6c, nNumberOfBytesToRead=0x6cdc, lpNumberOfBytesRead=0x31e64c, lpOverlapped=0x0 | out: lpBuffer=0x2817d6c*, lpNumberOfBytesRead=0x31e64c*=0x6cdc, lpOverlapped=0x0) returned 1 [0056.100] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.ca_ES.txt", nBufferLength=0x105, lpBuffer=0x31e090, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.ca_ES.txt", lpFilePart=0x0) returned 0x6b [0056.100] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.ca_ES.txt" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.ca_es.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x274 [0056.101] GetFileType (hFile=0x274) returned 0x1 [0056.101] GetFileType (hFile=0x274) returned 0x1 [0056.101] WriteFile (in: hFile=0x274, lpBuffer=0x2686c2c*, nNumberOfBytesToWrite=0x6ce0, lpNumberOfBytesWritten=0x31e640, lpOverlapped=0x0 | out: lpBuffer=0x2686c2c*, lpNumberOfBytesWritten=0x31e640*=0x6ce0, lpOverlapped=0x0) returned 1 [0056.102] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.ca_ES.txt", nBufferLength=0x105, lpBuffer=0x31e1c4, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.ca_ES.txt", lpFilePart=0x0) returned 0x6b [0056.102] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.ca_ES.txt", nBufferLength=0x105, lpBuffer=0x31e1c4, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.ca_ES.txt", lpFilePart=0x0) returned 0x6b [0056.102] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.ca_ES.txt" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.ca_es.txt"), fInfoLevelId=0x0, lpFileInformation=0x31e6a0 | out: lpFileInformation=0x31e6a0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x93de7300, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7f38dac0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x4e4d580, ftLastWriteTime.dwHighDateTime=0x1d6eb7f, nFileSizeHigh=0x0, nFileSizeLow=0x6ce0)) returned 1 [0056.102] MoveFileW (lpExistingFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.ca_ES.txt" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.ca_es.txt"), lpNewFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.ca_ES.txt" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.ca_es.txt")) returned 1 [0056.102] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.ca_ES_PREEURO.txt", nBufferLength=0x105, lpBuffer=0x31e0a4, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.ca_ES_PREEURO.txt", lpFilePart=0x0) returned 0x73 [0056.102] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.ca_ES_PREEURO.txt" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.ca_es_preeuro.txt"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x274 [0056.103] GetFileType (hFile=0x274) returned 0x1 [0056.103] GetFileType (hFile=0x274) returned 0x1 [0056.103] GetFileSize (in: hFile=0x274, lpFileSizeHigh=0x31e6a0 | out: lpFileSizeHigh=0x31e6a0*=0x0) returned 0x6cdc [0056.103] ReadFile (in: hFile=0x274, lpBuffer=0x268de30, nNumberOfBytesToRead=0x6cdc, lpNumberOfBytesRead=0x31e64c, lpOverlapped=0x0 | out: lpBuffer=0x268de30*, lpNumberOfBytesRead=0x31e64c*=0x6cdc, lpOverlapped=0x0) returned 1 [0056.121] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.ca_ES_PREEURO.txt", nBufferLength=0x105, lpBuffer=0x31e090, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.ca_ES_PREEURO.txt", lpFilePart=0x0) returned 0x73 [0056.121] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.ca_ES_PREEURO.txt" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.ca_es_preeuro.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x274 [0056.122] GetFileType (hFile=0x274) returned 0x1 [0056.122] GetFileType (hFile=0x274) returned 0x1 [0056.122] WriteFile (in: hFile=0x274, lpBuffer=0x26fcdd0*, nNumberOfBytesToWrite=0x6ce0, lpNumberOfBytesWritten=0x31e640, lpOverlapped=0x0 | out: lpBuffer=0x26fcdd0*, lpNumberOfBytesWritten=0x31e640*=0x6ce0, lpOverlapped=0x0) returned 1 [0056.123] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.ca_ES_PREEURO.txt", nBufferLength=0x105, lpBuffer=0x31e1c4, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.ca_ES_PREEURO.txt", lpFilePart=0x0) returned 0x73 [0056.123] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.ca_ES_PREEURO.txt", nBufferLength=0x105, lpBuffer=0x31e1c4, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.ca_ES_PREEURO.txt", lpFilePart=0x0) returned 0x73 [0056.123] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.ca_ES_PREEURO.txt" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.ca_es_preeuro.txt"), fInfoLevelId=0x0, lpFileInformation=0x31e6a0 | out: lpFileInformation=0x31e6a0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x93de7300, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7f38dac0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x4e736e0, ftLastWriteTime.dwHighDateTime=0x1d6eb7f, nFileSizeHigh=0x0, nFileSizeLow=0x6ce0)) returned 1 [0056.123] MoveFileW (lpExistingFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.ca_ES_PREEURO.txt" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.ca_es_preeuro.txt"), lpNewFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.ca_ES_PREEURO.txt" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.ca_es_preeuro.txt")) returned 1 [0056.123] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.cs.txt", nBufferLength=0x105, lpBuffer=0x31e0a4, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.cs.txt", lpFilePart=0x0) returned 0x68 [0056.123] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.cs.txt" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.cs.txt"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x274 [0056.124] GetFileType (hFile=0x274) returned 0x1 [0056.124] GetFileType (hFile=0x274) returned 0x1 [0056.124] GetFileSize (in: hFile=0x274, lpFileSizeHigh=0x31e6a0 | out: lpFileSizeHigh=0x31e6a0*=0x0) returned 0x74c0 [0056.124] ReadFile (in: hFile=0x274, lpBuffer=0x2703fe8, nNumberOfBytesToRead=0x74c0, lpNumberOfBytesRead=0x31e64c, lpOverlapped=0x0 | out: lpBuffer=0x2703fe8*, lpNumberOfBytesRead=0x31e64c*=0x74c0, lpOverlapped=0x0) returned 1 [0056.139] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.cs.txt", nBufferLength=0x105, lpBuffer=0x31e090, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.cs.txt", lpFilePart=0x0) returned 0x68 [0056.140] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.cs.txt" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.cs.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x274 [0056.140] GetFileType (hFile=0x274) returned 0x1 [0056.141] GetFileType (hFile=0x274) returned 0x1 [0056.141] WriteFile (in: hFile=0x274, lpBuffer=0x27755dc*, nNumberOfBytesToWrite=0x74d0, lpNumberOfBytesWritten=0x31e640, lpOverlapped=0x0 | out: lpBuffer=0x27755dc*, lpNumberOfBytesWritten=0x31e640*=0x74d0, lpOverlapped=0x0) returned 1 [0056.142] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.cs.txt", nBufferLength=0x105, lpBuffer=0x31e1c4, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.cs.txt", lpFilePart=0x0) returned 0x68 [0056.142] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.cs.txt", nBufferLength=0x105, lpBuffer=0x31e1c4, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.cs.txt", lpFilePart=0x0) returned 0x68 [0056.142] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.cs.txt" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.cs.txt"), fInfoLevelId=0x0, lpFileInformation=0x31e6a0 | out: lpFileInformation=0x31e6a0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x950fa000, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7f367960, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x4e99840, ftLastWriteTime.dwHighDateTime=0x1d6eb7f, nFileSizeHigh=0x0, nFileSizeLow=0x74d0)) returned 1 [0056.142] MoveFileW (lpExistingFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.cs.txt" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.cs.txt"), lpNewFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.cs.txt" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.cs.txt")) returned 1 [0056.142] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.cs_CZ.txt", nBufferLength=0x105, lpBuffer=0x31e0a4, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.cs_CZ.txt", lpFilePart=0x0) returned 0x6b [0056.142] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.cs_CZ.txt" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.cs_cz.txt"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x274 [0056.142] GetFileType (hFile=0x274) returned 0x1 [0056.142] GetFileType (hFile=0x274) returned 0x1 [0056.143] GetFileSize (in: hFile=0x274, lpFileSizeHigh=0x31e6a0 | out: lpFileSizeHigh=0x31e6a0*=0x0) returned 0x74c0 [0056.143] ReadFile (in: hFile=0x274, lpBuffer=0x277cf9c, nNumberOfBytesToRead=0x74c0, lpNumberOfBytesRead=0x31e64c, lpOverlapped=0x0 | out: lpBuffer=0x277cf9c*, lpNumberOfBytesRead=0x31e64c*=0x74c0, lpOverlapped=0x0) returned 1 [0056.160] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.cs_CZ.txt", nBufferLength=0x105, lpBuffer=0x31e090, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.cs_CZ.txt", lpFilePart=0x0) returned 0x6b [0056.161] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.cs_CZ.txt" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.cs_cz.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x274 [0056.161] GetFileType (hFile=0x274) returned 0x1 [0056.162] GetFileType (hFile=0x274) returned 0x1 [0056.162] WriteFile (in: hFile=0x274, lpBuffer=0x27ee590*, nNumberOfBytesToWrite=0x74d0, lpNumberOfBytesWritten=0x31e640, lpOverlapped=0x0 | out: lpBuffer=0x27ee590*, lpNumberOfBytesWritten=0x31e640*=0x74d0, lpOverlapped=0x0) returned 1 [0056.163] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.cs_CZ.txt", nBufferLength=0x105, lpBuffer=0x31e1c4, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.cs_CZ.txt", lpFilePart=0x0) returned 0x6b [0056.163] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.cs_CZ.txt", nBufferLength=0x105, lpBuffer=0x31e1c4, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.cs_CZ.txt", lpFilePart=0x0) returned 0x6b [0056.163] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.cs_CZ.txt" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.cs_cz.txt"), fInfoLevelId=0x0, lpFileInformation=0x31e6a0 | out: lpFileInformation=0x31e6a0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x950fa000, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7f367960, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x4ee5b00, ftLastWriteTime.dwHighDateTime=0x1d6eb7f, nFileSizeHigh=0x0, nFileSizeLow=0x74d0)) returned 1 [0056.163] MoveFileW (lpExistingFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.cs_CZ.txt" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.cs_cz.txt"), lpNewFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.cs_CZ.txt" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.cs_cz.txt")) returned 1 [0056.163] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.da.txt", nBufferLength=0x105, lpBuffer=0x31e0a4, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.da.txt", lpFilePart=0x0) returned 0x68 [0056.163] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.da.txt" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.da.txt"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x274 [0056.163] GetFileType (hFile=0x274) returned 0x1 [0056.164] GetFileType (hFile=0x274) returned 0x1 [0056.164] GetFileSize (in: hFile=0x274, lpFileSizeHigh=0x31e6a0 | out: lpFileSizeHigh=0x31e6a0*=0x0) returned 0x6d72 [0056.164] ReadFile (in: hFile=0x274, lpBuffer=0x27f5f58, nNumberOfBytesToRead=0x6d72, lpNumberOfBytesRead=0x31e64c, lpOverlapped=0x0 | out: lpBuffer=0x27f5f58*, lpNumberOfBytesRead=0x31e64c*=0x6d72, lpOverlapped=0x0) returned 1 [0056.179] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.da.txt", nBufferLength=0x105, lpBuffer=0x31e090, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.da.txt", lpFilePart=0x0) returned 0x68 [0056.179] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.da.txt" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.da.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x274 [0056.180] GetFileType (hFile=0x274) returned 0x1 [0056.180] GetFileType (hFile=0x274) returned 0x1 [0056.180] WriteFile (in: hFile=0x274, lpBuffer=0x28650c0*, nNumberOfBytesToWrite=0x6d80, lpNumberOfBytesWritten=0x31e640, lpOverlapped=0x0 | out: lpBuffer=0x28650c0*, lpNumberOfBytesWritten=0x31e640*=0x6d80, lpOverlapped=0x0) returned 1 [0056.181] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.da.txt", nBufferLength=0x105, lpBuffer=0x31e1c4, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.da.txt", lpFilePart=0x0) returned 0x68 [0056.181] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.da.txt", nBufferLength=0x105, lpBuffer=0x31e1c4, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.da.txt", lpFilePart=0x0) returned 0x68 [0056.181] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.da.txt" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.da.txt"), fInfoLevelId=0x0, lpFileInformation=0x31e6a0 | out: lpFileInformation=0x31e6a0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x93de7300, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7ddd5200, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x4f0bc60, ftLastWriteTime.dwHighDateTime=0x1d6eb7f, nFileSizeHigh=0x0, nFileSizeLow=0x6d80)) returned 1 [0056.181] MoveFileW (lpExistingFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.da.txt" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.da.txt"), lpNewFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.da.txt" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.da.txt")) returned 1 [0056.182] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.da_DK.txt", nBufferLength=0x105, lpBuffer=0x31e0a4, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.da_DK.txt", lpFilePart=0x0) returned 0x6b [0056.182] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.da_DK.txt" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.da_dk.txt"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x274 [0056.184] GetFileType (hFile=0x274) returned 0x1 [0056.184] GetFileType (hFile=0x274) returned 0x1 [0056.184] GetFileSize (in: hFile=0x274, lpFileSizeHigh=0x31e6a0 | out: lpFileSizeHigh=0x31e6a0*=0x0) returned 0x6d72 [0056.187] ReadFile (in: hFile=0x274, lpBuffer=0x26611cc, nNumberOfBytesToRead=0x6d72, lpNumberOfBytesRead=0x31e64c, lpOverlapped=0x0 | out: lpBuffer=0x26611cc*, lpNumberOfBytesRead=0x31e64c*=0x6d72, lpOverlapped=0x0) returned 1 [0056.188] CloseHandle (hObject=0x274) returned 1 [0056.227] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.da_DK.txt", nBufferLength=0x105, lpBuffer=0x31e090, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.da_DK.txt", lpFilePart=0x0) returned 0x6b [0056.227] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e584) returned 1 [0056.227] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.da_DK.txt" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.da_dk.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x274 [0056.228] GetFileType (hFile=0x274) returned 0x1 [0056.228] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e580) returned 1 [0056.228] GetFileType (hFile=0x274) returned 0x1 [0056.228] WriteFile (in: hFile=0x274, lpBuffer=0x26d0490*, nNumberOfBytesToWrite=0x6d80, lpNumberOfBytesWritten=0x31e640, lpOverlapped=0x0 | out: lpBuffer=0x26d0490*, lpNumberOfBytesWritten=0x31e640*=0x6d80, lpOverlapped=0x0) returned 1 [0056.229] CloseHandle (hObject=0x274) returned 1 [0056.229] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.da_DK.txt", nBufferLength=0x105, lpBuffer=0x31e1c4, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.da_DK.txt", lpFilePart=0x0) returned 0x6b [0056.229] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.da_DK.txt", nBufferLength=0x105, lpBuffer=0x31e1c4, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.da_DK.txt", lpFilePart=0x0) returned 0x6b [0056.229] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e624) returned 1 [0056.229] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.da_DK.txt" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.da_dk.txt"), fInfoLevelId=0x0, lpFileInformation=0x31e6a0 | out: lpFileInformation=0x31e6a0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x93de7300, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7ddd5200, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x4f7e080, ftLastWriteTime.dwHighDateTime=0x1d6eb7f, nFileSizeHigh=0x0, nFileSizeLow=0x6d80)) returned 1 [0056.230] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e620) returned 1 [0056.230] MoveFileW (lpExistingFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.da_DK.txt" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.da_dk.txt"), lpNewFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.da_DK.txt" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.da_dk.txt")) returned 1 [0056.230] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.de_CH.txt", nBufferLength=0x105, lpBuffer=0x31e0a4, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.de_CH.txt", lpFilePart=0x0) returned 0x6b [0056.230] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e598) returned 1 [0056.230] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.de_CH.txt" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.de_ch.txt"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x274 [0056.230] GetFileType (hFile=0x274) returned 0x1 [0056.230] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e594) returned 1 [0056.230] GetFileType (hFile=0x274) returned 0x1 [0056.230] GetFileSize (in: hFile=0x274, lpFileSizeHigh=0x31e6a0 | out: lpFileSizeHigh=0x31e6a0*=0x0) returned 0x72d6 [0056.230] ReadFile (in: hFile=0x274, lpBuffer=0x26d7714, nNumberOfBytesToRead=0x72d6, lpNumberOfBytesRead=0x31e64c, lpOverlapped=0x0 | out: lpBuffer=0x26d7714*, lpNumberOfBytesRead=0x31e64c*=0x72d6, lpOverlapped=0x0) returned 1 [0056.232] CloseHandle (hObject=0x274) returned 1 [0056.253] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.de_CH.txt", nBufferLength=0x105, lpBuffer=0x31e090, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.de_CH.txt", lpFilePart=0x0) returned 0x6b [0056.254] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e584) returned 1 [0056.254] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.de_CH.txt" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.de_ch.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x274 [0056.255] GetFileType (hFile=0x274) returned 0x1 [0056.255] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e580) returned 1 [0056.255] GetFileType (hFile=0x274) returned 0x1 [0056.255] WriteFile (in: hFile=0x274, lpBuffer=0x274835c*, nNumberOfBytesToWrite=0x72e0, lpNumberOfBytesWritten=0x31e640, lpOverlapped=0x0 | out: lpBuffer=0x274835c*, lpNumberOfBytesWritten=0x31e640*=0x72e0, lpOverlapped=0x0) returned 1 [0056.256] CloseHandle (hObject=0x274) returned 1 [0056.256] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.de_CH.txt", nBufferLength=0x105, lpBuffer=0x31e1c4, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.de_CH.txt", lpFilePart=0x0) returned 0x6b [0056.256] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.de_CH.txt", nBufferLength=0x105, lpBuffer=0x31e1c4, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.de_CH.txt", lpFilePart=0x0) returned 0x6b [0056.256] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e624) returned 1 [0056.256] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.de_CH.txt" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.de_ch.txt"), fInfoLevelId=0x0, lpFileInformation=0x31e6a0 | out: lpFileInformation=0x31e6a0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x93de7300, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7ddd5200, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x4fca340, ftLastWriteTime.dwHighDateTime=0x1d6eb7f, nFileSizeHigh=0x0, nFileSizeLow=0x72e0)) returned 1 [0056.256] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e620) returned 1 [0056.256] MoveFileW (lpExistingFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.de_CH.txt" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.de_ch.txt"), lpNewFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.de_CH.txt" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.de_ch.txt")) returned 1 [0056.256] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.de_DE.txt", nBufferLength=0x105, lpBuffer=0x31e0a4, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.de_DE.txt", lpFilePart=0x0) returned 0x6b [0056.256] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e598) returned 1 [0056.257] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.de_DE.txt" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.de_de.txt"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x274 [0056.257] GetFileType (hFile=0x274) returned 0x1 [0056.257] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e594) returned 1 [0056.257] GetFileType (hFile=0x274) returned 0x1 [0056.257] GetFileSize (in: hFile=0x274, lpFileSizeHigh=0x31e6a0 | out: lpFileSizeHigh=0x31e6a0*=0x0) returned 0x7328 [0056.257] ReadFile (in: hFile=0x274, lpBuffer=0x274fb40, nNumberOfBytesToRead=0x7328, lpNumberOfBytesRead=0x31e64c, lpOverlapped=0x0 | out: lpBuffer=0x274fb40*, lpNumberOfBytesRead=0x31e64c*=0x7328, lpOverlapped=0x0) returned 1 [0056.259] CloseHandle (hObject=0x274) returned 1 [0056.273] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.de_DE.txt", nBufferLength=0x105, lpBuffer=0x31e090, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.de_DE.txt", lpFilePart=0x0) returned 0x6b [0056.273] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e584) returned 1 [0056.273] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.de_DE.txt" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.de_de.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x274 [0056.274] GetFileType (hFile=0x274) returned 0x1 [0056.274] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e580) returned 1 [0056.274] GetFileType (hFile=0x274) returned 0x1 [0056.274] WriteFile (in: hFile=0x274, lpBuffer=0x27c0914*, nNumberOfBytesToWrite=0x7330, lpNumberOfBytesWritten=0x31e640, lpOverlapped=0x0 | out: lpBuffer=0x27c0914*, lpNumberOfBytesWritten=0x31e640*=0x7330, lpOverlapped=0x0) returned 1 [0056.275] CloseHandle (hObject=0x274) returned 1 [0056.275] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.de_DE.txt", nBufferLength=0x105, lpBuffer=0x31e1c4, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.de_DE.txt", lpFilePart=0x0) returned 0x6b [0056.275] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.de_DE.txt", nBufferLength=0x105, lpBuffer=0x31e1c4, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.de_DE.txt", lpFilePart=0x0) returned 0x6b [0056.275] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e624) returned 1 [0056.275] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.de_DE.txt" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.de_de.txt"), fInfoLevelId=0x0, lpFileInformation=0x31e6a0 | out: lpFileInformation=0x31e6a0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x93de7300, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7ddaf0a0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x4ff04a0, ftLastWriteTime.dwHighDateTime=0x1d6eb7f, nFileSizeHigh=0x0, nFileSizeLow=0x7330)) returned 1 [0056.275] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e620) returned 1 [0056.276] MoveFileW (lpExistingFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.de_DE.txt" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.de_de.txt"), lpNewFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.de_DE.txt" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.de_de.txt")) returned 1 [0056.276] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.de_DE_PREEURO.txt", nBufferLength=0x105, lpBuffer=0x31e0a4, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.de_DE_PREEURO.txt", lpFilePart=0x0) returned 0x73 [0056.276] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e598) returned 1 [0056.276] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.de_DE_PREEURO.txt" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.de_de_preeuro.txt"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x274 [0056.276] GetFileType (hFile=0x274) returned 0x1 [0056.276] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e594) returned 1 [0056.276] GetFileType (hFile=0x274) returned 0x1 [0056.276] GetFileSize (in: hFile=0x274, lpFileSizeHigh=0x31e6a0 | out: lpFileSizeHigh=0x31e6a0*=0x0) returned 0x7326 [0056.276] ReadFile (in: hFile=0x274, lpBuffer=0x27c8168, nNumberOfBytesToRead=0x7326, lpNumberOfBytesRead=0x31e64c, lpOverlapped=0x0 | out: lpBuffer=0x27c8168*, lpNumberOfBytesRead=0x31e64c*=0x7326, lpOverlapped=0x0) returned 1 [0056.278] CloseHandle (hObject=0x274) returned 1 [0056.292] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.de_DE_PREEURO.txt", nBufferLength=0x105, lpBuffer=0x31e090, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.de_DE_PREEURO.txt", lpFilePart=0x0) returned 0x73 [0056.292] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e584) returned 1 [0056.292] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.de_DE_PREEURO.txt" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.de_de_preeuro.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x274 [0056.293] GetFileType (hFile=0x274) returned 0x1 [0056.293] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e580) returned 1 [0056.293] GetFileType (hFile=0x274) returned 0x1 [0056.293] WriteFile (in: hFile=0x274, lpBuffer=0x2838f40*, nNumberOfBytesToWrite=0x7330, lpNumberOfBytesWritten=0x31e640, lpOverlapped=0x0 | out: lpBuffer=0x2838f40*, lpNumberOfBytesWritten=0x31e640*=0x7330, lpOverlapped=0x0) returned 1 [0056.294] CloseHandle (hObject=0x274) returned 1 [0056.294] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.de_DE_PREEURO.txt", nBufferLength=0x105, lpBuffer=0x31e1c4, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.de_DE_PREEURO.txt", lpFilePart=0x0) returned 0x73 [0056.294] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.de_DE_PREEURO.txt", nBufferLength=0x105, lpBuffer=0x31e1c4, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.de_DE_PREEURO.txt", lpFilePart=0x0) returned 0x73 [0056.294] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e624) returned 1 [0056.294] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.de_DE_PREEURO.txt" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.de_de_preeuro.txt"), fInfoLevelId=0x0, lpFileInformation=0x31e6a0 | out: lpFileInformation=0x31e6a0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x93de7300, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7ddd5200, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x5016600, ftLastWriteTime.dwHighDateTime=0x1d6eb7f, nFileSizeHigh=0x0, nFileSizeLow=0x7330)) returned 1 [0056.294] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e620) returned 1 [0056.294] MoveFileW (lpExistingFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.de_DE_PREEURO.txt" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.de_de_preeuro.txt"), lpNewFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.de_DE_PREEURO.txt" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.de_de_preeuro.txt")) returned 1 [0056.295] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.el.txt", nBufferLength=0x105, lpBuffer=0x31e0a4, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.el.txt", lpFilePart=0x0) returned 0x68 [0056.295] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e598) returned 1 [0056.295] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.el.txt" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.el.txt"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x274 [0056.296] GetFileType (hFile=0x274) returned 0x1 [0056.296] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e594) returned 1 [0056.296] GetFileType (hFile=0x274) returned 0x1 [0056.296] GetFileSize (in: hFile=0x274, lpFileSizeHigh=0x31e6a0 | out: lpFileSizeHigh=0x31e6a0*=0x0) returned 0x6e92 [0056.296] ReadFile (in: hFile=0x274, lpBuffer=0x28407a8, nNumberOfBytesToRead=0x6e92, lpNumberOfBytesRead=0x31e64c, lpOverlapped=0x0 | out: lpBuffer=0x28407a8*, lpNumberOfBytesRead=0x31e64c*=0x6e92, lpOverlapped=0x0) returned 1 [0056.297] CloseHandle (hObject=0x274) returned 1 [0056.336] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.el.txt", nBufferLength=0x105, lpBuffer=0x31e090, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.el.txt", lpFilePart=0x0) returned 0x68 [0056.336] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e584) returned 1 [0056.336] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.el.txt" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.el.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x274 [0056.337] GetFileType (hFile=0x274) returned 0x1 [0056.337] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e580) returned 1 [0056.337] GetFileType (hFile=0x274) returned 0x1 [0056.337] WriteFile (in: hFile=0x274, lpBuffer=0x26b7010*, nNumberOfBytesToWrite=0x6ea0, lpNumberOfBytesWritten=0x31e640, lpOverlapped=0x0 | out: lpBuffer=0x26b7010*, lpNumberOfBytesWritten=0x31e640*=0x6ea0, lpOverlapped=0x0) returned 1 [0056.338] CloseHandle (hObject=0x274) returned 1 [0056.339] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.el.txt", nBufferLength=0x105, lpBuffer=0x31e1c4, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.el.txt", lpFilePart=0x0) returned 0x68 [0056.339] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.el.txt", nBufferLength=0x105, lpBuffer=0x31e1c4, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.el.txt", lpFilePart=0x0) returned 0x68 [0056.339] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e624) returned 1 [0056.339] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.el.txt" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.el.txt"), fInfoLevelId=0x0, lpFileInformation=0x31e6a0 | out: lpFileInformation=0x31e6a0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x93de7300, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7f31b6a0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x5088a20, ftLastWriteTime.dwHighDateTime=0x1d6eb7f, nFileSizeHigh=0x0, nFileSizeLow=0x6ea0)) returned 1 [0056.339] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e620) returned 1 [0056.339] MoveFileW (lpExistingFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.el.txt" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.el.txt"), lpNewFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.el.txt" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.el.txt")) returned 1 [0056.339] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.el_GR.txt", nBufferLength=0x105, lpBuffer=0x31e0a4, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.el_GR.txt", lpFilePart=0x0) returned 0x6b [0056.339] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e598) returned 1 [0056.339] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.el_GR.txt" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.el_gr.txt"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x274 [0056.339] GetFileType (hFile=0x274) returned 0x1 [0056.339] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e594) returned 1 [0056.339] GetFileType (hFile=0x274) returned 0x1 [0056.340] GetFileSize (in: hFile=0x274, lpFileSizeHigh=0x31e6a0 | out: lpFileSizeHigh=0x31e6a0*=0x0) returned 0x6e92 [0056.340] ReadFile (in: hFile=0x274, lpBuffer=0x26be3a0, nNumberOfBytesToRead=0x6e92, lpNumberOfBytesRead=0x31e64c, lpOverlapped=0x0 | out: lpBuffer=0x26be3a0*, lpNumberOfBytesRead=0x31e64c*=0x6e92, lpOverlapped=0x0) returned 1 [0056.341] CloseHandle (hObject=0x274) returned 1 [0056.355] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.el_GR.txt", nBufferLength=0x105, lpBuffer=0x31e090, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.el_GR.txt", lpFilePart=0x0) returned 0x6b [0056.355] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e584) returned 1 [0056.355] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.el_GR.txt" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.el_gr.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x274 [0056.356] GetFileType (hFile=0x274) returned 0x1 [0056.356] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e580) returned 1 [0056.356] GetFileType (hFile=0x274) returned 0x1 [0056.356] WriteFile (in: hFile=0x274, lpBuffer=0x272dc04*, nNumberOfBytesToWrite=0x6ea0, lpNumberOfBytesWritten=0x31e640, lpOverlapped=0x0 | out: lpBuffer=0x272dc04*, lpNumberOfBytesWritten=0x31e640*=0x6ea0, lpOverlapped=0x0) returned 1 [0056.358] CloseHandle (hObject=0x274) returned 1 [0056.358] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.el_GR.txt", nBufferLength=0x105, lpBuffer=0x31e1c4, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.el_GR.txt", lpFilePart=0x0) returned 0x6b [0056.358] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.el_GR.txt", nBufferLength=0x105, lpBuffer=0x31e1c4, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.el_GR.txt", lpFilePart=0x0) returned 0x6b [0056.358] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e624) returned 1 [0056.358] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.el_GR.txt" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.el_gr.txt"), fInfoLevelId=0x0, lpFileInformation=0x31e6a0 | out: lpFileInformation=0x31e6a0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x93de7300, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7f31b6a0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x50aeb80, ftLastWriteTime.dwHighDateTime=0x1d6eb7f, nFileSizeHigh=0x0, nFileSizeLow=0x6ea0)) returned 1 [0056.358] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e620) returned 1 [0056.358] MoveFileW (lpExistingFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.el_GR.txt" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.el_gr.txt"), lpNewFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.el_GR.txt" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.el_gr.txt")) returned 1 [0056.358] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.el_GR_PREEURO.txt", nBufferLength=0x105, lpBuffer=0x31e0a4, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.el_GR_PREEURO.txt", lpFilePart=0x0) returned 0x73 [0056.358] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e598) returned 1 [0056.358] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.el_GR_PREEURO.txt" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.el_gr_preeuro.txt"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x274 [0056.358] GetFileType (hFile=0x274) returned 0x1 [0056.359] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e594) returned 1 [0056.359] GetFileType (hFile=0x274) returned 0x1 [0056.359] GetFileSize (in: hFile=0x274, lpFileSizeHigh=0x31e6a0 | out: lpFileSizeHigh=0x31e6a0*=0x0) returned 0x6e76 [0056.359] ReadFile (in: hFile=0x274, lpBuffer=0x2734fc8, nNumberOfBytesToRead=0x6e76, lpNumberOfBytesRead=0x31e64c, lpOverlapped=0x0 | out: lpBuffer=0x2734fc8*, lpNumberOfBytesRead=0x31e64c*=0x6e76, lpOverlapped=0x0) returned 1 [0056.361] CloseHandle (hObject=0x274) returned 1 [0056.374] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.el_GR_PREEURO.txt", nBufferLength=0x105, lpBuffer=0x31e090, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.el_GR_PREEURO.txt", lpFilePart=0x0) returned 0x73 [0056.374] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e584) returned 1 [0056.374] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.el_GR_PREEURO.txt" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.el_gr_preeuro.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x274 [0056.375] GetFileType (hFile=0x274) returned 0x1 [0056.375] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e580) returned 1 [0056.375] GetFileType (hFile=0x274) returned 0x1 [0056.375] WriteFile (in: hFile=0x274, lpBuffer=0x27a4630*, nNumberOfBytesToWrite=0x6e80, lpNumberOfBytesWritten=0x31e640, lpOverlapped=0x0 | out: lpBuffer=0x27a4630*, lpNumberOfBytesWritten=0x31e640*=0x6e80, lpOverlapped=0x0) returned 1 [0056.376] CloseHandle (hObject=0x274) returned 1 [0056.377] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.el_GR_PREEURO.txt", nBufferLength=0x105, lpBuffer=0x31e1c4, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.el_GR_PREEURO.txt", lpFilePart=0x0) returned 0x73 [0056.377] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.el_GR_PREEURO.txt", nBufferLength=0x105, lpBuffer=0x31e1c4, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.el_GR_PREEURO.txt", lpFilePart=0x0) returned 0x73 [0056.377] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e624) returned 1 [0056.377] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.el_GR_PREEURO.txt" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.el_gr_preeuro.txt"), fInfoLevelId=0x0, lpFileInformation=0x31e6a0 | out: lpFileInformation=0x31e6a0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x950fa000, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7f31b6a0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x50d4ce0, ftLastWriteTime.dwHighDateTime=0x1d6eb7f, nFileSizeHigh=0x0, nFileSizeLow=0x6e80)) returned 1 [0056.377] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e620) returned 1 [0056.377] MoveFileW (lpExistingFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.el_GR_PREEURO.txt" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.el_gr_preeuro.txt"), lpNewFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.el_GR_PREEURO.txt" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.el_gr_preeuro.txt")) returned 1 [0056.377] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.en_CA.txt", nBufferLength=0x105, lpBuffer=0x31e0a4, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.en_CA.txt", lpFilePart=0x0) returned 0x6b [0056.377] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e598) returned 1 [0056.377] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.en_CA.txt" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.en_ca.txt"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x274 [0056.378] GetFileType (hFile=0x274) returned 0x1 [0056.378] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e594) returned 1 [0056.378] GetFileType (hFile=0x274) returned 0x1 [0056.378] GetFileSize (in: hFile=0x274, lpFileSizeHigh=0x31e6a0 | out: lpFileSizeHigh=0x31e6a0*=0x0) returned 0x6e88 [0056.378] ReadFile (in: hFile=0x274, lpBuffer=0x27ab9f4, nNumberOfBytesToRead=0x6e88, lpNumberOfBytesRead=0x31e64c, lpOverlapped=0x0 | out: lpBuffer=0x27ab9f4*, lpNumberOfBytesRead=0x31e64c*=0x6e88, lpOverlapped=0x0) returned 1 [0056.380] CloseHandle (hObject=0x274) returned 1 [0056.394] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.en_CA.txt", nBufferLength=0x105, lpBuffer=0x31e090, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.en_CA.txt", lpFilePart=0x0) returned 0x6b [0056.394] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e584) returned 1 [0056.394] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.en_CA.txt" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.en_ca.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x274 [0056.395] GetFileType (hFile=0x274) returned 0x1 [0056.395] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e580) returned 1 [0056.395] GetFileType (hFile=0x274) returned 0x1 [0056.395] WriteFile (in: hFile=0x274, lpBuffer=0x281b0a8*, nNumberOfBytesToWrite=0x6e90, lpNumberOfBytesWritten=0x31e640, lpOverlapped=0x0 | out: lpBuffer=0x281b0a8*, lpNumberOfBytesWritten=0x31e640*=0x6e90, lpOverlapped=0x0) returned 1 [0056.396] CloseHandle (hObject=0x274) returned 1 [0056.396] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.en_CA.txt", nBufferLength=0x105, lpBuffer=0x31e1c4, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.en_CA.txt", lpFilePart=0x0) returned 0x6b [0056.396] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.en_CA.txt", nBufferLength=0x105, lpBuffer=0x31e1c4, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.en_CA.txt", lpFilePart=0x0) returned 0x6b [0056.396] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e624) returned 1 [0056.396] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.en_CA.txt" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.en_ca.txt"), fInfoLevelId=0x0, lpFileInformation=0x31e6a0 | out: lpFileInformation=0x31e6a0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x93de7300, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7ddaf0a0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x5120fa0, ftLastWriteTime.dwHighDateTime=0x1d6eb7f, nFileSizeHigh=0x0, nFileSizeLow=0x6e90)) returned 1 [0056.396] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e620) returned 1 [0056.396] MoveFileW (lpExistingFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.en_CA.txt" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.en_ca.txt"), lpNewFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.en_CA.txt" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.en_ca.txt")) returned 1 [0056.397] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.en_GB.txt", nBufferLength=0x105, lpBuffer=0x31e0a4, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.en_GB.txt", lpFilePart=0x0) returned 0x6b [0056.397] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e598) returned 1 [0056.397] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.en_GB.txt" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.en_gb.txt"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x274 [0056.397] GetFileType (hFile=0x274) returned 0x1 [0056.397] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e594) returned 1 [0056.397] GetFileType (hFile=0x274) returned 0x1 [0056.397] GetFileSize (in: hFile=0x274, lpFileSizeHigh=0x31e6a0 | out: lpFileSizeHigh=0x31e6a0*=0x0) returned 0x6e88 [0056.397] ReadFile (in: hFile=0x274, lpBuffer=0x282243c, nNumberOfBytesToRead=0x6e88, lpNumberOfBytesRead=0x31e64c, lpOverlapped=0x0 | out: lpBuffer=0x282243c*, lpNumberOfBytesRead=0x31e64c*=0x6e88, lpOverlapped=0x0) returned 1 [0056.399] CloseHandle (hObject=0x274) returned 1 [0056.414] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.en_GB.txt", nBufferLength=0x105, lpBuffer=0x31e090, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.en_GB.txt", lpFilePart=0x0) returned 0x6b [0056.414] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e584) returned 1 [0056.414] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.en_GB.txt" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.en_gb.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x274 [0056.415] GetFileType (hFile=0x274) returned 0x1 [0056.415] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e580) returned 1 [0056.415] GetFileType (hFile=0x274) returned 0x1 [0056.415] WriteFile (in: hFile=0x274, lpBuffer=0x2691b2c*, nNumberOfBytesToWrite=0x6e90, lpNumberOfBytesWritten=0x31e640, lpOverlapped=0x0 | out: lpBuffer=0x2691b2c*, lpNumberOfBytesWritten=0x31e640*=0x6e90, lpOverlapped=0x0) returned 1 [0056.417] CloseHandle (hObject=0x274) returned 1 [0056.417] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.en_GB.txt", nBufferLength=0x105, lpBuffer=0x31e1c4, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.en_GB.txt", lpFilePart=0x0) returned 0x6b [0056.417] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.en_GB.txt", nBufferLength=0x105, lpBuffer=0x31e1c4, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.en_GB.txt", lpFilePart=0x0) returned 0x6b [0056.417] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e624) returned 1 [0056.417] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.en_GB.txt" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.en_gb.txt"), fInfoLevelId=0x0, lpFileInformation=0x31e6a0 | out: lpFileInformation=0x31e6a0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x93de7300, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7ddaf0a0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x5147100, ftLastWriteTime.dwHighDateTime=0x1d6eb7f, nFileSizeHigh=0x0, nFileSizeLow=0x6e90)) returned 1 [0056.417] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e620) returned 1 [0056.417] MoveFileW (lpExistingFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.en_GB.txt" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.en_gb.txt"), lpNewFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.en_GB.txt" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.en_gb.txt")) returned 1 [0056.417] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.en_GB_EURO.txt", nBufferLength=0x105, lpBuffer=0x31e0a4, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.en_GB_EURO.txt", lpFilePart=0x0) returned 0x70 [0056.417] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e598) returned 1 [0056.417] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.en_GB_EURO.txt" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.en_gb_euro.txt"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x274 [0056.418] GetFileType (hFile=0x274) returned 0x1 [0056.418] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e594) returned 1 [0056.418] GetFileType (hFile=0x274) returned 0x1 [0056.418] GetFileSize (in: hFile=0x274, lpFileSizeHigh=0x31e6a0 | out: lpFileSizeHigh=0x31e6a0*=0x0) returned 0x6e88 [0056.418] ReadFile (in: hFile=0x274, lpBuffer=0x2698ed4, nNumberOfBytesToRead=0x6e88, lpNumberOfBytesRead=0x31e64c, lpOverlapped=0x0 | out: lpBuffer=0x2698ed4*, lpNumberOfBytesRead=0x31e64c*=0x6e88, lpOverlapped=0x0) returned 1 [0056.420] CloseHandle (hObject=0x274) returned 1 [0056.433] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.en_GB_EURO.txt", nBufferLength=0x105, lpBuffer=0x31e090, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.en_GB_EURO.txt", lpFilePart=0x0) returned 0x70 [0056.433] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e584) returned 1 [0056.433] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.en_GB_EURO.txt" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.en_gb_euro.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x274 [0056.434] GetFileType (hFile=0x274) returned 0x1 [0056.434] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e580) returned 1 [0056.434] GetFileType (hFile=0x274) returned 0x1 [0056.435] WriteFile (in: hFile=0x274, lpBuffer=0x27086e4*, nNumberOfBytesToWrite=0x6e90, lpNumberOfBytesWritten=0x31e640, lpOverlapped=0x0 | out: lpBuffer=0x27086e4*, lpNumberOfBytesWritten=0x31e640*=0x6e90, lpOverlapped=0x0) returned 1 [0056.436] CloseHandle (hObject=0x274) returned 1 [0056.436] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.en_GB_EURO.txt", nBufferLength=0x105, lpBuffer=0x31e1c4, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.en_GB_EURO.txt", lpFilePart=0x0) returned 0x70 [0056.436] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.en_GB_EURO.txt", nBufferLength=0x105, lpBuffer=0x31e1c4, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.en_GB_EURO.txt", lpFilePart=0x0) returned 0x70 [0056.436] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e624) returned 1 [0056.436] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.en_GB_EURO.txt" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.en_gb_euro.txt"), fInfoLevelId=0x0, lpFileInformation=0x31e6a0 | out: lpFileInformation=0x31e6a0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x93de7300, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7ddaf0a0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x516d260, ftLastWriteTime.dwHighDateTime=0x1d6eb7f, nFileSizeHigh=0x0, nFileSizeLow=0x6e90)) returned 1 [0056.436] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e620) returned 1 [0056.436] MoveFileW (lpExistingFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.en_GB_EURO.txt" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.en_gb_euro.txt"), lpNewFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.en_GB_EURO.txt" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.en_gb_euro.txt")) returned 1 [0056.436] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.en_US.txt", nBufferLength=0x105, lpBuffer=0x31e0a4, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.en_US.txt", lpFilePart=0x0) returned 0x6b [0056.436] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e598) returned 1 [0056.436] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.en_US.txt" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.en_us.txt"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x274 [0056.437] GetFileType (hFile=0x274) returned 0x1 [0056.437] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e594) returned 1 [0056.437] GetFileType (hFile=0x274) returned 0x1 [0056.437] GetFileSize (in: hFile=0x274, lpFileSizeHigh=0x31e6a0 | out: lpFileSizeHigh=0x31e6a0*=0x0) returned 0x6e88 [0056.438] ReadFile (in: hFile=0x274, lpBuffer=0x270faa4, nNumberOfBytesToRead=0x6e88, lpNumberOfBytesRead=0x31e64c, lpOverlapped=0x0 | out: lpBuffer=0x270faa4*, lpNumberOfBytesRead=0x31e64c*=0x6e88, lpOverlapped=0x0) returned 1 [0056.441] CloseHandle (hObject=0x274) returned 1 [0056.454] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.en_US.txt", nBufferLength=0x105, lpBuffer=0x31e090, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.en_US.txt", lpFilePart=0x0) returned 0x6b [0056.454] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e584) returned 1 [0056.454] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.en_US.txt" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.en_us.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x274 [0056.455] GetFileType (hFile=0x274) returned 0x1 [0056.455] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e580) returned 1 [0056.455] GetFileType (hFile=0x274) returned 0x1 [0056.455] WriteFile (in: hFile=0x274, lpBuffer=0x277f158*, nNumberOfBytesToWrite=0x6e90, lpNumberOfBytesWritten=0x31e640, lpOverlapped=0x0 | out: lpBuffer=0x277f158*, lpNumberOfBytesWritten=0x31e640*=0x6e90, lpOverlapped=0x0) returned 1 [0056.457] CloseHandle (hObject=0x274) returned 1 [0056.457] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.en_US.txt", nBufferLength=0x105, lpBuffer=0x31e1c4, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.en_US.txt", lpFilePart=0x0) returned 0x6b [0056.457] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.en_US.txt", nBufferLength=0x105, lpBuffer=0x31e1c4, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.en_US.txt", lpFilePart=0x0) returned 0x6b [0056.457] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e624) returned 1 [0056.457] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.en_US.txt" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.en_us.txt"), fInfoLevelId=0x0, lpFileInformation=0x31e6a0 | out: lpFileInformation=0x31e6a0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x93de7300, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7ddaf0a0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x51b9520, ftLastWriteTime.dwHighDateTime=0x1d6eb7f, nFileSizeHigh=0x0, nFileSizeLow=0x6e90)) returned 1 [0056.457] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e620) returned 1 [0056.457] MoveFileW (lpExistingFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.en_US.txt" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.en_us.txt"), lpNewFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.en_US.txt" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.en_us.txt")) returned 1 [0056.457] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.en_US_POSIX.txt", nBufferLength=0x105, lpBuffer=0x31e0a4, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.en_US_POSIX.txt", lpFilePart=0x0) returned 0x71 [0056.457] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e598) returned 1 [0056.457] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.en_US_POSIX.txt" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.en_us_posix.txt"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x274 [0056.458] GetFileType (hFile=0x274) returned 0x1 [0056.458] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e594) returned 1 [0056.458] GetFileType (hFile=0x274) returned 0x1 [0056.458] GetFileSize (in: hFile=0x274, lpFileSizeHigh=0x31e6a0 | out: lpFileSizeHigh=0x31e6a0*=0x0) returned 0x6e88 [0056.458] ReadFile (in: hFile=0x274, lpBuffer=0x2786504, nNumberOfBytesToRead=0x6e88, lpNumberOfBytesRead=0x31e64c, lpOverlapped=0x0 | out: lpBuffer=0x2786504*, lpNumberOfBytesRead=0x31e64c*=0x6e88, lpOverlapped=0x0) returned 1 [0056.459] CloseHandle (hObject=0x274) returned 1 [0056.473] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.en_US_POSIX.txt", nBufferLength=0x105, lpBuffer=0x31e090, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.en_US_POSIX.txt", lpFilePart=0x0) returned 0x71 [0056.473] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e584) returned 1 [0056.473] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.en_US_POSIX.txt" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.en_us_posix.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x274 [0056.474] GetFileType (hFile=0x274) returned 0x1 [0056.474] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e580) returned 1 [0056.474] GetFileType (hFile=0x274) returned 0x1 [0056.474] WriteFile (in: hFile=0x274, lpBuffer=0x27f5bb8*, nNumberOfBytesToWrite=0x6e90, lpNumberOfBytesWritten=0x31e640, lpOverlapped=0x0 | out: lpBuffer=0x27f5bb8*, lpNumberOfBytesWritten=0x31e640*=0x6e90, lpOverlapped=0x0) returned 1 [0056.476] CloseHandle (hObject=0x274) returned 1 [0056.476] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.en_US_POSIX.txt", nBufferLength=0x105, lpBuffer=0x31e1c4, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.en_US_POSIX.txt", lpFilePart=0x0) returned 0x71 [0056.476] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.en_US_POSIX.txt", nBufferLength=0x105, lpBuffer=0x31e1c4, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.en_US_POSIX.txt", lpFilePart=0x0) returned 0x71 [0056.476] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e624) returned 1 [0056.476] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.en_US_POSIX.txt" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.en_us_posix.txt"), fInfoLevelId=0x0, lpFileInformation=0x31e6a0 | out: lpFileInformation=0x31e6a0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x950fa000, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7ddaf0a0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x51df680, ftLastWriteTime.dwHighDateTime=0x1d6eb7f, nFileSizeHigh=0x0, nFileSizeLow=0x6e90)) returned 1 [0056.476] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e620) returned 1 [0056.476] MoveFileW (lpExistingFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.en_US_POSIX.txt" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.en_us_posix.txt"), lpNewFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.en_US_POSIX.txt" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.en_us_posix.txt")) returned 1 [0056.477] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.es.txt", nBufferLength=0x105, lpBuffer=0x31e0a4, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.es.txt", lpFilePart=0x0) returned 0x68 [0056.477] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e598) returned 1 [0056.477] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.es.txt" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.es.txt"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x274 [0056.477] GetFileType (hFile=0x274) returned 0x1 [0056.477] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e594) returned 1 [0056.477] GetFileType (hFile=0x274) returned 0x1 [0056.477] GetFileSize (in: hFile=0x274, lpFileSizeHigh=0x31e6a0 | out: lpFileSizeHigh=0x31e6a0*=0x0) returned 0x6ec4 [0056.477] ReadFile (in: hFile=0x274, lpBuffer=0x27fcf70, nNumberOfBytesToRead=0x6ec4, lpNumberOfBytesRead=0x31e64c, lpOverlapped=0x0 | out: lpBuffer=0x27fcf70*, lpNumberOfBytesRead=0x31e64c*=0x6ec4, lpOverlapped=0x0) returned 1 [0056.479] CloseHandle (hObject=0x274) returned 1 [0056.495] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.es.txt", nBufferLength=0x105, lpBuffer=0x31e090, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.es.txt", lpFilePart=0x0) returned 0x68 [0056.495] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e584) returned 1 [0056.495] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.es.txt" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.es.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x274 [0056.496] GetFileType (hFile=0x274) returned 0x1 [0056.496] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e580) returned 1 [0056.496] GetFileType (hFile=0x274) returned 0x1 [0056.496] WriteFile (in: hFile=0x274, lpBuffer=0x2676474*, nNumberOfBytesToWrite=0x6ed0, lpNumberOfBytesWritten=0x31e640, lpOverlapped=0x0 | out: lpBuffer=0x2676474*, lpNumberOfBytesWritten=0x31e640*=0x6ed0, lpOverlapped=0x0) returned 1 [0056.497] CloseHandle (hObject=0x274) returned 1 [0056.497] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.es.txt", nBufferLength=0x105, lpBuffer=0x31e1c4, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.es.txt", lpFilePart=0x0) returned 0x68 [0056.497] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.es.txt", nBufferLength=0x105, lpBuffer=0x31e1c4, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.es.txt", lpFilePart=0x0) returned 0x68 [0056.497] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e624) returned 1 [0056.497] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.es.txt" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.es.txt"), fInfoLevelId=0x0, lpFileInformation=0x31e6a0 | out: lpFileInformation=0x31e6a0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x950fa000, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7ddaf0a0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x52057e0, ftLastWriteTime.dwHighDateTime=0x1d6eb7f, nFileSizeHigh=0x0, nFileSizeLow=0x6ed0)) returned 1 [0056.497] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e620) returned 1 [0056.497] MoveFileW (lpExistingFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.es.txt" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.es.txt"), lpNewFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.es.txt" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.es.txt")) returned 1 [0056.497] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.es_AR.txt", nBufferLength=0x105, lpBuffer=0x31e0a4, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.es_AR.txt", lpFilePart=0x0) returned 0x6b [0056.497] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e598) returned 1 [0056.498] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.es_AR.txt" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.es_ar.txt"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x274 [0056.499] GetFileType (hFile=0x274) returned 0x1 [0056.499] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e594) returned 1 [0056.499] GetFileType (hFile=0x274) returned 0x1 [0056.499] GetFileSize (in: hFile=0x274, lpFileSizeHigh=0x31e6a0 | out: lpFileSizeHigh=0x31e6a0*=0x0) returned 0x6ec8 [0056.499] ReadFile (in: hFile=0x274, lpBuffer=0x267d834, nNumberOfBytesToRead=0x6ec8, lpNumberOfBytesRead=0x31e64c, lpOverlapped=0x0 | out: lpBuffer=0x267d834*, lpNumberOfBytesRead=0x31e64c*=0x6ec8, lpOverlapped=0x0) returned 1 [0056.501] CloseHandle (hObject=0x274) returned 1 [0056.539] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.es_AR.txt", nBufferLength=0x105, lpBuffer=0x31e090, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.es_AR.txt", lpFilePart=0x0) returned 0x6b [0056.539] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e584) returned 1 [0056.539] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.es_AR.txt" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.es_ar.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x274 [0056.539] GetFileType (hFile=0x274) returned 0x1 [0056.540] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e580) returned 1 [0056.540] GetFileType (hFile=0x274) returned 0x1 [0056.540] WriteFile (in: hFile=0x274, lpBuffer=0x26ed184*, nNumberOfBytesToWrite=0x6ed0, lpNumberOfBytesWritten=0x31e640, lpOverlapped=0x0 | out: lpBuffer=0x26ed184*, lpNumberOfBytesWritten=0x31e640*=0x6ed0, lpOverlapped=0x0) returned 1 [0056.542] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.es_AR.txt", nBufferLength=0x105, lpBuffer=0x31e1c4, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.es_AR.txt", lpFilePart=0x0) returned 0x6b [0056.542] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.es_AR.txt", nBufferLength=0x105, lpBuffer=0x31e1c4, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.es_AR.txt", lpFilePart=0x0) returned 0x6b [0056.542] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e624) returned 1 [0056.542] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.es_AR.txt" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.es_ar.txt"), fInfoLevelId=0x0, lpFileInformation=0x31e6a0 | out: lpFileInformation=0x31e6a0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x93de7300, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7ddaf0a0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x5277c00, ftLastWriteTime.dwHighDateTime=0x1d6eb7f, nFileSizeHigh=0x0, nFileSizeLow=0x6ed0)) returned 1 [0056.542] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e620) returned 1 [0056.542] MoveFileW (lpExistingFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.es_AR.txt" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.es_ar.txt"), lpNewFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.es_AR.txt" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.es_ar.txt")) returned 1 [0056.542] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.es_BO.txt", nBufferLength=0x105, lpBuffer=0x31e0a4, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.es_BO.txt", lpFilePart=0x0) returned 0x6b [0056.542] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e598) returned 1 [0056.542] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.es_BO.txt" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.es_bo.txt"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x274 [0056.542] GetFileType (hFile=0x274) returned 0x1 [0056.542] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e594) returned 1 [0056.542] GetFileType (hFile=0x274) returned 0x1 [0056.542] GetFileSize (in: hFile=0x274, lpFileSizeHigh=0x31e6a0 | out: lpFileSizeHigh=0x31e6a0*=0x0) returned 0x6ec8 [0056.542] ReadFile (in: hFile=0x274, lpBuffer=0x26f4558, nNumberOfBytesToRead=0x6ec8, lpNumberOfBytesRead=0x31e64c, lpOverlapped=0x0 | out: lpBuffer=0x26f4558*, lpNumberOfBytesRead=0x31e64c*=0x6ec8, lpOverlapped=0x0) returned 1 [0056.557] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.es_BO.txt", nBufferLength=0x105, lpBuffer=0x31e090, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.es_BO.txt", lpFilePart=0x0) returned 0x6b [0056.557] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e584) returned 1 [0056.557] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.es_BO.txt" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.es_bo.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x274 [0056.558] GetFileType (hFile=0x274) returned 0x1 [0056.558] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e580) returned 1 [0056.558] GetFileType (hFile=0x274) returned 0x1 [0056.558] WriteFile (in: hFile=0x274, lpBuffer=0x2763d4c*, nNumberOfBytesToWrite=0x6ed0, lpNumberOfBytesWritten=0x31e640, lpOverlapped=0x0 | out: lpBuffer=0x2763d4c*, lpNumberOfBytesWritten=0x31e640*=0x6ed0, lpOverlapped=0x0) returned 1 [0056.559] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.es_BO.txt", nBufferLength=0x105, lpBuffer=0x31e1c4, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.es_BO.txt", lpFilePart=0x0) returned 0x6b [0056.559] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.es_BO.txt", nBufferLength=0x105, lpBuffer=0x31e1c4, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.es_BO.txt", lpFilePart=0x0) returned 0x6b [0056.559] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e624) returned 1 [0056.560] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.es_BO.txt" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.es_bo.txt"), fInfoLevelId=0x0, lpFileInformation=0x31e6a0 | out: lpFileInformation=0x31e6a0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x93de7300, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7ddaf0a0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x529dd60, ftLastWriteTime.dwHighDateTime=0x1d6eb7f, nFileSizeHigh=0x0, nFileSizeLow=0x6ed0)) returned 1 [0056.560] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e620) returned 1 [0056.560] MoveFileW (lpExistingFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.es_BO.txt" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.es_bo.txt"), lpNewFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.es_BO.txt" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.es_bo.txt")) returned 1 [0056.560] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.es_CL.txt", nBufferLength=0x105, lpBuffer=0x31e0a4, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.es_CL.txt", lpFilePart=0x0) returned 0x6b [0056.560] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e598) returned 1 [0056.560] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.es_CL.txt" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.es_cl.txt"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x274 [0056.560] GetFileType (hFile=0x274) returned 0x1 [0056.560] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e594) returned 1 [0056.560] GetFileType (hFile=0x274) returned 0x1 [0056.560] GetFileSize (in: hFile=0x274, lpFileSizeHigh=0x31e6a0 | out: lpFileSizeHigh=0x31e6a0*=0x0) returned 0x6ec8 [0056.560] ReadFile (in: hFile=0x274, lpBuffer=0x276b120, nNumberOfBytesToRead=0x6ec8, lpNumberOfBytesRead=0x31e64c, lpOverlapped=0x0 | out: lpBuffer=0x276b120*, lpNumberOfBytesRead=0x31e64c*=0x6ec8, lpOverlapped=0x0) returned 1 [0056.576] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.es_CL.txt", nBufferLength=0x105, lpBuffer=0x31e090, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.es_CL.txt", lpFilePart=0x0) returned 0x6b [0056.576] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e584) returned 1 [0056.576] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.es_CL.txt" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.es_cl.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x274 [0056.577] GetFileType (hFile=0x274) returned 0x1 [0056.577] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e580) returned 1 [0056.577] GetFileType (hFile=0x274) returned 0x1 [0056.577] WriteFile (in: hFile=0x274, lpBuffer=0x27da914*, nNumberOfBytesToWrite=0x6ed0, lpNumberOfBytesWritten=0x31e640, lpOverlapped=0x0 | out: lpBuffer=0x27da914*, lpNumberOfBytesWritten=0x31e640*=0x6ed0, lpOverlapped=0x0) returned 1 [0056.578] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.es_CL.txt", nBufferLength=0x105, lpBuffer=0x31e1c4, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.es_CL.txt", lpFilePart=0x0) returned 0x6b [0056.578] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.es_CL.txt", nBufferLength=0x105, lpBuffer=0x31e1c4, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.es_CL.txt", lpFilePart=0x0) returned 0x6b [0056.578] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e624) returned 1 [0056.578] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.es_CL.txt" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.es_cl.txt"), fInfoLevelId=0x0, lpFileInformation=0x31e6a0 | out: lpFileInformation=0x31e6a0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x93de7300, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7dd88f40, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x52c3ec0, ftLastWriteTime.dwHighDateTime=0x1d6eb7f, nFileSizeHigh=0x0, nFileSizeLow=0x6ed0)) returned 1 [0056.578] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e620) returned 1 [0056.578] MoveFileW (lpExistingFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.es_CL.txt" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.es_cl.txt"), lpNewFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.es_CL.txt" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.es_cl.txt")) returned 1 [0056.578] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.es_CO.txt", nBufferLength=0x105, lpBuffer=0x31e0a4, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.es_CO.txt", lpFilePart=0x0) returned 0x6b [0056.578] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e598) returned 1 [0056.578] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.es_CO.txt" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.es_co.txt"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x274 [0056.579] GetFileType (hFile=0x274) returned 0x1 [0056.579] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e594) returned 1 [0056.579] GetFileType (hFile=0x274) returned 0x1 [0056.579] GetFileSize (in: hFile=0x274, lpFileSizeHigh=0x31e6a0 | out: lpFileSizeHigh=0x31e6a0*=0x0) returned 0x6ed0 [0056.579] ReadFile (in: hFile=0x274, lpBuffer=0x27e1ce8, nNumberOfBytesToRead=0x6ed0, lpNumberOfBytesRead=0x31e64c, lpOverlapped=0x0 | out: lpBuffer=0x27e1ce8*, lpNumberOfBytesRead=0x31e64c*=0x6ed0, lpOverlapped=0x0) returned 1 [0056.594] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.es_CO.txt", nBufferLength=0x105, lpBuffer=0x31e090, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.es_CO.txt", lpFilePart=0x0) returned 0x6b [0056.594] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e584) returned 1 [0056.594] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.es_CO.txt" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.es_co.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x274 [0056.595] GetFileType (hFile=0x274) returned 0x1 [0056.595] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e580) returned 1 [0056.595] GetFileType (hFile=0x274) returned 0x1 [0056.595] WriteFile (in: hFile=0x274, lpBuffer=0x285152c*, nNumberOfBytesToWrite=0x6ee0, lpNumberOfBytesWritten=0x31e640, lpOverlapped=0x0 | out: lpBuffer=0x285152c*, lpNumberOfBytesWritten=0x31e640*=0x6ee0, lpOverlapped=0x0) returned 1 [0056.596] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.es_CO.txt", nBufferLength=0x105, lpBuffer=0x31e1c4, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.es_CO.txt", lpFilePart=0x0) returned 0x6b [0056.596] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.es_CO.txt", nBufferLength=0x105, lpBuffer=0x31e1c4, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.es_CO.txt", lpFilePart=0x0) returned 0x6b [0056.596] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e624) returned 1 [0056.596] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.es_CO.txt" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.es_co.txt"), fInfoLevelId=0x0, lpFileInformation=0x31e6a0 | out: lpFileInformation=0x31e6a0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x93de7300, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7dd88f40, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x52ea020, ftLastWriteTime.dwHighDateTime=0x1d6eb7f, nFileSizeHigh=0x0, nFileSizeLow=0x6ee0)) returned 1 [0056.596] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e620) returned 1 [0056.596] MoveFileW (lpExistingFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.es_CO.txt" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.es_co.txt"), lpNewFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.es_CO.txt" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.es_co.txt")) returned 1 [0056.596] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.es_CR.txt", nBufferLength=0x105, lpBuffer=0x31e0a4, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.es_CR.txt", lpFilePart=0x0) returned 0x6b [0056.596] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e598) returned 1 [0056.596] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.es_CR.txt" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.es_cr.txt"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x274 [0056.597] GetFileType (hFile=0x274) returned 0x1 [0056.597] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e594) returned 1 [0056.597] GetFileType (hFile=0x274) returned 0x1 [0056.597] GetFileSize (in: hFile=0x274, lpFileSizeHigh=0x31e6a0 | out: lpFileSizeHigh=0x31e6a0*=0x0) returned 0x6ec8 [0056.598] ReadFile (in: hFile=0x274, lpBuffer=0x2858910, nNumberOfBytesToRead=0x6ec8, lpNumberOfBytesRead=0x31e64c, lpOverlapped=0x0 | out: lpBuffer=0x2858910*, lpNumberOfBytesRead=0x31e64c*=0x6ec8, lpOverlapped=0x0) returned 1 [0056.614] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.es_CR.txt", nBufferLength=0x105, lpBuffer=0x31e090, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.es_CR.txt", lpFilePart=0x0) returned 0x6b [0056.614] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e584) returned 1 [0056.614] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.es_CR.txt" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.es_cr.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x274 [0056.615] GetFileType (hFile=0x274) returned 0x1 [0056.615] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e580) returned 1 [0056.615] GetFileType (hFile=0x274) returned 0x1 [0056.615] WriteFile (in: hFile=0x274, lpBuffer=0x28c8104*, nNumberOfBytesToWrite=0x6ed0, lpNumberOfBytesWritten=0x31e640, lpOverlapped=0x0 | out: lpBuffer=0x28c8104*, lpNumberOfBytesWritten=0x31e640*=0x6ed0, lpOverlapped=0x0) returned 1 [0056.616] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.es_CR.txt", nBufferLength=0x105, lpBuffer=0x31e1c4, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.es_CR.txt", lpFilePart=0x0) returned 0x6b [0056.616] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.es_CR.txt", nBufferLength=0x105, lpBuffer=0x31e1c4, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.es_CR.txt", lpFilePart=0x0) returned 0x6b [0056.616] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e624) returned 1 [0056.616] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.es_CR.txt" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.es_cr.txt"), fInfoLevelId=0x0, lpFileInformation=0x31e6a0 | out: lpFileInformation=0x31e6a0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x93de7300, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7dd88f40, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x53362e0, ftLastWriteTime.dwHighDateTime=0x1d6eb7f, nFileSizeHigh=0x0, nFileSizeLow=0x6ed0)) returned 1 [0056.616] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e620) returned 1 [0056.616] MoveFileW (lpExistingFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.es_CR.txt" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.es_cr.txt"), lpNewFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.es_CR.txt" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.es_cr.txt")) returned 1 [0056.617] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.es_DO.txt", nBufferLength=0x105, lpBuffer=0x31e0a4, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.es_DO.txt", lpFilePart=0x0) returned 0x6b [0056.617] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e598) returned 1 [0056.617] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.es_DO.txt" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.es_do.txt"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x274 [0056.617] GetFileType (hFile=0x274) returned 0x1 [0056.617] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e594) returned 1 [0056.617] GetFileType (hFile=0x274) returned 0x1 [0056.617] GetFileSize (in: hFile=0x274, lpFileSizeHigh=0x31e6a0 | out: lpFileSizeHigh=0x31e6a0*=0x0) returned 0x6ec8 [0056.617] ReadFile (in: hFile=0x274, lpBuffer=0x28cf4d8, nNumberOfBytesToRead=0x6ec8, lpNumberOfBytesRead=0x31e64c, lpOverlapped=0x0 | out: lpBuffer=0x28cf4d8*, lpNumberOfBytesRead=0x31e64c*=0x6ec8, lpOverlapped=0x0) returned 1 [0056.637] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.es_DO.txt", nBufferLength=0x105, lpBuffer=0x31e090, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.es_DO.txt", lpFilePart=0x0) returned 0x6b [0056.637] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e584) returned 1 [0056.637] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.es_DO.txt" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.es_do.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x274 [0056.638] GetFileType (hFile=0x274) returned 0x1 [0056.638] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e580) returned 1 [0056.638] GetFileType (hFile=0x274) returned 0x1 [0056.638] WriteFile (in: hFile=0x274, lpBuffer=0x26927a4*, nNumberOfBytesToWrite=0x6ed0, lpNumberOfBytesWritten=0x31e640, lpOverlapped=0x0 | out: lpBuffer=0x26927a4*, lpNumberOfBytesWritten=0x31e640*=0x6ed0, lpOverlapped=0x0) returned 1 [0056.640] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.es_DO.txt", nBufferLength=0x105, lpBuffer=0x31e1c4, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.es_DO.txt", lpFilePart=0x0) returned 0x6b [0056.640] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.es_DO.txt", nBufferLength=0x105, lpBuffer=0x31e1c4, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.es_DO.txt", lpFilePart=0x0) returned 0x6b [0056.640] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e624) returned 1 [0056.640] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.es_DO.txt" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.es_do.txt"), fInfoLevelId=0x0, lpFileInformation=0x31e6a0 | out: lpFileInformation=0x31e6a0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x93de7300, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7dd88f40, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x535c440, ftLastWriteTime.dwHighDateTime=0x1d6eb7f, nFileSizeHigh=0x0, nFileSizeLow=0x6ed0)) returned 1 [0056.640] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e620) returned 1 [0056.640] MoveFileW (lpExistingFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.es_DO.txt" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.es_do.txt"), lpNewFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.es_DO.txt" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.es_do.txt")) returned 1 [0056.640] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.es_EC.txt", nBufferLength=0x105, lpBuffer=0x31e0a4, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.es_EC.txt", lpFilePart=0x0) returned 0x6b [0056.640] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e598) returned 1 [0056.640] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.es_EC.txt" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.es_ec.txt"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x274 [0056.640] GetFileType (hFile=0x274) returned 0x1 [0056.640] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e594) returned 1 [0056.640] GetFileType (hFile=0x274) returned 0x1 [0056.640] GetFileSize (in: hFile=0x274, lpFileSizeHigh=0x31e6a0 | out: lpFileSizeHigh=0x31e6a0*=0x0) returned 0x6ec6 [0056.640] ReadFile (in: hFile=0x274, lpBuffer=0x2699b78, nNumberOfBytesToRead=0x6ec6, lpNumberOfBytesRead=0x31e64c, lpOverlapped=0x0 | out: lpBuffer=0x2699b78*, lpNumberOfBytesRead=0x31e64c*=0x6ec6, lpOverlapped=0x0) returned 1 [0056.681] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.es_EC.txt", nBufferLength=0x105, lpBuffer=0x31e090, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.es_EC.txt", lpFilePart=0x0) returned 0x6b [0056.681] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e584) returned 1 [0056.681] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.es_EC.txt" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.es_ec.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x274 [0056.682] GetFileType (hFile=0x274) returned 0x1 [0056.682] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e580) returned 1 [0056.682] GetFileType (hFile=0x274) returned 0x1 [0056.682] WriteFile (in: hFile=0x274, lpBuffer=0x27094cc*, nNumberOfBytesToWrite=0x6ed0, lpNumberOfBytesWritten=0x31e640, lpOverlapped=0x0 | out: lpBuffer=0x27094cc*, lpNumberOfBytesWritten=0x31e640*=0x6ed0, lpOverlapped=0x0) returned 1 [0056.683] CloseHandle (hObject=0x274) returned 1 [0056.683] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.es_EC.txt", nBufferLength=0x105, lpBuffer=0x31e1c4, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.es_EC.txt", lpFilePart=0x0) returned 0x6b [0056.684] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.es_EC.txt", nBufferLength=0x105, lpBuffer=0x31e1c4, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.es_EC.txt", lpFilePart=0x0) returned 0x6b [0056.684] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e624) returned 1 [0056.684] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.es_EC.txt" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.es_ec.txt"), fInfoLevelId=0x0, lpFileInformation=0x31e6a0 | out: lpFileInformation=0x31e6a0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x93de7300, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7dd88f40, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x53ce860, ftLastWriteTime.dwHighDateTime=0x1d6eb7f, nFileSizeHigh=0x0, nFileSizeLow=0x6ed0)) returned 1 [0056.684] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e620) returned 1 [0056.684] MoveFileW (lpExistingFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.es_EC.txt" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.es_ec.txt"), lpNewFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.es_EC.txt" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.es_ec.txt")) returned 1 [0056.684] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.es_ES.txt", nBufferLength=0x105, lpBuffer=0x31e0a4, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.es_ES.txt", lpFilePart=0x0) returned 0x6b [0056.684] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e598) returned 1 [0056.684] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.es_ES.txt" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.es_es.txt"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x274 [0056.685] GetFileType (hFile=0x274) returned 0x1 [0056.685] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e594) returned 1 [0056.685] GetFileType (hFile=0x274) returned 0x1 [0056.685] GetFileSize (in: hFile=0x274, lpFileSizeHigh=0x31e6a0 | out: lpFileSizeHigh=0x31e6a0*=0x0) returned 0x6ec0 [0056.685] ReadFile (in: hFile=0x274, lpBuffer=0x27108a0, nNumberOfBytesToRead=0x6ec0, lpNumberOfBytesRead=0x31e64c, lpOverlapped=0x0 | out: lpBuffer=0x27108a0*, lpNumberOfBytesRead=0x31e64c*=0x6ec0, lpOverlapped=0x0) returned 1 [0056.687] CloseHandle (hObject=0x274) returned 1 [0056.700] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.es_ES.txt", nBufferLength=0x105, lpBuffer=0x31e090, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.es_ES.txt", lpFilePart=0x0) returned 0x6b [0056.700] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e584) returned 1 [0056.700] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.es_ES.txt" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.es_es.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x274 [0056.701] GetFileType (hFile=0x274) returned 0x1 [0056.701] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e580) returned 1 [0056.701] GetFileType (hFile=0x274) returned 0x1 [0056.701] WriteFile (in: hFile=0x274, lpBuffer=0x2780094*, nNumberOfBytesToWrite=0x6ed0, lpNumberOfBytesWritten=0x31e640, lpOverlapped=0x0 | out: lpBuffer=0x2780094*, lpNumberOfBytesWritten=0x31e640*=0x6ed0, lpOverlapped=0x0) returned 1 [0056.703] CloseHandle (hObject=0x274) returned 1 [0056.703] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.es_ES.txt", nBufferLength=0x105, lpBuffer=0x31e1c4, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.es_ES.txt", lpFilePart=0x0) returned 0x6b [0056.703] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.es_ES.txt", nBufferLength=0x105, lpBuffer=0x31e1c4, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.es_ES.txt", lpFilePart=0x0) returned 0x6b [0056.703] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e624) returned 1 [0056.703] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.es_ES.txt" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.es_es.txt"), fInfoLevelId=0x0, lpFileInformation=0x31e6a0 | out: lpFileInformation=0x31e6a0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x93de7300, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7dd62de0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x53f49c0, ftLastWriteTime.dwHighDateTime=0x1d6eb7f, nFileSizeHigh=0x0, nFileSizeLow=0x6ed0)) returned 1 [0056.703] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e620) returned 1 [0056.703] MoveFileW (lpExistingFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.es_ES.txt" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.es_es.txt"), lpNewFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.es_ES.txt" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.es_es.txt")) returned 1 [0056.703] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.es_ES_PREEURO.txt", nBufferLength=0x105, lpBuffer=0x31e0a4, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.es_ES_PREEURO.txt", lpFilePart=0x0) returned 0x73 [0056.703] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e598) returned 1 [0056.703] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.es_ES_PREEURO.txt" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.es_es_preeuro.txt"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x274 [0056.704] GetFileType (hFile=0x274) returned 0x1 [0056.704] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e594) returned 1 [0056.704] GetFileType (hFile=0x274) returned 0x1 [0056.704] GetFileSize (in: hFile=0x274, lpFileSizeHigh=0x31e6a0 | out: lpFileSizeHigh=0x31e6a0*=0x0) returned 0x6ec8 [0056.704] ReadFile (in: hFile=0x274, lpBuffer=0x2787488, nNumberOfBytesToRead=0x6ec8, lpNumberOfBytesRead=0x31e64c, lpOverlapped=0x0 | out: lpBuffer=0x2787488*, lpNumberOfBytesRead=0x31e64c*=0x6ec8, lpOverlapped=0x0) returned 1 [0056.706] CloseHandle (hObject=0x274) returned 1 [0056.719] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.es_ES_PREEURO.txt", nBufferLength=0x105, lpBuffer=0x31e090, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.es_ES_PREEURO.txt", lpFilePart=0x0) returned 0x73 [0056.719] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e584) returned 1 [0056.719] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.es_ES_PREEURO.txt" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.es_es_preeuro.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x274 [0056.720] GetFileType (hFile=0x274) returned 0x1 [0056.720] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e580) returned 1 [0056.720] GetFileType (hFile=0x274) returned 0x1 [0056.720] WriteFile (in: hFile=0x274, lpBuffer=0x27f6c7c*, nNumberOfBytesToWrite=0x6ed0, lpNumberOfBytesWritten=0x31e640, lpOverlapped=0x0 | out: lpBuffer=0x27f6c7c*, lpNumberOfBytesWritten=0x31e640*=0x6ed0, lpOverlapped=0x0) returned 1 [0056.721] CloseHandle (hObject=0x274) returned 1 [0056.721] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.es_ES_PREEURO.txt", nBufferLength=0x105, lpBuffer=0x31e1c4, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.es_ES_PREEURO.txt", lpFilePart=0x0) returned 0x73 [0056.721] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.es_ES_PREEURO.txt", nBufferLength=0x105, lpBuffer=0x31e1c4, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.es_ES_PREEURO.txt", lpFilePart=0x0) returned 0x73 [0056.721] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e624) returned 1 [0056.721] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.es_ES_PREEURO.txt" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.es_es_preeuro.txt"), fInfoLevelId=0x0, lpFileInformation=0x31e6a0 | out: lpFileInformation=0x31e6a0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x93de7300, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7dd88f40, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x541ab20, ftLastWriteTime.dwHighDateTime=0x1d6eb7f, nFileSizeHigh=0x0, nFileSizeLow=0x6ed0)) returned 1 [0056.722] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e620) returned 1 [0056.722] MoveFileW (lpExistingFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.es_ES_PREEURO.txt" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.es_es_preeuro.txt"), lpNewFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.es_ES_PREEURO.txt" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.es_es_preeuro.txt")) returned 1 [0056.722] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.es_GT.txt", nBufferLength=0x105, lpBuffer=0x31e0a4, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.es_GT.txt", lpFilePart=0x0) returned 0x6b [0056.722] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e598) returned 1 [0056.722] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.es_GT.txt" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.es_gt.txt"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x274 [0056.723] GetFileType (hFile=0x274) returned 0x1 [0056.723] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e594) returned 1 [0056.723] GetFileType (hFile=0x274) returned 0x1 [0056.723] GetFileSize (in: hFile=0x274, lpFileSizeHigh=0x31e6a0 | out: lpFileSizeHigh=0x31e6a0*=0x0) returned 0x6ec8 [0056.723] ReadFile (in: hFile=0x274, lpBuffer=0x27fe090, nNumberOfBytesToRead=0x6ec8, lpNumberOfBytesRead=0x31e64c, lpOverlapped=0x0 | out: lpBuffer=0x27fe090*, lpNumberOfBytesRead=0x31e64c*=0x6ec8, lpOverlapped=0x0) returned 1 [0056.725] CloseHandle (hObject=0x274) returned 1 [0056.738] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.es_GT.txt", nBufferLength=0x105, lpBuffer=0x31e090, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.es_GT.txt", lpFilePart=0x0) returned 0x6b [0056.738] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e584) returned 1 [0056.738] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.es_GT.txt" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.es_gt.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x274 [0056.739] GetFileType (hFile=0x274) returned 0x1 [0056.739] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e580) returned 1 [0056.739] GetFileType (hFile=0x274) returned 0x1 [0056.739] WriteFile (in: hFile=0x274, lpBuffer=0x286d884*, nNumberOfBytesToWrite=0x6ed0, lpNumberOfBytesWritten=0x31e640, lpOverlapped=0x0 | out: lpBuffer=0x286d884*, lpNumberOfBytesWritten=0x31e640*=0x6ed0, lpOverlapped=0x0) returned 1 [0056.740] CloseHandle (hObject=0x274) returned 1 [0056.741] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.es_GT.txt", nBufferLength=0x105, lpBuffer=0x31e1c4, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.es_GT.txt", lpFilePart=0x0) returned 0x6b [0056.741] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.es_GT.txt", nBufferLength=0x105, lpBuffer=0x31e1c4, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.es_GT.txt", lpFilePart=0x0) returned 0x6b [0056.741] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e624) returned 1 [0056.741] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.es_GT.txt" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.es_gt.txt"), fInfoLevelId=0x0, lpFileInformation=0x31e6a0 | out: lpFileInformation=0x31e6a0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x93de7300, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7dd88f40, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x5466de0, ftLastWriteTime.dwHighDateTime=0x1d6eb7f, nFileSizeHigh=0x0, nFileSizeLow=0x6ed0)) returned 1 [0056.741] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e620) returned 1 [0056.741] MoveFileW (lpExistingFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.es_GT.txt" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.es_gt.txt"), lpNewFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.es_GT.txt" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.es_gt.txt")) returned 1 [0056.741] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.es_HN.txt", nBufferLength=0x105, lpBuffer=0x31e0a4, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.es_HN.txt", lpFilePart=0x0) returned 0x6b [0056.741] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e598) returned 1 [0056.741] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.es_HN.txt" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.es_hn.txt"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x274 [0056.741] GetFileType (hFile=0x274) returned 0x1 [0056.741] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e594) returned 1 [0056.741] GetFileType (hFile=0x274) returned 0x1 [0056.741] GetFileSize (in: hFile=0x274, lpFileSizeHigh=0x31e6a0 | out: lpFileSizeHigh=0x31e6a0*=0x0) returned 0x6ec8 [0056.742] ReadFile (in: hFile=0x274, lpBuffer=0x2874c58, nNumberOfBytesToRead=0x6ec8, lpNumberOfBytesRead=0x31e64c, lpOverlapped=0x0 | out: lpBuffer=0x2874c58*, lpNumberOfBytesRead=0x31e64c*=0x6ec8, lpOverlapped=0x0) returned 1 [0056.744] CloseHandle (hObject=0x274) returned 1 [0056.783] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.es_HN.txt", nBufferLength=0x105, lpBuffer=0x31e090, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.es_HN.txt", lpFilePart=0x0) returned 0x6b [0056.783] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e584) returned 1 [0056.783] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.es_HN.txt" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.es_hn.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x274 [0056.784] GetFileType (hFile=0x274) returned 0x1 [0056.784] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e580) returned 1 [0056.784] GetFileType (hFile=0x274) returned 0x1 [0056.784] WriteFile (in: hFile=0x274, lpBuffer=0x26dd1a4*, nNumberOfBytesToWrite=0x6ed0, lpNumberOfBytesWritten=0x31e640, lpOverlapped=0x0 | out: lpBuffer=0x26dd1a4*, lpNumberOfBytesWritten=0x31e640*=0x6ed0, lpOverlapped=0x0) returned 1 [0056.785] CloseHandle (hObject=0x274) returned 1 [0056.785] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.es_HN.txt", nBufferLength=0x105, lpBuffer=0x31e1c4, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.es_HN.txt", lpFilePart=0x0) returned 0x6b [0056.785] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.es_HN.txt", nBufferLength=0x105, lpBuffer=0x31e1c4, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.es_HN.txt", lpFilePart=0x0) returned 0x6b [0056.785] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e624) returned 1 [0056.785] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.es_HN.txt" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.es_hn.txt"), fInfoLevelId=0x0, lpFileInformation=0x31e6a0 | out: lpFileInformation=0x31e6a0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x93de7300, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7dd88f40, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x54d9200, ftLastWriteTime.dwHighDateTime=0x1d6eb7f, nFileSizeHigh=0x0, nFileSizeLow=0x6ed0)) returned 1 [0056.786] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e620) returned 1 [0056.786] MoveFileW (lpExistingFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.es_HN.txt" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.es_hn.txt"), lpNewFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.es_HN.txt" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.es_hn.txt")) returned 1 [0056.786] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.es_MX.txt", nBufferLength=0x105, lpBuffer=0x31e0a4, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.es_MX.txt", lpFilePart=0x0) returned 0x6b [0056.786] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e598) returned 1 [0056.786] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.es_MX.txt" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.es_mx.txt"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x274 [0056.786] GetFileType (hFile=0x274) returned 0x1 [0056.786] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e594) returned 1 [0056.786] GetFileType (hFile=0x274) returned 0x1 [0056.786] GetFileSize (in: hFile=0x274, lpFileSizeHigh=0x31e6a0 | out: lpFileSizeHigh=0x31e6a0*=0x0) returned 0x6ec0 [0056.786] ReadFile (in: hFile=0x274, lpBuffer=0x26e4578, nNumberOfBytesToRead=0x6ec0, lpNumberOfBytesRead=0x31e64c, lpOverlapped=0x0 | out: lpBuffer=0x26e4578*, lpNumberOfBytesRead=0x31e64c*=0x6ec0, lpOverlapped=0x0) returned 1 [0056.795] CloseHandle (hObject=0x274) returned 1 [0056.809] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.es_MX.txt", nBufferLength=0x105, lpBuffer=0x31e090, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.es_MX.txt", lpFilePart=0x0) returned 0x6b [0056.809] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e584) returned 1 [0056.809] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.es_MX.txt" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.es_mx.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x274 [0056.810] GetFileType (hFile=0x274) returned 0x1 [0056.810] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e580) returned 1 [0056.810] GetFileType (hFile=0x274) returned 0x1 [0056.810] WriteFile (in: hFile=0x274, lpBuffer=0x2753ec8*, nNumberOfBytesToWrite=0x6ed0, lpNumberOfBytesWritten=0x31e640, lpOverlapped=0x0 | out: lpBuffer=0x2753ec8*, lpNumberOfBytesWritten=0x31e640*=0x6ed0, lpOverlapped=0x0) returned 1 [0056.811] CloseHandle (hObject=0x274) returned 1 [0056.811] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.es_MX.txt", nBufferLength=0x105, lpBuffer=0x31e1c4, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.es_MX.txt", lpFilePart=0x0) returned 0x6b [0056.811] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.es_MX.txt", nBufferLength=0x105, lpBuffer=0x31e1c4, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.es_MX.txt", lpFilePart=0x0) returned 0x6b [0056.811] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e624) returned 1 [0056.811] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.es_MX.txt" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.es_mx.txt"), fInfoLevelId=0x0, lpFileInformation=0x31e6a0 | out: lpFileInformation=0x31e6a0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x93de7300, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7dd88f40, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x54ff360, ftLastWriteTime.dwHighDateTime=0x1d6eb7f, nFileSizeHigh=0x0, nFileSizeLow=0x6ed0)) returned 1 [0056.811] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e620) returned 1 [0056.811] MoveFileW (lpExistingFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.es_MX.txt" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.es_mx.txt"), lpNewFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.es_MX.txt" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.es_mx.txt")) returned 1 [0056.812] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.es_NI.txt", nBufferLength=0x105, lpBuffer=0x31e0a4, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.es_NI.txt", lpFilePart=0x0) returned 0x6b [0056.812] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e598) returned 1 [0056.812] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.es_NI.txt" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.es_ni.txt"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x274 [0056.812] GetFileType (hFile=0x274) returned 0x1 [0056.812] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e594) returned 1 [0056.812] GetFileType (hFile=0x274) returned 0x1 [0056.812] GetFileSize (in: hFile=0x274, lpFileSizeHigh=0x31e6a0 | out: lpFileSizeHigh=0x31e6a0*=0x0) returned 0x6ecc [0056.812] ReadFile (in: hFile=0x274, lpBuffer=0x275b29c, nNumberOfBytesToRead=0x6ecc, lpNumberOfBytesRead=0x31e64c, lpOverlapped=0x0 | out: lpBuffer=0x275b29c*, lpNumberOfBytesRead=0x31e64c*=0x6ecc, lpOverlapped=0x0) returned 1 [0056.814] CloseHandle (hObject=0x274) returned 1 [0056.827] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.es_NI.txt", nBufferLength=0x105, lpBuffer=0x31e090, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.es_NI.txt", lpFilePart=0x0) returned 0x6b [0056.827] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e584) returned 1 [0056.827] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.es_NI.txt" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.es_ni.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x274 [0056.828] GetFileType (hFile=0x274) returned 0x1 [0056.828] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e580) returned 1 [0056.828] GetFileType (hFile=0x274) returned 0x1 [0056.828] WriteFile (in: hFile=0x274, lpBuffer=0x27caa90*, nNumberOfBytesToWrite=0x6ed0, lpNumberOfBytesWritten=0x31e640, lpOverlapped=0x0 | out: lpBuffer=0x27caa90*, lpNumberOfBytesWritten=0x31e640*=0x6ed0, lpOverlapped=0x0) returned 1 [0056.829] CloseHandle (hObject=0x274) returned 1 [0056.829] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.es_NI.txt", nBufferLength=0x105, lpBuffer=0x31e1c4, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.es_NI.txt", lpFilePart=0x0) returned 0x6b [0056.830] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.es_NI.txt", nBufferLength=0x105, lpBuffer=0x31e1c4, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.es_NI.txt", lpFilePart=0x0) returned 0x6b [0056.830] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e624) returned 1 [0056.830] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.es_NI.txt" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.es_ni.txt"), fInfoLevelId=0x0, lpFileInformation=0x31e6a0 | out: lpFileInformation=0x31e6a0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x93de7300, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7dd88f40, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x55254c0, ftLastWriteTime.dwHighDateTime=0x1d6eb7f, nFileSizeHigh=0x0, nFileSizeLow=0x6ed0)) returned 1 [0056.830] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e620) returned 1 [0056.830] MoveFileW (lpExistingFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.es_NI.txt" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.es_ni.txt"), lpNewFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.es_NI.txt" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.es_ni.txt")) returned 1 [0056.830] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.es_PA.txt", nBufferLength=0x105, lpBuffer=0x31e0a4, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.es_PA.txt", lpFilePart=0x0) returned 0x6b [0056.830] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e598) returned 1 [0056.830] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.es_PA.txt" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.es_pa.txt"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x274 [0056.831] GetFileType (hFile=0x274) returned 0x1 [0056.831] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e594) returned 1 [0056.831] GetFileType (hFile=0x274) returned 0x1 [0056.831] GetFileSize (in: hFile=0x274, lpFileSizeHigh=0x31e6a0 | out: lpFileSizeHigh=0x31e6a0*=0x0) returned 0x6ec8 [0056.831] ReadFile (in: hFile=0x274, lpBuffer=0x27d1e64, nNumberOfBytesToRead=0x6ec8, lpNumberOfBytesRead=0x31e64c, lpOverlapped=0x0 | out: lpBuffer=0x27d1e64*, lpNumberOfBytesRead=0x31e64c*=0x6ec8, lpOverlapped=0x0) returned 1 [0056.833] CloseHandle (hObject=0x274) returned 1 [0056.848] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.es_PA.txt", nBufferLength=0x105, lpBuffer=0x31e090, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.es_PA.txt", lpFilePart=0x0) returned 0x6b [0056.848] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e584) returned 1 [0056.848] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.es_PA.txt" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.es_pa.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x274 [0056.849] GetFileType (hFile=0x274) returned 0x1 [0056.849] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e580) returned 1 [0056.849] GetFileType (hFile=0x274) returned 0x1 [0056.849] WriteFile (in: hFile=0x274, lpBuffer=0x2841658*, nNumberOfBytesToWrite=0x6ed0, lpNumberOfBytesWritten=0x31e640, lpOverlapped=0x0 | out: lpBuffer=0x2841658*, lpNumberOfBytesWritten=0x31e640*=0x6ed0, lpOverlapped=0x0) returned 1 [0056.850] CloseHandle (hObject=0x274) returned 1 [0056.850] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.es_PA.txt", nBufferLength=0x105, lpBuffer=0x31e1c4, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.es_PA.txt", lpFilePart=0x0) returned 0x6b [0056.850] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.es_PA.txt", nBufferLength=0x105, lpBuffer=0x31e1c4, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.es_PA.txt", lpFilePart=0x0) returned 0x6b [0056.850] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e624) returned 1 [0056.851] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.es_PA.txt" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.es_pa.txt"), fInfoLevelId=0x0, lpFileInformation=0x31e6a0 | out: lpFileInformation=0x31e6a0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x93de7300, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7dd88f40, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x5571780, ftLastWriteTime.dwHighDateTime=0x1d6eb7f, nFileSizeHigh=0x0, nFileSizeLow=0x6ed0)) returned 1 [0056.851] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e620) returned 1 [0056.851] MoveFileW (lpExistingFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.es_PA.txt" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.es_pa.txt"), lpNewFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.es_PA.txt" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.es_pa.txt")) returned 1 [0056.851] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.es_PE.txt", nBufferLength=0x105, lpBuffer=0x31e0a4, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.es_PE.txt", lpFilePart=0x0) returned 0x6b [0056.851] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e598) returned 1 [0056.851] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.es_PE.txt" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.es_pe.txt"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x274 [0056.851] GetFileType (hFile=0x274) returned 0x1 [0056.851] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e594) returned 1 [0056.851] GetFileType (hFile=0x274) returned 0x1 [0056.851] GetFileSize (in: hFile=0x274, lpFileSizeHigh=0x31e6a0 | out: lpFileSizeHigh=0x31e6a0*=0x0) returned 0x6ec8 [0056.851] ReadFile (in: hFile=0x274, lpBuffer=0x2848a2c, nNumberOfBytesToRead=0x6ec8, lpNumberOfBytesRead=0x31e64c, lpOverlapped=0x0 | out: lpBuffer=0x2848a2c*, lpNumberOfBytesRead=0x31e64c*=0x6ec8, lpOverlapped=0x0) returned 1 [0056.880] CloseHandle (hObject=0x274) returned 1 [0056.942] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.es_PE.txt", nBufferLength=0x105, lpBuffer=0x31e090, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.es_PE.txt", lpFilePart=0x0) returned 0x6b [0056.943] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e584) returned 1 [0056.943] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.es_PE.txt" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.es_pe.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x274 [0056.944] GetFileType (hFile=0x274) returned 0x1 [0056.944] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e580) returned 1 [0056.944] GetFileType (hFile=0x274) returned 0x1 [0056.944] WriteFile (in: hFile=0x274, lpBuffer=0x26b81d8*, nNumberOfBytesToWrite=0x6ed0, lpNumberOfBytesWritten=0x31e640, lpOverlapped=0x0 | out: lpBuffer=0x26b81d8*, lpNumberOfBytesWritten=0x31e640*=0x6ed0, lpOverlapped=0x0) returned 1 [0056.945] CloseHandle (hObject=0x274) returned 1 [0056.945] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.es_PE.txt", nBufferLength=0x105, lpBuffer=0x31e1c4, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.es_PE.txt", lpFilePart=0x0) returned 0x6b [0056.945] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.es_PE.txt", nBufferLength=0x105, lpBuffer=0x31e1c4, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.es_PE.txt", lpFilePart=0x0) returned 0x6b [0056.945] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e624) returned 1 [0056.945] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.es_PE.txt" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.es_pe.txt"), fInfoLevelId=0x0, lpFileInformation=0x31e6a0 | out: lpFileInformation=0x31e6a0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x950fa000, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7dd62de0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x5655fc0, ftLastWriteTime.dwHighDateTime=0x1d6eb7f, nFileSizeHigh=0x0, nFileSizeLow=0x6ed0)) returned 1 [0056.945] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e620) returned 1 [0056.945] MoveFileW (lpExistingFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.es_PE.txt" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.es_pe.txt"), lpNewFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.es_PE.txt" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.es_pe.txt")) returned 1 [0056.946] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.es_PR.txt", nBufferLength=0x105, lpBuffer=0x31e0a4, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.es_PR.txt", lpFilePart=0x0) returned 0x6b [0056.946] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e598) returned 1 [0056.946] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.es_PR.txt" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.es_pr.txt"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x274 [0056.946] GetFileType (hFile=0x274) returned 0x1 [0056.946] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e594) returned 1 [0056.946] GetFileType (hFile=0x274) returned 0x1 [0056.946] GetFileSize (in: hFile=0x274, lpFileSizeHigh=0x31e6a0 | out: lpFileSizeHigh=0x31e6a0*=0x0) returned 0x6ec8 [0056.946] ReadFile (in: hFile=0x274, lpBuffer=0x26bf5ac, nNumberOfBytesToRead=0x6ec8, lpNumberOfBytesRead=0x31e64c, lpOverlapped=0x0 | out: lpBuffer=0x26bf5ac*, lpNumberOfBytesRead=0x31e64c*=0x6ec8, lpOverlapped=0x0) returned 1 [0056.948] CloseHandle (hObject=0x274) returned 1 [0056.962] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.es_PR.txt", nBufferLength=0x105, lpBuffer=0x31e090, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.es_PR.txt", lpFilePart=0x0) returned 0x6b [0056.963] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e584) returned 1 [0056.963] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.es_PR.txt" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.es_pr.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x274 [0056.964] GetFileType (hFile=0x274) returned 0x1 [0056.964] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e580) returned 1 [0056.964] GetFileType (hFile=0x274) returned 0x1 [0056.964] WriteFile (in: hFile=0x274, lpBuffer=0x272eefc*, nNumberOfBytesToWrite=0x6ed0, lpNumberOfBytesWritten=0x31e640, lpOverlapped=0x0 | out: lpBuffer=0x272eefc*, lpNumberOfBytesWritten=0x31e640*=0x6ed0, lpOverlapped=0x0) returned 1 [0056.965] CloseHandle (hObject=0x274) returned 1 [0056.965] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.es_PR.txt", nBufferLength=0x105, lpBuffer=0x31e1c4, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.es_PR.txt", lpFilePart=0x0) returned 0x6b [0056.965] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.es_PR.txt", nBufferLength=0x105, lpBuffer=0x31e1c4, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.es_PR.txt", lpFilePart=0x0) returned 0x6b [0056.965] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e624) returned 1 [0056.965] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.es_PR.txt" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.es_pr.txt"), fInfoLevelId=0x0, lpFileInformation=0x31e6a0 | out: lpFileInformation=0x31e6a0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x93de7300, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7dd62de0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x567c120, ftLastWriteTime.dwHighDateTime=0x1d6eb7f, nFileSizeHigh=0x0, nFileSizeLow=0x6ed0)) returned 1 [0056.965] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e620) returned 1 [0056.965] MoveFileW (lpExistingFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.es_PR.txt" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.es_pr.txt"), lpNewFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.es_PR.txt" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.es_pr.txt")) returned 1 [0056.966] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.es_PY.txt", nBufferLength=0x105, lpBuffer=0x31e0a4, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.es_PY.txt", lpFilePart=0x0) returned 0x6b [0056.966] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e598) returned 1 [0056.966] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.es_PY.txt" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.es_py.txt"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x274 [0056.966] GetFileType (hFile=0x274) returned 0x1 [0056.966] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e594) returned 1 [0056.966] GetFileType (hFile=0x274) returned 0x1 [0056.966] GetFileSize (in: hFile=0x274, lpFileSizeHigh=0x31e6a0 | out: lpFileSizeHigh=0x31e6a0*=0x0) returned 0x6ec8 [0056.966] ReadFile (in: hFile=0x274, lpBuffer=0x27362d0, nNumberOfBytesToRead=0x6ec8, lpNumberOfBytesRead=0x31e64c, lpOverlapped=0x0 | out: lpBuffer=0x27362d0*, lpNumberOfBytesRead=0x31e64c*=0x6ec8, lpOverlapped=0x0) returned 1 [0056.968] CloseHandle (hObject=0x274) returned 1 [0056.982] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.es_PY.txt", nBufferLength=0x105, lpBuffer=0x31e090, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.es_PY.txt", lpFilePart=0x0) returned 0x6b [0056.982] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e584) returned 1 [0056.982] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.es_PY.txt" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.es_py.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x274 [0056.983] GetFileType (hFile=0x274) returned 0x1 [0056.983] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e580) returned 1 [0056.983] GetFileType (hFile=0x274) returned 0x1 [0056.983] WriteFile (in: hFile=0x274, lpBuffer=0x27a5ac4*, nNumberOfBytesToWrite=0x6ed0, lpNumberOfBytesWritten=0x31e640, lpOverlapped=0x0 | out: lpBuffer=0x27a5ac4*, lpNumberOfBytesWritten=0x31e640*=0x6ed0, lpOverlapped=0x0) returned 1 [0056.984] CloseHandle (hObject=0x274) returned 1 [0056.985] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.es_PY.txt", nBufferLength=0x105, lpBuffer=0x31e1c4, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.es_PY.txt", lpFilePart=0x0) returned 0x6b [0056.985] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.es_PY.txt", nBufferLength=0x105, lpBuffer=0x31e1c4, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.es_PY.txt", lpFilePart=0x0) returned 0x6b [0056.985] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e624) returned 1 [0056.985] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.es_PY.txt" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.es_py.txt"), fInfoLevelId=0x0, lpFileInformation=0x31e6a0 | out: lpFileInformation=0x31e6a0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x93de7300, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7dd62de0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x56a2280, ftLastWriteTime.dwHighDateTime=0x1d6eb7f, nFileSizeHigh=0x0, nFileSizeLow=0x6ed0)) returned 1 [0056.985] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e620) returned 1 [0056.985] MoveFileW (lpExistingFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.es_PY.txt" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.es_py.txt"), lpNewFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.es_PY.txt" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.es_py.txt")) returned 1 [0056.985] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.es_SV.txt", nBufferLength=0x105, lpBuffer=0x31e0a4, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.es_SV.txt", lpFilePart=0x0) returned 0x6b [0056.985] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e598) returned 1 [0056.985] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.es_SV.txt" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.es_sv.txt"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x274 [0056.986] GetFileType (hFile=0x274) returned 0x1 [0056.986] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e594) returned 1 [0056.986] GetFileType (hFile=0x274) returned 0x1 [0056.986] GetFileSize (in: hFile=0x274, lpFileSizeHigh=0x31e6a0 | out: lpFileSizeHigh=0x31e6a0*=0x0) returned 0x6ec8 [0056.986] ReadFile (in: hFile=0x274, lpBuffer=0x27ace98, nNumberOfBytesToRead=0x6ec8, lpNumberOfBytesRead=0x31e64c, lpOverlapped=0x0 | out: lpBuffer=0x27ace98*, lpNumberOfBytesRead=0x31e64c*=0x6ec8, lpOverlapped=0x0) returned 1 [0056.993] CloseHandle (hObject=0x274) returned 1 [0057.007] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.es_SV.txt", nBufferLength=0x105, lpBuffer=0x31e090, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.es_SV.txt", lpFilePart=0x0) returned 0x6b [0057.007] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e584) returned 1 [0057.007] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.es_SV.txt" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.es_sv.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x274 [0057.009] GetFileType (hFile=0x274) returned 0x1 [0057.009] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e580) returned 1 [0057.009] GetFileType (hFile=0x274) returned 0x1 [0057.009] WriteFile (in: hFile=0x274, lpBuffer=0x281c68c*, nNumberOfBytesToWrite=0x6ed0, lpNumberOfBytesWritten=0x31e640, lpOverlapped=0x0 | out: lpBuffer=0x281c68c*, lpNumberOfBytesWritten=0x31e640*=0x6ed0, lpOverlapped=0x0) returned 1 [0057.010] CloseHandle (hObject=0x274) returned 1 [0057.010] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.es_SV.txt", nBufferLength=0x105, lpBuffer=0x31e1c4, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.es_SV.txt", lpFilePart=0x0) returned 0x6b [0057.010] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.es_SV.txt", nBufferLength=0x105, lpBuffer=0x31e1c4, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.es_SV.txt", lpFilePart=0x0) returned 0x6b [0057.010] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e624) returned 1 [0057.010] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.es_SV.txt" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.es_sv.txt"), fInfoLevelId=0x0, lpFileInformation=0x31e6a0 | out: lpFileInformation=0x31e6a0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x93de7300, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7dd62de0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x56ee540, ftLastWriteTime.dwHighDateTime=0x1d6eb7f, nFileSizeHigh=0x0, nFileSizeLow=0x6ed0)) returned 1 [0057.010] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e620) returned 1 [0057.010] MoveFileW (lpExistingFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.es_SV.txt" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.es_sv.txt"), lpNewFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.es_SV.txt" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.es_sv.txt")) returned 1 [0057.011] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.es_US.txt", nBufferLength=0x105, lpBuffer=0x31e0a4, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.es_US.txt", lpFilePart=0x0) returned 0x6b [0057.011] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e598) returned 1 [0057.011] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.es_US.txt" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.es_us.txt"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x274 [0057.011] GetFileType (hFile=0x274) returned 0x1 [0057.011] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e594) returned 1 [0057.011] GetFileType (hFile=0x274) returned 0x1 [0057.011] GetFileSize (in: hFile=0x274, lpFileSizeHigh=0x31e6a0 | out: lpFileSizeHigh=0x31e6a0*=0x0) returned 0x6ec8 [0057.011] ReadFile (in: hFile=0x274, lpBuffer=0x2823a60, nNumberOfBytesToRead=0x6ec8, lpNumberOfBytesRead=0x31e64c, lpOverlapped=0x0 | out: lpBuffer=0x2823a60*, lpNumberOfBytesRead=0x31e64c*=0x6ec8, lpOverlapped=0x0) returned 1 [0057.013] CloseHandle (hObject=0x274) returned 1 [0057.030] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.es_US.txt", nBufferLength=0x105, lpBuffer=0x31e090, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.es_US.txt", lpFilePart=0x0) returned 0x6b [0057.030] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e584) returned 1 [0057.030] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.es_US.txt" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.es_us.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x274 [0057.031] GetFileType (hFile=0x274) returned 0x1 [0057.031] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e580) returned 1 [0057.031] GetFileType (hFile=0x274) returned 0x1 [0057.031] WriteFile (in: hFile=0x274, lpBuffer=0x2699650*, nNumberOfBytesToWrite=0x6ed0, lpNumberOfBytesWritten=0x31e640, lpOverlapped=0x0 | out: lpBuffer=0x2699650*, lpNumberOfBytesWritten=0x31e640*=0x6ed0, lpOverlapped=0x0) returned 1 [0057.032] CloseHandle (hObject=0x274) returned 1 [0057.032] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.es_US.txt", nBufferLength=0x105, lpBuffer=0x31e1c4, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.es_US.txt", lpFilePart=0x0) returned 0x6b [0057.032] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.es_US.txt", nBufferLength=0x105, lpBuffer=0x31e1c4, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.es_US.txt", lpFilePart=0x0) returned 0x6b [0057.032] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e624) returned 1 [0057.032] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.es_US.txt" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.es_us.txt"), fInfoLevelId=0x0, lpFileInformation=0x31e6a0 | out: lpFileInformation=0x31e6a0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x93de7300, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7dd62de0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x57146a0, ftLastWriteTime.dwHighDateTime=0x1d6eb7f, nFileSizeHigh=0x0, nFileSizeLow=0x6ed0)) returned 1 [0057.033] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e620) returned 1 [0057.033] MoveFileW (lpExistingFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.es_US.txt" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.es_us.txt"), lpNewFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.es_US.txt" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.es_us.txt")) returned 1 [0057.033] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.es_UY.txt", nBufferLength=0x105, lpBuffer=0x31e0a4, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.es_UY.txt", lpFilePart=0x0) returned 0x6b [0057.033] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e598) returned 1 [0057.033] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.es_UY.txt" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.es_uy.txt"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x274 [0057.033] GetFileType (hFile=0x274) returned 0x1 [0057.033] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e594) returned 1 [0057.033] GetFileType (hFile=0x274) returned 0x1 [0057.033] GetFileSize (in: hFile=0x274, lpFileSizeHigh=0x31e6a0 | out: lpFileSizeHigh=0x31e6a0*=0x0) returned 0x6ec8 [0057.034] ReadFile (in: hFile=0x274, lpBuffer=0x26a0a24, nNumberOfBytesToRead=0x6ec8, lpNumberOfBytesRead=0x31e64c, lpOverlapped=0x0 | out: lpBuffer=0x26a0a24*, lpNumberOfBytesRead=0x31e64c*=0x6ec8, lpOverlapped=0x0) returned 1 [0057.036] CloseHandle (hObject=0x274) returned 1 [0057.072] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.es_UY.txt", nBufferLength=0x105, lpBuffer=0x31e090, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.es_UY.txt", lpFilePart=0x0) returned 0x6b [0057.072] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e584) returned 1 [0057.072] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.es_UY.txt" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.es_uy.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x274 [0057.073] GetFileType (hFile=0x274) returned 0x1 [0057.073] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e580) returned 1 [0057.073] GetFileType (hFile=0x274) returned 0x1 [0057.073] WriteFile (in: hFile=0x274, lpBuffer=0x2710374*, nNumberOfBytesToWrite=0x6ed0, lpNumberOfBytesWritten=0x31e640, lpOverlapped=0x0 | out: lpBuffer=0x2710374*, lpNumberOfBytesWritten=0x31e640*=0x6ed0, lpOverlapped=0x0) returned 1 [0057.076] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.es_UY.txt", nBufferLength=0x105, lpBuffer=0x31e1c4, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.es_UY.txt", lpFilePart=0x0) returned 0x6b [0057.076] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.es_UY.txt", nBufferLength=0x105, lpBuffer=0x31e1c4, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.es_UY.txt", lpFilePart=0x0) returned 0x6b [0057.076] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e624) returned 1 [0057.076] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.es_UY.txt" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.es_uy.txt"), fInfoLevelId=0x0, lpFileInformation=0x31e6a0 | out: lpFileInformation=0x31e6a0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x93de7300, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7dd62de0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x5786ac0, ftLastWriteTime.dwHighDateTime=0x1d6eb7f, nFileSizeHigh=0x0, nFileSizeLow=0x6ed0)) returned 1 [0057.076] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e620) returned 1 [0057.076] MoveFileW (lpExistingFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.es_UY.txt" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.es_uy.txt"), lpNewFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.es_UY.txt" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.es_uy.txt")) returned 1 [0057.076] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.es_VE.txt", nBufferLength=0x105, lpBuffer=0x31e0a4, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.es_VE.txt", lpFilePart=0x0) returned 0x6b [0057.076] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e598) returned 1 [0057.076] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.es_VE.txt" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.es_ve.txt"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x274 [0057.077] GetFileType (hFile=0x274) returned 0x1 [0057.077] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e594) returned 1 [0057.077] GetFileType (hFile=0x274) returned 0x1 [0057.077] GetFileSize (in: hFile=0x274, lpFileSizeHigh=0x31e6a0 | out: lpFileSizeHigh=0x31e6a0*=0x0) returned 0x6ec8 [0057.077] ReadFile (in: hFile=0x274, lpBuffer=0x2717748, nNumberOfBytesToRead=0x6ec8, lpNumberOfBytesRead=0x31e64c, lpOverlapped=0x0 | out: lpBuffer=0x2717748*, lpNumberOfBytesRead=0x31e64c*=0x6ec8, lpOverlapped=0x0) returned 1 [0057.093] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.es_VE.txt", nBufferLength=0x105, lpBuffer=0x31e090, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.es_VE.txt", lpFilePart=0x0) returned 0x6b [0057.093] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e584) returned 1 [0057.093] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.es_VE.txt" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.es_ve.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x274 [0057.094] GetFileType (hFile=0x274) returned 0x1 [0057.094] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e580) returned 1 [0057.094] GetFileType (hFile=0x274) returned 0x1 [0057.094] WriteFile (in: hFile=0x274, lpBuffer=0x2786f3c*, nNumberOfBytesToWrite=0x6ed0, lpNumberOfBytesWritten=0x31e640, lpOverlapped=0x0 | out: lpBuffer=0x2786f3c*, lpNumberOfBytesWritten=0x31e640*=0x6ed0, lpOverlapped=0x0) returned 1 [0057.095] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.es_VE.txt", nBufferLength=0x105, lpBuffer=0x31e1c4, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.es_VE.txt", lpFilePart=0x0) returned 0x6b [0057.096] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.es_VE.txt", nBufferLength=0x105, lpBuffer=0x31e1c4, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.es_VE.txt", lpFilePart=0x0) returned 0x6b [0057.096] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e624) returned 1 [0057.096] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.es_VE.txt" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.es_ve.txt"), fInfoLevelId=0x0, lpFileInformation=0x31e6a0 | out: lpFileInformation=0x31e6a0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x93de7300, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7ddaf0a0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x57acc20, ftLastWriteTime.dwHighDateTime=0x1d6eb7f, nFileSizeHigh=0x0, nFileSizeLow=0x6ed0)) returned 1 [0057.096] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e620) returned 1 [0057.096] MoveFileW (lpExistingFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.es_VE.txt" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.es_ve.txt"), lpNewFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.es_VE.txt" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.es_ve.txt")) returned 1 [0057.096] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.es__TRADITIONAL.txt", nBufferLength=0x105, lpBuffer=0x31e0a4, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.es__TRADITIONAL.txt", lpFilePart=0x0) returned 0x75 [0057.096] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e598) returned 1 [0057.096] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.es__TRADITIONAL.txt" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.es__traditional.txt"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x274 [0057.097] GetFileType (hFile=0x274) returned 0x1 [0057.097] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e594) returned 1 [0057.097] GetFileType (hFile=0x274) returned 0x1 [0057.097] GetFileSize (in: hFile=0x274, lpFileSizeHigh=0x31e6a0 | out: lpFileSizeHigh=0x31e6a0*=0x0) returned 0x6ec6 [0057.097] ReadFile (in: hFile=0x274, lpBuffer=0x278e338, nNumberOfBytesToRead=0x6ec6, lpNumberOfBytesRead=0x31e64c, lpOverlapped=0x0 | out: lpBuffer=0x278e338*, lpNumberOfBytesRead=0x31e64c*=0x6ec6, lpOverlapped=0x0) returned 1 [0057.113] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.es__TRADITIONAL.txt", nBufferLength=0x105, lpBuffer=0x31e090, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.es__TRADITIONAL.txt", lpFilePart=0x0) returned 0x75 [0057.113] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e584) returned 1 [0057.113] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.es__TRADITIONAL.txt" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.es__traditional.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x274 [0057.114] GetFileType (hFile=0x274) returned 0x1 [0057.114] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e580) returned 1 [0057.114] GetFileType (hFile=0x274) returned 0x1 [0057.114] WriteFile (in: hFile=0x274, lpBuffer=0x27fdb30*, nNumberOfBytesToWrite=0x6ed0, lpNumberOfBytesWritten=0x31e640, lpOverlapped=0x0 | out: lpBuffer=0x27fdb30*, lpNumberOfBytesWritten=0x31e640*=0x6ed0, lpOverlapped=0x0) returned 1 [0057.115] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.es__TRADITIONAL.txt", nBufferLength=0x105, lpBuffer=0x31e1c4, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.es__TRADITIONAL.txt", lpFilePart=0x0) returned 0x75 [0057.115] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.es__TRADITIONAL.txt", nBufferLength=0x105, lpBuffer=0x31e1c4, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.es__TRADITIONAL.txt", lpFilePart=0x0) returned 0x75 [0057.116] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e624) returned 1 [0057.116] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.es__TRADITIONAL.txt" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.es__traditional.txt"), fInfoLevelId=0x0, lpFileInformation=0x31e6a0 | out: lpFileInformation=0x31e6a0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x93de7300, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7ddaf0a0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x57f8ee0, ftLastWriteTime.dwHighDateTime=0x1d6eb7f, nFileSizeHigh=0x0, nFileSizeLow=0x6ed0)) returned 1 [0057.116] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e620) returned 1 [0057.116] MoveFileW (lpExistingFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.es__TRADITIONAL.txt" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.es__traditional.txt"), lpNewFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.es__TRADITIONAL.txt" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.es__traditional.txt")) returned 1 [0057.116] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.et.txt", nBufferLength=0x105, lpBuffer=0x31e0a4, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.et.txt", lpFilePart=0x0) returned 0x68 [0057.116] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e598) returned 1 [0057.116] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.et.txt" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.et.txt"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x274 [0057.116] GetFileType (hFile=0x274) returned 0x1 [0057.116] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e594) returned 1 [0057.116] GetFileType (hFile=0x274) returned 0x1 [0057.116] GetFileSize (in: hFile=0x274, lpFileSizeHigh=0x31e6a0 | out: lpFileSizeHigh=0x31e6a0*=0x0) returned 0x6b5e [0057.116] ReadFile (in: hFile=0x274, lpBuffer=0x2804f48, nNumberOfBytesToRead=0x6b5e, lpNumberOfBytesRead=0x31e64c, lpOverlapped=0x0 | out: lpBuffer=0x2804f48*, lpNumberOfBytesRead=0x31e64c*=0x6b5e, lpOverlapped=0x0) returned 1 [0057.131] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.et.txt", nBufferLength=0x105, lpBuffer=0x31e090, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.et.txt", lpFilePart=0x0) returned 0x68 [0057.131] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e584) returned 1 [0057.131] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.et.txt" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.et.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x274 [0057.132] GetFileType (hFile=0x274) returned 0x1 [0057.132] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e580) returned 1 [0057.132] GetFileType (hFile=0x274) returned 0x1 [0057.132] WriteFile (in: hFile=0x274, lpBuffer=0x2873610*, nNumberOfBytesToWrite=0x6b60, lpNumberOfBytesWritten=0x31e640, lpOverlapped=0x0 | out: lpBuffer=0x2873610*, lpNumberOfBytesWritten=0x31e640*=0x6b60, lpOverlapped=0x0) returned 1 [0057.133] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.et.txt", nBufferLength=0x105, lpBuffer=0x31e1c4, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.et.txt", lpFilePart=0x0) returned 0x68 [0057.133] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.et.txt", nBufferLength=0x105, lpBuffer=0x31e1c4, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.et.txt", lpFilePart=0x0) returned 0x68 [0057.134] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e624) returned 1 [0057.134] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.et.txt" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.et.txt"), fInfoLevelId=0x0, lpFileInformation=0x31e6a0 | out: lpFileInformation=0x31e6a0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x93de7300, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7f367960, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x581f040, ftLastWriteTime.dwHighDateTime=0x1d6eb7f, nFileSizeHigh=0x0, nFileSizeLow=0x6b60)) returned 1 [0057.134] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e620) returned 1 [0057.134] MoveFileW (lpExistingFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.et.txt" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.et.txt"), lpNewFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.et.txt" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.et.txt")) returned 1 [0057.134] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.et_EE.txt", nBufferLength=0x105, lpBuffer=0x31e0a4, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.et_EE.txt", lpFilePart=0x0) returned 0x6b [0057.134] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e598) returned 1 [0057.134] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.et_EE.txt" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.et_ee.txt"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x274 [0057.134] GetFileType (hFile=0x274) returned 0x1 [0057.134] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e594) returned 1 [0057.134] GetFileType (hFile=0x274) returned 0x1 [0057.134] GetFileSize (in: hFile=0x274, lpFileSizeHigh=0x31e6a0 | out: lpFileSizeHigh=0x31e6a0*=0x0) returned 0x6b5e [0057.134] ReadFile (in: hFile=0x274, lpBuffer=0x287a660, nNumberOfBytesToRead=0x6b5e, lpNumberOfBytesRead=0x31e64c, lpOverlapped=0x0 | out: lpBuffer=0x287a660*, lpNumberOfBytesRead=0x31e64c*=0x6b5e, lpOverlapped=0x0) returned 1 [0057.152] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.et_EE.txt", nBufferLength=0x105, lpBuffer=0x31e090, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.et_EE.txt", lpFilePart=0x0) returned 0x6b [0057.152] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e584) returned 1 [0057.152] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.et_EE.txt" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.et_ee.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x274 [0057.153] GetFileType (hFile=0x274) returned 0x1 [0057.153] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e580) returned 1 [0057.153] GetFileType (hFile=0x274) returned 0x1 [0057.153] WriteFile (in: hFile=0x274, lpBuffer=0x26e1768*, nNumberOfBytesToWrite=0x6b60, lpNumberOfBytesWritten=0x31e640, lpOverlapped=0x0 | out: lpBuffer=0x26e1768*, lpNumberOfBytesWritten=0x31e640*=0x6b60, lpOverlapped=0x0) returned 1 [0057.154] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.et_EE.txt", nBufferLength=0x105, lpBuffer=0x31e1c4, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.et_EE.txt", lpFilePart=0x0) returned 0x6b [0057.154] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.et_EE.txt", nBufferLength=0x105, lpBuffer=0x31e1c4, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.et_EE.txt", lpFilePart=0x0) returned 0x6b [0057.154] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e624) returned 1 [0057.154] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.et_EE.txt" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.et_ee.txt"), fInfoLevelId=0x0, lpFileInformation=0x31e6a0 | out: lpFileInformation=0x31e6a0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x950fa000, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7f367960, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x58451a0, ftLastWriteTime.dwHighDateTime=0x1d6eb7f, nFileSizeHigh=0x0, nFileSizeLow=0x6b60)) returned 1 [0057.154] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e620) returned 1 [0057.154] MoveFileW (lpExistingFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.et_EE.txt" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.et_ee.txt"), lpNewFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.et_EE.txt" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.et_ee.txt")) returned 1 [0057.155] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.fi.txt", nBufferLength=0x105, lpBuffer=0x31e0a4, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.fi.txt", lpFilePart=0x0) returned 0x68 [0057.155] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e598) returned 1 [0057.155] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.fi.txt" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.fi.txt"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x274 [0057.158] GetFileType (hFile=0x274) returned 0x1 [0057.158] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e594) returned 1 [0057.158] GetFileType (hFile=0x274) returned 0x1 [0057.158] GetFileSize (in: hFile=0x274, lpFileSizeHigh=0x31e6a0 | out: lpFileSizeHigh=0x31e6a0*=0x0) returned 0x6d74 [0057.158] ReadFile (in: hFile=0x274, lpBuffer=0x26e87c0, nNumberOfBytesToRead=0x6d74, lpNumberOfBytesRead=0x31e64c, lpOverlapped=0x0 | out: lpBuffer=0x26e87c0*, lpNumberOfBytesRead=0x31e64c*=0x6d74, lpOverlapped=0x0) returned 1 [0057.173] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.fi.txt", nBufferLength=0x105, lpBuffer=0x31e090, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.fi.txt", lpFilePart=0x0) returned 0x68 [0057.173] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e584) returned 1 [0057.173] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.fi.txt" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.fi.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x274 [0057.175] GetFileType (hFile=0x274) returned 0x1 [0057.175] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e580) returned 1 [0057.175] GetFileType (hFile=0x274) returned 0x1 [0057.175] WriteFile (in: hFile=0x274, lpBuffer=0x2757a80*, nNumberOfBytesToWrite=0x6d80, lpNumberOfBytesWritten=0x31e640, lpOverlapped=0x0 | out: lpBuffer=0x2757a80*, lpNumberOfBytesWritten=0x31e640*=0x6d80, lpOverlapped=0x0) returned 1 [0057.176] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.fi.txt", nBufferLength=0x105, lpBuffer=0x31e1c4, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.fi.txt", lpFilePart=0x0) returned 0x68 [0057.176] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.fi.txt", nBufferLength=0x105, lpBuffer=0x31e1c4, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.fi.txt", lpFilePart=0x0) returned 0x68 [0057.176] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e624) returned 1 [0057.176] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.fi.txt" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.fi.txt"), fInfoLevelId=0x0, lpFileInformation=0x31e6a0 | out: lpFileInformation=0x31e6a0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x93de7300, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7dd62de0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x5891460, ftLastWriteTime.dwHighDateTime=0x1d6eb7f, nFileSizeHigh=0x0, nFileSizeLow=0x6d80)) returned 1 [0057.176] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e620) returned 1 [0057.176] MoveFileW (lpExistingFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.fi.txt" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.fi.txt"), lpNewFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.fi.txt" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.fi.txt")) returned 1 [0057.177] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.fi_FI.txt", nBufferLength=0x105, lpBuffer=0x31e0a4, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.fi_FI.txt", lpFilePart=0x0) returned 0x6b [0057.177] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e598) returned 1 [0057.177] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.fi_FI.txt" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.fi_fi.txt"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x274 [0057.177] GetFileType (hFile=0x274) returned 0x1 [0057.177] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e594) returned 1 [0057.177] GetFileType (hFile=0x274) returned 0x1 [0057.177] GetFileSize (in: hFile=0x274, lpFileSizeHigh=0x31e6a0 | out: lpFileSizeHigh=0x31e6a0*=0x0) returned 0x6d74 [0057.177] ReadFile (in: hFile=0x274, lpBuffer=0x275ecf0, nNumberOfBytesToRead=0x6d74, lpNumberOfBytesRead=0x31e64c, lpOverlapped=0x0 | out: lpBuffer=0x275ecf0*, lpNumberOfBytesRead=0x31e64c*=0x6d74, lpOverlapped=0x0) returned 1 [0057.192] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.fi_FI.txt", nBufferLength=0x105, lpBuffer=0x31e090, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.fi_FI.txt", lpFilePart=0x0) returned 0x6b [0057.192] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e584) returned 1 [0057.192] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.fi_FI.txt" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.fi_fi.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x274 [0057.193] GetFileType (hFile=0x274) returned 0x1 [0057.193] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e580) returned 1 [0057.193] GetFileType (hFile=0x274) returned 0x1 [0057.193] WriteFile (in: hFile=0x274, lpBuffer=0x27cde54*, nNumberOfBytesToWrite=0x6d80, lpNumberOfBytesWritten=0x31e640, lpOverlapped=0x0 | out: lpBuffer=0x27cde54*, lpNumberOfBytesWritten=0x31e640*=0x6d80, lpOverlapped=0x0) returned 1 [0057.194] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.fi_FI.txt", nBufferLength=0x105, lpBuffer=0x31e1c4, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.fi_FI.txt", lpFilePart=0x0) returned 0x6b [0057.194] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.fi_FI.txt", nBufferLength=0x105, lpBuffer=0x31e1c4, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.fi_FI.txt", lpFilePart=0x0) returned 0x6b [0057.194] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e624) returned 1 [0057.195] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.fi_FI.txt" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.fi_fi.txt"), fInfoLevelId=0x0, lpFileInformation=0x31e6a0 | out: lpFileInformation=0x31e6a0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x93de7300, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7dd62de0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x58b75c0, ftLastWriteTime.dwHighDateTime=0x1d6eb7f, nFileSizeHigh=0x0, nFileSizeLow=0x6d80)) returned 1 [0057.195] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e620) returned 1 [0057.195] MoveFileW (lpExistingFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.fi_FI.txt" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.fi_fi.txt"), lpNewFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.fi_FI.txt" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.fi_fi.txt")) returned 1 [0057.195] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.fi_FI_PREEURO.txt", nBufferLength=0x105, lpBuffer=0x31e0a4, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.fi_FI_PREEURO.txt", lpFilePart=0x0) returned 0x73 [0057.195] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e598) returned 1 [0057.195] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.fi_FI_PREEURO.txt" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.fi_fi_preeuro.txt"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x274 [0057.195] GetFileType (hFile=0x274) returned 0x1 [0057.195] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e594) returned 1 [0057.195] GetFileType (hFile=0x274) returned 0x1 [0057.195] GetFileSize (in: hFile=0x274, lpFileSizeHigh=0x31e6a0 | out: lpFileSizeHigh=0x31e6a0*=0x0) returned 0x6d7a [0057.195] ReadFile (in: hFile=0x274, lpBuffer=0x27d50f8, nNumberOfBytesToRead=0x6d7a, lpNumberOfBytesRead=0x31e64c, lpOverlapped=0x0 | out: lpBuffer=0x27d50f8*, lpNumberOfBytesRead=0x31e64c*=0x6d7a, lpOverlapped=0x0) returned 1 [0057.211] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.fi_FI_PREEURO.txt", nBufferLength=0x105, lpBuffer=0x31e090, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.fi_FI_PREEURO.txt", lpFilePart=0x0) returned 0x73 [0057.211] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e584) returned 1 [0057.211] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.fi_FI_PREEURO.txt" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.fi_fi_preeuro.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x274 [0057.212] GetFileType (hFile=0x274) returned 0x1 [0057.212] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e580) returned 1 [0057.212] GetFileType (hFile=0x274) returned 0x1 [0057.212] WriteFile (in: hFile=0x274, lpBuffer=0x2844260*, nNumberOfBytesToWrite=0x6d80, lpNumberOfBytesWritten=0x31e640, lpOverlapped=0x0 | out: lpBuffer=0x2844260*, lpNumberOfBytesWritten=0x31e640*=0x6d80, lpOverlapped=0x0) returned 1 [0057.213] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.fi_FI_PREEURO.txt", nBufferLength=0x105, lpBuffer=0x31e1c4, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.fi_FI_PREEURO.txt", lpFilePart=0x0) returned 0x73 [0057.213] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.fi_FI_PREEURO.txt", nBufferLength=0x105, lpBuffer=0x31e1c4, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.fi_FI_PREEURO.txt", lpFilePart=0x0) returned 0x73 [0057.213] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e624) returned 1 [0057.213] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.fi_FI_PREEURO.txt" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.fi_fi_preeuro.txt"), fInfoLevelId=0x0, lpFileInformation=0x31e6a0 | out: lpFileInformation=0x31e6a0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x93de7300, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7dd62de0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x58dd720, ftLastWriteTime.dwHighDateTime=0x1d6eb7f, nFileSizeHigh=0x0, nFileSizeLow=0x6d80)) returned 1 [0057.213] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e620) returned 1 [0057.214] MoveFileW (lpExistingFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.fi_FI_PREEURO.txt" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.fi_fi_preeuro.txt"), lpNewFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.fi_FI_PREEURO.txt" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.fi_fi_preeuro.txt")) returned 1 [0057.214] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.fr_CA.txt", nBufferLength=0x105, lpBuffer=0x31e0a4, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.fr_CA.txt", lpFilePart=0x0) returned 0x6b [0057.214] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e598) returned 1 [0057.214] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.fr_CA.txt" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.fr_ca.txt"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x274 [0057.215] GetFileType (hFile=0x274) returned 0x1 [0057.215] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e594) returned 1 [0057.215] GetFileType (hFile=0x274) returned 0x1 [0057.215] GetFileSize (in: hFile=0x274, lpFileSizeHigh=0x31e6a0 | out: lpFileSizeHigh=0x31e6a0*=0x0) returned 0x6f48 [0057.215] ReadFile (in: hFile=0x274, lpBuffer=0x284b524, nNumberOfBytesToRead=0x6f48, lpNumberOfBytesRead=0x31e64c, lpOverlapped=0x0 | out: lpBuffer=0x284b524*, lpNumberOfBytesRead=0x31e64c*=0x6f48, lpOverlapped=0x0) returned 1 [0057.232] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.fr_CA.txt", nBufferLength=0x105, lpBuffer=0x31e090, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.fr_CA.txt", lpFilePart=0x0) returned 0x6b [0057.232] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e584) returned 1 [0057.233] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.fr_CA.txt" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.fr_ca.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x274 [0057.233] GetFileType (hFile=0x274) returned 0x1 [0057.233] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e580) returned 1 [0057.234] GetFileType (hFile=0x274) returned 0x1 [0057.234] WriteFile (in: hFile=0x274, lpBuffer=0x26bb338*, nNumberOfBytesToWrite=0x6f50, lpNumberOfBytesWritten=0x31e640, lpOverlapped=0x0 | out: lpBuffer=0x26bb338*, lpNumberOfBytesWritten=0x31e640*=0x6f50, lpOverlapped=0x0) returned 1 [0057.235] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.fr_CA.txt", nBufferLength=0x105, lpBuffer=0x31e1c4, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.fr_CA.txt", lpFilePart=0x0) returned 0x6b [0057.235] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.fr_CA.txt", nBufferLength=0x105, lpBuffer=0x31e1c4, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.fr_CA.txt", lpFilePart=0x0) returned 0x6b [0057.235] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e624) returned 1 [0057.235] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.fr_CA.txt" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.fr_ca.txt"), fInfoLevelId=0x0, lpFileInformation=0x31e6a0 | out: lpFileInformation=0x31e6a0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x93de7300, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7dd3cc80, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x5903880, ftLastWriteTime.dwHighDateTime=0x1d6eb7f, nFileSizeHigh=0x0, nFileSizeLow=0x6f50)) returned 1 [0057.235] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e620) returned 1 [0057.235] MoveFileW (lpExistingFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.fr_CA.txt" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.fr_ca.txt"), lpNewFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.fr_CA.txt" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.fr_ca.txt")) returned 1 [0057.235] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.fr_FR.txt", nBufferLength=0x105, lpBuffer=0x31e0a4, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.fr_FR.txt", lpFilePart=0x0) returned 0x6b [0057.235] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e598) returned 1 [0057.235] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.fr_FR.txt" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.fr_fr.txt"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x274 [0057.236] GetFileType (hFile=0x274) returned 0x1 [0057.236] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e594) returned 1 [0057.236] GetFileType (hFile=0x274) returned 0x1 [0057.236] GetFileSize (in: hFile=0x274, lpFileSizeHigh=0x31e6a0 | out: lpFileSizeHigh=0x31e6a0*=0x0) returned 0x6f48 [0057.236] ReadFile (in: hFile=0x274, lpBuffer=0x26c278c, nNumberOfBytesToRead=0x6f48, lpNumberOfBytesRead=0x31e64c, lpOverlapped=0x0 | out: lpBuffer=0x26c278c*, lpNumberOfBytesRead=0x31e64c*=0x6f48, lpOverlapped=0x0) returned 1 [0057.263] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.fr_FR.txt", nBufferLength=0x105, lpBuffer=0x31e090, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.fr_FR.txt", lpFilePart=0x0) returned 0x6b [0057.263] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e584) returned 1 [0057.263] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.fr_FR.txt" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.fr_fr.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x274 [0057.264] GetFileType (hFile=0x274) returned 0x1 [0057.264] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e580) returned 1 [0057.264] GetFileType (hFile=0x274) returned 0x1 [0057.264] WriteFile (in: hFile=0x274, lpBuffer=0x273235c*, nNumberOfBytesToWrite=0x6f50, lpNumberOfBytesWritten=0x31e640, lpOverlapped=0x0 | out: lpBuffer=0x273235c*, lpNumberOfBytesWritten=0x31e640*=0x6f50, lpOverlapped=0x0) returned 1 [0057.265] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.fr_FR.txt", nBufferLength=0x105, lpBuffer=0x31e1c4, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.fr_FR.txt", lpFilePart=0x0) returned 0x6b [0057.265] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.fr_FR.txt", nBufferLength=0x105, lpBuffer=0x31e1c4, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.fr_FR.txt", lpFilePart=0x0) returned 0x6b [0057.265] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e624) returned 1 [0057.265] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.fr_FR.txt" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.fr_fr.txt"), fInfoLevelId=0x0, lpFileInformation=0x31e6a0 | out: lpFileInformation=0x31e6a0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x93de7300, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7dd3cc80, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x594fb40, ftLastWriteTime.dwHighDateTime=0x1d6eb7f, nFileSizeHigh=0x0, nFileSizeLow=0x6f50)) returned 1 [0057.266] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e620) returned 1 [0057.266] MoveFileW (lpExistingFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.fr_FR.txt" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.fr_fr.txt"), lpNewFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.fr_FR.txt" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.fr_fr.txt")) returned 1 [0057.266] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.fr_FR_PREEURO.txt", nBufferLength=0x105, lpBuffer=0x31e0a4, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.fr_FR_PREEURO.txt", lpFilePart=0x0) returned 0x73 [0057.266] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e598) returned 1 [0057.266] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.fr_FR_PREEURO.txt" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.fr_fr_preeuro.txt"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x274 [0057.266] GetFileType (hFile=0x274) returned 0x1 [0057.266] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e594) returned 1 [0057.266] GetFileType (hFile=0x274) returned 0x1 [0057.266] GetFileSize (in: hFile=0x274, lpFileSizeHigh=0x31e6a0 | out: lpFileSizeHigh=0x31e6a0*=0x0) returned 0x6f44 [0057.266] ReadFile (in: hFile=0x274, lpBuffer=0x27397d0, nNumberOfBytesToRead=0x6f44, lpNumberOfBytesRead=0x31e64c, lpOverlapped=0x0 | out: lpBuffer=0x27397d0*, lpNumberOfBytesRead=0x31e64c*=0x6f44, lpOverlapped=0x0) returned 1 [0057.282] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.fr_FR_PREEURO.txt", nBufferLength=0x105, lpBuffer=0x31e090, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.fr_FR_PREEURO.txt", lpFilePart=0x0) returned 0x73 [0057.282] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e584) returned 1 [0057.282] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.fr_FR_PREEURO.txt" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.fr_fr_preeuro.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x274 [0057.283] GetFileType (hFile=0x274) returned 0x1 [0057.283] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e580) returned 1 [0057.283] GetFileType (hFile=0x274) returned 0x1 [0057.283] WriteFile (in: hFile=0x274, lpBuffer=0x27a9244*, nNumberOfBytesToWrite=0x6f50, lpNumberOfBytesWritten=0x31e640, lpOverlapped=0x0 | out: lpBuffer=0x27a9244*, lpNumberOfBytesWritten=0x31e640*=0x6f50, lpOverlapped=0x0) returned 1 [0057.285] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.fr_FR_PREEURO.txt", nBufferLength=0x105, lpBuffer=0x31e1c4, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.fr_FR_PREEURO.txt", lpFilePart=0x0) returned 0x73 [0057.285] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.fr_FR_PREEURO.txt", nBufferLength=0x105, lpBuffer=0x31e1c4, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.fr_FR_PREEURO.txt", lpFilePart=0x0) returned 0x73 [0057.285] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e624) returned 1 [0057.285] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.fr_FR_PREEURO.txt" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.fr_fr_preeuro.txt"), fInfoLevelId=0x0, lpFileInformation=0x31e6a0 | out: lpFileInformation=0x31e6a0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x950fa000, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7dd3cc80, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x599be00, ftLastWriteTime.dwHighDateTime=0x1d6eb7f, nFileSizeHigh=0x0, nFileSizeLow=0x6f50)) returned 1 [0057.285] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e620) returned 1 [0057.285] MoveFileW (lpExistingFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.fr_FR_PREEURO.txt" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.fr_fr_preeuro.txt"), lpNewFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.fr_FR_PREEURO.txt" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.fr_fr_preeuro.txt")) returned 1 [0057.285] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.he.txt", nBufferLength=0x105, lpBuffer=0x31e0a4, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.he.txt", lpFilePart=0x0) returned 0x68 [0057.285] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e598) returned 1 [0057.285] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.he.txt" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.he.txt"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x274 [0057.286] GetFileType (hFile=0x274) returned 0x1 [0057.286] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e594) returned 1 [0057.286] GetFileType (hFile=0x274) returned 0x1 [0057.286] GetFileSize (in: hFile=0x274, lpFileSizeHigh=0x31e6a0 | out: lpFileSizeHigh=0x31e6a0*=0x0) returned 0x67c2 [0057.286] ReadFile (in: hFile=0x274, lpBuffer=0x27b06cc, nNumberOfBytesToRead=0x67c2, lpNumberOfBytesRead=0x31e64c, lpOverlapped=0x0 | out: lpBuffer=0x27b06cc*, lpNumberOfBytesRead=0x31e64c*=0x67c2, lpOverlapped=0x0) returned 1 [0057.303] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.he.txt", nBufferLength=0x105, lpBuffer=0x31e090, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.he.txt", lpFilePart=0x0) returned 0x68 [0057.303] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e584) returned 1 [0057.303] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.he.txt" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.he.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x274 [0057.304] GetFileType (hFile=0x274) returned 0x1 [0057.304] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e580) returned 1 [0057.304] GetFileType (hFile=0x274) returned 0x1 [0057.304] WriteFile (in: hFile=0x274, lpBuffer=0x281dbc4*, nNumberOfBytesToWrite=0x67d0, lpNumberOfBytesWritten=0x31e640, lpOverlapped=0x0 | out: lpBuffer=0x281dbc4*, lpNumberOfBytesWritten=0x31e640*=0x67d0, lpOverlapped=0x0) returned 1 [0057.305] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.he.txt", nBufferLength=0x105, lpBuffer=0x31e1c4, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.he.txt", lpFilePart=0x0) returned 0x68 [0057.305] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.he.txt", nBufferLength=0x105, lpBuffer=0x31e1c4, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.he.txt", lpFilePart=0x0) returned 0x68 [0057.305] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e624) returned 1 [0057.305] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.he.txt" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.he.txt"), fInfoLevelId=0x0, lpFileInformation=0x31e6a0 | out: lpFileInformation=0x31e6a0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x93de7300, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7f341800, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x59c1f60, ftLastWriteTime.dwHighDateTime=0x1d6eb7f, nFileSizeHigh=0x0, nFileSizeLow=0x67d0)) returned 1 [0057.305] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e620) returned 1 [0057.305] MoveFileW (lpExistingFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.he.txt" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.he.txt"), lpNewFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.he.txt" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.he.txt")) returned 1 [0057.306] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.he_IL.txt", nBufferLength=0x105, lpBuffer=0x31e0a4, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.he_IL.txt", lpFilePart=0x0) returned 0x6b [0057.306] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e598) returned 1 [0057.306] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.he_IL.txt" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.he_il.txt"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x274 [0057.306] GetFileType (hFile=0x274) returned 0x1 [0057.306] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e594) returned 1 [0057.306] GetFileType (hFile=0x274) returned 0x1 [0057.306] GetFileSize (in: hFile=0x274, lpFileSizeHigh=0x31e6a0 | out: lpFileSizeHigh=0x31e6a0*=0x0) returned 0x67c2 [0057.306] ReadFile (in: hFile=0x274, lpBuffer=0x2824884, nNumberOfBytesToRead=0x67c2, lpNumberOfBytesRead=0x31e64c, lpOverlapped=0x0 | out: lpBuffer=0x2824884*, lpNumberOfBytesRead=0x31e64c*=0x67c2, lpOverlapped=0x0) returned 1 [0057.326] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.he_IL.txt", nBufferLength=0x105, lpBuffer=0x31e090, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.he_IL.txt", lpFilePart=0x0) returned 0x6b [0057.326] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e584) returned 1 [0057.326] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.he_IL.txt" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.he_il.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x274 [0057.327] GetFileType (hFile=0x274) returned 0x1 [0057.327] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e580) returned 1 [0057.327] GetFileType (hFile=0x274) returned 0x1 [0057.327] WriteFile (in: hFile=0x274, lpBuffer=0x2697354*, nNumberOfBytesToWrite=0x67d0, lpNumberOfBytesWritten=0x31e640, lpOverlapped=0x0 | out: lpBuffer=0x2697354*, lpNumberOfBytesWritten=0x31e640*=0x67d0, lpOverlapped=0x0) returned 1 [0057.328] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.he_IL.txt", nBufferLength=0x105, lpBuffer=0x31e1c4, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.he_IL.txt", lpFilePart=0x0) returned 0x6b [0057.328] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.he_IL.txt", nBufferLength=0x105, lpBuffer=0x31e1c4, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.he_IL.txt", lpFilePart=0x0) returned 0x6b [0057.328] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e624) returned 1 [0057.329] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.he_IL.txt" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.he_il.txt"), fInfoLevelId=0x0, lpFileInformation=0x31e6a0 | out: lpFileInformation=0x31e6a0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x93de7300, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7f341800, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x59e80c0, ftLastWriteTime.dwHighDateTime=0x1d6eb7f, nFileSizeHigh=0x0, nFileSizeLow=0x67d0)) returned 1 [0057.329] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e620) returned 1 [0057.329] MoveFileW (lpExistingFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.he_IL.txt" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.he_il.txt"), lpNewFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.he_IL.txt" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.he_il.txt")) returned 1 [0057.329] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.hr.txt", nBufferLength=0x105, lpBuffer=0x31e0a4, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.hr.txt", lpFilePart=0x0) returned 0x68 [0057.329] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e598) returned 1 [0057.329] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.hr.txt" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.hr.txt"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x274 [0057.329] GetFileType (hFile=0x274) returned 0x1 [0057.329] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e594) returned 1 [0057.329] GetFileType (hFile=0x274) returned 0x1 [0057.329] GetFileSize (in: hFile=0x274, lpFileSizeHigh=0x31e6a0 | out: lpFileSizeHigh=0x31e6a0*=0x0) returned 0x6e28 [0057.329] ReadFile (in: hFile=0x274, lpBuffer=0x269e01c, nNumberOfBytesToRead=0x6e28, lpNumberOfBytesRead=0x31e64c, lpOverlapped=0x0 | out: lpBuffer=0x269e01c*, lpNumberOfBytesRead=0x31e64c*=0x6e28, lpOverlapped=0x0) returned 1 [0057.345] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.hr.txt", nBufferLength=0x105, lpBuffer=0x31e090, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.hr.txt", lpFilePart=0x0) returned 0x68 [0057.345] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e584) returned 1 [0057.345] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.hr.txt" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.hr.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x274 [0057.346] GetFileType (hFile=0x274) returned 0x1 [0057.346] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e580) returned 1 [0057.346] GetFileType (hFile=0x274) returned 0x1 [0057.346] WriteFile (in: hFile=0x274, lpBuffer=0x270d64c*, nNumberOfBytesToWrite=0x6e30, lpNumberOfBytesWritten=0x31e640, lpOverlapped=0x0 | out: lpBuffer=0x270d64c*, lpNumberOfBytesWritten=0x31e640*=0x6e30, lpOverlapped=0x0) returned 1 [0057.347] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.hr.txt", nBufferLength=0x105, lpBuffer=0x31e1c4, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.hr.txt", lpFilePart=0x0) returned 0x68 [0057.347] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.hr.txt", nBufferLength=0x105, lpBuffer=0x31e1c4, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.hr.txt", lpFilePart=0x0) returned 0x68 [0057.347] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e624) returned 1 [0057.347] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.hr.txt" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.hr.txt"), fInfoLevelId=0x0, lpFileInformation=0x31e6a0 | out: lpFileInformation=0x31e6a0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x950fa000, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7f38dac0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x5a34380, ftLastWriteTime.dwHighDateTime=0x1d6eb7f, nFileSizeHigh=0x0, nFileSizeLow=0x6e30)) returned 1 [0057.348] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e620) returned 1 [0057.348] MoveFileW (lpExistingFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.hr.txt" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.hr.txt"), lpNewFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.hr.txt" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.hr.txt")) returned 1 [0057.348] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.hr_HR.txt", nBufferLength=0x105, lpBuffer=0x31e0a4, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.hr_HR.txt", lpFilePart=0x0) returned 0x6b [0057.348] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e598) returned 1 [0057.348] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.hr_HR.txt" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.hr_hr.txt"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x274 [0057.348] GetFileType (hFile=0x274) returned 0x1 [0057.348] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e594) returned 1 [0057.348] GetFileType (hFile=0x274) returned 0x1 [0057.348] GetFileSize (in: hFile=0x274, lpFileSizeHigh=0x31e6a0 | out: lpFileSizeHigh=0x31e6a0*=0x0) returned 0x6e28 [0057.348] ReadFile (in: hFile=0x274, lpBuffer=0x271496c, nNumberOfBytesToRead=0x6e28, lpNumberOfBytesRead=0x31e64c, lpOverlapped=0x0 | out: lpBuffer=0x271496c*, lpNumberOfBytesRead=0x31e64c*=0x6e28, lpOverlapped=0x0) returned 1 [0057.364] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.hr_HR.txt", nBufferLength=0x105, lpBuffer=0x31e090, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.hr_HR.txt", lpFilePart=0x0) returned 0x6b [0057.364] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e584) returned 1 [0057.364] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.hr_HR.txt" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.hr_hr.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x274 [0057.367] GetFileType (hFile=0x274) returned 0x1 [0057.367] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e580) returned 1 [0057.367] GetFileType (hFile=0x274) returned 0x1 [0057.367] WriteFile (in: hFile=0x274, lpBuffer=0x2783e40*, nNumberOfBytesToWrite=0x6e30, lpNumberOfBytesWritten=0x31e640, lpOverlapped=0x0 | out: lpBuffer=0x2783e40*, lpNumberOfBytesWritten=0x31e640*=0x6e30, lpOverlapped=0x0) returned 1 [0057.368] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.hr_HR.txt", nBufferLength=0x105, lpBuffer=0x31e1c4, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.hr_HR.txt", lpFilePart=0x0) returned 0x6b [0057.368] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.hr_HR.txt", nBufferLength=0x105, lpBuffer=0x31e1c4, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.hr_HR.txt", lpFilePart=0x0) returned 0x6b [0057.369] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e624) returned 1 [0057.369] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.hr_HR.txt" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.hr_hr.txt"), fInfoLevelId=0x0, lpFileInformation=0x31e6a0 | out: lpFileInformation=0x31e6a0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x950fa000, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7f38dac0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x5a5a4e0, ftLastWriteTime.dwHighDateTime=0x1d6eb7f, nFileSizeHigh=0x0, nFileSizeLow=0x6e30)) returned 1 [0057.369] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e620) returned 1 [0057.369] MoveFileW (lpExistingFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.hr_HR.txt" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.hr_hr.txt"), lpNewFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.hr_HR.txt" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.hr_hr.txt")) returned 1 [0057.369] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.hu.txt", nBufferLength=0x105, lpBuffer=0x31e0a4, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.hu.txt", lpFilePart=0x0) returned 0x68 [0057.369] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e598) returned 1 [0057.369] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.hu.txt" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.hu.txt"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x274 [0057.370] GetFileType (hFile=0x274) returned 0x1 [0057.370] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e594) returned 1 [0057.370] GetFileType (hFile=0x274) returned 0x1 [0057.370] GetFileSize (in: hFile=0x274, lpFileSizeHigh=0x31e6a0 | out: lpFileSizeHigh=0x31e6a0*=0x0) returned 0x6dfe [0057.370] ReadFile (in: hFile=0x274, lpBuffer=0x278b168, nNumberOfBytesToRead=0x6dfe, lpNumberOfBytesRead=0x31e64c, lpOverlapped=0x0 | out: lpBuffer=0x278b168*, lpNumberOfBytesRead=0x31e64c*=0x6dfe, lpOverlapped=0x0) returned 1 [0057.386] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.hu.txt", nBufferLength=0x105, lpBuffer=0x31e090, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.hu.txt", lpFilePart=0x0) returned 0x68 [0057.386] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e584) returned 1 [0057.386] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.hu.txt" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.hu.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x274 [0057.387] GetFileType (hFile=0x274) returned 0x1 [0057.387] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e580) returned 1 [0057.387] GetFileType (hFile=0x274) returned 0x1 [0057.387] WriteFile (in: hFile=0x274, lpBuffer=0x27fa550*, nNumberOfBytesToWrite=0x6e00, lpNumberOfBytesWritten=0x31e640, lpOverlapped=0x0 | out: lpBuffer=0x27fa550*, lpNumberOfBytesWritten=0x31e640*=0x6e00, lpOverlapped=0x0) returned 1 [0057.388] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.hu.txt", nBufferLength=0x105, lpBuffer=0x31e1c4, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.hu.txt", lpFilePart=0x0) returned 0x68 [0057.388] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.hu.txt", nBufferLength=0x105, lpBuffer=0x31e1c4, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.hu.txt", lpFilePart=0x0) returned 0x68 [0057.388] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e624) returned 1 [0057.388] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.hu.txt" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.hu.txt"), fInfoLevelId=0x0, lpFileInformation=0x31e6a0 | out: lpFileInformation=0x31e6a0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x950fa000, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7f31b6a0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x5a80640, ftLastWriteTime.dwHighDateTime=0x1d6eb7f, nFileSizeHigh=0x0, nFileSizeLow=0x6e00)) returned 1 [0057.388] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e620) returned 1 [0057.388] MoveFileW (lpExistingFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.hu.txt" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.hu.txt"), lpNewFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.hu.txt" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.hu.txt")) returned 1 [0057.389] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.hu_HU.txt", nBufferLength=0x105, lpBuffer=0x31e0a4, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.hu_HU.txt", lpFilePart=0x0) returned 0x6b [0057.389] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e598) returned 1 [0057.389] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.hu_HU.txt" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.hu_hu.txt"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x274 [0057.389] GetFileType (hFile=0x274) returned 0x1 [0057.389] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e594) returned 1 [0057.389] GetFileType (hFile=0x274) returned 0x1 [0057.389] GetFileSize (in: hFile=0x274, lpFileSizeHigh=0x31e6a0 | out: lpFileSizeHigh=0x31e6a0*=0x0) returned 0x6dfe [0057.389] ReadFile (in: hFile=0x274, lpBuffer=0x2801840, nNumberOfBytesToRead=0x6dfe, lpNumberOfBytesRead=0x31e64c, lpOverlapped=0x0 | out: lpBuffer=0x2801840*, lpNumberOfBytesRead=0x31e64c*=0x6dfe, lpOverlapped=0x0) returned 1 [0057.405] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.hu_HU.txt", nBufferLength=0x105, lpBuffer=0x31e090, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.hu_HU.txt", lpFilePart=0x0) returned 0x6b [0057.405] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e584) returned 1 [0057.405] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.hu_HU.txt" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.hu_hu.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x274 [0057.406] GetFileType (hFile=0x274) returned 0x1 [0057.406] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e580) returned 1 [0057.406] GetFileType (hFile=0x274) returned 0x1 [0057.406] WriteFile (in: hFile=0x274, lpBuffer=0x2870c28*, nNumberOfBytesToWrite=0x6e00, lpNumberOfBytesWritten=0x31e640, lpOverlapped=0x0 | out: lpBuffer=0x2870c28*, lpNumberOfBytesWritten=0x31e640*=0x6e00, lpOverlapped=0x0) returned 1 [0057.407] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.hu_HU.txt", nBufferLength=0x105, lpBuffer=0x31e1c4, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.hu_HU.txt", lpFilePart=0x0) returned 0x6b [0057.407] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.hu_HU.txt", nBufferLength=0x105, lpBuffer=0x31e1c4, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.hu_HU.txt", lpFilePart=0x0) returned 0x6b [0057.407] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e624) returned 1 [0057.407] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.hu_HU.txt" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.hu_hu.txt"), fInfoLevelId=0x0, lpFileInformation=0x31e6a0 | out: lpFileInformation=0x31e6a0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x93de7300, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7f31b6a0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x5aa67a0, ftLastWriteTime.dwHighDateTime=0x1d6eb7f, nFileSizeHigh=0x0, nFileSizeLow=0x6e00)) returned 1 [0057.407] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e620) returned 1 [0057.407] MoveFileW (lpExistingFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.hu_HU.txt" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.hu_hu.txt"), lpNewFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.hu_HU.txt" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.hu_hu.txt")) returned 1 [0057.408] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.it.txt", nBufferLength=0x105, lpBuffer=0x31e0a4, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.it.txt", lpFilePart=0x0) returned 0x68 [0057.408] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e598) returned 1 [0057.408] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.it.txt" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.it.txt"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x274 [0057.408] GetFileType (hFile=0x274) returned 0x1 [0057.408] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e594) returned 1 [0057.408] GetFileType (hFile=0x274) returned 0x1 [0057.408] GetFileSize (in: hFile=0x274, lpFileSizeHigh=0x31e6a0 | out: lpFileSizeHigh=0x31e6a0*=0x0) returned 0x6e88 [0057.408] ReadFile (in: hFile=0x274, lpBuffer=0x2877f20, nNumberOfBytesToRead=0x6e88, lpNumberOfBytesRead=0x31e64c, lpOverlapped=0x0 | out: lpBuffer=0x2877f20*, lpNumberOfBytesRead=0x31e64c*=0x6e88, lpOverlapped=0x0) returned 1 [0057.450] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.it.txt", nBufferLength=0x105, lpBuffer=0x31e090, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.it.txt", lpFilePart=0x0) returned 0x68 [0057.450] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e584) returned 1 [0057.451] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.it.txt" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.it.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x274 [0057.452] GetFileType (hFile=0x274) returned 0x1 [0057.452] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e580) returned 1 [0057.452] GetFileType (hFile=0x274) returned 0x1 [0057.452] WriteFile (in: hFile=0x274, lpBuffer=0x26e1130*, nNumberOfBytesToWrite=0x6e90, lpNumberOfBytesWritten=0x31e640, lpOverlapped=0x0 | out: lpBuffer=0x26e1130*, lpNumberOfBytesWritten=0x31e640*=0x6e90, lpOverlapped=0x0) returned 1 [0057.453] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.it.txt", nBufferLength=0x105, lpBuffer=0x31e1c4, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.it.txt", lpFilePart=0x0) returned 0x68 [0057.453] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.it.txt", nBufferLength=0x105, lpBuffer=0x31e1c4, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.it.txt", lpFilePart=0x0) returned 0x68 [0057.453] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e624) returned 1 [0057.453] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.it.txt" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.it.txt"), fInfoLevelId=0x0, lpFileInformation=0x31e6a0 | out: lpFileInformation=0x31e6a0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x950fa000, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7dd3cc80, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x5b18bc0, ftLastWriteTime.dwHighDateTime=0x1d6eb7f, nFileSizeHigh=0x0, nFileSizeLow=0x6e90)) returned 1 [0057.453] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e620) returned 1 [0057.453] MoveFileW (lpExistingFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.it.txt" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.it.txt"), lpNewFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.it.txt" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.it.txt")) returned 1 [0057.453] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.it_CH.txt", nBufferLength=0x105, lpBuffer=0x31e0a4, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.it_CH.txt", lpFilePart=0x0) returned 0x6b [0057.454] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e598) returned 1 [0057.454] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.it_CH.txt" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.it_ch.txt"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x274 [0057.455] GetFileType (hFile=0x274) returned 0x1 [0057.455] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e594) returned 1 [0057.455] GetFileType (hFile=0x274) returned 0x1 [0057.455] GetFileSize (in: hFile=0x274, lpFileSizeHigh=0x31e6a0 | out: lpFileSizeHigh=0x31e6a0*=0x0) returned 0x6e8e [0057.455] ReadFile (in: hFile=0x274, lpBuffer=0x26e84b0, nNumberOfBytesToRead=0x6e8e, lpNumberOfBytesRead=0x31e64c, lpOverlapped=0x0 | out: lpBuffer=0x26e84b0*, lpNumberOfBytesRead=0x31e64c*=0x6e8e, lpOverlapped=0x0) returned 1 [0057.470] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.it_CH.txt", nBufferLength=0x105, lpBuffer=0x31e090, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.it_CH.txt", lpFilePart=0x0) returned 0x6b [0057.470] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e584) returned 1 [0057.471] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.it_CH.txt" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.it_ch.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x274 [0057.472] GetFileType (hFile=0x274) returned 0x1 [0057.472] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e580) returned 1 [0057.472] GetFileType (hFile=0x274) returned 0x1 [0057.472] WriteFile (in: hFile=0x274, lpBuffer=0x2757cc4*, nNumberOfBytesToWrite=0x6e90, lpNumberOfBytesWritten=0x31e640, lpOverlapped=0x0 | out: lpBuffer=0x2757cc4*, lpNumberOfBytesWritten=0x31e640*=0x6e90, lpOverlapped=0x0) returned 1 [0057.473] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.it_CH.txt", nBufferLength=0x105, lpBuffer=0x31e1c4, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.it_CH.txt", lpFilePart=0x0) returned 0x6b [0057.473] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.it_CH.txt", nBufferLength=0x105, lpBuffer=0x31e1c4, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.it_CH.txt", lpFilePart=0x0) returned 0x6b [0057.473] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e624) returned 1 [0057.473] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.it_CH.txt" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.it_ch.txt"), fInfoLevelId=0x0, lpFileInformation=0x31e6a0 | out: lpFileInformation=0x31e6a0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x93de7300, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7dd3cc80, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x5b64e80, ftLastWriteTime.dwHighDateTime=0x1d6eb7f, nFileSizeHigh=0x0, nFileSizeLow=0x6e90)) returned 1 [0057.473] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e620) returned 1 [0057.473] MoveFileW (lpExistingFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.it_CH.txt" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.it_ch.txt"), lpNewFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.it_CH.txt" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.it_ch.txt")) returned 1 [0057.473] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.it_IT.txt", nBufferLength=0x105, lpBuffer=0x31e0a4, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.it_IT.txt", lpFilePart=0x0) returned 0x6b [0057.474] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e598) returned 1 [0057.474] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.it_IT.txt" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.it_it.txt"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x274 [0057.474] GetFileType (hFile=0x274) returned 0x1 [0057.474] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e594) returned 1 [0057.474] GetFileType (hFile=0x274) returned 0x1 [0057.474] GetFileSize (in: hFile=0x274, lpFileSizeHigh=0x31e6a0 | out: lpFileSizeHigh=0x31e6a0*=0x0) returned 0x6e88 [0057.474] ReadFile (in: hFile=0x274, lpBuffer=0x275f058, nNumberOfBytesToRead=0x6e88, lpNumberOfBytesRead=0x31e64c, lpOverlapped=0x0 | out: lpBuffer=0x275f058*, lpNumberOfBytesRead=0x31e64c*=0x6e88, lpOverlapped=0x0) returned 1 [0057.490] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.it_IT.txt", nBufferLength=0x105, lpBuffer=0x31e090, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.it_IT.txt", lpFilePart=0x0) returned 0x6b [0057.490] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e584) returned 1 [0057.490] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.it_IT.txt" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.it_it.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x274 [0057.491] GetFileType (hFile=0x274) returned 0x1 [0057.491] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e580) returned 1 [0057.491] GetFileType (hFile=0x274) returned 0x1 [0057.491] WriteFile (in: hFile=0x274, lpBuffer=0x27ce70c*, nNumberOfBytesToWrite=0x6e90, lpNumberOfBytesWritten=0x31e640, lpOverlapped=0x0 | out: lpBuffer=0x27ce70c*, lpNumberOfBytesWritten=0x31e640*=0x6e90, lpOverlapped=0x0) returned 1 [0057.492] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.it_IT.txt", nBufferLength=0x105, lpBuffer=0x31e1c4, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.it_IT.txt", lpFilePart=0x0) returned 0x6b [0057.492] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.it_IT.txt", nBufferLength=0x105, lpBuffer=0x31e1c4, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.it_IT.txt", lpFilePart=0x0) returned 0x6b [0057.492] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e624) returned 1 [0057.492] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.it_IT.txt" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.it_it.txt"), fInfoLevelId=0x0, lpFileInformation=0x31e6a0 | out: lpFileInformation=0x31e6a0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x950fa000, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7dd3cc80, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x5b8afe0, ftLastWriteTime.dwHighDateTime=0x1d6eb7f, nFileSizeHigh=0x0, nFileSizeLow=0x6e90)) returned 1 [0057.492] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e620) returned 1 [0057.493] MoveFileW (lpExistingFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.it_IT.txt" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.it_it.txt"), lpNewFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.it_IT.txt" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.it_it.txt")) returned 1 [0057.493] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.it_IT_PREEURO.txt", nBufferLength=0x105, lpBuffer=0x31e0a4, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.it_IT_PREEURO.txt", lpFilePart=0x0) returned 0x73 [0057.493] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e598) returned 1 [0057.493] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.it_IT_PREEURO.txt" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.it_it_preeuro.txt"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x274 [0057.493] GetFileType (hFile=0x274) returned 0x1 [0057.493] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e594) returned 1 [0057.493] GetFileType (hFile=0x274) returned 0x1 [0057.493] GetFileSize (in: hFile=0x274, lpFileSizeHigh=0x31e6a0 | out: lpFileSizeHigh=0x31e6a0*=0x0) returned 0x6e8e [0057.493] ReadFile (in: hFile=0x274, lpBuffer=0x27d5ac0, nNumberOfBytesToRead=0x6e8e, lpNumberOfBytesRead=0x31e64c, lpOverlapped=0x0 | out: lpBuffer=0x27d5ac0*, lpNumberOfBytesRead=0x31e64c*=0x6e8e, lpOverlapped=0x0) returned 1 [0057.509] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.it_IT_PREEURO.txt", nBufferLength=0x105, lpBuffer=0x31e090, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.it_IT_PREEURO.txt", lpFilePart=0x0) returned 0x73 [0057.509] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e584) returned 1 [0057.509] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.it_IT_PREEURO.txt" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.it_it_preeuro.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x274 [0057.510] GetFileType (hFile=0x274) returned 0x1 [0057.510] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e580) returned 1 [0057.510] GetFileType (hFile=0x274) returned 0x1 [0057.510] WriteFile (in: hFile=0x274, lpBuffer=0x2845178*, nNumberOfBytesToWrite=0x6e90, lpNumberOfBytesWritten=0x31e640, lpOverlapped=0x0 | out: lpBuffer=0x2845178*, lpNumberOfBytesWritten=0x31e640*=0x6e90, lpOverlapped=0x0) returned 1 [0057.511] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.it_IT_PREEURO.txt", nBufferLength=0x105, lpBuffer=0x31e1c4, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.it_IT_PREEURO.txt", lpFilePart=0x0) returned 0x73 [0057.511] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.it_IT_PREEURO.txt", nBufferLength=0x105, lpBuffer=0x31e1c4, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.it_IT_PREEURO.txt", lpFilePart=0x0) returned 0x73 [0057.511] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e624) returned 1 [0057.512] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.it_IT_PREEURO.txt" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.it_it_preeuro.txt"), fInfoLevelId=0x0, lpFileInformation=0x31e6a0 | out: lpFileInformation=0x31e6a0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x93de7300, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7dd3cc80, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x5bb1140, ftLastWriteTime.dwHighDateTime=0x1d6eb7f, nFileSizeHigh=0x0, nFileSizeLow=0x6e90)) returned 1 [0057.512] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e620) returned 1 [0057.512] MoveFileW (lpExistingFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.it_IT_PREEURO.txt" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.it_it_preeuro.txt"), lpNewFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.it_IT_PREEURO.txt" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.it_it_preeuro.txt")) returned 1 [0057.512] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.ja.txt", nBufferLength=0x105, lpBuffer=0x31e0a4, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.ja.txt", lpFilePart=0x0) returned 0x68 [0057.512] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e598) returned 1 [0057.512] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.ja.txt" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.ja.txt"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x274 [0057.512] GetFileType (hFile=0x274) returned 0x1 [0057.512] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e594) returned 1 [0057.512] GetFileType (hFile=0x274) returned 0x1 [0057.512] GetFileSize (in: hFile=0x274, lpFileSizeHigh=0x31e6a0 | out: lpFileSizeHigh=0x31e6a0*=0x0) returned 0x656a [0057.512] ReadFile (in: hFile=0x274, lpBuffer=0x284c540, nNumberOfBytesToRead=0x656a, lpNumberOfBytesRead=0x31e64c, lpOverlapped=0x0 | out: lpBuffer=0x284c540*, lpNumberOfBytesRead=0x31e64c*=0x656a, lpOverlapped=0x0) returned 1 [0057.530] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.ja.txt", nBufferLength=0x105, lpBuffer=0x31e090, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.ja.txt", lpFilePart=0x0) returned 0x68 [0057.530] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e584) returned 1 [0057.530] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.ja.txt" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.ja.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x274 [0057.531] GetFileType (hFile=0x274) returned 0x1 [0057.531] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e580) returned 1 [0057.531] GetFileType (hFile=0x274) returned 0x1 [0057.531] WriteFile (in: hFile=0x274, lpBuffer=0x26b84f4*, nNumberOfBytesToWrite=0x6570, lpNumberOfBytesWritten=0x31e640, lpOverlapped=0x0 | out: lpBuffer=0x26b84f4*, lpNumberOfBytesWritten=0x31e640*=0x6570, lpOverlapped=0x0) returned 1 [0057.532] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.ja.txt", nBufferLength=0x105, lpBuffer=0x31e1c4, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.ja.txt", lpFilePart=0x0) returned 0x68 [0057.532] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.ja.txt", nBufferLength=0x105, lpBuffer=0x31e1c4, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.ja.txt", lpFilePart=0x0) returned 0x68 [0057.532] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e624) returned 1 [0057.532] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.ja.txt" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.ja.txt"), fInfoLevelId=0x0, lpFileInformation=0x31e6a0 | out: lpFileInformation=0x31e6a0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x950fa000, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7dd3cc80, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x5bd72a0, ftLastWriteTime.dwHighDateTime=0x1d6eb7f, nFileSizeHigh=0x0, nFileSizeLow=0x6570)) returned 1 [0057.533] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e620) returned 1 [0057.533] MoveFileW (lpExistingFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.ja.txt" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.ja.txt"), lpNewFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.ja.txt" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.ja.txt")) returned 1 [0057.533] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.ja_JP.txt", nBufferLength=0x105, lpBuffer=0x31e0a4, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.ja_JP.txt", lpFilePart=0x0) returned 0x6b [0057.533] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e598) returned 1 [0057.533] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.ja_JP.txt" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.ja_jp.txt"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x274 [0057.534] GetFileType (hFile=0x274) returned 0x1 [0057.534] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e594) returned 1 [0057.534] GetFileType (hFile=0x274) returned 0x1 [0057.534] GetFileSize (in: hFile=0x274, lpFileSizeHigh=0x31e6a0 | out: lpFileSizeHigh=0x31e6a0*=0x0) returned 0x656a [0057.534] ReadFile (in: hFile=0x274, lpBuffer=0x26bef54, nNumberOfBytesToRead=0x656a, lpNumberOfBytesRead=0x31e64c, lpOverlapped=0x0 | out: lpBuffer=0x26bef54*, lpNumberOfBytesRead=0x31e64c*=0x656a, lpOverlapped=0x0) returned 1 [0057.550] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.ja_JP.txt", nBufferLength=0x105, lpBuffer=0x31e090, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.ja_JP.txt", lpFilePart=0x0) returned 0x6b [0057.550] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e584) returned 1 [0057.550] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.ja_JP.txt" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.ja_jp.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x274 [0057.551] GetFileType (hFile=0x274) returned 0x1 [0057.551] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e580) returned 1 [0057.551] GetFileType (hFile=0x274) returned 0x1 [0057.551] WriteFile (in: hFile=0x274, lpBuffer=0x272b9c8*, nNumberOfBytesToWrite=0x6570, lpNumberOfBytesWritten=0x31e640, lpOverlapped=0x0 | out: lpBuffer=0x272b9c8*, lpNumberOfBytesWritten=0x31e640*=0x6570, lpOverlapped=0x0) returned 1 [0057.552] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.ja_JP.txt", nBufferLength=0x105, lpBuffer=0x31e1c4, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.ja_JP.txt", lpFilePart=0x0) returned 0x6b [0057.552] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.ja_JP.txt", nBufferLength=0x105, lpBuffer=0x31e1c4, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.ja_JP.txt", lpFilePart=0x0) returned 0x6b [0057.552] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e624) returned 1 [0057.552] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.ja_JP.txt" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.ja_jp.txt"), fInfoLevelId=0x0, lpFileInformation=0x31e6a0 | out: lpFileInformation=0x31e6a0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x93de7300, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7dd16b20, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x5c23560, ftLastWriteTime.dwHighDateTime=0x1d6eb7f, nFileSizeHigh=0x0, nFileSizeLow=0x6570)) returned 1 [0057.553] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e620) returned 1 [0057.553] MoveFileW (lpExistingFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.ja_JP.txt" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.ja_jp.txt"), lpNewFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.ja_JP.txt" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.ja_jp.txt")) returned 1 [0057.553] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.ja_JP_TRADITIONAL.txt", nBufferLength=0x105, lpBuffer=0x31e0a4, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.ja_JP_TRADITIONAL.txt", lpFilePart=0x0) returned 0x77 [0057.553] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e598) returned 1 [0057.553] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.ja_JP_TRADITIONAL.txt" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.ja_jp_traditional.txt"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x274 [0057.553] GetFileType (hFile=0x274) returned 0x1 [0057.553] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e594) returned 1 [0057.553] GetFileType (hFile=0x274) returned 0x1 [0057.553] GetFileSize (in: hFile=0x274, lpFileSizeHigh=0x31e6a0 | out: lpFileSizeHigh=0x31e6a0*=0x0) returned 0x6594 [0057.553] ReadFile (in: hFile=0x274, lpBuffer=0x273246c, nNumberOfBytesToRead=0x6594, lpNumberOfBytesRead=0x31e64c, lpOverlapped=0x0 | out: lpBuffer=0x273246c*, lpNumberOfBytesRead=0x31e64c*=0x6594, lpOverlapped=0x0) returned 1 [0057.569] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.ja_JP_TRADITIONAL.txt", nBufferLength=0x105, lpBuffer=0x31e090, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.ja_JP_TRADITIONAL.txt", lpFilePart=0x0) returned 0x77 [0057.569] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e584) returned 1 [0057.569] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.ja_JP_TRADITIONAL.txt" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.ja_jp_traditional.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x274 [0057.570] GetFileType (hFile=0x274) returned 0x1 [0057.570] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e580) returned 1 [0057.570] GetFileType (hFile=0x274) returned 0x1 [0057.570] WriteFile (in: hFile=0x274, lpBuffer=0x279ee70*, nNumberOfBytesToWrite=0x65a0, lpNumberOfBytesWritten=0x31e640, lpOverlapped=0x0 | out: lpBuffer=0x279ee70*, lpNumberOfBytesWritten=0x31e640*=0x65a0, lpOverlapped=0x0) returned 1 [0057.571] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.ja_JP_TRADITIONAL.txt", nBufferLength=0x105, lpBuffer=0x31e1c4, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.ja_JP_TRADITIONAL.txt", lpFilePart=0x0) returned 0x77 [0057.571] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.ja_JP_TRADITIONAL.txt", nBufferLength=0x105, lpBuffer=0x31e1c4, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.ja_JP_TRADITIONAL.txt", lpFilePart=0x0) returned 0x77 [0057.571] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e624) returned 1 [0057.571] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.ja_JP_TRADITIONAL.txt" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.ja_jp_traditional.txt"), fInfoLevelId=0x0, lpFileInformation=0x31e6a0 | out: lpFileInformation=0x31e6a0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x93de7300, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7dd3cc80, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x5c496c0, ftLastWriteTime.dwHighDateTime=0x1d6eb7f, nFileSizeHigh=0x0, nFileSizeLow=0x65a0)) returned 1 [0057.571] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e620) returned 1 [0057.571] MoveFileW (lpExistingFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.ja_JP_TRADITIONAL.txt" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.ja_jp_traditional.txt"), lpNewFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.ja_JP_TRADITIONAL.txt" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.ja_jp_traditional.txt")) returned 1 [0057.572] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.ko.txt", nBufferLength=0x105, lpBuffer=0x31e0a4, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.ko.txt", lpFilePart=0x0) returned 0x68 [0057.572] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e598) returned 1 [0057.572] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.ko.txt" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.ko.txt"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x274 [0057.572] GetFileType (hFile=0x274) returned 0x1 [0057.572] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e594) returned 1 [0057.572] GetFileType (hFile=0x274) returned 0x1 [0057.572] GetFileSize (in: hFile=0x274, lpFileSizeHigh=0x31e6a0 | out: lpFileSizeHigh=0x31e6a0*=0x0) returned 0x626a [0057.572] ReadFile (in: hFile=0x274, lpBuffer=0x27a5968, nNumberOfBytesToRead=0x626a, lpNumberOfBytesRead=0x31e64c, lpOverlapped=0x0 | out: lpBuffer=0x27a5968*, lpNumberOfBytesRead=0x31e64c*=0x626a, lpOverlapped=0x0) returned 1 [0057.588] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.ko.txt", nBufferLength=0x105, lpBuffer=0x31e090, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.ko.txt", lpFilePart=0x0) returned 0x68 [0057.588] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e584) returned 1 [0057.588] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.ko.txt" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.ko.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x274 [0057.589] GetFileType (hFile=0x274) returned 0x1 [0057.589] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e580) returned 1 [0057.589] GetFileType (hFile=0x274) returned 0x1 [0057.589] WriteFile (in: hFile=0x274, lpBuffer=0x2811380*, nNumberOfBytesToWrite=0x6270, lpNumberOfBytesWritten=0x31e640, lpOverlapped=0x0 | out: lpBuffer=0x2811380*, lpNumberOfBytesWritten=0x31e640*=0x6270, lpOverlapped=0x0) returned 1 [0057.590] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.ko.txt", nBufferLength=0x105, lpBuffer=0x31e1c4, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.ko.txt", lpFilePart=0x0) returned 0x68 [0057.590] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.ko.txt", nBufferLength=0x105, lpBuffer=0x31e1c4, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.ko.txt", lpFilePart=0x0) returned 0x68 [0057.590] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e624) returned 1 [0057.590] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.ko.txt" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.ko.txt"), fInfoLevelId=0x0, lpFileInformation=0x31e6a0 | out: lpFileInformation=0x31e6a0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x93de7300, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7dd16b20, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x5c6f820, ftLastWriteTime.dwHighDateTime=0x1d6eb7f, nFileSizeHigh=0x0, nFileSizeLow=0x6270)) returned 1 [0057.590] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e620) returned 1 [0057.590] MoveFileW (lpExistingFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.ko.txt" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.ko.txt"), lpNewFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.ko.txt" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.ko.txt")) returned 1 [0057.591] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.ko_KR.txt", nBufferLength=0x105, lpBuffer=0x31e0a4, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.ko_KR.txt", lpFilePart=0x0) returned 0x6b [0057.591] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e598) returned 1 [0057.591] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.ko_KR.txt" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.ko_kr.txt"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x274 [0057.591] GetFileType (hFile=0x274) returned 0x1 [0057.591] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e594) returned 1 [0057.591] GetFileType (hFile=0x274) returned 0x1 [0057.591] GetFileSize (in: hFile=0x274, lpFileSizeHigh=0x31e6a0 | out: lpFileSizeHigh=0x31e6a0*=0x0) returned 0x626a [0057.591] ReadFile (in: hFile=0x274, lpBuffer=0x2817ae0, nNumberOfBytesToRead=0x626a, lpNumberOfBytesRead=0x31e64c, lpOverlapped=0x0 | out: lpBuffer=0x2817ae0*, lpNumberOfBytesRead=0x31e64c*=0x626a, lpOverlapped=0x0) returned 1 [0057.608] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.ko_KR.txt", nBufferLength=0x105, lpBuffer=0x31e090, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.ko_KR.txt", lpFilePart=0x0) returned 0x6b [0057.608] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e584) returned 1 [0057.608] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.ko_KR.txt" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.ko_kr.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x274 [0057.609] GetFileType (hFile=0x274) returned 0x1 [0057.609] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e580) returned 1 [0057.609] GetFileType (hFile=0x274) returned 0x1 [0057.609] WriteFile (in: hFile=0x274, lpBuffer=0x2689334*, nNumberOfBytesToWrite=0x6270, lpNumberOfBytesWritten=0x31e640, lpOverlapped=0x0 | out: lpBuffer=0x2689334*, lpNumberOfBytesWritten=0x31e640*=0x6270, lpOverlapped=0x0) returned 1 [0057.611] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.ko_KR.txt", nBufferLength=0x105, lpBuffer=0x31e1c4, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.ko_KR.txt", lpFilePart=0x0) returned 0x6b [0057.611] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.ko_KR.txt", nBufferLength=0x105, lpBuffer=0x31e1c4, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.ko_KR.txt", lpFilePart=0x0) returned 0x6b [0057.611] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e624) returned 1 [0057.614] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.ko_KR.txt" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.ko_kr.txt"), fInfoLevelId=0x0, lpFileInformation=0x31e6a0 | out: lpFileInformation=0x31e6a0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x950fa000, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7dd16b20, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x5c95980, ftLastWriteTime.dwHighDateTime=0x1d6eb7f, nFileSizeHigh=0x0, nFileSizeLow=0x6270)) returned 1 [0057.614] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e620) returned 1 [0057.614] MoveFileW (lpExistingFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.ko_KR.txt" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.ko_kr.txt"), lpNewFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.ko_KR.txt" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.ko_kr.txt")) returned 1 [0057.614] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.lt.txt", nBufferLength=0x105, lpBuffer=0x31e0a4, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.lt.txt", lpFilePart=0x0) returned 0x68 [0057.614] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e598) returned 1 [0057.614] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.lt.txt" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.lt.txt"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x274 [0057.615] GetFileType (hFile=0x274) returned 0x1 [0057.615] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e594) returned 1 [0057.615] GetFileType (hFile=0x274) returned 0x1 [0057.615] GetFileSize (in: hFile=0x274, lpFileSizeHigh=0x31e6a0 | out: lpFileSizeHigh=0x31e6a0*=0x0) returned 0x6bea [0057.615] ReadFile (in: hFile=0x274, lpBuffer=0x268fa9c, nNumberOfBytesToRead=0x6bea, lpNumberOfBytesRead=0x31e64c, lpOverlapped=0x0 | out: lpBuffer=0x268fa9c*, lpNumberOfBytesRead=0x31e64c*=0x6bea, lpOverlapped=0x0) returned 1 [0057.631] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.lt.txt", nBufferLength=0x105, lpBuffer=0x31e090, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.lt.txt", lpFilePart=0x0) returned 0x68 [0057.631] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e584) returned 1 [0057.631] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.lt.txt" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.lt.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x274 [0057.632] GetFileType (hFile=0x274) returned 0x1 [0057.632] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e580) returned 1 [0057.632] GetFileType (hFile=0x274) returned 0x1 [0057.632] WriteFile (in: hFile=0x274, lpBuffer=0x26fe590*, nNumberOfBytesToWrite=0x6bf0, lpNumberOfBytesWritten=0x31e640, lpOverlapped=0x0 | out: lpBuffer=0x26fe590*, lpNumberOfBytesWritten=0x31e640*=0x6bf0, lpOverlapped=0x0) returned 1 [0057.633] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.lt.txt", nBufferLength=0x105, lpBuffer=0x31e1c4, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.lt.txt", lpFilePart=0x0) returned 0x68 [0057.633] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.lt.txt", nBufferLength=0x105, lpBuffer=0x31e1c4, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.lt.txt", lpFilePart=0x0) returned 0x68 [0057.633] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e624) returned 1 [0057.633] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.lt.txt" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.lt.txt"), fInfoLevelId=0x0, lpFileInformation=0x31e6a0 | out: lpFileInformation=0x31e6a0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x950fa000, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7f2f5540, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x5ce1c40, ftLastWriteTime.dwHighDateTime=0x1d6eb7f, nFileSizeHigh=0x0, nFileSizeLow=0x6bf0)) returned 1 [0057.633] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e620) returned 1 [0057.633] MoveFileW (lpExistingFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.lt.txt" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.lt.txt"), lpNewFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.lt.txt" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.lt.txt")) returned 1 [0057.633] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.lt_LT.txt", nBufferLength=0x105, lpBuffer=0x31e0a4, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.lt_LT.txt", lpFilePart=0x0) returned 0x6b [0057.633] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e598) returned 1 [0057.633] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.lt_LT.txt" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.lt_lt.txt"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x274 [0057.634] GetFileType (hFile=0x274) returned 0x1 [0057.634] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e594) returned 1 [0057.634] GetFileType (hFile=0x274) returned 0x1 [0057.634] GetFileSize (in: hFile=0x274, lpFileSizeHigh=0x31e6a0 | out: lpFileSizeHigh=0x31e6a0*=0x0) returned 0x6bea [0057.634] ReadFile (in: hFile=0x274, lpBuffer=0x2705670, nNumberOfBytesToRead=0x6bea, lpNumberOfBytesRead=0x31e64c, lpOverlapped=0x0 | out: lpBuffer=0x2705670*, lpNumberOfBytesRead=0x31e64c*=0x6bea, lpOverlapped=0x0) returned 1 [0057.649] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.lt_LT.txt", nBufferLength=0x105, lpBuffer=0x31e090, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.lt_LT.txt", lpFilePart=0x0) returned 0x6b [0057.649] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e584) returned 1 [0057.649] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.lt_LT.txt" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.lt_lt.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x274 [0057.650] GetFileType (hFile=0x274) returned 0x1 [0057.650] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e580) returned 1 [0057.650] GetFileType (hFile=0x274) returned 0x1 [0057.650] WriteFile (in: hFile=0x274, lpBuffer=0x2774008*, nNumberOfBytesToWrite=0x6bf0, lpNumberOfBytesWritten=0x31e640, lpOverlapped=0x0 | out: lpBuffer=0x2774008*, lpNumberOfBytesWritten=0x31e640*=0x6bf0, lpOverlapped=0x0) returned 1 [0057.651] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.lt_LT.txt", nBufferLength=0x105, lpBuffer=0x31e1c4, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.lt_LT.txt", lpFilePart=0x0) returned 0x6b [0057.651] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.lt_LT.txt", nBufferLength=0x105, lpBuffer=0x31e1c4, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.lt_LT.txt", lpFilePart=0x0) returned 0x6b [0057.652] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e624) returned 1 [0057.652] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.lt_LT.txt" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.lt_lt.txt"), fInfoLevelId=0x0, lpFileInformation=0x31e6a0 | out: lpFileInformation=0x31e6a0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x93de7300, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7f2f5540, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x5d07da0, ftLastWriteTime.dwHighDateTime=0x1d6eb7f, nFileSizeHigh=0x0, nFileSizeLow=0x6bf0)) returned 1 [0057.652] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e620) returned 1 [0057.652] MoveFileW (lpExistingFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.lt_LT.txt" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.lt_lt.txt"), lpNewFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.lt_LT.txt" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.lt_lt.txt")) returned 1 [0057.652] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.lv.txt", nBufferLength=0x105, lpBuffer=0x31e0a4, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.lv.txt", lpFilePart=0x0) returned 0x68 [0057.652] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e598) returned 1 [0057.652] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.lv.txt" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.lv.txt"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x274 [0057.652] GetFileType (hFile=0x274) returned 0x1 [0057.652] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e594) returned 1 [0057.652] GetFileType (hFile=0x274) returned 0x1 [0057.652] GetFileSize (in: hFile=0x274, lpFileSizeHigh=0x31e6a0 | out: lpFileSizeHigh=0x31e6a0*=0x0) returned 0x6aae [0057.652] ReadFile (in: hFile=0x274, lpBuffer=0x277b0f0, nNumberOfBytesToRead=0x6aae, lpNumberOfBytesRead=0x31e64c, lpOverlapped=0x0 | out: lpBuffer=0x277b0f0*, lpNumberOfBytesRead=0x31e64c*=0x6aae, lpOverlapped=0x0) returned 1 [0057.669] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.lv.txt", nBufferLength=0x105, lpBuffer=0x31e090, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.lv.txt", lpFilePart=0x0) returned 0x68 [0057.669] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e584) returned 1 [0057.669] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.lv.txt" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.lv.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x274 [0057.670] GetFileType (hFile=0x274) returned 0x1 [0057.670] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e580) returned 1 [0057.670] GetFileType (hFile=0x274) returned 0x1 [0057.670] WriteFile (in: hFile=0x274, lpBuffer=0x27e9448*, nNumberOfBytesToWrite=0x6ab0, lpNumberOfBytesWritten=0x31e640, lpOverlapped=0x0 | out: lpBuffer=0x27e9448*, lpNumberOfBytesWritten=0x31e640*=0x6ab0, lpOverlapped=0x0) returned 1 [0057.671] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.lv.txt", nBufferLength=0x105, lpBuffer=0x31e1c4, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.lv.txt", lpFilePart=0x0) returned 0x68 [0057.671] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.lv.txt", nBufferLength=0x105, lpBuffer=0x31e1c4, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.lv.txt", lpFilePart=0x0) returned 0x68 [0057.671] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e624) returned 1 [0057.671] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.lv.txt" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.lv.txt"), fInfoLevelId=0x0, lpFileInformation=0x31e6a0 | out: lpFileInformation=0x31e6a0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x93de7300, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7f31b6a0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x5d2df00, ftLastWriteTime.dwHighDateTime=0x1d6eb7f, nFileSizeHigh=0x0, nFileSizeLow=0x6ab0)) returned 1 [0057.672] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e620) returned 1 [0057.672] MoveFileW (lpExistingFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.lv.txt" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.lv.txt"), lpNewFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.lv.txt" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.lv.txt")) returned 1 [0057.672] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.lv_LV.txt", nBufferLength=0x105, lpBuffer=0x31e0a4, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.lv_LV.txt", lpFilePart=0x0) returned 0x6b [0057.672] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e598) returned 1 [0057.672] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.lv_LV.txt" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.lv_lv.txt"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x274 [0057.672] GetFileType (hFile=0x274) returned 0x1 [0057.672] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e594) returned 1 [0057.672] GetFileType (hFile=0x274) returned 0x1 [0057.672] GetFileSize (in: hFile=0x274, lpFileSizeHigh=0x31e6a0 | out: lpFileSizeHigh=0x31e6a0*=0x0) returned 0x6aae [0057.672] ReadFile (in: hFile=0x274, lpBuffer=0x27f03e8, nNumberOfBytesToRead=0x6aae, lpNumberOfBytesRead=0x31e64c, lpOverlapped=0x0 | out: lpBuffer=0x27f03e8*, lpNumberOfBytesRead=0x31e64c*=0x6aae, lpOverlapped=0x0) returned 1 [0057.688] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.lv_LV.txt", nBufferLength=0x105, lpBuffer=0x31e090, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.lv_LV.txt", lpFilePart=0x0) returned 0x6b [0057.688] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e584) returned 1 [0057.688] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.lv_LV.txt" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.lv_lv.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x274 [0057.689] GetFileType (hFile=0x274) returned 0x1 [0057.689] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e580) returned 1 [0057.689] GetFileType (hFile=0x274) returned 0x1 [0057.689] WriteFile (in: hFile=0x274, lpBuffer=0x285e740*, nNumberOfBytesToWrite=0x6ab0, lpNumberOfBytesWritten=0x31e640, lpOverlapped=0x0 | out: lpBuffer=0x285e740*, lpNumberOfBytesWritten=0x31e640*=0x6ab0, lpOverlapped=0x0) returned 1 [0057.690] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.lv_LV.txt", nBufferLength=0x105, lpBuffer=0x31e1c4, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.lv_LV.txt", lpFilePart=0x0) returned 0x6b [0057.690] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.lv_LV.txt", nBufferLength=0x105, lpBuffer=0x31e1c4, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.lv_LV.txt", lpFilePart=0x0) returned 0x6b [0057.690] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e624) returned 1 [0057.690] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.lv_LV.txt" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.lv_lv.txt"), fInfoLevelId=0x0, lpFileInformation=0x31e6a0 | out: lpFileInformation=0x31e6a0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x93de7300, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7f31b6a0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x5d7a1c0, ftLastWriteTime.dwHighDateTime=0x1d6eb7f, nFileSizeHigh=0x0, nFileSizeLow=0x6ab0)) returned 1 [0057.690] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e620) returned 1 [0057.690] MoveFileW (lpExistingFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.lv_LV.txt" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.lv_lv.txt"), lpNewFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.lv_LV.txt" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.lv_lv.txt")) returned 1 [0057.691] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.nb.txt", nBufferLength=0x105, lpBuffer=0x31e0a4, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.nb.txt", lpFilePart=0x0) returned 0x68 [0057.691] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e598) returned 1 [0057.691] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.nb.txt" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.nb.txt"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x274 [0057.691] GetFileType (hFile=0x274) returned 0x1 [0057.691] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e594) returned 1 [0057.691] GetFileType (hFile=0x274) returned 0x1 [0057.691] GetFileSize (in: hFile=0x274, lpFileSizeHigh=0x31e6a0 | out: lpFileSizeHigh=0x31e6a0*=0x0) returned 0x6df2 [0057.691] ReadFile (in: hFile=0x274, lpBuffer=0x28656e8, nNumberOfBytesToRead=0x6df2, lpNumberOfBytesRead=0x31e64c, lpOverlapped=0x0 | out: lpBuffer=0x28656e8*, lpNumberOfBytesRead=0x31e64c*=0x6df2, lpOverlapped=0x0) returned 1 [0057.708] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.nb.txt", nBufferLength=0x105, lpBuffer=0x31e090, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.nb.txt", lpFilePart=0x0) returned 0x68 [0057.708] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e584) returned 1 [0057.709] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.nb.txt" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.nb.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x274 [0057.709] GetFileType (hFile=0x274) returned 0x1 [0057.710] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e580) returned 1 [0057.710] GetFileType (hFile=0x274) returned 0x1 [0057.710] WriteFile (in: hFile=0x274, lpBuffer=0x26c8e38*, nNumberOfBytesToWrite=0x6e00, lpNumberOfBytesWritten=0x31e640, lpOverlapped=0x0 | out: lpBuffer=0x26c8e38*, lpNumberOfBytesWritten=0x31e640*=0x6e00, lpOverlapped=0x0) returned 1 [0057.711] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.nb.txt", nBufferLength=0x105, lpBuffer=0x31e1c4, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.nb.txt", lpFilePart=0x0) returned 0x68 [0057.711] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.nb.txt", nBufferLength=0x105, lpBuffer=0x31e1c4, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.nb.txt", lpFilePart=0x0) returned 0x68 [0057.711] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e624) returned 1 [0057.711] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.nb.txt" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.nb.txt"), fInfoLevelId=0x0, lpFileInformation=0x31e6a0 | out: lpFileInformation=0x31e6a0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x950fa000, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7f3b3c20, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x5da0320, ftLastWriteTime.dwHighDateTime=0x1d6eb7f, nFileSizeHigh=0x0, nFileSizeLow=0x6e00)) returned 1 [0057.711] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e620) returned 1 [0057.711] MoveFileW (lpExistingFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.nb.txt" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.nb.txt"), lpNewFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.nb.txt" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.nb.txt")) returned 1 [0057.711] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.nb_NO.txt", nBufferLength=0x105, lpBuffer=0x31e0a4, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.nb_NO.txt", lpFilePart=0x0) returned 0x6b [0057.711] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e598) returned 1 [0057.711] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.nb_NO.txt" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.nb_no.txt"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x274 [0057.712] GetFileType (hFile=0x274) returned 0x1 [0057.712] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e594) returned 1 [0057.712] GetFileType (hFile=0x274) returned 0x1 [0057.712] GetFileSize (in: hFile=0x274, lpFileSizeHigh=0x31e6a0 | out: lpFileSizeHigh=0x31e6a0*=0x0) returned 0x6df2 [0057.712] ReadFile (in: hFile=0x274, lpBuffer=0x26d0128, nNumberOfBytesToRead=0x6df2, lpNumberOfBytesRead=0x31e64c, lpOverlapped=0x0 | out: lpBuffer=0x26d0128*, lpNumberOfBytesRead=0x31e64c*=0x6df2, lpOverlapped=0x0) returned 1 [0057.727] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.nb_NO.txt", nBufferLength=0x105, lpBuffer=0x31e090, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.nb_NO.txt", lpFilePart=0x0) returned 0x6b [0057.727] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e584) returned 1 [0057.727] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.nb_NO.txt" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.nb_no.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x274 [0057.728] GetFileType (hFile=0x274) returned 0x1 [0057.728] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e580) returned 1 [0057.728] GetFileType (hFile=0x274) returned 0x1 [0057.728] WriteFile (in: hFile=0x274, lpBuffer=0x273f66c*, nNumberOfBytesToWrite=0x6e00, lpNumberOfBytesWritten=0x31e640, lpOverlapped=0x0 | out: lpBuffer=0x273f66c*, lpNumberOfBytesWritten=0x31e640*=0x6e00, lpOverlapped=0x0) returned 1 [0057.730] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.nb_NO.txt", nBufferLength=0x105, lpBuffer=0x31e1c4, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.nb_NO.txt", lpFilePart=0x0) returned 0x6b [0057.730] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.nb_NO.txt", nBufferLength=0x105, lpBuffer=0x31e1c4, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.nb_NO.txt", lpFilePart=0x0) returned 0x6b [0057.730] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e624) returned 1 [0057.730] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.nb_NO.txt" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.nb_no.txt"), fInfoLevelId=0x0, lpFileInformation=0x31e6a0 | out: lpFileInformation=0x31e6a0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x93de7300, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7f3b3c20, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x5dc6480, ftLastWriteTime.dwHighDateTime=0x1d6eb7f, nFileSizeHigh=0x0, nFileSizeLow=0x6e00)) returned 1 [0057.730] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e620) returned 1 [0057.730] MoveFileW (lpExistingFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.nb_NO.txt" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.nb_no.txt"), lpNewFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.nb_NO.txt" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.nb_no.txt")) returned 1 [0057.730] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.nl.txt", nBufferLength=0x105, lpBuffer=0x31e0a4, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.nl.txt", lpFilePart=0x0) returned 0x68 [0057.730] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e598) returned 1 [0057.730] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.nl.txt" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.nl.txt"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x274 [0057.731] GetFileType (hFile=0x274) returned 0x1 [0057.731] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e594) returned 1 [0057.731] GetFileType (hFile=0x274) returned 0x1 [0057.731] GetFileSize (in: hFile=0x274, lpFileSizeHigh=0x31e6a0 | out: lpFileSizeHigh=0x31e6a0*=0x0) returned 0x6dc6 [0057.731] ReadFile (in: hFile=0x274, lpBuffer=0x2746964, nNumberOfBytesToRead=0x6dc6, lpNumberOfBytesRead=0x31e64c, lpOverlapped=0x0 | out: lpBuffer=0x2746964*, lpNumberOfBytesRead=0x31e64c*=0x6dc6, lpOverlapped=0x0) returned 1 [0057.747] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.nl.txt", nBufferLength=0x105, lpBuffer=0x31e090, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.nl.txt", lpFilePart=0x0) returned 0x68 [0057.747] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e584) returned 1 [0057.747] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.nl.txt" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.nl.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x274 [0057.748] GetFileType (hFile=0x274) returned 0x1 [0057.748] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e580) returned 1 [0057.748] GetFileType (hFile=0x274) returned 0x1 [0057.748] WriteFile (in: hFile=0x274, lpBuffer=0x27b5c5c*, nNumberOfBytesToWrite=0x6dd0, lpNumberOfBytesWritten=0x31e640, lpOverlapped=0x0 | out: lpBuffer=0x27b5c5c*, lpNumberOfBytesWritten=0x31e640*=0x6dd0, lpOverlapped=0x0) returned 1 [0057.749] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.nl.txt", nBufferLength=0x105, lpBuffer=0x31e1c4, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.nl.txt", lpFilePart=0x0) returned 0x68 [0057.750] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.nl.txt", nBufferLength=0x105, lpBuffer=0x31e1c4, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.nl.txt", lpFilePart=0x0) returned 0x68 [0057.750] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e624) returned 1 [0057.750] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.nl.txt" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.nl.txt"), fInfoLevelId=0x0, lpFileInformation=0x31e6a0 | out: lpFileInformation=0x31e6a0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x93de7300, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7dd16b20, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x5dec5e0, ftLastWriteTime.dwHighDateTime=0x1d6eb7f, nFileSizeHigh=0x0, nFileSizeLow=0x6dd0)) returned 1 [0057.750] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e620) returned 1 [0057.750] MoveFileW (lpExistingFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.nl.txt" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.nl.txt"), lpNewFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.nl.txt" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.nl.txt")) returned 1 [0057.750] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.nl_BE.txt", nBufferLength=0x105, lpBuffer=0x31e0a4, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.nl_BE.txt", lpFilePart=0x0) returned 0x6b [0057.750] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e598) returned 1 [0057.750] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.nl_BE.txt" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.nl_be.txt"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x274 [0057.750] GetFileType (hFile=0x274) returned 0x1 [0057.750] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e594) returned 1 [0057.750] GetFileType (hFile=0x274) returned 0x1 [0057.750] GetFileSize (in: hFile=0x274, lpFileSizeHigh=0x31e6a0 | out: lpFileSizeHigh=0x31e6a0*=0x0) returned 0x6dd6 [0057.751] ReadFile (in: hFile=0x274, lpBuffer=0x27bcf1c, nNumberOfBytesToRead=0x6dd6, lpNumberOfBytesRead=0x31e64c, lpOverlapped=0x0 | out: lpBuffer=0x27bcf1c*, lpNumberOfBytesRead=0x31e64c*=0x6dd6, lpOverlapped=0x0) returned 1 [0057.766] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.nl_BE.txt", nBufferLength=0x105, lpBuffer=0x31e090, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.nl_BE.txt", lpFilePart=0x0) returned 0x6b [0057.766] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e584) returned 1 [0057.766] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.nl_BE.txt" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.nl_be.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x274 [0057.767] GetFileType (hFile=0x274) returned 0x1 [0057.767] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e580) returned 1 [0057.767] GetFileType (hFile=0x274) returned 0x1 [0057.767] WriteFile (in: hFile=0x274, lpBuffer=0x282c264*, nNumberOfBytesToWrite=0x6de0, lpNumberOfBytesWritten=0x31e640, lpOverlapped=0x0 | out: lpBuffer=0x282c264*, lpNumberOfBytesWritten=0x31e640*=0x6de0, lpOverlapped=0x0) returned 1 [0057.768] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.nl_BE.txt", nBufferLength=0x105, lpBuffer=0x31e1c4, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.nl_BE.txt", lpFilePart=0x0) returned 0x6b [0057.768] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.nl_BE.txt", nBufferLength=0x105, lpBuffer=0x31e1c4, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.nl_BE.txt", lpFilePart=0x0) returned 0x6b [0057.768] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e624) returned 1 [0057.768] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.nl_BE.txt" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.nl_be.txt"), fInfoLevelId=0x0, lpFileInformation=0x31e6a0 | out: lpFileInformation=0x31e6a0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x950fa000, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7dd16b20, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x5e388a0, ftLastWriteTime.dwHighDateTime=0x1d6eb7f, nFileSizeHigh=0x0, nFileSizeLow=0x6de0)) returned 1 [0057.769] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e620) returned 1 [0057.769] MoveFileW (lpExistingFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.nl_BE.txt" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.nl_be.txt"), lpNewFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.nl_BE.txt" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.nl_be.txt")) returned 1 [0057.769] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.nl_BE_PREEURO.txt", nBufferLength=0x105, lpBuffer=0x31e0a4, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.nl_BE_PREEURO.txt", lpFilePart=0x0) returned 0x73 [0057.769] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e598) returned 1 [0057.769] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.nl_BE_PREEURO.txt" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.nl_be_preeuro.txt"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x274 [0057.769] GetFileType (hFile=0x274) returned 0x1 [0057.769] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e594) returned 1 [0057.769] GetFileType (hFile=0x274) returned 0x1 [0057.769] GetFileSize (in: hFile=0x274, lpFileSizeHigh=0x31e6a0 | out: lpFileSizeHigh=0x31e6a0*=0x0) returned 0x6dd6 [0057.769] ReadFile (in: hFile=0x274, lpBuffer=0x2833568, nNumberOfBytesToRead=0x6dd6, lpNumberOfBytesRead=0x31e64c, lpOverlapped=0x0 | out: lpBuffer=0x2833568*, lpNumberOfBytesRead=0x31e64c*=0x6dd6, lpOverlapped=0x0) returned 1 [0057.786] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.nl_BE_PREEURO.txt", nBufferLength=0x105, lpBuffer=0x31e090, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.nl_BE_PREEURO.txt", lpFilePart=0x0) returned 0x73 [0057.786] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e584) returned 1 [0057.786] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.nl_BE_PREEURO.txt" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.nl_be_preeuro.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x274 [0057.787] GetFileType (hFile=0x274) returned 0x1 [0057.787] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e580) returned 1 [0057.787] GetFileType (hFile=0x274) returned 0x1 [0057.787] WriteFile (in: hFile=0x274, lpBuffer=0x26a28b0*, nNumberOfBytesToWrite=0x6de0, lpNumberOfBytesWritten=0x31e640, lpOverlapped=0x0 | out: lpBuffer=0x26a28b0*, lpNumberOfBytesWritten=0x31e640*=0x6de0, lpOverlapped=0x0) returned 1 [0057.789] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.nl_BE_PREEURO.txt", nBufferLength=0x105, lpBuffer=0x31e1c4, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.nl_BE_PREEURO.txt", lpFilePart=0x0) returned 0x73 [0057.789] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.nl_BE_PREEURO.txt", nBufferLength=0x105, lpBuffer=0x31e1c4, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.nl_BE_PREEURO.txt", lpFilePart=0x0) returned 0x73 [0057.789] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e624) returned 1 [0057.789] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.nl_BE_PREEURO.txt" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.nl_be_preeuro.txt"), fInfoLevelId=0x0, lpFileInformation=0x31e6a0 | out: lpFileInformation=0x31e6a0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x93de7300, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7dd16b20, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x5e5ea00, ftLastWriteTime.dwHighDateTime=0x1d6eb7f, nFileSizeHigh=0x0, nFileSizeLow=0x6de0)) returned 1 [0057.789] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e620) returned 1 [0057.789] MoveFileW (lpExistingFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.nl_BE_PREEURO.txt" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.nl_be_preeuro.txt"), lpNewFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.nl_BE_PREEURO.txt" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.nl_be_preeuro.txt")) returned 1 [0057.789] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.nl_NL.txt", nBufferLength=0x105, lpBuffer=0x31e0a4, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.nl_NL.txt", lpFilePart=0x0) returned 0x6b [0057.789] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e598) returned 1 [0057.789] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.nl_NL.txt" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.nl_nl.txt"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x274 [0057.789] GetFileType (hFile=0x274) returned 0x1 [0057.789] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e594) returned 1 [0057.789] GetFileType (hFile=0x274) returned 0x1 [0057.789] GetFileSize (in: hFile=0x274, lpFileSizeHigh=0x31e6a0 | out: lpFileSizeHigh=0x31e6a0*=0x0) returned 0x6dc6 [0057.790] ReadFile (in: hFile=0x274, lpBuffer=0x26a9bd4, nNumberOfBytesToRead=0x6dc6, lpNumberOfBytesRead=0x31e64c, lpOverlapped=0x0 | out: lpBuffer=0x26a9bd4*, lpNumberOfBytesRead=0x31e64c*=0x6dc6, lpOverlapped=0x0) returned 1 [0057.812] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.nl_NL.txt", nBufferLength=0x105, lpBuffer=0x31e090, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.nl_NL.txt", lpFilePart=0x0) returned 0x6b [0057.812] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e584) returned 1 [0057.812] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.nl_NL.txt" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.nl_nl.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x274 [0057.813] GetFileType (hFile=0x274) returned 0x1 [0057.813] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e580) returned 1 [0057.813] GetFileType (hFile=0x274) returned 0x1 [0057.814] WriteFile (in: hFile=0x274, lpBuffer=0x2719028*, nNumberOfBytesToWrite=0x6dd0, lpNumberOfBytesWritten=0x31e640, lpOverlapped=0x0 | out: lpBuffer=0x2719028*, lpNumberOfBytesWritten=0x31e640*=0x6dd0, lpOverlapped=0x0) returned 1 [0057.815] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.nl_NL.txt", nBufferLength=0x105, lpBuffer=0x31e1c4, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.nl_NL.txt", lpFilePart=0x0) returned 0x6b [0057.815] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.nl_NL.txt", nBufferLength=0x105, lpBuffer=0x31e1c4, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.nl_NL.txt", lpFilePart=0x0) returned 0x6b [0057.815] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e624) returned 1 [0057.815] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.nl_NL.txt" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.nl_nl.txt"), fInfoLevelId=0x0, lpFileInformation=0x31e6a0 | out: lpFileInformation=0x31e6a0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x93de7300, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7dd16b20, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x5eaacc0, ftLastWriteTime.dwHighDateTime=0x1d6eb7f, nFileSizeHigh=0x0, nFileSizeLow=0x6dd0)) returned 1 [0057.815] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e620) returned 1 [0057.815] MoveFileW (lpExistingFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.nl_NL.txt" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.nl_nl.txt"), lpNewFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.nl_NL.txt" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.nl_nl.txt")) returned 1 [0057.815] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.nl_NL_PREEURO.txt", nBufferLength=0x105, lpBuffer=0x31e0a4, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.nl_NL_PREEURO.txt", lpFilePart=0x0) returned 0x73 [0057.815] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e598) returned 1 [0057.815] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.nl_NL_PREEURO.txt" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.nl_nl_preeuro.txt"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x274 [0057.816] GetFileType (hFile=0x274) returned 0x1 [0057.816] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e594) returned 1 [0057.816] GetFileType (hFile=0x274) returned 0x1 [0057.816] GetFileSize (in: hFile=0x274, lpFileSizeHigh=0x31e6a0 | out: lpFileSizeHigh=0x31e6a0*=0x0) returned 0x6dd6 [0057.816] ReadFile (in: hFile=0x274, lpBuffer=0x272031c, nNumberOfBytesToRead=0x6dd6, lpNumberOfBytesRead=0x31e64c, lpOverlapped=0x0 | out: lpBuffer=0x272031c*, lpNumberOfBytesRead=0x31e64c*=0x6dd6, lpOverlapped=0x0) returned 1 [0057.831] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.nl_NL_PREEURO.txt", nBufferLength=0x105, lpBuffer=0x31e090, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.nl_NL_PREEURO.txt", lpFilePart=0x0) returned 0x73 [0057.831] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e584) returned 1 [0057.831] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.nl_NL_PREEURO.txt" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.nl_nl_preeuro.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x274 [0057.832] GetFileType (hFile=0x274) returned 0x1 [0057.832] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e580) returned 1 [0057.832] GetFileType (hFile=0x274) returned 0x1 [0057.832] WriteFile (in: hFile=0x274, lpBuffer=0x278f664*, nNumberOfBytesToWrite=0x6de0, lpNumberOfBytesWritten=0x31e640, lpOverlapped=0x0 | out: lpBuffer=0x278f664*, lpNumberOfBytesWritten=0x31e640*=0x6de0, lpOverlapped=0x0) returned 1 [0057.833] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.nl_NL_PREEURO.txt", nBufferLength=0x105, lpBuffer=0x31e1c4, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.nl_NL_PREEURO.txt", lpFilePart=0x0) returned 0x73 [0057.833] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.nl_NL_PREEURO.txt", nBufferLength=0x105, lpBuffer=0x31e1c4, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.nl_NL_PREEURO.txt", lpFilePart=0x0) returned 0x73 [0057.833] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e624) returned 1 [0057.833] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.nl_NL_PREEURO.txt" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.nl_nl_preeuro.txt"), fInfoLevelId=0x0, lpFileInformation=0x31e6a0 | out: lpFileInformation=0x31e6a0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x93de7300, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7dd16b20, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x5ed0e20, ftLastWriteTime.dwHighDateTime=0x1d6eb7f, nFileSizeHigh=0x0, nFileSizeLow=0x6de0)) returned 1 [0057.834] MoveFileW (lpExistingFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.nl_NL_PREEURO.txt" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.nl_nl_preeuro.txt"), lpNewFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.nl_NL_PREEURO.txt" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.nl_nl_preeuro.txt")) returned 1 [0057.834] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.nn_NO.txt", nBufferLength=0x105, lpBuffer=0x31e0a4, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.nn_NO.txt", lpFilePart=0x0) returned 0x6b [0057.834] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.nn_NO.txt" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.nn_no.txt"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x274 [0057.834] GetFileType (hFile=0x274) returned 0x1 [0057.834] GetFileType (hFile=0x274) returned 0x1 [0057.834] GetFileSize (in: hFile=0x274, lpFileSizeHigh=0x31e6a0 | out: lpFileSizeHigh=0x31e6a0*=0x0) returned 0x6df2 [0057.834] ReadFile (in: hFile=0x274, lpBuffer=0x2796988, nNumberOfBytesToRead=0x6df2, lpNumberOfBytesRead=0x31e64c, lpOverlapped=0x0 | out: lpBuffer=0x2796988*, lpNumberOfBytesRead=0x31e64c*=0x6df2, lpOverlapped=0x0) returned 1 [0057.850] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.nn_NO.txt", nBufferLength=0x105, lpBuffer=0x31e090, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.nn_NO.txt", lpFilePart=0x0) returned 0x6b [0057.850] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.nn_NO.txt" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.nn_no.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x274 [0057.851] GetFileType (hFile=0x274) returned 0x1 [0057.851] GetFileType (hFile=0x274) returned 0x1 [0057.851] WriteFile (in: hFile=0x274, lpBuffer=0x2805d70*, nNumberOfBytesToWrite=0x6e00, lpNumberOfBytesWritten=0x31e640, lpOverlapped=0x0 | out: lpBuffer=0x2805d70*, lpNumberOfBytesWritten=0x31e640*=0x6e00, lpOverlapped=0x0) returned 1 [0057.853] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.nn_NO.txt", nBufferLength=0x105, lpBuffer=0x31e1c4, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.nn_NO.txt", lpFilePart=0x0) returned 0x6b [0057.853] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.nn_NO.txt", nBufferLength=0x105, lpBuffer=0x31e1c4, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.nn_NO.txt", lpFilePart=0x0) returned 0x6b [0057.853] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.nn_NO.txt" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.nn_no.txt"), fInfoLevelId=0x0, lpFileInformation=0x31e6a0 | out: lpFileInformation=0x31e6a0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x93de7300, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7f38dac0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x5ef6f80, ftLastWriteTime.dwHighDateTime=0x1d6eb7f, nFileSizeHigh=0x0, nFileSizeLow=0x6e00)) returned 1 [0057.853] MoveFileW (lpExistingFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.nn_NO.txt" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.nn_no.txt"), lpNewFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.nn_NO.txt" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.nn_no.txt")) returned 1 [0057.853] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.pl.txt", nBufferLength=0x105, lpBuffer=0x31e0a4, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.pl.txt", lpFilePart=0x0) returned 0x68 [0057.853] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.pl.txt" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.pl.txt"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x274 [0057.853] GetFileType (hFile=0x274) returned 0x1 [0057.853] GetFileType (hFile=0x274) returned 0x1 [0057.853] GetFileSize (in: hFile=0x274, lpFileSizeHigh=0x31e6a0 | out: lpFileSizeHigh=0x31e6a0*=0x0) returned 0x6e56 [0057.853] ReadFile (in: hFile=0x274, lpBuffer=0x280d068, nNumberOfBytesToRead=0x6e56, lpNumberOfBytesRead=0x31e64c, lpOverlapped=0x0 | out: lpBuffer=0x280d068*, lpNumberOfBytesRead=0x31e64c*=0x6e56, lpOverlapped=0x0) returned 1 [0057.871] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.pl.txt", nBufferLength=0x105, lpBuffer=0x31e090, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.pl.txt", lpFilePart=0x0) returned 0x68 [0057.871] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.pl.txt" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.pl.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x274 [0057.872] GetFileType (hFile=0x274) returned 0x1 [0057.872] GetFileType (hFile=0x274) returned 0x1 [0057.872] WriteFile (in: hFile=0x274, lpBuffer=0x268b700*, nNumberOfBytesToWrite=0x6e60, lpNumberOfBytesWritten=0x31e640, lpOverlapped=0x0 | out: lpBuffer=0x268b700*, lpNumberOfBytesWritten=0x31e640*=0x6e60, lpOverlapped=0x0) returned 1 [0057.873] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.pl.txt", nBufferLength=0x105, lpBuffer=0x31e1c4, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.pl.txt", lpFilePart=0x0) returned 0x68 [0057.873] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.pl.txt", nBufferLength=0x105, lpBuffer=0x31e1c4, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.pl.txt", lpFilePart=0x0) returned 0x68 [0057.873] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.pl.txt" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.pl.txt"), fInfoLevelId=0x0, lpFileInformation=0x31e6a0 | out: lpFileInformation=0x31e6a0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x93de7300, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7f2f5540, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x5f1d0e0, ftLastWriteTime.dwHighDateTime=0x1d6eb7f, nFileSizeHigh=0x0, nFileSizeLow=0x6e60)) returned 1 [0057.873] MoveFileW (lpExistingFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.pl.txt" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.pl.txt"), lpNewFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.pl.txt" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.pl.txt")) returned 1 [0057.874] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.pl_PL.txt", nBufferLength=0x105, lpBuffer=0x31e0a4, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.pl_PL.txt", lpFilePart=0x0) returned 0x6b [0057.874] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.pl_PL.txt" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.pl_pl.txt"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x274 [0057.874] GetFileType (hFile=0x274) returned 0x1 [0057.874] GetFileType (hFile=0x274) returned 0x1 [0057.874] GetFileSize (in: hFile=0x274, lpFileSizeHigh=0x31e6a0 | out: lpFileSizeHigh=0x31e6a0*=0x0) returned 0x6e56 [0057.874] ReadFile (in: hFile=0x274, lpBuffer=0x2692a50, nNumberOfBytesToRead=0x6e56, lpNumberOfBytesRead=0x31e64c, lpOverlapped=0x0 | out: lpBuffer=0x2692a50*, lpNumberOfBytesRead=0x31e64c*=0x6e56, lpOverlapped=0x0) returned 1 [0057.890] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.pl_PL.txt", nBufferLength=0x105, lpBuffer=0x31e090, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.pl_PL.txt", lpFilePart=0x0) returned 0x6b [0057.890] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.pl_PL.txt" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.pl_pl.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x274 [0057.891] GetFileType (hFile=0x274) returned 0x1 [0057.891] GetFileType (hFile=0x274) returned 0x1 [0057.892] WriteFile (in: hFile=0x274, lpBuffer=0x2702174*, nNumberOfBytesToWrite=0x6e60, lpNumberOfBytesWritten=0x31e640, lpOverlapped=0x0 | out: lpBuffer=0x2702174*, lpNumberOfBytesWritten=0x31e640*=0x6e60, lpOverlapped=0x0) returned 1 [0057.893] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.pl_PL.txt", nBufferLength=0x105, lpBuffer=0x31e1c4, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.pl_PL.txt", lpFilePart=0x0) returned 0x6b [0057.893] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.pl_PL.txt", nBufferLength=0x105, lpBuffer=0x31e1c4, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.pl_PL.txt", lpFilePart=0x0) returned 0x6b [0057.893] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.pl_PL.txt" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.pl_pl.txt"), fInfoLevelId=0x0, lpFileInformation=0x31e6a0 | out: lpFileInformation=0x31e6a0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x950fa000, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7f2f5540, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x5f693a0, ftLastWriteTime.dwHighDateTime=0x1d6eb7f, nFileSizeHigh=0x0, nFileSizeLow=0x6e60)) returned 1 [0057.893] MoveFileW (lpExistingFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.pl_PL.txt" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.pl_pl.txt"), lpNewFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.pl_PL.txt" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.pl_pl.txt")) returned 1 [0057.894] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.pt_BR.txt", nBufferLength=0x105, lpBuffer=0x31e0a4, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.pt_BR.txt", lpFilePart=0x0) returned 0x6b [0057.894] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.pt_BR.txt" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.pt_br.txt"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x274 [0057.895] GetFileType (hFile=0x274) returned 0x1 [0057.895] GetFileType (hFile=0x274) returned 0x1 [0057.895] GetFileSize (in: hFile=0x274, lpFileSizeHigh=0x31e6a0 | out: lpFileSizeHigh=0x31e6a0*=0x0) returned 0x6ebc [0057.895] ReadFile (in: hFile=0x274, lpBuffer=0x27094d8, nNumberOfBytesToRead=0x6ebc, lpNumberOfBytesRead=0x31e64c, lpOverlapped=0x0 | out: lpBuffer=0x27094d8*, lpNumberOfBytesRead=0x31e64c*=0x6ebc, lpOverlapped=0x0) returned 1 [0057.910] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.pt_BR.txt", nBufferLength=0x105, lpBuffer=0x31e090, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.pt_BR.txt", lpFilePart=0x0) returned 0x6b [0057.911] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.pt_BR.txt" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.pt_br.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x274 [0057.911] GetFileType (hFile=0x274) returned 0x1 [0057.912] GetFileType (hFile=0x274) returned 0x1 [0057.912] WriteFile (in: hFile=0x274, lpBuffer=0x2778c7c*, nNumberOfBytesToWrite=0x6ec0, lpNumberOfBytesWritten=0x31e640, lpOverlapped=0x0 | out: lpBuffer=0x2778c7c*, lpNumberOfBytesWritten=0x31e640*=0x6ec0, lpOverlapped=0x0) returned 1 [0057.913] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.pt_BR.txt", nBufferLength=0x105, lpBuffer=0x31e1c4, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.pt_BR.txt", lpFilePart=0x0) returned 0x6b [0057.913] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.pt_BR.txt", nBufferLength=0x105, lpBuffer=0x31e1c4, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.pt_BR.txt", lpFilePart=0x0) returned 0x6b [0057.913] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.pt_BR.txt" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.pt_br.txt"), fInfoLevelId=0x0, lpFileInformation=0x31e6a0 | out: lpFileInformation=0x31e6a0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x93de7300, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7dcf09c0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x5f8f500, ftLastWriteTime.dwHighDateTime=0x1d6eb7f, nFileSizeHigh=0x0, nFileSizeLow=0x6ec0)) returned 1 [0057.913] MoveFileW (lpExistingFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.pt_BR.txt" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.pt_br.txt"), lpNewFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.pt_BR.txt" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.pt_br.txt")) returned 1 [0057.913] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.pt_PT.txt", nBufferLength=0x105, lpBuffer=0x31e0a4, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.pt_PT.txt", lpFilePart=0x0) returned 0x6b [0057.913] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.pt_PT.txt" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.pt_pt.txt"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x274 [0057.914] GetFileType (hFile=0x274) returned 0x1 [0057.914] GetFileType (hFile=0x274) returned 0x1 [0057.914] GetFileSize (in: hFile=0x274, lpFileSizeHigh=0x31e6a0 | out: lpFileSizeHigh=0x31e6a0*=0x0) returned 0x6f46 [0057.914] ReadFile (in: hFile=0x274, lpBuffer=0x2780040, nNumberOfBytesToRead=0x6f46, lpNumberOfBytesRead=0x31e64c, lpOverlapped=0x0 | out: lpBuffer=0x2780040*, lpNumberOfBytesRead=0x31e64c*=0x6f46, lpOverlapped=0x0) returned 1 [0057.929] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.pt_PT.txt", nBufferLength=0x105, lpBuffer=0x31e090, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.pt_PT.txt", lpFilePart=0x0) returned 0x6b [0057.929] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.pt_PT.txt" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.pt_pt.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x274 [0057.930] GetFileType (hFile=0x274) returned 0x1 [0057.930] GetFileType (hFile=0x274) returned 0x1 [0057.930] WriteFile (in: hFile=0x274, lpBuffer=0x27efab8*, nNumberOfBytesToWrite=0x6f50, lpNumberOfBytesWritten=0x31e640, lpOverlapped=0x0 | out: lpBuffer=0x27efab8*, lpNumberOfBytesWritten=0x31e640*=0x6f50, lpOverlapped=0x0) returned 1 [0057.932] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.pt_PT.txt", nBufferLength=0x105, lpBuffer=0x31e1c4, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.pt_PT.txt", lpFilePart=0x0) returned 0x6b [0057.932] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.pt_PT.txt", nBufferLength=0x105, lpBuffer=0x31e1c4, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.pt_PT.txt", lpFilePart=0x0) returned 0x6b [0057.932] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.pt_PT.txt" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.pt_pt.txt"), fInfoLevelId=0x0, lpFileInformation=0x31e6a0 | out: lpFileInformation=0x31e6a0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x93de7300, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7dd16b20, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x5fb5660, ftLastWriteTime.dwHighDateTime=0x1d6eb7f, nFileSizeHigh=0x0, nFileSizeLow=0x6f50)) returned 1 [0057.932] MoveFileW (lpExistingFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.pt_PT.txt" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.pt_pt.txt"), lpNewFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.pt_PT.txt" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.pt_pt.txt")) returned 1 [0057.932] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.pt_PT_PREEURO.txt", nBufferLength=0x105, lpBuffer=0x31e0a4, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.pt_PT_PREEURO.txt", lpFilePart=0x0) returned 0x73 [0057.932] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.pt_PT_PREEURO.txt" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.pt_pt_preeuro.txt"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x274 [0057.932] GetFileType (hFile=0x274) returned 0x1 [0057.932] GetFileType (hFile=0x274) returned 0x1 [0057.932] GetFileSize (in: hFile=0x274, lpFileSizeHigh=0x31e6a0 | out: lpFileSizeHigh=0x31e6a0*=0x0) returned 0x6f50 [0057.933] ReadFile (in: hFile=0x274, lpBuffer=0x27f6f2c, nNumberOfBytesToRead=0x6f50, lpNumberOfBytesRead=0x31e64c, lpOverlapped=0x0 | out: lpBuffer=0x27f6f2c*, lpNumberOfBytesRead=0x31e64c*=0x6f50, lpOverlapped=0x0) returned 1 [0057.948] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.pt_PT_PREEURO.txt", nBufferLength=0x105, lpBuffer=0x31e090, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.pt_PT_PREEURO.txt", lpFilePart=0x0) returned 0x73 [0057.948] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.pt_PT_PREEURO.txt" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.pt_pt_preeuro.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x274 [0057.949] GetFileType (hFile=0x274) returned 0x1 [0057.949] GetFileType (hFile=0x274) returned 0x1 [0057.949] WriteFile (in: hFile=0x274, lpBuffer=0x28669f0*, nNumberOfBytesToWrite=0x6f60, lpNumberOfBytesWritten=0x31e640, lpOverlapped=0x0 | out: lpBuffer=0x28669f0*, lpNumberOfBytesWritten=0x31e640*=0x6f60, lpOverlapped=0x0) returned 1 [0057.950] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.pt_PT_PREEURO.txt", nBufferLength=0x105, lpBuffer=0x31e1c4, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.pt_PT_PREEURO.txt", lpFilePart=0x0) returned 0x73 [0057.950] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.pt_PT_PREEURO.txt", nBufferLength=0x105, lpBuffer=0x31e1c4, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.pt_PT_PREEURO.txt", lpFilePart=0x0) returned 0x73 [0057.950] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.pt_PT_PREEURO.txt" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.pt_pt_preeuro.txt"), fInfoLevelId=0x0, lpFileInformation=0x31e6a0 | out: lpFileInformation=0x31e6a0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x93de7300, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7dd16b20, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x5fdb7c0, ftLastWriteTime.dwHighDateTime=0x1d6eb7f, nFileSizeHigh=0x0, nFileSizeLow=0x6f60)) returned 1 [0057.950] MoveFileW (lpExistingFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.pt_PT_PREEURO.txt" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.pt_pt_preeuro.txt"), lpNewFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.pt_PT_PREEURO.txt" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.pt_pt_preeuro.txt")) returned 1 [0057.951] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.ro.txt", nBufferLength=0x105, lpBuffer=0x31e0a4, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.ro.txt", lpFilePart=0x0) returned 0x68 [0057.951] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.ro.txt" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.ro.txt"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x274 [0057.952] GetFileType (hFile=0x274) returned 0x1 [0057.952] GetFileType (hFile=0x274) returned 0x1 [0057.952] GetFileSize (in: hFile=0x274, lpFileSizeHigh=0x31e6a0 | out: lpFileSizeHigh=0x31e6a0*=0x0) returned 0x6ba2 [0057.952] ReadFile (in: hFile=0x274, lpBuffer=0x286de88, nNumberOfBytesToRead=0x6ba2, lpNumberOfBytesRead=0x31e64c, lpOverlapped=0x0 | out: lpBuffer=0x286de88*, lpNumberOfBytesRead=0x31e64c*=0x6ba2, lpOverlapped=0x0) returned 1 [0057.969] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.ro.txt", nBufferLength=0x105, lpBuffer=0x31e090, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.ro.txt", lpFilePart=0x0) returned 0x68 [0057.969] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.ro.txt" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.ro.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x274 [0057.970] GetFileType (hFile=0x274) returned 0x1 [0057.970] GetFileType (hFile=0x274) returned 0x1 [0057.971] WriteFile (in: hFile=0x274, lpBuffer=0x26ce424*, nNumberOfBytesToWrite=0x6bb0, lpNumberOfBytesWritten=0x31e640, lpOverlapped=0x0 | out: lpBuffer=0x26ce424*, lpNumberOfBytesWritten=0x31e640*=0x6bb0, lpOverlapped=0x0) returned 1 [0057.972] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.ro.txt", nBufferLength=0x105, lpBuffer=0x31e1c4, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.ro.txt", lpFilePart=0x0) returned 0x68 [0057.972] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.ro.txt", nBufferLength=0x105, lpBuffer=0x31e1c4, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.ro.txt", lpFilePart=0x0) returned 0x68 [0057.972] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.ro.txt" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.ro.txt"), fInfoLevelId=0x0, lpFileInformation=0x31e6a0 | out: lpFileInformation=0x31e6a0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x950fa000, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7f2cf3e0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x6027a80, ftLastWriteTime.dwHighDateTime=0x1d6eb7f, nFileSizeHigh=0x0, nFileSizeLow=0x6bb0)) returned 1 [0057.972] MoveFileW (lpExistingFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.ro.txt" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.ro.txt"), lpNewFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.ro.txt" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.ro.txt")) returned 1 [0057.972] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.ro_RO.txt", nBufferLength=0x105, lpBuffer=0x31e0a4, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.ro_RO.txt", lpFilePart=0x0) returned 0x6b [0057.972] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.ro_RO.txt" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.ro_ro.txt"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x274 [0057.972] GetFileType (hFile=0x274) returned 0x1 [0057.972] GetFileType (hFile=0x274) returned 0x1 [0057.973] GetFileSize (in: hFile=0x274, lpFileSizeHigh=0x31e6a0 | out: lpFileSizeHigh=0x31e6a0*=0x0) returned 0x6ba2 [0057.973] ReadFile (in: hFile=0x274, lpBuffer=0x26d54c4, nNumberOfBytesToRead=0x6ba2, lpNumberOfBytesRead=0x31e64c, lpOverlapped=0x0 | out: lpBuffer=0x26d54c4*, lpNumberOfBytesRead=0x31e64c*=0x6ba2, lpOverlapped=0x0) returned 1 [0057.988] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.ro_RO.txt", nBufferLength=0x105, lpBuffer=0x31e090, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.ro_RO.txt", lpFilePart=0x0) returned 0x6b [0057.988] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.ro_RO.txt" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.ro_ro.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x274 [0057.989] GetFileType (hFile=0x274) returned 0x1 [0057.989] GetFileType (hFile=0x274) returned 0x1 [0057.989] WriteFile (in: hFile=0x274, lpBuffer=0x2743e78*, nNumberOfBytesToWrite=0x6bb0, lpNumberOfBytesWritten=0x31e640, lpOverlapped=0x0 | out: lpBuffer=0x2743e78*, lpNumberOfBytesWritten=0x31e640*=0x6bb0, lpOverlapped=0x0) returned 1 [0057.991] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.ro_RO.txt", nBufferLength=0x105, lpBuffer=0x31e1c4, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.ro_RO.txt", lpFilePart=0x0) returned 0x6b [0057.991] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.ro_RO.txt", nBufferLength=0x105, lpBuffer=0x31e1c4, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.ro_RO.txt", lpFilePart=0x0) returned 0x6b [0057.991] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.ro_RO.txt" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.ro_ro.txt"), fInfoLevelId=0x0, lpFileInformation=0x31e6a0 | out: lpFileInformation=0x31e6a0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x950fa000, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7f2f5540, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x604dbe0, ftLastWriteTime.dwHighDateTime=0x1d6eb7f, nFileSizeHigh=0x0, nFileSizeLow=0x6bb0)) returned 1 [0057.991] MoveFileW (lpExistingFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.ro_RO.txt" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.ro_ro.txt"), lpNewFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.ro_RO.txt" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.ro_ro.txt")) returned 1 [0057.991] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.ru.txt", nBufferLength=0x105, lpBuffer=0x31e0a4, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.ru.txt", lpFilePart=0x0) returned 0x68 [0057.991] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.ru.txt" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.ru.txt"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x274 [0057.991] GetFileType (hFile=0x274) returned 0x1 [0057.991] GetFileType (hFile=0x274) returned 0x1 [0057.991] GetFileSize (in: hFile=0x274, lpFileSizeHigh=0x31e6a0 | out: lpFileSizeHigh=0x31e6a0*=0x0) returned 0x7498 [0057.992] ReadFile (in: hFile=0x274, lpBuffer=0x274af20, nNumberOfBytesToRead=0x7498, lpNumberOfBytesRead=0x31e64c, lpOverlapped=0x0 | out: lpBuffer=0x274af20*, lpNumberOfBytesRead=0x31e64c*=0x7498, lpOverlapped=0x0) returned 1 [0058.007] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.ru.txt", nBufferLength=0x105, lpBuffer=0x31e090, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.ru.txt", lpFilePart=0x0) returned 0x68 [0058.007] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.ru.txt" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.ru.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x274 [0058.008] GetFileType (hFile=0x274) returned 0x1 [0058.008] GetFileType (hFile=0x274) returned 0x1 [0058.008] WriteFile (in: hFile=0x274, lpBuffer=0x27bc424*, nNumberOfBytesToWrite=0x74a0, lpNumberOfBytesWritten=0x31e640, lpOverlapped=0x0 | out: lpBuffer=0x27bc424*, lpNumberOfBytesWritten=0x31e640*=0x74a0, lpOverlapped=0x0) returned 1 [0058.010] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.ru.txt", nBufferLength=0x105, lpBuffer=0x31e1c4, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.ru.txt", lpFilePart=0x0) returned 0x68 [0058.010] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.ru.txt", nBufferLength=0x105, lpBuffer=0x31e1c4, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.ru.txt", lpFilePart=0x0) returned 0x68 [0058.010] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.ru.txt" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.ru.txt"), fInfoLevelId=0x0, lpFileInformation=0x31e6a0 | out: lpFileInformation=0x31e6a0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x950fa000, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7f2cf3e0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x6073d40, ftLastWriteTime.dwHighDateTime=0x1d6eb7f, nFileSizeHigh=0x0, nFileSizeLow=0x74a0)) returned 1 [0058.010] MoveFileW (lpExistingFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.ru.txt" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.ru.txt"), lpNewFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.ru.txt" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.ru.txt")) returned 1 [0058.010] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.ru_RU.txt", nBufferLength=0x105, lpBuffer=0x31e0a4, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.ru_RU.txt", lpFilePart=0x0) returned 0x6b [0058.010] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.ru_RU.txt" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.ru_ru.txt"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x274 [0058.017] GetFileType (hFile=0x274) returned 0x1 [0058.017] GetFileType (hFile=0x274) returned 0x1 [0058.017] GetFileSize (in: hFile=0x274, lpFileSizeHigh=0x31e6a0 | out: lpFileSizeHigh=0x31e6a0*=0x0) returned 0x7498 [0058.017] ReadFile (in: hFile=0x274, lpBuffer=0x27c3db4, nNumberOfBytesToRead=0x7498, lpNumberOfBytesRead=0x31e64c, lpOverlapped=0x0 | out: lpBuffer=0x27c3db4*, lpNumberOfBytesRead=0x31e64c*=0x7498, lpOverlapped=0x0) returned 1 [0058.032] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.ru_RU.txt", nBufferLength=0x105, lpBuffer=0x31e090, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.ru_RU.txt", lpFilePart=0x0) returned 0x6b [0058.033] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.ru_RU.txt" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.ru_ru.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x274 [0058.033] GetFileType (hFile=0x274) returned 0x1 [0058.034] GetFileType (hFile=0x274) returned 0x1 [0058.034] WriteFile (in: hFile=0x274, lpBuffer=0x28352b8*, nNumberOfBytesToWrite=0x74a0, lpNumberOfBytesWritten=0x31e640, lpOverlapped=0x0 | out: lpBuffer=0x28352b8*, lpNumberOfBytesWritten=0x31e640*=0x74a0, lpOverlapped=0x0) returned 1 [0058.035] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.ru_RU.txt", nBufferLength=0x105, lpBuffer=0x31e1c4, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.ru_RU.txt", lpFilePart=0x0) returned 0x6b [0058.035] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.ru_RU.txt", nBufferLength=0x105, lpBuffer=0x31e1c4, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.ru_RU.txt", lpFilePart=0x0) returned 0x6b [0058.035] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.ru_RU.txt" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.ru_ru.txt"), fInfoLevelId=0x0, lpFileInformation=0x31e6a0 | out: lpFileInformation=0x31e6a0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x950fa000, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7f2cf3e0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x60c0000, ftLastWriteTime.dwHighDateTime=0x1d6eb7f, nFileSizeHigh=0x0, nFileSizeLow=0x74a0)) returned 1 [0058.035] MoveFileW (lpExistingFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.ru_RU.txt" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.ru_ru.txt"), lpNewFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.ru_RU.txt" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.ru_ru.txt")) returned 1 [0058.035] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.ru_UA.txt", nBufferLength=0x105, lpBuffer=0x31e0a4, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.ru_UA.txt", lpFilePart=0x0) returned 0x6b [0058.035] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.ru_UA.txt" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.ru_ua.txt"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x274 [0058.035] GetFileType (hFile=0x274) returned 0x1 [0058.036] GetFileType (hFile=0x274) returned 0x1 [0058.036] GetFileSize (in: hFile=0x274, lpFileSizeHigh=0x31e6a0 | out: lpFileSizeHigh=0x31e6a0*=0x0) returned 0x7416 [0058.036] ReadFile (in: hFile=0x274, lpBuffer=0x283cc5c, nNumberOfBytesToRead=0x7416, lpNumberOfBytesRead=0x31e64c, lpOverlapped=0x0 | out: lpBuffer=0x283cc5c*, lpNumberOfBytesRead=0x31e64c*=0x7416, lpOverlapped=0x0) returned 1 [0058.053] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.ru_UA.txt", nBufferLength=0x105, lpBuffer=0x31e090, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.ru_UA.txt", lpFilePart=0x0) returned 0x6b [0058.053] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.ru_UA.txt" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.ru_ua.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x274 [0058.054] GetFileType (hFile=0x274) returned 0x1 [0058.054] GetFileType (hFile=0x274) returned 0x1 [0058.054] WriteFile (in: hFile=0x274, lpBuffer=0x26ae764*, nNumberOfBytesToWrite=0x7420, lpNumberOfBytesWritten=0x31e640, lpOverlapped=0x0 | out: lpBuffer=0x26ae764*, lpNumberOfBytesWritten=0x31e640*=0x7420, lpOverlapped=0x0) returned 1 [0058.055] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.ru_UA.txt", nBufferLength=0x105, lpBuffer=0x31e1c4, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.ru_UA.txt", lpFilePart=0x0) returned 0x6b [0058.055] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.ru_UA.txt", nBufferLength=0x105, lpBuffer=0x31e1c4, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.ru_UA.txt", lpFilePart=0x0) returned 0x6b [0058.055] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.ru_UA.txt" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.ru_ua.txt"), fInfoLevelId=0x0, lpFileInformation=0x31e6a0 | out: lpFileInformation=0x31e6a0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x950fa000, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7f2cf3e0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x60e6160, ftLastWriteTime.dwHighDateTime=0x1d6eb7f, nFileSizeHigh=0x0, nFileSizeLow=0x7420)) returned 1 [0058.055] MoveFileW (lpExistingFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.ru_UA.txt" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.ru_ua.txt"), lpNewFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.ru_UA.txt" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.ru_ua.txt")) returned 1 [0058.056] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.sk.txt", nBufferLength=0x105, lpBuffer=0x31e0a4, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.sk.txt", lpFilePart=0x0) returned 0x68 [0058.056] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.sk.txt" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.sk.txt"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x274 [0058.056] GetFileType (hFile=0x274) returned 0x1 [0058.056] GetFileType (hFile=0x274) returned 0x1 [0058.056] GetFileSize (in: hFile=0x274, lpFileSizeHigh=0x31e6a0 | out: lpFileSizeHigh=0x31e6a0*=0x0) returned 0x6d76 [0058.056] ReadFile (in: hFile=0x274, lpBuffer=0x26b607c, nNumberOfBytesToRead=0x6d76, lpNumberOfBytesRead=0x31e64c, lpOverlapped=0x0 | out: lpBuffer=0x26b607c*, lpNumberOfBytesRead=0x31e64c*=0x6d76, lpOverlapped=0x0) returned 1 [0058.071] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.sk.txt", nBufferLength=0x105, lpBuffer=0x31e090, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.sk.txt", lpFilePart=0x0) returned 0x68 [0058.071] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.sk.txt" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.sk.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x274 [0058.072] GetFileType (hFile=0x274) returned 0x1 [0058.072] GetFileType (hFile=0x274) returned 0x1 [0058.072] WriteFile (in: hFile=0x274, lpBuffer=0x2725340*, nNumberOfBytesToWrite=0x6d80, lpNumberOfBytesWritten=0x31e640, lpOverlapped=0x0 | out: lpBuffer=0x2725340*, lpNumberOfBytesWritten=0x31e640*=0x6d80, lpOverlapped=0x0) returned 1 [0058.073] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.sk.txt", nBufferLength=0x105, lpBuffer=0x31e1c4, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.sk.txt", lpFilePart=0x0) returned 0x68 [0058.073] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.sk.txt", nBufferLength=0x105, lpBuffer=0x31e1c4, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.sk.txt", lpFilePart=0x0) returned 0x68 [0058.074] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.sk.txt" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.sk.txt"), fInfoLevelId=0x0, lpFileInformation=0x31e6a0 | out: lpFileInformation=0x31e6a0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x93de7300, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7e414bc0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x610c2c0, ftLastWriteTime.dwHighDateTime=0x1d6eb7f, nFileSizeHigh=0x0, nFileSizeLow=0x6d80)) returned 1 [0058.074] MoveFileW (lpExistingFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.sk.txt" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.sk.txt"), lpNewFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.sk.txt" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.sk.txt")) returned 1 [0058.074] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.sk_SK.txt", nBufferLength=0x105, lpBuffer=0x31e0a4, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.sk_SK.txt", lpFilePart=0x0) returned 0x6b [0058.074] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.sk_SK.txt" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.sk_sk.txt"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x274 [0058.074] GetFileType (hFile=0x274) returned 0x1 [0058.074] GetFileType (hFile=0x274) returned 0x1 [0058.074] GetFileSize (in: hFile=0x274, lpFileSizeHigh=0x31e6a0 | out: lpFileSizeHigh=0x31e6a0*=0x0) returned 0x6d76 [0058.074] ReadFile (in: hFile=0x274, lpBuffer=0x272c5b0, nNumberOfBytesToRead=0x6d76, lpNumberOfBytesRead=0x31e64c, lpOverlapped=0x0 | out: lpBuffer=0x272c5b0*, lpNumberOfBytesRead=0x31e64c*=0x6d76, lpOverlapped=0x0) returned 1 [0058.090] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.sk_SK.txt", nBufferLength=0x105, lpBuffer=0x31e090, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.sk_SK.txt", lpFilePart=0x0) returned 0x6b [0058.090] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.sk_SK.txt" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.sk_sk.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x274 [0058.091] GetFileType (hFile=0x274) returned 0x1 [0058.091] GetFileType (hFile=0x274) returned 0x1 [0058.091] WriteFile (in: hFile=0x274, lpBuffer=0x279b718*, nNumberOfBytesToWrite=0x6d80, lpNumberOfBytesWritten=0x31e640, lpOverlapped=0x0 | out: lpBuffer=0x279b718*, lpNumberOfBytesWritten=0x31e640*=0x6d80, lpOverlapped=0x0) returned 1 [0058.092] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.sk_SK.txt", nBufferLength=0x105, lpBuffer=0x31e1c4, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.sk_SK.txt", lpFilePart=0x0) returned 0x6b [0058.092] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.sk_SK.txt", nBufferLength=0x105, lpBuffer=0x31e1c4, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.sk_SK.txt", lpFilePart=0x0) returned 0x6b [0058.092] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.sk_SK.txt" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.sk_sk.txt"), fInfoLevelId=0x0, lpFileInformation=0x31e6a0 | out: lpFileInformation=0x31e6a0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x950fa000, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7f2a9280, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x6132420, ftLastWriteTime.dwHighDateTime=0x1d6eb7f, nFileSizeHigh=0x0, nFileSizeLow=0x6d80)) returned 1 [0058.092] MoveFileW (lpExistingFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.sk_SK.txt" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.sk_sk.txt"), lpNewFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.sk_SK.txt" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.sk_sk.txt")) returned 1 [0058.092] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.sl.txt", nBufferLength=0x105, lpBuffer=0x31e0a4, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.sl.txt", lpFilePart=0x0) returned 0x68 [0058.092] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.sl.txt" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.sl.txt"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x274 [0058.093] GetFileType (hFile=0x274) returned 0x1 [0058.093] GetFileType (hFile=0x274) returned 0x1 [0058.093] GetFileSize (in: hFile=0x274, lpFileSizeHigh=0x31e6a0 | out: lpFileSizeHigh=0x31e6a0*=0x0) returned 0x6ef0 [0058.093] ReadFile (in: hFile=0x274, lpBuffer=0x27a2990, nNumberOfBytesToRead=0x6ef0, lpNumberOfBytesRead=0x31e64c, lpOverlapped=0x0 | out: lpBuffer=0x27a2990*, lpNumberOfBytesRead=0x31e64c*=0x6ef0, lpOverlapped=0x0) returned 1 [0058.108] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.sl.txt", nBufferLength=0x105, lpBuffer=0x31e090, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.sl.txt", lpFilePart=0x0) returned 0x68 [0058.108] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.sl.txt" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.sl.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x274 [0058.109] GetFileType (hFile=0x274) returned 0x1 [0058.109] GetFileType (hFile=0x274) returned 0x1 [0058.109] WriteFile (in: hFile=0x274, lpBuffer=0x2812274*, nNumberOfBytesToWrite=0x6f00, lpNumberOfBytesWritten=0x31e640, lpOverlapped=0x0 | out: lpBuffer=0x2812274*, lpNumberOfBytesWritten=0x31e640*=0x6f00, lpOverlapped=0x0) returned 1 [0058.111] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.sl.txt", nBufferLength=0x105, lpBuffer=0x31e1c4, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.sl.txt", lpFilePart=0x0) returned 0x68 [0058.111] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.sl.txt", nBufferLength=0x105, lpBuffer=0x31e1c4, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.sl.txt", lpFilePart=0x0) returned 0x68 [0058.111] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.sl.txt" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.sl.txt"), fInfoLevelId=0x0, lpFileInformation=0x31e6a0 | out: lpFileInformation=0x31e6a0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x950fa000, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7e414bc0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x617e6e0, ftLastWriteTime.dwHighDateTime=0x1d6eb7f, nFileSizeHigh=0x0, nFileSizeLow=0x6f00)) returned 1 [0058.111] MoveFileW (lpExistingFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.sl.txt" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.sl.txt"), lpNewFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.sl.txt" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.sl.txt")) returned 1 [0058.112] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.sl_SI.txt", nBufferLength=0x105, lpBuffer=0x31e0a4, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.sl_SI.txt", lpFilePart=0x0) returned 0x6b [0058.112] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.sl_SI.txt" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.sl_si.txt"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x274 [0058.112] GetFileType (hFile=0x274) returned 0x1 [0058.112] GetFileType (hFile=0x274) returned 0x1 [0058.112] GetFileSize (in: hFile=0x274, lpFileSizeHigh=0x31e6a0 | out: lpFileSizeHigh=0x31e6a0*=0x0) returned 0x6ef0 [0058.112] ReadFile (in: hFile=0x274, lpBuffer=0x2819664, nNumberOfBytesToRead=0x6ef0, lpNumberOfBytesRead=0x31e64c, lpOverlapped=0x0 | out: lpBuffer=0x2819664*, lpNumberOfBytesRead=0x31e64c*=0x6ef0, lpOverlapped=0x0) returned 1 [0058.129] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.sl_SI.txt", nBufferLength=0x105, lpBuffer=0x31e090, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.sl_SI.txt", lpFilePart=0x0) returned 0x6b [0058.129] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.sl_SI.txt" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.sl_si.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x274 [0058.130] GetFileType (hFile=0x274) returned 0x1 [0058.130] GetFileType (hFile=0x274) returned 0x1 [0058.130] WriteFile (in: hFile=0x274, lpBuffer=0x268b8d8*, nNumberOfBytesToWrite=0x6f00, lpNumberOfBytesWritten=0x31e640, lpOverlapped=0x0 | out: lpBuffer=0x268b8d8*, lpNumberOfBytesWritten=0x31e640*=0x6f00, lpOverlapped=0x0) returned 1 [0058.131] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.sl_SI.txt", nBufferLength=0x105, lpBuffer=0x31e1c4, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.sl_SI.txt", lpFilePart=0x0) returned 0x6b [0058.131] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.sl_SI.txt", nBufferLength=0x105, lpBuffer=0x31e1c4, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.sl_SI.txt", lpFilePart=0x0) returned 0x6b [0058.131] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.sl_SI.txt" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.sl_si.txt"), fInfoLevelId=0x0, lpFileInformation=0x31e6a0 | out: lpFileInformation=0x31e6a0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x950fa000, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7e414bc0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x61a4840, ftLastWriteTime.dwHighDateTime=0x1d6eb7f, nFileSizeHigh=0x0, nFileSizeLow=0x6f00)) returned 1 [0058.131] MoveFileW (lpExistingFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.sl_SI.txt" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.sl_si.txt"), lpNewFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.sl_SI.txt" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.sl_si.txt")) returned 1 [0058.132] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.sv.txt", nBufferLength=0x105, lpBuffer=0x31e0a4, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.sv.txt", lpFilePart=0x0) returned 0x68 [0058.132] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.sv.txt" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.sv.txt"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x274 [0058.135] GetFileType (hFile=0x274) returned 0x1 [0058.135] GetFileType (hFile=0x274) returned 0x1 [0058.135] GetFileSize (in: hFile=0x274, lpFileSizeHigh=0x31e6a0 | out: lpFileSizeHigh=0x31e6a0*=0x0) returned 0x715c [0058.135] ReadFile (in: hFile=0x274, lpBuffer=0x2692cd0, nNumberOfBytesToRead=0x715c, lpNumberOfBytesRead=0x31e64c, lpOverlapped=0x0 | out: lpBuffer=0x2692cd0*, lpNumberOfBytesRead=0x31e64c*=0x715c, lpOverlapped=0x0) returned 1 [0058.150] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.sv.txt", nBufferLength=0x105, lpBuffer=0x31e090, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.sv.txt", lpFilePart=0x0) returned 0x68 [0058.150] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.sv.txt" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.sv.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x274 [0058.151] GetFileType (hFile=0x274) returned 0x1 [0058.151] GetFileType (hFile=0x274) returned 0x1 [0058.152] WriteFile (in: hFile=0x274, lpBuffer=0x27032f0*, nNumberOfBytesToWrite=0x7160, lpNumberOfBytesWritten=0x31e640, lpOverlapped=0x0 | out: lpBuffer=0x27032f0*, lpNumberOfBytesWritten=0x31e640*=0x7160, lpOverlapped=0x0) returned 1 [0058.153] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.sv.txt", nBufferLength=0x105, lpBuffer=0x31e1c4, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.sv.txt", lpFilePart=0x0) returned 0x68 [0058.153] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.sv.txt", nBufferLength=0x105, lpBuffer=0x31e1c4, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.sv.txt", lpFilePart=0x0) returned 0x68 [0058.153] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.sv.txt" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.sv.txt"), fInfoLevelId=0x0, lpFileInformation=0x31e6a0 | out: lpFileInformation=0x31e6a0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x93de7300, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7dcf09c0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x61ca9a0, ftLastWriteTime.dwHighDateTime=0x1d6eb7f, nFileSizeHigh=0x0, nFileSizeLow=0x7160)) returned 1 [0058.153] MoveFileW (lpExistingFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.sv.txt" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.sv.txt"), lpNewFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.sv.txt" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.sv.txt")) returned 1 [0058.153] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.sv_FI.txt", nBufferLength=0x105, lpBuffer=0x31e0a4, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.sv_FI.txt", lpFilePart=0x0) returned 0x6b [0058.153] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.sv_FI.txt" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.sv_fi.txt"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x274 [0058.153] GetFileType (hFile=0x274) returned 0x1 [0058.153] GetFileType (hFile=0x274) returned 0x1 [0058.154] GetFileSize (in: hFile=0x274, lpFileSizeHigh=0x31e6a0 | out: lpFileSizeHigh=0x31e6a0*=0x0) returned 0x7144 [0058.154] ReadFile (in: hFile=0x274, lpBuffer=0x270a940, nNumberOfBytesToRead=0x7144, lpNumberOfBytesRead=0x31e64c, lpOverlapped=0x0 | out: lpBuffer=0x270a940*, lpNumberOfBytesRead=0x31e64c*=0x7144, lpOverlapped=0x0) returned 1 [0058.169] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.sv_FI.txt", nBufferLength=0x105, lpBuffer=0x31e090, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.sv_FI.txt", lpFilePart=0x0) returned 0x6b [0058.169] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.sv_FI.txt" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.sv_fi.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x274 [0058.170] GetFileType (hFile=0x274) returned 0x1 [0058.170] GetFileType (hFile=0x274) returned 0x1 [0058.170] WriteFile (in: hFile=0x274, lpBuffer=0x277adb4*, nNumberOfBytesToWrite=0x7150, lpNumberOfBytesWritten=0x31e640, lpOverlapped=0x0 | out: lpBuffer=0x277adb4*, lpNumberOfBytesWritten=0x31e640*=0x7150, lpOverlapped=0x0) returned 1 [0058.171] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.sv_FI.txt", nBufferLength=0x105, lpBuffer=0x31e1c4, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.sv_FI.txt", lpFilePart=0x0) returned 0x6b [0058.171] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.sv_FI.txt", nBufferLength=0x105, lpBuffer=0x31e1c4, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.sv_FI.txt", lpFilePart=0x0) returned 0x6b [0058.171] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.sv_FI.txt" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.sv_fi.txt"), fInfoLevelId=0x0, lpFileInformation=0x31e6a0 | out: lpFileInformation=0x31e6a0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x950fa000, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7dcf09c0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x61f0b00, ftLastWriteTime.dwHighDateTime=0x1d6eb7f, nFileSizeHigh=0x0, nFileSizeLow=0x7150)) returned 1 [0058.171] MoveFileW (lpExistingFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.sv_FI.txt" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.sv_fi.txt"), lpNewFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.sv_FI.txt" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.sv_fi.txt")) returned 1 [0058.172] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.sv_SE.txt", nBufferLength=0x105, lpBuffer=0x31e0a4, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.sv_SE.txt", lpFilePart=0x0) returned 0x6b [0058.172] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.sv_SE.txt" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.sv_se.txt"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x274 [0058.172] GetFileType (hFile=0x274) returned 0x1 [0058.172] GetFileType (hFile=0x274) returned 0x1 [0058.172] GetFileSize (in: hFile=0x274, lpFileSizeHigh=0x31e6a0 | out: lpFileSizeHigh=0x31e6a0*=0x0) returned 0x715c [0058.172] ReadFile (in: hFile=0x274, lpBuffer=0x2782408, nNumberOfBytesToRead=0x715c, lpNumberOfBytesRead=0x31e64c, lpOverlapped=0x0 | out: lpBuffer=0x2782408*, lpNumberOfBytesRead=0x31e64c*=0x715c, lpOverlapped=0x0) returned 1 [0058.188] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.sv_SE.txt", nBufferLength=0x105, lpBuffer=0x31e090, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.sv_SE.txt", lpFilePart=0x0) returned 0x6b [0058.188] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.sv_SE.txt" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.sv_se.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x274 [0058.189] GetFileType (hFile=0x274) returned 0x1 [0058.189] GetFileType (hFile=0x274) returned 0x1 [0058.189] WriteFile (in: hFile=0x274, lpBuffer=0x27f28cc*, nNumberOfBytesToWrite=0x7160, lpNumberOfBytesWritten=0x31e640, lpOverlapped=0x0 | out: lpBuffer=0x27f28cc*, lpNumberOfBytesWritten=0x31e640*=0x7160, lpOverlapped=0x0) returned 1 [0058.191] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.sv_SE.txt", nBufferLength=0x105, lpBuffer=0x31e1c4, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.sv_SE.txt", lpFilePart=0x0) returned 0x6b [0058.191] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.sv_SE.txt", nBufferLength=0x105, lpBuffer=0x31e1c4, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.sv_SE.txt", lpFilePart=0x0) returned 0x6b [0058.191] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.sv_SE.txt" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.sv_se.txt"), fInfoLevelId=0x0, lpFileInformation=0x31e6a0 | out: lpFileInformation=0x31e6a0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x93de7300, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7dcf09c0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x623cdc0, ftLastWriteTime.dwHighDateTime=0x1d6eb7f, nFileSizeHigh=0x0, nFileSizeLow=0x7160)) returned 1 [0058.191] MoveFileW (lpExistingFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.sv_SE.txt" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.sv_se.txt"), lpNewFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.sv_SE.txt" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.sv_se.txt")) returned 1 [0058.191] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.tr.txt", nBufferLength=0x105, lpBuffer=0x31e0a4, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.tr.txt", lpFilePart=0x0) returned 0x68 [0058.191] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.tr.txt" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.tr.txt"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x274 [0058.191] GetFileType (hFile=0x274) returned 0x1 [0058.191] GetFileType (hFile=0x274) returned 0x1 [0058.191] GetFileSize (in: hFile=0x274, lpFileSizeHigh=0x31e6a0 | out: lpFileSizeHigh=0x31e6a0*=0x0) returned 0x7288 [0058.192] ReadFile (in: hFile=0x274, lpBuffer=0x27f9f24, nNumberOfBytesToRead=0x7288, lpNumberOfBytesRead=0x31e64c, lpOverlapped=0x0 | out: lpBuffer=0x27f9f24*, lpNumberOfBytesRead=0x31e64c*=0x7288, lpOverlapped=0x0) returned 1 [0058.221] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.tr.txt", nBufferLength=0x105, lpBuffer=0x31e090, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.tr.txt", lpFilePart=0x0) returned 0x68 [0058.221] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.tr.txt" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.tr.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x274 [0058.222] GetFileType (hFile=0x274) returned 0x1 [0058.222] GetFileType (hFile=0x274) returned 0x1 [0058.222] WriteFile (in: hFile=0x274, lpBuffer=0x286a9d8*, nNumberOfBytesToWrite=0x7290, lpNumberOfBytesWritten=0x31e640, lpOverlapped=0x0 | out: lpBuffer=0x286a9d8*, lpNumberOfBytesWritten=0x31e640*=0x7290, lpOverlapped=0x0) returned 1 [0058.226] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.tr.txt", nBufferLength=0x105, lpBuffer=0x31e1c4, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.tr.txt", lpFilePart=0x0) returned 0x68 [0058.227] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.tr.txt", nBufferLength=0x105, lpBuffer=0x31e1c4, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.tr.txt", lpFilePart=0x0) returned 0x68 [0058.227] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.tr.txt" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.tr.txt"), fInfoLevelId=0x0, lpFileInformation=0x31e6a0 | out: lpFileInformation=0x31e6a0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x950fa000, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7e414bc0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x6289080, ftLastWriteTime.dwHighDateTime=0x1d6eb7f, nFileSizeHigh=0x0, nFileSizeLow=0x7290)) returned 1 [0058.227] MoveFileW (lpExistingFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.tr.txt" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.tr.txt"), lpNewFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.tr.txt" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.tr.txt")) returned 1 [0058.227] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.tr_TR.txt", nBufferLength=0x105, lpBuffer=0x31e0a4, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.tr_TR.txt", lpFilePart=0x0) returned 0x6b [0058.227] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.tr_TR.txt" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.tr_tr.txt"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x274 [0058.227] GetFileType (hFile=0x274) returned 0x1 [0058.227] GetFileType (hFile=0x274) returned 0x1 [0058.227] GetFileSize (in: hFile=0x274, lpFileSizeHigh=0x31e6a0 | out: lpFileSizeHigh=0x31e6a0*=0x0) returned 0x7288 [0058.227] ReadFile (in: hFile=0x274, lpBuffer=0x2872158, nNumberOfBytesToRead=0x7288, lpNumberOfBytesRead=0x31e64c, lpOverlapped=0x0 | out: lpBuffer=0x2872158*, lpNumberOfBytesRead=0x31e64c*=0x7288, lpOverlapped=0x0) returned 1 [0058.252] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.tr_TR.txt", nBufferLength=0x105, lpBuffer=0x31e090, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.tr_TR.txt", lpFilePart=0x0) returned 0x6b [0058.252] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.tr_TR.txt" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.tr_tr.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x274 [0058.253] GetFileType (hFile=0x274) returned 0x1 [0058.253] GetFileType (hFile=0x274) returned 0x1 [0058.253] WriteFile (in: hFile=0x274, lpBuffer=0x26d4e68*, nNumberOfBytesToWrite=0x7290, lpNumberOfBytesWritten=0x31e640, lpOverlapped=0x0 | out: lpBuffer=0x26d4e68*, lpNumberOfBytesWritten=0x31e640*=0x7290, lpOverlapped=0x0) returned 1 [0058.254] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.tr_TR.txt", nBufferLength=0x105, lpBuffer=0x31e1c4, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.tr_TR.txt", lpFilePart=0x0) returned 0x6b [0058.254] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.tr_TR.txt", nBufferLength=0x105, lpBuffer=0x31e1c4, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.tr_TR.txt", lpFilePart=0x0) returned 0x6b [0058.254] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.tr_TR.txt" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.tr_tr.txt"), fInfoLevelId=0x0, lpFileInformation=0x31e6a0 | out: lpFileInformation=0x31e6a0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x950fa000, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7e414bc0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x62d5340, ftLastWriteTime.dwHighDateTime=0x1d6eb7f, nFileSizeHigh=0x0, nFileSizeLow=0x7290)) returned 1 [0058.254] MoveFileW (lpExistingFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.tr_TR.txt" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.tr_tr.txt"), lpNewFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.tr_TR.txt" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.tr_tr.txt")) returned 1 [0058.255] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.uk.txt", nBufferLength=0x105, lpBuffer=0x31e0a4, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.uk.txt", lpFilePart=0x0) returned 0x68 [0058.255] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.uk.txt" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.uk.txt"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x274 [0058.255] GetFileType (hFile=0x274) returned 0x1 [0058.255] GetFileType (hFile=0x274) returned 0x1 [0058.255] GetFileSize (in: hFile=0x274, lpFileSizeHigh=0x31e6a0 | out: lpFileSizeHigh=0x31e6a0*=0x0) returned 0x724e [0058.255] ReadFile (in: hFile=0x274, lpBuffer=0x26dc5f0, nNumberOfBytesToRead=0x724e, lpNumberOfBytesRead=0x31e64c, lpOverlapped=0x0 | out: lpBuffer=0x26dc5f0*, lpNumberOfBytesRead=0x31e64c*=0x724e, lpOverlapped=0x0) returned 1 [0058.271] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.uk.txt", nBufferLength=0x105, lpBuffer=0x31e090, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.uk.txt", lpFilePart=0x0) returned 0x68 [0058.271] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.uk.txt" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.uk.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x274 [0058.272] GetFileType (hFile=0x274) returned 0x1 [0058.272] GetFileType (hFile=0x274) returned 0x1 [0058.272] WriteFile (in: hFile=0x274, lpBuffer=0x274d0c4*, nNumberOfBytesToWrite=0x7250, lpNumberOfBytesWritten=0x31e640, lpOverlapped=0x0 | out: lpBuffer=0x274d0c4*, lpNumberOfBytesWritten=0x31e640*=0x7250, lpOverlapped=0x0) returned 1 [0058.273] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.uk.txt", nBufferLength=0x105, lpBuffer=0x31e1c4, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.uk.txt", lpFilePart=0x0) returned 0x68 [0058.273] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.uk.txt", nBufferLength=0x105, lpBuffer=0x31e1c4, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.uk.txt", lpFilePart=0x0) returned 0x68 [0058.273] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.uk.txt" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.uk.txt"), fInfoLevelId=0x0, lpFileInformation=0x31e6a0 | out: lpFileInformation=0x31e6a0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x93de7300, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7f472300, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x62fb4a0, ftLastWriteTime.dwHighDateTime=0x1d6eb7f, nFileSizeHigh=0x0, nFileSizeLow=0x7250)) returned 1 [0058.273] MoveFileW (lpExistingFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.uk.txt" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.uk.txt"), lpNewFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.uk.txt" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.uk.txt")) returned 1 [0058.274] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.uk_UA.txt", nBufferLength=0x105, lpBuffer=0x31e0a4, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.uk_UA.txt", lpFilePart=0x0) returned 0x6b [0058.274] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.uk_UA.txt" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.uk_ua.txt"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x274 [0058.274] GetFileType (hFile=0x274) returned 0x1 [0058.274] GetFileType (hFile=0x274) returned 0x1 [0058.274] GetFileSize (in: hFile=0x274, lpFileSizeHigh=0x31e6a0 | out: lpFileSizeHigh=0x31e6a0*=0x0) returned 0x724e [0058.274] ReadFile (in: hFile=0x274, lpBuffer=0x2754804, nNumberOfBytesToRead=0x724e, lpNumberOfBytesRead=0x31e64c, lpOverlapped=0x0 | out: lpBuffer=0x2754804*, lpNumberOfBytesRead=0x31e64c*=0x724e, lpOverlapped=0x0) returned 1 [0058.289] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.uk_UA.txt", nBufferLength=0x105, lpBuffer=0x31e090, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.uk_UA.txt", lpFilePart=0x0) returned 0x6b [0058.289] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.uk_UA.txt" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.uk_ua.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x274 [0058.290] GetFileType (hFile=0x274) returned 0x1 [0058.290] GetFileType (hFile=0x274) returned 0x1 [0058.290] WriteFile (in: hFile=0x274, lpBuffer=0x27c517c*, nNumberOfBytesToWrite=0x7250, lpNumberOfBytesWritten=0x31e640, lpOverlapped=0x0 | out: lpBuffer=0x27c517c*, lpNumberOfBytesWritten=0x31e640*=0x7250, lpOverlapped=0x0) returned 1 [0058.291] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.uk_UA.txt", nBufferLength=0x105, lpBuffer=0x31e1c4, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.uk_UA.txt", lpFilePart=0x0) returned 0x6b [0058.292] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.uk_UA.txt", nBufferLength=0x105, lpBuffer=0x31e1c4, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.uk_UA.txt", lpFilePart=0x0) returned 0x6b [0058.292] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.uk_UA.txt" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.uk_ua.txt"), fInfoLevelId=0x0, lpFileInformation=0x31e6a0 | out: lpFileInformation=0x31e6a0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x950fa000, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7f472300, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x6321600, ftLastWriteTime.dwHighDateTime=0x1d6eb7f, nFileSizeHigh=0x0, nFileSizeLow=0x7250)) returned 1 [0058.292] MoveFileW (lpExistingFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.uk_UA.txt" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.uk_ua.txt"), lpNewFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.uk_UA.txt" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.uk_ua.txt")) returned 1 [0058.292] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.zh_CN.txt", nBufferLength=0x105, lpBuffer=0x31e0a4, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.zh_CN.txt", lpFilePart=0x0) returned 0x6b [0058.292] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.zh_CN.txt" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.zh_cn.txt"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x274 [0058.292] GetFileType (hFile=0x274) returned 0x1 [0058.292] GetFileType (hFile=0x274) returned 0x1 [0058.292] GetFileSize (in: hFile=0x274, lpFileSizeHigh=0x31e6a0 | out: lpFileSizeHigh=0x31e6a0*=0x0) returned 0x6068 [0058.292] ReadFile (in: hFile=0x274, lpBuffer=0x27cc8d0, nNumberOfBytesToRead=0x6068, lpNumberOfBytesRead=0x31e64c, lpOverlapped=0x0 | out: lpBuffer=0x27cc8d0*, lpNumberOfBytesRead=0x31e64c*=0x6068, lpOverlapped=0x0) returned 1 [0058.308] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.zh_CN.txt", nBufferLength=0x105, lpBuffer=0x31e090, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.zh_CN.txt", lpFilePart=0x0) returned 0x6b [0058.308] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.zh_CN.txt" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.zh_cn.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x274 [0058.309] GetFileType (hFile=0x274) returned 0x1 [0058.309] GetFileType (hFile=0x274) returned 0x1 [0058.309] WriteFile (in: hFile=0x274, lpBuffer=0x28378e4*, nNumberOfBytesToWrite=0x6070, lpNumberOfBytesWritten=0x31e640, lpOverlapped=0x0 | out: lpBuffer=0x28378e4*, lpNumberOfBytesWritten=0x31e640*=0x6070, lpOverlapped=0x0) returned 1 [0058.310] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.zh_CN.txt", nBufferLength=0x105, lpBuffer=0x31e1c4, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.zh_CN.txt", lpFilePart=0x0) returned 0x6b [0058.310] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.zh_CN.txt", nBufferLength=0x105, lpBuffer=0x31e1c4, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.zh_CN.txt", lpFilePart=0x0) returned 0x6b [0058.310] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.zh_CN.txt" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.zh_cn.txt"), fInfoLevelId=0x0, lpFileInformation=0x31e6a0 | out: lpFileInformation=0x31e6a0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x950fa000, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7dcf09c0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x6347760, ftLastWriteTime.dwHighDateTime=0x1d6eb7f, nFileSizeHigh=0x0, nFileSizeLow=0x6070)) returned 1 [0058.310] MoveFileW (lpExistingFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.zh_CN.txt" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.zh_cn.txt"), lpNewFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.zh_CN.txt" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.zh_cn.txt")) returned 1 [0058.310] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.zh_TW.txt", nBufferLength=0x105, lpBuffer=0x31e0a4, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.zh_TW.txt", lpFilePart=0x0) returned 0x6b [0058.311] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.zh_TW.txt" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.zh_tw.txt"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x274 [0058.311] GetFileType (hFile=0x274) returned 0x1 [0058.311] GetFileType (hFile=0x274) returned 0x1 [0058.311] GetFileSize (in: hFile=0x274, lpFileSizeHigh=0x31e6a0 | out: lpFileSizeHigh=0x31e6a0*=0x0) returned 0x605a [0058.311] ReadFile (in: hFile=0x274, lpBuffer=0x283de58, nNumberOfBytesToRead=0x605a, lpNumberOfBytesRead=0x31e64c, lpOverlapped=0x0 | out: lpBuffer=0x283de58*, lpNumberOfBytesRead=0x31e64c*=0x605a, lpOverlapped=0x0) returned 1 [0058.328] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.zh_TW.txt", nBufferLength=0x105, lpBuffer=0x31e090, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.zh_TW.txt", lpFilePart=0x0) returned 0x6b [0058.328] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.zh_TW.txt" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.zh_tw.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x274 [0058.329] GetFileType (hFile=0x274) returned 0x1 [0058.329] GetFileType (hFile=0x274) returned 0x1 [0058.329] WriteFile (in: hFile=0x274, lpBuffer=0x26a7bfc*, nNumberOfBytesToWrite=0x6060, lpNumberOfBytesWritten=0x31e640, lpOverlapped=0x0 | out: lpBuffer=0x26a7bfc*, lpNumberOfBytesWritten=0x31e640*=0x6060, lpOverlapped=0x0) returned 1 [0058.331] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.zh_TW.txt", nBufferLength=0x105, lpBuffer=0x31e1c4, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.zh_TW.txt", lpFilePart=0x0) returned 0x6b [0058.331] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.zh_TW.txt", nBufferLength=0x105, lpBuffer=0x31e1c4, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.zh_TW.txt", lpFilePart=0x0) returned 0x6b [0058.331] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.zh_TW.txt" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.zh_tw.txt"), fInfoLevelId=0x0, lpFileInformation=0x31e6a0 | out: lpFileInformation=0x31e6a0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x93de7300, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7dcf09c0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x6393a20, ftLastWriteTime.dwHighDateTime=0x1d6eb7f, nFileSizeHigh=0x0, nFileSizeLow=0x6060)) returned 1 [0058.331] MoveFileW (lpExistingFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.zh_TW.txt" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.zh_tw.txt"), lpNewFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.zh_TW.txt" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.zh_tw.txt")) returned 1 [0058.331] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.zh_TW_STROKE.txt", nBufferLength=0x105, lpBuffer=0x31e0a4, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.zh_TW_STROKE.txt", lpFilePart=0x0) returned 0x72 [0058.332] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.zh_TW_STROKE.txt" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.zh_tw_stroke.txt"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x274 [0058.332] GetFileType (hFile=0x274) returned 0x1 [0058.332] GetFileType (hFile=0x274) returned 0x1 [0058.332] GetFileSize (in: hFile=0x274, lpFileSizeHigh=0x31e6a0 | out: lpFileSizeHigh=0x31e6a0*=0x0) returned 0x608c [0058.332] ReadFile (in: hFile=0x274, lpBuffer=0x26ae17c, nNumberOfBytesToRead=0x608c, lpNumberOfBytesRead=0x31e64c, lpOverlapped=0x0 | out: lpBuffer=0x26ae17c*, lpNumberOfBytesRead=0x31e64c*=0x608c, lpOverlapped=0x0) returned 1 [0058.349] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.zh_TW_STROKE.txt", nBufferLength=0x105, lpBuffer=0x31e090, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.zh_TW_STROKE.txt", lpFilePart=0x0) returned 0x72 [0058.349] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.zh_TW_STROKE.txt" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.zh_tw_stroke.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x274 [0058.350] GetFileType (hFile=0x274) returned 0x1 [0058.350] GetFileType (hFile=0x274) returned 0x1 [0058.350] WriteFile (in: hFile=0x274, lpBuffer=0x271938c*, nNumberOfBytesToWrite=0x6090, lpNumberOfBytesWritten=0x31e640, lpOverlapped=0x0 | out: lpBuffer=0x271938c*, lpNumberOfBytesWritten=0x31e640*=0x6090, lpOverlapped=0x0) returned 1 [0058.351] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.zh_TW_STROKE.txt", nBufferLength=0x105, lpBuffer=0x31e1c4, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.zh_TW_STROKE.txt", lpFilePart=0x0) returned 0x72 [0058.351] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.zh_TW_STROKE.txt", nBufferLength=0x105, lpBuffer=0x31e1c4, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.zh_TW_STROKE.txt", lpFilePart=0x0) returned 0x72 [0058.352] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.zh_TW_STROKE.txt" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.zh_tw_stroke.txt"), fInfoLevelId=0x0, lpFileInformation=0x31e6a0 | out: lpFileInformation=0x31e6a0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x93de7300, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7dcf09c0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x63b9b80, ftLastWriteTime.dwHighDateTime=0x1d6eb7f, nFileSizeHigh=0x0, nFileSizeLow=0x6090)) returned 1 [0058.352] MoveFileW (lpExistingFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.zh_TW_STROKE.txt" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.zh_tw_stroke.txt"), lpNewFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.zh_TW_STROKE.txt" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.zh_tw_stroke.txt")) returned 1 [0058.352] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers", nBufferLength=0x105, lpBuffer=0x31e1d4, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers", lpFilePart=0x0) returned 0x47 [0058.352] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\", nBufferLength=0x105, lpBuffer=0x31e1a8, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\", lpFilePart=0x0) returned 0x48 [0058.352] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\*", lpFindFileData=0x31e3f4 | out: lpFindFileData=0x31e3f4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7cfb2f60, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x7cfb2f60, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x7cfb2f60, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x381d40 [0058.352] FindNextFileW (in: hFindFile=0x381d40, lpFindFileData=0x31e404 | out: lpFindFileData=0x31e404*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7cfb2f60, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x7cfb2f60, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x7cfb2f60, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0058.352] FindNextFileW (in: hFindFile=0x381d40, lpFindFileData=0x31e404 | out: lpFindFileData=0x31e404*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7cfb2f60, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x7cfb2f60, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x7cfb2f60, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Proximity", cAlternateFileName="PROXIM~1")) returned 1 [0058.353] FindNextFileW (in: hFindFile=0x381d40, lpFindFileData=0x31e404 | out: lpFindFileData=0x31e404*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7cfb2f60, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x7cfb2f60, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x7cfb2f60, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Proximity", cAlternateFileName="PROXIM~1")) returned 0 [0058.353] FindClose (in: hFindFile=0x381d40 | out: hFindFile=0x381d40) returned 1 [0058.353] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers", nBufferLength=0x105, lpBuffer=0x31e1d4, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers", lpFilePart=0x0) returned 0x47 [0058.353] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\", nBufferLength=0x105, lpBuffer=0x31e1a8, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\", lpFilePart=0x0) returned 0x48 [0058.353] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\*", lpFindFileData=0x31e3f4 | out: lpFindFileData=0x31e3f4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7cfb2f60, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x7cfb2f60, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x7cfb2f60, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x381d40 [0058.353] FindNextFileW (in: hFindFile=0x381d40, lpFindFileData=0x31e404 | out: lpFindFileData=0x31e404*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7cfb2f60, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x7cfb2f60, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x7cfb2f60, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0058.353] FindNextFileW (in: hFindFile=0x381d40, lpFindFileData=0x31e404 | out: lpFindFileData=0x31e404*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7cfb2f60, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x7cfb2f60, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x7cfb2f60, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Proximity", cAlternateFileName="PROXIM~1")) returned 1 [0058.353] FindNextFileW (in: hFindFile=0x381d40, lpFindFileData=0x31e404 | out: lpFindFileData=0x31e404*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0058.353] FindClose (in: hFindFile=0x381d40 | out: hFindFile=0x381d40) returned 1 [0058.353] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity", nBufferLength=0x105, lpBuffer=0x31e15c, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity", lpFilePart=0x0) returned 0x51 [0058.353] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\", nBufferLength=0x105, lpBuffer=0x31e130, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\", lpFilePart=0x0) returned 0x52 [0058.354] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\*", lpFindFileData=0x31e37c | out: lpFindFileData=0x31e37c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7cfb2f60, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x7cfb2f60, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x7cfb2f60, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x381d40 [0058.354] FindNextFileW (in: hFindFile=0x381d40, lpFindFileData=0x31e38c | out: lpFindFileData=0x31e38c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7cfb2f60, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x7cfb2f60, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x7cfb2f60, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0058.354] FindNextFileW (in: hFindFile=0x381d40, lpFindFileData=0x31e38c | out: lpFindFileData=0x31e38c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7cfb2f60, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x7e414bc0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x7e414bc0, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="11.00", cAlternateFileName="")) returned 1 [0058.354] FindNextFileW (in: hFindFile=0x381d40, lpFindFileData=0x31e38c | out: lpFindFileData=0x31e38c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7cfb2f60, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x7e414bc0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x7e414bc0, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="11.00", cAlternateFileName="")) returned 0 [0058.354] FindClose (in: hFindFile=0x381d40 | out: hFindFile=0x381d40) returned 1 [0058.354] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity", nBufferLength=0x105, lpBuffer=0x31e15c, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity", lpFilePart=0x0) returned 0x51 [0058.354] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\", nBufferLength=0x105, lpBuffer=0x31e130, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\", lpFilePart=0x0) returned 0x52 [0058.354] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\*", lpFindFileData=0x31e37c | out: lpFindFileData=0x31e37c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7cfb2f60, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x7cfb2f60, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x7cfb2f60, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x381d40 [0058.354] FindNextFileW (in: hFindFile=0x381d40, lpFindFileData=0x31e38c | out: lpFindFileData=0x31e38c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7cfb2f60, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x7cfb2f60, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x7cfb2f60, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0058.355] FindNextFileW (in: hFindFile=0x381d40, lpFindFileData=0x31e38c | out: lpFindFileData=0x31e38c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7cfb2f60, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x7e414bc0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x7e414bc0, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="11.00", cAlternateFileName="")) returned 1 [0058.355] FindNextFileW (in: hFindFile=0x381d40, lpFindFileData=0x31e38c | out: lpFindFileData=0x31e38c*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0058.355] FindClose (in: hFindFile=0x381d40 | out: hFindFile=0x381d40) returned 1 [0058.355] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00", nBufferLength=0x105, lpBuffer=0x31e0e4, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00", lpFilePart=0x0) returned 0x57 [0058.355] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\", nBufferLength=0x105, lpBuffer=0x31e0b8, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\", lpFilePart=0x0) returned 0x58 [0058.355] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\*", lpFindFileData=0x31e304 | out: lpFindFileData=0x31e304*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7cfb2f60, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x7e414bc0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x7e414bc0, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x381d40 [0058.357] FindNextFileW (in: hFindFile=0x381d40, lpFindFileData=0x31e314 | out: lpFindFileData=0x31e314*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7cfb2f60, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x7e414bc0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x7e414bc0, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0058.357] FindNextFileW (in: hFindFile=0x381d40, lpFindFileData=0x31e314 | out: lpFindFileData=0x31e314*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x93de7300, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7e1b35c0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x93de7300, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x203800, dwReserved0=0x0, dwReserved1=0x0, cFileName="ara131.lex", cAlternateFileName="")) returned 1 [0058.357] FindNextFileW (in: hFindFile=0x381d40, lpFindFileData=0x31e314 | out: lpFindFileData=0x31e314*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x950fa000, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7e18d460, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x950fa000, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x7ff4, dwReserved0=0x0, dwReserved1=0x0, cFileName="ara32.clx", cAlternateFileName="")) returned 1 [0058.357] FindNextFileW (in: hFindFile=0x381d40, lpFindFileData=0x31e314 | out: lpFindFileData=0x31e314*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x93de7300, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7e18d460, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x93de7300, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x3cf0, dwReserved0=0x0, dwReserved1=0x0, cFileName="araphon.env", cAlternateFileName="")) returned 1 [0058.358] FindNextFileW (in: hFindFile=0x381d40, lpFindFileData=0x31e314 | out: lpFindFileData=0x31e314*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x93de7300, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7df2be60, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x93de7300, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x128c, dwReserved0=0x0, dwReserved1=0x0, cFileName="brt.fca", cAlternateFileName="")) returned 1 [0058.358] FindNextFileW (in: hFindFile=0x381d40, lpFindFileData=0x31e314 | out: lpFindFileData=0x31e314*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x93de7300, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7df2be60, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x93de7300, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0xc800, dwReserved0=0x0, dwReserved1=0x0, cFileName="brt.hyp", cAlternateFileName="")) returned 1 [0058.358] FindNextFileW (in: hFindFile=0x381d40, lpFindFileData=0x31e314 | out: lpFindFileData=0x31e314*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x93de7300, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7df51fc0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x93de7300, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x2d1d2, dwReserved0=0x0, dwReserved1=0x0, cFileName="brt04.hsp", cAlternateFileName="")) returned 1 [0058.358] FindNextFileW (in: hFindFile=0x381d40, lpFindFileData=0x31e314 | out: lpFindFileData=0x31e314*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x93de7300, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7df51fc0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x93de7300, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x8000, dwReserved0=0x0, dwReserved1=0x0, cFileName="brt32.clx", cAlternateFileName="")) returned 1 [0058.358] FindNextFileW (in: hFindFile=0x381d40, lpFindFileData=0x31e314 | out: lpFindFileData=0x31e314*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x950fa000, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7df9e280, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x950fa000, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x82800, dwReserved0=0x0, dwReserved1=0x0, cFileName="brt55.ths", cAlternateFileName="")) returned 1 [0058.358] FindNextFileW (in: hFindFile=0x381d40, lpFindFileData=0x31e314 | out: lpFindFileData=0x31e314*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x93de7300, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7ddfb360, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x93de7300, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x63c, dwReserved0=0x0, dwReserved1=0x0, cFileName="brz.fca", cAlternateFileName="")) returned 1 [0058.358] FindNextFileW (in: hFindFile=0x381d40, lpFindFileData=0x31e314 | out: lpFindFileData=0x31e314*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x950fa000, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7ddfb360, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x950fa000, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x800, dwReserved0=0x0, dwReserved1=0x0, cFileName="brz.hyp", cAlternateFileName="")) returned 1 [0058.358] FindNextFileW (in: hFindFile=0x381d40, lpFindFileData=0x31e314 | out: lpFindFileData=0x31e314*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x93de7300, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7de214c0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x93de7300, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x7fc9, dwReserved0=0x0, dwReserved1=0x0, cFileName="brz32.clx", cAlternateFileName="")) returned 1 [0058.358] FindNextFileW (in: hFindFile=0x381d40, lpFindFileData=0x31e314 | out: lpFindFileData=0x31e314*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x950fa000, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7ddfb360, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x950fa000, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x17df6, dwReserved0=0x0, dwReserved1=0x0, cFileName="brz40.hsp", cAlternateFileName="")) returned 1 [0058.359] FindNextFileW (in: hFindFile=0x381d40, lpFindFileData=0x31e314 | out: lpFindFileData=0x31e314*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x950fa000, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7e414bc0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x950fa000, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x17000, dwReserved0=0x0, dwReserved1=0x0, cFileName="bul.hyp", cAlternateFileName="")) returned 1 [0058.359] FindNextFileW (in: hFindFile=0x381d40, lpFindFileData=0x31e314 | out: lpFindFileData=0x31e314*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x93de7300, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7e414bc0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x93de7300, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x72000, dwReserved0=0x0, dwReserved1=0x0, cFileName="bul120.lex", cAlternateFileName="")) returned 1 [0058.359] FindNextFileW (in: hFindFile=0x381d40, lpFindFileData=0x31e314 | out: lpFindFileData=0x31e314*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x93de7300, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7e414bc0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x93de7300, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x7ffe, dwReserved0=0x0, dwReserved1=0x0, cFileName="bul32.clx", cAlternateFileName="")) returned 1 [0058.359] FindNextFileW (in: hFindFile=0x381d40, lpFindFileData=0x31e314 | out: lpFindFileData=0x31e314*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x93de7300, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7e414bc0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x93de7300, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x1430, dwReserved0=0x0, dwReserved1=0x0, cFileName="bulphon.env", cAlternateFileName="")) returned 1 [0058.359] FindNextFileW (in: hFindFile=0x381d40, lpFindFileData=0x31e314 | out: lpFindFileData=0x31e314*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x93de7300, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7df78120, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x93de7300, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x1240, dwReserved0=0x0, dwReserved1=0x0, cFileName="can.fca", cAlternateFileName="")) returned 1 [0058.359] FindNextFileW (in: hFindFile=0x381d40, lpFindFileData=0x31e314 | out: lpFindFileData=0x31e314*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x950fa000, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7df9e280, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x950fa000, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x1a400, dwReserved0=0x0, dwReserved1=0x0, cFileName="can.hyp", cAlternateFileName="")) returned 1 [0058.359] FindNextFileW (in: hFindFile=0x381d40, lpFindFileData=0x31e314 | out: lpFindFileData=0x31e314*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x93de7300, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7df51fc0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x93de7300, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0xa1c00, dwReserved0=0x0, dwReserved1=0x0, cFileName="can03.ths", cAlternateFileName="")) returned 1 [0058.359] FindNextFileW (in: hFindFile=0x381d40, lpFindFileData=0x31e314 | out: lpFindFileData=0x31e314*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x93de7300, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7df78120, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x93de7300, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x45c3d, dwReserved0=0x0, dwReserved1=0x0, cFileName="can129.hsp", cAlternateFileName="")) returned 1 [0058.359] FindNextFileW (in: hFindFile=0x381d40, lpFindFileData=0x31e314 | out: lpFindFileData=0x31e314*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x93de7300, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7df78120, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x93de7300, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x7ffe, dwReserved0=0x0, dwReserved1=0x0, cFileName="can32.clx", cAlternateFileName="")) returned 1 [0058.360] FindNextFileW (in: hFindFile=0x381d40, lpFindFileData=0x31e314 | out: lpFindFileData=0x31e314*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x93de7300, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7df05d00, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x93de7300, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x6f4, dwReserved0=0x0, dwReserved1=0x0, cFileName="cfr.fca", cAlternateFileName="")) returned 1 [0058.360] FindNextFileW (in: hFindFile=0x381d40, lpFindFileData=0x31e314 | out: lpFindFileData=0x31e314*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x93de7300, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7df05d00, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x93de7300, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x2000, dwReserved0=0x0, dwReserved1=0x0, cFileName="cfr.hyp", cAlternateFileName="")) returned 1 [0058.360] FindNextFileW (in: hFindFile=0x381d40, lpFindFileData=0x31e314 | out: lpFindFileData=0x31e314*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x93de7300, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7dedfba0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x93de7300, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x7ffe, dwReserved0=0x0, dwReserved1=0x0, cFileName="cfr32.clx", cAlternateFileName="")) returned 1 [0058.360] FindNextFileW (in: hFindFile=0x381d40, lpFindFileData=0x31e314 | out: lpFindFileData=0x31e314*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x950fa000, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7dedfba0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x950fa000, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x3a251, dwReserved0=0x0, dwReserved1=0x0, cFileName="cfr68.hsp", cAlternateFileName="")) returned 1 [0058.360] FindNextFileW (in: hFindFile=0x381d40, lpFindFileData=0x31e314 | out: lpFindFileData=0x31e314*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x950fa000, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7df05d00, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x950fa000, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x4c800, dwReserved0=0x0, dwReserved1=0x0, cFileName="cfr95.ths", cAlternateFileName="")) returned 1 [0058.360] FindNextFileW (in: hFindFile=0x381d40, lpFindFileData=0x31e314 | out: lpFindFileData=0x31e314*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x93de7300, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7e3eea60, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x93de7300, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x314, dwReserved0=0x0, dwReserved1=0x0, cFileName="ctl.fca", cAlternateFileName="")) returned 1 [0058.360] FindNextFileW (in: hFindFile=0x381d40, lpFindFileData=0x31e314 | out: lpFindFileData=0x31e314*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x93de7300, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7e3eea60, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x93de7300, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x2400, dwReserved0=0x0, dwReserved1=0x0, cFileName="ctl.hyp", cAlternateFileName="")) returned 1 [0058.360] FindNextFileW (in: hFindFile=0x381d40, lpFindFileData=0x31e314 | out: lpFindFileData=0x31e314*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x950fa000, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7e3eea60, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x950fa000, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x4589f, dwReserved0=0x0, dwReserved1=0x0, cFileName="ctl28.hsp", cAlternateFileName="")) returned 1 [0058.360] FindNextFileW (in: hFindFile=0x381d40, lpFindFileData=0x31e314 | out: lpFindFileData=0x31e314*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x93de7300, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7e3eea60, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x93de7300, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x7fff, dwReserved0=0x0, dwReserved1=0x0, cFileName="ctl32.clx", cAlternateFileName="")) returned 1 [0058.361] FindNextFileW (in: hFindFile=0x381d40, lpFindFileData=0x31e314 | out: lpFindFileData=0x31e314*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x93de7300, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7e167300, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x93de7300, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x2e0, dwReserved0=0x0, dwReserved1=0x0, cFileName="cze.fca", cAlternateFileName="")) returned 1 [0058.361] FindNextFileW (in: hFindFile=0x381d40, lpFindFileData=0x31e314 | out: lpFindFileData=0x31e314*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x93de7300, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7e167300, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x93de7300, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0xe000, dwReserved0=0x0, dwReserved1=0x0, cFileName="cze.hyp", cAlternateFileName="")) returned 1 [0058.361] FindNextFileW (in: hFindFile=0x381d40, lpFindFileData=0x31e314 | out: lpFindFileData=0x31e314*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x93de7300, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7e167300, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x93de7300, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x127204, dwReserved0=0x0, dwReserved1=0x0, cFileName="cze108.hsp", cAlternateFileName="")) returned 1 [0058.361] FindNextFileW (in: hFindFile=0x381d40, lpFindFileData=0x31e314 | out: lpFindFileData=0x31e314*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x93de7300, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7e18d460, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x93de7300, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x7fd1, dwReserved0=0x0, dwReserved1=0x0, cFileName="cze32.clx", cAlternateFileName="")) returned 1 [0058.361] FindNextFileW (in: hFindFile=0x381d40, lpFindFileData=0x31e314 | out: lpFindFileData=0x31e314*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x93de7300, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7dfc43e0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x93de7300, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x7c00, dwReserved0=0x0, dwReserved1=0x0, cFileName="dan.hyp", cAlternateFileName="")) returned 1 [0058.361] FindNextFileW (in: hFindFile=0x381d40, lpFindFileData=0x31e314 | out: lpFindFileData=0x31e314*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x93de7300, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7dfc43e0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x93de7300, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x7fac, dwReserved0=0x0, dwReserved1=0x0, cFileName="dan32.clx", cAlternateFileName="")) returned 1 [0058.362] FindNextFileW (in: hFindFile=0x381d40, lpFindFileData=0x31e314 | out: lpFindFileData=0x31e314*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x950fa000, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7dfc43e0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x950fa000, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x74c00, dwReserved0=0x0, dwReserved1=0x0, cFileName="dan45.lex", cAlternateFileName="")) returned 1 [0058.362] FindNextFileW (in: hFindFile=0x381d40, lpFindFileData=0x31e314 | out: lpFindFileData=0x31e314*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x950fa000, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7dfc43e0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x950fa000, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x5a800, dwReserved0=0x0, dwReserved1=0x0, cFileName="dan94.ths", cAlternateFileName="")) returned 1 [0058.362] FindNextFileW (in: hFindFile=0x381d40, lpFindFileData=0x31e314 | out: lpFindFileData=0x31e314*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x93de7300, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7dfc43e0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x93de7300, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0xaf9, dwReserved0=0x0, dwReserved1=0x0, cFileName="danphon.env", cAlternateFileName="")) returned 1 [0058.362] FindNextFileW (in: hFindFile=0x381d40, lpFindFileData=0x31e314 | out: lpFindFileData=0x31e314*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x950fa000, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7dc7e5a0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x950fa000, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x51c, dwReserved0=0x0, dwReserved1=0x0, cFileName="dut.fca", cAlternateFileName="")) returned 1 [0058.362] FindNextFileW (in: hFindFile=0x381d40, lpFindFileData=0x31e314 | out: lpFindFileData=0x31e314*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x93de7300, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7dc7e5a0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x93de7300, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x11c00, dwReserved0=0x0, dwReserved1=0x0, cFileName="dut.hyp", cAlternateFileName="")) returned 1 [0058.362] FindNextFileW (in: hFindFile=0x381d40, lpFindFileData=0x31e314 | out: lpFindFileData=0x31e314*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x950fa000, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7dc7e5a0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x950fa000, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x5c06a, dwReserved0=0x0, dwReserved1=0x0, cFileName="dut102.hsp", cAlternateFileName="")) returned 1 [0058.362] FindNextFileW (in: hFindFile=0x381d40, lpFindFileData=0x31e314 | out: lpFindFileData=0x31e314*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x950fa000, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7dc7e5a0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x950fa000, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x7ff4, dwReserved0=0x0, dwReserved1=0x0, cFileName="dut32.clx", cAlternateFileName="")) returned 1 [0058.362] FindNextFileW (in: hFindFile=0x381d40, lpFindFileData=0x31e314 | out: lpFindFileData=0x31e314*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x93de7300, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7dc7e5a0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x93de7300, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0xc3c00, dwReserved0=0x0, dwReserved1=0x0, cFileName="dut57.ths", cAlternateFileName="")) returned 1 [0058.363] FindNextFileW (in: hFindFile=0x381d40, lpFindFileData=0x31e314 | out: lpFindFileData=0x31e314*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x950fa000, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7df9e280, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x950fa000, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0xbc00, dwReserved0=0x0, dwReserved1=0x0, cFileName="eng.hyp", cAlternateFileName="")) returned 1 [0058.363] FindNextFileW (in: hFindFile=0x381d40, lpFindFileData=0x31e314 | out: lpFindFileData=0x31e314*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x950fa000, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7df9e280, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x950fa000, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x7fe5, dwReserved0=0x0, dwReserved1=0x0, cFileName="eng32.clx", cAlternateFileName="")) returned 1 [0058.363] FindNextFileW (in: hFindFile=0x381d40, lpFindFileData=0x31e314 | out: lpFindFileData=0x31e314*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x950fa000, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7df9e280, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x950fa000, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x9a3, dwReserved0=0x0, dwReserved1=0x0, cFileName="engphon.env", cAlternateFileName="")) returned 1 [0058.363] FindNextFileW (in: hFindFile=0x381d40, lpFindFileData=0x31e314 | out: lpFindFileData=0x31e314*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x950fa000, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7e11b040, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x950fa000, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x4000, dwReserved0=0x0, dwReserved1=0x0, cFileName="est.hyp", cAlternateFileName="")) returned 1 [0058.363] FindNextFileW (in: hFindFile=0x381d40, lpFindFileData=0x31e314 | out: lpFindFileData=0x31e314*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x950fa000, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7e11b040, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x950fa000, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x20f800, dwReserved0=0x0, dwReserved1=0x0, cFileName="est133.lex", cAlternateFileName="")) returned 1 [0058.363] FindNextFileW (in: hFindFile=0x381d40, lpFindFileData=0x31e314 | out: lpFindFileData=0x31e314*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x950fa000, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7e11b040, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x950fa000, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x7fec, dwReserved0=0x0, dwReserved1=0x0, cFileName="est32.clx", cAlternateFileName="")) returned 1 [0058.363] FindNextFileW (in: hFindFile=0x381d40, lpFindFileData=0x31e314 | out: lpFindFileData=0x31e314*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x93de7300, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7e1411a0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x93de7300, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x1029, dwReserved0=0x0, dwReserved1=0x0, cFileName="estphon.env", cAlternateFileName="")) returned 1 [0058.363] FindNextFileW (in: hFindFile=0x381d40, lpFindFileData=0x31e314 | out: lpFindFileData=0x31e314*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x93de7300, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7df2be60, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x93de7300, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x6800, dwReserved0=0x0, dwReserved1=0x0, cFileName="fin.hyp", cAlternateFileName="")) returned 1 [0058.363] FindNextFileW (in: hFindFile=0x381d40, lpFindFileData=0x31e314 | out: lpFindFileData=0x31e314*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x950fa000, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7df05d00, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x950fa000, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x7ffa, dwReserved0=0x0, dwReserved1=0x0, cFileName="fin32.clx", cAlternateFileName="")) returned 1 [0058.363] FindNextFileW (in: hFindFile=0x381d40, lpFindFileData=0x31e314 | out: lpFindFileData=0x31e314*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x950fa000, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7df2be60, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x950fa000, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0xa5400, dwReserved0=0x0, dwReserved1=0x0, cFileName="fin49.lex", cAlternateFileName="")) returned 1 [0058.364] FindNextFileW (in: hFindFile=0x381d40, lpFindFileData=0x31e314 | out: lpFindFileData=0x31e314*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x93de7300, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7df2be60, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x93de7300, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0xd4d, dwReserved0=0x0, dwReserved1=0x0, cFileName="finphon.env", cAlternateFileName="")) returned 1 [0058.364] FindNextFileW (in: hFindFile=0x381d40, lpFindFileData=0x31e314 | out: lpFindFileData=0x31e314*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x93de7300, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7df05d00, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x93de7300, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x6f4, dwReserved0=0x0, dwReserved1=0x0, cFileName="frn.fca", cAlternateFileName="")) returned 1 [0058.364] FindNextFileW (in: hFindFile=0x381d40, lpFindFileData=0x31e314 | out: lpFindFileData=0x31e314*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x93de7300, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7dedfba0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x93de7300, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x2000, dwReserved0=0x0, dwReserved1=0x0, cFileName="frn.hyp", cAlternateFileName="")) returned 1 [0058.364] FindNextFileW (in: hFindFile=0x381d40, lpFindFileData=0x31e314 | out: lpFindFileData=0x31e314*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x93de7300, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7df05d00, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x93de7300, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x44280, dwReserved0=0x0, dwReserved1=0x0, cFileName="frn21.hsp", cAlternateFileName="")) returned 1 [0058.364] FindNextFileW (in: hFindFile=0x381d40, lpFindFileData=0x31e314 | out: lpFindFileData=0x31e314*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x950fa000, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7dedfba0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x950fa000, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x7ff6, dwReserved0=0x0, dwReserved1=0x0, cFileName="frn32.clx", cAlternateFileName="")) returned 1 [0058.364] FindNextFileW (in: hFindFile=0x381d40, lpFindFileData=0x31e314 | out: lpFindFileData=0x31e314*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x93de7300, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7df05d00, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x93de7300, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x4c800, dwReserved0=0x0, dwReserved1=0x0, cFileName="frn93.ths", cAlternateFileName="")) returned 1 [0058.364] FindNextFileW (in: hFindFile=0x381d40, lpFindFileData=0x31e314 | out: lpFindFileData=0x31e314*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x950fa000, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7e0f4ee0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x950fa000, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x2a0, dwReserved0=0x0, dwReserved1=0x0, cFileName="gre.fca", cAlternateFileName="")) returned 1 [0058.364] FindNextFileW (in: hFindFile=0x381d40, lpFindFileData=0x31e314 | out: lpFindFileData=0x31e314*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x93de7300, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7e0f4ee0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x93de7300, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x800, dwReserved0=0x0, dwReserved1=0x0, cFileName="gre.hyp", cAlternateFileName="")) returned 1 [0058.364] FindNextFileW (in: hFindFile=0x381d40, lpFindFileData=0x31e314 | out: lpFindFileData=0x31e314*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x950fa000, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7e0f4ee0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x950fa000, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x48db5, dwReserved0=0x0, dwReserved1=0x0, cFileName="gre110.hsp", cAlternateFileName="")) returned 1 [0058.364] FindNextFileW (in: hFindFile=0x381d40, lpFindFileData=0x31e314 | out: lpFindFileData=0x31e314*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x93de7300, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7e0f4ee0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x93de7300, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x7fe1, dwReserved0=0x0, dwReserved1=0x0, cFileName="gre32.clx", cAlternateFileName="")) returned 1 [0058.364] FindNextFileW (in: hFindFile=0x381d40, lpFindFileData=0x31e314 | out: lpFindFileData=0x31e314*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x93de7300, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7dedfba0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x93de7300, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x59c, dwReserved0=0x0, dwReserved1=0x0, cFileName="grm.fca", cAlternateFileName="")) returned 1 [0058.365] FindNextFileW (in: hFindFile=0x381d40, lpFindFileData=0x31e314 | out: lpFindFileData=0x31e314*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x950fa000, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7dedfba0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x950fa000, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0xb400, dwReserved0=0x0, dwReserved1=0x0, cFileName="grm.hyp", cAlternateFileName="")) returned 1 [0058.365] FindNextFileW (in: hFindFile=0x381d40, lpFindFileData=0x31e314 | out: lpFindFileData=0x31e314*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x93de7300, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7de938e0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x93de7300, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x98af7, dwReserved0=0x0, dwReserved1=0x0, cFileName="grm104.hsp", cAlternateFileName="")) returned 1 [0058.365] FindNextFileW (in: hFindFile=0x381d40, lpFindFileData=0x31e314 | out: lpFindFileData=0x31e314*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x950fa000, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7dedfba0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x950fa000, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x8000, dwReserved0=0x0, dwReserved1=0x0, cFileName="grm32.clx", cAlternateFileName="")) returned 1 [0058.365] FindNextFileW (in: hFindFile=0x381d40, lpFindFileData=0x31e314 | out: lpFindFileData=0x31e314*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x950fa000, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7de938e0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x950fa000, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0xc0c00, dwReserved0=0x0, dwReserved1=0x0, cFileName="grm92.ths", cAlternateFileName="")) returned 1 [0058.365] FindNextFileW (in: hFindFile=0x381d40, lpFindFileData=0x31e314 | out: lpFindFileData=0x31e314*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x93de7300, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7e1411a0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x93de7300, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x270, dwReserved0=0x0, dwReserved1=0x0, cFileName="heb.fca", cAlternateFileName="")) returned 1 [0058.365] FindNextFileW (in: hFindFile=0x381d40, lpFindFileData=0x31e314 | out: lpFindFileData=0x31e314*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x93de7300, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7e1411a0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x93de7300, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x2800, dwReserved0=0x0, dwReserved1=0x0, cFileName="heb.hyp", cAlternateFileName="")) returned 1 [0058.365] FindNextFileW (in: hFindFile=0x381d40, lpFindFileData=0x31e314 | out: lpFindFileData=0x31e314*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x950fa000, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7e1411a0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x950fa000, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0xb47de, dwReserved0=0x0, dwReserved1=0x0, cFileName="heb134.hsp", cAlternateFileName="")) returned 1 [0058.366] FindNextFileW (in: hFindFile=0x381d40, lpFindFileData=0x31e314 | out: lpFindFileData=0x31e314*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x950fa000, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7e1411a0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x950fa000, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x7fff, dwReserved0=0x0, dwReserved1=0x0, cFileName="heb32.clx", cAlternateFileName="")) returned 1 [0058.366] FindNextFileW (in: hFindFile=0x381d40, lpFindFileData=0x31e314 | out: lpFindFileData=0x31e314*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x950fa000, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7e3c8900, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x950fa000, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x2800, dwReserved0=0x0, dwReserved1=0x0, cFileName="hrv.hyp", cAlternateFileName="")) returned 1 [0058.366] FindNextFileW (in: hFindFile=0x381d40, lpFindFileData=0x31e314 | out: lpFindFileData=0x31e314*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x950fa000, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7e3eea60, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x950fa000, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x97000, dwReserved0=0x0, dwReserved1=0x0, cFileName="hrv132.lex", cAlternateFileName="")) returned 1 [0058.367] FindNextFileW (in: hFindFile=0x381d40, lpFindFileData=0x31e314 | out: lpFindFileData=0x31e314*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x93de7300, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7e3eea60, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x93de7300, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x7ffe, dwReserved0=0x0, dwReserved1=0x0, cFileName="hrv32.clx", cAlternateFileName="")) returned 1 [0058.367] FindNextFileW (in: hFindFile=0x381d40, lpFindFileData=0x31e314 | out: lpFindFileData=0x31e314*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x93de7300, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7e1ff880, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x93de7300, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x1f21, dwReserved0=0x0, dwReserved1=0x0, cFileName="hrvphon.env", cAlternateFileName="")) returned 1 [0058.367] FindNextFileW (in: hFindFile=0x381d40, lpFindFileData=0x31e314 | out: lpFindFileData=0x31e314*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x950fa000, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7e0ced80, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x950fa000, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x45c, dwReserved0=0x0, dwReserved1=0x0, cFileName="hun.fca", cAlternateFileName="")) returned 1 [0058.367] FindNextFileW (in: hFindFile=0x381d40, lpFindFileData=0x31e314 | out: lpFindFileData=0x31e314*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x93de7300, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7e0f4ee0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x93de7300, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x1c000, dwReserved0=0x0, dwReserved1=0x0, cFileName="hun.hyp", cAlternateFileName="")) returned 1 [0058.367] FindNextFileW (in: hFindFile=0x381d40, lpFindFileData=0x31e314 | out: lpFindFileData=0x31e314*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x950fa000, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7e0ced80, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x950fa000, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x9eeb8, dwReserved0=0x0, dwReserved1=0x0, cFileName="hun109.hsp", cAlternateFileName="")) returned 1 [0058.367] FindNextFileW (in: hFindFile=0x381d40, lpFindFileData=0x31e314 | out: lpFindFileData=0x31e314*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x950fa000, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7e0f4ee0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x950fa000, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x7ff2, dwReserved0=0x0, dwReserved1=0x0, cFileName="hun32.clx", cAlternateFileName="")) returned 1 [0058.367] FindNextFileW (in: hFindFile=0x381d40, lpFindFileData=0x31e314 | out: lpFindFileData=0x31e314*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x950fa000, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7de6d780, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x950fa000, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x3ec, dwReserved0=0x0, dwReserved1=0x0, cFileName="itl.fca", cAlternateFileName="")) returned 1 [0058.367] FindNextFileW (in: hFindFile=0x381d40, lpFindFileData=0x31e314 | out: lpFindFileData=0x31e314*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x93de7300, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7de6d780, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x93de7300, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x1000, dwReserved0=0x0, dwReserved1=0x0, cFileName="itl.hyp", cAlternateFileName="")) returned 1 [0058.367] FindNextFileW (in: hFindFile=0x381d40, lpFindFileData=0x31e314 | out: lpFindFileData=0x31e314*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x950fa000, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7de6d780, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x950fa000, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x2efe4, dwReserved0=0x0, dwReserved1=0x0, cFileName="itl26.hsp", cAlternateFileName="")) returned 1 [0058.367] FindNextFileW (in: hFindFile=0x381d40, lpFindFileData=0x31e314 | out: lpFindFileData=0x31e314*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x950fa000, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7de6d780, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x950fa000, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x7ffb, dwReserved0=0x0, dwReserved1=0x0, cFileName="itl32.clx", cAlternateFileName="")) returned 1 [0058.368] FindNextFileW (in: hFindFile=0x381d40, lpFindFileData=0x31e314 | out: lpFindFileData=0x31e314*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x93de7300, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7de6d780, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x93de7300, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x2e000, dwReserved0=0x0, dwReserved1=0x0, cFileName="itl61.ths", cAlternateFileName="")) returned 1 [0058.368] FindNextFileW (in: hFindFile=0x381d40, lpFindFileData=0x31e314 | out: lpFindFileData=0x31e314*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x93de7300, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7e0ced80, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x93de7300, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x3400, dwReserved0=0x0, dwReserved1=0x0, cFileName="lav.hyp", cAlternateFileName="")) returned 1 [0058.368] FindNextFileW (in: hFindFile=0x381d40, lpFindFileData=0x31e314 | out: lpFindFileData=0x31e314*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x93de7300, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7e0a8c20, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x93de7300, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x2d000, dwReserved0=0x0, dwReserved1=0x0, cFileName="lav135.lex", cAlternateFileName="")) returned 1 [0058.368] FindNextFileW (in: hFindFile=0x381d40, lpFindFileData=0x31e314 | out: lpFindFileData=0x31e314*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x93de7300, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7e0ced80, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x93de7300, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x7ff2, dwReserved0=0x0, dwReserved1=0x0, cFileName="lav32.clx", cAlternateFileName="")) returned 1 [0058.368] FindNextFileW (in: hFindFile=0x381d40, lpFindFileData=0x31e314 | out: lpFindFileData=0x31e314*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x93de7300, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7e0ced80, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x93de7300, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x7ec, dwReserved0=0x0, dwReserved1=0x0, cFileName="lavphon.env", cAlternateFileName="")) returned 1 [0058.368] FindNextFileW (in: hFindFile=0x381d40, lpFindFileData=0x31e314 | out: lpFindFileData=0x31e314*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x93de7300, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7e0a8c20, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x93de7300, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x4000, dwReserved0=0x0, dwReserved1=0x0, cFileName="lit.hyp", cAlternateFileName="")) returned 1 [0058.368] FindNextFileW (in: hFindFile=0x381d40, lpFindFileData=0x31e314 | out: lpFindFileData=0x31e314*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x93de7300, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7e0a8c20, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x93de7300, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x73800, dwReserved0=0x0, dwReserved1=0x0, cFileName="lit136.lex", cAlternateFileName="")) returned 1 [0058.368] FindNextFileW (in: hFindFile=0x381d40, lpFindFileData=0x31e314 | out: lpFindFileData=0x31e314*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x93de7300, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7e0a8c20, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x93de7300, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x7ffe, dwReserved0=0x0, dwReserved1=0x0, cFileName="lit32.clx", cAlternateFileName="")) returned 1 [0058.368] FindNextFileW (in: hFindFile=0x381d40, lpFindFileData=0x31e314 | out: lpFindFileData=0x31e314*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x950fa000, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7e0a8c20, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x950fa000, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0xa58, dwReserved0=0x0, dwReserved1=0x0, cFileName="litphon.env", cAlternateFileName="")) returned 1 [0058.368] FindNextFileW (in: hFindFile=0x381d40, lpFindFileData=0x31e314 | out: lpFindFileData=0x31e314*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x93de7300, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7de47620, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x93de7300, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x47c, dwReserved0=0x0, dwReserved1=0x0, cFileName="nrw.fca", cAlternateFileName="")) returned 1 [0058.369] FindNextFileW (in: hFindFile=0x381d40, lpFindFileData=0x31e314 | out: lpFindFileData=0x31e314*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x950fa000, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7de47620, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x950fa000, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x7c00, dwReserved0=0x0, dwReserved1=0x0, cFileName="nrw.hyp", cAlternateFileName="")) returned 1 [0058.369] FindNextFileW (in: hFindFile=0x381d40, lpFindFileData=0x31e314 | out: lpFindFileData=0x31e314*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x950fa000, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7de6d780, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x950fa000, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x7ff1, dwReserved0=0x0, dwReserved1=0x0, cFileName="nrw32.clx", cAlternateFileName="")) returned 1 [0058.369] FindNextFileW (in: hFindFile=0x381d40, lpFindFileData=0x31e314 | out: lpFindFileData=0x31e314*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x950fa000, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7de6d780, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x950fa000, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x4669e, dwReserved0=0x0, dwReserved1=0x0, cFileName="nrw38.hsp", cAlternateFileName="")) returned 1 [0058.369] FindNextFileW (in: hFindFile=0x381d40, lpFindFileData=0x31e314 | out: lpFindFileData=0x31e314*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x93de7300, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7de47620, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x93de7300, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x57400, dwReserved0=0x0, dwReserved1=0x0, cFileName="nrw56.ths", cAlternateFileName="")) returned 1 [0058.369] FindNextFileW (in: hFindFile=0x381d40, lpFindFileData=0x31e314 | out: lpFindFileData=0x31e314*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x950fa000, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7de47620, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x950fa000, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x48c, dwReserved0=0x0, dwReserved1=0x0, cFileName="nyn.fca", cAlternateFileName="")) returned 1 [0058.369] FindNextFileW (in: hFindFile=0x381d40, lpFindFileData=0x31e314 | out: lpFindFileData=0x31e314*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x93de7300, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7de214c0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x93de7300, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x7000, dwReserved0=0x0, dwReserved1=0x0, cFileName="nyn.hyp", cAlternateFileName="")) returned 1 [0058.369] FindNextFileW (in: hFindFile=0x381d40, lpFindFileData=0x31e314 | out: lpFindFileData=0x31e314*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x950fa000, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7de214c0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x950fa000, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x3bfc, dwReserved0=0x0, dwReserved1=0x0, cFileName="nyn16.clx", cAlternateFileName="")) returned 1 [0058.369] FindNextFileW (in: hFindFile=0x381d40, lpFindFileData=0x31e314 | out: lpFindFileData=0x31e314*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x93de7300, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7de47620, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x93de7300, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x3b11d, dwReserved0=0x0, dwReserved1=0x0, cFileName="nyn47.hsp", cAlternateFileName="")) returned 1 [0058.369] FindNextFileW (in: hFindFile=0x381d40, lpFindFileData=0x31e314 | out: lpFindFileData=0x31e314*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x950fa000, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7e082ac0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x950fa000, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x3cc, dwReserved0=0x0, dwReserved1=0x0, cFileName="pol.fca", cAlternateFileName="")) returned 1 [0058.369] FindNextFileW (in: hFindFile=0x381d40, lpFindFileData=0x31e314 | out: lpFindFileData=0x31e314*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x93de7300, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7e082ac0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x93de7300, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x1d000, dwReserved0=0x0, dwReserved1=0x0, cFileName="pol.hyp", cAlternateFileName="")) returned 1 [0058.370] FindNextFileW (in: hFindFile=0x381d40, lpFindFileData=0x31e314 | out: lpFindFileData=0x31e314*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x950fa000, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7e0a8c20, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x950fa000, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0xafcef, dwReserved0=0x0, dwReserved1=0x0, cFileName="pol103.hsp", cAlternateFileName="")) returned 1 [0058.370] FindNextFileW (in: hFindFile=0x381d40, lpFindFileData=0x31e314 | out: lpFindFileData=0x31e314*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x93de7300, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7e082ac0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x93de7300, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x7ffe, dwReserved0=0x0, dwReserved1=0x0, cFileName="pol32.clx", cAlternateFileName="")) returned 1 [0058.370] FindNextFileW (in: hFindFile=0x381d40, lpFindFileData=0x31e314 | out: lpFindFileData=0x31e314*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x950fa000, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7de214c0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x950fa000, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x4a4, dwReserved0=0x0, dwReserved1=0x0, cFileName="prt.fca", cAlternateFileName="")) returned 1 [0058.370] FindNextFileW (in: hFindFile=0x381d40, lpFindFileData=0x31e314 | out: lpFindFileData=0x31e314*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x93de7300, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7de214c0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x93de7300, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x800, dwReserved0=0x0, dwReserved1=0x0, cFileName="prt.hyp", cAlternateFileName="")) returned 1 [0058.370] FindNextFileW (in: hFindFile=0x381d40, lpFindFileData=0x31e314 | out: lpFindFileData=0x31e314*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x950fa000, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7ddfb360, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x950fa000, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x7fec, dwReserved0=0x0, dwReserved1=0x0, cFileName="prt32.clx", cAlternateFileName="")) returned 1 [0058.370] FindNextFileW (in: hFindFile=0x381d40, lpFindFileData=0x31e314 | out: lpFindFileData=0x31e314*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x93de7300, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7de214c0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x93de7300, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x1766c, dwReserved0=0x0, dwReserved1=0x0, cFileName="prt39.hsp", cAlternateFileName="")) returned 1 [0058.370] FindNextFileW (in: hFindFile=0x381d40, lpFindFileData=0x31e314 | out: lpFindFileData=0x31e314*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x93de7300, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7e05c960, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x93de7300, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x4c00, dwReserved0=0x0, dwReserved1=0x0, cFileName="rum.hyp", cAlternateFileName="")) returned 1 [0058.371] FindNextFileW (in: hFindFile=0x381d40, lpFindFileData=0x31e314 | out: lpFindFileData=0x31e314*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x93de7300, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7e082ac0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x93de7300, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x9d800, dwReserved0=0x0, dwReserved1=0x0, cFileName="rum124.lex", cAlternateFileName="")) returned 1 [0058.371] FindNextFileW (in: hFindFile=0x381d40, lpFindFileData=0x31e314 | out: lpFindFileData=0x31e314*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x93de7300, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7e082ac0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x93de7300, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x7ff7, dwReserved0=0x0, dwReserved1=0x0, cFileName="rum32.clx", cAlternateFileName="")) returned 1 [0058.371] FindNextFileW (in: hFindFile=0x381d40, lpFindFileData=0x31e314 | out: lpFindFileData=0x31e314*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x93de7300, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7e05c960, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x93de7300, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x2478, dwReserved0=0x0, dwReserved1=0x0, cFileName="rumphon.env", cAlternateFileName="")) returned 1 [0058.371] FindNextFileW (in: hFindFile=0x381d40, lpFindFileData=0x31e314 | out: lpFindFileData=0x31e314*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x93de7300, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7e05c960, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x93de7300, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x2b8, dwReserved0=0x0, dwReserved1=0x0, cFileName="rus.fca", cAlternateFileName="")) returned 1 [0058.371] FindNextFileW (in: hFindFile=0x381d40, lpFindFileData=0x31e314 | out: lpFindFileData=0x31e314*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x950fa000, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7e05c960, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x950fa000, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x8000, dwReserved0=0x0, dwReserved1=0x0, cFileName="rus.hyp", cAlternateFileName="")) returned 1 [0058.371] FindNextFileW (in: hFindFile=0x381d40, lpFindFileData=0x31e314 | out: lpFindFileData=0x31e314*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x93de7300, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7e05c960, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x93de7300, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x70ad2, dwReserved0=0x0, dwReserved1=0x0, cFileName="rus101.hsp", cAlternateFileName="")) returned 1 [0058.371] FindNextFileW (in: hFindFile=0x381d40, lpFindFileData=0x31e314 | out: lpFindFileData=0x31e314*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x950fa000, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7e05c960, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x950fa000, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x8025, dwReserved0=0x0, dwReserved1=0x0, cFileName="rus32.clx", cAlternateFileName="")) returned 1 [0058.371] FindNextFileW (in: hFindFile=0x381d40, lpFindFileData=0x31e314 | out: lpFindFileData=0x31e314*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x93de7300, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7deb9a40, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x93de7300, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x59c, dwReserved0=0x0, dwReserved1=0x0, cFileName="sgr.fca", cAlternateFileName="")) returned 1 [0058.371] FindNextFileW (in: hFindFile=0x381d40, lpFindFileData=0x31e314 | out: lpFindFileData=0x31e314*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x950fa000, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7dedfba0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x950fa000, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0xc400, dwReserved0=0x0, dwReserved1=0x0, cFileName="sgr.hyp", cAlternateFileName="")) returned 1 [0058.371] FindNextFileW (in: hFindFile=0x381d40, lpFindFileData=0x31e314 | out: lpFindFileData=0x31e314*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x950fa000, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7deb9a40, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x950fa000, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0xb9e2b, dwReserved0=0x0, dwReserved1=0x0, cFileName="sgr105.hsp", cAlternateFileName="")) returned 1 [0058.371] FindNextFileW (in: hFindFile=0x381d40, lpFindFileData=0x31e314 | out: lpFindFileData=0x31e314*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x93de7300, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7dedfba0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x93de7300, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x7ffe, dwReserved0=0x0, dwReserved1=0x0, cFileName="sgr32.clx", cAlternateFileName="")) returned 1 [0058.371] FindNextFileW (in: hFindFile=0x381d40, lpFindFileData=0x31e314 | out: lpFindFileData=0x31e314*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x93de7300, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7deb9a40, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x93de7300, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0xc1000, dwReserved0=0x0, dwReserved1=0x0, cFileName="sgr96.ths", cAlternateFileName="")) returned 1 [0058.371] FindNextFileW (in: hFindFile=0x381d40, lpFindFileData=0x31e314 | out: lpFindFileData=0x31e314*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x93de7300, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7e036800, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x93de7300, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x2e0, dwReserved0=0x0, dwReserved1=0x0, cFileName="slo.fca", cAlternateFileName="")) returned 1 [0058.371] FindNextFileW (in: hFindFile=0x381d40, lpFindFileData=0x31e314 | out: lpFindFileData=0x31e314*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x93de7300, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7e036800, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x93de7300, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x5c00, dwReserved0=0x0, dwReserved1=0x0, cFileName="slo.hyp", cAlternateFileName="")) returned 1 [0058.371] FindNextFileW (in: hFindFile=0x381d40, lpFindFileData=0x31e314 | out: lpFindFileData=0x31e314*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x950fa000, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7e036800, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x950fa000, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x3bfc6, dwReserved0=0x0, dwReserved1=0x0, cFileName="slo113.hsp", cAlternateFileName="")) returned 1 [0058.371] FindNextFileW (in: hFindFile=0x381d40, lpFindFileData=0x31e314 | out: lpFindFileData=0x31e314*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x93de7300, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7e036800, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x93de7300, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x7ff9, dwReserved0=0x0, dwReserved1=0x0, cFileName="slo32.clx", cAlternateFileName="")) returned 1 [0058.371] FindNextFileW (in: hFindFile=0x381d40, lpFindFileData=0x31e314 | out: lpFindFileData=0x31e314*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x950fa000, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7e0106a0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x950fa000, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x1400, dwReserved0=0x0, dwReserved1=0x0, cFileName="slv.hyp", cAlternateFileName="")) returned 1 [0058.371] FindNextFileW (in: hFindFile=0x381d40, lpFindFileData=0x31e314 | out: lpFindFileData=0x31e314*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x950fa000, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7e036800, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x950fa000, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x51800, dwReserved0=0x0, dwReserved1=0x0, cFileName="slv137.lex", cAlternateFileName="")) returned 1 [0058.371] FindNextFileW (in: hFindFile=0x381d40, lpFindFileData=0x31e314 | out: lpFindFileData=0x31e314*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x950fa000, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7e036800, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x950fa000, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x7fff, dwReserved0=0x0, dwReserved1=0x0, cFileName="slv32.clx", cAlternateFileName="")) returned 1 [0058.371] FindNextFileW (in: hFindFile=0x381d40, lpFindFileData=0x31e314 | out: lpFindFileData=0x31e314*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x950fa000, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7e036800, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x950fa000, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x109f, dwReserved0=0x0, dwReserved1=0x0, cFileName="slvphon.env", cAlternateFileName="")) returned 1 [0058.371] FindNextFileW (in: hFindFile=0x381d40, lpFindFileData=0x31e314 | out: lpFindFileData=0x31e314*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x93de7300, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7dcf09c0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x93de7300, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x36c, dwReserved0=0x0, dwReserved1=0x0, cFileName="spn.fca", cAlternateFileName="")) returned 1 [0058.371] FindNextFileW (in: hFindFile=0x381d40, lpFindFileData=0x31e314 | out: lpFindFileData=0x31e314*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x93de7300, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7dcf09c0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x93de7300, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x1c00, dwReserved0=0x0, dwReserved1=0x0, cFileName="spn.hyp", cAlternateFileName="")) returned 1 [0058.372] FindNextFileW (in: hFindFile=0x381d40, lpFindFileData=0x31e314 | out: lpFindFileData=0x31e314*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x950fa000, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7dcca860, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x950fa000, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x33c91, dwReserved0=0x0, dwReserved1=0x0, cFileName="spn24.hsp", cAlternateFileName="")) returned 1 [0058.372] FindNextFileW (in: hFindFile=0x381d40, lpFindFileData=0x31e314 | out: lpFindFileData=0x31e314*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x93de7300, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7dcf09c0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x93de7300, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x7ffe, dwReserved0=0x0, dwReserved1=0x0, cFileName="spn32.clx", cAlternateFileName="")) returned 1 [0058.372] FindNextFileW (in: hFindFile=0x381d40, lpFindFileData=0x31e314 | out: lpFindFileData=0x31e314*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x93de7300, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7dcca860, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x93de7300, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x84800, dwReserved0=0x0, dwReserved1=0x0, cFileName="spn62.ths", cAlternateFileName="")) returned 1 [0058.372] FindNextFileW (in: hFindFile=0x381d40, lpFindFileData=0x31e314 | out: lpFindFileData=0x31e314*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x93de7300, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7dca4700, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x93de7300, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x38c, dwReserved0=0x0, dwReserved1=0x0, cFileName="swd.fca", cAlternateFileName="")) returned 1 [0058.372] FindNextFileW (in: hFindFile=0x381d40, lpFindFileData=0x31e314 | out: lpFindFileData=0x31e314*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x93de7300, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7dca4700, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x93de7300, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0xcc00, dwReserved0=0x0, dwReserved1=0x0, cFileName="swd.hyp", cAlternateFileName="")) returned 1 [0058.372] FindNextFileW (in: hFindFile=0x381d40, lpFindFileData=0x31e314 | out: lpFindFileData=0x31e314*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x93de7300, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7dca4700, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x93de7300, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x8000, dwReserved0=0x0, dwReserved1=0x0, cFileName="swd32.clx", cAlternateFileName="")) returned 1 [0058.372] FindNextFileW (in: hFindFile=0x381d40, lpFindFileData=0x31e314 | out: lpFindFileData=0x31e314*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x950fa000, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7dca4700, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x950fa000, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x821bd, dwReserved0=0x0, dwReserved1=0x0, cFileName="swd43.hsp", cAlternateFileName="")) returned 1 [0058.372] FindNextFileW (in: hFindFile=0x381d40, lpFindFileData=0x31e314 | out: lpFindFileData=0x31e314*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x93de7300, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7dcca860, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x93de7300, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x10f800, dwReserved0=0x0, dwReserved1=0x0, cFileName="swd58.ths", cAlternateFileName="")) returned 1 [0058.372] FindNextFileW (in: hFindFile=0x381d40, lpFindFileData=0x31e314 | out: lpFindFileData=0x31e314*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x93de7300, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7e0106a0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x93de7300, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x2c4, dwReserved0=0x0, dwReserved1=0x0, cFileName="tur.fca", cAlternateFileName="")) returned 1 [0058.372] FindNextFileW (in: hFindFile=0x381d40, lpFindFileData=0x31e314 | out: lpFindFileData=0x31e314*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x950fa000, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7e0106a0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x950fa000, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x800, dwReserved0=0x0, dwReserved1=0x0, cFileName="tur.hyp", cAlternateFileName="")) returned 1 [0058.372] FindNextFileW (in: hFindFile=0x381d40, lpFindFileData=0x31e314 | out: lpFindFileData=0x31e314*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x93de7300, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7e0106a0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x93de7300, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x72b36, dwReserved0=0x0, dwReserved1=0x0, cFileName="tur111.hsp", cAlternateFileName="")) returned 1 [0058.372] FindNextFileW (in: hFindFile=0x381d40, lpFindFileData=0x31e314 | out: lpFindFileData=0x31e314*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x93de7300, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7e0106a0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x93de7300, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x7ffc, dwReserved0=0x0, dwReserved1=0x0, cFileName="tur32.clx", cAlternateFileName="")) returned 1 [0058.372] FindNextFileW (in: hFindFile=0x381d40, lpFindFileData=0x31e314 | out: lpFindFileData=0x31e314*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x93de7300, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7df51fc0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x93de7300, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x123c, dwReserved0=0x0, dwReserved1=0x0, cFileName="usa.fca", cAlternateFileName="")) returned 1 [0058.372] FindNextFileW (in: hFindFile=0x381d40, lpFindFileData=0x31e314 | out: lpFindFileData=0x31e314*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x93de7300, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7df9e280, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x93de7300, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x2a6da, dwReserved0=0x0, dwReserved1=0x0, cFileName="usa03.hsp", cAlternateFileName="")) returned 1 [0058.372] FindNextFileW (in: hFindFile=0x381d40, lpFindFileData=0x31e314 | out: lpFindFileData=0x31e314*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x950fa000, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7df78120, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x950fa000, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0xa1c00, dwReserved0=0x0, dwReserved1=0x0, cFileName="usa03.ths", cAlternateFileName="")) returned 1 [0058.372] FindNextFileW (in: hFindFile=0x381d40, lpFindFileData=0x31e314 | out: lpFindFileData=0x31e314*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x950fa000, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7df78120, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x950fa000, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x15800, dwReserved0=0x0, dwReserved1=0x0, cFileName="usa37.hyp", cAlternateFileName="")) returned 1 [0058.372] FindNextFileW (in: hFindFile=0x381d40, lpFindFileData=0x31e314 | out: lpFindFileData=0x31e314*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0058.372] FindClose (in: hFindFile=0x381d40 | out: hFindFile=0x381d40) returned 1 [0058.373] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00", nBufferLength=0x105, lpBuffer=0x31e0e4, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00", lpFilePart=0x0) returned 0x57 [0058.373] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\", nBufferLength=0x105, lpBuffer=0x31e0b8, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\", lpFilePart=0x0) returned 0x58 [0058.373] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\Providers\\Proximity\\11.00\\*", lpFindFileData=0x31e304 | out: lpFindFileData=0x31e304*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7cfb2f60, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x7e414bc0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x7e414bc0, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x381d40 [0058.374] FindNextFileW (in: hFindFile=0x381d40, lpFindFileData=0x31e314 | out: lpFindFileData=0x31e314*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7cfb2f60, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x7e414bc0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x7e414bc0, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0058.374] FindNextFileW (in: hFindFile=0x381d40, lpFindFileData=0x31e314 | out: lpFindFileData=0x31e314*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x93de7300, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7e1b35c0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x93de7300, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x203800, dwReserved0=0x0, dwReserved1=0x0, cFileName="ara131.lex", cAlternateFileName="")) returned 1 [0058.374] FindNextFileW (in: hFindFile=0x381d40, lpFindFileData=0x31e314 | out: lpFindFileData=0x31e314*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x950fa000, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7e18d460, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x950fa000, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x7ff4, dwReserved0=0x0, dwReserved1=0x0, cFileName="ara32.clx", cAlternateFileName="")) returned 1 [0058.374] FindNextFileW (in: hFindFile=0x381d40, lpFindFileData=0x31e314 | out: lpFindFileData=0x31e314*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x93de7300, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7e18d460, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x93de7300, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x3cf0, dwReserved0=0x0, dwReserved1=0x0, cFileName="araphon.env", cAlternateFileName="")) returned 1 [0058.374] FindNextFileW (in: hFindFile=0x381d40, lpFindFileData=0x31e314 | out: lpFindFileData=0x31e314*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x93de7300, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7df2be60, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x93de7300, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x128c, dwReserved0=0x0, dwReserved1=0x0, cFileName="brt.fca", cAlternateFileName="")) returned 1 [0058.374] FindNextFileW (in: hFindFile=0x381d40, lpFindFileData=0x31e314 | out: lpFindFileData=0x31e314*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x93de7300, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7df2be60, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x93de7300, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0xc800, dwReserved0=0x0, dwReserved1=0x0, cFileName="brt.hyp", cAlternateFileName="")) returned 1 [0058.374] FindNextFileW (in: hFindFile=0x381d40, lpFindFileData=0x31e314 | out: lpFindFileData=0x31e314*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x93de7300, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7df51fc0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x93de7300, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x2d1d2, dwReserved0=0x0, dwReserved1=0x0, cFileName="brt04.hsp", cAlternateFileName="")) returned 1 [0058.374] FindNextFileW (in: hFindFile=0x381d40, lpFindFileData=0x31e314 | out: lpFindFileData=0x31e314*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x93de7300, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7df51fc0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x93de7300, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x8000, dwReserved0=0x0, dwReserved1=0x0, cFileName="brt32.clx", cAlternateFileName="")) returned 1 [0058.374] FindNextFileW (in: hFindFile=0x381d40, lpFindFileData=0x31e314 | out: lpFindFileData=0x31e314*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x950fa000, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7df9e280, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x950fa000, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x82800, dwReserved0=0x0, dwReserved1=0x0, cFileName="brt55.ths", cAlternateFileName="")) returned 1 [0058.374] FindNextFileW (in: hFindFile=0x381d40, lpFindFileData=0x31e314 | out: lpFindFileData=0x31e314*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x93de7300, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7ddfb360, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x93de7300, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x63c, dwReserved0=0x0, dwReserved1=0x0, cFileName="brz.fca", cAlternateFileName="")) returned 1 [0058.374] FindNextFileW (in: hFindFile=0x381d40, lpFindFileData=0x31e314 | out: lpFindFileData=0x31e314*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x950fa000, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7ddfb360, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x950fa000, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x800, dwReserved0=0x0, dwReserved1=0x0, cFileName="brz.hyp", cAlternateFileName="")) returned 1 [0058.374] FindNextFileW (in: hFindFile=0x381d40, lpFindFileData=0x31e314 | out: lpFindFileData=0x31e314*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x93de7300, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7de214c0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x93de7300, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x7fc9, dwReserved0=0x0, dwReserved1=0x0, cFileName="brz32.clx", cAlternateFileName="")) returned 1 [0058.374] FindNextFileW (in: hFindFile=0x381d40, lpFindFileData=0x31e314 | out: lpFindFileData=0x31e314*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x950fa000, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7ddfb360, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x950fa000, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x17df6, dwReserved0=0x0, dwReserved1=0x0, cFileName="brz40.hsp", cAlternateFileName="")) returned 1 [0058.375] FindNextFileW (in: hFindFile=0x381d40, lpFindFileData=0x31e314 | out: lpFindFileData=0x31e314*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x950fa000, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7e414bc0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x950fa000, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x17000, dwReserved0=0x0, dwReserved1=0x0, cFileName="bul.hyp", cAlternateFileName="")) returned 1 [0058.375] FindNextFileW (in: hFindFile=0x381d40, lpFindFileData=0x31e314 | out: lpFindFileData=0x31e314*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x93de7300, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7e414bc0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x93de7300, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x72000, dwReserved0=0x0, dwReserved1=0x0, cFileName="bul120.lex", cAlternateFileName="")) returned 1 [0058.375] FindNextFileW (in: hFindFile=0x381d40, lpFindFileData=0x31e314 | out: lpFindFileData=0x31e314*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x93de7300, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7e414bc0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x93de7300, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x7ffe, dwReserved0=0x0, dwReserved1=0x0, cFileName="bul32.clx", cAlternateFileName="")) returned 1 [0058.375] FindNextFileW (in: hFindFile=0x381d40, lpFindFileData=0x31e314 | out: lpFindFileData=0x31e314*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x93de7300, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7e414bc0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x93de7300, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x1430, dwReserved0=0x0, dwReserved1=0x0, cFileName="bulphon.env", cAlternateFileName="")) returned 1 [0058.375] FindNextFileW (in: hFindFile=0x381d40, lpFindFileData=0x31e314 | out: lpFindFileData=0x31e314*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x93de7300, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7df78120, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x93de7300, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x1240, dwReserved0=0x0, dwReserved1=0x0, cFileName="can.fca", cAlternateFileName="")) returned 1 [0058.375] FindNextFileW (in: hFindFile=0x381d40, lpFindFileData=0x31e314 | out: lpFindFileData=0x31e314*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x950fa000, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7df9e280, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x950fa000, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x1a400, dwReserved0=0x0, dwReserved1=0x0, cFileName="can.hyp", cAlternateFileName="")) returned 1 [0058.375] FindNextFileW (in: hFindFile=0x381d40, lpFindFileData=0x31e314 | out: lpFindFileData=0x31e314*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x93de7300, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7df51fc0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x93de7300, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0xa1c00, dwReserved0=0x0, dwReserved1=0x0, cFileName="can03.ths", cAlternateFileName="")) returned 1 [0058.375] FindNextFileW (in: hFindFile=0x381d40, lpFindFileData=0x31e314 | out: lpFindFileData=0x31e314*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x93de7300, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7df78120, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x93de7300, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x45c3d, dwReserved0=0x0, dwReserved1=0x0, cFileName="can129.hsp", cAlternateFileName="")) returned 1 [0058.375] FindNextFileW (in: hFindFile=0x381d40, lpFindFileData=0x31e314 | out: lpFindFileData=0x31e314*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x93de7300, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7df78120, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x93de7300, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x7ffe, dwReserved0=0x0, dwReserved1=0x0, cFileName="can32.clx", cAlternateFileName="")) returned 1 [0058.375] FindNextFileW (in: hFindFile=0x381d40, lpFindFileData=0x31e314 | out: lpFindFileData=0x31e314*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x93de7300, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7df05d00, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x93de7300, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x6f4, dwReserved0=0x0, dwReserved1=0x0, cFileName="cfr.fca", cAlternateFileName="")) returned 1 [0058.375] FindNextFileW (in: hFindFile=0x381d40, lpFindFileData=0x31e314 | out: lpFindFileData=0x31e314*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x93de7300, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7df05d00, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x93de7300, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x2000, dwReserved0=0x0, dwReserved1=0x0, cFileName="cfr.hyp", cAlternateFileName="")) returned 1 [0058.375] FindNextFileW (in: hFindFile=0x381d40, lpFindFileData=0x31e314 | out: lpFindFileData=0x31e314*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x93de7300, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7dedfba0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x93de7300, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x7ffe, dwReserved0=0x0, dwReserved1=0x0, cFileName="cfr32.clx", cAlternateFileName="")) returned 1 [0058.375] FindNextFileW (in: hFindFile=0x381d40, lpFindFileData=0x31e314 | out: lpFindFileData=0x31e314*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x950fa000, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7dedfba0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x950fa000, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x3a251, dwReserved0=0x0, dwReserved1=0x0, cFileName="cfr68.hsp", cAlternateFileName="")) returned 1 [0058.375] FindNextFileW (in: hFindFile=0x381d40, lpFindFileData=0x31e314 | out: lpFindFileData=0x31e314*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x950fa000, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7df05d00, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x950fa000, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x4c800, dwReserved0=0x0, dwReserved1=0x0, cFileName="cfr95.ths", cAlternateFileName="")) returned 1 [0058.375] FindNextFileW (in: hFindFile=0x381d40, lpFindFileData=0x31e314 | out: lpFindFileData=0x31e314*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x93de7300, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7e3eea60, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x93de7300, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x314, dwReserved0=0x0, dwReserved1=0x0, cFileName="ctl.fca", cAlternateFileName="")) returned 1 [0058.375] FindNextFileW (in: hFindFile=0x381d40, lpFindFileData=0x31e314 | out: lpFindFileData=0x31e314*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x93de7300, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7e3eea60, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x93de7300, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x2400, dwReserved0=0x0, dwReserved1=0x0, cFileName="ctl.hyp", cAlternateFileName="")) returned 1 [0058.375] FindNextFileW (in: hFindFile=0x381d40, lpFindFileData=0x31e314 | out: lpFindFileData=0x31e314*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x950fa000, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7e3eea60, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x950fa000, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x4589f, dwReserved0=0x0, dwReserved1=0x0, cFileName="ctl28.hsp", cAlternateFileName="")) returned 1 [0058.375] FindNextFileW (in: hFindFile=0x381d40, lpFindFileData=0x31e314 | out: lpFindFileData=0x31e314*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x93de7300, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7e3eea60, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x93de7300, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x7fff, dwReserved0=0x0, dwReserved1=0x0, cFileName="ctl32.clx", cAlternateFileName="")) returned 1 [0058.375] FindNextFileW (in: hFindFile=0x381d40, lpFindFileData=0x31e314 | out: lpFindFileData=0x31e314*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x93de7300, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7e167300, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x93de7300, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x2e0, dwReserved0=0x0, dwReserved1=0x0, cFileName="cze.fca", cAlternateFileName="")) returned 1 [0058.375] FindNextFileW (in: hFindFile=0x381d40, lpFindFileData=0x31e314 | out: lpFindFileData=0x31e314*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x93de7300, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7e167300, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x93de7300, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0xe000, dwReserved0=0x0, dwReserved1=0x0, cFileName="cze.hyp", cAlternateFileName="")) returned 1 [0058.375] FindNextFileW (in: hFindFile=0x381d40, lpFindFileData=0x31e314 | out: lpFindFileData=0x31e314*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x93de7300, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7e167300, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x93de7300, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x127204, dwReserved0=0x0, dwReserved1=0x0, cFileName="cze108.hsp", cAlternateFileName="")) returned 1 [0058.375] FindNextFileW (in: hFindFile=0x381d40, lpFindFileData=0x31e314 | out: lpFindFileData=0x31e314*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x93de7300, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7e18d460, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x93de7300, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x7fd1, dwReserved0=0x0, dwReserved1=0x0, cFileName="cze32.clx", cAlternateFileName="")) returned 1 [0058.376] FindNextFileW (in: hFindFile=0x381d40, lpFindFileData=0x31e314 | out: lpFindFileData=0x31e314*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x93de7300, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7dfc43e0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x93de7300, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x7c00, dwReserved0=0x0, dwReserved1=0x0, cFileName="dan.hyp", cAlternateFileName="")) returned 1 [0058.376] FindNextFileW (in: hFindFile=0x381d40, lpFindFileData=0x31e314 | out: lpFindFileData=0x31e314*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x93de7300, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7dfc43e0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x93de7300, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x7fac, dwReserved0=0x0, dwReserved1=0x0, cFileName="dan32.clx", cAlternateFileName="")) returned 1 [0058.376] FindNextFileW (in: hFindFile=0x381d40, lpFindFileData=0x31e314 | out: lpFindFileData=0x31e314*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x950fa000, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7dfc43e0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x950fa000, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x74c00, dwReserved0=0x0, dwReserved1=0x0, cFileName="dan45.lex", cAlternateFileName="")) returned 1 [0058.376] FindNextFileW (in: hFindFile=0x381d40, lpFindFileData=0x31e314 | out: lpFindFileData=0x31e314*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x950fa000, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7dfc43e0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x950fa000, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x5a800, dwReserved0=0x0, dwReserved1=0x0, cFileName="dan94.ths", cAlternateFileName="")) returned 1 [0058.376] FindNextFileW (in: hFindFile=0x381d40, lpFindFileData=0x31e314 | out: lpFindFileData=0x31e314*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x93de7300, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7dfc43e0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x93de7300, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0xaf9, dwReserved0=0x0, dwReserved1=0x0, cFileName="danphon.env", cAlternateFileName="")) returned 1 [0058.376] FindNextFileW (in: hFindFile=0x381d40, lpFindFileData=0x31e314 | out: lpFindFileData=0x31e314*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x950fa000, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7dc7e5a0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x950fa000, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x51c, dwReserved0=0x0, dwReserved1=0x0, cFileName="dut.fca", cAlternateFileName="")) returned 1 [0058.376] FindNextFileW (in: hFindFile=0x381d40, lpFindFileData=0x31e314 | out: lpFindFileData=0x31e314*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x93de7300, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7dc7e5a0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x93de7300, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x11c00, dwReserved0=0x0, dwReserved1=0x0, cFileName="dut.hyp", cAlternateFileName="")) returned 1 [0058.376] FindNextFileW (in: hFindFile=0x381d40, lpFindFileData=0x31e314 | out: lpFindFileData=0x31e314*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x950fa000, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7dc7e5a0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x950fa000, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x5c06a, dwReserved0=0x0, dwReserved1=0x0, cFileName="dut102.hsp", cAlternateFileName="")) returned 1 [0058.376] FindNextFileW (in: hFindFile=0x381d40, lpFindFileData=0x31e314 | out: lpFindFileData=0x31e314*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x950fa000, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7dc7e5a0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x950fa000, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x7ff4, dwReserved0=0x0, dwReserved1=0x0, cFileName="dut32.clx", cAlternateFileName="")) returned 1 [0058.376] FindNextFileW (in: hFindFile=0x381d40, lpFindFileData=0x31e314 | out: lpFindFileData=0x31e314*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x93de7300, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7dc7e5a0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x93de7300, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0xc3c00, dwReserved0=0x0, dwReserved1=0x0, cFileName="dut57.ths", cAlternateFileName="")) returned 1 [0058.376] FindNextFileW (in: hFindFile=0x381d40, lpFindFileData=0x31e314 | out: lpFindFileData=0x31e314*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x950fa000, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7df9e280, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x950fa000, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0xbc00, dwReserved0=0x0, dwReserved1=0x0, cFileName="eng.hyp", cAlternateFileName="")) returned 1 [0058.376] FindNextFileW (in: hFindFile=0x381d40, lpFindFileData=0x31e314 | out: lpFindFileData=0x31e314*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x950fa000, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7df9e280, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x950fa000, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x7fe5, dwReserved0=0x0, dwReserved1=0x0, cFileName="eng32.clx", cAlternateFileName="")) returned 1 [0058.376] FindNextFileW (in: hFindFile=0x381d40, lpFindFileData=0x31e314 | out: lpFindFileData=0x31e314*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x950fa000, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7df9e280, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x950fa000, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x9a3, dwReserved0=0x0, dwReserved1=0x0, cFileName="engphon.env", cAlternateFileName="")) returned 1 [0058.376] FindNextFileW (in: hFindFile=0x381d40, lpFindFileData=0x31e314 | out: lpFindFileData=0x31e314*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x950fa000, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7e11b040, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x950fa000, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x4000, dwReserved0=0x0, dwReserved1=0x0, cFileName="est.hyp", cAlternateFileName="")) returned 1 [0058.376] FindNextFileW (in: hFindFile=0x381d40, lpFindFileData=0x31e314 | out: lpFindFileData=0x31e314*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x950fa000, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7e11b040, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x950fa000, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x20f800, dwReserved0=0x0, dwReserved1=0x0, cFileName="est133.lex", cAlternateFileName="")) returned 1 [0058.376] FindNextFileW (in: hFindFile=0x381d40, lpFindFileData=0x31e314 | out: lpFindFileData=0x31e314*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x950fa000, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7e11b040, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x950fa000, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x7fec, dwReserved0=0x0, dwReserved1=0x0, cFileName="est32.clx", cAlternateFileName="")) returned 1 [0058.376] FindNextFileW (in: hFindFile=0x381d40, lpFindFileData=0x31e314 | out: lpFindFileData=0x31e314*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x93de7300, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7e1411a0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x93de7300, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x1029, dwReserved0=0x0, dwReserved1=0x0, cFileName="estphon.env", cAlternateFileName="")) returned 1 [0058.376] FindNextFileW (in: hFindFile=0x381d40, lpFindFileData=0x31e314 | out: lpFindFileData=0x31e314*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x93de7300, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7df2be60, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x93de7300, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x6800, dwReserved0=0x0, dwReserved1=0x0, cFileName="fin.hyp", cAlternateFileName="")) returned 1 [0058.376] FindNextFileW (in: hFindFile=0x381d40, lpFindFileData=0x31e314 | out: lpFindFileData=0x31e314*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x950fa000, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7df05d00, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x950fa000, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x7ffa, dwReserved0=0x0, dwReserved1=0x0, cFileName="fin32.clx", cAlternateFileName="")) returned 1 [0058.376] FindNextFileW (in: hFindFile=0x381d40, lpFindFileData=0x31e314 | out: lpFindFileData=0x31e314*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x950fa000, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7df2be60, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x950fa000, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0xa5400, dwReserved0=0x0, dwReserved1=0x0, cFileName="fin49.lex", cAlternateFileName="")) returned 1 [0058.376] FindNextFileW (in: hFindFile=0x381d40, lpFindFileData=0x31e314 | out: lpFindFileData=0x31e314*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x93de7300, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7df2be60, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x93de7300, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0xd4d, dwReserved0=0x0, dwReserved1=0x0, cFileName="finphon.env", cAlternateFileName="")) returned 1 [0058.376] FindNextFileW (in: hFindFile=0x381d40, lpFindFileData=0x31e314 | out: lpFindFileData=0x31e314*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x93de7300, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7df05d00, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x93de7300, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x6f4, dwReserved0=0x0, dwReserved1=0x0, cFileName="frn.fca", cAlternateFileName="")) returned 1 [0058.377] FindNextFileW (in: hFindFile=0x381d40, lpFindFileData=0x31e314 | out: lpFindFileData=0x31e314*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x93de7300, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7dedfba0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x93de7300, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x2000, dwReserved0=0x0, dwReserved1=0x0, cFileName="frn.hyp", cAlternateFileName="")) returned 1 [0058.377] FindNextFileW (in: hFindFile=0x381d40, lpFindFileData=0x31e314 | out: lpFindFileData=0x31e314*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x93de7300, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7df05d00, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x93de7300, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x44280, dwReserved0=0x0, dwReserved1=0x0, cFileName="frn21.hsp", cAlternateFileName="")) returned 1 [0058.377] FindNextFileW (in: hFindFile=0x381d40, lpFindFileData=0x31e314 | out: lpFindFileData=0x31e314*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x950fa000, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7dedfba0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x950fa000, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x7ff6, dwReserved0=0x0, dwReserved1=0x0, cFileName="frn32.clx", cAlternateFileName="")) returned 1 [0058.377] FindNextFileW (in: hFindFile=0x381d40, lpFindFileData=0x31e314 | out: lpFindFileData=0x31e314*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x93de7300, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7df05d00, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x93de7300, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x4c800, dwReserved0=0x0, dwReserved1=0x0, cFileName="frn93.ths", cAlternateFileName="")) returned 1 [0058.377] FindNextFileW (in: hFindFile=0x381d40, lpFindFileData=0x31e314 | out: lpFindFileData=0x31e314*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x950fa000, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7e0f4ee0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x950fa000, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x2a0, dwReserved0=0x0, dwReserved1=0x0, cFileName="gre.fca", cAlternateFileName="")) returned 1 [0058.377] FindNextFileW (in: hFindFile=0x381d40, lpFindFileData=0x31e314 | out: lpFindFileData=0x31e314*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x93de7300, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7e0f4ee0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x93de7300, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x800, dwReserved0=0x0, dwReserved1=0x0, cFileName="gre.hyp", cAlternateFileName="")) returned 1 [0058.377] FindNextFileW (in: hFindFile=0x381d40, lpFindFileData=0x31e314 | out: lpFindFileData=0x31e314*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x950fa000, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7e0f4ee0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x950fa000, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x48db5, dwReserved0=0x0, dwReserved1=0x0, cFileName="gre110.hsp", cAlternateFileName="")) returned 1 [0058.377] FindNextFileW (in: hFindFile=0x381d40, lpFindFileData=0x31e314 | out: lpFindFileData=0x31e314*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x93de7300, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7e0f4ee0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x93de7300, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x7fe1, dwReserved0=0x0, dwReserved1=0x0, cFileName="gre32.clx", cAlternateFileName="")) returned 1 [0058.377] FindNextFileW (in: hFindFile=0x381d40, lpFindFileData=0x31e314 | out: lpFindFileData=0x31e314*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x93de7300, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7dedfba0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x93de7300, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x59c, dwReserved0=0x0, dwReserved1=0x0, cFileName="grm.fca", cAlternateFileName="")) returned 1 [0058.377] FindNextFileW (in: hFindFile=0x381d40, lpFindFileData=0x31e314 | out: lpFindFileData=0x31e314*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x950fa000, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7dedfba0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x950fa000, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0xb400, dwReserved0=0x0, dwReserved1=0x0, cFileName="grm.hyp", cAlternateFileName="")) returned 1 [0058.377] FindNextFileW (in: hFindFile=0x381d40, lpFindFileData=0x31e314 | out: lpFindFileData=0x31e314*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x93de7300, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7de938e0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x93de7300, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x98af7, dwReserved0=0x0, dwReserved1=0x0, cFileName="grm104.hsp", cAlternateFileName="")) returned 1 [0058.377] FindNextFileW (in: hFindFile=0x381d40, lpFindFileData=0x31e314 | out: lpFindFileData=0x31e314*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x950fa000, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7dedfba0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x950fa000, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x8000, dwReserved0=0x0, dwReserved1=0x0, cFileName="grm32.clx", cAlternateFileName="")) returned 1 [0058.377] FindNextFileW (in: hFindFile=0x381d40, lpFindFileData=0x31e314 | out: lpFindFileData=0x31e314*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x950fa000, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7de938e0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x950fa000, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0xc0c00, dwReserved0=0x0, dwReserved1=0x0, cFileName="grm92.ths", cAlternateFileName="")) returned 1 [0058.377] FindNextFileW (in: hFindFile=0x381d40, lpFindFileData=0x31e314 | out: lpFindFileData=0x31e314*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x93de7300, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7e1411a0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x93de7300, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x270, dwReserved0=0x0, dwReserved1=0x0, cFileName="heb.fca", cAlternateFileName="")) returned 1 [0058.377] FindNextFileW (in: hFindFile=0x381d40, lpFindFileData=0x31e314 | out: lpFindFileData=0x31e314*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x93de7300, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7e1411a0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x93de7300, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x2800, dwReserved0=0x0, dwReserved1=0x0, cFileName="heb.hyp", cAlternateFileName="")) returned 1 [0058.377] FindNextFileW (in: hFindFile=0x381d40, lpFindFileData=0x31e314 | out: lpFindFileData=0x31e314*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x950fa000, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7e1411a0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x950fa000, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0xb47de, dwReserved0=0x0, dwReserved1=0x0, cFileName="heb134.hsp", cAlternateFileName="")) returned 1 [0058.377] FindNextFileW (in: hFindFile=0x381d40, lpFindFileData=0x31e314 | out: lpFindFileData=0x31e314*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x950fa000, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7e1411a0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x950fa000, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x7fff, dwReserved0=0x0, dwReserved1=0x0, cFileName="heb32.clx", cAlternateFileName="")) returned 1 [0058.377] FindNextFileW (in: hFindFile=0x381d40, lpFindFileData=0x31e314 | out: lpFindFileData=0x31e314*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x950fa000, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7e3c8900, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x950fa000, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x2800, dwReserved0=0x0, dwReserved1=0x0, cFileName="hrv.hyp", cAlternateFileName="")) returned 1 [0058.377] FindNextFileW (in: hFindFile=0x381d40, lpFindFileData=0x31e314 | out: lpFindFileData=0x31e314*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x950fa000, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7e3eea60, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x950fa000, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x97000, dwReserved0=0x0, dwReserved1=0x0, cFileName="hrv132.lex", cAlternateFileName="")) returned 1 [0058.377] FindNextFileW (in: hFindFile=0x381d40, lpFindFileData=0x31e314 | out: lpFindFileData=0x31e314*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x93de7300, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7e3eea60, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x93de7300, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x7ffe, dwReserved0=0x0, dwReserved1=0x0, cFileName="hrv32.clx", cAlternateFileName="")) returned 1 [0058.377] FindNextFileW (in: hFindFile=0x381d40, lpFindFileData=0x31e314 | out: lpFindFileData=0x31e314*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x93de7300, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7e1ff880, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x93de7300, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x1f21, dwReserved0=0x0, dwReserved1=0x0, cFileName="hrvphon.env", cAlternateFileName="")) returned 1 [0058.377] FindNextFileW (in: hFindFile=0x381d40, lpFindFileData=0x31e314 | out: lpFindFileData=0x31e314*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x950fa000, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7e0ced80, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x950fa000, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x45c, dwReserved0=0x0, dwReserved1=0x0, cFileName="hun.fca", cAlternateFileName="")) returned 1 [0058.378] FindNextFileW (in: hFindFile=0x381d40, lpFindFileData=0x31e314 | out: lpFindFileData=0x31e314*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x93de7300, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7e0f4ee0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x93de7300, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x1c000, dwReserved0=0x0, dwReserved1=0x0, cFileName="hun.hyp", cAlternateFileName="")) returned 1 [0058.378] FindNextFileW (in: hFindFile=0x381d40, lpFindFileData=0x31e314 | out: lpFindFileData=0x31e314*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x950fa000, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7e0ced80, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x950fa000, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x9eeb8, dwReserved0=0x0, dwReserved1=0x0, cFileName="hun109.hsp", cAlternateFileName="")) returned 1 [0058.378] FindNextFileW (in: hFindFile=0x381d40, lpFindFileData=0x31e314 | out: lpFindFileData=0x31e314*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x950fa000, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7e0f4ee0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x950fa000, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x7ff2, dwReserved0=0x0, dwReserved1=0x0, cFileName="hun32.clx", cAlternateFileName="")) returned 1 [0058.378] FindNextFileW (in: hFindFile=0x381d40, lpFindFileData=0x31e314 | out: lpFindFileData=0x31e314*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x950fa000, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7de6d780, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x950fa000, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x3ec, dwReserved0=0x0, dwReserved1=0x0, cFileName="itl.fca", cAlternateFileName="")) returned 1 [0058.378] FindNextFileW (in: hFindFile=0x381d40, lpFindFileData=0x31e314 | out: lpFindFileData=0x31e314*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x93de7300, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7de6d780, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x93de7300, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x1000, dwReserved0=0x0, dwReserved1=0x0, cFileName="itl.hyp", cAlternateFileName="")) returned 1 [0058.378] FindNextFileW (in: hFindFile=0x381d40, lpFindFileData=0x31e314 | out: lpFindFileData=0x31e314*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x950fa000, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7de6d780, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x950fa000, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x2efe4, dwReserved0=0x0, dwReserved1=0x0, cFileName="itl26.hsp", cAlternateFileName="")) returned 1 [0058.378] FindClose (in: hFindFile=0x381d40 | out: hFindFile=0x381d40) returned 1 [0058.379] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\SaslPrep", nBufferLength=0x105, lpBuffer=0x31e24c, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\SaslPrep", lpFilePart=0x0) returned 0x3a [0058.379] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\SaslPrep\\", nBufferLength=0x105, lpBuffer=0x31e220, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\SaslPrep\\", lpFilePart=0x0) returned 0x3b [0058.379] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\SaslPrep\\*", lpFindFileData=0x31e46c | out: lpFindFileData=0x31e46c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x81d5bd20, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x81d5bd20, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x81d5bd20, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x381d40 [0058.380] FindClose (in: hFindFile=0x381d40 | out: hFindFile=0x381d40) returned 1 [0058.380] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\SaslPrep", nBufferLength=0x105, lpBuffer=0x31e24c, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\SaslPrep", lpFilePart=0x0) returned 0x3a [0058.380] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\SaslPrep\\", nBufferLength=0x105, lpBuffer=0x31e220, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\SaslPrep\\", lpFilePart=0x0) returned 0x3b [0058.380] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\SaslPrep\\*", lpFindFileData=0x31e46c | out: lpFindFileData=0x31e46c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x81d5bd20, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x81d5bd20, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x81d5bd20, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x381d40 [0058.380] FindClose (in: hFindFile=0x381d40 | out: hFindFile=0x381d40) returned 1 [0058.380] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\TypeSupport", nBufferLength=0x105, lpBuffer=0x31e24c, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\TypeSupport", lpFilePart=0x0) returned 0x3d [0058.381] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\TypeSupport\\", nBufferLength=0x105, lpBuffer=0x31e220, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\TypeSupport\\", lpFilePart=0x0) returned 0x3e [0058.381] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\TypeSupport\\*", lpFindFileData=0x31e46c | out: lpFindFileData=0x31e46c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x833608a0, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x833608a0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x833608a0, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x381d40 [0058.387] FindClose (in: hFindFile=0x381d40 | out: hFindFile=0x381d40) returned 1 [0058.387] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\TypeSupport", nBufferLength=0x105, lpBuffer=0x31e24c, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\TypeSupport", lpFilePart=0x0) returned 0x3d [0058.387] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\TypeSupport\\", nBufferLength=0x105, lpBuffer=0x31e220, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\TypeSupport\\", lpFilePart=0x0) returned 0x3e [0058.387] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\TypeSupport\\*", lpFindFileData=0x31e46c | out: lpFindFileData=0x31e46c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x833608a0, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x833608a0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x833608a0, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x381d40 [0058.387] FindClose (in: hFindFile=0x381d40 | out: hFindFile=0x381d40) returned 1 [0058.387] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\TypeSupport\\Unicode", nBufferLength=0x105, lpBuffer=0x31e1d4, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\TypeSupport\\Unicode", lpFilePart=0x0) returned 0x45 [0058.387] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\TypeSupport\\Unicode\\", nBufferLength=0x105, lpBuffer=0x31e1a8, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\TypeSupport\\Unicode\\", lpFilePart=0x0) returned 0x46 [0058.387] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\TypeSupport\\Unicode\\*", lpFindFileData=0x31e3f4 | out: lpFindFileData=0x31e3f4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x833608a0, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x834dd660, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x834dd660, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x381d40 [0058.388] FindClose (in: hFindFile=0x381d40 | out: hFindFile=0x381d40) returned 1 [0058.388] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\TypeSupport\\Unicode", nBufferLength=0x105, lpBuffer=0x31e1d4, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\TypeSupport\\Unicode", lpFilePart=0x0) returned 0x45 [0058.388] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\TypeSupport\\Unicode\\", nBufferLength=0x105, lpBuffer=0x31e1a8, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\TypeSupport\\Unicode\\", lpFilePart=0x0) returned 0x46 [0058.388] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\TypeSupport\\Unicode\\*", lpFindFileData=0x31e3f4 | out: lpFindFileData=0x31e3f4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x833608a0, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x834dd660, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x834dd660, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x381d40 [0058.388] FindClose (in: hFindFile=0x381d40 | out: hFindFile=0x381d40) returned 1 [0058.388] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\TypeSupport\\Unicode\\ICU", nBufferLength=0x105, lpBuffer=0x31e15c, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\TypeSupport\\Unicode\\ICU", lpFilePart=0x0) returned 0x49 [0058.388] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\TypeSupport\\Unicode\\ICU\\", nBufferLength=0x105, lpBuffer=0x31e130, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\TypeSupport\\Unicode\\ICU\\", lpFilePart=0x0) returned 0x4a [0058.388] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\TypeSupport\\Unicode\\ICU\\*", lpFindFileData=0x31e37c | out: lpFindFileData=0x31e37c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x834dd660, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x838234a0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x838234a0, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x381d40 [0058.389] FindClose (in: hFindFile=0x381d40 | out: hFindFile=0x381d40) returned 1 [0058.389] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\TypeSupport\\Unicode\\ICU", nBufferLength=0x105, lpBuffer=0x31e15c, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\TypeSupport\\Unicode\\ICU", lpFilePart=0x0) returned 0x49 [0058.389] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\TypeSupport\\Unicode\\ICU\\", nBufferLength=0x105, lpBuffer=0x31e130, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\TypeSupport\\Unicode\\ICU\\", lpFilePart=0x0) returned 0x4a [0058.389] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\TypeSupport\\Unicode\\ICU\\*", lpFindFileData=0x31e37c | out: lpFindFileData=0x31e37c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x834dd660, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x838234a0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x838234a0, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x381d40 [0058.389] FindClose (in: hFindFile=0x381d40 | out: hFindFile=0x381d40) returned 1 [0058.389] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\TypeSupport\\Unicode\\Mappings", nBufferLength=0x105, lpBuffer=0x31e15c, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\TypeSupport\\Unicode\\Mappings", lpFilePart=0x0) returned 0x4e [0058.389] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\TypeSupport\\Unicode\\Mappings\\", nBufferLength=0x105, lpBuffer=0x31e130, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\TypeSupport\\Unicode\\Mappings\\", lpFilePart=0x0) returned 0x4f [0058.389] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\TypeSupport\\Unicode\\Mappings\\*", lpFindFileData=0x31e37c | out: lpFindFileData=0x31e37c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x833608a0, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x834450e0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x834450e0, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x381d40 [0058.389] FindClose (in: hFindFile=0x381d40 | out: hFindFile=0x381d40) returned 1 [0058.389] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\TypeSupport\\Unicode\\Mappings", nBufferLength=0x105, lpBuffer=0x31e15c, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\TypeSupport\\Unicode\\Mappings", lpFilePart=0x0) returned 0x4e [0058.389] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\TypeSupport\\Unicode\\Mappings\\", nBufferLength=0x105, lpBuffer=0x31e130, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\TypeSupport\\Unicode\\Mappings\\", lpFilePart=0x0) returned 0x4f [0058.390] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\TypeSupport\\Unicode\\Mappings\\*", lpFindFileData=0x31e37c | out: lpFindFileData=0x31e37c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x833608a0, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x834450e0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x834450e0, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x381d40 [0058.390] FindClose (in: hFindFile=0x381d40 | out: hFindFile=0x381d40) returned 1 [0058.390] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\TypeSupport\\Unicode\\Mappings\\Adobe", nBufferLength=0x105, lpBuffer=0x31e0e4, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\TypeSupport\\Unicode\\Mappings\\Adobe", lpFilePart=0x0) returned 0x54 [0058.390] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\TypeSupport\\Unicode\\Mappings\\Adobe\\", nBufferLength=0x105, lpBuffer=0x31e0b8, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\TypeSupport\\Unicode\\Mappings\\Adobe\\", lpFilePart=0x0) returned 0x55 [0058.390] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\TypeSupport\\Unicode\\Mappings\\Adobe\\*", lpFindFileData=0x31e304 | out: lpFindFileData=0x31e304*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x834450e0, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x83849600, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x83849600, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x381d40 [0058.392] FindClose (in: hFindFile=0x381d40 | out: hFindFile=0x381d40) returned 1 [0058.393] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\TypeSupport\\Unicode\\Mappings\\Adobe", nBufferLength=0x105, lpBuffer=0x31e0e4, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\TypeSupport\\Unicode\\Mappings\\Adobe", lpFilePart=0x0) returned 0x54 [0058.393] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\TypeSupport\\Unicode\\Mappings\\Adobe\\", nBufferLength=0x105, lpBuffer=0x31e0b8, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\TypeSupport\\Unicode\\Mappings\\Adobe\\", lpFilePart=0x0) returned 0x55 [0058.393] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\TypeSupport\\Unicode\\Mappings\\Adobe\\*", lpFindFileData=0x31e304 | out: lpFindFileData=0x31e304*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x834450e0, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x83849600, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x83849600, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x381d40 [0058.394] FindClose (in: hFindFile=0x381d40 | out: hFindFile=0x381d40) returned 1 [0058.394] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\TypeSupport\\Unicode\\Mappings\\Adobe\\HKSCS.txt", nBufferLength=0x105, lpBuffer=0x31dfb4, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\TypeSupport\\Unicode\\Mappings\\Adobe\\HKSCS.txt", lpFilePart=0x0) returned 0x5e [0058.394] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\TypeSupport\\Unicode\\Mappings\\Adobe\\HKSCS.txt" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\typesupport\\unicode\\mappings\\adobe\\hkscs.txt"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x274 [0058.396] GetFileType (hFile=0x274) returned 0x1 [0058.396] GetFileType (hFile=0x274) returned 0x1 [0058.396] GetFileSize (in: hFile=0x274, lpFileSizeHigh=0x31e5b0 | out: lpFileSizeHigh=0x31e5b0*=0x0) returned 0x5f76c [0058.397] ReadFile (in: hFile=0x274, lpBuffer=0x3909550, nNumberOfBytesToRead=0x5f76c, lpNumberOfBytesRead=0x31e55c, lpOverlapped=0x0 | out: lpBuffer=0x3909550*, lpNumberOfBytesRead=0x31e55c*=0x5f76c, lpOverlapped=0x0) returned 1 [0058.434] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\TypeSupport\\Unicode\\Mappings\\Adobe\\HKSCS.txt", nBufferLength=0x105, lpBuffer=0x31dfa0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\TypeSupport\\Unicode\\Mappings\\Adobe\\HKSCS.txt", lpFilePart=0x0) returned 0x5e [0058.434] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\TypeSupport\\Unicode\\Mappings\\Adobe\\HKSCS.txt" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\typesupport\\unicode\\mappings\\adobe\\hkscs.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x274 [0058.437] GetFileType (hFile=0x274) returned 0x1 [0058.437] GetFileType (hFile=0x274) returned 0x1 [0058.438] WriteFile (in: hFile=0x274, lpBuffer=0x36d8390*, nNumberOfBytesToWrite=0x5f770, lpNumberOfBytesWritten=0x31e550, lpOverlapped=0x0 | out: lpBuffer=0x36d8390*, lpNumberOfBytesWritten=0x31e550*=0x5f770, lpOverlapped=0x0) returned 1 [0058.446] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\TypeSupport\\Unicode\\Mappings\\Adobe\\HKSCS.txt", nBufferLength=0x105, lpBuffer=0x31e0d4, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\TypeSupport\\Unicode\\Mappings\\Adobe\\HKSCS.txt", lpFilePart=0x0) returned 0x5e [0058.446] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\TypeSupport\\Unicode\\Mappings\\Adobe\\HKSCS.txt", nBufferLength=0x105, lpBuffer=0x31e0d4, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\TypeSupport\\Unicode\\Mappings\\Adobe\\HKSCS.txt", lpFilePart=0x0) returned 0x5e [0058.446] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\TypeSupport\\Unicode\\Mappings\\Adobe\\HKSCS.txt" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\typesupport\\unicode\\mappings\\adobe\\hkscs.txt"), fInfoLevelId=0x0, lpFileInformation=0x31e5b0 | out: lpFileInformation=0x31e5b0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x950fa000, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x83849600, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x649e3c0, ftLastWriteTime.dwHighDateTime=0x1d6eb7f, nFileSizeHigh=0x0, nFileSizeLow=0x5f770)) returned 1 [0058.446] MoveFileW (lpExistingFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\TypeSupport\\Unicode\\Mappings\\Adobe\\HKSCS.txt" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\typesupport\\unicode\\mappings\\adobe\\hkscs.txt"), lpNewFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\TypeSupport\\Unicode\\Mappings\\Adobe\\HKSCS.txt" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\typesupport\\unicode\\mappings\\adobe\\hkscs.txt")) returned 1 [0058.446] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\TypeSupport\\Unicode\\Mappings\\Adobe\\Japanese83pv.txt", nBufferLength=0x105, lpBuffer=0x31dfb4, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\TypeSupport\\Unicode\\Mappings\\Adobe\\Japanese83pv.txt", lpFilePart=0x0) returned 0x65 [0058.446] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\TypeSupport\\Unicode\\Mappings\\Adobe\\Japanese83pv.txt" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\typesupport\\unicode\\mappings\\adobe\\japanese83pv.txt"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x274 [0058.447] GetFileType (hFile=0x274) returned 0x1 [0058.447] GetFileType (hFile=0x274) returned 0x1 [0058.447] GetFileSize (in: hFile=0x274, lpFileSizeHigh=0x31e5b0 | out: lpFileSizeHigh=0x31e5b0*=0x0) returned 0x3229c [0058.447] ReadFile (in: hFile=0x274, lpBuffer=0x3968cd8, nNumberOfBytesToRead=0x3229c, lpNumberOfBytesRead=0x31e55c, lpOverlapped=0x0 | out: lpBuffer=0x3968cd8*, lpNumberOfBytesRead=0x31e55c*=0x3229c, lpOverlapped=0x0) returned 1 [0058.497] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\TypeSupport\\Unicode\\Mappings\\Adobe\\Japanese83pv.txt", nBufferLength=0x105, lpBuffer=0x31dfa0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\TypeSupport\\Unicode\\Mappings\\Adobe\\Japanese83pv.txt", lpFilePart=0x0) returned 0x65 [0058.498] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e494) returned 1 [0058.498] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\TypeSupport\\Unicode\\Mappings\\Adobe\\Japanese83pv.txt" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\typesupport\\unicode\\mappings\\adobe\\japanese83pv.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x274 [0058.500] GetFileType (hFile=0x274) returned 0x1 [0058.500] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e490) returned 1 [0058.500] GetFileType (hFile=0x274) returned 0x1 [0058.500] WriteFile (in: hFile=0x274, lpBuffer=0x38005c0*, nNumberOfBytesToWrite=0x322a0, lpNumberOfBytesWritten=0x31e550, lpOverlapped=0x0 | out: lpBuffer=0x38005c0*, lpNumberOfBytesWritten=0x31e550*=0x322a0, lpOverlapped=0x0) returned 1 [0058.503] CloseHandle (hObject=0x274) returned 1 [0058.504] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\TypeSupport\\Unicode\\Mappings\\Adobe\\Japanese83pv.txt", nBufferLength=0x105, lpBuffer=0x31e0d4, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\TypeSupport\\Unicode\\Mappings\\Adobe\\Japanese83pv.txt", lpFilePart=0x0) returned 0x65 [0058.504] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\TypeSupport\\Unicode\\Mappings\\Adobe\\Japanese83pv.txt", nBufferLength=0x105, lpBuffer=0x31e0d4, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\TypeSupport\\Unicode\\Mappings\\Adobe\\Japanese83pv.txt", lpFilePart=0x0) returned 0x65 [0058.504] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e534) returned 1 [0058.504] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\TypeSupport\\Unicode\\Mappings\\Adobe\\Japanese83pv.txt" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\typesupport\\unicode\\mappings\\adobe\\japanese83pv.txt"), fInfoLevelId=0x0, lpFileInformation=0x31e5b0 | out: lpFileInformation=0x31e5b0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x950fa000, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x8346b240, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x6536940, ftLastWriteTime.dwHighDateTime=0x1d6eb7f, nFileSizeHigh=0x0, nFileSizeLow=0x322a0)) returned 1 [0058.504] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e530) returned 1 [0058.504] MoveFileW (lpExistingFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\TypeSupport\\Unicode\\Mappings\\Adobe\\Japanese83pv.txt" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\typesupport\\unicode\\mappings\\adobe\\japanese83pv.txt"), lpNewFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\TypeSupport\\Unicode\\Mappings\\Adobe\\Japanese83pv.txt" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\typesupport\\unicode\\mappings\\adobe\\japanese83pv.txt")) returned 1 [0058.504] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\TypeSupport\\Unicode\\Mappings\\Adobe\\JISX0208.txt", nBufferLength=0x105, lpBuffer=0x31dfb4, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\TypeSupport\\Unicode\\Mappings\\Adobe\\JISX0208.txt", lpFilePart=0x0) returned 0x61 [0058.504] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e4a8) returned 1 [0058.504] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\TypeSupport\\Unicode\\Mappings\\Adobe\\JISX0208.txt" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\typesupport\\unicode\\mappings\\adobe\\jisx0208.txt"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x274 [0058.504] GetFileType (hFile=0x274) returned 0x1 [0058.505] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e4a4) returned 1 [0058.505] GetFileType (hFile=0x274) returned 0x1 [0058.505] GetFileSize (in: hFile=0x274, lpFileSizeHigh=0x31e5b0 | out: lpFileSizeHigh=0x31e5b0*=0x0) returned 0x19ea7 [0058.505] ReadFile (in: hFile=0x274, lpBuffer=0x399af90, nNumberOfBytesToRead=0x19ea7, lpNumberOfBytesRead=0x31e55c, lpOverlapped=0x0 | out: lpBuffer=0x399af90*, lpNumberOfBytesRead=0x31e55c*=0x19ea7, lpOverlapped=0x0) returned 1 [0058.507] CloseHandle (hObject=0x274) returned 1 [0058.524] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\TypeSupport\\Unicode\\Mappings\\Adobe\\JISX0208.txt", nBufferLength=0x105, lpBuffer=0x31dfa0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\TypeSupport\\Unicode\\Mappings\\Adobe\\JISX0208.txt", lpFilePart=0x0) returned 0x61 [0058.524] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e494) returned 1 [0058.524] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\TypeSupport\\Unicode\\Mappings\\Adobe\\JISX0208.txt" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\typesupport\\unicode\\mappings\\adobe\\jisx0208.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x274 [0058.525] GetFileType (hFile=0x274) returned 0x1 [0058.525] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e490) returned 1 [0058.526] GetFileType (hFile=0x274) returned 0x1 [0058.526] WriteFile (in: hFile=0x274, lpBuffer=0x389a360*, nNumberOfBytesToWrite=0x19eb0, lpNumberOfBytesWritten=0x31e550, lpOverlapped=0x0 | out: lpBuffer=0x389a360*, lpNumberOfBytesWritten=0x31e550*=0x19eb0, lpOverlapped=0x0) returned 1 [0058.528] CloseHandle (hObject=0x274) returned 1 [0058.528] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\TypeSupport\\Unicode\\Mappings\\Adobe\\JISX0208.txt", nBufferLength=0x105, lpBuffer=0x31e0d4, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\TypeSupport\\Unicode\\Mappings\\Adobe\\JISX0208.txt", lpFilePart=0x0) returned 0x61 [0058.528] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\TypeSupport\\Unicode\\Mappings\\Adobe\\JISX0208.txt", nBufferLength=0x105, lpBuffer=0x31e0d4, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\TypeSupport\\Unicode\\Mappings\\Adobe\\JISX0208.txt", lpFilePart=0x0) returned 0x61 [0058.528] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e534) returned 1 [0058.528] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\TypeSupport\\Unicode\\Mappings\\Adobe\\JISX0208.txt" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\typesupport\\unicode\\mappings\\adobe\\jisx0208.txt"), fInfoLevelId=0x0, lpFileInformation=0x31e5b0 | out: lpFileInformation=0x31e5b0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x93de7300, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x83849600, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x655caa0, ftLastWriteTime.dwHighDateTime=0x1d6eb7f, nFileSizeHigh=0x0, nFileSizeLow=0x19eb0)) returned 1 [0058.528] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e530) returned 1 [0058.528] MoveFileW (lpExistingFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\TypeSupport\\Unicode\\Mappings\\Adobe\\JISX0208.txt" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\typesupport\\unicode\\mappings\\adobe\\jisx0208.txt"), lpNewFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\TypeSupport\\Unicode\\Mappings\\Adobe\\JISX0208.txt" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\typesupport\\unicode\\mappings\\adobe\\jisx0208.txt")) returned 1 [0058.529] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\TypeSupport\\Unicode\\Mappings\\Adobe\\JISX0213.txt", nBufferLength=0x105, lpBuffer=0x31dfb4, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\TypeSupport\\Unicode\\Mappings\\Adobe\\JISX0213.txt", lpFilePart=0x0) returned 0x61 [0058.529] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e4a8) returned 1 [0058.529] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\TypeSupport\\Unicode\\Mappings\\Adobe\\JISX0213.txt" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\typesupport\\unicode\\mappings\\adobe\\jisx0213.txt"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x274 [0058.529] GetFileType (hFile=0x274) returned 0x1 [0058.529] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e4a4) returned 1 [0058.529] GetFileType (hFile=0x274) returned 0x1 [0058.529] GetFileSize (in: hFile=0x274, lpFileSizeHigh=0x31e5b0 | out: lpFileSizeHigh=0x31e5b0*=0x0) returned 0x29ed0 [0058.530] ReadFile (in: hFile=0x274, lpBuffer=0x38b4230, nNumberOfBytesToRead=0x29ed0, lpNumberOfBytesRead=0x31e55c, lpOverlapped=0x0 | out: lpBuffer=0x38b4230*, lpNumberOfBytesRead=0x31e55c*=0x29ed0, lpOverlapped=0x0) returned 1 [0058.534] CloseHandle (hObject=0x274) returned 1 [0058.567] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\TypeSupport\\Unicode\\Mappings\\Adobe\\JISX0213.txt", nBufferLength=0x105, lpBuffer=0x31dfa0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\TypeSupport\\Unicode\\Mappings\\Adobe\\JISX0213.txt", lpFilePart=0x0) returned 0x61 [0058.567] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e494) returned 1 [0058.567] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\TypeSupport\\Unicode\\Mappings\\Adobe\\JISX0213.txt" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\typesupport\\unicode\\mappings\\adobe\\jisx0213.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x274 [0058.570] GetFileType (hFile=0x274) returned 0x1 [0058.570] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e490) returned 1 [0058.570] GetFileType (hFile=0x274) returned 0x1 [0058.570] WriteFile (in: hFile=0x274, lpBuffer=0x36c1050*, nNumberOfBytesToWrite=0x29ee0, lpNumberOfBytesWritten=0x31e550, lpOverlapped=0x0 | out: lpBuffer=0x36c1050*, lpNumberOfBytesWritten=0x31e550*=0x29ee0, lpOverlapped=0x0) returned 1 [0058.573] CloseHandle (hObject=0x274) returned 1 [0058.573] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\TypeSupport\\Unicode\\Mappings\\Adobe\\JISX0213.txt", nBufferLength=0x105, lpBuffer=0x31e0d4, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\TypeSupport\\Unicode\\Mappings\\Adobe\\JISX0213.txt", lpFilePart=0x0) returned 0x61 [0058.573] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\TypeSupport\\Unicode\\Mappings\\Adobe\\JISX0213.txt", nBufferLength=0x105, lpBuffer=0x31e0d4, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\TypeSupport\\Unicode\\Mappings\\Adobe\\JISX0213.txt", lpFilePart=0x0) returned 0x61 [0058.573] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e534) returned 1 [0058.573] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\TypeSupport\\Unicode\\Mappings\\Adobe\\JISX0213.txt" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\typesupport\\unicode\\mappings\\adobe\\jisx0213.txt"), fInfoLevelId=0x0, lpFileInformation=0x31e5b0 | out: lpFileInformation=0x31e5b0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x93de7300, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x83849600, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x65ceec0, ftLastWriteTime.dwHighDateTime=0x1d6eb7f, nFileSizeHigh=0x0, nFileSizeLow=0x29ee0)) returned 1 [0058.573] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e530) returned 1 [0058.573] MoveFileW (lpExistingFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\TypeSupport\\Unicode\\Mappings\\Adobe\\JISX0213.txt" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\typesupport\\unicode\\mappings\\adobe\\jisx0213.txt"), lpNewFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\TypeSupport\\Unicode\\Mappings\\Adobe\\JISX0213.txt" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\typesupport\\unicode\\mappings\\adobe\\jisx0213.txt")) returned 1 [0058.574] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\TypeSupport\\Unicode\\Mappings\\Adobe\\symbol.txt", nBufferLength=0x105, lpBuffer=0x31dfb4, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\TypeSupport\\Unicode\\Mappings\\Adobe\\symbol.txt", lpFilePart=0x0) returned 0x5f [0058.574] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e4a8) returned 1 [0058.574] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\TypeSupport\\Unicode\\Mappings\\Adobe\\symbol.txt" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\typesupport\\unicode\\mappings\\adobe\\symbol.txt"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x274 [0058.574] GetFileType (hFile=0x274) returned 0x1 [0058.574] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e4a4) returned 1 [0058.574] GetFileType (hFile=0x274) returned 0x1 [0058.574] GetFileSize (in: hFile=0x274, lpFileSizeHigh=0x31e5b0 | out: lpFileSizeHigh=0x31e5b0*=0x0) returned 0x288d [0058.574] ReadFile (in: hFile=0x274, lpBuffer=0x262cbc0, nNumberOfBytesToRead=0x288d, lpNumberOfBytesRead=0x31e55c, lpOverlapped=0x0 | out: lpBuffer=0x262cbc0*, lpNumberOfBytesRead=0x31e55c*=0x288d, lpOverlapped=0x0) returned 1 [0058.576] CloseHandle (hObject=0x274) returned 1 [0058.618] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\TypeSupport\\Unicode\\Mappings\\Adobe\\symbol.txt", nBufferLength=0x105, lpBuffer=0x31dfa0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\TypeSupport\\Unicode\\Mappings\\Adobe\\symbol.txt", lpFilePart=0x0) returned 0x5f [0058.618] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e494) returned 1 [0058.618] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\TypeSupport\\Unicode\\Mappings\\Adobe\\symbol.txt" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\typesupport\\unicode\\mappings\\adobe\\symbol.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x274 [0058.619] GetFileType (hFile=0x274) returned 0x1 [0058.619] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e490) returned 1 [0058.619] GetFileType (hFile=0x274) returned 0x1 [0058.619] WriteFile (in: hFile=0x274, lpBuffer=0x26865d4*, nNumberOfBytesToWrite=0x2890, lpNumberOfBytesWritten=0x31e550, lpOverlapped=0x0 | out: lpBuffer=0x26865d4*, lpNumberOfBytesWritten=0x31e550*=0x2890, lpOverlapped=0x0) returned 1 [0058.620] CloseHandle (hObject=0x274) returned 1 [0058.621] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\TypeSupport\\Unicode\\Mappings\\Adobe\\symbol.txt", nBufferLength=0x105, lpBuffer=0x31e0d4, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\TypeSupport\\Unicode\\Mappings\\Adobe\\symbol.txt", lpFilePart=0x0) returned 0x5f [0058.621] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\TypeSupport\\Unicode\\Mappings\\Adobe\\symbol.txt", nBufferLength=0x105, lpBuffer=0x31e0d4, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\TypeSupport\\Unicode\\Mappings\\Adobe\\symbol.txt", lpFilePart=0x0) returned 0x5f [0058.621] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e534) returned 1 [0058.621] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\TypeSupport\\Unicode\\Mappings\\Adobe\\symbol.txt" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\typesupport\\unicode\\mappings\\adobe\\symbol.txt"), fInfoLevelId=0x0, lpFileInformation=0x31e5b0 | out: lpFileInformation=0x31e5b0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x93de7300, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x834450e0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x66412e0, ftLastWriteTime.dwHighDateTime=0x1d6eb7f, nFileSizeHigh=0x0, nFileSizeLow=0x2890)) returned 1 [0058.621] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e530) returned 1 [0058.621] MoveFileW (lpExistingFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\TypeSupport\\Unicode\\Mappings\\Adobe\\symbol.txt" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\typesupport\\unicode\\mappings\\adobe\\symbol.txt"), lpNewFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\TypeSupport\\Unicode\\Mappings\\Adobe\\symbol.txt" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\typesupport\\unicode\\mappings\\adobe\\symbol.txt")) returned 1 [0058.621] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\TypeSupport\\Unicode\\Mappings\\Adobe\\zdingbat.txt", nBufferLength=0x105, lpBuffer=0x31dfb4, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\TypeSupport\\Unicode\\Mappings\\Adobe\\zdingbat.txt", lpFilePart=0x0) returned 0x61 [0058.621] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e4a8) returned 1 [0058.621] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\TypeSupport\\Unicode\\Mappings\\Adobe\\zdingbat.txt" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\typesupport\\unicode\\mappings\\adobe\\zdingbat.txt"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x274 [0058.621] GetFileType (hFile=0x274) returned 0x1 [0058.622] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e4a4) returned 1 [0058.622] GetFileType (hFile=0x274) returned 0x1 [0058.622] GetFileSize (in: hFile=0x274, lpFileSizeHigh=0x31e5b0 | out: lpFileSizeHigh=0x31e5b0*=0x0) returned 0x2e9c [0058.622] ReadFile (in: hFile=0x274, lpBuffer=0x26892c0, nNumberOfBytesToRead=0x2e9c, lpNumberOfBytesRead=0x31e55c, lpOverlapped=0x0 | out: lpBuffer=0x26892c0*, lpNumberOfBytesRead=0x31e55c*=0x2e9c, lpOverlapped=0x0) returned 1 [0058.623] CloseHandle (hObject=0x274) returned 1 [0058.637] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\TypeSupport\\Unicode\\Mappings\\Adobe\\zdingbat.txt", nBufferLength=0x105, lpBuffer=0x31dfa0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\TypeSupport\\Unicode\\Mappings\\Adobe\\zdingbat.txt", lpFilePart=0x0) returned 0x61 [0058.637] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e494) returned 1 [0058.637] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\TypeSupport\\Unicode\\Mappings\\Adobe\\zdingbat.txt" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\typesupport\\unicode\\mappings\\adobe\\zdingbat.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x274 [0058.638] GetFileType (hFile=0x274) returned 0x1 [0058.638] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e490) returned 1 [0058.638] GetFileType (hFile=0x274) returned 0x1 [0058.638] WriteFile (in: hFile=0x274, lpBuffer=0x26e49c4*, nNumberOfBytesToWrite=0x2ea0, lpNumberOfBytesWritten=0x31e550, lpOverlapped=0x0 | out: lpBuffer=0x26e49c4*, lpNumberOfBytesWritten=0x31e550*=0x2ea0, lpOverlapped=0x0) returned 1 [0058.639] CloseHandle (hObject=0x274) returned 1 [0058.639] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\TypeSupport\\Unicode\\Mappings\\Adobe\\zdingbat.txt", nBufferLength=0x105, lpBuffer=0x31e0d4, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\TypeSupport\\Unicode\\Mappings\\Adobe\\zdingbat.txt", lpFilePart=0x0) returned 0x61 [0058.639] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\TypeSupport\\Unicode\\Mappings\\Adobe\\zdingbat.txt", nBufferLength=0x105, lpBuffer=0x31e0d4, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\TypeSupport\\Unicode\\Mappings\\Adobe\\zdingbat.txt", lpFilePart=0x0) returned 0x61 [0058.639] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e534) returned 1 [0058.639] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\TypeSupport\\Unicode\\Mappings\\Adobe\\zdingbat.txt" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\typesupport\\unicode\\mappings\\adobe\\zdingbat.txt"), fInfoLevelId=0x0, lpFileInformation=0x31e5b0 | out: lpFileInformation=0x31e5b0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x93de7300, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x834450e0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x6667440, ftLastWriteTime.dwHighDateTime=0x1d6eb7f, nFileSizeHigh=0x0, nFileSizeLow=0x2ea0)) returned 1 [0058.640] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e530) returned 1 [0058.640] MoveFileW (lpExistingFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\TypeSupport\\Unicode\\Mappings\\Adobe\\zdingbat.txt" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\typesupport\\unicode\\mappings\\adobe\\zdingbat.txt"), lpNewFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\TypeSupport\\Unicode\\Mappings\\Adobe\\zdingbat.txt" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\typesupport\\unicode\\mappings\\adobe\\zdingbat.txt")) returned 1 [0058.640] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e5dc) returned 1 [0058.640] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\TypeSupport\\Unicode\\Mappings\\Mac", nBufferLength=0x105, lpBuffer=0x31e0e4, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\TypeSupport\\Unicode\\Mappings\\Mac", lpFilePart=0x0) returned 0x52 [0058.640] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\TypeSupport\\Unicode\\Mappings\\Mac\\", nBufferLength=0x105, lpBuffer=0x31e0b8, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\TypeSupport\\Unicode\\Mappings\\Mac\\", lpFilePart=0x0) returned 0x53 [0058.640] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\TypeSupport\\Unicode\\Mappings\\Mac\\*", lpFindFileData=0x31e304 | out: lpFindFileData=0x31e304*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x834450e0, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x83680580, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x83680580, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x381f40 [0058.642] FindNextFileW (in: hFindFile=0x381f40, lpFindFileData=0x31e314 | out: lpFindFileData=0x31e314*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x834450e0, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x83680580, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x83680580, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0058.642] FindNextFileW (in: hFindFile=0x381f40, lpFindFileData=0x31e314 | out: lpFindFileData=0x31e314*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x950fa000, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x83680580, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x950fa000, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x5ce8, dwReserved0=0x0, dwReserved1=0x0, cFileName="ARABIC.TXT", cAlternateFileName="")) returned 1 [0058.642] FindNextFileW (in: hFindFile=0x381f40, lpFindFileData=0x31e314 | out: lpFindFileData=0x31e314*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x93de7300, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x835037c0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x93de7300, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x3294, dwReserved0=0x0, dwReserved1=0x0, cFileName="CENTEURO.TXT", cAlternateFileName="")) returned 1 [0058.643] FindNextFileW (in: hFindFile=0x381f40, lpFindFileData=0x31e314 | out: lpFindFileData=0x31e314*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x950fa000, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x834b7500, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x950fa000, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x31aa5, dwReserved0=0x0, dwReserved1=0x0, cFileName="CHINSIMP.TXT", cAlternateFileName="")) returned 1 [0058.643] FindNextFileW (in: hFindFile=0x381f40, lpFindFileData=0x31e314 | out: lpFindFileData=0x31e314*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x93de7300, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x834b7500, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x93de7300, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x520b7, dwReserved0=0x0, dwReserved1=0x0, cFileName="CHINTRAD.TXT", cAlternateFileName="")) returned 1 [0058.643] FindNextFileW (in: hFindFile=0x381f40, lpFindFileData=0x31e314 | out: lpFindFileData=0x31e314*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x93de7300, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x834dd660, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x93de7300, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x4a08, dwReserved0=0x0, dwReserved1=0x0, cFileName="CORPCHAR.TXT", cAlternateFileName="")) returned 1 [0058.643] FindNextFileW (in: hFindFile=0x381f40, lpFindFileData=0x31e314 | out: lpFindFileData=0x31e314*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x950fa000, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x835037c0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x950fa000, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x34f0, dwReserved0=0x0, dwReserved1=0x0, cFileName="CROATIAN.TXT", cAlternateFileName="")) returned 1 [0058.643] FindNextFileW (in: hFindFile=0x381f40, lpFindFileData=0x31e314 | out: lpFindFileData=0x31e314*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x93de7300, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x835037c0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x93de7300, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x3478, dwReserved0=0x0, dwReserved1=0x0, cFileName="CYRILLIC.TXT", cAlternateFileName="")) returned 1 [0058.643] FindNextFileW (in: hFindFile=0x381f40, lpFindFileData=0x31e314 | out: lpFindFileData=0x31e314*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x950fa000, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x83529920, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x950fa000, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x6145, dwReserved0=0x0, dwReserved1=0x0, cFileName="FARSI.TXT", cAlternateFileName="")) returned 1 [0058.643] FindNextFileW (in: hFindFile=0x381f40, lpFindFileData=0x31e314 | out: lpFindFileData=0x31e314*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x93de7300, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x834dd660, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x93de7300, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x342b, dwReserved0=0x0, dwReserved1=0x0, cFileName="GREEK.TXT", cAlternateFileName="")) returned 1 [0058.643] FindNextFileW (in: hFindFile=0x381f40, lpFindFileData=0x31e314 | out: lpFindFileData=0x31e314*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x93de7300, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x83529920, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x93de7300, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x5d43, dwReserved0=0x0, dwReserved1=0x0, cFileName="HEBREW.TXT", cAlternateFileName="")) returned 1 [0058.644] FindNextFileW (in: hFindFile=0x381f40, lpFindFileData=0x31e314 | out: lpFindFileData=0x31e314*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x950fa000, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x835037c0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x950fa000, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x377c, dwReserved0=0x0, dwReserved1=0x0, cFileName="ICELAND.TXT", cAlternateFileName="")) returned 1 [0058.644] FindNextFileW (in: hFindFile=0x381f40, lpFindFileData=0x31e314 | out: lpFindFileData=0x31e314*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x93de7300, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x834b7500, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x93de7300, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x320dc, dwReserved0=0x0, dwReserved1=0x0, cFileName="JAPANESE.TXT", cAlternateFileName="")) returned 1 [0058.644] FindNextFileW (in: hFindFile=0x381f40, lpFindFileData=0x31e314 | out: lpFindFileData=0x31e314*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x93de7300, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x834913a0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x93de7300, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x591cf, dwReserved0=0x0, dwReserved1=0x0, cFileName="KOREAN.TXT", cAlternateFileName="")) returned 1 [0058.644] FindNextFileW (in: hFindFile=0x381f40, lpFindFileData=0x31e314 | out: lpFindFileData=0x31e314*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x950fa000, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x834b7500, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x950fa000, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x3857, dwReserved0=0x0, dwReserved1=0x0, cFileName="ROMAN.TXT", cAlternateFileName="")) returned 1 [0058.644] FindNextFileW (in: hFindFile=0x381f40, lpFindFileData=0x31e314 | out: lpFindFileData=0x31e314*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x93de7300, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x835037c0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x93de7300, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x39c8, dwReserved0=0x0, dwReserved1=0x0, cFileName="ROMANIAN.TXT", cAlternateFileName="")) returned 1 [0058.644] FindNextFileW (in: hFindFile=0x381f40, lpFindFileData=0x31e314 | out: lpFindFileData=0x31e314*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x93de7300, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x834450e0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x93de7300, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x3d73, dwReserved0=0x0, dwReserved1=0x0, cFileName="SYMBOL.TXT", cAlternateFileName="")) returned 1 [0058.644] FindNextFileW (in: hFindFile=0x381f40, lpFindFileData=0x31e314 | out: lpFindFileData=0x31e314*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x950fa000, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x83529920, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x950fa000, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x3bc5, dwReserved0=0x0, dwReserved1=0x0, cFileName="THAI.TXT", cAlternateFileName="")) returned 1 [0058.644] FindNextFileW (in: hFindFile=0x381f40, lpFindFileData=0x31e314 | out: lpFindFileData=0x31e314*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x950fa000, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x835037c0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x950fa000, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x3219, dwReserved0=0x0, dwReserved1=0x0, cFileName="TURKISH.TXT", cAlternateFileName="")) returned 1 [0058.645] FindNextFileW (in: hFindFile=0x381f40, lpFindFileData=0x31e314 | out: lpFindFileData=0x31e314*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x93de7300, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x834dd660, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x93de7300, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x121a, dwReserved0=0x0, dwReserved1=0x0, cFileName="UKRAINE.TXT", cAlternateFileName="")) returned 1 [0058.645] FindNextFileW (in: hFindFile=0x381f40, lpFindFileData=0x31e314 | out: lpFindFileData=0x31e314*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0058.645] FindClose (in: hFindFile=0x381f40 | out: hFindFile=0x381f40) returned 1 [0058.645] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e59c) returned 1 [0058.645] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e5a8) returned 1 [0058.646] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e5dc) returned 1 [0058.646] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\TypeSupport\\Unicode\\Mappings\\Mac", nBufferLength=0x105, lpBuffer=0x31e0e4, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\TypeSupport\\Unicode\\Mappings\\Mac", lpFilePart=0x0) returned 0x52 [0058.646] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\TypeSupport\\Unicode\\Mappings\\Mac\\", nBufferLength=0x105, lpBuffer=0x31e0b8, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\TypeSupport\\Unicode\\Mappings\\Mac\\", lpFilePart=0x0) returned 0x53 [0058.646] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\TypeSupport\\Unicode\\Mappings\\Mac\\*", lpFindFileData=0x31e304 | out: lpFindFileData=0x31e304*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x834450e0, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x83680580, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x83680580, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x381f40 [0058.647] FindNextFileW (in: hFindFile=0x381f40, lpFindFileData=0x31e314 | out: lpFindFileData=0x31e314*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x834450e0, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x83680580, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x83680580, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0058.647] FindNextFileW (in: hFindFile=0x381f40, lpFindFileData=0x31e314 | out: lpFindFileData=0x31e314*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x950fa000, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x83680580, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x950fa000, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x5ce8, dwReserved0=0x0, dwReserved1=0x0, cFileName="ARABIC.TXT", cAlternateFileName="")) returned 1 [0058.647] FindNextFileW (in: hFindFile=0x381f40, lpFindFileData=0x31e314 | out: lpFindFileData=0x31e314*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x93de7300, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x835037c0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x93de7300, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x3294, dwReserved0=0x0, dwReserved1=0x0, cFileName="CENTEURO.TXT", cAlternateFileName="")) returned 1 [0058.647] FindNextFileW (in: hFindFile=0x381f40, lpFindFileData=0x31e314 | out: lpFindFileData=0x31e314*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x950fa000, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x834b7500, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x950fa000, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x31aa5, dwReserved0=0x0, dwReserved1=0x0, cFileName="CHINSIMP.TXT", cAlternateFileName="")) returned 1 [0058.647] FindNextFileW (in: hFindFile=0x381f40, lpFindFileData=0x31e314 | out: lpFindFileData=0x31e314*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x93de7300, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x834b7500, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x93de7300, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x520b7, dwReserved0=0x0, dwReserved1=0x0, cFileName="CHINTRAD.TXT", cAlternateFileName="")) returned 1 [0058.647] FindNextFileW (in: hFindFile=0x381f40, lpFindFileData=0x31e314 | out: lpFindFileData=0x31e314*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x93de7300, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x834dd660, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x93de7300, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x4a08, dwReserved0=0x0, dwReserved1=0x0, cFileName="CORPCHAR.TXT", cAlternateFileName="")) returned 1 [0058.647] FindNextFileW (in: hFindFile=0x381f40, lpFindFileData=0x31e314 | out: lpFindFileData=0x31e314*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x950fa000, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x835037c0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x950fa000, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x34f0, dwReserved0=0x0, dwReserved1=0x0, cFileName="CROATIAN.TXT", cAlternateFileName="")) returned 1 [0058.648] FindNextFileW (in: hFindFile=0x381f40, lpFindFileData=0x31e314 | out: lpFindFileData=0x31e314*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x93de7300, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x835037c0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x93de7300, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x3478, dwReserved0=0x0, dwReserved1=0x0, cFileName="CYRILLIC.TXT", cAlternateFileName="")) returned 1 [0058.648] FindNextFileW (in: hFindFile=0x381f40, lpFindFileData=0x31e314 | out: lpFindFileData=0x31e314*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x950fa000, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x83529920, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x950fa000, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x6145, dwReserved0=0x0, dwReserved1=0x0, cFileName="FARSI.TXT", cAlternateFileName="")) returned 1 [0058.648] FindNextFileW (in: hFindFile=0x381f40, lpFindFileData=0x31e314 | out: lpFindFileData=0x31e314*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x93de7300, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x834dd660, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x93de7300, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x342b, dwReserved0=0x0, dwReserved1=0x0, cFileName="GREEK.TXT", cAlternateFileName="")) returned 1 [0058.648] FindNextFileW (in: hFindFile=0x381f40, lpFindFileData=0x31e314 | out: lpFindFileData=0x31e314*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x93de7300, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x83529920, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x93de7300, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x5d43, dwReserved0=0x0, dwReserved1=0x0, cFileName="HEBREW.TXT", cAlternateFileName="")) returned 1 [0058.648] FindNextFileW (in: hFindFile=0x381f40, lpFindFileData=0x31e314 | out: lpFindFileData=0x31e314*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x950fa000, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x835037c0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x950fa000, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x377c, dwReserved0=0x0, dwReserved1=0x0, cFileName="ICELAND.TXT", cAlternateFileName="")) returned 1 [0058.648] FindNextFileW (in: hFindFile=0x381f40, lpFindFileData=0x31e314 | out: lpFindFileData=0x31e314*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x93de7300, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x834b7500, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x93de7300, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x320dc, dwReserved0=0x0, dwReserved1=0x0, cFileName="JAPANESE.TXT", cAlternateFileName="")) returned 1 [0058.648] FindNextFileW (in: hFindFile=0x381f40, lpFindFileData=0x31e314 | out: lpFindFileData=0x31e314*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x93de7300, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x834913a0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x93de7300, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x591cf, dwReserved0=0x0, dwReserved1=0x0, cFileName="KOREAN.TXT", cAlternateFileName="")) returned 1 [0058.649] FindNextFileW (in: hFindFile=0x381f40, lpFindFileData=0x31e314 | out: lpFindFileData=0x31e314*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x950fa000, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x834b7500, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x950fa000, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x3857, dwReserved0=0x0, dwReserved1=0x0, cFileName="ROMAN.TXT", cAlternateFileName="")) returned 1 [0058.649] FindNextFileW (in: hFindFile=0x381f40, lpFindFileData=0x31e314 | out: lpFindFileData=0x31e314*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x93de7300, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x835037c0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x93de7300, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x39c8, dwReserved0=0x0, dwReserved1=0x0, cFileName="ROMANIAN.TXT", cAlternateFileName="")) returned 1 [0058.649] FindNextFileW (in: hFindFile=0x381f40, lpFindFileData=0x31e314 | out: lpFindFileData=0x31e314*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x93de7300, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x834450e0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x93de7300, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x3d73, dwReserved0=0x0, dwReserved1=0x0, cFileName="SYMBOL.TXT", cAlternateFileName="")) returned 1 [0058.649] FindNextFileW (in: hFindFile=0x381f40, lpFindFileData=0x31e314 | out: lpFindFileData=0x31e314*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x950fa000, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x83529920, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x950fa000, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x3bc5, dwReserved0=0x0, dwReserved1=0x0, cFileName="THAI.TXT", cAlternateFileName="")) returned 1 [0058.649] FindNextFileW (in: hFindFile=0x381f40, lpFindFileData=0x31e314 | out: lpFindFileData=0x31e314*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x950fa000, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x835037c0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x950fa000, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x3219, dwReserved0=0x0, dwReserved1=0x0, cFileName="TURKISH.TXT", cAlternateFileName="")) returned 1 [0058.649] FindNextFileW (in: hFindFile=0x381f40, lpFindFileData=0x31e314 | out: lpFindFileData=0x31e314*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x93de7300, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x834dd660, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x93de7300, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x121a, dwReserved0=0x0, dwReserved1=0x0, cFileName="UKRAINE.TXT", cAlternateFileName="")) returned 1 [0058.650] FindNextFileW (in: hFindFile=0x381f40, lpFindFileData=0x31e314 | out: lpFindFileData=0x31e314*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x93de7300, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x834dd660, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x93de7300, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x121a, dwReserved0=0x0, dwReserved1=0x0, cFileName="UKRAINE.TXT", cAlternateFileName="")) returned 0 [0058.650] FindClose (in: hFindFile=0x381f40 | out: hFindFile=0x381f40) returned 1 [0058.650] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e59c) returned 1 [0058.650] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e5a8) returned 1 [0058.650] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e5dc) returned 1 [0058.650] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\TypeSupport\\Unicode\\Mappings\\win", nBufferLength=0x105, lpBuffer=0x31e0e4, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\TypeSupport\\Unicode\\Mappings\\win", lpFilePart=0x0) returned 0x52 [0058.650] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\TypeSupport\\Unicode\\Mappings\\win\\", nBufferLength=0x105, lpBuffer=0x31e0b8, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\TypeSupport\\Unicode\\Mappings\\win\\", lpFilePart=0x0) returned 0x53 [0058.651] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\TypeSupport\\Unicode\\Mappings\\win\\*", lpFindFileData=0x31e304 | out: lpFindFileData=0x31e304*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x833608a0, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x83680580, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x83680580, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x381f40 [0058.653] FindNextFileW (in: hFindFile=0x381f40, lpFindFileData=0x31e314 | out: lpFindFileData=0x31e314*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x833608a0, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x83680580, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x83680580, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0058.653] FindNextFileW (in: hFindFile=0x381f40, lpFindFileData=0x31e314 | out: lpFindFileData=0x31e314*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x93de7300, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x834450e0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x93de7300, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x2664, dwReserved0=0x0, dwReserved1=0x0, cFileName="CP1250.TXT", cAlternateFileName="")) returned 1 [0058.653] FindNextFileW (in: hFindFile=0x381f40, lpFindFileData=0x31e314 | out: lpFindFileData=0x31e314*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x93de7300, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x83386a00, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x93de7300, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x251f, dwReserved0=0x0, dwReserved1=0x0, cFileName="CP1251.TXT", cAlternateFileName="")) returned 1 [0058.653] FindNextFileW (in: hFindFile=0x381f40, lpFindFileData=0x31e314 | out: lpFindFileData=0x31e314*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x950fa000, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x833608a0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x950fa000, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x25b5, dwReserved0=0x0, dwReserved1=0x0, cFileName="CP1252.TXT", cAlternateFileName="")) returned 1 [0058.653] FindNextFileW (in: hFindFile=0x381f40, lpFindFileData=0x31e314 | out: lpFindFileData=0x31e314*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x93de7300, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x833608a0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x93de7300, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x2414, dwReserved0=0x0, dwReserved1=0x0, cFileName="CP1253.TXT", cAlternateFileName="")) returned 1 [0058.653] FindNextFileW (in: hFindFile=0x381f40, lpFindFileData=0x31e314 | out: lpFindFileData=0x31e314*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x950fa000, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x833608a0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x950fa000, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x25ac, dwReserved0=0x0, dwReserved1=0x0, cFileName="CP1254.TXT", cAlternateFileName="")) returned 1 [0058.653] FindNextFileW (in: hFindFile=0x381f40, lpFindFileData=0x31e314 | out: lpFindFileData=0x31e314*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x93de7300, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x835037c0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x93de7300, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x219a, dwReserved0=0x0, dwReserved1=0x0, cFileName="CP1255.TXT", cAlternateFileName="")) returned 1 [0058.654] FindNextFileW (in: hFindFile=0x381f40, lpFindFileData=0x31e314 | out: lpFindFileData=0x31e314*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x93de7300, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x83680580, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x93de7300, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x22fb, dwReserved0=0x0, dwReserved1=0x0, cFileName="CP1256.TXT", cAlternateFileName="")) returned 1 [0058.654] FindNextFileW (in: hFindFile=0x381f40, lpFindFileData=0x31e314 | out: lpFindFileData=0x31e314*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x950fa000, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x833608a0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x950fa000, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x252c, dwReserved0=0x0, dwReserved1=0x0, cFileName="CP1257.TXT", cAlternateFileName="")) returned 1 [0058.654] FindNextFileW (in: hFindFile=0x381f40, lpFindFileData=0x31e314 | out: lpFindFileData=0x31e314*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x93de7300, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x833608a0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x93de7300, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x2522, dwReserved0=0x0, dwReserved1=0x0, cFileName="CP1258.TXT", cAlternateFileName="")) returned 1 [0058.654] FindNextFileW (in: hFindFile=0x381f40, lpFindFileData=0x31e314 | out: lpFindFileData=0x31e314*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x950fa000, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x835037c0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x950fa000, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x2221, dwReserved0=0x0, dwReserved1=0x0, cFileName="CP874.TXT", cAlternateFileName="")) returned 1 [0058.654] FindNextFileW (in: hFindFile=0x381f40, lpFindFileData=0x31e314 | out: lpFindFileData=0x31e314*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x93de7300, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x8346b240, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x93de7300, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x4a0f2, dwReserved0=0x0, dwReserved1=0x0, cFileName="CP932.TXT", cAlternateFileName="")) returned 1 [0058.654] FindNextFileW (in: hFindFile=0x381f40, lpFindFileData=0x31e314 | out: lpFindFileData=0x31e314*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x950fa000, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x8346b240, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x950fa000, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0xccee7, dwReserved0=0x0, dwReserved1=0x0, cFileName="CP936.TXT", cAlternateFileName="")) returned 1 [0058.654] FindNextFileW (in: hFindFile=0x381f40, lpFindFileData=0x31e314 | out: lpFindFileData=0x31e314*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x950fa000, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x834913a0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x950fa000, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0xc5492, dwReserved0=0x0, dwReserved1=0x0, cFileName="CP949.TXT", cAlternateFileName="")) returned 1 [0058.654] FindNextFileW (in: hFindFile=0x381f40, lpFindFileData=0x31e314 | out: lpFindFileData=0x31e314*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x950fa000, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x834913a0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x950fa000, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x7fa1b, dwReserved0=0x0, dwReserved1=0x0, cFileName="CP950.TXT", cAlternateFileName="")) returned 1 [0058.655] FindNextFileW (in: hFindFile=0x381f40, lpFindFileData=0x31e314 | out: lpFindFileData=0x31e314*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0058.655] FindClose (in: hFindFile=0x381f40 | out: hFindFile=0x381f40) returned 1 [0058.656] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e59c) returned 1 [0058.656] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e5a8) returned 1 [0058.656] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e5dc) returned 1 [0058.657] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\TypeSupport\\Unicode\\Mappings\\win", nBufferLength=0x105, lpBuffer=0x31e0e4, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\TypeSupport\\Unicode\\Mappings\\win", lpFilePart=0x0) returned 0x52 [0058.657] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\TypeSupport\\Unicode\\Mappings\\win\\", nBufferLength=0x105, lpBuffer=0x31e0b8, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\TypeSupport\\Unicode\\Mappings\\win\\", lpFilePart=0x0) returned 0x53 [0058.657] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\TypeSupport\\Unicode\\Mappings\\win\\*", lpFindFileData=0x31e304 | out: lpFindFileData=0x31e304*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x833608a0, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x83680580, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x83680580, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x381f40 [0058.658] FindNextFileW (in: hFindFile=0x381f40, lpFindFileData=0x31e314 | out: lpFindFileData=0x31e314*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x833608a0, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x83680580, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x83680580, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0058.658] FindNextFileW (in: hFindFile=0x381f40, lpFindFileData=0x31e314 | out: lpFindFileData=0x31e314*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x93de7300, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x834450e0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x93de7300, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x2664, dwReserved0=0x0, dwReserved1=0x0, cFileName="CP1250.TXT", cAlternateFileName="")) returned 1 [0058.658] FindNextFileW (in: hFindFile=0x381f40, lpFindFileData=0x31e314 | out: lpFindFileData=0x31e314*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x93de7300, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x83386a00, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x93de7300, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x251f, dwReserved0=0x0, dwReserved1=0x0, cFileName="CP1251.TXT", cAlternateFileName="")) returned 1 [0058.658] FindNextFileW (in: hFindFile=0x381f40, lpFindFileData=0x31e314 | out: lpFindFileData=0x31e314*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x950fa000, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x833608a0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x950fa000, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x25b5, dwReserved0=0x0, dwReserved1=0x0, cFileName="CP1252.TXT", cAlternateFileName="")) returned 1 [0058.658] FindNextFileW (in: hFindFile=0x381f40, lpFindFileData=0x31e314 | out: lpFindFileData=0x31e314*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x93de7300, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x833608a0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x93de7300, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x2414, dwReserved0=0x0, dwReserved1=0x0, cFileName="CP1253.TXT", cAlternateFileName="")) returned 1 [0058.658] FindNextFileW (in: hFindFile=0x381f40, lpFindFileData=0x31e314 | out: lpFindFileData=0x31e314*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x950fa000, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x833608a0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x950fa000, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x25ac, dwReserved0=0x0, dwReserved1=0x0, cFileName="CP1254.TXT", cAlternateFileName="")) returned 1 [0058.659] FindNextFileW (in: hFindFile=0x381f40, lpFindFileData=0x31e314 | out: lpFindFileData=0x31e314*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x93de7300, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x835037c0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x93de7300, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x219a, dwReserved0=0x0, dwReserved1=0x0, cFileName="CP1255.TXT", cAlternateFileName="")) returned 1 [0058.659] FindNextFileW (in: hFindFile=0x381f40, lpFindFileData=0x31e314 | out: lpFindFileData=0x31e314*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x93de7300, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x83680580, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x93de7300, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x22fb, dwReserved0=0x0, dwReserved1=0x0, cFileName="CP1256.TXT", cAlternateFileName="")) returned 1 [0058.659] FindNextFileW (in: hFindFile=0x381f40, lpFindFileData=0x31e314 | out: lpFindFileData=0x31e314*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x950fa000, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x833608a0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x950fa000, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x252c, dwReserved0=0x0, dwReserved1=0x0, cFileName="CP1257.TXT", cAlternateFileName="")) returned 1 [0058.659] FindNextFileW (in: hFindFile=0x381f40, lpFindFileData=0x31e314 | out: lpFindFileData=0x31e314*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x93de7300, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x833608a0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x93de7300, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x2522, dwReserved0=0x0, dwReserved1=0x0, cFileName="CP1258.TXT", cAlternateFileName="")) returned 1 [0058.659] FindNextFileW (in: hFindFile=0x381f40, lpFindFileData=0x31e314 | out: lpFindFileData=0x31e314*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x950fa000, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x835037c0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x950fa000, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x2221, dwReserved0=0x0, dwReserved1=0x0, cFileName="CP874.TXT", cAlternateFileName="")) returned 1 [0058.659] FindNextFileW (in: hFindFile=0x381f40, lpFindFileData=0x31e314 | out: lpFindFileData=0x31e314*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x93de7300, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x8346b240, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x93de7300, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x4a0f2, dwReserved0=0x0, dwReserved1=0x0, cFileName="CP932.TXT", cAlternateFileName="")) returned 1 [0058.659] FindNextFileW (in: hFindFile=0x381f40, lpFindFileData=0x31e314 | out: lpFindFileData=0x31e314*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x950fa000, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x8346b240, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x950fa000, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0xccee7, dwReserved0=0x0, dwReserved1=0x0, cFileName="CP936.TXT", cAlternateFileName="")) returned 1 [0058.660] FindNextFileW (in: hFindFile=0x381f40, lpFindFileData=0x31e314 | out: lpFindFileData=0x31e314*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x950fa000, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x834913a0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x950fa000, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0xc5492, dwReserved0=0x0, dwReserved1=0x0, cFileName="CP949.TXT", cAlternateFileName="")) returned 1 [0058.660] FindNextFileW (in: hFindFile=0x381f40, lpFindFileData=0x31e314 | out: lpFindFileData=0x31e314*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x950fa000, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x834913a0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x950fa000, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x7fa1b, dwReserved0=0x0, dwReserved1=0x0, cFileName="CP950.TXT", cAlternateFileName="")) returned 1 [0058.660] FindNextFileW (in: hFindFile=0x381f40, lpFindFileData=0x31e314 | out: lpFindFileData=0x31e314*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x950fa000, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x834913a0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x950fa000, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x7fa1b, dwReserved0=0x0, dwReserved1=0x0, cFileName="CP950.TXT", cAlternateFileName="")) returned 0 [0058.660] FindClose (in: hFindFile=0x381f40 | out: hFindFile=0x381f40) returned 1 [0058.661] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e59c) returned 1 [0058.661] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e5a8) returned 1 [0058.661] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e7bc) returned 1 [0058.661] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Setup Files", nBufferLength=0x105, lpBuffer=0x31e2c4, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Setup Files", lpFilePart=0x0) returned 0x34 [0058.661] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Setup Files\\", nBufferLength=0x105, lpBuffer=0x31e298, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Setup Files\\", lpFilePart=0x0) returned 0x35 [0058.661] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Setup Files\\*", lpFindFileData=0x31e4e4 | out: lpFindFileData=0x31e4e4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7cf66ca0, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x7cf66ca0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x7cf66ca0, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x381f40 [0058.661] FindNextFileW (in: hFindFile=0x381f40, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7cf66ca0, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x7cf66ca0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x7cf66ca0, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0058.661] FindNextFileW (in: hFindFile=0x381f40, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7cf66ca0, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x7d580500, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x7d580500, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="{AC76BA86-7AD7-FFFF-7B44-AA0000000001}", cAlternateFileName="{AC76B~1")) returned 1 [0058.662] FindNextFileW (in: hFindFile=0x381f40, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7cf66ca0, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x7d580500, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x7d580500, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="{AC76BA86-7AD7-FFFF-7B44-AA0000000001}", cAlternateFileName="{AC76B~1")) returned 0 [0058.662] FindClose (in: hFindFile=0x381f40 | out: hFindFile=0x381f40) returned 1 [0058.662] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e77c) returned 1 [0058.662] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e788) returned 1 [0058.662] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e7bc) returned 1 [0058.662] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Setup Files", nBufferLength=0x105, lpBuffer=0x31e2c4, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Setup Files", lpFilePart=0x0) returned 0x34 [0058.662] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Setup Files\\", nBufferLength=0x105, lpBuffer=0x31e298, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Setup Files\\", lpFilePart=0x0) returned 0x35 [0058.662] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Setup Files\\*", lpFindFileData=0x31e4e4 | out: lpFindFileData=0x31e4e4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7cf66ca0, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x7cf66ca0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x7cf66ca0, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x381f40 [0058.662] FindNextFileW (in: hFindFile=0x381f40, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7cf66ca0, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x7cf66ca0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x7cf66ca0, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0058.662] FindNextFileW (in: hFindFile=0x381f40, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7cf66ca0, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x7d580500, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x7d580500, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="{AC76BA86-7AD7-FFFF-7B44-AA0000000001}", cAlternateFileName="{AC76B~1")) returned 1 [0058.663] FindNextFileW (in: hFindFile=0x381f40, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0058.663] FindClose (in: hFindFile=0x381f40 | out: hFindFile=0x381f40) returned 1 [0058.663] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e77c) returned 1 [0058.663] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e788) returned 1 [0058.663] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e744) returned 1 [0058.663] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Setup Files\\{AC76BA86-7AD7-FFFF-7B44-AA0000000001}", nBufferLength=0x105, lpBuffer=0x31e24c, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Setup Files\\{AC76BA86-7AD7-FFFF-7B44-AA0000000001}", lpFilePart=0x0) returned 0x5b [0058.663] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Setup Files\\{AC76BA86-7AD7-FFFF-7B44-AA0000000001}\\", nBufferLength=0x105, lpBuffer=0x31e220, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Setup Files\\{AC76BA86-7AD7-FFFF-7B44-AA0000000001}\\", lpFilePart=0x0) returned 0x5c [0058.663] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Setup Files\\{AC76BA86-7AD7-FFFF-7B44-AA0000000001}\\*", lpFindFileData=0x31e46c | out: lpFindFileData=0x31e46c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7cf66ca0, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x7d580500, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x7d580500, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x381f40 [0058.665] FindNextFileW (in: hFindFile=0x381f40, lpFindFileData=0x31e47c | out: lpFindFileData=0x31e47c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7cf66ca0, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x7d580500, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x7d580500, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0058.665] FindNextFileW (in: hFindFile=0x381f40, lpFindFileData=0x31e47c | out: lpFindFileData=0x31e47c*(dwFileAttributes=0x21, ftCreationTime.dwLowDateTime=0xc438b000, ftCreationTime.dwHighDateTime=0x1d0cebb, ftLastAccessTime.dwLowDateTime=0x7cfd90c0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0xc438b000, ftLastWriteTime.dwHighDateTime=0x1d0cebb, nFileSizeHigh=0x0, nFileSizeLow=0xa800, dwReserved0=0x0, dwReserved1=0x0, cFileName="1027.mst", cAlternateFileName="")) returned 1 [0058.665] FindNextFileW (in: hFindFile=0x381f40, lpFindFileData=0x31e47c | out: lpFindFileData=0x31e47c*(dwFileAttributes=0x21, ftCreationTime.dwLowDateTime=0xc438b000, ftCreationTime.dwHighDateTime=0x1d0cebb, ftLastAccessTime.dwLowDateTime=0x7d580500, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0xc438b000, ftLastWriteTime.dwHighDateTime=0x1d0cebb, nFileSizeHigh=0x0, nFileSizeLow=0x8800, dwReserved0=0x0, dwReserved1=0x0, cFileName="1028.mst", cAlternateFileName="")) returned 1 [0058.665] FindNextFileW (in: hFindFile=0x381f40, lpFindFileData=0x31e47c | out: lpFindFileData=0x31e47c*(dwFileAttributes=0x21, ftCreationTime.dwLowDateTime=0xc438b000, ftCreationTime.dwHighDateTime=0x1d0cebb, ftLastAccessTime.dwLowDateTime=0x7d580500, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0xc438b000, ftLastWriteTime.dwHighDateTime=0x1d0cebb, nFileSizeHigh=0x0, nFileSizeLow=0x9000, dwReserved0=0x0, dwReserved1=0x0, cFileName="1029.mst", cAlternateFileName="")) returned 1 [0058.665] FindNextFileW (in: hFindFile=0x381f40, lpFindFileData=0x31e47c | out: lpFindFileData=0x31e47c*(dwFileAttributes=0x21, ftCreationTime.dwLowDateTime=0xc438b000, ftCreationTime.dwHighDateTime=0x1d0cebb, ftLastAccessTime.dwLowDateTime=0x7d55a3a0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0xc438b000, ftLastWriteTime.dwHighDateTime=0x1d0cebb, nFileSizeHigh=0x0, nFileSizeLow=0xb600, dwReserved0=0x0, dwReserved1=0x0, cFileName="1030.mst", cAlternateFileName="")) returned 1 [0058.665] FindNextFileW (in: hFindFile=0x381f40, lpFindFileData=0x31e47c | out: lpFindFileData=0x31e47c*(dwFileAttributes=0x21, ftCreationTime.dwLowDateTime=0xc438b000, ftCreationTime.dwHighDateTime=0x1d0cebb, ftLastAccessTime.dwLowDateTime=0x7d55a3a0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0xc438b000, ftLastWriteTime.dwHighDateTime=0x1d0cebb, nFileSizeHigh=0x0, nFileSizeLow=0xca00, dwReserved0=0x0, dwReserved1=0x0, cFileName="1031.mst", cAlternateFileName="")) returned 1 [0058.666] FindNextFileW (in: hFindFile=0x381f40, lpFindFileData=0x31e47c | out: lpFindFileData=0x31e47c*(dwFileAttributes=0x21, ftCreationTime.dwLowDateTime=0xc438b000, ftCreationTime.dwHighDateTime=0x1d0cebb, ftLastAccessTime.dwLowDateTime=0x7d55a3a0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0xc438b000, ftLastWriteTime.dwHighDateTime=0x1d0cebb, nFileSizeHigh=0x0, nFileSizeLow=0xe00, dwReserved0=0x0, dwReserved1=0x0, cFileName="1033.mst", cAlternateFileName="")) returned 1 [0058.666] FindNextFileW (in: hFindFile=0x381f40, lpFindFileData=0x31e47c | out: lpFindFileData=0x31e47c*(dwFileAttributes=0x21, ftCreationTime.dwLowDateTime=0xc438b000, ftCreationTime.dwHighDateTime=0x1d0cebb, ftLastAccessTime.dwLowDateTime=0x7d55a3a0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0xc438b000, ftLastWriteTime.dwHighDateTime=0x1d0cebb, nFileSizeHigh=0x0, nFileSizeLow=0xc400, dwReserved0=0x0, dwReserved1=0x0, cFileName="1034.mst", cAlternateFileName="")) returned 1 [0058.666] FindNextFileW (in: hFindFile=0x381f40, lpFindFileData=0x31e47c | out: lpFindFileData=0x31e47c*(dwFileAttributes=0x21, ftCreationTime.dwLowDateTime=0xc438b000, ftCreationTime.dwHighDateTime=0x1d0cebb, ftLastAccessTime.dwLowDateTime=0x7d534240, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0xc438b000, ftLastWriteTime.dwHighDateTime=0x1d0cebb, nFileSizeHigh=0x0, nFileSizeLow=0xb600, dwReserved0=0x0, dwReserved1=0x0, cFileName="1035.mst", cAlternateFileName="")) returned 1 [0058.666] FindNextFileW (in: hFindFile=0x381f40, lpFindFileData=0x31e47c | out: lpFindFileData=0x31e47c*(dwFileAttributes=0x21, ftCreationTime.dwLowDateTime=0xc438b000, ftCreationTime.dwHighDateTime=0x1d0cebb, ftLastAccessTime.dwLowDateTime=0x7d534240, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0xc438b000, ftLastWriteTime.dwHighDateTime=0x1d0cebb, nFileSizeHigh=0x0, nFileSizeLow=0xc800, dwReserved0=0x0, dwReserved1=0x0, cFileName="1036.mst", cAlternateFileName="")) returned 1 [0058.666] FindNextFileW (in: hFindFile=0x381f40, lpFindFileData=0x31e47c | out: lpFindFileData=0x31e47c*(dwFileAttributes=0x21, ftCreationTime.dwLowDateTime=0xc438b000, ftCreationTime.dwHighDateTime=0x1d0cebb, ftLastAccessTime.dwLowDateTime=0x7d534240, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0xc438b000, ftLastWriteTime.dwHighDateTime=0x1d0cebb, nFileSizeHigh=0x0, nFileSizeLow=0x9e00, dwReserved0=0x0, dwReserved1=0x0, cFileName="1038.mst", cAlternateFileName="")) returned 1 [0058.666] FindNextFileW (in: hFindFile=0x381f40, lpFindFileData=0x31e47c | out: lpFindFileData=0x31e47c*(dwFileAttributes=0x21, ftCreationTime.dwLowDateTime=0xc438b000, ftCreationTime.dwHighDateTime=0x1d0cebb, ftLastAccessTime.dwLowDateTime=0x7d534240, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0xc438b000, ftLastWriteTime.dwHighDateTime=0x1d0cebb, nFileSizeHigh=0x0, nFileSizeLow=0xcc00, dwReserved0=0x0, dwReserved1=0x0, cFileName="1040.mst", cAlternateFileName="")) returned 1 [0058.666] FindNextFileW (in: hFindFile=0x381f40, lpFindFileData=0x31e47c | out: lpFindFileData=0x31e47c*(dwFileAttributes=0x21, ftCreationTime.dwLowDateTime=0xc438b000, ftCreationTime.dwHighDateTime=0x1d0cebb, ftLastAccessTime.dwLowDateTime=0x7d534240, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0xc438b000, ftLastWriteTime.dwHighDateTime=0x1d0cebb, nFileSizeHigh=0x0, nFileSizeLow=0xba00, dwReserved0=0x0, dwReserved1=0x0, cFileName="1041.mst", cAlternateFileName="")) returned 1 [0058.666] FindNextFileW (in: hFindFile=0x381f40, lpFindFileData=0x31e47c | out: lpFindFileData=0x31e47c*(dwFileAttributes=0x21, ftCreationTime.dwLowDateTime=0xc438b000, ftCreationTime.dwHighDateTime=0x1d0cebb, ftLastAccessTime.dwLowDateTime=0x7d534240, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0xc438b000, ftLastWriteTime.dwHighDateTime=0x1d0cebb, nFileSizeHigh=0x0, nFileSizeLow=0xae00, dwReserved0=0x0, dwReserved1=0x0, cFileName="1042.mst", cAlternateFileName="")) returned 1 [0058.666] FindNextFileW (in: hFindFile=0x381f40, lpFindFileData=0x31e47c | out: lpFindFileData=0x31e47c*(dwFileAttributes=0x21, ftCreationTime.dwLowDateTime=0xc438b000, ftCreationTime.dwHighDateTime=0x1d0cebb, ftLastAccessTime.dwLowDateTime=0x7d534240, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0xc438b000, ftLastWriteTime.dwHighDateTime=0x1d0cebb, nFileSizeHigh=0x0, nFileSizeLow=0xc800, dwReserved0=0x0, dwReserved1=0x0, cFileName="1043.mst", cAlternateFileName="")) returned 1 [0058.667] FindNextFileW (in: hFindFile=0x381f40, lpFindFileData=0x31e47c | out: lpFindFileData=0x31e47c*(dwFileAttributes=0x21, ftCreationTime.dwLowDateTime=0xc438b000, ftCreationTime.dwHighDateTime=0x1d0cebb, ftLastAccessTime.dwLowDateTime=0x7d50e0e0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0xc438b000, ftLastWriteTime.dwHighDateTime=0x1d0cebb, nFileSizeHigh=0x0, nFileSizeLow=0xb400, dwReserved0=0x0, dwReserved1=0x0, cFileName="1044.mst", cAlternateFileName="")) returned 1 [0058.667] FindNextFileW (in: hFindFile=0x381f40, lpFindFileData=0x31e47c | out: lpFindFileData=0x31e47c*(dwFileAttributes=0x21, ftCreationTime.dwLowDateTime=0xc438b000, ftCreationTime.dwHighDateTime=0x1d0cebb, ftLastAccessTime.dwLowDateTime=0x7d50e0e0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0xc438b000, ftLastWriteTime.dwHighDateTime=0x1d0cebb, nFileSizeHigh=0x0, nFileSizeLow=0x9400, dwReserved0=0x0, dwReserved1=0x0, cFileName="1045.mst", cAlternateFileName="")) returned 1 [0058.667] FindNextFileW (in: hFindFile=0x381f40, lpFindFileData=0x31e47c | out: lpFindFileData=0x31e47c*(dwFileAttributes=0x21, ftCreationTime.dwLowDateTime=0xc438b000, ftCreationTime.dwHighDateTime=0x1d0cebb, ftLastAccessTime.dwLowDateTime=0x7d50e0e0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0xc438b000, ftLastWriteTime.dwHighDateTime=0x1d0cebb, nFileSizeHigh=0x0, nFileSizeLow=0xbe00, dwReserved0=0x0, dwReserved1=0x0, cFileName="1046.mst", cAlternateFileName="")) returned 1 [0058.667] FindNextFileW (in: hFindFile=0x381f40, lpFindFileData=0x31e47c | out: lpFindFileData=0x31e47c*(dwFileAttributes=0x21, ftCreationTime.dwLowDateTime=0xc438b000, ftCreationTime.dwHighDateTime=0x1d0cebb, ftLastAccessTime.dwLowDateTime=0x7d50e0e0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0xc438b000, ftLastWriteTime.dwHighDateTime=0x1d0cebb, nFileSizeHigh=0x0, nFileSizeLow=0x9e00, dwReserved0=0x0, dwReserved1=0x0, cFileName="1048.mst", cAlternateFileName="")) returned 1 [0058.667] FindNextFileW (in: hFindFile=0x381f40, lpFindFileData=0x31e47c | out: lpFindFileData=0x31e47c*(dwFileAttributes=0x21, ftCreationTime.dwLowDateTime=0xc438b000, ftCreationTime.dwHighDateTime=0x1d0cebb, ftLastAccessTime.dwLowDateTime=0x7d50e0e0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0xc438b000, ftLastWriteTime.dwHighDateTime=0x1d0cebb, nFileSizeHigh=0x0, nFileSizeLow=0x9400, dwReserved0=0x0, dwReserved1=0x0, cFileName="1049.mst", cAlternateFileName="")) returned 1 [0058.667] FindNextFileW (in: hFindFile=0x381f40, lpFindFileData=0x31e47c | out: lpFindFileData=0x31e47c*(dwFileAttributes=0x21, ftCreationTime.dwLowDateTime=0xc438b000, ftCreationTime.dwHighDateTime=0x1d0cebb, ftLastAccessTime.dwLowDateTime=0x7d50e0e0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0xc438b000, ftLastWriteTime.dwHighDateTime=0x1d0cebb, nFileSizeHigh=0x0, nFileSizeLow=0x9600, dwReserved0=0x0, dwReserved1=0x0, cFileName="1050.mst", cAlternateFileName="")) returned 1 [0058.667] FindNextFileW (in: hFindFile=0x381f40, lpFindFileData=0x31e47c | out: lpFindFileData=0x31e47c*(dwFileAttributes=0x21, ftCreationTime.dwLowDateTime=0xc438b000, ftCreationTime.dwHighDateTime=0x1d0cebb, ftLastAccessTime.dwLowDateTime=0x7d50e0e0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0xc438b000, ftLastWriteTime.dwHighDateTime=0x1d0cebb, nFileSizeHigh=0x0, nFileSizeLow=0x9600, dwReserved0=0x0, dwReserved1=0x0, cFileName="1051.mst", cAlternateFileName="")) returned 1 [0058.667] FindNextFileW (in: hFindFile=0x381f40, lpFindFileData=0x31e47c | out: lpFindFileData=0x31e47c*(dwFileAttributes=0x21, ftCreationTime.dwLowDateTime=0xc438b000, ftCreationTime.dwHighDateTime=0x1d0cebb, ftLastAccessTime.dwLowDateTime=0x7d50e0e0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0xc438b000, ftLastWriteTime.dwHighDateTime=0x1d0cebb, nFileSizeHigh=0x0, nFileSizeLow=0xb400, dwReserved0=0x0, dwReserved1=0x0, cFileName="1053.mst", cAlternateFileName="")) returned 1 [0058.668] FindNextFileW (in: hFindFile=0x381f40, lpFindFileData=0x31e47c | out: lpFindFileData=0x31e47c*(dwFileAttributes=0x21, ftCreationTime.dwLowDateTime=0xc438b000, ftCreationTime.dwHighDateTime=0x1d0cebb, ftLastAccessTime.dwLowDateTime=0x7d50e0e0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0xc438b000, ftLastWriteTime.dwHighDateTime=0x1d0cebb, nFileSizeHigh=0x0, nFileSizeLow=0x9200, dwReserved0=0x0, dwReserved1=0x0, cFileName="1055.mst", cAlternateFileName="")) returned 1 [0058.668] FindNextFileW (in: hFindFile=0x381f40, lpFindFileData=0x31e47c | out: lpFindFileData=0x31e47c*(dwFileAttributes=0x21, ftCreationTime.dwLowDateTime=0xc438b000, ftCreationTime.dwHighDateTime=0x1d0cebb, ftLastAccessTime.dwLowDateTime=0x7d4e7f80, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0xc438b000, ftLastWriteTime.dwHighDateTime=0x1d0cebb, nFileSizeHigh=0x0, nFileSizeLow=0x9200, dwReserved0=0x0, dwReserved1=0x0, cFileName="1058.mst", cAlternateFileName="")) returned 1 [0058.668] FindNextFileW (in: hFindFile=0x381f40, lpFindFileData=0x31e47c | out: lpFindFileData=0x31e47c*(dwFileAttributes=0x21, ftCreationTime.dwLowDateTime=0xc438b000, ftCreationTime.dwHighDateTime=0x1d0cebb, ftLastAccessTime.dwLowDateTime=0x7d4e7f80, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0xc438b000, ftLastWriteTime.dwHighDateTime=0x1d0cebb, nFileSizeHigh=0x0, nFileSizeLow=0x9600, dwReserved0=0x0, dwReserved1=0x0, cFileName="1060.mst", cAlternateFileName="")) returned 1 [0058.668] FindNextFileW (in: hFindFile=0x381f40, lpFindFileData=0x31e47c | out: lpFindFileData=0x31e47c*(dwFileAttributes=0x21, ftCreationTime.dwLowDateTime=0xc438b000, ftCreationTime.dwHighDateTime=0x1d0cebb, ftLastAccessTime.dwLowDateTime=0x7d4e7f80, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0xc438b000, ftLastWriteTime.dwHighDateTime=0x1d0cebb, nFileSizeHigh=0x0, nFileSizeLow=0x9e00, dwReserved0=0x0, dwReserved1=0x0, cFileName="1069.mst", cAlternateFileName="")) returned 1 [0058.668] FindNextFileW (in: hFindFile=0x381f40, lpFindFileData=0x31e47c | out: lpFindFileData=0x31e47c*(dwFileAttributes=0x21, ftCreationTime.dwLowDateTime=0xc438b000, ftCreationTime.dwHighDateTime=0x1d0cebb, ftLastAccessTime.dwLowDateTime=0x7d4e7f80, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0xc438b000, ftLastWriteTime.dwHighDateTime=0x1d0cebb, nFileSizeHigh=0x0, nFileSizeLow=0x8c00, dwReserved0=0x0, dwReserved1=0x0, cFileName="2052.mst", cAlternateFileName="")) returned 1 [0058.668] FindNextFileW (in: hFindFile=0x381f40, lpFindFileData=0x31e47c | out: lpFindFileData=0x31e47c*(dwFileAttributes=0x21, ftCreationTime.dwLowDateTime=0xc438b000, ftCreationTime.dwHighDateTime=0x1d0cebb, ftLastAccessTime.dwLowDateTime=0x7d4e7f80, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0xc438b000, ftLastWriteTime.dwHighDateTime=0x1d0cebb, nFileSizeHigh=0x0, nFileSizeLow=0x6c1, dwReserved0=0x0, dwReserved1=0x0, cFileName="ABCPY.INI", cAlternateFileName="")) returned 1 [0058.668] FindNextFileW (in: hFindFile=0x381f40, lpFindFileData=0x31e47c | out: lpFindFileData=0x31e47c*(dwFileAttributes=0x21, ftCreationTime.dwLowDateTime=0xc438b000, ftCreationTime.dwHighDateTime=0x1d0cebb, ftLastAccessTime.dwLowDateTime=0x7d4e7f80, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0xc438b000, ftLastWriteTime.dwHighDateTime=0x1d0cebb, nFileSizeHigh=0x0, nFileSizeLow=0x268000, dwReserved0=0x0, dwReserved1=0x0, cFileName="AcroRead.msi", cAlternateFileName="")) returned 1 [0058.668] FindNextFileW (in: hFindFile=0x381f40, lpFindFileData=0x31e47c | out: lpFindFileData=0x31e47c*(dwFileAttributes=0x21, ftCreationTime.dwLowDateTime=0xc69b0a00, ftCreationTime.dwHighDateTime=0x1d0cebb, ftLastAccessTime.dwLowDateTime=0x7d4c1e20, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0xc69b0a00, ftLastWriteTime.dwHighDateTime=0x1d0cebb, nFileSizeHigh=0x0, nFileSizeLow=0x7a3f7f7, dwReserved0=0x0, dwReserved1=0x0, cFileName="Data1.cab", cAlternateFileName="")) returned 1 [0058.669] FindNextFileW (in: hFindFile=0x381f40, lpFindFileData=0x31e47c | out: lpFindFileData=0x31e47c*(dwFileAttributes=0x21, ftCreationTime.dwLowDateTime=0xc438b000, ftCreationTime.dwHighDateTime=0x1d0cebb, ftLastAccessTime.dwLowDateTime=0x7cfd90c0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0xc438b000, ftLastWriteTime.dwHighDateTime=0x1d0cebb, nFileSizeHigh=0x0, nFileSizeLow=0x525c8, dwReserved0=0x0, dwReserved1=0x0, cFileName="Setup.exe", cAlternateFileName="")) returned 1 [0058.669] FindNextFileW (in: hFindFile=0x381f40, lpFindFileData=0x31e47c | out: lpFindFileData=0x31e47c*(dwFileAttributes=0x21, ftCreationTime.dwLowDateTime=0xc438b000, ftCreationTime.dwHighDateTime=0x1d0cebb, ftLastAccessTime.dwLowDateTime=0x7cfd90c0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0xc438b000, ftLastWriteTime.dwHighDateTime=0x1d0cebb, nFileSizeHigh=0x0, nFileSizeLow=0x3a0, dwReserved0=0x0, dwReserved1=0x0, cFileName="setup.ini", cAlternateFileName="")) returned 1 [0058.669] FindNextFileW (in: hFindFile=0x381f40, lpFindFileData=0x31e47c | out: lpFindFileData=0x31e47c*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0058.669] FindClose (in: hFindFile=0x381f40 | out: hFindFile=0x381f40) returned 1 [0058.670] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e704) returned 1 [0058.670] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e710) returned 1 [0058.670] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e744) returned 1 [0058.670] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Setup Files\\{AC76BA86-7AD7-FFFF-7B44-AA0000000001}", nBufferLength=0x105, lpBuffer=0x31e24c, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Setup Files\\{AC76BA86-7AD7-FFFF-7B44-AA0000000001}", lpFilePart=0x0) returned 0x5b [0058.670] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Setup Files\\{AC76BA86-7AD7-FFFF-7B44-AA0000000001}\\", nBufferLength=0x105, lpBuffer=0x31e220, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Setup Files\\{AC76BA86-7AD7-FFFF-7B44-AA0000000001}\\", lpFilePart=0x0) returned 0x5c [0058.670] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Setup Files\\{AC76BA86-7AD7-FFFF-7B44-AA0000000001}\\*", lpFindFileData=0x31e46c | out: lpFindFileData=0x31e46c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7cf66ca0, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x7d580500, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x7d580500, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x381f40 [0058.671] FindNextFileW (in: hFindFile=0x381f40, lpFindFileData=0x31e47c | out: lpFindFileData=0x31e47c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7cf66ca0, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x7d580500, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x7d580500, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0058.671] FindNextFileW (in: hFindFile=0x381f40, lpFindFileData=0x31e47c | out: lpFindFileData=0x31e47c*(dwFileAttributes=0x21, ftCreationTime.dwLowDateTime=0xc438b000, ftCreationTime.dwHighDateTime=0x1d0cebb, ftLastAccessTime.dwLowDateTime=0x7cfd90c0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0xc438b000, ftLastWriteTime.dwHighDateTime=0x1d0cebb, nFileSizeHigh=0x0, nFileSizeLow=0xa800, dwReserved0=0x0, dwReserved1=0x0, cFileName="1027.mst", cAlternateFileName="")) returned 1 [0058.671] FindNextFileW (in: hFindFile=0x381f40, lpFindFileData=0x31e47c | out: lpFindFileData=0x31e47c*(dwFileAttributes=0x21, ftCreationTime.dwLowDateTime=0xc438b000, ftCreationTime.dwHighDateTime=0x1d0cebb, ftLastAccessTime.dwLowDateTime=0x7d580500, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0xc438b000, ftLastWriteTime.dwHighDateTime=0x1d0cebb, nFileSizeHigh=0x0, nFileSizeLow=0x8800, dwReserved0=0x0, dwReserved1=0x0, cFileName="1028.mst", cAlternateFileName="")) returned 1 [0058.671] FindNextFileW (in: hFindFile=0x381f40, lpFindFileData=0x31e47c | out: lpFindFileData=0x31e47c*(dwFileAttributes=0x21, ftCreationTime.dwLowDateTime=0xc438b000, ftCreationTime.dwHighDateTime=0x1d0cebb, ftLastAccessTime.dwLowDateTime=0x7d580500, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0xc438b000, ftLastWriteTime.dwHighDateTime=0x1d0cebb, nFileSizeHigh=0x0, nFileSizeLow=0x9000, dwReserved0=0x0, dwReserved1=0x0, cFileName="1029.mst", cAlternateFileName="")) returned 1 [0058.671] FindNextFileW (in: hFindFile=0x381f40, lpFindFileData=0x31e47c | out: lpFindFileData=0x31e47c*(dwFileAttributes=0x21, ftCreationTime.dwLowDateTime=0xc438b000, ftCreationTime.dwHighDateTime=0x1d0cebb, ftLastAccessTime.dwLowDateTime=0x7d55a3a0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0xc438b000, ftLastWriteTime.dwHighDateTime=0x1d0cebb, nFileSizeHigh=0x0, nFileSizeLow=0xb600, dwReserved0=0x0, dwReserved1=0x0, cFileName="1030.mst", cAlternateFileName="")) returned 1 [0058.671] FindNextFileW (in: hFindFile=0x381f40, lpFindFileData=0x31e47c | out: lpFindFileData=0x31e47c*(dwFileAttributes=0x21, ftCreationTime.dwLowDateTime=0xc438b000, ftCreationTime.dwHighDateTime=0x1d0cebb, ftLastAccessTime.dwLowDateTime=0x7d55a3a0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0xc438b000, ftLastWriteTime.dwHighDateTime=0x1d0cebb, nFileSizeHigh=0x0, nFileSizeLow=0xca00, dwReserved0=0x0, dwReserved1=0x0, cFileName="1031.mst", cAlternateFileName="")) returned 1 [0058.671] FindNextFileW (in: hFindFile=0x381f40, lpFindFileData=0x31e47c | out: lpFindFileData=0x31e47c*(dwFileAttributes=0x21, ftCreationTime.dwLowDateTime=0xc438b000, ftCreationTime.dwHighDateTime=0x1d0cebb, ftLastAccessTime.dwLowDateTime=0x7d55a3a0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0xc438b000, ftLastWriteTime.dwHighDateTime=0x1d0cebb, nFileSizeHigh=0x0, nFileSizeLow=0xe00, dwReserved0=0x0, dwReserved1=0x0, cFileName="1033.mst", cAlternateFileName="")) returned 1 [0058.671] FindNextFileW (in: hFindFile=0x381f40, lpFindFileData=0x31e47c | out: lpFindFileData=0x31e47c*(dwFileAttributes=0x21, ftCreationTime.dwLowDateTime=0xc438b000, ftCreationTime.dwHighDateTime=0x1d0cebb, ftLastAccessTime.dwLowDateTime=0x7d55a3a0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0xc438b000, ftLastWriteTime.dwHighDateTime=0x1d0cebb, nFileSizeHigh=0x0, nFileSizeLow=0xc400, dwReserved0=0x0, dwReserved1=0x0, cFileName="1034.mst", cAlternateFileName="")) returned 1 [0058.671] FindNextFileW (in: hFindFile=0x381f40, lpFindFileData=0x31e47c | out: lpFindFileData=0x31e47c*(dwFileAttributes=0x21, ftCreationTime.dwLowDateTime=0xc438b000, ftCreationTime.dwHighDateTime=0x1d0cebb, ftLastAccessTime.dwLowDateTime=0x7d534240, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0xc438b000, ftLastWriteTime.dwHighDateTime=0x1d0cebb, nFileSizeHigh=0x0, nFileSizeLow=0xb600, dwReserved0=0x0, dwReserved1=0x0, cFileName="1035.mst", cAlternateFileName="")) returned 1 [0058.671] FindNextFileW (in: hFindFile=0x381f40, lpFindFileData=0x31e47c | out: lpFindFileData=0x31e47c*(dwFileAttributes=0x21, ftCreationTime.dwLowDateTime=0xc438b000, ftCreationTime.dwHighDateTime=0x1d0cebb, ftLastAccessTime.dwLowDateTime=0x7d534240, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0xc438b000, ftLastWriteTime.dwHighDateTime=0x1d0cebb, nFileSizeHigh=0x0, nFileSizeLow=0xc800, dwReserved0=0x0, dwReserved1=0x0, cFileName="1036.mst", cAlternateFileName="")) returned 1 [0058.671] FindNextFileW (in: hFindFile=0x381f40, lpFindFileData=0x31e47c | out: lpFindFileData=0x31e47c*(dwFileAttributes=0x21, ftCreationTime.dwLowDateTime=0xc438b000, ftCreationTime.dwHighDateTime=0x1d0cebb, ftLastAccessTime.dwLowDateTime=0x7d534240, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0xc438b000, ftLastWriteTime.dwHighDateTime=0x1d0cebb, nFileSizeHigh=0x0, nFileSizeLow=0x9e00, dwReserved0=0x0, dwReserved1=0x0, cFileName="1038.mst", cAlternateFileName="")) returned 1 [0058.672] FindNextFileW (in: hFindFile=0x381f40, lpFindFileData=0x31e47c | out: lpFindFileData=0x31e47c*(dwFileAttributes=0x21, ftCreationTime.dwLowDateTime=0xc438b000, ftCreationTime.dwHighDateTime=0x1d0cebb, ftLastAccessTime.dwLowDateTime=0x7d534240, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0xc438b000, ftLastWriteTime.dwHighDateTime=0x1d0cebb, nFileSizeHigh=0x0, nFileSizeLow=0xcc00, dwReserved0=0x0, dwReserved1=0x0, cFileName="1040.mst", cAlternateFileName="")) returned 1 [0058.672] FindNextFileW (in: hFindFile=0x381f40, lpFindFileData=0x31e47c | out: lpFindFileData=0x31e47c*(dwFileAttributes=0x21, ftCreationTime.dwLowDateTime=0xc438b000, ftCreationTime.dwHighDateTime=0x1d0cebb, ftLastAccessTime.dwLowDateTime=0x7d534240, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0xc438b000, ftLastWriteTime.dwHighDateTime=0x1d0cebb, nFileSizeHigh=0x0, nFileSizeLow=0xba00, dwReserved0=0x0, dwReserved1=0x0, cFileName="1041.mst", cAlternateFileName="")) returned 1 [0058.672] FindNextFileW (in: hFindFile=0x381f40, lpFindFileData=0x31e47c | out: lpFindFileData=0x31e47c*(dwFileAttributes=0x21, ftCreationTime.dwLowDateTime=0xc438b000, ftCreationTime.dwHighDateTime=0x1d0cebb, ftLastAccessTime.dwLowDateTime=0x7d534240, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0xc438b000, ftLastWriteTime.dwHighDateTime=0x1d0cebb, nFileSizeHigh=0x0, nFileSizeLow=0xae00, dwReserved0=0x0, dwReserved1=0x0, cFileName="1042.mst", cAlternateFileName="")) returned 1 [0058.672] FindNextFileW (in: hFindFile=0x381f40, lpFindFileData=0x31e47c | out: lpFindFileData=0x31e47c*(dwFileAttributes=0x21, ftCreationTime.dwLowDateTime=0xc438b000, ftCreationTime.dwHighDateTime=0x1d0cebb, ftLastAccessTime.dwLowDateTime=0x7d534240, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0xc438b000, ftLastWriteTime.dwHighDateTime=0x1d0cebb, nFileSizeHigh=0x0, nFileSizeLow=0xc800, dwReserved0=0x0, dwReserved1=0x0, cFileName="1043.mst", cAlternateFileName="")) returned 1 [0058.672] FindNextFileW (in: hFindFile=0x381f40, lpFindFileData=0x31e47c | out: lpFindFileData=0x31e47c*(dwFileAttributes=0x21, ftCreationTime.dwLowDateTime=0xc438b000, ftCreationTime.dwHighDateTime=0x1d0cebb, ftLastAccessTime.dwLowDateTime=0x7d50e0e0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0xc438b000, ftLastWriteTime.dwHighDateTime=0x1d0cebb, nFileSizeHigh=0x0, nFileSizeLow=0xb400, dwReserved0=0x0, dwReserved1=0x0, cFileName="1044.mst", cAlternateFileName="")) returned 1 [0058.672] FindNextFileW (in: hFindFile=0x381f40, lpFindFileData=0x31e47c | out: lpFindFileData=0x31e47c*(dwFileAttributes=0x21, ftCreationTime.dwLowDateTime=0xc438b000, ftCreationTime.dwHighDateTime=0x1d0cebb, ftLastAccessTime.dwLowDateTime=0x7d50e0e0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0xc438b000, ftLastWriteTime.dwHighDateTime=0x1d0cebb, nFileSizeHigh=0x0, nFileSizeLow=0x9400, dwReserved0=0x0, dwReserved1=0x0, cFileName="1045.mst", cAlternateFileName="")) returned 1 [0058.672] FindNextFileW (in: hFindFile=0x381f40, lpFindFileData=0x31e47c | out: lpFindFileData=0x31e47c*(dwFileAttributes=0x21, ftCreationTime.dwLowDateTime=0xc438b000, ftCreationTime.dwHighDateTime=0x1d0cebb, ftLastAccessTime.dwLowDateTime=0x7d50e0e0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0xc438b000, ftLastWriteTime.dwHighDateTime=0x1d0cebb, nFileSizeHigh=0x0, nFileSizeLow=0xbe00, dwReserved0=0x0, dwReserved1=0x0, cFileName="1046.mst", cAlternateFileName="")) returned 1 [0058.672] FindNextFileW (in: hFindFile=0x381f40, lpFindFileData=0x31e47c | out: lpFindFileData=0x31e47c*(dwFileAttributes=0x21, ftCreationTime.dwLowDateTime=0xc438b000, ftCreationTime.dwHighDateTime=0x1d0cebb, ftLastAccessTime.dwLowDateTime=0x7d50e0e0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0xc438b000, ftLastWriteTime.dwHighDateTime=0x1d0cebb, nFileSizeHigh=0x0, nFileSizeLow=0x9e00, dwReserved0=0x0, dwReserved1=0x0, cFileName="1048.mst", cAlternateFileName="")) returned 1 [0058.672] FindNextFileW (in: hFindFile=0x381f40, lpFindFileData=0x31e47c | out: lpFindFileData=0x31e47c*(dwFileAttributes=0x21, ftCreationTime.dwLowDateTime=0xc438b000, ftCreationTime.dwHighDateTime=0x1d0cebb, ftLastAccessTime.dwLowDateTime=0x7d50e0e0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0xc438b000, ftLastWriteTime.dwHighDateTime=0x1d0cebb, nFileSizeHigh=0x0, nFileSizeLow=0x9400, dwReserved0=0x0, dwReserved1=0x0, cFileName="1049.mst", cAlternateFileName="")) returned 1 [0058.672] FindNextFileW (in: hFindFile=0x381f40, lpFindFileData=0x31e47c | out: lpFindFileData=0x31e47c*(dwFileAttributes=0x21, ftCreationTime.dwLowDateTime=0xc438b000, ftCreationTime.dwHighDateTime=0x1d0cebb, ftLastAccessTime.dwLowDateTime=0x7d50e0e0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0xc438b000, ftLastWriteTime.dwHighDateTime=0x1d0cebb, nFileSizeHigh=0x0, nFileSizeLow=0x9600, dwReserved0=0x0, dwReserved1=0x0, cFileName="1050.mst", cAlternateFileName="")) returned 1 [0058.672] FindNextFileW (in: hFindFile=0x381f40, lpFindFileData=0x31e47c | out: lpFindFileData=0x31e47c*(dwFileAttributes=0x21, ftCreationTime.dwLowDateTime=0xc438b000, ftCreationTime.dwHighDateTime=0x1d0cebb, ftLastAccessTime.dwLowDateTime=0x7d50e0e0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0xc438b000, ftLastWriteTime.dwHighDateTime=0x1d0cebb, nFileSizeHigh=0x0, nFileSizeLow=0x9600, dwReserved0=0x0, dwReserved1=0x0, cFileName="1051.mst", cAlternateFileName="")) returned 1 [0058.672] FindNextFileW (in: hFindFile=0x381f40, lpFindFileData=0x31e47c | out: lpFindFileData=0x31e47c*(dwFileAttributes=0x21, ftCreationTime.dwLowDateTime=0xc438b000, ftCreationTime.dwHighDateTime=0x1d0cebb, ftLastAccessTime.dwLowDateTime=0x7d50e0e0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0xc438b000, ftLastWriteTime.dwHighDateTime=0x1d0cebb, nFileSizeHigh=0x0, nFileSizeLow=0xb400, dwReserved0=0x0, dwReserved1=0x0, cFileName="1053.mst", cAlternateFileName="")) returned 1 [0058.672] FindNextFileW (in: hFindFile=0x381f40, lpFindFileData=0x31e47c | out: lpFindFileData=0x31e47c*(dwFileAttributes=0x21, ftCreationTime.dwLowDateTime=0xc438b000, ftCreationTime.dwHighDateTime=0x1d0cebb, ftLastAccessTime.dwLowDateTime=0x7d50e0e0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0xc438b000, ftLastWriteTime.dwHighDateTime=0x1d0cebb, nFileSizeHigh=0x0, nFileSizeLow=0x9200, dwReserved0=0x0, dwReserved1=0x0, cFileName="1055.mst", cAlternateFileName="")) returned 1 [0058.672] FindNextFileW (in: hFindFile=0x381f40, lpFindFileData=0x31e47c | out: lpFindFileData=0x31e47c*(dwFileAttributes=0x21, ftCreationTime.dwLowDateTime=0xc438b000, ftCreationTime.dwHighDateTime=0x1d0cebb, ftLastAccessTime.dwLowDateTime=0x7d4e7f80, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0xc438b000, ftLastWriteTime.dwHighDateTime=0x1d0cebb, nFileSizeHigh=0x0, nFileSizeLow=0x9200, dwReserved0=0x0, dwReserved1=0x0, cFileName="1058.mst", cAlternateFileName="")) returned 1 [0058.672] FindNextFileW (in: hFindFile=0x381f40, lpFindFileData=0x31e47c | out: lpFindFileData=0x31e47c*(dwFileAttributes=0x21, ftCreationTime.dwLowDateTime=0xc438b000, ftCreationTime.dwHighDateTime=0x1d0cebb, ftLastAccessTime.dwLowDateTime=0x7d4e7f80, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0xc438b000, ftLastWriteTime.dwHighDateTime=0x1d0cebb, nFileSizeHigh=0x0, nFileSizeLow=0x9600, dwReserved0=0x0, dwReserved1=0x0, cFileName="1060.mst", cAlternateFileName="")) returned 1 [0058.672] FindNextFileW (in: hFindFile=0x381f40, lpFindFileData=0x31e47c | out: lpFindFileData=0x31e47c*(dwFileAttributes=0x21, ftCreationTime.dwLowDateTime=0xc438b000, ftCreationTime.dwHighDateTime=0x1d0cebb, ftLastAccessTime.dwLowDateTime=0x7d4e7f80, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0xc438b000, ftLastWriteTime.dwHighDateTime=0x1d0cebb, nFileSizeHigh=0x0, nFileSizeLow=0x9e00, dwReserved0=0x0, dwReserved1=0x0, cFileName="1069.mst", cAlternateFileName="")) returned 1 [0058.672] FindNextFileW (in: hFindFile=0x381f40, lpFindFileData=0x31e47c | out: lpFindFileData=0x31e47c*(dwFileAttributes=0x21, ftCreationTime.dwLowDateTime=0xc438b000, ftCreationTime.dwHighDateTime=0x1d0cebb, ftLastAccessTime.dwLowDateTime=0x7d4e7f80, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0xc438b000, ftLastWriteTime.dwHighDateTime=0x1d0cebb, nFileSizeHigh=0x0, nFileSizeLow=0x8c00, dwReserved0=0x0, dwReserved1=0x0, cFileName="2052.mst", cAlternateFileName="")) returned 1 [0058.672] FindNextFileW (in: hFindFile=0x381f40, lpFindFileData=0x31e47c | out: lpFindFileData=0x31e47c*(dwFileAttributes=0x21, ftCreationTime.dwLowDateTime=0xc438b000, ftCreationTime.dwHighDateTime=0x1d0cebb, ftLastAccessTime.dwLowDateTime=0x7d4e7f80, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0xc438b000, ftLastWriteTime.dwHighDateTime=0x1d0cebb, nFileSizeHigh=0x0, nFileSizeLow=0x6c1, dwReserved0=0x0, dwReserved1=0x0, cFileName="ABCPY.INI", cAlternateFileName="")) returned 1 [0058.673] FindNextFileW (in: hFindFile=0x381f40, lpFindFileData=0x31e47c | out: lpFindFileData=0x31e47c*(dwFileAttributes=0x21, ftCreationTime.dwLowDateTime=0xc438b000, ftCreationTime.dwHighDateTime=0x1d0cebb, ftLastAccessTime.dwLowDateTime=0x7d4e7f80, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0xc438b000, ftLastWriteTime.dwHighDateTime=0x1d0cebb, nFileSizeHigh=0x0, nFileSizeLow=0x268000, dwReserved0=0x0, dwReserved1=0x0, cFileName="AcroRead.msi", cAlternateFileName="")) returned 1 [0058.673] FindNextFileW (in: hFindFile=0x381f40, lpFindFileData=0x31e47c | out: lpFindFileData=0x31e47c*(dwFileAttributes=0x21, ftCreationTime.dwLowDateTime=0xc69b0a00, ftCreationTime.dwHighDateTime=0x1d0cebb, ftLastAccessTime.dwLowDateTime=0x7d4c1e20, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0xc69b0a00, ftLastWriteTime.dwHighDateTime=0x1d0cebb, nFileSizeHigh=0x0, nFileSizeLow=0x7a3f7f7, dwReserved0=0x0, dwReserved1=0x0, cFileName="Data1.cab", cAlternateFileName="")) returned 1 [0058.673] FindNextFileW (in: hFindFile=0x381f40, lpFindFileData=0x31e47c | out: lpFindFileData=0x31e47c*(dwFileAttributes=0x21, ftCreationTime.dwLowDateTime=0xc438b000, ftCreationTime.dwHighDateTime=0x1d0cebb, ftLastAccessTime.dwLowDateTime=0x7cfd90c0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0xc438b000, ftLastWriteTime.dwHighDateTime=0x1d0cebb, nFileSizeHigh=0x0, nFileSizeLow=0x525c8, dwReserved0=0x0, dwReserved1=0x0, cFileName="Setup.exe", cAlternateFileName="")) returned 1 [0058.673] FindNextFileW (in: hFindFile=0x381f40, lpFindFileData=0x31e47c | out: lpFindFileData=0x31e47c*(dwFileAttributes=0x21, ftCreationTime.dwLowDateTime=0xc438b000, ftCreationTime.dwHighDateTime=0x1d0cebb, ftLastAccessTime.dwLowDateTime=0x7cfd90c0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0xc438b000, ftLastWriteTime.dwHighDateTime=0x1d0cebb, nFileSizeHigh=0x0, nFileSizeLow=0x3a0, dwReserved0=0x0, dwReserved1=0x0, cFileName="setup.ini", cAlternateFileName="")) returned 1 [0058.673] FindNextFileW (in: hFindFile=0x381f40, lpFindFileData=0x31e47c | out: lpFindFileData=0x31e47c*(dwFileAttributes=0x21, ftCreationTime.dwLowDateTime=0xc438b000, ftCreationTime.dwHighDateTime=0x1d0cebb, ftLastAccessTime.dwLowDateTime=0x7cfd90c0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0xc438b000, ftLastWriteTime.dwHighDateTime=0x1d0cebb, nFileSizeHigh=0x0, nFileSizeLow=0x3a0, dwReserved0=0x0, dwReserved1=0x0, cFileName="setup.ini", cAlternateFileName="")) returned 0 [0058.673] FindClose (in: hFindFile=0x381f40 | out: hFindFile=0x381f40) returned 1 [0058.673] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e704) returned 1 [0058.673] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e710) returned 1 [0058.674] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e8ac) returned 1 [0058.674] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Common Files", nBufferLength=0x105, lpBuffer=0x31e3b4, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Common Files", lpFilePart=0x0) returned 0x23 [0058.674] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Common Files\\", nBufferLength=0x105, lpBuffer=0x31e388, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Common Files\\", lpFilePart=0x0) returned 0x24 [0058.674] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Common Files\\*", lpFindFileData=0x31e5d4 | out: lpFindFileData=0x31e5d4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd8ab1dc, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xd92961c0, ftLastAccessTime.dwHighDateTime=0x1d5e82a, ftLastWriteTime.dwLowDateTime=0xd92961c0, ftLastWriteTime.dwHighDateTime=0x1d5e82a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x381f40 [0058.674] FindNextFileW (in: hFindFile=0x381f40, lpFindFileData=0x31e5e4 | out: lpFindFileData=0x31e5e4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd8ab1dc, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xd92961c0, ftLastAccessTime.dwHighDateTime=0x1d5e82a, ftLastWriteTime.dwLowDateTime=0xd92961c0, ftLastWriteTime.dwHighDateTime=0x1d5e82a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0058.674] FindNextFileW (in: hFindFile=0x381f40, lpFindFileData=0x31e5e4 | out: lpFindFileData=0x31e5e4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7cf1a9e0, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x8386f760, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x8386f760, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Adobe", cAlternateFileName="")) returned 1 [0058.674] FindNextFileW (in: hFindFile=0x381f40, lpFindFileData=0x31e5e4 | out: lpFindFileData=0x31e5e4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x801ae160, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x801d42c0, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x801d42c0, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Java", cAlternateFileName="")) returned 1 [0058.674] FindNextFileW (in: hFindFile=0x381f40, lpFindFileData=0x31e5e4 | out: lpFindFileData=0x31e5e4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd8d1336, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xec355540, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0xec355540, ftLastWriteTime.dwHighDateTime=0x1d305eb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="microsoft shared", cAlternateFileName="MICROS~1")) returned 1 [0058.674] FindNextFileW (in: hFindFile=0x381f40, lpFindFileData=0x31e5e4 | out: lpFindFileData=0x31e5e4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd8d1336, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd8d1336, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xfd8d1336, ftLastWriteTime.dwHighDateTime=0x1ca0431, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Services", cAlternateFileName="")) returned 1 [0058.674] FindNextFileW (in: hFindFile=0x381f40, lpFindFileData=0x31e5e4 | out: lpFindFileData=0x31e5e4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd8d1336, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd8d1336, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xfd8d1336, ftLastWriteTime.dwHighDateTime=0x1ca0431, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="SpeechEngines", cAlternateFileName="SPEECH~1")) returned 1 [0058.674] FindNextFileW (in: hFindFile=0x381f40, lpFindFileData=0x31e5e4 | out: lpFindFileData=0x31e5e4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd8f7490, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x9c11cf80, ftLastAccessTime.dwHighDateTime=0x1d301bd, ftLastWriteTime.dwLowDateTime=0x9c11cf80, ftLastWriteTime.dwHighDateTime=0x1d301bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="System", cAlternateFileName="")) returned 1 [0058.674] FindNextFileW (in: hFindFile=0x381f40, lpFindFileData=0x31e5e4 | out: lpFindFileData=0x31e5e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe6bd7d0, ftCreationTime.dwHighDateTime=0x1d5dd92, ftLastAccessTime.dwLowDateTime=0x85933cd0, ftLastAccessTime.dwHighDateTime=0x1d56f7a, ftLastWriteTime.dwLowDateTime=0x85933cd0, ftLastWriteTime.dwHighDateTime=0x1d56f7a, nFileSizeHigh=0x0, nFileSizeLow=0x13a00, dwReserved0=0x0, dwReserved1=0x0, cFileName="zimbabwe.exe", cAlternateFileName="")) returned 1 [0058.674] FindNextFileW (in: hFindFile=0x381f40, lpFindFileData=0x31e5e4 | out: lpFindFileData=0x31e5e4*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0058.674] FindClose (in: hFindFile=0x381f40 | out: hFindFile=0x381f40) returned 1 [0058.674] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e86c) returned 1 [0058.674] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e878) returned 1 [0058.674] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e8ac) returned 1 [0058.674] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Common Files", nBufferLength=0x105, lpBuffer=0x31e3b4, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Common Files", lpFilePart=0x0) returned 0x23 [0058.675] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Common Files\\", nBufferLength=0x105, lpBuffer=0x31e388, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Common Files\\", lpFilePart=0x0) returned 0x24 [0058.675] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Common Files\\*", lpFindFileData=0x31e5d4 | out: lpFindFileData=0x31e5d4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd8ab1dc, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xd92961c0, ftLastAccessTime.dwHighDateTime=0x1d5e82a, ftLastWriteTime.dwLowDateTime=0xd92961c0, ftLastWriteTime.dwHighDateTime=0x1d5e82a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x381f40 [0058.675] FindNextFileW (in: hFindFile=0x381f40, lpFindFileData=0x31e5e4 | out: lpFindFileData=0x31e5e4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd8ab1dc, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xd92961c0, ftLastAccessTime.dwHighDateTime=0x1d5e82a, ftLastWriteTime.dwLowDateTime=0xd92961c0, ftLastWriteTime.dwHighDateTime=0x1d5e82a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0058.675] FindNextFileW (in: hFindFile=0x381f40, lpFindFileData=0x31e5e4 | out: lpFindFileData=0x31e5e4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7cf1a9e0, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x8386f760, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x8386f760, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Adobe", cAlternateFileName="")) returned 1 [0058.675] FindNextFileW (in: hFindFile=0x381f40, lpFindFileData=0x31e5e4 | out: lpFindFileData=0x31e5e4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x801ae160, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x801d42c0, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x801d42c0, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Java", cAlternateFileName="")) returned 1 [0058.675] FindNextFileW (in: hFindFile=0x381f40, lpFindFileData=0x31e5e4 | out: lpFindFileData=0x31e5e4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd8d1336, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xec355540, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0xec355540, ftLastWriteTime.dwHighDateTime=0x1d305eb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="microsoft shared", cAlternateFileName="MICROS~1")) returned 1 [0058.675] FindNextFileW (in: hFindFile=0x381f40, lpFindFileData=0x31e5e4 | out: lpFindFileData=0x31e5e4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd8d1336, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd8d1336, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xfd8d1336, ftLastWriteTime.dwHighDateTime=0x1ca0431, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Services", cAlternateFileName="")) returned 1 [0058.675] FindNextFileW (in: hFindFile=0x381f40, lpFindFileData=0x31e5e4 | out: lpFindFileData=0x31e5e4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd8d1336, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd8d1336, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xfd8d1336, ftLastWriteTime.dwHighDateTime=0x1ca0431, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="SpeechEngines", cAlternateFileName="SPEECH~1")) returned 1 [0058.675] FindNextFileW (in: hFindFile=0x381f40, lpFindFileData=0x31e5e4 | out: lpFindFileData=0x31e5e4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd8f7490, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x9c11cf80, ftLastAccessTime.dwHighDateTime=0x1d301bd, ftLastWriteTime.dwLowDateTime=0x9c11cf80, ftLastWriteTime.dwHighDateTime=0x1d301bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="System", cAlternateFileName="")) returned 1 [0058.675] FindNextFileW (in: hFindFile=0x381f40, lpFindFileData=0x31e5e4 | out: lpFindFileData=0x31e5e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe6bd7d0, ftCreationTime.dwHighDateTime=0x1d5dd92, ftLastAccessTime.dwLowDateTime=0x85933cd0, ftLastAccessTime.dwHighDateTime=0x1d56f7a, ftLastWriteTime.dwLowDateTime=0x85933cd0, ftLastWriteTime.dwHighDateTime=0x1d56f7a, nFileSizeHigh=0x0, nFileSizeLow=0x13a00, dwReserved0=0x0, dwReserved1=0x0, cFileName="zimbabwe.exe", cAlternateFileName="")) returned 1 [0058.675] FindNextFileW (in: hFindFile=0x381f40, lpFindFileData=0x31e5e4 | out: lpFindFileData=0x31e5e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe6bd7d0, ftCreationTime.dwHighDateTime=0x1d5dd92, ftLastAccessTime.dwLowDateTime=0x85933cd0, ftLastAccessTime.dwHighDateTime=0x1d56f7a, ftLastWriteTime.dwLowDateTime=0x85933cd0, ftLastWriteTime.dwHighDateTime=0x1d56f7a, nFileSizeHigh=0x0, nFileSizeLow=0x13a00, dwReserved0=0x0, dwReserved1=0x0, cFileName="zimbabwe.exe", cAlternateFileName="")) returned 0 [0058.675] FindClose (in: hFindFile=0x381f40 | out: hFindFile=0x381f40) returned 1 [0058.675] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e86c) returned 1 [0058.675] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e878) returned 1 [0058.675] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e834) returned 1 [0058.675] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Common Files\\Adobe", nBufferLength=0x105, lpBuffer=0x31e33c, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Common Files\\Adobe", lpFilePart=0x0) returned 0x29 [0058.675] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Common Files\\Adobe\\", nBufferLength=0x105, lpBuffer=0x31e310, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Common Files\\Adobe\\", lpFilePart=0x0) returned 0x2a [0058.675] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Common Files\\Adobe\\*", lpFindFileData=0x31e55c | out: lpFindFileData=0x31e55c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7cf1a9e0, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x8386f760, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x8386f760, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x381f40 [0058.676] FindNextFileW (in: hFindFile=0x381f40, lpFindFileData=0x31e56c | out: lpFindFileData=0x31e56c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7cf1a9e0, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x8386f760, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x8386f760, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0058.676] FindNextFileW (in: hFindFile=0x381f40, lpFindFileData=0x31e56c | out: lpFindFileData=0x31e56c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7cf1a9e0, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x7cf1a9e0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x7cf1a9e0, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Acrobat", cAlternateFileName="")) returned 1 [0058.676] FindNextFileW (in: hFindFile=0x381f40, lpFindFileData=0x31e56c | out: lpFindFileData=0x31e56c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8386f760, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x8386f760, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x8386f760, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="ARM", cAlternateFileName="")) returned 1 [0058.676] FindNextFileW (in: hFindFile=0x381f40, lpFindFileData=0x31e56c | out: lpFindFileData=0x31e56c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7d580500, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x7d5f2920, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x7d5f2920, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="HelpCfg", cAlternateFileName="")) returned 1 [0058.676] FindNextFileW (in: hFindFile=0x381f40, lpFindFileData=0x31e56c | out: lpFindFileData=0x31e56c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7d580500, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x7d5f2920, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x7d5f2920, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="HelpCfg", cAlternateFileName="")) returned 0 [0058.676] FindClose (in: hFindFile=0x381f40 | out: hFindFile=0x381f40) returned 1 [0058.676] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e7f4) returned 1 [0058.676] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e800) returned 1 [0058.676] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e834) returned 1 [0058.676] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Common Files\\Adobe", nBufferLength=0x105, lpBuffer=0x31e33c, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Common Files\\Adobe", lpFilePart=0x0) returned 0x29 [0058.676] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Common Files\\Adobe\\", nBufferLength=0x105, lpBuffer=0x31e310, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Common Files\\Adobe\\", lpFilePart=0x0) returned 0x2a [0058.676] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Common Files\\Adobe\\*", lpFindFileData=0x31e55c | out: lpFindFileData=0x31e55c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7cf1a9e0, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x8386f760, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x8386f760, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x381f40 [0058.676] FindNextFileW (in: hFindFile=0x381f40, lpFindFileData=0x31e56c | out: lpFindFileData=0x31e56c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7cf1a9e0, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x8386f760, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x8386f760, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0058.676] FindNextFileW (in: hFindFile=0x381f40, lpFindFileData=0x31e56c | out: lpFindFileData=0x31e56c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7cf1a9e0, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x7cf1a9e0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x7cf1a9e0, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Acrobat", cAlternateFileName="")) returned 1 [0058.676] FindNextFileW (in: hFindFile=0x381f40, lpFindFileData=0x31e56c | out: lpFindFileData=0x31e56c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8386f760, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x8386f760, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x8386f760, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="ARM", cAlternateFileName="")) returned 1 [0058.676] FindNextFileW (in: hFindFile=0x381f40, lpFindFileData=0x31e56c | out: lpFindFileData=0x31e56c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7d580500, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x7d5f2920, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x7d5f2920, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="HelpCfg", cAlternateFileName="")) returned 1 [0058.676] FindNextFileW (in: hFindFile=0x381f40, lpFindFileData=0x31e56c | out: lpFindFileData=0x31e56c*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0058.676] FindClose (in: hFindFile=0x381f40 | out: hFindFile=0x381f40) returned 1 [0058.676] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e7f4) returned 1 [0058.676] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e800) returned 1 [0058.677] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e7bc) returned 1 [0058.677] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Common Files\\Adobe\\Acrobat", nBufferLength=0x105, lpBuffer=0x31e2c4, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Common Files\\Adobe\\Acrobat", lpFilePart=0x0) returned 0x31 [0058.677] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Common Files\\Adobe\\Acrobat\\", nBufferLength=0x105, lpBuffer=0x31e298, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Common Files\\Adobe\\Acrobat\\", lpFilePart=0x0) returned 0x32 [0058.677] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Common Files\\Adobe\\Acrobat\\*", lpFindFileData=0x31e4e4 | out: lpFindFileData=0x31e4e4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7cf1a9e0, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x7cf1a9e0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x7cf1a9e0, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x381f40 [0058.677] FindNextFileW (in: hFindFile=0x381f40, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7cf1a9e0, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x7cf1a9e0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x7cf1a9e0, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0058.677] FindNextFileW (in: hFindFile=0x381f40, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7cf1a9e0, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x81f24da0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x81f24da0, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="ActiveX", cAlternateFileName="")) returned 1 [0058.677] FindNextFileW (in: hFindFile=0x381f40, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7cf1a9e0, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x81f24da0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x81f24da0, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="ActiveX", cAlternateFileName="")) returned 0 [0058.677] FindClose (in: hFindFile=0x381f40 | out: hFindFile=0x381f40) returned 1 [0058.677] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e77c) returned 1 [0058.677] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e788) returned 1 [0058.677] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e7bc) returned 1 [0058.677] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Common Files\\Adobe\\Acrobat", nBufferLength=0x105, lpBuffer=0x31e2c4, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Common Files\\Adobe\\Acrobat", lpFilePart=0x0) returned 0x31 [0058.677] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Common Files\\Adobe\\Acrobat\\", nBufferLength=0x105, lpBuffer=0x31e298, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Common Files\\Adobe\\Acrobat\\", lpFilePart=0x0) returned 0x32 [0058.677] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Common Files\\Adobe\\Acrobat\\*", lpFindFileData=0x31e4e4 | out: lpFindFileData=0x31e4e4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7cf1a9e0, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x7cf1a9e0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x7cf1a9e0, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x381f40 [0058.678] FindNextFileW (in: hFindFile=0x381f40, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7cf1a9e0, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x7cf1a9e0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x7cf1a9e0, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0058.678] FindNextFileW (in: hFindFile=0x381f40, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7cf1a9e0, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x81f24da0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x81f24da0, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="ActiveX", cAlternateFileName="")) returned 1 [0058.678] FindNextFileW (in: hFindFile=0x381f40, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0058.678] FindClose (in: hFindFile=0x381f40 | out: hFindFile=0x381f40) returned 1 [0058.678] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e77c) returned 1 [0058.678] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e788) returned 1 [0058.678] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e744) returned 1 [0058.678] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Common Files\\Adobe\\Acrobat\\ActiveX", nBufferLength=0x105, lpBuffer=0x31e24c, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Common Files\\Adobe\\Acrobat\\ActiveX", lpFilePart=0x0) returned 0x39 [0058.678] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Common Files\\Adobe\\Acrobat\\ActiveX\\", nBufferLength=0x105, lpBuffer=0x31e220, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Common Files\\Adobe\\Acrobat\\ActiveX\\", lpFilePart=0x0) returned 0x3a [0058.678] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Common Files\\Adobe\\Acrobat\\ActiveX\\*", lpFindFileData=0x31e46c | out: lpFindFileData=0x31e46c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7cf1a9e0, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x81f24da0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x81f24da0, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x381f40 [0058.679] FindNextFileW (in: hFindFile=0x381f40, lpFindFileData=0x31e47c | out: lpFindFileData=0x31e47c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7cf1a9e0, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x81f24da0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x81f24da0, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0058.679] FindNextFileW (in: hFindFile=0x381f40, lpFindFileData=0x31e47c | out: lpFindFileData=0x31e47c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x93de7300, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7d912600, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x93de7300, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0xfda0, dwReserved0=0x0, dwReserved1=0x0, cFileName="AcroIEHelper.dll", cAlternateFileName="ACROIE~1.DLL")) returned 1 [0058.680] FindNextFileW (in: hFindFile=0x381f40, lpFindFileData=0x31e47c | out: lpFindFileData=0x31e47c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x93de7300, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7d95e8c0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x93de7300, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0xf3a8, dwReserved0=0x0, dwReserved1=0x0, cFileName="AcroIEHelperShim.dll", cAlternateFileName="ACROIE~2.DLL")) returned 1 [0058.680] FindNextFileW (in: hFindFile=0x381f40, lpFindFileData=0x31e47c | out: lpFindFileData=0x31e47c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9c36ae00, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7d984a20, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9c36ae00, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x4c400, dwReserved0=0x0, dwReserved1=0x0, cFileName="AcroPDF.CAT", cAlternateFileName="")) returned 1 [0058.680] FindNextFileW (in: hFindFile=0x381f40, lpFindFileData=0x31e47c | out: lpFindFileData=0x31e47c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x99d45400, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7d8ec4a0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x99d45400, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x4bc00, dwReserved0=0x0, dwReserved1=0x0, cFileName="AcroPDF.CHS", cAlternateFileName="")) returned 1 [0058.680] FindNextFileW (in: hFindFile=0x381f40, lpFindFileData=0x31e47c | out: lpFindFileData=0x31e47c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x99d45400, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7d8ec4a0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x99d45400, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x4bc00, dwReserved0=0x0, dwReserved1=0x0, cFileName="AcroPDF.CHT", cAlternateFileName="")) returned 1 [0058.680] FindNextFileW (in: hFindFile=0x381f40, lpFindFileData=0x31e47c | out: lpFindFileData=0x31e47c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x99d45400, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7d95e8c0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x99d45400, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x4c400, dwReserved0=0x0, dwReserved1=0x0, cFileName="AcroPDF.CZE", cAlternateFileName="")) returned 1 [0058.680] FindNextFileW (in: hFindFile=0x381f40, lpFindFileData=0x31e47c | out: lpFindFileData=0x31e47c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9640cd00, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7d8ec4a0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9640cd00, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x4c400, dwReserved0=0x0, dwReserved1=0x0, cFileName="AcroPDF.DAN", cAlternateFileName="")) returned 1 [0058.680] FindNextFileW (in: hFindFile=0x381f40, lpFindFileData=0x31e47c | out: lpFindFileData=0x31e47c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x950fa000, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7d8ec4a0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x950fa000, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x4c600, dwReserved0=0x0, dwReserved1=0x0, cFileName="AcroPDF.DEU", cAlternateFileName="")) returned 1 [0058.680] FindNextFileW (in: hFindFile=0x381f40, lpFindFileData=0x31e47c | out: lpFindFileData=0x31e47c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x950fa000, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7d912600, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x950fa000, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0xab790, dwReserved0=0x0, dwReserved1=0x0, cFileName="AcroPDF.dll", cAlternateFileName="")) returned 1 [0058.680] FindNextFileW (in: hFindFile=0x381f40, lpFindFileData=0x31e47c | out: lpFindFileData=0x31e47c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9640cd00, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7d8ec4a0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9640cd00, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x4c600, dwReserved0=0x0, dwReserved1=0x0, cFileName="AcroPDF.ESP", cAlternateFileName="")) returned 1 [0058.680] FindNextFileW (in: hFindFile=0x381f40, lpFindFileData=0x31e47c | out: lpFindFileData=0x31e47c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9d67db00, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7d95e8c0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9d67db00, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x4c400, dwReserved0=0x0, dwReserved1=0x0, cFileName="AcroPDF.EUQ", cAlternateFileName="")) returned 1 [0058.680] FindNextFileW (in: hFindFile=0x381f40, lpFindFileData=0x31e47c | out: lpFindFileData=0x31e47c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x950fa000, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7d8ec4a0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x950fa000, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x4c600, dwReserved0=0x0, dwReserved1=0x0, cFileName="AcroPDF.FRA", cAlternateFileName="")) returned 1 [0058.680] FindNextFileW (in: hFindFile=0x381f40, lpFindFileData=0x31e47c | out: lpFindFileData=0x31e47c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9b058100, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7d95e8c0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9b058100, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x4c400, dwReserved0=0x0, dwReserved1=0x0, cFileName="AcroPDF.HRV", cAlternateFileName="")) returned 1 [0058.680] FindNextFileW (in: hFindFile=0x381f40, lpFindFileData=0x31e47c | out: lpFindFileData=0x31e47c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9b058100, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7d95e8c0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9b058100, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x4c400, dwReserved0=0x0, dwReserved1=0x0, cFileName="AcroPDF.HUN", cAlternateFileName="")) returned 1 [0058.680] FindNextFileW (in: hFindFile=0x381f40, lpFindFileData=0x31e47c | out: lpFindFileData=0x31e47c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9640cd00, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7d8c6340, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9640cd00, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x4c600, dwReserved0=0x0, dwReserved1=0x0, cFileName="AcroPDF.ITA", cAlternateFileName="")) returned 1 [0058.680] FindNextFileW (in: hFindFile=0x381f40, lpFindFileData=0x31e47c | out: lpFindFileData=0x31e47c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x950fa000, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7d8c6340, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x950fa000, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x4be00, dwReserved0=0x0, dwReserved1=0x0, cFileName="AcroPDF.JPN", cAlternateFileName="")) returned 1 [0058.680] FindNextFileW (in: hFindFile=0x381f40, lpFindFileData=0x31e47c | out: lpFindFileData=0x31e47c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x98a32700, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7d8c6340, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x98a32700, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x4be00, dwReserved0=0x0, dwReserved1=0x0, cFileName="AcroPDF.KOR", cAlternateFileName="")) returned 1 [0058.680] FindNextFileW (in: hFindFile=0x381f40, lpFindFileData=0x31e47c | out: lpFindFileData=0x31e47c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9640cd00, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7d8c6340, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9640cd00, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x4c600, dwReserved0=0x0, dwReserved1=0x0, cFileName="AcroPDF.NLD", cAlternateFileName="")) returned 1 [0058.680] FindNextFileW (in: hFindFile=0x381f40, lpFindFileData=0x31e47c | out: lpFindFileData=0x31e47c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x98a32700, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7d8c6340, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x98a32700, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x4c400, dwReserved0=0x0, dwReserved1=0x0, cFileName="AcroPDF.NOR", cAlternateFileName="")) returned 1 [0058.680] FindNextFileW (in: hFindFile=0x381f40, lpFindFileData=0x31e47c | out: lpFindFileData=0x31e47c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9b058100, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7d95e8c0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9b058100, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x4c400, dwReserved0=0x0, dwReserved1=0x0, cFileName="AcroPDF.POL", cAlternateFileName="")) returned 1 [0058.680] FindNextFileW (in: hFindFile=0x381f40, lpFindFileData=0x31e47c | out: lpFindFileData=0x31e47c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x98a32700, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7d8c6340, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x98a32700, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x4c400, dwReserved0=0x0, dwReserved1=0x0, cFileName="AcroPDF.PTB", cAlternateFileName="")) returned 1 [0058.680] FindNextFileW (in: hFindFile=0x381f40, lpFindFileData=0x31e47c | out: lpFindFileData=0x31e47c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9b058100, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7d938760, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9b058100, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x4c400, dwReserved0=0x0, dwReserved1=0x0, cFileName="AcroPDF.RUM", cAlternateFileName="")) returned 1 [0058.680] FindNextFileW (in: hFindFile=0x381f40, lpFindFileData=0x31e47c | out: lpFindFileData=0x31e47c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9b058100, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7d938760, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9b058100, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x4c400, dwReserved0=0x0, dwReserved1=0x0, cFileName="AcroPDF.RUS", cAlternateFileName="")) returned 1 [0058.680] FindNextFileW (in: hFindFile=0x381f40, lpFindFileData=0x31e47c | out: lpFindFileData=0x31e47c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9c36ae00, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7d938760, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9c36ae00, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x4c400, dwReserved0=0x0, dwReserved1=0x0, cFileName="AcroPDF.SKY", cAlternateFileName="")) returned 1 [0058.681] FindNextFileW (in: hFindFile=0x381f40, lpFindFileData=0x31e47c | out: lpFindFileData=0x31e47c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9b058100, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7d938760, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9b058100, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x4c400, dwReserved0=0x0, dwReserved1=0x0, cFileName="AcroPDF.SLV", cAlternateFileName="")) returned 1 [0058.681] FindNextFileW (in: hFindFile=0x381f40, lpFindFileData=0x31e47c | out: lpFindFileData=0x31e47c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9640cd00, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7d8c6340, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9640cd00, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x4c400, dwReserved0=0x0, dwReserved1=0x0, cFileName="AcroPDF.SUO", cAlternateFileName="")) returned 1 [0058.681] FindNextFileW (in: hFindFile=0x381f40, lpFindFileData=0x31e47c | out: lpFindFileData=0x31e47c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9640cd00, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7d8a01e0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9640cd00, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x4c400, dwReserved0=0x0, dwReserved1=0x0, cFileName="AcroPDF.SVE", cAlternateFileName="")) returned 1 [0058.681] FindNextFileW (in: hFindFile=0x381f40, lpFindFileData=0x31e47c | out: lpFindFileData=0x31e47c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9b058100, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7d938760, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9b058100, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x4c400, dwReserved0=0x0, dwReserved1=0x0, cFileName="AcroPDF.TUR", cAlternateFileName="")) returned 1 [0058.681] FindNextFileW (in: hFindFile=0x381f40, lpFindFileData=0x31e47c | out: lpFindFileData=0x31e47c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9c36ae00, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7d938760, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9c36ae00, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x4c400, dwReserved0=0x0, dwReserved1=0x0, cFileName="AcroPDF.UKR", cAlternateFileName="")) returned 1 [0058.681] FindNextFileW (in: hFindFile=0x381f40, lpFindFileData=0x31e47c | out: lpFindFileData=0x31e47c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9c36ae00, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x81f24da0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9c36ae00, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x49800, dwReserved0=0x0, dwReserved1=0x0, cFileName="PDFShell.CAT", cAlternateFileName="")) returned 1 [0058.681] FindNextFileW (in: hFindFile=0x381f40, lpFindFileData=0x31e47c | out: lpFindFileData=0x31e47c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x99d45400, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x8058e120, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x99d45400, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x49400, dwReserved0=0x0, dwReserved1=0x0, cFileName="PDFShell.CHS", cAlternateFileName="")) returned 1 [0058.681] FindNextFileW (in: hFindFile=0x381f40, lpFindFileData=0x31e47c | out: lpFindFileData=0x31e47c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x99d45400, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x8058e120, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x99d45400, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x49400, dwReserved0=0x0, dwReserved1=0x0, cFileName="PDFShell.CHT", cAlternateFileName="")) returned 1 [0058.681] FindNextFileW (in: hFindFile=0x381f40, lpFindFileData=0x31e47c | out: lpFindFileData=0x31e47c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x99d45400, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x81d5bd20, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x99d45400, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x49600, dwReserved0=0x0, dwReserved1=0x0, cFileName="PDFShell.CZE", cAlternateFileName="")) returned 1 [0058.681] FindNextFileW (in: hFindFile=0x381f40, lpFindFileData=0x31e47c | out: lpFindFileData=0x31e47c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9640cd00, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x8058e120, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9640cd00, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x49600, dwReserved0=0x0, dwReserved1=0x0, cFileName="PDFShell.DAN", cAlternateFileName="")) returned 1 [0058.682] FindNextFileW (in: hFindFile=0x381f40, lpFindFileData=0x31e47c | out: lpFindFileData=0x31e47c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x950fa000, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x8058e120, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x950fa000, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x49800, dwReserved0=0x0, dwReserved1=0x0, cFileName="PDFShell.DEU", cAlternateFileName="")) returned 1 [0058.682] FindNextFileW (in: hFindFile=0x381f40, lpFindFileData=0x31e47c | out: lpFindFileData=0x31e47c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x93de7300, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x8051bd00, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x93de7300, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x5f598, dwReserved0=0x0, dwReserved1=0x0, cFileName="pdfshell.dll", cAlternateFileName="")) returned 1 [0058.682] FindNextFileW (in: hFindFile=0x381f40, lpFindFileData=0x31e47c | out: lpFindFileData=0x31e47c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9640cd00, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x80567fc0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9640cd00, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x49800, dwReserved0=0x0, dwReserved1=0x0, cFileName="PDFShell.ESP", cAlternateFileName="")) returned 1 [0058.682] FindNextFileW (in: hFindFile=0x381f40, lpFindFileData=0x31e47c | out: lpFindFileData=0x31e47c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9d67db00, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x81f24da0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9d67db00, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x49600, dwReserved0=0x0, dwReserved1=0x0, cFileName="PDFShell.EUQ", cAlternateFileName="")) returned 1 [0058.682] FindNextFileW (in: hFindFile=0x381f40, lpFindFileData=0x31e47c | out: lpFindFileData=0x31e47c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x950fa000, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x80567fc0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x950fa000, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x49800, dwReserved0=0x0, dwReserved1=0x0, cFileName="PDFShell.FRA", cAlternateFileName="")) returned 1 [0058.682] FindNextFileW (in: hFindFile=0x381f40, lpFindFileData=0x31e47c | out: lpFindFileData=0x31e47c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9b058100, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x81d5bd20, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9b058100, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x49600, dwReserved0=0x0, dwReserved1=0x0, cFileName="PDFShell.HRV", cAlternateFileName="")) returned 1 [0058.682] FindNextFileW (in: hFindFile=0x381f40, lpFindFileData=0x31e47c | out: lpFindFileData=0x31e47c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9b058100, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x81d5bd20, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9b058100, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x49600, dwReserved0=0x0, dwReserved1=0x0, cFileName="PDFShell.HUN", cAlternateFileName="")) returned 1 [0058.682] FindNextFileW (in: hFindFile=0x381f40, lpFindFileData=0x31e47c | out: lpFindFileData=0x31e47c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9640cd00, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x80567fc0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9640cd00, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x49800, dwReserved0=0x0, dwReserved1=0x0, cFileName="PDFShell.ITA", cAlternateFileName="")) returned 1 [0058.682] FindNextFileW (in: hFindFile=0x381f40, lpFindFileData=0x31e47c | out: lpFindFileData=0x31e47c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x950fa000, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x80567fc0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x950fa000, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x49400, dwReserved0=0x0, dwReserved1=0x0, cFileName="PDFShell.JPN", cAlternateFileName="")) returned 1 [0058.682] FindNextFileW (in: hFindFile=0x381f40, lpFindFileData=0x31e47c | out: lpFindFileData=0x31e47c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x98a32700, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x80567fc0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x98a32700, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x49400, dwReserved0=0x0, dwReserved1=0x0, cFileName="PDFShell.KOR", cAlternateFileName="")) returned 1 [0058.682] FindNextFileW (in: hFindFile=0x381f40, lpFindFileData=0x31e47c | out: lpFindFileData=0x31e47c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9640cd00, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x80567fc0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9640cd00, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x49600, dwReserved0=0x0, dwReserved1=0x0, cFileName="PDFShell.NLD", cAlternateFileName="")) returned 1 [0058.682] FindNextFileW (in: hFindFile=0x381f40, lpFindFileData=0x31e47c | out: lpFindFileData=0x31e47c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x98a32700, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x80567fc0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x98a32700, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x49600, dwReserved0=0x0, dwReserved1=0x0, cFileName="PDFShell.NOR", cAlternateFileName="")) returned 1 [0058.682] FindNextFileW (in: hFindFile=0x381f40, lpFindFileData=0x31e47c | out: lpFindFileData=0x31e47c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9b058100, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x81d5bd20, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9b058100, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x49600, dwReserved0=0x0, dwReserved1=0x0, cFileName="PDFShell.POL", cAlternateFileName="")) returned 1 [0058.682] FindNextFileW (in: hFindFile=0x381f40, lpFindFileData=0x31e47c | out: lpFindFileData=0x31e47c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x98a32700, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x80541e60, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x98a32700, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x49800, dwReserved0=0x0, dwReserved1=0x0, cFileName="PDFShell.PTB", cAlternateFileName="")) returned 1 [0058.682] FindNextFileW (in: hFindFile=0x381f40, lpFindFileData=0x31e47c | out: lpFindFileData=0x31e47c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9b058100, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x81d5bd20, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9b058100, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x49600, dwReserved0=0x0, dwReserved1=0x0, cFileName="PDFShell.RUM", cAlternateFileName="")) returned 1 [0058.682] FindNextFileW (in: hFindFile=0x381f40, lpFindFileData=0x31e47c | out: lpFindFileData=0x31e47c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9b058100, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x81d35bc0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9b058100, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x49600, dwReserved0=0x0, dwReserved1=0x0, cFileName="PDFShell.RUS", cAlternateFileName="")) returned 1 [0058.682] FindNextFileW (in: hFindFile=0x381f40, lpFindFileData=0x31e47c | out: lpFindFileData=0x31e47c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9c36ae00, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x81d35bc0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9c36ae00, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x49600, dwReserved0=0x0, dwReserved1=0x0, cFileName="PDFShell.SKY", cAlternateFileName="")) returned 1 [0058.682] FindNextFileW (in: hFindFile=0x381f40, lpFindFileData=0x31e47c | out: lpFindFileData=0x31e47c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9b058100, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x81d35bc0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9b058100, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x49600, dwReserved0=0x0, dwReserved1=0x0, cFileName="PDFShell.SLV", cAlternateFileName="")) returned 1 [0058.683] FindNextFileW (in: hFindFile=0x381f40, lpFindFileData=0x31e47c | out: lpFindFileData=0x31e47c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9640cd00, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x8039ef40, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9640cd00, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x49600, dwReserved0=0x0, dwReserved1=0x0, cFileName="PDFShell.SUO", cAlternateFileName="")) returned 1 [0058.683] FindNextFileW (in: hFindFile=0x381f40, lpFindFileData=0x31e47c | out: lpFindFileData=0x31e47c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9640cd00, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x80378de0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9640cd00, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x49600, dwReserved0=0x0, dwReserved1=0x0, cFileName="PDFShell.SVE", cAlternateFileName="")) returned 1 [0058.683] FindNextFileW (in: hFindFile=0x381f40, lpFindFileData=0x31e47c | out: lpFindFileData=0x31e47c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9b058100, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x81d35bc0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9b058100, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x49600, dwReserved0=0x0, dwReserved1=0x0, cFileName="PDFShell.TUR", cAlternateFileName="")) returned 1 [0058.683] FindNextFileW (in: hFindFile=0x381f40, lpFindFileData=0x31e47c | out: lpFindFileData=0x31e47c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9c36ae00, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x81d35bc0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9c36ae00, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x49600, dwReserved0=0x0, dwReserved1=0x0, cFileName="PDFShell.UKR", cAlternateFileName="")) returned 1 [0058.683] FindNextFileW (in: hFindFile=0x381f40, lpFindFileData=0x31e47c | out: lpFindFileData=0x31e47c*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0058.683] FindClose (in: hFindFile=0x381f40 | out: hFindFile=0x381f40) returned 1 [0058.683] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e704) returned 1 [0058.684] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e710) returned 1 [0058.684] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e744) returned 1 [0058.684] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Common Files\\Adobe\\Acrobat\\ActiveX", nBufferLength=0x105, lpBuffer=0x31e24c, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Common Files\\Adobe\\Acrobat\\ActiveX", lpFilePart=0x0) returned 0x39 [0058.684] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Common Files\\Adobe\\Acrobat\\ActiveX\\", nBufferLength=0x105, lpBuffer=0x31e220, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Common Files\\Adobe\\Acrobat\\ActiveX\\", lpFilePart=0x0) returned 0x3a [0058.684] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Common Files\\Adobe\\Acrobat\\ActiveX\\*", lpFindFileData=0x31e46c | out: lpFindFileData=0x31e46c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7cf1a9e0, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x81f24da0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x81f24da0, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x381f40 [0058.684] FindNextFileW (in: hFindFile=0x381f40, lpFindFileData=0x31e47c | out: lpFindFileData=0x31e47c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7cf1a9e0, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x81f24da0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x81f24da0, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0058.685] FindNextFileW (in: hFindFile=0x381f40, lpFindFileData=0x31e47c | out: lpFindFileData=0x31e47c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x93de7300, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7d912600, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x93de7300, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0xfda0, dwReserved0=0x0, dwReserved1=0x0, cFileName="AcroIEHelper.dll", cAlternateFileName="ACROIE~1.DLL")) returned 1 [0058.685] FindNextFileW (in: hFindFile=0x381f40, lpFindFileData=0x31e47c | out: lpFindFileData=0x31e47c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x93de7300, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7d95e8c0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x93de7300, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0xf3a8, dwReserved0=0x0, dwReserved1=0x0, cFileName="AcroIEHelperShim.dll", cAlternateFileName="ACROIE~2.DLL")) returned 1 [0058.685] FindNextFileW (in: hFindFile=0x381f40, lpFindFileData=0x31e47c | out: lpFindFileData=0x31e47c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9c36ae00, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7d984a20, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9c36ae00, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x4c400, dwReserved0=0x0, dwReserved1=0x0, cFileName="AcroPDF.CAT", cAlternateFileName="")) returned 1 [0058.685] FindNextFileW (in: hFindFile=0x381f40, lpFindFileData=0x31e47c | out: lpFindFileData=0x31e47c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x99d45400, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7d8ec4a0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x99d45400, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x4bc00, dwReserved0=0x0, dwReserved1=0x0, cFileName="AcroPDF.CHS", cAlternateFileName="")) returned 1 [0058.685] FindNextFileW (in: hFindFile=0x381f40, lpFindFileData=0x31e47c | out: lpFindFileData=0x31e47c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x99d45400, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7d8ec4a0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x99d45400, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x4bc00, dwReserved0=0x0, dwReserved1=0x0, cFileName="AcroPDF.CHT", cAlternateFileName="")) returned 1 [0058.685] FindNextFileW (in: hFindFile=0x381f40, lpFindFileData=0x31e47c | out: lpFindFileData=0x31e47c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x99d45400, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7d95e8c0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x99d45400, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x4c400, dwReserved0=0x0, dwReserved1=0x0, cFileName="AcroPDF.CZE", cAlternateFileName="")) returned 1 [0058.685] FindNextFileW (in: hFindFile=0x381f40, lpFindFileData=0x31e47c | out: lpFindFileData=0x31e47c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9640cd00, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7d8ec4a0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x9640cd00, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x4c400, dwReserved0=0x0, dwReserved1=0x0, cFileName="AcroPDF.DAN", cAlternateFileName="")) returned 1 [0058.685] FindNextFileW (in: hFindFile=0x381f40, lpFindFileData=0x31e47c | out: lpFindFileData=0x31e47c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x950fa000, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x7d8ec4a0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x950fa000, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x4c600, dwReserved0=0x0, dwReserved1=0x0, cFileName="AcroPDF.DEU", cAlternateFileName="")) returned 1 [0058.686] FindClose (in: hFindFile=0x381f40 | out: hFindFile=0x381f40) returned 1 [0058.686] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e704) returned 1 [0058.687] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e710) returned 1 [0058.687] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e7bc) returned 1 [0058.687] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Common Files\\Adobe\\ARM", nBufferLength=0x105, lpBuffer=0x31e2c4, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Common Files\\Adobe\\ARM", lpFilePart=0x0) returned 0x2d [0058.687] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Common Files\\Adobe\\ARM\\", nBufferLength=0x105, lpBuffer=0x31e298, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Common Files\\Adobe\\ARM\\", lpFilePart=0x0) returned 0x2e [0058.687] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Common Files\\Adobe\\ARM\\*", lpFindFileData=0x31e4e4 | out: lpFindFileData=0x31e4e4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8386f760, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x8386f760, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x8386f760, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x381f40 [0058.687] FindClose (in: hFindFile=0x381f40 | out: hFindFile=0x381f40) returned 1 [0058.687] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e77c) returned 1 [0058.687] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e788) returned 1 [0058.687] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e7bc) returned 1 [0058.687] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Common Files\\Adobe\\ARM", nBufferLength=0x105, lpBuffer=0x31e2c4, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Common Files\\Adobe\\ARM", lpFilePart=0x0) returned 0x2d [0058.687] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Common Files\\Adobe\\ARM\\", nBufferLength=0x105, lpBuffer=0x31e298, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Common Files\\Adobe\\ARM\\", lpFilePart=0x0) returned 0x2e [0058.687] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Common Files\\Adobe\\ARM\\*", lpFindFileData=0x31e4e4 | out: lpFindFileData=0x31e4e4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8386f760, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x8386f760, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x8386f760, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x381f40 [0058.687] FindClose (in: hFindFile=0x381f40 | out: hFindFile=0x381f40) returned 1 [0058.687] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e77c) returned 1 [0058.687] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e788) returned 1 [0058.687] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e744) returned 1 [0058.688] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Common Files\\Adobe\\ARM\\1.0", nBufferLength=0x105, lpBuffer=0x31e24c, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Common Files\\Adobe\\ARM\\1.0", lpFilePart=0x0) returned 0x31 [0058.688] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Common Files\\Adobe\\ARM\\1.0\\", nBufferLength=0x105, lpBuffer=0x31e220, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Common Files\\Adobe\\ARM\\1.0\\", lpFilePart=0x0) returned 0x32 [0058.688] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Common Files\\Adobe\\ARM\\1.0\\*", lpFindFileData=0x31e46c | out: lpFindFileData=0x31e46c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8386f760, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x8386f760, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x8386f760, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x381f40 [0058.688] FindClose (in: hFindFile=0x381f40 | out: hFindFile=0x381f40) returned 1 [0058.688] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e704) returned 1 [0058.688] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e710) returned 1 [0058.688] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e744) returned 1 [0058.688] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Common Files\\Adobe\\ARM\\1.0", nBufferLength=0x105, lpBuffer=0x31e24c, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Common Files\\Adobe\\ARM\\1.0", lpFilePart=0x0) returned 0x31 [0058.688] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Common Files\\Adobe\\ARM\\1.0\\", nBufferLength=0x105, lpBuffer=0x31e220, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Common Files\\Adobe\\ARM\\1.0\\", lpFilePart=0x0) returned 0x32 [0058.688] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Common Files\\Adobe\\ARM\\1.0\\*", lpFindFileData=0x31e46c | out: lpFindFileData=0x31e46c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8386f760, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x8386f760, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x8386f760, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x381f40 [0058.688] FindClose (in: hFindFile=0x381f40 | out: hFindFile=0x381f40) returned 1 [0058.688] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e704) returned 1 [0058.688] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e710) returned 1 [0058.688] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e7bc) returned 1 [0058.688] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Common Files\\Adobe\\HelpCfg", nBufferLength=0x105, lpBuffer=0x31e2c4, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Common Files\\Adobe\\HelpCfg", lpFilePart=0x0) returned 0x31 [0058.688] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Common Files\\Adobe\\HelpCfg\\", nBufferLength=0x105, lpBuffer=0x31e298, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Common Files\\Adobe\\HelpCfg\\", lpFilePart=0x0) returned 0x32 [0058.688] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Common Files\\Adobe\\HelpCfg\\*", lpFindFileData=0x31e4e4 | out: lpFindFileData=0x31e4e4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7d580500, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x7d5f2920, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x7d5f2920, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x381f40 [0058.691] FindClose (in: hFindFile=0x381f40 | out: hFindFile=0x381f40) returned 1 [0058.691] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e77c) returned 1 [0058.691] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e788) returned 1 [0058.691] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e7bc) returned 1 [0058.691] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Common Files\\Adobe\\HelpCfg", nBufferLength=0x105, lpBuffer=0x31e2c4, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Common Files\\Adobe\\HelpCfg", lpFilePart=0x0) returned 0x31 [0058.691] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Common Files\\Adobe\\HelpCfg\\", nBufferLength=0x105, lpBuffer=0x31e298, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Common Files\\Adobe\\HelpCfg\\", lpFilePart=0x0) returned 0x32 [0058.691] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Common Files\\Adobe\\HelpCfg\\*", lpFindFileData=0x31e4e4 | out: lpFindFileData=0x31e4e4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7d580500, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x7d5f2920, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x7d5f2920, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x381f40 [0058.692] FindClose (in: hFindFile=0x381f40 | out: hFindFile=0x381f40) returned 1 [0058.693] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e77c) returned 1 [0058.693] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e788) returned 1 [0058.693] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e744) returned 1 [0058.693] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Common Files\\Adobe\\HelpCfg\\ca_ES", nBufferLength=0x105, lpBuffer=0x31e24c, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Common Files\\Adobe\\HelpCfg\\ca_ES", lpFilePart=0x0) returned 0x37 [0058.693] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Common Files\\Adobe\\HelpCfg\\ca_ES\\", nBufferLength=0x105, lpBuffer=0x31e220, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Common Files\\Adobe\\HelpCfg\\ca_ES\\", lpFilePart=0x0) returned 0x38 [0058.693] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Common Files\\Adobe\\HelpCfg\\ca_ES\\*", lpFindFileData=0x31e46c | out: lpFindFileData=0x31e46c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7d5cc7c0, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x7d5cc7c0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x7d5cc7c0, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x381f40 [0058.694] FindClose (in: hFindFile=0x381f40 | out: hFindFile=0x381f40) returned 1 [0058.694] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e704) returned 1 [0058.694] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e710) returned 1 [0058.695] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e744) returned 1 [0058.695] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Common Files\\Adobe\\HelpCfg\\ca_ES", nBufferLength=0x105, lpBuffer=0x31e24c, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Common Files\\Adobe\\HelpCfg\\ca_ES", lpFilePart=0x0) returned 0x37 [0058.695] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Common Files\\Adobe\\HelpCfg\\ca_ES\\", nBufferLength=0x105, lpBuffer=0x31e220, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Common Files\\Adobe\\HelpCfg\\ca_ES\\", lpFilePart=0x0) returned 0x38 [0058.695] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Common Files\\Adobe\\HelpCfg\\ca_ES\\*", lpFindFileData=0x31e46c | out: lpFindFileData=0x31e46c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7d5cc7c0, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x7d5cc7c0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x7d5cc7c0, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x381f40 [0058.695] FindClose (in: hFindFile=0x381f40 | out: hFindFile=0x381f40) returned 1 [0058.695] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e704) returned 1 [0058.695] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e710) returned 1 [0058.695] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e744) returned 1 [0058.695] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Common Files\\Adobe\\HelpCfg\\cs_CZ", nBufferLength=0x105, lpBuffer=0x31e24c, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Common Files\\Adobe\\HelpCfg\\cs_CZ", lpFilePart=0x0) returned 0x37 [0058.695] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Common Files\\Adobe\\HelpCfg\\cs_CZ\\", nBufferLength=0x105, lpBuffer=0x31e220, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Common Files\\Adobe\\HelpCfg\\cs_CZ\\", lpFilePart=0x0) returned 0x38 [0058.695] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Common Files\\Adobe\\HelpCfg\\cs_CZ\\*", lpFindFileData=0x31e46c | out: lpFindFileData=0x31e46c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7d5f2920, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x7d5f2920, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x7d5f2920, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x381f40 [0058.696] FindClose (in: hFindFile=0x381f40 | out: hFindFile=0x381f40) returned 1 [0058.696] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e704) returned 1 [0058.696] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e710) returned 1 [0058.696] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e744) returned 1 [0058.696] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Common Files\\Adobe\\HelpCfg\\cs_CZ", nBufferLength=0x105, lpBuffer=0x31e24c, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Common Files\\Adobe\\HelpCfg\\cs_CZ", lpFilePart=0x0) returned 0x37 [0058.696] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Common Files\\Adobe\\HelpCfg\\cs_CZ\\", nBufferLength=0x105, lpBuffer=0x31e220, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Common Files\\Adobe\\HelpCfg\\cs_CZ\\", lpFilePart=0x0) returned 0x38 [0058.696] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Common Files\\Adobe\\HelpCfg\\cs_CZ\\*", lpFindFileData=0x31e46c | out: lpFindFileData=0x31e46c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7d5f2920, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x7d5f2920, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x7d5f2920, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x381f40 [0058.696] FindClose (in: hFindFile=0x381f40 | out: hFindFile=0x381f40) returned 1 [0058.696] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e704) returned 1 [0058.696] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e710) returned 1 [0058.696] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e744) returned 1 [0058.696] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Common Files\\Adobe\\HelpCfg\\da_DK", nBufferLength=0x105, lpBuffer=0x31e24c, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Common Files\\Adobe\\HelpCfg\\da_DK", lpFilePart=0x0) returned 0x37 [0058.696] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Common Files\\Adobe\\HelpCfg\\da_DK\\", nBufferLength=0x105, lpBuffer=0x31e220, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Common Files\\Adobe\\HelpCfg\\da_DK\\", lpFilePart=0x0) returned 0x38 [0058.696] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Common Files\\Adobe\\HelpCfg\\da_DK\\*", lpFindFileData=0x31e46c | out: lpFindFileData=0x31e46c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7d580500, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x7d580500, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x7d580500, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x381f40 [0058.697] FindClose (in: hFindFile=0x381f40 | out: hFindFile=0x381f40) returned 1 [0058.697] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e704) returned 1 [0058.697] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e710) returned 1 [0058.697] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e744) returned 1 [0058.697] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Common Files\\Adobe\\HelpCfg\\da_DK", nBufferLength=0x105, lpBuffer=0x31e24c, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Common Files\\Adobe\\HelpCfg\\da_DK", lpFilePart=0x0) returned 0x37 [0058.697] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Common Files\\Adobe\\HelpCfg\\da_DK\\", nBufferLength=0x105, lpBuffer=0x31e220, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Common Files\\Adobe\\HelpCfg\\da_DK\\", lpFilePart=0x0) returned 0x38 [0058.697] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Common Files\\Adobe\\HelpCfg\\da_DK\\*", lpFindFileData=0x31e46c | out: lpFindFileData=0x31e46c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7d580500, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x7d580500, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x7d580500, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x381f40 [0058.698] FindClose (in: hFindFile=0x381f40 | out: hFindFile=0x381f40) returned 1 [0058.698] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e704) returned 1 [0058.698] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e710) returned 1 [0058.698] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e744) returned 1 [0058.698] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Common Files\\Adobe\\HelpCfg\\de_DE", nBufferLength=0x105, lpBuffer=0x31e24c, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Common Files\\Adobe\\HelpCfg\\de_DE", lpFilePart=0x0) returned 0x37 [0058.698] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Common Files\\Adobe\\HelpCfg\\de_DE\\", nBufferLength=0x105, lpBuffer=0x31e220, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Common Files\\Adobe\\HelpCfg\\de_DE\\", lpFilePart=0x0) returned 0x38 [0058.698] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Common Files\\Adobe\\HelpCfg\\de_DE\\*", lpFindFileData=0x31e46c | out: lpFindFileData=0x31e46c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7d5a6660, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x7d5cc7c0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x7d5cc7c0, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x381f40 [0058.699] FindClose (in: hFindFile=0x381f40 | out: hFindFile=0x381f40) returned 1 [0058.699] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e704) returned 1 [0058.699] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e710) returned 1 [0058.699] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e744) returned 1 [0058.699] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Common Files\\Adobe\\HelpCfg\\de_DE", nBufferLength=0x105, lpBuffer=0x31e24c, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Common Files\\Adobe\\HelpCfg\\de_DE", lpFilePart=0x0) returned 0x37 [0058.699] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Common Files\\Adobe\\HelpCfg\\de_DE\\", nBufferLength=0x105, lpBuffer=0x31e220, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Common Files\\Adobe\\HelpCfg\\de_DE\\", lpFilePart=0x0) returned 0x38 [0058.699] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Common Files\\Adobe\\HelpCfg\\de_DE\\*", lpFindFileData=0x31e46c | out: lpFindFileData=0x31e46c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7d5a6660, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x7d5cc7c0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x7d5cc7c0, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x381f40 [0058.699] FindClose (in: hFindFile=0x381f40 | out: hFindFile=0x381f40) returned 1 [0058.699] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e704) returned 1 [0058.699] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e710) returned 1 [0058.699] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e744) returned 1 [0058.699] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Common Files\\Adobe\\HelpCfg\\en_US", nBufferLength=0x105, lpBuffer=0x31e24c, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Common Files\\Adobe\\HelpCfg\\en_US", lpFilePart=0x0) returned 0x37 [0058.699] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Common Files\\Adobe\\HelpCfg\\en_US\\", nBufferLength=0x105, lpBuffer=0x31e220, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Common Files\\Adobe\\HelpCfg\\en_US\\", lpFilePart=0x0) returned 0x38 [0058.699] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Common Files\\Adobe\\HelpCfg\\en_US\\*", lpFindFileData=0x31e46c | out: lpFindFileData=0x31e46c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7d5a6660, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x7d5a6660, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x7d5a6660, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x381f40 [0058.699] FindClose (in: hFindFile=0x381f40 | out: hFindFile=0x381f40) returned 1 [0058.700] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e704) returned 1 [0058.700] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e710) returned 1 [0058.700] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e744) returned 1 [0058.700] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Common Files\\Adobe\\HelpCfg\\en_US", nBufferLength=0x105, lpBuffer=0x31e24c, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Common Files\\Adobe\\HelpCfg\\en_US", lpFilePart=0x0) returned 0x37 [0058.700] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Common Files\\Adobe\\HelpCfg\\en_US\\", nBufferLength=0x105, lpBuffer=0x31e220, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Common Files\\Adobe\\HelpCfg\\en_US\\", lpFilePart=0x0) returned 0x38 [0058.700] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Common Files\\Adobe\\HelpCfg\\en_US\\*", lpFindFileData=0x31e46c | out: lpFindFileData=0x31e46c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7d5a6660, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x7d5a6660, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x7d5a6660, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x381f40 [0058.700] FindClose (in: hFindFile=0x381f40 | out: hFindFile=0x381f40) returned 1 [0058.700] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e704) returned 1 [0058.700] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e710) returned 1 [0058.700] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e744) returned 1 [0058.700] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Common Files\\Adobe\\HelpCfg\\es_ES", nBufferLength=0x105, lpBuffer=0x31e24c, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Common Files\\Adobe\\HelpCfg\\es_ES", lpFilePart=0x0) returned 0x37 [0058.700] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Common Files\\Adobe\\HelpCfg\\es_ES\\", nBufferLength=0x105, lpBuffer=0x31e220, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Common Files\\Adobe\\HelpCfg\\es_ES\\", lpFilePart=0x0) returned 0x38 [0058.700] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Common Files\\Adobe\\HelpCfg\\es_ES\\*", lpFindFileData=0x31e46c | out: lpFindFileData=0x31e46c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7d5cc7c0, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x7d5cc7c0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x7d5cc7c0, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x381f40 [0058.701] FindClose (in: hFindFile=0x381f40 | out: hFindFile=0x381f40) returned 1 [0058.702] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e704) returned 1 [0058.702] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e710) returned 1 [0058.702] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e744) returned 1 [0058.702] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Common Files\\Adobe\\HelpCfg\\es_ES", nBufferLength=0x105, lpBuffer=0x31e24c, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Common Files\\Adobe\\HelpCfg\\es_ES", lpFilePart=0x0) returned 0x37 [0058.702] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Common Files\\Adobe\\HelpCfg\\es_ES\\", nBufferLength=0x105, lpBuffer=0x31e220, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Common Files\\Adobe\\HelpCfg\\es_ES\\", lpFilePart=0x0) returned 0x38 [0058.702] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Common Files\\Adobe\\HelpCfg\\es_ES\\*", lpFindFileData=0x31e46c | out: lpFindFileData=0x31e46c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7d5cc7c0, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x7d5cc7c0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x7d5cc7c0, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x381f40 [0058.702] FindClose (in: hFindFile=0x381f40 | out: hFindFile=0x381f40) returned 1 [0058.702] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e704) returned 1 [0058.702] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e710) returned 1 [0058.702] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e744) returned 1 [0058.702] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Common Files\\Adobe\\HelpCfg\\eu_ES", nBufferLength=0x105, lpBuffer=0x31e24c, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Common Files\\Adobe\\HelpCfg\\eu_ES", lpFilePart=0x0) returned 0x37 [0058.702] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Common Files\\Adobe\\HelpCfg\\eu_ES\\", nBufferLength=0x105, lpBuffer=0x31e220, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Common Files\\Adobe\\HelpCfg\\eu_ES\\", lpFilePart=0x0) returned 0x38 [0058.702] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Common Files\\Adobe\\HelpCfg\\eu_ES\\*", lpFindFileData=0x31e46c | out: lpFindFileData=0x31e46c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7d5cc7c0, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x7d5cc7c0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x7d5cc7c0, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x381f40 [0058.703] FindClose (in: hFindFile=0x381f40 | out: hFindFile=0x381f40) returned 1 [0058.703] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e704) returned 1 [0058.703] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e710) returned 1 [0058.703] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e744) returned 1 [0058.703] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Common Files\\Adobe\\HelpCfg\\eu_ES", nBufferLength=0x105, lpBuffer=0x31e24c, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Common Files\\Adobe\\HelpCfg\\eu_ES", lpFilePart=0x0) returned 0x37 [0058.703] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Common Files\\Adobe\\HelpCfg\\eu_ES\\", nBufferLength=0x105, lpBuffer=0x31e220, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Common Files\\Adobe\\HelpCfg\\eu_ES\\", lpFilePart=0x0) returned 0x38 [0058.703] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Common Files\\Adobe\\HelpCfg\\eu_ES\\*", lpFindFileData=0x31e46c | out: lpFindFileData=0x31e46c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7d5cc7c0, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x7d5cc7c0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x7d5cc7c0, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x381f40 [0058.703] FindClose (in: hFindFile=0x381f40 | out: hFindFile=0x381f40) returned 1 [0058.703] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e704) returned 1 [0058.703] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e710) returned 1 [0058.703] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e744) returned 1 [0058.703] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Common Files\\Adobe\\HelpCfg\\fi_FI", nBufferLength=0x105, lpBuffer=0x31e24c, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Common Files\\Adobe\\HelpCfg\\fi_FI", lpFilePart=0x0) returned 0x37 [0058.703] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Common Files\\Adobe\\HelpCfg\\fi_FI\\", nBufferLength=0x105, lpBuffer=0x31e220, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Common Files\\Adobe\\HelpCfg\\fi_FI\\", lpFilePart=0x0) returned 0x38 [0058.703] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Common Files\\Adobe\\HelpCfg\\fi_FI\\*", lpFindFileData=0x31e46c | out: lpFindFileData=0x31e46c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7d5cc7c0, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x7d5cc7c0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x7d5cc7c0, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x381f40 [0058.704] FindClose (in: hFindFile=0x381f40 | out: hFindFile=0x381f40) returned 1 [0058.704] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e704) returned 1 [0058.704] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e710) returned 1 [0058.704] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e744) returned 1 [0058.704] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Common Files\\Adobe\\HelpCfg\\fi_FI", nBufferLength=0x105, lpBuffer=0x31e24c, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Common Files\\Adobe\\HelpCfg\\fi_FI", lpFilePart=0x0) returned 0x37 [0058.704] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Common Files\\Adobe\\HelpCfg\\fi_FI\\", nBufferLength=0x105, lpBuffer=0x31e220, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Common Files\\Adobe\\HelpCfg\\fi_FI\\", lpFilePart=0x0) returned 0x38 [0058.704] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Common Files\\Adobe\\HelpCfg\\fi_FI\\*", lpFindFileData=0x31e46c | out: lpFindFileData=0x31e46c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7d5cc7c0, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x7d5cc7c0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x7d5cc7c0, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x381f40 [0058.705] FindClose (in: hFindFile=0x381f40 | out: hFindFile=0x381f40) returned 1 [0058.705] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e704) returned 1 [0058.705] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e710) returned 1 [0058.705] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e744) returned 1 [0058.705] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Common Files\\Adobe\\HelpCfg\\fr_FR", nBufferLength=0x105, lpBuffer=0x31e24c, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Common Files\\Adobe\\HelpCfg\\fr_FR", lpFilePart=0x0) returned 0x37 [0058.705] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Common Files\\Adobe\\HelpCfg\\fr_FR\\", nBufferLength=0x105, lpBuffer=0x31e220, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Common Files\\Adobe\\HelpCfg\\fr_FR\\", lpFilePart=0x0) returned 0x38 [0058.705] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Common Files\\Adobe\\HelpCfg\\fr_FR\\*", lpFindFileData=0x31e46c | out: lpFindFileData=0x31e46c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7d580500, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x7d580500, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x7d580500, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x381f40 [0058.706] FindClose (in: hFindFile=0x381f40 | out: hFindFile=0x381f40) returned 1 [0058.706] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e704) returned 1 [0058.706] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e710) returned 1 [0058.706] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e744) returned 1 [0058.706] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Common Files\\Adobe\\HelpCfg\\fr_FR", nBufferLength=0x105, lpBuffer=0x31e24c, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Common Files\\Adobe\\HelpCfg\\fr_FR", lpFilePart=0x0) returned 0x37 [0058.706] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Common Files\\Adobe\\HelpCfg\\fr_FR\\", nBufferLength=0x105, lpBuffer=0x31e220, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Common Files\\Adobe\\HelpCfg\\fr_FR\\", lpFilePart=0x0) returned 0x38 [0058.706] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Common Files\\Adobe\\HelpCfg\\fr_FR\\*", lpFindFileData=0x31e46c | out: lpFindFileData=0x31e46c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7d580500, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x7d580500, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x7d580500, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x381f40 [0058.706] FindClose (in: hFindFile=0x381f40 | out: hFindFile=0x381f40) returned 1 [0058.706] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e704) returned 1 [0058.706] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e710) returned 1 [0058.706] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e744) returned 1 [0058.706] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Common Files\\Adobe\\HelpCfg\\hr_HR", nBufferLength=0x105, lpBuffer=0x31e24c, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Common Files\\Adobe\\HelpCfg\\hr_HR", lpFilePart=0x0) returned 0x37 [0058.706] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Common Files\\Adobe\\HelpCfg\\hr_HR\\", nBufferLength=0x105, lpBuffer=0x31e220, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Common Files\\Adobe\\HelpCfg\\hr_HR\\", lpFilePart=0x0) returned 0x38 [0058.706] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Common Files\\Adobe\\HelpCfg\\hr_HR\\*", lpFindFileData=0x31e46c | out: lpFindFileData=0x31e46c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7d5f2920, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x7d5f2920, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x7d5f2920, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x381f40 [0058.706] FindClose (in: hFindFile=0x381f40 | out: hFindFile=0x381f40) returned 1 [0058.706] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e704) returned 1 [0058.707] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e710) returned 1 [0058.707] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e744) returned 1 [0058.707] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Common Files\\Adobe\\HelpCfg\\hr_HR", nBufferLength=0x105, lpBuffer=0x31e24c, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Common Files\\Adobe\\HelpCfg\\hr_HR", lpFilePart=0x0) returned 0x37 [0058.707] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Common Files\\Adobe\\HelpCfg\\hr_HR\\", nBufferLength=0x105, lpBuffer=0x31e220, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Common Files\\Adobe\\HelpCfg\\hr_HR\\", lpFilePart=0x0) returned 0x38 [0058.707] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Common Files\\Adobe\\HelpCfg\\hr_HR\\*", lpFindFileData=0x31e46c | out: lpFindFileData=0x31e46c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7d5f2920, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x7d5f2920, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x7d5f2920, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x381f40 [0058.707] FindClose (in: hFindFile=0x381f40 | out: hFindFile=0x381f40) returned 1 [0058.707] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e704) returned 1 [0058.707] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e710) returned 1 [0058.707] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e744) returned 1 [0058.707] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Common Files\\Adobe\\HelpCfg\\hu_HU", nBufferLength=0x105, lpBuffer=0x31e24c, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Common Files\\Adobe\\HelpCfg\\hu_HU", lpFilePart=0x0) returned 0x37 [0058.707] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Common Files\\Adobe\\HelpCfg\\hu_HU\\", nBufferLength=0x105, lpBuffer=0x31e220, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Common Files\\Adobe\\HelpCfg\\hu_HU\\", lpFilePart=0x0) returned 0x38 [0058.707] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Common Files\\Adobe\\HelpCfg\\hu_HU\\*", lpFindFileData=0x31e46c | out: lpFindFileData=0x31e46c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7d5f2920, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x7d5f2920, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x7d5f2920, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x381f40 [0058.708] FindClose (in: hFindFile=0x381f40 | out: hFindFile=0x381f40) returned 1 [0058.708] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e704) returned 1 [0058.708] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e710) returned 1 [0058.708] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e744) returned 1 [0058.708] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Common Files\\Adobe\\HelpCfg\\hu_HU", nBufferLength=0x105, lpBuffer=0x31e24c, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Common Files\\Adobe\\HelpCfg\\hu_HU", lpFilePart=0x0) returned 0x37 [0058.708] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Common Files\\Adobe\\HelpCfg\\hu_HU\\", nBufferLength=0x105, lpBuffer=0x31e220, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Common Files\\Adobe\\HelpCfg\\hu_HU\\", lpFilePart=0x0) returned 0x38 [0058.708] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Common Files\\Adobe\\HelpCfg\\hu_HU\\*", lpFindFileData=0x31e46c | out: lpFindFileData=0x31e46c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7d5f2920, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x7d5f2920, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x7d5f2920, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x381f40 [0058.708] FindClose (in: hFindFile=0x381f40 | out: hFindFile=0x381f40) returned 1 [0058.708] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e704) returned 1 [0058.708] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e710) returned 1 [0058.708] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e744) returned 1 [0058.708] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Common Files\\Adobe\\HelpCfg\\it_IT", nBufferLength=0x105, lpBuffer=0x31e24c, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Common Files\\Adobe\\HelpCfg\\it_IT", lpFilePart=0x0) returned 0x37 [0058.708] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Common Files\\Adobe\\HelpCfg\\it_IT\\", nBufferLength=0x105, lpBuffer=0x31e220, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Common Files\\Adobe\\HelpCfg\\it_IT\\", lpFilePart=0x0) returned 0x38 [0058.708] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Common Files\\Adobe\\HelpCfg\\it_IT\\*", lpFindFileData=0x31e46c | out: lpFindFileData=0x31e46c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7d5a6660, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x7d5a6660, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x7d5a6660, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x381f40 [0058.709] FindClose (in: hFindFile=0x381f40 | out: hFindFile=0x381f40) returned 1 [0058.709] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e704) returned 1 [0058.709] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e710) returned 1 [0058.709] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e744) returned 1 [0058.709] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Common Files\\Adobe\\HelpCfg\\it_IT", nBufferLength=0x105, lpBuffer=0x31e24c, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Common Files\\Adobe\\HelpCfg\\it_IT", lpFilePart=0x0) returned 0x37 [0058.709] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Common Files\\Adobe\\HelpCfg\\it_IT\\", nBufferLength=0x105, lpBuffer=0x31e220, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Common Files\\Adobe\\HelpCfg\\it_IT\\", lpFilePart=0x0) returned 0x38 [0058.709] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Common Files\\Adobe\\HelpCfg\\it_IT\\*", lpFindFileData=0x31e46c | out: lpFindFileData=0x31e46c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7d5a6660, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x7d5a6660, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x7d5a6660, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x381f40 [0058.710] FindClose (in: hFindFile=0x381f40 | out: hFindFile=0x381f40) returned 1 [0058.710] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e704) returned 1 [0058.710] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e710) returned 1 [0058.710] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e744) returned 1 [0058.710] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Common Files\\Adobe\\HelpCfg\\ja_JP", nBufferLength=0x105, lpBuffer=0x31e24c, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Common Files\\Adobe\\HelpCfg\\ja_JP", lpFilePart=0x0) returned 0x37 [0058.710] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Common Files\\Adobe\\HelpCfg\\ja_JP\\", nBufferLength=0x105, lpBuffer=0x31e220, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Common Files\\Adobe\\HelpCfg\\ja_JP\\", lpFilePart=0x0) returned 0x38 [0058.710] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Common Files\\Adobe\\HelpCfg\\ja_JP\\*", lpFindFileData=0x31e46c | out: lpFindFileData=0x31e46c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7d5a6660, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x7d5a6660, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x7d5a6660, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x381f40 [0058.710] FindClose (in: hFindFile=0x381f40 | out: hFindFile=0x381f40) returned 1 [0058.710] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e704) returned 1 [0058.710] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e710) returned 1 [0058.710] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e744) returned 1 [0058.710] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Common Files\\Adobe\\HelpCfg\\ja_JP", nBufferLength=0x105, lpBuffer=0x31e24c, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Common Files\\Adobe\\HelpCfg\\ja_JP", lpFilePart=0x0) returned 0x37 [0058.710] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Common Files\\Adobe\\HelpCfg\\ja_JP\\", nBufferLength=0x105, lpBuffer=0x31e220, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Common Files\\Adobe\\HelpCfg\\ja_JP\\", lpFilePart=0x0) returned 0x38 [0058.710] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Common Files\\Adobe\\HelpCfg\\ja_JP\\*", lpFindFileData=0x31e46c | out: lpFindFileData=0x31e46c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7d5a6660, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x7d5a6660, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x7d5a6660, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x381f40 [0058.710] FindClose (in: hFindFile=0x381f40 | out: hFindFile=0x381f40) returned 1 [0058.710] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e704) returned 1 [0058.710] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e710) returned 1 [0058.711] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e744) returned 1 [0058.711] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Common Files\\Adobe\\HelpCfg\\ko_KR", nBufferLength=0x105, lpBuffer=0x31e24c, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Common Files\\Adobe\\HelpCfg\\ko_KR", lpFilePart=0x0) returned 0x37 [0058.711] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Common Files\\Adobe\\HelpCfg\\ko_KR\\", nBufferLength=0x105, lpBuffer=0x31e220, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Common Files\\Adobe\\HelpCfg\\ko_KR\\", lpFilePart=0x0) returned 0x38 [0058.711] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Common Files\\Adobe\\HelpCfg\\ko_KR\\*", lpFindFileData=0x31e46c | out: lpFindFileData=0x31e46c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7d5a6660, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x7d5a6660, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x7d5a6660, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x381f40 [0058.711] FindClose (in: hFindFile=0x381f40 | out: hFindFile=0x381f40) returned 1 [0058.711] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e704) returned 1 [0058.711] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e710) returned 1 [0058.712] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e744) returned 1 [0058.712] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Common Files\\Adobe\\HelpCfg\\ko_KR", nBufferLength=0x105, lpBuffer=0x31e24c, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Common Files\\Adobe\\HelpCfg\\ko_KR", lpFilePart=0x0) returned 0x37 [0058.712] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Common Files\\Adobe\\HelpCfg\\ko_KR\\", nBufferLength=0x105, lpBuffer=0x31e220, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Common Files\\Adobe\\HelpCfg\\ko_KR\\", lpFilePart=0x0) returned 0x38 [0058.712] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Common Files\\Adobe\\HelpCfg\\ko_KR\\*", lpFindFileData=0x31e46c | out: lpFindFileData=0x31e46c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7d5a6660, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x7d5a6660, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x7d5a6660, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x381f40 [0058.712] FindClose (in: hFindFile=0x381f40 | out: hFindFile=0x381f40) returned 1 [0058.712] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e704) returned 1 [0058.712] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e710) returned 1 [0058.712] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e744) returned 1 [0058.712] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Common Files\\Adobe\\HelpCfg\\nb_NO", nBufferLength=0x105, lpBuffer=0x31e24c, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Common Files\\Adobe\\HelpCfg\\nb_NO", lpFilePart=0x0) returned 0x37 [0058.712] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Common Files\\Adobe\\HelpCfg\\nb_NO\\", nBufferLength=0x105, lpBuffer=0x31e220, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Common Files\\Adobe\\HelpCfg\\nb_NO\\", lpFilePart=0x0) returned 0x38 [0058.712] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Common Files\\Adobe\\HelpCfg\\nb_NO\\*", lpFindFileData=0x31e46c | out: lpFindFileData=0x31e46c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7d5a6660, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x7d5a6660, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x7d5a6660, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x381f40 [0058.712] FindClose (in: hFindFile=0x381f40 | out: hFindFile=0x381f40) returned 1 [0058.712] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e704) returned 1 [0058.712] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e710) returned 1 [0058.712] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e744) returned 1 [0058.712] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Common Files\\Adobe\\HelpCfg\\nb_NO", nBufferLength=0x105, lpBuffer=0x31e24c, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Common Files\\Adobe\\HelpCfg\\nb_NO", lpFilePart=0x0) returned 0x37 [0058.712] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Common Files\\Adobe\\HelpCfg\\nb_NO\\", nBufferLength=0x105, lpBuffer=0x31e220, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Common Files\\Adobe\\HelpCfg\\nb_NO\\", lpFilePart=0x0) returned 0x38 [0058.713] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Common Files\\Adobe\\HelpCfg\\nb_NO\\*", lpFindFileData=0x31e46c | out: lpFindFileData=0x31e46c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7d5a6660, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x7d5a6660, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x7d5a6660, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x381f40 [0058.713] FindClose (in: hFindFile=0x381f40 | out: hFindFile=0x381f40) returned 1 [0058.713] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e704) returned 1 [0058.713] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e710) returned 1 [0058.713] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e744) returned 1 [0058.713] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Common Files\\Adobe\\HelpCfg\\nl_NL", nBufferLength=0x105, lpBuffer=0x31e24c, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Common Files\\Adobe\\HelpCfg\\nl_NL", lpFilePart=0x0) returned 0x37 [0058.713] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Common Files\\Adobe\\HelpCfg\\nl_NL\\", nBufferLength=0x105, lpBuffer=0x31e220, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Common Files\\Adobe\\HelpCfg\\nl_NL\\", lpFilePart=0x0) returned 0x38 [0058.713] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Common Files\\Adobe\\HelpCfg\\nl_NL\\*", lpFindFileData=0x31e46c | out: lpFindFileData=0x31e46c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7d580500, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x7d5a6660, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x7d5a6660, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x381f40 [0058.713] FindClose (in: hFindFile=0x381f40 | out: hFindFile=0x381f40) returned 1 [0058.713] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e704) returned 1 [0058.713] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e710) returned 1 [0058.713] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e744) returned 1 [0058.713] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Common Files\\Adobe\\HelpCfg\\nl_NL", nBufferLength=0x105, lpBuffer=0x31e24c, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Common Files\\Adobe\\HelpCfg\\nl_NL", lpFilePart=0x0) returned 0x37 [0058.713] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Common Files\\Adobe\\HelpCfg\\nl_NL\\", nBufferLength=0x105, lpBuffer=0x31e220, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Common Files\\Adobe\\HelpCfg\\nl_NL\\", lpFilePart=0x0) returned 0x38 [0058.713] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Common Files\\Adobe\\HelpCfg\\nl_NL\\*", lpFindFileData=0x31e46c | out: lpFindFileData=0x31e46c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7d580500, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x7d5a6660, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x7d5a6660, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x381f40 [0058.713] FindClose (in: hFindFile=0x381f40 | out: hFindFile=0x381f40) returned 1 [0058.713] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e704) returned 1 [0058.714] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e710) returned 1 [0058.714] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e744) returned 1 [0058.714] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Common Files\\Adobe\\HelpCfg\\pl_PL", nBufferLength=0x105, lpBuffer=0x31e24c, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Common Files\\Adobe\\HelpCfg\\pl_PL", lpFilePart=0x0) returned 0x37 [0058.714] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Common Files\\Adobe\\HelpCfg\\pl_PL\\", nBufferLength=0x105, lpBuffer=0x31e220, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Common Files\\Adobe\\HelpCfg\\pl_PL\\", lpFilePart=0x0) returned 0x38 [0058.714] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Common Files\\Adobe\\HelpCfg\\pl_PL\\*", lpFindFileData=0x31e46c | out: lpFindFileData=0x31e46c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7d5f2920, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x7d5f2920, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x7d5f2920, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x381f40 [0058.714] FindClose (in: hFindFile=0x381f40 | out: hFindFile=0x381f40) returned 1 [0058.714] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e704) returned 1 [0058.714] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e710) returned 1 [0058.714] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e744) returned 1 [0058.714] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Common Files\\Adobe\\HelpCfg\\pl_PL", nBufferLength=0x105, lpBuffer=0x31e24c, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Common Files\\Adobe\\HelpCfg\\pl_PL", lpFilePart=0x0) returned 0x37 [0058.714] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Common Files\\Adobe\\HelpCfg\\pl_PL\\", nBufferLength=0x105, lpBuffer=0x31e220, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Common Files\\Adobe\\HelpCfg\\pl_PL\\", lpFilePart=0x0) returned 0x38 [0058.714] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Common Files\\Adobe\\HelpCfg\\pl_PL\\*", lpFindFileData=0x31e46c | out: lpFindFileData=0x31e46c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7d5f2920, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x7d5f2920, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x7d5f2920, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x381f40 [0058.714] FindClose (in: hFindFile=0x381f40 | out: hFindFile=0x381f40) returned 1 [0058.714] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e704) returned 1 [0058.714] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e710) returned 1 [0058.714] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e744) returned 1 [0058.714] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Common Files\\Adobe\\HelpCfg\\pt_BR", nBufferLength=0x105, lpBuffer=0x31e24c, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Common Files\\Adobe\\HelpCfg\\pt_BR", lpFilePart=0x0) returned 0x37 [0058.714] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Common Files\\Adobe\\HelpCfg\\pt_BR\\", nBufferLength=0x105, lpBuffer=0x31e220, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Common Files\\Adobe\\HelpCfg\\pt_BR\\", lpFilePart=0x0) returned 0x38 [0058.715] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Common Files\\Adobe\\HelpCfg\\pt_BR\\*", lpFindFileData=0x31e46c | out: lpFindFileData=0x31e46c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7d5cc7c0, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x7d5cc7c0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x7d5cc7c0, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x381f40 [0058.715] FindClose (in: hFindFile=0x381f40 | out: hFindFile=0x381f40) returned 1 [0058.715] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e704) returned 1 [0058.715] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e710) returned 1 [0058.715] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e744) returned 1 [0058.715] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Common Files\\Adobe\\HelpCfg\\pt_BR", nBufferLength=0x105, lpBuffer=0x31e24c, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Common Files\\Adobe\\HelpCfg\\pt_BR", lpFilePart=0x0) returned 0x37 [0058.715] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Common Files\\Adobe\\HelpCfg\\pt_BR\\", nBufferLength=0x105, lpBuffer=0x31e220, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Common Files\\Adobe\\HelpCfg\\pt_BR\\", lpFilePart=0x0) returned 0x38 [0058.715] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Common Files\\Adobe\\HelpCfg\\pt_BR\\*", lpFindFileData=0x31e46c | out: lpFindFileData=0x31e46c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7d5cc7c0, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x7d5cc7c0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x7d5cc7c0, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x381f40 [0058.715] FindClose (in: hFindFile=0x381f40 | out: hFindFile=0x381f40) returned 1 [0058.715] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e704) returned 1 [0058.715] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e710) returned 1 [0058.715] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e744) returned 1 [0058.715] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Common Files\\Adobe\\HelpCfg\\ro_RO", nBufferLength=0x105, lpBuffer=0x31e24c, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Common Files\\Adobe\\HelpCfg\\ro_RO", lpFilePart=0x0) returned 0x37 [0058.715] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Common Files\\Adobe\\HelpCfg\\ro_RO\\", nBufferLength=0x105, lpBuffer=0x31e220, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Common Files\\Adobe\\HelpCfg\\ro_RO\\", lpFilePart=0x0) returned 0x38 [0058.715] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Common Files\\Adobe\\HelpCfg\\ro_RO\\*", lpFindFileData=0x31e46c | out: lpFindFileData=0x31e46c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7d5f2920, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x7d5f2920, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x7d5f2920, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x381f40 [0058.716] FindClose (in: hFindFile=0x381f40 | out: hFindFile=0x381f40) returned 1 [0058.716] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e704) returned 1 [0058.716] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e710) returned 1 [0058.716] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e744) returned 1 [0058.716] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Common Files\\Adobe\\HelpCfg\\ro_RO", nBufferLength=0x105, lpBuffer=0x31e24c, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Common Files\\Adobe\\HelpCfg\\ro_RO", lpFilePart=0x0) returned 0x37 [0058.716] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Common Files\\Adobe\\HelpCfg\\ro_RO\\", nBufferLength=0x105, lpBuffer=0x31e220, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Common Files\\Adobe\\HelpCfg\\ro_RO\\", lpFilePart=0x0) returned 0x38 [0058.716] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Common Files\\Adobe\\HelpCfg\\ro_RO\\*", lpFindFileData=0x31e46c | out: lpFindFileData=0x31e46c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7d5f2920, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x7d5f2920, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x7d5f2920, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x381f40 [0058.717] FindClose (in: hFindFile=0x381f40 | out: hFindFile=0x381f40) returned 1 [0058.717] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e704) returned 1 [0058.717] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e710) returned 1 [0058.717] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e744) returned 1 [0058.717] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Common Files\\Adobe\\HelpCfg\\ru_RU", nBufferLength=0x105, lpBuffer=0x31e24c, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Common Files\\Adobe\\HelpCfg\\ru_RU", lpFilePart=0x0) returned 0x37 [0058.717] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Common Files\\Adobe\\HelpCfg\\ru_RU\\", nBufferLength=0x105, lpBuffer=0x31e220, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Common Files\\Adobe\\HelpCfg\\ru_RU\\", lpFilePart=0x0) returned 0x38 [0058.717] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Common Files\\Adobe\\HelpCfg\\ru_RU\\*", lpFindFileData=0x31e46c | out: lpFindFileData=0x31e46c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7d5f2920, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x7d5f2920, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x7d5f2920, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x381f40 [0058.717] FindClose (in: hFindFile=0x381f40 | out: hFindFile=0x381f40) returned 1 [0058.717] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e704) returned 1 [0058.717] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e710) returned 1 [0058.717] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e744) returned 1 [0058.717] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Common Files\\Adobe\\HelpCfg\\ru_RU", nBufferLength=0x105, lpBuffer=0x31e24c, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Common Files\\Adobe\\HelpCfg\\ru_RU", lpFilePart=0x0) returned 0x37 [0058.717] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Common Files\\Adobe\\HelpCfg\\ru_RU\\", nBufferLength=0x105, lpBuffer=0x31e220, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Common Files\\Adobe\\HelpCfg\\ru_RU\\", lpFilePart=0x0) returned 0x38 [0058.717] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Common Files\\Adobe\\HelpCfg\\ru_RU\\*", lpFindFileData=0x31e46c | out: lpFindFileData=0x31e46c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7d5f2920, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x7d5f2920, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x7d5f2920, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x381f40 [0058.717] FindClose (in: hFindFile=0x381f40 | out: hFindFile=0x381f40) returned 1 [0058.717] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e704) returned 1 [0058.717] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e710) returned 1 [0058.718] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e744) returned 1 [0058.718] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Common Files\\Adobe\\HelpCfg\\sk_SK", nBufferLength=0x105, lpBuffer=0x31e24c, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Common Files\\Adobe\\HelpCfg\\sk_SK", lpFilePart=0x0) returned 0x37 [0058.718] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Common Files\\Adobe\\HelpCfg\\sk_SK\\", nBufferLength=0x105, lpBuffer=0x31e220, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Common Files\\Adobe\\HelpCfg\\sk_SK\\", lpFilePart=0x0) returned 0x38 [0058.718] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Common Files\\Adobe\\HelpCfg\\sk_SK\\*", lpFindFileData=0x31e46c | out: lpFindFileData=0x31e46c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7d5f2920, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x7d5f2920, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x7d5f2920, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x381f40 [0058.721] FindClose (in: hFindFile=0x381f40 | out: hFindFile=0x381f40) returned 1 [0058.721] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e704) returned 1 [0058.721] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e710) returned 1 [0058.721] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e744) returned 1 [0058.721] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Common Files\\Adobe\\HelpCfg\\sk_SK", nBufferLength=0x105, lpBuffer=0x31e24c, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Common Files\\Adobe\\HelpCfg\\sk_SK", lpFilePart=0x0) returned 0x37 [0058.721] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Common Files\\Adobe\\HelpCfg\\sk_SK\\", nBufferLength=0x105, lpBuffer=0x31e220, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Common Files\\Adobe\\HelpCfg\\sk_SK\\", lpFilePart=0x0) returned 0x38 [0058.721] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Common Files\\Adobe\\HelpCfg\\sk_SK\\*", lpFindFileData=0x31e46c | out: lpFindFileData=0x31e46c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7d5f2920, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x7d5f2920, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x7d5f2920, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x381f40 [0058.721] FindClose (in: hFindFile=0x381f40 | out: hFindFile=0x381f40) returned 1 [0058.721] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e704) returned 1 [0058.721] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e710) returned 1 [0058.721] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e744) returned 1 [0058.721] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Common Files\\Adobe\\HelpCfg\\sl_SI", nBufferLength=0x105, lpBuffer=0x31e24c, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Common Files\\Adobe\\HelpCfg\\sl_SI", lpFilePart=0x0) returned 0x37 [0058.721] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Common Files\\Adobe\\HelpCfg\\sl_SI\\", nBufferLength=0x105, lpBuffer=0x31e220, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Common Files\\Adobe\\HelpCfg\\sl_SI\\", lpFilePart=0x0) returned 0x38 [0058.721] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Common Files\\Adobe\\HelpCfg\\sl_SI\\*", lpFindFileData=0x31e46c | out: lpFindFileData=0x31e46c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7d5cc7c0, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x7d5f2920, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x7d5f2920, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x381f40 [0058.722] FindClose (in: hFindFile=0x381f40 | out: hFindFile=0x381f40) returned 1 [0058.722] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e704) returned 1 [0058.722] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e710) returned 1 [0058.722] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e744) returned 1 [0058.722] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Common Files\\Adobe\\HelpCfg\\sl_SI", nBufferLength=0x105, lpBuffer=0x31e24c, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Common Files\\Adobe\\HelpCfg\\sl_SI", lpFilePart=0x0) returned 0x37 [0058.722] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Common Files\\Adobe\\HelpCfg\\sl_SI\\", nBufferLength=0x105, lpBuffer=0x31e220, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Common Files\\Adobe\\HelpCfg\\sl_SI\\", lpFilePart=0x0) returned 0x38 [0058.722] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Common Files\\Adobe\\HelpCfg\\sl_SI\\*", lpFindFileData=0x31e46c | out: lpFindFileData=0x31e46c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7d5cc7c0, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x7d5f2920, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x7d5f2920, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x381f40 [0058.722] FindClose (in: hFindFile=0x381f40 | out: hFindFile=0x381f40) returned 1 [0058.722] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e704) returned 1 [0058.722] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e710) returned 1 [0058.722] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e744) returned 1 [0058.722] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Common Files\\Adobe\\HelpCfg\\sv_SE", nBufferLength=0x105, lpBuffer=0x31e24c, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Common Files\\Adobe\\HelpCfg\\sv_SE", lpFilePart=0x0) returned 0x37 [0058.722] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Common Files\\Adobe\\HelpCfg\\sv_SE\\", nBufferLength=0x105, lpBuffer=0x31e220, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Common Files\\Adobe\\HelpCfg\\sv_SE\\", lpFilePart=0x0) returned 0x38 [0058.722] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Common Files\\Adobe\\HelpCfg\\sv_SE\\*", lpFindFileData=0x31e46c | out: lpFindFileData=0x31e46c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7d5cc7c0, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x7d5cc7c0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x7d5cc7c0, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x381f40 [0058.722] FindClose (in: hFindFile=0x381f40 | out: hFindFile=0x381f40) returned 1 [0058.723] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e704) returned 1 [0058.723] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e710) returned 1 [0058.723] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e744) returned 1 [0058.723] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Common Files\\Adobe\\HelpCfg\\sv_SE", nBufferLength=0x105, lpBuffer=0x31e24c, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Common Files\\Adobe\\HelpCfg\\sv_SE", lpFilePart=0x0) returned 0x37 [0058.723] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Common Files\\Adobe\\HelpCfg\\sv_SE\\", nBufferLength=0x105, lpBuffer=0x31e220, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Common Files\\Adobe\\HelpCfg\\sv_SE\\", lpFilePart=0x0) returned 0x38 [0058.723] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Common Files\\Adobe\\HelpCfg\\sv_SE\\*", lpFindFileData=0x31e46c | out: lpFindFileData=0x31e46c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7d5cc7c0, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x7d5cc7c0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x7d5cc7c0, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x381f40 [0058.723] FindClose (in: hFindFile=0x381f40 | out: hFindFile=0x381f40) returned 1 [0058.723] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e704) returned 1 [0058.723] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e710) returned 1 [0058.723] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e744) returned 1 [0058.723] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Common Files\\Adobe\\HelpCfg\\tr_TR", nBufferLength=0x105, lpBuffer=0x31e24c, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Common Files\\Adobe\\HelpCfg\\tr_TR", lpFilePart=0x0) returned 0x37 [0058.723] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Common Files\\Adobe\\HelpCfg\\tr_TR\\", nBufferLength=0x105, lpBuffer=0x31e220, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Common Files\\Adobe\\HelpCfg\\tr_TR\\", lpFilePart=0x0) returned 0x38 [0058.723] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Common Files\\Adobe\\HelpCfg\\tr_TR\\*", lpFindFileData=0x31e46c | out: lpFindFileData=0x31e46c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7d5cc7c0, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x7d5cc7c0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x7d5cc7c0, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x381f40 [0058.724] FindClose (in: hFindFile=0x381f40 | out: hFindFile=0x381f40) returned 1 [0058.724] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e704) returned 1 [0058.724] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e710) returned 1 [0058.724] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e744) returned 1 [0058.724] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Common Files\\Adobe\\HelpCfg\\tr_TR", nBufferLength=0x105, lpBuffer=0x31e24c, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Common Files\\Adobe\\HelpCfg\\tr_TR", lpFilePart=0x0) returned 0x37 [0058.724] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Common Files\\Adobe\\HelpCfg\\tr_TR\\", nBufferLength=0x105, lpBuffer=0x31e220, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Common Files\\Adobe\\HelpCfg\\tr_TR\\", lpFilePart=0x0) returned 0x38 [0058.724] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Common Files\\Adobe\\HelpCfg\\tr_TR\\*", lpFindFileData=0x31e46c | out: lpFindFileData=0x31e46c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7d5cc7c0, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x7d5cc7c0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x7d5cc7c0, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x381f40 [0058.724] FindClose (in: hFindFile=0x381f40 | out: hFindFile=0x381f40) returned 1 [0058.724] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e704) returned 1 [0058.724] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e710) returned 1 [0058.724] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e744) returned 1 [0058.724] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Common Files\\Adobe\\HelpCfg\\uk_UA", nBufferLength=0x105, lpBuffer=0x31e24c, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Common Files\\Adobe\\HelpCfg\\uk_UA", lpFilePart=0x0) returned 0x37 [0058.724] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Common Files\\Adobe\\HelpCfg\\uk_UA\\", nBufferLength=0x105, lpBuffer=0x31e220, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Common Files\\Adobe\\HelpCfg\\uk_UA\\", lpFilePart=0x0) returned 0x38 [0058.725] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Common Files\\Adobe\\HelpCfg\\uk_UA\\*", lpFindFileData=0x31e46c | out: lpFindFileData=0x31e46c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7d5cc7c0, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x7d5cc7c0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x7d5cc7c0, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x381f40 [0058.725] FindClose (in: hFindFile=0x381f40 | out: hFindFile=0x381f40) returned 1 [0058.725] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e704) returned 1 [0058.725] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e710) returned 1 [0058.725] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e744) returned 1 [0058.725] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Common Files\\Adobe\\HelpCfg\\uk_UA", nBufferLength=0x105, lpBuffer=0x31e24c, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Common Files\\Adobe\\HelpCfg\\uk_UA", lpFilePart=0x0) returned 0x37 [0058.725] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Common Files\\Adobe\\HelpCfg\\uk_UA\\", nBufferLength=0x105, lpBuffer=0x31e220, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Common Files\\Adobe\\HelpCfg\\uk_UA\\", lpFilePart=0x0) returned 0x38 [0058.725] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Common Files\\Adobe\\HelpCfg\\uk_UA\\*", lpFindFileData=0x31e46c | out: lpFindFileData=0x31e46c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7d5cc7c0, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x7d5cc7c0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x7d5cc7c0, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x381f40 [0058.725] FindClose (in: hFindFile=0x381f40 | out: hFindFile=0x381f40) returned 1 [0058.725] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e704) returned 1 [0058.725] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e710) returned 1 [0058.725] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e744) returned 1 [0058.725] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Common Files\\Adobe\\HelpCfg\\zh_CN", nBufferLength=0x105, lpBuffer=0x31e24c, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Common Files\\Adobe\\HelpCfg\\zh_CN", lpFilePart=0x0) returned 0x37 [0058.725] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Common Files\\Adobe\\HelpCfg\\zh_CN\\", nBufferLength=0x105, lpBuffer=0x31e220, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Common Files\\Adobe\\HelpCfg\\zh_CN\\", lpFilePart=0x0) returned 0x38 [0058.725] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Common Files\\Adobe\\HelpCfg\\zh_CN\\*", lpFindFileData=0x31e46c | out: lpFindFileData=0x31e46c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7d580500, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x7d580500, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x7d580500, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x381f40 [0058.726] FindClose (in: hFindFile=0x381f40 | out: hFindFile=0x381f40) returned 1 [0058.726] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e704) returned 1 [0058.726] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e710) returned 1 [0058.726] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e744) returned 1 [0058.726] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Common Files\\Adobe\\HelpCfg\\zh_CN", nBufferLength=0x105, lpBuffer=0x31e24c, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Common Files\\Adobe\\HelpCfg\\zh_CN", lpFilePart=0x0) returned 0x37 [0058.726] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Common Files\\Adobe\\HelpCfg\\zh_CN\\", nBufferLength=0x105, lpBuffer=0x31e220, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Common Files\\Adobe\\HelpCfg\\zh_CN\\", lpFilePart=0x0) returned 0x38 [0058.726] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Common Files\\Adobe\\HelpCfg\\zh_CN\\*", lpFindFileData=0x31e46c | out: lpFindFileData=0x31e46c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7d580500, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x7d580500, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x7d580500, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x381f40 [0058.726] FindClose (in: hFindFile=0x381f40 | out: hFindFile=0x381f40) returned 1 [0058.726] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e704) returned 1 [0058.726] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e710) returned 1 [0058.726] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e744) returned 1 [0058.726] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Common Files\\Adobe\\HelpCfg\\zh_TW", nBufferLength=0x105, lpBuffer=0x31e24c, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Common Files\\Adobe\\HelpCfg\\zh_TW", lpFilePart=0x0) returned 0x37 [0058.726] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Common Files\\Adobe\\HelpCfg\\zh_TW\\", nBufferLength=0x105, lpBuffer=0x31e220, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Common Files\\Adobe\\HelpCfg\\zh_TW\\", lpFilePart=0x0) returned 0x38 [0058.726] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Common Files\\Adobe\\HelpCfg\\zh_TW\\*", lpFindFileData=0x31e46c | out: lpFindFileData=0x31e46c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7d580500, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x7d580500, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x7d580500, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x381f40 [0058.726] FindClose (in: hFindFile=0x381f40 | out: hFindFile=0x381f40) returned 1 [0058.726] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e704) returned 1 [0058.726] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e710) returned 1 [0058.726] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e744) returned 1 [0058.727] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Common Files\\Adobe\\HelpCfg\\zh_TW", nBufferLength=0x105, lpBuffer=0x31e24c, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Common Files\\Adobe\\HelpCfg\\zh_TW", lpFilePart=0x0) returned 0x37 [0058.727] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Common Files\\Adobe\\HelpCfg\\zh_TW\\", nBufferLength=0x105, lpBuffer=0x31e220, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Common Files\\Adobe\\HelpCfg\\zh_TW\\", lpFilePart=0x0) returned 0x38 [0058.727] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Common Files\\Adobe\\HelpCfg\\zh_TW\\*", lpFindFileData=0x31e46c | out: lpFindFileData=0x31e46c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7d580500, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x7d580500, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x7d580500, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x381f40 [0058.727] FindClose (in: hFindFile=0x381f40 | out: hFindFile=0x381f40) returned 1 [0058.727] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e704) returned 1 [0058.727] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e710) returned 1 [0058.727] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e834) returned 1 [0058.727] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Common Files\\Java", nBufferLength=0x105, lpBuffer=0x31e33c, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Common Files\\Java", lpFilePart=0x0) returned 0x28 [0058.727] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Common Files\\Java\\", nBufferLength=0x105, lpBuffer=0x31e310, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Common Files\\Java\\", lpFilePart=0x0) returned 0x29 [0058.727] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Common Files\\Java\\*", lpFindFileData=0x31e55c | out: lpFindFileData=0x31e55c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x801ae160, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x801d42c0, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x801d42c0, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x381f40 [0058.727] FindClose (in: hFindFile=0x381f40 | out: hFindFile=0x381f40) returned 1 [0058.727] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e7f4) returned 1 [0058.727] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e800) returned 1 [0058.727] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e834) returned 1 [0058.727] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Common Files\\Java", nBufferLength=0x105, lpBuffer=0x31e33c, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Common Files\\Java", lpFilePart=0x0) returned 0x28 [0058.727] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Common Files\\Java\\", nBufferLength=0x105, lpBuffer=0x31e310, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Common Files\\Java\\", lpFilePart=0x0) returned 0x29 [0058.728] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Common Files\\Java\\*", lpFindFileData=0x31e55c | out: lpFindFileData=0x31e55c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x801ae160, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x801d42c0, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x801d42c0, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x381f40 [0058.728] FindClose (in: hFindFile=0x381f40 | out: hFindFile=0x381f40) returned 1 [0058.728] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e7f4) returned 1 [0058.728] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Common Files\\Java\\Java Update", nBufferLength=0x105, lpBuffer=0x31e2c4, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Common Files\\Java\\Java Update", lpFilePart=0x0) returned 0x34 [0058.728] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Common Files\\Java\\Java Update\\", nBufferLength=0x105, lpBuffer=0x31e298, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Common Files\\Java\\Java Update\\", lpFilePart=0x0) returned 0x35 [0058.728] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Common Files\\Java\\Java Update\\*", lpFindFileData=0x31e4e4 | out: lpFindFileData=0x31e4e4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x801d42c0, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x80220580, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x80220580, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x381f40 [0058.729] FindClose (in: hFindFile=0x381f40 | out: hFindFile=0x381f40) returned 1 [0058.729] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Common Files\\Java\\Java Update", nBufferLength=0x105, lpBuffer=0x31e2c4, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Common Files\\Java\\Java Update", lpFilePart=0x0) returned 0x34 [0058.729] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Common Files\\Java\\Java Update\\", nBufferLength=0x105, lpBuffer=0x31e298, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Common Files\\Java\\Java Update\\", lpFilePart=0x0) returned 0x35 [0058.729] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Common Files\\Java\\Java Update\\*", lpFindFileData=0x31e4e4 | out: lpFindFileData=0x31e4e4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x801d42c0, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x80220580, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x80220580, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x381f40 [0058.730] FindClose (in: hFindFile=0x381f40 | out: hFindFile=0x381f40) returned 1 [0058.731] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Common Files\\Java\\Java Update\\task.xml", nBufferLength=0x105, lpBuffer=0x31e194, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Common Files\\Java\\Java Update\\task.xml", lpFilePart=0x0) returned 0x3d [0058.731] CreateFileW (lpFileName="C:\\Program Files (x86)\\Common Files\\Java\\Java Update\\task.xml" (normalized: "c:\\program files (x86)\\common files\\java\\java update\\task.xml"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x274 [0058.732] GetFileType (hFile=0x274) returned 0x1 [0058.732] GetFileType (hFile=0x274) returned 0x1 [0058.732] GetFileSize (in: hFile=0x274, lpFileSizeHigh=0x31e790 | out: lpFileSizeHigh=0x31e790*=0x0) returned 0x583 [0058.732] ReadFile (in: hFile=0x274, lpBuffer=0x2742e18, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x31e73c, lpOverlapped=0x0 | out: lpBuffer=0x2742e18*, lpNumberOfBytesRead=0x31e73c*=0x583, lpOverlapped=0x0) returned 1 [0058.747] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Common Files\\Java\\Java Update\\task.xml", nBufferLength=0x105, lpBuffer=0x31e180, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Common Files\\Java\\Java Update\\task.xml", lpFilePart=0x0) returned 0x3d [0058.747] CreateFileW (lpFileName="C:\\Program Files (x86)\\Common Files\\Java\\Java Update\\task.xml" (normalized: "c:\\program files (x86)\\common files\\java\\java update\\task.xml"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x274 [0058.748] GetFileType (hFile=0x274) returned 0x1 [0058.748] GetFileType (hFile=0x274) returned 0x1 [0058.748] WriteFile (in: hFile=0x274, lpBuffer=0x27928ec*, nNumberOfBytesToWrite=0x590, lpNumberOfBytesWritten=0x31e704, lpOverlapped=0x0 | out: lpBuffer=0x27928ec*, lpNumberOfBytesWritten=0x31e704*=0x590, lpOverlapped=0x0) returned 1 [0058.749] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Common Files\\Java\\Java Update\\task.xml", nBufferLength=0x105, lpBuffer=0x31e2b4, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Common Files\\Java\\Java Update\\task.xml", lpFilePart=0x0) returned 0x3d [0058.749] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Common Files\\Java\\Java Update\\task.xml", nBufferLength=0x105, lpBuffer=0x31e2b4, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Common Files\\Java\\Java Update\\task.xml", lpFilePart=0x0) returned 0x3d [0058.749] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Common Files\\Java\\Java Update\\task.xml" (normalized: "c:\\program files (x86)\\common files\\java\\java update\\task.xml"), fInfoLevelId=0x0, lpFileInformation=0x31e790 | out: lpFileInformation=0x31e790*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xfeb63a00, ftCreationTime.dwHighDateTime=0x1ce76b0, ftLastAccessTime.dwLowDateTime=0x80220580, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x6771de0, ftLastWriteTime.dwHighDateTime=0x1d6eb7f, nFileSizeHigh=0x0, nFileSizeLow=0x590)) returned 1 [0058.749] MoveFileW (lpExistingFileName="C:\\Program Files (x86)\\Common Files\\Java\\Java Update\\task.xml" (normalized: "c:\\program files (x86)\\common files\\java\\java update\\task.xml"), lpNewFileName="C:\\Program Files (x86)\\Common Files\\Java\\Java Update\\task.xml" (normalized: "c:\\program files (x86)\\common files\\java\\java update\\task.xml")) returned 1 [0058.749] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Common Files\\Java\\Java Update\\task64.xml", nBufferLength=0x105, lpBuffer=0x31e194, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Common Files\\Java\\Java Update\\task64.xml", lpFilePart=0x0) returned 0x3f [0058.750] CreateFileW (lpFileName="C:\\Program Files (x86)\\Common Files\\Java\\Java Update\\task64.xml" (normalized: "c:\\program files (x86)\\common files\\java\\java update\\task64.xml"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x274 [0058.750] GetFileType (hFile=0x274) returned 0x1 [0058.750] GetFileType (hFile=0x274) returned 0x1 [0058.750] GetFileSize (in: hFile=0x274, lpFileSizeHigh=0x31e790 | out: lpFileSizeHigh=0x31e790*=0x0) returned 0x588 [0058.750] ReadFile (in: hFile=0x274, lpBuffer=0x27940c0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x31e73c, lpOverlapped=0x0 | out: lpBuffer=0x27940c0*, lpNumberOfBytesRead=0x31e73c*=0x588, lpOverlapped=0x0) returned 1 [0058.765] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Common Files\\Java\\Java Update\\task64.xml", nBufferLength=0x105, lpBuffer=0x31e180, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Common Files\\Java\\Java Update\\task64.xml", lpFilePart=0x0) returned 0x3f [0058.765] CreateFileW (lpFileName="C:\\Program Files (x86)\\Common Files\\Java\\Java Update\\task64.xml" (normalized: "c:\\program files (x86)\\common files\\java\\java update\\task64.xml"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x274 [0058.766] GetFileType (hFile=0x274) returned 0x1 [0058.766] GetFileType (hFile=0x274) returned 0x1 [0058.766] WriteFile (in: hFile=0x274, lpBuffer=0x27e3b94*, nNumberOfBytesToWrite=0x590, lpNumberOfBytesWritten=0x31e704, lpOverlapped=0x0 | out: lpBuffer=0x27e3b94*, lpNumberOfBytesWritten=0x31e704*=0x590, lpOverlapped=0x0) returned 1 [0058.767] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Common Files\\Java\\Java Update\\task64.xml", nBufferLength=0x105, lpBuffer=0x31e2b4, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Common Files\\Java\\Java Update\\task64.xml", lpFilePart=0x0) returned 0x3f [0058.767] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Common Files\\Java\\Java Update\\task64.xml", nBufferLength=0x105, lpBuffer=0x31e2b4, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Common Files\\Java\\Java Update\\task64.xml", lpFilePart=0x0) returned 0x3f [0058.767] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Common Files\\Java\\Java Update\\task64.xml" (normalized: "c:\\program files (x86)\\common files\\java\\java update\\task64.xml"), fInfoLevelId=0x0, lpFileInformation=0x31e790 | out: lpFileInformation=0x31e790*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xfeb63a00, ftCreationTime.dwHighDateTime=0x1ce76b0, ftLastAccessTime.dwLowDateTime=0x80220580, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x67be0a0, ftLastWriteTime.dwHighDateTime=0x1d6eb7f, nFileSizeHigh=0x0, nFileSizeLow=0x590)) returned 1 [0058.767] MoveFileW (lpExistingFileName="C:\\Program Files (x86)\\Common Files\\Java\\Java Update\\task64.xml" (normalized: "c:\\program files (x86)\\common files\\java\\java update\\task64.xml"), lpNewFileName="C:\\Program Files (x86)\\Common Files\\Java\\Java Update\\task64.xml" (normalized: "c:\\program files (x86)\\common files\\java\\java update\\task64.xml")) returned 1 [0058.767] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Common Files\\microsoft shared", nBufferLength=0x105, lpBuffer=0x31e33c, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Common Files\\microsoft shared", lpFilePart=0x0) returned 0x34 [0058.767] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Common Files\\microsoft shared\\", nBufferLength=0x105, lpBuffer=0x31e310, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Common Files\\microsoft shared\\", lpFilePart=0x0) returned 0x35 [0058.767] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Common Files\\microsoft shared\\*", lpFindFileData=0x31e55c | out: lpFindFileData=0x31e55c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd8d1336, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xec355540, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0xec355540, ftLastWriteTime.dwHighDateTime=0x1d305eb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x381cc0 [0058.768] FindClose (in: hFindFile=0x381cc0 | out: hFindFile=0x381cc0) returned 1 [0058.768] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Common Files\\microsoft shared", nBufferLength=0x105, lpBuffer=0x31e33c, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Common Files\\microsoft shared", lpFilePart=0x0) returned 0x34 [0058.768] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Common Files\\microsoft shared\\", nBufferLength=0x105, lpBuffer=0x31e310, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Common Files\\microsoft shared\\", lpFilePart=0x0) returned 0x35 [0058.768] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Common Files\\microsoft shared\\*", lpFindFileData=0x31e55c | out: lpFindFileData=0x31e55c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd8d1336, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xec355540, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0xec355540, ftLastWriteTime.dwHighDateTime=0x1d305eb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x381cc0 [0058.768] FindClose (in: hFindFile=0x381cc0 | out: hFindFile=0x381cc0) returned 1 [0058.768] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Common Files\\microsoft shared\\DAO", nBufferLength=0x105, lpBuffer=0x31e2c4, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Common Files\\microsoft shared\\DAO", lpFilePart=0x0) returned 0x38 [0058.768] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Common Files\\microsoft shared\\DAO\\", nBufferLength=0x105, lpBuffer=0x31e298, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Common Files\\microsoft shared\\DAO\\", lpFilePart=0x0) returned 0x39 [0058.768] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Common Files\\microsoft shared\\DAO\\*", lpFindFileData=0x31e4e4 | out: lpFindFileData=0x31e4e4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd8d1336, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd8d1336, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xfd8d1336, ftLastWriteTime.dwHighDateTime=0x1ca0431, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x381cc0 [0058.768] FindClose (in: hFindFile=0x381cc0 | out: hFindFile=0x381cc0) returned 1 [0058.768] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Common Files\\microsoft shared\\DAO", nBufferLength=0x105, lpBuffer=0x31e2c4, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Common Files\\microsoft shared\\DAO", lpFilePart=0x0) returned 0x38 [0058.769] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Common Files\\microsoft shared\\DAO\\", nBufferLength=0x105, lpBuffer=0x31e298, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Common Files\\microsoft shared\\DAO\\", lpFilePart=0x0) returned 0x39 [0058.769] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Common Files\\microsoft shared\\DAO\\*", lpFindFileData=0x31e4e4 | out: lpFindFileData=0x31e4e4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd8d1336, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd8d1336, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xfd8d1336, ftLastWriteTime.dwHighDateTime=0x1ca0431, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x381cc0 [0058.769] FindClose (in: hFindFile=0x381cc0 | out: hFindFile=0x381cc0) returned 1 [0058.769] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Common Files\\microsoft shared\\Help", nBufferLength=0x105, lpBuffer=0x31e2c4, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Common Files\\microsoft shared\\Help", lpFilePart=0x0) returned 0x39 [0058.769] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Common Files\\microsoft shared\\Help\\", nBufferLength=0x105, lpBuffer=0x31e298, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Common Files\\microsoft shared\\Help\\", lpFilePart=0x0) returned 0x3a [0058.769] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Common Files\\microsoft shared\\Help\\*", lpFindFileData=0x31e4e4 | out: lpFindFileData=0x31e4e4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeed5e6b0, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0x60d54030, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x60d54030, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x381cc0 [0058.771] FindClose (in: hFindFile=0x381cc0 | out: hFindFile=0x381cc0) returned 1 [0058.772] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Common Files\\microsoft shared\\Help", nBufferLength=0x105, lpBuffer=0x31e2c4, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Common Files\\microsoft shared\\Help", lpFilePart=0x0) returned 0x39 [0058.772] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Common Files\\microsoft shared\\Help\\", nBufferLength=0x105, lpBuffer=0x31e298, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Common Files\\microsoft shared\\Help\\", lpFilePart=0x0) returned 0x3a [0058.772] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Common Files\\microsoft shared\\Help\\*", lpFindFileData=0x31e4e4 | out: lpFindFileData=0x31e4e4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeed5e6b0, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0x60d54030, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x60d54030, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x381cc0 [0058.773] FindClose (in: hFindFile=0x381cc0 | out: hFindFile=0x381cc0) returned 1 [0058.773] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Common Files\\microsoft shared\\Help\\1028", nBufferLength=0x105, lpBuffer=0x31e24c, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Common Files\\microsoft shared\\Help\\1028", lpFilePart=0x0) returned 0x3e [0058.773] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Common Files\\microsoft shared\\Help\\1028\\", nBufferLength=0x105, lpBuffer=0x31e220, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Common Files\\microsoft shared\\Help\\1028\\", lpFilePart=0x0) returned 0x3f [0058.773] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Common Files\\microsoft shared\\Help\\1028\\*", lpFindFileData=0x31e46c | out: lpFindFileData=0x31e46c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeed5e6b0, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xeed5e6b0, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xeed5e6b0, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x381cc0 [0058.775] FindClose (in: hFindFile=0x381cc0 | out: hFindFile=0x381cc0) returned 1 [0058.775] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Common Files\\microsoft shared\\Help\\1028", nBufferLength=0x105, lpBuffer=0x31e24c, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Common Files\\microsoft shared\\Help\\1028", lpFilePart=0x0) returned 0x3e [0058.775] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Common Files\\microsoft shared\\Help\\1028\\", nBufferLength=0x105, lpBuffer=0x31e220, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Common Files\\microsoft shared\\Help\\1028\\", lpFilePart=0x0) returned 0x3f [0058.775] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Common Files\\microsoft shared\\Help\\1028\\*", lpFindFileData=0x31e46c | out: lpFindFileData=0x31e46c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeed5e6b0, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xeed5e6b0, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xeed5e6b0, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x381cc0 [0058.775] FindClose (in: hFindFile=0x381cc0 | out: hFindFile=0x381cc0) returned 1 [0058.775] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Common Files\\microsoft shared\\Help\\1031", nBufferLength=0x105, lpBuffer=0x31e24c, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Common Files\\microsoft shared\\Help\\1031", lpFilePart=0x0) returned 0x3e [0058.775] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Common Files\\microsoft shared\\Help\\1031\\", nBufferLength=0x105, lpBuffer=0x31e220, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Common Files\\microsoft shared\\Help\\1031\\", lpFilePart=0x0) returned 0x3f [0058.775] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Common Files\\microsoft shared\\Help\\1031\\*", lpFindFileData=0x31e46c | out: lpFindFileData=0x31e46c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeed5e6b0, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xeed5e6b0, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xeed5e6b0, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x381cc0 [0058.775] FindClose (in: hFindFile=0x381cc0 | out: hFindFile=0x381cc0) returned 1 [0058.775] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Common Files\\microsoft shared\\Help\\1031", nBufferLength=0x105, lpBuffer=0x31e24c, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Common Files\\microsoft shared\\Help\\1031", lpFilePart=0x0) returned 0x3e [0058.776] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Common Files\\microsoft shared\\Help\\1031\\", nBufferLength=0x105, lpBuffer=0x31e220, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Common Files\\microsoft shared\\Help\\1031\\", lpFilePart=0x0) returned 0x3f [0058.776] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Common Files\\microsoft shared\\Help\\1031\\*", lpFindFileData=0x31e46c | out: lpFindFileData=0x31e46c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeed5e6b0, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xeed5e6b0, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xeed5e6b0, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x381cc0 [0058.776] FindClose (in: hFindFile=0x381cc0 | out: hFindFile=0x381cc0) returned 1 [0058.776] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Common Files\\microsoft shared\\Help\\1033", nBufferLength=0x105, lpBuffer=0x31e24c, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Common Files\\microsoft shared\\Help\\1033", lpFilePart=0x0) returned 0x3e [0058.776] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Common Files\\microsoft shared\\Help\\1033\\", nBufferLength=0x105, lpBuffer=0x31e220, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Common Files\\microsoft shared\\Help\\1033\\", lpFilePart=0x0) returned 0x3f [0058.776] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Common Files\\microsoft shared\\Help\\1033\\*", lpFindFileData=0x31e46c | out: lpFindFileData=0x31e46c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeed84810, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xeed84810, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xeed84810, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x381cc0 [0058.777] FindClose (in: hFindFile=0x381cc0 | out: hFindFile=0x381cc0) returned 1 [0058.777] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Common Files\\microsoft shared\\Help\\1033", nBufferLength=0x105, lpBuffer=0x31e24c, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Common Files\\microsoft shared\\Help\\1033", lpFilePart=0x0) returned 0x3e [0058.777] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Common Files\\microsoft shared\\Help\\1033\\", nBufferLength=0x105, lpBuffer=0x31e220, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Common Files\\microsoft shared\\Help\\1033\\", lpFilePart=0x0) returned 0x3f [0058.777] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Common Files\\microsoft shared\\Help\\1033\\*", lpFindFileData=0x31e46c | out: lpFindFileData=0x31e46c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeed84810, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xeed84810, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xeed84810, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x381cc0 [0058.777] FindClose (in: hFindFile=0x381cc0 | out: hFindFile=0x381cc0) returned 1 [0058.777] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Common Files\\microsoft shared\\Help\\1036", nBufferLength=0x105, lpBuffer=0x31e24c, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Common Files\\microsoft shared\\Help\\1036", lpFilePart=0x0) returned 0x3e [0058.777] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Common Files\\microsoft shared\\Help\\1036\\", nBufferLength=0x105, lpBuffer=0x31e220, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Common Files\\microsoft shared\\Help\\1036\\", lpFilePart=0x0) returned 0x3f [0058.777] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Common Files\\microsoft shared\\Help\\1036\\*", lpFindFileData=0x31e46c | out: lpFindFileData=0x31e46c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeed84810, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xeed84810, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xeed84810, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x381cc0 [0058.778] FindClose (in: hFindFile=0x381cc0 | out: hFindFile=0x381cc0) returned 1 [0058.778] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Common Files\\microsoft shared\\Help\\1036", nBufferLength=0x105, lpBuffer=0x31e24c, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Common Files\\microsoft shared\\Help\\1036", lpFilePart=0x0) returned 0x3e [0058.778] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Common Files\\microsoft shared\\Help\\1036\\", nBufferLength=0x105, lpBuffer=0x31e220, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Common Files\\microsoft shared\\Help\\1036\\", lpFilePart=0x0) returned 0x3f [0058.778] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Common Files\\microsoft shared\\Help\\1036\\*", lpFindFileData=0x31e46c | out: lpFindFileData=0x31e46c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeed84810, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xeed84810, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xeed84810, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x381cc0 [0058.778] FindClose (in: hFindFile=0x381cc0 | out: hFindFile=0x381cc0) returned 1 [0058.778] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Common Files\\microsoft shared\\Help\\1040", nBufferLength=0x105, lpBuffer=0x31e24c, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Common Files\\microsoft shared\\Help\\1040", lpFilePart=0x0) returned 0x3e [0058.778] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Common Files\\microsoft shared\\Help\\1040\\", nBufferLength=0x105, lpBuffer=0x31e220, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Common Files\\microsoft shared\\Help\\1040\\", lpFilePart=0x0) returned 0x3f [0058.778] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Common Files\\microsoft shared\\Help\\1040\\*", lpFindFileData=0x31e46c | out: lpFindFileData=0x31e46c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeed84810, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xeed84810, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xeed84810, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x381cc0 [0058.778] FindClose (in: hFindFile=0x381cc0 | out: hFindFile=0x381cc0) returned 1 [0058.778] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Common Files\\microsoft shared\\Help\\1040", nBufferLength=0x105, lpBuffer=0x31e24c, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Common Files\\microsoft shared\\Help\\1040", lpFilePart=0x0) returned 0x3e [0058.779] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Common Files\\microsoft shared\\Help\\1040\\", nBufferLength=0x105, lpBuffer=0x31e220, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Common Files\\microsoft shared\\Help\\1040\\", lpFilePart=0x0) returned 0x3f [0058.779] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Common Files\\microsoft shared\\Help\\1040\\*", lpFindFileData=0x31e46c | out: lpFindFileData=0x31e46c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeed84810, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xeed84810, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xeed84810, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x381cc0 [0058.779] FindClose (in: hFindFile=0x381cc0 | out: hFindFile=0x381cc0) returned 1 [0058.779] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Common Files\\microsoft shared\\Help\\1041", nBufferLength=0x105, lpBuffer=0x31e24c, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Common Files\\microsoft shared\\Help\\1041", lpFilePart=0x0) returned 0x3e [0058.779] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Common Files\\microsoft shared\\Help\\1041\\", nBufferLength=0x105, lpBuffer=0x31e220, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Common Files\\microsoft shared\\Help\\1041\\", lpFilePart=0x0) returned 0x3f [0058.779] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Common Files\\microsoft shared\\Help\\1041\\*", lpFindFileData=0x31e46c | out: lpFindFileData=0x31e46c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeed84810, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xeedaa970, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xeedaa970, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x381cc0 [0058.780] FindClose (in: hFindFile=0x381cc0 | out: hFindFile=0x381cc0) returned 1 [0058.780] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Common Files\\microsoft shared\\Help\\1041", nBufferLength=0x105, lpBuffer=0x31e24c, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Common Files\\microsoft shared\\Help\\1041", lpFilePart=0x0) returned 0x3e [0058.780] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Common Files\\microsoft shared\\Help\\1041\\", nBufferLength=0x105, lpBuffer=0x31e220, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Common Files\\microsoft shared\\Help\\1041\\", lpFilePart=0x0) returned 0x3f [0058.780] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Common Files\\microsoft shared\\Help\\1041\\*", lpFindFileData=0x31e46c | out: lpFindFileData=0x31e46c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeed84810, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xeedaa970, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xeedaa970, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x381cc0 [0058.780] FindClose (in: hFindFile=0x381cc0 | out: hFindFile=0x381cc0) returned 1 [0058.780] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Common Files\\microsoft shared\\Help\\1042", nBufferLength=0x105, lpBuffer=0x31e24c, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Common Files\\microsoft shared\\Help\\1042", lpFilePart=0x0) returned 0x3e [0058.780] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Common Files\\microsoft shared\\Help\\1042\\", nBufferLength=0x105, lpBuffer=0x31e220, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Common Files\\microsoft shared\\Help\\1042\\", lpFilePart=0x0) returned 0x3f [0058.780] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Common Files\\microsoft shared\\Help\\1042\\*", lpFindFileData=0x31e46c | out: lpFindFileData=0x31e46c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeedaa970, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xeedaa970, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xeedaa970, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x381cc0 [0058.780] FindClose (in: hFindFile=0x381cc0 | out: hFindFile=0x381cc0) returned 1 [0058.780] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Common Files\\microsoft shared\\Help\\1042", nBufferLength=0x105, lpBuffer=0x31e24c, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Common Files\\microsoft shared\\Help\\1042", lpFilePart=0x0) returned 0x3e [0058.780] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Common Files\\microsoft shared\\Help\\1042\\", nBufferLength=0x105, lpBuffer=0x31e220, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Common Files\\microsoft shared\\Help\\1042\\", lpFilePart=0x0) returned 0x3f [0058.780] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Common Files\\microsoft shared\\Help\\1042\\*", lpFindFileData=0x31e46c | out: lpFindFileData=0x31e46c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeedaa970, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xeedaa970, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xeedaa970, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x381cc0 [0058.781] FindClose (in: hFindFile=0x381cc0 | out: hFindFile=0x381cc0) returned 1 [0058.781] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Common Files\\microsoft shared\\Help\\1046", nBufferLength=0x105, lpBuffer=0x31e24c, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Common Files\\microsoft shared\\Help\\1046", lpFilePart=0x0) returned 0x3e [0058.781] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Common Files\\microsoft shared\\Help\\1046\\", nBufferLength=0x105, lpBuffer=0x31e220, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Common Files\\microsoft shared\\Help\\1046\\", lpFilePart=0x0) returned 0x3f [0058.781] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Common Files\\microsoft shared\\Help\\1046\\*", lpFindFileData=0x31e46c | out: lpFindFileData=0x31e46c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeedaa970, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xeedaa970, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xeedaa970, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x381cc0 [0058.782] FindClose (in: hFindFile=0x381cc0 | out: hFindFile=0x381cc0) returned 1 [0058.782] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Common Files\\microsoft shared\\Help\\1046", nBufferLength=0x105, lpBuffer=0x31e24c, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Common Files\\microsoft shared\\Help\\1046", lpFilePart=0x0) returned 0x3e [0058.782] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Common Files\\microsoft shared\\Help\\1046\\", nBufferLength=0x105, lpBuffer=0x31e220, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Common Files\\microsoft shared\\Help\\1046\\", lpFilePart=0x0) returned 0x3f [0058.782] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Common Files\\microsoft shared\\Help\\1046\\*", lpFindFileData=0x31e46c | out: lpFindFileData=0x31e46c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeedaa970, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xeedaa970, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xeedaa970, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x381cc0 [0058.782] FindClose (in: hFindFile=0x381cc0 | out: hFindFile=0x381cc0) returned 1 [0058.782] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Common Files\\microsoft shared\\Help\\1049", nBufferLength=0x105, lpBuffer=0x31e24c, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Common Files\\microsoft shared\\Help\\1049", lpFilePart=0x0) returned 0x3e [0058.782] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Common Files\\microsoft shared\\Help\\1049\\", nBufferLength=0x105, lpBuffer=0x31e220, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Common Files\\microsoft shared\\Help\\1049\\", lpFilePart=0x0) returned 0x3f [0058.782] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Common Files\\microsoft shared\\Help\\1049\\*", lpFindFileData=0x31e46c | out: lpFindFileData=0x31e46c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeedaa970, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xeedaa970, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xeedaa970, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x381cc0 [0058.782] FindClose (in: hFindFile=0x381cc0 | out: hFindFile=0x381cc0) returned 1 [0058.782] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Common Files\\microsoft shared\\Help\\1049", nBufferLength=0x105, lpBuffer=0x31e24c, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Common Files\\microsoft shared\\Help\\1049", lpFilePart=0x0) returned 0x3e [0058.782] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Common Files\\microsoft shared\\Help\\1049\\", nBufferLength=0x105, lpBuffer=0x31e220, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Common Files\\microsoft shared\\Help\\1049\\", lpFilePart=0x0) returned 0x3f [0058.782] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Common Files\\microsoft shared\\Help\\1049\\*", lpFindFileData=0x31e46c | out: lpFindFileData=0x31e46c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeedaa970, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xeedaa970, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xeedaa970, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x381cc0 [0058.782] FindClose (in: hFindFile=0x381cc0 | out: hFindFile=0x381cc0) returned 1 [0058.783] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Common Files\\microsoft shared\\Help\\2052", nBufferLength=0x105, lpBuffer=0x31e24c, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Common Files\\microsoft shared\\Help\\2052", lpFilePart=0x0) returned 0x3e [0058.783] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Common Files\\microsoft shared\\Help\\2052\\", nBufferLength=0x105, lpBuffer=0x31e220, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Common Files\\microsoft shared\\Help\\2052\\", lpFilePart=0x0) returned 0x3f [0058.783] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Common Files\\microsoft shared\\Help\\2052\\*", lpFindFileData=0x31e46c | out: lpFindFileData=0x31e46c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeed5e6b0, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xeed5e6b0, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xeed5e6b0, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x381cc0 [0058.783] FindClose (in: hFindFile=0x381cc0 | out: hFindFile=0x381cc0) returned 1 [0058.783] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Common Files\\microsoft shared\\Help\\2052", nBufferLength=0x105, lpBuffer=0x31e24c, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Common Files\\microsoft shared\\Help\\2052", lpFilePart=0x0) returned 0x3e [0058.783] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Common Files\\microsoft shared\\Help\\2052\\", nBufferLength=0x105, lpBuffer=0x31e220, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Common Files\\microsoft shared\\Help\\2052\\", lpFilePart=0x0) returned 0x3f [0058.783] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Common Files\\microsoft shared\\Help\\2052\\*", lpFindFileData=0x31e46c | out: lpFindFileData=0x31e46c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeed5e6b0, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xeed5e6b0, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xeed5e6b0, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x381cc0 [0058.783] FindClose (in: hFindFile=0x381cc0 | out: hFindFile=0x381cc0) returned 1 [0058.783] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Common Files\\microsoft shared\\Help\\3082", nBufferLength=0x105, lpBuffer=0x31e24c, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Common Files\\microsoft shared\\Help\\3082", lpFilePart=0x0) returned 0x3e [0058.783] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Common Files\\microsoft shared\\Help\\3082\\", nBufferLength=0x105, lpBuffer=0x31e220, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Common Files\\microsoft shared\\Help\\3082\\", lpFilePart=0x0) returned 0x3f [0058.783] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Common Files\\microsoft shared\\Help\\3082\\*", lpFindFileData=0x31e46c | out: lpFindFileData=0x31e46c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeed84810, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xeed84810, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xeed84810, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x381cc0 [0058.783] FindClose (in: hFindFile=0x381cc0 | out: hFindFile=0x381cc0) returned 1 [0058.784] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Common Files\\microsoft shared\\Help\\3082", nBufferLength=0x105, lpBuffer=0x31e24c, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Common Files\\microsoft shared\\Help\\3082", lpFilePart=0x0) returned 0x3e [0058.784] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Common Files\\microsoft shared\\Help\\3082\\", nBufferLength=0x105, lpBuffer=0x31e220, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Common Files\\microsoft shared\\Help\\3082\\", lpFilePart=0x0) returned 0x3f [0058.784] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Common Files\\microsoft shared\\Help\\3082\\*", lpFindFileData=0x31e46c | out: lpFindFileData=0x31e46c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeed84810, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xeed84810, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xeed84810, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x381cc0 [0058.784] FindClose (in: hFindFile=0x381cc0 | out: hFindFile=0x381cc0) returned 1 [0058.784] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Common Files\\microsoft shared\\ink", nBufferLength=0x105, lpBuffer=0x31e2c4, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Common Files\\microsoft shared\\ink", lpFilePart=0x0) returned 0x38 [0058.784] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Common Files\\microsoft shared\\ink\\", nBufferLength=0x105, lpBuffer=0x31e298, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Common Files\\microsoft shared\\ink\\", lpFilePart=0x0) returned 0x39 [0058.784] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Common Files\\microsoft shared\\ink\\*", lpFindFileData=0x31e4e4 | out: lpFindFileData=0x31e4e4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd8d1336, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xa21d9876, ftLastAccessTime.dwHighDateTime=0x1cbf8eb, ftLastWriteTime.dwLowDateTime=0xa21d9876, ftLastWriteTime.dwHighDateTime=0x1cbf8eb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x381cc0 [0058.786] FindClose (in: hFindFile=0x381cc0 | out: hFindFile=0x381cc0) returned 1 [0058.787] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Common Files\\microsoft shared\\ink", nBufferLength=0x105, lpBuffer=0x31e2c4, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Common Files\\microsoft shared\\ink", lpFilePart=0x0) returned 0x38 [0058.787] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Common Files\\microsoft shared\\ink\\", nBufferLength=0x105, lpBuffer=0x31e298, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Common Files\\microsoft shared\\ink\\", lpFilePart=0x0) returned 0x39 [0058.787] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Common Files\\microsoft shared\\ink\\*", lpFindFileData=0x31e4e4 | out: lpFindFileData=0x31e4e4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd8d1336, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xa21d9876, ftLastAccessTime.dwHighDateTime=0x1cbf8eb, ftLastWriteTime.dwLowDateTime=0xa21d9876, ftLastWriteTime.dwHighDateTime=0x1cbf8eb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x381cc0 [0058.788] FindClose (in: hFindFile=0x381cc0 | out: hFindFile=0x381cc0) returned 1 [0058.788] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Common Files\\microsoft shared\\ink\\1.0", nBufferLength=0x105, lpBuffer=0x31e24c, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Common Files\\microsoft shared\\ink\\1.0", lpFilePart=0x0) returned 0x3c [0058.788] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Common Files\\microsoft shared\\ink\\1.0\\", nBufferLength=0x105, lpBuffer=0x31e220, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Common Files\\microsoft shared\\ink\\1.0\\", lpFilePart=0x0) returned 0x3d [0058.788] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Common Files\\microsoft shared\\ink\\1.0\\*", lpFindFileData=0x31e46c | out: lpFindFileData=0x31e46c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x80105472, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x81305af3, ftLastAccessTime.dwHighDateTime=0x1ca0444, ftLastWriteTime.dwLowDateTime=0x81305af3, ftLastWriteTime.dwHighDateTime=0x1ca0444, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x381cc0 [0058.790] FindClose (in: hFindFile=0x381cc0 | out: hFindFile=0x381cc0) returned 1 [0058.790] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Common Files\\microsoft shared\\ink\\1.0", nBufferLength=0x105, lpBuffer=0x31e24c, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Common Files\\microsoft shared\\ink\\1.0", lpFilePart=0x0) returned 0x3c [0058.790] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Common Files\\microsoft shared\\ink\\1.0\\", nBufferLength=0x105, lpBuffer=0x31e220, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Common Files\\microsoft shared\\ink\\1.0\\", lpFilePart=0x0) returned 0x3d [0058.790] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Common Files\\microsoft shared\\ink\\1.0\\*", lpFindFileData=0x31e46c | out: lpFindFileData=0x31e46c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x80105472, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x81305af3, ftLastAccessTime.dwHighDateTime=0x1ca0444, ftLastWriteTime.dwLowDateTime=0x81305af3, ftLastWriteTime.dwHighDateTime=0x1ca0444, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x381cc0 [0058.790] FindClose (in: hFindFile=0x381cc0 | out: hFindFile=0x381cc0) returned 1 [0058.790] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Common Files\\microsoft shared\\ink\\1.7", nBufferLength=0x105, lpBuffer=0x31e24c, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Common Files\\microsoft shared\\ink\\1.7", lpFilePart=0x0) returned 0x3c [0058.790] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Common Files\\microsoft shared\\ink\\1.7\\", nBufferLength=0x105, lpBuffer=0x31e220, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Common Files\\microsoft shared\\ink\\1.7\\", lpFilePart=0x0) returned 0x3d [0058.790] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Common Files\\microsoft shared\\ink\\1.7\\*", lpFindFileData=0x31e46c | out: lpFindFileData=0x31e46c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x80105472, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x81305af3, ftLastAccessTime.dwHighDateTime=0x1ca0444, ftLastWriteTime.dwLowDateTime=0x81305af3, ftLastWriteTime.dwHighDateTime=0x1ca0444, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x381cc0 [0058.790] FindClose (in: hFindFile=0x381cc0 | out: hFindFile=0x381cc0) returned 1 [0058.790] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Common Files\\microsoft shared\\ink\\1.7", nBufferLength=0x105, lpBuffer=0x31e24c, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Common Files\\microsoft shared\\ink\\1.7", lpFilePart=0x0) returned 0x3c [0058.790] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Common Files\\microsoft shared\\ink\\1.7\\", nBufferLength=0x105, lpBuffer=0x31e220, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Common Files\\microsoft shared\\ink\\1.7\\", lpFilePart=0x0) returned 0x3d [0058.791] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Common Files\\microsoft shared\\ink\\1.7\\*", lpFindFileData=0x31e46c | out: lpFindFileData=0x31e46c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x80105472, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x81305af3, ftLastAccessTime.dwHighDateTime=0x1ca0444, ftLastWriteTime.dwLowDateTime=0x81305af3, ftLastWriteTime.dwHighDateTime=0x1ca0444, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x381cc0 [0058.791] FindClose (in: hFindFile=0x381cc0 | out: hFindFile=0x381cc0) returned 1 [0058.791] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Common Files\\microsoft shared\\ink\\en-US", nBufferLength=0x105, lpBuffer=0x31e24c, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Common Files\\microsoft shared\\ink\\en-US", lpFilePart=0x0) returned 0x3e [0058.791] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Common Files\\microsoft shared\\ink\\en-US\\", nBufferLength=0x105, lpBuffer=0x31e220, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Common Files\\microsoft shared\\ink\\en-US\\", lpFilePart=0x0) returned 0x3f [0058.791] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Common Files\\microsoft shared\\ink\\en-US\\*", lpFindFileData=0x31e46c | out: lpFindFileData=0x31e46c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1ea40f84, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0xa21b3607, ftLastAccessTime.dwHighDateTime=0x1cbf8eb, ftLastWriteTime.dwLowDateTime=0xa21b3607, ftLastWriteTime.dwHighDateTime=0x1cbf8eb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x381cc0 [0058.800] FindClose (in: hFindFile=0x381cc0 | out: hFindFile=0x381cc0) returned 1 [0058.813] CreateFileW (lpFileName="C:\\Program Files (x86)\\Common Files\\microsoft shared\\Stationery\\Bears.jpg" (normalized: "c:\\program files (x86)\\common files\\microsoft shared\\stationery\\bears.jpg"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x274 [0058.815] GetFileType (hFile=0x274) returned 0x1 [0058.815] GetFileType (hFile=0x274) returned 0x1 [0058.815] GetFileSize (in: hFile=0x274, lpFileSizeHigh=0x31e790 | out: lpFileSizeHigh=0x31e790*=0x0) returned 0x432 [0058.815] ReadFile (in: hFile=0x274, lpBuffer=0x2824e84, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x31e73c, lpOverlapped=0x0 | out: lpBuffer=0x2824e84*, lpNumberOfBytesRead=0x31e73c*=0x432, lpOverlapped=0x0) returned 1 [0058.861] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e674) returned 1 [0058.861] CreateFileW (lpFileName="C:\\Program Files (x86)\\Common Files\\microsoft shared\\Stationery\\Bears.jpg" (normalized: "c:\\program files (x86)\\common files\\microsoft shared\\stationery\\bears.jpg"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0xffffffff [0058.863] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31d4b0) returned 1 [0058.863] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e7bc) returned 1 [0058.863] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Common Files\\microsoft shared\\TextConv", nBufferLength=0x105, lpBuffer=0x31e2c4, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Common Files\\microsoft shared\\TextConv", lpFilePart=0x0) returned 0x3d [0058.863] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Common Files\\microsoft shared\\TextConv\\", nBufferLength=0x105, lpBuffer=0x31e298, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Common Files\\microsoft shared\\TextConv\\", lpFilePart=0x0) returned 0x3e [0058.863] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Common Files\\microsoft shared\\TextConv\\*", lpFindFileData=0x31e4e4 | out: lpFindFileData=0x31e4e4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x80105472, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0xd6e32460, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0xd6e32460, ftLastWriteTime.dwHighDateTime=0x1d305eb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x381dc0 [0058.899] FindNextFileW (in: hFindFile=0x381dc0, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x80105472, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0xd6e32460, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0xd6e32460, ftLastWriteTime.dwHighDateTime=0x1d305eb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0058.899] FindNextFileW (in: hFindFile=0x381dc0, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1ea40f84, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x228ba44f, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x1ea40f84, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="en-US", cAlternateFileName="")) returned 1 [0058.899] FindNextFileW (in: hFindFile=0x381dc0, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd6e32460, ftCreationTime.dwHighDateTime=0x1d305eb, ftLastAccessTime.dwLowDateTime=0xd6e32460, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0xd6e32460, ftLastWriteTime.dwHighDateTime=0x1d305eb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="WksConv", cAlternateFileName="")) returned 1 [0058.899] FindNextFileW (in: hFindFile=0x381dc0, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd6e32460, ftCreationTime.dwHighDateTime=0x1d305eb, ftLastAccessTime.dwLowDateTime=0xd6e32460, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0xd6e32460, ftLastWriteTime.dwHighDateTime=0x1d305eb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="WksConv", cAlternateFileName="")) returned 0 [0058.899] FindClose (in: hFindFile=0x381dc0 | out: hFindFile=0x381dc0) returned 1 [0058.900] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e77c) returned 1 [0058.900] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e788) returned 1 [0058.900] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e7bc) returned 1 [0058.900] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Common Files\\microsoft shared\\TextConv", nBufferLength=0x105, lpBuffer=0x31e2c4, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Common Files\\microsoft shared\\TextConv", lpFilePart=0x0) returned 0x3d [0058.900] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Common Files\\microsoft shared\\TextConv\\", nBufferLength=0x105, lpBuffer=0x31e298, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Common Files\\microsoft shared\\TextConv\\", lpFilePart=0x0) returned 0x3e [0058.900] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Common Files\\microsoft shared\\TextConv\\*", lpFindFileData=0x31e4e4 | out: lpFindFileData=0x31e4e4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x80105472, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0xd6e32460, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0xd6e32460, ftLastWriteTime.dwHighDateTime=0x1d305eb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x381dc0 [0058.901] FindNextFileW (in: hFindFile=0x381dc0, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x80105472, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0xd6e32460, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0xd6e32460, ftLastWriteTime.dwHighDateTime=0x1d305eb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0058.901] FindNextFileW (in: hFindFile=0x381dc0, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1ea40f84, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x228ba44f, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x1ea40f84, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="en-US", cAlternateFileName="")) returned 1 [0058.901] FindNextFileW (in: hFindFile=0x381dc0, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd6e32460, ftCreationTime.dwHighDateTime=0x1d305eb, ftLastAccessTime.dwLowDateTime=0xd6e32460, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0xd6e32460, ftLastWriteTime.dwHighDateTime=0x1d305eb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="WksConv", cAlternateFileName="")) returned 1 [0058.901] FindNextFileW (in: hFindFile=0x381dc0, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0058.901] FindClose (in: hFindFile=0x381dc0 | out: hFindFile=0x381dc0) returned 1 [0058.902] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e77c) returned 1 [0058.902] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e788) returned 1 [0058.902] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e744) returned 1 [0058.902] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Common Files\\microsoft shared\\TextConv\\en-US", nBufferLength=0x105, lpBuffer=0x31e24c, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Common Files\\microsoft shared\\TextConv\\en-US", lpFilePart=0x0) returned 0x43 [0058.902] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Common Files\\microsoft shared\\TextConv\\en-US\\", nBufferLength=0x105, lpBuffer=0x31e220, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Common Files\\microsoft shared\\TextConv\\en-US\\", lpFilePart=0x0) returned 0x44 [0058.902] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Common Files\\microsoft shared\\TextConv\\en-US\\*", lpFindFileData=0x31e46c | out: lpFindFileData=0x31e46c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1ea40f84, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x228ba44f, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x1ea40f84, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x381dc0 [0058.904] FindNextFileW (in: hFindFile=0x381dc0, lpFindFileData=0x31e47c | out: lpFindFileData=0x31e47c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1ea40f84, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x228ba44f, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x1ea40f84, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0058.904] FindNextFileW (in: hFindFile=0x381dc0, lpFindFileData=0x31e47c | out: lpFindFileData=0x31e47c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1ea40f84, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x228ba44f, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x1ea40f84, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 0 [0058.904] FindClose (in: hFindFile=0x381dc0 | out: hFindFile=0x381dc0) returned 1 [0058.904] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e704) returned 1 [0058.904] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e710) returned 1 [0058.904] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e744) returned 1 [0058.904] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Common Files\\microsoft shared\\TextConv\\en-US", nBufferLength=0x105, lpBuffer=0x31e24c, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Common Files\\microsoft shared\\TextConv\\en-US", lpFilePart=0x0) returned 0x43 [0058.904] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Common Files\\microsoft shared\\TextConv\\en-US\\", nBufferLength=0x105, lpBuffer=0x31e220, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Common Files\\microsoft shared\\TextConv\\en-US\\", lpFilePart=0x0) returned 0x44 [0058.904] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Common Files\\microsoft shared\\TextConv\\en-US\\*", lpFindFileData=0x31e46c | out: lpFindFileData=0x31e46c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1ea40f84, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x228ba44f, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x1ea40f84, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x381dc0 [0058.905] FindNextFileW (in: hFindFile=0x381dc0, lpFindFileData=0x31e47c | out: lpFindFileData=0x31e47c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1ea40f84, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x228ba44f, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x1ea40f84, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0058.905] FindNextFileW (in: hFindFile=0x381dc0, lpFindFileData=0x31e47c | out: lpFindFileData=0x31e47c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1ea40f84, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x228ba44f, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x1ea40f84, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 0 [0058.905] FindClose (in: hFindFile=0x381dc0 | out: hFindFile=0x381dc0) returned 1 [0058.905] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e704) returned 1 [0058.905] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e710) returned 1 [0058.905] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e744) returned 1 [0058.905] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Common Files\\microsoft shared\\TextConv\\WksConv", nBufferLength=0x105, lpBuffer=0x31e24c, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Common Files\\microsoft shared\\TextConv\\WksConv", lpFilePart=0x0) returned 0x45 [0058.905] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Common Files\\microsoft shared\\TextConv\\WksConv\\", nBufferLength=0x105, lpBuffer=0x31e220, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Common Files\\microsoft shared\\TextConv\\WksConv\\", lpFilePart=0x0) returned 0x46 [0058.905] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Common Files\\microsoft shared\\TextConv\\WksConv\\*", lpFindFileData=0x31e46c | out: lpFindFileData=0x31e46c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd6e32460, ftCreationTime.dwHighDateTime=0x1d305eb, ftLastAccessTime.dwLowDateTime=0xd6e32460, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0xd6e32460, ftLastWriteTime.dwHighDateTime=0x1d305eb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x381dc0 [0058.906] FindNextFileW (in: hFindFile=0x381dc0, lpFindFileData=0x31e47c | out: lpFindFileData=0x31e47c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd6e32460, ftCreationTime.dwHighDateTime=0x1d305eb, ftLastAccessTime.dwLowDateTime=0xd6e32460, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0xd6e32460, ftLastWriteTime.dwHighDateTime=0x1d305eb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0058.906] FindNextFileW (in: hFindFile=0x381dc0, lpFindFileData=0x31e47c | out: lpFindFileData=0x31e47c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe422fc00, ftCreationTime.dwHighDateTime=0x1cb7000, ftLastAccessTime.dwLowDateTime=0xd6e585c0, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0xe422fc00, ftLastWriteTime.dwHighDateTime=0x1cb7000, nFileSizeHigh=0x0, nFileSizeLow=0x124ba0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Wkconv.exe", cAlternateFileName="")) returned 1 [0058.907] FindNextFileW (in: hFindFile=0x381dc0, lpFindFileData=0x31e47c | out: lpFindFileData=0x31e47c*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0058.907] FindClose (in: hFindFile=0x381dc0 | out: hFindFile=0x381dc0) returned 1 [0058.907] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e704) returned 1 [0058.907] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e710) returned 1 [0058.907] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e744) returned 1 [0058.907] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Common Files\\microsoft shared\\TextConv\\WksConv", nBufferLength=0x105, lpBuffer=0x31e24c, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Common Files\\microsoft shared\\TextConv\\WksConv", lpFilePart=0x0) returned 0x45 [0058.907] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Common Files\\microsoft shared\\TextConv\\WksConv\\", nBufferLength=0x105, lpBuffer=0x31e220, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Common Files\\microsoft shared\\TextConv\\WksConv\\", lpFilePart=0x0) returned 0x46 [0058.907] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Common Files\\microsoft shared\\TextConv\\WksConv\\*", lpFindFileData=0x31e46c | out: lpFindFileData=0x31e46c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd6e32460, ftCreationTime.dwHighDateTime=0x1d305eb, ftLastAccessTime.dwLowDateTime=0xd6e32460, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0xd6e32460, ftLastWriteTime.dwHighDateTime=0x1d305eb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x381dc0 [0058.907] FindNextFileW (in: hFindFile=0x381dc0, lpFindFileData=0x31e47c | out: lpFindFileData=0x31e47c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd6e32460, ftCreationTime.dwHighDateTime=0x1d305eb, ftLastAccessTime.dwLowDateTime=0xd6e32460, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0xd6e32460, ftLastWriteTime.dwHighDateTime=0x1d305eb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0058.907] FindNextFileW (in: hFindFile=0x381dc0, lpFindFileData=0x31e47c | out: lpFindFileData=0x31e47c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe422fc00, ftCreationTime.dwHighDateTime=0x1cb7000, ftLastAccessTime.dwLowDateTime=0xd6e585c0, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0xe422fc00, ftLastWriteTime.dwHighDateTime=0x1cb7000, nFileSizeHigh=0x0, nFileSizeLow=0x124ba0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Wkconv.exe", cAlternateFileName="")) returned 1 [0058.908] FindNextFileW (in: hFindFile=0x381dc0, lpFindFileData=0x31e47c | out: lpFindFileData=0x31e47c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe422fc00, ftCreationTime.dwHighDateTime=0x1cb7000, ftLastAccessTime.dwLowDateTime=0xd6e585c0, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0xe422fc00, ftLastWriteTime.dwHighDateTime=0x1cb7000, nFileSizeHigh=0x0, nFileSizeLow=0x124ba0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Wkconv.exe", cAlternateFileName="")) returned 0 [0058.908] FindClose (in: hFindFile=0x381dc0 | out: hFindFile=0x381dc0) returned 1 [0058.908] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e704) returned 1 [0058.908] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e710) returned 1 [0058.908] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e7bc) returned 1 [0058.908] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Common Files\\microsoft shared\\Triedit", nBufferLength=0x105, lpBuffer=0x31e2c4, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Common Files\\microsoft shared\\Triedit", lpFilePart=0x0) returned 0x3c [0058.908] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Common Files\\microsoft shared\\Triedit\\", nBufferLength=0x105, lpBuffer=0x31e298, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Common Files\\microsoft shared\\Triedit\\", lpFilePart=0x0) returned 0x3d [0058.908] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Common Files\\microsoft shared\\Triedit\\*", lpFindFileData=0x31e4e4 | out: lpFindFileData=0x31e4e4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1ea40f84, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x1ea40f84, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x1ea40f84, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x381dc0 [0058.908] FindNextFileW (in: hFindFile=0x381dc0, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1ea40f84, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x1ea40f84, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x1ea40f84, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0058.908] FindNextFileW (in: hFindFile=0x381dc0, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1ea40f84, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x228ba44f, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x1ea40f84, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="en-US", cAlternateFileName="")) returned 1 [0058.909] FindNextFileW (in: hFindFile=0x381dc0, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1ea40f84, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x228ba44f, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x1ea40f84, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="en-US", cAlternateFileName="")) returned 0 [0058.909] FindClose (in: hFindFile=0x381dc0 | out: hFindFile=0x381dc0) returned 1 [0058.909] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e77c) returned 1 [0058.909] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e788) returned 1 [0058.909] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e7bc) returned 1 [0058.909] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Common Files\\microsoft shared\\Triedit", nBufferLength=0x105, lpBuffer=0x31e2c4, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Common Files\\microsoft shared\\Triedit", lpFilePart=0x0) returned 0x3c [0058.909] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Common Files\\microsoft shared\\Triedit\\", nBufferLength=0x105, lpBuffer=0x31e298, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Common Files\\microsoft shared\\Triedit\\", lpFilePart=0x0) returned 0x3d [0058.909] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Common Files\\microsoft shared\\Triedit\\*", lpFindFileData=0x31e4e4 | out: lpFindFileData=0x31e4e4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1ea40f84, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x1ea40f84, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x1ea40f84, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x381dc0 [0058.909] FindNextFileW (in: hFindFile=0x381dc0, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1ea40f84, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x1ea40f84, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x1ea40f84, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0058.909] FindNextFileW (in: hFindFile=0x381dc0, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1ea40f84, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x228ba44f, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x1ea40f84, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="en-US", cAlternateFileName="")) returned 1 [0058.910] FindNextFileW (in: hFindFile=0x381dc0, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0058.910] FindClose (in: hFindFile=0x381dc0 | out: hFindFile=0x381dc0) returned 1 [0058.910] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e77c) returned 1 [0058.910] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e788) returned 1 [0058.910] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e744) returned 1 [0058.910] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Common Files\\microsoft shared\\Triedit\\en-US", nBufferLength=0x105, lpBuffer=0x31e24c, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Common Files\\microsoft shared\\Triedit\\en-US", lpFilePart=0x0) returned 0x42 [0058.910] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Common Files\\microsoft shared\\Triedit\\en-US\\", nBufferLength=0x105, lpBuffer=0x31e220, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Common Files\\microsoft shared\\Triedit\\en-US\\", lpFilePart=0x0) returned 0x43 [0058.910] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Common Files\\microsoft shared\\Triedit\\en-US\\*", lpFindFileData=0x31e46c | out: lpFindFileData=0x31e46c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1ea40f84, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x228ba44f, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x1ea40f84, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x381dc0 [0058.910] FindNextFileW (in: hFindFile=0x381dc0, lpFindFileData=0x31e47c | out: lpFindFileData=0x31e47c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1ea40f84, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x228ba44f, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x1ea40f84, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0058.910] FindNextFileW (in: hFindFile=0x381dc0, lpFindFileData=0x31e47c | out: lpFindFileData=0x31e47c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1ea40f84, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x228ba44f, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x1ea40f84, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 0 [0058.910] FindClose (in: hFindFile=0x381dc0 | out: hFindFile=0x381dc0) returned 1 [0058.911] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e704) returned 1 [0058.911] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e710) returned 1 [0058.911] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e744) returned 1 [0058.911] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Common Files\\microsoft shared\\Triedit\\en-US", nBufferLength=0x105, lpBuffer=0x31e24c, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Common Files\\microsoft shared\\Triedit\\en-US", lpFilePart=0x0) returned 0x42 [0058.911] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Common Files\\microsoft shared\\Triedit\\en-US\\", nBufferLength=0x105, lpBuffer=0x31e220, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Common Files\\microsoft shared\\Triedit\\en-US\\", lpFilePart=0x0) returned 0x43 [0058.911] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Common Files\\microsoft shared\\Triedit\\en-US\\*", lpFindFileData=0x31e46c | out: lpFindFileData=0x31e46c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1ea40f84, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x228ba44f, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x1ea40f84, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x381dc0 [0058.911] FindNextFileW (in: hFindFile=0x381dc0, lpFindFileData=0x31e47c | out: lpFindFileData=0x31e47c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1ea40f84, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x228ba44f, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x1ea40f84, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0058.911] FindNextFileW (in: hFindFile=0x381dc0, lpFindFileData=0x31e47c | out: lpFindFileData=0x31e47c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1ea40f84, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x228ba44f, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x1ea40f84, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 0 [0058.911] FindClose (in: hFindFile=0x381dc0 | out: hFindFile=0x381dc0) returned 1 [0058.911] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e704) returned 1 [0058.911] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e710) returned 1 [0058.911] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e7bc) returned 1 [0058.911] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Common Files\\microsoft shared\\VBA", nBufferLength=0x105, lpBuffer=0x31e2c4, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Common Files\\microsoft shared\\VBA", lpFilePart=0x0) returned 0x38 [0058.911] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Common Files\\microsoft shared\\VBA\\", nBufferLength=0x105, lpBuffer=0x31e298, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Common Files\\microsoft shared\\VBA\\", lpFilePart=0x0) returned 0x39 [0058.911] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Common Files\\microsoft shared\\VBA\\*", lpFindFileData=0x31e4e4 | out: lpFindFileData=0x31e4e4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xec355540, ftCreationTime.dwHighDateTime=0x1d305eb, ftLastAccessTime.dwLowDateTime=0xec355540, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0xec355540, ftLastWriteTime.dwHighDateTime=0x1d305eb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x381dc0 [0058.912] FindNextFileW (in: hFindFile=0x381dc0, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xec355540, ftCreationTime.dwHighDateTime=0x1d305eb, ftLastAccessTime.dwLowDateTime=0xec355540, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0xec355540, ftLastWriteTime.dwHighDateTime=0x1d305eb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0058.913] FindNextFileW (in: hFindFile=0x381dc0, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xec355540, ftCreationTime.dwHighDateTime=0x1d305eb, ftLastAccessTime.dwLowDateTime=0xec355540, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0xec355540, ftLastWriteTime.dwHighDateTime=0x1d305eb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="VBA6", cAlternateFileName="")) returned 1 [0058.913] FindNextFileW (in: hFindFile=0x381dc0, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xec355540, ftCreationTime.dwHighDateTime=0x1d305eb, ftLastAccessTime.dwLowDateTime=0xec355540, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0xec355540, ftLastWriteTime.dwHighDateTime=0x1d305eb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="VBA6", cAlternateFileName="")) returned 0 [0058.913] FindClose (in: hFindFile=0x381dc0 | out: hFindFile=0x381dc0) returned 1 [0058.913] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e77c) returned 1 [0058.913] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e788) returned 1 [0058.913] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e7bc) returned 1 [0058.913] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Common Files\\microsoft shared\\VBA", nBufferLength=0x105, lpBuffer=0x31e2c4, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Common Files\\microsoft shared\\VBA", lpFilePart=0x0) returned 0x38 [0058.913] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Common Files\\microsoft shared\\VBA\\", nBufferLength=0x105, lpBuffer=0x31e298, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Common Files\\microsoft shared\\VBA\\", lpFilePart=0x0) returned 0x39 [0058.913] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Common Files\\microsoft shared\\VBA\\*", lpFindFileData=0x31e4e4 | out: lpFindFileData=0x31e4e4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xec355540, ftCreationTime.dwHighDateTime=0x1d305eb, ftLastAccessTime.dwLowDateTime=0xec355540, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0xec355540, ftLastWriteTime.dwHighDateTime=0x1d305eb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x381dc0 [0058.913] FindNextFileW (in: hFindFile=0x381dc0, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xec355540, ftCreationTime.dwHighDateTime=0x1d305eb, ftLastAccessTime.dwLowDateTime=0xec355540, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0xec355540, ftLastWriteTime.dwHighDateTime=0x1d305eb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0058.913] FindNextFileW (in: hFindFile=0x381dc0, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xec355540, ftCreationTime.dwHighDateTime=0x1d305eb, ftLastAccessTime.dwLowDateTime=0xec355540, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0xec355540, ftLastWriteTime.dwHighDateTime=0x1d305eb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="VBA6", cAlternateFileName="")) returned 1 [0058.913] FindNextFileW (in: hFindFile=0x381dc0, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0058.914] FindClose (in: hFindFile=0x381dc0 | out: hFindFile=0x381dc0) returned 1 [0058.914] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e77c) returned 1 [0058.914] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e788) returned 1 [0058.914] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e744) returned 1 [0058.914] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Common Files\\microsoft shared\\VBA\\VBA6", nBufferLength=0x105, lpBuffer=0x31e24c, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Common Files\\microsoft shared\\VBA\\VBA6", lpFilePart=0x0) returned 0x3d [0058.914] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Common Files\\microsoft shared\\VBA\\VBA6\\", nBufferLength=0x105, lpBuffer=0x31e220, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Common Files\\microsoft shared\\VBA\\VBA6\\", lpFilePart=0x0) returned 0x3e [0058.914] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Common Files\\microsoft shared\\VBA\\VBA6\\*", lpFindFileData=0x31e46c | out: lpFindFileData=0x31e46c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xec355540, ftCreationTime.dwHighDateTime=0x1d305eb, ftLastAccessTime.dwLowDateTime=0xec355540, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0xec355540, ftLastWriteTime.dwHighDateTime=0x1d305eb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x381dc0 [0058.914] FindNextFileW (in: hFindFile=0x381dc0, lpFindFileData=0x31e47c | out: lpFindFileData=0x31e47c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xec355540, ftCreationTime.dwHighDateTime=0x1d305eb, ftLastAccessTime.dwLowDateTime=0xec355540, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0xec355540, ftLastWriteTime.dwHighDateTime=0x1d305eb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0058.914] FindNextFileW (in: hFindFile=0x381dc0, lpFindFileData=0x31e47c | out: lpFindFileData=0x31e47c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5f2be900, ftCreationTime.dwHighDateTime=0x1cbc41d, ftLastAccessTime.dwLowDateTime=0xec355540, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0x5f2be900, ftLastWriteTime.dwHighDateTime=0x1cbc41d, nFileSizeHigh=0x0, nFileSizeLow=0xa000, dwReserved0=0x0, dwReserved1=0x0, cFileName="VBE6EXT.OLB", cAlternateFileName="")) returned 1 [0058.914] FindNextFileW (in: hFindFile=0x381dc0, lpFindFileData=0x31e47c | out: lpFindFileData=0x31e47c*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0058.915] FindClose (in: hFindFile=0x381dc0 | out: hFindFile=0x381dc0) returned 1 [0058.915] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e704) returned 1 [0058.915] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e710) returned 1 [0058.915] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e744) returned 1 [0058.915] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Common Files\\microsoft shared\\VBA\\VBA6", nBufferLength=0x105, lpBuffer=0x31e24c, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Common Files\\microsoft shared\\VBA\\VBA6", lpFilePart=0x0) returned 0x3d [0058.915] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Common Files\\microsoft shared\\VBA\\VBA6\\", nBufferLength=0x105, lpBuffer=0x31e220, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Common Files\\microsoft shared\\VBA\\VBA6\\", lpFilePart=0x0) returned 0x3e [0058.915] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Common Files\\microsoft shared\\VBA\\VBA6\\*", lpFindFileData=0x31e46c | out: lpFindFileData=0x31e46c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xec355540, ftCreationTime.dwHighDateTime=0x1d305eb, ftLastAccessTime.dwLowDateTime=0xec355540, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0xec355540, ftLastWriteTime.dwHighDateTime=0x1d305eb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x381dc0 [0058.915] FindNextFileW (in: hFindFile=0x381dc0, lpFindFileData=0x31e47c | out: lpFindFileData=0x31e47c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xec355540, ftCreationTime.dwHighDateTime=0x1d305eb, ftLastAccessTime.dwLowDateTime=0xec355540, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0xec355540, ftLastWriteTime.dwHighDateTime=0x1d305eb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0058.915] FindNextFileW (in: hFindFile=0x381dc0, lpFindFileData=0x31e47c | out: lpFindFileData=0x31e47c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5f2be900, ftCreationTime.dwHighDateTime=0x1cbc41d, ftLastAccessTime.dwLowDateTime=0xec355540, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0x5f2be900, ftLastWriteTime.dwHighDateTime=0x1cbc41d, nFileSizeHigh=0x0, nFileSizeLow=0xa000, dwReserved0=0x0, dwReserved1=0x0, cFileName="VBE6EXT.OLB", cAlternateFileName="")) returned 1 [0058.915] FindNextFileW (in: hFindFile=0x381dc0, lpFindFileData=0x31e47c | out: lpFindFileData=0x31e47c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5f2be900, ftCreationTime.dwHighDateTime=0x1cbc41d, ftLastAccessTime.dwLowDateTime=0xec355540, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0x5f2be900, ftLastWriteTime.dwHighDateTime=0x1cbc41d, nFileSizeHigh=0x0, nFileSizeLow=0xa000, dwReserved0=0x0, dwReserved1=0x0, cFileName="VBE6EXT.OLB", cAlternateFileName="")) returned 0 [0058.915] FindClose (in: hFindFile=0x381dc0 | out: hFindFile=0x381dc0) returned 1 [0058.915] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e704) returned 1 [0058.915] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e710) returned 1 [0058.916] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e7bc) returned 1 [0058.916] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Common Files\\microsoft shared\\VC", nBufferLength=0x105, lpBuffer=0x31e2c4, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Common Files\\microsoft shared\\VC", lpFilePart=0x0) returned 0x37 [0058.916] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Common Files\\microsoft shared\\VC\\", nBufferLength=0x105, lpBuffer=0x31e298, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Common Files\\microsoft shared\\VC\\", lpFilePart=0x0) returned 0x38 [0058.916] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Common Files\\microsoft shared\\VC\\*", lpFindFileData=0x31e4e4 | out: lpFindFileData=0x31e4e4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8f61b1a0, ftCreationTime.dwHighDateTime=0x1d2e620, ftLastAccessTime.dwLowDateTime=0xcc379b80, ftLastAccessTime.dwHighDateTime=0x1d2e620, ftLastWriteTime.dwLowDateTime=0xcc379b80, ftLastWriteTime.dwHighDateTime=0x1d2e620, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x381dc0 [0058.917] FindNextFileW (in: hFindFile=0x381dc0, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8f61b1a0, ftCreationTime.dwHighDateTime=0x1d2e620, ftLastAccessTime.dwLowDateTime=0xcc379b80, ftLastAccessTime.dwHighDateTime=0x1d2e620, ftLastWriteTime.dwLowDateTime=0xcc379b80, ftLastWriteTime.dwHighDateTime=0x1d2e620, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0058.917] FindNextFileW (in: hFindFile=0x381dc0, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa3e46d20, ftCreationTime.dwHighDateTime=0x1d2e620, ftLastAccessTime.dwLowDateTime=0xa3e46d20, ftLastAccessTime.dwHighDateTime=0x1d2e620, ftLastWriteTime.dwLowDateTime=0xa3e46d20, ftLastWriteTime.dwHighDateTime=0x1d2e620, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="amd64", cAlternateFileName="")) returned 1 [0058.917] FindNextFileW (in: hFindFile=0x381dc0, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5cdca800, ftCreationTime.dwHighDateTime=0x1cbd035, ftLastAccessTime.dwLowDateTime=0xcc438260, ftLastAccessTime.dwHighDateTime=0x1d2e620, ftLastWriteTime.dwLowDateTime=0x5cdca800, ftLastWriteTime.dwHighDateTime=0x1cbd035, nFileSizeHigh=0x0, nFileSizeLow=0xc3350, dwReserved0=0x0, dwReserved1=0x0, cFileName="msdia100.dll", cAlternateFileName="")) returned 1 [0058.917] FindNextFileW (in: hFindFile=0x381dc0, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x90bff900, ftCreationTime.dwHighDateTime=0x1cc115e, ftLastAccessTime.dwLowDateTime=0x8f641300, ftLastAccessTime.dwHighDateTime=0x1d2e620, ftLastWriteTime.dwLowDateTime=0x90bff900, ftLastWriteTime.dwHighDateTime=0x1cc115e, nFileSizeHigh=0x0, nFileSizeLow=0x9ca00, dwReserved0=0x0, dwReserved1=0x0, cFileName="msdia80.dll", cAlternateFileName="")) returned 1 [0058.917] FindNextFileW (in: hFindFile=0x381dc0, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2738400, ftCreationTime.dwHighDateTime=0x1cbfdf9, ftLastAccessTime.dwLowDateTime=0xb0535940, ftLastAccessTime.dwHighDateTime=0x1d2e620, ftLastWriteTime.dwLowDateTime=0x2738400, ftLastWriteTime.dwHighDateTime=0x1cbfdf9, nFileSizeHigh=0x0, nFileSizeLow=0xa3950, dwReserved0=0x0, dwReserved1=0x0, cFileName="msdia90.dll", cAlternateFileName="")) returned 1 [0058.917] FindNextFileW (in: hFindFile=0x381dc0, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0058.917] FindClose (in: hFindFile=0x381dc0 | out: hFindFile=0x381dc0) returned 1 [0058.920] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e77c) returned 1 [0058.920] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e788) returned 1 [0058.920] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e7bc) returned 1 [0058.920] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Common Files\\microsoft shared\\VC", nBufferLength=0x105, lpBuffer=0x31e2c4, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Common Files\\microsoft shared\\VC", lpFilePart=0x0) returned 0x37 [0058.920] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Common Files\\microsoft shared\\VC\\", nBufferLength=0x105, lpBuffer=0x31e298, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Common Files\\microsoft shared\\VC\\", lpFilePart=0x0) returned 0x38 [0058.920] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Common Files\\microsoft shared\\VC\\*", lpFindFileData=0x31e4e4 | out: lpFindFileData=0x31e4e4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8f61b1a0, ftCreationTime.dwHighDateTime=0x1d2e620, ftLastAccessTime.dwLowDateTime=0xcc379b80, ftLastAccessTime.dwHighDateTime=0x1d2e620, ftLastWriteTime.dwLowDateTime=0xcc379b80, ftLastWriteTime.dwHighDateTime=0x1d2e620, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x381dc0 [0058.920] FindNextFileW (in: hFindFile=0x381dc0, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8f61b1a0, ftCreationTime.dwHighDateTime=0x1d2e620, ftLastAccessTime.dwLowDateTime=0xcc379b80, ftLastAccessTime.dwHighDateTime=0x1d2e620, ftLastWriteTime.dwLowDateTime=0xcc379b80, ftLastWriteTime.dwHighDateTime=0x1d2e620, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0058.920] FindNextFileW (in: hFindFile=0x381dc0, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa3e46d20, ftCreationTime.dwHighDateTime=0x1d2e620, ftLastAccessTime.dwLowDateTime=0xa3e46d20, ftLastAccessTime.dwHighDateTime=0x1d2e620, ftLastWriteTime.dwLowDateTime=0xa3e46d20, ftLastWriteTime.dwHighDateTime=0x1d2e620, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="amd64", cAlternateFileName="")) returned 1 [0058.920] FindNextFileW (in: hFindFile=0x381dc0, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5cdca800, ftCreationTime.dwHighDateTime=0x1cbd035, ftLastAccessTime.dwLowDateTime=0xcc438260, ftLastAccessTime.dwHighDateTime=0x1d2e620, ftLastWriteTime.dwLowDateTime=0x5cdca800, ftLastWriteTime.dwHighDateTime=0x1cbd035, nFileSizeHigh=0x0, nFileSizeLow=0xc3350, dwReserved0=0x0, dwReserved1=0x0, cFileName="msdia100.dll", cAlternateFileName="")) returned 1 [0058.921] FindNextFileW (in: hFindFile=0x381dc0, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x90bff900, ftCreationTime.dwHighDateTime=0x1cc115e, ftLastAccessTime.dwLowDateTime=0x8f641300, ftLastAccessTime.dwHighDateTime=0x1d2e620, ftLastWriteTime.dwLowDateTime=0x90bff900, ftLastWriteTime.dwHighDateTime=0x1cc115e, nFileSizeHigh=0x0, nFileSizeLow=0x9ca00, dwReserved0=0x0, dwReserved1=0x0, cFileName="msdia80.dll", cAlternateFileName="")) returned 1 [0058.921] FindNextFileW (in: hFindFile=0x381dc0, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2738400, ftCreationTime.dwHighDateTime=0x1cbfdf9, ftLastAccessTime.dwLowDateTime=0xb0535940, ftLastAccessTime.dwHighDateTime=0x1d2e620, ftLastWriteTime.dwLowDateTime=0x2738400, ftLastWriteTime.dwHighDateTime=0x1cbfdf9, nFileSizeHigh=0x0, nFileSizeLow=0xa3950, dwReserved0=0x0, dwReserved1=0x0, cFileName="msdia90.dll", cAlternateFileName="")) returned 1 [0058.921] FindNextFileW (in: hFindFile=0x381dc0, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2738400, ftCreationTime.dwHighDateTime=0x1cbfdf9, ftLastAccessTime.dwLowDateTime=0xb0535940, ftLastAccessTime.dwHighDateTime=0x1d2e620, ftLastWriteTime.dwLowDateTime=0x2738400, ftLastWriteTime.dwHighDateTime=0x1cbfdf9, nFileSizeHigh=0x0, nFileSizeLow=0xa3950, dwReserved0=0x0, dwReserved1=0x0, cFileName="msdia90.dll", cAlternateFileName="")) returned 0 [0058.921] FindClose (in: hFindFile=0x381dc0 | out: hFindFile=0x381dc0) returned 1 [0058.921] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e77c) returned 1 [0058.921] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e788) returned 1 [0058.921] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e744) returned 1 [0058.921] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Common Files\\microsoft shared\\VC\\amd64", nBufferLength=0x105, lpBuffer=0x31e24c, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Common Files\\microsoft shared\\VC\\amd64", lpFilePart=0x0) returned 0x3d [0058.921] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Common Files\\microsoft shared\\VC\\amd64\\", nBufferLength=0x105, lpBuffer=0x31e220, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Common Files\\microsoft shared\\VC\\amd64\\", lpFilePart=0x0) returned 0x3e [0058.921] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Common Files\\microsoft shared\\VC\\amd64\\*", lpFindFileData=0x31e46c | out: lpFindFileData=0x31e46c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa3e46d20, ftCreationTime.dwHighDateTime=0x1d2e620, ftLastAccessTime.dwLowDateTime=0xa3e46d20, ftLastAccessTime.dwHighDateTime=0x1d2e620, ftLastWriteTime.dwLowDateTime=0xa3e46d20, ftLastWriteTime.dwHighDateTime=0x1d2e620, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x381dc0 [0058.922] FindNextFileW (in: hFindFile=0x381dc0, lpFindFileData=0x31e47c | out: lpFindFileData=0x31e47c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa3e46d20, ftCreationTime.dwHighDateTime=0x1d2e620, ftLastAccessTime.dwLowDateTime=0xa3e46d20, ftLastAccessTime.dwHighDateTime=0x1d2e620, ftLastWriteTime.dwLowDateTime=0xa3e46d20, ftLastWriteTime.dwHighDateTime=0x1d2e620, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0058.922] FindNextFileW (in: hFindFile=0x381dc0, lpFindFileData=0x31e47c | out: lpFindFileData=0x31e47c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5c444100, ftCreationTime.dwHighDateTime=0x1cc114e, ftLastAccessTime.dwLowDateTime=0xa3e6ce80, ftLastAccessTime.dwHighDateTime=0x1d2e620, ftLastWriteTime.dwLowDateTime=0x5c444100, ftLastWriteTime.dwHighDateTime=0x1cc114e, nFileSizeHigh=0x0, nFileSizeLow=0xdf600, dwReserved0=0x0, dwReserved1=0x0, cFileName="msdia80.dll", cAlternateFileName="")) returned 1 [0058.923] FindNextFileW (in: hFindFile=0x381dc0, lpFindFileData=0x31e47c | out: lpFindFileData=0x31e47c*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0058.923] FindClose (in: hFindFile=0x381dc0 | out: hFindFile=0x381dc0) returned 1 [0058.923] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e704) returned 1 [0058.923] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e710) returned 1 [0058.923] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e744) returned 1 [0058.923] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Common Files\\microsoft shared\\VC\\amd64", nBufferLength=0x105, lpBuffer=0x31e24c, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Common Files\\microsoft shared\\VC\\amd64", lpFilePart=0x0) returned 0x3d [0058.923] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Common Files\\microsoft shared\\VC\\amd64\\", nBufferLength=0x105, lpBuffer=0x31e220, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Common Files\\microsoft shared\\VC\\amd64\\", lpFilePart=0x0) returned 0x3e [0058.923] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Common Files\\microsoft shared\\VC\\amd64\\*", lpFindFileData=0x31e46c | out: lpFindFileData=0x31e46c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa3e46d20, ftCreationTime.dwHighDateTime=0x1d2e620, ftLastAccessTime.dwLowDateTime=0xa3e46d20, ftLastAccessTime.dwHighDateTime=0x1d2e620, ftLastWriteTime.dwLowDateTime=0xa3e46d20, ftLastWriteTime.dwHighDateTime=0x1d2e620, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x381dc0 [0058.923] FindNextFileW (in: hFindFile=0x381dc0, lpFindFileData=0x31e47c | out: lpFindFileData=0x31e47c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa3e46d20, ftCreationTime.dwHighDateTime=0x1d2e620, ftLastAccessTime.dwLowDateTime=0xa3e46d20, ftLastAccessTime.dwHighDateTime=0x1d2e620, ftLastWriteTime.dwLowDateTime=0xa3e46d20, ftLastWriteTime.dwHighDateTime=0x1d2e620, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0058.923] FindNextFileW (in: hFindFile=0x381dc0, lpFindFileData=0x31e47c | out: lpFindFileData=0x31e47c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5c444100, ftCreationTime.dwHighDateTime=0x1cc114e, ftLastAccessTime.dwLowDateTime=0xa3e6ce80, ftLastAccessTime.dwHighDateTime=0x1d2e620, ftLastWriteTime.dwLowDateTime=0x5c444100, ftLastWriteTime.dwHighDateTime=0x1cc114e, nFileSizeHigh=0x0, nFileSizeLow=0xdf600, dwReserved0=0x0, dwReserved1=0x0, cFileName="msdia80.dll", cAlternateFileName="")) returned 1 [0058.923] FindNextFileW (in: hFindFile=0x381dc0, lpFindFileData=0x31e47c | out: lpFindFileData=0x31e47c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5c444100, ftCreationTime.dwHighDateTime=0x1cc114e, ftLastAccessTime.dwLowDateTime=0xa3e6ce80, ftLastAccessTime.dwHighDateTime=0x1d2e620, ftLastWriteTime.dwLowDateTime=0x5c444100, ftLastWriteTime.dwHighDateTime=0x1cc114e, nFileSizeHigh=0x0, nFileSizeLow=0xdf600, dwReserved0=0x0, dwReserved1=0x0, cFileName="msdia80.dll", cAlternateFileName="")) returned 0 [0058.924] FindClose (in: hFindFile=0x381dc0 | out: hFindFile=0x381dc0) returned 1 [0058.924] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e704) returned 1 [0058.924] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e710) returned 1 [0058.924] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e7bc) returned 1 [0058.924] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Common Files\\microsoft shared\\VGX", nBufferLength=0x105, lpBuffer=0x31e2c4, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Common Files\\microsoft shared\\VGX", lpFilePart=0x0) returned 0x38 [0058.924] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Common Files\\microsoft shared\\VGX\\", nBufferLength=0x105, lpBuffer=0x31e298, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Common Files\\microsoft shared\\VGX\\", lpFilePart=0x0) returned 0x39 [0058.924] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Common Files\\microsoft shared\\VGX\\*", lpFindFileData=0x31e4e4 | out: lpFindFileData=0x31e4e4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x80105472, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x81305af3, ftLastAccessTime.dwHighDateTime=0x1ca0444, ftLastWriteTime.dwLowDateTime=0x81305af3, ftLastWriteTime.dwHighDateTime=0x1ca0444, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x381dc0 [0058.924] FindNextFileW (in: hFindFile=0x381dc0, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x80105472, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x81305af3, ftLastAccessTime.dwHighDateTime=0x1ca0444, ftLastWriteTime.dwLowDateTime=0x81305af3, ftLastWriteTime.dwHighDateTime=0x1ca0444, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0058.924] FindNextFileW (in: hFindFile=0x381dc0, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc1645318, ftCreationTime.dwHighDateTime=0x1ca0413, ftLastAccessTime.dwLowDateTime=0xc1645318, ftLastAccessTime.dwHighDateTime=0x1ca0413, ftLastWriteTime.dwLowDateTime=0xb0409ed0, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0xb9600, dwReserved0=0x0, dwReserved1=0x0, cFileName="VGX.dll", cAlternateFileName="")) returned 1 [0058.924] FindNextFileW (in: hFindFile=0x381dc0, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0058.925] FindClose (in: hFindFile=0x381dc0 | out: hFindFile=0x381dc0) returned 1 [0058.925] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e77c) returned 1 [0058.925] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e788) returned 1 [0058.925] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e7bc) returned 1 [0058.925] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Common Files\\microsoft shared\\VGX", nBufferLength=0x105, lpBuffer=0x31e2c4, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Common Files\\microsoft shared\\VGX", lpFilePart=0x0) returned 0x38 [0058.925] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Common Files\\microsoft shared\\VGX\\", nBufferLength=0x105, lpBuffer=0x31e298, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Common Files\\microsoft shared\\VGX\\", lpFilePart=0x0) returned 0x39 [0058.925] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Common Files\\microsoft shared\\VGX\\*", lpFindFileData=0x31e4e4 | out: lpFindFileData=0x31e4e4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x80105472, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x81305af3, ftLastAccessTime.dwHighDateTime=0x1ca0444, ftLastWriteTime.dwLowDateTime=0x81305af3, ftLastWriteTime.dwHighDateTime=0x1ca0444, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x381dc0 [0058.925] FindNextFileW (in: hFindFile=0x381dc0, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x80105472, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x81305af3, ftLastAccessTime.dwHighDateTime=0x1ca0444, ftLastWriteTime.dwLowDateTime=0x81305af3, ftLastWriteTime.dwHighDateTime=0x1ca0444, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0058.925] FindNextFileW (in: hFindFile=0x381dc0, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc1645318, ftCreationTime.dwHighDateTime=0x1ca0413, ftLastAccessTime.dwLowDateTime=0xc1645318, ftLastAccessTime.dwHighDateTime=0x1ca0413, ftLastWriteTime.dwLowDateTime=0xb0409ed0, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0xb9600, dwReserved0=0x0, dwReserved1=0x0, cFileName="VGX.dll", cAlternateFileName="")) returned 1 [0058.925] FindNextFileW (in: hFindFile=0x381dc0, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc1645318, ftCreationTime.dwHighDateTime=0x1ca0413, ftLastAccessTime.dwLowDateTime=0xc1645318, ftLastAccessTime.dwHighDateTime=0x1ca0413, ftLastWriteTime.dwLowDateTime=0xb0409ed0, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0xb9600, dwReserved0=0x0, dwReserved1=0x0, cFileName="VGX.dll", cAlternateFileName="")) returned 0 [0058.925] FindClose (in: hFindFile=0x381dc0 | out: hFindFile=0x381dc0) returned 1 [0058.925] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e77c) returned 1 [0058.925] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e788) returned 1 [0058.926] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e7bc) returned 1 [0058.926] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Common Files\\microsoft shared\\VSTA", nBufferLength=0x105, lpBuffer=0x31e2c4, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Common Files\\microsoft shared\\VSTA", lpFilePart=0x0) returned 0x39 [0058.926] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Common Files\\microsoft shared\\VSTA\\", nBufferLength=0x105, lpBuffer=0x31e298, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Common Files\\microsoft shared\\VSTA\\", lpFilePart=0x0) returned 0x3a [0058.926] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Common Files\\microsoft shared\\VSTA\\*", lpFindFileData=0x31e4e4 | out: lpFindFileData=0x31e4e4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1f4696f0, ftCreationTime.dwHighDateTime=0x1d2dda2, ftLastAccessTime.dwLowDateTime=0x594863b0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x594863b0, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x381dc0 [0058.926] FindNextFileW (in: hFindFile=0x381dc0, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1f4696f0, ftCreationTime.dwHighDateTime=0x1d2dda2, ftLastAccessTime.dwLowDateTime=0x594863b0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x594863b0, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0058.926] FindNextFileW (in: hFindFile=0x381dc0, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x52622770, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x617be070, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x617be070, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="8.0", cAlternateFileName="")) returned 1 [0058.926] FindNextFileW (in: hFindFile=0x381dc0, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x594863b0, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0xe5707cc0, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0xe5707cc0, ftLastWriteTime.dwHighDateTime=0x1d305f1, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="AppInfoDocument", cAlternateFileName="APPINF~1")) returned 1 [0058.926] FindNextFileW (in: hFindFile=0x381dc0, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x20323f10, ftCreationTime.dwHighDateTime=0x1d2dda2, ftLastAccessTime.dwLowDateTime=0x69acfbd0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x69acfbd0, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Pipeline.v10.0", cAlternateFileName="PIPELI~1.0")) returned 1 [0058.927] FindNextFileW (in: hFindFile=0x381dc0, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x20323f10, ftCreationTime.dwHighDateTime=0x1d2dda2, ftLastAccessTime.dwLowDateTime=0x69acfbd0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x69acfbd0, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Pipeline.v10.0", cAlternateFileName="PIPELI~1.0")) returned 0 [0058.927] FindClose (in: hFindFile=0x381dc0 | out: hFindFile=0x381dc0) returned 1 [0058.927] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e77c) returned 1 [0058.927] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e788) returned 1 [0058.927] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e7bc) returned 1 [0058.927] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Common Files\\microsoft shared\\VSTA", nBufferLength=0x105, lpBuffer=0x31e2c4, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Common Files\\microsoft shared\\VSTA", lpFilePart=0x0) returned 0x39 [0058.927] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Common Files\\microsoft shared\\VSTA\\", nBufferLength=0x105, lpBuffer=0x31e298, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Common Files\\microsoft shared\\VSTA\\", lpFilePart=0x0) returned 0x3a [0058.927] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Common Files\\microsoft shared\\VSTA\\*", lpFindFileData=0x31e4e4 | out: lpFindFileData=0x31e4e4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1f4696f0, ftCreationTime.dwHighDateTime=0x1d2dda2, ftLastAccessTime.dwLowDateTime=0x594863b0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x594863b0, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x381dc0 [0058.927] FindNextFileW (in: hFindFile=0x381dc0, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1f4696f0, ftCreationTime.dwHighDateTime=0x1d2dda2, ftLastAccessTime.dwLowDateTime=0x594863b0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x594863b0, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0058.927] FindNextFileW (in: hFindFile=0x381dc0, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x52622770, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x617be070, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x617be070, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="8.0", cAlternateFileName="")) returned 1 [0058.927] FindNextFileW (in: hFindFile=0x381dc0, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x594863b0, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0xe5707cc0, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0xe5707cc0, ftLastWriteTime.dwHighDateTime=0x1d305f1, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="AppInfoDocument", cAlternateFileName="APPINF~1")) returned 1 [0058.928] FindNextFileW (in: hFindFile=0x381dc0, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x20323f10, ftCreationTime.dwHighDateTime=0x1d2dda2, ftLastAccessTime.dwLowDateTime=0x69acfbd0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x69acfbd0, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Pipeline.v10.0", cAlternateFileName="PIPELI~1.0")) returned 1 [0058.928] FindNextFileW (in: hFindFile=0x381dc0, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0058.928] FindClose (in: hFindFile=0x381dc0 | out: hFindFile=0x381dc0) returned 1 [0058.928] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e77c) returned 1 [0058.928] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e788) returned 1 [0058.928] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e744) returned 1 [0058.928] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Common Files\\microsoft shared\\VSTA\\8.0", nBufferLength=0x105, lpBuffer=0x31e24c, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Common Files\\microsoft shared\\VSTA\\8.0", lpFilePart=0x0) returned 0x3d [0058.928] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Common Files\\microsoft shared\\VSTA\\8.0\\", nBufferLength=0x105, lpBuffer=0x31e220, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Common Files\\microsoft shared\\VSTA\\8.0\\", lpFilePart=0x0) returned 0x3e [0058.928] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Common Files\\microsoft shared\\VSTA\\8.0\\*", lpFindFileData=0x31e46c | out: lpFindFileData=0x31e46c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x52622770, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x617be070, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x617be070, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x381dc0 [0058.930] FindNextFileW (in: hFindFile=0x381dc0, lpFindFileData=0x31e47c | out: lpFindFileData=0x31e47c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x52622770, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x617be070, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x617be070, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0058.930] FindNextFileW (in: hFindFile=0x381dc0, lpFindFileData=0x31e47c | out: lpFindFileData=0x31e47c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x15fce800, ftCreationTime.dwHighDateTime=0x1c9e437, ftLastAccessTime.dwLowDateTime=0x60fb5630, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x15fce800, ftLastWriteTime.dwHighDateTime=0x1c9e437, nFileSizeHigh=0x0, nFileSizeLow=0x7600, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.VisualStudio.Tools.Applications.Blueprints.tlb", cAlternateFileName="MICROS~2.TLB")) returned 1 [0058.930] FindNextFileW (in: hFindFile=0x381dc0, lpFindFileData=0x31e47c | out: lpFindFileData=0x31e47c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x185f4200, ftCreationTime.dwHighDateTime=0x1c9e437, ftLastAccessTime.dwLowDateTime=0x52622770, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x185f4200, ftLastWriteTime.dwHighDateTime=0x1c9e437, nFileSizeHigh=0x0, nFileSizeLow=0x2c00, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.VisualStudio.Tools.Applications.DesignTime.tlb", cAlternateFileName="MICROS~1.TLB")) returned 1 [0058.930] FindNextFileW (in: hFindFile=0x381dc0, lpFindFileData=0x31e47c | out: lpFindFileData=0x31e47c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x15fce800, ftCreationTime.dwHighDateTime=0x1c9e437, ftLastAccessTime.dwLowDateTime=0x617be070, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x15fce800, ftLastWriteTime.dwHighDateTime=0x1c9e437, nFileSizeHigh=0x0, nFileSizeLow=0x8f4, dwReserved0=0x0, dwReserved1=0x0, cFileName="VSTARemotingServer.tlb", cAlternateFileName="VSTARE~1.TLB")) returned 1 [0058.931] FindNextFileW (in: hFindFile=0x381dc0, lpFindFileData=0x31e47c | out: lpFindFileData=0x31e47c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5272d110, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x617be070, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x617be070, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="x86", cAlternateFileName="")) returned 1 [0058.931] FindNextFileW (in: hFindFile=0x381dc0, lpFindFileData=0x31e47c | out: lpFindFileData=0x31e47c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5272d110, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x617be070, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x617be070, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="x86", cAlternateFileName="")) returned 0 [0058.931] FindClose (in: hFindFile=0x381dc0 | out: hFindFile=0x381dc0) returned 1 [0058.931] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e704) returned 1 [0058.931] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e710) returned 1 [0058.932] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e744) returned 1 [0058.932] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Common Files\\microsoft shared\\VSTA\\8.0", nBufferLength=0x105, lpBuffer=0x31e24c, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Common Files\\microsoft shared\\VSTA\\8.0", lpFilePart=0x0) returned 0x3d [0058.932] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Common Files\\microsoft shared\\VSTA\\8.0\\", nBufferLength=0x105, lpBuffer=0x31e220, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Common Files\\microsoft shared\\VSTA\\8.0\\", lpFilePart=0x0) returned 0x3e [0058.932] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Common Files\\microsoft shared\\VSTA\\8.0\\*", lpFindFileData=0x31e46c | out: lpFindFileData=0x31e46c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x52622770, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x617be070, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x617be070, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x381dc0 [0058.933] FindNextFileW (in: hFindFile=0x381dc0, lpFindFileData=0x31e47c | out: lpFindFileData=0x31e47c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x52622770, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x617be070, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x617be070, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0058.933] FindNextFileW (in: hFindFile=0x381dc0, lpFindFileData=0x31e47c | out: lpFindFileData=0x31e47c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x15fce800, ftCreationTime.dwHighDateTime=0x1c9e437, ftLastAccessTime.dwLowDateTime=0x60fb5630, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x15fce800, ftLastWriteTime.dwHighDateTime=0x1c9e437, nFileSizeHigh=0x0, nFileSizeLow=0x7600, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.VisualStudio.Tools.Applications.Blueprints.tlb", cAlternateFileName="MICROS~2.TLB")) returned 1 [0058.933] FindNextFileW (in: hFindFile=0x381dc0, lpFindFileData=0x31e47c | out: lpFindFileData=0x31e47c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x185f4200, ftCreationTime.dwHighDateTime=0x1c9e437, ftLastAccessTime.dwLowDateTime=0x52622770, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x185f4200, ftLastWriteTime.dwHighDateTime=0x1c9e437, nFileSizeHigh=0x0, nFileSizeLow=0x2c00, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.VisualStudio.Tools.Applications.DesignTime.tlb", cAlternateFileName="MICROS~1.TLB")) returned 1 [0058.933] FindNextFileW (in: hFindFile=0x381dc0, lpFindFileData=0x31e47c | out: lpFindFileData=0x31e47c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x15fce800, ftCreationTime.dwHighDateTime=0x1c9e437, ftLastAccessTime.dwLowDateTime=0x617be070, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x15fce800, ftLastWriteTime.dwHighDateTime=0x1c9e437, nFileSizeHigh=0x0, nFileSizeLow=0x8f4, dwReserved0=0x0, dwReserved1=0x0, cFileName="VSTARemotingServer.tlb", cAlternateFileName="VSTARE~1.TLB")) returned 1 [0058.933] FindNextFileW (in: hFindFile=0x381dc0, lpFindFileData=0x31e47c | out: lpFindFileData=0x31e47c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5272d110, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x617be070, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x617be070, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="x86", cAlternateFileName="")) returned 1 [0058.933] FindNextFileW (in: hFindFile=0x381dc0, lpFindFileData=0x31e47c | out: lpFindFileData=0x31e47c*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0058.933] FindClose (in: hFindFile=0x381dc0 | out: hFindFile=0x381dc0) returned 1 [0058.934] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e704) returned 1 [0058.934] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e710) returned 1 [0058.934] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e6cc) returned 1 [0058.934] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Common Files\\microsoft shared\\VSTA\\8.0\\x86", nBufferLength=0x105, lpBuffer=0x31e1d4, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Common Files\\microsoft shared\\VSTA\\8.0\\x86", lpFilePart=0x0) returned 0x41 [0058.934] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Common Files\\microsoft shared\\VSTA\\8.0\\x86\\", nBufferLength=0x105, lpBuffer=0x31e1a8, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Common Files\\microsoft shared\\VSTA\\8.0\\x86\\", lpFilePart=0x0) returned 0x42 [0058.934] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Common Files\\microsoft shared\\VSTA\\8.0\\x86\\*", lpFindFileData=0x31e3f4 | out: lpFindFileData=0x31e3f4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5272d110, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x617be070, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x617be070, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x381dc0 [0058.937] FindNextFileW (in: hFindFile=0x381dc0, lpFindFileData=0x31e404 | out: lpFindFileData=0x31e404*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5272d110, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x617be070, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x617be070, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0058.937] FindNextFileW (in: hFindFile=0x381dc0, lpFindFileData=0x31e404 | out: lpFindFileData=0x31e404*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe8fb0600, ftCreationTime.dwHighDateTime=0x1c9e433, ftLastAccessTime.dwLowDateTime=0x617be070, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xe8fb0600, ftLastWriteTime.dwHighDateTime=0x1c9e433, nFileSizeHigh=0x0, nFileSizeLow=0x7b58, dwReserved0=0x0, dwReserved1=0x0, cFileName="VSTARemotingServer.dll", cAlternateFileName="VSTARE~1.DLL")) returned 1 [0058.937] FindNextFileW (in: hFindFile=0x381dc0, lpFindFileData=0x31e404 | out: lpFindFileData=0x31e404*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xedbfba00, ftCreationTime.dwHighDateTime=0x1c9e433, ftLastAccessTime.dwLowDateTime=0x617be070, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xedbfba00, ftLastWriteTime.dwHighDateTime=0x1c9e433, nFileSizeHigh=0x0, nFileSizeLow=0x4b50, dwReserved0=0x0, dwReserved1=0x0, cFileName="vsta_ep32.exe", cAlternateFileName="VSTA_E~1.EXE")) returned 1 [0058.937] FindNextFileW (in: hFindFile=0x381dc0, lpFindFileData=0x31e404 | out: lpFindFileData=0x31e404*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb1d62600, ftCreationTime.dwHighDateTime=0x1c9e42e, ftLastAccessTime.dwLowDateTime=0x527793d0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xb1d62600, ftLastWriteTime.dwHighDateTime=0x1c9e42e, nFileSizeHigh=0x0, nFileSizeLow=0x74, dwReserved0=0x0, dwReserved1=0x0, cFileName="vsta_ep32.exe.config", cAlternateFileName="VSTA_E~1.CON")) returned 1 [0058.937] FindNextFileW (in: hFindFile=0x381dc0, lpFindFileData=0x31e404 | out: lpFindFileData=0x31e404*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0058.937] FindClose (in: hFindFile=0x381dc0 | out: hFindFile=0x381dc0) returned 1 [0058.938] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e68c) returned 1 [0058.938] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e698) returned 1 [0058.938] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e6cc) returned 1 [0058.938] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Common Files\\microsoft shared\\VSTA\\8.0\\x86", nBufferLength=0x105, lpBuffer=0x31e1d4, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Common Files\\microsoft shared\\VSTA\\8.0\\x86", lpFilePart=0x0) returned 0x41 [0058.938] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Common Files\\microsoft shared\\VSTA\\8.0\\x86\\", nBufferLength=0x105, lpBuffer=0x31e1a8, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Common Files\\microsoft shared\\VSTA\\8.0\\x86\\", lpFilePart=0x0) returned 0x42 [0058.938] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Common Files\\microsoft shared\\VSTA\\8.0\\x86\\*", lpFindFileData=0x31e3f4 | out: lpFindFileData=0x31e3f4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5272d110, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x617be070, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x617be070, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x381dc0 [0058.939] FindNextFileW (in: hFindFile=0x381dc0, lpFindFileData=0x31e404 | out: lpFindFileData=0x31e404*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5272d110, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x617be070, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x617be070, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0058.939] FindNextFileW (in: hFindFile=0x381dc0, lpFindFileData=0x31e404 | out: lpFindFileData=0x31e404*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe8fb0600, ftCreationTime.dwHighDateTime=0x1c9e433, ftLastAccessTime.dwLowDateTime=0x617be070, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xe8fb0600, ftLastWriteTime.dwHighDateTime=0x1c9e433, nFileSizeHigh=0x0, nFileSizeLow=0x7b58, dwReserved0=0x0, dwReserved1=0x0, cFileName="VSTARemotingServer.dll", cAlternateFileName="VSTARE~1.DLL")) returned 1 [0058.940] FindNextFileW (in: hFindFile=0x381dc0, lpFindFileData=0x31e404 | out: lpFindFileData=0x31e404*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xedbfba00, ftCreationTime.dwHighDateTime=0x1c9e433, ftLastAccessTime.dwLowDateTime=0x617be070, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xedbfba00, ftLastWriteTime.dwHighDateTime=0x1c9e433, nFileSizeHigh=0x0, nFileSizeLow=0x4b50, dwReserved0=0x0, dwReserved1=0x0, cFileName="vsta_ep32.exe", cAlternateFileName="VSTA_E~1.EXE")) returned 1 [0058.940] FindNextFileW (in: hFindFile=0x381dc0, lpFindFileData=0x31e404 | out: lpFindFileData=0x31e404*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb1d62600, ftCreationTime.dwHighDateTime=0x1c9e42e, ftLastAccessTime.dwLowDateTime=0x527793d0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xb1d62600, ftLastWriteTime.dwHighDateTime=0x1c9e42e, nFileSizeHigh=0x0, nFileSizeLow=0x74, dwReserved0=0x0, dwReserved1=0x0, cFileName="vsta_ep32.exe.config", cAlternateFileName="VSTA_E~1.CON")) returned 1 [0058.940] FindNextFileW (in: hFindFile=0x381dc0, lpFindFileData=0x31e404 | out: lpFindFileData=0x31e404*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb1d62600, ftCreationTime.dwHighDateTime=0x1c9e42e, ftLastAccessTime.dwLowDateTime=0x527793d0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xb1d62600, ftLastWriteTime.dwHighDateTime=0x1c9e42e, nFileSizeHigh=0x0, nFileSizeLow=0x74, dwReserved0=0x0, dwReserved1=0x0, cFileName="vsta_ep32.exe.config", cAlternateFileName="VSTA_E~1.CON")) returned 0 [0058.940] FindClose (in: hFindFile=0x381dc0 | out: hFindFile=0x381dc0) returned 1 [0058.941] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e68c) returned 1 [0058.941] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e698) returned 1 [0058.941] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e744) returned 1 [0058.941] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Common Files\\microsoft shared\\VSTA\\AppInfoDocument", nBufferLength=0x105, lpBuffer=0x31e24c, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Common Files\\microsoft shared\\VSTA\\AppInfoDocument", lpFilePart=0x0) returned 0x49 [0058.941] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Common Files\\microsoft shared\\VSTA\\AppInfoDocument\\", nBufferLength=0x105, lpBuffer=0x31e220, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Common Files\\microsoft shared\\VSTA\\AppInfoDocument\\", lpFilePart=0x0) returned 0x4a [0058.941] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Common Files\\microsoft shared\\VSTA\\AppInfoDocument\\*", lpFindFileData=0x31e46c | out: lpFindFileData=0x31e46c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x594863b0, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0xe5707cc0, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0xe5707cc0, ftLastWriteTime.dwHighDateTime=0x1d305f1, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x381dc0 [0058.941] FindNextFileW (in: hFindFile=0x381dc0, lpFindFileData=0x31e47c | out: lpFindFileData=0x31e47c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x594863b0, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0xe5707cc0, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0xe5707cc0, ftLastWriteTime.dwHighDateTime=0x1d305f1, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0058.941] FindNextFileW (in: hFindFile=0x381dc0, lpFindFileData=0x31e47c | out: lpFindFileData=0x31e47c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xed5c9040, ftCreationTime.dwHighDateTime=0x1d305f1, ftLastAccessTime.dwLowDateTime=0xe5707cc0, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0xed5c9040, ftLastWriteTime.dwHighDateTime=0x1d305f1, nFileSizeHigh=0x0, nFileSizeLow=0x25b9, dwReserved0=0x0, dwReserved1=0x0, cFileName="AddIns.store", cAlternateFileName="ADDINS~1.STO")) returned 1 [0058.942] FindNextFileW (in: hFindFile=0x381dc0, lpFindFileData=0x31e47c | out: lpFindFileData=0x31e47c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x594863b0, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x594863b0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x594863b0, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.VisualStudio.Tools.Office.AppInfoDocument", cAlternateFileName="MICROS~1.APP")) returned 1 [0058.942] FindNextFileW (in: hFindFile=0x381dc0, lpFindFileData=0x31e47c | out: lpFindFileData=0x31e47c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x594863b0, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x594863b0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x594863b0, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.VisualStudio.Tools.Office.AppInfoDocument", cAlternateFileName="MICROS~1.APP")) returned 0 [0058.942] FindClose (in: hFindFile=0x381dc0 | out: hFindFile=0x381dc0) returned 1 [0058.942] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e704) returned 1 [0058.942] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e710) returned 1 [0058.942] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e744) returned 1 [0058.942] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Common Files\\microsoft shared\\VSTA\\AppInfoDocument", nBufferLength=0x105, lpBuffer=0x31e24c, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Common Files\\microsoft shared\\VSTA\\AppInfoDocument", lpFilePart=0x0) returned 0x49 [0058.942] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Common Files\\microsoft shared\\VSTA\\AppInfoDocument\\", nBufferLength=0x105, lpBuffer=0x31e220, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Common Files\\microsoft shared\\VSTA\\AppInfoDocument\\", lpFilePart=0x0) returned 0x4a [0058.942] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Common Files\\microsoft shared\\VSTA\\AppInfoDocument\\*", lpFindFileData=0x31e46c | out: lpFindFileData=0x31e46c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x594863b0, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0xe5707cc0, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0xe5707cc0, ftLastWriteTime.dwHighDateTime=0x1d305f1, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x381dc0 [0058.942] FindNextFileW (in: hFindFile=0x381dc0, lpFindFileData=0x31e47c | out: lpFindFileData=0x31e47c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x594863b0, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0xe5707cc0, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0xe5707cc0, ftLastWriteTime.dwHighDateTime=0x1d305f1, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0058.942] FindNextFileW (in: hFindFile=0x381dc0, lpFindFileData=0x31e47c | out: lpFindFileData=0x31e47c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xed5c9040, ftCreationTime.dwHighDateTime=0x1d305f1, ftLastAccessTime.dwLowDateTime=0xe5707cc0, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0xed5c9040, ftLastWriteTime.dwHighDateTime=0x1d305f1, nFileSizeHigh=0x0, nFileSizeLow=0x25b9, dwReserved0=0x0, dwReserved1=0x0, cFileName="AddIns.store", cAlternateFileName="ADDINS~1.STO")) returned 1 [0058.942] FindNextFileW (in: hFindFile=0x381dc0, lpFindFileData=0x31e47c | out: lpFindFileData=0x31e47c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x594863b0, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x594863b0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x594863b0, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.VisualStudio.Tools.Office.AppInfoDocument", cAlternateFileName="MICROS~1.APP")) returned 1 [0058.942] FindNextFileW (in: hFindFile=0x381dc0, lpFindFileData=0x31e47c | out: lpFindFileData=0x31e47c*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0058.942] FindClose (in: hFindFile=0x381dc0 | out: hFindFile=0x381dc0) returned 1 [0058.942] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e704) returned 1 [0058.942] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e710) returned 1 [0058.942] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e6cc) returned 1 [0058.943] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Common Files\\microsoft shared\\VSTA\\AppInfoDocument\\Microsoft.VisualStudio.Tools.Office.AppInfoDocument", nBufferLength=0x105, lpBuffer=0x31e1d4, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Common Files\\microsoft shared\\VSTA\\AppInfoDocument\\Microsoft.VisualStudio.Tools.Office.AppInfoDocument", lpFilePart=0x0) returned 0x7d [0058.943] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Common Files\\microsoft shared\\VSTA\\AppInfoDocument\\Microsoft.VisualStudio.Tools.Office.AppInfoDocument\\", nBufferLength=0x105, lpBuffer=0x31e1a8, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Common Files\\microsoft shared\\VSTA\\AppInfoDocument\\Microsoft.VisualStudio.Tools.Office.AppInfoDocument\\", lpFilePart=0x0) returned 0x7e [0058.943] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Common Files\\microsoft shared\\VSTA\\AppInfoDocument\\Microsoft.VisualStudio.Tools.Office.AppInfoDocument\\*", lpFindFileData=0x31e3f4 | out: lpFindFileData=0x31e3f4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x594863b0, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x594863b0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x594863b0, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x381dc0 [0058.943] FindNextFileW (in: hFindFile=0x381dc0, lpFindFileData=0x31e404 | out: lpFindFileData=0x31e404*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x594863b0, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x594863b0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x594863b0, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0058.943] FindNextFileW (in: hFindFile=0x381dc0, lpFindFileData=0x31e404 | out: lpFindFileData=0x31e404*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x33e0b300, ftCreationTime.dwHighDateTime=0x1ca5247, ftLastAccessTime.dwLowDateTime=0x594863b0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x33e0b300, ftLastWriteTime.dwHighDateTime=0x1ca5247, nFileSizeHigh=0x0, nFileSizeLow=0x20000, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.VisualStudio.Tools.Office.AppInfoDocument.v9.0.dll", cAlternateFileName="MICROS~1.DLL")) returned 1 [0058.943] FindNextFileW (in: hFindFile=0x381dc0, lpFindFileData=0x31e404 | out: lpFindFileData=0x31e404*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0058.943] FindClose (in: hFindFile=0x381dc0 | out: hFindFile=0x381dc0) returned 1 [0058.943] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e68c) returned 1 [0058.943] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e698) returned 1 [0058.943] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e6cc) returned 1 [0058.943] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Common Files\\microsoft shared\\VSTA\\AppInfoDocument\\Microsoft.VisualStudio.Tools.Office.AppInfoDocument", nBufferLength=0x105, lpBuffer=0x31e1d4, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Common Files\\microsoft shared\\VSTA\\AppInfoDocument\\Microsoft.VisualStudio.Tools.Office.AppInfoDocument", lpFilePart=0x0) returned 0x7d [0058.943] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Common Files\\microsoft shared\\VSTA\\AppInfoDocument\\Microsoft.VisualStudio.Tools.Office.AppInfoDocument\\", nBufferLength=0x105, lpBuffer=0x31e1a8, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Common Files\\microsoft shared\\VSTA\\AppInfoDocument\\Microsoft.VisualStudio.Tools.Office.AppInfoDocument\\", lpFilePart=0x0) returned 0x7e [0058.943] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Common Files\\microsoft shared\\VSTA\\AppInfoDocument\\Microsoft.VisualStudio.Tools.Office.AppInfoDocument\\*", lpFindFileData=0x31e3f4 | out: lpFindFileData=0x31e3f4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x594863b0, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x594863b0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x594863b0, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x381dc0 [0058.943] FindNextFileW (in: hFindFile=0x381dc0, lpFindFileData=0x31e404 | out: lpFindFileData=0x31e404*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x594863b0, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x594863b0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x594863b0, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0058.944] FindNextFileW (in: hFindFile=0x381dc0, lpFindFileData=0x31e404 | out: lpFindFileData=0x31e404*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x33e0b300, ftCreationTime.dwHighDateTime=0x1ca5247, ftLastAccessTime.dwLowDateTime=0x594863b0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x33e0b300, ftLastWriteTime.dwHighDateTime=0x1ca5247, nFileSizeHigh=0x0, nFileSizeLow=0x20000, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.VisualStudio.Tools.Office.AppInfoDocument.v9.0.dll", cAlternateFileName="MICROS~1.DLL")) returned 1 [0058.944] FindNextFileW (in: hFindFile=0x381dc0, lpFindFileData=0x31e404 | out: lpFindFileData=0x31e404*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x33e0b300, ftCreationTime.dwHighDateTime=0x1ca5247, ftLastAccessTime.dwLowDateTime=0x594863b0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x33e0b300, ftLastWriteTime.dwHighDateTime=0x1ca5247, nFileSizeHigh=0x0, nFileSizeLow=0x20000, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.VisualStudio.Tools.Office.AppInfoDocument.v9.0.dll", cAlternateFileName="MICROS~1.DLL")) returned 0 [0058.944] FindClose (in: hFindFile=0x381dc0 | out: hFindFile=0x381dc0) returned 1 [0058.944] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e68c) returned 1 [0058.944] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e698) returned 1 [0058.944] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e744) returned 1 [0058.944] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Common Files\\microsoft shared\\VSTA\\Pipeline.v10.0", nBufferLength=0x105, lpBuffer=0x31e24c, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Common Files\\microsoft shared\\VSTA\\Pipeline.v10.0", lpFilePart=0x0) returned 0x48 [0058.944] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Common Files\\microsoft shared\\VSTA\\Pipeline.v10.0\\", nBufferLength=0x105, lpBuffer=0x31e220, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Common Files\\microsoft shared\\VSTA\\Pipeline.v10.0\\", lpFilePart=0x0) returned 0x49 [0058.944] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Common Files\\microsoft shared\\VSTA\\Pipeline.v10.0\\*", lpFindFileData=0x31e46c | out: lpFindFileData=0x31e46c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x20323f10, ftCreationTime.dwHighDateTime=0x1d2dda2, ftLastAccessTime.dwLowDateTime=0x69acfbd0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x69acfbd0, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x381dc0 [0058.944] FindNextFileW (in: hFindFile=0x381dc0, lpFindFileData=0x31e47c | out: lpFindFileData=0x31e47c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x20323f10, ftCreationTime.dwHighDateTime=0x1d2dda2, ftLastAccessTime.dwLowDateTime=0x69acfbd0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x69acfbd0, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0058.944] FindNextFileW (in: hFindFile=0x381dc0, lpFindFileData=0x31e47c | out: lpFindFileData=0x31e47c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5863dfb0, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0xd3478ee0, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0xd3478ee0, ftLastWriteTime.dwHighDateTime=0x1d305eb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="AddInSideAdapters", cAlternateFileName="ADDINS~1")) returned 1 [0058.944] FindNextFileW (in: hFindFile=0x381dc0, lpFindFileData=0x31e47c | out: lpFindFileData=0x31e47c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x69acfbd0, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0xd60a8740, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0xd60a8740, ftLastWriteTime.dwHighDateTime=0x1d305eb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="AddInViews", cAlternateFileName="ADDINV~1")) returned 1 [0058.944] FindNextFileW (in: hFindFile=0x381dc0, lpFindFileData=0x31e47c | out: lpFindFileData=0x31e47c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x52328bf0, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0xd33e0960, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0xd33e0960, ftLastWriteTime.dwHighDateTime=0x1d305eb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Contracts", cAlternateFileName="CONTRA~1")) returned 1 [0058.944] FindNextFileW (in: hFindFile=0x381dc0, lpFindFileData=0x31e47c | out: lpFindFileData=0x31e47c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x583906f0, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0xd60f4a00, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0xd60f4a00, ftLastWriteTime.dwHighDateTime=0x1d305eb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="HostSideAdapters", cAlternateFileName="HOSTSI~1")) returned 1 [0058.944] FindNextFileW (in: hFindFile=0x381dc0, lpFindFileData=0x31e47c | out: lpFindFileData=0x31e47c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xed38dba0, ftCreationTime.dwHighDateTime=0x1d305f1, ftLastAccessTime.dwLowDateTime=0x6192a2b0, ftLastAccessTime.dwHighDateTime=0x1d2dda2, ftLastWriteTime.dwLowDateTime=0xed4e4800, ftLastWriteTime.dwHighDateTime=0x1d305f1, nFileSizeHigh=0x0, nFileSizeLow=0x1fdc1, dwReserved0=0x0, dwReserved1=0x0, cFileName="PipelineSegments.store", cAlternateFileName="PIPELI~1.STO")) returned 1 [0058.944] FindNextFileW (in: hFindFile=0x381dc0, lpFindFileData=0x31e47c | out: lpFindFileData=0x31e47c*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0058.945] FindClose (in: hFindFile=0x381dc0 | out: hFindFile=0x381dc0) returned 1 [0058.945] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e704) returned 1 [0058.945] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e710) returned 1 [0058.945] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e744) returned 1 [0058.945] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Common Files\\microsoft shared\\VSTA\\Pipeline.v10.0", nBufferLength=0x105, lpBuffer=0x31e24c, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Common Files\\microsoft shared\\VSTA\\Pipeline.v10.0", lpFilePart=0x0) returned 0x48 [0058.945] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Common Files\\microsoft shared\\VSTA\\Pipeline.v10.0\\", nBufferLength=0x105, lpBuffer=0x31e220, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Common Files\\microsoft shared\\VSTA\\Pipeline.v10.0\\", lpFilePart=0x0) returned 0x49 [0058.945] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Common Files\\microsoft shared\\VSTA\\Pipeline.v10.0\\*", lpFindFileData=0x31e46c | out: lpFindFileData=0x31e46c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x20323f10, ftCreationTime.dwHighDateTime=0x1d2dda2, ftLastAccessTime.dwLowDateTime=0x69acfbd0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x69acfbd0, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x381dc0 [0058.945] FindNextFileW (in: hFindFile=0x381dc0, lpFindFileData=0x31e47c | out: lpFindFileData=0x31e47c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x20323f10, ftCreationTime.dwHighDateTime=0x1d2dda2, ftLastAccessTime.dwLowDateTime=0x69acfbd0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x69acfbd0, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0058.945] FindNextFileW (in: hFindFile=0x381dc0, lpFindFileData=0x31e47c | out: lpFindFileData=0x31e47c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5863dfb0, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0xd3478ee0, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0xd3478ee0, ftLastWriteTime.dwHighDateTime=0x1d305eb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="AddInSideAdapters", cAlternateFileName="ADDINS~1")) returned 1 [0058.945] FindNextFileW (in: hFindFile=0x381dc0, lpFindFileData=0x31e47c | out: lpFindFileData=0x31e47c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x69acfbd0, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0xd60a8740, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0xd60a8740, ftLastWriteTime.dwHighDateTime=0x1d305eb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="AddInViews", cAlternateFileName="ADDINV~1")) returned 1 [0058.945] FindNextFileW (in: hFindFile=0x381dc0, lpFindFileData=0x31e47c | out: lpFindFileData=0x31e47c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x52328bf0, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0xd33e0960, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0xd33e0960, ftLastWriteTime.dwHighDateTime=0x1d305eb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Contracts", cAlternateFileName="CONTRA~1")) returned 1 [0058.945] FindNextFileW (in: hFindFile=0x381dc0, lpFindFileData=0x31e47c | out: lpFindFileData=0x31e47c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x583906f0, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0xd60f4a00, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0xd60f4a00, ftLastWriteTime.dwHighDateTime=0x1d305eb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="HostSideAdapters", cAlternateFileName="HOSTSI~1")) returned 1 [0058.945] FindNextFileW (in: hFindFile=0x381dc0, lpFindFileData=0x31e47c | out: lpFindFileData=0x31e47c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xed38dba0, ftCreationTime.dwHighDateTime=0x1d305f1, ftLastAccessTime.dwLowDateTime=0x6192a2b0, ftLastAccessTime.dwHighDateTime=0x1d2dda2, ftLastWriteTime.dwLowDateTime=0xed4e4800, ftLastWriteTime.dwHighDateTime=0x1d305f1, nFileSizeHigh=0x0, nFileSizeLow=0x1fdc1, dwReserved0=0x0, dwReserved1=0x0, cFileName="PipelineSegments.store", cAlternateFileName="PIPELI~1.STO")) returned 1 [0058.945] FindNextFileW (in: hFindFile=0x381dc0, lpFindFileData=0x31e47c | out: lpFindFileData=0x31e47c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xed38dba0, ftCreationTime.dwHighDateTime=0x1d305f1, ftLastAccessTime.dwLowDateTime=0x6192a2b0, ftLastAccessTime.dwHighDateTime=0x1d2dda2, ftLastWriteTime.dwLowDateTime=0xed4e4800, ftLastWriteTime.dwHighDateTime=0x1d305f1, nFileSizeHigh=0x0, nFileSizeLow=0x1fdc1, dwReserved0=0x0, dwReserved1=0x0, cFileName="PipelineSegments.store", cAlternateFileName="PIPELI~1.STO")) returned 0 [0058.945] FindClose (in: hFindFile=0x381dc0 | out: hFindFile=0x381dc0) returned 1 [0058.945] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e704) returned 1 [0058.945] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e710) returned 1 [0058.945] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e6cc) returned 1 [0058.945] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Common Files\\microsoft shared\\VSTA\\Pipeline.v10.0\\AddInSideAdapters", nBufferLength=0x105, lpBuffer=0x31e1d4, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Common Files\\microsoft shared\\VSTA\\Pipeline.v10.0\\AddInSideAdapters", lpFilePart=0x0) returned 0x5a [0058.946] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Common Files\\microsoft shared\\VSTA\\Pipeline.v10.0\\AddInSideAdapters\\", nBufferLength=0x105, lpBuffer=0x31e1a8, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Common Files\\microsoft shared\\VSTA\\Pipeline.v10.0\\AddInSideAdapters\\", lpFilePart=0x0) returned 0x5b [0058.946] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Common Files\\microsoft shared\\VSTA\\Pipeline.v10.0\\AddInSideAdapters\\*", lpFindFileData=0x31e3f4 | out: lpFindFileData=0x31e3f4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5863dfb0, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0xd3478ee0, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0xd3478ee0, ftLastWriteTime.dwHighDateTime=0x1d305eb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x381dc0 [0058.947] FindNextFileW (in: hFindFile=0x381dc0, lpFindFileData=0x31e404 | out: lpFindFileData=0x31e404*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5863dfb0, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0xd3478ee0, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0xd3478ee0, ftLastWriteTime.dwHighDateTime=0x1d305eb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0058.947] FindNextFileW (in: hFindFile=0x381dc0, lpFindFileData=0x31e404 | out: lpFindFileData=0x31e404*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6a612c00, ftCreationTime.dwHighDateTime=0x1cb6585, ftLastAccessTime.dwLowDateTime=0xd3478ee0, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0x6a612c00, ftLastWriteTime.dwHighDateTime=0x1cb6585, nFileSizeHigh=0x0, nFileSizeLow=0xa1c0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.VisualStudio.Tools.Applications.AddInAdapter.v10.0.dll", cAlternateFileName="MICROS~4.DLL")) returned 1 [0058.947] FindNextFileW (in: hFindFile=0x381dc0, lpFindFileData=0x31e404 | out: lpFindFileData=0x31e404*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x317e5900, ftCreationTime.dwHighDateTime=0x1ca5247, ftLastAccessTime.dwLowDateTime=0x5863dfb0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x317e5900, ftLastWriteTime.dwHighDateTime=0x1ca5247, nFileSizeHigh=0x0, nFileSizeLow=0xb000, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.VisualStudio.Tools.Applications.AddInAdapter.v9.0.dll", cAlternateFileName="MICROS~1.DLL")) returned 1 [0058.947] FindNextFileW (in: hFindFile=0x381dc0, lpFindFileData=0x31e404 | out: lpFindFileData=0x31e404*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x33e0b300, ftCreationTime.dwHighDateTime=0x1ca5247, ftLastAccessTime.dwLowDateTime=0x587bad70, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x33e0b300, ftLastWriteTime.dwHighDateTime=0x1ca5247, nFileSizeHigh=0x0, nFileSizeLow=0x14000, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.VisualStudio.Tools.Office.AddInAdapter.v9.0.dll", cAlternateFileName="MICROS~2.DLL")) returned 1 [0058.947] FindNextFileW (in: hFindFile=0x381dc0, lpFindFileData=0x31e404 | out: lpFindFileData=0x31e404*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x33e0b300, ftCreationTime.dwHighDateTime=0x1ca5247, ftLastAccessTime.dwLowDateTime=0x587e0ed0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x33e0b300, ftLastWriteTime.dwHighDateTime=0x1ca5247, nFileSizeHigh=0x0, nFileSizeLow=0x9000, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.VisualStudio.Tools.Office.Excel.AddInAdapter.v9.0.dll", cAlternateFileName="MICROS~3.DLL")) returned 1 [0058.947] FindNextFileW (in: hFindFile=0x381dc0, lpFindFileData=0x31e404 | out: lpFindFileData=0x31e404*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x33e0b300, ftCreationTime.dwHighDateTime=0x1ca5247, ftLastAccessTime.dwLowDateTime=0x69b68150, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x33e0b300, ftLastWriteTime.dwHighDateTime=0x1ca5247, nFileSizeHigh=0x0, nFileSizeLow=0x9000, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.VisualStudio.Tools.Office.Word.AddInAdapter.v9.0.dll", cAlternateFileName="MI41FD~1.DLL")) returned 1 [0058.947] FindNextFileW (in: hFindFile=0x381dc0, lpFindFileData=0x31e404 | out: lpFindFileData=0x31e404*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0058.947] FindClose (in: hFindFile=0x381dc0 | out: hFindFile=0x381dc0) returned 1 [0058.948] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e68c) returned 1 [0058.948] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e698) returned 1 [0058.948] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e6cc) returned 1 [0058.948] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Common Files\\microsoft shared\\VSTA\\Pipeline.v10.0\\AddInSideAdapters", nBufferLength=0x105, lpBuffer=0x31e1d4, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Common Files\\microsoft shared\\VSTA\\Pipeline.v10.0\\AddInSideAdapters", lpFilePart=0x0) returned 0x5a [0058.948] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Common Files\\microsoft shared\\VSTA\\Pipeline.v10.0\\AddInSideAdapters\\", nBufferLength=0x105, lpBuffer=0x31e1a8, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Common Files\\microsoft shared\\VSTA\\Pipeline.v10.0\\AddInSideAdapters\\", lpFilePart=0x0) returned 0x5b [0058.948] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Common Files\\microsoft shared\\VSTA\\Pipeline.v10.0\\AddInSideAdapters\\*", lpFindFileData=0x31e3f4 | out: lpFindFileData=0x31e3f4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5863dfb0, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0xd3478ee0, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0xd3478ee0, ftLastWriteTime.dwHighDateTime=0x1d305eb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x381dc0 [0058.948] FindNextFileW (in: hFindFile=0x381dc0, lpFindFileData=0x31e404 | out: lpFindFileData=0x31e404*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5863dfb0, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0xd3478ee0, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0xd3478ee0, ftLastWriteTime.dwHighDateTime=0x1d305eb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0058.949] FindNextFileW (in: hFindFile=0x381dc0, lpFindFileData=0x31e404 | out: lpFindFileData=0x31e404*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6a612c00, ftCreationTime.dwHighDateTime=0x1cb6585, ftLastAccessTime.dwLowDateTime=0xd3478ee0, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0x6a612c00, ftLastWriteTime.dwHighDateTime=0x1cb6585, nFileSizeHigh=0x0, nFileSizeLow=0xa1c0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.VisualStudio.Tools.Applications.AddInAdapter.v10.0.dll", cAlternateFileName="MICROS~4.DLL")) returned 1 [0058.949] FindNextFileW (in: hFindFile=0x381dc0, lpFindFileData=0x31e404 | out: lpFindFileData=0x31e404*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x317e5900, ftCreationTime.dwHighDateTime=0x1ca5247, ftLastAccessTime.dwLowDateTime=0x5863dfb0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x317e5900, ftLastWriteTime.dwHighDateTime=0x1ca5247, nFileSizeHigh=0x0, nFileSizeLow=0xb000, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.VisualStudio.Tools.Applications.AddInAdapter.v9.0.dll", cAlternateFileName="MICROS~1.DLL")) returned 1 [0058.949] FindNextFileW (in: hFindFile=0x381dc0, lpFindFileData=0x31e404 | out: lpFindFileData=0x31e404*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x33e0b300, ftCreationTime.dwHighDateTime=0x1ca5247, ftLastAccessTime.dwLowDateTime=0x587bad70, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x33e0b300, ftLastWriteTime.dwHighDateTime=0x1ca5247, nFileSizeHigh=0x0, nFileSizeLow=0x14000, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.VisualStudio.Tools.Office.AddInAdapter.v9.0.dll", cAlternateFileName="MICROS~2.DLL")) returned 1 [0058.949] FindNextFileW (in: hFindFile=0x381dc0, lpFindFileData=0x31e404 | out: lpFindFileData=0x31e404*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x33e0b300, ftCreationTime.dwHighDateTime=0x1ca5247, ftLastAccessTime.dwLowDateTime=0x587e0ed0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x33e0b300, ftLastWriteTime.dwHighDateTime=0x1ca5247, nFileSizeHigh=0x0, nFileSizeLow=0x9000, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.VisualStudio.Tools.Office.Excel.AddInAdapter.v9.0.dll", cAlternateFileName="MICROS~3.DLL")) returned 1 [0058.949] FindNextFileW (in: hFindFile=0x381dc0, lpFindFileData=0x31e404 | out: lpFindFileData=0x31e404*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x33e0b300, ftCreationTime.dwHighDateTime=0x1ca5247, ftLastAccessTime.dwLowDateTime=0x69b68150, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x33e0b300, ftLastWriteTime.dwHighDateTime=0x1ca5247, nFileSizeHigh=0x0, nFileSizeLow=0x9000, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.VisualStudio.Tools.Office.Word.AddInAdapter.v9.0.dll", cAlternateFileName="MI41FD~1.DLL")) returned 1 [0058.949] FindNextFileW (in: hFindFile=0x381dc0, lpFindFileData=0x31e404 | out: lpFindFileData=0x31e404*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x33e0b300, ftCreationTime.dwHighDateTime=0x1ca5247, ftLastAccessTime.dwLowDateTime=0x69b68150, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x33e0b300, ftLastWriteTime.dwHighDateTime=0x1ca5247, nFileSizeHigh=0x0, nFileSizeLow=0x9000, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.VisualStudio.Tools.Office.Word.AddInAdapter.v9.0.dll", cAlternateFileName="MI41FD~1.DLL")) returned 0 [0058.949] FindClose (in: hFindFile=0x381dc0 | out: hFindFile=0x381dc0) returned 1 [0058.949] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e68c) returned 1 [0058.950] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e698) returned 1 [0058.950] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e6cc) returned 1 [0058.950] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Common Files\\microsoft shared\\VSTA\\Pipeline.v10.0\\AddInViews", nBufferLength=0x105, lpBuffer=0x31e1d4, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Common Files\\microsoft shared\\VSTA\\Pipeline.v10.0\\AddInViews", lpFilePart=0x0) returned 0x53 [0058.950] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Common Files\\microsoft shared\\VSTA\\Pipeline.v10.0\\AddInViews\\", nBufferLength=0x105, lpBuffer=0x31e1a8, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Common Files\\microsoft shared\\VSTA\\Pipeline.v10.0\\AddInViews\\", lpFilePart=0x0) returned 0x54 [0058.950] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Common Files\\microsoft shared\\VSTA\\Pipeline.v10.0\\AddInViews\\*", lpFindFileData=0x31e3f4 | out: lpFindFileData=0x31e3f4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x69acfbd0, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0xd60a8740, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0xd60a8740, ftLastWriteTime.dwHighDateTime=0x1d305eb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x381dc0 [0058.951] FindNextFileW (in: hFindFile=0x381dc0, lpFindFileData=0x31e404 | out: lpFindFileData=0x31e404*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x69acfbd0, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0xd60a8740, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0xd60a8740, ftLastWriteTime.dwHighDateTime=0x1d305eb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0058.951] FindNextFileW (in: hFindFile=0x381dc0, lpFindFileData=0x31e404 | out: lpFindFileData=0x31e404*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x33e0b300, ftCreationTime.dwHighDateTime=0x1ca5247, ftLastAccessTime.dwLowDateTime=0x6a2fe770, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x33e0b300, ftLastWriteTime.dwHighDateTime=0x1ca5247, nFileSizeHigh=0x0, nFileSizeLow=0x17000, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.Office.Tools.v9.0.dll", cAlternateFileName="MICROS~3.DLL")) returned 1 [0058.951] FindNextFileW (in: hFindFile=0x381dc0, lpFindFileData=0x31e404 | out: lpFindFileData=0x31e404*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6a612c00, ftCreationTime.dwHighDateTime=0x1cb6585, ftLastAccessTime.dwLowDateTime=0xd60a8740, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0x6a612c00, ftLastWriteTime.dwHighDateTime=0x1cb6585, nFileSizeHigh=0x0, nFileSizeLow=0x7fb0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.VisualStudio.Tools.Applications.Runtime.v10.0.dll", cAlternateFileName="MICROS~2.DLL")) returned 1 [0058.951] FindNextFileW (in: hFindFile=0x381dc0, lpFindFileData=0x31e404 | out: lpFindFileData=0x31e404*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x317e5900, ftCreationTime.dwHighDateTime=0x1ca5247, ftLastAccessTime.dwLowDateTime=0x69acfbd0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x317e5900, ftLastWriteTime.dwHighDateTime=0x1ca5247, nFileSizeHigh=0x0, nFileSizeLow=0x13000, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.VisualStudio.Tools.Applications.Runtime.v9.0.dll", cAlternateFileName="MICROS~1.DLL")) returned 1 [0058.951] FindNextFileW (in: hFindFile=0x381dc0, lpFindFileData=0x31e404 | out: lpFindFileData=0x31e404*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0058.951] FindClose (in: hFindFile=0x381dc0 | out: hFindFile=0x381dc0) returned 1 [0058.951] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e68c) returned 1 [0058.952] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e698) returned 1 [0058.952] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e6cc) returned 1 [0058.952] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Common Files\\microsoft shared\\VSTA\\Pipeline.v10.0\\AddInViews", nBufferLength=0x105, lpBuffer=0x31e1d4, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Common Files\\microsoft shared\\VSTA\\Pipeline.v10.0\\AddInViews", lpFilePart=0x0) returned 0x53 [0058.952] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Common Files\\microsoft shared\\VSTA\\Pipeline.v10.0\\AddInViews\\", nBufferLength=0x105, lpBuffer=0x31e1a8, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Common Files\\microsoft shared\\VSTA\\Pipeline.v10.0\\AddInViews\\", lpFilePart=0x0) returned 0x54 [0058.952] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Common Files\\microsoft shared\\VSTA\\Pipeline.v10.0\\AddInViews\\*", lpFindFileData=0x31e3f4 | out: lpFindFileData=0x31e3f4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x69acfbd0, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0xd60a8740, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0xd60a8740, ftLastWriteTime.dwHighDateTime=0x1d305eb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x381dc0 [0058.953] FindNextFileW (in: hFindFile=0x381dc0, lpFindFileData=0x31e404 | out: lpFindFileData=0x31e404*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x69acfbd0, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0xd60a8740, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0xd60a8740, ftLastWriteTime.dwHighDateTime=0x1d305eb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0058.953] FindNextFileW (in: hFindFile=0x381dc0, lpFindFileData=0x31e404 | out: lpFindFileData=0x31e404*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x33e0b300, ftCreationTime.dwHighDateTime=0x1ca5247, ftLastAccessTime.dwLowDateTime=0x6a2fe770, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x33e0b300, ftLastWriteTime.dwHighDateTime=0x1ca5247, nFileSizeHigh=0x0, nFileSizeLow=0x17000, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.Office.Tools.v9.0.dll", cAlternateFileName="MICROS~3.DLL")) returned 1 [0058.953] FindNextFileW (in: hFindFile=0x381dc0, lpFindFileData=0x31e404 | out: lpFindFileData=0x31e404*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6a612c00, ftCreationTime.dwHighDateTime=0x1cb6585, ftLastAccessTime.dwLowDateTime=0xd60a8740, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0x6a612c00, ftLastWriteTime.dwHighDateTime=0x1cb6585, nFileSizeHigh=0x0, nFileSizeLow=0x7fb0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.VisualStudio.Tools.Applications.Runtime.v10.0.dll", cAlternateFileName="MICROS~2.DLL")) returned 1 [0058.953] FindNextFileW (in: hFindFile=0x381dc0, lpFindFileData=0x31e404 | out: lpFindFileData=0x31e404*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x317e5900, ftCreationTime.dwHighDateTime=0x1ca5247, ftLastAccessTime.dwLowDateTime=0x69acfbd0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x317e5900, ftLastWriteTime.dwHighDateTime=0x1ca5247, nFileSizeHigh=0x0, nFileSizeLow=0x13000, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.VisualStudio.Tools.Applications.Runtime.v9.0.dll", cAlternateFileName="MICROS~1.DLL")) returned 1 [0058.953] FindNextFileW (in: hFindFile=0x381dc0, lpFindFileData=0x31e404 | out: lpFindFileData=0x31e404*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x317e5900, ftCreationTime.dwHighDateTime=0x1ca5247, ftLastAccessTime.dwLowDateTime=0x69acfbd0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x317e5900, ftLastWriteTime.dwHighDateTime=0x1ca5247, nFileSizeHigh=0x0, nFileSizeLow=0x13000, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.VisualStudio.Tools.Applications.Runtime.v9.0.dll", cAlternateFileName="MICROS~1.DLL")) returned 0 [0058.953] FindClose (in: hFindFile=0x381dc0 | out: hFindFile=0x381dc0) returned 1 [0058.954] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e68c) returned 1 [0058.954] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e698) returned 1 [0058.954] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e6cc) returned 1 [0058.954] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Common Files\\microsoft shared\\VSTA\\Pipeline.v10.0\\Contracts", nBufferLength=0x105, lpBuffer=0x31e1d4, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Common Files\\microsoft shared\\VSTA\\Pipeline.v10.0\\Contracts", lpFilePart=0x0) returned 0x52 [0058.954] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Common Files\\microsoft shared\\VSTA\\Pipeline.v10.0\\Contracts\\", nBufferLength=0x105, lpBuffer=0x31e1a8, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Common Files\\microsoft shared\\VSTA\\Pipeline.v10.0\\Contracts\\", lpFilePart=0x0) returned 0x53 [0058.954] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Common Files\\microsoft shared\\VSTA\\Pipeline.v10.0\\Contracts\\*", lpFindFileData=0x31e3f4 | out: lpFindFileData=0x31e3f4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x52328bf0, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0xd33e0960, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0xd33e0960, ftLastWriteTime.dwHighDateTime=0x1d305eb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x381dc0 [0058.955] FindNextFileW (in: hFindFile=0x381dc0, lpFindFileData=0x31e404 | out: lpFindFileData=0x31e404*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x52328bf0, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0xd33e0960, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0xd33e0960, ftLastWriteTime.dwHighDateTime=0x1d305eb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0058.955] FindNextFileW (in: hFindFile=0x381dc0, lpFindFileData=0x31e404 | out: lpFindFileData=0x31e404*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6a612c00, ftCreationTime.dwHighDateTime=0x1cb6585, ftLastAccessTime.dwLowDateTime=0xd31a54c0, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0x6a612c00, ftLastWriteTime.dwHighDateTime=0x1cb6585, nFileSizeHigh=0x0, nFileSizeLow=0x5fb0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.VisualStudio.Tools.Applications.Contract.v10.0.dll", cAlternateFileName="MICROS~3.DLL")) returned 1 [0058.955] FindNextFileW (in: hFindFile=0x381dc0, lpFindFileData=0x31e404 | out: lpFindFileData=0x31e404*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x317e5900, ftCreationTime.dwHighDateTime=0x1ca5247, ftLastAccessTime.dwLowDateTime=0x60d7a190, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x317e5900, ftLastWriteTime.dwHighDateTime=0x1ca5247, nFileSizeHigh=0x0, nFileSizeLow=0x5600, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.VisualStudio.Tools.Applications.Contract.v9.0.dll", cAlternateFileName="MICROS~4.DLL")) returned 1 [0058.955] FindNextFileW (in: hFindFile=0x381dc0, lpFindFileData=0x31e404 | out: lpFindFileData=0x31e404*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6a612c00, ftCreationTime.dwHighDateTime=0x1cb6585, ftLastAccessTime.dwLowDateTime=0xd33e0960, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0x6a612c00, ftLastWriteTime.dwHighDateTime=0x1cb6585, nFileSizeHigh=0x0, nFileSizeLow=0x5da8, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.VisualStudio.Tools.Office.Contract.v10.0.dll", cAlternateFileName="MICROS~2.DLL")) returned 1 [0058.955] FindNextFileW (in: hFindFile=0x381dc0, lpFindFileData=0x31e404 | out: lpFindFileData=0x31e404*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x33e0b300, ftCreationTime.dwHighDateTime=0x1ca5247, ftLastAccessTime.dwLowDateTime=0x52328bf0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x33e0b300, ftLastWriteTime.dwHighDateTime=0x1ca5247, nFileSizeHigh=0x0, nFileSizeLow=0xc000, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.VisualStudio.Tools.Office.Contract.v9.0.dll", cAlternateFileName="MICROS~1.DLL")) returned 1 [0058.955] FindNextFileW (in: hFindFile=0x381dc0, lpFindFileData=0x31e404 | out: lpFindFileData=0x31e404*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0058.955] FindClose (in: hFindFile=0x381dc0 | out: hFindFile=0x381dc0) returned 1 [0058.955] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e68c) returned 1 [0058.955] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e698) returned 1 [0058.956] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e6cc) returned 1 [0058.956] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Common Files\\microsoft shared\\VSTA\\Pipeline.v10.0\\Contracts", nBufferLength=0x105, lpBuffer=0x31e1d4, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Common Files\\microsoft shared\\VSTA\\Pipeline.v10.0\\Contracts", lpFilePart=0x0) returned 0x52 [0058.956] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Common Files\\microsoft shared\\VSTA\\Pipeline.v10.0\\Contracts\\", nBufferLength=0x105, lpBuffer=0x31e1a8, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Common Files\\microsoft shared\\VSTA\\Pipeline.v10.0\\Contracts\\", lpFilePart=0x0) returned 0x53 [0058.956] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Common Files\\microsoft shared\\VSTA\\Pipeline.v10.0\\Contracts\\*", lpFindFileData=0x31e3f4 | out: lpFindFileData=0x31e3f4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x52328bf0, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0xd33e0960, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0xd33e0960, ftLastWriteTime.dwHighDateTime=0x1d305eb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x381dc0 [0058.956] FindNextFileW (in: hFindFile=0x381dc0, lpFindFileData=0x31e404 | out: lpFindFileData=0x31e404*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x52328bf0, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0xd33e0960, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0xd33e0960, ftLastWriteTime.dwHighDateTime=0x1d305eb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0058.956] FindNextFileW (in: hFindFile=0x381dc0, lpFindFileData=0x31e404 | out: lpFindFileData=0x31e404*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6a612c00, ftCreationTime.dwHighDateTime=0x1cb6585, ftLastAccessTime.dwLowDateTime=0xd31a54c0, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0x6a612c00, ftLastWriteTime.dwHighDateTime=0x1cb6585, nFileSizeHigh=0x0, nFileSizeLow=0x5fb0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.VisualStudio.Tools.Applications.Contract.v10.0.dll", cAlternateFileName="MICROS~3.DLL")) returned 1 [0058.956] FindNextFileW (in: hFindFile=0x381dc0, lpFindFileData=0x31e404 | out: lpFindFileData=0x31e404*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x317e5900, ftCreationTime.dwHighDateTime=0x1ca5247, ftLastAccessTime.dwLowDateTime=0x60d7a190, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x317e5900, ftLastWriteTime.dwHighDateTime=0x1ca5247, nFileSizeHigh=0x0, nFileSizeLow=0x5600, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.VisualStudio.Tools.Applications.Contract.v9.0.dll", cAlternateFileName="MICROS~4.DLL")) returned 1 [0058.957] FindNextFileW (in: hFindFile=0x381dc0, lpFindFileData=0x31e404 | out: lpFindFileData=0x31e404*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6a612c00, ftCreationTime.dwHighDateTime=0x1cb6585, ftLastAccessTime.dwLowDateTime=0xd33e0960, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0x6a612c00, ftLastWriteTime.dwHighDateTime=0x1cb6585, nFileSizeHigh=0x0, nFileSizeLow=0x5da8, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.VisualStudio.Tools.Office.Contract.v10.0.dll", cAlternateFileName="MICROS~2.DLL")) returned 1 [0058.957] FindNextFileW (in: hFindFile=0x381dc0, lpFindFileData=0x31e404 | out: lpFindFileData=0x31e404*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x33e0b300, ftCreationTime.dwHighDateTime=0x1ca5247, ftLastAccessTime.dwLowDateTime=0x52328bf0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x33e0b300, ftLastWriteTime.dwHighDateTime=0x1ca5247, nFileSizeHigh=0x0, nFileSizeLow=0xc000, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.VisualStudio.Tools.Office.Contract.v9.0.dll", cAlternateFileName="MICROS~1.DLL")) returned 1 [0058.957] FindNextFileW (in: hFindFile=0x381dc0, lpFindFileData=0x31e404 | out: lpFindFileData=0x31e404*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x33e0b300, ftCreationTime.dwHighDateTime=0x1ca5247, ftLastAccessTime.dwLowDateTime=0x52328bf0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x33e0b300, ftLastWriteTime.dwHighDateTime=0x1ca5247, nFileSizeHigh=0x0, nFileSizeLow=0xc000, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.VisualStudio.Tools.Office.Contract.v9.0.dll", cAlternateFileName="MICROS~1.DLL")) returned 0 [0058.957] FindClose (in: hFindFile=0x381dc0 | out: hFindFile=0x381dc0) returned 1 [0058.957] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e68c) returned 1 [0058.957] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e698) returned 1 [0058.957] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e6cc) returned 1 [0058.957] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Common Files\\microsoft shared\\VSTA\\Pipeline.v10.0\\HostSideAdapters", nBufferLength=0x105, lpBuffer=0x31e1d4, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Common Files\\microsoft shared\\VSTA\\Pipeline.v10.0\\HostSideAdapters", lpFilePart=0x0) returned 0x59 [0058.957] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Common Files\\microsoft shared\\VSTA\\Pipeline.v10.0\\HostSideAdapters\\", nBufferLength=0x105, lpBuffer=0x31e1a8, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Common Files\\microsoft shared\\VSTA\\Pipeline.v10.0\\HostSideAdapters\\", lpFilePart=0x0) returned 0x5a [0058.958] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Common Files\\microsoft shared\\VSTA\\Pipeline.v10.0\\HostSideAdapters\\*", lpFindFileData=0x31e3f4 | out: lpFindFileData=0x31e3f4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x583906f0, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0xd60f4a00, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0xd60f4a00, ftLastWriteTime.dwHighDateTime=0x1d305eb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x381dc0 [0058.958] FindNextFileW (in: hFindFile=0x381dc0, lpFindFileData=0x31e404 | out: lpFindFileData=0x31e404*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x583906f0, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0xd60f4a00, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0xd60f4a00, ftLastWriteTime.dwHighDateTime=0x1d305eb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0058.958] FindNextFileW (in: hFindFile=0x381dc0, lpFindFileData=0x31e404 | out: lpFindFileData=0x31e404*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6a612c00, ftCreationTime.dwHighDateTime=0x1cb6585, ftLastAccessTime.dwLowDateTime=0xd5f9dda0, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0x6a612c00, ftLastWriteTime.dwHighDateTime=0x1cb6585, nFileSizeHigh=0x0, nFileSizeLow=0x89b8, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.VisualStudio.Tools.Applications.HostAdapter.v10.0.dll", cAlternateFileName="MIE07F~1.DLL")) returned 1 [0058.958] FindNextFileW (in: hFindFile=0x381dc0, lpFindFileData=0x31e404 | out: lpFindFileData=0x31e404*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6a612c00, ftCreationTime.dwHighDateTime=0x1cb6585, ftLastAccessTime.dwLowDateTime=0xd5eb9560, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0x6a612c00, ftLastWriteTime.dwHighDateTime=0x1cb6585, nFileSizeHigh=0x0, nFileSizeLow=0x12fb8, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.VisualStudio.Tools.Office.Excel.HostAdapter.v10.0.dll", cAlternateFileName="MICROS~1.DLL")) returned 1 [0058.958] FindNextFileW (in: hFindFile=0x381dc0, lpFindFileData=0x31e404 | out: lpFindFileData=0x31e404*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6a612c00, ftCreationTime.dwHighDateTime=0x1cb6585, ftLastAccessTime.dwLowDateTime=0xd60f4a00, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0x6a612c00, ftLastWriteTime.dwHighDateTime=0x1cb6585, nFileSizeHigh=0x0, nFileSizeLow=0xf7b0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.VisualStudio.Tools.Office.HostAdapter.v10.0.dll", cAlternateFileName="MICROS~3.DLL")) returned 1 [0058.958] FindNextFileW (in: hFindFile=0x381dc0, lpFindFileData=0x31e404 | out: lpFindFileData=0x31e404*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6a612c00, ftCreationTime.dwHighDateTime=0x1cb6585, ftLastAccessTime.dwLowDateTime=0xd5eb9560, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0x6a612c00, ftLastWriteTime.dwHighDateTime=0x1cb6585, nFileSizeHigh=0x0, nFileSizeLow=0xa1c0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.VisualStudio.Tools.Office.Outlook.HostAdapter.v10.0.dll", cAlternateFileName="MICROS~4.DLL")) returned 1 [0058.959] FindNextFileW (in: hFindFile=0x381dc0, lpFindFileData=0x31e404 | out: lpFindFileData=0x31e404*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6a612c00, ftCreationTime.dwHighDateTime=0x1cb6585, ftLastAccessTime.dwLowDateTime=0xd5edf6c0, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0x6a612c00, ftLastWriteTime.dwHighDateTime=0x1cb6585, nFileSizeHigh=0x0, nFileSizeLow=0x147b8, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.VisualStudio.Tools.Office.Word.HostAdapter.v10.0.dll", cAlternateFileName="MICROS~2.DLL")) returned 1 [0058.959] FindNextFileW (in: hFindFile=0x381dc0, lpFindFileData=0x31e404 | out: lpFindFileData=0x31e404*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0058.959] FindClose (in: hFindFile=0x381dc0 | out: hFindFile=0x381dc0) returned 1 [0058.959] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e68c) returned 1 [0058.959] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e698) returned 1 [0058.959] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e6cc) returned 1 [0058.959] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Common Files\\microsoft shared\\VSTA\\Pipeline.v10.0\\HostSideAdapters", nBufferLength=0x105, lpBuffer=0x31e1d4, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Common Files\\microsoft shared\\VSTA\\Pipeline.v10.0\\HostSideAdapters", lpFilePart=0x0) returned 0x59 [0058.959] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Common Files\\microsoft shared\\VSTA\\Pipeline.v10.0\\HostSideAdapters\\", nBufferLength=0x105, lpBuffer=0x31e1a8, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Common Files\\microsoft shared\\VSTA\\Pipeline.v10.0\\HostSideAdapters\\", lpFilePart=0x0) returned 0x5a [0058.959] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Common Files\\microsoft shared\\VSTA\\Pipeline.v10.0\\HostSideAdapters\\*", lpFindFileData=0x31e3f4 | out: lpFindFileData=0x31e3f4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x583906f0, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0xd60f4a00, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0xd60f4a00, ftLastWriteTime.dwHighDateTime=0x1d305eb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x381dc0 [0058.960] FindNextFileW (in: hFindFile=0x381dc0, lpFindFileData=0x31e404 | out: lpFindFileData=0x31e404*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x583906f0, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0xd60f4a00, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0xd60f4a00, ftLastWriteTime.dwHighDateTime=0x1d305eb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0058.960] FindNextFileW (in: hFindFile=0x381dc0, lpFindFileData=0x31e404 | out: lpFindFileData=0x31e404*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6a612c00, ftCreationTime.dwHighDateTime=0x1cb6585, ftLastAccessTime.dwLowDateTime=0xd5f9dda0, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0x6a612c00, ftLastWriteTime.dwHighDateTime=0x1cb6585, nFileSizeHigh=0x0, nFileSizeLow=0x89b8, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.VisualStudio.Tools.Applications.HostAdapter.v10.0.dll", cAlternateFileName="MIE07F~1.DLL")) returned 1 [0058.960] FindNextFileW (in: hFindFile=0x381dc0, lpFindFileData=0x31e404 | out: lpFindFileData=0x31e404*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6a612c00, ftCreationTime.dwHighDateTime=0x1cb6585, ftLastAccessTime.dwLowDateTime=0xd5eb9560, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0x6a612c00, ftLastWriteTime.dwHighDateTime=0x1cb6585, nFileSizeHigh=0x0, nFileSizeLow=0x12fb8, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.VisualStudio.Tools.Office.Excel.HostAdapter.v10.0.dll", cAlternateFileName="MICROS~1.DLL")) returned 1 [0058.960] FindNextFileW (in: hFindFile=0x381dc0, lpFindFileData=0x31e404 | out: lpFindFileData=0x31e404*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6a612c00, ftCreationTime.dwHighDateTime=0x1cb6585, ftLastAccessTime.dwLowDateTime=0xd60f4a00, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0x6a612c00, ftLastWriteTime.dwHighDateTime=0x1cb6585, nFileSizeHigh=0x0, nFileSizeLow=0xf7b0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.VisualStudio.Tools.Office.HostAdapter.v10.0.dll", cAlternateFileName="MICROS~3.DLL")) returned 1 [0058.960] FindNextFileW (in: hFindFile=0x381dc0, lpFindFileData=0x31e404 | out: lpFindFileData=0x31e404*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6a612c00, ftCreationTime.dwHighDateTime=0x1cb6585, ftLastAccessTime.dwLowDateTime=0xd5eb9560, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0x6a612c00, ftLastWriteTime.dwHighDateTime=0x1cb6585, nFileSizeHigh=0x0, nFileSizeLow=0xa1c0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.VisualStudio.Tools.Office.Outlook.HostAdapter.v10.0.dll", cAlternateFileName="MICROS~4.DLL")) returned 1 [0058.960] FindNextFileW (in: hFindFile=0x381dc0, lpFindFileData=0x31e404 | out: lpFindFileData=0x31e404*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6a612c00, ftCreationTime.dwHighDateTime=0x1cb6585, ftLastAccessTime.dwLowDateTime=0xd5edf6c0, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0x6a612c00, ftLastWriteTime.dwHighDateTime=0x1cb6585, nFileSizeHigh=0x0, nFileSizeLow=0x147b8, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.VisualStudio.Tools.Office.Word.HostAdapter.v10.0.dll", cAlternateFileName="MICROS~2.DLL")) returned 1 [0058.960] FindNextFileW (in: hFindFile=0x381dc0, lpFindFileData=0x31e404 | out: lpFindFileData=0x31e404*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6a612c00, ftCreationTime.dwHighDateTime=0x1cb6585, ftLastAccessTime.dwLowDateTime=0xd5edf6c0, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0x6a612c00, ftLastWriteTime.dwHighDateTime=0x1cb6585, nFileSizeHigh=0x0, nFileSizeLow=0x147b8, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.VisualStudio.Tools.Office.Word.HostAdapter.v10.0.dll", cAlternateFileName="MICROS~2.DLL")) returned 0 [0058.961] FindClose (in: hFindFile=0x381dc0 | out: hFindFile=0x381dc0) returned 1 [0058.961] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e68c) returned 1 [0058.961] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e698) returned 1 [0058.961] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e7bc) returned 1 [0058.961] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Common Files\\microsoft shared\\VSTO", nBufferLength=0x105, lpBuffer=0x31e2c4, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Common Files\\microsoft shared\\VSTO", lpFilePart=0x0) returned 0x39 [0058.961] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Common Files\\microsoft shared\\VSTO\\", nBufferLength=0x105, lpBuffer=0x31e298, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Common Files\\microsoft shared\\VSTO\\", lpFilePart=0x0) returned 0x3a [0058.961] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Common Files\\microsoft shared\\VSTO\\*", lpFindFileData=0x31e4e4 | out: lpFindFileData=0x31e4e4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x274de510, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0xd6d01960, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0xd6d01960, ftLastWriteTime.dwHighDateTime=0x1d305eb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x381dc0 [0058.963] FindNextFileW (in: hFindFile=0x381dc0, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x274de510, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0xd6d01960, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0xd6d01960, ftLastWriteTime.dwHighDateTime=0x1d305eb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0058.963] FindNextFileW (in: hFindFile=0x381dc0, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x274de510, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0xd6d73d80, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0xd6d73d80, ftLastWriteTime.dwHighDateTime=0x1d305eb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="10.0", cAlternateFileName="")) returned 1 [0058.963] FindNextFileW (in: hFindFile=0x381dc0, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf0a6ab00, ftCreationTime.dwHighDateTime=0x1cacb2a, ftLastAccessTime.dwLowDateTime=0x5e9eb8f0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xf0a6ab00, ftLastWriteTime.dwHighDateTime=0x1cacb2a, nFileSizeHigh=0x0, nFileSizeLow=0x87, dwReserved0=0x0, dwReserved1=0x0, cFileName="ActionsPane3.xsd", cAlternateFileName="ACTION~1.XSD")) returned 1 [0058.963] FindNextFileW (in: hFindFile=0x381dc0, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6a612c00, ftCreationTime.dwHighDateTime=0x1cb6585, ftLastAccessTime.dwLowDateTime=0xd6d01960, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0x6a612c00, ftLastWriteTime.dwHighDateTime=0x1cb6585, nFileSizeHigh=0x0, nFileSizeLow=0x1e948, dwReserved0=0x0, dwReserved1=0x0, cFileName="vstoee.dll", cAlternateFileName="")) returned 1 [0058.963] FindNextFileW (in: hFindFile=0x381dc0, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6a612c00, ftCreationTime.dwHighDateTime=0x1cb6585, ftLastAccessTime.dwLowDateTime=0xd6c693e0, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0x6a612c00, ftLastWriteTime.dwHighDateTime=0x1cb6585, nFileSizeHigh=0x0, nFileSizeLow=0x3d50, dwReserved0=0x0, dwReserved1=0x0, cFileName="vstoee100.tlb", cAlternateFileName="VSTOEE~1.TLB")) returned 1 [0058.963] FindNextFileW (in: hFindFile=0x381dc0, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6a612c00, ftCreationTime.dwHighDateTime=0x1cb6585, ftLastAccessTime.dwLowDateTime=0xd6c8f540, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0x6a612c00, ftLastWriteTime.dwHighDateTime=0x1cb6585, nFileSizeHigh=0x0, nFileSizeLow=0x5150, dwReserved0=0x0, dwReserved1=0x0, cFileName="vstoee90.tlb", cAlternateFileName="")) returned 1 [0058.964] FindNextFileW (in: hFindFile=0x381dc0, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0058.964] FindClose (in: hFindFile=0x381dc0 | out: hFindFile=0x381dc0) returned 1 [0058.964] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e77c) returned 1 [0058.964] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e788) returned 1 [0058.964] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e7bc) returned 1 [0058.964] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Common Files\\microsoft shared\\VSTO", nBufferLength=0x105, lpBuffer=0x31e2c4, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Common Files\\microsoft shared\\VSTO", lpFilePart=0x0) returned 0x39 [0058.964] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Common Files\\microsoft shared\\VSTO\\", nBufferLength=0x105, lpBuffer=0x31e298, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Common Files\\microsoft shared\\VSTO\\", lpFilePart=0x0) returned 0x3a [0058.964] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Common Files\\microsoft shared\\VSTO\\*", lpFindFileData=0x31e4e4 | out: lpFindFileData=0x31e4e4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x274de510, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0xd6d01960, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0xd6d01960, ftLastWriteTime.dwHighDateTime=0x1d305eb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x381dc0 [0058.965] FindNextFileW (in: hFindFile=0x381dc0, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x274de510, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0xd6d01960, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0xd6d01960, ftLastWriteTime.dwHighDateTime=0x1d305eb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0058.965] FindNextFileW (in: hFindFile=0x381dc0, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x274de510, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0xd6d73d80, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0xd6d73d80, ftLastWriteTime.dwHighDateTime=0x1d305eb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="10.0", cAlternateFileName="")) returned 1 [0058.965] FindNextFileW (in: hFindFile=0x381dc0, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf0a6ab00, ftCreationTime.dwHighDateTime=0x1cacb2a, ftLastAccessTime.dwLowDateTime=0x5e9eb8f0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xf0a6ab00, ftLastWriteTime.dwHighDateTime=0x1cacb2a, nFileSizeHigh=0x0, nFileSizeLow=0x87, dwReserved0=0x0, dwReserved1=0x0, cFileName="ActionsPane3.xsd", cAlternateFileName="ACTION~1.XSD")) returned 1 [0058.965] FindNextFileW (in: hFindFile=0x381dc0, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6a612c00, ftCreationTime.dwHighDateTime=0x1cb6585, ftLastAccessTime.dwLowDateTime=0xd6d01960, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0x6a612c00, ftLastWriteTime.dwHighDateTime=0x1cb6585, nFileSizeHigh=0x0, nFileSizeLow=0x1e948, dwReserved0=0x0, dwReserved1=0x0, cFileName="vstoee.dll", cAlternateFileName="")) returned 1 [0058.965] FindNextFileW (in: hFindFile=0x381dc0, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6a612c00, ftCreationTime.dwHighDateTime=0x1cb6585, ftLastAccessTime.dwLowDateTime=0xd6c693e0, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0x6a612c00, ftLastWriteTime.dwHighDateTime=0x1cb6585, nFileSizeHigh=0x0, nFileSizeLow=0x3d50, dwReserved0=0x0, dwReserved1=0x0, cFileName="vstoee100.tlb", cAlternateFileName="VSTOEE~1.TLB")) returned 1 [0058.965] FindNextFileW (in: hFindFile=0x381dc0, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6a612c00, ftCreationTime.dwHighDateTime=0x1cb6585, ftLastAccessTime.dwLowDateTime=0xd6c8f540, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0x6a612c00, ftLastWriteTime.dwHighDateTime=0x1cb6585, nFileSizeHigh=0x0, nFileSizeLow=0x5150, dwReserved0=0x0, dwReserved1=0x0, cFileName="vstoee90.tlb", cAlternateFileName="")) returned 1 [0058.965] FindNextFileW (in: hFindFile=0x381dc0, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6a612c00, ftCreationTime.dwHighDateTime=0x1cb6585, ftLastAccessTime.dwLowDateTime=0xd6c8f540, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0x6a612c00, ftLastWriteTime.dwHighDateTime=0x1cb6585, nFileSizeHigh=0x0, nFileSizeLow=0x5150, dwReserved0=0x0, dwReserved1=0x0, cFileName="vstoee90.tlb", cAlternateFileName="")) returned 0 [0058.966] FindClose (in: hFindFile=0x381dc0 | out: hFindFile=0x381dc0) returned 1 [0058.966] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e77c) returned 1 [0058.966] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e788) returned 1 [0058.966] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e744) returned 1 [0058.966] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Common Files\\microsoft shared\\VSTO\\10.0", nBufferLength=0x105, lpBuffer=0x31e24c, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Common Files\\microsoft shared\\VSTO\\10.0", lpFilePart=0x0) returned 0x3e [0058.966] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Common Files\\microsoft shared\\VSTO\\10.0\\", nBufferLength=0x105, lpBuffer=0x31e220, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Common Files\\microsoft shared\\VSTO\\10.0\\", lpFilePart=0x0) returned 0x3f [0058.966] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Common Files\\microsoft shared\\VSTO\\10.0\\*", lpFindFileData=0x31e46c | out: lpFindFileData=0x31e46c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x274de510, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0xd6d73d80, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0xd6d73d80, ftLastWriteTime.dwHighDateTime=0x1d305eb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x381dc0 [0058.968] FindNextFileW (in: hFindFile=0x381dc0, lpFindFileData=0x31e47c | out: lpFindFileData=0x31e47c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x274de510, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0xd6d73d80, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0xd6d73d80, ftLastWriteTime.dwHighDateTime=0x1d305eb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0058.969] FindNextFileW (in: hFindFile=0x381dc0, lpFindFileData=0x31e47c | out: lpFindFileData=0x31e47c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5279f530, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0xd504b000, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0xd504b000, ftLastWriteTime.dwHighDateTime=0x1d305eb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="1033", cAlternateFileName="")) returned 1 [0058.969] FindNextFileW (in: hFindFile=0x381dc0, lpFindFileData=0x31e47c | out: lpFindFileData=0x31e47c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1336200, ftCreationTime.dwHighDateTime=0x1cab7c7, ftLastAccessTime.dwLowDateTime=0x274de510, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x1336200, ftLastWriteTime.dwHighDateTime=0x1cab7c7, nFileSizeHigh=0x0, nFileSizeLow=0x2cc, dwReserved0=0x0, dwReserved1=0x0, cFileName="VSTOInstaller.config", cAlternateFileName="VSTOIN~1.CON")) returned 1 [0058.969] FindNextFileW (in: hFindFile=0x381dc0, lpFindFileData=0x31e47c | out: lpFindFileData=0x31e47c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6a612c00, ftCreationTime.dwHighDateTime=0x1cb6585, ftLastAccessTime.dwLowDateTime=0xd6d27ac0, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0x6a612c00, ftLastWriteTime.dwHighDateTime=0x1cb6585, nFileSizeHigh=0x0, nFileSizeLow=0x15558, dwReserved0=0x0, dwReserved1=0x0, cFileName="VSTOInstaller.exe", cAlternateFileName="VSTOIN~1.EXE")) returned 1 [0058.969] FindNextFileW (in: hFindFile=0x381dc0, lpFindFileData=0x31e47c | out: lpFindFileData=0x31e47c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6a612c00, ftCreationTime.dwHighDateTime=0x1cb6585, ftLastAccessTime.dwLowDateTime=0xd6d73d80, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0x6a612c00, ftLastWriteTime.dwHighDateTime=0x1cb6585, nFileSizeHigh=0x0, nFileSizeLow=0x40d50, dwReserved0=0x0, dwReserved1=0x0, cFileName="VSTOLoader.dll", cAlternateFileName="VSTOLO~1.DLL")) returned 1 [0058.969] FindNextFileW (in: hFindFile=0x381dc0, lpFindFileData=0x31e47c | out: lpFindFileData=0x31e47c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6a612c00, ftCreationTime.dwHighDateTime=0x1cb6585, ftLastAccessTime.dwLowDateTime=0xd576f200, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0x6a612c00, ftLastWriteTime.dwHighDateTime=0x1cb6585, nFileSizeHigh=0x0, nFileSizeLow=0xbf68, dwReserved0=0x0, dwReserved1=0x0, cFileName="VSTOMessageProvider.dll", cAlternateFileName="VSTOME~1.DLL")) returned 1 [0058.969] FindNextFileW (in: hFindFile=0x381dc0, lpFindFileData=0x31e47c | out: lpFindFileData=0x31e47c*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0058.969] FindClose (in: hFindFile=0x381dc0 | out: hFindFile=0x381dc0) returned 1 [0058.969] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e704) returned 1 [0058.969] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e710) returned 1 [0058.970] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e744) returned 1 [0058.970] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Common Files\\microsoft shared\\VSTO\\10.0", nBufferLength=0x105, lpBuffer=0x31e24c, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Common Files\\microsoft shared\\VSTO\\10.0", lpFilePart=0x0) returned 0x3e [0058.970] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Common Files\\microsoft shared\\VSTO\\10.0\\", nBufferLength=0x105, lpBuffer=0x31e220, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Common Files\\microsoft shared\\VSTO\\10.0\\", lpFilePart=0x0) returned 0x3f [0058.970] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Common Files\\microsoft shared\\VSTO\\10.0\\*", lpFindFileData=0x31e46c | out: lpFindFileData=0x31e46c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x274de510, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0xd6d73d80, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0xd6d73d80, ftLastWriteTime.dwHighDateTime=0x1d305eb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x381dc0 [0058.970] FindNextFileW (in: hFindFile=0x381dc0, lpFindFileData=0x31e47c | out: lpFindFileData=0x31e47c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x274de510, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0xd6d73d80, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0xd6d73d80, ftLastWriteTime.dwHighDateTime=0x1d305eb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0058.970] FindNextFileW (in: hFindFile=0x381dc0, lpFindFileData=0x31e47c | out: lpFindFileData=0x31e47c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5279f530, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0xd504b000, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0xd504b000, ftLastWriteTime.dwHighDateTime=0x1d305eb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="1033", cAlternateFileName="")) returned 1 [0058.970] FindNextFileW (in: hFindFile=0x381dc0, lpFindFileData=0x31e47c | out: lpFindFileData=0x31e47c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1336200, ftCreationTime.dwHighDateTime=0x1cab7c7, ftLastAccessTime.dwLowDateTime=0x274de510, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x1336200, ftLastWriteTime.dwHighDateTime=0x1cab7c7, nFileSizeHigh=0x0, nFileSizeLow=0x2cc, dwReserved0=0x0, dwReserved1=0x0, cFileName="VSTOInstaller.config", cAlternateFileName="VSTOIN~1.CON")) returned 1 [0058.971] FindNextFileW (in: hFindFile=0x381dc0, lpFindFileData=0x31e47c | out: lpFindFileData=0x31e47c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6a612c00, ftCreationTime.dwHighDateTime=0x1cb6585, ftLastAccessTime.dwLowDateTime=0xd6d27ac0, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0x6a612c00, ftLastWriteTime.dwHighDateTime=0x1cb6585, nFileSizeHigh=0x0, nFileSizeLow=0x15558, dwReserved0=0x0, dwReserved1=0x0, cFileName="VSTOInstaller.exe", cAlternateFileName="VSTOIN~1.EXE")) returned 1 [0058.971] FindNextFileW (in: hFindFile=0x381dc0, lpFindFileData=0x31e47c | out: lpFindFileData=0x31e47c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6a612c00, ftCreationTime.dwHighDateTime=0x1cb6585, ftLastAccessTime.dwLowDateTime=0xd6d73d80, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0x6a612c00, ftLastWriteTime.dwHighDateTime=0x1cb6585, nFileSizeHigh=0x0, nFileSizeLow=0x40d50, dwReserved0=0x0, dwReserved1=0x0, cFileName="VSTOLoader.dll", cAlternateFileName="VSTOLO~1.DLL")) returned 1 [0058.971] FindNextFileW (in: hFindFile=0x381dc0, lpFindFileData=0x31e47c | out: lpFindFileData=0x31e47c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6a612c00, ftCreationTime.dwHighDateTime=0x1cb6585, ftLastAccessTime.dwLowDateTime=0xd576f200, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0x6a612c00, ftLastWriteTime.dwHighDateTime=0x1cb6585, nFileSizeHigh=0x0, nFileSizeLow=0xbf68, dwReserved0=0x0, dwReserved1=0x0, cFileName="VSTOMessageProvider.dll", cAlternateFileName="VSTOME~1.DLL")) returned 1 [0058.971] FindNextFileW (in: hFindFile=0x381dc0, lpFindFileData=0x31e47c | out: lpFindFileData=0x31e47c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6a612c00, ftCreationTime.dwHighDateTime=0x1cb6585, ftLastAccessTime.dwLowDateTime=0xd576f200, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0x6a612c00, ftLastWriteTime.dwHighDateTime=0x1cb6585, nFileSizeHigh=0x0, nFileSizeLow=0xbf68, dwReserved0=0x0, dwReserved1=0x0, cFileName="VSTOMessageProvider.dll", cAlternateFileName="VSTOME~1.DLL")) returned 0 [0058.971] FindClose (in: hFindFile=0x381dc0 | out: hFindFile=0x381dc0) returned 1 [0058.971] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e704) returned 1 [0058.971] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e710) returned 1 [0058.971] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e6cc) returned 1 [0058.972] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Common Files\\microsoft shared\\VSTO\\10.0\\1033", nBufferLength=0x105, lpBuffer=0x31e1d4, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Common Files\\microsoft shared\\VSTO\\10.0\\1033", lpFilePart=0x0) returned 0x43 [0058.972] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Common Files\\microsoft shared\\VSTO\\10.0\\1033\\", nBufferLength=0x105, lpBuffer=0x31e1a8, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Common Files\\microsoft shared\\VSTO\\10.0\\1033\\", lpFilePart=0x0) returned 0x44 [0058.972] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Common Files\\microsoft shared\\VSTO\\10.0\\1033\\*", lpFindFileData=0x31e3f4 | out: lpFindFileData=0x31e3f4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5279f530, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0xd504b000, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0xd504b000, ftLastWriteTime.dwHighDateTime=0x1d305eb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x381dc0 [0058.973] FindNextFileW (in: hFindFile=0x381dc0, lpFindFileData=0x31e404 | out: lpFindFileData=0x31e404*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5279f530, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0xd504b000, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0xd504b000, ftLastWriteTime.dwHighDateTime=0x1d305eb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0058.973] FindNextFileW (in: hFindFile=0x381dc0, lpFindFileData=0x31e404 | out: lpFindFileData=0x31e404*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6a612c00, ftCreationTime.dwHighDateTime=0x1cb6585, ftLastAccessTime.dwLowDateTime=0xd5024ea0, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0x6a612c00, ftLastWriteTime.dwHighDateTime=0x1cb6585, nFileSizeHigh=0x0, nFileSizeLow=0x2760, dwReserved0=0x0, dwReserved1=0x0, cFileName="VSTOInstallerUI.dll", cAlternateFileName="VSTOIN~1.DLL")) returned 1 [0058.973] FindNextFileW (in: hFindFile=0x381dc0, lpFindFileData=0x31e404 | out: lpFindFileData=0x31e404*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6a612c00, ftCreationTime.dwHighDateTime=0x1cb6585, ftLastAccessTime.dwLowDateTime=0xd5071160, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0x6a612c00, ftLastWriteTime.dwHighDateTime=0x1cb6585, nFileSizeHigh=0x0, nFileSizeLow=0x4758, dwReserved0=0x0, dwReserved1=0x0, cFileName="VSTOLoaderUI.dll", cAlternateFileName="VSTOLO~1.DLL")) returned 1 [0058.973] FindNextFileW (in: hFindFile=0x381dc0, lpFindFileData=0x31e404 | out: lpFindFileData=0x31e404*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0058.973] FindClose (in: hFindFile=0x381dc0 | out: hFindFile=0x381dc0) returned 1 [0058.973] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e68c) returned 1 [0058.973] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e698) returned 1 [0058.973] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e6cc) returned 1 [0058.973] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Common Files\\microsoft shared\\VSTO\\10.0\\1033", nBufferLength=0x105, lpBuffer=0x31e1d4, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Common Files\\microsoft shared\\VSTO\\10.0\\1033", lpFilePart=0x0) returned 0x43 [0058.973] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Common Files\\microsoft shared\\VSTO\\10.0\\1033\\", nBufferLength=0x105, lpBuffer=0x31e1a8, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Common Files\\microsoft shared\\VSTO\\10.0\\1033\\", lpFilePart=0x0) returned 0x44 [0058.974] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Common Files\\microsoft shared\\VSTO\\10.0\\1033\\*", lpFindFileData=0x31e3f4 | out: lpFindFileData=0x31e3f4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5279f530, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0xd504b000, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0xd504b000, ftLastWriteTime.dwHighDateTime=0x1d305eb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x381dc0 [0058.974] FindNextFileW (in: hFindFile=0x381dc0, lpFindFileData=0x31e404 | out: lpFindFileData=0x31e404*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5279f530, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0xd504b000, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0xd504b000, ftLastWriteTime.dwHighDateTime=0x1d305eb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0058.974] FindNextFileW (in: hFindFile=0x381dc0, lpFindFileData=0x31e404 | out: lpFindFileData=0x31e404*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6a612c00, ftCreationTime.dwHighDateTime=0x1cb6585, ftLastAccessTime.dwLowDateTime=0xd5024ea0, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0x6a612c00, ftLastWriteTime.dwHighDateTime=0x1cb6585, nFileSizeHigh=0x0, nFileSizeLow=0x2760, dwReserved0=0x0, dwReserved1=0x0, cFileName="VSTOInstallerUI.dll", cAlternateFileName="VSTOIN~1.DLL")) returned 1 [0058.974] FindNextFileW (in: hFindFile=0x381dc0, lpFindFileData=0x31e404 | out: lpFindFileData=0x31e404*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6a612c00, ftCreationTime.dwHighDateTime=0x1cb6585, ftLastAccessTime.dwLowDateTime=0xd5071160, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0x6a612c00, ftLastWriteTime.dwHighDateTime=0x1cb6585, nFileSizeHigh=0x0, nFileSizeLow=0x4758, dwReserved0=0x0, dwReserved1=0x0, cFileName="VSTOLoaderUI.dll", cAlternateFileName="VSTOLO~1.DLL")) returned 1 [0058.974] FindNextFileW (in: hFindFile=0x381dc0, lpFindFileData=0x31e404 | out: lpFindFileData=0x31e404*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6a612c00, ftCreationTime.dwHighDateTime=0x1cb6585, ftLastAccessTime.dwLowDateTime=0xd5071160, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0x6a612c00, ftLastWriteTime.dwHighDateTime=0x1cb6585, nFileSizeHigh=0x0, nFileSizeLow=0x4758, dwReserved0=0x0, dwReserved1=0x0, cFileName="VSTOLoaderUI.dll", cAlternateFileName="VSTOLO~1.DLL")) returned 0 [0058.974] FindClose (in: hFindFile=0x381dc0 | out: hFindFile=0x381dc0) returned 1 [0058.974] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e68c) returned 1 [0058.974] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e698) returned 1 [0058.974] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e7bc) returned 1 [0058.974] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Common Files\\microsoft shared\\Web Server Extensions", nBufferLength=0x105, lpBuffer=0x31e2c4, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Common Files\\microsoft shared\\Web Server Extensions", lpFilePart=0x0) returned 0x4a [0058.974] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Common Files\\microsoft shared\\Web Server Extensions\\", nBufferLength=0x105, lpBuffer=0x31e298, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Common Files\\microsoft shared\\Web Server Extensions\\", lpFilePart=0x0) returned 0x4b [0058.974] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Common Files\\microsoft shared\\Web Server Extensions\\*", lpFindFileData=0x31e4e4 | out: lpFindFileData=0x31e4e4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x21a6a110, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x21a6a110, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x21a6a110, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x381dc0 [0058.974] FindNextFileW (in: hFindFile=0x381dc0, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x21a6a110, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x21a6a110, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x21a6a110, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0058.974] FindNextFileW (in: hFindFile=0x381dc0, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x21a6a110, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x21a6a110, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x21a6a110, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="14", cAlternateFileName="")) returned 1 [0058.975] FindNextFileW (in: hFindFile=0x381dc0, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x21a6a110, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x21a6a110, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x21a6a110, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="14", cAlternateFileName="")) returned 0 [0058.975] FindClose (in: hFindFile=0x381dc0 | out: hFindFile=0x381dc0) returned 1 [0058.975] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e77c) returned 1 [0058.975] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e788) returned 1 [0058.975] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e7bc) returned 1 [0058.975] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Common Files\\microsoft shared\\Web Server Extensions", nBufferLength=0x105, lpBuffer=0x31e2c4, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Common Files\\microsoft shared\\Web Server Extensions", lpFilePart=0x0) returned 0x4a [0058.975] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Common Files\\microsoft shared\\Web Server Extensions\\", nBufferLength=0x105, lpBuffer=0x31e298, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Common Files\\microsoft shared\\Web Server Extensions\\", lpFilePart=0x0) returned 0x4b [0058.975] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Common Files\\microsoft shared\\Web Server Extensions\\*", lpFindFileData=0x31e4e4 | out: lpFindFileData=0x31e4e4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x21a6a110, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x21a6a110, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x21a6a110, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x381dc0 [0058.975] FindNextFileW (in: hFindFile=0x381dc0, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x21a6a110, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x21a6a110, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x21a6a110, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0058.975] FindNextFileW (in: hFindFile=0x381dc0, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x21a6a110, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x21a6a110, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x21a6a110, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="14", cAlternateFileName="")) returned 1 [0058.975] FindNextFileW (in: hFindFile=0x381dc0, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0058.975] FindClose (in: hFindFile=0x381dc0 | out: hFindFile=0x381dc0) returned 1 [0058.975] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e77c) returned 1 [0058.975] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e788) returned 1 [0058.975] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e744) returned 1 [0058.975] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Common Files\\microsoft shared\\Web Server Extensions\\14", nBufferLength=0x105, lpBuffer=0x31e24c, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Common Files\\microsoft shared\\Web Server Extensions\\14", lpFilePart=0x0) returned 0x4d [0058.975] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Common Files\\microsoft shared\\Web Server Extensions\\14\\", nBufferLength=0x105, lpBuffer=0x31e220, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Common Files\\microsoft shared\\Web Server Extensions\\14\\", lpFilePart=0x0) returned 0x4e [0058.975] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Common Files\\microsoft shared\\Web Server Extensions\\14\\*", lpFindFileData=0x31e46c | out: lpFindFileData=0x31e46c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x21a6a110, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x21a6a110, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x21a6a110, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x381dc0 [0058.976] FindNextFileW (in: hFindFile=0x381dc0, lpFindFileData=0x31e47c | out: lpFindFileData=0x31e47c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x21a6a110, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x21a6a110, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x21a6a110, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0058.976] FindNextFileW (in: hFindFile=0x381dc0, lpFindFileData=0x31e47c | out: lpFindFileData=0x31e47c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x21a6a110, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0xad0454c0, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0xad0454c0, ftLastWriteTime.dwHighDateTime=0x1d305eb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="BIN", cAlternateFileName="")) returned 1 [0058.976] FindNextFileW (in: hFindFile=0x381dc0, lpFindFileData=0x31e47c | out: lpFindFileData=0x31e47c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x21a6a110, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0xad0454c0, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0xad0454c0, ftLastWriteTime.dwHighDateTime=0x1d305eb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="BIN", cAlternateFileName="")) returned 0 [0058.976] FindClose (in: hFindFile=0x381dc0 | out: hFindFile=0x381dc0) returned 1 [0058.976] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e704) returned 1 [0058.976] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e710) returned 1 [0058.976] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e744) returned 1 [0058.976] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Common Files\\microsoft shared\\Web Server Extensions\\14", nBufferLength=0x105, lpBuffer=0x31e24c, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Common Files\\microsoft shared\\Web Server Extensions\\14", lpFilePart=0x0) returned 0x4d [0058.976] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Common Files\\microsoft shared\\Web Server Extensions\\14\\", nBufferLength=0x105, lpBuffer=0x31e220, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Common Files\\microsoft shared\\Web Server Extensions\\14\\", lpFilePart=0x0) returned 0x4e [0058.976] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Common Files\\microsoft shared\\Web Server Extensions\\14\\*", lpFindFileData=0x31e46c | out: lpFindFileData=0x31e46c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x21a6a110, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x21a6a110, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x21a6a110, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x381dc0 [0058.976] FindNextFileW (in: hFindFile=0x381dc0, lpFindFileData=0x31e47c | out: lpFindFileData=0x31e47c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x21a6a110, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x21a6a110, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x21a6a110, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0058.976] FindNextFileW (in: hFindFile=0x381dc0, lpFindFileData=0x31e47c | out: lpFindFileData=0x31e47c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x21a6a110, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0xad0454c0, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0xad0454c0, ftLastWriteTime.dwHighDateTime=0x1d305eb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="BIN", cAlternateFileName="")) returned 1 [0058.976] FindNextFileW (in: hFindFile=0x381dc0, lpFindFileData=0x31e47c | out: lpFindFileData=0x31e47c*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0058.976] FindClose (in: hFindFile=0x381dc0 | out: hFindFile=0x381dc0) returned 1 [0058.976] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e704) returned 1 [0058.976] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e710) returned 1 [0058.976] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e6cc) returned 1 [0058.976] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Common Files\\microsoft shared\\Web Server Extensions\\14\\BIN", nBufferLength=0x105, lpBuffer=0x31e1d4, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Common Files\\microsoft shared\\Web Server Extensions\\14\\BIN", lpFilePart=0x0) returned 0x51 [0058.976] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Common Files\\microsoft shared\\Web Server Extensions\\14\\BIN\\", nBufferLength=0x105, lpBuffer=0x31e1a8, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Common Files\\microsoft shared\\Web Server Extensions\\14\\BIN\\", lpFilePart=0x0) returned 0x52 [0058.976] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Common Files\\microsoft shared\\Web Server Extensions\\14\\BIN\\*", lpFindFileData=0x31e3f4 | out: lpFindFileData=0x31e3f4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x21a6a110, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0xad0454c0, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0xad0454c0, ftLastWriteTime.dwHighDateTime=0x1d305eb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x381dc0 [0058.977] FindNextFileW (in: hFindFile=0x381dc0, lpFindFileData=0x31e404 | out: lpFindFileData=0x31e404*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x21a6a110, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0xad0454c0, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0xad0454c0, ftLastWriteTime.dwHighDateTime=0x1d305eb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0058.977] FindNextFileW (in: hFindFile=0x381dc0, lpFindFileData=0x31e404 | out: lpFindFileData=0x31e404*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1e690a00, ftCreationTime.dwHighDateTime=0x1cac0be, ftLastAccessTime.dwLowDateTime=0x21a6a110, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x1e690a00, ftLastWriteTime.dwHighDateTime=0x1cac0be, nFileSizeHigh=0x0, nFileSizeLow=0x193378, dwReserved0=0x0, dwReserved1=0x0, cFileName="FPSRVUTL.DLL", cAlternateFileName="")) returned 1 [0058.977] FindNextFileW (in: hFindFile=0x381dc0, lpFindFileData=0x31e404 | out: lpFindFileData=0x31e404*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x285ff900, ftCreationTime.dwHighDateTime=0x1cb71c7, ftLastAccessTime.dwLowDateTime=0xad06b620, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0x285ff900, ftLastWriteTime.dwHighDateTime=0x1cb71c7, nFileSizeHigh=0x0, nFileSizeLow=0xf0390, dwReserved0=0x0, dwReserved1=0x0, cFileName="FPWEC.DLL", cAlternateFileName="")) returned 1 [0058.977] FindNextFileW (in: hFindFile=0x381dc0, lpFindFileData=0x31e404 | out: lpFindFileData=0x31e404*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0058.977] FindClose (in: hFindFile=0x381dc0 | out: hFindFile=0x381dc0) returned 1 [0058.978] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e68c) returned 1 [0058.978] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e698) returned 1 [0058.978] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e6cc) returned 1 [0058.978] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Common Files\\microsoft shared\\Web Server Extensions\\14\\BIN", nBufferLength=0x105, lpBuffer=0x31e1d4, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Common Files\\microsoft shared\\Web Server Extensions\\14\\BIN", lpFilePart=0x0) returned 0x51 [0058.978] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Common Files\\microsoft shared\\Web Server Extensions\\14\\BIN\\", nBufferLength=0x105, lpBuffer=0x31e1a8, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Common Files\\microsoft shared\\Web Server Extensions\\14\\BIN\\", lpFilePart=0x0) returned 0x52 [0058.978] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Common Files\\microsoft shared\\Web Server Extensions\\14\\BIN\\*", lpFindFileData=0x31e3f4 | out: lpFindFileData=0x31e3f4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x21a6a110, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0xad0454c0, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0xad0454c0, ftLastWriteTime.dwHighDateTime=0x1d305eb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x381dc0 [0058.978] FindNextFileW (in: hFindFile=0x381dc0, lpFindFileData=0x31e404 | out: lpFindFileData=0x31e404*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x21a6a110, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0xad0454c0, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0xad0454c0, ftLastWriteTime.dwHighDateTime=0x1d305eb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0058.978] FindNextFileW (in: hFindFile=0x381dc0, lpFindFileData=0x31e404 | out: lpFindFileData=0x31e404*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1e690a00, ftCreationTime.dwHighDateTime=0x1cac0be, ftLastAccessTime.dwLowDateTime=0x21a6a110, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x1e690a00, ftLastWriteTime.dwHighDateTime=0x1cac0be, nFileSizeHigh=0x0, nFileSizeLow=0x193378, dwReserved0=0x0, dwReserved1=0x0, cFileName="FPSRVUTL.DLL", cAlternateFileName="")) returned 1 [0058.978] FindNextFileW (in: hFindFile=0x381dc0, lpFindFileData=0x31e404 | out: lpFindFileData=0x31e404*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x285ff900, ftCreationTime.dwHighDateTime=0x1cb71c7, ftLastAccessTime.dwLowDateTime=0xad06b620, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0x285ff900, ftLastWriteTime.dwHighDateTime=0x1cb71c7, nFileSizeHigh=0x0, nFileSizeLow=0xf0390, dwReserved0=0x0, dwReserved1=0x0, cFileName="FPWEC.DLL", cAlternateFileName="")) returned 1 [0058.978] FindNextFileW (in: hFindFile=0x381dc0, lpFindFileData=0x31e404 | out: lpFindFileData=0x31e404*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x285ff900, ftCreationTime.dwHighDateTime=0x1cb71c7, ftLastAccessTime.dwLowDateTime=0xad06b620, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0x285ff900, ftLastWriteTime.dwHighDateTime=0x1cb71c7, nFileSizeHigh=0x0, nFileSizeLow=0xf0390, dwReserved0=0x0, dwReserved1=0x0, cFileName="FPWEC.DLL", cAlternateFileName="")) returned 0 [0058.978] FindClose (in: hFindFile=0x381dc0 | out: hFindFile=0x381dc0) returned 1 [0058.978] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e68c) returned 1 [0058.978] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e698) returned 1 [0058.978] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e834) returned 1 [0058.978] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Common Files\\Services", nBufferLength=0x105, lpBuffer=0x31e33c, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Common Files\\Services", lpFilePart=0x0) returned 0x2c [0058.978] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Common Files\\Services\\", nBufferLength=0x105, lpBuffer=0x31e310, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Common Files\\Services\\", lpFilePart=0x0) returned 0x2d [0058.978] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Common Files\\Services\\*", lpFindFileData=0x31e55c | out: lpFindFileData=0x31e55c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd8d1336, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd8d1336, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xfd8d1336, ftLastWriteTime.dwHighDateTime=0x1ca0431, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x381dc0 [0058.981] FindNextFileW (in: hFindFile=0x381dc0, lpFindFileData=0x31e56c | out: lpFindFileData=0x31e56c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd8d1336, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd8d1336, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xfd8d1336, ftLastWriteTime.dwHighDateTime=0x1ca0431, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0058.981] FindNextFileW (in: hFindFile=0x381dc0, lpFindFileData=0x31e56c | out: lpFindFileData=0x31e56c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x892529fc, ftCreationTime.dwHighDateTime=0x1c9ea12, ftLastAccessTime.dwLowDateTime=0x892529fc, ftLastAccessTime.dwHighDateTime=0x1c9ea12, ftLastWriteTime.dwLowDateTime=0x892529fc, ftLastWriteTime.dwHighDateTime=0x1c9ea12, nFileSizeHigh=0x0, nFileSizeLow=0xa8e, dwReserved0=0x0, dwReserved1=0x0, cFileName="verisign.bmp", cAlternateFileName="")) returned 1 [0058.981] FindNextFileW (in: hFindFile=0x381dc0, lpFindFileData=0x31e56c | out: lpFindFileData=0x31e56c*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0058.981] FindClose (in: hFindFile=0x381dc0 | out: hFindFile=0x381dc0) returned 1 [0058.981] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e7f4) returned 1 [0058.981] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e800) returned 1 [0058.981] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e834) returned 1 [0058.981] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Common Files\\Services", nBufferLength=0x105, lpBuffer=0x31e33c, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Common Files\\Services", lpFilePart=0x0) returned 0x2c [0058.981] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Common Files\\Services\\", nBufferLength=0x105, lpBuffer=0x31e310, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Common Files\\Services\\", lpFilePart=0x0) returned 0x2d [0058.982] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Common Files\\Services\\*", lpFindFileData=0x31e55c | out: lpFindFileData=0x31e55c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd8d1336, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd8d1336, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xfd8d1336, ftLastWriteTime.dwHighDateTime=0x1ca0431, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x381dc0 [0058.982] FindNextFileW (in: hFindFile=0x381dc0, lpFindFileData=0x31e56c | out: lpFindFileData=0x31e56c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd8d1336, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd8d1336, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xfd8d1336, ftLastWriteTime.dwHighDateTime=0x1ca0431, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0058.982] FindNextFileW (in: hFindFile=0x381dc0, lpFindFileData=0x31e56c | out: lpFindFileData=0x31e56c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x892529fc, ftCreationTime.dwHighDateTime=0x1c9ea12, ftLastAccessTime.dwLowDateTime=0x892529fc, ftLastAccessTime.dwHighDateTime=0x1c9ea12, ftLastWriteTime.dwLowDateTime=0x892529fc, ftLastWriteTime.dwHighDateTime=0x1c9ea12, nFileSizeHigh=0x0, nFileSizeLow=0xa8e, dwReserved0=0x0, dwReserved1=0x0, cFileName="verisign.bmp", cAlternateFileName="")) returned 1 [0058.982] FindNextFileW (in: hFindFile=0x381dc0, lpFindFileData=0x31e56c | out: lpFindFileData=0x31e56c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x892529fc, ftCreationTime.dwHighDateTime=0x1c9ea12, ftLastAccessTime.dwLowDateTime=0x892529fc, ftLastAccessTime.dwHighDateTime=0x1c9ea12, ftLastWriteTime.dwLowDateTime=0x892529fc, ftLastWriteTime.dwHighDateTime=0x1c9ea12, nFileSizeHigh=0x0, nFileSizeLow=0xa8e, dwReserved0=0x0, dwReserved1=0x0, cFileName="verisign.bmp", cAlternateFileName="")) returned 0 [0058.982] FindClose (in: hFindFile=0x381dc0 | out: hFindFile=0x381dc0) returned 1 [0058.982] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e7f4) returned 1 [0058.982] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e800) returned 1 [0058.982] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Common Files\\Services\\verisign.bmp", nBufferLength=0x105, lpBuffer=0x31e20c, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Common Files\\Services\\verisign.bmp", lpFilePart=0x0) returned 0x39 [0058.982] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e700) returned 1 [0058.982] CreateFileW (lpFileName="C:\\Program Files (x86)\\Common Files\\Services\\verisign.bmp" (normalized: "c:\\program files (x86)\\common files\\services\\verisign.bmp"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x274 [0058.982] GetFileType (hFile=0x274) returned 0x1 [0058.982] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e6fc) returned 1 [0058.982] GetFileType (hFile=0x274) returned 0x1 [0058.982] GetFileSize (in: hFile=0x274, lpFileSizeHigh=0x31e808 | out: lpFileSizeHigh=0x31e808*=0x0) returned 0xa8e [0058.982] ReadFile (in: hFile=0x274, lpBuffer=0x26aeb18, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x31e7b4, lpOverlapped=0x0 | out: lpBuffer=0x26aeb18*, lpNumberOfBytesRead=0x31e7b4*=0xa8e, lpOverlapped=0x0) returned 1 [0058.984] CloseHandle (hObject=0x274) returned 1 [0059.026] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Common Files\\Services\\verisign.bmp", nBufferLength=0x105, lpBuffer=0x31e1f8, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Common Files\\Services\\verisign.bmp", lpFilePart=0x0) returned 0x39 [0059.026] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e6ec) returned 1 [0059.026] CreateFileW (lpFileName="C:\\Program Files (x86)\\Common Files\\Services\\verisign.bmp" (normalized: "c:\\program files (x86)\\common files\\services\\verisign.bmp"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0xffffffff [0059.027] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31d528) returned 1 [0059.027] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e834) returned 1 [0059.027] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Common Files\\SpeechEngines", nBufferLength=0x105, lpBuffer=0x31e33c, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Common Files\\SpeechEngines", lpFilePart=0x0) returned 0x31 [0059.027] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Common Files\\SpeechEngines\\", nBufferLength=0x105, lpBuffer=0x31e310, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Common Files\\SpeechEngines\\", lpFilePart=0x0) returned 0x32 [0059.027] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Common Files\\SpeechEngines\\*", lpFindFileData=0x31e55c | out: lpFindFileData=0x31e55c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd8d1336, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd8d1336, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xfd8d1336, ftLastWriteTime.dwHighDateTime=0x1ca0431, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x381ec0 [0059.028] FindNextFileW (in: hFindFile=0x381ec0, lpFindFileData=0x31e56c | out: lpFindFileData=0x31e56c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd8d1336, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd8d1336, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xfd8d1336, ftLastWriteTime.dwHighDateTime=0x1ca0431, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0059.028] FindNextFileW (in: hFindFile=0x381ec0, lpFindFileData=0x31e56c | out: lpFindFileData=0x31e56c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd8d1336, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd8f7490, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xfd8f7490, ftLastWriteTime.dwHighDateTime=0x1ca0431, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft", cAlternateFileName="MICROS~1")) returned 1 [0059.028] FindNextFileW (in: hFindFile=0x381ec0, lpFindFileData=0x31e56c | out: lpFindFileData=0x31e56c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd8d1336, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd8f7490, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xfd8f7490, ftLastWriteTime.dwHighDateTime=0x1ca0431, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft", cAlternateFileName="MICROS~1")) returned 0 [0059.028] FindClose (in: hFindFile=0x381ec0 | out: hFindFile=0x381ec0) returned 1 [0059.028] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e7f4) returned 1 [0059.028] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e800) returned 1 [0059.028] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e834) returned 1 [0059.028] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Common Files\\SpeechEngines", nBufferLength=0x105, lpBuffer=0x31e33c, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Common Files\\SpeechEngines", lpFilePart=0x0) returned 0x31 [0059.029] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Common Files\\SpeechEngines\\", nBufferLength=0x105, lpBuffer=0x31e310, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Common Files\\SpeechEngines\\", lpFilePart=0x0) returned 0x32 [0059.029] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Common Files\\SpeechEngines\\*", lpFindFileData=0x31e55c | out: lpFindFileData=0x31e55c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd8d1336, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd8d1336, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xfd8d1336, ftLastWriteTime.dwHighDateTime=0x1ca0431, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x381ec0 [0059.029] FindNextFileW (in: hFindFile=0x381ec0, lpFindFileData=0x31e56c | out: lpFindFileData=0x31e56c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd8d1336, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd8d1336, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xfd8d1336, ftLastWriteTime.dwHighDateTime=0x1ca0431, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0059.029] FindNextFileW (in: hFindFile=0x381ec0, lpFindFileData=0x31e56c | out: lpFindFileData=0x31e56c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd8d1336, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd8f7490, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xfd8f7490, ftLastWriteTime.dwHighDateTime=0x1ca0431, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft", cAlternateFileName="MICROS~1")) returned 1 [0059.029] FindNextFileW (in: hFindFile=0x381ec0, lpFindFileData=0x31e56c | out: lpFindFileData=0x31e56c*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0059.029] FindClose (in: hFindFile=0x381ec0 | out: hFindFile=0x381ec0) returned 1 [0059.029] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e7f4) returned 1 [0059.029] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e800) returned 1 [0059.029] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e7bc) returned 1 [0059.029] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Common Files\\SpeechEngines\\Microsoft", nBufferLength=0x105, lpBuffer=0x31e2c4, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Common Files\\SpeechEngines\\Microsoft", lpFilePart=0x0) returned 0x3b [0059.029] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Common Files\\SpeechEngines\\Microsoft\\", nBufferLength=0x105, lpBuffer=0x31e298, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Common Files\\SpeechEngines\\Microsoft\\", lpFilePart=0x0) returned 0x3c [0059.029] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Common Files\\SpeechEngines\\Microsoft\\*", lpFindFileData=0x31e4e4 | out: lpFindFileData=0x31e4e4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd8d1336, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd8f7490, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xfd8f7490, ftLastWriteTime.dwHighDateTime=0x1ca0431, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x381ec0 [0059.030] FindNextFileW (in: hFindFile=0x381ec0, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd8d1336, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd8f7490, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xfd8f7490, ftLastWriteTime.dwHighDateTime=0x1ca0431, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0059.030] FindNextFileW (in: hFindFile=0x381ec0, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd8f7490, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd8f7490, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xfd8f7490, ftLastWriteTime.dwHighDateTime=0x1ca0431, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="TTS20", cAlternateFileName="")) returned 1 [0059.030] FindNextFileW (in: hFindFile=0x381ec0, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd8f7490, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd8f7490, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xfd8f7490, ftLastWriteTime.dwHighDateTime=0x1ca0431, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="TTS20", cAlternateFileName="")) returned 0 [0059.030] FindClose (in: hFindFile=0x381ec0 | out: hFindFile=0x381ec0) returned 1 [0059.030] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e77c) returned 1 [0059.030] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e788) returned 1 [0059.030] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e7bc) returned 1 [0059.030] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Common Files\\SpeechEngines\\Microsoft", nBufferLength=0x105, lpBuffer=0x31e2c4, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Common Files\\SpeechEngines\\Microsoft", lpFilePart=0x0) returned 0x3b [0059.030] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Common Files\\SpeechEngines\\Microsoft\\", nBufferLength=0x105, lpBuffer=0x31e298, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Common Files\\SpeechEngines\\Microsoft\\", lpFilePart=0x0) returned 0x3c [0059.031] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Common Files\\SpeechEngines\\Microsoft\\*", lpFindFileData=0x31e4e4 | out: lpFindFileData=0x31e4e4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd8d1336, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd8f7490, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xfd8f7490, ftLastWriteTime.dwHighDateTime=0x1ca0431, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x381ec0 [0059.031] FindNextFileW (in: hFindFile=0x381ec0, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd8d1336, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd8f7490, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xfd8f7490, ftLastWriteTime.dwHighDateTime=0x1ca0431, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0059.031] FindNextFileW (in: hFindFile=0x381ec0, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd8f7490, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd8f7490, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xfd8f7490, ftLastWriteTime.dwHighDateTime=0x1ca0431, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="TTS20", cAlternateFileName="")) returned 1 [0059.031] FindNextFileW (in: hFindFile=0x381ec0, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0059.031] FindClose (in: hFindFile=0x381ec0 | out: hFindFile=0x381ec0) returned 1 [0059.031] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e77c) returned 1 [0059.031] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e788) returned 1 [0059.031] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e744) returned 1 [0059.031] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Common Files\\SpeechEngines\\Microsoft\\TTS20", nBufferLength=0x105, lpBuffer=0x31e24c, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Common Files\\SpeechEngines\\Microsoft\\TTS20", lpFilePart=0x0) returned 0x41 [0059.031] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Common Files\\SpeechEngines\\Microsoft\\TTS20\\", nBufferLength=0x105, lpBuffer=0x31e220, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Common Files\\SpeechEngines\\Microsoft\\TTS20\\", lpFilePart=0x0) returned 0x42 [0059.031] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Common Files\\SpeechEngines\\Microsoft\\TTS20\\*", lpFindFileData=0x31e46c | out: lpFindFileData=0x31e46c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd8f7490, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd8f7490, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xfd8f7490, ftLastWriteTime.dwHighDateTime=0x1ca0431, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x381ec0 [0059.032] FindNextFileW (in: hFindFile=0x381ec0, lpFindFileData=0x31e47c | out: lpFindFileData=0x31e47c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd8f7490, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd8f7490, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xfd8f7490, ftLastWriteTime.dwHighDateTime=0x1ca0431, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0059.032] FindNextFileW (in: hFindFile=0x381ec0, lpFindFileData=0x31e47c | out: lpFindFileData=0x31e47c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd8f7490, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x1ea1accb, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x1ea1accb, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="en-US", cAlternateFileName="")) returned 1 [0059.032] FindNextFileW (in: hFindFile=0x381ec0, lpFindFileData=0x31e47c | out: lpFindFileData=0x31e47c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf7523740, ftCreationTime.dwHighDateTime=0x1ca0417, ftLastAccessTime.dwLowDateTime=0xf7523740, ftLastAccessTime.dwHighDateTime=0x1ca0417, ftLastWriteTime.dwLowDateTime=0x9f416c90, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x8a00, dwReserved0=0x0, dwReserved1=0x0, cFileName="MSTTSCommon.dll", cAlternateFileName="")) returned 1 [0059.032] FindNextFileW (in: hFindFile=0x381ec0, lpFindFileData=0x31e47c | out: lpFindFileData=0x31e47c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf7b630d6, ftCreationTime.dwHighDateTime=0x1ca0417, ftLastAccessTime.dwLowDateTime=0xf7b630d6, ftLastAccessTime.dwHighDateTime=0x1ca0417, ftLastWriteTime.dwLowDateTime=0x9f4f9d60, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0xba00, dwReserved0=0x0, dwReserved1=0x0, cFileName="MSTTSDecWrp.dll", cAlternateFileName="")) returned 1 [0059.032] FindNextFileW (in: hFindFile=0x381ec0, lpFindFileData=0x31e47c | out: lpFindFileData=0x31e47c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf80be232, ftCreationTime.dwHighDateTime=0x1ca0417, ftLastAccessTime.dwLowDateTime=0xf80be232, ftLastAccessTime.dwHighDateTime=0x1ca0417, ftLastWriteTime.dwLowDateTime=0x9f6c4d20, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x24c00, dwReserved0=0x0, dwReserved1=0x0, cFileName="MSTTSEngine.dll", cAlternateFileName="")) returned 1 [0059.032] FindNextFileW (in: hFindFile=0x381ec0, lpFindFileData=0x31e47c | out: lpFindFileData=0x31e47c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xfaf9b217, ftCreationTime.dwHighDateTime=0x1ca0417, ftLastAccessTime.dwLowDateTime=0xfaf9b217, ftLastAccessTime.dwHighDateTime=0x1ca0417, ftLastWriteTime.dwLowDateTime=0x9fa0a390, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x2200, dwReserved0=0x0, dwReserved1=0x0, cFileName="MSTTSLoc.dll", cAlternateFileName="")) returned 1 [0059.032] FindNextFileW (in: hFindFile=0x381ec0, lpFindFileData=0x31e47c | out: lpFindFileData=0x31e47c*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0059.033] FindClose (in: hFindFile=0x381ec0 | out: hFindFile=0x381ec0) returned 1 [0059.033] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e704) returned 1 [0059.033] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e710) returned 1 [0059.033] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e744) returned 1 [0059.033] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Common Files\\SpeechEngines\\Microsoft\\TTS20", nBufferLength=0x105, lpBuffer=0x31e24c, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Common Files\\SpeechEngines\\Microsoft\\TTS20", lpFilePart=0x0) returned 0x41 [0059.033] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Common Files\\SpeechEngines\\Microsoft\\TTS20\\", nBufferLength=0x105, lpBuffer=0x31e220, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Common Files\\SpeechEngines\\Microsoft\\TTS20\\", lpFilePart=0x0) returned 0x42 [0059.033] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Common Files\\SpeechEngines\\Microsoft\\TTS20\\*", lpFindFileData=0x31e46c | out: lpFindFileData=0x31e46c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd8f7490, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd8f7490, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xfd8f7490, ftLastWriteTime.dwHighDateTime=0x1ca0431, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x381ec0 [0059.033] FindNextFileW (in: hFindFile=0x381ec0, lpFindFileData=0x31e47c | out: lpFindFileData=0x31e47c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd8f7490, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd8f7490, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xfd8f7490, ftLastWriteTime.dwHighDateTime=0x1ca0431, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0059.033] FindNextFileW (in: hFindFile=0x381ec0, lpFindFileData=0x31e47c | out: lpFindFileData=0x31e47c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd8f7490, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x1ea1accb, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x1ea1accb, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="en-US", cAlternateFileName="")) returned 1 [0059.033] FindNextFileW (in: hFindFile=0x381ec0, lpFindFileData=0x31e47c | out: lpFindFileData=0x31e47c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf7523740, ftCreationTime.dwHighDateTime=0x1ca0417, ftLastAccessTime.dwLowDateTime=0xf7523740, ftLastAccessTime.dwHighDateTime=0x1ca0417, ftLastWriteTime.dwLowDateTime=0x9f416c90, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x8a00, dwReserved0=0x0, dwReserved1=0x0, cFileName="MSTTSCommon.dll", cAlternateFileName="")) returned 1 [0059.033] FindNextFileW (in: hFindFile=0x381ec0, lpFindFileData=0x31e47c | out: lpFindFileData=0x31e47c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf7b630d6, ftCreationTime.dwHighDateTime=0x1ca0417, ftLastAccessTime.dwLowDateTime=0xf7b630d6, ftLastAccessTime.dwHighDateTime=0x1ca0417, ftLastWriteTime.dwLowDateTime=0x9f4f9d60, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0xba00, dwReserved0=0x0, dwReserved1=0x0, cFileName="MSTTSDecWrp.dll", cAlternateFileName="")) returned 1 [0059.034] FindNextFileW (in: hFindFile=0x381ec0, lpFindFileData=0x31e47c | out: lpFindFileData=0x31e47c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf80be232, ftCreationTime.dwHighDateTime=0x1ca0417, ftLastAccessTime.dwLowDateTime=0xf80be232, ftLastAccessTime.dwHighDateTime=0x1ca0417, ftLastWriteTime.dwLowDateTime=0x9f6c4d20, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x24c00, dwReserved0=0x0, dwReserved1=0x0, cFileName="MSTTSEngine.dll", cAlternateFileName="")) returned 1 [0059.034] FindNextFileW (in: hFindFile=0x381ec0, lpFindFileData=0x31e47c | out: lpFindFileData=0x31e47c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xfaf9b217, ftCreationTime.dwHighDateTime=0x1ca0417, ftLastAccessTime.dwLowDateTime=0xfaf9b217, ftLastAccessTime.dwHighDateTime=0x1ca0417, ftLastWriteTime.dwLowDateTime=0x9fa0a390, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x2200, dwReserved0=0x0, dwReserved1=0x0, cFileName="MSTTSLoc.dll", cAlternateFileName="")) returned 1 [0059.034] FindNextFileW (in: hFindFile=0x381ec0, lpFindFileData=0x31e47c | out: lpFindFileData=0x31e47c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xfaf9b217, ftCreationTime.dwHighDateTime=0x1ca0417, ftLastAccessTime.dwLowDateTime=0xfaf9b217, ftLastAccessTime.dwHighDateTime=0x1ca0417, ftLastWriteTime.dwLowDateTime=0x9fa0a390, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x2200, dwReserved0=0x0, dwReserved1=0x0, cFileName="MSTTSLoc.dll", cAlternateFileName="")) returned 0 [0059.034] FindClose (in: hFindFile=0x381ec0 | out: hFindFile=0x381ec0) returned 1 [0059.034] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e704) returned 1 [0059.034] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e710) returned 1 [0059.034] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e6cc) returned 1 [0059.034] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Common Files\\SpeechEngines\\Microsoft\\TTS20\\en-US", nBufferLength=0x105, lpBuffer=0x31e1d4, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Common Files\\SpeechEngines\\Microsoft\\TTS20\\en-US", lpFilePart=0x0) returned 0x47 [0059.034] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Common Files\\SpeechEngines\\Microsoft\\TTS20\\en-US\\", nBufferLength=0x105, lpBuffer=0x31e1a8, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Common Files\\SpeechEngines\\Microsoft\\TTS20\\en-US\\", lpFilePart=0x0) returned 0x48 [0059.034] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Common Files\\SpeechEngines\\Microsoft\\TTS20\\en-US\\*", lpFindFileData=0x31e3f4 | out: lpFindFileData=0x31e3f4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd8f7490, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x1ea1accb, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x1ea1accb, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x381ec0 [0059.035] FindNextFileW (in: hFindFile=0x381ec0, lpFindFileData=0x31e404 | out: lpFindFileData=0x31e404*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd8f7490, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x1ea1accb, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x1ea1accb, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0059.035] FindNextFileW (in: hFindFile=0x381ec0, lpFindFileData=0x31e404 | out: lpFindFileData=0x31e404*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd8f7490, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd8f7490, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xfd8f7490, ftLastWriteTime.dwHighDateTime=0x1ca0431, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="enu-dsk", cAlternateFileName="")) returned 1 [0059.036] FindNextFileW (in: hFindFile=0x381ec0, lpFindFileData=0x31e404 | out: lpFindFileData=0x31e404*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf7b89235, ftCreationTime.dwHighDateTime=0x1ca0417, ftLastAccessTime.dwLowDateTime=0xf7b89235, ftLastAccessTime.dwHighDateTime=0x1ca0417, ftLastWriteTime.dwLowDateTime=0x9fa0a390, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x43200, dwReserved0=0x0, dwReserved1=0x0, cFileName="MSTTSFrontendENU.dll", cAlternateFileName="")) returned 1 [0059.036] FindNextFileW (in: hFindFile=0x381ec0, lpFindFileData=0x31e404 | out: lpFindFileData=0x31e404*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc2bbb36, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0xc60371c, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0xc2bbb36, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0xa00, dwReserved0=0x0, dwReserved1=0x0, cFileName="MSTTSLoc.dll.mui", cAlternateFileName="")) returned 1 [0059.036] FindNextFileW (in: hFindFile=0x381ec0, lpFindFileData=0x31e404 | out: lpFindFileData=0x31e404*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0059.036] FindClose (in: hFindFile=0x381ec0 | out: hFindFile=0x381ec0) returned 1 [0059.036] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e68c) returned 1 [0059.036] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e698) returned 1 [0059.036] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e6cc) returned 1 [0059.036] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Common Files\\SpeechEngines\\Microsoft\\TTS20\\en-US", nBufferLength=0x105, lpBuffer=0x31e1d4, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Common Files\\SpeechEngines\\Microsoft\\TTS20\\en-US", lpFilePart=0x0) returned 0x47 [0059.036] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Common Files\\SpeechEngines\\Microsoft\\TTS20\\en-US\\", nBufferLength=0x105, lpBuffer=0x31e1a8, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Common Files\\SpeechEngines\\Microsoft\\TTS20\\en-US\\", lpFilePart=0x0) returned 0x48 [0059.036] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Common Files\\SpeechEngines\\Microsoft\\TTS20\\en-US\\*", lpFindFileData=0x31e3f4 | out: lpFindFileData=0x31e3f4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd8f7490, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x1ea1accb, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x1ea1accb, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x381ec0 [0059.036] FindNextFileW (in: hFindFile=0x381ec0, lpFindFileData=0x31e404 | out: lpFindFileData=0x31e404*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd8f7490, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x1ea1accb, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x1ea1accb, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0059.037] FindNextFileW (in: hFindFile=0x381ec0, lpFindFileData=0x31e404 | out: lpFindFileData=0x31e404*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd8f7490, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd8f7490, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xfd8f7490, ftLastWriteTime.dwHighDateTime=0x1ca0431, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="enu-dsk", cAlternateFileName="")) returned 1 [0059.037] FindNextFileW (in: hFindFile=0x381ec0, lpFindFileData=0x31e404 | out: lpFindFileData=0x31e404*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf7b89235, ftCreationTime.dwHighDateTime=0x1ca0417, ftLastAccessTime.dwLowDateTime=0xf7b89235, ftLastAccessTime.dwHighDateTime=0x1ca0417, ftLastWriteTime.dwLowDateTime=0x9fa0a390, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x43200, dwReserved0=0x0, dwReserved1=0x0, cFileName="MSTTSFrontendENU.dll", cAlternateFileName="")) returned 1 [0059.037] FindNextFileW (in: hFindFile=0x381ec0, lpFindFileData=0x31e404 | out: lpFindFileData=0x31e404*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc2bbb36, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0xc60371c, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0xc2bbb36, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0xa00, dwReserved0=0x0, dwReserved1=0x0, cFileName="MSTTSLoc.dll.mui", cAlternateFileName="")) returned 1 [0059.037] FindNextFileW (in: hFindFile=0x381ec0, lpFindFileData=0x31e404 | out: lpFindFileData=0x31e404*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc2bbb36, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0xc60371c, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0xc2bbb36, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0xa00, dwReserved0=0x0, dwReserved1=0x0, cFileName="MSTTSLoc.dll.mui", cAlternateFileName="")) returned 0 [0059.037] FindClose (in: hFindFile=0x381ec0 | out: hFindFile=0x381ec0) returned 1 [0059.037] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e68c) returned 1 [0059.037] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e698) returned 1 [0059.037] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e654) returned 1 [0059.037] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Common Files\\SpeechEngines\\Microsoft\\TTS20\\en-US\\enu-dsk", nBufferLength=0x105, lpBuffer=0x31e15c, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Common Files\\SpeechEngines\\Microsoft\\TTS20\\en-US\\enu-dsk", lpFilePart=0x0) returned 0x4f [0059.037] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Common Files\\SpeechEngines\\Microsoft\\TTS20\\en-US\\enu-dsk\\", nBufferLength=0x105, lpBuffer=0x31e130, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Common Files\\SpeechEngines\\Microsoft\\TTS20\\en-US\\enu-dsk\\", lpFilePart=0x0) returned 0x50 [0059.037] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Common Files\\SpeechEngines\\Microsoft\\TTS20\\en-US\\enu-dsk\\*", lpFindFileData=0x31e37c | out: lpFindFileData=0x31e37c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd8f7490, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd8f7490, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xfd8f7490, ftLastWriteTime.dwHighDateTime=0x1ca0431, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x381ec0 [0059.039] FindNextFileW (in: hFindFile=0x381ec0, lpFindFileData=0x31e38c | out: lpFindFileData=0x31e38c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd8f7490, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd8f7490, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xfd8f7490, ftLastWriteTime.dwHighDateTime=0x1ca0431, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0059.039] FindNextFileW (in: hFindFile=0x381ec0, lpFindFileData=0x31e38c | out: lpFindFileData=0x31e38c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7bb848fc, ftCreationTime.dwHighDateTime=0x1c9ea13, ftLastAccessTime.dwLowDateTime=0x7bb848fc, ftLastAccessTime.dwHighDateTime=0x1c9ea13, ftLastWriteTime.dwLowDateTime=0x7bb848fc, ftLastWriteTime.dwHighDateTime=0x1c9ea13, nFileSizeHigh=0x0, nFileSizeLow=0x3ec2, dwReserved0=0x0, dwReserved1=0x0, cFileName="M1033DSK.APL", cAlternateFileName="")) returned 1 [0059.039] FindNextFileW (in: hFindFile=0x381ec0, lpFindFileData=0x31e38c | out: lpFindFileData=0x31e38c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc7650f9d, ftCreationTime.dwHighDateTime=0x1ca03fd, ftLastAccessTime.dwLowDateTime=0xc7650f9d, ftLastAccessTime.dwHighDateTime=0x1ca03fd, ftLastWriteTime.dwLowDateTime=0x7bc1ce7c, ftLastWriteTime.dwHighDateTime=0x1c9ea13, nFileSizeHigh=0x0, nFileSizeLow=0x764f8, dwReserved0=0x0, dwReserved1=0x0, cFileName="M1033DSK.CRT", cAlternateFileName="")) returned 1 [0059.039] FindNextFileW (in: hFindFile=0x381ec0, lpFindFileData=0x31e38c | out: lpFindFileData=0x31e38c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc77357d7, ftCreationTime.dwHighDateTime=0x1ca03fd, ftLastAccessTime.dwLowDateTime=0xc77357d7, ftLastAccessTime.dwHighDateTime=0x1ca03fd, ftLastWriteTime.dwLowDateTime=0x7c84ff3c, ftLastWriteTime.dwHighDateTime=0x1c9ea13, nFileSizeHigh=0x0, nFileSizeLow=0x1c6aed4, dwReserved0=0x0, dwReserved1=0x0, cFileName="M1033DSK.CSD", cAlternateFileName="")) returned 1 [0059.040] FindNextFileW (in: hFindFile=0x381ec0, lpFindFileData=0x31e38c | out: lpFindFileData=0x31e38c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc7d9b2cc, ftCreationTime.dwHighDateTime=0x1ca03fd, ftLastAccessTime.dwLowDateTime=0xc7d9b2cc, ftLastAccessTime.dwHighDateTime=0x1ca03fd, ftLastWriteTime.dwLowDateTime=0x7c93477c, ftLastWriteTime.dwHighDateTime=0x1c9ea13, nFileSizeHigh=0x0, nFileSizeLow=0x2059c, dwReserved0=0x0, dwReserved1=0x0, cFileName="M1033DSK.IDX", cAlternateFileName="")) returned 1 [0059.040] FindNextFileW (in: hFindFile=0x381ec0, lpFindFileData=0x31e38c | out: lpFindFileData=0x31e38c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc7e0d6e9, ftCreationTime.dwHighDateTime=0x1ca03fd, ftLastAccessTime.dwLowDateTime=0xc7e0d6e9, ftLastAccessTime.dwHighDateTime=0x1ca03fd, ftLastWriteTime.dwLowDateTime=0x7da2a43c, ftLastWriteTime.dwHighDateTime=0x1c9ea13, nFileSizeHigh=0x0, nFileSizeLow=0xe3770, dwReserved0=0x0, dwReserved1=0x0, cFileName="M1033DSK.LTS", cAlternateFileName="")) returned 1 [0059.040] FindNextFileW (in: hFindFile=0x381ec0, lpFindFileData=0x31e38c | out: lpFindFileData=0x31e38c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc7f8a49f, ftCreationTime.dwHighDateTime=0x1ca03fd, ftLastAccessTime.dwLowDateTime=0xc7f8a49f, ftLastAccessTime.dwHighDateTime=0x1ca03fd, ftLastWriteTime.dwLowDateTime=0x7dc3f77c, ftLastWriteTime.dwHighDateTime=0x1c9ea13, nFileSizeHigh=0x0, nFileSizeLow=0x2515b9, dwReserved0=0x0, dwReserved1=0x0, cFileName="M1033DSK.TTS", cAlternateFileName="")) returned 1 [0059.040] FindNextFileW (in: hFindFile=0x381ec0, lpFindFileData=0x31e38c | out: lpFindFileData=0x31e38c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc812d3b4, ftCreationTime.dwHighDateTime=0x1ca03fd, ftLastAccessTime.dwLowDateTime=0xc812d3b4, ftLastAccessTime.dwHighDateTime=0x1ca03fd, ftLastWriteTime.dwLowDateTime=0x7dcfde5c, ftLastWriteTime.dwHighDateTime=0x1c9ea13, nFileSizeHigh=0x0, nFileSizeLow=0x2b9e, dwReserved0=0x0, dwReserved1=0x0, cFileName="M1033DSK.UDT", cAlternateFileName="")) returned 1 [0059.040] FindNextFileW (in: hFindFile=0x381ec0, lpFindFileData=0x31e38c | out: lpFindFileData=0x31e38c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc8153513, ftCreationTime.dwHighDateTime=0x1ca03fd, ftLastAccessTime.dwLowDateTime=0xc8153513, ftLastAccessTime.dwHighDateTime=0x1ca03fd, ftLastWriteTime.dwLowDateTime=0x7df1319c, ftLastWriteTime.dwHighDateTime=0x1c9ea13, nFileSizeHigh=0x0, nFileSizeLow=0x308e50, dwReserved0=0x0, dwReserved1=0x0, cFileName="M1033DSK.UNT", cAlternateFileName="")) returned 1 [0059.040] FindNextFileW (in: hFindFile=0x381ec0, lpFindFileData=0x31e38c | out: lpFindFileData=0x31e38c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc82d02c9, ftCreationTime.dwHighDateTime=0x1ca03fd, ftLastAccessTime.dwLowDateTime=0xc82d02c9, ftLastAccessTime.dwHighDateTime=0x1ca03fd, ftLastWriteTime.dwLowDateTime=0x7dff79dc, ftLastWriteTime.dwHighDateTime=0x1c9ea13, nFileSizeHigh=0x0, nFileSizeLow=0x36e466, dwReserved0=0x0, dwReserved1=0x0, cFileName="M1033DSK.WIH", cAlternateFileName="")) returned 1 [0059.040] FindNextFileW (in: hFindFile=0x381ec0, lpFindFileData=0x31e38c | out: lpFindFileData=0x31e38c*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0059.040] FindClose (in: hFindFile=0x381ec0 | out: hFindFile=0x381ec0) returned 1 [0059.041] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e614) returned 1 [0059.041] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e620) returned 1 [0059.041] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e654) returned 1 [0059.041] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Common Files\\SpeechEngines\\Microsoft\\TTS20\\en-US\\enu-dsk", nBufferLength=0x105, lpBuffer=0x31e15c, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Common Files\\SpeechEngines\\Microsoft\\TTS20\\en-US\\enu-dsk", lpFilePart=0x0) returned 0x4f [0059.041] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Common Files\\SpeechEngines\\Microsoft\\TTS20\\en-US\\enu-dsk\\", nBufferLength=0x105, lpBuffer=0x31e130, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Common Files\\SpeechEngines\\Microsoft\\TTS20\\en-US\\enu-dsk\\", lpFilePart=0x0) returned 0x50 [0059.041] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Common Files\\SpeechEngines\\Microsoft\\TTS20\\en-US\\enu-dsk\\*", lpFindFileData=0x31e37c | out: lpFindFileData=0x31e37c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd8f7490, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd8f7490, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xfd8f7490, ftLastWriteTime.dwHighDateTime=0x1ca0431, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x381ec0 [0059.042] FindNextFileW (in: hFindFile=0x381ec0, lpFindFileData=0x31e38c | out: lpFindFileData=0x31e38c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd8f7490, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd8f7490, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xfd8f7490, ftLastWriteTime.dwHighDateTime=0x1ca0431, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0059.042] FindNextFileW (in: hFindFile=0x381ec0, lpFindFileData=0x31e38c | out: lpFindFileData=0x31e38c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7bb848fc, ftCreationTime.dwHighDateTime=0x1c9ea13, ftLastAccessTime.dwLowDateTime=0x7bb848fc, ftLastAccessTime.dwHighDateTime=0x1c9ea13, ftLastWriteTime.dwLowDateTime=0x7bb848fc, ftLastWriteTime.dwHighDateTime=0x1c9ea13, nFileSizeHigh=0x0, nFileSizeLow=0x3ec2, dwReserved0=0x0, dwReserved1=0x0, cFileName="M1033DSK.APL", cAlternateFileName="")) returned 1 [0059.042] FindNextFileW (in: hFindFile=0x381ec0, lpFindFileData=0x31e38c | out: lpFindFileData=0x31e38c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc7650f9d, ftCreationTime.dwHighDateTime=0x1ca03fd, ftLastAccessTime.dwLowDateTime=0xc7650f9d, ftLastAccessTime.dwHighDateTime=0x1ca03fd, ftLastWriteTime.dwLowDateTime=0x7bc1ce7c, ftLastWriteTime.dwHighDateTime=0x1c9ea13, nFileSizeHigh=0x0, nFileSizeLow=0x764f8, dwReserved0=0x0, dwReserved1=0x0, cFileName="M1033DSK.CRT", cAlternateFileName="")) returned 1 [0059.043] FindNextFileW (in: hFindFile=0x381ec0, lpFindFileData=0x31e38c | out: lpFindFileData=0x31e38c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc77357d7, ftCreationTime.dwHighDateTime=0x1ca03fd, ftLastAccessTime.dwLowDateTime=0xc77357d7, ftLastAccessTime.dwHighDateTime=0x1ca03fd, ftLastWriteTime.dwLowDateTime=0x7c84ff3c, ftLastWriteTime.dwHighDateTime=0x1c9ea13, nFileSizeHigh=0x0, nFileSizeLow=0x1c6aed4, dwReserved0=0x0, dwReserved1=0x0, cFileName="M1033DSK.CSD", cAlternateFileName="")) returned 1 [0059.043] FindNextFileW (in: hFindFile=0x381ec0, lpFindFileData=0x31e38c | out: lpFindFileData=0x31e38c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc7d9b2cc, ftCreationTime.dwHighDateTime=0x1ca03fd, ftLastAccessTime.dwLowDateTime=0xc7d9b2cc, ftLastAccessTime.dwHighDateTime=0x1ca03fd, ftLastWriteTime.dwLowDateTime=0x7c93477c, ftLastWriteTime.dwHighDateTime=0x1c9ea13, nFileSizeHigh=0x0, nFileSizeLow=0x2059c, dwReserved0=0x0, dwReserved1=0x0, cFileName="M1033DSK.IDX", cAlternateFileName="")) returned 1 [0059.043] FindNextFileW (in: hFindFile=0x381ec0, lpFindFileData=0x31e38c | out: lpFindFileData=0x31e38c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc7e0d6e9, ftCreationTime.dwHighDateTime=0x1ca03fd, ftLastAccessTime.dwLowDateTime=0xc7e0d6e9, ftLastAccessTime.dwHighDateTime=0x1ca03fd, ftLastWriteTime.dwLowDateTime=0x7da2a43c, ftLastWriteTime.dwHighDateTime=0x1c9ea13, nFileSizeHigh=0x0, nFileSizeLow=0xe3770, dwReserved0=0x0, dwReserved1=0x0, cFileName="M1033DSK.LTS", cAlternateFileName="")) returned 1 [0059.043] FindNextFileW (in: hFindFile=0x381ec0, lpFindFileData=0x31e38c | out: lpFindFileData=0x31e38c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc7f8a49f, ftCreationTime.dwHighDateTime=0x1ca03fd, ftLastAccessTime.dwLowDateTime=0xc7f8a49f, ftLastAccessTime.dwHighDateTime=0x1ca03fd, ftLastWriteTime.dwLowDateTime=0x7dc3f77c, ftLastWriteTime.dwHighDateTime=0x1c9ea13, nFileSizeHigh=0x0, nFileSizeLow=0x2515b9, dwReserved0=0x0, dwReserved1=0x0, cFileName="M1033DSK.TTS", cAlternateFileName="")) returned 1 [0059.043] FindNextFileW (in: hFindFile=0x381ec0, lpFindFileData=0x31e38c | out: lpFindFileData=0x31e38c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc812d3b4, ftCreationTime.dwHighDateTime=0x1ca03fd, ftLastAccessTime.dwLowDateTime=0xc812d3b4, ftLastAccessTime.dwHighDateTime=0x1ca03fd, ftLastWriteTime.dwLowDateTime=0x7dcfde5c, ftLastWriteTime.dwHighDateTime=0x1c9ea13, nFileSizeHigh=0x0, nFileSizeLow=0x2b9e, dwReserved0=0x0, dwReserved1=0x0, cFileName="M1033DSK.UDT", cAlternateFileName="")) returned 1 [0059.043] FindNextFileW (in: hFindFile=0x381ec0, lpFindFileData=0x31e38c | out: lpFindFileData=0x31e38c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc8153513, ftCreationTime.dwHighDateTime=0x1ca03fd, ftLastAccessTime.dwLowDateTime=0xc8153513, ftLastAccessTime.dwHighDateTime=0x1ca03fd, ftLastWriteTime.dwLowDateTime=0x7df1319c, ftLastWriteTime.dwHighDateTime=0x1c9ea13, nFileSizeHigh=0x0, nFileSizeLow=0x308e50, dwReserved0=0x0, dwReserved1=0x0, cFileName="M1033DSK.UNT", cAlternateFileName="")) returned 1 [0059.043] FindNextFileW (in: hFindFile=0x381ec0, lpFindFileData=0x31e38c | out: lpFindFileData=0x31e38c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc82d02c9, ftCreationTime.dwHighDateTime=0x1ca03fd, ftLastAccessTime.dwLowDateTime=0xc82d02c9, ftLastAccessTime.dwHighDateTime=0x1ca03fd, ftLastWriteTime.dwLowDateTime=0x7dff79dc, ftLastWriteTime.dwHighDateTime=0x1c9ea13, nFileSizeHigh=0x0, nFileSizeLow=0x36e466, dwReserved0=0x0, dwReserved1=0x0, cFileName="M1033DSK.WIH", cAlternateFileName="")) returned 1 [0059.044] FindNextFileW (in: hFindFile=0x381ec0, lpFindFileData=0x31e38c | out: lpFindFileData=0x31e38c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc82d02c9, ftCreationTime.dwHighDateTime=0x1ca03fd, ftLastAccessTime.dwLowDateTime=0xc82d02c9, ftLastAccessTime.dwHighDateTime=0x1ca03fd, ftLastWriteTime.dwLowDateTime=0x7dff79dc, ftLastWriteTime.dwHighDateTime=0x1c9ea13, nFileSizeHigh=0x0, nFileSizeLow=0x36e466, dwReserved0=0x0, dwReserved1=0x0, cFileName="M1033DSK.WIH", cAlternateFileName="")) returned 0 [0059.044] FindClose (in: hFindFile=0x381ec0 | out: hFindFile=0x381ec0) returned 1 [0059.044] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e614) returned 1 [0059.044] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e620) returned 1 [0059.044] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e834) returned 1 [0059.044] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Common Files\\System", nBufferLength=0x105, lpBuffer=0x31e33c, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Common Files\\System", lpFilePart=0x0) returned 0x2a [0059.045] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Common Files\\System\\", nBufferLength=0x105, lpBuffer=0x31e310, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Common Files\\System\\", lpFilePart=0x0) returned 0x2b [0059.045] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Common Files\\System\\*", lpFindFileData=0x31e55c | out: lpFindFileData=0x31e55c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd8f7490, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x9c11cf80, ftLastAccessTime.dwHighDateTime=0x1d301bd, ftLastWriteTime.dwLowDateTime=0x9c11cf80, ftLastWriteTime.dwHighDateTime=0x1d301bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x381ec0 [0059.046] FindNextFileW (in: hFindFile=0x381ec0, lpFindFileData=0x31e56c | out: lpFindFileData=0x31e56c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd8f7490, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x9c11cf80, ftLastAccessTime.dwHighDateTime=0x1d301bd, ftLastWriteTime.dwLowDateTime=0x9c11cf80, ftLastWriteTime.dwHighDateTime=0x1d301bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0059.047] FindNextFileW (in: hFindFile=0x381ec0, lpFindFileData=0x31e56c | out: lpFindFileData=0x31e56c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd8f7490, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x1ea40f84, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x1ea40f84, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="ado", cAlternateFileName="")) returned 1 [0059.047] FindNextFileW (in: hFindFile=0x381ec0, lpFindFileData=0x31e56c | out: lpFindFileData=0x31e56c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x886e43c6, ftCreationTime.dwHighDateTime=0x1ca0413, ftLastAccessTime.dwLowDateTime=0x886e43c6, ftLastAccessTime.dwHighDateTime=0x1ca0413, ftLastWriteTime.dwLowDateTime=0x89202410, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x5e00, dwReserved0=0x0, dwReserved1=0x0, cFileName="DirectDB.dll", cAlternateFileName="")) returned 1 [0059.047] FindNextFileW (in: hFindFile=0x381ec0, lpFindFileData=0x31e56c | out: lpFindFileData=0x31e56c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1ea40f84, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x22a11cd0, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x1ea40f84, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="en-US", cAlternateFileName="")) returned 1 [0059.047] FindNextFileW (in: hFindFile=0x381ec0, lpFindFileData=0x31e56c | out: lpFindFileData=0x31e56c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd8f7490, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x1ea40f84, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x1ea40f84, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="msadc", cAlternateFileName="")) returned 1 [0059.047] FindNextFileW (in: hFindFile=0x381ec0, lpFindFileData=0x31e56c | out: lpFindFileData=0x31e56c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd8f7490, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x5f34af90, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x5f34af90, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Ole DB", cAlternateFileName="OLEDB~1")) returned 1 [0059.047] FindNextFileW (in: hFindFile=0x381ec0, lpFindFileData=0x31e56c | out: lpFindFileData=0x31e56c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8c2406d7, ftCreationTime.dwHighDateTime=0x1ca0413, ftLastAccessTime.dwLowDateTime=0x8c2406d7, ftLastAccessTime.dwHighDateTime=0x1ca0413, ftLastWriteTime.dwLowDateTime=0xb04ef6b0, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0xad000, dwReserved0=0x0, dwReserved1=0x0, cFileName="wab32.dll", cAlternateFileName="")) returned 1 [0059.047] FindNextFileW (in: hFindFile=0x381ec0, lpFindFileData=0x31e56c | out: lpFindFileData=0x31e56c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8d4d923a, ftCreationTime.dwHighDateTime=0x1ca0413, ftLastAccessTime.dwLowDateTime=0x8d4d923a, ftLastAccessTime.dwHighDateTime=0x1ca0413, ftLastWriteTime.dwLowDateTime=0xf37f6470, ftLastWriteTime.dwHighDateTime=0x1ca041f, nFileSizeHigh=0x0, nFileSizeLow=0x10c400, dwReserved0=0x0, dwReserved1=0x0, cFileName="wab32res.dll", cAlternateFileName="")) returned 1 [0059.048] FindNextFileW (in: hFindFile=0x381ec0, lpFindFileData=0x31e56c | out: lpFindFileData=0x31e56c*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0059.048] FindClose (in: hFindFile=0x381ec0 | out: hFindFile=0x381ec0) returned 1 [0059.048] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e7f4) returned 1 [0059.048] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e800) returned 1 [0059.048] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e834) returned 1 [0059.048] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Common Files\\System", nBufferLength=0x105, lpBuffer=0x31e33c, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Common Files\\System", lpFilePart=0x0) returned 0x2a [0059.048] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Common Files\\System\\", nBufferLength=0x105, lpBuffer=0x31e310, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Common Files\\System\\", lpFilePart=0x0) returned 0x2b [0059.049] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Common Files\\System\\*", lpFindFileData=0x31e55c | out: lpFindFileData=0x31e55c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd8f7490, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x9c11cf80, ftLastAccessTime.dwHighDateTime=0x1d301bd, ftLastWriteTime.dwLowDateTime=0x9c11cf80, ftLastWriteTime.dwHighDateTime=0x1d301bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x381ec0 [0059.049] FindNextFileW (in: hFindFile=0x381ec0, lpFindFileData=0x31e56c | out: lpFindFileData=0x31e56c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd8f7490, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x9c11cf80, ftLastAccessTime.dwHighDateTime=0x1d301bd, ftLastWriteTime.dwLowDateTime=0x9c11cf80, ftLastWriteTime.dwHighDateTime=0x1d301bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0059.050] FindNextFileW (in: hFindFile=0x381ec0, lpFindFileData=0x31e56c | out: lpFindFileData=0x31e56c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd8f7490, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x1ea40f84, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x1ea40f84, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="ado", cAlternateFileName="")) returned 1 [0059.050] FindNextFileW (in: hFindFile=0x381ec0, lpFindFileData=0x31e56c | out: lpFindFileData=0x31e56c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x886e43c6, ftCreationTime.dwHighDateTime=0x1ca0413, ftLastAccessTime.dwLowDateTime=0x886e43c6, ftLastAccessTime.dwHighDateTime=0x1ca0413, ftLastWriteTime.dwLowDateTime=0x89202410, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x5e00, dwReserved0=0x0, dwReserved1=0x0, cFileName="DirectDB.dll", cAlternateFileName="")) returned 1 [0059.050] FindNextFileW (in: hFindFile=0x381ec0, lpFindFileData=0x31e56c | out: lpFindFileData=0x31e56c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1ea40f84, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x22a11cd0, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x1ea40f84, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="en-US", cAlternateFileName="")) returned 1 [0059.050] FindNextFileW (in: hFindFile=0x381ec0, lpFindFileData=0x31e56c | out: lpFindFileData=0x31e56c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd8f7490, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x1ea40f84, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x1ea40f84, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="msadc", cAlternateFileName="")) returned 1 [0059.050] FindNextFileW (in: hFindFile=0x381ec0, lpFindFileData=0x31e56c | out: lpFindFileData=0x31e56c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd8f7490, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x5f34af90, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x5f34af90, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Ole DB", cAlternateFileName="OLEDB~1")) returned 1 [0059.050] FindNextFileW (in: hFindFile=0x381ec0, lpFindFileData=0x31e56c | out: lpFindFileData=0x31e56c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8c2406d7, ftCreationTime.dwHighDateTime=0x1ca0413, ftLastAccessTime.dwLowDateTime=0x8c2406d7, ftLastAccessTime.dwHighDateTime=0x1ca0413, ftLastWriteTime.dwLowDateTime=0xb04ef6b0, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0xad000, dwReserved0=0x0, dwReserved1=0x0, cFileName="wab32.dll", cAlternateFileName="")) returned 1 [0059.050] FindNextFileW (in: hFindFile=0x381ec0, lpFindFileData=0x31e56c | out: lpFindFileData=0x31e56c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8d4d923a, ftCreationTime.dwHighDateTime=0x1ca0413, ftLastAccessTime.dwLowDateTime=0x8d4d923a, ftLastAccessTime.dwHighDateTime=0x1ca0413, ftLastWriteTime.dwLowDateTime=0xf37f6470, ftLastWriteTime.dwHighDateTime=0x1ca041f, nFileSizeHigh=0x0, nFileSizeLow=0x10c400, dwReserved0=0x0, dwReserved1=0x0, cFileName="wab32res.dll", cAlternateFileName="")) returned 1 [0059.050] FindNextFileW (in: hFindFile=0x381ec0, lpFindFileData=0x31e56c | out: lpFindFileData=0x31e56c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8d4d923a, ftCreationTime.dwHighDateTime=0x1ca0413, ftLastAccessTime.dwLowDateTime=0x8d4d923a, ftLastAccessTime.dwHighDateTime=0x1ca0413, ftLastWriteTime.dwLowDateTime=0xf37f6470, ftLastWriteTime.dwHighDateTime=0x1ca041f, nFileSizeHigh=0x0, nFileSizeLow=0x10c400, dwReserved0=0x0, dwReserved1=0x0, cFileName="wab32res.dll", cAlternateFileName="")) returned 0 [0059.051] FindClose (in: hFindFile=0x381ec0 | out: hFindFile=0x381ec0) returned 1 [0059.051] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e7f4) returned 1 [0059.051] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e800) returned 1 [0059.051] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e7bc) returned 1 [0059.051] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Common Files\\System\\ado", nBufferLength=0x105, lpBuffer=0x31e2c4, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Common Files\\System\\ado", lpFilePart=0x0) returned 0x2e [0059.051] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Common Files\\System\\ado\\", nBufferLength=0x105, lpBuffer=0x31e298, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Common Files\\System\\ado\\", lpFilePart=0x0) returned 0x2f [0059.052] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Common Files\\System\\ado\\*", lpFindFileData=0x31e4e4 | out: lpFindFileData=0x31e4e4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd8f7490, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x1ea40f84, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x1ea40f84, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x381ec0 [0059.054] FindNextFileW (in: hFindFile=0x381ec0, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd8f7490, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x1ea40f84, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x1ea40f84, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0059.054] FindNextFileW (in: hFindFile=0x381ec0, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x252bcdd, ftCreationTime.dwHighDateTime=0x1ca040b, ftLastAccessTime.dwLowDateTime=0x252bcdd, ftLastAccessTime.dwHighDateTime=0x1ca040b, ftLastWriteTime.dwLowDateTime=0xab6cf35d, ftLastWriteTime.dwHighDateTime=0x1ca03fd, nFileSizeHigh=0x0, nFileSizeLow=0x3912, dwReserved0=0x0, dwReserved1=0x0, cFileName="adojavas.inc", cAlternateFileName="")) returned 1 [0059.054] FindNextFileW (in: hFindFile=0x381ec0, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2505b7e, ftCreationTime.dwHighDateTime=0x1ca040b, ftLastAccessTime.dwLowDateTime=0x2505b7e, ftLastAccessTime.dwHighDateTime=0x1ca040b, ftLastWriteTime.dwLowDateTime=0xab5eab23, ftLastWriteTime.dwHighDateTime=0x1ca03fd, nFileSizeHigh=0x0, nFileSizeLow=0x3a67, dwReserved0=0x0, dwReserved1=0x0, cFileName="adovbs.inc", cAlternateFileName="")) returned 1 [0059.054] FindNextFileW (in: hFindFile=0x381ec0, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1ea40f84, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x228ba44f, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x1ea40f84, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="en-US", cAlternateFileName="")) returned 1 [0059.054] FindNextFileW (in: hFindFile=0x381ec0, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb7465328, ftCreationTime.dwHighDateTime=0x1ca0417, ftLastAccessTime.dwLowDateTime=0xb7465328, ftLastAccessTime.dwHighDateTime=0x1ca0417, ftLastWriteTime.dwLowDateTime=0x5fb141f0, ftLastWriteTime.dwHighDateTime=0x1ca041f, nFileSizeHigh=0x0, nFileSizeLow=0x2000, dwReserved0=0x0, dwReserved1=0x0, cFileName="msader15.dll", cAlternateFileName="")) returned 1 [0059.054] FindNextFileW (in: hFindFile=0x381ec0, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x99b80ab9, ftCreationTime.dwHighDateTime=0x1cb892b, ftLastAccessTime.dwLowDateTime=0x99b80ab9, ftLastAccessTime.dwHighDateTime=0x1cb892b, ftLastWriteTime.dwLowDateTime=0x99bccd79, ftLastWriteTime.dwHighDateTime=0x1cb892b, nFileSizeHigh=0x0, nFileSizeLow=0xf9000, dwReserved0=0x0, dwReserved1=0x0, cFileName="msado15.dll", cAlternateFileName="")) returned 1 [0059.055] FindNextFileW (in: hFindFile=0x381ec0, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8ab15afe, ftCreationTime.dwHighDateTime=0x1cb892b, ftLastAccessTime.dwLowDateTime=0x8ab15afe, ftLastAccessTime.dwHighDateTime=0x1cb892b, ftLastWriteTime.dwLowDateTime=0x8ab15afe, ftLastWriteTime.dwHighDateTime=0x1cb892b, nFileSizeHigh=0x0, nFileSizeLow=0x11000, dwReserved0=0x0, dwReserved1=0x0, cFileName="msado20.tlb", cAlternateFileName="")) returned 1 [0059.055] FindNextFileW (in: hFindFile=0x381ec0, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8ab15afe, ftCreationTime.dwHighDateTime=0x1cb892b, ftLastAccessTime.dwLowDateTime=0x8ab15afe, ftLastAccessTime.dwHighDateTime=0x1cb892b, ftLastWriteTime.dwLowDateTime=0x8ab15afe, ftLastWriteTime.dwHighDateTime=0x1cb892b, nFileSizeHigh=0x0, nFileSizeLow=0x12000, dwReserved0=0x0, dwReserved1=0x0, cFileName="msado21.tlb", cAlternateFileName="")) returned 1 [0059.055] FindNextFileW (in: hFindFile=0x381ec0, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8ab3bc5e, ftCreationTime.dwHighDateTime=0x1cb892b, ftLastAccessTime.dwLowDateTime=0x8ab3bc5e, ftLastAccessTime.dwHighDateTime=0x1cb892b, ftLastWriteTime.dwLowDateTime=0x8ab3bc5e, ftLastWriteTime.dwHighDateTime=0x1cb892b, nFileSizeHigh=0x0, nFileSizeLow=0x17000, dwReserved0=0x0, dwReserved1=0x0, cFileName="msado25.tlb", cAlternateFileName="")) returned 1 [0059.055] FindNextFileW (in: hFindFile=0x381ec0, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8ab3bc5e, ftCreationTime.dwHighDateTime=0x1cb892b, ftLastAccessTime.dwLowDateTime=0x8ab3bc5e, ftLastAccessTime.dwHighDateTime=0x1cb892b, ftLastWriteTime.dwLowDateTime=0x8ab3bc5e, ftLastWriteTime.dwHighDateTime=0x1cb892b, nFileSizeHigh=0x0, nFileSizeLow=0x18000, dwReserved0=0x0, dwReserved1=0x0, cFileName="msado26.tlb", cAlternateFileName="")) returned 1 [0059.055] FindNextFileW (in: hFindFile=0x381ec0, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8ab87f1f, ftCreationTime.dwHighDateTime=0x1cb892b, ftLastAccessTime.dwLowDateTime=0x8ab87f1f, ftLastAccessTime.dwHighDateTime=0x1cb892b, ftLastWriteTime.dwLowDateTime=0x8ab87f1f, ftLastWriteTime.dwHighDateTime=0x1cb892b, nFileSizeHigh=0x0, nFileSizeLow=0x18000, dwReserved0=0x0, dwReserved1=0x0, cFileName="msado27.tlb", cAlternateFileName="")) returned 1 [0059.055] FindNextFileW (in: hFindFile=0x381ec0, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8abd41df, ftCreationTime.dwHighDateTime=0x1cb892b, ftLastAccessTime.dwLowDateTime=0x8abd41df, ftLastAccessTime.dwHighDateTime=0x1cb892b, ftLastWriteTime.dwLowDateTime=0x8abd41df, ftLastWriteTime.dwHighDateTime=0x1cb892b, nFileSizeHigh=0x0, nFileSizeLow=0x18000, dwReserved0=0x0, dwReserved1=0x0, cFileName="msado28.tlb", cAlternateFileName="")) returned 1 [0059.055] FindNextFileW (in: hFindFile=0x381ec0, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9dae14ed, ftCreationTime.dwHighDateTime=0x1cb892b, ftLastAccessTime.dwLowDateTime=0x9dae14ed, ftLastAccessTime.dwHighDateTime=0x1cb892b, ftLastWriteTime.dwLowDateTime=0x9dae14ed, ftLastWriteTime.dwHighDateTime=0x1cb892b, nFileSizeHigh=0x0, nFileSizeLow=0x56000, dwReserved0=0x0, dwReserved1=0x0, cFileName="msadomd.dll", cAlternateFileName="")) returned 1 [0059.055] FindNextFileW (in: hFindFile=0x381ec0, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb6fc88a7, ftCreationTime.dwHighDateTime=0x1ca0417, ftLastAccessTime.dwLowDateTime=0xb6fc88a7, ftLastAccessTime.dwHighDateTime=0x1ca0417, ftLastWriteTime.dwLowDateTime=0xb6f0a1cc, ftLastWriteTime.dwHighDateTime=0x1ca0417, nFileSizeHigh=0x0, nFileSizeLow=0x5000, dwReserved0=0x0, dwReserved1=0x0, cFileName="msadomd28.tlb", cAlternateFileName="")) returned 1 [0059.056] FindNextFileW (in: hFindFile=0x381ec0, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x92f0bf91, ftCreationTime.dwHighDateTime=0x1cb892b, ftLastAccessTime.dwLowDateTime=0x92f0bf91, ftLastAccessTime.dwHighDateTime=0x1cb892b, ftLastWriteTime.dwLowDateTime=0x92f0bf91, ftLastWriteTime.dwHighDateTime=0x1cb892b, nFileSizeHigh=0x0, nFileSizeLow=0xe000, dwReserved0=0x0, dwReserved1=0x0, cFileName="msador15.dll", cAlternateFileName="")) returned 1 [0059.056] FindNextFileW (in: hFindFile=0x381ec0, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9e9c1e89, ftCreationTime.dwHighDateTime=0x1cb892b, ftLastAccessTime.dwLowDateTime=0x9e9c1e89, ftLastAccessTime.dwHighDateTime=0x1cb892b, ftLastWriteTime.dwLowDateTime=0x9e9e7fe9, ftLastWriteTime.dwHighDateTime=0x1cb892b, nFileSizeHigh=0x0, nFileSizeLow=0x5b000, dwReserved0=0x0, dwReserved1=0x0, cFileName="msadox.dll", cAlternateFileName="")) returned 1 [0059.056] FindNextFileW (in: hFindFile=0x381ec0, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb6e25992, ftCreationTime.dwHighDateTime=0x1ca0417, ftLastAccessTime.dwLowDateTime=0xb6e25992, ftLastAccessTime.dwHighDateTime=0x1ca0417, ftLastWriteTime.dwLowDateTime=0xb6db3575, ftLastWriteTime.dwHighDateTime=0x1ca0417, nFileSizeHigh=0x0, nFileSizeLow=0x7000, dwReserved0=0x0, dwReserved1=0x0, cFileName="msadox28.tlb", cAlternateFileName="")) returned 1 [0059.056] FindNextFileW (in: hFindFile=0x381ec0, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb775ee94, ftCreationTime.dwHighDateTime=0x1ca0417, ftLastAccessTime.dwLowDateTime=0xb775ee94, ftLastAccessTime.dwHighDateTime=0x1ca0417, ftLastWriteTime.dwLowDateTime=0x9b894690, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x14000, dwReserved0=0x0, dwReserved1=0x0, cFileName="msadrh15.dll", cAlternateFileName="")) returned 1 [0059.056] FindNextFileW (in: hFindFile=0x381ec0, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x831d597f, ftCreationTime.dwHighDateTime=0x1cb892b, ftLastAccessTime.dwLowDateTime=0x831d597f, ftLastAccessTime.dwHighDateTime=0x1cb892b, ftLastWriteTime.dwLowDateTime=0x831d597f, ftLastWriteTime.dwHighDateTime=0x1cb892b, nFileSizeHigh=0x0, nFileSizeLow=0x23000, dwReserved0=0x0, dwReserved1=0x0, cFileName="msjro.dll", cAlternateFileName="")) returned 1 [0059.056] FindNextFileW (in: hFindFile=0x381ec0, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0059.056] FindClose (in: hFindFile=0x381ec0 | out: hFindFile=0x381ec0) returned 1 [0059.057] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e77c) returned 1 [0059.057] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e788) returned 1 [0059.057] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e7bc) returned 1 [0059.057] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Common Files\\System\\ado", nBufferLength=0x105, lpBuffer=0x31e2c4, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Common Files\\System\\ado", lpFilePart=0x0) returned 0x2e [0059.057] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Common Files\\System\\ado\\", nBufferLength=0x105, lpBuffer=0x31e298, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Common Files\\System\\ado\\", lpFilePart=0x0) returned 0x2f [0059.057] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Common Files\\System\\ado\\*", lpFindFileData=0x31e4e4 | out: lpFindFileData=0x31e4e4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd8f7490, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x1ea40f84, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x1ea40f84, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x381ec0 [0059.058] FindNextFileW (in: hFindFile=0x381ec0, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd8f7490, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x1ea40f84, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x1ea40f84, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0059.058] FindNextFileW (in: hFindFile=0x381ec0, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x252bcdd, ftCreationTime.dwHighDateTime=0x1ca040b, ftLastAccessTime.dwLowDateTime=0x252bcdd, ftLastAccessTime.dwHighDateTime=0x1ca040b, ftLastWriteTime.dwLowDateTime=0xab6cf35d, ftLastWriteTime.dwHighDateTime=0x1ca03fd, nFileSizeHigh=0x0, nFileSizeLow=0x3912, dwReserved0=0x0, dwReserved1=0x0, cFileName="adojavas.inc", cAlternateFileName="")) returned 1 [0059.058] FindNextFileW (in: hFindFile=0x381ec0, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2505b7e, ftCreationTime.dwHighDateTime=0x1ca040b, ftLastAccessTime.dwLowDateTime=0x2505b7e, ftLastAccessTime.dwHighDateTime=0x1ca040b, ftLastWriteTime.dwLowDateTime=0xab5eab23, ftLastWriteTime.dwHighDateTime=0x1ca03fd, nFileSizeHigh=0x0, nFileSizeLow=0x3a67, dwReserved0=0x0, dwReserved1=0x0, cFileName="adovbs.inc", cAlternateFileName="")) returned 1 [0059.058] FindNextFileW (in: hFindFile=0x381ec0, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1ea40f84, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x228ba44f, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x1ea40f84, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="en-US", cAlternateFileName="")) returned 1 [0059.059] FindNextFileW (in: hFindFile=0x381ec0, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb7465328, ftCreationTime.dwHighDateTime=0x1ca0417, ftLastAccessTime.dwLowDateTime=0xb7465328, ftLastAccessTime.dwHighDateTime=0x1ca0417, ftLastWriteTime.dwLowDateTime=0x5fb141f0, ftLastWriteTime.dwHighDateTime=0x1ca041f, nFileSizeHigh=0x0, nFileSizeLow=0x2000, dwReserved0=0x0, dwReserved1=0x0, cFileName="msader15.dll", cAlternateFileName="")) returned 1 [0059.059] FindNextFileW (in: hFindFile=0x381ec0, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x99b80ab9, ftCreationTime.dwHighDateTime=0x1cb892b, ftLastAccessTime.dwLowDateTime=0x99b80ab9, ftLastAccessTime.dwHighDateTime=0x1cb892b, ftLastWriteTime.dwLowDateTime=0x99bccd79, ftLastWriteTime.dwHighDateTime=0x1cb892b, nFileSizeHigh=0x0, nFileSizeLow=0xf9000, dwReserved0=0x0, dwReserved1=0x0, cFileName="msado15.dll", cAlternateFileName="")) returned 1 [0059.059] FindNextFileW (in: hFindFile=0x381ec0, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8ab15afe, ftCreationTime.dwHighDateTime=0x1cb892b, ftLastAccessTime.dwLowDateTime=0x8ab15afe, ftLastAccessTime.dwHighDateTime=0x1cb892b, ftLastWriteTime.dwLowDateTime=0x8ab15afe, ftLastWriteTime.dwHighDateTime=0x1cb892b, nFileSizeHigh=0x0, nFileSizeLow=0x11000, dwReserved0=0x0, dwReserved1=0x0, cFileName="msado20.tlb", cAlternateFileName="")) returned 1 [0059.059] FindNextFileW (in: hFindFile=0x381ec0, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8ab15afe, ftCreationTime.dwHighDateTime=0x1cb892b, ftLastAccessTime.dwLowDateTime=0x8ab15afe, ftLastAccessTime.dwHighDateTime=0x1cb892b, ftLastWriteTime.dwLowDateTime=0x8ab15afe, ftLastWriteTime.dwHighDateTime=0x1cb892b, nFileSizeHigh=0x0, nFileSizeLow=0x12000, dwReserved0=0x0, dwReserved1=0x0, cFileName="msado21.tlb", cAlternateFileName="")) returned 1 [0059.059] FindNextFileW (in: hFindFile=0x381ec0, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8ab3bc5e, ftCreationTime.dwHighDateTime=0x1cb892b, ftLastAccessTime.dwLowDateTime=0x8ab3bc5e, ftLastAccessTime.dwHighDateTime=0x1cb892b, ftLastWriteTime.dwLowDateTime=0x8ab3bc5e, ftLastWriteTime.dwHighDateTime=0x1cb892b, nFileSizeHigh=0x0, nFileSizeLow=0x17000, dwReserved0=0x0, dwReserved1=0x0, cFileName="msado25.tlb", cAlternateFileName="")) returned 1 [0059.059] FindNextFileW (in: hFindFile=0x381ec0, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8ab3bc5e, ftCreationTime.dwHighDateTime=0x1cb892b, ftLastAccessTime.dwLowDateTime=0x8ab3bc5e, ftLastAccessTime.dwHighDateTime=0x1cb892b, ftLastWriteTime.dwLowDateTime=0x8ab3bc5e, ftLastWriteTime.dwHighDateTime=0x1cb892b, nFileSizeHigh=0x0, nFileSizeLow=0x18000, dwReserved0=0x0, dwReserved1=0x0, cFileName="msado26.tlb", cAlternateFileName="")) returned 1 [0059.059] FindNextFileW (in: hFindFile=0x381ec0, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8ab87f1f, ftCreationTime.dwHighDateTime=0x1cb892b, ftLastAccessTime.dwLowDateTime=0x8ab87f1f, ftLastAccessTime.dwHighDateTime=0x1cb892b, ftLastWriteTime.dwLowDateTime=0x8ab87f1f, ftLastWriteTime.dwHighDateTime=0x1cb892b, nFileSizeHigh=0x0, nFileSizeLow=0x18000, dwReserved0=0x0, dwReserved1=0x0, cFileName="msado27.tlb", cAlternateFileName="")) returned 1 [0059.060] FindNextFileW (in: hFindFile=0x381ec0, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8abd41df, ftCreationTime.dwHighDateTime=0x1cb892b, ftLastAccessTime.dwLowDateTime=0x8abd41df, ftLastAccessTime.dwHighDateTime=0x1cb892b, ftLastWriteTime.dwLowDateTime=0x8abd41df, ftLastWriteTime.dwHighDateTime=0x1cb892b, nFileSizeHigh=0x0, nFileSizeLow=0x18000, dwReserved0=0x0, dwReserved1=0x0, cFileName="msado28.tlb", cAlternateFileName="")) returned 1 [0059.060] FindNextFileW (in: hFindFile=0x381ec0, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9dae14ed, ftCreationTime.dwHighDateTime=0x1cb892b, ftLastAccessTime.dwLowDateTime=0x9dae14ed, ftLastAccessTime.dwHighDateTime=0x1cb892b, ftLastWriteTime.dwLowDateTime=0x9dae14ed, ftLastWriteTime.dwHighDateTime=0x1cb892b, nFileSizeHigh=0x0, nFileSizeLow=0x56000, dwReserved0=0x0, dwReserved1=0x0, cFileName="msadomd.dll", cAlternateFileName="")) returned 1 [0059.060] FindNextFileW (in: hFindFile=0x381ec0, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb6fc88a7, ftCreationTime.dwHighDateTime=0x1ca0417, ftLastAccessTime.dwLowDateTime=0xb6fc88a7, ftLastAccessTime.dwHighDateTime=0x1ca0417, ftLastWriteTime.dwLowDateTime=0xb6f0a1cc, ftLastWriteTime.dwHighDateTime=0x1ca0417, nFileSizeHigh=0x0, nFileSizeLow=0x5000, dwReserved0=0x0, dwReserved1=0x0, cFileName="msadomd28.tlb", cAlternateFileName="")) returned 1 [0059.060] FindNextFileW (in: hFindFile=0x381ec0, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x92f0bf91, ftCreationTime.dwHighDateTime=0x1cb892b, ftLastAccessTime.dwLowDateTime=0x92f0bf91, ftLastAccessTime.dwHighDateTime=0x1cb892b, ftLastWriteTime.dwLowDateTime=0x92f0bf91, ftLastWriteTime.dwHighDateTime=0x1cb892b, nFileSizeHigh=0x0, nFileSizeLow=0xe000, dwReserved0=0x0, dwReserved1=0x0, cFileName="msador15.dll", cAlternateFileName="")) returned 1 [0059.060] FindNextFileW (in: hFindFile=0x381ec0, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9e9c1e89, ftCreationTime.dwHighDateTime=0x1cb892b, ftLastAccessTime.dwLowDateTime=0x9e9c1e89, ftLastAccessTime.dwHighDateTime=0x1cb892b, ftLastWriteTime.dwLowDateTime=0x9e9e7fe9, ftLastWriteTime.dwHighDateTime=0x1cb892b, nFileSizeHigh=0x0, nFileSizeLow=0x5b000, dwReserved0=0x0, dwReserved1=0x0, cFileName="msadox.dll", cAlternateFileName="")) returned 1 [0059.060] FindNextFileW (in: hFindFile=0x381ec0, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb6e25992, ftCreationTime.dwHighDateTime=0x1ca0417, ftLastAccessTime.dwLowDateTime=0xb6e25992, ftLastAccessTime.dwHighDateTime=0x1ca0417, ftLastWriteTime.dwLowDateTime=0xb6db3575, ftLastWriteTime.dwHighDateTime=0x1ca0417, nFileSizeHigh=0x0, nFileSizeLow=0x7000, dwReserved0=0x0, dwReserved1=0x0, cFileName="msadox28.tlb", cAlternateFileName="")) returned 1 [0059.060] FindNextFileW (in: hFindFile=0x381ec0, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb775ee94, ftCreationTime.dwHighDateTime=0x1ca0417, ftLastAccessTime.dwLowDateTime=0xb775ee94, ftLastAccessTime.dwHighDateTime=0x1ca0417, ftLastWriteTime.dwLowDateTime=0x9b894690, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x14000, dwReserved0=0x0, dwReserved1=0x0, cFileName="msadrh15.dll", cAlternateFileName="")) returned 1 [0059.061] FindNextFileW (in: hFindFile=0x381ec0, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x831d597f, ftCreationTime.dwHighDateTime=0x1cb892b, ftLastAccessTime.dwLowDateTime=0x831d597f, ftLastAccessTime.dwHighDateTime=0x1cb892b, ftLastWriteTime.dwLowDateTime=0x831d597f, ftLastWriteTime.dwHighDateTime=0x1cb892b, nFileSizeHigh=0x0, nFileSizeLow=0x23000, dwReserved0=0x0, dwReserved1=0x0, cFileName="msjro.dll", cAlternateFileName="")) returned 1 [0059.061] FindNextFileW (in: hFindFile=0x381ec0, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x831d597f, ftCreationTime.dwHighDateTime=0x1cb892b, ftLastAccessTime.dwLowDateTime=0x831d597f, ftLastAccessTime.dwHighDateTime=0x1cb892b, ftLastWriteTime.dwLowDateTime=0x831d597f, ftLastWriteTime.dwHighDateTime=0x1cb892b, nFileSizeHigh=0x0, nFileSizeLow=0x23000, dwReserved0=0x0, dwReserved1=0x0, cFileName="msjro.dll", cAlternateFileName="")) returned 0 [0059.061] FindClose (in: hFindFile=0x381ec0 | out: hFindFile=0x381ec0) returned 1 [0059.061] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e77c) returned 1 [0059.061] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e788) returned 1 [0059.062] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e744) returned 1 [0059.062] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Common Files\\System\\ado\\en-US", nBufferLength=0x105, lpBuffer=0x31e24c, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Common Files\\System\\ado\\en-US", lpFilePart=0x0) returned 0x34 [0059.062] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Common Files\\System\\ado\\en-US\\", nBufferLength=0x105, lpBuffer=0x31e220, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Common Files\\System\\ado\\en-US\\", lpFilePart=0x0) returned 0x35 [0059.062] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Common Files\\System\\ado\\en-US\\*", lpFindFileData=0x31e46c | out: lpFindFileData=0x31e46c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1ea40f84, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x228ba44f, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x1ea40f84, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x381ec0 [0059.063] FindNextFileW (in: hFindFile=0x381ec0, lpFindFileData=0x31e47c | out: lpFindFileData=0x31e47c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1ea40f84, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x228ba44f, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x1ea40f84, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0059.064] FindNextFileW (in: hFindFile=0x381ec0, lpFindFileData=0x31e47c | out: lpFindFileData=0x31e47c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc3080a8, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0xc60371c, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0xc3080a8, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x4400, dwReserved0=0x0, dwReserved1=0x0, cFileName="msader15.dll.mui", cAlternateFileName="")) returned 1 [0059.064] FindNextFileW (in: hFindFile=0x381ec0, lpFindFileData=0x31e47c | out: lpFindFileData=0x31e47c*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0059.064] FindClose (in: hFindFile=0x381ec0 | out: hFindFile=0x381ec0) returned 1 [0059.064] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e704) returned 1 [0059.064] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e710) returned 1 [0059.064] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e744) returned 1 [0059.064] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Common Files\\System\\ado\\en-US", nBufferLength=0x105, lpBuffer=0x31e24c, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Common Files\\System\\ado\\en-US", lpFilePart=0x0) returned 0x34 [0059.064] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Common Files\\System\\ado\\en-US\\", nBufferLength=0x105, lpBuffer=0x31e220, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Common Files\\System\\ado\\en-US\\", lpFilePart=0x0) returned 0x35 [0059.064] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Common Files\\System\\ado\\en-US\\*", lpFindFileData=0x31e46c | out: lpFindFileData=0x31e46c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1ea40f84, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x228ba44f, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x1ea40f84, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x381ec0 [0059.064] FindNextFileW (in: hFindFile=0x381ec0, lpFindFileData=0x31e47c | out: lpFindFileData=0x31e47c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1ea40f84, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x228ba44f, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x1ea40f84, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0059.064] FindNextFileW (in: hFindFile=0x381ec0, lpFindFileData=0x31e47c | out: lpFindFileData=0x31e47c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc3080a8, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0xc60371c, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0xc3080a8, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x4400, dwReserved0=0x0, dwReserved1=0x0, cFileName="msader15.dll.mui", cAlternateFileName="")) returned 1 [0059.064] FindNextFileW (in: hFindFile=0x381ec0, lpFindFileData=0x31e47c | out: lpFindFileData=0x31e47c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc3080a8, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0xc60371c, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0xc3080a8, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x4400, dwReserved0=0x0, dwReserved1=0x0, cFileName="msader15.dll.mui", cAlternateFileName="")) returned 0 [0059.065] FindClose (in: hFindFile=0x381ec0 | out: hFindFile=0x381ec0) returned 1 [0059.065] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e704) returned 1 [0059.065] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e710) returned 1 [0059.065] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e7bc) returned 1 [0059.065] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Common Files\\System\\en-US", nBufferLength=0x105, lpBuffer=0x31e2c4, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Common Files\\System\\en-US", lpFilePart=0x0) returned 0x30 [0059.065] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Common Files\\System\\en-US\\", nBufferLength=0x105, lpBuffer=0x31e298, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Common Files\\System\\en-US\\", lpFilePart=0x0) returned 0x31 [0059.065] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Common Files\\System\\en-US\\*", lpFindFileData=0x31e4e4 | out: lpFindFileData=0x31e4e4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1ea40f84, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x22a11cd0, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x1ea40f84, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x381ec0 [0059.065] FindNextFileW (in: hFindFile=0x381ec0, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1ea40f84, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x22a11cd0, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x1ea40f84, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0059.065] FindNextFileW (in: hFindFile=0x381ec0, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc9e3de6, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0xccb91a1, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0xc9e3de6, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x16e00, dwReserved0=0x0, dwReserved1=0x0, cFileName="wab32res.dll.mui", cAlternateFileName="")) returned 1 [0059.065] FindNextFileW (in: hFindFile=0x381ec0, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0059.065] FindClose (in: hFindFile=0x381ec0 | out: hFindFile=0x381ec0) returned 1 [0059.065] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e77c) returned 1 [0059.066] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e788) returned 1 [0059.066] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e7bc) returned 1 [0059.066] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Common Files\\System\\en-US", nBufferLength=0x105, lpBuffer=0x31e2c4, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Common Files\\System\\en-US", lpFilePart=0x0) returned 0x30 [0059.066] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Common Files\\System\\en-US\\", nBufferLength=0x105, lpBuffer=0x31e298, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Common Files\\System\\en-US\\", lpFilePart=0x0) returned 0x31 [0059.066] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Common Files\\System\\en-US\\*", lpFindFileData=0x31e4e4 | out: lpFindFileData=0x31e4e4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1ea40f84, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x22a11cd0, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x1ea40f84, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x381ec0 [0059.066] FindNextFileW (in: hFindFile=0x381ec0, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1ea40f84, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x22a11cd0, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x1ea40f84, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0059.066] FindNextFileW (in: hFindFile=0x381ec0, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc9e3de6, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0xccb91a1, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0xc9e3de6, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x16e00, dwReserved0=0x0, dwReserved1=0x0, cFileName="wab32res.dll.mui", cAlternateFileName="")) returned 1 [0059.066] FindNextFileW (in: hFindFile=0x381ec0, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc9e3de6, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0xccb91a1, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0xc9e3de6, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x16e00, dwReserved0=0x0, dwReserved1=0x0, cFileName="wab32res.dll.mui", cAlternateFileName="")) returned 0 [0059.066] FindClose (in: hFindFile=0x381ec0 | out: hFindFile=0x381ec0) returned 1 [0059.066] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e77c) returned 1 [0059.066] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e788) returned 1 [0059.066] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e7bc) returned 1 [0059.066] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Common Files\\System\\msadc", nBufferLength=0x105, lpBuffer=0x31e2c4, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Common Files\\System\\msadc", lpFilePart=0x0) returned 0x30 [0059.066] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Common Files\\System\\msadc\\", nBufferLength=0x105, lpBuffer=0x31e298, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Common Files\\System\\msadc\\", lpFilePart=0x0) returned 0x31 [0059.067] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Common Files\\System\\msadc\\*", lpFindFileData=0x31e4e4 | out: lpFindFileData=0x31e4e4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd8f7490, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x1ea40f84, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x1ea40f84, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x381ec0 [0059.068] FindNextFileW (in: hFindFile=0x381ec0, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd8f7490, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x1ea40f84, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x1ea40f84, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0059.068] FindNextFileW (in: hFindFile=0x381ec0, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1d6f591, ftCreationTime.dwHighDateTime=0x1ca040b, ftLastAccessTime.dwLowDateTime=0x1d6f591, ftLastAccessTime.dwHighDateTime=0x1ca040b, ftLastWriteTime.dwLowDateTime=0xab5525a7, ftLastWriteTime.dwHighDateTime=0x1ca03fd, nFileSizeHigh=0x0, nFileSizeLow=0x276, dwReserved0=0x0, dwReserved1=0x0, cFileName="adcjavas.inc", cAlternateFileName="")) returned 1 [0059.068] FindNextFileW (in: hFindFile=0x381ec0, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1d956f0, ftCreationTime.dwHighDateTime=0x1ca040b, ftLastAccessTime.dwLowDateTime=0x1d956f0, ftLastAccessTime.dwHighDateTime=0x1ca040b, ftLastWriteTime.dwLowDateTime=0xab636de1, ftLastWriteTime.dwHighDateTime=0x1ca03fd, nFileSizeHigh=0x0, nFileSizeLow=0x26f, dwReserved0=0x0, dwReserved1=0x0, cFileName="adcvbs.inc", cAlternateFileName="")) returned 1 [0059.068] FindNextFileW (in: hFindFile=0x381ec0, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1ea40f84, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x228ba44f, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x1ea40f84, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="en-US", cAlternateFileName="")) returned 1 [0059.068] FindNextFileW (in: hFindFile=0x381ec0, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x22c9a97c, ftCreationTime.dwHighDateTime=0x1c9ea11, ftLastAccessTime.dwLowDateTime=0x22c9a97c, ftLastAccessTime.dwHighDateTime=0x1c9ea11, ftLastWriteTime.dwLowDateTime=0x22c9a97c, ftLastWriteTime.dwHighDateTime=0x1c9ea11, nFileSizeHigh=0x0, nFileSizeLow=0x206, dwReserved0=0x0, dwReserved1=0x0, cFileName="handler.reg", cAlternateFileName="")) returned 1 [0059.068] FindNextFileW (in: hFindFile=0x381ec0, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6f8dd6e4, ftCreationTime.dwHighDateTime=0x1ca03fd, ftLastAccessTime.dwLowDateTime=0x6f8dd6e4, ftLastAccessTime.dwHighDateTime=0x1ca03fd, ftLastWriteTime.dwLowDateTime=0x22f4823c, ftLastWriteTime.dwHighDateTime=0x1c9ea11, nFileSizeHigh=0x0, nFileSizeLow=0x24c, dwReserved0=0x0, dwReserved1=0x0, cFileName="handsafe.reg", cAlternateFileName="")) returned 1 [0059.069] FindNextFileW (in: hFindFile=0x381ec0, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x930aeeb4, ftCreationTime.dwHighDateTime=0x1cb892b, ftLastAccessTime.dwLowDateTime=0x930aeeb4, ftLastAccessTime.dwHighDateTime=0x1cb892b, ftLastWriteTime.dwLowDateTime=0x930d5014, ftLastWriteTime.dwHighDateTime=0x1cb892b, nFileSizeHigh=0x0, nFileSizeLow=0x89000, dwReserved0=0x0, dwReserved1=0x0, cFileName="msadce.dll", cAlternateFileName="")) returned 1 [0059.069] FindNextFileW (in: hFindFile=0x381ec0, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb0b5cb2a, ftCreationTime.dwHighDateTime=0x1ca0417, ftLastAccessTime.dwLowDateTime=0xb0b5cb2a, ftLastAccessTime.dwHighDateTime=0x1ca0417, ftLastWriteTime.dwLowDateTime=0x5f8ffe50, ftLastWriteTime.dwHighDateTime=0x1ca041f, nFileSizeHigh=0x0, nFileSizeLow=0x2000, dwReserved0=0x0, dwReserved1=0x0, cFileName="msadcer.dll", cAlternateFileName="")) returned 1 [0059.069] FindNextFileW (in: hFindFile=0x381ec0, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x92b9ffeb, ftCreationTime.dwHighDateTime=0x1cb892b, ftLastAccessTime.dwLowDateTime=0x92b9ffeb, ftLastAccessTime.dwHighDateTime=0x1cb892b, ftLastWriteTime.dwLowDateTime=0x92b9ffeb, ftLastWriteTime.dwHighDateTime=0x1cb892b, nFileSizeHigh=0x0, nFileSizeLow=0x17000, dwReserved0=0x0, dwReserved1=0x0, cFileName="msadcf.dll", cAlternateFileName="")) returned 1 [0059.069] FindNextFileW (in: hFindFile=0x381ec0, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb0c41364, ftCreationTime.dwHighDateTime=0x1ca0417, ftLastAccessTime.dwLowDateTime=0xb0c41364, ftLastAccessTime.dwHighDateTime=0x1ca0417, ftLastWriteTime.dwLowDateTime=0x5f926f50, ftLastWriteTime.dwHighDateTime=0x1ca041f, nFileSizeHigh=0x0, nFileSizeLow=0x2000, dwReserved0=0x0, dwReserved1=0x0, cFileName="msadcfr.dll", cAlternateFileName="")) returned 1 [0059.069] FindNextFileW (in: hFindFile=0x381ec0, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x92b79e8a, ftCreationTime.dwHighDateTime=0x1cb892b, ftLastAccessTime.dwLowDateTime=0x92b79e8a, ftLastAccessTime.dwHighDateTime=0x1cb892b, ftLastWriteTime.dwLowDateTime=0x92b9ffeb, ftLastWriteTime.dwHighDateTime=0x1cb892b, nFileSizeHigh=0x0, nFileSizeLow=0x34000, dwReserved0=0x0, dwReserved1=0x0, cFileName="msadco.dll", cAlternateFileName="")) returned 1 [0059.069] FindNextFileW (in: hFindFile=0x381ec0, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb0e0a3d8, ftCreationTime.dwHighDateTime=0x1ca0417, ftLastAccessTime.dwLowDateTime=0xb0e0a3d8, ftLastAccessTime.dwHighDateTime=0x1ca0417, ftLastWriteTime.dwLowDateTime=0x5fa0a020, ftLastWriteTime.dwHighDateTime=0x1ca041f, nFileSizeHigh=0x0, nFileSizeLow=0x2000, dwReserved0=0x0, dwReserved1=0x0, cFileName="msadcor.dll", cAlternateFileName="")) returned 1 [0059.069] FindNextFileW (in: hFindFile=0x381ec0, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8ad9d263, ftCreationTime.dwHighDateTime=0x1cb892b, ftLastAccessTime.dwLowDateTime=0x8ad9d263, ftLastAccessTime.dwHighDateTime=0x1cb892b, ftLastWriteTime.dwLowDateTime=0x8ad9d263, ftLastWriteTime.dwHighDateTime=0x1cb892b, nFileSizeHigh=0x0, nFileSizeLow=0x14000, dwReserved0=0x0, dwReserved1=0x0, cFileName="msadcs.dll", cAlternateFileName="")) returned 1 [0059.069] FindNextFileW (in: hFindFile=0x381ec0, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb8098396, ftCreationTime.dwHighDateTime=0x1ca0417, ftLastAccessTime.dwLowDateTime=0xb8098396, ftLastAccessTime.dwHighDateTime=0x1ca0417, ftLastWriteTime.dwLowDateTime=0x9b60d700, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x3b000, dwReserved0=0x0, dwReserved1=0x0, cFileName="msadds.dll", cAlternateFileName="")) returned 1 [0059.069] FindNextFileW (in: hFindFile=0x381ec0, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb0fd344c, ftCreationTime.dwHighDateTime=0x1ca0417, ftLastAccessTime.dwLowDateTime=0xb0fd344c, ftLastAccessTime.dwHighDateTime=0x1ca0417, ftLastWriteTime.dwLowDateTime=0x5fb141f0, ftLastWriteTime.dwHighDateTime=0x1ca041f, nFileSizeHigh=0x0, nFileSizeLow=0x2000, dwReserved0=0x0, dwReserved1=0x0, cFileName="msaddsr.dll", cAlternateFileName="")) returned 1 [0059.069] FindNextFileW (in: hFindFile=0x381ec0, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb1091b27, ftCreationTime.dwHighDateTime=0x1ca0417, ftLastAccessTime.dwLowDateTime=0xb1091b27, ftLastAccessTime.dwHighDateTime=0x1ca0417, ftLastWriteTime.dwLowDateTime=0x60936490, ftLastWriteTime.dwHighDateTime=0x1ca041f, nFileSizeHigh=0x0, nFileSizeLow=0x2000, dwReserved0=0x0, dwReserved1=0x0, cFileName="msdaprsr.dll", cAlternateFileName="")) returned 1 [0059.069] FindNextFileW (in: hFindFile=0x381ec0, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb9ffc4e3, ftCreationTime.dwHighDateTime=0x1ca0417, ftLastAccessTime.dwLowDateTime=0xb9ffc4e3, ftLastAccessTime.dwHighDateTime=0x1ca0417, ftLastWriteTime.dwLowDateTime=0x9bc4c8f0, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x46000, dwReserved0=0x0, dwReserved1=0x0, cFileName="msdaprst.dll", cAlternateFileName="")) returned 1 [0059.069] FindNextFileW (in: hFindFile=0x381ec0, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9d87fee9, ftCreationTime.dwHighDateTime=0x1cb892b, ftLastAccessTime.dwLowDateTime=0x9d87fee9, ftLastAccessTime.dwHighDateTime=0x1cb892b, ftLastWriteTime.dwLowDateTime=0x9d87fee9, ftLastWriteTime.dwHighDateTime=0x1cb892b, nFileSizeHigh=0x0, nFileSizeLow=0x2f000, dwReserved0=0x0, dwReserved1=0x0, cFileName="msdarem.dll", cAlternateFileName="")) returned 1 [0059.069] FindNextFileW (in: hFindFile=0x381ec0, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb10b7c86, ftCreationTime.dwHighDateTime=0x1ca0417, ftLastAccessTime.dwLowDateTime=0xb10b7c86, ftLastAccessTime.dwHighDateTime=0x1ca0417, ftLastWriteTime.dwLowDateTime=0x60b01450, ftLastWriteTime.dwHighDateTime=0x1ca041f, nFileSizeHigh=0x0, nFileSizeLow=0x2000, dwReserved0=0x0, dwReserved1=0x0, cFileName="msdaremr.dll", cAlternateFileName="")) returned 1 [0059.069] FindNextFileW (in: hFindFile=0x381ec0, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8558a3c0, ftCreationTime.dwHighDateTime=0x1cb892b, ftLastAccessTime.dwLowDateTime=0x8558a3c0, ftLastAccessTime.dwHighDateTime=0x1cb892b, ftLastWriteTime.dwLowDateTime=0x855fc7e1, ftLastWriteTime.dwHighDateTime=0x1cb892b, nFileSizeHigh=0x0, nFileSizeLow=0xb000, dwReserved0=0x0, dwReserved1=0x0, cFileName="msdfmap.dll", cAlternateFileName="")) returned 1 [0059.070] FindNextFileW (in: hFindFile=0x381ec0, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0059.070] FindClose (in: hFindFile=0x381ec0 | out: hFindFile=0x381ec0) returned 1 [0059.070] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e77c) returned 1 [0059.070] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e788) returned 1 [0059.070] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e7bc) returned 1 [0059.070] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Common Files\\System\\msadc", nBufferLength=0x105, lpBuffer=0x31e2c4, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Common Files\\System\\msadc", lpFilePart=0x0) returned 0x30 [0059.070] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Common Files\\System\\msadc\\", nBufferLength=0x105, lpBuffer=0x31e298, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Common Files\\System\\msadc\\", lpFilePart=0x0) returned 0x31 [0059.070] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Common Files\\System\\msadc\\*", lpFindFileData=0x31e4e4 | out: lpFindFileData=0x31e4e4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd8f7490, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x1ea40f84, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x1ea40f84, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x381ec0 [0059.071] FindNextFileW (in: hFindFile=0x381ec0, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd8f7490, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x1ea40f84, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x1ea40f84, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0059.071] FindNextFileW (in: hFindFile=0x381ec0, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1d6f591, ftCreationTime.dwHighDateTime=0x1ca040b, ftLastAccessTime.dwLowDateTime=0x1d6f591, ftLastAccessTime.dwHighDateTime=0x1ca040b, ftLastWriteTime.dwLowDateTime=0xab5525a7, ftLastWriteTime.dwHighDateTime=0x1ca03fd, nFileSizeHigh=0x0, nFileSizeLow=0x276, dwReserved0=0x0, dwReserved1=0x0, cFileName="adcjavas.inc", cAlternateFileName="")) returned 1 [0059.071] FindNextFileW (in: hFindFile=0x381ec0, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1d956f0, ftCreationTime.dwHighDateTime=0x1ca040b, ftLastAccessTime.dwLowDateTime=0x1d956f0, ftLastAccessTime.dwHighDateTime=0x1ca040b, ftLastWriteTime.dwLowDateTime=0xab636de1, ftLastWriteTime.dwHighDateTime=0x1ca03fd, nFileSizeHigh=0x0, nFileSizeLow=0x26f, dwReserved0=0x0, dwReserved1=0x0, cFileName="adcvbs.inc", cAlternateFileName="")) returned 1 [0059.072] FindNextFileW (in: hFindFile=0x381ec0, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1ea40f84, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x228ba44f, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x1ea40f84, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="en-US", cAlternateFileName="")) returned 1 [0059.072] FindNextFileW (in: hFindFile=0x381ec0, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x22c9a97c, ftCreationTime.dwHighDateTime=0x1c9ea11, ftLastAccessTime.dwLowDateTime=0x22c9a97c, ftLastAccessTime.dwHighDateTime=0x1c9ea11, ftLastWriteTime.dwLowDateTime=0x22c9a97c, ftLastWriteTime.dwHighDateTime=0x1c9ea11, nFileSizeHigh=0x0, nFileSizeLow=0x206, dwReserved0=0x0, dwReserved1=0x0, cFileName="handler.reg", cAlternateFileName="")) returned 1 [0059.072] FindNextFileW (in: hFindFile=0x381ec0, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6f8dd6e4, ftCreationTime.dwHighDateTime=0x1ca03fd, ftLastAccessTime.dwLowDateTime=0x6f8dd6e4, ftLastAccessTime.dwHighDateTime=0x1ca03fd, ftLastWriteTime.dwLowDateTime=0x22f4823c, ftLastWriteTime.dwHighDateTime=0x1c9ea11, nFileSizeHigh=0x0, nFileSizeLow=0x24c, dwReserved0=0x0, dwReserved1=0x0, cFileName="handsafe.reg", cAlternateFileName="")) returned 1 [0059.072] FindNextFileW (in: hFindFile=0x381ec0, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x930aeeb4, ftCreationTime.dwHighDateTime=0x1cb892b, ftLastAccessTime.dwLowDateTime=0x930aeeb4, ftLastAccessTime.dwHighDateTime=0x1cb892b, ftLastWriteTime.dwLowDateTime=0x930d5014, ftLastWriteTime.dwHighDateTime=0x1cb892b, nFileSizeHigh=0x0, nFileSizeLow=0x89000, dwReserved0=0x0, dwReserved1=0x0, cFileName="msadce.dll", cAlternateFileName="")) returned 1 [0059.072] FindNextFileW (in: hFindFile=0x381ec0, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb0b5cb2a, ftCreationTime.dwHighDateTime=0x1ca0417, ftLastAccessTime.dwLowDateTime=0xb0b5cb2a, ftLastAccessTime.dwHighDateTime=0x1ca0417, ftLastWriteTime.dwLowDateTime=0x5f8ffe50, ftLastWriteTime.dwHighDateTime=0x1ca041f, nFileSizeHigh=0x0, nFileSizeLow=0x2000, dwReserved0=0x0, dwReserved1=0x0, cFileName="msadcer.dll", cAlternateFileName="")) returned 1 [0059.072] FindNextFileW (in: hFindFile=0x381ec0, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x92b9ffeb, ftCreationTime.dwHighDateTime=0x1cb892b, ftLastAccessTime.dwLowDateTime=0x92b9ffeb, ftLastAccessTime.dwHighDateTime=0x1cb892b, ftLastWriteTime.dwLowDateTime=0x92b9ffeb, ftLastWriteTime.dwHighDateTime=0x1cb892b, nFileSizeHigh=0x0, nFileSizeLow=0x17000, dwReserved0=0x0, dwReserved1=0x0, cFileName="msadcf.dll", cAlternateFileName="")) returned 1 [0059.072] FindNextFileW (in: hFindFile=0x381ec0, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb0c41364, ftCreationTime.dwHighDateTime=0x1ca0417, ftLastAccessTime.dwLowDateTime=0xb0c41364, ftLastAccessTime.dwHighDateTime=0x1ca0417, ftLastWriteTime.dwLowDateTime=0x5f926f50, ftLastWriteTime.dwHighDateTime=0x1ca041f, nFileSizeHigh=0x0, nFileSizeLow=0x2000, dwReserved0=0x0, dwReserved1=0x0, cFileName="msadcfr.dll", cAlternateFileName="")) returned 1 [0059.072] FindNextFileW (in: hFindFile=0x381ec0, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x92b79e8a, ftCreationTime.dwHighDateTime=0x1cb892b, ftLastAccessTime.dwLowDateTime=0x92b79e8a, ftLastAccessTime.dwHighDateTime=0x1cb892b, ftLastWriteTime.dwLowDateTime=0x92b9ffeb, ftLastWriteTime.dwHighDateTime=0x1cb892b, nFileSizeHigh=0x0, nFileSizeLow=0x34000, dwReserved0=0x0, dwReserved1=0x0, cFileName="msadco.dll", cAlternateFileName="")) returned 1 [0059.072] FindNextFileW (in: hFindFile=0x381ec0, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb0e0a3d8, ftCreationTime.dwHighDateTime=0x1ca0417, ftLastAccessTime.dwLowDateTime=0xb0e0a3d8, ftLastAccessTime.dwHighDateTime=0x1ca0417, ftLastWriteTime.dwLowDateTime=0x5fa0a020, ftLastWriteTime.dwHighDateTime=0x1ca041f, nFileSizeHigh=0x0, nFileSizeLow=0x2000, dwReserved0=0x0, dwReserved1=0x0, cFileName="msadcor.dll", cAlternateFileName="")) returned 1 [0059.072] FindNextFileW (in: hFindFile=0x381ec0, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8ad9d263, ftCreationTime.dwHighDateTime=0x1cb892b, ftLastAccessTime.dwLowDateTime=0x8ad9d263, ftLastAccessTime.dwHighDateTime=0x1cb892b, ftLastWriteTime.dwLowDateTime=0x8ad9d263, ftLastWriteTime.dwHighDateTime=0x1cb892b, nFileSizeHigh=0x0, nFileSizeLow=0x14000, dwReserved0=0x0, dwReserved1=0x0, cFileName="msadcs.dll", cAlternateFileName="")) returned 1 [0059.072] FindNextFileW (in: hFindFile=0x381ec0, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb8098396, ftCreationTime.dwHighDateTime=0x1ca0417, ftLastAccessTime.dwLowDateTime=0xb8098396, ftLastAccessTime.dwHighDateTime=0x1ca0417, ftLastWriteTime.dwLowDateTime=0x9b60d700, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x3b000, dwReserved0=0x0, dwReserved1=0x0, cFileName="msadds.dll", cAlternateFileName="")) returned 1 [0059.073] FindNextFileW (in: hFindFile=0x381ec0, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb0fd344c, ftCreationTime.dwHighDateTime=0x1ca0417, ftLastAccessTime.dwLowDateTime=0xb0fd344c, ftLastAccessTime.dwHighDateTime=0x1ca0417, ftLastWriteTime.dwLowDateTime=0x5fb141f0, ftLastWriteTime.dwHighDateTime=0x1ca041f, nFileSizeHigh=0x0, nFileSizeLow=0x2000, dwReserved0=0x0, dwReserved1=0x0, cFileName="msaddsr.dll", cAlternateFileName="")) returned 1 [0059.073] FindNextFileW (in: hFindFile=0x381ec0, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb1091b27, ftCreationTime.dwHighDateTime=0x1ca0417, ftLastAccessTime.dwLowDateTime=0xb1091b27, ftLastAccessTime.dwHighDateTime=0x1ca0417, ftLastWriteTime.dwLowDateTime=0x60936490, ftLastWriteTime.dwHighDateTime=0x1ca041f, nFileSizeHigh=0x0, nFileSizeLow=0x2000, dwReserved0=0x0, dwReserved1=0x0, cFileName="msdaprsr.dll", cAlternateFileName="")) returned 1 [0059.073] FindNextFileW (in: hFindFile=0x381ec0, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb9ffc4e3, ftCreationTime.dwHighDateTime=0x1ca0417, ftLastAccessTime.dwLowDateTime=0xb9ffc4e3, ftLastAccessTime.dwHighDateTime=0x1ca0417, ftLastWriteTime.dwLowDateTime=0x9bc4c8f0, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x46000, dwReserved0=0x0, dwReserved1=0x0, cFileName="msdaprst.dll", cAlternateFileName="")) returned 1 [0059.073] FindNextFileW (in: hFindFile=0x381ec0, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9d87fee9, ftCreationTime.dwHighDateTime=0x1cb892b, ftLastAccessTime.dwLowDateTime=0x9d87fee9, ftLastAccessTime.dwHighDateTime=0x1cb892b, ftLastWriteTime.dwLowDateTime=0x9d87fee9, ftLastWriteTime.dwHighDateTime=0x1cb892b, nFileSizeHigh=0x0, nFileSizeLow=0x2f000, dwReserved0=0x0, dwReserved1=0x0, cFileName="msdarem.dll", cAlternateFileName="")) returned 1 [0059.073] FindNextFileW (in: hFindFile=0x381ec0, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb10b7c86, ftCreationTime.dwHighDateTime=0x1ca0417, ftLastAccessTime.dwLowDateTime=0xb10b7c86, ftLastAccessTime.dwHighDateTime=0x1ca0417, ftLastWriteTime.dwLowDateTime=0x60b01450, ftLastWriteTime.dwHighDateTime=0x1ca041f, nFileSizeHigh=0x0, nFileSizeLow=0x2000, dwReserved0=0x0, dwReserved1=0x0, cFileName="msdaremr.dll", cAlternateFileName="")) returned 1 [0059.073] FindNextFileW (in: hFindFile=0x381ec0, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8558a3c0, ftCreationTime.dwHighDateTime=0x1cb892b, ftLastAccessTime.dwLowDateTime=0x8558a3c0, ftLastAccessTime.dwHighDateTime=0x1cb892b, ftLastWriteTime.dwLowDateTime=0x855fc7e1, ftLastWriteTime.dwHighDateTime=0x1cb892b, nFileSizeHigh=0x0, nFileSizeLow=0xb000, dwReserved0=0x0, dwReserved1=0x0, cFileName="msdfmap.dll", cAlternateFileName="")) returned 1 [0059.073] FindNextFileW (in: hFindFile=0x381ec0, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8558a3c0, ftCreationTime.dwHighDateTime=0x1cb892b, ftLastAccessTime.dwLowDateTime=0x8558a3c0, ftLastAccessTime.dwHighDateTime=0x1cb892b, ftLastWriteTime.dwLowDateTime=0x855fc7e1, ftLastWriteTime.dwHighDateTime=0x1cb892b, nFileSizeHigh=0x0, nFileSizeLow=0xb000, dwReserved0=0x0, dwReserved1=0x0, cFileName="msdfmap.dll", cAlternateFileName="")) returned 0 [0059.073] FindClose (in: hFindFile=0x381ec0 | out: hFindFile=0x381ec0) returned 1 [0059.074] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e77c) returned 1 [0059.074] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e788) returned 1 [0059.074] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e744) returned 1 [0059.074] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Common Files\\System\\msadc\\en-US", nBufferLength=0x105, lpBuffer=0x31e24c, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Common Files\\System\\msadc\\en-US", lpFilePart=0x0) returned 0x36 [0059.074] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Common Files\\System\\msadc\\en-US\\", nBufferLength=0x105, lpBuffer=0x31e220, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Common Files\\System\\msadc\\en-US\\", lpFilePart=0x0) returned 0x37 [0059.074] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Common Files\\System\\msadc\\en-US\\*", lpFindFileData=0x31e46c | out: lpFindFileData=0x31e46c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1ea40f84, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x228ba44f, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x1ea40f84, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x381ec0 [0059.076] FindNextFileW (in: hFindFile=0x381ec0, lpFindFileData=0x31e47c | out: lpFindFileData=0x31e47c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1ea40f84, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x228ba44f, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x1ea40f84, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0059.076] FindNextFileW (in: hFindFile=0x381ec0, lpFindFileData=0x31e47c | out: lpFindFileData=0x31e47c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa9af1ce, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0xacd0afb, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0xa9af1ce, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x2600, dwReserved0=0x0, dwReserved1=0x0, cFileName="msadcer.dll.mui", cAlternateFileName="")) returned 1 [0059.077] FindNextFileW (in: hFindFile=0x381ec0, lpFindFileData=0x31e47c | out: lpFindFileData=0x31e47c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9351968, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x95b44f8, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x9351968, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x1400, dwReserved0=0x0, dwReserved1=0x0, cFileName="msadcfr.dll.mui", cAlternateFileName="")) returned 1 [0059.077] FindNextFileW (in: hFindFile=0x381ec0, lpFindFileData=0x31e47c | out: lpFindFileData=0x31e47c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xaa219f9, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0xacd0afb, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0xaa219f9, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x1600, dwReserved0=0x0, dwReserved1=0x0, cFileName="msadcor.dll.mui", cAlternateFileName="")) returned 1 [0059.077] FindNextFileW (in: hFindFile=0x381ec0, lpFindFileData=0x31e47c | out: lpFindFileData=0x31e47c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa2d3490, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0xa5a884b, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0xa2d3490, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x3600, dwReserved0=0x0, dwReserved1=0x0, cFileName="msaddsr.dll.mui", cAlternateFileName="")) returned 1 [0059.077] FindNextFileW (in: hFindFile=0x381ec0, lpFindFileData=0x31e47c | out: lpFindFileData=0x31e47c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc35461a, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0xc60371c, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0xc35461a, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x1c00, dwReserved0=0x0, dwReserved1=0x0, cFileName="msdaprsr.dll.mui", cAlternateFileName="")) returned 1 [0059.077] FindNextFileW (in: hFindFile=0x381ec0, lpFindFileData=0x31e47c | out: lpFindFileData=0x31e47c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa286f1e, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0xa5a884b, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0xa286f1e, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x1600, dwReserved0=0x0, dwReserved1=0x0, cFileName="msdaremr.dll.mui", cAlternateFileName="")) returned 1 [0059.077] FindNextFileW (in: hFindFile=0x381ec0, lpFindFileData=0x31e47c | out: lpFindFileData=0x31e47c*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0059.077] FindClose (in: hFindFile=0x381ec0 | out: hFindFile=0x381ec0) returned 1 [0059.078] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e704) returned 1 [0059.078] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e710) returned 1 [0059.078] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e744) returned 1 [0059.078] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Common Files\\System\\msadc\\en-US", nBufferLength=0x105, lpBuffer=0x31e24c, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Common Files\\System\\msadc\\en-US", lpFilePart=0x0) returned 0x36 [0059.078] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Common Files\\System\\msadc\\en-US\\", nBufferLength=0x105, lpBuffer=0x31e220, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Common Files\\System\\msadc\\en-US\\", lpFilePart=0x0) returned 0x37 [0059.078] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Common Files\\System\\msadc\\en-US\\*", lpFindFileData=0x31e46c | out: lpFindFileData=0x31e46c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1ea40f84, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x228ba44f, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x1ea40f84, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x381ec0 [0059.079] FindNextFileW (in: hFindFile=0x381ec0, lpFindFileData=0x31e47c | out: lpFindFileData=0x31e47c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1ea40f84, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x228ba44f, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x1ea40f84, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0059.079] FindNextFileW (in: hFindFile=0x381ec0, lpFindFileData=0x31e47c | out: lpFindFileData=0x31e47c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa9af1ce, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0xacd0afb, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0xa9af1ce, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x2600, dwReserved0=0x0, dwReserved1=0x0, cFileName="msadcer.dll.mui", cAlternateFileName="")) returned 1 [0059.079] FindNextFileW (in: hFindFile=0x381ec0, lpFindFileData=0x31e47c | out: lpFindFileData=0x31e47c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9351968, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x95b44f8, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x9351968, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x1400, dwReserved0=0x0, dwReserved1=0x0, cFileName="msadcfr.dll.mui", cAlternateFileName="")) returned 1 [0059.079] FindNextFileW (in: hFindFile=0x381ec0, lpFindFileData=0x31e47c | out: lpFindFileData=0x31e47c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xaa219f9, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0xacd0afb, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0xaa219f9, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x1600, dwReserved0=0x0, dwReserved1=0x0, cFileName="msadcor.dll.mui", cAlternateFileName="")) returned 1 [0059.079] FindNextFileW (in: hFindFile=0x381ec0, lpFindFileData=0x31e47c | out: lpFindFileData=0x31e47c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa2d3490, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0xa5a884b, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0xa2d3490, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x3600, dwReserved0=0x0, dwReserved1=0x0, cFileName="msaddsr.dll.mui", cAlternateFileName="")) returned 1 [0059.079] FindNextFileW (in: hFindFile=0x381ec0, lpFindFileData=0x31e47c | out: lpFindFileData=0x31e47c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc35461a, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0xc60371c, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0xc35461a, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x1c00, dwReserved0=0x0, dwReserved1=0x0, cFileName="msdaprsr.dll.mui", cAlternateFileName="")) returned 1 [0059.079] FindNextFileW (in: hFindFile=0x381ec0, lpFindFileData=0x31e47c | out: lpFindFileData=0x31e47c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa286f1e, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0xa5a884b, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0xa286f1e, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x1600, dwReserved0=0x0, dwReserved1=0x0, cFileName="msdaremr.dll.mui", cAlternateFileName="")) returned 1 [0059.079] FindNextFileW (in: hFindFile=0x381ec0, lpFindFileData=0x31e47c | out: lpFindFileData=0x31e47c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa286f1e, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0xa5a884b, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0xa286f1e, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x1600, dwReserved0=0x0, dwReserved1=0x0, cFileName="msdaremr.dll.mui", cAlternateFileName="")) returned 0 [0059.079] FindClose (in: hFindFile=0x381ec0 | out: hFindFile=0x381ec0) returned 1 [0059.080] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e704) returned 1 [0059.080] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e710) returned 1 [0059.080] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e7bc) returned 1 [0059.080] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Common Files\\System\\Ole DB", nBufferLength=0x105, lpBuffer=0x31e2c4, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Common Files\\System\\Ole DB", lpFilePart=0x0) returned 0x31 [0059.080] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Common Files\\System\\Ole DB\\", nBufferLength=0x105, lpBuffer=0x31e298, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Common Files\\System\\Ole DB\\", lpFilePart=0x0) returned 0x32 [0059.080] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Common Files\\System\\Ole DB\\*", lpFindFileData=0x31e4e4 | out: lpFindFileData=0x31e4e4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd8f7490, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x5f34af90, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x5f34af90, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x381ec0 [0059.082] FindNextFileW (in: hFindFile=0x381ec0, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd8f7490, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x5f34af90, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x5f34af90, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0059.082] FindNextFileW (in: hFindFile=0x381ec0, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1ea1accb, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x228ba44f, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x1ea40f84, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="en-US", cAlternateFileName="")) returned 1 [0059.082] FindNextFileW (in: hFindFile=0x381ec0, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xad7e30c4, ftCreationTime.dwHighDateTime=0x1ca0417, ftLastAccessTime.dwLowDateTime=0xad7e30c4, ftLastAccessTime.dwHighDateTime=0x1ca0417, ftLastWriteTime.dwLowDateTime=0x9bb42720, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x1c00, dwReserved0=0x0, dwReserved1=0x0, cFileName="msdadc.dll", cAlternateFileName="")) returned 1 [0059.082] FindNextFileW (in: hFindFile=0x381ec0, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xadbe75c9, ftCreationTime.dwHighDateTime=0x1ca0417, ftLastAccessTime.dwLowDateTime=0xadbe75c9, ftLastAccessTime.dwHighDateTime=0x1ca0417, ftLastWriteTime.dwLowDateTime=0x9bb67110, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x1c00, dwReserved0=0x0, dwReserved1=0x0, cFileName="msdaenum.dll", cAlternateFileName="")) returned 1 [0059.082] FindNextFileW (in: hFindFile=0x381ec0, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xad8554e1, ftCreationTime.dwHighDateTime=0x1ca0417, ftLastAccessTime.dwLowDateTime=0xad8554e1, ftLastAccessTime.dwHighDateTime=0x1ca0417, ftLastWriteTime.dwLowDateTime=0x9bb67110, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x1c00, dwReserved0=0x0, dwReserved1=0x0, cFileName="msdaer.dll", cAlternateFileName="")) returned 1 [0059.082] FindNextFileW (in: hFindFile=0x381ec0, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xaecb70b8, ftCreationTime.dwHighDateTime=0x1ca0417, ftLastAccessTime.dwLowDateTime=0xaecb70b8, ftLastAccessTime.dwHighDateTime=0x1ca0417, ftLastWriteTime.dwLowDateTime=0x9bb8e210, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x46000, dwReserved0=0x0, dwReserved1=0x0, cFileName="msdaora.dll", cAlternateFileName="")) returned 1 [0059.082] FindNextFileW (in: hFindFile=0x381ec0, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xaf3b5129, ftCreationTime.dwHighDateTime=0x1ca0417, ftLastAccessTime.dwLowDateTime=0xaf3b5129, ftLastAccessTime.dwHighDateTime=0x1ca0417, ftLastWriteTime.dwLowDateTime=0x608c5fb0, ftLastWriteTime.dwHighDateTime=0x1ca041f, nFileSizeHigh=0x0, nFileSizeLow=0x2000, dwReserved0=0x0, dwReserved1=0x0, cFileName="msdaorar.dll", cAlternateFileName="")) returned 1 [0059.082] FindNextFileW (in: hFindFile=0x381ec0, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x868e16a4, ftCreationTime.dwHighDateTime=0x1cb892b, ftLastAccessTime.dwLowDateTime=0x868e16a4, ftLastAccessTime.dwHighDateTime=0x1cb892b, ftLastWriteTime.dwLowDateTime=0x868e16a4, ftLastWriteTime.dwHighDateTime=0x1cb892b, nFileSizeHigh=0x0, nFileSizeLow=0x17000, dwReserved0=0x0, dwReserved1=0x0, cFileName="msdaosp.dll", cAlternateFileName="")) returned 1 [0059.083] FindNextFileW (in: hFindFile=0x381ec0, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xbd6e1ed2, ftCreationTime.dwHighDateTime=0x1ca0417, ftLastAccessTime.dwLowDateTime=0xbd6e1ed2, ftLastAccessTime.dwHighDateTime=0x1ca0417, ftLastWriteTime.dwLowDateTime=0x9bc4c8f0, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x3d000, dwReserved0=0x0, dwReserved1=0x0, cFileName="msdaps.dll", cAlternateFileName="")) returned 1 [0059.083] FindNextFileW (in: hFindFile=0x381ec0, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xaddd679c, ftCreationTime.dwHighDateTime=0x1ca0417, ftLastAccessTime.dwLowDateTime=0xaddd679c, ftLastAccessTime.dwHighDateTime=0x1ca0417, ftLastWriteTime.dwLowDateTime=0x9bcbf4e0, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x1c00, dwReserved0=0x0, dwReserved1=0x0, cFileName="msdasc.dll", cAlternateFileName="")) returned 1 [0059.083] FindNextFileW (in: hFindFile=0x381ec0, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8eb5ad74, ftCreationTime.dwHighDateTime=0x1cb892b, ftLastAccessTime.dwLowDateTime=0x8eb5ad74, ftLastAccessTime.dwHighDateTime=0x1cb892b, ftLastWriteTime.dwLowDateTime=0x8eb80ed5, ftLastWriteTime.dwHighDateTime=0x1cb892b, nFileSizeHigh=0x0, nFileSizeLow=0x95000, dwReserved0=0x0, dwReserved1=0x0, cFileName="msdasql.dll", cAlternateFileName="")) returned 1 [0059.083] FindNextFileW (in: hFindFile=0x381ec0, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb37fe67e, ftCreationTime.dwHighDateTime=0x1ca0417, ftLastAccessTime.dwLowDateTime=0xb37fe67e, ftLastAccessTime.dwHighDateTime=0x1ca0417, ftLastWriteTime.dwLowDateTime=0x60d883e0, ftLastWriteTime.dwHighDateTime=0x1ca041f, nFileSizeHigh=0x0, nFileSizeLow=0xf000, dwReserved0=0x0, dwReserved1=0x0, cFileName="msdasqlr.dll", cAlternateFileName="")) returned 1 [0059.083] FindNextFileW (in: hFindFile=0x381ec0, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xaeaee044, ftCreationTime.dwHighDateTime=0x1ca0417, ftLastAccessTime.dwLowDateTime=0xaeaee044, ftLastAccessTime.dwHighDateTime=0x1ca0417, ftLastWriteTime.dwLowDateTime=0x9bdee0a0, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x18000, dwReserved0=0x0, dwReserved1=0x0, cFileName="msdatl3.dll", cAlternateFileName="")) returned 1 [0059.083] FindNextFileW (in: hFindFile=0x381ec0, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb4ee79a4, ftCreationTime.dwHighDateTime=0x1ca0417, ftLastAccessTime.dwLowDateTime=0xb4ee79a4, ftLastAccessTime.dwHighDateTime=0x1ca0417, ftLastWriteTime.dwLowDateTime=0x9bdee0a0, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x5000, dwReserved0=0x0, dwReserved1=0x0, cFileName="msdatt.dll", cAlternateFileName="")) returned 1 [0059.083] FindNextFileW (in: hFindFile=0x381ec0, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xad9d2297, ftCreationTime.dwHighDateTime=0x1ca0417, ftLastAccessTime.dwLowDateTime=0xad9d2297, ftLastAccessTime.dwHighDateTime=0x1ca0417, ftLastWriteTime.dwLowDateTime=0x9bdee0a0, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x1c00, dwReserved0=0x0, dwReserved1=0x0, cFileName="msdaurl.dll", cAlternateFileName="")) returned 1 [0059.083] FindNextFileW (in: hFindFile=0x381ec0, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb2b0cf35, ftCreationTime.dwHighDateTime=0x1ca0417, ftLastAccessTime.dwLowDateTime=0xb2b0cf35, ftLastAccessTime.dwHighDateTime=0x1ca0417, ftLastWriteTime.dwLowDateTime=0xa0f9caf0, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x7000, dwReserved0=0x0, dwReserved1=0x0, cFileName="msxactps.dll", cAlternateFileName="")) returned 1 [0059.083] FindNextFileW (in: hFindFile=0x381ec0, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8b6fc914, ftCreationTime.dwHighDateTime=0x1cb892b, ftLastAccessTime.dwLowDateTime=0x8b6fc914, ftLastAccessTime.dwHighDateTime=0x1cb892b, ftLastWriteTime.dwLowDateTime=0x8b722a74, ftLastWriteTime.dwHighDateTime=0x1cb892b, nFileSizeHigh=0x0, nFileSizeLow=0xd3000, dwReserved0=0x0, dwReserved1=0x0, cFileName="oledb32.dll", cAlternateFileName="")) returned 1 [0059.083] FindNextFileW (in: hFindFile=0x381ec0, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xadb02d8f, ftCreationTime.dwHighDateTime=0x1ca0417, ftLastAccessTime.dwLowDateTime=0xadb02d8f, ftLastAccessTime.dwHighDateTime=0x1ca0417, ftLastWriteTime.dwLowDateTime=0xb51db240, ftLastWriteTime.dwHighDateTime=0x1ca041f, nFileSizeHigh=0x0, nFileSizeLow=0x14000, dwReserved0=0x0, dwReserved1=0x0, cFileName="oledb32r.dll", cAlternateFileName="")) returned 1 [0059.083] FindNextFileW (in: hFindFile=0x381ec0, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x28bddc5, ftCreationTime.dwHighDateTime=0x1ca040b, ftLastAccessTime.dwLowDateTime=0x28bddc5, ftLastAccessTime.dwHighDateTime=0x1ca040b, ftLastWriteTime.dwLowDateTime=0x26a8a93, ftLastWriteTime.dwHighDateTime=0x1ca040b, nFileSizeHigh=0x0, nFileSizeLow=0x264c, dwReserved0=0x0, dwReserved1=0x0, cFileName="oledbjvs.inc", cAlternateFileName="")) returned 1 [0059.083] FindNextFileW (in: hFindFile=0x381ec0, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x28e3f24, ftCreationTime.dwHighDateTime=0x1ca040b, ftLastAccessTime.dwLowDateTime=0x28e3f24, ftLastAccessTime.dwHighDateTime=0x1ca040b, ftLastWriteTime.dwLowDateTime=0x27ff6ea, ftLastWriteTime.dwHighDateTime=0x1ca040b, nFileSizeHigh=0x0, nFileSizeLow=0x26f7, dwReserved0=0x0, dwReserved1=0x0, cFileName="oledbvbs.inc", cAlternateFileName="")) returned 1 [0059.083] FindNextFileW (in: hFindFile=0x381ec0, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9b07acbf, ftCreationTime.dwHighDateTime=0x1cb892b, ftLastAccessTime.dwLowDateTime=0x9b07acbf, ftLastAccessTime.dwHighDateTime=0x1cb892b, ftLastWriteTime.dwLowDateTime=0x9b0a0e20, ftLastWriteTime.dwHighDateTime=0x1cb892b, nFileSizeHigh=0x0, nFileSizeLow=0xe1000, dwReserved0=0x0, dwReserved1=0x0, cFileName="sqloledb.dll", cAlternateFileName="")) returned 1 [0059.083] FindNextFileW (in: hFindFile=0x381ec0, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xbc4e18eb, ftCreationTime.dwHighDateTime=0x1ca0417, ftLastAccessTime.dwLowDateTime=0xbc4e18eb, ftLastAccessTime.dwHighDateTime=0x1ca0417, ftLastWriteTime.dwLowDateTime=0xbc38ac94, ftLastWriteTime.dwHighDateTime=0x1ca0417, nFileSizeHigh=0x0, nFileSizeLow=0x4000, dwReserved0=0x0, dwReserved1=0x0, cFileName="sqloledb.rll", cAlternateFileName="")) returned 1 [0059.083] FindNextFileW (in: hFindFile=0x381ec0, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xba82b04c, ftCreationTime.dwHighDateTime=0x1ca0417, ftLastAccessTime.dwLowDateTime=0xba82b04c, ftLastAccessTime.dwHighDateTime=0x1ca0417, ftLastWriteTime.dwLowDateTime=0xaed6d5a0, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x41000, dwReserved0=0x0, dwReserved1=0x0, cFileName="sqlxmlx.dll", cAlternateFileName="")) returned 1 [0059.083] FindNextFileW (in: hFindFile=0x381ec0, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xba87730a, ftCreationTime.dwHighDateTime=0x1ca0417, ftLastAccessTime.dwLowDateTime=0xba87730a, ftLastAccessTime.dwHighDateTime=0x1ca0417, ftLastWriteTime.dwLowDateTime=0xba804eed, ftLastWriteTime.dwHighDateTime=0x1ca0417, nFileSizeHigh=0x0, nFileSizeLow=0x2000, dwReserved0=0x0, dwReserved1=0x0, cFileName="sqlxmlx.rll", cAlternateFileName="")) returned 1 [0059.084] FindNextFileW (in: hFindFile=0x381ec0, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x305d2000, ftCreationTime.dwHighDateTime=0x1c8e1ec, ftLastAccessTime.dwLowDateTime=0x516f5b30, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x305d2000, ftLastWriteTime.dwHighDateTime=0x1c8e1ec, nFileSizeHigh=0x0, nFileSizeLow=0x29618, dwReserved0=0x0, dwReserved1=0x0, cFileName="xmlrw.dll", cAlternateFileName="")) returned 1 [0059.084] FindNextFileW (in: hFindFile=0x381ec0, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x305d2000, ftCreationTime.dwHighDateTime=0x1c8e1ec, ftLastAccessTime.dwLowDateTime=0x5f3710f0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x305d2000, ftLastWriteTime.dwHighDateTime=0x1c8e1ec, nFileSizeHigh=0x0, nFileSizeLow=0x1e218, dwReserved0=0x0, dwReserved1=0x0, cFileName="xmlrwbin.dll", cAlternateFileName="")) returned 1 [0059.084] FindNextFileW (in: hFindFile=0x381ec0, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0059.084] FindClose (in: hFindFile=0x381ec0 | out: hFindFile=0x381ec0) returned 1 [0059.084] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e77c) returned 1 [0059.084] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e788) returned 1 [0059.084] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e7bc) returned 1 [0059.084] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Common Files\\System\\Ole DB", nBufferLength=0x105, lpBuffer=0x31e2c4, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Common Files\\System\\Ole DB", lpFilePart=0x0) returned 0x31 [0059.084] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Common Files\\System\\Ole DB\\", nBufferLength=0x105, lpBuffer=0x31e298, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Common Files\\System\\Ole DB\\", lpFilePart=0x0) returned 0x32 [0059.085] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Common Files\\System\\Ole DB\\*", lpFindFileData=0x31e4e4 | out: lpFindFileData=0x31e4e4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd8f7490, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x5f34af90, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x5f34af90, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x381ec0 [0059.085] FindNextFileW (in: hFindFile=0x381ec0, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd8f7490, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x5f34af90, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x5f34af90, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0059.085] FindNextFileW (in: hFindFile=0x381ec0, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1ea1accb, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x228ba44f, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x1ea40f84, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="en-US", cAlternateFileName="")) returned 1 [0059.085] FindNextFileW (in: hFindFile=0x381ec0, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xad7e30c4, ftCreationTime.dwHighDateTime=0x1ca0417, ftLastAccessTime.dwLowDateTime=0xad7e30c4, ftLastAccessTime.dwHighDateTime=0x1ca0417, ftLastWriteTime.dwLowDateTime=0x9bb42720, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x1c00, dwReserved0=0x0, dwReserved1=0x0, cFileName="msdadc.dll", cAlternateFileName="")) returned 1 [0059.085] FindNextFileW (in: hFindFile=0x381ec0, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xadbe75c9, ftCreationTime.dwHighDateTime=0x1ca0417, ftLastAccessTime.dwLowDateTime=0xadbe75c9, ftLastAccessTime.dwHighDateTime=0x1ca0417, ftLastWriteTime.dwLowDateTime=0x9bb67110, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x1c00, dwReserved0=0x0, dwReserved1=0x0, cFileName="msdaenum.dll", cAlternateFileName="")) returned 1 [0059.085] FindNextFileW (in: hFindFile=0x381ec0, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xad8554e1, ftCreationTime.dwHighDateTime=0x1ca0417, ftLastAccessTime.dwLowDateTime=0xad8554e1, ftLastAccessTime.dwHighDateTime=0x1ca0417, ftLastWriteTime.dwLowDateTime=0x9bb67110, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x1c00, dwReserved0=0x0, dwReserved1=0x0, cFileName="msdaer.dll", cAlternateFileName="")) returned 1 [0059.086] FindNextFileW (in: hFindFile=0x381ec0, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xaecb70b8, ftCreationTime.dwHighDateTime=0x1ca0417, ftLastAccessTime.dwLowDateTime=0xaecb70b8, ftLastAccessTime.dwHighDateTime=0x1ca0417, ftLastWriteTime.dwLowDateTime=0x9bb8e210, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x46000, dwReserved0=0x0, dwReserved1=0x0, cFileName="msdaora.dll", cAlternateFileName="")) returned 1 [0059.086] FindNextFileW (in: hFindFile=0x381ec0, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xaf3b5129, ftCreationTime.dwHighDateTime=0x1ca0417, ftLastAccessTime.dwLowDateTime=0xaf3b5129, ftLastAccessTime.dwHighDateTime=0x1ca0417, ftLastWriteTime.dwLowDateTime=0x608c5fb0, ftLastWriteTime.dwHighDateTime=0x1ca041f, nFileSizeHigh=0x0, nFileSizeLow=0x2000, dwReserved0=0x0, dwReserved1=0x0, cFileName="msdaorar.dll", cAlternateFileName="")) returned 1 [0059.086] FindNextFileW (in: hFindFile=0x381ec0, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x868e16a4, ftCreationTime.dwHighDateTime=0x1cb892b, ftLastAccessTime.dwLowDateTime=0x868e16a4, ftLastAccessTime.dwHighDateTime=0x1cb892b, ftLastWriteTime.dwLowDateTime=0x868e16a4, ftLastWriteTime.dwHighDateTime=0x1cb892b, nFileSizeHigh=0x0, nFileSizeLow=0x17000, dwReserved0=0x0, dwReserved1=0x0, cFileName="msdaosp.dll", cAlternateFileName="")) returned 1 [0059.086] FindNextFileW (in: hFindFile=0x381ec0, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xbd6e1ed2, ftCreationTime.dwHighDateTime=0x1ca0417, ftLastAccessTime.dwLowDateTime=0xbd6e1ed2, ftLastAccessTime.dwHighDateTime=0x1ca0417, ftLastWriteTime.dwLowDateTime=0x9bc4c8f0, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x3d000, dwReserved0=0x0, dwReserved1=0x0, cFileName="msdaps.dll", cAlternateFileName="")) returned 1 [0059.086] FindNextFileW (in: hFindFile=0x381ec0, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xaddd679c, ftCreationTime.dwHighDateTime=0x1ca0417, ftLastAccessTime.dwLowDateTime=0xaddd679c, ftLastAccessTime.dwHighDateTime=0x1ca0417, ftLastWriteTime.dwLowDateTime=0x9bcbf4e0, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x1c00, dwReserved0=0x0, dwReserved1=0x0, cFileName="msdasc.dll", cAlternateFileName="")) returned 1 [0059.086] FindNextFileW (in: hFindFile=0x381ec0, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8eb5ad74, ftCreationTime.dwHighDateTime=0x1cb892b, ftLastAccessTime.dwLowDateTime=0x8eb5ad74, ftLastAccessTime.dwHighDateTime=0x1cb892b, ftLastWriteTime.dwLowDateTime=0x8eb80ed5, ftLastWriteTime.dwHighDateTime=0x1cb892b, nFileSizeHigh=0x0, nFileSizeLow=0x95000, dwReserved0=0x0, dwReserved1=0x0, cFileName="msdasql.dll", cAlternateFileName="")) returned 1 [0059.086] FindNextFileW (in: hFindFile=0x381ec0, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb37fe67e, ftCreationTime.dwHighDateTime=0x1ca0417, ftLastAccessTime.dwLowDateTime=0xb37fe67e, ftLastAccessTime.dwHighDateTime=0x1ca0417, ftLastWriteTime.dwLowDateTime=0x60d883e0, ftLastWriteTime.dwHighDateTime=0x1ca041f, nFileSizeHigh=0x0, nFileSizeLow=0xf000, dwReserved0=0x0, dwReserved1=0x0, cFileName="msdasqlr.dll", cAlternateFileName="")) returned 1 [0059.086] FindNextFileW (in: hFindFile=0x381ec0, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xaeaee044, ftCreationTime.dwHighDateTime=0x1ca0417, ftLastAccessTime.dwLowDateTime=0xaeaee044, ftLastAccessTime.dwHighDateTime=0x1ca0417, ftLastWriteTime.dwLowDateTime=0x9bdee0a0, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x18000, dwReserved0=0x0, dwReserved1=0x0, cFileName="msdatl3.dll", cAlternateFileName="")) returned 1 [0059.086] FindNextFileW (in: hFindFile=0x381ec0, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb4ee79a4, ftCreationTime.dwHighDateTime=0x1ca0417, ftLastAccessTime.dwLowDateTime=0xb4ee79a4, ftLastAccessTime.dwHighDateTime=0x1ca0417, ftLastWriteTime.dwLowDateTime=0x9bdee0a0, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x5000, dwReserved0=0x0, dwReserved1=0x0, cFileName="msdatt.dll", cAlternateFileName="")) returned 1 [0059.086] FindNextFileW (in: hFindFile=0x381ec0, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xad9d2297, ftCreationTime.dwHighDateTime=0x1ca0417, ftLastAccessTime.dwLowDateTime=0xad9d2297, ftLastAccessTime.dwHighDateTime=0x1ca0417, ftLastWriteTime.dwLowDateTime=0x9bdee0a0, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x1c00, dwReserved0=0x0, dwReserved1=0x0, cFileName="msdaurl.dll", cAlternateFileName="")) returned 1 [0059.086] FindNextFileW (in: hFindFile=0x381ec0, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb2b0cf35, ftCreationTime.dwHighDateTime=0x1ca0417, ftLastAccessTime.dwLowDateTime=0xb2b0cf35, ftLastAccessTime.dwHighDateTime=0x1ca0417, ftLastWriteTime.dwLowDateTime=0xa0f9caf0, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x7000, dwReserved0=0x0, dwReserved1=0x0, cFileName="msxactps.dll", cAlternateFileName="")) returned 1 [0059.086] FindNextFileW (in: hFindFile=0x381ec0, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8b6fc914, ftCreationTime.dwHighDateTime=0x1cb892b, ftLastAccessTime.dwLowDateTime=0x8b6fc914, ftLastAccessTime.dwHighDateTime=0x1cb892b, ftLastWriteTime.dwLowDateTime=0x8b722a74, ftLastWriteTime.dwHighDateTime=0x1cb892b, nFileSizeHigh=0x0, nFileSizeLow=0xd3000, dwReserved0=0x0, dwReserved1=0x0, cFileName="oledb32.dll", cAlternateFileName="")) returned 1 [0059.086] FindNextFileW (in: hFindFile=0x381ec0, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xadb02d8f, ftCreationTime.dwHighDateTime=0x1ca0417, ftLastAccessTime.dwLowDateTime=0xadb02d8f, ftLastAccessTime.dwHighDateTime=0x1ca0417, ftLastWriteTime.dwLowDateTime=0xb51db240, ftLastWriteTime.dwHighDateTime=0x1ca041f, nFileSizeHigh=0x0, nFileSizeLow=0x14000, dwReserved0=0x0, dwReserved1=0x0, cFileName="oledb32r.dll", cAlternateFileName="")) returned 1 [0059.086] FindNextFileW (in: hFindFile=0x381ec0, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x28bddc5, ftCreationTime.dwHighDateTime=0x1ca040b, ftLastAccessTime.dwLowDateTime=0x28bddc5, ftLastAccessTime.dwHighDateTime=0x1ca040b, ftLastWriteTime.dwLowDateTime=0x26a8a93, ftLastWriteTime.dwHighDateTime=0x1ca040b, nFileSizeHigh=0x0, nFileSizeLow=0x264c, dwReserved0=0x0, dwReserved1=0x0, cFileName="oledbjvs.inc", cAlternateFileName="")) returned 1 [0059.086] FindNextFileW (in: hFindFile=0x381ec0, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x28e3f24, ftCreationTime.dwHighDateTime=0x1ca040b, ftLastAccessTime.dwLowDateTime=0x28e3f24, ftLastAccessTime.dwHighDateTime=0x1ca040b, ftLastWriteTime.dwLowDateTime=0x27ff6ea, ftLastWriteTime.dwHighDateTime=0x1ca040b, nFileSizeHigh=0x0, nFileSizeLow=0x26f7, dwReserved0=0x0, dwReserved1=0x0, cFileName="oledbvbs.inc", cAlternateFileName="")) returned 1 [0059.086] FindNextFileW (in: hFindFile=0x381ec0, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9b07acbf, ftCreationTime.dwHighDateTime=0x1cb892b, ftLastAccessTime.dwLowDateTime=0x9b07acbf, ftLastAccessTime.dwHighDateTime=0x1cb892b, ftLastWriteTime.dwLowDateTime=0x9b0a0e20, ftLastWriteTime.dwHighDateTime=0x1cb892b, nFileSizeHigh=0x0, nFileSizeLow=0xe1000, dwReserved0=0x0, dwReserved1=0x0, cFileName="sqloledb.dll", cAlternateFileName="")) returned 1 [0059.086] FindNextFileW (in: hFindFile=0x381ec0, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xbc4e18eb, ftCreationTime.dwHighDateTime=0x1ca0417, ftLastAccessTime.dwLowDateTime=0xbc4e18eb, ftLastAccessTime.dwHighDateTime=0x1ca0417, ftLastWriteTime.dwLowDateTime=0xbc38ac94, ftLastWriteTime.dwHighDateTime=0x1ca0417, nFileSizeHigh=0x0, nFileSizeLow=0x4000, dwReserved0=0x0, dwReserved1=0x0, cFileName="sqloledb.rll", cAlternateFileName="")) returned 1 [0059.086] FindNextFileW (in: hFindFile=0x381ec0, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xba82b04c, ftCreationTime.dwHighDateTime=0x1ca0417, ftLastAccessTime.dwLowDateTime=0xba82b04c, ftLastAccessTime.dwHighDateTime=0x1ca0417, ftLastWriteTime.dwLowDateTime=0xaed6d5a0, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x41000, dwReserved0=0x0, dwReserved1=0x0, cFileName="sqlxmlx.dll", cAlternateFileName="")) returned 1 [0059.086] FindNextFileW (in: hFindFile=0x381ec0, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xba87730a, ftCreationTime.dwHighDateTime=0x1ca0417, ftLastAccessTime.dwLowDateTime=0xba87730a, ftLastAccessTime.dwHighDateTime=0x1ca0417, ftLastWriteTime.dwLowDateTime=0xba804eed, ftLastWriteTime.dwHighDateTime=0x1ca0417, nFileSizeHigh=0x0, nFileSizeLow=0x2000, dwReserved0=0x0, dwReserved1=0x0, cFileName="sqlxmlx.rll", cAlternateFileName="")) returned 1 [0059.086] FindNextFileW (in: hFindFile=0x381ec0, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x305d2000, ftCreationTime.dwHighDateTime=0x1c8e1ec, ftLastAccessTime.dwLowDateTime=0x516f5b30, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x305d2000, ftLastWriteTime.dwHighDateTime=0x1c8e1ec, nFileSizeHigh=0x0, nFileSizeLow=0x29618, dwReserved0=0x0, dwReserved1=0x0, cFileName="xmlrw.dll", cAlternateFileName="")) returned 1 [0059.086] FindNextFileW (in: hFindFile=0x381ec0, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x305d2000, ftCreationTime.dwHighDateTime=0x1c8e1ec, ftLastAccessTime.dwLowDateTime=0x5f3710f0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x305d2000, ftLastWriteTime.dwHighDateTime=0x1c8e1ec, nFileSizeHigh=0x0, nFileSizeLow=0x1e218, dwReserved0=0x0, dwReserved1=0x0, cFileName="xmlrwbin.dll", cAlternateFileName="")) returned 1 [0059.086] FindNextFileW (in: hFindFile=0x381ec0, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x305d2000, ftCreationTime.dwHighDateTime=0x1c8e1ec, ftLastAccessTime.dwLowDateTime=0x5f3710f0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x305d2000, ftLastWriteTime.dwHighDateTime=0x1c8e1ec, nFileSizeHigh=0x0, nFileSizeLow=0x1e218, dwReserved0=0x0, dwReserved1=0x0, cFileName="xmlrwbin.dll", cAlternateFileName="")) returned 0 [0059.087] FindClose (in: hFindFile=0x381ec0 | out: hFindFile=0x381ec0) returned 1 [0059.087] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e77c) returned 1 [0059.087] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e788) returned 1 [0059.087] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e744) returned 1 [0059.087] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Common Files\\System\\Ole DB\\en-US", nBufferLength=0x105, lpBuffer=0x31e24c, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Common Files\\System\\Ole DB\\en-US", lpFilePart=0x0) returned 0x37 [0059.087] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Common Files\\System\\Ole DB\\en-US\\", nBufferLength=0x105, lpBuffer=0x31e220, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Common Files\\System\\Ole DB\\en-US\\", lpFilePart=0x0) returned 0x38 [0059.087] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Common Files\\System\\Ole DB\\en-US\\*", lpFindFileData=0x31e46c | out: lpFindFileData=0x31e46c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1ea1accb, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x228ba44f, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x1ea40f84, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x381ec0 [0059.088] FindNextFileW (in: hFindFile=0x381ec0, lpFindFileData=0x31e47c | out: lpFindFileData=0x31e47c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1ea1accb, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x228ba44f, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x1ea40f84, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0059.088] FindNextFileW (in: hFindFile=0x381ec0, lpFindFileData=0x31e47c | out: lpFindFileData=0x31e47c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8a39353, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x8eb2501, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x8a39353, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x2000, dwReserved0=0x0, dwReserved1=0x0, cFileName="msdaorar.dll.mui", cAlternateFileName="")) returned 1 [0059.088] FindNextFileW (in: hFindFile=0x381ec0, lpFindFileData=0x31e47c | out: lpFindFileData=0x31e47c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8a858c5, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x8e65f8f, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x8a858c5, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x1600, dwReserved0=0x0, dwReserved1=0x0, cFileName="msdasqlr.dll.mui", cAlternateFileName="")) returned 1 [0059.088] FindNextFileW (in: hFindFile=0x381ec0, lpFindFileData=0x31e47c | out: lpFindFileData=0x31e47c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9a5395f, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x9e34029, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x9a5395f, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0xba00, dwReserved0=0x0, dwReserved1=0x0, cFileName="oledb32r.dll.mui", cAlternateFileName="")) returned 1 [0059.088] FindNextFileW (in: hFindFile=0x381ec0, lpFindFileData=0x31e47c | out: lpFindFileData=0x31e47c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8aabb7e, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x8e65f8f, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x8aabb7e, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0xac00, dwReserved0=0x0, dwReserved1=0x0, cFileName="sqloledb.rll.mui", cAlternateFileName="")) returned 1 [0059.088] FindNextFileW (in: hFindFile=0x381ec0, lpFindFileData=0x31e47c | out: lpFindFileData=0x31e47c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa260c65, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0xa5a884b, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0xa260c65, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x4600, dwReserved0=0x0, dwReserved1=0x0, cFileName="sqlxmlx.rll.mui", cAlternateFileName="")) returned 1 [0059.089] FindNextFileW (in: hFindFile=0x381ec0, lpFindFileData=0x31e47c | out: lpFindFileData=0x31e47c*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0059.089] FindClose (in: hFindFile=0x381ec0 | out: hFindFile=0x381ec0) returned 1 [0059.089] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e704) returned 1 [0059.089] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e710) returned 1 [0059.089] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e744) returned 1 [0059.089] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Common Files\\System\\Ole DB\\en-US", nBufferLength=0x105, lpBuffer=0x31e24c, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Common Files\\System\\Ole DB\\en-US", lpFilePart=0x0) returned 0x37 [0059.089] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Common Files\\System\\Ole DB\\en-US\\", nBufferLength=0x105, lpBuffer=0x31e220, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Common Files\\System\\Ole DB\\en-US\\", lpFilePart=0x0) returned 0x38 [0059.089] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Common Files\\System\\Ole DB\\en-US\\*", lpFindFileData=0x31e46c | out: lpFindFileData=0x31e46c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1ea1accb, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x228ba44f, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x1ea40f84, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x381ec0 [0059.089] FindNextFileW (in: hFindFile=0x381ec0, lpFindFileData=0x31e47c | out: lpFindFileData=0x31e47c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1ea1accb, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x228ba44f, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x1ea40f84, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0059.089] FindNextFileW (in: hFindFile=0x381ec0, lpFindFileData=0x31e47c | out: lpFindFileData=0x31e47c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8a39353, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x8eb2501, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x8a39353, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x2000, dwReserved0=0x0, dwReserved1=0x0, cFileName="msdaorar.dll.mui", cAlternateFileName="")) returned 1 [0059.090] FindClose (in: hFindFile=0x381ec0 | out: hFindFile=0x381ec0) returned 1 [0059.090] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e704) returned 1 [0059.090] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e710) returned 1 [0059.090] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e8ac) returned 1 [0059.090] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Google", nBufferLength=0x105, lpBuffer=0x31e3b4, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Google", lpFilePart=0x0) returned 0x1d [0059.090] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Google\\", nBufferLength=0x105, lpBuffer=0x31e388, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Google\\", lpFilePart=0x0) returned 0x1e [0059.090] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Google\\*", lpFindFileData=0x31e5d4 | out: lpFindFileData=0x31e5d4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x6c82ea80, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0xa547efa0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0xa547efa0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x381ec0 [0059.090] FindClose (in: hFindFile=0x381ec0 | out: hFindFile=0x381ec0) returned 1 [0059.090] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e86c) returned 1 [0059.090] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e878) returned 1 [0059.090] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Google", nBufferLength=0x105, lpBuffer=0x31e3b4, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Google", lpFilePart=0x0) returned 0x1d [0059.090] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Google\\", nBufferLength=0x105, lpBuffer=0x31e388, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Google\\", lpFilePart=0x0) returned 0x1e [0059.091] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Google\\*", lpFindFileData=0x31e5d4 | out: lpFindFileData=0x31e5d4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x6c82ea80, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0xa547efa0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0xa547efa0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x381ec0 [0059.091] FindClose (in: hFindFile=0x381ec0 | out: hFindFile=0x381ec0) returned 1 [0059.091] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Google\\Chrome", nBufferLength=0x105, lpBuffer=0x31e33c, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Google\\Chrome", lpFilePart=0x0) returned 0x24 [0059.091] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Google\\Chrome\\", nBufferLength=0x105, lpBuffer=0x31e310, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Google\\Chrome\\", lpFilePart=0x0) returned 0x25 [0059.091] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Google\\Chrome\\*", lpFindFileData=0x31e55c | out: lpFindFileData=0x31e55c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7aa9d740, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x7e0ead20, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x7e0ead20, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x381ec0 [0059.091] FindClose (in: hFindFile=0x381ec0 | out: hFindFile=0x381ec0) returned 1 [0059.091] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Google\\Chrome", nBufferLength=0x105, lpBuffer=0x31e33c, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Google\\Chrome", lpFilePart=0x0) returned 0x24 [0059.091] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Google\\Chrome\\", nBufferLength=0x105, lpBuffer=0x31e310, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Google\\Chrome\\", lpFilePart=0x0) returned 0x25 [0059.091] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Google\\Chrome\\*", lpFindFileData=0x31e55c | out: lpFindFileData=0x31e55c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7aa9d740, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x7e0ead20, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x7e0ead20, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x381ec0 [0059.091] FindClose (in: hFindFile=0x381ec0 | out: hFindFile=0x381ec0) returned 1 [0059.091] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Google\\Chrome\\Application", nBufferLength=0x105, lpBuffer=0x31e2c4, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Google\\Chrome\\Application", lpFilePart=0x0) returned 0x30 [0059.092] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Google\\Chrome\\Application\\", nBufferLength=0x105, lpBuffer=0x31e298, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Google\\Chrome\\Application\\", lpFilePart=0x0) returned 0x31 [0059.092] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Google\\Chrome\\Application\\*", lpFindFileData=0x31e4e4 | out: lpFindFileData=0x31e4e4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7ded59e0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x7ded59e0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x7ded59e0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x381ec0 [0059.092] FindClose (in: hFindFile=0x381ec0 | out: hFindFile=0x381ec0) returned 1 [0059.092] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Google\\Chrome\\Application", nBufferLength=0x105, lpBuffer=0x31e2c4, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Google\\Chrome\\Application", lpFilePart=0x0) returned 0x30 [0059.092] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Google\\Chrome\\Application\\", nBufferLength=0x105, lpBuffer=0x31e298, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Google\\Chrome\\Application\\", lpFilePart=0x0) returned 0x31 [0059.092] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Google\\Chrome\\Application\\*", lpFindFileData=0x31e4e4 | out: lpFindFileData=0x31e4e4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7ded59e0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x7ded59e0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x7ded59e0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x381ec0 [0059.092] FindClose (in: hFindFile=0x381ec0 | out: hFindFile=0x381ec0) returned 1 [0059.092] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Google\\Chrome\\Application\\chrome.VisualElementsManifest.xml", nBufferLength=0x105, lpBuffer=0x31e194, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Google\\Chrome\\Application\\chrome.VisualElementsManifest.xml", lpFilePart=0x0) returned 0x52 [0059.092] CreateFileW (lpFileName="C:\\Program Files (x86)\\Google\\Chrome\\Application\\chrome.VisualElementsManifest.xml" (normalized: "c:\\program files (x86)\\google\\chrome\\application\\chrome.visualelementsmanifest.xml"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x274 [0059.092] GetFileType (hFile=0x274) returned 0x1 [0059.092] GetFileType (hFile=0x274) returned 0x1 [0059.092] GetFileSize (in: hFile=0x274, lpFileSizeHigh=0x31e790 | out: lpFileSizeHigh=0x31e790*=0x0) returned 0x19a [0059.093] ReadFile (in: hFile=0x274, lpBuffer=0x2727c14, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x31e73c, lpOverlapped=0x0 | out: lpBuffer=0x2727c14*, lpNumberOfBytesRead=0x31e73c*=0x19a, lpOverlapped=0x0) returned 1 [0059.093] CloseHandle (hObject=0x274) returned 1 [0059.132] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Google\\Chrome\\Application\\chrome.VisualElementsManifest.xml", nBufferLength=0x105, lpBuffer=0x31e180, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Google\\Chrome\\Application\\chrome.VisualElementsManifest.xml", lpFilePart=0x0) returned 0x52 [0059.132] CreateFileW (lpFileName="C:\\Program Files (x86)\\Google\\Chrome\\Application\\chrome.VisualElementsManifest.xml" (normalized: "c:\\program files (x86)\\google\\chrome\\application\\chrome.visualelementsmanifest.xml"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x274 [0059.133] GetFileType (hFile=0x274) returned 0x1 [0059.133] GetFileType (hFile=0x274) returned 0x1 [0059.135] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Google\\Chrome\\Application\\chrome.VisualElementsManifest.xml", nBufferLength=0x105, lpBuffer=0x31e2b4, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Google\\Chrome\\Application\\chrome.VisualElementsManifest.xml", lpFilePart=0x0) returned 0x52 [0059.135] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Google\\Chrome\\Application\\chrome.VisualElementsManifest.xml", nBufferLength=0x105, lpBuffer=0x31e2b4, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Google\\Chrome\\Application\\chrome.VisualElementsManifest.xml", lpFilePart=0x0) returned 0x52 [0059.135] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Google\\Chrome\\Application\\chrome.VisualElementsManifest.xml" (normalized: "c:\\program files (x86)\\google\\chrome\\application\\chrome.visualelementsmanifest.xml"), fInfoLevelId=0x0, lpFileInformation=0x31e790 | out: lpFileInformation=0x31e790*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7ded59e0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x7ded59e0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x6b2a040, ftLastWriteTime.dwHighDateTime=0x1d6eb7f, nFileSizeHigh=0x0, nFileSizeLow=0x1a0)) returned 1 [0059.135] MoveFileW (lpExistingFileName="C:\\Program Files (x86)\\Google\\Chrome\\Application\\chrome.VisualElementsManifest.xml" (normalized: "c:\\program files (x86)\\google\\chrome\\application\\chrome.visualelementsmanifest.xml"), lpNewFileName="C:\\Program Files (x86)\\Google\\Chrome\\Application\\chrome.VisualElementsManifest.xml" (normalized: "c:\\program files (x86)\\google\\chrome\\application\\chrome.visualelementsmanifest.xml")) returned 1 [0059.136] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Google\\Chrome\\Application\\58.0.3029.110", nBufferLength=0x105, lpBuffer=0x31e24c, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Google\\Chrome\\Application\\58.0.3029.110", lpFilePart=0x0) returned 0x3e [0059.136] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Google\\Chrome\\Application\\58.0.3029.110\\", nBufferLength=0x105, lpBuffer=0x31e220, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Google\\Chrome\\Application\\58.0.3029.110\\", lpFilePart=0x0) returned 0x3f [0059.136] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Google\\Chrome\\Application\\58.0.3029.110\\*", lpFindFileData=0x31e46c | out: lpFindFileData=0x31e46c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7d78b680, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x7ded59e0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x7ded59e0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x381c40 [0059.137] FindClose (in: hFindFile=0x381c40 | out: hFindFile=0x381c40) returned 1 [0059.137] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Google\\Chrome\\Application\\58.0.3029.110", nBufferLength=0x105, lpBuffer=0x31e24c, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Google\\Chrome\\Application\\58.0.3029.110", lpFilePart=0x0) returned 0x3e [0059.137] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Google\\Chrome\\Application\\58.0.3029.110\\", nBufferLength=0x105, lpBuffer=0x31e220, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Google\\Chrome\\Application\\58.0.3029.110\\", lpFilePart=0x0) returned 0x3f [0059.138] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Google\\Chrome\\Application\\58.0.3029.110\\*", lpFindFileData=0x31e46c | out: lpFindFileData=0x31e46c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7d78b680, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x7ded59e0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x7ded59e0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x381c40 [0059.138] FindClose (in: hFindFile=0x381c40 | out: hFindFile=0x381c40) returned 1 [0059.138] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Google\\Chrome\\Application\\58.0.3029.110\\default_apps", nBufferLength=0x105, lpBuffer=0x31e1d4, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Google\\Chrome\\Application\\58.0.3029.110\\default_apps", lpFilePart=0x0) returned 0x4b [0059.138] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Google\\Chrome\\Application\\58.0.3029.110\\default_apps\\", nBufferLength=0x105, lpBuffer=0x31e1a8, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Google\\Chrome\\Application\\58.0.3029.110\\default_apps\\", lpFilePart=0x0) returned 0x4c [0059.138] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Google\\Chrome\\Application\\58.0.3029.110\\default_apps\\*", lpFindFileData=0x31e3f4 | out: lpFindFileData=0x31e3f4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7d78b680, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x7d7b17e0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x7d7b17e0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x381c40 [0059.140] FindClose (in: hFindFile=0x381c40 | out: hFindFile=0x381c40) returned 1 [0059.140] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Google\\Chrome\\Application\\58.0.3029.110\\default_apps", nBufferLength=0x105, lpBuffer=0x31e1d4, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Google\\Chrome\\Application\\58.0.3029.110\\default_apps", lpFilePart=0x0) returned 0x4b [0059.140] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Google\\Chrome\\Application\\58.0.3029.110\\default_apps\\", nBufferLength=0x105, lpBuffer=0x31e1a8, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Google\\Chrome\\Application\\58.0.3029.110\\default_apps\\", lpFilePart=0x0) returned 0x4c [0059.140] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Google\\Chrome\\Application\\58.0.3029.110\\default_apps\\*", lpFindFileData=0x31e3f4 | out: lpFindFileData=0x31e3f4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7d78b680, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x7d7b17e0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x7d7b17e0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x381c40 [0059.141] FindClose (in: hFindFile=0x381c40 | out: hFindFile=0x381c40) returned 1 [0059.142] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Google\\Chrome\\Application\\58.0.3029.110\\Extensions", nBufferLength=0x105, lpBuffer=0x31e1d4, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Google\\Chrome\\Application\\58.0.3029.110\\Extensions", lpFilePart=0x0) returned 0x49 [0059.142] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Google\\Chrome\\Application\\58.0.3029.110\\Extensions\\", nBufferLength=0x105, lpBuffer=0x31e1a8, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Google\\Chrome\\Application\\58.0.3029.110\\Extensions\\", lpFilePart=0x0) returned 0x4a [0059.142] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Google\\Chrome\\Application\\58.0.3029.110\\Extensions\\*", lpFindFileData=0x31e3f4 | out: lpFindFileData=0x31e3f4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7d78b680, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x7d7b17e0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x7d7b17e0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x381c40 [0059.143] FindClose (in: hFindFile=0x381c40 | out: hFindFile=0x381c40) returned 1 [0059.143] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Google\\Chrome\\Application\\58.0.3029.110\\Extensions", nBufferLength=0x105, lpBuffer=0x31e1d4, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Google\\Chrome\\Application\\58.0.3029.110\\Extensions", lpFilePart=0x0) returned 0x49 [0059.143] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Google\\Chrome\\Application\\58.0.3029.110\\Extensions\\", nBufferLength=0x105, lpBuffer=0x31e1a8, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Google\\Chrome\\Application\\58.0.3029.110\\Extensions\\", lpFilePart=0x0) returned 0x4a [0059.143] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Google\\Chrome\\Application\\58.0.3029.110\\Extensions\\*", lpFindFileData=0x31e3f4 | out: lpFindFileData=0x31e3f4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7d78b680, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x7d7b17e0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x7d7b17e0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x381c40 [0059.143] FindClose (in: hFindFile=0x381c40 | out: hFindFile=0x381c40) returned 1 [0059.143] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Google\\Chrome\\Application\\58.0.3029.110\\Installer", nBufferLength=0x105, lpBuffer=0x31e1d4, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Google\\Chrome\\Application\\58.0.3029.110\\Installer", lpFilePart=0x0) returned 0x48 [0059.143] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Google\\Chrome\\Application\\58.0.3029.110\\Installer\\", nBufferLength=0x105, lpBuffer=0x31e1a8, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Google\\Chrome\\Application\\58.0.3029.110\\Installer\\", lpFilePart=0x0) returned 0x49 [0059.143] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Google\\Chrome\\Application\\58.0.3029.110\\Installer\\*", lpFindFileData=0x31e3f4 | out: lpFindFileData=0x31e3f4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7ded59e0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x7ded59e0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x7ded59e0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x381c40 [0059.144] FindClose (in: hFindFile=0x381c40 | out: hFindFile=0x381c40) returned 1 [0059.144] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Google\\Chrome\\Application\\58.0.3029.110\\Installer", nBufferLength=0x105, lpBuffer=0x31e1d4, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Google\\Chrome\\Application\\58.0.3029.110\\Installer", lpFilePart=0x0) returned 0x48 [0059.144] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Google\\Chrome\\Application\\58.0.3029.110\\Installer\\", nBufferLength=0x105, lpBuffer=0x31e1a8, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Google\\Chrome\\Application\\58.0.3029.110\\Installer\\", lpFilePart=0x0) returned 0x49 [0059.144] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Google\\Chrome\\Application\\58.0.3029.110\\Installer\\*", lpFindFileData=0x31e3f4 | out: lpFindFileData=0x31e3f4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7ded59e0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x7ded59e0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x7ded59e0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x381c40 [0059.144] FindClose (in: hFindFile=0x381c40 | out: hFindFile=0x381c40) returned 1 [0059.144] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Google\\Chrome\\Application\\58.0.3029.110\\Locales", nBufferLength=0x105, lpBuffer=0x31e1d4, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Google\\Chrome\\Application\\58.0.3029.110\\Locales", lpFilePart=0x0) returned 0x46 [0059.144] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Google\\Chrome\\Application\\58.0.3029.110\\Locales\\", nBufferLength=0x105, lpBuffer=0x31e1a8, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Google\\Chrome\\Application\\58.0.3029.110\\Locales\\", lpFilePart=0x0) returned 0x47 [0059.144] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Google\\Chrome\\Application\\58.0.3029.110\\Locales\\*", lpFindFileData=0x31e3f4 | out: lpFindFileData=0x31e3f4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7d78b680, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x7d86fec0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x7d86fec0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x381c40 [0059.146] FindClose (in: hFindFile=0x381c40 | out: hFindFile=0x381c40) returned 1 [0059.147] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Google\\Chrome\\Application\\58.0.3029.110\\Locales", nBufferLength=0x105, lpBuffer=0x31e1d4, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Google\\Chrome\\Application\\58.0.3029.110\\Locales", lpFilePart=0x0) returned 0x46 [0059.147] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Google\\Chrome\\Application\\58.0.3029.110\\Locales\\", nBufferLength=0x105, lpBuffer=0x31e1a8, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Google\\Chrome\\Application\\58.0.3029.110\\Locales\\", lpFilePart=0x0) returned 0x47 [0059.147] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Google\\Chrome\\Application\\58.0.3029.110\\Locales\\*", lpFindFileData=0x31e3f4 | out: lpFindFileData=0x31e3f4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7d78b680, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x7d86fec0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x7d86fec0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x381c40 [0059.148] FindClose (in: hFindFile=0x381c40 | out: hFindFile=0x381c40) returned 1 [0059.149] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Google\\Chrome\\Application\\58.0.3029.110\\VisualElements", nBufferLength=0x105, lpBuffer=0x31e1d4, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Google\\Chrome\\Application\\58.0.3029.110\\VisualElements", lpFilePart=0x0) returned 0x4d [0059.149] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Google\\Chrome\\Application\\58.0.3029.110\\VisualElements\\", nBufferLength=0x105, lpBuffer=0x31e1a8, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Google\\Chrome\\Application\\58.0.3029.110\\VisualElements\\", lpFilePart=0x0) returned 0x4e [0059.149] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Google\\Chrome\\Application\\58.0.3029.110\\VisualElements\\*", lpFindFileData=0x31e3f4 | out: lpFindFileData=0x31e3f4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7d78b680, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x7d9a09c0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x7d9a09c0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x381c40 [0059.150] FindClose (in: hFindFile=0x381c40 | out: hFindFile=0x381c40) returned 1 [0059.151] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Google\\Chrome\\Application\\58.0.3029.110\\VisualElements", nBufferLength=0x105, lpBuffer=0x31e1d4, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Google\\Chrome\\Application\\58.0.3029.110\\VisualElements", lpFilePart=0x0) returned 0x4d [0059.151] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Google\\Chrome\\Application\\58.0.3029.110\\VisualElements\\", nBufferLength=0x105, lpBuffer=0x31e1a8, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Google\\Chrome\\Application\\58.0.3029.110\\VisualElements\\", lpFilePart=0x0) returned 0x4e [0059.151] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Google\\Chrome\\Application\\58.0.3029.110\\VisualElements\\*", lpFindFileData=0x31e3f4 | out: lpFindFileData=0x31e3f4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7d78b680, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x7d9a09c0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x7d9a09c0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x381c40 [0059.152] FindClose (in: hFindFile=0x381c40 | out: hFindFile=0x381c40) returned 1 [0059.153] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Google\\Chrome\\Application\\58.0.3029.110\\VisualElements\\logo.png", nBufferLength=0x105, lpBuffer=0x31e0a4, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Google\\Chrome\\Application\\58.0.3029.110\\VisualElements\\logo.png", lpFilePart=0x0) returned 0x56 [0059.153] CreateFileW (lpFileName="C:\\Program Files (x86)\\Google\\Chrome\\Application\\58.0.3029.110\\VisualElements\\logo.png" (normalized: "c:\\program files (x86)\\google\\chrome\\application\\58.0.3029.110\\visualelements\\logo.png"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x274 [0059.154] GetFileType (hFile=0x274) returned 0x1 [0059.154] GetFileType (hFile=0x274) returned 0x1 [0059.154] GetFileSize (in: hFile=0x274, lpFileSizeHigh=0x31e6a0 | out: lpFileSizeHigh=0x31e6a0*=0x0) returned 0x442a [0059.154] ReadFile (in: hFile=0x274, lpBuffer=0x2794328, nNumberOfBytesToRead=0x442a, lpNumberOfBytesRead=0x31e64c, lpOverlapped=0x0 | out: lpBuffer=0x2794328*, lpNumberOfBytesRead=0x31e64c*=0x442a, lpOverlapped=0x0) returned 1 [0059.169] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Google\\Chrome\\Application\\58.0.3029.110\\VisualElements\\logo.png", nBufferLength=0x105, lpBuffer=0x31e090, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Google\\Chrome\\Application\\58.0.3029.110\\VisualElements\\logo.png", lpFilePart=0x0) returned 0x56 [0059.169] CreateFileW (lpFileName="C:\\Program Files (x86)\\Google\\Chrome\\Application\\58.0.3029.110\\VisualElements\\logo.png" (normalized: "c:\\program files (x86)\\google\\chrome\\application\\58.0.3029.110\\visualelements\\logo.png"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x274 [0059.170] GetFileType (hFile=0x274) returned 0x1 [0059.170] GetFileType (hFile=0x274) returned 0x1 [0059.170] WriteFile (in: hFile=0x274, lpBuffer=0x27f6600*, nNumberOfBytesToWrite=0x4430, lpNumberOfBytesWritten=0x31e640, lpOverlapped=0x0 | out: lpBuffer=0x27f6600*, lpNumberOfBytesWritten=0x31e640*=0x4430, lpOverlapped=0x0) returned 1 [0059.172] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Google\\Chrome\\Application\\58.0.3029.110\\VisualElements\\logo.png", nBufferLength=0x105, lpBuffer=0x31e1c4, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Google\\Chrome\\Application\\58.0.3029.110\\VisualElements\\logo.png", lpFilePart=0x0) returned 0x56 [0059.172] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Google\\Chrome\\Application\\58.0.3029.110\\VisualElements\\logo.png", nBufferLength=0x105, lpBuffer=0x31e1c4, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Google\\Chrome\\Application\\58.0.3029.110\\VisualElements\\logo.png", lpFilePart=0x0) returned 0x56 [0059.172] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Google\\Chrome\\Application\\58.0.3029.110\\VisualElements\\logo.png" (normalized: "c:\\program files (x86)\\google\\chrome\\application\\58.0.3029.110\\visualelements\\logo.png"), fInfoLevelId=0x0, lpFileInformation=0x31e6a0 | out: lpFileInformation=0x31e6a0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7d9a09c0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x7d9a09c0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x6b9c460, ftLastWriteTime.dwHighDateTime=0x1d6eb7f, nFileSizeHigh=0x0, nFileSizeLow=0x4430)) returned 1 [0059.172] MoveFileW (lpExistingFileName="C:\\Program Files (x86)\\Google\\Chrome\\Application\\58.0.3029.110\\VisualElements\\logo.png" (normalized: "c:\\program files (x86)\\google\\chrome\\application\\58.0.3029.110\\visualelements\\logo.png"), lpNewFileName="C:\\Program Files (x86)\\Google\\Chrome\\Application\\58.0.3029.110\\VisualElements\\logo.png" (normalized: "c:\\program files (x86)\\google\\chrome\\application\\58.0.3029.110\\visualelements\\logo.png")) returned 1 [0059.172] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Google\\Chrome\\Application\\58.0.3029.110\\VisualElements\\logocanary.png", nBufferLength=0x105, lpBuffer=0x31e0a4, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Google\\Chrome\\Application\\58.0.3029.110\\VisualElements\\logocanary.png", lpFilePart=0x0) returned 0x5c [0059.173] CreateFileW (lpFileName="C:\\Program Files (x86)\\Google\\Chrome\\Application\\58.0.3029.110\\VisualElements\\logocanary.png" (normalized: "c:\\program files (x86)\\google\\chrome\\application\\58.0.3029.110\\visualelements\\logocanary.png"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x274 [0059.173] GetFileType (hFile=0x274) returned 0x1 [0059.173] GetFileType (hFile=0x274) returned 0x1 [0059.173] GetFileSize (in: hFile=0x274, lpFileSizeHigh=0x31e6a0 | out: lpFileSizeHigh=0x31e6a0*=0x0) returned 0x5741 [0059.173] ReadFile (in: hFile=0x274, lpBuffer=0x27fae54, nNumberOfBytesToRead=0x5741, lpNumberOfBytesRead=0x31e64c, lpOverlapped=0x0 | out: lpBuffer=0x27fae54*, lpNumberOfBytesRead=0x31e64c*=0x5741, lpOverlapped=0x0) returned 1 [0059.192] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Google\\Chrome\\Application\\58.0.3029.110\\VisualElements\\logocanary.png", nBufferLength=0x105, lpBuffer=0x31e090, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Google\\Chrome\\Application\\58.0.3029.110\\VisualElements\\logocanary.png", lpFilePart=0x0) returned 0x5c [0059.192] CreateFileW (lpFileName="C:\\Program Files (x86)\\Google\\Chrome\\Application\\58.0.3029.110\\VisualElements\\logocanary.png" (normalized: "c:\\program files (x86)\\google\\chrome\\application\\58.0.3029.110\\visualelements\\logocanary.png"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x274 [0059.193] GetFileType (hFile=0x274) returned 0x1 [0059.193] GetFileType (hFile=0x274) returned 0x1 [0059.193] WriteFile (in: hFile=0x274, lpBuffer=0x266b248*, nNumberOfBytesToWrite=0x5750, lpNumberOfBytesWritten=0x31e640, lpOverlapped=0x0 | out: lpBuffer=0x266b248*, lpNumberOfBytesWritten=0x31e640*=0x5750, lpOverlapped=0x0) returned 1 [0059.194] CloseHandle (hObject=0x274) returned 1 [0059.194] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Google\\Chrome\\Application\\58.0.3029.110\\VisualElements\\logocanary.png", nBufferLength=0x105, lpBuffer=0x31e1c4, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Google\\Chrome\\Application\\58.0.3029.110\\VisualElements\\logocanary.png", lpFilePart=0x0) returned 0x5c [0059.195] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Google\\Chrome\\Application\\58.0.3029.110\\VisualElements\\logocanary.png", nBufferLength=0x105, lpBuffer=0x31e1c4, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Google\\Chrome\\Application\\58.0.3029.110\\VisualElements\\logocanary.png", lpFilePart=0x0) returned 0x5c [0059.195] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Google\\Chrome\\Application\\58.0.3029.110\\VisualElements\\logocanary.png" (normalized: "c:\\program files (x86)\\google\\chrome\\application\\58.0.3029.110\\visualelements\\logocanary.png"), fInfoLevelId=0x0, lpFileInformation=0x31e6a0 | out: lpFileInformation=0x31e6a0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7d9a09c0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x7d9a09c0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x6bc25c0, ftLastWriteTime.dwHighDateTime=0x1d6eb7f, nFileSizeHigh=0x0, nFileSizeLow=0x5750)) returned 1 [0059.195] MoveFileW (lpExistingFileName="C:\\Program Files (x86)\\Google\\Chrome\\Application\\58.0.3029.110\\VisualElements\\logocanary.png" (normalized: "c:\\program files (x86)\\google\\chrome\\application\\58.0.3029.110\\visualelements\\logocanary.png"), lpNewFileName="C:\\Program Files (x86)\\Google\\Chrome\\Application\\58.0.3029.110\\VisualElements\\logocanary.png" (normalized: "c:\\program files (x86)\\google\\chrome\\application\\58.0.3029.110\\visualelements\\logocanary.png")) returned 1 [0059.195] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Google\\Chrome\\Application\\58.0.3029.110\\VisualElements\\smalllogo.png", nBufferLength=0x105, lpBuffer=0x31e0a4, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Google\\Chrome\\Application\\58.0.3029.110\\VisualElements\\smalllogo.png", lpFilePart=0x0) returned 0x5b [0059.195] CreateFileW (lpFileName="C:\\Program Files (x86)\\Google\\Chrome\\Application\\58.0.3029.110\\VisualElements\\smalllogo.png" (normalized: "c:\\program files (x86)\\google\\chrome\\application\\58.0.3029.110\\visualelements\\smalllogo.png"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x274 [0059.196] GetFileType (hFile=0x274) returned 0x1 [0059.196] GetFileType (hFile=0x274) returned 0x1 [0059.196] GetFileSize (in: hFile=0x274, lpFileSizeHigh=0x31e6a0 | out: lpFileSizeHigh=0x31e6a0*=0x0) returned 0x1ef3 [0059.196] ReadFile (in: hFile=0x274, lpBuffer=0x2670de4, nNumberOfBytesToRead=0x1ef3, lpNumberOfBytesRead=0x31e64c, lpOverlapped=0x0 | out: lpBuffer=0x2670de4*, lpNumberOfBytesRead=0x31e64c*=0x1ef3, lpOverlapped=0x0) returned 1 [0059.197] CloseHandle (hObject=0x274) returned 1 [0059.212] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Google\\Chrome\\Application\\58.0.3029.110\\VisualElements\\smalllogo.png", nBufferLength=0x105, lpBuffer=0x31e090, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Google\\Chrome\\Application\\58.0.3029.110\\VisualElements\\smalllogo.png", lpFilePart=0x0) returned 0x5b [0059.212] CreateFileW (lpFileName="C:\\Program Files (x86)\\Google\\Chrome\\Application\\58.0.3029.110\\VisualElements\\smalllogo.png" (normalized: "c:\\program files (x86)\\google\\chrome\\application\\58.0.3029.110\\visualelements\\smalllogo.png"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x274 [0059.213] GetFileType (hFile=0x274) returned 0x1 [0059.213] GetFileType (hFile=0x274) returned 0x1 [0059.213] WriteFile (in: hFile=0x274, lpBuffer=0x26c7828*, nNumberOfBytesToWrite=0x1f00, lpNumberOfBytesWritten=0x31e640, lpOverlapped=0x0 | out: lpBuffer=0x26c7828*, lpNumberOfBytesWritten=0x31e640*=0x1f00, lpOverlapped=0x0) returned 1 [0059.214] CloseHandle (hObject=0x274) returned 1 [0059.214] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Google\\Chrome\\Application\\58.0.3029.110\\VisualElements\\smalllogo.png", nBufferLength=0x105, lpBuffer=0x31e1c4, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Google\\Chrome\\Application\\58.0.3029.110\\VisualElements\\smalllogo.png", lpFilePart=0x0) returned 0x5b [0059.214] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Google\\Chrome\\Application\\58.0.3029.110\\VisualElements\\smalllogo.png", nBufferLength=0x105, lpBuffer=0x31e1c4, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Google\\Chrome\\Application\\58.0.3029.110\\VisualElements\\smalllogo.png", lpFilePart=0x0) returned 0x5b [0059.214] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Google\\Chrome\\Application\\58.0.3029.110\\VisualElements\\smalllogo.png" (normalized: "c:\\program files (x86)\\google\\chrome\\application\\58.0.3029.110\\visualelements\\smalllogo.png"), fInfoLevelId=0x0, lpFileInformation=0x31e6a0 | out: lpFileInformation=0x31e6a0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7d9a09c0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x7d9a09c0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x6be8720, ftLastWriteTime.dwHighDateTime=0x1d6eb7f, nFileSizeHigh=0x0, nFileSizeLow=0x1f00)) returned 1 [0059.214] MoveFileW (lpExistingFileName="C:\\Program Files (x86)\\Google\\Chrome\\Application\\58.0.3029.110\\VisualElements\\smalllogo.png" (normalized: "c:\\program files (x86)\\google\\chrome\\application\\58.0.3029.110\\visualelements\\smalllogo.png"), lpNewFileName="C:\\Program Files (x86)\\Google\\Chrome\\Application\\58.0.3029.110\\VisualElements\\smalllogo.png" (normalized: "c:\\program files (x86)\\google\\chrome\\application\\58.0.3029.110\\visualelements\\smalllogo.png")) returned 1 [0059.215] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Google\\Chrome\\Application\\58.0.3029.110\\VisualElements\\smalllogocanary.png", nBufferLength=0x105, lpBuffer=0x31e0a4, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Google\\Chrome\\Application\\58.0.3029.110\\VisualElements\\smalllogocanary.png", lpFilePart=0x0) returned 0x61 [0059.215] CreateFileW (lpFileName="C:\\Program Files (x86)\\Google\\Chrome\\Application\\58.0.3029.110\\VisualElements\\smalllogocanary.png" (normalized: "c:\\program files (x86)\\google\\chrome\\application\\58.0.3029.110\\visualelements\\smalllogocanary.png"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x274 [0059.215] GetFileType (hFile=0x274) returned 0x1 [0059.215] GetFileType (hFile=0x274) returned 0x1 [0059.215] GetFileSize (in: hFile=0x274, lpFileSizeHigh=0x31e6a0 | out: lpFileSizeHigh=0x31e6a0*=0x0) returned 0x1ea2 [0059.215] ReadFile (in: hFile=0x274, lpBuffer=0x26c9b7c, nNumberOfBytesToRead=0x1ea2, lpNumberOfBytesRead=0x31e64c, lpOverlapped=0x0 | out: lpBuffer=0x26c9b7c*, lpNumberOfBytesRead=0x31e64c*=0x1ea2, lpOverlapped=0x0) returned 1 [0059.216] CloseHandle (hObject=0x274) returned 1 [0059.230] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Google\\Chrome\\Application\\58.0.3029.110\\VisualElements\\smalllogocanary.png", nBufferLength=0x105, lpBuffer=0x31e090, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Google\\Chrome\\Application\\58.0.3029.110\\VisualElements\\smalllogocanary.png", lpFilePart=0x0) returned 0x61 [0059.230] CreateFileW (lpFileName="C:\\Program Files (x86)\\Google\\Chrome\\Application\\58.0.3029.110\\VisualElements\\smalllogocanary.png" (normalized: "c:\\program files (x86)\\google\\chrome\\application\\58.0.3029.110\\visualelements\\smalllogocanary.png"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x274 [0059.231] GetFileType (hFile=0x274) returned 0x1 [0059.231] GetFileType (hFile=0x274) returned 0x1 [0059.231] WriteFile (in: hFile=0x274, lpBuffer=0x27202d4*, nNumberOfBytesToWrite=0x1eb0, lpNumberOfBytesWritten=0x31e640, lpOverlapped=0x0 | out: lpBuffer=0x27202d4*, lpNumberOfBytesWritten=0x31e640*=0x1eb0, lpOverlapped=0x0) returned 1 [0059.232] CloseHandle (hObject=0x274) returned 1 [0059.232] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Google\\Chrome\\Application\\58.0.3029.110\\VisualElements\\smalllogocanary.png", nBufferLength=0x105, lpBuffer=0x31e1c4, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Google\\Chrome\\Application\\58.0.3029.110\\VisualElements\\smalllogocanary.png", lpFilePart=0x0) returned 0x61 [0059.232] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Google\\Chrome\\Application\\58.0.3029.110\\VisualElements\\smalllogocanary.png", nBufferLength=0x105, lpBuffer=0x31e1c4, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Google\\Chrome\\Application\\58.0.3029.110\\VisualElements\\smalllogocanary.png", lpFilePart=0x0) returned 0x61 [0059.232] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Google\\Chrome\\Application\\58.0.3029.110\\VisualElements\\smalllogocanary.png" (normalized: "c:\\program files (x86)\\google\\chrome\\application\\58.0.3029.110\\visualelements\\smalllogocanary.png"), fInfoLevelId=0x0, lpFileInformation=0x31e6a0 | out: lpFileInformation=0x31e6a0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7d9a09c0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x7d9a09c0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x6c0e880, ftLastWriteTime.dwHighDateTime=0x1d6eb7f, nFileSizeHigh=0x0, nFileSizeLow=0x1eb0)) returned 1 [0059.232] MoveFileW (lpExistingFileName="C:\\Program Files (x86)\\Google\\Chrome\\Application\\58.0.3029.110\\VisualElements\\smalllogocanary.png" (normalized: "c:\\program files (x86)\\google\\chrome\\application\\58.0.3029.110\\visualelements\\smalllogocanary.png"), lpNewFileName="C:\\Program Files (x86)\\Google\\Chrome\\Application\\58.0.3029.110\\VisualElements\\smalllogocanary.png" (normalized: "c:\\program files (x86)\\google\\chrome\\application\\58.0.3029.110\\visualelements\\smalllogocanary.png")) returned 1 [0059.232] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Google\\Chrome\\Application\\58.0.3029.110\\WidevineCdm", nBufferLength=0x105, lpBuffer=0x31e1d4, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Google\\Chrome\\Application\\58.0.3029.110\\WidevineCdm", lpFilePart=0x0) returned 0x4a [0059.233] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Google\\Chrome\\Application\\58.0.3029.110\\WidevineCdm\\", nBufferLength=0x105, lpBuffer=0x31e1a8, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Google\\Chrome\\Application\\58.0.3029.110\\WidevineCdm\\", lpFilePart=0x0) returned 0x4b [0059.233] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Google\\Chrome\\Application\\58.0.3029.110\\WidevineCdm\\*", lpFindFileData=0x31e3f4 | out: lpFindFileData=0x31e3f4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7d78b680, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x7d9a09c0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x7d9a09c0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x381d40 [0059.233] FindNextFileW (in: hFindFile=0x381d40, lpFindFileData=0x31e404 | out: lpFindFileData=0x31e404*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7d78b680, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x7d9a09c0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x7d9a09c0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0059.243] FindNextFileW (in: hFindFile=0x381d40, lpFindFileData=0x31e404 | out: lpFindFileData=0x31e404*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7d9a09c0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x7d9a09c0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0xff3db415, ftLastWriteTime.dwHighDateTime=0x1d2c8a2, nFileSizeHigh=0x0, nFileSizeLow=0x3b6, dwReserved0=0x0, dwReserved1=0x0, cFileName="manifest.json", cAlternateFileName="MANIFE~1.JSO")) returned 1 [0059.243] FindNextFileW (in: hFindFile=0x381d40, lpFindFileData=0x31e404 | out: lpFindFileData=0x31e404*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7d78b680, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x7d78b680, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x7d78b680, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="_platform_specific", cAlternateFileName="_PLATF~1")) returned 1 [0059.243] FindNextFileW (in: hFindFile=0x381d40, lpFindFileData=0x31e404 | out: lpFindFileData=0x31e404*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7d78b680, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x7d78b680, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x7d78b680, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="_platform_specific", cAlternateFileName="_PLATF~1")) returned 0 [0059.243] FindClose (in: hFindFile=0x381d40 | out: hFindFile=0x381d40) returned 1 [0059.243] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e68c) returned 1 [0059.243] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e698) returned 1 [0059.243] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e6cc) returned 1 [0059.243] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Google\\Chrome\\Application\\58.0.3029.110\\WidevineCdm", nBufferLength=0x105, lpBuffer=0x31e1d4, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Google\\Chrome\\Application\\58.0.3029.110\\WidevineCdm", lpFilePart=0x0) returned 0x4a [0059.244] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Google\\Chrome\\Application\\58.0.3029.110\\WidevineCdm\\", nBufferLength=0x105, lpBuffer=0x31e1a8, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Google\\Chrome\\Application\\58.0.3029.110\\WidevineCdm\\", lpFilePart=0x0) returned 0x4b [0059.244] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Google\\Chrome\\Application\\58.0.3029.110\\WidevineCdm\\*", lpFindFileData=0x31e3f4 | out: lpFindFileData=0x31e3f4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7d78b680, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x7d9a09c0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x7d9a09c0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x381d40 [0059.244] FindNextFileW (in: hFindFile=0x381d40, lpFindFileData=0x31e404 | out: lpFindFileData=0x31e404*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7d78b680, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x7d9a09c0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x7d9a09c0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0059.244] FindNextFileW (in: hFindFile=0x381d40, lpFindFileData=0x31e404 | out: lpFindFileData=0x31e404*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7d9a09c0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x7d9a09c0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0xff3db415, ftLastWriteTime.dwHighDateTime=0x1d2c8a2, nFileSizeHigh=0x0, nFileSizeLow=0x3b6, dwReserved0=0x0, dwReserved1=0x0, cFileName="manifest.json", cAlternateFileName="MANIFE~1.JSO")) returned 1 [0059.244] FindNextFileW (in: hFindFile=0x381d40, lpFindFileData=0x31e404 | out: lpFindFileData=0x31e404*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7d78b680, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x7d78b680, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x7d78b680, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="_platform_specific", cAlternateFileName="_PLATF~1")) returned 1 [0059.244] FindNextFileW (in: hFindFile=0x381d40, lpFindFileData=0x31e404 | out: lpFindFileData=0x31e404*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0059.244] FindClose (in: hFindFile=0x381d40 | out: hFindFile=0x381d40) returned 1 [0059.244] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e68c) returned 1 [0059.245] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e698) returned 1 [0059.245] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e654) returned 1 [0059.245] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Google\\Chrome\\Application\\58.0.3029.110\\WidevineCdm\\_platform_specific", nBufferLength=0x105, lpBuffer=0x31e15c, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Google\\Chrome\\Application\\58.0.3029.110\\WidevineCdm\\_platform_specific", lpFilePart=0x0) returned 0x5d [0059.245] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Google\\Chrome\\Application\\58.0.3029.110\\WidevineCdm\\_platform_specific\\", nBufferLength=0x105, lpBuffer=0x31e130, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Google\\Chrome\\Application\\58.0.3029.110\\WidevineCdm\\_platform_specific\\", lpFilePart=0x0) returned 0x5e [0059.245] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Google\\Chrome\\Application\\58.0.3029.110\\WidevineCdm\\_platform_specific\\*", lpFindFileData=0x31e37c | out: lpFindFileData=0x31e37c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7d78b680, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x7d78b680, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x7d78b680, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x381d40 [0059.245] FindNextFileW (in: hFindFile=0x381d40, lpFindFileData=0x31e38c | out: lpFindFileData=0x31e38c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7d78b680, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x7d78b680, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x7d78b680, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0059.245] FindNextFileW (in: hFindFile=0x381d40, lpFindFileData=0x31e38c | out: lpFindFileData=0x31e38c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7d78b680, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x7ded59e0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x7ded59e0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="win_x64", cAlternateFileName="")) returned 1 [0059.245] FindNextFileW (in: hFindFile=0x381d40, lpFindFileData=0x31e38c | out: lpFindFileData=0x31e38c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7d78b680, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x7ded59e0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x7ded59e0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="win_x64", cAlternateFileName="")) returned 0 [0059.245] FindClose (in: hFindFile=0x381d40 | out: hFindFile=0x381d40) returned 1 [0059.246] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e614) returned 1 [0059.246] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e620) returned 1 [0059.246] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e654) returned 1 [0059.246] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Google\\Chrome\\Application\\58.0.3029.110\\WidevineCdm\\_platform_specific", nBufferLength=0x105, lpBuffer=0x31e15c, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Google\\Chrome\\Application\\58.0.3029.110\\WidevineCdm\\_platform_specific", lpFilePart=0x0) returned 0x5d [0059.246] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Google\\Chrome\\Application\\58.0.3029.110\\WidevineCdm\\_platform_specific\\", nBufferLength=0x105, lpBuffer=0x31e130, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Google\\Chrome\\Application\\58.0.3029.110\\WidevineCdm\\_platform_specific\\", lpFilePart=0x0) returned 0x5e [0059.246] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Google\\Chrome\\Application\\58.0.3029.110\\WidevineCdm\\_platform_specific\\*", lpFindFileData=0x31e37c | out: lpFindFileData=0x31e37c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7d78b680, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x7d78b680, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x7d78b680, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x381d40 [0059.246] FindNextFileW (in: hFindFile=0x381d40, lpFindFileData=0x31e38c | out: lpFindFileData=0x31e38c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7d78b680, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x7d78b680, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x7d78b680, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0059.246] FindNextFileW (in: hFindFile=0x381d40, lpFindFileData=0x31e38c | out: lpFindFileData=0x31e38c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7d78b680, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x7ded59e0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x7ded59e0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="win_x64", cAlternateFileName="")) returned 1 [0059.246] FindNextFileW (in: hFindFile=0x381d40, lpFindFileData=0x31e38c | out: lpFindFileData=0x31e38c*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0059.246] FindClose (in: hFindFile=0x381d40 | out: hFindFile=0x381d40) returned 1 [0059.246] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e614) returned 1 [0059.246] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e620) returned 1 [0059.247] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e5dc) returned 1 [0059.247] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Google\\Chrome\\Application\\58.0.3029.110\\WidevineCdm\\_platform_specific\\win_x64", nBufferLength=0x105, lpBuffer=0x31e0e4, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Google\\Chrome\\Application\\58.0.3029.110\\WidevineCdm\\_platform_specific\\win_x64", lpFilePart=0x0) returned 0x65 [0059.247] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Google\\Chrome\\Application\\58.0.3029.110\\WidevineCdm\\_platform_specific\\win_x64\\", nBufferLength=0x105, lpBuffer=0x31e0b8, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Google\\Chrome\\Application\\58.0.3029.110\\WidevineCdm\\_platform_specific\\win_x64\\", lpFilePart=0x0) returned 0x66 [0059.247] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Google\\Chrome\\Application\\58.0.3029.110\\WidevineCdm\\_platform_specific\\win_x64\\*", lpFindFileData=0x31e304 | out: lpFindFileData=0x31e304*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7d78b680, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x7ded59e0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x7ded59e0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x381d40 [0059.248] FindNextFileW (in: hFindFile=0x381d40, lpFindFileData=0x31e314 | out: lpFindFileData=0x31e314*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7d78b680, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x7ded59e0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x7ded59e0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0059.248] FindNextFileW (in: hFindFile=0x381d40, lpFindFileData=0x31e314 | out: lpFindFileData=0x31e314*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7d9a09c0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x7d9a09c0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0xff57cc70, ftLastWriteTime.dwHighDateTime=0x1d2c8a2, nFileSizeHigh=0x0, nFileSizeLow=0x440df8, dwReserved0=0x0, dwReserved1=0x0, cFileName="widevinecdm.dll", cAlternateFileName="WIDEVI~1.DLL")) returned 1 [0059.249] FindNextFileW (in: hFindFile=0x381d40, lpFindFileData=0x31e314 | out: lpFindFileData=0x31e314*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7d9c6b20, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x7d9c6b20, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0xff588fc5, ftLastWriteTime.dwHighDateTime=0x1d2c8a2, nFileSizeHigh=0x0, nFileSizeLow=0x665, dwReserved0=0x0, dwReserved1=0x0, cFileName="widevinecdm.dll.sig", cAlternateFileName="WIDEVI~1.SIG")) returned 1 [0059.249] FindNextFileW (in: hFindFile=0x381d40, lpFindFileData=0x31e314 | out: lpFindFileData=0x31e314*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7ded59e0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x7ded59e0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x77b158ce, ftLastWriteTime.dwHighDateTime=0x1d2c8a4, nFileSizeHigh=0x0, nFileSizeLow=0x43b58, dwReserved0=0x0, dwReserved1=0x0, cFileName="widevinecdmadapter.dll", cAlternateFileName="WIDEVI~2.DLL")) returned 1 [0059.249] FindNextFileW (in: hFindFile=0x381d40, lpFindFileData=0x31e314 | out: lpFindFileData=0x31e314*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7ded59e0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x7ded59e0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x77c6cdf8, ftLastWriteTime.dwHighDateTime=0x1d2c8a4, nFileSizeHigh=0x0, nFileSizeLow=0x57f, dwReserved0=0x0, dwReserved1=0x0, cFileName="widevinecdmadapter.dll.sig", cAlternateFileName="WIDEVI~2.SIG")) returned 1 [0059.249] FindNextFileW (in: hFindFile=0x381d40, lpFindFileData=0x31e314 | out: lpFindFileData=0x31e314*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0059.249] FindClose (in: hFindFile=0x381d40 | out: hFindFile=0x381d40) returned 1 [0059.250] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e59c) returned 1 [0059.250] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e5a8) returned 1 [0059.250] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e5dc) returned 1 [0059.250] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Google\\Chrome\\Application\\58.0.3029.110\\WidevineCdm\\_platform_specific\\win_x64", nBufferLength=0x105, lpBuffer=0x31e0e4, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Google\\Chrome\\Application\\58.0.3029.110\\WidevineCdm\\_platform_specific\\win_x64", lpFilePart=0x0) returned 0x65 [0059.250] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Google\\Chrome\\Application\\58.0.3029.110\\WidevineCdm\\_platform_specific\\win_x64\\", nBufferLength=0x105, lpBuffer=0x31e0b8, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Google\\Chrome\\Application\\58.0.3029.110\\WidevineCdm\\_platform_specific\\win_x64\\", lpFilePart=0x0) returned 0x66 [0059.250] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Google\\Chrome\\Application\\58.0.3029.110\\WidevineCdm\\_platform_specific\\win_x64\\*", lpFindFileData=0x31e304 | out: lpFindFileData=0x31e304*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7d78b680, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x7ded59e0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x7ded59e0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x381d40 [0059.251] FindNextFileW (in: hFindFile=0x381d40, lpFindFileData=0x31e314 | out: lpFindFileData=0x31e314*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7d78b680, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x7ded59e0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x7ded59e0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0059.251] FindNextFileW (in: hFindFile=0x381d40, lpFindFileData=0x31e314 | out: lpFindFileData=0x31e314*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7d9a09c0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x7d9a09c0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0xff57cc70, ftLastWriteTime.dwHighDateTime=0x1d2c8a2, nFileSizeHigh=0x0, nFileSizeLow=0x440df8, dwReserved0=0x0, dwReserved1=0x0, cFileName="widevinecdm.dll", cAlternateFileName="WIDEVI~1.DLL")) returned 1 [0059.251] FindNextFileW (in: hFindFile=0x381d40, lpFindFileData=0x31e314 | out: lpFindFileData=0x31e314*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7d9c6b20, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x7d9c6b20, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0xff588fc5, ftLastWriteTime.dwHighDateTime=0x1d2c8a2, nFileSizeHigh=0x0, nFileSizeLow=0x665, dwReserved0=0x0, dwReserved1=0x0, cFileName="widevinecdm.dll.sig", cAlternateFileName="WIDEVI~1.SIG")) returned 1 [0059.251] FindNextFileW (in: hFindFile=0x381d40, lpFindFileData=0x31e314 | out: lpFindFileData=0x31e314*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7ded59e0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x7ded59e0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x77b158ce, ftLastWriteTime.dwHighDateTime=0x1d2c8a4, nFileSizeHigh=0x0, nFileSizeLow=0x43b58, dwReserved0=0x0, dwReserved1=0x0, cFileName="widevinecdmadapter.dll", cAlternateFileName="WIDEVI~2.DLL")) returned 1 [0059.252] FindNextFileW (in: hFindFile=0x381d40, lpFindFileData=0x31e314 | out: lpFindFileData=0x31e314*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7ded59e0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x7ded59e0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x77c6cdf8, ftLastWriteTime.dwHighDateTime=0x1d2c8a4, nFileSizeHigh=0x0, nFileSizeLow=0x57f, dwReserved0=0x0, dwReserved1=0x0, cFileName="widevinecdmadapter.dll.sig", cAlternateFileName="WIDEVI~2.SIG")) returned 1 [0059.252] FindNextFileW (in: hFindFile=0x381d40, lpFindFileData=0x31e314 | out: lpFindFileData=0x31e314*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7ded59e0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x7ded59e0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x77c6cdf8, ftLastWriteTime.dwHighDateTime=0x1d2c8a4, nFileSizeHigh=0x0, nFileSizeLow=0x57f, dwReserved0=0x0, dwReserved1=0x0, cFileName="widevinecdmadapter.dll.sig", cAlternateFileName="WIDEVI~2.SIG")) returned 0 [0059.252] FindClose (in: hFindFile=0x381d40 | out: hFindFile=0x381d40) returned 1 [0059.253] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e59c) returned 1 [0059.253] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e5a8) returned 1 [0059.253] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e744) returned 1 [0059.253] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Google\\Chrome\\Application\\SetupMetrics", nBufferLength=0x105, lpBuffer=0x31e24c, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Google\\Chrome\\Application\\SetupMetrics", lpFilePart=0x0) returned 0x3d [0059.253] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Google\\Chrome\\Application\\SetupMetrics\\", nBufferLength=0x105, lpBuffer=0x31e220, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Google\\Chrome\\Application\\SetupMetrics\\", lpFilePart=0x0) returned 0x3e [0059.253] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Google\\Chrome\\Application\\SetupMetrics\\*", lpFindFileData=0x31e46c | out: lpFindFileData=0x31e46c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7ded59e0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x7f252e00, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x7f252e00, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x381d40 [0059.253] FindNextFileW (in: hFindFile=0x381d40, lpFindFileData=0x31e47c | out: lpFindFileData=0x31e47c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7ded59e0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x7f252e00, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x7f252e00, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0059.253] FindNextFileW (in: hFindFile=0x381d40, lpFindFileData=0x31e47c | out: lpFindFileData=0x31e47c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7e110e80, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x7e110e80, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x7e110e80, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x1ab8, dwReserved0=0x0, dwReserved1=0x0, cFileName="20170605115313.pma", cAlternateFileName="201706~1.PMA")) returned 1 [0059.253] FindNextFileW (in: hFindFile=0x381d40, lpFindFileData=0x31e47c | out: lpFindFileData=0x31e47c*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0059.254] FindClose (in: hFindFile=0x381d40 | out: hFindFile=0x381d40) returned 1 [0059.254] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e704) returned 1 [0059.254] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e710) returned 1 [0059.254] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e744) returned 1 [0059.254] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Google\\Chrome\\Application\\SetupMetrics", nBufferLength=0x105, lpBuffer=0x31e24c, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Google\\Chrome\\Application\\SetupMetrics", lpFilePart=0x0) returned 0x3d [0059.254] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Google\\Chrome\\Application\\SetupMetrics\\", nBufferLength=0x105, lpBuffer=0x31e220, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Google\\Chrome\\Application\\SetupMetrics\\", lpFilePart=0x0) returned 0x3e [0059.254] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Google\\Chrome\\Application\\SetupMetrics\\*", lpFindFileData=0x31e46c | out: lpFindFileData=0x31e46c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7ded59e0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x7f252e00, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x7f252e00, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x381d40 [0059.254] FindNextFileW (in: hFindFile=0x381d40, lpFindFileData=0x31e47c | out: lpFindFileData=0x31e47c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7ded59e0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x7f252e00, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x7f252e00, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0059.254] FindNextFileW (in: hFindFile=0x381d40, lpFindFileData=0x31e47c | out: lpFindFileData=0x31e47c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7e110e80, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x7e110e80, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x7e110e80, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x1ab8, dwReserved0=0x0, dwReserved1=0x0, cFileName="20170605115313.pma", cAlternateFileName="201706~1.PMA")) returned 1 [0059.254] FindNextFileW (in: hFindFile=0x381d40, lpFindFileData=0x31e47c | out: lpFindFileData=0x31e47c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7e110e80, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x7e110e80, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x7e110e80, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x1ab8, dwReserved0=0x0, dwReserved1=0x0, cFileName="20170605115313.pma", cAlternateFileName="201706~1.PMA")) returned 0 [0059.255] FindClose (in: hFindFile=0x381d40 | out: hFindFile=0x381d40) returned 1 [0059.255] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e704) returned 1 [0059.255] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e710) returned 1 [0059.255] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e834) returned 1 [0059.255] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Google\\CrashReports", nBufferLength=0x105, lpBuffer=0x31e33c, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Google\\CrashReports", lpFilePart=0x0) returned 0x2a [0059.255] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Google\\CrashReports\\", nBufferLength=0x105, lpBuffer=0x31e310, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Google\\CrashReports\\", lpFilePart=0x0) returned 0x2b [0059.255] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Google\\CrashReports\\*", lpFindFileData=0x31e55c | out: lpFindFileData=0x31e55c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x6c82ea80, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x6c82ea80, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x6c82ea80, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x381d40 [0059.255] FindNextFileW (in: hFindFile=0x381d40, lpFindFileData=0x31e56c | out: lpFindFileData=0x31e56c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x6c82ea80, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x6c82ea80, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x6c82ea80, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0059.255] FindNextFileW (in: hFindFile=0x381d40, lpFindFileData=0x31e56c | out: lpFindFileData=0x31e56c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x6c82ea80, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x6c82ea80, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x6c82ea80, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 0 [0059.255] FindClose (in: hFindFile=0x381d40 | out: hFindFile=0x381d40) returned 1 [0059.256] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e7f4) returned 1 [0059.256] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e800) returned 1 [0059.256] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e834) returned 1 [0059.256] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Google\\CrashReports", nBufferLength=0x105, lpBuffer=0x31e33c, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Google\\CrashReports", lpFilePart=0x0) returned 0x2a [0059.256] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Google\\CrashReports\\", nBufferLength=0x105, lpBuffer=0x31e310, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Google\\CrashReports\\", lpFilePart=0x0) returned 0x2b [0059.256] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Google\\CrashReports\\*", lpFindFileData=0x31e55c | out: lpFindFileData=0x31e55c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x6c82ea80, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x6c82ea80, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x6c82ea80, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x381d40 [0059.256] FindNextFileW (in: hFindFile=0x381d40, lpFindFileData=0x31e56c | out: lpFindFileData=0x31e56c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x6c82ea80, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x6c82ea80, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x6c82ea80, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0059.256] FindNextFileW (in: hFindFile=0x381d40, lpFindFileData=0x31e56c | out: lpFindFileData=0x31e56c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x6c82ea80, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x6c82ea80, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x6c82ea80, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 0 [0059.256] FindClose (in: hFindFile=0x381d40 | out: hFindFile=0x381d40) returned 1 [0059.256] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e7f4) returned 1 [0059.256] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e800) returned 1 [0059.256] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e8ac) returned 1 [0059.256] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Internet Explorer", nBufferLength=0x105, lpBuffer=0x31e3b4, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Internet Explorer", lpFilePart=0x0) returned 0x28 [0059.257] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Internet Explorer\\", nBufferLength=0x105, lpBuffer=0x31e388, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Internet Explorer\\", lpFilePart=0x0) returned 0x29 [0059.257] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Internet Explorer\\*", lpFindFileData=0x31e5d4 | out: lpFindFileData=0x31e5d4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd8f7490, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xd9a06680, ftLastAccessTime.dwHighDateTime=0x1d5e82a, ftLastWriteTime.dwLowDateTime=0xd9a06680, ftLastWriteTime.dwHighDateTime=0x1d5e82a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x381d40 [0059.257] FindNextFileW (in: hFindFile=0x381d40, lpFindFileData=0x31e5e4 | out: lpFindFileData=0x31e5e4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd8f7490, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xd9a06680, ftLastAccessTime.dwHighDateTime=0x1d5e82a, ftLastWriteTime.dwLowDateTime=0xd9a06680, ftLastWriteTime.dwHighDateTime=0x1d5e82a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0059.257] FindNextFileW (in: hFindFile=0x381d40, lpFindFileData=0x31e5e4 | out: lpFindFileData=0x31e5e4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1ea40f84, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x228ba44f, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x1ea6723d, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="en-US", cAlternateFileName="")) returned 1 [0059.257] FindNextFileW (in: hFindFile=0x381d40, lpFindFileData=0x31e5e4 | out: lpFindFileData=0x31e5e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb2a37297, ftCreationTime.dwHighDateTime=0x1cb892b, ftLastAccessTime.dwLowDateTime=0xb2a37297, ftLastAccessTime.dwHighDateTime=0x1cb892b, ftLastWriteTime.dwLowDateTime=0xb2a5d3f7, ftLastWriteTime.dwHighDateTime=0x1cb892b, nFileSizeHigh=0x0, nFileSizeLow=0x23800, dwReserved0=0x0, dwReserved1=0x0, cFileName="ExtExport.exe", cAlternateFileName="")) returned 1 [0059.257] FindNextFileW (in: hFindFile=0x381d40, lpFindFileData=0x31e5e4 | out: lpFindFileData=0x31e5e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x65b96180, ftCreationTime.dwHighDateTime=0x1d55fcd, ftLastAccessTime.dwLowDateTime=0x526843d0, ftLastAccessTime.dwHighDateTime=0x1d5cb98, ftLastWriteTime.dwLowDateTime=0x526843d0, ftLastWriteTime.dwHighDateTime=0x1d5cb98, nFileSizeHigh=0x0, nFileSizeLow=0x13a00, dwReserved0=0x0, dwReserved1=0x0, cFileName="flashfxp.exe", cAlternateFileName="")) returned 1 [0059.257] FindNextFileW (in: hFindFile=0x381d40, lpFindFileData=0x31e5e4 | out: lpFindFileData=0x31e5e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2be033e8, ftCreationTime.dwHighDateTime=0x1ca0413, ftLastAccessTime.dwLowDateTime=0x2be033e8, ftLastAccessTime.dwHighDateTime=0x1ca0413, ftLastWriteTime.dwLowDateTime=0x90894420, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0xc600, dwReserved0=0x0, dwReserved1=0x0, cFileName="hmmapi.dll", cAlternateFileName="")) returned 1 [0059.257] FindNextFileW (in: hFindFile=0x381d40, lpFindFileData=0x31e5e4 | out: lpFindFileData=0x31e5e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd7f46f7c, ftCreationTime.dwHighDateTime=0x1c9ea10, ftLastAccessTime.dwLowDateTime=0xd7f46f7c, ftLastAccessTime.dwHighDateTime=0x1c9ea10, ftLastWriteTime.dwLowDateTime=0xd7f6d0dc, ftLastWriteTime.dwHighDateTime=0x1c9ea10, nFileSizeHigh=0x0, nFileSizeLow=0xa59, dwReserved0=0x0, dwReserved1=0x0, cFileName="ie8props.propdesc", cAlternateFileName="")) returned 1 [0059.258] FindNextFileW (in: hFindFile=0x381d40, lpFindFileData=0x31e5e4 | out: lpFindFileData=0x31e5e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb22549a9, ftCreationTime.dwHighDateTime=0x1cb892b, ftLastAccessTime.dwLowDateTime=0xb22549a9, ftLastAccessTime.dwHighDateTime=0x1cb892b, ftLastWriteTime.dwLowDateTime=0xb22a0c69, ftLastWriteTime.dwHighDateTime=0x1cb892b, nFileSizeHigh=0x0, nFileSizeLow=0x1e00, dwReserved0=0x0, dwReserved1=0x0, cFileName="iecompat.dll", cAlternateFileName="")) returned 1 [0059.258] FindNextFileW (in: hFindFile=0x381d40, lpFindFileData=0x31e5e4 | out: lpFindFileData=0x31e5e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb22ecf2a, ftCreationTime.dwHighDateTime=0x1cb892b, ftLastAccessTime.dwLowDateTime=0xb22ecf2a, ftLastAccessTime.dwHighDateTime=0x1cb892b, ftLastWriteTime.dwLowDateTime=0xb23391ea, ftLastWriteTime.dwHighDateTime=0x1cb892b, nFileSizeHigh=0x0, nFileSizeLow=0xd2000, dwReserved0=0x0, dwReserved1=0x0, cFileName="iedvtool.dll", cAlternateFileName="")) returned 1 [0059.258] FindNextFileW (in: hFindFile=0x381d40, lpFindFileData=0x31e5e4 | out: lpFindFileData=0x31e5e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb273d712, ftCreationTime.dwHighDateTime=0x1cb892b, ftLastAccessTime.dwLowDateTime=0xb273d712, ftLastAccessTime.dwHighDateTime=0x1cb892b, ftLastWriteTime.dwLowDateTime=0xb27fbdf3, ftLastWriteTime.dwHighDateTime=0x1cb892b, nFileSizeHigh=0x0, nFileSizeLow=0x5b200, dwReserved0=0x0, dwReserved1=0x0, cFileName="ieinstal.exe", cAlternateFileName="")) returned 1 [0059.258] FindNextFileW (in: hFindFile=0x381d40, lpFindFileData=0x31e5e4 | out: lpFindFileData=0x31e5e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb27a3bdc, ftCreationTime.dwHighDateTime=0x1ca0413, ftLastAccessTime.dwLowDateTime=0xb27a3bdc, ftLastAccessTime.dwHighDateTime=0x1ca0413, ftLastWriteTime.dwLowDateTime=0x6b1085f0, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x1c400, dwReserved0=0x0, dwReserved1=0x0, cFileName="ielowutil.exe", cAlternateFileName="")) returned 1 [0059.258] FindNextFileW (in: hFindFile=0x381d40, lpFindFileData=0x31e5e4 | out: lpFindFileData=0x31e5e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb23391ea, ftCreationTime.dwHighDateTime=0x1cb892b, ftLastAccessTime.dwLowDateTime=0xb23391ea, ftLastAccessTime.dwHighDateTime=0x1cb892b, ftLastWriteTime.dwLowDateTime=0xb23854ab, ftLastWriteTime.dwHighDateTime=0x1cb892b, nFileSizeHigh=0x0, nFileSizeLow=0x27e00, dwReserved0=0x0, dwReserved1=0x0, cFileName="ieproxy.dll", cAlternateFileName="")) returned 1 [0059.258] FindNextFileW (in: hFindFile=0x381d40, lpFindFileData=0x31e5e4 | out: lpFindFileData=0x31e5e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb27fbdf3, ftCreationTime.dwHighDateTime=0x1cb892b, ftLastAccessTime.dwLowDateTime=0xb27fbdf3, ftLastAccessTime.dwHighDateTime=0x1cb892b, ftLastWriteTime.dwLowDateTime=0xb27fbdf3, ftLastWriteTime.dwHighDateTime=0x1cb892b, nFileSizeHigh=0x0, nFileSizeLow=0x31000, dwReserved0=0x0, dwReserved1=0x0, cFileName="IEShims.dll", cAlternateFileName="")) returned 1 [0059.258] FindNextFileW (in: hFindFile=0x381d40, lpFindFileData=0x31e5e4 | out: lpFindFileData=0x31e5e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb2e87a7f, ftCreationTime.dwHighDateTime=0x1cb892b, ftLastAccessTime.dwLowDateTime=0xb2e87a7f, ftLastAccessTime.dwHighDateTime=0x1cb892b, ftLastWriteTime.dwLowDateTime=0xb2eadbdf, ftLastWriteTime.dwHighDateTime=0x1cb892b, nFileSizeHigh=0x0, nFileSizeLow=0xa4510, dwReserved0=0x0, dwReserved1=0x0, cFileName="iexplore.exe", cAlternateFileName="")) returned 1 [0059.258] FindNextFileW (in: hFindFile=0x381d40, lpFindFileData=0x31e5e4 | out: lpFindFileData=0x31e5e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb2a5d3f7, ftCreationTime.dwHighDateTime=0x1cb892b, ftLastAccessTime.dwLowDateTime=0xb2a5d3f7, ftLastAccessTime.dwHighDateTime=0x1cb892b, ftLastWriteTime.dwLowDateTime=0xb2aa96b8, ftLastWriteTime.dwHighDateTime=0x1cb892b, nFileSizeHigh=0x0, nFileSizeLow=0x80000, dwReserved0=0x0, dwReserved1=0x0, cFileName="jsdbgui.dll", cAlternateFileName="")) returned 1 [0059.259] FindNextFileW (in: hFindFile=0x381d40, lpFindFileData=0x31e5e4 | out: lpFindFileData=0x31e5e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb8d665b0, ftCreationTime.dwHighDateTime=0x1ca0413, ftLastAccessTime.dwLowDateTime=0xb8d665b0, ftLastAccessTime.dwHighDateTime=0x1ca0413, ftLastWriteTime.dwLowDateTime=0x97045ab0, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x1e000, dwReserved0=0x0, dwReserved1=0x0, cFileName="jsdebuggeride.dll", cAlternateFileName="")) returned 1 [0059.259] FindNextFileW (in: hFindFile=0x381d40, lpFindFileData=0x31e5e4 | out: lpFindFileData=0x31e5e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb8d8c70f, ftCreationTime.dwHighDateTime=0x1ca0413, ftLastAccessTime.dwLowDateTime=0xb8d8c70f, ftLastAccessTime.dwHighDateTime=0x1ca0413, ftLastWriteTime.dwLowDateTime=0x97045ab0, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x1d400, dwReserved0=0x0, dwReserved1=0x0, cFileName="JSProfilerCore.dll", cAlternateFileName="")) returned 1 [0059.259] FindNextFileW (in: hFindFile=0x381d40, lpFindFileData=0x31e5e4 | out: lpFindFileData=0x31e5e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb2aa96b8, ftCreationTime.dwHighDateTime=0x1cb892b, ftLastAccessTime.dwLowDateTime=0xb2aa96b8, ftLastAccessTime.dwHighDateTime=0x1cb892b, ftLastWriteTime.dwLowDateTime=0xb2acf818, ftLastWriteTime.dwHighDateTime=0x1cb892b, nFileSizeHigh=0x0, nFileSizeLow=0x56400, dwReserved0=0x0, dwReserved1=0x0, cFileName="jsprofilerui.dll", cAlternateFileName="")) returned 1 [0059.259] FindNextFileW (in: hFindFile=0x381d40, lpFindFileData=0x31e5e4 | out: lpFindFileData=0x31e5e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4239426f, ftCreationTime.dwHighDateTime=0x1ca0405, ftLastAccessTime.dwLowDateTime=0x4239426f, ftLastAccessTime.dwHighDateTime=0x1ca0405, ftLastWriteTime.dwLowDateTime=0x67fe631c, ftLastWriteTime.dwHighDateTime=0x1c9ea10, nFileSizeHigh=0x0, nFileSizeLow=0x40df8, dwReserved0=0x0, dwReserved1=0x0, cFileName="msdbg2.dll", cAlternateFileName="")) returned 1 [0059.259] FindNextFileW (in: hFindFile=0x381d40, lpFindFileData=0x31e5e4 | out: lpFindFileData=0x31e5e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x68b0ea3c, ftCreationTime.dwHighDateTime=0x1c9ea10, ftLastAccessTime.dwLowDateTime=0x68b0ea3c, ftLastAccessTime.dwHighDateTime=0x1c9ea10, ftLastWriteTime.dwLowDateTime=0x68b34b9c, ftLastWriteTime.dwHighDateTime=0x1c9ea10, nFileSizeHigh=0x0, nFileSizeLow=0x56df8, dwReserved0=0x0, dwReserved1=0x0, cFileName="pdm.dll", cAlternateFileName="")) returned 1 [0059.259] FindNextFileW (in: hFindFile=0x381d40, lpFindFileData=0x31e5e4 | out: lpFindFileData=0x31e5e4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8012b5d2, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x9bb8508b, ftLastAccessTime.dwHighDateTime=0x1cb892c, ftLastWriteTime.dwLowDateTime=0x9bb8508b, ftLastWriteTime.dwHighDateTime=0x1cb892c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="SIGNUP", cAlternateFileName="")) returned 1 [0059.259] FindNextFileW (in: hFindFile=0x381d40, lpFindFileData=0x31e5e4 | out: lpFindFileData=0x31e5e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8bc0b7dd, ftCreationTime.dwHighDateTime=0x1cb892b, ftLastAccessTime.dwLowDateTime=0x8bc0b7dd, ftLastAccessTime.dwHighDateTime=0x1cb892b, ftLastWriteTime.dwLowDateTime=0x8bc0b7dd, ftLastWriteTime.dwHighDateTime=0x1cb892b, nFileSizeHigh=0x0, nFileSizeLow=0x2e600, dwReserved0=0x0, dwReserved1=0x0, cFileName="sqmapi.dll", cAlternateFileName="")) returned 1 [0059.259] FindNextFileW (in: hFindFile=0x381d40, lpFindFileData=0x31e5e4 | out: lpFindFileData=0x31e5e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa76b8250, ftCreationTime.dwHighDateTime=0x1d5603d, ftLastAccessTime.dwLowDateTime=0xf0d58670, ftLastAccessTime.dwHighDateTime=0x1d5e436, ftLastWriteTime.dwLowDateTime=0xf0d58670, ftLastWriteTime.dwHighDateTime=0x1d5e436, nFileSizeHigh=0x0, nFileSizeLow=0x13a00, dwReserved0=0x0, dwReserved1=0x0, cFileName="thunderbird.exe", cAlternateFileName="THUNDE~1.EXE")) returned 1 [0059.260] FindNextFileW (in: hFindFile=0x381d40, lpFindFileData=0x31e5e4 | out: lpFindFileData=0x31e5e4*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0059.260] FindClose (in: hFindFile=0x381d40 | out: hFindFile=0x381d40) returned 1 [0059.260] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e86c) returned 1 [0059.260] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e878) returned 1 [0059.260] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e8ac) returned 1 [0059.260] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Internet Explorer", nBufferLength=0x105, lpBuffer=0x31e3b4, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Internet Explorer", lpFilePart=0x0) returned 0x28 [0059.260] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Internet Explorer\\", nBufferLength=0x105, lpBuffer=0x31e388, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Internet Explorer\\", lpFilePart=0x0) returned 0x29 [0059.260] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Internet Explorer\\*", lpFindFileData=0x31e5d4 | out: lpFindFileData=0x31e5d4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd8f7490, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xd9a06680, ftLastAccessTime.dwHighDateTime=0x1d5e82a, ftLastWriteTime.dwLowDateTime=0xd9a06680, ftLastWriteTime.dwHighDateTime=0x1d5e82a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x381d40 [0059.260] FindNextFileW (in: hFindFile=0x381d40, lpFindFileData=0x31e5e4 | out: lpFindFileData=0x31e5e4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd8f7490, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xd9a06680, ftLastAccessTime.dwHighDateTime=0x1d5e82a, ftLastWriteTime.dwLowDateTime=0xd9a06680, ftLastWriteTime.dwHighDateTime=0x1d5e82a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0059.260] FindNextFileW (in: hFindFile=0x381d40, lpFindFileData=0x31e5e4 | out: lpFindFileData=0x31e5e4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1ea40f84, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x228ba44f, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x1ea6723d, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="en-US", cAlternateFileName="")) returned 1 [0059.260] FindNextFileW (in: hFindFile=0x381d40, lpFindFileData=0x31e5e4 | out: lpFindFileData=0x31e5e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb2a37297, ftCreationTime.dwHighDateTime=0x1cb892b, ftLastAccessTime.dwLowDateTime=0xb2a37297, ftLastAccessTime.dwHighDateTime=0x1cb892b, ftLastWriteTime.dwLowDateTime=0xb2a5d3f7, ftLastWriteTime.dwHighDateTime=0x1cb892b, nFileSizeHigh=0x0, nFileSizeLow=0x23800, dwReserved0=0x0, dwReserved1=0x0, cFileName="ExtExport.exe", cAlternateFileName="")) returned 1 [0059.261] FindNextFileW (in: hFindFile=0x381d40, lpFindFileData=0x31e5e4 | out: lpFindFileData=0x31e5e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x65b96180, ftCreationTime.dwHighDateTime=0x1d55fcd, ftLastAccessTime.dwLowDateTime=0x526843d0, ftLastAccessTime.dwHighDateTime=0x1d5cb98, ftLastWriteTime.dwLowDateTime=0x526843d0, ftLastWriteTime.dwHighDateTime=0x1d5cb98, nFileSizeHigh=0x0, nFileSizeLow=0x13a00, dwReserved0=0x0, dwReserved1=0x0, cFileName="flashfxp.exe", cAlternateFileName="")) returned 1 [0059.261] FindNextFileW (in: hFindFile=0x381d40, lpFindFileData=0x31e5e4 | out: lpFindFileData=0x31e5e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2be033e8, ftCreationTime.dwHighDateTime=0x1ca0413, ftLastAccessTime.dwLowDateTime=0x2be033e8, ftLastAccessTime.dwHighDateTime=0x1ca0413, ftLastWriteTime.dwLowDateTime=0x90894420, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0xc600, dwReserved0=0x0, dwReserved1=0x0, cFileName="hmmapi.dll", cAlternateFileName="")) returned 1 [0059.261] FindNextFileW (in: hFindFile=0x381d40, lpFindFileData=0x31e5e4 | out: lpFindFileData=0x31e5e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd7f46f7c, ftCreationTime.dwHighDateTime=0x1c9ea10, ftLastAccessTime.dwLowDateTime=0xd7f46f7c, ftLastAccessTime.dwHighDateTime=0x1c9ea10, ftLastWriteTime.dwLowDateTime=0xd7f6d0dc, ftLastWriteTime.dwHighDateTime=0x1c9ea10, nFileSizeHigh=0x0, nFileSizeLow=0xa59, dwReserved0=0x0, dwReserved1=0x0, cFileName="ie8props.propdesc", cAlternateFileName="")) returned 1 [0059.261] FindNextFileW (in: hFindFile=0x381d40, lpFindFileData=0x31e5e4 | out: lpFindFileData=0x31e5e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb22549a9, ftCreationTime.dwHighDateTime=0x1cb892b, ftLastAccessTime.dwLowDateTime=0xb22549a9, ftLastAccessTime.dwHighDateTime=0x1cb892b, ftLastWriteTime.dwLowDateTime=0xb22a0c69, ftLastWriteTime.dwHighDateTime=0x1cb892b, nFileSizeHigh=0x0, nFileSizeLow=0x1e00, dwReserved0=0x0, dwReserved1=0x0, cFileName="iecompat.dll", cAlternateFileName="")) returned 1 [0059.261] FindNextFileW (in: hFindFile=0x381d40, lpFindFileData=0x31e5e4 | out: lpFindFileData=0x31e5e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb22ecf2a, ftCreationTime.dwHighDateTime=0x1cb892b, ftLastAccessTime.dwLowDateTime=0xb22ecf2a, ftLastAccessTime.dwHighDateTime=0x1cb892b, ftLastWriteTime.dwLowDateTime=0xb23391ea, ftLastWriteTime.dwHighDateTime=0x1cb892b, nFileSizeHigh=0x0, nFileSizeLow=0xd2000, dwReserved0=0x0, dwReserved1=0x0, cFileName="iedvtool.dll", cAlternateFileName="")) returned 1 [0059.261] FindNextFileW (in: hFindFile=0x381d40, lpFindFileData=0x31e5e4 | out: lpFindFileData=0x31e5e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb273d712, ftCreationTime.dwHighDateTime=0x1cb892b, ftLastAccessTime.dwLowDateTime=0xb273d712, ftLastAccessTime.dwHighDateTime=0x1cb892b, ftLastWriteTime.dwLowDateTime=0xb27fbdf3, ftLastWriteTime.dwHighDateTime=0x1cb892b, nFileSizeHigh=0x0, nFileSizeLow=0x5b200, dwReserved0=0x0, dwReserved1=0x0, cFileName="ieinstal.exe", cAlternateFileName="")) returned 1 [0059.261] FindNextFileW (in: hFindFile=0x381d40, lpFindFileData=0x31e5e4 | out: lpFindFileData=0x31e5e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb27a3bdc, ftCreationTime.dwHighDateTime=0x1ca0413, ftLastAccessTime.dwLowDateTime=0xb27a3bdc, ftLastAccessTime.dwHighDateTime=0x1ca0413, ftLastWriteTime.dwLowDateTime=0x6b1085f0, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x1c400, dwReserved0=0x0, dwReserved1=0x0, cFileName="ielowutil.exe", cAlternateFileName="")) returned 1 [0059.262] FindNextFileW (in: hFindFile=0x381d40, lpFindFileData=0x31e5e4 | out: lpFindFileData=0x31e5e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb23391ea, ftCreationTime.dwHighDateTime=0x1cb892b, ftLastAccessTime.dwLowDateTime=0xb23391ea, ftLastAccessTime.dwHighDateTime=0x1cb892b, ftLastWriteTime.dwLowDateTime=0xb23854ab, ftLastWriteTime.dwHighDateTime=0x1cb892b, nFileSizeHigh=0x0, nFileSizeLow=0x27e00, dwReserved0=0x0, dwReserved1=0x0, cFileName="ieproxy.dll", cAlternateFileName="")) returned 1 [0059.262] FindNextFileW (in: hFindFile=0x381d40, lpFindFileData=0x31e5e4 | out: lpFindFileData=0x31e5e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb27fbdf3, ftCreationTime.dwHighDateTime=0x1cb892b, ftLastAccessTime.dwLowDateTime=0xb27fbdf3, ftLastAccessTime.dwHighDateTime=0x1cb892b, ftLastWriteTime.dwLowDateTime=0xb27fbdf3, ftLastWriteTime.dwHighDateTime=0x1cb892b, nFileSizeHigh=0x0, nFileSizeLow=0x31000, dwReserved0=0x0, dwReserved1=0x0, cFileName="IEShims.dll", cAlternateFileName="")) returned 1 [0059.262] FindNextFileW (in: hFindFile=0x381d40, lpFindFileData=0x31e5e4 | out: lpFindFileData=0x31e5e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb2e87a7f, ftCreationTime.dwHighDateTime=0x1cb892b, ftLastAccessTime.dwLowDateTime=0xb2e87a7f, ftLastAccessTime.dwHighDateTime=0x1cb892b, ftLastWriteTime.dwLowDateTime=0xb2eadbdf, ftLastWriteTime.dwHighDateTime=0x1cb892b, nFileSizeHigh=0x0, nFileSizeLow=0xa4510, dwReserved0=0x0, dwReserved1=0x0, cFileName="iexplore.exe", cAlternateFileName="")) returned 1 [0059.262] FindNextFileW (in: hFindFile=0x381d40, lpFindFileData=0x31e5e4 | out: lpFindFileData=0x31e5e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb2a5d3f7, ftCreationTime.dwHighDateTime=0x1cb892b, ftLastAccessTime.dwLowDateTime=0xb2a5d3f7, ftLastAccessTime.dwHighDateTime=0x1cb892b, ftLastWriteTime.dwLowDateTime=0xb2aa96b8, ftLastWriteTime.dwHighDateTime=0x1cb892b, nFileSizeHigh=0x0, nFileSizeLow=0x80000, dwReserved0=0x0, dwReserved1=0x0, cFileName="jsdbgui.dll", cAlternateFileName="")) returned 1 [0059.262] FindNextFileW (in: hFindFile=0x381d40, lpFindFileData=0x31e5e4 | out: lpFindFileData=0x31e5e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb8d665b0, ftCreationTime.dwHighDateTime=0x1ca0413, ftLastAccessTime.dwLowDateTime=0xb8d665b0, ftLastAccessTime.dwHighDateTime=0x1ca0413, ftLastWriteTime.dwLowDateTime=0x97045ab0, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x1e000, dwReserved0=0x0, dwReserved1=0x0, cFileName="jsdebuggeride.dll", cAlternateFileName="")) returned 1 [0059.262] FindNextFileW (in: hFindFile=0x381d40, lpFindFileData=0x31e5e4 | out: lpFindFileData=0x31e5e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb8d8c70f, ftCreationTime.dwHighDateTime=0x1ca0413, ftLastAccessTime.dwLowDateTime=0xb8d8c70f, ftLastAccessTime.dwHighDateTime=0x1ca0413, ftLastWriteTime.dwLowDateTime=0x97045ab0, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x1d400, dwReserved0=0x0, dwReserved1=0x0, cFileName="JSProfilerCore.dll", cAlternateFileName="")) returned 1 [0059.262] FindNextFileW (in: hFindFile=0x381d40, lpFindFileData=0x31e5e4 | out: lpFindFileData=0x31e5e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb2aa96b8, ftCreationTime.dwHighDateTime=0x1cb892b, ftLastAccessTime.dwLowDateTime=0xb2aa96b8, ftLastAccessTime.dwHighDateTime=0x1cb892b, ftLastWriteTime.dwLowDateTime=0xb2acf818, ftLastWriteTime.dwHighDateTime=0x1cb892b, nFileSizeHigh=0x0, nFileSizeLow=0x56400, dwReserved0=0x0, dwReserved1=0x0, cFileName="jsprofilerui.dll", cAlternateFileName="")) returned 1 [0059.263] FindNextFileW (in: hFindFile=0x381d40, lpFindFileData=0x31e5e4 | out: lpFindFileData=0x31e5e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4239426f, ftCreationTime.dwHighDateTime=0x1ca0405, ftLastAccessTime.dwLowDateTime=0x4239426f, ftLastAccessTime.dwHighDateTime=0x1ca0405, ftLastWriteTime.dwLowDateTime=0x67fe631c, ftLastWriteTime.dwHighDateTime=0x1c9ea10, nFileSizeHigh=0x0, nFileSizeLow=0x40df8, dwReserved0=0x0, dwReserved1=0x0, cFileName="msdbg2.dll", cAlternateFileName="")) returned 1 [0059.263] FindNextFileW (in: hFindFile=0x381d40, lpFindFileData=0x31e5e4 | out: lpFindFileData=0x31e5e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x68b0ea3c, ftCreationTime.dwHighDateTime=0x1c9ea10, ftLastAccessTime.dwLowDateTime=0x68b0ea3c, ftLastAccessTime.dwHighDateTime=0x1c9ea10, ftLastWriteTime.dwLowDateTime=0x68b34b9c, ftLastWriteTime.dwHighDateTime=0x1c9ea10, nFileSizeHigh=0x0, nFileSizeLow=0x56df8, dwReserved0=0x0, dwReserved1=0x0, cFileName="pdm.dll", cAlternateFileName="")) returned 1 [0059.263] FindNextFileW (in: hFindFile=0x381d40, lpFindFileData=0x31e5e4 | out: lpFindFileData=0x31e5e4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8012b5d2, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x9bb8508b, ftLastAccessTime.dwHighDateTime=0x1cb892c, ftLastWriteTime.dwLowDateTime=0x9bb8508b, ftLastWriteTime.dwHighDateTime=0x1cb892c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="SIGNUP", cAlternateFileName="")) returned 1 [0059.263] FindNextFileW (in: hFindFile=0x381d40, lpFindFileData=0x31e5e4 | out: lpFindFileData=0x31e5e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8bc0b7dd, ftCreationTime.dwHighDateTime=0x1cb892b, ftLastAccessTime.dwLowDateTime=0x8bc0b7dd, ftLastAccessTime.dwHighDateTime=0x1cb892b, ftLastWriteTime.dwLowDateTime=0x8bc0b7dd, ftLastWriteTime.dwHighDateTime=0x1cb892b, nFileSizeHigh=0x0, nFileSizeLow=0x2e600, dwReserved0=0x0, dwReserved1=0x0, cFileName="sqmapi.dll", cAlternateFileName="")) returned 1 [0059.263] FindNextFileW (in: hFindFile=0x381d40, lpFindFileData=0x31e5e4 | out: lpFindFileData=0x31e5e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa76b8250, ftCreationTime.dwHighDateTime=0x1d5603d, ftLastAccessTime.dwLowDateTime=0xf0d58670, ftLastAccessTime.dwHighDateTime=0x1d5e436, ftLastWriteTime.dwLowDateTime=0xf0d58670, ftLastWriteTime.dwHighDateTime=0x1d5e436, nFileSizeHigh=0x0, nFileSizeLow=0x13a00, dwReserved0=0x0, dwReserved1=0x0, cFileName="thunderbird.exe", cAlternateFileName="THUNDE~1.EXE")) returned 1 [0059.263] FindNextFileW (in: hFindFile=0x381d40, lpFindFileData=0x31e5e4 | out: lpFindFileData=0x31e5e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa76b8250, ftCreationTime.dwHighDateTime=0x1d5603d, ftLastAccessTime.dwLowDateTime=0xf0d58670, ftLastAccessTime.dwHighDateTime=0x1d5e436, ftLastWriteTime.dwLowDateTime=0xf0d58670, ftLastWriteTime.dwHighDateTime=0x1d5e436, nFileSizeHigh=0x0, nFileSizeLow=0x13a00, dwReserved0=0x0, dwReserved1=0x0, cFileName="thunderbird.exe", cAlternateFileName="THUNDE~1.EXE")) returned 0 [0059.263] FindClose (in: hFindFile=0x381d40 | out: hFindFile=0x381d40) returned 1 [0059.264] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e86c) returned 1 [0059.264] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e878) returned 1 [0059.264] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e834) returned 1 [0059.264] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Internet Explorer\\en-US", nBufferLength=0x105, lpBuffer=0x31e33c, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Internet Explorer\\en-US", lpFilePart=0x0) returned 0x2e [0059.264] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Internet Explorer\\en-US\\", nBufferLength=0x105, lpBuffer=0x31e310, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Internet Explorer\\en-US\\", lpFilePart=0x0) returned 0x2f [0059.264] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Internet Explorer\\en-US\\*", lpFindFileData=0x31e55c | out: lpFindFileData=0x31e55c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1ea40f84, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x228ba44f, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x1ea6723d, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x381d40 [0059.264] FindNextFileW (in: hFindFile=0x381d40, lpFindFileData=0x31e56c | out: lpFindFileData=0x31e56c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1ea40f84, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x228ba44f, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x1ea6723d, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0059.264] FindNextFileW (in: hFindFile=0x381d40, lpFindFileData=0x31e56c | out: lpFindFileData=0x31e56c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x128de43b, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x12aa84e7, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x128de43b, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0xa00, dwReserved0=0x0, dwReserved1=0x0, cFileName="hmmapi.dll.mui", cAlternateFileName="")) returned 1 [0059.264] FindNextFileW (in: hFindFile=0x381d40, lpFindFileData=0x31e56c | out: lpFindFileData=0x31e56c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x128de43b, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x12aa84e7, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x128de43b, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x7000, dwReserved0=0x0, dwReserved1=0x0, cFileName="iedvtool.dll.mui", cAlternateFileName="")) returned 1 [0059.265] FindNextFileW (in: hFindFile=0x381d40, lpFindFileData=0x31e56c | out: lpFindFileData=0x31e56c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x128de43b, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x12aa84e7, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x128de43b, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x800, dwReserved0=0x0, dwReserved1=0x0, cFileName="ieinstal.exe.mui", cAlternateFileName="")) returned 1 [0059.265] FindNextFileW (in: hFindFile=0x381d40, lpFindFileData=0x31e56c | out: lpFindFileData=0x31e56c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x128b8182, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x12aa84e7, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x128b8182, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x800, dwReserved0=0x0, dwReserved1=0x0, cFileName="ielowutil.exe.mui", cAlternateFileName="")) returned 1 [0059.265] FindNextFileW (in: hFindFile=0x381d40, lpFindFileData=0x31e56c | out: lpFindFileData=0x31e56c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf3537636, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0xf3537636, ftLastAccessTime.dwHighDateTime=0x1ca0444, ftLastWriteTime.dwLowDateTime=0x81b77500, ftLastWriteTime.dwHighDateTime=0x1ca0427, nFileSizeHigh=0x0, nFileSizeLow=0x1400, dwReserved0=0x0, dwReserved1=0x0, cFileName="iexplore.exe.mui", cAlternateFileName="")) returned 1 [0059.265] FindNextFileW (in: hFindFile=0x381d40, lpFindFileData=0x31e56c | out: lpFindFileData=0x31e56c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x128de43b, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x12aa84e7, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x128de43b, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x2e00, dwReserved0=0x0, dwReserved1=0x0, cFileName="jsdbgui.dll.mui", cAlternateFileName="")) returned 1 [0059.265] FindNextFileW (in: hFindFile=0x381d40, lpFindFileData=0x31e56c | out: lpFindFileData=0x31e56c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x128de43b, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x12aa84e7, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x128de43b, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x800, dwReserved0=0x0, dwReserved1=0x0, cFileName="jsdebuggeride.dll.mui", cAlternateFileName="")) returned 1 [0059.265] FindNextFileW (in: hFindFile=0x381d40, lpFindFileData=0x31e56c | out: lpFindFileData=0x31e56c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x128de43b, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x12aa84e7, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x128de43b, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x800, dwReserved0=0x0, dwReserved1=0x0, cFileName="JSProfilerCore.dll.mui", cAlternateFileName="")) returned 1 [0059.265] FindNextFileW (in: hFindFile=0x381d40, lpFindFileData=0x31e56c | out: lpFindFileData=0x31e56c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x128de43b, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x12aa84e7, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x128de43b, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x1c00, dwReserved0=0x0, dwReserved1=0x0, cFileName="jsprofilerui.dll.mui", cAlternateFileName="")) returned 1 [0059.265] FindNextFileW (in: hFindFile=0x381d40, lpFindFileData=0x31e56c | out: lpFindFileData=0x31e56c*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0059.265] FindClose (in: hFindFile=0x381d40 | out: hFindFile=0x381d40) returned 1 [0059.266] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e7f4) returned 1 [0059.266] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e800) returned 1 [0059.266] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e834) returned 1 [0059.266] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Internet Explorer\\en-US", nBufferLength=0x105, lpBuffer=0x31e33c, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Internet Explorer\\en-US", lpFilePart=0x0) returned 0x2e [0059.266] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Internet Explorer\\en-US\\", nBufferLength=0x105, lpBuffer=0x31e310, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Internet Explorer\\en-US\\", lpFilePart=0x0) returned 0x2f [0059.266] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Internet Explorer\\en-US\\*", lpFindFileData=0x31e55c | out: lpFindFileData=0x31e55c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1ea40f84, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x228ba44f, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x1ea6723d, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x381d40 [0059.266] FindNextFileW (in: hFindFile=0x381d40, lpFindFileData=0x31e56c | out: lpFindFileData=0x31e56c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1ea40f84, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x228ba44f, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x1ea6723d, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0059.266] FindNextFileW (in: hFindFile=0x381d40, lpFindFileData=0x31e56c | out: lpFindFileData=0x31e56c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x128de43b, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x12aa84e7, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x128de43b, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0xa00, dwReserved0=0x0, dwReserved1=0x0, cFileName="hmmapi.dll.mui", cAlternateFileName="")) returned 1 [0059.266] FindNextFileW (in: hFindFile=0x381d40, lpFindFileData=0x31e56c | out: lpFindFileData=0x31e56c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x128de43b, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x12aa84e7, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x128de43b, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x7000, dwReserved0=0x0, dwReserved1=0x0, cFileName="iedvtool.dll.mui", cAlternateFileName="")) returned 1 [0059.266] FindNextFileW (in: hFindFile=0x381d40, lpFindFileData=0x31e56c | out: lpFindFileData=0x31e56c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x128de43b, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x12aa84e7, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x128de43b, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x800, dwReserved0=0x0, dwReserved1=0x0, cFileName="ieinstal.exe.mui", cAlternateFileName="")) returned 1 [0059.267] FindNextFileW (in: hFindFile=0x381d40, lpFindFileData=0x31e56c | out: lpFindFileData=0x31e56c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x128b8182, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x12aa84e7, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x128b8182, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x800, dwReserved0=0x0, dwReserved1=0x0, cFileName="ielowutil.exe.mui", cAlternateFileName="")) returned 1 [0059.267] FindNextFileW (in: hFindFile=0x381d40, lpFindFileData=0x31e56c | out: lpFindFileData=0x31e56c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf3537636, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0xf3537636, ftLastAccessTime.dwHighDateTime=0x1ca0444, ftLastWriteTime.dwLowDateTime=0x81b77500, ftLastWriteTime.dwHighDateTime=0x1ca0427, nFileSizeHigh=0x0, nFileSizeLow=0x1400, dwReserved0=0x0, dwReserved1=0x0, cFileName="iexplore.exe.mui", cAlternateFileName="")) returned 1 [0059.267] FindNextFileW (in: hFindFile=0x381d40, lpFindFileData=0x31e56c | out: lpFindFileData=0x31e56c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x128de43b, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x12aa84e7, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x128de43b, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x2e00, dwReserved0=0x0, dwReserved1=0x0, cFileName="jsdbgui.dll.mui", cAlternateFileName="")) returned 1 [0059.267] FindNextFileW (in: hFindFile=0x381d40, lpFindFileData=0x31e56c | out: lpFindFileData=0x31e56c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x128de43b, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x12aa84e7, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x128de43b, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x800, dwReserved0=0x0, dwReserved1=0x0, cFileName="jsdebuggeride.dll.mui", cAlternateFileName="")) returned 1 [0059.267] FindNextFileW (in: hFindFile=0x381d40, lpFindFileData=0x31e56c | out: lpFindFileData=0x31e56c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x128de43b, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x12aa84e7, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x128de43b, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x800, dwReserved0=0x0, dwReserved1=0x0, cFileName="JSProfilerCore.dll.mui", cAlternateFileName="")) returned 1 [0059.267] FindNextFileW (in: hFindFile=0x381d40, lpFindFileData=0x31e56c | out: lpFindFileData=0x31e56c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x128de43b, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x12aa84e7, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x128de43b, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x1c00, dwReserved0=0x0, dwReserved1=0x0, cFileName="jsprofilerui.dll.mui", cAlternateFileName="")) returned 1 [0059.267] FindNextFileW (in: hFindFile=0x381d40, lpFindFileData=0x31e56c | out: lpFindFileData=0x31e56c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x128de43b, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x12aa84e7, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x128de43b, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x1c00, dwReserved0=0x0, dwReserved1=0x0, cFileName="jsprofilerui.dll.mui", cAlternateFileName="")) returned 0 [0059.268] FindClose (in: hFindFile=0x381d40 | out: hFindFile=0x381d40) returned 1 [0059.268] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e7f4) returned 1 [0059.268] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e800) returned 1 [0059.268] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e834) returned 1 [0059.268] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Internet Explorer\\SIGNUP", nBufferLength=0x105, lpBuffer=0x31e33c, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Internet Explorer\\SIGNUP", lpFilePart=0x0) returned 0x2f [0059.268] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Internet Explorer\\SIGNUP\\", nBufferLength=0x105, lpBuffer=0x31e310, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Internet Explorer\\SIGNUP\\", lpFilePart=0x0) returned 0x30 [0059.268] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Internet Explorer\\SIGNUP\\*", lpFindFileData=0x31e55c | out: lpFindFileData=0x31e55c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8012b5d2, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x9bb8508b, ftLastAccessTime.dwHighDateTime=0x1cb892c, ftLastWriteTime.dwLowDateTime=0x9bb8508b, ftLastWriteTime.dwHighDateTime=0x1cb892c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x381d40 [0059.268] FindNextFileW (in: hFindFile=0x381d40, lpFindFileData=0x31e56c | out: lpFindFileData=0x31e56c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8012b5d2, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x9bb8508b, ftLastAccessTime.dwHighDateTime=0x1cb892c, ftLastWriteTime.dwLowDateTime=0x9bb8508b, ftLastWriteTime.dwHighDateTime=0x1cb892c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0059.268] FindNextFileW (in: hFindFile=0x381d40, lpFindFileData=0x31e56c | out: lpFindFileData=0x31e56c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x81351db4, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0xf227ca87, ftLastAccessTime.dwHighDateTime=0x1cb892b, ftLastWriteTime.dwLowDateTime=0xf22a2be7, ftLastWriteTime.dwHighDateTime=0x1cb892b, nFileSizeHigh=0x0, nFileSizeLow=0x1cc, dwReserved0=0x0, dwReserved1=0x0, cFileName="install.ins", cAlternateFileName="")) returned 1 [0059.269] FindNextFileW (in: hFindFile=0x381d40, lpFindFileData=0x31e56c | out: lpFindFileData=0x31e56c*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0059.269] FindClose (in: hFindFile=0x381d40 | out: hFindFile=0x381d40) returned 1 [0059.269] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e7f4) returned 1 [0059.269] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e800) returned 1 [0059.269] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e834) returned 1 [0059.269] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Internet Explorer\\SIGNUP", nBufferLength=0x105, lpBuffer=0x31e33c, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Internet Explorer\\SIGNUP", lpFilePart=0x0) returned 0x2f [0059.269] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Internet Explorer\\SIGNUP\\*", lpFindFileData=0x31e55c | out: lpFindFileData=0x31e55c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8012b5d2, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x9bb8508b, ftLastAccessTime.dwHighDateTime=0x1cb892c, ftLastWriteTime.dwLowDateTime=0x9bb8508b, ftLastWriteTime.dwHighDateTime=0x1cb892c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x381d40 [0059.269] FindNextFileW (in: hFindFile=0x381d40, lpFindFileData=0x31e56c | out: lpFindFileData=0x31e56c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8012b5d2, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x9bb8508b, ftLastAccessTime.dwHighDateTime=0x1cb892c, ftLastWriteTime.dwLowDateTime=0x9bb8508b, ftLastWriteTime.dwHighDateTime=0x1cb892c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0059.269] FindNextFileW (in: hFindFile=0x381d40, lpFindFileData=0x31e56c | out: lpFindFileData=0x31e56c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x81351db4, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0xf227ca87, ftLastAccessTime.dwHighDateTime=0x1cb892b, ftLastWriteTime.dwLowDateTime=0xf22a2be7, ftLastWriteTime.dwHighDateTime=0x1cb892b, nFileSizeHigh=0x0, nFileSizeLow=0x1cc, dwReserved0=0x0, dwReserved1=0x0, cFileName="install.ins", cAlternateFileName="")) returned 1 [0059.270] FindNextFileW (in: hFindFile=0x381d40, lpFindFileData=0x31e56c | out: lpFindFileData=0x31e56c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x81351db4, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0xf227ca87, ftLastAccessTime.dwHighDateTime=0x1cb892b, ftLastWriteTime.dwLowDateTime=0xf22a2be7, ftLastWriteTime.dwHighDateTime=0x1cb892b, nFileSizeHigh=0x0, nFileSizeLow=0x1cc, dwReserved0=0x0, dwReserved1=0x0, cFileName="install.ins", cAlternateFileName="")) returned 0 [0059.270] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e7f4) returned 1 [0059.270] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e800) returned 1 [0059.270] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e8ac) returned 1 [0059.271] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Java\\*", lpFindFileData=0x31e5d4 | out: lpFindFileData=0x31e5d4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x734f7d60, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0xd9a2c7e0, ftLastAccessTime.dwHighDateTime=0x1d5e82a, ftLastWriteTime.dwLowDateTime=0xd9a2c7e0, ftLastWriteTime.dwHighDateTime=0x1d5e82a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x381d40 [0059.271] FindNextFileW (in: hFindFile=0x381d40, lpFindFileData=0x31e5e4 | out: lpFindFileData=0x31e5e4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x734f7d60, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0xd9a2c7e0, ftLastAccessTime.dwHighDateTime=0x1d5e82a, ftLastWriteTime.dwLowDateTime=0xd9a2c7e0, ftLastWriteTime.dwHighDateTime=0x1d5e82a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0059.271] FindNextFileW (in: hFindFile=0x381d40, lpFindFileData=0x31e5e4 | out: lpFindFileData=0x31e5e4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x734f7d60, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x7577bc60, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x7577bc60, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="jre7", cAlternateFileName="")) returned 1 [0059.271] FindNextFileW (in: hFindFile=0x381d40, lpFindFileData=0x31e5e4 | out: lpFindFileData=0x31e5e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xdb1b0ca0, ftCreationTime.dwHighDateTime=0x1d5b921, ftLastAccessTime.dwLowDateTime=0x367e67e0, ftLastAccessTime.dwHighDateTime=0x1d57b33, ftLastWriteTime.dwLowDateTime=0x367e67e0, ftLastWriteTime.dwHighDateTime=0x1d57b33, nFileSizeHigh=0x0, nFileSizeLow=0x13a00, dwReserved0=0x0, dwReserved1=0x0, cFileName="whatsapp.exe", cAlternateFileName="")) returned 1 [0059.271] FindNextFileW (in: hFindFile=0x381d40, lpFindFileData=0x31e5e4 | out: lpFindFileData=0x31e5e4*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0059.271] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e86c) returned 1 [0059.271] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e878) returned 1 [0059.271] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e8ac) returned 1 [0059.271] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Java\\*", lpFindFileData=0x31e5d4 | out: lpFindFileData=0x31e5d4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x734f7d60, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0xd9a2c7e0, ftLastAccessTime.dwHighDateTime=0x1d5e82a, ftLastWriteTime.dwLowDateTime=0xd9a2c7e0, ftLastWriteTime.dwHighDateTime=0x1d5e82a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x381d40 [0059.272] FindNextFileW (in: hFindFile=0x381d40, lpFindFileData=0x31e5e4 | out: lpFindFileData=0x31e5e4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x734f7d60, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0xd9a2c7e0, ftLastAccessTime.dwHighDateTime=0x1d5e82a, ftLastWriteTime.dwLowDateTime=0xd9a2c7e0, ftLastWriteTime.dwHighDateTime=0x1d5e82a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0059.272] FindNextFileW (in: hFindFile=0x381d40, lpFindFileData=0x31e5e4 | out: lpFindFileData=0x31e5e4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x734f7d60, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x7577bc60, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x7577bc60, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="jre7", cAlternateFileName="")) returned 1 [0059.272] FindNextFileW (in: hFindFile=0x381d40, lpFindFileData=0x31e5e4 | out: lpFindFileData=0x31e5e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xdb1b0ca0, ftCreationTime.dwHighDateTime=0x1d5b921, ftLastAccessTime.dwLowDateTime=0x367e67e0, ftLastAccessTime.dwHighDateTime=0x1d57b33, ftLastWriteTime.dwLowDateTime=0x367e67e0, ftLastWriteTime.dwHighDateTime=0x1d57b33, nFileSizeHigh=0x0, nFileSizeLow=0x13a00, dwReserved0=0x0, dwReserved1=0x0, cFileName="whatsapp.exe", cAlternateFileName="")) returned 1 [0059.272] FindNextFileW (in: hFindFile=0x381d40, lpFindFileData=0x31e5e4 | out: lpFindFileData=0x31e5e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xdb1b0ca0, ftCreationTime.dwHighDateTime=0x1d5b921, ftLastAccessTime.dwLowDateTime=0x367e67e0, ftLastAccessTime.dwHighDateTime=0x1d57b33, ftLastWriteTime.dwLowDateTime=0x367e67e0, ftLastWriteTime.dwHighDateTime=0x1d57b33, nFileSizeHigh=0x0, nFileSizeLow=0x13a00, dwReserved0=0x0, dwReserved1=0x0, cFileName="whatsapp.exe", cAlternateFileName="")) returned 0 [0059.272] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e86c) returned 1 [0059.272] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e878) returned 1 [0059.272] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e834) returned 1 [0059.272] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Java\\jre7\\*", lpFindFileData=0x31e55c | out: lpFindFileData=0x31e55c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x734f7d60, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x7577bc60, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x7577bc60, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x381d40 [0059.272] FindNextFileW (in: hFindFile=0x381d40, lpFindFileData=0x31e56c | out: lpFindFileData=0x31e56c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x734f7d60, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x7577bc60, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x7577bc60, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0059.272] FindNextFileW (in: hFindFile=0x381d40, lpFindFileData=0x31e56c | out: lpFindFileData=0x31e56c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7438c420, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x762ca4e0, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x762ca4e0, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="bin", cAlternateFileName="")) returned 1 [0059.273] FindNextFileW (in: hFindFile=0x381d40, lpFindFileData=0x31e56c | out: lpFindFileData=0x31e56c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7438c420, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x7438c420, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x7438c420, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0xd51, dwReserved0=0x0, dwReserved1=0x0, cFileName="COPYRIGHT", cAlternateFileName="COPYRI~1")) returned 1 [0059.273] FindNextFileW (in: hFindFile=0x381d40, lpFindFileData=0x31e56c | out: lpFindFileData=0x31e56c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7444ab00, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x7572f9a0, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x7572f9a0, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="lib", cAlternateFileName="")) returned 1 [0059.273] FindNextFileW (in: hFindFile=0x381d40, lpFindFileData=0x31e56c | out: lpFindFileData=0x31e56c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7438c420, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x7438c420, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x7438c420, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x29, dwReserved0=0x0, dwReserved1=0x0, cFileName="LICENSE", cAlternateFileName="")) returned 1 [0059.273] FindNextFileW (in: hFindFile=0x381d40, lpFindFileData=0x31e56c | out: lpFindFileData=0x31e56c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7438c420, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x7438c420, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x7438c420, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x2f, dwReserved0=0x0, dwReserved1=0x0, cFileName="README.txt", cAlternateFileName="")) returned 1 [0059.273] FindNextFileW (in: hFindFile=0x381d40, lpFindFileData=0x31e56c | out: lpFindFileData=0x31e56c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x746d2260, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x746d2260, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x746d2260, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x1fa, dwReserved0=0x0, dwReserved1=0x0, cFileName="release", cAlternateFileName="")) returned 1 [0059.273] FindNextFileW (in: hFindFile=0x381d40, lpFindFileData=0x31e56c | out: lpFindFileData=0x31e56c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7438c420, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x7438c420, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x7438c420, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x1e8b1, dwReserved0=0x0, dwReserved1=0x0, cFileName="THIRDPARTYLICENSEREADME-JAVAFX.txt", cAlternateFileName="THIRDP~1.TXT")) returned 1 [0059.273] FindNextFileW (in: hFindFile=0x381d40, lpFindFileData=0x31e56c | out: lpFindFileData=0x31e56c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7438c420, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x7438c420, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x7438c420, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x2b350, dwReserved0=0x0, dwReserved1=0x0, cFileName="THIRDPARTYLICENSEREADME.txt", cAlternateFileName="THIRDP~2.TXT")) returned 1 [0059.273] FindNextFileW (in: hFindFile=0x381d40, lpFindFileData=0x31e56c | out: lpFindFileData=0x31e56c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7438c420, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x7438c420, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x7438c420, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x3d7, dwReserved0=0x0, dwReserved1=0x0, cFileName="Welcome.html", cAlternateFileName="WELCOM~1.HTM")) returned 1 [0059.273] FindNextFileW (in: hFindFile=0x381d40, lpFindFileData=0x31e56c | out: lpFindFileData=0x31e56c*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0059.273] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e7f4) returned 1 [0059.273] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e800) returned 1 [0059.273] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e834) returned 1 [0059.274] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Java\\jre7\\*", lpFindFileData=0x31e55c | out: lpFindFileData=0x31e55c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x734f7d60, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x7577bc60, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x7577bc60, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x381d40 [0059.274] FindNextFileW (in: hFindFile=0x381d40, lpFindFileData=0x31e56c | out: lpFindFileData=0x31e56c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x734f7d60, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x7577bc60, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x7577bc60, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0059.274] FindNextFileW (in: hFindFile=0x381d40, lpFindFileData=0x31e56c | out: lpFindFileData=0x31e56c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7438c420, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x762ca4e0, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x762ca4e0, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="bin", cAlternateFileName="")) returned 1 [0059.274] FindNextFileW (in: hFindFile=0x381d40, lpFindFileData=0x31e56c | out: lpFindFileData=0x31e56c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7438c420, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x7438c420, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x7438c420, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0xd51, dwReserved0=0x0, dwReserved1=0x0, cFileName="COPYRIGHT", cAlternateFileName="COPYRI~1")) returned 1 [0059.274] FindNextFileW (in: hFindFile=0x381d40, lpFindFileData=0x31e56c | out: lpFindFileData=0x31e56c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7444ab00, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x7572f9a0, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x7572f9a0, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="lib", cAlternateFileName="")) returned 1 [0059.274] FindNextFileW (in: hFindFile=0x381d40, lpFindFileData=0x31e56c | out: lpFindFileData=0x31e56c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7438c420, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x7438c420, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x7438c420, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x29, dwReserved0=0x0, dwReserved1=0x0, cFileName="LICENSE", cAlternateFileName="")) returned 1 [0059.274] FindNextFileW (in: hFindFile=0x381d40, lpFindFileData=0x31e56c | out: lpFindFileData=0x31e56c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7438c420, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x7438c420, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x7438c420, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x2f, dwReserved0=0x0, dwReserved1=0x0, cFileName="README.txt", cAlternateFileName="")) returned 1 [0059.274] FindNextFileW (in: hFindFile=0x381d40, lpFindFileData=0x31e56c | out: lpFindFileData=0x31e56c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x746d2260, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x746d2260, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x746d2260, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x1fa, dwReserved0=0x0, dwReserved1=0x0, cFileName="release", cAlternateFileName="")) returned 1 [0059.275] FindNextFileW (in: hFindFile=0x381d40, lpFindFileData=0x31e56c | out: lpFindFileData=0x31e56c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7438c420, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x7438c420, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x7438c420, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x1e8b1, dwReserved0=0x0, dwReserved1=0x0, cFileName="THIRDPARTYLICENSEREADME-JAVAFX.txt", cAlternateFileName="THIRDP~1.TXT")) returned 1 [0059.275] FindNextFileW (in: hFindFile=0x381d40, lpFindFileData=0x31e56c | out: lpFindFileData=0x31e56c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7438c420, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x7438c420, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x7438c420, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x2b350, dwReserved0=0x0, dwReserved1=0x0, cFileName="THIRDPARTYLICENSEREADME.txt", cAlternateFileName="THIRDP~2.TXT")) returned 1 [0059.275] FindNextFileW (in: hFindFile=0x381d40, lpFindFileData=0x31e56c | out: lpFindFileData=0x31e56c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7438c420, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x7438c420, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x7438c420, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x3d7, dwReserved0=0x0, dwReserved1=0x0, cFileName="Welcome.html", cAlternateFileName="WELCOM~1.HTM")) returned 1 [0059.275] FindNextFileW (in: hFindFile=0x381d40, lpFindFileData=0x31e56c | out: lpFindFileData=0x31e56c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7438c420, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x7438c420, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x7438c420, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x3d7, dwReserved0=0x0, dwReserved1=0x0, cFileName="Welcome.html", cAlternateFileName="WELCOM~1.HTM")) returned 0 [0059.275] FindClose (in: hFindFile=0x381d40 | out: hFindFile=0x381d40) returned 1 [0059.275] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e7f4) returned 1 [0059.275] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e800) returned 1 [0059.275] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e700) returned 1 [0059.275] CreateFileW (lpFileName="C:\\Program Files (x86)\\Java\\jre7\\README.txt" (normalized: "c:\\program files (x86)\\java\\jre7\\readme.txt"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x274 [0059.275] GetFileType (hFile=0x274) returned 0x1 [0059.276] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e6fc) returned 1 [0059.276] GetFileType (hFile=0x274) returned 0x1 [0059.276] GetFileSize (in: hFile=0x274, lpFileSizeHigh=0x31e808 | out: lpFileSizeHigh=0x31e808*=0x0) returned 0x2f [0059.276] ReadFile (in: hFile=0x274, lpBuffer=0x27380f4, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x31e7b4, lpOverlapped=0x0 | out: lpBuffer=0x27380f4*, lpNumberOfBytesRead=0x31e7b4*=0x2f, lpOverlapped=0x0) returned 1 [0059.277] CloseHandle (hObject=0x274) returned 1 [0059.313] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e6ec) returned 1 [0059.313] CreateFileW (lpFileName="C:\\Program Files (x86)\\Java\\jre7\\README.txt" (normalized: "c:\\program files (x86)\\java\\jre7\\readme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x274 [0059.314] GetFileType (hFile=0x274) returned 0x1 [0059.314] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e6e8) returned 1 [0059.314] GetFileType (hFile=0x274) returned 0x1 [0059.314] WriteFile (in: hFile=0x274, lpBuffer=0x2786150*, nNumberOfBytesToWrite=0x30, lpNumberOfBytesWritten=0x31e77c, lpOverlapped=0x0 | out: lpBuffer=0x2786150*, lpNumberOfBytesWritten=0x31e77c*=0x30, lpOverlapped=0x0) returned 1 [0059.315] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e78c) returned 1 [0059.316] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e788) returned 1 [0059.316] MoveFileW (lpExistingFileName="C:\\Program Files (x86)\\Java\\jre7\\README.txt" (normalized: "c:\\program files (x86)\\java\\jre7\\readme.txt"), lpNewFileName="C:\\Program Files (x86)\\Java\\jre7\\README.txt" (normalized: "c:\\program files (x86)\\java\\jre7\\readme.txt")) returned 1 [0059.316] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e700) returned 1 [0059.316] CreateFileW (lpFileName="C:\\Program Files (x86)\\Java\\jre7\\THIRDPARTYLICENSEREADME-JAVAFX.txt" (normalized: "c:\\program files (x86)\\java\\jre7\\thirdpartylicensereadme-javafx.txt"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x274 [0059.316] GetFileType (hFile=0x274) returned 0x1 [0059.317] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e6fc) returned 1 [0059.317] GetFileType (hFile=0x274) returned 0x1 [0059.317] GetFileSize (in: hFile=0x274, lpFileSizeHigh=0x31e808 | out: lpFileSizeHigh=0x31e808*=0x0) returned 0x1e8b1 [0059.317] ReadFile (in: hFile=0x274, lpBuffer=0x36eaf50, nNumberOfBytesToRead=0x1e8b1, lpNumberOfBytesRead=0x31e7b4, lpOverlapped=0x0 | out: lpBuffer=0x36eaf50*, lpNumberOfBytesRead=0x31e7b4*=0x1e8b1, lpOverlapped=0x0) returned 1 [0059.335] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e6ec) returned 1 [0059.335] CreateFileW (lpFileName="C:\\Program Files (x86)\\Java\\jre7\\THIRDPARTYLICENSEREADME-JAVAFX.txt" (normalized: "c:\\program files (x86)\\java\\jre7\\thirdpartylicensereadme-javafx.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x274 [0059.336] GetFileType (hFile=0x274) returned 0x1 [0059.336] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e6e8) returned 1 [0059.336] GetFileType (hFile=0x274) returned 0x1 [0059.336] WriteFile (in: hFile=0x274, lpBuffer=0x3783b40*, nNumberOfBytesToWrite=0x1e8c0, lpNumberOfBytesWritten=0x31e7a8, lpOverlapped=0x0 | out: lpBuffer=0x3783b40*, lpNumberOfBytesWritten=0x31e7a8*=0x1e8c0, lpOverlapped=0x0) returned 1 [0059.339] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e78c) returned 1 [0059.339] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e788) returned 1 [0059.339] MoveFileW (lpExistingFileName="C:\\Program Files (x86)\\Java\\jre7\\THIRDPARTYLICENSEREADME-JAVAFX.txt" (normalized: "c:\\program files (x86)\\java\\jre7\\thirdpartylicensereadme-javafx.txt"), lpNewFileName="C:\\Program Files (x86)\\Java\\jre7\\THIRDPARTYLICENSEREADME-JAVAFX.txt" (normalized: "c:\\program files (x86)\\java\\jre7\\thirdpartylicensereadme-javafx.txt")) returned 1 [0059.340] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e700) returned 1 [0059.340] CreateFileW (lpFileName="C:\\Program Files (x86)\\Java\\jre7\\THIRDPARTYLICENSEREADME.txt" (normalized: "c:\\program files (x86)\\java\\jre7\\thirdpartylicensereadme.txt"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x274 [0059.341] GetFileType (hFile=0x274) returned 0x1 [0059.341] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e6fc) returned 1 [0059.341] GetFileType (hFile=0x274) returned 0x1 [0059.341] GetFileSize (in: hFile=0x274, lpFileSizeHigh=0x31e808 | out: lpFileSizeHigh=0x31e808*=0x0) returned 0x2b350 [0059.341] ReadFile (in: hFile=0x274, lpBuffer=0x37a2420, nNumberOfBytesToRead=0x2b350, lpNumberOfBytesRead=0x31e7b4, lpOverlapped=0x0 | out: lpBuffer=0x37a2420*, lpNumberOfBytesRead=0x31e7b4*=0x2b350, lpOverlapped=0x0) returned 1 [0059.360] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e6ec) returned 1 [0059.360] CreateFileW (lpFileName="C:\\Program Files (x86)\\Java\\jre7\\THIRDPARTYLICENSEREADME.txt" (normalized: "c:\\program files (x86)\\java\\jre7\\thirdpartylicensereadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x274 [0059.372] GetFileType (hFile=0x274) returned 0x1 [0059.372] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e6e8) returned 1 [0059.372] GetFileType (hFile=0x274) returned 0x1 [0059.372] WriteFile (in: hFile=0x274, lpBuffer=0x387a530*, nNumberOfBytesToWrite=0x2b360, lpNumberOfBytesWritten=0x31e7a8, lpOverlapped=0x0 | out: lpBuffer=0x387a530*, lpNumberOfBytesWritten=0x31e7a8*=0x2b360, lpOverlapped=0x0) returned 1 [0059.376] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e78c) returned 1 [0059.376] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e788) returned 1 [0059.376] MoveFileW (lpExistingFileName="C:\\Program Files (x86)\\Java\\jre7\\THIRDPARTYLICENSEREADME.txt" (normalized: "c:\\program files (x86)\\java\\jre7\\thirdpartylicensereadme.txt"), lpNewFileName="C:\\Program Files (x86)\\Java\\jre7\\THIRDPARTYLICENSEREADME.txt" (normalized: "c:\\program files (x86)\\java\\jre7\\thirdpartylicensereadme.txt")) returned 1 [0059.376] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e700) returned 1 [0059.376] CreateFileW (lpFileName="C:\\Program Files (x86)\\Java\\jre7\\Welcome.html" (normalized: "c:\\program files (x86)\\java\\jre7\\welcome.html"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x274 [0059.377] GetFileType (hFile=0x274) returned 0x1 [0059.377] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e6fc) returned 1 [0059.377] GetFileType (hFile=0x274) returned 0x1 [0059.377] GetFileSize (in: hFile=0x274, lpFileSizeHigh=0x31e808 | out: lpFileSizeHigh=0x31e808*=0x0) returned 0x3d7 [0059.377] ReadFile (in: hFile=0x274, lpBuffer=0x2821a54, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x31e7b4, lpOverlapped=0x0 | out: lpBuffer=0x2821a54*, lpNumberOfBytesRead=0x31e7b4*=0x3d7, lpOverlapped=0x0) returned 1 [0059.394] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Java\\jre7\\Welcome.html", nBufferLength=0x105, lpBuffer=0x31e1f8, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Java\\jre7\\Welcome.html", lpFilePart=0x0) returned 0x2d [0059.394] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e6ec) returned 1 [0059.394] CreateFileW (lpFileName="C:\\Program Files (x86)\\Java\\jre7\\Welcome.html" (normalized: "c:\\program files (x86)\\java\\jre7\\welcome.html"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x274 [0059.395] GetFileType (hFile=0x274) returned 0x1 [0059.395] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e6e8) returned 1 [0059.395] GetFileType (hFile=0x274) returned 0x1 [0059.395] WriteFile (in: hFile=0x274, lpBuffer=0x267c9f4*, nNumberOfBytesToWrite=0x3e0, lpNumberOfBytesWritten=0x31e77c, lpOverlapped=0x0 | out: lpBuffer=0x267c9f4*, lpNumberOfBytesWritten=0x31e77c*=0x3e0, lpOverlapped=0x0) returned 1 [0059.396] CloseHandle (hObject=0x274) returned 1 [0059.396] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Java\\jre7\\Welcome.html", nBufferLength=0x105, lpBuffer=0x31e32c, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Java\\jre7\\Welcome.html", lpFilePart=0x0) returned 0x2d [0059.396] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Java\\jre7\\Welcome.html", nBufferLength=0x105, lpBuffer=0x31e32c, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Java\\jre7\\Welcome.html", lpFilePart=0x0) returned 0x2d [0059.396] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e78c) returned 1 [0059.396] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Java\\jre7\\Welcome.html" (normalized: "c:\\program files (x86)\\java\\jre7\\welcome.html"), fInfoLevelId=0x0, lpFileInformation=0x31e808 | out: lpFileInformation=0x31e808*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7438c420, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x7438c420, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x6db17a0, ftLastWriteTime.dwHighDateTime=0x1d6eb7f, nFileSizeHigh=0x0, nFileSizeLow=0x3e0)) returned 1 [0059.396] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e788) returned 1 [0059.396] MoveFileW (lpExistingFileName="C:\\Program Files (x86)\\Java\\jre7\\Welcome.html" (normalized: "c:\\program files (x86)\\java\\jre7\\welcome.html"), lpNewFileName="C:\\Program Files (x86)\\Java\\jre7\\Welcome.html" (normalized: "c:\\program files (x86)\\java\\jre7\\welcome.html")) returned 1 [0059.397] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e7bc) returned 1 [0059.397] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Java\\jre7\\bin", nBufferLength=0x105, lpBuffer=0x31e2c4, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Java\\jre7\\bin", lpFilePart=0x0) returned 0x24 [0059.397] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Java\\jre7\\bin\\", nBufferLength=0x105, lpBuffer=0x31e298, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Java\\jre7\\bin\\", lpFilePart=0x0) returned 0x25 [0059.397] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Java\\jre7\\bin\\*", lpFindFileData=0x31e4e4 | out: lpFindFileData=0x31e4e4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7438c420, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x762ca4e0, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x762ca4e0, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x381c80 [0059.398] FindNextFileW (in: hFindFile=0x381c80, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7438c420, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x762ca4e0, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x762ca4e0, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0059.399] FindNextFileW (in: hFindFile=0x381c80, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x743b2580, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x743b2580, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x743b2580, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x11e7a8, dwReserved0=0x0, dwReserved1=0x0, cFileName="awt.dll", cAlternateFileName="")) returned 1 [0059.399] FindNextFileW (in: hFindFile=0x381c80, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x743b2580, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x743b2580, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x743b2580, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x255a8, dwReserved0=0x0, dwReserved1=0x0, cFileName="axbridge.dll", cAlternateFileName="")) returned 1 [0059.399] FindNextFileW (in: hFindFile=0x381c80, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x743b2580, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x76eb12e0, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x76eb12e0, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="client", cAlternateFileName="")) returned 1 [0059.399] FindNextFileW (in: hFindFile=0x381c80, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x743b2580, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x743b2580, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x743b2580, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x22ba8, dwReserved0=0x0, dwReserved1=0x0, cFileName="dcpr.dll", cAlternateFileName="")) returned 1 [0059.399] FindNextFileW (in: hFindFile=0x381c80, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x743b2580, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x743b2580, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x743b2580, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0xf5a8, dwReserved0=0x0, dwReserved1=0x0, cFileName="decora-sse.dll", cAlternateFileName="DECORA~1.DLL")) returned 1 [0059.399] FindNextFileW (in: hFindFile=0x381c80, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x743b2580, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x743b2580, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x743b2580, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x58fa8, dwReserved0=0x0, dwReserved1=0x0, cFileName="deploy.dll", cAlternateFileName="")) returned 1 [0059.400] FindNextFileW (in: hFindFile=0x381c80, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x743b2580, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x743b2580, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x743b2580, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="dtplugin", cAlternateFileName="")) returned 1 [0059.400] FindNextFileW (in: hFindFile=0x381c80, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x743b2580, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x743b2580, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x743b2580, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x63a8, dwReserved0=0x0, dwReserved1=0x0, cFileName="dt_shmem.dll", cAlternateFileName="")) returned 1 [0059.400] FindNextFileW (in: hFindFile=0x381c80, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x743b2580, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x743b2580, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x743b2580, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x55a8, dwReserved0=0x0, dwReserved1=0x0, cFileName="dt_socket.dll", cAlternateFileName="DT_SOC~1.DLL")) returned 1 [0059.400] FindNextFileW (in: hFindFile=0x381c80, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x743b2580, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x743b2580, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x743b2580, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x1a9a8, dwReserved0=0x0, dwReserved1=0x0, cFileName="eula.dll", cAlternateFileName="")) returned 1 [0059.400] FindNextFileW (in: hFindFile=0x381c80, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x743b2580, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x743b2580, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x743b2580, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x34fa8, dwReserved0=0x0, dwReserved1=0x0, cFileName="fontmanager.dll", cAlternateFileName="FONTMA~1.DLL")) returned 1 [0059.400] FindNextFileW (in: hFindFile=0x381c80, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x743b2580, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x743b2580, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x743b2580, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x263a8, dwReserved0=0x0, dwReserved1=0x0, cFileName="fxplugins.dll", cAlternateFileName="FXPLUG~1.DLL")) returned 1 [0059.400] FindNextFileW (in: hFindFile=0x381c80, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x743b2580, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x743b2580, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x743b2580, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x26fa8, dwReserved0=0x0, dwReserved1=0x0, cFileName="glass.dll", cAlternateFileName="")) returned 1 [0059.400] FindNextFileW (in: hFindFile=0x381c80, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x743b2580, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x743b2580, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x743b2580, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x63ba8, dwReserved0=0x0, dwReserved1=0x0, cFileName="glib-lite.dll", cAlternateFileName="GLIB-L~1.DLL")) returned 1 [0059.401] FindNextFileW (in: hFindFile=0x381c80, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x743b2580, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x743b2580, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x743b2580, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x7b7a8, dwReserved0=0x0, dwReserved1=0x0, cFileName="gstreamer-lite.dll", cAlternateFileName="GSTREA~1.DLL")) returned 1 [0059.401] FindNextFileW (in: hFindFile=0x381c80, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x743b2580, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x743b2580, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x743b2580, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x205a8, dwReserved0=0x0, dwReserved1=0x0, cFileName="hprof.dll", cAlternateFileName="")) returned 1 [0059.401] FindNextFileW (in: hFindFile=0x381c80, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x743b2580, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x743b2580, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x743b2580, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x32ba0, dwReserved0=0x0, dwReserved1=0x0, cFileName="installer.dll", cAlternateFileName="INSTAL~1.DLL")) returned 1 [0059.401] FindNextFileW (in: hFindFile=0x381c80, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x743b2580, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x743b2580, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x743b2580, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x1c1a8, dwReserved0=0x0, dwReserved1=0x0, cFileName="instrument.dll", cAlternateFileName="INSTRU~1.DLL")) returned 1 [0059.401] FindNextFileW (in: hFindFile=0x381c80, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x743b2580, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x743b2580, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x743d86e0, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x3fa8, dwReserved0=0x0, dwReserved1=0x0, cFileName="j2pcsc.dll", cAlternateFileName="")) returned 1 [0059.401] FindNextFileW (in: hFindFile=0x381c80, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x743d86e0, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x743d86e0, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x743d86e0, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0xc7a8, dwReserved0=0x0, dwReserved1=0x0, cFileName="j2pkcs11.dll", cAlternateFileName="")) returned 1 [0059.401] FindNextFileW (in: hFindFile=0x381c80, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x743d86e0, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x743d86e0, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x743d86e0, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x4da8, dwReserved0=0x0, dwReserved1=0x0, cFileName="jaas_nt.dll", cAlternateFileName="")) returned 1 [0059.401] FindNextFileW (in: hFindFile=0x381c80, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x743d86e0, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x743d86e0, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x743d86e0, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0xbba8, dwReserved0=0x0, dwReserved1=0x0, cFileName="jabswitch.exe", cAlternateFileName="JABSWI~1.EXE")) returned 1 [0059.401] FindNextFileW (in: hFindFile=0x381c80, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x743d86e0, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x743d86e0, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x743d86e0, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x3da8, dwReserved0=0x0, dwReserved1=0x0, cFileName="java-rmi.exe", cAlternateFileName="")) returned 1 [0059.402] FindNextFileW (in: hFindFile=0x381c80, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x743d86e0, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x743d86e0, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x743d86e0, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x1d5a8, dwReserved0=0x0, dwReserved1=0x0, cFileName="java.dll", cAlternateFileName="")) returned 1 [0059.402] FindNextFileW (in: hFindFile=0x381c80, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x743d86e0, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x743d86e0, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x743d86e0, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x2a9a8, dwReserved0=0x0, dwReserved1=0x0, cFileName="java.exe", cAlternateFileName="")) returned 1 [0059.402] FindNextFileW (in: hFindFile=0x381c80, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x743d86e0, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x743d86e0, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x743d86e0, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x1e7a8, dwReserved0=0x0, dwReserved1=0x0, cFileName="JavaAccessBridge-32.dll", cAlternateFileName="JAVAAC~1.DLL")) returned 1 [0059.402] FindNextFileW (in: hFindFile=0x381c80, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x743d86e0, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x743d86e0, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x743d86e0, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x105a8, dwReserved0=0x0, dwReserved1=0x0, cFileName="javacpl.exe", cAlternateFileName="")) returned 1 [0059.402] FindNextFileW (in: hFindFile=0x381c80, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x743d86e0, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x743d86e0, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x743d86e0, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x3b3a8, dwReserved0=0x0, dwReserved1=0x0, cFileName="javafx-font.dll", cAlternateFileName="JAVAFX~1.DLL")) returned 1 [0059.402] FindNextFileW (in: hFindFile=0x381c80, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x743d86e0, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x743d86e0, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x743d86e0, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x2dfa8, dwReserved0=0x0, dwReserved1=0x0, cFileName="javafx-iio.dll", cAlternateFileName="JAVAFX~2.DLL")) returned 1 [0059.402] FindNextFileW (in: hFindFile=0x381c80, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x743d86e0, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x743d86e0, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x743d86e0, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x2aba8, dwReserved0=0x0, dwReserved1=0x0, cFileName="javaw.exe", cAlternateFileName="")) returned 1 [0059.402] FindNextFileW (in: hFindFile=0x381c80, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x743d86e0, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x743d86e0, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x743d86e0, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x409a8, dwReserved0=0x0, dwReserved1=0x0, cFileName="javaws.exe", cAlternateFileName="")) returned 1 [0059.403] FindNextFileW (in: hFindFile=0x381c80, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x743d86e0, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x743d86e0, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x743d86e0, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x5da8, dwReserved0=0x0, dwReserved1=0x0, cFileName="java_crw_demo.dll", cAlternateFileName="JAVA_C~1.DLL")) returned 1 [0059.403] FindNextFileW (in: hFindFile=0x381c80, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x743d86e0, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x743d86e0, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x743d86e0, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x37a8, dwReserved0=0x0, dwReserved1=0x0, cFileName="jawt.dll", cAlternateFileName="")) returned 1 [0059.403] FindNextFileW (in: hFindFile=0x381c80, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x743d86e0, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x743d86e0, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x743d86e0, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x3ba8, dwReserved0=0x0, dwReserved1=0x0, cFileName="JAWTAccessBridge-32.dll", cAlternateFileName="JAWTAC~1.DLL")) returned 1 [0059.404] FindNextFileW (in: hFindFile=0x381c80, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x743d86e0, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x743d86e0, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x743d86e0, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0xb3a8, dwReserved0=0x0, dwReserved1=0x0, cFileName="JdbcOdbc.dll", cAlternateFileName="")) returned 1 [0059.404] FindNextFileW (in: hFindFile=0x381c80, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x743d86e0, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x743d86e0, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x743d86e0, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x283a8, dwReserved0=0x0, dwReserved1=0x0, cFileName="jdwp.dll", cAlternateFileName="")) returned 1 [0059.404] FindNextFileW (in: hFindFile=0x381c80, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x743d86e0, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x743d86e0, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x743d86e0, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x4fa8, dwReserved0=0x0, dwReserved1=0x0, cFileName="jfr.dll", cAlternateFileName="")) returned 1 [0059.404] FindNextFileW (in: hFindFile=0x381c80, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x743d86e0, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x743d86e0, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x743d86e0, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x1afa8, dwReserved0=0x0, dwReserved1=0x0, cFileName="jfxmedia.dll", cAlternateFileName="")) returned 1 [0059.404] FindNextFileW (in: hFindFile=0x381c80, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x743d86e0, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x743d86e0, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x743fe840, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0xb579a8, dwReserved0=0x0, dwReserved1=0x0, cFileName="jfxwebkit.dll", cAlternateFileName="JFXWEB~1.DLL")) returned 1 [0059.404] FindNextFileW (in: hFindFile=0x381c80, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x743fe840, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x743fe840, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x743fe840, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x22da8, dwReserved0=0x0, dwReserved1=0x0, cFileName="jli.dll", cAlternateFileName="")) returned 1 [0059.405] FindNextFileW (in: hFindFile=0x381c80, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x743fe840, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x743fe840, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x743fe840, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x313a8, dwReserved0=0x0, dwReserved1=0x0, cFileName="jp2iexp.dll", cAlternateFileName="")) returned 1 [0059.405] FindNextFileW (in: hFindFile=0x381c80, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x743fe840, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x743fe840, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x743fe840, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0xcda8, dwReserved0=0x0, dwReserved1=0x0, cFileName="jp2launcher.exe", cAlternateFileName="JP2LAU~1.EXE")) returned 1 [0059.405] FindNextFileW (in: hFindFile=0x381c80, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x743fe840, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x743fe840, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x743fe840, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x41a8, dwReserved0=0x0, dwReserved1=0x0, cFileName="jp2native.dll", cAlternateFileName="JP2NAT~1.DLL")) returned 1 [0059.405] FindNextFileW (in: hFindFile=0x381c80, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x743fe840, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x743fe840, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x743fe840, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x29fa8, dwReserved0=0x0, dwReserved1=0x0, cFileName="jp2ssv.dll", cAlternateFileName="")) returned 1 [0059.405] FindNextFileW (in: hFindFile=0x381c80, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x743fe840, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x743fe840, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x743fe840, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x239a8, dwReserved0=0x0, dwReserved1=0x0, cFileName="jpeg.dll", cAlternateFileName="")) returned 1 [0059.405] FindNextFileW (in: hFindFile=0x381c80, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x743fe840, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x743fe840, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x743fe840, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x16da8, dwReserved0=0x0, dwReserved1=0x0, cFileName="jpicom.dll", cAlternateFileName="")) returned 1 [0059.405] FindNextFileW (in: hFindFile=0x381c80, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x743fe840, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x743fe840, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x743fe840, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x261a8, dwReserved0=0x0, dwReserved1=0x0, cFileName="jpiexp.dll", cAlternateFileName="")) returned 1 [0059.405] FindNextFileW (in: hFindFile=0x381c80, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x743fe840, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x743fe840, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x743fe840, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x195a8, dwReserved0=0x0, dwReserved1=0x0, cFileName="jpinscp.dll", cAlternateFileName="")) returned 1 [0059.406] FindNextFileW (in: hFindFile=0x381c80, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x743fe840, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x743fe840, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x743fe840, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x10da8, dwReserved0=0x0, dwReserved1=0x0, cFileName="jpioji.dll", cAlternateFileName="")) returned 1 [0059.406] FindNextFileW (in: hFindFile=0x381c80, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x743fe840, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x743fe840, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x743fe840, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x229a8, dwReserved0=0x0, dwReserved1=0x0, cFileName="jpishare.dll", cAlternateFileName="")) returned 1 [0059.406] FindNextFileW (in: hFindFile=0x381c80, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x743fe840, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x743fe840, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x743fe840, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x2c9a8, dwReserved0=0x0, dwReserved1=0x0, cFileName="jqs.exe", cAlternateFileName="")) returned 1 [0059.406] FindNextFileW (in: hFindFile=0x381c80, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x743fe840, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x743fe840, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x743fe840, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x41a8, dwReserved0=0x0, dwReserved1=0x0, cFileName="jsdt.dll", cAlternateFileName="")) returned 1 [0059.406] FindNextFileW (in: hFindFile=0x381c80, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x743fe840, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x743fe840, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x743fe840, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x77a8, dwReserved0=0x0, dwReserved1=0x0, cFileName="jsound.dll", cAlternateFileName="")) returned 1 [0059.406] FindNextFileW (in: hFindFile=0x381c80, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x743fe840, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x743fe840, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x743fe840, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x6ba8, dwReserved0=0x0, dwReserved1=0x0, cFileName="jsoundds.dll", cAlternateFileName="")) returned 1 [0059.406] FindNextFileW (in: hFindFile=0x381c80, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x743fe840, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x743fe840, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x743fe840, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x2b7a8, dwReserved0=0x0, dwReserved1=0x0, cFileName="kcms.dll", cAlternateFileName="")) returned 1 [0059.406] FindNextFileW (in: hFindFile=0x381c80, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x743fe840, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x743fe840, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x743fe840, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x3da8, dwReserved0=0x0, dwReserved1=0x0, cFileName="keytool.exe", cAlternateFileName="")) returned 1 [0059.406] FindNextFileW (in: hFindFile=0x381c80, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x743fe840, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x743fe840, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x743fe840, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x3da8, dwReserved0=0x0, dwReserved1=0x0, cFileName="kinit.exe", cAlternateFileName="")) returned 1 [0059.407] FindNextFileW (in: hFindFile=0x381c80, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x743fe840, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x743fe840, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x743fe840, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x3da8, dwReserved0=0x0, dwReserved1=0x0, cFileName="klist.exe", cAlternateFileName="")) returned 1 [0059.407] FindNextFileW (in: hFindFile=0x381c80, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x743fe840, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x743fe840, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x743fe840, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x3da8, dwReserved0=0x0, dwReserved1=0x0, cFileName="ktab.exe", cAlternateFileName="")) returned 1 [0059.407] FindNextFileW (in: hFindFile=0x381c80, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x743fe840, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x743fe840, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x743fe840, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x6dba8, dwReserved0=0x0, dwReserved1=0x0, cFileName="libxml2.dll", cAlternateFileName="")) returned 1 [0059.407] FindNextFileW (in: hFindFile=0x381c80, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x743fe840, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x743fe840, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x743fe840, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x269a8, dwReserved0=0x0, dwReserved1=0x0, cFileName="libxslt.dll", cAlternateFileName="")) returned 1 [0059.407] FindNextFileW (in: hFindFile=0x381c80, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x743fe840, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x743fe840, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x743fe840, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x7ba8, dwReserved0=0x0, dwReserved1=0x0, cFileName="management.dll", cAlternateFileName="MANAGE~1.DLL")) returned 1 [0059.407] FindNextFileW (in: hFindFile=0x381c80, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x743fe840, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x743fe840, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x743fe840, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x8c1a8, dwReserved0=0x0, dwReserved1=0x0, cFileName="mlib_image.dll", cAlternateFileName="MLIB_I~1.DLL")) returned 1 [0059.407] FindNextFileW (in: hFindFile=0x381c80, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x744249a0, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x744249a0, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x744249a0, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0xbcf50, dwReserved0=0x0, dwReserved1=0x0, cFileName="msvcr100.dll", cAlternateFileName="")) returned 1 [0059.407] FindNextFileW (in: hFindFile=0x381c80, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x744249a0, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x744249a0, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x744249a0, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x127a8, dwReserved0=0x0, dwReserved1=0x0, cFileName="net.dll", cAlternateFileName="")) returned 1 [0059.407] FindNextFileW (in: hFindFile=0x381c80, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x744249a0, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x744249a0, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x744249a0, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0xc3a8, dwReserved0=0x0, dwReserved1=0x0, cFileName="nio.dll", cAlternateFileName="")) returned 1 [0059.407] FindNextFileW (in: hFindFile=0x381c80, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x744249a0, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x744249a0, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x744249a0, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x367a8, dwReserved0=0x0, dwReserved1=0x0, cFileName="npjpi170_45.dll", cAlternateFileName="NPJPI1~1.DLL")) returned 1 [0059.408] FindNextFileW (in: hFindFile=0x381c80, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x744249a0, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x744249a0, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x744249a0, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x35da8, dwReserved0=0x0, dwReserved1=0x0, cFileName="npoji610.dll", cAlternateFileName="")) returned 1 [0059.409] FindNextFileW (in: hFindFile=0x381c80, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x744249a0, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x744249a0, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x744249a0, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x45a8, dwReserved0=0x0, dwReserved1=0x0, cFileName="npt.dll", cAlternateFileName="")) returned 1 [0059.409] FindNextFileW (in: hFindFile=0x381c80, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x744249a0, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x744249a0, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x744249a0, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x3da8, dwReserved0=0x0, dwReserved1=0x0, cFileName="orbd.exe", cAlternateFileName="")) returned 1 [0059.409] FindNextFileW (in: hFindFile=0x381c80, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x744249a0, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x744249a0, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x744249a0, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x3da8, dwReserved0=0x0, dwReserved1=0x0, cFileName="pack200.exe", cAlternateFileName="")) returned 1 [0059.409] FindNextFileW (in: hFindFile=0x381c80, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x744249a0, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x744249a0, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x744249a0, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="plugin2", cAlternateFileName="")) returned 1 [0059.409] FindNextFileW (in: hFindFile=0x381c80, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x744249a0, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x744249a0, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x744249a0, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x3da8, dwReserved0=0x0, dwReserved1=0x0, cFileName="policytool.exe", cAlternateFileName="POLICY~1.EXE")) returned 1 [0059.409] FindNextFileW (in: hFindFile=0x381c80, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x744249a0, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x744249a0, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x744249a0, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0xb3a8, dwReserved0=0x0, dwReserved1=0x0, cFileName="prism-d3d.dll", cAlternateFileName="PRISM-~1.DLL")) returned 1 [0059.409] FindNextFileW (in: hFindFile=0x381c80, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x744249a0, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x744249a0, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x744249a0, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x3da8, dwReserved0=0x0, dwReserved1=0x0, cFileName="rmid.exe", cAlternateFileName="")) returned 1 [0059.410] FindNextFileW (in: hFindFile=0x381c80, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x744249a0, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x744249a0, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x744249a0, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x3da8, dwReserved0=0x0, dwReserved1=0x0, cFileName="rmiregistry.exe", cAlternateFileName="RMIREG~1.EXE")) returned 1 [0059.410] FindNextFileW (in: hFindFile=0x381c80, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x744249a0, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x744249a0, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x744249a0, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x3da8, dwReserved0=0x0, dwReserved1=0x0, cFileName="servertool.exe", cAlternateFileName="SERVER~1.EXE")) returned 1 [0059.410] FindNextFileW (in: hFindFile=0x381c80, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x744249a0, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x744249a0, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x744249a0, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x2ffa8, dwReserved0=0x0, dwReserved1=0x0, cFileName="splashscreen.dll", cAlternateFileName="SPLASH~1.DLL")) returned 1 [0059.410] FindNextFileW (in: hFindFile=0x381c80, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x744249a0, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x744249a0, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x744249a0, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x70fa8, dwReserved0=0x0, dwReserved1=0x0, cFileName="ssv.dll", cAlternateFileName="")) returned 1 [0059.410] FindNextFileW (in: hFindFile=0x381c80, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x744249a0, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x744249a0, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x744249a0, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0xbfa8, dwReserved0=0x0, dwReserved1=0x0, cFileName="ssvagent.exe", cAlternateFileName="")) returned 1 [0059.410] FindNextFileW (in: hFindFile=0x381c80, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x744249a0, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x744249a0, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x744249a0, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x1e3a8, dwReserved0=0x0, dwReserved1=0x0, cFileName="sunec.dll", cAlternateFileName="")) returned 1 [0059.410] FindNextFileW (in: hFindFile=0x381c80, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x744249a0, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x744249a0, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x7444ab00, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x63a8, dwReserved0=0x0, dwReserved1=0x0, cFileName="sunmscapi.dll", cAlternateFileName="SUNMSC~1.DLL")) returned 1 [0059.410] FindNextFileW (in: hFindFile=0x381c80, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7444ab00, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x7444ab00, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x7444ab00, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x2f1a8, dwReserved0=0x0, dwReserved1=0x0, cFileName="t2k.dll", cAlternateFileName="")) returned 1 [0059.410] FindNextFileW (in: hFindFile=0x381c80, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7444ab00, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x7444ab00, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x7444ab00, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x3fa8, dwReserved0=0x0, dwReserved1=0x0, cFileName="tnameserv.exe", cAlternateFileName="TNAMES~1.EXE")) returned 1 [0059.411] FindNextFileW (in: hFindFile=0x381c80, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7444ab00, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x7444ab00, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x7444ab00, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0xe3a8, dwReserved0=0x0, dwReserved1=0x0, cFileName="unpack.dll", cAlternateFileName="")) returned 1 [0059.411] FindNextFileW (in: hFindFile=0x381c80, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7444ab00, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x7444ab00, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x7444ab00, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x23ba8, dwReserved0=0x0, dwReserved1=0x0, cFileName="unpack200.exe", cAlternateFileName="UNPACK~1.EXE")) returned 1 [0059.411] FindNextFileW (in: hFindFile=0x381c80, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7444ab00, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x7444ab00, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x7444ab00, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x9ba8, dwReserved0=0x0, dwReserved1=0x0, cFileName="verify.dll", cAlternateFileName="")) returned 1 [0059.411] FindNextFileW (in: hFindFile=0x381c80, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7444ab00, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x7444ab00, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x7444ab00, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x53a8, dwReserved0=0x0, dwReserved1=0x0, cFileName="w2k_lsa_auth.dll", cAlternateFileName="W2K_LS~1.DLL")) returned 1 [0059.411] FindNextFileW (in: hFindFile=0x381c80, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7444ab00, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x7444ab00, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x7444ab00, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x177a8, dwReserved0=0x0, dwReserved1=0x0, cFileName="WindowsAccessBridge-32.dll", cAlternateFileName="WINDOW~1.DLL")) returned 1 [0059.411] FindNextFileW (in: hFindFile=0x381c80, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7444ab00, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x7444ab00, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x7444ab00, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x28fa8, dwReserved0=0x0, dwReserved1=0x0, cFileName="wsdetect.dll", cAlternateFileName="")) returned 1 [0059.411] FindNextFileW (in: hFindFile=0x381c80, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7444ab00, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x7444ab00, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x7444ab00, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x105a8, dwReserved0=0x0, dwReserved1=0x0, cFileName="zip.dll", cAlternateFileName="")) returned 1 [0059.411] FindNextFileW (in: hFindFile=0x381c80, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0059.411] FindClose (in: hFindFile=0x381c80 | out: hFindFile=0x381c80) returned 1 [0059.412] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e77c) returned 1 [0059.412] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e788) returned 1 [0059.412] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e7bc) returned 1 [0059.412] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Java\\jre7\\bin", nBufferLength=0x105, lpBuffer=0x31e2c4, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Java\\jre7\\bin", lpFilePart=0x0) returned 0x24 [0059.412] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Java\\jre7\\bin\\", nBufferLength=0x105, lpBuffer=0x31e298, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Java\\jre7\\bin\\", lpFilePart=0x0) returned 0x25 [0059.412] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Java\\jre7\\bin\\*", lpFindFileData=0x31e4e4 | out: lpFindFileData=0x31e4e4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7438c420, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x762ca4e0, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x762ca4e0, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x381c80 [0059.412] FindNextFileW (in: hFindFile=0x381c80, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7438c420, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x762ca4e0, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x762ca4e0, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0059.412] FindNextFileW (in: hFindFile=0x381c80, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x743b2580, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x743b2580, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x743b2580, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x11e7a8, dwReserved0=0x0, dwReserved1=0x0, cFileName="awt.dll", cAlternateFileName="")) returned 1 [0059.412] FindNextFileW (in: hFindFile=0x381c80, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x743b2580, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x743b2580, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x743b2580, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x255a8, dwReserved0=0x0, dwReserved1=0x0, cFileName="axbridge.dll", cAlternateFileName="")) returned 1 [0059.412] FindNextFileW (in: hFindFile=0x381c80, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x743b2580, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x76eb12e0, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x76eb12e0, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="client", cAlternateFileName="")) returned 1 [0059.413] FindNextFileW (in: hFindFile=0x381c80, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x743b2580, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x743b2580, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x743b2580, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x22ba8, dwReserved0=0x0, dwReserved1=0x0, cFileName="dcpr.dll", cAlternateFileName="")) returned 1 [0059.413] FindNextFileW (in: hFindFile=0x381c80, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x743b2580, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x743b2580, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x743b2580, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0xf5a8, dwReserved0=0x0, dwReserved1=0x0, cFileName="decora-sse.dll", cAlternateFileName="DECORA~1.DLL")) returned 1 [0059.413] FindNextFileW (in: hFindFile=0x381c80, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x743b2580, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x743b2580, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x743b2580, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x58fa8, dwReserved0=0x0, dwReserved1=0x0, cFileName="deploy.dll", cAlternateFileName="")) returned 1 [0059.413] FindNextFileW (in: hFindFile=0x381c80, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x743b2580, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x743b2580, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x743b2580, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="dtplugin", cAlternateFileName="")) returned 1 [0059.413] FindNextFileW (in: hFindFile=0x381c80, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x743b2580, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x743b2580, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x743b2580, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x63a8, dwReserved0=0x0, dwReserved1=0x0, cFileName="dt_shmem.dll", cAlternateFileName="")) returned 1 [0059.413] FindNextFileW (in: hFindFile=0x381c80, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x743b2580, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x743b2580, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x743b2580, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x55a8, dwReserved0=0x0, dwReserved1=0x0, cFileName="dt_socket.dll", cAlternateFileName="DT_SOC~1.DLL")) returned 1 [0059.413] FindNextFileW (in: hFindFile=0x381c80, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x743b2580, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x743b2580, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x743b2580, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x1a9a8, dwReserved0=0x0, dwReserved1=0x0, cFileName="eula.dll", cAlternateFileName="")) returned 1 [0059.413] FindNextFileW (in: hFindFile=0x381c80, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x743b2580, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x743b2580, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x743b2580, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x34fa8, dwReserved0=0x0, dwReserved1=0x0, cFileName="fontmanager.dll", cAlternateFileName="FONTMA~1.DLL")) returned 1 [0059.414] FindNextFileW (in: hFindFile=0x381c80, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x743b2580, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x743b2580, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x743b2580, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x263a8, dwReserved0=0x0, dwReserved1=0x0, cFileName="fxplugins.dll", cAlternateFileName="FXPLUG~1.DLL")) returned 1 [0059.414] FindNextFileW (in: hFindFile=0x381c80, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x743b2580, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x743b2580, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x743b2580, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x26fa8, dwReserved0=0x0, dwReserved1=0x0, cFileName="glass.dll", cAlternateFileName="")) returned 1 [0059.414] FindNextFileW (in: hFindFile=0x381c80, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x743b2580, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x743b2580, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x743b2580, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x63ba8, dwReserved0=0x0, dwReserved1=0x0, cFileName="glib-lite.dll", cAlternateFileName="GLIB-L~1.DLL")) returned 1 [0059.414] FindNextFileW (in: hFindFile=0x381c80, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x743b2580, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x743b2580, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x743b2580, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x7b7a8, dwReserved0=0x0, dwReserved1=0x0, cFileName="gstreamer-lite.dll", cAlternateFileName="GSTREA~1.DLL")) returned 1 [0059.414] FindNextFileW (in: hFindFile=0x381c80, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x743b2580, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x743b2580, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x743b2580, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x205a8, dwReserved0=0x0, dwReserved1=0x0, cFileName="hprof.dll", cAlternateFileName="")) returned 1 [0059.414] FindNextFileW (in: hFindFile=0x381c80, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x743b2580, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x743b2580, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x743b2580, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x32ba0, dwReserved0=0x0, dwReserved1=0x0, cFileName="installer.dll", cAlternateFileName="INSTAL~1.DLL")) returned 1 [0059.415] FindNextFileW (in: hFindFile=0x381c80, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x743b2580, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x743b2580, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x743b2580, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x1c1a8, dwReserved0=0x0, dwReserved1=0x0, cFileName="instrument.dll", cAlternateFileName="INSTRU~1.DLL")) returned 1 [0059.415] FindNextFileW (in: hFindFile=0x381c80, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x743b2580, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x743b2580, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x743d86e0, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x3fa8, dwReserved0=0x0, dwReserved1=0x0, cFileName="j2pcsc.dll", cAlternateFileName="")) returned 1 [0059.415] FindNextFileW (in: hFindFile=0x381c80, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x743d86e0, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x743d86e0, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x743d86e0, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0xc7a8, dwReserved0=0x0, dwReserved1=0x0, cFileName="j2pkcs11.dll", cAlternateFileName="")) returned 1 [0059.415] FindNextFileW (in: hFindFile=0x381c80, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x743d86e0, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x743d86e0, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x743d86e0, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x4da8, dwReserved0=0x0, dwReserved1=0x0, cFileName="jaas_nt.dll", cAlternateFileName="")) returned 1 [0059.415] FindNextFileW (in: hFindFile=0x381c80, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x743d86e0, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x743d86e0, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x743d86e0, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0xbba8, dwReserved0=0x0, dwReserved1=0x0, cFileName="jabswitch.exe", cAlternateFileName="JABSWI~1.EXE")) returned 1 [0059.415] FindNextFileW (in: hFindFile=0x381c80, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x743d86e0, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x743d86e0, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x743d86e0, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x3da8, dwReserved0=0x0, dwReserved1=0x0, cFileName="java-rmi.exe", cAlternateFileName="")) returned 1 [0059.415] FindNextFileW (in: hFindFile=0x381c80, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x743d86e0, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x743d86e0, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x743d86e0, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x1d5a8, dwReserved0=0x0, dwReserved1=0x0, cFileName="java.dll", cAlternateFileName="")) returned 1 [0059.415] FindNextFileW (in: hFindFile=0x381c80, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x743d86e0, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x743d86e0, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x743d86e0, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x2a9a8, dwReserved0=0x0, dwReserved1=0x0, cFileName="java.exe", cAlternateFileName="")) returned 1 [0059.416] FindNextFileW (in: hFindFile=0x381c80, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x743d86e0, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x743d86e0, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x743d86e0, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x1e7a8, dwReserved0=0x0, dwReserved1=0x0, cFileName="JavaAccessBridge-32.dll", cAlternateFileName="JAVAAC~1.DLL")) returned 1 [0059.416] FindNextFileW (in: hFindFile=0x381c80, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x743d86e0, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x743d86e0, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x743d86e0, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x105a8, dwReserved0=0x0, dwReserved1=0x0, cFileName="javacpl.exe", cAlternateFileName="")) returned 1 [0059.416] FindNextFileW (in: hFindFile=0x381c80, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x743d86e0, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x743d86e0, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x743d86e0, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x3b3a8, dwReserved0=0x0, dwReserved1=0x0, cFileName="javafx-font.dll", cAlternateFileName="JAVAFX~1.DLL")) returned 1 [0059.416] FindNextFileW (in: hFindFile=0x381c80, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x743d86e0, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x743d86e0, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x743d86e0, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x2dfa8, dwReserved0=0x0, dwReserved1=0x0, cFileName="javafx-iio.dll", cAlternateFileName="JAVAFX~2.DLL")) returned 1 [0059.416] FindNextFileW (in: hFindFile=0x381c80, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x743d86e0, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x743d86e0, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x743d86e0, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x2aba8, dwReserved0=0x0, dwReserved1=0x0, cFileName="javaw.exe", cAlternateFileName="")) returned 1 [0059.416] FindNextFileW (in: hFindFile=0x381c80, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x743d86e0, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x743d86e0, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x743d86e0, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x409a8, dwReserved0=0x0, dwReserved1=0x0, cFileName="javaws.exe", cAlternateFileName="")) returned 1 [0059.416] FindNextFileW (in: hFindFile=0x381c80, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x743d86e0, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x743d86e0, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x743d86e0, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x5da8, dwReserved0=0x0, dwReserved1=0x0, cFileName="java_crw_demo.dll", cAlternateFileName="JAVA_C~1.DLL")) returned 1 [0059.417] FindNextFileW (in: hFindFile=0x381c80, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x743d86e0, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x743d86e0, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x743d86e0, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x37a8, dwReserved0=0x0, dwReserved1=0x0, cFileName="jawt.dll", cAlternateFileName="")) returned 1 [0059.417] FindNextFileW (in: hFindFile=0x381c80, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x743d86e0, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x743d86e0, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x743d86e0, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x3ba8, dwReserved0=0x0, dwReserved1=0x0, cFileName="JAWTAccessBridge-32.dll", cAlternateFileName="JAWTAC~1.DLL")) returned 1 [0059.417] FindNextFileW (in: hFindFile=0x381c80, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x743d86e0, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x743d86e0, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x743d86e0, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0xb3a8, dwReserved0=0x0, dwReserved1=0x0, cFileName="JdbcOdbc.dll", cAlternateFileName="")) returned 1 [0059.417] FindNextFileW (in: hFindFile=0x381c80, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x743d86e0, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x743d86e0, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x743d86e0, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x283a8, dwReserved0=0x0, dwReserved1=0x0, cFileName="jdwp.dll", cAlternateFileName="")) returned 1 [0059.417] FindNextFileW (in: hFindFile=0x381c80, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x743d86e0, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x743d86e0, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x743d86e0, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x4fa8, dwReserved0=0x0, dwReserved1=0x0, cFileName="jfr.dll", cAlternateFileName="")) returned 1 [0059.417] FindNextFileW (in: hFindFile=0x381c80, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x743d86e0, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x743d86e0, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x743d86e0, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x1afa8, dwReserved0=0x0, dwReserved1=0x0, cFileName="jfxmedia.dll", cAlternateFileName="")) returned 1 [0059.417] FindNextFileW (in: hFindFile=0x381c80, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x743d86e0, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x743d86e0, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x743fe840, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0xb579a8, dwReserved0=0x0, dwReserved1=0x0, cFileName="jfxwebkit.dll", cAlternateFileName="JFXWEB~1.DLL")) returned 1 [0059.417] FindNextFileW (in: hFindFile=0x381c80, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x743fe840, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x743fe840, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x743fe840, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x22da8, dwReserved0=0x0, dwReserved1=0x0, cFileName="jli.dll", cAlternateFileName="")) returned 1 [0059.418] FindNextFileW (in: hFindFile=0x381c80, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x743fe840, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x743fe840, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x743fe840, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x313a8, dwReserved0=0x0, dwReserved1=0x0, cFileName="jp2iexp.dll", cAlternateFileName="")) returned 1 [0059.418] FindNextFileW (in: hFindFile=0x381c80, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x743fe840, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x743fe840, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x743fe840, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0xcda8, dwReserved0=0x0, dwReserved1=0x0, cFileName="jp2launcher.exe", cAlternateFileName="JP2LAU~1.EXE")) returned 1 [0059.418] FindNextFileW (in: hFindFile=0x381c80, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x743fe840, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x743fe840, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x743fe840, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x41a8, dwReserved0=0x0, dwReserved1=0x0, cFileName="jp2native.dll", cAlternateFileName="JP2NAT~1.DLL")) returned 1 [0059.418] FindNextFileW (in: hFindFile=0x381c80, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x743fe840, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x743fe840, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x743fe840, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x29fa8, dwReserved0=0x0, dwReserved1=0x0, cFileName="jp2ssv.dll", cAlternateFileName="")) returned 1 [0059.418] FindNextFileW (in: hFindFile=0x381c80, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x743fe840, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x743fe840, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x743fe840, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x239a8, dwReserved0=0x0, dwReserved1=0x0, cFileName="jpeg.dll", cAlternateFileName="")) returned 1 [0059.418] FindNextFileW (in: hFindFile=0x381c80, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x743fe840, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x743fe840, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x743fe840, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x16da8, dwReserved0=0x0, dwReserved1=0x0, cFileName="jpicom.dll", cAlternateFileName="")) returned 1 [0059.418] FindNextFileW (in: hFindFile=0x381c80, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x743fe840, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x743fe840, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x743fe840, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x261a8, dwReserved0=0x0, dwReserved1=0x0, cFileName="jpiexp.dll", cAlternateFileName="")) returned 1 [0059.418] FindNextFileW (in: hFindFile=0x381c80, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x743fe840, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x743fe840, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x743fe840, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x195a8, dwReserved0=0x0, dwReserved1=0x0, cFileName="jpinscp.dll", cAlternateFileName="")) returned 1 [0059.419] FindNextFileW (in: hFindFile=0x381c80, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x743fe840, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x743fe840, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x743fe840, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x10da8, dwReserved0=0x0, dwReserved1=0x0, cFileName="jpioji.dll", cAlternateFileName="")) returned 1 [0059.419] FindNextFileW (in: hFindFile=0x381c80, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x743fe840, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x743fe840, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x743fe840, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x229a8, dwReserved0=0x0, dwReserved1=0x0, cFileName="jpishare.dll", cAlternateFileName="")) returned 1 [0059.419] FindNextFileW (in: hFindFile=0x381c80, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x743fe840, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x743fe840, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x743fe840, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x2c9a8, dwReserved0=0x0, dwReserved1=0x0, cFileName="jqs.exe", cAlternateFileName="")) returned 1 [0059.419] FindNextFileW (in: hFindFile=0x381c80, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x743fe840, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x743fe840, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x743fe840, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x41a8, dwReserved0=0x0, dwReserved1=0x0, cFileName="jsdt.dll", cAlternateFileName="")) returned 1 [0059.419] FindNextFileW (in: hFindFile=0x381c80, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x743fe840, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x743fe840, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x743fe840, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x77a8, dwReserved0=0x0, dwReserved1=0x0, cFileName="jsound.dll", cAlternateFileName="")) returned 1 [0059.419] FindNextFileW (in: hFindFile=0x381c80, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x743fe840, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x743fe840, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x743fe840, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x6ba8, dwReserved0=0x0, dwReserved1=0x0, cFileName="jsoundds.dll", cAlternateFileName="")) returned 1 [0059.419] FindNextFileW (in: hFindFile=0x381c80, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x743fe840, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x743fe840, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x743fe840, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x2b7a8, dwReserved0=0x0, dwReserved1=0x0, cFileName="kcms.dll", cAlternateFileName="")) returned 1 [0059.419] FindNextFileW (in: hFindFile=0x381c80, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x743fe840, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x743fe840, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x743fe840, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x3da8, dwReserved0=0x0, dwReserved1=0x0, cFileName="keytool.exe", cAlternateFileName="")) returned 1 [0059.420] FindNextFileW (in: hFindFile=0x381c80, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x743fe840, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x743fe840, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x743fe840, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x3da8, dwReserved0=0x0, dwReserved1=0x0, cFileName="kinit.exe", cAlternateFileName="")) returned 1 [0059.420] FindNextFileW (in: hFindFile=0x381c80, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x743fe840, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x743fe840, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x743fe840, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x3da8, dwReserved0=0x0, dwReserved1=0x0, cFileName="klist.exe", cAlternateFileName="")) returned 1 [0059.420] FindNextFileW (in: hFindFile=0x381c80, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x743fe840, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x743fe840, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x743fe840, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x3da8, dwReserved0=0x0, dwReserved1=0x0, cFileName="ktab.exe", cAlternateFileName="")) returned 1 [0059.420] FindNextFileW (in: hFindFile=0x381c80, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x743fe840, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x743fe840, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x743fe840, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x6dba8, dwReserved0=0x0, dwReserved1=0x0, cFileName="libxml2.dll", cAlternateFileName="")) returned 1 [0059.420] FindNextFileW (in: hFindFile=0x381c80, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x743fe840, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x743fe840, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x743fe840, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x269a8, dwReserved0=0x0, dwReserved1=0x0, cFileName="libxslt.dll", cAlternateFileName="")) returned 1 [0059.420] FindNextFileW (in: hFindFile=0x381c80, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x743fe840, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x743fe840, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x743fe840, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x7ba8, dwReserved0=0x0, dwReserved1=0x0, cFileName="management.dll", cAlternateFileName="MANAGE~1.DLL")) returned 1 [0059.420] FindNextFileW (in: hFindFile=0x381c80, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x743fe840, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x743fe840, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x743fe840, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x8c1a8, dwReserved0=0x0, dwReserved1=0x0, cFileName="mlib_image.dll", cAlternateFileName="MLIB_I~1.DLL")) returned 1 [0059.421] FindNextFileW (in: hFindFile=0x381c80, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x744249a0, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x744249a0, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x744249a0, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0xbcf50, dwReserved0=0x0, dwReserved1=0x0, cFileName="msvcr100.dll", cAlternateFileName="")) returned 1 [0059.421] FindNextFileW (in: hFindFile=0x381c80, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x744249a0, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x744249a0, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x744249a0, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x127a8, dwReserved0=0x0, dwReserved1=0x0, cFileName="net.dll", cAlternateFileName="")) returned 1 [0059.421] FindNextFileW (in: hFindFile=0x381c80, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x744249a0, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x744249a0, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x744249a0, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0xc3a8, dwReserved0=0x0, dwReserved1=0x0, cFileName="nio.dll", cAlternateFileName="")) returned 1 [0059.421] FindNextFileW (in: hFindFile=0x381c80, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x744249a0, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x744249a0, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x744249a0, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x367a8, dwReserved0=0x0, dwReserved1=0x0, cFileName="npjpi170_45.dll", cAlternateFileName="NPJPI1~1.DLL")) returned 1 [0059.421] FindNextFileW (in: hFindFile=0x381c80, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x744249a0, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x744249a0, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x744249a0, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x35da8, dwReserved0=0x0, dwReserved1=0x0, cFileName="npoji610.dll", cAlternateFileName="")) returned 1 [0059.421] FindNextFileW (in: hFindFile=0x381c80, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x744249a0, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x744249a0, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x744249a0, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x45a8, dwReserved0=0x0, dwReserved1=0x0, cFileName="npt.dll", cAlternateFileName="")) returned 1 [0059.421] FindNextFileW (in: hFindFile=0x381c80, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x744249a0, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x744249a0, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x744249a0, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x3da8, dwReserved0=0x0, dwReserved1=0x0, cFileName="orbd.exe", cAlternateFileName="")) returned 1 [0059.422] FindNextFileW (in: hFindFile=0x381c80, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x744249a0, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x744249a0, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x744249a0, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x3da8, dwReserved0=0x0, dwReserved1=0x0, cFileName="pack200.exe", cAlternateFileName="")) returned 1 [0059.422] FindNextFileW (in: hFindFile=0x381c80, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x744249a0, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x744249a0, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x744249a0, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="plugin2", cAlternateFileName="")) returned 1 [0059.422] FindNextFileW (in: hFindFile=0x381c80, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x744249a0, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x744249a0, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x744249a0, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x3da8, dwReserved0=0x0, dwReserved1=0x0, cFileName="policytool.exe", cAlternateFileName="POLICY~1.EXE")) returned 1 [0059.422] FindNextFileW (in: hFindFile=0x381c80, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x744249a0, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x744249a0, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x744249a0, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0xb3a8, dwReserved0=0x0, dwReserved1=0x0, cFileName="prism-d3d.dll", cAlternateFileName="PRISM-~1.DLL")) returned 1 [0059.422] FindNextFileW (in: hFindFile=0x381c80, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x744249a0, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x744249a0, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x744249a0, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x3da8, dwReserved0=0x0, dwReserved1=0x0, cFileName="rmid.exe", cAlternateFileName="")) returned 1 [0059.422] FindNextFileW (in: hFindFile=0x381c80, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x744249a0, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x744249a0, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x744249a0, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x3da8, dwReserved0=0x0, dwReserved1=0x0, cFileName="rmiregistry.exe", cAlternateFileName="RMIREG~1.EXE")) returned 1 [0059.422] FindNextFileW (in: hFindFile=0x381c80, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x744249a0, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x744249a0, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x744249a0, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x3da8, dwReserved0=0x0, dwReserved1=0x0, cFileName="servertool.exe", cAlternateFileName="SERVER~1.EXE")) returned 1 [0059.423] FindNextFileW (in: hFindFile=0x381c80, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x744249a0, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x744249a0, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x744249a0, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x2ffa8, dwReserved0=0x0, dwReserved1=0x0, cFileName="splashscreen.dll", cAlternateFileName="SPLASH~1.DLL")) returned 1 [0059.423] FindNextFileW (in: hFindFile=0x381c80, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x744249a0, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x744249a0, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x744249a0, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x70fa8, dwReserved0=0x0, dwReserved1=0x0, cFileName="ssv.dll", cAlternateFileName="")) returned 1 [0059.423] FindNextFileW (in: hFindFile=0x381c80, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x744249a0, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x744249a0, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x744249a0, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0xbfa8, dwReserved0=0x0, dwReserved1=0x0, cFileName="ssvagent.exe", cAlternateFileName="")) returned 1 [0059.423] FindNextFileW (in: hFindFile=0x381c80, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x744249a0, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x744249a0, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x744249a0, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x1e3a8, dwReserved0=0x0, dwReserved1=0x0, cFileName="sunec.dll", cAlternateFileName="")) returned 1 [0059.423] FindNextFileW (in: hFindFile=0x381c80, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x744249a0, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x744249a0, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x7444ab00, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x63a8, dwReserved0=0x0, dwReserved1=0x0, cFileName="sunmscapi.dll", cAlternateFileName="SUNMSC~1.DLL")) returned 1 [0059.423] FindNextFileW (in: hFindFile=0x381c80, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7444ab00, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x7444ab00, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x7444ab00, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x2f1a8, dwReserved0=0x0, dwReserved1=0x0, cFileName="t2k.dll", cAlternateFileName="")) returned 1 [0059.423] FindNextFileW (in: hFindFile=0x381c80, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7444ab00, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x7444ab00, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x7444ab00, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x3fa8, dwReserved0=0x0, dwReserved1=0x0, cFileName="tnameserv.exe", cAlternateFileName="TNAMES~1.EXE")) returned 1 [0059.423] FindNextFileW (in: hFindFile=0x381c80, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7444ab00, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x7444ab00, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x7444ab00, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0xe3a8, dwReserved0=0x0, dwReserved1=0x0, cFileName="unpack.dll", cAlternateFileName="")) returned 1 [0059.424] FindNextFileW (in: hFindFile=0x381c80, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7444ab00, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x7444ab00, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x7444ab00, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x23ba8, dwReserved0=0x0, dwReserved1=0x0, cFileName="unpack200.exe", cAlternateFileName="UNPACK~1.EXE")) returned 1 [0059.424] FindNextFileW (in: hFindFile=0x381c80, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7444ab00, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x7444ab00, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x7444ab00, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x9ba8, dwReserved0=0x0, dwReserved1=0x0, cFileName="verify.dll", cAlternateFileName="")) returned 1 [0059.424] FindNextFileW (in: hFindFile=0x381c80, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7444ab00, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x7444ab00, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x7444ab00, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x53a8, dwReserved0=0x0, dwReserved1=0x0, cFileName="w2k_lsa_auth.dll", cAlternateFileName="W2K_LS~1.DLL")) returned 1 [0059.424] FindNextFileW (in: hFindFile=0x381c80, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7444ab00, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x7444ab00, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x7444ab00, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x177a8, dwReserved0=0x0, dwReserved1=0x0, cFileName="WindowsAccessBridge-32.dll", cAlternateFileName="WINDOW~1.DLL")) returned 1 [0059.424] FindNextFileW (in: hFindFile=0x381c80, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7444ab00, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x7444ab00, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x7444ab00, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x28fa8, dwReserved0=0x0, dwReserved1=0x0, cFileName="wsdetect.dll", cAlternateFileName="")) returned 1 [0059.424] FindNextFileW (in: hFindFile=0x381c80, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7444ab00, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x7444ab00, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x7444ab00, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x105a8, dwReserved0=0x0, dwReserved1=0x0, cFileName="zip.dll", cAlternateFileName="")) returned 1 [0059.424] FindNextFileW (in: hFindFile=0x381c80, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7444ab00, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x7444ab00, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x7444ab00, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x105a8, dwReserved0=0x0, dwReserved1=0x0, cFileName="zip.dll", cAlternateFileName="")) returned 0 [0059.424] FindClose (in: hFindFile=0x381c80 | out: hFindFile=0x381c80) returned 1 [0059.425] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e77c) returned 1 [0059.425] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e788) returned 1 [0059.425] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e744) returned 1 [0059.425] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Java\\jre7\\bin\\client", nBufferLength=0x105, lpBuffer=0x31e24c, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Java\\jre7\\bin\\client", lpFilePart=0x0) returned 0x2b [0059.425] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Java\\jre7\\bin\\client\\", nBufferLength=0x105, lpBuffer=0x31e220, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Java\\jre7\\bin\\client\\", lpFilePart=0x0) returned 0x2c [0059.425] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Java\\jre7\\bin\\client\\*", lpFindFileData=0x31e46c | out: lpFindFileData=0x31e46c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x743b2580, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x76eb12e0, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x76eb12e0, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x381c80 [0059.426] FindNextFileW (in: hFindFile=0x381c80, lpFindFileData=0x31e47c | out: lpFindFileData=0x31e47c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x743b2580, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x76eb12e0, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x76eb12e0, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0059.426] FindNextFileW (in: hFindFile=0x381c80, lpFindFileData=0x31e47c | out: lpFindFileData=0x31e47c*(dwFileAttributes=0x21, ftCreationTime.dwLowDateTime=0x76eb12e0, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x76eb12e0, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x76ed7440, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0xd20000, dwReserved0=0x0, dwReserved1=0x0, cFileName="classes.jsa", cAlternateFileName="")) returned 1 [0059.426] FindNextFileW (in: hFindFile=0x381c80, lpFindFileData=0x31e47c | out: lpFindFileData=0x31e47c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x743b2580, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x743b2580, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x743b2580, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x3665a8, dwReserved0=0x0, dwReserved1=0x0, cFileName="jvm.dll", cAlternateFileName="")) returned 1 [0059.426] FindNextFileW (in: hFindFile=0x381c80, lpFindFileData=0x31e47c | out: lpFindFileData=0x31e47c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x743b2580, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x743b2580, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x743b2580, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x5a7, dwReserved0=0x0, dwReserved1=0x0, cFileName="Xusage.txt", cAlternateFileName="")) returned 1 [0059.426] FindNextFileW (in: hFindFile=0x381c80, lpFindFileData=0x31e47c | out: lpFindFileData=0x31e47c*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0059.426] FindClose (in: hFindFile=0x381c80 | out: hFindFile=0x381c80) returned 1 [0059.426] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e704) returned 1 [0059.426] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e710) returned 1 [0059.426] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e744) returned 1 [0059.426] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Java\\jre7\\bin\\client", nBufferLength=0x105, lpBuffer=0x31e24c, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Java\\jre7\\bin\\client", lpFilePart=0x0) returned 0x2b [0059.426] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Java\\jre7\\bin\\client\\", nBufferLength=0x105, lpBuffer=0x31e220, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Java\\jre7\\bin\\client\\", lpFilePart=0x0) returned 0x2c [0059.426] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Java\\jre7\\bin\\client\\*", lpFindFileData=0x31e46c | out: lpFindFileData=0x31e46c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x743b2580, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x76eb12e0, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x76eb12e0, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x381c80 [0059.427] FindNextFileW (in: hFindFile=0x381c80, lpFindFileData=0x31e47c | out: lpFindFileData=0x31e47c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x743b2580, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x76eb12e0, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x76eb12e0, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0059.427] FindNextFileW (in: hFindFile=0x381c80, lpFindFileData=0x31e47c | out: lpFindFileData=0x31e47c*(dwFileAttributes=0x21, ftCreationTime.dwLowDateTime=0x76eb12e0, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x76eb12e0, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x76ed7440, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0xd20000, dwReserved0=0x0, dwReserved1=0x0, cFileName="classes.jsa", cAlternateFileName="")) returned 1 [0059.427] FindNextFileW (in: hFindFile=0x381c80, lpFindFileData=0x31e47c | out: lpFindFileData=0x31e47c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x743b2580, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x743b2580, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x743b2580, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x3665a8, dwReserved0=0x0, dwReserved1=0x0, cFileName="jvm.dll", cAlternateFileName="")) returned 1 [0059.427] FindNextFileW (in: hFindFile=0x381c80, lpFindFileData=0x31e47c | out: lpFindFileData=0x31e47c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x743b2580, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x743b2580, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x743b2580, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x5a7, dwReserved0=0x0, dwReserved1=0x0, cFileName="Xusage.txt", cAlternateFileName="")) returned 1 [0059.427] FindNextFileW (in: hFindFile=0x381c80, lpFindFileData=0x31e47c | out: lpFindFileData=0x31e47c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x743b2580, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x743b2580, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x743b2580, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x5a7, dwReserved0=0x0, dwReserved1=0x0, cFileName="Xusage.txt", cAlternateFileName="")) returned 0 [0059.427] FindClose (in: hFindFile=0x381c80 | out: hFindFile=0x381c80) returned 1 [0059.427] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e704) returned 1 [0059.427] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e710) returned 1 [0059.427] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Java\\jre7\\bin\\client\\Xusage.txt", nBufferLength=0x105, lpBuffer=0x31e11c, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Java\\jre7\\bin\\client\\Xusage.txt", lpFilePart=0x0) returned 0x36 [0059.427] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e610) returned 1 [0059.427] CreateFileW (lpFileName="C:\\Program Files (x86)\\Java\\jre7\\bin\\client\\Xusage.txt" (normalized: "c:\\program files (x86)\\java\\jre7\\bin\\client\\xusage.txt"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x274 [0059.428] GetFileType (hFile=0x274) returned 0x1 [0059.428] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e60c) returned 1 [0059.428] GetFileType (hFile=0x274) returned 0x1 [0059.428] GetFileSize (in: hFile=0x274, lpFileSizeHigh=0x31e718 | out: lpFileSizeHigh=0x31e718*=0x0) returned 0x5a7 [0059.428] ReadFile (in: hFile=0x274, lpBuffer=0x268fd38, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x31e6c4, lpOverlapped=0x0 | out: lpBuffer=0x268fd38*, lpNumberOfBytesRead=0x31e6c4*=0x5a7, lpOverlapped=0x0) returned 1 [0059.439] CloseHandle (hObject=0x274) returned 1 [0059.477] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Java\\jre7\\bin\\client\\Xusage.txt", nBufferLength=0x105, lpBuffer=0x31e108, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Java\\jre7\\bin\\client\\Xusage.txt", lpFilePart=0x0) returned 0x36 [0059.477] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e5fc) returned 1 [0059.477] CreateFileW (lpFileName="C:\\Program Files (x86)\\Java\\jre7\\bin\\client\\Xusage.txt" (normalized: "c:\\program files (x86)\\java\\jre7\\bin\\client\\xusage.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x274 [0059.478] GetFileType (hFile=0x274) returned 0x1 [0059.478] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e5f8) returned 1 [0059.478] GetFileType (hFile=0x274) returned 0x1 [0059.478] WriteFile (in: hFile=0x274, lpBuffer=0x26df9fc*, nNumberOfBytesToWrite=0x5b0, lpNumberOfBytesWritten=0x31e68c, lpOverlapped=0x0 | out: lpBuffer=0x26df9fc*, lpNumberOfBytesWritten=0x31e68c*=0x5b0, lpOverlapped=0x0) returned 1 [0059.479] CloseHandle (hObject=0x274) returned 1 [0059.479] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Java\\jre7\\bin\\client\\Xusage.txt", nBufferLength=0x105, lpBuffer=0x31e23c, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Java\\jre7\\bin\\client\\Xusage.txt", lpFilePart=0x0) returned 0x36 [0059.479] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Java\\jre7\\bin\\client\\Xusage.txt", nBufferLength=0x105, lpBuffer=0x31e23c, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Java\\jre7\\bin\\client\\Xusage.txt", lpFilePart=0x0) returned 0x36 [0059.479] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e69c) returned 1 [0059.479] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Java\\jre7\\bin\\client\\Xusage.txt" (normalized: "c:\\program files (x86)\\java\\jre7\\bin\\client\\xusage.txt"), fInfoLevelId=0x0, lpFileInformation=0x31e718 | out: lpFileInformation=0x31e718*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x743b2580, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x743b2580, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x6e6fe80, ftLastWriteTime.dwHighDateTime=0x1d6eb7f, nFileSizeHigh=0x0, nFileSizeLow=0x5b0)) returned 1 [0059.479] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e698) returned 1 [0059.479] MoveFileW (lpExistingFileName="C:\\Program Files (x86)\\Java\\jre7\\bin\\client\\Xusage.txt" (normalized: "c:\\program files (x86)\\java\\jre7\\bin\\client\\xusage.txt"), lpNewFileName="C:\\Program Files (x86)\\Java\\jre7\\bin\\client\\Xusage.txt" (normalized: "c:\\program files (x86)\\java\\jre7\\bin\\client\\xusage.txt")) returned 1 [0059.479] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e744) returned 1 [0059.479] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Java\\jre7\\bin\\dtplugin", nBufferLength=0x105, lpBuffer=0x31e24c, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Java\\jre7\\bin\\dtplugin", lpFilePart=0x0) returned 0x2d [0059.479] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Java\\jre7\\bin\\dtplugin\\", nBufferLength=0x105, lpBuffer=0x31e220, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Java\\jre7\\bin\\dtplugin\\", lpFilePart=0x0) returned 0x2e [0059.480] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Java\\jre7\\bin\\dtplugin\\*", lpFindFileData=0x31e46c | out: lpFindFileData=0x31e46c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x743b2580, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x743b2580, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x743b2580, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x382080 [0059.481] FindNextFileW (in: hFindFile=0x382080, lpFindFileData=0x31e47c | out: lpFindFileData=0x31e47c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x743b2580, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x743b2580, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x743b2580, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0059.481] FindNextFileW (in: hFindFile=0x382080, lpFindFileData=0x31e47c | out: lpFindFileData=0x31e47c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x743b2580, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x743b2580, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x743b2580, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0xc25a8, dwReserved0=0x0, dwReserved1=0x0, cFileName="deployJava1.dll", cAlternateFileName="DEPLOY~1.DLL")) returned 1 [0059.481] FindNextFileW (in: hFindFile=0x382080, lpFindFileData=0x31e47c | out: lpFindFileData=0x31e47c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x743b2580, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x743b2580, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x743b2580, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0xd53a8, dwReserved0=0x0, dwReserved1=0x0, cFileName="npdeployJava1.dll", cAlternateFileName="NPDEPL~1.DLL")) returned 1 [0059.481] FindNextFileW (in: hFindFile=0x382080, lpFindFileData=0x31e47c | out: lpFindFileData=0x31e47c*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0059.481] FindClose (in: hFindFile=0x382080 | out: hFindFile=0x382080) returned 1 [0059.481] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e704) returned 1 [0059.481] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e710) returned 1 [0059.481] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e744) returned 1 [0059.481] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Java\\jre7\\bin\\dtplugin", nBufferLength=0x105, lpBuffer=0x31e24c, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Java\\jre7\\bin\\dtplugin", lpFilePart=0x0) returned 0x2d [0059.481] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Java\\jre7\\bin\\dtplugin\\", nBufferLength=0x105, lpBuffer=0x31e220, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Java\\jre7\\bin\\dtplugin\\", lpFilePart=0x0) returned 0x2e [0059.481] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Java\\jre7\\bin\\dtplugin\\*", lpFindFileData=0x31e46c | out: lpFindFileData=0x31e46c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x743b2580, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x743b2580, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x743b2580, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x382080 [0059.481] FindNextFileW (in: hFindFile=0x382080, lpFindFileData=0x31e47c | out: lpFindFileData=0x31e47c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x743b2580, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x743b2580, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x743b2580, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0059.481] FindNextFileW (in: hFindFile=0x382080, lpFindFileData=0x31e47c | out: lpFindFileData=0x31e47c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x743b2580, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x743b2580, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x743b2580, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0xc25a8, dwReserved0=0x0, dwReserved1=0x0, cFileName="deployJava1.dll", cAlternateFileName="DEPLOY~1.DLL")) returned 1 [0059.481] FindNextFileW (in: hFindFile=0x382080, lpFindFileData=0x31e47c | out: lpFindFileData=0x31e47c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x743b2580, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x743b2580, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x743b2580, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0xd53a8, dwReserved0=0x0, dwReserved1=0x0, cFileName="npdeployJava1.dll", cAlternateFileName="NPDEPL~1.DLL")) returned 1 [0059.481] FindNextFileW (in: hFindFile=0x382080, lpFindFileData=0x31e47c | out: lpFindFileData=0x31e47c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x743b2580, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x743b2580, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x743b2580, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0xd53a8, dwReserved0=0x0, dwReserved1=0x0, cFileName="npdeployJava1.dll", cAlternateFileName="NPDEPL~1.DLL")) returned 0 [0059.482] FindClose (in: hFindFile=0x382080 | out: hFindFile=0x382080) returned 1 [0059.482] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e704) returned 1 [0059.482] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e710) returned 1 [0059.482] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e744) returned 1 [0059.482] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Java\\jre7\\bin\\plugin2", nBufferLength=0x105, lpBuffer=0x31e24c, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Java\\jre7\\bin\\plugin2", lpFilePart=0x0) returned 0x2c [0059.482] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Java\\jre7\\bin\\plugin2\\", nBufferLength=0x105, lpBuffer=0x31e220, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Java\\jre7\\bin\\plugin2\\", lpFilePart=0x0) returned 0x2d [0059.482] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Java\\jre7\\bin\\plugin2\\*", lpFindFileData=0x31e46c | out: lpFindFileData=0x31e46c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x744249a0, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x744249a0, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x744249a0, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x382080 [0059.483] FindNextFileW (in: hFindFile=0x382080, lpFindFileData=0x31e47c | out: lpFindFileData=0x31e47c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x744249a0, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x744249a0, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x744249a0, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0059.484] FindNextFileW (in: hFindFile=0x382080, lpFindFileData=0x31e47c | out: lpFindFileData=0x31e47c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x744249a0, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x744249a0, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x744249a0, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0xbcf50, dwReserved0=0x0, dwReserved1=0x0, cFileName="msvcr100.dll", cAlternateFileName="")) returned 1 [0059.484] FindNextFileW (in: hFindFile=0x382080, lpFindFileData=0x31e47c | out: lpFindFileData=0x31e47c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x744249a0, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x744249a0, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x744249a0, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x27fa8, dwReserved0=0x0, dwReserved1=0x0, cFileName="npjp2.dll", cAlternateFileName="")) returned 1 [0059.484] FindNextFileW (in: hFindFile=0x382080, lpFindFileData=0x31e47c | out: lpFindFileData=0x31e47c*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0059.484] FindClose (in: hFindFile=0x382080 | out: hFindFile=0x382080) returned 1 [0059.484] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e704) returned 1 [0059.484] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e710) returned 1 [0059.484] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e744) returned 1 [0059.484] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Java\\jre7\\bin\\plugin2", nBufferLength=0x105, lpBuffer=0x31e24c, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Java\\jre7\\bin\\plugin2", lpFilePart=0x0) returned 0x2c [0059.484] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Java\\jre7\\bin\\plugin2\\", nBufferLength=0x105, lpBuffer=0x31e220, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Java\\jre7\\bin\\plugin2\\", lpFilePart=0x0) returned 0x2d [0059.484] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Java\\jre7\\bin\\plugin2\\*", lpFindFileData=0x31e46c | out: lpFindFileData=0x31e46c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x744249a0, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x744249a0, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x744249a0, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x382080 [0059.484] FindNextFileW (in: hFindFile=0x382080, lpFindFileData=0x31e47c | out: lpFindFileData=0x31e47c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x744249a0, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x744249a0, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x744249a0, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0059.484] FindNextFileW (in: hFindFile=0x382080, lpFindFileData=0x31e47c | out: lpFindFileData=0x31e47c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x744249a0, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x744249a0, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x744249a0, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0xbcf50, dwReserved0=0x0, dwReserved1=0x0, cFileName="msvcr100.dll", cAlternateFileName="")) returned 1 [0059.484] FindNextFileW (in: hFindFile=0x382080, lpFindFileData=0x31e47c | out: lpFindFileData=0x31e47c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x744249a0, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x744249a0, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x744249a0, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x27fa8, dwReserved0=0x0, dwReserved1=0x0, cFileName="npjp2.dll", cAlternateFileName="")) returned 1 [0059.484] FindNextFileW (in: hFindFile=0x382080, lpFindFileData=0x31e47c | out: lpFindFileData=0x31e47c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x744249a0, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x744249a0, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x744249a0, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x27fa8, dwReserved0=0x0, dwReserved1=0x0, cFileName="npjp2.dll", cAlternateFileName="")) returned 0 [0059.484] FindClose (in: hFindFile=0x382080 | out: hFindFile=0x382080) returned 1 [0059.484] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e704) returned 1 [0059.484] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e710) returned 1 [0059.484] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e7bc) returned 1 [0059.484] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Java\\jre7\\lib", nBufferLength=0x105, lpBuffer=0x31e2c4, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Java\\jre7\\lib", lpFilePart=0x0) returned 0x24 [0059.485] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Java\\jre7\\lib\\", nBufferLength=0x105, lpBuffer=0x31e298, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Java\\jre7\\lib\\", lpFilePart=0x0) returned 0x25 [0059.485] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Java\\jre7\\lib\\*", lpFindFileData=0x31e4e4 | out: lpFindFileData=0x31e4e4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7444ab00, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x7572f9a0, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x7572f9a0, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x382080 [0059.487] FindNextFileW (in: hFindFile=0x382080, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7444ab00, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x7572f9a0, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x7572f9a0, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0059.488] FindNextFileW (in: hFindFile=0x382080, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7444ab00, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x7444ab00, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x7444ab00, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x9b, dwReserved0=0x0, dwReserved1=0x0, cFileName="accessibility.properties", cAlternateFileName="ACCESS~1.PRO")) returned 1 [0059.488] FindNextFileW (in: hFindFile=0x382080, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7444ab00, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x7444ab00, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x7444ab00, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x2a2dd, dwReserved0=0x0, dwReserved1=0x0, cFileName="alt-rt.jar", cAlternateFileName="")) returned 1 [0059.488] FindNextFileW (in: hFindFile=0x382080, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7444ab00, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x7444ab00, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x7444ab00, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="applet", cAlternateFileName="")) returned 1 [0059.488] FindNextFileW (in: hFindFile=0x382080, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7444ab00, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x7444ab00, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x7444ab00, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x4d0, dwReserved0=0x0, dwReserved1=0x0, cFileName="calendars.properties", cAlternateFileName="CALEND~1.PRO")) returned 1 [0059.488] FindNextFileW (in: hFindFile=0x382080, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x751d4820, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x751d4820, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x75220ae0, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x364427, dwReserved0=0x0, dwReserved1=0x0, cFileName="charsets.jar", cAlternateFileName="")) returned 1 [0059.488] FindNextFileW (in: hFindFile=0x382080, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7444ab00, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x7444ab00, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x7444ab00, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x12543, dwReserved0=0x0, dwReserved1=0x0, cFileName="classlist", cAlternateFileName="CLASSL~1")) returned 1 [0059.488] FindNextFileW (in: hFindFile=0x382080, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7444ab00, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x7444ab00, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x7444ab00, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="cmm", cAlternateFileName="")) returned 1 [0059.488] FindNextFileW (in: hFindFile=0x382080, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x74470c60, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x74470c60, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x74470c60, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x15ac, dwReserved0=0x0, dwReserved1=0x0, cFileName="content-types.properties", cAlternateFileName="CONTEN~1.PRO")) returned 1 [0059.488] FindNextFileW (in: hFindFile=0x382080, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x74470c60, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x74470c60, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x74470c60, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x1068, dwReserved0=0x0, dwReserved1=0x0, cFileName="currency.data", cAlternateFileName="CURREN~1.DAT")) returned 1 [0059.488] FindNextFileW (in: hFindFile=0x382080, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x74470c60, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x74470c60, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x74470c60, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="deploy", cAlternateFileName="")) returned 1 [0059.488] FindNextFileW (in: hFindFile=0x382080, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x75246c40, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x75246c40, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x75305320, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x449777, dwReserved0=0x0, dwReserved1=0x0, cFileName="deploy.jar", cAlternateFileName="")) returned 1 [0059.489] FindNextFileW (in: hFindFile=0x382080, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x74470c60, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x7577bc60, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x7577bc60, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="ext", cAlternateFileName="")) returned 1 [0059.489] FindNextFileW (in: hFindFile=0x382080, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x74496dc0, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x74496dc0, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x74496dc0, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0xf58, dwReserved0=0x0, dwReserved1=0x0, cFileName="flavormap.properties", cAlternateFileName="FLAVOR~1.PRO")) returned 1 [0059.489] FindNextFileW (in: hFindFile=0x382080, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x74496dc0, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x74496dc0, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x74496dc0, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0xe56, dwReserved0=0x0, dwReserved1=0x0, cFileName="fontconfig.bfc", cAlternateFileName="FONTCO~1.BFC")) returned 1 [0059.489] FindNextFileW (in: hFindFile=0x382080, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x74496dc0, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x74496dc0, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x74496dc0, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x28ef, dwReserved0=0x0, dwReserved1=0x0, cFileName="fontconfig.properties.src", cAlternateFileName="FONTCO~1.SRC")) returned 1 [0059.489] FindNextFileW (in: hFindFile=0x382080, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x74496dc0, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x74496dc0, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x74496dc0, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="fonts", cAlternateFileName="")) returned 1 [0059.489] FindNextFileW (in: hFindFile=0x382080, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x74496dc0, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x74496dc0, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x74496dc0, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="i386", cAlternateFileName="")) returned 1 [0059.489] FindNextFileW (in: hFindFile=0x382080, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x74496dc0, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x74496dc0, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x74496dc0, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="images", cAlternateFileName="")) returned 1 [0059.489] FindNextFileW (in: hFindFile=0x382080, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x74496dc0, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x74496dc0, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x74496dc0, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x1d, dwReserved0=0x0, dwReserved1=0x0, cFileName="javafx.properties", cAlternateFileName="JAVAFX~1.PRO")) returned 1 [0059.489] FindNextFileW (in: hFindFile=0x382080, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7532b480, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x7532b480, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x753515e0, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0xd9d17, dwReserved0=0x0, dwReserved1=0x0, cFileName="javaws.jar", cAlternateFileName="")) returned 1 [0059.489] FindNextFileW (in: hFindFile=0x382080, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x74496dc0, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x74496dc0, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x74496dc0, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x1aa8c, dwReserved0=0x0, dwReserved1=0x0, cFileName="jce.jar", cAlternateFileName="")) returned 1 [0059.489] FindNextFileW (in: hFindFile=0x382080, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x74496dc0, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x74496dc0, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x74496dc0, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="jfr", cAlternateFileName="")) returned 1 [0059.489] FindNextFileW (in: hFindFile=0x382080, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x74496dc0, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x74496dc0, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x744bcf20, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x8204f, dwReserved0=0x0, dwReserved1=0x0, cFileName="jfr.jar", cAlternateFileName="")) returned 1 [0059.489] FindNextFileW (in: hFindFile=0x382080, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7540fcc0, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x7540fcc0, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x7572f9a0, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0xce642c, dwReserved0=0x0, dwReserved1=0x0, cFileName="jfxrt.jar", cAlternateFileName="")) returned 1 [0059.489] FindNextFileW (in: hFindFile=0x382080, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7539d8a0, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x7539d8a0, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x753c3a00, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x809cb, dwReserved0=0x0, dwReserved1=0x0, cFileName="jsse.jar", cAlternateFileName="")) returned 1 [0059.489] FindNextFileW (in: hFindFile=0x382080, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x744bcf20, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x744bcf20, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x744bcf20, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x1082, dwReserved0=0x0, dwReserved1=0x0, cFileName="jvm.hprof.txt", cAlternateFileName="JVMHPR~1.TXT")) returned 1 [0059.489] FindNextFileW (in: hFindFile=0x382080, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x744bcf20, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x744bcf20, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x744bcf20, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x997, dwReserved0=0x0, dwReserved1=0x0, cFileName="logging.properties", cAlternateFileName="LOGGIN~1.PRO")) returned 1 [0059.489] FindNextFileW (in: hFindFile=0x382080, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x744bcf20, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x744bcf20, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x744bcf20, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="management", cAlternateFileName="MANAGE~1")) returned 1 [0059.489] FindNextFileW (in: hFindFile=0x382080, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x744bcf20, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x744bcf20, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x744bcf20, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x181, dwReserved0=0x0, dwReserved1=0x0, cFileName="management-agent.jar", cAlternateFileName="MANAGE~1.JAR")) returned 1 [0059.489] FindNextFileW (in: hFindFile=0x382080, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x744bcf20, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x744bcf20, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x744bcf20, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x88e, dwReserved0=0x0, dwReserved1=0x0, cFileName="meta-index", cAlternateFileName="META-I~1")) returned 1 [0059.489] FindNextFileW (in: hFindFile=0x382080, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x744bcf20, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x744bcf20, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x744bcf20, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0xbfe, dwReserved0=0x0, dwReserved1=0x0, cFileName="net.properties", cAlternateFileName="NET~1.PRO")) returned 1 [0059.489] FindNextFileW (in: hFindFile=0x382080, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x753515e0, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x753515e0, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x7539d8a0, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x1d5e98, dwReserved0=0x0, dwReserved1=0x0, cFileName="plugin.jar", cAlternateFileName="")) returned 1 [0059.489] FindNextFileW (in: hFindFile=0x382080, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x744bcf20, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x744bcf20, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x744bcf20, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0xaec, dwReserved0=0x0, dwReserved1=0x0, cFileName="psfont.properties.ja", cAlternateFileName="PSFONT~1.JA")) returned 1 [0059.489] FindNextFileW (in: hFindFile=0x382080, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x744bcf20, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x744bcf20, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x744bcf20, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x2899, dwReserved0=0x0, dwReserved1=0x0, cFileName="psfontj2d.properties", cAlternateFileName="PSFONT~1.PRO")) returned 1 [0059.490] FindNextFileW (in: hFindFile=0x382080, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x744bcf20, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x744bcf20, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x744bcf20, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x2562c0, dwReserved0=0x0, dwReserved1=0x0, cFileName="resources.jar", cAlternateFileName="RESOUR~1.JAR")) returned 1 [0059.490] FindNextFileW (in: hFindFile=0x382080, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x746d2260, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x746d2260, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x751d4820, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x3124c2e, dwReserved0=0x0, dwReserved1=0x0, cFileName="rt.jar", cAlternateFileName="")) returned 1 [0059.490] FindClose (in: hFindFile=0x382080 | out: hFindFile=0x382080) returned 1 [0059.491] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e77c) returned 1 [0059.491] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e788) returned 1 [0059.491] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e7bc) returned 1 [0059.491] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Java\\jre7\\lib", nBufferLength=0x105, lpBuffer=0x31e2c4, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Java\\jre7\\lib", lpFilePart=0x0) returned 0x24 [0059.491] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Java\\jre7\\lib\\", nBufferLength=0x105, lpBuffer=0x31e298, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Java\\jre7\\lib\\", lpFilePart=0x0) returned 0x25 [0059.491] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Java\\jre7\\lib\\*", lpFindFileData=0x31e4e4 | out: lpFindFileData=0x31e4e4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7444ab00, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x7572f9a0, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x7572f9a0, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x382080 [0059.492] FindClose (in: hFindFile=0x382080 | out: hFindFile=0x382080) returned 1 [0059.493] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e77c) returned 1 [0059.493] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e788) returned 1 [0059.493] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Java\\jre7\\lib\\jvm.hprof.txt", nBufferLength=0x105, lpBuffer=0x31e194, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Java\\jre7\\lib\\jvm.hprof.txt", lpFilePart=0x0) returned 0x32 [0059.493] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e688) returned 1 [0059.493] CreateFileW (lpFileName="C:\\Program Files (x86)\\Java\\jre7\\lib\\jvm.hprof.txt" (normalized: "c:\\program files (x86)\\java\\jre7\\lib\\jvm.hprof.txt"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x274 [0059.495] GetFileType (hFile=0x274) returned 0x1 [0059.495] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e684) returned 1 [0059.495] GetFileType (hFile=0x274) returned 0x1 [0059.495] GetFileSize (in: hFile=0x274, lpFileSizeHigh=0x31e790 | out: lpFileSizeHigh=0x31e790*=0x0) returned 0x1082 [0059.495] ReadFile (in: hFile=0x274, lpBuffer=0x26eb48c, nNumberOfBytesToRead=0x1082, lpNumberOfBytesRead=0x31e73c, lpOverlapped=0x0 | out: lpBuffer=0x26eb48c*, lpNumberOfBytesRead=0x31e73c*=0x1082, lpOverlapped=0x0) returned 1 [0059.510] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Java\\jre7\\lib\\jvm.hprof.txt", nBufferLength=0x105, lpBuffer=0x31e180, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Java\\jre7\\lib\\jvm.hprof.txt", lpFilePart=0x0) returned 0x32 [0059.510] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e674) returned 1 [0059.510] CreateFileW (lpFileName="C:\\Program Files (x86)\\Java\\jre7\\lib\\jvm.hprof.txt" (normalized: "c:\\program files (x86)\\java\\jre7\\lib\\jvm.hprof.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x274 [0059.511] GetFileType (hFile=0x274) returned 0x1 [0059.511] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e670) returned 1 [0059.511] GetFileType (hFile=0x274) returned 0x1 [0059.511] WriteFile (in: hFile=0x274, lpBuffer=0x273d544*, nNumberOfBytesToWrite=0x1090, lpNumberOfBytesWritten=0x31e730, lpOverlapped=0x0 | out: lpBuffer=0x273d544*, lpNumberOfBytesWritten=0x31e730*=0x1090, lpOverlapped=0x0) returned 1 [0059.512] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Java\\jre7\\lib\\jvm.hprof.txt", nBufferLength=0x105, lpBuffer=0x31e2b4, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Java\\jre7\\lib\\jvm.hprof.txt", lpFilePart=0x0) returned 0x32 [0059.512] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Java\\jre7\\lib\\jvm.hprof.txt", nBufferLength=0x105, lpBuffer=0x31e2b4, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Java\\jre7\\lib\\jvm.hprof.txt", lpFilePart=0x0) returned 0x32 [0059.512] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e714) returned 1 [0059.512] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Java\\jre7\\lib\\jvm.hprof.txt" (normalized: "c:\\program files (x86)\\java\\jre7\\lib\\jvm.hprof.txt"), fInfoLevelId=0x0, lpFileInformation=0x31e790 | out: lpFileInformation=0x31e790*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x744bcf20, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x744bcf20, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x6ebc140, ftLastWriteTime.dwHighDateTime=0x1d6eb7f, nFileSizeHigh=0x0, nFileSizeLow=0x1090)) returned 1 [0059.513] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e710) returned 1 [0059.513] MoveFileW (lpExistingFileName="C:\\Program Files (x86)\\Java\\jre7\\lib\\jvm.hprof.txt" (normalized: "c:\\program files (x86)\\java\\jre7\\lib\\jvm.hprof.txt"), lpNewFileName="C:\\Program Files (x86)\\Java\\jre7\\lib\\jvm.hprof.txt" (normalized: "c:\\program files (x86)\\java\\jre7\\lib\\jvm.hprof.txt")) returned 1 [0059.513] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e744) returned 1 [0059.513] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Java\\jre7\\lib\\applet", nBufferLength=0x105, lpBuffer=0x31e24c, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Java\\jre7\\lib\\applet", lpFilePart=0x0) returned 0x2b [0059.513] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Java\\jre7\\lib\\applet\\", nBufferLength=0x105, lpBuffer=0x31e220, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Java\\jre7\\lib\\applet\\", lpFilePart=0x0) returned 0x2c [0059.513] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Java\\jre7\\lib\\applet\\*", lpFindFileData=0x31e46c | out: lpFindFileData=0x31e46c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7444ab00, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x7444ab00, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x7444ab00, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x381ec0 [0059.513] FindClose (in: hFindFile=0x381ec0 | out: hFindFile=0x381ec0) returned 1 [0059.513] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e704) returned 1 [0059.513] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e710) returned 1 [0059.513] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e744) returned 1 [0059.514] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Java\\jre7\\lib\\applet", nBufferLength=0x105, lpBuffer=0x31e24c, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Java\\jre7\\lib\\applet", lpFilePart=0x0) returned 0x2b [0059.514] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Java\\jre7\\lib\\applet\\", nBufferLength=0x105, lpBuffer=0x31e220, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Java\\jre7\\lib\\applet\\", lpFilePart=0x0) returned 0x2c [0059.514] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Java\\jre7\\lib\\applet\\*", lpFindFileData=0x31e46c | out: lpFindFileData=0x31e46c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7444ab00, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x7444ab00, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x7444ab00, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x381ec0 [0059.514] FindClose (in: hFindFile=0x381ec0 | out: hFindFile=0x381ec0) returned 1 [0059.514] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e704) returned 1 [0059.514] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e710) returned 1 [0059.516] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e744) returned 1 [0059.516] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Java\\jre7\\lib\\cmm", nBufferLength=0x105, lpBuffer=0x31e24c, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Java\\jre7\\lib\\cmm", lpFilePart=0x0) returned 0x28 [0059.516] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Java\\jre7\\lib\\cmm\\", nBufferLength=0x105, lpBuffer=0x31e220, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Java\\jre7\\lib\\cmm\\", lpFilePart=0x0) returned 0x29 [0059.516] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Java\\jre7\\lib\\cmm\\*", lpFindFileData=0x31e46c | out: lpFindFileData=0x31e46c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7444ab00, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x7444ab00, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x7444ab00, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x381ec0 [0059.517] FindClose (in: hFindFile=0x381ec0 | out: hFindFile=0x381ec0) returned 1 [0059.517] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e704) returned 1 [0059.517] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e710) returned 1 [0059.517] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e744) returned 1 [0059.517] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Java\\jre7\\lib\\cmm", nBufferLength=0x105, lpBuffer=0x31e24c, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Java\\jre7\\lib\\cmm", lpFilePart=0x0) returned 0x28 [0059.517] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Java\\jre7\\lib\\cmm\\", nBufferLength=0x105, lpBuffer=0x31e220, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Java\\jre7\\lib\\cmm\\", lpFilePart=0x0) returned 0x29 [0059.517] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Java\\jre7\\lib\\cmm\\*", lpFindFileData=0x31e46c | out: lpFindFileData=0x31e46c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7444ab00, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x7444ab00, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x7444ab00, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x381ec0 [0059.518] FindClose (in: hFindFile=0x381ec0 | out: hFindFile=0x381ec0) returned 1 [0059.518] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e704) returned 1 [0059.518] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e710) returned 1 [0059.518] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e744) returned 1 [0059.518] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Java\\jre7\\lib\\deploy", nBufferLength=0x105, lpBuffer=0x31e24c, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Java\\jre7\\lib\\deploy", lpFilePart=0x0) returned 0x2b [0059.518] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Java\\jre7\\lib\\deploy\\", nBufferLength=0x105, lpBuffer=0x31e220, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Java\\jre7\\lib\\deploy\\", lpFilePart=0x0) returned 0x2c [0059.518] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Java\\jre7\\lib\\deploy\\*", lpFindFileData=0x31e46c | out: lpFindFileData=0x31e46c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x74470c60, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x74470c60, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x74470c60, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x381ec0 [0059.520] FindClose (in: hFindFile=0x381ec0 | out: hFindFile=0x381ec0) returned 1 [0059.521] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e704) returned 1 [0059.521] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e710) returned 1 [0059.521] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e744) returned 1 [0059.521] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Java\\jre7\\lib\\deploy", nBufferLength=0x105, lpBuffer=0x31e24c, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Java\\jre7\\lib\\deploy", lpFilePart=0x0) returned 0x2b [0059.521] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Java\\jre7\\lib\\deploy\\", nBufferLength=0x105, lpBuffer=0x31e220, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Java\\jre7\\lib\\deploy\\", lpFilePart=0x0) returned 0x2c [0059.521] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Java\\jre7\\lib\\deploy\\*", lpFindFileData=0x31e46c | out: lpFindFileData=0x31e46c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x74470c60, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x74470c60, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x74470c60, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x381ec0 [0059.522] FindClose (in: hFindFile=0x381ec0 | out: hFindFile=0x381ec0) returned 1 [0059.522] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e704) returned 1 [0059.523] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e710) returned 1 [0059.523] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Java\\jre7\\lib\\deploy\\ffjcext.zip", nBufferLength=0x105, lpBuffer=0x31e11c, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Java\\jre7\\lib\\deploy\\ffjcext.zip", lpFilePart=0x0) returned 0x37 [0059.523] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e610) returned 1 [0059.523] CreateFileW (lpFileName="C:\\Program Files (x86)\\Java\\jre7\\lib\\deploy\\ffjcext.zip" (normalized: "c:\\program files (x86)\\java\\jre7\\lib\\deploy\\ffjcext.zip"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x274 [0059.524] GetFileType (hFile=0x274) returned 0x1 [0059.524] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e60c) returned 1 [0059.524] GetFileType (hFile=0x274) returned 0x1 [0059.524] GetFileSize (in: hFile=0x274, lpFileSizeHigh=0x31e718 | out: lpFileSizeHigh=0x31e718*=0x0) returned 0x48cc [0059.524] ReadFile (in: hFile=0x274, lpBuffer=0x27459f4, nNumberOfBytesToRead=0x48cc, lpNumberOfBytesRead=0x31e6c4, lpOverlapped=0x0 | out: lpBuffer=0x27459f4*, lpNumberOfBytesRead=0x31e6c4*=0x48cc, lpOverlapped=0x0) returned 1 [0059.539] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Java\\jre7\\lib\\deploy\\ffjcext.zip", nBufferLength=0x105, lpBuffer=0x31e108, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Java\\jre7\\lib\\deploy\\ffjcext.zip", lpFilePart=0x0) returned 0x37 [0059.539] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e5fc) returned 1 [0059.539] CreateFileW (lpFileName="C:\\Program Files (x86)\\Java\\jre7\\lib\\deploy\\ffjcext.zip" (normalized: "c:\\program files (x86)\\java\\jre7\\lib\\deploy\\ffjcext.zip"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x274 [0059.540] GetFileType (hFile=0x274) returned 0x1 [0059.540] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e5f8) returned 1 [0059.541] GetFileType (hFile=0x274) returned 0x1 [0059.541] WriteFile (in: hFile=0x274, lpBuffer=0x27a93e8*, nNumberOfBytesToWrite=0x48d0, lpNumberOfBytesWritten=0x31e6b8, lpOverlapped=0x0 | out: lpBuffer=0x27a93e8*, lpNumberOfBytesWritten=0x31e6b8*=0x48d0, lpOverlapped=0x0) returned 1 [0059.542] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Java\\jre7\\lib\\deploy\\ffjcext.zip", nBufferLength=0x105, lpBuffer=0x31e23c, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Java\\jre7\\lib\\deploy\\ffjcext.zip", lpFilePart=0x0) returned 0x37 [0059.542] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Java\\jre7\\lib\\deploy\\ffjcext.zip", nBufferLength=0x105, lpBuffer=0x31e23c, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Java\\jre7\\lib\\deploy\\ffjcext.zip", lpFilePart=0x0) returned 0x37 [0059.542] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e69c) returned 1 [0059.542] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Java\\jre7\\lib\\deploy\\ffjcext.zip" (normalized: "c:\\program files (x86)\\java\\jre7\\lib\\deploy\\ffjcext.zip"), fInfoLevelId=0x0, lpFileInformation=0x31e718 | out: lpFileInformation=0x31e718*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x74470c60, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x74470c60, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x6f08400, ftLastWriteTime.dwHighDateTime=0x1d6eb7f, nFileSizeHigh=0x0, nFileSizeLow=0x48d0)) returned 1 [0059.542] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e698) returned 1 [0059.542] MoveFileW (lpExistingFileName="C:\\Program Files (x86)\\Java\\jre7\\lib\\deploy\\ffjcext.zip" (normalized: "c:\\program files (x86)\\java\\jre7\\lib\\deploy\\ffjcext.zip"), lpNewFileName="C:\\Program Files (x86)\\Java\\jre7\\lib\\deploy\\ffjcext.zip" (normalized: "c:\\program files (x86)\\java\\jre7\\lib\\deploy\\ffjcext.zip")) returned 1 [0059.542] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e6cc) returned 1 [0059.542] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Java\\jre7\\lib\\deploy\\jqs", nBufferLength=0x105, lpBuffer=0x31e1d4, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Java\\jre7\\lib\\deploy\\jqs", lpFilePart=0x0) returned 0x2f [0059.542] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Java\\jre7\\lib\\deploy\\jqs\\", nBufferLength=0x105, lpBuffer=0x31e1a8, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Java\\jre7\\lib\\deploy\\jqs\\", lpFilePart=0x0) returned 0x30 [0059.542] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Java\\jre7\\lib\\deploy\\jqs\\*", lpFindFileData=0x31e3f4 | out: lpFindFileData=0x31e3f4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x74470c60, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x74470c60, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x74470c60, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x381d40 [0059.543] FindClose (in: hFindFile=0x381d40 | out: hFindFile=0x381d40) returned 1 [0059.543] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e68c) returned 1 [0059.543] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e698) returned 1 [0059.543] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e6cc) returned 1 [0059.543] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Java\\jre7\\lib\\deploy\\jqs", nBufferLength=0x105, lpBuffer=0x31e1d4, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Java\\jre7\\lib\\deploy\\jqs", lpFilePart=0x0) returned 0x2f [0059.543] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Java\\jre7\\lib\\deploy\\jqs\\", nBufferLength=0x105, lpBuffer=0x31e1a8, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Java\\jre7\\lib\\deploy\\jqs\\", lpFilePart=0x0) returned 0x30 [0059.543] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Java\\jre7\\lib\\deploy\\jqs\\*", lpFindFileData=0x31e3f4 | out: lpFindFileData=0x31e3f4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x74470c60, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x74470c60, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x74470c60, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x381d40 [0059.543] FindClose (in: hFindFile=0x381d40 | out: hFindFile=0x381d40) returned 1 [0059.543] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e68c) returned 1 [0059.543] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e698) returned 1 [0059.543] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e744) returned 1 [0059.543] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Java\\jre7\\lib\\ext", nBufferLength=0x105, lpBuffer=0x31e24c, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Java\\jre7\\lib\\ext", lpFilePart=0x0) returned 0x28 [0059.543] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Java\\jre7\\lib\\ext\\", nBufferLength=0x105, lpBuffer=0x31e220, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Java\\jre7\\lib\\ext\\", lpFilePart=0x0) returned 0x29 [0059.543] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Java\\jre7\\lib\\ext\\*", lpFindFileData=0x31e46c | out: lpFindFileData=0x31e46c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x74470c60, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x7577bc60, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x7577bc60, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x381d40 [0059.546] FindClose (in: hFindFile=0x381d40 | out: hFindFile=0x381d40) returned 1 [0059.546] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e704) returned 1 [0059.546] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e710) returned 1 [0059.546] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e744) returned 1 [0059.546] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Java\\jre7\\lib\\ext", nBufferLength=0x105, lpBuffer=0x31e24c, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Java\\jre7\\lib\\ext", lpFilePart=0x0) returned 0x28 [0059.546] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Java\\jre7\\lib\\ext\\", nBufferLength=0x105, lpBuffer=0x31e220, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Java\\jre7\\lib\\ext\\", lpFilePart=0x0) returned 0x29 [0059.547] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Java\\jre7\\lib\\ext\\*", lpFindFileData=0x31e46c | out: lpFindFileData=0x31e46c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x74470c60, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x7577bc60, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x7577bc60, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x381d40 [0059.547] FindClose (in: hFindFile=0x381d40 | out: hFindFile=0x381d40) returned 1 [0059.548] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e704) returned 1 [0059.548] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e710) returned 1 [0059.548] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e744) returned 1 [0059.548] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Java\\jre7\\lib\\fonts", nBufferLength=0x105, lpBuffer=0x31e24c, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Java\\jre7\\lib\\fonts", lpFilePart=0x0) returned 0x2a [0059.548] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Java\\jre7\\lib\\fonts\\", nBufferLength=0x105, lpBuffer=0x31e220, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Java\\jre7\\lib\\fonts\\", lpFilePart=0x0) returned 0x2b [0059.548] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Java\\jre7\\lib\\fonts\\*", lpFindFileData=0x31e46c | out: lpFindFileData=0x31e46c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x74496dc0, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x74496dc0, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x74496dc0, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x381d40 [0059.550] FindClose (in: hFindFile=0x381d40 | out: hFindFile=0x381d40) returned 1 [0059.551] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e704) returned 1 [0059.551] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e710) returned 1 [0059.551] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e744) returned 1 [0059.551] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Java\\jre7\\lib\\fonts", nBufferLength=0x105, lpBuffer=0x31e24c, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Java\\jre7\\lib\\fonts", lpFilePart=0x0) returned 0x2a [0059.551] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Java\\jre7\\lib\\fonts\\", nBufferLength=0x105, lpBuffer=0x31e220, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Java\\jre7\\lib\\fonts\\", lpFilePart=0x0) returned 0x2b [0059.551] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Java\\jre7\\lib\\fonts\\*", lpFindFileData=0x31e46c | out: lpFindFileData=0x31e46c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x74496dc0, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x74496dc0, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x74496dc0, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x381d40 [0059.552] FindClose (in: hFindFile=0x381d40 | out: hFindFile=0x381d40) returned 1 [0059.553] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e704) returned 1 [0059.553] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e710) returned 1 [0059.553] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e744) returned 1 [0059.553] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Java\\jre7\\lib\\i386", nBufferLength=0x105, lpBuffer=0x31e24c, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Java\\jre7\\lib\\i386", lpFilePart=0x0) returned 0x29 [0059.553] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Java\\jre7\\lib\\i386\\", nBufferLength=0x105, lpBuffer=0x31e220, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Java\\jre7\\lib\\i386\\", lpFilePart=0x0) returned 0x2a [0059.553] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Java\\jre7\\lib\\i386\\*", lpFindFileData=0x31e46c | out: lpFindFileData=0x31e46c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x74496dc0, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x74496dc0, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x74496dc0, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x381d40 [0059.554] FindClose (in: hFindFile=0x381d40 | out: hFindFile=0x381d40) returned 1 [0059.554] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e704) returned 1 [0059.554] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e710) returned 1 [0059.554] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e744) returned 1 [0059.554] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Java\\jre7\\lib\\i386", nBufferLength=0x105, lpBuffer=0x31e24c, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Java\\jre7\\lib\\i386", lpFilePart=0x0) returned 0x29 [0059.554] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Java\\jre7\\lib\\i386\\", nBufferLength=0x105, lpBuffer=0x31e220, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Java\\jre7\\lib\\i386\\", lpFilePart=0x0) returned 0x2a [0059.554] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Java\\jre7\\lib\\i386\\*", lpFindFileData=0x31e46c | out: lpFindFileData=0x31e46c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x74496dc0, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x74496dc0, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x74496dc0, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x381d40 [0059.554] FindClose (in: hFindFile=0x381d40 | out: hFindFile=0x381d40) returned 1 [0059.554] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e704) returned 1 [0059.554] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e710) returned 1 [0059.554] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e744) returned 1 [0059.554] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Java\\jre7\\lib\\images", nBufferLength=0x105, lpBuffer=0x31e24c, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Java\\jre7\\lib\\images", lpFilePart=0x0) returned 0x2b [0059.554] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Java\\jre7\\lib\\images\\", nBufferLength=0x105, lpBuffer=0x31e220, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Java\\jre7\\lib\\images\\", lpFilePart=0x0) returned 0x2c [0059.554] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Java\\jre7\\lib\\images\\*", lpFindFileData=0x31e46c | out: lpFindFileData=0x31e46c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x74496dc0, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x74496dc0, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x74496dc0, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x381d40 [0059.555] FindClose (in: hFindFile=0x381d40 | out: hFindFile=0x381d40) returned 1 [0059.555] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e704) returned 1 [0059.555] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e710) returned 1 [0059.555] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e744) returned 1 [0059.555] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Java\\jre7\\lib\\images", nBufferLength=0x105, lpBuffer=0x31e24c, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Java\\jre7\\lib\\images", lpFilePart=0x0) returned 0x2b [0059.555] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Java\\jre7\\lib\\images\\", nBufferLength=0x105, lpBuffer=0x31e220, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Java\\jre7\\lib\\images\\", lpFilePart=0x0) returned 0x2c [0059.555] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Java\\jre7\\lib\\images\\*", lpFindFileData=0x31e46c | out: lpFindFileData=0x31e46c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x74496dc0, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x74496dc0, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x74496dc0, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x381d40 [0059.555] FindClose (in: hFindFile=0x381d40 | out: hFindFile=0x381d40) returned 1 [0059.555] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e704) returned 1 [0059.555] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e710) returned 1 [0059.555] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e6cc) returned 1 [0059.555] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Java\\jre7\\lib\\images\\cursors", nBufferLength=0x105, lpBuffer=0x31e1d4, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Java\\jre7\\lib\\images\\cursors", lpFilePart=0x0) returned 0x33 [0059.555] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Java\\jre7\\lib\\images\\cursors\\", nBufferLength=0x105, lpBuffer=0x31e1a8, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Java\\jre7\\lib\\images\\cursors\\", lpFilePart=0x0) returned 0x34 [0059.555] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Java\\jre7\\lib\\images\\cursors\\*", lpFindFileData=0x31e3f4 | out: lpFindFileData=0x31e3f4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x74496dc0, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x74496dc0, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x74496dc0, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x381d40 [0059.557] FindClose (in: hFindFile=0x381d40 | out: hFindFile=0x381d40) returned 1 [0059.558] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e68c) returned 1 [0059.558] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e698) returned 1 [0059.558] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e6cc) returned 1 [0059.558] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Java\\jre7\\lib\\images\\cursors", nBufferLength=0x105, lpBuffer=0x31e1d4, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Java\\jre7\\lib\\images\\cursors", lpFilePart=0x0) returned 0x33 [0059.558] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Java\\jre7\\lib\\images\\cursors\\", nBufferLength=0x105, lpBuffer=0x31e1a8, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Java\\jre7\\lib\\images\\cursors\\", lpFilePart=0x0) returned 0x34 [0059.558] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Java\\jre7\\lib\\images\\cursors\\*", lpFindFileData=0x31e3f4 | out: lpFindFileData=0x31e3f4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x74496dc0, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x74496dc0, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x74496dc0, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x381d40 [0059.559] FindClose (in: hFindFile=0x381d40 | out: hFindFile=0x381d40) returned 1 [0059.559] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e68c) returned 1 [0059.559] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e698) returned 1 [0059.559] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e744) returned 1 [0059.559] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Java\\jre7\\lib\\jfr", nBufferLength=0x105, lpBuffer=0x31e24c, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Java\\jre7\\lib\\jfr", lpFilePart=0x0) returned 0x28 [0059.559] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Java\\jre7\\lib\\jfr\\", nBufferLength=0x105, lpBuffer=0x31e220, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Java\\jre7\\lib\\jfr\\", lpFilePart=0x0) returned 0x29 [0059.560] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Java\\jre7\\lib\\jfr\\*", lpFindFileData=0x31e46c | out: lpFindFileData=0x31e46c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x74496dc0, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x74496dc0, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x74496dc0, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x381d40 [0059.560] FindClose (in: hFindFile=0x381d40 | out: hFindFile=0x381d40) returned 1 [0059.560] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e704) returned 1 [0059.560] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e710) returned 1 [0059.560] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e744) returned 1 [0059.561] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Java\\jre7\\lib\\jfr", nBufferLength=0x105, lpBuffer=0x31e24c, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Java\\jre7\\lib\\jfr", lpFilePart=0x0) returned 0x28 [0059.561] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Java\\jre7\\lib\\jfr\\", nBufferLength=0x105, lpBuffer=0x31e220, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Java\\jre7\\lib\\jfr\\", lpFilePart=0x0) returned 0x29 [0059.561] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Java\\jre7\\lib\\jfr\\*", lpFindFileData=0x31e46c | out: lpFindFileData=0x31e46c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x74496dc0, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x74496dc0, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x74496dc0, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x381d40 [0059.561] FindClose (in: hFindFile=0x381d40 | out: hFindFile=0x381d40) returned 1 [0059.561] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e704) returned 1 [0059.561] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e710) returned 1 [0059.561] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e744) returned 1 [0059.561] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Java\\jre7\\lib\\management", nBufferLength=0x105, lpBuffer=0x31e24c, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Java\\jre7\\lib\\management", lpFilePart=0x0) returned 0x2f [0059.561] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Java\\jre7\\lib\\management\\", nBufferLength=0x105, lpBuffer=0x31e220, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Java\\jre7\\lib\\management\\", lpFilePart=0x0) returned 0x30 [0059.561] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Java\\jre7\\lib\\management\\*", lpFindFileData=0x31e46c | out: lpFindFileData=0x31e46c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x744bcf20, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x744bcf20, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x744bcf20, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x381d40 [0059.563] FindClose (in: hFindFile=0x381d40 | out: hFindFile=0x381d40) returned 1 [0059.564] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e704) returned 1 [0059.564] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e710) returned 1 [0059.564] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e744) returned 1 [0059.564] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Java\\jre7\\lib\\management", nBufferLength=0x105, lpBuffer=0x31e24c, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Java\\jre7\\lib\\management", lpFilePart=0x0) returned 0x2f [0059.564] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Java\\jre7\\lib\\management\\", nBufferLength=0x105, lpBuffer=0x31e220, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Java\\jre7\\lib\\management\\", lpFilePart=0x0) returned 0x30 [0059.564] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Java\\jre7\\lib\\management\\*", lpFindFileData=0x31e46c | out: lpFindFileData=0x31e46c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x744bcf20, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x744bcf20, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x744bcf20, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x381d40 [0059.565] FindClose (in: hFindFile=0x381d40 | out: hFindFile=0x381d40) returned 1 [0059.565] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e704) returned 1 [0059.565] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e710) returned 1 [0059.565] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e744) returned 1 [0059.565] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Java\\jre7\\lib\\security", nBufferLength=0x105, lpBuffer=0x31e24c, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Java\\jre7\\lib\\security", lpFilePart=0x0) returned 0x2d [0059.565] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Java\\jre7\\lib\\security\\", nBufferLength=0x105, lpBuffer=0x31e220, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Java\\jre7\\lib\\security\\", lpFilePart=0x0) returned 0x2e [0059.565] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Java\\jre7\\lib\\security\\*", lpFindFileData=0x31e46c | out: lpFindFileData=0x31e46c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x744e3080, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x744e3080, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x744e3080, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x381d40 [0059.570] FindClose (in: hFindFile=0x381d40 | out: hFindFile=0x381d40) returned 1 [0059.570] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e704) returned 1 [0059.570] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e710) returned 1 [0059.570] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e744) returned 1 [0059.570] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Java\\jre7\\lib\\security", nBufferLength=0x105, lpBuffer=0x31e24c, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Java\\jre7\\lib\\security", lpFilePart=0x0) returned 0x2d [0059.570] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Java\\jre7\\lib\\security\\", nBufferLength=0x105, lpBuffer=0x31e220, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Java\\jre7\\lib\\security\\", lpFilePart=0x0) returned 0x2e [0059.570] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Java\\jre7\\lib\\security\\*", lpFindFileData=0x31e46c | out: lpFindFileData=0x31e46c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x744e3080, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x744e3080, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x744e3080, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x381d40 [0059.571] FindClose (in: hFindFile=0x381d40 | out: hFindFile=0x381d40) returned 1 [0059.572] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e704) returned 1 [0059.572] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e710) returned 1 [0059.572] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e744) returned 1 [0059.572] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Java\\jre7\\lib\\zi", nBufferLength=0x105, lpBuffer=0x31e24c, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Java\\jre7\\lib\\zi", lpFilePart=0x0) returned 0x27 [0059.572] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Java\\jre7\\lib\\zi\\", nBufferLength=0x105, lpBuffer=0x31e220, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Java\\jre7\\lib\\zi\\", lpFilePart=0x0) returned 0x28 [0059.572] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Java\\jre7\\lib\\zi\\*", lpFindFileData=0x31e46c | out: lpFindFileData=0x31e46c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x744e3080, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x746d2260, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x746d2260, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x381d40 [0059.574] FindClose (in: hFindFile=0x381d40 | out: hFindFile=0x381d40) returned 1 [0059.575] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e704) returned 1 [0059.575] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e710) returned 1 [0059.575] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e744) returned 1 [0059.575] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Java\\jre7\\lib\\zi", nBufferLength=0x105, lpBuffer=0x31e24c, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Java\\jre7\\lib\\zi", lpFilePart=0x0) returned 0x27 [0059.575] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Java\\jre7\\lib\\zi\\", nBufferLength=0x105, lpBuffer=0x31e220, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Java\\jre7\\lib\\zi\\", lpFilePart=0x0) returned 0x28 [0059.575] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Java\\jre7\\lib\\zi\\*", lpFindFileData=0x31e46c | out: lpFindFileData=0x31e46c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x744e3080, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x746d2260, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x746d2260, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x381d40 [0059.576] FindClose (in: hFindFile=0x381d40 | out: hFindFile=0x381d40) returned 1 [0059.576] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e704) returned 1 [0059.577] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e710) returned 1 [0059.577] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e6cc) returned 1 [0059.577] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Java\\jre7\\lib\\zi\\Africa", nBufferLength=0x105, lpBuffer=0x31e1d4, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Java\\jre7\\lib\\zi\\Africa", lpFilePart=0x0) returned 0x2e [0059.577] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Java\\jre7\\lib\\zi\\Africa\\", nBufferLength=0x105, lpBuffer=0x31e1a8, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Java\\jre7\\lib\\zi\\Africa\\", lpFilePart=0x0) returned 0x2f [0059.577] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Java\\jre7\\lib\\zi\\Africa\\*", lpFindFileData=0x31e3f4 | out: lpFindFileData=0x31e3f4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x744e3080, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x7452f340, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x7452f340, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x381d40 [0059.581] FindClose (in: hFindFile=0x381d40 | out: hFindFile=0x381d40) returned 1 [0059.582] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e68c) returned 1 [0059.582] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e698) returned 1 [0059.582] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e6cc) returned 1 [0059.582] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Java\\jre7\\lib\\zi\\Africa", nBufferLength=0x105, lpBuffer=0x31e1d4, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Java\\jre7\\lib\\zi\\Africa", lpFilePart=0x0) returned 0x2e [0059.582] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Java\\jre7\\lib\\zi\\Africa\\", nBufferLength=0x105, lpBuffer=0x31e1a8, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Java\\jre7\\lib\\zi\\Africa\\", lpFilePart=0x0) returned 0x2f [0059.582] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Java\\jre7\\lib\\zi\\Africa\\*", lpFindFileData=0x31e3f4 | out: lpFindFileData=0x31e3f4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x744e3080, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x7452f340, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x7452f340, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x381d40 [0059.583] FindClose (in: hFindFile=0x381d40 | out: hFindFile=0x381d40) returned 1 [0059.583] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e68c) returned 1 [0059.584] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e698) returned 1 [0059.584] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e6cc) returned 1 [0059.584] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Java\\jre7\\lib\\zi\\America", nBufferLength=0x105, lpBuffer=0x31e1d4, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Java\\jre7\\lib\\zi\\America", lpFilePart=0x0) returned 0x2f [0059.584] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Java\\jre7\\lib\\zi\\America\\", nBufferLength=0x105, lpBuffer=0x31e1a8, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Java\\jre7\\lib\\zi\\America\\", lpFilePart=0x0) returned 0x30 [0059.584] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Java\\jre7\\lib\\zi\\America\\*", lpFindFileData=0x31e3f4 | out: lpFindFileData=0x31e3f4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7452f340, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x745a1760, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x745a1760, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x381d40 [0059.591] FindClose (in: hFindFile=0x381d40 | out: hFindFile=0x381d40) returned 1 [0059.592] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e68c) returned 1 [0059.592] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e698) returned 1 [0059.592] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e6cc) returned 1 [0059.592] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Java\\jre7\\lib\\zi\\America", nBufferLength=0x105, lpBuffer=0x31e1d4, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Java\\jre7\\lib\\zi\\America", lpFilePart=0x0) returned 0x2f [0059.592] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Java\\jre7\\lib\\zi\\America\\", nBufferLength=0x105, lpBuffer=0x31e1a8, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Java\\jre7\\lib\\zi\\America\\", lpFilePart=0x0) returned 0x30 [0059.592] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Java\\jre7\\lib\\zi\\America\\*", lpFindFileData=0x31e3f4 | out: lpFindFileData=0x31e3f4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7452f340, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x745a1760, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x745a1760, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x381d40 [0059.594] FindClose (in: hFindFile=0x381d40 | out: hFindFile=0x381d40) returned 1 [0059.594] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e68c) returned 1 [0059.594] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e698) returned 1 [0059.595] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e654) returned 1 [0059.595] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Java\\jre7\\lib\\zi\\America\\Argentina", nBufferLength=0x105, lpBuffer=0x31e15c, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Java\\jre7\\lib\\zi\\America\\Argentina", lpFilePart=0x0) returned 0x39 [0059.595] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Java\\jre7\\lib\\zi\\America\\Argentina\\", nBufferLength=0x105, lpBuffer=0x31e130, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Java\\jre7\\lib\\zi\\America\\Argentina\\", lpFilePart=0x0) returned 0x3a [0059.595] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Java\\jre7\\lib\\zi\\America\\Argentina\\*", lpFindFileData=0x31e37c | out: lpFindFileData=0x31e37c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7452f340, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x7452f340, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x7452f340, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x381d40 [0059.598] FindClose (in: hFindFile=0x381d40 | out: hFindFile=0x381d40) returned 1 [0059.598] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e614) returned 1 [0059.599] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e620) returned 1 [0059.599] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e654) returned 1 [0059.599] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Java\\jre7\\lib\\zi\\America\\Argentina", nBufferLength=0x105, lpBuffer=0x31e15c, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Java\\jre7\\lib\\zi\\America\\Argentina", lpFilePart=0x0) returned 0x39 [0059.599] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Java\\jre7\\lib\\zi\\America\\Argentina\\", nBufferLength=0x105, lpBuffer=0x31e130, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Java\\jre7\\lib\\zi\\America\\Argentina\\", lpFilePart=0x0) returned 0x3a [0059.599] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Java\\jre7\\lib\\zi\\America\\Argentina\\*", lpFindFileData=0x31e37c | out: lpFindFileData=0x31e37c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7452f340, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x7452f340, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x7452f340, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x381d40 [0059.599] FindClose (in: hFindFile=0x381d40 | out: hFindFile=0x381d40) returned 1 [0059.600] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e614) returned 1 [0059.600] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e620) returned 1 [0059.600] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e654) returned 1 [0059.600] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Java\\jre7\\lib\\zi\\America\\Indiana", nBufferLength=0x105, lpBuffer=0x31e15c, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Java\\jre7\\lib\\zi\\America\\Indiana", lpFilePart=0x0) returned 0x37 [0059.600] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Java\\jre7\\lib\\zi\\America\\Indiana\\", nBufferLength=0x105, lpBuffer=0x31e130, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Java\\jre7\\lib\\zi\\America\\Indiana\\", lpFilePart=0x0) returned 0x38 [0059.600] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Java\\jre7\\lib\\zi\\America\\Indiana\\*", lpFindFileData=0x31e37c | out: lpFindFileData=0x31e37c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x745554a0, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x7457b600, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x7457b600, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x381d40 [0059.602] FindClose (in: hFindFile=0x381d40 | out: hFindFile=0x381d40) returned 1 [0059.603] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e614) returned 1 [0059.603] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e620) returned 1 [0059.603] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e654) returned 1 [0059.603] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Java\\jre7\\lib\\zi\\America\\Indiana", nBufferLength=0x105, lpBuffer=0x31e15c, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Java\\jre7\\lib\\zi\\America\\Indiana", lpFilePart=0x0) returned 0x37 [0059.603] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Java\\jre7\\lib\\zi\\America\\Indiana\\", nBufferLength=0x105, lpBuffer=0x31e130, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Java\\jre7\\lib\\zi\\America\\Indiana\\", lpFilePart=0x0) returned 0x38 [0059.603] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Java\\jre7\\lib\\zi\\America\\Indiana\\*", lpFindFileData=0x31e37c | out: lpFindFileData=0x31e37c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x745554a0, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x7457b600, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x7457b600, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x381d40 [0059.604] FindClose (in: hFindFile=0x381d40 | out: hFindFile=0x381d40) returned 1 [0059.604] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e614) returned 1 [0059.604] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e620) returned 1 [0059.604] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e654) returned 1 [0059.604] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Java\\jre7\\lib\\zi\\America\\Kentucky", nBufferLength=0x105, lpBuffer=0x31e15c, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Java\\jre7\\lib\\zi\\America\\Kentucky", lpFilePart=0x0) returned 0x38 [0059.604] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Java\\jre7\\lib\\zi\\America\\Kentucky\\", nBufferLength=0x105, lpBuffer=0x31e130, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Java\\jre7\\lib\\zi\\America\\Kentucky\\", lpFilePart=0x0) returned 0x39 [0059.605] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Java\\jre7\\lib\\zi\\America\\Kentucky\\*", lpFindFileData=0x31e37c | out: lpFindFileData=0x31e37c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7457b600, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x7457b600, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x7457b600, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x381d40 [0059.605] FindClose (in: hFindFile=0x381d40 | out: hFindFile=0x381d40) returned 1 [0059.605] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e614) returned 1 [0059.605] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e620) returned 1 [0059.605] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e654) returned 1 [0059.605] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Java\\jre7\\lib\\zi\\America\\Kentucky", nBufferLength=0x105, lpBuffer=0x31e15c, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Java\\jre7\\lib\\zi\\America\\Kentucky", lpFilePart=0x0) returned 0x38 [0059.605] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Java\\jre7\\lib\\zi\\America\\Kentucky\\", nBufferLength=0x105, lpBuffer=0x31e130, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Java\\jre7\\lib\\zi\\America\\Kentucky\\", lpFilePart=0x0) returned 0x39 [0059.605] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Java\\jre7\\lib\\zi\\America\\Kentucky\\*", lpFindFileData=0x31e37c | out: lpFindFileData=0x31e37c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7457b600, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x7457b600, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x7457b600, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x381d40 [0059.605] FindClose (in: hFindFile=0x381d40 | out: hFindFile=0x381d40) returned 1 [0059.605] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e614) returned 1 [0059.605] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e620) returned 1 [0059.605] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e654) returned 1 [0059.605] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Java\\jre7\\lib\\zi\\America\\North_Dakota", nBufferLength=0x105, lpBuffer=0x31e15c, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Java\\jre7\\lib\\zi\\America\\North_Dakota", lpFilePart=0x0) returned 0x3c [0059.605] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Java\\jre7\\lib\\zi\\America\\North_Dakota\\", nBufferLength=0x105, lpBuffer=0x31e130, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Java\\jre7\\lib\\zi\\America\\North_Dakota\\", lpFilePart=0x0) returned 0x3d [0059.605] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Java\\jre7\\lib\\zi\\America\\North_Dakota\\*", lpFindFileData=0x31e37c | out: lpFindFileData=0x31e37c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7457b600, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x7457b600, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x7457b600, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x381d40 [0059.606] FindClose (in: hFindFile=0x381d40 | out: hFindFile=0x381d40) returned 1 [0059.606] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e614) returned 1 [0059.606] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e620) returned 1 [0059.606] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e654) returned 1 [0059.606] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Java\\jre7\\lib\\zi\\America\\North_Dakota", nBufferLength=0x105, lpBuffer=0x31e15c, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Java\\jre7\\lib\\zi\\America\\North_Dakota", lpFilePart=0x0) returned 0x3c [0059.606] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Java\\jre7\\lib\\zi\\America\\North_Dakota\\", nBufferLength=0x105, lpBuffer=0x31e130, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Java\\jre7\\lib\\zi\\America\\North_Dakota\\", lpFilePart=0x0) returned 0x3d [0059.606] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Java\\jre7\\lib\\zi\\America\\North_Dakota\\*", lpFindFileData=0x31e37c | out: lpFindFileData=0x31e37c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7457b600, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x7457b600, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x7457b600, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x381d40 [0059.606] FindClose (in: hFindFile=0x381d40 | out: hFindFile=0x381d40) returned 1 [0059.606] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e614) returned 1 [0059.606] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e620) returned 1 [0059.606] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e6cc) returned 1 [0059.606] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Java\\jre7\\lib\\zi\\Antarctica", nBufferLength=0x105, lpBuffer=0x31e1d4, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Java\\jre7\\lib\\zi\\Antarctica", lpFilePart=0x0) returned 0x32 [0059.606] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Java\\jre7\\lib\\zi\\Antarctica\\", nBufferLength=0x105, lpBuffer=0x31e1a8, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Java\\jre7\\lib\\zi\\Antarctica\\", lpFilePart=0x0) returned 0x33 [0059.606] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Java\\jre7\\lib\\zi\\Antarctica\\*", lpFindFileData=0x31e3f4 | out: lpFindFileData=0x31e3f4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x745a1760, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x745c78c0, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x745c78c0, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x381d40 [0059.608] FindClose (in: hFindFile=0x381d40 | out: hFindFile=0x381d40) returned 1 [0059.609] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e68c) returned 1 [0059.609] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e698) returned 1 [0059.609] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e6cc) returned 1 [0059.609] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Java\\jre7\\lib\\zi\\Antarctica", nBufferLength=0x105, lpBuffer=0x31e1d4, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Java\\jre7\\lib\\zi\\Antarctica", lpFilePart=0x0) returned 0x32 [0059.609] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Java\\jre7\\lib\\zi\\Antarctica\\", nBufferLength=0x105, lpBuffer=0x31e1a8, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Java\\jre7\\lib\\zi\\Antarctica\\", lpFilePart=0x0) returned 0x33 [0059.609] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Java\\jre7\\lib\\zi\\Antarctica\\*", lpFindFileData=0x31e3f4 | out: lpFindFileData=0x31e3f4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x745a1760, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x745c78c0, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x745c78c0, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x381d40 [0059.610] FindClose (in: hFindFile=0x381d40 | out: hFindFile=0x381d40) returned 1 [0059.610] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Java\\jre7\\lib\\zi\\Asia", nBufferLength=0x105, lpBuffer=0x31e1d4, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Java\\jre7\\lib\\zi\\Asia", lpFilePart=0x0) returned 0x2c [0059.610] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Java\\jre7\\lib\\zi\\Asia\\", nBufferLength=0x105, lpBuffer=0x31e1a8, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Java\\jre7\\lib\\zi\\Asia\\", lpFilePart=0x0) returned 0x2d [0059.610] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Java\\jre7\\lib\\zi\\Asia\\*", lpFindFileData=0x31e3f4 | out: lpFindFileData=0x31e3f4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x745c78c0, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x74613b80, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x74613b80, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x381d40 [0059.614] FindClose (in: hFindFile=0x381d40 | out: hFindFile=0x381d40) returned 1 [0059.615] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Java\\jre7\\lib\\zi\\Asia", nBufferLength=0x105, lpBuffer=0x31e1d4, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Java\\jre7\\lib\\zi\\Asia", lpFilePart=0x0) returned 0x2c [0059.615] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Java\\jre7\\lib\\zi\\Asia\\", nBufferLength=0x105, lpBuffer=0x31e1a8, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Java\\jre7\\lib\\zi\\Asia\\", lpFilePart=0x0) returned 0x2d [0059.615] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Java\\jre7\\lib\\zi\\Asia\\*", lpFindFileData=0x31e3f4 | out: lpFindFileData=0x31e3f4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x745c78c0, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x74613b80, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x74613b80, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x381d40 [0059.616] FindClose (in: hFindFile=0x381d40 | out: hFindFile=0x381d40) returned 1 [0059.617] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Java\\jre7\\lib\\zi\\Atlantic", nBufferLength=0x105, lpBuffer=0x31e1d4, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Java\\jre7\\lib\\zi\\Atlantic", lpFilePart=0x0) returned 0x30 [0059.617] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Java\\jre7\\lib\\zi\\Atlantic\\", nBufferLength=0x105, lpBuffer=0x31e1a8, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Java\\jre7\\lib\\zi\\Atlantic\\", lpFilePart=0x0) returned 0x31 [0059.617] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Java\\jre7\\lib\\zi\\Atlantic\\*", lpFindFileData=0x31e3f4 | out: lpFindFileData=0x31e3f4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x74613b80, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x74613b80, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x74613b80, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x381d40 [0059.619] FindClose (in: hFindFile=0x381d40 | out: hFindFile=0x381d40) returned 1 [0059.620] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Java\\jre7\\lib\\zi\\Atlantic", nBufferLength=0x105, lpBuffer=0x31e1d4, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Java\\jre7\\lib\\zi\\Atlantic", lpFilePart=0x0) returned 0x30 [0059.620] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Java\\jre7\\lib\\zi\\Atlantic\\", nBufferLength=0x105, lpBuffer=0x31e1a8, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Java\\jre7\\lib\\zi\\Atlantic\\", lpFilePart=0x0) returned 0x31 [0059.620] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Java\\jre7\\lib\\zi\\Atlantic\\*", lpFindFileData=0x31e3f4 | out: lpFindFileData=0x31e3f4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x74613b80, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x74613b80, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x74613b80, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x381d40 [0059.620] FindClose (in: hFindFile=0x381d40 | out: hFindFile=0x381d40) returned 1 [0059.621] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Java\\jre7\\lib\\zi\\Australia", nBufferLength=0x105, lpBuffer=0x31e1d4, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Java\\jre7\\lib\\zi\\Australia", lpFilePart=0x0) returned 0x31 [0059.621] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Java\\jre7\\lib\\zi\\Australia\\", nBufferLength=0x105, lpBuffer=0x31e1a8, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Java\\jre7\\lib\\zi\\Australia\\", lpFilePart=0x0) returned 0x32 [0059.621] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Java\\jre7\\lib\\zi\\Australia\\*", lpFindFileData=0x31e3f4 | out: lpFindFileData=0x31e3f4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x74613b80, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x74613b80, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x74613b80, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x381d40 [0059.623] FindClose (in: hFindFile=0x381d40 | out: hFindFile=0x381d40) returned 1 [0059.624] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Java\\jre7\\lib\\zi\\Australia", nBufferLength=0x105, lpBuffer=0x31e1d4, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Java\\jre7\\lib\\zi\\Australia", lpFilePart=0x0) returned 0x31 [0059.624] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Java\\jre7\\lib\\zi\\Australia\\", nBufferLength=0x105, lpBuffer=0x31e1a8, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Java\\jre7\\lib\\zi\\Australia\\", lpFilePart=0x0) returned 0x32 [0059.624] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Java\\jre7\\lib\\zi\\Australia\\*", lpFindFileData=0x31e3f4 | out: lpFindFileData=0x31e3f4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x74613b80, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x74613b80, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x74613b80, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x381d40 [0059.625] FindClose (in: hFindFile=0x381d40 | out: hFindFile=0x381d40) returned 1 [0059.625] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Java\\jre7\\lib\\zi\\Etc", nBufferLength=0x105, lpBuffer=0x31e1d4, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Java\\jre7\\lib\\zi\\Etc", lpFilePart=0x0) returned 0x2b [0059.625] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Java\\jre7\\lib\\zi\\Etc\\", nBufferLength=0x105, lpBuffer=0x31e1a8, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Java\\jre7\\lib\\zi\\Etc\\", lpFilePart=0x0) returned 0x2c [0059.625] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Java\\jre7\\lib\\zi\\Etc\\*", lpFindFileData=0x31e3f4 | out: lpFindFileData=0x31e3f4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x74639ce0, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x7465fe40, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x7465fe40, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x381d40 [0059.628] FindClose (in: hFindFile=0x381d40 | out: hFindFile=0x381d40) returned 1 [0059.629] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Java\\jre7\\lib\\zi\\Etc", nBufferLength=0x105, lpBuffer=0x31e1d4, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Java\\jre7\\lib\\zi\\Etc", lpFilePart=0x0) returned 0x2b [0059.629] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Java\\jre7\\lib\\zi\\Etc\\", nBufferLength=0x105, lpBuffer=0x31e1a8, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Java\\jre7\\lib\\zi\\Etc\\", lpFilePart=0x0) returned 0x2c [0059.629] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Java\\jre7\\lib\\zi\\Etc\\*", lpFindFileData=0x31e3f4 | out: lpFindFileData=0x31e3f4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x74639ce0, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x7465fe40, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x7465fe40, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x381d40 [0059.629] FindClose (in: hFindFile=0x381d40 | out: hFindFile=0x381d40) returned 1 [0059.630] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Java\\jre7\\lib\\zi\\Europe", nBufferLength=0x105, lpBuffer=0x31e1d4, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Java\\jre7\\lib\\zi\\Europe", lpFilePart=0x0) returned 0x2e [0059.630] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Java\\jre7\\lib\\zi\\Europe\\", nBufferLength=0x105, lpBuffer=0x31e1a8, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Java\\jre7\\lib\\zi\\Europe\\", lpFilePart=0x0) returned 0x2f [0059.630] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Java\\jre7\\lib\\zi\\Europe\\*", lpFindFileData=0x31e3f4 | out: lpFindFileData=0x31e3f4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7465fe40, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x74685fa0, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x74685fa0, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x381d40 [0059.635] FindClose (in: hFindFile=0x381d40 | out: hFindFile=0x381d40) returned 1 [0059.635] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Java\\jre7\\lib\\zi\\Europe", nBufferLength=0x105, lpBuffer=0x31e1d4, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Java\\jre7\\lib\\zi\\Europe", lpFilePart=0x0) returned 0x2e [0059.635] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Java\\jre7\\lib\\zi\\Europe\\", nBufferLength=0x105, lpBuffer=0x31e1a8, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Java\\jre7\\lib\\zi\\Europe\\", lpFilePart=0x0) returned 0x2f [0059.635] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Java\\jre7\\lib\\zi\\Europe\\*", lpFindFileData=0x31e3f4 | out: lpFindFileData=0x31e3f4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7465fe40, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x74685fa0, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x74685fa0, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x381d40 [0059.636] FindClose (in: hFindFile=0x381d40 | out: hFindFile=0x381d40) returned 1 [0059.637] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Java\\jre7\\lib\\zi\\Indian", nBufferLength=0x105, lpBuffer=0x31e1d4, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Java\\jre7\\lib\\zi\\Indian", lpFilePart=0x0) returned 0x2e [0059.637] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Java\\jre7\\lib\\zi\\Indian\\", nBufferLength=0x105, lpBuffer=0x31e1a8, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Java\\jre7\\lib\\zi\\Indian\\", lpFilePart=0x0) returned 0x2f [0059.637] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Java\\jre7\\lib\\zi\\Indian\\*", lpFindFileData=0x31e3f4 | out: lpFindFileData=0x31e3f4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x74685fa0, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x74685fa0, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x74685fa0, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x381d40 [0059.639] FindClose (in: hFindFile=0x381d40 | out: hFindFile=0x381d40) returned 1 [0059.640] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Java\\jre7\\lib\\zi\\Indian", nBufferLength=0x105, lpBuffer=0x31e1d4, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Java\\jre7\\lib\\zi\\Indian", lpFilePart=0x0) returned 0x2e [0059.640] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Java\\jre7\\lib\\zi\\Indian\\", nBufferLength=0x105, lpBuffer=0x31e1a8, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Java\\jre7\\lib\\zi\\Indian\\", lpFilePart=0x0) returned 0x2f [0059.640] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Java\\jre7\\lib\\zi\\Indian\\*", lpFindFileData=0x31e3f4 | out: lpFindFileData=0x31e3f4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x74685fa0, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x74685fa0, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x74685fa0, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x381d40 [0059.641] FindClose (in: hFindFile=0x381d40 | out: hFindFile=0x381d40) returned 1 [0059.642] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Java\\jre7\\lib\\zi\\Pacific", nBufferLength=0x105, lpBuffer=0x31e1d4, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Java\\jre7\\lib\\zi\\Pacific", lpFilePart=0x0) returned 0x2f [0059.642] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Java\\jre7\\lib\\zi\\Pacific\\", nBufferLength=0x105, lpBuffer=0x31e1a8, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Java\\jre7\\lib\\zi\\Pacific\\", lpFilePart=0x0) returned 0x30 [0059.642] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Java\\jre7\\lib\\zi\\Pacific\\*", lpFindFileData=0x31e3f4 | out: lpFindFileData=0x31e3f4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x74685fa0, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x746ac100, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x746ac100, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x381d40 [0059.644] FindClose (in: hFindFile=0x381d40 | out: hFindFile=0x381d40) returned 1 [0059.645] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Java\\jre7\\lib\\zi\\Pacific", nBufferLength=0x105, lpBuffer=0x31e1d4, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Java\\jre7\\lib\\zi\\Pacific", lpFilePart=0x0) returned 0x2f [0059.645] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Java\\jre7\\lib\\zi\\Pacific\\", nBufferLength=0x105, lpBuffer=0x31e1a8, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Java\\jre7\\lib\\zi\\Pacific\\", lpFilePart=0x0) returned 0x30 [0059.645] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Java\\jre7\\lib\\zi\\Pacific\\*", lpFindFileData=0x31e3f4 | out: lpFindFileData=0x31e3f4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x74685fa0, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x746ac100, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x746ac100, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x381d40 [0059.646] FindClose (in: hFindFile=0x381d40 | out: hFindFile=0x381d40) returned 1 [0059.647] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Java\\jre7\\lib\\zi\\SystemV", nBufferLength=0x105, lpBuffer=0x31e1d4, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Java\\jre7\\lib\\zi\\SystemV", lpFilePart=0x0) returned 0x2f [0059.647] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Java\\jre7\\lib\\zi\\SystemV\\", nBufferLength=0x105, lpBuffer=0x31e1a8, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Java\\jre7\\lib\\zi\\SystemV\\", lpFilePart=0x0) returned 0x30 [0059.647] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Java\\jre7\\lib\\zi\\SystemV\\*", lpFindFileData=0x31e3f4 | out: lpFindFileData=0x31e3f4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x746ac100, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x746d2260, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x746d2260, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x381d40 [0059.649] FindClose (in: hFindFile=0x381d40 | out: hFindFile=0x381d40) returned 1 [0059.650] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Java\\jre7\\lib\\zi\\SystemV", nBufferLength=0x105, lpBuffer=0x31e1d4, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Java\\jre7\\lib\\zi\\SystemV", lpFilePart=0x0) returned 0x2f [0059.650] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Java\\jre7\\lib\\zi\\SystemV\\", nBufferLength=0x105, lpBuffer=0x31e1a8, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Java\\jre7\\lib\\zi\\SystemV\\", lpFilePart=0x0) returned 0x30 [0059.650] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Java\\jre7\\lib\\zi\\SystemV\\*", lpFindFileData=0x31e3f4 | out: lpFindFileData=0x31e3f4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x746ac100, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x746d2260, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x746d2260, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x381d40 [0059.651] FindClose (in: hFindFile=0x381d40 | out: hFindFile=0x381d40) returned 1 [0059.651] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Microsoft Analysis Services", nBufferLength=0x105, lpBuffer=0x31e3b4, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Microsoft Analysis Services", lpFilePart=0x0) returned 0x32 [0059.651] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Microsoft Analysis Services\\", nBufferLength=0x105, lpBuffer=0x31e388, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Microsoft Analysis Services\\", lpFilePart=0x0) returned 0x33 [0059.651] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Microsoft Analysis Services\\*", lpFindFileData=0x31e5d4 | out: lpFindFileData=0x31e5d4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfa1ae930, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xfa1ae930, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xfa1ae930, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x381d40 [0059.652] FindClose (in: hFindFile=0x381d40 | out: hFindFile=0x381d40) returned 1 [0059.652] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Microsoft Analysis Services", nBufferLength=0x105, lpBuffer=0x31e3b4, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Microsoft Analysis Services", lpFilePart=0x0) returned 0x32 [0059.652] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Microsoft Analysis Services\\", nBufferLength=0x105, lpBuffer=0x31e388, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Microsoft Analysis Services\\", lpFilePart=0x0) returned 0x33 [0059.652] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Microsoft Analysis Services\\*", lpFindFileData=0x31e5d4 | out: lpFindFileData=0x31e5d4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfa1ae930, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xfa1ae930, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xfa1ae930, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x381d40 [0059.652] FindClose (in: hFindFile=0x381d40 | out: hFindFile=0x381d40) returned 1 [0059.652] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Microsoft Analysis Services\\AS OLEDB", nBufferLength=0x105, lpBuffer=0x31e33c, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Microsoft Analysis Services\\AS OLEDB", lpFilePart=0x0) returned 0x3b [0059.652] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Microsoft Analysis Services\\AS OLEDB\\", nBufferLength=0x105, lpBuffer=0x31e310, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Microsoft Analysis Services\\AS OLEDB\\", lpFilePart=0x0) returned 0x3c [0059.652] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Microsoft Analysis Services\\AS OLEDB\\*", lpFindFileData=0x31e55c | out: lpFindFileData=0x31e55c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfa1ae930, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xfa1ae930, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xfa1ae930, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x381d40 [0059.652] FindClose (in: hFindFile=0x381d40 | out: hFindFile=0x381d40) returned 1 [0059.652] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Microsoft Analysis Services\\AS OLEDB", nBufferLength=0x105, lpBuffer=0x31e33c, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Microsoft Analysis Services\\AS OLEDB", lpFilePart=0x0) returned 0x3b [0059.653] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Microsoft Analysis Services\\AS OLEDB\\", nBufferLength=0x105, lpBuffer=0x31e310, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Microsoft Analysis Services\\AS OLEDB\\", lpFilePart=0x0) returned 0x3c [0059.653] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Microsoft Analysis Services\\AS OLEDB\\*", lpFindFileData=0x31e55c | out: lpFindFileData=0x31e55c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfa1ae930, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xfa1ae930, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xfa1ae930, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x381d40 [0059.653] FindClose (in: hFindFile=0x381d40 | out: hFindFile=0x381d40) returned 1 [0059.653] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Microsoft Analysis Services\\AS OLEDB\\10", nBufferLength=0x105, lpBuffer=0x31e2c4, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Microsoft Analysis Services\\AS OLEDB\\10", lpFilePart=0x0) returned 0x3e [0059.653] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Microsoft Analysis Services\\AS OLEDB\\10\\", nBufferLength=0x105, lpBuffer=0x31e298, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Microsoft Analysis Services\\AS OLEDB\\10\\", lpFilePart=0x0) returned 0x3f [0059.653] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Microsoft Analysis Services\\AS OLEDB\\10\\*", lpFindFileData=0x31e4e4 | out: lpFindFileData=0x31e4e4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfa1ae930, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0x5f15bdb0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x5f15bdb0, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x381d40 [0059.656] FindClose (in: hFindFile=0x381d40 | out: hFindFile=0x381d40) returned 1 [0059.657] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Microsoft Analysis Services\\AS OLEDB\\10", nBufferLength=0x105, lpBuffer=0x31e2c4, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Microsoft Analysis Services\\AS OLEDB\\10", lpFilePart=0x0) returned 0x3e [0059.657] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Microsoft Analysis Services\\AS OLEDB\\10\\", nBufferLength=0x105, lpBuffer=0x31e298, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Microsoft Analysis Services\\AS OLEDB\\10\\", lpFilePart=0x0) returned 0x3f [0059.657] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Microsoft Analysis Services\\AS OLEDB\\10\\*", lpFindFileData=0x31e4e4 | out: lpFindFileData=0x31e4e4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfa1ae930, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0x5f15bdb0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x5f15bdb0, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x381d40 [0059.658] FindClose (in: hFindFile=0x381d40 | out: hFindFile=0x381d40) returned 1 [0059.658] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Microsoft Analysis Services\\AS OLEDB\\10\\Cartridges", nBufferLength=0x105, lpBuffer=0x31e24c, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Microsoft Analysis Services\\AS OLEDB\\10\\Cartridges", lpFilePart=0x0) returned 0x49 [0059.658] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Microsoft Analysis Services\\AS OLEDB\\10\\Cartridges\\", nBufferLength=0x105, lpBuffer=0x31e220, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Microsoft Analysis Services\\AS OLEDB\\10\\Cartridges\\", lpFilePart=0x0) returned 0x4a [0059.658] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Microsoft Analysis Services\\AS OLEDB\\10\\Cartridges\\*", lpFindFileData=0x31e46c | out: lpFindFileData=0x31e46c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x51494530, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x5edefe10, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x5edefe10, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x381d40 [0059.661] FindClose (in: hFindFile=0x381d40 | out: hFindFile=0x381d40) returned 1 [0059.662] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Microsoft Analysis Services\\AS OLEDB\\10\\Cartridges", nBufferLength=0x105, lpBuffer=0x31e24c, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Microsoft Analysis Services\\AS OLEDB\\10\\Cartridges", lpFilePart=0x0) returned 0x49 [0059.662] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Microsoft Analysis Services\\AS OLEDB\\10\\Cartridges\\", nBufferLength=0x105, lpBuffer=0x31e220, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Microsoft Analysis Services\\AS OLEDB\\10\\Cartridges\\", lpFilePart=0x0) returned 0x4a [0059.662] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Microsoft Analysis Services\\AS OLEDB\\10\\Cartridges\\*", lpFindFileData=0x31e46c | out: lpFindFileData=0x31e46c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x51494530, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x5edefe10, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x5edefe10, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x381d40 [0059.663] FindClose (in: hFindFile=0x381d40 | out: hFindFile=0x381d40) returned 1 [0059.664] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Microsoft Analysis Services\\AS OLEDB\\10\\Resources", nBufferLength=0x105, lpBuffer=0x31e24c, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Microsoft Analysis Services\\AS OLEDB\\10\\Resources", lpFilePart=0x0) returned 0x48 [0059.664] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Microsoft Analysis Services\\AS OLEDB\\10\\Resources\\", nBufferLength=0x105, lpBuffer=0x31e220, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Microsoft Analysis Services\\AS OLEDB\\10\\Resources\\", lpFilePart=0x0) returned 0x49 [0059.664] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Microsoft Analysis Services\\AS OLEDB\\10\\Resources\\*", lpFindFileData=0x31e46c | out: lpFindFileData=0x31e46c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfa1ae930, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xfa1ae930, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xfa1ae930, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x381d40 [0059.664] FindClose (in: hFindFile=0x381d40 | out: hFindFile=0x381d40) returned 1 [0059.664] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Microsoft Analysis Services\\AS OLEDB\\10\\Resources", nBufferLength=0x105, lpBuffer=0x31e24c, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Microsoft Analysis Services\\AS OLEDB\\10\\Resources", lpFilePart=0x0) returned 0x48 [0059.664] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Microsoft Analysis Services\\AS OLEDB\\10\\Resources\\", nBufferLength=0x105, lpBuffer=0x31e220, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Microsoft Analysis Services\\AS OLEDB\\10\\Resources\\", lpFilePart=0x0) returned 0x49 [0059.664] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Microsoft Analysis Services\\AS OLEDB\\10\\Resources\\*", lpFindFileData=0x31e46c | out: lpFindFileData=0x31e46c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfa1ae930, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xfa1ae930, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xfa1ae930, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x381d40 [0059.664] FindClose (in: hFindFile=0x381d40 | out: hFindFile=0x381d40) returned 1 [0059.664] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Microsoft Analysis Services\\AS OLEDB\\10\\Resources\\1033", nBufferLength=0x105, lpBuffer=0x31e1d4, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Microsoft Analysis Services\\AS OLEDB\\10\\Resources\\1033", lpFilePart=0x0) returned 0x4d [0059.664] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Microsoft Analysis Services\\AS OLEDB\\10\\Resources\\1033\\", nBufferLength=0x105, lpBuffer=0x31e1a8, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Microsoft Analysis Services\\AS OLEDB\\10\\Resources\\1033\\", lpFilePart=0x0) returned 0x4e [0059.664] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Microsoft Analysis Services\\AS OLEDB\\10\\Resources\\1033\\*", lpFindFileData=0x31e3f4 | out: lpFindFileData=0x31e3f4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfa1ae930, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xfa1d4a90, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xfa1d4a90, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x381d40 [0059.665] FindClose (in: hFindFile=0x381d40 | out: hFindFile=0x381d40) returned 1 [0059.665] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Microsoft Analysis Services\\AS OLEDB\\10\\Resources\\1033", nBufferLength=0x105, lpBuffer=0x31e1d4, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Microsoft Analysis Services\\AS OLEDB\\10\\Resources\\1033", lpFilePart=0x0) returned 0x4d [0059.665] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Microsoft Analysis Services\\AS OLEDB\\10\\Resources\\1033\\", nBufferLength=0x105, lpBuffer=0x31e1a8, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Microsoft Analysis Services\\AS OLEDB\\10\\Resources\\1033\\", lpFilePart=0x0) returned 0x4e [0059.665] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Microsoft Analysis Services\\AS OLEDB\\10\\Resources\\1033\\*", lpFindFileData=0x31e3f4 | out: lpFindFileData=0x31e3f4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfa1ae930, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xfa1d4a90, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xfa1d4a90, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x381d40 [0059.665] FindClose (in: hFindFile=0x381d40 | out: hFindFile=0x381d40) returned 1 [0059.665] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Microsoft Office", nBufferLength=0x105, lpBuffer=0x31e3b4, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Microsoft Office", lpFilePart=0x0) returned 0x27 [0059.665] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Microsoft Office\\", nBufferLength=0x105, lpBuffer=0x31e388, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Microsoft Office\\", lpFilePart=0x0) returned 0x28 [0059.665] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Microsoft Office\\*", lpFindFileData=0x31e5d4 | out: lpFindFileData=0x31e5d4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xef0a44f0, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xd99ba3c0, ftLastAccessTime.dwHighDateTime=0x1d5e82a, ftLastWriteTime.dwLowDateTime=0xd99ba3c0, ftLastWriteTime.dwHighDateTime=0x1d5e82a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x381d40 [0059.665] FindClose (in: hFindFile=0x381d40 | out: hFindFile=0x381d40) returned 1 [0059.665] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Microsoft Office", nBufferLength=0x105, lpBuffer=0x31e3b4, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Microsoft Office", lpFilePart=0x0) returned 0x27 [0059.665] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Microsoft Office\\", nBufferLength=0x105, lpBuffer=0x31e388, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Microsoft Office\\", lpFilePart=0x0) returned 0x28 [0059.665] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Microsoft Office\\*", lpFindFileData=0x31e5d4 | out: lpFindFileData=0x31e5d4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xef0a44f0, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xd99ba3c0, ftLastAccessTime.dwHighDateTime=0x1d5e82a, ftLastWriteTime.dwLowDateTime=0xd99ba3c0, ftLastWriteTime.dwHighDateTime=0x1d5e82a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x381d40 [0059.666] FindClose (in: hFindFile=0x381d40 | out: hFindFile=0x381d40) returned 1 [0059.666] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Microsoft Office\\Office14", nBufferLength=0x105, lpBuffer=0x31e33c, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Microsoft Office\\Office14", lpFilePart=0x0) returned 0x30 [0059.666] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Microsoft Office\\Office14\\", nBufferLength=0x105, lpBuffer=0x31e310, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Microsoft Office\\Office14\\", lpFilePart=0x0) returned 0x31 [0059.666] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Microsoft Office\\Office14\\*", lpFindFileData=0x31e55c | out: lpFindFileData=0x31e55c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xef0a44f0, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xd68b1180, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0xd68b1180, ftLastWriteTime.dwHighDateTime=0x1d305eb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x381d40 [0059.666] FindClose (in: hFindFile=0x381d40 | out: hFindFile=0x381d40) returned 1 [0059.666] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Microsoft Office\\Office14", nBufferLength=0x105, lpBuffer=0x31e33c, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Microsoft Office\\Office14", lpFilePart=0x0) returned 0x30 [0059.666] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Microsoft Office\\Office14\\", nBufferLength=0x105, lpBuffer=0x31e310, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Microsoft Office\\Office14\\", lpFilePart=0x0) returned 0x31 [0059.666] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Microsoft Office\\Office14\\*", lpFindFileData=0x31e55c | out: lpFindFileData=0x31e55c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xef0a44f0, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xd68b1180, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0xd68b1180, ftLastWriteTime.dwHighDateTime=0x1d305eb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x381d40 [0059.666] FindClose (in: hFindFile=0x381d40 | out: hFindFile=0x381d40) returned 1 [0059.666] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Microsoft Office\\Office14\\1033", nBufferLength=0x105, lpBuffer=0x31e2c4, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Microsoft Office\\Office14\\1033", lpFilePart=0x0) returned 0x35 [0059.666] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Microsoft Office\\Office14\\1033\\", nBufferLength=0x105, lpBuffer=0x31e298, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Microsoft Office\\Office14\\1033\\", lpFilePart=0x0) returned 0x36 [0059.666] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Microsoft Office\\Office14\\1033\\*", lpFindFileData=0x31e4e4 | out: lpFindFileData=0x31e4e4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xef0a44f0, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xba634e00, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0xba634e00, ftLastWriteTime.dwHighDateTime=0x1d305eb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x381d40 [0059.669] FindClose (in: hFindFile=0x381d40 | out: hFindFile=0x381d40) returned 1 [0059.670] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Microsoft Office\\Office14\\1033", nBufferLength=0x105, lpBuffer=0x31e2c4, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Microsoft Office\\Office14\\1033", lpFilePart=0x0) returned 0x35 [0059.670] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Microsoft Office\\Office14\\1033\\", nBufferLength=0x105, lpBuffer=0x31e298, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Microsoft Office\\Office14\\1033\\", lpFilePart=0x0) returned 0x36 [0059.670] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Microsoft Office\\Office14\\1033\\*", lpFindFileData=0x31e4e4 | out: lpFindFileData=0x31e4e4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xef0a44f0, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xba634e00, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0xba634e00, ftLastWriteTime.dwHighDateTime=0x1d305eb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x381d40 [0059.671] FindClose (in: hFindFile=0x381d40 | out: hFindFile=0x381d40) returned 1 [0059.672] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Microsoft Visual Studio 8", nBufferLength=0x105, lpBuffer=0x31e3b4, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Microsoft Visual Studio 8", lpFilePart=0x0) returned 0x30 [0059.672] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Microsoft Visual Studio 8\\", nBufferLength=0x105, lpBuffer=0x31e388, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Microsoft Visual Studio 8\\", lpFilePart=0x0) returned 0x31 [0059.672] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Microsoft Visual Studio 8\\*", lpFindFileData=0x31e5d4 | out: lpFindFileData=0x31e5d4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x10f11a30, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0xd9a2c7e0, ftLastAccessTime.dwHighDateTime=0x1d5e82a, ftLastWriteTime.dwLowDateTime=0xd9a2c7e0, ftLastWriteTime.dwHighDateTime=0x1d5e82a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x381d40 [0059.672] FindClose (in: hFindFile=0x381d40 | out: hFindFile=0x381d40) returned 1 [0059.672] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Microsoft Visual Studio 8", nBufferLength=0x105, lpBuffer=0x31e3b4, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Microsoft Visual Studio 8", lpFilePart=0x0) returned 0x30 [0059.672] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Microsoft Visual Studio 8\\", nBufferLength=0x105, lpBuffer=0x31e388, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Microsoft Visual Studio 8\\", lpFilePart=0x0) returned 0x31 [0059.672] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Microsoft Visual Studio 8\\*", lpFindFileData=0x31e5d4 | out: lpFindFileData=0x31e5d4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x10f11a30, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0xd9a2c7e0, ftLastAccessTime.dwHighDateTime=0x1d5e82a, ftLastWriteTime.dwLowDateTime=0xd9a2c7e0, ftLastWriteTime.dwHighDateTime=0x1d5e82a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x381d40 [0059.672] FindClose (in: hFindFile=0x381d40 | out: hFindFile=0x381d40) returned 1 [0059.672] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Microsoft Visual Studio 8\\Common7", nBufferLength=0x105, lpBuffer=0x31e33c, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Microsoft Visual Studio 8\\Common7", lpFilePart=0x0) returned 0x38 [0059.672] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Microsoft Visual Studio 8\\Common7\\", nBufferLength=0x105, lpBuffer=0x31e310, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Microsoft Visual Studio 8\\Common7\\", lpFilePart=0x0) returned 0x39 [0059.672] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Microsoft Visual Studio 8\\Common7\\*", lpFindFileData=0x31e55c | out: lpFindFileData=0x31e55c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x10f37b90, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x50e7acd0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x50e7acd0, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x381d40 [0059.674] FindClose (in: hFindFile=0x381d40 | out: hFindFile=0x381d40) returned 1 [0059.674] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Microsoft Visual Studio 8\\Common7", nBufferLength=0x105, lpBuffer=0x31e33c, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Microsoft Visual Studio 8\\Common7", lpFilePart=0x0) returned 0x38 [0059.674] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Microsoft Visual Studio 8\\Common7\\", nBufferLength=0x105, lpBuffer=0x31e310, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Microsoft Visual Studio 8\\Common7\\", lpFilePart=0x0) returned 0x39 [0059.674] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Microsoft Visual Studio 8\\Common7\\*", lpFindFileData=0x31e55c | out: lpFindFileData=0x31e55c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x10f37b90, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x50e7acd0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x50e7acd0, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x381d40 [0059.675] FindClose (in: hFindFile=0x381d40 | out: hFindFile=0x381d40) returned 1 [0059.675] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Microsoft Visual Studio 8\\Common7\\IDE", nBufferLength=0x105, lpBuffer=0x31e2c4, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Microsoft Visual Studio 8\\Common7\\IDE", lpFilePart=0x0) returned 0x3c [0059.675] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Microsoft Visual Studio 8\\Common7\\IDE\\", nBufferLength=0x105, lpBuffer=0x31e298, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Microsoft Visual Studio 8\\Common7\\IDE\\", lpFilePart=0x0) returned 0x3d [0059.675] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Microsoft Visual Studio 8\\Common7\\IDE\\*", lpFindFileData=0x31e4e4 | out: lpFindFileData=0x31e4e4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x10f37b90, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x52694b90, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x52694b90, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x381d40 [0059.675] FindClose (in: hFindFile=0x381d40 | out: hFindFile=0x381d40) returned 1 [0059.675] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Microsoft Visual Studio 8\\Common7\\IDE", nBufferLength=0x105, lpBuffer=0x31e2c4, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Microsoft Visual Studio 8\\Common7\\IDE", lpFilePart=0x0) returned 0x3c [0059.675] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Microsoft Visual Studio 8\\Common7\\IDE\\", nBufferLength=0x105, lpBuffer=0x31e298, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Microsoft Visual Studio 8\\Common7\\IDE\\", lpFilePart=0x0) returned 0x3d [0059.675] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Microsoft Visual Studio 8\\Common7\\IDE\\*", lpFindFileData=0x31e4e4 | out: lpFindFileData=0x31e4e4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x10f37b90, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x52694b90, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x52694b90, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x381d40 [0059.675] FindClose (in: hFindFile=0x381d40 | out: hFindFile=0x381d40) returned 1 [0059.675] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Microsoft Visual Studio 8\\Common7\\IDE\\PrivateAssemblies", nBufferLength=0x105, lpBuffer=0x31e24c, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Microsoft Visual Studio 8\\Common7\\IDE\\PrivateAssemblies", lpFilePart=0x0) returned 0x4e [0059.675] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Microsoft Visual Studio 8\\Common7\\IDE\\PrivateAssemblies\\", nBufferLength=0x105, lpBuffer=0x31e220, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Microsoft Visual Studio 8\\Common7\\IDE\\PrivateAssemblies\\", lpFilePart=0x0) returned 0x4f [0059.675] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Microsoft Visual Studio 8\\Common7\\IDE\\PrivateAssemblies\\*", lpFindFileData=0x31e46c | out: lpFindFileData=0x31e46c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x50e7acd0, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x610018f0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x610018f0, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x381d40 [0059.676] FindClose (in: hFindFile=0x381d40 | out: hFindFile=0x381d40) returned 1 [0059.676] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Microsoft Visual Studio 8\\Common7\\IDE\\PrivateAssemblies", nBufferLength=0x105, lpBuffer=0x31e24c, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Microsoft Visual Studio 8\\Common7\\IDE\\PrivateAssemblies", lpFilePart=0x0) returned 0x4e [0059.676] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Microsoft Visual Studio 8\\Common7\\IDE\\PrivateAssemblies\\", nBufferLength=0x105, lpBuffer=0x31e220, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Microsoft Visual Studio 8\\Common7\\IDE\\PrivateAssemblies\\", lpFilePart=0x0) returned 0x4f [0059.676] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Microsoft Visual Studio 8\\Common7\\IDE\\PrivateAssemblies\\*", lpFindFileData=0x31e46c | out: lpFindFileData=0x31e46c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x50e7acd0, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x610018f0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x610018f0, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x381d40 [0059.676] FindClose (in: hFindFile=0x381d40 | out: hFindFile=0x381d40) returned 1 [0059.676] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Microsoft Visual Studio 8\\Common7\\IDE\\PublicAssemblies", nBufferLength=0x105, lpBuffer=0x31e24c, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Microsoft Visual Studio 8\\Common7\\IDE\\PublicAssemblies", lpFilePart=0x0) returned 0x4d [0059.676] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Microsoft Visual Studio 8\\Common7\\IDE\\PublicAssemblies\\", nBufferLength=0x105, lpBuffer=0x31e220, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Microsoft Visual Studio 8\\Common7\\IDE\\PublicAssemblies\\", lpFilePart=0x0) returned 0x4e [0059.676] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Microsoft Visual Studio 8\\Common7\\IDE\\PublicAssemblies\\*", lpFindFileData=0x31e46c | out: lpFindFileData=0x31e46c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x52694b90, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x61771db0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x61771db0, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x381d40 [0059.685] FindClose (in: hFindFile=0x381d40 | out: hFindFile=0x381d40) returned 1 [0059.686] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Microsoft Visual Studio 8\\Common7\\IDE\\PublicAssemblies", nBufferLength=0x105, lpBuffer=0x31e24c, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Microsoft Visual Studio 8\\Common7\\IDE\\PublicAssemblies", lpFilePart=0x0) returned 0x4d [0059.686] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Microsoft Visual Studio 8\\Common7\\IDE\\PublicAssemblies\\", nBufferLength=0x105, lpBuffer=0x31e220, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Microsoft Visual Studio 8\\Common7\\IDE\\PublicAssemblies\\", lpFilePart=0x0) returned 0x4e [0059.686] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Microsoft Visual Studio 8\\Common7\\IDE\\PublicAssemblies\\*", lpFindFileData=0x31e46c | out: lpFindFileData=0x31e46c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x52694b90, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x61771db0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x61771db0, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x381d40 [0059.688] FindClose (in: hFindFile=0x381d40 | out: hFindFile=0x381d40) returned 1 [0059.689] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA", nBufferLength=0x105, lpBuffer=0x31e24c, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA", lpFilePart=0x0) returned 0x41 [0059.689] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\", nBufferLength=0x105, lpBuffer=0x31e220, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\", lpFilePart=0x0) returned 0x42 [0059.689] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\*", lpFindFileData=0x31e46c | out: lpFindFileData=0x31e46c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x10f37b90, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x10f37b90, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x10f37b90, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x381d40 [0059.690] FindClose (in: hFindFile=0x381d40 | out: hFindFile=0x381d40) returned 1 [0059.690] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA", nBufferLength=0x105, lpBuffer=0x31e24c, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA", lpFilePart=0x0) returned 0x41 [0059.690] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\", nBufferLength=0x105, lpBuffer=0x31e220, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\", lpFilePart=0x0) returned 0x42 [0059.690] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\*", lpFindFileData=0x31e46c | out: lpFindFileData=0x31e46c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x10f37b90, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x10f37b90, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x10f37b90, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x381d40 [0059.691] FindClose (in: hFindFile=0x381d40 | out: hFindFile=0x381d40) returned 1 [0059.691] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates", nBufferLength=0x105, lpBuffer=0x31e1d4, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates", lpFilePart=0x0) returned 0x4f [0059.691] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates\\", nBufferLength=0x105, lpBuffer=0x31e1a8, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates\\", lpFilePart=0x0) returned 0x50 [0059.691] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates\\*", lpFindFileData=0x31e3f4 | out: lpFindFileData=0x31e3f4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x10f37b90, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x10f5dcf0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x10f5dcf0, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x381d40 [0059.692] FindClose (in: hFindFile=0x381d40 | out: hFindFile=0x381d40) returned 1 [0059.692] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates", nBufferLength=0x105, lpBuffer=0x31e1d4, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates", lpFilePart=0x0) returned 0x4f [0059.692] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates\\", nBufferLength=0x105, lpBuffer=0x31e1a8, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates\\", lpFilePart=0x0) returned 0x50 [0059.692] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates\\*", lpFindFileData=0x31e3f4 | out: lpFindFileData=0x31e3f4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x10f37b90, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x10f5dcf0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x10f5dcf0, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x381d40 [0059.692] FindClose (in: hFindFile=0x381d40 | out: hFindFile=0x381d40) returned 1 [0059.692] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates\\CSharp", nBufferLength=0x105, lpBuffer=0x31e15c, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates\\CSharp", lpFilePart=0x0) returned 0x56 [0059.692] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates\\CSharp\\", nBufferLength=0x105, lpBuffer=0x31e130, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates\\CSharp\\", lpFilePart=0x0) returned 0x57 [0059.692] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates\\CSharp\\*", lpFindFileData=0x31e37c | out: lpFindFileData=0x31e37c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x10f37b90, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x10f37b90, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x10f37b90, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x381d40 [0059.693] FindClose (in: hFindFile=0x381d40 | out: hFindFile=0x381d40) returned 1 [0059.693] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates\\CSharp", nBufferLength=0x105, lpBuffer=0x31e15c, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates\\CSharp", lpFilePart=0x0) returned 0x56 [0059.693] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates\\CSharp\\", nBufferLength=0x105, lpBuffer=0x31e130, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates\\CSharp\\", lpFilePart=0x0) returned 0x57 [0059.693] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates\\CSharp\\*", lpFindFileData=0x31e37c | out: lpFindFileData=0x31e37c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x10f37b90, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x10f37b90, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x10f37b90, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x381d40 [0059.694] FindClose (in: hFindFile=0x381d40 | out: hFindFile=0x381d40) returned 1 [0059.694] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates\\CSharp\\1033", nBufferLength=0x105, lpBuffer=0x31e0e4, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates\\CSharp\\1033", lpFilePart=0x0) returned 0x5b [0059.694] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates\\CSharp\\1033\\", nBufferLength=0x105, lpBuffer=0x31e0b8, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates\\CSharp\\1033\\", lpFilePart=0x0) returned 0x5c [0059.694] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates\\CSharp\\1033\\*", lpFindFileData=0x31e304 | out: lpFindFileData=0x31e304*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x10f37b90, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x11231710, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x11231710, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x381d40 [0059.700] FindClose (in: hFindFile=0x381d40 | out: hFindFile=0x381d40) returned 1 [0059.701] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates\\CSharp\\1033", nBufferLength=0x105, lpBuffer=0x31e0e4, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates\\CSharp\\1033", lpFilePart=0x0) returned 0x5b [0059.701] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates\\CSharp\\1033\\", nBufferLength=0x105, lpBuffer=0x31e0b8, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates\\CSharp\\1033\\", lpFilePart=0x0) returned 0x5c [0059.701] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates\\CSharp\\1033\\*", lpFindFileData=0x31e304 | out: lpFindFileData=0x31e304*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x10f37b90, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x11231710, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x11231710, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x381d40 [0059.704] FindClose (in: hFindFile=0x381d40 | out: hFindFile=0x381d40) returned 1 [0059.705] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates\\CSharp\\1033\\AboutBox.zip", nBufferLength=0x105, lpBuffer=0x31dfb4, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates\\CSharp\\1033\\AboutBox.zip", lpFilePart=0x0) returned 0x68 [0059.705] CreateFileW (lpFileName="C:\\Program Files (x86)\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates\\CSharp\\1033\\AboutBox.zip" (normalized: "c:\\program files (x86)\\microsoft visual studio 8\\common7\\ide\\vsta\\itemtemplates\\csharp\\1033\\aboutbox.zip"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x178 [0059.706] GetFileType (hFile=0x178) returned 0x1 [0059.706] GetFileType (hFile=0x178) returned 0x1 [0059.706] GetFileSize (in: hFile=0x178, lpFileSizeHigh=0x31e5b0 | out: lpFileSizeHigh=0x31e5b0*=0x0) returned 0x8b52 [0059.707] ReadFile (in: hFile=0x178, lpBuffer=0x2653148, nNumberOfBytesToRead=0x8b52, lpNumberOfBytesRead=0x31e55c, lpOverlapped=0x0 | out: lpBuffer=0x2653148*, lpNumberOfBytesRead=0x31e55c*=0x8b52, lpOverlapped=0x0) returned 1 [0059.750] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates\\CSharp\\1033\\AboutBox.zip", nBufferLength=0x105, lpBuffer=0x31dfa0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates\\CSharp\\1033\\AboutBox.zip", lpFilePart=0x0) returned 0x68 [0059.750] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e494) returned 1 [0059.750] CreateFileW (lpFileName="C:\\Program Files (x86)\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates\\CSharp\\1033\\AboutBox.zip" (normalized: "c:\\program files (x86)\\microsoft visual studio 8\\common7\\ide\\vsta\\itemtemplates\\csharp\\1033\\aboutbox.zip"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x178 [0059.751] GetFileType (hFile=0x178) returned 0x1 [0059.751] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e490) returned 1 [0059.751] GetFileType (hFile=0x178) returned 0x1 [0059.751] WriteFile (in: hFile=0x178, lpBuffer=0x26cb96c*, nNumberOfBytesToWrite=0x8b60, lpNumberOfBytesWritten=0x31e550, lpOverlapped=0x0 | out: lpBuffer=0x26cb96c*, lpNumberOfBytesWritten=0x31e550*=0x8b60, lpOverlapped=0x0) returned 1 [0059.752] CloseHandle (hObject=0x178) returned 1 [0059.752] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates\\CSharp\\1033\\AboutBox.zip", nBufferLength=0x105, lpBuffer=0x31e0d4, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates\\CSharp\\1033\\AboutBox.zip", lpFilePart=0x0) returned 0x68 [0059.752] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates\\CSharp\\1033\\AboutBox.zip", nBufferLength=0x105, lpBuffer=0x31e0d4, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates\\CSharp\\1033\\AboutBox.zip", lpFilePart=0x0) returned 0x68 [0059.752] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e534) returned 1 [0059.752] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates\\CSharp\\1033\\AboutBox.zip" (normalized: "c:\\program files (x86)\\microsoft visual studio 8\\common7\\ide\\vsta\\itemtemplates\\csharp\\1033\\aboutbox.zip"), fInfoLevelId=0x0, lpFileInformation=0x31e5b0 | out: lpFileInformation=0x31e5b0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8c501900, ftCreationTime.dwHighDateTime=0x1c9e43c, ftLastAccessTime.dwLowDateTime=0x10f5dcf0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x711d740, ftLastWriteTime.dwHighDateTime=0x1d6eb7f, nFileSizeHigh=0x0, nFileSizeLow=0x8b60)) returned 1 [0059.753] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e530) returned 1 [0059.753] MoveFileW (lpExistingFileName="C:\\Program Files (x86)\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates\\CSharp\\1033\\AboutBox.zip" (normalized: "c:\\program files (x86)\\microsoft visual studio 8\\common7\\ide\\vsta\\itemtemplates\\csharp\\1033\\aboutbox.zip"), lpNewFileName="C:\\Program Files (x86)\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates\\CSharp\\1033\\AboutBox.zip" (normalized: "c:\\program files (x86)\\microsoft visual studio 8\\common7\\ide\\vsta\\itemtemplates\\csharp\\1033\\aboutbox.zip")) returned 1 [0059.753] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates\\CSharp\\1033\\AppConfig.zip", nBufferLength=0x105, lpBuffer=0x31dfb4, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates\\CSharp\\1033\\AppConfig.zip", lpFilePart=0x0) returned 0x69 [0059.753] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e4a8) returned 1 [0059.753] CreateFileW (lpFileName="C:\\Program Files (x86)\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates\\CSharp\\1033\\AppConfig.zip" (normalized: "c:\\program files (x86)\\microsoft visual studio 8\\common7\\ide\\vsta\\itemtemplates\\csharp\\1033\\appconfig.zip"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x178 [0059.753] GetFileType (hFile=0x178) returned 0x1 [0059.753] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e4a4) returned 1 [0059.753] GetFileType (hFile=0x178) returned 0x1 [0059.753] GetFileSize (in: hFile=0x178, lpFileSizeHigh=0x31e5b0 | out: lpFileSizeHigh=0x31e5b0*=0x0) returned 0x251 [0059.753] ReadFile (in: hFile=0x178, lpBuffer=0x26d4bd8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x31e55c, lpOverlapped=0x0 | out: lpBuffer=0x26d4bd8*, lpNumberOfBytesRead=0x31e55c*=0x251, lpOverlapped=0x0) returned 1 [0059.756] CloseHandle (hObject=0x178) returned 1 [0059.769] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates\\CSharp\\1033\\AppConfig.zip", nBufferLength=0x105, lpBuffer=0x31dfa0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates\\CSharp\\1033\\AppConfig.zip", lpFilePart=0x0) returned 0x69 [0059.769] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e494) returned 1 [0059.769] CreateFileW (lpFileName="C:\\Program Files (x86)\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates\\CSharp\\1033\\AppConfig.zip" (normalized: "c:\\program files (x86)\\microsoft visual studio 8\\common7\\ide\\vsta\\itemtemplates\\csharp\\1033\\appconfig.zip"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x178 [0059.770] GetFileType (hFile=0x178) returned 0x1 [0059.770] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e490) returned 1 [0059.770] GetFileType (hFile=0x178) returned 0x1 [0059.770] WriteFile (in: hFile=0x178, lpBuffer=0x272371c*, nNumberOfBytesToWrite=0x260, lpNumberOfBytesWritten=0x31e524, lpOverlapped=0x0 | out: lpBuffer=0x272371c*, lpNumberOfBytesWritten=0x31e524*=0x260, lpOverlapped=0x0) returned 1 [0059.771] CloseHandle (hObject=0x178) returned 1 [0059.771] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates\\CSharp\\1033\\AppConfig.zip", nBufferLength=0x105, lpBuffer=0x31e0d4, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates\\CSharp\\1033\\AppConfig.zip", lpFilePart=0x0) returned 0x69 [0059.771] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates\\CSharp\\1033\\AppConfig.zip", nBufferLength=0x105, lpBuffer=0x31e0d4, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates\\CSharp\\1033\\AppConfig.zip", lpFilePart=0x0) returned 0x69 [0059.771] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e534) returned 1 [0059.771] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates\\CSharp\\1033\\AppConfig.zip" (normalized: "c:\\program files (x86)\\microsoft visual studio 8\\common7\\ide\\vsta\\itemtemplates\\csharp\\1033\\appconfig.zip"), fInfoLevelId=0x0, lpFileInformation=0x31e5b0 | out: lpFileInformation=0x31e5b0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8c501900, ftCreationTime.dwHighDateTime=0x1c9e43c, ftLastAccessTime.dwLowDateTime=0x10f5dcf0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x71438a0, ftLastWriteTime.dwHighDateTime=0x1d6eb7f, nFileSizeHigh=0x0, nFileSizeLow=0x260)) returned 1 [0059.771] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e530) returned 1 [0059.771] MoveFileW (lpExistingFileName="C:\\Program Files (x86)\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates\\CSharp\\1033\\AppConfig.zip" (normalized: "c:\\program files (x86)\\microsoft visual studio 8\\common7\\ide\\vsta\\itemtemplates\\csharp\\1033\\appconfig.zip"), lpNewFileName="C:\\Program Files (x86)\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates\\CSharp\\1033\\AppConfig.zip" (normalized: "c:\\program files (x86)\\microsoft visual studio 8\\common7\\ide\\vsta\\itemtemplates\\csharp\\1033\\appconfig.zip")) returned 1 [0059.771] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates\\CSharp\\1033\\AppConfigInternal.zip", nBufferLength=0x105, lpBuffer=0x31dfb4, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates\\CSharp\\1033\\AppConfigInternal.zip", lpFilePart=0x0) returned 0x71 [0059.771] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e4a8) returned 1 [0059.772] CreateFileW (lpFileName="C:\\Program Files (x86)\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates\\CSharp\\1033\\AppConfigInternal.zip" (normalized: "c:\\program files (x86)\\microsoft visual studio 8\\common7\\ide\\vsta\\itemtemplates\\csharp\\1033\\appconfiginternal.zip"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x178 [0059.772] GetFileType (hFile=0x178) returned 0x1 [0059.772] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e4a4) returned 1 [0059.772] GetFileType (hFile=0x178) returned 0x1 [0059.772] GetFileSize (in: hFile=0x178, lpFileSizeHigh=0x31e5b0 | out: lpFileSizeHigh=0x31e5b0*=0x0) returned 0x26d [0059.772] ReadFile (in: hFile=0x178, lpBuffer=0x2724d00, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x31e55c, lpOverlapped=0x0 | out: lpBuffer=0x2724d00*, lpNumberOfBytesRead=0x31e55c*=0x26d, lpOverlapped=0x0) returned 1 [0059.773] CloseHandle (hObject=0x178) returned 1 [0059.786] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates\\CSharp\\1033\\AppConfigInternal.zip", nBufferLength=0x105, lpBuffer=0x31dfa0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates\\CSharp\\1033\\AppConfigInternal.zip", lpFilePart=0x0) returned 0x71 [0059.786] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e494) returned 1 [0059.786] CreateFileW (lpFileName="C:\\Program Files (x86)\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates\\CSharp\\1033\\AppConfigInternal.zip" (normalized: "c:\\program files (x86)\\microsoft visual studio 8\\common7\\ide\\vsta\\itemtemplates\\csharp\\1033\\appconfiginternal.zip"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x178 [0059.787] GetFileType (hFile=0x178) returned 0x1 [0059.787] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e490) returned 1 [0059.787] GetFileType (hFile=0x178) returned 0x1 [0059.787] WriteFile (in: hFile=0x178, lpBuffer=0x27738a8*, nNumberOfBytesToWrite=0x270, lpNumberOfBytesWritten=0x31e524, lpOverlapped=0x0 | out: lpBuffer=0x27738a8*, lpNumberOfBytesWritten=0x31e524*=0x270, lpOverlapped=0x0) returned 1 [0059.788] CloseHandle (hObject=0x178) returned 1 [0059.788] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates\\CSharp\\1033\\AppConfigInternal.zip", nBufferLength=0x105, lpBuffer=0x31e0d4, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates\\CSharp\\1033\\AppConfigInternal.zip", lpFilePart=0x0) returned 0x71 [0059.788] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates\\CSharp\\1033\\AppConfigInternal.zip", nBufferLength=0x105, lpBuffer=0x31e0d4, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates\\CSharp\\1033\\AppConfigInternal.zip", lpFilePart=0x0) returned 0x71 [0059.788] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e534) returned 1 [0059.788] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates\\CSharp\\1033\\AppConfigInternal.zip" (normalized: "c:\\program files (x86)\\microsoft visual studio 8\\common7\\ide\\vsta\\itemtemplates\\csharp\\1033\\appconfiginternal.zip"), fInfoLevelId=0x0, lpFileInformation=0x31e5b0 | out: lpFileInformation=0x31e5b0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8c501900, ftCreationTime.dwHighDateTime=0x1c9e43c, ftLastAccessTime.dwLowDateTime=0x10f5dcf0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x7169a00, ftLastWriteTime.dwHighDateTime=0x1d6eb7f, nFileSizeHigh=0x0, nFileSizeLow=0x270)) returned 1 [0059.788] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e530) returned 1 [0059.789] MoveFileW (lpExistingFileName="C:\\Program Files (x86)\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates\\CSharp\\1033\\AppConfigInternal.zip" (normalized: "c:\\program files (x86)\\microsoft visual studio 8\\common7\\ide\\vsta\\itemtemplates\\csharp\\1033\\appconfiginternal.zip"), lpNewFileName="C:\\Program Files (x86)\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates\\CSharp\\1033\\AppConfigInternal.zip" (normalized: "c:\\program files (x86)\\microsoft visual studio 8\\common7\\ide\\vsta\\itemtemplates\\csharp\\1033\\appconfiginternal.zip")) returned 1 [0059.789] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates\\CSharp\\1033\\AssemblyInfo.zip", nBufferLength=0x105, lpBuffer=0x31dfb4, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates\\CSharp\\1033\\AssemblyInfo.zip", lpFilePart=0x0) returned 0x6c [0059.789] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e4a8) returned 1 [0059.789] CreateFileW (lpFileName="C:\\Program Files (x86)\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates\\CSharp\\1033\\AssemblyInfo.zip" (normalized: "c:\\program files (x86)\\microsoft visual studio 8\\common7\\ide\\vsta\\itemtemplates\\csharp\\1033\\assemblyinfo.zip"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x178 [0059.790] GetFileType (hFile=0x178) returned 0x1 [0059.790] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e4a4) returned 1 [0059.790] GetFileType (hFile=0x178) returned 0x1 [0059.790] GetFileSize (in: hFile=0x178, lpFileSizeHigh=0x31e5b0 | out: lpFileSizeHigh=0x31e5b0*=0x0) returned 0x492 [0059.790] ReadFile (in: hFile=0x178, lpBuffer=0x27750c0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x31e55c, lpOverlapped=0x0 | out: lpBuffer=0x27750c0*, lpNumberOfBytesRead=0x31e55c*=0x492, lpOverlapped=0x0) returned 1 [0059.818] CloseHandle (hObject=0x178) returned 1 [0059.834] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates\\CSharp\\1033\\AssemblyInfo.zip", nBufferLength=0x105, lpBuffer=0x31dfa0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates\\CSharp\\1033\\AssemblyInfo.zip", lpFilePart=0x0) returned 0x6c [0059.834] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e494) returned 1 [0059.834] CreateFileW (lpFileName="C:\\Program Files (x86)\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates\\CSharp\\1033\\AssemblyInfo.zip" (normalized: "c:\\program files (x86)\\microsoft visual studio 8\\common7\\ide\\vsta\\itemtemplates\\csharp\\1033\\assemblyinfo.zip"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x178 [0059.835] GetFileType (hFile=0x178) returned 0x1 [0059.835] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e490) returned 1 [0059.835] GetFileType (hFile=0x178) returned 0x1 [0059.835] WriteFile (in: hFile=0x178, lpBuffer=0x27c4754*, nNumberOfBytesToWrite=0x4a0, lpNumberOfBytesWritten=0x31e524, lpOverlapped=0x0 | out: lpBuffer=0x27c4754*, lpNumberOfBytesWritten=0x31e524*=0x4a0, lpOverlapped=0x0) returned 1 [0059.836] CloseHandle (hObject=0x178) returned 1 [0059.836] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates\\CSharp\\1033\\AssemblyInfo.zip", nBufferLength=0x105, lpBuffer=0x31e0d4, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates\\CSharp\\1033\\AssemblyInfo.zip", lpFilePart=0x0) returned 0x6c [0059.836] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates\\CSharp\\1033\\AssemblyInfo.zip", nBufferLength=0x105, lpBuffer=0x31e0d4, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates\\CSharp\\1033\\AssemblyInfo.zip", lpFilePart=0x0) returned 0x6c [0059.836] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e534) returned 1 [0059.836] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates\\CSharp\\1033\\AssemblyInfo.zip" (normalized: "c:\\program files (x86)\\microsoft visual studio 8\\common7\\ide\\vsta\\itemtemplates\\csharp\\1033\\assemblyinfo.zip"), fInfoLevelId=0x0, lpFileInformation=0x31e5b0 | out: lpFileInformation=0x31e5b0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8c501900, ftCreationTime.dwHighDateTime=0x1c9e43c, ftLastAccessTime.dwLowDateTime=0x10f5dcf0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x71b5cc0, ftLastWriteTime.dwHighDateTime=0x1d6eb7f, nFileSizeHigh=0x0, nFileSizeLow=0x4a0)) returned 1 [0059.836] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e530) returned 1 [0059.836] MoveFileW (lpExistingFileName="C:\\Program Files (x86)\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates\\CSharp\\1033\\AssemblyInfo.zip" (normalized: "c:\\program files (x86)\\microsoft visual studio 8\\common7\\ide\\vsta\\itemtemplates\\csharp\\1033\\assemblyinfo.zip"), lpNewFileName="C:\\Program Files (x86)\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates\\CSharp\\1033\\AssemblyInfo.zip" (normalized: "c:\\program files (x86)\\microsoft visual studio 8\\common7\\ide\\vsta\\itemtemplates\\csharp\\1033\\assemblyinfo.zip")) returned 1 [0059.837] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates\\CSharp\\1033\\AssemblyInfoInternal.zip", nBufferLength=0x105, lpBuffer=0x31dfb4, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates\\CSharp\\1033\\AssemblyInfoInternal.zip", lpFilePart=0x0) returned 0x74 [0059.837] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e4a8) returned 1 [0059.837] CreateFileW (lpFileName="C:\\Program Files (x86)\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates\\CSharp\\1033\\AssemblyInfoInternal.zip" (normalized: "c:\\program files (x86)\\microsoft visual studio 8\\common7\\ide\\vsta\\itemtemplates\\csharp\\1033\\assemblyinfointernal.zip"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x178 [0059.838] GetFileType (hFile=0x178) returned 0x1 [0059.838] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e4a4) returned 1 [0059.838] GetFileType (hFile=0x178) returned 0x1 [0059.838] GetFileSize (in: hFile=0x178, lpFileSizeHigh=0x31e5b0 | out: lpFileSizeHigh=0x31e5b0*=0x0) returned 0x4e2 [0059.838] ReadFile (in: hFile=0x178, lpBuffer=0x27c5fcc, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x31e55c, lpOverlapped=0x0 | out: lpBuffer=0x27c5fcc*, lpNumberOfBytesRead=0x31e55c*=0x4e2, lpOverlapped=0x0) returned 1 [0059.840] CloseHandle (hObject=0x178) returned 1 [0059.854] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates\\CSharp\\1033\\AssemblyInfoInternal.zip", nBufferLength=0x105, lpBuffer=0x31dfa0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates\\CSharp\\1033\\AssemblyInfoInternal.zip", lpFilePart=0x0) returned 0x74 [0059.854] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e494) returned 1 [0059.854] CreateFileW (lpFileName="C:\\Program Files (x86)\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates\\CSharp\\1033\\AssemblyInfoInternal.zip" (normalized: "c:\\program files (x86)\\microsoft visual studio 8\\common7\\ide\\vsta\\itemtemplates\\csharp\\1033\\assemblyinfointernal.zip"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x178 [0059.855] GetFileType (hFile=0x178) returned 0x1 [0059.855] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e490) returned 1 [0059.855] GetFileType (hFile=0x178) returned 0x1 [0059.855] WriteFile (in: hFile=0x178, lpBuffer=0x2815810*, nNumberOfBytesToWrite=0x4f0, lpNumberOfBytesWritten=0x31e524, lpOverlapped=0x0 | out: lpBuffer=0x2815810*, lpNumberOfBytesWritten=0x31e524*=0x4f0, lpOverlapped=0x0) returned 1 [0059.856] CloseHandle (hObject=0x178) returned 1 [0059.856] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates\\CSharp\\1033\\AssemblyInfoInternal.zip", nBufferLength=0x105, lpBuffer=0x31e0d4, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates\\CSharp\\1033\\AssemblyInfoInternal.zip", lpFilePart=0x0) returned 0x74 [0059.856] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates\\CSharp\\1033\\AssemblyInfoInternal.zip", nBufferLength=0x105, lpBuffer=0x31e0d4, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates\\CSharp\\1033\\AssemblyInfoInternal.zip", lpFilePart=0x0) returned 0x74 [0059.856] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e534) returned 1 [0059.856] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates\\CSharp\\1033\\AssemblyInfoInternal.zip" (normalized: "c:\\program files (x86)\\microsoft visual studio 8\\common7\\ide\\vsta\\itemtemplates\\csharp\\1033\\assemblyinfointernal.zip"), fInfoLevelId=0x0, lpFileInformation=0x31e5b0 | out: lpFileInformation=0x31e5b0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8c501900, ftCreationTime.dwHighDateTime=0x1c9e43c, ftLastAccessTime.dwLowDateTime=0x10f5dcf0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x71dbe20, ftLastWriteTime.dwHighDateTime=0x1d6eb7f, nFileSizeHigh=0x0, nFileSizeLow=0x4f0)) returned 1 [0059.856] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e530) returned 1 [0059.856] MoveFileW (lpExistingFileName="C:\\Program Files (x86)\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates\\CSharp\\1033\\AssemblyInfoInternal.zip" (normalized: "c:\\program files (x86)\\microsoft visual studio 8\\common7\\ide\\vsta\\itemtemplates\\csharp\\1033\\assemblyinfointernal.zip"), lpNewFileName="C:\\Program Files (x86)\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates\\CSharp\\1033\\AssemblyInfoInternal.zip" (normalized: "c:\\program files (x86)\\microsoft visual studio 8\\common7\\ide\\vsta\\itemtemplates\\csharp\\1033\\assemblyinfointernal.zip")) returned 1 [0059.856] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates\\CSharp\\1033\\Class.zip", nBufferLength=0x105, lpBuffer=0x31dfb4, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates\\CSharp\\1033\\Class.zip", lpFilePart=0x0) returned 0x65 [0059.856] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e4a8) returned 1 [0059.856] CreateFileW (lpFileName="C:\\Program Files (x86)\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates\\CSharp\\1033\\Class.zip" (normalized: "c:\\program files (x86)\\microsoft visual studio 8\\common7\\ide\\vsta\\itemtemplates\\csharp\\1033\\class.zip"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x178 [0059.857] GetFileType (hFile=0x178) returned 0x1 [0059.857] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e4a4) returned 1 [0059.857] GetFileType (hFile=0x178) returned 0x1 [0059.857] GetFileSize (in: hFile=0x178, lpFileSizeHigh=0x31e5b0 | out: lpFileSizeHigh=0x31e5b0*=0x0) returned 0x2bd [0059.857] ReadFile (in: hFile=0x178, lpBuffer=0x2816e44, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x31e55c, lpOverlapped=0x0 | out: lpBuffer=0x2816e44*, lpNumberOfBytesRead=0x31e55c*=0x2bd, lpOverlapped=0x0) returned 1 [0059.858] CloseHandle (hObject=0x178) returned 1 [0059.904] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates\\CSharp\\1033\\Class.zip", nBufferLength=0x105, lpBuffer=0x31dfa0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates\\CSharp\\1033\\Class.zip", lpFilePart=0x0) returned 0x65 [0059.904] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e494) returned 1 [0059.904] CreateFileW (lpFileName="C:\\Program Files (x86)\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates\\CSharp\\1033\\Class.zip" (normalized: "c:\\program files (x86)\\microsoft visual studio 8\\common7\\ide\\vsta\\itemtemplates\\csharp\\1033\\class.zip"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x178 [0059.905] GetFileType (hFile=0x178) returned 0x1 [0059.905] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e490) returned 1 [0059.905] GetFileType (hFile=0x178) returned 0x1 [0059.905] WriteFile (in: hFile=0x178, lpBuffer=0x2667f10*, nNumberOfBytesToWrite=0x2c0, lpNumberOfBytesWritten=0x31e524, lpOverlapped=0x0 | out: lpBuffer=0x2667f10*, lpNumberOfBytesWritten=0x31e524*=0x2c0, lpOverlapped=0x0) returned 1 [0059.906] CloseHandle (hObject=0x178) returned 1 [0059.906] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates\\CSharp\\1033\\Class.zip", nBufferLength=0x105, lpBuffer=0x31e0d4, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates\\CSharp\\1033\\Class.zip", lpFilePart=0x0) returned 0x65 [0059.906] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates\\CSharp\\1033\\Class.zip", nBufferLength=0x105, lpBuffer=0x31e0d4, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates\\CSharp\\1033\\Class.zip", lpFilePart=0x0) returned 0x65 [0059.906] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e534) returned 1 [0059.906] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates\\CSharp\\1033\\Class.zip" (normalized: "c:\\program files (x86)\\microsoft visual studio 8\\common7\\ide\\vsta\\itemtemplates\\csharp\\1033\\class.zip"), fInfoLevelId=0x0, lpFileInformation=0x31e5b0 | out: lpFileInformation=0x31e5b0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8c501900, ftCreationTime.dwHighDateTime=0x1c9e43c, ftLastAccessTime.dwLowDateTime=0x10f5dcf0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x72743a0, ftLastWriteTime.dwHighDateTime=0x1d6eb7f, nFileSizeHigh=0x0, nFileSizeLow=0x2c0)) returned 1 [0059.906] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e530) returned 1 [0059.906] MoveFileW (lpExistingFileName="C:\\Program Files (x86)\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates\\CSharp\\1033\\Class.zip" (normalized: "c:\\program files (x86)\\microsoft visual studio 8\\common7\\ide\\vsta\\itemtemplates\\csharp\\1033\\class.zip"), lpNewFileName="C:\\Program Files (x86)\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates\\CSharp\\1033\\Class.zip" (normalized: "c:\\program files (x86)\\microsoft visual studio 8\\common7\\ide\\vsta\\itemtemplates\\csharp\\1033\\class.zip")) returned 1 [0059.907] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates\\CSharp\\1033\\CodeFile.zip", nBufferLength=0x105, lpBuffer=0x31dfb4, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates\\CSharp\\1033\\CodeFile.zip", lpFilePart=0x0) returned 0x68 [0059.907] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e4a8) returned 1 [0059.907] CreateFileW (lpFileName="C:\\Program Files (x86)\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates\\CSharp\\1033\\CodeFile.zip" (normalized: "c:\\program files (x86)\\microsoft visual studio 8\\common7\\ide\\vsta\\itemtemplates\\csharp\\1033\\codefile.zip"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x178 [0059.908] GetFileType (hFile=0x178) returned 0x1 [0059.908] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e4a4) returned 1 [0059.908] GetFileType (hFile=0x178) returned 0x1 [0059.908] GetFileSize (in: hFile=0x178, lpFileSizeHigh=0x31e5b0 | out: lpFileSizeHigh=0x31e5b0*=0x0) returned 0x222 [0059.908] ReadFile (in: hFile=0x178, lpBuffer=0x2669478, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x31e55c, lpOverlapped=0x0 | out: lpBuffer=0x2669478*, lpNumberOfBytesRead=0x31e55c*=0x222, lpOverlapped=0x0) returned 1 [0059.909] CloseHandle (hObject=0x178) returned 1 [0059.922] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates\\CSharp\\1033\\CodeFile.zip", nBufferLength=0x105, lpBuffer=0x31dfa0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates\\CSharp\\1033\\CodeFile.zip", lpFilePart=0x0) returned 0x68 [0059.922] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e494) returned 1 [0059.922] CreateFileW (lpFileName="C:\\Program Files (x86)\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates\\CSharp\\1033\\CodeFile.zip" (normalized: "c:\\program files (x86)\\microsoft visual studio 8\\common7\\ide\\vsta\\itemtemplates\\csharp\\1033\\codefile.zip"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x178 [0059.923] GetFileType (hFile=0x178) returned 0x1 [0059.923] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e490) returned 1 [0059.923] GetFileType (hFile=0x178) returned 0x1 [0059.923] WriteFile (in: hFile=0x178, lpBuffer=0x26b8028*, nNumberOfBytesToWrite=0x230, lpNumberOfBytesWritten=0x31e524, lpOverlapped=0x0 | out: lpBuffer=0x26b8028*, lpNumberOfBytesWritten=0x31e524*=0x230, lpOverlapped=0x0) returned 1 [0059.924] CloseHandle (hObject=0x178) returned 1 [0059.924] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates\\CSharp\\1033\\CodeFile.zip", nBufferLength=0x105, lpBuffer=0x31e0d4, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates\\CSharp\\1033\\CodeFile.zip", lpFilePart=0x0) returned 0x68 [0059.924] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates\\CSharp\\1033\\CodeFile.zip", nBufferLength=0x105, lpBuffer=0x31e0d4, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates\\CSharp\\1033\\CodeFile.zip", lpFilePart=0x0) returned 0x68 [0059.924] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e534) returned 1 [0059.924] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates\\CSharp\\1033\\CodeFile.zip" (normalized: "c:\\program files (x86)\\microsoft visual studio 8\\common7\\ide\\vsta\\itemtemplates\\csharp\\1033\\codefile.zip"), fInfoLevelId=0x0, lpFileInformation=0x31e5b0 | out: lpFileInformation=0x31e5b0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8c501900, ftCreationTime.dwHighDateTime=0x1c9e43c, ftLastAccessTime.dwLowDateTime=0x10f83e50, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x729a500, ftLastWriteTime.dwHighDateTime=0x1d6eb7f, nFileSizeHigh=0x0, nFileSizeLow=0x230)) returned 1 [0059.924] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e530) returned 1 [0059.924] MoveFileW (lpExistingFileName="C:\\Program Files (x86)\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates\\CSharp\\1033\\CodeFile.zip" (normalized: "c:\\program files (x86)\\microsoft visual studio 8\\common7\\ide\\vsta\\itemtemplates\\csharp\\1033\\codefile.zip"), lpNewFileName="C:\\Program Files (x86)\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates\\CSharp\\1033\\CodeFile.zip" (normalized: "c:\\program files (x86)\\microsoft visual studio 8\\common7\\ide\\vsta\\itemtemplates\\csharp\\1033\\codefile.zip")) returned 1 [0059.925] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates\\CSharp\\1033\\DataSet.zip", nBufferLength=0x105, lpBuffer=0x31dfb4, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates\\CSharp\\1033\\DataSet.zip", lpFilePart=0x0) returned 0x67 [0059.925] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e4a8) returned 1 [0059.925] CreateFileW (lpFileName="C:\\Program Files (x86)\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates\\CSharp\\1033\\DataSet.zip" (normalized: "c:\\program files (x86)\\microsoft visual studio 8\\common7\\ide\\vsta\\itemtemplates\\csharp\\1033\\dataset.zip"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x178 [0059.925] GetFileType (hFile=0x178) returned 0x1 [0059.925] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e4a4) returned 1 [0059.925] GetFileType (hFile=0x178) returned 0x1 [0059.925] GetFileSize (in: hFile=0x178, lpFileSizeHigh=0x31e5b0 | out: lpFileSizeHigh=0x31e5b0*=0x0) returned 0x499 [0059.925] ReadFile (in: hFile=0x178, lpBuffer=0x26b9810, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x31e55c, lpOverlapped=0x0 | out: lpBuffer=0x26b9810*, lpNumberOfBytesRead=0x31e55c*=0x499, lpOverlapped=0x0) returned 1 [0059.927] CloseHandle (hObject=0x178) returned 1 [0059.941] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates\\CSharp\\1033\\DataSet.zip", nBufferLength=0x105, lpBuffer=0x31dfa0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates\\CSharp\\1033\\DataSet.zip", lpFilePart=0x0) returned 0x67 [0059.941] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e494) returned 1 [0059.941] CreateFileW (lpFileName="C:\\Program Files (x86)\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates\\CSharp\\1033\\DataSet.zip" (normalized: "c:\\program files (x86)\\microsoft visual studio 8\\common7\\ide\\vsta\\itemtemplates\\csharp\\1033\\dataset.zip"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x178 [0059.942] GetFileType (hFile=0x178) returned 0x1 [0059.942] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e490) returned 1 [0059.942] GetFileType (hFile=0x178) returned 0x1 [0059.942] WriteFile (in: hFile=0x178, lpBuffer=0x2708e84*, nNumberOfBytesToWrite=0x4a0, lpNumberOfBytesWritten=0x31e524, lpOverlapped=0x0 | out: lpBuffer=0x2708e84*, lpNumberOfBytesWritten=0x31e524*=0x4a0, lpOverlapped=0x0) returned 1 [0059.943] CloseHandle (hObject=0x178) returned 1 [0059.943] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates\\CSharp\\1033\\DataSet.zip", nBufferLength=0x105, lpBuffer=0x31e0d4, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates\\CSharp\\1033\\DataSet.zip", lpFilePart=0x0) returned 0x67 [0059.943] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates\\CSharp\\1033\\DataSet.zip", nBufferLength=0x105, lpBuffer=0x31e0d4, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates\\CSharp\\1033\\DataSet.zip", lpFilePart=0x0) returned 0x67 [0059.943] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e534) returned 1 [0059.943] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates\\CSharp\\1033\\DataSet.zip" (normalized: "c:\\program files (x86)\\microsoft visual studio 8\\common7\\ide\\vsta\\itemtemplates\\csharp\\1033\\dataset.zip"), fInfoLevelId=0x0, lpFileInformation=0x31e5b0 | out: lpFileInformation=0x31e5b0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8c501900, ftCreationTime.dwHighDateTime=0x1c9e43c, ftLastAccessTime.dwLowDateTime=0x10fa9fb0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x72c0660, ftLastWriteTime.dwHighDateTime=0x1d6eb7f, nFileSizeHigh=0x0, nFileSizeLow=0x4a0)) returned 1 [0059.943] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e530) returned 1 [0059.943] MoveFileW (lpExistingFileName="C:\\Program Files (x86)\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates\\CSharp\\1033\\DataSet.zip" (normalized: "c:\\program files (x86)\\microsoft visual studio 8\\common7\\ide\\vsta\\itemtemplates\\csharp\\1033\\dataset.zip"), lpNewFileName="C:\\Program Files (x86)\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates\\CSharp\\1033\\DataSet.zip" (normalized: "c:\\program files (x86)\\microsoft visual studio 8\\common7\\ide\\vsta\\itemtemplates\\csharp\\1033\\dataset.zip")) returned 1 [0059.943] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates\\CSharp\\1033\\EmptyDatabase.zip", nBufferLength=0x105, lpBuffer=0x31dfb4, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates\\CSharp\\1033\\EmptyDatabase.zip", lpFilePart=0x0) returned 0x6d [0059.944] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e4a8) returned 1 [0059.944] CreateFileW (lpFileName="C:\\Program Files (x86)\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates\\CSharp\\1033\\EmptyDatabase.zip" (normalized: "c:\\program files (x86)\\microsoft visual studio 8\\common7\\ide\\vsta\\itemtemplates\\csharp\\1033\\emptydatabase.zip"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x178 [0059.944] GetFileType (hFile=0x178) returned 0x1 [0059.944] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e4a4) returned 1 [0059.944] GetFileType (hFile=0x178) returned 0x1 [0059.945] GetFileSize (in: hFile=0x178, lpFileSizeHigh=0x31e5b0 | out: lpFileSizeHigh=0x31e5b0*=0x0) returned 0x341 [0059.945] ReadFile (in: hFile=0x178, lpBuffer=0x270a524, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x31e55c, lpOverlapped=0x0 | out: lpBuffer=0x270a524*, lpNumberOfBytesRead=0x31e55c*=0x341, lpOverlapped=0x0) returned 1 [0059.946] CloseHandle (hObject=0x178) returned 1 [0059.959] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates\\CSharp\\1033\\EmptyDatabase.zip", nBufferLength=0x105, lpBuffer=0x31dfa0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates\\CSharp\\1033\\EmptyDatabase.zip", lpFilePart=0x0) returned 0x6d [0059.959] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e494) returned 1 [0059.960] CreateFileW (lpFileName="C:\\Program Files (x86)\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates\\CSharp\\1033\\EmptyDatabase.zip" (normalized: "c:\\program files (x86)\\microsoft visual studio 8\\common7\\ide\\vsta\\itemtemplates\\csharp\\1033\\emptydatabase.zip"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x178 [0059.960] GetFileType (hFile=0x178) returned 0x1 [0059.960] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e490) returned 1 [0059.960] GetFileType (hFile=0x178) returned 0x1 [0059.961] WriteFile (in: hFile=0x178, lpBuffer=0x2759528*, nNumberOfBytesToWrite=0x350, lpNumberOfBytesWritten=0x31e524, lpOverlapped=0x0 | out: lpBuffer=0x2759528*, lpNumberOfBytesWritten=0x31e524*=0x350, lpOverlapped=0x0) returned 1 [0059.961] CloseHandle (hObject=0x178) returned 1 [0059.961] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates\\CSharp\\1033\\EmptyDatabase.zip", nBufferLength=0x105, lpBuffer=0x31e0d4, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates\\CSharp\\1033\\EmptyDatabase.zip", lpFilePart=0x0) returned 0x6d [0059.962] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates\\CSharp\\1033\\EmptyDatabase.zip", nBufferLength=0x105, lpBuffer=0x31e0d4, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates\\CSharp\\1033\\EmptyDatabase.zip", lpFilePart=0x0) returned 0x6d [0059.962] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e534) returned 1 [0059.962] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates\\CSharp\\1033\\EmptyDatabase.zip" (normalized: "c:\\program files (x86)\\microsoft visual studio 8\\common7\\ide\\vsta\\itemtemplates\\csharp\\1033\\emptydatabase.zip"), fInfoLevelId=0x0, lpFileInformation=0x31e5b0 | out: lpFileInformation=0x31e5b0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8c501900, ftCreationTime.dwHighDateTime=0x1c9e43c, ftLastAccessTime.dwLowDateTime=0x10ff6270, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x72e67c0, ftLastWriteTime.dwHighDateTime=0x1d6eb7f, nFileSizeHigh=0x0, nFileSizeLow=0x350)) returned 1 [0059.962] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e530) returned 1 [0059.962] MoveFileW (lpExistingFileName="C:\\Program Files (x86)\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates\\CSharp\\1033\\EmptyDatabase.zip" (normalized: "c:\\program files (x86)\\microsoft visual studio 8\\common7\\ide\\vsta\\itemtemplates\\csharp\\1033\\emptydatabase.zip"), lpNewFileName="C:\\Program Files (x86)\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates\\CSharp\\1033\\EmptyDatabase.zip" (normalized: "c:\\program files (x86)\\microsoft visual studio 8\\common7\\ide\\vsta\\itemtemplates\\csharp\\1033\\emptydatabase.zip")) returned 1 [0059.962] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates\\CSharp\\1033\\Form.zip", nBufferLength=0x105, lpBuffer=0x31dfb4, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates\\CSharp\\1033\\Form.zip", lpFilePart=0x0) returned 0x64 [0059.962] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e4a8) returned 1 [0059.962] CreateFileW (lpFileName="C:\\Program Files (x86)\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates\\CSharp\\1033\\Form.zip" (normalized: "c:\\program files (x86)\\microsoft visual studio 8\\common7\\ide\\vsta\\itemtemplates\\csharp\\1033\\form.zip"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x178 [0059.963] GetFileType (hFile=0x178) returned 0x1 [0059.963] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e4a4) returned 1 [0059.963] GetFileType (hFile=0x178) returned 0x1 [0059.963] GetFileSize (in: hFile=0x178, lpFileSizeHigh=0x31e5b0 | out: lpFileSizeHigh=0x31e5b0*=0x0) returned 0x585 [0059.963] ReadFile (in: hFile=0x178, lpBuffer=0x275ae04, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x31e55c, lpOverlapped=0x0 | out: lpBuffer=0x275ae04*, lpNumberOfBytesRead=0x31e55c*=0x585, lpOverlapped=0x0) returned 1 [0059.965] CloseHandle (hObject=0x178) returned 1 [0059.978] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates\\CSharp\\1033\\Form.zip", nBufferLength=0x105, lpBuffer=0x31dfa0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates\\CSharp\\1033\\Form.zip", lpFilePart=0x0) returned 0x64 [0059.978] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e494) returned 1 [0059.978] CreateFileW (lpFileName="C:\\Program Files (x86)\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates\\CSharp\\1033\\Form.zip" (normalized: "c:\\program files (x86)\\microsoft visual studio 8\\common7\\ide\\vsta\\itemtemplates\\csharp\\1033\\form.zip"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x178 [0059.979] GetFileType (hFile=0x178) returned 0x1 [0059.979] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e490) returned 1 [0059.979] GetFileType (hFile=0x178) returned 0x1 [0059.979] WriteFile (in: hFile=0x178, lpBuffer=0x27aa924*, nNumberOfBytesToWrite=0x590, lpNumberOfBytesWritten=0x31e524, lpOverlapped=0x0 | out: lpBuffer=0x27aa924*, lpNumberOfBytesWritten=0x31e524*=0x590, lpOverlapped=0x0) returned 1 [0059.980] CloseHandle (hObject=0x178) returned 1 [0059.980] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates\\CSharp\\1033\\Form.zip", nBufferLength=0x105, lpBuffer=0x31e0d4, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates\\CSharp\\1033\\Form.zip", lpFilePart=0x0) returned 0x64 [0059.980] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates\\CSharp\\1033\\Form.zip", nBufferLength=0x105, lpBuffer=0x31e0d4, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates\\CSharp\\1033\\Form.zip", lpFilePart=0x0) returned 0x64 [0059.980] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e534) returned 1 [0059.980] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates\\CSharp\\1033\\Form.zip" (normalized: "c:\\program files (x86)\\microsoft visual studio 8\\common7\\ide\\vsta\\itemtemplates\\csharp\\1033\\form.zip"), fInfoLevelId=0x0, lpFileInformation=0x31e5b0 | out: lpFileInformation=0x31e5b0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8c501900, ftCreationTime.dwHighDateTime=0x1c9e43c, ftLastAccessTime.dwLowDateTime=0x1101c3d0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x730c920, ftLastWriteTime.dwHighDateTime=0x1d6eb7f, nFileSizeHigh=0x0, nFileSizeLow=0x590)) returned 1 [0059.981] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e530) returned 1 [0059.981] MoveFileW (lpExistingFileName="C:\\Program Files (x86)\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates\\CSharp\\1033\\Form.zip" (normalized: "c:\\program files (x86)\\microsoft visual studio 8\\common7\\ide\\vsta\\itemtemplates\\csharp\\1033\\form.zip"), lpNewFileName="C:\\Program Files (x86)\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates\\CSharp\\1033\\Form.zip" (normalized: "c:\\program files (x86)\\microsoft visual studio 8\\common7\\ide\\vsta\\itemtemplates\\csharp\\1033\\form.zip")) returned 1 [0059.981] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates\\CSharp\\1033\\Interface.zip", nBufferLength=0x105, lpBuffer=0x31dfb4, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates\\CSharp\\1033\\Interface.zip", lpFilePart=0x0) returned 0x69 [0059.981] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e4a8) returned 1 [0059.981] CreateFileW (lpFileName="C:\\Program Files (x86)\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates\\CSharp\\1033\\Interface.zip" (normalized: "c:\\program files (x86)\\microsoft visual studio 8\\common7\\ide\\vsta\\itemtemplates\\csharp\\1033\\interface.zip"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x178 [0059.981] GetFileType (hFile=0x178) returned 0x1 [0059.981] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e4a4) returned 1 [0059.981] GetFileType (hFile=0x178) returned 0x1 [0059.981] GetFileSize (in: hFile=0x178, lpFileSizeHigh=0x31e5b0 | out: lpFileSizeHigh=0x31e5b0*=0x0) returned 0x303 [0059.981] ReadFile (in: hFile=0x178, lpBuffer=0x27abf6c, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x31e55c, lpOverlapped=0x0 | out: lpBuffer=0x27abf6c*, lpNumberOfBytesRead=0x31e55c*=0x303, lpOverlapped=0x0) returned 1 [0059.983] CloseHandle (hObject=0x178) returned 1 [0060.002] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates\\CSharp\\1033\\Interface.zip", nBufferLength=0x105, lpBuffer=0x31dfa0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates\\CSharp\\1033\\Interface.zip", lpFilePart=0x0) returned 0x69 [0060.002] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e494) returned 1 [0060.002] CreateFileW (lpFileName="C:\\Program Files (x86)\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates\\CSharp\\1033\\Interface.zip" (normalized: "c:\\program files (x86)\\microsoft visual studio 8\\common7\\ide\\vsta\\itemtemplates\\csharp\\1033\\interface.zip"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x178 [0060.003] GetFileType (hFile=0x178) returned 0x1 [0060.003] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e490) returned 1 [0060.003] GetFileType (hFile=0x178) returned 0x1 [0060.003] WriteFile (in: hFile=0x178, lpBuffer=0x27fae20*, nNumberOfBytesToWrite=0x310, lpNumberOfBytesWritten=0x31e524, lpOverlapped=0x0 | out: lpBuffer=0x27fae20*, lpNumberOfBytesWritten=0x31e524*=0x310, lpOverlapped=0x0) returned 1 [0060.005] CloseHandle (hObject=0x178) returned 1 [0060.005] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates\\CSharp\\1033\\Interface.zip", nBufferLength=0x105, lpBuffer=0x31e0d4, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates\\CSharp\\1033\\Interface.zip", lpFilePart=0x0) returned 0x69 [0060.005] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates\\CSharp\\1033\\Interface.zip", nBufferLength=0x105, lpBuffer=0x31e0d4, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates\\CSharp\\1033\\Interface.zip", lpFilePart=0x0) returned 0x69 [0060.005] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e534) returned 1 [0060.005] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates\\CSharp\\1033\\Interface.zip" (normalized: "c:\\program files (x86)\\microsoft visual studio 8\\common7\\ide\\vsta\\itemtemplates\\csharp\\1033\\interface.zip"), fInfoLevelId=0x0, lpFileInformation=0x31e5b0 | out: lpFileInformation=0x31e5b0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8c501900, ftCreationTime.dwHighDateTime=0x1c9e43c, ftLastAccessTime.dwLowDateTime=0x1101c3d0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x7358be0, ftLastWriteTime.dwHighDateTime=0x1d6eb7f, nFileSizeHigh=0x0, nFileSizeLow=0x310)) returned 1 [0060.005] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e530) returned 1 [0060.005] MoveFileW (lpExistingFileName="C:\\Program Files (x86)\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates\\CSharp\\1033\\Interface.zip" (normalized: "c:\\program files (x86)\\microsoft visual studio 8\\common7\\ide\\vsta\\itemtemplates\\csharp\\1033\\interface.zip"), lpNewFileName="C:\\Program Files (x86)\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates\\CSharp\\1033\\Interface.zip" (normalized: "c:\\program files (x86)\\microsoft visual studio 8\\common7\\ide\\vsta\\itemtemplates\\csharp\\1033\\interface.zip")) returned 1 [0060.006] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates\\CSharp\\1033\\MDIParent.zip", nBufferLength=0x105, lpBuffer=0x31dfb4, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates\\CSharp\\1033\\MDIParent.zip", lpFilePart=0x0) returned 0x69 [0060.006] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e4a8) returned 1 [0060.006] CreateFileW (lpFileName="C:\\Program Files (x86)\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates\\CSharp\\1033\\MDIParent.zip" (normalized: "c:\\program files (x86)\\microsoft visual studio 8\\common7\\ide\\vsta\\itemtemplates\\csharp\\1033\\mdiparent.zip"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x178 [0060.007] GetFileType (hFile=0x178) returned 0x1 [0060.007] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e4a4) returned 1 [0060.007] GetFileType (hFile=0x178) returned 0x1 [0060.008] GetFileSize (in: hFile=0x178, lpFileSizeHigh=0x31e5b0 | out: lpFileSizeHigh=0x31e5b0*=0x0) returned 0x3719 [0060.008] ReadFile (in: hFile=0x178, lpBuffer=0x27fc168, nNumberOfBytesToRead=0x3719, lpNumberOfBytesRead=0x31e55c, lpOverlapped=0x0 | out: lpBuffer=0x27fc168*, lpNumberOfBytesRead=0x31e55c*=0x3719, lpOverlapped=0x0) returned 1 [0060.010] CloseHandle (hObject=0x178) returned 1 [0060.031] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates\\CSharp\\1033\\MDIParent.zip", nBufferLength=0x105, lpBuffer=0x31dfa0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates\\CSharp\\1033\\MDIParent.zip", lpFilePart=0x0) returned 0x69 [0060.031] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e494) returned 1 [0060.031] CreateFileW (lpFileName="C:\\Program Files (x86)\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates\\CSharp\\1033\\MDIParent.zip" (normalized: "c:\\program files (x86)\\microsoft visual studio 8\\common7\\ide\\vsta\\itemtemplates\\csharp\\1033\\mdiparent.zip"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x178 [0060.032] GetFileType (hFile=0x178) returned 0x1 [0060.032] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e490) returned 1 [0060.032] GetFileType (hFile=0x178) returned 0x1 [0060.032] WriteFile (in: hFile=0x178, lpBuffer=0x265e47c*, nNumberOfBytesToWrite=0x3720, lpNumberOfBytesWritten=0x31e550, lpOverlapped=0x0 | out: lpBuffer=0x265e47c*, lpNumberOfBytesWritten=0x31e550*=0x3720, lpOverlapped=0x0) returned 1 [0060.033] CloseHandle (hObject=0x178) returned 1 [0060.033] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates\\CSharp\\1033\\MDIParent.zip", nBufferLength=0x105, lpBuffer=0x31e0d4, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates\\CSharp\\1033\\MDIParent.zip", lpFilePart=0x0) returned 0x69 [0060.033] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates\\CSharp\\1033\\MDIParent.zip", nBufferLength=0x105, lpBuffer=0x31e0d4, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates\\CSharp\\1033\\MDIParent.zip", lpFilePart=0x0) returned 0x69 [0060.033] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e534) returned 1 [0060.033] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates\\CSharp\\1033\\MDIParent.zip" (normalized: "c:\\program files (x86)\\microsoft visual studio 8\\common7\\ide\\vsta\\itemtemplates\\csharp\\1033\\mdiparent.zip"), fInfoLevelId=0x0, lpFileInformation=0x31e5b0 | out: lpFileInformation=0x31e5b0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8c501900, ftCreationTime.dwHighDateTime=0x1c9e43c, ftLastAccessTime.dwLowDateTime=0x1101c3d0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x73a4ea0, ftLastWriteTime.dwHighDateTime=0x1d6eb7f, nFileSizeHigh=0x0, nFileSizeLow=0x3720)) returned 1 [0060.033] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e530) returned 1 [0060.033] MoveFileW (lpExistingFileName="C:\\Program Files (x86)\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates\\CSharp\\1033\\MDIParent.zip" (normalized: "c:\\program files (x86)\\microsoft visual studio 8\\common7\\ide\\vsta\\itemtemplates\\csharp\\1033\\mdiparent.zip"), lpNewFileName="C:\\Program Files (x86)\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates\\CSharp\\1033\\MDIParent.zip" (normalized: "c:\\program files (x86)\\microsoft visual studio 8\\common7\\ide\\vsta\\itemtemplates\\csharp\\1033\\mdiparent.zip")) returned 1 [0060.034] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates\\CSharp\\1033\\Resource.zip", nBufferLength=0x105, lpBuffer=0x31dfb4, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates\\CSharp\\1033\\Resource.zip", lpFilePart=0x0) returned 0x68 [0060.034] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e4a8) returned 1 [0060.034] CreateFileW (lpFileName="C:\\Program Files (x86)\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates\\CSharp\\1033\\Resource.zip" (normalized: "c:\\program files (x86)\\microsoft visual studio 8\\common7\\ide\\vsta\\itemtemplates\\csharp\\1033\\resource.zip"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x178 [0060.034] GetFileType (hFile=0x178) returned 0x1 [0060.034] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e4a4) returned 1 [0060.034] GetFileType (hFile=0x178) returned 0x1 [0060.034] GetFileSize (in: hFile=0x178, lpFileSizeHigh=0x31e5b0 | out: lpFileSizeHigh=0x31e5b0*=0x0) returned 0x83f [0060.034] ReadFile (in: hFile=0x178, lpBuffer=0x2662894, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x31e55c, lpOverlapped=0x0 | out: lpBuffer=0x2662894*, lpNumberOfBytesRead=0x31e55c*=0x83f, lpOverlapped=0x0) returned 1 [0060.036] CloseHandle (hObject=0x178) returned 1 [0060.049] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates\\CSharp\\1033\\Resource.zip", nBufferLength=0x105, lpBuffer=0x31dfa0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates\\CSharp\\1033\\Resource.zip", lpFilePart=0x0) returned 0x68 [0060.049] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e494) returned 1 [0060.050] CreateFileW (lpFileName="C:\\Program Files (x86)\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates\\CSharp\\1033\\Resource.zip" (normalized: "c:\\program files (x86)\\microsoft visual studio 8\\common7\\ide\\vsta\\itemtemplates\\csharp\\1033\\resource.zip"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x178 [0060.050] GetFileType (hFile=0x178) returned 0x1 [0060.050] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e490) returned 1 [0060.050] GetFileType (hFile=0x178) returned 0x1 [0060.051] WriteFile (in: hFile=0x178, lpBuffer=0x26b3288*, nNumberOfBytesToWrite=0x840, lpNumberOfBytesWritten=0x31e524, lpOverlapped=0x0 | out: lpBuffer=0x26b3288*, lpNumberOfBytesWritten=0x31e524*=0x840, lpOverlapped=0x0) returned 1 [0060.051] CloseHandle (hObject=0x178) returned 1 [0060.051] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates\\CSharp\\1033\\Resource.zip", nBufferLength=0x105, lpBuffer=0x31e0d4, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates\\CSharp\\1033\\Resource.zip", lpFilePart=0x0) returned 0x68 [0060.051] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates\\CSharp\\1033\\Resource.zip", nBufferLength=0x105, lpBuffer=0x31e0d4, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates\\CSharp\\1033\\Resource.zip", lpFilePart=0x0) returned 0x68 [0060.052] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e534) returned 1 [0060.052] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates\\CSharp\\1033\\Resource.zip" (normalized: "c:\\program files (x86)\\microsoft visual studio 8\\common7\\ide\\vsta\\itemtemplates\\csharp\\1033\\resource.zip"), fInfoLevelId=0x0, lpFileInformation=0x31e5b0 | out: lpFileInformation=0x31e5b0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8c501900, ftCreationTime.dwHighDateTime=0x1c9e43c, ftLastAccessTime.dwLowDateTime=0x11100c10, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x73cb000, ftLastWriteTime.dwHighDateTime=0x1d6eb7f, nFileSizeHigh=0x0, nFileSizeLow=0x840)) returned 1 [0060.052] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e530) returned 1 [0060.052] MoveFileW (lpExistingFileName="C:\\Program Files (x86)\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates\\CSharp\\1033\\Resource.zip" (normalized: "c:\\program files (x86)\\microsoft visual studio 8\\common7\\ide\\vsta\\itemtemplates\\csharp\\1033\\resource.zip"), lpNewFileName="C:\\Program Files (x86)\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates\\CSharp\\1033\\Resource.zip" (normalized: "c:\\program files (x86)\\microsoft visual studio 8\\common7\\ide\\vsta\\itemtemplates\\csharp\\1033\\resource.zip")) returned 1 [0060.052] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates\\CSharp\\1033\\ResourceInternal.zip", nBufferLength=0x105, lpBuffer=0x31dfb4, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates\\CSharp\\1033\\ResourceInternal.zip", lpFilePart=0x0) returned 0x70 [0060.052] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e4a8) returned 1 [0060.052] CreateFileW (lpFileName="C:\\Program Files (x86)\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates\\CSharp\\1033\\ResourceInternal.zip" (normalized: "c:\\program files (x86)\\microsoft visual studio 8\\common7\\ide\\vsta\\itemtemplates\\csharp\\1033\\resourceinternal.zip"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x178 [0060.053] GetFileType (hFile=0x178) returned 0x1 [0060.053] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e4a4) returned 1 [0060.053] GetFileType (hFile=0x178) returned 0x1 [0060.053] GetFileSize (in: hFile=0x178, lpFileSizeHigh=0x31e5b0 | out: lpFileSizeHigh=0x31e5b0*=0x0) returned 0x85a [0060.053] ReadFile (in: hFile=0x178, lpBuffer=0x26b4e58, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x31e55c, lpOverlapped=0x0 | out: lpBuffer=0x26b4e58*, lpNumberOfBytesRead=0x31e55c*=0x85a, lpOverlapped=0x0) returned 1 [0060.055] CloseHandle (hObject=0x178) returned 1 [0060.068] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates\\CSharp\\1033\\ResourceInternal.zip", nBufferLength=0x105, lpBuffer=0x31dfa0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates\\CSharp\\1033\\ResourceInternal.zip", lpFilePart=0x0) returned 0x70 [0060.068] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e494) returned 1 [0060.069] CreateFileW (lpFileName="C:\\Program Files (x86)\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates\\CSharp\\1033\\ResourceInternal.zip" (normalized: "c:\\program files (x86)\\microsoft visual studio 8\\common7\\ide\\vsta\\itemtemplates\\csharp\\1033\\resourceinternal.zip"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x178 [0060.069] GetFileType (hFile=0x178) returned 0x1 [0060.069] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e490) returned 1 [0060.070] GetFileType (hFile=0x178) returned 0x1 [0060.070] WriteFile (in: hFile=0x178, lpBuffer=0x27057b4*, nNumberOfBytesToWrite=0x860, lpNumberOfBytesWritten=0x31e524, lpOverlapped=0x0 | out: lpBuffer=0x27057b4*, lpNumberOfBytesWritten=0x31e524*=0x860, lpOverlapped=0x0) returned 1 [0060.071] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates\\CSharp\\1033\\ResourceInternal.zip", nBufferLength=0x105, lpBuffer=0x31e0d4, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates\\CSharp\\1033\\ResourceInternal.zip", lpFilePart=0x0) returned 0x70 [0060.071] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates\\CSharp\\1033\\ResourceInternal.zip", nBufferLength=0x105, lpBuffer=0x31e0d4, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates\\CSharp\\1033\\ResourceInternal.zip", lpFilePart=0x0) returned 0x70 [0060.072] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e534) returned 1 [0060.072] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates\\CSharp\\1033\\ResourceInternal.zip" (normalized: "c:\\program files (x86)\\microsoft visual studio 8\\common7\\ide\\vsta\\itemtemplates\\csharp\\1033\\resourceinternal.zip"), fInfoLevelId=0x0, lpFileInformation=0x31e5b0 | out: lpFileInformation=0x31e5b0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8c501900, ftCreationTime.dwHighDateTime=0x1c9e43c, ftLastAccessTime.dwLowDateTime=0x11100c10, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x73f1160, ftLastWriteTime.dwHighDateTime=0x1d6eb7f, nFileSizeHigh=0x0, nFileSizeLow=0x860)) returned 1 [0060.072] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e530) returned 1 [0060.072] MoveFileW (lpExistingFileName="C:\\Program Files (x86)\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates\\CSharp\\1033\\ResourceInternal.zip" (normalized: "c:\\program files (x86)\\microsoft visual studio 8\\common7\\ide\\vsta\\itemtemplates\\csharp\\1033\\resourceinternal.zip"), lpNewFileName="C:\\Program Files (x86)\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates\\CSharp\\1033\\ResourceInternal.zip" (normalized: "c:\\program files (x86)\\microsoft visual studio 8\\common7\\ide\\vsta\\itemtemplates\\csharp\\1033\\resourceinternal.zip")) returned 1 [0060.072] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates\\CSharp\\1033\\Settings.zip", nBufferLength=0x105, lpBuffer=0x31dfb4, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates\\CSharp\\1033\\Settings.zip", lpFilePart=0x0) returned 0x68 [0060.072] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e4a8) returned 1 [0060.072] CreateFileW (lpFileName="C:\\Program Files (x86)\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates\\CSharp\\1033\\Settings.zip" (normalized: "c:\\program files (x86)\\microsoft visual studio 8\\common7\\ide\\vsta\\itemtemplates\\csharp\\1033\\settings.zip"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x178 [0060.072] GetFileType (hFile=0x178) returned 0x1 [0060.072] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e4a4) returned 1 [0060.072] GetFileType (hFile=0x178) returned 0x1 [0060.073] GetFileSize (in: hFile=0x178, lpFileSizeHigh=0x31e5b0 | out: lpFileSizeHigh=0x31e5b0*=0x0) returned 0x3b8 [0060.073] ReadFile (in: hFile=0x178, lpBuffer=0x2706ee0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x31e55c, lpOverlapped=0x0 | out: lpBuffer=0x2706ee0*, lpNumberOfBytesRead=0x31e55c*=0x3b8, lpOverlapped=0x0) returned 1 [0060.087] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates\\CSharp\\1033\\Settings.zip", nBufferLength=0x105, lpBuffer=0x31dfa0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates\\CSharp\\1033\\Settings.zip", lpFilePart=0x0) returned 0x68 [0060.087] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e494) returned 1 [0060.087] CreateFileW (lpFileName="C:\\Program Files (x86)\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates\\CSharp\\1033\\Settings.zip" (normalized: "c:\\program files (x86)\\microsoft visual studio 8\\common7\\ide\\vsta\\itemtemplates\\csharp\\1033\\settings.zip"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x178 [0060.088] GetFileType (hFile=0x178) returned 0x1 [0060.088] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e490) returned 1 [0060.088] GetFileType (hFile=0x178) returned 0x1 [0060.089] WriteFile (in: hFile=0x178, lpBuffer=0x27560fc*, nNumberOfBytesToWrite=0x3c0, lpNumberOfBytesWritten=0x31e524, lpOverlapped=0x0 | out: lpBuffer=0x27560fc*, lpNumberOfBytesWritten=0x31e524*=0x3c0, lpOverlapped=0x0) returned 1 [0060.089] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates\\CSharp\\1033\\Settings.zip", nBufferLength=0x105, lpBuffer=0x31e0d4, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates\\CSharp\\1033\\Settings.zip", lpFilePart=0x0) returned 0x68 [0060.090] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates\\CSharp\\1033\\Settings.zip", nBufferLength=0x105, lpBuffer=0x31e0d4, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates\\CSharp\\1033\\Settings.zip", lpFilePart=0x0) returned 0x68 [0060.090] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e534) returned 1 [0060.090] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates\\CSharp\\1033\\Settings.zip" (normalized: "c:\\program files (x86)\\microsoft visual studio 8\\common7\\ide\\vsta\\itemtemplates\\csharp\\1033\\settings.zip"), fInfoLevelId=0x0, lpFileInformation=0x31e5b0 | out: lpFileInformation=0x31e5b0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8c501900, ftCreationTime.dwHighDateTime=0x1c9e43c, ftLastAccessTime.dwLowDateTime=0x11100c10, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x74172c0, ftLastWriteTime.dwHighDateTime=0x1d6eb7f, nFileSizeHigh=0x0, nFileSizeLow=0x3c0)) returned 1 [0060.090] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e530) returned 1 [0060.090] MoveFileW (lpExistingFileName="C:\\Program Files (x86)\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates\\CSharp\\1033\\Settings.zip" (normalized: "c:\\program files (x86)\\microsoft visual studio 8\\common7\\ide\\vsta\\itemtemplates\\csharp\\1033\\settings.zip"), lpNewFileName="C:\\Program Files (x86)\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates\\CSharp\\1033\\Settings.zip" (normalized: "c:\\program files (x86)\\microsoft visual studio 8\\common7\\ide\\vsta\\itemtemplates\\csharp\\1033\\settings.zip")) returned 1 [0060.090] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates\\CSharp\\1033\\SettingsInternal.zip", nBufferLength=0x105, lpBuffer=0x31dfb4, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates\\CSharp\\1033\\SettingsInternal.zip", lpFilePart=0x0) returned 0x70 [0060.090] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e4a8) returned 1 [0060.090] CreateFileW (lpFileName="C:\\Program Files (x86)\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates\\CSharp\\1033\\SettingsInternal.zip" (normalized: "c:\\program files (x86)\\microsoft visual studio 8\\common7\\ide\\vsta\\itemtemplates\\csharp\\1033\\settingsinternal.zip"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x178 [0060.090] GetFileType (hFile=0x178) returned 0x1 [0060.091] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e4a4) returned 1 [0060.091] GetFileType (hFile=0x178) returned 0x1 [0060.091] GetFileSize (in: hFile=0x178, lpFileSizeHigh=0x31e5b0 | out: lpFileSizeHigh=0x31e5b0*=0x0) returned 0x3d4 [0060.091] ReadFile (in: hFile=0x178, lpBuffer=0x2757844, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x31e55c, lpOverlapped=0x0 | out: lpBuffer=0x2757844*, lpNumberOfBytesRead=0x31e55c*=0x3d4, lpOverlapped=0x0) returned 1 [0060.106] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates\\CSharp\\1033\\SettingsInternal.zip", nBufferLength=0x105, lpBuffer=0x31dfa0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates\\CSharp\\1033\\SettingsInternal.zip", lpFilePart=0x0) returned 0x70 [0060.106] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e494) returned 1 [0060.106] CreateFileW (lpFileName="C:\\Program Files (x86)\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates\\CSharp\\1033\\SettingsInternal.zip" (normalized: "c:\\program files (x86)\\microsoft visual studio 8\\common7\\ide\\vsta\\itemtemplates\\csharp\\1033\\settingsinternal.zip"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x178 [0060.106] GetFileType (hFile=0x178) returned 0x1 [0060.107] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e490) returned 1 [0060.107] GetFileType (hFile=0x178) returned 0x1 [0060.107] WriteFile (in: hFile=0x178, lpBuffer=0x27a6b24*, nNumberOfBytesToWrite=0x3e0, lpNumberOfBytesWritten=0x31e524, lpOverlapped=0x0 | out: lpBuffer=0x27a6b24*, lpNumberOfBytesWritten=0x31e524*=0x3e0, lpOverlapped=0x0) returned 1 [0060.108] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates\\CSharp\\1033\\SettingsInternal.zip", nBufferLength=0x105, lpBuffer=0x31e0d4, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates\\CSharp\\1033\\SettingsInternal.zip", lpFilePart=0x0) returned 0x70 [0060.108] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates\\CSharp\\1033\\SettingsInternal.zip", nBufferLength=0x105, lpBuffer=0x31e0d4, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates\\CSharp\\1033\\SettingsInternal.zip", lpFilePart=0x0) returned 0x70 [0060.108] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e534) returned 1 [0060.108] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates\\CSharp\\1033\\SettingsInternal.zip" (normalized: "c:\\program files (x86)\\microsoft visual studio 8\\common7\\ide\\vsta\\itemtemplates\\csharp\\1033\\settingsinternal.zip"), fInfoLevelId=0x0, lpFileInformation=0x31e5b0 | out: lpFileInformation=0x31e5b0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8c501900, ftCreationTime.dwHighDateTime=0x1c9e43c, ftLastAccessTime.dwLowDateTime=0x11100c10, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x7463580, ftLastWriteTime.dwHighDateTime=0x1d6eb7f, nFileSizeHigh=0x0, nFileSizeLow=0x3e0)) returned 1 [0060.108] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e530) returned 1 [0060.108] MoveFileW (lpExistingFileName="C:\\Program Files (x86)\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates\\CSharp\\1033\\SettingsInternal.zip" (normalized: "c:\\program files (x86)\\microsoft visual studio 8\\common7\\ide\\vsta\\itemtemplates\\csharp\\1033\\settingsinternal.zip"), lpNewFileName="C:\\Program Files (x86)\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates\\CSharp\\1033\\SettingsInternal.zip" (normalized: "c:\\program files (x86)\\microsoft visual studio 8\\common7\\ide\\vsta\\itemtemplates\\csharp\\1033\\settingsinternal.zip")) returned 1 [0060.108] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates\\CSharp\\1033\\TextFile.zip", nBufferLength=0x105, lpBuffer=0x31dfb4, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates\\CSharp\\1033\\TextFile.zip", lpFilePart=0x0) returned 0x68 [0060.108] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e4a8) returned 1 [0060.108] CreateFileW (lpFileName="C:\\Program Files (x86)\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates\\CSharp\\1033\\TextFile.zip" (normalized: "c:\\program files (x86)\\microsoft visual studio 8\\common7\\ide\\vsta\\itemtemplates\\csharp\\1033\\textfile.zip"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x178 [0060.110] GetFileType (hFile=0x178) returned 0x1 [0060.110] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e4a4) returned 1 [0060.110] GetFileType (hFile=0x178) returned 0x1 [0060.110] GetFileSize (in: hFile=0x178, lpFileSizeHigh=0x31e5b0 | out: lpFileSizeHigh=0x31e5b0*=0x0) returned 0x226 [0060.110] ReadFile (in: hFile=0x178, lpBuffer=0x27a80c0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x31e55c, lpOverlapped=0x0 | out: lpBuffer=0x27a80c0*, lpNumberOfBytesRead=0x31e55c*=0x226, lpOverlapped=0x0) returned 1 [0060.124] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates\\CSharp\\1033\\TextFile.zip", nBufferLength=0x105, lpBuffer=0x31dfa0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates\\CSharp\\1033\\TextFile.zip", lpFilePart=0x0) returned 0x68 [0060.124] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e494) returned 1 [0060.124] CreateFileW (lpFileName="C:\\Program Files (x86)\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates\\CSharp\\1033\\TextFile.zip" (normalized: "c:\\program files (x86)\\microsoft visual studio 8\\common7\\ide\\vsta\\itemtemplates\\csharp\\1033\\textfile.zip"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x178 [0060.124] GetFileType (hFile=0x178) returned 0x1 [0060.124] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e490) returned 1 [0060.125] GetFileType (hFile=0x178) returned 0x1 [0060.125] WriteFile (in: hFile=0x178, lpBuffer=0x27f6b10*, nNumberOfBytesToWrite=0x230, lpNumberOfBytesWritten=0x31e524, lpOverlapped=0x0 | out: lpBuffer=0x27f6b10*, lpNumberOfBytesWritten=0x31e524*=0x230, lpOverlapped=0x0) returned 1 [0060.125] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates\\CSharp\\1033\\TextFile.zip", nBufferLength=0x105, lpBuffer=0x31e0d4, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates\\CSharp\\1033\\TextFile.zip", lpFilePart=0x0) returned 0x68 [0060.125] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates\\CSharp\\1033\\TextFile.zip", nBufferLength=0x105, lpBuffer=0x31e0d4, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates\\CSharp\\1033\\TextFile.zip", lpFilePart=0x0) returned 0x68 [0060.126] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e534) returned 1 [0060.126] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates\\CSharp\\1033\\TextFile.zip" (normalized: "c:\\program files (x86)\\microsoft visual studio 8\\common7\\ide\\vsta\\itemtemplates\\csharp\\1033\\textfile.zip"), fInfoLevelId=0x0, lpFileInformation=0x31e5b0 | out: lpFileInformation=0x31e5b0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8c501900, ftCreationTime.dwHighDateTime=0x1c9e43c, ftLastAccessTime.dwLowDateTime=0x111e5450, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x74896e0, ftLastWriteTime.dwHighDateTime=0x1d6eb7f, nFileSizeHigh=0x0, nFileSizeLow=0x230)) returned 1 [0060.126] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e530) returned 1 [0060.126] MoveFileW (lpExistingFileName="C:\\Program Files (x86)\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates\\CSharp\\1033\\TextFile.zip" (normalized: "c:\\program files (x86)\\microsoft visual studio 8\\common7\\ide\\vsta\\itemtemplates\\csharp\\1033\\textfile.zip"), lpNewFileName="C:\\Program Files (x86)\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates\\CSharp\\1033\\TextFile.zip" (normalized: "c:\\program files (x86)\\microsoft visual studio 8\\common7\\ide\\vsta\\itemtemplates\\csharp\\1033\\textfile.zip")) returned 1 [0060.126] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates\\CSharp\\1033\\UserControl.zip", nBufferLength=0x105, lpBuffer=0x31dfb4, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates\\CSharp\\1033\\UserControl.zip", lpFilePart=0x0) returned 0x6b [0060.126] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e4a8) returned 1 [0060.126] CreateFileW (lpFileName="C:\\Program Files (x86)\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates\\CSharp\\1033\\UserControl.zip" (normalized: "c:\\program files (x86)\\microsoft visual studio 8\\common7\\ide\\vsta\\itemtemplates\\csharp\\1033\\usercontrol.zip"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x178 [0060.127] GetFileType (hFile=0x178) returned 0x1 [0060.127] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e4a4) returned 1 [0060.127] GetFileType (hFile=0x178) returned 0x1 [0060.127] GetFileSize (in: hFile=0x178, lpFileSizeHigh=0x31e5b0 | out: lpFileSizeHigh=0x31e5b0*=0x0) returned 0x59c [0060.127] ReadFile (in: hFile=0x178, lpBuffer=0x27f8408, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x31e55c, lpOverlapped=0x0 | out: lpBuffer=0x27f8408*, lpNumberOfBytesRead=0x31e55c*=0x59c, lpOverlapped=0x0) returned 1 [0060.142] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates\\CSharp\\1033\\UserControl.zip", nBufferLength=0x105, lpBuffer=0x31dfa0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates\\CSharp\\1033\\UserControl.zip", lpFilePart=0x0) returned 0x6b [0060.142] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e494) returned 1 [0060.142] CreateFileW (lpFileName="C:\\Program Files (x86)\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates\\CSharp\\1033\\UserControl.zip" (normalized: "c:\\program files (x86)\\microsoft visual studio 8\\common7\\ide\\vsta\\itemtemplates\\csharp\\1033\\usercontrol.zip"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x178 [0060.143] GetFileType (hFile=0x178) returned 0x1 [0060.143] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e490) returned 1 [0060.143] GetFileType (hFile=0x178) returned 0x1 [0060.143] WriteFile (in: hFile=0x178, lpBuffer=0x2847f88*, nNumberOfBytesToWrite=0x5a0, lpNumberOfBytesWritten=0x31e524, lpOverlapped=0x0 | out: lpBuffer=0x2847f88*, lpNumberOfBytesWritten=0x31e524*=0x5a0, lpOverlapped=0x0) returned 1 [0060.144] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates\\CSharp\\1033\\UserControl.zip", nBufferLength=0x105, lpBuffer=0x31e0d4, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates\\CSharp\\1033\\UserControl.zip", lpFilePart=0x0) returned 0x6b [0060.144] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates\\CSharp\\1033\\UserControl.zip", nBufferLength=0x105, lpBuffer=0x31e0d4, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates\\CSharp\\1033\\UserControl.zip", lpFilePart=0x0) returned 0x6b [0060.144] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e534) returned 1 [0060.144] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates\\CSharp\\1033\\UserControl.zip" (normalized: "c:\\program files (x86)\\microsoft visual studio 8\\common7\\ide\\vsta\\itemtemplates\\csharp\\1033\\usercontrol.zip"), fInfoLevelId=0x0, lpFileInformation=0x31e5b0 | out: lpFileInformation=0x31e5b0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8c501900, ftCreationTime.dwHighDateTime=0x1c9e43c, ftLastAccessTime.dwLowDateTime=0x1120b5b0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x74af840, ftLastWriteTime.dwHighDateTime=0x1d6eb7f, nFileSizeHigh=0x0, nFileSizeLow=0x5a0)) returned 1 [0060.144] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e530) returned 1 [0060.144] MoveFileW (lpExistingFileName="C:\\Program Files (x86)\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates\\CSharp\\1033\\UserControl.zip" (normalized: "c:\\program files (x86)\\microsoft visual studio 8\\common7\\ide\\vsta\\itemtemplates\\csharp\\1033\\usercontrol.zip"), lpNewFileName="C:\\Program Files (x86)\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates\\CSharp\\1033\\UserControl.zip" (normalized: "c:\\program files (x86)\\microsoft visual studio 8\\common7\\ide\\vsta\\itemtemplates\\csharp\\1033\\usercontrol.zip")) returned 1 [0060.144] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates\\CSharp\\1033\\Visualizer.zip", nBufferLength=0x105, lpBuffer=0x31dfb4, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates\\CSharp\\1033\\Visualizer.zip", lpFilePart=0x0) returned 0x6a [0060.144] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e4a8) returned 1 [0060.144] CreateFileW (lpFileName="C:\\Program Files (x86)\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates\\CSharp\\1033\\Visualizer.zip" (normalized: "c:\\program files (x86)\\microsoft visual studio 8\\common7\\ide\\vsta\\itemtemplates\\csharp\\1033\\visualizer.zip"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x178 [0060.145] GetFileType (hFile=0x178) returned 0x1 [0060.145] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e4a4) returned 1 [0060.145] GetFileType (hFile=0x178) returned 0x1 [0060.145] GetFileSize (in: hFile=0x178, lpFileSizeHigh=0x31e5b0 | out: lpFileSizeHigh=0x31e5b0*=0x0) returned 0x558 [0060.145] ReadFile (in: hFile=0x178, lpBuffer=0x2849844, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x31e55c, lpOverlapped=0x0 | out: lpBuffer=0x2849844*, lpNumberOfBytesRead=0x31e55c*=0x558, lpOverlapped=0x0) returned 1 [0060.191] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates\\CSharp\\1033\\Visualizer.zip", nBufferLength=0x105, lpBuffer=0x31dfa0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates\\CSharp\\1033\\Visualizer.zip", lpFilePart=0x0) returned 0x6a [0060.191] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e494) returned 1 [0060.191] CreateFileW (lpFileName="C:\\Program Files (x86)\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates\\CSharp\\1033\\Visualizer.zip" (normalized: "c:\\program files (x86)\\microsoft visual studio 8\\common7\\ide\\vsta\\itemtemplates\\csharp\\1033\\visualizer.zip"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x178 [0060.192] GetFileType (hFile=0x178) returned 0x1 [0060.192] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e490) returned 1 [0060.192] GetFileType (hFile=0x178) returned 0x1 [0060.192] WriteFile (in: hFile=0x178, lpBuffer=0x26a04f8*, nNumberOfBytesToWrite=0x560, lpNumberOfBytesWritten=0x31e524, lpOverlapped=0x0 | out: lpBuffer=0x26a04f8*, lpNumberOfBytesWritten=0x31e524*=0x560, lpOverlapped=0x0) returned 1 [0060.193] CloseHandle (hObject=0x178) returned 1 [0060.193] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates\\CSharp\\1033\\Visualizer.zip", nBufferLength=0x105, lpBuffer=0x31e0d4, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates\\CSharp\\1033\\Visualizer.zip", lpFilePart=0x0) returned 0x6a [0060.193] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates\\CSharp\\1033\\Visualizer.zip", nBufferLength=0x105, lpBuffer=0x31e0d4, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates\\CSharp\\1033\\Visualizer.zip", lpFilePart=0x0) returned 0x6a [0060.193] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e534) returned 1 [0060.193] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates\\CSharp\\1033\\Visualizer.zip" (normalized: "c:\\program files (x86)\\microsoft visual studio 8\\common7\\ide\\vsta\\itemtemplates\\csharp\\1033\\visualizer.zip"), fInfoLevelId=0x0, lpFileInformation=0x31e5b0 | out: lpFileInformation=0x31e5b0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8c501900, ftCreationTime.dwHighDateTime=0x1c9e43c, ftLastAccessTime.dwLowDateTime=0x1120b5b0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x7521c60, ftLastWriteTime.dwHighDateTime=0x1d6eb7f, nFileSizeHigh=0x0, nFileSizeLow=0x560)) returned 1 [0060.194] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e530) returned 1 [0060.194] MoveFileW (lpExistingFileName="C:\\Program Files (x86)\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates\\CSharp\\1033\\Visualizer.zip" (normalized: "c:\\program files (x86)\\microsoft visual studio 8\\common7\\ide\\vsta\\itemtemplates\\csharp\\1033\\visualizer.zip"), lpNewFileName="C:\\Program Files (x86)\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates\\CSharp\\1033\\Visualizer.zip" (normalized: "c:\\program files (x86)\\microsoft visual studio 8\\common7\\ide\\vsta\\itemtemplates\\csharp\\1033\\visualizer.zip")) returned 1 [0060.194] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates\\CSharp\\1033\\XmlFile.zip", nBufferLength=0x105, lpBuffer=0x31dfb4, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates\\CSharp\\1033\\XmlFile.zip", lpFilePart=0x0) returned 0x67 [0060.194] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e4a8) returned 1 [0060.194] CreateFileW (lpFileName="C:\\Program Files (x86)\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates\\CSharp\\1033\\XmlFile.zip" (normalized: "c:\\program files (x86)\\microsoft visual studio 8\\common7\\ide\\vsta\\itemtemplates\\csharp\\1033\\xmlfile.zip"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x178 [0060.195] GetFileType (hFile=0x178) returned 0x1 [0060.195] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e4a4) returned 1 [0060.195] GetFileType (hFile=0x178) returned 0x1 [0060.195] GetFileSize (in: hFile=0x178, lpFileSizeHigh=0x31e5b0 | out: lpFileSizeHigh=0x31e5b0*=0x0) returned 0x251 [0060.195] ReadFile (in: hFile=0x178, lpBuffer=0x26a1aa0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x31e55c, lpOverlapped=0x0 | out: lpBuffer=0x26a1aa0*, lpNumberOfBytesRead=0x31e55c*=0x251, lpOverlapped=0x0) returned 1 [0060.196] CloseHandle (hObject=0x178) returned 1 [0060.209] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates\\CSharp\\1033\\XmlFile.zip", nBufferLength=0x105, lpBuffer=0x31dfa0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates\\CSharp\\1033\\XmlFile.zip", lpFilePart=0x0) returned 0x67 [0060.209] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e494) returned 1 [0060.209] CreateFileW (lpFileName="C:\\Program Files (x86)\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates\\CSharp\\1033\\XmlFile.zip" (normalized: "c:\\program files (x86)\\microsoft visual studio 8\\common7\\ide\\vsta\\itemtemplates\\csharp\\1033\\xmlfile.zip"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x178 [0060.210] GetFileType (hFile=0x178) returned 0x1 [0060.210] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e490) returned 1 [0060.210] GetFileType (hFile=0x178) returned 0x1 [0060.210] WriteFile (in: hFile=0x178, lpBuffer=0x26f0738*, nNumberOfBytesToWrite=0x260, lpNumberOfBytesWritten=0x31e524, lpOverlapped=0x0 | out: lpBuffer=0x26f0738*, lpNumberOfBytesWritten=0x31e524*=0x260, lpOverlapped=0x0) returned 1 [0060.211] CloseHandle (hObject=0x178) returned 1 [0060.211] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates\\CSharp\\1033\\XmlFile.zip", nBufferLength=0x105, lpBuffer=0x31e0d4, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates\\CSharp\\1033\\XmlFile.zip", lpFilePart=0x0) returned 0x67 [0060.211] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates\\CSharp\\1033\\XmlFile.zip", nBufferLength=0x105, lpBuffer=0x31e0d4, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates\\CSharp\\1033\\XmlFile.zip", lpFilePart=0x0) returned 0x67 [0060.211] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e534) returned 1 [0060.211] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates\\CSharp\\1033\\XmlFile.zip" (normalized: "c:\\program files (x86)\\microsoft visual studio 8\\common7\\ide\\vsta\\itemtemplates\\csharp\\1033\\xmlfile.zip"), fInfoLevelId=0x0, lpFileInformation=0x31e5b0 | out: lpFileInformation=0x31e5b0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8c501900, ftCreationTime.dwHighDateTime=0x1c9e43c, ftLastAccessTime.dwLowDateTime=0x11231710, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x7547dc0, ftLastWriteTime.dwHighDateTime=0x1d6eb7f, nFileSizeHigh=0x0, nFileSizeLow=0x260)) returned 1 [0060.211] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e530) returned 1 [0060.212] MoveFileW (lpExistingFileName="C:\\Program Files (x86)\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates\\CSharp\\1033\\XmlFile.zip" (normalized: "c:\\program files (x86)\\microsoft visual studio 8\\common7\\ide\\vsta\\itemtemplates\\csharp\\1033\\xmlfile.zip"), lpNewFileName="C:\\Program Files (x86)\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates\\CSharp\\1033\\XmlFile.zip" (normalized: "c:\\program files (x86)\\microsoft visual studio 8\\common7\\ide\\vsta\\itemtemplates\\csharp\\1033\\xmlfile.zip")) returned 1 [0060.212] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e654) returned 1 [0060.212] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates\\VisualBasic", nBufferLength=0x105, lpBuffer=0x31e15c, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates\\VisualBasic", lpFilePart=0x0) returned 0x5b [0060.212] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates\\VisualBasic\\", nBufferLength=0x105, lpBuffer=0x31e130, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates\\VisualBasic\\", lpFilePart=0x0) returned 0x5c [0060.212] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates\\VisualBasic\\*", lpFindFileData=0x31e37c | out: lpFindFileData=0x31e37c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x10f5dcf0, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x10f5dcf0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x10f5dcf0, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5107aa0 [0060.213] FindNextFileW (in: hFindFile=0x5107aa0, lpFindFileData=0x31e38c | out: lpFindFileData=0x31e38c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x10f5dcf0, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x10f5dcf0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x10f5dcf0, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0060.213] FindNextFileW (in: hFindFile=0x5107aa0, lpFindFileData=0x31e38c | out: lpFindFileData=0x31e38c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x10f5dcf0, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x111e5450, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x111e5450, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="1033", cAlternateFileName="")) returned 1 [0060.213] FindNextFileW (in: hFindFile=0x5107aa0, lpFindFileData=0x31e38c | out: lpFindFileData=0x31e38c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x10f5dcf0, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x111e5450, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x111e5450, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="1033", cAlternateFileName="")) returned 0 [0060.213] FindClose (in: hFindFile=0x5107aa0 | out: hFindFile=0x5107aa0) returned 1 [0060.213] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e614) returned 1 [0060.213] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e620) returned 1 [0060.213] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e654) returned 1 [0060.213] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates\\VisualBasic", nBufferLength=0x105, lpBuffer=0x31e15c, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates\\VisualBasic", lpFilePart=0x0) returned 0x5b [0060.213] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates\\VisualBasic\\", nBufferLength=0x105, lpBuffer=0x31e130, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates\\VisualBasic\\", lpFilePart=0x0) returned 0x5c [0060.213] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates\\VisualBasic\\*", lpFindFileData=0x31e37c | out: lpFindFileData=0x31e37c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x10f5dcf0, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x10f5dcf0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x10f5dcf0, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5107aa0 [0060.214] FindNextFileW (in: hFindFile=0x5107aa0, lpFindFileData=0x31e38c | out: lpFindFileData=0x31e38c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x10f5dcf0, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x10f5dcf0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x10f5dcf0, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0060.214] FindNextFileW (in: hFindFile=0x5107aa0, lpFindFileData=0x31e38c | out: lpFindFileData=0x31e38c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x10f5dcf0, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x111e5450, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x111e5450, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="1033", cAlternateFileName="")) returned 1 [0060.214] FindNextFileW (in: hFindFile=0x5107aa0, lpFindFileData=0x31e38c | out: lpFindFileData=0x31e38c*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0060.214] FindClose (in: hFindFile=0x5107aa0 | out: hFindFile=0x5107aa0) returned 1 [0060.214] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e614) returned 1 [0060.214] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e620) returned 1 [0060.214] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e5dc) returned 1 [0060.214] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates\\VisualBasic\\1033", nBufferLength=0x105, lpBuffer=0x31e0e4, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates\\VisualBasic\\1033", lpFilePart=0x0) returned 0x60 [0060.214] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates\\VisualBasic\\1033\\", nBufferLength=0x105, lpBuffer=0x31e0b8, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates\\VisualBasic\\1033\\", lpFilePart=0x0) returned 0x61 [0060.214] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates\\VisualBasic\\1033\\*", lpFindFileData=0x31e304 | out: lpFindFileData=0x31e304*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x10f5dcf0, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x111e5450, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x111e5450, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5107aa0 [0060.219] FindNextFileW (in: hFindFile=0x5107aa0, lpFindFileData=0x31e314 | out: lpFindFileData=0x31e314*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x10f5dcf0, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x111e5450, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x111e5450, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0060.219] FindNextFileW (in: hFindFile=0x5107aa0, lpFindFileData=0x31e314 | out: lpFindFileData=0x31e314*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8c501900, ftCreationTime.dwHighDateTime=0x1c9e43c, ftLastAccessTime.dwLowDateTime=0x10f5dcf0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x8c501900, ftLastWriteTime.dwHighDateTime=0x1c9e43c, nFileSizeHigh=0x0, nFileSizeLow=0x45d, dwReserved0=0x0, dwReserved1=0x0, cFileName="AppConfigurationInternal.zip", cAlternateFileName="APPCON~1.ZIP")) returned 1 [0060.219] FindNextFileW (in: hFindFile=0x5107aa0, lpFindFileData=0x31e314 | out: lpFindFileData=0x31e314*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8c501900, ftCreationTime.dwHighDateTime=0x1c9e43c, ftLastAccessTime.dwLowDateTime=0x10f5dcf0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x8c501900, ftLastWriteTime.dwHighDateTime=0x1c9e43c, nFileSizeHigh=0x0, nFileSizeLow=0x485, dwReserved0=0x0, dwReserved1=0x0, cFileName="AssemblyInfoInternal.zip", cAlternateFileName="ASSEMB~1.ZIP")) returned 1 [0060.219] FindNextFileW (in: hFindFile=0x5107aa0, lpFindFileData=0x31e314 | out: lpFindFileData=0x31e314*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8c501900, ftCreationTime.dwHighDateTime=0x1c9e43c, ftLastAccessTime.dwLowDateTime=0x10f5dcf0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x8c501900, ftLastWriteTime.dwHighDateTime=0x1c9e43c, nFileSizeHigh=0x0, nFileSizeLow=0x24d, dwReserved0=0x0, dwReserved1=0x0, cFileName="Class.zip", cAlternateFileName="")) returned 1 [0060.219] FindNextFileW (in: hFindFile=0x5107aa0, lpFindFileData=0x31e314 | out: lpFindFileData=0x31e314*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8c501900, ftCreationTime.dwHighDateTime=0x1c9e43c, ftLastAccessTime.dwLowDateTime=0x10fa9fb0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x8c501900, ftLastWriteTime.dwHighDateTime=0x1c9e43c, nFileSizeHigh=0x0, nFileSizeLow=0x4a8, dwReserved0=0x0, dwReserved1=0x0, cFileName="Dataset.zip", cAlternateFileName="")) returned 1 [0060.220] FindNextFileW (in: hFindFile=0x5107aa0, lpFindFileData=0x31e314 | out: lpFindFileData=0x31e314*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8c501900, ftCreationTime.dwHighDateTime=0x1c9e43c, ftLastAccessTime.dwLowDateTime=0x10fa9fb0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x8c501900, ftLastWriteTime.dwHighDateTime=0x1c9e43c, nFileSizeHigh=0x0, nFileSizeLow=0x7f4, dwReserved0=0x0, dwReserved1=0x0, cFileName="Dialog.zip", cAlternateFileName="")) returned 1 [0060.220] FindNextFileW (in: hFindFile=0x5107aa0, lpFindFileData=0x31e314 | out: lpFindFileData=0x31e314*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8c501900, ftCreationTime.dwHighDateTime=0x1c9e43c, ftLastAccessTime.dwLowDateTime=0x10ff6270, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x8c501900, ftLastWriteTime.dwHighDateTime=0x1c9e43c, nFileSizeHigh=0x0, nFileSizeLow=0x35b, dwReserved0=0x0, dwReserved1=0x0, cFileName="EmptyDatabase.zip", cAlternateFileName="EMPTYD~1.ZIP")) returned 1 [0060.220] FindNextFileW (in: hFindFile=0x5107aa0, lpFindFileData=0x31e314 | out: lpFindFileData=0x31e314*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8c501900, ftCreationTime.dwHighDateTime=0x1c9e43c, ftLastAccessTime.dwLowDateTime=0x10ff6270, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x8c501900, ftLastWriteTime.dwHighDateTime=0x1c9e43c, nFileSizeHigh=0x0, nFileSizeLow=0x4faa, dwReserved0=0x0, dwReserved1=0x0, cFileName="Explorer.zip", cAlternateFileName="")) returned 1 [0060.220] FindNextFileW (in: hFindFile=0x5107aa0, lpFindFileData=0x31e314 | out: lpFindFileData=0x31e314*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8c501900, ftCreationTime.dwHighDateTime=0x1c9e43c, ftLastAccessTime.dwLowDateTime=0x1101c3d0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x8c501900, ftLastWriteTime.dwHighDateTime=0x1c9e43c, nFileSizeHigh=0x0, nFileSizeLow=0x514, dwReserved0=0x0, dwReserved1=0x0, cFileName="Form.zip", cAlternateFileName="")) returned 1 [0060.220] FindNextFileW (in: hFindFile=0x5107aa0, lpFindFileData=0x31e314 | out: lpFindFileData=0x31e314*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8c501900, ftCreationTime.dwHighDateTime=0x1c9e43c, ftLastAccessTime.dwLowDateTime=0x1101c3d0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x8c501900, ftLastWriteTime.dwHighDateTime=0x1c9e43c, nFileSizeHigh=0x0, nFileSizeLow=0xb090, dwReserved0=0x0, dwReserved1=0x0, cFileName="LoginForm.zip", cAlternateFileName="LOGINF~1.ZIP")) returned 1 [0060.220] FindNextFileW (in: hFindFile=0x5107aa0, lpFindFileData=0x31e314 | out: lpFindFileData=0x31e314*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8c501900, ftCreationTime.dwHighDateTime=0x1c9e43c, ftLastAccessTime.dwLowDateTime=0x1101c3d0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x8c501900, ftLastWriteTime.dwHighDateTime=0x1c9e43c, nFileSizeHigh=0x0, nFileSizeLow=0x36b7, dwReserved0=0x0, dwReserved1=0x0, cFileName="MDIParent.zip", cAlternateFileName="MDIPAR~1.ZIP")) returned 1 [0060.220] FindNextFileW (in: hFindFile=0x5107aa0, lpFindFileData=0x31e314 | out: lpFindFileData=0x31e314*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8c501900, ftCreationTime.dwHighDateTime=0x1c9e43c, ftLastAccessTime.dwLowDateTime=0x11042530, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x8c501900, ftLastWriteTime.dwHighDateTime=0x1c9e43c, nFileSizeHigh=0x0, nFileSizeLow=0x24f, dwReserved0=0x0, dwReserved1=0x0, cFileName="Module.zip", cAlternateFileName="")) returned 1 [0060.220] FindNextFileW (in: hFindFile=0x5107aa0, lpFindFileData=0x31e314 | out: lpFindFileData=0x31e314*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8c501900, ftCreationTime.dwHighDateTime=0x1c9e43c, ftLastAccessTime.dwLowDateTime=0x11100c10, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x8c501900, ftLastWriteTime.dwHighDateTime=0x1c9e43c, nFileSizeHigh=0x0, nFileSizeLow=0x89b, dwReserved0=0x0, dwReserved1=0x0, cFileName="ResourceInternal.zip", cAlternateFileName="RESOUR~1.ZIP")) returned 1 [0060.221] FindNextFileW (in: hFindFile=0x5107aa0, lpFindFileData=0x31e314 | out: lpFindFileData=0x31e314*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8c501900, ftCreationTime.dwHighDateTime=0x1c9e43c, ftLastAccessTime.dwLowDateTime=0x11100c10, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x8c501900, ftLastWriteTime.dwHighDateTime=0x1c9e43c, nFileSizeHigh=0x0, nFileSizeLow=0x419, dwReserved0=0x0, dwReserved1=0x0, cFileName="SettingsInternal.zip", cAlternateFileName="SETTIN~1.ZIP")) returned 1 [0060.221] FindNextFileW (in: hFindFile=0x5107aa0, lpFindFileData=0x31e314 | out: lpFindFileData=0x31e314*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8c501900, ftCreationTime.dwHighDateTime=0x1c9e43c, ftLastAccessTime.dwLowDateTime=0x11126d70, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x8c501900, ftLastWriteTime.dwHighDateTime=0x1c9e43c, nFileSizeHigh=0x0, nFileSizeLow=0xec16, dwReserved0=0x0, dwReserved1=0x0, cFileName="SplashScreen.zip", cAlternateFileName="SPLASH~1.ZIP")) returned 1 [0060.221] FindNextFileW (in: hFindFile=0x5107aa0, lpFindFileData=0x31e314 | out: lpFindFileData=0x31e314*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8c501900, ftCreationTime.dwHighDateTime=0x1c9e43c, ftLastAccessTime.dwLowDateTime=0x111bf2f0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x8c501900, ftLastWriteTime.dwHighDateTime=0x1c9e43c, nFileSizeHigh=0x0, nFileSizeLow=0x22b, dwReserved0=0x0, dwReserved1=0x0, cFileName="Text.zip", cAlternateFileName="")) returned 1 [0060.221] FindNextFileW (in: hFindFile=0x5107aa0, lpFindFileData=0x31e314 | out: lpFindFileData=0x31e314*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8c501900, ftCreationTime.dwHighDateTime=0x1c9e43c, ftLastAccessTime.dwLowDateTime=0x1120b5b0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x8c501900, ftLastWriteTime.dwHighDateTime=0x1c9e43c, nFileSizeHigh=0x0, nFileSizeLow=0x5b1, dwReserved0=0x0, dwReserved1=0x0, cFileName="UserControl.zip", cAlternateFileName="USERCO~1.ZIP")) returned 1 [0060.221] FindNextFileW (in: hFindFile=0x5107aa0, lpFindFileData=0x31e314 | out: lpFindFileData=0x31e314*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0060.221] FindClose (in: hFindFile=0x5107aa0 | out: hFindFile=0x5107aa0) returned 1 [0060.222] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e59c) returned 1 [0060.222] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e5a8) returned 1 [0060.222] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e5dc) returned 1 [0060.222] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates\\VisualBasic\\1033", nBufferLength=0x105, lpBuffer=0x31e0e4, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates\\VisualBasic\\1033", lpFilePart=0x0) returned 0x60 [0060.222] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates\\VisualBasic\\1033\\", nBufferLength=0x105, lpBuffer=0x31e0b8, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates\\VisualBasic\\1033\\", lpFilePart=0x0) returned 0x61 [0060.222] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates\\VisualBasic\\1033\\*", lpFindFileData=0x31e304 | out: lpFindFileData=0x31e304*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x10f5dcf0, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x111e5450, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x111e5450, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5107aa0 [0060.223] FindNextFileW (in: hFindFile=0x5107aa0, lpFindFileData=0x31e314 | out: lpFindFileData=0x31e314*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x10f5dcf0, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x111e5450, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x111e5450, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0060.223] FindNextFileW (in: hFindFile=0x5107aa0, lpFindFileData=0x31e314 | out: lpFindFileData=0x31e314*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8c501900, ftCreationTime.dwHighDateTime=0x1c9e43c, ftLastAccessTime.dwLowDateTime=0x10f5dcf0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x8c501900, ftLastWriteTime.dwHighDateTime=0x1c9e43c, nFileSizeHigh=0x0, nFileSizeLow=0x45d, dwReserved0=0x0, dwReserved1=0x0, cFileName="AppConfigurationInternal.zip", cAlternateFileName="APPCON~1.ZIP")) returned 1 [0060.223] FindNextFileW (in: hFindFile=0x5107aa0, lpFindFileData=0x31e314 | out: lpFindFileData=0x31e314*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8c501900, ftCreationTime.dwHighDateTime=0x1c9e43c, ftLastAccessTime.dwLowDateTime=0x10f5dcf0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x8c501900, ftLastWriteTime.dwHighDateTime=0x1c9e43c, nFileSizeHigh=0x0, nFileSizeLow=0x485, dwReserved0=0x0, dwReserved1=0x0, cFileName="AssemblyInfoInternal.zip", cAlternateFileName="ASSEMB~1.ZIP")) returned 1 [0060.223] FindNextFileW (in: hFindFile=0x5107aa0, lpFindFileData=0x31e314 | out: lpFindFileData=0x31e314*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8c501900, ftCreationTime.dwHighDateTime=0x1c9e43c, ftLastAccessTime.dwLowDateTime=0x10f5dcf0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x8c501900, ftLastWriteTime.dwHighDateTime=0x1c9e43c, nFileSizeHigh=0x0, nFileSizeLow=0x24d, dwReserved0=0x0, dwReserved1=0x0, cFileName="Class.zip", cAlternateFileName="")) returned 1 [0060.223] FindNextFileW (in: hFindFile=0x5107aa0, lpFindFileData=0x31e314 | out: lpFindFileData=0x31e314*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8c501900, ftCreationTime.dwHighDateTime=0x1c9e43c, ftLastAccessTime.dwLowDateTime=0x10fa9fb0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x8c501900, ftLastWriteTime.dwHighDateTime=0x1c9e43c, nFileSizeHigh=0x0, nFileSizeLow=0x4a8, dwReserved0=0x0, dwReserved1=0x0, cFileName="Dataset.zip", cAlternateFileName="")) returned 1 [0060.223] FindNextFileW (in: hFindFile=0x5107aa0, lpFindFileData=0x31e314 | out: lpFindFileData=0x31e314*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8c501900, ftCreationTime.dwHighDateTime=0x1c9e43c, ftLastAccessTime.dwLowDateTime=0x10fa9fb0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x8c501900, ftLastWriteTime.dwHighDateTime=0x1c9e43c, nFileSizeHigh=0x0, nFileSizeLow=0x7f4, dwReserved0=0x0, dwReserved1=0x0, cFileName="Dialog.zip", cAlternateFileName="")) returned 1 [0060.224] FindNextFileW (in: hFindFile=0x5107aa0, lpFindFileData=0x31e314 | out: lpFindFileData=0x31e314*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8c501900, ftCreationTime.dwHighDateTime=0x1c9e43c, ftLastAccessTime.dwLowDateTime=0x10ff6270, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x8c501900, ftLastWriteTime.dwHighDateTime=0x1c9e43c, nFileSizeHigh=0x0, nFileSizeLow=0x35b, dwReserved0=0x0, dwReserved1=0x0, cFileName="EmptyDatabase.zip", cAlternateFileName="EMPTYD~1.ZIP")) returned 1 [0060.224] FindNextFileW (in: hFindFile=0x5107aa0, lpFindFileData=0x31e314 | out: lpFindFileData=0x31e314*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8c501900, ftCreationTime.dwHighDateTime=0x1c9e43c, ftLastAccessTime.dwLowDateTime=0x10ff6270, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x8c501900, ftLastWriteTime.dwHighDateTime=0x1c9e43c, nFileSizeHigh=0x0, nFileSizeLow=0x4faa, dwReserved0=0x0, dwReserved1=0x0, cFileName="Explorer.zip", cAlternateFileName="")) returned 1 [0060.224] FindNextFileW (in: hFindFile=0x5107aa0, lpFindFileData=0x31e314 | out: lpFindFileData=0x31e314*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8c501900, ftCreationTime.dwHighDateTime=0x1c9e43c, ftLastAccessTime.dwLowDateTime=0x1101c3d0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x8c501900, ftLastWriteTime.dwHighDateTime=0x1c9e43c, nFileSizeHigh=0x0, nFileSizeLow=0x514, dwReserved0=0x0, dwReserved1=0x0, cFileName="Form.zip", cAlternateFileName="")) returned 1 [0060.224] FindNextFileW (in: hFindFile=0x5107aa0, lpFindFileData=0x31e314 | out: lpFindFileData=0x31e314*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8c501900, ftCreationTime.dwHighDateTime=0x1c9e43c, ftLastAccessTime.dwLowDateTime=0x1101c3d0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x8c501900, ftLastWriteTime.dwHighDateTime=0x1c9e43c, nFileSizeHigh=0x0, nFileSizeLow=0xb090, dwReserved0=0x0, dwReserved1=0x0, cFileName="LoginForm.zip", cAlternateFileName="LOGINF~1.ZIP")) returned 1 [0060.224] FindNextFileW (in: hFindFile=0x5107aa0, lpFindFileData=0x31e314 | out: lpFindFileData=0x31e314*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8c501900, ftCreationTime.dwHighDateTime=0x1c9e43c, ftLastAccessTime.dwLowDateTime=0x1101c3d0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x8c501900, ftLastWriteTime.dwHighDateTime=0x1c9e43c, nFileSizeHigh=0x0, nFileSizeLow=0x36b7, dwReserved0=0x0, dwReserved1=0x0, cFileName="MDIParent.zip", cAlternateFileName="MDIPAR~1.ZIP")) returned 1 [0060.224] FindNextFileW (in: hFindFile=0x5107aa0, lpFindFileData=0x31e314 | out: lpFindFileData=0x31e314*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8c501900, ftCreationTime.dwHighDateTime=0x1c9e43c, ftLastAccessTime.dwLowDateTime=0x11042530, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x8c501900, ftLastWriteTime.dwHighDateTime=0x1c9e43c, nFileSizeHigh=0x0, nFileSizeLow=0x24f, dwReserved0=0x0, dwReserved1=0x0, cFileName="Module.zip", cAlternateFileName="")) returned 1 [0060.224] FindNextFileW (in: hFindFile=0x5107aa0, lpFindFileData=0x31e314 | out: lpFindFileData=0x31e314*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8c501900, ftCreationTime.dwHighDateTime=0x1c9e43c, ftLastAccessTime.dwLowDateTime=0x11100c10, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x8c501900, ftLastWriteTime.dwHighDateTime=0x1c9e43c, nFileSizeHigh=0x0, nFileSizeLow=0x89b, dwReserved0=0x0, dwReserved1=0x0, cFileName="ResourceInternal.zip", cAlternateFileName="RESOUR~1.ZIP")) returned 1 [0060.224] FindNextFileW (in: hFindFile=0x5107aa0, lpFindFileData=0x31e314 | out: lpFindFileData=0x31e314*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8c501900, ftCreationTime.dwHighDateTime=0x1c9e43c, ftLastAccessTime.dwLowDateTime=0x11100c10, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x8c501900, ftLastWriteTime.dwHighDateTime=0x1c9e43c, nFileSizeHigh=0x0, nFileSizeLow=0x419, dwReserved0=0x0, dwReserved1=0x0, cFileName="SettingsInternal.zip", cAlternateFileName="SETTIN~1.ZIP")) returned 1 [0060.225] FindNextFileW (in: hFindFile=0x5107aa0, lpFindFileData=0x31e314 | out: lpFindFileData=0x31e314*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8c501900, ftCreationTime.dwHighDateTime=0x1c9e43c, ftLastAccessTime.dwLowDateTime=0x11126d70, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x8c501900, ftLastWriteTime.dwHighDateTime=0x1c9e43c, nFileSizeHigh=0x0, nFileSizeLow=0xec16, dwReserved0=0x0, dwReserved1=0x0, cFileName="SplashScreen.zip", cAlternateFileName="SPLASH~1.ZIP")) returned 1 [0060.225] FindNextFileW (in: hFindFile=0x5107aa0, lpFindFileData=0x31e314 | out: lpFindFileData=0x31e314*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8c501900, ftCreationTime.dwHighDateTime=0x1c9e43c, ftLastAccessTime.dwLowDateTime=0x111bf2f0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x8c501900, ftLastWriteTime.dwHighDateTime=0x1c9e43c, nFileSizeHigh=0x0, nFileSizeLow=0x22b, dwReserved0=0x0, dwReserved1=0x0, cFileName="Text.zip", cAlternateFileName="")) returned 1 [0060.225] FindNextFileW (in: hFindFile=0x5107aa0, lpFindFileData=0x31e314 | out: lpFindFileData=0x31e314*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8c501900, ftCreationTime.dwHighDateTime=0x1c9e43c, ftLastAccessTime.dwLowDateTime=0x1120b5b0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x8c501900, ftLastWriteTime.dwHighDateTime=0x1c9e43c, nFileSizeHigh=0x0, nFileSizeLow=0x5b1, dwReserved0=0x0, dwReserved1=0x0, cFileName="UserControl.zip", cAlternateFileName="USERCO~1.ZIP")) returned 1 [0060.225] FindNextFileW (in: hFindFile=0x5107aa0, lpFindFileData=0x31e314 | out: lpFindFileData=0x31e314*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8c501900, ftCreationTime.dwHighDateTime=0x1c9e43c, ftLastAccessTime.dwLowDateTime=0x1120b5b0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x8c501900, ftLastWriteTime.dwHighDateTime=0x1c9e43c, nFileSizeHigh=0x0, nFileSizeLow=0x5b1, dwReserved0=0x0, dwReserved1=0x0, cFileName="UserControl.zip", cAlternateFileName="USERCO~1.ZIP")) returned 0 [0060.225] FindClose (in: hFindFile=0x5107aa0 | out: hFindFile=0x5107aa0) returned 1 [0060.226] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e59c) returned 1 [0060.226] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e5a8) returned 1 [0060.226] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates\\VisualBasic\\1033\\AppConfigurationInternal.zip", nBufferLength=0x105, lpBuffer=0x31dfb4, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates\\VisualBasic\\1033\\AppConfigurationInternal.zip", lpFilePart=0x0) returned 0x7d [0060.226] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e4a8) returned 1 [0060.226] CreateFileW (lpFileName="C:\\Program Files (x86)\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates\\VisualBasic\\1033\\AppConfigurationInternal.zip" (normalized: "c:\\program files (x86)\\microsoft visual studio 8\\common7\\ide\\vsta\\itemtemplates\\visualbasic\\1033\\appconfigurationinternal.zip"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x178 [0060.227] GetFileType (hFile=0x178) returned 0x1 [0060.227] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e4a4) returned 1 [0060.227] GetFileType (hFile=0x178) returned 0x1 [0060.227] GetFileSize (in: hFile=0x178, lpFileSizeHigh=0x31e5b0 | out: lpFileSizeHigh=0x31e5b0*=0x0) returned 0x45d [0060.227] ReadFile (in: hFile=0x178, lpBuffer=0x26fa388, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x31e55c, lpOverlapped=0x0 | out: lpBuffer=0x26fa388*, lpNumberOfBytesRead=0x31e55c*=0x45d, lpOverlapped=0x0) returned 1 [0060.228] CloseHandle (hObject=0x178) returned 1 [0060.241] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates\\VisualBasic\\1033\\AppConfigurationInternal.zip", nBufferLength=0x105, lpBuffer=0x31dfa0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates\\VisualBasic\\1033\\AppConfigurationInternal.zip", lpFilePart=0x0) returned 0x7d [0060.241] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e494) returned 1 [0060.241] CreateFileW (lpFileName="C:\\Program Files (x86)\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates\\VisualBasic\\1033\\AppConfigurationInternal.zip" (normalized: "c:\\program files (x86)\\microsoft visual studio 8\\common7\\ide\\vsta\\itemtemplates\\visualbasic\\1033\\appconfigurationinternal.zip"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x178 [0060.242] GetFileType (hFile=0x178) returned 0x1 [0060.242] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e490) returned 1 [0060.242] GetFileType (hFile=0x178) returned 0x1 [0060.244] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates\\VisualBasic\\1033\\AppConfigurationInternal.zip", nBufferLength=0x105, lpBuffer=0x31e0d4, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates\\VisualBasic\\1033\\AppConfigurationInternal.zip", lpFilePart=0x0) returned 0x7d [0060.244] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates\\VisualBasic\\1033\\AppConfigurationInternal.zip", nBufferLength=0x105, lpBuffer=0x31e0d4, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates\\VisualBasic\\1033\\AppConfigurationInternal.zip", lpFilePart=0x0) returned 0x7d [0060.244] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e534) returned 1 [0060.245] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates\\VisualBasic\\1033\\AppConfigurationInternal.zip" (normalized: "c:\\program files (x86)\\microsoft visual studio 8\\common7\\ide\\vsta\\itemtemplates\\visualbasic\\1033\\appconfigurationinternal.zip"), fInfoLevelId=0x0, lpFileInformation=0x31e5b0 | out: lpFileInformation=0x31e5b0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8c501900, ftCreationTime.dwHighDateTime=0x1c9e43c, ftLastAccessTime.dwLowDateTime=0x10f5dcf0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x7594080, ftLastWriteTime.dwHighDateTime=0x1d6eb7f, nFileSizeHigh=0x0, nFileSizeLow=0x460)) returned 1 [0060.245] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e530) returned 1 [0060.245] MoveFileW (lpExistingFileName="C:\\Program Files (x86)\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates\\VisualBasic\\1033\\AppConfigurationInternal.zip" (normalized: "c:\\program files (x86)\\microsoft visual studio 8\\common7\\ide\\vsta\\itemtemplates\\visualbasic\\1033\\appconfigurationinternal.zip"), lpNewFileName="C:\\Program Files (x86)\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates\\VisualBasic\\1033\\AppConfigurationInternal.zip" (normalized: "c:\\program files (x86)\\microsoft visual studio 8\\common7\\ide\\vsta\\itemtemplates\\visualbasic\\1033\\appconfigurationinternal.zip")) returned 1 [0060.245] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates\\VisualBasic\\1033\\AssemblyInfoInternal.zip", nBufferLength=0x105, lpBuffer=0x31dfb4, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates\\VisualBasic\\1033\\AssemblyInfoInternal.zip", lpFilePart=0x0) returned 0x79 [0060.245] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e4a8) returned 1 [0060.245] CreateFileW (lpFileName="C:\\Program Files (x86)\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates\\VisualBasic\\1033\\AssemblyInfoInternal.zip" (normalized: "c:\\program files (x86)\\microsoft visual studio 8\\common7\\ide\\vsta\\itemtemplates\\visualbasic\\1033\\assemblyinfointernal.zip"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x178 [0060.245] GetFileType (hFile=0x178) returned 0x1 [0060.245] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e4a4) returned 1 [0060.245] GetFileType (hFile=0x178) returned 0x1 [0060.245] GetFileSize (in: hFile=0x178, lpFileSizeHigh=0x31e5b0 | out: lpFileSizeHigh=0x31e5b0*=0x0) returned 0x485 [0060.246] ReadFile (in: hFile=0x178, lpBuffer=0x274b16c, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x31e55c, lpOverlapped=0x0 | out: lpBuffer=0x274b16c*, lpNumberOfBytesRead=0x31e55c*=0x485, lpOverlapped=0x0) returned 1 [0060.247] CloseHandle (hObject=0x178) returned 1 [0060.260] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates\\VisualBasic\\1033\\AssemblyInfoInternal.zip", nBufferLength=0x105, lpBuffer=0x31dfa0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates\\VisualBasic\\1033\\AssemblyInfoInternal.zip", lpFilePart=0x0) returned 0x79 [0060.260] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e494) returned 1 [0060.260] CreateFileW (lpFileName="C:\\Program Files (x86)\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates\\VisualBasic\\1033\\AssemblyInfoInternal.zip" (normalized: "c:\\program files (x86)\\microsoft visual studio 8\\common7\\ide\\vsta\\itemtemplates\\visualbasic\\1033\\assemblyinfointernal.zip"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x178 [0060.261] GetFileType (hFile=0x178) returned 0x1 [0060.261] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e490) returned 1 [0060.261] GetFileType (hFile=0x178) returned 0x1 [0060.261] WriteFile (in: hFile=0x178, lpBuffer=0x279a7d4*, nNumberOfBytesToWrite=0x490, lpNumberOfBytesWritten=0x31e524, lpOverlapped=0x0 | out: lpBuffer=0x279a7d4*, lpNumberOfBytesWritten=0x31e524*=0x490, lpOverlapped=0x0) returned 1 [0060.262] CloseHandle (hObject=0x178) returned 1 [0060.262] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates\\VisualBasic\\1033\\AssemblyInfoInternal.zip", nBufferLength=0x105, lpBuffer=0x31e0d4, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates\\VisualBasic\\1033\\AssemblyInfoInternal.zip", lpFilePart=0x0) returned 0x79 [0060.262] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates\\VisualBasic\\1033\\AssemblyInfoInternal.zip", nBufferLength=0x105, lpBuffer=0x31e0d4, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates\\VisualBasic\\1033\\AssemblyInfoInternal.zip", lpFilePart=0x0) returned 0x79 [0060.262] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e534) returned 1 [0060.262] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates\\VisualBasic\\1033\\AssemblyInfoInternal.zip" (normalized: "c:\\program files (x86)\\microsoft visual studio 8\\common7\\ide\\vsta\\itemtemplates\\visualbasic\\1033\\assemblyinfointernal.zip"), fInfoLevelId=0x0, lpFileInformation=0x31e5b0 | out: lpFileInformation=0x31e5b0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8c501900, ftCreationTime.dwHighDateTime=0x1c9e43c, ftLastAccessTime.dwLowDateTime=0x10f5dcf0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x75ba1e0, ftLastWriteTime.dwHighDateTime=0x1d6eb7f, nFileSizeHigh=0x0, nFileSizeLow=0x490)) returned 1 [0060.262] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e530) returned 1 [0060.262] MoveFileW (lpExistingFileName="C:\\Program Files (x86)\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates\\VisualBasic\\1033\\AssemblyInfoInternal.zip" (normalized: "c:\\program files (x86)\\microsoft visual studio 8\\common7\\ide\\vsta\\itemtemplates\\visualbasic\\1033\\assemblyinfointernal.zip"), lpNewFileName="C:\\Program Files (x86)\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates\\VisualBasic\\1033\\AssemblyInfoInternal.zip" (normalized: "c:\\program files (x86)\\microsoft visual studio 8\\common7\\ide\\vsta\\itemtemplates\\visualbasic\\1033\\assemblyinfointernal.zip")) returned 1 [0060.263] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates\\VisualBasic\\1033\\Class.zip", nBufferLength=0x105, lpBuffer=0x31dfb4, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates\\VisualBasic\\1033\\Class.zip", lpFilePart=0x0) returned 0x6a [0060.263] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e4a8) returned 1 [0060.263] CreateFileW (lpFileName="C:\\Program Files (x86)\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates\\VisualBasic\\1033\\Class.zip" (normalized: "c:\\program files (x86)\\microsoft visual studio 8\\common7\\ide\\vsta\\itemtemplates\\visualbasic\\1033\\class.zip"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x178 [0060.269] GetFileType (hFile=0x178) returned 0x1 [0060.269] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e4a4) returned 1 [0060.270] GetFileType (hFile=0x178) returned 0x1 [0060.270] GetFileSize (in: hFile=0x178, lpFileSizeHigh=0x31e5b0 | out: lpFileSizeHigh=0x31e5b0*=0x0) returned 0x24d [0060.270] ReadFile (in: hFile=0x178, lpBuffer=0x279bdb4, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x31e55c, lpOverlapped=0x0 | out: lpBuffer=0x279bdb4*, lpNumberOfBytesRead=0x31e55c*=0x24d, lpOverlapped=0x0) returned 1 [0060.271] CloseHandle (hObject=0x178) returned 1 [0060.283] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates\\VisualBasic\\1033\\Class.zip", nBufferLength=0x105, lpBuffer=0x31dfa0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates\\VisualBasic\\1033\\Class.zip", lpFilePart=0x0) returned 0x6a [0060.283] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e494) returned 1 [0060.283] CreateFileW (lpFileName="C:\\Program Files (x86)\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates\\VisualBasic\\1033\\Class.zip" (normalized: "c:\\program files (x86)\\microsoft visual studio 8\\common7\\ide\\vsta\\itemtemplates\\visualbasic\\1033\\class.zip"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x178 [0060.284] GetFileType (hFile=0x178) returned 0x1 [0060.284] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e490) returned 1 [0060.284] GetFileType (hFile=0x178) returned 0x1 [0060.284] WriteFile (in: hFile=0x178, lpBuffer=0x27ea898*, nNumberOfBytesToWrite=0x250, lpNumberOfBytesWritten=0x31e524, lpOverlapped=0x0 | out: lpBuffer=0x27ea898*, lpNumberOfBytesWritten=0x31e524*=0x250, lpOverlapped=0x0) returned 1 [0060.285] CloseHandle (hObject=0x178) returned 1 [0060.285] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates\\VisualBasic\\1033\\Class.zip", nBufferLength=0x105, lpBuffer=0x31e0d4, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates\\VisualBasic\\1033\\Class.zip", lpFilePart=0x0) returned 0x6a [0060.285] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates\\VisualBasic\\1033\\Class.zip", nBufferLength=0x105, lpBuffer=0x31e0d4, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates\\VisualBasic\\1033\\Class.zip", lpFilePart=0x0) returned 0x6a [0060.285] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e534) returned 1 [0060.285] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates\\VisualBasic\\1033\\Class.zip" (normalized: "c:\\program files (x86)\\microsoft visual studio 8\\common7\\ide\\vsta\\itemtemplates\\visualbasic\\1033\\class.zip"), fInfoLevelId=0x0, lpFileInformation=0x31e5b0 | out: lpFileInformation=0x31e5b0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8c501900, ftCreationTime.dwHighDateTime=0x1c9e43c, ftLastAccessTime.dwLowDateTime=0x10f5dcf0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x76064a0, ftLastWriteTime.dwHighDateTime=0x1d6eb7f, nFileSizeHigh=0x0, nFileSizeLow=0x250)) returned 1 [0060.285] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e530) returned 1 [0060.285] MoveFileW (lpExistingFileName="C:\\Program Files (x86)\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates\\VisualBasic\\1033\\Class.zip" (normalized: "c:\\program files (x86)\\microsoft visual studio 8\\common7\\ide\\vsta\\itemtemplates\\visualbasic\\1033\\class.zip"), lpNewFileName="C:\\Program Files (x86)\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates\\VisualBasic\\1033\\Class.zip" (normalized: "c:\\program files (x86)\\microsoft visual studio 8\\common7\\ide\\vsta\\itemtemplates\\visualbasic\\1033\\class.zip")) returned 1 [0060.286] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates\\VisualBasic\\1033\\Dataset.zip", nBufferLength=0x105, lpBuffer=0x31dfb4, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates\\VisualBasic\\1033\\Dataset.zip", lpFilePart=0x0) returned 0x6c [0060.286] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e4a8) returned 1 [0060.286] CreateFileW (lpFileName="C:\\Program Files (x86)\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates\\VisualBasic\\1033\\Dataset.zip" (normalized: "c:\\program files (x86)\\microsoft visual studio 8\\common7\\ide\\vsta\\itemtemplates\\visualbasic\\1033\\dataset.zip"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x178 [0060.286] GetFileType (hFile=0x178) returned 0x1 [0060.286] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e4a4) returned 1 [0060.286] GetFileType (hFile=0x178) returned 0x1 [0060.286] GetFileSize (in: hFile=0x178, lpFileSizeHigh=0x31e5b0 | out: lpFileSizeHigh=0x31e5b0*=0x0) returned 0x4a8 [0060.286] ReadFile (in: hFile=0x178, lpBuffer=0x27ec0a0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x31e55c, lpOverlapped=0x0 | out: lpBuffer=0x27ec0a0*, lpNumberOfBytesRead=0x31e55c*=0x4a8, lpOverlapped=0x0) returned 1 [0060.288] CloseHandle (hObject=0x178) returned 1 [0060.301] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates\\VisualBasic\\1033\\Dataset.zip", nBufferLength=0x105, lpBuffer=0x31dfa0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates\\VisualBasic\\1033\\Dataset.zip", lpFilePart=0x0) returned 0x6c [0060.301] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e494) returned 1 [0060.301] CreateFileW (lpFileName="C:\\Program Files (x86)\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates\\VisualBasic\\1033\\Dataset.zip" (normalized: "c:\\program files (x86)\\microsoft visual studio 8\\common7\\ide\\vsta\\itemtemplates\\visualbasic\\1033\\dataset.zip"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x178 [0060.302] GetFileType (hFile=0x178) returned 0x1 [0060.302] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e490) returned 1 [0060.302] GetFileType (hFile=0x178) returned 0x1 [0060.303] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates\\VisualBasic\\1033\\Dataset.zip", nBufferLength=0x105, lpBuffer=0x31e0d4, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates\\VisualBasic\\1033\\Dataset.zip", lpFilePart=0x0) returned 0x6c [0060.303] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates\\VisualBasic\\1033\\Dataset.zip", nBufferLength=0x105, lpBuffer=0x31e0d4, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates\\VisualBasic\\1033\\Dataset.zip", lpFilePart=0x0) returned 0x6c [0060.303] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e534) returned 1 [0060.303] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates\\VisualBasic\\1033\\Dataset.zip" (normalized: "c:\\program files (x86)\\microsoft visual studio 8\\common7\\ide\\vsta\\itemtemplates\\visualbasic\\1033\\dataset.zip"), fInfoLevelId=0x0, lpFileInformation=0x31e5b0 | out: lpFileInformation=0x31e5b0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8c501900, ftCreationTime.dwHighDateTime=0x1c9e43c, ftLastAccessTime.dwLowDateTime=0x10fa9fb0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x762c600, ftLastWriteTime.dwHighDateTime=0x1d6eb7f, nFileSizeHigh=0x0, nFileSizeLow=0x4b0)) returned 1 [0060.303] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e530) returned 1 [0060.303] MoveFileW (lpExistingFileName="C:\\Program Files (x86)\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates\\VisualBasic\\1033\\Dataset.zip" (normalized: "c:\\program files (x86)\\microsoft visual studio 8\\common7\\ide\\vsta\\itemtemplates\\visualbasic\\1033\\dataset.zip"), lpNewFileName="C:\\Program Files (x86)\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates\\VisualBasic\\1033\\Dataset.zip" (normalized: "c:\\program files (x86)\\microsoft visual studio 8\\common7\\ide\\vsta\\itemtemplates\\visualbasic\\1033\\dataset.zip")) returned 1 [0060.303] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates\\VisualBasic\\1033\\Dialog.zip", nBufferLength=0x105, lpBuffer=0x31dfb4, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates\\VisualBasic\\1033\\Dialog.zip", lpFilePart=0x0) returned 0x6b [0060.303] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e4a8) returned 1 [0060.304] CreateFileW (lpFileName="C:\\Program Files (x86)\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates\\VisualBasic\\1033\\Dialog.zip" (normalized: "c:\\program files (x86)\\microsoft visual studio 8\\common7\\ide\\vsta\\itemtemplates\\visualbasic\\1033\\dialog.zip"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x178 [0060.304] GetFileType (hFile=0x178) returned 0x1 [0060.304] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e4a4) returned 1 [0060.304] GetFileType (hFile=0x178) returned 0x1 [0060.304] GetFileSize (in: hFile=0x178, lpFileSizeHigh=0x31e5b0 | out: lpFileSizeHigh=0x31e5b0*=0x0) returned 0x7f4 [0060.304] ReadFile (in: hFile=0x178, lpBuffer=0x283d2c8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x31e55c, lpOverlapped=0x0 | out: lpBuffer=0x283d2c8*, lpNumberOfBytesRead=0x31e55c*=0x7f4, lpOverlapped=0x0) returned 1 [0060.305] CloseHandle (hObject=0x178) returned 1 [0060.346] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates\\VisualBasic\\1033\\Dialog.zip", nBufferLength=0x105, lpBuffer=0x31dfa0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates\\VisualBasic\\1033\\Dialog.zip", lpFilePart=0x0) returned 0x6b [0060.346] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e494) returned 1 [0060.346] CreateFileW (lpFileName="C:\\Program Files (x86)\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates\\VisualBasic\\1033\\Dialog.zip" (normalized: "c:\\program files (x86)\\microsoft visual studio 8\\common7\\ide\\vsta\\itemtemplates\\visualbasic\\1033\\dialog.zip"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x178 [0060.347] GetFileType (hFile=0x178) returned 0x1 [0060.347] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e490) returned 1 [0060.347] GetFileType (hFile=0x178) returned 0x1 [0060.347] WriteFile (in: hFile=0x178, lpBuffer=0x268f950*, nNumberOfBytesToWrite=0x800, lpNumberOfBytesWritten=0x31e524, lpOverlapped=0x0 | out: lpBuffer=0x268f950*, lpNumberOfBytesWritten=0x31e524*=0x800, lpOverlapped=0x0) returned 1 [0060.349] CloseHandle (hObject=0x178) returned 1 [0060.350] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates\\VisualBasic\\1033\\Dialog.zip", nBufferLength=0x105, lpBuffer=0x31e0d4, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates\\VisualBasic\\1033\\Dialog.zip", lpFilePart=0x0) returned 0x6b [0060.350] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates\\VisualBasic\\1033\\Dialog.zip", nBufferLength=0x105, lpBuffer=0x31e0d4, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates\\VisualBasic\\1033\\Dialog.zip", lpFilePart=0x0) returned 0x6b [0060.350] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e534) returned 1 [0060.350] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates\\VisualBasic\\1033\\Dialog.zip" (normalized: "c:\\program files (x86)\\microsoft visual studio 8\\common7\\ide\\vsta\\itemtemplates\\visualbasic\\1033\\dialog.zip"), fInfoLevelId=0x0, lpFileInformation=0x31e5b0 | out: lpFileInformation=0x31e5b0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8c501900, ftCreationTime.dwHighDateTime=0x1c9e43c, ftLastAccessTime.dwLowDateTime=0x10fa9fb0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x769ea20, ftLastWriteTime.dwHighDateTime=0x1d6eb7f, nFileSizeHigh=0x0, nFileSizeLow=0x800)) returned 1 [0060.350] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e530) returned 1 [0060.350] MoveFileW (lpExistingFileName="C:\\Program Files (x86)\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates\\VisualBasic\\1033\\Dialog.zip" (normalized: "c:\\program files (x86)\\microsoft visual studio 8\\common7\\ide\\vsta\\itemtemplates\\visualbasic\\1033\\dialog.zip"), lpNewFileName="C:\\Program Files (x86)\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates\\VisualBasic\\1033\\Dialog.zip" (normalized: "c:\\program files (x86)\\microsoft visual studio 8\\common7\\ide\\vsta\\itemtemplates\\visualbasic\\1033\\dialog.zip")) returned 1 [0060.350] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates\\VisualBasic\\1033\\EmptyDatabase.zip", nBufferLength=0x105, lpBuffer=0x31dfb4, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates\\VisualBasic\\1033\\EmptyDatabase.zip", lpFilePart=0x0) returned 0x72 [0060.350] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e4a8) returned 1 [0060.350] CreateFileW (lpFileName="C:\\Program Files (x86)\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates\\VisualBasic\\1033\\EmptyDatabase.zip" (normalized: "c:\\program files (x86)\\microsoft visual studio 8\\common7\\ide\\vsta\\itemtemplates\\visualbasic\\1033\\emptydatabase.zip"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x178 [0060.350] GetFileType (hFile=0x178) returned 0x1 [0060.351] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e4a4) returned 1 [0060.351] GetFileType (hFile=0x178) returned 0x1 [0060.351] GetFileSize (in: hFile=0x178, lpFileSizeHigh=0x31e5b0 | out: lpFileSizeHigh=0x31e5b0*=0x0) returned 0x35b [0060.351] ReadFile (in: hFile=0x178, lpBuffer=0x2691024, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x31e55c, lpOverlapped=0x0 | out: lpBuffer=0x2691024*, lpNumberOfBytesRead=0x31e55c*=0x35b, lpOverlapped=0x0) returned 1 [0060.352] CloseHandle (hObject=0x178) returned 1 [0060.365] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates\\VisualBasic\\1033\\EmptyDatabase.zip", nBufferLength=0x105, lpBuffer=0x31dfa0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates\\VisualBasic\\1033\\EmptyDatabase.zip", lpFilePart=0x0) returned 0x72 [0060.366] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e494) returned 1 [0060.366] CreateFileW (lpFileName="C:\\Program Files (x86)\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates\\VisualBasic\\1033\\EmptyDatabase.zip" (normalized: "c:\\program files (x86)\\microsoft visual studio 8\\common7\\ide\\vsta\\itemtemplates\\visualbasic\\1033\\emptydatabase.zip"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x178 [0060.366] GetFileType (hFile=0x178) returned 0x1 [0060.366] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e490) returned 1 [0060.366] GetFileType (hFile=0x178) returned 0x1 [0060.367] WriteFile (in: hFile=0x178, lpBuffer=0x26e01d8*, nNumberOfBytesToWrite=0x360, lpNumberOfBytesWritten=0x31e524, lpOverlapped=0x0 | out: lpBuffer=0x26e01d8*, lpNumberOfBytesWritten=0x31e524*=0x360, lpOverlapped=0x0) returned 1 [0060.367] CloseHandle (hObject=0x178) returned 1 [0060.367] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates\\VisualBasic\\1033\\EmptyDatabase.zip", nBufferLength=0x105, lpBuffer=0x31e0d4, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates\\VisualBasic\\1033\\EmptyDatabase.zip", lpFilePart=0x0) returned 0x72 [0060.367] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates\\VisualBasic\\1033\\EmptyDatabase.zip", nBufferLength=0x105, lpBuffer=0x31e0d4, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates\\VisualBasic\\1033\\EmptyDatabase.zip", lpFilePart=0x0) returned 0x72 [0060.368] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e534) returned 1 [0060.368] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates\\VisualBasic\\1033\\EmptyDatabase.zip" (normalized: "c:\\program files (x86)\\microsoft visual studio 8\\common7\\ide\\vsta\\itemtemplates\\visualbasic\\1033\\emptydatabase.zip"), fInfoLevelId=0x0, lpFileInformation=0x31e5b0 | out: lpFileInformation=0x31e5b0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8c501900, ftCreationTime.dwHighDateTime=0x1c9e43c, ftLastAccessTime.dwLowDateTime=0x10ff6270, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x76c4b80, ftLastWriteTime.dwHighDateTime=0x1d6eb7f, nFileSizeHigh=0x0, nFileSizeLow=0x360)) returned 1 [0060.368] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e530) returned 1 [0060.368] MoveFileW (lpExistingFileName="C:\\Program Files (x86)\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates\\VisualBasic\\1033\\EmptyDatabase.zip" (normalized: "c:\\program files (x86)\\microsoft visual studio 8\\common7\\ide\\vsta\\itemtemplates\\visualbasic\\1033\\emptydatabase.zip"), lpNewFileName="C:\\Program Files (x86)\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates\\VisualBasic\\1033\\EmptyDatabase.zip" (normalized: "c:\\program files (x86)\\microsoft visual studio 8\\common7\\ide\\vsta\\itemtemplates\\visualbasic\\1033\\emptydatabase.zip")) returned 1 [0060.368] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates\\VisualBasic\\1033\\Explorer.zip", nBufferLength=0x105, lpBuffer=0x31dfb4, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates\\VisualBasic\\1033\\Explorer.zip", lpFilePart=0x0) returned 0x6d [0060.368] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e4a8) returned 1 [0060.368] CreateFileW (lpFileName="C:\\Program Files (x86)\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates\\VisualBasic\\1033\\Explorer.zip" (normalized: "c:\\program files (x86)\\microsoft visual studio 8\\common7\\ide\\vsta\\itemtemplates\\visualbasic\\1033\\explorer.zip"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x178 [0060.368] GetFileType (hFile=0x178) returned 0x1 [0060.368] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e4a4) returned 1 [0060.368] GetFileType (hFile=0x178) returned 0x1 [0060.368] GetFileSize (in: hFile=0x178, lpFileSizeHigh=0x31e5b0 | out: lpFileSizeHigh=0x31e5b0*=0x0) returned 0x4faa [0060.369] ReadFile (in: hFile=0x178, lpBuffer=0x26e1550, nNumberOfBytesToRead=0x4faa, lpNumberOfBytesRead=0x31e55c, lpOverlapped=0x0 | out: lpBuffer=0x26e1550*, lpNumberOfBytesRead=0x31e55c*=0x4faa, lpOverlapped=0x0) returned 1 [0060.370] CloseHandle (hObject=0x178) returned 1 [0060.384] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates\\VisualBasic\\1033\\Explorer.zip", nBufferLength=0x105, lpBuffer=0x31dfa0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates\\VisualBasic\\1033\\Explorer.zip", lpFilePart=0x0) returned 0x6d [0060.384] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e494) returned 1 [0060.384] CreateFileW (lpFileName="C:\\Program Files (x86)\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates\\VisualBasic\\1033\\Explorer.zip" (normalized: "c:\\program files (x86)\\microsoft visual studio 8\\common7\\ide\\vsta\\itemtemplates\\visualbasic\\1033\\explorer.zip"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x178 [0060.385] GetFileType (hFile=0x178) returned 0x1 [0060.385] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e490) returned 1 [0060.385] GetFileType (hFile=0x178) returned 0x1 [0060.385] WriteFile (in: hFile=0x178, lpBuffer=0x27471a8*, nNumberOfBytesToWrite=0x4fb0, lpNumberOfBytesWritten=0x31e550, lpOverlapped=0x0 | out: lpBuffer=0x27471a8*, lpNumberOfBytesWritten=0x31e550*=0x4fb0, lpOverlapped=0x0) returned 1 [0060.386] CloseHandle (hObject=0x178) returned 1 [0060.386] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates\\VisualBasic\\1033\\Explorer.zip", nBufferLength=0x105, lpBuffer=0x31e0d4, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates\\VisualBasic\\1033\\Explorer.zip", lpFilePart=0x0) returned 0x6d [0060.386] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates\\VisualBasic\\1033\\Explorer.zip", nBufferLength=0x105, lpBuffer=0x31e0d4, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates\\VisualBasic\\1033\\Explorer.zip", lpFilePart=0x0) returned 0x6d [0060.386] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e534) returned 1 [0060.386] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates\\VisualBasic\\1033\\Explorer.zip" (normalized: "c:\\program files (x86)\\microsoft visual studio 8\\common7\\ide\\vsta\\itemtemplates\\visualbasic\\1033\\explorer.zip"), fInfoLevelId=0x0, lpFileInformation=0x31e5b0 | out: lpFileInformation=0x31e5b0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8c501900, ftCreationTime.dwHighDateTime=0x1c9e43c, ftLastAccessTime.dwLowDateTime=0x10ff6270, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x76eace0, ftLastWriteTime.dwHighDateTime=0x1d6eb7f, nFileSizeHigh=0x0, nFileSizeLow=0x4fb0)) returned 1 [0060.386] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e530) returned 1 [0060.386] MoveFileW (lpExistingFileName="C:\\Program Files (x86)\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates\\VisualBasic\\1033\\Explorer.zip" (normalized: "c:\\program files (x86)\\microsoft visual studio 8\\common7\\ide\\vsta\\itemtemplates\\visualbasic\\1033\\explorer.zip"), lpNewFileName="C:\\Program Files (x86)\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates\\VisualBasic\\1033\\Explorer.zip" (normalized: "c:\\program files (x86)\\microsoft visual studio 8\\common7\\ide\\vsta\\itemtemplates\\visualbasic\\1033\\explorer.zip")) returned 1 [0060.387] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates\\VisualBasic\\1033\\Form.zip", nBufferLength=0x105, lpBuffer=0x31dfb4, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates\\VisualBasic\\1033\\Form.zip", lpFilePart=0x0) returned 0x69 [0060.387] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e4a8) returned 1 [0060.387] CreateFileW (lpFileName="C:\\Program Files (x86)\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates\\VisualBasic\\1033\\Form.zip" (normalized: "c:\\program files (x86)\\microsoft visual studio 8\\common7\\ide\\vsta\\itemtemplates\\visualbasic\\1033\\form.zip"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x178 [0060.387] GetFileType (hFile=0x178) returned 0x1 [0060.387] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e4a4) returned 1 [0060.387] GetFileType (hFile=0x178) returned 0x1 [0060.387] GetFileSize (in: hFile=0x178, lpFileSizeHigh=0x31e5b0 | out: lpFileSizeHigh=0x31e5b0*=0x0) returned 0x514 [0060.387] ReadFile (in: hFile=0x178, lpBuffer=0x274cb34, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x31e55c, lpOverlapped=0x0 | out: lpBuffer=0x274cb34*, lpNumberOfBytesRead=0x31e55c*=0x514, lpOverlapped=0x0) returned 1 [0060.389] CloseHandle (hObject=0x178) returned 1 [0060.402] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates\\VisualBasic\\1033\\Form.zip", nBufferLength=0x105, lpBuffer=0x31dfa0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates\\VisualBasic\\1033\\Form.zip", lpFilePart=0x0) returned 0x69 [0060.402] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e494) returned 1 [0060.402] CreateFileW (lpFileName="C:\\Program Files (x86)\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates\\VisualBasic\\1033\\Form.zip" (normalized: "c:\\program files (x86)\\microsoft visual studio 8\\common7\\ide\\vsta\\itemtemplates\\visualbasic\\1033\\form.zip"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x178 [0060.403] GetFileType (hFile=0x178) returned 0x1 [0060.403] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e490) returned 1 [0060.403] GetFileType (hFile=0x178) returned 0x1 [0060.403] WriteFile (in: hFile=0x178, lpBuffer=0x279c42c*, nNumberOfBytesToWrite=0x520, lpNumberOfBytesWritten=0x31e524, lpOverlapped=0x0 | out: lpBuffer=0x279c42c*, lpNumberOfBytesWritten=0x31e524*=0x520, lpOverlapped=0x0) returned 1 [0060.404] CloseHandle (hObject=0x178) returned 1 [0060.404] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates\\VisualBasic\\1033\\Form.zip", nBufferLength=0x105, lpBuffer=0x31e0d4, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates\\VisualBasic\\1033\\Form.zip", lpFilePart=0x0) returned 0x69 [0060.404] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates\\VisualBasic\\1033\\Form.zip", nBufferLength=0x105, lpBuffer=0x31e0d4, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates\\VisualBasic\\1033\\Form.zip", lpFilePart=0x0) returned 0x69 [0060.404] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e534) returned 1 [0060.404] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates\\VisualBasic\\1033\\Form.zip" (normalized: "c:\\program files (x86)\\microsoft visual studio 8\\common7\\ide\\vsta\\itemtemplates\\visualbasic\\1033\\form.zip"), fInfoLevelId=0x0, lpFileInformation=0x31e5b0 | out: lpFileInformation=0x31e5b0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8c501900, ftCreationTime.dwHighDateTime=0x1c9e43c, ftLastAccessTime.dwLowDateTime=0x1101c3d0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x7736fa0, ftLastWriteTime.dwHighDateTime=0x1d6eb7f, nFileSizeHigh=0x0, nFileSizeLow=0x520)) returned 1 [0060.404] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e530) returned 1 [0060.404] MoveFileW (lpExistingFileName="C:\\Program Files (x86)\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates\\VisualBasic\\1033\\Form.zip" (normalized: "c:\\program files (x86)\\microsoft visual studio 8\\common7\\ide\\vsta\\itemtemplates\\visualbasic\\1033\\form.zip"), lpNewFileName="C:\\Program Files (x86)\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates\\VisualBasic\\1033\\Form.zip" (normalized: "c:\\program files (x86)\\microsoft visual studio 8\\common7\\ide\\vsta\\itemtemplates\\visualbasic\\1033\\form.zip")) returned 1 [0060.404] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates\\VisualBasic\\1033\\LoginForm.zip", nBufferLength=0x105, lpBuffer=0x31dfb4, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates\\VisualBasic\\1033\\LoginForm.zip", lpFilePart=0x0) returned 0x6e [0060.404] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e4a8) returned 1 [0060.405] CreateFileW (lpFileName="C:\\Program Files (x86)\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates\\VisualBasic\\1033\\LoginForm.zip" (normalized: "c:\\program files (x86)\\microsoft visual studio 8\\common7\\ide\\vsta\\itemtemplates\\visualbasic\\1033\\loginform.zip"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x178 [0060.405] GetFileType (hFile=0x178) returned 0x1 [0060.405] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e4a4) returned 1 [0060.405] GetFileType (hFile=0x178) returned 0x1 [0060.405] GetFileSize (in: hFile=0x178, lpFileSizeHigh=0x31e5b0 | out: lpFileSizeHigh=0x31e5b0*=0x0) returned 0xb090 [0060.405] ReadFile (in: hFile=0x178, lpBuffer=0x279d780, nNumberOfBytesToRead=0xb090, lpNumberOfBytesRead=0x31e55c, lpOverlapped=0x0 | out: lpBuffer=0x279d780*, lpNumberOfBytesRead=0x31e55c*=0xb090, lpOverlapped=0x0) returned 1 [0060.421] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates\\VisualBasic\\1033\\LoginForm.zip", nBufferLength=0x105, lpBuffer=0x31dfa0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates\\VisualBasic\\1033\\LoginForm.zip", lpFilePart=0x0) returned 0x6e [0060.421] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e494) returned 1 [0060.421] CreateFileW (lpFileName="C:\\Program Files (x86)\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates\\VisualBasic\\1033\\LoginForm.zip" (normalized: "c:\\program files (x86)\\microsoft visual studio 8\\common7\\ide\\vsta\\itemtemplates\\visualbasic\\1033\\loginform.zip"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x178 [0060.422] GetFileType (hFile=0x178) returned 0x1 [0060.422] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e490) returned 1 [0060.422] GetFileType (hFile=0x178) returned 0x1 [0060.422] WriteFile (in: hFile=0x178, lpBuffer=0x280b758*, nNumberOfBytesToWrite=0xb0a0, lpNumberOfBytesWritten=0x31e550, lpOverlapped=0x0 | out: lpBuffer=0x280b758*, lpNumberOfBytesWritten=0x31e550*=0xb0a0, lpOverlapped=0x0) returned 1 [0060.424] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates\\VisualBasic\\1033\\LoginForm.zip", nBufferLength=0x105, lpBuffer=0x31e0d4, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates\\VisualBasic\\1033\\LoginForm.zip", lpFilePart=0x0) returned 0x6e [0060.424] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates\\VisualBasic\\1033\\LoginForm.zip", nBufferLength=0x105, lpBuffer=0x31e0d4, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates\\VisualBasic\\1033\\LoginForm.zip", lpFilePart=0x0) returned 0x6e [0060.425] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e534) returned 1 [0060.425] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates\\VisualBasic\\1033\\LoginForm.zip" (normalized: "c:\\program files (x86)\\microsoft visual studio 8\\common7\\ide\\vsta\\itemtemplates\\visualbasic\\1033\\loginform.zip"), fInfoLevelId=0x0, lpFileInformation=0x31e5b0 | out: lpFileInformation=0x31e5b0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8c501900, ftCreationTime.dwHighDateTime=0x1c9e43c, ftLastAccessTime.dwLowDateTime=0x1101c3d0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x775d100, ftLastWriteTime.dwHighDateTime=0x1d6eb7f, nFileSizeHigh=0x0, nFileSizeLow=0xb0a0)) returned 1 [0060.425] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e530) returned 1 [0060.425] MoveFileW (lpExistingFileName="C:\\Program Files (x86)\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates\\VisualBasic\\1033\\LoginForm.zip" (normalized: "c:\\program files (x86)\\microsoft visual studio 8\\common7\\ide\\vsta\\itemtemplates\\visualbasic\\1033\\loginform.zip"), lpNewFileName="C:\\Program Files (x86)\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates\\VisualBasic\\1033\\LoginForm.zip" (normalized: "c:\\program files (x86)\\microsoft visual studio 8\\common7\\ide\\vsta\\itemtemplates\\visualbasic\\1033\\loginform.zip")) returned 1 [0060.425] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates\\VisualBasic\\1033\\MDIParent.zip", nBufferLength=0x105, lpBuffer=0x31dfb4, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates\\VisualBasic\\1033\\MDIParent.zip", lpFilePart=0x0) returned 0x6e [0060.425] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e4a8) returned 1 [0060.425] CreateFileW (lpFileName="C:\\Program Files (x86)\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates\\VisualBasic\\1033\\MDIParent.zip" (normalized: "c:\\program files (x86)\\microsoft visual studio 8\\common7\\ide\\vsta\\itemtemplates\\visualbasic\\1033\\mdiparent.zip"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x178 [0060.425] GetFileType (hFile=0x178) returned 0x1 [0060.425] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e4a4) returned 1 [0060.425] GetFileType (hFile=0x178) returned 0x1 [0060.425] GetFileSize (in: hFile=0x178, lpFileSizeHigh=0x31e5b0 | out: lpFileSizeHigh=0x31e5b0*=0x0) returned 0x36b7 [0060.425] ReadFile (in: hFile=0x178, lpBuffer=0x2816cd4, nNumberOfBytesToRead=0x36b7, lpNumberOfBytesRead=0x31e55c, lpOverlapped=0x0 | out: lpBuffer=0x2816cd4*, lpNumberOfBytesRead=0x31e55c*=0x36b7, lpOverlapped=0x0) returned 1 [0060.443] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates\\VisualBasic\\1033\\MDIParent.zip", nBufferLength=0x105, lpBuffer=0x31dfa0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates\\VisualBasic\\1033\\MDIParent.zip", lpFilePart=0x0) returned 0x6e [0060.443] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e494) returned 1 [0060.443] CreateFileW (lpFileName="C:\\Program Files (x86)\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates\\VisualBasic\\1033\\MDIParent.zip" (normalized: "c:\\program files (x86)\\microsoft visual studio 8\\common7\\ide\\vsta\\itemtemplates\\visualbasic\\1033\\mdiparent.zip"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x178 [0060.444] GetFileType (hFile=0x178) returned 0x1 [0060.444] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e490) returned 1 [0060.444] GetFileType (hFile=0x178) returned 0x1 [0060.444] WriteFile (in: hFile=0x178, lpBuffer=0x2677b4c*, nNumberOfBytesToWrite=0x36c0, lpNumberOfBytesWritten=0x31e550, lpOverlapped=0x0 | out: lpBuffer=0x2677b4c*, lpNumberOfBytesWritten=0x31e550*=0x36c0, lpOverlapped=0x0) returned 1 [0060.445] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates\\VisualBasic\\1033\\MDIParent.zip", nBufferLength=0x105, lpBuffer=0x31e0d4, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates\\VisualBasic\\1033\\MDIParent.zip", lpFilePart=0x0) returned 0x6e [0060.445] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates\\VisualBasic\\1033\\MDIParent.zip", nBufferLength=0x105, lpBuffer=0x31e0d4, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates\\VisualBasic\\1033\\MDIParent.zip", lpFilePart=0x0) returned 0x6e [0060.445] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e534) returned 1 [0060.445] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates\\VisualBasic\\1033\\MDIParent.zip" (normalized: "c:\\program files (x86)\\microsoft visual studio 8\\common7\\ide\\vsta\\itemtemplates\\visualbasic\\1033\\mdiparent.zip"), fInfoLevelId=0x0, lpFileInformation=0x31e5b0 | out: lpFileInformation=0x31e5b0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8c501900, ftCreationTime.dwHighDateTime=0x1c9e43c, ftLastAccessTime.dwLowDateTime=0x1101c3d0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x7783260, ftLastWriteTime.dwHighDateTime=0x1d6eb7f, nFileSizeHigh=0x0, nFileSizeLow=0x36c0)) returned 1 [0060.445] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e530) returned 1 [0060.445] MoveFileW (lpExistingFileName="C:\\Program Files (x86)\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates\\VisualBasic\\1033\\MDIParent.zip" (normalized: "c:\\program files (x86)\\microsoft visual studio 8\\common7\\ide\\vsta\\itemtemplates\\visualbasic\\1033\\mdiparent.zip"), lpNewFileName="C:\\Program Files (x86)\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates\\VisualBasic\\1033\\MDIParent.zip" (normalized: "c:\\program files (x86)\\microsoft visual studio 8\\common7\\ide\\vsta\\itemtemplates\\visualbasic\\1033\\mdiparent.zip")) returned 1 [0060.445] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates\\VisualBasic\\1033\\Module.zip", nBufferLength=0x105, lpBuffer=0x31dfb4, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates\\VisualBasic\\1033\\Module.zip", lpFilePart=0x0) returned 0x6b [0060.445] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e4a8) returned 1 [0060.446] CreateFileW (lpFileName="C:\\Program Files (x86)\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates\\VisualBasic\\1033\\Module.zip" (normalized: "c:\\program files (x86)\\microsoft visual studio 8\\common7\\ide\\vsta\\itemtemplates\\visualbasic\\1033\\module.zip"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x178 [0060.446] GetFileType (hFile=0x178) returned 0x1 [0060.446] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e4a4) returned 1 [0060.446] GetFileType (hFile=0x178) returned 0x1 [0060.446] GetFileSize (in: hFile=0x178, lpFileSizeHigh=0x31e5b0 | out: lpFileSizeHigh=0x31e5b0*=0x0) returned 0x24f [0060.446] ReadFile (in: hFile=0x178, lpBuffer=0x267b938, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x31e55c, lpOverlapped=0x0 | out: lpBuffer=0x267b938*, lpNumberOfBytesRead=0x31e55c*=0x24f, lpOverlapped=0x0) returned 1 [0060.460] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates\\VisualBasic\\1033\\Module.zip", nBufferLength=0x105, lpBuffer=0x31dfa0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates\\VisualBasic\\1033\\Module.zip", lpFilePart=0x0) returned 0x6b [0060.460] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e494) returned 1 [0060.460] CreateFileW (lpFileName="C:\\Program Files (x86)\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates\\VisualBasic\\1033\\Module.zip" (normalized: "c:\\program files (x86)\\microsoft visual studio 8\\common7\\ide\\vsta\\itemtemplates\\visualbasic\\1033\\module.zip"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x178 [0060.461] GetFileType (hFile=0x178) returned 0x1 [0060.461] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e490) returned 1 [0060.461] GetFileType (hFile=0x178) returned 0x1 [0060.461] WriteFile (in: hFile=0x178, lpBuffer=0x26ca57c*, nNumberOfBytesToWrite=0x250, lpNumberOfBytesWritten=0x31e524, lpOverlapped=0x0 | out: lpBuffer=0x26ca57c*, lpNumberOfBytesWritten=0x31e524*=0x250, lpOverlapped=0x0) returned 1 [0060.462] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates\\VisualBasic\\1033\\Module.zip", nBufferLength=0x105, lpBuffer=0x31e0d4, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates\\VisualBasic\\1033\\Module.zip", lpFilePart=0x0) returned 0x6b [0060.462] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates\\VisualBasic\\1033\\Module.zip", nBufferLength=0x105, lpBuffer=0x31e0d4, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates\\VisualBasic\\1033\\Module.zip", lpFilePart=0x0) returned 0x6b [0060.462] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e534) returned 1 [0060.462] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates\\VisualBasic\\1033\\Module.zip" (normalized: "c:\\program files (x86)\\microsoft visual studio 8\\common7\\ide\\vsta\\itemtemplates\\visualbasic\\1033\\module.zip"), fInfoLevelId=0x0, lpFileInformation=0x31e5b0 | out: lpFileInformation=0x31e5b0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8c501900, ftCreationTime.dwHighDateTime=0x1c9e43c, ftLastAccessTime.dwLowDateTime=0x11042530, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x77a93c0, ftLastWriteTime.dwHighDateTime=0x1d6eb7f, nFileSizeHigh=0x0, nFileSizeLow=0x250)) returned 1 [0060.462] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e530) returned 1 [0060.462] MoveFileW (lpExistingFileName="C:\\Program Files (x86)\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates\\VisualBasic\\1033\\Module.zip" (normalized: "c:\\program files (x86)\\microsoft visual studio 8\\common7\\ide\\vsta\\itemtemplates\\visualbasic\\1033\\module.zip"), lpNewFileName="C:\\Program Files (x86)\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates\\VisualBasic\\1033\\Module.zip" (normalized: "c:\\program files (x86)\\microsoft visual studio 8\\common7\\ide\\vsta\\itemtemplates\\visualbasic\\1033\\module.zip")) returned 1 [0060.462] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates\\VisualBasic\\1033\\ResourceInternal.zip", nBufferLength=0x105, lpBuffer=0x31dfb4, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates\\VisualBasic\\1033\\ResourceInternal.zip", lpFilePart=0x0) returned 0x75 [0060.462] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e4a8) returned 1 [0060.462] CreateFileW (lpFileName="C:\\Program Files (x86)\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates\\VisualBasic\\1033\\ResourceInternal.zip" (normalized: "c:\\program files (x86)\\microsoft visual studio 8\\common7\\ide\\vsta\\itemtemplates\\visualbasic\\1033\\resourceinternal.zip"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x178 [0060.463] GetFileType (hFile=0x178) returned 0x1 [0060.463] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e4a4) returned 1 [0060.463] GetFileType (hFile=0x178) returned 0x1 [0060.463] GetFileSize (in: hFile=0x178, lpFileSizeHigh=0x31e5b0 | out: lpFileSizeHigh=0x31e5b0*=0x0) returned 0x89b [0060.463] ReadFile (in: hFile=0x178, lpBuffer=0x26cc19c, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x31e55c, lpOverlapped=0x0 | out: lpBuffer=0x26cc19c*, lpNumberOfBytesRead=0x31e55c*=0x89b, lpOverlapped=0x0) returned 1 [0060.477] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates\\VisualBasic\\1033\\ResourceInternal.zip", nBufferLength=0x105, lpBuffer=0x31dfa0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates\\VisualBasic\\1033\\ResourceInternal.zip", lpFilePart=0x0) returned 0x75 [0060.477] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e494) returned 1 [0060.477] CreateFileW (lpFileName="C:\\Program Files (x86)\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates\\VisualBasic\\1033\\ResourceInternal.zip" (normalized: "c:\\program files (x86)\\microsoft visual studio 8\\common7\\ide\\vsta\\itemtemplates\\visualbasic\\1033\\resourceinternal.zip"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x178 [0060.478] GetFileType (hFile=0x178) returned 0x1 [0060.478] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e490) returned 1 [0060.478] GetFileType (hFile=0x178) returned 0x1 [0060.478] WriteFile (in: hFile=0x178, lpBuffer=0x271cc40*, nNumberOfBytesToWrite=0x8a0, lpNumberOfBytesWritten=0x31e524, lpOverlapped=0x0 | out: lpBuffer=0x271cc40*, lpNumberOfBytesWritten=0x31e524*=0x8a0, lpOverlapped=0x0) returned 1 [0060.479] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates\\VisualBasic\\1033\\ResourceInternal.zip", nBufferLength=0x105, lpBuffer=0x31e0d4, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates\\VisualBasic\\1033\\ResourceInternal.zip", lpFilePart=0x0) returned 0x75 [0060.479] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates\\VisualBasic\\1033\\ResourceInternal.zip", nBufferLength=0x105, lpBuffer=0x31e0d4, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates\\VisualBasic\\1033\\ResourceInternal.zip", lpFilePart=0x0) returned 0x75 [0060.479] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e534) returned 1 [0060.479] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates\\VisualBasic\\1033\\ResourceInternal.zip" (normalized: "c:\\program files (x86)\\microsoft visual studio 8\\common7\\ide\\vsta\\itemtemplates\\visualbasic\\1033\\resourceinternal.zip"), fInfoLevelId=0x0, lpFileInformation=0x31e5b0 | out: lpFileInformation=0x31e5b0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8c501900, ftCreationTime.dwHighDateTime=0x1c9e43c, ftLastAccessTime.dwLowDateTime=0x11100c10, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x77cf520, ftLastWriteTime.dwHighDateTime=0x1d6eb7f, nFileSizeHigh=0x0, nFileSizeLow=0x8a0)) returned 1 [0060.479] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e530) returned 1 [0060.479] MoveFileW (lpExistingFileName="C:\\Program Files (x86)\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates\\VisualBasic\\1033\\ResourceInternal.zip" (normalized: "c:\\program files (x86)\\microsoft visual studio 8\\common7\\ide\\vsta\\itemtemplates\\visualbasic\\1033\\resourceinternal.zip"), lpNewFileName="C:\\Program Files (x86)\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates\\VisualBasic\\1033\\ResourceInternal.zip" (normalized: "c:\\program files (x86)\\microsoft visual studio 8\\common7\\ide\\vsta\\itemtemplates\\visualbasic\\1033\\resourceinternal.zip")) returned 1 [0060.480] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates\\VisualBasic\\1033\\SettingsInternal.zip", nBufferLength=0x105, lpBuffer=0x31dfb4, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates\\VisualBasic\\1033\\SettingsInternal.zip", lpFilePart=0x0) returned 0x75 [0060.480] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e4a8) returned 1 [0060.480] CreateFileW (lpFileName="C:\\Program Files (x86)\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates\\VisualBasic\\1033\\SettingsInternal.zip" (normalized: "c:\\program files (x86)\\microsoft visual studio 8\\common7\\ide\\vsta\\itemtemplates\\visualbasic\\1033\\settingsinternal.zip"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x178 [0060.480] GetFileType (hFile=0x178) returned 0x1 [0060.480] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e4a4) returned 1 [0060.480] GetFileType (hFile=0x178) returned 0x1 [0060.480] GetFileSize (in: hFile=0x178, lpFileSizeHigh=0x31e5b0 | out: lpFileSizeHigh=0x31e5b0*=0x0) returned 0x419 [0060.480] ReadFile (in: hFile=0x178, lpBuffer=0x271e408, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x31e55c, lpOverlapped=0x0 | out: lpBuffer=0x271e408*, lpNumberOfBytesRead=0x31e55c*=0x419, lpOverlapped=0x0) returned 1 [0060.495] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates\\VisualBasic\\1033\\SettingsInternal.zip", nBufferLength=0x105, lpBuffer=0x31dfa0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates\\VisualBasic\\1033\\SettingsInternal.zip", lpFilePart=0x0) returned 0x75 [0060.495] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e494) returned 1 [0060.495] CreateFileW (lpFileName="C:\\Program Files (x86)\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates\\VisualBasic\\1033\\SettingsInternal.zip" (normalized: "c:\\program files (x86)\\microsoft visual studio 8\\common7\\ide\\vsta\\itemtemplates\\visualbasic\\1033\\settingsinternal.zip"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x178 [0060.496] GetFileType (hFile=0x178) returned 0x1 [0060.496] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e490) returned 1 [0060.496] GetFileType (hFile=0x178) returned 0x1 [0060.496] WriteFile (in: hFile=0x178, lpBuffer=0x276d82c*, nNumberOfBytesToWrite=0x420, lpNumberOfBytesWritten=0x31e524, lpOverlapped=0x0 | out: lpBuffer=0x276d82c*, lpNumberOfBytesWritten=0x31e524*=0x420, lpOverlapped=0x0) returned 1 [0060.497] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates\\VisualBasic\\1033\\SettingsInternal.zip", nBufferLength=0x105, lpBuffer=0x31e0d4, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates\\VisualBasic\\1033\\SettingsInternal.zip", lpFilePart=0x0) returned 0x75 [0060.497] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates\\VisualBasic\\1033\\SettingsInternal.zip", nBufferLength=0x105, lpBuffer=0x31e0d4, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates\\VisualBasic\\1033\\SettingsInternal.zip", lpFilePart=0x0) returned 0x75 [0060.497] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e534) returned 1 [0060.497] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates\\VisualBasic\\1033\\SettingsInternal.zip" (normalized: "c:\\program files (x86)\\microsoft visual studio 8\\common7\\ide\\vsta\\itemtemplates\\visualbasic\\1033\\settingsinternal.zip"), fInfoLevelId=0x0, lpFileInformation=0x31e5b0 | out: lpFileInformation=0x31e5b0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8c501900, ftCreationTime.dwHighDateTime=0x1c9e43c, ftLastAccessTime.dwLowDateTime=0x11100c10, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x781b7e0, ftLastWriteTime.dwHighDateTime=0x1d6eb7f, nFileSizeHigh=0x0, nFileSizeLow=0x420)) returned 1 [0060.498] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e530) returned 1 [0060.498] MoveFileW (lpExistingFileName="C:\\Program Files (x86)\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates\\VisualBasic\\1033\\SettingsInternal.zip" (normalized: "c:\\program files (x86)\\microsoft visual studio 8\\common7\\ide\\vsta\\itemtemplates\\visualbasic\\1033\\settingsinternal.zip"), lpNewFileName="C:\\Program Files (x86)\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates\\VisualBasic\\1033\\SettingsInternal.zip" (normalized: "c:\\program files (x86)\\microsoft visual studio 8\\common7\\ide\\vsta\\itemtemplates\\visualbasic\\1033\\settingsinternal.zip")) returned 1 [0060.498] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates\\VisualBasic\\1033\\SplashScreen.zip", nBufferLength=0x105, lpBuffer=0x31dfb4, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates\\VisualBasic\\1033\\SplashScreen.zip", lpFilePart=0x0) returned 0x71 [0060.498] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e4a8) returned 1 [0060.498] CreateFileW (lpFileName="C:\\Program Files (x86)\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates\\VisualBasic\\1033\\SplashScreen.zip" (normalized: "c:\\program files (x86)\\microsoft visual studio 8\\common7\\ide\\vsta\\itemtemplates\\visualbasic\\1033\\splashscreen.zip"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x178 [0060.498] GetFileType (hFile=0x178) returned 0x1 [0060.498] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e4a4) returned 1 [0060.498] GetFileType (hFile=0x178) returned 0x1 [0060.498] GetFileSize (in: hFile=0x178, lpFileSizeHigh=0x31e5b0 | out: lpFileSizeHigh=0x31e5b0*=0x0) returned 0xec16 [0060.498] ReadFile (in: hFile=0x178, lpBuffer=0x276ebbc, nNumberOfBytesToRead=0xec16, lpNumberOfBytesRead=0x31e55c, lpOverlapped=0x0 | out: lpBuffer=0x276ebbc*, lpNumberOfBytesRead=0x31e55c*=0xec16, lpOverlapped=0x0) returned 1 [0060.519] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates\\VisualBasic\\1033\\SplashScreen.zip", nBufferLength=0x105, lpBuffer=0x31dfa0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates\\VisualBasic\\1033\\SplashScreen.zip", lpFilePart=0x0) returned 0x71 [0060.519] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e494) returned 1 [0060.520] CreateFileW (lpFileName="C:\\Program Files (x86)\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates\\VisualBasic\\1033\\SplashScreen.zip" (normalized: "c:\\program files (x86)\\microsoft visual studio 8\\common7\\ide\\vsta\\itemtemplates\\visualbasic\\1033\\splashscreen.zip"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x178 [0060.521] GetFileType (hFile=0x178) returned 0x1 [0060.521] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e490) returned 1 [0060.521] GetFileType (hFile=0x178) returned 0x1 [0060.521] WriteFile (in: hFile=0x178, lpBuffer=0x27e7e18*, nNumberOfBytesToWrite=0xec20, lpNumberOfBytesWritten=0x31e550, lpOverlapped=0x0 | out: lpBuffer=0x27e7e18*, lpNumberOfBytesWritten=0x31e550*=0xec20, lpOverlapped=0x0) returned 1 [0060.523] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates\\VisualBasic\\1033\\SplashScreen.zip", nBufferLength=0x105, lpBuffer=0x31e0d4, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates\\VisualBasic\\1033\\SplashScreen.zip", lpFilePart=0x0) returned 0x71 [0060.523] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates\\VisualBasic\\1033\\SplashScreen.zip", nBufferLength=0x105, lpBuffer=0x31e0d4, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates\\VisualBasic\\1033\\SplashScreen.zip", lpFilePart=0x0) returned 0x71 [0060.523] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e534) returned 1 [0060.523] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates\\VisualBasic\\1033\\SplashScreen.zip" (normalized: "c:\\program files (x86)\\microsoft visual studio 8\\common7\\ide\\vsta\\itemtemplates\\visualbasic\\1033\\splashscreen.zip"), fInfoLevelId=0x0, lpFileInformation=0x31e5b0 | out: lpFileInformation=0x31e5b0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8c501900, ftCreationTime.dwHighDateTime=0x1c9e43c, ftLastAccessTime.dwLowDateTime=0x11126d70, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x7841940, ftLastWriteTime.dwHighDateTime=0x1d6eb7f, nFileSizeHigh=0x0, nFileSizeLow=0xec20)) returned 1 [0060.523] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e530) returned 1 [0060.523] MoveFileW (lpExistingFileName="C:\\Program Files (x86)\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates\\VisualBasic\\1033\\SplashScreen.zip" (normalized: "c:\\program files (x86)\\microsoft visual studio 8\\common7\\ide\\vsta\\itemtemplates\\visualbasic\\1033\\splashscreen.zip"), lpNewFileName="C:\\Program Files (x86)\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates\\VisualBasic\\1033\\SplashScreen.zip" (normalized: "c:\\program files (x86)\\microsoft visual studio 8\\common7\\ide\\vsta\\itemtemplates\\visualbasic\\1033\\splashscreen.zip")) returned 1 [0060.523] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates\\VisualBasic\\1033\\Text.zip", nBufferLength=0x105, lpBuffer=0x31dfb4, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates\\VisualBasic\\1033\\Text.zip", lpFilePart=0x0) returned 0x69 [0060.523] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e4a8) returned 1 [0060.523] CreateFileW (lpFileName="C:\\Program Files (x86)\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates\\VisualBasic\\1033\\Text.zip" (normalized: "c:\\program files (x86)\\microsoft visual studio 8\\common7\\ide\\vsta\\itemtemplates\\visualbasic\\1033\\text.zip"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x178 [0060.523] GetFileType (hFile=0x178) returned 0x1 [0060.524] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e4a4) returned 1 [0060.524] GetFileType (hFile=0x178) returned 0x1 [0060.524] GetFileSize (in: hFile=0x178, lpFileSizeHigh=0x31e5b0 | out: lpFileSizeHigh=0x31e5b0*=0x0) returned 0x22b [0060.524] ReadFile (in: hFile=0x178, lpBuffer=0x27f714c, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x31e55c, lpOverlapped=0x0 | out: lpBuffer=0x27f714c*, lpNumberOfBytesRead=0x31e55c*=0x22b, lpOverlapped=0x0) returned 1 [0060.538] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates\\VisualBasic\\1033\\Text.zip", nBufferLength=0x105, lpBuffer=0x31dfa0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates\\VisualBasic\\1033\\Text.zip", lpFilePart=0x0) returned 0x69 [0060.538] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e494) returned 1 [0060.538] CreateFileW (lpFileName="C:\\Program Files (x86)\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates\\VisualBasic\\1033\\Text.zip" (normalized: "c:\\program files (x86)\\microsoft visual studio 8\\common7\\ide\\vsta\\itemtemplates\\visualbasic\\1033\\text.zip"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x178 [0060.538] GetFileType (hFile=0x178) returned 0x1 [0060.538] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e490) returned 1 [0060.538] GetFileType (hFile=0x178) returned 0x1 [0060.539] WriteFile (in: hFile=0x178, lpBuffer=0x2845b90*, nNumberOfBytesToWrite=0x230, lpNumberOfBytesWritten=0x31e524, lpOverlapped=0x0 | out: lpBuffer=0x2845b90*, lpNumberOfBytesWritten=0x31e524*=0x230, lpOverlapped=0x0) returned 1 [0060.539] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates\\VisualBasic\\1033\\Text.zip", nBufferLength=0x105, lpBuffer=0x31e0d4, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates\\VisualBasic\\1033\\Text.zip", lpFilePart=0x0) returned 0x69 [0060.539] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates\\VisualBasic\\1033\\Text.zip", nBufferLength=0x105, lpBuffer=0x31e0d4, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates\\VisualBasic\\1033\\Text.zip", lpFilePart=0x0) returned 0x69 [0060.539] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e534) returned 1 [0060.540] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates\\VisualBasic\\1033\\Text.zip" (normalized: "c:\\program files (x86)\\microsoft visual studio 8\\common7\\ide\\vsta\\itemtemplates\\visualbasic\\1033\\text.zip"), fInfoLevelId=0x0, lpFileInformation=0x31e5b0 | out: lpFileInformation=0x31e5b0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8c501900, ftCreationTime.dwHighDateTime=0x1c9e43c, ftLastAccessTime.dwLowDateTime=0x111bf2f0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x7867aa0, ftLastWriteTime.dwHighDateTime=0x1d6eb7f, nFileSizeHigh=0x0, nFileSizeLow=0x230)) returned 1 [0060.540] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e530) returned 1 [0060.540] MoveFileW (lpExistingFileName="C:\\Program Files (x86)\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates\\VisualBasic\\1033\\Text.zip" (normalized: "c:\\program files (x86)\\microsoft visual studio 8\\common7\\ide\\vsta\\itemtemplates\\visualbasic\\1033\\text.zip"), lpNewFileName="C:\\Program Files (x86)\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates\\VisualBasic\\1033\\Text.zip" (normalized: "c:\\program files (x86)\\microsoft visual studio 8\\common7\\ide\\vsta\\itemtemplates\\visualbasic\\1033\\text.zip")) returned 1 [0060.540] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates\\VisualBasic\\1033\\UserControl.zip", nBufferLength=0x105, lpBuffer=0x31dfb4, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates\\VisualBasic\\1033\\UserControl.zip", lpFilePart=0x0) returned 0x70 [0060.540] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e4a8) returned 1 [0060.540] CreateFileW (lpFileName="C:\\Program Files (x86)\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates\\VisualBasic\\1033\\UserControl.zip" (normalized: "c:\\program files (x86)\\microsoft visual studio 8\\common7\\ide\\vsta\\itemtemplates\\visualbasic\\1033\\usercontrol.zip"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x178 [0060.540] GetFileType (hFile=0x178) returned 0x1 [0060.540] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e4a4) returned 1 [0060.540] GetFileType (hFile=0x178) returned 0x1 [0060.540] GetFileSize (in: hFile=0x178, lpFileSizeHigh=0x31e5b0 | out: lpFileSizeHigh=0x31e5b0*=0x0) returned 0x5b1 [0060.540] ReadFile (in: hFile=0x178, lpBuffer=0x28474ac, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x31e55c, lpOverlapped=0x0 | out: lpBuffer=0x28474ac*, lpNumberOfBytesRead=0x31e55c*=0x5b1, lpOverlapped=0x0) returned 1 [0060.560] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates\\VisualBasic\\1033\\UserControl.zip", nBufferLength=0x105, lpBuffer=0x31dfa0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates\\VisualBasic\\1033\\UserControl.zip", lpFilePart=0x0) returned 0x70 [0060.561] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e494) returned 1 [0060.561] CreateFileW (lpFileName="C:\\Program Files (x86)\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates\\VisualBasic\\1033\\UserControl.zip" (normalized: "c:\\program files (x86)\\microsoft visual studio 8\\common7\\ide\\vsta\\itemtemplates\\visualbasic\\1033\\usercontrol.zip"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x178 [0060.561] GetFileType (hFile=0x178) returned 0x1 [0060.561] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e490) returned 1 [0060.561] GetFileType (hFile=0x178) returned 0x1 [0060.562] WriteFile (in: hFile=0x178, lpBuffer=0x2693fb8*, nNumberOfBytesToWrite=0x5c0, lpNumberOfBytesWritten=0x31e524, lpOverlapped=0x0 | out: lpBuffer=0x2693fb8*, lpNumberOfBytesWritten=0x31e524*=0x5c0, lpOverlapped=0x0) returned 1 [0060.562] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates\\VisualBasic\\1033\\UserControl.zip", nBufferLength=0x105, lpBuffer=0x31e0d4, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates\\VisualBasic\\1033\\UserControl.zip", lpFilePart=0x0) returned 0x70 [0060.562] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates\\VisualBasic\\1033\\UserControl.zip", nBufferLength=0x105, lpBuffer=0x31e0d4, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates\\VisualBasic\\1033\\UserControl.zip", lpFilePart=0x0) returned 0x70 [0060.562] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e534) returned 1 [0060.563] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates\\VisualBasic\\1033\\UserControl.zip" (normalized: "c:\\program files (x86)\\microsoft visual studio 8\\common7\\ide\\vsta\\itemtemplates\\visualbasic\\1033\\usercontrol.zip"), fInfoLevelId=0x0, lpFileInformation=0x31e5b0 | out: lpFileInformation=0x31e5b0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8c501900, ftCreationTime.dwHighDateTime=0x1c9e43c, ftLastAccessTime.dwLowDateTime=0x1120b5b0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x78b3d60, ftLastWriteTime.dwHighDateTime=0x1d6eb7f, nFileSizeHigh=0x0, nFileSizeLow=0x5c0)) returned 1 [0060.563] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e530) returned 1 [0060.563] MoveFileW (lpExistingFileName="C:\\Program Files (x86)\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates\\VisualBasic\\1033\\UserControl.zip" (normalized: "c:\\program files (x86)\\microsoft visual studio 8\\common7\\ide\\vsta\\itemtemplates\\visualbasic\\1033\\usercontrol.zip"), lpNewFileName="C:\\Program Files (x86)\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates\\VisualBasic\\1033\\UserControl.zip" (normalized: "c:\\program files (x86)\\microsoft visual studio 8\\common7\\ide\\vsta\\itemtemplates\\visualbasic\\1033\\usercontrol.zip")) returned 1 [0060.563] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e7bc) returned 1 [0060.563] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Microsoft Visual Studio 8\\Common7\\Packages", nBufferLength=0x105, lpBuffer=0x31e2c4, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Microsoft Visual Studio 8\\Common7\\Packages", lpFilePart=0x0) returned 0x41 [0060.563] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Microsoft Visual Studio 8\\Common7\\Packages\\", nBufferLength=0x105, lpBuffer=0x31e298, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Microsoft Visual Studio 8\\Common7\\Packages\\", lpFilePart=0x0) returned 0x42 [0060.563] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Microsoft Visual Studio 8\\Common7\\Packages\\*", lpFindFileData=0x31e4e4 | out: lpFindFileData=0x31e4e4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x50e7acd0, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x50e7acd0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x50e7acd0, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x51079a0 [0060.563] FindNextFileW (in: hFindFile=0x51079a0, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x50e7acd0, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x50e7acd0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x50e7acd0, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0060.564] FindNextFileW (in: hFindFile=0x51079a0, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x50e7acd0, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x50e7acd0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x50e7acd0, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Debugger", cAlternateFileName="")) returned 1 [0060.564] FindNextFileW (in: hFindFile=0x51079a0, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x50e7acd0, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x50e7acd0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x50e7acd0, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Debugger", cAlternateFileName="")) returned 0 [0060.564] FindClose (in: hFindFile=0x51079a0 | out: hFindFile=0x51079a0) returned 1 [0060.564] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e77c) returned 1 [0060.564] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e788) returned 1 [0060.564] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e7bc) returned 1 [0060.564] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Microsoft Visual Studio 8\\Common7\\Packages", nBufferLength=0x105, lpBuffer=0x31e2c4, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Microsoft Visual Studio 8\\Common7\\Packages", lpFilePart=0x0) returned 0x41 [0060.564] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Microsoft Visual Studio 8\\Common7\\Packages\\", nBufferLength=0x105, lpBuffer=0x31e298, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Microsoft Visual Studio 8\\Common7\\Packages\\", lpFilePart=0x0) returned 0x42 [0060.564] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Microsoft Visual Studio 8\\Common7\\Packages\\*", lpFindFileData=0x31e4e4 | out: lpFindFileData=0x31e4e4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x50e7acd0, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x50e7acd0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x50e7acd0, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x51079a0 [0060.564] FindNextFileW (in: hFindFile=0x51079a0, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x50e7acd0, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x50e7acd0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x50e7acd0, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0060.565] FindNextFileW (in: hFindFile=0x51079a0, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x50e7acd0, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x50e7acd0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x50e7acd0, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Debugger", cAlternateFileName="")) returned 1 [0060.565] FindNextFileW (in: hFindFile=0x51079a0, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0060.565] FindClose (in: hFindFile=0x51079a0 | out: hFindFile=0x51079a0) returned 1 [0060.565] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e77c) returned 1 [0060.565] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e788) returned 1 [0060.565] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e744) returned 1 [0060.565] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Microsoft Visual Studio 8\\Common7\\Packages\\Debugger", nBufferLength=0x105, lpBuffer=0x31e24c, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Microsoft Visual Studio 8\\Common7\\Packages\\Debugger", lpFilePart=0x0) returned 0x4a [0060.565] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Microsoft Visual Studio 8\\Common7\\Packages\\Debugger\\", nBufferLength=0x105, lpBuffer=0x31e220, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Microsoft Visual Studio 8\\Common7\\Packages\\Debugger\\", lpFilePart=0x0) returned 0x4b [0060.565] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Microsoft Visual Studio 8\\Common7\\Packages\\Debugger\\*", lpFindFileData=0x31e46c | out: lpFindFileData=0x31e46c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x50e7acd0, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x50e7acd0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x50e7acd0, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x51079a0 [0060.565] FindNextFileW (in: hFindFile=0x51079a0, lpFindFileData=0x31e47c | out: lpFindFileData=0x31e47c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x50e7acd0, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x50e7acd0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x50e7acd0, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0060.565] FindNextFileW (in: hFindFile=0x51079a0, lpFindFileData=0x31e47c | out: lpFindFileData=0x31e47c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x50e7acd0, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x50e7acd0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x50e7acd0, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 0 [0060.566] FindClose (in: hFindFile=0x51079a0 | out: hFindFile=0x51079a0) returned 1 [0060.566] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e704) returned 1 [0060.566] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e710) returned 1 [0060.566] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e744) returned 1 [0060.566] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Microsoft Visual Studio 8\\Common7\\Packages\\Debugger", nBufferLength=0x105, lpBuffer=0x31e24c, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Microsoft Visual Studio 8\\Common7\\Packages\\Debugger", lpFilePart=0x0) returned 0x4a [0060.566] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Microsoft Visual Studio 8\\Common7\\Packages\\Debugger\\", nBufferLength=0x105, lpBuffer=0x31e220, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Microsoft Visual Studio 8\\Common7\\Packages\\Debugger\\", lpFilePart=0x0) returned 0x4b [0060.566] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Microsoft Visual Studio 8\\Common7\\Packages\\Debugger\\*", lpFindFileData=0x31e46c | out: lpFindFileData=0x31e46c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x50e7acd0, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x50e7acd0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x50e7acd0, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x51079a0 [0060.566] FindNextFileW (in: hFindFile=0x51079a0, lpFindFileData=0x31e47c | out: lpFindFileData=0x31e47c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x50e7acd0, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x50e7acd0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x50e7acd0, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0060.566] FindNextFileW (in: hFindFile=0x51079a0, lpFindFileData=0x31e47c | out: lpFindFileData=0x31e47c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x50e7acd0, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x50e7acd0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x50e7acd0, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 0 [0060.566] FindClose (in: hFindFile=0x51079a0 | out: hFindFile=0x51079a0) returned 1 [0060.566] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e704) returned 1 [0060.566] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e710) returned 1 [0060.566] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e834) returned 1 [0060.566] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Microsoft Visual Studio 8\\SDK", nBufferLength=0x105, lpBuffer=0x31e33c, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Microsoft Visual Studio 8\\SDK", lpFilePart=0x0) returned 0x34 [0060.566] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Microsoft Visual Studio 8\\SDK\\", nBufferLength=0x105, lpBuffer=0x31e310, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Microsoft Visual Studio 8\\SDK\\", lpFilePart=0x0) returned 0x35 [0060.567] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Microsoft Visual Studio 8\\SDK\\*", lpFindFileData=0x31e55c | out: lpFindFileData=0x31e55c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x10f11a30, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x10f11a30, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x10f11a30, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x51079a0 [0060.567] FindNextFileW (in: hFindFile=0x51079a0, lpFindFileData=0x31e56c | out: lpFindFileData=0x31e56c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x10f11a30, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x10f11a30, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x10f11a30, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0060.567] FindNextFileW (in: hFindFile=0x51079a0, lpFindFileData=0x31e56c | out: lpFindFileData=0x31e56c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x10f11a30, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x10f11a30, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x10f11a30, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 0 [0060.567] FindClose (in: hFindFile=0x51079a0 | out: hFindFile=0x51079a0) returned 1 [0060.567] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e7f4) returned 1 [0060.567] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e800) returned 1 [0060.567] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e834) returned 1 [0060.567] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Microsoft Visual Studio 8\\SDK", nBufferLength=0x105, lpBuffer=0x31e33c, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Microsoft Visual Studio 8\\SDK", lpFilePart=0x0) returned 0x34 [0060.567] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Microsoft Visual Studio 8\\SDK\\", nBufferLength=0x105, lpBuffer=0x31e310, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Microsoft Visual Studio 8\\SDK\\", lpFilePart=0x0) returned 0x35 [0060.567] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Microsoft Visual Studio 8\\SDK\\*", lpFindFileData=0x31e55c | out: lpFindFileData=0x31e55c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x10f11a30, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x10f11a30, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x10f11a30, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x51079a0 [0060.568] FindNextFileW (in: hFindFile=0x51079a0, lpFindFileData=0x31e56c | out: lpFindFileData=0x31e56c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x10f11a30, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x10f11a30, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x10f11a30, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0060.568] FindNextFileW (in: hFindFile=0x51079a0, lpFindFileData=0x31e56c | out: lpFindFileData=0x31e56c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x10f11a30, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x10f11a30, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x10f11a30, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 0 [0060.568] FindClose (in: hFindFile=0x51079a0 | out: hFindFile=0x51079a0) returned 1 [0060.568] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e7f4) returned 1 [0060.568] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e800) returned 1 [0060.568] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e834) returned 1 [0060.568] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Microsoft Visual Studio 8\\VSTA", nBufferLength=0x105, lpBuffer=0x31e33c, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Microsoft Visual Studio 8\\VSTA", lpFilePart=0x0) returned 0x35 [0060.568] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Microsoft Visual Studio 8\\VSTA\\", nBufferLength=0x105, lpBuffer=0x31e310, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Microsoft Visual Studio 8\\VSTA\\", lpFilePart=0x0) returned 0x36 [0060.568] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Microsoft Visual Studio 8\\VSTA\\*", lpFindFileData=0x31e55c | out: lpFindFileData=0x31e55c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1120b5b0, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x1120b5b0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x1120b5b0, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x51079a0 [0060.568] FindNextFileW (in: hFindFile=0x51079a0, lpFindFileData=0x31e56c | out: lpFindFileData=0x31e56c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1120b5b0, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x1120b5b0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x1120b5b0, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0060.569] FindNextFileW (in: hFindFile=0x51079a0, lpFindFileData=0x31e56c | out: lpFindFileData=0x31e56c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1120b5b0, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x527793d0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x527793d0, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Bin", cAlternateFileName="")) returned 1 [0060.569] FindNextFileW (in: hFindFile=0x51079a0, lpFindFileData=0x31e56c | out: lpFindFileData=0x31e56c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1120b5b0, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x527793d0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x527793d0, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Bin", cAlternateFileName="")) returned 0 [0060.569] FindClose (in: hFindFile=0x51079a0 | out: hFindFile=0x51079a0) returned 1 [0060.569] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e7f4) returned 1 [0060.569] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e800) returned 1 [0060.569] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e834) returned 1 [0060.569] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Microsoft Visual Studio 8\\VSTA", nBufferLength=0x105, lpBuffer=0x31e33c, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Microsoft Visual Studio 8\\VSTA", lpFilePart=0x0) returned 0x35 [0060.569] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Microsoft Visual Studio 8\\VSTA\\", nBufferLength=0x105, lpBuffer=0x31e310, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Microsoft Visual Studio 8\\VSTA\\", lpFilePart=0x0) returned 0x36 [0060.569] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Microsoft Visual Studio 8\\VSTA\\*", lpFindFileData=0x31e55c | out: lpFindFileData=0x31e55c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1120b5b0, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x1120b5b0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x1120b5b0, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x51079a0 [0060.569] FindNextFileW (in: hFindFile=0x51079a0, lpFindFileData=0x31e56c | out: lpFindFileData=0x31e56c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1120b5b0, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x1120b5b0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x1120b5b0, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0060.569] FindNextFileW (in: hFindFile=0x51079a0, lpFindFileData=0x31e56c | out: lpFindFileData=0x31e56c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1120b5b0, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x527793d0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x527793d0, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Bin", cAlternateFileName="")) returned 1 [0060.569] FindNextFileW (in: hFindFile=0x51079a0, lpFindFileData=0x31e56c | out: lpFindFileData=0x31e56c*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0060.570] FindClose (in: hFindFile=0x51079a0 | out: hFindFile=0x51079a0) returned 1 [0060.570] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e7f4) returned 1 [0060.570] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e800) returned 1 [0060.570] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e7bc) returned 1 [0060.570] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Microsoft Visual Studio 8\\VSTA\\Bin", nBufferLength=0x105, lpBuffer=0x31e2c4, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Microsoft Visual Studio 8\\VSTA\\Bin", lpFilePart=0x0) returned 0x39 [0060.570] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Microsoft Visual Studio 8\\VSTA\\Bin\\", nBufferLength=0x105, lpBuffer=0x31e298, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Microsoft Visual Studio 8\\VSTA\\Bin\\", lpFilePart=0x0) returned 0x3a [0060.570] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Microsoft Visual Studio 8\\VSTA\\Bin\\*", lpFindFileData=0x31e4e4 | out: lpFindFileData=0x31e4e4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1120b5b0, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x527793d0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x527793d0, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x51079a0 [0060.570] FindNextFileW (in: hFindFile=0x51079a0, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1120b5b0, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x527793d0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x527793d0, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0060.570] FindNextFileW (in: hFindFile=0x51079a0, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1120b5b0, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x11231710, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x11231710, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="1033", cAlternateFileName="")) returned 1 [0060.570] FindNextFileW (in: hFindFile=0x51079a0, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x557a0300, ftCreationTime.dwHighDateTime=0x1c9e43c, ftLastAccessTime.dwLowDateTime=0x527793d0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x557a0300, ftLastWriteTime.dwHighDateTime=0x1c9e43c, nFileSizeHigh=0x0, nFileSizeLow=0x11348, dwReserved0=0x0, dwReserved1=0x0, cFileName="VSTAClientPkg.dll", cAlternateFileName="VSTACL~1.DLL")) returned 1 [0060.571] FindNextFileW (in: hFindFile=0x51079a0, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x51e67c00, ftCreationTime.dwHighDateTime=0x1c9e43c, ftLastAccessTime.dwLowDateTime=0x527793d0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x51e67c00, ftLastWriteTime.dwHighDateTime=0x1c9e43c, nFileSizeHigh=0x0, nFileSizeLow=0x4a548, dwReserved0=0x0, dwReserved1=0x0, cFileName="VSTAProject.dll", cAlternateFileName="VSTAPR~1.DLL")) returned 1 [0060.571] FindNextFileW (in: hFindFile=0x51079a0, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0060.571] FindClose (in: hFindFile=0x51079a0 | out: hFindFile=0x51079a0) returned 1 [0060.572] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e77c) returned 1 [0060.572] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e788) returned 1 [0060.572] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e7bc) returned 1 [0060.572] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Microsoft Visual Studio 8\\VSTA\\Bin", nBufferLength=0x105, lpBuffer=0x31e2c4, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Microsoft Visual Studio 8\\VSTA\\Bin", lpFilePart=0x0) returned 0x39 [0060.572] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Microsoft Visual Studio 8\\VSTA\\Bin\\", nBufferLength=0x105, lpBuffer=0x31e298, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Microsoft Visual Studio 8\\VSTA\\Bin\\", lpFilePart=0x0) returned 0x3a [0060.573] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Microsoft Visual Studio 8\\VSTA\\Bin\\*", lpFindFileData=0x31e4e4 | out: lpFindFileData=0x31e4e4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1120b5b0, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x527793d0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x527793d0, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x51079a0 [0060.573] FindNextFileW (in: hFindFile=0x51079a0, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1120b5b0, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x527793d0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x527793d0, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0060.573] FindNextFileW (in: hFindFile=0x51079a0, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1120b5b0, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x11231710, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x11231710, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="1033", cAlternateFileName="")) returned 1 [0060.573] FindNextFileW (in: hFindFile=0x51079a0, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x557a0300, ftCreationTime.dwHighDateTime=0x1c9e43c, ftLastAccessTime.dwLowDateTime=0x527793d0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x557a0300, ftLastWriteTime.dwHighDateTime=0x1c9e43c, nFileSizeHigh=0x0, nFileSizeLow=0x11348, dwReserved0=0x0, dwReserved1=0x0, cFileName="VSTAClientPkg.dll", cAlternateFileName="VSTACL~1.DLL")) returned 1 [0060.573] FindNextFileW (in: hFindFile=0x51079a0, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x51e67c00, ftCreationTime.dwHighDateTime=0x1c9e43c, ftLastAccessTime.dwLowDateTime=0x527793d0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x51e67c00, ftLastWriteTime.dwHighDateTime=0x1c9e43c, nFileSizeHigh=0x0, nFileSizeLow=0x4a548, dwReserved0=0x0, dwReserved1=0x0, cFileName="VSTAProject.dll", cAlternateFileName="VSTAPR~1.DLL")) returned 1 [0060.573] FindNextFileW (in: hFindFile=0x51079a0, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x51e67c00, ftCreationTime.dwHighDateTime=0x1c9e43c, ftLastAccessTime.dwLowDateTime=0x527793d0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x51e67c00, ftLastWriteTime.dwHighDateTime=0x1c9e43c, nFileSizeHigh=0x0, nFileSizeLow=0x4a548, dwReserved0=0x0, dwReserved1=0x0, cFileName="VSTAProject.dll", cAlternateFileName="VSTAPR~1.DLL")) returned 0 [0060.573] FindClose (in: hFindFile=0x51079a0 | out: hFindFile=0x51079a0) returned 1 [0060.573] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e77c) returned 1 [0060.574] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e788) returned 1 [0060.574] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e744) returned 1 [0060.574] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Microsoft Visual Studio 8\\VSTA\\Bin\\1033", nBufferLength=0x105, lpBuffer=0x31e24c, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Microsoft Visual Studio 8\\VSTA\\Bin\\1033", lpFilePart=0x0) returned 0x3e [0060.574] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Microsoft Visual Studio 8\\VSTA\\Bin\\1033\\", nBufferLength=0x105, lpBuffer=0x31e220, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Microsoft Visual Studio 8\\VSTA\\Bin\\1033\\", lpFilePart=0x0) returned 0x3f [0060.574] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Microsoft Visual Studio 8\\VSTA\\Bin\\1033\\*", lpFindFileData=0x31e46c | out: lpFindFileData=0x31e46c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1120b5b0, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x11231710, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x11231710, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x51079a0 [0060.574] FindNextFileW (in: hFindFile=0x51079a0, lpFindFileData=0x31e47c | out: lpFindFileData=0x31e47c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1120b5b0, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x11231710, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x11231710, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0060.574] FindNextFileW (in: hFindFile=0x51079a0, lpFindFileData=0x31e47c | out: lpFindFileData=0x31e47c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4bf09b00, ftCreationTime.dwHighDateTime=0x1c9e43c, ftLastAccessTime.dwLowDateTime=0x11231710, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x4bf09b00, ftLastWriteTime.dwHighDateTime=0x1c9e43c, nFileSizeHigh=0x0, nFileSizeLow=0x2b60, dwReserved0=0x0, dwReserved1=0x0, cFileName="VSTAClientPkgUI.dll", cAlternateFileName="VSTACL~1.DLL")) returned 1 [0060.574] FindNextFileW (in: hFindFile=0x51079a0, lpFindFileData=0x31e47c | out: lpFindFileData=0x31e47c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x498e4100, ftCreationTime.dwHighDateTime=0x1c9e43c, ftLastAccessTime.dwLowDateTime=0x11231710, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x498e4100, ftLastWriteTime.dwHighDateTime=0x1c9e43c, nFileSizeHigh=0x0, nFileSizeLow=0x7958, dwReserved0=0x0, dwReserved1=0x0, cFileName="VSTAProjectUI.dll", cAlternateFileName="VSTAPR~1.DLL")) returned 1 [0060.574] FindNextFileW (in: hFindFile=0x51079a0, lpFindFileData=0x31e47c | out: lpFindFileData=0x31e47c*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0060.574] FindClose (in: hFindFile=0x51079a0 | out: hFindFile=0x51079a0) returned 1 [0060.575] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e704) returned 1 [0060.575] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e710) returned 1 [0060.575] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e744) returned 1 [0060.575] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Microsoft Visual Studio 8\\VSTA\\Bin\\1033", nBufferLength=0x105, lpBuffer=0x31e24c, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Microsoft Visual Studio 8\\VSTA\\Bin\\1033", lpFilePart=0x0) returned 0x3e [0060.575] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Microsoft Visual Studio 8\\VSTA\\Bin\\1033\\", nBufferLength=0x105, lpBuffer=0x31e220, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Microsoft Visual Studio 8\\VSTA\\Bin\\1033\\", lpFilePart=0x0) returned 0x3f [0060.575] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Microsoft Visual Studio 8\\VSTA\\Bin\\1033\\*", lpFindFileData=0x31e46c | out: lpFindFileData=0x31e46c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1120b5b0, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x11231710, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x11231710, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x51079a0 [0060.575] FindNextFileW (in: hFindFile=0x51079a0, lpFindFileData=0x31e47c | out: lpFindFileData=0x31e47c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1120b5b0, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x11231710, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x11231710, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0060.575] FindNextFileW (in: hFindFile=0x51079a0, lpFindFileData=0x31e47c | out: lpFindFileData=0x31e47c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4bf09b00, ftCreationTime.dwHighDateTime=0x1c9e43c, ftLastAccessTime.dwLowDateTime=0x11231710, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x4bf09b00, ftLastWriteTime.dwHighDateTime=0x1c9e43c, nFileSizeHigh=0x0, nFileSizeLow=0x2b60, dwReserved0=0x0, dwReserved1=0x0, cFileName="VSTAClientPkgUI.dll", cAlternateFileName="VSTACL~1.DLL")) returned 1 [0060.575] FindNextFileW (in: hFindFile=0x51079a0, lpFindFileData=0x31e47c | out: lpFindFileData=0x31e47c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x498e4100, ftCreationTime.dwHighDateTime=0x1c9e43c, ftLastAccessTime.dwLowDateTime=0x11231710, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x498e4100, ftLastWriteTime.dwHighDateTime=0x1c9e43c, nFileSizeHigh=0x0, nFileSizeLow=0x7958, dwReserved0=0x0, dwReserved1=0x0, cFileName="VSTAProjectUI.dll", cAlternateFileName="VSTAPR~1.DLL")) returned 1 [0060.576] FindNextFileW (in: hFindFile=0x51079a0, lpFindFileData=0x31e47c | out: lpFindFileData=0x31e47c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x498e4100, ftCreationTime.dwHighDateTime=0x1c9e43c, ftLastAccessTime.dwLowDateTime=0x11231710, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x498e4100, ftLastWriteTime.dwHighDateTime=0x1c9e43c, nFileSizeHigh=0x0, nFileSizeLow=0x7958, dwReserved0=0x0, dwReserved1=0x0, cFileName="VSTAProjectUI.dll", cAlternateFileName="VSTAPR~1.DLL")) returned 0 [0060.576] FindClose (in: hFindFile=0x51079a0 | out: hFindFile=0x51079a0) returned 1 [0060.576] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e704) returned 1 [0060.576] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e710) returned 1 [0060.576] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e8ac) returned 1 [0060.576] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Microsoft.NET", nBufferLength=0x105, lpBuffer=0x31e3b4, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Microsoft.NET", lpFilePart=0x0) returned 0x24 [0060.576] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Microsoft.NET\\", nBufferLength=0x105, lpBuffer=0x31e388, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Microsoft.NET\\", lpFilePart=0x0) returned 0x25 [0060.576] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Microsoft.NET\\*", lpFindFileData=0x31e5d4 | out: lpFindFileData=0x31e5d4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1f1bbe30, ftCreationTime.dwHighDateTime=0x1d2dda2, ftLastAccessTime.dwLowDateTime=0xd93a0b60, ftLastAccessTime.dwHighDateTime=0x1d5e82a, ftLastWriteTime.dwLowDateTime=0xd93a0b60, ftLastWriteTime.dwHighDateTime=0x1d5e82a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x51079a0 [0060.576] FindNextFileW (in: hFindFile=0x51079a0, lpFindFileData=0x31e5e4 | out: lpFindFileData=0x31e5e4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1f1bbe30, ftCreationTime.dwHighDateTime=0x1d2dda2, ftLastAccessTime.dwLowDateTime=0xd93a0b60, ftLastAccessTime.dwHighDateTime=0x1d5e82a, ftLastWriteTime.dwLowDateTime=0xd93a0b60, ftLastWriteTime.dwHighDateTime=0x1d5e82a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0060.576] FindNextFileW (in: hFindFile=0x51079a0, lpFindFileData=0x31e5e4 | out: lpFindFileData=0x31e5e4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x50e54b70, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x5abe1b90, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x5abe1b90, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Primary Interop Assemblies", cAlternateFileName="PRIMAR~1")) returned 1 [0060.576] FindNextFileW (in: hFindFile=0x51079a0, lpFindFileData=0x31e5e4 | out: lpFindFileData=0x31e5e4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8a491400, ftCreationTime.dwHighDateTime=0x1d2e621, ftLastAccessTime.dwLowDateTime=0x9ea84660, ftLastAccessTime.dwHighDateTime=0x1d2e675, ftLastWriteTime.dwLowDateTime=0x9ea84660, ftLastWriteTime.dwHighDateTime=0x1d2e675, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="RedistList", cAlternateFileName="REDIST~1")) returned 1 [0060.577] FindNextFileW (in: hFindFile=0x51079a0, lpFindFileData=0x31e5e4 | out: lpFindFileData=0x31e5e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x118cbbe0, ftCreationTime.dwHighDateTime=0x1d568db, ftLastAccessTime.dwLowDateTime=0xf190c9c0, ftLastAccessTime.dwHighDateTime=0x1d592ed, ftLastWriteTime.dwLowDateTime=0xf190c9c0, ftLastWriteTime.dwHighDateTime=0x1d592ed, nFileSizeHigh=0x0, nFileSizeLow=0x13a00, dwReserved0=0x0, dwReserved1=0x0, cFileName="supply_closes_immigration.exe", cAlternateFileName="SUPPLY~1.EXE")) returned 1 [0060.577] FindNextFileW (in: hFindFile=0x51079a0, lpFindFileData=0x31e5e4 | out: lpFindFileData=0x31e5e4*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0060.577] FindClose (in: hFindFile=0x51079a0 | out: hFindFile=0x51079a0) returned 1 [0060.577] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e86c) returned 1 [0060.577] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e878) returned 1 [0060.577] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e8ac) returned 1 [0060.577] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Microsoft.NET", nBufferLength=0x105, lpBuffer=0x31e3b4, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Microsoft.NET", lpFilePart=0x0) returned 0x24 [0060.577] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Microsoft.NET\\", nBufferLength=0x105, lpBuffer=0x31e388, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Microsoft.NET\\", lpFilePart=0x0) returned 0x25 [0060.577] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Microsoft.NET\\*", lpFindFileData=0x31e5d4 | out: lpFindFileData=0x31e5d4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1f1bbe30, ftCreationTime.dwHighDateTime=0x1d2dda2, ftLastAccessTime.dwLowDateTime=0xd93a0b60, ftLastAccessTime.dwHighDateTime=0x1d5e82a, ftLastWriteTime.dwLowDateTime=0xd93a0b60, ftLastWriteTime.dwHighDateTime=0x1d5e82a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x51079a0 [0060.577] FindNextFileW (in: hFindFile=0x51079a0, lpFindFileData=0x31e5e4 | out: lpFindFileData=0x31e5e4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1f1bbe30, ftCreationTime.dwHighDateTime=0x1d2dda2, ftLastAccessTime.dwLowDateTime=0xd93a0b60, ftLastAccessTime.dwHighDateTime=0x1d5e82a, ftLastWriteTime.dwLowDateTime=0xd93a0b60, ftLastWriteTime.dwHighDateTime=0x1d5e82a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0060.577] FindNextFileW (in: hFindFile=0x51079a0, lpFindFileData=0x31e5e4 | out: lpFindFileData=0x31e5e4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x50e54b70, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x5abe1b90, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x5abe1b90, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Primary Interop Assemblies", cAlternateFileName="PRIMAR~1")) returned 1 [0060.578] FindNextFileW (in: hFindFile=0x51079a0, lpFindFileData=0x31e5e4 | out: lpFindFileData=0x31e5e4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8a491400, ftCreationTime.dwHighDateTime=0x1d2e621, ftLastAccessTime.dwLowDateTime=0x9ea84660, ftLastAccessTime.dwHighDateTime=0x1d2e675, ftLastWriteTime.dwLowDateTime=0x9ea84660, ftLastWriteTime.dwHighDateTime=0x1d2e675, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="RedistList", cAlternateFileName="REDIST~1")) returned 1 [0060.578] FindNextFileW (in: hFindFile=0x51079a0, lpFindFileData=0x31e5e4 | out: lpFindFileData=0x31e5e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x118cbbe0, ftCreationTime.dwHighDateTime=0x1d568db, ftLastAccessTime.dwLowDateTime=0xf190c9c0, ftLastAccessTime.dwHighDateTime=0x1d592ed, ftLastWriteTime.dwLowDateTime=0xf190c9c0, ftLastWriteTime.dwHighDateTime=0x1d592ed, nFileSizeHigh=0x0, nFileSizeLow=0x13a00, dwReserved0=0x0, dwReserved1=0x0, cFileName="supply_closes_immigration.exe", cAlternateFileName="SUPPLY~1.EXE")) returned 1 [0060.578] FindNextFileW (in: hFindFile=0x51079a0, lpFindFileData=0x31e5e4 | out: lpFindFileData=0x31e5e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x118cbbe0, ftCreationTime.dwHighDateTime=0x1d568db, ftLastAccessTime.dwLowDateTime=0xf190c9c0, ftLastAccessTime.dwHighDateTime=0x1d592ed, ftLastWriteTime.dwLowDateTime=0xf190c9c0, ftLastWriteTime.dwHighDateTime=0x1d592ed, nFileSizeHigh=0x0, nFileSizeLow=0x13a00, dwReserved0=0x0, dwReserved1=0x0, cFileName="supply_closes_immigration.exe", cAlternateFileName="SUPPLY~1.EXE")) returned 0 [0060.578] FindClose (in: hFindFile=0x51079a0 | out: hFindFile=0x51079a0) returned 1 [0060.578] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e86c) returned 1 [0060.578] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e878) returned 1 [0060.578] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e834) returned 1 [0060.578] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Microsoft.NET\\Primary Interop Assemblies", nBufferLength=0x105, lpBuffer=0x31e33c, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Microsoft.NET\\Primary Interop Assemblies", lpFilePart=0x0) returned 0x3f [0060.578] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Microsoft.NET\\Primary Interop Assemblies\\", nBufferLength=0x105, lpBuffer=0x31e310, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Microsoft.NET\\Primary Interop Assemblies\\", lpFilePart=0x0) returned 0x40 [0060.578] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Microsoft.NET\\Primary Interop Assemblies\\*", lpFindFileData=0x31e55c | out: lpFindFileData=0x31e55c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x50e54b70, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x5abe1b90, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x5abe1b90, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x51079a0 [0060.580] FindNextFileW (in: hFindFile=0x51079a0, lpFindFileData=0x31e56c | out: lpFindFileData=0x31e56c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x50e54b70, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x5abe1b90, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x5abe1b90, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0060.580] FindNextFileW (in: hFindFile=0x51079a0, lpFindFileData=0x31e56c | out: lpFindFileData=0x31e56c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd106f400, ftCreationTime.dwHighDateTime=0x1c2a173, ftLastAccessTime.dwLowDateTime=0x522b67d0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xd106f400, ftLastWriteTime.dwHighDateTime=0x1c2a173, nFileSizeHigh=0x0, nFileSizeLow=0x1b000, dwReserved0=0x0, dwReserved1=0x0, cFileName="adodb.dll", cAlternateFileName="")) returned 1 [0060.580] FindNextFileW (in: hFindFile=0x51079a0, lpFindFileData=0x31e56c | out: lpFindFileData=0x31e56c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1c210700, ftCreationTime.dwHighDateTime=0x1c2a174, ftLastAccessTime.dwLowDateTime=0x523e72d0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x1c210700, ftLastWriteTime.dwHighDateTime=0x1c2a174, nFileSizeHigh=0x0, nFileSizeLow=0x7a3000, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.mshtml.dll", cAlternateFileName="MICROS~1.DLL")) returned 1 [0060.580] FindNextFileW (in: hFindFile=0x51079a0, lpFindFileData=0x31e56c | out: lpFindFileData=0x31e56c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe8de7800, ftCreationTime.dwHighDateTime=0x1c2a173, ftLastAccessTime.dwLowDateTime=0x5253df30, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xe8de7800, ftLastWriteTime.dwHighDateTime=0x1c2a173, nFileSizeHigh=0x0, nFileSizeLow=0x3400, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.stdformat.dll", cAlternateFileName="MICROS~2.DLL")) returned 1 [0060.580] FindNextFileW (in: hFindFile=0x51079a0, lpFindFileData=0x31e56c | out: lpFindFileData=0x31e56c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1e72900, ftCreationTime.dwHighDateTime=0x1c2a174, ftLastAccessTime.dwLowDateTime=0x526bacf0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x1e72900, ftLastWriteTime.dwHighDateTime=0x1c2a174, nFileSizeHigh=0x0, nFileSizeLow=0x1000, dwReserved0=0x0, dwReserved1=0x0, cFileName="msdatasrc.dll", cAlternateFileName="MSDATA~1.DLL")) returned 1 [0060.581] FindNextFileW (in: hFindFile=0x51079a0, lpFindFileData=0x31e56c | out: lpFindFileData=0x31e56c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe2e89700, ftCreationTime.dwHighDateTime=0x1c2a173, ftLastAccessTime.dwLowDateTime=0x5abe1b90, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xe2e89700, ftLastWriteTime.dwHighDateTime=0x1c2a173, nFileSizeHigh=0x0, nFileSizeLow=0x4000, dwReserved0=0x0, dwReserved1=0x0, cFileName="stdole.dll", cAlternateFileName="")) returned 1 [0060.581] FindNextFileW (in: hFindFile=0x51079a0, lpFindFileData=0x31e56c | out: lpFindFileData=0x31e56c*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0060.581] FindClose (in: hFindFile=0x51079a0 | out: hFindFile=0x51079a0) returned 1 [0060.581] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e7f4) returned 1 [0060.581] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e800) returned 1 [0060.581] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e834) returned 1 [0060.581] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Microsoft.NET\\Primary Interop Assemblies", nBufferLength=0x105, lpBuffer=0x31e33c, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Microsoft.NET\\Primary Interop Assemblies", lpFilePart=0x0) returned 0x3f [0060.582] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Microsoft.NET\\Primary Interop Assemblies\\", nBufferLength=0x105, lpBuffer=0x31e310, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Microsoft.NET\\Primary Interop Assemblies\\", lpFilePart=0x0) returned 0x40 [0060.582] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Microsoft.NET\\Primary Interop Assemblies\\*", lpFindFileData=0x31e55c | out: lpFindFileData=0x31e55c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x50e54b70, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x5abe1b90, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x5abe1b90, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x51079a0 [0060.582] FindNextFileW (in: hFindFile=0x51079a0, lpFindFileData=0x31e56c | out: lpFindFileData=0x31e56c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x50e54b70, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x5abe1b90, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x5abe1b90, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0060.583] FindNextFileW (in: hFindFile=0x51079a0, lpFindFileData=0x31e56c | out: lpFindFileData=0x31e56c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd106f400, ftCreationTime.dwHighDateTime=0x1c2a173, ftLastAccessTime.dwLowDateTime=0x522b67d0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xd106f400, ftLastWriteTime.dwHighDateTime=0x1c2a173, nFileSizeHigh=0x0, nFileSizeLow=0x1b000, dwReserved0=0x0, dwReserved1=0x0, cFileName="adodb.dll", cAlternateFileName="")) returned 1 [0060.583] FindNextFileW (in: hFindFile=0x51079a0, lpFindFileData=0x31e56c | out: lpFindFileData=0x31e56c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1c210700, ftCreationTime.dwHighDateTime=0x1c2a174, ftLastAccessTime.dwLowDateTime=0x523e72d0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x1c210700, ftLastWriteTime.dwHighDateTime=0x1c2a174, nFileSizeHigh=0x0, nFileSizeLow=0x7a3000, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.mshtml.dll", cAlternateFileName="MICROS~1.DLL")) returned 1 [0060.583] FindNextFileW (in: hFindFile=0x51079a0, lpFindFileData=0x31e56c | out: lpFindFileData=0x31e56c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe8de7800, ftCreationTime.dwHighDateTime=0x1c2a173, ftLastAccessTime.dwLowDateTime=0x5253df30, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xe8de7800, ftLastWriteTime.dwHighDateTime=0x1c2a173, nFileSizeHigh=0x0, nFileSizeLow=0x3400, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.stdformat.dll", cAlternateFileName="MICROS~2.DLL")) returned 1 [0060.583] FindNextFileW (in: hFindFile=0x51079a0, lpFindFileData=0x31e56c | out: lpFindFileData=0x31e56c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1e72900, ftCreationTime.dwHighDateTime=0x1c2a174, ftLastAccessTime.dwLowDateTime=0x526bacf0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x1e72900, ftLastWriteTime.dwHighDateTime=0x1c2a174, nFileSizeHigh=0x0, nFileSizeLow=0x1000, dwReserved0=0x0, dwReserved1=0x0, cFileName="msdatasrc.dll", cAlternateFileName="MSDATA~1.DLL")) returned 1 [0060.583] FindNextFileW (in: hFindFile=0x51079a0, lpFindFileData=0x31e56c | out: lpFindFileData=0x31e56c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe2e89700, ftCreationTime.dwHighDateTime=0x1c2a173, ftLastAccessTime.dwLowDateTime=0x5abe1b90, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xe2e89700, ftLastWriteTime.dwHighDateTime=0x1c2a173, nFileSizeHigh=0x0, nFileSizeLow=0x4000, dwReserved0=0x0, dwReserved1=0x0, cFileName="stdole.dll", cAlternateFileName="")) returned 1 [0060.583] FindNextFileW (in: hFindFile=0x51079a0, lpFindFileData=0x31e56c | out: lpFindFileData=0x31e56c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe2e89700, ftCreationTime.dwHighDateTime=0x1c2a173, ftLastAccessTime.dwLowDateTime=0x5abe1b90, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xe2e89700, ftLastWriteTime.dwHighDateTime=0x1c2a173, nFileSizeHigh=0x0, nFileSizeLow=0x4000, dwReserved0=0x0, dwReserved1=0x0, cFileName="stdole.dll", cAlternateFileName="")) returned 0 [0060.584] FindClose (in: hFindFile=0x51079a0 | out: hFindFile=0x51079a0) returned 1 [0060.584] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e7f4) returned 1 [0060.584] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e800) returned 1 [0060.584] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e834) returned 1 [0060.584] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Microsoft.NET\\RedistList", nBufferLength=0x105, lpBuffer=0x31e33c, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Microsoft.NET\\RedistList", lpFilePart=0x0) returned 0x2f [0060.584] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Microsoft.NET\\RedistList\\", nBufferLength=0x105, lpBuffer=0x31e310, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Microsoft.NET\\RedistList\\", lpFilePart=0x0) returned 0x30 [0060.584] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Microsoft.NET\\RedistList\\*", lpFindFileData=0x31e55c | out: lpFindFileData=0x31e55c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8a491400, ftCreationTime.dwHighDateTime=0x1d2e621, ftLastAccessTime.dwLowDateTime=0x9ea84660, ftLastAccessTime.dwHighDateTime=0x1d2e675, ftLastWriteTime.dwLowDateTime=0x9ea84660, ftLastWriteTime.dwHighDateTime=0x1d2e675, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x51079a0 [0060.585] FindNextFileW (in: hFindFile=0x51079a0, lpFindFileData=0x31e56c | out: lpFindFileData=0x31e56c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8a491400, ftCreationTime.dwHighDateTime=0x1d2e621, ftLastAccessTime.dwLowDateTime=0x9ea84660, ftLastAccessTime.dwHighDateTime=0x1d2e675, ftLastWriteTime.dwLowDateTime=0x9ea84660, ftLastWriteTime.dwHighDateTime=0x1d2e675, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0060.585] FindNextFileW (in: hFindFile=0x51079a0, lpFindFileData=0x31e56c | out: lpFindFileData=0x31e56c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc1cf9700, ftCreationTime.dwHighDateTime=0x1cac649, ftLastAccessTime.dwLowDateTime=0x8a491400, ftLastAccessTime.dwHighDateTime=0x1d2e621, ftLastWriteTime.dwLowDateTime=0xc1cf9700, ftLastWriteTime.dwHighDateTime=0x1cac649, nFileSizeHigh=0x0, nFileSizeLow=0x3d63, dwReserved0=0x0, dwReserved1=0x0, cFileName="AssemblyList_4_client.xml", cAlternateFileName="ASSEMB~1.XML")) returned 1 [0060.586] FindNextFileW (in: hFindFile=0x51079a0, lpFindFileData=0x31e56c | out: lpFindFileData=0x31e56c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xdc643900, ftCreationTime.dwHighDateTime=0x1cac666, ftLastAccessTime.dwLowDateTime=0x9ea84660, ftLastAccessTime.dwHighDateTime=0x1d2e675, ftLastWriteTime.dwLowDateTime=0xdc643900, ftLastWriteTime.dwHighDateTime=0x1cac666, nFileSizeHigh=0x0, nFileSizeLow=0x201c, dwReserved0=0x0, dwReserved1=0x0, cFileName="AssemblyList_4_extended.xml", cAlternateFileName="ASSEMB~2.XML")) returned 1 [0060.586] FindNextFileW (in: hFindFile=0x51079a0, lpFindFileData=0x31e56c | out: lpFindFileData=0x31e56c*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0060.586] FindClose (in: hFindFile=0x51079a0 | out: hFindFile=0x51079a0) returned 1 [0060.586] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e7f4) returned 1 [0060.586] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e800) returned 1 [0060.586] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e834) returned 1 [0060.586] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Microsoft.NET\\RedistList", nBufferLength=0x105, lpBuffer=0x31e33c, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Microsoft.NET\\RedistList", lpFilePart=0x0) returned 0x2f [0060.586] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Microsoft.NET\\RedistList\\", nBufferLength=0x105, lpBuffer=0x31e310, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Microsoft.NET\\RedistList\\", lpFilePart=0x0) returned 0x30 [0060.586] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Microsoft.NET\\RedistList\\*", lpFindFileData=0x31e55c | out: lpFindFileData=0x31e55c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8a491400, ftCreationTime.dwHighDateTime=0x1d2e621, ftLastAccessTime.dwLowDateTime=0x9ea84660, ftLastAccessTime.dwHighDateTime=0x1d2e675, ftLastWriteTime.dwLowDateTime=0x9ea84660, ftLastWriteTime.dwHighDateTime=0x1d2e675, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x51079a0 [0060.586] FindNextFileW (in: hFindFile=0x51079a0, lpFindFileData=0x31e56c | out: lpFindFileData=0x31e56c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8a491400, ftCreationTime.dwHighDateTime=0x1d2e621, ftLastAccessTime.dwLowDateTime=0x9ea84660, ftLastAccessTime.dwHighDateTime=0x1d2e675, ftLastWriteTime.dwLowDateTime=0x9ea84660, ftLastWriteTime.dwHighDateTime=0x1d2e675, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0060.586] FindNextFileW (in: hFindFile=0x51079a0, lpFindFileData=0x31e56c | out: lpFindFileData=0x31e56c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc1cf9700, ftCreationTime.dwHighDateTime=0x1cac649, ftLastAccessTime.dwLowDateTime=0x8a491400, ftLastAccessTime.dwHighDateTime=0x1d2e621, ftLastWriteTime.dwLowDateTime=0xc1cf9700, ftLastWriteTime.dwHighDateTime=0x1cac649, nFileSizeHigh=0x0, nFileSizeLow=0x3d63, dwReserved0=0x0, dwReserved1=0x0, cFileName="AssemblyList_4_client.xml", cAlternateFileName="ASSEMB~1.XML")) returned 1 [0060.587] FindNextFileW (in: hFindFile=0x51079a0, lpFindFileData=0x31e56c | out: lpFindFileData=0x31e56c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xdc643900, ftCreationTime.dwHighDateTime=0x1cac666, ftLastAccessTime.dwLowDateTime=0x9ea84660, ftLastAccessTime.dwHighDateTime=0x1d2e675, ftLastWriteTime.dwLowDateTime=0xdc643900, ftLastWriteTime.dwHighDateTime=0x1cac666, nFileSizeHigh=0x0, nFileSizeLow=0x201c, dwReserved0=0x0, dwReserved1=0x0, cFileName="AssemblyList_4_extended.xml", cAlternateFileName="ASSEMB~2.XML")) returned 1 [0060.587] FindNextFileW (in: hFindFile=0x51079a0, lpFindFileData=0x31e56c | out: lpFindFileData=0x31e56c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xdc643900, ftCreationTime.dwHighDateTime=0x1cac666, ftLastAccessTime.dwLowDateTime=0x9ea84660, ftLastAccessTime.dwHighDateTime=0x1d2e675, ftLastWriteTime.dwLowDateTime=0xdc643900, ftLastWriteTime.dwHighDateTime=0x1cac666, nFileSizeHigh=0x0, nFileSizeLow=0x201c, dwReserved0=0x0, dwReserved1=0x0, cFileName="AssemblyList_4_extended.xml", cAlternateFileName="ASSEMB~2.XML")) returned 0 [0060.587] FindClose (in: hFindFile=0x51079a0 | out: hFindFile=0x51079a0) returned 1 [0060.587] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e7f4) returned 1 [0060.587] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e800) returned 1 [0060.587] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Microsoft.NET\\RedistList\\AssemblyList_4_client.xml", nBufferLength=0x105, lpBuffer=0x31e20c, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Microsoft.NET\\RedistList\\AssemblyList_4_client.xml", lpFilePart=0x0) returned 0x49 [0060.587] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e700) returned 1 [0060.587] CreateFileW (lpFileName="C:\\Program Files (x86)\\Microsoft.NET\\RedistList\\AssemblyList_4_client.xml" (normalized: "c:\\program files (x86)\\microsoft.net\\redistlist\\assemblylist_4_client.xml"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x178 [0060.587] GetFileType (hFile=0x178) returned 0x1 [0060.587] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e6fc) returned 1 [0060.587] GetFileType (hFile=0x178) returned 0x1 [0060.587] GetFileSize (in: hFile=0x178, lpFileSizeHigh=0x31e808 | out: lpFileSizeHigh=0x31e808*=0x0) returned 0x3d63 [0060.588] ReadFile (in: hFile=0x178, lpBuffer=0x26a3d38, nNumberOfBytesToRead=0x3d63, lpNumberOfBytesRead=0x31e7b4, lpOverlapped=0x0 | out: lpBuffer=0x26a3d38*, lpNumberOfBytesRead=0x31e7b4*=0x3d63, lpOverlapped=0x0) returned 1 [0060.631] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Microsoft.NET\\RedistList\\AssemblyList_4_client.xml", nBufferLength=0x105, lpBuffer=0x31e1f8, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Microsoft.NET\\RedistList\\AssemblyList_4_client.xml", lpFilePart=0x0) returned 0x49 [0060.631] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e6ec) returned 1 [0060.631] CreateFileW (lpFileName="C:\\Program Files (x86)\\Microsoft.NET\\RedistList\\AssemblyList_4_client.xml" (normalized: "c:\\program files (x86)\\microsoft.net\\redistlist\\assemblylist_4_client.xml"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x178 [0060.632] GetFileType (hFile=0x178) returned 0x1 [0060.632] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e6e8) returned 1 [0060.632] GetFileType (hFile=0x178) returned 0x1 [0060.632] WriteFile (in: hFile=0x178, lpBuffer=0x2703fac*, nNumberOfBytesToWrite=0x3d70, lpNumberOfBytesWritten=0x31e7a8, lpOverlapped=0x0 | out: lpBuffer=0x2703fac*, lpNumberOfBytesWritten=0x31e7a8*=0x3d70, lpOverlapped=0x0) returned 1 [0060.633] CloseHandle (hObject=0x178) returned 1 [0060.633] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Microsoft.NET\\RedistList\\AssemblyList_4_client.xml", nBufferLength=0x105, lpBuffer=0x31e32c, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Microsoft.NET\\RedistList\\AssemblyList_4_client.xml", lpFilePart=0x0) returned 0x49 [0060.633] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Microsoft.NET\\RedistList\\AssemblyList_4_client.xml", nBufferLength=0x105, lpBuffer=0x31e32c, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Microsoft.NET\\RedistList\\AssemblyList_4_client.xml", lpFilePart=0x0) returned 0x49 [0060.633] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e78c) returned 1 [0060.633] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Microsoft.NET\\RedistList\\AssemblyList_4_client.xml" (normalized: "c:\\program files (x86)\\microsoft.net\\redistlist\\assemblylist_4_client.xml"), fInfoLevelId=0x0, lpFileInformation=0x31e808 | out: lpFileInformation=0x31e808*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc1cf9700, ftCreationTime.dwHighDateTime=0x1cac649, ftLastAccessTime.dwLowDateTime=0x8a491400, ftLastAccessTime.dwHighDateTime=0x1d2e621, ftLastWriteTime.dwLowDateTime=0x794c2e0, ftLastWriteTime.dwHighDateTime=0x1d6eb7f, nFileSizeHigh=0x0, nFileSizeLow=0x3d70)) returned 1 [0060.633] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e788) returned 1 [0060.633] MoveFileW (lpExistingFileName="C:\\Program Files (x86)\\Microsoft.NET\\RedistList\\AssemblyList_4_client.xml" (normalized: "c:\\program files (x86)\\microsoft.net\\redistlist\\assemblylist_4_client.xml"), lpNewFileName="C:\\Program Files (x86)\\Microsoft.NET\\RedistList\\AssemblyList_4_client.xml" (normalized: "c:\\program files (x86)\\microsoft.net\\redistlist\\assemblylist_4_client.xml")) returned 1 [0060.634] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Microsoft.NET\\RedistList\\AssemblyList_4_extended.xml", nBufferLength=0x105, lpBuffer=0x31e20c, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Microsoft.NET\\RedistList\\AssemblyList_4_extended.xml", lpFilePart=0x0) returned 0x4b [0060.634] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e700) returned 1 [0060.634] CreateFileW (lpFileName="C:\\Program Files (x86)\\Microsoft.NET\\RedistList\\AssemblyList_4_extended.xml" (normalized: "c:\\program files (x86)\\microsoft.net\\redistlist\\assemblylist_4_extended.xml"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x178 [0060.634] GetFileType (hFile=0x178) returned 0x1 [0060.634] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e6fc) returned 1 [0060.635] GetFileType (hFile=0x178) returned 0x1 [0060.635] GetFileSize (in: hFile=0x178, lpFileSizeHigh=0x31e808 | out: lpFileSizeHigh=0x31e808*=0x0) returned 0x201c [0060.635] ReadFile (in: hFile=0x178, lpBuffer=0x2708100, nNumberOfBytesToRead=0x201c, lpNumberOfBytesRead=0x31e7b4, lpOverlapped=0x0 | out: lpBuffer=0x2708100*, lpNumberOfBytesRead=0x31e7b4*=0x201c, lpOverlapped=0x0) returned 1 [0060.636] CloseHandle (hObject=0x178) returned 1 [0060.650] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Microsoft.NET\\RedistList\\AssemblyList_4_extended.xml", nBufferLength=0x105, lpBuffer=0x31e1f8, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Microsoft.NET\\RedistList\\AssemblyList_4_extended.xml", lpFilePart=0x0) returned 0x4b [0060.650] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e6ec) returned 1 [0060.650] CreateFileW (lpFileName="C:\\Program Files (x86)\\Microsoft.NET\\RedistList\\AssemblyList_4_extended.xml" (normalized: "c:\\program files (x86)\\microsoft.net\\redistlist\\assemblylist_4_extended.xml"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x178 [0060.651] GetFileType (hFile=0x178) returned 0x1 [0060.651] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e6e8) returned 1 [0060.651] GetFileType (hFile=0x178) returned 0x1 [0060.651] WriteFile (in: hFile=0x178, lpBuffer=0x275ef84*, nNumberOfBytesToWrite=0x2020, lpNumberOfBytesWritten=0x31e7a8, lpOverlapped=0x0 | out: lpBuffer=0x275ef84*, lpNumberOfBytesWritten=0x31e7a8*=0x2020, lpOverlapped=0x0) returned 1 [0060.652] CloseHandle (hObject=0x178) returned 1 [0060.652] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Microsoft.NET\\RedistList\\AssemblyList_4_extended.xml", nBufferLength=0x105, lpBuffer=0x31e32c, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Microsoft.NET\\RedistList\\AssemblyList_4_extended.xml", lpFilePart=0x0) returned 0x4b [0060.652] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Microsoft.NET\\RedistList\\AssemblyList_4_extended.xml", nBufferLength=0x105, lpBuffer=0x31e32c, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Microsoft.NET\\RedistList\\AssemblyList_4_extended.xml", lpFilePart=0x0) returned 0x4b [0060.652] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e78c) returned 1 [0060.652] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Microsoft.NET\\RedistList\\AssemblyList_4_extended.xml" (normalized: "c:\\program files (x86)\\microsoft.net\\redistlist\\assemblylist_4_extended.xml"), fInfoLevelId=0x0, lpFileInformation=0x31e808 | out: lpFileInformation=0x31e808*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xdc643900, ftCreationTime.dwHighDateTime=0x1cac666, ftLastAccessTime.dwLowDateTime=0x9ea84660, ftLastAccessTime.dwHighDateTime=0x1d2e675, ftLastWriteTime.dwLowDateTime=0x7972440, ftLastWriteTime.dwHighDateTime=0x1d6eb7f, nFileSizeHigh=0x0, nFileSizeLow=0x2020)) returned 1 [0060.652] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e788) returned 1 [0060.652] MoveFileW (lpExistingFileName="C:\\Program Files (x86)\\Microsoft.NET\\RedistList\\AssemblyList_4_extended.xml" (normalized: "c:\\program files (x86)\\microsoft.net\\redistlist\\assemblylist_4_extended.xml"), lpNewFileName="C:\\Program Files (x86)\\Microsoft.NET\\RedistList\\AssemblyList_4_extended.xml" (normalized: "c:\\program files (x86)\\microsoft.net\\redistlist\\assemblylist_4_extended.xml")) returned 1 [0060.653] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e8ac) returned 1 [0060.653] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Mozilla Firefox", nBufferLength=0x105, lpBuffer=0x31e3b4, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Mozilla Firefox", lpFilePart=0x0) returned 0x26 [0060.653] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Mozilla Firefox\\", nBufferLength=0x105, lpBuffer=0x31e388, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Mozilla Firefox\\", lpFilePart=0x0) returned 0x27 [0060.653] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Mozilla Firefox\\*", lpFindFileData=0x31e5d4 | out: lpFindFileData=0x31e5d4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xaeef6000, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xd92e2480, ftLastAccessTime.dwHighDateTime=0x1d5e82a, ftLastWriteTime.dwLowDateTime=0xd92e2480, ftLastWriteTime.dwHighDateTime=0x1d5e82a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5107ae0 [0060.654] FindNextFileW (in: hFindFile=0x5107ae0, lpFindFileData=0x31e5e4 | out: lpFindFileData=0x31e5e4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xaeef6000, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xd92e2480, ftLastAccessTime.dwHighDateTime=0x1d5e82a, ftLastWriteTime.dwLowDateTime=0xd92e2480, ftLastWriteTime.dwHighDateTime=0x1d5e82a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0060.654] FindNextFileW (in: hFindFile=0x5107ae0, lpFindFileData=0x31e5e4 | out: lpFindFileData=0x31e5e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xaef422c0, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xaef422c0, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0x23996480, ftLastWriteTime.dwHighDateTime=0x1ced1ee, nFileSizeHigh=0x0, nFileSizeLow=0x4e70, dwReserved0=0x0, dwReserved1=0x0, cFileName="AccessibleMarshal.dll", cAlternateFileName="ACCESS~1.DLL")) returned 1 [0060.655] FindNextFileW (in: hFindFile=0x5107ae0, lpFindFileData=0x31e5e4 | out: lpFindFileData=0x31e5e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xaef68420, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xaef68420, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0x774f8200, ftLastWriteTime.dwHighDateTime=0x1ced1dd, nFileSizeHigh=0x0, nFileSizeLow=0x279, dwReserved0=0x0, dwReserved1=0x0, cFileName="application.ini", cAlternateFileName="APPLIC~1.INI")) returned 1 [0060.655] FindNextFileW (in: hFindFile=0x5107ae0, lpFindFileData=0x31e5e4 | out: lpFindFileData=0x31e5e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xaef68420, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xaef68420, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0x2431fb00, ftLastWriteTime.dwHighDateTime=0x1ced1ee, nFileSizeHigh=0x0, nFileSizeLow=0x12670, dwReserved0=0x0, dwReserved1=0x0, cFileName="breakpadinjector.dll", cAlternateFileName="BREAKP~1.DLL")) returned 1 [0060.655] FindNextFileW (in: hFindFile=0x5107ae0, lpFindFileData=0x31e5e4 | out: lpFindFileData=0x31e5e4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xaef68420, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xaf288100, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0xaf288100, ftLastWriteTime.dwHighDateTime=0x1d2dda4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="browser", cAlternateFileName="")) returned 1 [0060.656] FindNextFileW (in: hFindFile=0x5107ae0, lpFindFileData=0x31e5e4 | out: lpFindFileData=0x31e5e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xaef8e580, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xaef8e580, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0x24ca9180, ftLastWriteTime.dwHighDateTime=0x1ced1ee, nFileSizeHigh=0x0, nFileSizeLow=0x1ca70, dwReserved0=0x0, dwReserved1=0x0, cFileName="crashreporter.exe", cAlternateFileName="CRASHR~1.EXE")) returned 1 [0060.656] FindNextFileW (in: hFindFile=0x5107ae0, lpFindFileData=0x31e5e4 | out: lpFindFileData=0x31e5e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xaef8e580, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xaef8e580, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0x45382300, ftLastWriteTime.dwHighDateTime=0x1ced1d1, nFileSizeHigh=0x0, nFileSizeLow=0xfa3, dwReserved0=0x0, dwReserved1=0x0, cFileName="crashreporter.ini", cAlternateFileName="CRASHR~1.INI")) returned 1 [0060.656] FindNextFileW (in: hFindFile=0x5107ae0, lpFindFileData=0x31e5e4 | out: lpFindFileData=0x31e5e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xaef8e580, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xaef8e580, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0xfd9a7300, ftLastWriteTime.dwHighDateTime=0x1cafd02, nFileSizeHigh=0x0, nFileSizeLow=0x202368, dwReserved0=0x0, dwReserved1=0x0, cFileName="D3DCompiler_43.dll", cAlternateFileName="D3DCOM~1.DLL")) returned 1 [0060.656] FindNextFileW (in: hFindFile=0x5107ae0, lpFindFileData=0x31e5e4 | out: lpFindFileData=0x31e5e4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xaefb46e0, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xaf23be40, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0xaf23be40, ftLastWriteTime.dwHighDateTime=0x1d2dda4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="defaults", cAlternateFileName="")) returned 1 [0060.657] FindNextFileW (in: hFindFile=0x5107ae0, lpFindFileData=0x31e5e4 | out: lpFindFileData=0x31e5e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xaefb46e0, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xaefb46e0, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0x52aed680, ftLastWriteTime.dwHighDateTime=0x1ced1ec, nFileSizeHigh=0x0, nFileSizeLow=0x63, dwReserved0=0x0, dwReserved1=0x0, cFileName="dependentlibs.list", cAlternateFileName="DEPEND~1.LIS")) returned 1 [0060.657] FindNextFileW (in: hFindFile=0x5107ae0, lpFindFileData=0x31e5e4 | out: lpFindFileData=0x31e5e4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xaefb46e0, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xaf215ce0, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0xaf215ce0, ftLastWriteTime.dwHighDateTime=0x1d2dda4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="dictionaries", cAlternateFileName="DICTIO~1")) returned 1 [0060.657] FindNextFileW (in: hFindFile=0x5107ae0, lpFindFileData=0x31e5e4 | out: lpFindFileData=0x31e5e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xaefb46e0, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xaefb46e0, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0x25fbbe80, ftLastWriteTime.dwHighDateTime=0x1ced1ee, nFileSizeHigh=0x0, nFileSizeLow=0x43470, dwReserved0=0x0, dwReserved1=0x0, cFileName="firefox.exe", cAlternateFileName="")) returned 1 [0060.657] FindNextFileW (in: hFindFile=0x5107ae0, lpFindFileData=0x31e5e4 | out: lpFindFileData=0x31e5e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xaefda840, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xaefda840, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0x26945500, ftLastWriteTime.dwHighDateTime=0x1ced1ee, nFileSizeHigh=0x0, nFileSizeLow=0x383, dwReserved0=0x0, dwReserved1=0x0, cFileName="freebl3.chk", cAlternateFileName="")) returned 1 [0060.657] FindNextFileW (in: hFindFile=0x5107ae0, lpFindFileData=0x31e5e4 | out: lpFindFileData=0x31e5e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xaefda840, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xaefda840, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0x26945500, ftLastWriteTime.dwHighDateTime=0x1ced1ee, nFileSizeHigh=0x0, nFileSizeLow=0x49c70, dwReserved0=0x0, dwReserved1=0x0, cFileName="freebl3.dll", cAlternateFileName="")) returned 1 [0060.657] FindNextFileW (in: hFindFile=0x5107ae0, lpFindFileData=0x31e5e4 | out: lpFindFileData=0x31e5e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xaefda840, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xaefda840, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0x2ac07280, ftLastWriteTime.dwHighDateTime=0x1ced1ee, nFileSizeHigh=0x0, nFileSizeLow=0x34ca70, dwReserved0=0x0, dwReserved1=0x0, cFileName="gkmedias.dll", cAlternateFileName="")) returned 1 [0060.657] FindNextFileW (in: hFindFile=0x5107ae0, lpFindFileData=0x31e5e4 | out: lpFindFileData=0x31e5e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xaeef6000, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xaeef6000, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0xb125e740, ftLastWriteTime.dwHighDateTime=0x1d2dda4, nFileSizeHigh=0x0, nFileSizeLow=0x5aea, dwReserved0=0x0, dwReserved1=0x0, cFileName="install.log", cAlternateFileName="")) returned 1 [0060.658] FindNextFileW (in: hFindFile=0x5107ae0, lpFindFileData=0x31e5e4 | out: lpFindFileData=0x31e5e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xaf04cc60, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xaf04cc60, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0x2b590900, ftLastWriteTime.dwHighDateTime=0x1ced1ee, nFileSizeHigh=0x0, nFileSizeLow=0xfa70, dwReserved0=0x0, dwReserved1=0x0, cFileName="libEGL.dll", cAlternateFileName="")) returned 1 [0060.658] FindNextFileW (in: hFindFile=0x5107ae0, lpFindFileData=0x31e5e4 | out: lpFindFileData=0x31e5e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xaf04cc60, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xaf04cc60, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0x2c8a3600, ftLastWriteTime.dwHighDateTime=0x1ced1ee, nFileSizeHigh=0x0, nFileSizeLow=0x86270, dwReserved0=0x0, dwReserved1=0x0, cFileName="libGLESv2.dll", cAlternateFileName="LIBGLE~1.DLL")) returned 1 [0060.658] FindNextFileW (in: hFindFile=0x5107ae0, lpFindFileData=0x31e5e4 | out: lpFindFileData=0x31e5e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xaf04cc60, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xaf04cc60, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0x2d22cc80, ftLastWriteTime.dwHighDateTime=0x1ced1ee, nFileSizeHigh=0x0, nFileSizeLow=0x1d270, dwReserved0=0x0, dwReserved1=0x0, cFileName="maintenanceservice.exe", cAlternateFileName="MAINTE~1.EXE")) returned 1 [0060.658] FindNextFileW (in: hFindFile=0x5107ae0, lpFindFileData=0x31e5e4 | out: lpFindFileData=0x31e5e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xaf072dc0, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xaf072dc0, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0x2d22cc80, ftLastWriteTime.dwHighDateTime=0x1ced1ee, nFileSizeHigh=0x0, nFileSizeLow=0x2f7f8, dwReserved0=0x0, dwReserved1=0x0, cFileName="maintenanceservice_installer.exe", cAlternateFileName="MAINTE~2.EXE")) returned 1 [0060.658] FindNextFileW (in: hFindFile=0x5107ae0, lpFindFileData=0x31e5e4 | out: lpFindFileData=0x31e5e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xaf072dc0, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xaf072dc0, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0x2e53f980, ftLastWriteTime.dwHighDateTime=0x1ced1ee, nFileSizeHigh=0x0, nFileSizeLow=0x4270, dwReserved0=0x0, dwReserved1=0x0, cFileName="mozalloc.dll", cAlternateFileName="")) returned 1 [0060.658] FindNextFileW (in: hFindFile=0x5107ae0, lpFindFileData=0x31e5e4 | out: lpFindFileData=0x31e5e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xaf072dc0, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xaf072dc0, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0x2eec9000, ftLastWriteTime.dwHighDateTime=0x1ced1ee, nFileSizeHigh=0x0, nFileSizeLow=0x1fe70, dwReserved0=0x0, dwReserved1=0x0, cFileName="mozglue.dll", cAlternateFileName="")) returned 1 [0060.658] FindNextFileW (in: hFindFile=0x5107ae0, lpFindFileData=0x31e5e4 | out: lpFindFileData=0x31e5e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xaf098f20, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xaf098f20, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0x314eea00, ftLastWriteTime.dwHighDateTime=0x1ced1ee, nFileSizeHigh=0x0, nFileSizeLow=0x336470, dwReserved0=0x0, dwReserved1=0x0, cFileName="mozjs.dll", cAlternateFileName="")) returned 1 [0060.658] FindNextFileW (in: hFindFile=0x5107ae0, lpFindFileData=0x31e5e4 | out: lpFindFileData=0x31e5e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xaf098f20, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xaf098f20, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0x3809e300, ftLastWriteTime.dwHighDateTime=0x1cac6b6, nFileSizeHigh=0x0, nFileSizeLow=0x66d50, dwReserved0=0x0, dwReserved1=0x0, cFileName="msvcp100.dll", cAlternateFileName="")) returned 1 [0060.659] FindNextFileW (in: hFindFile=0x5107ae0, lpFindFileData=0x31e5e4 | out: lpFindFileData=0x31e5e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xaf0bf080, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xaf0bf080, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0x3809e300, ftLastWriteTime.dwHighDateTime=0x1cac6b6, nFileSizeHigh=0x0, nFileSizeLow=0xbc150, dwReserved0=0x0, dwReserved1=0x0, cFileName="msvcr100.dll", cAlternateFileName="")) returned 1 [0060.659] FindNextFileW (in: hFindFile=0x5107ae0, lpFindFileData=0x31e5e4 | out: lpFindFileData=0x31e5e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xaf0bf080, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xaf0bf080, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0x3318ad80, ftLastWriteTime.dwHighDateTime=0x1ced1ee, nFileSizeHigh=0x0, nFileSizeLow=0x1b1870, dwReserved0=0x0, dwReserved1=0x0, cFileName="nss3.dll", cAlternateFileName="")) returned 1 [0060.659] FindNextFileW (in: hFindFile=0x5107ae0, lpFindFileData=0x31e5e4 | out: lpFindFileData=0x31e5e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xaf0bf080, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xaf0bf080, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0x3449da80, ftLastWriteTime.dwHighDateTime=0x1ced1ee, nFileSizeHigh=0x0, nFileSizeLow=0x60070, dwReserved0=0x0, dwReserved1=0x0, cFileName="nssckbi.dll", cAlternateFileName="")) returned 1 [0060.659] FindNextFileW (in: hFindFile=0x5107ae0, lpFindFileData=0x31e5e4 | out: lpFindFileData=0x31e5e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xaf0e51e0, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xaf0e51e0, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0x34e27100, ftLastWriteTime.dwHighDateTime=0x1ced1ee, nFileSizeHigh=0x0, nFileSizeLow=0x383, dwReserved0=0x0, dwReserved1=0x0, cFileName="nssdbm3.chk", cAlternateFileName="")) returned 1 [0060.659] FindNextFileW (in: hFindFile=0x5107ae0, lpFindFileData=0x31e5e4 | out: lpFindFileData=0x31e5e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xaf0e51e0, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xaf0e51e0, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0x34e27100, ftLastWriteTime.dwHighDateTime=0x1ced1ee, nFileSizeHigh=0x0, nFileSizeLow=0x16870, dwReserved0=0x0, dwReserved1=0x0, cFileName="nssdbm3.dll", cAlternateFileName="")) returned 1 [0060.659] FindNextFileW (in: hFindFile=0x5107ae0, lpFindFileData=0x31e5e4 | out: lpFindFileData=0x31e5e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xaf0e51e0, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xaf0e51e0, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0x58a5b700, ftLastWriteTime.dwHighDateTime=0x1ced1ee, nFileSizeHigh=0x0, nFileSizeLow=0x771d55, dwReserved0=0x0, dwReserved1=0x0, cFileName="omni.ja", cAlternateFileName="")) returned 1 [0060.659] FindNextFileW (in: hFindFile=0x5107ae0, lpFindFileData=0x31e5e4 | out: lpFindFileData=0x31e5e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xaf10b340, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xaf10b340, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0xb1218800, ftLastWriteTime.dwHighDateTime=0x1ced1df, nFileSizeHigh=0x0, nFileSizeLow=0x8c, dwReserved0=0x0, dwReserved1=0x0, cFileName="platform.ini", cAlternateFileName="")) returned 1 [0060.659] FindNextFileW (in: hFindFile=0x5107ae0, lpFindFileData=0x31e5e4 | out: lpFindFileData=0x31e5e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xaf1314a0, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xaf1314a0, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0x357b0780, ftLastWriteTime.dwHighDateTime=0x1ced1ee, nFileSizeHigh=0x0, nFileSizeLow=0x4870, dwReserved0=0x0, dwReserved1=0x0, cFileName="plugin-container.exe", cAlternateFileName="PLUGIN~1.EXE")) returned 1 [0060.660] FindNextFileW (in: hFindFile=0x5107ae0, lpFindFileData=0x31e5e4 | out: lpFindFileData=0x31e5e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xaf1314a0, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xaf1314a0, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0x36139e00, ftLastWriteTime.dwHighDateTime=0x1ced1ee, nFileSizeHigh=0x0, nFileSizeLow=0x6e70, dwReserved0=0x0, dwReserved1=0x0, cFileName="plugin-hang-ui.exe", cAlternateFileName="PLUGIN~2.EXE")) returned 1 [0060.660] FindNextFileW (in: hFindFile=0x5107ae0, lpFindFileData=0x31e5e4 | out: lpFindFileData=0x31e5e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xaf1314a0, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xaf1314a0, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0x5c2963ee, ftLastWriteTime.dwHighDateTime=0x1ced1ee, nFileSizeHigh=0x0, nFileSizeLow=0x7e3, dwReserved0=0x0, dwReserved1=0x0, cFileName="precomplete", cAlternateFileName="PRECOM~1")) returned 1 [0060.660] FindNextFileW (in: hFindFile=0x5107ae0, lpFindFileData=0x31e5e4 | out: lpFindFileData=0x31e5e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xcfefe590, ftCreationTime.dwHighDateTime=0x1d5a949, ftLastAccessTime.dwLowDateTime=0x92f659a0, ftLastAccessTime.dwHighDateTime=0x1d57fee, ftLastWriteTime.dwLowDateTime=0x92f659a0, ftLastWriteTime.dwHighDateTime=0x1d57fee, nFileSizeHigh=0x0, nFileSizeLow=0x13a00, dwReserved0=0x0, dwReserved1=0x0, cFileName="prerequisiteenzymehundreds.exe", cAlternateFileName="PREREQ~1.EXE")) returned 1 [0060.660] FindNextFileW (in: hFindFile=0x5107ae0, lpFindFileData=0x31e5e4 | out: lpFindFileData=0x31e5e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xaf1314a0, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xaf1314a0, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0x13c55480, ftLastWriteTime.dwHighDateTime=0x1ced1dd, nFileSizeHigh=0x0, nFileSizeLow=0x8f3b, dwReserved0=0x0, dwReserved1=0x0, cFileName="removed-files", cAlternateFileName="REMOVE~1")) returned 1 [0060.660] FindNextFileW (in: hFindFile=0x5107ae0, lpFindFileData=0x31e5e4 | out: lpFindFileData=0x31e5e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xaf157600, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xaf157600, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0x3744cb00, ftLastWriteTime.dwHighDateTime=0x1ced1ee, nFileSizeHigh=0x0, nFileSizeLow=0x383, dwReserved0=0x0, dwReserved1=0x0, cFileName="softokn3.chk", cAlternateFileName="")) returned 1 [0060.660] FindNextFileW (in: hFindFile=0x5107ae0, lpFindFileData=0x31e5e4 | out: lpFindFileData=0x31e5e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xaf157600, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xaf157600, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0x3744cb00, ftLastWriteTime.dwHighDateTime=0x1ced1ee, nFileSizeHigh=0x0, nFileSizeLow=0x25870, dwReserved0=0x0, dwReserved1=0x0, cFileName="softokn3.dll", cAlternateFileName="")) returned 1 [0060.660] FindNextFileW (in: hFindFile=0x5107ae0, lpFindFileData=0x31e5e4 | out: lpFindFileData=0x31e5e4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xaef1c160, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xb0925200, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0xb0925200, ftLastWriteTime.dwHighDateTime=0x1d2dda4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="uninstall", cAlternateFileName="UNINST~1")) returned 1 [0060.660] FindNextFileW (in: hFindFile=0x5107ae0, lpFindFileData=0x31e5e4 | out: lpFindFileData=0x31e5e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xaf157600, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xaf157600, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0x9f38e880, ftLastWriteTime.dwHighDateTime=0x1ced1d1, nFileSizeHigh=0x0, nFileSizeLow=0x89, dwReserved0=0x0, dwReserved1=0x0, cFileName="update-settings.ini", cAlternateFileName="UPDATE~1.INI")) returned 1 [0060.660] FindNextFileW (in: hFindFile=0x5107ae0, lpFindFileData=0x31e5e4 | out: lpFindFileData=0x31e5e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xaf17d760, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xaf17d760, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0x37dd6180, ftLastWriteTime.dwHighDateTime=0x1ced1ee, nFileSizeHigh=0x0, nFileSizeLow=0x42e70, dwReserved0=0x0, dwReserved1=0x0, cFileName="updater.exe", cAlternateFileName="")) returned 1 [0060.660] FindNextFileW (in: hFindFile=0x5107ae0, lpFindFileData=0x31e5e4 | out: lpFindFileData=0x31e5e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xaf17d760, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xaf17d760, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0xac170580, ftLastWriteTime.dwHighDateTime=0x1ced1ec, nFileSizeHigh=0x0, nFileSizeLow=0x4dd, dwReserved0=0x0, dwReserved1=0x0, cFileName="updater.ini", cAlternateFileName="")) returned 1 [0060.660] FindNextFileW (in: hFindFile=0x5107ae0, lpFindFileData=0x31e5e4 | out: lpFindFileData=0x31e5e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xaf17d760, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xaf17d760, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0x3875f800, ftLastWriteTime.dwHighDateTime=0x1ced1ee, nFileSizeHigh=0x0, nFileSizeLow=0x29bd0, dwReserved0=0x0, dwReserved1=0x0, cFileName="webapp-uninstaller.exe", cAlternateFileName="WEBAPP~1.EXE")) returned 1 [0060.660] FindNextFileW (in: hFindFile=0x5107ae0, lpFindFileData=0x31e5e4 | out: lpFindFileData=0x31e5e4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xaf17d760, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xaf215ce0, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0xaf215ce0, ftLastWriteTime.dwHighDateTime=0x1d2dda4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="webapprt", cAlternateFileName="")) returned 1 [0060.661] FindNextFileW (in: hFindFile=0x5107ae0, lpFindFileData=0x31e5e4 | out: lpFindFileData=0x31e5e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xaf17d760, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xaf17d760, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0x390e8e80, ftLastWriteTime.dwHighDateTime=0x1ced1ee, nFileSizeHigh=0x0, nFileSizeLow=0x1a670, dwReserved0=0x0, dwReserved1=0x0, cFileName="webapprt-stub.exe", cAlternateFileName="WEBAPP~2.EXE")) returned 1 [0060.661] FindNextFileW (in: hFindFile=0x5107ae0, lpFindFileData=0x31e5e4 | out: lpFindFileData=0x31e5e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xaf1a38c0, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xaf1a38c0, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0x49266e00, ftLastWriteTime.dwHighDateTime=0x1ced1ee, nFileSizeHigh=0x0, nFileSizeLow=0x1502070, dwReserved0=0x0, dwReserved1=0x0, cFileName="xul.dll", cAlternateFileName="")) returned 1 [0060.661] FindNextFileW (in: hFindFile=0x5107ae0, lpFindFileData=0x31e5e4 | out: lpFindFileData=0x31e5e4*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0060.661] FindClose (in: hFindFile=0x5107ae0 | out: hFindFile=0x5107ae0) returned 1 [0060.661] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e86c) returned 1 [0060.661] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e878) returned 1 [0060.661] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e8ac) returned 1 [0060.661] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Mozilla Firefox", nBufferLength=0x105, lpBuffer=0x31e3b4, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Mozilla Firefox", lpFilePart=0x0) returned 0x26 [0060.661] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Mozilla Firefox\\", nBufferLength=0x105, lpBuffer=0x31e388, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Mozilla Firefox\\", lpFilePart=0x0) returned 0x27 [0060.661] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Mozilla Firefox\\*", lpFindFileData=0x31e5d4 | out: lpFindFileData=0x31e5d4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xaeef6000, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xd92e2480, ftLastAccessTime.dwHighDateTime=0x1d5e82a, ftLastWriteTime.dwLowDateTime=0xd92e2480, ftLastWriteTime.dwHighDateTime=0x1d5e82a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5107ae0 [0060.661] FindNextFileW (in: hFindFile=0x5107ae0, lpFindFileData=0x31e5e4 | out: lpFindFileData=0x31e5e4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xaeef6000, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xd92e2480, ftLastAccessTime.dwHighDateTime=0x1d5e82a, ftLastWriteTime.dwLowDateTime=0xd92e2480, ftLastWriteTime.dwHighDateTime=0x1d5e82a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0060.661] FindNextFileW (in: hFindFile=0x5107ae0, lpFindFileData=0x31e5e4 | out: lpFindFileData=0x31e5e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xaef422c0, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xaef422c0, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0x23996480, ftLastWriteTime.dwHighDateTime=0x1ced1ee, nFileSizeHigh=0x0, nFileSizeLow=0x4e70, dwReserved0=0x0, dwReserved1=0x0, cFileName="AccessibleMarshal.dll", cAlternateFileName="ACCESS~1.DLL")) returned 1 [0060.661] FindNextFileW (in: hFindFile=0x5107ae0, lpFindFileData=0x31e5e4 | out: lpFindFileData=0x31e5e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xaef68420, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xaef68420, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0x774f8200, ftLastWriteTime.dwHighDateTime=0x1ced1dd, nFileSizeHigh=0x0, nFileSizeLow=0x279, dwReserved0=0x0, dwReserved1=0x0, cFileName="application.ini", cAlternateFileName="APPLIC~1.INI")) returned 1 [0060.661] FindNextFileW (in: hFindFile=0x5107ae0, lpFindFileData=0x31e5e4 | out: lpFindFileData=0x31e5e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xaef68420, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xaef68420, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0x2431fb00, ftLastWriteTime.dwHighDateTime=0x1ced1ee, nFileSizeHigh=0x0, nFileSizeLow=0x12670, dwReserved0=0x0, dwReserved1=0x0, cFileName="breakpadinjector.dll", cAlternateFileName="BREAKP~1.DLL")) returned 1 [0060.661] FindNextFileW (in: hFindFile=0x5107ae0, lpFindFileData=0x31e5e4 | out: lpFindFileData=0x31e5e4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xaef68420, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xaf288100, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0xaf288100, ftLastWriteTime.dwHighDateTime=0x1d2dda4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="browser", cAlternateFileName="")) returned 1 [0060.661] FindNextFileW (in: hFindFile=0x5107ae0, lpFindFileData=0x31e5e4 | out: lpFindFileData=0x31e5e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xaef8e580, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xaef8e580, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0x24ca9180, ftLastWriteTime.dwHighDateTime=0x1ced1ee, nFileSizeHigh=0x0, nFileSizeLow=0x1ca70, dwReserved0=0x0, dwReserved1=0x0, cFileName="crashreporter.exe", cAlternateFileName="CRASHR~1.EXE")) returned 1 [0060.662] FindNextFileW (in: hFindFile=0x5107ae0, lpFindFileData=0x31e5e4 | out: lpFindFileData=0x31e5e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xaef8e580, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xaef8e580, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0x45382300, ftLastWriteTime.dwHighDateTime=0x1ced1d1, nFileSizeHigh=0x0, nFileSizeLow=0xfa3, dwReserved0=0x0, dwReserved1=0x0, cFileName="crashreporter.ini", cAlternateFileName="CRASHR~1.INI")) returned 1 [0060.662] FindNextFileW (in: hFindFile=0x5107ae0, lpFindFileData=0x31e5e4 | out: lpFindFileData=0x31e5e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xaef8e580, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xaef8e580, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0xfd9a7300, ftLastWriteTime.dwHighDateTime=0x1cafd02, nFileSizeHigh=0x0, nFileSizeLow=0x202368, dwReserved0=0x0, dwReserved1=0x0, cFileName="D3DCompiler_43.dll", cAlternateFileName="D3DCOM~1.DLL")) returned 1 [0060.662] FindNextFileW (in: hFindFile=0x5107ae0, lpFindFileData=0x31e5e4 | out: lpFindFileData=0x31e5e4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xaefb46e0, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xaf23be40, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0xaf23be40, ftLastWriteTime.dwHighDateTime=0x1d2dda4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="defaults", cAlternateFileName="")) returned 1 [0060.662] FindNextFileW (in: hFindFile=0x5107ae0, lpFindFileData=0x31e5e4 | out: lpFindFileData=0x31e5e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xaefb46e0, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xaefb46e0, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0x52aed680, ftLastWriteTime.dwHighDateTime=0x1ced1ec, nFileSizeHigh=0x0, nFileSizeLow=0x63, dwReserved0=0x0, dwReserved1=0x0, cFileName="dependentlibs.list", cAlternateFileName="DEPEND~1.LIS")) returned 1 [0060.662] FindNextFileW (in: hFindFile=0x5107ae0, lpFindFileData=0x31e5e4 | out: lpFindFileData=0x31e5e4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xaefb46e0, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xaf215ce0, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0xaf215ce0, ftLastWriteTime.dwHighDateTime=0x1d2dda4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="dictionaries", cAlternateFileName="DICTIO~1")) returned 1 [0060.662] FindNextFileW (in: hFindFile=0x5107ae0, lpFindFileData=0x31e5e4 | out: lpFindFileData=0x31e5e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xaefb46e0, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xaefb46e0, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0x25fbbe80, ftLastWriteTime.dwHighDateTime=0x1ced1ee, nFileSizeHigh=0x0, nFileSizeLow=0x43470, dwReserved0=0x0, dwReserved1=0x0, cFileName="firefox.exe", cAlternateFileName="")) returned 1 [0060.662] FindNextFileW (in: hFindFile=0x5107ae0, lpFindFileData=0x31e5e4 | out: lpFindFileData=0x31e5e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xaefda840, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xaefda840, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0x26945500, ftLastWriteTime.dwHighDateTime=0x1ced1ee, nFileSizeHigh=0x0, nFileSizeLow=0x383, dwReserved0=0x0, dwReserved1=0x0, cFileName="freebl3.chk", cAlternateFileName="")) returned 1 [0060.662] FindNextFileW (in: hFindFile=0x5107ae0, lpFindFileData=0x31e5e4 | out: lpFindFileData=0x31e5e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xaefda840, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xaefda840, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0x26945500, ftLastWriteTime.dwHighDateTime=0x1ced1ee, nFileSizeHigh=0x0, nFileSizeLow=0x49c70, dwReserved0=0x0, dwReserved1=0x0, cFileName="freebl3.dll", cAlternateFileName="")) returned 1 [0060.662] FindNextFileW (in: hFindFile=0x5107ae0, lpFindFileData=0x31e5e4 | out: lpFindFileData=0x31e5e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xaefda840, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xaefda840, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0x2ac07280, ftLastWriteTime.dwHighDateTime=0x1ced1ee, nFileSizeHigh=0x0, nFileSizeLow=0x34ca70, dwReserved0=0x0, dwReserved1=0x0, cFileName="gkmedias.dll", cAlternateFileName="")) returned 1 [0060.662] FindNextFileW (in: hFindFile=0x5107ae0, lpFindFileData=0x31e5e4 | out: lpFindFileData=0x31e5e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xaeef6000, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xaeef6000, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0xb125e740, ftLastWriteTime.dwHighDateTime=0x1d2dda4, nFileSizeHigh=0x0, nFileSizeLow=0x5aea, dwReserved0=0x0, dwReserved1=0x0, cFileName="install.log", cAlternateFileName="")) returned 1 [0060.662] FindNextFileW (in: hFindFile=0x5107ae0, lpFindFileData=0x31e5e4 | out: lpFindFileData=0x31e5e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xaf04cc60, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xaf04cc60, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0x2b590900, ftLastWriteTime.dwHighDateTime=0x1ced1ee, nFileSizeHigh=0x0, nFileSizeLow=0xfa70, dwReserved0=0x0, dwReserved1=0x0, cFileName="libEGL.dll", cAlternateFileName="")) returned 1 [0060.662] FindNextFileW (in: hFindFile=0x5107ae0, lpFindFileData=0x31e5e4 | out: lpFindFileData=0x31e5e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xaf04cc60, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xaf04cc60, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0x2c8a3600, ftLastWriteTime.dwHighDateTime=0x1ced1ee, nFileSizeHigh=0x0, nFileSizeLow=0x86270, dwReserved0=0x0, dwReserved1=0x0, cFileName="libGLESv2.dll", cAlternateFileName="LIBGLE~1.DLL")) returned 1 [0060.662] FindNextFileW (in: hFindFile=0x5107ae0, lpFindFileData=0x31e5e4 | out: lpFindFileData=0x31e5e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xaf04cc60, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xaf04cc60, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0x2d22cc80, ftLastWriteTime.dwHighDateTime=0x1ced1ee, nFileSizeHigh=0x0, nFileSizeLow=0x1d270, dwReserved0=0x0, dwReserved1=0x0, cFileName="maintenanceservice.exe", cAlternateFileName="MAINTE~1.EXE")) returned 1 [0060.662] FindNextFileW (in: hFindFile=0x5107ae0, lpFindFileData=0x31e5e4 | out: lpFindFileData=0x31e5e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xaf072dc0, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xaf072dc0, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0x2d22cc80, ftLastWriteTime.dwHighDateTime=0x1ced1ee, nFileSizeHigh=0x0, nFileSizeLow=0x2f7f8, dwReserved0=0x0, dwReserved1=0x0, cFileName="maintenanceservice_installer.exe", cAlternateFileName="MAINTE~2.EXE")) returned 1 [0060.662] FindNextFileW (in: hFindFile=0x5107ae0, lpFindFileData=0x31e5e4 | out: lpFindFileData=0x31e5e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xaf072dc0, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xaf072dc0, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0x2e53f980, ftLastWriteTime.dwHighDateTime=0x1ced1ee, nFileSizeHigh=0x0, nFileSizeLow=0x4270, dwReserved0=0x0, dwReserved1=0x0, cFileName="mozalloc.dll", cAlternateFileName="")) returned 1 [0060.662] FindNextFileW (in: hFindFile=0x5107ae0, lpFindFileData=0x31e5e4 | out: lpFindFileData=0x31e5e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xaf072dc0, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xaf072dc0, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0x2eec9000, ftLastWriteTime.dwHighDateTime=0x1ced1ee, nFileSizeHigh=0x0, nFileSizeLow=0x1fe70, dwReserved0=0x0, dwReserved1=0x0, cFileName="mozglue.dll", cAlternateFileName="")) returned 1 [0060.663] FindNextFileW (in: hFindFile=0x5107ae0, lpFindFileData=0x31e5e4 | out: lpFindFileData=0x31e5e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xaf098f20, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xaf098f20, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0x314eea00, ftLastWriteTime.dwHighDateTime=0x1ced1ee, nFileSizeHigh=0x0, nFileSizeLow=0x336470, dwReserved0=0x0, dwReserved1=0x0, cFileName="mozjs.dll", cAlternateFileName="")) returned 1 [0060.663] FindNextFileW (in: hFindFile=0x5107ae0, lpFindFileData=0x31e5e4 | out: lpFindFileData=0x31e5e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xaf098f20, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xaf098f20, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0x3809e300, ftLastWriteTime.dwHighDateTime=0x1cac6b6, nFileSizeHigh=0x0, nFileSizeLow=0x66d50, dwReserved0=0x0, dwReserved1=0x0, cFileName="msvcp100.dll", cAlternateFileName="")) returned 1 [0060.663] FindNextFileW (in: hFindFile=0x5107ae0, lpFindFileData=0x31e5e4 | out: lpFindFileData=0x31e5e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xaf0bf080, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xaf0bf080, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0x3809e300, ftLastWriteTime.dwHighDateTime=0x1cac6b6, nFileSizeHigh=0x0, nFileSizeLow=0xbc150, dwReserved0=0x0, dwReserved1=0x0, cFileName="msvcr100.dll", cAlternateFileName="")) returned 1 [0060.663] FindNextFileW (in: hFindFile=0x5107ae0, lpFindFileData=0x31e5e4 | out: lpFindFileData=0x31e5e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xaf0bf080, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xaf0bf080, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0x3318ad80, ftLastWriteTime.dwHighDateTime=0x1ced1ee, nFileSizeHigh=0x0, nFileSizeLow=0x1b1870, dwReserved0=0x0, dwReserved1=0x0, cFileName="nss3.dll", cAlternateFileName="")) returned 1 [0060.663] FindNextFileW (in: hFindFile=0x5107ae0, lpFindFileData=0x31e5e4 | out: lpFindFileData=0x31e5e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xaf0bf080, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xaf0bf080, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0x3449da80, ftLastWriteTime.dwHighDateTime=0x1ced1ee, nFileSizeHigh=0x0, nFileSizeLow=0x60070, dwReserved0=0x0, dwReserved1=0x0, cFileName="nssckbi.dll", cAlternateFileName="")) returned 1 [0060.663] FindNextFileW (in: hFindFile=0x5107ae0, lpFindFileData=0x31e5e4 | out: lpFindFileData=0x31e5e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xaf0e51e0, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xaf0e51e0, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0x34e27100, ftLastWriteTime.dwHighDateTime=0x1ced1ee, nFileSizeHigh=0x0, nFileSizeLow=0x383, dwReserved0=0x0, dwReserved1=0x0, cFileName="nssdbm3.chk", cAlternateFileName="")) returned 1 [0060.663] FindNextFileW (in: hFindFile=0x5107ae0, lpFindFileData=0x31e5e4 | out: lpFindFileData=0x31e5e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xaf0e51e0, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xaf0e51e0, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0x34e27100, ftLastWriteTime.dwHighDateTime=0x1ced1ee, nFileSizeHigh=0x0, nFileSizeLow=0x16870, dwReserved0=0x0, dwReserved1=0x0, cFileName="nssdbm3.dll", cAlternateFileName="")) returned 1 [0060.663] FindNextFileW (in: hFindFile=0x5107ae0, lpFindFileData=0x31e5e4 | out: lpFindFileData=0x31e5e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xaf0e51e0, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xaf0e51e0, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0x58a5b700, ftLastWriteTime.dwHighDateTime=0x1ced1ee, nFileSizeHigh=0x0, nFileSizeLow=0x771d55, dwReserved0=0x0, dwReserved1=0x0, cFileName="omni.ja", cAlternateFileName="")) returned 1 [0060.663] FindNextFileW (in: hFindFile=0x5107ae0, lpFindFileData=0x31e5e4 | out: lpFindFileData=0x31e5e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xaf10b340, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xaf10b340, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0xb1218800, ftLastWriteTime.dwHighDateTime=0x1ced1df, nFileSizeHigh=0x0, nFileSizeLow=0x8c, dwReserved0=0x0, dwReserved1=0x0, cFileName="platform.ini", cAlternateFileName="")) returned 1 [0060.663] FindNextFileW (in: hFindFile=0x5107ae0, lpFindFileData=0x31e5e4 | out: lpFindFileData=0x31e5e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xaf1314a0, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xaf1314a0, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0x357b0780, ftLastWriteTime.dwHighDateTime=0x1ced1ee, nFileSizeHigh=0x0, nFileSizeLow=0x4870, dwReserved0=0x0, dwReserved1=0x0, cFileName="plugin-container.exe", cAlternateFileName="PLUGIN~1.EXE")) returned 1 [0060.663] FindNextFileW (in: hFindFile=0x5107ae0, lpFindFileData=0x31e5e4 | out: lpFindFileData=0x31e5e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xaf1314a0, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xaf1314a0, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0x36139e00, ftLastWriteTime.dwHighDateTime=0x1ced1ee, nFileSizeHigh=0x0, nFileSizeLow=0x6e70, dwReserved0=0x0, dwReserved1=0x0, cFileName="plugin-hang-ui.exe", cAlternateFileName="PLUGIN~2.EXE")) returned 1 [0060.663] FindNextFileW (in: hFindFile=0x5107ae0, lpFindFileData=0x31e5e4 | out: lpFindFileData=0x31e5e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xaf1314a0, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xaf1314a0, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0x5c2963ee, ftLastWriteTime.dwHighDateTime=0x1ced1ee, nFileSizeHigh=0x0, nFileSizeLow=0x7e3, dwReserved0=0x0, dwReserved1=0x0, cFileName="precomplete", cAlternateFileName="PRECOM~1")) returned 1 [0060.663] FindNextFileW (in: hFindFile=0x5107ae0, lpFindFileData=0x31e5e4 | out: lpFindFileData=0x31e5e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xcfefe590, ftCreationTime.dwHighDateTime=0x1d5a949, ftLastAccessTime.dwLowDateTime=0x92f659a0, ftLastAccessTime.dwHighDateTime=0x1d57fee, ftLastWriteTime.dwLowDateTime=0x92f659a0, ftLastWriteTime.dwHighDateTime=0x1d57fee, nFileSizeHigh=0x0, nFileSizeLow=0x13a00, dwReserved0=0x0, dwReserved1=0x0, cFileName="prerequisiteenzymehundreds.exe", cAlternateFileName="PREREQ~1.EXE")) returned 1 [0060.663] FindNextFileW (in: hFindFile=0x5107ae0, lpFindFileData=0x31e5e4 | out: lpFindFileData=0x31e5e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xaf1314a0, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xaf1314a0, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0x13c55480, ftLastWriteTime.dwHighDateTime=0x1ced1dd, nFileSizeHigh=0x0, nFileSizeLow=0x8f3b, dwReserved0=0x0, dwReserved1=0x0, cFileName="removed-files", cAlternateFileName="REMOVE~1")) returned 1 [0060.663] FindNextFileW (in: hFindFile=0x5107ae0, lpFindFileData=0x31e5e4 | out: lpFindFileData=0x31e5e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xaf157600, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xaf157600, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0x3744cb00, ftLastWriteTime.dwHighDateTime=0x1ced1ee, nFileSizeHigh=0x0, nFileSizeLow=0x383, dwReserved0=0x0, dwReserved1=0x0, cFileName="softokn3.chk", cAlternateFileName="")) returned 1 [0060.663] FindNextFileW (in: hFindFile=0x5107ae0, lpFindFileData=0x31e5e4 | out: lpFindFileData=0x31e5e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xaf157600, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xaf157600, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0x3744cb00, ftLastWriteTime.dwHighDateTime=0x1ced1ee, nFileSizeHigh=0x0, nFileSizeLow=0x25870, dwReserved0=0x0, dwReserved1=0x0, cFileName="softokn3.dll", cAlternateFileName="")) returned 1 [0060.664] FindNextFileW (in: hFindFile=0x5107ae0, lpFindFileData=0x31e5e4 | out: lpFindFileData=0x31e5e4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xaef1c160, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xb0925200, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0xb0925200, ftLastWriteTime.dwHighDateTime=0x1d2dda4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="uninstall", cAlternateFileName="UNINST~1")) returned 1 [0060.664] FindNextFileW (in: hFindFile=0x5107ae0, lpFindFileData=0x31e5e4 | out: lpFindFileData=0x31e5e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xaf157600, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xaf157600, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0x9f38e880, ftLastWriteTime.dwHighDateTime=0x1ced1d1, nFileSizeHigh=0x0, nFileSizeLow=0x89, dwReserved0=0x0, dwReserved1=0x0, cFileName="update-settings.ini", cAlternateFileName="UPDATE~1.INI")) returned 1 [0060.664] FindNextFileW (in: hFindFile=0x5107ae0, lpFindFileData=0x31e5e4 | out: lpFindFileData=0x31e5e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xaf17d760, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xaf17d760, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0x37dd6180, ftLastWriteTime.dwHighDateTime=0x1ced1ee, nFileSizeHigh=0x0, nFileSizeLow=0x42e70, dwReserved0=0x0, dwReserved1=0x0, cFileName="updater.exe", cAlternateFileName="")) returned 1 [0060.664] FindNextFileW (in: hFindFile=0x5107ae0, lpFindFileData=0x31e5e4 | out: lpFindFileData=0x31e5e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xaf17d760, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xaf17d760, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0xac170580, ftLastWriteTime.dwHighDateTime=0x1ced1ec, nFileSizeHigh=0x0, nFileSizeLow=0x4dd, dwReserved0=0x0, dwReserved1=0x0, cFileName="updater.ini", cAlternateFileName="")) returned 1 [0060.664] FindNextFileW (in: hFindFile=0x5107ae0, lpFindFileData=0x31e5e4 | out: lpFindFileData=0x31e5e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xaf17d760, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xaf17d760, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0x3875f800, ftLastWriteTime.dwHighDateTime=0x1ced1ee, nFileSizeHigh=0x0, nFileSizeLow=0x29bd0, dwReserved0=0x0, dwReserved1=0x0, cFileName="webapp-uninstaller.exe", cAlternateFileName="WEBAPP~1.EXE")) returned 1 [0060.664] FindNextFileW (in: hFindFile=0x5107ae0, lpFindFileData=0x31e5e4 | out: lpFindFileData=0x31e5e4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xaf17d760, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xaf215ce0, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0xaf215ce0, ftLastWriteTime.dwHighDateTime=0x1d2dda4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="webapprt", cAlternateFileName="")) returned 1 [0060.664] FindNextFileW (in: hFindFile=0x5107ae0, lpFindFileData=0x31e5e4 | out: lpFindFileData=0x31e5e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xaf17d760, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xaf17d760, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0x390e8e80, ftLastWriteTime.dwHighDateTime=0x1ced1ee, nFileSizeHigh=0x0, nFileSizeLow=0x1a670, dwReserved0=0x0, dwReserved1=0x0, cFileName="webapprt-stub.exe", cAlternateFileName="WEBAPP~2.EXE")) returned 1 [0060.664] FindNextFileW (in: hFindFile=0x5107ae0, lpFindFileData=0x31e5e4 | out: lpFindFileData=0x31e5e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xaf1a38c0, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xaf1a38c0, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0x49266e00, ftLastWriteTime.dwHighDateTime=0x1ced1ee, nFileSizeHigh=0x0, nFileSizeLow=0x1502070, dwReserved0=0x0, dwReserved1=0x0, cFileName="xul.dll", cAlternateFileName="")) returned 1 [0060.664] FindNextFileW (in: hFindFile=0x5107ae0, lpFindFileData=0x31e5e4 | out: lpFindFileData=0x31e5e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xaf1a38c0, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xaf1a38c0, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0x49266e00, ftLastWriteTime.dwHighDateTime=0x1ced1ee, nFileSizeHigh=0x0, nFileSizeLow=0x1502070, dwReserved0=0x0, dwReserved1=0x0, cFileName="xul.dll", cAlternateFileName="")) returned 0 [0060.664] FindClose (in: hFindFile=0x5107ae0 | out: hFindFile=0x5107ae0) returned 1 [0060.664] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e86c) returned 1 [0060.664] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e878) returned 1 [0060.664] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e834) returned 1 [0060.664] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Mozilla Firefox\\browser", nBufferLength=0x105, lpBuffer=0x31e33c, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Mozilla Firefox\\browser", lpFilePart=0x0) returned 0x2e [0060.664] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Mozilla Firefox\\browser\\", nBufferLength=0x105, lpBuffer=0x31e310, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Mozilla Firefox\\browser\\", lpFilePart=0x0) returned 0x2f [0060.664] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Mozilla Firefox\\browser\\*", lpFindFileData=0x31e55c | out: lpFindFileData=0x31e55c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xaef68420, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xaf288100, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0xaf288100, ftLastWriteTime.dwHighDateTime=0x1d2dda4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5107ae0 [0060.667] FindNextFileW (in: hFindFile=0x5107ae0, lpFindFileData=0x31e56c | out: lpFindFileData=0x31e56c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xaef68420, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xaf288100, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0xaf288100, ftLastWriteTime.dwHighDateTime=0x1d2dda4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0060.667] FindNextFileW (in: hFindFile=0x5107ae0, lpFindFileData=0x31e56c | out: lpFindFileData=0x31e56c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xaf23be40, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xaf23be40, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0xd4910680, ftLastWriteTime.dwHighDateTime=0x1ced1d0, nFileSizeHigh=0x0, nFileSizeLow=0x14623, dwReserved0=0x0, dwReserved1=0x0, cFileName="blocklist.xml", cAlternateFileName="BLOCKL~1.XML")) returned 1 [0060.667] FindNextFileW (in: hFindFile=0x5107ae0, lpFindFileData=0x31e56c | out: lpFindFileData=0x31e56c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xaf261fa0, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xaf261fa0, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0x132cbe00, ftLastWriteTime.dwHighDateTime=0x1ced1dd, nFileSizeHigh=0x0, nFileSizeLow=0x28, dwReserved0=0x0, dwReserved1=0x0, cFileName="chrome.manifest", cAlternateFileName="CHROME~1.MAN")) returned 1 [0060.667] FindNextFileW (in: hFindFile=0x5107ae0, lpFindFileData=0x31e56c | out: lpFindFileData=0x31e56c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xaf261fa0, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xaf2fa520, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0xaf2fa520, ftLastWriteTime.dwHighDateTime=0x1d2dda4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="components", cAlternateFileName="COMPON~1")) returned 1 [0060.667] FindNextFileW (in: hFindFile=0x5107ae0, lpFindFileData=0x31e56c | out: lpFindFileData=0x31e56c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xaf261fa0, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xaf261fa0, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0xd9ee5100, ftLastWriteTime.dwHighDateTime=0x1ced1d0, nFileSizeHigh=0x0, nFileSizeLow=0x30f, dwReserved0=0x0, dwReserved1=0x0, cFileName="crashreporter-override.ini", cAlternateFileName="CRASHR~1.INI")) returned 1 [0060.667] FindNextFileW (in: hFindFile=0x5107ae0, lpFindFileData=0x31e56c | out: lpFindFileData=0x31e56c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xaf261fa0, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xaf2d43c0, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0xaf2d43c0, ftLastWriteTime.dwHighDateTime=0x1d2dda4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="extensions", cAlternateFileName="EXTENS~1")) returned 1 [0060.667] FindNextFileW (in: hFindFile=0x5107ae0, lpFindFileData=0x31e56c | out: lpFindFileData=0x31e56c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xaf261fa0, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xaf261fa0, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0x57748a00, ftLastWriteTime.dwHighDateTime=0x1ced1ee, nFileSizeHigh=0x0, nFileSizeLow=0x44080e, dwReserved0=0x0, dwReserved1=0x0, cFileName="omni.ja", cAlternateFileName="")) returned 1 [0060.667] FindNextFileW (in: hFindFile=0x5107ae0, lpFindFileData=0x31e56c | out: lpFindFileData=0x31e56c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xaf288100, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xaf2d43c0, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0xaf2d43c0, ftLastWriteTime.dwHighDateTime=0x1d2dda4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="searchplugins", cAlternateFileName="SEARCH~1")) returned 1 [0060.667] FindNextFileW (in: hFindFile=0x5107ae0, lpFindFileData=0x31e56c | out: lpFindFileData=0x31e56c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xaf288100, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xaf2d43c0, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0xaf2d43c0, ftLastWriteTime.dwHighDateTime=0x1d2dda4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="searchplugins", cAlternateFileName="SEARCH~1")) returned 0 [0060.667] FindClose (in: hFindFile=0x5107ae0 | out: hFindFile=0x5107ae0) returned 1 [0060.668] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e7f4) returned 1 [0060.668] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e800) returned 1 [0060.668] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e834) returned 1 [0060.668] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Mozilla Firefox\\browser", nBufferLength=0x105, lpBuffer=0x31e33c, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Mozilla Firefox\\browser", lpFilePart=0x0) returned 0x2e [0060.668] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Mozilla Firefox\\browser\\", nBufferLength=0x105, lpBuffer=0x31e310, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Mozilla Firefox\\browser\\", lpFilePart=0x0) returned 0x2f [0060.668] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Mozilla Firefox\\browser\\*", lpFindFileData=0x31e55c | out: lpFindFileData=0x31e55c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xaef68420, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xaf288100, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0xaf288100, ftLastWriteTime.dwHighDateTime=0x1d2dda4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5107ae0 [0060.669] FindNextFileW (in: hFindFile=0x5107ae0, lpFindFileData=0x31e56c | out: lpFindFileData=0x31e56c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xaef68420, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xaf288100, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0xaf288100, ftLastWriteTime.dwHighDateTime=0x1d2dda4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0060.669] FindNextFileW (in: hFindFile=0x5107ae0, lpFindFileData=0x31e56c | out: lpFindFileData=0x31e56c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xaf23be40, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xaf23be40, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0xd4910680, ftLastWriteTime.dwHighDateTime=0x1ced1d0, nFileSizeHigh=0x0, nFileSizeLow=0x14623, dwReserved0=0x0, dwReserved1=0x0, cFileName="blocklist.xml", cAlternateFileName="BLOCKL~1.XML")) returned 1 [0060.669] FindNextFileW (in: hFindFile=0x5107ae0, lpFindFileData=0x31e56c | out: lpFindFileData=0x31e56c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xaf261fa0, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xaf261fa0, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0x132cbe00, ftLastWriteTime.dwHighDateTime=0x1ced1dd, nFileSizeHigh=0x0, nFileSizeLow=0x28, dwReserved0=0x0, dwReserved1=0x0, cFileName="chrome.manifest", cAlternateFileName="CHROME~1.MAN")) returned 1 [0060.669] FindNextFileW (in: hFindFile=0x5107ae0, lpFindFileData=0x31e56c | out: lpFindFileData=0x31e56c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xaf261fa0, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xaf2fa520, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0xaf2fa520, ftLastWriteTime.dwHighDateTime=0x1d2dda4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="components", cAlternateFileName="COMPON~1")) returned 1 [0060.669] FindNextFileW (in: hFindFile=0x5107ae0, lpFindFileData=0x31e56c | out: lpFindFileData=0x31e56c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xaf261fa0, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xaf261fa0, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0xd9ee5100, ftLastWriteTime.dwHighDateTime=0x1ced1d0, nFileSizeHigh=0x0, nFileSizeLow=0x30f, dwReserved0=0x0, dwReserved1=0x0, cFileName="crashreporter-override.ini", cAlternateFileName="CRASHR~1.INI")) returned 1 [0060.670] FindNextFileW (in: hFindFile=0x5107ae0, lpFindFileData=0x31e56c | out: lpFindFileData=0x31e56c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xaf261fa0, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xaf2d43c0, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0xaf2d43c0, ftLastWriteTime.dwHighDateTime=0x1d2dda4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="extensions", cAlternateFileName="EXTENS~1")) returned 1 [0060.670] FindNextFileW (in: hFindFile=0x5107ae0, lpFindFileData=0x31e56c | out: lpFindFileData=0x31e56c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xaf261fa0, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xaf261fa0, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0x57748a00, ftLastWriteTime.dwHighDateTime=0x1ced1ee, nFileSizeHigh=0x0, nFileSizeLow=0x44080e, dwReserved0=0x0, dwReserved1=0x0, cFileName="omni.ja", cAlternateFileName="")) returned 1 [0060.670] FindNextFileW (in: hFindFile=0x5107ae0, lpFindFileData=0x31e56c | out: lpFindFileData=0x31e56c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xaf288100, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xaf2d43c0, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0xaf2d43c0, ftLastWriteTime.dwHighDateTime=0x1d2dda4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="searchplugins", cAlternateFileName="SEARCH~1")) returned 1 [0060.670] FindNextFileW (in: hFindFile=0x5107ae0, lpFindFileData=0x31e56c | out: lpFindFileData=0x31e56c*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0060.670] FindClose (in: hFindFile=0x5107ae0 | out: hFindFile=0x5107ae0) returned 1 [0060.670] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e7f4) returned 1 [0060.671] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e800) returned 1 [0060.671] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Mozilla Firefox\\browser\\blocklist.xml", nBufferLength=0x105, lpBuffer=0x31e20c, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Mozilla Firefox\\browser\\blocklist.xml", lpFilePart=0x0) returned 0x3c [0060.671] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e700) returned 1 [0060.671] CreateFileW (lpFileName="C:\\Program Files (x86)\\Mozilla Firefox\\browser\\blocklist.xml" (normalized: "c:\\program files (x86)\\mozilla firefox\\browser\\blocklist.xml"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x178 [0060.672] GetFileType (hFile=0x178) returned 0x1 [0060.672] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e6fc) returned 1 [0060.672] GetFileType (hFile=0x178) returned 0x1 [0060.672] GetFileSize (in: hFile=0x178, lpFileSizeHigh=0x31e808 | out: lpFileSizeHigh=0x31e808*=0x0) returned 0x14623 [0060.672] ReadFile (in: hFile=0x178, lpBuffer=0x276cbfc, nNumberOfBytesToRead=0x14623, lpNumberOfBytesRead=0x31e7b4, lpOverlapped=0x0 | out: lpBuffer=0x276cbfc*, lpNumberOfBytesRead=0x31e7b4*=0x14623, lpOverlapped=0x0) returned 1 [0060.676] CloseHandle (hObject=0x178) returned 1 [0060.692] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Mozilla Firefox\\browser\\blocklist.xml", nBufferLength=0x105, lpBuffer=0x31e1f8, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Mozilla Firefox\\browser\\blocklist.xml", lpFilePart=0x0) returned 0x3c [0060.692] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e6ec) returned 1 [0060.692] CreateFileW (lpFileName="C:\\Program Files (x86)\\Mozilla Firefox\\browser\\blocklist.xml" (normalized: "c:\\program files (x86)\\mozilla firefox\\browser\\blocklist.xml"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x178 [0060.693] GetFileType (hFile=0x178) returned 0x1 [0060.693] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e6e8) returned 1 [0060.693] GetFileType (hFile=0x178) returned 0x1 [0060.693] WriteFile (in: hFile=0x178, lpBuffer=0x27f6c88*, nNumberOfBytesToWrite=0x14630, lpNumberOfBytesWritten=0x31e7a8, lpOverlapped=0x0 | out: lpBuffer=0x27f6c88*, lpNumberOfBytesWritten=0x31e7a8*=0x14630, lpOverlapped=0x0) returned 1 [0060.695] CloseHandle (hObject=0x178) returned 1 [0060.695] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Mozilla Firefox\\browser\\blocklist.xml", nBufferLength=0x105, lpBuffer=0x31e32c, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Mozilla Firefox\\browser\\blocklist.xml", lpFilePart=0x0) returned 0x3c [0060.695] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Mozilla Firefox\\browser\\blocklist.xml", nBufferLength=0x105, lpBuffer=0x31e32c, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Mozilla Firefox\\browser\\blocklist.xml", lpFilePart=0x0) returned 0x3c [0060.695] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e78c) returned 1 [0060.695] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Mozilla Firefox\\browser\\blocklist.xml" (normalized: "c:\\program files (x86)\\mozilla firefox\\browser\\blocklist.xml"), fInfoLevelId=0x0, lpFileInformation=0x31e808 | out: lpFileInformation=0x31e808*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xaf23be40, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xaf23be40, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0x79e4860, ftLastWriteTime.dwHighDateTime=0x1d6eb7f, nFileSizeHigh=0x0, nFileSizeLow=0x14630)) returned 1 [0060.696] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e788) returned 1 [0060.696] MoveFileW (lpExistingFileName="C:\\Program Files (x86)\\Mozilla Firefox\\browser\\blocklist.xml" (normalized: "c:\\program files (x86)\\mozilla firefox\\browser\\blocklist.xml"), lpNewFileName="C:\\Program Files (x86)\\Mozilla Firefox\\browser\\blocklist.xml" (normalized: "c:\\program files (x86)\\mozilla firefox\\browser\\blocklist.xml")) returned 1 [0060.696] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e7bc) returned 1 [0060.696] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Mozilla Firefox\\browser\\components", nBufferLength=0x105, lpBuffer=0x31e2c4, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Mozilla Firefox\\browser\\components", lpFilePart=0x0) returned 0x39 [0060.696] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Mozilla Firefox\\browser\\components\\", nBufferLength=0x105, lpBuffer=0x31e298, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Mozilla Firefox\\browser\\components\\", lpFilePart=0x0) returned 0x3a [0060.696] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Mozilla Firefox\\browser\\components\\*", lpFindFileData=0x31e4e4 | out: lpFindFileData=0x31e4e4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xaf261fa0, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xaf2fa520, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0xaf2fa520, ftLastWriteTime.dwHighDateTime=0x1d2dda4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5107b60 [0060.697] FindNextFileW (in: hFindFile=0x5107b60, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xaf261fa0, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xaf2fa520, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0xaf2fa520, ftLastWriteTime.dwHighDateTime=0x1d2dda4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0060.697] FindNextFileW (in: hFindFile=0x5107b60, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xaf2fa520, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xaf2fa520, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0x49bf0480, ftLastWriteTime.dwHighDateTime=0x1ced1ee, nFileSizeHigh=0x0, nFileSizeLow=0x42870, dwReserved0=0x0, dwReserved1=0x0, cFileName="browsercomps.dll", cAlternateFileName="BROWSE~1.DLL")) returned 1 [0060.697] FindNextFileW (in: hFindFile=0x5107b60, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xaf2fa520, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xaf2fa520, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0x132cbe00, ftLastWriteTime.dwHighDateTime=0x1ced1dd, nFileSizeHigh=0x0, nFileSizeLow=0x22, dwReserved0=0x0, dwReserved1=0x0, cFileName="components.manifest", cAlternateFileName="COMPON~1.MAN")) returned 1 [0060.697] FindNextFileW (in: hFindFile=0x5107b60, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0060.697] FindClose (in: hFindFile=0x5107b60 | out: hFindFile=0x5107b60) returned 1 [0060.697] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e77c) returned 1 [0060.697] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e788) returned 1 [0060.697] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e7bc) returned 1 [0060.697] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Mozilla Firefox\\browser\\components", nBufferLength=0x105, lpBuffer=0x31e2c4, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Mozilla Firefox\\browser\\components", lpFilePart=0x0) returned 0x39 [0060.697] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Mozilla Firefox\\browser\\components\\", nBufferLength=0x105, lpBuffer=0x31e298, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Mozilla Firefox\\browser\\components\\", lpFilePart=0x0) returned 0x3a [0060.698] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Mozilla Firefox\\browser\\components\\*", lpFindFileData=0x31e4e4 | out: lpFindFileData=0x31e4e4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xaf261fa0, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xaf2fa520, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0xaf2fa520, ftLastWriteTime.dwHighDateTime=0x1d2dda4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5107b60 [0060.698] FindNextFileW (in: hFindFile=0x5107b60, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xaf261fa0, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xaf2fa520, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0xaf2fa520, ftLastWriteTime.dwHighDateTime=0x1d2dda4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0060.698] FindNextFileW (in: hFindFile=0x5107b60, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xaf2fa520, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xaf2fa520, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0x49bf0480, ftLastWriteTime.dwHighDateTime=0x1ced1ee, nFileSizeHigh=0x0, nFileSizeLow=0x42870, dwReserved0=0x0, dwReserved1=0x0, cFileName="browsercomps.dll", cAlternateFileName="BROWSE~1.DLL")) returned 1 [0060.698] FindNextFileW (in: hFindFile=0x5107b60, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xaf2fa520, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xaf2fa520, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0x132cbe00, ftLastWriteTime.dwHighDateTime=0x1ced1dd, nFileSizeHigh=0x0, nFileSizeLow=0x22, dwReserved0=0x0, dwReserved1=0x0, cFileName="components.manifest", cAlternateFileName="COMPON~1.MAN")) returned 1 [0060.698] FindNextFileW (in: hFindFile=0x5107b60, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xaf2fa520, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xaf2fa520, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0x132cbe00, ftLastWriteTime.dwHighDateTime=0x1ced1dd, nFileSizeHigh=0x0, nFileSizeLow=0x22, dwReserved0=0x0, dwReserved1=0x0, cFileName="components.manifest", cAlternateFileName="COMPON~1.MAN")) returned 0 [0060.698] FindClose (in: hFindFile=0x5107b60 | out: hFindFile=0x5107b60) returned 1 [0060.698] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e77c) returned 1 [0060.698] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e788) returned 1 [0060.698] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e7bc) returned 1 [0060.698] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Mozilla Firefox\\browser\\extensions", nBufferLength=0x105, lpBuffer=0x31e2c4, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Mozilla Firefox\\browser\\extensions", lpFilePart=0x0) returned 0x39 [0060.698] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Mozilla Firefox\\browser\\extensions\\", nBufferLength=0x105, lpBuffer=0x31e298, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Mozilla Firefox\\browser\\extensions\\", lpFilePart=0x0) returned 0x3a [0060.698] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Mozilla Firefox\\browser\\extensions\\*", lpFindFileData=0x31e4e4 | out: lpFindFileData=0x31e4e4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xaf261fa0, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xaf2d43c0, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0xaf2d43c0, ftLastWriteTime.dwHighDateTime=0x1d2dda4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5107b60 [0060.699] FindNextFileW (in: hFindFile=0x5107b60, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xaf261fa0, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xaf2d43c0, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0xaf2d43c0, ftLastWriteTime.dwHighDateTime=0x1d2dda4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0060.699] FindNextFileW (in: hFindFile=0x5107b60, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xaf2d43c0, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xaf2d43c0, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0xaf2d43c0, ftLastWriteTime.dwHighDateTime=0x1d2dda4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="{972ce4c6-7e08-4474-a285-3208198ce6fd}", cAlternateFileName="{972CE~1")) returned 1 [0060.699] FindNextFileW (in: hFindFile=0x5107b60, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xaf2d43c0, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xaf2d43c0, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0xaf2d43c0, ftLastWriteTime.dwHighDateTime=0x1d2dda4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="{972ce4c6-7e08-4474-a285-3208198ce6fd}", cAlternateFileName="{972CE~1")) returned 0 [0060.699] FindClose (in: hFindFile=0x5107b60 | out: hFindFile=0x5107b60) returned 1 [0060.699] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e77c) returned 1 [0060.699] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e788) returned 1 [0060.699] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e7bc) returned 1 [0060.699] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Mozilla Firefox\\browser\\extensions", nBufferLength=0x105, lpBuffer=0x31e2c4, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Mozilla Firefox\\browser\\extensions", lpFilePart=0x0) returned 0x39 [0060.699] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Mozilla Firefox\\browser\\extensions\\", nBufferLength=0x105, lpBuffer=0x31e298, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Mozilla Firefox\\browser\\extensions\\", lpFilePart=0x0) returned 0x3a [0060.699] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Mozilla Firefox\\browser\\extensions\\*", lpFindFileData=0x31e4e4 | out: lpFindFileData=0x31e4e4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xaf261fa0, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xaf2d43c0, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0xaf2d43c0, ftLastWriteTime.dwHighDateTime=0x1d2dda4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5107b60 [0060.700] FindNextFileW (in: hFindFile=0x5107b60, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xaf261fa0, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xaf2d43c0, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0xaf2d43c0, ftLastWriteTime.dwHighDateTime=0x1d2dda4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0060.700] FindNextFileW (in: hFindFile=0x5107b60, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xaf2d43c0, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xaf2d43c0, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0xaf2d43c0, ftLastWriteTime.dwHighDateTime=0x1d2dda4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="{972ce4c6-7e08-4474-a285-3208198ce6fd}", cAlternateFileName="{972CE~1")) returned 1 [0060.700] FindNextFileW (in: hFindFile=0x5107b60, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0060.700] FindClose (in: hFindFile=0x5107b60 | out: hFindFile=0x5107b60) returned 1 [0060.700] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e77c) returned 1 [0060.700] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e788) returned 1 [0060.700] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e744) returned 1 [0060.700] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Mozilla Firefox\\browser\\extensions\\{972ce4c6-7e08-4474-a285-3208198ce6fd}", nBufferLength=0x105, lpBuffer=0x31e24c, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Mozilla Firefox\\browser\\extensions\\{972ce4c6-7e08-4474-a285-3208198ce6fd}", lpFilePart=0x0) returned 0x60 [0060.700] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Mozilla Firefox\\browser\\extensions\\{972ce4c6-7e08-4474-a285-3208198ce6fd}\\", nBufferLength=0x105, lpBuffer=0x31e220, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Mozilla Firefox\\browser\\extensions\\{972ce4c6-7e08-4474-a285-3208198ce6fd}\\", lpFilePart=0x0) returned 0x61 [0060.700] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Mozilla Firefox\\browser\\extensions\\{972ce4c6-7e08-4474-a285-3208198ce6fd}\\*", lpFindFileData=0x31e46c | out: lpFindFileData=0x31e46c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xaf2d43c0, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xaf2d43c0, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0xaf2d43c0, ftLastWriteTime.dwHighDateTime=0x1d2dda4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5107b60 [0060.701] FindNextFileW (in: hFindFile=0x5107b60, lpFindFileData=0x31e47c | out: lpFindFileData=0x31e47c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xaf2d43c0, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xaf2d43c0, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0xaf2d43c0, ftLastWriteTime.dwHighDateTime=0x1d2dda4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0060.701] FindNextFileW (in: hFindFile=0x5107b60, lpFindFileData=0x31e47c | out: lpFindFileData=0x31e47c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xaf2d43c0, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xaf2d43c0, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0xdc50ab00, ftLastWriteTime.dwHighDateTime=0x1ced1d0, nFileSizeHigh=0x0, nFileSizeLow=0x889, dwReserved0=0x0, dwReserved1=0x0, cFileName="icon.png", cAlternateFileName="")) returned 1 [0060.701] FindNextFileW (in: hFindFile=0x5107b60, lpFindFileData=0x31e47c | out: lpFindFileData=0x31e47c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xaf2d43c0, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xaf2d43c0, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0xe11b5c00, ftLastWriteTime.dwHighDateTime=0x1ced1dc, nFileSizeHigh=0x0, nFileSizeLow=0x54e, dwReserved0=0x0, dwReserved1=0x0, cFileName="install.rdf", cAlternateFileName="")) returned 1 [0060.701] FindNextFileW (in: hFindFile=0x5107b60, lpFindFileData=0x31e47c | out: lpFindFileData=0x31e47c*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0060.701] FindClose (in: hFindFile=0x5107b60 | out: hFindFile=0x5107b60) returned 1 [0060.701] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e704) returned 1 [0060.701] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e710) returned 1 [0060.701] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e744) returned 1 [0060.701] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Mozilla Firefox\\browser\\extensions\\{972ce4c6-7e08-4474-a285-3208198ce6fd}", nBufferLength=0x105, lpBuffer=0x31e24c, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Mozilla Firefox\\browser\\extensions\\{972ce4c6-7e08-4474-a285-3208198ce6fd}", lpFilePart=0x0) returned 0x60 [0060.701] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Mozilla Firefox\\browser\\extensions\\{972ce4c6-7e08-4474-a285-3208198ce6fd}\\", nBufferLength=0x105, lpBuffer=0x31e220, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Mozilla Firefox\\browser\\extensions\\{972ce4c6-7e08-4474-a285-3208198ce6fd}\\", lpFilePart=0x0) returned 0x61 [0060.701] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Mozilla Firefox\\browser\\extensions\\{972ce4c6-7e08-4474-a285-3208198ce6fd}\\*", lpFindFileData=0x31e46c | out: lpFindFileData=0x31e46c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xaf2d43c0, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xaf2d43c0, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0xaf2d43c0, ftLastWriteTime.dwHighDateTime=0x1d2dda4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5107b60 [0060.702] FindNextFileW (in: hFindFile=0x5107b60, lpFindFileData=0x31e47c | out: lpFindFileData=0x31e47c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xaf2d43c0, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xaf2d43c0, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0xaf2d43c0, ftLastWriteTime.dwHighDateTime=0x1d2dda4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0060.702] FindNextFileW (in: hFindFile=0x5107b60, lpFindFileData=0x31e47c | out: lpFindFileData=0x31e47c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xaf2d43c0, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xaf2d43c0, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0xdc50ab00, ftLastWriteTime.dwHighDateTime=0x1ced1d0, nFileSizeHigh=0x0, nFileSizeLow=0x889, dwReserved0=0x0, dwReserved1=0x0, cFileName="icon.png", cAlternateFileName="")) returned 1 [0060.702] FindNextFileW (in: hFindFile=0x5107b60, lpFindFileData=0x31e47c | out: lpFindFileData=0x31e47c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xaf2d43c0, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xaf2d43c0, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0xe11b5c00, ftLastWriteTime.dwHighDateTime=0x1ced1dc, nFileSizeHigh=0x0, nFileSizeLow=0x54e, dwReserved0=0x0, dwReserved1=0x0, cFileName="install.rdf", cAlternateFileName="")) returned 1 [0060.702] FindNextFileW (in: hFindFile=0x5107b60, lpFindFileData=0x31e47c | out: lpFindFileData=0x31e47c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xaf2d43c0, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xaf2d43c0, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0xe11b5c00, ftLastWriteTime.dwHighDateTime=0x1ced1dc, nFileSizeHigh=0x0, nFileSizeLow=0x54e, dwReserved0=0x0, dwReserved1=0x0, cFileName="install.rdf", cAlternateFileName="")) returned 0 [0060.702] FindClose (in: hFindFile=0x5107b60 | out: hFindFile=0x5107b60) returned 1 [0060.702] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e704) returned 1 [0060.702] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e710) returned 1 [0060.702] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Mozilla Firefox\\browser\\extensions\\{972ce4c6-7e08-4474-a285-3208198ce6fd}\\icon.png", nBufferLength=0x105, lpBuffer=0x31e11c, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Mozilla Firefox\\browser\\extensions\\{972ce4c6-7e08-4474-a285-3208198ce6fd}\\icon.png", lpFilePart=0x0) returned 0x69 [0060.702] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e610) returned 1 [0060.702] CreateFileW (lpFileName="C:\\Program Files (x86)\\Mozilla Firefox\\browser\\extensions\\{972ce4c6-7e08-4474-a285-3208198ce6fd}\\icon.png" (normalized: "c:\\program files (x86)\\mozilla firefox\\browser\\extensions\\{972ce4c6-7e08-4474-a285-3208198ce6fd}\\icon.png"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x178 [0060.703] GetFileType (hFile=0x178) returned 0x1 [0060.703] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e60c) returned 1 [0060.703] GetFileType (hFile=0x178) returned 0x1 [0060.703] GetFileSize (in: hFile=0x178, lpFileSizeHigh=0x31e718 | out: lpFileSizeHigh=0x31e718*=0x0) returned 0x889 [0060.703] ReadFile (in: hFile=0x178, lpBuffer=0x2811670, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x31e6c4, lpOverlapped=0x0 | out: lpBuffer=0x2811670*, lpNumberOfBytesRead=0x31e6c4*=0x889, lpOverlapped=0x0) returned 1 [0060.748] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Mozilla Firefox\\browser\\extensions\\{972ce4c6-7e08-4474-a285-3208198ce6fd}\\icon.png", nBufferLength=0x105, lpBuffer=0x31e108, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Mozilla Firefox\\browser\\extensions\\{972ce4c6-7e08-4474-a285-3208198ce6fd}\\icon.png", lpFilePart=0x0) returned 0x69 [0060.748] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e5fc) returned 1 [0060.748] CreateFileW (lpFileName="C:\\Program Files (x86)\\Mozilla Firefox\\browser\\extensions\\{972ce4c6-7e08-4474-a285-3208198ce6fd}\\icon.png" (normalized: "c:\\program files (x86)\\mozilla firefox\\browser\\extensions\\{972ce4c6-7e08-4474-a285-3208198ce6fd}\\icon.png"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x178 [0060.749] GetFileType (hFile=0x178) returned 0x1 [0060.749] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e5f8) returned 1 [0060.749] GetFileType (hFile=0x178) returned 0x1 [0060.749] WriteFile (in: hFile=0x178, lpBuffer=0x26631a4*, nNumberOfBytesToWrite=0x890, lpNumberOfBytesWritten=0x31e68c, lpOverlapped=0x0 | out: lpBuffer=0x26631a4*, lpNumberOfBytesWritten=0x31e68c*=0x890, lpOverlapped=0x0) returned 1 [0060.751] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Mozilla Firefox\\browser\\extensions\\{972ce4c6-7e08-4474-a285-3208198ce6fd}\\icon.png", nBufferLength=0x105, lpBuffer=0x31e23c, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Mozilla Firefox\\browser\\extensions\\{972ce4c6-7e08-4474-a285-3208198ce6fd}\\icon.png", lpFilePart=0x0) returned 0x69 [0060.751] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Mozilla Firefox\\browser\\extensions\\{972ce4c6-7e08-4474-a285-3208198ce6fd}\\icon.png", nBufferLength=0x105, lpBuffer=0x31e23c, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Mozilla Firefox\\browser\\extensions\\{972ce4c6-7e08-4474-a285-3208198ce6fd}\\icon.png", lpFilePart=0x0) returned 0x69 [0060.751] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e69c) returned 1 [0060.751] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Mozilla Firefox\\browser\\extensions\\{972ce4c6-7e08-4474-a285-3208198ce6fd}\\icon.png" (normalized: "c:\\program files (x86)\\mozilla firefox\\browser\\extensions\\{972ce4c6-7e08-4474-a285-3208198ce6fd}\\icon.png"), fInfoLevelId=0x0, lpFileInformation=0x31e718 | out: lpFileInformation=0x31e718*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xaf2d43c0, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xaf2d43c0, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0x7a7cde0, ftLastWriteTime.dwHighDateTime=0x1d6eb7f, nFileSizeHigh=0x0, nFileSizeLow=0x890)) returned 1 [0060.751] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e698) returned 1 [0060.751] MoveFileW (lpExistingFileName="C:\\Program Files (x86)\\Mozilla Firefox\\browser\\extensions\\{972ce4c6-7e08-4474-a285-3208198ce6fd}\\icon.png" (normalized: "c:\\program files (x86)\\mozilla firefox\\browser\\extensions\\{972ce4c6-7e08-4474-a285-3208198ce6fd}\\icon.png"), lpNewFileName="C:\\Program Files (x86)\\Mozilla Firefox\\browser\\extensions\\{972ce4c6-7e08-4474-a285-3208198ce6fd}\\icon.png" (normalized: "c:\\program files (x86)\\mozilla firefox\\browser\\extensions\\{972ce4c6-7e08-4474-a285-3208198ce6fd}\\icon.png")) returned 1 [0060.751] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e7bc) returned 1 [0060.751] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Mozilla Firefox\\browser\\searchplugins", nBufferLength=0x105, lpBuffer=0x31e2c4, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Mozilla Firefox\\browser\\searchplugins", lpFilePart=0x0) returned 0x3c [0060.752] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Mozilla Firefox\\browser\\searchplugins\\", nBufferLength=0x105, lpBuffer=0x31e298, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Mozilla Firefox\\browser\\searchplugins\\", lpFilePart=0x0) returned 0x3d [0060.752] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Mozilla Firefox\\browser\\searchplugins\\*", lpFindFileData=0x31e4e4 | out: lpFindFileData=0x31e4e4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xaf288100, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xaf2d43c0, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0xaf2d43c0, ftLastWriteTime.dwHighDateTime=0x1d2dda4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5107a20 [0060.753] FindNextFileW (in: hFindFile=0x5107a20, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xaf288100, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xaf2d43c0, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0xaf2d43c0, ftLastWriteTime.dwHighDateTime=0x1d2dda4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0060.754] FindNextFileW (in: hFindFile=0x5107a20, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xaf288100, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xaf288100, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0xd4970380, ftLastWriteTime.dwHighDateTime=0x1ced1dc, nFileSizeHigh=0x0, nFileSizeLow=0x9a0, dwReserved0=0x0, dwReserved1=0x0, cFileName="amazondotcom.xml", cAlternateFileName="AMAZON~1.XML")) returned 1 [0060.754] FindNextFileW (in: hFindFile=0x5107a20, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xaf288100, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xaf288100, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0xd4970380, ftLastWriteTime.dwHighDateTime=0x1ced1dc, nFileSizeHigh=0x0, nFileSizeLow=0xb3e, dwReserved0=0x0, dwReserved1=0x0, cFileName="bing.xml", cAlternateFileName="")) returned 1 [0060.754] FindNextFileW (in: hFindFile=0x5107a20, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xaf288100, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xaf288100, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0xd4970380, ftLastWriteTime.dwHighDateTime=0x1ced1dc, nFileSizeHigh=0x0, nFileSizeLow=0xa17, dwReserved0=0x0, dwReserved1=0x0, cFileName="eBay.xml", cAlternateFileName="")) returned 1 [0060.754] FindNextFileW (in: hFindFile=0x5107a20, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xaf2ae260, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xaf2ae260, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0xd4970380, ftLastWriteTime.dwHighDateTime=0x1ced1dc, nFileSizeHigh=0x0, nFileSizeLow=0xb9b, dwReserved0=0x0, dwReserved1=0x0, cFileName="google.xml", cAlternateFileName="")) returned 1 [0060.754] FindNextFileW (in: hFindFile=0x5107a20, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xaf2ae260, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xaf2ae260, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0xd4970380, ftLastWriteTime.dwHighDateTime=0x1ced1dc, nFileSizeHigh=0x0, nFileSizeLow=0xb91, dwReserved0=0x0, dwReserved1=0x0, cFileName="twitter.xml", cAlternateFileName="")) returned 1 [0060.754] FindNextFileW (in: hFindFile=0x5107a20, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xaf2ae260, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xaf2ae260, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0xd4970380, ftLastWriteTime.dwHighDateTime=0x1ced1dc, nFileSizeHigh=0x0, nFileSizeLow=0x8b2, dwReserved0=0x0, dwReserved1=0x0, cFileName="wikipedia.xml", cAlternateFileName="WIKIPE~1.XML")) returned 1 [0060.754] FindNextFileW (in: hFindFile=0x5107a20, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xaf2d43c0, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xaf2d43c0, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0xd52f9a00, ftLastWriteTime.dwHighDateTime=0x1ced1dc, nFileSizeHigh=0x0, nFileSizeLow=0xa73, dwReserved0=0x0, dwReserved1=0x0, cFileName="yahoo.xml", cAlternateFileName="")) returned 1 [0060.754] FindNextFileW (in: hFindFile=0x5107a20, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0060.754] FindClose (in: hFindFile=0x5107a20 | out: hFindFile=0x5107a20) returned 1 [0060.755] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e77c) returned 1 [0060.755] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e788) returned 1 [0060.755] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e7bc) returned 1 [0060.755] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Mozilla Firefox\\browser\\searchplugins", nBufferLength=0x105, lpBuffer=0x31e2c4, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Mozilla Firefox\\browser\\searchplugins", lpFilePart=0x0) returned 0x3c [0060.755] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Mozilla Firefox\\browser\\searchplugins\\", nBufferLength=0x105, lpBuffer=0x31e298, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Mozilla Firefox\\browser\\searchplugins\\", lpFilePart=0x0) returned 0x3d [0060.755] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Mozilla Firefox\\browser\\searchplugins\\*", lpFindFileData=0x31e4e4 | out: lpFindFileData=0x31e4e4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xaf288100, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xaf2d43c0, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0xaf2d43c0, ftLastWriteTime.dwHighDateTime=0x1d2dda4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5107a20 [0060.756] FindNextFileW (in: hFindFile=0x5107a20, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xaf288100, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xaf2d43c0, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0xaf2d43c0, ftLastWriteTime.dwHighDateTime=0x1d2dda4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0060.756] FindNextFileW (in: hFindFile=0x5107a20, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xaf288100, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xaf288100, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0xd4970380, ftLastWriteTime.dwHighDateTime=0x1ced1dc, nFileSizeHigh=0x0, nFileSizeLow=0x9a0, dwReserved0=0x0, dwReserved1=0x0, cFileName="amazondotcom.xml", cAlternateFileName="AMAZON~1.XML")) returned 1 [0060.756] FindNextFileW (in: hFindFile=0x5107a20, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xaf288100, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xaf288100, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0xd4970380, ftLastWriteTime.dwHighDateTime=0x1ced1dc, nFileSizeHigh=0x0, nFileSizeLow=0xb3e, dwReserved0=0x0, dwReserved1=0x0, cFileName="bing.xml", cAlternateFileName="")) returned 1 [0060.757] FindNextFileW (in: hFindFile=0x5107a20, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xaf288100, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xaf288100, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0xd4970380, ftLastWriteTime.dwHighDateTime=0x1ced1dc, nFileSizeHigh=0x0, nFileSizeLow=0xa17, dwReserved0=0x0, dwReserved1=0x0, cFileName="eBay.xml", cAlternateFileName="")) returned 1 [0060.757] FindNextFileW (in: hFindFile=0x5107a20, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xaf2ae260, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xaf2ae260, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0xd4970380, ftLastWriteTime.dwHighDateTime=0x1ced1dc, nFileSizeHigh=0x0, nFileSizeLow=0xb9b, dwReserved0=0x0, dwReserved1=0x0, cFileName="google.xml", cAlternateFileName="")) returned 1 [0060.757] FindNextFileW (in: hFindFile=0x5107a20, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xaf2ae260, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xaf2ae260, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0xd4970380, ftLastWriteTime.dwHighDateTime=0x1ced1dc, nFileSizeHigh=0x0, nFileSizeLow=0xb91, dwReserved0=0x0, dwReserved1=0x0, cFileName="twitter.xml", cAlternateFileName="")) returned 1 [0060.757] FindNextFileW (in: hFindFile=0x5107a20, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xaf2ae260, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xaf2ae260, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0xd4970380, ftLastWriteTime.dwHighDateTime=0x1ced1dc, nFileSizeHigh=0x0, nFileSizeLow=0x8b2, dwReserved0=0x0, dwReserved1=0x0, cFileName="wikipedia.xml", cAlternateFileName="WIKIPE~1.XML")) returned 1 [0060.757] FindNextFileW (in: hFindFile=0x5107a20, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xaf2d43c0, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xaf2d43c0, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0xd52f9a00, ftLastWriteTime.dwHighDateTime=0x1ced1dc, nFileSizeHigh=0x0, nFileSizeLow=0xa73, dwReserved0=0x0, dwReserved1=0x0, cFileName="yahoo.xml", cAlternateFileName="")) returned 1 [0060.757] FindNextFileW (in: hFindFile=0x5107a20, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xaf2d43c0, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xaf2d43c0, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0xd52f9a00, ftLastWriteTime.dwHighDateTime=0x1ced1dc, nFileSizeHigh=0x0, nFileSizeLow=0xa73, dwReserved0=0x0, dwReserved1=0x0, cFileName="yahoo.xml", cAlternateFileName="")) returned 0 [0060.757] FindClose (in: hFindFile=0x5107a20 | out: hFindFile=0x5107a20) returned 1 [0060.758] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e77c) returned 1 [0060.758] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e788) returned 1 [0060.758] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Mozilla Firefox\\browser\\searchplugins\\amazondotcom.xml", nBufferLength=0x105, lpBuffer=0x31e194, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Mozilla Firefox\\browser\\searchplugins\\amazondotcom.xml", lpFilePart=0x0) returned 0x4d [0060.758] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e688) returned 1 [0060.758] CreateFileW (lpFileName="C:\\Program Files (x86)\\Mozilla Firefox\\browser\\searchplugins\\amazondotcom.xml" (normalized: "c:\\program files (x86)\\mozilla firefox\\browser\\searchplugins\\amazondotcom.xml"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x178 [0060.759] GetFileType (hFile=0x178) returned 0x1 [0060.759] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e684) returned 1 [0060.759] GetFileType (hFile=0x178) returned 0x1 [0060.759] GetFileSize (in: hFile=0x178, lpFileSizeHigh=0x31e790 | out: lpFileSizeHigh=0x31e790*=0x0) returned 0x9a0 [0060.759] ReadFile (in: hFile=0x178, lpBuffer=0x2667970, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x31e73c, lpOverlapped=0x0 | out: lpBuffer=0x2667970*, lpNumberOfBytesRead=0x31e73c*=0x9a0, lpOverlapped=0x0) returned 1 [0060.761] CloseHandle (hObject=0x178) returned 1 [0060.774] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Mozilla Firefox\\browser\\searchplugins\\amazondotcom.xml", nBufferLength=0x105, lpBuffer=0x31e180, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Mozilla Firefox\\browser\\searchplugins\\amazondotcom.xml", lpFilePart=0x0) returned 0x4d [0060.774] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e674) returned 1 [0060.774] CreateFileW (lpFileName="C:\\Program Files (x86)\\Mozilla Firefox\\browser\\searchplugins\\amazondotcom.xml" (normalized: "c:\\program files (x86)\\mozilla firefox\\browser\\searchplugins\\amazondotcom.xml"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x178 [0060.775] GetFileType (hFile=0x178) returned 0x1 [0060.775] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e670) returned 1 [0060.775] GetFileType (hFile=0x178) returned 0x1 [0060.775] WriteFile (in: hFile=0x178, lpBuffer=0x26b8a70*, nNumberOfBytesToWrite=0x9b0, lpNumberOfBytesWritten=0x31e704, lpOverlapped=0x0 | out: lpBuffer=0x26b8a70*, lpNumberOfBytesWritten=0x31e704*=0x9b0, lpOverlapped=0x0) returned 1 [0060.776] CloseHandle (hObject=0x178) returned 1 [0060.776] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Mozilla Firefox\\browser\\searchplugins\\amazondotcom.xml", nBufferLength=0x105, lpBuffer=0x31e2b4, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Mozilla Firefox\\browser\\searchplugins\\amazondotcom.xml", lpFilePart=0x0) returned 0x4d [0060.776] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Mozilla Firefox\\browser\\searchplugins\\amazondotcom.xml", nBufferLength=0x105, lpBuffer=0x31e2b4, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Mozilla Firefox\\browser\\searchplugins\\amazondotcom.xml", lpFilePart=0x0) returned 0x4d [0060.776] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e714) returned 1 [0060.776] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Mozilla Firefox\\browser\\searchplugins\\amazondotcom.xml" (normalized: "c:\\program files (x86)\\mozilla firefox\\browser\\searchplugins\\amazondotcom.xml"), fInfoLevelId=0x0, lpFileInformation=0x31e790 | out: lpFileInformation=0x31e790*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xaf288100, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xaf288100, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0x7aa2f40, ftLastWriteTime.dwHighDateTime=0x1d6eb7f, nFileSizeHigh=0x0, nFileSizeLow=0x9b0)) returned 1 [0060.776] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e710) returned 1 [0060.776] MoveFileW (lpExistingFileName="C:\\Program Files (x86)\\Mozilla Firefox\\browser\\searchplugins\\amazondotcom.xml" (normalized: "c:\\program files (x86)\\mozilla firefox\\browser\\searchplugins\\amazondotcom.xml"), lpNewFileName="C:\\Program Files (x86)\\Mozilla Firefox\\browser\\searchplugins\\amazondotcom.xml" (normalized: "c:\\program files (x86)\\mozilla firefox\\browser\\searchplugins\\amazondotcom.xml")) returned 1 [0060.777] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Mozilla Firefox\\browser\\searchplugins\\bing.xml", nBufferLength=0x105, lpBuffer=0x31e194, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Mozilla Firefox\\browser\\searchplugins\\bing.xml", lpFilePart=0x0) returned 0x45 [0060.777] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e688) returned 1 [0060.777] CreateFileW (lpFileName="C:\\Program Files (x86)\\Mozilla Firefox\\browser\\searchplugins\\bing.xml" (normalized: "c:\\program files (x86)\\mozilla firefox\\browser\\searchplugins\\bing.xml"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x178 [0060.777] GetFileType (hFile=0x178) returned 0x1 [0060.777] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e684) returned 1 [0060.777] GetFileType (hFile=0x178) returned 0x1 [0060.777] GetFileSize (in: hFile=0x178, lpFileSizeHigh=0x31e790 | out: lpFileSizeHigh=0x31e790*=0x0) returned 0xb3e [0060.777] ReadFile (in: hFile=0x178, lpBuffer=0x26ba844, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x31e73c, lpOverlapped=0x0 | out: lpBuffer=0x26ba844*, lpNumberOfBytesRead=0x31e73c*=0xb3e, lpOverlapped=0x0) returned 1 [0060.779] CloseHandle (hObject=0x178) returned 1 [0060.792] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Mozilla Firefox\\browser\\searchplugins\\bing.xml", nBufferLength=0x105, lpBuffer=0x31e180, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Mozilla Firefox\\browser\\searchplugins\\bing.xml", lpFilePart=0x0) returned 0x45 [0060.792] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e674) returned 1 [0060.792] CreateFileW (lpFileName="C:\\Program Files (x86)\\Mozilla Firefox\\browser\\searchplugins\\bing.xml" (normalized: "c:\\program files (x86)\\mozilla firefox\\browser\\searchplugins\\bing.xml"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x178 [0060.793] GetFileType (hFile=0x178) returned 0x1 [0060.793] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e670) returned 1 [0060.793] GetFileType (hFile=0x178) returned 0x1 [0060.794] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Mozilla Firefox\\browser\\searchplugins\\bing.xml", nBufferLength=0x105, lpBuffer=0x31e2b4, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Mozilla Firefox\\browser\\searchplugins\\bing.xml", lpFilePart=0x0) returned 0x45 [0060.794] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Mozilla Firefox\\browser\\searchplugins\\bing.xml", nBufferLength=0x105, lpBuffer=0x31e2b4, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Mozilla Firefox\\browser\\searchplugins\\bing.xml", lpFilePart=0x0) returned 0x45 [0060.795] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e714) returned 1 [0060.795] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Mozilla Firefox\\browser\\searchplugins\\bing.xml" (normalized: "c:\\program files (x86)\\mozilla firefox\\browser\\searchplugins\\bing.xml"), fInfoLevelId=0x0, lpFileInformation=0x31e790 | out: lpFileInformation=0x31e790*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xaf288100, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xaf288100, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0x7aef200, ftLastWriteTime.dwHighDateTime=0x1d6eb7f, nFileSizeHigh=0x0, nFileSizeLow=0xb40)) returned 1 [0060.795] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e710) returned 1 [0060.795] MoveFileW (lpExistingFileName="C:\\Program Files (x86)\\Mozilla Firefox\\browser\\searchplugins\\bing.xml" (normalized: "c:\\program files (x86)\\mozilla firefox\\browser\\searchplugins\\bing.xml"), lpNewFileName="C:\\Program Files (x86)\\Mozilla Firefox\\browser\\searchplugins\\bing.xml" (normalized: "c:\\program files (x86)\\mozilla firefox\\browser\\searchplugins\\bing.xml")) returned 1 [0060.795] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Mozilla Firefox\\browser\\searchplugins\\eBay.xml", nBufferLength=0x105, lpBuffer=0x31e194, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Mozilla Firefox\\browser\\searchplugins\\eBay.xml", lpFilePart=0x0) returned 0x45 [0060.795] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e688) returned 1 [0060.795] CreateFileW (lpFileName="C:\\Program Files (x86)\\Mozilla Firefox\\browser\\searchplugins\\eBay.xml" (normalized: "c:\\program files (x86)\\mozilla firefox\\browser\\searchplugins\\ebay.xml"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x178 [0060.795] GetFileType (hFile=0x178) returned 0x1 [0060.795] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e684) returned 1 [0060.795] GetFileType (hFile=0x178) returned 0x1 [0060.795] GetFileSize (in: hFile=0x178, lpFileSizeHigh=0x31e790 | out: lpFileSizeHigh=0x31e790*=0x0) returned 0xa17 [0060.796] ReadFile (in: hFile=0x178, lpBuffer=0x270dc18, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x31e73c, lpOverlapped=0x0 | out: lpBuffer=0x270dc18*, lpNumberOfBytesRead=0x31e73c*=0xa17, lpOverlapped=0x0) returned 1 [0060.805] CloseHandle (hObject=0x178) returned 1 [0060.818] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Mozilla Firefox\\browser\\searchplugins\\eBay.xml", nBufferLength=0x105, lpBuffer=0x31e180, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Mozilla Firefox\\browser\\searchplugins\\eBay.xml", lpFilePart=0x0) returned 0x45 [0060.818] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e674) returned 1 [0060.818] CreateFileW (lpFileName="C:\\Program Files (x86)\\Mozilla Firefox\\browser\\searchplugins\\eBay.xml" (normalized: "c:\\program files (x86)\\mozilla firefox\\browser\\searchplugins\\ebay.xml"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x178 [0060.819] GetFileType (hFile=0x178) returned 0x1 [0060.819] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e670) returned 1 [0060.819] GetFileType (hFile=0x178) returned 0x1 [0060.819] WriteFile (in: hFile=0x178, lpBuffer=0x275edc8*, nNumberOfBytesToWrite=0xa20, lpNumberOfBytesWritten=0x31e704, lpOverlapped=0x0 | out: lpBuffer=0x275edc8*, lpNumberOfBytesWritten=0x31e704*=0xa20, lpOverlapped=0x0) returned 1 [0060.820] CloseHandle (hObject=0x178) returned 1 [0060.820] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Mozilla Firefox\\browser\\searchplugins\\eBay.xml", nBufferLength=0x105, lpBuffer=0x31e2b4, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Mozilla Firefox\\browser\\searchplugins\\eBay.xml", lpFilePart=0x0) returned 0x45 [0060.820] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Mozilla Firefox\\browser\\searchplugins\\eBay.xml", nBufferLength=0x105, lpBuffer=0x31e2b4, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Mozilla Firefox\\browser\\searchplugins\\eBay.xml", lpFilePart=0x0) returned 0x45 [0060.820] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e714) returned 1 [0060.820] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Mozilla Firefox\\browser\\searchplugins\\eBay.xml" (normalized: "c:\\program files (x86)\\mozilla firefox\\browser\\searchplugins\\ebay.xml"), fInfoLevelId=0x0, lpFileInformation=0x31e790 | out: lpFileInformation=0x31e790*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xaf288100, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xaf288100, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0x7b15360, ftLastWriteTime.dwHighDateTime=0x1d6eb7f, nFileSizeHigh=0x0, nFileSizeLow=0xa20)) returned 1 [0060.820] MoveFileW (lpExistingFileName="C:\\Program Files (x86)\\Mozilla Firefox\\browser\\searchplugins\\eBay.xml" (normalized: "c:\\program files (x86)\\mozilla firefox\\browser\\searchplugins\\ebay.xml"), lpNewFileName="C:\\Program Files (x86)\\Mozilla Firefox\\browser\\searchplugins\\eBay.xml" (normalized: "c:\\program files (x86)\\mozilla firefox\\browser\\searchplugins\\ebay.xml")) returned 1 [0060.821] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Mozilla Firefox\\browser\\searchplugins\\google.xml", nBufferLength=0x105, lpBuffer=0x31e194, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Mozilla Firefox\\browser\\searchplugins\\google.xml", lpFilePart=0x0) returned 0x47 [0060.821] CreateFileW (lpFileName="C:\\Program Files (x86)\\Mozilla Firefox\\browser\\searchplugins\\google.xml" (normalized: "c:\\program files (x86)\\mozilla firefox\\browser\\searchplugins\\google.xml"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x178 [0060.821] GetFileType (hFile=0x178) returned 0x1 [0060.821] GetFileType (hFile=0x178) returned 0x1 [0060.822] GetFileSize (in: hFile=0x178, lpFileSizeHigh=0x31e790 | out: lpFileSizeHigh=0x31e790*=0x0) returned 0xb9b [0060.822] ReadFile (in: hFile=0x178, lpBuffer=0x2760be0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x31e73c, lpOverlapped=0x0 | out: lpBuffer=0x2760be0*, lpNumberOfBytesRead=0x31e73c*=0xb9b, lpOverlapped=0x0) returned 1 [0060.823] CloseHandle (hObject=0x178) returned 1 [0060.836] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Mozilla Firefox\\browser\\searchplugins\\google.xml", nBufferLength=0x105, lpBuffer=0x31e180, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Mozilla Firefox\\browser\\searchplugins\\google.xml", lpFilePart=0x0) returned 0x47 [0060.836] CreateFileW (lpFileName="C:\\Program Files (x86)\\Mozilla Firefox\\browser\\searchplugins\\google.xml" (normalized: "c:\\program files (x86)\\mozilla firefox\\browser\\searchplugins\\google.xml"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x178 [0060.837] GetFileType (hFile=0x178) returned 0x1 [0060.837] GetFileType (hFile=0x178) returned 0x1 [0060.838] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Mozilla Firefox\\browser\\searchplugins\\google.xml", nBufferLength=0x105, lpBuffer=0x31e2b4, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Mozilla Firefox\\browser\\searchplugins\\google.xml", lpFilePart=0x0) returned 0x47 [0060.838] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Mozilla Firefox\\browser\\searchplugins\\google.xml", nBufferLength=0x105, lpBuffer=0x31e2b4, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Mozilla Firefox\\browser\\searchplugins\\google.xml", lpFilePart=0x0) returned 0x47 [0060.838] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Mozilla Firefox\\browser\\searchplugins\\google.xml" (normalized: "c:\\program files (x86)\\mozilla firefox\\browser\\searchplugins\\google.xml"), fInfoLevelId=0x0, lpFileInformation=0x31e790 | out: lpFileInformation=0x31e790*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xaf2ae260, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xaf2ae260, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0x7b3b4c0, ftLastWriteTime.dwHighDateTime=0x1d6eb7f, nFileSizeHigh=0x0, nFileSizeLow=0xba0)) returned 1 [0060.838] MoveFileW (lpExistingFileName="C:\\Program Files (x86)\\Mozilla Firefox\\browser\\searchplugins\\google.xml" (normalized: "c:\\program files (x86)\\mozilla firefox\\browser\\searchplugins\\google.xml"), lpNewFileName="C:\\Program Files (x86)\\Mozilla Firefox\\browser\\searchplugins\\google.xml" (normalized: "c:\\program files (x86)\\mozilla firefox\\browser\\searchplugins\\google.xml")) returned 1 [0060.839] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Mozilla Firefox\\browser\\searchplugins\\twitter.xml", nBufferLength=0x105, lpBuffer=0x31e194, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Mozilla Firefox\\browser\\searchplugins\\twitter.xml", lpFilePart=0x0) returned 0x48 [0060.839] CreateFileW (lpFileName="C:\\Program Files (x86)\\Mozilla Firefox\\browser\\searchplugins\\twitter.xml" (normalized: "c:\\program files (x86)\\mozilla firefox\\browser\\searchplugins\\twitter.xml"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x178 [0060.839] GetFileType (hFile=0x178) returned 0x1 [0060.839] GetFileType (hFile=0x178) returned 0x1 [0060.839] GetFileSize (in: hFile=0x178, lpFileSizeHigh=0x31e790 | out: lpFileSizeHigh=0x31e790*=0x0) returned 0xb91 [0060.839] ReadFile (in: hFile=0x178, lpBuffer=0x27b4330, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x31e73c, lpOverlapped=0x0 | out: lpBuffer=0x27b4330*, lpNumberOfBytesRead=0x31e73c*=0xb91, lpOverlapped=0x0) returned 1 [0060.841] CloseHandle (hObject=0x178) returned 1 [0060.854] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Mozilla Firefox\\browser\\searchplugins\\twitter.xml", nBufferLength=0x105, lpBuffer=0x31e180, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Mozilla Firefox\\browser\\searchplugins\\twitter.xml", lpFilePart=0x0) returned 0x48 [0060.854] CreateFileW (lpFileName="C:\\Program Files (x86)\\Mozilla Firefox\\browser\\searchplugins\\twitter.xml" (normalized: "c:\\program files (x86)\\mozilla firefox\\browser\\searchplugins\\twitter.xml"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x178 [0060.854] GetFileType (hFile=0x178) returned 0x1 [0060.854] GetFileType (hFile=0x178) returned 0x1 [0060.855] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Mozilla Firefox\\browser\\searchplugins\\twitter.xml", nBufferLength=0x105, lpBuffer=0x31e2b4, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Mozilla Firefox\\browser\\searchplugins\\twitter.xml", lpFilePart=0x0) returned 0x48 [0060.855] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Mozilla Firefox\\browser\\searchplugins\\twitter.xml", nBufferLength=0x105, lpBuffer=0x31e2b4, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Mozilla Firefox\\browser\\searchplugins\\twitter.xml", lpFilePart=0x0) returned 0x48 [0060.855] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Mozilla Firefox\\browser\\searchplugins\\twitter.xml" (normalized: "c:\\program files (x86)\\mozilla firefox\\browser\\searchplugins\\twitter.xml"), fInfoLevelId=0x0, lpFileInformation=0x31e790 | out: lpFileInformation=0x31e790*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xaf2ae260, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xaf2ae260, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0x7b61620, ftLastWriteTime.dwHighDateTime=0x1d6eb7f, nFileSizeHigh=0x0, nFileSizeLow=0xba0)) returned 1 [0060.856] MoveFileW (lpExistingFileName="C:\\Program Files (x86)\\Mozilla Firefox\\browser\\searchplugins\\twitter.xml" (normalized: "c:\\program files (x86)\\mozilla firefox\\browser\\searchplugins\\twitter.xml"), lpNewFileName="C:\\Program Files (x86)\\Mozilla Firefox\\browser\\searchplugins\\twitter.xml" (normalized: "c:\\program files (x86)\\mozilla firefox\\browser\\searchplugins\\twitter.xml")) returned 1 [0060.857] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Mozilla Firefox\\browser\\searchplugins\\wikipedia.xml", nBufferLength=0x105, lpBuffer=0x31e194, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Mozilla Firefox\\browser\\searchplugins\\wikipedia.xml", lpFilePart=0x0) returned 0x4a [0060.857] CreateFileW (lpFileName="C:\\Program Files (x86)\\Mozilla Firefox\\browser\\searchplugins\\wikipedia.xml" (normalized: "c:\\program files (x86)\\mozilla firefox\\browser\\searchplugins\\wikipedia.xml"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x178 [0060.886] GetFileType (hFile=0x178) returned 0x1 [0060.886] GetFileType (hFile=0x178) returned 0x1 [0060.886] GetFileSize (in: hFile=0x178, lpFileSizeHigh=0x31e790 | out: lpFileSizeHigh=0x31e790*=0x0) returned 0x8b2 [0060.886] ReadFile (in: hFile=0x178, lpBuffer=0x28077bc, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x31e73c, lpOverlapped=0x0 | out: lpBuffer=0x28077bc*, lpNumberOfBytesRead=0x31e73c*=0x8b2, lpOverlapped=0x0) returned 1 [0060.887] CloseHandle (hObject=0x178) returned 1 [0060.910] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Mozilla Firefox\\browser\\searchplugins\\wikipedia.xml", nBufferLength=0x105, lpBuffer=0x31e180, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Mozilla Firefox\\browser\\searchplugins\\wikipedia.xml", lpFilePart=0x0) returned 0x4a [0060.910] CreateFileW (lpFileName="C:\\Program Files (x86)\\Mozilla Firefox\\browser\\searchplugins\\wikipedia.xml" (normalized: "c:\\program files (x86)\\mozilla firefox\\browser\\searchplugins\\wikipedia.xml"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x178 [0060.911] GetFileType (hFile=0x178) returned 0x1 [0060.911] GetFileType (hFile=0x178) returned 0x1 [0060.911] WriteFile (in: hFile=0x178, lpBuffer=0x2658404*, nNumberOfBytesToWrite=0x8c0, lpNumberOfBytesWritten=0x31e704, lpOverlapped=0x0 | out: lpBuffer=0x2658404*, lpNumberOfBytesWritten=0x31e704*=0x8c0, lpOverlapped=0x0) returned 1 [0060.912] CloseHandle (hObject=0x178) returned 1 [0060.912] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Mozilla Firefox\\browser\\searchplugins\\wikipedia.xml", nBufferLength=0x105, lpBuffer=0x31e2b4, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Mozilla Firefox\\browser\\searchplugins\\wikipedia.xml", lpFilePart=0x0) returned 0x4a [0060.912] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Mozilla Firefox\\browser\\searchplugins\\wikipedia.xml", nBufferLength=0x105, lpBuffer=0x31e2b4, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Mozilla Firefox\\browser\\searchplugins\\wikipedia.xml", lpFilePart=0x0) returned 0x4a [0060.912] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e714) returned 1 [0060.912] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Mozilla Firefox\\browser\\searchplugins\\wikipedia.xml" (normalized: "c:\\program files (x86)\\mozilla firefox\\browser\\searchplugins\\wikipedia.xml"), fInfoLevelId=0x0, lpFileInformation=0x31e790 | out: lpFileInformation=0x31e790*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xaf2ae260, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xaf2ae260, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0x7bf9ba0, ftLastWriteTime.dwHighDateTime=0x1d6eb7f, nFileSizeHigh=0x0, nFileSizeLow=0x8c0)) returned 1 [0060.912] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e710) returned 1 [0060.912] MoveFileW (lpExistingFileName="C:\\Program Files (x86)\\Mozilla Firefox\\browser\\searchplugins\\wikipedia.xml" (normalized: "c:\\program files (x86)\\mozilla firefox\\browser\\searchplugins\\wikipedia.xml"), lpNewFileName="C:\\Program Files (x86)\\Mozilla Firefox\\browser\\searchplugins\\wikipedia.xml" (normalized: "c:\\program files (x86)\\mozilla firefox\\browser\\searchplugins\\wikipedia.xml")) returned 1 [0060.912] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Mozilla Firefox\\browser\\searchplugins\\yahoo.xml", nBufferLength=0x105, lpBuffer=0x31e194, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Mozilla Firefox\\browser\\searchplugins\\yahoo.xml", lpFilePart=0x0) returned 0x46 [0060.912] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e688) returned 1 [0060.913] CreateFileW (lpFileName="C:\\Program Files (x86)\\Mozilla Firefox\\browser\\searchplugins\\yahoo.xml" (normalized: "c:\\program files (x86)\\mozilla firefox\\browser\\searchplugins\\yahoo.xml"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x178 [0060.913] GetFileType (hFile=0x178) returned 0x1 [0060.913] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e684) returned 1 [0060.913] GetFileType (hFile=0x178) returned 0x1 [0060.913] GetFileSize (in: hFile=0x178, lpFileSizeHigh=0x31e790 | out: lpFileSizeHigh=0x31e790*=0x0) returned 0xa73 [0060.913] ReadFile (in: hFile=0x178, lpBuffer=0x265a108, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x31e73c, lpOverlapped=0x0 | out: lpBuffer=0x265a108*, lpNumberOfBytesRead=0x31e73c*=0xa73, lpOverlapped=0x0) returned 1 [0060.915] CloseHandle (hObject=0x178) returned 1 [0060.948] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Mozilla Firefox\\browser\\searchplugins\\yahoo.xml", nBufferLength=0x105, lpBuffer=0x31e180, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Mozilla Firefox\\browser\\searchplugins\\yahoo.xml", lpFilePart=0x0) returned 0x46 [0060.948] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e674) returned 1 [0060.948] CreateFileW (lpFileName="C:\\Program Files (x86)\\Mozilla Firefox\\browser\\searchplugins\\yahoo.xml" (normalized: "c:\\program files (x86)\\mozilla firefox\\browser\\searchplugins\\yahoo.xml"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x178 [0060.949] GetFileType (hFile=0x178) returned 0x1 [0060.949] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e670) returned 1 [0060.949] GetFileType (hFile=0x178) returned 0x1 [0060.949] WriteFile (in: hFile=0x178, lpBuffer=0x26ab5fc*, nNumberOfBytesToWrite=0xa80, lpNumberOfBytesWritten=0x31e704, lpOverlapped=0x0 | out: lpBuffer=0x26ab5fc*, lpNumberOfBytesWritten=0x31e704*=0xa80, lpOverlapped=0x0) returned 1 [0060.950] CloseHandle (hObject=0x178) returned 1 [0060.950] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Mozilla Firefox\\browser\\searchplugins\\yahoo.xml", nBufferLength=0x105, lpBuffer=0x31e2b4, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Mozilla Firefox\\browser\\searchplugins\\yahoo.xml", lpFilePart=0x0) returned 0x46 [0060.950] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Mozilla Firefox\\browser\\searchplugins\\yahoo.xml", nBufferLength=0x105, lpBuffer=0x31e2b4, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Mozilla Firefox\\browser\\searchplugins\\yahoo.xml", lpFilePart=0x0) returned 0x46 [0060.950] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e714) returned 1 [0060.950] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Mozilla Firefox\\browser\\searchplugins\\yahoo.xml" (normalized: "c:\\program files (x86)\\mozilla firefox\\browser\\searchplugins\\yahoo.xml"), fInfoLevelId=0x0, lpFileInformation=0x31e790 | out: lpFileInformation=0x31e790*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xaf2d43c0, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xaf2d43c0, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0x7c6bfc0, ftLastWriteTime.dwHighDateTime=0x1d6eb7f, nFileSizeHigh=0x0, nFileSizeLow=0xa80)) returned 1 [0060.951] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e710) returned 1 [0060.951] MoveFileW (lpExistingFileName="C:\\Program Files (x86)\\Mozilla Firefox\\browser\\searchplugins\\yahoo.xml" (normalized: "c:\\program files (x86)\\mozilla firefox\\browser\\searchplugins\\yahoo.xml"), lpNewFileName="C:\\Program Files (x86)\\Mozilla Firefox\\browser\\searchplugins\\yahoo.xml" (normalized: "c:\\program files (x86)\\mozilla firefox\\browser\\searchplugins\\yahoo.xml")) returned 1 [0060.951] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e834) returned 1 [0060.951] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Mozilla Firefox\\defaults", nBufferLength=0x105, lpBuffer=0x31e33c, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Mozilla Firefox\\defaults", lpFilePart=0x0) returned 0x2f [0060.951] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Mozilla Firefox\\defaults\\", nBufferLength=0x105, lpBuffer=0x31e310, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Mozilla Firefox\\defaults\\", lpFilePart=0x0) returned 0x30 [0060.951] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Mozilla Firefox\\defaults\\*", lpFindFileData=0x31e55c | out: lpFindFileData=0x31e55c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xaefb46e0, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xaf23be40, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0xaf23be40, ftLastWriteTime.dwHighDateTime=0x1d2dda4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5107c60 [0060.952] FindNextFileW (in: hFindFile=0x5107c60, lpFindFileData=0x31e56c | out: lpFindFileData=0x31e56c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xaefb46e0, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xaf23be40, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0xaf23be40, ftLastWriteTime.dwHighDateTime=0x1d2dda4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0060.952] FindNextFileW (in: hFindFile=0x5107c60, lpFindFileData=0x31e56c | out: lpFindFileData=0x31e56c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xaf23be40, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xaf23be40, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0xaf23be40, ftLastWriteTime.dwHighDateTime=0x1d2dda4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="pref", cAlternateFileName="")) returned 1 [0060.952] FindNextFileW (in: hFindFile=0x5107c60, lpFindFileData=0x31e56c | out: lpFindFileData=0x31e56c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xaf23be40, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xaf23be40, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0xaf23be40, ftLastWriteTime.dwHighDateTime=0x1d2dda4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="pref", cAlternateFileName="")) returned 0 [0060.952] FindClose (in: hFindFile=0x5107c60 | out: hFindFile=0x5107c60) returned 1 [0060.953] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e7f4) returned 1 [0060.953] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e800) returned 1 [0060.953] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e834) returned 1 [0060.953] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Mozilla Firefox\\defaults", nBufferLength=0x105, lpBuffer=0x31e33c, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Mozilla Firefox\\defaults", lpFilePart=0x0) returned 0x2f [0060.953] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Mozilla Firefox\\defaults\\", nBufferLength=0x105, lpBuffer=0x31e310, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Mozilla Firefox\\defaults\\", lpFilePart=0x0) returned 0x30 [0060.953] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Mozilla Firefox\\defaults\\*", lpFindFileData=0x31e55c | out: lpFindFileData=0x31e55c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xaefb46e0, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xaf23be40, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0xaf23be40, ftLastWriteTime.dwHighDateTime=0x1d2dda4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5107c60 [0060.953] FindNextFileW (in: hFindFile=0x5107c60, lpFindFileData=0x31e56c | out: lpFindFileData=0x31e56c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xaefb46e0, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xaf23be40, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0xaf23be40, ftLastWriteTime.dwHighDateTime=0x1d2dda4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0060.953] FindNextFileW (in: hFindFile=0x5107c60, lpFindFileData=0x31e56c | out: lpFindFileData=0x31e56c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xaf23be40, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xaf23be40, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0xaf23be40, ftLastWriteTime.dwHighDateTime=0x1d2dda4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="pref", cAlternateFileName="")) returned 1 [0060.953] FindNextFileW (in: hFindFile=0x5107c60, lpFindFileData=0x31e56c | out: lpFindFileData=0x31e56c*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0060.953] FindClose (in: hFindFile=0x5107c60 | out: hFindFile=0x5107c60) returned 1 [0060.953] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e7f4) returned 1 [0060.953] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e800) returned 1 [0060.954] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e7bc) returned 1 [0060.954] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Mozilla Firefox\\defaults\\pref", nBufferLength=0x105, lpBuffer=0x31e2c4, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Mozilla Firefox\\defaults\\pref", lpFilePart=0x0) returned 0x34 [0060.954] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Mozilla Firefox\\defaults\\pref\\", nBufferLength=0x105, lpBuffer=0x31e298, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Mozilla Firefox\\defaults\\pref\\", lpFilePart=0x0) returned 0x35 [0060.954] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Mozilla Firefox\\defaults\\pref\\*", lpFindFileData=0x31e4e4 | out: lpFindFileData=0x31e4e4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xaf23be40, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xaf23be40, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0xaf23be40, ftLastWriteTime.dwHighDateTime=0x1d2dda4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5107c60 [0060.955] FindNextFileW (in: hFindFile=0x5107c60, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xaf23be40, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xaf23be40, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0xaf23be40, ftLastWriteTime.dwHighDateTime=0x1d2dda4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0060.955] FindNextFileW (in: hFindFile=0x5107c60, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xaf23be40, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xaf23be40, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0xb6390400, ftLastWriteTime.dwHighDateTime=0x1ced1ec, nFileSizeHigh=0x0, nFileSizeLow=0x166, dwReserved0=0x0, dwReserved1=0x0, cFileName="channel-prefs.js", cAlternateFileName="CHANNE~1.JS")) returned 1 [0060.955] FindNextFileW (in: hFindFile=0x5107c60, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0060.955] FindClose (in: hFindFile=0x5107c60 | out: hFindFile=0x5107c60) returned 1 [0060.955] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e77c) returned 1 [0060.955] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e788) returned 1 [0060.955] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e7bc) returned 1 [0060.955] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Mozilla Firefox\\defaults\\pref", nBufferLength=0x105, lpBuffer=0x31e2c4, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Mozilla Firefox\\defaults\\pref", lpFilePart=0x0) returned 0x34 [0060.955] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Mozilla Firefox\\defaults\\pref\\", nBufferLength=0x105, lpBuffer=0x31e298, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Mozilla Firefox\\defaults\\pref\\", lpFilePart=0x0) returned 0x35 [0060.955] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Mozilla Firefox\\defaults\\pref\\*", lpFindFileData=0x31e4e4 | out: lpFindFileData=0x31e4e4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xaf23be40, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xaf23be40, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0xaf23be40, ftLastWriteTime.dwHighDateTime=0x1d2dda4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5107c60 [0060.955] FindNextFileW (in: hFindFile=0x5107c60, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xaf23be40, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xaf23be40, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0xaf23be40, ftLastWriteTime.dwHighDateTime=0x1d2dda4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0060.956] FindNextFileW (in: hFindFile=0x5107c60, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xaf23be40, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xaf23be40, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0xb6390400, ftLastWriteTime.dwHighDateTime=0x1ced1ec, nFileSizeHigh=0x0, nFileSizeLow=0x166, dwReserved0=0x0, dwReserved1=0x0, cFileName="channel-prefs.js", cAlternateFileName="CHANNE~1.JS")) returned 1 [0060.956] FindNextFileW (in: hFindFile=0x5107c60, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xaf23be40, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xaf23be40, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0xb6390400, ftLastWriteTime.dwHighDateTime=0x1ced1ec, nFileSizeHigh=0x0, nFileSizeLow=0x166, dwReserved0=0x0, dwReserved1=0x0, cFileName="channel-prefs.js", cAlternateFileName="CHANNE~1.JS")) returned 0 [0060.956] FindClose (in: hFindFile=0x5107c60 | out: hFindFile=0x5107c60) returned 1 [0060.956] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e77c) returned 1 [0060.956] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e788) returned 1 [0060.956] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e834) returned 1 [0060.956] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Mozilla Firefox\\dictionaries", nBufferLength=0x105, lpBuffer=0x31e33c, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Mozilla Firefox\\dictionaries", lpFilePart=0x0) returned 0x33 [0060.956] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Mozilla Firefox\\dictionaries\\", nBufferLength=0x105, lpBuffer=0x31e310, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Mozilla Firefox\\dictionaries\\", lpFilePart=0x0) returned 0x34 [0060.956] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Mozilla Firefox\\dictionaries\\*", lpFindFileData=0x31e55c | out: lpFindFileData=0x31e55c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xaefb46e0, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xaf215ce0, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0xaf215ce0, ftLastWriteTime.dwHighDateTime=0x1d2dda4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5107c60 [0060.957] FindNextFileW (in: hFindFile=0x5107c60, lpFindFileData=0x31e56c | out: lpFindFileData=0x31e56c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xaefb46e0, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xaf215ce0, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0xaf215ce0, ftLastWriteTime.dwHighDateTime=0x1d2dda4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0060.958] FindNextFileW (in: hFindFile=0x5107c60, lpFindFileData=0x31e56c | out: lpFindFileData=0x31e56c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xaf215ce0, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xaf215ce0, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0xf25e6b80, ftLastWriteTime.dwHighDateTime=0x1ced1d0, nFileSizeHigh=0x0, nFileSizeLow=0xcca, dwReserved0=0x0, dwReserved1=0x0, cFileName="en-US.aff", cAlternateFileName="")) returned 1 [0060.958] FindNextFileW (in: hFindFile=0x5107c60, lpFindFileData=0x31e56c | out: lpFindFileData=0x31e56c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xaf215ce0, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xaf215ce0, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0xf25e6b80, ftLastWriteTime.dwHighDateTime=0x1ced1d0, nFileSizeHigh=0x0, nFileSizeLow=0x9863e, dwReserved0=0x0, dwReserved1=0x0, cFileName="en-US.dic", cAlternateFileName="")) returned 1 [0060.958] FindNextFileW (in: hFindFile=0x5107c60, lpFindFileData=0x31e56c | out: lpFindFileData=0x31e56c*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0060.958] FindClose (in: hFindFile=0x5107c60 | out: hFindFile=0x5107c60) returned 1 [0060.958] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e7f4) returned 1 [0060.958] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e800) returned 1 [0060.958] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e834) returned 1 [0060.958] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Mozilla Firefox\\dictionaries", nBufferLength=0x105, lpBuffer=0x31e33c, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Mozilla Firefox\\dictionaries", lpFilePart=0x0) returned 0x33 [0060.958] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Mozilla Firefox\\dictionaries\\", nBufferLength=0x105, lpBuffer=0x31e310, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Mozilla Firefox\\dictionaries\\", lpFilePart=0x0) returned 0x34 [0060.958] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Mozilla Firefox\\dictionaries\\*", lpFindFileData=0x31e55c | out: lpFindFileData=0x31e55c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xaefb46e0, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xaf215ce0, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0xaf215ce0, ftLastWriteTime.dwHighDateTime=0x1d2dda4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5107c60 [0060.958] FindNextFileW (in: hFindFile=0x5107c60, lpFindFileData=0x31e56c | out: lpFindFileData=0x31e56c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xaefb46e0, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xaf215ce0, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0xaf215ce0, ftLastWriteTime.dwHighDateTime=0x1d2dda4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0060.959] FindNextFileW (in: hFindFile=0x5107c60, lpFindFileData=0x31e56c | out: lpFindFileData=0x31e56c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xaf215ce0, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xaf215ce0, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0xf25e6b80, ftLastWriteTime.dwHighDateTime=0x1ced1d0, nFileSizeHigh=0x0, nFileSizeLow=0xcca, dwReserved0=0x0, dwReserved1=0x0, cFileName="en-US.aff", cAlternateFileName="")) returned 1 [0060.959] FindNextFileW (in: hFindFile=0x5107c60, lpFindFileData=0x31e56c | out: lpFindFileData=0x31e56c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xaf215ce0, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xaf215ce0, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0xf25e6b80, ftLastWriteTime.dwHighDateTime=0x1ced1d0, nFileSizeHigh=0x0, nFileSizeLow=0x9863e, dwReserved0=0x0, dwReserved1=0x0, cFileName="en-US.dic", cAlternateFileName="")) returned 1 [0060.959] FindNextFileW (in: hFindFile=0x5107c60, lpFindFileData=0x31e56c | out: lpFindFileData=0x31e56c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xaf215ce0, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xaf215ce0, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0xf25e6b80, ftLastWriteTime.dwHighDateTime=0x1ced1d0, nFileSizeHigh=0x0, nFileSizeLow=0x9863e, dwReserved0=0x0, dwReserved1=0x0, cFileName="en-US.dic", cAlternateFileName="")) returned 0 [0060.959] FindClose (in: hFindFile=0x5107c60 | out: hFindFile=0x5107c60) returned 1 [0060.959] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e7f4) returned 1 [0060.959] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e800) returned 1 [0060.959] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e834) returned 1 [0060.959] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Mozilla Firefox\\uninstall", nBufferLength=0x105, lpBuffer=0x31e33c, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Mozilla Firefox\\uninstall", lpFilePart=0x0) returned 0x30 [0060.959] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Mozilla Firefox\\uninstall\\", nBufferLength=0x105, lpBuffer=0x31e310, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Mozilla Firefox\\uninstall\\", lpFilePart=0x0) returned 0x31 [0060.959] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Mozilla Firefox\\uninstall\\*", lpFindFileData=0x31e55c | out: lpFindFileData=0x31e55c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xaef1c160, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xb0925200, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0xb0925200, ftLastWriteTime.dwHighDateTime=0x1d2dda4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5107c60 [0060.960] FindNextFileW (in: hFindFile=0x5107c60, lpFindFileData=0x31e56c | out: lpFindFileData=0x31e56c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xaef1c160, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xb0925200, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0xb0925200, ftLastWriteTime.dwHighDateTime=0x1d2dda4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0060.960] FindNextFileW (in: hFindFile=0x5107c60, lpFindFileData=0x31e56c | out: lpFindFileData=0x31e56c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xaf215ce0, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xaf215ce0, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0x4a579b00, ftLastWriteTime.dwHighDateTime=0x1ced1ee, nFileSizeHigh=0x0, nFileSizeLow=0xd4fa0, dwReserved0=0x0, dwReserved1=0x0, cFileName="helper.exe", cAlternateFileName="")) returned 1 [0060.961] FindNextFileW (in: hFindFile=0x5107c60, lpFindFileData=0x31e56c | out: lpFindFileData=0x31e56c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb0925200, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xb0925200, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0xb1049400, ftLastWriteTime.dwHighDateTime=0x1d2dda4, nFileSizeHigh=0x0, nFileSizeLow=0x142, dwReserved0=0x0, dwReserved1=0x0, cFileName="shortcuts_log.ini", cAlternateFileName="SHORTC~1.INI")) returned 1 [0060.961] FindNextFileW (in: hFindFile=0x5107c60, lpFindFileData=0x31e56c | out: lpFindFileData=0x31e56c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xaef1c160, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xaef1c160, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0xb12385e0, ftLastWriteTime.dwHighDateTime=0x1d2dda4, nFileSizeHigh=0x0, nFileSizeLow=0x794, dwReserved0=0x0, dwReserved1=0x0, cFileName="uninstall.log", cAlternateFileName="UNINST~1.LOG")) returned 1 [0060.961] FindNextFileW (in: hFindFile=0x5107c60, lpFindFileData=0x31e56c | out: lpFindFileData=0x31e56c*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0060.961] FindClose (in: hFindFile=0x5107c60 | out: hFindFile=0x5107c60) returned 1 [0060.961] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e7f4) returned 1 [0060.961] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e800) returned 1 [0060.961] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e834) returned 1 [0060.961] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Mozilla Firefox\\uninstall", nBufferLength=0x105, lpBuffer=0x31e33c, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Mozilla Firefox\\uninstall", lpFilePart=0x0) returned 0x30 [0060.961] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Mozilla Firefox\\uninstall\\", nBufferLength=0x105, lpBuffer=0x31e310, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Mozilla Firefox\\uninstall\\", lpFilePart=0x0) returned 0x31 [0060.961] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Mozilla Firefox\\uninstall\\*", lpFindFileData=0x31e55c | out: lpFindFileData=0x31e55c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xaef1c160, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xb0925200, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0xb0925200, ftLastWriteTime.dwHighDateTime=0x1d2dda4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5107c60 [0060.961] FindNextFileW (in: hFindFile=0x5107c60, lpFindFileData=0x31e56c | out: lpFindFileData=0x31e56c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xaef1c160, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xb0925200, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0xb0925200, ftLastWriteTime.dwHighDateTime=0x1d2dda4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0060.962] FindNextFileW (in: hFindFile=0x5107c60, lpFindFileData=0x31e56c | out: lpFindFileData=0x31e56c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xaf215ce0, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xaf215ce0, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0x4a579b00, ftLastWriteTime.dwHighDateTime=0x1ced1ee, nFileSizeHigh=0x0, nFileSizeLow=0xd4fa0, dwReserved0=0x0, dwReserved1=0x0, cFileName="helper.exe", cAlternateFileName="")) returned 1 [0060.962] FindNextFileW (in: hFindFile=0x5107c60, lpFindFileData=0x31e56c | out: lpFindFileData=0x31e56c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb0925200, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xb0925200, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0xb1049400, ftLastWriteTime.dwHighDateTime=0x1d2dda4, nFileSizeHigh=0x0, nFileSizeLow=0x142, dwReserved0=0x0, dwReserved1=0x0, cFileName="shortcuts_log.ini", cAlternateFileName="SHORTC~1.INI")) returned 1 [0060.962] FindNextFileW (in: hFindFile=0x5107c60, lpFindFileData=0x31e56c | out: lpFindFileData=0x31e56c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xaef1c160, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xaef1c160, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0xb12385e0, ftLastWriteTime.dwHighDateTime=0x1d2dda4, nFileSizeHigh=0x0, nFileSizeLow=0x794, dwReserved0=0x0, dwReserved1=0x0, cFileName="uninstall.log", cAlternateFileName="UNINST~1.LOG")) returned 1 [0060.962] FindNextFileW (in: hFindFile=0x5107c60, lpFindFileData=0x31e56c | out: lpFindFileData=0x31e56c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xaef1c160, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xaef1c160, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0xb12385e0, ftLastWriteTime.dwHighDateTime=0x1d2dda4, nFileSizeHigh=0x0, nFileSizeLow=0x794, dwReserved0=0x0, dwReserved1=0x0, cFileName="uninstall.log", cAlternateFileName="UNINST~1.LOG")) returned 0 [0060.962] FindClose (in: hFindFile=0x5107c60 | out: hFindFile=0x5107c60) returned 1 [0060.962] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e7f4) returned 1 [0060.962] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e800) returned 1 [0060.962] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e834) returned 1 [0060.962] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Mozilla Firefox\\webapprt", nBufferLength=0x105, lpBuffer=0x31e33c, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Mozilla Firefox\\webapprt", lpFilePart=0x0) returned 0x2f [0060.962] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Mozilla Firefox\\webapprt\\", nBufferLength=0x105, lpBuffer=0x31e310, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Mozilla Firefox\\webapprt\\", lpFilePart=0x0) returned 0x30 [0060.962] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Mozilla Firefox\\webapprt\\*", lpFindFileData=0x31e55c | out: lpFindFileData=0x31e55c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xaf17d760, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xaf215ce0, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0xaf215ce0, ftLastWriteTime.dwHighDateTime=0x1d2dda4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5107c60 [0060.963] FindNextFileW (in: hFindFile=0x5107c60, lpFindFileData=0x31e56c | out: lpFindFileData=0x31e56c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xaf17d760, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xaf215ce0, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0xaf215ce0, ftLastWriteTime.dwHighDateTime=0x1d2dda4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0060.963] FindNextFileW (in: hFindFile=0x5107c60, lpFindFileData=0x31e56c | out: lpFindFileData=0x31e56c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xaf1efb80, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xaf1efb80, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0x593e4d80, ftLastWriteTime.dwHighDateTime=0x1ced1ee, nFileSizeHigh=0x0, nFileSizeLow=0x69f7, dwReserved0=0x0, dwReserved1=0x0, cFileName="omni.ja", cAlternateFileName="")) returned 1 [0060.963] FindNextFileW (in: hFindFile=0x5107c60, lpFindFileData=0x31e56c | out: lpFindFileData=0x31e56c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xaf215ce0, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xaf215ce0, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0xa91c1500, ftLastWriteTime.dwHighDateTime=0x1ced1ec, nFileSizeHigh=0x0, nFileSizeLow=0x1e7, dwReserved0=0x0, dwReserved1=0x0, cFileName="webapprt.ini", cAlternateFileName="")) returned 1 [0060.963] FindNextFileW (in: hFindFile=0x5107c60, lpFindFileData=0x31e56c | out: lpFindFileData=0x31e56c*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0060.963] FindClose (in: hFindFile=0x5107c60 | out: hFindFile=0x5107c60) returned 1 [0060.963] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e7f4) returned 1 [0060.963] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e800) returned 1 [0060.963] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e834) returned 1 [0060.964] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Mozilla Firefox\\webapprt", nBufferLength=0x105, lpBuffer=0x31e33c, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Mozilla Firefox\\webapprt", lpFilePart=0x0) returned 0x2f [0060.964] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Mozilla Firefox\\webapprt\\", nBufferLength=0x105, lpBuffer=0x31e310, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Mozilla Firefox\\webapprt\\", lpFilePart=0x0) returned 0x30 [0060.964] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Mozilla Firefox\\webapprt\\*", lpFindFileData=0x31e55c | out: lpFindFileData=0x31e55c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xaf17d760, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xaf215ce0, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0xaf215ce0, ftLastWriteTime.dwHighDateTime=0x1d2dda4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5107c60 [0060.964] FindNextFileW (in: hFindFile=0x5107c60, lpFindFileData=0x31e56c | out: lpFindFileData=0x31e56c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xaf17d760, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xaf215ce0, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0xaf215ce0, ftLastWriteTime.dwHighDateTime=0x1d2dda4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0060.964] FindNextFileW (in: hFindFile=0x5107c60, lpFindFileData=0x31e56c | out: lpFindFileData=0x31e56c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xaf1efb80, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xaf1efb80, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0x593e4d80, ftLastWriteTime.dwHighDateTime=0x1ced1ee, nFileSizeHigh=0x0, nFileSizeLow=0x69f7, dwReserved0=0x0, dwReserved1=0x0, cFileName="omni.ja", cAlternateFileName="")) returned 1 [0060.964] FindNextFileW (in: hFindFile=0x5107c60, lpFindFileData=0x31e56c | out: lpFindFileData=0x31e56c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xaf215ce0, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xaf215ce0, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0xa91c1500, ftLastWriteTime.dwHighDateTime=0x1ced1ec, nFileSizeHigh=0x0, nFileSizeLow=0x1e7, dwReserved0=0x0, dwReserved1=0x0, cFileName="webapprt.ini", cAlternateFileName="")) returned 1 [0060.965] FindNextFileW (in: hFindFile=0x5107c60, lpFindFileData=0x31e56c | out: lpFindFileData=0x31e56c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xaf215ce0, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xaf215ce0, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0xa91c1500, ftLastWriteTime.dwHighDateTime=0x1ced1ec, nFileSizeHigh=0x0, nFileSizeLow=0x1e7, dwReserved0=0x0, dwReserved1=0x0, cFileName="webapprt.ini", cAlternateFileName="")) returned 0 [0060.965] FindClose (in: hFindFile=0x5107c60 | out: hFindFile=0x5107c60) returned 1 [0060.965] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e7f4) returned 1 [0060.965] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e800) returned 1 [0060.965] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e8ac) returned 1 [0060.965] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Mozilla Maintenance Service", nBufferLength=0x105, lpBuffer=0x31e3b4, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Mozilla Maintenance Service", lpFilePart=0x0) returned 0x32 [0060.965] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Mozilla Maintenance Service\\", nBufferLength=0x105, lpBuffer=0x31e388, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Mozilla Maintenance Service\\", lpFilePart=0x0) returned 0x33 [0060.965] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Mozilla Maintenance Service\\*", lpFindFileData=0x31e5d4 | out: lpFindFileData=0x31e5d4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xaf770e60, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xb08409c0, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0xb08409c0, ftLastWriteTime.dwHighDateTime=0x1d2dda4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5107c60 [0060.967] FindNextFileW (in: hFindFile=0x5107c60, lpFindFileData=0x31e5e4 | out: lpFindFileData=0x31e5e4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xaf770e60, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xb08409c0, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0xb08409c0, ftLastWriteTime.dwHighDateTime=0x1d2dda4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0060.967] FindNextFileW (in: hFindFile=0x5107c60, lpFindFileData=0x31e5e4 | out: lpFindFileData=0x31e5e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xaf8093e0, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xaf8093e0, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0x2d22cc80, ftLastWriteTime.dwHighDateTime=0x1ced1ee, nFileSizeHigh=0x0, nFileSizeLow=0x1d270, dwReserved0=0x0, dwReserved1=0x0, cFileName="maintenanceservice.exe", cAlternateFileName="MAINTE~1.EXE")) returned 1 [0060.967] FindNextFileW (in: hFindFile=0x5107c60, lpFindFileData=0x31e5e4 | out: lpFindFileData=0x31e5e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb08409c0, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xb08409c0, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0xb08409c0, ftLastWriteTime.dwHighDateTime=0x1d2dda4, nFileSizeHigh=0x0, nFileSizeLow=0x19ee4, dwReserved0=0x0, dwReserved1=0x0, cFileName="Uninstall.exe", cAlternateFileName="UNINST~1.EXE")) returned 1 [0060.967] FindNextFileW (in: hFindFile=0x5107c60, lpFindFileData=0x31e5e4 | out: lpFindFileData=0x31e5e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xaf82f540, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xaf82f540, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0xac170580, ftLastWriteTime.dwHighDateTime=0x1ced1ec, nFileSizeHigh=0x0, nFileSizeLow=0x4dd, dwReserved0=0x0, dwReserved1=0x0, cFileName="updater.ini", cAlternateFileName="")) returned 1 [0060.967] FindNextFileW (in: hFindFile=0x5107c60, lpFindFileData=0x31e5e4 | out: lpFindFileData=0x31e5e4*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0060.967] FindClose (in: hFindFile=0x5107c60 | out: hFindFile=0x5107c60) returned 1 [0060.968] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e86c) returned 1 [0060.968] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e878) returned 1 [0060.968] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e8ac) returned 1 [0060.968] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Mozilla Maintenance Service", nBufferLength=0x105, lpBuffer=0x31e3b4, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Mozilla Maintenance Service", lpFilePart=0x0) returned 0x32 [0060.968] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Mozilla Maintenance Service\\", nBufferLength=0x105, lpBuffer=0x31e388, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Mozilla Maintenance Service\\", lpFilePart=0x0) returned 0x33 [0060.968] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Mozilla Maintenance Service\\*", lpFindFileData=0x31e5d4 | out: lpFindFileData=0x31e5d4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xaf770e60, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xb08409c0, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0xb08409c0, ftLastWriteTime.dwHighDateTime=0x1d2dda4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5107c60 [0060.969] FindNextFileW (in: hFindFile=0x5107c60, lpFindFileData=0x31e5e4 | out: lpFindFileData=0x31e5e4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xaf770e60, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xb08409c0, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0xb08409c0, ftLastWriteTime.dwHighDateTime=0x1d2dda4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0060.969] FindNextFileW (in: hFindFile=0x5107c60, lpFindFileData=0x31e5e4 | out: lpFindFileData=0x31e5e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xaf8093e0, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xaf8093e0, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0x2d22cc80, ftLastWriteTime.dwHighDateTime=0x1ced1ee, nFileSizeHigh=0x0, nFileSizeLow=0x1d270, dwReserved0=0x0, dwReserved1=0x0, cFileName="maintenanceservice.exe", cAlternateFileName="MAINTE~1.EXE")) returned 1 [0060.969] FindNextFileW (in: hFindFile=0x5107c60, lpFindFileData=0x31e5e4 | out: lpFindFileData=0x31e5e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb08409c0, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xb08409c0, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0xb08409c0, ftLastWriteTime.dwHighDateTime=0x1d2dda4, nFileSizeHigh=0x0, nFileSizeLow=0x19ee4, dwReserved0=0x0, dwReserved1=0x0, cFileName="Uninstall.exe", cAlternateFileName="UNINST~1.EXE")) returned 1 [0060.970] FindNextFileW (in: hFindFile=0x5107c60, lpFindFileData=0x31e5e4 | out: lpFindFileData=0x31e5e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xaf82f540, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xaf82f540, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0xac170580, ftLastWriteTime.dwHighDateTime=0x1ced1ec, nFileSizeHigh=0x0, nFileSizeLow=0x4dd, dwReserved0=0x0, dwReserved1=0x0, cFileName="updater.ini", cAlternateFileName="")) returned 1 [0060.970] FindNextFileW (in: hFindFile=0x5107c60, lpFindFileData=0x31e5e4 | out: lpFindFileData=0x31e5e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xaf82f540, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xaf82f540, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0xac170580, ftLastWriteTime.dwHighDateTime=0x1ced1ec, nFileSizeHigh=0x0, nFileSizeLow=0x4dd, dwReserved0=0x0, dwReserved1=0x0, cFileName="updater.ini", cAlternateFileName="")) returned 0 [0060.970] FindClose (in: hFindFile=0x5107c60 | out: hFindFile=0x5107c60) returned 1 [0060.971] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e86c) returned 1 [0060.971] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e878) returned 1 [0060.971] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e8ac) returned 1 [0060.971] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\MSBuild", nBufferLength=0x105, lpBuffer=0x31e3b4, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\MSBuild", lpFilePart=0x0) returned 0x1e [0060.971] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\MSBuild\\", nBufferLength=0x105, lpBuffer=0x31e388, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\MSBuild\\", lpFilePart=0x0) returned 0x1f [0060.971] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\MSBuild\\*", lpFindFileData=0x31e5d4 | out: lpFindFileData=0x31e5d4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x80105472, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0xd9a9ec00, ftLastAccessTime.dwHighDateTime=0x1d5e82a, ftLastWriteTime.dwLowDateTime=0xd9a9ec00, ftLastWriteTime.dwHighDateTime=0x1d5e82a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5107c60 [0060.971] FindNextFileW (in: hFindFile=0x5107c60, lpFindFileData=0x31e5e4 | out: lpFindFileData=0x31e5e4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x80105472, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0xd9a9ec00, ftLastAccessTime.dwHighDateTime=0x1d5e82a, ftLastWriteTime.dwLowDateTime=0xd9a9ec00, ftLastWriteTime.dwHighDateTime=0x1d5e82a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0060.971] FindNextFileW (in: hFindFile=0x5107c60, lpFindFileData=0x31e5e4 | out: lpFindFileData=0x31e5e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xffdac680, ftCreationTime.dwHighDateTime=0x1d56ddf, ftLastAccessTime.dwLowDateTime=0xef502f0, ftLastAccessTime.dwHighDateTime=0x1d566cb, ftLastWriteTime.dwLowDateTime=0xef502f0, ftLastWriteTime.dwHighDateTime=0x1d566cb, nFileSizeHigh=0x0, nFileSizeLow=0x13a00, dwReserved0=0x0, dwReserved1=0x0, cFileName="absolutetelnet.exe", cAlternateFileName="ABSOLU~1.EXE")) returned 1 [0060.971] FindNextFileW (in: hFindFile=0x5107c60, lpFindFileData=0x31e5e4 | out: lpFindFileData=0x31e5e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x31671800, ftCreationTime.dwHighDateTime=0x1d566a3, ftLastAccessTime.dwLowDateTime=0x7d2c1c90, ftLastAccessTime.dwHighDateTime=0x1d56dec, ftLastWriteTime.dwLowDateTime=0x7d2c1c90, ftLastWriteTime.dwHighDateTime=0x1d56dec, nFileSizeHigh=0x0, nFileSizeLow=0x13a00, dwReserved0=0x0, dwReserved1=0x0, cFileName="barca.exe", cAlternateFileName="")) returned 1 [0060.971] FindNextFileW (in: hFindFile=0x5107c60, lpFindFileData=0x31e5e4 | out: lpFindFileData=0x31e5e4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x80105472, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x80105472, ftLastAccessTime.dwHighDateTime=0x1ca0444, ftLastWriteTime.dwLowDateTime=0x80105472, ftLastWriteTime.dwHighDateTime=0x1ca0444, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft", cAlternateFileName="MICROS~1")) returned 1 [0060.971] FindNextFileW (in: hFindFile=0x5107c60, lpFindFileData=0x31e5e4 | out: lpFindFileData=0x31e5e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4a8de300, ftCreationTime.dwHighDateTime=0x1cacf26, ftLastAccessTime.dwLowDateTime=0x553ced90, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x4a8de300, ftLastWriteTime.dwHighDateTime=0x1cacf26, nFileSizeHigh=0x0, nFileSizeLow=0x2fc, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.Office.InfoPath.targets", cAlternateFileName="MICROS~1.TAR")) returned 1 [0060.972] FindNextFileW (in: hFindFile=0x5107c60, lpFindFileData=0x31e5e4 | out: lpFindFileData=0x31e5e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x40247ae0, ftCreationTime.dwHighDateTime=0x1d5b7d4, ftLastAccessTime.dwLowDateTime=0xeaf5f320, ftLastAccessTime.dwHighDateTime=0x1d5d0db, ftLastWriteTime.dwLowDateTime=0xeaf5f320, ftLastWriteTime.dwHighDateTime=0x1d5d0db, nFileSizeHigh=0x0, nFileSizeLow=0x13a00, dwReserved0=0x0, dwReserved1=0x0, cFileName="omnipos.exe", cAlternateFileName="")) returned 1 [0060.972] FindNextFileW (in: hFindFile=0x5107c60, lpFindFileData=0x31e5e4 | out: lpFindFileData=0x31e5e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x98851340, ftCreationTime.dwHighDateTime=0x1d59027, ftLastAccessTime.dwLowDateTime=0xf225a830, ftLastAccessTime.dwHighDateTime=0x1d58954, ftLastWriteTime.dwLowDateTime=0xf225a830, ftLastWriteTime.dwHighDateTime=0x1d58954, nFileSizeHigh=0x0, nFileSizeLow=0x13a00, dwReserved0=0x0, dwReserved1=0x0, cFileName="skype.exe", cAlternateFileName="")) returned 1 [0060.972] FindNextFileW (in: hFindFile=0x5107c60, lpFindFileData=0x31e5e4 | out: lpFindFileData=0x31e5e4*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0060.972] FindClose (in: hFindFile=0x5107c60 | out: hFindFile=0x5107c60) returned 1 [0060.972] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e86c) returned 1 [0060.972] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e878) returned 1 [0060.972] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e8ac) returned 1 [0060.972] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\MSBuild", nBufferLength=0x105, lpBuffer=0x31e3b4, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\MSBuild", lpFilePart=0x0) returned 0x1e [0060.972] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\MSBuild\\", nBufferLength=0x105, lpBuffer=0x31e388, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\MSBuild\\", lpFilePart=0x0) returned 0x1f [0060.972] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\MSBuild\\*", lpFindFileData=0x31e5d4 | out: lpFindFileData=0x31e5d4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x80105472, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0xd9a9ec00, ftLastAccessTime.dwHighDateTime=0x1d5e82a, ftLastWriteTime.dwLowDateTime=0xd9a9ec00, ftLastWriteTime.dwHighDateTime=0x1d5e82a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5107c60 [0060.972] FindNextFileW (in: hFindFile=0x5107c60, lpFindFileData=0x31e5e4 | out: lpFindFileData=0x31e5e4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x80105472, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0xd9a9ec00, ftLastAccessTime.dwHighDateTime=0x1d5e82a, ftLastWriteTime.dwLowDateTime=0xd9a9ec00, ftLastWriteTime.dwHighDateTime=0x1d5e82a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0060.973] FindNextFileW (in: hFindFile=0x5107c60, lpFindFileData=0x31e5e4 | out: lpFindFileData=0x31e5e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xffdac680, ftCreationTime.dwHighDateTime=0x1d56ddf, ftLastAccessTime.dwLowDateTime=0xef502f0, ftLastAccessTime.dwHighDateTime=0x1d566cb, ftLastWriteTime.dwLowDateTime=0xef502f0, ftLastWriteTime.dwHighDateTime=0x1d566cb, nFileSizeHigh=0x0, nFileSizeLow=0x13a00, dwReserved0=0x0, dwReserved1=0x0, cFileName="absolutetelnet.exe", cAlternateFileName="ABSOLU~1.EXE")) returned 1 [0060.973] FindNextFileW (in: hFindFile=0x5107c60, lpFindFileData=0x31e5e4 | out: lpFindFileData=0x31e5e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x31671800, ftCreationTime.dwHighDateTime=0x1d566a3, ftLastAccessTime.dwLowDateTime=0x7d2c1c90, ftLastAccessTime.dwHighDateTime=0x1d56dec, ftLastWriteTime.dwLowDateTime=0x7d2c1c90, ftLastWriteTime.dwHighDateTime=0x1d56dec, nFileSizeHigh=0x0, nFileSizeLow=0x13a00, dwReserved0=0x0, dwReserved1=0x0, cFileName="barca.exe", cAlternateFileName="")) returned 1 [0060.973] FindNextFileW (in: hFindFile=0x5107c60, lpFindFileData=0x31e5e4 | out: lpFindFileData=0x31e5e4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x80105472, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x80105472, ftLastAccessTime.dwHighDateTime=0x1ca0444, ftLastWriteTime.dwLowDateTime=0x80105472, ftLastWriteTime.dwHighDateTime=0x1ca0444, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft", cAlternateFileName="MICROS~1")) returned 1 [0060.973] FindNextFileW (in: hFindFile=0x5107c60, lpFindFileData=0x31e5e4 | out: lpFindFileData=0x31e5e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4a8de300, ftCreationTime.dwHighDateTime=0x1cacf26, ftLastAccessTime.dwLowDateTime=0x553ced90, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x4a8de300, ftLastWriteTime.dwHighDateTime=0x1cacf26, nFileSizeHigh=0x0, nFileSizeLow=0x2fc, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.Office.InfoPath.targets", cAlternateFileName="MICROS~1.TAR")) returned 1 [0060.973] FindNextFileW (in: hFindFile=0x5107c60, lpFindFileData=0x31e5e4 | out: lpFindFileData=0x31e5e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x40247ae0, ftCreationTime.dwHighDateTime=0x1d5b7d4, ftLastAccessTime.dwLowDateTime=0xeaf5f320, ftLastAccessTime.dwHighDateTime=0x1d5d0db, ftLastWriteTime.dwLowDateTime=0xeaf5f320, ftLastWriteTime.dwHighDateTime=0x1d5d0db, nFileSizeHigh=0x0, nFileSizeLow=0x13a00, dwReserved0=0x0, dwReserved1=0x0, cFileName="omnipos.exe", cAlternateFileName="")) returned 1 [0060.973] FindNextFileW (in: hFindFile=0x5107c60, lpFindFileData=0x31e5e4 | out: lpFindFileData=0x31e5e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x98851340, ftCreationTime.dwHighDateTime=0x1d59027, ftLastAccessTime.dwLowDateTime=0xf225a830, ftLastAccessTime.dwHighDateTime=0x1d58954, ftLastWriteTime.dwLowDateTime=0xf225a830, ftLastWriteTime.dwHighDateTime=0x1d58954, nFileSizeHigh=0x0, nFileSizeLow=0x13a00, dwReserved0=0x0, dwReserved1=0x0, cFileName="skype.exe", cAlternateFileName="")) returned 1 [0060.973] FindNextFileW (in: hFindFile=0x5107c60, lpFindFileData=0x31e5e4 | out: lpFindFileData=0x31e5e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x98851340, ftCreationTime.dwHighDateTime=0x1d59027, ftLastAccessTime.dwLowDateTime=0xf225a830, ftLastAccessTime.dwHighDateTime=0x1d58954, ftLastWriteTime.dwLowDateTime=0xf225a830, ftLastWriteTime.dwHighDateTime=0x1d58954, nFileSizeHigh=0x0, nFileSizeLow=0x13a00, dwReserved0=0x0, dwReserved1=0x0, cFileName="skype.exe", cAlternateFileName="")) returned 0 [0060.974] FindClose (in: hFindFile=0x5107c60 | out: hFindFile=0x5107c60) returned 1 [0060.974] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e86c) returned 1 [0060.974] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e878) returned 1 [0060.974] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e834) returned 1 [0060.974] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\MSBuild\\Microsoft", nBufferLength=0x105, lpBuffer=0x31e33c, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\MSBuild\\Microsoft", lpFilePart=0x0) returned 0x28 [0060.974] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\MSBuild\\Microsoft\\", nBufferLength=0x105, lpBuffer=0x31e310, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\MSBuild\\Microsoft\\", lpFilePart=0x0) returned 0x29 [0060.974] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\MSBuild\\Microsoft\\*", lpFindFileData=0x31e55c | out: lpFindFileData=0x31e55c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x80105472, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x80105472, ftLastAccessTime.dwHighDateTime=0x1ca0444, ftLastWriteTime.dwLowDateTime=0x80105472, ftLastWriteTime.dwHighDateTime=0x1ca0444, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5107c60 [0060.974] FindNextFileW (in: hFindFile=0x5107c60, lpFindFileData=0x31e56c | out: lpFindFileData=0x31e56c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x80105472, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x80105472, ftLastAccessTime.dwHighDateTime=0x1ca0444, ftLastWriteTime.dwLowDateTime=0x80105472, ftLastWriteTime.dwHighDateTime=0x1ca0444, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0060.974] FindNextFileW (in: hFindFile=0x5107c60, lpFindFileData=0x31e56c | out: lpFindFileData=0x31e56c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x80105472, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x80105472, ftLastAccessTime.dwHighDateTime=0x1ca0444, ftLastWriteTime.dwLowDateTime=0x80105472, ftLastWriteTime.dwHighDateTime=0x1ca0444, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Windows Workflow Foundation", cAlternateFileName="WINDOW~1")) returned 1 [0060.974] FindNextFileW (in: hFindFile=0x5107c60, lpFindFileData=0x31e56c | out: lpFindFileData=0x31e56c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x80105472, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x80105472, ftLastAccessTime.dwHighDateTime=0x1ca0444, ftLastWriteTime.dwLowDateTime=0x80105472, ftLastWriteTime.dwHighDateTime=0x1ca0444, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Windows Workflow Foundation", cAlternateFileName="WINDOW~1")) returned 0 [0060.974] FindClose (in: hFindFile=0x5107c60 | out: hFindFile=0x5107c60) returned 1 [0060.975] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e7f4) returned 1 [0060.975] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e800) returned 1 [0060.975] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e834) returned 1 [0060.975] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\MSBuild\\Microsoft", nBufferLength=0x105, lpBuffer=0x31e33c, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\MSBuild\\Microsoft", lpFilePart=0x0) returned 0x28 [0060.975] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\MSBuild\\Microsoft\\", nBufferLength=0x105, lpBuffer=0x31e310, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\MSBuild\\Microsoft\\", lpFilePart=0x0) returned 0x29 [0060.975] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\MSBuild\\Microsoft\\*", lpFindFileData=0x31e55c | out: lpFindFileData=0x31e55c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x80105472, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x80105472, ftLastAccessTime.dwHighDateTime=0x1ca0444, ftLastWriteTime.dwLowDateTime=0x80105472, ftLastWriteTime.dwHighDateTime=0x1ca0444, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5107c60 [0060.975] FindNextFileW (in: hFindFile=0x5107c60, lpFindFileData=0x31e56c | out: lpFindFileData=0x31e56c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x80105472, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x80105472, ftLastAccessTime.dwHighDateTime=0x1ca0444, ftLastWriteTime.dwLowDateTime=0x80105472, ftLastWriteTime.dwHighDateTime=0x1ca0444, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0060.975] FindNextFileW (in: hFindFile=0x5107c60, lpFindFileData=0x31e56c | out: lpFindFileData=0x31e56c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x80105472, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x80105472, ftLastAccessTime.dwHighDateTime=0x1ca0444, ftLastWriteTime.dwLowDateTime=0x80105472, ftLastWriteTime.dwHighDateTime=0x1ca0444, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Windows Workflow Foundation", cAlternateFileName="WINDOW~1")) returned 1 [0060.975] FindNextFileW (in: hFindFile=0x5107c60, lpFindFileData=0x31e56c | out: lpFindFileData=0x31e56c*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0060.975] FindClose (in: hFindFile=0x5107c60 | out: hFindFile=0x5107c60) returned 1 [0060.975] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e7f4) returned 1 [0060.975] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e800) returned 1 [0060.975] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e7bc) returned 1 [0060.975] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\MSBuild\\Microsoft\\Windows Workflow Foundation", nBufferLength=0x105, lpBuffer=0x31e2c4, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\MSBuild\\Microsoft\\Windows Workflow Foundation", lpFilePart=0x0) returned 0x44 [0060.975] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\MSBuild\\Microsoft\\Windows Workflow Foundation\\", nBufferLength=0x105, lpBuffer=0x31e298, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\MSBuild\\Microsoft\\Windows Workflow Foundation\\", lpFilePart=0x0) returned 0x45 [0060.976] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\MSBuild\\Microsoft\\Windows Workflow Foundation\\*", lpFindFileData=0x31e4e4 | out: lpFindFileData=0x31e4e4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x80105472, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x80105472, ftLastAccessTime.dwHighDateTime=0x1ca0444, ftLastWriteTime.dwLowDateTime=0x80105472, ftLastWriteTime.dwHighDateTime=0x1ca0444, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5107c60 [0060.976] FindNextFileW (in: hFindFile=0x5107c60, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x80105472, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x80105472, ftLastAccessTime.dwHighDateTime=0x1ca0444, ftLastWriteTime.dwLowDateTime=0x80105472, ftLastWriteTime.dwHighDateTime=0x1ca0444, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0060.976] FindNextFileW (in: hFindFile=0x5107c60, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x80105472, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x812936d2, ftLastAccessTime.dwHighDateTime=0x1ca0444, ftLastWriteTime.dwLowDateTime=0x812936d2, ftLastWriteTime.dwHighDateTime=0x1ca0444, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="v3.0", cAlternateFileName="")) returned 1 [0060.976] FindNextFileW (in: hFindFile=0x5107c60, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x80105472, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x812936d2, ftLastAccessTime.dwHighDateTime=0x1ca0444, ftLastWriteTime.dwLowDateTime=0x812936d2, ftLastWriteTime.dwHighDateTime=0x1ca0444, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="v3.5", cAlternateFileName="")) returned 1 [0060.976] FindNextFileW (in: hFindFile=0x5107c60, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x80105472, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x812936d2, ftLastAccessTime.dwHighDateTime=0x1ca0444, ftLastWriteTime.dwLowDateTime=0x812936d2, ftLastWriteTime.dwHighDateTime=0x1ca0444, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="v3.5", cAlternateFileName="")) returned 0 [0060.976] FindClose (in: hFindFile=0x5107c60 | out: hFindFile=0x5107c60) returned 1 [0060.976] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e77c) returned 1 [0060.976] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e788) returned 1 [0060.976] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e7bc) returned 1 [0060.976] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\MSBuild\\Microsoft\\Windows Workflow Foundation", nBufferLength=0x105, lpBuffer=0x31e2c4, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\MSBuild\\Microsoft\\Windows Workflow Foundation", lpFilePart=0x0) returned 0x44 [0060.977] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\MSBuild\\Microsoft\\Windows Workflow Foundation\\", nBufferLength=0x105, lpBuffer=0x31e298, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\MSBuild\\Microsoft\\Windows Workflow Foundation\\", lpFilePart=0x0) returned 0x45 [0060.977] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\MSBuild\\Microsoft\\Windows Workflow Foundation\\*", lpFindFileData=0x31e4e4 | out: lpFindFileData=0x31e4e4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x80105472, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x80105472, ftLastAccessTime.dwHighDateTime=0x1ca0444, ftLastWriteTime.dwLowDateTime=0x80105472, ftLastWriteTime.dwHighDateTime=0x1ca0444, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5107c60 [0060.977] FindNextFileW (in: hFindFile=0x5107c60, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x80105472, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x80105472, ftLastAccessTime.dwHighDateTime=0x1ca0444, ftLastWriteTime.dwLowDateTime=0x80105472, ftLastWriteTime.dwHighDateTime=0x1ca0444, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0060.977] FindNextFileW (in: hFindFile=0x5107c60, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x80105472, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x812936d2, ftLastAccessTime.dwHighDateTime=0x1ca0444, ftLastWriteTime.dwLowDateTime=0x812936d2, ftLastWriteTime.dwHighDateTime=0x1ca0444, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="v3.0", cAlternateFileName="")) returned 1 [0060.977] FindNextFileW (in: hFindFile=0x5107c60, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x80105472, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x812936d2, ftLastAccessTime.dwHighDateTime=0x1ca0444, ftLastWriteTime.dwLowDateTime=0x812936d2, ftLastWriteTime.dwHighDateTime=0x1ca0444, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="v3.5", cAlternateFileName="")) returned 1 [0060.977] FindNextFileW (in: hFindFile=0x5107c60, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0060.977] FindClose (in: hFindFile=0x5107c60 | out: hFindFile=0x5107c60) returned 1 [0060.977] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e77c) returned 1 [0060.977] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e788) returned 1 [0060.977] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e744) returned 1 [0060.977] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\MSBuild\\Microsoft\\Windows Workflow Foundation\\v3.0", nBufferLength=0x105, lpBuffer=0x31e24c, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\MSBuild\\Microsoft\\Windows Workflow Foundation\\v3.0", lpFilePart=0x0) returned 0x49 [0060.977] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\MSBuild\\Microsoft\\Windows Workflow Foundation\\v3.0\\", nBufferLength=0x105, lpBuffer=0x31e220, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\MSBuild\\Microsoft\\Windows Workflow Foundation\\v3.0\\", lpFilePart=0x0) returned 0x4a [0060.977] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\MSBuild\\Microsoft\\Windows Workflow Foundation\\v3.0\\*", lpFindFileData=0x31e46c | out: lpFindFileData=0x31e46c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x80105472, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x812936d2, ftLastAccessTime.dwHighDateTime=0x1ca0444, ftLastWriteTime.dwLowDateTime=0x812936d2, ftLastWriteTime.dwHighDateTime=0x1ca0444, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5107c60 [0060.978] FindNextFileW (in: hFindFile=0x5107c60, lpFindFileData=0x31e47c | out: lpFindFileData=0x31e47c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x80105472, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x812936d2, ftLastAccessTime.dwHighDateTime=0x1ca0444, ftLastWriteTime.dwLowDateTime=0x812936d2, ftLastWriteTime.dwHighDateTime=0x1ca0444, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0060.978] FindNextFileW (in: hFindFile=0x5107c60, lpFindFileData=0x31e47c | out: lpFindFileData=0x31e47c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x812936d2, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x7c347960, ftLastAccessTime.dwHighDateTime=0x1ca0444, ftLastWriteTime.dwLowDateTime=0x7c347960, ftLastWriteTime.dwHighDateTime=0x1ca0444, nFileSizeHigh=0x0, nFileSizeLow=0x1276, dwReserved0=0x0, dwReserved1=0x0, cFileName="Workflow.Targets", cAlternateFileName="WORKFL~2.TAR")) returned 1 [0060.978] FindNextFileW (in: hFindFile=0x5107c60, lpFindFileData=0x31e47c | out: lpFindFileData=0x31e47c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x812936d2, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x7c347960, ftLastAccessTime.dwHighDateTime=0x1ca0444, ftLastWriteTime.dwLowDateTime=0x7c347960, ftLastWriteTime.dwHighDateTime=0x1ca0444, nFileSizeHigh=0x0, nFileSizeLow=0x143e, dwReserved0=0x0, dwReserved1=0x0, cFileName="Workflow.VisualBasic.Targets", cAlternateFileName="WORKFL~1.TAR")) returned 1 [0060.978] FindNextFileW (in: hFindFile=0x5107c60, lpFindFileData=0x31e47c | out: lpFindFileData=0x31e47c*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0060.978] FindClose (in: hFindFile=0x5107c60 | out: hFindFile=0x5107c60) returned 1 [0060.978] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e704) returned 1 [0060.978] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e710) returned 1 [0060.978] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e744) returned 1 [0060.978] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\MSBuild\\Microsoft\\Windows Workflow Foundation\\v3.0", nBufferLength=0x105, lpBuffer=0x31e24c, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\MSBuild\\Microsoft\\Windows Workflow Foundation\\v3.0", lpFilePart=0x0) returned 0x49 [0060.978] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\MSBuild\\Microsoft\\Windows Workflow Foundation\\v3.0\\", nBufferLength=0x105, lpBuffer=0x31e220, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\MSBuild\\Microsoft\\Windows Workflow Foundation\\v3.0\\", lpFilePart=0x0) returned 0x4a [0060.979] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\MSBuild\\Microsoft\\Windows Workflow Foundation\\v3.0\\*", lpFindFileData=0x31e46c | out: lpFindFileData=0x31e46c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x80105472, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x812936d2, ftLastAccessTime.dwHighDateTime=0x1ca0444, ftLastWriteTime.dwLowDateTime=0x812936d2, ftLastWriteTime.dwHighDateTime=0x1ca0444, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5107c60 [0060.979] FindNextFileW (in: hFindFile=0x5107c60, lpFindFileData=0x31e47c | out: lpFindFileData=0x31e47c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x80105472, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x812936d2, ftLastAccessTime.dwHighDateTime=0x1ca0444, ftLastWriteTime.dwLowDateTime=0x812936d2, ftLastWriteTime.dwHighDateTime=0x1ca0444, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0060.979] FindNextFileW (in: hFindFile=0x5107c60, lpFindFileData=0x31e47c | out: lpFindFileData=0x31e47c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x812936d2, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x7c347960, ftLastAccessTime.dwHighDateTime=0x1ca0444, ftLastWriteTime.dwLowDateTime=0x7c347960, ftLastWriteTime.dwHighDateTime=0x1ca0444, nFileSizeHigh=0x0, nFileSizeLow=0x1276, dwReserved0=0x0, dwReserved1=0x0, cFileName="Workflow.Targets", cAlternateFileName="WORKFL~2.TAR")) returned 1 [0060.979] FindNextFileW (in: hFindFile=0x5107c60, lpFindFileData=0x31e47c | out: lpFindFileData=0x31e47c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x812936d2, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x7c347960, ftLastAccessTime.dwHighDateTime=0x1ca0444, ftLastWriteTime.dwLowDateTime=0x7c347960, ftLastWriteTime.dwHighDateTime=0x1ca0444, nFileSizeHigh=0x0, nFileSizeLow=0x143e, dwReserved0=0x0, dwReserved1=0x0, cFileName="Workflow.VisualBasic.Targets", cAlternateFileName="WORKFL~1.TAR")) returned 1 [0060.979] FindNextFileW (in: hFindFile=0x5107c60, lpFindFileData=0x31e47c | out: lpFindFileData=0x31e47c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x812936d2, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x7c347960, ftLastAccessTime.dwHighDateTime=0x1ca0444, ftLastWriteTime.dwLowDateTime=0x7c347960, ftLastWriteTime.dwHighDateTime=0x1ca0444, nFileSizeHigh=0x0, nFileSizeLow=0x143e, dwReserved0=0x0, dwReserved1=0x0, cFileName="Workflow.VisualBasic.Targets", cAlternateFileName="WORKFL~1.TAR")) returned 0 [0060.979] FindClose (in: hFindFile=0x5107c60 | out: hFindFile=0x5107c60) returned 1 [0060.979] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e704) returned 1 [0060.979] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e710) returned 1 [0060.979] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e744) returned 1 [0060.979] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\MSBuild\\Microsoft\\Windows Workflow Foundation\\v3.5", nBufferLength=0x105, lpBuffer=0x31e24c, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\MSBuild\\Microsoft\\Windows Workflow Foundation\\v3.5", lpFilePart=0x0) returned 0x49 [0060.980] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\MSBuild\\Microsoft\\Windows Workflow Foundation\\v3.5\\", nBufferLength=0x105, lpBuffer=0x31e220, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\MSBuild\\Microsoft\\Windows Workflow Foundation\\v3.5\\", lpFilePart=0x0) returned 0x4a [0060.980] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\MSBuild\\Microsoft\\Windows Workflow Foundation\\v3.5\\*", lpFindFileData=0x31e46c | out: lpFindFileData=0x31e46c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x80105472, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x812936d2, ftLastAccessTime.dwHighDateTime=0x1ca0444, ftLastWriteTime.dwLowDateTime=0x812936d2, ftLastWriteTime.dwHighDateTime=0x1ca0444, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5107c60 [0060.980] FindNextFileW (in: hFindFile=0x5107c60, lpFindFileData=0x31e47c | out: lpFindFileData=0x31e47c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x80105472, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x812936d2, ftLastAccessTime.dwHighDateTime=0x1ca0444, ftLastWriteTime.dwLowDateTime=0x812936d2, ftLastWriteTime.dwHighDateTime=0x1ca0444, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0060.980] FindNextFileW (in: hFindFile=0x5107c60, lpFindFileData=0x31e47c | out: lpFindFileData=0x31e47c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5fae55dc, ftCreationTime.dwHighDateTime=0x1c9ea10, ftLastAccessTime.dwLowDateTime=0x5fae55dc, ftLastAccessTime.dwHighDateTime=0x1c9ea10, ftLastWriteTime.dwLowDateTime=0x5fc160dc, ftLastWriteTime.dwHighDateTime=0x1c9ea10, nFileSizeHigh=0x0, nFileSizeLow=0x1c01, dwReserved0=0x0, dwReserved1=0x0, cFileName="Workflow.Targets", cAlternateFileName="")) returned 1 [0060.980] FindNextFileW (in: hFindFile=0x5107c60, lpFindFileData=0x31e47c | out: lpFindFileData=0x31e47c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2eae0db9, ftCreationTime.dwHighDateTime=0x1ca03fe, ftLastAccessTime.dwLowDateTime=0x2eae0db9, ftLastAccessTime.dwHighDateTime=0x1ca03fe, ftLastWriteTime.dwLowDateTime=0x5fe776dc, ftLastWriteTime.dwHighDateTime=0x1c9ea10, nFileSizeHigh=0x0, nFileSizeLow=0x21e8, dwReserved0=0x0, dwReserved1=0x0, cFileName="Workflow.VisualBasic.Targets", cAlternateFileName="")) returned 1 [0060.980] FindNextFileW (in: hFindFile=0x5107c60, lpFindFileData=0x31e47c | out: lpFindFileData=0x31e47c*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0060.980] FindClose (in: hFindFile=0x5107c60 | out: hFindFile=0x5107c60) returned 1 [0060.980] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e704) returned 1 [0060.980] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e710) returned 1 [0060.980] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e744) returned 1 [0060.980] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\MSBuild\\Microsoft\\Windows Workflow Foundation\\v3.5", nBufferLength=0x105, lpBuffer=0x31e24c, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\MSBuild\\Microsoft\\Windows Workflow Foundation\\v3.5", lpFilePart=0x0) returned 0x49 [0060.981] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\MSBuild\\Microsoft\\Windows Workflow Foundation\\v3.5\\", nBufferLength=0x105, lpBuffer=0x31e220, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\MSBuild\\Microsoft\\Windows Workflow Foundation\\v3.5\\", lpFilePart=0x0) returned 0x4a [0060.981] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\MSBuild\\Microsoft\\Windows Workflow Foundation\\v3.5\\*", lpFindFileData=0x31e46c | out: lpFindFileData=0x31e46c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x80105472, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x812936d2, ftLastAccessTime.dwHighDateTime=0x1ca0444, ftLastWriteTime.dwLowDateTime=0x812936d2, ftLastWriteTime.dwHighDateTime=0x1ca0444, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5107c60 [0060.981] FindNextFileW (in: hFindFile=0x5107c60, lpFindFileData=0x31e47c | out: lpFindFileData=0x31e47c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x80105472, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x812936d2, ftLastAccessTime.dwHighDateTime=0x1ca0444, ftLastWriteTime.dwLowDateTime=0x812936d2, ftLastWriteTime.dwHighDateTime=0x1ca0444, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0060.981] FindNextFileW (in: hFindFile=0x5107c60, lpFindFileData=0x31e47c | out: lpFindFileData=0x31e47c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5fae55dc, ftCreationTime.dwHighDateTime=0x1c9ea10, ftLastAccessTime.dwLowDateTime=0x5fae55dc, ftLastAccessTime.dwHighDateTime=0x1c9ea10, ftLastWriteTime.dwLowDateTime=0x5fc160dc, ftLastWriteTime.dwHighDateTime=0x1c9ea10, nFileSizeHigh=0x0, nFileSizeLow=0x1c01, dwReserved0=0x0, dwReserved1=0x0, cFileName="Workflow.Targets", cAlternateFileName="")) returned 1 [0060.981] FindNextFileW (in: hFindFile=0x5107c60, lpFindFileData=0x31e47c | out: lpFindFileData=0x31e47c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2eae0db9, ftCreationTime.dwHighDateTime=0x1ca03fe, ftLastAccessTime.dwLowDateTime=0x2eae0db9, ftLastAccessTime.dwHighDateTime=0x1ca03fe, ftLastWriteTime.dwLowDateTime=0x5fe776dc, ftLastWriteTime.dwHighDateTime=0x1c9ea10, nFileSizeHigh=0x0, nFileSizeLow=0x21e8, dwReserved0=0x0, dwReserved1=0x0, cFileName="Workflow.VisualBasic.Targets", cAlternateFileName="")) returned 1 [0060.981] FindNextFileW (in: hFindFile=0x5107c60, lpFindFileData=0x31e47c | out: lpFindFileData=0x31e47c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2eae0db9, ftCreationTime.dwHighDateTime=0x1ca03fe, ftLastAccessTime.dwLowDateTime=0x2eae0db9, ftLastAccessTime.dwHighDateTime=0x1ca03fe, ftLastWriteTime.dwLowDateTime=0x5fe776dc, ftLastWriteTime.dwHighDateTime=0x1c9ea10, nFileSizeHigh=0x0, nFileSizeLow=0x21e8, dwReserved0=0x0, dwReserved1=0x0, cFileName="Workflow.VisualBasic.Targets", cAlternateFileName="")) returned 0 [0060.981] FindClose (in: hFindFile=0x5107c60 | out: hFindFile=0x5107c60) returned 1 [0060.981] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e704) returned 1 [0060.981] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e710) returned 1 [0060.981] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e8ac) returned 1 [0060.981] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Reference Assemblies", nBufferLength=0x105, lpBuffer=0x31e3b4, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Reference Assemblies", lpFilePart=0x0) returned 0x2b [0060.982] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Reference Assemblies\\", nBufferLength=0x105, lpBuffer=0x31e388, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Reference Assemblies\\", lpFilePart=0x0) returned 0x2c [0060.982] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Reference Assemblies\\*", lpFindFileData=0x31e5d4 | out: lpFindFileData=0x31e5d4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x80105472, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0xd9a52940, ftLastAccessTime.dwHighDateTime=0x1d5e82a, ftLastWriteTime.dwLowDateTime=0xd9a52940, ftLastWriteTime.dwHighDateTime=0x1d5e82a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5107c60 [0060.982] FindNextFileW (in: hFindFile=0x5107c60, lpFindFileData=0x31e5e4 | out: lpFindFileData=0x31e5e4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x80105472, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0xd9a52940, ftLastAccessTime.dwHighDateTime=0x1d5e82a, ftLastWriteTime.dwLowDateTime=0xd9a52940, ftLastWriteTime.dwHighDateTime=0x1d5e82a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0060.982] FindNextFileW (in: hFindFile=0x5107c60, lpFindFileData=0x31e5e4 | out: lpFindFileData=0x31e5e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x66e54c50, ftCreationTime.dwHighDateTime=0x1d5949c, ftLastAccessTime.dwLowDateTime=0xa5bee300, ftLastAccessTime.dwHighDateTime=0x1d57a84, ftLastWriteTime.dwLowDateTime=0xa5bee300, ftLastWriteTime.dwHighDateTime=0x1d57a84, nFileSizeHigh=0x0, nFileSizeLow=0x13a00, dwReserved0=0x0, dwReserved1=0x0, cFileName="afr38.exe", cAlternateFileName="")) returned 1 [0060.982] FindNextFileW (in: hFindFile=0x5107c60, lpFindFileData=0x31e5e4 | out: lpFindFileData=0x31e5e4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x80105472, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x80105472, ftLastAccessTime.dwHighDateTime=0x1ca0444, ftLastWriteTime.dwLowDateTime=0x80105472, ftLastWriteTime.dwHighDateTime=0x1ca0444, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft", cAlternateFileName="MICROS~1")) returned 1 [0060.982] FindNextFileW (in: hFindFile=0x5107c60, lpFindFileData=0x31e5e4 | out: lpFindFileData=0x31e5e4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x80105472, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x80105472, ftLastAccessTime.dwHighDateTime=0x1ca0444, ftLastWriteTime.dwLowDateTime=0x80105472, ftLastWriteTime.dwHighDateTime=0x1ca0444, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft", cAlternateFileName="MICROS~1")) returned 0 [0060.982] FindClose (in: hFindFile=0x5107c60 | out: hFindFile=0x5107c60) returned 1 [0060.982] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e86c) returned 1 [0060.982] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e878) returned 1 [0060.982] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e8ac) returned 1 [0060.982] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Reference Assemblies", nBufferLength=0x105, lpBuffer=0x31e3b4, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Reference Assemblies", lpFilePart=0x0) returned 0x2b [0060.983] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Reference Assemblies\\", nBufferLength=0x105, lpBuffer=0x31e388, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Reference Assemblies\\", lpFilePart=0x0) returned 0x2c [0060.983] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Reference Assemblies\\*", lpFindFileData=0x31e5d4 | out: lpFindFileData=0x31e5d4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x80105472, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0xd9a52940, ftLastAccessTime.dwHighDateTime=0x1d5e82a, ftLastWriteTime.dwLowDateTime=0xd9a52940, ftLastWriteTime.dwHighDateTime=0x1d5e82a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5107c60 [0060.983] FindNextFileW (in: hFindFile=0x5107c60, lpFindFileData=0x31e5e4 | out: lpFindFileData=0x31e5e4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x80105472, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0xd9a52940, ftLastAccessTime.dwHighDateTime=0x1d5e82a, ftLastWriteTime.dwLowDateTime=0xd9a52940, ftLastWriteTime.dwHighDateTime=0x1d5e82a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0060.983] FindNextFileW (in: hFindFile=0x5107c60, lpFindFileData=0x31e5e4 | out: lpFindFileData=0x31e5e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x66e54c50, ftCreationTime.dwHighDateTime=0x1d5949c, ftLastAccessTime.dwLowDateTime=0xa5bee300, ftLastAccessTime.dwHighDateTime=0x1d57a84, ftLastWriteTime.dwLowDateTime=0xa5bee300, ftLastWriteTime.dwHighDateTime=0x1d57a84, nFileSizeHigh=0x0, nFileSizeLow=0x13a00, dwReserved0=0x0, dwReserved1=0x0, cFileName="afr38.exe", cAlternateFileName="")) returned 1 [0060.983] FindNextFileW (in: hFindFile=0x5107c60, lpFindFileData=0x31e5e4 | out: lpFindFileData=0x31e5e4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x80105472, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x80105472, ftLastAccessTime.dwHighDateTime=0x1ca0444, ftLastWriteTime.dwLowDateTime=0x80105472, ftLastWriteTime.dwHighDateTime=0x1ca0444, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft", cAlternateFileName="MICROS~1")) returned 1 [0060.983] FindNextFileW (in: hFindFile=0x5107c60, lpFindFileData=0x31e5e4 | out: lpFindFileData=0x31e5e4*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0060.983] FindClose (in: hFindFile=0x5107c60 | out: hFindFile=0x5107c60) returned 1 [0060.983] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e86c) returned 1 [0060.983] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e878) returned 1 [0060.983] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e834) returned 1 [0060.983] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Reference Assemblies\\Microsoft", nBufferLength=0x105, lpBuffer=0x31e33c, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Reference Assemblies\\Microsoft", lpFilePart=0x0) returned 0x35 [0060.983] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Reference Assemblies\\Microsoft\\", nBufferLength=0x105, lpBuffer=0x31e310, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Reference Assemblies\\Microsoft\\", lpFilePart=0x0) returned 0x36 [0060.983] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Reference Assemblies\\Microsoft\\*", lpFindFileData=0x31e55c | out: lpFindFileData=0x31e55c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x80105472, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x80105472, ftLastAccessTime.dwHighDateTime=0x1ca0444, ftLastWriteTime.dwLowDateTime=0x80105472, ftLastWriteTime.dwHighDateTime=0x1ca0444, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5107c60 [0060.984] FindNextFileW (in: hFindFile=0x5107c60, lpFindFileData=0x31e56c | out: lpFindFileData=0x31e56c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x80105472, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x80105472, ftLastAccessTime.dwHighDateTime=0x1ca0444, ftLastWriteTime.dwLowDateTime=0x80105472, ftLastWriteTime.dwHighDateTime=0x1ca0444, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0060.984] FindNextFileW (in: hFindFile=0x5107c60, lpFindFileData=0x31e56c | out: lpFindFileData=0x31e56c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x80105472, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x80105472, ftLastAccessTime.dwHighDateTime=0x1ca0444, ftLastWriteTime.dwLowDateTime=0x80105472, ftLastWriteTime.dwHighDateTime=0x1ca0444, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Framework", cAlternateFileName="FRAMEW~1")) returned 1 [0060.984] FindNextFileW (in: hFindFile=0x5107c60, lpFindFileData=0x31e56c | out: lpFindFileData=0x31e56c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x80105472, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x80105472, ftLastAccessTime.dwHighDateTime=0x1ca0444, ftLastWriteTime.dwLowDateTime=0x80105472, ftLastWriteTime.dwHighDateTime=0x1ca0444, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Framework", cAlternateFileName="FRAMEW~1")) returned 0 [0060.984] FindClose (in: hFindFile=0x5107c60 | out: hFindFile=0x5107c60) returned 1 [0060.984] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e7f4) returned 1 [0060.984] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e800) returned 1 [0060.984] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e834) returned 1 [0060.984] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Reference Assemblies\\Microsoft", nBufferLength=0x105, lpBuffer=0x31e33c, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Reference Assemblies\\Microsoft", lpFilePart=0x0) returned 0x35 [0060.984] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Reference Assemblies\\Microsoft\\", nBufferLength=0x105, lpBuffer=0x31e310, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Reference Assemblies\\Microsoft\\", lpFilePart=0x0) returned 0x36 [0060.984] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Reference Assemblies\\Microsoft\\*", lpFindFileData=0x31e55c | out: lpFindFileData=0x31e55c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x80105472, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x80105472, ftLastAccessTime.dwHighDateTime=0x1ca0444, ftLastWriteTime.dwLowDateTime=0x80105472, ftLastWriteTime.dwHighDateTime=0x1ca0444, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5107c60 [0060.984] FindNextFileW (in: hFindFile=0x5107c60, lpFindFileData=0x31e56c | out: lpFindFileData=0x31e56c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x80105472, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x80105472, ftLastAccessTime.dwHighDateTime=0x1ca0444, ftLastWriteTime.dwLowDateTime=0x80105472, ftLastWriteTime.dwHighDateTime=0x1ca0444, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0060.984] FindNextFileW (in: hFindFile=0x5107c60, lpFindFileData=0x31e56c | out: lpFindFileData=0x31e56c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x80105472, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x80105472, ftLastAccessTime.dwHighDateTime=0x1ca0444, ftLastWriteTime.dwLowDateTime=0x80105472, ftLastWriteTime.dwHighDateTime=0x1ca0444, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Framework", cAlternateFileName="FRAMEW~1")) returned 1 [0060.984] FindNextFileW (in: hFindFile=0x5107c60, lpFindFileData=0x31e56c | out: lpFindFileData=0x31e56c*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0060.984] FindClose (in: hFindFile=0x5107c60 | out: hFindFile=0x5107c60) returned 1 [0060.984] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e7f4) returned 1 [0060.984] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e800) returned 1 [0060.984] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e7bc) returned 1 [0060.984] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Reference Assemblies\\Microsoft\\Framework", nBufferLength=0x105, lpBuffer=0x31e2c4, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Reference Assemblies\\Microsoft\\Framework", lpFilePart=0x0) returned 0x3f [0060.985] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Reference Assemblies\\Microsoft\\Framework\\", nBufferLength=0x105, lpBuffer=0x31e298, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Reference Assemblies\\Microsoft\\Framework\\", lpFilePart=0x0) returned 0x40 [0060.985] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Reference Assemblies\\Microsoft\\Framework\\*", lpFindFileData=0x31e4e4 | out: lpFindFileData=0x31e4e4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x80105472, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x80105472, ftLastAccessTime.dwHighDateTime=0x1ca0444, ftLastWriteTime.dwLowDateTime=0x80105472, ftLastWriteTime.dwHighDateTime=0x1ca0444, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5107c60 [0060.985] FindNextFileW (in: hFindFile=0x5107c60, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x80105472, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x80105472, ftLastAccessTime.dwHighDateTime=0x1ca0444, ftLastWriteTime.dwLowDateTime=0x80105472, ftLastWriteTime.dwHighDateTime=0x1ca0444, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0060.985] FindNextFileW (in: hFindFile=0x5107c60, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x80105472, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x9a8c6329, ftLastAccessTime.dwHighDateTime=0x1cb892c, ftLastWriteTime.dwLowDateTime=0x9a8c6329, ftLastWriteTime.dwHighDateTime=0x1cb892c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="v3.0", cAlternateFileName="")) returned 1 [0060.985] FindNextFileW (in: hFindFile=0x5107c60, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x80105472, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x9a23a69d, ftLastAccessTime.dwHighDateTime=0x1cb892c, ftLastWriteTime.dwLowDateTime=0x9a23a69d, ftLastWriteTime.dwHighDateTime=0x1cb892c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="v3.5", cAlternateFileName="")) returned 1 [0060.986] FindNextFileW (in: hFindFile=0x5107c60, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x80105472, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x9a23a69d, ftLastAccessTime.dwHighDateTime=0x1cb892c, ftLastWriteTime.dwLowDateTime=0x9a23a69d, ftLastWriteTime.dwHighDateTime=0x1cb892c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="v3.5", cAlternateFileName="")) returned 0 [0060.986] FindClose (in: hFindFile=0x5107c60 | out: hFindFile=0x5107c60) returned 1 [0060.986] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e77c) returned 1 [0060.986] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e788) returned 1 [0060.986] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e7bc) returned 1 [0060.986] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Reference Assemblies\\Microsoft\\Framework", nBufferLength=0x105, lpBuffer=0x31e2c4, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Reference Assemblies\\Microsoft\\Framework", lpFilePart=0x0) returned 0x3f [0060.986] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Reference Assemblies\\Microsoft\\Framework\\", nBufferLength=0x105, lpBuffer=0x31e298, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Reference Assemblies\\Microsoft\\Framework\\", lpFilePart=0x0) returned 0x40 [0060.986] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Reference Assemblies\\Microsoft\\Framework\\*", lpFindFileData=0x31e4e4 | out: lpFindFileData=0x31e4e4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x80105472, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x80105472, ftLastAccessTime.dwHighDateTime=0x1ca0444, ftLastWriteTime.dwLowDateTime=0x80105472, ftLastWriteTime.dwHighDateTime=0x1ca0444, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5107c60 [0060.986] FindNextFileW (in: hFindFile=0x5107c60, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x80105472, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x80105472, ftLastAccessTime.dwHighDateTime=0x1ca0444, ftLastWriteTime.dwLowDateTime=0x80105472, ftLastWriteTime.dwHighDateTime=0x1ca0444, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0060.986] FindNextFileW (in: hFindFile=0x5107c60, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x80105472, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x9a8c6329, ftLastAccessTime.dwHighDateTime=0x1cb892c, ftLastWriteTime.dwLowDateTime=0x9a8c6329, ftLastWriteTime.dwHighDateTime=0x1cb892c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="v3.0", cAlternateFileName="")) returned 1 [0060.986] FindNextFileW (in: hFindFile=0x5107c60, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x80105472, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x9a23a69d, ftLastAccessTime.dwHighDateTime=0x1cb892c, ftLastWriteTime.dwLowDateTime=0x9a23a69d, ftLastWriteTime.dwHighDateTime=0x1cb892c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="v3.5", cAlternateFileName="")) returned 1 [0060.986] FindNextFileW (in: hFindFile=0x5107c60, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0060.986] FindClose (in: hFindFile=0x5107c60 | out: hFindFile=0x5107c60) returned 1 [0060.986] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e77c) returned 1 [0060.986] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e788) returned 1 [0060.986] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e744) returned 1 [0060.986] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Reference Assemblies\\Microsoft\\Framework\\v3.0", nBufferLength=0x105, lpBuffer=0x31e24c, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Reference Assemblies\\Microsoft\\Framework\\v3.0", lpFilePart=0x0) returned 0x44 [0060.986] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Reference Assemblies\\Microsoft\\Framework\\v3.0\\", nBufferLength=0x105, lpBuffer=0x31e220, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Reference Assemblies\\Microsoft\\Framework\\v3.0\\", lpFilePart=0x0) returned 0x45 [0060.986] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Reference Assemblies\\Microsoft\\Framework\\v3.0\\*", lpFindFileData=0x31e46c | out: lpFindFileData=0x31e46c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x80105472, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x9a8c6329, ftLastAccessTime.dwHighDateTime=0x1cb892c, ftLastWriteTime.dwLowDateTime=0x9a8c6329, ftLastWriteTime.dwHighDateTime=0x1cb892c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5107c60 [0060.988] FindNextFileW (in: hFindFile=0x5107c60, lpFindFileData=0x31e47c | out: lpFindFileData=0x31e47c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x80105472, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x9a8c6329, ftLastAccessTime.dwHighDateTime=0x1cb892c, ftLastWriteTime.dwLowDateTime=0x9a8c6329, ftLastWriteTime.dwHighDateTime=0x1cb892c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0060.988] FindNextFileW (in: hFindFile=0x5107c60, lpFindFileData=0x31e47c | out: lpFindFileData=0x31e47c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xaa5f4b44, ftCreationTime.dwHighDateTime=0x1cb892b, ftLastAccessTime.dwLowDateTime=0xaa5f4b44, ftLastAccessTime.dwHighDateTime=0x1cb892b, ftLastWriteTime.dwLowDateTime=0xaaa915ec, ftLastWriteTime.dwHighDateTime=0x1cb892b, nFileSizeHigh=0x0, nFileSizeLow=0x92000, dwReserved0=0x0, dwReserved1=0x0, cFileName="PresentationBuildTasks.dll", cAlternateFileName="")) returned 1 [0060.988] FindNextFileW (in: hFindFile=0x5107c60, lpFindFileData=0x31e47c | out: lpFindFileData=0x31e47c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xab1db959, ftCreationTime.dwHighDateTime=0x1cb892b, ftLastAccessTime.dwLowDateTime=0xab1db959, ftLastAccessTime.dwHighDateTime=0x1cb892b, ftLastWriteTime.dwLowDateTime=0xab4fb63f, ftLastWriteTime.dwHighDateTime=0x1cb892b, nFileSizeHigh=0x0, nFileSizeLow=0x406000, dwReserved0=0x0, dwReserved1=0x0, cFileName="PresentationCore.dll", cAlternateFileName="")) returned 1 [0060.988] FindNextFileW (in: hFindFile=0x5107c60, lpFindFileData=0x31e47c | out: lpFindFileData=0x31e47c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4de43cb, ftCreationTime.dwHighDateTime=0x1ca041b, ftLastAccessTime.dwLowDateTime=0x4de43cb, ftLastAccessTime.dwHighDateTime=0x1ca041b, ftLastWriteTime.dwLowDateTime=0x79b03bbc, ftLastWriteTime.dwHighDateTime=0x1c9ea10, nFileSizeHigh=0x0, nFileSizeLow=0x30000, dwReserved0=0x0, dwReserved1=0x0, cFileName="PresentationFramework.Aero.dll", cAlternateFileName="")) returned 1 [0060.988] FindNextFileW (in: hFindFile=0x5107c60, lpFindFileData=0x31e47c | out: lpFindFileData=0x31e47c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4ff96fd, ftCreationTime.dwHighDateTime=0x1ca041b, ftLastAccessTime.dwLowDateTime=0x4ff96fd, ftLastAccessTime.dwHighDateTime=0x1ca041b, ftLastWriteTime.dwLowDateTime=0x79e95cbc, ftLastWriteTime.dwHighDateTime=0x1c9ea10, nFileSizeHigh=0x0, nFileSizeLow=0x22000, dwReserved0=0x0, dwReserved1=0x0, cFileName="PresentationFramework.Classic.dll", cAlternateFileName="")) returned 1 [0060.988] FindNextFileW (in: hFindFile=0x5107c60, lpFindFileData=0x31e47c | out: lpFindFileData=0x31e47c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xaaa915ec, ftCreationTime.dwHighDateTime=0x1cb892b, ftLastAccessTime.dwLowDateTime=0xaaa915ec, ftLastAccessTime.dwHighDateTime=0x1cb892b, ftLastWriteTime.dwLowDateTime=0xab0aae57, ftLastWriteTime.dwHighDateTime=0x1cb892b, nFileSizeHigh=0x0, nFileSizeLow=0x509000, dwReserved0=0x0, dwReserved1=0x0, cFileName="PresentationFramework.dll", cAlternateFileName="")) returned 1 [0060.988] FindNextFileW (in: hFindFile=0x5107c60, lpFindFileData=0x31e47c | out: lpFindFileData=0x31e47c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa9dec0f5, ftCreationTime.dwHighDateTime=0x1cb892b, ftLastAccessTime.dwLowDateTime=0xa9dec0f5, ftLastAccessTime.dwHighDateTime=0x1cb892b, ftLastWriteTime.dwLowDateTime=0xaa0e5c7a, ftLastWriteTime.dwHighDateTime=0x1cb892b, nFileSizeHigh=0x0, nFileSizeLow=0x61000, dwReserved0=0x0, dwReserved1=0x0, cFileName="PresentationFramework.Luna.dll", cAlternateFileName="")) returned 1 [0060.988] FindNextFileW (in: hFindFile=0x5107c60, lpFindFileData=0x31e47c | out: lpFindFileData=0x31e47c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x653fb0e, ftCreationTime.dwHighDateTime=0x1ca041b, ftLastAccessTime.dwLowDateTime=0x653fb0e, ftLastAccessTime.dwHighDateTime=0x1ca041b, ftLastWriteTime.dwLowDateTime=0x7a4fb7dc, ftLastWriteTime.dwHighDateTime=0x1c9ea10, nFileSizeHigh=0x0, nFileSizeLow=0x28000, dwReserved0=0x0, dwReserved1=0x0, cFileName="PresentationFramework.Royale.dll", cAlternateFileName="")) returned 1 [0060.988] FindNextFileW (in: hFindFile=0x5107c60, lpFindFileData=0x31e47c | out: lpFindFileData=0x31e47c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xaa10bdda, ftCreationTime.dwHighDateTime=0x1cb892b, ftLastAccessTime.dwLowDateTime=0xaa10bdda, ftLastAccessTime.dwHighDateTime=0x1cb892b, ftLastWriteTime.dwLowDateTime=0xaa262a3d, ftLastWriteTime.dwHighDateTime=0x1cb892b, nFileSizeHigh=0x0, nFileSizeLow=0x82000, dwReserved0=0x0, dwReserved1=0x0, cFileName="ReachFramework.dll", cAlternateFileName="")) returned 1 [0060.988] FindNextFileW (in: hFindFile=0x5107c60, lpFindFileData=0x31e47c | out: lpFindFileData=0x31e47c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x80105472, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x812df993, ftLastAccessTime.dwHighDateTime=0x1ca0444, ftLastWriteTime.dwLowDateTime=0x812df993, ftLastWriteTime.dwHighDateTime=0x1ca0444, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="RedistList", cAlternateFileName="REDIST~1")) returned 1 [0060.988] FindNextFileW (in: hFindFile=0x5107c60, lpFindFileData=0x31e47c | out: lpFindFileData=0x31e47c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x80105472, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x812df993, ftLastAccessTime.dwHighDateTime=0x1ca0444, ftLastWriteTime.dwLowDateTime=0x812df993, ftLastWriteTime.dwHighDateTime=0x1ca0444, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="SubsetList", cAlternateFileName="SUBSET~1")) returned 1 [0060.988] FindNextFileW (in: hFindFile=0x5107c60, lpFindFileData=0x31e47c | out: lpFindFileData=0x31e47c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb46093ea, ftCreationTime.dwHighDateTime=0x1cb892b, ftLastAccessTime.dwLowDateTime=0xb46093ea, ftLastAccessTime.dwHighDateTime=0x1cb892b, ftLastWriteTime.dwLowDateTime=0xb46093ea, ftLastWriteTime.dwHighDateTime=0x1cb892b, nFileSizeHigh=0x0, nFileSizeLow=0x6c000, dwReserved0=0x0, dwReserved1=0x0, cFileName="System.IdentityModel.dll", cAlternateFileName="")) returned 1 [0060.988] FindNextFileW (in: hFindFile=0x5107c60, lpFindFileData=0x31e47c | out: lpFindFileData=0x31e47c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb46093ea, ftCreationTime.dwHighDateTime=0x1cb892b, ftLastAccessTime.dwLowDateTime=0xb46093ea, ftLastAccessTime.dwHighDateTime=0x1cb892b, ftLastWriteTime.dwLowDateTime=0xb46093ea, ftLastWriteTime.dwHighDateTime=0x1cb892b, nFileSizeHigh=0x0, nFileSizeLow=0x1f000, dwReserved0=0x0, dwReserved1=0x0, cFileName="System.IdentityModel.Selectors.dll", cAlternateFileName="")) returned 1 [0060.988] FindNextFileW (in: hFindFile=0x5107c60, lpFindFileData=0x31e47c | out: lpFindFileData=0x31e47c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1a94654c, ftCreationTime.dwHighDateTime=0x1ca041b, ftLastAccessTime.dwLowDateTime=0x1a94654c, ftLastAccessTime.dwHighDateTime=0x1ca041b, ftLastWriteTime.dwLowDateTime=0x5c12c05c, ftLastWriteTime.dwHighDateTime=0x1c9ea10, nFileSizeHigh=0x0, nFileSizeLow=0x20000, dwReserved0=0x0, dwReserved1=0x0, cFileName="System.IO.Log.dll", cAlternateFileName="")) returned 1 [0060.988] FindNextFileW (in: hFindFile=0x5107c60, lpFindFileData=0x31e47c | out: lpFindFileData=0x31e47c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xab0aae57, ftCreationTime.dwHighDateTime=0x1cb892b, ftLastAccessTime.dwLowDateTime=0xab0aae57, ftLastAccessTime.dwHighDateTime=0x1cb892b, ftLastWriteTime.dwLowDateTime=0xab1db959, ftLastWriteTime.dwHighDateTime=0x1cb892b, nFileSizeHigh=0x0, nFileSizeLow=0x5b000, dwReserved0=0x0, dwReserved1=0x0, cFileName="System.Printing.dll", cAlternateFileName="")) returned 1 [0060.988] FindNextFileW (in: hFindFile=0x5107c60, lpFindFileData=0x31e47c | out: lpFindFileData=0x31e47c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb45bd12a, ftCreationTime.dwHighDateTime=0x1cb892b, ftLastAccessTime.dwLowDateTime=0xb45bd12a, ftLastAccessTime.dwHighDateTime=0x1cb892b, ftLastWriteTime.dwLowDateTime=0xb45e328a, ftLastWriteTime.dwHighDateTime=0x1cb892b, nFileSizeHigh=0x0, nFileSizeLow=0xed000, dwReserved0=0x0, dwReserved1=0x0, cFileName="System.Runtime.Serialization.dll", cAlternateFileName="")) returned 1 [0060.989] FindNextFileW (in: hFindFile=0x5107c60, lpFindFileData=0x31e47c | out: lpFindFileData=0x31e47c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb4524ba9, ftCreationTime.dwHighDateTime=0x1cb892b, ftLastAccessTime.dwLowDateTime=0xb4524ba9, ftLastAccessTime.dwHighDateTime=0x1cb892b, ftLastWriteTime.dwLowDateTime=0xb4596fca, ftLastWriteTime.dwHighDateTime=0x1cb892b, nFileSizeHigh=0x0, nFileSizeLow=0x5b6000, dwReserved0=0x0, dwReserved1=0x0, cFileName="System.ServiceModel.dll", cAlternateFileName="")) returned 1 [0060.989] FindNextFileW (in: hFindFile=0x5107c60, lpFindFileData=0x31e47c | out: lpFindFileData=0x31e47c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6f1158c, ftCreationTime.dwHighDateTime=0x1ca041b, ftLastAccessTime.dwLowDateTime=0x6f1158c, ftLastAccessTime.dwHighDateTime=0x1ca041b, ftLastWriteTime.dwLowDateTime=0x7ac6bc9c, ftLastWriteTime.dwHighDateTime=0x1c9ea10, nFileSizeHigh=0x0, nFileSizeLow=0xa8000, dwReserved0=0x0, dwReserved1=0x0, cFileName="System.Speech.dll", cAlternateFileName="")) returned 1 [0060.989] FindNextFileW (in: hFindFile=0x5107c60, lpFindFileData=0x31e47c | out: lpFindFileData=0x31e47c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb44b2788, ftCreationTime.dwHighDateTime=0x1cb892b, ftLastAccessTime.dwLowDateTime=0xb44b2788, ftLastAccessTime.dwHighDateTime=0x1cb892b, ftLastWriteTime.dwLowDateTime=0xb44d88e8, ftLastWriteTime.dwHighDateTime=0x1cb892b, nFileSizeHigh=0x0, nFileSizeLow=0x117000, dwReserved0=0x0, dwReserved1=0x0, cFileName="System.Workflow.Activities.dll", cAlternateFileName="")) returned 1 [0060.989] FindNextFileW (in: hFindFile=0x5107c60, lpFindFileData=0x31e47c | out: lpFindFileData=0x31e47c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb44664c7, ftCreationTime.dwHighDateTime=0x1cb892b, ftLastAccessTime.dwLowDateTime=0xb44664c7, ftLastAccessTime.dwHighDateTime=0x1cb892b, ftLastWriteTime.dwLowDateTime=0xb44b2788, ftLastWriteTime.dwHighDateTime=0x1cb892b, nFileSizeHigh=0x0, nFileSizeLow=0x18e000, dwReserved0=0x0, dwReserved1=0x0, cFileName="System.Workflow.ComponentModel.dll", cAlternateFileName="")) returned 1 [0060.989] FindNextFileW (in: hFindFile=0x5107c60, lpFindFileData=0x31e47c | out: lpFindFileData=0x31e47c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb44d88e8, ftCreationTime.dwHighDateTime=0x1cb892b, ftLastAccessTime.dwLowDateTime=0xb44d88e8, ftLastAccessTime.dwHighDateTime=0x1cb892b, ftLastWriteTime.dwLowDateTime=0xb44d88e8, ftLastWriteTime.dwHighDateTime=0x1cb892b, nFileSizeHigh=0x0, nFileSizeLow=0x84000, dwReserved0=0x0, dwReserved1=0x0, cFileName="System.Workflow.Runtime.dll", cAlternateFileName="")) returned 1 [0060.989] FindNextFileW (in: hFindFile=0x5107c60, lpFindFileData=0x31e47c | out: lpFindFileData=0x31e47c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7231257, ftCreationTime.dwHighDateTime=0x1ca041b, ftLastAccessTime.dwLowDateTime=0x7231257, ftLastAccessTime.dwHighDateTime=0x1ca041b, ftLastWriteTime.dwLowDateTime=0x7ae0ebbc, ftLastWriteTime.dwHighDateTime=0x1c9ea10, nFileSizeHigh=0x0, nFileSizeLow=0x2a000, dwReserved0=0x0, dwReserved1=0x0, cFileName="UIAutomationClient.dll", cAlternateFileName="")) returned 1 [0060.989] FindNextFileW (in: hFindFile=0x5107c60, lpFindFileData=0x31e47c | out: lpFindFileData=0x31e47c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x752adc3, ftCreationTime.dwHighDateTime=0x1ca041b, ftLastAccessTime.dwLowDateTime=0x752adc3, ftLastAccessTime.dwHighDateTime=0x1ca041b, ftLastWriteTime.dwLowDateTime=0x7b23923c, ftLastWriteTime.dwHighDateTime=0x1c9ea10, nFileSizeHigh=0x0, nFileSizeLow=0x5d000, dwReserved0=0x0, dwReserved1=0x0, cFileName="UIAutomationClientsideProviders.dll", cAlternateFileName="")) returned 1 [0060.989] FindNextFileW (in: hFindFile=0x5107c60, lpFindFileData=0x31e47c | out: lpFindFileData=0x31e47c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x778c3b3, ftCreationTime.dwHighDateTime=0x1ca041b, ftLastAccessTime.dwLowDateTime=0x778c3b3, ftLastAccessTime.dwHighDateTime=0x1ca041b, ftLastWriteTime.dwLowDateTime=0x7b532dbc, ftLastWriteTime.dwHighDateTime=0x1c9ea10, nFileSizeHigh=0x0, nFileSizeLow=0xa000, dwReserved0=0x0, dwReserved1=0x0, cFileName="UIAutomationProvider.dll", cAlternateFileName="")) returned 1 [0060.989] FindNextFileW (in: hFindFile=0x5107c60, lpFindFileData=0x31e47c | out: lpFindFileData=0x31e47c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7a39c61, ftCreationTime.dwHighDateTime=0x1ca041b, ftLastAccessTime.dwLowDateTime=0x7a39c61, ftLastAccessTime.dwHighDateTime=0x1ca041b, ftLastWriteTime.dwLowDateTime=0x7b5a51dc, ftLastWriteTime.dwHighDateTime=0x1c9ea10, nFileSizeHigh=0x0, nFileSizeLow=0x18000, dwReserved0=0x0, dwReserved1=0x0, cFileName="UIAutomationTypes.dll", cAlternateFileName="")) returned 1 [0060.989] FindNextFileW (in: hFindFile=0x5107c60, lpFindFileData=0x31e47c | out: lpFindFileData=0x31e47c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xaa262a3d, ftCreationTime.dwHighDateTime=0x1cb892b, ftLastAccessTime.dwLowDateTime=0xaa262a3d, ftLastAccessTime.dwHighDateTime=0x1cb892b, ftLastWriteTime.dwLowDateTime=0xaa49dee1, ftLastWriteTime.dwHighDateTime=0x1cb892b, nFileSizeHigh=0x0, nFileSizeLow=0x132000, dwReserved0=0x0, dwReserved1=0x0, cFileName="WindowsBase.dll", cAlternateFileName="")) returned 1 [0060.989] FindNextFileW (in: hFindFile=0x5107c60, lpFindFileData=0x31e47c | out: lpFindFileData=0x31e47c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x80c58b5, ftCreationTime.dwHighDateTime=0x1ca041b, ftLastAccessTime.dwLowDateTime=0x80c58b5, ftLastAccessTime.dwHighDateTime=0x1ca041b, ftLastWriteTime.dwLowDateTime=0x7b91117c, ftLastWriteTime.dwHighDateTime=0x1c9ea10, nFileSizeHigh=0x0, nFileSizeLow=0x17000, dwReserved0=0x0, dwReserved1=0x0, cFileName="WindowsFormsIntegration.dll", cAlternateFileName="")) returned 1 [0060.989] FindNextFileW (in: hFindFile=0x5107c60, lpFindFileData=0x31e47c | out: lpFindFileData=0x31e47c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x812df993, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x7c36dac1, ftLastAccessTime.dwHighDateTime=0x1ca0444, ftLastWriteTime.dwLowDateTime=0x7c36dac1, ftLastWriteTime.dwHighDateTime=0x1ca0444, nFileSizeHigh=0x0, nFileSizeLow=0xa12, dwReserved0=0x0, dwReserved1=0x0, cFileName="WinFXList.xml", cAlternateFileName="WINFXL~1.XML")) returned 1 [0060.989] FindNextFileW (in: hFindFile=0x5107c60, lpFindFileData=0x31e47c | out: lpFindFileData=0x31e47c*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0060.989] FindClose (in: hFindFile=0x5107c60 | out: hFindFile=0x5107c60) returned 1 [0060.990] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e704) returned 1 [0060.990] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e710) returned 1 [0060.990] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e744) returned 1 [0060.990] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Reference Assemblies\\Microsoft\\Framework\\v3.0", nBufferLength=0x105, lpBuffer=0x31e24c, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Reference Assemblies\\Microsoft\\Framework\\v3.0", lpFilePart=0x0) returned 0x44 [0060.990] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Reference Assemblies\\Microsoft\\Framework\\v3.0\\", nBufferLength=0x105, lpBuffer=0x31e220, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Reference Assemblies\\Microsoft\\Framework\\v3.0\\", lpFilePart=0x0) returned 0x45 [0060.990] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Reference Assemblies\\Microsoft\\Framework\\v3.0\\*", lpFindFileData=0x31e46c | out: lpFindFileData=0x31e46c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x80105472, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x9a8c6329, ftLastAccessTime.dwHighDateTime=0x1cb892c, ftLastWriteTime.dwLowDateTime=0x9a8c6329, ftLastWriteTime.dwHighDateTime=0x1cb892c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5107c60 [0060.991] FindNextFileW (in: hFindFile=0x5107c60, lpFindFileData=0x31e47c | out: lpFindFileData=0x31e47c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x80105472, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x9a8c6329, ftLastAccessTime.dwHighDateTime=0x1cb892c, ftLastWriteTime.dwLowDateTime=0x9a8c6329, ftLastWriteTime.dwHighDateTime=0x1cb892c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0060.991] FindNextFileW (in: hFindFile=0x5107c60, lpFindFileData=0x31e47c | out: lpFindFileData=0x31e47c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xaa5f4b44, ftCreationTime.dwHighDateTime=0x1cb892b, ftLastAccessTime.dwLowDateTime=0xaa5f4b44, ftLastAccessTime.dwHighDateTime=0x1cb892b, ftLastWriteTime.dwLowDateTime=0xaaa915ec, ftLastWriteTime.dwHighDateTime=0x1cb892b, nFileSizeHigh=0x0, nFileSizeLow=0x92000, dwReserved0=0x0, dwReserved1=0x0, cFileName="PresentationBuildTasks.dll", cAlternateFileName="")) returned 1 [0060.991] FindNextFileW (in: hFindFile=0x5107c60, lpFindFileData=0x31e47c | out: lpFindFileData=0x31e47c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xab1db959, ftCreationTime.dwHighDateTime=0x1cb892b, ftLastAccessTime.dwLowDateTime=0xab1db959, ftLastAccessTime.dwHighDateTime=0x1cb892b, ftLastWriteTime.dwLowDateTime=0xab4fb63f, ftLastWriteTime.dwHighDateTime=0x1cb892b, nFileSizeHigh=0x0, nFileSizeLow=0x406000, dwReserved0=0x0, dwReserved1=0x0, cFileName="PresentationCore.dll", cAlternateFileName="")) returned 1 [0060.991] FindNextFileW (in: hFindFile=0x5107c60, lpFindFileData=0x31e47c | out: lpFindFileData=0x31e47c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4de43cb, ftCreationTime.dwHighDateTime=0x1ca041b, ftLastAccessTime.dwLowDateTime=0x4de43cb, ftLastAccessTime.dwHighDateTime=0x1ca041b, ftLastWriteTime.dwLowDateTime=0x79b03bbc, ftLastWriteTime.dwHighDateTime=0x1c9ea10, nFileSizeHigh=0x0, nFileSizeLow=0x30000, dwReserved0=0x0, dwReserved1=0x0, cFileName="PresentationFramework.Aero.dll", cAlternateFileName="")) returned 1 [0060.991] FindNextFileW (in: hFindFile=0x5107c60, lpFindFileData=0x31e47c | out: lpFindFileData=0x31e47c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4ff96fd, ftCreationTime.dwHighDateTime=0x1ca041b, ftLastAccessTime.dwLowDateTime=0x4ff96fd, ftLastAccessTime.dwHighDateTime=0x1ca041b, ftLastWriteTime.dwLowDateTime=0x79e95cbc, ftLastWriteTime.dwHighDateTime=0x1c9ea10, nFileSizeHigh=0x0, nFileSizeLow=0x22000, dwReserved0=0x0, dwReserved1=0x0, cFileName="PresentationFramework.Classic.dll", cAlternateFileName="")) returned 1 [0060.991] FindNextFileW (in: hFindFile=0x5107c60, lpFindFileData=0x31e47c | out: lpFindFileData=0x31e47c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xaaa915ec, ftCreationTime.dwHighDateTime=0x1cb892b, ftLastAccessTime.dwLowDateTime=0xaaa915ec, ftLastAccessTime.dwHighDateTime=0x1cb892b, ftLastWriteTime.dwLowDateTime=0xab0aae57, ftLastWriteTime.dwHighDateTime=0x1cb892b, nFileSizeHigh=0x0, nFileSizeLow=0x509000, dwReserved0=0x0, dwReserved1=0x0, cFileName="PresentationFramework.dll", cAlternateFileName="")) returned 1 [0060.991] FindNextFileW (in: hFindFile=0x5107c60, lpFindFileData=0x31e47c | out: lpFindFileData=0x31e47c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa9dec0f5, ftCreationTime.dwHighDateTime=0x1cb892b, ftLastAccessTime.dwLowDateTime=0xa9dec0f5, ftLastAccessTime.dwHighDateTime=0x1cb892b, ftLastWriteTime.dwLowDateTime=0xaa0e5c7a, ftLastWriteTime.dwHighDateTime=0x1cb892b, nFileSizeHigh=0x0, nFileSizeLow=0x61000, dwReserved0=0x0, dwReserved1=0x0, cFileName="PresentationFramework.Luna.dll", cAlternateFileName="")) returned 1 [0060.991] FindNextFileW (in: hFindFile=0x5107c60, lpFindFileData=0x31e47c | out: lpFindFileData=0x31e47c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x653fb0e, ftCreationTime.dwHighDateTime=0x1ca041b, ftLastAccessTime.dwLowDateTime=0x653fb0e, ftLastAccessTime.dwHighDateTime=0x1ca041b, ftLastWriteTime.dwLowDateTime=0x7a4fb7dc, ftLastWriteTime.dwHighDateTime=0x1c9ea10, nFileSizeHigh=0x0, nFileSizeLow=0x28000, dwReserved0=0x0, dwReserved1=0x0, cFileName="PresentationFramework.Royale.dll", cAlternateFileName="")) returned 1 [0060.991] FindNextFileW (in: hFindFile=0x5107c60, lpFindFileData=0x31e47c | out: lpFindFileData=0x31e47c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xaa10bdda, ftCreationTime.dwHighDateTime=0x1cb892b, ftLastAccessTime.dwLowDateTime=0xaa10bdda, ftLastAccessTime.dwHighDateTime=0x1cb892b, ftLastWriteTime.dwLowDateTime=0xaa262a3d, ftLastWriteTime.dwHighDateTime=0x1cb892b, nFileSizeHigh=0x0, nFileSizeLow=0x82000, dwReserved0=0x0, dwReserved1=0x0, cFileName="ReachFramework.dll", cAlternateFileName="")) returned 1 [0060.991] FindNextFileW (in: hFindFile=0x5107c60, lpFindFileData=0x31e47c | out: lpFindFileData=0x31e47c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x80105472, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x812df993, ftLastAccessTime.dwHighDateTime=0x1ca0444, ftLastWriteTime.dwLowDateTime=0x812df993, ftLastWriteTime.dwHighDateTime=0x1ca0444, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="RedistList", cAlternateFileName="REDIST~1")) returned 1 [0060.991] FindNextFileW (in: hFindFile=0x5107c60, lpFindFileData=0x31e47c | out: lpFindFileData=0x31e47c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x80105472, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x812df993, ftLastAccessTime.dwHighDateTime=0x1ca0444, ftLastWriteTime.dwLowDateTime=0x812df993, ftLastWriteTime.dwHighDateTime=0x1ca0444, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="SubsetList", cAlternateFileName="SUBSET~1")) returned 1 [0060.991] FindNextFileW (in: hFindFile=0x5107c60, lpFindFileData=0x31e47c | out: lpFindFileData=0x31e47c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb46093ea, ftCreationTime.dwHighDateTime=0x1cb892b, ftLastAccessTime.dwLowDateTime=0xb46093ea, ftLastAccessTime.dwHighDateTime=0x1cb892b, ftLastWriteTime.dwLowDateTime=0xb46093ea, ftLastWriteTime.dwHighDateTime=0x1cb892b, nFileSizeHigh=0x0, nFileSizeLow=0x6c000, dwReserved0=0x0, dwReserved1=0x0, cFileName="System.IdentityModel.dll", cAlternateFileName="")) returned 1 [0060.991] FindNextFileW (in: hFindFile=0x5107c60, lpFindFileData=0x31e47c | out: lpFindFileData=0x31e47c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb46093ea, ftCreationTime.dwHighDateTime=0x1cb892b, ftLastAccessTime.dwLowDateTime=0xb46093ea, ftLastAccessTime.dwHighDateTime=0x1cb892b, ftLastWriteTime.dwLowDateTime=0xb46093ea, ftLastWriteTime.dwHighDateTime=0x1cb892b, nFileSizeHigh=0x0, nFileSizeLow=0x1f000, dwReserved0=0x0, dwReserved1=0x0, cFileName="System.IdentityModel.Selectors.dll", cAlternateFileName="")) returned 1 [0060.991] FindNextFileW (in: hFindFile=0x5107c60, lpFindFileData=0x31e47c | out: lpFindFileData=0x31e47c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1a94654c, ftCreationTime.dwHighDateTime=0x1ca041b, ftLastAccessTime.dwLowDateTime=0x1a94654c, ftLastAccessTime.dwHighDateTime=0x1ca041b, ftLastWriteTime.dwLowDateTime=0x5c12c05c, ftLastWriteTime.dwHighDateTime=0x1c9ea10, nFileSizeHigh=0x0, nFileSizeLow=0x20000, dwReserved0=0x0, dwReserved1=0x0, cFileName="System.IO.Log.dll", cAlternateFileName="")) returned 1 [0060.991] FindNextFileW (in: hFindFile=0x5107c60, lpFindFileData=0x31e47c | out: lpFindFileData=0x31e47c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xab0aae57, ftCreationTime.dwHighDateTime=0x1cb892b, ftLastAccessTime.dwLowDateTime=0xab0aae57, ftLastAccessTime.dwHighDateTime=0x1cb892b, ftLastWriteTime.dwLowDateTime=0xab1db959, ftLastWriteTime.dwHighDateTime=0x1cb892b, nFileSizeHigh=0x0, nFileSizeLow=0x5b000, dwReserved0=0x0, dwReserved1=0x0, cFileName="System.Printing.dll", cAlternateFileName="")) returned 1 [0060.991] FindNextFileW (in: hFindFile=0x5107c60, lpFindFileData=0x31e47c | out: lpFindFileData=0x31e47c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb45bd12a, ftCreationTime.dwHighDateTime=0x1cb892b, ftLastAccessTime.dwLowDateTime=0xb45bd12a, ftLastAccessTime.dwHighDateTime=0x1cb892b, ftLastWriteTime.dwLowDateTime=0xb45e328a, ftLastWriteTime.dwHighDateTime=0x1cb892b, nFileSizeHigh=0x0, nFileSizeLow=0xed000, dwReserved0=0x0, dwReserved1=0x0, cFileName="System.Runtime.Serialization.dll", cAlternateFileName="")) returned 1 [0060.992] FindNextFileW (in: hFindFile=0x5107c60, lpFindFileData=0x31e47c | out: lpFindFileData=0x31e47c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb4524ba9, ftCreationTime.dwHighDateTime=0x1cb892b, ftLastAccessTime.dwLowDateTime=0xb4524ba9, ftLastAccessTime.dwHighDateTime=0x1cb892b, ftLastWriteTime.dwLowDateTime=0xb4596fca, ftLastWriteTime.dwHighDateTime=0x1cb892b, nFileSizeHigh=0x0, nFileSizeLow=0x5b6000, dwReserved0=0x0, dwReserved1=0x0, cFileName="System.ServiceModel.dll", cAlternateFileName="")) returned 1 [0060.992] FindNextFileW (in: hFindFile=0x5107c60, lpFindFileData=0x31e47c | out: lpFindFileData=0x31e47c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6f1158c, ftCreationTime.dwHighDateTime=0x1ca041b, ftLastAccessTime.dwLowDateTime=0x6f1158c, ftLastAccessTime.dwHighDateTime=0x1ca041b, ftLastWriteTime.dwLowDateTime=0x7ac6bc9c, ftLastWriteTime.dwHighDateTime=0x1c9ea10, nFileSizeHigh=0x0, nFileSizeLow=0xa8000, dwReserved0=0x0, dwReserved1=0x0, cFileName="System.Speech.dll", cAlternateFileName="")) returned 1 [0060.992] FindNextFileW (in: hFindFile=0x5107c60, lpFindFileData=0x31e47c | out: lpFindFileData=0x31e47c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb44b2788, ftCreationTime.dwHighDateTime=0x1cb892b, ftLastAccessTime.dwLowDateTime=0xb44b2788, ftLastAccessTime.dwHighDateTime=0x1cb892b, ftLastWriteTime.dwLowDateTime=0xb44d88e8, ftLastWriteTime.dwHighDateTime=0x1cb892b, nFileSizeHigh=0x0, nFileSizeLow=0x117000, dwReserved0=0x0, dwReserved1=0x0, cFileName="System.Workflow.Activities.dll", cAlternateFileName="")) returned 1 [0060.992] FindNextFileW (in: hFindFile=0x5107c60, lpFindFileData=0x31e47c | out: lpFindFileData=0x31e47c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb44664c7, ftCreationTime.dwHighDateTime=0x1cb892b, ftLastAccessTime.dwLowDateTime=0xb44664c7, ftLastAccessTime.dwHighDateTime=0x1cb892b, ftLastWriteTime.dwLowDateTime=0xb44b2788, ftLastWriteTime.dwHighDateTime=0x1cb892b, nFileSizeHigh=0x0, nFileSizeLow=0x18e000, dwReserved0=0x0, dwReserved1=0x0, cFileName="System.Workflow.ComponentModel.dll", cAlternateFileName="")) returned 1 [0060.992] FindNextFileW (in: hFindFile=0x5107c60, lpFindFileData=0x31e47c | out: lpFindFileData=0x31e47c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb44d88e8, ftCreationTime.dwHighDateTime=0x1cb892b, ftLastAccessTime.dwLowDateTime=0xb44d88e8, ftLastAccessTime.dwHighDateTime=0x1cb892b, ftLastWriteTime.dwLowDateTime=0xb44d88e8, ftLastWriteTime.dwHighDateTime=0x1cb892b, nFileSizeHigh=0x0, nFileSizeLow=0x84000, dwReserved0=0x0, dwReserved1=0x0, cFileName="System.Workflow.Runtime.dll", cAlternateFileName="")) returned 1 [0060.992] FindNextFileW (in: hFindFile=0x5107c60, lpFindFileData=0x31e47c | out: lpFindFileData=0x31e47c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7231257, ftCreationTime.dwHighDateTime=0x1ca041b, ftLastAccessTime.dwLowDateTime=0x7231257, ftLastAccessTime.dwHighDateTime=0x1ca041b, ftLastWriteTime.dwLowDateTime=0x7ae0ebbc, ftLastWriteTime.dwHighDateTime=0x1c9ea10, nFileSizeHigh=0x0, nFileSizeLow=0x2a000, dwReserved0=0x0, dwReserved1=0x0, cFileName="UIAutomationClient.dll", cAlternateFileName="")) returned 1 [0060.992] FindNextFileW (in: hFindFile=0x5107c60, lpFindFileData=0x31e47c | out: lpFindFileData=0x31e47c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x752adc3, ftCreationTime.dwHighDateTime=0x1ca041b, ftLastAccessTime.dwLowDateTime=0x752adc3, ftLastAccessTime.dwHighDateTime=0x1ca041b, ftLastWriteTime.dwLowDateTime=0x7b23923c, ftLastWriteTime.dwHighDateTime=0x1c9ea10, nFileSizeHigh=0x0, nFileSizeLow=0x5d000, dwReserved0=0x0, dwReserved1=0x0, cFileName="UIAutomationClientsideProviders.dll", cAlternateFileName="")) returned 1 [0060.992] FindNextFileW (in: hFindFile=0x5107c60, lpFindFileData=0x31e47c | out: lpFindFileData=0x31e47c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x778c3b3, ftCreationTime.dwHighDateTime=0x1ca041b, ftLastAccessTime.dwLowDateTime=0x778c3b3, ftLastAccessTime.dwHighDateTime=0x1ca041b, ftLastWriteTime.dwLowDateTime=0x7b532dbc, ftLastWriteTime.dwHighDateTime=0x1c9ea10, nFileSizeHigh=0x0, nFileSizeLow=0xa000, dwReserved0=0x0, dwReserved1=0x0, cFileName="UIAutomationProvider.dll", cAlternateFileName="")) returned 1 [0060.992] FindNextFileW (in: hFindFile=0x5107c60, lpFindFileData=0x31e47c | out: lpFindFileData=0x31e47c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7a39c61, ftCreationTime.dwHighDateTime=0x1ca041b, ftLastAccessTime.dwLowDateTime=0x7a39c61, ftLastAccessTime.dwHighDateTime=0x1ca041b, ftLastWriteTime.dwLowDateTime=0x7b5a51dc, ftLastWriteTime.dwHighDateTime=0x1c9ea10, nFileSizeHigh=0x0, nFileSizeLow=0x18000, dwReserved0=0x0, dwReserved1=0x0, cFileName="UIAutomationTypes.dll", cAlternateFileName="")) returned 1 [0060.992] FindNextFileW (in: hFindFile=0x5107c60, lpFindFileData=0x31e47c | out: lpFindFileData=0x31e47c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xaa262a3d, ftCreationTime.dwHighDateTime=0x1cb892b, ftLastAccessTime.dwLowDateTime=0xaa262a3d, ftLastAccessTime.dwHighDateTime=0x1cb892b, ftLastWriteTime.dwLowDateTime=0xaa49dee1, ftLastWriteTime.dwHighDateTime=0x1cb892b, nFileSizeHigh=0x0, nFileSizeLow=0x132000, dwReserved0=0x0, dwReserved1=0x0, cFileName="WindowsBase.dll", cAlternateFileName="")) returned 1 [0060.992] FindNextFileW (in: hFindFile=0x5107c60, lpFindFileData=0x31e47c | out: lpFindFileData=0x31e47c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x80c58b5, ftCreationTime.dwHighDateTime=0x1ca041b, ftLastAccessTime.dwLowDateTime=0x80c58b5, ftLastAccessTime.dwHighDateTime=0x1ca041b, ftLastWriteTime.dwLowDateTime=0x7b91117c, ftLastWriteTime.dwHighDateTime=0x1c9ea10, nFileSizeHigh=0x0, nFileSizeLow=0x17000, dwReserved0=0x0, dwReserved1=0x0, cFileName="WindowsFormsIntegration.dll", cAlternateFileName="")) returned 1 [0060.992] FindNextFileW (in: hFindFile=0x5107c60, lpFindFileData=0x31e47c | out: lpFindFileData=0x31e47c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x812df993, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x7c36dac1, ftLastAccessTime.dwHighDateTime=0x1ca0444, ftLastWriteTime.dwLowDateTime=0x7c36dac1, ftLastWriteTime.dwHighDateTime=0x1ca0444, nFileSizeHigh=0x0, nFileSizeLow=0xa12, dwReserved0=0x0, dwReserved1=0x0, cFileName="WinFXList.xml", cAlternateFileName="WINFXL~1.XML")) returned 1 [0060.992] FindNextFileW (in: hFindFile=0x5107c60, lpFindFileData=0x31e47c | out: lpFindFileData=0x31e47c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x812df993, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x7c36dac1, ftLastAccessTime.dwHighDateTime=0x1ca0444, ftLastWriteTime.dwLowDateTime=0x7c36dac1, ftLastWriteTime.dwHighDateTime=0x1ca0444, nFileSizeHigh=0x0, nFileSizeLow=0xa12, dwReserved0=0x0, dwReserved1=0x0, cFileName="WinFXList.xml", cAlternateFileName="WINFXL~1.XML")) returned 0 [0060.992] FindClose (in: hFindFile=0x5107c60 | out: hFindFile=0x5107c60) returned 1 [0060.993] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e704) returned 1 [0060.993] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e710) returned 1 [0060.993] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Reference Assemblies\\Microsoft\\Framework\\v3.0\\WinFXList.xml", nBufferLength=0x105, lpBuffer=0x31e11c, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Reference Assemblies\\Microsoft\\Framework\\v3.0\\WinFXList.xml", lpFilePart=0x0) returned 0x52 [0060.993] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e610) returned 1 [0060.993] CreateFileW (lpFileName="C:\\Program Files (x86)\\Reference Assemblies\\Microsoft\\Framework\\v3.0\\WinFXList.xml" (normalized: "c:\\program files (x86)\\reference assemblies\\microsoft\\framework\\v3.0\\winfxlist.xml"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x178 [0060.994] GetFileType (hFile=0x178) returned 0x1 [0060.994] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e60c) returned 1 [0060.994] GetFileType (hFile=0x178) returned 0x1 [0060.995] GetFileSize (in: hFile=0x178, lpFileSizeHigh=0x31e718 | out: lpFileSizeHigh=0x31e718*=0x0) returned 0xa12 [0060.995] ReadFile (in: hFile=0x178, lpBuffer=0x26cbcb4, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x31e6c4, lpOverlapped=0x0 | out: lpBuffer=0x26cbcb4*, lpNumberOfBytesRead=0x31e6c4*=0xa12, lpOverlapped=0x0) returned 1 [0061.010] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Reference Assemblies\\Microsoft\\Framework\\v3.0\\WinFXList.xml", nBufferLength=0x105, lpBuffer=0x31e108, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Reference Assemblies\\Microsoft\\Framework\\v3.0\\WinFXList.xml", lpFilePart=0x0) returned 0x52 [0061.010] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e5fc) returned 1 [0061.010] CreateFileW (lpFileName="C:\\Program Files (x86)\\Reference Assemblies\\Microsoft\\Framework\\v3.0\\WinFXList.xml" (normalized: "c:\\program files (x86)\\reference assemblies\\microsoft\\framework\\v3.0\\winfxlist.xml"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x178 [0061.011] GetFileType (hFile=0x178) returned 0x1 [0061.011] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e5f8) returned 1 [0061.011] GetFileType (hFile=0x178) returned 0x1 [0061.011] WriteFile (in: hFile=0x178, lpBuffer=0x271ce8c*, nNumberOfBytesToWrite=0xa20, lpNumberOfBytesWritten=0x31e68c, lpOverlapped=0x0 | out: lpBuffer=0x271ce8c*, lpNumberOfBytesWritten=0x31e68c*=0xa20, lpOverlapped=0x0) returned 1 [0061.012] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Reference Assemblies\\Microsoft\\Framework\\v3.0\\WinFXList.xml", nBufferLength=0x105, lpBuffer=0x31e23c, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Reference Assemblies\\Microsoft\\Framework\\v3.0\\WinFXList.xml", lpFilePart=0x0) returned 0x52 [0061.012] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Reference Assemblies\\Microsoft\\Framework\\v3.0\\WinFXList.xml", nBufferLength=0x105, lpBuffer=0x31e23c, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Reference Assemblies\\Microsoft\\Framework\\v3.0\\WinFXList.xml", lpFilePart=0x0) returned 0x52 [0061.012] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e69c) returned 1 [0061.012] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Reference Assemblies\\Microsoft\\Framework\\v3.0\\WinFXList.xml" (normalized: "c:\\program files (x86)\\reference assemblies\\microsoft\\framework\\v3.0\\winfxlist.xml"), fInfoLevelId=0x0, lpFileInformation=0x31e718 | out: lpFileInformation=0x31e718*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x812df993, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x7c36dac1, ftLastAccessTime.dwHighDateTime=0x1ca0444, ftLastWriteTime.dwLowDateTime=0x7d04540, ftLastWriteTime.dwHighDateTime=0x1d6eb7f, nFileSizeHigh=0x0, nFileSizeLow=0xa20)) returned 1 [0061.012] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e698) returned 1 [0061.012] MoveFileW (lpExistingFileName="C:\\Program Files (x86)\\Reference Assemblies\\Microsoft\\Framework\\v3.0\\WinFXList.xml" (normalized: "c:\\program files (x86)\\reference assemblies\\microsoft\\framework\\v3.0\\winfxlist.xml"), lpNewFileName="C:\\Program Files (x86)\\Reference Assemblies\\Microsoft\\Framework\\v3.0\\WinFXList.xml" (normalized: "c:\\program files (x86)\\reference assemblies\\microsoft\\framework\\v3.0\\winfxlist.xml")) returned 1 [0061.013] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e6cc) returned 1 [0061.013] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Reference Assemblies\\Microsoft\\Framework\\v3.0\\RedistList", nBufferLength=0x105, lpBuffer=0x31e1d4, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Reference Assemblies\\Microsoft\\Framework\\v3.0\\RedistList", lpFilePart=0x0) returned 0x4f [0061.013] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Reference Assemblies\\Microsoft\\Framework\\v3.0\\RedistList\\", nBufferLength=0x105, lpBuffer=0x31e1a8, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Reference Assemblies\\Microsoft\\Framework\\v3.0\\RedistList\\", lpFilePart=0x0) returned 0x50 [0061.013] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Reference Assemblies\\Microsoft\\Framework\\v3.0\\RedistList\\*", lpFindFileData=0x31e3f4 | out: lpFindFileData=0x31e3f4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x80105472, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x812df993, ftLastAccessTime.dwHighDateTime=0x1ca0444, ftLastWriteTime.dwLowDateTime=0x812df993, ftLastWriteTime.dwHighDateTime=0x1ca0444, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5107b20 [0061.013] FindNextFileW (in: hFindFile=0x5107b20, lpFindFileData=0x31e404 | out: lpFindFileData=0x31e404*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x80105472, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x812df993, ftLastAccessTime.dwHighDateTime=0x1ca0444, ftLastWriteTime.dwLowDateTime=0x812df993, ftLastWriteTime.dwHighDateTime=0x1ca0444, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0061.013] FindNextFileW (in: hFindFile=0x5107b20, lpFindFileData=0x31e404 | out: lpFindFileData=0x31e404*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x812df993, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x7c36dac1, ftLastAccessTime.dwHighDateTime=0x1ca0444, ftLastWriteTime.dwLowDateTime=0x7c36dac1, ftLastWriteTime.dwHighDateTime=0x1ca0444, nFileSizeHigh=0x0, nFileSizeLow=0x1632, dwReserved0=0x0, dwReserved1=0x0, cFileName="FrameworkList.xml", cAlternateFileName="FRAMEW~1.XML")) returned 1 [0061.013] FindNextFileW (in: hFindFile=0x5107b20, lpFindFileData=0x31e404 | out: lpFindFileData=0x31e404*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0061.013] FindClose (in: hFindFile=0x5107b20 | out: hFindFile=0x5107b20) returned 1 [0061.013] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e68c) returned 1 [0061.013] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e698) returned 1 [0061.013] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e6cc) returned 1 [0061.013] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Reference Assemblies\\Microsoft\\Framework\\v3.0\\RedistList", nBufferLength=0x105, lpBuffer=0x31e1d4, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Reference Assemblies\\Microsoft\\Framework\\v3.0\\RedistList", lpFilePart=0x0) returned 0x4f [0061.013] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Reference Assemblies\\Microsoft\\Framework\\v3.0\\RedistList\\", nBufferLength=0x105, lpBuffer=0x31e1a8, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Reference Assemblies\\Microsoft\\Framework\\v3.0\\RedistList\\", lpFilePart=0x0) returned 0x50 [0061.014] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Reference Assemblies\\Microsoft\\Framework\\v3.0\\RedistList\\*", lpFindFileData=0x31e3f4 | out: lpFindFileData=0x31e3f4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x80105472, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x812df993, ftLastAccessTime.dwHighDateTime=0x1ca0444, ftLastWriteTime.dwLowDateTime=0x812df993, ftLastWriteTime.dwHighDateTime=0x1ca0444, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5107b20 [0061.014] FindNextFileW (in: hFindFile=0x5107b20, lpFindFileData=0x31e404 | out: lpFindFileData=0x31e404*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x80105472, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x812df993, ftLastAccessTime.dwHighDateTime=0x1ca0444, ftLastWriteTime.dwLowDateTime=0x812df993, ftLastWriteTime.dwHighDateTime=0x1ca0444, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0061.014] FindNextFileW (in: hFindFile=0x5107b20, lpFindFileData=0x31e404 | out: lpFindFileData=0x31e404*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x812df993, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x7c36dac1, ftLastAccessTime.dwHighDateTime=0x1ca0444, ftLastWriteTime.dwLowDateTime=0x7c36dac1, ftLastWriteTime.dwHighDateTime=0x1ca0444, nFileSizeHigh=0x0, nFileSizeLow=0x1632, dwReserved0=0x0, dwReserved1=0x0, cFileName="FrameworkList.xml", cAlternateFileName="FRAMEW~1.XML")) returned 1 [0061.014] FindNextFileW (in: hFindFile=0x5107b20, lpFindFileData=0x31e404 | out: lpFindFileData=0x31e404*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x812df993, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x7c36dac1, ftLastAccessTime.dwHighDateTime=0x1ca0444, ftLastWriteTime.dwLowDateTime=0x7c36dac1, ftLastWriteTime.dwHighDateTime=0x1ca0444, nFileSizeHigh=0x0, nFileSizeLow=0x1632, dwReserved0=0x0, dwReserved1=0x0, cFileName="FrameworkList.xml", cAlternateFileName="FRAMEW~1.XML")) returned 0 [0061.014] FindClose (in: hFindFile=0x5107b20 | out: hFindFile=0x5107b20) returned 1 [0061.014] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e68c) returned 1 [0061.014] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e698) returned 1 [0061.014] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Reference Assemblies\\Microsoft\\Framework\\v3.0\\RedistList\\FrameworkList.xml", nBufferLength=0x105, lpBuffer=0x31e0a4, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Reference Assemblies\\Microsoft\\Framework\\v3.0\\RedistList\\FrameworkList.xml", lpFilePart=0x0) returned 0x61 [0061.014] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e598) returned 1 [0061.014] CreateFileW (lpFileName="C:\\Program Files (x86)\\Reference Assemblies\\Microsoft\\Framework\\v3.0\\RedistList\\FrameworkList.xml" (normalized: "c:\\program files (x86)\\reference assemblies\\microsoft\\framework\\v3.0\\redistlist\\frameworklist.xml"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x178 [0061.014] GetFileType (hFile=0x178) returned 0x1 [0061.014] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e594) returned 1 [0061.014] GetFileType (hFile=0x178) returned 0x1 [0061.014] GetFileSize (in: hFile=0x178, lpFileSizeHigh=0x31e6a0 | out: lpFileSizeHigh=0x31e6a0*=0x0) returned 0x1632 [0061.014] ReadFile (in: hFile=0x178, lpBuffer=0x271fdc8, nNumberOfBytesToRead=0x1632, lpNumberOfBytesRead=0x31e64c, lpOverlapped=0x0 | out: lpBuffer=0x271fdc8*, lpNumberOfBytesRead=0x31e64c*=0x1632, lpOverlapped=0x0) returned 1 [0061.030] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Reference Assemblies\\Microsoft\\Framework\\v3.0\\RedistList\\FrameworkList.xml", nBufferLength=0x105, lpBuffer=0x31e090, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Reference Assemblies\\Microsoft\\Framework\\v3.0\\RedistList\\FrameworkList.xml", lpFilePart=0x0) returned 0x61 [0061.030] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e584) returned 1 [0061.030] CreateFileW (lpFileName="C:\\Program Files (x86)\\Reference Assemblies\\Microsoft\\Framework\\v3.0\\RedistList\\FrameworkList.xml" (normalized: "c:\\program files (x86)\\reference assemblies\\microsoft\\framework\\v3.0\\redistlist\\frameworklist.xml"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x178 [0061.031] GetFileType (hFile=0x178) returned 0x1 [0061.031] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e580) returned 1 [0061.031] GetFileType (hFile=0x178) returned 0x1 [0061.031] WriteFile (in: hFile=0x178, lpBuffer=0x2773af0*, nNumberOfBytesToWrite=0x1640, lpNumberOfBytesWritten=0x31e640, lpOverlapped=0x0 | out: lpBuffer=0x2773af0*, lpNumberOfBytesWritten=0x31e640*=0x1640, lpOverlapped=0x0) returned 1 [0061.032] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Reference Assemblies\\Microsoft\\Framework\\v3.0\\RedistList\\FrameworkList.xml", nBufferLength=0x105, lpBuffer=0x31e1c4, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Reference Assemblies\\Microsoft\\Framework\\v3.0\\RedistList\\FrameworkList.xml", lpFilePart=0x0) returned 0x61 [0061.032] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Reference Assemblies\\Microsoft\\Framework\\v3.0\\RedistList\\FrameworkList.xml", nBufferLength=0x105, lpBuffer=0x31e1c4, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Reference Assemblies\\Microsoft\\Framework\\v3.0\\RedistList\\FrameworkList.xml", lpFilePart=0x0) returned 0x61 [0061.032] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e624) returned 1 [0061.032] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Reference Assemblies\\Microsoft\\Framework\\v3.0\\RedistList\\FrameworkList.xml" (normalized: "c:\\program files (x86)\\reference assemblies\\microsoft\\framework\\v3.0\\redistlist\\frameworklist.xml"), fInfoLevelId=0x0, lpFileInformation=0x31e6a0 | out: lpFileInformation=0x31e6a0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x812df993, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x7c36dac1, ftLastAccessTime.dwHighDateTime=0x1ca0444, ftLastWriteTime.dwLowDateTime=0x7d2a6a0, ftLastWriteTime.dwHighDateTime=0x1d6eb7f, nFileSizeHigh=0x0, nFileSizeLow=0x1640)) returned 1 [0061.032] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e620) returned 1 [0061.032] MoveFileW (lpExistingFileName="C:\\Program Files (x86)\\Reference Assemblies\\Microsoft\\Framework\\v3.0\\RedistList\\FrameworkList.xml" (normalized: "c:\\program files (x86)\\reference assemblies\\microsoft\\framework\\v3.0\\redistlist\\frameworklist.xml"), lpNewFileName="C:\\Program Files (x86)\\Reference Assemblies\\Microsoft\\Framework\\v3.0\\RedistList\\FrameworkList.xml" (normalized: "c:\\program files (x86)\\reference assemblies\\microsoft\\framework\\v3.0\\redistlist\\frameworklist.xml")) returned 1 [0061.032] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e6cc) returned 1 [0061.032] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Reference Assemblies\\Microsoft\\Framework\\v3.0\\SubsetList", nBufferLength=0x105, lpBuffer=0x31e1d4, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Reference Assemblies\\Microsoft\\Framework\\v3.0\\SubsetList", lpFilePart=0x0) returned 0x4f [0061.032] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Reference Assemblies\\Microsoft\\Framework\\v3.0\\SubsetList\\", nBufferLength=0x105, lpBuffer=0x31e1a8, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Reference Assemblies\\Microsoft\\Framework\\v3.0\\SubsetList\\", lpFilePart=0x0) returned 0x50 [0061.032] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Reference Assemblies\\Microsoft\\Framework\\v3.0\\SubsetList\\*", lpFindFileData=0x31e3f4 | out: lpFindFileData=0x31e3f4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x80105472, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x812df993, ftLastAccessTime.dwHighDateTime=0x1ca0444, ftLastWriteTime.dwLowDateTime=0x812df993, ftLastWriteTime.dwHighDateTime=0x1ca0444, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5107a20 [0061.032] FindNextFileW (in: hFindFile=0x5107a20, lpFindFileData=0x31e404 | out: lpFindFileData=0x31e404*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x80105472, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x812df993, ftLastAccessTime.dwHighDateTime=0x1ca0444, ftLastWriteTime.dwLowDateTime=0x812df993, ftLastWriteTime.dwHighDateTime=0x1ca0444, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0061.033] FindNextFileW (in: hFindFile=0x5107a20, lpFindFileData=0x31e404 | out: lpFindFileData=0x31e404*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5647fd36, ftCreationTime.dwHighDateTime=0x1ca03fe, ftLastAccessTime.dwLowDateTime=0x5647fd36, ftLastAccessTime.dwHighDateTime=0x1ca03fe, ftLastWriteTime.dwLowDateTime=0x754cb2bc, ftLastWriteTime.dwHighDateTime=0x1c9ea10, nFileSizeHigh=0x0, nFileSizeLow=0xda7, dwReserved0=0x0, dwReserved1=0x0, cFileName="Client.xml", cAlternateFileName="")) returned 1 [0061.033] FindNextFileW (in: hFindFile=0x5107a20, lpFindFileData=0x31e404 | out: lpFindFileData=0x31e404*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0061.033] FindClose (in: hFindFile=0x5107a20 | out: hFindFile=0x5107a20) returned 1 [0061.033] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e68c) returned 1 [0061.033] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e698) returned 1 [0061.033] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e6cc) returned 1 [0061.033] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Reference Assemblies\\Microsoft\\Framework\\v3.0\\SubsetList", nBufferLength=0x105, lpBuffer=0x31e1d4, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Reference Assemblies\\Microsoft\\Framework\\v3.0\\SubsetList", lpFilePart=0x0) returned 0x4f [0061.033] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Reference Assemblies\\Microsoft\\Framework\\v3.0\\SubsetList\\", nBufferLength=0x105, lpBuffer=0x31e1a8, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Reference Assemblies\\Microsoft\\Framework\\v3.0\\SubsetList\\", lpFilePart=0x0) returned 0x50 [0061.033] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Reference Assemblies\\Microsoft\\Framework\\v3.0\\SubsetList\\*", lpFindFileData=0x31e3f4 | out: lpFindFileData=0x31e3f4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x80105472, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x812df993, ftLastAccessTime.dwHighDateTime=0x1ca0444, ftLastWriteTime.dwLowDateTime=0x812df993, ftLastWriteTime.dwHighDateTime=0x1ca0444, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5107a20 [0061.033] FindNextFileW (in: hFindFile=0x5107a20, lpFindFileData=0x31e404 | out: lpFindFileData=0x31e404*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x80105472, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x812df993, ftLastAccessTime.dwHighDateTime=0x1ca0444, ftLastWriteTime.dwLowDateTime=0x812df993, ftLastWriteTime.dwHighDateTime=0x1ca0444, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0061.033] FindNextFileW (in: hFindFile=0x5107a20, lpFindFileData=0x31e404 | out: lpFindFileData=0x31e404*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5647fd36, ftCreationTime.dwHighDateTime=0x1ca03fe, ftLastAccessTime.dwLowDateTime=0x5647fd36, ftLastAccessTime.dwHighDateTime=0x1ca03fe, ftLastWriteTime.dwLowDateTime=0x754cb2bc, ftLastWriteTime.dwHighDateTime=0x1c9ea10, nFileSizeHigh=0x0, nFileSizeLow=0xda7, dwReserved0=0x0, dwReserved1=0x0, cFileName="Client.xml", cAlternateFileName="")) returned 1 [0061.033] FindNextFileW (in: hFindFile=0x5107a20, lpFindFileData=0x31e404 | out: lpFindFileData=0x31e404*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5647fd36, ftCreationTime.dwHighDateTime=0x1ca03fe, ftLastAccessTime.dwLowDateTime=0x5647fd36, ftLastAccessTime.dwHighDateTime=0x1ca03fe, ftLastWriteTime.dwLowDateTime=0x754cb2bc, ftLastWriteTime.dwHighDateTime=0x1c9ea10, nFileSizeHigh=0x0, nFileSizeLow=0xda7, dwReserved0=0x0, dwReserved1=0x0, cFileName="Client.xml", cAlternateFileName="")) returned 0 [0061.033] FindClose (in: hFindFile=0x5107a20 | out: hFindFile=0x5107a20) returned 1 [0061.033] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e68c) returned 1 [0061.033] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e698) returned 1 [0061.033] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Reference Assemblies\\Microsoft\\Framework\\v3.0\\SubsetList\\Client.xml", nBufferLength=0x105, lpBuffer=0x31e0a4, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Reference Assemblies\\Microsoft\\Framework\\v3.0\\SubsetList\\Client.xml", lpFilePart=0x0) returned 0x5a [0061.033] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e598) returned 1 [0061.033] CreateFileW (lpFileName="C:\\Program Files (x86)\\Reference Assemblies\\Microsoft\\Framework\\v3.0\\SubsetList\\Client.xml" (normalized: "c:\\program files (x86)\\reference assemblies\\microsoft\\framework\\v3.0\\subsetlist\\client.xml"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x178 [0061.034] GetFileType (hFile=0x178) returned 0x1 [0061.034] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e594) returned 1 [0061.034] GetFileType (hFile=0x178) returned 0x1 [0061.034] GetFileSize (in: hFile=0x178, lpFileSizeHigh=0x31e6a0 | out: lpFileSizeHigh=0x31e6a0*=0x0) returned 0xda7 [0061.034] ReadFile (in: hFile=0x178, lpBuffer=0x2777ed0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x31e64c, lpOverlapped=0x0 | out: lpBuffer=0x2777ed0*, lpNumberOfBytesRead=0x31e64c*=0xda7, lpOverlapped=0x0) returned 1 [0061.048] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Reference Assemblies\\Microsoft\\Framework\\v3.0\\SubsetList\\Client.xml", nBufferLength=0x105, lpBuffer=0x31e090, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Reference Assemblies\\Microsoft\\Framework\\v3.0\\SubsetList\\Client.xml", lpFilePart=0x0) returned 0x5a [0061.048] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e584) returned 1 [0061.048] CreateFileW (lpFileName="C:\\Program Files (x86)\\Reference Assemblies\\Microsoft\\Framework\\v3.0\\SubsetList\\Client.xml" (normalized: "c:\\program files (x86)\\reference assemblies\\microsoft\\framework\\v3.0\\subsetlist\\client.xml"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0xffffffff [0061.051] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31d3c0) returned 1 [0061.051] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e744) returned 1 [0061.051] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Reference Assemblies\\Microsoft\\Framework\\v3.5", nBufferLength=0x105, lpBuffer=0x31e24c, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Reference Assemblies\\Microsoft\\Framework\\v3.5", lpFilePart=0x0) returned 0x44 [0061.051] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Reference Assemblies\\Microsoft\\Framework\\v3.5\\", nBufferLength=0x105, lpBuffer=0x31e220, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Reference Assemblies\\Microsoft\\Framework\\v3.5\\", lpFilePart=0x0) returned 0x45 [0061.051] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Reference Assemblies\\Microsoft\\Framework\\v3.5\\*", lpFindFileData=0x31e46c | out: lpFindFileData=0x31e46c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x80105472, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x9a23a69d, ftLastAccessTime.dwHighDateTime=0x1cb892c, ftLastWriteTime.dwLowDateTime=0x9a23a69d, ftLastWriteTime.dwHighDateTime=0x1cb892c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5107960 [0061.053] FindNextFileW (in: hFindFile=0x5107960, lpFindFileData=0x31e47c | out: lpFindFileData=0x31e47c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x80105472, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x9a23a69d, ftLastAccessTime.dwHighDateTime=0x1cb892c, ftLastWriteTime.dwLowDateTime=0x9a23a69d, ftLastWriteTime.dwHighDateTime=0x1cb892c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0061.054] FindNextFileW (in: hFindFile=0x5107960, lpFindFileData=0x31e47c | out: lpFindFileData=0x31e47c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x565d698d, ftCreationTime.dwHighDateTime=0x1ca03fe, ftLastAccessTime.dwLowDateTime=0x565d698d, ftLastAccessTime.dwHighDateTime=0x1ca03fe, ftLastWriteTime.dwLowDateTime=0x754f141c, ftLastWriteTime.dwHighDateTime=0x1c9ea10, nFileSizeHigh=0x0, nFileSizeLow=0x1a000, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.Build.Conversion.v3.5.dll", cAlternateFileName="")) returned 1 [0061.054] FindNextFileW (in: hFindFile=0x5107960, lpFindFileData=0x31e47c | out: lpFindFileData=0x31e47c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb6605bc5, ftCreationTime.dwHighDateTime=0x1cb892b, ftLastAccessTime.dwLowDateTime=0xb6605bc5, ftLastAccessTime.dwHighDateTime=0x1cb892b, ftLastWriteTime.dwLowDateTime=0xb662bd26, ftLastWriteTime.dwHighDateTime=0x1cb892b, nFileSizeHigh=0x0, nFileSizeLow=0xb3000, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.Build.Engine.dll", cAlternateFileName="")) returned 1 [0061.054] FindNextFileW (in: hFindFile=0x5107960, lpFindFileData=0x31e47c | out: lpFindFileData=0x31e47c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x56d930d9, ftCreationTime.dwHighDateTime=0x1ca03fe, ftLastAccessTime.dwLowDateTime=0x56d930d9, ftLastAccessTime.dwHighDateTime=0x1ca03fe, ftLastWriteTime.dwLowDateTime=0x777e773c, ftLastWriteTime.dwHighDateTime=0x1c9ea10, nFileSizeHigh=0x0, nFileSizeLow=0x9000, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.Build.Framework.dll", cAlternateFileName="")) returned 1 [0061.054] FindNextFileW (in: hFindFile=0x5107960, lpFindFileData=0x31e47c | out: lpFindFileData=0x31e47c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb656d644, ftCreationTime.dwHighDateTime=0x1cb892b, ftLastAccessTime.dwLowDateTime=0xb656d644, ftLastAccessTime.dwHighDateTime=0x1cb892b, ftLastWriteTime.dwLowDateTime=0xb65937a4, ftLastWriteTime.dwHighDateTime=0x1cb892b, nFileSizeHigh=0x0, nFileSizeLow=0x17000, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.Build.Utilities.v3.5.dll", cAlternateFileName="")) returned 1 [0061.054] FindNextFileW (in: hFindFile=0x5107960, lpFindFileData=0x31e47c | out: lpFindFileData=0x31e47c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x56e9da72, ftCreationTime.dwHighDateTime=0x1ca03fe, ftLastAccessTime.dwLowDateTime=0x56e9da72, ftLastAccessTime.dwHighDateTime=0x1ca03fe, ftLastWriteTime.dwLowDateTime=0x77d8eb7c, ftLastWriteTime.dwHighDateTime=0x1c9ea10, nFileSizeHigh=0x0, nFileSizeLow=0xa400, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.VisualC.STLCLR.dll", cAlternateFileName="")) returned 1 [0061.054] FindNextFileW (in: hFindFile=0x5107960, lpFindFileData=0x31e47c | out: lpFindFileData=0x31e47c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x80105472, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x812b9833, ftLastAccessTime.dwHighDateTime=0x1ca0444, ftLastWriteTime.dwLowDateTime=0x812b9833, ftLastWriteTime.dwHighDateTime=0x1ca0444, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="RedistList", cAlternateFileName="REDIST~1")) returned 1 [0061.054] FindNextFileW (in: hFindFile=0x5107960, lpFindFileData=0x31e47c | out: lpFindFileData=0x31e47c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x80105472, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x812b9833, ftLastAccessTime.dwHighDateTime=0x1ca0444, ftLastWriteTime.dwLowDateTime=0x812b9833, ftLastWriteTime.dwHighDateTime=0x1ca0444, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="SubsetList", cAlternateFileName="SUBSET~1")) returned 1 [0061.055] FindNextFileW (in: hFindFile=0x5107960, lpFindFileData=0x31e47c | out: lpFindFileData=0x31e47c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb65937a4, ftCreationTime.dwHighDateTime=0x1cb892b, ftLastAccessTime.dwLowDateTime=0xb65937a4, ftLastAccessTime.dwHighDateTime=0x1cb892b, ftLastWriteTime.dwLowDateTime=0xb65937a4, ftLastWriteTime.dwHighDateTime=0x1cb892b, nFileSizeHigh=0x0, nFileSizeLow=0xb000, dwReserved0=0x0, dwReserved1=0x0, cFileName="System.AddIn.Contract.dll", cAlternateFileName="")) returned 1 [0061.055] FindNextFileW (in: hFindFile=0x5107960, lpFindFileData=0x31e47c | out: lpFindFileData=0x31e47c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb65474e4, ftCreationTime.dwHighDateTime=0x1cb892b, ftLastAccessTime.dwLowDateTime=0xb65474e4, ftLastAccessTime.dwHighDateTime=0x1cb892b, ftLastWriteTime.dwLowDateTime=0xb656d644, ftLastWriteTime.dwHighDateTime=0x1cb892b, nFileSizeHigh=0x0, nFileSizeLow=0x28000, dwReserved0=0x0, dwReserved1=0x0, cFileName="System.AddIn.dll", cAlternateFileName="")) returned 1 [0061.055] FindNextFileW (in: hFindFile=0x5107960, lpFindFileData=0x31e47c | out: lpFindFileData=0x31e47c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb64d50c3, ftCreationTime.dwHighDateTime=0x1cb892b, ftLastAccessTime.dwLowDateTime=0xb64d50c3, ftLastAccessTime.dwHighDateTime=0x1cb892b, ftLastWriteTime.dwLowDateTime=0xb64fb223, ftLastWriteTime.dwHighDateTime=0x1cb892b, nFileSizeHigh=0x0, nFileSizeLow=0xe000, dwReserved0=0x0, dwReserved1=0x0, cFileName="System.ComponentModel.DataAnnotations.dll", cAlternateFileName="")) returned 1 [0061.055] FindNextFileW (in: hFindFile=0x5107960, lpFindFileData=0x31e47c | out: lpFindFileData=0x31e47c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb6651e86, ftCreationTime.dwHighDateTime=0x1cb892b, ftLastAccessTime.dwLowDateTime=0xb6651e86, ftLastAccessTime.dwHighDateTime=0x1cb892b, ftLastWriteTime.dwLowDateTime=0xb6651e86, ftLastWriteTime.dwHighDateTime=0x1cb892b, nFileSizeHigh=0x0, nFileSizeLow=0xa3000, dwReserved0=0x0, dwReserved1=0x0, cFileName="System.Core.dll", cAlternateFileName="")) returned 1 [0061.055] FindNextFileW (in: hFindFile=0x5107960, lpFindFileData=0x31e47c | out: lpFindFileData=0x31e47c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb662bd26, ftCreationTime.dwHighDateTime=0x1cb892b, ftLastAccessTime.dwLowDateTime=0xb662bd26, ftLastAccessTime.dwHighDateTime=0x1cb892b, ftLastWriteTime.dwLowDateTime=0xb662bd26, ftLastWriteTime.dwHighDateTime=0x1cb892b, nFileSizeHigh=0x0, nFileSizeLow=0xd000, dwReserved0=0x0, dwReserved1=0x0, cFileName="System.Data.DataSetExtensions.dll", cAlternateFileName="")) returned 1 [0061.055] FindNextFileW (in: hFindFile=0x5107960, lpFindFileData=0x31e47c | out: lpFindFileData=0x31e47c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb64fb223, ftCreationTime.dwHighDateTime=0x1cb892b, ftLastAccessTime.dwLowDateTime=0xb64fb223, ftLastAccessTime.dwHighDateTime=0x1cb892b, ftLastWriteTime.dwLowDateTime=0xb64fb223, ftLastWriteTime.dwHighDateTime=0x1cb892b, nFileSizeHigh=0x0, nFileSizeLow=0x38000, dwReserved0=0x0, dwReserved1=0x0, cFileName="System.Data.Entity.Design.dll", cAlternateFileName="")) returned 1 [0061.055] FindNextFileW (in: hFindFile=0x5107960, lpFindFileData=0x31e47c | out: lpFindFileData=0x31e47c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb462f54b, ftCreationTime.dwHighDateTime=0x1cb892b, ftLastAccessTime.dwLowDateTime=0xb462f54b, ftLastAccessTime.dwHighDateTime=0x1cb892b, ftLastWriteTime.dwLowDateTime=0xb46a196b, ftLastWriteTime.dwHighDateTime=0x1cb892b, nFileSizeHigh=0x0, nFileSizeLow=0x2bf000, dwReserved0=0x0, dwReserved1=0x0, cFileName="System.Data.Entity.dll", cAlternateFileName="")) returned 1 [0061.055] FindNextFileW (in: hFindFile=0x5107960, lpFindFileData=0x31e47c | out: lpFindFileData=0x31e47c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb64fb223, ftCreationTime.dwHighDateTime=0x1cb892b, ftLastAccessTime.dwLowDateTime=0xb64fb223, ftLastAccessTime.dwHighDateTime=0x1cb892b, ftLastWriteTime.dwLowDateTime=0xb6521384, ftLastWriteTime.dwHighDateTime=0x1cb892b, nFileSizeHigh=0x0, nFileSizeLow=0xa7000, dwReserved0=0x0, dwReserved1=0x0, cFileName="System.Data.Linq.dll", cAlternateFileName="")) returned 1 [0061.055] FindNextFileW (in: hFindFile=0x5107960, lpFindFileData=0x31e47c | out: lpFindFileData=0x31e47c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb65937a4, ftCreationTime.dwHighDateTime=0x1cb892b, ftLastAccessTime.dwLowDateTime=0xb65937a4, ftLastAccessTime.dwHighDateTime=0x1cb892b, ftLastWriteTime.dwLowDateTime=0xb65b9905, ftLastWriteTime.dwHighDateTime=0x1cb892b, nFileSizeHigh=0x0, nFileSizeLow=0x71000, dwReserved0=0x0, dwReserved1=0x0, cFileName="System.Data.Services.Client.dll", cAlternateFileName="")) returned 1 [0061.055] FindNextFileW (in: hFindFile=0x5107960, lpFindFileData=0x31e47c | out: lpFindFileData=0x31e47c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb46093ea, ftCreationTime.dwHighDateTime=0x1cb892b, ftLastAccessTime.dwLowDateTime=0xb46093ea, ftLastAccessTime.dwHighDateTime=0x1cb892b, ftLastWriteTime.dwLowDateTime=0xb462f54b, ftLastWriteTime.dwHighDateTime=0x1cb892b, nFileSizeHigh=0x0, nFileSizeLow=0x28000, dwReserved0=0x0, dwReserved1=0x0, cFileName="System.Data.Services.Design.dll", cAlternateFileName="")) returned 1 [0061.056] FindNextFileW (in: hFindFile=0x5107960, lpFindFileData=0x31e47c | out: lpFindFileData=0x31e47c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb462f54b, ftCreationTime.dwHighDateTime=0x1cb892b, ftLastAccessTime.dwLowDateTime=0xb462f54b, ftLastAccessTime.dwHighDateTime=0x1cb892b, ftLastWriteTime.dwLowDateTime=0xb462f54b, ftLastWriteTime.dwHighDateTime=0x1cb892b, nFileSizeHigh=0x0, nFileSizeLow=0xa9000, dwReserved0=0x0, dwReserved1=0x0, cFileName="System.Data.Services.dll", cAlternateFileName="")) returned 1 [0061.056] FindNextFileW (in: hFindFile=0x5107960, lpFindFileData=0x31e47c | out: lpFindFileData=0x31e47c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb6651e86, ftCreationTime.dwHighDateTime=0x1cb892b, ftLastAccessTime.dwLowDateTime=0xb6651e86, ftLastAccessTime.dwHighDateTime=0x1cb892b, ftLastWriteTime.dwLowDateTime=0xb6677fe6, ftLastWriteTime.dwHighDateTime=0x1cb892b, nFileSizeHigh=0x0, nFileSizeLow=0x47000, dwReserved0=0x0, dwReserved1=0x0, cFileName="System.DirectoryServices.AccountManagement.dll", cAlternateFileName="")) returned 1 [0061.056] FindNextFileW (in: hFindFile=0x5107960, lpFindFileData=0x31e47c | out: lpFindFileData=0x31e47c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb669e146, ftCreationTime.dwHighDateTime=0x1cb892b, ftLastAccessTime.dwLowDateTime=0xb669e146, ftLastAccessTime.dwHighDateTime=0x1cb892b, ftLastWriteTime.dwLowDateTime=0xb669e146, ftLastWriteTime.dwHighDateTime=0x1cb892b, nFileSizeHigh=0x0, nFileSizeLow=0x23000, dwReserved0=0x0, dwReserved1=0x0, cFileName="System.Management.Instrumentation.dll", cAlternateFileName="")) returned 1 [0061.056] FindNextFileW (in: hFindFile=0x5107960, lpFindFileData=0x31e47c | out: lpFindFileData=0x31e47c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb656d644, ftCreationTime.dwHighDateTime=0x1cb892b, ftLastAccessTime.dwLowDateTime=0xb656d644, ftLastAccessTime.dwHighDateTime=0x1cb892b, ftLastWriteTime.dwLowDateTime=0xb656d644, ftLastWriteTime.dwHighDateTime=0x1cb892b, nFileSizeHigh=0x0, nFileSizeLow=0x3a000, dwReserved0=0x0, dwReserved1=0x0, cFileName="System.Net.dll", cAlternateFileName="")) returned 1 [0061.056] FindNextFileW (in: hFindFile=0x5107960, lpFindFileData=0x31e47c | out: lpFindFileData=0x31e47c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb44fea48, ftCreationTime.dwHighDateTime=0x1cb892b, ftLastAccessTime.dwLowDateTime=0xb44fea48, ftLastAccessTime.dwHighDateTime=0x1cb892b, ftLastWriteTime.dwLowDateTime=0xb44fea48, ftLastWriteTime.dwHighDateTime=0x1cb892b, nFileSizeHigh=0x0, nFileSizeLow=0x8b000, dwReserved0=0x0, dwReserved1=0x0, cFileName="System.ServiceModel.Web.dll", cAlternateFileName="")) returned 1 [0061.056] FindNextFileW (in: hFindFile=0x5107960, lpFindFileData=0x31e47c | out: lpFindFileData=0x31e47c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb662bd26, ftCreationTime.dwHighDateTime=0x1cb892b, ftLastAccessTime.dwLowDateTime=0xb662bd26, ftLastAccessTime.dwHighDateTime=0x1cb892b, ftLastWriteTime.dwLowDateTime=0xb662bd26, ftLastWriteTime.dwHighDateTime=0x1cb892b, nFileSizeHigh=0x0, nFileSizeLow=0x13000, dwReserved0=0x0, dwReserved1=0x0, cFileName="System.Web.Abstractions.dll", cAlternateFileName="")) returned 1 [0061.056] FindNextFileW (in: hFindFile=0x5107960, lpFindFileData=0x31e47c | out: lpFindFileData=0x31e47c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb6488e03, ftCreationTime.dwHighDateTime=0x1cb892b, ftLastAccessTime.dwLowDateTime=0xb6488e03, ftLastAccessTime.dwHighDateTime=0x1cb892b, ftLastWriteTime.dwLowDateTime=0xb6488e03, ftLastWriteTime.dwHighDateTime=0x1cb892b, nFileSizeHigh=0x0, nFileSizeLow=0x8000, dwReserved0=0x0, dwReserved1=0x0, cFileName="System.Web.DynamicData.Design.dll", cAlternateFileName="")) returned 1 [0061.056] FindNextFileW (in: hFindFile=0x5107960, lpFindFileData=0x31e47c | out: lpFindFileData=0x31e47c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb64d50c3, ftCreationTime.dwHighDateTime=0x1cb892b, ftLastAccessTime.dwLowDateTime=0xb64d50c3, ftLastAccessTime.dwHighDateTime=0x1cb892b, ftLastWriteTime.dwLowDateTime=0xb64d50c3, ftLastWriteTime.dwHighDateTime=0x1cb892b, nFileSizeHigh=0x0, nFileSizeLow=0x38000, dwReserved0=0x0, dwReserved1=0x0, cFileName="System.Web.DynamicData.dll", cAlternateFileName="")) returned 1 [0061.056] FindNextFileW (in: hFindFile=0x5107960, lpFindFileData=0x31e47c | out: lpFindFileData=0x31e47c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb6521384, ftCreationTime.dwHighDateTime=0x1cb892b, ftLastAccessTime.dwLowDateTime=0xb6521384, ftLastAccessTime.dwHighDateTime=0x1cb892b, ftLastWriteTime.dwLowDateTime=0xb6521384, ftLastWriteTime.dwHighDateTime=0x1cb892b, nFileSizeHigh=0x0, nFileSizeLow=0x20000, dwReserved0=0x0, dwReserved1=0x0, cFileName="System.Web.Entity.Design.dll", cAlternateFileName="")) returned 1 [0061.057] FindNextFileW (in: hFindFile=0x5107960, lpFindFileData=0x31e47c | out: lpFindFileData=0x31e47c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb6677fe6, ftCreationTime.dwHighDateTime=0x1cb892b, ftLastAccessTime.dwLowDateTime=0xb6677fe6, ftLastAccessTime.dwHighDateTime=0x1cb892b, ftLastWriteTime.dwLowDateTime=0xb6677fe6, ftLastWriteTime.dwHighDateTime=0x1cb892b, nFileSizeHigh=0x0, nFileSizeLow=0x22000, dwReserved0=0x0, dwReserved1=0x0, cFileName="System.Web.Entity.dll", cAlternateFileName="")) returned 1 [0061.057] FindNextFileW (in: hFindFile=0x5107960, lpFindFileData=0x31e47c | out: lpFindFileData=0x31e47c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb65b9905, ftCreationTime.dwHighDateTime=0x1cb892b, ftLastAccessTime.dwLowDateTime=0xb65b9905, ftLastAccessTime.dwHighDateTime=0x1cb892b, ftLastWriteTime.dwLowDateTime=0xb65b9905, ftLastWriteTime.dwHighDateTime=0x1cb892b, nFileSizeHigh=0x0, nFileSizeLow=0x52000, dwReserved0=0x0, dwReserved1=0x0, cFileName="System.Web.Extensions.Design.dll", cAlternateFileName="")) returned 1 [0061.057] FindNextFileW (in: hFindFile=0x5107960, lpFindFileData=0x31e47c | out: lpFindFileData=0x31e47c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb46a196b, ftCreationTime.dwHighDateTime=0x1cb892b, ftLastAccessTime.dwLowDateTime=0xb46a196b, ftLastAccessTime.dwHighDateTime=0x1cb892b, ftLastWriteTime.dwLowDateTime=0xb46c7acc, ftLastWriteTime.dwHighDateTime=0x1cb892b, nFileSizeHigh=0x0, nFileSizeLow=0x138000, dwReserved0=0x0, dwReserved1=0x0, cFileName="System.Web.Extensions.dll", cAlternateFileName="")) returned 1 [0061.057] FindNextFileW (in: hFindFile=0x5107960, lpFindFileData=0x31e47c | out: lpFindFileData=0x31e47c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb6677fe6, ftCreationTime.dwHighDateTime=0x1cb892b, ftLastAccessTime.dwLowDateTime=0xb6677fe6, ftLastAccessTime.dwHighDateTime=0x1cb892b, ftLastWriteTime.dwLowDateTime=0xb669e146, ftLastWriteTime.dwHighDateTime=0x1cb892b, nFileSizeHigh=0x0, nFileSizeLow=0xf000, dwReserved0=0x0, dwReserved1=0x0, cFileName="System.Web.Routing.dll", cAlternateFileName="")) returned 1 [0061.057] FindNextFileW (in: hFindFile=0x5107960, lpFindFileData=0x31e47c | out: lpFindFileData=0x31e47c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8e608f1c, ftCreationTime.dwHighDateTime=0x1c9ea10, ftLastAccessTime.dwLowDateTime=0x8e608f1c, ftLastAccessTime.dwHighDateTime=0x1c9ea10, ftLastWriteTime.dwLowDateTime=0x8e62f07c, ftLastWriteTime.dwHighDateTime=0x1c9ea10, nFileSizeHigh=0x0, nFileSizeLow=0x3000, dwReserved0=0x0, dwReserved1=0x0, cFileName="System.Windows.Presentation.dll", cAlternateFileName="")) returned 1 [0061.057] FindNextFileW (in: hFindFile=0x5107960, lpFindFileData=0x31e47c | out: lpFindFileData=0x31e47c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb44d88e8, ftCreationTime.dwHighDateTime=0x1cb892b, ftLastAccessTime.dwLowDateTime=0xb44d88e8, ftLastAccessTime.dwHighDateTime=0x1cb892b, ftLastWriteTime.dwLowDateTime=0xb44fea48, ftLastWriteTime.dwHighDateTime=0x1cb892b, nFileSizeHigh=0x0, nFileSizeLow=0x7c000, dwReserved0=0x0, dwReserved1=0x0, cFileName="System.WorkflowServices.dll", cAlternateFileName="")) returned 1 [0061.057] FindNextFileW (in: hFindFile=0x5107960, lpFindFileData=0x31e47c | out: lpFindFileData=0x31e47c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb656d644, ftCreationTime.dwHighDateTime=0x1cb892b, ftLastAccessTime.dwLowDateTime=0xb656d644, ftLastAccessTime.dwHighDateTime=0x1cb892b, ftLastWriteTime.dwLowDateTime=0xb656d644, ftLastWriteTime.dwHighDateTime=0x1cb892b, nFileSizeHigh=0x0, nFileSizeLow=0x22000, dwReserved0=0x0, dwReserved1=0x0, cFileName="System.Xml.Linq.dll", cAlternateFileName="")) returned 1 [0061.057] FindNextFileW (in: hFindFile=0x5107960, lpFindFileData=0x31e47c | out: lpFindFileData=0x31e47c*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0061.057] FindClose (in: hFindFile=0x5107960 | out: hFindFile=0x5107960) returned 1 [0061.058] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e704) returned 1 [0061.058] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e710) returned 1 [0061.058] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e744) returned 1 [0061.058] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Reference Assemblies\\Microsoft\\Framework\\v3.5", nBufferLength=0x105, lpBuffer=0x31e24c, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Reference Assemblies\\Microsoft\\Framework\\v3.5", lpFilePart=0x0) returned 0x44 [0061.059] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Reference Assemblies\\Microsoft\\Framework\\v3.5\\", nBufferLength=0x105, lpBuffer=0x31e220, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Reference Assemblies\\Microsoft\\Framework\\v3.5\\", lpFilePart=0x0) returned 0x45 [0061.059] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Reference Assemblies\\Microsoft\\Framework\\v3.5\\*", lpFindFileData=0x31e46c | out: lpFindFileData=0x31e46c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x80105472, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x9a23a69d, ftLastAccessTime.dwHighDateTime=0x1cb892c, ftLastWriteTime.dwLowDateTime=0x9a23a69d, ftLastWriteTime.dwHighDateTime=0x1cb892c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5107960 [0061.060] FindNextFileW (in: hFindFile=0x5107960, lpFindFileData=0x31e47c | out: lpFindFileData=0x31e47c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x80105472, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x9a23a69d, ftLastAccessTime.dwHighDateTime=0x1cb892c, ftLastWriteTime.dwLowDateTime=0x9a23a69d, ftLastWriteTime.dwHighDateTime=0x1cb892c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0061.060] FindNextFileW (in: hFindFile=0x5107960, lpFindFileData=0x31e47c | out: lpFindFileData=0x31e47c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x565d698d, ftCreationTime.dwHighDateTime=0x1ca03fe, ftLastAccessTime.dwLowDateTime=0x565d698d, ftLastAccessTime.dwHighDateTime=0x1ca03fe, ftLastWriteTime.dwLowDateTime=0x754f141c, ftLastWriteTime.dwHighDateTime=0x1c9ea10, nFileSizeHigh=0x0, nFileSizeLow=0x1a000, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.Build.Conversion.v3.5.dll", cAlternateFileName="")) returned 1 [0061.060] FindNextFileW (in: hFindFile=0x5107960, lpFindFileData=0x31e47c | out: lpFindFileData=0x31e47c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb6605bc5, ftCreationTime.dwHighDateTime=0x1cb892b, ftLastAccessTime.dwLowDateTime=0xb6605bc5, ftLastAccessTime.dwHighDateTime=0x1cb892b, ftLastWriteTime.dwLowDateTime=0xb662bd26, ftLastWriteTime.dwHighDateTime=0x1cb892b, nFileSizeHigh=0x0, nFileSizeLow=0xb3000, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.Build.Engine.dll", cAlternateFileName="")) returned 1 [0061.060] FindNextFileW (in: hFindFile=0x5107960, lpFindFileData=0x31e47c | out: lpFindFileData=0x31e47c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x56d930d9, ftCreationTime.dwHighDateTime=0x1ca03fe, ftLastAccessTime.dwLowDateTime=0x56d930d9, ftLastAccessTime.dwHighDateTime=0x1ca03fe, ftLastWriteTime.dwLowDateTime=0x777e773c, ftLastWriteTime.dwHighDateTime=0x1c9ea10, nFileSizeHigh=0x0, nFileSizeLow=0x9000, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.Build.Framework.dll", cAlternateFileName="")) returned 1 [0061.060] FindNextFileW (in: hFindFile=0x5107960, lpFindFileData=0x31e47c | out: lpFindFileData=0x31e47c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb656d644, ftCreationTime.dwHighDateTime=0x1cb892b, ftLastAccessTime.dwLowDateTime=0xb656d644, ftLastAccessTime.dwHighDateTime=0x1cb892b, ftLastWriteTime.dwLowDateTime=0xb65937a4, ftLastWriteTime.dwHighDateTime=0x1cb892b, nFileSizeHigh=0x0, nFileSizeLow=0x17000, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.Build.Utilities.v3.5.dll", cAlternateFileName="")) returned 1 [0061.060] FindNextFileW (in: hFindFile=0x5107960, lpFindFileData=0x31e47c | out: lpFindFileData=0x31e47c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x56e9da72, ftCreationTime.dwHighDateTime=0x1ca03fe, ftLastAccessTime.dwLowDateTime=0x56e9da72, ftLastAccessTime.dwHighDateTime=0x1ca03fe, ftLastWriteTime.dwLowDateTime=0x77d8eb7c, ftLastWriteTime.dwHighDateTime=0x1c9ea10, nFileSizeHigh=0x0, nFileSizeLow=0xa400, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.VisualC.STLCLR.dll", cAlternateFileName="")) returned 1 [0061.061] FindNextFileW (in: hFindFile=0x5107960, lpFindFileData=0x31e47c | out: lpFindFileData=0x31e47c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x80105472, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x812b9833, ftLastAccessTime.dwHighDateTime=0x1ca0444, ftLastWriteTime.dwLowDateTime=0x812b9833, ftLastWriteTime.dwHighDateTime=0x1ca0444, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="RedistList", cAlternateFileName="REDIST~1")) returned 1 [0061.061] FindNextFileW (in: hFindFile=0x5107960, lpFindFileData=0x31e47c | out: lpFindFileData=0x31e47c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x80105472, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x812b9833, ftLastAccessTime.dwHighDateTime=0x1ca0444, ftLastWriteTime.dwLowDateTime=0x812b9833, ftLastWriteTime.dwHighDateTime=0x1ca0444, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="SubsetList", cAlternateFileName="SUBSET~1")) returned 1 [0061.061] FindNextFileW (in: hFindFile=0x5107960, lpFindFileData=0x31e47c | out: lpFindFileData=0x31e47c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb65937a4, ftCreationTime.dwHighDateTime=0x1cb892b, ftLastAccessTime.dwLowDateTime=0xb65937a4, ftLastAccessTime.dwHighDateTime=0x1cb892b, ftLastWriteTime.dwLowDateTime=0xb65937a4, ftLastWriteTime.dwHighDateTime=0x1cb892b, nFileSizeHigh=0x0, nFileSizeLow=0xb000, dwReserved0=0x0, dwReserved1=0x0, cFileName="System.AddIn.Contract.dll", cAlternateFileName="")) returned 1 [0061.061] FindNextFileW (in: hFindFile=0x5107960, lpFindFileData=0x31e47c | out: lpFindFileData=0x31e47c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb65474e4, ftCreationTime.dwHighDateTime=0x1cb892b, ftLastAccessTime.dwLowDateTime=0xb65474e4, ftLastAccessTime.dwHighDateTime=0x1cb892b, ftLastWriteTime.dwLowDateTime=0xb656d644, ftLastWriteTime.dwHighDateTime=0x1cb892b, nFileSizeHigh=0x0, nFileSizeLow=0x28000, dwReserved0=0x0, dwReserved1=0x0, cFileName="System.AddIn.dll", cAlternateFileName="")) returned 1 [0061.061] FindNextFileW (in: hFindFile=0x5107960, lpFindFileData=0x31e47c | out: lpFindFileData=0x31e47c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb64d50c3, ftCreationTime.dwHighDateTime=0x1cb892b, ftLastAccessTime.dwLowDateTime=0xb64d50c3, ftLastAccessTime.dwHighDateTime=0x1cb892b, ftLastWriteTime.dwLowDateTime=0xb64fb223, ftLastWriteTime.dwHighDateTime=0x1cb892b, nFileSizeHigh=0x0, nFileSizeLow=0xe000, dwReserved0=0x0, dwReserved1=0x0, cFileName="System.ComponentModel.DataAnnotations.dll", cAlternateFileName="")) returned 1 [0061.061] FindNextFileW (in: hFindFile=0x5107960, lpFindFileData=0x31e47c | out: lpFindFileData=0x31e47c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb6651e86, ftCreationTime.dwHighDateTime=0x1cb892b, ftLastAccessTime.dwLowDateTime=0xb6651e86, ftLastAccessTime.dwHighDateTime=0x1cb892b, ftLastWriteTime.dwLowDateTime=0xb6651e86, ftLastWriteTime.dwHighDateTime=0x1cb892b, nFileSizeHigh=0x0, nFileSizeLow=0xa3000, dwReserved0=0x0, dwReserved1=0x0, cFileName="System.Core.dll", cAlternateFileName="")) returned 1 [0061.061] FindNextFileW (in: hFindFile=0x5107960, lpFindFileData=0x31e47c | out: lpFindFileData=0x31e47c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb662bd26, ftCreationTime.dwHighDateTime=0x1cb892b, ftLastAccessTime.dwLowDateTime=0xb662bd26, ftLastAccessTime.dwHighDateTime=0x1cb892b, ftLastWriteTime.dwLowDateTime=0xb662bd26, ftLastWriteTime.dwHighDateTime=0x1cb892b, nFileSizeHigh=0x0, nFileSizeLow=0xd000, dwReserved0=0x0, dwReserved1=0x0, cFileName="System.Data.DataSetExtensions.dll", cAlternateFileName="")) returned 1 [0061.062] FindNextFileW (in: hFindFile=0x5107960, lpFindFileData=0x31e47c | out: lpFindFileData=0x31e47c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb64fb223, ftCreationTime.dwHighDateTime=0x1cb892b, ftLastAccessTime.dwLowDateTime=0xb64fb223, ftLastAccessTime.dwHighDateTime=0x1cb892b, ftLastWriteTime.dwLowDateTime=0xb64fb223, ftLastWriteTime.dwHighDateTime=0x1cb892b, nFileSizeHigh=0x0, nFileSizeLow=0x38000, dwReserved0=0x0, dwReserved1=0x0, cFileName="System.Data.Entity.Design.dll", cAlternateFileName="")) returned 1 [0061.062] FindNextFileW (in: hFindFile=0x5107960, lpFindFileData=0x31e47c | out: lpFindFileData=0x31e47c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb462f54b, ftCreationTime.dwHighDateTime=0x1cb892b, ftLastAccessTime.dwLowDateTime=0xb462f54b, ftLastAccessTime.dwHighDateTime=0x1cb892b, ftLastWriteTime.dwLowDateTime=0xb46a196b, ftLastWriteTime.dwHighDateTime=0x1cb892b, nFileSizeHigh=0x0, nFileSizeLow=0x2bf000, dwReserved0=0x0, dwReserved1=0x0, cFileName="System.Data.Entity.dll", cAlternateFileName="")) returned 1 [0061.062] FindNextFileW (in: hFindFile=0x5107960, lpFindFileData=0x31e47c | out: lpFindFileData=0x31e47c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb64fb223, ftCreationTime.dwHighDateTime=0x1cb892b, ftLastAccessTime.dwLowDateTime=0xb64fb223, ftLastAccessTime.dwHighDateTime=0x1cb892b, ftLastWriteTime.dwLowDateTime=0xb6521384, ftLastWriteTime.dwHighDateTime=0x1cb892b, nFileSizeHigh=0x0, nFileSizeLow=0xa7000, dwReserved0=0x0, dwReserved1=0x0, cFileName="System.Data.Linq.dll", cAlternateFileName="")) returned 1 [0061.062] FindNextFileW (in: hFindFile=0x5107960, lpFindFileData=0x31e47c | out: lpFindFileData=0x31e47c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb65937a4, ftCreationTime.dwHighDateTime=0x1cb892b, ftLastAccessTime.dwLowDateTime=0xb65937a4, ftLastAccessTime.dwHighDateTime=0x1cb892b, ftLastWriteTime.dwLowDateTime=0xb65b9905, ftLastWriteTime.dwHighDateTime=0x1cb892b, nFileSizeHigh=0x0, nFileSizeLow=0x71000, dwReserved0=0x0, dwReserved1=0x0, cFileName="System.Data.Services.Client.dll", cAlternateFileName="")) returned 1 [0061.062] FindNextFileW (in: hFindFile=0x5107960, lpFindFileData=0x31e47c | out: lpFindFileData=0x31e47c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb46093ea, ftCreationTime.dwHighDateTime=0x1cb892b, ftLastAccessTime.dwLowDateTime=0xb46093ea, ftLastAccessTime.dwHighDateTime=0x1cb892b, ftLastWriteTime.dwLowDateTime=0xb462f54b, ftLastWriteTime.dwHighDateTime=0x1cb892b, nFileSizeHigh=0x0, nFileSizeLow=0x28000, dwReserved0=0x0, dwReserved1=0x0, cFileName="System.Data.Services.Design.dll", cAlternateFileName="")) returned 1 [0061.062] FindNextFileW (in: hFindFile=0x5107960, lpFindFileData=0x31e47c | out: lpFindFileData=0x31e47c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb462f54b, ftCreationTime.dwHighDateTime=0x1cb892b, ftLastAccessTime.dwLowDateTime=0xb462f54b, ftLastAccessTime.dwHighDateTime=0x1cb892b, ftLastWriteTime.dwLowDateTime=0xb462f54b, ftLastWriteTime.dwHighDateTime=0x1cb892b, nFileSizeHigh=0x0, nFileSizeLow=0xa9000, dwReserved0=0x0, dwReserved1=0x0, cFileName="System.Data.Services.dll", cAlternateFileName="")) returned 1 [0061.062] FindNextFileW (in: hFindFile=0x5107960, lpFindFileData=0x31e47c | out: lpFindFileData=0x31e47c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb6651e86, ftCreationTime.dwHighDateTime=0x1cb892b, ftLastAccessTime.dwLowDateTime=0xb6651e86, ftLastAccessTime.dwHighDateTime=0x1cb892b, ftLastWriteTime.dwLowDateTime=0xb6677fe6, ftLastWriteTime.dwHighDateTime=0x1cb892b, nFileSizeHigh=0x0, nFileSizeLow=0x47000, dwReserved0=0x0, dwReserved1=0x0, cFileName="System.DirectoryServices.AccountManagement.dll", cAlternateFileName="")) returned 1 [0061.063] FindNextFileW (in: hFindFile=0x5107960, lpFindFileData=0x31e47c | out: lpFindFileData=0x31e47c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb669e146, ftCreationTime.dwHighDateTime=0x1cb892b, ftLastAccessTime.dwLowDateTime=0xb669e146, ftLastAccessTime.dwHighDateTime=0x1cb892b, ftLastWriteTime.dwLowDateTime=0xb669e146, ftLastWriteTime.dwHighDateTime=0x1cb892b, nFileSizeHigh=0x0, nFileSizeLow=0x23000, dwReserved0=0x0, dwReserved1=0x0, cFileName="System.Management.Instrumentation.dll", cAlternateFileName="")) returned 1 [0061.063] FindNextFileW (in: hFindFile=0x5107960, lpFindFileData=0x31e47c | out: lpFindFileData=0x31e47c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb656d644, ftCreationTime.dwHighDateTime=0x1cb892b, ftLastAccessTime.dwLowDateTime=0xb656d644, ftLastAccessTime.dwHighDateTime=0x1cb892b, ftLastWriteTime.dwLowDateTime=0xb656d644, ftLastWriteTime.dwHighDateTime=0x1cb892b, nFileSizeHigh=0x0, nFileSizeLow=0x3a000, dwReserved0=0x0, dwReserved1=0x0, cFileName="System.Net.dll", cAlternateFileName="")) returned 1 [0061.063] FindNextFileW (in: hFindFile=0x5107960, lpFindFileData=0x31e47c | out: lpFindFileData=0x31e47c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb44fea48, ftCreationTime.dwHighDateTime=0x1cb892b, ftLastAccessTime.dwLowDateTime=0xb44fea48, ftLastAccessTime.dwHighDateTime=0x1cb892b, ftLastWriteTime.dwLowDateTime=0xb44fea48, ftLastWriteTime.dwHighDateTime=0x1cb892b, nFileSizeHigh=0x0, nFileSizeLow=0x8b000, dwReserved0=0x0, dwReserved1=0x0, cFileName="System.ServiceModel.Web.dll", cAlternateFileName="")) returned 1 [0061.063] FindNextFileW (in: hFindFile=0x5107960, lpFindFileData=0x31e47c | out: lpFindFileData=0x31e47c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb662bd26, ftCreationTime.dwHighDateTime=0x1cb892b, ftLastAccessTime.dwLowDateTime=0xb662bd26, ftLastAccessTime.dwHighDateTime=0x1cb892b, ftLastWriteTime.dwLowDateTime=0xb662bd26, ftLastWriteTime.dwHighDateTime=0x1cb892b, nFileSizeHigh=0x0, nFileSizeLow=0x13000, dwReserved0=0x0, dwReserved1=0x0, cFileName="System.Web.Abstractions.dll", cAlternateFileName="")) returned 1 [0061.063] FindNextFileW (in: hFindFile=0x5107960, lpFindFileData=0x31e47c | out: lpFindFileData=0x31e47c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb6488e03, ftCreationTime.dwHighDateTime=0x1cb892b, ftLastAccessTime.dwLowDateTime=0xb6488e03, ftLastAccessTime.dwHighDateTime=0x1cb892b, ftLastWriteTime.dwLowDateTime=0xb6488e03, ftLastWriteTime.dwHighDateTime=0x1cb892b, nFileSizeHigh=0x0, nFileSizeLow=0x8000, dwReserved0=0x0, dwReserved1=0x0, cFileName="System.Web.DynamicData.Design.dll", cAlternateFileName="")) returned 1 [0061.063] FindNextFileW (in: hFindFile=0x5107960, lpFindFileData=0x31e47c | out: lpFindFileData=0x31e47c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb64d50c3, ftCreationTime.dwHighDateTime=0x1cb892b, ftLastAccessTime.dwLowDateTime=0xb64d50c3, ftLastAccessTime.dwHighDateTime=0x1cb892b, ftLastWriteTime.dwLowDateTime=0xb64d50c3, ftLastWriteTime.dwHighDateTime=0x1cb892b, nFileSizeHigh=0x0, nFileSizeLow=0x38000, dwReserved0=0x0, dwReserved1=0x0, cFileName="System.Web.DynamicData.dll", cAlternateFileName="")) returned 1 [0061.063] FindNextFileW (in: hFindFile=0x5107960, lpFindFileData=0x31e47c | out: lpFindFileData=0x31e47c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb6521384, ftCreationTime.dwHighDateTime=0x1cb892b, ftLastAccessTime.dwLowDateTime=0xb6521384, ftLastAccessTime.dwHighDateTime=0x1cb892b, ftLastWriteTime.dwLowDateTime=0xb6521384, ftLastWriteTime.dwHighDateTime=0x1cb892b, nFileSizeHigh=0x0, nFileSizeLow=0x20000, dwReserved0=0x0, dwReserved1=0x0, cFileName="System.Web.Entity.Design.dll", cAlternateFileName="")) returned 1 [0061.064] FindNextFileW (in: hFindFile=0x5107960, lpFindFileData=0x31e47c | out: lpFindFileData=0x31e47c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb6677fe6, ftCreationTime.dwHighDateTime=0x1cb892b, ftLastAccessTime.dwLowDateTime=0xb6677fe6, ftLastAccessTime.dwHighDateTime=0x1cb892b, ftLastWriteTime.dwLowDateTime=0xb6677fe6, ftLastWriteTime.dwHighDateTime=0x1cb892b, nFileSizeHigh=0x0, nFileSizeLow=0x22000, dwReserved0=0x0, dwReserved1=0x0, cFileName="System.Web.Entity.dll", cAlternateFileName="")) returned 1 [0061.064] FindNextFileW (in: hFindFile=0x5107960, lpFindFileData=0x31e47c | out: lpFindFileData=0x31e47c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb65b9905, ftCreationTime.dwHighDateTime=0x1cb892b, ftLastAccessTime.dwLowDateTime=0xb65b9905, ftLastAccessTime.dwHighDateTime=0x1cb892b, ftLastWriteTime.dwLowDateTime=0xb65b9905, ftLastWriteTime.dwHighDateTime=0x1cb892b, nFileSizeHigh=0x0, nFileSizeLow=0x52000, dwReserved0=0x0, dwReserved1=0x0, cFileName="System.Web.Extensions.Design.dll", cAlternateFileName="")) returned 1 [0061.064] FindNextFileW (in: hFindFile=0x5107960, lpFindFileData=0x31e47c | out: lpFindFileData=0x31e47c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb46a196b, ftCreationTime.dwHighDateTime=0x1cb892b, ftLastAccessTime.dwLowDateTime=0xb46a196b, ftLastAccessTime.dwHighDateTime=0x1cb892b, ftLastWriteTime.dwLowDateTime=0xb46c7acc, ftLastWriteTime.dwHighDateTime=0x1cb892b, nFileSizeHigh=0x0, nFileSizeLow=0x138000, dwReserved0=0x0, dwReserved1=0x0, cFileName="System.Web.Extensions.dll", cAlternateFileName="")) returned 1 [0061.064] FindNextFileW (in: hFindFile=0x5107960, lpFindFileData=0x31e47c | out: lpFindFileData=0x31e47c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb6677fe6, ftCreationTime.dwHighDateTime=0x1cb892b, ftLastAccessTime.dwLowDateTime=0xb6677fe6, ftLastAccessTime.dwHighDateTime=0x1cb892b, ftLastWriteTime.dwLowDateTime=0xb669e146, ftLastWriteTime.dwHighDateTime=0x1cb892b, nFileSizeHigh=0x0, nFileSizeLow=0xf000, dwReserved0=0x0, dwReserved1=0x0, cFileName="System.Web.Routing.dll", cAlternateFileName="")) returned 1 [0061.064] FindNextFileW (in: hFindFile=0x5107960, lpFindFileData=0x31e47c | out: lpFindFileData=0x31e47c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8e608f1c, ftCreationTime.dwHighDateTime=0x1c9ea10, ftLastAccessTime.dwLowDateTime=0x8e608f1c, ftLastAccessTime.dwHighDateTime=0x1c9ea10, ftLastWriteTime.dwLowDateTime=0x8e62f07c, ftLastWriteTime.dwHighDateTime=0x1c9ea10, nFileSizeHigh=0x0, nFileSizeLow=0x3000, dwReserved0=0x0, dwReserved1=0x0, cFileName="System.Windows.Presentation.dll", cAlternateFileName="")) returned 1 [0061.064] FindNextFileW (in: hFindFile=0x5107960, lpFindFileData=0x31e47c | out: lpFindFileData=0x31e47c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb44d88e8, ftCreationTime.dwHighDateTime=0x1cb892b, ftLastAccessTime.dwLowDateTime=0xb44d88e8, ftLastAccessTime.dwHighDateTime=0x1cb892b, ftLastWriteTime.dwLowDateTime=0xb44fea48, ftLastWriteTime.dwHighDateTime=0x1cb892b, nFileSizeHigh=0x0, nFileSizeLow=0x7c000, dwReserved0=0x0, dwReserved1=0x0, cFileName="System.WorkflowServices.dll", cAlternateFileName="")) returned 1 [0061.065] FindNextFileW (in: hFindFile=0x5107960, lpFindFileData=0x31e47c | out: lpFindFileData=0x31e47c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb656d644, ftCreationTime.dwHighDateTime=0x1cb892b, ftLastAccessTime.dwLowDateTime=0xb656d644, ftLastAccessTime.dwHighDateTime=0x1cb892b, ftLastWriteTime.dwLowDateTime=0xb656d644, ftLastWriteTime.dwHighDateTime=0x1cb892b, nFileSizeHigh=0x0, nFileSizeLow=0x22000, dwReserved0=0x0, dwReserved1=0x0, cFileName="System.Xml.Linq.dll", cAlternateFileName="")) returned 1 [0061.065] FindNextFileW (in: hFindFile=0x5107960, lpFindFileData=0x31e47c | out: lpFindFileData=0x31e47c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb656d644, ftCreationTime.dwHighDateTime=0x1cb892b, ftLastAccessTime.dwLowDateTime=0xb656d644, ftLastAccessTime.dwHighDateTime=0x1cb892b, ftLastWriteTime.dwLowDateTime=0xb656d644, ftLastWriteTime.dwHighDateTime=0x1cb892b, nFileSizeHigh=0x0, nFileSizeLow=0x22000, dwReserved0=0x0, dwReserved1=0x0, cFileName="System.Xml.Linq.dll", cAlternateFileName="")) returned 0 [0061.065] FindClose (in: hFindFile=0x5107960 | out: hFindFile=0x5107960) returned 1 [0061.065] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e704) returned 1 [0061.065] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e710) returned 1 [0061.066] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e6cc) returned 1 [0061.066] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Reference Assemblies\\Microsoft\\Framework\\v3.5\\RedistList", nBufferLength=0x105, lpBuffer=0x31e1d4, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Reference Assemblies\\Microsoft\\Framework\\v3.5\\RedistList", lpFilePart=0x0) returned 0x4f [0061.066] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Reference Assemblies\\Microsoft\\Framework\\v3.5\\RedistList\\", nBufferLength=0x105, lpBuffer=0x31e1a8, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Reference Assemblies\\Microsoft\\Framework\\v3.5\\RedistList\\", lpFilePart=0x0) returned 0x50 [0061.066] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Reference Assemblies\\Microsoft\\Framework\\v3.5\\RedistList\\*", lpFindFileData=0x31e3f4 | out: lpFindFileData=0x31e3f4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x80105472, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x812b9833, ftLastAccessTime.dwHighDateTime=0x1ca0444, ftLastWriteTime.dwLowDateTime=0x812b9833, ftLastWriteTime.dwHighDateTime=0x1ca0444, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5107960 [0061.067] FindNextFileW (in: hFindFile=0x5107960, lpFindFileData=0x31e404 | out: lpFindFileData=0x31e404*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x80105472, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x812b9833, ftLastAccessTime.dwHighDateTime=0x1ca0444, ftLastWriteTime.dwLowDateTime=0x812b9833, ftLastWriteTime.dwHighDateTime=0x1ca0444, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0061.067] FindNextFileW (in: hFindFile=0x5107960, lpFindFileData=0x31e404 | out: lpFindFileData=0x31e404*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x58775f6b, ftCreationTime.dwHighDateTime=0x1ca03fe, ftLastAccessTime.dwLowDateTime=0x58775f6b, ftLastAccessTime.dwHighDateTime=0x1ca03fe, ftLastWriteTime.dwLowDateTime=0x77e270fc, ftLastWriteTime.dwHighDateTime=0x1c9ea10, nFileSizeHigh=0x0, nFileSizeLow=0x2fa0, dwReserved0=0x0, dwReserved1=0x0, cFileName="FrameworkList.xml", cAlternateFileName="")) returned 1 [0061.067] FindNextFileW (in: hFindFile=0x5107960, lpFindFileData=0x31e404 | out: lpFindFileData=0x31e404*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0061.067] FindClose (in: hFindFile=0x5107960 | out: hFindFile=0x5107960) returned 1 [0061.067] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e68c) returned 1 [0061.067] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e698) returned 1 [0061.067] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e6cc) returned 1 [0061.067] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Reference Assemblies\\Microsoft\\Framework\\v3.5\\RedistList", nBufferLength=0x105, lpBuffer=0x31e1d4, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Reference Assemblies\\Microsoft\\Framework\\v3.5\\RedistList", lpFilePart=0x0) returned 0x4f [0061.067] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Reference Assemblies\\Microsoft\\Framework\\v3.5\\RedistList\\", nBufferLength=0x105, lpBuffer=0x31e1a8, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Reference Assemblies\\Microsoft\\Framework\\v3.5\\RedistList\\", lpFilePart=0x0) returned 0x50 [0061.067] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Reference Assemblies\\Microsoft\\Framework\\v3.5\\RedistList\\*", lpFindFileData=0x31e3f4 | out: lpFindFileData=0x31e3f4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x80105472, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x812b9833, ftLastAccessTime.dwHighDateTime=0x1ca0444, ftLastWriteTime.dwLowDateTime=0x812b9833, ftLastWriteTime.dwHighDateTime=0x1ca0444, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5107960 [0061.067] FindNextFileW (in: hFindFile=0x5107960, lpFindFileData=0x31e404 | out: lpFindFileData=0x31e404*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x80105472, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x812b9833, ftLastAccessTime.dwHighDateTime=0x1ca0444, ftLastWriteTime.dwLowDateTime=0x812b9833, ftLastWriteTime.dwHighDateTime=0x1ca0444, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0061.068] FindNextFileW (in: hFindFile=0x5107960, lpFindFileData=0x31e404 | out: lpFindFileData=0x31e404*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x58775f6b, ftCreationTime.dwHighDateTime=0x1ca03fe, ftLastAccessTime.dwLowDateTime=0x58775f6b, ftLastAccessTime.dwHighDateTime=0x1ca03fe, ftLastWriteTime.dwLowDateTime=0x77e270fc, ftLastWriteTime.dwHighDateTime=0x1c9ea10, nFileSizeHigh=0x0, nFileSizeLow=0x2fa0, dwReserved0=0x0, dwReserved1=0x0, cFileName="FrameworkList.xml", cAlternateFileName="")) returned 1 [0061.068] FindNextFileW (in: hFindFile=0x5107960, lpFindFileData=0x31e404 | out: lpFindFileData=0x31e404*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x58775f6b, ftCreationTime.dwHighDateTime=0x1ca03fe, ftLastAccessTime.dwLowDateTime=0x58775f6b, ftLastAccessTime.dwHighDateTime=0x1ca03fe, ftLastWriteTime.dwLowDateTime=0x77e270fc, ftLastWriteTime.dwHighDateTime=0x1c9ea10, nFileSizeHigh=0x0, nFileSizeLow=0x2fa0, dwReserved0=0x0, dwReserved1=0x0, cFileName="FrameworkList.xml", cAlternateFileName="")) returned 0 [0061.068] FindClose (in: hFindFile=0x5107960 | out: hFindFile=0x5107960) returned 1 [0061.068] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e68c) returned 1 [0061.068] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e698) returned 1 [0061.068] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Reference Assemblies\\Microsoft\\Framework\\v3.5\\RedistList\\FrameworkList.xml", nBufferLength=0x105, lpBuffer=0x31e0a4, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Reference Assemblies\\Microsoft\\Framework\\v3.5\\RedistList\\FrameworkList.xml", lpFilePart=0x0) returned 0x61 [0061.068] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e598) returned 1 [0061.068] CreateFileW (lpFileName="C:\\Program Files (x86)\\Reference Assemblies\\Microsoft\\Framework\\v3.5\\RedistList\\FrameworkList.xml" (normalized: "c:\\program files (x86)\\reference assemblies\\microsoft\\framework\\v3.5\\redistlist\\frameworklist.xml"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x178 [0061.068] GetFileType (hFile=0x178) returned 0x1 [0061.068] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e594) returned 1 [0061.068] GetFileType (hFile=0x178) returned 0x1 [0061.068] GetFileSize (in: hFile=0x178, lpFileSizeHigh=0x31e6a0 | out: lpFileSizeHigh=0x31e6a0*=0x0) returned 0x2fa0 [0061.068] ReadFile (in: hFile=0x178, lpBuffer=0x27d6858, nNumberOfBytesToRead=0x2fa0, lpNumberOfBytesRead=0x31e64c, lpOverlapped=0x0 | out: lpBuffer=0x27d6858*, lpNumberOfBytesRead=0x31e64c*=0x2fa0, lpOverlapped=0x0) returned 1 [0061.070] CloseHandle (hObject=0x178) returned 1 [0061.109] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Reference Assemblies\\Microsoft\\Framework\\v3.5\\RedistList\\FrameworkList.xml", nBufferLength=0x105, lpBuffer=0x31e090, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Reference Assemblies\\Microsoft\\Framework\\v3.5\\RedistList\\FrameworkList.xml", lpFilePart=0x0) returned 0x61 [0061.109] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e584) returned 1 [0061.109] CreateFileW (lpFileName="C:\\Program Files (x86)\\Reference Assemblies\\Microsoft\\Framework\\v3.5\\RedistList\\FrameworkList.xml" (normalized: "c:\\program files (x86)\\reference assemblies\\microsoft\\framework\\v3.5\\redistlist\\frameworklist.xml"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0xffffffff [0061.110] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31d3c0) returned 1 [0061.110] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e6cc) returned 1 [0061.110] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Reference Assemblies\\Microsoft\\Framework\\v3.5\\SubsetList", nBufferLength=0x105, lpBuffer=0x31e1d4, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Reference Assemblies\\Microsoft\\Framework\\v3.5\\SubsetList", lpFilePart=0x0) returned 0x4f [0061.111] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Reference Assemblies\\Microsoft\\Framework\\v3.5\\SubsetList\\", nBufferLength=0x105, lpBuffer=0x31e1a8, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Reference Assemblies\\Microsoft\\Framework\\v3.5\\SubsetList\\", lpFilePart=0x0) returned 0x50 [0061.111] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Reference Assemblies\\Microsoft\\Framework\\v3.5\\SubsetList\\*", lpFindFileData=0x31e3f4 | out: lpFindFileData=0x31e3f4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x80105472, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x812b9833, ftLastAccessTime.dwHighDateTime=0x1ca0444, ftLastWriteTime.dwLowDateTime=0x812b9833, ftLastWriteTime.dwHighDateTime=0x1ca0444, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5107b60 [0061.111] FindNextFileW (in: hFindFile=0x5107b60, lpFindFileData=0x31e404 | out: lpFindFileData=0x31e404*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x80105472, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x812b9833, ftLastAccessTime.dwHighDateTime=0x1ca0444, ftLastWriteTime.dwLowDateTime=0x812b9833, ftLastWriteTime.dwHighDateTime=0x1ca0444, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0061.111] FindNextFileW (in: hFindFile=0x5107b60, lpFindFileData=0x31e404 | out: lpFindFileData=0x31e404*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5879c0ca, ftCreationTime.dwHighDateTime=0x1ca03fe, ftLastAccessTime.dwLowDateTime=0x5879c0ca, ftLastAccessTime.dwHighDateTime=0x1ca03fe, ftLastWriteTime.dwLowDateTime=0x77f7dd5c, ftLastWriteTime.dwHighDateTime=0x1c9ea10, nFileSizeHigh=0x0, nFileSizeLow=0xd76, dwReserved0=0x0, dwReserved1=0x0, cFileName="Client.xml", cAlternateFileName="")) returned 1 [0061.111] FindNextFileW (in: hFindFile=0x5107b60, lpFindFileData=0x31e404 | out: lpFindFileData=0x31e404*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0061.111] FindClose (in: hFindFile=0x5107b60 | out: hFindFile=0x5107b60) returned 1 [0061.111] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e68c) returned 1 [0061.111] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e698) returned 1 [0061.111] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e6cc) returned 1 [0061.111] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Reference Assemblies\\Microsoft\\Framework\\v3.5\\SubsetList", nBufferLength=0x105, lpBuffer=0x31e1d4, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Reference Assemblies\\Microsoft\\Framework\\v3.5\\SubsetList", lpFilePart=0x0) returned 0x4f [0061.111] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Reference Assemblies\\Microsoft\\Framework\\v3.5\\SubsetList\\", nBufferLength=0x105, lpBuffer=0x31e1a8, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Reference Assemblies\\Microsoft\\Framework\\v3.5\\SubsetList\\", lpFilePart=0x0) returned 0x50 [0061.112] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Reference Assemblies\\Microsoft\\Framework\\v3.5\\SubsetList\\*", lpFindFileData=0x31e3f4 | out: lpFindFileData=0x31e3f4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x80105472, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x812b9833, ftLastAccessTime.dwHighDateTime=0x1ca0444, ftLastWriteTime.dwLowDateTime=0x812b9833, ftLastWriteTime.dwHighDateTime=0x1ca0444, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5107b60 [0061.112] FindNextFileW (in: hFindFile=0x5107b60, lpFindFileData=0x31e404 | out: lpFindFileData=0x31e404*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x80105472, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x812b9833, ftLastAccessTime.dwHighDateTime=0x1ca0444, ftLastWriteTime.dwLowDateTime=0x812b9833, ftLastWriteTime.dwHighDateTime=0x1ca0444, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0061.112] FindNextFileW (in: hFindFile=0x5107b60, lpFindFileData=0x31e404 | out: lpFindFileData=0x31e404*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5879c0ca, ftCreationTime.dwHighDateTime=0x1ca03fe, ftLastAccessTime.dwLowDateTime=0x5879c0ca, ftLastAccessTime.dwHighDateTime=0x1ca03fe, ftLastWriteTime.dwLowDateTime=0x77f7dd5c, ftLastWriteTime.dwHighDateTime=0x1c9ea10, nFileSizeHigh=0x0, nFileSizeLow=0xd76, dwReserved0=0x0, dwReserved1=0x0, cFileName="Client.xml", cAlternateFileName="")) returned 1 [0061.112] FindNextFileW (in: hFindFile=0x5107b60, lpFindFileData=0x31e404 | out: lpFindFileData=0x31e404*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5879c0ca, ftCreationTime.dwHighDateTime=0x1ca03fe, ftLastAccessTime.dwLowDateTime=0x5879c0ca, ftLastAccessTime.dwHighDateTime=0x1ca03fe, ftLastWriteTime.dwLowDateTime=0x77f7dd5c, ftLastWriteTime.dwHighDateTime=0x1c9ea10, nFileSizeHigh=0x0, nFileSizeLow=0xd76, dwReserved0=0x0, dwReserved1=0x0, cFileName="Client.xml", cAlternateFileName="")) returned 0 [0061.112] FindClose (in: hFindFile=0x5107b60 | out: hFindFile=0x5107b60) returned 1 [0061.112] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e68c) returned 1 [0061.112] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e698) returned 1 [0061.112] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Reference Assemblies\\Microsoft\\Framework\\v3.5\\SubsetList\\Client.xml", nBufferLength=0x105, lpBuffer=0x31e0a4, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Reference Assemblies\\Microsoft\\Framework\\v3.5\\SubsetList\\Client.xml", lpFilePart=0x0) returned 0x5a [0061.112] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e598) returned 1 [0061.112] CreateFileW (lpFileName="C:\\Program Files (x86)\\Reference Assemblies\\Microsoft\\Framework\\v3.5\\SubsetList\\Client.xml" (normalized: "c:\\program files (x86)\\reference assemblies\\microsoft\\framework\\v3.5\\subsetlist\\client.xml"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x178 [0061.113] GetFileType (hFile=0x178) returned 0x1 [0061.113] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e594) returned 1 [0061.113] GetFileType (hFile=0x178) returned 0x1 [0061.113] GetFileSize (in: hFile=0x178, lpFileSizeHigh=0x31e6a0 | out: lpFileSizeHigh=0x31e6a0*=0x0) returned 0xd76 [0061.113] ReadFile (in: hFile=0x178, lpBuffer=0x2838560, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x31e64c, lpOverlapped=0x0 | out: lpBuffer=0x2838560*, lpNumberOfBytesRead=0x31e64c*=0xd76, lpOverlapped=0x0) returned 1 [0061.114] CloseHandle (hObject=0x178) returned 1 [0061.156] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Reference Assemblies\\Microsoft\\Framework\\v3.5\\SubsetList\\Client.xml", nBufferLength=0x105, lpBuffer=0x31e090, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Reference Assemblies\\Microsoft\\Framework\\v3.5\\SubsetList\\Client.xml", lpFilePart=0x0) returned 0x5a [0061.156] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e584) returned 1 [0061.156] CreateFileW (lpFileName="C:\\Program Files (x86)\\Reference Assemblies\\Microsoft\\Framework\\v3.5\\SubsetList\\Client.xml" (normalized: "c:\\program files (x86)\\reference assemblies\\microsoft\\framework\\v3.5\\subsetlist\\client.xml"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0xffffffff [0061.157] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31d3c0) returned 1 [0061.157] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e8ac) returned 1 [0061.157] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Uninstall Information", nBufferLength=0x105, lpBuffer=0x31e3b4, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Uninstall Information", lpFilePart=0x0) returned 0x2c [0061.157] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Uninstall Information\\", nBufferLength=0x105, lpBuffer=0x31e388, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Uninstall Information\\", lpFilePart=0x0) returned 0x2d [0061.157] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Uninstall Information\\*", lpFindFileData=0x31e5d4 | out: lpFindFileData=0x31e5d4*(dwFileAttributes=0x12, ftCreationTime.dwLowDateTime=0x8907f814, ftCreationTime.dwHighDateTime=0x1ca043f, ftLastAccessTime.dwLowDateTime=0xd9a78aa0, ftLastAccessTime.dwHighDateTime=0x1d5e82a, ftLastWriteTime.dwLowDateTime=0xd9a78aa0, ftLastWriteTime.dwHighDateTime=0x1d5e82a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5107960 [0061.158] FindNextFileW (in: hFindFile=0x5107960, lpFindFileData=0x31e5e4 | out: lpFindFileData=0x31e5e4*(dwFileAttributes=0x12, ftCreationTime.dwLowDateTime=0x8907f814, ftCreationTime.dwHighDateTime=0x1ca043f, ftLastAccessTime.dwLowDateTime=0xd9a78aa0, ftLastAccessTime.dwHighDateTime=0x1d5e82a, ftLastWriteTime.dwLowDateTime=0xd9a78aa0, ftLastWriteTime.dwHighDateTime=0x1d5e82a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0061.158] FindNextFileW (in: hFindFile=0x5107960, lpFindFileData=0x31e5e4 | out: lpFindFileData=0x31e5e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa3c5e0c0, ftCreationTime.dwHighDateTime=0x1d58aac, ftLastAccessTime.dwLowDateTime=0xd557d550, ftLastAccessTime.dwHighDateTime=0x1d5a170, ftLastWriteTime.dwLowDateTime=0xd557d550, ftLastWriteTime.dwHighDateTime=0x1d5a170, nFileSizeHigh=0x0, nFileSizeLow=0x13a00, dwReserved0=0x0, dwReserved1=0x0, cFileName="edcsvr.exe", cAlternateFileName="")) returned 1 [0061.158] FindNextFileW (in: hFindFile=0x5107960, lpFindFileData=0x31e5e4 | out: lpFindFileData=0x31e5e4*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0061.158] FindClose (in: hFindFile=0x5107960 | out: hFindFile=0x5107960) returned 1 [0061.158] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e86c) returned 1 [0061.158] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e878) returned 1 [0061.158] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e8ac) returned 1 [0061.158] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Uninstall Information", nBufferLength=0x105, lpBuffer=0x31e3b4, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Uninstall Information", lpFilePart=0x0) returned 0x2c [0061.158] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Uninstall Information\\", nBufferLength=0x105, lpBuffer=0x31e388, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Uninstall Information\\", lpFilePart=0x0) returned 0x2d [0061.158] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Uninstall Information\\*", lpFindFileData=0x31e5d4 | out: lpFindFileData=0x31e5d4*(dwFileAttributes=0x12, ftCreationTime.dwLowDateTime=0x8907f814, ftCreationTime.dwHighDateTime=0x1ca043f, ftLastAccessTime.dwLowDateTime=0xd9a78aa0, ftLastAccessTime.dwHighDateTime=0x1d5e82a, ftLastWriteTime.dwLowDateTime=0xd9a78aa0, ftLastWriteTime.dwHighDateTime=0x1d5e82a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5107960 [0061.158] FindNextFileW (in: hFindFile=0x5107960, lpFindFileData=0x31e5e4 | out: lpFindFileData=0x31e5e4*(dwFileAttributes=0x12, ftCreationTime.dwLowDateTime=0x8907f814, ftCreationTime.dwHighDateTime=0x1ca043f, ftLastAccessTime.dwLowDateTime=0xd9a78aa0, ftLastAccessTime.dwHighDateTime=0x1d5e82a, ftLastWriteTime.dwLowDateTime=0xd9a78aa0, ftLastWriteTime.dwHighDateTime=0x1d5e82a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0061.159] FindNextFileW (in: hFindFile=0x5107960, lpFindFileData=0x31e5e4 | out: lpFindFileData=0x31e5e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa3c5e0c0, ftCreationTime.dwHighDateTime=0x1d58aac, ftLastAccessTime.dwLowDateTime=0xd557d550, ftLastAccessTime.dwHighDateTime=0x1d5a170, ftLastWriteTime.dwLowDateTime=0xd557d550, ftLastWriteTime.dwHighDateTime=0x1d5a170, nFileSizeHigh=0x0, nFileSizeLow=0x13a00, dwReserved0=0x0, dwReserved1=0x0, cFileName="edcsvr.exe", cAlternateFileName="")) returned 1 [0061.159] FindNextFileW (in: hFindFile=0x5107960, lpFindFileData=0x31e5e4 | out: lpFindFileData=0x31e5e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa3c5e0c0, ftCreationTime.dwHighDateTime=0x1d58aac, ftLastAccessTime.dwLowDateTime=0xd557d550, ftLastAccessTime.dwHighDateTime=0x1d5a170, ftLastWriteTime.dwLowDateTime=0xd557d550, ftLastWriteTime.dwHighDateTime=0x1d5a170, nFileSizeHigh=0x0, nFileSizeLow=0x13a00, dwReserved0=0x0, dwReserved1=0x0, cFileName="edcsvr.exe", cAlternateFileName="")) returned 0 [0061.159] FindClose (in: hFindFile=0x5107960 | out: hFindFile=0x5107960) returned 1 [0061.159] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e86c) returned 1 [0061.159] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e878) returned 1 [0061.159] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e8ac) returned 1 [0061.159] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Windows Defender\\*", lpFindFileData=0x31e5d4 | out: lpFindFileData=0x31e5d4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x80105472, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0xd9a2c7e0, ftLastAccessTime.dwHighDateTime=0x1d5e82a, ftLastWriteTime.dwLowDateTime=0xd9a2c7e0, ftLastWriteTime.dwHighDateTime=0x1d5e82a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5107960 [0061.159] FindNextFileW (in: hFindFile=0x5107960, lpFindFileData=0x31e5e4 | out: lpFindFileData=0x31e5e4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x80105472, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0xd9a2c7e0, ftLastAccessTime.dwHighDateTime=0x1d5e82a, ftLastWriteTime.dwLowDateTime=0xd9a2c7e0, ftLastWriteTime.dwHighDateTime=0x1d5e82a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0061.160] FindNextFileW (in: hFindFile=0x5107960, lpFindFileData=0x31e5e4 | out: lpFindFileData=0x31e5e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x85a861b0, ftCreationTime.dwHighDateTime=0x1d5c5cd, ftLastAccessTime.dwLowDateTime=0x280b0b10, ftLastAccessTime.dwHighDateTime=0x1d5d06e, ftLastWriteTime.dwLowDateTime=0x280b0b10, ftLastWriteTime.dwHighDateTime=0x1d5d06e, nFileSizeHigh=0x0, nFileSizeLow=0x13a00, dwReserved0=0x0, dwReserved1=0x0, cFileName="accupos.exe", cAlternateFileName="")) returned 1 [0061.160] FindNextFileW (in: hFindFile=0x5107960, lpFindFileData=0x31e5e4 | out: lpFindFileData=0x31e5e4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1ea1accb, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x22bdbd7c, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x1ea1accb, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="en-US", cAlternateFileName="")) returned 1 [0061.160] FindNextFileW (in: hFindFile=0x5107960, lpFindFileData=0x31e5e4 | out: lpFindFileData=0x31e5e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xdcc1c145, ftCreationTime.dwHighDateTime=0x1ca0412, ftLastAccessTime.dwLowDateTime=0xdcc1c145, ftLastAccessTime.dwHighDateTime=0x1ca0412, ftLastWriteTime.dwLowDateTime=0x9ab7c5c0, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x2400, dwReserved0=0x0, dwReserved1=0x0, cFileName="MpAsDesc.dll", cAlternateFileName="")) returned 1 [0061.160] FindNextFileW (in: hFindFile=0x5107960, lpFindFileData=0x31e5e4 | out: lpFindFileData=0x31e5e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe7732a07, ftCreationTime.dwHighDateTime=0x1ca0412, ftLastAccessTime.dwLowDateTime=0xe7732a07, ftLastAccessTime.dwHighDateTime=0x1ca0412, ftLastWriteTime.dwLowDateTime=0x9ab7c5c0, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x5fe00, dwReserved0=0x0, dwReserved1=0x0, cFileName="MpClient.dll", cAlternateFileName="")) returned 1 [0061.160] FindNextFileW (in: hFindFile=0x5107960, lpFindFileData=0x31e5e4 | out: lpFindFileData=0x31e5e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xde9910bf, ftCreationTime.dwHighDateTime=0x1ca0412, ftLastAccessTime.dwLowDateTime=0xde9910bf, ftLastAccessTime.dwHighDateTime=0x1ca0412, ftLastWriteTime.dwLowDateTime=0x9ac13ba0, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0xd600, dwReserved0=0x0, dwReserved1=0x0, cFileName="MpOAV.dll", cAlternateFileName="")) returned 1 [0061.160] FindNextFileW (in: hFindFile=0x5107960, lpFindFileData=0x31e5e4 | out: lpFindFileData=0x31e5e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xdbe6c321, ftCreationTime.dwHighDateTime=0x1ca0412, ftLastAccessTime.dwLowDateTime=0xdbe6c321, ftLastAccessTime.dwHighDateTime=0x1ca0412, ftLastWriteTime.dwLowDateTime=0x6c6758d0, ftLastWriteTime.dwHighDateTime=0x1ca041f, nFileSizeHigh=0x0, nFileSizeLow=0x1200, dwReserved0=0x0, dwReserved1=0x0, cFileName="MsMpLics.dll", cAlternateFileName="")) returned 1 [0061.160] FindNextFileW (in: hFindFile=0x5107960, lpFindFileData=0x31e5e4 | out: lpFindFileData=0x31e5e4*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0061.160] FindClose (in: hFindFile=0x5107960 | out: hFindFile=0x5107960) returned 1 [0061.161] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e86c) returned 1 [0061.161] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e878) returned 1 [0061.161] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e8ac) returned 1 [0061.161] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Windows Defender\\*", lpFindFileData=0x31e5d4 | out: lpFindFileData=0x31e5d4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x80105472, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0xd9a2c7e0, ftLastAccessTime.dwHighDateTime=0x1d5e82a, ftLastWriteTime.dwLowDateTime=0xd9a2c7e0, ftLastWriteTime.dwHighDateTime=0x1d5e82a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5107960 [0061.161] FindNextFileW (in: hFindFile=0x5107960, lpFindFileData=0x31e5e4 | out: lpFindFileData=0x31e5e4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x80105472, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0xd9a2c7e0, ftLastAccessTime.dwHighDateTime=0x1d5e82a, ftLastWriteTime.dwLowDateTime=0xd9a2c7e0, ftLastWriteTime.dwHighDateTime=0x1d5e82a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0061.161] FindNextFileW (in: hFindFile=0x5107960, lpFindFileData=0x31e5e4 | out: lpFindFileData=0x31e5e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x85a861b0, ftCreationTime.dwHighDateTime=0x1d5c5cd, ftLastAccessTime.dwLowDateTime=0x280b0b10, ftLastAccessTime.dwHighDateTime=0x1d5d06e, ftLastWriteTime.dwLowDateTime=0x280b0b10, ftLastWriteTime.dwHighDateTime=0x1d5d06e, nFileSizeHigh=0x0, nFileSizeLow=0x13a00, dwReserved0=0x0, dwReserved1=0x0, cFileName="accupos.exe", cAlternateFileName="")) returned 1 [0061.161] FindNextFileW (in: hFindFile=0x5107960, lpFindFileData=0x31e5e4 | out: lpFindFileData=0x31e5e4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1ea1accb, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x22bdbd7c, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x1ea1accb, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="en-US", cAlternateFileName="")) returned 1 [0061.161] FindNextFileW (in: hFindFile=0x5107960, lpFindFileData=0x31e5e4 | out: lpFindFileData=0x31e5e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xdcc1c145, ftCreationTime.dwHighDateTime=0x1ca0412, ftLastAccessTime.dwLowDateTime=0xdcc1c145, ftLastAccessTime.dwHighDateTime=0x1ca0412, ftLastWriteTime.dwLowDateTime=0x9ab7c5c0, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x2400, dwReserved0=0x0, dwReserved1=0x0, cFileName="MpAsDesc.dll", cAlternateFileName="")) returned 1 [0061.161] FindNextFileW (in: hFindFile=0x5107960, lpFindFileData=0x31e5e4 | out: lpFindFileData=0x31e5e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe7732a07, ftCreationTime.dwHighDateTime=0x1ca0412, ftLastAccessTime.dwLowDateTime=0xe7732a07, ftLastAccessTime.dwHighDateTime=0x1ca0412, ftLastWriteTime.dwLowDateTime=0x9ab7c5c0, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x5fe00, dwReserved0=0x0, dwReserved1=0x0, cFileName="MpClient.dll", cAlternateFileName="")) returned 1 [0061.162] FindNextFileW (in: hFindFile=0x5107960, lpFindFileData=0x31e5e4 | out: lpFindFileData=0x31e5e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xde9910bf, ftCreationTime.dwHighDateTime=0x1ca0412, ftLastAccessTime.dwLowDateTime=0xde9910bf, ftLastAccessTime.dwHighDateTime=0x1ca0412, ftLastWriteTime.dwLowDateTime=0x9ac13ba0, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0xd600, dwReserved0=0x0, dwReserved1=0x0, cFileName="MpOAV.dll", cAlternateFileName="")) returned 1 [0061.162] FindNextFileW (in: hFindFile=0x5107960, lpFindFileData=0x31e5e4 | out: lpFindFileData=0x31e5e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xdbe6c321, ftCreationTime.dwHighDateTime=0x1ca0412, ftLastAccessTime.dwLowDateTime=0xdbe6c321, ftLastAccessTime.dwHighDateTime=0x1ca0412, ftLastWriteTime.dwLowDateTime=0x6c6758d0, ftLastWriteTime.dwHighDateTime=0x1ca041f, nFileSizeHigh=0x0, nFileSizeLow=0x1200, dwReserved0=0x0, dwReserved1=0x0, cFileName="MsMpLics.dll", cAlternateFileName="")) returned 1 [0061.162] FindNextFileW (in: hFindFile=0x5107960, lpFindFileData=0x31e5e4 | out: lpFindFileData=0x31e5e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xdbe6c321, ftCreationTime.dwHighDateTime=0x1ca0412, ftLastAccessTime.dwLowDateTime=0xdbe6c321, ftLastAccessTime.dwHighDateTime=0x1ca0412, ftLastWriteTime.dwLowDateTime=0x6c6758d0, ftLastWriteTime.dwHighDateTime=0x1ca041f, nFileSizeHigh=0x0, nFileSizeLow=0x1200, dwReserved0=0x0, dwReserved1=0x0, cFileName="MsMpLics.dll", cAlternateFileName="")) returned 0 [0061.162] FindClose (in: hFindFile=0x5107960 | out: hFindFile=0x5107960) returned 1 [0061.162] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e86c) returned 1 [0061.162] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e878) returned 1 [0061.162] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e834) returned 1 [0061.162] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Windows Defender\\en-US\\*", lpFindFileData=0x31e55c | out: lpFindFileData=0x31e55c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1ea1accb, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x22bdbd7c, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x1ea1accb, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5107960 [0061.162] FindNextFileW (in: hFindFile=0x5107960, lpFindFileData=0x31e56c | out: lpFindFileData=0x31e56c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1ea1accb, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x22bdbd7c, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x1ea1accb, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0061.163] FindNextFileW (in: hFindFile=0x5107960, lpFindFileData=0x31e56c | out: lpFindFileData=0x31e56c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xeca1847, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0xf901a42, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0xeca1847, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x8a00, dwReserved0=0x0, dwReserved1=0x0, cFileName="MpAsDesc.dll.mui", cAlternateFileName="")) returned 1 [0061.163] FindNextFileW (in: hFindFile=0x5107960, lpFindFileData=0x31e56c | out: lpFindFileData=0x31e56c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xdcf9a66, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0xe067905, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0xdcf9a66, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x3c00, dwReserved0=0x0, dwReserved1=0x0, cFileName="MpEvMsg.dll.mui", cAlternateFileName="")) returned 1 [0061.163] FindNextFileW (in: hFindFile=0x5107960, lpFindFileData=0x31e56c | out: lpFindFileData=0x31e56c*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0061.163] FindClose (in: hFindFile=0x5107960 | out: hFindFile=0x5107960) returned 1 [0061.163] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e7f4) returned 1 [0061.163] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e800) returned 1 [0061.163] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e834) returned 1 [0061.163] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Windows Defender\\en-US\\*", lpFindFileData=0x31e55c | out: lpFindFileData=0x31e55c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1ea1accb, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x22bdbd7c, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x1ea1accb, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5107960 [0061.163] FindNextFileW (in: hFindFile=0x5107960, lpFindFileData=0x31e56c | out: lpFindFileData=0x31e56c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1ea1accb, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x22bdbd7c, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x1ea1accb, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0061.164] FindNextFileW (in: hFindFile=0x5107960, lpFindFileData=0x31e56c | out: lpFindFileData=0x31e56c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xeca1847, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0xf901a42, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0xeca1847, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x8a00, dwReserved0=0x0, dwReserved1=0x0, cFileName="MpAsDesc.dll.mui", cAlternateFileName="")) returned 1 [0061.164] FindNextFileW (in: hFindFile=0x5107960, lpFindFileData=0x31e56c | out: lpFindFileData=0x31e56c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xdcf9a66, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0xe067905, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0xdcf9a66, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x3c00, dwReserved0=0x0, dwReserved1=0x0, cFileName="MpEvMsg.dll.mui", cAlternateFileName="")) returned 1 [0061.164] FindNextFileW (in: hFindFile=0x5107960, lpFindFileData=0x31e56c | out: lpFindFileData=0x31e56c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xdcf9a66, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0xe067905, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0xdcf9a66, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x3c00, dwReserved0=0x0, dwReserved1=0x0, cFileName="MpEvMsg.dll.mui", cAlternateFileName="")) returned 0 [0061.164] FindClose (in: hFindFile=0x5107960 | out: hFindFile=0x5107960) returned 1 [0061.164] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e7f4) returned 1 [0061.164] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e800) returned 1 [0061.164] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e8ac) returned 1 [0061.164] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Windows Mail\\*", lpFindFileData=0x31e5d4 | out: lpFindFileData=0x31e5d4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd91d5ea, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xd9a9ec00, ftLastAccessTime.dwHighDateTime=0x1d5e82a, ftLastWriteTime.dwLowDateTime=0xd9a9ec00, ftLastWriteTime.dwHighDateTime=0x1d5e82a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5107960 [0061.164] FindNextFileW (in: hFindFile=0x5107960, lpFindFileData=0x31e5e4 | out: lpFindFileData=0x31e5e4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd91d5ea, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xd9a9ec00, ftLastAccessTime.dwHighDateTime=0x1d5e82a, ftLastWriteTime.dwLowDateTime=0xd9a9ec00, ftLastWriteTime.dwHighDateTime=0x1d5e82a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0061.165] FindNextFileW (in: hFindFile=0x5107960, lpFindFileData=0x31e5e4 | out: lpFindFileData=0x31e5e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb5d906f0, ftCreationTime.dwHighDateTime=0x1d5b1af, ftLastAccessTime.dwLowDateTime=0x85412420, ftLastAccessTime.dwHighDateTime=0x1d5b987, ftLastWriteTime.dwLowDateTime=0x85412420, ftLastWriteTime.dwHighDateTime=0x1d5b987, nFileSizeHigh=0x0, nFileSizeLow=0x13a00, dwReserved0=0x0, dwReserved1=0x0, cFileName="ccv_server.exe", cAlternateFileName="CCV_SE~1.EXE")) returned 1 [0061.165] FindNextFileW (in: hFindFile=0x5107960, lpFindFileData=0x31e5e4 | out: lpFindFileData=0x31e5e4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1ea6723d, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x229eba17, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x1ea6723d, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="en-US", cAlternateFileName="")) returned 1 [0061.165] FindNextFileW (in: hFindFile=0x5107960, lpFindFileData=0x31e5e4 | out: lpFindFileData=0x31e5e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb9085380, ftCreationTime.dwHighDateTime=0x1d5b876, ftLastAccessTime.dwLowDateTime=0x6c0df1f0, ftLastAccessTime.dwHighDateTime=0x1d59d52, ftLastWriteTime.dwLowDateTime=0x6c0df1f0, ftLastWriteTime.dwHighDateTime=0x1d59d52, nFileSizeHigh=0x0, nFileSizeLow=0x13a00, dwReserved0=0x0, dwReserved1=0x0, cFileName="leechftp.exe", cAlternateFileName="")) returned 1 [0061.165] FindNextFileW (in: hFindFile=0x5107960, lpFindFileData=0x31e5e4 | out: lpFindFileData=0x31e5e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb3b530d7, ftCreationTime.dwHighDateTime=0x1cb892b, ftLastAccessTime.dwLowDateTime=0xb3b530d7, ftLastAccessTime.dwHighDateTime=0x1cb892b, ftLastWriteTime.dwLowDateTime=0xb3b9f397, ftLastWriteTime.dwHighDateTime=0x1cb892b, nFileSizeHigh=0x0, nFileSizeLow=0x18b800, dwReserved0=0x0, dwReserved1=0x0, cFileName="msoe.dll", cAlternateFileName="")) returned 1 [0061.165] FindNextFileW (in: hFindFile=0x5107960, lpFindFileData=0x31e5e4 | out: lpFindFileData=0x31e5e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9e00b0b6, ftCreationTime.dwHighDateTime=0x1ca0413, ftLastAccessTime.dwLowDateTime=0x9e00b0b6, ftLastAccessTime.dwHighDateTime=0x1ca0413, ftLastWriteTime.dwLowDateTime=0x6cf87540, ftLastWriteTime.dwHighDateTime=0x1ca041f, nFileSizeHigh=0x0, nFileSizeLow=0x2b4a00, dwReserved0=0x0, dwReserved1=0x0, cFileName="MSOERES.dll", cAlternateFileName="")) returned 1 [0061.165] FindNextFileW (in: hFindFile=0x5107960, lpFindFileData=0x31e5e4 | out: lpFindFileData=0x31e5e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb3b9f397, ftCreationTime.dwHighDateTime=0x1cb892b, ftLastAccessTime.dwLowDateTime=0xb3b9f397, ftLastAccessTime.dwHighDateTime=0x1cb892b, ftLastWriteTime.dwLowDateTime=0xb3b9f397, ftLastWriteTime.dwHighDateTime=0x1cb892b, nFileSizeHigh=0x0, nFileSizeLow=0x13e00, dwReserved0=0x0, dwReserved1=0x0, cFileName="oeimport.dll", cAlternateFileName="")) returned 1 [0061.165] FindNextFileW (in: hFindFile=0x5107960, lpFindFileData=0x31e5e4 | out: lpFindFileData=0x31e5e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x19ac6b90, ftCreationTime.dwHighDateTime=0x1d5cb50, ftLastAccessTime.dwLowDateTime=0x8483f500, ftLastAccessTime.dwHighDateTime=0x1d588bb, ftLastWriteTime.dwLowDateTime=0x8483f500, ftLastWriteTime.dwHighDateTime=0x1d588bb, nFileSizeHigh=0x0, nFileSizeLow=0x13a00, dwReserved0=0x0, dwReserved1=0x0, cFileName="smartftp.exe", cAlternateFileName="")) returned 1 [0061.165] FindNextFileW (in: hFindFile=0x5107960, lpFindFileData=0x31e5e4 | out: lpFindFileData=0x31e5e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd9c44230, ftCreationTime.dwHighDateTime=0x1d58ecf, ftLastAccessTime.dwLowDateTime=0xd74f8330, ftLastAccessTime.dwHighDateTime=0x1d59f9a, ftLastWriteTime.dwLowDateTime=0xd74f8330, ftLastWriteTime.dwHighDateTime=0x1d59f9a, nFileSizeHigh=0x0, nFileSizeLow=0x13a00, dwReserved0=0x0, dwReserved1=0x0, cFileName="spcwin.exe", cAlternateFileName="")) returned 1 [0061.165] FindNextFileW (in: hFindFile=0x5107960, lpFindFileData=0x31e5e4 | out: lpFindFileData=0x31e5e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x551d7ae0, ftCreationTime.dwHighDateTime=0x1d57969, ftLastAccessTime.dwLowDateTime=0xecf87150, ftLastAccessTime.dwHighDateTime=0x1d5b107, ftLastWriteTime.dwLowDateTime=0xecf87150, ftLastWriteTime.dwHighDateTime=0x1d5b107, nFileSizeHigh=0x0, nFileSizeLow=0x13a00, dwReserved0=0x0, dwReserved1=0x0, cFileName="spgagentservice.exe", cAlternateFileName="SPGAGE~1.EXE")) returned 1 [0061.166] FindNextFileW (in: hFindFile=0x5107960, lpFindFileData=0x31e5e4 | out: lpFindFileData=0x31e5e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x879b1223, ftCreationTime.dwHighDateTime=0x1cb892b, ftLastAccessTime.dwLowDateTime=0x879b1223, ftLastAccessTime.dwHighDateTime=0x1cb892b, ftLastWriteTime.dwLowDateTime=0x87a95a65, ftLastWriteTime.dwHighDateTime=0x1cb892b, nFileSizeHigh=0x0, nFileSizeLow=0x7e000, dwReserved0=0x0, dwReserved1=0x0, cFileName="wab.exe", cAlternateFileName="")) returned 1 [0061.166] FindNextFileW (in: hFindFile=0x5107960, lpFindFileData=0x31e5e4 | out: lpFindFileData=0x31e5e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8a77900b, ftCreationTime.dwHighDateTime=0x1ca0413, ftLastAccessTime.dwLowDateTime=0x8a77900b, ftLastAccessTime.dwHighDateTime=0x1ca0413, ftLastWriteTime.dwLowDateTime=0xb04ef6b0, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x8200, dwReserved0=0x0, dwReserved1=0x0, cFileName="wabfind.dll", cAlternateFileName="")) returned 1 [0061.166] FindNextFileW (in: hFindFile=0x5107960, lpFindFileData=0x31e5e4 | out: lpFindFileData=0x31e5e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8a1aba92, ftCreationTime.dwHighDateTime=0x1ca0413, ftLastAccessTime.dwLowDateTime=0x8a1aba92, ftLastAccessTime.dwHighDateTime=0x1ca0413, ftLastWriteTime.dwLowDateTime=0xb05167b0, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0xa400, dwReserved0=0x0, dwReserved1=0x0, cFileName="wabimp.dll", cAlternateFileName="")) returned 1 [0061.166] FindNextFileW (in: hFindFile=0x5107960, lpFindFileData=0x31e5e4 | out: lpFindFileData=0x31e5e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8c2b2af4, ftCreationTime.dwHighDateTime=0x1ca0413, ftLastAccessTime.dwLowDateTime=0x8c2b2af4, ftLastAccessTime.dwHighDateTime=0x1ca0413, ftLastWriteTime.dwLowDateTime=0x78aae250, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x10000, dwReserved0=0x0, dwReserved1=0x0, cFileName="wabmig.exe", cAlternateFileName="")) returned 1 [0061.166] FindNextFileW (in: hFindFile=0x5107960, lpFindFileData=0x31e5e4 | out: lpFindFileData=0x31e5e4*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0x8e771d9d, ftCreationTime.dwHighDateTime=0x1ca0413, ftLastAccessTime.dwLowDateTime=0x8e771d9d, ftLastAccessTime.dwHighDateTime=0x1ca0413, ftLastWriteTime.dwLowDateTime=0x796bc150, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x60e00, dwReserved0=0x0, dwReserved1=0x0, cFileName="WinMail.exe", cAlternateFileName="")) returned 1 [0061.166] FindNextFileW (in: hFindFile=0x5107960, lpFindFileData=0x31e5e4 | out: lpFindFileData=0x31e5e4*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0061.166] FindClose (in: hFindFile=0x5107960 | out: hFindFile=0x5107960) returned 1 [0061.166] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e86c) returned 1 [0061.166] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e878) returned 1 [0061.166] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e8ac) returned 1 [0061.166] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Windows Mail\\*", lpFindFileData=0x31e5d4 | out: lpFindFileData=0x31e5d4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd91d5ea, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xd9a9ec00, ftLastAccessTime.dwHighDateTime=0x1d5e82a, ftLastWriteTime.dwLowDateTime=0xd9a9ec00, ftLastWriteTime.dwHighDateTime=0x1d5e82a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5107960 [0061.167] FindNextFileW (in: hFindFile=0x5107960, lpFindFileData=0x31e5e4 | out: lpFindFileData=0x31e5e4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd91d5ea, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xd9a9ec00, ftLastAccessTime.dwHighDateTime=0x1d5e82a, ftLastWriteTime.dwLowDateTime=0xd9a9ec00, ftLastWriteTime.dwHighDateTime=0x1d5e82a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0061.167] FindNextFileW (in: hFindFile=0x5107960, lpFindFileData=0x31e5e4 | out: lpFindFileData=0x31e5e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb5d906f0, ftCreationTime.dwHighDateTime=0x1d5b1af, ftLastAccessTime.dwLowDateTime=0x85412420, ftLastAccessTime.dwHighDateTime=0x1d5b987, ftLastWriteTime.dwLowDateTime=0x85412420, ftLastWriteTime.dwHighDateTime=0x1d5b987, nFileSizeHigh=0x0, nFileSizeLow=0x13a00, dwReserved0=0x0, dwReserved1=0x0, cFileName="ccv_server.exe", cAlternateFileName="CCV_SE~1.EXE")) returned 1 [0061.167] FindNextFileW (in: hFindFile=0x5107960, lpFindFileData=0x31e5e4 | out: lpFindFileData=0x31e5e4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1ea6723d, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x229eba17, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x1ea6723d, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="en-US", cAlternateFileName="")) returned 1 [0061.167] FindNextFileW (in: hFindFile=0x5107960, lpFindFileData=0x31e5e4 | out: lpFindFileData=0x31e5e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb9085380, ftCreationTime.dwHighDateTime=0x1d5b876, ftLastAccessTime.dwLowDateTime=0x6c0df1f0, ftLastAccessTime.dwHighDateTime=0x1d59d52, ftLastWriteTime.dwLowDateTime=0x6c0df1f0, ftLastWriteTime.dwHighDateTime=0x1d59d52, nFileSizeHigh=0x0, nFileSizeLow=0x13a00, dwReserved0=0x0, dwReserved1=0x0, cFileName="leechftp.exe", cAlternateFileName="")) returned 1 [0061.167] FindNextFileW (in: hFindFile=0x5107960, lpFindFileData=0x31e5e4 | out: lpFindFileData=0x31e5e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb3b530d7, ftCreationTime.dwHighDateTime=0x1cb892b, ftLastAccessTime.dwLowDateTime=0xb3b530d7, ftLastAccessTime.dwHighDateTime=0x1cb892b, ftLastWriteTime.dwLowDateTime=0xb3b9f397, ftLastWriteTime.dwHighDateTime=0x1cb892b, nFileSizeHigh=0x0, nFileSizeLow=0x18b800, dwReserved0=0x0, dwReserved1=0x0, cFileName="msoe.dll", cAlternateFileName="")) returned 1 [0061.167] FindNextFileW (in: hFindFile=0x5107960, lpFindFileData=0x31e5e4 | out: lpFindFileData=0x31e5e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9e00b0b6, ftCreationTime.dwHighDateTime=0x1ca0413, ftLastAccessTime.dwLowDateTime=0x9e00b0b6, ftLastAccessTime.dwHighDateTime=0x1ca0413, ftLastWriteTime.dwLowDateTime=0x6cf87540, ftLastWriteTime.dwHighDateTime=0x1ca041f, nFileSizeHigh=0x0, nFileSizeLow=0x2b4a00, dwReserved0=0x0, dwReserved1=0x0, cFileName="MSOERES.dll", cAlternateFileName="")) returned 1 [0061.167] FindNextFileW (in: hFindFile=0x5107960, lpFindFileData=0x31e5e4 | out: lpFindFileData=0x31e5e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb3b9f397, ftCreationTime.dwHighDateTime=0x1cb892b, ftLastAccessTime.dwLowDateTime=0xb3b9f397, ftLastAccessTime.dwHighDateTime=0x1cb892b, ftLastWriteTime.dwLowDateTime=0xb3b9f397, ftLastWriteTime.dwHighDateTime=0x1cb892b, nFileSizeHigh=0x0, nFileSizeLow=0x13e00, dwReserved0=0x0, dwReserved1=0x0, cFileName="oeimport.dll", cAlternateFileName="")) returned 1 [0061.168] FindNextFileW (in: hFindFile=0x5107960, lpFindFileData=0x31e5e4 | out: lpFindFileData=0x31e5e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x19ac6b90, ftCreationTime.dwHighDateTime=0x1d5cb50, ftLastAccessTime.dwLowDateTime=0x8483f500, ftLastAccessTime.dwHighDateTime=0x1d588bb, ftLastWriteTime.dwLowDateTime=0x8483f500, ftLastWriteTime.dwHighDateTime=0x1d588bb, nFileSizeHigh=0x0, nFileSizeLow=0x13a00, dwReserved0=0x0, dwReserved1=0x0, cFileName="smartftp.exe", cAlternateFileName="")) returned 1 [0061.168] FindNextFileW (in: hFindFile=0x5107960, lpFindFileData=0x31e5e4 | out: lpFindFileData=0x31e5e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd9c44230, ftCreationTime.dwHighDateTime=0x1d58ecf, ftLastAccessTime.dwLowDateTime=0xd74f8330, ftLastAccessTime.dwHighDateTime=0x1d59f9a, ftLastWriteTime.dwLowDateTime=0xd74f8330, ftLastWriteTime.dwHighDateTime=0x1d59f9a, nFileSizeHigh=0x0, nFileSizeLow=0x13a00, dwReserved0=0x0, dwReserved1=0x0, cFileName="spcwin.exe", cAlternateFileName="")) returned 1 [0061.168] FindNextFileW (in: hFindFile=0x5107960, lpFindFileData=0x31e5e4 | out: lpFindFileData=0x31e5e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x551d7ae0, ftCreationTime.dwHighDateTime=0x1d57969, ftLastAccessTime.dwLowDateTime=0xecf87150, ftLastAccessTime.dwHighDateTime=0x1d5b107, ftLastWriteTime.dwLowDateTime=0xecf87150, ftLastWriteTime.dwHighDateTime=0x1d5b107, nFileSizeHigh=0x0, nFileSizeLow=0x13a00, dwReserved0=0x0, dwReserved1=0x0, cFileName="spgagentservice.exe", cAlternateFileName="SPGAGE~1.EXE")) returned 1 [0061.168] FindNextFileW (in: hFindFile=0x5107960, lpFindFileData=0x31e5e4 | out: lpFindFileData=0x31e5e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x879b1223, ftCreationTime.dwHighDateTime=0x1cb892b, ftLastAccessTime.dwLowDateTime=0x879b1223, ftLastAccessTime.dwHighDateTime=0x1cb892b, ftLastWriteTime.dwLowDateTime=0x87a95a65, ftLastWriteTime.dwHighDateTime=0x1cb892b, nFileSizeHigh=0x0, nFileSizeLow=0x7e000, dwReserved0=0x0, dwReserved1=0x0, cFileName="wab.exe", cAlternateFileName="")) returned 1 [0061.168] FindNextFileW (in: hFindFile=0x5107960, lpFindFileData=0x31e5e4 | out: lpFindFileData=0x31e5e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8a77900b, ftCreationTime.dwHighDateTime=0x1ca0413, ftLastAccessTime.dwLowDateTime=0x8a77900b, ftLastAccessTime.dwHighDateTime=0x1ca0413, ftLastWriteTime.dwLowDateTime=0xb04ef6b0, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x8200, dwReserved0=0x0, dwReserved1=0x0, cFileName="wabfind.dll", cAlternateFileName="")) returned 1 [0061.168] FindNextFileW (in: hFindFile=0x5107960, lpFindFileData=0x31e5e4 | out: lpFindFileData=0x31e5e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8a1aba92, ftCreationTime.dwHighDateTime=0x1ca0413, ftLastAccessTime.dwLowDateTime=0x8a1aba92, ftLastAccessTime.dwHighDateTime=0x1ca0413, ftLastWriteTime.dwLowDateTime=0xb05167b0, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0xa400, dwReserved0=0x0, dwReserved1=0x0, cFileName="wabimp.dll", cAlternateFileName="")) returned 1 [0061.169] FindNextFileW (in: hFindFile=0x5107960, lpFindFileData=0x31e5e4 | out: lpFindFileData=0x31e5e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8c2b2af4, ftCreationTime.dwHighDateTime=0x1ca0413, ftLastAccessTime.dwLowDateTime=0x8c2b2af4, ftLastAccessTime.dwHighDateTime=0x1ca0413, ftLastWriteTime.dwLowDateTime=0x78aae250, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x10000, dwReserved0=0x0, dwReserved1=0x0, cFileName="wabmig.exe", cAlternateFileName="")) returned 1 [0061.169] FindNextFileW (in: hFindFile=0x5107960, lpFindFileData=0x31e5e4 | out: lpFindFileData=0x31e5e4*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0x8e771d9d, ftCreationTime.dwHighDateTime=0x1ca0413, ftLastAccessTime.dwLowDateTime=0x8e771d9d, ftLastAccessTime.dwHighDateTime=0x1ca0413, ftLastWriteTime.dwLowDateTime=0x796bc150, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x60e00, dwReserved0=0x0, dwReserved1=0x0, cFileName="WinMail.exe", cAlternateFileName="")) returned 1 [0061.169] FindNextFileW (in: hFindFile=0x5107960, lpFindFileData=0x31e5e4 | out: lpFindFileData=0x31e5e4*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0x8e771d9d, ftCreationTime.dwHighDateTime=0x1ca0413, ftLastAccessTime.dwLowDateTime=0x8e771d9d, ftLastAccessTime.dwHighDateTime=0x1ca0413, ftLastWriteTime.dwLowDateTime=0x796bc150, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x60e00, dwReserved0=0x0, dwReserved1=0x0, cFileName="WinMail.exe", cAlternateFileName="")) returned 0 [0061.169] FindClose (in: hFindFile=0x5107960 | out: hFindFile=0x5107960) returned 1 [0061.169] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e86c) returned 1 [0061.169] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e878) returned 1 [0061.169] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e834) returned 1 [0061.169] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Windows Mail\\en-US\\*", lpFindFileData=0x31e55c | out: lpFindFileData=0x31e55c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1ea6723d, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x229eba17, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x1ea6723d, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5107960 [0061.169] FindNextFileW (in: hFindFile=0x5107960, lpFindFileData=0x31e56c | out: lpFindFileData=0x31e56c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1ea6723d, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x229eba17, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x1ea6723d, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0061.170] FindNextFileW (in: hFindFile=0x5107960, lpFindFileData=0x31e56c | out: lpFindFileData=0x31e56c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe506d6c, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0xe874c0b, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0xe506d6c, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x7e800, dwReserved0=0x0, dwReserved1=0x0, cFileName="msoeres.dll.mui", cAlternateFileName="")) returned 1 [0061.170] FindNextFileW (in: hFindFile=0x5107960, lpFindFileData=0x31e56c | out: lpFindFileData=0x31e56c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xdd1fd1f, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0xe067905, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0xdd1fd1f, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x1600, dwReserved0=0x0, dwReserved1=0x0, cFileName="WinMail.exe.mui", cAlternateFileName="")) returned 1 [0061.170] FindNextFileW (in: hFindFile=0x5107960, lpFindFileData=0x31e56c | out: lpFindFileData=0x31e56c*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0061.170] FindClose (in: hFindFile=0x5107960 | out: hFindFile=0x5107960) returned 1 [0061.170] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e7f4) returned 1 [0061.170] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e800) returned 1 [0061.170] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e834) returned 1 [0061.170] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Windows Mail\\en-US\\*", lpFindFileData=0x31e55c | out: lpFindFileData=0x31e55c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1ea6723d, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x229eba17, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x1ea6723d, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5107960 [0061.170] FindNextFileW (in: hFindFile=0x5107960, lpFindFileData=0x31e56c | out: lpFindFileData=0x31e56c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1ea6723d, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x229eba17, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x1ea6723d, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0061.170] FindNextFileW (in: hFindFile=0x5107960, lpFindFileData=0x31e56c | out: lpFindFileData=0x31e56c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe506d6c, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0xe874c0b, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0xe506d6c, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x7e800, dwReserved0=0x0, dwReserved1=0x0, cFileName="msoeres.dll.mui", cAlternateFileName="")) returned 1 [0061.171] FindNextFileW (in: hFindFile=0x5107960, lpFindFileData=0x31e56c | out: lpFindFileData=0x31e56c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xdd1fd1f, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0xe067905, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0xdd1fd1f, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x1600, dwReserved0=0x0, dwReserved1=0x0, cFileName="WinMail.exe.mui", cAlternateFileName="")) returned 1 [0061.171] FindNextFileW (in: hFindFile=0x5107960, lpFindFileData=0x31e56c | out: lpFindFileData=0x31e56c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xdd1fd1f, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0xe067905, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0xdd1fd1f, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x1600, dwReserved0=0x0, dwReserved1=0x0, cFileName="WinMail.exe.mui", cAlternateFileName="")) returned 0 [0061.171] FindClose (in: hFindFile=0x5107960 | out: hFindFile=0x5107960) returned 1 [0061.171] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e7f4) returned 1 [0061.171] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e800) returned 1 [0061.171] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e8ac) returned 1 [0061.171] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Windows Media Player\\*", lpFindFileData=0x31e5d4 | out: lpFindFileData=0x31e5d4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x80105472, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0xd9a2c7e0, ftLastAccessTime.dwHighDateTime=0x1d5e82a, ftLastWriteTime.dwLowDateTime=0xd9a2c7e0, ftLastWriteTime.dwHighDateTime=0x1d5e82a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5107960 [0061.171] FindNextFileW (in: hFindFile=0x5107960, lpFindFileData=0x31e5e4 | out: lpFindFileData=0x31e5e4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x80105472, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0xd9a2c7e0, ftLastAccessTime.dwHighDateTime=0x1d5e82a, ftLastWriteTime.dwLowDateTime=0xd9a2c7e0, ftLastWriteTime.dwHighDateTime=0x1d5e82a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0061.171] FindNextFileW (in: hFindFile=0x5107960, lpFindFileData=0x31e5e4 | out: lpFindFileData=0x31e5e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6a37bb0, ftCreationTime.dwHighDateTime=0x1d5dc1c, ftLastAccessTime.dwLowDateTime=0xba53cff0, ftLastAccessTime.dwHighDateTime=0x1d59e43, ftLastWriteTime.dwLowDateTime=0xba53cff0, ftLastWriteTime.dwHighDateTime=0x1d59e43, nFileSizeHigh=0x0, nFileSizeLow=0x13a00, dwReserved0=0x0, dwReserved1=0x0, cFileName="colonmaximum.exe", cAlternateFileName="COLONM~1.EXE")) returned 1 [0061.171] FindNextFileW (in: hFindFile=0x5107960, lpFindFileData=0x31e5e4 | out: lpFindFileData=0x31e5e4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1ea40f84, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x21ca67c6, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x1ea40f84, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="en-US", cAlternateFileName="")) returned 1 [0061.172] FindNextFileW (in: hFindFile=0x5107960, lpFindFileData=0x31e5e4 | out: lpFindFileData=0x31e5e4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x80105472, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x80105472, ftLastAccessTime.dwHighDateTime=0x1ca0444, ftLastWriteTime.dwLowDateTime=0x80105472, ftLastWriteTime.dwHighDateTime=0x1ca0444, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Icons", cAlternateFileName="")) returned 1 [0061.172] FindNextFileW (in: hFindFile=0x5107960, lpFindFileData=0x31e5e4 | out: lpFindFileData=0x31e5e4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x80105472, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x81351db4, ftLastAccessTime.dwHighDateTime=0x1ca0444, ftLastWriteTime.dwLowDateTime=0x81351db4, ftLastWriteTime.dwHighDateTime=0x1ca0444, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Media Renderer", cAlternateFileName="MEDIAR~1")) returned 1 [0061.172] FindNextFileW (in: hFindFile=0x5107960, lpFindFileData=0x31e5e4 | out: lpFindFileData=0x31e5e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5da15071, ftCreationTime.dwHighDateTime=0x1ca0417, ftLastAccessTime.dwLowDateTime=0x5da15071, ftLastAccessTime.dwHighDateTime=0x1ca0417, ftLastWriteTime.dwLowDateTime=0x9b03e9f0, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x25a00, dwReserved0=0x0, dwReserved1=0x0, cFileName="mpvis.DLL", cAlternateFileName="")) returned 1 [0061.172] FindNextFileW (in: hFindFile=0x5107960, lpFindFileData=0x31e5e4 | out: lpFindFileData=0x31e5e4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8012b5d2, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x8012b5d2, ftLastAccessTime.dwHighDateTime=0x1ca0444, ftLastWriteTime.dwLowDateTime=0x8012b5d2, ftLastWriteTime.dwHighDateTime=0x1ca0444, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Network Sharing", cAlternateFileName="NETWOR~1")) returned 1 [0061.172] FindNextFileW (in: hFindFile=0x5107960, lpFindFileData=0x31e5e4 | out: lpFindFileData=0x31e5e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb3e72dbc, ftCreationTime.dwHighDateTime=0x1cb892b, ftLastAccessTime.dwLowDateTime=0xb3e72dbc, ftLastAccessTime.dwHighDateTime=0x1cb892b, ftLastWriteTime.dwLowDateTime=0xb3e98f1d, ftLastWriteTime.dwHighDateTime=0x1cb892b, nFileSizeHigh=0x0, nFileSizeLow=0x1eb600, dwReserved0=0x0, dwReserved1=0x0, cFileName="setup_wm.exe", cAlternateFileName="")) returned 1 [0061.172] FindNextFileW (in: hFindFile=0x5107960, lpFindFileData=0x31e5e4 | out: lpFindFileData=0x31e5e4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x80105472, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x9b6c2483, ftLastAccessTime.dwHighDateTime=0x1cb892c, ftLastWriteTime.dwLowDateTime=0x9b6c2483, ftLastWriteTime.dwHighDateTime=0x1cb892c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Skins", cAlternateFileName="")) returned 1 [0061.172] FindNextFileW (in: hFindFile=0x5107960, lpFindFileData=0x31e5e4 | out: lpFindFileData=0x31e5e4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x80105472, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x80105472, ftLastAccessTime.dwHighDateTime=0x1ca0444, ftLastWriteTime.dwLowDateTime=0x80105472, ftLastWriteTime.dwHighDateTime=0x1ca0444, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Visualizations", cAlternateFileName="VISUAL~1")) returned 1 [0061.173] FindNextFileW (in: hFindFile=0x5107960, lpFindFileData=0x31e5e4 | out: lpFindFileData=0x31e5e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb3ee51dd, ftCreationTime.dwHighDateTime=0x1cb892b, ftLastAccessTime.dwLowDateTime=0xb3ee51dd, ftLastAccessTime.dwHighDateTime=0x1cb892b, ftLastWriteTime.dwLowDateTime=0xb3f0b33d, ftLastWriteTime.dwHighDateTime=0x1cb892b, nFileSizeHigh=0x0, nFileSizeLow=0x37c00, dwReserved0=0x0, dwReserved1=0x0, cFileName="wmlaunch.exe", cAlternateFileName="")) returned 1 [0061.173] FindNextFileW (in: hFindFile=0x5107960, lpFindFileData=0x31e5e4 | out: lpFindFileData=0x31e5e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb3f0b33d, ftCreationTime.dwHighDateTime=0x1cb892b, ftLastAccessTime.dwLowDateTime=0xb3f0b33d, ftLastAccessTime.dwHighDateTime=0x1cb892b, ftLastWriteTime.dwLowDateTime=0xb3f0b33d, ftLastWriteTime.dwHighDateTime=0x1cb892b, nFileSizeHigh=0x0, nFileSizeLow=0x18e00, dwReserved0=0x0, dwReserved1=0x0, cFileName="wmpconfig.exe", cAlternateFileName="")) returned 1 [0061.173] FindNextFileW (in: hFindFile=0x5107960, lpFindFileData=0x31e5e4 | out: lpFindFileData=0x31e5e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb669e146, ftCreationTime.dwHighDateTime=0x1cb892b, ftLastAccessTime.dwLowDateTime=0xb669e146, ftLastAccessTime.dwHighDateTime=0x1cb892b, ftLastWriteTime.dwLowDateTime=0xb66c42a7, ftLastWriteTime.dwHighDateTime=0x1cb892b, nFileSizeHigh=0x0, nFileSizeLow=0xf0000, dwReserved0=0x0, dwReserved1=0x0, cFileName="WMPDMC.exe", cAlternateFileName="")) returned 1 [0061.173] FindNextFileW (in: hFindFile=0x5107960, lpFindFileData=0x31e5e4 | out: lpFindFileData=0x31e5e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x42b8907f, ftCreationTime.dwHighDateTime=0x1ca0417, ftLastAccessTime.dwLowDateTime=0x42b8907f, ftLastAccessTime.dwHighDateTime=0x1ca0417, ftLastWriteTime.dwLowDateTime=0xb19c3730, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x4f200, dwReserved0=0x0, dwReserved1=0x0, cFileName="WMPDMCCore.dll", cAlternateFileName="")) returned 1 [0061.173] FindNextFileW (in: hFindFile=0x5107960, lpFindFileData=0x31e5e4 | out: lpFindFileData=0x31e5e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4fdc01da, ftCreationTime.dwHighDateTime=0x1ca0417, ftLastAccessTime.dwLowDateTime=0x4fdc01da, ftLastAccessTime.dwHighDateTime=0x1ca0417, ftLastWriteTime.dwLowDateTime=0x7a92dc30, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x5e00, dwReserved0=0x0, dwReserved1=0x0, cFileName="wmpenc.exe", cAlternateFileName="")) returned 1 [0061.173] FindNextFileW (in: hFindFile=0x5107960, lpFindFileData=0x31e5e4 | out: lpFindFileData=0x31e5e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb3f3149e, ftCreationTime.dwHighDateTime=0x1cb892b, ftLastAccessTime.dwLowDateTime=0xb3f3149e, ftLastAccessTime.dwHighDateTime=0x1cb892b, ftLastWriteTime.dwLowDateTime=0xb3f3149e, ftLastWriteTime.dwHighDateTime=0x1cb892b, nFileSizeHigh=0x0, nFileSizeLow=0x28400, dwReserved0=0x0, dwReserved1=0x0, cFileName="wmplayer.exe", cAlternateFileName="")) returned 1 [0061.173] FindNextFileW (in: hFindFile=0x5107960, lpFindFileData=0x31e5e4 | out: lpFindFileData=0x31e5e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5749e95b, ftCreationTime.dwHighDateTime=0x1ca0417, ftLastAccessTime.dwLowDateTime=0x5749e95b, ftLastAccessTime.dwHighDateTime=0x1ca0417, ftLastWriteTime.dwLowDateTime=0xb19ea830, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x20a00, dwReserved0=0x0, dwReserved1=0x0, cFileName="WMPMediaSharing.dll", cAlternateFileName="")) returned 1 [0061.173] FindNextFileW (in: hFindFile=0x5107960, lpFindFileData=0x31e5e4 | out: lpFindFileData=0x31e5e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x59c0b4b2, ftCreationTime.dwHighDateTime=0x1ca0417, ftLastAccessTime.dwLowDateTime=0x59c0b4b2, ftLastAccessTime.dwHighDateTime=0x1ca0417, ftLastWriteTime.dwLowDateTime=0xb19ea830, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x73400, dwReserved0=0x0, dwReserved1=0x0, cFileName="wmpnssci.dll", cAlternateFileName="")) returned 1 [0061.173] FindNextFileW (in: hFindFile=0x5107960, lpFindFileData=0x31e5e4 | out: lpFindFileData=0x31e5e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4041c528, ftCreationTime.dwHighDateTime=0x1ca0417, ftLastAccessTime.dwLowDateTime=0x4041c528, ftLastAccessTime.dwHighDateTime=0x1ca0417, ftLastWriteTime.dwLowDateTime=0xb1a36320, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x7c00, dwReserved0=0x0, dwReserved1=0x0, cFileName="WMPNSSUI.dll", cAlternateFileName="")) returned 1 [0061.174] FindNextFileW (in: hFindFile=0x5107960, lpFindFileData=0x31e5e4 | out: lpFindFileData=0x31e5e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x53bc9d99, ftCreationTime.dwHighDateTime=0x1ca0417, ftLastAccessTime.dwLowDateTime=0x53bc9d99, ftLastAccessTime.dwHighDateTime=0x1ca0417, ftLastWriteTime.dwLowDateTime=0x7ad31980, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0xf600, dwReserved0=0x0, dwReserved1=0x0, cFileName="wmprph.exe", cAlternateFileName="")) returned 1 [0061.174] FindNextFileW (in: hFindFile=0x5107960, lpFindFileData=0x31e5e4 | out: lpFindFileData=0x31e5e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb3f3149e, ftCreationTime.dwHighDateTime=0x1cb892b, ftLastAccessTime.dwLowDateTime=0xb3f3149e, ftLastAccessTime.dwHighDateTime=0x1cb892b, ftLastWriteTime.dwLowDateTime=0xb3f3149e, ftLastWriteTime.dwHighDateTime=0x1cb892b, nFileSizeHigh=0x0, nFileSizeLow=0x19000, dwReserved0=0x0, dwReserved1=0x0, cFileName="wmpshare.exe", cAlternateFileName="")) returned 1 [0061.174] FindNextFileW (in: hFindFile=0x5107960, lpFindFileData=0x31e5e4 | out: lpFindFileData=0x31e5e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x51d23900, ftCreationTime.dwHighDateTime=0x1d5c961, ftLastAccessTime.dwLowDateTime=0x414606c0, ftLastAccessTime.dwHighDateTime=0x1d5cde9, ftLastWriteTime.dwLowDateTime=0x414606c0, ftLastWriteTime.dwHighDateTime=0x1d5cde9, nFileSizeHigh=0x0, nFileSizeLow=0x13a00, dwReserved0=0x0, dwReserved1=0x0, cFileName="yahoomessenger.exe", cAlternateFileName="YAHOOM~1.EXE")) returned 1 [0061.174] FindNextFileW (in: hFindFile=0x5107960, lpFindFileData=0x31e5e4 | out: lpFindFileData=0x31e5e4*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0061.174] FindClose (in: hFindFile=0x5107960 | out: hFindFile=0x5107960) returned 1 [0061.174] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e86c) returned 1 [0061.174] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e878) returned 1 [0061.174] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e8ac) returned 1 [0061.174] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Windows Media Player\\*", lpFindFileData=0x31e5d4 | out: lpFindFileData=0x31e5d4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x80105472, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0xd9a2c7e0, ftLastAccessTime.dwHighDateTime=0x1d5e82a, ftLastWriteTime.dwLowDateTime=0xd9a2c7e0, ftLastWriteTime.dwHighDateTime=0x1d5e82a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5107960 [0061.174] FindNextFileW (in: hFindFile=0x5107960, lpFindFileData=0x31e5e4 | out: lpFindFileData=0x31e5e4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x80105472, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0xd9a2c7e0, ftLastAccessTime.dwHighDateTime=0x1d5e82a, ftLastWriteTime.dwLowDateTime=0xd9a2c7e0, ftLastWriteTime.dwHighDateTime=0x1d5e82a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0061.175] FindNextFileW (in: hFindFile=0x5107960, lpFindFileData=0x31e5e4 | out: lpFindFileData=0x31e5e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6a37bb0, ftCreationTime.dwHighDateTime=0x1d5dc1c, ftLastAccessTime.dwLowDateTime=0xba53cff0, ftLastAccessTime.dwHighDateTime=0x1d59e43, ftLastWriteTime.dwLowDateTime=0xba53cff0, ftLastWriteTime.dwHighDateTime=0x1d59e43, nFileSizeHigh=0x0, nFileSizeLow=0x13a00, dwReserved0=0x0, dwReserved1=0x0, cFileName="colonmaximum.exe", cAlternateFileName="COLONM~1.EXE")) returned 1 [0061.175] FindNextFileW (in: hFindFile=0x5107960, lpFindFileData=0x31e5e4 | out: lpFindFileData=0x31e5e4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1ea40f84, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x21ca67c6, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x1ea40f84, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="en-US", cAlternateFileName="")) returned 1 [0061.175] FindNextFileW (in: hFindFile=0x5107960, lpFindFileData=0x31e5e4 | out: lpFindFileData=0x31e5e4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x80105472, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x80105472, ftLastAccessTime.dwHighDateTime=0x1ca0444, ftLastWriteTime.dwLowDateTime=0x80105472, ftLastWriteTime.dwHighDateTime=0x1ca0444, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Icons", cAlternateFileName="")) returned 1 [0061.175] FindNextFileW (in: hFindFile=0x5107960, lpFindFileData=0x31e5e4 | out: lpFindFileData=0x31e5e4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x80105472, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x81351db4, ftLastAccessTime.dwHighDateTime=0x1ca0444, ftLastWriteTime.dwLowDateTime=0x81351db4, ftLastWriteTime.dwHighDateTime=0x1ca0444, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Media Renderer", cAlternateFileName="MEDIAR~1")) returned 1 [0061.175] FindNextFileW (in: hFindFile=0x5107960, lpFindFileData=0x31e5e4 | out: lpFindFileData=0x31e5e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5da15071, ftCreationTime.dwHighDateTime=0x1ca0417, ftLastAccessTime.dwLowDateTime=0x5da15071, ftLastAccessTime.dwHighDateTime=0x1ca0417, ftLastWriteTime.dwLowDateTime=0x9b03e9f0, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x25a00, dwReserved0=0x0, dwReserved1=0x0, cFileName="mpvis.DLL", cAlternateFileName="")) returned 1 [0061.175] FindNextFileW (in: hFindFile=0x5107960, lpFindFileData=0x31e5e4 | out: lpFindFileData=0x31e5e4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8012b5d2, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x8012b5d2, ftLastAccessTime.dwHighDateTime=0x1ca0444, ftLastWriteTime.dwLowDateTime=0x8012b5d2, ftLastWriteTime.dwHighDateTime=0x1ca0444, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Network Sharing", cAlternateFileName="NETWOR~1")) returned 1 [0061.175] FindNextFileW (in: hFindFile=0x5107960, lpFindFileData=0x31e5e4 | out: lpFindFileData=0x31e5e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb3e72dbc, ftCreationTime.dwHighDateTime=0x1cb892b, ftLastAccessTime.dwLowDateTime=0xb3e72dbc, ftLastAccessTime.dwHighDateTime=0x1cb892b, ftLastWriteTime.dwLowDateTime=0xb3e98f1d, ftLastWriteTime.dwHighDateTime=0x1cb892b, nFileSizeHigh=0x0, nFileSizeLow=0x1eb600, dwReserved0=0x0, dwReserved1=0x0, cFileName="setup_wm.exe", cAlternateFileName="")) returned 1 [0061.175] FindNextFileW (in: hFindFile=0x5107960, lpFindFileData=0x31e5e4 | out: lpFindFileData=0x31e5e4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x80105472, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x9b6c2483, ftLastAccessTime.dwHighDateTime=0x1cb892c, ftLastWriteTime.dwLowDateTime=0x9b6c2483, ftLastWriteTime.dwHighDateTime=0x1cb892c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Skins", cAlternateFileName="")) returned 1 [0061.176] FindNextFileW (in: hFindFile=0x5107960, lpFindFileData=0x31e5e4 | out: lpFindFileData=0x31e5e4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x80105472, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x80105472, ftLastAccessTime.dwHighDateTime=0x1ca0444, ftLastWriteTime.dwLowDateTime=0x80105472, ftLastWriteTime.dwHighDateTime=0x1ca0444, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Visualizations", cAlternateFileName="VISUAL~1")) returned 1 [0061.176] FindNextFileW (in: hFindFile=0x5107960, lpFindFileData=0x31e5e4 | out: lpFindFileData=0x31e5e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb3ee51dd, ftCreationTime.dwHighDateTime=0x1cb892b, ftLastAccessTime.dwLowDateTime=0xb3ee51dd, ftLastAccessTime.dwHighDateTime=0x1cb892b, ftLastWriteTime.dwLowDateTime=0xb3f0b33d, ftLastWriteTime.dwHighDateTime=0x1cb892b, nFileSizeHigh=0x0, nFileSizeLow=0x37c00, dwReserved0=0x0, dwReserved1=0x0, cFileName="wmlaunch.exe", cAlternateFileName="")) returned 1 [0061.176] FindNextFileW (in: hFindFile=0x5107960, lpFindFileData=0x31e5e4 | out: lpFindFileData=0x31e5e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb3f0b33d, ftCreationTime.dwHighDateTime=0x1cb892b, ftLastAccessTime.dwLowDateTime=0xb3f0b33d, ftLastAccessTime.dwHighDateTime=0x1cb892b, ftLastWriteTime.dwLowDateTime=0xb3f0b33d, ftLastWriteTime.dwHighDateTime=0x1cb892b, nFileSizeHigh=0x0, nFileSizeLow=0x18e00, dwReserved0=0x0, dwReserved1=0x0, cFileName="wmpconfig.exe", cAlternateFileName="")) returned 1 [0061.176] FindNextFileW (in: hFindFile=0x5107960, lpFindFileData=0x31e5e4 | out: lpFindFileData=0x31e5e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb669e146, ftCreationTime.dwHighDateTime=0x1cb892b, ftLastAccessTime.dwLowDateTime=0xb669e146, ftLastAccessTime.dwHighDateTime=0x1cb892b, ftLastWriteTime.dwLowDateTime=0xb66c42a7, ftLastWriteTime.dwHighDateTime=0x1cb892b, nFileSizeHigh=0x0, nFileSizeLow=0xf0000, dwReserved0=0x0, dwReserved1=0x0, cFileName="WMPDMC.exe", cAlternateFileName="")) returned 1 [0061.176] FindNextFileW (in: hFindFile=0x5107960, lpFindFileData=0x31e5e4 | out: lpFindFileData=0x31e5e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x42b8907f, ftCreationTime.dwHighDateTime=0x1ca0417, ftLastAccessTime.dwLowDateTime=0x42b8907f, ftLastAccessTime.dwHighDateTime=0x1ca0417, ftLastWriteTime.dwLowDateTime=0xb19c3730, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x4f200, dwReserved0=0x0, dwReserved1=0x0, cFileName="WMPDMCCore.dll", cAlternateFileName="")) returned 1 [0061.176] FindNextFileW (in: hFindFile=0x5107960, lpFindFileData=0x31e5e4 | out: lpFindFileData=0x31e5e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4fdc01da, ftCreationTime.dwHighDateTime=0x1ca0417, ftLastAccessTime.dwLowDateTime=0x4fdc01da, ftLastAccessTime.dwHighDateTime=0x1ca0417, ftLastWriteTime.dwLowDateTime=0x7a92dc30, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x5e00, dwReserved0=0x0, dwReserved1=0x0, cFileName="wmpenc.exe", cAlternateFileName="")) returned 1 [0061.176] FindNextFileW (in: hFindFile=0x5107960, lpFindFileData=0x31e5e4 | out: lpFindFileData=0x31e5e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb3f3149e, ftCreationTime.dwHighDateTime=0x1cb892b, ftLastAccessTime.dwLowDateTime=0xb3f3149e, ftLastAccessTime.dwHighDateTime=0x1cb892b, ftLastWriteTime.dwLowDateTime=0xb3f3149e, ftLastWriteTime.dwHighDateTime=0x1cb892b, nFileSizeHigh=0x0, nFileSizeLow=0x28400, dwReserved0=0x0, dwReserved1=0x0, cFileName="wmplayer.exe", cAlternateFileName="")) returned 1 [0061.176] FindNextFileW (in: hFindFile=0x5107960, lpFindFileData=0x31e5e4 | out: lpFindFileData=0x31e5e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5749e95b, ftCreationTime.dwHighDateTime=0x1ca0417, ftLastAccessTime.dwLowDateTime=0x5749e95b, ftLastAccessTime.dwHighDateTime=0x1ca0417, ftLastWriteTime.dwLowDateTime=0xb19ea830, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x20a00, dwReserved0=0x0, dwReserved1=0x0, cFileName="WMPMediaSharing.dll", cAlternateFileName="")) returned 1 [0061.177] FindNextFileW (in: hFindFile=0x5107960, lpFindFileData=0x31e5e4 | out: lpFindFileData=0x31e5e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x59c0b4b2, ftCreationTime.dwHighDateTime=0x1ca0417, ftLastAccessTime.dwLowDateTime=0x59c0b4b2, ftLastAccessTime.dwHighDateTime=0x1ca0417, ftLastWriteTime.dwLowDateTime=0xb19ea830, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x73400, dwReserved0=0x0, dwReserved1=0x0, cFileName="wmpnssci.dll", cAlternateFileName="")) returned 1 [0061.177] FindNextFileW (in: hFindFile=0x5107960, lpFindFileData=0x31e5e4 | out: lpFindFileData=0x31e5e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4041c528, ftCreationTime.dwHighDateTime=0x1ca0417, ftLastAccessTime.dwLowDateTime=0x4041c528, ftLastAccessTime.dwHighDateTime=0x1ca0417, ftLastWriteTime.dwLowDateTime=0xb1a36320, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x7c00, dwReserved0=0x0, dwReserved1=0x0, cFileName="WMPNSSUI.dll", cAlternateFileName="")) returned 1 [0061.177] FindNextFileW (in: hFindFile=0x5107960, lpFindFileData=0x31e5e4 | out: lpFindFileData=0x31e5e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x53bc9d99, ftCreationTime.dwHighDateTime=0x1ca0417, ftLastAccessTime.dwLowDateTime=0x53bc9d99, ftLastAccessTime.dwHighDateTime=0x1ca0417, ftLastWriteTime.dwLowDateTime=0x7ad31980, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0xf600, dwReserved0=0x0, dwReserved1=0x0, cFileName="wmprph.exe", cAlternateFileName="")) returned 1 [0061.177] FindNextFileW (in: hFindFile=0x5107960, lpFindFileData=0x31e5e4 | out: lpFindFileData=0x31e5e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb3f3149e, ftCreationTime.dwHighDateTime=0x1cb892b, ftLastAccessTime.dwLowDateTime=0xb3f3149e, ftLastAccessTime.dwHighDateTime=0x1cb892b, ftLastWriteTime.dwLowDateTime=0xb3f3149e, ftLastWriteTime.dwHighDateTime=0x1cb892b, nFileSizeHigh=0x0, nFileSizeLow=0x19000, dwReserved0=0x0, dwReserved1=0x0, cFileName="wmpshare.exe", cAlternateFileName="")) returned 1 [0061.177] FindNextFileW (in: hFindFile=0x5107960, lpFindFileData=0x31e5e4 | out: lpFindFileData=0x31e5e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x51d23900, ftCreationTime.dwHighDateTime=0x1d5c961, ftLastAccessTime.dwLowDateTime=0x414606c0, ftLastAccessTime.dwHighDateTime=0x1d5cde9, ftLastWriteTime.dwLowDateTime=0x414606c0, ftLastWriteTime.dwHighDateTime=0x1d5cde9, nFileSizeHigh=0x0, nFileSizeLow=0x13a00, dwReserved0=0x0, dwReserved1=0x0, cFileName="yahoomessenger.exe", cAlternateFileName="YAHOOM~1.EXE")) returned 1 [0061.177] FindNextFileW (in: hFindFile=0x5107960, lpFindFileData=0x31e5e4 | out: lpFindFileData=0x31e5e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x51d23900, ftCreationTime.dwHighDateTime=0x1d5c961, ftLastAccessTime.dwLowDateTime=0x414606c0, ftLastAccessTime.dwHighDateTime=0x1d5cde9, ftLastWriteTime.dwLowDateTime=0x414606c0, ftLastWriteTime.dwHighDateTime=0x1d5cde9, nFileSizeHigh=0x0, nFileSizeLow=0x13a00, dwReserved0=0x0, dwReserved1=0x0, cFileName="yahoomessenger.exe", cAlternateFileName="YAHOOM~1.EXE")) returned 0 [0061.177] FindClose (in: hFindFile=0x5107960 | out: hFindFile=0x5107960) returned 1 [0061.177] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e86c) returned 1 [0061.177] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e878) returned 1 [0061.178] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e834) returned 1 [0061.178] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Windows Media Player\\en-US\\*", lpFindFileData=0x31e55c | out: lpFindFileData=0x31e55c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1ea40f84, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x21ca67c6, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x1ea40f84, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5107960 [0061.178] FindNextFileW (in: hFindFile=0x5107960, lpFindFileData=0x31e56c | out: lpFindFileData=0x31e56c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1ea40f84, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x21ca67c6, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x1ea40f84, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0061.178] FindNextFileW (in: hFindFile=0x5107960, lpFindFileData=0x31e56c | out: lpFindFileData=0x31e56c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xfdc7162, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x10b3266c, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0xfdc7162, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0xa00, dwReserved0=0x0, dwReserved1=0x0, cFileName="mpvis.dll.mui", cAlternateFileName="")) returned 1 [0061.178] FindNextFileW (in: hFindFile=0x5107960, lpFindFileData=0x31e56c | out: lpFindFileData=0x31e56c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xfdc7162, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x10b3266c, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0xfdc7162, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0xdc00, dwReserved0=0x0, dwReserved1=0x0, cFileName="setup_wm.exe.mui", cAlternateFileName="")) returned 1 [0061.178] FindNextFileW (in: hFindFile=0x5107960, lpFindFileData=0x31e56c | out: lpFindFileData=0x31e56c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xfdc7162, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x10b3266c, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0xfdc7162, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x800, dwReserved0=0x0, dwReserved1=0x0, cFileName="wmlaunch.exe.mui", cAlternateFileName="")) returned 1 [0061.178] FindNextFileW (in: hFindFile=0x5107960, lpFindFileData=0x31e56c | out: lpFindFileData=0x31e56c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xfe3998d, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x10b3266c, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0xfe3998d, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x3a00, dwReserved0=0x0, dwReserved1=0x0, cFileName="WMPDMC.exe.mui", cAlternateFileName="")) returned 1 [0061.178] FindNextFileW (in: hFindFile=0x5107960, lpFindFileData=0x31e56c | out: lpFindFileData=0x31e56c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xfe3998d, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x10b3266c, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0xfe3998d, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0xa00, dwReserved0=0x0, dwReserved1=0x0, cFileName="WMPDMCCore.dll.mui", cAlternateFileName="")) returned 1 [0061.178] FindNextFileW (in: hFindFile=0x5107960, lpFindFileData=0x31e56c | out: lpFindFileData=0x31e56c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xfdc7162, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x10b3266c, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0xfdc7162, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0xc00, dwReserved0=0x0, dwReserved1=0x0, cFileName="wmplayer.exe.mui", cAlternateFileName="")) returned 1 [0061.178] FindNextFileW (in: hFindFile=0x5107960, lpFindFileData=0x31e56c | out: lpFindFileData=0x31e56c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xfe3998d, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x10b3266c, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0xfe3998d, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0xa00, dwReserved0=0x0, dwReserved1=0x0, cFileName="WMPMediaSharing.dll.mui", cAlternateFileName="")) returned 1 [0061.179] FindNextFileW (in: hFindFile=0x5107960, lpFindFileData=0x31e56c | out: lpFindFileData=0x31e56c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xfe3998d, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x10b3266c, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0xfe3998d, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x1000, dwReserved0=0x0, dwReserved1=0x0, cFileName="wmpnssci.dll.mui", cAlternateFileName="")) returned 1 [0061.179] FindNextFileW (in: hFindFile=0x5107960, lpFindFileData=0x31e56c | out: lpFindFileData=0x31e56c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xfe3998d, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x10b3266c, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0xfe3998d, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0xa00, dwReserved0=0x0, dwReserved1=0x0, cFileName="wmpnssui.dll.mui", cAlternateFileName="")) returned 1 [0061.179] FindNextFileW (in: hFindFile=0x5107960, lpFindFileData=0x31e56c | out: lpFindFileData=0x31e56c*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0061.179] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e7f4) returned 1 [0061.179] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e800) returned 1 [0061.180] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e834) returned 1 [0061.180] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Windows Media Player\\en-US\\*", lpFindFileData=0x31e55c | out: lpFindFileData=0x31e55c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1ea40f84, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x21ca67c6, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x1ea40f84, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5107960 [0061.180] FindNextFileW (in: hFindFile=0x5107960, lpFindFileData=0x31e56c | out: lpFindFileData=0x31e56c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1ea40f84, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x21ca67c6, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x1ea40f84, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0061.180] FindNextFileW (in: hFindFile=0x5107960, lpFindFileData=0x31e56c | out: lpFindFileData=0x31e56c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xfdc7162, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x10b3266c, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0xfdc7162, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0xa00, dwReserved0=0x0, dwReserved1=0x0, cFileName="mpvis.dll.mui", cAlternateFileName="")) returned 1 [0061.180] FindNextFileW (in: hFindFile=0x5107960, lpFindFileData=0x31e56c | out: lpFindFileData=0x31e56c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xfdc7162, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x10b3266c, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0xfdc7162, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0xdc00, dwReserved0=0x0, dwReserved1=0x0, cFileName="setup_wm.exe.mui", cAlternateFileName="")) returned 1 [0061.180] FindNextFileW (in: hFindFile=0x5107960, lpFindFileData=0x31e56c | out: lpFindFileData=0x31e56c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xfdc7162, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x10b3266c, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0xfdc7162, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x800, dwReserved0=0x0, dwReserved1=0x0, cFileName="wmlaunch.exe.mui", cAlternateFileName="")) returned 1 [0061.180] FindNextFileW (in: hFindFile=0x5107960, lpFindFileData=0x31e56c | out: lpFindFileData=0x31e56c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xfe3998d, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x10b3266c, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0xfe3998d, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x3a00, dwReserved0=0x0, dwReserved1=0x0, cFileName="WMPDMC.exe.mui", cAlternateFileName="")) returned 1 [0061.180] FindNextFileW (in: hFindFile=0x5107960, lpFindFileData=0x31e56c | out: lpFindFileData=0x31e56c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xfe3998d, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x10b3266c, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0xfe3998d, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0xa00, dwReserved0=0x0, dwReserved1=0x0, cFileName="WMPDMCCore.dll.mui", cAlternateFileName="")) returned 1 [0061.180] FindNextFileW (in: hFindFile=0x5107960, lpFindFileData=0x31e56c | out: lpFindFileData=0x31e56c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xfdc7162, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x10b3266c, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0xfdc7162, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0xc00, dwReserved0=0x0, dwReserved1=0x0, cFileName="wmplayer.exe.mui", cAlternateFileName="")) returned 1 [0061.181] FindNextFileW (in: hFindFile=0x5107960, lpFindFileData=0x31e56c | out: lpFindFileData=0x31e56c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xfe3998d, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x10b3266c, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0xfe3998d, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0xa00, dwReserved0=0x0, dwReserved1=0x0, cFileName="WMPMediaSharing.dll.mui", cAlternateFileName="")) returned 1 [0061.181] FindNextFileW (in: hFindFile=0x5107960, lpFindFileData=0x31e56c | out: lpFindFileData=0x31e56c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xfe3998d, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x10b3266c, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0xfe3998d, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x1000, dwReserved0=0x0, dwReserved1=0x0, cFileName="wmpnssci.dll.mui", cAlternateFileName="")) returned 1 [0061.181] FindNextFileW (in: hFindFile=0x5107960, lpFindFileData=0x31e56c | out: lpFindFileData=0x31e56c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xfe3998d, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x10b3266c, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0xfe3998d, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0xa00, dwReserved0=0x0, dwReserved1=0x0, cFileName="wmpnssui.dll.mui", cAlternateFileName="")) returned 1 [0061.181] FindNextFileW (in: hFindFile=0x5107960, lpFindFileData=0x31e56c | out: lpFindFileData=0x31e56c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xfe3998d, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x10b3266c, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0xfe3998d, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0xa00, dwReserved0=0x0, dwReserved1=0x0, cFileName="wmpnssui.dll.mui", cAlternateFileName="")) returned 0 [0061.181] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e7f4) returned 1 [0061.181] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e800) returned 1 [0061.181] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e834) returned 1 [0061.181] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Windows Media Player\\Icons\\*", lpFindFileData=0x31e55c | out: lpFindFileData=0x31e55c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x80105472, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x80105472, ftLastAccessTime.dwHighDateTime=0x1ca0444, ftLastWriteTime.dwLowDateTime=0x80105472, ftLastWriteTime.dwHighDateTime=0x1ca0444, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5107960 [0061.182] FindNextFileW (in: hFindFile=0x5107960, lpFindFileData=0x31e56c | out: lpFindFileData=0x31e56c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x80105472, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x80105472, ftLastAccessTime.dwHighDateTime=0x1ca0444, ftLastWriteTime.dwLowDateTime=0x80105472, ftLastWriteTime.dwHighDateTime=0x1ca0444, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0061.182] FindNextFileW (in: hFindFile=0x5107960, lpFindFileData=0x31e56c | out: lpFindFileData=0x31e56c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x80105472, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x80105472, ftLastAccessTime.dwHighDateTime=0x1ca0444, ftLastWriteTime.dwLowDateTime=0x80105472, ftLastWriteTime.dwHighDateTime=0x1ca0444, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 0 [0061.182] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e7f4) returned 1 [0061.182] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e800) returned 1 [0061.182] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e834) returned 1 [0061.182] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Windows Media Player\\Icons\\*", lpFindFileData=0x31e55c | out: lpFindFileData=0x31e55c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x80105472, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x80105472, ftLastAccessTime.dwHighDateTime=0x1ca0444, ftLastWriteTime.dwLowDateTime=0x80105472, ftLastWriteTime.dwHighDateTime=0x1ca0444, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5107960 [0061.182] FindNextFileW (in: hFindFile=0x5107960, lpFindFileData=0x31e56c | out: lpFindFileData=0x31e56c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x80105472, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x80105472, ftLastAccessTime.dwHighDateTime=0x1ca0444, ftLastWriteTime.dwLowDateTime=0x80105472, ftLastWriteTime.dwHighDateTime=0x1ca0444, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0061.182] FindNextFileW (in: hFindFile=0x5107960, lpFindFileData=0x31e56c | out: lpFindFileData=0x31e56c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x80105472, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x80105472, ftLastAccessTime.dwHighDateTime=0x1ca0444, ftLastWriteTime.dwLowDateTime=0x80105472, ftLastWriteTime.dwHighDateTime=0x1ca0444, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 0 [0061.182] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e7f4) returned 1 [0061.182] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e800) returned 1 [0061.182] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e834) returned 1 [0061.182] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Windows Media Player\\Media Renderer\\*", lpFindFileData=0x31e55c | out: lpFindFileData=0x31e55c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x80105472, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x81351db4, ftLastAccessTime.dwHighDateTime=0x1ca0444, ftLastWriteTime.dwLowDateTime=0x81351db4, ftLastWriteTime.dwHighDateTime=0x1ca0444, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5107960 [0061.185] FindNextFileW (in: hFindFile=0x5107960, lpFindFileData=0x31e56c | out: lpFindFileData=0x31e56c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x80105472, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x81351db4, ftLastAccessTime.dwHighDateTime=0x1ca0444, ftLastWriteTime.dwLowDateTime=0x81351db4, ftLastWriteTime.dwHighDateTime=0x1ca0444, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0061.185] FindNextFileW (in: hFindFile=0x5107960, lpFindFileData=0x31e56c | out: lpFindFileData=0x31e56c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x79e33732, ftCreationTime.dwHighDateTime=0x1ca0417, ftLastAccessTime.dwLowDateTime=0x79e33732, ftLastAccessTime.dwHighDateTime=0x1ca0417, ftLastWriteTime.dwLowDateTime=0x55587e5c, ftLastWriteTime.dwHighDateTime=0x1c9ea13, nFileSizeHigh=0x0, nFileSizeLow=0x4d82, dwReserved0=0x0, dwReserved1=0x0, cFileName="avtransport.xml", cAlternateFileName="")) returned 1 [0061.185] FindNextFileW (in: hFindFile=0x5107960, lpFindFileData=0x31e56c | out: lpFindFileData=0x31e56c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x79e33732, ftCreationTime.dwHighDateTime=0x1ca0417, ftLastAccessTime.dwLowDateTime=0x79e33732, ftLastAccessTime.dwHighDateTime=0x1ca0417, ftLastWriteTime.dwLowDateTime=0x555d411c, ftLastWriteTime.dwHighDateTime=0x1c9ea13, nFileSizeHigh=0x0, nFileSizeLow=0x14ff, dwReserved0=0x0, dwReserved1=0x0, cFileName="connectionmanager_dmr.xml", cAlternateFileName="")) returned 1 [0061.185] FindNextFileW (in: hFindFile=0x5107960, lpFindFileData=0x31e56c | out: lpFindFileData=0x31e56c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x79e0d5d3, ftCreationTime.dwHighDateTime=0x1ca0417, ftLastAccessTime.dwLowDateTime=0x79e0d5d3, ftLastAccessTime.dwHighDateTime=0x1ca0417, ftLastWriteTime.dwLowDateTime=0x550eb3bc, ftLastWriteTime.dwHighDateTime=0x1c9ea13, nFileSizeHigh=0x0, nFileSizeLow=0xba3, dwReserved0=0x0, dwReserved1=0x0, cFileName="DMR_120.jpg", cAlternateFileName="")) returned 1 [0061.185] FindNextFileW (in: hFindFile=0x5107960, lpFindFileData=0x31e56c | out: lpFindFileData=0x31e56c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x79de7474, ftCreationTime.dwHighDateTime=0x1ca0417, ftLastAccessTime.dwLowDateTime=0x79de7474, ftLastAccessTime.dwHighDateTime=0x1ca0417, ftLastWriteTime.dwLowDateTime=0x5511151c, ftLastWriteTime.dwHighDateTime=0x1c9ea13, nFileSizeHigh=0x0, nFileSizeLow=0x3a1c, dwReserved0=0x0, dwReserved1=0x0, cFileName="DMR_120.png", cAlternateFileName="")) returned 1 [0061.185] FindNextFileW (in: hFindFile=0x5107960, lpFindFileData=0x31e56c | out: lpFindFileData=0x31e56c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x79d9b1b6, ftCreationTime.dwHighDateTime=0x1ca0417, ftLastAccessTime.dwLowDateTime=0x79d9b1b6, ftLastAccessTime.dwHighDateTime=0x1ca0417, ftLastWriteTime.dwLowDateTime=0x5511151c, ftLastWriteTime.dwHighDateTime=0x1c9ea13, nFileSizeHigh=0x0, nFileSizeLow=0x4c4, dwReserved0=0x0, dwReserved1=0x0, cFileName="DMR_48.jpg", cAlternateFileName="")) returned 1 [0061.185] FindNextFileW (in: hFindFile=0x5107960, lpFindFileData=0x31e56c | out: lpFindFileData=0x31e56c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5511151c, ftCreationTime.dwHighDateTime=0x1c9ea13, ftLastAccessTime.dwLowDateTime=0x5511151c, ftLastAccessTime.dwHighDateTime=0x1c9ea13, ftLastWriteTime.dwLowDateTime=0x5511151c, ftLastWriteTime.dwHighDateTime=0x1c9ea13, nFileSizeHigh=0x0, nFileSizeLow=0x10a9, dwReserved0=0x0, dwReserved1=0x0, cFileName="DMR_48.png", cAlternateFileName="")) returned 1 [0061.185] FindNextFileW (in: hFindFile=0x5107960, lpFindFileData=0x31e56c | out: lpFindFileData=0x31e56c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x79e59891, ftCreationTime.dwHighDateTime=0x1ca0417, ftLastAccessTime.dwLowDateTime=0x79e59891, ftLastAccessTime.dwHighDateTime=0x1ca0417, ftLastWriteTime.dwLowDateTime=0x555fa27c, ftLastWriteTime.dwHighDateTime=0x1c9ea13, nFileSizeHigh=0x0, nFileSizeLow=0x18db, dwReserved0=0x0, dwReserved1=0x0, cFileName="RenderingControl.xml", cAlternateFileName="")) returned 1 [0061.185] FindNextFileW (in: hFindFile=0x5107960, lpFindFileData=0x31e56c | out: lpFindFileData=0x31e56c*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0061.186] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e7f4) returned 1 [0061.186] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e800) returned 1 [0061.186] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e834) returned 1 [0061.186] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Windows Media Player\\Media Renderer\\*", lpFindFileData=0x31e55c | out: lpFindFileData=0x31e55c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x80105472, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x81351db4, ftLastAccessTime.dwHighDateTime=0x1ca0444, ftLastWriteTime.dwLowDateTime=0x81351db4, ftLastWriteTime.dwHighDateTime=0x1ca0444, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5107960 [0061.187] FindNextFileW (in: hFindFile=0x5107960, lpFindFileData=0x31e56c | out: lpFindFileData=0x31e56c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x80105472, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x81351db4, ftLastAccessTime.dwHighDateTime=0x1ca0444, ftLastWriteTime.dwLowDateTime=0x81351db4, ftLastWriteTime.dwHighDateTime=0x1ca0444, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0061.187] FindNextFileW (in: hFindFile=0x5107960, lpFindFileData=0x31e56c | out: lpFindFileData=0x31e56c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x79e33732, ftCreationTime.dwHighDateTime=0x1ca0417, ftLastAccessTime.dwLowDateTime=0x79e33732, ftLastAccessTime.dwHighDateTime=0x1ca0417, ftLastWriteTime.dwLowDateTime=0x55587e5c, ftLastWriteTime.dwHighDateTime=0x1c9ea13, nFileSizeHigh=0x0, nFileSizeLow=0x4d82, dwReserved0=0x0, dwReserved1=0x0, cFileName="avtransport.xml", cAlternateFileName="")) returned 1 [0061.187] FindNextFileW (in: hFindFile=0x5107960, lpFindFileData=0x31e56c | out: lpFindFileData=0x31e56c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x79e33732, ftCreationTime.dwHighDateTime=0x1ca0417, ftLastAccessTime.dwLowDateTime=0x79e33732, ftLastAccessTime.dwHighDateTime=0x1ca0417, ftLastWriteTime.dwLowDateTime=0x555d411c, ftLastWriteTime.dwHighDateTime=0x1c9ea13, nFileSizeHigh=0x0, nFileSizeLow=0x14ff, dwReserved0=0x0, dwReserved1=0x0, cFileName="connectionmanager_dmr.xml", cAlternateFileName="")) returned 1 [0061.187] FindNextFileW (in: hFindFile=0x5107960, lpFindFileData=0x31e56c | out: lpFindFileData=0x31e56c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x79e0d5d3, ftCreationTime.dwHighDateTime=0x1ca0417, ftLastAccessTime.dwLowDateTime=0x79e0d5d3, ftLastAccessTime.dwHighDateTime=0x1ca0417, ftLastWriteTime.dwLowDateTime=0x550eb3bc, ftLastWriteTime.dwHighDateTime=0x1c9ea13, nFileSizeHigh=0x0, nFileSizeLow=0xba3, dwReserved0=0x0, dwReserved1=0x0, cFileName="DMR_120.jpg", cAlternateFileName="")) returned 1 [0061.188] FindNextFileW (in: hFindFile=0x5107960, lpFindFileData=0x31e56c | out: lpFindFileData=0x31e56c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x79de7474, ftCreationTime.dwHighDateTime=0x1ca0417, ftLastAccessTime.dwLowDateTime=0x79de7474, ftLastAccessTime.dwHighDateTime=0x1ca0417, ftLastWriteTime.dwLowDateTime=0x5511151c, ftLastWriteTime.dwHighDateTime=0x1c9ea13, nFileSizeHigh=0x0, nFileSizeLow=0x3a1c, dwReserved0=0x0, dwReserved1=0x0, cFileName="DMR_120.png", cAlternateFileName="")) returned 1 [0061.188] FindNextFileW (in: hFindFile=0x5107960, lpFindFileData=0x31e56c | out: lpFindFileData=0x31e56c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x79d9b1b6, ftCreationTime.dwHighDateTime=0x1ca0417, ftLastAccessTime.dwLowDateTime=0x79d9b1b6, ftLastAccessTime.dwHighDateTime=0x1ca0417, ftLastWriteTime.dwLowDateTime=0x5511151c, ftLastWriteTime.dwHighDateTime=0x1c9ea13, nFileSizeHigh=0x0, nFileSizeLow=0x4c4, dwReserved0=0x0, dwReserved1=0x0, cFileName="DMR_48.jpg", cAlternateFileName="")) returned 1 [0061.188] FindNextFileW (in: hFindFile=0x5107960, lpFindFileData=0x31e56c | out: lpFindFileData=0x31e56c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5511151c, ftCreationTime.dwHighDateTime=0x1c9ea13, ftLastAccessTime.dwLowDateTime=0x5511151c, ftLastAccessTime.dwHighDateTime=0x1c9ea13, ftLastWriteTime.dwLowDateTime=0x5511151c, ftLastWriteTime.dwHighDateTime=0x1c9ea13, nFileSizeHigh=0x0, nFileSizeLow=0x10a9, dwReserved0=0x0, dwReserved1=0x0, cFileName="DMR_48.png", cAlternateFileName="")) returned 1 [0061.188] FindNextFileW (in: hFindFile=0x5107960, lpFindFileData=0x31e56c | out: lpFindFileData=0x31e56c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x79e59891, ftCreationTime.dwHighDateTime=0x1ca0417, ftLastAccessTime.dwLowDateTime=0x79e59891, ftLastAccessTime.dwHighDateTime=0x1ca0417, ftLastWriteTime.dwLowDateTime=0x555fa27c, ftLastWriteTime.dwHighDateTime=0x1c9ea13, nFileSizeHigh=0x0, nFileSizeLow=0x18db, dwReserved0=0x0, dwReserved1=0x0, cFileName="RenderingControl.xml", cAlternateFileName="")) returned 1 [0061.188] FindNextFileW (in: hFindFile=0x5107960, lpFindFileData=0x31e56c | out: lpFindFileData=0x31e56c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x79e59891, ftCreationTime.dwHighDateTime=0x1ca0417, ftLastAccessTime.dwLowDateTime=0x79e59891, ftLastAccessTime.dwHighDateTime=0x1ca0417, ftLastWriteTime.dwLowDateTime=0x555fa27c, ftLastWriteTime.dwHighDateTime=0x1c9ea13, nFileSizeHigh=0x0, nFileSizeLow=0x18db, dwReserved0=0x0, dwReserved1=0x0, cFileName="RenderingControl.xml", cAlternateFileName="")) returned 0 [0061.189] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e7f4) returned 1 [0061.189] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e800) returned 1 [0061.189] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e700) returned 1 [0061.189] CreateFileW (lpFileName="C:\\Program Files (x86)\\Windows Media Player\\Media Renderer\\avtransport.xml" (normalized: "c:\\program files (x86)\\windows media player\\media renderer\\avtransport.xml"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x178 [0061.190] GetFileType (hFile=0x178) returned 0x1 [0061.190] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e6fc) returned 1 [0061.190] GetFileType (hFile=0x178) returned 0x1 [0061.190] GetFileSize (in: hFile=0x178, lpFileSizeHigh=0x31e808 | out: lpFileSizeHigh=0x31e808*=0x0) returned 0x4d82 [0061.190] ReadFile (in: hFile=0x178, lpBuffer=0x26a01fc, nNumberOfBytesToRead=0x4d82, lpNumberOfBytesRead=0x31e7b4, lpOverlapped=0x0 | out: lpBuffer=0x26a01fc*, lpNumberOfBytesRead=0x31e7b4*=0x4d82, lpOverlapped=0x0) returned 1 [0061.232] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e6ec) returned 1 [0061.232] CreateFileW (lpFileName="C:\\Program Files (x86)\\Windows Media Player\\Media Renderer\\avtransport.xml" (normalized: "c:\\program files (x86)\\windows media player\\media renderer\\avtransport.xml"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0xffffffff [0061.233] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31d528) returned 1 [0061.233] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e834) returned 1 [0061.233] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Windows Media Player\\Network Sharing", nBufferLength=0x105, lpBuffer=0x31e33c, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Windows Media Player\\Network Sharing", lpFilePart=0x0) returned 0x3b [0061.233] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Windows Media Player\\Network Sharing\\", nBufferLength=0x105, lpBuffer=0x31e310, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Windows Media Player\\Network Sharing\\", lpFilePart=0x0) returned 0x3c [0061.234] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Windows Media Player\\Network Sharing\\*", lpFindFileData=0x31e55c | out: lpFindFileData=0x31e55c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8012b5d2, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x8012b5d2, ftLastAccessTime.dwHighDateTime=0x1ca0444, ftLastWriteTime.dwLowDateTime=0x8012b5d2, ftLastWriteTime.dwHighDateTime=0x1ca0444, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5107b20 [0061.234] FindNextFileW (in: hFindFile=0x5107b20, lpFindFileData=0x31e56c | out: lpFindFileData=0x31e56c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8012b5d2, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x8012b5d2, ftLastAccessTime.dwHighDateTime=0x1ca0444, ftLastWriteTime.dwLowDateTime=0x8012b5d2, ftLastWriteTime.dwHighDateTime=0x1ca0444, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0061.234] FindNextFileW (in: hFindFile=0x5107b20, lpFindFileData=0x31e56c | out: lpFindFileData=0x31e56c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8012b5d2, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x8012b5d2, ftLastAccessTime.dwHighDateTime=0x1ca0444, ftLastWriteTime.dwLowDateTime=0x8012b5d2, ftLastWriteTime.dwHighDateTime=0x1ca0444, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 0 [0061.234] FindClose (in: hFindFile=0x5107b20 | out: hFindFile=0x5107b20) returned 1 [0061.234] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e7f4) returned 1 [0061.234] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e800) returned 1 [0061.234] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e834) returned 1 [0061.234] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Windows Media Player\\Network Sharing", nBufferLength=0x105, lpBuffer=0x31e33c, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Windows Media Player\\Network Sharing", lpFilePart=0x0) returned 0x3b [0061.234] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Windows Media Player\\Network Sharing\\", nBufferLength=0x105, lpBuffer=0x31e310, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Windows Media Player\\Network Sharing\\", lpFilePart=0x0) returned 0x3c [0061.235] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Windows Media Player\\Network Sharing\\*", lpFindFileData=0x31e55c | out: lpFindFileData=0x31e55c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8012b5d2, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x8012b5d2, ftLastAccessTime.dwHighDateTime=0x1ca0444, ftLastWriteTime.dwLowDateTime=0x8012b5d2, ftLastWriteTime.dwHighDateTime=0x1ca0444, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5107b20 [0061.235] FindNextFileW (in: hFindFile=0x5107b20, lpFindFileData=0x31e56c | out: lpFindFileData=0x31e56c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8012b5d2, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x8012b5d2, ftLastAccessTime.dwHighDateTime=0x1ca0444, ftLastWriteTime.dwLowDateTime=0x8012b5d2, ftLastWriteTime.dwHighDateTime=0x1ca0444, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0061.235] FindNextFileW (in: hFindFile=0x5107b20, lpFindFileData=0x31e56c | out: lpFindFileData=0x31e56c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8012b5d2, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x8012b5d2, ftLastAccessTime.dwHighDateTime=0x1ca0444, ftLastWriteTime.dwLowDateTime=0x8012b5d2, ftLastWriteTime.dwHighDateTime=0x1ca0444, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 0 [0061.235] FindClose (in: hFindFile=0x5107b20 | out: hFindFile=0x5107b20) returned 1 [0061.235] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e7f4) returned 1 [0061.235] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e800) returned 1 [0061.235] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e834) returned 1 [0061.235] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Windows Media Player\\Skins", nBufferLength=0x105, lpBuffer=0x31e33c, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Windows Media Player\\Skins", lpFilePart=0x0) returned 0x31 [0061.235] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Windows Media Player\\Skins\\", nBufferLength=0x105, lpBuffer=0x31e310, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Windows Media Player\\Skins\\", lpFilePart=0x0) returned 0x32 [0061.235] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Windows Media Player\\Skins\\*", lpFindFileData=0x31e55c | out: lpFindFileData=0x31e55c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x80105472, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x9b6c2483, ftLastAccessTime.dwHighDateTime=0x1cb892c, ftLastWriteTime.dwLowDateTime=0x9b6c2483, ftLastWriteTime.dwHighDateTime=0x1cb892c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5107b20 [0061.236] FindNextFileW (in: hFindFile=0x5107b20, lpFindFileData=0x31e56c | out: lpFindFileData=0x31e56c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x80105472, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x9b6c2483, ftLastAccessTime.dwHighDateTime=0x1cb892c, ftLastWriteTime.dwLowDateTime=0x9b6c2483, ftLastWriteTime.dwHighDateTime=0x1cb892c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0061.236] FindNextFileW (in: hFindFile=0x5107b20, lpFindFileData=0x31e56c | out: lpFindFileData=0x31e56c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb3e98f1d, ftCreationTime.dwHighDateTime=0x1cb892b, ftLastAccessTime.dwLowDateTime=0xb3e98f1d, ftLastAccessTime.dwHighDateTime=0x1cb892b, ftLastWriteTime.dwLowDateTime=0xb3ebf07d, ftLastWriteTime.dwHighDateTime=0x1cb892b, nFileSizeHigh=0x0, nFileSizeLow=0x10689, dwReserved0=0x0, dwReserved1=0x0, cFileName="Revert.wmz", cAlternateFileName="")) returned 1 [0061.236] FindNextFileW (in: hFindFile=0x5107b20, lpFindFileData=0x31e56c | out: lpFindFileData=0x31e56c*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0061.236] FindClose (in: hFindFile=0x5107b20 | out: hFindFile=0x5107b20) returned 1 [0061.236] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e7f4) returned 1 [0061.236] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e800) returned 1 [0061.236] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e834) returned 1 [0061.236] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Windows Media Player\\Skins", nBufferLength=0x105, lpBuffer=0x31e33c, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Windows Media Player\\Skins", lpFilePart=0x0) returned 0x31 [0061.236] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Windows Media Player\\Skins\\", nBufferLength=0x105, lpBuffer=0x31e310, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Windows Media Player\\Skins\\", lpFilePart=0x0) returned 0x32 [0061.236] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Windows Media Player\\Skins\\*", lpFindFileData=0x31e55c | out: lpFindFileData=0x31e55c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x80105472, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x9b6c2483, ftLastAccessTime.dwHighDateTime=0x1cb892c, ftLastWriteTime.dwLowDateTime=0x9b6c2483, ftLastWriteTime.dwHighDateTime=0x1cb892c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5107b20 [0061.236] FindNextFileW (in: hFindFile=0x5107b20, lpFindFileData=0x31e56c | out: lpFindFileData=0x31e56c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x80105472, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x9b6c2483, ftLastAccessTime.dwHighDateTime=0x1cb892c, ftLastWriteTime.dwLowDateTime=0x9b6c2483, ftLastWriteTime.dwHighDateTime=0x1cb892c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0061.237] FindNextFileW (in: hFindFile=0x5107b20, lpFindFileData=0x31e56c | out: lpFindFileData=0x31e56c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb3e98f1d, ftCreationTime.dwHighDateTime=0x1cb892b, ftLastAccessTime.dwLowDateTime=0xb3e98f1d, ftLastAccessTime.dwHighDateTime=0x1cb892b, ftLastWriteTime.dwLowDateTime=0xb3ebf07d, ftLastWriteTime.dwHighDateTime=0x1cb892b, nFileSizeHigh=0x0, nFileSizeLow=0x10689, dwReserved0=0x0, dwReserved1=0x0, cFileName="Revert.wmz", cAlternateFileName="")) returned 1 [0061.237] FindNextFileW (in: hFindFile=0x5107b20, lpFindFileData=0x31e56c | out: lpFindFileData=0x31e56c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb3e98f1d, ftCreationTime.dwHighDateTime=0x1cb892b, ftLastAccessTime.dwLowDateTime=0xb3e98f1d, ftLastAccessTime.dwHighDateTime=0x1cb892b, ftLastWriteTime.dwLowDateTime=0xb3ebf07d, ftLastWriteTime.dwHighDateTime=0x1cb892b, nFileSizeHigh=0x0, nFileSizeLow=0x10689, dwReserved0=0x0, dwReserved1=0x0, cFileName="Revert.wmz", cAlternateFileName="")) returned 0 [0061.237] FindClose (in: hFindFile=0x5107b20 | out: hFindFile=0x5107b20) returned 1 [0061.237] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e7f4) returned 1 [0061.237] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e800) returned 1 [0061.237] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e834) returned 1 [0061.237] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Windows Media Player\\Visualizations", nBufferLength=0x105, lpBuffer=0x31e33c, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Windows Media Player\\Visualizations", lpFilePart=0x0) returned 0x3a [0061.237] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Windows Media Player\\Visualizations\\", nBufferLength=0x105, lpBuffer=0x31e310, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Windows Media Player\\Visualizations\\", lpFilePart=0x0) returned 0x3b [0061.237] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Windows Media Player\\Visualizations\\*", lpFindFileData=0x31e55c | out: lpFindFileData=0x31e55c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x80105472, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x80105472, ftLastAccessTime.dwHighDateTime=0x1ca0444, ftLastWriteTime.dwLowDateTime=0x80105472, ftLastWriteTime.dwHighDateTime=0x1ca0444, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5107b20 [0061.237] FindNextFileW (in: hFindFile=0x5107b20, lpFindFileData=0x31e56c | out: lpFindFileData=0x31e56c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x80105472, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x80105472, ftLastAccessTime.dwHighDateTime=0x1ca0444, ftLastWriteTime.dwLowDateTime=0x80105472, ftLastWriteTime.dwHighDateTime=0x1ca0444, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0061.238] FindNextFileW (in: hFindFile=0x5107b20, lpFindFileData=0x31e56c | out: lpFindFileData=0x31e56c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x80105472, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x80105472, ftLastAccessTime.dwHighDateTime=0x1ca0444, ftLastWriteTime.dwLowDateTime=0x80105472, ftLastWriteTime.dwHighDateTime=0x1ca0444, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 0 [0061.238] FindClose (in: hFindFile=0x5107b20 | out: hFindFile=0x5107b20) returned 1 [0061.238] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e7f4) returned 1 [0061.238] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e800) returned 1 [0061.238] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e834) returned 1 [0061.238] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Windows Media Player\\Visualizations", nBufferLength=0x105, lpBuffer=0x31e33c, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Windows Media Player\\Visualizations", lpFilePart=0x0) returned 0x3a [0061.238] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Windows Media Player\\Visualizations\\", nBufferLength=0x105, lpBuffer=0x31e310, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Windows Media Player\\Visualizations\\", lpFilePart=0x0) returned 0x3b [0061.238] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Windows Media Player\\Visualizations\\*", lpFindFileData=0x31e55c | out: lpFindFileData=0x31e55c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x80105472, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x80105472, ftLastAccessTime.dwHighDateTime=0x1ca0444, ftLastWriteTime.dwLowDateTime=0x80105472, ftLastWriteTime.dwHighDateTime=0x1ca0444, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5107b20 [0061.238] FindNextFileW (in: hFindFile=0x5107b20, lpFindFileData=0x31e56c | out: lpFindFileData=0x31e56c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x80105472, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x80105472, ftLastAccessTime.dwHighDateTime=0x1ca0444, ftLastWriteTime.dwLowDateTime=0x80105472, ftLastWriteTime.dwHighDateTime=0x1ca0444, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0061.238] FindNextFileW (in: hFindFile=0x5107b20, lpFindFileData=0x31e56c | out: lpFindFileData=0x31e56c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x80105472, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x80105472, ftLastAccessTime.dwHighDateTime=0x1ca0444, ftLastWriteTime.dwLowDateTime=0x80105472, ftLastWriteTime.dwHighDateTime=0x1ca0444, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 0 [0061.239] FindClose (in: hFindFile=0x5107b20 | out: hFindFile=0x5107b20) returned 1 [0061.239] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e7f4) returned 1 [0061.239] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e800) returned 1 [0061.239] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e8ac) returned 1 [0061.239] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Windows NT", nBufferLength=0x105, lpBuffer=0x31e3b4, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Windows NT", lpFilePart=0x0) returned 0x21 [0061.239] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Windows NT\\", nBufferLength=0x105, lpBuffer=0x31e388, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Windows NT\\", lpFilePart=0x0) returned 0x22 [0061.239] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Windows NT\\*", lpFindFileData=0x31e5d4 | out: lpFindFileData=0x31e5d4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd943744, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xda90d160, ftLastAccessTime.dwHighDateTime=0x1d5e82a, ftLastWriteTime.dwLowDateTime=0xda90d160, ftLastWriteTime.dwHighDateTime=0x1d5e82a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5107b20 [0061.239] FindNextFileW (in: hFindFile=0x5107b20, lpFindFileData=0x31e5e4 | out: lpFindFileData=0x31e5e4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd943744, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xda90d160, ftLastAccessTime.dwHighDateTime=0x1d5e82a, ftLastWriteTime.dwLowDateTime=0xda90d160, ftLastWriteTime.dwHighDateTime=0x1d5e82a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0061.239] FindNextFileW (in: hFindFile=0x5107b20, lpFindFileData=0x31e5e4 | out: lpFindFileData=0x31e5e4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x80105472, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x1ea1accb, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x1ea1accb, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Accessories", cAlternateFileName="ACCESS~1")) returned 1 [0061.239] FindNextFileW (in: hFindFile=0x5107b20, lpFindFileData=0x31e5e4 | out: lpFindFileData=0x31e5e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa92f430, ftCreationTime.dwHighDateTime=0x1d5ba84, ftLastAccessTime.dwLowDateTime=0x1bc01450, ftLastAccessTime.dwHighDateTime=0x1d57a46, ftLastWriteTime.dwLowDateTime=0x1bc01450, ftLastWriteTime.dwHighDateTime=0x1d57a46, nFileSizeHigh=0x0, nFileSizeLow=0x13a00, dwReserved0=0x0, dwReserved1=0x0, cFileName="cordless-successful.exe", cAlternateFileName="CORDLE~1.EXE")) returned 1 [0061.240] FindNextFileW (in: hFindFile=0x5107b20, lpFindFileData=0x31e5e4 | out: lpFindFileData=0x31e5e4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd943744, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x1ea1accb, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x1ea1accb, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="TableTextService", cAlternateFileName="TABLET~1")) returned 1 [0061.240] FindNextFileW (in: hFindFile=0x5107b20, lpFindFileData=0x31e5e4 | out: lpFindFileData=0x31e5e4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd943744, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x1ea1accb, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x1ea1accb, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="TableTextService", cAlternateFileName="TABLET~1")) returned 0 [0061.240] FindClose (in: hFindFile=0x5107b20 | out: hFindFile=0x5107b20) returned 1 [0061.240] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e86c) returned 1 [0061.240] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e878) returned 1 [0061.240] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e8ac) returned 1 [0061.240] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Windows NT", nBufferLength=0x105, lpBuffer=0x31e3b4, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Windows NT", lpFilePart=0x0) returned 0x21 [0061.240] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Windows NT\\", nBufferLength=0x105, lpBuffer=0x31e388, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Windows NT\\", lpFilePart=0x0) returned 0x22 [0061.240] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Windows NT\\*", lpFindFileData=0x31e5d4 | out: lpFindFileData=0x31e5d4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd943744, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xda90d160, ftLastAccessTime.dwHighDateTime=0x1d5e82a, ftLastWriteTime.dwLowDateTime=0xda90d160, ftLastWriteTime.dwHighDateTime=0x1d5e82a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5107b20 [0061.240] FindNextFileW (in: hFindFile=0x5107b20, lpFindFileData=0x31e5e4 | out: lpFindFileData=0x31e5e4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd943744, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xda90d160, ftLastAccessTime.dwHighDateTime=0x1d5e82a, ftLastWriteTime.dwLowDateTime=0xda90d160, ftLastWriteTime.dwHighDateTime=0x1d5e82a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0061.240] FindNextFileW (in: hFindFile=0x5107b20, lpFindFileData=0x31e5e4 | out: lpFindFileData=0x31e5e4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x80105472, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x1ea1accb, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x1ea1accb, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Accessories", cAlternateFileName="ACCESS~1")) returned 1 [0061.241] FindNextFileW (in: hFindFile=0x5107b20, lpFindFileData=0x31e5e4 | out: lpFindFileData=0x31e5e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa92f430, ftCreationTime.dwHighDateTime=0x1d5ba84, ftLastAccessTime.dwLowDateTime=0x1bc01450, ftLastAccessTime.dwHighDateTime=0x1d57a46, ftLastWriteTime.dwLowDateTime=0x1bc01450, ftLastWriteTime.dwHighDateTime=0x1d57a46, nFileSizeHigh=0x0, nFileSizeLow=0x13a00, dwReserved0=0x0, dwReserved1=0x0, cFileName="cordless-successful.exe", cAlternateFileName="CORDLE~1.EXE")) returned 1 [0061.241] FindNextFileW (in: hFindFile=0x5107b20, lpFindFileData=0x31e5e4 | out: lpFindFileData=0x31e5e4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd943744, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x1ea1accb, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x1ea1accb, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="TableTextService", cAlternateFileName="TABLET~1")) returned 1 [0061.241] FindNextFileW (in: hFindFile=0x5107b20, lpFindFileData=0x31e5e4 | out: lpFindFileData=0x31e5e4*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0061.241] FindClose (in: hFindFile=0x5107b20 | out: hFindFile=0x5107b20) returned 1 [0061.241] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e86c) returned 1 [0061.241] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e878) returned 1 [0061.241] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e834) returned 1 [0061.241] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Windows NT\\Accessories", nBufferLength=0x105, lpBuffer=0x31e33c, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Windows NT\\Accessories", lpFilePart=0x0) returned 0x2d [0061.241] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Windows NT\\Accessories\\", nBufferLength=0x105, lpBuffer=0x31e310, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Windows NT\\Accessories\\", lpFilePart=0x0) returned 0x2e [0061.241] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Windows NT\\Accessories\\*", lpFindFileData=0x31e55c | out: lpFindFileData=0x31e55c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x80105472, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x1ea1accb, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x1ea1accb, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5107b20 [0061.242] FindNextFileW (in: hFindFile=0x5107b20, lpFindFileData=0x31e56c | out: lpFindFileData=0x31e56c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x80105472, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x1ea1accb, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x1ea1accb, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0061.242] FindNextFileW (in: hFindFile=0x5107b20, lpFindFileData=0x31e56c | out: lpFindFileData=0x31e56c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1ea1accb, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x228ba44f, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x1ea1accb, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="en-US", cAlternateFileName="")) returned 1 [0061.242] FindNextFileW (in: hFindFile=0x5107b20, lpFindFileData=0x31e56c | out: lpFindFileData=0x31e56c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8513b27, ftCreationTime.dwHighDateTime=0x1cb892b, ftLastAccessTime.dwLowDateTime=0xa8513b27, ftLastAccessTime.dwHighDateTime=0x1cb892b, ftLastWriteTime.dwLowDateTime=0xa8585f48, ftLastWriteTime.dwHighDateTime=0x1cb892b, nFileSizeHigh=0x0, nFileSizeLow=0x40ce00, dwReserved0=0x0, dwReserved1=0x0, cFileName="wordpad.exe", cAlternateFileName="")) returned 1 [0061.243] FindNextFileW (in: hFindFile=0x5107b20, lpFindFileData=0x31e56c | out: lpFindFileData=0x31e56c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xbe46e7c7, ftCreationTime.dwHighDateTime=0x1ca0413, ftLastAccessTime.dwLowDateTime=0xbe46e7c7, ftLastAccessTime.dwHighDateTime=0x1ca0413, ftLastWriteTime.dwLowDateTime=0xb1b193f0, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x2f800, dwReserved0=0x0, dwReserved1=0x0, cFileName="WordpadFilter.dll", cAlternateFileName="")) returned 1 [0061.243] FindNextFileW (in: hFindFile=0x5107b20, lpFindFileData=0x31e56c | out: lpFindFileData=0x31e56c*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0061.243] FindClose (in: hFindFile=0x5107b20 | out: hFindFile=0x5107b20) returned 1 [0061.243] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e7f4) returned 1 [0061.243] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e800) returned 1 [0061.243] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e834) returned 1 [0061.243] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Windows NT\\Accessories", nBufferLength=0x105, lpBuffer=0x31e33c, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Windows NT\\Accessories", lpFilePart=0x0) returned 0x2d [0061.243] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Windows NT\\Accessories\\", nBufferLength=0x105, lpBuffer=0x31e310, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Windows NT\\Accessories\\", lpFilePart=0x0) returned 0x2e [0061.243] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Windows NT\\Accessories\\*", lpFindFileData=0x31e55c | out: lpFindFileData=0x31e55c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x80105472, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x1ea1accb, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x1ea1accb, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5107b20 [0061.243] FindNextFileW (in: hFindFile=0x5107b20, lpFindFileData=0x31e56c | out: lpFindFileData=0x31e56c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x80105472, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x1ea1accb, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x1ea1accb, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0061.243] FindNextFileW (in: hFindFile=0x5107b20, lpFindFileData=0x31e56c | out: lpFindFileData=0x31e56c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1ea1accb, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x228ba44f, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x1ea1accb, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="en-US", cAlternateFileName="")) returned 1 [0061.244] FindNextFileW (in: hFindFile=0x5107b20, lpFindFileData=0x31e56c | out: lpFindFileData=0x31e56c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8513b27, ftCreationTime.dwHighDateTime=0x1cb892b, ftLastAccessTime.dwLowDateTime=0xa8513b27, ftLastAccessTime.dwHighDateTime=0x1cb892b, ftLastWriteTime.dwLowDateTime=0xa8585f48, ftLastWriteTime.dwHighDateTime=0x1cb892b, nFileSizeHigh=0x0, nFileSizeLow=0x40ce00, dwReserved0=0x0, dwReserved1=0x0, cFileName="wordpad.exe", cAlternateFileName="")) returned 1 [0061.244] FindNextFileW (in: hFindFile=0x5107b20, lpFindFileData=0x31e56c | out: lpFindFileData=0x31e56c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xbe46e7c7, ftCreationTime.dwHighDateTime=0x1ca0413, ftLastAccessTime.dwLowDateTime=0xbe46e7c7, ftLastAccessTime.dwHighDateTime=0x1ca0413, ftLastWriteTime.dwLowDateTime=0xb1b193f0, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x2f800, dwReserved0=0x0, dwReserved1=0x0, cFileName="WordpadFilter.dll", cAlternateFileName="")) returned 1 [0061.244] FindNextFileW (in: hFindFile=0x5107b20, lpFindFileData=0x31e56c | out: lpFindFileData=0x31e56c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xbe46e7c7, ftCreationTime.dwHighDateTime=0x1ca0413, ftLastAccessTime.dwLowDateTime=0xbe46e7c7, ftLastAccessTime.dwHighDateTime=0x1ca0413, ftLastWriteTime.dwLowDateTime=0xb1b193f0, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x2f800, dwReserved0=0x0, dwReserved1=0x0, cFileName="WordpadFilter.dll", cAlternateFileName="")) returned 0 [0061.244] FindClose (in: hFindFile=0x5107b20 | out: hFindFile=0x5107b20) returned 1 [0061.244] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e7f4) returned 1 [0061.244] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e800) returned 1 [0061.244] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e7bc) returned 1 [0061.244] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Windows NT\\Accessories\\en-US", nBufferLength=0x105, lpBuffer=0x31e2c4, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Windows NT\\Accessories\\en-US", lpFilePart=0x0) returned 0x33 [0061.244] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Windows NT\\Accessories\\en-US\\", nBufferLength=0x105, lpBuffer=0x31e298, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Windows NT\\Accessories\\en-US\\", lpFilePart=0x0) returned 0x34 [0061.244] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Windows NT\\Accessories\\en-US\\*", lpFindFileData=0x31e4e4 | out: lpFindFileData=0x31e4e4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1ea1accb, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x228ba44f, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x1ea1accb, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5107b20 [0061.245] FindNextFileW (in: hFindFile=0x5107b20, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1ea1accb, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x228ba44f, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x1ea1accb, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0061.245] FindNextFileW (in: hFindFile=0x5107b20, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe506d6c, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0xe874c0b, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0xe506d6c, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0xca00, dwReserved0=0x0, dwReserved1=0x0, cFileName="wordpad.exe.mui", cAlternateFileName="")) returned 1 [0061.245] FindNextFileW (in: hFindFile=0x5107b20, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0061.245] FindClose (in: hFindFile=0x5107b20 | out: hFindFile=0x5107b20) returned 1 [0061.245] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e77c) returned 1 [0061.245] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e788) returned 1 [0061.245] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e7bc) returned 1 [0061.245] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Windows NT\\Accessories\\en-US", nBufferLength=0x105, lpBuffer=0x31e2c4, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Windows NT\\Accessories\\en-US", lpFilePart=0x0) returned 0x33 [0061.245] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Windows NT\\Accessories\\en-US\\", nBufferLength=0x105, lpBuffer=0x31e298, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Windows NT\\Accessories\\en-US\\", lpFilePart=0x0) returned 0x34 [0061.245] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Windows NT\\Accessories\\en-US\\*", lpFindFileData=0x31e4e4 | out: lpFindFileData=0x31e4e4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1ea1accb, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x228ba44f, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x1ea1accb, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5107b20 [0061.245] FindNextFileW (in: hFindFile=0x5107b20, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1ea1accb, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x228ba44f, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x1ea1accb, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0061.246] FindNextFileW (in: hFindFile=0x5107b20, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe506d6c, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0xe874c0b, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0xe506d6c, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0xca00, dwReserved0=0x0, dwReserved1=0x0, cFileName="wordpad.exe.mui", cAlternateFileName="")) returned 1 [0061.246] FindNextFileW (in: hFindFile=0x5107b20, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe506d6c, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0xe874c0b, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0xe506d6c, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0xca00, dwReserved0=0x0, dwReserved1=0x0, cFileName="wordpad.exe.mui", cAlternateFileName="")) returned 0 [0061.246] FindClose (in: hFindFile=0x5107b20 | out: hFindFile=0x5107b20) returned 1 [0061.246] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e77c) returned 1 [0061.246] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e788) returned 1 [0061.246] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e834) returned 1 [0061.246] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Windows NT\\TableTextService", nBufferLength=0x105, lpBuffer=0x31e33c, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Windows NT\\TableTextService", lpFilePart=0x0) returned 0x32 [0061.246] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Windows NT\\TableTextService\\", nBufferLength=0x105, lpBuffer=0x31e310, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Windows NT\\TableTextService\\", lpFilePart=0x0) returned 0x33 [0061.246] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Windows NT\\TableTextService\\*", lpFindFileData=0x31e55c | out: lpFindFileData=0x31e55c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd943744, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x1ea1accb, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x1ea1accb, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5107b20 [0061.248] FindNextFileW (in: hFindFile=0x5107b20, lpFindFileData=0x31e56c | out: lpFindFileData=0x31e56c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd943744, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x1ea1accb, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x1ea1accb, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0061.248] FindNextFileW (in: hFindFile=0x5107b20, lpFindFileData=0x31e56c | out: lpFindFileData=0x31e56c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1ea1accb, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x228e0708, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x1ea1accb, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="en-US", cAlternateFileName="")) returned 1 [0061.248] FindNextFileW (in: hFindFile=0x5107b20, lpFindFileData=0x31e56c | out: lpFindFileData=0x31e56c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x688296e7, ftCreationTime.dwHighDateTime=0x1ca0411, ftLastAccessTime.dwLowDateTime=0x688296e7, ftLastAccessTime.dwHighDateTime=0x1ca0411, ftLastWriteTime.dwLowDateTime=0xaf1e3ee0, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x4f600, dwReserved0=0x0, dwReserved1=0x0, cFileName="TableTextService.dll", cAlternateFileName="")) returned 1 [0061.248] FindNextFileW (in: hFindFile=0x5107b20, lpFindFileData=0x31e56c | out: lpFindFileData=0x31e56c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x482a6fb4, ftCreationTime.dwHighDateTime=0x1ca0402, ftLastAccessTime.dwLowDateTime=0x482a6fb4, ftLastAccessTime.dwHighDateTime=0x1ca0402, ftLastWriteTime.dwLowDateTime=0x77dccedc, ftLastWriteTime.dwHighDateTime=0x1c9ea14, nFileSizeHigh=0x0, nFileSizeLow=0x3f54, dwReserved0=0x0, dwReserved1=0x0, cFileName="TableTextServiceAmharic.txt", cAlternateFileName="")) returned 1 [0061.248] FindNextFileW (in: hFindFile=0x5107b20, lpFindFileData=0x31e56c | out: lpFindFileData=0x31e56c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x47eeed6d, ftCreationTime.dwHighDateTime=0x1ca0402, ftLastAccessTime.dwLowDateTime=0x47eeed6d, ftLastAccessTime.dwHighDateTime=0x1ca0402, ftLastWriteTime.dwLowDateTime=0x77e3f2fc, ftLastWriteTime.dwHighDateTime=0x1c9ea14, nFileSizeHigh=0x0, nFileSizeLow=0x136bf6, dwReserved0=0x0, dwReserved1=0x0, cFileName="TableTextServiceArray.txt", cAlternateFileName="")) returned 1 [0061.248] FindNextFileW (in: hFindFile=0x5107b20, lpFindFileData=0x31e56c | out: lpFindFileData=0x31e56c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x77e3f2fc, ftCreationTime.dwHighDateTime=0x1c9ea14, ftLastAccessTime.dwLowDateTime=0x77e3f2fc, ftLastAccessTime.dwHighDateTime=0x1c9ea14, ftLastWriteTime.dwLowDateTime=0x77ed787c, ftLastWriteTime.dwHighDateTime=0x1c9ea14, nFileSizeHigh=0x0, nFileSizeLow=0xef486, dwReserved0=0x0, dwReserved1=0x0, cFileName="TableTextServiceDaYi.txt", cAlternateFileName="")) returned 1 [0061.248] FindNextFileW (in: hFindFile=0x5107b20, lpFindFileData=0x31e56c | out: lpFindFileData=0x31e56c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x47f6118a, ftCreationTime.dwHighDateTime=0x1ca0402, ftLastAccessTime.dwLowDateTime=0x47f6118a, ftLastAccessTime.dwHighDateTime=0x1ca0402, ftLastWriteTime.dwLowDateTime=0x7821d6bc, ftLastWriteTime.dwHighDateTime=0x1c9ea14, nFileSizeHigh=0x0, nFileSizeLow=0x196b56, dwReserved0=0x0, dwReserved1=0x0, cFileName="TableTextServiceSimplifiedQuanPin.txt", cAlternateFileName="")) returned 1 [0061.249] FindNextFileW (in: hFindFile=0x5107b20, lpFindFileData=0x31e56c | out: lpFindFileData=0x31e56c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x47ff9706, ftCreationTime.dwHighDateTime=0x1ca0402, ftLastAccessTime.dwLowDateTime=0x47ff9706, ftLastAccessTime.dwHighDateTime=0x1ca0402, ftLastWriteTime.dwLowDateTime=0x782dbd9c, ftLastWriteTime.dwHighDateTime=0x1c9ea14, nFileSizeHigh=0x0, nFileSizeLow=0x160e36, dwReserved0=0x0, dwReserved1=0x0, cFileName="TableTextServiceSimplifiedShuangPin.txt", cAlternateFileName="")) returned 1 [0061.249] FindNextFileW (in: hFindFile=0x5107b20, lpFindFileData=0x31e56c | out: lpFindFileData=0x31e56c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x480459c4, ftCreationTime.dwHighDateTime=0x1ca0402, ftLastAccessTime.dwLowDateTime=0x480459c4, ftLastAccessTime.dwHighDateTime=0x1ca0402, ftLastWriteTime.dwLowDateTime=0x783c05dc, ftLastWriteTime.dwHighDateTime=0x1c9ea14, nFileSizeHigh=0x0, nFileSizeLow=0x1b9fb0, dwReserved0=0x0, dwReserved1=0x0, cFileName="TableTextServiceSimplifiedZhengMa.txt", cAlternateFileName="")) returned 1 [0061.249] FindNextFileW (in: hFindFile=0x5107b20, lpFindFileData=0x31e56c | out: lpFindFileData=0x31e56c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x482a6fb4, ftCreationTime.dwHighDateTime=0x1ca0402, ftLastAccessTime.dwLowDateTime=0x482a6fb4, ftLastAccessTime.dwHighDateTime=0x1ca0402, ftLastWriteTime.dwLowDateTime=0x783c05dc, ftLastWriteTime.dwHighDateTime=0x1c9ea14, nFileSizeHigh=0x0, nFileSizeLow=0xafa8, dwReserved0=0x0, dwReserved1=0x0, cFileName="TableTextServiceYi.txt", cAlternateFileName="")) returned 1 [0061.249] FindNextFileW (in: hFindFile=0x5107b20, lpFindFileData=0x31e56c | out: lpFindFileData=0x31e56c*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0061.249] FindClose (in: hFindFile=0x5107b20 | out: hFindFile=0x5107b20) returned 1 [0061.250] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e7f4) returned 1 [0061.250] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e800) returned 1 [0061.250] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Windows NT\\TableTextService", nBufferLength=0x105, lpBuffer=0x31e33c, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Windows NT\\TableTextService", lpFilePart=0x0) returned 0x32 [0061.250] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Windows NT\\TableTextService\\", nBufferLength=0x105, lpBuffer=0x31e310, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Windows NT\\TableTextService\\", lpFilePart=0x0) returned 0x33 [0061.250] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Windows NT\\TableTextService\\*", lpFindFileData=0x31e55c | out: lpFindFileData=0x31e55c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd943744, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x1ea1accb, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x1ea1accb, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5107b20 [0061.251] FindNextFileW (in: hFindFile=0x5107b20, lpFindFileData=0x31e56c | out: lpFindFileData=0x31e56c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd943744, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x1ea1accb, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x1ea1accb, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0061.251] FindNextFileW (in: hFindFile=0x5107b20, lpFindFileData=0x31e56c | out: lpFindFileData=0x31e56c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1ea1accb, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x228e0708, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x1ea1accb, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="en-US", cAlternateFileName="")) returned 1 [0061.251] FindNextFileW (in: hFindFile=0x5107b20, lpFindFileData=0x31e56c | out: lpFindFileData=0x31e56c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x688296e7, ftCreationTime.dwHighDateTime=0x1ca0411, ftLastAccessTime.dwLowDateTime=0x688296e7, ftLastAccessTime.dwHighDateTime=0x1ca0411, ftLastWriteTime.dwLowDateTime=0xaf1e3ee0, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x4f600, dwReserved0=0x0, dwReserved1=0x0, cFileName="TableTextService.dll", cAlternateFileName="")) returned 1 [0061.251] FindNextFileW (in: hFindFile=0x5107b20, lpFindFileData=0x31e56c | out: lpFindFileData=0x31e56c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x482a6fb4, ftCreationTime.dwHighDateTime=0x1ca0402, ftLastAccessTime.dwLowDateTime=0x482a6fb4, ftLastAccessTime.dwHighDateTime=0x1ca0402, ftLastWriteTime.dwLowDateTime=0x77dccedc, ftLastWriteTime.dwHighDateTime=0x1c9ea14, nFileSizeHigh=0x0, nFileSizeLow=0x3f54, dwReserved0=0x0, dwReserved1=0x0, cFileName="TableTextServiceAmharic.txt", cAlternateFileName="")) returned 1 [0061.251] FindNextFileW (in: hFindFile=0x5107b20, lpFindFileData=0x31e56c | out: lpFindFileData=0x31e56c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x47eeed6d, ftCreationTime.dwHighDateTime=0x1ca0402, ftLastAccessTime.dwLowDateTime=0x47eeed6d, ftLastAccessTime.dwHighDateTime=0x1ca0402, ftLastWriteTime.dwLowDateTime=0x77e3f2fc, ftLastWriteTime.dwHighDateTime=0x1c9ea14, nFileSizeHigh=0x0, nFileSizeLow=0x136bf6, dwReserved0=0x0, dwReserved1=0x0, cFileName="TableTextServiceArray.txt", cAlternateFileName="")) returned 1 [0061.251] FindNextFileW (in: hFindFile=0x5107b20, lpFindFileData=0x31e56c | out: lpFindFileData=0x31e56c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x77e3f2fc, ftCreationTime.dwHighDateTime=0x1c9ea14, ftLastAccessTime.dwLowDateTime=0x77e3f2fc, ftLastAccessTime.dwHighDateTime=0x1c9ea14, ftLastWriteTime.dwLowDateTime=0x77ed787c, ftLastWriteTime.dwHighDateTime=0x1c9ea14, nFileSizeHigh=0x0, nFileSizeLow=0xef486, dwReserved0=0x0, dwReserved1=0x0, cFileName="TableTextServiceDaYi.txt", cAlternateFileName="")) returned 1 [0061.252] FindNextFileW (in: hFindFile=0x5107b20, lpFindFileData=0x31e56c | out: lpFindFileData=0x31e56c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x47f6118a, ftCreationTime.dwHighDateTime=0x1ca0402, ftLastAccessTime.dwLowDateTime=0x47f6118a, ftLastAccessTime.dwHighDateTime=0x1ca0402, ftLastWriteTime.dwLowDateTime=0x7821d6bc, ftLastWriteTime.dwHighDateTime=0x1c9ea14, nFileSizeHigh=0x0, nFileSizeLow=0x196b56, dwReserved0=0x0, dwReserved1=0x0, cFileName="TableTextServiceSimplifiedQuanPin.txt", cAlternateFileName="")) returned 1 [0061.252] FindNextFileW (in: hFindFile=0x5107b20, lpFindFileData=0x31e56c | out: lpFindFileData=0x31e56c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x47ff9706, ftCreationTime.dwHighDateTime=0x1ca0402, ftLastAccessTime.dwLowDateTime=0x47ff9706, ftLastAccessTime.dwHighDateTime=0x1ca0402, ftLastWriteTime.dwLowDateTime=0x782dbd9c, ftLastWriteTime.dwHighDateTime=0x1c9ea14, nFileSizeHigh=0x0, nFileSizeLow=0x160e36, dwReserved0=0x0, dwReserved1=0x0, cFileName="TableTextServiceSimplifiedShuangPin.txt", cAlternateFileName="")) returned 1 [0061.252] FindNextFileW (in: hFindFile=0x5107b20, lpFindFileData=0x31e56c | out: lpFindFileData=0x31e56c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x480459c4, ftCreationTime.dwHighDateTime=0x1ca0402, ftLastAccessTime.dwLowDateTime=0x480459c4, ftLastAccessTime.dwHighDateTime=0x1ca0402, ftLastWriteTime.dwLowDateTime=0x783c05dc, ftLastWriteTime.dwHighDateTime=0x1c9ea14, nFileSizeHigh=0x0, nFileSizeLow=0x1b9fb0, dwReserved0=0x0, dwReserved1=0x0, cFileName="TableTextServiceSimplifiedZhengMa.txt", cAlternateFileName="")) returned 1 [0061.252] FindNextFileW (in: hFindFile=0x5107b20, lpFindFileData=0x31e56c | out: lpFindFileData=0x31e56c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x482a6fb4, ftCreationTime.dwHighDateTime=0x1ca0402, ftLastAccessTime.dwLowDateTime=0x482a6fb4, ftLastAccessTime.dwHighDateTime=0x1ca0402, ftLastWriteTime.dwLowDateTime=0x783c05dc, ftLastWriteTime.dwHighDateTime=0x1c9ea14, nFileSizeHigh=0x0, nFileSizeLow=0xafa8, dwReserved0=0x0, dwReserved1=0x0, cFileName="TableTextServiceYi.txt", cAlternateFileName="")) returned 1 [0061.252] FindNextFileW (in: hFindFile=0x5107b20, lpFindFileData=0x31e56c | out: lpFindFileData=0x31e56c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x482a6fb4, ftCreationTime.dwHighDateTime=0x1ca0402, ftLastAccessTime.dwLowDateTime=0x482a6fb4, ftLastAccessTime.dwHighDateTime=0x1ca0402, ftLastWriteTime.dwLowDateTime=0x783c05dc, ftLastWriteTime.dwHighDateTime=0x1c9ea14, nFileSizeHigh=0x0, nFileSizeLow=0xafa8, dwReserved0=0x0, dwReserved1=0x0, cFileName="TableTextServiceYi.txt", cAlternateFileName="")) returned 0 [0061.252] FindClose (in: hFindFile=0x5107b20 | out: hFindFile=0x5107b20) returned 1 [0061.253] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Windows NT\\TableTextService\\TableTextServiceAmharic.txt", nBufferLength=0x105, lpBuffer=0x31e20c, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Windows NT\\TableTextService\\TableTextServiceAmharic.txt", lpFilePart=0x0) returned 0x4e [0061.253] CreateFileW (lpFileName="C:\\Program Files (x86)\\Windows NT\\TableTextService\\TableTextServiceAmharic.txt" (normalized: "c:\\program files (x86)\\windows nt\\tabletextservice\\tabletextserviceamharic.txt"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x178 [0061.254] GetFileType (hFile=0x178) returned 0x1 [0061.254] GetFileType (hFile=0x178) returned 0x1 [0061.254] GetFileSize (in: hFile=0x178, lpFileSizeHigh=0x31e808 | out: lpFileSizeHigh=0x31e808*=0x0) returned 0x3f54 [0061.254] ReadFile (in: hFile=0x178, lpBuffer=0x2715ea4, nNumberOfBytesToRead=0x3f54, lpNumberOfBytesRead=0x31e7b4, lpOverlapped=0x0 | out: lpBuffer=0x2715ea4*, lpNumberOfBytesRead=0x31e7b4*=0x3f54, lpOverlapped=0x0) returned 1 [0061.256] CloseHandle (hObject=0x178) returned 1 [0061.297] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Windows NT\\TableTextService\\TableTextServiceAmharic.txt", nBufferLength=0x105, lpBuffer=0x31e1f8, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Windows NT\\TableTextService\\TableTextServiceAmharic.txt", lpFilePart=0x0) returned 0x4e [0061.297] CreateFileW (lpFileName="C:\\Program Files (x86)\\Windows NT\\TableTextService\\TableTextServiceAmharic.txt" (normalized: "c:\\program files (x86)\\windows nt\\tabletextservice\\tabletextserviceamharic.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0xffffffff [0061.298] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31d528) returned 1 [0061.298] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e8ac) returned 1 [0061.298] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Windows Photo Viewer", nBufferLength=0x105, lpBuffer=0x31e3b4, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Windows Photo Viewer", lpFilePart=0x0) returned 0x2b [0061.298] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Windows Photo Viewer\\", nBufferLength=0x105, lpBuffer=0x31e388, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Windows Photo Viewer\\", lpFilePart=0x0) returned 0x2c [0061.298] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Windows Photo Viewer\\*", lpFindFileData=0x31e5d4 | out: lpFindFileData=0x31e5d4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x80105472, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0xd9ac4d60, ftLastAccessTime.dwHighDateTime=0x1d5e82a, ftLastWriteTime.dwLowDateTime=0xd9ac4d60, ftLastWriteTime.dwHighDateTime=0x1d5e82a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5107c60 [0061.299] FindNextFileW (in: hFindFile=0x5107c60, lpFindFileData=0x31e5e4 | out: lpFindFileData=0x31e5e4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x80105472, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0xd9ac4d60, ftLastAccessTime.dwHighDateTime=0x1d5e82a, ftLastWriteTime.dwLowDateTime=0xd9ac4d60, ftLastWriteTime.dwHighDateTime=0x1d5e82a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0061.299] FindNextFileW (in: hFindFile=0x5107c60, lpFindFileData=0x31e5e4 | out: lpFindFileData=0x31e5e4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1ea40f84, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x22b43298, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x1ea40f84, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="en-US", cAlternateFileName="")) returned 1 [0061.299] FindNextFileW (in: hFindFile=0x5107c60, lpFindFileData=0x31e5e4 | out: lpFindFileData=0x31e5e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7849cb5e, ftCreationTime.dwHighDateTime=0x1ca0417, ftLastAccessTime.dwLowDateTime=0x7849cb5e, ftLastAccessTime.dwHighDateTime=0x1ca0417, ftLastWriteTime.dwLowDateTime=0xdacc7aae, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x16b08, dwReserved0=0x0, dwReserved1=0x0, cFileName="ImagingDevices.exe", cAlternateFileName="")) returned 1 [0061.299] FindNextFileW (in: hFindFile=0x5107c60, lpFindFileData=0x31e5e4 | out: lpFindFileData=0x31e5e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb67366c7, ftCreationTime.dwHighDateTime=0x1cb892b, ftLastAccessTime.dwLowDateTime=0xb67366c7, ftLastAccessTime.dwHighDateTime=0x1cb892b, ftLastWriteTime.dwLowDateTime=0xb675c828, ftLastWriteTime.dwHighDateTime=0x1cb892b, nFileSizeHigh=0x0, nFileSizeLow=0x1c4800, dwReserved0=0x0, dwReserved1=0x0, cFileName="ImagingEngine.dll", cAlternateFileName="")) returned 1 [0061.299] FindNextFileW (in: hFindFile=0x5107c60, lpFindFileData=0x31e5e4 | out: lpFindFileData=0x31e5e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb6710567, ftCreationTime.dwHighDateTime=0x1cb892b, ftLastAccessTime.dwLowDateTime=0xb6710567, ftLastAccessTime.dwHighDateTime=0x1cb892b, ftLastWriteTime.dwLowDateTime=0xb67366c7, ftLastWriteTime.dwHighDateTime=0x1cb892b, nFileSizeHigh=0x0, nFileSizeLow=0xe0000, dwReserved0=0x0, dwReserved1=0x0, cFileName="PhotoAcq.dll", cAlternateFileName="")) returned 1 [0061.299] FindNextFileW (in: hFindFile=0x5107c60, lpFindFileData=0x31e5e4 | out: lpFindFileData=0x31e5e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x78b02653, ftCreationTime.dwHighDateTime=0x1ca0417, ftLastAccessTime.dwLowDateTime=0x78b02653, ftLastAccessTime.dwHighDateTime=0x1ca0417, ftLastWriteTime.dwLowDateTime=0xad33fb10, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x8800, dwReserved0=0x0, dwReserved1=0x0, cFileName="PhotoBase.dll", cAlternateFileName="")) returned 1 [0061.299] FindNextFileW (in: hFindFile=0x5107c60, lpFindFileData=0x31e5e4 | out: lpFindFileData=0x31e5e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb66ea407, ftCreationTime.dwHighDateTime=0x1cb892b, ftLastAccessTime.dwLowDateTime=0xb66ea407, ftLastAccessTime.dwHighDateTime=0x1cb892b, ftLastWriteTime.dwLowDateTime=0xb6710567, ftLastWriteTime.dwHighDateTime=0x1cb892b, nFileSizeHigh=0x0, nFileSizeLow=0x163800, dwReserved0=0x0, dwReserved1=0x0, cFileName="PhotoViewer.dll", cAlternateFileName="")) returned 1 [0061.299] FindNextFileW (in: hFindFile=0x5107c60, lpFindFileData=0x31e5e4 | out: lpFindFileData=0x31e5e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x78bef200, ftCreationTime.dwHighDateTime=0x1d57b1f, ftLastAccessTime.dwLowDateTime=0x8168a2a0, ftLastAccessTime.dwHighDateTime=0x1d5d517, ftLastWriteTime.dwLowDateTime=0x8168a2a0, ftLastWriteTime.dwHighDateTime=0x1d5d517, nFileSizeHigh=0x0, nFileSizeLow=0x13a00, dwReserved0=0x0, dwReserved1=0x0, cFileName="utg2.exe", cAlternateFileName="")) returned 1 [0061.300] FindNextFileW (in: hFindFile=0x5107c60, lpFindFileData=0x31e5e4 | out: lpFindFileData=0x31e5e4*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0061.300] FindClose (in: hFindFile=0x5107c60 | out: hFindFile=0x5107c60) returned 1 [0061.300] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e86c) returned 1 [0061.300] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e878) returned 1 [0061.300] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e8ac) returned 1 [0061.300] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Windows Photo Viewer", nBufferLength=0x105, lpBuffer=0x31e3b4, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Windows Photo Viewer", lpFilePart=0x0) returned 0x2b [0061.300] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Windows Photo Viewer\\", nBufferLength=0x105, lpBuffer=0x31e388, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Windows Photo Viewer\\", lpFilePart=0x0) returned 0x2c [0061.300] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Windows Photo Viewer\\*", lpFindFileData=0x31e5d4 | out: lpFindFileData=0x31e5d4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x80105472, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0xd9ac4d60, ftLastAccessTime.dwHighDateTime=0x1d5e82a, ftLastWriteTime.dwLowDateTime=0xd9ac4d60, ftLastWriteTime.dwHighDateTime=0x1d5e82a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5107c60 [0061.300] FindNextFileW (in: hFindFile=0x5107c60, lpFindFileData=0x31e5e4 | out: lpFindFileData=0x31e5e4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x80105472, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0xd9ac4d60, ftLastAccessTime.dwHighDateTime=0x1d5e82a, ftLastWriteTime.dwLowDateTime=0xd9ac4d60, ftLastWriteTime.dwHighDateTime=0x1d5e82a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0061.300] FindNextFileW (in: hFindFile=0x5107c60, lpFindFileData=0x31e5e4 | out: lpFindFileData=0x31e5e4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1ea40f84, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x22b43298, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x1ea40f84, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="en-US", cAlternateFileName="")) returned 1 [0061.300] FindNextFileW (in: hFindFile=0x5107c60, lpFindFileData=0x31e5e4 | out: lpFindFileData=0x31e5e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7849cb5e, ftCreationTime.dwHighDateTime=0x1ca0417, ftLastAccessTime.dwLowDateTime=0x7849cb5e, ftLastAccessTime.dwHighDateTime=0x1ca0417, ftLastWriteTime.dwLowDateTime=0xdacc7aae, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x16b08, dwReserved0=0x0, dwReserved1=0x0, cFileName="ImagingDevices.exe", cAlternateFileName="")) returned 1 [0061.301] FindNextFileW (in: hFindFile=0x5107c60, lpFindFileData=0x31e5e4 | out: lpFindFileData=0x31e5e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb67366c7, ftCreationTime.dwHighDateTime=0x1cb892b, ftLastAccessTime.dwLowDateTime=0xb67366c7, ftLastAccessTime.dwHighDateTime=0x1cb892b, ftLastWriteTime.dwLowDateTime=0xb675c828, ftLastWriteTime.dwHighDateTime=0x1cb892b, nFileSizeHigh=0x0, nFileSizeLow=0x1c4800, dwReserved0=0x0, dwReserved1=0x0, cFileName="ImagingEngine.dll", cAlternateFileName="")) returned 1 [0061.301] FindNextFileW (in: hFindFile=0x5107c60, lpFindFileData=0x31e5e4 | out: lpFindFileData=0x31e5e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb6710567, ftCreationTime.dwHighDateTime=0x1cb892b, ftLastAccessTime.dwLowDateTime=0xb6710567, ftLastAccessTime.dwHighDateTime=0x1cb892b, ftLastWriteTime.dwLowDateTime=0xb67366c7, ftLastWriteTime.dwHighDateTime=0x1cb892b, nFileSizeHigh=0x0, nFileSizeLow=0xe0000, dwReserved0=0x0, dwReserved1=0x0, cFileName="PhotoAcq.dll", cAlternateFileName="")) returned 1 [0061.301] FindNextFileW (in: hFindFile=0x5107c60, lpFindFileData=0x31e5e4 | out: lpFindFileData=0x31e5e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x78b02653, ftCreationTime.dwHighDateTime=0x1ca0417, ftLastAccessTime.dwLowDateTime=0x78b02653, ftLastAccessTime.dwHighDateTime=0x1ca0417, ftLastWriteTime.dwLowDateTime=0xad33fb10, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x8800, dwReserved0=0x0, dwReserved1=0x0, cFileName="PhotoBase.dll", cAlternateFileName="")) returned 1 [0061.301] FindNextFileW (in: hFindFile=0x5107c60, lpFindFileData=0x31e5e4 | out: lpFindFileData=0x31e5e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb66ea407, ftCreationTime.dwHighDateTime=0x1cb892b, ftLastAccessTime.dwLowDateTime=0xb66ea407, ftLastAccessTime.dwHighDateTime=0x1cb892b, ftLastWriteTime.dwLowDateTime=0xb6710567, ftLastWriteTime.dwHighDateTime=0x1cb892b, nFileSizeHigh=0x0, nFileSizeLow=0x163800, dwReserved0=0x0, dwReserved1=0x0, cFileName="PhotoViewer.dll", cAlternateFileName="")) returned 1 [0061.301] FindNextFileW (in: hFindFile=0x5107c60, lpFindFileData=0x31e5e4 | out: lpFindFileData=0x31e5e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x78bef200, ftCreationTime.dwHighDateTime=0x1d57b1f, ftLastAccessTime.dwLowDateTime=0x8168a2a0, ftLastAccessTime.dwHighDateTime=0x1d5d517, ftLastWriteTime.dwLowDateTime=0x8168a2a0, ftLastWriteTime.dwHighDateTime=0x1d5d517, nFileSizeHigh=0x0, nFileSizeLow=0x13a00, dwReserved0=0x0, dwReserved1=0x0, cFileName="utg2.exe", cAlternateFileName="")) returned 1 [0061.301] FindNextFileW (in: hFindFile=0x5107c60, lpFindFileData=0x31e5e4 | out: lpFindFileData=0x31e5e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x78bef200, ftCreationTime.dwHighDateTime=0x1d57b1f, ftLastAccessTime.dwLowDateTime=0x8168a2a0, ftLastAccessTime.dwHighDateTime=0x1d5d517, ftLastWriteTime.dwLowDateTime=0x8168a2a0, ftLastWriteTime.dwHighDateTime=0x1d5d517, nFileSizeHigh=0x0, nFileSizeLow=0x13a00, dwReserved0=0x0, dwReserved1=0x0, cFileName="utg2.exe", cAlternateFileName="")) returned 0 [0061.301] FindClose (in: hFindFile=0x5107c60 | out: hFindFile=0x5107c60) returned 1 [0061.301] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e86c) returned 1 [0061.301] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e878) returned 1 [0061.302] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e834) returned 1 [0061.302] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Windows Photo Viewer\\en-US", nBufferLength=0x105, lpBuffer=0x31e33c, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Windows Photo Viewer\\en-US", lpFilePart=0x0) returned 0x31 [0061.302] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Windows Photo Viewer\\en-US\\", nBufferLength=0x105, lpBuffer=0x31e310, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Windows Photo Viewer\\en-US\\", lpFilePart=0x0) returned 0x32 [0061.302] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Windows Photo Viewer\\en-US\\*", lpFindFileData=0x31e55c | out: lpFindFileData=0x31e55c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1ea40f84, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x22b43298, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x1ea40f84, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5107c60 [0061.302] FindNextFileW (in: hFindFile=0x5107c60, lpFindFileData=0x31e56c | out: lpFindFileData=0x31e56c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1ea40f84, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x22b43298, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x1ea40f84, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0061.302] FindNextFileW (in: hFindFile=0x5107c60, lpFindFileData=0x31e56c | out: lpFindFileData=0x31e56c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x11090870, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x1138bee4, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x11090870, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0xa00, dwReserved0=0x0, dwReserved1=0x0, cFileName="ImagingDevices.exe.mui", cAlternateFileName="")) returned 1 [0061.302] FindNextFileW (in: hFindFile=0x5107c60, lpFindFileData=0x31e56c | out: lpFindFileData=0x31e56c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x11090870, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x1138bee4, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x11090870, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x4c00, dwReserved0=0x0, dwReserved1=0x0, cFileName="PhotoAcq.dll.mui", cAlternateFileName="")) returned 1 [0061.302] FindNextFileW (in: hFindFile=0x5107c60, lpFindFileData=0x31e56c | out: lpFindFileData=0x31e56c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x11090870, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x1138bee4, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x11090870, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x4400, dwReserved0=0x0, dwReserved1=0x0, cFileName="PhotoViewer.dll.mui", cAlternateFileName="")) returned 1 [0061.302] FindNextFileW (in: hFindFile=0x5107c60, lpFindFileData=0x31e56c | out: lpFindFileData=0x31e56c*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0061.303] FindClose (in: hFindFile=0x5107c60 | out: hFindFile=0x5107c60) returned 1 [0061.303] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e7f4) returned 1 [0061.303] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e800) returned 1 [0061.303] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e834) returned 1 [0061.303] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Windows Photo Viewer\\en-US", nBufferLength=0x105, lpBuffer=0x31e33c, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Windows Photo Viewer\\en-US", lpFilePart=0x0) returned 0x31 [0061.303] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Windows Photo Viewer\\en-US\\", nBufferLength=0x105, lpBuffer=0x31e310, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Windows Photo Viewer\\en-US\\", lpFilePart=0x0) returned 0x32 [0061.303] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Windows Photo Viewer\\en-US\\*", lpFindFileData=0x31e55c | out: lpFindFileData=0x31e55c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1ea40f84, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x22b43298, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x1ea40f84, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5107c60 [0061.303] FindNextFileW (in: hFindFile=0x5107c60, lpFindFileData=0x31e56c | out: lpFindFileData=0x31e56c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1ea40f84, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x22b43298, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x1ea40f84, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0061.303] FindNextFileW (in: hFindFile=0x5107c60, lpFindFileData=0x31e56c | out: lpFindFileData=0x31e56c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x11090870, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x1138bee4, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x11090870, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0xa00, dwReserved0=0x0, dwReserved1=0x0, cFileName="ImagingDevices.exe.mui", cAlternateFileName="")) returned 1 [0061.303] FindNextFileW (in: hFindFile=0x5107c60, lpFindFileData=0x31e56c | out: lpFindFileData=0x31e56c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x11090870, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x1138bee4, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x11090870, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x4c00, dwReserved0=0x0, dwReserved1=0x0, cFileName="PhotoAcq.dll.mui", cAlternateFileName="")) returned 1 [0061.304] FindNextFileW (in: hFindFile=0x5107c60, lpFindFileData=0x31e56c | out: lpFindFileData=0x31e56c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x11090870, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x1138bee4, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x11090870, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x4400, dwReserved0=0x0, dwReserved1=0x0, cFileName="PhotoViewer.dll.mui", cAlternateFileName="")) returned 1 [0061.304] FindNextFileW (in: hFindFile=0x5107c60, lpFindFileData=0x31e56c | out: lpFindFileData=0x31e56c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x11090870, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x1138bee4, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x11090870, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x4400, dwReserved0=0x0, dwReserved1=0x0, cFileName="PhotoViewer.dll.mui", cAlternateFileName="")) returned 0 [0061.304] FindClose (in: hFindFile=0x5107c60 | out: hFindFile=0x5107c60) returned 1 [0061.304] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e7f4) returned 1 [0061.304] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e800) returned 1 [0061.304] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e8ac) returned 1 [0061.304] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Windows Portable Devices", nBufferLength=0x105, lpBuffer=0x31e3b4, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Windows Portable Devices", lpFilePart=0x0) returned 0x2f [0061.304] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Windows Portable Devices\\", nBufferLength=0x105, lpBuffer=0x31e388, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Windows Portable Devices\\", lpFilePart=0x0) returned 0x30 [0061.304] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Windows Portable Devices\\*", lpFindFileData=0x31e5d4 | out: lpFindFileData=0x31e5d4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8012b5d2, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x9b7348a4, ftLastAccessTime.dwHighDateTime=0x1cb892c, ftLastWriteTime.dwLowDateTime=0x9b7348a4, ftLastWriteTime.dwHighDateTime=0x1cb892c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5107c60 [0061.304] FindNextFileW (in: hFindFile=0x5107c60, lpFindFileData=0x31e5e4 | out: lpFindFileData=0x31e5e4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8012b5d2, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x9b7348a4, ftLastAccessTime.dwHighDateTime=0x1cb892c, ftLastWriteTime.dwLowDateTime=0x9b7348a4, ftLastWriteTime.dwHighDateTime=0x1cb892c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0061.305] FindNextFileW (in: hFindFile=0x5107c60, lpFindFileData=0x31e5e4 | out: lpFindFileData=0x31e5e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb42e9705, ftCreationTime.dwHighDateTime=0x1cb892b, ftLastAccessTime.dwLowDateTime=0xb42e9705, ftLastAccessTime.dwHighDateTime=0x1cb892b, ftLastWriteTime.dwLowDateTime=0xb430f865, ftLastWriteTime.dwHighDateTime=0x1cb892b, nFileSizeHigh=0x0, nFileSizeLow=0x2e600, dwReserved0=0x0, dwReserved1=0x0, cFileName="sqmapi.dll", cAlternateFileName="")) returned 1 [0061.305] FindNextFileW (in: hFindFile=0x5107c60, lpFindFileData=0x31e5e4 | out: lpFindFileData=0x31e5e4*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0061.305] FindClose (in: hFindFile=0x5107c60 | out: hFindFile=0x5107c60) returned 1 [0061.305] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e86c) returned 1 [0061.305] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e878) returned 1 [0061.305] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e8ac) returned 1 [0061.305] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Windows Portable Devices", nBufferLength=0x105, lpBuffer=0x31e3b4, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Windows Portable Devices", lpFilePart=0x0) returned 0x2f [0061.305] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Windows Portable Devices\\", nBufferLength=0x105, lpBuffer=0x31e388, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Windows Portable Devices\\", lpFilePart=0x0) returned 0x30 [0061.305] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Windows Portable Devices\\*", lpFindFileData=0x31e5d4 | out: lpFindFileData=0x31e5d4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8012b5d2, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x9b7348a4, ftLastAccessTime.dwHighDateTime=0x1cb892c, ftLastWriteTime.dwLowDateTime=0x9b7348a4, ftLastWriteTime.dwHighDateTime=0x1cb892c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5107c60 [0061.305] FindNextFileW (in: hFindFile=0x5107c60, lpFindFileData=0x31e5e4 | out: lpFindFileData=0x31e5e4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8012b5d2, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x9b7348a4, ftLastAccessTime.dwHighDateTime=0x1cb892c, ftLastWriteTime.dwLowDateTime=0x9b7348a4, ftLastWriteTime.dwHighDateTime=0x1cb892c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0061.305] FindNextFileW (in: hFindFile=0x5107c60, lpFindFileData=0x31e5e4 | out: lpFindFileData=0x31e5e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb42e9705, ftCreationTime.dwHighDateTime=0x1cb892b, ftLastAccessTime.dwLowDateTime=0xb42e9705, ftLastAccessTime.dwHighDateTime=0x1cb892b, ftLastWriteTime.dwLowDateTime=0xb430f865, ftLastWriteTime.dwHighDateTime=0x1cb892b, nFileSizeHigh=0x0, nFileSizeLow=0x2e600, dwReserved0=0x0, dwReserved1=0x0, cFileName="sqmapi.dll", cAlternateFileName="")) returned 1 [0061.306] FindNextFileW (in: hFindFile=0x5107c60, lpFindFileData=0x31e5e4 | out: lpFindFileData=0x31e5e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb42e9705, ftCreationTime.dwHighDateTime=0x1cb892b, ftLastAccessTime.dwLowDateTime=0xb42e9705, ftLastAccessTime.dwHighDateTime=0x1cb892b, ftLastWriteTime.dwLowDateTime=0xb430f865, ftLastWriteTime.dwHighDateTime=0x1cb892b, nFileSizeHigh=0x0, nFileSizeLow=0x2e600, dwReserved0=0x0, dwReserved1=0x0, cFileName="sqmapi.dll", cAlternateFileName="")) returned 0 [0061.306] FindClose (in: hFindFile=0x5107c60 | out: hFindFile=0x5107c60) returned 1 [0061.306] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e86c) returned 1 [0061.306] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e878) returned 1 [0061.306] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e8ac) returned 1 [0061.306] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar", nBufferLength=0x105, lpBuffer=0x31e3b4, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Windows Sidebar", lpFilePart=0x0) returned 0x26 [0061.306] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\", nBufferLength=0x105, lpBuffer=0x31e388, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Windows Sidebar\\", lpFilePart=0x0) returned 0x27 [0061.306] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\*", lpFindFileData=0x31e5d4 | out: lpFindFileData=0x31e5d4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8012b5d2, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0xd9a9ec00, ftLastAccessTime.dwHighDateTime=0x1d5e82a, ftLastWriteTime.dwLowDateTime=0xd9a9ec00, ftLastWriteTime.dwHighDateTime=0x1d5e82a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5107c60 [0061.306] FindNextFileW (in: hFindFile=0x5107c60, lpFindFileData=0x31e5e4 | out: lpFindFileData=0x31e5e4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8012b5d2, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0xd9a9ec00, ftLastAccessTime.dwHighDateTime=0x1d5e82a, ftLastWriteTime.dwLowDateTime=0xd9a9ec00, ftLastWriteTime.dwHighDateTime=0x1d5e82a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0061.306] FindNextFileW (in: hFindFile=0x5107c60, lpFindFileData=0x31e5e4 | out: lpFindFileData=0x31e5e4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1eab37af, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x229eba17, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x1eab37af, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="en-US", cAlternateFileName="")) returned 1 [0061.307] FindNextFileW (in: hFindFile=0x5107c60, lpFindFileData=0x31e5e4 | out: lpFindFileData=0x31e5e4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8012b5d2, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x8012b5d2, ftLastAccessTime.dwHighDateTime=0x1ca0444, ftLastWriteTime.dwLowDateTime=0x8012b5d2, ftLastWriteTime.dwHighDateTime=0x1ca0444, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Gadgets", cAlternateFileName="")) returned 1 [0061.307] FindNextFileW (in: hFindFile=0x5107c60, lpFindFileData=0x31e5e4 | out: lpFindFileData=0x31e5e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6188ec30, ftCreationTime.dwHighDateTime=0x1d59bef, ftLastAccessTime.dwLowDateTime=0xc85ac1e0, ftLastAccessTime.dwHighDateTime=0x1d5a7e8, ftLastWriteTime.dwLowDateTime=0xc85ac1e0, ftLastWriteTime.dwHighDateTime=0x1d5a7e8, nFileSizeHigh=0x0, nFileSizeLow=0x13a00, dwReserved0=0x0, dwReserved1=0x0, cFileName="mxslipstream.exe", cAlternateFileName="MXSLIP~1.EXE")) returned 1 [0061.307] FindNextFileW (in: hFindFile=0x5107c60, lpFindFileData=0x31e5e4 | out: lpFindFileData=0x31e5e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4b6cc007, ftCreationTime.dwHighDateTime=0x1ca0413, ftLastAccessTime.dwLowDateTime=0x4b6cc007, ftLastAccessTime.dwHighDateTime=0x1ca0413, ftLastWriteTime.dwLowDateTime=0xadcc4370, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x14400, dwReserved0=0x0, dwReserved1=0x0, cFileName="sbdrop.dll", cAlternateFileName="")) returned 1 [0061.307] FindNextFileW (in: hFindFile=0x5107c60, lpFindFileData=0x31e5e4 | out: lpFindFileData=0x31e5e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x81351db4, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x7c393c21, ftLastAccessTime.dwHighDateTime=0x1ca0444, ftLastWriteTime.dwLowDateTime=0x7c393c21, ftLastWriteTime.dwHighDateTime=0x1ca0444, nFileSizeHigh=0x0, nFileSizeLow=0x50, dwReserved0=0x0, dwReserved1=0x0, cFileName="settings.ini", cAlternateFileName="")) returned 1 [0061.307] FindNextFileW (in: hFindFile=0x5107c60, lpFindFileData=0x31e5e4 | out: lpFindFileData=0x31e5e4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8012b5d2, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x8012b5d2, ftLastAccessTime.dwHighDateTime=0x1ca0444, ftLastWriteTime.dwLowDateTime=0x8012b5d2, ftLastWriteTime.dwHighDateTime=0x1ca0444, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Shared Gadgets", cAlternateFileName="SHARED~1")) returned 1 [0061.307] FindNextFileW (in: hFindFile=0x5107c60, lpFindFileData=0x31e5e4 | out: lpFindFileData=0x31e5e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb3e26afc, ftCreationTime.dwHighDateTime=0x1cb892b, ftLastAccessTime.dwLowDateTime=0xb3e26afc, ftLastAccessTime.dwHighDateTime=0x1cb892b, ftLastWriteTime.dwLowDateTime=0xb3e4cc5c, ftLastWriteTime.dwHighDateTime=0x1cb892b, nFileSizeHigh=0x0, nFileSizeLow=0x11ea00, dwReserved0=0x0, dwReserved1=0x0, cFileName="sidebar.exe", cAlternateFileName="")) returned 1 [0061.307] FindNextFileW (in: hFindFile=0x5107c60, lpFindFileData=0x31e5e4 | out: lpFindFileData=0x31e5e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4b27b844, ftCreationTime.dwHighDateTime=0x1ca0413, ftLastAccessTime.dwLowDateTime=0x4b27b844, ftLastAccessTime.dwHighDateTime=0x1ca0413, ftLastWriteTime.dwLowDateTime=0xb1525cf0, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x1a800, dwReserved0=0x0, dwReserved1=0x0, cFileName="wlsrvc.dll", cAlternateFileName="")) returned 1 [0061.307] FindNextFileW (in: hFindFile=0x5107c60, lpFindFileData=0x31e5e4 | out: lpFindFileData=0x31e5e4*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0061.308] FindClose (in: hFindFile=0x5107c60 | out: hFindFile=0x5107c60) returned 1 [0061.308] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e86c) returned 1 [0061.308] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e878) returned 1 [0061.308] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e8ac) returned 1 [0061.308] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar", nBufferLength=0x105, lpBuffer=0x31e3b4, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Windows Sidebar", lpFilePart=0x0) returned 0x26 [0061.308] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\", nBufferLength=0x105, lpBuffer=0x31e388, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Windows Sidebar\\", lpFilePart=0x0) returned 0x27 [0061.308] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\*", lpFindFileData=0x31e5d4 | out: lpFindFileData=0x31e5d4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8012b5d2, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0xd9a9ec00, ftLastAccessTime.dwHighDateTime=0x1d5e82a, ftLastWriteTime.dwLowDateTime=0xd9a9ec00, ftLastWriteTime.dwHighDateTime=0x1d5e82a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5107c60 [0061.309] FindNextFileW (in: hFindFile=0x5107c60, lpFindFileData=0x31e5e4 | out: lpFindFileData=0x31e5e4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8012b5d2, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0xd9a9ec00, ftLastAccessTime.dwHighDateTime=0x1d5e82a, ftLastWriteTime.dwLowDateTime=0xd9a9ec00, ftLastWriteTime.dwHighDateTime=0x1d5e82a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0061.309] FindNextFileW (in: hFindFile=0x5107c60, lpFindFileData=0x31e5e4 | out: lpFindFileData=0x31e5e4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1eab37af, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x229eba17, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x1eab37af, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="en-US", cAlternateFileName="")) returned 1 [0061.309] FindNextFileW (in: hFindFile=0x5107c60, lpFindFileData=0x31e5e4 | out: lpFindFileData=0x31e5e4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8012b5d2, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x8012b5d2, ftLastAccessTime.dwHighDateTime=0x1ca0444, ftLastWriteTime.dwLowDateTime=0x8012b5d2, ftLastWriteTime.dwHighDateTime=0x1ca0444, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Gadgets", cAlternateFileName="")) returned 1 [0061.309] FindNextFileW (in: hFindFile=0x5107c60, lpFindFileData=0x31e5e4 | out: lpFindFileData=0x31e5e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6188ec30, ftCreationTime.dwHighDateTime=0x1d59bef, ftLastAccessTime.dwLowDateTime=0xc85ac1e0, ftLastAccessTime.dwHighDateTime=0x1d5a7e8, ftLastWriteTime.dwLowDateTime=0xc85ac1e0, ftLastWriteTime.dwHighDateTime=0x1d5a7e8, nFileSizeHigh=0x0, nFileSizeLow=0x13a00, dwReserved0=0x0, dwReserved1=0x0, cFileName="mxslipstream.exe", cAlternateFileName="MXSLIP~1.EXE")) returned 1 [0061.309] FindNextFileW (in: hFindFile=0x5107c60, lpFindFileData=0x31e5e4 | out: lpFindFileData=0x31e5e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4b6cc007, ftCreationTime.dwHighDateTime=0x1ca0413, ftLastAccessTime.dwLowDateTime=0x4b6cc007, ftLastAccessTime.dwHighDateTime=0x1ca0413, ftLastWriteTime.dwLowDateTime=0xadcc4370, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x14400, dwReserved0=0x0, dwReserved1=0x0, cFileName="sbdrop.dll", cAlternateFileName="")) returned 1 [0061.309] FindNextFileW (in: hFindFile=0x5107c60, lpFindFileData=0x31e5e4 | out: lpFindFileData=0x31e5e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x81351db4, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x7c393c21, ftLastAccessTime.dwHighDateTime=0x1ca0444, ftLastWriteTime.dwLowDateTime=0x7c393c21, ftLastWriteTime.dwHighDateTime=0x1ca0444, nFileSizeHigh=0x0, nFileSizeLow=0x50, dwReserved0=0x0, dwReserved1=0x0, cFileName="settings.ini", cAlternateFileName="")) returned 1 [0061.309] FindNextFileW (in: hFindFile=0x5107c60, lpFindFileData=0x31e5e4 | out: lpFindFileData=0x31e5e4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8012b5d2, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x8012b5d2, ftLastAccessTime.dwHighDateTime=0x1ca0444, ftLastWriteTime.dwLowDateTime=0x8012b5d2, ftLastWriteTime.dwHighDateTime=0x1ca0444, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Shared Gadgets", cAlternateFileName="SHARED~1")) returned 1 [0061.310] FindNextFileW (in: hFindFile=0x5107c60, lpFindFileData=0x31e5e4 | out: lpFindFileData=0x31e5e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb3e26afc, ftCreationTime.dwHighDateTime=0x1cb892b, ftLastAccessTime.dwLowDateTime=0xb3e26afc, ftLastAccessTime.dwHighDateTime=0x1cb892b, ftLastWriteTime.dwLowDateTime=0xb3e4cc5c, ftLastWriteTime.dwHighDateTime=0x1cb892b, nFileSizeHigh=0x0, nFileSizeLow=0x11ea00, dwReserved0=0x0, dwReserved1=0x0, cFileName="sidebar.exe", cAlternateFileName="")) returned 1 [0061.310] FindNextFileW (in: hFindFile=0x5107c60, lpFindFileData=0x31e5e4 | out: lpFindFileData=0x31e5e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4b27b844, ftCreationTime.dwHighDateTime=0x1ca0413, ftLastAccessTime.dwLowDateTime=0x4b27b844, ftLastAccessTime.dwHighDateTime=0x1ca0413, ftLastWriteTime.dwLowDateTime=0xb1525cf0, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x1a800, dwReserved0=0x0, dwReserved1=0x0, cFileName="wlsrvc.dll", cAlternateFileName="")) returned 1 [0061.310] FindNextFileW (in: hFindFile=0x5107c60, lpFindFileData=0x31e5e4 | out: lpFindFileData=0x31e5e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4b27b844, ftCreationTime.dwHighDateTime=0x1ca0413, ftLastAccessTime.dwLowDateTime=0x4b27b844, ftLastAccessTime.dwHighDateTime=0x1ca0413, ftLastWriteTime.dwLowDateTime=0xb1525cf0, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x1a800, dwReserved0=0x0, dwReserved1=0x0, cFileName="wlsrvc.dll", cAlternateFileName="")) returned 0 [0061.310] FindClose (in: hFindFile=0x5107c60 | out: hFindFile=0x5107c60) returned 1 [0061.310] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e86c) returned 1 [0061.310] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e878) returned 1 [0061.310] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e834) returned 1 [0061.310] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\en-US", nBufferLength=0x105, lpBuffer=0x31e33c, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Windows Sidebar\\en-US", lpFilePart=0x0) returned 0x2c [0061.310] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\en-US\\", nBufferLength=0x105, lpBuffer=0x31e310, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Windows Sidebar\\en-US\\", lpFilePart=0x0) returned 0x2d [0061.310] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\en-US\\*", lpFindFileData=0x31e55c | out: lpFindFileData=0x31e55c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1eab37af, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x229eba17, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x1eab37af, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5107c60 [0061.311] FindNextFileW (in: hFindFile=0x5107c60, lpFindFileData=0x31e56c | out: lpFindFileData=0x31e56c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1eab37af, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x229eba17, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x1eab37af, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0061.311] FindNextFileW (in: hFindFile=0x5107c60, lpFindFileData=0x31e56c | out: lpFindFileData=0x31e56c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1193665a, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x11c7e240, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x1193665a, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x800, dwReserved0=0x0, dwReserved1=0x0, cFileName="sbdrop.dll.mui", cAlternateFileName="")) returned 1 [0061.311] FindNextFileW (in: hFindFile=0x5107c60, lpFindFileData=0x31e56c | out: lpFindFileData=0x31e56c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1193665a, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x11c7e240, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x1193665a, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x4a00, dwReserved0=0x0, dwReserved1=0x0, cFileName="Sidebar.exe.mui", cAlternateFileName="")) returned 1 [0061.311] FindNextFileW (in: hFindFile=0x5107c60, lpFindFileData=0x31e56c | out: lpFindFileData=0x31e56c*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0061.312] FindClose (in: hFindFile=0x5107c60 | out: hFindFile=0x5107c60) returned 1 [0061.312] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e7f4) returned 1 [0061.312] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e800) returned 1 [0061.312] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e834) returned 1 [0061.312] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\en-US", nBufferLength=0x105, lpBuffer=0x31e33c, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Windows Sidebar\\en-US", lpFilePart=0x0) returned 0x2c [0061.312] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\en-US\\", nBufferLength=0x105, lpBuffer=0x31e310, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Windows Sidebar\\en-US\\", lpFilePart=0x0) returned 0x2d [0061.312] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\en-US\\*", lpFindFileData=0x31e55c | out: lpFindFileData=0x31e55c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1eab37af, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x229eba17, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x1eab37af, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5107c60 [0061.312] FindNextFileW (in: hFindFile=0x5107c60, lpFindFileData=0x31e56c | out: lpFindFileData=0x31e56c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1eab37af, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x229eba17, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x1eab37af, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0061.312] FindNextFileW (in: hFindFile=0x5107c60, lpFindFileData=0x31e56c | out: lpFindFileData=0x31e56c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1193665a, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x11c7e240, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x1193665a, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x800, dwReserved0=0x0, dwReserved1=0x0, cFileName="sbdrop.dll.mui", cAlternateFileName="")) returned 1 [0061.312] FindNextFileW (in: hFindFile=0x5107c60, lpFindFileData=0x31e56c | out: lpFindFileData=0x31e56c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1193665a, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x11c7e240, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x1193665a, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x4a00, dwReserved0=0x0, dwReserved1=0x0, cFileName="Sidebar.exe.mui", cAlternateFileName="")) returned 1 [0061.312] FindNextFileW (in: hFindFile=0x5107c60, lpFindFileData=0x31e56c | out: lpFindFileData=0x31e56c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1193665a, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x11c7e240, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x1193665a, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x4a00, dwReserved0=0x0, dwReserved1=0x0, cFileName="Sidebar.exe.mui", cAlternateFileName="")) returned 0 [0061.313] FindClose (in: hFindFile=0x5107c60 | out: hFindFile=0x5107c60) returned 1 [0061.313] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e7f4) returned 1 [0061.313] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e800) returned 1 [0061.313] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e834) returned 1 [0061.313] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets", nBufferLength=0x105, lpBuffer=0x31e33c, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets", lpFilePart=0x0) returned 0x2e [0061.313] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\", nBufferLength=0x105, lpBuffer=0x31e310, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\", lpFilePart=0x0) returned 0x2f [0061.313] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\*", lpFindFileData=0x31e55c | out: lpFindFileData=0x31e55c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8012b5d2, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x8012b5d2, ftLastAccessTime.dwHighDateTime=0x1ca0444, ftLastWriteTime.dwLowDateTime=0x8012b5d2, ftLastWriteTime.dwHighDateTime=0x1ca0444, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5107c60 [0061.315] FindNextFileW (in: hFindFile=0x5107c60, lpFindFileData=0x31e56c | out: lpFindFileData=0x31e56c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8012b5d2, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x8012b5d2, ftLastAccessTime.dwHighDateTime=0x1ca0444, ftLastWriteTime.dwLowDateTime=0x8012b5d2, ftLastWriteTime.dwHighDateTime=0x1ca0444, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0061.315] FindNextFileW (in: hFindFile=0x5107c60, lpFindFileData=0x31e56c | out: lpFindFileData=0x31e56c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8012b5d2, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x1ea8d4f6, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x1ea8d4f6, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Calendar.Gadget", cAlternateFileName="CALEND~1.GAD")) returned 1 [0061.315] FindNextFileW (in: hFindFile=0x5107c60, lpFindFileData=0x31e56c | out: lpFindFileData=0x31e56c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8012b5d2, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x1ea6723d, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x1ea6723d, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Clock.Gadget", cAlternateFileName="CLOCK~1.GAD")) returned 1 [0061.315] FindNextFileW (in: hFindFile=0x5107c60, lpFindFileData=0x31e56c | out: lpFindFileData=0x31e56c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8012b5d2, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x1ea6723d, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x1ea6723d, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="CPU.Gadget", cAlternateFileName="CPU~1.GAD")) returned 1 [0061.316] FindNextFileW (in: hFindFile=0x5107c60, lpFindFileData=0x31e56c | out: lpFindFileData=0x31e56c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8012b5d2, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x1ea8d4f6, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x1ea8d4f6, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Currency.Gadget", cAlternateFileName="CURREN~1.GAD")) returned 1 [0061.316] FindNextFileW (in: hFindFile=0x5107c60, lpFindFileData=0x31e56c | out: lpFindFileData=0x31e56c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8012b5d2, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x1ea8d4f6, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x1ea8d4f6, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="PicturePuzzle.Gadget", cAlternateFileName="PICTUR~1.GAD")) returned 1 [0061.316] FindNextFileW (in: hFindFile=0x5107c60, lpFindFileData=0x31e56c | out: lpFindFileData=0x31e56c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8012b5d2, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x1ea8d4f6, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x1ea8d4f6, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="RSSFeeds.Gadget", cAlternateFileName="RSSFEE~1.GAD")) returned 1 [0061.316] FindNextFileW (in: hFindFile=0x5107c60, lpFindFileData=0x31e56c | out: lpFindFileData=0x31e56c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8012b5d2, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x1ea8d4f6, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x1ea8d4f6, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="SlideShow.Gadget", cAlternateFileName="SLIDES~1.GAD")) returned 1 [0061.316] FindNextFileW (in: hFindFile=0x5107c60, lpFindFileData=0x31e56c | out: lpFindFileData=0x31e56c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8012b5d2, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x1ea6723d, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x1ea6723d, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Weather.Gadget", cAlternateFileName="WEATHE~1.GAD")) returned 1 [0061.316] FindNextFileW (in: hFindFile=0x5107c60, lpFindFileData=0x31e56c | out: lpFindFileData=0x31e56c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8012b5d2, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x1ea6723d, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x1ea6723d, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Weather.Gadget", cAlternateFileName="WEATHE~1.GAD")) returned 0 [0061.316] FindClose (in: hFindFile=0x5107c60 | out: hFindFile=0x5107c60) returned 1 [0061.317] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e7f4) returned 1 [0061.317] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e800) returned 1 [0061.317] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e834) returned 1 [0061.317] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets", nBufferLength=0x105, lpBuffer=0x31e33c, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets", lpFilePart=0x0) returned 0x2e [0061.317] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\", nBufferLength=0x105, lpBuffer=0x31e310, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\", lpFilePart=0x0) returned 0x2f [0061.317] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\*", lpFindFileData=0x31e55c | out: lpFindFileData=0x31e55c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8012b5d2, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x8012b5d2, ftLastAccessTime.dwHighDateTime=0x1ca0444, ftLastWriteTime.dwLowDateTime=0x8012b5d2, ftLastWriteTime.dwHighDateTime=0x1ca0444, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5107c60 [0061.318] FindNextFileW (in: hFindFile=0x5107c60, lpFindFileData=0x31e56c | out: lpFindFileData=0x31e56c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8012b5d2, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x8012b5d2, ftLastAccessTime.dwHighDateTime=0x1ca0444, ftLastWriteTime.dwLowDateTime=0x8012b5d2, ftLastWriteTime.dwHighDateTime=0x1ca0444, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0061.318] FindNextFileW (in: hFindFile=0x5107c60, lpFindFileData=0x31e56c | out: lpFindFileData=0x31e56c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8012b5d2, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x1ea8d4f6, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x1ea8d4f6, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Calendar.Gadget", cAlternateFileName="CALEND~1.GAD")) returned 1 [0061.318] FindNextFileW (in: hFindFile=0x5107c60, lpFindFileData=0x31e56c | out: lpFindFileData=0x31e56c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8012b5d2, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x1ea6723d, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x1ea6723d, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Clock.Gadget", cAlternateFileName="CLOCK~1.GAD")) returned 1 [0061.319] FindNextFileW (in: hFindFile=0x5107c60, lpFindFileData=0x31e56c | out: lpFindFileData=0x31e56c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8012b5d2, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x1ea6723d, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x1ea6723d, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="CPU.Gadget", cAlternateFileName="CPU~1.GAD")) returned 1 [0061.319] FindNextFileW (in: hFindFile=0x5107c60, lpFindFileData=0x31e56c | out: lpFindFileData=0x31e56c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8012b5d2, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x1ea8d4f6, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x1ea8d4f6, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Currency.Gadget", cAlternateFileName="CURREN~1.GAD")) returned 1 [0061.319] FindNextFileW (in: hFindFile=0x5107c60, lpFindFileData=0x31e56c | out: lpFindFileData=0x31e56c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8012b5d2, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x1ea8d4f6, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x1ea8d4f6, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="PicturePuzzle.Gadget", cAlternateFileName="PICTUR~1.GAD")) returned 1 [0061.319] FindNextFileW (in: hFindFile=0x5107c60, lpFindFileData=0x31e56c | out: lpFindFileData=0x31e56c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8012b5d2, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x1ea8d4f6, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x1ea8d4f6, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="RSSFeeds.Gadget", cAlternateFileName="RSSFEE~1.GAD")) returned 1 [0061.319] FindNextFileW (in: hFindFile=0x5107c60, lpFindFileData=0x31e56c | out: lpFindFileData=0x31e56c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8012b5d2, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x1ea8d4f6, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x1ea8d4f6, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="SlideShow.Gadget", cAlternateFileName="SLIDES~1.GAD")) returned 1 [0061.319] FindNextFileW (in: hFindFile=0x5107c60, lpFindFileData=0x31e56c | out: lpFindFileData=0x31e56c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8012b5d2, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x1ea6723d, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x1ea6723d, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Weather.Gadget", cAlternateFileName="WEATHE~1.GAD")) returned 1 [0061.319] FindNextFileW (in: hFindFile=0x5107c60, lpFindFileData=0x31e56c | out: lpFindFileData=0x31e56c*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0061.319] FindClose (in: hFindFile=0x5107c60 | out: hFindFile=0x5107c60) returned 1 [0061.320] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e7f4) returned 1 [0061.320] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e800) returned 1 [0061.320] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e7bc) returned 1 [0061.320] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Calendar.Gadget", nBufferLength=0x105, lpBuffer=0x31e2c4, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Calendar.Gadget", lpFilePart=0x0) returned 0x3e [0061.320] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Calendar.Gadget\\", nBufferLength=0x105, lpBuffer=0x31e298, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Calendar.Gadget\\", lpFilePart=0x0) returned 0x3f [0061.320] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Calendar.Gadget\\*", lpFindFileData=0x31e4e4 | out: lpFindFileData=0x31e4e4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8012b5d2, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x1ea8d4f6, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x1ea8d4f6, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5107c60 [0061.321] FindNextFileW (in: hFindFile=0x5107c60, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8012b5d2, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x1ea8d4f6, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x1ea8d4f6, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0061.321] FindNextFileW (in: hFindFile=0x5107c60, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb90bdeb0, ftCreationTime.dwHighDateTime=0x1ca0404, ftLastAccessTime.dwLowDateTime=0xb90bdeb0, ftLastAccessTime.dwHighDateTime=0x1ca0404, ftLastWriteTime.dwLowDateTime=0xb371d95c, ftLastWriteTime.dwHighDateTime=0x1c9ea13, nFileSizeHigh=0x0, nFileSizeLow=0x1a74, dwReserved0=0x0, dwReserved1=0x0, cFileName="drag.png", cAlternateFileName="")) returned 1 [0061.321] FindNextFileW (in: hFindFile=0x5107c60, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1ea8d4f6, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x22a11cd0, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x1ea8d4f6, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="en-US", cAlternateFileName="")) returned 1 [0061.322] FindNextFileW (in: hFindFile=0x5107c60, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb3743abc, ftCreationTime.dwHighDateTime=0x1c9ea13, ftLastAccessTime.dwLowDateTime=0xb3743abc, ftLastAccessTime.dwHighDateTime=0x1c9ea13, ftLastWriteTime.dwLowDateTime=0xb3769c1c, ftLastWriteTime.dwHighDateTime=0x1c9ea13, nFileSizeHigh=0x0, nFileSizeLow=0xd13, dwReserved0=0x0, dwReserved1=0x0, cFileName="icon.png", cAlternateFileName="")) returned 1 [0061.322] FindNextFileW (in: hFindFile=0x5107c60, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8012b5d2, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x8191f35e, ftLastAccessTime.dwHighDateTime=0x1ca0444, ftLastWriteTime.dwLowDateTime=0x8191f35e, ftLastWriteTime.dwHighDateTime=0x1ca0444, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="images", cAlternateFileName="")) returned 1 [0061.322] FindNextFileW (in: hFindFile=0x5107c60, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb9097d51, ftCreationTime.dwHighDateTime=0x1ca0404, ftLastAccessTime.dwLowDateTime=0xb9097d51, ftLastAccessTime.dwHighDateTime=0x1ca0404, ftLastWriteTime.dwLowDateTime=0xb443525c, ftLastWriteTime.dwHighDateTime=0x1c9ea13, nFileSizeHigh=0x0, nFileSizeLow=0x1816, dwReserved0=0x0, dwReserved1=0x0, cFileName="logo.png", cAlternateFileName="")) returned 1 [0061.322] FindNextFileW (in: hFindFile=0x5107c60, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0061.322] FindClose (in: hFindFile=0x5107c60 | out: hFindFile=0x5107c60) returned 1 [0061.322] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e77c) returned 1 [0061.322] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e788) returned 1 [0061.322] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e7bc) returned 1 [0061.322] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Calendar.Gadget", nBufferLength=0x105, lpBuffer=0x31e2c4, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Calendar.Gadget", lpFilePart=0x0) returned 0x3e [0061.322] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Calendar.Gadget\\", nBufferLength=0x105, lpBuffer=0x31e298, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Calendar.Gadget\\", lpFilePart=0x0) returned 0x3f [0061.322] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Calendar.Gadget\\*", lpFindFileData=0x31e4e4 | out: lpFindFileData=0x31e4e4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8012b5d2, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x1ea8d4f6, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x1ea8d4f6, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5107c60 [0061.323] FindNextFileW (in: hFindFile=0x5107c60, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8012b5d2, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x1ea8d4f6, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x1ea8d4f6, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0061.323] FindNextFileW (in: hFindFile=0x5107c60, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb90bdeb0, ftCreationTime.dwHighDateTime=0x1ca0404, ftLastAccessTime.dwLowDateTime=0xb90bdeb0, ftLastAccessTime.dwHighDateTime=0x1ca0404, ftLastWriteTime.dwLowDateTime=0xb371d95c, ftLastWriteTime.dwHighDateTime=0x1c9ea13, nFileSizeHigh=0x0, nFileSizeLow=0x1a74, dwReserved0=0x0, dwReserved1=0x0, cFileName="drag.png", cAlternateFileName="")) returned 1 [0061.323] FindNextFileW (in: hFindFile=0x5107c60, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1ea8d4f6, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x22a11cd0, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x1ea8d4f6, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="en-US", cAlternateFileName="")) returned 1 [0061.323] FindNextFileW (in: hFindFile=0x5107c60, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb3743abc, ftCreationTime.dwHighDateTime=0x1c9ea13, ftLastAccessTime.dwLowDateTime=0xb3743abc, ftLastAccessTime.dwHighDateTime=0x1c9ea13, ftLastWriteTime.dwLowDateTime=0xb3769c1c, ftLastWriteTime.dwHighDateTime=0x1c9ea13, nFileSizeHigh=0x0, nFileSizeLow=0xd13, dwReserved0=0x0, dwReserved1=0x0, cFileName="icon.png", cAlternateFileName="")) returned 1 [0061.323] FindNextFileW (in: hFindFile=0x5107c60, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8012b5d2, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x8191f35e, ftLastAccessTime.dwHighDateTime=0x1ca0444, ftLastWriteTime.dwLowDateTime=0x8191f35e, ftLastWriteTime.dwHighDateTime=0x1ca0444, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="images", cAlternateFileName="")) returned 1 [0061.323] FindNextFileW (in: hFindFile=0x5107c60, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb9097d51, ftCreationTime.dwHighDateTime=0x1ca0404, ftLastAccessTime.dwLowDateTime=0xb9097d51, ftLastAccessTime.dwHighDateTime=0x1ca0404, ftLastWriteTime.dwLowDateTime=0xb443525c, ftLastWriteTime.dwHighDateTime=0x1c9ea13, nFileSizeHigh=0x0, nFileSizeLow=0x1816, dwReserved0=0x0, dwReserved1=0x0, cFileName="logo.png", cAlternateFileName="")) returned 1 [0061.323] FindNextFileW (in: hFindFile=0x5107c60, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb9097d51, ftCreationTime.dwHighDateTime=0x1ca0404, ftLastAccessTime.dwLowDateTime=0xb9097d51, ftLastAccessTime.dwHighDateTime=0x1ca0404, ftLastWriteTime.dwLowDateTime=0xb443525c, ftLastWriteTime.dwHighDateTime=0x1c9ea13, nFileSizeHigh=0x0, nFileSizeLow=0x1816, dwReserved0=0x0, dwReserved1=0x0, cFileName="logo.png", cAlternateFileName="")) returned 0 [0061.324] FindClose (in: hFindFile=0x5107c60 | out: hFindFile=0x5107c60) returned 1 [0061.324] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e77c) returned 1 [0061.324] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e788) returned 1 [0061.324] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Calendar.Gadget\\drag.png", nBufferLength=0x105, lpBuffer=0x31e194, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Calendar.Gadget\\drag.png", lpFilePart=0x0) returned 0x47 [0061.324] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e688) returned 1 [0061.324] CreateFileW (lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Calendar.Gadget\\drag.png" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\calendar.gadget\\drag.png"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x178 [0061.324] GetFileType (hFile=0x178) returned 0x1 [0061.324] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e684) returned 1 [0061.324] GetFileType (hFile=0x178) returned 0x1 [0061.324] GetFileSize (in: hFile=0x178, lpFileSizeHigh=0x31e790 | out: lpFileSizeHigh=0x31e790*=0x0) returned 0x1a74 [0061.324] ReadFile (in: hFile=0x178, lpBuffer=0x2788ec0, nNumberOfBytesToRead=0x1a74, lpNumberOfBytesRead=0x31e73c, lpOverlapped=0x0 | out: lpBuffer=0x2788ec0*, lpNumberOfBytesRead=0x31e73c*=0x1a74, lpOverlapped=0x0) returned 1 [0061.369] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Calendar.Gadget\\drag.png", nBufferLength=0x105, lpBuffer=0x31e180, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Calendar.Gadget\\drag.png", lpFilePart=0x0) returned 0x47 [0061.369] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e674) returned 1 [0061.369] CreateFileW (lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Calendar.Gadget\\drag.png" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\calendar.gadget\\drag.png"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0xffffffff [0061.370] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31d4b0) returned 1 [0061.371] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e7bc) returned 1 [0061.371] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Clock.Gadget", nBufferLength=0x105, lpBuffer=0x31e2c4, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Clock.Gadget", lpFilePart=0x0) returned 0x3b [0061.371] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Clock.Gadget\\", nBufferLength=0x105, lpBuffer=0x31e298, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Clock.Gadget\\", lpFilePart=0x0) returned 0x3c [0061.371] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Clock.Gadget\\*", lpFindFileData=0x31e4e4 | out: lpFindFileData=0x31e4e4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8012b5d2, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x1ea6723d, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x1ea6723d, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5107ae0 [0061.372] FindNextFileW (in: hFindFile=0x5107ae0, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8012b5d2, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x1ea6723d, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x1ea6723d, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0061.372] FindNextFileW (in: hFindFile=0x5107ae0, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb9ccadbf, ftCreationTime.dwHighDateTime=0x1ca0404, ftLastAccessTime.dwLowDateTime=0xb9ccadbf, ftLastAccessTime.dwHighDateTime=0x1ca0404, ftLastWriteTime.dwLowDateTime=0xb44a767c, ftLastWriteTime.dwHighDateTime=0x1c9ea13, nFileSizeHigh=0x0, nFileSizeLow=0x5b85, dwReserved0=0x0, dwReserved1=0x0, cFileName="drag.png", cAlternateFileName="")) returned 1 [0061.372] FindNextFileW (in: hFindFile=0x5107ae0, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1ea6723d, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x22aaa7b4, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x1ea6723d, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="en-US", cAlternateFileName="")) returned 1 [0061.372] FindNextFileW (in: hFindFile=0x5107ae0, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb44cd7dc, ftCreationTime.dwHighDateTime=0x1c9ea13, ftLastAccessTime.dwLowDateTime=0xb44cd7dc, ftLastAccessTime.dwHighDateTime=0x1c9ea13, ftLastWriteTime.dwLowDateTime=0xb44cd7dc, ftLastWriteTime.dwHighDateTime=0x1c9ea13, nFileSizeHigh=0x0, nFileSizeLow=0x2e0c, dwReserved0=0x0, dwReserved1=0x0, cFileName="icon.png", cAlternateFileName="")) returned 1 [0061.372] FindNextFileW (in: hFindFile=0x5107ae0, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8012b5d2, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x818f91fe, ftLastAccessTime.dwHighDateTime=0x1ca0444, ftLastWriteTime.dwLowDateTime=0x818f91fe, ftLastWriteTime.dwHighDateTime=0x1ca0444, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="images", cAlternateFileName="")) returned 1 [0061.372] FindNextFileW (in: hFindFile=0x5107ae0, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb9cf0f1e, ftCreationTime.dwHighDateTime=0x1ca0404, ftLastAccessTime.dwLowDateTime=0xb9cf0f1e, ftLastAccessTime.dwHighDateTime=0x1ca0404, ftLastWriteTime.dwLowDateTime=0xb640b89c, ftLastWriteTime.dwHighDateTime=0x1c9ea13, nFileSizeHigh=0x0, nFileSizeLow=0x1816, dwReserved0=0x0, dwReserved1=0x0, cFileName="logo.png", cAlternateFileName="")) returned 1 [0061.372] FindNextFileW (in: hFindFile=0x5107ae0, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0061.372] FindClose (in: hFindFile=0x5107ae0 | out: hFindFile=0x5107ae0) returned 1 [0061.372] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e77c) returned 1 [0061.373] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e788) returned 1 [0061.373] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e7bc) returned 1 [0061.373] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Clock.Gadget", nBufferLength=0x105, lpBuffer=0x31e2c4, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Clock.Gadget", lpFilePart=0x0) returned 0x3b [0061.373] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Clock.Gadget\\", nBufferLength=0x105, lpBuffer=0x31e298, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Clock.Gadget\\", lpFilePart=0x0) returned 0x3c [0061.373] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Clock.Gadget\\*", lpFindFileData=0x31e4e4 | out: lpFindFileData=0x31e4e4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8012b5d2, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x1ea6723d, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x1ea6723d, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5107ae0 [0061.373] FindNextFileW (in: hFindFile=0x5107ae0, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8012b5d2, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x1ea6723d, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x1ea6723d, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0061.373] FindNextFileW (in: hFindFile=0x5107ae0, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb9ccadbf, ftCreationTime.dwHighDateTime=0x1ca0404, ftLastAccessTime.dwLowDateTime=0xb9ccadbf, ftLastAccessTime.dwHighDateTime=0x1ca0404, ftLastWriteTime.dwLowDateTime=0xb44a767c, ftLastWriteTime.dwHighDateTime=0x1c9ea13, nFileSizeHigh=0x0, nFileSizeLow=0x5b85, dwReserved0=0x0, dwReserved1=0x0, cFileName="drag.png", cAlternateFileName="")) returned 1 [0061.373] FindNextFileW (in: hFindFile=0x5107ae0, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1ea6723d, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x22aaa7b4, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x1ea6723d, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="en-US", cAlternateFileName="")) returned 1 [0061.373] FindNextFileW (in: hFindFile=0x5107ae0, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb44cd7dc, ftCreationTime.dwHighDateTime=0x1c9ea13, ftLastAccessTime.dwLowDateTime=0xb44cd7dc, ftLastAccessTime.dwHighDateTime=0x1c9ea13, ftLastWriteTime.dwLowDateTime=0xb44cd7dc, ftLastWriteTime.dwHighDateTime=0x1c9ea13, nFileSizeHigh=0x0, nFileSizeLow=0x2e0c, dwReserved0=0x0, dwReserved1=0x0, cFileName="icon.png", cAlternateFileName="")) returned 1 [0061.374] FindNextFileW (in: hFindFile=0x5107ae0, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8012b5d2, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x818f91fe, ftLastAccessTime.dwHighDateTime=0x1ca0444, ftLastWriteTime.dwLowDateTime=0x818f91fe, ftLastWriteTime.dwHighDateTime=0x1ca0444, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="images", cAlternateFileName="")) returned 1 [0061.374] FindNextFileW (in: hFindFile=0x5107ae0, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb9cf0f1e, ftCreationTime.dwHighDateTime=0x1ca0404, ftLastAccessTime.dwLowDateTime=0xb9cf0f1e, ftLastAccessTime.dwHighDateTime=0x1ca0404, ftLastWriteTime.dwLowDateTime=0xb640b89c, ftLastWriteTime.dwHighDateTime=0x1c9ea13, nFileSizeHigh=0x0, nFileSizeLow=0x1816, dwReserved0=0x0, dwReserved1=0x0, cFileName="logo.png", cAlternateFileName="")) returned 1 [0061.374] FindNextFileW (in: hFindFile=0x5107ae0, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb9cf0f1e, ftCreationTime.dwHighDateTime=0x1ca0404, ftLastAccessTime.dwLowDateTime=0xb9cf0f1e, ftLastAccessTime.dwHighDateTime=0x1ca0404, ftLastWriteTime.dwLowDateTime=0xb640b89c, ftLastWriteTime.dwHighDateTime=0x1c9ea13, nFileSizeHigh=0x0, nFileSizeLow=0x1816, dwReserved0=0x0, dwReserved1=0x0, cFileName="logo.png", cAlternateFileName="")) returned 0 [0061.374] FindClose (in: hFindFile=0x5107ae0 | out: hFindFile=0x5107ae0) returned 1 [0061.374] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e77c) returned 1 [0061.374] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e788) returned 1 [0061.374] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Clock.Gadget\\drag.png", nBufferLength=0x105, lpBuffer=0x31e194, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Clock.Gadget\\drag.png", lpFilePart=0x0) returned 0x44 [0061.374] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e688) returned 1 [0061.374] CreateFileW (lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Clock.Gadget\\drag.png" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\clock.gadget\\drag.png"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x178 [0061.375] GetFileType (hFile=0x178) returned 0x1 [0061.375] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e684) returned 1 [0061.375] GetFileType (hFile=0x178) returned 0x1 [0061.375] GetFileSize (in: hFile=0x178, lpFileSizeHigh=0x31e790 | out: lpFileSizeHigh=0x31e790*=0x0) returned 0x5b85 [0061.375] ReadFile (in: hFile=0x178, lpBuffer=0x27e25a4, nNumberOfBytesToRead=0x5b85, lpNumberOfBytesRead=0x31e73c, lpOverlapped=0x0 | out: lpBuffer=0x27e25a4*, lpNumberOfBytesRead=0x31e73c*=0x5b85, lpOverlapped=0x0) returned 1 [0061.377] CloseHandle (hObject=0x178) returned 1 [0061.417] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Clock.Gadget\\drag.png", nBufferLength=0x105, lpBuffer=0x31e180, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Clock.Gadget\\drag.png", lpFilePart=0x0) returned 0x44 [0061.418] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e674) returned 1 [0061.418] CreateFileW (lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Clock.Gadget\\drag.png" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\clock.gadget\\drag.png"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0xffffffff [0061.419] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31d4b0) returned 1 [0061.419] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e7bc) returned 1 [0061.419] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\CPU.Gadget", nBufferLength=0x105, lpBuffer=0x31e2c4, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\CPU.Gadget", lpFilePart=0x0) returned 0x39 [0061.419] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\CPU.Gadget\\", nBufferLength=0x105, lpBuffer=0x31e298, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\CPU.Gadget\\", lpFilePart=0x0) returned 0x3a [0061.419] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\CPU.Gadget\\*", lpFindFileData=0x31e4e4 | out: lpFindFileData=0x31e4e4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8012b5d2, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x1ea6723d, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x1ea6723d, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5107a20 [0061.420] FindNextFileW (in: hFindFile=0x5107a20, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8012b5d2, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x1ea6723d, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x1ea6723d, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0061.420] FindNextFileW (in: hFindFile=0x5107a20, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xba48750b, ftCreationTime.dwHighDateTime=0x1ca0404, ftLastAccessTime.dwLowDateTime=0xba48750b, ftLastAccessTime.dwHighDateTime=0x1ca0404, ftLastWriteTime.dwLowDateTime=0xb79c415c, ftLastWriteTime.dwHighDateTime=0x1c9ea13, nFileSizeHigh=0x0, nFileSizeLow=0x4f1c, dwReserved0=0x0, dwReserved1=0x0, cFileName="drag.png", cAlternateFileName="")) returned 1 [0061.420] FindNextFileW (in: hFindFile=0x5107a20, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1ea6723d, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x22a37f89, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x1ea6723d, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="en-US", cAlternateFileName="")) returned 1 [0061.420] FindNextFileW (in: hFindFile=0x5107a20, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb7c4b8bc, ftCreationTime.dwHighDateTime=0x1c9ea13, ftLastAccessTime.dwLowDateTime=0xb7c4b8bc, ftLastAccessTime.dwHighDateTime=0x1c9ea13, ftLastWriteTime.dwLowDateTime=0xb7c4b8bc, ftLastWriteTime.dwHighDateTime=0x1c9ea13, nFileSizeHigh=0x0, nFileSizeLow=0x23e2, dwReserved0=0x0, dwReserved1=0x0, cFileName="icon.png", cAlternateFileName="")) returned 1 [0061.421] FindNextFileW (in: hFindFile=0x5107a20, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8012b5d2, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x8191f35e, ftLastAccessTime.dwHighDateTime=0x1ca0444, ftLastWriteTime.dwLowDateTime=0x8191f35e, ftLastWriteTime.dwHighDateTime=0x1ca0444, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="images", cAlternateFileName="")) returned 1 [0061.421] FindNextFileW (in: hFindFile=0x5107a20, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xba4ad66a, ftCreationTime.dwHighDateTime=0x1ca0404, ftLastAccessTime.dwLowDateTime=0xba4ad66a, ftLastAccessTime.dwHighDateTime=0x1ca0404, ftLastWriteTime.dwLowDateTime=0xba58159c, ftLastWriteTime.dwHighDateTime=0x1c9ea13, nFileSizeHigh=0x0, nFileSizeLow=0x1816, dwReserved0=0x0, dwReserved1=0x0, cFileName="logo.png", cAlternateFileName="")) returned 1 [0061.421] FindNextFileW (in: hFindFile=0x5107a20, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0061.421] FindClose (in: hFindFile=0x5107a20 | out: hFindFile=0x5107a20) returned 1 [0061.421] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e77c) returned 1 [0061.421] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e788) returned 1 [0061.421] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e7bc) returned 1 [0061.421] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\CPU.Gadget", nBufferLength=0x105, lpBuffer=0x31e2c4, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\CPU.Gadget", lpFilePart=0x0) returned 0x39 [0061.421] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\CPU.Gadget\\", nBufferLength=0x105, lpBuffer=0x31e298, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\CPU.Gadget\\", lpFilePart=0x0) returned 0x3a [0061.421] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\CPU.Gadget\\*", lpFindFileData=0x31e4e4 | out: lpFindFileData=0x31e4e4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8012b5d2, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x1ea6723d, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x1ea6723d, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5107a20 [0061.421] FindNextFileW (in: hFindFile=0x5107a20, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8012b5d2, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x1ea6723d, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x1ea6723d, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0061.422] FindNextFileW (in: hFindFile=0x5107a20, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xba48750b, ftCreationTime.dwHighDateTime=0x1ca0404, ftLastAccessTime.dwLowDateTime=0xba48750b, ftLastAccessTime.dwHighDateTime=0x1ca0404, ftLastWriteTime.dwLowDateTime=0xb79c415c, ftLastWriteTime.dwHighDateTime=0x1c9ea13, nFileSizeHigh=0x0, nFileSizeLow=0x4f1c, dwReserved0=0x0, dwReserved1=0x0, cFileName="drag.png", cAlternateFileName="")) returned 1 [0061.422] FindNextFileW (in: hFindFile=0x5107a20, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1ea6723d, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x22a37f89, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x1ea6723d, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="en-US", cAlternateFileName="")) returned 1 [0061.422] FindNextFileW (in: hFindFile=0x5107a20, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb7c4b8bc, ftCreationTime.dwHighDateTime=0x1c9ea13, ftLastAccessTime.dwLowDateTime=0xb7c4b8bc, ftLastAccessTime.dwHighDateTime=0x1c9ea13, ftLastWriteTime.dwLowDateTime=0xb7c4b8bc, ftLastWriteTime.dwHighDateTime=0x1c9ea13, nFileSizeHigh=0x0, nFileSizeLow=0x23e2, dwReserved0=0x0, dwReserved1=0x0, cFileName="icon.png", cAlternateFileName="")) returned 1 [0061.422] FindNextFileW (in: hFindFile=0x5107a20, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8012b5d2, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x8191f35e, ftLastAccessTime.dwHighDateTime=0x1ca0444, ftLastWriteTime.dwLowDateTime=0x8191f35e, ftLastWriteTime.dwHighDateTime=0x1ca0444, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="images", cAlternateFileName="")) returned 1 [0061.422] FindNextFileW (in: hFindFile=0x5107a20, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xba4ad66a, ftCreationTime.dwHighDateTime=0x1ca0404, ftLastAccessTime.dwLowDateTime=0xba4ad66a, ftLastAccessTime.dwHighDateTime=0x1ca0404, ftLastWriteTime.dwLowDateTime=0xba58159c, ftLastWriteTime.dwHighDateTime=0x1c9ea13, nFileSizeHigh=0x0, nFileSizeLow=0x1816, dwReserved0=0x0, dwReserved1=0x0, cFileName="logo.png", cAlternateFileName="")) returned 1 [0061.422] FindNextFileW (in: hFindFile=0x5107a20, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xba4ad66a, ftCreationTime.dwHighDateTime=0x1ca0404, ftLastAccessTime.dwLowDateTime=0xba4ad66a, ftLastAccessTime.dwHighDateTime=0x1ca0404, ftLastWriteTime.dwLowDateTime=0xba58159c, ftLastWriteTime.dwHighDateTime=0x1c9ea13, nFileSizeHigh=0x0, nFileSizeLow=0x1816, dwReserved0=0x0, dwReserved1=0x0, cFileName="logo.png", cAlternateFileName="")) returned 0 [0061.422] FindClose (in: hFindFile=0x5107a20 | out: hFindFile=0x5107a20) returned 1 [0061.422] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e77c) returned 1 [0061.423] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e788) returned 1 [0061.423] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\CPU.Gadget\\drag.png", nBufferLength=0x105, lpBuffer=0x31e194, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\CPU.Gadget\\drag.png", lpFilePart=0x0) returned 0x42 [0061.423] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e688) returned 1 [0061.423] CreateFileW (lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\CPU.Gadget\\drag.png" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\cpu.gadget\\drag.png"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x178 [0061.423] GetFileType (hFile=0x178) returned 0x1 [0061.423] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e684) returned 1 [0061.423] GetFileType (hFile=0x178) returned 0x1 [0061.423] GetFileSize (in: hFile=0x178, lpFileSizeHigh=0x31e790 | out: lpFileSizeHigh=0x31e790*=0x0) returned 0x4f1c [0061.423] ReadFile (in: hFile=0x178, lpBuffer=0x2854228, nNumberOfBytesToRead=0x4f1c, lpNumberOfBytesRead=0x31e73c, lpOverlapped=0x0 | out: lpBuffer=0x2854228*, lpNumberOfBytesRead=0x31e73c*=0x4f1c, lpOverlapped=0x0) returned 1 [0061.425] CloseHandle (hObject=0x178) returned 1 [0061.468] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\CPU.Gadget\\drag.png", nBufferLength=0x105, lpBuffer=0x31e180, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\CPU.Gadget\\drag.png", lpFilePart=0x0) returned 0x42 [0061.468] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e674) returned 1 [0061.469] CreateFileW (lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\CPU.Gadget\\drag.png" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\cpu.gadget\\drag.png"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0xffffffff [0061.470] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31d4b0) returned 1 [0061.470] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e7bc) returned 1 [0061.470] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Currency.Gadget", nBufferLength=0x105, lpBuffer=0x31e2c4, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Currency.Gadget", lpFilePart=0x0) returned 0x3e [0061.470] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Currency.Gadget\\", nBufferLength=0x105, lpBuffer=0x31e298, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Currency.Gadget\\", lpFilePart=0x0) returned 0x3f [0061.470] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Currency.Gadget\\*", lpFindFileData=0x31e4e4 | out: lpFindFileData=0x31e4e4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8012b5d2, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x1ea8d4f6, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x1ea8d4f6, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5107aa0 [0061.471] FindNextFileW (in: hFindFile=0x5107aa0, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8012b5d2, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x1ea8d4f6, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x1ea8d4f6, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0061.471] FindNextFileW (in: hFindFile=0x5107aa0, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xbcbcdf03, ftCreationTime.dwHighDateTime=0x1ca0404, ftLastAccessTime.dwLowDateTime=0xbcbcdf03, ftLastAccessTime.dwHighDateTime=0x1ca0404, ftLastWriteTime.dwLowDateTime=0xbb6510fc, ftLastWriteTime.dwHighDateTime=0x1c9ea13, nFileSizeHigh=0x0, nFileSizeLow=0x406b, dwReserved0=0x0, dwReserved1=0x0, cFileName="drag.png", cAlternateFileName="")) returned 1 [0061.471] FindNextFileW (in: hFindFile=0x5107aa0, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1ea8d4f6, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x22a11cd0, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x1ea8d4f6, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="en-US", cAlternateFileName="")) returned 1 [0061.471] FindNextFileW (in: hFindFile=0x5107aa0, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xbb67725c, ftCreationTime.dwHighDateTime=0x1c9ea13, ftLastAccessTime.dwLowDateTime=0xbb67725c, ftLastAccessTime.dwHighDateTime=0x1c9ea13, ftLastWriteTime.dwLowDateTime=0xbb67725c, ftLastWriteTime.dwHighDateTime=0x1c9ea13, nFileSizeHigh=0x0, nFileSizeLow=0x1ae9, dwReserved0=0x0, dwReserved1=0x0, cFileName="icon.png", cAlternateFileName="")) returned 1 [0061.471] FindNextFileW (in: hFindFile=0x5107aa0, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8012b5d2, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x819b78df, ftLastAccessTime.dwHighDateTime=0x1ca0444, ftLastWriteTime.dwLowDateTime=0x819b78df, ftLastWriteTime.dwHighDateTime=0x1ca0444, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="images", cAlternateFileName="")) returned 1 [0061.471] FindNextFileW (in: hFindFile=0x5107aa0, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xbcba7da4, ftCreationTime.dwHighDateTime=0x1ca0404, ftLastAccessTime.dwLowDateTime=0xbcba7da4, ftLastAccessTime.dwHighDateTime=0x1ca0404, ftLastWriteTime.dwLowDateTime=0xbb8d885c, ftLastWriteTime.dwHighDateTime=0x1c9ea13, nFileSizeHigh=0x0, nFileSizeLow=0x172a, dwReserved0=0x0, dwReserved1=0x0, cFileName="logo.png", cAlternateFileName="")) returned 1 [0061.472] FindNextFileW (in: hFindFile=0x5107aa0, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0061.472] FindClose (in: hFindFile=0x5107aa0 | out: hFindFile=0x5107aa0) returned 1 [0061.472] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e77c) returned 1 [0061.472] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e788) returned 1 [0061.472] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e7bc) returned 1 [0061.472] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Currency.Gadget", nBufferLength=0x105, lpBuffer=0x31e2c4, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Currency.Gadget", lpFilePart=0x0) returned 0x3e [0061.472] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Currency.Gadget\\", nBufferLength=0x105, lpBuffer=0x31e298, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Currency.Gadget\\", lpFilePart=0x0) returned 0x3f [0061.472] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Currency.Gadget\\*", lpFindFileData=0x31e4e4 | out: lpFindFileData=0x31e4e4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8012b5d2, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x1ea8d4f6, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x1ea8d4f6, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5107aa0 [0061.472] FindNextFileW (in: hFindFile=0x5107aa0, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8012b5d2, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x1ea8d4f6, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x1ea8d4f6, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0061.472] FindNextFileW (in: hFindFile=0x5107aa0, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xbcbcdf03, ftCreationTime.dwHighDateTime=0x1ca0404, ftLastAccessTime.dwLowDateTime=0xbcbcdf03, ftLastAccessTime.dwHighDateTime=0x1ca0404, ftLastWriteTime.dwLowDateTime=0xbb6510fc, ftLastWriteTime.dwHighDateTime=0x1c9ea13, nFileSizeHigh=0x0, nFileSizeLow=0x406b, dwReserved0=0x0, dwReserved1=0x0, cFileName="drag.png", cAlternateFileName="")) returned 1 [0061.472] FindNextFileW (in: hFindFile=0x5107aa0, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1ea8d4f6, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x22a11cd0, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x1ea8d4f6, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="en-US", cAlternateFileName="")) returned 1 [0061.473] FindNextFileW (in: hFindFile=0x5107aa0, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xbb67725c, ftCreationTime.dwHighDateTime=0x1c9ea13, ftLastAccessTime.dwLowDateTime=0xbb67725c, ftLastAccessTime.dwHighDateTime=0x1c9ea13, ftLastWriteTime.dwLowDateTime=0xbb67725c, ftLastWriteTime.dwHighDateTime=0x1c9ea13, nFileSizeHigh=0x0, nFileSizeLow=0x1ae9, dwReserved0=0x0, dwReserved1=0x0, cFileName="icon.png", cAlternateFileName="")) returned 1 [0061.473] FindNextFileW (in: hFindFile=0x5107aa0, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8012b5d2, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x819b78df, ftLastAccessTime.dwHighDateTime=0x1ca0444, ftLastWriteTime.dwLowDateTime=0x819b78df, ftLastWriteTime.dwHighDateTime=0x1ca0444, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="images", cAlternateFileName="")) returned 1 [0061.473] FindNextFileW (in: hFindFile=0x5107aa0, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xbcba7da4, ftCreationTime.dwHighDateTime=0x1ca0404, ftLastAccessTime.dwLowDateTime=0xbcba7da4, ftLastAccessTime.dwHighDateTime=0x1ca0404, ftLastWriteTime.dwLowDateTime=0xbb8d885c, ftLastWriteTime.dwHighDateTime=0x1c9ea13, nFileSizeHigh=0x0, nFileSizeLow=0x172a, dwReserved0=0x0, dwReserved1=0x0, cFileName="logo.png", cAlternateFileName="")) returned 1 [0061.473] FindNextFileW (in: hFindFile=0x5107aa0, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xbcba7da4, ftCreationTime.dwHighDateTime=0x1ca0404, ftLastAccessTime.dwLowDateTime=0xbcba7da4, ftLastAccessTime.dwHighDateTime=0x1ca0404, ftLastWriteTime.dwLowDateTime=0xbb8d885c, ftLastWriteTime.dwHighDateTime=0x1c9ea13, nFileSizeHigh=0x0, nFileSizeLow=0x172a, dwReserved0=0x0, dwReserved1=0x0, cFileName="logo.png", cAlternateFileName="")) returned 0 [0061.473] FindClose (in: hFindFile=0x5107aa0 | out: hFindFile=0x5107aa0) returned 1 [0061.473] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e77c) returned 1 [0061.473] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e788) returned 1 [0061.473] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Currency.Gadget\\drag.png", nBufferLength=0x105, lpBuffer=0x31e194, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Currency.Gadget\\drag.png", lpFilePart=0x0) returned 0x47 [0061.473] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e688) returned 1 [0061.473] CreateFileW (lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Currency.Gadget\\drag.png" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\currency.gadget\\drag.png"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x178 [0061.474] GetFileType (hFile=0x178) returned 0x1 [0061.474] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e684) returned 1 [0061.474] GetFileType (hFile=0x178) returned 0x1 [0061.474] GetFileSize (in: hFile=0x178, lpFileSizeHigh=0x31e790 | out: lpFileSizeHigh=0x31e790*=0x0) returned 0x406b [0061.474] ReadFile (in: hFile=0x178, lpBuffer=0x26bf584, nNumberOfBytesToRead=0x406b, lpNumberOfBytesRead=0x31e73c, lpOverlapped=0x0 | out: lpBuffer=0x26bf584*, lpNumberOfBytesRead=0x31e73c*=0x406b, lpOverlapped=0x0) returned 1 [0061.475] CloseHandle (hObject=0x178) returned 1 [0061.516] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Currency.Gadget\\drag.png", nBufferLength=0x105, lpBuffer=0x31e180, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Currency.Gadget\\drag.png", lpFilePart=0x0) returned 0x47 [0061.516] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e674) returned 1 [0061.516] CreateFileW (lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Currency.Gadget\\drag.png" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\currency.gadget\\drag.png"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0xffffffff [0061.517] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31d4b0) returned 1 [0061.517] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e7bc) returned 1 [0061.517] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\PicturePuzzle.Gadget", nBufferLength=0x105, lpBuffer=0x31e2c4, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\PicturePuzzle.Gadget", lpFilePart=0x0) returned 0x43 [0061.517] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\PicturePuzzle.Gadget\\", nBufferLength=0x105, lpBuffer=0x31e298, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\PicturePuzzle.Gadget\\", lpFilePart=0x0) returned 0x44 [0061.517] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\PicturePuzzle.Gadget\\*", lpFindFileData=0x31e4e4 | out: lpFindFileData=0x31e4e4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8012b5d2, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x1ea8d4f6, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x1ea8d4f6, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5107be0 [0061.519] FindNextFileW (in: hFindFile=0x5107be0, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8012b5d2, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x1ea8d4f6, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x1ea8d4f6, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0061.519] FindNextFileW (in: hFindFile=0x5107be0, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xbaa54a84, ftCreationTime.dwHighDateTime=0x1ca0404, ftLastAccessTime.dwLowDateTime=0xbaa54a84, ftLastAccessTime.dwHighDateTime=0x1ca0404, ftLastWriteTime.dwLowDateTime=0xc07b211c, ftLastWriteTime.dwHighDateTime=0x1c9ea13, nFileSizeHigh=0x0, nFileSizeLow=0x7a53, dwReserved0=0x0, dwReserved1=0x0, cFileName="drag.png", cAlternateFileName="")) returned 1 [0061.519] FindNextFileW (in: hFindFile=0x5107be0, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1ea8d4f6, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x22a844fb, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x1ea8d4f6, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="en-US", cAlternateFileName="")) returned 1 [0061.519] FindNextFileW (in: hFindFile=0x5107be0, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc082453c, ftCreationTime.dwHighDateTime=0x1c9ea13, ftLastAccessTime.dwLowDateTime=0xc082453c, ftLastAccessTime.dwHighDateTime=0x1c9ea13, ftLastWriteTime.dwLowDateTime=0xc082453c, ftLastWriteTime.dwHighDateTime=0x1c9ea13, nFileSizeHigh=0x0, nFileSizeLow=0x255b, dwReserved0=0x0, dwReserved1=0x0, cFileName="icon.png", cAlternateFileName="")) returned 1 [0061.519] FindNextFileW (in: hFindFile=0x5107be0, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8012b5d2, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x8196b61f, ftLastAccessTime.dwHighDateTime=0x1ca0444, ftLastWriteTime.dwLowDateTime=0x8196b61f, ftLastWriteTime.dwHighDateTime=0x1ca0444, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Images", cAlternateFileName="")) returned 1 [0061.519] FindNextFileW (in: hFindFile=0x5107be0, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xbaa7abe3, ftCreationTime.dwHighDateTime=0x1ca0404, ftLastAccessTime.dwLowDateTime=0xbaa7abe3, ftLastAccessTime.dwHighDateTime=0x1ca0404, ftLastWriteTime.dwLowDateTime=0xc0c74d1c, ftLastWriteTime.dwHighDateTime=0x1c9ea13, nFileSizeHigh=0x0, nFileSizeLow=0x1816, dwReserved0=0x0, dwReserved1=0x0, cFileName="logo.png", cAlternateFileName="")) returned 1 [0061.519] FindNextFileW (in: hFindFile=0x5107be0, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0061.519] FindClose (in: hFindFile=0x5107be0 | out: hFindFile=0x5107be0) returned 1 [0061.519] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e77c) returned 1 [0061.519] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e788) returned 1 [0061.519] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e7bc) returned 1 [0061.519] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\PicturePuzzle.Gadget", nBufferLength=0x105, lpBuffer=0x31e2c4, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\PicturePuzzle.Gadget", lpFilePart=0x0) returned 0x43 [0061.520] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\PicturePuzzle.Gadget\\", nBufferLength=0x105, lpBuffer=0x31e298, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\PicturePuzzle.Gadget\\", lpFilePart=0x0) returned 0x44 [0061.520] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\PicturePuzzle.Gadget\\*", lpFindFileData=0x31e4e4 | out: lpFindFileData=0x31e4e4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8012b5d2, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x1ea8d4f6, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x1ea8d4f6, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5107be0 [0061.520] FindNextFileW (in: hFindFile=0x5107be0, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8012b5d2, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x1ea8d4f6, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x1ea8d4f6, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0061.520] FindNextFileW (in: hFindFile=0x5107be0, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xbaa54a84, ftCreationTime.dwHighDateTime=0x1ca0404, ftLastAccessTime.dwLowDateTime=0xbaa54a84, ftLastAccessTime.dwHighDateTime=0x1ca0404, ftLastWriteTime.dwLowDateTime=0xc07b211c, ftLastWriteTime.dwHighDateTime=0x1c9ea13, nFileSizeHigh=0x0, nFileSizeLow=0x7a53, dwReserved0=0x0, dwReserved1=0x0, cFileName="drag.png", cAlternateFileName="")) returned 1 [0061.520] FindNextFileW (in: hFindFile=0x5107be0, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1ea8d4f6, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x22a844fb, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x1ea8d4f6, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="en-US", cAlternateFileName="")) returned 1 [0061.520] FindNextFileW (in: hFindFile=0x5107be0, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc082453c, ftCreationTime.dwHighDateTime=0x1c9ea13, ftLastAccessTime.dwLowDateTime=0xc082453c, ftLastAccessTime.dwHighDateTime=0x1c9ea13, ftLastWriteTime.dwLowDateTime=0xc082453c, ftLastWriteTime.dwHighDateTime=0x1c9ea13, nFileSizeHigh=0x0, nFileSizeLow=0x255b, dwReserved0=0x0, dwReserved1=0x0, cFileName="icon.png", cAlternateFileName="")) returned 1 [0061.520] FindNextFileW (in: hFindFile=0x5107be0, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8012b5d2, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x8196b61f, ftLastAccessTime.dwHighDateTime=0x1ca0444, ftLastWriteTime.dwLowDateTime=0x8196b61f, ftLastWriteTime.dwHighDateTime=0x1ca0444, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Images", cAlternateFileName="")) returned 1 [0061.520] FindNextFileW (in: hFindFile=0x5107be0, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xbaa7abe3, ftCreationTime.dwHighDateTime=0x1ca0404, ftLastAccessTime.dwLowDateTime=0xbaa7abe3, ftLastAccessTime.dwHighDateTime=0x1ca0404, ftLastWriteTime.dwLowDateTime=0xc0c74d1c, ftLastWriteTime.dwHighDateTime=0x1c9ea13, nFileSizeHigh=0x0, nFileSizeLow=0x1816, dwReserved0=0x0, dwReserved1=0x0, cFileName="logo.png", cAlternateFileName="")) returned 1 [0061.520] FindNextFileW (in: hFindFile=0x5107be0, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xbaa7abe3, ftCreationTime.dwHighDateTime=0x1ca0404, ftLastAccessTime.dwLowDateTime=0xbaa7abe3, ftLastAccessTime.dwHighDateTime=0x1ca0404, ftLastWriteTime.dwLowDateTime=0xc0c74d1c, ftLastWriteTime.dwHighDateTime=0x1c9ea13, nFileSizeHigh=0x0, nFileSizeLow=0x1816, dwReserved0=0x0, dwReserved1=0x0, cFileName="logo.png", cAlternateFileName="")) returned 0 [0061.521] FindClose (in: hFindFile=0x5107be0 | out: hFindFile=0x5107be0) returned 1 [0061.521] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e77c) returned 1 [0061.521] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e788) returned 1 [0061.521] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\PicturePuzzle.Gadget\\drag.png", nBufferLength=0x105, lpBuffer=0x31e194, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\PicturePuzzle.Gadget\\drag.png", lpFilePart=0x0) returned 0x4c [0061.521] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e688) returned 1 [0061.521] CreateFileW (lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\PicturePuzzle.Gadget\\drag.png" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\picturepuzzle.gadget\\drag.png"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x178 [0061.522] GetFileType (hFile=0x178) returned 0x1 [0061.522] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e684) returned 1 [0061.522] GetFileType (hFile=0x178) returned 0x1 [0061.522] GetFileSize (in: hFile=0x178, lpFileSizeHigh=0x31e790 | out: lpFileSizeHigh=0x31e790*=0x0) returned 0x7a53 [0061.522] ReadFile (in: hFile=0x178, lpBuffer=0x2727458, nNumberOfBytesToRead=0x7a53, lpNumberOfBytesRead=0x31e73c, lpOverlapped=0x0 | out: lpBuffer=0x2727458*, lpNumberOfBytesRead=0x31e73c*=0x7a53, lpOverlapped=0x0) returned 1 [0061.524] CloseHandle (hObject=0x178) returned 1 [0061.565] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\PicturePuzzle.Gadget\\drag.png", nBufferLength=0x105, lpBuffer=0x31e180, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\PicturePuzzle.Gadget\\drag.png", lpFilePart=0x0) returned 0x4c [0061.565] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e674) returned 1 [0061.565] CreateFileW (lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\PicturePuzzle.Gadget\\drag.png" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\picturepuzzle.gadget\\drag.png"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0xffffffff [0061.566] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31d4b0) returned 1 [0061.566] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e7bc) returned 1 [0061.566] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\RSSFeeds.Gadget", nBufferLength=0x105, lpBuffer=0x31e2c4, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\RSSFeeds.Gadget", lpFilePart=0x0) returned 0x3e [0061.566] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\RSSFeeds.Gadget\\", nBufferLength=0x105, lpBuffer=0x31e298, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\RSSFeeds.Gadget\\", lpFilePart=0x0) returned 0x3f [0061.566] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\RSSFeeds.Gadget\\*", lpFindFileData=0x31e4e4 | out: lpFindFileData=0x31e4e4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8012b5d2, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x1ea8d4f6, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x1ea8d4f6, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5107c60 [0061.567] FindNextFileW (in: hFindFile=0x5107c60, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8012b5d2, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x1ea8d4f6, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x1ea8d4f6, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0061.568] FindNextFileW (in: hFindFile=0x5107c60, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xbbb96990, ftCreationTime.dwHighDateTime=0x1ca0404, ftLastAccessTime.dwLowDateTime=0xbbb96990, ftLastAccessTime.dwHighDateTime=0x1ca0404, ftLastWriteTime.dwLowDateTime=0xc45e1fdc, ftLastWriteTime.dwHighDateTime=0x1c9ea13, nFileSizeHigh=0x0, nFileSizeLow=0x2141, dwReserved0=0x0, dwReserved1=0x0, cFileName="drag.png", cAlternateFileName="")) returned 1 [0061.568] FindNextFileW (in: hFindFile=0x5107c60, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1ea8d4f6, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x22ad0a6d, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x1eab37af, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="en-US", cAlternateFileName="")) returned 1 [0061.568] FindNextFileW (in: hFindFile=0x5107c60, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc467a55c, ftCreationTime.dwHighDateTime=0x1c9ea13, ftLastAccessTime.dwLowDateTime=0xc467a55c, ftLastAccessTime.dwHighDateTime=0x1c9ea13, ftLastWriteTime.dwLowDateTime=0xc467a55c, ftLastWriteTime.dwHighDateTime=0x1c9ea13, nFileSizeHigh=0x0, nFileSizeLow=0x1d07, dwReserved0=0x0, dwReserved1=0x0, cFileName="icon.png", cAlternateFileName="")) returned 1 [0061.568] FindNextFileW (in: hFindFile=0x5107c60, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8012b5d2, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x8199177f, ftLastAccessTime.dwHighDateTime=0x1ca0444, ftLastWriteTime.dwLowDateTime=0x8199177f, ftLastWriteTime.dwHighDateTime=0x1ca0444, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="images", cAlternateFileName="")) returned 1 [0061.568] FindNextFileW (in: hFindFile=0x5107c60, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xbbb4a6d2, ftCreationTime.dwHighDateTime=0x1ca0404, ftLastAccessTime.dwLowDateTime=0xbbb4a6d2, ftLastAccessTime.dwHighDateTime=0x1ca0404, ftLastWriteTime.dwLowDateTime=0xc6d0297c, ftLastWriteTime.dwHighDateTime=0x1c9ea13, nFileSizeHigh=0x0, nFileSizeLow=0x1816, dwReserved0=0x0, dwReserved1=0x0, cFileName="logo.png", cAlternateFileName="")) returned 1 [0061.568] FindNextFileW (in: hFindFile=0x5107c60, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0061.568] FindClose (in: hFindFile=0x5107c60 | out: hFindFile=0x5107c60) returned 1 [0061.568] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e77c) returned 1 [0061.568] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e788) returned 1 [0061.568] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e7bc) returned 1 [0061.568] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\RSSFeeds.Gadget", nBufferLength=0x105, lpBuffer=0x31e2c4, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\RSSFeeds.Gadget", lpFilePart=0x0) returned 0x3e [0061.569] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\RSSFeeds.Gadget\\", nBufferLength=0x105, lpBuffer=0x31e298, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\RSSFeeds.Gadget\\", lpFilePart=0x0) returned 0x3f [0061.569] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\RSSFeeds.Gadget\\*", lpFindFileData=0x31e4e4 | out: lpFindFileData=0x31e4e4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8012b5d2, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x1ea8d4f6, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x1ea8d4f6, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5107c60 [0061.569] FindNextFileW (in: hFindFile=0x5107c60, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8012b5d2, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x1ea8d4f6, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x1ea8d4f6, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0061.569] FindNextFileW (in: hFindFile=0x5107c60, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xbbb96990, ftCreationTime.dwHighDateTime=0x1ca0404, ftLastAccessTime.dwLowDateTime=0xbbb96990, ftLastAccessTime.dwHighDateTime=0x1ca0404, ftLastWriteTime.dwLowDateTime=0xc45e1fdc, ftLastWriteTime.dwHighDateTime=0x1c9ea13, nFileSizeHigh=0x0, nFileSizeLow=0x2141, dwReserved0=0x0, dwReserved1=0x0, cFileName="drag.png", cAlternateFileName="")) returned 1 [0061.569] FindNextFileW (in: hFindFile=0x5107c60, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1ea8d4f6, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x22ad0a6d, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x1eab37af, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="en-US", cAlternateFileName="")) returned 1 [0061.569] FindNextFileW (in: hFindFile=0x5107c60, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc467a55c, ftCreationTime.dwHighDateTime=0x1c9ea13, ftLastAccessTime.dwLowDateTime=0xc467a55c, ftLastAccessTime.dwHighDateTime=0x1c9ea13, ftLastWriteTime.dwLowDateTime=0xc467a55c, ftLastWriteTime.dwHighDateTime=0x1c9ea13, nFileSizeHigh=0x0, nFileSizeLow=0x1d07, dwReserved0=0x0, dwReserved1=0x0, cFileName="icon.png", cAlternateFileName="")) returned 1 [0061.569] FindNextFileW (in: hFindFile=0x5107c60, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8012b5d2, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x8199177f, ftLastAccessTime.dwHighDateTime=0x1ca0444, ftLastWriteTime.dwLowDateTime=0x8199177f, ftLastWriteTime.dwHighDateTime=0x1ca0444, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="images", cAlternateFileName="")) returned 1 [0061.569] FindNextFileW (in: hFindFile=0x5107c60, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xbbb4a6d2, ftCreationTime.dwHighDateTime=0x1ca0404, ftLastAccessTime.dwLowDateTime=0xbbb4a6d2, ftLastAccessTime.dwHighDateTime=0x1ca0404, ftLastWriteTime.dwLowDateTime=0xc6d0297c, ftLastWriteTime.dwHighDateTime=0x1c9ea13, nFileSizeHigh=0x0, nFileSizeLow=0x1816, dwReserved0=0x0, dwReserved1=0x0, cFileName="logo.png", cAlternateFileName="")) returned 1 [0061.570] FindNextFileW (in: hFindFile=0x5107c60, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xbbb4a6d2, ftCreationTime.dwHighDateTime=0x1ca0404, ftLastAccessTime.dwLowDateTime=0xbbb4a6d2, ftLastAccessTime.dwHighDateTime=0x1ca0404, ftLastWriteTime.dwLowDateTime=0xc6d0297c, ftLastWriteTime.dwHighDateTime=0x1c9ea13, nFileSizeHigh=0x0, nFileSizeLow=0x1816, dwReserved0=0x0, dwReserved1=0x0, cFileName="logo.png", cAlternateFileName="")) returned 0 [0061.570] FindClose (in: hFindFile=0x5107c60 | out: hFindFile=0x5107c60) returned 1 [0061.570] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e77c) returned 1 [0061.570] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e788) returned 1 [0061.570] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\RSSFeeds.Gadget\\drag.png", nBufferLength=0x105, lpBuffer=0x31e194, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\RSSFeeds.Gadget\\drag.png", lpFilePart=0x0) returned 0x47 [0061.570] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e688) returned 1 [0061.570] CreateFileW (lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\RSSFeeds.Gadget\\drag.png" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\rssfeeds.gadget\\drag.png"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x178 [0061.570] GetFileType (hFile=0x178) returned 0x1 [0061.570] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e684) returned 1 [0061.570] GetFileType (hFile=0x178) returned 0x1 [0061.570] GetFileSize (in: hFile=0x178, lpFileSizeHigh=0x31e790 | out: lpFileSizeHigh=0x31e790*=0x0) returned 0x2141 [0061.570] ReadFile (in: hFile=0x178, lpBuffer=0x27a4bac, nNumberOfBytesToRead=0x2141, lpNumberOfBytesRead=0x31e73c, lpOverlapped=0x0 | out: lpBuffer=0x27a4bac*, lpNumberOfBytesRead=0x31e73c*=0x2141, lpOverlapped=0x0) returned 1 [0061.572] CloseHandle (hObject=0x178) returned 1 [0061.614] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\RSSFeeds.Gadget\\drag.png", nBufferLength=0x105, lpBuffer=0x31e180, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\RSSFeeds.Gadget\\drag.png", lpFilePart=0x0) returned 0x47 [0061.614] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e674) returned 1 [0061.614] CreateFileW (lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\RSSFeeds.Gadget\\drag.png" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\rssfeeds.gadget\\drag.png"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0xffffffff [0061.615] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31d4b0) returned 1 [0061.615] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e7bc) returned 1 [0061.615] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\SlideShow.Gadget", nBufferLength=0x105, lpBuffer=0x31e2c4, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\SlideShow.Gadget", lpFilePart=0x0) returned 0x3f [0061.615] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\SlideShow.Gadget\\", nBufferLength=0x105, lpBuffer=0x31e298, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\SlideShow.Gadget\\", lpFilePart=0x0) returned 0x40 [0061.615] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\SlideShow.Gadget\\*", lpFindFileData=0x31e4e4 | out: lpFindFileData=0x31e4e4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8012b5d2, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x1ea8d4f6, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x1ea8d4f6, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5107920 [0061.617] FindNextFileW (in: hFindFile=0x5107920, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8012b5d2, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x1ea8d4f6, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x1ea8d4f6, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0061.618] FindNextFileW (in: hFindFile=0x5107920, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xbbafe414, ftCreationTime.dwHighDateTime=0x1ca0404, ftLastAccessTime.dwLowDateTime=0xbbafe414, ftLastAccessTime.dwHighDateTime=0x1ca0404, ftLastWriteTime.dwLowDateTime=0xcb0b3b1c, ftLastWriteTime.dwHighDateTime=0x1c9ea13, nFileSizeHigh=0x0, nFileSizeLow=0x7575, dwReserved0=0x0, dwReserved1=0x0, cFileName="drag.png", cAlternateFileName="")) returned 1 [0061.618] FindNextFileW (in: hFindFile=0x5107920, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1ea8d4f6, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x229c575e, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x1ea8d4f6, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="en-US", cAlternateFileName="")) returned 1 [0061.618] FindNextFileW (in: hFindFile=0x5107920, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xcb0ffddc, ftCreationTime.dwHighDateTime=0x1c9ea13, ftLastAccessTime.dwLowDateTime=0xcb0ffddc, ftLastAccessTime.dwHighDateTime=0x1c9ea13, ftLastWriteTime.dwLowDateTime=0xcb0ffddc, ftLastWriteTime.dwHighDateTime=0x1c9ea13, nFileSizeHigh=0x0, nFileSizeLow=0x2732, dwReserved0=0x0, dwReserved1=0x0, cFileName="icon.png", cAlternateFileName="")) returned 1 [0061.618] FindNextFileW (in: hFindFile=0x5107920, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8012b5d2, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x819454bf, ftLastAccessTime.dwHighDateTime=0x1ca0444, ftLastWriteTime.dwLowDateTime=0x819454bf, ftLastWriteTime.dwHighDateTime=0x1ca0444, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="images", cAlternateFileName="")) returned 1 [0061.618] FindNextFileW (in: hFindFile=0x5107920, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xbbad82b5, ftCreationTime.dwHighDateTime=0x1ca0404, ftLastAccessTime.dwLowDateTime=0xbbad82b5, ftLastAccessTime.dwHighDateTime=0x1ca0404, ftLastWriteTime.dwLowDateTime=0xcb3d37fc, ftLastWriteTime.dwHighDateTime=0x1c9ea13, nFileSizeHigh=0x0, nFileSizeLow=0x1816, dwReserved0=0x0, dwReserved1=0x0, cFileName="logo.png", cAlternateFileName="")) returned 1 [0061.618] FindNextFileW (in: hFindFile=0x5107920, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0061.618] FindClose (in: hFindFile=0x5107920 | out: hFindFile=0x5107920) returned 1 [0061.618] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e77c) returned 1 [0061.618] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e788) returned 1 [0061.619] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e7bc) returned 1 [0061.619] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\SlideShow.Gadget", nBufferLength=0x105, lpBuffer=0x31e2c4, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\SlideShow.Gadget", lpFilePart=0x0) returned 0x3f [0061.619] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\SlideShow.Gadget\\", nBufferLength=0x105, lpBuffer=0x31e298, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\SlideShow.Gadget\\", lpFilePart=0x0) returned 0x40 [0061.619] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\SlideShow.Gadget\\*", lpFindFileData=0x31e4e4 | out: lpFindFileData=0x31e4e4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8012b5d2, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x1ea8d4f6, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x1ea8d4f6, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5107920 [0061.619] FindNextFileW (in: hFindFile=0x5107920, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8012b5d2, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x1ea8d4f6, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x1ea8d4f6, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0061.619] FindNextFileW (in: hFindFile=0x5107920, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xbbafe414, ftCreationTime.dwHighDateTime=0x1ca0404, ftLastAccessTime.dwLowDateTime=0xbbafe414, ftLastAccessTime.dwHighDateTime=0x1ca0404, ftLastWriteTime.dwLowDateTime=0xcb0b3b1c, ftLastWriteTime.dwHighDateTime=0x1c9ea13, nFileSizeHigh=0x0, nFileSizeLow=0x7575, dwReserved0=0x0, dwReserved1=0x0, cFileName="drag.png", cAlternateFileName="")) returned 1 [0061.619] FindNextFileW (in: hFindFile=0x5107920, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1ea8d4f6, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x229c575e, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x1ea8d4f6, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="en-US", cAlternateFileName="")) returned 1 [0061.619] FindNextFileW (in: hFindFile=0x5107920, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xcb0ffddc, ftCreationTime.dwHighDateTime=0x1c9ea13, ftLastAccessTime.dwLowDateTime=0xcb0ffddc, ftLastAccessTime.dwHighDateTime=0x1c9ea13, ftLastWriteTime.dwLowDateTime=0xcb0ffddc, ftLastWriteTime.dwHighDateTime=0x1c9ea13, nFileSizeHigh=0x0, nFileSizeLow=0x2732, dwReserved0=0x0, dwReserved1=0x0, cFileName="icon.png", cAlternateFileName="")) returned 1 [0061.619] FindNextFileW (in: hFindFile=0x5107920, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8012b5d2, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x819454bf, ftLastAccessTime.dwHighDateTime=0x1ca0444, ftLastWriteTime.dwLowDateTime=0x819454bf, ftLastWriteTime.dwHighDateTime=0x1ca0444, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="images", cAlternateFileName="")) returned 1 [0061.620] FindNextFileW (in: hFindFile=0x5107920, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xbbad82b5, ftCreationTime.dwHighDateTime=0x1ca0404, ftLastAccessTime.dwLowDateTime=0xbbad82b5, ftLastAccessTime.dwHighDateTime=0x1ca0404, ftLastWriteTime.dwLowDateTime=0xcb3d37fc, ftLastWriteTime.dwHighDateTime=0x1c9ea13, nFileSizeHigh=0x0, nFileSizeLow=0x1816, dwReserved0=0x0, dwReserved1=0x0, cFileName="logo.png", cAlternateFileName="")) returned 1 [0061.620] FindNextFileW (in: hFindFile=0x5107920, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xbbad82b5, ftCreationTime.dwHighDateTime=0x1ca0404, ftLastAccessTime.dwLowDateTime=0xbbad82b5, ftLastAccessTime.dwHighDateTime=0x1ca0404, ftLastWriteTime.dwLowDateTime=0xcb3d37fc, ftLastWriteTime.dwHighDateTime=0x1c9ea13, nFileSizeHigh=0x0, nFileSizeLow=0x1816, dwReserved0=0x0, dwReserved1=0x0, cFileName="logo.png", cAlternateFileName="")) returned 0 [0061.620] FindClose (in: hFindFile=0x5107920 | out: hFindFile=0x5107920) returned 1 [0061.620] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e77c) returned 1 [0061.620] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e788) returned 1 [0061.620] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\SlideShow.Gadget\\drag.png", nBufferLength=0x105, lpBuffer=0x31e194, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\SlideShow.Gadget\\drag.png", lpFilePart=0x0) returned 0x48 [0061.620] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e688) returned 1 [0061.620] CreateFileW (lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\SlideShow.Gadget\\drag.png" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\slideshow.gadget\\drag.png"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x178 [0061.621] GetFileType (hFile=0x178) returned 0x1 [0061.621] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e684) returned 1 [0061.621] GetFileType (hFile=0x178) returned 0x1 [0061.622] GetFileSize (in: hFile=0x178, lpFileSizeHigh=0x31e790 | out: lpFileSizeHigh=0x31e790*=0x0) returned 0x7575 [0061.622] ReadFile (in: hFile=0x178, lpBuffer=0x2800cec, nNumberOfBytesToRead=0x7575, lpNumberOfBytesRead=0x31e73c, lpOverlapped=0x0 | out: lpBuffer=0x2800cec*, lpNumberOfBytesRead=0x31e73c*=0x7575, lpOverlapped=0x0) returned 1 [0061.623] CloseHandle (hObject=0x178) returned 1 [0061.672] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\SlideShow.Gadget\\drag.png", nBufferLength=0x105, lpBuffer=0x31e180, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\SlideShow.Gadget\\drag.png", lpFilePart=0x0) returned 0x48 [0061.672] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e674) returned 1 [0061.673] CreateFileW (lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\SlideShow.Gadget\\drag.png" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\slideshow.gadget\\drag.png"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0xffffffff [0061.674] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31d4b0) returned 1 [0061.674] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e7bc) returned 1 [0061.674] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget", nBufferLength=0x105, lpBuffer=0x31e2c4, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget", lpFilePart=0x0) returned 0x3d [0061.674] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\", nBufferLength=0x105, lpBuffer=0x31e298, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\", lpFilePart=0x0) returned 0x3e [0061.674] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\*", lpFindFileData=0x31e4e4 | out: lpFindFileData=0x31e4e4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8012b5d2, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x1ea6723d, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x1ea6723d, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5107ba0 [0061.676] FindNextFileW (in: hFindFile=0x5107ba0, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8012b5d2, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x1ea6723d, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x1ea6723d, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0061.676] FindNextFileW (in: hFindFile=0x5107ba0, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xbcf39e8c, ftCreationTime.dwHighDateTime=0x1ca0404, ftLastAccessTime.dwLowDateTime=0xbcf39e8c, ftLastAccessTime.dwHighDateTime=0x1ca0404, ftLastWriteTime.dwLowDateTime=0xbd379e7c, ftLastWriteTime.dwHighDateTime=0x1c9ea13, nFileSizeHigh=0x0, nFileSizeLow=0x3260, dwReserved0=0x0, dwReserved1=0x0, cFileName="drag.png", cAlternateFileName="")) returned 1 [0061.676] FindNextFileW (in: hFindFile=0x5107ba0, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1ea6723d, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x22b43298, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x1ea6723d, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="en-US", cAlternateFileName="")) returned 1 [0061.676] FindNextFileW (in: hFindFile=0x5107ba0, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xbd6739fc, ftCreationTime.dwHighDateTime=0x1c9ea13, ftLastAccessTime.dwLowDateTime=0xbd6739fc, ftLastAccessTime.dwHighDateTime=0x1c9ea13, ftLastWriteTime.dwLowDateTime=0xbd6739fc, ftLastWriteTime.dwHighDateTime=0x1c9ea13, nFileSizeHigh=0x0, nFileSizeLow=0x32a0, dwReserved0=0x0, dwReserved1=0x0, cFileName="icon.png", cAlternateFileName="")) returned 1 [0061.676] FindNextFileW (in: hFindFile=0x5107ba0, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8012b5d2, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x81886ddd, ftLastAccessTime.dwHighDateTime=0x1ca0444, ftLastWriteTime.dwLowDateTime=0x81886ddd, ftLastWriteTime.dwHighDateTime=0x1ca0444, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="images", cAlternateFileName="")) returned 1 [0061.676] FindNextFileW (in: hFindFile=0x5107ba0, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xbcf13d2d, ftCreationTime.dwHighDateTime=0x1ca0404, ftLastAccessTime.dwLowDateTime=0xbcf13d2d, ftLastAccessTime.dwHighDateTime=0x1ca0404, ftLastWriteTime.dwLowDateTime=0xbf1ad59c, ftLastWriteTime.dwHighDateTime=0x1c9ea13, nFileSizeHigh=0x0, nFileSizeLow=0x172a, dwReserved0=0x0, dwReserved1=0x0, cFileName="logo.png", cAlternateFileName="")) returned 1 [0061.677] FindNextFileW (in: hFindFile=0x5107ba0, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0061.677] FindClose (in: hFindFile=0x5107ba0 | out: hFindFile=0x5107ba0) returned 1 [0061.677] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e77c) returned 1 [0061.677] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e788) returned 1 [0061.677] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e7bc) returned 1 [0061.677] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget", nBufferLength=0x105, lpBuffer=0x31e2c4, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget", lpFilePart=0x0) returned 0x3d [0061.677] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\", nBufferLength=0x105, lpBuffer=0x31e298, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\", lpFilePart=0x0) returned 0x3e [0061.677] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\*", lpFindFileData=0x31e4e4 | out: lpFindFileData=0x31e4e4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8012b5d2, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x1ea6723d, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x1ea6723d, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5107ba0 [0061.677] FindNextFileW (in: hFindFile=0x5107ba0, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8012b5d2, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x1ea6723d, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x1ea6723d, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0061.677] FindNextFileW (in: hFindFile=0x5107ba0, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xbcf39e8c, ftCreationTime.dwHighDateTime=0x1ca0404, ftLastAccessTime.dwLowDateTime=0xbcf39e8c, ftLastAccessTime.dwHighDateTime=0x1ca0404, ftLastWriteTime.dwLowDateTime=0xbd379e7c, ftLastWriteTime.dwHighDateTime=0x1c9ea13, nFileSizeHigh=0x0, nFileSizeLow=0x3260, dwReserved0=0x0, dwReserved1=0x0, cFileName="drag.png", cAlternateFileName="")) returned 1 [0061.677] FindNextFileW (in: hFindFile=0x5107ba0, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1ea6723d, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x22b43298, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x1ea6723d, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="en-US", cAlternateFileName="")) returned 1 [0061.678] FindNextFileW (in: hFindFile=0x5107ba0, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xbd6739fc, ftCreationTime.dwHighDateTime=0x1c9ea13, ftLastAccessTime.dwLowDateTime=0xbd6739fc, ftLastAccessTime.dwHighDateTime=0x1c9ea13, ftLastWriteTime.dwLowDateTime=0xbd6739fc, ftLastWriteTime.dwHighDateTime=0x1c9ea13, nFileSizeHigh=0x0, nFileSizeLow=0x32a0, dwReserved0=0x0, dwReserved1=0x0, cFileName="icon.png", cAlternateFileName="")) returned 1 [0061.678] FindNextFileW (in: hFindFile=0x5107ba0, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8012b5d2, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x81886ddd, ftLastAccessTime.dwHighDateTime=0x1ca0444, ftLastWriteTime.dwLowDateTime=0x81886ddd, ftLastWriteTime.dwHighDateTime=0x1ca0444, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="images", cAlternateFileName="")) returned 1 [0061.678] FindNextFileW (in: hFindFile=0x5107ba0, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xbcf13d2d, ftCreationTime.dwHighDateTime=0x1ca0404, ftLastAccessTime.dwLowDateTime=0xbcf13d2d, ftLastAccessTime.dwHighDateTime=0x1ca0404, ftLastWriteTime.dwLowDateTime=0xbf1ad59c, ftLastWriteTime.dwHighDateTime=0x1c9ea13, nFileSizeHigh=0x0, nFileSizeLow=0x172a, dwReserved0=0x0, dwReserved1=0x0, cFileName="logo.png", cAlternateFileName="")) returned 1 [0061.678] FindNextFileW (in: hFindFile=0x5107ba0, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xbcf13d2d, ftCreationTime.dwHighDateTime=0x1ca0404, ftLastAccessTime.dwLowDateTime=0xbcf13d2d, ftLastAccessTime.dwHighDateTime=0x1ca0404, ftLastWriteTime.dwLowDateTime=0xbf1ad59c, ftLastWriteTime.dwHighDateTime=0x1c9ea13, nFileSizeHigh=0x0, nFileSizeLow=0x172a, dwReserved0=0x0, dwReserved1=0x0, cFileName="logo.png", cAlternateFileName="")) returned 0 [0061.678] FindClose (in: hFindFile=0x5107ba0 | out: hFindFile=0x5107ba0) returned 1 [0061.678] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e77c) returned 1 [0061.678] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e788) returned 1 [0061.678] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\drag.png", nBufferLength=0x105, lpBuffer=0x31e194, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\drag.png", lpFilePart=0x0) returned 0x46 [0061.678] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e688) returned 1 [0061.678] CreateFileW (lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\drag.png" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\weather.gadget\\drag.png"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x178 [0061.679] GetFileType (hFile=0x178) returned 0x1 [0061.680] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e684) returned 1 [0061.680] GetFileType (hFile=0x178) returned 0x1 [0061.680] GetFileSize (in: hFile=0x178, lpFileSizeHigh=0x31e790 | out: lpFileSizeHigh=0x31e790*=0x0) returned 0x3260 [0061.680] ReadFile (in: hFile=0x178, lpBuffer=0x26822d0, nNumberOfBytesToRead=0x3260, lpNumberOfBytesRead=0x31e73c, lpOverlapped=0x0 | out: lpBuffer=0x26822d0*, lpNumberOfBytesRead=0x31e73c*=0x3260, lpOverlapped=0x0) returned 1 [0061.723] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\drag.png", nBufferLength=0x105, lpBuffer=0x31e180, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\drag.png", lpFilePart=0x0) returned 0x46 [0061.724] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e674) returned 1 [0061.724] CreateFileW (lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\Weather.Gadget\\drag.png" (normalized: "c:\\program files (x86)\\windows sidebar\\gadgets\\weather.gadget\\drag.png"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0xffffffff [0061.725] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31d4b0) returned 1 [0061.726] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e834) returned 1 [0061.726] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Shared Gadgets", nBufferLength=0x105, lpBuffer=0x31e33c, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Windows Sidebar\\Shared Gadgets", lpFilePart=0x0) returned 0x35 [0061.726] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Shared Gadgets\\", nBufferLength=0x105, lpBuffer=0x31e310, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Windows Sidebar\\Shared Gadgets\\", lpFilePart=0x0) returned 0x36 [0061.726] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Shared Gadgets\\*", lpFindFileData=0x31e55c | out: lpFindFileData=0x31e55c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8012b5d2, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x8012b5d2, ftLastAccessTime.dwHighDateTime=0x1ca0444, ftLastWriteTime.dwLowDateTime=0x8012b5d2, ftLastWriteTime.dwHighDateTime=0x1ca0444, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5107c60 [0061.726] FindNextFileW (in: hFindFile=0x5107c60, lpFindFileData=0x31e56c | out: lpFindFileData=0x31e56c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8012b5d2, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x8012b5d2, ftLastAccessTime.dwHighDateTime=0x1ca0444, ftLastWriteTime.dwLowDateTime=0x8012b5d2, ftLastWriteTime.dwHighDateTime=0x1ca0444, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0061.726] FindNextFileW (in: hFindFile=0x5107c60, lpFindFileData=0x31e56c | out: lpFindFileData=0x31e56c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8012b5d2, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x8012b5d2, ftLastAccessTime.dwHighDateTime=0x1ca0444, ftLastWriteTime.dwLowDateTime=0x8012b5d2, ftLastWriteTime.dwHighDateTime=0x1ca0444, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 0 [0061.727] FindClose (in: hFindFile=0x5107c60 | out: hFindFile=0x5107c60) returned 1 [0061.727] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e7f4) returned 1 [0061.727] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e800) returned 1 [0061.727] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e834) returned 1 [0061.727] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Shared Gadgets", nBufferLength=0x105, lpBuffer=0x31e33c, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Windows Sidebar\\Shared Gadgets", lpFilePart=0x0) returned 0x35 [0061.727] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Shared Gadgets\\", nBufferLength=0x105, lpBuffer=0x31e310, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Windows Sidebar\\Shared Gadgets\\", lpFilePart=0x0) returned 0x36 [0061.727] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Windows Sidebar\\Shared Gadgets\\*", lpFindFileData=0x31e55c | out: lpFindFileData=0x31e55c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8012b5d2, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x8012b5d2, ftLastAccessTime.dwHighDateTime=0x1ca0444, ftLastWriteTime.dwLowDateTime=0x8012b5d2, ftLastWriteTime.dwHighDateTime=0x1ca0444, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5107c60 [0061.727] FindNextFileW (in: hFindFile=0x5107c60, lpFindFileData=0x31e56c | out: lpFindFileData=0x31e56c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8012b5d2, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x8012b5d2, ftLastAccessTime.dwHighDateTime=0x1ca0444, ftLastWriteTime.dwLowDateTime=0x8012b5d2, ftLastWriteTime.dwHighDateTime=0x1ca0444, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0061.727] FindNextFileW (in: hFindFile=0x5107c60, lpFindFileData=0x31e56c | out: lpFindFileData=0x31e56c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8012b5d2, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x8012b5d2, ftLastAccessTime.dwHighDateTime=0x1ca0444, ftLastWriteTime.dwLowDateTime=0x8012b5d2, ftLastWriteTime.dwHighDateTime=0x1ca0444, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 0 [0061.727] FindClose (in: hFindFile=0x5107c60 | out: hFindFile=0x5107c60) returned 1 [0061.727] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e7f4) returned 1 [0061.727] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e800) returned 1 [0061.727] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e924) returned 1 [0061.728] GetFullPathNameW (in: lpFileName="C:\\ProgramData", nBufferLength=0x105, lpBuffer=0x31e42c, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData", lpFilePart=0x0) returned 0xe [0061.728] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\", nBufferLength=0x105, lpBuffer=0x31e400, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\", lpFilePart=0x0) returned 0xf [0061.728] FindFirstFileW (in: lpFileName="C:\\ProgramData\\*", lpFindFileData=0x31e64c | out: lpFindFileData=0x31e64c*(dwFileAttributes=0x2012, ftCreationTime.dwLowDateTime=0xfd943744, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x803771e0, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x803771e0, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5107c60 [0061.728] FindNextFileW (in: hFindFile=0x5107c60, lpFindFileData=0x31e65c | out: lpFindFileData=0x31e65c*(dwFileAttributes=0x2012, ftCreationTime.dwLowDateTime=0xfd943744, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x803771e0, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x803771e0, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0061.728] FindNextFileW (in: hFindFile=0x5107c60, lpFindFileData=0x31e65c | out: lpFindFileData=0x31e65c*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x8000ce40, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0xe4efbbe0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0xe4efbbe0, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Adobe", cAlternateFileName="")) returned 1 [0061.728] FindNextFileW (in: hFindFile=0x5107c60, lpFindFileData=0x31e65c | out: lpFindFileData=0x31e65c*(dwFileAttributes=0x2416, ftCreationTime.dwLowDateTime=0x3074f252, ftCreationTime.dwHighDateTime=0x1ca0441, ftLastAccessTime.dwLowDateTime=0x3074f252, ftLastAccessTime.dwHighDateTime=0x1ca0441, ftLastWriteTime.dwLowDateTime=0x3074f252, ftLastWriteTime.dwHighDateTime=0x1ca0441, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Application Data", cAlternateFileName="APPLIC~1")) returned 1 [0061.728] FindNextFileW (in: hFindFile=0x5107c60, lpFindFileData=0x31e65c | out: lpFindFileData=0x31e65c*(dwFileAttributes=0x2416, ftCreationTime.dwLowDateTime=0x307290f2, ftCreationTime.dwHighDateTime=0x1ca0441, ftLastAccessTime.dwLowDateTime=0x307290f2, ftLastAccessTime.dwHighDateTime=0x1ca0441, ftLastWriteTime.dwLowDateTime=0x307290f2, ftLastWriteTime.dwHighDateTime=0x1ca0441, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Desktop", cAlternateFileName="")) returned 1 [0061.728] FindNextFileW (in: hFindFile=0x5107c60, lpFindFileData=0x31e65c | out: lpFindFileData=0x31e65c*(dwFileAttributes=0x2416, ftCreationTime.dwLowDateTime=0x3074f252, ftCreationTime.dwHighDateTime=0x1ca0441, ftLastAccessTime.dwLowDateTime=0x3074f252, ftLastAccessTime.dwHighDateTime=0x1ca0441, ftLastWriteTime.dwLowDateTime=0x3074f252, ftLastWriteTime.dwHighDateTime=0x1ca0441, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Documents", cAlternateFileName="DOCUME~1")) returned 1 [0061.729] FindNextFileW (in: hFindFile=0x5107c60, lpFindFileData=0x31e65c | out: lpFindFileData=0x31e65c*(dwFileAttributes=0x2416, ftCreationTime.dwLowDateTime=0x3074f252, ftCreationTime.dwHighDateTime=0x1ca0441, ftLastAccessTime.dwLowDateTime=0x3074f252, ftLastAccessTime.dwHighDateTime=0x1ca0441, ftLastWriteTime.dwLowDateTime=0x3074f252, ftLastWriteTime.dwHighDateTime=0x1ca0441, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Favorites", cAlternateFileName="FAVORI~1")) returned 1 [0061.729] FindNextFileW (in: hFindFile=0x5107c60, lpFindFileData=0x31e65c | out: lpFindFileData=0x31e65c*(dwFileAttributes=0x2014, ftCreationTime.dwLowDateTime=0xfd943744, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x80ac5760, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0x80ac5760, ftLastWriteTime.dwHighDateTime=0x1d305eb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Microsoft", cAlternateFileName="MICROS~1")) returned 1 [0061.729] FindNextFileW (in: hFindFile=0x5107c60, lpFindFileData=0x31e65c | out: lpFindFileData=0x31e65c*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe79db030, ftCreationTime.dwHighDateTime=0x1d2dda1, ftLastAccessTime.dwLowDateTime=0xed25d0a0, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0xed25d0a0, ftLastWriteTime.dwHighDateTime=0x1d305f1, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Microsoft Help", cAlternateFileName="MICROS~2")) returned 1 [0061.729] FindNextFileW (in: hFindFile=0x5107c60, lpFindFileData=0x31e65c | out: lpFindFileData=0x31e65c*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xaf8556a0, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xaf8556a0, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0xaf8556a0, ftLastWriteTime.dwHighDateTime=0x1d2dda4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Mozilla", cAlternateFileName="")) returned 1 [0061.729] FindNextFileW (in: hFindFile=0x5107c60, lpFindFileData=0x31e65c | out: lpFindFileData=0x31e65c*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x7e3c6d00, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x7e3c6d00, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x7eea3160, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Oracle", cAlternateFileName="")) returned 1 [0061.729] FindNextFileW (in: hFindFile=0x5107c60, lpFindFileData=0x31e65c | out: lpFindFileData=0x31e65c*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xecce51e0, ftCreationTime.dwHighDateTime=0x1d2e620, ftLastAccessTime.dwLowDateTime=0x4819be0, ftLastAccessTime.dwHighDateTime=0x1d2fc28, ftLastWriteTime.dwLowDateTime=0x4819be0, ftLastWriteTime.dwHighDateTime=0x1d2fc28, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Package Cache", cAlternateFileName="PACKAG~1")) returned 1 [0061.730] FindNextFileW (in: hFindFile=0x5107c60, lpFindFileData=0x31e65c | out: lpFindFileData=0x31e65c*(dwFileAttributes=0x2416, ftCreationTime.dwLowDateTime=0x307753b3, ftCreationTime.dwHighDateTime=0x1ca0441, ftLastAccessTime.dwLowDateTime=0x307753b3, ftLastAccessTime.dwHighDateTime=0x1ca0441, ftLastWriteTime.dwLowDateTime=0x307753b3, ftLastWriteTime.dwHighDateTime=0x1ca0441, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Start Menu", cAlternateFileName="STARTM~1")) returned 1 [0061.730] FindNextFileW (in: hFindFile=0x5107c60, lpFindFileData=0x31e65c | out: lpFindFileData=0x31e65c*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x803771e0, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x803771e0, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x803771e0, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Sun", cAlternateFileName="")) returned 1 [0061.730] FindNextFileW (in: hFindFile=0x5107c60, lpFindFileData=0x31e65c | out: lpFindFileData=0x31e65c*(dwFileAttributes=0x2416, ftCreationTime.dwLowDateTime=0x307753b3, ftCreationTime.dwHighDateTime=0x1ca0441, ftLastAccessTime.dwLowDateTime=0x307753b3, ftLastAccessTime.dwHighDateTime=0x1ca0441, ftLastWriteTime.dwLowDateTime=0x307753b3, ftLastWriteTime.dwHighDateTime=0x1ca0441, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Templates", cAlternateFileName="TEMPLA~1")) returned 1 [0061.730] FindNextFileW (in: hFindFile=0x5107c60, lpFindFileData=0x31e65c | out: lpFindFileData=0x31e65c*(dwFileAttributes=0x2416, ftCreationTime.dwLowDateTime=0x307753b3, ftCreationTime.dwHighDateTime=0x1ca0441, ftLastAccessTime.dwLowDateTime=0x307753b3, ftLastAccessTime.dwHighDateTime=0x1ca0441, ftLastWriteTime.dwLowDateTime=0x307753b3, ftLastWriteTime.dwHighDateTime=0x1ca0441, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Templates", cAlternateFileName="TEMPLA~1")) returned 0 [0061.730] FindClose (in: hFindFile=0x5107c60 | out: hFindFile=0x5107c60) returned 1 [0061.730] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e8e4) returned 1 [0061.730] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e8f0) returned 1 [0061.730] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e924) returned 1 [0061.730] GetFullPathNameW (in: lpFileName="C:\\ProgramData", nBufferLength=0x105, lpBuffer=0x31e42c, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData", lpFilePart=0x0) returned 0xe [0061.730] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\", nBufferLength=0x105, lpBuffer=0x31e400, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\", lpFilePart=0x0) returned 0xf [0061.731] FindFirstFileW (in: lpFileName="C:\\ProgramData\\*", lpFindFileData=0x31e64c | out: lpFindFileData=0x31e64c*(dwFileAttributes=0x2012, ftCreationTime.dwLowDateTime=0xfd943744, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x803771e0, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x803771e0, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5107c60 [0061.731] FindNextFileW (in: hFindFile=0x5107c60, lpFindFileData=0x31e65c | out: lpFindFileData=0x31e65c*(dwFileAttributes=0x2012, ftCreationTime.dwLowDateTime=0xfd943744, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x803771e0, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x803771e0, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0061.731] FindNextFileW (in: hFindFile=0x5107c60, lpFindFileData=0x31e65c | out: lpFindFileData=0x31e65c*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x8000ce40, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0xe4efbbe0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0xe4efbbe0, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Adobe", cAlternateFileName="")) returned 1 [0061.731] FindNextFileW (in: hFindFile=0x5107c60, lpFindFileData=0x31e65c | out: lpFindFileData=0x31e65c*(dwFileAttributes=0x2416, ftCreationTime.dwLowDateTime=0x3074f252, ftCreationTime.dwHighDateTime=0x1ca0441, ftLastAccessTime.dwLowDateTime=0x3074f252, ftLastAccessTime.dwHighDateTime=0x1ca0441, ftLastWriteTime.dwLowDateTime=0x3074f252, ftLastWriteTime.dwHighDateTime=0x1ca0441, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Application Data", cAlternateFileName="APPLIC~1")) returned 1 [0061.731] FindNextFileW (in: hFindFile=0x5107c60, lpFindFileData=0x31e65c | out: lpFindFileData=0x31e65c*(dwFileAttributes=0x2416, ftCreationTime.dwLowDateTime=0x307290f2, ftCreationTime.dwHighDateTime=0x1ca0441, ftLastAccessTime.dwLowDateTime=0x307290f2, ftLastAccessTime.dwHighDateTime=0x1ca0441, ftLastWriteTime.dwLowDateTime=0x307290f2, ftLastWriteTime.dwHighDateTime=0x1ca0441, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Desktop", cAlternateFileName="")) returned 1 [0061.731] FindNextFileW (in: hFindFile=0x5107c60, lpFindFileData=0x31e65c | out: lpFindFileData=0x31e65c*(dwFileAttributes=0x2416, ftCreationTime.dwLowDateTime=0x3074f252, ftCreationTime.dwHighDateTime=0x1ca0441, ftLastAccessTime.dwLowDateTime=0x3074f252, ftLastAccessTime.dwHighDateTime=0x1ca0441, ftLastWriteTime.dwLowDateTime=0x3074f252, ftLastWriteTime.dwHighDateTime=0x1ca0441, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Documents", cAlternateFileName="DOCUME~1")) returned 1 [0061.731] FindNextFileW (in: hFindFile=0x5107c60, lpFindFileData=0x31e65c | out: lpFindFileData=0x31e65c*(dwFileAttributes=0x2416, ftCreationTime.dwLowDateTime=0x3074f252, ftCreationTime.dwHighDateTime=0x1ca0441, ftLastAccessTime.dwLowDateTime=0x3074f252, ftLastAccessTime.dwHighDateTime=0x1ca0441, ftLastWriteTime.dwLowDateTime=0x3074f252, ftLastWriteTime.dwHighDateTime=0x1ca0441, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Favorites", cAlternateFileName="FAVORI~1")) returned 1 [0061.732] FindNextFileW (in: hFindFile=0x5107c60, lpFindFileData=0x31e65c | out: lpFindFileData=0x31e65c*(dwFileAttributes=0x2014, ftCreationTime.dwLowDateTime=0xfd943744, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x80ac5760, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0x80ac5760, ftLastWriteTime.dwHighDateTime=0x1d305eb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft", cAlternateFileName="MICROS~1")) returned 1 [0061.732] FindNextFileW (in: hFindFile=0x5107c60, lpFindFileData=0x31e65c | out: lpFindFileData=0x31e65c*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe79db030, ftCreationTime.dwHighDateTime=0x1d2dda1, ftLastAccessTime.dwLowDateTime=0xed25d0a0, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0xed25d0a0, ftLastWriteTime.dwHighDateTime=0x1d305f1, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft Help", cAlternateFileName="MICROS~2")) returned 1 [0061.732] FindNextFileW (in: hFindFile=0x5107c60, lpFindFileData=0x31e65c | out: lpFindFileData=0x31e65c*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xaf8556a0, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xaf8556a0, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0xaf8556a0, ftLastWriteTime.dwHighDateTime=0x1d2dda4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Mozilla", cAlternateFileName="")) returned 1 [0061.732] FindNextFileW (in: hFindFile=0x5107c60, lpFindFileData=0x31e65c | out: lpFindFileData=0x31e65c*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x7e3c6d00, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x7e3c6d00, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x7eea3160, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Oracle", cAlternateFileName="")) returned 1 [0061.732] FindNextFileW (in: hFindFile=0x5107c60, lpFindFileData=0x31e65c | out: lpFindFileData=0x31e65c*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xecce51e0, ftCreationTime.dwHighDateTime=0x1d2e620, ftLastAccessTime.dwLowDateTime=0x4819be0, ftLastAccessTime.dwHighDateTime=0x1d2fc28, ftLastWriteTime.dwLowDateTime=0x4819be0, ftLastWriteTime.dwHighDateTime=0x1d2fc28, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Package Cache", cAlternateFileName="PACKAG~1")) returned 1 [0061.732] FindNextFileW (in: hFindFile=0x5107c60, lpFindFileData=0x31e65c | out: lpFindFileData=0x31e65c*(dwFileAttributes=0x2416, ftCreationTime.dwLowDateTime=0x307753b3, ftCreationTime.dwHighDateTime=0x1ca0441, ftLastAccessTime.dwLowDateTime=0x307753b3, ftLastAccessTime.dwHighDateTime=0x1ca0441, ftLastWriteTime.dwLowDateTime=0x307753b3, ftLastWriteTime.dwHighDateTime=0x1ca0441, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Start Menu", cAlternateFileName="STARTM~1")) returned 1 [0061.732] FindNextFileW (in: hFindFile=0x5107c60, lpFindFileData=0x31e65c | out: lpFindFileData=0x31e65c*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x803771e0, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x803771e0, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x803771e0, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Sun", cAlternateFileName="")) returned 1 [0061.732] FindNextFileW (in: hFindFile=0x5107c60, lpFindFileData=0x31e65c | out: lpFindFileData=0x31e65c*(dwFileAttributes=0x2416, ftCreationTime.dwLowDateTime=0x307753b3, ftCreationTime.dwHighDateTime=0x1ca0441, ftLastAccessTime.dwLowDateTime=0x307753b3, ftLastAccessTime.dwHighDateTime=0x1ca0441, ftLastWriteTime.dwLowDateTime=0x307753b3, ftLastWriteTime.dwHighDateTime=0x1ca0441, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Templates", cAlternateFileName="TEMPLA~1")) returned 1 [0061.732] FindNextFileW (in: hFindFile=0x5107c60, lpFindFileData=0x31e65c | out: lpFindFileData=0x31e65c*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0061.733] FindClose (in: hFindFile=0x5107c60 | out: hFindFile=0x5107c60) returned 1 [0061.733] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e8e4) returned 1 [0061.733] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e8f0) returned 1 [0061.733] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e8ac) returned 1 [0061.733] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Adobe", nBufferLength=0x105, lpBuffer=0x31e3b4, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Adobe", lpFilePart=0x0) returned 0x14 [0061.733] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Adobe\\", nBufferLength=0x105, lpBuffer=0x31e388, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Adobe\\", lpFilePart=0x0) returned 0x15 [0061.733] FindFirstFileW (in: lpFileName="C:\\ProgramData\\Adobe\\*", lpFindFileData=0x31e5d4 | out: lpFindFileData=0x31e5d4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x8000ce40, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0xe4efbbe0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0xe4efbbe0, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5107c60 [0061.733] FindNextFileW (in: hFindFile=0x5107c60, lpFindFileData=0x31e5e4 | out: lpFindFileData=0x31e5e4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x8000ce40, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0xe4efbbe0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0xe4efbbe0, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0061.733] FindNextFileW (in: hFindFile=0x5107c60, lpFindFileData=0x31e5e4 | out: lpFindFileData=0x31e5e4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x8000ce40, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x8000ce40, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x8000ce40, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Acrobat", cAlternateFileName="")) returned 1 [0061.734] FindNextFileW (in: hFindFile=0x5107c60, lpFindFileData=0x31e5e4 | out: lpFindFileData=0x31e5e4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe4efbbe0, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0xe4efbbe0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0xe4efbbe0, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="ARM", cAlternateFileName="")) returned 1 [0061.734] FindNextFileW (in: hFindFile=0x5107c60, lpFindFileData=0x31e5e4 | out: lpFindFileData=0x31e5e4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe4efbbe0, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0xe4efbbe0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0xe4efbbe0, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="ARM", cAlternateFileName="")) returned 0 [0061.734] FindClose (in: hFindFile=0x5107c60 | out: hFindFile=0x5107c60) returned 1 [0061.734] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e86c) returned 1 [0061.734] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e878) returned 1 [0061.734] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e8ac) returned 1 [0061.734] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Adobe", nBufferLength=0x105, lpBuffer=0x31e3b4, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Adobe", lpFilePart=0x0) returned 0x14 [0061.734] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Adobe\\", nBufferLength=0x105, lpBuffer=0x31e388, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Adobe\\", lpFilePart=0x0) returned 0x15 [0061.734] FindFirstFileW (in: lpFileName="C:\\ProgramData\\Adobe\\*", lpFindFileData=0x31e5d4 | out: lpFindFileData=0x31e5d4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x8000ce40, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0xe4efbbe0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0xe4efbbe0, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5107c60 [0061.734] FindNextFileW (in: hFindFile=0x5107c60, lpFindFileData=0x31e5e4 | out: lpFindFileData=0x31e5e4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x8000ce40, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0xe4efbbe0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0xe4efbbe0, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0061.735] FindNextFileW (in: hFindFile=0x5107c60, lpFindFileData=0x31e5e4 | out: lpFindFileData=0x31e5e4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x8000ce40, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x8000ce40, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x8000ce40, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Acrobat", cAlternateFileName="")) returned 1 [0061.735] FindNextFileW (in: hFindFile=0x5107c60, lpFindFileData=0x31e5e4 | out: lpFindFileData=0x31e5e4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe4efbbe0, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0xe4efbbe0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0xe4efbbe0, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="ARM", cAlternateFileName="")) returned 1 [0061.735] FindNextFileW (in: hFindFile=0x5107c60, lpFindFileData=0x31e5e4 | out: lpFindFileData=0x31e5e4*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0061.735] FindClose (in: hFindFile=0x5107c60 | out: hFindFile=0x5107c60) returned 1 [0061.735] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e86c) returned 1 [0061.735] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e878) returned 1 [0061.735] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e834) returned 1 [0061.735] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Adobe\\Acrobat", nBufferLength=0x105, lpBuffer=0x31e33c, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Adobe\\Acrobat", lpFilePart=0x0) returned 0x1c [0061.735] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Adobe\\Acrobat\\", nBufferLength=0x105, lpBuffer=0x31e310, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Adobe\\Acrobat\\", lpFilePart=0x0) returned 0x1d [0061.735] FindFirstFileW (in: lpFileName="C:\\ProgramData\\Adobe\\Acrobat\\*", lpFindFileData=0x31e55c | out: lpFindFileData=0x31e55c*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x8000ce40, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x8000ce40, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x8000ce40, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5107c60 [0061.736] FindNextFileW (in: hFindFile=0x5107c60, lpFindFileData=0x31e56c | out: lpFindFileData=0x31e56c*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x8000ce40, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x8000ce40, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x8000ce40, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0061.736] FindNextFileW (in: hFindFile=0x5107c60, lpFindFileData=0x31e56c | out: lpFindFileData=0x31e56c*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x8000ce40, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x8000ce40, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x8000ce40, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="10.0", cAlternateFileName="")) returned 1 [0061.736] FindNextFileW (in: hFindFile=0x5107c60, lpFindFileData=0x31e56c | out: lpFindFileData=0x31e56c*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x8000ce40, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x8000ce40, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x8000ce40, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="10.0", cAlternateFileName="")) returned 0 [0061.736] FindClose (in: hFindFile=0x5107c60 | out: hFindFile=0x5107c60) returned 1 [0061.736] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e7f4) returned 1 [0061.736] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e800) returned 1 [0061.736] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e834) returned 1 [0061.736] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Adobe\\Acrobat", nBufferLength=0x105, lpBuffer=0x31e33c, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Adobe\\Acrobat", lpFilePart=0x0) returned 0x1c [0061.736] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Adobe\\Acrobat\\", nBufferLength=0x105, lpBuffer=0x31e310, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Adobe\\Acrobat\\", lpFilePart=0x0) returned 0x1d [0061.736] FindFirstFileW (in: lpFileName="C:\\ProgramData\\Adobe\\Acrobat\\*", lpFindFileData=0x31e55c | out: lpFindFileData=0x31e55c*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x8000ce40, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x8000ce40, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x8000ce40, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5107c60 [0061.736] FindNextFileW (in: hFindFile=0x5107c60, lpFindFileData=0x31e56c | out: lpFindFileData=0x31e56c*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x8000ce40, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x8000ce40, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x8000ce40, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0061.737] FindNextFileW (in: hFindFile=0x5107c60, lpFindFileData=0x31e56c | out: lpFindFileData=0x31e56c*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x8000ce40, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x8000ce40, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x8000ce40, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="10.0", cAlternateFileName="")) returned 1 [0061.737] FindNextFileW (in: hFindFile=0x5107c60, lpFindFileData=0x31e56c | out: lpFindFileData=0x31e56c*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0061.737] FindClose (in: hFindFile=0x5107c60 | out: hFindFile=0x5107c60) returned 1 [0061.737] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e7f4) returned 1 [0061.737] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e800) returned 1 [0061.737] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e7bc) returned 1 [0061.737] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Adobe\\Acrobat\\10.0", nBufferLength=0x105, lpBuffer=0x31e2c4, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Adobe\\Acrobat\\10.0", lpFilePart=0x0) returned 0x21 [0061.737] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Adobe\\Acrobat\\10.0\\", nBufferLength=0x105, lpBuffer=0x31e298, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Adobe\\Acrobat\\10.0\\", lpFilePart=0x0) returned 0x22 [0061.737] FindFirstFileW (in: lpFileName="C:\\ProgramData\\Adobe\\Acrobat\\10.0\\*", lpFindFileData=0x31e4e4 | out: lpFindFileData=0x31e4e4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x8000ce40, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x8000ce40, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x8000ce40, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5107c60 [0061.737] FindNextFileW (in: hFindFile=0x5107c60, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x8000ce40, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x8000ce40, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x8000ce40, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0061.737] FindNextFileW (in: hFindFile=0x5107c60, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x8000ce40, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x8000ce40, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x8000ce40, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Replicate", cAlternateFileName="REPLIC~1")) returned 1 [0061.738] FindNextFileW (in: hFindFile=0x5107c60, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x8000ce40, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x8000ce40, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x8000ce40, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Replicate", cAlternateFileName="REPLIC~1")) returned 0 [0061.738] FindClose (in: hFindFile=0x5107c60 | out: hFindFile=0x5107c60) returned 1 [0061.738] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e77c) returned 1 [0061.738] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e788) returned 1 [0061.738] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e7bc) returned 1 [0061.738] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Adobe\\Acrobat\\10.0", nBufferLength=0x105, lpBuffer=0x31e2c4, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Adobe\\Acrobat\\10.0", lpFilePart=0x0) returned 0x21 [0061.738] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Adobe\\Acrobat\\10.0\\", nBufferLength=0x105, lpBuffer=0x31e298, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Adobe\\Acrobat\\10.0\\", lpFilePart=0x0) returned 0x22 [0061.738] FindFirstFileW (in: lpFileName="C:\\ProgramData\\Adobe\\Acrobat\\10.0\\*", lpFindFileData=0x31e4e4 | out: lpFindFileData=0x31e4e4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x8000ce40, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x8000ce40, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x8000ce40, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5107c60 [0061.738] FindNextFileW (in: hFindFile=0x5107c60, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x8000ce40, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x8000ce40, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x8000ce40, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0061.739] FindNextFileW (in: hFindFile=0x5107c60, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x8000ce40, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x8000ce40, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x8000ce40, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Replicate", cAlternateFileName="REPLIC~1")) returned 1 [0061.739] FindNextFileW (in: hFindFile=0x5107c60, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0061.739] FindClose (in: hFindFile=0x5107c60 | out: hFindFile=0x5107c60) returned 1 [0061.739] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e77c) returned 1 [0061.739] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e788) returned 1 [0061.739] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e744) returned 1 [0061.739] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Adobe\\Acrobat\\10.0\\Replicate", nBufferLength=0x105, lpBuffer=0x31e24c, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Adobe\\Acrobat\\10.0\\Replicate", lpFilePart=0x0) returned 0x2b [0061.739] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Adobe\\Acrobat\\10.0\\Replicate\\", nBufferLength=0x105, lpBuffer=0x31e220, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Adobe\\Acrobat\\10.0\\Replicate\\", lpFilePart=0x0) returned 0x2c [0061.739] FindFirstFileW (in: lpFileName="C:\\ProgramData\\Adobe\\Acrobat\\10.0\\Replicate\\*", lpFindFileData=0x31e46c | out: lpFindFileData=0x31e46c*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x8000ce40, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x8000ce40, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x8000ce40, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5107c60 [0061.741] FindNextFileW (in: hFindFile=0x5107c60, lpFindFileData=0x31e47c | out: lpFindFileData=0x31e47c*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x8000ce40, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x8000ce40, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x8000ce40, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0061.742] FindNextFileW (in: hFindFile=0x5107c60, lpFindFileData=0x31e47c | out: lpFindFileData=0x31e47c*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x8000ce40, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x8000ce40, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x8000ce40, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Security", cAlternateFileName="")) returned 1 [0061.742] FindNextFileW (in: hFindFile=0x5107c60, lpFindFileData=0x31e47c | out: lpFindFileData=0x31e47c*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x8000ce40, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x8000ce40, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x8000ce40, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Security", cAlternateFileName="")) returned 0 [0061.742] FindClose (in: hFindFile=0x5107c60 | out: hFindFile=0x5107c60) returned 1 [0061.742] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e704) returned 1 [0061.742] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e710) returned 1 [0061.742] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e744) returned 1 [0061.742] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Adobe\\Acrobat\\10.0\\Replicate", nBufferLength=0x105, lpBuffer=0x31e24c, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Adobe\\Acrobat\\10.0\\Replicate", lpFilePart=0x0) returned 0x2b [0061.742] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Adobe\\Acrobat\\10.0\\Replicate\\", nBufferLength=0x105, lpBuffer=0x31e220, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Adobe\\Acrobat\\10.0\\Replicate\\", lpFilePart=0x0) returned 0x2c [0061.742] FindFirstFileW (in: lpFileName="C:\\ProgramData\\Adobe\\Acrobat\\10.0\\Replicate\\*", lpFindFileData=0x31e46c | out: lpFindFileData=0x31e46c*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x8000ce40, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x8000ce40, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x8000ce40, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5107c60 [0061.742] FindNextFileW (in: hFindFile=0x5107c60, lpFindFileData=0x31e47c | out: lpFindFileData=0x31e47c*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x8000ce40, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x8000ce40, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x8000ce40, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0061.743] FindNextFileW (in: hFindFile=0x5107c60, lpFindFileData=0x31e47c | out: lpFindFileData=0x31e47c*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x8000ce40, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x8000ce40, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x8000ce40, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Security", cAlternateFileName="")) returned 1 [0061.743] FindNextFileW (in: hFindFile=0x5107c60, lpFindFileData=0x31e47c | out: lpFindFileData=0x31e47c*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0061.743] FindClose (in: hFindFile=0x5107c60 | out: hFindFile=0x5107c60) returned 1 [0061.743] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e704) returned 1 [0061.743] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e710) returned 1 [0061.743] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e6cc) returned 1 [0061.743] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Adobe\\Acrobat\\10.0\\Replicate\\Security", nBufferLength=0x105, lpBuffer=0x31e1d4, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Adobe\\Acrobat\\10.0\\Replicate\\Security", lpFilePart=0x0) returned 0x34 [0061.743] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Adobe\\Acrobat\\10.0\\Replicate\\Security\\", nBufferLength=0x105, lpBuffer=0x31e1a8, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Adobe\\Acrobat\\10.0\\Replicate\\Security\\", lpFilePart=0x0) returned 0x35 [0061.743] FindFirstFileW (in: lpFileName="C:\\ProgramData\\Adobe\\Acrobat\\10.0\\Replicate\\Security\\*", lpFindFileData=0x31e3f4 | out: lpFindFileData=0x31e3f4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x8000ce40, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x8000ce40, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x8000ce40, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5107c60 [0061.743] FindNextFileW (in: hFindFile=0x5107c60, lpFindFileData=0x31e404 | out: lpFindFileData=0x31e404*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x8000ce40, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x8000ce40, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x8000ce40, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0061.744] FindNextFileW (in: hFindFile=0x5107c60, lpFindFileData=0x31e404 | out: lpFindFileData=0x31e404*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x93de7300, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x8000ce40, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x93de7300, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x1df, dwReserved0=0x0, dwReserved1=0x0, cFileName="directories.acrodata", cAlternateFileName="DIRECT~1.ACR")) returned 1 [0061.744] FindNextFileW (in: hFindFile=0x5107c60, lpFindFileData=0x31e404 | out: lpFindFileData=0x31e404*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0061.744] FindClose (in: hFindFile=0x5107c60 | out: hFindFile=0x5107c60) returned 1 [0061.744] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e68c) returned 1 [0061.744] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e698) returned 1 [0061.744] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e6cc) returned 1 [0061.744] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Adobe\\Acrobat\\10.0\\Replicate\\Security", nBufferLength=0x105, lpBuffer=0x31e1d4, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Adobe\\Acrobat\\10.0\\Replicate\\Security", lpFilePart=0x0) returned 0x34 [0061.744] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Adobe\\Acrobat\\10.0\\Replicate\\Security\\", nBufferLength=0x105, lpBuffer=0x31e1a8, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Adobe\\Acrobat\\10.0\\Replicate\\Security\\", lpFilePart=0x0) returned 0x35 [0061.744] FindFirstFileW (in: lpFileName="C:\\ProgramData\\Adobe\\Acrobat\\10.0\\Replicate\\Security\\*", lpFindFileData=0x31e3f4 | out: lpFindFileData=0x31e3f4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x8000ce40, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x8000ce40, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x8000ce40, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5107c60 [0061.744] FindNextFileW (in: hFindFile=0x5107c60, lpFindFileData=0x31e404 | out: lpFindFileData=0x31e404*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x8000ce40, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x8000ce40, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x8000ce40, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0061.745] FindNextFileW (in: hFindFile=0x5107c60, lpFindFileData=0x31e404 | out: lpFindFileData=0x31e404*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x93de7300, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x8000ce40, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x93de7300, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x1df, dwReserved0=0x0, dwReserved1=0x0, cFileName="directories.acrodata", cAlternateFileName="DIRECT~1.ACR")) returned 1 [0061.745] FindNextFileW (in: hFindFile=0x5107c60, lpFindFileData=0x31e404 | out: lpFindFileData=0x31e404*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x93de7300, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x8000ce40, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x93de7300, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x1df, dwReserved0=0x0, dwReserved1=0x0, cFileName="directories.acrodata", cAlternateFileName="DIRECT~1.ACR")) returned 0 [0061.745] FindClose (in: hFindFile=0x5107c60 | out: hFindFile=0x5107c60) returned 1 [0061.745] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e68c) returned 1 [0061.745] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e698) returned 1 [0061.745] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e834) returned 1 [0061.745] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Adobe\\ARM", nBufferLength=0x105, lpBuffer=0x31e33c, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Adobe\\ARM", lpFilePart=0x0) returned 0x18 [0061.745] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Adobe\\ARM\\", nBufferLength=0x105, lpBuffer=0x31e310, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Adobe\\ARM\\", lpFilePart=0x0) returned 0x19 [0061.745] FindFirstFileW (in: lpFileName="C:\\ProgramData\\Adobe\\ARM\\*", lpFindFileData=0x31e55c | out: lpFindFileData=0x31e55c*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe4efbbe0, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0xe4efbbe0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0xe4efbbe0, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5107c60 [0061.746] FindNextFileW (in: hFindFile=0x5107c60, lpFindFileData=0x31e56c | out: lpFindFileData=0x31e56c*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe4efbbe0, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0xe4efbbe0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0xe4efbbe0, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0061.746] FindNextFileW (in: hFindFile=0x5107c60, lpFindFileData=0x31e56c | out: lpFindFileData=0x31e56c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xe4efbbe0, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0xf2028d90, ftLastAccessTime.dwHighDateTime=0x1d2ddf4, ftLastWriteTime.dwLowDateTime=0xf2028d90, ftLastWriteTime.dwHighDateTime=0x1d2ddf4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Reader_10.0.0", cAlternateFileName="READER~1.0")) returned 1 [0061.746] FindNextFileW (in: hFindFile=0x5107c60, lpFindFileData=0x31e56c | out: lpFindFileData=0x31e56c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xe4efbbe0, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0xf2028d90, ftLastAccessTime.dwHighDateTime=0x1d2ddf4, ftLastWriteTime.dwLowDateTime=0xf2028d90, ftLastWriteTime.dwHighDateTime=0x1d2ddf4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Reader_10.0.0", cAlternateFileName="READER~1.0")) returned 0 [0061.746] FindClose (in: hFindFile=0x5107c60 | out: hFindFile=0x5107c60) returned 1 [0061.746] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e7f4) returned 1 [0061.746] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e800) returned 1 [0061.746] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e834) returned 1 [0061.746] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Adobe\\ARM", nBufferLength=0x105, lpBuffer=0x31e33c, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Adobe\\ARM", lpFilePart=0x0) returned 0x18 [0061.746] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Adobe\\ARM\\", nBufferLength=0x105, lpBuffer=0x31e310, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Adobe\\ARM\\", lpFilePart=0x0) returned 0x19 [0061.747] FindFirstFileW (in: lpFileName="C:\\ProgramData\\Adobe\\ARM\\*", lpFindFileData=0x31e55c | out: lpFindFileData=0x31e55c*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe4efbbe0, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0xe4efbbe0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0xe4efbbe0, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5107c60 [0061.747] FindNextFileW (in: hFindFile=0x5107c60, lpFindFileData=0x31e56c | out: lpFindFileData=0x31e56c*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe4efbbe0, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0xe4efbbe0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0xe4efbbe0, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0061.747] FindNextFileW (in: hFindFile=0x5107c60, lpFindFileData=0x31e56c | out: lpFindFileData=0x31e56c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xe4efbbe0, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0xf2028d90, ftLastAccessTime.dwHighDateTime=0x1d2ddf4, ftLastWriteTime.dwLowDateTime=0xf2028d90, ftLastWriteTime.dwHighDateTime=0x1d2ddf4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Reader_10.0.0", cAlternateFileName="READER~1.0")) returned 1 [0061.747] FindNextFileW (in: hFindFile=0x5107c60, lpFindFileData=0x31e56c | out: lpFindFileData=0x31e56c*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0061.747] FindClose (in: hFindFile=0x5107c60 | out: hFindFile=0x5107c60) returned 1 [0061.747] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e7f4) returned 1 [0061.747] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e800) returned 1 [0061.747] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e7bc) returned 1 [0061.747] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Adobe\\ARM\\Reader_10.0.0", nBufferLength=0x105, lpBuffer=0x31e2c4, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Adobe\\ARM\\Reader_10.0.0", lpFilePart=0x0) returned 0x26 [0061.747] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Adobe\\ARM\\Reader_10.0.0\\", nBufferLength=0x105, lpBuffer=0x31e298, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Adobe\\ARM\\Reader_10.0.0\\", lpFilePart=0x0) returned 0x27 [0061.747] FindFirstFileW (in: lpFileName="C:\\ProgramData\\Adobe\\ARM\\Reader_10.0.0\\*", lpFindFileData=0x31e4e4 | out: lpFindFileData=0x31e4e4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xe4efbbe0, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0xf2028d90, ftLastAccessTime.dwHighDateTime=0x1d2ddf4, ftLastWriteTime.dwLowDateTime=0xf2028d90, ftLastWriteTime.dwHighDateTime=0x1d2ddf4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5107c60 [0061.749] FindNextFileW (in: hFindFile=0x5107c60, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xe4efbbe0, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0xf2028d90, ftLastAccessTime.dwHighDateTime=0x1d2ddf4, ftLastWriteTime.dwLowDateTime=0xf2028d90, ftLastWriteTime.dwHighDateTime=0x1d2ddf4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0061.749] FindNextFileW (in: hFindFile=0x5107c60, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7e186d00, ftCreationTime.dwHighDateTime=0x1cfb543, ftLastAccessTime.dwLowDateTime=0x7e186d00, ftLastAccessTime.dwHighDateTime=0x1cfb543, ftLastWriteTime.dwLowDateTime=0x7e186d00, ftLastWriteTime.dwHighDateTime=0x1cfb543, nFileSizeHigh=0x0, nFileSizeLow=0x3d800, dwReserved0=0x0, dwReserved1=0x0, cFileName="AdbeRdrSecUpd10111.msp", cAlternateFileName="ADBERD~2.MSP")) returned 1 [0061.749] FindNextFileW (in: hFindFile=0x5107c60, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb4450880, ftCreationTime.dwHighDateTime=0x1cf6c45, ftLastAccessTime.dwLowDateTime=0xb4450880, ftLastAccessTime.dwHighDateTime=0x1cf6c45, ftLastWriteTime.dwLowDateTime=0xb4450880, ftLastWriteTime.dwHighDateTime=0x1cf6c45, nFileSizeHigh=0x0, nFileSizeLow=0x10e3000, dwReserved0=0x0, dwReserved1=0x0, cFileName="AdbeRdrUpd10110_MUI.msp", cAlternateFileName="ADBERD~1.MSP")) returned 1 [0061.750] FindNextFileW (in: hFindFile=0x5107c60, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2540cc00, ftCreationTime.dwHighDateTime=0x1d1056e, ftLastAccessTime.dwLowDateTime=0x2540cc00, ftLastAccessTime.dwHighDateTime=0x1d1056e, ftLastWriteTime.dwLowDateTime=0x2540cc00, ftLastWriteTime.dwHighDateTime=0x1d1056e, nFileSizeHigh=0x0, nFileSizeLow=0x109d000, dwReserved0=0x0, dwReserved1=0x0, cFileName="AdbeRdrUpd10116_MUI.msp", cAlternateFileName="ADBERD~3.MSP")) returned 1 [0061.750] FindNextFileW (in: hFindFile=0x5107c60, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0061.750] FindClose (in: hFindFile=0x5107c60 | out: hFindFile=0x5107c60) returned 1 [0061.751] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e77c) returned 1 [0061.751] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e788) returned 1 [0061.751] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e7bc) returned 1 [0061.751] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Adobe\\ARM\\Reader_10.0.0", nBufferLength=0x105, lpBuffer=0x31e2c4, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Adobe\\ARM\\Reader_10.0.0", lpFilePart=0x0) returned 0x26 [0061.751] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Adobe\\ARM\\Reader_10.0.0\\", nBufferLength=0x105, lpBuffer=0x31e298, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Adobe\\ARM\\Reader_10.0.0\\", lpFilePart=0x0) returned 0x27 [0061.751] FindFirstFileW (in: lpFileName="C:\\ProgramData\\Adobe\\ARM\\Reader_10.0.0\\*", lpFindFileData=0x31e4e4 | out: lpFindFileData=0x31e4e4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xe4efbbe0, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0xf2028d90, ftLastAccessTime.dwHighDateTime=0x1d2ddf4, ftLastWriteTime.dwLowDateTime=0xf2028d90, ftLastWriteTime.dwHighDateTime=0x1d2ddf4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5107c60 [0061.752] FindNextFileW (in: hFindFile=0x5107c60, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xe4efbbe0, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0xf2028d90, ftLastAccessTime.dwHighDateTime=0x1d2ddf4, ftLastWriteTime.dwLowDateTime=0xf2028d90, ftLastWriteTime.dwHighDateTime=0x1d2ddf4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0061.752] FindNextFileW (in: hFindFile=0x5107c60, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7e186d00, ftCreationTime.dwHighDateTime=0x1cfb543, ftLastAccessTime.dwLowDateTime=0x7e186d00, ftLastAccessTime.dwHighDateTime=0x1cfb543, ftLastWriteTime.dwLowDateTime=0x7e186d00, ftLastWriteTime.dwHighDateTime=0x1cfb543, nFileSizeHigh=0x0, nFileSizeLow=0x3d800, dwReserved0=0x0, dwReserved1=0x0, cFileName="AdbeRdrSecUpd10111.msp", cAlternateFileName="ADBERD~2.MSP")) returned 1 [0061.752] FindNextFileW (in: hFindFile=0x5107c60, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb4450880, ftCreationTime.dwHighDateTime=0x1cf6c45, ftLastAccessTime.dwLowDateTime=0xb4450880, ftLastAccessTime.dwHighDateTime=0x1cf6c45, ftLastWriteTime.dwLowDateTime=0xb4450880, ftLastWriteTime.dwHighDateTime=0x1cf6c45, nFileSizeHigh=0x0, nFileSizeLow=0x10e3000, dwReserved0=0x0, dwReserved1=0x0, cFileName="AdbeRdrUpd10110_MUI.msp", cAlternateFileName="ADBERD~1.MSP")) returned 1 [0061.752] FindNextFileW (in: hFindFile=0x5107c60, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2540cc00, ftCreationTime.dwHighDateTime=0x1d1056e, ftLastAccessTime.dwLowDateTime=0x2540cc00, ftLastAccessTime.dwHighDateTime=0x1d1056e, ftLastWriteTime.dwLowDateTime=0x2540cc00, ftLastWriteTime.dwHighDateTime=0x1d1056e, nFileSizeHigh=0x0, nFileSizeLow=0x109d000, dwReserved0=0x0, dwReserved1=0x0, cFileName="AdbeRdrUpd10116_MUI.msp", cAlternateFileName="ADBERD~3.MSP")) returned 1 [0061.752] FindNextFileW (in: hFindFile=0x5107c60, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2540cc00, ftCreationTime.dwHighDateTime=0x1d1056e, ftLastAccessTime.dwLowDateTime=0x2540cc00, ftLastAccessTime.dwHighDateTime=0x1d1056e, ftLastWriteTime.dwLowDateTime=0x2540cc00, ftLastWriteTime.dwHighDateTime=0x1d1056e, nFileSizeHigh=0x0, nFileSizeLow=0x109d000, dwReserved0=0x0, dwReserved1=0x0, cFileName="AdbeRdrUpd10116_MUI.msp", cAlternateFileName="ADBERD~3.MSP")) returned 0 [0061.752] FindClose (in: hFindFile=0x5107c60 | out: hFindFile=0x5107c60) returned 1 [0061.753] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e77c) returned 1 [0061.753] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e788) returned 1 [0061.753] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e8ac) returned 1 [0061.753] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Application Data", nBufferLength=0x105, lpBuffer=0x31e3b4, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Application Data", lpFilePart=0x0) returned 0x1f [0061.753] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Application Data\\", nBufferLength=0x105, lpBuffer=0x31e388, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Application Data\\", lpFilePart=0x0) returned 0x20 [0061.753] FindFirstFileW (in: lpFileName="C:\\ProgramData\\Application Data\\*", lpFindFileData=0x31e5d4 | out: lpFindFileData=0x31e5d4*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0061.754] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e870) returned 1 [0061.755] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e8ac) returned 1 [0061.755] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Desktop", nBufferLength=0x105, lpBuffer=0x31e3b4, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Desktop", lpFilePart=0x0) returned 0x16 [0061.755] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Desktop\\", nBufferLength=0x105, lpBuffer=0x31e388, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Desktop\\", lpFilePart=0x0) returned 0x17 [0061.755] FindFirstFileW (in: lpFileName="C:\\ProgramData\\Desktop\\*", lpFindFileData=0x31e5d4 | out: lpFindFileData=0x31e5d4*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0061.755] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e870) returned 1 [0061.756] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e8ac) returned 1 [0061.756] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Documents", nBufferLength=0x105, lpBuffer=0x31e3b4, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Documents", lpFilePart=0x0) returned 0x18 [0061.756] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Documents\\", nBufferLength=0x105, lpBuffer=0x31e388, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Documents\\", lpFilePart=0x0) returned 0x19 [0061.756] FindFirstFileW (in: lpFileName="C:\\ProgramData\\Documents\\*", lpFindFileData=0x31e5d4 | out: lpFindFileData=0x31e5d4*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0061.756] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e870) returned 1 [0061.757] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e8ac) returned 1 [0061.757] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Favorites", nBufferLength=0x105, lpBuffer=0x31e3b4, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Favorites", lpFilePart=0x0) returned 0x18 [0061.757] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Favorites\\", nBufferLength=0x105, lpBuffer=0x31e388, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Favorites\\", lpFilePart=0x0) returned 0x19 [0061.757] FindFirstFileW (in: lpFileName="C:\\ProgramData\\Favorites\\*", lpFindFileData=0x31e5d4 | out: lpFindFileData=0x31e5d4*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0061.757] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e870) returned 1 [0061.758] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e8ac) returned 1 [0061.758] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft", nBufferLength=0x105, lpBuffer=0x31e3b4, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft", lpFilePart=0x0) returned 0x18 [0061.758] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\", nBufferLength=0x105, lpBuffer=0x31e388, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\", lpFilePart=0x0) returned 0x19 [0061.758] FindFirstFileW (in: lpFileName="C:\\ProgramData\\Microsoft\\*", lpFindFileData=0x31e5d4 | out: lpFindFileData=0x31e5d4*(dwFileAttributes=0x2014, ftCreationTime.dwLowDateTime=0xfd943744, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x80ac5760, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0x80ac5760, ftLastWriteTime.dwHighDateTime=0x1d305eb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5107c60 [0061.759] FindNextFileW (in: hFindFile=0x5107c60, lpFindFileData=0x31e5e4 | out: lpFindFileData=0x31e5e4*(dwFileAttributes=0x2014, ftCreationTime.dwLowDateTime=0xfd943744, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x80ac5760, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0x80ac5760, ftLastWriteTime.dwHighDateTime=0x1d305eb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0061.759] FindNextFileW (in: hFindFile=0x5107c60, lpFindFileData=0x31e5e4 | out: lpFindFileData=0x31e5e4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x3fc949a4, ftCreationTime.dwHighDateTime=0x1ca0445, ftLastAccessTime.dwLowDateTime=0x3fc949a4, ftLastAccessTime.dwHighDateTime=0x1ca0445, ftLastWriteTime.dwLowDateTime=0x3fc949a4, ftLastWriteTime.dwHighDateTime=0x1ca0445, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Assistance", cAlternateFileName="ASSIST~1")) returned 1 [0061.759] FindNextFileW (in: hFindFile=0x5107c60, lpFindFileData=0x31e5e4 | out: lpFindFileData=0x31e5e4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xfd943744, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd96989e, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xfd96989e, ftLastWriteTime.dwHighDateTime=0x1ca0431, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Crypto", cAlternateFileName="")) returned 1 [0061.759] FindNextFileW (in: hFindFile=0x5107c60, lpFindFileData=0x31e5e4 | out: lpFindFileData=0x31e5e4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xfd96989e, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd96989e, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xfd96989e, ftLastWriteTime.dwHighDateTime=0x1ca0431, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Device Stage", cAlternateFileName="DEVICE~1")) returned 1 [0061.759] FindNextFileW (in: hFindFile=0x5107c60, lpFindFileData=0x31e5e4 | out: lpFindFileData=0x31e5e4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd98f9f8, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd98f9f8, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xd789d88f, ftLastWriteTime.dwHighDateTime=0x1ca042b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="DeviceSync", cAlternateFileName="DEVICE~2")) returned 1 [0061.760] FindNextFileW (in: hFindFile=0x5107c60, lpFindFileData=0x31e5e4 | out: lpFindFileData=0x31e5e4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xfd98f9f8, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd98f9f8, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xfd98f9f8, ftLastWriteTime.dwHighDateTime=0x1ca0431, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="DRM", cAlternateFileName="")) returned 1 [0061.760] FindNextFileW (in: hFindFile=0x5107c60, lpFindFileData=0x31e5e4 | out: lpFindFileData=0x31e5e4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x9182055d, ftCreationTime.dwHighDateTime=0x1cbf8eb, ftLastAccessTime.dwLowDateTime=0xaa597fc2, ftLastAccessTime.dwHighDateTime=0x1cbf8eb, ftLastWriteTime.dwLowDateTime=0x9182055d, ftLastWriteTime.dwHighDateTime=0x1cbf8eb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="eHome", cAlternateFileName="")) returned 1 [0061.760] FindNextFileW (in: hFindFile=0x5107c60, lpFindFileData=0x31e5e4 | out: lpFindFileData=0x31e5e4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x3235c810, ftCreationTime.dwHighDateTime=0x1d2fa9b, ftLastAccessTime.dwLowDateTime=0x3a6c7630, ftLastAccessTime.dwHighDateTime=0x1d3aaba, ftLastWriteTime.dwLowDateTime=0x3a6c7630, ftLastWriteTime.dwHighDateTime=0x1d3aaba, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Event Viewer", cAlternateFileName="EVENTV~1")) returned 1 [0061.760] FindNextFileW (in: hFindFile=0x5107c60, lpFindFileData=0x31e5e4 | out: lpFindFileData=0x31e5e4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd98f9f8, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd9b5b52, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xfd9b5b52, ftLastWriteTime.dwHighDateTime=0x1ca0431, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="IdentityCRL", cAlternateFileName="IDENTI~1")) returned 1 [0061.760] FindNextFileW (in: hFindFile=0x5107c60, lpFindFileData=0x31e5e4 | out: lpFindFileData=0x31e5e4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x3ee349fc, ftCreationTime.dwHighDateTime=0x1ca0441, ftLastAccessTime.dwLowDateTime=0x3ee349fc, ftLastAccessTime.dwHighDateTime=0x1ca0441, ftLastWriteTime.dwLowDateTime=0x3ee349fc, ftLastWriteTime.dwHighDateTime=0x1ca0441, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Media Player", cAlternateFileName="MEDIAP~1")) returned 1 [0061.760] FindNextFileW (in: hFindFile=0x5107c60, lpFindFileData=0x31e5e4 | out: lpFindFileData=0x31e5e4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x7fffaad0, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x80340916, ftLastAccessTime.dwHighDateTime=0x1ca0444, ftLastWriteTime.dwLowDateTime=0x80340916, ftLastWriteTime.dwHighDateTime=0x1ca0444, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="MF", cAlternateFileName="")) returned 1 [0061.761] FindNextFileW (in: hFindFile=0x5107c60, lpFindFileData=0x31e5e4 | out: lpFindFileData=0x31e5e4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x50ea0e30, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x50ea0e30, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x50ea0e30, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="MSDN", cAlternateFileName="")) returned 1 [0061.761] FindNextFileW (in: hFindFile=0x5107c60, lpFindFileData=0x31e5e4 | out: lpFindFileData=0x31e5e4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x56ac2f60, ftCreationTime.dwHighDateTime=0x1d2e676, ftLastAccessTime.dwLowDateTime=0x56ac2f60, ftLastAccessTime.dwHighDateTime=0x1d2e676, ftLastWriteTime.dwLowDateTime=0x56ac2f60, ftLastWriteTime.dwHighDateTime=0x1d2e676, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="NetFramework", cAlternateFileName="NETFRA~1")) returned 1 [0061.761] FindNextFileW (in: hFindFile=0x5107c60, lpFindFileData=0x31e5e4 | out: lpFindFileData=0x31e5e4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xfd9b5b52, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd9b5b52, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xfd9b5b52, ftLastWriteTime.dwHighDateTime=0x1ca0431, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Network", cAlternateFileName="")) returned 1 [0061.761] FindNextFileW (in: hFindFile=0x5107c60, lpFindFileData=0x31e5e4 | out: lpFindFileData=0x31e5e4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xeed38550, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0x6d3a4910, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x6d3a4910, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="OFFICE", cAlternateFileName="")) returned 1 [0061.761] FindNextFileW (in: hFindFile=0x5107c60, lpFindFileData=0x31e5e4 | out: lpFindFileData=0x31e5e4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x50ea0e30, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0xfa44d4a0, ftLastAccessTime.dwHighDateTime=0x1d305fd, ftLastWriteTime.dwLowDateTime=0xfa44d4a0, ftLastWriteTime.dwHighDateTime=0x1d305fd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="OfficeSoftwareProtectionPlatform", cAlternateFileName="OFFICE~1")) returned 1 [0061.761] FindNextFileW (in: hFindFile=0x5107c60, lpFindFileData=0x31e5e4 | out: lpFindFileData=0x31e5e4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xfd9b5b52, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd9b5b52, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xfd9b5b52, ftLastWriteTime.dwHighDateTime=0x1ca0431, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="RAC", cAlternateFileName="")) returned 1 [0061.761] FindNextFileW (in: hFindFile=0x5107c60, lpFindFileData=0x31e5e4 | out: lpFindFileData=0x31e5e4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x27df8b60, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x27df8b60, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x27df8b60, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Search", cAlternateFileName="")) returned 1 [0061.761] FindNextFileW (in: hFindFile=0x5107c60, lpFindFileData=0x31e5e4 | out: lpFindFileData=0x31e5e4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xfd9b5b52, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x29423840, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x29423840, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="User Account Pictures", cAlternateFileName="USERAC~1")) returned 1 [0061.762] FindNextFileW (in: hFindFile=0x5107c60, lpFindFileData=0x31e5e4 | out: lpFindFileData=0x31e5e4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd9b5b52, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd9b5b52, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xc602eec6, ftLastWriteTime.dwHighDateTime=0x1ca042b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Vault", cAlternateFileName="")) returned 1 [0061.762] FindNextFileW (in: hFindFile=0x5107c60, lpFindFileData=0x31e5e4 | out: lpFindFileData=0x31e5e4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x80ac5760, ftCreationTime.dwHighDateTime=0x1d305eb, ftLastAccessTime.dwLowDateTime=0x80ac5760, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0x80ac5760, ftLastWriteTime.dwHighDateTime=0x1d305eb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="VISIO", cAlternateFileName="")) returned 1 [0061.762] FindNextFileW (in: hFindFile=0x5107c60, lpFindFileData=0x31e5e4 | out: lpFindFileData=0x31e5e4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xfd9b5b52, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x60ae73a0, ftLastAccessTime.dwHighDateTime=0x1d2de2a, ftLastWriteTime.dwLowDateTime=0x60ae73a0, ftLastWriteTime.dwHighDateTime=0x1d2de2a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Windows", cAlternateFileName="")) returned 1 [0061.762] FindNextFileW (in: hFindFile=0x5107c60, lpFindFileData=0x31e5e4 | out: lpFindFileData=0x31e5e4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x7fffaad0, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x591e8ca0, ftLastAccessTime.dwHighDateTime=0x1d4d596, ftLastWriteTime.dwLowDateTime=0x591e8ca0, ftLastWriteTime.dwHighDateTime=0x1d4d596, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Windows Defender", cAlternateFileName="WINDOW~1")) returned 1 [0061.762] FindNextFileW (in: hFindFile=0x5107c60, lpFindFileData=0x31e5e4 | out: lpFindFileData=0x31e5e4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x7fffaad0, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x7fffaad0, ftLastAccessTime.dwHighDateTime=0x1ca0444, ftLastWriteTime.dwLowDateTime=0x7fffaad0, ftLastWriteTime.dwHighDateTime=0x1ca0444, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Windows NT", cAlternateFileName="WINDOW~2")) returned 1 [0061.762] FindNextFileW (in: hFindFile=0x5107c60, lpFindFileData=0x31e5e4 | out: lpFindFileData=0x31e5e4*(dwFileAttributes=0x2012, ftCreationTime.dwLowDateTime=0x7fffaad0, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x7fffaad0, ftLastAccessTime.dwHighDateTime=0x1ca0444, ftLastWriteTime.dwLowDateTime=0x7fffaad0, ftLastWriteTime.dwHighDateTime=0x1ca0444, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="WwanSvc", cAlternateFileName="")) returned 1 [0061.762] FindNextFileW (in: hFindFile=0x5107c60, lpFindFileData=0x31e5e4 | out: lpFindFileData=0x31e5e4*(dwFileAttributes=0x2012, ftCreationTime.dwLowDateTime=0x7fffaad0, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x7fffaad0, ftLastAccessTime.dwHighDateTime=0x1ca0444, ftLastWriteTime.dwLowDateTime=0x7fffaad0, ftLastWriteTime.dwHighDateTime=0x1ca0444, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="WwanSvc", cAlternateFileName="")) returned 0 [0061.762] FindClose (in: hFindFile=0x5107c60 | out: hFindFile=0x5107c60) returned 1 [0061.762] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e86c) returned 1 [0061.762] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e878) returned 1 [0061.762] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e8ac) returned 1 [0061.762] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft", nBufferLength=0x105, lpBuffer=0x31e3b4, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft", lpFilePart=0x0) returned 0x18 [0061.762] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\", nBufferLength=0x105, lpBuffer=0x31e388, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\", lpFilePart=0x0) returned 0x19 [0061.762] FindFirstFileW (in: lpFileName="C:\\ProgramData\\Microsoft\\*", lpFindFileData=0x31e5d4 | out: lpFindFileData=0x31e5d4*(dwFileAttributes=0x2014, ftCreationTime.dwLowDateTime=0xfd943744, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x80ac5760, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0x80ac5760, ftLastWriteTime.dwHighDateTime=0x1d305eb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5107c60 [0061.763] FindNextFileW (in: hFindFile=0x5107c60, lpFindFileData=0x31e5e4 | out: lpFindFileData=0x31e5e4*(dwFileAttributes=0x2014, ftCreationTime.dwLowDateTime=0xfd943744, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x80ac5760, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0x80ac5760, ftLastWriteTime.dwHighDateTime=0x1d305eb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0061.763] FindNextFileW (in: hFindFile=0x5107c60, lpFindFileData=0x31e5e4 | out: lpFindFileData=0x31e5e4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x3fc949a4, ftCreationTime.dwHighDateTime=0x1ca0445, ftLastAccessTime.dwLowDateTime=0x3fc949a4, ftLastAccessTime.dwHighDateTime=0x1ca0445, ftLastWriteTime.dwLowDateTime=0x3fc949a4, ftLastWriteTime.dwHighDateTime=0x1ca0445, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Assistance", cAlternateFileName="ASSIST~1")) returned 1 [0061.763] FindNextFileW (in: hFindFile=0x5107c60, lpFindFileData=0x31e5e4 | out: lpFindFileData=0x31e5e4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xfd943744, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd96989e, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xfd96989e, ftLastWriteTime.dwHighDateTime=0x1ca0431, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Crypto", cAlternateFileName="")) returned 1 [0061.763] FindNextFileW (in: hFindFile=0x5107c60, lpFindFileData=0x31e5e4 | out: lpFindFileData=0x31e5e4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xfd96989e, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd96989e, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xfd96989e, ftLastWriteTime.dwHighDateTime=0x1ca0431, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Device Stage", cAlternateFileName="DEVICE~1")) returned 1 [0061.763] FindNextFileW (in: hFindFile=0x5107c60, lpFindFileData=0x31e5e4 | out: lpFindFileData=0x31e5e4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd98f9f8, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd98f9f8, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xd789d88f, ftLastWriteTime.dwHighDateTime=0x1ca042b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="DeviceSync", cAlternateFileName="DEVICE~2")) returned 1 [0061.763] FindNextFileW (in: hFindFile=0x5107c60, lpFindFileData=0x31e5e4 | out: lpFindFileData=0x31e5e4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xfd98f9f8, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd98f9f8, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xfd98f9f8, ftLastWriteTime.dwHighDateTime=0x1ca0431, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="DRM", cAlternateFileName="")) returned 1 [0061.763] FindNextFileW (in: hFindFile=0x5107c60, lpFindFileData=0x31e5e4 | out: lpFindFileData=0x31e5e4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x9182055d, ftCreationTime.dwHighDateTime=0x1cbf8eb, ftLastAccessTime.dwLowDateTime=0xaa597fc2, ftLastAccessTime.dwHighDateTime=0x1cbf8eb, ftLastWriteTime.dwLowDateTime=0x9182055d, ftLastWriteTime.dwHighDateTime=0x1cbf8eb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="eHome", cAlternateFileName="")) returned 1 [0061.763] FindNextFileW (in: hFindFile=0x5107c60, lpFindFileData=0x31e5e4 | out: lpFindFileData=0x31e5e4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x3235c810, ftCreationTime.dwHighDateTime=0x1d2fa9b, ftLastAccessTime.dwLowDateTime=0x3a6c7630, ftLastAccessTime.dwHighDateTime=0x1d3aaba, ftLastWriteTime.dwLowDateTime=0x3a6c7630, ftLastWriteTime.dwHighDateTime=0x1d3aaba, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Event Viewer", cAlternateFileName="EVENTV~1")) returned 1 [0061.763] FindNextFileW (in: hFindFile=0x5107c60, lpFindFileData=0x31e5e4 | out: lpFindFileData=0x31e5e4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd98f9f8, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd9b5b52, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xfd9b5b52, ftLastWriteTime.dwHighDateTime=0x1ca0431, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="IdentityCRL", cAlternateFileName="IDENTI~1")) returned 1 [0061.763] FindNextFileW (in: hFindFile=0x5107c60, lpFindFileData=0x31e5e4 | out: lpFindFileData=0x31e5e4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x3ee349fc, ftCreationTime.dwHighDateTime=0x1ca0441, ftLastAccessTime.dwLowDateTime=0x3ee349fc, ftLastAccessTime.dwHighDateTime=0x1ca0441, ftLastWriteTime.dwLowDateTime=0x3ee349fc, ftLastWriteTime.dwHighDateTime=0x1ca0441, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Media Player", cAlternateFileName="MEDIAP~1")) returned 1 [0061.763] FindNextFileW (in: hFindFile=0x5107c60, lpFindFileData=0x31e5e4 | out: lpFindFileData=0x31e5e4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x7fffaad0, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x80340916, ftLastAccessTime.dwHighDateTime=0x1ca0444, ftLastWriteTime.dwLowDateTime=0x80340916, ftLastWriteTime.dwHighDateTime=0x1ca0444, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="MF", cAlternateFileName="")) returned 1 [0061.763] FindNextFileW (in: hFindFile=0x5107c60, lpFindFileData=0x31e5e4 | out: lpFindFileData=0x31e5e4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x50ea0e30, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x50ea0e30, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x50ea0e30, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="MSDN", cAlternateFileName="")) returned 1 [0061.763] FindNextFileW (in: hFindFile=0x5107c60, lpFindFileData=0x31e5e4 | out: lpFindFileData=0x31e5e4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x56ac2f60, ftCreationTime.dwHighDateTime=0x1d2e676, ftLastAccessTime.dwLowDateTime=0x56ac2f60, ftLastAccessTime.dwHighDateTime=0x1d2e676, ftLastWriteTime.dwLowDateTime=0x56ac2f60, ftLastWriteTime.dwHighDateTime=0x1d2e676, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="NetFramework", cAlternateFileName="NETFRA~1")) returned 1 [0061.763] FindNextFileW (in: hFindFile=0x5107c60, lpFindFileData=0x31e5e4 | out: lpFindFileData=0x31e5e4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xfd9b5b52, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd9b5b52, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xfd9b5b52, ftLastWriteTime.dwHighDateTime=0x1ca0431, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Network", cAlternateFileName="")) returned 1 [0061.763] FindNextFileW (in: hFindFile=0x5107c60, lpFindFileData=0x31e5e4 | out: lpFindFileData=0x31e5e4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xeed38550, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0x6d3a4910, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x6d3a4910, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="OFFICE", cAlternateFileName="")) returned 1 [0061.763] FindNextFileW (in: hFindFile=0x5107c60, lpFindFileData=0x31e5e4 | out: lpFindFileData=0x31e5e4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x50ea0e30, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0xfa44d4a0, ftLastAccessTime.dwHighDateTime=0x1d305fd, ftLastWriteTime.dwLowDateTime=0xfa44d4a0, ftLastWriteTime.dwHighDateTime=0x1d305fd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="OfficeSoftwareProtectionPlatform", cAlternateFileName="OFFICE~1")) returned 1 [0061.763] FindNextFileW (in: hFindFile=0x5107c60, lpFindFileData=0x31e5e4 | out: lpFindFileData=0x31e5e4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xfd9b5b52, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd9b5b52, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xfd9b5b52, ftLastWriteTime.dwHighDateTime=0x1ca0431, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="RAC", cAlternateFileName="")) returned 1 [0061.763] FindNextFileW (in: hFindFile=0x5107c60, lpFindFileData=0x31e5e4 | out: lpFindFileData=0x31e5e4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x27df8b60, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x27df8b60, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x27df8b60, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Search", cAlternateFileName="")) returned 1 [0061.763] FindNextFileW (in: hFindFile=0x5107c60, lpFindFileData=0x31e5e4 | out: lpFindFileData=0x31e5e4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xfd9b5b52, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x29423840, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x29423840, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="User Account Pictures", cAlternateFileName="USERAC~1")) returned 1 [0061.763] FindNextFileW (in: hFindFile=0x5107c60, lpFindFileData=0x31e5e4 | out: lpFindFileData=0x31e5e4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd9b5b52, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd9b5b52, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xc602eec6, ftLastWriteTime.dwHighDateTime=0x1ca042b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Vault", cAlternateFileName="")) returned 1 [0061.763] FindNextFileW (in: hFindFile=0x5107c60, lpFindFileData=0x31e5e4 | out: lpFindFileData=0x31e5e4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x80ac5760, ftCreationTime.dwHighDateTime=0x1d305eb, ftLastAccessTime.dwLowDateTime=0x80ac5760, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0x80ac5760, ftLastWriteTime.dwHighDateTime=0x1d305eb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="VISIO", cAlternateFileName="")) returned 1 [0061.763] FindNextFileW (in: hFindFile=0x5107c60, lpFindFileData=0x31e5e4 | out: lpFindFileData=0x31e5e4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xfd9b5b52, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x60ae73a0, ftLastAccessTime.dwHighDateTime=0x1d2de2a, ftLastWriteTime.dwLowDateTime=0x60ae73a0, ftLastWriteTime.dwHighDateTime=0x1d2de2a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Windows", cAlternateFileName="")) returned 1 [0061.764] FindNextFileW (in: hFindFile=0x5107c60, lpFindFileData=0x31e5e4 | out: lpFindFileData=0x31e5e4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x7fffaad0, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x591e8ca0, ftLastAccessTime.dwHighDateTime=0x1d4d596, ftLastWriteTime.dwLowDateTime=0x591e8ca0, ftLastWriteTime.dwHighDateTime=0x1d4d596, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Windows Defender", cAlternateFileName="WINDOW~1")) returned 1 [0061.764] FindNextFileW (in: hFindFile=0x5107c60, lpFindFileData=0x31e5e4 | out: lpFindFileData=0x31e5e4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x7fffaad0, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x7fffaad0, ftLastAccessTime.dwHighDateTime=0x1ca0444, ftLastWriteTime.dwLowDateTime=0x7fffaad0, ftLastWriteTime.dwHighDateTime=0x1ca0444, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Windows NT", cAlternateFileName="WINDOW~2")) returned 1 [0061.764] FindNextFileW (in: hFindFile=0x5107c60, lpFindFileData=0x31e5e4 | out: lpFindFileData=0x31e5e4*(dwFileAttributes=0x2012, ftCreationTime.dwLowDateTime=0x7fffaad0, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x7fffaad0, ftLastAccessTime.dwHighDateTime=0x1ca0444, ftLastWriteTime.dwLowDateTime=0x7fffaad0, ftLastWriteTime.dwHighDateTime=0x1ca0444, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="WwanSvc", cAlternateFileName="")) returned 1 [0061.764] FindNextFileW (in: hFindFile=0x5107c60, lpFindFileData=0x31e5e4 | out: lpFindFileData=0x31e5e4*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0061.764] FindClose (in: hFindFile=0x5107c60 | out: hFindFile=0x5107c60) returned 1 [0061.764] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e86c) returned 1 [0061.764] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e878) returned 1 [0061.764] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e834) returned 1 [0061.764] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\Assistance", nBufferLength=0x105, lpBuffer=0x31e33c, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\Assistance", lpFilePart=0x0) returned 0x23 [0061.764] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\Assistance\\", nBufferLength=0x105, lpBuffer=0x31e310, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\Assistance\\", lpFilePart=0x0) returned 0x24 [0061.764] FindFirstFileW (in: lpFileName="C:\\ProgramData\\Microsoft\\Assistance\\*", lpFindFileData=0x31e55c | out: lpFindFileData=0x31e55c*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x3fc949a4, ftCreationTime.dwHighDateTime=0x1ca0445, ftLastAccessTime.dwLowDateTime=0x3fc949a4, ftLastAccessTime.dwHighDateTime=0x1ca0445, ftLastWriteTime.dwLowDateTime=0x3fc949a4, ftLastWriteTime.dwHighDateTime=0x1ca0445, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5107c60 [0061.764] FindNextFileW (in: hFindFile=0x5107c60, lpFindFileData=0x31e56c | out: lpFindFileData=0x31e56c*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x3fc949a4, ftCreationTime.dwHighDateTime=0x1ca0445, ftLastAccessTime.dwLowDateTime=0x3fc949a4, ftLastAccessTime.dwHighDateTime=0x1ca0445, ftLastWriteTime.dwLowDateTime=0x3fc949a4, ftLastWriteTime.dwHighDateTime=0x1ca0445, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0061.764] FindNextFileW (in: hFindFile=0x5107c60, lpFindFileData=0x31e56c | out: lpFindFileData=0x31e56c*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x3fc949a4, ftCreationTime.dwHighDateTime=0x1ca0445, ftLastAccessTime.dwLowDateTime=0x3fc949a4, ftLastAccessTime.dwHighDateTime=0x1ca0445, ftLastWriteTime.dwLowDateTime=0x3fc949a4, ftLastWriteTime.dwHighDateTime=0x1ca0445, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Client", cAlternateFileName="")) returned 1 [0061.764] FindNextFileW (in: hFindFile=0x5107c60, lpFindFileData=0x31e56c | out: lpFindFileData=0x31e56c*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x3fc949a4, ftCreationTime.dwHighDateTime=0x1ca0445, ftLastAccessTime.dwLowDateTime=0x3fc949a4, ftLastAccessTime.dwHighDateTime=0x1ca0445, ftLastWriteTime.dwLowDateTime=0x3fc949a4, ftLastWriteTime.dwHighDateTime=0x1ca0445, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Client", cAlternateFileName="")) returned 0 [0061.764] FindClose (in: hFindFile=0x5107c60 | out: hFindFile=0x5107c60) returned 1 [0061.764] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e7f4) returned 1 [0061.764] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e800) returned 1 [0061.764] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e834) returned 1 [0061.765] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\Assistance", nBufferLength=0x105, lpBuffer=0x31e33c, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\Assistance", lpFilePart=0x0) returned 0x23 [0061.765] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\Assistance\\", nBufferLength=0x105, lpBuffer=0x31e310, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\Assistance\\", lpFilePart=0x0) returned 0x24 [0061.765] FindFirstFileW (in: lpFileName="C:\\ProgramData\\Microsoft\\Assistance\\*", lpFindFileData=0x31e55c | out: lpFindFileData=0x31e55c*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x3fc949a4, ftCreationTime.dwHighDateTime=0x1ca0445, ftLastAccessTime.dwLowDateTime=0x3fc949a4, ftLastAccessTime.dwHighDateTime=0x1ca0445, ftLastWriteTime.dwLowDateTime=0x3fc949a4, ftLastWriteTime.dwHighDateTime=0x1ca0445, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5107c60 [0061.765] FindNextFileW (in: hFindFile=0x5107c60, lpFindFileData=0x31e56c | out: lpFindFileData=0x31e56c*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x3fc949a4, ftCreationTime.dwHighDateTime=0x1ca0445, ftLastAccessTime.dwLowDateTime=0x3fc949a4, ftLastAccessTime.dwHighDateTime=0x1ca0445, ftLastWriteTime.dwLowDateTime=0x3fc949a4, ftLastWriteTime.dwHighDateTime=0x1ca0445, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0061.765] FindNextFileW (in: hFindFile=0x5107c60, lpFindFileData=0x31e56c | out: lpFindFileData=0x31e56c*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x3fc949a4, ftCreationTime.dwHighDateTime=0x1ca0445, ftLastAccessTime.dwLowDateTime=0x3fc949a4, ftLastAccessTime.dwHighDateTime=0x1ca0445, ftLastWriteTime.dwLowDateTime=0x3fc949a4, ftLastWriteTime.dwHighDateTime=0x1ca0445, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Client", cAlternateFileName="")) returned 1 [0061.765] FindNextFileW (in: hFindFile=0x5107c60, lpFindFileData=0x31e56c | out: lpFindFileData=0x31e56c*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0061.765] FindClose (in: hFindFile=0x5107c60 | out: hFindFile=0x5107c60) returned 1 [0061.765] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e7f4) returned 1 [0061.765] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e800) returned 1 [0061.765] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e7bc) returned 1 [0061.765] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\Assistance\\Client", nBufferLength=0x105, lpBuffer=0x31e2c4, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\Assistance\\Client", lpFilePart=0x0) returned 0x2a [0061.765] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\Assistance\\Client\\", nBufferLength=0x105, lpBuffer=0x31e298, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\Assistance\\Client\\", lpFilePart=0x0) returned 0x2b [0061.765] FindFirstFileW (in: lpFileName="C:\\ProgramData\\Microsoft\\Assistance\\Client\\*", lpFindFileData=0x31e4e4 | out: lpFindFileData=0x31e4e4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x3fc949a4, ftCreationTime.dwHighDateTime=0x1ca0445, ftLastAccessTime.dwLowDateTime=0x3fc949a4, ftLastAccessTime.dwHighDateTime=0x1ca0445, ftLastWriteTime.dwLowDateTime=0x3fc949a4, ftLastWriteTime.dwHighDateTime=0x1ca0445, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5107c60 [0061.765] FindNextFileW (in: hFindFile=0x5107c60, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x3fc949a4, ftCreationTime.dwHighDateTime=0x1ca0445, ftLastAccessTime.dwLowDateTime=0x3fc949a4, ftLastAccessTime.dwHighDateTime=0x1ca0445, ftLastWriteTime.dwLowDateTime=0x3fc949a4, ftLastWriteTime.dwHighDateTime=0x1ca0445, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0061.765] FindNextFileW (in: hFindFile=0x5107c60, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x3fc949a4, ftCreationTime.dwHighDateTime=0x1ca0445, ftLastAccessTime.dwLowDateTime=0xa8f17049, ftLastAccessTime.dwHighDateTime=0x1cbf8eb, ftLastWriteTime.dwLowDateTime=0x243448f1, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="1.0", cAlternateFileName="")) returned 1 [0061.765] FindNextFileW (in: hFindFile=0x5107c60, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x3fc949a4, ftCreationTime.dwHighDateTime=0x1ca0445, ftLastAccessTime.dwLowDateTime=0xa8f17049, ftLastAccessTime.dwHighDateTime=0x1cbf8eb, ftLastWriteTime.dwLowDateTime=0x243448f1, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="1.0", cAlternateFileName="")) returned 0 [0061.765] FindClose (in: hFindFile=0x5107c60 | out: hFindFile=0x5107c60) returned 1 [0061.766] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e77c) returned 1 [0061.766] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e788) returned 1 [0061.766] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e7bc) returned 1 [0061.766] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\Assistance\\Client", nBufferLength=0x105, lpBuffer=0x31e2c4, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\Assistance\\Client", lpFilePart=0x0) returned 0x2a [0061.766] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\Assistance\\Client\\", nBufferLength=0x105, lpBuffer=0x31e298, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\Assistance\\Client\\", lpFilePart=0x0) returned 0x2b [0061.766] FindFirstFileW (in: lpFileName="C:\\ProgramData\\Microsoft\\Assistance\\Client\\*", lpFindFileData=0x31e4e4 | out: lpFindFileData=0x31e4e4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x3fc949a4, ftCreationTime.dwHighDateTime=0x1ca0445, ftLastAccessTime.dwLowDateTime=0x3fc949a4, ftLastAccessTime.dwHighDateTime=0x1ca0445, ftLastWriteTime.dwLowDateTime=0x3fc949a4, ftLastWriteTime.dwHighDateTime=0x1ca0445, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5107c60 [0061.766] FindNextFileW (in: hFindFile=0x5107c60, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x3fc949a4, ftCreationTime.dwHighDateTime=0x1ca0445, ftLastAccessTime.dwLowDateTime=0x3fc949a4, ftLastAccessTime.dwHighDateTime=0x1ca0445, ftLastWriteTime.dwLowDateTime=0x3fc949a4, ftLastWriteTime.dwHighDateTime=0x1ca0445, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0061.766] FindNextFileW (in: hFindFile=0x5107c60, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x3fc949a4, ftCreationTime.dwHighDateTime=0x1ca0445, ftLastAccessTime.dwLowDateTime=0xa8f17049, ftLastAccessTime.dwHighDateTime=0x1cbf8eb, ftLastWriteTime.dwLowDateTime=0x243448f1, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="1.0", cAlternateFileName="")) returned 1 [0061.766] FindNextFileW (in: hFindFile=0x5107c60, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0061.766] FindClose (in: hFindFile=0x5107c60 | out: hFindFile=0x5107c60) returned 1 [0061.766] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e77c) returned 1 [0061.766] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e788) returned 1 [0061.766] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e744) returned 1 [0061.766] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\Assistance\\Client\\1.0", nBufferLength=0x105, lpBuffer=0x31e24c, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\Assistance\\Client\\1.0", lpFilePart=0x0) returned 0x2e [0061.766] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\Assistance\\Client\\1.0\\", nBufferLength=0x105, lpBuffer=0x31e220, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\Assistance\\Client\\1.0\\", lpFilePart=0x0) returned 0x2f [0061.766] FindFirstFileW (in: lpFileName="C:\\ProgramData\\Microsoft\\Assistance\\Client\\1.0\\*", lpFindFileData=0x31e46c | out: lpFindFileData=0x31e46c*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x3fc949a4, ftCreationTime.dwHighDateTime=0x1ca0445, ftLastAccessTime.dwLowDateTime=0xa8f17049, ftLastAccessTime.dwHighDateTime=0x1cbf8eb, ftLastWriteTime.dwLowDateTime=0x243448f1, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5107c60 [0061.766] FindNextFileW (in: hFindFile=0x5107c60, lpFindFileData=0x31e47c | out: lpFindFileData=0x31e47c*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x3fc949a4, ftCreationTime.dwHighDateTime=0x1ca0445, ftLastAccessTime.dwLowDateTime=0xa8f17049, ftLastAccessTime.dwHighDateTime=0x1cbf8eb, ftLastWriteTime.dwLowDateTime=0x243448f1, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0061.767] FindNextFileW (in: hFindFile=0x5107c60, lpFindFileData=0x31e47c | out: lpFindFileData=0x31e47c*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x243448f1, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0xae0e8854, ftLastAccessTime.dwHighDateTime=0x1cbf8eb, ftLastWriteTime.dwLowDateTime=0xae0e8854, ftLastWriteTime.dwHighDateTime=0x1cbf8eb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="en-US", cAlternateFileName="")) returned 1 [0061.767] FindNextFileW (in: hFindFile=0x5107c60, lpFindFileData=0x31e47c | out: lpFindFileData=0x31e47c*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x243448f1, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0xae0e8854, ftLastAccessTime.dwHighDateTime=0x1cbf8eb, ftLastWriteTime.dwLowDateTime=0xae0e8854, ftLastWriteTime.dwHighDateTime=0x1cbf8eb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="en-US", cAlternateFileName="")) returned 0 [0061.767] FindClose (in: hFindFile=0x5107c60 | out: hFindFile=0x5107c60) returned 1 [0061.767] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e704) returned 1 [0061.767] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e710) returned 1 [0061.767] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e744) returned 1 [0061.767] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\Assistance\\Client\\1.0", nBufferLength=0x105, lpBuffer=0x31e24c, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\Assistance\\Client\\1.0", lpFilePart=0x0) returned 0x2e [0061.767] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\Assistance\\Client\\1.0\\", nBufferLength=0x105, lpBuffer=0x31e220, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\Assistance\\Client\\1.0\\", lpFilePart=0x0) returned 0x2f [0061.767] FindFirstFileW (in: lpFileName="C:\\ProgramData\\Microsoft\\Assistance\\Client\\1.0\\*", lpFindFileData=0x31e46c | out: lpFindFileData=0x31e46c*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x3fc949a4, ftCreationTime.dwHighDateTime=0x1ca0445, ftLastAccessTime.dwLowDateTime=0xa8f17049, ftLastAccessTime.dwHighDateTime=0x1cbf8eb, ftLastWriteTime.dwLowDateTime=0x243448f1, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5107c60 [0061.767] FindNextFileW (in: hFindFile=0x5107c60, lpFindFileData=0x31e47c | out: lpFindFileData=0x31e47c*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x3fc949a4, ftCreationTime.dwHighDateTime=0x1ca0445, ftLastAccessTime.dwLowDateTime=0xa8f17049, ftLastAccessTime.dwHighDateTime=0x1cbf8eb, ftLastWriteTime.dwLowDateTime=0x243448f1, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0061.767] FindNextFileW (in: hFindFile=0x5107c60, lpFindFileData=0x31e47c | out: lpFindFileData=0x31e47c*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x243448f1, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0xae0e8854, ftLastAccessTime.dwHighDateTime=0x1cbf8eb, ftLastWriteTime.dwLowDateTime=0xae0e8854, ftLastWriteTime.dwHighDateTime=0x1cbf8eb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="en-US", cAlternateFileName="")) returned 1 [0061.767] FindNextFileW (in: hFindFile=0x5107c60, lpFindFileData=0x31e47c | out: lpFindFileData=0x31e47c*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0061.767] FindClose (in: hFindFile=0x5107c60 | out: hFindFile=0x5107c60) returned 1 [0061.767] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e704) returned 1 [0061.767] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e710) returned 1 [0061.767] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e6cc) returned 1 [0061.767] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\Assistance\\Client\\1.0\\en-US", nBufferLength=0x105, lpBuffer=0x31e1d4, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\Assistance\\Client\\1.0\\en-US", lpFilePart=0x0) returned 0x34 [0061.767] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\Assistance\\Client\\1.0\\en-US\\", nBufferLength=0x105, lpBuffer=0x31e1a8, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\Assistance\\Client\\1.0\\en-US\\", lpFilePart=0x0) returned 0x35 [0061.767] FindFirstFileW (in: lpFileName="C:\\ProgramData\\Microsoft\\Assistance\\Client\\1.0\\en-US\\*", lpFindFileData=0x31e3f4 | out: lpFindFileData=0x31e3f4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x243448f1, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0xae0e8854, ftLastAccessTime.dwHighDateTime=0x1cbf8eb, ftLastWriteTime.dwLowDateTime=0xae0e8854, ftLastWriteTime.dwHighDateTime=0x1cbf8eb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5107c60 [0061.769] FindNextFileW (in: hFindFile=0x5107c60, lpFindFileData=0x31e404 | out: lpFindFileData=0x31e404*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x243448f1, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0xae0e8854, ftLastAccessTime.dwHighDateTime=0x1cbf8eb, ftLastWriteTime.dwLowDateTime=0xae0e8854, ftLastWriteTime.dwHighDateTime=0x1cbf8eb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0061.769] FindNextFileW (in: hFindFile=0x5107c60, lpFindFileData=0x31e404 | out: lpFindFileData=0x31e404*(dwFileAttributes=0x2026, ftCreationTime.dwLowDateTime=0x2436abaa, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0xabde2c6f, ftLastAccessTime.dwHighDateTime=0x1cbf8eb, ftLastWriteTime.dwLowDateTime=0xa65a8bbf, ftLastWriteTime.dwHighDateTime=0x1cbf8eb, nFileSizeHigh=0x0, nFileSizeLow=0x2f22, dwReserved0=0x0, dwReserved1=0x0, cFileName="Help_CValidator.H1D", cAlternateFileName="HELP_C~1.H1D")) returned 1 [0061.769] FindNextFileW (in: hFindFile=0x5107c60, lpFindFileData=0x31e404 | out: lpFindFileData=0x31e404*(dwFileAttributes=0x2026, ftCreationTime.dwLowDateTime=0x24534c56, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0xae2660aa, ftLastAccessTime.dwHighDateTime=0x1cbf8eb, ftLastWriteTime.dwLowDateTime=0xae2660aa, ftLastWriteTime.dwHighDateTime=0x1cbf8eb, nFileSizeHigh=0x0, nFileSizeLow=0x365fc, dwReserved0=0x0, dwReserved1=0x0, cFileName="Help_MKWD_AssetId.H1W", cAlternateFileName="HELP_M~1.H1W")) returned 1 [0061.770] FindNextFileW (in: hFindFile=0x5107c60, lpFindFileData=0x31e404 | out: lpFindFileData=0x31e404*(dwFileAttributes=0x2026, ftCreationTime.dwLowDateTime=0x24534c56, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0xae409b6f, ftLastAccessTime.dwHighDateTime=0x1cbf8eb, ftLastWriteTime.dwLowDateTime=0xae409b6f, ftLastWriteTime.dwHighDateTime=0x1cbf8eb, nFileSizeHigh=0x0, nFileSizeLow=0x325ec, dwReserved0=0x0, dwReserved1=0x0, cFileName="Help_MKWD_BestBet.H1W", cAlternateFileName="HELP_M~2.H1W")) returned 1 [0061.770] FindNextFileW (in: hFindFile=0x5107c60, lpFindFileData=0x31e404 | out: lpFindFileData=0x31e404*(dwFileAttributes=0x2026, ftCreationTime.dwLowDateTime=0x24534c56, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0xae45604d, ftLastAccessTime.dwHighDateTime=0x1cbf8eb, ftLastWriteTime.dwLowDateTime=0xae45604d, ftLastWriteTime.dwHighDateTime=0x1cbf8eb, nFileSizeHigh=0x0, nFileSizeLow=0x79f1a, dwReserved0=0x0, dwReserved1=0x0, cFileName="Help_MTOC_help.H1H", cAlternateFileName="HELP_M~1.H1H")) returned 1 [0061.770] FindNextFileW (in: hFindFile=0x5107c60, lpFindFileData=0x31e404 | out: lpFindFileData=0x31e404*(dwFileAttributes=0x2026, ftCreationTime.dwLowDateTime=0x26353250, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0xae45604d, ftLastAccessTime.dwHighDateTime=0x1cbf8eb, ftLastWriteTime.dwLowDateTime=0xae45604d, ftLastWriteTime.dwHighDateTime=0x1cbf8eb, nFileSizeHigh=0x0, nFileSizeLow=0x3944, dwReserved0=0x0, dwReserved1=0x0, cFileName="Help_MValidator.H1D", cAlternateFileName="HELP_M~1.H1D")) returned 1 [0061.770] FindNextFileW (in: hFindFile=0x5107c60, lpFindFileData=0x31e404 | out: lpFindFileData=0x31e404*(dwFileAttributes=0x2026, ftCreationTime.dwLowDateTime=0x24534c56, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0xae45604d, ftLastAccessTime.dwHighDateTime=0x1cbf8eb, ftLastWriteTime.dwLowDateTime=0xae45604d, ftLastWriteTime.dwHighDateTime=0x1cbf8eb, nFileSizeHigh=0x0, nFileSizeLow=0x4, dwReserved0=0x0, dwReserved1=0x0, cFileName="Help_MValidator.Lck", cAlternateFileName="HELP_M~1.LCK")) returned 1 [0061.770] FindNextFileW (in: hFindFile=0x5107c60, lpFindFileData=0x31e404 | out: lpFindFileData=0x31e404*(dwFileAttributes=0x2026, ftCreationTime.dwLowDateTime=0x249fa376, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0xae0e8854, ftLastAccessTime.dwHighDateTime=0x1cbf8eb, ftLastWriteTime.dwLowDateTime=0xae0e8854, ftLastWriteTime.dwHighDateTime=0x1cbf8eb, nFileSizeHigh=0x0, nFileSizeLow=0xd5310, dwReserved0=0x0, dwReserved1=0x0, cFileName="Help{9DAA54E8-CD95-4107-8E7F-BA3F24732D95}.H1Q", cAlternateFileName="HELP{9~1.H1Q")) returned 1 [0061.770] FindNextFileW (in: hFindFile=0x5107c60, lpFindFileData=0x31e404 | out: lpFindFileData=0x31e404*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0061.770] FindClose (in: hFindFile=0x5107c60 | out: hFindFile=0x5107c60) returned 1 [0061.770] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e68c) returned 1 [0061.771] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e698) returned 1 [0061.771] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e6cc) returned 1 [0061.771] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\Assistance\\Client\\1.0\\en-US", nBufferLength=0x105, lpBuffer=0x31e1d4, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\Assistance\\Client\\1.0\\en-US", lpFilePart=0x0) returned 0x34 [0061.771] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\Assistance\\Client\\1.0\\en-US\\", nBufferLength=0x105, lpBuffer=0x31e1a8, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\Assistance\\Client\\1.0\\en-US\\", lpFilePart=0x0) returned 0x35 [0061.771] FindFirstFileW (in: lpFileName="C:\\ProgramData\\Microsoft\\Assistance\\Client\\1.0\\en-US\\*", lpFindFileData=0x31e3f4 | out: lpFindFileData=0x31e3f4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x243448f1, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0xae0e8854, ftLastAccessTime.dwHighDateTime=0x1cbf8eb, ftLastWriteTime.dwLowDateTime=0xae0e8854, ftLastWriteTime.dwHighDateTime=0x1cbf8eb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5107c60 [0061.771] FindNextFileW (in: hFindFile=0x5107c60, lpFindFileData=0x31e404 | out: lpFindFileData=0x31e404*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x243448f1, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0xae0e8854, ftLastAccessTime.dwHighDateTime=0x1cbf8eb, ftLastWriteTime.dwLowDateTime=0xae0e8854, ftLastWriteTime.dwHighDateTime=0x1cbf8eb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0061.772] FindNextFileW (in: hFindFile=0x5107c60, lpFindFileData=0x31e404 | out: lpFindFileData=0x31e404*(dwFileAttributes=0x2026, ftCreationTime.dwLowDateTime=0x2436abaa, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0xabde2c6f, ftLastAccessTime.dwHighDateTime=0x1cbf8eb, ftLastWriteTime.dwLowDateTime=0xa65a8bbf, ftLastWriteTime.dwHighDateTime=0x1cbf8eb, nFileSizeHigh=0x0, nFileSizeLow=0x2f22, dwReserved0=0x0, dwReserved1=0x0, cFileName="Help_CValidator.H1D", cAlternateFileName="HELP_C~1.H1D")) returned 1 [0061.772] FindNextFileW (in: hFindFile=0x5107c60, lpFindFileData=0x31e404 | out: lpFindFileData=0x31e404*(dwFileAttributes=0x2026, ftCreationTime.dwLowDateTime=0x24534c56, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0xae2660aa, ftLastAccessTime.dwHighDateTime=0x1cbf8eb, ftLastWriteTime.dwLowDateTime=0xae2660aa, ftLastWriteTime.dwHighDateTime=0x1cbf8eb, nFileSizeHigh=0x0, nFileSizeLow=0x365fc, dwReserved0=0x0, dwReserved1=0x0, cFileName="Help_MKWD_AssetId.H1W", cAlternateFileName="HELP_M~1.H1W")) returned 1 [0061.772] FindNextFileW (in: hFindFile=0x5107c60, lpFindFileData=0x31e404 | out: lpFindFileData=0x31e404*(dwFileAttributes=0x2026, ftCreationTime.dwLowDateTime=0x24534c56, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0xae409b6f, ftLastAccessTime.dwHighDateTime=0x1cbf8eb, ftLastWriteTime.dwLowDateTime=0xae409b6f, ftLastWriteTime.dwHighDateTime=0x1cbf8eb, nFileSizeHigh=0x0, nFileSizeLow=0x325ec, dwReserved0=0x0, dwReserved1=0x0, cFileName="Help_MKWD_BestBet.H1W", cAlternateFileName="HELP_M~2.H1W")) returned 1 [0061.772] FindNextFileW (in: hFindFile=0x5107c60, lpFindFileData=0x31e404 | out: lpFindFileData=0x31e404*(dwFileAttributes=0x2026, ftCreationTime.dwLowDateTime=0x24534c56, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0xae45604d, ftLastAccessTime.dwHighDateTime=0x1cbf8eb, ftLastWriteTime.dwLowDateTime=0xae45604d, ftLastWriteTime.dwHighDateTime=0x1cbf8eb, nFileSizeHigh=0x0, nFileSizeLow=0x79f1a, dwReserved0=0x0, dwReserved1=0x0, cFileName="Help_MTOC_help.H1H", cAlternateFileName="HELP_M~1.H1H")) returned 1 [0061.772] FindNextFileW (in: hFindFile=0x5107c60, lpFindFileData=0x31e404 | out: lpFindFileData=0x31e404*(dwFileAttributes=0x2026, ftCreationTime.dwLowDateTime=0x26353250, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0xae45604d, ftLastAccessTime.dwHighDateTime=0x1cbf8eb, ftLastWriteTime.dwLowDateTime=0xae45604d, ftLastWriteTime.dwHighDateTime=0x1cbf8eb, nFileSizeHigh=0x0, nFileSizeLow=0x3944, dwReserved0=0x0, dwReserved1=0x0, cFileName="Help_MValidator.H1D", cAlternateFileName="HELP_M~1.H1D")) returned 1 [0061.772] FindNextFileW (in: hFindFile=0x5107c60, lpFindFileData=0x31e404 | out: lpFindFileData=0x31e404*(dwFileAttributes=0x2026, ftCreationTime.dwLowDateTime=0x24534c56, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0xae45604d, ftLastAccessTime.dwHighDateTime=0x1cbf8eb, ftLastWriteTime.dwLowDateTime=0xae45604d, ftLastWriteTime.dwHighDateTime=0x1cbf8eb, nFileSizeHigh=0x0, nFileSizeLow=0x4, dwReserved0=0x0, dwReserved1=0x0, cFileName="Help_MValidator.Lck", cAlternateFileName="HELP_M~1.LCK")) returned 1 [0061.772] FindNextFileW (in: hFindFile=0x5107c60, lpFindFileData=0x31e404 | out: lpFindFileData=0x31e404*(dwFileAttributes=0x2026, ftCreationTime.dwLowDateTime=0x249fa376, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0xae0e8854, ftLastAccessTime.dwHighDateTime=0x1cbf8eb, ftLastWriteTime.dwLowDateTime=0xae0e8854, ftLastWriteTime.dwHighDateTime=0x1cbf8eb, nFileSizeHigh=0x0, nFileSizeLow=0xd5310, dwReserved0=0x0, dwReserved1=0x0, cFileName="Help{9DAA54E8-CD95-4107-8E7F-BA3F24732D95}.H1Q", cAlternateFileName="HELP{9~1.H1Q")) returned 1 [0061.772] FindNextFileW (in: hFindFile=0x5107c60, lpFindFileData=0x31e404 | out: lpFindFileData=0x31e404*(dwFileAttributes=0x2026, ftCreationTime.dwLowDateTime=0x249fa376, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0xae0e8854, ftLastAccessTime.dwHighDateTime=0x1cbf8eb, ftLastWriteTime.dwLowDateTime=0xae0e8854, ftLastWriteTime.dwHighDateTime=0x1cbf8eb, nFileSizeHigh=0x0, nFileSizeLow=0xd5310, dwReserved0=0x0, dwReserved1=0x0, cFileName="Help{9DAA54E8-CD95-4107-8E7F-BA3F24732D95}.H1Q", cAlternateFileName="HELP{9~1.H1Q")) returned 0 [0061.772] FindClose (in: hFindFile=0x5107c60 | out: hFindFile=0x5107c60) returned 1 [0061.773] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e68c) returned 1 [0061.773] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e698) returned 1 [0061.773] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e834) returned 1 [0061.773] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\Crypto", nBufferLength=0x105, lpBuffer=0x31e33c, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\Crypto", lpFilePart=0x0) returned 0x1f [0061.773] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\Crypto\\", nBufferLength=0x105, lpBuffer=0x31e310, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\Crypto\\", lpFilePart=0x0) returned 0x20 [0061.773] FindFirstFileW (in: lpFileName="C:\\ProgramData\\Microsoft\\Crypto\\*", lpFindFileData=0x31e55c | out: lpFindFileData=0x31e55c*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xfd943744, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd96989e, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xfd96989e, ftLastWriteTime.dwHighDateTime=0x1ca0431, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5107c60 [0061.773] FindNextFileW (in: hFindFile=0x5107c60, lpFindFileData=0x31e56c | out: lpFindFileData=0x31e56c*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xfd943744, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd96989e, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xfd96989e, ftLastWriteTime.dwHighDateTime=0x1ca0431, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0061.773] FindNextFileW (in: hFindFile=0x5107c60, lpFindFileData=0x31e56c | out: lpFindFileData=0x31e56c*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xfd943744, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd943744, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xfd943744, ftLastWriteTime.dwHighDateTime=0x1ca0431, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="DSS", cAlternateFileName="")) returned 1 [0061.773] FindNextFileW (in: hFindFile=0x5107c60, lpFindFileData=0x31e56c | out: lpFindFileData=0x31e56c*(dwFileAttributes=0x14, ftCreationTime.dwLowDateTime=0xfd96989e, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd96989e, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xb66d81ea, ftLastWriteTime.dwHighDateTime=0x1ca042b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Keys", cAlternateFileName="")) returned 1 [0061.773] FindNextFileW (in: hFindFile=0x5107c60, lpFindFileData=0x31e56c | out: lpFindFileData=0x31e56c*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xfd96989e, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfc65d150, ftLastAccessTime.dwHighDateTime=0x1d2dda1, ftLastWriteTime.dwLowDateTime=0xfc65d150, ftLastWriteTime.dwHighDateTime=0x1d2dda1, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="RSA", cAlternateFileName="")) returned 1 [0061.773] FindNextFileW (in: hFindFile=0x5107c60, lpFindFileData=0x31e56c | out: lpFindFileData=0x31e56c*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xfd96989e, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfc65d150, ftLastAccessTime.dwHighDateTime=0x1d2dda1, ftLastWriteTime.dwLowDateTime=0xfc65d150, ftLastWriteTime.dwHighDateTime=0x1d2dda1, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="RSA", cAlternateFileName="")) returned 0 [0061.773] FindClose (in: hFindFile=0x5107c60 | out: hFindFile=0x5107c60) returned 1 [0061.773] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e7f4) returned 1 [0061.773] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e800) returned 1 [0061.773] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e834) returned 1 [0061.773] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\Crypto", nBufferLength=0x105, lpBuffer=0x31e33c, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\Crypto", lpFilePart=0x0) returned 0x1f [0061.773] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\Crypto\\", nBufferLength=0x105, lpBuffer=0x31e310, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\Crypto\\", lpFilePart=0x0) returned 0x20 [0061.773] FindFirstFileW (in: lpFileName="C:\\ProgramData\\Microsoft\\Crypto\\*", lpFindFileData=0x31e55c | out: lpFindFileData=0x31e55c*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xfd943744, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd96989e, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xfd96989e, ftLastWriteTime.dwHighDateTime=0x1ca0431, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5107c60 [0061.774] FindNextFileW (in: hFindFile=0x5107c60, lpFindFileData=0x31e56c | out: lpFindFileData=0x31e56c*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xfd943744, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd96989e, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xfd96989e, ftLastWriteTime.dwHighDateTime=0x1ca0431, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0061.774] FindNextFileW (in: hFindFile=0x5107c60, lpFindFileData=0x31e56c | out: lpFindFileData=0x31e56c*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xfd943744, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd943744, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xfd943744, ftLastWriteTime.dwHighDateTime=0x1ca0431, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="DSS", cAlternateFileName="")) returned 1 [0061.774] FindNextFileW (in: hFindFile=0x5107c60, lpFindFileData=0x31e56c | out: lpFindFileData=0x31e56c*(dwFileAttributes=0x14, ftCreationTime.dwLowDateTime=0xfd96989e, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd96989e, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xb66d81ea, ftLastWriteTime.dwHighDateTime=0x1ca042b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Keys", cAlternateFileName="")) returned 1 [0061.774] FindNextFileW (in: hFindFile=0x5107c60, lpFindFileData=0x31e56c | out: lpFindFileData=0x31e56c*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xfd96989e, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfc65d150, ftLastAccessTime.dwHighDateTime=0x1d2dda1, ftLastWriteTime.dwLowDateTime=0xfc65d150, ftLastWriteTime.dwHighDateTime=0x1d2dda1, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="RSA", cAlternateFileName="")) returned 1 [0061.774] FindNextFileW (in: hFindFile=0x5107c60, lpFindFileData=0x31e56c | out: lpFindFileData=0x31e56c*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0061.774] FindClose (in: hFindFile=0x5107c60 | out: hFindFile=0x5107c60) returned 1 [0061.774] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e7f4) returned 1 [0061.774] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e800) returned 1 [0061.774] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e7bc) returned 1 [0061.774] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\Crypto\\DSS", nBufferLength=0x105, lpBuffer=0x31e2c4, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\Crypto\\DSS", lpFilePart=0x0) returned 0x23 [0061.774] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\Crypto\\DSS\\", nBufferLength=0x105, lpBuffer=0x31e298, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\Crypto\\DSS\\", lpFilePart=0x0) returned 0x24 [0061.774] FindFirstFileW (in: lpFileName="C:\\ProgramData\\Microsoft\\Crypto\\DSS\\*", lpFindFileData=0x31e4e4 | out: lpFindFileData=0x31e4e4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xfd943744, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd943744, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xfd943744, ftLastWriteTime.dwHighDateTime=0x1ca0431, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5107c60 [0061.774] FindNextFileW (in: hFindFile=0x5107c60, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xfd943744, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd943744, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xfd943744, ftLastWriteTime.dwHighDateTime=0x1ca0431, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0061.774] FindNextFileW (in: hFindFile=0x5107c60, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd943744, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd943744, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xb66d81ea, ftLastWriteTime.dwHighDateTime=0x1ca042b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="MachineKeys", cAlternateFileName="MACHIN~1")) returned 1 [0061.774] FindNextFileW (in: hFindFile=0x5107c60, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd943744, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd943744, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xb66d81ea, ftLastWriteTime.dwHighDateTime=0x1ca042b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="MachineKeys", cAlternateFileName="MACHIN~1")) returned 0 [0061.775] FindClose (in: hFindFile=0x5107c60 | out: hFindFile=0x5107c60) returned 1 [0061.775] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e77c) returned 1 [0061.775] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e788) returned 1 [0061.775] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e7bc) returned 1 [0061.775] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\Crypto\\DSS", nBufferLength=0x105, lpBuffer=0x31e2c4, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\Crypto\\DSS", lpFilePart=0x0) returned 0x23 [0061.775] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\Crypto\\DSS\\", nBufferLength=0x105, lpBuffer=0x31e298, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\Crypto\\DSS\\", lpFilePart=0x0) returned 0x24 [0061.775] FindFirstFileW (in: lpFileName="C:\\ProgramData\\Microsoft\\Crypto\\DSS\\*", lpFindFileData=0x31e4e4 | out: lpFindFileData=0x31e4e4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xfd943744, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd943744, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xfd943744, ftLastWriteTime.dwHighDateTime=0x1ca0431, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5107c60 [0061.775] FindNextFileW (in: hFindFile=0x5107c60, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xfd943744, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd943744, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xfd943744, ftLastWriteTime.dwHighDateTime=0x1ca0431, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0061.775] FindNextFileW (in: hFindFile=0x5107c60, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd943744, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd943744, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xb66d81ea, ftLastWriteTime.dwHighDateTime=0x1ca042b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="MachineKeys", cAlternateFileName="MACHIN~1")) returned 1 [0061.775] FindNextFileW (in: hFindFile=0x5107c60, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0061.775] FindClose (in: hFindFile=0x5107c60 | out: hFindFile=0x5107c60) returned 1 [0061.775] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e77c) returned 1 [0061.775] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e788) returned 1 [0061.775] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e744) returned 1 [0061.775] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\Crypto\\DSS\\MachineKeys", nBufferLength=0x105, lpBuffer=0x31e24c, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\Crypto\\DSS\\MachineKeys", lpFilePart=0x0) returned 0x2f [0061.775] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\Crypto\\DSS\\MachineKeys\\", nBufferLength=0x105, lpBuffer=0x31e220, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\Crypto\\DSS\\MachineKeys\\", lpFilePart=0x0) returned 0x30 [0061.775] FindFirstFileW (in: lpFileName="C:\\ProgramData\\Microsoft\\Crypto\\DSS\\MachineKeys\\*", lpFindFileData=0x31e46c | out: lpFindFileData=0x31e46c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd943744, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd943744, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xb66d81ea, ftLastWriteTime.dwHighDateTime=0x1ca042b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5107c60 [0061.776] FindNextFileW (in: hFindFile=0x5107c60, lpFindFileData=0x31e47c | out: lpFindFileData=0x31e47c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd943744, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd943744, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xb66d81ea, ftLastWriteTime.dwHighDateTime=0x1ca042b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0061.776] FindNextFileW (in: hFindFile=0x5107c60, lpFindFileData=0x31e47c | out: lpFindFileData=0x31e47c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd943744, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd943744, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xb66d81ea, ftLastWriteTime.dwHighDateTime=0x1ca042b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 0 [0061.776] FindClose (in: hFindFile=0x5107c60 | out: hFindFile=0x5107c60) returned 1 [0061.776] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e704) returned 1 [0061.776] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e710) returned 1 [0061.776] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e744) returned 1 [0061.776] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\Crypto\\DSS\\MachineKeys", nBufferLength=0x105, lpBuffer=0x31e24c, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\Crypto\\DSS\\MachineKeys", lpFilePart=0x0) returned 0x2f [0061.776] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\Crypto\\DSS\\MachineKeys\\", nBufferLength=0x105, lpBuffer=0x31e220, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\Crypto\\DSS\\MachineKeys\\", lpFilePart=0x0) returned 0x30 [0061.776] FindFirstFileW (in: lpFileName="C:\\ProgramData\\Microsoft\\Crypto\\DSS\\MachineKeys\\*", lpFindFileData=0x31e46c | out: lpFindFileData=0x31e46c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd943744, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd943744, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xb66d81ea, ftLastWriteTime.dwHighDateTime=0x1ca042b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5107c60 [0061.776] FindNextFileW (in: hFindFile=0x5107c60, lpFindFileData=0x31e47c | out: lpFindFileData=0x31e47c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd943744, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd943744, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xb66d81ea, ftLastWriteTime.dwHighDateTime=0x1ca042b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0061.776] FindNextFileW (in: hFindFile=0x5107c60, lpFindFileData=0x31e47c | out: lpFindFileData=0x31e47c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd943744, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd943744, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xb66d81ea, ftLastWriteTime.dwHighDateTime=0x1ca042b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 0 [0061.776] FindClose (in: hFindFile=0x5107c60 | out: hFindFile=0x5107c60) returned 1 [0061.777] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e704) returned 1 [0061.777] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e710) returned 1 [0061.777] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e7bc) returned 1 [0061.777] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\Crypto\\Keys", nBufferLength=0x105, lpBuffer=0x31e2c4, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\Crypto\\Keys", lpFilePart=0x0) returned 0x24 [0061.777] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\Crypto\\Keys\\", nBufferLength=0x105, lpBuffer=0x31e298, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\Crypto\\Keys\\", lpFilePart=0x0) returned 0x25 [0061.777] FindFirstFileW (in: lpFileName="C:\\ProgramData\\Microsoft\\Crypto\\Keys\\*", lpFindFileData=0x31e4e4 | out: lpFindFileData=0x31e4e4*(dwFileAttributes=0x14, ftCreationTime.dwLowDateTime=0xfd96989e, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd96989e, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xb66d81ea, ftLastWriteTime.dwHighDateTime=0x1ca042b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5107c60 [0061.778] FindNextFileW (in: hFindFile=0x5107c60, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x14, ftCreationTime.dwLowDateTime=0xfd96989e, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd96989e, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xb66d81ea, ftLastWriteTime.dwHighDateTime=0x1ca042b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0061.778] FindNextFileW (in: hFindFile=0x5107c60, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x14, ftCreationTime.dwLowDateTime=0xfd96989e, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd96989e, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xb66d81ea, ftLastWriteTime.dwHighDateTime=0x1ca042b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 0 [0061.778] FindClose (in: hFindFile=0x5107c60 | out: hFindFile=0x5107c60) returned 1 [0061.796] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e77c) returned 1 [0061.796] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e788) returned 1 [0061.796] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e7bc) returned 1 [0061.796] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\Crypto\\Keys", nBufferLength=0x105, lpBuffer=0x31e2c4, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\Crypto\\Keys", lpFilePart=0x0) returned 0x24 [0061.796] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\Crypto\\Keys\\", nBufferLength=0x105, lpBuffer=0x31e298, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\Crypto\\Keys\\", lpFilePart=0x0) returned 0x25 [0061.796] FindFirstFileW (in: lpFileName="C:\\ProgramData\\Microsoft\\Crypto\\Keys\\*", lpFindFileData=0x31e4e4 | out: lpFindFileData=0x31e4e4*(dwFileAttributes=0x14, ftCreationTime.dwLowDateTime=0xfd96989e, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd96989e, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xb66d81ea, ftLastWriteTime.dwHighDateTime=0x1ca042b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5107c60 [0061.796] FindNextFileW (in: hFindFile=0x5107c60, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x14, ftCreationTime.dwLowDateTime=0xfd96989e, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd96989e, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xb66d81ea, ftLastWriteTime.dwHighDateTime=0x1ca042b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0061.796] FindNextFileW (in: hFindFile=0x5107c60, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x14, ftCreationTime.dwLowDateTime=0xfd96989e, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd96989e, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xb66d81ea, ftLastWriteTime.dwHighDateTime=0x1ca042b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 0 [0061.796] FindClose (in: hFindFile=0x5107c60 | out: hFindFile=0x5107c60) returned 1 [0061.796] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e77c) returned 1 [0061.796] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e788) returned 1 [0061.796] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e7bc) returned 1 [0061.796] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\Crypto\\RSA", nBufferLength=0x105, lpBuffer=0x31e2c4, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\Crypto\\RSA", lpFilePart=0x0) returned 0x23 [0061.796] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\Crypto\\RSA\\", nBufferLength=0x105, lpBuffer=0x31e298, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\Crypto\\RSA\\", lpFilePart=0x0) returned 0x24 [0061.797] FindFirstFileW (in: lpFileName="C:\\ProgramData\\Microsoft\\Crypto\\RSA\\*", lpFindFileData=0x31e4e4 | out: lpFindFileData=0x31e4e4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xfd96989e, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfc65d150, ftLastAccessTime.dwHighDateTime=0x1d2dda1, ftLastWriteTime.dwLowDateTime=0xfc65d150, ftLastWriteTime.dwHighDateTime=0x1d2dda1, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5107c60 [0061.797] FindNextFileW (in: hFindFile=0x5107c60, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xfd96989e, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfc65d150, ftLastAccessTime.dwHighDateTime=0x1d2dda1, ftLastWriteTime.dwLowDateTime=0xfc65d150, ftLastWriteTime.dwHighDateTime=0x1d2dda1, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0061.797] FindNextFileW (in: hFindFile=0x5107c60, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd96989e, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd96989e, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xb66d81ea, ftLastWriteTime.dwHighDateTime=0x1ca042b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="MachineKeys", cAlternateFileName="MACHIN~1")) returned 1 [0061.797] FindNextFileW (in: hFindFile=0x5107c60, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x2014, ftCreationTime.dwLowDateTime=0xfc65d150, ftCreationTime.dwHighDateTime=0x1d2dda1, ftLastAccessTime.dwLowDateTime=0xe5bc2f0, ftLastAccessTime.dwHighDateTime=0x1d35d06, ftLastWriteTime.dwLowDateTime=0xe5bc2f0, ftLastWriteTime.dwHighDateTime=0x1d35d06, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="S-1-5-18", cAlternateFileName="")) returned 1 [0061.797] FindNextFileW (in: hFindFile=0x5107c60, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x2014, ftCreationTime.dwLowDateTime=0xfc65d150, ftCreationTime.dwHighDateTime=0x1d2dda1, ftLastAccessTime.dwLowDateTime=0xe5bc2f0, ftLastAccessTime.dwHighDateTime=0x1d35d06, ftLastWriteTime.dwLowDateTime=0xe5bc2f0, ftLastWriteTime.dwHighDateTime=0x1d35d06, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="S-1-5-18", cAlternateFileName="")) returned 0 [0061.797] FindClose (in: hFindFile=0x5107c60 | out: hFindFile=0x5107c60) returned 1 [0061.797] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e77c) returned 1 [0061.797] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e788) returned 1 [0061.797] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e7bc) returned 1 [0061.797] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\Crypto\\RSA", nBufferLength=0x105, lpBuffer=0x31e2c4, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\Crypto\\RSA", lpFilePart=0x0) returned 0x23 [0061.797] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\Crypto\\RSA\\", nBufferLength=0x105, lpBuffer=0x31e298, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\Crypto\\RSA\\", lpFilePart=0x0) returned 0x24 [0061.797] FindFirstFileW (in: lpFileName="C:\\ProgramData\\Microsoft\\Crypto\\RSA\\*", lpFindFileData=0x31e4e4 | out: lpFindFileData=0x31e4e4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xfd96989e, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfc65d150, ftLastAccessTime.dwHighDateTime=0x1d2dda1, ftLastWriteTime.dwLowDateTime=0xfc65d150, ftLastWriteTime.dwHighDateTime=0x1d2dda1, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5107c60 [0061.797] FindNextFileW (in: hFindFile=0x5107c60, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xfd96989e, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfc65d150, ftLastAccessTime.dwHighDateTime=0x1d2dda1, ftLastWriteTime.dwLowDateTime=0xfc65d150, ftLastWriteTime.dwHighDateTime=0x1d2dda1, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0061.797] FindNextFileW (in: hFindFile=0x5107c60, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd96989e, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd96989e, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xb66d81ea, ftLastWriteTime.dwHighDateTime=0x1ca042b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="MachineKeys", cAlternateFileName="MACHIN~1")) returned 1 [0061.797] FindNextFileW (in: hFindFile=0x5107c60, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x2014, ftCreationTime.dwLowDateTime=0xfc65d150, ftCreationTime.dwHighDateTime=0x1d2dda1, ftLastAccessTime.dwLowDateTime=0xe5bc2f0, ftLastAccessTime.dwHighDateTime=0x1d35d06, ftLastWriteTime.dwLowDateTime=0xe5bc2f0, ftLastWriteTime.dwHighDateTime=0x1d35d06, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="S-1-5-18", cAlternateFileName="")) returned 1 [0061.798] FindNextFileW (in: hFindFile=0x5107c60, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0061.798] FindClose (in: hFindFile=0x5107c60 | out: hFindFile=0x5107c60) returned 1 [0061.798] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e77c) returned 1 [0061.798] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e788) returned 1 [0061.798] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e744) returned 1 [0061.798] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\Crypto\\RSA\\MachineKeys", nBufferLength=0x105, lpBuffer=0x31e24c, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\Crypto\\RSA\\MachineKeys", lpFilePart=0x0) returned 0x2f [0061.798] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\Crypto\\RSA\\MachineKeys\\", nBufferLength=0x105, lpBuffer=0x31e220, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\Crypto\\RSA\\MachineKeys\\", lpFilePart=0x0) returned 0x30 [0061.798] FindFirstFileW (in: lpFileName="C:\\ProgramData\\Microsoft\\Crypto\\RSA\\MachineKeys\\*", lpFindFileData=0x31e46c | out: lpFindFileData=0x31e46c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd96989e, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd96989e, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xb66d81ea, ftLastWriteTime.dwHighDateTime=0x1ca042b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5107c60 [0061.798] FindNextFileW (in: hFindFile=0x5107c60, lpFindFileData=0x31e47c | out: lpFindFileData=0x31e47c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd96989e, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd96989e, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xb66d81ea, ftLastWriteTime.dwHighDateTime=0x1ca042b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0061.798] FindNextFileW (in: hFindFile=0x5107c60, lpFindFileData=0x31e47c | out: lpFindFileData=0x31e47c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd96989e, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd96989e, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xb66d81ea, ftLastWriteTime.dwHighDateTime=0x1ca042b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 0 [0061.798] FindClose (in: hFindFile=0x5107c60 | out: hFindFile=0x5107c60) returned 1 [0061.798] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e704) returned 1 [0061.798] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e710) returned 1 [0061.798] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e744) returned 1 [0061.798] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\Crypto\\RSA\\MachineKeys", nBufferLength=0x105, lpBuffer=0x31e24c, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\Crypto\\RSA\\MachineKeys", lpFilePart=0x0) returned 0x2f [0061.798] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\Crypto\\RSA\\MachineKeys\\", nBufferLength=0x105, lpBuffer=0x31e220, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\Crypto\\RSA\\MachineKeys\\", lpFilePart=0x0) returned 0x30 [0061.798] FindFirstFileW (in: lpFileName="C:\\ProgramData\\Microsoft\\Crypto\\RSA\\MachineKeys\\*", lpFindFileData=0x31e46c | out: lpFindFileData=0x31e46c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd96989e, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd96989e, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xb66d81ea, ftLastWriteTime.dwHighDateTime=0x1ca042b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5107c60 [0061.799] FindNextFileW (in: hFindFile=0x5107c60, lpFindFileData=0x31e47c | out: lpFindFileData=0x31e47c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd96989e, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd96989e, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xb66d81ea, ftLastWriteTime.dwHighDateTime=0x1ca042b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0061.799] FindNextFileW (in: hFindFile=0x5107c60, lpFindFileData=0x31e47c | out: lpFindFileData=0x31e47c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd96989e, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd96989e, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xb66d81ea, ftLastWriteTime.dwHighDateTime=0x1ca042b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 0 [0061.799] FindClose (in: hFindFile=0x5107c60 | out: hFindFile=0x5107c60) returned 1 [0061.799] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e704) returned 1 [0061.799] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e710) returned 1 [0061.799] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e744) returned 1 [0061.799] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\Crypto\\RSA\\S-1-5-18", nBufferLength=0x105, lpBuffer=0x31e24c, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\Crypto\\RSA\\S-1-5-18", lpFilePart=0x0) returned 0x2c [0061.799] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\Crypto\\RSA\\S-1-5-18\\", nBufferLength=0x105, lpBuffer=0x31e220, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\Crypto\\RSA\\S-1-5-18\\", lpFilePart=0x0) returned 0x2d [0061.799] FindFirstFileW (in: lpFileName="C:\\ProgramData\\Microsoft\\Crypto\\RSA\\S-1-5-18\\*", lpFindFileData=0x31e46c | out: lpFindFileData=0x31e46c*(dwFileAttributes=0x2014, ftCreationTime.dwLowDateTime=0xfc65d150, ftCreationTime.dwHighDateTime=0x1d2dda1, ftLastAccessTime.dwLowDateTime=0xe5bc2f0, ftLastAccessTime.dwHighDateTime=0x1d35d06, ftLastWriteTime.dwLowDateTime=0xe5bc2f0, ftLastWriteTime.dwHighDateTime=0x1d35d06, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5107c60 [0061.808] FindNextFileW (in: hFindFile=0x5107c60, lpFindFileData=0x31e47c | out: lpFindFileData=0x31e47c*(dwFileAttributes=0x2014, ftCreationTime.dwLowDateTime=0xfc65d150, ftCreationTime.dwHighDateTime=0x1d2dda1, ftLastAccessTime.dwLowDateTime=0xe5bc2f0, ftLastAccessTime.dwHighDateTime=0x1d35d06, ftLastWriteTime.dwLowDateTime=0xe5bc2f0, ftLastWriteTime.dwHighDateTime=0x1d35d06, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0061.808] FindNextFileW (in: hFindFile=0x5107c60, lpFindFileData=0x31e47c | out: lpFindFileData=0x31e47c*(dwFileAttributes=0x2024, ftCreationTime.dwLowDateTime=0xfc767af0, ftCreationTime.dwHighDateTime=0x1d2dda1, ftLastAccessTime.dwLowDateTime=0xfc767af0, ftLastAccessTime.dwHighDateTime=0x1d2dda1, ftLastWriteTime.dwLowDateTime=0xfc767af0, ftLastWriteTime.dwHighDateTime=0x1d2dda1, nFileSizeHigh=0x0, nFileSizeLow=0x2f, dwReserved0=0x0, dwReserved1=0x0, cFileName="6d14e4b1d8ca773bab785d1be032546e_0303d5b4-ffe9-470e-9dd8-7d9ec416e53f", cAlternateFileName="6D14E4~1")) returned 1 [0061.808] FindNextFileW (in: hFindFile=0x5107c60, lpFindFileData=0x31e47c | out: lpFindFileData=0x31e47c*(dwFileAttributes=0x2024, ftCreationTime.dwLowDateTime=0xe5bc2f0, ftCreationTime.dwHighDateTime=0x1d35d06, ftLastAccessTime.dwLowDateTime=0xe5bc2f0, ftLastAccessTime.dwHighDateTime=0x1d35d06, ftLastWriteTime.dwLowDateTime=0xe5bc2f0, ftLastWriteTime.dwHighDateTime=0x1d35d06, nFileSizeHigh=0x0, nFileSizeLow=0x41d, dwReserved0=0x0, dwReserved1=0x0, cFileName="d42cc0c3858a58db2db37658219e6400_0303d5b4-ffe9-470e-9dd8-7d9ec416e53f", cAlternateFileName="D42CC0~1")) returned 1 [0061.808] FindNextFileW (in: hFindFile=0x5107c60, lpFindFileData=0x31e47c | out: lpFindFileData=0x31e47c*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0061.808] FindClose (in: hFindFile=0x5107c60 | out: hFindFile=0x5107c60) returned 1 [0061.808] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e704) returned 1 [0061.808] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e710) returned 1 [0061.808] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e744) returned 1 [0061.808] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\Crypto\\RSA\\S-1-5-18", nBufferLength=0x105, lpBuffer=0x31e24c, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\Crypto\\RSA\\S-1-5-18", lpFilePart=0x0) returned 0x2c [0061.808] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\Crypto\\RSA\\S-1-5-18\\", nBufferLength=0x105, lpBuffer=0x31e220, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\Crypto\\RSA\\S-1-5-18\\", lpFilePart=0x0) returned 0x2d [0061.808] FindFirstFileW (in: lpFileName="C:\\ProgramData\\Microsoft\\Crypto\\RSA\\S-1-5-18\\*", lpFindFileData=0x31e46c | out: lpFindFileData=0x31e46c*(dwFileAttributes=0x2014, ftCreationTime.dwLowDateTime=0xfc65d150, ftCreationTime.dwHighDateTime=0x1d2dda1, ftLastAccessTime.dwLowDateTime=0xe5bc2f0, ftLastAccessTime.dwHighDateTime=0x1d35d06, ftLastWriteTime.dwLowDateTime=0xe5bc2f0, ftLastWriteTime.dwHighDateTime=0x1d35d06, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5107c60 [0061.808] FindNextFileW (in: hFindFile=0x5107c60, lpFindFileData=0x31e47c | out: lpFindFileData=0x31e47c*(dwFileAttributes=0x2014, ftCreationTime.dwLowDateTime=0xfc65d150, ftCreationTime.dwHighDateTime=0x1d2dda1, ftLastAccessTime.dwLowDateTime=0xe5bc2f0, ftLastAccessTime.dwHighDateTime=0x1d35d06, ftLastWriteTime.dwLowDateTime=0xe5bc2f0, ftLastWriteTime.dwHighDateTime=0x1d35d06, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0061.808] FindNextFileW (in: hFindFile=0x5107c60, lpFindFileData=0x31e47c | out: lpFindFileData=0x31e47c*(dwFileAttributes=0x2024, ftCreationTime.dwLowDateTime=0xfc767af0, ftCreationTime.dwHighDateTime=0x1d2dda1, ftLastAccessTime.dwLowDateTime=0xfc767af0, ftLastAccessTime.dwHighDateTime=0x1d2dda1, ftLastWriteTime.dwLowDateTime=0xfc767af0, ftLastWriteTime.dwHighDateTime=0x1d2dda1, nFileSizeHigh=0x0, nFileSizeLow=0x2f, dwReserved0=0x0, dwReserved1=0x0, cFileName="6d14e4b1d8ca773bab785d1be032546e_0303d5b4-ffe9-470e-9dd8-7d9ec416e53f", cAlternateFileName="6D14E4~1")) returned 1 [0061.808] FindNextFileW (in: hFindFile=0x5107c60, lpFindFileData=0x31e47c | out: lpFindFileData=0x31e47c*(dwFileAttributes=0x2024, ftCreationTime.dwLowDateTime=0xe5bc2f0, ftCreationTime.dwHighDateTime=0x1d35d06, ftLastAccessTime.dwLowDateTime=0xe5bc2f0, ftLastAccessTime.dwHighDateTime=0x1d35d06, ftLastWriteTime.dwLowDateTime=0xe5bc2f0, ftLastWriteTime.dwHighDateTime=0x1d35d06, nFileSizeHigh=0x0, nFileSizeLow=0x41d, dwReserved0=0x0, dwReserved1=0x0, cFileName="d42cc0c3858a58db2db37658219e6400_0303d5b4-ffe9-470e-9dd8-7d9ec416e53f", cAlternateFileName="D42CC0~1")) returned 1 [0061.808] FindNextFileW (in: hFindFile=0x5107c60, lpFindFileData=0x31e47c | out: lpFindFileData=0x31e47c*(dwFileAttributes=0x2024, ftCreationTime.dwLowDateTime=0xe5bc2f0, ftCreationTime.dwHighDateTime=0x1d35d06, ftLastAccessTime.dwLowDateTime=0xe5bc2f0, ftLastAccessTime.dwHighDateTime=0x1d35d06, ftLastWriteTime.dwLowDateTime=0xe5bc2f0, ftLastWriteTime.dwHighDateTime=0x1d35d06, nFileSizeHigh=0x0, nFileSizeLow=0x41d, dwReserved0=0x0, dwReserved1=0x0, cFileName="d42cc0c3858a58db2db37658219e6400_0303d5b4-ffe9-470e-9dd8-7d9ec416e53f", cAlternateFileName="D42CC0~1")) returned 0 [0061.808] FindClose (in: hFindFile=0x5107c60 | out: hFindFile=0x5107c60) returned 1 [0061.809] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e704) returned 1 [0061.809] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e710) returned 1 [0061.809] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e834) returned 1 [0061.809] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\Device Stage", nBufferLength=0x105, lpBuffer=0x31e33c, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\Device Stage", lpFilePart=0x0) returned 0x25 [0061.809] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\Device Stage\\", nBufferLength=0x105, lpBuffer=0x31e310, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\Device Stage\\", lpFilePart=0x0) returned 0x26 [0061.809] FindFirstFileW (in: lpFileName="C:\\ProgramData\\Microsoft\\Device Stage\\*", lpFindFileData=0x31e55c | out: lpFindFileData=0x31e55c*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xfd96989e, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd96989e, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xfd96989e, ftLastWriteTime.dwHighDateTime=0x1ca0431, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5107c60 [0061.809] FindNextFileW (in: hFindFile=0x5107c60, lpFindFileData=0x31e56c | out: lpFindFileData=0x31e56c*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xfd96989e, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd96989e, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xfd96989e, ftLastWriteTime.dwHighDateTime=0x1ca0431, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0061.809] FindNextFileW (in: hFindFile=0x5107c60, lpFindFileData=0x31e56c | out: lpFindFileData=0x31e56c*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xfd96989e, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd96989e, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xfd96989e, ftLastWriteTime.dwHighDateTime=0x1ca0431, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Device", cAlternateFileName="")) returned 1 [0061.809] FindNextFileW (in: hFindFile=0x5107c60, lpFindFileData=0x31e56c | out: lpFindFileData=0x31e56c*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xfd96989e, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd98f9f8, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xfd98f9f8, ftLastWriteTime.dwHighDateTime=0x1ca0431, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Task", cAlternateFileName="")) returned 1 [0061.809] FindNextFileW (in: hFindFile=0x5107c60, lpFindFileData=0x31e56c | out: lpFindFileData=0x31e56c*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xfd96989e, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd98f9f8, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xfd98f9f8, ftLastWriteTime.dwHighDateTime=0x1ca0431, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Task", cAlternateFileName="")) returned 0 [0061.809] FindClose (in: hFindFile=0x5107c60 | out: hFindFile=0x5107c60) returned 1 [0061.809] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e7f4) returned 1 [0061.809] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e800) returned 1 [0061.809] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e834) returned 1 [0061.809] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\Device Stage", nBufferLength=0x105, lpBuffer=0x31e33c, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\Device Stage", lpFilePart=0x0) returned 0x25 [0061.809] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\Device Stage\\", nBufferLength=0x105, lpBuffer=0x31e310, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\Device Stage\\", lpFilePart=0x0) returned 0x26 [0061.809] FindFirstFileW (in: lpFileName="C:\\ProgramData\\Microsoft\\Device Stage\\*", lpFindFileData=0x31e55c | out: lpFindFileData=0x31e55c*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xfd96989e, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd96989e, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xfd96989e, ftLastWriteTime.dwHighDateTime=0x1ca0431, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5107c60 [0061.810] FindNextFileW (in: hFindFile=0x5107c60, lpFindFileData=0x31e56c | out: lpFindFileData=0x31e56c*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xfd96989e, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd96989e, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xfd96989e, ftLastWriteTime.dwHighDateTime=0x1ca0431, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0061.810] FindNextFileW (in: hFindFile=0x5107c60, lpFindFileData=0x31e56c | out: lpFindFileData=0x31e56c*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xfd96989e, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd96989e, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xfd96989e, ftLastWriteTime.dwHighDateTime=0x1ca0431, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Device", cAlternateFileName="")) returned 1 [0061.810] FindNextFileW (in: hFindFile=0x5107c60, lpFindFileData=0x31e56c | out: lpFindFileData=0x31e56c*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xfd96989e, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd98f9f8, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xfd98f9f8, ftLastWriteTime.dwHighDateTime=0x1ca0431, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Task", cAlternateFileName="")) returned 1 [0061.810] FindNextFileW (in: hFindFile=0x5107c60, lpFindFileData=0x31e56c | out: lpFindFileData=0x31e56c*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0061.810] FindClose (in: hFindFile=0x5107c60 | out: hFindFile=0x5107c60) returned 1 [0061.810] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e7f4) returned 1 [0061.810] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e800) returned 1 [0061.810] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e7bc) returned 1 [0061.810] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\Device Stage\\Device", nBufferLength=0x105, lpBuffer=0x31e2c4, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\Device Stage\\Device", lpFilePart=0x0) returned 0x2c [0061.810] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\Device Stage\\Device\\", nBufferLength=0x105, lpBuffer=0x31e298, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\Device Stage\\Device\\", lpFilePart=0x0) returned 0x2d [0061.810] FindFirstFileW (in: lpFileName="C:\\ProgramData\\Microsoft\\Device Stage\\Device\\*", lpFindFileData=0x31e4e4 | out: lpFindFileData=0x31e4e4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xfd96989e, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd96989e, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xfd96989e, ftLastWriteTime.dwHighDateTime=0x1ca0431, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5107c60 [0061.811] FindNextFileW (in: hFindFile=0x5107c60, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xfd96989e, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd96989e, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xfd96989e, ftLastWriteTime.dwHighDateTime=0x1ca0431, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0061.811] FindNextFileW (in: hFindFile=0x5107c60, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd96989e, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd96989e, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xfd96989e, ftLastWriteTime.dwHighDateTime=0x1ca0431, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="{113527a4-45d4-4b6f-b567-97838f1b04b0}", cAlternateFileName="{11352~1")) returned 1 [0061.811] FindNextFileW (in: hFindFile=0x5107c60, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd96989e, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd96989e, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xfd96989e, ftLastWriteTime.dwHighDateTime=0x1ca0431, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="{8702d817-5aad-4674-9ef3-4d3decd87120}", cAlternateFileName="{8702D~1")) returned 1 [0061.811] FindNextFileW (in: hFindFile=0x5107c60, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd96989e, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd96989e, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xfd96989e, ftLastWriteTime.dwHighDateTime=0x1ca0431, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="{8702d817-5aad-4674-9ef3-4d3decd87120}", cAlternateFileName="{8702D~1")) returned 0 [0061.811] FindClose (in: hFindFile=0x5107c60 | out: hFindFile=0x5107c60) returned 1 [0061.811] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e77c) returned 1 [0061.811] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e788) returned 1 [0061.811] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e7bc) returned 1 [0061.811] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\Device Stage\\Device", nBufferLength=0x105, lpBuffer=0x31e2c4, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\Device Stage\\Device", lpFilePart=0x0) returned 0x2c [0061.811] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\Device Stage\\Device\\", nBufferLength=0x105, lpBuffer=0x31e298, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\Device Stage\\Device\\", lpFilePart=0x0) returned 0x2d [0061.811] FindFirstFileW (in: lpFileName="C:\\ProgramData\\Microsoft\\Device Stage\\Device\\*", lpFindFileData=0x31e4e4 | out: lpFindFileData=0x31e4e4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xfd96989e, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd96989e, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xfd96989e, ftLastWriteTime.dwHighDateTime=0x1ca0431, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5107c60 [0061.811] FindNextFileW (in: hFindFile=0x5107c60, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xfd96989e, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd96989e, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xfd96989e, ftLastWriteTime.dwHighDateTime=0x1ca0431, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0061.812] FindNextFileW (in: hFindFile=0x5107c60, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd96989e, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd96989e, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xfd96989e, ftLastWriteTime.dwHighDateTime=0x1ca0431, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="{113527a4-45d4-4b6f-b567-97838f1b04b0}", cAlternateFileName="{11352~1")) returned 1 [0061.812] FindNextFileW (in: hFindFile=0x5107c60, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd96989e, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd96989e, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xfd96989e, ftLastWriteTime.dwHighDateTime=0x1ca0431, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="{8702d817-5aad-4674-9ef3-4d3decd87120}", cAlternateFileName="{8702D~1")) returned 1 [0061.812] FindNextFileW (in: hFindFile=0x5107c60, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0061.812] FindClose (in: hFindFile=0x5107c60 | out: hFindFile=0x5107c60) returned 1 [0061.812] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e77c) returned 1 [0061.812] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e788) returned 1 [0061.812] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e744) returned 1 [0061.812] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\Device Stage\\Device\\{113527a4-45d4-4b6f-b567-97838f1b04b0}", nBufferLength=0x105, lpBuffer=0x31e24c, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\Device Stage\\Device\\{113527a4-45d4-4b6f-b567-97838f1b04b0}", lpFilePart=0x0) returned 0x53 [0061.812] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\Device Stage\\Device\\{113527a4-45d4-4b6f-b567-97838f1b04b0}\\", nBufferLength=0x105, lpBuffer=0x31e220, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\Device Stage\\Device\\{113527a4-45d4-4b6f-b567-97838f1b04b0}\\", lpFilePart=0x0) returned 0x54 [0061.812] FindFirstFileW (in: lpFileName="C:\\ProgramData\\Microsoft\\Device Stage\\Device\\{113527a4-45d4-4b6f-b567-97838f1b04b0}\\*", lpFindFileData=0x31e46c | out: lpFindFileData=0x31e46c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd96989e, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd96989e, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xfd96989e, ftLastWriteTime.dwHighDateTime=0x1ca0431, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5107c60 [0061.814] FindNextFileW (in: hFindFile=0x5107c60, lpFindFileData=0x31e47c | out: lpFindFileData=0x31e47c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd96989e, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd96989e, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xfd96989e, ftLastWriteTime.dwHighDateTime=0x1ca0431, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0061.814] FindNextFileW (in: hFindFile=0x5107c60, lpFindFileData=0x31e47c | out: lpFindFileData=0x31e47c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5f07a66f, ftCreationTime.dwHighDateTime=0x1ca040c, ftLastAccessTime.dwLowDateTime=0x5f07a66f, ftLastAccessTime.dwHighDateTime=0x1ca040c, ftLastWriteTime.dwLowDateTime=0xc76b3ce5, ftLastWriteTime.dwHighDateTime=0x1c9ea0e, nFileSizeHigh=0x0, nFileSizeLow=0x1fad1, dwReserved0=0x0, dwReserved1=0x0, cFileName="background.png", cAlternateFileName="")) returned 1 [0061.814] FindNextFileW (in: hFindFile=0x5107c60, lpFindFileData=0x31e47c | out: lpFindFileData=0x31e47c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc7c5b0d9, ftCreationTime.dwHighDateTime=0x1c9ea0e, ftLastAccessTime.dwLowDateTime=0xc7c5b0d9, ftLastAccessTime.dwHighDateTime=0x1c9ea0e, ftLastWriteTime.dwLowDateTime=0xc7c5b0d9, ftLastWriteTime.dwHighDateTime=0x1c9ea0e, nFileSizeHigh=0x0, nFileSizeLow=0xb61, dwReserved0=0x0, dwReserved1=0x0, cFileName="behavior.xml", cAlternateFileName="")) returned 1 [0061.814] FindNextFileW (in: hFindFile=0x5107c60, lpFindFileData=0x31e47c | out: lpFindFileData=0x31e47c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5f07a66f, ftCreationTime.dwHighDateTime=0x1ca040c, ftLastAccessTime.dwLowDateTime=0x5f07a66f, ftLastAccessTime.dwHighDateTime=0x1ca040c, ftLastWriteTime.dwLowDateTime=0xc76b3ce5, ftLastWriteTime.dwHighDateTime=0x1c9ea0e, nFileSizeHigh=0x0, nFileSizeLow=0xadc8, dwReserved0=0x0, dwReserved1=0x0, cFileName="device.png", cAlternateFileName="")) returned 1 [0061.814] FindNextFileW (in: hFindFile=0x5107c60, lpFindFileData=0x31e47c | out: lpFindFileData=0x31e47c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5f0a07cc, ftCreationTime.dwHighDateTime=0x1ca040c, ftLastAccessTime.dwLowDateTime=0x5f0a07cc, ftLastAccessTime.dwHighDateTime=0x1ca040c, ftLastWriteTime.dwLowDateTime=0xc76d9e43, ftLastWriteTime.dwHighDateTime=0x1c9ea0e, nFileSizeHigh=0x0, nFileSizeLow=0x70c1, dwReserved0=0x0, dwReserved1=0x0, cFileName="overlay.png", cAlternateFileName="")) returned 1 [0061.814] FindNextFileW (in: hFindFile=0x5107c60, lpFindFileData=0x31e47c | out: lpFindFileData=0x31e47c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5f0c6929, ftCreationTime.dwHighDateTime=0x1ca040c, ftLastAccessTime.dwLowDateTime=0x5f0c6929, ftLastAccessTime.dwHighDateTime=0x1ca040c, ftLastWriteTime.dwLowDateTime=0xc76d9e43, ftLastWriteTime.dwHighDateTime=0x1c9ea0e, nFileSizeHigh=0x0, nFileSizeLow=0x99d3, dwReserved0=0x0, dwReserved1=0x0, cFileName="superbar.png", cAlternateFileName="")) returned 1 [0061.814] FindNextFileW (in: hFindFile=0x5107c60, lpFindFileData=0x31e47c | out: lpFindFileData=0x31e47c*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0061.814] FindClose (in: hFindFile=0x5107c60 | out: hFindFile=0x5107c60) returned 1 [0061.815] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e704) returned 1 [0061.815] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e710) returned 1 [0061.815] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e744) returned 1 [0061.815] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\Device Stage\\Device\\{113527a4-45d4-4b6f-b567-97838f1b04b0}", nBufferLength=0x105, lpBuffer=0x31e24c, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\Device Stage\\Device\\{113527a4-45d4-4b6f-b567-97838f1b04b0}", lpFilePart=0x0) returned 0x53 [0061.815] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\Device Stage\\Device\\{113527a4-45d4-4b6f-b567-97838f1b04b0}\\", nBufferLength=0x105, lpBuffer=0x31e220, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\Device Stage\\Device\\{113527a4-45d4-4b6f-b567-97838f1b04b0}\\", lpFilePart=0x0) returned 0x54 [0061.815] FindFirstFileW (in: lpFileName="C:\\ProgramData\\Microsoft\\Device Stage\\Device\\{113527a4-45d4-4b6f-b567-97838f1b04b0}\\*", lpFindFileData=0x31e46c | out: lpFindFileData=0x31e46c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd96989e, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd96989e, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xfd96989e, ftLastWriteTime.dwHighDateTime=0x1ca0431, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5107c60 [0061.816] FindNextFileW (in: hFindFile=0x5107c60, lpFindFileData=0x31e47c | out: lpFindFileData=0x31e47c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd96989e, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd96989e, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xfd96989e, ftLastWriteTime.dwHighDateTime=0x1ca0431, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0061.816] FindNextFileW (in: hFindFile=0x5107c60, lpFindFileData=0x31e47c | out: lpFindFileData=0x31e47c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5f07a66f, ftCreationTime.dwHighDateTime=0x1ca040c, ftLastAccessTime.dwLowDateTime=0x5f07a66f, ftLastAccessTime.dwHighDateTime=0x1ca040c, ftLastWriteTime.dwLowDateTime=0xc76b3ce5, ftLastWriteTime.dwHighDateTime=0x1c9ea0e, nFileSizeHigh=0x0, nFileSizeLow=0x1fad1, dwReserved0=0x0, dwReserved1=0x0, cFileName="background.png", cAlternateFileName="")) returned 1 [0061.816] FindNextFileW (in: hFindFile=0x5107c60, lpFindFileData=0x31e47c | out: lpFindFileData=0x31e47c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc7c5b0d9, ftCreationTime.dwHighDateTime=0x1c9ea0e, ftLastAccessTime.dwLowDateTime=0xc7c5b0d9, ftLastAccessTime.dwHighDateTime=0x1c9ea0e, ftLastWriteTime.dwLowDateTime=0xc7c5b0d9, ftLastWriteTime.dwHighDateTime=0x1c9ea0e, nFileSizeHigh=0x0, nFileSizeLow=0xb61, dwReserved0=0x0, dwReserved1=0x0, cFileName="behavior.xml", cAlternateFileName="")) returned 1 [0061.816] FindNextFileW (in: hFindFile=0x5107c60, lpFindFileData=0x31e47c | out: lpFindFileData=0x31e47c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5f07a66f, ftCreationTime.dwHighDateTime=0x1ca040c, ftLastAccessTime.dwLowDateTime=0x5f07a66f, ftLastAccessTime.dwHighDateTime=0x1ca040c, ftLastWriteTime.dwLowDateTime=0xc76b3ce5, ftLastWriteTime.dwHighDateTime=0x1c9ea0e, nFileSizeHigh=0x0, nFileSizeLow=0xadc8, dwReserved0=0x0, dwReserved1=0x0, cFileName="device.png", cAlternateFileName="")) returned 1 [0061.816] FindNextFileW (in: hFindFile=0x5107c60, lpFindFileData=0x31e47c | out: lpFindFileData=0x31e47c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5f0a07cc, ftCreationTime.dwHighDateTime=0x1ca040c, ftLastAccessTime.dwLowDateTime=0x5f0a07cc, ftLastAccessTime.dwHighDateTime=0x1ca040c, ftLastWriteTime.dwLowDateTime=0xc76d9e43, ftLastWriteTime.dwHighDateTime=0x1c9ea0e, nFileSizeHigh=0x0, nFileSizeLow=0x70c1, dwReserved0=0x0, dwReserved1=0x0, cFileName="overlay.png", cAlternateFileName="")) returned 1 [0061.816] FindNextFileW (in: hFindFile=0x5107c60, lpFindFileData=0x31e47c | out: lpFindFileData=0x31e47c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5f0c6929, ftCreationTime.dwHighDateTime=0x1ca040c, ftLastAccessTime.dwLowDateTime=0x5f0c6929, ftLastAccessTime.dwHighDateTime=0x1ca040c, ftLastWriteTime.dwLowDateTime=0xc76d9e43, ftLastWriteTime.dwHighDateTime=0x1c9ea0e, nFileSizeHigh=0x0, nFileSizeLow=0x99d3, dwReserved0=0x0, dwReserved1=0x0, cFileName="superbar.png", cAlternateFileName="")) returned 1 [0061.816] FindNextFileW (in: hFindFile=0x5107c60, lpFindFileData=0x31e47c | out: lpFindFileData=0x31e47c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5f0c6929, ftCreationTime.dwHighDateTime=0x1ca040c, ftLastAccessTime.dwLowDateTime=0x5f0c6929, ftLastAccessTime.dwHighDateTime=0x1ca040c, ftLastWriteTime.dwLowDateTime=0xc76d9e43, ftLastWriteTime.dwHighDateTime=0x1c9ea0e, nFileSizeHigh=0x0, nFileSizeLow=0x99d3, dwReserved0=0x0, dwReserved1=0x0, cFileName="superbar.png", cAlternateFileName="")) returned 0 [0061.816] FindClose (in: hFindFile=0x5107c60 | out: hFindFile=0x5107c60) returned 1 [0061.817] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e704) returned 1 [0061.817] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e710) returned 1 [0061.817] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\Device Stage\\Device\\{113527a4-45d4-4b6f-b567-97838f1b04b0}\\background.png", nBufferLength=0x105, lpBuffer=0x31e11c, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\Device Stage\\Device\\{113527a4-45d4-4b6f-b567-97838f1b04b0}\\background.png", lpFilePart=0x0) returned 0x62 [0061.817] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e610) returned 1 [0061.817] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft\\Device Stage\\Device\\{113527a4-45d4-4b6f-b567-97838f1b04b0}\\background.png" (normalized: "c:\\programdata\\microsoft\\device stage\\device\\{113527a4-45d4-4b6f-b567-97838f1b04b0}\\background.png"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x178 [0061.818] GetFileType (hFile=0x178) returned 0x1 [0061.818] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e60c) returned 1 [0061.818] GetFileType (hFile=0x178) returned 0x1 [0061.818] GetFileSize (in: hFile=0x178, lpFileSizeHigh=0x31e718 | out: lpFileSizeHigh=0x31e718*=0x0) returned 0x1fad1 [0061.818] ReadFile (in: hFile=0x178, lpBuffer=0x393a700, nNumberOfBytesToRead=0x1fad1, lpNumberOfBytesRead=0x31e6c4, lpOverlapped=0x0 | out: lpBuffer=0x393a700*, lpNumberOfBytesRead=0x31e6c4*=0x1fad1, lpOverlapped=0x0) returned 1 [0061.873] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\Device Stage\\Device\\{113527a4-45d4-4b6f-b567-97838f1b04b0}\\background.png", nBufferLength=0x105, lpBuffer=0x31e108, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\Device Stage\\Device\\{113527a4-45d4-4b6f-b567-97838f1b04b0}\\background.png", lpFilePart=0x0) returned 0x62 [0061.873] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e5fc) returned 1 [0061.874] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft\\Device Stage\\Device\\{113527a4-45d4-4b6f-b567-97838f1b04b0}\\background.png" (normalized: "c:\\programdata\\microsoft\\device stage\\device\\{113527a4-45d4-4b6f-b567-97838f1b04b0}\\background.png"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0xffffffff [0061.875] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31d438) returned 1 [0061.875] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e744) returned 1 [0061.875] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\Device Stage\\Device\\{8702d817-5aad-4674-9ef3-4d3decd87120}", nBufferLength=0x105, lpBuffer=0x31e24c, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\Device Stage\\Device\\{8702d817-5aad-4674-9ef3-4d3decd87120}", lpFilePart=0x0) returned 0x53 [0061.875] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\Device Stage\\Device\\{8702d817-5aad-4674-9ef3-4d3decd87120}\\", nBufferLength=0x105, lpBuffer=0x31e220, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\Device Stage\\Device\\{8702d817-5aad-4674-9ef3-4d3decd87120}\\", lpFilePart=0x0) returned 0x54 [0061.875] FindFirstFileW (in: lpFileName="C:\\ProgramData\\Microsoft\\Device Stage\\Device\\{8702d817-5aad-4674-9ef3-4d3decd87120}\\*", lpFindFileData=0x31e46c | out: lpFindFileData=0x31e46c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd96989e, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd96989e, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xfd96989e, ftLastWriteTime.dwHighDateTime=0x1ca0431, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x382000 [0061.876] FindNextFileW (in: hFindFile=0x382000, lpFindFileData=0x31e47c | out: lpFindFileData=0x31e47c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd96989e, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd96989e, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xfd96989e, ftLastWriteTime.dwHighDateTime=0x1ca0431, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0061.876] FindNextFileW (in: hFindFile=0x382000, lpFindFileData=0x31e47c | out: lpFindFileData=0x31e47c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9c0af2f7, ftCreationTime.dwHighDateTime=0x1c9ea0e, ftLastAccessTime.dwLowDateTime=0x9c0af2f7, ftLastAccessTime.dwHighDateTime=0x1c9ea0e, ftLastWriteTime.dwLowDateTime=0x9c0af2f7, ftLastWriteTime.dwHighDateTime=0x1c9ea0e, nFileSizeHigh=0x0, nFileSizeLow=0x1fad1, dwReserved0=0x0, dwReserved1=0x0, cFileName="background.png", cAlternateFileName="")) returned 1 [0061.876] FindNextFileW (in: hFindFile=0x382000, lpFindFileData=0x31e47c | out: lpFindFileData=0x31e47c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd2feb941, ftCreationTime.dwHighDateTime=0x1ca0407, ftLastAccessTime.dwLowDateTime=0xd2feb941, ftLastAccessTime.dwHighDateTime=0x1ca0407, ftLastWriteTime.dwLowDateTime=0x9c0d5455, ftLastWriteTime.dwHighDateTime=0x1c9ea0e, nFileSizeHigh=0x0, nFileSizeLow=0x769, dwReserved0=0x0, dwReserved1=0x0, cFileName="behavior.xml", cAlternateFileName="")) returned 1 [0061.876] FindNextFileW (in: hFindFile=0x382000, lpFindFileData=0x31e47c | out: lpFindFileData=0x31e47c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd3011a9e, ftCreationTime.dwHighDateTime=0x1ca0407, ftLastAccessTime.dwLowDateTime=0xd3011a9e, ftLastAccessTime.dwHighDateTime=0x1ca0407, ftLastWriteTime.dwLowDateTime=0x9c0d5455, ftLastWriteTime.dwHighDateTime=0x1c9ea0e, nFileSizeHigh=0x0, nFileSizeLow=0x70c1, dwReserved0=0x0, dwReserved1=0x0, cFileName="watermark.png", cAlternateFileName="")) returned 1 [0061.876] FindNextFileW (in: hFindFile=0x382000, lpFindFileData=0x31e47c | out: lpFindFileData=0x31e47c*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0061.876] FindClose (in: hFindFile=0x382000 | out: hFindFile=0x382000) returned 1 [0061.876] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e704) returned 1 [0061.876] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e710) returned 1 [0061.876] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e744) returned 1 [0061.876] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\Device Stage\\Device\\{8702d817-5aad-4674-9ef3-4d3decd87120}", nBufferLength=0x105, lpBuffer=0x31e24c, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\Device Stage\\Device\\{8702d817-5aad-4674-9ef3-4d3decd87120}", lpFilePart=0x0) returned 0x53 [0061.877] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\Device Stage\\Device\\{8702d817-5aad-4674-9ef3-4d3decd87120}\\", nBufferLength=0x105, lpBuffer=0x31e220, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\Device Stage\\Device\\{8702d817-5aad-4674-9ef3-4d3decd87120}\\", lpFilePart=0x0) returned 0x54 [0061.877] FindFirstFileW (in: lpFileName="C:\\ProgramData\\Microsoft\\Device Stage\\Device\\{8702d817-5aad-4674-9ef3-4d3decd87120}\\*", lpFindFileData=0x31e46c | out: lpFindFileData=0x31e46c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd96989e, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd96989e, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xfd96989e, ftLastWriteTime.dwHighDateTime=0x1ca0431, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x382000 [0061.877] FindNextFileW (in: hFindFile=0x382000, lpFindFileData=0x31e47c | out: lpFindFileData=0x31e47c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd96989e, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd96989e, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xfd96989e, ftLastWriteTime.dwHighDateTime=0x1ca0431, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0061.877] FindNextFileW (in: hFindFile=0x382000, lpFindFileData=0x31e47c | out: lpFindFileData=0x31e47c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9c0af2f7, ftCreationTime.dwHighDateTime=0x1c9ea0e, ftLastAccessTime.dwLowDateTime=0x9c0af2f7, ftLastAccessTime.dwHighDateTime=0x1c9ea0e, ftLastWriteTime.dwLowDateTime=0x9c0af2f7, ftLastWriteTime.dwHighDateTime=0x1c9ea0e, nFileSizeHigh=0x0, nFileSizeLow=0x1fad1, dwReserved0=0x0, dwReserved1=0x0, cFileName="background.png", cAlternateFileName="")) returned 1 [0061.877] FindNextFileW (in: hFindFile=0x382000, lpFindFileData=0x31e47c | out: lpFindFileData=0x31e47c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd2feb941, ftCreationTime.dwHighDateTime=0x1ca0407, ftLastAccessTime.dwLowDateTime=0xd2feb941, ftLastAccessTime.dwHighDateTime=0x1ca0407, ftLastWriteTime.dwLowDateTime=0x9c0d5455, ftLastWriteTime.dwHighDateTime=0x1c9ea0e, nFileSizeHigh=0x0, nFileSizeLow=0x769, dwReserved0=0x0, dwReserved1=0x0, cFileName="behavior.xml", cAlternateFileName="")) returned 1 [0061.877] FindNextFileW (in: hFindFile=0x382000, lpFindFileData=0x31e47c | out: lpFindFileData=0x31e47c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd3011a9e, ftCreationTime.dwHighDateTime=0x1ca0407, ftLastAccessTime.dwLowDateTime=0xd3011a9e, ftLastAccessTime.dwHighDateTime=0x1ca0407, ftLastWriteTime.dwLowDateTime=0x9c0d5455, ftLastWriteTime.dwHighDateTime=0x1c9ea0e, nFileSizeHigh=0x0, nFileSizeLow=0x70c1, dwReserved0=0x0, dwReserved1=0x0, cFileName="watermark.png", cAlternateFileName="")) returned 1 [0061.877] FindNextFileW (in: hFindFile=0x382000, lpFindFileData=0x31e47c | out: lpFindFileData=0x31e47c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd3011a9e, ftCreationTime.dwHighDateTime=0x1ca0407, ftLastAccessTime.dwLowDateTime=0xd3011a9e, ftLastAccessTime.dwHighDateTime=0x1ca0407, ftLastWriteTime.dwLowDateTime=0x9c0d5455, ftLastWriteTime.dwHighDateTime=0x1c9ea0e, nFileSizeHigh=0x0, nFileSizeLow=0x70c1, dwReserved0=0x0, dwReserved1=0x0, cFileName="watermark.png", cAlternateFileName="")) returned 0 [0061.878] FindClose (in: hFindFile=0x382000 | out: hFindFile=0x382000) returned 1 [0061.878] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e704) returned 1 [0061.878] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e710) returned 1 [0061.878] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\Device Stage\\Device\\{8702d817-5aad-4674-9ef3-4d3decd87120}\\background.png", nBufferLength=0x105, lpBuffer=0x31e11c, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\Device Stage\\Device\\{8702d817-5aad-4674-9ef3-4d3decd87120}\\background.png", lpFilePart=0x0) returned 0x62 [0061.878] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e610) returned 1 [0061.878] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft\\Device Stage\\Device\\{8702d817-5aad-4674-9ef3-4d3decd87120}\\background.png" (normalized: "c:\\programdata\\microsoft\\device stage\\device\\{8702d817-5aad-4674-9ef3-4d3decd87120}\\background.png"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x178 [0061.879] GetFileType (hFile=0x178) returned 0x1 [0061.879] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e60c) returned 1 [0061.879] GetFileType (hFile=0x178) returned 0x1 [0061.879] GetFileSize (in: hFile=0x178, lpFileSizeHigh=0x31e718 | out: lpFileSizeHigh=0x31e718*=0x0) returned 0x1fad1 [0061.879] ReadFile (in: hFile=0x178, lpBuffer=0x36b7b50, nNumberOfBytesToRead=0x1fad1, lpNumberOfBytesRead=0x31e6c4, lpOverlapped=0x0 | out: lpBuffer=0x36b7b50*, lpNumberOfBytesRead=0x31e6c4*=0x1fad1, lpOverlapped=0x0) returned 1 [0061.882] CloseHandle (hObject=0x178) returned 1 [0061.926] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\Device Stage\\Device\\{8702d817-5aad-4674-9ef3-4d3decd87120}\\background.png", nBufferLength=0x105, lpBuffer=0x31e108, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\Device Stage\\Device\\{8702d817-5aad-4674-9ef3-4d3decd87120}\\background.png", lpFilePart=0x0) returned 0x62 [0061.926] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e5fc) returned 1 [0061.926] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft\\Device Stage\\Device\\{8702d817-5aad-4674-9ef3-4d3decd87120}\\background.png" (normalized: "c:\\programdata\\microsoft\\device stage\\device\\{8702d817-5aad-4674-9ef3-4d3decd87120}\\background.png"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0xffffffff [0061.927] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31d438) returned 1 [0061.927] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e7bc) returned 1 [0061.927] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\Device Stage\\Task", nBufferLength=0x105, lpBuffer=0x31e2c4, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\Device Stage\\Task", lpFilePart=0x0) returned 0x2a [0061.927] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\Device Stage\\Task\\", nBufferLength=0x105, lpBuffer=0x31e298, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\Device Stage\\Task\\", lpFilePart=0x0) returned 0x2b [0061.927] FindFirstFileW (in: lpFileName="C:\\ProgramData\\Microsoft\\Device Stage\\Task\\*", lpFindFileData=0x31e4e4 | out: lpFindFileData=0x31e4e4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xfd96989e, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd98f9f8, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xfd98f9f8, ftLastWriteTime.dwHighDateTime=0x1ca0431, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x381e80 [0061.927] FindNextFileW (in: hFindFile=0x381e80, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xfd96989e, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd98f9f8, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xfd98f9f8, ftLastWriteTime.dwHighDateTime=0x1ca0431, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0061.928] FindNextFileW (in: hFindFile=0x381e80, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd96989e, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x1d91b669, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x1d91b669, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="{07deb856-fc6e-4fb9-8add-d8f2cf8722c9}", cAlternateFileName="{07DEB~1")) returned 1 [0061.928] FindNextFileW (in: hFindFile=0x381e80, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd98f9f8, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x1d91b669, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x1d91b669, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="{e35be42d-f742-4d96-a50a-1775fb1a7a42}", cAlternateFileName="{E35BE~1")) returned 1 [0061.928] FindNextFileW (in: hFindFile=0x381e80, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd98f9f8, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x1d91b669, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x1d91b669, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="{e35be42d-f742-4d96-a50a-1775fb1a7a42}", cAlternateFileName="{E35BE~1")) returned 0 [0061.928] FindClose (in: hFindFile=0x381e80 | out: hFindFile=0x381e80) returned 1 [0061.928] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e77c) returned 1 [0061.928] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e788) returned 1 [0061.928] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e7bc) returned 1 [0061.928] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\Device Stage\\Task", nBufferLength=0x105, lpBuffer=0x31e2c4, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\Device Stage\\Task", lpFilePart=0x0) returned 0x2a [0061.928] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\Device Stage\\Task\\", nBufferLength=0x105, lpBuffer=0x31e298, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\Device Stage\\Task\\", lpFilePart=0x0) returned 0x2b [0061.928] FindFirstFileW (in: lpFileName="C:\\ProgramData\\Microsoft\\Device Stage\\Task\\*", lpFindFileData=0x31e4e4 | out: lpFindFileData=0x31e4e4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xfd96989e, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd98f9f8, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xfd98f9f8, ftLastWriteTime.dwHighDateTime=0x1ca0431, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x381e80 [0061.929] FindNextFileW (in: hFindFile=0x381e80, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xfd96989e, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd98f9f8, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xfd98f9f8, ftLastWriteTime.dwHighDateTime=0x1ca0431, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0061.929] FindNextFileW (in: hFindFile=0x381e80, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd96989e, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x1d91b669, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x1d91b669, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="{07deb856-fc6e-4fb9-8add-d8f2cf8722c9}", cAlternateFileName="{07DEB~1")) returned 1 [0061.929] FindNextFileW (in: hFindFile=0x381e80, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd98f9f8, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x1d91b669, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x1d91b669, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="{e35be42d-f742-4d96-a50a-1775fb1a7a42}", cAlternateFileName="{E35BE~1")) returned 1 [0061.929] FindNextFileW (in: hFindFile=0x381e80, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0061.929] FindClose (in: hFindFile=0x381e80 | out: hFindFile=0x381e80) returned 1 [0061.929] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e77c) returned 1 [0061.929] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e788) returned 1 [0061.929] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e744) returned 1 [0061.929] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\Device Stage\\Task\\{07deb856-fc6e-4fb9-8add-d8f2cf8722c9}", nBufferLength=0x105, lpBuffer=0x31e24c, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\Device Stage\\Task\\{07deb856-fc6e-4fb9-8add-d8f2cf8722c9}", lpFilePart=0x0) returned 0x51 [0061.929] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\Device Stage\\Task\\{07deb856-fc6e-4fb9-8add-d8f2cf8722c9}\\", nBufferLength=0x105, lpBuffer=0x31e220, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\Device Stage\\Task\\{07deb856-fc6e-4fb9-8add-d8f2cf8722c9}\\", lpFilePart=0x0) returned 0x52 [0061.929] FindFirstFileW (in: lpFileName="C:\\ProgramData\\Microsoft\\Device Stage\\Task\\{07deb856-fc6e-4fb9-8add-d8f2cf8722c9}\\*", lpFindFileData=0x31e46c | out: lpFindFileData=0x31e46c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd96989e, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x1d91b669, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x1d91b669, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x381e80 [0061.931] FindNextFileW (in: hFindFile=0x381e80, lpFindFileData=0x31e47c | out: lpFindFileData=0x31e47c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd96989e, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x1d91b669, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x1d91b669, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0061.932] FindNextFileW (in: hFindFile=0x381e80, lpFindFileData=0x31e47c | out: lpFindFileData=0x31e47c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1d91b669, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x22f23962, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x1d91b669, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="en-US", cAlternateFileName="")) returned 1 [0061.932] FindNextFileW (in: hFindFile=0x381e80, lpFindFileData=0x31e47c | out: lpFindFileData=0x31e47c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd2c7f9e6, ftCreationTime.dwHighDateTime=0x1ca0407, ftLastAccessTime.dwLowDateTime=0xd2c7f9e6, ftLastAccessTime.dwHighDateTime=0x1ca0407, ftLastWriteTime.dwLowDateTime=0x7c0e93d7, ftLastWriteTime.dwHighDateTime=0x1c9ea0e, nFileSizeHigh=0x0, nFileSizeLow=0xd0a3, dwReserved0=0x0, dwReserved1=0x0, cFileName="folder.ico", cAlternateFileName="")) returned 1 [0061.932] FindNextFileW (in: hFindFile=0x381e80, lpFindFileData=0x31e47c | out: lpFindFileData=0x31e47c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd2db04ce, ftCreationTime.dwHighDateTime=0x1ca0407, ftLastAccessTime.dwLowDateTime=0xd2db04ce, ftLastAccessTime.dwHighDateTime=0x1ca0407, ftLastWriteTime.dwLowDateTime=0x7c0e93d7, ftLastWriteTime.dwHighDateTime=0x1c9ea0e, nFileSizeHigh=0x0, nFileSizeLow=0x72ee, dwReserved0=0x0, dwReserved1=0x0, cFileName="netfol.ico", cAlternateFileName="")) returned 1 [0061.932] FindNextFileW (in: hFindFile=0x381e80, lpFindFileData=0x31e47c | out: lpFindFileData=0x31e47c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd2ca5b43, ftCreationTime.dwHighDateTime=0x1ca0407, ftLastAccessTime.dwLowDateTime=0xd2ca5b43, ftLastAccessTime.dwHighDateTime=0x1ca0407, ftLastWriteTime.dwLowDateTime=0x7c10f535, ftLastWriteTime.dwHighDateTime=0x1c9ea0e, nFileSizeHigh=0x0, nFileSizeLow=0x14668, dwReserved0=0x0, dwReserved1=0x0, cFileName="pictures.ico", cAlternateFileName="")) returned 1 [0061.932] FindNextFileW (in: hFindFile=0x381e80, lpFindFileData=0x31e47c | out: lpFindFileData=0x31e47c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd2c59889, ftCreationTime.dwHighDateTime=0x1ca0407, ftLastAccessTime.dwLowDateTime=0xd2c59889, ftLastAccessTime.dwHighDateTime=0x1ca0407, ftLastWriteTime.dwLowDateTime=0x7c1cdc0b, ftLastWriteTime.dwHighDateTime=0x1c9ea0e, nFileSizeHigh=0x0, nFileSizeLow=0x536, dwReserved0=0x0, dwReserved1=0x0, cFileName="resource.xml", cAlternateFileName="")) returned 1 [0061.932] FindNextFileW (in: hFindFile=0x381e80, lpFindFileData=0x31e47c | out: lpFindFileData=0x31e47c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd2cf1dfd, ftCreationTime.dwHighDateTime=0x1ca0407, ftLastAccessTime.dwLowDateTime=0xd2cf1dfd, ftLastAccessTime.dwHighDateTime=0x1ca0407, ftLastWriteTime.dwLowDateTime=0x7c1f3d69, ftLastWriteTime.dwHighDateTime=0x1c9ea0e, nFileSizeHigh=0x0, nFileSizeLow=0xcaa9, dwReserved0=0x0, dwReserved1=0x0, cFileName="ringtones.ico", cAlternateFileName="")) returned 1 [0061.933] FindNextFileW (in: hFindFile=0x381e80, lpFindFileData=0x31e47c | out: lpFindFileData=0x31e47c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd2d17f5a, ftCreationTime.dwHighDateTime=0x1ca0407, ftLastAccessTime.dwLowDateTime=0xd2d17f5a, ftLastAccessTime.dwHighDateTime=0x1ca0407, ftLastWriteTime.dwLowDateTime=0x7c1f3d69, ftLastWriteTime.dwHighDateTime=0x1c9ea0e, nFileSizeHigh=0x0, nFileSizeLow=0x10850, dwReserved0=0x0, dwReserved1=0x0, cFileName="settings.ico", cAlternateFileName="")) returned 1 [0061.933] FindNextFileW (in: hFindFile=0x381e80, lpFindFileData=0x31e47c | out: lpFindFileData=0x31e47c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd2d3e0b7, ftCreationTime.dwHighDateTime=0x1ca0407, ftLastAccessTime.dwLowDateTime=0xd2d3e0b7, ftLastAccessTime.dwHighDateTime=0x1ca0407, ftLastWriteTime.dwLowDateTime=0x7c219ec7, ftLastWriteTime.dwHighDateTime=0x1c9ea0e, nFileSizeHigh=0x0, nFileSizeLow=0xc04b, dwReserved0=0x0, dwReserved1=0x0, cFileName="sync.ico", cAlternateFileName="")) returned 1 [0061.933] FindNextFileW (in: hFindFile=0x381e80, lpFindFileData=0x31e47c | out: lpFindFileData=0x31e47c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7c219ec7, ftCreationTime.dwHighDateTime=0x1c9ea0e, ftLastAccessTime.dwLowDateTime=0x7c219ec7, ftLastAccessTime.dwHighDateTime=0x1c9ea0e, ftLastWriteTime.dwLowDateTime=0x7c219ec7, ftLastWriteTime.dwHighDateTime=0x1c9ea0e, nFileSizeHigh=0x0, nFileSizeLow=0x3473, dwReserved0=0x0, dwReserved1=0x0, cFileName="tasks.xml", cAlternateFileName="")) returned 1 [0061.933] FindNextFileW (in: hFindFile=0x381e80, lpFindFileData=0x31e47c | out: lpFindFileData=0x31e47c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd2d64214, ftCreationTime.dwHighDateTime=0x1ca0407, ftLastAccessTime.dwLowDateTime=0xd2d64214, ftLastAccessTime.dwHighDateTime=0x1ca0407, ftLastWriteTime.dwLowDateTime=0x7c219ec7, ftLastWriteTime.dwHighDateTime=0x1c9ea0e, nFileSizeHigh=0x0, nFileSizeLow=0x1b9f4, dwReserved0=0x0, dwReserved1=0x0, cFileName="wmp.ico", cAlternateFileName="")) returned 1 [0061.933] FindNextFileW (in: hFindFile=0x381e80, lpFindFileData=0x31e47c | out: lpFindFileData=0x31e47c*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0061.933] FindClose (in: hFindFile=0x381e80 | out: hFindFile=0x381e80) returned 1 [0061.934] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e704) returned 1 [0061.934] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e710) returned 1 [0061.934] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e744) returned 1 [0061.934] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\Device Stage\\Task\\{07deb856-fc6e-4fb9-8add-d8f2cf8722c9}", nBufferLength=0x105, lpBuffer=0x31e24c, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\Device Stage\\Task\\{07deb856-fc6e-4fb9-8add-d8f2cf8722c9}", lpFilePart=0x0) returned 0x51 [0061.934] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\Device Stage\\Task\\{07deb856-fc6e-4fb9-8add-d8f2cf8722c9}\\", nBufferLength=0x105, lpBuffer=0x31e220, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\Device Stage\\Task\\{07deb856-fc6e-4fb9-8add-d8f2cf8722c9}\\", lpFilePart=0x0) returned 0x52 [0061.934] FindFirstFileW (in: lpFileName="C:\\ProgramData\\Microsoft\\Device Stage\\Task\\{07deb856-fc6e-4fb9-8add-d8f2cf8722c9}\\*", lpFindFileData=0x31e46c | out: lpFindFileData=0x31e46c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd96989e, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x1d91b669, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x1d91b669, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x381e80 [0061.935] FindNextFileW (in: hFindFile=0x381e80, lpFindFileData=0x31e47c | out: lpFindFileData=0x31e47c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd96989e, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x1d91b669, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x1d91b669, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0061.935] FindNextFileW (in: hFindFile=0x381e80, lpFindFileData=0x31e47c | out: lpFindFileData=0x31e47c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1d91b669, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x22f23962, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x1d91b669, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="en-US", cAlternateFileName="")) returned 1 [0061.935] FindNextFileW (in: hFindFile=0x381e80, lpFindFileData=0x31e47c | out: lpFindFileData=0x31e47c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd2c7f9e6, ftCreationTime.dwHighDateTime=0x1ca0407, ftLastAccessTime.dwLowDateTime=0xd2c7f9e6, ftLastAccessTime.dwHighDateTime=0x1ca0407, ftLastWriteTime.dwLowDateTime=0x7c0e93d7, ftLastWriteTime.dwHighDateTime=0x1c9ea0e, nFileSizeHigh=0x0, nFileSizeLow=0xd0a3, dwReserved0=0x0, dwReserved1=0x0, cFileName="folder.ico", cAlternateFileName="")) returned 1 [0061.935] FindNextFileW (in: hFindFile=0x381e80, lpFindFileData=0x31e47c | out: lpFindFileData=0x31e47c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd2db04ce, ftCreationTime.dwHighDateTime=0x1ca0407, ftLastAccessTime.dwLowDateTime=0xd2db04ce, ftLastAccessTime.dwHighDateTime=0x1ca0407, ftLastWriteTime.dwLowDateTime=0x7c0e93d7, ftLastWriteTime.dwHighDateTime=0x1c9ea0e, nFileSizeHigh=0x0, nFileSizeLow=0x72ee, dwReserved0=0x0, dwReserved1=0x0, cFileName="netfol.ico", cAlternateFileName="")) returned 1 [0061.935] FindNextFileW (in: hFindFile=0x381e80, lpFindFileData=0x31e47c | out: lpFindFileData=0x31e47c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd2ca5b43, ftCreationTime.dwHighDateTime=0x1ca0407, ftLastAccessTime.dwLowDateTime=0xd2ca5b43, ftLastAccessTime.dwHighDateTime=0x1ca0407, ftLastWriteTime.dwLowDateTime=0x7c10f535, ftLastWriteTime.dwHighDateTime=0x1c9ea0e, nFileSizeHigh=0x0, nFileSizeLow=0x14668, dwReserved0=0x0, dwReserved1=0x0, cFileName="pictures.ico", cAlternateFileName="")) returned 1 [0061.936] FindNextFileW (in: hFindFile=0x381e80, lpFindFileData=0x31e47c | out: lpFindFileData=0x31e47c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd2c59889, ftCreationTime.dwHighDateTime=0x1ca0407, ftLastAccessTime.dwLowDateTime=0xd2c59889, ftLastAccessTime.dwHighDateTime=0x1ca0407, ftLastWriteTime.dwLowDateTime=0x7c1cdc0b, ftLastWriteTime.dwHighDateTime=0x1c9ea0e, nFileSizeHigh=0x0, nFileSizeLow=0x536, dwReserved0=0x0, dwReserved1=0x0, cFileName="resource.xml", cAlternateFileName="")) returned 1 [0061.936] FindNextFileW (in: hFindFile=0x381e80, lpFindFileData=0x31e47c | out: lpFindFileData=0x31e47c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd2cf1dfd, ftCreationTime.dwHighDateTime=0x1ca0407, ftLastAccessTime.dwLowDateTime=0xd2cf1dfd, ftLastAccessTime.dwHighDateTime=0x1ca0407, ftLastWriteTime.dwLowDateTime=0x7c1f3d69, ftLastWriteTime.dwHighDateTime=0x1c9ea0e, nFileSizeHigh=0x0, nFileSizeLow=0xcaa9, dwReserved0=0x0, dwReserved1=0x0, cFileName="ringtones.ico", cAlternateFileName="")) returned 1 [0061.936] FindNextFileW (in: hFindFile=0x381e80, lpFindFileData=0x31e47c | out: lpFindFileData=0x31e47c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd2d17f5a, ftCreationTime.dwHighDateTime=0x1ca0407, ftLastAccessTime.dwLowDateTime=0xd2d17f5a, ftLastAccessTime.dwHighDateTime=0x1ca0407, ftLastWriteTime.dwLowDateTime=0x7c1f3d69, ftLastWriteTime.dwHighDateTime=0x1c9ea0e, nFileSizeHigh=0x0, nFileSizeLow=0x10850, dwReserved0=0x0, dwReserved1=0x0, cFileName="settings.ico", cAlternateFileName="")) returned 1 [0061.936] FindNextFileW (in: hFindFile=0x381e80, lpFindFileData=0x31e47c | out: lpFindFileData=0x31e47c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd2d3e0b7, ftCreationTime.dwHighDateTime=0x1ca0407, ftLastAccessTime.dwLowDateTime=0xd2d3e0b7, ftLastAccessTime.dwHighDateTime=0x1ca0407, ftLastWriteTime.dwLowDateTime=0x7c219ec7, ftLastWriteTime.dwHighDateTime=0x1c9ea0e, nFileSizeHigh=0x0, nFileSizeLow=0xc04b, dwReserved0=0x0, dwReserved1=0x0, cFileName="sync.ico", cAlternateFileName="")) returned 1 [0061.936] FindNextFileW (in: hFindFile=0x381e80, lpFindFileData=0x31e47c | out: lpFindFileData=0x31e47c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7c219ec7, ftCreationTime.dwHighDateTime=0x1c9ea0e, ftLastAccessTime.dwLowDateTime=0x7c219ec7, ftLastAccessTime.dwHighDateTime=0x1c9ea0e, ftLastWriteTime.dwLowDateTime=0x7c219ec7, ftLastWriteTime.dwHighDateTime=0x1c9ea0e, nFileSizeHigh=0x0, nFileSizeLow=0x3473, dwReserved0=0x0, dwReserved1=0x0, cFileName="tasks.xml", cAlternateFileName="")) returned 1 [0061.936] FindNextFileW (in: hFindFile=0x381e80, lpFindFileData=0x31e47c | out: lpFindFileData=0x31e47c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd2d64214, ftCreationTime.dwHighDateTime=0x1ca0407, ftLastAccessTime.dwLowDateTime=0xd2d64214, ftLastAccessTime.dwHighDateTime=0x1ca0407, ftLastWriteTime.dwLowDateTime=0x7c219ec7, ftLastWriteTime.dwHighDateTime=0x1c9ea0e, nFileSizeHigh=0x0, nFileSizeLow=0x1b9f4, dwReserved0=0x0, dwReserved1=0x0, cFileName="wmp.ico", cAlternateFileName="")) returned 1 [0061.936] FindNextFileW (in: hFindFile=0x381e80, lpFindFileData=0x31e47c | out: lpFindFileData=0x31e47c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd2d64214, ftCreationTime.dwHighDateTime=0x1ca0407, ftLastAccessTime.dwLowDateTime=0xd2d64214, ftLastAccessTime.dwHighDateTime=0x1ca0407, ftLastWriteTime.dwLowDateTime=0x7c219ec7, ftLastWriteTime.dwHighDateTime=0x1c9ea0e, nFileSizeHigh=0x0, nFileSizeLow=0x1b9f4, dwReserved0=0x0, dwReserved1=0x0, cFileName="wmp.ico", cAlternateFileName="")) returned 0 [0061.937] FindClose (in: hFindFile=0x381e80 | out: hFindFile=0x381e80) returned 1 [0061.937] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e704) returned 1 [0061.937] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e710) returned 1 [0061.937] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\Device Stage\\Task\\{07deb856-fc6e-4fb9-8add-d8f2cf8722c9}\\resource.xml", nBufferLength=0x105, lpBuffer=0x31e11c, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\Device Stage\\Task\\{07deb856-fc6e-4fb9-8add-d8f2cf8722c9}\\resource.xml", lpFilePart=0x0) returned 0x5e [0061.937] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e610) returned 1 [0061.937] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft\\Device Stage\\Task\\{07deb856-fc6e-4fb9-8add-d8f2cf8722c9}\\resource.xml" (normalized: "c:\\programdata\\microsoft\\device stage\\task\\{07deb856-fc6e-4fb9-8add-d8f2cf8722c9}\\resource.xml"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x178 [0061.939] GetFileType (hFile=0x178) returned 0x1 [0061.939] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e60c) returned 1 [0061.939] GetFileType (hFile=0x178) returned 0x1 [0061.939] GetFileSize (in: hFile=0x178, lpFileSizeHigh=0x31e718 | out: lpFileSizeHigh=0x31e718*=0x0) returned 0x536 [0061.939] ReadFile (in: hFile=0x178, lpBuffer=0x2681598, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x31e6c4, lpOverlapped=0x0 | out: lpBuffer=0x2681598*, lpNumberOfBytesRead=0x31e6c4*=0x536, lpOverlapped=0x0) returned 1 [0061.941] CloseHandle (hObject=0x178) returned 1 [0061.982] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\Device Stage\\Task\\{07deb856-fc6e-4fb9-8add-d8f2cf8722c9}\\resource.xml", nBufferLength=0x105, lpBuffer=0x31e108, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\Device Stage\\Task\\{07deb856-fc6e-4fb9-8add-d8f2cf8722c9}\\resource.xml", lpFilePart=0x0) returned 0x5e [0061.982] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e5fc) returned 1 [0061.982] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft\\Device Stage\\Task\\{07deb856-fc6e-4fb9-8add-d8f2cf8722c9}\\resource.xml" (normalized: "c:\\programdata\\microsoft\\device stage\\task\\{07deb856-fc6e-4fb9-8add-d8f2cf8722c9}\\resource.xml"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0xffffffff [0061.984] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31d438) returned 1 [0061.984] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e744) returned 1 [0061.984] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\Device Stage\\Task\\{e35be42d-f742-4d96-a50a-1775fb1a7a42}", nBufferLength=0x105, lpBuffer=0x31e24c, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\Device Stage\\Task\\{e35be42d-f742-4d96-a50a-1775fb1a7a42}", lpFilePart=0x0) returned 0x51 [0061.984] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\Device Stage\\Task\\{e35be42d-f742-4d96-a50a-1775fb1a7a42}\\", nBufferLength=0x105, lpBuffer=0x31e220, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\Device Stage\\Task\\{e35be42d-f742-4d96-a50a-1775fb1a7a42}\\", lpFilePart=0x0) returned 0x52 [0061.984] FindFirstFileW (in: lpFileName="C:\\ProgramData\\Microsoft\\Device Stage\\Task\\{e35be42d-f742-4d96-a50a-1775fb1a7a42}\\*", lpFindFileData=0x31e46c | out: lpFindFileData=0x31e46c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd98f9f8, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x1d91b669, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x1d91b669, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x381fc0 [0061.985] FindNextFileW (in: hFindFile=0x381fc0, lpFindFileData=0x31e47c | out: lpFindFileData=0x31e47c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd98f9f8, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x1d91b669, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x1d91b669, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0061.986] FindNextFileW (in: hFindFile=0x381fc0, lpFindFileData=0x31e47c | out: lpFindFileData=0x31e47c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1d91b669, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x22f23962, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x1d91b669, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="en-US", cAlternateFileName="")) returned 1 [0061.986] FindNextFileW (in: hFindFile=0x381fc0, lpFindFileData=0x31e47c | out: lpFindFileData=0x31e47c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5f15ee9d, ftCreationTime.dwHighDateTime=0x1ca040c, ftLastAccessTime.dwLowDateTime=0x5f15ee9d, ftLastAccessTime.dwHighDateTime=0x1ca040c, ftLastWriteTime.dwLowDateTime=0xc78a2eab, ftLastWriteTime.dwHighDateTime=0x1c9ea0e, nFileSizeHigh=0x0, nFileSizeLow=0xd0a3, dwReserved0=0x0, dwReserved1=0x0, cFileName="folder.ico", cAlternateFileName="")) returned 1 [0061.986] FindNextFileW (in: hFindFile=0x381fc0, lpFindFileData=0x31e47c | out: lpFindFileData=0x31e47c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5f0eca86, ftCreationTime.dwHighDateTime=0x1ca040c, ftLastAccessTime.dwLowDateTime=0x5f0eca86, ftLastAccessTime.dwHighDateTime=0x1ca040c, ftLastWriteTime.dwLowDateTime=0xc78c9009, ftLastWriteTime.dwHighDateTime=0x1c9ea0e, nFileSizeHigh=0x0, nFileSizeLow=0xe3c8, dwReserved0=0x0, dwReserved1=0x0, cFileName="print_pref.ico", cAlternateFileName="")) returned 1 [0061.986] FindNextFileW (in: hFindFile=0x381fc0, lpFindFileData=0x31e47c | out: lpFindFileData=0x31e47c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5f0eca86, ftCreationTime.dwHighDateTime=0x1ca040c, ftLastAccessTime.dwLowDateTime=0x5f0eca86, ftLastAccessTime.dwHighDateTime=0x1ca040c, ftLastWriteTime.dwLowDateTime=0xc78c9009, ftLastWriteTime.dwHighDateTime=0x1c9ea0e, nFileSizeHigh=0x0, nFileSizeLow=0xebb8, dwReserved0=0x0, dwReserved1=0x0, cFileName="print_property.ico", cAlternateFileName="")) returned 1 [0061.986] FindNextFileW (in: hFindFile=0x381fc0, lpFindFileData=0x31e47c | out: lpFindFileData=0x31e47c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5f112be3, ftCreationTime.dwHighDateTime=0x1ca040c, ftLastAccessTime.dwLowDateTime=0x5f112be3, ftLastAccessTime.dwHighDateTime=0x1ca040c, ftLastWriteTime.dwLowDateTime=0xc7be8cbf, ftLastWriteTime.dwHighDateTime=0x1c9ea0e, nFileSizeHigh=0x0, nFileSizeLow=0xdff5, dwReserved0=0x0, dwReserved1=0x0, cFileName="print_queue.ico", cAlternateFileName="")) returned 1 [0061.986] FindNextFileW (in: hFindFile=0x381fc0, lpFindFileData=0x31e47c | out: lpFindFileData=0x31e47c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5f138d40, ftCreationTime.dwHighDateTime=0x1ca040c, ftLastAccessTime.dwLowDateTime=0x5f138d40, ftLastAccessTime.dwHighDateTime=0x1ca040c, ftLastWriteTime.dwLowDateTime=0xc7c0ee1d, ftLastWriteTime.dwHighDateTime=0x1c9ea0e, nFileSizeHigh=0x0, nFileSizeLow=0xec75, dwReserved0=0x0, dwReserved1=0x0, cFileName="scan_.ico", cAlternateFileName="")) returned 1 [0061.986] FindNextFileW (in: hFindFile=0x381fc0, lpFindFileData=0x31e47c | out: lpFindFileData=0x31e47c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5f15ee9d, ftCreationTime.dwHighDateTime=0x1ca040c, ftLastAccessTime.dwLowDateTime=0x5f15ee9d, ftLastAccessTime.dwHighDateTime=0x1ca040c, ftLastWriteTime.dwLowDateTime=0xc7c0ee1d, ftLastWriteTime.dwHighDateTime=0x1c9ea0e, nFileSizeHigh=0x0, nFileSizeLow=0x10654, dwReserved0=0x0, dwReserved1=0x0, cFileName="scan_property.ico", cAlternateFileName="")) returned 1 [0061.987] FindNextFileW (in: hFindFile=0x381fc0, lpFindFileData=0x31e47c | out: lpFindFileData=0x31e47c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5f138d40, ftCreationTime.dwHighDateTime=0x1ca040c, ftLastAccessTime.dwLowDateTime=0x5f138d40, ftLastAccessTime.dwHighDateTime=0x1ca040c, ftLastWriteTime.dwLowDateTime=0xc7c34f7b, ftLastWriteTime.dwHighDateTime=0x1c9ea0e, nFileSizeHigh=0x0, nFileSizeLow=0xf8c2, dwReserved0=0x0, dwReserved1=0x0, cFileName="scan_settings.ico", cAlternateFileName="")) returned 1 [0061.987] FindNextFileW (in: hFindFile=0x381fc0, lpFindFileData=0x31e47c | out: lpFindFileData=0x31e47c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5f054512, ftCreationTime.dwHighDateTime=0x1ca040c, ftLastAccessTime.dwLowDateTime=0x5f054512, ftLastAccessTime.dwHighDateTime=0x1ca040c, ftLastWriteTime.dwLowDateTime=0xc7d3f90d, ftLastWriteTime.dwHighDateTime=0x1c9ea0e, nFileSizeHigh=0x0, nFileSizeLow=0x2c64, dwReserved0=0x0, dwReserved1=0x0, cFileName="tasks.xml", cAlternateFileName="")) returned 1 [0061.987] FindNextFileW (in: hFindFile=0x381fc0, lpFindFileData=0x31e47c | out: lpFindFileData=0x31e47c*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0061.987] FindClose (in: hFindFile=0x381fc0 | out: hFindFile=0x381fc0) returned 1 [0061.988] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e704) returned 1 [0061.988] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e710) returned 1 [0061.988] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e744) returned 1 [0061.988] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\Device Stage\\Task\\{e35be42d-f742-4d96-a50a-1775fb1a7a42}", nBufferLength=0x105, lpBuffer=0x31e24c, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\Device Stage\\Task\\{e35be42d-f742-4d96-a50a-1775fb1a7a42}", lpFilePart=0x0) returned 0x51 [0061.988] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\Device Stage\\Task\\{e35be42d-f742-4d96-a50a-1775fb1a7a42}\\", nBufferLength=0x105, lpBuffer=0x31e220, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\Device Stage\\Task\\{e35be42d-f742-4d96-a50a-1775fb1a7a42}\\", lpFilePart=0x0) returned 0x52 [0061.988] FindFirstFileW (in: lpFileName="C:\\ProgramData\\Microsoft\\Device Stage\\Task\\{e35be42d-f742-4d96-a50a-1775fb1a7a42}\\*", lpFindFileData=0x31e46c | out: lpFindFileData=0x31e46c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd98f9f8, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x1d91b669, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x1d91b669, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x381fc0 [0061.989] FindNextFileW (in: hFindFile=0x381fc0, lpFindFileData=0x31e47c | out: lpFindFileData=0x31e47c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd98f9f8, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x1d91b669, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x1d91b669, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0061.989] FindNextFileW (in: hFindFile=0x381fc0, lpFindFileData=0x31e47c | out: lpFindFileData=0x31e47c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1d91b669, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x22f23962, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x1d91b669, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="en-US", cAlternateFileName="")) returned 1 [0061.989] FindNextFileW (in: hFindFile=0x381fc0, lpFindFileData=0x31e47c | out: lpFindFileData=0x31e47c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5f15ee9d, ftCreationTime.dwHighDateTime=0x1ca040c, ftLastAccessTime.dwLowDateTime=0x5f15ee9d, ftLastAccessTime.dwHighDateTime=0x1ca040c, ftLastWriteTime.dwLowDateTime=0xc78a2eab, ftLastWriteTime.dwHighDateTime=0x1c9ea0e, nFileSizeHigh=0x0, nFileSizeLow=0xd0a3, dwReserved0=0x0, dwReserved1=0x0, cFileName="folder.ico", cAlternateFileName="")) returned 1 [0061.989] FindNextFileW (in: hFindFile=0x381fc0, lpFindFileData=0x31e47c | out: lpFindFileData=0x31e47c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5f0eca86, ftCreationTime.dwHighDateTime=0x1ca040c, ftLastAccessTime.dwLowDateTime=0x5f0eca86, ftLastAccessTime.dwHighDateTime=0x1ca040c, ftLastWriteTime.dwLowDateTime=0xc78c9009, ftLastWriteTime.dwHighDateTime=0x1c9ea0e, nFileSizeHigh=0x0, nFileSizeLow=0xe3c8, dwReserved0=0x0, dwReserved1=0x0, cFileName="print_pref.ico", cAlternateFileName="")) returned 1 [0061.989] FindNextFileW (in: hFindFile=0x381fc0, lpFindFileData=0x31e47c | out: lpFindFileData=0x31e47c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5f0eca86, ftCreationTime.dwHighDateTime=0x1ca040c, ftLastAccessTime.dwLowDateTime=0x5f0eca86, ftLastAccessTime.dwHighDateTime=0x1ca040c, ftLastWriteTime.dwLowDateTime=0xc78c9009, ftLastWriteTime.dwHighDateTime=0x1c9ea0e, nFileSizeHigh=0x0, nFileSizeLow=0xebb8, dwReserved0=0x0, dwReserved1=0x0, cFileName="print_property.ico", cAlternateFileName="")) returned 1 [0061.989] FindNextFileW (in: hFindFile=0x381fc0, lpFindFileData=0x31e47c | out: lpFindFileData=0x31e47c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5f112be3, ftCreationTime.dwHighDateTime=0x1ca040c, ftLastAccessTime.dwLowDateTime=0x5f112be3, ftLastAccessTime.dwHighDateTime=0x1ca040c, ftLastWriteTime.dwLowDateTime=0xc7be8cbf, ftLastWriteTime.dwHighDateTime=0x1c9ea0e, nFileSizeHigh=0x0, nFileSizeLow=0xdff5, dwReserved0=0x0, dwReserved1=0x0, cFileName="print_queue.ico", cAlternateFileName="")) returned 1 [0061.990] FindNextFileW (in: hFindFile=0x381fc0, lpFindFileData=0x31e47c | out: lpFindFileData=0x31e47c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5f138d40, ftCreationTime.dwHighDateTime=0x1ca040c, ftLastAccessTime.dwLowDateTime=0x5f138d40, ftLastAccessTime.dwHighDateTime=0x1ca040c, ftLastWriteTime.dwLowDateTime=0xc7c0ee1d, ftLastWriteTime.dwHighDateTime=0x1c9ea0e, nFileSizeHigh=0x0, nFileSizeLow=0xec75, dwReserved0=0x0, dwReserved1=0x0, cFileName="scan_.ico", cAlternateFileName="")) returned 1 [0061.990] FindNextFileW (in: hFindFile=0x381fc0, lpFindFileData=0x31e47c | out: lpFindFileData=0x31e47c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5f15ee9d, ftCreationTime.dwHighDateTime=0x1ca040c, ftLastAccessTime.dwLowDateTime=0x5f15ee9d, ftLastAccessTime.dwHighDateTime=0x1ca040c, ftLastWriteTime.dwLowDateTime=0xc7c0ee1d, ftLastWriteTime.dwHighDateTime=0x1c9ea0e, nFileSizeHigh=0x0, nFileSizeLow=0x10654, dwReserved0=0x0, dwReserved1=0x0, cFileName="scan_property.ico", cAlternateFileName="")) returned 1 [0061.990] FindNextFileW (in: hFindFile=0x381fc0, lpFindFileData=0x31e47c | out: lpFindFileData=0x31e47c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5f138d40, ftCreationTime.dwHighDateTime=0x1ca040c, ftLastAccessTime.dwLowDateTime=0x5f138d40, ftLastAccessTime.dwHighDateTime=0x1ca040c, ftLastWriteTime.dwLowDateTime=0xc7c34f7b, ftLastWriteTime.dwHighDateTime=0x1c9ea0e, nFileSizeHigh=0x0, nFileSizeLow=0xf8c2, dwReserved0=0x0, dwReserved1=0x0, cFileName="scan_settings.ico", cAlternateFileName="")) returned 1 [0061.990] FindNextFileW (in: hFindFile=0x381fc0, lpFindFileData=0x31e47c | out: lpFindFileData=0x31e47c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5f054512, ftCreationTime.dwHighDateTime=0x1ca040c, ftLastAccessTime.dwLowDateTime=0x5f054512, ftLastAccessTime.dwHighDateTime=0x1ca040c, ftLastWriteTime.dwLowDateTime=0xc7d3f90d, ftLastWriteTime.dwHighDateTime=0x1c9ea0e, nFileSizeHigh=0x0, nFileSizeLow=0x2c64, dwReserved0=0x0, dwReserved1=0x0, cFileName="tasks.xml", cAlternateFileName="")) returned 1 [0061.990] FindNextFileW (in: hFindFile=0x381fc0, lpFindFileData=0x31e47c | out: lpFindFileData=0x31e47c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5f054512, ftCreationTime.dwHighDateTime=0x1ca040c, ftLastAccessTime.dwLowDateTime=0x5f054512, ftLastAccessTime.dwHighDateTime=0x1ca040c, ftLastWriteTime.dwLowDateTime=0xc7d3f90d, ftLastWriteTime.dwHighDateTime=0x1c9ea0e, nFileSizeHigh=0x0, nFileSizeLow=0x2c64, dwReserved0=0x0, dwReserved1=0x0, cFileName="tasks.xml", cAlternateFileName="")) returned 0 [0061.990] FindClose (in: hFindFile=0x381fc0 | out: hFindFile=0x381fc0) returned 1 [0061.991] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e704) returned 1 [0061.991] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e710) returned 1 [0061.991] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\Device Stage\\Task\\{e35be42d-f742-4d96-a50a-1775fb1a7a42}\\tasks.xml", nBufferLength=0x105, lpBuffer=0x31e11c, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\Device Stage\\Task\\{e35be42d-f742-4d96-a50a-1775fb1a7a42}\\tasks.xml", lpFilePart=0x0) returned 0x5b [0061.991] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e610) returned 1 [0061.991] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft\\Device Stage\\Task\\{e35be42d-f742-4d96-a50a-1775fb1a7a42}\\tasks.xml" (normalized: "c:\\programdata\\microsoft\\device stage\\task\\{e35be42d-f742-4d96-a50a-1775fb1a7a42}\\tasks.xml"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x178 [0061.993] GetFileType (hFile=0x178) returned 0x1 [0061.993] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e60c) returned 1 [0061.993] GetFileType (hFile=0x178) returned 0x1 [0061.993] GetFileSize (in: hFile=0x178, lpFileSizeHigh=0x31e718 | out: lpFileSizeHigh=0x31e718*=0x0) returned 0x2c64 [0061.993] ReadFile (in: hFile=0x178, lpBuffer=0x26d51f0, nNumberOfBytesToRead=0x2c64, lpNumberOfBytesRead=0x31e6c4, lpOverlapped=0x0 | out: lpBuffer=0x26d51f0*, lpNumberOfBytesRead=0x31e6c4*=0x2c64, lpOverlapped=0x0) returned 1 [0061.995] CloseHandle (hObject=0x178) returned 1 [0062.036] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\Device Stage\\Task\\{e35be42d-f742-4d96-a50a-1775fb1a7a42}\\tasks.xml", nBufferLength=0x105, lpBuffer=0x31e108, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\Device Stage\\Task\\{e35be42d-f742-4d96-a50a-1775fb1a7a42}\\tasks.xml", lpFilePart=0x0) returned 0x5b [0062.036] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e5fc) returned 1 [0062.036] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft\\Device Stage\\Task\\{e35be42d-f742-4d96-a50a-1775fb1a7a42}\\tasks.xml" (normalized: "c:\\programdata\\microsoft\\device stage\\task\\{e35be42d-f742-4d96-a50a-1775fb1a7a42}\\tasks.xml"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0xffffffff [0062.037] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31d438) returned 1 [0062.037] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e834) returned 1 [0062.038] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\DeviceSync", nBufferLength=0x105, lpBuffer=0x31e33c, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\DeviceSync", lpFilePart=0x0) returned 0x23 [0062.038] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\DeviceSync\\", nBufferLength=0x105, lpBuffer=0x31e310, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\DeviceSync\\", lpFilePart=0x0) returned 0x24 [0062.038] FindFirstFileW (in: lpFileName="C:\\ProgramData\\Microsoft\\DeviceSync\\*", lpFindFileData=0x31e55c | out: lpFindFileData=0x31e55c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd98f9f8, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd98f9f8, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xd789d88f, ftLastWriteTime.dwHighDateTime=0x1ca042b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x381e00 [0062.039] FindNextFileW (in: hFindFile=0x381e00, lpFindFileData=0x31e56c | out: lpFindFileData=0x31e56c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd98f9f8, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd98f9f8, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xd789d88f, ftLastWriteTime.dwHighDateTime=0x1ca042b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0062.039] FindNextFileW (in: hFindFile=0x381e00, lpFindFileData=0x31e56c | out: lpFindFileData=0x31e56c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd98f9f8, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd98f9f8, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xd789d88f, ftLastWriteTime.dwHighDateTime=0x1ca042b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 0 [0062.039] FindClose (in: hFindFile=0x381e00 | out: hFindFile=0x381e00) returned 1 [0062.039] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e7f4) returned 1 [0062.039] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e800) returned 1 [0062.039] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e834) returned 1 [0062.039] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\DeviceSync", nBufferLength=0x105, lpBuffer=0x31e33c, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\DeviceSync", lpFilePart=0x0) returned 0x23 [0062.039] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\DeviceSync\\", nBufferLength=0x105, lpBuffer=0x31e310, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\DeviceSync\\", lpFilePart=0x0) returned 0x24 [0062.039] FindFirstFileW (in: lpFileName="C:\\ProgramData\\Microsoft\\DeviceSync\\*", lpFindFileData=0x31e55c | out: lpFindFileData=0x31e55c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd98f9f8, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd98f9f8, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xd789d88f, ftLastWriteTime.dwHighDateTime=0x1ca042b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x381e00 [0062.039] FindNextFileW (in: hFindFile=0x381e00, lpFindFileData=0x31e56c | out: lpFindFileData=0x31e56c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd98f9f8, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd98f9f8, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xd789d88f, ftLastWriteTime.dwHighDateTime=0x1ca042b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0062.040] FindNextFileW (in: hFindFile=0x381e00, lpFindFileData=0x31e56c | out: lpFindFileData=0x31e56c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd98f9f8, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd98f9f8, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xd789d88f, ftLastWriteTime.dwHighDateTime=0x1ca042b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 0 [0062.040] FindClose (in: hFindFile=0x381e00 | out: hFindFile=0x381e00) returned 1 [0062.040] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e7f4) returned 1 [0062.040] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e800) returned 1 [0062.040] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e834) returned 1 [0062.040] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\DRM", nBufferLength=0x105, lpBuffer=0x31e33c, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\DRM", lpFilePart=0x0) returned 0x1c [0062.040] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\DRM\\", nBufferLength=0x105, lpBuffer=0x31e310, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\DRM\\", lpFilePart=0x0) returned 0x1d [0062.040] FindFirstFileW (in: lpFileName="C:\\ProgramData\\Microsoft\\DRM\\*", lpFindFileData=0x31e55c | out: lpFindFileData=0x31e55c*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xfd98f9f8, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd98f9f8, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xfd98f9f8, ftLastWriteTime.dwHighDateTime=0x1ca0431, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x381e00 [0062.040] FindNextFileW (in: hFindFile=0x381e00, lpFindFileData=0x31e56c | out: lpFindFileData=0x31e56c*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xfd98f9f8, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd98f9f8, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xfd98f9f8, ftLastWriteTime.dwHighDateTime=0x1ca0431, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0062.041] FindNextFileW (in: hFindFile=0x381e00, lpFindFileData=0x31e56c | out: lpFindFileData=0x31e56c*(dwFileAttributes=0x16, ftCreationTime.dwLowDateTime=0xfd98f9f8, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd98f9f8, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xba6f6d7d, ftLastWriteTime.dwHighDateTime=0x1ca042b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Server", cAlternateFileName="")) returned 1 [0062.041] FindNextFileW (in: hFindFile=0x381e00, lpFindFileData=0x31e56c | out: lpFindFileData=0x31e56c*(dwFileAttributes=0x16, ftCreationTime.dwLowDateTime=0xfd98f9f8, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd98f9f8, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xba6f6d7d, ftLastWriteTime.dwHighDateTime=0x1ca042b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Server", cAlternateFileName="")) returned 0 [0062.041] FindClose (in: hFindFile=0x381e00 | out: hFindFile=0x381e00) returned 1 [0062.041] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e7f4) returned 1 [0062.041] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e800) returned 1 [0062.041] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e834) returned 1 [0062.041] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\DRM", nBufferLength=0x105, lpBuffer=0x31e33c, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\DRM", lpFilePart=0x0) returned 0x1c [0062.041] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\DRM\\", nBufferLength=0x105, lpBuffer=0x31e310, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\DRM\\", lpFilePart=0x0) returned 0x1d [0062.041] FindFirstFileW (in: lpFileName="C:\\ProgramData\\Microsoft\\DRM\\*", lpFindFileData=0x31e55c | out: lpFindFileData=0x31e55c*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xfd98f9f8, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd98f9f8, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xfd98f9f8, ftLastWriteTime.dwHighDateTime=0x1ca0431, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x381e00 [0062.041] FindNextFileW (in: hFindFile=0x381e00, lpFindFileData=0x31e56c | out: lpFindFileData=0x31e56c*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xfd98f9f8, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd98f9f8, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xfd98f9f8, ftLastWriteTime.dwHighDateTime=0x1ca0431, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0062.042] FindNextFileW (in: hFindFile=0x381e00, lpFindFileData=0x31e56c | out: lpFindFileData=0x31e56c*(dwFileAttributes=0x16, ftCreationTime.dwLowDateTime=0xfd98f9f8, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd98f9f8, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xba6f6d7d, ftLastWriteTime.dwHighDateTime=0x1ca042b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Server", cAlternateFileName="")) returned 1 [0062.042] FindNextFileW (in: hFindFile=0x381e00, lpFindFileData=0x31e56c | out: lpFindFileData=0x31e56c*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0062.042] FindClose (in: hFindFile=0x381e00 | out: hFindFile=0x381e00) returned 1 [0062.042] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e7f4) returned 1 [0062.042] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e800) returned 1 [0062.042] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e7bc) returned 1 [0062.042] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\DRM\\Server", nBufferLength=0x105, lpBuffer=0x31e2c4, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\DRM\\Server", lpFilePart=0x0) returned 0x23 [0062.042] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\DRM\\Server\\", nBufferLength=0x105, lpBuffer=0x31e298, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\DRM\\Server\\", lpFilePart=0x0) returned 0x24 [0062.042] FindFirstFileW (in: lpFileName="C:\\ProgramData\\Microsoft\\DRM\\Server\\*", lpFindFileData=0x31e4e4 | out: lpFindFileData=0x31e4e4*(dwFileAttributes=0x16, ftCreationTime.dwLowDateTime=0xfd98f9f8, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd98f9f8, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xba6f6d7d, ftLastWriteTime.dwHighDateTime=0x1ca042b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x381e00 [0062.042] FindNextFileW (in: hFindFile=0x381e00, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x16, ftCreationTime.dwLowDateTime=0xfd98f9f8, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd98f9f8, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xba6f6d7d, ftLastWriteTime.dwHighDateTime=0x1ca042b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0062.042] FindNextFileW (in: hFindFile=0x381e00, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x16, ftCreationTime.dwLowDateTime=0xfd98f9f8, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd98f9f8, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xba6f6d7d, ftLastWriteTime.dwHighDateTime=0x1ca042b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 0 [0062.043] FindClose (in: hFindFile=0x381e00 | out: hFindFile=0x381e00) returned 1 [0062.043] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e77c) returned 1 [0062.043] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e788) returned 1 [0062.043] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e7bc) returned 1 [0062.043] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\DRM\\Server", nBufferLength=0x105, lpBuffer=0x31e2c4, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\DRM\\Server", lpFilePart=0x0) returned 0x23 [0062.043] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\DRM\\Server\\", nBufferLength=0x105, lpBuffer=0x31e298, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\DRM\\Server\\", lpFilePart=0x0) returned 0x24 [0062.043] FindFirstFileW (in: lpFileName="C:\\ProgramData\\Microsoft\\DRM\\Server\\*", lpFindFileData=0x31e4e4 | out: lpFindFileData=0x31e4e4*(dwFileAttributes=0x16, ftCreationTime.dwLowDateTime=0xfd98f9f8, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd98f9f8, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xba6f6d7d, ftLastWriteTime.dwHighDateTime=0x1ca042b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x381e00 [0062.043] FindNextFileW (in: hFindFile=0x381e00, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x16, ftCreationTime.dwLowDateTime=0xfd98f9f8, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd98f9f8, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xba6f6d7d, ftLastWriteTime.dwHighDateTime=0x1ca042b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0062.043] FindNextFileW (in: hFindFile=0x381e00, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x16, ftCreationTime.dwLowDateTime=0xfd98f9f8, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd98f9f8, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xba6f6d7d, ftLastWriteTime.dwHighDateTime=0x1ca042b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 0 [0062.043] FindClose (in: hFindFile=0x381e00 | out: hFindFile=0x381e00) returned 1 [0062.043] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e77c) returned 1 [0062.043] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e788) returned 1 [0062.044] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e834) returned 1 [0062.044] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\eHome", nBufferLength=0x105, lpBuffer=0x31e33c, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\eHome", lpFilePart=0x0) returned 0x1e [0062.044] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\eHome\\", nBufferLength=0x105, lpBuffer=0x31e310, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\eHome\\", lpFilePart=0x0) returned 0x1f [0062.044] FindFirstFileW (in: lpFileName="C:\\ProgramData\\Microsoft\\eHome\\*", lpFindFileData=0x31e55c | out: lpFindFileData=0x31e55c*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x9182055d, ftCreationTime.dwHighDateTime=0x1cbf8eb, ftLastAccessTime.dwLowDateTime=0xaa597fc2, ftLastAccessTime.dwHighDateTime=0x1cbf8eb, ftLastWriteTime.dwLowDateTime=0x9182055d, ftLastWriteTime.dwHighDateTime=0x1cbf8eb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x381e00 [0062.044] FindNextFileW (in: hFindFile=0x381e00, lpFindFileData=0x31e56c | out: lpFindFileData=0x31e56c*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x9182055d, ftCreationTime.dwHighDateTime=0x1cbf8eb, ftLastAccessTime.dwLowDateTime=0xaa597fc2, ftLastAccessTime.dwHighDateTime=0x1cbf8eb, ftLastWriteTime.dwLowDateTime=0x9182055d, ftLastWriteTime.dwHighDateTime=0x1cbf8eb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0062.044] FindNextFileW (in: hFindFile=0x381e00, lpFindFileData=0x31e56c | out: lpFindFileData=0x31e56c*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x9182055d, ftCreationTime.dwHighDateTime=0x1cbf8eb, ftLastAccessTime.dwLowDateTime=0xaa597fc2, ftLastAccessTime.dwHighDateTime=0x1cbf8eb, ftLastWriteTime.dwLowDateTime=0x9182055d, ftLastWriteTime.dwHighDateTime=0x1cbf8eb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="logs", cAlternateFileName="")) returned 1 [0062.044] FindNextFileW (in: hFindFile=0x381e00, lpFindFileData=0x31e56c | out: lpFindFileData=0x31e56c*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x9182055d, ftCreationTime.dwHighDateTime=0x1cbf8eb, ftLastAccessTime.dwLowDateTime=0xaa597fc2, ftLastAccessTime.dwHighDateTime=0x1cbf8eb, ftLastWriteTime.dwLowDateTime=0x9182055d, ftLastWriteTime.dwHighDateTime=0x1cbf8eb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="logs", cAlternateFileName="")) returned 0 [0062.044] FindClose (in: hFindFile=0x381e00 | out: hFindFile=0x381e00) returned 1 [0062.044] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e7f4) returned 1 [0062.045] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e800) returned 1 [0062.045] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e834) returned 1 [0062.045] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\eHome", nBufferLength=0x105, lpBuffer=0x31e33c, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\eHome", lpFilePart=0x0) returned 0x1e [0062.045] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\eHome\\", nBufferLength=0x105, lpBuffer=0x31e310, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\eHome\\", lpFilePart=0x0) returned 0x1f [0062.045] FindFirstFileW (in: lpFileName="C:\\ProgramData\\Microsoft\\eHome\\*", lpFindFileData=0x31e55c | out: lpFindFileData=0x31e55c*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x9182055d, ftCreationTime.dwHighDateTime=0x1cbf8eb, ftLastAccessTime.dwLowDateTime=0xaa597fc2, ftLastAccessTime.dwHighDateTime=0x1cbf8eb, ftLastWriteTime.dwLowDateTime=0x9182055d, ftLastWriteTime.dwHighDateTime=0x1cbf8eb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x381e00 [0062.045] FindNextFileW (in: hFindFile=0x381e00, lpFindFileData=0x31e56c | out: lpFindFileData=0x31e56c*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x9182055d, ftCreationTime.dwHighDateTime=0x1cbf8eb, ftLastAccessTime.dwLowDateTime=0xaa597fc2, ftLastAccessTime.dwHighDateTime=0x1cbf8eb, ftLastWriteTime.dwLowDateTime=0x9182055d, ftLastWriteTime.dwHighDateTime=0x1cbf8eb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0062.045] FindNextFileW (in: hFindFile=0x381e00, lpFindFileData=0x31e56c | out: lpFindFileData=0x31e56c*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x9182055d, ftCreationTime.dwHighDateTime=0x1cbf8eb, ftLastAccessTime.dwLowDateTime=0xaa597fc2, ftLastAccessTime.dwHighDateTime=0x1cbf8eb, ftLastWriteTime.dwLowDateTime=0x9182055d, ftLastWriteTime.dwHighDateTime=0x1cbf8eb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="logs", cAlternateFileName="")) returned 1 [0062.045] FindNextFileW (in: hFindFile=0x381e00, lpFindFileData=0x31e56c | out: lpFindFileData=0x31e56c*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0062.045] FindClose (in: hFindFile=0x381e00 | out: hFindFile=0x381e00) returned 1 [0062.045] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e7f4) returned 1 [0062.045] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e800) returned 1 [0062.045] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e7bc) returned 1 [0062.045] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\eHome\\logs", nBufferLength=0x105, lpBuffer=0x31e2c4, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\eHome\\logs", lpFilePart=0x0) returned 0x23 [0062.046] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\eHome\\logs\\", nBufferLength=0x105, lpBuffer=0x31e298, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\eHome\\logs\\", lpFilePart=0x0) returned 0x24 [0062.046] FindFirstFileW (in: lpFileName="C:\\ProgramData\\Microsoft\\eHome\\logs\\*", lpFindFileData=0x31e4e4 | out: lpFindFileData=0x31e4e4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x9182055d, ftCreationTime.dwHighDateTime=0x1cbf8eb, ftLastAccessTime.dwLowDateTime=0xaa597fc2, ftLastAccessTime.dwHighDateTime=0x1cbf8eb, ftLastWriteTime.dwLowDateTime=0x9182055d, ftLastWriteTime.dwHighDateTime=0x1cbf8eb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x381e00 [0062.046] FindNextFileW (in: hFindFile=0x381e00, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x9182055d, ftCreationTime.dwHighDateTime=0x1cbf8eb, ftLastAccessTime.dwLowDateTime=0xaa597fc2, ftLastAccessTime.dwHighDateTime=0x1cbf8eb, ftLastWriteTime.dwLowDateTime=0x9182055d, ftLastWriteTime.dwHighDateTime=0x1cbf8eb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0062.046] FindNextFileW (in: hFindFile=0x381e00, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x9182055d, ftCreationTime.dwHighDateTime=0x1cbf8eb, ftLastAccessTime.dwLowDateTime=0xaa597fc2, ftLastAccessTime.dwHighDateTime=0x1cbf8eb, ftLastWriteTime.dwLowDateTime=0x9182055d, ftLastWriteTime.dwHighDateTime=0x1cbf8eb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 0 [0062.046] FindClose (in: hFindFile=0x381e00 | out: hFindFile=0x381e00) returned 1 [0062.046] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e77c) returned 1 [0062.046] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e788) returned 1 [0062.046] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e7bc) returned 1 [0062.046] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\eHome\\logs", nBufferLength=0x105, lpBuffer=0x31e2c4, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\eHome\\logs", lpFilePart=0x0) returned 0x23 [0062.046] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\eHome\\logs\\", nBufferLength=0x105, lpBuffer=0x31e298, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\eHome\\logs\\", lpFilePart=0x0) returned 0x24 [0062.046] FindFirstFileW (in: lpFileName="C:\\ProgramData\\Microsoft\\eHome\\logs\\*", lpFindFileData=0x31e4e4 | out: lpFindFileData=0x31e4e4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x9182055d, ftCreationTime.dwHighDateTime=0x1cbf8eb, ftLastAccessTime.dwLowDateTime=0xaa597fc2, ftLastAccessTime.dwHighDateTime=0x1cbf8eb, ftLastWriteTime.dwLowDateTime=0x9182055d, ftLastWriteTime.dwHighDateTime=0x1cbf8eb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x381e00 [0062.047] FindNextFileW (in: hFindFile=0x381e00, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x9182055d, ftCreationTime.dwHighDateTime=0x1cbf8eb, ftLastAccessTime.dwLowDateTime=0xaa597fc2, ftLastAccessTime.dwHighDateTime=0x1cbf8eb, ftLastWriteTime.dwLowDateTime=0x9182055d, ftLastWriteTime.dwHighDateTime=0x1cbf8eb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0062.047] FindNextFileW (in: hFindFile=0x381e00, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x9182055d, ftCreationTime.dwHighDateTime=0x1cbf8eb, ftLastAccessTime.dwLowDateTime=0xaa597fc2, ftLastAccessTime.dwHighDateTime=0x1cbf8eb, ftLastWriteTime.dwLowDateTime=0x9182055d, ftLastWriteTime.dwHighDateTime=0x1cbf8eb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 0 [0062.047] FindClose (in: hFindFile=0x381e00 | out: hFindFile=0x381e00) returned 1 [0062.047] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e77c) returned 1 [0062.047] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e788) returned 1 [0062.047] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e834) returned 1 [0062.047] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\Event Viewer", nBufferLength=0x105, lpBuffer=0x31e33c, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\Event Viewer", lpFilePart=0x0) returned 0x25 [0062.047] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\Event Viewer\\", nBufferLength=0x105, lpBuffer=0x31e310, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\Event Viewer\\", lpFilePart=0x0) returned 0x26 [0062.047] FindFirstFileW (in: lpFileName="C:\\ProgramData\\Microsoft\\Event Viewer\\*", lpFindFileData=0x31e55c | out: lpFindFileData=0x31e55c*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x3235c810, ftCreationTime.dwHighDateTime=0x1d2fa9b, ftLastAccessTime.dwLowDateTime=0x3a6c7630, ftLastAccessTime.dwHighDateTime=0x1d3aaba, ftLastWriteTime.dwLowDateTime=0x3a6c7630, ftLastWriteTime.dwHighDateTime=0x1d3aaba, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x381e00 [0062.048] FindNextFileW (in: hFindFile=0x381e00, lpFindFileData=0x31e56c | out: lpFindFileData=0x31e56c*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x3235c810, ftCreationTime.dwHighDateTime=0x1d2fa9b, ftLastAccessTime.dwLowDateTime=0x3a6c7630, ftLastAccessTime.dwHighDateTime=0x1d3aaba, ftLastWriteTime.dwLowDateTime=0x3a6c7630, ftLastWriteTime.dwHighDateTime=0x1d3aaba, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0062.048] FindNextFileW (in: hFindFile=0x381e00, lpFindFileData=0x31e56c | out: lpFindFileData=0x31e56c*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x3235c810, ftCreationTime.dwHighDateTime=0x1d2fa9b, ftLastAccessTime.dwLowDateTime=0x3235c810, ftLastAccessTime.dwHighDateTime=0x1d2fa9b, ftLastWriteTime.dwLowDateTime=0x3235c810, ftLastWriteTime.dwHighDateTime=0x1d2fa9b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Views", cAlternateFileName="")) returned 1 [0062.049] FindNextFileW (in: hFindFile=0x381e00, lpFindFileData=0x31e56c | out: lpFindFileData=0x31e56c*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x3235c810, ftCreationTime.dwHighDateTime=0x1d2fa9b, ftLastAccessTime.dwLowDateTime=0x3235c810, ftLastAccessTime.dwHighDateTime=0x1d2fa9b, ftLastWriteTime.dwLowDateTime=0x3235c810, ftLastWriteTime.dwHighDateTime=0x1d2fa9b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Views", cAlternateFileName="")) returned 0 [0062.049] FindClose (in: hFindFile=0x381e00 | out: hFindFile=0x381e00) returned 1 [0062.049] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e7f4) returned 1 [0062.049] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e800) returned 1 [0062.049] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e834) returned 1 [0062.049] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\Event Viewer", nBufferLength=0x105, lpBuffer=0x31e33c, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\Event Viewer", lpFilePart=0x0) returned 0x25 [0062.049] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\Event Viewer\\", nBufferLength=0x105, lpBuffer=0x31e310, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\Event Viewer\\", lpFilePart=0x0) returned 0x26 [0062.049] FindFirstFileW (in: lpFileName="C:\\ProgramData\\Microsoft\\Event Viewer\\*", lpFindFileData=0x31e55c | out: lpFindFileData=0x31e55c*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x3235c810, ftCreationTime.dwHighDateTime=0x1d2fa9b, ftLastAccessTime.dwLowDateTime=0x3a6c7630, ftLastAccessTime.dwHighDateTime=0x1d3aaba, ftLastWriteTime.dwLowDateTime=0x3a6c7630, ftLastWriteTime.dwHighDateTime=0x1d3aaba, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x381e00 [0062.049] FindNextFileW (in: hFindFile=0x381e00, lpFindFileData=0x31e56c | out: lpFindFileData=0x31e56c*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x3235c810, ftCreationTime.dwHighDateTime=0x1d2fa9b, ftLastAccessTime.dwLowDateTime=0x3a6c7630, ftLastAccessTime.dwHighDateTime=0x1d3aaba, ftLastWriteTime.dwLowDateTime=0x3a6c7630, ftLastWriteTime.dwHighDateTime=0x1d3aaba, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0062.049] FindNextFileW (in: hFindFile=0x381e00, lpFindFileData=0x31e56c | out: lpFindFileData=0x31e56c*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x3235c810, ftCreationTime.dwHighDateTime=0x1d2fa9b, ftLastAccessTime.dwLowDateTime=0x3235c810, ftLastAccessTime.dwHighDateTime=0x1d2fa9b, ftLastWriteTime.dwLowDateTime=0x3235c810, ftLastWriteTime.dwHighDateTime=0x1d2fa9b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Views", cAlternateFileName="")) returned 1 [0062.049] FindNextFileW (in: hFindFile=0x381e00, lpFindFileData=0x31e56c | out: lpFindFileData=0x31e56c*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0062.050] FindClose (in: hFindFile=0x381e00 | out: hFindFile=0x381e00) returned 1 [0062.050] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e7f4) returned 1 [0062.050] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e800) returned 1 [0062.050] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e7bc) returned 1 [0062.050] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\Event Viewer\\Views", nBufferLength=0x105, lpBuffer=0x31e2c4, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\Event Viewer\\Views", lpFilePart=0x0) returned 0x2b [0062.050] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\Event Viewer\\Views\\", nBufferLength=0x105, lpBuffer=0x31e298, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\Event Viewer\\Views\\", lpFilePart=0x0) returned 0x2c [0062.050] FindFirstFileW (in: lpFileName="C:\\ProgramData\\Microsoft\\Event Viewer\\Views\\*", lpFindFileData=0x31e4e4 | out: lpFindFileData=0x31e4e4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x3235c810, ftCreationTime.dwHighDateTime=0x1d2fa9b, ftLastAccessTime.dwLowDateTime=0x3235c810, ftLastAccessTime.dwHighDateTime=0x1d2fa9b, ftLastWriteTime.dwLowDateTime=0x3235c810, ftLastWriteTime.dwHighDateTime=0x1d2fa9b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x381e00 [0062.050] FindNextFileW (in: hFindFile=0x381e00, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x3235c810, ftCreationTime.dwHighDateTime=0x1d2fa9b, ftLastAccessTime.dwLowDateTime=0x3235c810, ftLastAccessTime.dwHighDateTime=0x1d2fa9b, ftLastWriteTime.dwLowDateTime=0x3235c810, ftLastWriteTime.dwHighDateTime=0x1d2fa9b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0062.050] FindNextFileW (in: hFindFile=0x381e00, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x3235c810, ftCreationTime.dwHighDateTime=0x1d2fa9b, ftLastAccessTime.dwLowDateTime=0x3235c810, ftLastAccessTime.dwHighDateTime=0x1d2fa9b, ftLastWriteTime.dwLowDateTime=0x3235c810, ftLastWriteTime.dwHighDateTime=0x1d2fa9b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="ApplicationViewsRootNode", cAlternateFileName="APPLIC~1")) returned 1 [0062.050] FindNextFileW (in: hFindFile=0x381e00, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x3235c810, ftCreationTime.dwHighDateTime=0x1d2fa9b, ftLastAccessTime.dwLowDateTime=0x3235c810, ftLastAccessTime.dwHighDateTime=0x1d2fa9b, ftLastWriteTime.dwLowDateTime=0x3235c810, ftLastWriteTime.dwHighDateTime=0x1d2fa9b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="ApplicationViewsRootNode", cAlternateFileName="APPLIC~1")) returned 0 [0062.051] FindClose (in: hFindFile=0x381e00 | out: hFindFile=0x381e00) returned 1 [0062.051] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e77c) returned 1 [0062.051] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e788) returned 1 [0062.051] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e7bc) returned 1 [0062.051] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\Event Viewer\\Views", nBufferLength=0x105, lpBuffer=0x31e2c4, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\Event Viewer\\Views", lpFilePart=0x0) returned 0x2b [0062.051] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\Event Viewer\\Views\\", nBufferLength=0x105, lpBuffer=0x31e298, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\Event Viewer\\Views\\", lpFilePart=0x0) returned 0x2c [0062.051] FindFirstFileW (in: lpFileName="C:\\ProgramData\\Microsoft\\Event Viewer\\Views\\*", lpFindFileData=0x31e4e4 | out: lpFindFileData=0x31e4e4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x3235c810, ftCreationTime.dwHighDateTime=0x1d2fa9b, ftLastAccessTime.dwLowDateTime=0x3235c810, ftLastAccessTime.dwHighDateTime=0x1d2fa9b, ftLastWriteTime.dwLowDateTime=0x3235c810, ftLastWriteTime.dwHighDateTime=0x1d2fa9b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x381e00 [0062.051] FindNextFileW (in: hFindFile=0x381e00, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x3235c810, ftCreationTime.dwHighDateTime=0x1d2fa9b, ftLastAccessTime.dwLowDateTime=0x3235c810, ftLastAccessTime.dwHighDateTime=0x1d2fa9b, ftLastWriteTime.dwLowDateTime=0x3235c810, ftLastWriteTime.dwHighDateTime=0x1d2fa9b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0062.051] FindNextFileW (in: hFindFile=0x381e00, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x3235c810, ftCreationTime.dwHighDateTime=0x1d2fa9b, ftLastAccessTime.dwLowDateTime=0x3235c810, ftLastAccessTime.dwHighDateTime=0x1d2fa9b, ftLastWriteTime.dwLowDateTime=0x3235c810, ftLastWriteTime.dwHighDateTime=0x1d2fa9b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="ApplicationViewsRootNode", cAlternateFileName="APPLIC~1")) returned 1 [0062.051] FindNextFileW (in: hFindFile=0x381e00, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0062.051] FindClose (in: hFindFile=0x381e00 | out: hFindFile=0x381e00) returned 1 [0062.052] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e77c) returned 1 [0062.052] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e788) returned 1 [0062.052] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e744) returned 1 [0062.052] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\Event Viewer\\Views\\ApplicationViewsRootNode", nBufferLength=0x105, lpBuffer=0x31e24c, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\Event Viewer\\Views\\ApplicationViewsRootNode", lpFilePart=0x0) returned 0x44 [0062.052] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\Event Viewer\\Views\\ApplicationViewsRootNode\\", nBufferLength=0x105, lpBuffer=0x31e220, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\Event Viewer\\Views\\ApplicationViewsRootNode\\", lpFilePart=0x0) returned 0x45 [0062.052] FindFirstFileW (in: lpFileName="C:\\ProgramData\\Microsoft\\Event Viewer\\Views\\ApplicationViewsRootNode\\*", lpFindFileData=0x31e46c | out: lpFindFileData=0x31e46c*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x3235c810, ftCreationTime.dwHighDateTime=0x1d2fa9b, ftLastAccessTime.dwLowDateTime=0x3235c810, ftLastAccessTime.dwHighDateTime=0x1d2fa9b, ftLastWriteTime.dwLowDateTime=0x3235c810, ftLastWriteTime.dwHighDateTime=0x1d2fa9b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x381e00 [0062.052] FindNextFileW (in: hFindFile=0x381e00, lpFindFileData=0x31e47c | out: lpFindFileData=0x31e47c*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x3235c810, ftCreationTime.dwHighDateTime=0x1d2fa9b, ftLastAccessTime.dwLowDateTime=0x3235c810, ftLastAccessTime.dwHighDateTime=0x1d2fa9b, ftLastWriteTime.dwLowDateTime=0x3235c810, ftLastWriteTime.dwHighDateTime=0x1d2fa9b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0062.052] FindNextFileW (in: hFindFile=0x381e00, lpFindFileData=0x31e47c | out: lpFindFileData=0x31e47c*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x3235c810, ftCreationTime.dwHighDateTime=0x1d2fa9b, ftLastAccessTime.dwLowDateTime=0x3235c810, ftLastAccessTime.dwHighDateTime=0x1d2fa9b, ftLastWriteTime.dwLowDateTime=0x3235c810, ftLastWriteTime.dwHighDateTime=0x1d2fa9b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 0 [0062.052] FindClose (in: hFindFile=0x381e00 | out: hFindFile=0x381e00) returned 1 [0062.052] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e704) returned 1 [0062.052] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e710) returned 1 [0062.052] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e744) returned 1 [0062.052] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\Event Viewer\\Views\\ApplicationViewsRootNode", nBufferLength=0x105, lpBuffer=0x31e24c, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\Event Viewer\\Views\\ApplicationViewsRootNode", lpFilePart=0x0) returned 0x44 [0062.052] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\Event Viewer\\Views\\ApplicationViewsRootNode\\", nBufferLength=0x105, lpBuffer=0x31e220, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\Event Viewer\\Views\\ApplicationViewsRootNode\\", lpFilePart=0x0) returned 0x45 [0062.053] FindFirstFileW (in: lpFileName="C:\\ProgramData\\Microsoft\\Event Viewer\\Views\\ApplicationViewsRootNode\\*", lpFindFileData=0x31e46c | out: lpFindFileData=0x31e46c*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x3235c810, ftCreationTime.dwHighDateTime=0x1d2fa9b, ftLastAccessTime.dwLowDateTime=0x3235c810, ftLastAccessTime.dwHighDateTime=0x1d2fa9b, ftLastWriteTime.dwLowDateTime=0x3235c810, ftLastWriteTime.dwHighDateTime=0x1d2fa9b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x381e00 [0062.053] FindNextFileW (in: hFindFile=0x381e00, lpFindFileData=0x31e47c | out: lpFindFileData=0x31e47c*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x3235c810, ftCreationTime.dwHighDateTime=0x1d2fa9b, ftLastAccessTime.dwLowDateTime=0x3235c810, ftLastAccessTime.dwHighDateTime=0x1d2fa9b, ftLastWriteTime.dwLowDateTime=0x3235c810, ftLastWriteTime.dwHighDateTime=0x1d2fa9b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0062.053] FindNextFileW (in: hFindFile=0x381e00, lpFindFileData=0x31e47c | out: lpFindFileData=0x31e47c*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x3235c810, ftCreationTime.dwHighDateTime=0x1d2fa9b, ftLastAccessTime.dwLowDateTime=0x3235c810, ftLastAccessTime.dwHighDateTime=0x1d2fa9b, ftLastWriteTime.dwLowDateTime=0x3235c810, ftLastWriteTime.dwHighDateTime=0x1d2fa9b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 0 [0062.053] FindClose (in: hFindFile=0x381e00 | out: hFindFile=0x381e00) returned 1 [0062.053] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e704) returned 1 [0062.053] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e710) returned 1 [0062.053] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e834) returned 1 [0062.053] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\IdentityCRL", nBufferLength=0x105, lpBuffer=0x31e33c, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\IdentityCRL", lpFilePart=0x0) returned 0x24 [0062.053] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\IdentityCRL\\", nBufferLength=0x105, lpBuffer=0x31e310, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\IdentityCRL\\", lpFilePart=0x0) returned 0x25 [0062.053] FindFirstFileW (in: lpFileName="C:\\ProgramData\\Microsoft\\IdentityCRL\\*", lpFindFileData=0x31e55c | out: lpFindFileData=0x31e55c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd98f9f8, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd9b5b52, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xfd9b5b52, ftLastWriteTime.dwHighDateTime=0x1ca0431, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x381e00 [0062.054] FindNextFileW (in: hFindFile=0x381e00, lpFindFileData=0x31e56c | out: lpFindFileData=0x31e56c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd98f9f8, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd9b5b52, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xfd9b5b52, ftLastWriteTime.dwHighDateTime=0x1ca0431, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0062.054] FindNextFileW (in: hFindFile=0x381e00, lpFindFileData=0x31e56c | out: lpFindFileData=0x31e56c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd591378b, ftCreationTime.dwHighDateTime=0x1ca042b, ftLastAccessTime.dwLowDateTime=0xd591378b, ftLastAccessTime.dwHighDateTime=0x1ca042b, ftLastWriteTime.dwLowDateTime=0x6ac29de1, ftLastWriteTime.dwHighDateTime=0x1c9ea0a, nFileSizeHigh=0x0, nFileSizeLow=0x3d00, dwReserved0=0x0, dwReserved1=0x0, cFileName="ppcrlconfig.dll", cAlternateFileName="PPCRLC~1.DLL")) returned 1 [0062.054] FindNextFileW (in: hFindFile=0x381e00, lpFindFileData=0x31e56c | out: lpFindFileData=0x31e56c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd582ef5d, ftCreationTime.dwHighDateTime=0x1ca042b, ftLastAccessTime.dwLowDateTime=0xd582ef5d, ftLastAccessTime.dwHighDateTime=0x1ca042b, ftLastWriteTime.dwLowDateTime=0x6ac4ff3f, ftLastWriteTime.dwHighDateTime=0x1c9ea0a, nFileSizeHigh=0x0, nFileSizeLow=0x3e108, dwReserved0=0x0, dwReserved1=0x0, cFileName="ppcrlui.dll", cAlternateFileName="")) returned 1 [0062.054] FindNextFileW (in: hFindFile=0x381e00, lpFindFileData=0x31e56c | out: lpFindFileData=0x31e56c*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0062.054] FindClose (in: hFindFile=0x381e00 | out: hFindFile=0x381e00) returned 1 [0062.054] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e7f4) returned 1 [0062.054] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e800) returned 1 [0062.054] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e834) returned 1 [0062.054] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\IdentityCRL", nBufferLength=0x105, lpBuffer=0x31e33c, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\IdentityCRL", lpFilePart=0x0) returned 0x24 [0062.054] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\IdentityCRL\\", nBufferLength=0x105, lpBuffer=0x31e310, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\IdentityCRL\\", lpFilePart=0x0) returned 0x25 [0062.054] FindFirstFileW (in: lpFileName="C:\\ProgramData\\Microsoft\\IdentityCRL\\*", lpFindFileData=0x31e55c | out: lpFindFileData=0x31e55c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd98f9f8, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd9b5b52, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xfd9b5b52, ftLastWriteTime.dwHighDateTime=0x1ca0431, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x381e00 [0062.055] FindNextFileW (in: hFindFile=0x381e00, lpFindFileData=0x31e56c | out: lpFindFileData=0x31e56c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd98f9f8, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd9b5b52, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xfd9b5b52, ftLastWriteTime.dwHighDateTime=0x1ca0431, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0062.055] FindNextFileW (in: hFindFile=0x381e00, lpFindFileData=0x31e56c | out: lpFindFileData=0x31e56c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd591378b, ftCreationTime.dwHighDateTime=0x1ca042b, ftLastAccessTime.dwLowDateTime=0xd591378b, ftLastAccessTime.dwHighDateTime=0x1ca042b, ftLastWriteTime.dwLowDateTime=0x6ac29de1, ftLastWriteTime.dwHighDateTime=0x1c9ea0a, nFileSizeHigh=0x0, nFileSizeLow=0x3d00, dwReserved0=0x0, dwReserved1=0x0, cFileName="ppcrlconfig.dll", cAlternateFileName="PPCRLC~1.DLL")) returned 1 [0062.055] FindNextFileW (in: hFindFile=0x381e00, lpFindFileData=0x31e56c | out: lpFindFileData=0x31e56c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd582ef5d, ftCreationTime.dwHighDateTime=0x1ca042b, ftLastAccessTime.dwLowDateTime=0xd582ef5d, ftLastAccessTime.dwHighDateTime=0x1ca042b, ftLastWriteTime.dwLowDateTime=0x6ac4ff3f, ftLastWriteTime.dwHighDateTime=0x1c9ea0a, nFileSizeHigh=0x0, nFileSizeLow=0x3e108, dwReserved0=0x0, dwReserved1=0x0, cFileName="ppcrlui.dll", cAlternateFileName="")) returned 1 [0062.055] FindNextFileW (in: hFindFile=0x381e00, lpFindFileData=0x31e56c | out: lpFindFileData=0x31e56c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd582ef5d, ftCreationTime.dwHighDateTime=0x1ca042b, ftLastAccessTime.dwLowDateTime=0xd582ef5d, ftLastAccessTime.dwHighDateTime=0x1ca042b, ftLastWriteTime.dwLowDateTime=0x6ac4ff3f, ftLastWriteTime.dwHighDateTime=0x1c9ea0a, nFileSizeHigh=0x0, nFileSizeLow=0x3e108, dwReserved0=0x0, dwReserved1=0x0, cFileName="ppcrlui.dll", cAlternateFileName="")) returned 0 [0062.055] FindClose (in: hFindFile=0x381e00 | out: hFindFile=0x381e00) returned 1 [0062.055] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e7f4) returned 1 [0062.055] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e800) returned 1 [0062.055] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e834) returned 1 [0062.055] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\Media Player", nBufferLength=0x105, lpBuffer=0x31e33c, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\Media Player", lpFilePart=0x0) returned 0x25 [0062.055] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\Media Player\\", nBufferLength=0x105, lpBuffer=0x31e310, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\Media Player\\", lpFilePart=0x0) returned 0x26 [0062.055] FindFirstFileW (in: lpFileName="C:\\ProgramData\\Microsoft\\Media Player\\*", lpFindFileData=0x31e55c | out: lpFindFileData=0x31e55c*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x3ee349fc, ftCreationTime.dwHighDateTime=0x1ca0441, ftLastAccessTime.dwLowDateTime=0x3ee349fc, ftLastAccessTime.dwHighDateTime=0x1ca0441, ftLastWriteTime.dwLowDateTime=0x3ee349fc, ftLastWriteTime.dwHighDateTime=0x1ca0441, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x381e00 [0062.056] FindNextFileW (in: hFindFile=0x381e00, lpFindFileData=0x31e56c | out: lpFindFileData=0x31e56c*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x3ee349fc, ftCreationTime.dwHighDateTime=0x1ca0441, ftLastAccessTime.dwLowDateTime=0x3ee349fc, ftLastAccessTime.dwHighDateTime=0x1ca0441, ftLastWriteTime.dwLowDateTime=0x3ee349fc, ftLastWriteTime.dwHighDateTime=0x1ca0441, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0062.056] FindNextFileW (in: hFindFile=0x381e00, lpFindFileData=0x31e56c | out: lpFindFileData=0x31e56c*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x3ee349fc, ftCreationTime.dwHighDateTime=0x1ca0441, ftLastAccessTime.dwLowDateTime=0x3ee349fc, ftLastAccessTime.dwHighDateTime=0x1ca0441, ftLastWriteTime.dwLowDateTime=0x3ee349fc, ftLastWriteTime.dwHighDateTime=0x1ca0441, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 0 [0062.056] FindClose (in: hFindFile=0x381e00 | out: hFindFile=0x381e00) returned 1 [0062.056] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e7f4) returned 1 [0062.056] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e800) returned 1 [0062.056] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e834) returned 1 [0062.056] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\Media Player", nBufferLength=0x105, lpBuffer=0x31e33c, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\Media Player", lpFilePart=0x0) returned 0x25 [0062.056] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\Media Player\\", nBufferLength=0x105, lpBuffer=0x31e310, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\Media Player\\", lpFilePart=0x0) returned 0x26 [0062.056] FindFirstFileW (in: lpFileName="C:\\ProgramData\\Microsoft\\Media Player\\*", lpFindFileData=0x31e55c | out: lpFindFileData=0x31e55c*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x3ee349fc, ftCreationTime.dwHighDateTime=0x1ca0441, ftLastAccessTime.dwLowDateTime=0x3ee349fc, ftLastAccessTime.dwHighDateTime=0x1ca0441, ftLastWriteTime.dwLowDateTime=0x3ee349fc, ftLastWriteTime.dwHighDateTime=0x1ca0441, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x381e00 [0062.056] FindNextFileW (in: hFindFile=0x381e00, lpFindFileData=0x31e56c | out: lpFindFileData=0x31e56c*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x3ee349fc, ftCreationTime.dwHighDateTime=0x1ca0441, ftLastAccessTime.dwLowDateTime=0x3ee349fc, ftLastAccessTime.dwHighDateTime=0x1ca0441, ftLastWriteTime.dwLowDateTime=0x3ee349fc, ftLastWriteTime.dwHighDateTime=0x1ca0441, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0062.057] FindNextFileW (in: hFindFile=0x381e00, lpFindFileData=0x31e56c | out: lpFindFileData=0x31e56c*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x3ee349fc, ftCreationTime.dwHighDateTime=0x1ca0441, ftLastAccessTime.dwLowDateTime=0x3ee349fc, ftLastAccessTime.dwHighDateTime=0x1ca0441, ftLastWriteTime.dwLowDateTime=0x3ee349fc, ftLastWriteTime.dwHighDateTime=0x1ca0441, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 0 [0062.057] FindClose (in: hFindFile=0x381e00 | out: hFindFile=0x381e00) returned 1 [0062.057] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e7f4) returned 1 [0062.057] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e800) returned 1 [0062.057] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e834) returned 1 [0062.057] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\MF", nBufferLength=0x105, lpBuffer=0x31e33c, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\MF", lpFilePart=0x0) returned 0x1b [0062.057] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\MF\\", nBufferLength=0x105, lpBuffer=0x31e310, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\MF\\", lpFilePart=0x0) returned 0x1c [0062.057] FindFirstFileW (in: lpFileName="C:\\ProgramData\\Microsoft\\MF\\*", lpFindFileData=0x31e55c | out: lpFindFileData=0x31e55c*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x7fffaad0, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x80340916, ftLastAccessTime.dwHighDateTime=0x1ca0444, ftLastWriteTime.dwLowDateTime=0x80340916, ftLastWriteTime.dwHighDateTime=0x1ca0444, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x381e00 [0062.058] FindNextFileW (in: hFindFile=0x381e00, lpFindFileData=0x31e56c | out: lpFindFileData=0x31e56c*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x7fffaad0, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x80340916, ftLastAccessTime.dwHighDateTime=0x1ca0444, ftLastWriteTime.dwLowDateTime=0x80340916, ftLastWriteTime.dwHighDateTime=0x1ca0444, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0062.058] FindNextFileW (in: hFindFile=0x381e00, lpFindFileData=0x31e56c | out: lpFindFileData=0x31e56c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x80340916, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x7beaaeb8, ftLastAccessTime.dwHighDateTime=0x1ca0444, ftLastWriteTime.dwLowDateTime=0x7beaaeb8, ftLastWriteTime.dwHighDateTime=0x1ca0444, nFileSizeHigh=0x0, nFileSizeLow=0x3a7c, dwReserved0=0x0, dwReserved1=0x0, cFileName="Active.GRL", cAlternateFileName="")) returned 1 [0062.058] FindNextFileW (in: hFindFile=0x381e00, lpFindFileData=0x31e56c | out: lpFindFileData=0x31e56c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x80340916, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x7bed1018, ftLastAccessTime.dwHighDateTime=0x1ca0444, ftLastWriteTime.dwLowDateTime=0x7bed1018, ftLastWriteTime.dwHighDateTime=0x1ca0444, nFileSizeHigh=0x0, nFileSizeLow=0x3a7c, dwReserved0=0x0, dwReserved1=0x0, cFileName="Pending.GRL", cAlternateFileName="")) returned 1 [0062.058] FindNextFileW (in: hFindFile=0x381e00, lpFindFileData=0x31e56c | out: lpFindFileData=0x31e56c*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0062.058] FindClose (in: hFindFile=0x381e00 | out: hFindFile=0x381e00) returned 1 [0062.058] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e7f4) returned 1 [0062.058] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e800) returned 1 [0062.058] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e834) returned 1 [0062.058] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\MF", nBufferLength=0x105, lpBuffer=0x31e33c, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\MF", lpFilePart=0x0) returned 0x1b [0062.058] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\MF\\", nBufferLength=0x105, lpBuffer=0x31e310, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\MF\\", lpFilePart=0x0) returned 0x1c [0062.058] FindFirstFileW (in: lpFileName="C:\\ProgramData\\Microsoft\\MF\\*", lpFindFileData=0x31e55c | out: lpFindFileData=0x31e55c*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x7fffaad0, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x80340916, ftLastAccessTime.dwHighDateTime=0x1ca0444, ftLastWriteTime.dwLowDateTime=0x80340916, ftLastWriteTime.dwHighDateTime=0x1ca0444, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x381e00 [0062.059] FindNextFileW (in: hFindFile=0x381e00, lpFindFileData=0x31e56c | out: lpFindFileData=0x31e56c*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x7fffaad0, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x80340916, ftLastAccessTime.dwHighDateTime=0x1ca0444, ftLastWriteTime.dwLowDateTime=0x80340916, ftLastWriteTime.dwHighDateTime=0x1ca0444, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0062.059] FindNextFileW (in: hFindFile=0x381e00, lpFindFileData=0x31e56c | out: lpFindFileData=0x31e56c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x80340916, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x7beaaeb8, ftLastAccessTime.dwHighDateTime=0x1ca0444, ftLastWriteTime.dwLowDateTime=0x7beaaeb8, ftLastWriteTime.dwHighDateTime=0x1ca0444, nFileSizeHigh=0x0, nFileSizeLow=0x3a7c, dwReserved0=0x0, dwReserved1=0x0, cFileName="Active.GRL", cAlternateFileName="")) returned 1 [0062.059] FindNextFileW (in: hFindFile=0x381e00, lpFindFileData=0x31e56c | out: lpFindFileData=0x31e56c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x80340916, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x7bed1018, ftLastAccessTime.dwHighDateTime=0x1ca0444, ftLastWriteTime.dwLowDateTime=0x7bed1018, ftLastWriteTime.dwHighDateTime=0x1ca0444, nFileSizeHigh=0x0, nFileSizeLow=0x3a7c, dwReserved0=0x0, dwReserved1=0x0, cFileName="Pending.GRL", cAlternateFileName="")) returned 1 [0062.059] FindNextFileW (in: hFindFile=0x381e00, lpFindFileData=0x31e56c | out: lpFindFileData=0x31e56c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x80340916, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x7bed1018, ftLastAccessTime.dwHighDateTime=0x1ca0444, ftLastWriteTime.dwLowDateTime=0x7bed1018, ftLastWriteTime.dwHighDateTime=0x1ca0444, nFileSizeHigh=0x0, nFileSizeLow=0x3a7c, dwReserved0=0x0, dwReserved1=0x0, cFileName="Pending.GRL", cAlternateFileName="")) returned 0 [0062.059] FindClose (in: hFindFile=0x381e00 | out: hFindFile=0x381e00) returned 1 [0062.059] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e7f4) returned 1 [0062.059] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e800) returned 1 [0062.059] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e834) returned 1 [0062.059] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\MSDN", nBufferLength=0x105, lpBuffer=0x31e33c, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\MSDN", lpFilePart=0x0) returned 0x1d [0062.059] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\MSDN\\", nBufferLength=0x105, lpBuffer=0x31e310, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\MSDN\\", lpFilePart=0x0) returned 0x1e [0062.059] FindFirstFileW (in: lpFileName="C:\\ProgramData\\Microsoft\\MSDN\\*", lpFindFileData=0x31e55c | out: lpFindFileData=0x31e55c*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x50ea0e30, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x50ea0e30, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x50ea0e30, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x381e00 [0062.060] FindNextFileW (in: hFindFile=0x381e00, lpFindFileData=0x31e56c | out: lpFindFileData=0x31e56c*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x50ea0e30, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x50ea0e30, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x50ea0e30, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0062.060] FindNextFileW (in: hFindFile=0x381e00, lpFindFileData=0x31e56c | out: lpFindFileData=0x31e56c*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x50ea0e30, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x50ea0e30, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x50ea0e30, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="8.0", cAlternateFileName="")) returned 1 [0062.060] FindNextFileW (in: hFindFile=0x381e00, lpFindFileData=0x31e56c | out: lpFindFileData=0x31e56c*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x50ea0e30, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x50ea0e30, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x50ea0e30, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="8.0", cAlternateFileName="")) returned 0 [0062.060] FindClose (in: hFindFile=0x381e00 | out: hFindFile=0x381e00) returned 1 [0062.060] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e7f4) returned 1 [0062.060] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e800) returned 1 [0062.060] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e834) returned 1 [0062.060] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\MSDN", nBufferLength=0x105, lpBuffer=0x31e33c, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\MSDN", lpFilePart=0x0) returned 0x1d [0062.060] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\MSDN\\", nBufferLength=0x105, lpBuffer=0x31e310, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\MSDN\\", lpFilePart=0x0) returned 0x1e [0062.060] FindFirstFileW (in: lpFileName="C:\\ProgramData\\Microsoft\\MSDN\\*", lpFindFileData=0x31e55c | out: lpFindFileData=0x31e55c*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x50ea0e30, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x50ea0e30, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x50ea0e30, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x381e00 [0062.061] FindNextFileW (in: hFindFile=0x381e00, lpFindFileData=0x31e56c | out: lpFindFileData=0x31e56c*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x50ea0e30, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x50ea0e30, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x50ea0e30, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0062.061] FindNextFileW (in: hFindFile=0x381e00, lpFindFileData=0x31e56c | out: lpFindFileData=0x31e56c*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x50ea0e30, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x50ea0e30, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x50ea0e30, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="8.0", cAlternateFileName="")) returned 1 [0062.061] FindNextFileW (in: hFindFile=0x381e00, lpFindFileData=0x31e56c | out: lpFindFileData=0x31e56c*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0062.061] FindClose (in: hFindFile=0x381e00 | out: hFindFile=0x381e00) returned 1 [0062.061] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e7f4) returned 1 [0062.061] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e800) returned 1 [0062.061] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e7bc) returned 1 [0062.061] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\MSDN\\8.0", nBufferLength=0x105, lpBuffer=0x31e2c4, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\MSDN\\8.0", lpFilePart=0x0) returned 0x21 [0062.061] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\MSDN\\8.0\\", nBufferLength=0x105, lpBuffer=0x31e298, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\MSDN\\8.0\\", lpFilePart=0x0) returned 0x22 [0062.061] FindFirstFileW (in: lpFileName="C:\\ProgramData\\Microsoft\\MSDN\\8.0\\*", lpFindFileData=0x31e4e4 | out: lpFindFileData=0x31e4e4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x50ea0e30, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x50ea0e30, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x50ea0e30, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x381e00 [0062.061] FindNextFileW (in: hFindFile=0x381e00, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x50ea0e30, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x50ea0e30, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x50ea0e30, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0062.062] FindNextFileW (in: hFindFile=0x381e00, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x50ea0e30, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x50ea0e30, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x50ea0e30, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 0 [0062.062] FindClose (in: hFindFile=0x381e00 | out: hFindFile=0x381e00) returned 1 [0062.062] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e77c) returned 1 [0062.062] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e788) returned 1 [0062.062] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e7bc) returned 1 [0062.062] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\MSDN\\8.0", nBufferLength=0x105, lpBuffer=0x31e2c4, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\MSDN\\8.0", lpFilePart=0x0) returned 0x21 [0062.062] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\MSDN\\8.0\\", nBufferLength=0x105, lpBuffer=0x31e298, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\MSDN\\8.0\\", lpFilePart=0x0) returned 0x22 [0062.062] FindFirstFileW (in: lpFileName="C:\\ProgramData\\Microsoft\\MSDN\\8.0\\*", lpFindFileData=0x31e4e4 | out: lpFindFileData=0x31e4e4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x50ea0e30, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x50ea0e30, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x50ea0e30, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x381e00 [0062.062] FindNextFileW (in: hFindFile=0x381e00, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x50ea0e30, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x50ea0e30, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x50ea0e30, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0062.062] FindNextFileW (in: hFindFile=0x381e00, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x50ea0e30, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x50ea0e30, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x50ea0e30, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 0 [0062.062] FindClose (in: hFindFile=0x381e00 | out: hFindFile=0x381e00) returned 1 [0062.062] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e77c) returned 1 [0062.062] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e788) returned 1 [0062.063] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e834) returned 1 [0062.063] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\NetFramework", nBufferLength=0x105, lpBuffer=0x31e33c, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\NetFramework", lpFilePart=0x0) returned 0x25 [0062.063] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\NetFramework\\", nBufferLength=0x105, lpBuffer=0x31e310, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\NetFramework\\", lpFilePart=0x0) returned 0x26 [0062.063] FindFirstFileW (in: lpFileName="C:\\ProgramData\\Microsoft\\NetFramework\\*", lpFindFileData=0x31e55c | out: lpFindFileData=0x31e55c*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x56ac2f60, ftCreationTime.dwHighDateTime=0x1d2e676, ftLastAccessTime.dwLowDateTime=0x56ac2f60, ftLastAccessTime.dwHighDateTime=0x1d2e676, ftLastWriteTime.dwLowDateTime=0x56ac2f60, ftLastWriteTime.dwHighDateTime=0x1d2e676, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x381e00 [0062.064] FindNextFileW (in: hFindFile=0x381e00, lpFindFileData=0x31e56c | out: lpFindFileData=0x31e56c*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x56ac2f60, ftCreationTime.dwHighDateTime=0x1d2e676, ftLastAccessTime.dwLowDateTime=0x56ac2f60, ftLastAccessTime.dwHighDateTime=0x1d2e676, ftLastWriteTime.dwLowDateTime=0x56ac2f60, ftLastWriteTime.dwHighDateTime=0x1d2e676, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0062.064] FindNextFileW (in: hFindFile=0x381e00, lpFindFileData=0x31e56c | out: lpFindFileData=0x31e56c*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x56ac2f60, ftCreationTime.dwHighDateTime=0x1d2e676, ftLastAccessTime.dwLowDateTime=0x56ac2f60, ftLastAccessTime.dwHighDateTime=0x1d2e676, ftLastWriteTime.dwLowDateTime=0x56ac2f60, ftLastWriteTime.dwHighDateTime=0x1d2e676, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="BreadcrumbStore", cAlternateFileName="BREADC~1")) returned 1 [0062.064] FindNextFileW (in: hFindFile=0x381e00, lpFindFileData=0x31e56c | out: lpFindFileData=0x31e56c*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x56ac2f60, ftCreationTime.dwHighDateTime=0x1d2e676, ftLastAccessTime.dwLowDateTime=0x56ac2f60, ftLastAccessTime.dwHighDateTime=0x1d2e676, ftLastWriteTime.dwLowDateTime=0x56ac2f60, ftLastWriteTime.dwHighDateTime=0x1d2e676, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="BreadcrumbStore", cAlternateFileName="BREADC~1")) returned 0 [0062.064] FindClose (in: hFindFile=0x381e00 | out: hFindFile=0x381e00) returned 1 [0062.064] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e7f4) returned 1 [0062.064] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e800) returned 1 [0062.064] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e834) returned 1 [0062.064] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\NetFramework", nBufferLength=0x105, lpBuffer=0x31e33c, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\NetFramework", lpFilePart=0x0) returned 0x25 [0062.065] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\NetFramework\\", nBufferLength=0x105, lpBuffer=0x31e310, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\NetFramework\\", lpFilePart=0x0) returned 0x26 [0062.065] FindFirstFileW (in: lpFileName="C:\\ProgramData\\Microsoft\\NetFramework\\*", lpFindFileData=0x31e55c | out: lpFindFileData=0x31e55c*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x56ac2f60, ftCreationTime.dwHighDateTime=0x1d2e676, ftLastAccessTime.dwLowDateTime=0x56ac2f60, ftLastAccessTime.dwHighDateTime=0x1d2e676, ftLastWriteTime.dwLowDateTime=0x56ac2f60, ftLastWriteTime.dwHighDateTime=0x1d2e676, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x381e00 [0062.065] FindNextFileW (in: hFindFile=0x381e00, lpFindFileData=0x31e56c | out: lpFindFileData=0x31e56c*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x56ac2f60, ftCreationTime.dwHighDateTime=0x1d2e676, ftLastAccessTime.dwLowDateTime=0x56ac2f60, ftLastAccessTime.dwHighDateTime=0x1d2e676, ftLastWriteTime.dwLowDateTime=0x56ac2f60, ftLastWriteTime.dwHighDateTime=0x1d2e676, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0062.065] FindNextFileW (in: hFindFile=0x381e00, lpFindFileData=0x31e56c | out: lpFindFileData=0x31e56c*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x56ac2f60, ftCreationTime.dwHighDateTime=0x1d2e676, ftLastAccessTime.dwLowDateTime=0x56ac2f60, ftLastAccessTime.dwHighDateTime=0x1d2e676, ftLastWriteTime.dwLowDateTime=0x56ac2f60, ftLastWriteTime.dwHighDateTime=0x1d2e676, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="BreadcrumbStore", cAlternateFileName="BREADC~1")) returned 1 [0062.065] FindNextFileW (in: hFindFile=0x381e00, lpFindFileData=0x31e56c | out: lpFindFileData=0x31e56c*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0062.065] FindClose (in: hFindFile=0x381e00 | out: hFindFile=0x381e00) returned 1 [0062.065] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e7f4) returned 1 [0062.065] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e800) returned 1 [0062.065] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e7bc) returned 1 [0062.065] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\NetFramework\\BreadcrumbStore", nBufferLength=0x105, lpBuffer=0x31e2c4, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\NetFramework\\BreadcrumbStore", lpFilePart=0x0) returned 0x35 [0062.065] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\NetFramework\\BreadcrumbStore\\", nBufferLength=0x105, lpBuffer=0x31e298, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\NetFramework\\BreadcrumbStore\\", lpFilePart=0x0) returned 0x36 [0062.065] FindFirstFileW (in: lpFileName="C:\\ProgramData\\Microsoft\\NetFramework\\BreadcrumbStore\\*", lpFindFileData=0x31e4e4 | out: lpFindFileData=0x31e4e4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x56ac2f60, ftCreationTime.dwHighDateTime=0x1d2e676, ftLastAccessTime.dwLowDateTime=0x56ac2f60, ftLastAccessTime.dwHighDateTime=0x1d2e676, ftLastWriteTime.dwLowDateTime=0x56ac2f60, ftLastWriteTime.dwHighDateTime=0x1d2e676, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x381e00 [0062.066] FindNextFileW (in: hFindFile=0x381e00, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x56ac2f60, ftCreationTime.dwHighDateTime=0x1d2e676, ftLastAccessTime.dwLowDateTime=0x56ac2f60, ftLastAccessTime.dwHighDateTime=0x1d2e676, ftLastWriteTime.dwLowDateTime=0x56ac2f60, ftLastWriteTime.dwHighDateTime=0x1d2e676, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0062.066] FindNextFileW (in: hFindFile=0x381e00, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x56ac2f60, ftCreationTime.dwHighDateTime=0x1d2e676, ftLastAccessTime.dwLowDateTime=0x56ac2f60, ftLastAccessTime.dwHighDateTime=0x1d2e676, ftLastWriteTime.dwLowDateTime=0x56ac2f60, ftLastWriteTime.dwHighDateTime=0x1d2e676, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 0 [0062.066] FindClose (in: hFindFile=0x381e00 | out: hFindFile=0x381e00) returned 1 [0062.066] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e77c) returned 1 [0062.066] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e788) returned 1 [0062.066] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e7bc) returned 1 [0062.066] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\NetFramework\\BreadcrumbStore", nBufferLength=0x105, lpBuffer=0x31e2c4, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\NetFramework\\BreadcrumbStore", lpFilePart=0x0) returned 0x35 [0062.066] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\NetFramework\\BreadcrumbStore\\", nBufferLength=0x105, lpBuffer=0x31e298, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\NetFramework\\BreadcrumbStore\\", lpFilePart=0x0) returned 0x36 [0062.066] FindFirstFileW (in: lpFileName="C:\\ProgramData\\Microsoft\\NetFramework\\BreadcrumbStore\\*", lpFindFileData=0x31e4e4 | out: lpFindFileData=0x31e4e4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x56ac2f60, ftCreationTime.dwHighDateTime=0x1d2e676, ftLastAccessTime.dwLowDateTime=0x56ac2f60, ftLastAccessTime.dwHighDateTime=0x1d2e676, ftLastWriteTime.dwLowDateTime=0x56ac2f60, ftLastWriteTime.dwHighDateTime=0x1d2e676, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x381e00 [0062.066] FindNextFileW (in: hFindFile=0x381e00, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x56ac2f60, ftCreationTime.dwHighDateTime=0x1d2e676, ftLastAccessTime.dwLowDateTime=0x56ac2f60, ftLastAccessTime.dwHighDateTime=0x1d2e676, ftLastWriteTime.dwLowDateTime=0x56ac2f60, ftLastWriteTime.dwHighDateTime=0x1d2e676, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0062.067] FindNextFileW (in: hFindFile=0x381e00, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x56ac2f60, ftCreationTime.dwHighDateTime=0x1d2e676, ftLastAccessTime.dwLowDateTime=0x56ac2f60, ftLastAccessTime.dwHighDateTime=0x1d2e676, ftLastWriteTime.dwLowDateTime=0x56ac2f60, ftLastWriteTime.dwHighDateTime=0x1d2e676, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 0 [0062.067] FindClose (in: hFindFile=0x381e00 | out: hFindFile=0x381e00) returned 1 [0062.067] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e77c) returned 1 [0062.067] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e788) returned 1 [0062.067] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e834) returned 1 [0062.067] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\Network", nBufferLength=0x105, lpBuffer=0x31e33c, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\Network", lpFilePart=0x0) returned 0x20 [0062.067] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\Network\\", nBufferLength=0x105, lpBuffer=0x31e310, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\Network\\", lpFilePart=0x0) returned 0x21 [0062.067] FindFirstFileW (in: lpFileName="C:\\ProgramData\\Microsoft\\Network\\*", lpFindFileData=0x31e55c | out: lpFindFileData=0x31e55c*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xfd9b5b52, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd9b5b52, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xfd9b5b52, ftLastWriteTime.dwHighDateTime=0x1ca0431, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x381e00 [0062.067] FindNextFileW (in: hFindFile=0x381e00, lpFindFileData=0x31e56c | out: lpFindFileData=0x31e56c*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xfd9b5b52, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd9b5b52, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xfd9b5b52, ftLastWriteTime.dwHighDateTime=0x1ca0431, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0062.067] FindNextFileW (in: hFindFile=0x381e00, lpFindFileData=0x31e56c | out: lpFindFileData=0x31e56c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd9b5b52, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd9b5b52, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xa68726b4, ftLastWriteTime.dwHighDateTime=0x1ca042b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Connections", cAlternateFileName="CONNEC~1")) returned 1 [0062.068] FindNextFileW (in: hFindFile=0x381e00, lpFindFileData=0x31e56c | out: lpFindFileData=0x31e56c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd9b5b52, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x7606ea15, ftLastAccessTime.dwHighDateTime=0x1ca0441, ftLastWriteTime.dwLowDateTime=0x7606ea15, ftLastWriteTime.dwHighDateTime=0x1ca0441, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Downloader", cAlternateFileName="DOWNLO~1")) returned 1 [0062.068] FindNextFileW (in: hFindFile=0x381e00, lpFindFileData=0x31e56c | out: lpFindFileData=0x31e56c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd9b5b52, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x7606ea15, ftLastAccessTime.dwHighDateTime=0x1ca0441, ftLastWriteTime.dwLowDateTime=0x7606ea15, ftLastWriteTime.dwHighDateTime=0x1ca0441, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Downloader", cAlternateFileName="DOWNLO~1")) returned 0 [0062.068] FindClose (in: hFindFile=0x381e00 | out: hFindFile=0x381e00) returned 1 [0062.068] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e7f4) returned 1 [0062.068] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e800) returned 1 [0062.068] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e834) returned 1 [0062.068] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\Network", nBufferLength=0x105, lpBuffer=0x31e33c, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\Network", lpFilePart=0x0) returned 0x20 [0062.068] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\Network\\", nBufferLength=0x105, lpBuffer=0x31e310, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\Network\\", lpFilePart=0x0) returned 0x21 [0062.068] FindFirstFileW (in: lpFileName="C:\\ProgramData\\Microsoft\\Network\\*", lpFindFileData=0x31e55c | out: lpFindFileData=0x31e55c*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xfd9b5b52, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd9b5b52, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xfd9b5b52, ftLastWriteTime.dwHighDateTime=0x1ca0431, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x381e00 [0062.068] FindNextFileW (in: hFindFile=0x381e00, lpFindFileData=0x31e56c | out: lpFindFileData=0x31e56c*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xfd9b5b52, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd9b5b52, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xfd9b5b52, ftLastWriteTime.dwHighDateTime=0x1ca0431, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0062.068] FindNextFileW (in: hFindFile=0x381e00, lpFindFileData=0x31e56c | out: lpFindFileData=0x31e56c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd9b5b52, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd9b5b52, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xa68726b4, ftLastWriteTime.dwHighDateTime=0x1ca042b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Connections", cAlternateFileName="CONNEC~1")) returned 1 [0062.069] FindNextFileW (in: hFindFile=0x381e00, lpFindFileData=0x31e56c | out: lpFindFileData=0x31e56c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd9b5b52, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x7606ea15, ftLastAccessTime.dwHighDateTime=0x1ca0441, ftLastWriteTime.dwLowDateTime=0x7606ea15, ftLastWriteTime.dwHighDateTime=0x1ca0441, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Downloader", cAlternateFileName="DOWNLO~1")) returned 1 [0062.069] FindNextFileW (in: hFindFile=0x381e00, lpFindFileData=0x31e56c | out: lpFindFileData=0x31e56c*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0062.069] FindClose (in: hFindFile=0x381e00 | out: hFindFile=0x381e00) returned 1 [0062.069] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e7f4) returned 1 [0062.069] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e800) returned 1 [0062.069] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e7bc) returned 1 [0062.069] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\Network\\Connections", nBufferLength=0x105, lpBuffer=0x31e2c4, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\Network\\Connections", lpFilePart=0x0) returned 0x2c [0062.069] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\Network\\Connections\\", nBufferLength=0x105, lpBuffer=0x31e298, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\Network\\Connections\\", lpFilePart=0x0) returned 0x2d [0062.069] FindFirstFileW (in: lpFileName="C:\\ProgramData\\Microsoft\\Network\\Connections\\*", lpFindFileData=0x31e4e4 | out: lpFindFileData=0x31e4e4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd9b5b52, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd9b5b52, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xa68726b4, ftLastWriteTime.dwHighDateTime=0x1ca042b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x381e00 [0062.069] FindNextFileW (in: hFindFile=0x381e00, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd9b5b52, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd9b5b52, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xa68726b4, ftLastWriteTime.dwHighDateTime=0x1ca042b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0062.069] FindNextFileW (in: hFindFile=0x381e00, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd9b5b52, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd9b5b52, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xa68726b4, ftLastWriteTime.dwHighDateTime=0x1ca042b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 0 [0062.070] FindClose (in: hFindFile=0x381e00 | out: hFindFile=0x381e00) returned 1 [0062.070] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e77c) returned 1 [0062.070] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e788) returned 1 [0062.070] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e7bc) returned 1 [0062.070] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\Network\\Connections", nBufferLength=0x105, lpBuffer=0x31e2c4, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\Network\\Connections", lpFilePart=0x0) returned 0x2c [0062.070] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\Network\\Connections\\", nBufferLength=0x105, lpBuffer=0x31e298, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\Network\\Connections\\", lpFilePart=0x0) returned 0x2d [0062.070] FindFirstFileW (in: lpFileName="C:\\ProgramData\\Microsoft\\Network\\Connections\\*", lpFindFileData=0x31e4e4 | out: lpFindFileData=0x31e4e4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd9b5b52, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd9b5b52, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xa68726b4, ftLastWriteTime.dwHighDateTime=0x1ca042b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x381e00 [0062.070] FindNextFileW (in: hFindFile=0x381e00, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd9b5b52, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd9b5b52, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xa68726b4, ftLastWriteTime.dwHighDateTime=0x1ca042b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0062.070] FindNextFileW (in: hFindFile=0x381e00, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd9b5b52, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd9b5b52, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xa68726b4, ftLastWriteTime.dwHighDateTime=0x1ca042b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 0 [0062.070] FindClose (in: hFindFile=0x381e00 | out: hFindFile=0x381e00) returned 1 [0062.070] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e77c) returned 1 [0062.070] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e788) returned 1 [0062.070] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e7bc) returned 1 [0062.070] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\Network\\Downloader", nBufferLength=0x105, lpBuffer=0x31e2c4, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\Network\\Downloader", lpFilePart=0x0) returned 0x2b [0062.070] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\Network\\Downloader\\", nBufferLength=0x105, lpBuffer=0x31e298, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\Network\\Downloader\\", lpFilePart=0x0) returned 0x2c [0062.070] FindFirstFileW (in: lpFileName="C:\\ProgramData\\Microsoft\\Network\\Downloader\\*", lpFindFileData=0x31e4e4 | out: lpFindFileData=0x31e4e4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd9b5b52, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x7606ea15, ftLastAccessTime.dwHighDateTime=0x1ca0441, ftLastWriteTime.dwLowDateTime=0x7606ea15, ftLastWriteTime.dwHighDateTime=0x1ca0441, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x381e00 [0062.071] FindNextFileW (in: hFindFile=0x381e00, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd9b5b52, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x7606ea15, ftLastAccessTime.dwHighDateTime=0x1ca0441, ftLastWriteTime.dwLowDateTime=0x7606ea15, ftLastWriteTime.dwHighDateTime=0x1ca0441, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0062.071] FindNextFileW (in: hFindFile=0x381e00, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x120, ftCreationTime.dwLowDateTime=0x7606ea15, ftCreationTime.dwHighDateTime=0x1ca0441, ftLastAccessTime.dwLowDateTime=0x7606ea15, ftLastAccessTime.dwHighDateTime=0x1ca0441, ftLastWriteTime.dwLowDateTime=0xe0118910, ftLastWriteTime.dwHighDateTime=0x1d2ddf4, nFileSizeHigh=0x0, nFileSizeLow=0x400000, dwReserved0=0x0, dwReserved1=0x0, cFileName="qmgr0.dat", cAlternateFileName="")) returned 1 [0062.071] FindNextFileW (in: hFindFile=0x381e00, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x120, ftCreationTime.dwLowDateTime=0x7606ea15, ftCreationTime.dwHighDateTime=0x1ca0441, ftLastAccessTime.dwLowDateTime=0x7606ea15, ftLastAccessTime.dwHighDateTime=0x1ca0441, ftLastWriteTime.dwLowDateTime=0xdd404870, ftLastWriteTime.dwHighDateTime=0x1d2ddf4, nFileSizeHigh=0x0, nFileSizeLow=0x400000, dwReserved0=0x0, dwReserved1=0x0, cFileName="qmgr1.dat", cAlternateFileName="")) returned 1 [0062.071] FindNextFileW (in: hFindFile=0x381e00, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0062.071] FindClose (in: hFindFile=0x381e00 | out: hFindFile=0x381e00) returned 1 [0062.071] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e77c) returned 1 [0062.071] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e788) returned 1 [0062.071] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e7bc) returned 1 [0062.071] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\Network\\Downloader", nBufferLength=0x105, lpBuffer=0x31e2c4, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\Network\\Downloader", lpFilePart=0x0) returned 0x2b [0062.071] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\Network\\Downloader\\", nBufferLength=0x105, lpBuffer=0x31e298, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\Network\\Downloader\\", lpFilePart=0x0) returned 0x2c [0062.071] FindFirstFileW (in: lpFileName="C:\\ProgramData\\Microsoft\\Network\\Downloader\\*", lpFindFileData=0x31e4e4 | out: lpFindFileData=0x31e4e4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd9b5b52, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x7606ea15, ftLastAccessTime.dwHighDateTime=0x1ca0441, ftLastWriteTime.dwLowDateTime=0x7606ea15, ftLastWriteTime.dwHighDateTime=0x1ca0441, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x381e00 [0062.071] FindNextFileW (in: hFindFile=0x381e00, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd9b5b52, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x7606ea15, ftLastAccessTime.dwHighDateTime=0x1ca0441, ftLastWriteTime.dwLowDateTime=0x7606ea15, ftLastWriteTime.dwHighDateTime=0x1ca0441, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0062.071] FindNextFileW (in: hFindFile=0x381e00, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x120, ftCreationTime.dwLowDateTime=0x7606ea15, ftCreationTime.dwHighDateTime=0x1ca0441, ftLastAccessTime.dwLowDateTime=0x7606ea15, ftLastAccessTime.dwHighDateTime=0x1ca0441, ftLastWriteTime.dwLowDateTime=0xe0118910, ftLastWriteTime.dwHighDateTime=0x1d2ddf4, nFileSizeHigh=0x0, nFileSizeLow=0x400000, dwReserved0=0x0, dwReserved1=0x0, cFileName="qmgr0.dat", cAlternateFileName="")) returned 1 [0062.071] FindNextFileW (in: hFindFile=0x381e00, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x120, ftCreationTime.dwLowDateTime=0x7606ea15, ftCreationTime.dwHighDateTime=0x1ca0441, ftLastAccessTime.dwLowDateTime=0x7606ea15, ftLastAccessTime.dwHighDateTime=0x1ca0441, ftLastWriteTime.dwLowDateTime=0xdd404870, ftLastWriteTime.dwHighDateTime=0x1d2ddf4, nFileSizeHigh=0x0, nFileSizeLow=0x400000, dwReserved0=0x0, dwReserved1=0x0, cFileName="qmgr1.dat", cAlternateFileName="")) returned 1 [0062.071] FindNextFileW (in: hFindFile=0x381e00, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x120, ftCreationTime.dwLowDateTime=0x7606ea15, ftCreationTime.dwHighDateTime=0x1ca0441, ftLastAccessTime.dwLowDateTime=0x7606ea15, ftLastAccessTime.dwHighDateTime=0x1ca0441, ftLastWriteTime.dwLowDateTime=0xdd404870, ftLastWriteTime.dwHighDateTime=0x1d2ddf4, nFileSizeHigh=0x0, nFileSizeLow=0x400000, dwReserved0=0x0, dwReserved1=0x0, cFileName="qmgr1.dat", cAlternateFileName="")) returned 0 [0062.071] FindClose (in: hFindFile=0x381e00 | out: hFindFile=0x381e00) returned 1 [0062.072] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e77c) returned 1 [0062.072] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e788) returned 1 [0062.072] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e834) returned 1 [0062.072] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\OFFICE", nBufferLength=0x105, lpBuffer=0x31e33c, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\OFFICE", lpFilePart=0x0) returned 0x1f [0062.072] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\OFFICE\\", nBufferLength=0x105, lpBuffer=0x31e310, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\OFFICE\\", lpFilePart=0x0) returned 0x20 [0062.072] FindFirstFileW (in: lpFileName="C:\\ProgramData\\Microsoft\\OFFICE\\*", lpFindFileData=0x31e55c | out: lpFindFileData=0x31e55c*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xeed38550, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0x6d3a4910, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x6d3a4910, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x381e00 [0062.074] FindNextFileW (in: hFindFile=0x381e00, lpFindFileData=0x31e56c | out: lpFindFileData=0x31e56c*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xeed38550, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0x6d3a4910, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x6d3a4910, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0062.074] FindNextFileW (in: hFindFile=0x381e00, lpFindFileData=0x31e56c | out: lpFindFileData=0x31e56c*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x5011dd00, ftCreationTime.dwHighDateTime=0x1ca04ff, ftLastAccessTime.dwLowDateTime=0x5f409670, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x5011dd00, ftLastWriteTime.dwHighDateTime=0x1ca04ff, nFileSizeHigh=0x0, nFileSizeLow=0x1536, dwReserved0=0x0, dwReserved1=0x0, cFileName="AssetLibrary.ico", cAlternateFileName="ASSETL~1.ICO")) returned 1 [0062.074] FindNextFileW (in: hFindFile=0x381e00, lpFindFileData=0x31e56c | out: lpFindFileData=0x31e56c*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xabeeea00, ftCreationTime.dwHighDateTime=0x1c63848, ftLastAccessTime.dwLowDateTime=0x51e19d30, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xabeeea00, ftLastWriteTime.dwHighDateTime=0x1c63848, nFileSizeHigh=0x0, nFileSizeLow=0x627e, dwReserved0=0x0, dwReserved1=0x0, cFileName="DocumentRepository.ico", cAlternateFileName="DOCUME~1.ICO")) returned 1 [0062.074] FindNextFileW (in: hFindFile=0x381e00, lpFindFileData=0x31e56c | out: lpFindFileData=0x31e56c*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x2bfbd800, ftCreationTime.dwHighDateTime=0x1c9facb, ftLastAccessTime.dwLowDateTime=0x6a3248d0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x2bfbd800, ftLastWriteTime.dwHighDateTime=0x1c9facb, nFileSizeHigh=0x0, nFileSizeLow=0x5532e, dwReserved0=0x0, dwReserved1=0x0, cFileName="MySharePoints.ico", cAlternateFileName="MYSHAR~1.ICO")) returned 1 [0062.074] FindNextFileW (in: hFindFile=0x381e00, lpFindFileData=0x31e56c | out: lpFindFileData=0x31e56c*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xc92d1d00, ftCreationTime.dwHighDateTime=0x1c627a2, ftLastAccessTime.dwLowDateTime=0x594ac510, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xc92d1d00, ftLastWriteTime.dwHighDateTime=0x1c627a2, nFileSizeHigh=0x0, nFileSizeLow=0x627e, dwReserved0=0x0, dwReserved1=0x0, cFileName="MySite.ico", cAlternateFileName="")) returned 1 [0062.074] FindNextFileW (in: hFindFile=0x381e00, lpFindFileData=0x31e56c | out: lpFindFileData=0x31e56c*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xf2444900, ftCreationTime.dwHighDateTime=0x1c63848, ftLastAccessTime.dwLowDateTime=0x5ab49610, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xf2444900, ftLastWriteTime.dwHighDateTime=0x1c63848, nFileSizeHigh=0x0, nFileSizeLow=0x627e, dwReserved0=0x0, dwReserved1=0x0, cFileName="SharePointPortalSite.ico", cAlternateFileName="SHAREP~1.ICO")) returned 1 [0062.074] FindNextFileW (in: hFindFile=0x381e00, lpFindFileData=0x31e56c | out: lpFindFileData=0x31e56c*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xad743900, ftCreationTime.dwHighDateTime=0x1c62706, ftLastAccessTime.dwLowDateTime=0x6d3a4910, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xad743900, ftLastWriteTime.dwHighDateTime=0x1c62706, nFileSizeHigh=0x0, nFileSizeLow=0x627e, dwReserved0=0x0, dwReserved1=0x0, cFileName="SharePointTeamSite.ico", cAlternateFileName="SHAREP~2.ICO")) returned 1 [0062.074] FindNextFileW (in: hFindFile=0x381e00, lpFindFileData=0x31e56c | out: lpFindFileData=0x31e56c*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xeed38550, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xeed38550, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xeed38550, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="UICaptions", cAlternateFileName="UICAPT~1")) returned 1 [0062.074] FindNextFileW (in: hFindFile=0x381e00, lpFindFileData=0x31e56c | out: lpFindFileData=0x31e56c*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xeed38550, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xeed38550, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xeed38550, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="UICaptions", cAlternateFileName="UICAPT~1")) returned 0 [0062.074] FindClose (in: hFindFile=0x381e00 | out: hFindFile=0x381e00) returned 1 [0062.075] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e7f4) returned 1 [0062.075] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e800) returned 1 [0062.075] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e834) returned 1 [0062.075] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\OFFICE", nBufferLength=0x105, lpBuffer=0x31e33c, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\OFFICE", lpFilePart=0x0) returned 0x1f [0062.075] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\OFFICE\\", nBufferLength=0x105, lpBuffer=0x31e310, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\OFFICE\\", lpFilePart=0x0) returned 0x20 [0062.075] FindFirstFileW (in: lpFileName="C:\\ProgramData\\Microsoft\\OFFICE\\*", lpFindFileData=0x31e55c | out: lpFindFileData=0x31e55c*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xeed38550, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0x6d3a4910, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x6d3a4910, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x381e00 [0062.076] FindNextFileW (in: hFindFile=0x381e00, lpFindFileData=0x31e56c | out: lpFindFileData=0x31e56c*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xeed38550, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0x6d3a4910, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x6d3a4910, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0062.076] FindNextFileW (in: hFindFile=0x381e00, lpFindFileData=0x31e56c | out: lpFindFileData=0x31e56c*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x5011dd00, ftCreationTime.dwHighDateTime=0x1ca04ff, ftLastAccessTime.dwLowDateTime=0x5f409670, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x5011dd00, ftLastWriteTime.dwHighDateTime=0x1ca04ff, nFileSizeHigh=0x0, nFileSizeLow=0x1536, dwReserved0=0x0, dwReserved1=0x0, cFileName="AssetLibrary.ico", cAlternateFileName="ASSETL~1.ICO")) returned 1 [0062.076] FindNextFileW (in: hFindFile=0x381e00, lpFindFileData=0x31e56c | out: lpFindFileData=0x31e56c*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xabeeea00, ftCreationTime.dwHighDateTime=0x1c63848, ftLastAccessTime.dwLowDateTime=0x51e19d30, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xabeeea00, ftLastWriteTime.dwHighDateTime=0x1c63848, nFileSizeHigh=0x0, nFileSizeLow=0x627e, dwReserved0=0x0, dwReserved1=0x0, cFileName="DocumentRepository.ico", cAlternateFileName="DOCUME~1.ICO")) returned 1 [0062.076] FindNextFileW (in: hFindFile=0x381e00, lpFindFileData=0x31e56c | out: lpFindFileData=0x31e56c*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x2bfbd800, ftCreationTime.dwHighDateTime=0x1c9facb, ftLastAccessTime.dwLowDateTime=0x6a3248d0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x2bfbd800, ftLastWriteTime.dwHighDateTime=0x1c9facb, nFileSizeHigh=0x0, nFileSizeLow=0x5532e, dwReserved0=0x0, dwReserved1=0x0, cFileName="MySharePoints.ico", cAlternateFileName="MYSHAR~1.ICO")) returned 1 [0062.076] FindNextFileW (in: hFindFile=0x381e00, lpFindFileData=0x31e56c | out: lpFindFileData=0x31e56c*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xc92d1d00, ftCreationTime.dwHighDateTime=0x1c627a2, ftLastAccessTime.dwLowDateTime=0x594ac510, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xc92d1d00, ftLastWriteTime.dwHighDateTime=0x1c627a2, nFileSizeHigh=0x0, nFileSizeLow=0x627e, dwReserved0=0x0, dwReserved1=0x0, cFileName="MySite.ico", cAlternateFileName="")) returned 1 [0062.076] FindNextFileW (in: hFindFile=0x381e00, lpFindFileData=0x31e56c | out: lpFindFileData=0x31e56c*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xf2444900, ftCreationTime.dwHighDateTime=0x1c63848, ftLastAccessTime.dwLowDateTime=0x5ab49610, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xf2444900, ftLastWriteTime.dwHighDateTime=0x1c63848, nFileSizeHigh=0x0, nFileSizeLow=0x627e, dwReserved0=0x0, dwReserved1=0x0, cFileName="SharePointPortalSite.ico", cAlternateFileName="SHAREP~1.ICO")) returned 1 [0062.076] FindNextFileW (in: hFindFile=0x381e00, lpFindFileData=0x31e56c | out: lpFindFileData=0x31e56c*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xad743900, ftCreationTime.dwHighDateTime=0x1c62706, ftLastAccessTime.dwLowDateTime=0x6d3a4910, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xad743900, ftLastWriteTime.dwHighDateTime=0x1c62706, nFileSizeHigh=0x0, nFileSizeLow=0x627e, dwReserved0=0x0, dwReserved1=0x0, cFileName="SharePointTeamSite.ico", cAlternateFileName="SHAREP~2.ICO")) returned 1 [0062.076] FindNextFileW (in: hFindFile=0x381e00, lpFindFileData=0x31e56c | out: lpFindFileData=0x31e56c*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xeed38550, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xeed38550, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xeed38550, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="UICaptions", cAlternateFileName="UICAPT~1")) returned 1 [0062.076] FindNextFileW (in: hFindFile=0x381e00, lpFindFileData=0x31e56c | out: lpFindFileData=0x31e56c*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0062.076] FindClose (in: hFindFile=0x381e00 | out: hFindFile=0x381e00) returned 1 [0062.077] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e7f4) returned 1 [0062.077] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e800) returned 1 [0062.077] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e7bc) returned 1 [0062.077] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\OFFICE\\UICaptions", nBufferLength=0x105, lpBuffer=0x31e2c4, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\OFFICE\\UICaptions", lpFilePart=0x0) returned 0x2a [0062.077] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\OFFICE\\UICaptions\\", nBufferLength=0x105, lpBuffer=0x31e298, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\OFFICE\\UICaptions\\", lpFilePart=0x0) returned 0x2b [0062.077] FindFirstFileW (in: lpFileName="C:\\ProgramData\\Microsoft\\OFFICE\\UICaptions\\*", lpFindFileData=0x31e4e4 | out: lpFindFileData=0x31e4e4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xeed38550, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xeed38550, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xeed38550, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x381e00 [0062.078] FindNextFileW (in: hFindFile=0x381e00, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xeed38550, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xeed38550, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xeed38550, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0062.078] FindNextFileW (in: hFindFile=0x381e00, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xeed38550, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xef116910, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xef116910, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="1036", cAlternateFileName="")) returned 1 [0062.078] FindNextFileW (in: hFindFile=0x381e00, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xeed38550, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xef116910, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xef116910, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="3082", cAlternateFileName="")) returned 1 [0062.078] FindNextFileW (in: hFindFile=0x381e00, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xeed38550, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xef116910, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xef116910, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="3082", cAlternateFileName="")) returned 0 [0062.078] FindClose (in: hFindFile=0x381e00 | out: hFindFile=0x381e00) returned 1 [0062.078] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e77c) returned 1 [0062.079] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e788) returned 1 [0062.079] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e7bc) returned 1 [0062.079] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\OFFICE\\UICaptions", nBufferLength=0x105, lpBuffer=0x31e2c4, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\OFFICE\\UICaptions", lpFilePart=0x0) returned 0x2a [0062.079] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\OFFICE\\UICaptions\\", nBufferLength=0x105, lpBuffer=0x31e298, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\OFFICE\\UICaptions\\", lpFilePart=0x0) returned 0x2b [0062.079] FindFirstFileW (in: lpFileName="C:\\ProgramData\\Microsoft\\OFFICE\\UICaptions\\*", lpFindFileData=0x31e4e4 | out: lpFindFileData=0x31e4e4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xeed38550, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xeed38550, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xeed38550, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x381e00 [0062.079] FindNextFileW (in: hFindFile=0x381e00, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xeed38550, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xeed38550, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xeed38550, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0062.079] FindNextFileW (in: hFindFile=0x381e00, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xeed38550, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xef116910, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xef116910, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="1036", cAlternateFileName="")) returned 1 [0062.079] FindNextFileW (in: hFindFile=0x381e00, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xeed38550, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xef116910, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xef116910, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="3082", cAlternateFileName="")) returned 1 [0062.079] FindNextFileW (in: hFindFile=0x381e00, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0062.079] FindClose (in: hFindFile=0x381e00 | out: hFindFile=0x381e00) returned 1 [0062.079] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e77c) returned 1 [0062.079] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e788) returned 1 [0062.079] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e744) returned 1 [0062.079] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\OFFICE\\UICaptions\\1036", nBufferLength=0x105, lpBuffer=0x31e24c, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\OFFICE\\UICaptions\\1036", lpFilePart=0x0) returned 0x2f [0062.079] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\OFFICE\\UICaptions\\1036\\", nBufferLength=0x105, lpBuffer=0x31e220, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\OFFICE\\UICaptions\\1036\\", lpFilePart=0x0) returned 0x30 [0062.079] FindFirstFileW (in: lpFileName="C:\\ProgramData\\Microsoft\\OFFICE\\UICaptions\\1036\\*", lpFindFileData=0x31e46c | out: lpFindFileData=0x31e46c*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xeed38550, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xef116910, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xef116910, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x381e00 [0062.081] FindNextFileW (in: hFindFile=0x381e00, lpFindFileData=0x31e47c | out: lpFindFileData=0x31e47c*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xeed38550, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xef116910, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xef116910, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0062.082] FindNextFileW (in: hFindFile=0x381e00, lpFindFileData=0x31e47c | out: lpFindFileData=0x31e47c*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x1be9a700, ftCreationTime.dwHighDateTime=0x1caca12, ftLastAccessTime.dwLowDateTime=0xeed38550, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0x1be9a700, ftLastWriteTime.dwHighDateTime=0x1caca12, nFileSizeHigh=0x0, nFileSizeLow=0x3960, dwReserved0=0x0, dwReserved1=0x0, cFileName="ENVELOPR.DLL.trx_dll", cAlternateFileName="ENVELO~1.TRX")) returned 1 [0062.082] FindNextFileW (in: hFindFile=0x381e00, lpFindFileData=0x31e47c | out: lpFindFileData=0x31e47c*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xbd48e100, ftCreationTime.dwHighDateTime=0x1cac7f7, ftLastAccessTime.dwLowDateTime=0xeedf6c30, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xbd48e100, ftLastWriteTime.dwHighDateTime=0x1cac7f7, nFileSizeHigh=0x0, nFileSizeLow=0xbf60, dwReserved0=0x0, dwReserved1=0x0, cFileName="GRINTL32.DLL.trx_dll", cAlternateFileName="GRINTL~1.TRX")) returned 1 [0062.082] FindNextFileW (in: hFindFile=0x381e00, lpFindFileData=0x31e47c | out: lpFindFileData=0x31e47c*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xbd48e100, ftCreationTime.dwHighDateTime=0x1cac7f7, ftLastAccessTime.dwLowDateTime=0xeedf6c30, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xbd48e100, ftLastWriteTime.dwHighDateTime=0x1cac7f7, nFileSizeHigh=0x0, nFileSizeLow=0x3d960, dwReserved0=0x0, dwReserved1=0x0, cFileName="GRINTL32.REST.trx_dll", cAlternateFileName="GRINTL~2.TRX")) returned 1 [0062.082] FindNextFileW (in: hFindFile=0x381e00, lpFindFileData=0x31e47c | out: lpFindFileData=0x31e47c*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x1be9a700, ftCreationTime.dwHighDateTime=0x1caca12, ftLastAccessTime.dwLowDateTime=0xeee1cd90, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0x1be9a700, ftLastWriteTime.dwHighDateTime=0x1caca12, nFileSizeHigh=0x0, nFileSizeLow=0x49f60, dwReserved0=0x0, dwReserved1=0x0, cFileName="MAPIR.DLL.trx_dll", cAlternateFileName="MAPIRD~1.TRX")) returned 1 [0062.082] FindNextFileW (in: hFindFile=0x381e00, lpFindFileData=0x31e47c | out: lpFindFileData=0x31e47c*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xa27f6800, ftCreationTime.dwHighDateTime=0x1cac809, ftLastAccessTime.dwLowDateTime=0xeee1cd90, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xa27f6800, ftLastWriteTime.dwHighDateTime=0x1cac809, nFileSizeHigh=0x0, nFileSizeLow=0xc160, dwReserved0=0x0, dwReserved1=0x0, cFileName="MOR6INT.REST.trx_dll", cAlternateFileName="MOR6IN~1.TRX")) returned 1 [0062.082] FindNextFileW (in: hFindFile=0x381e00, lpFindFileData=0x31e47c | out: lpFindFileData=0x31e47c*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x9f53ca00, ftCreationTime.dwHighDateTime=0x1caca0b, ftLastAccessTime.dwLowDateTime=0xeee42ef0, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0x9f53ca00, ftLastWriteTime.dwHighDateTime=0x1caca0b, nFileSizeHigh=0x0, nFileSizeLow=0x17960, dwReserved0=0x0, dwReserved1=0x0, cFileName="MSOINTL.DLL.trx_dll", cAlternateFileName="MSOINT~1.TRX")) returned 1 [0062.083] FindNextFileW (in: hFindFile=0x381e00, lpFindFileData=0x31e47c | out: lpFindFileData=0x31e47c*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x9f53ca00, ftCreationTime.dwHighDateTime=0x1caca0b, ftLastAccessTime.dwLowDateTime=0xeeeb5310, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0x9f53ca00, ftLastWriteTime.dwHighDateTime=0x1caca0b, nFileSizeHigh=0x0, nFileSizeLow=0x2ced60, dwReserved0=0x0, dwReserved1=0x0, cFileName="MSOINTL.REST.trx_dll", cAlternateFileName="MSOINT~2.TRX")) returned 1 [0062.083] FindNextFileW (in: hFindFile=0x381e00, lpFindFileData=0x31e47c | out: lpFindFileData=0x31e47c*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xaa381000, ftCreationTime.dwHighDateTime=0x1cac7fb, ftLastAccessTime.dwLowDateTime=0xeef27730, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xaa381000, ftLastWriteTime.dwHighDateTime=0x1cac7fb, nFileSizeHigh=0x0, nFileSizeLow=0xb360, dwReserved0=0x0, dwReserved1=0x0, cFileName="OMSINTL.DLL.trx_dll", cAlternateFileName="OMSINT~1.TRX")) returned 1 [0062.083] FindNextFileW (in: hFindFile=0x381e00, lpFindFileData=0x31e47c | out: lpFindFileData=0x31e47c*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x7337cc00, ftCreationTime.dwHighDateTime=0x1cacf6a, ftLastAccessTime.dwLowDateTime=0xeef27730, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0x7337cc00, ftLastWriteTime.dwHighDateTime=0x1cacf6a, nFileSizeHigh=0x0, nFileSizeLow=0x7b60, dwReserved0=0x0, dwReserved1=0x0, cFileName="ONINTL.DLL.trx_dll", cAlternateFileName="ONINTL~1.TRX")) returned 1 [0062.083] FindNextFileW (in: hFindFile=0x381e00, lpFindFileData=0x31e47c | out: lpFindFileData=0x31e47c*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x7337cc00, ftCreationTime.dwHighDateTime=0x1cacf6a, ftLastAccessTime.dwLowDateTime=0xeef4d890, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0x7337cc00, ftLastWriteTime.dwHighDateTime=0x1cacf6a, nFileSizeHigh=0x0, nFileSizeLow=0x3fb60, dwReserved0=0x0, dwReserved1=0x0, cFileName="ONINTL.REST.trx_dll", cAlternateFileName="ONINTL~2.TRX")) returned 1 [0062.083] FindNextFileW (in: hFindFile=0x381e00, lpFindFileData=0x31e47c | out: lpFindFileData=0x31e47c*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x1ab87a00, ftCreationTime.dwHighDateTime=0x1caca12, ftLastAccessTime.dwLowDateTime=0xeef4d890, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0x1ab87a00, ftLastWriteTime.dwHighDateTime=0x1caca12, nFileSizeHigh=0x0, nFileSizeLow=0x37560, dwReserved0=0x0, dwReserved1=0x0, cFileName="OUTLLIBR.DLL.trx_dll", cAlternateFileName="OUTLLI~1.TRX")) returned 1 [0062.083] FindNextFileW (in: hFindFile=0x381e00, lpFindFileData=0x31e47c | out: lpFindFileData=0x31e47c*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x1ab87a00, ftCreationTime.dwHighDateTime=0x1caca12, ftLastAccessTime.dwLowDateTime=0xeef739f0, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0x1ab87a00, ftLastWriteTime.dwHighDateTime=0x1caca12, nFileSizeHigh=0x0, nFileSizeLow=0xa6560, dwReserved0=0x0, dwReserved1=0x0, cFileName="OUTLLIBR.REST.trx_dll", cAlternateFileName="OUTLLI~2.TRX")) returned 1 [0062.083] FindNextFileW (in: hFindFile=0x381e00, lpFindFileData=0x31e47c | out: lpFindFileData=0x31e47c*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x1be9a700, ftCreationTime.dwHighDateTime=0x1caca12, ftLastAccessTime.dwLowDateTime=0xeef739f0, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0x1be9a700, ftLastWriteTime.dwHighDateTime=0x1caca12, nFileSizeHigh=0x0, nFileSizeLow=0x2b60, dwReserved0=0x0, dwReserved1=0x0, cFileName="OUTLWVW.DLL.trx_dll", cAlternateFileName="OUTLWV~1.TRX")) returned 1 [0062.083] FindNextFileW (in: hFindFile=0x381e00, lpFindFileData=0x31e47c | out: lpFindFileData=0x31e47c*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x7cef6000, ftCreationTime.dwHighDateTime=0x1cac803, ftLastAccessTime.dwLowDateTime=0xef00bf70, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0x7cef6000, ftLastWriteTime.dwHighDateTime=0x1cac803, nFileSizeHigh=0x0, nFileSizeLow=0xcd60, dwReserved0=0x0, dwReserved1=0x0, cFileName="PPINTL.DLL.trx_dll", cAlternateFileName="PPINTL~1.TRX")) returned 1 [0062.083] FindNextFileW (in: hFindFile=0x381e00, lpFindFileData=0x31e47c | out: lpFindFileData=0x31e47c*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x7cef6000, ftCreationTime.dwHighDateTime=0x1cac803, ftLastAccessTime.dwLowDateTime=0xef00bf70, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0x7cef6000, ftLastWriteTime.dwHighDateTime=0x1cac803, nFileSizeHigh=0x0, nFileSizeLow=0x45f60, dwReserved0=0x0, dwReserved1=0x0, cFileName="PPINTL.REST.trx_dll", cAlternateFileName="PPINTL~2.TRX")) returned 1 [0062.083] FindNextFileW (in: hFindFile=0x381e00, lpFindFileData=0x31e47c | out: lpFindFileData=0x31e47c*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xa3b09500, ftCreationTime.dwHighDateTime=0x1cac809, ftLastAccessTime.dwLowDateTime=0xef00bf70, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xa3b09500, ftLastWriteTime.dwHighDateTime=0x1cac809, nFileSizeHigh=0x0, nFileSizeLow=0x1a360, dwReserved0=0x0, dwReserved1=0x0, cFileName="PUB6INTL.DLL.trx_dll", cAlternateFileName="PUB6IN~1.TRX")) returned 1 [0062.083] FindNextFileW (in: hFindFile=0x381e00, lpFindFileData=0x31e47c | out: lpFindFileData=0x31e47c*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xa27f6800, ftCreationTime.dwHighDateTime=0x1cac809, ftLastAccessTime.dwLowDateTime=0xef0320d0, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xa27f6800, ftLastWriteTime.dwHighDateTime=0x1cac809, nFileSizeHigh=0x0, nFileSizeLow=0x8e160, dwReserved0=0x0, dwReserved1=0x0, cFileName="PUB6INTL.REST.trx_dll", cAlternateFileName="PUB6IN~2.TRX")) returned 1 [0062.083] FindNextFileW (in: hFindFile=0x381e00, lpFindFileData=0x31e47c | out: lpFindFileData=0x31e47c*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x749d2200, ftCreationTime.dwHighDateTime=0x1cac80f, ftLastAccessTime.dwLowDateTime=0xef0320d0, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0x749d2200, ftLastWriteTime.dwHighDateTime=0x1cac80f, nFileSizeHigh=0x0, nFileSizeLow=0x5ab60, dwReserved0=0x0, dwReserved1=0x0, cFileName="PUBWZINT.REST.trx_dll", cAlternateFileName="PUBWZI~1.TRX")) returned 1 [0062.083] FindNextFileW (in: hFindFile=0x381e00, lpFindFileData=0x31e47c | out: lpFindFileData=0x31e47c*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x6d7a1200, ftCreationTime.dwHighDateTime=0x1cac817, ftLastAccessTime.dwLowDateTime=0xef058230, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0x6d7a1200, ftLastWriteTime.dwHighDateTime=0x1cac817, nFileSizeHigh=0x0, nFileSizeLow=0x3360, dwReserved0=0x0, dwReserved1=0x0, cFileName="SGRES.DLL.trx_dll", cAlternateFileName="SGRESD~1.TRX")) returned 1 [0062.083] FindNextFileW (in: hFindFile=0x381e00, lpFindFileData=0x31e47c | out: lpFindFileData=0x31e47c*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xc8e7d800, ftCreationTime.dwHighDateTime=0x1cac7f6, ftLastAccessTime.dwLowDateTime=0xef058230, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xc8e7d800, ftLastWriteTime.dwHighDateTime=0x1cac7f6, nFileSizeHigh=0x0, nFileSizeLow=0x4160, dwReserved0=0x0, dwReserved1=0x0, cFileName="STINTL.DLL.trx_dll", cAlternateFileName="STINTL~1.TRX")) returned 1 [0062.083] FindNextFileW (in: hFindFile=0x381e00, lpFindFileData=0x31e47c | out: lpFindFileData=0x31e47c*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xbf706700, ftCreationTime.dwHighDateTime=0x1cac81a, ftLastAccessTime.dwLowDateTime=0xef0a44f0, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xbf706700, ftLastWriteTime.dwHighDateTime=0x1cac81a, nFileSizeHigh=0x0, nFileSizeLow=0x6960, dwReserved0=0x0, dwReserved1=0x0, cFileName="VISBRRES.DLL.trx_dll", cAlternateFileName="VISBRR~1.TRX")) returned 1 [0062.083] FindNextFileW (in: hFindFile=0x381e00, lpFindFileData=0x31e47c | out: lpFindFileData=0x31e47c*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x6a315700, ftCreationTime.dwHighDateTime=0x1cac814, ftLastAccessTime.dwLowDateTime=0xef0a44f0, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0x6a315700, ftLastWriteTime.dwHighDateTime=0x1cac814, nFileSizeHigh=0x0, nFileSizeLow=0x77560, dwReserved0=0x0, dwReserved1=0x0, cFileName="VISINTL.DLL.trx_dll", cAlternateFileName="VISINT~1.TRX")) returned 1 [0062.083] FindNextFileW (in: hFindFile=0x381e00, lpFindFileData=0x31e47c | out: lpFindFileData=0x31e47c*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xcb31c100, ftCreationTime.dwHighDateTime=0x1cacd25, ftLastAccessTime.dwLowDateTime=0xef0ca650, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xcb31c100, ftLastWriteTime.dwHighDateTime=0x1cacd25, nFileSizeHigh=0x0, nFileSizeLow=0x25b60, dwReserved0=0x0, dwReserved1=0x0, cFileName="WWINTL.DLL.trx_dll", cAlternateFileName="WWINTL~1.TRX")) returned 1 [0062.083] FindNextFileW (in: hFindFile=0x381e00, lpFindFileData=0x31e47c | out: lpFindFileData=0x31e47c*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xcb31c100, ftCreationTime.dwHighDateTime=0x1cacd25, ftLastAccessTime.dwLowDateTime=0xef0f07b0, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xcb31c100, ftLastWriteTime.dwHighDateTime=0x1cacd25, nFileSizeHigh=0x0, nFileSizeLow=0x115b60, dwReserved0=0x0, dwReserved1=0x0, cFileName="WWINTL.REST.trx_dll", cAlternateFileName="WWINTL~2.TRX")) returned 1 [0062.083] FindNextFileW (in: hFindFile=0x381e00, lpFindFileData=0x31e47c | out: lpFindFileData=0x31e47c*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x6b688100, ftCreationTime.dwHighDateTime=0x1cac820, ftLastAccessTime.dwLowDateTime=0xef0f07b0, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0x6b688100, ftLastWriteTime.dwHighDateTime=0x1cac820, nFileSizeHigh=0x0, nFileSizeLow=0x25360, dwReserved0=0x0, dwReserved1=0x0, cFileName="XLINTL32.DLL.trx_dll", cAlternateFileName="XLINTL~1.TRX")) returned 1 [0062.083] FindNextFileW (in: hFindFile=0x381e00, lpFindFileData=0x31e47c | out: lpFindFileData=0x31e47c*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x6a375400, ftCreationTime.dwHighDateTime=0x1cac820, ftLastAccessTime.dwLowDateTime=0xef116910, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0x6a375400, ftLastWriteTime.dwHighDateTime=0x1cac820, nFileSizeHigh=0x0, nFileSizeLow=0x137960, dwReserved0=0x0, dwReserved1=0x0, cFileName="XLINTL32.REST.trx_dll", cAlternateFileName="XLINTL~2.TRX")) returned 1 [0062.083] FindNextFileW (in: hFindFile=0x381e00, lpFindFileData=0x31e47c | out: lpFindFileData=0x31e47c*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xfe092000, ftCreationTime.dwHighDateTime=0x1cac820, ftLastAccessTime.dwLowDateTime=0xef116910, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xfe092000, ftLastWriteTime.dwHighDateTime=0x1cac820, nFileSizeHigh=0x0, nFileSizeLow=0x3d60, dwReserved0=0x0, dwReserved1=0x0, cFileName="XLSLICER.DLL.trx_dll", cAlternateFileName="XLSLIC~1.TRX")) returned 1 [0062.083] FindNextFileW (in: hFindFile=0x381e00, lpFindFileData=0x31e47c | out: lpFindFileData=0x31e47c*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0062.084] FindClose (in: hFindFile=0x381e00 | out: hFindFile=0x381e00) returned 1 [0062.084] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e704) returned 1 [0062.084] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e710) returned 1 [0062.084] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e744) returned 1 [0062.084] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\OFFICE\\UICaptions\\1036", nBufferLength=0x105, lpBuffer=0x31e24c, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\OFFICE\\UICaptions\\1036", lpFilePart=0x0) returned 0x2f [0062.084] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\OFFICE\\UICaptions\\1036\\", nBufferLength=0x105, lpBuffer=0x31e220, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\OFFICE\\UICaptions\\1036\\", lpFilePart=0x0) returned 0x30 [0062.084] FindFirstFileW (in: lpFileName="C:\\ProgramData\\Microsoft\\OFFICE\\UICaptions\\1036\\*", lpFindFileData=0x31e46c | out: lpFindFileData=0x31e46c*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xeed38550, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xef116910, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xef116910, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x381e00 [0062.085] FindNextFileW (in: hFindFile=0x381e00, lpFindFileData=0x31e47c | out: lpFindFileData=0x31e47c*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xeed38550, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xef116910, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xef116910, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0062.085] FindNextFileW (in: hFindFile=0x381e00, lpFindFileData=0x31e47c | out: lpFindFileData=0x31e47c*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x1be9a700, ftCreationTime.dwHighDateTime=0x1caca12, ftLastAccessTime.dwLowDateTime=0xeed38550, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0x1be9a700, ftLastWriteTime.dwHighDateTime=0x1caca12, nFileSizeHigh=0x0, nFileSizeLow=0x3960, dwReserved0=0x0, dwReserved1=0x0, cFileName="ENVELOPR.DLL.trx_dll", cAlternateFileName="ENVELO~1.TRX")) returned 1 [0062.085] FindNextFileW (in: hFindFile=0x381e00, lpFindFileData=0x31e47c | out: lpFindFileData=0x31e47c*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xbd48e100, ftCreationTime.dwHighDateTime=0x1cac7f7, ftLastAccessTime.dwLowDateTime=0xeedf6c30, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xbd48e100, ftLastWriteTime.dwHighDateTime=0x1cac7f7, nFileSizeHigh=0x0, nFileSizeLow=0xbf60, dwReserved0=0x0, dwReserved1=0x0, cFileName="GRINTL32.DLL.trx_dll", cAlternateFileName="GRINTL~1.TRX")) returned 1 [0062.085] FindNextFileW (in: hFindFile=0x381e00, lpFindFileData=0x31e47c | out: lpFindFileData=0x31e47c*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xbd48e100, ftCreationTime.dwHighDateTime=0x1cac7f7, ftLastAccessTime.dwLowDateTime=0xeedf6c30, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xbd48e100, ftLastWriteTime.dwHighDateTime=0x1cac7f7, nFileSizeHigh=0x0, nFileSizeLow=0x3d960, dwReserved0=0x0, dwReserved1=0x0, cFileName="GRINTL32.REST.trx_dll", cAlternateFileName="GRINTL~2.TRX")) returned 1 [0062.085] FindNextFileW (in: hFindFile=0x381e00, lpFindFileData=0x31e47c | out: lpFindFileData=0x31e47c*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x1be9a700, ftCreationTime.dwHighDateTime=0x1caca12, ftLastAccessTime.dwLowDateTime=0xeee1cd90, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0x1be9a700, ftLastWriteTime.dwHighDateTime=0x1caca12, nFileSizeHigh=0x0, nFileSizeLow=0x49f60, dwReserved0=0x0, dwReserved1=0x0, cFileName="MAPIR.DLL.trx_dll", cAlternateFileName="MAPIRD~1.TRX")) returned 1 [0062.085] FindNextFileW (in: hFindFile=0x381e00, lpFindFileData=0x31e47c | out: lpFindFileData=0x31e47c*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xa27f6800, ftCreationTime.dwHighDateTime=0x1cac809, ftLastAccessTime.dwLowDateTime=0xeee1cd90, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xa27f6800, ftLastWriteTime.dwHighDateTime=0x1cac809, nFileSizeHigh=0x0, nFileSizeLow=0xc160, dwReserved0=0x0, dwReserved1=0x0, cFileName="MOR6INT.REST.trx_dll", cAlternateFileName="MOR6IN~1.TRX")) returned 1 [0062.085] FindNextFileW (in: hFindFile=0x381e00, lpFindFileData=0x31e47c | out: lpFindFileData=0x31e47c*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x9f53ca00, ftCreationTime.dwHighDateTime=0x1caca0b, ftLastAccessTime.dwLowDateTime=0xeee42ef0, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0x9f53ca00, ftLastWriteTime.dwHighDateTime=0x1caca0b, nFileSizeHigh=0x0, nFileSizeLow=0x17960, dwReserved0=0x0, dwReserved1=0x0, cFileName="MSOINTL.DLL.trx_dll", cAlternateFileName="MSOINT~1.TRX")) returned 1 [0062.086] FindNextFileW (in: hFindFile=0x381e00, lpFindFileData=0x31e47c | out: lpFindFileData=0x31e47c*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x9f53ca00, ftCreationTime.dwHighDateTime=0x1caca0b, ftLastAccessTime.dwLowDateTime=0xeeeb5310, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0x9f53ca00, ftLastWriteTime.dwHighDateTime=0x1caca0b, nFileSizeHigh=0x0, nFileSizeLow=0x2ced60, dwReserved0=0x0, dwReserved1=0x0, cFileName="MSOINTL.REST.trx_dll", cAlternateFileName="MSOINT~2.TRX")) returned 1 [0062.086] FindNextFileW (in: hFindFile=0x381e00, lpFindFileData=0x31e47c | out: lpFindFileData=0x31e47c*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xaa381000, ftCreationTime.dwHighDateTime=0x1cac7fb, ftLastAccessTime.dwLowDateTime=0xeef27730, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xaa381000, ftLastWriteTime.dwHighDateTime=0x1cac7fb, nFileSizeHigh=0x0, nFileSizeLow=0xb360, dwReserved0=0x0, dwReserved1=0x0, cFileName="OMSINTL.DLL.trx_dll", cAlternateFileName="OMSINT~1.TRX")) returned 1 [0062.086] FindNextFileW (in: hFindFile=0x381e00, lpFindFileData=0x31e47c | out: lpFindFileData=0x31e47c*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x7337cc00, ftCreationTime.dwHighDateTime=0x1cacf6a, ftLastAccessTime.dwLowDateTime=0xeef27730, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0x7337cc00, ftLastWriteTime.dwHighDateTime=0x1cacf6a, nFileSizeHigh=0x0, nFileSizeLow=0x7b60, dwReserved0=0x0, dwReserved1=0x0, cFileName="ONINTL.DLL.trx_dll", cAlternateFileName="ONINTL~1.TRX")) returned 1 [0062.086] FindNextFileW (in: hFindFile=0x381e00, lpFindFileData=0x31e47c | out: lpFindFileData=0x31e47c*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x7337cc00, ftCreationTime.dwHighDateTime=0x1cacf6a, ftLastAccessTime.dwLowDateTime=0xeef4d890, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0x7337cc00, ftLastWriteTime.dwHighDateTime=0x1cacf6a, nFileSizeHigh=0x0, nFileSizeLow=0x3fb60, dwReserved0=0x0, dwReserved1=0x0, cFileName="ONINTL.REST.trx_dll", cAlternateFileName="ONINTL~2.TRX")) returned 1 [0062.086] FindNextFileW (in: hFindFile=0x381e00, lpFindFileData=0x31e47c | out: lpFindFileData=0x31e47c*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x1ab87a00, ftCreationTime.dwHighDateTime=0x1caca12, ftLastAccessTime.dwLowDateTime=0xeef4d890, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0x1ab87a00, ftLastWriteTime.dwHighDateTime=0x1caca12, nFileSizeHigh=0x0, nFileSizeLow=0x37560, dwReserved0=0x0, dwReserved1=0x0, cFileName="OUTLLIBR.DLL.trx_dll", cAlternateFileName="OUTLLI~1.TRX")) returned 1 [0062.086] FindNextFileW (in: hFindFile=0x381e00, lpFindFileData=0x31e47c | out: lpFindFileData=0x31e47c*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x1ab87a00, ftCreationTime.dwHighDateTime=0x1caca12, ftLastAccessTime.dwLowDateTime=0xeef739f0, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0x1ab87a00, ftLastWriteTime.dwHighDateTime=0x1caca12, nFileSizeHigh=0x0, nFileSizeLow=0xa6560, dwReserved0=0x0, dwReserved1=0x0, cFileName="OUTLLIBR.REST.trx_dll", cAlternateFileName="OUTLLI~2.TRX")) returned 1 [0062.086] FindNextFileW (in: hFindFile=0x381e00, lpFindFileData=0x31e47c | out: lpFindFileData=0x31e47c*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x1be9a700, ftCreationTime.dwHighDateTime=0x1caca12, ftLastAccessTime.dwLowDateTime=0xeef739f0, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0x1be9a700, ftLastWriteTime.dwHighDateTime=0x1caca12, nFileSizeHigh=0x0, nFileSizeLow=0x2b60, dwReserved0=0x0, dwReserved1=0x0, cFileName="OUTLWVW.DLL.trx_dll", cAlternateFileName="OUTLWV~1.TRX")) returned 1 [0062.086] FindNextFileW (in: hFindFile=0x381e00, lpFindFileData=0x31e47c | out: lpFindFileData=0x31e47c*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x7cef6000, ftCreationTime.dwHighDateTime=0x1cac803, ftLastAccessTime.dwLowDateTime=0xef00bf70, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0x7cef6000, ftLastWriteTime.dwHighDateTime=0x1cac803, nFileSizeHigh=0x0, nFileSizeLow=0xcd60, dwReserved0=0x0, dwReserved1=0x0, cFileName="PPINTL.DLL.trx_dll", cAlternateFileName="PPINTL~1.TRX")) returned 1 [0062.086] FindNextFileW (in: hFindFile=0x381e00, lpFindFileData=0x31e47c | out: lpFindFileData=0x31e47c*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x7cef6000, ftCreationTime.dwHighDateTime=0x1cac803, ftLastAccessTime.dwLowDateTime=0xef00bf70, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0x7cef6000, ftLastWriteTime.dwHighDateTime=0x1cac803, nFileSizeHigh=0x0, nFileSizeLow=0x45f60, dwReserved0=0x0, dwReserved1=0x0, cFileName="PPINTL.REST.trx_dll", cAlternateFileName="PPINTL~2.TRX")) returned 1 [0062.086] FindNextFileW (in: hFindFile=0x381e00, lpFindFileData=0x31e47c | out: lpFindFileData=0x31e47c*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xa3b09500, ftCreationTime.dwHighDateTime=0x1cac809, ftLastAccessTime.dwLowDateTime=0xef00bf70, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xa3b09500, ftLastWriteTime.dwHighDateTime=0x1cac809, nFileSizeHigh=0x0, nFileSizeLow=0x1a360, dwReserved0=0x0, dwReserved1=0x0, cFileName="PUB6INTL.DLL.trx_dll", cAlternateFileName="PUB6IN~1.TRX")) returned 1 [0062.086] FindNextFileW (in: hFindFile=0x381e00, lpFindFileData=0x31e47c | out: lpFindFileData=0x31e47c*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xa27f6800, ftCreationTime.dwHighDateTime=0x1cac809, ftLastAccessTime.dwLowDateTime=0xef0320d0, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xa27f6800, ftLastWriteTime.dwHighDateTime=0x1cac809, nFileSizeHigh=0x0, nFileSizeLow=0x8e160, dwReserved0=0x0, dwReserved1=0x0, cFileName="PUB6INTL.REST.trx_dll", cAlternateFileName="PUB6IN~2.TRX")) returned 1 [0062.086] FindNextFileW (in: hFindFile=0x381e00, lpFindFileData=0x31e47c | out: lpFindFileData=0x31e47c*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x749d2200, ftCreationTime.dwHighDateTime=0x1cac80f, ftLastAccessTime.dwLowDateTime=0xef0320d0, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0x749d2200, ftLastWriteTime.dwHighDateTime=0x1cac80f, nFileSizeHigh=0x0, nFileSizeLow=0x5ab60, dwReserved0=0x0, dwReserved1=0x0, cFileName="PUBWZINT.REST.trx_dll", cAlternateFileName="PUBWZI~1.TRX")) returned 1 [0062.086] FindNextFileW (in: hFindFile=0x381e00, lpFindFileData=0x31e47c | out: lpFindFileData=0x31e47c*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x6d7a1200, ftCreationTime.dwHighDateTime=0x1cac817, ftLastAccessTime.dwLowDateTime=0xef058230, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0x6d7a1200, ftLastWriteTime.dwHighDateTime=0x1cac817, nFileSizeHigh=0x0, nFileSizeLow=0x3360, dwReserved0=0x0, dwReserved1=0x0, cFileName="SGRES.DLL.trx_dll", cAlternateFileName="SGRESD~1.TRX")) returned 1 [0062.086] FindNextFileW (in: hFindFile=0x381e00, lpFindFileData=0x31e47c | out: lpFindFileData=0x31e47c*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xc8e7d800, ftCreationTime.dwHighDateTime=0x1cac7f6, ftLastAccessTime.dwLowDateTime=0xef058230, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xc8e7d800, ftLastWriteTime.dwHighDateTime=0x1cac7f6, nFileSizeHigh=0x0, nFileSizeLow=0x4160, dwReserved0=0x0, dwReserved1=0x0, cFileName="STINTL.DLL.trx_dll", cAlternateFileName="STINTL~1.TRX")) returned 1 [0062.086] FindNextFileW (in: hFindFile=0x381e00, lpFindFileData=0x31e47c | out: lpFindFileData=0x31e47c*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xbf706700, ftCreationTime.dwHighDateTime=0x1cac81a, ftLastAccessTime.dwLowDateTime=0xef0a44f0, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xbf706700, ftLastWriteTime.dwHighDateTime=0x1cac81a, nFileSizeHigh=0x0, nFileSizeLow=0x6960, dwReserved0=0x0, dwReserved1=0x0, cFileName="VISBRRES.DLL.trx_dll", cAlternateFileName="VISBRR~1.TRX")) returned 1 [0062.086] FindNextFileW (in: hFindFile=0x381e00, lpFindFileData=0x31e47c | out: lpFindFileData=0x31e47c*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x6a315700, ftCreationTime.dwHighDateTime=0x1cac814, ftLastAccessTime.dwLowDateTime=0xef0a44f0, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0x6a315700, ftLastWriteTime.dwHighDateTime=0x1cac814, nFileSizeHigh=0x0, nFileSizeLow=0x77560, dwReserved0=0x0, dwReserved1=0x0, cFileName="VISINTL.DLL.trx_dll", cAlternateFileName="VISINT~1.TRX")) returned 1 [0062.086] FindNextFileW (in: hFindFile=0x381e00, lpFindFileData=0x31e47c | out: lpFindFileData=0x31e47c*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xcb31c100, ftCreationTime.dwHighDateTime=0x1cacd25, ftLastAccessTime.dwLowDateTime=0xef0ca650, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xcb31c100, ftLastWriteTime.dwHighDateTime=0x1cacd25, nFileSizeHigh=0x0, nFileSizeLow=0x25b60, dwReserved0=0x0, dwReserved1=0x0, cFileName="WWINTL.DLL.trx_dll", cAlternateFileName="WWINTL~1.TRX")) returned 1 [0062.086] FindNextFileW (in: hFindFile=0x381e00, lpFindFileData=0x31e47c | out: lpFindFileData=0x31e47c*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xcb31c100, ftCreationTime.dwHighDateTime=0x1cacd25, ftLastAccessTime.dwLowDateTime=0xef0f07b0, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xcb31c100, ftLastWriteTime.dwHighDateTime=0x1cacd25, nFileSizeHigh=0x0, nFileSizeLow=0x115b60, dwReserved0=0x0, dwReserved1=0x0, cFileName="WWINTL.REST.trx_dll", cAlternateFileName="WWINTL~2.TRX")) returned 1 [0062.086] FindNextFileW (in: hFindFile=0x381e00, lpFindFileData=0x31e47c | out: lpFindFileData=0x31e47c*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x6b688100, ftCreationTime.dwHighDateTime=0x1cac820, ftLastAccessTime.dwLowDateTime=0xef0f07b0, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0x6b688100, ftLastWriteTime.dwHighDateTime=0x1cac820, nFileSizeHigh=0x0, nFileSizeLow=0x25360, dwReserved0=0x0, dwReserved1=0x0, cFileName="XLINTL32.DLL.trx_dll", cAlternateFileName="XLINTL~1.TRX")) returned 1 [0062.086] FindNextFileW (in: hFindFile=0x381e00, lpFindFileData=0x31e47c | out: lpFindFileData=0x31e47c*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x6a375400, ftCreationTime.dwHighDateTime=0x1cac820, ftLastAccessTime.dwLowDateTime=0xef116910, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0x6a375400, ftLastWriteTime.dwHighDateTime=0x1cac820, nFileSizeHigh=0x0, nFileSizeLow=0x137960, dwReserved0=0x0, dwReserved1=0x0, cFileName="XLINTL32.REST.trx_dll", cAlternateFileName="XLINTL~2.TRX")) returned 1 [0062.086] FindNextFileW (in: hFindFile=0x381e00, lpFindFileData=0x31e47c | out: lpFindFileData=0x31e47c*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xfe092000, ftCreationTime.dwHighDateTime=0x1cac820, ftLastAccessTime.dwLowDateTime=0xef116910, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xfe092000, ftLastWriteTime.dwHighDateTime=0x1cac820, nFileSizeHigh=0x0, nFileSizeLow=0x3d60, dwReserved0=0x0, dwReserved1=0x0, cFileName="XLSLICER.DLL.trx_dll", cAlternateFileName="XLSLIC~1.TRX")) returned 1 [0062.086] FindNextFileW (in: hFindFile=0x381e00, lpFindFileData=0x31e47c | out: lpFindFileData=0x31e47c*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xfe092000, ftCreationTime.dwHighDateTime=0x1cac820, ftLastAccessTime.dwLowDateTime=0xef116910, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xfe092000, ftLastWriteTime.dwHighDateTime=0x1cac820, nFileSizeHigh=0x0, nFileSizeLow=0x3d60, dwReserved0=0x0, dwReserved1=0x0, cFileName="XLSLICER.DLL.trx_dll", cAlternateFileName="XLSLIC~1.TRX")) returned 0 [0062.087] FindClose (in: hFindFile=0x381e00 | out: hFindFile=0x381e00) returned 1 [0062.087] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e704) returned 1 [0062.087] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e710) returned 1 [0062.087] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e744) returned 1 [0062.087] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\OFFICE\\UICaptions\\3082", nBufferLength=0x105, lpBuffer=0x31e24c, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\OFFICE\\UICaptions\\3082", lpFilePart=0x0) returned 0x2f [0062.087] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\OFFICE\\UICaptions\\3082\\", nBufferLength=0x105, lpBuffer=0x31e220, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\OFFICE\\UICaptions\\3082\\", lpFilePart=0x0) returned 0x30 [0062.087] FindFirstFileW (in: lpFileName="C:\\ProgramData\\Microsoft\\OFFICE\\UICaptions\\3082\\*", lpFindFileData=0x31e46c | out: lpFindFileData=0x31e46c*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xeed38550, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xef116910, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xef116910, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x381e00 [0062.089] FindNextFileW (in: hFindFile=0x381e00, lpFindFileData=0x31e47c | out: lpFindFileData=0x31e47c*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xeed38550, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xef116910, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xef116910, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0062.090] FindNextFileW (in: hFindFile=0x381e00, lpFindFileData=0x31e47c | out: lpFindFileData=0x31e47c*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x302da400, ftCreationTime.dwHighDateTime=0x1caca12, ftLastAccessTime.dwLowDateTime=0xeed38550, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0x302da400, ftLastWriteTime.dwHighDateTime=0x1caca12, nFileSizeHigh=0x0, nFileSizeLow=0x3760, dwReserved0=0x0, dwReserved1=0x0, cFileName="ENVELOPR.DLL.trx_dll", cAlternateFileName="ENVELO~1.TRX")) returned 1 [0062.090] FindNextFileW (in: hFindFile=0x381e00, lpFindFileData=0x31e47c | out: lpFindFileData=0x31e47c*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x74912800, ftCreationTime.dwHighDateTime=0x1cac7f7, ftLastAccessTime.dwLowDateTime=0xeedf6c30, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0x74912800, ftLastWriteTime.dwHighDateTime=0x1cac7f7, nFileSizeHigh=0x0, nFileSizeLow=0xb960, dwReserved0=0x0, dwReserved1=0x0, cFileName="GRINTL32.DLL.trx_dll", cAlternateFileName="GRINTL~1.TRX")) returned 1 [0062.090] FindNextFileW (in: hFindFile=0x381e00, lpFindFileData=0x31e47c | out: lpFindFileData=0x31e47c*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x74912800, ftCreationTime.dwHighDateTime=0x1cac7f7, ftLastAccessTime.dwLowDateTime=0xeedf6c30, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0x74912800, ftLastWriteTime.dwHighDateTime=0x1cac7f7, nFileSizeHigh=0x0, nFileSizeLow=0x39960, dwReserved0=0x0, dwReserved1=0x0, cFileName="GRINTL32.REST.trx_dll", cAlternateFileName="GRINTL~2.TRX")) returned 1 [0062.090] FindNextFileW (in: hFindFile=0x381e00, lpFindFileData=0x31e47c | out: lpFindFileData=0x31e47c*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x302da400, ftCreationTime.dwHighDateTime=0x1caca12, ftLastAccessTime.dwLowDateTime=0xeee1cd90, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0x302da400, ftLastWriteTime.dwHighDateTime=0x1caca12, nFileSizeHigh=0x0, nFileSizeLow=0x47d60, dwReserved0=0x0, dwReserved1=0x0, cFileName="MAPIR.DLL.trx_dll", cAlternateFileName="MAPIRD~1.TRX")) returned 1 [0062.091] FindNextFileW (in: hFindFile=0x381e00, lpFindFileData=0x31e47c | out: lpFindFileData=0x31e47c*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x58968200, ftCreationTime.dwHighDateTime=0x1cac809, ftLastAccessTime.dwLowDateTime=0xeee1cd90, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0x58968200, ftLastWriteTime.dwHighDateTime=0x1cac809, nFileSizeHigh=0x0, nFileSizeLow=0xc160, dwReserved0=0x0, dwReserved1=0x0, cFileName="MOR6INT.REST.trx_dll", cAlternateFileName="MOR6IN~1.TRX")) returned 1 [0062.091] FindNextFileW (in: hFindFile=0x381e00, lpFindFileData=0x31e47c | out: lpFindFileData=0x31e47c*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x248aaf00, ftCreationTime.dwHighDateTime=0x1caca0b, ftLastAccessTime.dwLowDateTime=0xeee42ef0, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0x248aaf00, ftLastWriteTime.dwHighDateTime=0x1caca0b, nFileSizeHigh=0x0, nFileSizeLow=0x16f60, dwReserved0=0x0, dwReserved1=0x0, cFileName="MSOINTL.DLL.trx_dll", cAlternateFileName="MSOINT~1.TRX")) returned 1 [0062.091] FindNextFileW (in: hFindFile=0x381e00, lpFindFileData=0x31e47c | out: lpFindFileData=0x31e47c*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x25bbdc00, ftCreationTime.dwHighDateTime=0x1caca0b, ftLastAccessTime.dwLowDateTime=0xeeeb5310, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0x25bbdc00, ftLastWriteTime.dwHighDateTime=0x1caca0b, nFileSizeHigh=0x0, nFileSizeLow=0x2b2560, dwReserved0=0x0, dwReserved1=0x0, cFileName="MSOINTL.REST.trx_dll", cAlternateFileName="MSOINT~2.TRX")) returned 1 [0062.091] FindNextFileW (in: hFindFile=0x381e00, lpFindFileData=0x31e47c | out: lpFindFileData=0x31e47c*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x3564d600, ftCreationTime.dwHighDateTime=0x1cac7fb, ftLastAccessTime.dwLowDateTime=0xeef27730, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0x3564d600, ftLastWriteTime.dwHighDateTime=0x1cac7fb, nFileSizeHigh=0x0, nFileSizeLow=0xb360, dwReserved0=0x0, dwReserved1=0x0, cFileName="OMSINTL.DLL.trx_dll", cAlternateFileName="OMSINT~1.TRX")) returned 1 [0062.091] FindNextFileW (in: hFindFile=0x381e00, lpFindFileData=0x31e47c | out: lpFindFileData=0x31e47c*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x63b88300, ftCreationTime.dwHighDateTime=0x1cacf6a, ftLastAccessTime.dwLowDateTime=0xeef27730, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0x63b88300, ftLastWriteTime.dwHighDateTime=0x1cacf6a, nFileSizeHigh=0x0, nFileSizeLow=0x7b60, dwReserved0=0x0, dwReserved1=0x0, cFileName="ONINTL.DLL.trx_dll", cAlternateFileName="ONINTL~1.TRX")) returned 1 [0062.091] FindNextFileW (in: hFindFile=0x381e00, lpFindFileData=0x31e47c | out: lpFindFileData=0x31e47c*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x62875600, ftCreationTime.dwHighDateTime=0x1cacf6a, ftLastAccessTime.dwLowDateTime=0xeef4d890, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0x62875600, ftLastWriteTime.dwHighDateTime=0x1cacf6a, nFileSizeHigh=0x0, nFileSizeLow=0x3d960, dwReserved0=0x0, dwReserved1=0x0, cFileName="ONINTL.REST.trx_dll", cAlternateFileName="ONINTL~2.TRX")) returned 1 [0062.091] FindNextFileW (in: hFindFile=0x381e00, lpFindFileData=0x31e47c | out: lpFindFileData=0x31e47c*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x302da400, ftCreationTime.dwHighDateTime=0x1caca12, ftLastAccessTime.dwLowDateTime=0xeef4d890, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0x302da400, ftLastWriteTime.dwHighDateTime=0x1caca12, nFileSizeHigh=0x0, nFileSizeLow=0x35960, dwReserved0=0x0, dwReserved1=0x0, cFileName="OUTLLIBR.DLL.trx_dll", cAlternateFileName="OUTLLI~1.TRX")) returned 1 [0062.091] FindNextFileW (in: hFindFile=0x381e00, lpFindFileData=0x31e47c | out: lpFindFileData=0x31e47c*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x302da400, ftCreationTime.dwHighDateTime=0x1caca12, ftLastAccessTime.dwLowDateTime=0xeef739f0, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0x302da400, ftLastWriteTime.dwHighDateTime=0x1caca12, nFileSizeHigh=0x0, nFileSizeLow=0x9f560, dwReserved0=0x0, dwReserved1=0x0, cFileName="OUTLLIBR.REST.trx_dll", cAlternateFileName="OUTLLI~2.TRX")) returned 1 [0062.091] FindNextFileW (in: hFindFile=0x381e00, lpFindFileData=0x31e47c | out: lpFindFileData=0x31e47c*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x315ed100, ftCreationTime.dwHighDateTime=0x1caca12, ftLastAccessTime.dwLowDateTime=0xeef739f0, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0x315ed100, ftLastWriteTime.dwHighDateTime=0x1caca12, nFileSizeHigh=0x0, nFileSizeLow=0x2d60, dwReserved0=0x0, dwReserved1=0x0, cFileName="OUTLWVW.DLL.trx_dll", cAlternateFileName="OUTLWV~1.TRX")) returned 1 [0062.091] FindNextFileW (in: hFindFile=0x381e00, lpFindFileData=0x31e47c | out: lpFindFileData=0x31e47c*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x1a4a9400, ftCreationTime.dwHighDateTime=0x1cac804, ftLastAccessTime.dwLowDateTime=0xef00bf70, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0x1a4a9400, ftLastWriteTime.dwHighDateTime=0x1cac804, nFileSizeHigh=0x0, nFileSizeLow=0xd160, dwReserved0=0x0, dwReserved1=0x0, cFileName="PPINTL.DLL.trx_dll", cAlternateFileName="PPINTL~1.TRX")) returned 1 [0062.091] FindNextFileW (in: hFindFile=0x381e00, lpFindFileData=0x31e47c | out: lpFindFileData=0x31e47c*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x19196700, ftCreationTime.dwHighDateTime=0x1cac804, ftLastAccessTime.dwLowDateTime=0xef00bf70, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0x19196700, ftLastWriteTime.dwHighDateTime=0x1cac804, nFileSizeHigh=0x0, nFileSizeLow=0x43560, dwReserved0=0x0, dwReserved1=0x0, cFileName="PPINTL.REST.trx_dll", cAlternateFileName="PPINTL~2.TRX")) returned 1 [0062.091] FindNextFileW (in: hFindFile=0x381e00, lpFindFileData=0x31e47c | out: lpFindFileData=0x31e47c*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x58968200, ftCreationTime.dwHighDateTime=0x1cac809, ftLastAccessTime.dwLowDateTime=0xef00bf70, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0x58968200, ftLastWriteTime.dwHighDateTime=0x1cac809, nFileSizeHigh=0x0, nFileSizeLow=0x1a560, dwReserved0=0x0, dwReserved1=0x0, cFileName="PUB6INTL.DLL.trx_dll", cAlternateFileName="PUB6IN~1.TRX")) returned 1 [0062.091] FindNextFileW (in: hFindFile=0x381e00, lpFindFileData=0x31e47c | out: lpFindFileData=0x31e47c*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x57655500, ftCreationTime.dwHighDateTime=0x1cac809, ftLastAccessTime.dwLowDateTime=0xef0320d0, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0x57655500, ftLastWriteTime.dwHighDateTime=0x1cac809, nFileSizeHigh=0x0, nFileSizeLow=0x87f60, dwReserved0=0x0, dwReserved1=0x0, cFileName="PUB6INTL.REST.trx_dll", cAlternateFileName="PUB6IN~2.TRX")) returned 1 [0062.091] FindNextFileW (in: hFindFile=0x381e00, lpFindFileData=0x31e47c | out: lpFindFileData=0x31e47c*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x2720b500, ftCreationTime.dwHighDateTime=0x1cac80f, ftLastAccessTime.dwLowDateTime=0xef0320d0, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0x2720b500, ftLastWriteTime.dwHighDateTime=0x1cac80f, nFileSizeHigh=0x0, nFileSizeLow=0x57f60, dwReserved0=0x0, dwReserved1=0x0, cFileName="PUBWZINT.REST.trx_dll", cAlternateFileName="PUBWZI~1.TRX")) returned 1 [0062.091] FindNextFileW (in: hFindFile=0x381e00, lpFindFileData=0x31e47c | out: lpFindFileData=0x31e47c*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x94d0df00, ftCreationTime.dwHighDateTime=0x1cac817, ftLastAccessTime.dwLowDateTime=0xef058230, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0x94d0df00, ftLastWriteTime.dwHighDateTime=0x1cac817, nFileSizeHigh=0x0, nFileSizeLow=0x3360, dwReserved0=0x0, dwReserved1=0x0, cFileName="SGRES.DLL.trx_dll", cAlternateFileName="SGRESD~1.TRX")) returned 1 [0062.091] FindNextFileW (in: hFindFile=0x381e00, lpFindFileData=0x31e47c | out: lpFindFileData=0x31e47c*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xca190500, ftCreationTime.dwHighDateTime=0x1cac7f6, ftLastAccessTime.dwLowDateTime=0xef058230, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xca190500, ftLastWriteTime.dwHighDateTime=0x1cac7f6, nFileSizeHigh=0x0, nFileSizeLow=0x4360, dwReserved0=0x0, dwReserved1=0x0, cFileName="STINTL.DLL.trx_dll", cAlternateFileName="STINTL~1.TRX")) returned 1 [0062.091] FindNextFileW (in: hFindFile=0x381e00, lpFindFileData=0x31e47c | out: lpFindFileData=0x31e47c*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xbf706700, ftCreationTime.dwHighDateTime=0x1cac81a, ftLastAccessTime.dwLowDateTime=0xef0a44f0, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xbf706700, ftLastWriteTime.dwHighDateTime=0x1cac81a, nFileSizeHigh=0x0, nFileSizeLow=0x6960, dwReserved0=0x0, dwReserved1=0x0, cFileName="VISBRRES.DLL.trx_dll", cAlternateFileName="VISBRR~1.TRX")) returned 1 [0062.091] FindNextFileW (in: hFindFile=0x381e00, lpFindFileData=0x31e47c | out: lpFindFileData=0x31e47c*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x70273800, ftCreationTime.dwHighDateTime=0x1cac814, ftLastAccessTime.dwLowDateTime=0xef0a44f0, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0x70273800, ftLastWriteTime.dwHighDateTime=0x1cac814, nFileSizeHigh=0x0, nFileSizeLow=0x73960, dwReserved0=0x0, dwReserved1=0x0, cFileName="VISINTL.DLL.trx_dll", cAlternateFileName="VISINT~1.TRX")) returned 1 [0062.091] FindNextFileW (in: hFindFile=0x381e00, lpFindFileData=0x31e47c | out: lpFindFileData=0x31e47c*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xa1789a00, ftCreationTime.dwHighDateTime=0x1cacd25, ftLastAccessTime.dwLowDateTime=0xef0ca650, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xa1789a00, ftLastWriteTime.dwHighDateTime=0x1cacd25, nFileSizeHigh=0x0, nFileSizeLow=0x24360, dwReserved0=0x0, dwReserved1=0x0, cFileName="WWINTL.DLL.trx_dll", cAlternateFileName="WWINTL~1.TRX")) returned 1 [0062.091] FindNextFileW (in: hFindFile=0x381e00, lpFindFileData=0x31e47c | out: lpFindFileData=0x31e47c*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xa2a9c700, ftCreationTime.dwHighDateTime=0x1cacd25, ftLastAccessTime.dwLowDateTime=0xef0f07b0, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xa2a9c700, ftLastWriteTime.dwHighDateTime=0x1cacd25, nFileSizeHigh=0x0, nFileSizeLow=0x110b60, dwReserved0=0x0, dwReserved1=0x0, cFileName="WWINTL.REST.trx_dll", cAlternateFileName="WWINTL~2.TRX")) returned 1 [0062.091] FindNextFileW (in: hFindFile=0x381e00, lpFindFileData=0x31e47c | out: lpFindFileData=0x31e47c*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x61df1900, ftCreationTime.dwHighDateTime=0x1cac820, ftLastAccessTime.dwLowDateTime=0xef0f07b0, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0x61df1900, ftLastWriteTime.dwHighDateTime=0x1cac820, nFileSizeHigh=0x0, nFileSizeLow=0x23960, dwReserved0=0x0, dwReserved1=0x0, cFileName="XLINTL32.DLL.trx_dll", cAlternateFileName="XLINTL~1.TRX")) returned 1 [0062.091] FindNextFileW (in: hFindFile=0x381e00, lpFindFileData=0x31e47c | out: lpFindFileData=0x31e47c*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x61df1900, ftCreationTime.dwHighDateTime=0x1cac820, ftLastAccessTime.dwLowDateTime=0xef116910, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0x61df1900, ftLastWriteTime.dwHighDateTime=0x1cac820, nFileSizeHigh=0x0, nFileSizeLow=0x126760, dwReserved0=0x0, dwReserved1=0x0, cFileName="XLINTL32.REST.trx_dll", cAlternateFileName="XLINTL~2.TRX")) returned 1 [0062.092] FindNextFileW (in: hFindFile=0x381e00, lpFindFileData=0x31e47c | out: lpFindFileData=0x31e47c*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xd7e38000, ftCreationTime.dwHighDateTime=0x1cac820, ftLastAccessTime.dwLowDateTime=0xef116910, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xd7e38000, ftLastWriteTime.dwHighDateTime=0x1cac820, nFileSizeHigh=0x0, nFileSizeLow=0x3960, dwReserved0=0x0, dwReserved1=0x0, cFileName="XLSLICER.DLL.trx_dll", cAlternateFileName="XLSLIC~1.TRX")) returned 1 [0062.092] FindNextFileW (in: hFindFile=0x381e00, lpFindFileData=0x31e47c | out: lpFindFileData=0x31e47c*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0062.092] FindClose (in: hFindFile=0x381e00 | out: hFindFile=0x381e00) returned 1 [0062.092] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e704) returned 1 [0062.092] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e710) returned 1 [0062.092] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e744) returned 1 [0062.092] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\OFFICE\\UICaptions\\3082", nBufferLength=0x105, lpBuffer=0x31e24c, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\OFFICE\\UICaptions\\3082", lpFilePart=0x0) returned 0x2f [0062.092] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\OFFICE\\UICaptions\\3082\\", nBufferLength=0x105, lpBuffer=0x31e220, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\OFFICE\\UICaptions\\3082\\", lpFilePart=0x0) returned 0x30 [0062.093] FindFirstFileW (in: lpFileName="C:\\ProgramData\\Microsoft\\OFFICE\\UICaptions\\3082\\*", lpFindFileData=0x31e46c | out: lpFindFileData=0x31e46c*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xeed38550, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xef116910, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xef116910, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x381e00 [0062.093] FindNextFileW (in: hFindFile=0x381e00, lpFindFileData=0x31e47c | out: lpFindFileData=0x31e47c*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xeed38550, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xef116910, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xef116910, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0062.093] FindNextFileW (in: hFindFile=0x381e00, lpFindFileData=0x31e47c | out: lpFindFileData=0x31e47c*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x302da400, ftCreationTime.dwHighDateTime=0x1caca12, ftLastAccessTime.dwLowDateTime=0xeed38550, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0x302da400, ftLastWriteTime.dwHighDateTime=0x1caca12, nFileSizeHigh=0x0, nFileSizeLow=0x3760, dwReserved0=0x0, dwReserved1=0x0, cFileName="ENVELOPR.DLL.trx_dll", cAlternateFileName="ENVELO~1.TRX")) returned 1 [0062.093] FindNextFileW (in: hFindFile=0x381e00, lpFindFileData=0x31e47c | out: lpFindFileData=0x31e47c*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x74912800, ftCreationTime.dwHighDateTime=0x1cac7f7, ftLastAccessTime.dwLowDateTime=0xeedf6c30, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0x74912800, ftLastWriteTime.dwHighDateTime=0x1cac7f7, nFileSizeHigh=0x0, nFileSizeLow=0xb960, dwReserved0=0x0, dwReserved1=0x0, cFileName="GRINTL32.DLL.trx_dll", cAlternateFileName="GRINTL~1.TRX")) returned 1 [0062.093] FindNextFileW (in: hFindFile=0x381e00, lpFindFileData=0x31e47c | out: lpFindFileData=0x31e47c*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x74912800, ftCreationTime.dwHighDateTime=0x1cac7f7, ftLastAccessTime.dwLowDateTime=0xeedf6c30, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0x74912800, ftLastWriteTime.dwHighDateTime=0x1cac7f7, nFileSizeHigh=0x0, nFileSizeLow=0x39960, dwReserved0=0x0, dwReserved1=0x0, cFileName="GRINTL32.REST.trx_dll", cAlternateFileName="GRINTL~2.TRX")) returned 1 [0062.093] FindNextFileW (in: hFindFile=0x381e00, lpFindFileData=0x31e47c | out: lpFindFileData=0x31e47c*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x302da400, ftCreationTime.dwHighDateTime=0x1caca12, ftLastAccessTime.dwLowDateTime=0xeee1cd90, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0x302da400, ftLastWriteTime.dwHighDateTime=0x1caca12, nFileSizeHigh=0x0, nFileSizeLow=0x47d60, dwReserved0=0x0, dwReserved1=0x0, cFileName="MAPIR.DLL.trx_dll", cAlternateFileName="MAPIRD~1.TRX")) returned 1 [0062.094] FindNextFileW (in: hFindFile=0x381e00, lpFindFileData=0x31e47c | out: lpFindFileData=0x31e47c*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x58968200, ftCreationTime.dwHighDateTime=0x1cac809, ftLastAccessTime.dwLowDateTime=0xeee1cd90, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0x58968200, ftLastWriteTime.dwHighDateTime=0x1cac809, nFileSizeHigh=0x0, nFileSizeLow=0xc160, dwReserved0=0x0, dwReserved1=0x0, cFileName="MOR6INT.REST.trx_dll", cAlternateFileName="MOR6IN~1.TRX")) returned 1 [0062.094] FindNextFileW (in: hFindFile=0x381e00, lpFindFileData=0x31e47c | out: lpFindFileData=0x31e47c*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x248aaf00, ftCreationTime.dwHighDateTime=0x1caca0b, ftLastAccessTime.dwLowDateTime=0xeee42ef0, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0x248aaf00, ftLastWriteTime.dwHighDateTime=0x1caca0b, nFileSizeHigh=0x0, nFileSizeLow=0x16f60, dwReserved0=0x0, dwReserved1=0x0, cFileName="MSOINTL.DLL.trx_dll", cAlternateFileName="MSOINT~1.TRX")) returned 1 [0062.094] FindNextFileW (in: hFindFile=0x381e00, lpFindFileData=0x31e47c | out: lpFindFileData=0x31e47c*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x25bbdc00, ftCreationTime.dwHighDateTime=0x1caca0b, ftLastAccessTime.dwLowDateTime=0xeeeb5310, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0x25bbdc00, ftLastWriteTime.dwHighDateTime=0x1caca0b, nFileSizeHigh=0x0, nFileSizeLow=0x2b2560, dwReserved0=0x0, dwReserved1=0x0, cFileName="MSOINTL.REST.trx_dll", cAlternateFileName="MSOINT~2.TRX")) returned 1 [0062.094] FindNextFileW (in: hFindFile=0x381e00, lpFindFileData=0x31e47c | out: lpFindFileData=0x31e47c*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x3564d600, ftCreationTime.dwHighDateTime=0x1cac7fb, ftLastAccessTime.dwLowDateTime=0xeef27730, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0x3564d600, ftLastWriteTime.dwHighDateTime=0x1cac7fb, nFileSizeHigh=0x0, nFileSizeLow=0xb360, dwReserved0=0x0, dwReserved1=0x0, cFileName="OMSINTL.DLL.trx_dll", cAlternateFileName="OMSINT~1.TRX")) returned 1 [0062.094] FindNextFileW (in: hFindFile=0x381e00, lpFindFileData=0x31e47c | out: lpFindFileData=0x31e47c*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x63b88300, ftCreationTime.dwHighDateTime=0x1cacf6a, ftLastAccessTime.dwLowDateTime=0xeef27730, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0x63b88300, ftLastWriteTime.dwHighDateTime=0x1cacf6a, nFileSizeHigh=0x0, nFileSizeLow=0x7b60, dwReserved0=0x0, dwReserved1=0x0, cFileName="ONINTL.DLL.trx_dll", cAlternateFileName="ONINTL~1.TRX")) returned 1 [0062.094] FindNextFileW (in: hFindFile=0x381e00, lpFindFileData=0x31e47c | out: lpFindFileData=0x31e47c*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x62875600, ftCreationTime.dwHighDateTime=0x1cacf6a, ftLastAccessTime.dwLowDateTime=0xeef4d890, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0x62875600, ftLastWriteTime.dwHighDateTime=0x1cacf6a, nFileSizeHigh=0x0, nFileSizeLow=0x3d960, dwReserved0=0x0, dwReserved1=0x0, cFileName="ONINTL.REST.trx_dll", cAlternateFileName="ONINTL~2.TRX")) returned 1 [0062.094] FindNextFileW (in: hFindFile=0x381e00, lpFindFileData=0x31e47c | out: lpFindFileData=0x31e47c*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x302da400, ftCreationTime.dwHighDateTime=0x1caca12, ftLastAccessTime.dwLowDateTime=0xeef4d890, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0x302da400, ftLastWriteTime.dwHighDateTime=0x1caca12, nFileSizeHigh=0x0, nFileSizeLow=0x35960, dwReserved0=0x0, dwReserved1=0x0, cFileName="OUTLLIBR.DLL.trx_dll", cAlternateFileName="OUTLLI~1.TRX")) returned 1 [0062.094] FindNextFileW (in: hFindFile=0x381e00, lpFindFileData=0x31e47c | out: lpFindFileData=0x31e47c*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x302da400, ftCreationTime.dwHighDateTime=0x1caca12, ftLastAccessTime.dwLowDateTime=0xeef739f0, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0x302da400, ftLastWriteTime.dwHighDateTime=0x1caca12, nFileSizeHigh=0x0, nFileSizeLow=0x9f560, dwReserved0=0x0, dwReserved1=0x0, cFileName="OUTLLIBR.REST.trx_dll", cAlternateFileName="OUTLLI~2.TRX")) returned 1 [0062.094] FindNextFileW (in: hFindFile=0x381e00, lpFindFileData=0x31e47c | out: lpFindFileData=0x31e47c*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x315ed100, ftCreationTime.dwHighDateTime=0x1caca12, ftLastAccessTime.dwLowDateTime=0xeef739f0, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0x315ed100, ftLastWriteTime.dwHighDateTime=0x1caca12, nFileSizeHigh=0x0, nFileSizeLow=0x2d60, dwReserved0=0x0, dwReserved1=0x0, cFileName="OUTLWVW.DLL.trx_dll", cAlternateFileName="OUTLWV~1.TRX")) returned 1 [0062.094] FindNextFileW (in: hFindFile=0x381e00, lpFindFileData=0x31e47c | out: lpFindFileData=0x31e47c*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x1a4a9400, ftCreationTime.dwHighDateTime=0x1cac804, ftLastAccessTime.dwLowDateTime=0xef00bf70, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0x1a4a9400, ftLastWriteTime.dwHighDateTime=0x1cac804, nFileSizeHigh=0x0, nFileSizeLow=0xd160, dwReserved0=0x0, dwReserved1=0x0, cFileName="PPINTL.DLL.trx_dll", cAlternateFileName="PPINTL~1.TRX")) returned 1 [0062.094] FindNextFileW (in: hFindFile=0x381e00, lpFindFileData=0x31e47c | out: lpFindFileData=0x31e47c*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x19196700, ftCreationTime.dwHighDateTime=0x1cac804, ftLastAccessTime.dwLowDateTime=0xef00bf70, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0x19196700, ftLastWriteTime.dwHighDateTime=0x1cac804, nFileSizeHigh=0x0, nFileSizeLow=0x43560, dwReserved0=0x0, dwReserved1=0x0, cFileName="PPINTL.REST.trx_dll", cAlternateFileName="PPINTL~2.TRX")) returned 1 [0062.094] FindNextFileW (in: hFindFile=0x381e00, lpFindFileData=0x31e47c | out: lpFindFileData=0x31e47c*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x58968200, ftCreationTime.dwHighDateTime=0x1cac809, ftLastAccessTime.dwLowDateTime=0xef00bf70, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0x58968200, ftLastWriteTime.dwHighDateTime=0x1cac809, nFileSizeHigh=0x0, nFileSizeLow=0x1a560, dwReserved0=0x0, dwReserved1=0x0, cFileName="PUB6INTL.DLL.trx_dll", cAlternateFileName="PUB6IN~1.TRX")) returned 1 [0062.094] FindNextFileW (in: hFindFile=0x381e00, lpFindFileData=0x31e47c | out: lpFindFileData=0x31e47c*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x57655500, ftCreationTime.dwHighDateTime=0x1cac809, ftLastAccessTime.dwLowDateTime=0xef0320d0, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0x57655500, ftLastWriteTime.dwHighDateTime=0x1cac809, nFileSizeHigh=0x0, nFileSizeLow=0x87f60, dwReserved0=0x0, dwReserved1=0x0, cFileName="PUB6INTL.REST.trx_dll", cAlternateFileName="PUB6IN~2.TRX")) returned 1 [0062.094] FindNextFileW (in: hFindFile=0x381e00, lpFindFileData=0x31e47c | out: lpFindFileData=0x31e47c*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x2720b500, ftCreationTime.dwHighDateTime=0x1cac80f, ftLastAccessTime.dwLowDateTime=0xef0320d0, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0x2720b500, ftLastWriteTime.dwHighDateTime=0x1cac80f, nFileSizeHigh=0x0, nFileSizeLow=0x57f60, dwReserved0=0x0, dwReserved1=0x0, cFileName="PUBWZINT.REST.trx_dll", cAlternateFileName="PUBWZI~1.TRX")) returned 1 [0062.094] FindNextFileW (in: hFindFile=0x381e00, lpFindFileData=0x31e47c | out: lpFindFileData=0x31e47c*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x94d0df00, ftCreationTime.dwHighDateTime=0x1cac817, ftLastAccessTime.dwLowDateTime=0xef058230, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0x94d0df00, ftLastWriteTime.dwHighDateTime=0x1cac817, nFileSizeHigh=0x0, nFileSizeLow=0x3360, dwReserved0=0x0, dwReserved1=0x0, cFileName="SGRES.DLL.trx_dll", cAlternateFileName="SGRESD~1.TRX")) returned 1 [0062.094] FindNextFileW (in: hFindFile=0x381e00, lpFindFileData=0x31e47c | out: lpFindFileData=0x31e47c*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xca190500, ftCreationTime.dwHighDateTime=0x1cac7f6, ftLastAccessTime.dwLowDateTime=0xef058230, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xca190500, ftLastWriteTime.dwHighDateTime=0x1cac7f6, nFileSizeHigh=0x0, nFileSizeLow=0x4360, dwReserved0=0x0, dwReserved1=0x0, cFileName="STINTL.DLL.trx_dll", cAlternateFileName="STINTL~1.TRX")) returned 1 [0062.094] FindNextFileW (in: hFindFile=0x381e00, lpFindFileData=0x31e47c | out: lpFindFileData=0x31e47c*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xbf706700, ftCreationTime.dwHighDateTime=0x1cac81a, ftLastAccessTime.dwLowDateTime=0xef0a44f0, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xbf706700, ftLastWriteTime.dwHighDateTime=0x1cac81a, nFileSizeHigh=0x0, nFileSizeLow=0x6960, dwReserved0=0x0, dwReserved1=0x0, cFileName="VISBRRES.DLL.trx_dll", cAlternateFileName="VISBRR~1.TRX")) returned 1 [0062.094] FindNextFileW (in: hFindFile=0x381e00, lpFindFileData=0x31e47c | out: lpFindFileData=0x31e47c*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x70273800, ftCreationTime.dwHighDateTime=0x1cac814, ftLastAccessTime.dwLowDateTime=0xef0a44f0, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0x70273800, ftLastWriteTime.dwHighDateTime=0x1cac814, nFileSizeHigh=0x0, nFileSizeLow=0x73960, dwReserved0=0x0, dwReserved1=0x0, cFileName="VISINTL.DLL.trx_dll", cAlternateFileName="VISINT~1.TRX")) returned 1 [0062.094] FindNextFileW (in: hFindFile=0x381e00, lpFindFileData=0x31e47c | out: lpFindFileData=0x31e47c*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xa1789a00, ftCreationTime.dwHighDateTime=0x1cacd25, ftLastAccessTime.dwLowDateTime=0xef0ca650, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xa1789a00, ftLastWriteTime.dwHighDateTime=0x1cacd25, nFileSizeHigh=0x0, nFileSizeLow=0x24360, dwReserved0=0x0, dwReserved1=0x0, cFileName="WWINTL.DLL.trx_dll", cAlternateFileName="WWINTL~1.TRX")) returned 1 [0062.094] FindNextFileW (in: hFindFile=0x381e00, lpFindFileData=0x31e47c | out: lpFindFileData=0x31e47c*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xa2a9c700, ftCreationTime.dwHighDateTime=0x1cacd25, ftLastAccessTime.dwLowDateTime=0xef0f07b0, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xa2a9c700, ftLastWriteTime.dwHighDateTime=0x1cacd25, nFileSizeHigh=0x0, nFileSizeLow=0x110b60, dwReserved0=0x0, dwReserved1=0x0, cFileName="WWINTL.REST.trx_dll", cAlternateFileName="WWINTL~2.TRX")) returned 1 [0062.094] FindNextFileW (in: hFindFile=0x381e00, lpFindFileData=0x31e47c | out: lpFindFileData=0x31e47c*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x61df1900, ftCreationTime.dwHighDateTime=0x1cac820, ftLastAccessTime.dwLowDateTime=0xef0f07b0, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0x61df1900, ftLastWriteTime.dwHighDateTime=0x1cac820, nFileSizeHigh=0x0, nFileSizeLow=0x23960, dwReserved0=0x0, dwReserved1=0x0, cFileName="XLINTL32.DLL.trx_dll", cAlternateFileName="XLINTL~1.TRX")) returned 1 [0062.095] FindNextFileW (in: hFindFile=0x381e00, lpFindFileData=0x31e47c | out: lpFindFileData=0x31e47c*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x61df1900, ftCreationTime.dwHighDateTime=0x1cac820, ftLastAccessTime.dwLowDateTime=0xef116910, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0x61df1900, ftLastWriteTime.dwHighDateTime=0x1cac820, nFileSizeHigh=0x0, nFileSizeLow=0x126760, dwReserved0=0x0, dwReserved1=0x0, cFileName="XLINTL32.REST.trx_dll", cAlternateFileName="XLINTL~2.TRX")) returned 1 [0062.095] FindNextFileW (in: hFindFile=0x381e00, lpFindFileData=0x31e47c | out: lpFindFileData=0x31e47c*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xd7e38000, ftCreationTime.dwHighDateTime=0x1cac820, ftLastAccessTime.dwLowDateTime=0xef116910, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xd7e38000, ftLastWriteTime.dwHighDateTime=0x1cac820, nFileSizeHigh=0x0, nFileSizeLow=0x3960, dwReserved0=0x0, dwReserved1=0x0, cFileName="XLSLICER.DLL.trx_dll", cAlternateFileName="XLSLIC~1.TRX")) returned 1 [0062.095] FindNextFileW (in: hFindFile=0x381e00, lpFindFileData=0x31e47c | out: lpFindFileData=0x31e47c*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xd7e38000, ftCreationTime.dwHighDateTime=0x1cac820, ftLastAccessTime.dwLowDateTime=0xef116910, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xd7e38000, ftLastWriteTime.dwHighDateTime=0x1cac820, nFileSizeHigh=0x0, nFileSizeLow=0x3960, dwReserved0=0x0, dwReserved1=0x0, cFileName="XLSLICER.DLL.trx_dll", cAlternateFileName="XLSLIC~1.TRX")) returned 0 [0062.095] FindClose (in: hFindFile=0x381e00 | out: hFindFile=0x381e00) returned 1 [0062.095] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e704) returned 1 [0062.095] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e710) returned 1 [0062.095] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e834) returned 1 [0062.095] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\OfficeSoftwareProtectionPlatform", nBufferLength=0x105, lpBuffer=0x31e33c, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\OfficeSoftwareProtectionPlatform", lpFilePart=0x0) returned 0x39 [0062.096] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\OfficeSoftwareProtectionPlatform\\", nBufferLength=0x105, lpBuffer=0x31e310, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\OfficeSoftwareProtectionPlatform\\", lpFilePart=0x0) returned 0x3a [0062.096] FindFirstFileW (in: lpFileName="C:\\ProgramData\\Microsoft\\OfficeSoftwareProtectionPlatform\\*", lpFindFileData=0x31e55c | out: lpFindFileData=0x31e55c*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x50ea0e30, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0xfa44d4a0, ftLastAccessTime.dwHighDateTime=0x1d305fd, ftLastWriteTime.dwLowDateTime=0xfa44d4a0, ftLastWriteTime.dwHighDateTime=0x1d305fd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x381e00 [0062.096] FindNextFileW (in: hFindFile=0x381e00, lpFindFileData=0x31e56c | out: lpFindFileData=0x31e56c*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x50ea0e30, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0xfa44d4a0, ftLastAccessTime.dwHighDateTime=0x1d305fd, ftLastWriteTime.dwLowDateTime=0xfa44d4a0, ftLastWriteTime.dwHighDateTime=0x1d305fd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0062.096] FindNextFileW (in: hFindFile=0x381e00, lpFindFileData=0x31e56c | out: lpFindFileData=0x31e56c*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x8ab1ae70, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x9de525d0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x9de525d0, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Cache", cAlternateFileName="")) returned 1 [0062.096] FindNextFileW (in: hFindFile=0x381e00, lpFindFileData=0x31e56c | out: lpFindFileData=0x31e56c*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x8c015050, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0xfa44d4a0, ftLastAccessTime.dwHighDateTime=0x1d305fd, ftLastWriteTime.dwLowDateTime=0x63c5e40, ftLastWriteTime.dwHighDateTime=0x1d305fe, nFileSizeHigh=0x0, nFileSizeLow=0x469bd5, dwReserved0=0x0, dwReserved1=0x0, cFileName="tokens.dat", cAlternateFileName="")) returned 1 [0062.096] FindNextFileW (in: hFindFile=0x381e00, lpFindFileData=0x31e56c | out: lpFindFileData=0x31e56c*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0062.096] FindClose (in: hFindFile=0x381e00 | out: hFindFile=0x381e00) returned 1 [0062.096] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e7f4) returned 1 [0062.096] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e800) returned 1 [0062.096] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e834) returned 1 [0062.096] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\OfficeSoftwareProtectionPlatform", nBufferLength=0x105, lpBuffer=0x31e33c, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\OfficeSoftwareProtectionPlatform", lpFilePart=0x0) returned 0x39 [0062.096] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\OfficeSoftwareProtectionPlatform\\", nBufferLength=0x105, lpBuffer=0x31e310, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\OfficeSoftwareProtectionPlatform\\", lpFilePart=0x0) returned 0x3a [0062.096] FindFirstFileW (in: lpFileName="C:\\ProgramData\\Microsoft\\OfficeSoftwareProtectionPlatform\\*", lpFindFileData=0x31e55c | out: lpFindFileData=0x31e55c*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x50ea0e30, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0xfa44d4a0, ftLastAccessTime.dwHighDateTime=0x1d305fd, ftLastWriteTime.dwLowDateTime=0xfa44d4a0, ftLastWriteTime.dwHighDateTime=0x1d305fd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x381e00 [0062.096] FindNextFileW (in: hFindFile=0x381e00, lpFindFileData=0x31e56c | out: lpFindFileData=0x31e56c*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x50ea0e30, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0xfa44d4a0, ftLastAccessTime.dwHighDateTime=0x1d305fd, ftLastWriteTime.dwLowDateTime=0xfa44d4a0, ftLastWriteTime.dwHighDateTime=0x1d305fd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0062.096] FindNextFileW (in: hFindFile=0x381e00, lpFindFileData=0x31e56c | out: lpFindFileData=0x31e56c*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x8ab1ae70, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x9de525d0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x9de525d0, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Cache", cAlternateFileName="")) returned 1 [0062.097] FindNextFileW (in: hFindFile=0x381e00, lpFindFileData=0x31e56c | out: lpFindFileData=0x31e56c*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x8c015050, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0xfa44d4a0, ftLastAccessTime.dwHighDateTime=0x1d305fd, ftLastWriteTime.dwLowDateTime=0x63c5e40, ftLastWriteTime.dwHighDateTime=0x1d305fe, nFileSizeHigh=0x0, nFileSizeLow=0x469bd5, dwReserved0=0x0, dwReserved1=0x0, cFileName="tokens.dat", cAlternateFileName="")) returned 1 [0062.097] FindClose (in: hFindFile=0x381e00 | out: hFindFile=0x381e00) returned 1 [0062.097] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e7f4) returned 1 [0062.097] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e800) returned 1 [0062.097] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e7bc) returned 1 [0062.097] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\OfficeSoftwareProtectionPlatform\\Cache", nBufferLength=0x105, lpBuffer=0x31e2c4, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\OfficeSoftwareProtectionPlatform\\Cache", lpFilePart=0x0) returned 0x3f [0062.097] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\OfficeSoftwareProtectionPlatform\\Cache\\", nBufferLength=0x105, lpBuffer=0x31e298, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\OfficeSoftwareProtectionPlatform\\Cache\\", lpFilePart=0x0) returned 0x40 [0062.097] FindFirstFileW (in: lpFileName="C:\\ProgramData\\Microsoft\\OfficeSoftwareProtectionPlatform\\Cache\\*", lpFindFileData=0x31e4e4 | out: lpFindFileData=0x31e4e4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x8ab1ae70, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x9de525d0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x9de525d0, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x381e00 [0062.098] FindClose (in: hFindFile=0x381e00 | out: hFindFile=0x381e00) returned 1 [0062.098] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e77c) returned 1 [0062.098] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e788) returned 1 [0062.098] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e7bc) returned 1 [0062.098] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\OfficeSoftwareProtectionPlatform\\Cache", nBufferLength=0x105, lpBuffer=0x31e2c4, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\OfficeSoftwareProtectionPlatform\\Cache", lpFilePart=0x0) returned 0x3f [0062.098] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\OfficeSoftwareProtectionPlatform\\Cache\\", nBufferLength=0x105, lpBuffer=0x31e298, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\OfficeSoftwareProtectionPlatform\\Cache\\", lpFilePart=0x0) returned 0x40 [0062.098] FindFirstFileW (in: lpFileName="C:\\ProgramData\\Microsoft\\OfficeSoftwareProtectionPlatform\\Cache\\*", lpFindFileData=0x31e4e4 | out: lpFindFileData=0x31e4e4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x8ab1ae70, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x9de525d0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x9de525d0, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x381e00 [0062.098] FindClose (in: hFindFile=0x381e00 | out: hFindFile=0x381e00) returned 1 [0062.098] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e77c) returned 1 [0062.098] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e788) returned 1 [0062.098] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e834) returned 1 [0062.099] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\RAC", nBufferLength=0x105, lpBuffer=0x31e33c, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\RAC", lpFilePart=0x0) returned 0x1c [0062.099] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\RAC\\", nBufferLength=0x105, lpBuffer=0x31e310, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\RAC\\", lpFilePart=0x0) returned 0x1d [0062.099] FindFirstFileW (in: lpFileName="C:\\ProgramData\\Microsoft\\RAC\\*", lpFindFileData=0x31e55c | out: lpFindFileData=0x31e55c*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xfd9b5b52, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd9b5b52, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xfd9b5b52, ftLastWriteTime.dwHighDateTime=0x1ca0431, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x381e00 [0062.099] FindClose (in: hFindFile=0x381e00 | out: hFindFile=0x381e00) returned 1 [0062.099] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e7f4) returned 1 [0062.099] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e800) returned 1 [0062.099] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e834) returned 1 [0062.099] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\RAC", nBufferLength=0x105, lpBuffer=0x31e33c, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\RAC", lpFilePart=0x0) returned 0x1c [0062.099] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\RAC\\", nBufferLength=0x105, lpBuffer=0x31e310, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\RAC\\", lpFilePart=0x0) returned 0x1d [0062.099] FindFirstFileW (in: lpFileName="C:\\ProgramData\\Microsoft\\RAC\\*", lpFindFileData=0x31e55c | out: lpFindFileData=0x31e55c*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xfd9b5b52, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd9b5b52, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xfd9b5b52, ftLastWriteTime.dwHighDateTime=0x1ca0431, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x381e00 [0062.099] FindClose (in: hFindFile=0x381e00 | out: hFindFile=0x381e00) returned 1 [0062.099] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e7f4) returned 1 [0062.099] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e800) returned 1 [0062.099] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e7bc) returned 1 [0062.099] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\RAC\\Outbound", nBufferLength=0x105, lpBuffer=0x31e2c4, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\RAC\\Outbound", lpFilePart=0x0) returned 0x25 [0062.099] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\RAC\\Outbound\\", nBufferLength=0x105, lpBuffer=0x31e298, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\RAC\\Outbound\\", lpFilePart=0x0) returned 0x26 [0062.099] FindFirstFileW (in: lpFileName="C:\\ProgramData\\Microsoft\\RAC\\Outbound\\*", lpFindFileData=0x31e4e4 | out: lpFindFileData=0x31e4e4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xfd9b5b52, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd9b5b52, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xd6e33921, ftLastWriteTime.dwHighDateTime=0x1ca042b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x381e00 [0062.100] FindClose (in: hFindFile=0x381e00 | out: hFindFile=0x381e00) returned 1 [0062.100] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e77c) returned 1 [0062.100] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e788) returned 1 [0062.100] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e7bc) returned 1 [0062.100] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\RAC\\Outbound", nBufferLength=0x105, lpBuffer=0x31e2c4, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\RAC\\Outbound", lpFilePart=0x0) returned 0x25 [0062.100] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\RAC\\Outbound\\", nBufferLength=0x105, lpBuffer=0x31e298, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\RAC\\Outbound\\", lpFilePart=0x0) returned 0x26 [0062.100] FindFirstFileW (in: lpFileName="C:\\ProgramData\\Microsoft\\RAC\\Outbound\\*", lpFindFileData=0x31e4e4 | out: lpFindFileData=0x31e4e4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xfd9b5b52, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd9b5b52, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xd6e33921, ftLastWriteTime.dwHighDateTime=0x1ca042b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x381e00 [0062.100] FindClose (in: hFindFile=0x381e00 | out: hFindFile=0x381e00) returned 1 [0062.100] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e77c) returned 1 [0062.100] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e788) returned 1 [0062.100] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e7bc) returned 1 [0062.100] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\RAC\\PublishedData", nBufferLength=0x105, lpBuffer=0x31e2c4, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\RAC\\PublishedData", lpFilePart=0x0) returned 0x2a [0062.100] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\RAC\\PublishedData\\", nBufferLength=0x105, lpBuffer=0x31e298, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\RAC\\PublishedData\\", lpFilePart=0x0) returned 0x2b [0062.100] FindFirstFileW (in: lpFileName="C:\\ProgramData\\Microsoft\\RAC\\PublishedData\\*", lpFindFileData=0x31e4e4 | out: lpFindFileData=0x31e4e4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xfd9b5b52, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xef3ddd80, ftLastAccessTime.dwHighDateTime=0x1d6eb7e, ftLastWriteTime.dwLowDateTime=0xef3ddd80, ftLastWriteTime.dwHighDateTime=0x1d6eb7e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x381e00 [0062.100] FindClose (in: hFindFile=0x381e00 | out: hFindFile=0x381e00) returned 1 [0062.100] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e77c) returned 1 [0062.100] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e788) returned 1 [0062.100] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e7bc) returned 1 [0062.101] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\RAC\\PublishedData", nBufferLength=0x105, lpBuffer=0x31e2c4, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\RAC\\PublishedData", lpFilePart=0x0) returned 0x2a [0062.101] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\RAC\\PublishedData\\", nBufferLength=0x105, lpBuffer=0x31e298, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\RAC\\PublishedData\\", lpFilePart=0x0) returned 0x2b [0062.101] FindFirstFileW (in: lpFileName="C:\\ProgramData\\Microsoft\\RAC\\PublishedData\\*", lpFindFileData=0x31e4e4 | out: lpFindFileData=0x31e4e4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xfd9b5b52, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xef3ddd80, ftLastAccessTime.dwHighDateTime=0x1d6eb7e, ftLastWriteTime.dwLowDateTime=0xef3ddd80, ftLastWriteTime.dwHighDateTime=0x1d6eb7e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x381e00 [0062.101] FindClose (in: hFindFile=0x381e00 | out: hFindFile=0x381e00) returned 1 [0062.101] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e77c) returned 1 [0062.101] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e788) returned 1 [0062.101] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e7bc) returned 1 [0062.101] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\RAC\\StateData", nBufferLength=0x105, lpBuffer=0x31e2c4, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\RAC\\StateData", lpFilePart=0x0) returned 0x26 [0062.101] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\RAC\\StateData\\", nBufferLength=0x105, lpBuffer=0x31e298, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\RAC\\StateData\\", lpFilePart=0x0) returned 0x27 [0062.101] FindFirstFileW (in: lpFileName="C:\\ProgramData\\Microsoft\\RAC\\StateData\\*", lpFindFileData=0x31e4e4 | out: lpFindFileData=0x31e4e4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xfd9b5b52, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xef3ddd80, ftLastAccessTime.dwHighDateTime=0x1d6eb7e, ftLastWriteTime.dwLowDateTime=0xef3ddd80, ftLastWriteTime.dwHighDateTime=0x1d6eb7e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x381e00 [0062.101] FindClose (in: hFindFile=0x381e00 | out: hFindFile=0x381e00) returned 1 [0062.101] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e77c) returned 1 [0062.101] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e788) returned 1 [0062.101] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e7bc) returned 1 [0062.101] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\RAC\\StateData", nBufferLength=0x105, lpBuffer=0x31e2c4, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\RAC\\StateData", lpFilePart=0x0) returned 0x26 [0062.101] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\RAC\\StateData\\", nBufferLength=0x105, lpBuffer=0x31e298, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\RAC\\StateData\\", lpFilePart=0x0) returned 0x27 [0062.101] FindFirstFileW (in: lpFileName="C:\\ProgramData\\Microsoft\\RAC\\StateData\\*", lpFindFileData=0x31e4e4 | out: lpFindFileData=0x31e4e4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xfd9b5b52, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xef3ddd80, ftLastAccessTime.dwHighDateTime=0x1d6eb7e, ftLastWriteTime.dwLowDateTime=0xef3ddd80, ftLastWriteTime.dwHighDateTime=0x1d6eb7e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x381e00 [0062.102] FindClose (in: hFindFile=0x381e00 | out: hFindFile=0x381e00) returned 1 [0062.102] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e77c) returned 1 [0062.102] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e788) returned 1 [0062.102] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e7bc) returned 1 [0062.102] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\RAC\\Temp", nBufferLength=0x105, lpBuffer=0x31e2c4, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\RAC\\Temp", lpFilePart=0x0) returned 0x21 [0062.102] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\RAC\\Temp\\", nBufferLength=0x105, lpBuffer=0x31e298, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\RAC\\Temp\\", lpFilePart=0x0) returned 0x22 [0062.102] FindFirstFileW (in: lpFileName="C:\\ProgramData\\Microsoft\\RAC\\Temp\\*", lpFindFileData=0x31e4e4 | out: lpFindFileData=0x31e4e4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xfd9b5b52, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xef50e880, ftLastAccessTime.dwHighDateTime=0x1d6eb7e, ftLastWriteTime.dwLowDateTime=0xef50e880, ftLastWriteTime.dwHighDateTime=0x1d6eb7e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x381e00 [0062.102] FindClose (in: hFindFile=0x381e00 | out: hFindFile=0x381e00) returned 1 [0062.102] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e77c) returned 1 [0062.102] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e788) returned 1 [0062.102] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e7bc) returned 1 [0062.102] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\RAC\\Temp", nBufferLength=0x105, lpBuffer=0x31e2c4, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\RAC\\Temp", lpFilePart=0x0) returned 0x21 [0062.102] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\RAC\\Temp\\", nBufferLength=0x105, lpBuffer=0x31e298, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\RAC\\Temp\\", lpFilePart=0x0) returned 0x22 [0062.102] FindFirstFileW (in: lpFileName="C:\\ProgramData\\Microsoft\\RAC\\Temp\\*", lpFindFileData=0x31e4e4 | out: lpFindFileData=0x31e4e4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xfd9b5b52, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xef50e880, ftLastAccessTime.dwHighDateTime=0x1d6eb7e, ftLastWriteTime.dwLowDateTime=0xef50e880, ftLastWriteTime.dwHighDateTime=0x1d6eb7e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x381e00 [0062.102] FindClose (in: hFindFile=0x381e00 | out: hFindFile=0x381e00) returned 1 [0062.102] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e77c) returned 1 [0062.102] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e788) returned 1 [0062.102] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e834) returned 1 [0062.103] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\Search", nBufferLength=0x105, lpBuffer=0x31e33c, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\Search", lpFilePart=0x0) returned 0x1f [0062.103] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\Search\\", nBufferLength=0x105, lpBuffer=0x31e310, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\Search\\", lpFilePart=0x0) returned 0x20 [0062.103] FindFirstFileW (in: lpFileName="C:\\ProgramData\\Microsoft\\Search\\*", lpFindFileData=0x31e55c | out: lpFindFileData=0x31e55c*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x27df8b60, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x27df8b60, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x27df8b60, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x381e00 [0062.104] FindClose (in: hFindFile=0x381e00 | out: hFindFile=0x381e00) returned 1 [0062.104] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e7f4) returned 1 [0062.104] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e800) returned 1 [0062.104] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e834) returned 1 [0062.104] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\Search", nBufferLength=0x105, lpBuffer=0x31e33c, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\Search", lpFilePart=0x0) returned 0x1f [0062.104] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\Search\\", nBufferLength=0x105, lpBuffer=0x31e310, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\Search\\", lpFilePart=0x0) returned 0x20 [0062.104] FindFirstFileW (in: lpFileName="C:\\ProgramData\\Microsoft\\Search\\*", lpFindFileData=0x31e55c | out: lpFindFileData=0x31e55c*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x27df8b60, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x27df8b60, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x27df8b60, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x381e00 [0062.104] FindClose (in: hFindFile=0x381e00 | out: hFindFile=0x381e00) returned 1 [0062.104] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e7f4) returned 1 [0062.104] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e800) returned 1 [0062.104] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e7bc) returned 1 [0062.104] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\Search\\Data", nBufferLength=0x105, lpBuffer=0x31e2c4, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\Search\\Data", lpFilePart=0x0) returned 0x24 [0062.104] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\Search\\Data\\", nBufferLength=0x105, lpBuffer=0x31e298, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\Search\\Data\\", lpFilePart=0x0) returned 0x25 [0062.104] FindFirstFileW (in: lpFileName="C:\\ProgramData\\Microsoft\\Search\\Data\\*", lpFindFileData=0x31e4e4 | out: lpFindFileData=0x31e4e4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x27df8b60, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x27e6af80, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x27e6af80, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x381e00 [0062.104] FindClose (in: hFindFile=0x381e00 | out: hFindFile=0x381e00) returned 1 [0062.105] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e77c) returned 1 [0062.105] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e788) returned 1 [0062.105] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e7bc) returned 1 [0062.105] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\Search\\Data", nBufferLength=0x105, lpBuffer=0x31e2c4, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\Search\\Data", lpFilePart=0x0) returned 0x24 [0062.105] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\Search\\Data\\", nBufferLength=0x105, lpBuffer=0x31e298, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\Search\\Data\\", lpFilePart=0x0) returned 0x25 [0062.105] FindFirstFileW (in: lpFileName="C:\\ProgramData\\Microsoft\\Search\\Data\\*", lpFindFileData=0x31e4e4 | out: lpFindFileData=0x31e4e4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x27df8b60, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x27e6af80, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x27e6af80, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x381e00 [0062.105] FindClose (in: hFindFile=0x381e00 | out: hFindFile=0x381e00) returned 1 [0062.105] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e77c) returned 1 [0062.105] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e788) returned 1 [0062.105] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e744) returned 1 [0062.105] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\Search\\Data\\Applications", nBufferLength=0x105, lpBuffer=0x31e24c, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\Search\\Data\\Applications", lpFilePart=0x0) returned 0x31 [0062.105] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\Search\\Data\\Applications\\", nBufferLength=0x105, lpBuffer=0x31e220, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\Search\\Data\\Applications\\", lpFilePart=0x0) returned 0x32 [0062.105] FindFirstFileW (in: lpFileName="C:\\ProgramData\\Microsoft\\Search\\Data\\Applications\\*", lpFindFileData=0x31e46c | out: lpFindFileData=0x31e46c*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x27e6af80, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x27e6af80, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x27e6af80, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x381e00 [0062.107] FindClose (in: hFindFile=0x381e00 | out: hFindFile=0x381e00) returned 1 [0062.107] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e704) returned 1 [0062.107] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e710) returned 1 [0062.107] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e744) returned 1 [0062.107] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\Search\\Data\\Applications", nBufferLength=0x105, lpBuffer=0x31e24c, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\Search\\Data\\Applications", lpFilePart=0x0) returned 0x31 [0062.108] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\Search\\Data\\Applications\\", nBufferLength=0x105, lpBuffer=0x31e220, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\Search\\Data\\Applications\\", lpFilePart=0x0) returned 0x32 [0062.108] FindFirstFileW (in: lpFileName="C:\\ProgramData\\Microsoft\\Search\\Data\\Applications\\*", lpFindFileData=0x31e46c | out: lpFindFileData=0x31e46c*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x27e6af80, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x27e6af80, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x27e6af80, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x381e00 [0062.108] FindClose (in: hFindFile=0x381e00 | out: hFindFile=0x381e00) returned 1 [0062.108] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e704) returned 1 [0062.108] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e710) returned 1 [0062.108] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e6cc) returned 1 [0062.108] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\Search\\Data\\Applications\\Windows", nBufferLength=0x105, lpBuffer=0x31e1d4, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\Search\\Data\\Applications\\Windows", lpFilePart=0x0) returned 0x39 [0062.108] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\Search\\Data\\Applications\\Windows\\", nBufferLength=0x105, lpBuffer=0x31e1a8, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\Search\\Data\\Applications\\Windows\\", lpFilePart=0x0) returned 0x3a [0062.108] FindFirstFileW (in: lpFileName="C:\\ProgramData\\Microsoft\\Search\\Data\\Applications\\Windows\\*", lpFindFileData=0x31e3f4 | out: lpFindFileData=0x31e3f4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x27e6af80, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x29612a20, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x29612a20, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x381e00 [0062.110] FindClose (in: hFindFile=0x381e00 | out: hFindFile=0x381e00) returned 1 [0062.110] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e68c) returned 1 [0062.110] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e698) returned 1 [0062.110] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e6cc) returned 1 [0062.110] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\Search\\Data\\Applications\\Windows", nBufferLength=0x105, lpBuffer=0x31e1d4, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\Search\\Data\\Applications\\Windows", lpFilePart=0x0) returned 0x39 [0062.110] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\Search\\Data\\Applications\\Windows\\", nBufferLength=0x105, lpBuffer=0x31e1a8, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\Search\\Data\\Applications\\Windows\\", lpFilePart=0x0) returned 0x3a [0062.110] FindFirstFileW (in: lpFileName="C:\\ProgramData\\Microsoft\\Search\\Data\\Applications\\Windows\\*", lpFindFileData=0x31e3f4 | out: lpFindFileData=0x31e3f4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x27e6af80, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x29612a20, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x29612a20, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x381e00 [0062.111] FindClose (in: hFindFile=0x381e00 | out: hFindFile=0x381e00) returned 1 [0062.112] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e68c) returned 1 [0062.112] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e698) returned 1 [0062.112] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e654) returned 1 [0062.112] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\Search\\Data\\Applications\\Windows\\Config", nBufferLength=0x105, lpBuffer=0x31e15c, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\Search\\Data\\Applications\\Windows\\Config", lpFilePart=0x0) returned 0x40 [0062.112] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\Search\\Data\\Applications\\Windows\\Config\\", nBufferLength=0x105, lpBuffer=0x31e130, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\Search\\Data\\Applications\\Windows\\Config\\", lpFilePart=0x0) returned 0x41 [0062.112] FindFirstFileW (in: lpFileName="C:\\ProgramData\\Microsoft\\Search\\Data\\Applications\\Windows\\Config\\*", lpFindFileData=0x31e37c | out: lpFindFileData=0x31e37c*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x27e6af80, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x27e6af80, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x27e6af80, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x381e00 [0062.113] FindClose (in: hFindFile=0x381e00 | out: hFindFile=0x381e00) returned 1 [0062.113] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e614) returned 1 [0062.113] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e620) returned 1 [0062.113] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e654) returned 1 [0062.113] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\Search\\Data\\Applications\\Windows\\Config", nBufferLength=0x105, lpBuffer=0x31e15c, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\Search\\Data\\Applications\\Windows\\Config", lpFilePart=0x0) returned 0x40 [0062.113] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\Search\\Data\\Applications\\Windows\\Config\\", nBufferLength=0x105, lpBuffer=0x31e130, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\Search\\Data\\Applications\\Windows\\Config\\", lpFilePart=0x0) returned 0x41 [0062.113] FindFirstFileW (in: lpFileName="C:\\ProgramData\\Microsoft\\Search\\Data\\Applications\\Windows\\Config\\*", lpFindFileData=0x31e37c | out: lpFindFileData=0x31e37c*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x27e6af80, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x27e6af80, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x27e6af80, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x381e00 [0062.113] FindClose (in: hFindFile=0x381e00 | out: hFindFile=0x381e00) returned 1 [0062.113] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e614) returned 1 [0062.113] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e620) returned 1 [0062.113] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e654) returned 1 [0062.113] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\Search\\Data\\Applications\\Windows\\GatherLogs", nBufferLength=0x105, lpBuffer=0x31e15c, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\Search\\Data\\Applications\\Windows\\GatherLogs", lpFilePart=0x0) returned 0x44 [0062.113] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\Search\\Data\\Applications\\Windows\\GatherLogs\\", nBufferLength=0x105, lpBuffer=0x31e130, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\Search\\Data\\Applications\\Windows\\GatherLogs\\", lpFilePart=0x0) returned 0x45 [0062.114] FindFirstFileW (in: lpFileName="C:\\ProgramData\\Microsoft\\Search\\Data\\Applications\\Windows\\GatherLogs\\*", lpFindFileData=0x31e37c | out: lpFindFileData=0x31e37c*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x27e6af80, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x29932700, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x29932700, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x381e00 [0062.114] FindClose (in: hFindFile=0x381e00 | out: hFindFile=0x381e00) returned 1 [0062.114] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e614) returned 1 [0062.114] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e620) returned 1 [0062.115] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e654) returned 1 [0062.115] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\Search\\Data\\Applications\\Windows\\GatherLogs", nBufferLength=0x105, lpBuffer=0x31e15c, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\Search\\Data\\Applications\\Windows\\GatherLogs", lpFilePart=0x0) returned 0x44 [0062.115] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\Search\\Data\\Applications\\Windows\\GatherLogs\\", nBufferLength=0x105, lpBuffer=0x31e130, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\Search\\Data\\Applications\\Windows\\GatherLogs\\", lpFilePart=0x0) returned 0x45 [0062.115] FindFirstFileW (in: lpFileName="C:\\ProgramData\\Microsoft\\Search\\Data\\Applications\\Windows\\GatherLogs\\*", lpFindFileData=0x31e37c | out: lpFindFileData=0x31e37c*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x27e6af80, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x29932700, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x29932700, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x381e00 [0062.115] FindClose (in: hFindFile=0x381e00 | out: hFindFile=0x381e00) returned 1 [0062.115] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e614) returned 1 [0062.115] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e620) returned 1 [0062.115] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e5dc) returned 1 [0062.115] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\Search\\Data\\Applications\\Windows\\GatherLogs\\SystemIndex", nBufferLength=0x105, lpBuffer=0x31e0e4, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\Search\\Data\\Applications\\Windows\\GatherLogs\\SystemIndex", lpFilePart=0x0) returned 0x50 [0062.115] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\Search\\Data\\Applications\\Windows\\GatherLogs\\SystemIndex\\", nBufferLength=0x105, lpBuffer=0x31e0b8, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\Search\\Data\\Applications\\Windows\\GatherLogs\\SystemIndex\\", lpFilePart=0x0) returned 0x51 [0062.115] FindFirstFileW (in: lpFileName="C:\\ProgramData\\Microsoft\\Search\\Data\\Applications\\Windows\\GatherLogs\\SystemIndex\\*", lpFindFileData=0x31e304 | out: lpFindFileData=0x31e304*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x29932700, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x29932700, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x29932700, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x381e00 [0062.116] FindClose (in: hFindFile=0x381e00 | out: hFindFile=0x381e00) returned 1 [0062.116] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\Search\\Data\\Applications\\Windows\\GatherLogs\\SystemIndex", nBufferLength=0x105, lpBuffer=0x31e0e4, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\Search\\Data\\Applications\\Windows\\GatherLogs\\SystemIndex", lpFilePart=0x0) returned 0x50 [0062.116] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\Search\\Data\\Applications\\Windows\\GatherLogs\\SystemIndex\\", nBufferLength=0x105, lpBuffer=0x31e0b8, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\Search\\Data\\Applications\\Windows\\GatherLogs\\SystemIndex\\", lpFilePart=0x0) returned 0x51 [0062.116] FindFirstFileW (in: lpFileName="C:\\ProgramData\\Microsoft\\Search\\Data\\Applications\\Windows\\GatherLogs\\SystemIndex\\*", lpFindFileData=0x31e304 | out: lpFindFileData=0x31e304*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x29932700, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x29932700, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x29932700, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x381e00 [0062.116] FindClose (in: hFindFile=0x381e00 | out: hFindFile=0x381e00) returned 1 [0062.116] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\Search\\Data\\Applications\\Windows\\Projects", nBufferLength=0x105, lpBuffer=0x31e15c, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\Search\\Data\\Applications\\Windows\\Projects", lpFilePart=0x0) returned 0x42 [0062.116] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\Search\\Data\\Applications\\Windows\\Projects\\", nBufferLength=0x105, lpBuffer=0x31e130, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\Search\\Data\\Applications\\Windows\\Projects\\", lpFilePart=0x0) returned 0x43 [0062.116] FindFirstFileW (in: lpFileName="C:\\ProgramData\\Microsoft\\Search\\Data\\Applications\\Windows\\Projects\\*", lpFindFileData=0x31e37c | out: lpFindFileData=0x31e37c*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x27e6af80, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x27eb7240, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x27eb7240, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x381e00 [0062.117] FindClose (in: hFindFile=0x381e00 | out: hFindFile=0x381e00) returned 1 [0062.117] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\Search\\Data\\Applications\\Windows\\Projects", nBufferLength=0x105, lpBuffer=0x31e15c, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\Search\\Data\\Applications\\Windows\\Projects", lpFilePart=0x0) returned 0x42 [0062.117] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\Search\\Data\\Applications\\Windows\\Projects\\", nBufferLength=0x105, lpBuffer=0x31e130, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\Search\\Data\\Applications\\Windows\\Projects\\", lpFilePart=0x0) returned 0x43 [0062.117] FindFirstFileW (in: lpFileName="C:\\ProgramData\\Microsoft\\Search\\Data\\Applications\\Windows\\Projects\\*", lpFindFileData=0x31e37c | out: lpFindFileData=0x31e37c*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x27e6af80, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x27eb7240, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x27eb7240, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x381e00 [0062.117] FindClose (in: hFindFile=0x381e00 | out: hFindFile=0x381e00) returned 1 [0062.117] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\Search\\Data\\Applications\\Windows\\Projects\\SystemIndex", nBufferLength=0x105, lpBuffer=0x31e0e4, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\Search\\Data\\Applications\\Windows\\Projects\\SystemIndex", lpFilePart=0x0) returned 0x4e [0062.117] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\Search\\Data\\Applications\\Windows\\Projects\\SystemIndex\\", nBufferLength=0x105, lpBuffer=0x31e0b8, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\Search\\Data\\Applications\\Windows\\Projects\\SystemIndex\\", lpFilePart=0x0) returned 0x4f [0062.117] FindFirstFileW (in: lpFileName="C:\\ProgramData\\Microsoft\\Search\\Data\\Applications\\Windows\\Projects\\SystemIndex\\*", lpFindFileData=0x31e304 | out: lpFindFileData=0x31e304*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x27eb7240, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x29958860, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x29958860, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x381e00 [0062.118] FindClose (in: hFindFile=0x381e00 | out: hFindFile=0x381e00) returned 1 [0062.118] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\Search\\Data\\Applications\\Windows\\Projects\\SystemIndex", nBufferLength=0x105, lpBuffer=0x31e0e4, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\Search\\Data\\Applications\\Windows\\Projects\\SystemIndex", lpFilePart=0x0) returned 0x4e [0062.118] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\Search\\Data\\Applications\\Windows\\Projects\\SystemIndex\\", nBufferLength=0x105, lpBuffer=0x31e0b8, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\Search\\Data\\Applications\\Windows\\Projects\\SystemIndex\\", lpFilePart=0x0) returned 0x4f [0062.118] FindFirstFileW (in: lpFileName="C:\\ProgramData\\Microsoft\\Search\\Data\\Applications\\Windows\\Projects\\SystemIndex\\*", lpFindFileData=0x31e304 | out: lpFindFileData=0x31e304*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x27eb7240, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x29958860, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x29958860, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x381e00 [0062.118] FindClose (in: hFindFile=0x381e00 | out: hFindFile=0x381e00) returned 1 [0062.118] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\Search\\Data\\Applications\\Windows\\Projects\\SystemIndex\\Indexer", nBufferLength=0x105, lpBuffer=0x31e06c, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\Search\\Data\\Applications\\Windows\\Projects\\SystemIndex\\Indexer", lpFilePart=0x0) returned 0x56 [0062.118] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\Search\\Data\\Applications\\Windows\\Projects\\SystemIndex\\Indexer\\", nBufferLength=0x105, lpBuffer=0x31e040, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\Search\\Data\\Applications\\Windows\\Projects\\SystemIndex\\Indexer\\", lpFilePart=0x0) returned 0x57 [0062.118] FindFirstFileW (in: lpFileName="C:\\ProgramData\\Microsoft\\Search\\Data\\Applications\\Windows\\Projects\\SystemIndex\\Indexer\\*", lpFindFileData=0x31e28c | out: lpFindFileData=0x31e28c*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x29958860, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x29958860, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x29958860, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x381e00 [0062.119] FindClose (in: hFindFile=0x381e00 | out: hFindFile=0x381e00) returned 1 [0062.119] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\Search\\Data\\Applications\\Windows\\Projects\\SystemIndex\\Indexer", nBufferLength=0x105, lpBuffer=0x31e06c, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\Search\\Data\\Applications\\Windows\\Projects\\SystemIndex\\Indexer", lpFilePart=0x0) returned 0x56 [0062.119] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\Search\\Data\\Applications\\Windows\\Projects\\SystemIndex\\Indexer\\", nBufferLength=0x105, lpBuffer=0x31e040, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\Search\\Data\\Applications\\Windows\\Projects\\SystemIndex\\Indexer\\", lpFilePart=0x0) returned 0x57 [0062.119] FindFirstFileW (in: lpFileName="C:\\ProgramData\\Microsoft\\Search\\Data\\Applications\\Windows\\Projects\\SystemIndex\\Indexer\\*", lpFindFileData=0x31e28c | out: lpFindFileData=0x31e28c*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x29958860, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x29958860, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x29958860, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x381e00 [0062.120] FindClose (in: hFindFile=0x381e00 | out: hFindFile=0x381e00) returned 1 [0062.120] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\Search\\Data\\Applications\\Windows\\Projects\\SystemIndex\\Indexer\\CiFiles", nBufferLength=0x105, lpBuffer=0x31dff4, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\Search\\Data\\Applications\\Windows\\Projects\\SystemIndex\\Indexer\\CiFiles", lpFilePart=0x0) returned 0x5e [0062.120] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\Search\\Data\\Applications\\Windows\\Projects\\SystemIndex\\Indexer\\CiFiles\\", nBufferLength=0x105, lpBuffer=0x31dfc8, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\Search\\Data\\Applications\\Windows\\Projects\\SystemIndex\\Indexer\\CiFiles\\", lpFilePart=0x0) returned 0x5f [0062.120] FindFirstFileW (in: lpFileName="C:\\ProgramData\\Microsoft\\Search\\Data\\Applications\\Windows\\Projects\\SystemIndex\\Indexer\\CiFiles\\*", lpFindFileData=0x31e214 | out: lpFindFileData=0x31e214*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x29958860, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x29a3d0a0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x29a3d0a0, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x381e00 [0062.122] FindClose (in: hFindFile=0x381e00 | out: hFindFile=0x381e00) returned 1 [0062.123] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\Search\\Data\\Applications\\Windows\\Projects\\SystemIndex\\Indexer\\CiFiles", nBufferLength=0x105, lpBuffer=0x31dff4, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\Search\\Data\\Applications\\Windows\\Projects\\SystemIndex\\Indexer\\CiFiles", lpFilePart=0x0) returned 0x5e [0062.123] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\Search\\Data\\Applications\\Windows\\Projects\\SystemIndex\\Indexer\\CiFiles\\", nBufferLength=0x105, lpBuffer=0x31dfc8, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\Search\\Data\\Applications\\Windows\\Projects\\SystemIndex\\Indexer\\CiFiles\\", lpFilePart=0x0) returned 0x5f [0062.123] FindFirstFileW (in: lpFileName="C:\\ProgramData\\Microsoft\\Search\\Data\\Applications\\Windows\\Projects\\SystemIndex\\Indexer\\CiFiles\\*", lpFindFileData=0x31e214 | out: lpFindFileData=0x31e214*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x29958860, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x29a3d0a0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x29a3d0a0, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x381e00 [0062.124] FindClose (in: hFindFile=0x381e00 | out: hFindFile=0x381e00) returned 1 [0062.124] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\Search\\Data\\Applications\\Windows\\Projects\\SystemIndex\\PropMap", nBufferLength=0x105, lpBuffer=0x31e06c, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\Search\\Data\\Applications\\Windows\\Projects\\SystemIndex\\PropMap", lpFilePart=0x0) returned 0x56 [0062.124] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\Search\\Data\\Applications\\Windows\\Projects\\SystemIndex\\PropMap\\", nBufferLength=0x105, lpBuffer=0x31e040, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\Search\\Data\\Applications\\Windows\\Projects\\SystemIndex\\PropMap\\", lpFilePart=0x0) returned 0x57 [0062.124] FindFirstFileW (in: lpFileName="C:\\ProgramData\\Microsoft\\Search\\Data\\Applications\\Windows\\Projects\\SystemIndex\\PropMap\\*", lpFindFileData=0x31e28c | out: lpFindFileData=0x31e28c*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x27eb7240, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x27edd3a0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x27edd3a0, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x381e00 [0062.124] FindClose (in: hFindFile=0x381e00 | out: hFindFile=0x381e00) returned 1 [0062.125] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\Search\\Data\\Applications\\Windows\\Projects\\SystemIndex\\PropMap", nBufferLength=0x105, lpBuffer=0x31e06c, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\Search\\Data\\Applications\\Windows\\Projects\\SystemIndex\\PropMap", lpFilePart=0x0) returned 0x56 [0062.125] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\Search\\Data\\Applications\\Windows\\Projects\\SystemIndex\\PropMap\\", nBufferLength=0x105, lpBuffer=0x31e040, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\Search\\Data\\Applications\\Windows\\Projects\\SystemIndex\\PropMap\\", lpFilePart=0x0) returned 0x57 [0062.125] FindFirstFileW (in: lpFileName="C:\\ProgramData\\Microsoft\\Search\\Data\\Applications\\Windows\\Projects\\SystemIndex\\PropMap\\*", lpFindFileData=0x31e28c | out: lpFindFileData=0x31e28c*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x27eb7240, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x27edd3a0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x27edd3a0, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x381e00 [0062.125] FindClose (in: hFindFile=0x381e00 | out: hFindFile=0x381e00) returned 1 [0062.125] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\Search\\Data\\Applications\\Windows\\Projects\\SystemIndex\\SecStore", nBufferLength=0x105, lpBuffer=0x31e06c, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\Search\\Data\\Applications\\Windows\\Projects\\SystemIndex\\SecStore", lpFilePart=0x0) returned 0x57 [0062.125] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\Search\\Data\\Applications\\Windows\\Projects\\SystemIndex\\SecStore\\", nBufferLength=0x105, lpBuffer=0x31e040, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\Search\\Data\\Applications\\Windows\\Projects\\SystemIndex\\SecStore\\", lpFilePart=0x0) returned 0x58 [0062.125] FindFirstFileW (in: lpFileName="C:\\ProgramData\\Microsoft\\Search\\Data\\Applications\\Windows\\Projects\\SystemIndex\\SecStore\\*", lpFindFileData=0x31e28c | out: lpFindFileData=0x31e28c*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x29958860, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x29958860, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x29958860, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x381e00 [0062.125] FindClose (in: hFindFile=0x381e00 | out: hFindFile=0x381e00) returned 1 [0062.125] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\Search\\Data\\Applications\\Windows\\Projects\\SystemIndex\\SecStore", nBufferLength=0x105, lpBuffer=0x31e06c, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\Search\\Data\\Applications\\Windows\\Projects\\SystemIndex\\SecStore", lpFilePart=0x0) returned 0x57 [0062.125] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\Search\\Data\\Applications\\Windows\\Projects\\SystemIndex\\SecStore\\", nBufferLength=0x105, lpBuffer=0x31e040, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\Search\\Data\\Applications\\Windows\\Projects\\SystemIndex\\SecStore\\", lpFilePart=0x0) returned 0x58 [0062.125] FindFirstFileW (in: lpFileName="C:\\ProgramData\\Microsoft\\Search\\Data\\Applications\\Windows\\Projects\\SystemIndex\\SecStore\\*", lpFindFileData=0x31e28c | out: lpFindFileData=0x31e28c*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x29958860, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x29958860, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x29958860, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x381e00 [0062.125] FindClose (in: hFindFile=0x381e00 | out: hFindFile=0x381e00) returned 1 [0062.126] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\Search\\Data\\Temp", nBufferLength=0x105, lpBuffer=0x31e24c, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\Search\\Data\\Temp", lpFilePart=0x0) returned 0x29 [0062.126] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\Search\\Data\\Temp\\", nBufferLength=0x105, lpBuffer=0x31e220, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\Search\\Data\\Temp\\", lpFilePart=0x0) returned 0x2a [0062.126] FindFirstFileW (in: lpFileName="C:\\ProgramData\\Microsoft\\Search\\Data\\Temp\\*", lpFindFileData=0x31e46c | out: lpFindFileData=0x31e46c*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x27e1ecc0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x27e1ecc0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x422b7290, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x381e00 [0062.126] FindClose (in: hFindFile=0x381e00 | out: hFindFile=0x381e00) returned 1 [0062.126] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\Search\\Data\\Temp", nBufferLength=0x105, lpBuffer=0x31e24c, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\Search\\Data\\Temp", lpFilePart=0x0) returned 0x29 [0062.126] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\Search\\Data\\Temp\\", nBufferLength=0x105, lpBuffer=0x31e220, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\Search\\Data\\Temp\\", lpFilePart=0x0) returned 0x2a [0062.126] FindFirstFileW (in: lpFileName="C:\\ProgramData\\Microsoft\\Search\\Data\\Temp\\*", lpFindFileData=0x31e46c | out: lpFindFileData=0x31e46c*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x27e1ecc0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x27e1ecc0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x422b7290, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x381e00 [0062.126] FindClose (in: hFindFile=0x381e00 | out: hFindFile=0x381e00) returned 1 [0062.126] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\User Account Pictures", nBufferLength=0x105, lpBuffer=0x31e33c, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\User Account Pictures", lpFilePart=0x0) returned 0x2e [0062.126] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\User Account Pictures\\", nBufferLength=0x105, lpBuffer=0x31e310, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\User Account Pictures\\", lpFilePart=0x0) returned 0x2f [0062.126] FindFirstFileW (in: lpFileName="C:\\ProgramData\\Microsoft\\User Account Pictures\\*", lpFindFileData=0x31e55c | out: lpFindFileData=0x31e55c*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xfd9b5b52, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x29423840, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x29423840, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x381e00 [0062.127] FindClose (in: hFindFile=0x381e00 | out: hFindFile=0x381e00) returned 1 [0062.127] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\User Account Pictures", nBufferLength=0x105, lpBuffer=0x31e33c, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\User Account Pictures", lpFilePart=0x0) returned 0x2e [0062.127] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\User Account Pictures\\", nBufferLength=0x105, lpBuffer=0x31e310, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\User Account Pictures\\", lpFilePart=0x0) returned 0x2f [0062.127] FindFirstFileW (in: lpFileName="C:\\ProgramData\\Microsoft\\User Account Pictures\\*", lpFindFileData=0x31e55c | out: lpFindFileData=0x31e55c*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xfd9b5b52, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x29423840, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x29423840, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x381e00 [0062.127] FindClose (in: hFindFile=0x381e00 | out: hFindFile=0x381e00) returned 1 [0062.127] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\User Account Pictures\\guest.bmp", nBufferLength=0x105, lpBuffer=0x31e20c, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\User Account Pictures\\guest.bmp", lpFilePart=0x0) returned 0x38 [0062.127] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft\\User Account Pictures\\guest.bmp" (normalized: "c:\\programdata\\microsoft\\user account pictures\\guest.bmp"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x178 [0062.127] GetFileType (hFile=0x178) returned 0x1 [0062.127] GetFileType (hFile=0x178) returned 0x1 [0062.127] GetFileSize (in: hFile=0x178, lpFileSizeHigh=0x31e808 | out: lpFileSizeHigh=0x31e808*=0x0) returned 0xc038 [0062.127] ReadFile (in: hFile=0x178, lpBuffer=0x277f774, nNumberOfBytesToRead=0xc038, lpNumberOfBytesRead=0x31e7b4, lpOverlapped=0x0 | out: lpBuffer=0x277f774*, lpNumberOfBytesRead=0x31e7b4*=0xc038, lpOverlapped=0x0) returned 1 [0062.170] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\User Account Pictures\\guest.bmp", nBufferLength=0x105, lpBuffer=0x31e1f8, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\User Account Pictures\\guest.bmp", lpFilePart=0x0) returned 0x38 [0062.170] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft\\User Account Pictures\\guest.bmp" (normalized: "c:\\programdata\\microsoft\\user account pictures\\guest.bmp"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x178 [0062.171] GetFileType (hFile=0x178) returned 0x1 [0062.171] GetFileType (hFile=0x178) returned 0x1 [0062.171] WriteFile (in: hFile=0x178, lpBuffer=0x27f062c*, nNumberOfBytesToWrite=0xc040, lpNumberOfBytesWritten=0x31e7a8, lpOverlapped=0x0 | out: lpBuffer=0x27f062c*, lpNumberOfBytesWritten=0x31e7a8*=0xc040, lpOverlapped=0x0) returned 1 [0062.173] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\User Account Pictures\\guest.bmp", nBufferLength=0x105, lpBuffer=0x31e32c, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\User Account Pictures\\guest.bmp", lpFilePart=0x0) returned 0x38 [0062.174] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\User Account Pictures\\guest.bmp", nBufferLength=0x105, lpBuffer=0x31e32c, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\User Account Pictures\\guest.bmp", lpFilePart=0x0) returned 0x38 [0062.174] GetFileAttributesExW (in: lpFileName="C:\\ProgramData\\Microsoft\\User Account Pictures\\guest.bmp" (normalized: "c:\\programdata\\microsoft\\user account pictures\\guest.bmp"), fInfoLevelId=0x0, lpFileInformation=0x31e808 | out: lpFileInformation=0x31e808*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x80340916, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x7bed1018, ftLastAccessTime.dwHighDateTime=0x1ca0444, ftLastWriteTime.dwLowDateTime=0x8806b00, ftLastWriteTime.dwHighDateTime=0x1d6eb7f, nFileSizeHigh=0x0, nFileSizeLow=0xc040)) returned 1 [0062.174] MoveFileW (lpExistingFileName="C:\\ProgramData\\Microsoft\\User Account Pictures\\guest.bmp" (normalized: "c:\\programdata\\microsoft\\user account pictures\\guest.bmp"), lpNewFileName="C:\\ProgramData\\Microsoft\\User Account Pictures\\guest.bmp" (normalized: "c:\\programdata\\microsoft\\user account pictures\\guest.bmp")) returned 1 [0062.174] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\User Account Pictures\\user.bmp", nBufferLength=0x105, lpBuffer=0x31e20c, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\User Account Pictures\\user.bmp", lpFilePart=0x0) returned 0x37 [0062.174] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft\\User Account Pictures\\user.bmp" (normalized: "c:\\programdata\\microsoft\\user account pictures\\user.bmp"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x178 [0062.174] GetFileType (hFile=0x178) returned 0x1 [0062.174] GetFileType (hFile=0x178) returned 0x1 [0062.174] GetFileSize (in: hFile=0x178, lpFileSizeHigh=0x31e808 | out: lpFileSizeHigh=0x31e808*=0x0) returned 0xc038 [0062.175] ReadFile (in: hFile=0x178, lpBuffer=0x27fc984, nNumberOfBytesToRead=0xc038, lpNumberOfBytesRead=0x31e7b4, lpOverlapped=0x0 | out: lpBuffer=0x27fc984*, lpNumberOfBytesRead=0x31e7b4*=0xc038, lpOverlapped=0x0) returned 1 [0062.193] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\User Account Pictures\\user.bmp", nBufferLength=0x105, lpBuffer=0x31e1f8, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\User Account Pictures\\user.bmp", lpFilePart=0x0) returned 0x37 [0062.193] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e6ec) returned 1 [0062.193] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft\\User Account Pictures\\user.bmp" (normalized: "c:\\programdata\\microsoft\\user account pictures\\user.bmp"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x178 [0062.194] GetFileType (hFile=0x178) returned 0x1 [0062.194] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e6e8) returned 1 [0062.194] GetFileType (hFile=0x178) returned 0x1 [0062.194] WriteFile (in: hFile=0x178, lpBuffer=0x267a358*, nNumberOfBytesToWrite=0xc040, lpNumberOfBytesWritten=0x31e7a8, lpOverlapped=0x0 | out: lpBuffer=0x267a358*, lpNumberOfBytesWritten=0x31e7a8*=0xc040, lpOverlapped=0x0) returned 1 [0062.196] CloseHandle (hObject=0x178) returned 1 [0062.196] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\User Account Pictures\\user.bmp", nBufferLength=0x105, lpBuffer=0x31e32c, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\User Account Pictures\\user.bmp", lpFilePart=0x0) returned 0x37 [0062.196] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\User Account Pictures\\user.bmp", nBufferLength=0x105, lpBuffer=0x31e32c, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\User Account Pictures\\user.bmp", lpFilePart=0x0) returned 0x37 [0062.196] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e78c) returned 1 [0062.196] GetFileAttributesExW (in: lpFileName="C:\\ProgramData\\Microsoft\\User Account Pictures\\user.bmp" (normalized: "c:\\programdata\\microsoft\\user account pictures\\user.bmp"), fInfoLevelId=0x0, lpFileInformation=0x31e808 | out: lpFileInformation=0x31e808*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x80340916, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x7bed1018, ftLastAccessTime.dwHighDateTime=0x1ca0444, ftLastWriteTime.dwLowDateTime=0x882cc60, ftLastWriteTime.dwHighDateTime=0x1d6eb7f, nFileSizeHigh=0x0, nFileSizeLow=0xc040)) returned 1 [0062.196] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e788) returned 1 [0062.196] MoveFileW (lpExistingFileName="C:\\ProgramData\\Microsoft\\User Account Pictures\\user.bmp" (normalized: "c:\\programdata\\microsoft\\user account pictures\\user.bmp"), lpNewFileName="C:\\ProgramData\\Microsoft\\User Account Pictures\\user.bmp" (normalized: "c:\\programdata\\microsoft\\user account pictures\\user.bmp")) returned 1 [0062.197] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e7bc) returned 1 [0062.197] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\User Account Pictures\\Default Pictures", nBufferLength=0x105, lpBuffer=0x31e2c4, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\User Account Pictures\\Default Pictures", lpFilePart=0x0) returned 0x3f [0062.197] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\User Account Pictures\\Default Pictures\\", nBufferLength=0x105, lpBuffer=0x31e298, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\User Account Pictures\\Default Pictures\\", lpFilePart=0x0) returned 0x40 [0062.197] FindFirstFileW (in: lpFileName="C:\\ProgramData\\Microsoft\\User Account Pictures\\Default Pictures\\*", lpFindFileData=0x31e4e4 | out: lpFindFileData=0x31e4e4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x7fffaad0, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x80366a76, ftLastAccessTime.dwHighDateTime=0x1ca0444, ftLastWriteTime.dwLowDateTime=0x80366a76, ftLastWriteTime.dwHighDateTime=0x1ca0444, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x381d80 [0062.199] FindNextFileW (in: hFindFile=0x381d80, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x7fffaad0, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x80366a76, ftLastAccessTime.dwHighDateTime=0x1ca0444, ftLastWriteTime.dwLowDateTime=0x80366a76, ftLastWriteTime.dwHighDateTime=0x1ca0444, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0062.199] FindNextFileW (in: hFindFile=0x381d80, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xae24f474, ftCreationTime.dwHighDateTime=0x1ca040d, ftLastAccessTime.dwLowDateTime=0xae24f474, ftLastAccessTime.dwHighDateTime=0x1ca040d, ftLastWriteTime.dwLowDateTime=0xda0a8861, ftLastWriteTime.dwHighDateTime=0x1c9ea0a, nFileSizeHigh=0x0, nFileSizeLow=0xc038, dwReserved0=0x0, dwReserved1=0x0, cFileName="usertile10.bmp", cAlternateFileName="")) returned 1 [0062.199] FindNextFileW (in: hFindFile=0x381d80, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xae24f474, ftCreationTime.dwHighDateTime=0x1ca040d, ftLastAccessTime.dwLowDateTime=0xae24f474, ftLastAccessTime.dwHighDateTime=0x1ca040d, ftLastWriteTime.dwLowDateTime=0xdb5a2927, ftLastWriteTime.dwHighDateTime=0x1c9ea0a, nFileSizeHigh=0x0, nFileSizeLow=0xc038, dwReserved0=0x0, dwReserved1=0x0, cFileName="usertile11.bmp", cAlternateFileName="")) returned 1 [0062.199] FindNextFileW (in: hFindFile=0x381d80, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xae2755d1, ftCreationTime.dwHighDateTime=0x1ca040d, ftLastAccessTime.dwLowDateTime=0xae2755d1, ftLastAccessTime.dwHighDateTime=0x1ca040d, ftLastWriteTime.dwLowDateTime=0xdb6d3417, ftLastWriteTime.dwHighDateTime=0x1c9ea0a, nFileSizeHigh=0x0, nFileSizeLow=0xc038, dwReserved0=0x0, dwReserved1=0x0, cFileName="usertile12.bmp", cAlternateFileName="")) returned 1 [0062.199] FindNextFileW (in: hFindFile=0x381d80, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xae29b72e, ftCreationTime.dwHighDateTime=0x1ca040d, ftLastAccessTime.dwLowDateTime=0xae29b72e, ftLastAccessTime.dwHighDateTime=0x1ca040d, ftLastWriteTime.dwLowDateTime=0xdb76b98f, ftLastWriteTime.dwHighDateTime=0x1c9ea0a, nFileSizeHigh=0x0, nFileSizeLow=0xbeb8, dwReserved0=0x0, dwReserved1=0x0, cFileName="usertile13.bmp", cAlternateFileName="")) returned 1 [0062.200] FindNextFileW (in: hFindFile=0x381d80, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xae2e79e8, ftCreationTime.dwHighDateTime=0x1ca040d, ftLastAccessTime.dwLowDateTime=0xae2e79e8, ftLastAccessTime.dwHighDateTime=0x1ca040d, ftLastWriteTime.dwLowDateTime=0xdb82a065, ftLastWriteTime.dwHighDateTime=0x1c9ea0a, nFileSizeHigh=0x0, nFileSizeLow=0xc038, dwReserved0=0x0, dwReserved1=0x0, cFileName="usertile14.bmp", cAlternateFileName="")) returned 1 [0062.200] FindNextFileW (in: hFindFile=0x381d80, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xae2e79e8, ftCreationTime.dwHighDateTime=0x1ca040d, ftLastAccessTime.dwLowDateTime=0xae2e79e8, ftLastAccessTime.dwHighDateTime=0x1ca040d, ftLastWriteTime.dwLowDateTime=0xdbb95fd7, ftLastWriteTime.dwHighDateTime=0x1c9ea0a, nFileSizeHigh=0x0, nFileSizeLow=0xc038, dwReserved0=0x0, dwReserved1=0x0, cFileName="usertile15.bmp", cAlternateFileName="")) returned 1 [0062.200] FindNextFileW (in: hFindFile=0x381d80, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xae30db45, ftCreationTime.dwHighDateTime=0x1ca040d, ftLastAccessTime.dwLowDateTime=0xae30db45, ftLastAccessTime.dwHighDateTime=0x1ca040d, ftLastWriteTime.dwLowDateTime=0xdca9c9ed, ftLastWriteTime.dwHighDateTime=0x1c9ea0a, nFileSizeHigh=0x0, nFileSizeLow=0xc038, dwReserved0=0x0, dwReserved1=0x0, cFileName="usertile16.bmp", cAlternateFileName="")) returned 1 [0062.200] FindNextFileW (in: hFindFile=0x381d80, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xae333ca2, ftCreationTime.dwHighDateTime=0x1ca040d, ftLastAccessTime.dwLowDateTime=0xae333ca2, ftLastAccessTime.dwHighDateTime=0x1ca040d, ftLastWriteTime.dwLowDateTime=0xdcc3f8f7, ftLastWriteTime.dwHighDateTime=0x1c9ea0a, nFileSizeHigh=0x0, nFileSizeLow=0xc038, dwReserved0=0x0, dwReserved1=0x0, cFileName="usertile17.bmp", cAlternateFileName="")) returned 1 [0062.200] FindNextFileW (in: hFindFile=0x381d80, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xae333ca2, ftCreationTime.dwHighDateTime=0x1ca040d, ftLastAccessTime.dwLowDateTime=0xae333ca2, ftLastAccessTime.dwHighDateTime=0x1ca040d, ftLastWriteTime.dwLowDateTime=0xdcc65a55, ftLastWriteTime.dwHighDateTime=0x1c9ea0a, nFileSizeHigh=0x0, nFileSizeLow=0xc038, dwReserved0=0x0, dwReserved1=0x0, cFileName="usertile18.bmp", cAlternateFileName="")) returned 1 [0062.200] FindNextFileW (in: hFindFile=0x381d80, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xae359dff, ftCreationTime.dwHighDateTime=0x1ca040d, ftLastAccessTime.dwLowDateTime=0xae359dff, ftLastAccessTime.dwHighDateTime=0x1ca040d, ftLastWriteTime.dwLowDateTime=0xdcc8bbb3, ftLastWriteTime.dwHighDateTime=0x1c9ea0a, nFileSizeHigh=0x0, nFileSizeLow=0xc038, dwReserved0=0x0, dwReserved1=0x0, cFileName="usertile19.bmp", cAlternateFileName="")) returned 1 [0062.200] FindNextFileW (in: hFindFile=0x381d80, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xae37ff5c, ftCreationTime.dwHighDateTime=0x1ca040d, ftLastAccessTime.dwLowDateTime=0xae37ff5c, ftLastAccessTime.dwHighDateTime=0x1ca040d, ftLastWriteTime.dwLowDateTime=0xdccb1d11, ftLastWriteTime.dwHighDateTime=0x1c9ea0a, nFileSizeHigh=0x0, nFileSizeLow=0xc038, dwReserved0=0x0, dwReserved1=0x0, cFileName="usertile20.bmp", cAlternateFileName="")) returned 1 [0062.200] FindNextFileW (in: hFindFile=0x381d80, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xae3a60b9, ftCreationTime.dwHighDateTime=0x1ca040d, ftLastAccessTime.dwLowDateTime=0xae3a60b9, ftLastAccessTime.dwHighDateTime=0x1ca040d, ftLastWriteTime.dwLowDateTime=0xdd069f3f, ftLastWriteTime.dwHighDateTime=0x1c9ea0a, nFileSizeHigh=0x0, nFileSizeLow=0xc038, dwReserved0=0x0, dwReserved1=0x0, cFileName="usertile21.bmp", cAlternateFileName="")) returned 1 [0062.200] FindNextFileW (in: hFindFile=0x381d80, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xae3a60b9, ftCreationTime.dwHighDateTime=0x1ca040d, ftLastAccessTime.dwLowDateTime=0xae3a60b9, ftLastAccessTime.dwHighDateTime=0x1ca040d, ftLastWriteTime.dwLowDateTime=0xdd09009d, ftLastWriteTime.dwHighDateTime=0x1c9ea0a, nFileSizeHigh=0x0, nFileSizeLow=0xc038, dwReserved0=0x0, dwReserved1=0x0, cFileName="usertile22.bmp", cAlternateFileName="")) returned 1 [0062.201] FindNextFileW (in: hFindFile=0x381d80, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xae3cc216, ftCreationTime.dwHighDateTime=0x1ca040d, ftLastAccessTime.dwLowDateTime=0xae3cc216, ftLastAccessTime.dwHighDateTime=0x1ca040d, ftLastWriteTime.dwLowDateTime=0xdd0b61fb, ftLastWriteTime.dwHighDateTime=0x1c9ea0a, nFileSizeHigh=0x0, nFileSizeLow=0xc038, dwReserved0=0x0, dwReserved1=0x0, cFileName="usertile23.bmp", cAlternateFileName="")) returned 1 [0062.201] FindNextFileW (in: hFindFile=0x381d80, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xae3f2373, ftCreationTime.dwHighDateTime=0x1ca040d, ftLastAccessTime.dwLowDateTime=0xae3f2373, ftLastAccessTime.dwHighDateTime=0x1ca040d, ftLastWriteTime.dwLowDateTime=0xdd232fa7, ftLastWriteTime.dwHighDateTime=0x1c9ea0a, nFileSizeHigh=0x0, nFileSizeLow=0xc038, dwReserved0=0x0, dwReserved1=0x0, cFileName="usertile24.bmp", cAlternateFileName="")) returned 1 [0062.201] FindNextFileW (in: hFindFile=0x381d80, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xae3f2373, ftCreationTime.dwHighDateTime=0x1ca040d, ftLastAccessTime.dwLowDateTime=0xae3f2373, ftLastAccessTime.dwHighDateTime=0x1ca040d, ftLastWriteTime.dwLowDateTime=0xdd259105, ftLastWriteTime.dwHighDateTime=0x1c9ea0a, nFileSizeHigh=0x0, nFileSizeLow=0xc038, dwReserved0=0x0, dwReserved1=0x0, cFileName="usertile25.bmp", cAlternateFileName="")) returned 1 [0062.201] FindNextFileW (in: hFindFile=0x381d80, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xae3f2373, ftCreationTime.dwHighDateTime=0x1ca040d, ftLastAccessTime.dwLowDateTime=0xae3f2373, ftLastAccessTime.dwHighDateTime=0x1ca040d, ftLastWriteTime.dwLowDateTime=0xdd27f263, ftLastWriteTime.dwHighDateTime=0x1c9ea0a, nFileSizeHigh=0x0, nFileSizeLow=0xc038, dwReserved0=0x0, dwReserved1=0x0, cFileName="usertile26.bmp", cAlternateFileName="")) returned 1 [0062.201] FindNextFileW (in: hFindFile=0x381d80, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xae4184d0, ftCreationTime.dwHighDateTime=0x1ca040d, ftLastAccessTime.dwLowDateTime=0xae4184d0, ftLastAccessTime.dwHighDateTime=0x1ca040d, ftLastWriteTime.dwLowDateTime=0xdd2a53c1, ftLastWriteTime.dwHighDateTime=0x1c9ea0a, nFileSizeHigh=0x0, nFileSizeLow=0xc038, dwReserved0=0x0, dwReserved1=0x0, cFileName="usertile27.bmp", cAlternateFileName="")) returned 1 [0062.201] FindNextFileW (in: hFindFile=0x381d80, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xae43e62d, ftCreationTime.dwHighDateTime=0x1ca040d, ftLastAccessTime.dwLowDateTime=0xae43e62d, ftLastAccessTime.dwHighDateTime=0x1ca040d, ftLastWriteTime.dwLowDateTime=0xdd3177db, ftLastWriteTime.dwHighDateTime=0x1c9ea0a, nFileSizeHigh=0x0, nFileSizeLow=0xc038, dwReserved0=0x0, dwReserved1=0x0, cFileName="usertile28.bmp", cAlternateFileName="")) returned 1 [0062.201] FindNextFileW (in: hFindFile=0x381d80, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xae43e62d, ftCreationTime.dwHighDateTime=0x1ca040d, ftLastAccessTime.dwLowDateTime=0xae43e62d, ftLastAccessTime.dwHighDateTime=0x1ca040d, ftLastWriteTime.dwLowDateTime=0xdd33d939, ftLastWriteTime.dwHighDateTime=0x1c9ea0a, nFileSizeHigh=0x0, nFileSizeLow=0xc038, dwReserved0=0x0, dwReserved1=0x0, cFileName="usertile29.bmp", cAlternateFileName="")) returned 1 [0062.201] FindNextFileW (in: hFindFile=0x381d80, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xae46478a, ftCreationTime.dwHighDateTime=0x1ca040d, ftLastAccessTime.dwLowDateTime=0xae46478a, ftLastAccessTime.dwHighDateTime=0x1ca040d, ftLastWriteTime.dwLowDateTime=0xdd3fc00f, ftLastWriteTime.dwHighDateTime=0x1c9ea0a, nFileSizeHigh=0x0, nFileSizeLow=0xc038, dwReserved0=0x0, dwReserved1=0x0, cFileName="usertile30.bmp", cAlternateFileName="")) returned 1 [0062.201] FindNextFileW (in: hFindFile=0x381d80, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xae48a8e7, ftCreationTime.dwHighDateTime=0x1ca040d, ftLastAccessTime.dwLowDateTime=0xae48a8e7, ftLastAccessTime.dwHighDateTime=0x1ca040d, ftLastWriteTime.dwLowDateTime=0xdd3fc00f, ftLastWriteTime.dwHighDateTime=0x1c9ea0a, nFileSizeHigh=0x0, nFileSizeLow=0xc038, dwReserved0=0x0, dwReserved1=0x0, cFileName="usertile31.bmp", cAlternateFileName="")) returned 1 [0062.202] FindNextFileW (in: hFindFile=0x381d80, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xae48a8e7, ftCreationTime.dwHighDateTime=0x1ca040d, ftLastAccessTime.dwLowDateTime=0xae48a8e7, ftLastAccessTime.dwHighDateTime=0x1ca040d, ftLastWriteTime.dwLowDateTime=0xdd42216d, ftLastWriteTime.dwHighDateTime=0x1c9ea0a, nFileSizeHigh=0x0, nFileSizeLow=0xc038, dwReserved0=0x0, dwReserved1=0x0, cFileName="usertile32.bmp", cAlternateFileName="")) returned 1 [0062.202] FindNextFileW (in: hFindFile=0x381d80, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xae4b0a44, ftCreationTime.dwHighDateTime=0x1ca040d, ftLastAccessTime.dwLowDateTime=0xae4b0a44, ftLastAccessTime.dwHighDateTime=0x1ca040d, ftLastWriteTime.dwLowDateTime=0xdd4482cb, ftLastWriteTime.dwHighDateTime=0x1c9ea0a, nFileSizeHigh=0x0, nFileSizeLow=0xc038, dwReserved0=0x0, dwReserved1=0x0, cFileName="usertile33.bmp", cAlternateFileName="")) returned 1 [0062.202] FindNextFileW (in: hFindFile=0x381d80, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xae4fccfe, ftCreationTime.dwHighDateTime=0x1ca040d, ftLastAccessTime.dwLowDateTime=0xae4fccfe, ftLastAccessTime.dwHighDateTime=0x1ca040d, ftLastWriteTime.dwLowDateTime=0xdd9c9561, ftLastWriteTime.dwHighDateTime=0x1c9ea0a, nFileSizeHigh=0x0, nFileSizeLow=0xc038, dwReserved0=0x0, dwReserved1=0x0, cFileName="usertile34.bmp", cAlternateFileName="")) returned 1 [0062.202] FindNextFileW (in: hFindFile=0x381d80, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xae4fccfe, ftCreationTime.dwHighDateTime=0x1ca040d, ftLastAccessTime.dwLowDateTime=0xae4fccfe, ftLastAccessTime.dwHighDateTime=0x1ca040d, ftLastWriteTime.dwLowDateTime=0xdd9ef6bf, ftLastWriteTime.dwHighDateTime=0x1c9ea0a, nFileSizeHigh=0x0, nFileSizeLow=0xc038, dwReserved0=0x0, dwReserved1=0x0, cFileName="usertile35.bmp", cAlternateFileName="")) returned 1 [0062.202] FindNextFileW (in: hFindFile=0x381d80, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xae548fb8, ftCreationTime.dwHighDateTime=0x1ca040d, ftLastAccessTime.dwLowDateTime=0xae548fb8, ftLastAccessTime.dwHighDateTime=0x1ca040d, ftLastWriteTime.dwLowDateTime=0xdd9ef6bf, ftLastWriteTime.dwHighDateTime=0x1c9ea0a, nFileSizeHigh=0x0, nFileSizeLow=0xc038, dwReserved0=0x0, dwReserved1=0x0, cFileName="usertile36.bmp", cAlternateFileName="")) returned 1 [0062.202] FindNextFileW (in: hFindFile=0x381d80, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xae595272, ftCreationTime.dwHighDateTime=0x1ca040d, ftLastAccessTime.dwLowDateTime=0xae595272, ftLastAccessTime.dwHighDateTime=0x1ca040d, ftLastWriteTime.dwLowDateTime=0xddb6c46b, ftLastWriteTime.dwHighDateTime=0x1c9ea0a, nFileSizeHigh=0x0, nFileSizeLow=0xc038, dwReserved0=0x0, dwReserved1=0x0, cFileName="usertile37.bmp", cAlternateFileName="")) returned 1 [0062.202] FindNextFileW (in: hFindFile=0x381d80, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xae5bb3cf, ftCreationTime.dwHighDateTime=0x1ca040d, ftLastAccessTime.dwLowDateTime=0xae5bb3cf, ftLastAccessTime.dwHighDateTime=0x1ca040d, ftLastWriteTime.dwLowDateTime=0xddb6c46b, ftLastWriteTime.dwHighDateTime=0x1c9ea0a, nFileSizeHigh=0x0, nFileSizeLow=0xc038, dwReserved0=0x0, dwReserved1=0x0, cFileName="usertile38.bmp", cAlternateFileName="")) returned 1 [0062.202] FindNextFileW (in: hFindFile=0x381d80, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xae5e152c, ftCreationTime.dwHighDateTime=0x1ca040d, ftLastAccessTime.dwLowDateTime=0xae5e152c, ftLastAccessTime.dwHighDateTime=0x1ca040d, ftLastWriteTime.dwLowDateTime=0xddc2ab41, ftLastWriteTime.dwHighDateTime=0x1c9ea0a, nFileSizeHigh=0x0, nFileSizeLow=0xc038, dwReserved0=0x0, dwReserved1=0x0, cFileName="usertile39.bmp", cAlternateFileName="")) returned 1 [0062.203] FindNextFileW (in: hFindFile=0x381d80, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xae607689, ftCreationTime.dwHighDateTime=0x1ca040d, ftLastAccessTime.dwLowDateTime=0xae607689, ftLastAccessTime.dwHighDateTime=0x1ca040d, ftLastWriteTime.dwLowDateTime=0xddc50c9f, ftLastWriteTime.dwHighDateTime=0x1c9ea0a, nFileSizeHigh=0x0, nFileSizeLow=0xc038, dwReserved0=0x0, dwReserved1=0x0, cFileName="usertile40.bmp", cAlternateFileName="")) returned 1 [0062.203] FindNextFileW (in: hFindFile=0x381d80, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xae62d7e6, ftCreationTime.dwHighDateTime=0x1ca040d, ftLastAccessTime.dwLowDateTime=0xae62d7e6, ftLastAccessTime.dwHighDateTime=0x1ca040d, ftLastWriteTime.dwLowDateTime=0xddcc30b9, ftLastWriteTime.dwHighDateTime=0x1c9ea0a, nFileSizeHigh=0x0, nFileSizeLow=0xc038, dwReserved0=0x0, dwReserved1=0x0, cFileName="usertile41.bmp", cAlternateFileName="")) returned 1 [0062.203] FindNextFileW (in: hFindFile=0x381d80, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xae653943, ftCreationTime.dwHighDateTime=0x1ca040d, ftLastAccessTime.dwLowDateTime=0xae653943, ftLastAccessTime.dwHighDateTime=0x1ca040d, ftLastWriteTime.dwLowDateTime=0xddce9217, ftLastWriteTime.dwHighDateTime=0x1c9ea0a, nFileSizeHigh=0x0, nFileSizeLow=0xc038, dwReserved0=0x0, dwReserved1=0x0, cFileName="usertile42.bmp", cAlternateFileName="")) returned 1 [0062.203] FindNextFileW (in: hFindFile=0x381d80, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xae653943, ftCreationTime.dwHighDateTime=0x1ca040d, ftLastAccessTime.dwLowDateTime=0xae653943, ftLastAccessTime.dwHighDateTime=0x1ca040d, ftLastWriteTime.dwLowDateTime=0xddd0f375, ftLastWriteTime.dwHighDateTime=0x1c9ea0a, nFileSizeHigh=0x0, nFileSizeLow=0xc038, dwReserved0=0x0, dwReserved1=0x0, cFileName="usertile43.bmp", cAlternateFileName="")) returned 1 [0062.203] FindNextFileW (in: hFindFile=0x381d80, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xae679aa0, ftCreationTime.dwHighDateTime=0x1ca040d, ftLastAccessTime.dwLowDateTime=0xae679aa0, ftLastAccessTime.dwHighDateTime=0x1ca040d, ftLastWriteTime.dwLowDateTime=0xddd354d3, ftLastWriteTime.dwHighDateTime=0x1c9ea0a, nFileSizeHigh=0x0, nFileSizeLow=0xc038, dwReserved0=0x0, dwReserved1=0x0, cFileName="usertile44.bmp", cAlternateFileName="")) returned 1 [0062.203] FindNextFileW (in: hFindFile=0x381d80, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0062.203] FindClose (in: hFindFile=0x381d80 | out: hFindFile=0x381d80) returned 1 [0062.204] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e77c) returned 1 [0062.204] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e788) returned 1 [0062.204] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e7bc) returned 1 [0062.204] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\User Account Pictures\\Default Pictures", nBufferLength=0x105, lpBuffer=0x31e2c4, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\User Account Pictures\\Default Pictures", lpFilePart=0x0) returned 0x3f [0062.204] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\User Account Pictures\\Default Pictures\\", nBufferLength=0x105, lpBuffer=0x31e298, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\User Account Pictures\\Default Pictures\\", lpFilePart=0x0) returned 0x40 [0062.204] FindFirstFileW (in: lpFileName="C:\\ProgramData\\Microsoft\\User Account Pictures\\Default Pictures\\*", lpFindFileData=0x31e4e4 | out: lpFindFileData=0x31e4e4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x7fffaad0, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x80366a76, ftLastAccessTime.dwHighDateTime=0x1ca0444, ftLastWriteTime.dwLowDateTime=0x80366a76, ftLastWriteTime.dwHighDateTime=0x1ca0444, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x381d80 [0062.205] FindNextFileW (in: hFindFile=0x381d80, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x7fffaad0, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x80366a76, ftLastAccessTime.dwHighDateTime=0x1ca0444, ftLastWriteTime.dwLowDateTime=0x80366a76, ftLastWriteTime.dwHighDateTime=0x1ca0444, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0062.205] FindNextFileW (in: hFindFile=0x381d80, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xae24f474, ftCreationTime.dwHighDateTime=0x1ca040d, ftLastAccessTime.dwLowDateTime=0xae24f474, ftLastAccessTime.dwHighDateTime=0x1ca040d, ftLastWriteTime.dwLowDateTime=0xda0a8861, ftLastWriteTime.dwHighDateTime=0x1c9ea0a, nFileSizeHigh=0x0, nFileSizeLow=0xc038, dwReserved0=0x0, dwReserved1=0x0, cFileName="usertile10.bmp", cAlternateFileName="")) returned 1 [0062.205] FindNextFileW (in: hFindFile=0x381d80, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xae24f474, ftCreationTime.dwHighDateTime=0x1ca040d, ftLastAccessTime.dwLowDateTime=0xae24f474, ftLastAccessTime.dwHighDateTime=0x1ca040d, ftLastWriteTime.dwLowDateTime=0xdb5a2927, ftLastWriteTime.dwHighDateTime=0x1c9ea0a, nFileSizeHigh=0x0, nFileSizeLow=0xc038, dwReserved0=0x0, dwReserved1=0x0, cFileName="usertile11.bmp", cAlternateFileName="")) returned 1 [0062.205] FindNextFileW (in: hFindFile=0x381d80, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xae2755d1, ftCreationTime.dwHighDateTime=0x1ca040d, ftLastAccessTime.dwLowDateTime=0xae2755d1, ftLastAccessTime.dwHighDateTime=0x1ca040d, ftLastWriteTime.dwLowDateTime=0xdb6d3417, ftLastWriteTime.dwHighDateTime=0x1c9ea0a, nFileSizeHigh=0x0, nFileSizeLow=0xc038, dwReserved0=0x0, dwReserved1=0x0, cFileName="usertile12.bmp", cAlternateFileName="")) returned 1 [0062.205] FindNextFileW (in: hFindFile=0x381d80, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xae29b72e, ftCreationTime.dwHighDateTime=0x1ca040d, ftLastAccessTime.dwLowDateTime=0xae29b72e, ftLastAccessTime.dwHighDateTime=0x1ca040d, ftLastWriteTime.dwLowDateTime=0xdb76b98f, ftLastWriteTime.dwHighDateTime=0x1c9ea0a, nFileSizeHigh=0x0, nFileSizeLow=0xbeb8, dwReserved0=0x0, dwReserved1=0x0, cFileName="usertile13.bmp", cAlternateFileName="")) returned 1 [0062.206] FindNextFileW (in: hFindFile=0x381d80, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xae2e79e8, ftCreationTime.dwHighDateTime=0x1ca040d, ftLastAccessTime.dwLowDateTime=0xae2e79e8, ftLastAccessTime.dwHighDateTime=0x1ca040d, ftLastWriteTime.dwLowDateTime=0xdb82a065, ftLastWriteTime.dwHighDateTime=0x1c9ea0a, nFileSizeHigh=0x0, nFileSizeLow=0xc038, dwReserved0=0x0, dwReserved1=0x0, cFileName="usertile14.bmp", cAlternateFileName="")) returned 1 [0062.206] FindNextFileW (in: hFindFile=0x381d80, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xae2e79e8, ftCreationTime.dwHighDateTime=0x1ca040d, ftLastAccessTime.dwLowDateTime=0xae2e79e8, ftLastAccessTime.dwHighDateTime=0x1ca040d, ftLastWriteTime.dwLowDateTime=0xdbb95fd7, ftLastWriteTime.dwHighDateTime=0x1c9ea0a, nFileSizeHigh=0x0, nFileSizeLow=0xc038, dwReserved0=0x0, dwReserved1=0x0, cFileName="usertile15.bmp", cAlternateFileName="")) returned 1 [0062.206] FindNextFileW (in: hFindFile=0x381d80, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xae30db45, ftCreationTime.dwHighDateTime=0x1ca040d, ftLastAccessTime.dwLowDateTime=0xae30db45, ftLastAccessTime.dwHighDateTime=0x1ca040d, ftLastWriteTime.dwLowDateTime=0xdca9c9ed, ftLastWriteTime.dwHighDateTime=0x1c9ea0a, nFileSizeHigh=0x0, nFileSizeLow=0xc038, dwReserved0=0x0, dwReserved1=0x0, cFileName="usertile16.bmp", cAlternateFileName="")) returned 1 [0062.206] FindNextFileW (in: hFindFile=0x381d80, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xae333ca2, ftCreationTime.dwHighDateTime=0x1ca040d, ftLastAccessTime.dwLowDateTime=0xae333ca2, ftLastAccessTime.dwHighDateTime=0x1ca040d, ftLastWriteTime.dwLowDateTime=0xdcc3f8f7, ftLastWriteTime.dwHighDateTime=0x1c9ea0a, nFileSizeHigh=0x0, nFileSizeLow=0xc038, dwReserved0=0x0, dwReserved1=0x0, cFileName="usertile17.bmp", cAlternateFileName="")) returned 1 [0062.206] FindNextFileW (in: hFindFile=0x381d80, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xae333ca2, ftCreationTime.dwHighDateTime=0x1ca040d, ftLastAccessTime.dwLowDateTime=0xae333ca2, ftLastAccessTime.dwHighDateTime=0x1ca040d, ftLastWriteTime.dwLowDateTime=0xdcc65a55, ftLastWriteTime.dwHighDateTime=0x1c9ea0a, nFileSizeHigh=0x0, nFileSizeLow=0xc038, dwReserved0=0x0, dwReserved1=0x0, cFileName="usertile18.bmp", cAlternateFileName="")) returned 1 [0062.206] FindNextFileW (in: hFindFile=0x381d80, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xae359dff, ftCreationTime.dwHighDateTime=0x1ca040d, ftLastAccessTime.dwLowDateTime=0xae359dff, ftLastAccessTime.dwHighDateTime=0x1ca040d, ftLastWriteTime.dwLowDateTime=0xdcc8bbb3, ftLastWriteTime.dwHighDateTime=0x1c9ea0a, nFileSizeHigh=0x0, nFileSizeLow=0xc038, dwReserved0=0x0, dwReserved1=0x0, cFileName="usertile19.bmp", cAlternateFileName="")) returned 1 [0062.206] FindNextFileW (in: hFindFile=0x381d80, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xae37ff5c, ftCreationTime.dwHighDateTime=0x1ca040d, ftLastAccessTime.dwLowDateTime=0xae37ff5c, ftLastAccessTime.dwHighDateTime=0x1ca040d, ftLastWriteTime.dwLowDateTime=0xdccb1d11, ftLastWriteTime.dwHighDateTime=0x1c9ea0a, nFileSizeHigh=0x0, nFileSizeLow=0xc038, dwReserved0=0x0, dwReserved1=0x0, cFileName="usertile20.bmp", cAlternateFileName="")) returned 1 [0062.207] FindNextFileW (in: hFindFile=0x381d80, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xae3a60b9, ftCreationTime.dwHighDateTime=0x1ca040d, ftLastAccessTime.dwLowDateTime=0xae3a60b9, ftLastAccessTime.dwHighDateTime=0x1ca040d, ftLastWriteTime.dwLowDateTime=0xdd069f3f, ftLastWriteTime.dwHighDateTime=0x1c9ea0a, nFileSizeHigh=0x0, nFileSizeLow=0xc038, dwReserved0=0x0, dwReserved1=0x0, cFileName="usertile21.bmp", cAlternateFileName="")) returned 1 [0062.207] FindNextFileW (in: hFindFile=0x381d80, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xae3a60b9, ftCreationTime.dwHighDateTime=0x1ca040d, ftLastAccessTime.dwLowDateTime=0xae3a60b9, ftLastAccessTime.dwHighDateTime=0x1ca040d, ftLastWriteTime.dwLowDateTime=0xdd09009d, ftLastWriteTime.dwHighDateTime=0x1c9ea0a, nFileSizeHigh=0x0, nFileSizeLow=0xc038, dwReserved0=0x0, dwReserved1=0x0, cFileName="usertile22.bmp", cAlternateFileName="")) returned 1 [0062.207] FindNextFileW (in: hFindFile=0x381d80, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xae3cc216, ftCreationTime.dwHighDateTime=0x1ca040d, ftLastAccessTime.dwLowDateTime=0xae3cc216, ftLastAccessTime.dwHighDateTime=0x1ca040d, ftLastWriteTime.dwLowDateTime=0xdd0b61fb, ftLastWriteTime.dwHighDateTime=0x1c9ea0a, nFileSizeHigh=0x0, nFileSizeLow=0xc038, dwReserved0=0x0, dwReserved1=0x0, cFileName="usertile23.bmp", cAlternateFileName="")) returned 1 [0062.207] FindNextFileW (in: hFindFile=0x381d80, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xae3f2373, ftCreationTime.dwHighDateTime=0x1ca040d, ftLastAccessTime.dwLowDateTime=0xae3f2373, ftLastAccessTime.dwHighDateTime=0x1ca040d, ftLastWriteTime.dwLowDateTime=0xdd232fa7, ftLastWriteTime.dwHighDateTime=0x1c9ea0a, nFileSizeHigh=0x0, nFileSizeLow=0xc038, dwReserved0=0x0, dwReserved1=0x0, cFileName="usertile24.bmp", cAlternateFileName="")) returned 1 [0062.207] FindNextFileW (in: hFindFile=0x381d80, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xae3f2373, ftCreationTime.dwHighDateTime=0x1ca040d, ftLastAccessTime.dwLowDateTime=0xae3f2373, ftLastAccessTime.dwHighDateTime=0x1ca040d, ftLastWriteTime.dwLowDateTime=0xdd259105, ftLastWriteTime.dwHighDateTime=0x1c9ea0a, nFileSizeHigh=0x0, nFileSizeLow=0xc038, dwReserved0=0x0, dwReserved1=0x0, cFileName="usertile25.bmp", cAlternateFileName="")) returned 1 [0062.207] FindNextFileW (in: hFindFile=0x381d80, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xae3f2373, ftCreationTime.dwHighDateTime=0x1ca040d, ftLastAccessTime.dwLowDateTime=0xae3f2373, ftLastAccessTime.dwHighDateTime=0x1ca040d, ftLastWriteTime.dwLowDateTime=0xdd27f263, ftLastWriteTime.dwHighDateTime=0x1c9ea0a, nFileSizeHigh=0x0, nFileSizeLow=0xc038, dwReserved0=0x0, dwReserved1=0x0, cFileName="usertile26.bmp", cAlternateFileName="")) returned 1 [0062.207] FindNextFileW (in: hFindFile=0x381d80, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xae4184d0, ftCreationTime.dwHighDateTime=0x1ca040d, ftLastAccessTime.dwLowDateTime=0xae4184d0, ftLastAccessTime.dwHighDateTime=0x1ca040d, ftLastWriteTime.dwLowDateTime=0xdd2a53c1, ftLastWriteTime.dwHighDateTime=0x1c9ea0a, nFileSizeHigh=0x0, nFileSizeLow=0xc038, dwReserved0=0x0, dwReserved1=0x0, cFileName="usertile27.bmp", cAlternateFileName="")) returned 1 [0062.208] FindNextFileW (in: hFindFile=0x381d80, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xae43e62d, ftCreationTime.dwHighDateTime=0x1ca040d, ftLastAccessTime.dwLowDateTime=0xae43e62d, ftLastAccessTime.dwHighDateTime=0x1ca040d, ftLastWriteTime.dwLowDateTime=0xdd3177db, ftLastWriteTime.dwHighDateTime=0x1c9ea0a, nFileSizeHigh=0x0, nFileSizeLow=0xc038, dwReserved0=0x0, dwReserved1=0x0, cFileName="usertile28.bmp", cAlternateFileName="")) returned 1 [0062.208] FindNextFileW (in: hFindFile=0x381d80, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xae43e62d, ftCreationTime.dwHighDateTime=0x1ca040d, ftLastAccessTime.dwLowDateTime=0xae43e62d, ftLastAccessTime.dwHighDateTime=0x1ca040d, ftLastWriteTime.dwLowDateTime=0xdd33d939, ftLastWriteTime.dwHighDateTime=0x1c9ea0a, nFileSizeHigh=0x0, nFileSizeLow=0xc038, dwReserved0=0x0, dwReserved1=0x0, cFileName="usertile29.bmp", cAlternateFileName="")) returned 1 [0062.208] FindNextFileW (in: hFindFile=0x381d80, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xae46478a, ftCreationTime.dwHighDateTime=0x1ca040d, ftLastAccessTime.dwLowDateTime=0xae46478a, ftLastAccessTime.dwHighDateTime=0x1ca040d, ftLastWriteTime.dwLowDateTime=0xdd3fc00f, ftLastWriteTime.dwHighDateTime=0x1c9ea0a, nFileSizeHigh=0x0, nFileSizeLow=0xc038, dwReserved0=0x0, dwReserved1=0x0, cFileName="usertile30.bmp", cAlternateFileName="")) returned 1 [0062.208] FindNextFileW (in: hFindFile=0x381d80, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xae48a8e7, ftCreationTime.dwHighDateTime=0x1ca040d, ftLastAccessTime.dwLowDateTime=0xae48a8e7, ftLastAccessTime.dwHighDateTime=0x1ca040d, ftLastWriteTime.dwLowDateTime=0xdd3fc00f, ftLastWriteTime.dwHighDateTime=0x1c9ea0a, nFileSizeHigh=0x0, nFileSizeLow=0xc038, dwReserved0=0x0, dwReserved1=0x0, cFileName="usertile31.bmp", cAlternateFileName="")) returned 1 [0062.208] FindNextFileW (in: hFindFile=0x381d80, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xae48a8e7, ftCreationTime.dwHighDateTime=0x1ca040d, ftLastAccessTime.dwLowDateTime=0xae48a8e7, ftLastAccessTime.dwHighDateTime=0x1ca040d, ftLastWriteTime.dwLowDateTime=0xdd42216d, ftLastWriteTime.dwHighDateTime=0x1c9ea0a, nFileSizeHigh=0x0, nFileSizeLow=0xc038, dwReserved0=0x0, dwReserved1=0x0, cFileName="usertile32.bmp", cAlternateFileName="")) returned 1 [0062.208] FindNextFileW (in: hFindFile=0x381d80, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xae4b0a44, ftCreationTime.dwHighDateTime=0x1ca040d, ftLastAccessTime.dwLowDateTime=0xae4b0a44, ftLastAccessTime.dwHighDateTime=0x1ca040d, ftLastWriteTime.dwLowDateTime=0xdd4482cb, ftLastWriteTime.dwHighDateTime=0x1c9ea0a, nFileSizeHigh=0x0, nFileSizeLow=0xc038, dwReserved0=0x0, dwReserved1=0x0, cFileName="usertile33.bmp", cAlternateFileName="")) returned 1 [0062.208] FindNextFileW (in: hFindFile=0x381d80, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xae4fccfe, ftCreationTime.dwHighDateTime=0x1ca040d, ftLastAccessTime.dwLowDateTime=0xae4fccfe, ftLastAccessTime.dwHighDateTime=0x1ca040d, ftLastWriteTime.dwLowDateTime=0xdd9c9561, ftLastWriteTime.dwHighDateTime=0x1c9ea0a, nFileSizeHigh=0x0, nFileSizeLow=0xc038, dwReserved0=0x0, dwReserved1=0x0, cFileName="usertile34.bmp", cAlternateFileName="")) returned 1 [0062.209] FindNextFileW (in: hFindFile=0x381d80, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xae4fccfe, ftCreationTime.dwHighDateTime=0x1ca040d, ftLastAccessTime.dwLowDateTime=0xae4fccfe, ftLastAccessTime.dwHighDateTime=0x1ca040d, ftLastWriteTime.dwLowDateTime=0xdd9ef6bf, ftLastWriteTime.dwHighDateTime=0x1c9ea0a, nFileSizeHigh=0x0, nFileSizeLow=0xc038, dwReserved0=0x0, dwReserved1=0x0, cFileName="usertile35.bmp", cAlternateFileName="")) returned 1 [0062.209] FindNextFileW (in: hFindFile=0x381d80, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xae548fb8, ftCreationTime.dwHighDateTime=0x1ca040d, ftLastAccessTime.dwLowDateTime=0xae548fb8, ftLastAccessTime.dwHighDateTime=0x1ca040d, ftLastWriteTime.dwLowDateTime=0xdd9ef6bf, ftLastWriteTime.dwHighDateTime=0x1c9ea0a, nFileSizeHigh=0x0, nFileSizeLow=0xc038, dwReserved0=0x0, dwReserved1=0x0, cFileName="usertile36.bmp", cAlternateFileName="")) returned 1 [0062.209] FindNextFileW (in: hFindFile=0x381d80, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xae595272, ftCreationTime.dwHighDateTime=0x1ca040d, ftLastAccessTime.dwLowDateTime=0xae595272, ftLastAccessTime.dwHighDateTime=0x1ca040d, ftLastWriteTime.dwLowDateTime=0xddb6c46b, ftLastWriteTime.dwHighDateTime=0x1c9ea0a, nFileSizeHigh=0x0, nFileSizeLow=0xc038, dwReserved0=0x0, dwReserved1=0x0, cFileName="usertile37.bmp", cAlternateFileName="")) returned 1 [0062.209] FindNextFileW (in: hFindFile=0x381d80, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xae5bb3cf, ftCreationTime.dwHighDateTime=0x1ca040d, ftLastAccessTime.dwLowDateTime=0xae5bb3cf, ftLastAccessTime.dwHighDateTime=0x1ca040d, ftLastWriteTime.dwLowDateTime=0xddb6c46b, ftLastWriteTime.dwHighDateTime=0x1c9ea0a, nFileSizeHigh=0x0, nFileSizeLow=0xc038, dwReserved0=0x0, dwReserved1=0x0, cFileName="usertile38.bmp", cAlternateFileName="")) returned 1 [0062.209] FindNextFileW (in: hFindFile=0x381d80, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xae5e152c, ftCreationTime.dwHighDateTime=0x1ca040d, ftLastAccessTime.dwLowDateTime=0xae5e152c, ftLastAccessTime.dwHighDateTime=0x1ca040d, ftLastWriteTime.dwLowDateTime=0xddc2ab41, ftLastWriteTime.dwHighDateTime=0x1c9ea0a, nFileSizeHigh=0x0, nFileSizeLow=0xc038, dwReserved0=0x0, dwReserved1=0x0, cFileName="usertile39.bmp", cAlternateFileName="")) returned 1 [0062.209] FindNextFileW (in: hFindFile=0x381d80, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xae607689, ftCreationTime.dwHighDateTime=0x1ca040d, ftLastAccessTime.dwLowDateTime=0xae607689, ftLastAccessTime.dwHighDateTime=0x1ca040d, ftLastWriteTime.dwLowDateTime=0xddc50c9f, ftLastWriteTime.dwHighDateTime=0x1c9ea0a, nFileSizeHigh=0x0, nFileSizeLow=0xc038, dwReserved0=0x0, dwReserved1=0x0, cFileName="usertile40.bmp", cAlternateFileName="")) returned 1 [0062.209] FindNextFileW (in: hFindFile=0x381d80, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xae62d7e6, ftCreationTime.dwHighDateTime=0x1ca040d, ftLastAccessTime.dwLowDateTime=0xae62d7e6, ftLastAccessTime.dwHighDateTime=0x1ca040d, ftLastWriteTime.dwLowDateTime=0xddcc30b9, ftLastWriteTime.dwHighDateTime=0x1c9ea0a, nFileSizeHigh=0x0, nFileSizeLow=0xc038, dwReserved0=0x0, dwReserved1=0x0, cFileName="usertile41.bmp", cAlternateFileName="")) returned 1 [0062.210] FindNextFileW (in: hFindFile=0x381d80, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xae653943, ftCreationTime.dwHighDateTime=0x1ca040d, ftLastAccessTime.dwLowDateTime=0xae653943, ftLastAccessTime.dwHighDateTime=0x1ca040d, ftLastWriteTime.dwLowDateTime=0xddce9217, ftLastWriteTime.dwHighDateTime=0x1c9ea0a, nFileSizeHigh=0x0, nFileSizeLow=0xc038, dwReserved0=0x0, dwReserved1=0x0, cFileName="usertile42.bmp", cAlternateFileName="")) returned 1 [0062.210] FindNextFileW (in: hFindFile=0x381d80, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xae653943, ftCreationTime.dwHighDateTime=0x1ca040d, ftLastAccessTime.dwLowDateTime=0xae653943, ftLastAccessTime.dwHighDateTime=0x1ca040d, ftLastWriteTime.dwLowDateTime=0xddd0f375, ftLastWriteTime.dwHighDateTime=0x1c9ea0a, nFileSizeHigh=0x0, nFileSizeLow=0xc038, dwReserved0=0x0, dwReserved1=0x0, cFileName="usertile43.bmp", cAlternateFileName="")) returned 1 [0062.210] FindNextFileW (in: hFindFile=0x381d80, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xae679aa0, ftCreationTime.dwHighDateTime=0x1ca040d, ftLastAccessTime.dwLowDateTime=0xae679aa0, ftLastAccessTime.dwHighDateTime=0x1ca040d, ftLastWriteTime.dwLowDateTime=0xddd354d3, ftLastWriteTime.dwHighDateTime=0x1c9ea0a, nFileSizeHigh=0x0, nFileSizeLow=0xc038, dwReserved0=0x0, dwReserved1=0x0, cFileName="usertile44.bmp", cAlternateFileName="")) returned 1 [0062.210] FindNextFileW (in: hFindFile=0x381d80, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xae679aa0, ftCreationTime.dwHighDateTime=0x1ca040d, ftLastAccessTime.dwLowDateTime=0xae679aa0, ftLastAccessTime.dwHighDateTime=0x1ca040d, ftLastWriteTime.dwLowDateTime=0xddd354d3, ftLastWriteTime.dwHighDateTime=0x1c9ea0a, nFileSizeHigh=0x0, nFileSizeLow=0xc038, dwReserved0=0x0, dwReserved1=0x0, cFileName="usertile44.bmp", cAlternateFileName="")) returned 0 [0062.210] FindClose (in: hFindFile=0x381d80 | out: hFindFile=0x381d80) returned 1 [0062.211] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e77c) returned 1 [0062.211] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e788) returned 1 [0062.211] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\User Account Pictures\\Default Pictures\\usertile10.bmp", nBufferLength=0x105, lpBuffer=0x31e194, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\User Account Pictures\\Default Pictures\\usertile10.bmp", lpFilePart=0x0) returned 0x4e [0062.211] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e688) returned 1 [0062.211] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft\\User Account Pictures\\Default Pictures\\usertile10.bmp" (normalized: "c:\\programdata\\microsoft\\user account pictures\\default pictures\\usertile10.bmp"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x178 [0062.212] GetFileType (hFile=0x178) returned 0x1 [0062.212] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e684) returned 1 [0062.213] GetFileType (hFile=0x178) returned 0x1 [0062.213] GetFileSize (in: hFile=0x178, lpFileSizeHigh=0x31e790 | out: lpFileSizeHigh=0x31e790*=0x0) returned 0xc038 [0062.213] ReadFile (in: hFile=0x178, lpBuffer=0x268f5d0, nNumberOfBytesToRead=0xc038, lpNumberOfBytesRead=0x31e73c, lpOverlapped=0x0 | out: lpBuffer=0x268f5d0*, lpNumberOfBytesRead=0x31e73c*=0xc038, lpOverlapped=0x0) returned 1 [0062.215] CloseHandle (hObject=0x178) returned 1 [0062.254] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\User Account Pictures\\Default Pictures\\usertile10.bmp", nBufferLength=0x105, lpBuffer=0x31e180, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\User Account Pictures\\Default Pictures\\usertile10.bmp", lpFilePart=0x0) returned 0x4e [0062.254] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e674) returned 1 [0062.254] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft\\User Account Pictures\\Default Pictures\\usertile10.bmp" (normalized: "c:\\programdata\\microsoft\\user account pictures\\default pictures\\usertile10.bmp"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0xffffffff [0062.256] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31d4b0) returned 1 [0062.256] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e834) returned 1 [0062.256] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\Vault", nBufferLength=0x105, lpBuffer=0x31e33c, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\Vault", lpFilePart=0x0) returned 0x1e [0062.256] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\Vault\\", nBufferLength=0x105, lpBuffer=0x31e310, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\Vault\\", lpFilePart=0x0) returned 0x1f [0062.256] FindFirstFileW (in: lpFileName="C:\\ProgramData\\Microsoft\\Vault\\*", lpFindFileData=0x31e55c | out: lpFindFileData=0x31e55c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd9b5b52, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd9b5b52, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xc602eec6, ftLastWriteTime.dwHighDateTime=0x1ca042b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x381fc0 [0062.256] FindNextFileW (in: hFindFile=0x381fc0, lpFindFileData=0x31e56c | out: lpFindFileData=0x31e56c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd9b5b52, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd9b5b52, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xc602eec6, ftLastWriteTime.dwHighDateTime=0x1ca042b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0062.256] FindNextFileW (in: hFindFile=0x381fc0, lpFindFileData=0x31e56c | out: lpFindFileData=0x31e56c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd9b5b52, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd9b5b52, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xc602eec6, ftLastWriteTime.dwHighDateTime=0x1ca042b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 0 [0062.256] FindClose (in: hFindFile=0x381fc0 | out: hFindFile=0x381fc0) returned 1 [0062.257] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e7f4) returned 1 [0062.257] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e800) returned 1 [0062.257] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e834) returned 1 [0062.257] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\Vault", nBufferLength=0x105, lpBuffer=0x31e33c, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\Vault", lpFilePart=0x0) returned 0x1e [0062.257] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\Vault\\", nBufferLength=0x105, lpBuffer=0x31e310, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\Vault\\", lpFilePart=0x0) returned 0x1f [0062.257] FindFirstFileW (in: lpFileName="C:\\ProgramData\\Microsoft\\Vault\\*", lpFindFileData=0x31e55c | out: lpFindFileData=0x31e55c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd9b5b52, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd9b5b52, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xc602eec6, ftLastWriteTime.dwHighDateTime=0x1ca042b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x381fc0 [0062.257] FindNextFileW (in: hFindFile=0x381fc0, lpFindFileData=0x31e56c | out: lpFindFileData=0x31e56c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd9b5b52, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd9b5b52, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xc602eec6, ftLastWriteTime.dwHighDateTime=0x1ca042b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0062.257] FindNextFileW (in: hFindFile=0x381fc0, lpFindFileData=0x31e56c | out: lpFindFileData=0x31e56c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd9b5b52, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd9b5b52, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xc602eec6, ftLastWriteTime.dwHighDateTime=0x1ca042b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 0 [0062.257] FindClose (in: hFindFile=0x381fc0 | out: hFindFile=0x381fc0) returned 1 [0062.257] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e7f4) returned 1 [0062.257] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e800) returned 1 [0062.257] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e834) returned 1 [0062.257] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\VISIO", nBufferLength=0x105, lpBuffer=0x31e33c, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\VISIO", lpFilePart=0x0) returned 0x1e [0062.258] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\VISIO\\", nBufferLength=0x105, lpBuffer=0x31e310, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\VISIO\\", lpFilePart=0x0) returned 0x1f [0062.258] FindFirstFileW (in: lpFileName="C:\\ProgramData\\Microsoft\\VISIO\\*", lpFindFileData=0x31e55c | out: lpFindFileData=0x31e55c*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x80ac5760, ftCreationTime.dwHighDateTime=0x1d305eb, ftLastAccessTime.dwLowDateTime=0x80ac5760, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0x80ac5760, ftLastWriteTime.dwHighDateTime=0x1d305eb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x381fc0 [0062.259] FindNextFileW (in: hFindFile=0x381fc0, lpFindFileData=0x31e56c | out: lpFindFileData=0x31e56c*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x80ac5760, ftCreationTime.dwHighDateTime=0x1d305eb, ftLastAccessTime.dwLowDateTime=0x80ac5760, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0x80ac5760, ftLastWriteTime.dwHighDateTime=0x1d305eb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0062.259] FindNextFileW (in: hFindFile=0x381fc0, lpFindFileData=0x31e56c | out: lpFindFileData=0x31e56c*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x80ac5760, ftCreationTime.dwHighDateTime=0x1d305eb, ftLastAccessTime.dwLowDateTime=0x80ac5760, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0x80ac5760, ftLastWriteTime.dwHighDateTime=0x1d305eb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 0 [0062.259] FindClose (in: hFindFile=0x381fc0 | out: hFindFile=0x381fc0) returned 1 [0062.259] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e7f4) returned 1 [0062.259] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e800) returned 1 [0062.259] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e834) returned 1 [0062.259] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\VISIO", nBufferLength=0x105, lpBuffer=0x31e33c, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\VISIO", lpFilePart=0x0) returned 0x1e [0062.259] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\VISIO\\", nBufferLength=0x105, lpBuffer=0x31e310, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\VISIO\\", lpFilePart=0x0) returned 0x1f [0062.259] FindFirstFileW (in: lpFileName="C:\\ProgramData\\Microsoft\\VISIO\\*", lpFindFileData=0x31e55c | out: lpFindFileData=0x31e55c*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x80ac5760, ftCreationTime.dwHighDateTime=0x1d305eb, ftLastAccessTime.dwLowDateTime=0x80ac5760, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0x80ac5760, ftLastWriteTime.dwHighDateTime=0x1d305eb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x381fc0 [0062.259] FindNextFileW (in: hFindFile=0x381fc0, lpFindFileData=0x31e56c | out: lpFindFileData=0x31e56c*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x80ac5760, ftCreationTime.dwHighDateTime=0x1d305eb, ftLastAccessTime.dwLowDateTime=0x80ac5760, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0x80ac5760, ftLastWriteTime.dwHighDateTime=0x1d305eb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0062.267] FindNextFileW (in: hFindFile=0x381fc0, lpFindFileData=0x31e56c | out: lpFindFileData=0x31e56c*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x80ac5760, ftCreationTime.dwHighDateTime=0x1d305eb, ftLastAccessTime.dwLowDateTime=0x80ac5760, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0x80ac5760, ftLastWriteTime.dwHighDateTime=0x1d305eb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 0 [0062.267] FindClose (in: hFindFile=0x381fc0 | out: hFindFile=0x381fc0) returned 1 [0062.267] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e7f4) returned 1 [0062.267] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e800) returned 1 [0062.267] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e834) returned 1 [0062.267] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\Windows", nBufferLength=0x105, lpBuffer=0x31e33c, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\Windows", lpFilePart=0x0) returned 0x20 [0062.267] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\Windows\\", nBufferLength=0x105, lpBuffer=0x31e310, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\Windows\\", lpFilePart=0x0) returned 0x21 [0062.267] FindFirstFileW (in: lpFileName="C:\\ProgramData\\Microsoft\\Windows\\*", lpFindFileData=0x31e55c | out: lpFindFileData=0x31e55c*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xfd9b5b52, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x60ae73a0, ftLastAccessTime.dwHighDateTime=0x1d2de2a, ftLastWriteTime.dwLowDateTime=0x60ae73a0, ftLastWriteTime.dwHighDateTime=0x1d2de2a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x381fc0 [0062.268] FindNextFileW (in: hFindFile=0x381fc0, lpFindFileData=0x31e56c | out: lpFindFileData=0x31e56c*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xfd9b5b52, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x60ae73a0, ftLastAccessTime.dwHighDateTime=0x1d2de2a, ftLastWriteTime.dwLowDateTime=0x60ae73a0, ftLastWriteTime.dwHighDateTime=0x1d2de2a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0062.268] FindNextFileW (in: hFindFile=0x381fc0, lpFindFileData=0x31e56c | out: lpFindFileData=0x31e56c*(dwFileAttributes=0x14, ftCreationTime.dwLowDateTime=0xfd9b5b52, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd9b5b52, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xd5be7172, ftLastWriteTime.dwHighDateTime=0x1ca042b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="AIT", cAlternateFileName="")) returned 1 [0062.268] FindNextFileW (in: hFindFile=0x381fc0, lpFindFileData=0x31e56c | out: lpFindFileData=0x31e56c*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x283ea490, ftCreationTime.dwHighDateTime=0x1ca043f, ftLastAccessTime.dwLowDateTime=0x9b86da60, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0x9b86da60, ftLastWriteTime.dwHighDateTime=0x1d305eb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Caches", cAlternateFileName="")) returned 1 [0062.268] FindNextFileW (in: hFindFile=0x381fc0, lpFindFileData=0x31e56c | out: lpFindFileData=0x31e56c*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xfd9b5b52, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd9b5b52, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xfd9b5b52, ftLastWriteTime.dwHighDateTime=0x1ca0431, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="DeviceMetadataStore", cAlternateFileName="DEVICE~1")) returned 1 [0062.268] FindNextFileW (in: hFindFile=0x381fc0, lpFindFileData=0x31e56c | out: lpFindFileData=0x31e56c*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0x80020c30, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x80020c30, ftLastAccessTime.dwHighDateTime=0x1ca0444, ftLastWriteTime.dwLowDateTime=0x80020c30, ftLastWriteTime.dwHighDateTime=0x1ca0444, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="DRM", cAlternateFileName="")) returned 1 [0062.268] FindNextFileW (in: hFindFile=0x381fc0, lpFindFileData=0x31e56c | out: lpFindFileData=0x31e56c*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xfd9dbcac, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd9dbcac, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xaeea3462, ftLastWriteTime.dwHighDateTime=0x1ca042b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="GameExplorer", cAlternateFileName="GAMEEX~1")) returned 1 [0062.268] FindNextFileW (in: hFindFile=0x381fc0, lpFindFileData=0x31e56c | out: lpFindFileData=0x31e56c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd9dbcac, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x80e53620, ftLastAccessTime.dwHighDateTime=0x1d305f5, ftLastWriteTime.dwLowDateTime=0x80e53620, ftLastWriteTime.dwHighDateTime=0x1d305f5, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Power Efficiency Diagnostics", cAlternateFileName="POWERE~1")) returned 1 [0062.269] FindNextFileW (in: hFindFile=0x381fc0, lpFindFileData=0x31e56c | out: lpFindFileData=0x31e56c*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x7fffaad0, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x8038cbd7, ftLastAccessTime.dwHighDateTime=0x1ca0444, ftLastWriteTime.dwLowDateTime=0x8038cbd7, ftLastWriteTime.dwHighDateTime=0x1ca0444, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Ringtones", cAlternateFileName="RINGTO~1")) returned 1 [0062.269] FindNextFileW (in: hFindFile=0x381fc0, lpFindFileData=0x31e56c | out: lpFindFileData=0x31e56c*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x60ae73a0, ftCreationTime.dwHighDateTime=0x1d2de2a, ftLastAccessTime.dwLowDateTime=0x60ae73a0, ftLastAccessTime.dwHighDateTime=0x1d2de2a, ftLastWriteTime.dwLowDateTime=0x60ae73a0, ftLastWriteTime.dwHighDateTime=0x1d2de2a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Sqm", cAlternateFileName="")) returned 1 [0062.269] FindNextFileW (in: hFindFile=0x381fc0, lpFindFileData=0x31e56c | out: lpFindFileData=0x31e56c*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0xfd9dbcac, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x1cc35f15, ftLastAccessTime.dwHighDateTime=0x1ca0440, ftLastWriteTime.dwLowDateTime=0x1cc35f15, ftLastWriteTime.dwHighDateTime=0x1ca0440, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Start Menu", cAlternateFileName="STARTM~1")) returned 1 [0062.269] FindNextFileW (in: hFindFile=0x381fc0, lpFindFileData=0x31e56c | out: lpFindFileData=0x31e56c*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xfd9dbcac, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd9dbcac, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xaeea3462, ftLastWriteTime.dwHighDateTime=0x1ca042b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Templates", cAlternateFileName="TEMPLA~1")) returned 1 [0062.269] FindNextFileW (in: hFindFile=0x381fc0, lpFindFileData=0x31e56c | out: lpFindFileData=0x31e56c*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xfd9dbcac, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfda01e06, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xfda01e06, ftLastWriteTime.dwHighDateTime=0x1ca0431, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="WER", cAlternateFileName="")) returned 1 [0062.269] FindNextFileW (in: hFindFile=0x381fc0, lpFindFileData=0x31e56c | out: lpFindFileData=0x31e56c*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xfd9dbcac, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfda01e06, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xfda01e06, ftLastWriteTime.dwHighDateTime=0x1ca0431, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="WER", cAlternateFileName="")) returned 0 [0062.270] FindClose (in: hFindFile=0x381fc0 | out: hFindFile=0x381fc0) returned 1 [0062.270] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e7f4) returned 1 [0062.270] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e800) returned 1 [0062.270] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e834) returned 1 [0062.270] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\Windows", nBufferLength=0x105, lpBuffer=0x31e33c, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\Windows", lpFilePart=0x0) returned 0x20 [0062.270] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\Windows\\", nBufferLength=0x105, lpBuffer=0x31e310, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\Windows\\", lpFilePart=0x0) returned 0x21 [0062.270] FindFirstFileW (in: lpFileName="C:\\ProgramData\\Microsoft\\Windows\\*", lpFindFileData=0x31e55c | out: lpFindFileData=0x31e55c*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xfd9b5b52, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x60ae73a0, ftLastAccessTime.dwHighDateTime=0x1d2de2a, ftLastWriteTime.dwLowDateTime=0x60ae73a0, ftLastWriteTime.dwHighDateTime=0x1d2de2a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x381fc0 [0062.270] FindNextFileW (in: hFindFile=0x381fc0, lpFindFileData=0x31e56c | out: lpFindFileData=0x31e56c*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xfd9b5b52, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x60ae73a0, ftLastAccessTime.dwHighDateTime=0x1d2de2a, ftLastWriteTime.dwLowDateTime=0x60ae73a0, ftLastWriteTime.dwHighDateTime=0x1d2de2a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0062.270] FindNextFileW (in: hFindFile=0x381fc0, lpFindFileData=0x31e56c | out: lpFindFileData=0x31e56c*(dwFileAttributes=0x14, ftCreationTime.dwLowDateTime=0xfd9b5b52, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd9b5b52, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xd5be7172, ftLastWriteTime.dwHighDateTime=0x1ca042b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="AIT", cAlternateFileName="")) returned 1 [0062.270] FindNextFileW (in: hFindFile=0x381fc0, lpFindFileData=0x31e56c | out: lpFindFileData=0x31e56c*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x283ea490, ftCreationTime.dwHighDateTime=0x1ca043f, ftLastAccessTime.dwLowDateTime=0x9b86da60, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0x9b86da60, ftLastWriteTime.dwHighDateTime=0x1d305eb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Caches", cAlternateFileName="")) returned 1 [0062.271] FindNextFileW (in: hFindFile=0x381fc0, lpFindFileData=0x31e56c | out: lpFindFileData=0x31e56c*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xfd9b5b52, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd9b5b52, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xfd9b5b52, ftLastWriteTime.dwHighDateTime=0x1ca0431, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="DeviceMetadataStore", cAlternateFileName="DEVICE~1")) returned 1 [0062.271] FindNextFileW (in: hFindFile=0x381fc0, lpFindFileData=0x31e56c | out: lpFindFileData=0x31e56c*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0x80020c30, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x80020c30, ftLastAccessTime.dwHighDateTime=0x1ca0444, ftLastWriteTime.dwLowDateTime=0x80020c30, ftLastWriteTime.dwHighDateTime=0x1ca0444, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="DRM", cAlternateFileName="")) returned 1 [0062.271] FindNextFileW (in: hFindFile=0x381fc0, lpFindFileData=0x31e56c | out: lpFindFileData=0x31e56c*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xfd9dbcac, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd9dbcac, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xaeea3462, ftLastWriteTime.dwHighDateTime=0x1ca042b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="GameExplorer", cAlternateFileName="GAMEEX~1")) returned 1 [0062.271] FindNextFileW (in: hFindFile=0x381fc0, lpFindFileData=0x31e56c | out: lpFindFileData=0x31e56c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd9dbcac, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x80e53620, ftLastAccessTime.dwHighDateTime=0x1d305f5, ftLastWriteTime.dwLowDateTime=0x80e53620, ftLastWriteTime.dwHighDateTime=0x1d305f5, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Power Efficiency Diagnostics", cAlternateFileName="POWERE~1")) returned 1 [0062.271] FindNextFileW (in: hFindFile=0x381fc0, lpFindFileData=0x31e56c | out: lpFindFileData=0x31e56c*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x7fffaad0, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x8038cbd7, ftLastAccessTime.dwHighDateTime=0x1ca0444, ftLastWriteTime.dwLowDateTime=0x8038cbd7, ftLastWriteTime.dwHighDateTime=0x1ca0444, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Ringtones", cAlternateFileName="RINGTO~1")) returned 1 [0062.271] FindNextFileW (in: hFindFile=0x381fc0, lpFindFileData=0x31e56c | out: lpFindFileData=0x31e56c*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x60ae73a0, ftCreationTime.dwHighDateTime=0x1d2de2a, ftLastAccessTime.dwLowDateTime=0x60ae73a0, ftLastAccessTime.dwHighDateTime=0x1d2de2a, ftLastWriteTime.dwLowDateTime=0x60ae73a0, ftLastWriteTime.dwHighDateTime=0x1d2de2a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Sqm", cAlternateFileName="")) returned 1 [0062.271] FindNextFileW (in: hFindFile=0x381fc0, lpFindFileData=0x31e56c | out: lpFindFileData=0x31e56c*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0xfd9dbcac, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x1cc35f15, ftLastAccessTime.dwHighDateTime=0x1ca0440, ftLastWriteTime.dwLowDateTime=0x1cc35f15, ftLastWriteTime.dwHighDateTime=0x1ca0440, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Start Menu", cAlternateFileName="STARTM~1")) returned 1 [0062.271] FindNextFileW (in: hFindFile=0x381fc0, lpFindFileData=0x31e56c | out: lpFindFileData=0x31e56c*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xfd9dbcac, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd9dbcac, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xaeea3462, ftLastWriteTime.dwHighDateTime=0x1ca042b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Templates", cAlternateFileName="TEMPLA~1")) returned 1 [0062.272] FindNextFileW (in: hFindFile=0x381fc0, lpFindFileData=0x31e56c | out: lpFindFileData=0x31e56c*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xfd9dbcac, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfda01e06, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xfda01e06, ftLastWriteTime.dwHighDateTime=0x1ca0431, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="WER", cAlternateFileName="")) returned 1 [0062.272] FindNextFileW (in: hFindFile=0x381fc0, lpFindFileData=0x31e56c | out: lpFindFileData=0x31e56c*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0062.272] FindClose (in: hFindFile=0x381fc0 | out: hFindFile=0x381fc0) returned 1 [0062.272] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e7f4) returned 1 [0062.272] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e800) returned 1 [0062.272] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e7bc) returned 1 [0062.272] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\Windows\\AIT", nBufferLength=0x105, lpBuffer=0x31e2c4, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\Windows\\AIT", lpFilePart=0x0) returned 0x24 [0062.272] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\Windows\\AIT\\", nBufferLength=0x105, lpBuffer=0x31e298, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\Windows\\AIT\\", lpFilePart=0x0) returned 0x25 [0062.272] FindFirstFileW (in: lpFileName="C:\\ProgramData\\Microsoft\\Windows\\AIT\\*", lpFindFileData=0x31e4e4 | out: lpFindFileData=0x31e4e4*(dwFileAttributes=0x14, ftCreationTime.dwLowDateTime=0xfd9b5b52, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd9b5b52, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xd5be7172, ftLastWriteTime.dwHighDateTime=0x1ca042b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x381fc0 [0062.273] FindNextFileW (in: hFindFile=0x381fc0, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x14, ftCreationTime.dwLowDateTime=0xfd9b5b52, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd9b5b52, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xd5be7172, ftLastWriteTime.dwHighDateTime=0x1ca042b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0062.273] FindNextFileW (in: hFindFile=0x381fc0, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x14, ftCreationTime.dwLowDateTime=0xfd9b5b52, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd9b5b52, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xd5be7172, ftLastWriteTime.dwHighDateTime=0x1ca042b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 0 [0062.273] FindClose (in: hFindFile=0x381fc0 | out: hFindFile=0x381fc0) returned 1 [0062.273] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e77c) returned 1 [0062.273] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e788) returned 1 [0062.273] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e7bc) returned 1 [0062.273] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\Windows\\AIT", nBufferLength=0x105, lpBuffer=0x31e2c4, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\Windows\\AIT", lpFilePart=0x0) returned 0x24 [0062.273] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\Windows\\AIT\\", nBufferLength=0x105, lpBuffer=0x31e298, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\Windows\\AIT\\", lpFilePart=0x0) returned 0x25 [0062.273] FindFirstFileW (in: lpFileName="C:\\ProgramData\\Microsoft\\Windows\\AIT\\*", lpFindFileData=0x31e4e4 | out: lpFindFileData=0x31e4e4*(dwFileAttributes=0x14, ftCreationTime.dwLowDateTime=0xfd9b5b52, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd9b5b52, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xd5be7172, ftLastWriteTime.dwHighDateTime=0x1ca042b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x381fc0 [0062.273] FindNextFileW (in: hFindFile=0x381fc0, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x14, ftCreationTime.dwLowDateTime=0xfd9b5b52, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd9b5b52, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xd5be7172, ftLastWriteTime.dwHighDateTime=0x1ca042b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0062.273] FindNextFileW (in: hFindFile=0x381fc0, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x14, ftCreationTime.dwLowDateTime=0xfd9b5b52, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd9b5b52, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xd5be7172, ftLastWriteTime.dwHighDateTime=0x1ca042b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 0 [0062.274] FindClose (in: hFindFile=0x381fc0 | out: hFindFile=0x381fc0) returned 1 [0062.274] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e77c) returned 1 [0062.274] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e788) returned 1 [0062.274] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e7bc) returned 1 [0062.274] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\Windows\\Caches", nBufferLength=0x105, lpBuffer=0x31e2c4, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\Windows\\Caches", lpFilePart=0x0) returned 0x27 [0062.274] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\Windows\\Caches\\", nBufferLength=0x105, lpBuffer=0x31e298, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\Windows\\Caches\\", lpFilePart=0x0) returned 0x28 [0062.274] FindFirstFileW (in: lpFileName="C:\\ProgramData\\Microsoft\\Windows\\Caches\\*", lpFindFileData=0x31e4e4 | out: lpFindFileData=0x31e4e4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x283ea490, ftCreationTime.dwHighDateTime=0x1ca043f, ftLastAccessTime.dwLowDateTime=0x9b86da60, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0x9b86da60, ftLastWriteTime.dwHighDateTime=0x1d305eb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x381fc0 [0062.274] FindNextFileW (in: hFindFile=0x381fc0, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x283ea490, ftCreationTime.dwHighDateTime=0x1ca043f, ftLastAccessTime.dwLowDateTime=0x9b86da60, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0x9b86da60, ftLastWriteTime.dwHighDateTime=0x1d305eb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0062.274] FindNextFileW (in: hFindFile=0x381fc0, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x284cecd2, ftCreationTime.dwHighDateTime=0x1ca043f, ftLastAccessTime.dwLowDateTime=0x284cecd2, ftLastAccessTime.dwHighDateTime=0x1ca043f, ftLastWriteTime.dwLowDateTime=0x284cecd2, ftLastWriteTime.dwHighDateTime=0x1ca043f, nFileSizeHigh=0x0, nFileSizeLow=0x4000, dwReserved0=0x0, dwReserved1=0x0, cFileName="cversions.2.db", cAlternateFileName="CVERSI~1.DB")) returned 1 [0062.274] FindNextFileW (in: hFindFile=0x381fc0, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x10f4d170, ftCreationTime.dwHighDateTime=0x1d2dda2, ftLastAccessTime.dwLowDateTime=0x10f4d170, ftLastAccessTime.dwHighDateTime=0x1d2dda2, ftLastWriteTime.dwLowDateTime=0x10f4d170, ftLastWriteTime.dwHighDateTime=0x1d2dda2, nFileSizeHigh=0x0, nFileSizeLow=0x418, dwReserved0=0x0, dwReserved1=0x0, cFileName="{11336D5B-7F61-4871-82E3-E0F59766823B}.2.ver0x0000000000000001.db", cAlternateFileName="{11336~1.DB")) returned 1 [0062.275] FindNextFileW (in: hFindFile=0x381fc0, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x75fef9b0, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x75fef9b0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x75fef9b0, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x4c0, dwReserved0=0x0, dwReserved1=0x0, cFileName="{3978EA0A-1C7E-4449-8AE1-E1265F039002}.2.ver0x0000000000000003.db", cAlternateFileName="{3978E~1.DB")) returned 1 [0062.275] FindNextFileW (in: hFindFile=0x381fc0, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xcf67691e, ftCreationTime.dwHighDateTime=0x1cb892d, ftLastAccessTime.dwLowDateTime=0xcf67691e, ftLastAccessTime.dwHighDateTime=0x1cb892d, ftLastWriteTime.dwLowDateTime=0xcf67691e, ftLastWriteTime.dwHighDateTime=0x1cb892d, nFileSizeHigh=0x0, nFileSizeLow=0x908, dwReserved0=0x0, dwReserved1=0x0, cFileName="{40FC8D7D-05ED-4FEB-B03B-6C100659EF5C}.2.ver0x0000000000000001.db", cAlternateFileName="{40FC8~1.DB")) returned 1 [0062.275] FindNextFileW (in: hFindFile=0x381fc0, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x9b7d54e0, ftCreationTime.dwHighDateTime=0x1d305eb, ftLastAccessTime.dwLowDateTime=0x9b7d54e0, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0x9b7d54e0, ftLastWriteTime.dwHighDateTime=0x1d305eb, nFileSizeHigh=0x0, nFileSizeLow=0x418, dwReserved0=0x0, dwReserved1=0x0, cFileName="{4E36EA69-73D1-4458-9D16-50F8E31A69A0}.2.ver0x0000000000000001.db", cAlternateFileName="{4E36E~1.DB")) returned 1 [0062.275] FindNextFileW (in: hFindFile=0x381fc0, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xab9fb9ff, ftCreationTime.dwHighDateTime=0x1cb892d, ftLastAccessTime.dwLowDateTime=0xab9fb9ff, ftLastAccessTime.dwHighDateTime=0x1cb892d, ftLastWriteTime.dwLowDateTime=0xab9fb9ff, ftLastWriteTime.dwHighDateTime=0x1cb892d, nFileSizeHigh=0x0, nFileSizeLow=0x908, dwReserved0=0x0, dwReserved1=0x0, cFileName="{4E4260A4-7E39-442E-BC22-7FF751D1C161}.2.ver0x0000000000000002.db", cAlternateFileName="{4E426~2.DB")) returned 1 [0062.275] FindNextFileW (in: hFindFile=0x381fc0, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x76015b10, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x76015b10, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x76015b10, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x2f390, dwReserved0=0x0, dwReserved1=0x0, cFileName="{6AF0698E-D558-4F6E-9B3C-3716689AF493}.2.ver0x0000000000000011.db", cAlternateFileName="{6AF06~1.DB")) returned 1 [0062.276] FindNextFileW (in: hFindFile=0x381fc0, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x9b8217a0, ftCreationTime.dwHighDateTime=0x1d305eb, ftLastAccessTime.dwLowDateTime=0x9b8217a0, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0x9b8217a0, ftLastWriteTime.dwHighDateTime=0x1d305eb, nFileSizeHigh=0x0, nFileSizeLow=0x2f5f0, dwReserved0=0x0, dwReserved1=0x0, cFileName="{6AF0698E-D558-4F6E-9B3C-3716689AF493}.2.ver0x0000000000000012.db", cAlternateFileName="{6AF06~2.DB")) returned 1 [0062.276] FindNextFileW (in: hFindFile=0x381fc0, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xab96347e, ftCreationTime.dwHighDateTime=0x1cb892d, ftLastAccessTime.dwLowDateTime=0xab96347e, ftLastAccessTime.dwHighDateTime=0x1cb892d, ftLastWriteTime.dwLowDateTime=0xab96347e, ftLastWriteTime.dwHighDateTime=0x1cb892d, nFileSizeHigh=0x0, nFileSizeLow=0x65578, dwReserved0=0x0, dwReserved1=0x0, cFileName="{DDF571F2-BE98-426D-8288-1A9A39C3FDA2}.2.ver0x0000000000000002.db", cAlternateFileName="{DDF57~2.DB")) returned 1 [0062.276] FindNextFileW (in: hFindFile=0x381fc0, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0062.276] FindClose (in: hFindFile=0x381fc0 | out: hFindFile=0x381fc0) returned 1 [0062.276] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e77c) returned 1 [0062.276] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e788) returned 1 [0062.276] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e7bc) returned 1 [0062.276] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\Windows\\Caches", nBufferLength=0x105, lpBuffer=0x31e2c4, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\Windows\\Caches", lpFilePart=0x0) returned 0x27 [0062.276] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\Windows\\Caches\\", nBufferLength=0x105, lpBuffer=0x31e298, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\Windows\\Caches\\", lpFilePart=0x0) returned 0x28 [0062.276] FindFirstFileW (in: lpFileName="C:\\ProgramData\\Microsoft\\Windows\\Caches\\*", lpFindFileData=0x31e4e4 | out: lpFindFileData=0x31e4e4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x283ea490, ftCreationTime.dwHighDateTime=0x1ca043f, ftLastAccessTime.dwLowDateTime=0x9b86da60, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0x9b86da60, ftLastWriteTime.dwHighDateTime=0x1d305eb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x381fc0 [0062.276] FindNextFileW (in: hFindFile=0x381fc0, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x283ea490, ftCreationTime.dwHighDateTime=0x1ca043f, ftLastAccessTime.dwLowDateTime=0x9b86da60, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0x9b86da60, ftLastWriteTime.dwHighDateTime=0x1d305eb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0062.277] FindNextFileW (in: hFindFile=0x381fc0, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x284cecd2, ftCreationTime.dwHighDateTime=0x1ca043f, ftLastAccessTime.dwLowDateTime=0x284cecd2, ftLastAccessTime.dwHighDateTime=0x1ca043f, ftLastWriteTime.dwLowDateTime=0x284cecd2, ftLastWriteTime.dwHighDateTime=0x1ca043f, nFileSizeHigh=0x0, nFileSizeLow=0x4000, dwReserved0=0x0, dwReserved1=0x0, cFileName="cversions.2.db", cAlternateFileName="CVERSI~1.DB")) returned 1 [0062.277] FindNextFileW (in: hFindFile=0x381fc0, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x10f4d170, ftCreationTime.dwHighDateTime=0x1d2dda2, ftLastAccessTime.dwLowDateTime=0x10f4d170, ftLastAccessTime.dwHighDateTime=0x1d2dda2, ftLastWriteTime.dwLowDateTime=0x10f4d170, ftLastWriteTime.dwHighDateTime=0x1d2dda2, nFileSizeHigh=0x0, nFileSizeLow=0x418, dwReserved0=0x0, dwReserved1=0x0, cFileName="{11336D5B-7F61-4871-82E3-E0F59766823B}.2.ver0x0000000000000001.db", cAlternateFileName="{11336~1.DB")) returned 1 [0062.277] FindNextFileW (in: hFindFile=0x381fc0, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x75fef9b0, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x75fef9b0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x75fef9b0, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x4c0, dwReserved0=0x0, dwReserved1=0x0, cFileName="{3978EA0A-1C7E-4449-8AE1-E1265F039002}.2.ver0x0000000000000003.db", cAlternateFileName="{3978E~1.DB")) returned 1 [0062.277] FindNextFileW (in: hFindFile=0x381fc0, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xcf67691e, ftCreationTime.dwHighDateTime=0x1cb892d, ftLastAccessTime.dwLowDateTime=0xcf67691e, ftLastAccessTime.dwHighDateTime=0x1cb892d, ftLastWriteTime.dwLowDateTime=0xcf67691e, ftLastWriteTime.dwHighDateTime=0x1cb892d, nFileSizeHigh=0x0, nFileSizeLow=0x908, dwReserved0=0x0, dwReserved1=0x0, cFileName="{40FC8D7D-05ED-4FEB-B03B-6C100659EF5C}.2.ver0x0000000000000001.db", cAlternateFileName="{40FC8~1.DB")) returned 1 [0062.277] FindNextFileW (in: hFindFile=0x381fc0, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x9b7d54e0, ftCreationTime.dwHighDateTime=0x1d305eb, ftLastAccessTime.dwLowDateTime=0x9b7d54e0, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0x9b7d54e0, ftLastWriteTime.dwHighDateTime=0x1d305eb, nFileSizeHigh=0x0, nFileSizeLow=0x418, dwReserved0=0x0, dwReserved1=0x0, cFileName="{4E36EA69-73D1-4458-9D16-50F8E31A69A0}.2.ver0x0000000000000001.db", cAlternateFileName="{4E36E~1.DB")) returned 1 [0062.277] FindNextFileW (in: hFindFile=0x381fc0, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xab9fb9ff, ftCreationTime.dwHighDateTime=0x1cb892d, ftLastAccessTime.dwLowDateTime=0xab9fb9ff, ftLastAccessTime.dwHighDateTime=0x1cb892d, ftLastWriteTime.dwLowDateTime=0xab9fb9ff, ftLastWriteTime.dwHighDateTime=0x1cb892d, nFileSizeHigh=0x0, nFileSizeLow=0x908, dwReserved0=0x0, dwReserved1=0x0, cFileName="{4E4260A4-7E39-442E-BC22-7FF751D1C161}.2.ver0x0000000000000002.db", cAlternateFileName="{4E426~2.DB")) returned 1 [0062.278] FindNextFileW (in: hFindFile=0x381fc0, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x76015b10, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x76015b10, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x76015b10, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x2f390, dwReserved0=0x0, dwReserved1=0x0, cFileName="{6AF0698E-D558-4F6E-9B3C-3716689AF493}.2.ver0x0000000000000011.db", cAlternateFileName="{6AF06~1.DB")) returned 1 [0062.278] FindNextFileW (in: hFindFile=0x381fc0, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x9b8217a0, ftCreationTime.dwHighDateTime=0x1d305eb, ftLastAccessTime.dwLowDateTime=0x9b8217a0, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0x9b8217a0, ftLastWriteTime.dwHighDateTime=0x1d305eb, nFileSizeHigh=0x0, nFileSizeLow=0x2f5f0, dwReserved0=0x0, dwReserved1=0x0, cFileName="{6AF0698E-D558-4F6E-9B3C-3716689AF493}.2.ver0x0000000000000012.db", cAlternateFileName="{6AF06~2.DB")) returned 1 [0062.278] FindNextFileW (in: hFindFile=0x381fc0, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xab96347e, ftCreationTime.dwHighDateTime=0x1cb892d, ftLastAccessTime.dwLowDateTime=0xab96347e, ftLastAccessTime.dwHighDateTime=0x1cb892d, ftLastWriteTime.dwLowDateTime=0xab96347e, ftLastWriteTime.dwHighDateTime=0x1cb892d, nFileSizeHigh=0x0, nFileSizeLow=0x65578, dwReserved0=0x0, dwReserved1=0x0, cFileName="{DDF571F2-BE98-426D-8288-1A9A39C3FDA2}.2.ver0x0000000000000002.db", cAlternateFileName="{DDF57~2.DB")) returned 1 [0062.278] FindNextFileW (in: hFindFile=0x381fc0, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xab96347e, ftCreationTime.dwHighDateTime=0x1cb892d, ftLastAccessTime.dwLowDateTime=0xab96347e, ftLastAccessTime.dwHighDateTime=0x1cb892d, ftLastWriteTime.dwLowDateTime=0xab96347e, ftLastWriteTime.dwHighDateTime=0x1cb892d, nFileSizeHigh=0x0, nFileSizeLow=0x65578, dwReserved0=0x0, dwReserved1=0x0, cFileName="{DDF571F2-BE98-426D-8288-1A9A39C3FDA2}.2.ver0x0000000000000002.db", cAlternateFileName="{DDF57~2.DB")) returned 0 [0062.278] FindClose (in: hFindFile=0x381fc0 | out: hFindFile=0x381fc0) returned 1 [0062.278] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e77c) returned 1 [0062.278] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e788) returned 1 [0062.278] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e7bc) returned 1 [0062.278] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\Windows\\DeviceMetadataStore", nBufferLength=0x105, lpBuffer=0x31e2c4, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\Windows\\DeviceMetadataStore", lpFilePart=0x0) returned 0x34 [0062.279] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\Windows\\DeviceMetadataStore\\", nBufferLength=0x105, lpBuffer=0x31e298, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\Windows\\DeviceMetadataStore\\", lpFilePart=0x0) returned 0x35 [0062.279] FindFirstFileW (in: lpFileName="C:\\ProgramData\\Microsoft\\Windows\\DeviceMetadataStore\\*", lpFindFileData=0x31e4e4 | out: lpFindFileData=0x31e4e4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xfd9b5b52, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd9b5b52, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xfd9b5b52, ftLastWriteTime.dwHighDateTime=0x1ca0431, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x381fc0 [0062.279] FindNextFileW (in: hFindFile=0x381fc0, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xfd9b5b52, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd9b5b52, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xfd9b5b52, ftLastWriteTime.dwHighDateTime=0x1ca0431, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0062.279] FindNextFileW (in: hFindFile=0x381fc0, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd9b5b52, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd9dbcac, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xfd9dbcac, ftLastWriteTime.dwHighDateTime=0x1ca0431, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="en-US", cAlternateFileName="")) returned 1 [0062.279] FindNextFileW (in: hFindFile=0x381fc0, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd9b5b52, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd9dbcac, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xfd9dbcac, ftLastWriteTime.dwHighDateTime=0x1ca0431, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="en-US", cAlternateFileName="")) returned 0 [0062.279] FindClose (in: hFindFile=0x381fc0 | out: hFindFile=0x381fc0) returned 1 [0062.280] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e77c) returned 1 [0062.280] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e788) returned 1 [0062.280] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e7bc) returned 1 [0062.280] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\Windows\\DeviceMetadataStore", nBufferLength=0x105, lpBuffer=0x31e2c4, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\Windows\\DeviceMetadataStore", lpFilePart=0x0) returned 0x34 [0062.280] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\Windows\\DeviceMetadataStore\\", nBufferLength=0x105, lpBuffer=0x31e298, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\Windows\\DeviceMetadataStore\\", lpFilePart=0x0) returned 0x35 [0062.280] FindFirstFileW (in: lpFileName="C:\\ProgramData\\Microsoft\\Windows\\DeviceMetadataStore\\*", lpFindFileData=0x31e4e4 | out: lpFindFileData=0x31e4e4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xfd9b5b52, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd9b5b52, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xfd9b5b52, ftLastWriteTime.dwHighDateTime=0x1ca0431, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x381fc0 [0062.280] FindNextFileW (in: hFindFile=0x381fc0, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xfd9b5b52, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd9b5b52, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xfd9b5b52, ftLastWriteTime.dwHighDateTime=0x1ca0431, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0062.280] FindNextFileW (in: hFindFile=0x381fc0, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd9b5b52, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd9dbcac, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xfd9dbcac, ftLastWriteTime.dwHighDateTime=0x1ca0431, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="en-US", cAlternateFileName="")) returned 1 [0062.280] FindNextFileW (in: hFindFile=0x381fc0, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0062.280] FindClose (in: hFindFile=0x381fc0 | out: hFindFile=0x381fc0) returned 1 [0062.280] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e77c) returned 1 [0062.280] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e788) returned 1 [0062.281] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e744) returned 1 [0062.281] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\Windows\\DeviceMetadataStore\\en-US", nBufferLength=0x105, lpBuffer=0x31e24c, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\Windows\\DeviceMetadataStore\\en-US", lpFilePart=0x0) returned 0x3a [0062.281] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\Windows\\DeviceMetadataStore\\en-US\\", nBufferLength=0x105, lpBuffer=0x31e220, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\Windows\\DeviceMetadataStore\\en-US\\", lpFilePart=0x0) returned 0x3b [0062.281] FindFirstFileW (in: lpFileName="C:\\ProgramData\\Microsoft\\Windows\\DeviceMetadataStore\\en-US\\*", lpFindFileData=0x31e46c | out: lpFindFileData=0x31e46c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd9b5b52, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd9dbcac, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xfd9dbcac, ftLastWriteTime.dwHighDateTime=0x1ca0431, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x381fc0 [0062.281] FindNextFileW (in: hFindFile=0x381fc0, lpFindFileData=0x31e47c | out: lpFindFileData=0x31e47c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd9b5b52, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd9dbcac, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xfd9dbcac, ftLastWriteTime.dwHighDateTime=0x1ca0431, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0062.281] FindNextFileW (in: hFindFile=0x381fc0, lpFindFileData=0x31e47c | out: lpFindFileData=0x31e47c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd2db04ce, ftCreationTime.dwHighDateTime=0x1ca0407, ftLastAccessTime.dwLowDateTime=0xd2db04ce, ftLastAccessTime.dwHighDateTime=0x1ca0407, ftLastWriteTime.dwLowDateTime=0x7c0e93d7, ftLastWriteTime.dwHighDateTime=0x1c9ea0e, nFileSizeHigh=0x0, nFileSizeLow=0x3736, dwReserved0=0x0, dwReserved1=0x0, cFileName="34e548a8-3268-4dde-bedf-c40f9b6c814a.devicemetadata-ms", cAlternateFileName="")) returned 1 [0062.281] FindNextFileW (in: hFindFile=0x381fc0, lpFindFileData=0x31e47c | out: lpFindFileData=0x31e47c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5f15ee9d, ftCreationTime.dwHighDateTime=0x1ca040c, ftLastAccessTime.dwLowDateTime=0x5f15ee9d, ftLastAccessTime.dwHighDateTime=0x1ca040c, ftLastWriteTime.dwLowDateTime=0xc7c34f7b, ftLastWriteTime.dwHighDateTime=0x1c9ea0e, nFileSizeHigh=0x0, nFileSizeLow=0x1af79, dwReserved0=0x0, dwReserved1=0x0, cFileName="63921eef-8415-4368-9201-f0df4af5778f.devicemetadata-ms", cAlternateFileName="")) returned 1 [0062.281] FindNextFileW (in: hFindFile=0x381fc0, lpFindFileData=0x31e47c | out: lpFindFileData=0x31e47c*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0062.281] FindClose (in: hFindFile=0x381fc0 | out: hFindFile=0x381fc0) returned 1 [0062.281] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e704) returned 1 [0062.282] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e710) returned 1 [0062.282] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e744) returned 1 [0062.282] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\Windows\\DeviceMetadataStore\\en-US", nBufferLength=0x105, lpBuffer=0x31e24c, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\Windows\\DeviceMetadataStore\\en-US", lpFilePart=0x0) returned 0x3a [0062.282] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\Windows\\DeviceMetadataStore\\en-US\\", nBufferLength=0x105, lpBuffer=0x31e220, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\Windows\\DeviceMetadataStore\\en-US\\", lpFilePart=0x0) returned 0x3b [0062.282] FindFirstFileW (in: lpFileName="C:\\ProgramData\\Microsoft\\Windows\\DeviceMetadataStore\\en-US\\*", lpFindFileData=0x31e46c | out: lpFindFileData=0x31e46c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd9b5b52, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd9dbcac, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xfd9dbcac, ftLastWriteTime.dwHighDateTime=0x1ca0431, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x381fc0 [0062.282] FindNextFileW (in: hFindFile=0x381fc0, lpFindFileData=0x31e47c | out: lpFindFileData=0x31e47c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd9b5b52, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd9dbcac, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xfd9dbcac, ftLastWriteTime.dwHighDateTime=0x1ca0431, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0062.282] FindNextFileW (in: hFindFile=0x381fc0, lpFindFileData=0x31e47c | out: lpFindFileData=0x31e47c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd2db04ce, ftCreationTime.dwHighDateTime=0x1ca0407, ftLastAccessTime.dwLowDateTime=0xd2db04ce, ftLastAccessTime.dwHighDateTime=0x1ca0407, ftLastWriteTime.dwLowDateTime=0x7c0e93d7, ftLastWriteTime.dwHighDateTime=0x1c9ea0e, nFileSizeHigh=0x0, nFileSizeLow=0x3736, dwReserved0=0x0, dwReserved1=0x0, cFileName="34e548a8-3268-4dde-bedf-c40f9b6c814a.devicemetadata-ms", cAlternateFileName="")) returned 1 [0062.282] FindNextFileW (in: hFindFile=0x381fc0, lpFindFileData=0x31e47c | out: lpFindFileData=0x31e47c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5f15ee9d, ftCreationTime.dwHighDateTime=0x1ca040c, ftLastAccessTime.dwLowDateTime=0x5f15ee9d, ftLastAccessTime.dwHighDateTime=0x1ca040c, ftLastWriteTime.dwLowDateTime=0xc7c34f7b, ftLastWriteTime.dwHighDateTime=0x1c9ea0e, nFileSizeHigh=0x0, nFileSizeLow=0x1af79, dwReserved0=0x0, dwReserved1=0x0, cFileName="63921eef-8415-4368-9201-f0df4af5778f.devicemetadata-ms", cAlternateFileName="")) returned 1 [0062.282] FindNextFileW (in: hFindFile=0x381fc0, lpFindFileData=0x31e47c | out: lpFindFileData=0x31e47c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5f15ee9d, ftCreationTime.dwHighDateTime=0x1ca040c, ftLastAccessTime.dwLowDateTime=0x5f15ee9d, ftLastAccessTime.dwHighDateTime=0x1ca040c, ftLastWriteTime.dwLowDateTime=0xc7c34f7b, ftLastWriteTime.dwHighDateTime=0x1c9ea0e, nFileSizeHigh=0x0, nFileSizeLow=0x1af79, dwReserved0=0x0, dwReserved1=0x0, cFileName="63921eef-8415-4368-9201-f0df4af5778f.devicemetadata-ms", cAlternateFileName="")) returned 0 [0062.282] FindClose (in: hFindFile=0x381fc0 | out: hFindFile=0x381fc0) returned 1 [0062.283] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e704) returned 1 [0062.283] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e710) returned 1 [0062.283] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e7bc) returned 1 [0062.283] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\Windows\\DRM", nBufferLength=0x105, lpBuffer=0x31e2c4, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\Windows\\DRM", lpFilePart=0x0) returned 0x24 [0062.283] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\Windows\\DRM\\", nBufferLength=0x105, lpBuffer=0x31e298, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\Windows\\DRM\\", lpFilePart=0x0) returned 0x25 [0062.283] FindFirstFileW (in: lpFileName="C:\\ProgramData\\Microsoft\\Windows\\DRM\\*", lpFindFileData=0x31e4e4 | out: lpFindFileData=0x31e4e4*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0x80020c30, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x80020c30, ftLastAccessTime.dwHighDateTime=0x1ca0444, ftLastWriteTime.dwLowDateTime=0x80020c30, ftLastWriteTime.dwHighDateTime=0x1ca0444, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x381fc0 [0062.284] FindNextFileW (in: hFindFile=0x381fc0, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0x80020c30, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x80020c30, ftLastAccessTime.dwHighDateTime=0x1ca0444, ftLastWriteTime.dwLowDateTime=0x80020c30, ftLastWriteTime.dwHighDateTime=0x1ca0444, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0062.284] FindNextFileW (in: hFindFile=0x381fc0, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0x80020c30, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x80020c30, ftLastAccessTime.dwHighDateTime=0x1ca0444, ftLastWriteTime.dwLowDateTime=0x80020c30, ftLastWriteTime.dwHighDateTime=0x1ca0444, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Cache", cAlternateFileName="")) returned 1 [0062.284] FindNextFileW (in: hFindFile=0x381fc0, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0x80020c30, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x80020c30, ftLastAccessTime.dwHighDateTime=0x1ca0444, ftLastWriteTime.dwLowDateTime=0x80020c30, ftLastWriteTime.dwHighDateTime=0x1ca0444, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Cache", cAlternateFileName="")) returned 0 [0062.284] FindClose (in: hFindFile=0x381fc0 | out: hFindFile=0x381fc0) returned 1 [0062.284] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e77c) returned 1 [0062.284] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e788) returned 1 [0062.284] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e7bc) returned 1 [0062.284] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\Windows\\DRM", nBufferLength=0x105, lpBuffer=0x31e2c4, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\Windows\\DRM", lpFilePart=0x0) returned 0x24 [0062.284] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\Windows\\DRM\\", nBufferLength=0x105, lpBuffer=0x31e298, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\Windows\\DRM\\", lpFilePart=0x0) returned 0x25 [0062.285] FindFirstFileW (in: lpFileName="C:\\ProgramData\\Microsoft\\Windows\\DRM\\*", lpFindFileData=0x31e4e4 | out: lpFindFileData=0x31e4e4*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0x80020c30, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x80020c30, ftLastAccessTime.dwHighDateTime=0x1ca0444, ftLastWriteTime.dwLowDateTime=0x80020c30, ftLastWriteTime.dwHighDateTime=0x1ca0444, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x381fc0 [0062.285] FindNextFileW (in: hFindFile=0x381fc0, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0x80020c30, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x80020c30, ftLastAccessTime.dwHighDateTime=0x1ca0444, ftLastWriteTime.dwLowDateTime=0x80020c30, ftLastWriteTime.dwHighDateTime=0x1ca0444, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0062.285] FindNextFileW (in: hFindFile=0x381fc0, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0x80020c30, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x80020c30, ftLastAccessTime.dwHighDateTime=0x1ca0444, ftLastWriteTime.dwLowDateTime=0x80020c30, ftLastWriteTime.dwHighDateTime=0x1ca0444, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Cache", cAlternateFileName="")) returned 1 [0062.285] FindNextFileW (in: hFindFile=0x381fc0, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0062.285] FindClose (in: hFindFile=0x381fc0 | out: hFindFile=0x381fc0) returned 1 [0062.285] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e77c) returned 1 [0062.285] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e788) returned 1 [0062.285] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e744) returned 1 [0062.285] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\Windows\\DRM\\Cache", nBufferLength=0x105, lpBuffer=0x31e24c, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\Windows\\DRM\\Cache", lpFilePart=0x0) returned 0x2a [0062.285] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\Windows\\DRM\\Cache\\", nBufferLength=0x105, lpBuffer=0x31e220, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\Windows\\DRM\\Cache\\", lpFilePart=0x0) returned 0x2b [0062.285] FindFirstFileW (in: lpFileName="C:\\ProgramData\\Microsoft\\Windows\\DRM\\Cache\\*", lpFindFileData=0x31e46c | out: lpFindFileData=0x31e46c*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0x80020c30, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x80020c30, ftLastAccessTime.dwHighDateTime=0x1ca0444, ftLastWriteTime.dwLowDateTime=0x80020c30, ftLastWriteTime.dwHighDateTime=0x1ca0444, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x381fc0 [0062.286] FindNextFileW (in: hFindFile=0x381fc0, lpFindFileData=0x31e47c | out: lpFindFileData=0x31e47c*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0x80020c30, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x80020c30, ftLastAccessTime.dwHighDateTime=0x1ca0444, ftLastWriteTime.dwLowDateTime=0x80020c30, ftLastWriteTime.dwHighDateTime=0x1ca0444, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0062.286] FindNextFileW (in: hFindFile=0x381fc0, lpFindFileData=0x31e47c | out: lpFindFileData=0x31e47c*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0x80020c30, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x80020c30, ftLastAccessTime.dwHighDateTime=0x1ca0444, ftLastWriteTime.dwLowDateTime=0x80020c30, ftLastWriteTime.dwHighDateTime=0x1ca0444, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 0 [0062.286] FindClose (in: hFindFile=0x381fc0 | out: hFindFile=0x381fc0) returned 1 [0062.286] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e704) returned 1 [0062.286] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e710) returned 1 [0062.286] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e744) returned 1 [0062.286] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\Windows\\DRM\\Cache", nBufferLength=0x105, lpBuffer=0x31e24c, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\Windows\\DRM\\Cache", lpFilePart=0x0) returned 0x2a [0062.286] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\Windows\\DRM\\Cache\\", nBufferLength=0x105, lpBuffer=0x31e220, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\Windows\\DRM\\Cache\\", lpFilePart=0x0) returned 0x2b [0062.286] FindFirstFileW (in: lpFileName="C:\\ProgramData\\Microsoft\\Windows\\DRM\\Cache\\*", lpFindFileData=0x31e46c | out: lpFindFileData=0x31e46c*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0x80020c30, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x80020c30, ftLastAccessTime.dwHighDateTime=0x1ca0444, ftLastWriteTime.dwLowDateTime=0x80020c30, ftLastWriteTime.dwHighDateTime=0x1ca0444, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x381fc0 [0062.286] FindNextFileW (in: hFindFile=0x381fc0, lpFindFileData=0x31e47c | out: lpFindFileData=0x31e47c*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0x80020c30, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x80020c30, ftLastAccessTime.dwHighDateTime=0x1ca0444, ftLastWriteTime.dwLowDateTime=0x80020c30, ftLastWriteTime.dwHighDateTime=0x1ca0444, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0062.287] FindNextFileW (in: hFindFile=0x381fc0, lpFindFileData=0x31e47c | out: lpFindFileData=0x31e47c*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0x80020c30, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x80020c30, ftLastAccessTime.dwHighDateTime=0x1ca0444, ftLastWriteTime.dwLowDateTime=0x80020c30, ftLastWriteTime.dwHighDateTime=0x1ca0444, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 0 [0062.287] FindClose (in: hFindFile=0x381fc0 | out: hFindFile=0x381fc0) returned 1 [0062.287] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e704) returned 1 [0062.287] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e710) returned 1 [0062.287] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e7bc) returned 1 [0062.290] FindNextFileW (in: hFindFile=0x381fc0, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xfd9dbcac, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd9dbcac, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xaeea3462, ftLastWriteTime.dwHighDateTime=0x1ca042b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0062.290] FindNextFileW (in: hFindFile=0x381fc0, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xfd9dbcac, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd9dbcac, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xaeea3462, ftLastWriteTime.dwHighDateTime=0x1ca042b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 0 [0062.290] FindClose (in: hFindFile=0x381fc0 | out: hFindFile=0x381fc0) returned 1 [0062.290] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e77c) returned 1 [0062.290] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e788) returned 1 [0062.290] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e7bc) returned 1 [0062.290] FindNextFileW (in: hFindFile=0x381fc0, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xfd9dbcac, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd9dbcac, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xaeea3462, ftLastWriteTime.dwHighDateTime=0x1ca042b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0062.290] FindNextFileW (in: hFindFile=0x381fc0, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xfd9dbcac, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd9dbcac, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xaeea3462, ftLastWriteTime.dwHighDateTime=0x1ca042b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 0 [0062.291] FindClose (in: hFindFile=0x381fc0 | out: hFindFile=0x381fc0) returned 1 [0062.291] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e77c) returned 1 [0062.291] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e788) returned 1 [0062.291] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e7bc) returned 1 [0062.293] FindNextFileW (in: hFindFile=0x381fc0, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd9dbcac, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x80e53620, ftLastAccessTime.dwHighDateTime=0x1d305f5, ftLastWriteTime.dwLowDateTime=0x80e53620, ftLastWriteTime.dwHighDateTime=0x1d305f5, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0062.293] FindNextFileW (in: hFindFile=0x381fc0, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xb4a5dfc0, ftCreationTime.dwHighDateTime=0x1d2faf9, ftLastAccessTime.dwLowDateTime=0xb4a5dfc0, ftLastAccessTime.dwHighDateTime=0x1d2faf9, ftLastWriteTime.dwLowDateTime=0x7f828940, ftLastWriteTime.dwHighDateTime=0x1d305f5, nFileSizeHigh=0x0, nFileSizeLow=0x2b0000, dwReserved0=0x0, dwReserved1=0x0, cFileName="energy-ntkl.etl", cAlternateFileName="ENERGY~2.ETL")) returned 1 [0062.293] FindNextFileW (in: hFindFile=0x381fc0, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd9bd2ca0, ftCreationTime.dwHighDateTime=0x1d2faf9, ftLastAccessTime.dwLowDateTime=0xd9bd2ca0, ftLastAccessTime.dwHighDateTime=0x1d2faf9, ftLastWriteTime.dwLowDateTime=0xd9bd2ca0, ftLastWriteTime.dwHighDateTime=0x1d2faf9, nFileSizeHigh=0x0, nFileSizeLow=0x7122, dwReserved0=0x0, dwReserved1=0x0, cFileName="energy-report-2017-07-12.xml", cAlternateFileName="ENERGY~2.XML")) returned 1 [0062.293] FindNextFileW (in: hFindFile=0x381fc0, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x80e53620, ftCreationTime.dwHighDateTime=0x1d305f5, ftLastAccessTime.dwLowDateTime=0x80e53620, ftLastAccessTime.dwHighDateTime=0x1d305f5, ftLastWriteTime.dwLowDateTime=0x80e53620, ftLastWriteTime.dwHighDateTime=0x1d305f5, nFileSizeHigh=0x0, nFileSizeLow=0x5600, dwReserved0=0x0, dwReserved1=0x0, cFileName="energy-report-2017-07-26.xml", cAlternateFileName="ENERGY~3.XML")) returned 1 [0062.294] FindNextFileW (in: hFindFile=0x381fc0, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd9b145c0, ftCreationTime.dwHighDateTime=0x1d2faf9, ftLastAccessTime.dwLowDateTime=0xd9b145c0, ftLastAccessTime.dwHighDateTime=0x1d2faf9, ftLastWriteTime.dwLowDateTime=0x80e53620, ftLastWriteTime.dwHighDateTime=0x1d305f5, nFileSizeHigh=0x0, nFileSizeLow=0x5600, dwReserved0=0x0, dwReserved1=0x0, cFileName="energy-report-latest.xml", cAlternateFileName="ENERGY~1.XML")) returned 1 [0062.294] FindNextFileW (in: hFindFile=0x381fc0, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd9c91380, ftCreationTime.dwHighDateTime=0x1d2faf9, ftLastAccessTime.dwLowDateTime=0xd9c91380, ftLastAccessTime.dwHighDateTime=0x1d2faf9, ftLastWriteTime.dwLowDateTime=0x812c9f60, ftLastWriteTime.dwHighDateTime=0x1d305f5, nFileSizeHigh=0x0, nFileSizeLow=0x41f0, dwReserved0=0x0, dwReserved1=0x0, cFileName="energy-report.html", cAlternateFileName="ENERGY~1.HTM")) returned 1 [0062.294] FindNextFileW (in: hFindFile=0x381fc0, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xb4a5dfc0, ftCreationTime.dwHighDateTime=0x1d2faf9, ftLastAccessTime.dwLowDateTime=0xb4a5dfc0, ftLastAccessTime.dwHighDateTime=0x1d2faf9, ftLastWriteTime.dwLowDateTime=0x7f8c0ec0, ftLastWriteTime.dwHighDateTime=0x1d305f5, nFileSizeHigh=0x0, nFileSizeLow=0x20000, dwReserved0=0x0, dwReserved1=0x0, cFileName="energy-trace.etl", cAlternateFileName="ENERGY~1.ETL")) returned 1 [0062.294] FindNextFileW (in: hFindFile=0x381fc0, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0062.294] FindClose (in: hFindFile=0x381fc0 | out: hFindFile=0x381fc0) returned 1 [0062.295] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e77c) returned 1 [0062.295] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e788) returned 1 [0062.295] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e7bc) returned 1 [0062.296] FindNextFileW (in: hFindFile=0x381fc0, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd9dbcac, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x80e53620, ftLastAccessTime.dwHighDateTime=0x1d305f5, ftLastWriteTime.dwLowDateTime=0x80e53620, ftLastWriteTime.dwHighDateTime=0x1d305f5, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0062.296] FindNextFileW (in: hFindFile=0x381fc0, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xb4a5dfc0, ftCreationTime.dwHighDateTime=0x1d2faf9, ftLastAccessTime.dwLowDateTime=0xb4a5dfc0, ftLastAccessTime.dwHighDateTime=0x1d2faf9, ftLastWriteTime.dwLowDateTime=0x7f828940, ftLastWriteTime.dwHighDateTime=0x1d305f5, nFileSizeHigh=0x0, nFileSizeLow=0x2b0000, dwReserved0=0x0, dwReserved1=0x0, cFileName="energy-ntkl.etl", cAlternateFileName="ENERGY~2.ETL")) returned 1 [0062.296] FindNextFileW (in: hFindFile=0x381fc0, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd9bd2ca0, ftCreationTime.dwHighDateTime=0x1d2faf9, ftLastAccessTime.dwLowDateTime=0xd9bd2ca0, ftLastAccessTime.dwHighDateTime=0x1d2faf9, ftLastWriteTime.dwLowDateTime=0xd9bd2ca0, ftLastWriteTime.dwHighDateTime=0x1d2faf9, nFileSizeHigh=0x0, nFileSizeLow=0x7122, dwReserved0=0x0, dwReserved1=0x0, cFileName="energy-report-2017-07-12.xml", cAlternateFileName="ENERGY~2.XML")) returned 1 [0062.296] FindNextFileW (in: hFindFile=0x381fc0, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x80e53620, ftCreationTime.dwHighDateTime=0x1d305f5, ftLastAccessTime.dwLowDateTime=0x80e53620, ftLastAccessTime.dwHighDateTime=0x1d305f5, ftLastWriteTime.dwLowDateTime=0x80e53620, ftLastWriteTime.dwHighDateTime=0x1d305f5, nFileSizeHigh=0x0, nFileSizeLow=0x5600, dwReserved0=0x0, dwReserved1=0x0, cFileName="energy-report-2017-07-26.xml", cAlternateFileName="ENERGY~3.XML")) returned 1 [0062.296] FindNextFileW (in: hFindFile=0x381fc0, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd9b145c0, ftCreationTime.dwHighDateTime=0x1d2faf9, ftLastAccessTime.dwLowDateTime=0xd9b145c0, ftLastAccessTime.dwHighDateTime=0x1d2faf9, ftLastWriteTime.dwLowDateTime=0x80e53620, ftLastWriteTime.dwHighDateTime=0x1d305f5, nFileSizeHigh=0x0, nFileSizeLow=0x5600, dwReserved0=0x0, dwReserved1=0x0, cFileName="energy-report-latest.xml", cAlternateFileName="ENERGY~1.XML")) returned 1 [0062.297] FindNextFileW (in: hFindFile=0x381fc0, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd9c91380, ftCreationTime.dwHighDateTime=0x1d2faf9, ftLastAccessTime.dwLowDateTime=0xd9c91380, ftLastAccessTime.dwHighDateTime=0x1d2faf9, ftLastWriteTime.dwLowDateTime=0x812c9f60, ftLastWriteTime.dwHighDateTime=0x1d305f5, nFileSizeHigh=0x0, nFileSizeLow=0x41f0, dwReserved0=0x0, dwReserved1=0x0, cFileName="energy-report.html", cAlternateFileName="ENERGY~1.HTM")) returned 1 [0062.297] FindNextFileW (in: hFindFile=0x381fc0, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xb4a5dfc0, ftCreationTime.dwHighDateTime=0x1d2faf9, ftLastAccessTime.dwLowDateTime=0xb4a5dfc0, ftLastAccessTime.dwHighDateTime=0x1d2faf9, ftLastWriteTime.dwLowDateTime=0x7f8c0ec0, ftLastWriteTime.dwHighDateTime=0x1d305f5, nFileSizeHigh=0x0, nFileSizeLow=0x20000, dwReserved0=0x0, dwReserved1=0x0, cFileName="energy-trace.etl", cAlternateFileName="ENERGY~1.ETL")) returned 1 [0062.297] FindNextFileW (in: hFindFile=0x381fc0, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xb4a5dfc0, ftCreationTime.dwHighDateTime=0x1d2faf9, ftLastAccessTime.dwLowDateTime=0xb4a5dfc0, ftLastAccessTime.dwHighDateTime=0x1d2faf9, ftLastWriteTime.dwLowDateTime=0x7f8c0ec0, ftLastWriteTime.dwHighDateTime=0x1d305f5, nFileSizeHigh=0x0, nFileSizeLow=0x20000, dwReserved0=0x0, dwReserved1=0x0, cFileName="energy-trace.etl", cAlternateFileName="ENERGY~1.ETL")) returned 0 [0062.298] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e77c) returned 1 [0062.298] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e788) returned 1 [0062.298] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e688) returned 1 [0062.298] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft\\Windows\\Power Efficiency Diagnostics\\energy-report-2017-07-12.xml" (normalized: "c:\\programdata\\microsoft\\windows\\power efficiency diagnostics\\energy-report-2017-07-12.xml"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x178 [0062.299] GetFileType (hFile=0x178) returned 0x1 [0062.299] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e684) returned 1 [0062.299] GetFileType (hFile=0x178) returned 0x1 [0062.299] GetFileSize (in: hFile=0x178, lpFileSizeHigh=0x31e790 | out: lpFileSizeHigh=0x31e790*=0x0) returned 0x7122 [0062.299] ReadFile (in: hFile=0x178, lpBuffer=0x271f2f0, nNumberOfBytesToRead=0x7122, lpNumberOfBytesRead=0x31e73c, lpOverlapped=0x0 | out: lpBuffer=0x271f2f0*, lpNumberOfBytesRead=0x31e73c*=0x7122, lpOverlapped=0x0) returned 1 [0062.345] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e674) returned 1 [0062.345] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft\\Windows\\Power Efficiency Diagnostics\\energy-report-2017-07-12.xml" (normalized: "c:\\programdata\\microsoft\\windows\\power efficiency diagnostics\\energy-report-2017-07-12.xml"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x178 [0062.346] GetFileType (hFile=0x178) returned 0x1 [0062.346] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e670) returned 1 [0062.346] GetFileType (hFile=0x178) returned 0x1 [0062.346] WriteFile (in: hFile=0x178, lpBuffer=0x278f6c8*, nNumberOfBytesToWrite=0x7130, lpNumberOfBytesWritten=0x31e730, lpOverlapped=0x0 | out: lpBuffer=0x278f6c8*, lpNumberOfBytesWritten=0x31e730*=0x7130, lpOverlapped=0x0) returned 1 [0062.348] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e714) returned 1 [0062.348] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e710) returned 1 [0062.348] MoveFileW (lpExistingFileName="C:\\ProgramData\\Microsoft\\Windows\\Power Efficiency Diagnostics\\energy-report-2017-07-12.xml" (normalized: "c:\\programdata\\microsoft\\windows\\power efficiency diagnostics\\energy-report-2017-07-12.xml"), lpNewFileName="C:\\ProgramData\\Microsoft\\Windows\\Power Efficiency Diagnostics\\energy-report-2017-07-12.xml" (normalized: "c:\\programdata\\microsoft\\windows\\power efficiency diagnostics\\energy-report-2017-07-12.xml")) returned 1 [0062.348] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e688) returned 1 [0062.348] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft\\Windows\\Power Efficiency Diagnostics\\energy-report-2017-07-26.xml" (normalized: "c:\\programdata\\microsoft\\windows\\power efficiency diagnostics\\energy-report-2017-07-26.xml"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x178 [0062.348] GetFileType (hFile=0x178) returned 0x1 [0062.348] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e684) returned 1 [0062.348] GetFileType (hFile=0x178) returned 0x1 [0062.349] GetFileSize (in: hFile=0x178, lpFileSizeHigh=0x31e790 | out: lpFileSizeHigh=0x31e790*=0x0) returned 0x5600 [0062.349] ReadFile (in: hFile=0x178, lpBuffer=0x2796c74, nNumberOfBytesToRead=0x5600, lpNumberOfBytesRead=0x31e73c, lpOverlapped=0x0 | out: lpBuffer=0x2796c74*, lpNumberOfBytesRead=0x31e73c*=0x5600, lpOverlapped=0x0) returned 1 [0062.364] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e674) returned 1 [0062.364] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft\\Windows\\Power Efficiency Diagnostics\\energy-report-2017-07-26.xml" (normalized: "c:\\programdata\\microsoft\\windows\\power efficiency diagnostics\\energy-report-2017-07-26.xml"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x178 [0062.366] GetFileType (hFile=0x178) returned 0x1 [0062.366] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e670) returned 1 [0062.366] GetFileType (hFile=0x178) returned 0x1 [0062.366] WriteFile (in: hFile=0x178, lpBuffer=0x27fe8a8*, nNumberOfBytesToWrite=0x5610, lpNumberOfBytesWritten=0x31e730, lpOverlapped=0x0 | out: lpBuffer=0x27fe8a8*, lpNumberOfBytesWritten=0x31e730*=0x5610, lpOverlapped=0x0) returned 1 [0062.367] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e714) returned 1 [0062.367] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e710) returned 1 [0062.367] MoveFileW (lpExistingFileName="C:\\ProgramData\\Microsoft\\Windows\\Power Efficiency Diagnostics\\energy-report-2017-07-26.xml" (normalized: "c:\\programdata\\microsoft\\windows\\power efficiency diagnostics\\energy-report-2017-07-26.xml"), lpNewFileName="C:\\ProgramData\\Microsoft\\Windows\\Power Efficiency Diagnostics\\energy-report-2017-07-26.xml" (normalized: "c:\\programdata\\microsoft\\windows\\power efficiency diagnostics\\energy-report-2017-07-26.xml")) returned 1 [0062.368] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e688) returned 1 [0062.368] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft\\Windows\\Power Efficiency Diagnostics\\energy-report-latest.xml" (normalized: "c:\\programdata\\microsoft\\windows\\power efficiency diagnostics\\energy-report-latest.xml"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x178 [0062.369] GetFileType (hFile=0x178) returned 0x1 [0062.369] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e684) returned 1 [0062.369] GetFileType (hFile=0x178) returned 0x1 [0062.369] GetFileSize (in: hFile=0x178, lpFileSizeHigh=0x31e790 | out: lpFileSizeHigh=0x31e790*=0x0) returned 0x5600 [0062.370] ReadFile (in: hFile=0x178, lpBuffer=0x2804324, nNumberOfBytesToRead=0x5600, lpNumberOfBytesRead=0x31e73c, lpOverlapped=0x0 | out: lpBuffer=0x2804324*, lpNumberOfBytesRead=0x31e73c*=0x5600, lpOverlapped=0x0) returned 1 [0062.386] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e674) returned 1 [0062.386] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft\\Windows\\Power Efficiency Diagnostics\\energy-report-latest.xml" (normalized: "c:\\programdata\\microsoft\\windows\\power efficiency diagnostics\\energy-report-latest.xml"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x178 [0062.387] GetFileType (hFile=0x178) returned 0x1 [0062.387] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e670) returned 1 [0062.387] GetFileType (hFile=0x178) returned 0x1 [0062.387] WriteFile (in: hFile=0x178, lpBuffer=0x2672550*, nNumberOfBytesToWrite=0x5610, lpNumberOfBytesWritten=0x31e730, lpOverlapped=0x0 | out: lpBuffer=0x2672550*, lpNumberOfBytesWritten=0x31e730*=0x5610, lpOverlapped=0x0) returned 1 [0062.389] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e714) returned 1 [0062.389] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e710) returned 1 [0062.389] MoveFileW (lpExistingFileName="C:\\ProgramData\\Microsoft\\Windows\\Power Efficiency Diagnostics\\energy-report-latest.xml" (normalized: "c:\\programdata\\microsoft\\windows\\power efficiency diagnostics\\energy-report-latest.xml"), lpNewFileName="C:\\ProgramData\\Microsoft\\Windows\\Power Efficiency Diagnostics\\energy-report-latest.xml" (normalized: "c:\\programdata\\microsoft\\windows\\power efficiency diagnostics\\energy-report-latest.xml")) returned 1 [0062.389] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e688) returned 1 [0062.389] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft\\Windows\\Power Efficiency Diagnostics\\energy-report.html" (normalized: "c:\\programdata\\microsoft\\windows\\power efficiency diagnostics\\energy-report.html"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x178 [0062.389] GetFileType (hFile=0x178) returned 0x1 [0062.389] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e684) returned 1 [0062.389] GetFileType (hFile=0x178) returned 0x1 [0062.389] GetFileSize (in: hFile=0x178, lpFileSizeHigh=0x31e790 | out: lpFileSizeHigh=0x31e790*=0x0) returned 0x41f0 [0062.389] ReadFile (in: hFile=0x178, lpBuffer=0x2677f94, nNumberOfBytesToRead=0x41f0, lpNumberOfBytesRead=0x31e73c, lpOverlapped=0x0 | out: lpBuffer=0x2677f94*, lpNumberOfBytesRead=0x31e73c*=0x41f0, lpOverlapped=0x0) returned 1 [0062.404] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e674) returned 1 [0062.404] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft\\Windows\\Power Efficiency Diagnostics\\energy-report.html" (normalized: "c:\\programdata\\microsoft\\windows\\power efficiency diagnostics\\energy-report.html"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x178 [0062.405] GetFileType (hFile=0x178) returned 0x1 [0062.405] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e670) returned 1 [0062.405] GetFileType (hFile=0x178) returned 0x1 [0062.405] WriteFile (in: hFile=0x178, lpBuffer=0x26d98d4*, nNumberOfBytesToWrite=0x4200, lpNumberOfBytesWritten=0x31e730, lpOverlapped=0x0 | out: lpBuffer=0x26d98d4*, lpNumberOfBytesWritten=0x31e730*=0x4200, lpOverlapped=0x0) returned 1 [0062.406] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e714) returned 1 [0062.406] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e710) returned 1 [0062.406] MoveFileW (lpExistingFileName="C:\\ProgramData\\Microsoft\\Windows\\Power Efficiency Diagnostics\\energy-report.html" (normalized: "c:\\programdata\\microsoft\\windows\\power efficiency diagnostics\\energy-report.html"), lpNewFileName="C:\\ProgramData\\Microsoft\\Windows\\Power Efficiency Diagnostics\\energy-report.html" (normalized: "c:\\programdata\\microsoft\\windows\\power efficiency diagnostics\\energy-report.html")) returned 1 [0062.407] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e7bc) returned 1 [0062.409] FindNextFileW (in: hFindFile=0x382040, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x7fffaad0, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x8038cbd7, ftLastAccessTime.dwHighDateTime=0x1ca0444, ftLastWriteTime.dwLowDateTime=0x8038cbd7, ftLastWriteTime.dwHighDateTime=0x1ca0444, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0062.409] FindNextFileW (in: hFindFile=0x382040, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0x8038cbd7, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x7bed1018, ftLastAccessTime.dwHighDateTime=0x1ca0444, ftLastWriteTime.dwLowDateTime=0x7bed1018, ftLastWriteTime.dwHighDateTime=0x1ca0444, nFileSizeHigh=0x0, nFileSizeLow=0x264, dwReserved0=0x0, dwReserved1=0x0, cFileName="desktop.ini", cAlternateFileName="")) returned 1 [0062.409] FindNextFileW (in: hFindFile=0x382040, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x80366a76, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x7bed1018, ftLastAccessTime.dwHighDateTime=0x1ca0444, ftLastWriteTime.dwLowDateTime=0x7bed1018, ftLastWriteTime.dwHighDateTime=0x1ca0444, nFileSizeHigh=0x0, nFileSizeLow=0x31469, dwReserved0=0x0, dwReserved1=0x0, cFileName="Ringtone 01.wma", cAlternateFileName="RINGTO~3.WMA")) returned 1 [0062.409] FindNextFileW (in: hFindFile=0x382040, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8038cbd7, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x7bed1018, ftLastAccessTime.dwHighDateTime=0x1ca0444, ftLastWriteTime.dwLowDateTime=0x7bed1018, ftLastWriteTime.dwHighDateTime=0x1ca0444, nFileSizeHigh=0x0, nFileSizeLow=0x21fbf, dwReserved0=0x0, dwReserved1=0x0, cFileName="Ringtone 02.wma", cAlternateFileName="RI5404~1.WMA")) returned 1 [0062.409] FindNextFileW (in: hFindFile=0x382040, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8038cbd7, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x7bed1018, ftLastAccessTime.dwHighDateTime=0x1ca0444, ftLastWriteTime.dwLowDateTime=0x7bed1018, ftLastWriteTime.dwHighDateTime=0x1ca0444, nFileSizeHigh=0x0, nFileSizeLow=0x170f9, dwReserved0=0x0, dwReserved1=0x0, cFileName="Ringtone 03.wma", cAlternateFileName="RI0FCF~1.WMA")) returned 1 [0062.409] FindNextFileW (in: hFindFile=0x382040, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x80366a76, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x7bed1018, ftLastAccessTime.dwHighDateTime=0x1ca0444, ftLastWriteTime.dwLowDateTime=0x7bed1018, ftLastWriteTime.dwHighDateTime=0x1ca0444, nFileSizeHigh=0x0, nFileSizeLow=0x3a039, dwReserved0=0x0, dwReserved1=0x0, cFileName="Ringtone 04.wma", cAlternateFileName="RINGTO~4.WMA")) returned 1 [0062.409] FindNextFileW (in: hFindFile=0x382040, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x80366a76, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x7bed1018, ftLastAccessTime.dwHighDateTime=0x1ca0444, ftLastWriteTime.dwLowDateTime=0x7bed1018, ftLastWriteTime.dwHighDateTime=0x1ca0444, nFileSizeHigh=0x0, nFileSizeLow=0x1b6e1, dwReserved0=0x0, dwReserved1=0x0, cFileName="Ringtone 05.wma", cAlternateFileName="RINGTO~1.WMA")) returned 1 [0062.409] FindNextFileW (in: hFindFile=0x382040, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8038cbd7, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x7bed1018, ftLastAccessTime.dwHighDateTime=0x1ca0444, ftLastWriteTime.dwLowDateTime=0x7bed1018, ftLastWriteTime.dwHighDateTime=0x1ca0444, nFileSizeHigh=0x0, nFileSizeLow=0x170f9, dwReserved0=0x0, dwReserved1=0x0, cFileName="Ringtone 06.wma", cAlternateFileName="RIF0DC~1.WMA")) returned 1 [0062.409] FindNextFileW (in: hFindFile=0x382040, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x80366a76, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x7bed1018, ftLastAccessTime.dwHighDateTime=0x1ca0444, ftLastWriteTime.dwLowDateTime=0x7bed1018, ftLastWriteTime.dwHighDateTime=0x1ca0444, nFileSizeHigh=0x0, nFileSizeLow=0x170f9, dwReserved0=0x0, dwReserved1=0x0, cFileName="Ringtone 07.wma", cAlternateFileName="RID564~1.WMA")) returned 1 [0062.409] FindNextFileW (in: hFindFile=0x382040, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x80366a76, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x7bed1018, ftLastAccessTime.dwHighDateTime=0x1ca0444, ftLastWriteTime.dwLowDateTime=0x7bed1018, ftLastWriteTime.dwHighDateTime=0x1ca0444, nFileSizeHigh=0x0, nFileSizeLow=0x21fbd, dwReserved0=0x0, dwReserved1=0x0, cFileName="Ringtone 08.wma", cAlternateFileName="RINGTO~2.WMA")) returned 1 [0062.409] FindNextFileW (in: hFindFile=0x382040, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8038cbd7, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x7bed1018, ftLastAccessTime.dwHighDateTime=0x1ca0444, ftLastWriteTime.dwLowDateTime=0x7bed1018, ftLastWriteTime.dwHighDateTime=0x1ca0444, nFileSizeHigh=0x0, nFileSizeLow=0x1b6e1, dwReserved0=0x0, dwReserved1=0x0, cFileName="Ringtone 09.wma", cAlternateFileName="RI70DC~1.WMA")) returned 1 [0062.409] FindNextFileW (in: hFindFile=0x382040, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8038cbd7, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x7bed1018, ftLastAccessTime.dwHighDateTime=0x1ca0444, ftLastWriteTime.dwLowDateTime=0x7bed1018, ftLastWriteTime.dwHighDateTime=0x1ca0444, nFileSizeHigh=0x0, nFileSizeLow=0x170f9, dwReserved0=0x0, dwReserved1=0x0, cFileName="Ringtone 10.wma", cAlternateFileName="RI35A2~1.WMA")) returned 1 [0062.409] FindNextFileW (in: hFindFile=0x382040, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0062.410] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e77c) returned 1 [0062.410] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e788) returned 1 [0062.410] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e7bc) returned 1 [0062.411] FindNextFileW (in: hFindFile=0x382040, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x7fffaad0, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x8038cbd7, ftLastAccessTime.dwHighDateTime=0x1ca0444, ftLastWriteTime.dwLowDateTime=0x8038cbd7, ftLastWriteTime.dwHighDateTime=0x1ca0444, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0062.411] FindNextFileW (in: hFindFile=0x382040, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0x8038cbd7, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x7bed1018, ftLastAccessTime.dwHighDateTime=0x1ca0444, ftLastWriteTime.dwLowDateTime=0x7bed1018, ftLastWriteTime.dwHighDateTime=0x1ca0444, nFileSizeHigh=0x0, nFileSizeLow=0x264, dwReserved0=0x0, dwReserved1=0x0, cFileName="desktop.ini", cAlternateFileName="")) returned 1 [0062.411] FindNextFileW (in: hFindFile=0x382040, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x80366a76, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x7bed1018, ftLastAccessTime.dwHighDateTime=0x1ca0444, ftLastWriteTime.dwLowDateTime=0x7bed1018, ftLastWriteTime.dwHighDateTime=0x1ca0444, nFileSizeHigh=0x0, nFileSizeLow=0x31469, dwReserved0=0x0, dwReserved1=0x0, cFileName="Ringtone 01.wma", cAlternateFileName="RINGTO~3.WMA")) returned 1 [0062.411] FindNextFileW (in: hFindFile=0x382040, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8038cbd7, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x7bed1018, ftLastAccessTime.dwHighDateTime=0x1ca0444, ftLastWriteTime.dwLowDateTime=0x7bed1018, ftLastWriteTime.dwHighDateTime=0x1ca0444, nFileSizeHigh=0x0, nFileSizeLow=0x21fbf, dwReserved0=0x0, dwReserved1=0x0, cFileName="Ringtone 02.wma", cAlternateFileName="RI5404~1.WMA")) returned 1 [0062.411] FindNextFileW (in: hFindFile=0x382040, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8038cbd7, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x7bed1018, ftLastAccessTime.dwHighDateTime=0x1ca0444, ftLastWriteTime.dwLowDateTime=0x7bed1018, ftLastWriteTime.dwHighDateTime=0x1ca0444, nFileSizeHigh=0x0, nFileSizeLow=0x170f9, dwReserved0=0x0, dwReserved1=0x0, cFileName="Ringtone 03.wma", cAlternateFileName="RI0FCF~1.WMA")) returned 1 [0062.411] FindNextFileW (in: hFindFile=0x382040, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x80366a76, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x7bed1018, ftLastAccessTime.dwHighDateTime=0x1ca0444, ftLastWriteTime.dwLowDateTime=0x7bed1018, ftLastWriteTime.dwHighDateTime=0x1ca0444, nFileSizeHigh=0x0, nFileSizeLow=0x3a039, dwReserved0=0x0, dwReserved1=0x0, cFileName="Ringtone 04.wma", cAlternateFileName="RINGTO~4.WMA")) returned 1 [0062.411] FindNextFileW (in: hFindFile=0x382040, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x80366a76, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x7bed1018, ftLastAccessTime.dwHighDateTime=0x1ca0444, ftLastWriteTime.dwLowDateTime=0x7bed1018, ftLastWriteTime.dwHighDateTime=0x1ca0444, nFileSizeHigh=0x0, nFileSizeLow=0x1b6e1, dwReserved0=0x0, dwReserved1=0x0, cFileName="Ringtone 05.wma", cAlternateFileName="RINGTO~1.WMA")) returned 1 [0062.411] FindNextFileW (in: hFindFile=0x382040, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8038cbd7, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x7bed1018, ftLastAccessTime.dwHighDateTime=0x1ca0444, ftLastWriteTime.dwLowDateTime=0x7bed1018, ftLastWriteTime.dwHighDateTime=0x1ca0444, nFileSizeHigh=0x0, nFileSizeLow=0x170f9, dwReserved0=0x0, dwReserved1=0x0, cFileName="Ringtone 06.wma", cAlternateFileName="RIF0DC~1.WMA")) returned 1 [0062.411] FindNextFileW (in: hFindFile=0x382040, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x80366a76, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x7bed1018, ftLastAccessTime.dwHighDateTime=0x1ca0444, ftLastWriteTime.dwLowDateTime=0x7bed1018, ftLastWriteTime.dwHighDateTime=0x1ca0444, nFileSizeHigh=0x0, nFileSizeLow=0x170f9, dwReserved0=0x0, dwReserved1=0x0, cFileName="Ringtone 07.wma", cAlternateFileName="RID564~1.WMA")) returned 1 [0062.411] FindNextFileW (in: hFindFile=0x382040, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x80366a76, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x7bed1018, ftLastAccessTime.dwHighDateTime=0x1ca0444, ftLastWriteTime.dwLowDateTime=0x7bed1018, ftLastWriteTime.dwHighDateTime=0x1ca0444, nFileSizeHigh=0x0, nFileSizeLow=0x21fbd, dwReserved0=0x0, dwReserved1=0x0, cFileName="Ringtone 08.wma", cAlternateFileName="RINGTO~2.WMA")) returned 1 [0062.411] FindNextFileW (in: hFindFile=0x382040, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8038cbd7, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x7bed1018, ftLastAccessTime.dwHighDateTime=0x1ca0444, ftLastWriteTime.dwLowDateTime=0x7bed1018, ftLastWriteTime.dwHighDateTime=0x1ca0444, nFileSizeHigh=0x0, nFileSizeLow=0x1b6e1, dwReserved0=0x0, dwReserved1=0x0, cFileName="Ringtone 09.wma", cAlternateFileName="RI70DC~1.WMA")) returned 1 [0062.411] FindNextFileW (in: hFindFile=0x382040, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8038cbd7, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x7bed1018, ftLastAccessTime.dwHighDateTime=0x1ca0444, ftLastWriteTime.dwLowDateTime=0x7bed1018, ftLastWriteTime.dwHighDateTime=0x1ca0444, nFileSizeHigh=0x0, nFileSizeLow=0x170f9, dwReserved0=0x0, dwReserved1=0x0, cFileName="Ringtone 10.wma", cAlternateFileName="RI35A2~1.WMA")) returned 1 [0062.412] FindNextFileW (in: hFindFile=0x382040, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8038cbd7, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x7bed1018, ftLastAccessTime.dwHighDateTime=0x1ca0444, ftLastWriteTime.dwLowDateTime=0x7bed1018, ftLastWriteTime.dwHighDateTime=0x1ca0444, nFileSizeHigh=0x0, nFileSizeLow=0x170f9, dwReserved0=0x0, dwReserved1=0x0, cFileName="Ringtone 10.wma", cAlternateFileName="RI35A2~1.WMA")) returned 0 [0062.412] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e77c) returned 1 [0062.412] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e788) returned 1 [0062.412] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e688) returned 1 [0062.412] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft\\Windows\\Ringtones\\Ringtone 01.wma" (normalized: "c:\\programdata\\microsoft\\windows\\ringtones\\ringtone 01.wma"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x178 [0062.414] GetFileType (hFile=0x178) returned 0x1 [0062.414] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e684) returned 1 [0062.414] GetFileType (hFile=0x178) returned 0x1 [0062.414] GetFileSize (in: hFile=0x178, lpFileSizeHigh=0x31e790 | out: lpFileSizeHigh=0x31e790*=0x0) returned 0x31469 [0062.414] ReadFile (in: hFile=0x178, lpBuffer=0x37bde60, nNumberOfBytesToRead=0x31469, lpNumberOfBytesRead=0x31e73c, lpOverlapped=0x0 | out: lpBuffer=0x37bde60*, lpNumberOfBytesRead=0x31e73c*=0x31469, lpOverlapped=0x0) returned 1 [0062.435] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e674) returned 1 [0062.435] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft\\Windows\\Ringtones\\Ringtone 01.wma" (normalized: "c:\\programdata\\microsoft\\windows\\ringtones\\ringtone 01.wma"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x178 [0062.436] GetFileType (hFile=0x178) returned 0x1 [0062.436] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e670) returned 1 [0062.437] GetFileType (hFile=0x178) returned 0x1 [0062.437] WriteFile (in: hFile=0x178, lpBuffer=0x38b44c8*, nNumberOfBytesToWrite=0x31470, lpNumberOfBytesWritten=0x31e730, lpOverlapped=0x0 | out: lpBuffer=0x38b44c8*, lpNumberOfBytesWritten=0x31e730*=0x31470, lpOverlapped=0x0) returned 1 [0062.441] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e714) returned 1 [0062.441] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e710) returned 1 [0062.441] MoveFileW (lpExistingFileName="C:\\ProgramData\\Microsoft\\Windows\\Ringtones\\Ringtone 01.wma" (normalized: "c:\\programdata\\microsoft\\windows\\ringtones\\ringtone 01.wma"), lpNewFileName="C:\\ProgramData\\Microsoft\\Windows\\Ringtones\\Ringtone 01.wma" (normalized: "c:\\programdata\\microsoft\\windows\\ringtones\\ringtone 01.wma")) returned 1 [0062.441] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e688) returned 1 [0062.441] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft\\Windows\\Ringtones\\Ringtone 02.wma" (normalized: "c:\\programdata\\microsoft\\windows\\ringtones\\ringtone 02.wma"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x178 [0062.442] GetFileType (hFile=0x178) returned 0x1 [0062.442] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e684) returned 1 [0062.442] GetFileType (hFile=0x178) returned 0x1 [0062.442] GetFileSize (in: hFile=0x178, lpFileSizeHigh=0x31e790 | out: lpFileSizeHigh=0x31e790*=0x0) returned 0x21fbf [0062.442] ReadFile (in: hFile=0x178, lpBuffer=0x38e5958, nNumberOfBytesToRead=0x21fbf, lpNumberOfBytesRead=0x31e73c, lpOverlapped=0x0 | out: lpBuffer=0x38e5958*, lpNumberOfBytesRead=0x31e73c*=0x21fbf, lpOverlapped=0x0) returned 1 [0062.463] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\Windows\\Ringtones\\Ringtone 02.wma", nBufferLength=0x105, lpBuffer=0x31e180, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\Windows\\Ringtones\\Ringtone 02.wma", lpFilePart=0x0) returned 0x3a [0062.463] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e674) returned 1 [0062.463] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft\\Windows\\Ringtones\\Ringtone 02.wma" (normalized: "c:\\programdata\\microsoft\\windows\\ringtones\\ringtone 02.wma"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x178 [0062.465] GetFileType (hFile=0x178) returned 0x1 [0062.465] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e670) returned 1 [0062.465] GetFileType (hFile=0x178) returned 0x1 [0062.465] WriteFile (in: hFile=0x178, lpBuffer=0x367f400*, nNumberOfBytesToWrite=0x21fc0, lpNumberOfBytesWritten=0x31e730, lpOverlapped=0x0 | out: lpBuffer=0x367f400*, lpNumberOfBytesWritten=0x31e730*=0x21fc0, lpOverlapped=0x0) returned 1 [0062.467] CloseHandle (hObject=0x178) returned 1 [0062.467] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\Windows\\Ringtones\\Ringtone 02.wma", nBufferLength=0x105, lpBuffer=0x31e2b4, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\Windows\\Ringtones\\Ringtone 02.wma", lpFilePart=0x0) returned 0x3a [0062.468] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\Windows\\Ringtones\\Ringtone 02.wma", nBufferLength=0x105, lpBuffer=0x31e2b4, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\Windows\\Ringtones\\Ringtone 02.wma", lpFilePart=0x0) returned 0x3a [0062.468] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e714) returned 1 [0062.468] GetFileAttributesExW (in: lpFileName="C:\\ProgramData\\Microsoft\\Windows\\Ringtones\\Ringtone 02.wma" (normalized: "c:\\programdata\\microsoft\\windows\\ringtones\\ringtone 02.wma"), fInfoLevelId=0x0, lpFileInformation=0x31e790 | out: lpFileInformation=0x31e790*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8038cbd7, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x7bed1018, ftLastAccessTime.dwHighDateTime=0x1ca0444, ftLastWriteTime.dwLowDateTime=0x8ada520, ftLastWriteTime.dwHighDateTime=0x1d6eb7f, nFileSizeHigh=0x0, nFileSizeLow=0x21fc0)) returned 1 [0062.468] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e710) returned 1 [0062.468] MoveFileW (lpExistingFileName="C:\\ProgramData\\Microsoft\\Windows\\Ringtones\\Ringtone 02.wma" (normalized: "c:\\programdata\\microsoft\\windows\\ringtones\\ringtone 02.wma"), lpNewFileName="C:\\ProgramData\\Microsoft\\Windows\\Ringtones\\Ringtone 02.wma" (normalized: "c:\\programdata\\microsoft\\windows\\ringtones\\ringtone 02.wma")) returned 1 [0062.468] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\Windows\\Ringtones\\Ringtone 03.wma", nBufferLength=0x105, lpBuffer=0x31e194, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\Windows\\Ringtones\\Ringtone 03.wma", lpFilePart=0x0) returned 0x3a [0062.468] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e688) returned 1 [0062.468] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft\\Windows\\Ringtones\\Ringtone 03.wma" (normalized: "c:\\programdata\\microsoft\\windows\\ringtones\\ringtone 03.wma"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x178 [0062.468] GetFileType (hFile=0x178) returned 0x1 [0062.468] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e684) returned 1 [0062.468] GetFileType (hFile=0x178) returned 0x1 [0062.468] GetFileSize (in: hFile=0x178, lpFileSizeHigh=0x31e790 | out: lpFileSizeHigh=0x31e790*=0x0) returned 0x170f9 [0062.469] ReadFile (in: hFile=0x178, lpBuffer=0x36a13e0, nNumberOfBytesToRead=0x170f9, lpNumberOfBytesRead=0x31e73c, lpOverlapped=0x0 | out: lpBuffer=0x36a13e0*, lpNumberOfBytesRead=0x31e73c*=0x170f9, lpOverlapped=0x0) returned 1 [0062.472] CloseHandle (hObject=0x178) returned 1 [0062.487] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\Windows\\Ringtones\\Ringtone 03.wma", nBufferLength=0x105, lpBuffer=0x31e180, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\Windows\\Ringtones\\Ringtone 03.wma", lpFilePart=0x0) returned 0x3a [0062.487] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e674) returned 1 [0062.487] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft\\Windows\\Ringtones\\Ringtone 03.wma" (normalized: "c:\\programdata\\microsoft\\windows\\ringtones\\ringtone 03.wma"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x178 [0062.488] GetFileType (hFile=0x178) returned 0x1 [0062.488] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e670) returned 1 [0062.488] GetFileType (hFile=0x178) returned 0x1 [0062.488] WriteFile (in: hFile=0x178, lpBuffer=0x3714918*, nNumberOfBytesToWrite=0x17100, lpNumberOfBytesWritten=0x31e730, lpOverlapped=0x0 | out: lpBuffer=0x3714918*, lpNumberOfBytesWritten=0x31e730*=0x17100, lpOverlapped=0x0) returned 1 [0062.490] CloseHandle (hObject=0x178) returned 1 [0062.490] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\Windows\\Ringtones\\Ringtone 03.wma", nBufferLength=0x105, lpBuffer=0x31e2b4, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\Windows\\Ringtones\\Ringtone 03.wma", lpFilePart=0x0) returned 0x3a [0062.490] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\Windows\\Ringtones\\Ringtone 03.wma", nBufferLength=0x105, lpBuffer=0x31e2b4, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\Windows\\Ringtones\\Ringtone 03.wma", lpFilePart=0x0) returned 0x3a [0062.490] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e714) returned 1 [0062.491] GetFileAttributesExW (in: lpFileName="C:\\ProgramData\\Microsoft\\Windows\\Ringtones\\Ringtone 03.wma" (normalized: "c:\\programdata\\microsoft\\windows\\ringtones\\ringtone 03.wma"), fInfoLevelId=0x0, lpFileInformation=0x31e790 | out: lpFileInformation=0x31e790*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8038cbd7, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x7bed1018, ftLastAccessTime.dwHighDateTime=0x1ca0444, ftLastWriteTime.dwLowDateTime=0x8b00680, ftLastWriteTime.dwHighDateTime=0x1d6eb7f, nFileSizeHigh=0x0, nFileSizeLow=0x17100)) returned 1 [0062.491] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e710) returned 1 [0062.491] MoveFileW (lpExistingFileName="C:\\ProgramData\\Microsoft\\Windows\\Ringtones\\Ringtone 03.wma" (normalized: "c:\\programdata\\microsoft\\windows\\ringtones\\ringtone 03.wma"), lpNewFileName="C:\\ProgramData\\Microsoft\\Windows\\Ringtones\\Ringtone 03.wma" (normalized: "c:\\programdata\\microsoft\\windows\\ringtones\\ringtone 03.wma")) returned 1 [0062.491] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\Windows\\Ringtones\\Ringtone 04.wma", nBufferLength=0x105, lpBuffer=0x31e194, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\Windows\\Ringtones\\Ringtone 04.wma", lpFilePart=0x0) returned 0x3a [0062.491] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e688) returned 1 [0062.491] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft\\Windows\\Ringtones\\Ringtone 04.wma" (normalized: "c:\\programdata\\microsoft\\windows\\ringtones\\ringtone 04.wma"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x178 [0062.492] GetFileType (hFile=0x178) returned 0x1 [0062.492] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e684) returned 1 [0062.492] GetFileType (hFile=0x178) returned 0x1 [0062.492] GetFileSize (in: hFile=0x178, lpFileSizeHigh=0x31e790 | out: lpFileSizeHigh=0x31e790*=0x0) returned 0x3a039 [0062.492] ReadFile (in: hFile=0x178, lpBuffer=0x372ba38, nNumberOfBytesToRead=0x3a039, lpNumberOfBytesRead=0x31e73c, lpOverlapped=0x0 | out: lpBuffer=0x372ba38*, lpNumberOfBytesRead=0x31e73c*=0x3a039, lpOverlapped=0x0) returned 1 [0062.496] CloseHandle (hObject=0x178) returned 1 [0062.537] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\Windows\\Ringtones\\Ringtone 04.wma", nBufferLength=0x105, lpBuffer=0x31e180, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\Windows\\Ringtones\\Ringtone 04.wma", lpFilePart=0x0) returned 0x3a [0062.537] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e674) returned 1 [0062.537] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft\\Windows\\Ringtones\\Ringtone 04.wma" (normalized: "c:\\programdata\\microsoft\\windows\\ringtones\\ringtone 04.wma"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x178 [0062.539] GetFileType (hFile=0x178) returned 0x1 [0062.539] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e670) returned 1 [0062.539] GetFileType (hFile=0x178) returned 0x1 [0062.539] WriteFile (in: hFile=0x178, lpBuffer=0x384dbb0*, nNumberOfBytesToWrite=0x3a040, lpNumberOfBytesWritten=0x31e730, lpOverlapped=0x0 | out: lpBuffer=0x384dbb0*, lpNumberOfBytesWritten=0x31e730*=0x3a040, lpOverlapped=0x0) returned 1 [0062.544] CloseHandle (hObject=0x178) returned 1 [0062.544] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\Windows\\Ringtones\\Ringtone 04.wma", nBufferLength=0x105, lpBuffer=0x31e2b4, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\Windows\\Ringtones\\Ringtone 04.wma", lpFilePart=0x0) returned 0x3a [0062.544] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\Windows\\Ringtones\\Ringtone 04.wma", nBufferLength=0x105, lpBuffer=0x31e2b4, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\Windows\\Ringtones\\Ringtone 04.wma", lpFilePart=0x0) returned 0x3a [0062.544] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e714) returned 1 [0062.544] GetFileAttributesExW (in: lpFileName="C:\\ProgramData\\Microsoft\\Windows\\Ringtones\\Ringtone 04.wma" (normalized: "c:\\programdata\\microsoft\\windows\\ringtones\\ringtone 04.wma"), fInfoLevelId=0x0, lpFileInformation=0x31e790 | out: lpFileInformation=0x31e790*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x80366a76, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x7bed1018, ftLastAccessTime.dwHighDateTime=0x1ca0444, ftLastWriteTime.dwLowDateTime=0x8b98c00, ftLastWriteTime.dwHighDateTime=0x1d6eb7f, nFileSizeHigh=0x0, nFileSizeLow=0x3a040)) returned 1 [0062.544] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e710) returned 1 [0062.544] MoveFileW (lpExistingFileName="C:\\ProgramData\\Microsoft\\Windows\\Ringtones\\Ringtone 04.wma" (normalized: "c:\\programdata\\microsoft\\windows\\ringtones\\ringtone 04.wma"), lpNewFileName="C:\\ProgramData\\Microsoft\\Windows\\Ringtones\\Ringtone 04.wma" (normalized: "c:\\programdata\\microsoft\\windows\\ringtones\\ringtone 04.wma")) returned 1 [0062.544] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\Windows\\Ringtones\\Ringtone 05.wma", nBufferLength=0x105, lpBuffer=0x31e194, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\Windows\\Ringtones\\Ringtone 05.wma", lpFilePart=0x0) returned 0x3a [0062.544] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e688) returned 1 [0062.545] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft\\Windows\\Ringtones\\Ringtone 05.wma" (normalized: "c:\\programdata\\microsoft\\windows\\ringtones\\ringtone 05.wma"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x178 [0062.545] GetFileType (hFile=0x178) returned 0x1 [0062.545] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e684) returned 1 [0062.545] GetFileType (hFile=0x178) returned 0x1 [0062.545] GetFileSize (in: hFile=0x178, lpFileSizeHigh=0x31e790 | out: lpFileSizeHigh=0x31e790*=0x0) returned 0x1b6e1 [0062.545] ReadFile (in: hFile=0x178, lpBuffer=0x3887c10, nNumberOfBytesToRead=0x1b6e1, lpNumberOfBytesRead=0x31e73c, lpOverlapped=0x0 | out: lpBuffer=0x3887c10*, lpNumberOfBytesRead=0x31e73c*=0x1b6e1, lpOverlapped=0x0) returned 1 [0062.547] CloseHandle (hObject=0x178) returned 1 [0062.564] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\Windows\\Ringtones\\Ringtone 05.wma", nBufferLength=0x105, lpBuffer=0x31e180, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\Windows\\Ringtones\\Ringtone 05.wma", lpFilePart=0x0) returned 0x3a [0062.564] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e674) returned 1 [0062.564] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft\\Windows\\Ringtones\\Ringtone 05.wma" (normalized: "c:\\programdata\\microsoft\\windows\\ringtones\\ringtone 05.wma"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x178 [0062.566] GetFileType (hFile=0x178) returned 0x1 [0062.566] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e670) returned 1 [0062.566] GetFileType (hFile=0x178) returned 0x1 [0062.566] WriteFile (in: hFile=0x178, lpBuffer=0x39606e8*, nNumberOfBytesToWrite=0x1b6f0, lpNumberOfBytesWritten=0x31e730, lpOverlapped=0x0 | out: lpBuffer=0x39606e8*, lpNumberOfBytesWritten=0x31e730*=0x1b6f0, lpOverlapped=0x0) returned 1 [0062.568] CloseHandle (hObject=0x178) returned 1 [0062.570] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\Windows\\Ringtones\\Ringtone 05.wma", nBufferLength=0x105, lpBuffer=0x31e2b4, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\Windows\\Ringtones\\Ringtone 05.wma", lpFilePart=0x0) returned 0x3a [0062.570] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\Windows\\Ringtones\\Ringtone 05.wma", nBufferLength=0x105, lpBuffer=0x31e2b4, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\Windows\\Ringtones\\Ringtone 05.wma", lpFilePart=0x0) returned 0x3a [0062.570] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e714) returned 1 [0062.570] GetFileAttributesExW (in: lpFileName="C:\\ProgramData\\Microsoft\\Windows\\Ringtones\\Ringtone 05.wma" (normalized: "c:\\programdata\\microsoft\\windows\\ringtones\\ringtone 05.wma"), fInfoLevelId=0x0, lpFileInformation=0x31e790 | out: lpFileInformation=0x31e790*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x80366a76, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x7bed1018, ftLastAccessTime.dwHighDateTime=0x1ca0444, ftLastWriteTime.dwLowDateTime=0x8bbed60, ftLastWriteTime.dwHighDateTime=0x1d6eb7f, nFileSizeHigh=0x0, nFileSizeLow=0x1b6f0)) returned 1 [0062.571] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e710) returned 1 [0062.571] MoveFileW (lpExistingFileName="C:\\ProgramData\\Microsoft\\Windows\\Ringtones\\Ringtone 05.wma" (normalized: "c:\\programdata\\microsoft\\windows\\ringtones\\ringtone 05.wma"), lpNewFileName="C:\\ProgramData\\Microsoft\\Windows\\Ringtones\\Ringtone 05.wma" (normalized: "c:\\programdata\\microsoft\\windows\\ringtones\\ringtone 05.wma")) returned 1 [0062.571] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\Windows\\Ringtones\\Ringtone 06.wma", nBufferLength=0x105, lpBuffer=0x31e194, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\Windows\\Ringtones\\Ringtone 06.wma", lpFilePart=0x0) returned 0x3a [0062.571] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e688) returned 1 [0062.571] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft\\Windows\\Ringtones\\Ringtone 06.wma" (normalized: "c:\\programdata\\microsoft\\windows\\ringtones\\ringtone 06.wma"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x178 [0062.572] GetFileType (hFile=0x178) returned 0x1 [0062.572] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e684) returned 1 [0062.572] GetFileType (hFile=0x178) returned 0x1 [0062.572] GetFileSize (in: hFile=0x178, lpFileSizeHigh=0x31e790 | out: lpFileSizeHigh=0x31e790*=0x0) returned 0x170f9 [0062.576] ReadFile (in: hFile=0x178, lpBuffer=0x36194b0, nNumberOfBytesToRead=0x170f9, lpNumberOfBytesRead=0x31e73c, lpOverlapped=0x0 | out: lpBuffer=0x36194b0*, lpNumberOfBytesRead=0x31e73c*=0x170f9, lpOverlapped=0x0) returned 1 [0062.578] CloseHandle (hObject=0x178) returned 1 [0062.624] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\Windows\\Ringtones\\Ringtone 06.wma", nBufferLength=0x105, lpBuffer=0x31e180, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\Windows\\Ringtones\\Ringtone 06.wma", lpFilePart=0x0) returned 0x3a [0062.624] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e674) returned 1 [0062.624] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft\\Windows\\Ringtones\\Ringtone 06.wma" (normalized: "c:\\programdata\\microsoft\\windows\\ringtones\\ringtone 06.wma"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x178 [0062.625] GetFileType (hFile=0x178) returned 0x1 [0062.625] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e670) returned 1 [0062.626] GetFileType (hFile=0x178) returned 0x1 [0062.626] WriteFile (in: hFile=0x178, lpBuffer=0x368c9e8*, nNumberOfBytesToWrite=0x17100, lpNumberOfBytesWritten=0x31e730, lpOverlapped=0x0 | out: lpBuffer=0x368c9e8*, lpNumberOfBytesWritten=0x31e730*=0x17100, lpOverlapped=0x0) returned 1 [0062.628] CloseHandle (hObject=0x178) returned 1 [0062.628] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\Windows\\Ringtones\\Ringtone 06.wma", nBufferLength=0x105, lpBuffer=0x31e2b4, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\Windows\\Ringtones\\Ringtone 06.wma", lpFilePart=0x0) returned 0x3a [0062.628] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\Windows\\Ringtones\\Ringtone 06.wma", nBufferLength=0x105, lpBuffer=0x31e2b4, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\Windows\\Ringtones\\Ringtone 06.wma", lpFilePart=0x0) returned 0x3a [0062.628] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e714) returned 1 [0062.628] GetFileAttributesExW (in: lpFileName="C:\\ProgramData\\Microsoft\\Windows\\Ringtones\\Ringtone 06.wma" (normalized: "c:\\programdata\\microsoft\\windows\\ringtones\\ringtone 06.wma"), fInfoLevelId=0x0, lpFileInformation=0x31e790 | out: lpFileInformation=0x31e790*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8038cbd7, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x7bed1018, ftLastAccessTime.dwHighDateTime=0x1ca0444, ftLastWriteTime.dwLowDateTime=0x8c572e0, ftLastWriteTime.dwHighDateTime=0x1d6eb7f, nFileSizeHigh=0x0, nFileSizeLow=0x17100)) returned 1 [0062.628] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e710) returned 1 [0062.628] MoveFileW (lpExistingFileName="C:\\ProgramData\\Microsoft\\Windows\\Ringtones\\Ringtone 06.wma" (normalized: "c:\\programdata\\microsoft\\windows\\ringtones\\ringtone 06.wma"), lpNewFileName="C:\\ProgramData\\Microsoft\\Windows\\Ringtones\\Ringtone 06.wma" (normalized: "c:\\programdata\\microsoft\\windows\\ringtones\\ringtone 06.wma")) returned 1 [0062.628] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\Windows\\Ringtones\\Ringtone 07.wma", nBufferLength=0x105, lpBuffer=0x31e194, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\Windows\\Ringtones\\Ringtone 07.wma", lpFilePart=0x0) returned 0x3a [0062.628] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e688) returned 1 [0062.628] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft\\Windows\\Ringtones\\Ringtone 07.wma" (normalized: "c:\\programdata\\microsoft\\windows\\ringtones\\ringtone 07.wma"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x178 [0062.629] GetFileType (hFile=0x178) returned 0x1 [0062.629] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e684) returned 1 [0062.629] GetFileType (hFile=0x178) returned 0x1 [0062.629] GetFileSize (in: hFile=0x178, lpFileSizeHigh=0x31e790 | out: lpFileSizeHigh=0x31e790*=0x0) returned 0x170f9 [0062.629] ReadFile (in: hFile=0x178, lpBuffer=0x36a3b08, nNumberOfBytesToRead=0x170f9, lpNumberOfBytesRead=0x31e73c, lpOverlapped=0x0 | out: lpBuffer=0x36a3b08*, lpNumberOfBytesRead=0x31e73c*=0x170f9, lpOverlapped=0x0) returned 1 [0062.632] CloseHandle (hObject=0x178) returned 1 [0062.649] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\Windows\\Ringtones\\Ringtone 07.wma", nBufferLength=0x105, lpBuffer=0x31e180, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\Windows\\Ringtones\\Ringtone 07.wma", lpFilePart=0x0) returned 0x3a [0062.649] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e674) returned 1 [0062.649] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft\\Windows\\Ringtones\\Ringtone 07.wma" (normalized: "c:\\programdata\\microsoft\\windows\\ringtones\\ringtone 07.wma"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x178 [0062.651] GetFileType (hFile=0x178) returned 0x1 [0062.651] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e670) returned 1 [0062.651] GetFileType (hFile=0x178) returned 0x1 [0062.651] WriteFile (in: hFile=0x178, lpBuffer=0x3717040*, nNumberOfBytesToWrite=0x17100, lpNumberOfBytesWritten=0x31e730, lpOverlapped=0x0 | out: lpBuffer=0x3717040*, lpNumberOfBytesWritten=0x31e730*=0x17100, lpOverlapped=0x0) returned 1 [0062.653] CloseHandle (hObject=0x178) returned 1 [0062.653] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\Windows\\Ringtones\\Ringtone 07.wma", nBufferLength=0x105, lpBuffer=0x31e2b4, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\Windows\\Ringtones\\Ringtone 07.wma", lpFilePart=0x0) returned 0x3a [0062.653] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\Windows\\Ringtones\\Ringtone 07.wma", nBufferLength=0x105, lpBuffer=0x31e2b4, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\Windows\\Ringtones\\Ringtone 07.wma", lpFilePart=0x0) returned 0x3a [0062.653] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e714) returned 1 [0062.653] GetFileAttributesExW (in: lpFileName="C:\\ProgramData\\Microsoft\\Windows\\Ringtones\\Ringtone 07.wma" (normalized: "c:\\programdata\\microsoft\\windows\\ringtones\\ringtone 07.wma"), fInfoLevelId=0x0, lpFileInformation=0x31e790 | out: lpFileInformation=0x31e790*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x80366a76, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x7bed1018, ftLastAccessTime.dwHighDateTime=0x1ca0444, ftLastWriteTime.dwLowDateTime=0x8ca35a0, ftLastWriteTime.dwHighDateTime=0x1d6eb7f, nFileSizeHigh=0x0, nFileSizeLow=0x17100)) returned 1 [0062.653] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e710) returned 1 [0062.653] MoveFileW (lpExistingFileName="C:\\ProgramData\\Microsoft\\Windows\\Ringtones\\Ringtone 07.wma" (normalized: "c:\\programdata\\microsoft\\windows\\ringtones\\ringtone 07.wma"), lpNewFileName="C:\\ProgramData\\Microsoft\\Windows\\Ringtones\\Ringtone 07.wma" (normalized: "c:\\programdata\\microsoft\\windows\\ringtones\\ringtone 07.wma")) returned 1 [0062.654] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\Windows\\Ringtones\\Ringtone 08.wma", nBufferLength=0x105, lpBuffer=0x31e194, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\Windows\\Ringtones\\Ringtone 08.wma", lpFilePart=0x0) returned 0x3a [0062.654] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e688) returned 1 [0062.654] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft\\Windows\\Ringtones\\Ringtone 08.wma" (normalized: "c:\\programdata\\microsoft\\windows\\ringtones\\ringtone 08.wma"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x178 [0062.655] GetFileType (hFile=0x178) returned 0x1 [0062.655] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e684) returned 1 [0062.655] GetFileType (hFile=0x178) returned 0x1 [0062.655] GetFileSize (in: hFile=0x178, lpFileSizeHigh=0x31e790 | out: lpFileSizeHigh=0x31e790*=0x0) returned 0x21fbd [0062.656] ReadFile (in: hFile=0x178, lpBuffer=0x372e160, nNumberOfBytesToRead=0x21fbd, lpNumberOfBytesRead=0x31e73c, lpOverlapped=0x0 | out: lpBuffer=0x372e160*, lpNumberOfBytesRead=0x31e73c*=0x21fbd, lpOverlapped=0x0) returned 1 [0062.659] CloseHandle (hObject=0x178) returned 1 [0062.680] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\Windows\\Ringtones\\Ringtone 08.wma", nBufferLength=0x105, lpBuffer=0x31e180, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\Windows\\Ringtones\\Ringtone 08.wma", lpFilePart=0x0) returned 0x3a [0062.680] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e674) returned 1 [0062.680] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft\\Windows\\Ringtones\\Ringtone 08.wma" (normalized: "c:\\programdata\\microsoft\\windows\\ringtones\\ringtone 08.wma"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x178 [0062.682] GetFileType (hFile=0x178) returned 0x1 [0062.682] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e670) returned 1 [0062.682] GetFileType (hFile=0x178) returned 0x1 [0062.682] WriteFile (in: hFile=0x178, lpBuffer=0x37d8060*, nNumberOfBytesToWrite=0x21fc0, lpNumberOfBytesWritten=0x31e730, lpOverlapped=0x0 | out: lpBuffer=0x37d8060*, lpNumberOfBytesWritten=0x31e730*=0x21fc0, lpOverlapped=0x0) returned 1 [0062.685] CloseHandle (hObject=0x178) returned 1 [0062.685] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\Windows\\Ringtones\\Ringtone 08.wma", nBufferLength=0x105, lpBuffer=0x31e2b4, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\Windows\\Ringtones\\Ringtone 08.wma", lpFilePart=0x0) returned 0x3a [0062.685] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\Windows\\Ringtones\\Ringtone 08.wma", nBufferLength=0x105, lpBuffer=0x31e2b4, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\Windows\\Ringtones\\Ringtone 08.wma", lpFilePart=0x0) returned 0x3a [0062.685] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e714) returned 1 [0062.685] GetFileAttributesExW (in: lpFileName="C:\\ProgramData\\Microsoft\\Windows\\Ringtones\\Ringtone 08.wma" (normalized: "c:\\programdata\\microsoft\\windows\\ringtones\\ringtone 08.wma"), fInfoLevelId=0x0, lpFileInformation=0x31e790 | out: lpFileInformation=0x31e790*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x80366a76, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x7bed1018, ftLastAccessTime.dwHighDateTime=0x1ca0444, ftLastWriteTime.dwLowDateTime=0x8cef860, ftLastWriteTime.dwHighDateTime=0x1d6eb7f, nFileSizeHigh=0x0, nFileSizeLow=0x21fc0)) returned 1 [0062.685] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e710) returned 1 [0062.685] MoveFileW (lpExistingFileName="C:\\ProgramData\\Microsoft\\Windows\\Ringtones\\Ringtone 08.wma" (normalized: "c:\\programdata\\microsoft\\windows\\ringtones\\ringtone 08.wma"), lpNewFileName="C:\\ProgramData\\Microsoft\\Windows\\Ringtones\\Ringtone 08.wma" (normalized: "c:\\programdata\\microsoft\\windows\\ringtones\\ringtone 08.wma")) returned 1 [0062.685] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\Windows\\Ringtones\\Ringtone 09.wma", nBufferLength=0x105, lpBuffer=0x31e194, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\Windows\\Ringtones\\Ringtone 09.wma", lpFilePart=0x0) returned 0x3a [0062.685] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e688) returned 1 [0062.685] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft\\Windows\\Ringtones\\Ringtone 09.wma" (normalized: "c:\\programdata\\microsoft\\windows\\ringtones\\ringtone 09.wma"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x178 [0062.686] GetFileType (hFile=0x178) returned 0x1 [0062.686] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e684) returned 1 [0062.686] GetFileType (hFile=0x178) returned 0x1 [0062.686] GetFileSize (in: hFile=0x178, lpFileSizeHigh=0x31e790 | out: lpFileSizeHigh=0x31e790*=0x0) returned 0x1b6e1 [0062.686] ReadFile (in: hFile=0x178, lpBuffer=0x37fa040, nNumberOfBytesToRead=0x1b6e1, lpNumberOfBytesRead=0x31e73c, lpOverlapped=0x0 | out: lpBuffer=0x37fa040*, lpNumberOfBytesRead=0x31e73c*=0x1b6e1, lpOverlapped=0x0) returned 1 [0062.690] CloseHandle (hObject=0x178) returned 1 [0062.709] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\Windows\\Ringtones\\Ringtone 09.wma", nBufferLength=0x105, lpBuffer=0x31e180, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\Windows\\Ringtones\\Ringtone 09.wma", lpFilePart=0x0) returned 0x3a [0062.709] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e674) returned 1 [0062.709] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft\\Windows\\Ringtones\\Ringtone 09.wma" (normalized: "c:\\programdata\\microsoft\\windows\\ringtones\\ringtone 09.wma"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x178 [0062.711] GetFileType (hFile=0x178) returned 0x1 [0062.711] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e670) returned 1 [0062.711] GetFileType (hFile=0x178) returned 0x1 [0062.711] WriteFile (in: hFile=0x178, lpBuffer=0x3883320*, nNumberOfBytesToWrite=0x1b6f0, lpNumberOfBytesWritten=0x31e730, lpOverlapped=0x0 | out: lpBuffer=0x3883320*, lpNumberOfBytesWritten=0x31e730*=0x1b6f0, lpOverlapped=0x0) returned 1 [0062.713] CloseHandle (hObject=0x178) returned 1 [0062.714] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\Windows\\Ringtones\\Ringtone 09.wma", nBufferLength=0x105, lpBuffer=0x31e2b4, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\Windows\\Ringtones\\Ringtone 09.wma", lpFilePart=0x0) returned 0x3a [0062.714] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\Windows\\Ringtones\\Ringtone 09.wma", nBufferLength=0x105, lpBuffer=0x31e2b4, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\Windows\\Ringtones\\Ringtone 09.wma", lpFilePart=0x0) returned 0x3a [0062.714] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e714) returned 1 [0062.714] GetFileAttributesExW (in: lpFileName="C:\\ProgramData\\Microsoft\\Windows\\Ringtones\\Ringtone 09.wma" (normalized: "c:\\programdata\\microsoft\\windows\\ringtones\\ringtone 09.wma"), fInfoLevelId=0x0, lpFileInformation=0x31e790 | out: lpFileInformation=0x31e790*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8038cbd7, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x7bed1018, ftLastAccessTime.dwHighDateTime=0x1ca0444, ftLastWriteTime.dwLowDateTime=0x8d3bb20, ftLastWriteTime.dwHighDateTime=0x1d6eb7f, nFileSizeHigh=0x0, nFileSizeLow=0x1b6f0)) returned 1 [0062.714] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e710) returned 1 [0062.714] MoveFileW (lpExistingFileName="C:\\ProgramData\\Microsoft\\Windows\\Ringtones\\Ringtone 09.wma" (normalized: "c:\\programdata\\microsoft\\windows\\ringtones\\ringtone 09.wma"), lpNewFileName="C:\\ProgramData\\Microsoft\\Windows\\Ringtones\\Ringtone 09.wma" (normalized: "c:\\programdata\\microsoft\\windows\\ringtones\\ringtone 09.wma")) returned 1 [0062.714] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\Windows\\Ringtones\\Ringtone 10.wma", nBufferLength=0x105, lpBuffer=0x31e194, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\Windows\\Ringtones\\Ringtone 10.wma", lpFilePart=0x0) returned 0x3a [0062.714] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e688) returned 1 [0062.714] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft\\Windows\\Ringtones\\Ringtone 10.wma" (normalized: "c:\\programdata\\microsoft\\windows\\ringtones\\ringtone 10.wma"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x178 [0062.714] GetFileType (hFile=0x178) returned 0x1 [0062.714] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e684) returned 1 [0062.715] GetFileType (hFile=0x178) returned 0x1 [0062.715] GetFileSize (in: hFile=0x178, lpFileSizeHigh=0x31e790 | out: lpFileSizeHigh=0x31e790*=0x0) returned 0x170f9 [0062.715] ReadFile (in: hFile=0x178, lpBuffer=0x389ea30, nNumberOfBytesToRead=0x170f9, lpNumberOfBytesRead=0x31e73c, lpOverlapped=0x0 | out: lpBuffer=0x389ea30*, lpNumberOfBytesRead=0x31e73c*=0x170f9, lpOverlapped=0x0) returned 1 [0062.719] CloseHandle (hObject=0x178) returned 1 [0062.738] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\Windows\\Ringtones\\Ringtone 10.wma", nBufferLength=0x105, lpBuffer=0x31e180, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\Windows\\Ringtones\\Ringtone 10.wma", lpFilePart=0x0) returned 0x3a [0062.738] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e674) returned 1 [0062.738] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft\\Windows\\Ringtones\\Ringtone 10.wma" (normalized: "c:\\programdata\\microsoft\\windows\\ringtones\\ringtone 10.wma"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x178 [0062.740] GetFileType (hFile=0x178) returned 0x1 [0062.740] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e670) returned 1 [0062.740] GetFileType (hFile=0x178) returned 0x1 [0062.740] WriteFile (in: hFile=0x178, lpBuffer=0x3911f68*, nNumberOfBytesToWrite=0x17100, lpNumberOfBytesWritten=0x31e730, lpOverlapped=0x0 | out: lpBuffer=0x3911f68*, lpNumberOfBytesWritten=0x31e730*=0x17100, lpOverlapped=0x0) returned 1 [0062.742] CloseHandle (hObject=0x178) returned 1 [0062.742] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\Windows\\Ringtones\\Ringtone 10.wma", nBufferLength=0x105, lpBuffer=0x31e2b4, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\Windows\\Ringtones\\Ringtone 10.wma", lpFilePart=0x0) returned 0x3a [0062.742] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\Windows\\Ringtones\\Ringtone 10.wma", nBufferLength=0x105, lpBuffer=0x31e2b4, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\Windows\\Ringtones\\Ringtone 10.wma", lpFilePart=0x0) returned 0x3a [0062.742] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e714) returned 1 [0062.742] GetFileAttributesExW (in: lpFileName="C:\\ProgramData\\Microsoft\\Windows\\Ringtones\\Ringtone 10.wma" (normalized: "c:\\programdata\\microsoft\\windows\\ringtones\\ringtone 10.wma"), fInfoLevelId=0x0, lpFileInformation=0x31e790 | out: lpFileInformation=0x31e790*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8038cbd7, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x7bed1018, ftLastAccessTime.dwHighDateTime=0x1ca0444, ftLastWriteTime.dwLowDateTime=0x8d61c80, ftLastWriteTime.dwHighDateTime=0x1d6eb7f, nFileSizeHigh=0x0, nFileSizeLow=0x17100)) returned 1 [0062.742] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e710) returned 1 [0062.742] MoveFileW (lpExistingFileName="C:\\ProgramData\\Microsoft\\Windows\\Ringtones\\Ringtone 10.wma" (normalized: "c:\\programdata\\microsoft\\windows\\ringtones\\ringtone 10.wma"), lpNewFileName="C:\\ProgramData\\Microsoft\\Windows\\Ringtones\\Ringtone 10.wma" (normalized: "c:\\programdata\\microsoft\\windows\\ringtones\\ringtone 10.wma")) returned 1 [0062.743] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e7bc) returned 1 [0062.743] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\Windows\\Sqm", nBufferLength=0x105, lpBuffer=0x31e2c4, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\Windows\\Sqm", lpFilePart=0x0) returned 0x24 [0062.743] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\Windows\\Sqm\\", nBufferLength=0x105, lpBuffer=0x31e298, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\Windows\\Sqm\\", lpFilePart=0x0) returned 0x25 [0062.743] FindFirstFileW (in: lpFileName="C:\\ProgramData\\Microsoft\\Windows\\Sqm\\*", lpFindFileData=0x31e4e4 | out: lpFindFileData=0x31e4e4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x60ae73a0, ftCreationTime.dwHighDateTime=0x1d2de2a, ftLastAccessTime.dwLowDateTime=0x60ae73a0, ftLastAccessTime.dwHighDateTime=0x1d2de2a, ftLastWriteTime.dwLowDateTime=0x60ae73a0, ftLastWriteTime.dwHighDateTime=0x1d2de2a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x381dc0 [0062.744] FindNextFileW (in: hFindFile=0x381dc0, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x60ae73a0, ftCreationTime.dwHighDateTime=0x1d2de2a, ftLastAccessTime.dwLowDateTime=0x60ae73a0, ftLastAccessTime.dwHighDateTime=0x1d2de2a, ftLastWriteTime.dwLowDateTime=0x60ae73a0, ftLastWriteTime.dwHighDateTime=0x1d2de2a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0062.744] FindNextFileW (in: hFindFile=0x381dc0, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x60ae73a0, ftCreationTime.dwHighDateTime=0x1d2de2a, ftLastAccessTime.dwLowDateTime=0x60ae73a0, ftLastAccessTime.dwHighDateTime=0x1d2de2a, ftLastWriteTime.dwLowDateTime=0x60ae73a0, ftLastWriteTime.dwHighDateTime=0x1d2de2a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Manifest", cAlternateFileName="")) returned 1 [0062.744] FindNextFileW (in: hFindFile=0x381dc0, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x60ae73a0, ftCreationTime.dwHighDateTime=0x1d2de2a, ftLastAccessTime.dwLowDateTime=0x60ae73a0, ftLastAccessTime.dwHighDateTime=0x1d2de2a, ftLastWriteTime.dwLowDateTime=0x60ae73a0, ftLastWriteTime.dwHighDateTime=0x1d2de2a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Sessions", cAlternateFileName="")) returned 1 [0062.744] FindNextFileW (in: hFindFile=0x381dc0, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x60ae73a0, ftCreationTime.dwHighDateTime=0x1d2de2a, ftLastAccessTime.dwLowDateTime=0x60ae73a0, ftLastAccessTime.dwHighDateTime=0x1d2de2a, ftLastWriteTime.dwLowDateTime=0x60ae73a0, ftLastWriteTime.dwHighDateTime=0x1d2de2a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Upload", cAlternateFileName="")) returned 1 [0062.744] FindNextFileW (in: hFindFile=0x381dc0, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x60ae73a0, ftCreationTime.dwHighDateTime=0x1d2de2a, ftLastAccessTime.dwLowDateTime=0x60ae73a0, ftLastAccessTime.dwHighDateTime=0x1d2de2a, ftLastWriteTime.dwLowDateTime=0x60ae73a0, ftLastWriteTime.dwHighDateTime=0x1d2de2a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Upload", cAlternateFileName="")) returned 0 [0062.744] FindClose (in: hFindFile=0x381dc0 | out: hFindFile=0x381dc0) returned 1 [0062.746] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e77c) returned 1 [0062.746] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e788) returned 1 [0062.746] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e7bc) returned 1 [0062.747] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\Windows\\Sqm", nBufferLength=0x105, lpBuffer=0x31e2c4, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\Windows\\Sqm", lpFilePart=0x0) returned 0x24 [0062.747] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\Windows\\Sqm\\", nBufferLength=0x105, lpBuffer=0x31e298, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\Windows\\Sqm\\", lpFilePart=0x0) returned 0x25 [0062.747] FindFirstFileW (in: lpFileName="C:\\ProgramData\\Microsoft\\Windows\\Sqm\\*", lpFindFileData=0x31e4e4 | out: lpFindFileData=0x31e4e4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x60ae73a0, ftCreationTime.dwHighDateTime=0x1d2de2a, ftLastAccessTime.dwLowDateTime=0x60ae73a0, ftLastAccessTime.dwHighDateTime=0x1d2de2a, ftLastWriteTime.dwLowDateTime=0x60ae73a0, ftLastWriteTime.dwHighDateTime=0x1d2de2a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x381dc0 [0062.747] FindNextFileW (in: hFindFile=0x381dc0, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x60ae73a0, ftCreationTime.dwHighDateTime=0x1d2de2a, ftLastAccessTime.dwLowDateTime=0x60ae73a0, ftLastAccessTime.dwHighDateTime=0x1d2de2a, ftLastWriteTime.dwLowDateTime=0x60ae73a0, ftLastWriteTime.dwHighDateTime=0x1d2de2a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0062.747] FindNextFileW (in: hFindFile=0x381dc0, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x60ae73a0, ftCreationTime.dwHighDateTime=0x1d2de2a, ftLastAccessTime.dwLowDateTime=0x60ae73a0, ftLastAccessTime.dwHighDateTime=0x1d2de2a, ftLastWriteTime.dwLowDateTime=0x60ae73a0, ftLastWriteTime.dwHighDateTime=0x1d2de2a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Manifest", cAlternateFileName="")) returned 1 [0062.747] FindNextFileW (in: hFindFile=0x381dc0, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x60ae73a0, ftCreationTime.dwHighDateTime=0x1d2de2a, ftLastAccessTime.dwLowDateTime=0x60ae73a0, ftLastAccessTime.dwHighDateTime=0x1d2de2a, ftLastWriteTime.dwLowDateTime=0x60ae73a0, ftLastWriteTime.dwHighDateTime=0x1d2de2a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Sessions", cAlternateFileName="")) returned 1 [0062.747] FindNextFileW (in: hFindFile=0x381dc0, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x60ae73a0, ftCreationTime.dwHighDateTime=0x1d2de2a, ftLastAccessTime.dwLowDateTime=0x60ae73a0, ftLastAccessTime.dwHighDateTime=0x1d2de2a, ftLastWriteTime.dwLowDateTime=0x60ae73a0, ftLastWriteTime.dwHighDateTime=0x1d2de2a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Upload", cAlternateFileName="")) returned 1 [0062.747] FindNextFileW (in: hFindFile=0x381dc0, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0062.748] FindClose (in: hFindFile=0x381dc0 | out: hFindFile=0x381dc0) returned 1 [0062.748] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e77c) returned 1 [0062.748] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e788) returned 1 [0062.748] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e744) returned 1 [0062.748] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\Windows\\Sqm\\Manifest", nBufferLength=0x105, lpBuffer=0x31e24c, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\Windows\\Sqm\\Manifest", lpFilePart=0x0) returned 0x2d [0062.748] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\Windows\\Sqm\\Manifest\\", nBufferLength=0x105, lpBuffer=0x31e220, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\Windows\\Sqm\\Manifest\\", lpFilePart=0x0) returned 0x2e [0062.748] FindFirstFileW (in: lpFileName="C:\\ProgramData\\Microsoft\\Windows\\Sqm\\Manifest\\*", lpFindFileData=0x31e46c | out: lpFindFileData=0x31e46c*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x60ae73a0, ftCreationTime.dwHighDateTime=0x1d2de2a, ftLastAccessTime.dwLowDateTime=0x60ae73a0, ftLastAccessTime.dwHighDateTime=0x1d2de2a, ftLastWriteTime.dwLowDateTime=0x60ae73a0, ftLastWriteTime.dwHighDateTime=0x1d2de2a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x381dc0 [0062.748] FindNextFileW (in: hFindFile=0x381dc0, lpFindFileData=0x31e47c | out: lpFindFileData=0x31e47c*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x60ae73a0, ftCreationTime.dwHighDateTime=0x1d2de2a, ftLastAccessTime.dwLowDateTime=0x60ae73a0, ftLastAccessTime.dwHighDateTime=0x1d2de2a, ftLastWriteTime.dwLowDateTime=0x60ae73a0, ftLastWriteTime.dwHighDateTime=0x1d2de2a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0062.748] FindNextFileW (in: hFindFile=0x381dc0, lpFindFileData=0x31e47c | out: lpFindFileData=0x31e47c*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x60ae73a0, ftCreationTime.dwHighDateTime=0x1d2de2a, ftLastAccessTime.dwLowDateTime=0x60ae73a0, ftLastAccessTime.dwHighDateTime=0x1d2de2a, ftLastWriteTime.dwLowDateTime=0x60ae73a0, ftLastWriteTime.dwHighDateTime=0x1d2de2a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 0 [0062.748] FindClose (in: hFindFile=0x381dc0 | out: hFindFile=0x381dc0) returned 1 [0062.748] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e704) returned 1 [0062.748] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e710) returned 1 [0062.749] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e744) returned 1 [0062.749] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\Windows\\Sqm\\Manifest", nBufferLength=0x105, lpBuffer=0x31e24c, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\Windows\\Sqm\\Manifest", lpFilePart=0x0) returned 0x2d [0062.749] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\Windows\\Sqm\\Manifest\\", nBufferLength=0x105, lpBuffer=0x31e220, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\Windows\\Sqm\\Manifest\\", lpFilePart=0x0) returned 0x2e [0062.749] FindFirstFileW (in: lpFileName="C:\\ProgramData\\Microsoft\\Windows\\Sqm\\Manifest\\*", lpFindFileData=0x31e46c | out: lpFindFileData=0x31e46c*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x60ae73a0, ftCreationTime.dwHighDateTime=0x1d2de2a, ftLastAccessTime.dwLowDateTime=0x60ae73a0, ftLastAccessTime.dwHighDateTime=0x1d2de2a, ftLastWriteTime.dwLowDateTime=0x60ae73a0, ftLastWriteTime.dwHighDateTime=0x1d2de2a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x381dc0 [0062.749] FindNextFileW (in: hFindFile=0x381dc0, lpFindFileData=0x31e47c | out: lpFindFileData=0x31e47c*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x60ae73a0, ftCreationTime.dwHighDateTime=0x1d2de2a, ftLastAccessTime.dwLowDateTime=0x60ae73a0, ftLastAccessTime.dwHighDateTime=0x1d2de2a, ftLastWriteTime.dwLowDateTime=0x60ae73a0, ftLastWriteTime.dwHighDateTime=0x1d2de2a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0062.749] FindNextFileW (in: hFindFile=0x381dc0, lpFindFileData=0x31e47c | out: lpFindFileData=0x31e47c*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x60ae73a0, ftCreationTime.dwHighDateTime=0x1d2de2a, ftLastAccessTime.dwLowDateTime=0x60ae73a0, ftLastAccessTime.dwHighDateTime=0x1d2de2a, ftLastWriteTime.dwLowDateTime=0x60ae73a0, ftLastWriteTime.dwHighDateTime=0x1d2de2a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 0 [0062.749] FindClose (in: hFindFile=0x381dc0 | out: hFindFile=0x381dc0) returned 1 [0062.749] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e704) returned 1 [0062.749] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e710) returned 1 [0062.749] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e744) returned 1 [0062.749] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\Windows\\Sqm\\Sessions", nBufferLength=0x105, lpBuffer=0x31e24c, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\Windows\\Sqm\\Sessions", lpFilePart=0x0) returned 0x2d [0062.749] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\Windows\\Sqm\\Sessions\\", nBufferLength=0x105, lpBuffer=0x31e220, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\Windows\\Sqm\\Sessions\\", lpFilePart=0x0) returned 0x2e [0062.750] FindFirstFileW (in: lpFileName="C:\\ProgramData\\Microsoft\\Windows\\Sqm\\Sessions\\*", lpFindFileData=0x31e46c | out: lpFindFileData=0x31e46c*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x60ae73a0, ftCreationTime.dwHighDateTime=0x1d2de2a, ftLastAccessTime.dwLowDateTime=0x60ae73a0, ftLastAccessTime.dwHighDateTime=0x1d2de2a, ftLastWriteTime.dwLowDateTime=0x60ae73a0, ftLastWriteTime.dwHighDateTime=0x1d2de2a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x381dc0 [0062.750] FindNextFileW (in: hFindFile=0x381dc0, lpFindFileData=0x31e47c | out: lpFindFileData=0x31e47c*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x60ae73a0, ftCreationTime.dwHighDateTime=0x1d2de2a, ftLastAccessTime.dwLowDateTime=0x60ae73a0, ftLastAccessTime.dwHighDateTime=0x1d2de2a, ftLastWriteTime.dwLowDateTime=0x60ae73a0, ftLastWriteTime.dwHighDateTime=0x1d2de2a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0062.750] FindNextFileW (in: hFindFile=0x381dc0, lpFindFileData=0x31e47c | out: lpFindFileData=0x31e47c*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x60ae73a0, ftCreationTime.dwHighDateTime=0x1d2de2a, ftLastAccessTime.dwLowDateTime=0x60ae73a0, ftLastAccessTime.dwHighDateTime=0x1d2de2a, ftLastWriteTime.dwLowDateTime=0x60ae73a0, ftLastWriteTime.dwHighDateTime=0x1d2de2a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 0 [0062.750] FindClose (in: hFindFile=0x381dc0 | out: hFindFile=0x381dc0) returned 1 [0062.750] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e704) returned 1 [0062.750] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e710) returned 1 [0062.750] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e744) returned 1 [0062.750] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\Windows\\Sqm\\Sessions", nBufferLength=0x105, lpBuffer=0x31e24c, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\Windows\\Sqm\\Sessions", lpFilePart=0x0) returned 0x2d [0062.750] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\Windows\\Sqm\\Sessions\\", nBufferLength=0x105, lpBuffer=0x31e220, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\Windows\\Sqm\\Sessions\\", lpFilePart=0x0) returned 0x2e [0062.750] FindFirstFileW (in: lpFileName="C:\\ProgramData\\Microsoft\\Windows\\Sqm\\Sessions\\*", lpFindFileData=0x31e46c | out: lpFindFileData=0x31e46c*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x60ae73a0, ftCreationTime.dwHighDateTime=0x1d2de2a, ftLastAccessTime.dwLowDateTime=0x60ae73a0, ftLastAccessTime.dwHighDateTime=0x1d2de2a, ftLastWriteTime.dwLowDateTime=0x60ae73a0, ftLastWriteTime.dwHighDateTime=0x1d2de2a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x381dc0 [0062.751] FindNextFileW (in: hFindFile=0x381dc0, lpFindFileData=0x31e47c | out: lpFindFileData=0x31e47c*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x60ae73a0, ftCreationTime.dwHighDateTime=0x1d2de2a, ftLastAccessTime.dwLowDateTime=0x60ae73a0, ftLastAccessTime.dwHighDateTime=0x1d2de2a, ftLastWriteTime.dwLowDateTime=0x60ae73a0, ftLastWriteTime.dwHighDateTime=0x1d2de2a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0062.751] FindNextFileW (in: hFindFile=0x381dc0, lpFindFileData=0x31e47c | out: lpFindFileData=0x31e47c*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x60ae73a0, ftCreationTime.dwHighDateTime=0x1d2de2a, ftLastAccessTime.dwLowDateTime=0x60ae73a0, ftLastAccessTime.dwHighDateTime=0x1d2de2a, ftLastWriteTime.dwLowDateTime=0x60ae73a0, ftLastWriteTime.dwHighDateTime=0x1d2de2a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 0 [0062.751] FindClose (in: hFindFile=0x381dc0 | out: hFindFile=0x381dc0) returned 1 [0062.751] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e704) returned 1 [0062.751] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e710) returned 1 [0062.751] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e744) returned 1 [0062.751] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\Windows\\Sqm\\Upload", nBufferLength=0x105, lpBuffer=0x31e24c, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\Windows\\Sqm\\Upload", lpFilePart=0x0) returned 0x2b [0062.751] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\Windows\\Sqm\\Upload\\", nBufferLength=0x105, lpBuffer=0x31e220, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\Windows\\Sqm\\Upload\\", lpFilePart=0x0) returned 0x2c [0062.751] FindFirstFileW (in: lpFileName="C:\\ProgramData\\Microsoft\\Windows\\Sqm\\Upload\\*", lpFindFileData=0x31e46c | out: lpFindFileData=0x31e46c*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x60ae73a0, ftCreationTime.dwHighDateTime=0x1d2de2a, ftLastAccessTime.dwLowDateTime=0x60ae73a0, ftLastAccessTime.dwHighDateTime=0x1d2de2a, ftLastWriteTime.dwLowDateTime=0x60ae73a0, ftLastWriteTime.dwHighDateTime=0x1d2de2a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x381dc0 [0062.751] FindNextFileW (in: hFindFile=0x381dc0, lpFindFileData=0x31e47c | out: lpFindFileData=0x31e47c*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x60ae73a0, ftCreationTime.dwHighDateTime=0x1d2de2a, ftLastAccessTime.dwLowDateTime=0x60ae73a0, ftLastAccessTime.dwHighDateTime=0x1d2de2a, ftLastWriteTime.dwLowDateTime=0x60ae73a0, ftLastWriteTime.dwHighDateTime=0x1d2de2a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0062.752] FindNextFileW (in: hFindFile=0x381dc0, lpFindFileData=0x31e47c | out: lpFindFileData=0x31e47c*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x60ae73a0, ftCreationTime.dwHighDateTime=0x1d2de2a, ftLastAccessTime.dwLowDateTime=0x60ae73a0, ftLastAccessTime.dwHighDateTime=0x1d2de2a, ftLastWriteTime.dwLowDateTime=0x60ae73a0, ftLastWriteTime.dwHighDateTime=0x1d2de2a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 0 [0062.752] FindClose (in: hFindFile=0x381dc0 | out: hFindFile=0x381dc0) returned 1 [0062.752] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e704) returned 1 [0062.752] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e710) returned 1 [0062.752] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e744) returned 1 [0062.752] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\Windows\\Sqm\\Upload", nBufferLength=0x105, lpBuffer=0x31e24c, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\Windows\\Sqm\\Upload", lpFilePart=0x0) returned 0x2b [0062.752] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\Windows\\Sqm\\Upload\\", nBufferLength=0x105, lpBuffer=0x31e220, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\Windows\\Sqm\\Upload\\", lpFilePart=0x0) returned 0x2c [0062.752] FindFirstFileW (in: lpFileName="C:\\ProgramData\\Microsoft\\Windows\\Sqm\\Upload\\*", lpFindFileData=0x31e46c | out: lpFindFileData=0x31e46c*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x60ae73a0, ftCreationTime.dwHighDateTime=0x1d2de2a, ftLastAccessTime.dwLowDateTime=0x60ae73a0, ftLastAccessTime.dwHighDateTime=0x1d2de2a, ftLastWriteTime.dwLowDateTime=0x60ae73a0, ftLastWriteTime.dwHighDateTime=0x1d2de2a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x381dc0 [0062.752] FindNextFileW (in: hFindFile=0x381dc0, lpFindFileData=0x31e47c | out: lpFindFileData=0x31e47c*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x60ae73a0, ftCreationTime.dwHighDateTime=0x1d2de2a, ftLastAccessTime.dwLowDateTime=0x60ae73a0, ftLastAccessTime.dwHighDateTime=0x1d2de2a, ftLastWriteTime.dwLowDateTime=0x60ae73a0, ftLastWriteTime.dwHighDateTime=0x1d2de2a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0062.752] FindNextFileW (in: hFindFile=0x381dc0, lpFindFileData=0x31e47c | out: lpFindFileData=0x31e47c*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x60ae73a0, ftCreationTime.dwHighDateTime=0x1d2de2a, ftLastAccessTime.dwLowDateTime=0x60ae73a0, ftLastAccessTime.dwHighDateTime=0x1d2de2a, ftLastWriteTime.dwLowDateTime=0x60ae73a0, ftLastWriteTime.dwHighDateTime=0x1d2de2a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 0 [0062.753] FindClose (in: hFindFile=0x381dc0 | out: hFindFile=0x381dc0) returned 1 [0062.753] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e704) returned 1 [0062.753] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e710) returned 1 [0062.753] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e7bc) returned 1 [0062.753] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\Windows\\Start Menu", nBufferLength=0x105, lpBuffer=0x31e2c4, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\Windows\\Start Menu", lpFilePart=0x0) returned 0x2b [0062.753] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\", nBufferLength=0x105, lpBuffer=0x31e298, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\", lpFilePart=0x0) returned 0x2c [0062.753] FindFirstFileW (in: lpFileName="C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\*", lpFindFileData=0x31e4e4 | out: lpFindFileData=0x31e4e4*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0xfd9dbcac, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x1cc35f15, ftLastAccessTime.dwHighDateTime=0x1ca0440, ftLastWriteTime.dwLowDateTime=0x1cc35f15, ftLastWriteTime.dwHighDateTime=0x1ca0440, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x381dc0 [0062.753] FindNextFileW (in: hFindFile=0x381dc0, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0xfd9dbcac, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x1cc35f15, ftLastAccessTime.dwHighDateTime=0x1ca0440, ftLastWriteTime.dwLowDateTime=0x1cc35f15, ftLastWriteTime.dwHighDateTime=0x1ca0440, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0062.753] FindNextFileW (in: hFindFile=0x381dc0, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1cc35f15, ftCreationTime.dwHighDateTime=0x1ca0440, ftLastAccessTime.dwLowDateTime=0x1cc35f15, ftLastAccessTime.dwHighDateTime=0x1ca0440, ftLastWriteTime.dwLowDateTime=0x1cc35f15, ftLastWriteTime.dwHighDateTime=0x1ca0440, nFileSizeHigh=0x0, nFileSizeLow=0x502, dwReserved0=0x0, dwReserved1=0x0, cFileName="Default Programs.lnk", cAlternateFileName="DEFAUL~1.LNK")) returned 1 [0062.753] FindNextFileW (in: hFindFile=0x381dc0, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0x7f5a4e15, ftCreationTime.dwHighDateTime=0x1ca043e, ftLastAccessTime.dwLowDateTime=0x7f5a4e15, ftLastAccessTime.dwHighDateTime=0x1ca043e, ftLastWriteTime.dwLowDateTime=0x1cc35f15, ftLastWriteTime.dwHighDateTime=0x1ca0440, nFileSizeHigh=0x0, nFileSizeLow=0x1ba, dwReserved0=0x0, dwReserved1=0x0, cFileName="desktop.ini", cAlternateFileName="")) returned 1 [0062.754] FindNextFileW (in: hFindFile=0x381dc0, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0xfd9dbcac, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x78038410, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x78038410, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Programs", cAlternateFileName="")) returned 1 [0062.754] FindNextFileW (in: hFindFile=0x381dc0, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7f57ecb5, ftCreationTime.dwHighDateTime=0x1ca043e, ftLastAccessTime.dwLowDateTime=0x7f57ecb5, ftLastAccessTime.dwHighDateTime=0x1ca043e, ftLastWriteTime.dwLowDateTime=0x7f57ecb5, ftLastWriteTime.dwHighDateTime=0x1ca043e, nFileSizeHigh=0x0, nFileSizeLow=0x4f2, dwReserved0=0x0, dwReserved1=0x0, cFileName="Windows Update.lnk", cAlternateFileName="WINDOW~1.LNK")) returned 1 [0062.754] FindNextFileW (in: hFindFile=0x381dc0, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0062.754] FindClose (in: hFindFile=0x381dc0 | out: hFindFile=0x381dc0) returned 1 [0062.754] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e77c) returned 1 [0062.754] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e788) returned 1 [0062.754] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e7bc) returned 1 [0062.754] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\Windows\\Start Menu", nBufferLength=0x105, lpBuffer=0x31e2c4, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\Windows\\Start Menu", lpFilePart=0x0) returned 0x2b [0062.754] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\", nBufferLength=0x105, lpBuffer=0x31e298, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\", lpFilePart=0x0) returned 0x2c [0062.754] FindFirstFileW (in: lpFileName="C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\*", lpFindFileData=0x31e4e4 | out: lpFindFileData=0x31e4e4*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0xfd9dbcac, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x1cc35f15, ftLastAccessTime.dwHighDateTime=0x1ca0440, ftLastWriteTime.dwLowDateTime=0x1cc35f15, ftLastWriteTime.dwHighDateTime=0x1ca0440, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x381dc0 [0062.754] FindNextFileW (in: hFindFile=0x381dc0, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0xfd9dbcac, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x1cc35f15, ftLastAccessTime.dwHighDateTime=0x1ca0440, ftLastWriteTime.dwLowDateTime=0x1cc35f15, ftLastWriteTime.dwHighDateTime=0x1ca0440, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0062.755] FindNextFileW (in: hFindFile=0x381dc0, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1cc35f15, ftCreationTime.dwHighDateTime=0x1ca0440, ftLastAccessTime.dwLowDateTime=0x1cc35f15, ftLastAccessTime.dwHighDateTime=0x1ca0440, ftLastWriteTime.dwLowDateTime=0x1cc35f15, ftLastWriteTime.dwHighDateTime=0x1ca0440, nFileSizeHigh=0x0, nFileSizeLow=0x502, dwReserved0=0x0, dwReserved1=0x0, cFileName="Default Programs.lnk", cAlternateFileName="DEFAUL~1.LNK")) returned 1 [0062.755] FindNextFileW (in: hFindFile=0x381dc0, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0x7f5a4e15, ftCreationTime.dwHighDateTime=0x1ca043e, ftLastAccessTime.dwLowDateTime=0x7f5a4e15, ftLastAccessTime.dwHighDateTime=0x1ca043e, ftLastWriteTime.dwLowDateTime=0x1cc35f15, ftLastWriteTime.dwHighDateTime=0x1ca0440, nFileSizeHigh=0x0, nFileSizeLow=0x1ba, dwReserved0=0x0, dwReserved1=0x0, cFileName="desktop.ini", cAlternateFileName="")) returned 1 [0062.755] FindNextFileW (in: hFindFile=0x381dc0, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0xfd9dbcac, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x78038410, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x78038410, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Programs", cAlternateFileName="")) returned 1 [0062.755] FindNextFileW (in: hFindFile=0x381dc0, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7f57ecb5, ftCreationTime.dwHighDateTime=0x1ca043e, ftLastAccessTime.dwLowDateTime=0x7f57ecb5, ftLastAccessTime.dwHighDateTime=0x1ca043e, ftLastWriteTime.dwLowDateTime=0x7f57ecb5, ftLastWriteTime.dwHighDateTime=0x1ca043e, nFileSizeHigh=0x0, nFileSizeLow=0x4f2, dwReserved0=0x0, dwReserved1=0x0, cFileName="Windows Update.lnk", cAlternateFileName="WINDOW~1.LNK")) returned 1 [0062.755] FindNextFileW (in: hFindFile=0x381dc0, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7f57ecb5, ftCreationTime.dwHighDateTime=0x1ca043e, ftLastAccessTime.dwLowDateTime=0x7f57ecb5, ftLastAccessTime.dwHighDateTime=0x1ca043e, ftLastWriteTime.dwLowDateTime=0x7f57ecb5, ftLastWriteTime.dwHighDateTime=0x1ca043e, nFileSizeHigh=0x0, nFileSizeLow=0x4f2, dwReserved0=0x0, dwReserved1=0x0, cFileName="Windows Update.lnk", cAlternateFileName="WINDOW~1.LNK")) returned 0 [0062.755] FindClose (in: hFindFile=0x381dc0 | out: hFindFile=0x381dc0) returned 1 [0062.755] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e77c) returned 1 [0062.755] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e788) returned 1 [0062.756] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Default Programs.lnk", nBufferLength=0x105, lpBuffer=0x31e194, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Default Programs.lnk", lpFilePart=0x0) returned 0x40 [0062.756] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e688) returned 1 [0062.756] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Default Programs.lnk" (normalized: "c:\\programdata\\microsoft\\windows\\start menu\\default programs.lnk"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x178 [0062.756] GetFileType (hFile=0x178) returned 0x1 [0062.756] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e684) returned 1 [0062.756] GetFileType (hFile=0x178) returned 0x1 [0062.756] GetFileSize (in: hFile=0x178, lpFileSizeHigh=0x31e790 | out: lpFileSizeHigh=0x31e790*=0x0) returned 0x502 [0062.756] ReadFile (in: hFile=0x178, lpBuffer=0x27b2f30, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x31e73c, lpOverlapped=0x0 | out: lpBuffer=0x27b2f30*, lpNumberOfBytesRead=0x31e73c*=0x502, lpOverlapped=0x0) returned 1 [0062.773] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Default Programs.lnk", nBufferLength=0x105, lpBuffer=0x31e180, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Default Programs.lnk", lpFilePart=0x0) returned 0x40 [0062.774] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e674) returned 1 [0062.774] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Default Programs.lnk" (normalized: "c:\\programdata\\microsoft\\windows\\start menu\\default programs.lnk"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x178 [0062.776] GetFileType (hFile=0x178) returned 0x1 [0062.776] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e670) returned 1 [0062.776] GetFileType (hFile=0x178) returned 0x1 [0062.776] WriteFile (in: hFile=0x178, lpBuffer=0x28027a4*, nNumberOfBytesToWrite=0x510, lpNumberOfBytesWritten=0x31e704, lpOverlapped=0x0 | out: lpBuffer=0x28027a4*, lpNumberOfBytesWritten=0x31e704*=0x510, lpOverlapped=0x0) returned 1 [0062.778] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Default Programs.lnk", nBufferLength=0x105, lpBuffer=0x31e2b4, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Default Programs.lnk", lpFilePart=0x0) returned 0x40 [0062.778] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Default Programs.lnk", nBufferLength=0x105, lpBuffer=0x31e2b4, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Default Programs.lnk", lpFilePart=0x0) returned 0x40 [0062.778] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e714) returned 1 [0062.778] GetFileAttributesExW (in: lpFileName="C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Default Programs.lnk" (normalized: "c:\\programdata\\microsoft\\windows\\start menu\\default programs.lnk"), fInfoLevelId=0x0, lpFileInformation=0x31e790 | out: lpFileInformation=0x31e790*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1cc35f15, ftCreationTime.dwHighDateTime=0x1ca0440, ftLastAccessTime.dwLowDateTime=0x1cc35f15, ftLastAccessTime.dwHighDateTime=0x1ca0440, ftLastWriteTime.dwLowDateTime=0x8dd40a0, ftLastWriteTime.dwHighDateTime=0x1d6eb7f, nFileSizeHigh=0x0, nFileSizeLow=0x510)) returned 1 [0062.778] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e710) returned 1 [0062.779] MoveFileW (lpExistingFileName="C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Default Programs.lnk" (normalized: "c:\\programdata\\microsoft\\windows\\start menu\\default programs.lnk"), lpNewFileName="C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Default Programs.lnk" (normalized: "c:\\programdata\\microsoft\\windows\\start menu\\default programs.lnk")) returned 1 [0062.779] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Windows Update.lnk", nBufferLength=0x105, lpBuffer=0x31e194, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Windows Update.lnk", lpFilePart=0x0) returned 0x3e [0062.779] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e688) returned 1 [0062.779] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Windows Update.lnk" (normalized: "c:\\programdata\\microsoft\\windows\\start menu\\windows update.lnk"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x178 [0062.779] GetFileType (hFile=0x178) returned 0x1 [0062.780] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e684) returned 1 [0062.780] GetFileType (hFile=0x178) returned 0x1 [0062.780] GetFileSize (in: hFile=0x178, lpFileSizeHigh=0x31e790 | out: lpFileSizeHigh=0x31e790*=0x0) returned 0x4f2 [0062.780] ReadFile (in: hFile=0x178, lpBuffer=0x2803f1c, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x31e73c, lpOverlapped=0x0 | out: lpBuffer=0x2803f1c*, lpNumberOfBytesRead=0x31e73c*=0x4f2, lpOverlapped=0x0) returned 1 [0062.841] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Windows Update.lnk", nBufferLength=0x105, lpBuffer=0x31e180, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Windows Update.lnk", lpFilePart=0x0) returned 0x3e [0062.841] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e674) returned 1 [0062.841] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Windows Update.lnk" (normalized: "c:\\programdata\\microsoft\\windows\\start menu\\windows update.lnk"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x178 [0062.842] GetFileType (hFile=0x178) returned 0x1 [0062.842] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e670) returned 1 [0062.842] GetFileType (hFile=0x178) returned 0x1 [0062.842] WriteFile (in: hFile=0x178, lpBuffer=0x2653bcc*, nNumberOfBytesToWrite=0x500, lpNumberOfBytesWritten=0x31e704, lpOverlapped=0x0 | out: lpBuffer=0x2653bcc*, lpNumberOfBytesWritten=0x31e704*=0x500, lpOverlapped=0x0) returned 1 [0062.843] CloseHandle (hObject=0x178) returned 1 [0062.844] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Windows Update.lnk", nBufferLength=0x105, lpBuffer=0x31e2b4, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Windows Update.lnk", lpFilePart=0x0) returned 0x3e [0062.844] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Windows Update.lnk", nBufferLength=0x105, lpBuffer=0x31e2b4, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Windows Update.lnk", lpFilePart=0x0) returned 0x3e [0062.844] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e714) returned 1 [0062.844] GetFileAttributesExW (in: lpFileName="C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Windows Update.lnk" (normalized: "c:\\programdata\\microsoft\\windows\\start menu\\windows update.lnk"), fInfoLevelId=0x0, lpFileInformation=0x31e790 | out: lpFileInformation=0x31e790*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7f57ecb5, ftCreationTime.dwHighDateTime=0x1ca043e, ftLastAccessTime.dwLowDateTime=0x7f57ecb5, ftLastAccessTime.dwHighDateTime=0x1ca043e, ftLastWriteTime.dwLowDateTime=0x8e6c620, ftLastWriteTime.dwHighDateTime=0x1d6eb7f, nFileSizeHigh=0x0, nFileSizeLow=0x500)) returned 1 [0062.844] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e710) returned 1 [0062.844] MoveFileW (lpExistingFileName="C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Windows Update.lnk" (normalized: "c:\\programdata\\microsoft\\windows\\start menu\\windows update.lnk"), lpNewFileName="C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Windows Update.lnk" (normalized: "c:\\programdata\\microsoft\\windows\\start menu\\windows update.lnk")) returned 1 [0062.844] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e744) returned 1 [0062.844] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs", nBufferLength=0x105, lpBuffer=0x31e24c, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs", lpFilePart=0x0) returned 0x34 [0062.845] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\", nBufferLength=0x105, lpBuffer=0x31e220, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\", lpFilePart=0x0) returned 0x35 [0062.845] FindFirstFileW (in: lpFileName="C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\*", lpFindFileData=0x31e46c | out: lpFindFileData=0x31e46c*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0xfd9dbcac, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x78038410, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x78038410, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x381fc0 [0062.845] FindNextFileW (in: hFindFile=0x381fc0, lpFindFileData=0x31e47c | out: lpFindFileData=0x31e47c*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0xfd9dbcac, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x78038410, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x78038410, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0062.845] FindNextFileW (in: hFindFile=0x381fc0, lpFindFileData=0x31e47c | out: lpFindFileData=0x31e47c*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0xfd9dbcac, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x81caf400, ftLastAccessTime.dwHighDateTime=0x1d2de2a, ftLastWriteTime.dwLowDateTime=0x8246bb80, ftLastWriteTime.dwHighDateTime=0x1d2de2a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Accessories", cAlternateFileName="ACCESS~1")) returned 1 [0062.845] FindNextFileW (in: hFindFile=0x381fc0, lpFindFileData=0x31e47c | out: lpFindFileData=0x31e47c*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x7fffaad0, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x81c3cfe0, ftLastAccessTime.dwHighDateTime=0x1d2de2a, ftLastWriteTime.dwLowDateTime=0x81c3cfe0, ftLastWriteTime.dwHighDateTime=0x1d2de2a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Administrative Tools", cAlternateFileName="ADMINI~1")) returned 1 [0062.845] FindNextFileW (in: hFindFile=0x381fc0, lpFindFileData=0x31e47c | out: lpFindFileData=0x31e47c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x83c01860, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x83c01860, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x83c01860, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x989, dwReserved0=0x0, dwReserved1=0x0, cFileName="Adobe Reader X.lnk", cAlternateFileName="ADOBER~1.LNK")) returned 1 [0062.845] FindNextFileW (in: hFindFile=0x381fc0, lpFindFileData=0x31e47c | out: lpFindFileData=0x31e47c*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0x28305c4e, ftCreationTime.dwHighDateTime=0x1ca043f, ftLastAccessTime.dwLowDateTime=0x28305c4e, ftLastAccessTime.dwHighDateTime=0x1ca043f, ftLastWriteTime.dwLowDateTime=0x824ddfa0, ftLastWriteTime.dwHighDateTime=0x1d2de2a, nFileSizeHigh=0x0, nFileSizeLow=0x46a, dwReserved0=0x0, dwReserved1=0x0, cFileName="desktop.ini", cAlternateFileName="")) returned 1 [0062.846] FindNextFileW (in: hFindFile=0x381fc0, lpFindFileData=0x31e47c | out: lpFindFileData=0x31e47c*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x80020c30, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0xa224bfc3, ftLastAccessTime.dwHighDateTime=0x1cbf8eb, ftLastWriteTime.dwLowDateTime=0xa224bfc3, ftLastWriteTime.dwHighDateTime=0x1cbf8eb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Games", cAlternateFileName="")) returned 1 [0062.846] FindNextFileW (in: hFindFile=0x381fc0, lpFindFileData=0x31e47c | out: lpFindFileData=0x31e47c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7df47e00, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x7df47e00, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x7df47e00, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x8dd, dwReserved0=0x0, dwReserved1=0x0, cFileName="Google Chrome.lnk", cAlternateFileName="GOOGLE~1.LNK")) returned 1 [0062.846] FindNextFileW (in: hFindFile=0x381fc0, lpFindFileData=0x31e47c | out: lpFindFileData=0x31e47c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7577bc60, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x762ca4e0, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x762ca4e0, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Java", cAlternateFileName="")) returned 1 [0062.846] FindNextFileW (in: hFindFile=0x381fc0, lpFindFileData=0x31e47c | out: lpFindFileData=0x31e47c*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0xfd9dbcac, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x8ab46fc5, ftLastAccessTime.dwHighDateTime=0x1ca043f, ftLastWriteTime.dwLowDateTime=0x8ab6d126, ftLastWriteTime.dwHighDateTime=0x1ca043f, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Maintenance", cAlternateFileName="MAINTE~1")) returned 1 [0062.846] FindNextFileW (in: hFindFile=0x381fc0, lpFindFileData=0x31e47c | out: lpFindFileData=0x31e47c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x824ddfa0, ftCreationTime.dwHighDateTime=0x1d2de2a, ftLastAccessTime.dwLowDateTime=0x824ddfa0, ftLastAccessTime.dwHighDateTime=0x1d2de2a, ftLastWriteTime.dwLowDateTime=0x824ddfa0, ftLastWriteTime.dwHighDateTime=0x1d2de2a, nFileSizeHigh=0x0, nFileSizeLow=0x541, dwReserved0=0x0, dwReserved1=0x0, cFileName="Media Center.lnk", cAlternateFileName="MEDIAC~1.LNK")) returned 1 [0062.846] FindNextFileW (in: hFindFile=0x381fc0, lpFindFileData=0x31e47c | out: lpFindFileData=0x31e47c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x77f53bd0, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0xc11c60a0, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0xc11c60a0, ftLastWriteTime.dwHighDateTime=0x1d305f1, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft Office", cAlternateFileName="MICROS~1")) returned 1 [0062.847] FindNextFileW (in: hFindFile=0x381fc0, lpFindFileData=0x31e47c | out: lpFindFileData=0x31e47c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb09bd780, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xb09e38e0, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0xb09e38e0, ftLastWriteTime.dwHighDateTime=0x1d2dda4, nFileSizeHigh=0x0, nFileSizeLow=0x491, dwReserved0=0x0, dwReserved1=0x0, cFileName="Mozilla Firefox.lnk", cAlternateFileName="MOZILL~1.LNK")) returned 1 [0062.847] FindNextFileW (in: hFindFile=0x381fc0, lpFindFileData=0x31e47c | out: lpFindFileData=0x31e47c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x78038410, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x78038410, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x78038410, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="SharePoint", cAlternateFileName="SHAREP~1")) returned 1 [0062.847] FindNextFileW (in: hFindFile=0x381fc0, lpFindFileData=0x31e47c | out: lpFindFileData=0x31e47c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8a233bd5, ftCreationTime.dwHighDateTime=0x1ca043f, ftLastAccessTime.dwLowDateTime=0x8a233bd5, ftLastAccessTime.dwHighDateTime=0x1ca043f, ftLastWriteTime.dwLowDateTime=0x8a233bd5, ftLastWriteTime.dwHighDateTime=0x1ca043f, nFileSizeHigh=0x0, nFileSizeLow=0x532, dwReserved0=0x0, dwReserved1=0x0, cFileName="Sidebar.lnk", cAlternateFileName="")) returned 1 [0062.847] FindNextFileW (in: hFindFile=0x381fc0, lpFindFileData=0x31e47c | out: lpFindFileData=0x31e47c*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0xfd9dbcac, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x2832bdaf, ftLastAccessTime.dwHighDateTime=0x1ca043f, ftLastWriteTime.dwLowDateTime=0x288ad099, ftLastWriteTime.dwHighDateTime=0x1ca043f, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Startup", cAlternateFileName="")) returned 1 [0062.847] FindNextFileW (in: hFindFile=0x381fc0, lpFindFileData=0x31e47c | out: lpFindFileData=0x31e47c*(dwFileAttributes=0x13, ftCreationTime.dwLowDateTime=0x9182055d, ftCreationTime.dwHighDateTime=0x1cbf8eb, ftLastAccessTime.dwLowDateTime=0x9182055d, ftLastAccessTime.dwHighDateTime=0x1cbf8eb, ftLastWriteTime.dwLowDateTime=0x9182055d, ftLastWriteTime.dwHighDateTime=0x1cbf8eb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Tablet PC", cAlternateFileName="TABLET~1")) returned 1 [0062.847] FindNextFileW (in: hFindFile=0x381fc0, lpFindFileData=0x31e47c | out: lpFindFileData=0x31e47c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8b186991, ftCreationTime.dwHighDateTime=0x1ca043f, ftLastAccessTime.dwLowDateTime=0x8b186991, ftLastAccessTime.dwHighDateTime=0x1ca043f, ftLastWriteTime.dwLowDateTime=0x8b186991, ftLastWriteTime.dwHighDateTime=0x1ca043f, nFileSizeHigh=0x0, nFileSizeLow=0x548, dwReserved0=0x0, dwReserved1=0x0, cFileName="Windows Anytime Upgrade.lnk", cAlternateFileName="WINDOW~3.LNK")) returned 1 [0062.847] FindNextFileW (in: hFindFile=0x381fc0, lpFindFileData=0x31e47c | out: lpFindFileData=0x31e47c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x82491ce0, ftCreationTime.dwHighDateTime=0x1d2de2a, ftLastAccessTime.dwLowDateTime=0x82491ce0, ftLastAccessTime.dwHighDateTime=0x1d2de2a, ftLastWriteTime.dwLowDateTime=0x82491ce0, ftLastWriteTime.dwHighDateTime=0x1d2de2a, nFileSizeHigh=0x0, nFileSizeLow=0x52e, dwReserved0=0x0, dwReserved1=0x0, cFileName="Windows DVD Maker.lnk", cAlternateFileName="WINDOW~4.LNK")) returned 1 [0062.848] FindNextFileW (in: hFindFile=0x381fc0, lpFindFileData=0x31e47c | out: lpFindFileData=0x31e47c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3d7b6b82, ftCreationTime.dwHighDateTime=0x1ca043f, ftLastAccessTime.dwLowDateTime=0x3d7b6b82, ftLastAccessTime.dwHighDateTime=0x1ca043f, ftLastWriteTime.dwLowDateTime=0x3d7dcce2, ftLastWriteTime.dwHighDateTime=0x1ca043f, nFileSizeHigh=0x0, nFileSizeLow=0x4ba, dwReserved0=0x0, dwReserved1=0x0, cFileName="Windows Fax and Scan.lnk", cAlternateFileName="WINDOW~1.LNK")) returned 1 [0062.848] FindNextFileW (in: hFindFile=0x381fc0, lpFindFileData=0x31e47c | out: lpFindFileData=0x31e47c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8945dbdb, ftCreationTime.dwHighDateTime=0x1ca043f, ftLastAccessTime.dwLowDateTime=0x8945dbdb, ftLastAccessTime.dwHighDateTime=0x1ca043f, ftLastWriteTime.dwLowDateTime=0xd869fe87, ftLastWriteTime.dwHighDateTime=0x1cb892d, nFileSizeHigh=0x0, nFileSizeLow=0x60b, dwReserved0=0x0, dwReserved1=0x0, cFileName="Windows Media Player.lnk", cAlternateFileName="WINDOW~2.LNK")) returned 1 [0062.848] FindNextFileW (in: hFindFile=0x381fc0, lpFindFileData=0x31e47c | out: lpFindFileData=0x31e47c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8aa62784, ftCreationTime.dwHighDateTime=0x1ca043f, ftLastAccessTime.dwLowDateTime=0x8aa62784, ftLastAccessTime.dwHighDateTime=0x1ca043f, ftLastWriteTime.dwLowDateTime=0x8aa62784, ftLastWriteTime.dwHighDateTime=0x1ca043f, nFileSizeHigh=0x0, nFileSizeLow=0x4de, dwReserved0=0x0, dwReserved1=0x0, cFileName="XPS Viewer.lnk", cAlternateFileName="XPSVIE~1.LNK")) returned 1 [0062.848] FindNextFileW (in: hFindFile=0x381fc0, lpFindFileData=0x31e47c | out: lpFindFileData=0x31e47c*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0062.848] FindClose (in: hFindFile=0x381fc0 | out: hFindFile=0x381fc0) returned 1 [0062.848] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e704) returned 1 [0062.848] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e710) returned 1 [0062.848] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e744) returned 1 [0062.848] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs", nBufferLength=0x105, lpBuffer=0x31e24c, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs", lpFilePart=0x0) returned 0x34 [0062.848] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\", nBufferLength=0x105, lpBuffer=0x31e220, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\", lpFilePart=0x0) returned 0x35 [0062.848] FindFirstFileW (in: lpFileName="C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\*", lpFindFileData=0x31e46c | out: lpFindFileData=0x31e46c*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0xfd9dbcac, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x78038410, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x78038410, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x381fc0 [0062.849] FindNextFileW (in: hFindFile=0x381fc0, lpFindFileData=0x31e47c | out: lpFindFileData=0x31e47c*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0xfd9dbcac, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x78038410, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x78038410, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0062.849] FindNextFileW (in: hFindFile=0x381fc0, lpFindFileData=0x31e47c | out: lpFindFileData=0x31e47c*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0xfd9dbcac, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x81caf400, ftLastAccessTime.dwHighDateTime=0x1d2de2a, ftLastWriteTime.dwLowDateTime=0x8246bb80, ftLastWriteTime.dwHighDateTime=0x1d2de2a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Accessories", cAlternateFileName="ACCESS~1")) returned 1 [0062.849] FindNextFileW (in: hFindFile=0x381fc0, lpFindFileData=0x31e47c | out: lpFindFileData=0x31e47c*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x7fffaad0, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x81c3cfe0, ftLastAccessTime.dwHighDateTime=0x1d2de2a, ftLastWriteTime.dwLowDateTime=0x81c3cfe0, ftLastWriteTime.dwHighDateTime=0x1d2de2a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Administrative Tools", cAlternateFileName="ADMINI~1")) returned 1 [0062.849] FindNextFileW (in: hFindFile=0x381fc0, lpFindFileData=0x31e47c | out: lpFindFileData=0x31e47c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x83c01860, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x83c01860, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x83c01860, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x989, dwReserved0=0x0, dwReserved1=0x0, cFileName="Adobe Reader X.lnk", cAlternateFileName="ADOBER~1.LNK")) returned 1 [0062.849] FindNextFileW (in: hFindFile=0x381fc0, lpFindFileData=0x31e47c | out: lpFindFileData=0x31e47c*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0x28305c4e, ftCreationTime.dwHighDateTime=0x1ca043f, ftLastAccessTime.dwLowDateTime=0x28305c4e, ftLastAccessTime.dwHighDateTime=0x1ca043f, ftLastWriteTime.dwLowDateTime=0x824ddfa0, ftLastWriteTime.dwHighDateTime=0x1d2de2a, nFileSizeHigh=0x0, nFileSizeLow=0x46a, dwReserved0=0x0, dwReserved1=0x0, cFileName="desktop.ini", cAlternateFileName="")) returned 1 [0062.849] FindNextFileW (in: hFindFile=0x381fc0, lpFindFileData=0x31e47c | out: lpFindFileData=0x31e47c*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x80020c30, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0xa224bfc3, ftLastAccessTime.dwHighDateTime=0x1cbf8eb, ftLastWriteTime.dwLowDateTime=0xa224bfc3, ftLastWriteTime.dwHighDateTime=0x1cbf8eb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Games", cAlternateFileName="")) returned 1 [0062.850] FindNextFileW (in: hFindFile=0x381fc0, lpFindFileData=0x31e47c | out: lpFindFileData=0x31e47c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7df47e00, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x7df47e00, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x7df47e00, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x8dd, dwReserved0=0x0, dwReserved1=0x0, cFileName="Google Chrome.lnk", cAlternateFileName="GOOGLE~1.LNK")) returned 1 [0062.850] FindNextFileW (in: hFindFile=0x381fc0, lpFindFileData=0x31e47c | out: lpFindFileData=0x31e47c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7577bc60, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x762ca4e0, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x762ca4e0, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Java", cAlternateFileName="")) returned 1 [0062.850] FindNextFileW (in: hFindFile=0x381fc0, lpFindFileData=0x31e47c | out: lpFindFileData=0x31e47c*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0xfd9dbcac, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x8ab46fc5, ftLastAccessTime.dwHighDateTime=0x1ca043f, ftLastWriteTime.dwLowDateTime=0x8ab6d126, ftLastWriteTime.dwHighDateTime=0x1ca043f, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Maintenance", cAlternateFileName="MAINTE~1")) returned 1 [0062.850] FindNextFileW (in: hFindFile=0x381fc0, lpFindFileData=0x31e47c | out: lpFindFileData=0x31e47c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x824ddfa0, ftCreationTime.dwHighDateTime=0x1d2de2a, ftLastAccessTime.dwLowDateTime=0x824ddfa0, ftLastAccessTime.dwHighDateTime=0x1d2de2a, ftLastWriteTime.dwLowDateTime=0x824ddfa0, ftLastWriteTime.dwHighDateTime=0x1d2de2a, nFileSizeHigh=0x0, nFileSizeLow=0x541, dwReserved0=0x0, dwReserved1=0x0, cFileName="Media Center.lnk", cAlternateFileName="MEDIAC~1.LNK")) returned 1 [0062.850] FindNextFileW (in: hFindFile=0x381fc0, lpFindFileData=0x31e47c | out: lpFindFileData=0x31e47c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x77f53bd0, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0xc11c60a0, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0xc11c60a0, ftLastWriteTime.dwHighDateTime=0x1d305f1, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft Office", cAlternateFileName="MICROS~1")) returned 1 [0062.850] FindNextFileW (in: hFindFile=0x381fc0, lpFindFileData=0x31e47c | out: lpFindFileData=0x31e47c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb09bd780, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xb09e38e0, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0xb09e38e0, ftLastWriteTime.dwHighDateTime=0x1d2dda4, nFileSizeHigh=0x0, nFileSizeLow=0x491, dwReserved0=0x0, dwReserved1=0x0, cFileName="Mozilla Firefox.lnk", cAlternateFileName="MOZILL~1.LNK")) returned 1 [0062.850] FindNextFileW (in: hFindFile=0x381fc0, lpFindFileData=0x31e47c | out: lpFindFileData=0x31e47c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x78038410, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x78038410, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x78038410, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="SharePoint", cAlternateFileName="SHAREP~1")) returned 1 [0062.851] FindNextFileW (in: hFindFile=0x381fc0, lpFindFileData=0x31e47c | out: lpFindFileData=0x31e47c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8a233bd5, ftCreationTime.dwHighDateTime=0x1ca043f, ftLastAccessTime.dwLowDateTime=0x8a233bd5, ftLastAccessTime.dwHighDateTime=0x1ca043f, ftLastWriteTime.dwLowDateTime=0x8a233bd5, ftLastWriteTime.dwHighDateTime=0x1ca043f, nFileSizeHigh=0x0, nFileSizeLow=0x532, dwReserved0=0x0, dwReserved1=0x0, cFileName="Sidebar.lnk", cAlternateFileName="")) returned 1 [0062.851] FindNextFileW (in: hFindFile=0x381fc0, lpFindFileData=0x31e47c | out: lpFindFileData=0x31e47c*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0xfd9dbcac, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x2832bdaf, ftLastAccessTime.dwHighDateTime=0x1ca043f, ftLastWriteTime.dwLowDateTime=0x288ad099, ftLastWriteTime.dwHighDateTime=0x1ca043f, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Startup", cAlternateFileName="")) returned 1 [0062.851] FindNextFileW (in: hFindFile=0x381fc0, lpFindFileData=0x31e47c | out: lpFindFileData=0x31e47c*(dwFileAttributes=0x13, ftCreationTime.dwLowDateTime=0x9182055d, ftCreationTime.dwHighDateTime=0x1cbf8eb, ftLastAccessTime.dwLowDateTime=0x9182055d, ftLastAccessTime.dwHighDateTime=0x1cbf8eb, ftLastWriteTime.dwLowDateTime=0x9182055d, ftLastWriteTime.dwHighDateTime=0x1cbf8eb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Tablet PC", cAlternateFileName="TABLET~1")) returned 1 [0062.851] FindNextFileW (in: hFindFile=0x381fc0, lpFindFileData=0x31e47c | out: lpFindFileData=0x31e47c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8b186991, ftCreationTime.dwHighDateTime=0x1ca043f, ftLastAccessTime.dwLowDateTime=0x8b186991, ftLastAccessTime.dwHighDateTime=0x1ca043f, ftLastWriteTime.dwLowDateTime=0x8b186991, ftLastWriteTime.dwHighDateTime=0x1ca043f, nFileSizeHigh=0x0, nFileSizeLow=0x548, dwReserved0=0x0, dwReserved1=0x0, cFileName="Windows Anytime Upgrade.lnk", cAlternateFileName="WINDOW~3.LNK")) returned 1 [0062.851] FindNextFileW (in: hFindFile=0x381fc0, lpFindFileData=0x31e47c | out: lpFindFileData=0x31e47c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x82491ce0, ftCreationTime.dwHighDateTime=0x1d2de2a, ftLastAccessTime.dwLowDateTime=0x82491ce0, ftLastAccessTime.dwHighDateTime=0x1d2de2a, ftLastWriteTime.dwLowDateTime=0x82491ce0, ftLastWriteTime.dwHighDateTime=0x1d2de2a, nFileSizeHigh=0x0, nFileSizeLow=0x52e, dwReserved0=0x0, dwReserved1=0x0, cFileName="Windows DVD Maker.lnk", cAlternateFileName="WINDOW~4.LNK")) returned 1 [0062.851] FindNextFileW (in: hFindFile=0x381fc0, lpFindFileData=0x31e47c | out: lpFindFileData=0x31e47c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3d7b6b82, ftCreationTime.dwHighDateTime=0x1ca043f, ftLastAccessTime.dwLowDateTime=0x3d7b6b82, ftLastAccessTime.dwHighDateTime=0x1ca043f, ftLastWriteTime.dwLowDateTime=0x3d7dcce2, ftLastWriteTime.dwHighDateTime=0x1ca043f, nFileSizeHigh=0x0, nFileSizeLow=0x4ba, dwReserved0=0x0, dwReserved1=0x0, cFileName="Windows Fax and Scan.lnk", cAlternateFileName="WINDOW~1.LNK")) returned 1 [0062.852] FindNextFileW (in: hFindFile=0x381fc0, lpFindFileData=0x31e47c | out: lpFindFileData=0x31e47c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8945dbdb, ftCreationTime.dwHighDateTime=0x1ca043f, ftLastAccessTime.dwLowDateTime=0x8945dbdb, ftLastAccessTime.dwHighDateTime=0x1ca043f, ftLastWriteTime.dwLowDateTime=0xd869fe87, ftLastWriteTime.dwHighDateTime=0x1cb892d, nFileSizeHigh=0x0, nFileSizeLow=0x60b, dwReserved0=0x0, dwReserved1=0x0, cFileName="Windows Media Player.lnk", cAlternateFileName="WINDOW~2.LNK")) returned 1 [0062.852] FindNextFileW (in: hFindFile=0x381fc0, lpFindFileData=0x31e47c | out: lpFindFileData=0x31e47c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8aa62784, ftCreationTime.dwHighDateTime=0x1ca043f, ftLastAccessTime.dwLowDateTime=0x8aa62784, ftLastAccessTime.dwHighDateTime=0x1ca043f, ftLastWriteTime.dwLowDateTime=0x8aa62784, ftLastWriteTime.dwHighDateTime=0x1ca043f, nFileSizeHigh=0x0, nFileSizeLow=0x4de, dwReserved0=0x0, dwReserved1=0x0, cFileName="XPS Viewer.lnk", cAlternateFileName="XPSVIE~1.LNK")) returned 1 [0062.852] FindNextFileW (in: hFindFile=0x381fc0, lpFindFileData=0x31e47c | out: lpFindFileData=0x31e47c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8aa62784, ftCreationTime.dwHighDateTime=0x1ca043f, ftLastAccessTime.dwLowDateTime=0x8aa62784, ftLastAccessTime.dwHighDateTime=0x1ca043f, ftLastWriteTime.dwLowDateTime=0x8aa62784, ftLastWriteTime.dwHighDateTime=0x1ca043f, nFileSizeHigh=0x0, nFileSizeLow=0x4de, dwReserved0=0x0, dwReserved1=0x0, cFileName="XPS Viewer.lnk", cAlternateFileName="XPSVIE~1.LNK")) returned 0 [0062.852] FindClose (in: hFindFile=0x381fc0 | out: hFindFile=0x381fc0) returned 1 [0062.852] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e704) returned 1 [0062.852] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e710) returned 1 [0062.852] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Adobe Reader X.lnk", nBufferLength=0x105, lpBuffer=0x31e11c, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Adobe Reader X.lnk", lpFilePart=0x0) returned 0x47 [0062.852] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e610) returned 1 [0062.852] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Adobe Reader X.lnk" (normalized: "c:\\programdata\\microsoft\\windows\\start menu\\programs\\adobe reader x.lnk"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x178 [0062.897] GetFileType (hFile=0x178) returned 0x1 [0062.898] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e60c) returned 1 [0062.898] GetFileType (hFile=0x178) returned 0x1 [0062.898] GetFileSize (in: hFile=0x178, lpFileSizeHigh=0x31e718 | out: lpFileSizeHigh=0x31e718*=0x0) returned 0x989 [0062.898] ReadFile (in: hFile=0x178, lpBuffer=0x265add8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x31e6c4, lpOverlapped=0x0 | out: lpBuffer=0x265add8*, lpNumberOfBytesRead=0x31e6c4*=0x989, lpOverlapped=0x0) returned 1 [0062.900] CloseHandle (hObject=0x178) returned 1 [0062.913] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Adobe Reader X.lnk", nBufferLength=0x105, lpBuffer=0x31e108, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Adobe Reader X.lnk", lpFilePart=0x0) returned 0x47 [0062.913] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e5fc) returned 1 [0062.914] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Adobe Reader X.lnk" (normalized: "c:\\programdata\\microsoft\\windows\\start menu\\programs\\adobe reader x.lnk"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x178 [0062.915] GetFileType (hFile=0x178) returned 0x1 [0062.915] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e5f8) returned 1 [0062.915] GetFileType (hFile=0x178) returned 0x1 [0062.915] WriteFile (in: hFile=0x178, lpBuffer=0x26abe28*, nNumberOfBytesToWrite=0x990, lpNumberOfBytesWritten=0x31e68c, lpOverlapped=0x0 | out: lpBuffer=0x26abe28*, lpNumberOfBytesWritten=0x31e68c*=0x990, lpOverlapped=0x0) returned 1 [0062.916] CloseHandle (hObject=0x178) returned 1 [0062.916] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Adobe Reader X.lnk", nBufferLength=0x105, lpBuffer=0x31e23c, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Adobe Reader X.lnk", lpFilePart=0x0) returned 0x47 [0062.916] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Adobe Reader X.lnk", nBufferLength=0x105, lpBuffer=0x31e23c, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Adobe Reader X.lnk", lpFilePart=0x0) returned 0x47 [0062.916] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e69c) returned 1 [0062.917] GetFileAttributesExW (in: lpFileName="C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Adobe Reader X.lnk" (normalized: "c:\\programdata\\microsoft\\windows\\start menu\\programs\\adobe reader x.lnk"), fInfoLevelId=0x0, lpFileInformation=0x31e718 | out: lpFileInformation=0x31e718*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x83c01860, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x83c01860, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x8f2ad00, ftLastWriteTime.dwHighDateTime=0x1d6eb7f, nFileSizeHigh=0x0, nFileSizeLow=0x990)) returned 1 [0062.917] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e698) returned 1 [0062.917] MoveFileW (lpExistingFileName="C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Adobe Reader X.lnk" (normalized: "c:\\programdata\\microsoft\\windows\\start menu\\programs\\adobe reader x.lnk"), lpNewFileName="C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Adobe Reader X.lnk" (normalized: "c:\\programdata\\microsoft\\windows\\start menu\\programs\\adobe reader x.lnk")) returned 1 [0062.917] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Google Chrome.lnk", nBufferLength=0x105, lpBuffer=0x31e11c, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Google Chrome.lnk", lpFilePart=0x0) returned 0x46 [0062.917] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e610) returned 1 [0062.917] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Google Chrome.lnk" (normalized: "c:\\programdata\\microsoft\\windows\\start menu\\programs\\google chrome.lnk"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x178 [0062.918] GetFileType (hFile=0x178) returned 0x1 [0062.918] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e60c) returned 1 [0062.918] GetFileType (hFile=0x178) returned 0x1 [0062.918] GetFileSize (in: hFile=0x178, lpFileSizeHigh=0x31e718 | out: lpFileSizeHigh=0x31e718*=0x0) returned 0x8dd [0062.918] ReadFile (in: hFile=0x178, lpBuffer=0x26ad9b0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x31e6c4, lpOverlapped=0x0 | out: lpBuffer=0x26ad9b0*, lpNumberOfBytesRead=0x31e6c4*=0x8dd, lpOverlapped=0x0) returned 1 [0062.920] CloseHandle (hObject=0x178) returned 1 [0062.934] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Google Chrome.lnk", nBufferLength=0x105, lpBuffer=0x31e108, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Google Chrome.lnk", lpFilePart=0x0) returned 0x46 [0062.934] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e5fc) returned 1 [0062.934] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Google Chrome.lnk" (normalized: "c:\\programdata\\microsoft\\windows\\start menu\\programs\\google chrome.lnk"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x178 [0062.936] GetFileType (hFile=0x178) returned 0x1 [0062.936] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e5f8) returned 1 [0062.936] GetFileType (hFile=0x178) returned 0x1 [0062.936] WriteFile (in: hFile=0x178, lpBuffer=0x26fe52c*, nNumberOfBytesToWrite=0x8e0, lpNumberOfBytesWritten=0x31e68c, lpOverlapped=0x0 | out: lpBuffer=0x26fe52c*, lpNumberOfBytesWritten=0x31e68c*=0x8e0, lpOverlapped=0x0) returned 1 [0062.937] CloseHandle (hObject=0x178) returned 1 [0062.937] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Google Chrome.lnk", nBufferLength=0x105, lpBuffer=0x31e23c, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Google Chrome.lnk", lpFilePart=0x0) returned 0x46 [0062.937] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Google Chrome.lnk", nBufferLength=0x105, lpBuffer=0x31e23c, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Google Chrome.lnk", lpFilePart=0x0) returned 0x46 [0062.937] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e69c) returned 1 [0062.937] GetFileAttributesExW (in: lpFileName="C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Google Chrome.lnk" (normalized: "c:\\programdata\\microsoft\\windows\\start menu\\programs\\google chrome.lnk"), fInfoLevelId=0x0, lpFileInformation=0x31e718 | out: lpFileInformation=0x31e718*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7df47e00, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x7df47e00, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x8f50e60, ftLastWriteTime.dwHighDateTime=0x1d6eb7f, nFileSizeHigh=0x0, nFileSizeLow=0x8e0)) returned 1 [0062.937] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e698) returned 1 [0062.937] MoveFileW (lpExistingFileName="C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Google Chrome.lnk" (normalized: "c:\\programdata\\microsoft\\windows\\start menu\\programs\\google chrome.lnk"), lpNewFileName="C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Google Chrome.lnk" (normalized: "c:\\programdata\\microsoft\\windows\\start menu\\programs\\google chrome.lnk")) returned 1 [0062.938] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Media Center.lnk", nBufferLength=0x105, lpBuffer=0x31e11c, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Media Center.lnk", lpFilePart=0x0) returned 0x45 [0062.938] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e610) returned 1 [0062.938] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Media Center.lnk" (normalized: "c:\\programdata\\microsoft\\windows\\start menu\\programs\\media center.lnk"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x178 [0062.938] GetFileType (hFile=0x178) returned 0x1 [0062.938] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e60c) returned 1 [0062.938] GetFileType (hFile=0x178) returned 0x1 [0062.938] GetFileSize (in: hFile=0x178, lpFileSizeHigh=0x31e718 | out: lpFileSizeHigh=0x31e718*=0x0) returned 0x541 [0062.938] ReadFile (in: hFile=0x178, lpBuffer=0x26ffcfc, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x31e6c4, lpOverlapped=0x0 | out: lpBuffer=0x26ffcfc*, lpNumberOfBytesRead=0x31e6c4*=0x541, lpOverlapped=0x0) returned 1 [0062.940] CloseHandle (hObject=0x178) returned 1 [0062.954] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Media Center.lnk", nBufferLength=0x105, lpBuffer=0x31e108, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Media Center.lnk", lpFilePart=0x0) returned 0x45 [0062.954] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e5fc) returned 1 [0062.954] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Media Center.lnk" (normalized: "c:\\programdata\\microsoft\\windows\\start menu\\programs\\media center.lnk"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x178 [0062.955] GetFileType (hFile=0x178) returned 0x1 [0062.955] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e5f8) returned 1 [0062.955] GetFileType (hFile=0x178) returned 0x1 [0062.955] WriteFile (in: hFile=0x178, lpBuffer=0x274f6b0*, nNumberOfBytesToWrite=0x550, lpNumberOfBytesWritten=0x31e68c, lpOverlapped=0x0 | out: lpBuffer=0x274f6b0*, lpNumberOfBytesWritten=0x31e68c*=0x550, lpOverlapped=0x0) returned 1 [0062.956] CloseHandle (hObject=0x178) returned 1 [0062.956] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Media Center.lnk", nBufferLength=0x105, lpBuffer=0x31e23c, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Media Center.lnk", lpFilePart=0x0) returned 0x45 [0062.956] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Media Center.lnk", nBufferLength=0x105, lpBuffer=0x31e23c, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Media Center.lnk", lpFilePart=0x0) returned 0x45 [0062.956] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e69c) returned 1 [0062.956] GetFileAttributesExW (in: lpFileName="C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Media Center.lnk" (normalized: "c:\\programdata\\microsoft\\windows\\start menu\\programs\\media center.lnk"), fInfoLevelId=0x0, lpFileInformation=0x31e718 | out: lpFileInformation=0x31e718*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x824ddfa0, ftCreationTime.dwHighDateTime=0x1d2de2a, ftLastAccessTime.dwLowDateTime=0x824ddfa0, ftLastAccessTime.dwHighDateTime=0x1d2de2a, ftLastWriteTime.dwLowDateTime=0x8f76fc0, ftLastWriteTime.dwHighDateTime=0x1d6eb7f, nFileSizeHigh=0x0, nFileSizeLow=0x550)) returned 1 [0062.957] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e698) returned 1 [0062.957] MoveFileW (lpExistingFileName="C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Media Center.lnk" (normalized: "c:\\programdata\\microsoft\\windows\\start menu\\programs\\media center.lnk"), lpNewFileName="C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Media Center.lnk" (normalized: "c:\\programdata\\microsoft\\windows\\start menu\\programs\\media center.lnk")) returned 1 [0062.957] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Mozilla Firefox.lnk", nBufferLength=0x105, lpBuffer=0x31e11c, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Mozilla Firefox.lnk", lpFilePart=0x0) returned 0x48 [0062.957] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e610) returned 1 [0062.957] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Mozilla Firefox.lnk" (normalized: "c:\\programdata\\microsoft\\windows\\start menu\\programs\\mozilla firefox.lnk"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x178 [0062.958] GetFileType (hFile=0x178) returned 0x1 [0062.958] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e60c) returned 1 [0062.958] GetFileType (hFile=0x178) returned 0x1 [0062.958] GetFileSize (in: hFile=0x178, lpFileSizeHigh=0x31e718 | out: lpFileSizeHigh=0x31e718*=0x0) returned 0x491 [0062.958] ReadFile (in: hFile=0x178, lpBuffer=0x2750dd4, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x31e6c4, lpOverlapped=0x0 | out: lpBuffer=0x2750dd4*, lpNumberOfBytesRead=0x31e6c4*=0x491, lpOverlapped=0x0) returned 1 [0062.959] CloseHandle (hObject=0x178) returned 1 [0062.973] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Mozilla Firefox.lnk", nBufferLength=0x105, lpBuffer=0x31e108, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Mozilla Firefox.lnk", lpFilePart=0x0) returned 0x48 [0062.973] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e5fc) returned 1 [0062.973] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Mozilla Firefox.lnk" (normalized: "c:\\programdata\\microsoft\\windows\\start menu\\programs\\mozilla firefox.lnk"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x178 [0062.974] GetFileType (hFile=0x178) returned 0x1 [0062.974] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e5f8) returned 1 [0062.974] GetFileType (hFile=0x178) returned 0x1 [0062.975] WriteFile (in: hFile=0x178, lpBuffer=0x27a0424*, nNumberOfBytesToWrite=0x4a0, lpNumberOfBytesWritten=0x31e68c, lpOverlapped=0x0 | out: lpBuffer=0x27a0424*, lpNumberOfBytesWritten=0x31e68c*=0x4a0, lpOverlapped=0x0) returned 1 [0062.975] CloseHandle (hObject=0x178) returned 1 [0062.976] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Mozilla Firefox.lnk", nBufferLength=0x105, lpBuffer=0x31e23c, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Mozilla Firefox.lnk", lpFilePart=0x0) returned 0x48 [0062.976] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Mozilla Firefox.lnk", nBufferLength=0x105, lpBuffer=0x31e23c, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Mozilla Firefox.lnk", lpFilePart=0x0) returned 0x48 [0062.976] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e69c) returned 1 [0062.976] GetFileAttributesExW (in: lpFileName="C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Mozilla Firefox.lnk" (normalized: "c:\\programdata\\microsoft\\windows\\start menu\\programs\\mozilla firefox.lnk"), fInfoLevelId=0x0, lpFileInformation=0x31e718 | out: lpFileInformation=0x31e718*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb09bd780, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xb09e38e0, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0x8f9d120, ftLastWriteTime.dwHighDateTime=0x1d6eb7f, nFileSizeHigh=0x0, nFileSizeLow=0x4a0)) returned 1 [0062.976] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e698) returned 1 [0062.976] MoveFileW (lpExistingFileName="C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Mozilla Firefox.lnk" (normalized: "c:\\programdata\\microsoft\\windows\\start menu\\programs\\mozilla firefox.lnk"), lpNewFileName="C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Mozilla Firefox.lnk" (normalized: "c:\\programdata\\microsoft\\windows\\start menu\\programs\\mozilla firefox.lnk")) returned 1 [0062.976] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Sidebar.lnk", nBufferLength=0x105, lpBuffer=0x31e11c, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Sidebar.lnk", lpFilePart=0x0) returned 0x40 [0062.976] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e610) returned 1 [0062.977] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Sidebar.lnk" (normalized: "c:\\programdata\\microsoft\\windows\\start menu\\programs\\sidebar.lnk"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x178 [0062.977] GetFileType (hFile=0x178) returned 0x1 [0062.977] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e60c) returned 1 [0062.977] GetFileType (hFile=0x178) returned 0x1 [0062.977] GetFileSize (in: hFile=0x178, lpFileSizeHigh=0x31e718 | out: lpFileSizeHigh=0x31e718*=0x0) returned 0x532 [0062.977] ReadFile (in: hFile=0x178, lpBuffer=0x27a1bd8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x31e6c4, lpOverlapped=0x0 | out: lpBuffer=0x27a1bd8*, lpNumberOfBytesRead=0x31e6c4*=0x532, lpOverlapped=0x0) returned 1 [0062.979] CloseHandle (hObject=0x178) returned 1 [0062.992] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Sidebar.lnk", nBufferLength=0x105, lpBuffer=0x31e108, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Sidebar.lnk", lpFilePart=0x0) returned 0x40 [0062.992] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e5fc) returned 1 [0062.992] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Sidebar.lnk" (normalized: "c:\\programdata\\microsoft\\windows\\start menu\\programs\\sidebar.lnk"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x178 [0062.993] GetFileType (hFile=0x178) returned 0x1 [0062.994] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e5f8) returned 1 [0062.994] GetFileType (hFile=0x178) returned 0x1 [0062.994] WriteFile (in: hFile=0x178, lpBuffer=0x27f1528*, nNumberOfBytesToWrite=0x540, lpNumberOfBytesWritten=0x31e68c, lpOverlapped=0x0 | out: lpBuffer=0x27f1528*, lpNumberOfBytesWritten=0x31e68c*=0x540, lpOverlapped=0x0) returned 1 [0062.995] CloseHandle (hObject=0x178) returned 1 [0062.995] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Sidebar.lnk", nBufferLength=0x105, lpBuffer=0x31e23c, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Sidebar.lnk", lpFilePart=0x0) returned 0x40 [0062.995] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Sidebar.lnk", nBufferLength=0x105, lpBuffer=0x31e23c, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Sidebar.lnk", lpFilePart=0x0) returned 0x40 [0062.995] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e69c) returned 1 [0062.995] GetFileAttributesExW (in: lpFileName="C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Sidebar.lnk" (normalized: "c:\\programdata\\microsoft\\windows\\start menu\\programs\\sidebar.lnk"), fInfoLevelId=0x0, lpFileInformation=0x31e718 | out: lpFileInformation=0x31e718*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8a233bd5, ftCreationTime.dwHighDateTime=0x1ca043f, ftLastAccessTime.dwLowDateTime=0x8a233bd5, ftLastAccessTime.dwHighDateTime=0x1ca043f, ftLastWriteTime.dwLowDateTime=0x8fe93e0, ftLastWriteTime.dwHighDateTime=0x1d6eb7f, nFileSizeHigh=0x0, nFileSizeLow=0x540)) returned 1 [0062.995] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e698) returned 1 [0062.995] MoveFileW (lpExistingFileName="C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Sidebar.lnk" (normalized: "c:\\programdata\\microsoft\\windows\\start menu\\programs\\sidebar.lnk"), lpNewFileName="C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Sidebar.lnk" (normalized: "c:\\programdata\\microsoft\\windows\\start menu\\programs\\sidebar.lnk")) returned 1 [0062.996] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Windows Anytime Upgrade.lnk", nBufferLength=0x105, lpBuffer=0x31e11c, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Windows Anytime Upgrade.lnk", lpFilePart=0x0) returned 0x50 [0062.996] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e610) returned 1 [0062.996] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Windows Anytime Upgrade.lnk" (normalized: "c:\\programdata\\microsoft\\windows\\start menu\\programs\\windows anytime upgrade.lnk"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x178 [0062.996] GetFileType (hFile=0x178) returned 0x1 [0062.996] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e60c) returned 1 [0062.996] GetFileType (hFile=0x178) returned 0x1 [0062.996] GetFileSize (in: hFile=0x178, lpFileSizeHigh=0x31e718 | out: lpFileSizeHigh=0x31e718*=0x0) returned 0x548 [0062.996] ReadFile (in: hFile=0x178, lpBuffer=0x27f2d10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x31e6c4, lpOverlapped=0x0 | out: lpBuffer=0x27f2d10*, lpNumberOfBytesRead=0x31e6c4*=0x548, lpOverlapped=0x0) returned 1 [0062.998] CloseHandle (hObject=0x178) returned 1 [0063.052] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Windows Anytime Upgrade.lnk", nBufferLength=0x105, lpBuffer=0x31e108, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Windows Anytime Upgrade.lnk", lpFilePart=0x0) returned 0x50 [0063.052] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e5fc) returned 1 [0063.052] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Windows Anytime Upgrade.lnk" (normalized: "c:\\programdata\\microsoft\\windows\\start menu\\programs\\windows anytime upgrade.lnk"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x178 [0063.054] GetFileType (hFile=0x178) returned 0x1 [0063.054] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e5f8) returned 1 [0063.054] GetFileType (hFile=0x178) returned 0x1 [0063.054] WriteFile (in: hFile=0x178, lpBuffer=0x264480c*, nNumberOfBytesToWrite=0x550, lpNumberOfBytesWritten=0x31e68c, lpOverlapped=0x0 | out: lpBuffer=0x264480c*, lpNumberOfBytesWritten=0x31e68c*=0x550, lpOverlapped=0x0) returned 1 [0063.055] CloseHandle (hObject=0x178) returned 1 [0063.055] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Windows Anytime Upgrade.lnk", nBufferLength=0x105, lpBuffer=0x31e23c, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Windows Anytime Upgrade.lnk", lpFilePart=0x0) returned 0x50 [0063.055] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Windows Anytime Upgrade.lnk", nBufferLength=0x105, lpBuffer=0x31e23c, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Windows Anytime Upgrade.lnk", lpFilePart=0x0) returned 0x50 [0063.055] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e69c) returned 1 [0063.055] GetFileAttributesExW (in: lpFileName="C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Windows Anytime Upgrade.lnk" (normalized: "c:\\programdata\\microsoft\\windows\\start menu\\programs\\windows anytime upgrade.lnk"), fInfoLevelId=0x0, lpFileInformation=0x31e718 | out: lpFileInformation=0x31e718*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8b186991, ftCreationTime.dwHighDateTime=0x1ca043f, ftLastAccessTime.dwLowDateTime=0x8b186991, ftLastAccessTime.dwHighDateTime=0x1ca043f, ftLastWriteTime.dwLowDateTime=0x905b800, ftLastWriteTime.dwHighDateTime=0x1d6eb7f, nFileSizeHigh=0x0, nFileSizeLow=0x550)) returned 1 [0063.055] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e698) returned 1 [0063.055] MoveFileW (lpExistingFileName="C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Windows Anytime Upgrade.lnk" (normalized: "c:\\programdata\\microsoft\\windows\\start menu\\programs\\windows anytime upgrade.lnk"), lpNewFileName="C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Windows Anytime Upgrade.lnk" (normalized: "c:\\programdata\\microsoft\\windows\\start menu\\programs\\windows anytime upgrade.lnk")) returned 1 [0063.056] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Windows DVD Maker.lnk", nBufferLength=0x105, lpBuffer=0x31e11c, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Windows DVD Maker.lnk", lpFilePart=0x0) returned 0x4a [0063.056] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e610) returned 1 [0063.056] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Windows DVD Maker.lnk" (normalized: "c:\\programdata\\microsoft\\windows\\start menu\\programs\\windows dvd maker.lnk"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x178 [0063.056] GetFileType (hFile=0x178) returned 0x1 [0063.057] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e60c) returned 1 [0063.057] GetFileType (hFile=0x178) returned 0x1 [0063.057] GetFileSize (in: hFile=0x178, lpFileSizeHigh=0x31e718 | out: lpFileSizeHigh=0x31e718*=0x0) returned 0x52e [0063.057] ReadFile (in: hFile=0x178, lpBuffer=0x2646004, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x31e6c4, lpOverlapped=0x0 | out: lpBuffer=0x2646004*, lpNumberOfBytesRead=0x31e6c4*=0x52e, lpOverlapped=0x0) returned 1 [0063.058] CloseHandle (hObject=0x178) returned 1 [0063.072] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Windows DVD Maker.lnk", nBufferLength=0x105, lpBuffer=0x31e108, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Windows DVD Maker.lnk", lpFilePart=0x0) returned 0x4a [0063.072] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e5fc) returned 1 [0063.072] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Windows DVD Maker.lnk" (normalized: "c:\\programdata\\microsoft\\windows\\start menu\\programs\\windows dvd maker.lnk"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x178 [0063.073] GetFileType (hFile=0x178) returned 0x1 [0063.073] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e5f8) returned 1 [0063.073] GetFileType (hFile=0x178) returned 0x1 [0063.073] WriteFile (in: hFile=0x178, lpBuffer=0x2695a7c*, nNumberOfBytesToWrite=0x530, lpNumberOfBytesWritten=0x31e68c, lpOverlapped=0x0 | out: lpBuffer=0x2695a7c*, lpNumberOfBytesWritten=0x31e68c*=0x530, lpOverlapped=0x0) returned 1 [0063.074] CloseHandle (hObject=0x178) returned 1 [0063.075] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Windows DVD Maker.lnk", nBufferLength=0x105, lpBuffer=0x31e23c, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Windows DVD Maker.lnk", lpFilePart=0x0) returned 0x4a [0063.075] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Windows DVD Maker.lnk", nBufferLength=0x105, lpBuffer=0x31e23c, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Windows DVD Maker.lnk", lpFilePart=0x0) returned 0x4a [0063.075] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e69c) returned 1 [0063.075] GetFileAttributesExW (in: lpFileName="C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Windows DVD Maker.lnk" (normalized: "c:\\programdata\\microsoft\\windows\\start menu\\programs\\windows dvd maker.lnk"), fInfoLevelId=0x0, lpFileInformation=0x31e718 | out: lpFileInformation=0x31e718*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x82491ce0, ftCreationTime.dwHighDateTime=0x1d2de2a, ftLastAccessTime.dwLowDateTime=0x82491ce0, ftLastAccessTime.dwHighDateTime=0x1d2de2a, ftLastWriteTime.dwLowDateTime=0x90a7ac0, ftLastWriteTime.dwHighDateTime=0x1d6eb7f, nFileSizeHigh=0x0, nFileSizeLow=0x530)) returned 1 [0063.075] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e698) returned 1 [0063.075] MoveFileW (lpExistingFileName="C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Windows DVD Maker.lnk" (normalized: "c:\\programdata\\microsoft\\windows\\start menu\\programs\\windows dvd maker.lnk"), lpNewFileName="C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Windows DVD Maker.lnk" (normalized: "c:\\programdata\\microsoft\\windows\\start menu\\programs\\windows dvd maker.lnk")) returned 1 [0063.075] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Windows Fax and Scan.lnk", nBufferLength=0x105, lpBuffer=0x31e11c, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Windows Fax and Scan.lnk", lpFilePart=0x0) returned 0x4d [0063.075] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e610) returned 1 [0063.075] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Windows Fax and Scan.lnk" (normalized: "c:\\programdata\\microsoft\\windows\\start menu\\programs\\windows fax and scan.lnk"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x178 [0063.076] GetFileType (hFile=0x178) returned 0x1 [0063.076] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e60c) returned 1 [0063.076] GetFileType (hFile=0x178) returned 0x1 [0063.076] GetFileSize (in: hFile=0x178, lpFileSizeHigh=0x31e718 | out: lpFileSizeHigh=0x31e718*=0x0) returned 0x4ba [0063.076] ReadFile (in: hFile=0x178, lpBuffer=0x26971f4, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x31e6c4, lpOverlapped=0x0 | out: lpBuffer=0x26971f4*, lpNumberOfBytesRead=0x31e6c4*=0x4ba, lpOverlapped=0x0) returned 1 [0063.077] CloseHandle (hObject=0x178) returned 1 [0063.092] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Windows Fax and Scan.lnk", nBufferLength=0x105, lpBuffer=0x31e108, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Windows Fax and Scan.lnk", lpFilePart=0x0) returned 0x4d [0063.092] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e5fc) returned 1 [0063.092] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Windows Fax and Scan.lnk" (normalized: "c:\\programdata\\microsoft\\windows\\start menu\\programs\\windows fax and scan.lnk"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x178 [0063.093] GetFileType (hFile=0x178) returned 0x1 [0063.093] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e5f8) returned 1 [0063.093] GetFileType (hFile=0x178) returned 0x1 [0063.093] WriteFile (in: hFile=0x178, lpBuffer=0x26e68f0*, nNumberOfBytesToWrite=0x4c0, lpNumberOfBytesWritten=0x31e68c, lpOverlapped=0x0 | out: lpBuffer=0x26e68f0*, lpNumberOfBytesWritten=0x31e68c*=0x4c0, lpOverlapped=0x0) returned 1 [0063.094] CloseHandle (hObject=0x178) returned 1 [0063.094] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Windows Fax and Scan.lnk", nBufferLength=0x105, lpBuffer=0x31e23c, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Windows Fax and Scan.lnk", lpFilePart=0x0) returned 0x4d [0063.094] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Windows Fax and Scan.lnk", nBufferLength=0x105, lpBuffer=0x31e23c, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Windows Fax and Scan.lnk", lpFilePart=0x0) returned 0x4d [0063.094] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e69c) returned 1 [0063.094] GetFileAttributesExW (in: lpFileName="C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Windows Fax and Scan.lnk" (normalized: "c:\\programdata\\microsoft\\windows\\start menu\\programs\\windows fax and scan.lnk"), fInfoLevelId=0x0, lpFileInformation=0x31e718 | out: lpFileInformation=0x31e718*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3d7b6b82, ftCreationTime.dwHighDateTime=0x1ca043f, ftLastAccessTime.dwLowDateTime=0x3d7b6b82, ftLastAccessTime.dwHighDateTime=0x1ca043f, ftLastWriteTime.dwLowDateTime=0x90cdc20, ftLastWriteTime.dwHighDateTime=0x1d6eb7f, nFileSizeHigh=0x0, nFileSizeLow=0x4c0)) returned 1 [0063.094] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e698) returned 1 [0063.094] MoveFileW (lpExistingFileName="C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Windows Fax and Scan.lnk" (normalized: "c:\\programdata\\microsoft\\windows\\start menu\\programs\\windows fax and scan.lnk"), lpNewFileName="C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Windows Fax and Scan.lnk" (normalized: "c:\\programdata\\microsoft\\windows\\start menu\\programs\\windows fax and scan.lnk")) returned 1 [0063.095] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Windows Media Player.lnk", nBufferLength=0x105, lpBuffer=0x31e11c, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Windows Media Player.lnk", lpFilePart=0x0) returned 0x4d [0063.095] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e610) returned 1 [0063.095] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Windows Media Player.lnk" (normalized: "c:\\programdata\\microsoft\\windows\\start menu\\programs\\windows media player.lnk"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x178 [0063.095] GetFileType (hFile=0x178) returned 0x1 [0063.095] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e60c) returned 1 [0063.095] GetFileType (hFile=0x178) returned 0x1 [0063.095] GetFileSize (in: hFile=0x178, lpFileSizeHigh=0x31e718 | out: lpFileSizeHigh=0x31e718*=0x0) returned 0x60b [0063.096] ReadFile (in: hFile=0x178, lpBuffer=0x26e81c0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x31e6c4, lpOverlapped=0x0 | out: lpBuffer=0x26e81c0*, lpNumberOfBytesRead=0x31e6c4*=0x60b, lpOverlapped=0x0) returned 1 [0063.097] CloseHandle (hObject=0x178) returned 1 [0063.111] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Windows Media Player.lnk", nBufferLength=0x105, lpBuffer=0x31e108, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Windows Media Player.lnk", lpFilePart=0x0) returned 0x4d [0063.111] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e5fc) returned 1 [0063.111] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Windows Media Player.lnk" (normalized: "c:\\programdata\\microsoft\\windows\\start menu\\programs\\windows media player.lnk"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x178 [0063.112] GetFileType (hFile=0x178) returned 0x1 [0063.112] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e5f8) returned 1 [0063.112] GetFileType (hFile=0x178) returned 0x1 [0063.112] WriteFile (in: hFile=0x178, lpBuffer=0x2737f4c*, nNumberOfBytesToWrite=0x610, lpNumberOfBytesWritten=0x31e68c, lpOverlapped=0x0 | out: lpBuffer=0x2737f4c*, lpNumberOfBytesWritten=0x31e68c*=0x610, lpOverlapped=0x0) returned 1 [0063.113] CloseHandle (hObject=0x178) returned 1 [0063.114] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Windows Media Player.lnk", nBufferLength=0x105, lpBuffer=0x31e23c, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Windows Media Player.lnk", lpFilePart=0x0) returned 0x4d [0063.114] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Windows Media Player.lnk", nBufferLength=0x105, lpBuffer=0x31e23c, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Windows Media Player.lnk", lpFilePart=0x0) returned 0x4d [0063.114] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e69c) returned 1 [0063.114] GetFileAttributesExW (in: lpFileName="C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Windows Media Player.lnk" (normalized: "c:\\programdata\\microsoft\\windows\\start menu\\programs\\windows media player.lnk"), fInfoLevelId=0x0, lpFileInformation=0x31e718 | out: lpFileInformation=0x31e718*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8945dbdb, ftCreationTime.dwHighDateTime=0x1ca043f, ftLastAccessTime.dwLowDateTime=0x8945dbdb, ftLastAccessTime.dwHighDateTime=0x1ca043f, ftLastWriteTime.dwLowDateTime=0x90f3d80, ftLastWriteTime.dwHighDateTime=0x1d6eb7f, nFileSizeHigh=0x0, nFileSizeLow=0x610)) returned 1 [0063.114] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e698) returned 1 [0063.114] MoveFileW (lpExistingFileName="C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Windows Media Player.lnk" (normalized: "c:\\programdata\\microsoft\\windows\\start menu\\programs\\windows media player.lnk"), lpNewFileName="C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Windows Media Player.lnk" (normalized: "c:\\programdata\\microsoft\\windows\\start menu\\programs\\windows media player.lnk")) returned 1 [0063.114] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\XPS Viewer.lnk", nBufferLength=0x105, lpBuffer=0x31e11c, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\XPS Viewer.lnk", lpFilePart=0x0) returned 0x43 [0063.114] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e610) returned 1 [0063.115] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\XPS Viewer.lnk" (normalized: "c:\\programdata\\microsoft\\windows\\start menu\\programs\\xps viewer.lnk"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x178 [0063.115] GetFileType (hFile=0x178) returned 0x1 [0063.115] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e60c) returned 1 [0063.115] GetFileType (hFile=0x178) returned 0x1 [0063.115] GetFileSize (in: hFile=0x178, lpFileSizeHigh=0x31e718 | out: lpFileSizeHigh=0x31e718*=0x0) returned 0x4de [0063.115] ReadFile (in: hFile=0x178, lpBuffer=0x27396c8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x31e6c4, lpOverlapped=0x0 | out: lpBuffer=0x27396c8*, lpNumberOfBytesRead=0x31e6c4*=0x4de, lpOverlapped=0x0) returned 1 [0063.116] CloseHandle (hObject=0x178) returned 1 [0063.129] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\XPS Viewer.lnk", nBufferLength=0x105, lpBuffer=0x31e108, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\XPS Viewer.lnk", lpFilePart=0x0) returned 0x43 [0063.129] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e5fc) returned 1 [0063.129] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\XPS Viewer.lnk" (normalized: "c:\\programdata\\microsoft\\windows\\start menu\\programs\\xps viewer.lnk"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x178 [0063.130] GetFileType (hFile=0x178) returned 0x1 [0063.130] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e5f8) returned 1 [0063.131] GetFileType (hFile=0x178) returned 0x1 [0063.131] WriteFile (in: hFile=0x178, lpBuffer=0x2788e38*, nNumberOfBytesToWrite=0x4e0, lpNumberOfBytesWritten=0x31e68c, lpOverlapped=0x0 | out: lpBuffer=0x2788e38*, lpNumberOfBytesWritten=0x31e68c*=0x4e0, lpOverlapped=0x0) returned 1 [0063.133] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\XPS Viewer.lnk", nBufferLength=0x105, lpBuffer=0x31e23c, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\XPS Viewer.lnk", lpFilePart=0x0) returned 0x43 [0063.133] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\XPS Viewer.lnk", nBufferLength=0x105, lpBuffer=0x31e23c, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\XPS Viewer.lnk", lpFilePart=0x0) returned 0x43 [0063.133] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e69c) returned 1 [0063.133] GetFileAttributesExW (in: lpFileName="C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\XPS Viewer.lnk" (normalized: "c:\\programdata\\microsoft\\windows\\start menu\\programs\\xps viewer.lnk"), fInfoLevelId=0x0, lpFileInformation=0x31e718 | out: lpFileInformation=0x31e718*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8aa62784, ftCreationTime.dwHighDateTime=0x1ca043f, ftLastAccessTime.dwLowDateTime=0x8aa62784, ftLastAccessTime.dwHighDateTime=0x1ca043f, ftLastWriteTime.dwLowDateTime=0x9119ee0, ftLastWriteTime.dwHighDateTime=0x1d6eb7f, nFileSizeHigh=0x0, nFileSizeLow=0x4e0)) returned 1 [0063.133] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e698) returned 1 [0063.133] MoveFileW (lpExistingFileName="C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\XPS Viewer.lnk" (normalized: "c:\\programdata\\microsoft\\windows\\start menu\\programs\\xps viewer.lnk"), lpNewFileName="C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\XPS Viewer.lnk" (normalized: "c:\\programdata\\microsoft\\windows\\start menu\\programs\\xps viewer.lnk")) returned 1 [0063.134] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e6cc) returned 1 [0063.134] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Accessories", nBufferLength=0x105, lpBuffer=0x31e1d4, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Accessories", lpFilePart=0x0) returned 0x40 [0063.134] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Accessories\\", nBufferLength=0x105, lpBuffer=0x31e1a8, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Accessories\\", lpFilePart=0x0) returned 0x41 [0063.134] FindFirstFileW (in: lpFileName="C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Accessories\\*", lpFindFileData=0x31e3f4 | out: lpFindFileData=0x31e3f4*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0xfd9dbcac, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x81caf400, ftLastAccessTime.dwHighDateTime=0x1d2de2a, ftLastWriteTime.dwLowDateTime=0x8246bb80, ftLastWriteTime.dwHighDateTime=0x1d2de2a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x381dc0 [0063.134] FindNextFileW (in: hFindFile=0x381dc0, lpFindFileData=0x31e404 | out: lpFindFileData=0x31e404*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0xfd9dbcac, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x81caf400, ftLastAccessTime.dwHighDateTime=0x1d2de2a, ftLastWriteTime.dwLowDateTime=0x8246bb80, ftLastWriteTime.dwHighDateTime=0x1d2de2a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0063.135] FindNextFileW (in: hFindFile=0x381dc0, lpFindFileData=0x31e404 | out: lpFindFileData=0x31e404*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0xfd9dbcac, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x89bce0a9, ftLastAccessTime.dwHighDateTime=0x1ca043f, ftLastWriteTime.dwLowDateTime=0x89bf4209, ftLastWriteTime.dwHighDateTime=0x1ca043f, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Accessibility", cAlternateFileName="ACCESS~1")) returned 1 [0063.135] FindNextFileW (in: hFindFile=0x381dc0, lpFindFileData=0x31e404 | out: lpFindFileData=0x31e404*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3e3e9c58, ftCreationTime.dwHighDateTime=0x1ca043f, ftLastAccessTime.dwLowDateTime=0x3e3e9c58, ftLastAccessTime.dwHighDateTime=0x1ca043f, ftLastWriteTime.dwLowDateTime=0x3e435f19, ftLastWriteTime.dwHighDateTime=0x1ca043f, nFileSizeHigh=0x0, nFileSizeLow=0x4ce, dwReserved0=0x0, dwReserved1=0x0, cFileName="Calculator.lnk", cAlternateFileName="CALCUL~1.LNK")) returned 1 [0063.135] FindNextFileW (in: hFindFile=0x381dc0, lpFindFileData=0x31e404 | out: lpFindFileData=0x31e404*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0xec08153b, ftCreationTime.dwHighDateTime=0x1ca042b, ftLastAccessTime.dwLowDateTime=0xec08153b, ftLastAccessTime.dwHighDateTime=0x1ca042b, ftLastWriteTime.dwLowDateTime=0x8246bb80, ftLastWriteTime.dwHighDateTime=0x1d2de2a, nFileSizeHigh=0x0, nFileSizeLow=0x73e, dwReserved0=0x0, dwReserved1=0x0, cFileName="Desktop.ini", cAlternateFileName="")) returned 1 [0063.135] FindNextFileW (in: hFindFile=0x381dc0, lpFindFileData=0x31e404 | out: lpFindFileData=0x31e404*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x27fbfe08, ftCreationTime.dwHighDateTime=0x1ca043f, ftLastAccessTime.dwLowDateTime=0x27fbfe08, ftLastAccessTime.dwHighDateTime=0x1ca043f, ftLastWriteTime.dwLowDateTime=0x28032229, ftLastWriteTime.dwHighDateTime=0x1ca043f, nFileSizeHigh=0x0, nFileSizeLow=0x4f2, dwReserved0=0x0, dwReserved1=0x0, cFileName="displayswitch.lnk", cAlternateFileName="DISPLA~1.LNK")) returned 1 [0063.135] FindNextFileW (in: hFindFile=0x381dc0, lpFindFileData=0x31e404 | out: lpFindFileData=0x31e404*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x80c2bb60, ftCreationTime.dwHighDateTime=0x1d2de2a, ftLastAccessTime.dwLowDateTime=0x80c2bb60, ftLastAccessTime.dwHighDateTime=0x1d2de2a, ftLastWriteTime.dwLowDateTime=0x8246bb80, ftLastWriteTime.dwHighDateTime=0x1d2de2a, nFileSizeHigh=0x0, nFileSizeLow=0x554, dwReserved0=0x0, dwReserved1=0x0, cFileName="Math Input Panel.lnk", cAlternateFileName="MATHIN~1.LNK")) returned 1 [0063.135] FindNextFileW (in: hFindFile=0x381dc0, lpFindFileData=0x31e404 | out: lpFindFileData=0x31e404*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x80c77e20, ftCreationTime.dwHighDateTime=0x1d2de2a, ftLastAccessTime.dwLowDateTime=0x80c77e20, ftLastAccessTime.dwHighDateTime=0x1d2de2a, ftLastWriteTime.dwLowDateTime=0x80c77e20, ftLastWriteTime.dwHighDateTime=0x1d2de2a, nFileSizeHigh=0x0, nFileSizeLow=0x4d6, dwReserved0=0x0, dwReserved1=0x0, cFileName="Mobility Center.lnk", cAlternateFileName="MOBILI~1.LNK")) returned 1 [0063.135] FindNextFileW (in: hFindFile=0x381dc0, lpFindFileData=0x31e404 | out: lpFindFileData=0x31e404*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x80afb060, ftCreationTime.dwHighDateTime=0x1d2de2a, ftLastAccessTime.dwLowDateTime=0x80afb060, ftLastAccessTime.dwHighDateTime=0x1d2de2a, ftLastWriteTime.dwLowDateTime=0x80afb060, ftLastWriteTime.dwHighDateTime=0x1d2de2a, nFileSizeHigh=0x0, nFileSizeLow=0x4da, dwReserved0=0x0, dwReserved1=0x0, cFileName="NetworkProjection.lnk", cAlternateFileName="NETWOR~1.LNK")) returned 1 [0063.136] FindNextFileW (in: hFindFile=0x381dc0, lpFindFileData=0x31e404 | out: lpFindFileData=0x31e404*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2d8b74ec, ftCreationTime.dwHighDateTime=0x1ca043f, ftLastAccessTime.dwLowDateTime=0x2d8b74ec, ftLastAccessTime.dwHighDateTime=0x1ca043f, ftLastWriteTime.dwLowDateTime=0x2da0e14f, ftLastWriteTime.dwHighDateTime=0x1ca043f, nFileSizeHigh=0x0, nFileSizeLow=0x4da, dwReserved0=0x0, dwReserved1=0x0, cFileName="Paint.lnk", cAlternateFileName="")) returned 1 [0063.136] FindNextFileW (in: hFindFile=0x381dc0, lpFindFileData=0x31e404 | out: lpFindFileData=0x31e404*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x173a8e5b, ftCreationTime.dwHighDateTime=0x1ca043f, ftLastAccessTime.dwLowDateTime=0x173a8e5b, ftLastAccessTime.dwHighDateTime=0x1ca043f, ftLastWriteTime.dwLowDateTime=0x174413dc, ftLastWriteTime.dwHighDateTime=0x1ca043f, nFileSizeHigh=0x0, nFileSizeLow=0x557, dwReserved0=0x0, dwReserved1=0x0, cFileName="Remote Desktop Connection.lnk", cAlternateFileName="REMOTE~1.LNK")) returned 1 [0063.136] FindNextFileW (in: hFindFile=0x381dc0, lpFindFileData=0x31e404 | out: lpFindFileData=0x31e404*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x81caf400, ftCreationTime.dwHighDateTime=0x1d2de2a, ftLastAccessTime.dwLowDateTime=0x81caf400, ftLastAccessTime.dwHighDateTime=0x1d2de2a, ftLastWriteTime.dwLowDateTime=0x81caf400, ftLastWriteTime.dwHighDateTime=0x1d2de2a, nFileSizeHigh=0x0, nFileSizeLow=0x4f8, dwReserved0=0x0, dwReserved1=0x0, cFileName="Snipping Tool.lnk", cAlternateFileName="SNIPPI~1.LNK")) returned 1 [0063.136] FindNextFileW (in: hFindFile=0x381dc0, lpFindFileData=0x31e404 | out: lpFindFileData=0x31e404*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8aad4ba5, ftCreationTime.dwHighDateTime=0x1ca043f, ftLastAccessTime.dwLowDateTime=0x8aad4ba5, ftLastAccessTime.dwHighDateTime=0x1ca043f, ftLastWriteTime.dwLowDateTime=0x8aad4ba5, ftLastWriteTime.dwHighDateTime=0x1ca043f, nFileSizeHigh=0x0, nFileSizeLow=0x532, dwReserved0=0x0, dwReserved1=0x0, cFileName="Sound Recorder.lnk", cAlternateFileName="SOUNDR~1.LNK")) returned 1 [0063.136] FindNextFileW (in: hFindFile=0x381dc0, lpFindFileData=0x31e404 | out: lpFindFileData=0x31e404*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x80cc40e0, ftCreationTime.dwHighDateTime=0x1d2de2a, ftLastAccessTime.dwLowDateTime=0x80cc40e0, ftLastAccessTime.dwHighDateTime=0x1d2de2a, ftLastWriteTime.dwLowDateTime=0x80cc40e0, ftLastWriteTime.dwHighDateTime=0x1d2de2a, nFileSizeHigh=0x0, nFileSizeLow=0x547, dwReserved0=0x0, dwReserved1=0x0, cFileName="Sticky Notes.lnk", cAlternateFileName="STICKY~1.LNK")) returned 1 [0063.136] FindNextFileW (in: hFindFile=0x381dc0, lpFindFileData=0x31e404 | out: lpFindFileData=0x31e404*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3c9baa28, ftCreationTime.dwHighDateTime=0x1ca043f, ftLastAccessTime.dwLowDateTime=0x3c9baa28, ftLastAccessTime.dwHighDateTime=0x1ca043f, ftLastWriteTime.dwLowDateTime=0x3ca06ce9, ftLastWriteTime.dwHighDateTime=0x1ca043f, nFileSizeHigh=0x0, nFileSizeLow=0x4e6, dwReserved0=0x0, dwReserved1=0x0, cFileName="Sync Center.lnk", cAlternateFileName="SYNCCE~1.LNK")) returned 1 [0063.136] FindNextFileW (in: hFindFile=0x381dc0, lpFindFileData=0x31e404 | out: lpFindFileData=0x31e404*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0xfd9dbcac, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x8ace9ee9, ftLastAccessTime.dwHighDateTime=0x1ca043f, ftLastWriteTime.dwLowDateTime=0x8ace9ee9, ftLastWriteTime.dwHighDateTime=0x1ca043f, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="System Tools", cAlternateFileName="SYSTEM~1")) returned 1 [0063.136] FindNextFileW (in: hFindFile=0x381dc0, lpFindFileData=0x31e404 | out: lpFindFileData=0x31e404*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x9182055d, ftCreationTime.dwHighDateTime=0x1cbf8eb, ftLastAccessTime.dwLowDateTime=0x8126b520, ftLastAccessTime.dwHighDateTime=0x1d2de2a, ftLastWriteTime.dwLowDateTime=0x81291680, ftLastWriteTime.dwHighDateTime=0x1d2de2a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Tablet PC", cAlternateFileName="TABLET~1")) returned 1 [0063.137] FindNextFileW (in: hFindFile=0x381dc0, lpFindFileData=0x31e404 | out: lpFindFileData=0x31e404*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8b13a6d0, ftCreationTime.dwHighDateTime=0x1ca043f, ftLastAccessTime.dwLowDateTime=0x8b13a6d0, ftLastAccessTime.dwHighDateTime=0x1ca043f, ftLastWriteTime.dwLowDateTime=0x8b13a6d0, ftLastWriteTime.dwHighDateTime=0x1ca043f, nFileSizeHigh=0x0, nFileSizeLow=0x62b, dwReserved0=0x0, dwReserved1=0x0, cFileName="Welcome Center.lnk", cAlternateFileName="WELCOM~1.LNK")) returned 1 [0063.137] FindNextFileW (in: hFindFile=0x381dc0, lpFindFileData=0x31e404 | out: lpFindFileData=0x31e404*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x80020c30, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x8d79c9d7, ftLastAccessTime.dwHighDateTime=0x1ca043f, ftLastWriteTime.dwLowDateTime=0x8d7c2b37, ftLastWriteTime.dwHighDateTime=0x1ca043f, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Windows PowerShell", cAlternateFileName="WINDOW~1")) returned 1 [0063.137] FindNextFileW (in: hFindFile=0x381dc0, lpFindFileData=0x31e404 | out: lpFindFileData=0x31e404*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3d25b9f8, ftCreationTime.dwHighDateTime=0x1ca043f, ftLastAccessTime.dwLowDateTime=0x3d25b9f8, ftLastAccessTime.dwHighDateTime=0x1ca043f, ftLastWriteTime.dwLowDateTime=0x3d2cde19, ftLastWriteTime.dwHighDateTime=0x1ca043f, nFileSizeHigh=0x0, nFileSizeLow=0x52a, dwReserved0=0x0, dwReserved1=0x0, cFileName="Wordpad.lnk", cAlternateFileName="")) returned 1 [0063.137] FindNextFileW (in: hFindFile=0x381dc0, lpFindFileData=0x31e404 | out: lpFindFileData=0x31e404*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0063.137] FindClose (in: hFindFile=0x381dc0 | out: hFindFile=0x381dc0) returned 1 [0063.137] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e68c) returned 1 [0063.137] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e698) returned 1 [0063.137] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e6cc) returned 1 [0063.137] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Accessories", nBufferLength=0x105, lpBuffer=0x31e1d4, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Accessories", lpFilePart=0x0) returned 0x40 [0063.137] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Accessories\\", nBufferLength=0x105, lpBuffer=0x31e1a8, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Accessories\\", lpFilePart=0x0) returned 0x41 [0063.137] FindFirstFileW (in: lpFileName="C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Accessories\\*", lpFindFileData=0x31e3f4 | out: lpFindFileData=0x31e3f4*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0xfd9dbcac, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x81caf400, ftLastAccessTime.dwHighDateTime=0x1d2de2a, ftLastWriteTime.dwLowDateTime=0x8246bb80, ftLastWriteTime.dwHighDateTime=0x1d2de2a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x381dc0 [0063.138] FindNextFileW (in: hFindFile=0x381dc0, lpFindFileData=0x31e404 | out: lpFindFileData=0x31e404*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0xfd9dbcac, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x81caf400, ftLastAccessTime.dwHighDateTime=0x1d2de2a, ftLastWriteTime.dwLowDateTime=0x8246bb80, ftLastWriteTime.dwHighDateTime=0x1d2de2a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0063.138] FindNextFileW (in: hFindFile=0x381dc0, lpFindFileData=0x31e404 | out: lpFindFileData=0x31e404*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0xfd9dbcac, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x89bce0a9, ftLastAccessTime.dwHighDateTime=0x1ca043f, ftLastWriteTime.dwLowDateTime=0x89bf4209, ftLastWriteTime.dwHighDateTime=0x1ca043f, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Accessibility", cAlternateFileName="ACCESS~1")) returned 1 [0063.138] FindNextFileW (in: hFindFile=0x381dc0, lpFindFileData=0x31e404 | out: lpFindFileData=0x31e404*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3e3e9c58, ftCreationTime.dwHighDateTime=0x1ca043f, ftLastAccessTime.dwLowDateTime=0x3e3e9c58, ftLastAccessTime.dwHighDateTime=0x1ca043f, ftLastWriteTime.dwLowDateTime=0x3e435f19, ftLastWriteTime.dwHighDateTime=0x1ca043f, nFileSizeHigh=0x0, nFileSizeLow=0x4ce, dwReserved0=0x0, dwReserved1=0x0, cFileName="Calculator.lnk", cAlternateFileName="CALCUL~1.LNK")) returned 1 [0063.138] FindNextFileW (in: hFindFile=0x381dc0, lpFindFileData=0x31e404 | out: lpFindFileData=0x31e404*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0xec08153b, ftCreationTime.dwHighDateTime=0x1ca042b, ftLastAccessTime.dwLowDateTime=0xec08153b, ftLastAccessTime.dwHighDateTime=0x1ca042b, ftLastWriteTime.dwLowDateTime=0x8246bb80, ftLastWriteTime.dwHighDateTime=0x1d2de2a, nFileSizeHigh=0x0, nFileSizeLow=0x73e, dwReserved0=0x0, dwReserved1=0x0, cFileName="Desktop.ini", cAlternateFileName="")) returned 1 [0063.138] FindNextFileW (in: hFindFile=0x381dc0, lpFindFileData=0x31e404 | out: lpFindFileData=0x31e404*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x27fbfe08, ftCreationTime.dwHighDateTime=0x1ca043f, ftLastAccessTime.dwLowDateTime=0x27fbfe08, ftLastAccessTime.dwHighDateTime=0x1ca043f, ftLastWriteTime.dwLowDateTime=0x28032229, ftLastWriteTime.dwHighDateTime=0x1ca043f, nFileSizeHigh=0x0, nFileSizeLow=0x4f2, dwReserved0=0x0, dwReserved1=0x0, cFileName="displayswitch.lnk", cAlternateFileName="DISPLA~1.LNK")) returned 1 [0063.138] FindNextFileW (in: hFindFile=0x381dc0, lpFindFileData=0x31e404 | out: lpFindFileData=0x31e404*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x80c2bb60, ftCreationTime.dwHighDateTime=0x1d2de2a, ftLastAccessTime.dwLowDateTime=0x80c2bb60, ftLastAccessTime.dwHighDateTime=0x1d2de2a, ftLastWriteTime.dwLowDateTime=0x8246bb80, ftLastWriteTime.dwHighDateTime=0x1d2de2a, nFileSizeHigh=0x0, nFileSizeLow=0x554, dwReserved0=0x0, dwReserved1=0x0, cFileName="Math Input Panel.lnk", cAlternateFileName="MATHIN~1.LNK")) returned 1 [0063.139] FindNextFileW (in: hFindFile=0x381dc0, lpFindFileData=0x31e404 | out: lpFindFileData=0x31e404*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x80c77e20, ftCreationTime.dwHighDateTime=0x1d2de2a, ftLastAccessTime.dwLowDateTime=0x80c77e20, ftLastAccessTime.dwHighDateTime=0x1d2de2a, ftLastWriteTime.dwLowDateTime=0x80c77e20, ftLastWriteTime.dwHighDateTime=0x1d2de2a, nFileSizeHigh=0x0, nFileSizeLow=0x4d6, dwReserved0=0x0, dwReserved1=0x0, cFileName="Mobility Center.lnk", cAlternateFileName="MOBILI~1.LNK")) returned 1 [0063.139] FindNextFileW (in: hFindFile=0x381dc0, lpFindFileData=0x31e404 | out: lpFindFileData=0x31e404*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x80afb060, ftCreationTime.dwHighDateTime=0x1d2de2a, ftLastAccessTime.dwLowDateTime=0x80afb060, ftLastAccessTime.dwHighDateTime=0x1d2de2a, ftLastWriteTime.dwLowDateTime=0x80afb060, ftLastWriteTime.dwHighDateTime=0x1d2de2a, nFileSizeHigh=0x0, nFileSizeLow=0x4da, dwReserved0=0x0, dwReserved1=0x0, cFileName="NetworkProjection.lnk", cAlternateFileName="NETWOR~1.LNK")) returned 1 [0063.139] FindNextFileW (in: hFindFile=0x381dc0, lpFindFileData=0x31e404 | out: lpFindFileData=0x31e404*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2d8b74ec, ftCreationTime.dwHighDateTime=0x1ca043f, ftLastAccessTime.dwLowDateTime=0x2d8b74ec, ftLastAccessTime.dwHighDateTime=0x1ca043f, ftLastWriteTime.dwLowDateTime=0x2da0e14f, ftLastWriteTime.dwHighDateTime=0x1ca043f, nFileSizeHigh=0x0, nFileSizeLow=0x4da, dwReserved0=0x0, dwReserved1=0x0, cFileName="Paint.lnk", cAlternateFileName="")) returned 1 [0063.139] FindNextFileW (in: hFindFile=0x381dc0, lpFindFileData=0x31e404 | out: lpFindFileData=0x31e404*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x173a8e5b, ftCreationTime.dwHighDateTime=0x1ca043f, ftLastAccessTime.dwLowDateTime=0x173a8e5b, ftLastAccessTime.dwHighDateTime=0x1ca043f, ftLastWriteTime.dwLowDateTime=0x174413dc, ftLastWriteTime.dwHighDateTime=0x1ca043f, nFileSizeHigh=0x0, nFileSizeLow=0x557, dwReserved0=0x0, dwReserved1=0x0, cFileName="Remote Desktop Connection.lnk", cAlternateFileName="REMOTE~1.LNK")) returned 1 [0063.139] FindNextFileW (in: hFindFile=0x381dc0, lpFindFileData=0x31e404 | out: lpFindFileData=0x31e404*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x81caf400, ftCreationTime.dwHighDateTime=0x1d2de2a, ftLastAccessTime.dwLowDateTime=0x81caf400, ftLastAccessTime.dwHighDateTime=0x1d2de2a, ftLastWriteTime.dwLowDateTime=0x81caf400, ftLastWriteTime.dwHighDateTime=0x1d2de2a, nFileSizeHigh=0x0, nFileSizeLow=0x4f8, dwReserved0=0x0, dwReserved1=0x0, cFileName="Snipping Tool.lnk", cAlternateFileName="SNIPPI~1.LNK")) returned 1 [0063.139] FindNextFileW (in: hFindFile=0x381dc0, lpFindFileData=0x31e404 | out: lpFindFileData=0x31e404*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8aad4ba5, ftCreationTime.dwHighDateTime=0x1ca043f, ftLastAccessTime.dwLowDateTime=0x8aad4ba5, ftLastAccessTime.dwHighDateTime=0x1ca043f, ftLastWriteTime.dwLowDateTime=0x8aad4ba5, ftLastWriteTime.dwHighDateTime=0x1ca043f, nFileSizeHigh=0x0, nFileSizeLow=0x532, dwReserved0=0x0, dwReserved1=0x0, cFileName="Sound Recorder.lnk", cAlternateFileName="SOUNDR~1.LNK")) returned 1 [0063.140] FindNextFileW (in: hFindFile=0x381dc0, lpFindFileData=0x31e404 | out: lpFindFileData=0x31e404*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x80cc40e0, ftCreationTime.dwHighDateTime=0x1d2de2a, ftLastAccessTime.dwLowDateTime=0x80cc40e0, ftLastAccessTime.dwHighDateTime=0x1d2de2a, ftLastWriteTime.dwLowDateTime=0x80cc40e0, ftLastWriteTime.dwHighDateTime=0x1d2de2a, nFileSizeHigh=0x0, nFileSizeLow=0x547, dwReserved0=0x0, dwReserved1=0x0, cFileName="Sticky Notes.lnk", cAlternateFileName="STICKY~1.LNK")) returned 1 [0063.140] FindNextFileW (in: hFindFile=0x381dc0, lpFindFileData=0x31e404 | out: lpFindFileData=0x31e404*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3c9baa28, ftCreationTime.dwHighDateTime=0x1ca043f, ftLastAccessTime.dwLowDateTime=0x3c9baa28, ftLastAccessTime.dwHighDateTime=0x1ca043f, ftLastWriteTime.dwLowDateTime=0x3ca06ce9, ftLastWriteTime.dwHighDateTime=0x1ca043f, nFileSizeHigh=0x0, nFileSizeLow=0x4e6, dwReserved0=0x0, dwReserved1=0x0, cFileName="Sync Center.lnk", cAlternateFileName="SYNCCE~1.LNK")) returned 1 [0063.140] FindNextFileW (in: hFindFile=0x381dc0, lpFindFileData=0x31e404 | out: lpFindFileData=0x31e404*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0xfd9dbcac, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x8ace9ee9, ftLastAccessTime.dwHighDateTime=0x1ca043f, ftLastWriteTime.dwLowDateTime=0x8ace9ee9, ftLastWriteTime.dwHighDateTime=0x1ca043f, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="System Tools", cAlternateFileName="SYSTEM~1")) returned 1 [0063.140] FindNextFileW (in: hFindFile=0x381dc0, lpFindFileData=0x31e404 | out: lpFindFileData=0x31e404*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x9182055d, ftCreationTime.dwHighDateTime=0x1cbf8eb, ftLastAccessTime.dwLowDateTime=0x8126b520, ftLastAccessTime.dwHighDateTime=0x1d2de2a, ftLastWriteTime.dwLowDateTime=0x81291680, ftLastWriteTime.dwHighDateTime=0x1d2de2a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Tablet PC", cAlternateFileName="TABLET~1")) returned 1 [0063.140] FindNextFileW (in: hFindFile=0x381dc0, lpFindFileData=0x31e404 | out: lpFindFileData=0x31e404*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8b13a6d0, ftCreationTime.dwHighDateTime=0x1ca043f, ftLastAccessTime.dwLowDateTime=0x8b13a6d0, ftLastAccessTime.dwHighDateTime=0x1ca043f, ftLastWriteTime.dwLowDateTime=0x8b13a6d0, ftLastWriteTime.dwHighDateTime=0x1ca043f, nFileSizeHigh=0x0, nFileSizeLow=0x62b, dwReserved0=0x0, dwReserved1=0x0, cFileName="Welcome Center.lnk", cAlternateFileName="WELCOM~1.LNK")) returned 1 [0063.140] FindNextFileW (in: hFindFile=0x381dc0, lpFindFileData=0x31e404 | out: lpFindFileData=0x31e404*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x80020c30, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x8d79c9d7, ftLastAccessTime.dwHighDateTime=0x1ca043f, ftLastWriteTime.dwLowDateTime=0x8d7c2b37, ftLastWriteTime.dwHighDateTime=0x1ca043f, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Windows PowerShell", cAlternateFileName="WINDOW~1")) returned 1 [0063.140] FindNextFileW (in: hFindFile=0x381dc0, lpFindFileData=0x31e404 | out: lpFindFileData=0x31e404*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3d25b9f8, ftCreationTime.dwHighDateTime=0x1ca043f, ftLastAccessTime.dwLowDateTime=0x3d25b9f8, ftLastAccessTime.dwHighDateTime=0x1ca043f, ftLastWriteTime.dwLowDateTime=0x3d2cde19, ftLastWriteTime.dwHighDateTime=0x1ca043f, nFileSizeHigh=0x0, nFileSizeLow=0x52a, dwReserved0=0x0, dwReserved1=0x0, cFileName="Wordpad.lnk", cAlternateFileName="")) returned 1 [0063.141] FindNextFileW (in: hFindFile=0x381dc0, lpFindFileData=0x31e404 | out: lpFindFileData=0x31e404*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3d25b9f8, ftCreationTime.dwHighDateTime=0x1ca043f, ftLastAccessTime.dwLowDateTime=0x3d25b9f8, ftLastAccessTime.dwHighDateTime=0x1ca043f, ftLastWriteTime.dwLowDateTime=0x3d2cde19, ftLastWriteTime.dwHighDateTime=0x1ca043f, nFileSizeHigh=0x0, nFileSizeLow=0x52a, dwReserved0=0x0, dwReserved1=0x0, cFileName="Wordpad.lnk", cAlternateFileName="")) returned 0 [0063.141] FindClose (in: hFindFile=0x381dc0 | out: hFindFile=0x381dc0) returned 1 [0063.141] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e68c) returned 1 [0063.141] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e698) returned 1 [0063.141] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Accessories\\Calculator.lnk", nBufferLength=0x105, lpBuffer=0x31e0a4, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Accessories\\Calculator.lnk", lpFilePart=0x0) returned 0x4f [0063.141] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e598) returned 1 [0063.141] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Accessories\\Calculator.lnk" (normalized: "c:\\programdata\\microsoft\\windows\\start menu\\programs\\accessories\\calculator.lnk"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x178 [0063.141] GetFileType (hFile=0x178) returned 0x1 [0063.141] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e594) returned 1 [0063.141] GetFileType (hFile=0x178) returned 0x1 [0063.141] GetFileSize (in: hFile=0x178, lpFileSizeHigh=0x31e6a0 | out: lpFileSizeHigh=0x31e6a0*=0x0) returned 0x4ce [0063.141] ReadFile (in: hFile=0x178, lpBuffer=0x278ff18, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x31e64c, lpOverlapped=0x0 | out: lpBuffer=0x278ff18*, lpNumberOfBytesRead=0x31e64c*=0x4ce, lpOverlapped=0x0) returned 1 [0063.155] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Accessories\\Calculator.lnk", nBufferLength=0x105, lpBuffer=0x31e090, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Accessories\\Calculator.lnk", lpFilePart=0x0) returned 0x4f [0063.155] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e584) returned 1 [0063.155] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Accessories\\Calculator.lnk" (normalized: "c:\\programdata\\microsoft\\windows\\start menu\\programs\\accessories\\calculator.lnk"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x178 [0063.156] GetFileType (hFile=0x178) returned 0x1 [0063.157] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e580) returned 1 [0063.157] GetFileType (hFile=0x178) returned 0x1 [0063.157] WriteFile (in: hFile=0x178, lpBuffer=0x27df650*, nNumberOfBytesToWrite=0x4d0, lpNumberOfBytesWritten=0x31e614, lpOverlapped=0x0 | out: lpBuffer=0x27df650*, lpNumberOfBytesWritten=0x31e614*=0x4d0, lpOverlapped=0x0) returned 1 [0063.158] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Accessories\\Calculator.lnk", nBufferLength=0x105, lpBuffer=0x31e1c4, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Accessories\\Calculator.lnk", lpFilePart=0x0) returned 0x4f [0063.158] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Accessories\\Calculator.lnk", nBufferLength=0x105, lpBuffer=0x31e1c4, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Accessories\\Calculator.lnk", lpFilePart=0x0) returned 0x4f [0063.158] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e624) returned 1 [0063.158] GetFileAttributesExW (in: lpFileName="C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Accessories\\Calculator.lnk" (normalized: "c:\\programdata\\microsoft\\windows\\start menu\\programs\\accessories\\calculator.lnk"), fInfoLevelId=0x0, lpFileInformation=0x31e6a0 | out: lpFileInformation=0x31e6a0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3e3e9c58, ftCreationTime.dwHighDateTime=0x1ca043f, ftLastAccessTime.dwLowDateTime=0x3e3e9c58, ftLastAccessTime.dwHighDateTime=0x1ca043f, ftLastWriteTime.dwLowDateTime=0x91661a0, ftLastWriteTime.dwHighDateTime=0x1d6eb7f, nFileSizeHigh=0x0, nFileSizeLow=0x4d0)) returned 1 [0063.158] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e620) returned 1 [0063.158] MoveFileW (lpExistingFileName="C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Accessories\\Calculator.lnk" (normalized: "c:\\programdata\\microsoft\\windows\\start menu\\programs\\accessories\\calculator.lnk"), lpNewFileName="C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Accessories\\Calculator.lnk" (normalized: "c:\\programdata\\microsoft\\windows\\start menu\\programs\\accessories\\calculator.lnk")) returned 1 [0063.159] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Accessories\\displayswitch.lnk", nBufferLength=0x105, lpBuffer=0x31e0a4, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Accessories\\displayswitch.lnk", lpFilePart=0x0) returned 0x52 [0063.159] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e598) returned 1 [0063.159] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Accessories\\displayswitch.lnk" (normalized: "c:\\programdata\\microsoft\\windows\\start menu\\programs\\accessories\\displayswitch.lnk"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x178 [0063.159] GetFileType (hFile=0x178) returned 0x1 [0063.159] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e594) returned 1 [0063.159] GetFileType (hFile=0x178) returned 0x1 [0063.159] GetFileSize (in: hFile=0x178, lpFileSizeHigh=0x31e6a0 | out: lpFileSizeHigh=0x31e6a0*=0x0) returned 0x4f2 [0063.159] ReadFile (in: hFile=0x178, lpBuffer=0x27e0e24, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x31e64c, lpOverlapped=0x0 | out: lpBuffer=0x27e0e24*, lpNumberOfBytesRead=0x31e64c*=0x4f2, lpOverlapped=0x0) returned 1 [0063.195] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Accessories\\displayswitch.lnk", nBufferLength=0x105, lpBuffer=0x31e090, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Accessories\\displayswitch.lnk", lpFilePart=0x0) returned 0x52 [0063.196] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e584) returned 1 [0063.196] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Accessories\\displayswitch.lnk" (normalized: "c:\\programdata\\microsoft\\windows\\start menu\\programs\\accessories\\displayswitch.lnk"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x178 [0063.197] GetFileType (hFile=0x178) returned 0x1 [0063.197] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e580) returned 1 [0063.197] GetFileType (hFile=0x178) returned 0x1 [0063.197] WriteFile (in: hFile=0x178, lpBuffer=0x2632894*, nNumberOfBytesToWrite=0x500, lpNumberOfBytesWritten=0x31e614, lpOverlapped=0x0 | out: lpBuffer=0x2632894*, lpNumberOfBytesWritten=0x31e614*=0x500, lpOverlapped=0x0) returned 1 [0063.198] CloseHandle (hObject=0x178) returned 1 [0063.199] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Accessories\\displayswitch.lnk", nBufferLength=0x105, lpBuffer=0x31e1c4, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Accessories\\displayswitch.lnk", lpFilePart=0x0) returned 0x52 [0063.199] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Accessories\\displayswitch.lnk", nBufferLength=0x105, lpBuffer=0x31e1c4, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Accessories\\displayswitch.lnk", lpFilePart=0x0) returned 0x52 [0063.199] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e624) returned 1 [0063.199] GetFileAttributesExW (in: lpFileName="C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Accessories\\displayswitch.lnk" (normalized: "c:\\programdata\\microsoft\\windows\\start menu\\programs\\accessories\\displayswitch.lnk"), fInfoLevelId=0x0, lpFileInformation=0x31e6a0 | out: lpFileInformation=0x31e6a0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x27fbfe08, ftCreationTime.dwHighDateTime=0x1ca043f, ftLastAccessTime.dwLowDateTime=0x27fbfe08, ftLastAccessTime.dwHighDateTime=0x1ca043f, ftLastWriteTime.dwLowDateTime=0x91d85c0, ftLastWriteTime.dwHighDateTime=0x1d6eb7f, nFileSizeHigh=0x0, nFileSizeLow=0x500)) returned 1 [0063.199] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e620) returned 1 [0063.199] MoveFileW (lpExistingFileName="C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Accessories\\displayswitch.lnk" (normalized: "c:\\programdata\\microsoft\\windows\\start menu\\programs\\accessories\\displayswitch.lnk"), lpNewFileName="C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Accessories\\displayswitch.lnk" (normalized: "c:\\programdata\\microsoft\\windows\\start menu\\programs\\accessories\\displayswitch.lnk")) returned 1 [0063.200] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Accessories\\Math Input Panel.lnk", nBufferLength=0x105, lpBuffer=0x31e0a4, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Accessories\\Math Input Panel.lnk", lpFilePart=0x0) returned 0x55 [0063.200] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e598) returned 1 [0063.200] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Accessories\\Math Input Panel.lnk" (normalized: "c:\\programdata\\microsoft\\windows\\start menu\\programs\\accessories\\math input panel.lnk"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x178 [0063.200] GetFileType (hFile=0x178) returned 0x1 [0063.200] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e594) returned 1 [0063.200] GetFileType (hFile=0x178) returned 0x1 [0063.200] GetFileSize (in: hFile=0x178, lpFileSizeHigh=0x31e6a0 | out: lpFileSizeHigh=0x31e6a0*=0x0) returned 0x554 [0063.200] ReadFile (in: hFile=0x178, lpBuffer=0x26340cc, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x31e64c, lpOverlapped=0x0 | out: lpBuffer=0x26340cc*, lpNumberOfBytesRead=0x31e64c*=0x554, lpOverlapped=0x0) returned 1 [0063.202] CloseHandle (hObject=0x178) returned 1 [0063.224] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Accessories\\Math Input Panel.lnk", nBufferLength=0x105, lpBuffer=0x31e090, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Accessories\\Math Input Panel.lnk", lpFilePart=0x0) returned 0x55 [0063.224] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e584) returned 1 [0063.224] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Accessories\\Math Input Panel.lnk" (normalized: "c:\\programdata\\microsoft\\windows\\start menu\\programs\\accessories\\math input panel.lnk"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x178 [0063.225] GetFileType (hFile=0x178) returned 0x1 [0063.225] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e580) returned 1 [0063.225] GetFileType (hFile=0x178) returned 0x1 [0063.225] WriteFile (in: hFile=0x178, lpBuffer=0x2683c50*, nNumberOfBytesToWrite=0x560, lpNumberOfBytesWritten=0x31e614, lpOverlapped=0x0 | out: lpBuffer=0x2683c50*, lpNumberOfBytesWritten=0x31e614*=0x560, lpOverlapped=0x0) returned 1 [0063.226] CloseHandle (hObject=0x178) returned 1 [0063.226] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Accessories\\Math Input Panel.lnk", nBufferLength=0x105, lpBuffer=0x31e1c4, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Accessories\\Math Input Panel.lnk", lpFilePart=0x0) returned 0x55 [0063.226] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Accessories\\Math Input Panel.lnk", nBufferLength=0x105, lpBuffer=0x31e1c4, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Accessories\\Math Input Panel.lnk", lpFilePart=0x0) returned 0x55 [0063.226] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e624) returned 1 [0063.226] GetFileAttributesExW (in: lpFileName="C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Accessories\\Math Input Panel.lnk" (normalized: "c:\\programdata\\microsoft\\windows\\start menu\\programs\\accessories\\math input panel.lnk"), fInfoLevelId=0x0, lpFileInformation=0x31e6a0 | out: lpFileInformation=0x31e6a0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x80c2bb60, ftCreationTime.dwHighDateTime=0x1d2de2a, ftLastAccessTime.dwLowDateTime=0x80c2bb60, ftLastAccessTime.dwHighDateTime=0x1d2de2a, ftLastWriteTime.dwLowDateTime=0x91fe720, ftLastWriteTime.dwHighDateTime=0x1d6eb7f, nFileSizeHigh=0x0, nFileSizeLow=0x560)) returned 1 [0063.226] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e620) returned 1 [0063.227] MoveFileW (lpExistingFileName="C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Accessories\\Math Input Panel.lnk" (normalized: "c:\\programdata\\microsoft\\windows\\start menu\\programs\\accessories\\math input panel.lnk"), lpNewFileName="C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Accessories\\Math Input Panel.lnk" (normalized: "c:\\programdata\\microsoft\\windows\\start menu\\programs\\accessories\\math input panel.lnk")) returned 1 [0063.227] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Accessories\\Mobility Center.lnk", nBufferLength=0x105, lpBuffer=0x31e0a4, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Accessories\\Mobility Center.lnk", lpFilePart=0x0) returned 0x54 [0063.227] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e598) returned 1 [0063.227] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Accessories\\Mobility Center.lnk" (normalized: "c:\\programdata\\microsoft\\windows\\start menu\\programs\\accessories\\mobility center.lnk"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x178 [0063.228] GetFileType (hFile=0x178) returned 0x1 [0063.228] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e594) returned 1 [0063.228] GetFileType (hFile=0x178) returned 0x1 [0063.228] GetFileSize (in: hFile=0x178, lpFileSizeHigh=0x31e6a0 | out: lpFileSizeHigh=0x31e6a0*=0x0) returned 0x4d6 [0063.228] ReadFile (in: hFile=0x178, lpBuffer=0x2685410, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x31e64c, lpOverlapped=0x0 | out: lpBuffer=0x2685410*, lpNumberOfBytesRead=0x31e64c*=0x4d6, lpOverlapped=0x0) returned 1 [0063.230] CloseHandle (hObject=0x178) returned 1 [0063.244] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Accessories\\Mobility Center.lnk", nBufferLength=0x105, lpBuffer=0x31e090, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Accessories\\Mobility Center.lnk", lpFilePart=0x0) returned 0x54 [0063.244] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e584) returned 1 [0063.244] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Accessories\\Mobility Center.lnk" (normalized: "c:\\programdata\\microsoft\\windows\\start menu\\programs\\accessories\\mobility center.lnk"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x178 [0063.245] GetFileType (hFile=0x178) returned 0x1 [0063.245] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e580) returned 1 [0063.245] GetFileType (hFile=0x178) returned 0x1 [0063.248] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Accessories\\Mobility Center.lnk", nBufferLength=0x105, lpBuffer=0x31e1c4, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Accessories\\Mobility Center.lnk", lpFilePart=0x0) returned 0x54 [0063.248] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Accessories\\Mobility Center.lnk", nBufferLength=0x105, lpBuffer=0x31e1c4, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Accessories\\Mobility Center.lnk", lpFilePart=0x0) returned 0x54 [0063.248] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e624) returned 1 [0063.248] GetFileAttributesExW (in: lpFileName="C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Accessories\\Mobility Center.lnk" (normalized: "c:\\programdata\\microsoft\\windows\\start menu\\programs\\accessories\\mobility center.lnk"), fInfoLevelId=0x0, lpFileInformation=0x31e6a0 | out: lpFileInformation=0x31e6a0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x80c77e20, ftCreationTime.dwHighDateTime=0x1d2de2a, ftLastAccessTime.dwLowDateTime=0x80c77e20, ftLastAccessTime.dwHighDateTime=0x1d2de2a, ftLastWriteTime.dwLowDateTime=0x924a9e0, ftLastWriteTime.dwHighDateTime=0x1d6eb7f, nFileSizeHigh=0x0, nFileSizeLow=0x4e0)) returned 1 [0063.248] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e620) returned 1 [0063.248] MoveFileW (lpExistingFileName="C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Accessories\\Mobility Center.lnk" (normalized: "c:\\programdata\\microsoft\\windows\\start menu\\programs\\accessories\\mobility center.lnk"), lpNewFileName="C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Accessories\\Mobility Center.lnk" (normalized: "c:\\programdata\\microsoft\\windows\\start menu\\programs\\accessories\\mobility center.lnk")) returned 1 [0063.249] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Accessories\\NetworkProjection.lnk", nBufferLength=0x105, lpBuffer=0x31e0a4, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Accessories\\NetworkProjection.lnk", lpFilePart=0x0) returned 0x56 [0063.249] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e598) returned 1 [0063.249] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Accessories\\NetworkProjection.lnk" (normalized: "c:\\programdata\\microsoft\\windows\\start menu\\programs\\accessories\\networkprojection.lnk"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x178 [0063.249] GetFileType (hFile=0x178) returned 0x1 [0063.249] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e594) returned 1 [0063.249] GetFileType (hFile=0x178) returned 0x1 [0063.249] GetFileSize (in: hFile=0x178, lpFileSizeHigh=0x31e6a0 | out: lpFileSizeHigh=0x31e6a0*=0x0) returned 0x4da [0063.249] ReadFile (in: hFile=0x178, lpBuffer=0x26d6380, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x31e64c, lpOverlapped=0x0 | out: lpBuffer=0x26d6380*, lpNumberOfBytesRead=0x31e64c*=0x4da, lpOverlapped=0x0) returned 1 [0063.251] CloseHandle (hObject=0x178) returned 1 [0063.270] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Accessories\\NetworkProjection.lnk", nBufferLength=0x105, lpBuffer=0x31e090, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Accessories\\NetworkProjection.lnk", lpFilePart=0x0) returned 0x56 [0063.270] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e584) returned 1 [0063.270] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Accessories\\NetworkProjection.lnk" (normalized: "c:\\programdata\\microsoft\\windows\\start menu\\programs\\accessories\\networkprojection.lnk"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x178 [0063.272] GetFileType (hFile=0x178) returned 0x1 [0063.272] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e580) returned 1 [0063.272] GetFileType (hFile=0x178) returned 0x1 [0063.272] WriteFile (in: hFile=0x178, lpBuffer=0x2725b28*, nNumberOfBytesToWrite=0x4e0, lpNumberOfBytesWritten=0x31e614, lpOverlapped=0x0 | out: lpBuffer=0x2725b28*, lpNumberOfBytesWritten=0x31e614*=0x4e0, lpOverlapped=0x0) returned 1 [0063.273] CloseHandle (hObject=0x178) returned 1 [0063.273] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Accessories\\NetworkProjection.lnk", nBufferLength=0x105, lpBuffer=0x31e1c4, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Accessories\\NetworkProjection.lnk", lpFilePart=0x0) returned 0x56 [0063.273] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Accessories\\NetworkProjection.lnk", nBufferLength=0x105, lpBuffer=0x31e1c4, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Accessories\\NetworkProjection.lnk", lpFilePart=0x0) returned 0x56 [0063.273] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e624) returned 1 [0063.273] GetFileAttributesExW (in: lpFileName="C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Accessories\\NetworkProjection.lnk" (normalized: "c:\\programdata\\microsoft\\windows\\start menu\\programs\\accessories\\networkprojection.lnk"), fInfoLevelId=0x0, lpFileInformation=0x31e6a0 | out: lpFileInformation=0x31e6a0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x80afb060, ftCreationTime.dwHighDateTime=0x1d2de2a, ftLastAccessTime.dwLowDateTime=0x80afb060, ftLastAccessTime.dwHighDateTime=0x1d2de2a, ftLastWriteTime.dwLowDateTime=0x9270b40, ftLastWriteTime.dwHighDateTime=0x1d6eb7f, nFileSizeHigh=0x0, nFileSizeLow=0x4e0)) returned 1 [0063.273] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e620) returned 1 [0063.273] MoveFileW (lpExistingFileName="C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Accessories\\NetworkProjection.lnk" (normalized: "c:\\programdata\\microsoft\\windows\\start menu\\programs\\accessories\\networkprojection.lnk"), lpNewFileName="C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Accessories\\NetworkProjection.lnk" (normalized: "c:\\programdata\\microsoft\\windows\\start menu\\programs\\accessories\\networkprojection.lnk")) returned 1 [0063.274] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Accessories\\Paint.lnk", nBufferLength=0x105, lpBuffer=0x31e0a4, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Accessories\\Paint.lnk", lpFilePart=0x0) returned 0x4a [0063.274] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e598) returned 1 [0063.274] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Accessories\\Paint.lnk" (normalized: "c:\\programdata\\microsoft\\windows\\start menu\\programs\\accessories\\paint.lnk"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x178 [0063.274] GetFileType (hFile=0x178) returned 0x1 [0063.274] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e594) returned 1 [0063.274] GetFileType (hFile=0x178) returned 0x1 [0063.274] GetFileSize (in: hFile=0x178, lpFileSizeHigh=0x31e6a0 | out: lpFileSizeHigh=0x31e6a0*=0x0) returned 0x4da [0063.274] ReadFile (in: hFile=0x178, lpBuffer=0x27272cc, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x31e64c, lpOverlapped=0x0 | out: lpBuffer=0x27272cc*, lpNumberOfBytesRead=0x31e64c*=0x4da, lpOverlapped=0x0) returned 1 [0063.275] CloseHandle (hObject=0x178) returned 1 [0063.288] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Accessories\\Paint.lnk", nBufferLength=0x105, lpBuffer=0x31e090, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Accessories\\Paint.lnk", lpFilePart=0x0) returned 0x4a [0063.289] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e584) returned 1 [0063.289] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Accessories\\Paint.lnk" (normalized: "c:\\programdata\\microsoft\\windows\\start menu\\programs\\accessories\\paint.lnk"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x178 [0063.290] GetFileType (hFile=0x178) returned 0x1 [0063.290] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e580) returned 1 [0063.290] GetFileType (hFile=0x178) returned 0x1 [0063.291] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Accessories\\Paint.lnk", nBufferLength=0x105, lpBuffer=0x31e1c4, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Accessories\\Paint.lnk", lpFilePart=0x0) returned 0x4a [0063.291] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Accessories\\Paint.lnk", nBufferLength=0x105, lpBuffer=0x31e1c4, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Accessories\\Paint.lnk", lpFilePart=0x0) returned 0x4a [0063.291] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e624) returned 1 [0063.291] GetFileAttributesExW (in: lpFileName="C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Accessories\\Paint.lnk" (normalized: "c:\\programdata\\microsoft\\windows\\start menu\\programs\\accessories\\paint.lnk"), fInfoLevelId=0x0, lpFileInformation=0x31e6a0 | out: lpFileInformation=0x31e6a0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2d8b74ec, ftCreationTime.dwHighDateTime=0x1ca043f, ftLastAccessTime.dwLowDateTime=0x2d8b74ec, ftLastAccessTime.dwHighDateTime=0x1ca043f, ftLastWriteTime.dwLowDateTime=0x92bce00, ftLastWriteTime.dwHighDateTime=0x1d6eb7f, nFileSizeHigh=0x0, nFileSizeLow=0x4e0)) returned 1 [0063.291] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e620) returned 1 [0063.291] MoveFileW (lpExistingFileName="C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Accessories\\Paint.lnk" (normalized: "c:\\programdata\\microsoft\\windows\\start menu\\programs\\accessories\\paint.lnk"), lpNewFileName="C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Accessories\\Paint.lnk" (normalized: "c:\\programdata\\microsoft\\windows\\start menu\\programs\\accessories\\paint.lnk")) returned 1 [0063.292] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Accessories\\Remote Desktop Connection.lnk", nBufferLength=0x105, lpBuffer=0x31e0a4, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Accessories\\Remote Desktop Connection.lnk", lpFilePart=0x0) returned 0x5e [0063.292] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e598) returned 1 [0063.292] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Accessories\\Remote Desktop Connection.lnk" (normalized: "c:\\programdata\\microsoft\\windows\\start menu\\programs\\accessories\\remote desktop connection.lnk"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x178 [0063.292] GetFileType (hFile=0x178) returned 0x1 [0063.293] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e594) returned 1 [0063.293] GetFileType (hFile=0x178) returned 0x1 [0063.293] GetFileSize (in: hFile=0x178, lpFileSizeHigh=0x31e6a0 | out: lpFileSizeHigh=0x31e6a0*=0x0) returned 0x557 [0063.293] ReadFile (in: hFile=0x178, lpBuffer=0x2778284, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x31e64c, lpOverlapped=0x0 | out: lpBuffer=0x2778284*, lpNumberOfBytesRead=0x31e64c*=0x557, lpOverlapped=0x0) returned 1 [0063.297] CloseHandle (hObject=0x178) returned 1 [0063.310] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Accessories\\Remote Desktop Connection.lnk", nBufferLength=0x105, lpBuffer=0x31e090, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Accessories\\Remote Desktop Connection.lnk", lpFilePart=0x0) returned 0x5e [0063.311] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e584) returned 1 [0063.311] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Accessories\\Remote Desktop Connection.lnk" (normalized: "c:\\programdata\\microsoft\\windows\\start menu\\programs\\accessories\\remote desktop connection.lnk"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x178 [0063.312] GetFileType (hFile=0x178) returned 0x1 [0063.312] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e580) returned 1 [0063.312] GetFileType (hFile=0x178) returned 0x1 [0063.312] WriteFile (in: hFile=0x178, lpBuffer=0x27c7cd0*, nNumberOfBytesToWrite=0x560, lpNumberOfBytesWritten=0x31e614, lpOverlapped=0x0 | out: lpBuffer=0x27c7cd0*, lpNumberOfBytesWritten=0x31e614*=0x560, lpOverlapped=0x0) returned 1 [0063.313] CloseHandle (hObject=0x178) returned 1 [0063.313] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Accessories\\Remote Desktop Connection.lnk", nBufferLength=0x105, lpBuffer=0x31e1c4, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Accessories\\Remote Desktop Connection.lnk", lpFilePart=0x0) returned 0x5e [0063.313] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Accessories\\Remote Desktop Connection.lnk", nBufferLength=0x105, lpBuffer=0x31e1c4, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Accessories\\Remote Desktop Connection.lnk", lpFilePart=0x0) returned 0x5e [0063.313] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e624) returned 1 [0063.313] GetFileAttributesExW (in: lpFileName="C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Accessories\\Remote Desktop Connection.lnk" (normalized: "c:\\programdata\\microsoft\\windows\\start menu\\programs\\accessories\\remote desktop connection.lnk"), fInfoLevelId=0x0, lpFileInformation=0x31e6a0 | out: lpFileInformation=0x31e6a0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x173a8e5b, ftCreationTime.dwHighDateTime=0x1ca043f, ftLastAccessTime.dwLowDateTime=0x173a8e5b, ftLastAccessTime.dwHighDateTime=0x1ca043f, ftLastWriteTime.dwLowDateTime=0x92e2f60, ftLastWriteTime.dwHighDateTime=0x1d6eb7f, nFileSizeHigh=0x0, nFileSizeLow=0x560)) returned 1 [0063.313] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e620) returned 1 [0063.313] MoveFileW (lpExistingFileName="C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Accessories\\Remote Desktop Connection.lnk" (normalized: "c:\\programdata\\microsoft\\windows\\start menu\\programs\\accessories\\remote desktop connection.lnk"), lpNewFileName="C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Accessories\\Remote Desktop Connection.lnk" (normalized: "c:\\programdata\\microsoft\\windows\\start menu\\programs\\accessories\\remote desktop connection.lnk")) returned 1 [0063.314] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Accessories\\Snipping Tool.lnk", nBufferLength=0x105, lpBuffer=0x31e0a4, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Accessories\\Snipping Tool.lnk", lpFilePart=0x0) returned 0x52 [0063.314] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e598) returned 1 [0063.314] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Accessories\\Snipping Tool.lnk" (normalized: "c:\\programdata\\microsoft\\windows\\start menu\\programs\\accessories\\snipping tool.lnk"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x178 [0063.314] GetFileType (hFile=0x178) returned 0x1 [0063.314] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e594) returned 1 [0063.314] GetFileType (hFile=0x178) returned 0x1 [0063.314] GetFileSize (in: hFile=0x178, lpFileSizeHigh=0x31e6a0 | out: lpFileSizeHigh=0x31e6a0*=0x0) returned 0x4f8 [0063.314] ReadFile (in: hFile=0x178, lpBuffer=0x27c94d0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x31e64c, lpOverlapped=0x0 | out: lpBuffer=0x27c94d0*, lpNumberOfBytesRead=0x31e64c*=0x4f8, lpOverlapped=0x0) returned 1 [0063.315] CloseHandle (hObject=0x178) returned 1 [0063.328] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Accessories\\Snipping Tool.lnk", nBufferLength=0x105, lpBuffer=0x31e090, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Accessories\\Snipping Tool.lnk", lpFilePart=0x0) returned 0x52 [0063.328] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e584) returned 1 [0063.329] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Accessories\\Snipping Tool.lnk" (normalized: "c:\\programdata\\microsoft\\windows\\start menu\\programs\\accessories\\snipping tool.lnk"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x178 [0063.330] GetFileType (hFile=0x178) returned 0x1 [0063.330] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e580) returned 1 [0063.330] GetFileType (hFile=0x178) returned 0x1 [0063.331] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Accessories\\Snipping Tool.lnk", nBufferLength=0x105, lpBuffer=0x31e1c4, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Accessories\\Snipping Tool.lnk", lpFilePart=0x0) returned 0x52 [0063.331] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Accessories\\Snipping Tool.lnk", nBufferLength=0x105, lpBuffer=0x31e1c4, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Accessories\\Snipping Tool.lnk", lpFilePart=0x0) returned 0x52 [0063.331] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e624) returned 1 [0063.331] GetFileAttributesExW (in: lpFileName="C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Accessories\\Snipping Tool.lnk" (normalized: "c:\\programdata\\microsoft\\windows\\start menu\\programs\\accessories\\snipping tool.lnk"), fInfoLevelId=0x0, lpFileInformation=0x31e6a0 | out: lpFileInformation=0x31e6a0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x81caf400, ftCreationTime.dwHighDateTime=0x1d2de2a, ftLastAccessTime.dwLowDateTime=0x81caf400, ftLastAccessTime.dwHighDateTime=0x1d2de2a, ftLastWriteTime.dwLowDateTime=0x93090c0, ftLastWriteTime.dwHighDateTime=0x1d6eb7f, nFileSizeHigh=0x0, nFileSizeLow=0x500)) returned 1 [0063.331] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e620) returned 1 [0063.331] MoveFileW (lpExistingFileName="C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Accessories\\Snipping Tool.lnk" (normalized: "c:\\programdata\\microsoft\\windows\\start menu\\programs\\accessories\\snipping tool.lnk"), lpNewFileName="C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Accessories\\Snipping Tool.lnk" (normalized: "c:\\programdata\\microsoft\\windows\\start menu\\programs\\accessories\\snipping tool.lnk")) returned 1 [0063.332] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Accessories\\Sound Recorder.lnk", nBufferLength=0x105, lpBuffer=0x31e0a4, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Accessories\\Sound Recorder.lnk", lpFilePart=0x0) returned 0x53 [0063.332] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e598) returned 1 [0063.332] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Accessories\\Sound Recorder.lnk" (normalized: "c:\\programdata\\microsoft\\windows\\start menu\\programs\\accessories\\sound recorder.lnk"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x178 [0063.332] GetFileType (hFile=0x178) returned 0x1 [0063.332] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e594) returned 1 [0063.332] GetFileType (hFile=0x178) returned 0x1 [0063.332] GetFileSize (in: hFile=0x178, lpFileSizeHigh=0x31e6a0 | out: lpFileSizeHigh=0x31e6a0*=0x0) returned 0x532 [0063.332] ReadFile (in: hFile=0x178, lpBuffer=0x281a518, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x31e64c, lpOverlapped=0x0 | out: lpBuffer=0x281a518*, lpNumberOfBytesRead=0x31e64c*=0x532, lpOverlapped=0x0) returned 1 [0063.334] CloseHandle (hObject=0x178) returned 1 [0063.381] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Accessories\\Sound Recorder.lnk", nBufferLength=0x105, lpBuffer=0x31e090, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Accessories\\Sound Recorder.lnk", lpFilePart=0x0) returned 0x53 [0063.381] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e584) returned 1 [0063.381] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Accessories\\Sound Recorder.lnk" (normalized: "c:\\programdata\\microsoft\\windows\\start menu\\programs\\accessories\\sound recorder.lnk"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x178 [0063.382] GetFileType (hFile=0x178) returned 0x1 [0063.382] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e580) returned 1 [0063.382] GetFileType (hFile=0x178) returned 0x1 [0063.382] WriteFile (in: hFile=0x178, lpBuffer=0x266b298*, nNumberOfBytesToWrite=0x540, lpNumberOfBytesWritten=0x31e614, lpOverlapped=0x0 | out: lpBuffer=0x266b298*, lpNumberOfBytesWritten=0x31e614*=0x540, lpOverlapped=0x0) returned 1 [0063.383] CloseHandle (hObject=0x178) returned 1 [0063.383] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Accessories\\Sound Recorder.lnk", nBufferLength=0x105, lpBuffer=0x31e1c4, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Accessories\\Sound Recorder.lnk", lpFilePart=0x0) returned 0x53 [0063.383] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Accessories\\Sound Recorder.lnk", nBufferLength=0x105, lpBuffer=0x31e1c4, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Accessories\\Sound Recorder.lnk", lpFilePart=0x0) returned 0x53 [0063.383] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e624) returned 1 [0063.383] GetFileAttributesExW (in: lpFileName="C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Accessories\\Sound Recorder.lnk" (normalized: "c:\\programdata\\microsoft\\windows\\start menu\\programs\\accessories\\sound recorder.lnk"), fInfoLevelId=0x0, lpFileInformation=0x31e6a0 | out: lpFileInformation=0x31e6a0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8aad4ba5, ftCreationTime.dwHighDateTime=0x1ca043f, ftLastAccessTime.dwLowDateTime=0x8aad4ba5, ftLastAccessTime.dwHighDateTime=0x1ca043f, ftLastWriteTime.dwLowDateTime=0x93a1640, ftLastWriteTime.dwHighDateTime=0x1d6eb7f, nFileSizeHigh=0x0, nFileSizeLow=0x540)) returned 1 [0063.384] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e620) returned 1 [0063.384] MoveFileW (lpExistingFileName="C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Accessories\\Sound Recorder.lnk" (normalized: "c:\\programdata\\microsoft\\windows\\start menu\\programs\\accessories\\sound recorder.lnk"), lpNewFileName="C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Accessories\\Sound Recorder.lnk" (normalized: "c:\\programdata\\microsoft\\windows\\start menu\\programs\\accessories\\sound recorder.lnk")) returned 1 [0063.384] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Accessories\\Sticky Notes.lnk", nBufferLength=0x105, lpBuffer=0x31e0a4, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Accessories\\Sticky Notes.lnk", lpFilePart=0x0) returned 0x51 [0063.384] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e598) returned 1 [0063.384] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Accessories\\Sticky Notes.lnk" (normalized: "c:\\programdata\\microsoft\\windows\\start menu\\programs\\accessories\\sticky notes.lnk"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x178 [0063.384] GetFileType (hFile=0x178) returned 0x1 [0063.384] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e594) returned 1 [0063.384] GetFileType (hFile=0x178) returned 0x1 [0063.384] GetFileSize (in: hFile=0x178, lpFileSizeHigh=0x31e6a0 | out: lpFileSizeHigh=0x31e6a0*=0x0) returned 0x547 [0063.385] ReadFile (in: hFile=0x178, lpBuffer=0x266cab4, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x31e64c, lpOverlapped=0x0 | out: lpBuffer=0x266cab4*, lpNumberOfBytesRead=0x31e64c*=0x547, lpOverlapped=0x0) returned 1 [0063.385] CloseHandle (hObject=0x178) returned 1 [0063.399] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Accessories\\Sticky Notes.lnk", nBufferLength=0x105, lpBuffer=0x31e090, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Accessories\\Sticky Notes.lnk", lpFilePart=0x0) returned 0x51 [0063.399] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e584) returned 1 [0063.399] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Accessories\\Sticky Notes.lnk" (normalized: "c:\\programdata\\microsoft\\windows\\start menu\\programs\\accessories\\sticky notes.lnk"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x178 [0063.400] GetFileType (hFile=0x178) returned 0x1 [0063.400] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e580) returned 1 [0063.400] GetFileType (hFile=0x178) returned 0x1 [0063.400] WriteFile (in: hFile=0x178, lpBuffer=0x26bc5d8*, nNumberOfBytesToWrite=0x550, lpNumberOfBytesWritten=0x31e614, lpOverlapped=0x0 | out: lpBuffer=0x26bc5d8*, lpNumberOfBytesWritten=0x31e614*=0x550, lpOverlapped=0x0) returned 1 [0063.401] CloseHandle (hObject=0x178) returned 1 [0063.402] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Accessories\\Sticky Notes.lnk", nBufferLength=0x105, lpBuffer=0x31e1c4, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Accessories\\Sticky Notes.lnk", lpFilePart=0x0) returned 0x51 [0063.402] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Accessories\\Sticky Notes.lnk", nBufferLength=0x105, lpBuffer=0x31e1c4, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Accessories\\Sticky Notes.lnk", lpFilePart=0x0) returned 0x51 [0063.402] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e624) returned 1 [0063.402] GetFileAttributesExW (in: lpFileName="C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Accessories\\Sticky Notes.lnk" (normalized: "c:\\programdata\\microsoft\\windows\\start menu\\programs\\accessories\\sticky notes.lnk"), fInfoLevelId=0x0, lpFileInformation=0x31e6a0 | out: lpFileInformation=0x31e6a0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x80cc40e0, ftCreationTime.dwHighDateTime=0x1d2de2a, ftLastAccessTime.dwLowDateTime=0x80cc40e0, ftLastAccessTime.dwHighDateTime=0x1d2de2a, ftLastWriteTime.dwLowDateTime=0x93c77a0, ftLastWriteTime.dwHighDateTime=0x1d6eb7f, nFileSizeHigh=0x0, nFileSizeLow=0x550)) returned 1 [0063.402] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e620) returned 1 [0063.402] MoveFileW (lpExistingFileName="C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Accessories\\Sticky Notes.lnk" (normalized: "c:\\programdata\\microsoft\\windows\\start menu\\programs\\accessories\\sticky notes.lnk"), lpNewFileName="C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Accessories\\Sticky Notes.lnk" (normalized: "c:\\programdata\\microsoft\\windows\\start menu\\programs\\accessories\\sticky notes.lnk")) returned 1 [0063.402] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Accessories\\Sync Center.lnk", nBufferLength=0x105, lpBuffer=0x31e0a4, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Accessories\\Sync Center.lnk", lpFilePart=0x0) returned 0x50 [0063.402] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e598) returned 1 [0063.403] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Accessories\\Sync Center.lnk" (normalized: "c:\\programdata\\microsoft\\windows\\start menu\\programs\\accessories\\sync center.lnk"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x178 [0063.403] GetFileType (hFile=0x178) returned 0x1 [0063.403] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e594) returned 1 [0063.403] GetFileType (hFile=0x178) returned 0x1 [0063.403] GetFileSize (in: hFile=0x178, lpFileSizeHigh=0x31e6a0 | out: lpFileSizeHigh=0x31e6a0*=0x0) returned 0x4e6 [0063.403] ReadFile (in: hFile=0x178, lpBuffer=0x26bdd88, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x31e64c, lpOverlapped=0x0 | out: lpBuffer=0x26bdd88*, lpNumberOfBytesRead=0x31e64c*=0x4e6, lpOverlapped=0x0) returned 1 [0063.405] CloseHandle (hObject=0x178) returned 1 [0063.418] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Accessories\\Sync Center.lnk", nBufferLength=0x105, lpBuffer=0x31e090, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Accessories\\Sync Center.lnk", lpFilePart=0x0) returned 0x50 [0063.418] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e584) returned 1 [0063.418] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Accessories\\Sync Center.lnk" (normalized: "c:\\programdata\\microsoft\\windows\\start menu\\programs\\accessories\\sync center.lnk"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x178 [0063.419] GetFileType (hFile=0x178) returned 0x1 [0063.419] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e580) returned 1 [0063.419] GetFileType (hFile=0x178) returned 0x1 [0063.419] WriteFile (in: hFile=0x178, lpBuffer=0x270d56c*, nNumberOfBytesToWrite=0x4f0, lpNumberOfBytesWritten=0x31e614, lpOverlapped=0x0 | out: lpBuffer=0x270d56c*, lpNumberOfBytesWritten=0x31e614*=0x4f0, lpOverlapped=0x0) returned 1 [0063.420] CloseHandle (hObject=0x178) returned 1 [0063.420] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Accessories\\Sync Center.lnk", nBufferLength=0x105, lpBuffer=0x31e1c4, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Accessories\\Sync Center.lnk", lpFilePart=0x0) returned 0x50 [0063.421] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Accessories\\Sync Center.lnk", nBufferLength=0x105, lpBuffer=0x31e1c4, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Accessories\\Sync Center.lnk", lpFilePart=0x0) returned 0x50 [0063.421] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e624) returned 1 [0063.421] GetFileAttributesExW (in: lpFileName="C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Accessories\\Sync Center.lnk" (normalized: "c:\\programdata\\microsoft\\windows\\start menu\\programs\\accessories\\sync center.lnk"), fInfoLevelId=0x0, lpFileInformation=0x31e6a0 | out: lpFileInformation=0x31e6a0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3c9baa28, ftCreationTime.dwHighDateTime=0x1ca043f, ftLastAccessTime.dwLowDateTime=0x3c9baa28, ftLastAccessTime.dwHighDateTime=0x1ca043f, ftLastWriteTime.dwLowDateTime=0x93ed900, ftLastWriteTime.dwHighDateTime=0x1d6eb7f, nFileSizeHigh=0x0, nFileSizeLow=0x4f0)) returned 1 [0063.421] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e620) returned 1 [0063.421] MoveFileW (lpExistingFileName="C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Accessories\\Sync Center.lnk" (normalized: "c:\\programdata\\microsoft\\windows\\start menu\\programs\\accessories\\sync center.lnk"), lpNewFileName="C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Accessories\\Sync Center.lnk" (normalized: "c:\\programdata\\microsoft\\windows\\start menu\\programs\\accessories\\sync center.lnk")) returned 1 [0063.421] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Accessories\\Welcome Center.lnk", nBufferLength=0x105, lpBuffer=0x31e0a4, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Accessories\\Welcome Center.lnk", lpFilePart=0x0) returned 0x53 [0063.421] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e598) returned 1 [0063.421] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Accessories\\Welcome Center.lnk" (normalized: "c:\\programdata\\microsoft\\windows\\start menu\\programs\\accessories\\welcome center.lnk"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x178 [0063.422] GetFileType (hFile=0x178) returned 0x1 [0063.422] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e594) returned 1 [0063.422] GetFileType (hFile=0x178) returned 0x1 [0063.422] GetFileSize (in: hFile=0x178, lpFileSizeHigh=0x31e6a0 | out: lpFileSizeHigh=0x31e6a0*=0x0) returned 0x62b [0063.422] ReadFile (in: hFile=0x178, lpBuffer=0x270ee6c, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x31e64c, lpOverlapped=0x0 | out: lpBuffer=0x270ee6c*, lpNumberOfBytesRead=0x31e64c*=0x62b, lpOverlapped=0x0) returned 1 [0063.423] CloseHandle (hObject=0x178) returned 1 [0063.436] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Accessories\\Welcome Center.lnk", nBufferLength=0x105, lpBuffer=0x31e090, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Accessories\\Welcome Center.lnk", lpFilePart=0x0) returned 0x53 [0063.436] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e584) returned 1 [0063.436] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Accessories\\Welcome Center.lnk" (normalized: "c:\\programdata\\microsoft\\windows\\start menu\\programs\\accessories\\welcome center.lnk"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x178 [0063.437] GetFileType (hFile=0x178) returned 0x1 [0063.437] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e580) returned 1 [0063.437] GetFileType (hFile=0x178) returned 0x1 [0063.437] WriteFile (in: hFile=0x178, lpBuffer=0x275ec98*, nNumberOfBytesToWrite=0x630, lpNumberOfBytesWritten=0x31e614, lpOverlapped=0x0 | out: lpBuffer=0x275ec98*, lpNumberOfBytesWritten=0x31e614*=0x630, lpOverlapped=0x0) returned 1 [0063.438] CloseHandle (hObject=0x178) returned 1 [0063.438] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Accessories\\Welcome Center.lnk", nBufferLength=0x105, lpBuffer=0x31e1c4, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Accessories\\Welcome Center.lnk", lpFilePart=0x0) returned 0x53 [0063.438] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Accessories\\Welcome Center.lnk", nBufferLength=0x105, lpBuffer=0x31e1c4, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Accessories\\Welcome Center.lnk", lpFilePart=0x0) returned 0x53 [0063.439] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e624) returned 1 [0063.439] GetFileAttributesExW (in: lpFileName="C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Accessories\\Welcome Center.lnk" (normalized: "c:\\programdata\\microsoft\\windows\\start menu\\programs\\accessories\\welcome center.lnk"), fInfoLevelId=0x0, lpFileInformation=0x31e6a0 | out: lpFileInformation=0x31e6a0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8b13a6d0, ftCreationTime.dwHighDateTime=0x1ca043f, ftLastAccessTime.dwLowDateTime=0x8b13a6d0, ftLastAccessTime.dwHighDateTime=0x1ca043f, ftLastWriteTime.dwLowDateTime=0x9413a60, ftLastWriteTime.dwHighDateTime=0x1d6eb7f, nFileSizeHigh=0x0, nFileSizeLow=0x630)) returned 1 [0063.439] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e620) returned 1 [0063.439] MoveFileW (lpExistingFileName="C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Accessories\\Welcome Center.lnk" (normalized: "c:\\programdata\\microsoft\\windows\\start menu\\programs\\accessories\\welcome center.lnk"), lpNewFileName="C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Accessories\\Welcome Center.lnk" (normalized: "c:\\programdata\\microsoft\\windows\\start menu\\programs\\accessories\\welcome center.lnk")) returned 1 [0063.439] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Accessories\\Wordpad.lnk", nBufferLength=0x105, lpBuffer=0x31e0a4, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Accessories\\Wordpad.lnk", lpFilePart=0x0) returned 0x4c [0063.439] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e598) returned 1 [0063.439] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Accessories\\Wordpad.lnk" (normalized: "c:\\programdata\\microsoft\\windows\\start menu\\programs\\accessories\\wordpad.lnk"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x178 [0063.440] GetFileType (hFile=0x178) returned 0x1 [0063.440] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e594) returned 1 [0063.440] GetFileType (hFile=0x178) returned 0x1 [0063.440] GetFileSize (in: hFile=0x178, lpFileSizeHigh=0x31e6a0 | out: lpFileSizeHigh=0x31e6a0*=0x0) returned 0x52a [0063.440] ReadFile (in: hFile=0x178, lpBuffer=0x2760484, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x31e64c, lpOverlapped=0x0 | out: lpBuffer=0x2760484*, lpNumberOfBytesRead=0x31e64c*=0x52a, lpOverlapped=0x0) returned 1 [0063.441] CloseHandle (hObject=0x178) returned 1 [0063.455] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Accessories\\Wordpad.lnk", nBufferLength=0x105, lpBuffer=0x31e090, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Accessories\\Wordpad.lnk", lpFilePart=0x0) returned 0x4c [0063.455] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e584) returned 1 [0063.455] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Accessories\\Wordpad.lnk" (normalized: "c:\\programdata\\microsoft\\windows\\start menu\\programs\\accessories\\wordpad.lnk"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x178 [0063.456] GetFileType (hFile=0x178) returned 0x1 [0063.456] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e580) returned 1 [0063.456] GetFileType (hFile=0x178) returned 0x1 [0063.456] WriteFile (in: hFile=0x178, lpBuffer=0x27afd94*, nNumberOfBytesToWrite=0x530, lpNumberOfBytesWritten=0x31e614, lpOverlapped=0x0 | out: lpBuffer=0x27afd94*, lpNumberOfBytesWritten=0x31e614*=0x530, lpOverlapped=0x0) returned 1 [0063.457] CloseHandle (hObject=0x178) returned 1 [0063.457] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Accessories\\Wordpad.lnk", nBufferLength=0x105, lpBuffer=0x31e1c4, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Accessories\\Wordpad.lnk", lpFilePart=0x0) returned 0x4c [0063.457] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Accessories\\Wordpad.lnk", nBufferLength=0x105, lpBuffer=0x31e1c4, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Accessories\\Wordpad.lnk", lpFilePart=0x0) returned 0x4c [0063.457] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e624) returned 1 [0063.457] GetFileAttributesExW (in: lpFileName="C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Accessories\\Wordpad.lnk" (normalized: "c:\\programdata\\microsoft\\windows\\start menu\\programs\\accessories\\wordpad.lnk"), fInfoLevelId=0x0, lpFileInformation=0x31e6a0 | out: lpFileInformation=0x31e6a0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3d25b9f8, ftCreationTime.dwHighDateTime=0x1ca043f, ftLastAccessTime.dwLowDateTime=0x3d25b9f8, ftLastAccessTime.dwHighDateTime=0x1ca043f, ftLastWriteTime.dwLowDateTime=0x9439bc0, ftLastWriteTime.dwHighDateTime=0x1d6eb7f, nFileSizeHigh=0x0, nFileSizeLow=0x530)) returned 1 [0063.457] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e620) returned 1 [0063.458] MoveFileW (lpExistingFileName="C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Accessories\\Wordpad.lnk" (normalized: "c:\\programdata\\microsoft\\windows\\start menu\\programs\\accessories\\wordpad.lnk"), lpNewFileName="C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Accessories\\Wordpad.lnk" (normalized: "c:\\programdata\\microsoft\\windows\\start menu\\programs\\accessories\\wordpad.lnk")) returned 1 [0063.458] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e654) returned 1 [0063.458] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Accessories\\Accessibility", nBufferLength=0x105, lpBuffer=0x31e15c, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Accessories\\Accessibility", lpFilePart=0x0) returned 0x4e [0063.458] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Accessories\\Accessibility\\", nBufferLength=0x105, lpBuffer=0x31e130, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Accessories\\Accessibility\\", lpFilePart=0x0) returned 0x4f [0063.458] FindFirstFileW (in: lpFileName="C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Accessories\\Accessibility\\*", lpFindFileData=0x31e37c | out: lpFindFileData=0x31e37c*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0xfd9dbcac, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x89bce0a9, ftLastAccessTime.dwHighDateTime=0x1ca043f, ftLastWriteTime.dwLowDateTime=0x89bf4209, ftLastWriteTime.dwHighDateTime=0x1ca043f, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x381fc0 [0063.458] FindNextFileW (in: hFindFile=0x381fc0, lpFindFileData=0x31e38c | out: lpFindFileData=0x31e38c*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0xfd9dbcac, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x89bce0a9, ftLastAccessTime.dwHighDateTime=0x1ca043f, ftLastWriteTime.dwLowDateTime=0x89bf4209, ftLastWriteTime.dwHighDateTime=0x1ca043f, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0063.459] FindNextFileW (in: hFindFile=0x381fc0, lpFindFileData=0x31e38c | out: lpFindFileData=0x31e38c*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0xec0a7698, ftCreationTime.dwHighDateTime=0x1ca042b, ftLastAccessTime.dwLowDateTime=0xec0a7698, ftLastAccessTime.dwHighDateTime=0x1ca042b, ftLastWriteTime.dwLowDateTime=0x89bf4209, ftLastWriteTime.dwHighDateTime=0x1ca043f, nFileSizeHigh=0x0, nFileSizeLow=0x172, dwReserved0=0x0, dwReserved1=0x0, cFileName="Desktop.ini", cAlternateFileName="")) returned 1 [0063.459] FindNextFileW (in: hFindFile=0x381fc0, lpFindFileData=0x31e38c | out: lpFindFileData=0x31e38c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x89bce0a9, ftCreationTime.dwHighDateTime=0x1ca043f, ftLastAccessTime.dwLowDateTime=0x89bce0a9, ftLastAccessTime.dwHighDateTime=0x1ca043f, ftLastWriteTime.dwLowDateTime=0x89bce0a9, ftLastWriteTime.dwHighDateTime=0x1ca043f, nFileSizeHigh=0x0, nFileSizeLow=0x56c, dwReserved0=0x0, dwReserved1=0x0, cFileName="Speech Recognition.lnk", cAlternateFileName="SPEECH~1.LNK")) returned 1 [0063.459] FindNextFileW (in: hFindFile=0x381fc0, lpFindFileData=0x31e38c | out: lpFindFileData=0x31e38c*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0063.459] FindClose (in: hFindFile=0x381fc0 | out: hFindFile=0x381fc0) returned 1 [0063.459] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e614) returned 1 [0063.459] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e620) returned 1 [0063.459] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e654) returned 1 [0063.459] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Accessories\\Accessibility", nBufferLength=0x105, lpBuffer=0x31e15c, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Accessories\\Accessibility", lpFilePart=0x0) returned 0x4e [0063.459] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Accessories\\Accessibility\\", nBufferLength=0x105, lpBuffer=0x31e130, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Accessories\\Accessibility\\", lpFilePart=0x0) returned 0x4f [0063.459] FindFirstFileW (in: lpFileName="C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Accessories\\Accessibility\\*", lpFindFileData=0x31e37c | out: lpFindFileData=0x31e37c*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0xfd9dbcac, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x89bce0a9, ftLastAccessTime.dwHighDateTime=0x1ca043f, ftLastWriteTime.dwLowDateTime=0x89bf4209, ftLastWriteTime.dwHighDateTime=0x1ca043f, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x381fc0 [0063.459] FindNextFileW (in: hFindFile=0x381fc0, lpFindFileData=0x31e38c | out: lpFindFileData=0x31e38c*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0xfd9dbcac, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x89bce0a9, ftLastAccessTime.dwHighDateTime=0x1ca043f, ftLastWriteTime.dwLowDateTime=0x89bf4209, ftLastWriteTime.dwHighDateTime=0x1ca043f, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0063.460] FindNextFileW (in: hFindFile=0x381fc0, lpFindFileData=0x31e38c | out: lpFindFileData=0x31e38c*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0xec0a7698, ftCreationTime.dwHighDateTime=0x1ca042b, ftLastAccessTime.dwLowDateTime=0xec0a7698, ftLastAccessTime.dwHighDateTime=0x1ca042b, ftLastWriteTime.dwLowDateTime=0x89bf4209, ftLastWriteTime.dwHighDateTime=0x1ca043f, nFileSizeHigh=0x0, nFileSizeLow=0x172, dwReserved0=0x0, dwReserved1=0x0, cFileName="Desktop.ini", cAlternateFileName="")) returned 1 [0063.460] FindNextFileW (in: hFindFile=0x381fc0, lpFindFileData=0x31e38c | out: lpFindFileData=0x31e38c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x89bce0a9, ftCreationTime.dwHighDateTime=0x1ca043f, ftLastAccessTime.dwLowDateTime=0x89bce0a9, ftLastAccessTime.dwHighDateTime=0x1ca043f, ftLastWriteTime.dwLowDateTime=0x89bce0a9, ftLastWriteTime.dwHighDateTime=0x1ca043f, nFileSizeHigh=0x0, nFileSizeLow=0x56c, dwReserved0=0x0, dwReserved1=0x0, cFileName="Speech Recognition.lnk", cAlternateFileName="SPEECH~1.LNK")) returned 1 [0063.460] FindNextFileW (in: hFindFile=0x381fc0, lpFindFileData=0x31e38c | out: lpFindFileData=0x31e38c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x89bce0a9, ftCreationTime.dwHighDateTime=0x1ca043f, ftLastAccessTime.dwLowDateTime=0x89bce0a9, ftLastAccessTime.dwHighDateTime=0x1ca043f, ftLastWriteTime.dwLowDateTime=0x89bce0a9, ftLastWriteTime.dwHighDateTime=0x1ca043f, nFileSizeHigh=0x0, nFileSizeLow=0x56c, dwReserved0=0x0, dwReserved1=0x0, cFileName="Speech Recognition.lnk", cAlternateFileName="SPEECH~1.LNK")) returned 0 [0063.460] FindClose (in: hFindFile=0x381fc0 | out: hFindFile=0x381fc0) returned 1 [0063.460] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e614) returned 1 [0063.460] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e620) returned 1 [0063.460] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Accessories\\Accessibility\\Speech Recognition.lnk", nBufferLength=0x105, lpBuffer=0x31e02c, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Accessories\\Accessibility\\Speech Recognition.lnk", lpFilePart=0x0) returned 0x65 [0063.460] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e520) returned 1 [0063.460] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Accessories\\Accessibility\\Speech Recognition.lnk" (normalized: "c:\\programdata\\microsoft\\windows\\start menu\\programs\\accessories\\accessibility\\speech recognition.lnk"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x178 [0063.461] GetFileType (hFile=0x178) returned 0x1 [0063.461] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e51c) returned 1 [0063.461] GetFileType (hFile=0x178) returned 0x1 [0063.461] GetFileSize (in: hFile=0x178, lpFileSizeHigh=0x31e628 | out: lpFileSizeHigh=0x31e628*=0x0) returned 0x56c [0063.461] ReadFile (in: hFile=0x178, lpBuffer=0x27b3640, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x31e5d4, lpOverlapped=0x0 | out: lpBuffer=0x27b3640*, lpNumberOfBytesRead=0x31e5d4*=0x56c, lpOverlapped=0x0) returned 1 [0063.463] CloseHandle (hObject=0x178) returned 1 [0063.476] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Accessories\\Accessibility\\Speech Recognition.lnk", nBufferLength=0x105, lpBuffer=0x31e018, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Accessories\\Accessibility\\Speech Recognition.lnk", lpFilePart=0x0) returned 0x65 [0063.476] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e50c) returned 1 [0063.476] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Accessories\\Accessibility\\Speech Recognition.lnk" (normalized: "c:\\programdata\\microsoft\\windows\\start menu\\programs\\accessories\\accessibility\\speech recognition.lnk"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x178 [0063.477] GetFileType (hFile=0x178) returned 0x1 [0063.477] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e508) returned 1 [0063.477] GetFileType (hFile=0x178) returned 0x1 [0063.477] WriteFile (in: hFile=0x178, lpBuffer=0x28030d4*, nNumberOfBytesToWrite=0x570, lpNumberOfBytesWritten=0x31e59c, lpOverlapped=0x0 | out: lpBuffer=0x28030d4*, lpNumberOfBytesWritten=0x31e59c*=0x570, lpOverlapped=0x0) returned 1 [0063.478] CloseHandle (hObject=0x178) returned 1 [0063.478] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Accessories\\Accessibility\\Speech Recognition.lnk", nBufferLength=0x105, lpBuffer=0x31e14c, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Accessories\\Accessibility\\Speech Recognition.lnk", lpFilePart=0x0) returned 0x65 [0063.478] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Accessories\\Accessibility\\Speech Recognition.lnk", nBufferLength=0x105, lpBuffer=0x31e14c, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Accessories\\Accessibility\\Speech Recognition.lnk", lpFilePart=0x0) returned 0x65 [0063.478] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e5ac) returned 1 [0063.478] GetFileAttributesExW (in: lpFileName="C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Accessories\\Accessibility\\Speech Recognition.lnk" (normalized: "c:\\programdata\\microsoft\\windows\\start menu\\programs\\accessories\\accessibility\\speech recognition.lnk"), fInfoLevelId=0x0, lpFileInformation=0x31e628 | out: lpFileInformation=0x31e628*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x89bce0a9, ftCreationTime.dwHighDateTime=0x1ca043f, ftLastAccessTime.dwLowDateTime=0x89bce0a9, ftLastAccessTime.dwHighDateTime=0x1ca043f, ftLastWriteTime.dwLowDateTime=0x9485e80, ftLastWriteTime.dwHighDateTime=0x1d6eb7f, nFileSizeHigh=0x0, nFileSizeLow=0x570)) returned 1 [0063.479] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e5a8) returned 1 [0063.479] MoveFileW (lpExistingFileName="C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Accessories\\Accessibility\\Speech Recognition.lnk" (normalized: "c:\\programdata\\microsoft\\windows\\start menu\\programs\\accessories\\accessibility\\speech recognition.lnk"), lpNewFileName="C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Accessories\\Accessibility\\Speech Recognition.lnk" (normalized: "c:\\programdata\\microsoft\\windows\\start menu\\programs\\accessories\\accessibility\\speech recognition.lnk")) returned 1 [0063.479] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e654) returned 1 [0063.479] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Accessories\\System Tools", nBufferLength=0x105, lpBuffer=0x31e15c, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Accessories\\System Tools", lpFilePart=0x0) returned 0x4d [0063.479] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Accessories\\System Tools\\", nBufferLength=0x105, lpBuffer=0x31e130, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Accessories\\System Tools\\", lpFilePart=0x0) returned 0x4e [0063.479] FindFirstFileW (in: lpFileName="C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Accessories\\System Tools\\*", lpFindFileData=0x31e37c | out: lpFindFileData=0x31e37c*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0xfd9dbcac, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x8ace9ee9, ftLastAccessTime.dwHighDateTime=0x1ca043f, ftLastWriteTime.dwLowDateTime=0x8ace9ee9, ftLastWriteTime.dwHighDateTime=0x1ca043f, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x381d40 [0063.479] FindNextFileW (in: hFindFile=0x381d40, lpFindFileData=0x31e38c | out: lpFindFileData=0x31e38c*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0xfd9dbcac, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x8ace9ee9, ftLastAccessTime.dwHighDateTime=0x1ca043f, ftLastWriteTime.dwLowDateTime=0x8ace9ee9, ftLastWriteTime.dwHighDateTime=0x1ca043f, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0063.480] FindNextFileW (in: hFindFile=0x381d40, lpFindFileData=0x31e38c | out: lpFindFileData=0x31e38c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3e4ce49a, ftCreationTime.dwHighDateTime=0x1ca043f, ftLastAccessTime.dwLowDateTime=0x3e4ce49a, ftLastAccessTime.dwHighDateTime=0x1ca043f, ftLastWriteTime.dwLowDateTime=0x3e51a75b, ftLastWriteTime.dwHighDateTime=0x1ca043f, nFileSizeHigh=0x0, nFileSizeLow=0x4e0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Character Map.lnk", cAlternateFileName="CHARAC~1.LNK")) returned 1 [0063.480] FindNextFileW (in: hFindFile=0x381d40, lpFindFileData=0x31e38c | out: lpFindFileData=0x31e38c*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0xec0f3952, ftCreationTime.dwHighDateTime=0x1ca042b, ftLastAccessTime.dwLowDateTime=0xec0f3952, ftLastAccessTime.dwHighDateTime=0x1ca042b, ftLastWriteTime.dwLowDateTime=0x8ace9ee9, ftLastWriteTime.dwHighDateTime=0x1ca043f, nFileSizeHigh=0x0, nFileSizeLow=0x53a, dwReserved0=0x0, dwReserved1=0x0, cFileName="Desktop.ini", cAlternateFileName="")) returned 1 [0063.480] FindNextFileW (in: hFindFile=0x381d40, lpFindFileData=0x31e38c | out: lpFindFileData=0x31e38c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x297b3b95, ftCreationTime.dwHighDateTime=0x1ca043f, ftLastAccessTime.dwLowDateTime=0x297b3b95, ftLastAccessTime.dwHighDateTime=0x1ca043f, ftLastWriteTime.dwLowDateTime=0x29825fb5, ftLastWriteTime.dwHighDateTime=0x1ca043f, nFileSizeHigh=0x0, nFileSizeLow=0x50a, dwReserved0=0x0, dwReserved1=0x0, cFileName="dfrgui.lnk", cAlternateFileName="")) returned 1 [0063.480] FindNextFileW (in: hFindFile=0x381d40, lpFindFileData=0x31e38c | out: lpFindFileData=0x31e38c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3d31a0d9, ftCreationTime.dwHighDateTime=0x1ca043f, ftLastAccessTime.dwLowDateTime=0x3d31a0d9, ftLastAccessTime.dwHighDateTime=0x1ca043f, ftLastWriteTime.dwLowDateTime=0x3d36639a, ftLastWriteTime.dwHighDateTime=0x1ca043f, nFileSizeHigh=0x0, nFileSizeLow=0x4e4, dwReserved0=0x0, dwReserved1=0x0, cFileName="Disk Cleanup.lnk", cAlternateFileName="DISKCL~1.LNK")) returned 1 [0063.480] FindNextFileW (in: hFindFile=0x381d40, lpFindFileData=0x31e38c | out: lpFindFileData=0x31e38c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x141abfff, ftCreationTime.dwHighDateTime=0x1ca043f, ftLastAccessTime.dwLowDateTime=0x141abfff, ftLastAccessTime.dwHighDateTime=0x1ca043f, ftLastWriteTime.dwLowDateTime=0x14375082, ftLastWriteTime.dwHighDateTime=0x1ca043f, nFileSizeHigh=0x0, nFileSizeLow=0x4da, dwReserved0=0x0, dwReserved1=0x0, cFileName="Resource Monitor.lnk", cAlternateFileName="RESOUR~1.LNK")) returned 1 [0063.480] FindNextFileW (in: hFindFile=0x381d40, lpFindFileData=0x31e38c | out: lpFindFileData=0x31e38c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa5e7f40, ftCreationTime.dwHighDateTime=0x1ca043f, ftLastAccessTime.dwLowDateTime=0xa5e7f40, ftLastAccessTime.dwHighDateTime=0x1ca043f, ftLastWriteTime.dwLowDateTime=0xa5e7f40, ftLastWriteTime.dwHighDateTime=0x1ca043f, nFileSizeHigh=0x0, nFileSizeLow=0x4e2, dwReserved0=0x0, dwReserved1=0x0, cFileName="System Information.lnk", cAlternateFileName="SYSTEM~1.LNK")) returned 1 [0063.480] FindNextFileW (in: hFindFile=0x381d40, lpFindFileData=0x31e38c | out: lpFindFileData=0x31e38c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3c8d61e7, ftCreationTime.dwHighDateTime=0x1ca043f, ftLastAccessTime.dwLowDateTime=0x3c8d61e7, ftLastAccessTime.dwHighDateTime=0x1ca043f, ftLastWriteTime.dwLowDateTime=0x3c8fc347, ftLastWriteTime.dwHighDateTime=0x1ca043f, nFileSizeHigh=0x0, nFileSizeLow=0x4de, dwReserved0=0x0, dwReserved1=0x0, cFileName="System Restore.lnk", cAlternateFileName="SYSTEM~2.LNK")) returned 1 [0063.480] FindNextFileW (in: hFindFile=0x381d40, lpFindFileData=0x31e38c | out: lpFindFileData=0x31e38c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2b9eb814, ftCreationTime.dwHighDateTime=0x1ca043f, ftLastAccessTime.dwLowDateTime=0x2b9eb814, ftLastAccessTime.dwHighDateTime=0x1ca043f, ftLastWriteTime.dwLowDateTime=0x2b9eb814, ftLastWriteTime.dwHighDateTime=0x1ca043f, nFileSizeHigh=0x0, nFileSizeLow=0x4f4, dwReserved0=0x0, dwReserved1=0x0, cFileName="Task Scheduler.lnk", cAlternateFileName="TASKSC~1.LNK")) returned 1 [0063.481] FindNextFileW (in: hFindFile=0x381d40, lpFindFileData=0x31e38c | out: lpFindFileData=0x31e38c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8ace9ee9, ftCreationTime.dwHighDateTime=0x1ca043f, ftLastAccessTime.dwLowDateTime=0x8ace9ee9, ftLastAccessTime.dwHighDateTime=0x1ca043f, ftLastWriteTime.dwLowDateTime=0x8ace9ee9, ftLastWriteTime.dwHighDateTime=0x1ca043f, nFileSizeHigh=0x0, nFileSizeLow=0x528, dwReserved0=0x0, dwReserved1=0x0, cFileName="Windows Easy Transfer Reports.lnk", cAlternateFileName="WINDOW~2.LNK")) returned 1 [0063.481] FindNextFileW (in: hFindFile=0x381d40, lpFindFileData=0x31e38c | out: lpFindFileData=0x31e38c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8ac9dc28, ftCreationTime.dwHighDateTime=0x1ca043f, ftLastAccessTime.dwLowDateTime=0x8ac9dc28, ftLastAccessTime.dwHighDateTime=0x1ca043f, ftLastWriteTime.dwLowDateTime=0x8ac9dc28, ftLastWriteTime.dwHighDateTime=0x1ca043f, nFileSizeHigh=0x0, nFileSizeLow=0x524, dwReserved0=0x0, dwReserved1=0x0, cFileName="Windows Easy Transfer.lnk", cAlternateFileName="WINDOW~1.LNK")) returned 1 [0063.481] FindNextFileW (in: hFindFile=0x381d40, lpFindFileData=0x31e38c | out: lpFindFileData=0x31e38c*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0063.481] FindClose (in: hFindFile=0x381d40 | out: hFindFile=0x381d40) returned 1 [0063.481] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e614) returned 1 [0063.481] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e620) returned 1 [0063.481] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e654) returned 1 [0063.481] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Accessories\\System Tools", nBufferLength=0x105, lpBuffer=0x31e15c, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Accessories\\System Tools", lpFilePart=0x0) returned 0x4d [0063.481] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Accessories\\System Tools\\", nBufferLength=0x105, lpBuffer=0x31e130, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Accessories\\System Tools\\", lpFilePart=0x0) returned 0x4e [0063.481] FindFirstFileW (in: lpFileName="C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Accessories\\System Tools\\*", lpFindFileData=0x31e37c | out: lpFindFileData=0x31e37c*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0xfd9dbcac, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x8ace9ee9, ftLastAccessTime.dwHighDateTime=0x1ca043f, ftLastWriteTime.dwLowDateTime=0x8ace9ee9, ftLastWriteTime.dwHighDateTime=0x1ca043f, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x381d40 [0063.481] FindNextFileW (in: hFindFile=0x381d40, lpFindFileData=0x31e38c | out: lpFindFileData=0x31e38c*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0xfd9dbcac, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x8ace9ee9, ftLastAccessTime.dwHighDateTime=0x1ca043f, ftLastWriteTime.dwLowDateTime=0x8ace9ee9, ftLastWriteTime.dwHighDateTime=0x1ca043f, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0063.482] FindNextFileW (in: hFindFile=0x381d40, lpFindFileData=0x31e38c | out: lpFindFileData=0x31e38c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3e4ce49a, ftCreationTime.dwHighDateTime=0x1ca043f, ftLastAccessTime.dwLowDateTime=0x3e4ce49a, ftLastAccessTime.dwHighDateTime=0x1ca043f, ftLastWriteTime.dwLowDateTime=0x3e51a75b, ftLastWriteTime.dwHighDateTime=0x1ca043f, nFileSizeHigh=0x0, nFileSizeLow=0x4e0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Character Map.lnk", cAlternateFileName="CHARAC~1.LNK")) returned 1 [0063.482] FindNextFileW (in: hFindFile=0x381d40, lpFindFileData=0x31e38c | out: lpFindFileData=0x31e38c*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0xec0f3952, ftCreationTime.dwHighDateTime=0x1ca042b, ftLastAccessTime.dwLowDateTime=0xec0f3952, ftLastAccessTime.dwHighDateTime=0x1ca042b, ftLastWriteTime.dwLowDateTime=0x8ace9ee9, ftLastWriteTime.dwHighDateTime=0x1ca043f, nFileSizeHigh=0x0, nFileSizeLow=0x53a, dwReserved0=0x0, dwReserved1=0x0, cFileName="Desktop.ini", cAlternateFileName="")) returned 1 [0063.482] FindNextFileW (in: hFindFile=0x381d40, lpFindFileData=0x31e38c | out: lpFindFileData=0x31e38c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x297b3b95, ftCreationTime.dwHighDateTime=0x1ca043f, ftLastAccessTime.dwLowDateTime=0x297b3b95, ftLastAccessTime.dwHighDateTime=0x1ca043f, ftLastWriteTime.dwLowDateTime=0x29825fb5, ftLastWriteTime.dwHighDateTime=0x1ca043f, nFileSizeHigh=0x0, nFileSizeLow=0x50a, dwReserved0=0x0, dwReserved1=0x0, cFileName="dfrgui.lnk", cAlternateFileName="")) returned 1 [0063.482] FindNextFileW (in: hFindFile=0x381d40, lpFindFileData=0x31e38c | out: lpFindFileData=0x31e38c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3d31a0d9, ftCreationTime.dwHighDateTime=0x1ca043f, ftLastAccessTime.dwLowDateTime=0x3d31a0d9, ftLastAccessTime.dwHighDateTime=0x1ca043f, ftLastWriteTime.dwLowDateTime=0x3d36639a, ftLastWriteTime.dwHighDateTime=0x1ca043f, nFileSizeHigh=0x0, nFileSizeLow=0x4e4, dwReserved0=0x0, dwReserved1=0x0, cFileName="Disk Cleanup.lnk", cAlternateFileName="DISKCL~1.LNK")) returned 1 [0063.482] FindNextFileW (in: hFindFile=0x381d40, lpFindFileData=0x31e38c | out: lpFindFileData=0x31e38c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x141abfff, ftCreationTime.dwHighDateTime=0x1ca043f, ftLastAccessTime.dwLowDateTime=0x141abfff, ftLastAccessTime.dwHighDateTime=0x1ca043f, ftLastWriteTime.dwLowDateTime=0x14375082, ftLastWriteTime.dwHighDateTime=0x1ca043f, nFileSizeHigh=0x0, nFileSizeLow=0x4da, dwReserved0=0x0, dwReserved1=0x0, cFileName="Resource Monitor.lnk", cAlternateFileName="RESOUR~1.LNK")) returned 1 [0063.482] FindNextFileW (in: hFindFile=0x381d40, lpFindFileData=0x31e38c | out: lpFindFileData=0x31e38c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa5e7f40, ftCreationTime.dwHighDateTime=0x1ca043f, ftLastAccessTime.dwLowDateTime=0xa5e7f40, ftLastAccessTime.dwHighDateTime=0x1ca043f, ftLastWriteTime.dwLowDateTime=0xa5e7f40, ftLastWriteTime.dwHighDateTime=0x1ca043f, nFileSizeHigh=0x0, nFileSizeLow=0x4e2, dwReserved0=0x0, dwReserved1=0x0, cFileName="System Information.lnk", cAlternateFileName="SYSTEM~1.LNK")) returned 1 [0063.483] FindNextFileW (in: hFindFile=0x381d40, lpFindFileData=0x31e38c | out: lpFindFileData=0x31e38c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3c8d61e7, ftCreationTime.dwHighDateTime=0x1ca043f, ftLastAccessTime.dwLowDateTime=0x3c8d61e7, ftLastAccessTime.dwHighDateTime=0x1ca043f, ftLastWriteTime.dwLowDateTime=0x3c8fc347, ftLastWriteTime.dwHighDateTime=0x1ca043f, nFileSizeHigh=0x0, nFileSizeLow=0x4de, dwReserved0=0x0, dwReserved1=0x0, cFileName="System Restore.lnk", cAlternateFileName="SYSTEM~2.LNK")) returned 1 [0063.483] FindNextFileW (in: hFindFile=0x381d40, lpFindFileData=0x31e38c | out: lpFindFileData=0x31e38c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2b9eb814, ftCreationTime.dwHighDateTime=0x1ca043f, ftLastAccessTime.dwLowDateTime=0x2b9eb814, ftLastAccessTime.dwHighDateTime=0x1ca043f, ftLastWriteTime.dwLowDateTime=0x2b9eb814, ftLastWriteTime.dwHighDateTime=0x1ca043f, nFileSizeHigh=0x0, nFileSizeLow=0x4f4, dwReserved0=0x0, dwReserved1=0x0, cFileName="Task Scheduler.lnk", cAlternateFileName="TASKSC~1.LNK")) returned 1 [0063.483] FindNextFileW (in: hFindFile=0x381d40, lpFindFileData=0x31e38c | out: lpFindFileData=0x31e38c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8ace9ee9, ftCreationTime.dwHighDateTime=0x1ca043f, ftLastAccessTime.dwLowDateTime=0x8ace9ee9, ftLastAccessTime.dwHighDateTime=0x1ca043f, ftLastWriteTime.dwLowDateTime=0x8ace9ee9, ftLastWriteTime.dwHighDateTime=0x1ca043f, nFileSizeHigh=0x0, nFileSizeLow=0x528, dwReserved0=0x0, dwReserved1=0x0, cFileName="Windows Easy Transfer Reports.lnk", cAlternateFileName="WINDOW~2.LNK")) returned 1 [0063.483] FindNextFileW (in: hFindFile=0x381d40, lpFindFileData=0x31e38c | out: lpFindFileData=0x31e38c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8ac9dc28, ftCreationTime.dwHighDateTime=0x1ca043f, ftLastAccessTime.dwLowDateTime=0x8ac9dc28, ftLastAccessTime.dwHighDateTime=0x1ca043f, ftLastWriteTime.dwLowDateTime=0x8ac9dc28, ftLastWriteTime.dwHighDateTime=0x1ca043f, nFileSizeHigh=0x0, nFileSizeLow=0x524, dwReserved0=0x0, dwReserved1=0x0, cFileName="Windows Easy Transfer.lnk", cAlternateFileName="WINDOW~1.LNK")) returned 1 [0063.483] FindNextFileW (in: hFindFile=0x381d40, lpFindFileData=0x31e38c | out: lpFindFileData=0x31e38c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8ac9dc28, ftCreationTime.dwHighDateTime=0x1ca043f, ftLastAccessTime.dwLowDateTime=0x8ac9dc28, ftLastAccessTime.dwHighDateTime=0x1ca043f, ftLastWriteTime.dwLowDateTime=0x8ac9dc28, ftLastWriteTime.dwHighDateTime=0x1ca043f, nFileSizeHigh=0x0, nFileSizeLow=0x524, dwReserved0=0x0, dwReserved1=0x0, cFileName="Windows Easy Transfer.lnk", cAlternateFileName="WINDOW~1.LNK")) returned 0 [0063.483] FindClose (in: hFindFile=0x381d40 | out: hFindFile=0x381d40) returned 1 [0063.483] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e614) returned 1 [0063.483] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e620) returned 1 [0063.483] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Accessories\\System Tools\\Character Map.lnk", nBufferLength=0x105, lpBuffer=0x31e02c, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Accessories\\System Tools\\Character Map.lnk", lpFilePart=0x0) returned 0x5f [0063.483] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e520) returned 1 [0063.484] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Accessories\\System Tools\\Character Map.lnk" (normalized: "c:\\programdata\\microsoft\\windows\\start menu\\programs\\accessories\\system tools\\character map.lnk"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x178 [0063.484] GetFileType (hFile=0x178) returned 0x1 [0063.484] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e51c) returned 1 [0063.484] GetFileType (hFile=0x178) returned 0x1 [0063.484] GetFileSize (in: hFile=0x178, lpFileSizeHigh=0x31e628 | out: lpFileSizeHigh=0x31e628*=0x0) returned 0x4e0 [0063.484] ReadFile (in: hFile=0x178, lpBuffer=0x2808c70, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x31e5d4, lpOverlapped=0x0 | out: lpBuffer=0x2808c70*, lpNumberOfBytesRead=0x31e5d4*=0x4e0, lpOverlapped=0x0) returned 1 [0063.531] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Accessories\\System Tools\\Character Map.lnk", nBufferLength=0x105, lpBuffer=0x31e018, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Accessories\\System Tools\\Character Map.lnk", lpFilePart=0x0) returned 0x5f [0063.531] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e50c) returned 1 [0063.531] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Accessories\\System Tools\\Character Map.lnk" (normalized: "c:\\programdata\\microsoft\\windows\\start menu\\programs\\accessories\\system tools\\character map.lnk"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x178 [0063.533] GetFileType (hFile=0x178) returned 0x1 [0063.533] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e508) returned 1 [0063.533] GetFileType (hFile=0x178) returned 0x1 [0063.533] WriteFile (in: hFile=0x178, lpBuffer=0x265a1bc*, nNumberOfBytesToWrite=0x4f0, lpNumberOfBytesWritten=0x31e59c, lpOverlapped=0x0 | out: lpBuffer=0x265a1bc*, lpNumberOfBytesWritten=0x31e59c*=0x4f0, lpOverlapped=0x0) returned 1 [0063.533] CloseHandle (hObject=0x178) returned 1 [0063.534] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Accessories\\System Tools\\Character Map.lnk", nBufferLength=0x105, lpBuffer=0x31e14c, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Accessories\\System Tools\\Character Map.lnk", lpFilePart=0x0) returned 0x5f [0063.534] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Accessories\\System Tools\\Character Map.lnk", nBufferLength=0x105, lpBuffer=0x31e14c, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Accessories\\System Tools\\Character Map.lnk", lpFilePart=0x0) returned 0x5f [0063.534] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e5ac) returned 1 [0063.534] GetFileAttributesExW (in: lpFileName="C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Accessories\\System Tools\\Character Map.lnk" (normalized: "c:\\programdata\\microsoft\\windows\\start menu\\programs\\accessories\\system tools\\character map.lnk"), fInfoLevelId=0x0, lpFileInformation=0x31e628 | out: lpFileInformation=0x31e628*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3e4ce49a, ftCreationTime.dwHighDateTime=0x1ca043f, ftLastAccessTime.dwLowDateTime=0x3e4ce49a, ftLastAccessTime.dwHighDateTime=0x1ca043f, ftLastWriteTime.dwLowDateTime=0x94f82a0, ftLastWriteTime.dwHighDateTime=0x1d6eb7f, nFileSizeHigh=0x0, nFileSizeLow=0x4f0)) returned 1 [0063.534] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e5a8) returned 1 [0063.534] MoveFileW (lpExistingFileName="C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Accessories\\System Tools\\Character Map.lnk" (normalized: "c:\\programdata\\microsoft\\windows\\start menu\\programs\\accessories\\system tools\\character map.lnk"), lpNewFileName="C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Accessories\\System Tools\\Character Map.lnk" (normalized: "c:\\programdata\\microsoft\\windows\\start menu\\programs\\accessories\\system tools\\character map.lnk")) returned 1 [0063.535] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Accessories\\System Tools\\dfrgui.lnk", nBufferLength=0x105, lpBuffer=0x31e02c, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Accessories\\System Tools\\dfrgui.lnk", lpFilePart=0x0) returned 0x58 [0063.535] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e520) returned 1 [0063.535] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Accessories\\System Tools\\dfrgui.lnk" (normalized: "c:\\programdata\\microsoft\\windows\\start menu\\programs\\accessories\\system tools\\dfrgui.lnk"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x178 [0063.536] GetFileType (hFile=0x178) returned 0x1 [0063.536] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e51c) returned 1 [0063.536] GetFileType (hFile=0x178) returned 0x1 [0063.536] GetFileSize (in: hFile=0x178, lpFileSizeHigh=0x31e628 | out: lpFileSizeHigh=0x31e628*=0x0) returned 0x50a [0063.536] ReadFile (in: hFile=0x178, lpBuffer=0x265b9e8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x31e5d4, lpOverlapped=0x0 | out: lpBuffer=0x265b9e8*, lpNumberOfBytesRead=0x31e5d4*=0x50a, lpOverlapped=0x0) returned 1 [0063.538] CloseHandle (hObject=0x178) returned 1 [0063.551] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Accessories\\System Tools\\dfrgui.lnk", nBufferLength=0x105, lpBuffer=0x31e018, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Accessories\\System Tools\\dfrgui.lnk", lpFilePart=0x0) returned 0x58 [0063.551] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e50c) returned 1 [0063.551] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Accessories\\System Tools\\dfrgui.lnk" (normalized: "c:\\programdata\\microsoft\\windows\\start menu\\programs\\accessories\\system tools\\dfrgui.lnk"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x178 [0063.552] GetFileType (hFile=0x178) returned 0x1 [0063.552] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e508) returned 1 [0063.552] GetFileType (hFile=0x178) returned 0x1 [0063.552] WriteFile (in: hFile=0x178, lpBuffer=0x26ab3cc*, nNumberOfBytesToWrite=0x510, lpNumberOfBytesWritten=0x31e59c, lpOverlapped=0x0 | out: lpBuffer=0x26ab3cc*, lpNumberOfBytesWritten=0x31e59c*=0x510, lpOverlapped=0x0) returned 1 [0063.553] CloseHandle (hObject=0x178) returned 1 [0063.553] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Accessories\\System Tools\\dfrgui.lnk", nBufferLength=0x105, lpBuffer=0x31e14c, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Accessories\\System Tools\\dfrgui.lnk", lpFilePart=0x0) returned 0x58 [0063.553] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Accessories\\System Tools\\dfrgui.lnk", nBufferLength=0x105, lpBuffer=0x31e14c, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Accessories\\System Tools\\dfrgui.lnk", lpFilePart=0x0) returned 0x58 [0063.553] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e5ac) returned 1 [0063.553] GetFileAttributesExW (in: lpFileName="C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Accessories\\System Tools\\dfrgui.lnk" (normalized: "c:\\programdata\\microsoft\\windows\\start menu\\programs\\accessories\\system tools\\dfrgui.lnk"), fInfoLevelId=0x0, lpFileInformation=0x31e628 | out: lpFileInformation=0x31e628*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x297b3b95, ftCreationTime.dwHighDateTime=0x1ca043f, ftLastAccessTime.dwLowDateTime=0x297b3b95, ftLastAccessTime.dwHighDateTime=0x1ca043f, ftLastWriteTime.dwLowDateTime=0x951e400, ftLastWriteTime.dwHighDateTime=0x1d6eb7f, nFileSizeHigh=0x0, nFileSizeLow=0x510)) returned 1 [0063.553] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e5a8) returned 1 [0063.553] MoveFileW (lpExistingFileName="C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Accessories\\System Tools\\dfrgui.lnk" (normalized: "c:\\programdata\\microsoft\\windows\\start menu\\programs\\accessories\\system tools\\dfrgui.lnk"), lpNewFileName="C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Accessories\\System Tools\\dfrgui.lnk" (normalized: "c:\\programdata\\microsoft\\windows\\start menu\\programs\\accessories\\system tools\\dfrgui.lnk")) returned 1 [0063.554] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Accessories\\System Tools\\Disk Cleanup.lnk", nBufferLength=0x105, lpBuffer=0x31e02c, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Accessories\\System Tools\\Disk Cleanup.lnk", lpFilePart=0x0) returned 0x5e [0063.554] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e520) returned 1 [0063.554] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Accessories\\System Tools\\Disk Cleanup.lnk" (normalized: "c:\\programdata\\microsoft\\windows\\start menu\\programs\\accessories\\system tools\\disk cleanup.lnk"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x178 [0063.555] GetFileType (hFile=0x178) returned 0x1 [0063.555] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e51c) returned 1 [0063.555] GetFileType (hFile=0x178) returned 0x1 [0063.555] GetFileSize (in: hFile=0x178, lpFileSizeHigh=0x31e628 | out: lpFileSizeHigh=0x31e628*=0x0) returned 0x4e4 [0063.555] ReadFile (in: hFile=0x178, lpBuffer=0x26acbb8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x31e5d4, lpOverlapped=0x0 | out: lpBuffer=0x26acbb8*, lpNumberOfBytesRead=0x31e5d4*=0x4e4, lpOverlapped=0x0) returned 1 [0063.556] CloseHandle (hObject=0x178) returned 1 [0063.570] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Accessories\\System Tools\\Disk Cleanup.lnk", nBufferLength=0x105, lpBuffer=0x31e018, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Accessories\\System Tools\\Disk Cleanup.lnk", lpFilePart=0x0) returned 0x5e [0063.570] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e50c) returned 1 [0063.570] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Accessories\\System Tools\\Disk Cleanup.lnk" (normalized: "c:\\programdata\\microsoft\\windows\\start menu\\programs\\accessories\\system tools\\disk cleanup.lnk"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x178 [0063.571] GetFileType (hFile=0x178) returned 0x1 [0063.571] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e508) returned 1 [0063.571] GetFileType (hFile=0x178) returned 0x1 [0063.571] WriteFile (in: hFile=0x178, lpBuffer=0x26fc3bc*, nNumberOfBytesToWrite=0x4f0, lpNumberOfBytesWritten=0x31e59c, lpOverlapped=0x0 | out: lpBuffer=0x26fc3bc*, lpNumberOfBytesWritten=0x31e59c*=0x4f0, lpOverlapped=0x0) returned 1 [0063.572] CloseHandle (hObject=0x178) returned 1 [0063.572] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Accessories\\System Tools\\Disk Cleanup.lnk", nBufferLength=0x105, lpBuffer=0x31e14c, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Accessories\\System Tools\\Disk Cleanup.lnk", lpFilePart=0x0) returned 0x5e [0063.572] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Accessories\\System Tools\\Disk Cleanup.lnk", nBufferLength=0x105, lpBuffer=0x31e14c, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Accessories\\System Tools\\Disk Cleanup.lnk", lpFilePart=0x0) returned 0x5e [0063.572] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e5ac) returned 1 [0063.572] GetFileAttributesExW (in: lpFileName="C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Accessories\\System Tools\\Disk Cleanup.lnk" (normalized: "c:\\programdata\\microsoft\\windows\\start menu\\programs\\accessories\\system tools\\disk cleanup.lnk"), fInfoLevelId=0x0, lpFileInformation=0x31e628 | out: lpFileInformation=0x31e628*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3d31a0d9, ftCreationTime.dwHighDateTime=0x1ca043f, ftLastAccessTime.dwLowDateTime=0x3d31a0d9, ftLastAccessTime.dwHighDateTime=0x1ca043f, ftLastWriteTime.dwLowDateTime=0x956a6c0, ftLastWriteTime.dwHighDateTime=0x1d6eb7f, nFileSizeHigh=0x0, nFileSizeLow=0x4f0)) returned 1 [0063.572] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e5a8) returned 1 [0063.573] MoveFileW (lpExistingFileName="C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Accessories\\System Tools\\Disk Cleanup.lnk" (normalized: "c:\\programdata\\microsoft\\windows\\start menu\\programs\\accessories\\system tools\\disk cleanup.lnk"), lpNewFileName="C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Accessories\\System Tools\\Disk Cleanup.lnk" (normalized: "c:\\programdata\\microsoft\\windows\\start menu\\programs\\accessories\\system tools\\disk cleanup.lnk")) returned 1 [0063.573] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Accessories\\System Tools\\Resource Monitor.lnk", nBufferLength=0x105, lpBuffer=0x31e02c, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Accessories\\System Tools\\Resource Monitor.lnk", lpFilePart=0x0) returned 0x62 [0063.573] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e520) returned 1 [0063.573] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Accessories\\System Tools\\Resource Monitor.lnk" (normalized: "c:\\programdata\\microsoft\\windows\\start menu\\programs\\accessories\\system tools\\resource monitor.lnk"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x178 [0063.574] GetFileType (hFile=0x178) returned 0x1 [0063.574] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e51c) returned 1 [0063.574] GetFileType (hFile=0x178) returned 0x1 [0063.574] GetFileSize (in: hFile=0x178, lpFileSizeHigh=0x31e628 | out: lpFileSizeHigh=0x31e628*=0x0) returned 0x4da [0063.574] ReadFile (in: hFile=0x178, lpBuffer=0x26fdbc8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x31e5d4, lpOverlapped=0x0 | out: lpBuffer=0x26fdbc8*, lpNumberOfBytesRead=0x31e5d4*=0x4da, lpOverlapped=0x0) returned 1 [0063.575] CloseHandle (hObject=0x178) returned 1 [0063.589] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Accessories\\System Tools\\Resource Monitor.lnk", nBufferLength=0x105, lpBuffer=0x31e018, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Accessories\\System Tools\\Resource Monitor.lnk", lpFilePart=0x0) returned 0x62 [0063.589] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e50c) returned 1 [0063.589] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Accessories\\System Tools\\Resource Monitor.lnk" (normalized: "c:\\programdata\\microsoft\\windows\\start menu\\programs\\accessories\\system tools\\resource monitor.lnk"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x178 [0063.590] GetFileType (hFile=0x178) returned 0x1 [0063.590] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e508) returned 1 [0063.590] GetFileType (hFile=0x178) returned 0x1 [0063.590] WriteFile (in: hFile=0x178, lpBuffer=0x274d388*, nNumberOfBytesToWrite=0x4e0, lpNumberOfBytesWritten=0x31e59c, lpOverlapped=0x0 | out: lpBuffer=0x274d388*, lpNumberOfBytesWritten=0x31e59c*=0x4e0, lpOverlapped=0x0) returned 1 [0063.591] CloseHandle (hObject=0x178) returned 1 [0063.591] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Accessories\\System Tools\\Resource Monitor.lnk", nBufferLength=0x105, lpBuffer=0x31e14c, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Accessories\\System Tools\\Resource Monitor.lnk", lpFilePart=0x0) returned 0x62 [0063.591] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Accessories\\System Tools\\Resource Monitor.lnk", nBufferLength=0x105, lpBuffer=0x31e14c, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Accessories\\System Tools\\Resource Monitor.lnk", lpFilePart=0x0) returned 0x62 [0063.591] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e5ac) returned 1 [0063.591] GetFileAttributesExW (in: lpFileName="C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Accessories\\System Tools\\Resource Monitor.lnk" (normalized: "c:\\programdata\\microsoft\\windows\\start menu\\programs\\accessories\\system tools\\resource monitor.lnk"), fInfoLevelId=0x0, lpFileInformation=0x31e628 | out: lpFileInformation=0x31e628*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x141abfff, ftCreationTime.dwHighDateTime=0x1ca043f, ftLastAccessTime.dwLowDateTime=0x141abfff, ftLastAccessTime.dwHighDateTime=0x1ca043f, ftLastWriteTime.dwLowDateTime=0x9590820, ftLastWriteTime.dwHighDateTime=0x1d6eb7f, nFileSizeHigh=0x0, nFileSizeLow=0x4e0)) returned 1 [0063.591] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e5a8) returned 1 [0063.591] MoveFileW (lpExistingFileName="C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Accessories\\System Tools\\Resource Monitor.lnk" (normalized: "c:\\programdata\\microsoft\\windows\\start menu\\programs\\accessories\\system tools\\resource monitor.lnk"), lpNewFileName="C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Accessories\\System Tools\\Resource Monitor.lnk" (normalized: "c:\\programdata\\microsoft\\windows\\start menu\\programs\\accessories\\system tools\\resource monitor.lnk")) returned 1 [0063.592] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Accessories\\System Tools\\System Information.lnk", nBufferLength=0x105, lpBuffer=0x31e02c, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Accessories\\System Tools\\System Information.lnk", lpFilePart=0x0) returned 0x64 [0063.592] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e520) returned 1 [0063.592] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Accessories\\System Tools\\System Information.lnk" (normalized: "c:\\programdata\\microsoft\\windows\\start menu\\programs\\accessories\\system tools\\system information.lnk"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x178 [0063.592] GetFileType (hFile=0x178) returned 0x1 [0063.593] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e51c) returned 1 [0063.593] GetFileType (hFile=0x178) returned 0x1 [0063.593] GetFileSize (in: hFile=0x178, lpFileSizeHigh=0x31e628 | out: lpFileSizeHigh=0x31e628*=0x0) returned 0x4e2 [0063.593] ReadFile (in: hFile=0x178, lpBuffer=0x274ebb4, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x31e5d4, lpOverlapped=0x0 | out: lpBuffer=0x274ebb4*, lpNumberOfBytesRead=0x31e5d4*=0x4e2, lpOverlapped=0x0) returned 1 [0063.594] CloseHandle (hObject=0x178) returned 1 [0063.608] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Accessories\\System Tools\\System Information.lnk", nBufferLength=0x105, lpBuffer=0x31e018, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Accessories\\System Tools\\System Information.lnk", lpFilePart=0x0) returned 0x64 [0063.608] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e50c) returned 1 [0063.608] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Accessories\\System Tools\\System Information.lnk" (normalized: "c:\\programdata\\microsoft\\windows\\start menu\\programs\\accessories\\system tools\\system information.lnk"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x178 [0063.609] GetFileType (hFile=0x178) returned 0x1 [0063.609] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e508) returned 1 [0063.609] GetFileType (hFile=0x178) returned 0x1 [0063.609] WriteFile (in: hFile=0x178, lpBuffer=0x279e3d4*, nNumberOfBytesToWrite=0x4f0, lpNumberOfBytesWritten=0x31e59c, lpOverlapped=0x0 | out: lpBuffer=0x279e3d4*, lpNumberOfBytesWritten=0x31e59c*=0x4f0, lpOverlapped=0x0) returned 1 [0063.610] CloseHandle (hObject=0x178) returned 1 [0063.611] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Accessories\\System Tools\\System Information.lnk", nBufferLength=0x105, lpBuffer=0x31e14c, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Accessories\\System Tools\\System Information.lnk", lpFilePart=0x0) returned 0x64 [0063.611] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Accessories\\System Tools\\System Information.lnk", nBufferLength=0x105, lpBuffer=0x31e14c, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Accessories\\System Tools\\System Information.lnk", lpFilePart=0x0) returned 0x64 [0063.611] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e5ac) returned 1 [0063.611] GetFileAttributesExW (in: lpFileName="C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Accessories\\System Tools\\System Information.lnk" (normalized: "c:\\programdata\\microsoft\\windows\\start menu\\programs\\accessories\\system tools\\system information.lnk"), fInfoLevelId=0x0, lpFileInformation=0x31e628 | out: lpFileInformation=0x31e628*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa5e7f40, ftCreationTime.dwHighDateTime=0x1ca043f, ftLastAccessTime.dwLowDateTime=0xa5e7f40, ftLastAccessTime.dwHighDateTime=0x1ca043f, ftLastWriteTime.dwLowDateTime=0x95b6980, ftLastWriteTime.dwHighDateTime=0x1d6eb7f, nFileSizeHigh=0x0, nFileSizeLow=0x4f0)) returned 1 [0063.611] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e5a8) returned 1 [0063.611] MoveFileW (lpExistingFileName="C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Accessories\\System Tools\\System Information.lnk" (normalized: "c:\\programdata\\microsoft\\windows\\start menu\\programs\\accessories\\system tools\\system information.lnk"), lpNewFileName="C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Accessories\\System Tools\\System Information.lnk" (normalized: "c:\\programdata\\microsoft\\windows\\start menu\\programs\\accessories\\system tools\\system information.lnk")) returned 1 [0063.611] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Accessories\\System Tools\\System Restore.lnk", nBufferLength=0x105, lpBuffer=0x31e02c, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Accessories\\System Tools\\System Restore.lnk", lpFilePart=0x0) returned 0x60 [0063.612] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e520) returned 1 [0063.612] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Accessories\\System Tools\\System Restore.lnk" (normalized: "c:\\programdata\\microsoft\\windows\\start menu\\programs\\accessories\\system tools\\system restore.lnk"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x178 [0063.613] GetFileType (hFile=0x178) returned 0x1 [0063.613] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e51c) returned 1 [0063.613] GetFileType (hFile=0x178) returned 0x1 [0063.613] GetFileSize (in: hFile=0x178, lpFileSizeHigh=0x31e628 | out: lpFileSizeHigh=0x31e628*=0x0) returned 0x4de [0063.613] ReadFile (in: hFile=0x178, lpBuffer=0x279fbf4, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x31e5d4, lpOverlapped=0x0 | out: lpBuffer=0x279fbf4*, lpNumberOfBytesRead=0x31e5d4*=0x4de, lpOverlapped=0x0) returned 1 [0063.614] CloseHandle (hObject=0x178) returned 1 [0063.629] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Accessories\\System Tools\\System Restore.lnk", nBufferLength=0x105, lpBuffer=0x31e018, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Accessories\\System Tools\\System Restore.lnk", lpFilePart=0x0) returned 0x60 [0063.629] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e50c) returned 1 [0063.629] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Accessories\\System Tools\\System Restore.lnk" (normalized: "c:\\programdata\\microsoft\\windows\\start menu\\programs\\accessories\\system tools\\system restore.lnk"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x178 [0063.630] GetFileType (hFile=0x178) returned 0x1 [0063.630] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e508) returned 1 [0063.630] GetFileType (hFile=0x178) returned 0x1 [0063.630] WriteFile (in: hFile=0x178, lpBuffer=0x27ef3a8*, nNumberOfBytesToWrite=0x4e0, lpNumberOfBytesWritten=0x31e59c, lpOverlapped=0x0 | out: lpBuffer=0x27ef3a8*, lpNumberOfBytesWritten=0x31e59c*=0x4e0, lpOverlapped=0x0) returned 1 [0063.631] CloseHandle (hObject=0x178) returned 1 [0063.632] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Accessories\\System Tools\\System Restore.lnk", nBufferLength=0x105, lpBuffer=0x31e14c, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Accessories\\System Tools\\System Restore.lnk", lpFilePart=0x0) returned 0x60 [0063.632] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Accessories\\System Tools\\System Restore.lnk", nBufferLength=0x105, lpBuffer=0x31e14c, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Accessories\\System Tools\\System Restore.lnk", lpFilePart=0x0) returned 0x60 [0063.632] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e5ac) returned 1 [0063.632] GetFileAttributesExW (in: lpFileName="C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Accessories\\System Tools\\System Restore.lnk" (normalized: "c:\\programdata\\microsoft\\windows\\start menu\\programs\\accessories\\system tools\\system restore.lnk"), fInfoLevelId=0x0, lpFileInformation=0x31e628 | out: lpFileInformation=0x31e628*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3c8d61e7, ftCreationTime.dwHighDateTime=0x1ca043f, ftLastAccessTime.dwLowDateTime=0x3c8d61e7, ftLastAccessTime.dwHighDateTime=0x1ca043f, ftLastWriteTime.dwLowDateTime=0x95dcae0, ftLastWriteTime.dwHighDateTime=0x1d6eb7f, nFileSizeHigh=0x0, nFileSizeLow=0x4e0)) returned 1 [0063.632] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e5a8) returned 1 [0063.632] MoveFileW (lpExistingFileName="C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Accessories\\System Tools\\System Restore.lnk" (normalized: "c:\\programdata\\microsoft\\windows\\start menu\\programs\\accessories\\system tools\\system restore.lnk"), lpNewFileName="C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Accessories\\System Tools\\System Restore.lnk" (normalized: "c:\\programdata\\microsoft\\windows\\start menu\\programs\\accessories\\system tools\\system restore.lnk")) returned 1 [0063.633] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Accessories\\System Tools\\Task Scheduler.lnk", nBufferLength=0x105, lpBuffer=0x31e02c, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Accessories\\System Tools\\Task Scheduler.lnk", lpFilePart=0x0) returned 0x60 [0063.633] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e520) returned 1 [0063.633] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Accessories\\System Tools\\Task Scheduler.lnk" (normalized: "c:\\programdata\\microsoft\\windows\\start menu\\programs\\accessories\\system tools\\task scheduler.lnk"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x178 [0063.633] GetFileType (hFile=0x178) returned 0x1 [0063.633] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e51c) returned 1 [0063.633] GetFileType (hFile=0x178) returned 0x1 [0063.633] GetFileSize (in: hFile=0x178, lpFileSizeHigh=0x31e628 | out: lpFileSizeHigh=0x31e628*=0x0) returned 0x4f4 [0063.633] ReadFile (in: hFile=0x178, lpBuffer=0x27f0bcc, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x31e5d4, lpOverlapped=0x0 | out: lpBuffer=0x27f0bcc*, lpNumberOfBytesRead=0x31e5d4*=0x4f4, lpOverlapped=0x0) returned 1 [0063.635] CloseHandle (hObject=0x178) returned 1 [0063.680] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Accessories\\System Tools\\Task Scheduler.lnk", nBufferLength=0x105, lpBuffer=0x31e018, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Accessories\\System Tools\\Task Scheduler.lnk", lpFilePart=0x0) returned 0x60 [0063.680] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e50c) returned 1 [0063.680] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Accessories\\System Tools\\Task Scheduler.lnk" (normalized: "c:\\programdata\\microsoft\\windows\\start menu\\programs\\accessories\\system tools\\task scheduler.lnk"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x178 [0063.681] GetFileType (hFile=0x178) returned 0x1 [0063.681] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e508) returned 1 [0063.681] GetFileType (hFile=0x178) returned 0x1 [0063.681] WriteFile (in: hFile=0x178, lpBuffer=0x26417d8*, nNumberOfBytesToWrite=0x500, lpNumberOfBytesWritten=0x31e59c, lpOverlapped=0x0 | out: lpBuffer=0x26417d8*, lpNumberOfBytesWritten=0x31e59c*=0x500, lpOverlapped=0x0) returned 1 [0063.682] CloseHandle (hObject=0x178) returned 1 [0063.683] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Accessories\\System Tools\\Task Scheduler.lnk", nBufferLength=0x105, lpBuffer=0x31e14c, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Accessories\\System Tools\\Task Scheduler.lnk", lpFilePart=0x0) returned 0x60 [0063.683] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Accessories\\System Tools\\Task Scheduler.lnk", nBufferLength=0x105, lpBuffer=0x31e14c, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Accessories\\System Tools\\Task Scheduler.lnk", lpFilePart=0x0) returned 0x60 [0063.683] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e5ac) returned 1 [0063.683] GetFileAttributesExW (in: lpFileName="C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Accessories\\System Tools\\Task Scheduler.lnk" (normalized: "c:\\programdata\\microsoft\\windows\\start menu\\programs\\accessories\\system tools\\task scheduler.lnk"), fInfoLevelId=0x0, lpFileInformation=0x31e628 | out: lpFileInformation=0x31e628*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2b9eb814, ftCreationTime.dwHighDateTime=0x1ca043f, ftLastAccessTime.dwLowDateTime=0x2b9eb814, ftLastAccessTime.dwHighDateTime=0x1ca043f, ftLastWriteTime.dwLowDateTime=0x9675060, ftLastWriteTime.dwHighDateTime=0x1d6eb7f, nFileSizeHigh=0x0, nFileSizeLow=0x500)) returned 1 [0063.683] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e5a8) returned 1 [0063.683] MoveFileW (lpExistingFileName="C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Accessories\\System Tools\\Task Scheduler.lnk" (normalized: "c:\\programdata\\microsoft\\windows\\start menu\\programs\\accessories\\system tools\\task scheduler.lnk"), lpNewFileName="C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Accessories\\System Tools\\Task Scheduler.lnk" (normalized: "c:\\programdata\\microsoft\\windows\\start menu\\programs\\accessories\\system tools\\task scheduler.lnk")) returned 1 [0063.684] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Accessories\\System Tools\\Windows Easy Transfer Reports.lnk", nBufferLength=0x105, lpBuffer=0x31e02c, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Accessories\\System Tools\\Windows Easy Transfer Reports.lnk", lpFilePart=0x0) returned 0x6f [0063.684] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e520) returned 1 [0063.684] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Accessories\\System Tools\\Windows Easy Transfer Reports.lnk" (normalized: "c:\\programdata\\microsoft\\windows\\start menu\\programs\\accessories\\system tools\\windows easy transfer reports.lnk"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x178 [0063.684] GetFileType (hFile=0x178) returned 0x1 [0063.684] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e51c) returned 1 [0063.684] GetFileType (hFile=0x178) returned 0x1 [0063.684] GetFileSize (in: hFile=0x178, lpFileSizeHigh=0x31e628 | out: lpFileSizeHigh=0x31e628*=0x0) returned 0x528 [0063.684] ReadFile (in: hFile=0x178, lpBuffer=0x2643068, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x31e5d4, lpOverlapped=0x0 | out: lpBuffer=0x2643068*, lpNumberOfBytesRead=0x31e5d4*=0x528, lpOverlapped=0x0) returned 1 [0063.686] CloseHandle (hObject=0x178) returned 1 [0063.699] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Accessories\\System Tools\\Windows Easy Transfer Reports.lnk", nBufferLength=0x105, lpBuffer=0x31e018, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Accessories\\System Tools\\Windows Easy Transfer Reports.lnk", lpFilePart=0x0) returned 0x6f [0063.699] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e50c) returned 1 [0063.700] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Accessories\\System Tools\\Windows Easy Transfer Reports.lnk" (normalized: "c:\\programdata\\microsoft\\windows\\start menu\\programs\\accessories\\system tools\\windows easy transfer reports.lnk"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x178 [0063.701] GetFileType (hFile=0x178) returned 0x1 [0063.701] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e508) returned 1 [0063.701] GetFileType (hFile=0x178) returned 0x1 [0063.701] WriteFile (in: hFile=0x178, lpBuffer=0x2692b44*, nNumberOfBytesToWrite=0x530, lpNumberOfBytesWritten=0x31e59c, lpOverlapped=0x0 | out: lpBuffer=0x2692b44*, lpNumberOfBytesWritten=0x31e59c*=0x530, lpOverlapped=0x0) returned 1 [0063.702] CloseHandle (hObject=0x178) returned 1 [0063.702] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Accessories\\System Tools\\Windows Easy Transfer Reports.lnk", nBufferLength=0x105, lpBuffer=0x31e14c, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Accessories\\System Tools\\Windows Easy Transfer Reports.lnk", lpFilePart=0x0) returned 0x6f [0063.702] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Accessories\\System Tools\\Windows Easy Transfer Reports.lnk", nBufferLength=0x105, lpBuffer=0x31e14c, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Accessories\\System Tools\\Windows Easy Transfer Reports.lnk", lpFilePart=0x0) returned 0x6f [0063.702] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e5ac) returned 1 [0063.702] GetFileAttributesExW (in: lpFileName="C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Accessories\\System Tools\\Windows Easy Transfer Reports.lnk" (normalized: "c:\\programdata\\microsoft\\windows\\start menu\\programs\\accessories\\system tools\\windows easy transfer reports.lnk"), fInfoLevelId=0x0, lpFileInformation=0x31e628 | out: lpFileInformation=0x31e628*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8ace9ee9, ftCreationTime.dwHighDateTime=0x1ca043f, ftLastAccessTime.dwLowDateTime=0x8ace9ee9, ftLastAccessTime.dwHighDateTime=0x1ca043f, ftLastWriteTime.dwLowDateTime=0x969b1c0, ftLastWriteTime.dwHighDateTime=0x1d6eb7f, nFileSizeHigh=0x0, nFileSizeLow=0x530)) returned 1 [0063.703] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e5a8) returned 1 [0063.703] MoveFileW (lpExistingFileName="C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Accessories\\System Tools\\Windows Easy Transfer Reports.lnk" (normalized: "c:\\programdata\\microsoft\\windows\\start menu\\programs\\accessories\\system tools\\windows easy transfer reports.lnk"), lpNewFileName="C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Accessories\\System Tools\\Windows Easy Transfer Reports.lnk" (normalized: "c:\\programdata\\microsoft\\windows\\start menu\\programs\\accessories\\system tools\\windows easy transfer reports.lnk")) returned 1 [0063.703] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Accessories\\System Tools\\Windows Easy Transfer.lnk", nBufferLength=0x105, lpBuffer=0x31e02c, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Accessories\\System Tools\\Windows Easy Transfer.lnk", lpFilePart=0x0) returned 0x67 [0063.703] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e520) returned 1 [0063.703] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Accessories\\System Tools\\Windows Easy Transfer.lnk" (normalized: "c:\\programdata\\microsoft\\windows\\start menu\\programs\\accessories\\system tools\\windows easy transfer.lnk"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x178 [0063.704] GetFileType (hFile=0x178) returned 0x1 [0063.704] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e51c) returned 1 [0063.704] GetFileType (hFile=0x178) returned 0x1 [0063.704] GetFileSize (in: hFile=0x178, lpFileSizeHigh=0x31e628 | out: lpFileSizeHigh=0x31e628*=0x0) returned 0x524 [0063.704] ReadFile (in: hFile=0x178, lpBuffer=0x26943e8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x31e5d4, lpOverlapped=0x0 | out: lpBuffer=0x26943e8*, lpNumberOfBytesRead=0x31e5d4*=0x524, lpOverlapped=0x0) returned 1 [0063.705] CloseHandle (hObject=0x178) returned 1 [0063.719] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Accessories\\System Tools\\Windows Easy Transfer.lnk", nBufferLength=0x105, lpBuffer=0x31e018, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Accessories\\System Tools\\Windows Easy Transfer.lnk", lpFilePart=0x0) returned 0x67 [0063.719] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e50c) returned 1 [0063.720] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Accessories\\System Tools\\Windows Easy Transfer.lnk" (normalized: "c:\\programdata\\microsoft\\windows\\start menu\\programs\\accessories\\system tools\\windows easy transfer.lnk"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x178 [0063.721] GetFileType (hFile=0x178) returned 0x1 [0063.721] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e508) returned 1 [0063.721] GetFileType (hFile=0x178) returned 0x1 [0063.721] WriteFile (in: hFile=0x178, lpBuffer=0x26e3d4c*, nNumberOfBytesToWrite=0x530, lpNumberOfBytesWritten=0x31e59c, lpOverlapped=0x0 | out: lpBuffer=0x26e3d4c*, lpNumberOfBytesWritten=0x31e59c*=0x530, lpOverlapped=0x0) returned 1 [0063.722] CloseHandle (hObject=0x178) returned 1 [0063.722] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Accessories\\System Tools\\Windows Easy Transfer.lnk", nBufferLength=0x105, lpBuffer=0x31e14c, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Accessories\\System Tools\\Windows Easy Transfer.lnk", lpFilePart=0x0) returned 0x67 [0063.722] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Accessories\\System Tools\\Windows Easy Transfer.lnk", nBufferLength=0x105, lpBuffer=0x31e14c, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Accessories\\System Tools\\Windows Easy Transfer.lnk", lpFilePart=0x0) returned 0x67 [0063.722] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e5ac) returned 1 [0063.722] GetFileAttributesExW (in: lpFileName="C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Accessories\\System Tools\\Windows Easy Transfer.lnk" (normalized: "c:\\programdata\\microsoft\\windows\\start menu\\programs\\accessories\\system tools\\windows easy transfer.lnk"), fInfoLevelId=0x0, lpFileInformation=0x31e628 | out: lpFileInformation=0x31e628*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8ac9dc28, ftCreationTime.dwHighDateTime=0x1ca043f, ftLastAccessTime.dwLowDateTime=0x8ac9dc28, ftLastAccessTime.dwHighDateTime=0x1ca043f, ftLastWriteTime.dwLowDateTime=0x96c1320, ftLastWriteTime.dwHighDateTime=0x1d6eb7f, nFileSizeHigh=0x0, nFileSizeLow=0x530)) returned 1 [0063.722] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e5a8) returned 1 [0063.722] MoveFileW (lpExistingFileName="C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Accessories\\System Tools\\Windows Easy Transfer.lnk" (normalized: "c:\\programdata\\microsoft\\windows\\start menu\\programs\\accessories\\system tools\\windows easy transfer.lnk"), lpNewFileName="C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Accessories\\System Tools\\Windows Easy Transfer.lnk" (normalized: "c:\\programdata\\microsoft\\windows\\start menu\\programs\\accessories\\system tools\\windows easy transfer.lnk")) returned 1 [0063.723] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e654) returned 1 [0063.723] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Accessories\\Tablet PC", nBufferLength=0x105, lpBuffer=0x31e15c, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Accessories\\Tablet PC", lpFilePart=0x0) returned 0x4a [0063.723] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Accessories\\Tablet PC\\", nBufferLength=0x105, lpBuffer=0x31e130, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Accessories\\Tablet PC\\", lpFilePart=0x0) returned 0x4b [0063.723] FindFirstFileW (in: lpFileName="C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Accessories\\Tablet PC\\*", lpFindFileData=0x31e37c | out: lpFindFileData=0x31e37c*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x9182055d, ftCreationTime.dwHighDateTime=0x1cbf8eb, ftLastAccessTime.dwLowDateTime=0x8126b520, ftLastAccessTime.dwHighDateTime=0x1d2de2a, ftLastWriteTime.dwLowDateTime=0x81291680, ftLastWriteTime.dwHighDateTime=0x1d2de2a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5107a20 [0063.723] FindNextFileW (in: hFindFile=0x5107a20, lpFindFileData=0x31e38c | out: lpFindFileData=0x31e38c*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x9182055d, ftCreationTime.dwHighDateTime=0x1cbf8eb, ftLastAccessTime.dwLowDateTime=0x8126b520, ftLastAccessTime.dwHighDateTime=0x1d2de2a, ftLastWriteTime.dwLowDateTime=0x81291680, ftLastWriteTime.dwHighDateTime=0x1d2de2a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0063.723] FindNextFileW (in: hFindFile=0x5107a20, lpFindFileData=0x31e38c | out: lpFindFileData=0x31e38c*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0x9182055d, ftCreationTime.dwHighDateTime=0x1cbf8eb, ftLastAccessTime.dwLowDateTime=0x8a217df5, ftLastAccessTime.dwHighDateTime=0x1cbf8eb, ftLastWriteTime.dwLowDateTime=0x81291680, ftLastWriteTime.dwHighDateTime=0x1d2de2a, nFileSizeHigh=0x0, nFileSizeLow=0x157, dwReserved0=0x0, dwReserved1=0x0, cFileName="Desktop.ini", cAlternateFileName="")) returned 1 [0063.723] FindNextFileW (in: hFindFile=0x5107a20, lpFindFileData=0x31e38c | out: lpFindFileData=0x31e38c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x811d2fa0, ftCreationTime.dwHighDateTime=0x1d2de2a, ftLastAccessTime.dwLowDateTime=0x811d2fa0, ftLastAccessTime.dwHighDateTime=0x1d2de2a, ftLastWriteTime.dwLowDateTime=0x811d2fa0, ftLastWriteTime.dwHighDateTime=0x1d2de2a, nFileSizeHigh=0x0, nFileSizeLow=0x59c, dwReserved0=0x0, dwReserved1=0x0, cFileName="ShapeCollector.lnk", cAlternateFileName="SHAPEC~1.LNK")) returned 1 [0063.724] FindNextFileW (in: hFindFile=0x5107a20, lpFindFileData=0x31e38c | out: lpFindFileData=0x31e38c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8126b520, ftCreationTime.dwHighDateTime=0x1d2de2a, ftLastAccessTime.dwLowDateTime=0x8126b520, ftLastAccessTime.dwHighDateTime=0x1d2de2a, ftLastWriteTime.dwLowDateTime=0x8126b520, ftLastWriteTime.dwHighDateTime=0x1d2de2a, nFileSizeHigh=0x0, nFileSizeLow=0x56a, dwReserved0=0x0, dwReserved1=0x0, cFileName="TabTip.lnk", cAlternateFileName="")) returned 1 [0063.724] FindNextFileW (in: hFindFile=0x5107a20, lpFindFileData=0x31e38c | out: lpFindFileData=0x31e38c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x80d103a0, ftCreationTime.dwHighDateTime=0x1d2de2a, ftLastAccessTime.dwLowDateTime=0x80d103a0, ftLastAccessTime.dwHighDateTime=0x1d2de2a, ftLastWriteTime.dwLowDateTime=0x80d103a0, ftLastWriteTime.dwHighDateTime=0x1d2de2a, nFileSizeHigh=0x0, nFileSizeLow=0x524, dwReserved0=0x0, dwReserved1=0x0, cFileName="Windows Journal.lnk", cAlternateFileName="WINDOW~1.LNK")) returned 1 [0063.724] FindNextFileW (in: hFindFile=0x5107a20, lpFindFileData=0x31e38c | out: lpFindFileData=0x31e38c*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0063.724] FindClose (in: hFindFile=0x5107a20 | out: hFindFile=0x5107a20) returned 1 [0063.724] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e614) returned 1 [0063.724] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e620) returned 1 [0063.724] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e654) returned 1 [0063.724] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Accessories\\Tablet PC", nBufferLength=0x105, lpBuffer=0x31e15c, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Accessories\\Tablet PC", lpFilePart=0x0) returned 0x4a [0063.724] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Accessories\\Tablet PC\\", nBufferLength=0x105, lpBuffer=0x31e130, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Accessories\\Tablet PC\\", lpFilePart=0x0) returned 0x4b [0063.724] FindFirstFileW (in: lpFileName="C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Accessories\\Tablet PC\\*", lpFindFileData=0x31e37c | out: lpFindFileData=0x31e37c*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x9182055d, ftCreationTime.dwHighDateTime=0x1cbf8eb, ftLastAccessTime.dwLowDateTime=0x8126b520, ftLastAccessTime.dwHighDateTime=0x1d2de2a, ftLastWriteTime.dwLowDateTime=0x81291680, ftLastWriteTime.dwHighDateTime=0x1d2de2a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5107a20 [0063.724] FindNextFileW (in: hFindFile=0x5107a20, lpFindFileData=0x31e38c | out: lpFindFileData=0x31e38c*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x9182055d, ftCreationTime.dwHighDateTime=0x1cbf8eb, ftLastAccessTime.dwLowDateTime=0x8126b520, ftLastAccessTime.dwHighDateTime=0x1d2de2a, ftLastWriteTime.dwLowDateTime=0x81291680, ftLastWriteTime.dwHighDateTime=0x1d2de2a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0063.725] FindNextFileW (in: hFindFile=0x5107a20, lpFindFileData=0x31e38c | out: lpFindFileData=0x31e38c*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0x9182055d, ftCreationTime.dwHighDateTime=0x1cbf8eb, ftLastAccessTime.dwLowDateTime=0x8a217df5, ftLastAccessTime.dwHighDateTime=0x1cbf8eb, ftLastWriteTime.dwLowDateTime=0x81291680, ftLastWriteTime.dwHighDateTime=0x1d2de2a, nFileSizeHigh=0x0, nFileSizeLow=0x157, dwReserved0=0x0, dwReserved1=0x0, cFileName="Desktop.ini", cAlternateFileName="")) returned 1 [0063.725] FindNextFileW (in: hFindFile=0x5107a20, lpFindFileData=0x31e38c | out: lpFindFileData=0x31e38c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x811d2fa0, ftCreationTime.dwHighDateTime=0x1d2de2a, ftLastAccessTime.dwLowDateTime=0x811d2fa0, ftLastAccessTime.dwHighDateTime=0x1d2de2a, ftLastWriteTime.dwLowDateTime=0x811d2fa0, ftLastWriteTime.dwHighDateTime=0x1d2de2a, nFileSizeHigh=0x0, nFileSizeLow=0x59c, dwReserved0=0x0, dwReserved1=0x0, cFileName="ShapeCollector.lnk", cAlternateFileName="SHAPEC~1.LNK")) returned 1 [0063.725] FindNextFileW (in: hFindFile=0x5107a20, lpFindFileData=0x31e38c | out: lpFindFileData=0x31e38c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8126b520, ftCreationTime.dwHighDateTime=0x1d2de2a, ftLastAccessTime.dwLowDateTime=0x8126b520, ftLastAccessTime.dwHighDateTime=0x1d2de2a, ftLastWriteTime.dwLowDateTime=0x8126b520, ftLastWriteTime.dwHighDateTime=0x1d2de2a, nFileSizeHigh=0x0, nFileSizeLow=0x56a, dwReserved0=0x0, dwReserved1=0x0, cFileName="TabTip.lnk", cAlternateFileName="")) returned 1 [0063.725] FindNextFileW (in: hFindFile=0x5107a20, lpFindFileData=0x31e38c | out: lpFindFileData=0x31e38c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x80d103a0, ftCreationTime.dwHighDateTime=0x1d2de2a, ftLastAccessTime.dwLowDateTime=0x80d103a0, ftLastAccessTime.dwHighDateTime=0x1d2de2a, ftLastWriteTime.dwLowDateTime=0x80d103a0, ftLastWriteTime.dwHighDateTime=0x1d2de2a, nFileSizeHigh=0x0, nFileSizeLow=0x524, dwReserved0=0x0, dwReserved1=0x0, cFileName="Windows Journal.lnk", cAlternateFileName="WINDOW~1.LNK")) returned 1 [0063.725] FindNextFileW (in: hFindFile=0x5107a20, lpFindFileData=0x31e38c | out: lpFindFileData=0x31e38c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x80d103a0, ftCreationTime.dwHighDateTime=0x1d2de2a, ftLastAccessTime.dwLowDateTime=0x80d103a0, ftLastAccessTime.dwHighDateTime=0x1d2de2a, ftLastWriteTime.dwLowDateTime=0x80d103a0, ftLastWriteTime.dwHighDateTime=0x1d2de2a, nFileSizeHigh=0x0, nFileSizeLow=0x524, dwReserved0=0x0, dwReserved1=0x0, cFileName="Windows Journal.lnk", cAlternateFileName="WINDOW~1.LNK")) returned 0 [0063.725] FindClose (in: hFindFile=0x5107a20 | out: hFindFile=0x5107a20) returned 1 [0063.725] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e614) returned 1 [0063.726] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e620) returned 1 [0063.726] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Accessories\\Tablet PC\\ShapeCollector.lnk", nBufferLength=0x105, lpBuffer=0x31e02c, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Accessories\\Tablet PC\\ShapeCollector.lnk", lpFilePart=0x0) returned 0x5d [0063.726] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e520) returned 1 [0063.726] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Accessories\\Tablet PC\\ShapeCollector.lnk" (normalized: "c:\\programdata\\microsoft\\windows\\start menu\\programs\\accessories\\tablet pc\\shapecollector.lnk"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x178 [0063.726] GetFileType (hFile=0x178) returned 0x1 [0063.726] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e51c) returned 1 [0063.726] GetFileType (hFile=0x178) returned 0x1 [0063.726] GetFileSize (in: hFile=0x178, lpFileSizeHigh=0x31e628 | out: lpFileSizeHigh=0x31e628*=0x0) returned 0x59c [0063.726] ReadFile (in: hFile=0x178, lpBuffer=0x26e7d10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x31e5d4, lpOverlapped=0x0 | out: lpBuffer=0x26e7d10*, lpNumberOfBytesRead=0x31e5d4*=0x59c, lpOverlapped=0x0) returned 1 [0063.728] CloseHandle (hObject=0x178) returned 1 [0063.741] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Accessories\\Tablet PC\\ShapeCollector.lnk", nBufferLength=0x105, lpBuffer=0x31e018, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Accessories\\Tablet PC\\ShapeCollector.lnk", lpFilePart=0x0) returned 0x5d [0063.741] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e50c) returned 1 [0063.741] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Accessories\\Tablet PC\\ShapeCollector.lnk" (normalized: "c:\\programdata\\microsoft\\windows\\start menu\\programs\\accessories\\tablet pc\\shapecollector.lnk"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x178 [0063.743] GetFileType (hFile=0x178) returned 0x1 [0063.743] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e508) returned 1 [0063.743] GetFileType (hFile=0x178) returned 0x1 [0063.743] WriteFile (in: hFile=0x178, lpBuffer=0x273787c*, nNumberOfBytesToWrite=0x5a0, lpNumberOfBytesWritten=0x31e59c, lpOverlapped=0x0 | out: lpBuffer=0x273787c*, lpNumberOfBytesWritten=0x31e59c*=0x5a0, lpOverlapped=0x0) returned 1 [0063.744] CloseHandle (hObject=0x178) returned 1 [0063.744] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Accessories\\Tablet PC\\ShapeCollector.lnk", nBufferLength=0x105, lpBuffer=0x31e14c, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Accessories\\Tablet PC\\ShapeCollector.lnk", lpFilePart=0x0) returned 0x5d [0063.744] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Accessories\\Tablet PC\\ShapeCollector.lnk", nBufferLength=0x105, lpBuffer=0x31e14c, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Accessories\\Tablet PC\\ShapeCollector.lnk", lpFilePart=0x0) returned 0x5d [0063.744] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e5ac) returned 1 [0063.744] GetFileAttributesExW (in: lpFileName="C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Accessories\\Tablet PC\\ShapeCollector.lnk" (normalized: "c:\\programdata\\microsoft\\windows\\start menu\\programs\\accessories\\tablet pc\\shapecollector.lnk"), fInfoLevelId=0x0, lpFileInformation=0x31e628 | out: lpFileInformation=0x31e628*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x811d2fa0, ftCreationTime.dwHighDateTime=0x1d2de2a, ftLastAccessTime.dwLowDateTime=0x811d2fa0, ftLastAccessTime.dwHighDateTime=0x1d2de2a, ftLastWriteTime.dwLowDateTime=0x970d5e0, ftLastWriteTime.dwHighDateTime=0x1d6eb7f, nFileSizeHigh=0x0, nFileSizeLow=0x5a0)) returned 1 [0063.744] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e5a8) returned 1 [0063.744] MoveFileW (lpExistingFileName="C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Accessories\\Tablet PC\\ShapeCollector.lnk" (normalized: "c:\\programdata\\microsoft\\windows\\start menu\\programs\\accessories\\tablet pc\\shapecollector.lnk"), lpNewFileName="C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Accessories\\Tablet PC\\ShapeCollector.lnk" (normalized: "c:\\programdata\\microsoft\\windows\\start menu\\programs\\accessories\\tablet pc\\shapecollector.lnk")) returned 1 [0063.745] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Accessories\\Tablet PC\\TabTip.lnk", nBufferLength=0x105, lpBuffer=0x31e02c, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Accessories\\Tablet PC\\TabTip.lnk", lpFilePart=0x0) returned 0x55 [0063.745] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e520) returned 1 [0063.745] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Accessories\\Tablet PC\\TabTip.lnk" (normalized: "c:\\programdata\\microsoft\\windows\\start menu\\programs\\accessories\\tablet pc\\tabtip.lnk"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x178 [0063.745] GetFileType (hFile=0x178) returned 0x1 [0063.745] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e51c) returned 1 [0063.745] GetFileType (hFile=0x178) returned 0x1 [0063.745] GetFileSize (in: hFile=0x178, lpFileSizeHigh=0x31e628 | out: lpFileSizeHigh=0x31e628*=0x0) returned 0x56a [0063.746] ReadFile (in: hFile=0x178, lpBuffer=0x27390e0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x31e5d4, lpOverlapped=0x0 | out: lpBuffer=0x27390e0*, lpNumberOfBytesRead=0x31e5d4*=0x56a, lpOverlapped=0x0) returned 1 [0063.747] CloseHandle (hObject=0x178) returned 1 [0063.760] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Accessories\\Tablet PC\\TabTip.lnk", nBufferLength=0x105, lpBuffer=0x31e018, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Accessories\\Tablet PC\\TabTip.lnk", lpFilePart=0x0) returned 0x55 [0063.760] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e50c) returned 1 [0063.761] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Accessories\\Tablet PC\\TabTip.lnk" (normalized: "c:\\programdata\\microsoft\\windows\\start menu\\programs\\accessories\\tablet pc\\tabtip.lnk"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x178 [0063.762] GetFileType (hFile=0x178) returned 0x1 [0063.762] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e508) returned 1 [0063.762] GetFileType (hFile=0x178) returned 0x1 [0063.762] WriteFile (in: hFile=0x178, lpBuffer=0x2788b40*, nNumberOfBytesToWrite=0x570, lpNumberOfBytesWritten=0x31e59c, lpOverlapped=0x0 | out: lpBuffer=0x2788b40*, lpNumberOfBytesWritten=0x31e59c*=0x570, lpOverlapped=0x0) returned 1 [0063.763] CloseHandle (hObject=0x178) returned 1 [0063.763] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Accessories\\Tablet PC\\TabTip.lnk", nBufferLength=0x105, lpBuffer=0x31e14c, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Accessories\\Tablet PC\\TabTip.lnk", lpFilePart=0x0) returned 0x55 [0063.763] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Accessories\\Tablet PC\\TabTip.lnk", nBufferLength=0x105, lpBuffer=0x31e14c, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Accessories\\Tablet PC\\TabTip.lnk", lpFilePart=0x0) returned 0x55 [0063.763] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e5ac) returned 1 [0063.763] GetFileAttributesExW (in: lpFileName="C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Accessories\\Tablet PC\\TabTip.lnk" (normalized: "c:\\programdata\\microsoft\\windows\\start menu\\programs\\accessories\\tablet pc\\tabtip.lnk"), fInfoLevelId=0x0, lpFileInformation=0x31e628 | out: lpFileInformation=0x31e628*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8126b520, ftCreationTime.dwHighDateTime=0x1d2de2a, ftLastAccessTime.dwLowDateTime=0x8126b520, ftLastAccessTime.dwHighDateTime=0x1d2de2a, ftLastWriteTime.dwLowDateTime=0x9733740, ftLastWriteTime.dwHighDateTime=0x1d6eb7f, nFileSizeHigh=0x0, nFileSizeLow=0x570)) returned 1 [0063.763] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e5a8) returned 1 [0063.763] MoveFileW (lpExistingFileName="C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Accessories\\Tablet PC\\TabTip.lnk" (normalized: "c:\\programdata\\microsoft\\windows\\start menu\\programs\\accessories\\tablet pc\\tabtip.lnk"), lpNewFileName="C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Accessories\\Tablet PC\\TabTip.lnk" (normalized: "c:\\programdata\\microsoft\\windows\\start menu\\programs\\accessories\\tablet pc\\tabtip.lnk")) returned 1 [0063.764] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Accessories\\Tablet PC\\Windows Journal.lnk", nBufferLength=0x105, lpBuffer=0x31e02c, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Accessories\\Tablet PC\\Windows Journal.lnk", lpFilePart=0x0) returned 0x5e [0063.764] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e520) returned 1 [0063.764] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Accessories\\Tablet PC\\Windows Journal.lnk" (normalized: "c:\\programdata\\microsoft\\windows\\start menu\\programs\\accessories\\tablet pc\\windows journal.lnk"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x178 [0063.764] GetFileType (hFile=0x178) returned 0x1 [0063.764] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e51c) returned 1 [0063.765] GetFileType (hFile=0x178) returned 0x1 [0063.765] GetFileSize (in: hFile=0x178, lpFileSizeHigh=0x31e628 | out: lpFileSizeHigh=0x31e628*=0x0) returned 0x524 [0063.765] ReadFile (in: hFile=0x178, lpBuffer=0x278a360, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x31e5d4, lpOverlapped=0x0 | out: lpBuffer=0x278a360*, lpNumberOfBytesRead=0x31e5d4*=0x524, lpOverlapped=0x0) returned 1 [0063.766] CloseHandle (hObject=0x178) returned 1 [0063.780] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Accessories\\Tablet PC\\Windows Journal.lnk", nBufferLength=0x105, lpBuffer=0x31e018, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Accessories\\Tablet PC\\Windows Journal.lnk", lpFilePart=0x0) returned 0x5e [0063.780] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e50c) returned 1 [0063.780] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Accessories\\Tablet PC\\Windows Journal.lnk" (normalized: "c:\\programdata\\microsoft\\windows\\start menu\\programs\\accessories\\tablet pc\\windows journal.lnk"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x178 [0063.781] GetFileType (hFile=0x178) returned 0x1 [0063.781] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e508) returned 1 [0063.781] GetFileType (hFile=0x178) returned 0x1 [0063.781] WriteFile (in: hFile=0x178, lpBuffer=0x27d9ca8*, nNumberOfBytesToWrite=0x530, lpNumberOfBytesWritten=0x31e59c, lpOverlapped=0x0 | out: lpBuffer=0x27d9ca8*, lpNumberOfBytesWritten=0x31e59c*=0x530, lpOverlapped=0x0) returned 1 [0063.782] CloseHandle (hObject=0x178) returned 1 [0063.782] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Accessories\\Tablet PC\\Windows Journal.lnk", nBufferLength=0x105, lpBuffer=0x31e14c, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Accessories\\Tablet PC\\Windows Journal.lnk", lpFilePart=0x0) returned 0x5e [0063.782] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Accessories\\Tablet PC\\Windows Journal.lnk", nBufferLength=0x105, lpBuffer=0x31e14c, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Accessories\\Tablet PC\\Windows Journal.lnk", lpFilePart=0x0) returned 0x5e [0063.782] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e5ac) returned 1 [0063.782] GetFileAttributesExW (in: lpFileName="C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Accessories\\Tablet PC\\Windows Journal.lnk" (normalized: "c:\\programdata\\microsoft\\windows\\start menu\\programs\\accessories\\tablet pc\\windows journal.lnk"), fInfoLevelId=0x0, lpFileInformation=0x31e628 | out: lpFileInformation=0x31e628*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x80d103a0, ftCreationTime.dwHighDateTime=0x1d2de2a, ftLastAccessTime.dwLowDateTime=0x80d103a0, ftLastAccessTime.dwHighDateTime=0x1d2de2a, ftLastWriteTime.dwLowDateTime=0x97598a0, ftLastWriteTime.dwHighDateTime=0x1d6eb7f, nFileSizeHigh=0x0, nFileSizeLow=0x530)) returned 1 [0063.782] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e5a8) returned 1 [0063.782] MoveFileW (lpExistingFileName="C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Accessories\\Tablet PC\\Windows Journal.lnk" (normalized: "c:\\programdata\\microsoft\\windows\\start menu\\programs\\accessories\\tablet pc\\windows journal.lnk"), lpNewFileName="C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Accessories\\Tablet PC\\Windows Journal.lnk" (normalized: "c:\\programdata\\microsoft\\windows\\start menu\\programs\\accessories\\tablet pc\\windows journal.lnk")) returned 1 [0063.783] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e654) returned 1 [0063.783] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Accessories\\Windows PowerShell", nBufferLength=0x105, lpBuffer=0x31e15c, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Accessories\\Windows PowerShell", lpFilePart=0x0) returned 0x53 [0063.783] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Accessories\\Windows PowerShell\\", nBufferLength=0x105, lpBuffer=0x31e130, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Accessories\\Windows PowerShell\\", lpFilePart=0x0) returned 0x54 [0063.783] FindFirstFileW (in: lpFileName="C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Accessories\\Windows PowerShell\\*", lpFindFileData=0x31e37c | out: lpFindFileData=0x31e37c*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x80020c30, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x8d79c9d7, ftLastAccessTime.dwHighDateTime=0x1ca043f, ftLastWriteTime.dwLowDateTime=0x8d7c2b37, ftLastWriteTime.dwHighDateTime=0x1ca043f, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5107ba0 [0063.783] FindNextFileW (in: hFindFile=0x5107ba0, lpFindFileData=0x31e38c | out: lpFindFileData=0x31e38c*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x80020c30, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x8d79c9d7, ftLastAccessTime.dwHighDateTime=0x1ca043f, ftLastWriteTime.dwLowDateTime=0x8d7c2b37, ftLastWriteTime.dwHighDateTime=0x1ca043f, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0063.784] FindNextFileW (in: hFindFile=0x5107ba0, lpFindFileData=0x31e38c | out: lpFindFileData=0x31e38c*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0x8d776877, ftCreationTime.dwHighDateTime=0x1ca043f, ftLastAccessTime.dwLowDateTime=0x8d776877, ftLastAccessTime.dwHighDateTime=0x1ca043f, ftLastWriteTime.dwLowDateTime=0x8d7c2b37, ftLastWriteTime.dwHighDateTime=0x1ca043f, nFileSizeHigh=0x0, nFileSizeLow=0xd8, dwReserved0=0x0, dwReserved1=0x0, cFileName="desktop.ini", cAlternateFileName="")) returned 1 [0063.784] FindNextFileW (in: hFindFile=0x5107ba0, lpFindFileData=0x31e38c | out: lpFindFileData=0x31e38c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8038cbd7, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x7bef7178, ftLastAccessTime.dwHighDateTime=0x1ca0444, ftLastWriteTime.dwLowDateTime=0x7bef7178, ftLastWriteTime.dwHighDateTime=0x1ca0444, nFileSizeHigh=0x0, nFileSizeLow=0x7c5, dwReserved0=0x0, dwReserved1=0x0, cFileName="Windows PowerShell (x86).lnk", cAlternateFileName="WINDOW~1.LNK")) returned 1 [0063.784] FindNextFileW (in: hFindFile=0x5107ba0, lpFindFileData=0x31e38c | out: lpFindFileData=0x31e38c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8d79c9d7, ftCreationTime.dwHighDateTime=0x1ca043f, ftLastAccessTime.dwLowDateTime=0x8d79c9d7, ftLastAccessTime.dwHighDateTime=0x1ca043f, ftLastWriteTime.dwLowDateTime=0x8d7c2b37, ftLastWriteTime.dwHighDateTime=0x1ca043f, nFileSizeHigh=0x0, nFileSizeLow=0x5bc, dwReserved0=0x0, dwReserved1=0x0, cFileName="Windows PowerShell ISE (x86).lnk", cAlternateFileName="WINDOW~4.LNK")) returned 1 [0063.784] FindNextFileW (in: hFindFile=0x5107ba0, lpFindFileData=0x31e38c | out: lpFindFileData=0x31e38c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8d750717, ftCreationTime.dwHighDateTime=0x1ca043f, ftLastAccessTime.dwLowDateTime=0x8d750717, ftLastAccessTime.dwHighDateTime=0x1ca043f, ftLastWriteTime.dwLowDateTime=0x8d750717, ftLastWriteTime.dwHighDateTime=0x1ca043f, nFileSizeHigh=0x0, nFileSizeLow=0x5bc, dwReserved0=0x0, dwReserved1=0x0, cFileName="Windows PowerShell ISE.lnk", cAlternateFileName="WINDOW~3.LNK")) returned 1 [0063.784] FindNextFileW (in: hFindFile=0x5107ba0, lpFindFileData=0x31e38c | out: lpFindFileData=0x31e38c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8038cbd7, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x7bef7178, ftLastAccessTime.dwHighDateTime=0x1ca0444, ftLastWriteTime.dwLowDateTime=0x7bef7178, ftLastWriteTime.dwHighDateTime=0x1ca0444, nFileSizeHigh=0x0, nFileSizeLow=0x76b, dwReserved0=0x0, dwReserved1=0x0, cFileName="Windows PowerShell.lnk", cAlternateFileName="WINDOW~2.LNK")) returned 1 [0063.784] FindNextFileW (in: hFindFile=0x5107ba0, lpFindFileData=0x31e38c | out: lpFindFileData=0x31e38c*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0063.784] FindClose (in: hFindFile=0x5107ba0 | out: hFindFile=0x5107ba0) returned 1 [0063.784] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e614) returned 1 [0063.784] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e620) returned 1 [0063.784] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e654) returned 1 [0063.785] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Accessories\\Windows PowerShell", nBufferLength=0x105, lpBuffer=0x31e15c, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Accessories\\Windows PowerShell", lpFilePart=0x0) returned 0x53 [0063.785] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Accessories\\Windows PowerShell\\", nBufferLength=0x105, lpBuffer=0x31e130, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Accessories\\Windows PowerShell\\", lpFilePart=0x0) returned 0x54 [0063.785] FindFirstFileW (in: lpFileName="C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Accessories\\Windows PowerShell\\*", lpFindFileData=0x31e37c | out: lpFindFileData=0x31e37c*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x80020c30, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x8d79c9d7, ftLastAccessTime.dwHighDateTime=0x1ca043f, ftLastWriteTime.dwLowDateTime=0x8d7c2b37, ftLastWriteTime.dwHighDateTime=0x1ca043f, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5107ba0 [0063.785] FindNextFileW (in: hFindFile=0x5107ba0, lpFindFileData=0x31e38c | out: lpFindFileData=0x31e38c*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x80020c30, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x8d79c9d7, ftLastAccessTime.dwHighDateTime=0x1ca043f, ftLastWriteTime.dwLowDateTime=0x8d7c2b37, ftLastWriteTime.dwHighDateTime=0x1ca043f, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0063.785] FindNextFileW (in: hFindFile=0x5107ba0, lpFindFileData=0x31e38c | out: lpFindFileData=0x31e38c*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0x8d776877, ftCreationTime.dwHighDateTime=0x1ca043f, ftLastAccessTime.dwLowDateTime=0x8d776877, ftLastAccessTime.dwHighDateTime=0x1ca043f, ftLastWriteTime.dwLowDateTime=0x8d7c2b37, ftLastWriteTime.dwHighDateTime=0x1ca043f, nFileSizeHigh=0x0, nFileSizeLow=0xd8, dwReserved0=0x0, dwReserved1=0x0, cFileName="desktop.ini", cAlternateFileName="")) returned 1 [0063.785] FindNextFileW (in: hFindFile=0x5107ba0, lpFindFileData=0x31e38c | out: lpFindFileData=0x31e38c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8038cbd7, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x7bef7178, ftLastAccessTime.dwHighDateTime=0x1ca0444, ftLastWriteTime.dwLowDateTime=0x7bef7178, ftLastWriteTime.dwHighDateTime=0x1ca0444, nFileSizeHigh=0x0, nFileSizeLow=0x7c5, dwReserved0=0x0, dwReserved1=0x0, cFileName="Windows PowerShell (x86).lnk", cAlternateFileName="WINDOW~1.LNK")) returned 1 [0063.785] FindNextFileW (in: hFindFile=0x5107ba0, lpFindFileData=0x31e38c | out: lpFindFileData=0x31e38c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8d79c9d7, ftCreationTime.dwHighDateTime=0x1ca043f, ftLastAccessTime.dwLowDateTime=0x8d79c9d7, ftLastAccessTime.dwHighDateTime=0x1ca043f, ftLastWriteTime.dwLowDateTime=0x8d7c2b37, ftLastWriteTime.dwHighDateTime=0x1ca043f, nFileSizeHigh=0x0, nFileSizeLow=0x5bc, dwReserved0=0x0, dwReserved1=0x0, cFileName="Windows PowerShell ISE (x86).lnk", cAlternateFileName="WINDOW~4.LNK")) returned 1 [0063.785] FindNextFileW (in: hFindFile=0x5107ba0, lpFindFileData=0x31e38c | out: lpFindFileData=0x31e38c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8d750717, ftCreationTime.dwHighDateTime=0x1ca043f, ftLastAccessTime.dwLowDateTime=0x8d750717, ftLastAccessTime.dwHighDateTime=0x1ca043f, ftLastWriteTime.dwLowDateTime=0x8d750717, ftLastWriteTime.dwHighDateTime=0x1ca043f, nFileSizeHigh=0x0, nFileSizeLow=0x5bc, dwReserved0=0x0, dwReserved1=0x0, cFileName="Windows PowerShell ISE.lnk", cAlternateFileName="WINDOW~3.LNK")) returned 1 [0063.786] FindNextFileW (in: hFindFile=0x5107ba0, lpFindFileData=0x31e38c | out: lpFindFileData=0x31e38c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8038cbd7, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x7bef7178, ftLastAccessTime.dwHighDateTime=0x1ca0444, ftLastWriteTime.dwLowDateTime=0x7bef7178, ftLastWriteTime.dwHighDateTime=0x1ca0444, nFileSizeHigh=0x0, nFileSizeLow=0x76b, dwReserved0=0x0, dwReserved1=0x0, cFileName="Windows PowerShell.lnk", cAlternateFileName="WINDOW~2.LNK")) returned 1 [0063.786] FindNextFileW (in: hFindFile=0x5107ba0, lpFindFileData=0x31e38c | out: lpFindFileData=0x31e38c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8038cbd7, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x7bef7178, ftLastAccessTime.dwHighDateTime=0x1ca0444, ftLastWriteTime.dwLowDateTime=0x7bef7178, ftLastWriteTime.dwHighDateTime=0x1ca0444, nFileSizeHigh=0x0, nFileSizeLow=0x76b, dwReserved0=0x0, dwReserved1=0x0, cFileName="Windows PowerShell.lnk", cAlternateFileName="WINDOW~2.LNK")) returned 0 [0063.786] FindClose (in: hFindFile=0x5107ba0 | out: hFindFile=0x5107ba0) returned 1 [0063.786] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e614) returned 1 [0063.786] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e620) returned 1 [0063.786] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Accessories\\Windows PowerShell\\Windows PowerShell (x86).lnk", nBufferLength=0x105, lpBuffer=0x31e02c, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Accessories\\Windows PowerShell\\Windows PowerShell (x86).lnk", lpFilePart=0x0) returned 0x70 [0063.786] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e520) returned 1 [0063.786] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Accessories\\Windows PowerShell\\Windows PowerShell (x86).lnk" (normalized: "c:\\programdata\\microsoft\\windows\\start menu\\programs\\accessories\\windows powershell\\windows powershell (x86).lnk"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x178 [0063.787] GetFileType (hFile=0x178) returned 0x1 [0063.787] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e51c) returned 1 [0063.787] GetFileType (hFile=0x178) returned 0x1 [0063.787] GetFileSize (in: hFile=0x178, lpFileSizeHigh=0x31e628 | out: lpFileSizeHigh=0x31e628*=0x0) returned 0x7c5 [0063.787] ReadFile (in: hFile=0x178, lpBuffer=0x27de8b8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x31e5d4, lpOverlapped=0x0 | out: lpBuffer=0x27de8b8*, lpNumberOfBytesRead=0x31e5d4*=0x7c5, lpOverlapped=0x0) returned 1 [0063.808] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Accessories\\Windows PowerShell\\Windows PowerShell (x86).lnk", nBufferLength=0x105, lpBuffer=0x31e018, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Accessories\\Windows PowerShell\\Windows PowerShell (x86).lnk", lpFilePart=0x0) returned 0x70 [0063.808] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e50c) returned 1 [0063.808] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Accessories\\Windows PowerShell\\Windows PowerShell (x86).lnk" (normalized: "c:\\programdata\\microsoft\\windows\\start menu\\programs\\accessories\\windows powershell\\windows powershell (x86).lnk"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x178 [0063.809] GetFileType (hFile=0x178) returned 0x1 [0063.809] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e508) returned 1 [0063.809] GetFileType (hFile=0x178) returned 0x1 [0063.809] WriteFile (in: hFile=0x178, lpBuffer=0x282ef58*, nNumberOfBytesToWrite=0x7d0, lpNumberOfBytesWritten=0x31e59c, lpOverlapped=0x0 | out: lpBuffer=0x282ef58*, lpNumberOfBytesWritten=0x31e59c*=0x7d0, lpOverlapped=0x0) returned 1 [0063.811] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Accessories\\Windows PowerShell\\Windows PowerShell (x86).lnk", nBufferLength=0x105, lpBuffer=0x31e14c, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Accessories\\Windows PowerShell\\Windows PowerShell (x86).lnk", lpFilePart=0x0) returned 0x70 [0063.811] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Accessories\\Windows PowerShell\\Windows PowerShell (x86).lnk", nBufferLength=0x105, lpBuffer=0x31e14c, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Accessories\\Windows PowerShell\\Windows PowerShell (x86).lnk", lpFilePart=0x0) returned 0x70 [0063.811] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e5ac) returned 1 [0063.811] GetFileAttributesExW (in: lpFileName="C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Accessories\\Windows PowerShell\\Windows PowerShell (x86).lnk" (normalized: "c:\\programdata\\microsoft\\windows\\start menu\\programs\\accessories\\windows powershell\\windows powershell (x86).lnk"), fInfoLevelId=0x0, lpFileInformation=0x31e628 | out: lpFileInformation=0x31e628*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8038cbd7, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x7bef7178, ftLastAccessTime.dwHighDateTime=0x1ca0444, ftLastWriteTime.dwLowDateTime=0x97a5b60, ftLastWriteTime.dwHighDateTime=0x1d6eb7f, nFileSizeHigh=0x0, nFileSizeLow=0x7d0)) returned 1 [0063.811] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e5a8) returned 1 [0063.811] MoveFileW (lpExistingFileName="C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Accessories\\Windows PowerShell\\Windows PowerShell (x86).lnk" (normalized: "c:\\programdata\\microsoft\\windows\\start menu\\programs\\accessories\\windows powershell\\windows powershell (x86).lnk"), lpNewFileName="C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Accessories\\Windows PowerShell\\Windows PowerShell (x86).lnk" (normalized: "c:\\programdata\\microsoft\\windows\\start menu\\programs\\accessories\\windows powershell\\windows powershell (x86).lnk")) returned 1 [0063.812] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Accessories\\Windows PowerShell\\Windows PowerShell ISE (x86).lnk", nBufferLength=0x105, lpBuffer=0x31e02c, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Accessories\\Windows PowerShell\\Windows PowerShell ISE (x86).lnk", lpFilePart=0x0) returned 0x74 [0063.812] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e520) returned 1 [0063.812] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Accessories\\Windows PowerShell\\Windows PowerShell ISE (x86).lnk" (normalized: "c:\\programdata\\microsoft\\windows\\start menu\\programs\\accessories\\windows powershell\\windows powershell ise (x86).lnk"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x178 [0063.812] GetFileType (hFile=0x178) returned 0x1 [0063.812] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e51c) returned 1 [0063.812] GetFileType (hFile=0x178) returned 0x1 [0063.812] GetFileSize (in: hFile=0x178, lpFileSizeHigh=0x31e628 | out: lpFileSizeHigh=0x31e628*=0x0) returned 0x5bc [0063.812] ReadFile (in: hFile=0x178, lpBuffer=0x28308c8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x31e5d4, lpOverlapped=0x0 | out: lpBuffer=0x28308c8*, lpNumberOfBytesRead=0x31e5d4*=0x5bc, lpOverlapped=0x0) returned 1 [0063.868] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Accessories\\Windows PowerShell\\Windows PowerShell ISE (x86).lnk", nBufferLength=0x105, lpBuffer=0x31e018, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Accessories\\Windows PowerShell\\Windows PowerShell ISE (x86).lnk", lpFilePart=0x0) returned 0x74 [0063.868] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e50c) returned 1 [0063.868] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Accessories\\Windows PowerShell\\Windows PowerShell ISE (x86).lnk" (normalized: "c:\\programdata\\microsoft\\windows\\start menu\\programs\\accessories\\windows powershell\\windows powershell ise (x86).lnk"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x178 [0063.869] GetFileType (hFile=0x178) returned 0x1 [0063.869] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e508) returned 1 [0063.869] GetFileType (hFile=0x178) returned 0x1 [0063.869] WriteFile (in: hFile=0x178, lpBuffer=0x2681f0c*, nNumberOfBytesToWrite=0x5c0, lpNumberOfBytesWritten=0x31e59c, lpOverlapped=0x0 | out: lpBuffer=0x2681f0c*, lpNumberOfBytesWritten=0x31e59c*=0x5c0, lpOverlapped=0x0) returned 1 [0063.870] CloseHandle (hObject=0x178) returned 1 [0063.870] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Accessories\\Windows PowerShell\\Windows PowerShell ISE (x86).lnk", nBufferLength=0x105, lpBuffer=0x31e14c, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Accessories\\Windows PowerShell\\Windows PowerShell ISE (x86).lnk", lpFilePart=0x0) returned 0x74 [0063.870] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Accessories\\Windows PowerShell\\Windows PowerShell ISE (x86).lnk", nBufferLength=0x105, lpBuffer=0x31e14c, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Accessories\\Windows PowerShell\\Windows PowerShell ISE (x86).lnk", lpFilePart=0x0) returned 0x74 [0063.870] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e5ac) returned 1 [0063.870] GetFileAttributesExW (in: lpFileName="C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Accessories\\Windows PowerShell\\Windows PowerShell ISE (x86).lnk" (normalized: "c:\\programdata\\microsoft\\windows\\start menu\\programs\\accessories\\windows powershell\\windows powershell ise (x86).lnk"), fInfoLevelId=0x0, lpFileInformation=0x31e628 | out: lpFileInformation=0x31e628*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8d79c9d7, ftCreationTime.dwHighDateTime=0x1ca043f, ftLastAccessTime.dwLowDateTime=0x8d79c9d7, ftLastAccessTime.dwHighDateTime=0x1ca043f, ftLastWriteTime.dwLowDateTime=0x983e0e0, ftLastWriteTime.dwHighDateTime=0x1d6eb7f, nFileSizeHigh=0x0, nFileSizeLow=0x5c0)) returned 1 [0063.871] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e5a8) returned 1 [0063.871] MoveFileW (lpExistingFileName="C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Accessories\\Windows PowerShell\\Windows PowerShell ISE (x86).lnk" (normalized: "c:\\programdata\\microsoft\\windows\\start menu\\programs\\accessories\\windows powershell\\windows powershell ise (x86).lnk"), lpNewFileName="C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Accessories\\Windows PowerShell\\Windows PowerShell ISE (x86).lnk" (normalized: "c:\\programdata\\microsoft\\windows\\start menu\\programs\\accessories\\windows powershell\\windows powershell ise (x86).lnk")) returned 1 [0063.871] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Accessories\\Windows PowerShell\\Windows PowerShell ISE.lnk", nBufferLength=0x105, lpBuffer=0x31e02c, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Accessories\\Windows PowerShell\\Windows PowerShell ISE.lnk", lpFilePart=0x0) returned 0x6e [0063.871] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e520) returned 1 [0063.871] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Accessories\\Windows PowerShell\\Windows PowerShell ISE.lnk" (normalized: "c:\\programdata\\microsoft\\windows\\start menu\\programs\\accessories\\windows powershell\\windows powershell ise.lnk"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x178 [0063.872] GetFileType (hFile=0x178) returned 0x1 [0063.873] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e51c) returned 1 [0063.873] GetFileType (hFile=0x178) returned 0x1 [0063.873] GetFileSize (in: hFile=0x178, lpFileSizeHigh=0x31e628 | out: lpFileSizeHigh=0x31e628*=0x0) returned 0x5bc [0063.873] ReadFile (in: hFile=0x178, lpBuffer=0x2683874, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x31e5d4, lpOverlapped=0x0 | out: lpBuffer=0x2683874*, lpNumberOfBytesRead=0x31e5d4*=0x5bc, lpOverlapped=0x0) returned 1 [0063.874] CloseHandle (hObject=0x178) returned 1 [0063.888] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Accessories\\Windows PowerShell\\Windows PowerShell ISE.lnk", nBufferLength=0x105, lpBuffer=0x31e018, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Accessories\\Windows PowerShell\\Windows PowerShell ISE.lnk", lpFilePart=0x0) returned 0x6e [0063.888] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e50c) returned 1 [0063.888] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Accessories\\Windows PowerShell\\Windows PowerShell ISE.lnk" (normalized: "c:\\programdata\\microsoft\\windows\\start menu\\programs\\accessories\\windows powershell\\windows powershell ise.lnk"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x178 [0063.889] GetFileType (hFile=0x178) returned 0x1 [0063.889] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e508) returned 1 [0063.889] GetFileType (hFile=0x178) returned 0x1 [0063.889] WriteFile (in: hFile=0x178, lpBuffer=0x26d3610*, nNumberOfBytesToWrite=0x5c0, lpNumberOfBytesWritten=0x31e59c, lpOverlapped=0x0 | out: lpBuffer=0x26d3610*, lpNumberOfBytesWritten=0x31e59c*=0x5c0, lpOverlapped=0x0) returned 1 [0063.890] CloseHandle (hObject=0x178) returned 1 [0063.890] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Accessories\\Windows PowerShell\\Windows PowerShell ISE.lnk", nBufferLength=0x105, lpBuffer=0x31e14c, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Accessories\\Windows PowerShell\\Windows PowerShell ISE.lnk", lpFilePart=0x0) returned 0x6e [0063.890] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Accessories\\Windows PowerShell\\Windows PowerShell ISE.lnk", nBufferLength=0x105, lpBuffer=0x31e14c, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Accessories\\Windows PowerShell\\Windows PowerShell ISE.lnk", lpFilePart=0x0) returned 0x6e [0063.890] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e5ac) returned 1 [0063.890] GetFileAttributesExW (in: lpFileName="C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Accessories\\Windows PowerShell\\Windows PowerShell ISE.lnk" (normalized: "c:\\programdata\\microsoft\\windows\\start menu\\programs\\accessories\\windows powershell\\windows powershell ise.lnk"), fInfoLevelId=0x0, lpFileInformation=0x31e628 | out: lpFileInformation=0x31e628*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8d750717, ftCreationTime.dwHighDateTime=0x1ca043f, ftLastAccessTime.dwLowDateTime=0x8d750717, ftLastAccessTime.dwHighDateTime=0x1ca043f, ftLastWriteTime.dwLowDateTime=0x9864240, ftLastWriteTime.dwHighDateTime=0x1d6eb7f, nFileSizeHigh=0x0, nFileSizeLow=0x5c0)) returned 1 [0063.890] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e5a8) returned 1 [0063.890] MoveFileW (lpExistingFileName="C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Accessories\\Windows PowerShell\\Windows PowerShell ISE.lnk" (normalized: "c:\\programdata\\microsoft\\windows\\start menu\\programs\\accessories\\windows powershell\\windows powershell ise.lnk"), lpNewFileName="C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Accessories\\Windows PowerShell\\Windows PowerShell ISE.lnk" (normalized: "c:\\programdata\\microsoft\\windows\\start menu\\programs\\accessories\\windows powershell\\windows powershell ise.lnk")) returned 1 [0063.891] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Accessories\\Windows PowerShell\\Windows PowerShell.lnk", nBufferLength=0x105, lpBuffer=0x31e02c, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Accessories\\Windows PowerShell\\Windows PowerShell.lnk", lpFilePart=0x0) returned 0x6a [0063.891] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e520) returned 1 [0063.891] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Accessories\\Windows PowerShell\\Windows PowerShell.lnk" (normalized: "c:\\programdata\\microsoft\\windows\\start menu\\programs\\accessories\\windows powershell\\windows powershell.lnk"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x178 [0063.891] GetFileType (hFile=0x178) returned 0x1 [0063.891] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e51c) returned 1 [0063.892] GetFileType (hFile=0x178) returned 0x1 [0063.892] GetFileSize (in: hFile=0x178, lpFileSizeHigh=0x31e628 | out: lpFileSizeHigh=0x31e628*=0x0) returned 0x76b [0063.892] ReadFile (in: hFile=0x178, lpBuffer=0x26d5100, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x31e5d4, lpOverlapped=0x0 | out: lpBuffer=0x26d5100*, lpNumberOfBytesRead=0x31e5d4*=0x76b, lpOverlapped=0x0) returned 1 [0063.893] CloseHandle (hObject=0x178) returned 1 [0063.907] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Accessories\\Windows PowerShell\\Windows PowerShell.lnk", nBufferLength=0x105, lpBuffer=0x31e018, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Accessories\\Windows PowerShell\\Windows PowerShell.lnk", lpFilePart=0x0) returned 0x6a [0063.907] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e50c) returned 1 [0063.907] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Accessories\\Windows PowerShell\\Windows PowerShell.lnk" (normalized: "c:\\programdata\\microsoft\\windows\\start menu\\programs\\accessories\\windows powershell\\windows powershell.lnk"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x178 [0063.908] GetFileType (hFile=0x178) returned 0x1 [0063.908] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e508) returned 1 [0063.908] GetFileType (hFile=0x178) returned 0x1 [0063.908] WriteFile (in: hFile=0x178, lpBuffer=0x27255a4*, nNumberOfBytesToWrite=0x770, lpNumberOfBytesWritten=0x31e59c, lpOverlapped=0x0 | out: lpBuffer=0x27255a4*, lpNumberOfBytesWritten=0x31e59c*=0x770, lpOverlapped=0x0) returned 1 [0063.909] CloseHandle (hObject=0x178) returned 1 [0063.909] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Accessories\\Windows PowerShell\\Windows PowerShell.lnk", nBufferLength=0x105, lpBuffer=0x31e14c, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Accessories\\Windows PowerShell\\Windows PowerShell.lnk", lpFilePart=0x0) returned 0x6a [0063.909] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Accessories\\Windows PowerShell\\Windows PowerShell.lnk", nBufferLength=0x105, lpBuffer=0x31e14c, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Accessories\\Windows PowerShell\\Windows PowerShell.lnk", lpFilePart=0x0) returned 0x6a [0063.909] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e5ac) returned 1 [0063.909] GetFileAttributesExW (in: lpFileName="C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Accessories\\Windows PowerShell\\Windows PowerShell.lnk" (normalized: "c:\\programdata\\microsoft\\windows\\start menu\\programs\\accessories\\windows powershell\\windows powershell.lnk"), fInfoLevelId=0x0, lpFileInformation=0x31e628 | out: lpFileInformation=0x31e628*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8038cbd7, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x7bef7178, ftLastAccessTime.dwHighDateTime=0x1ca0444, ftLastWriteTime.dwLowDateTime=0x988a3a0, ftLastWriteTime.dwHighDateTime=0x1d6eb7f, nFileSizeHigh=0x0, nFileSizeLow=0x770)) returned 1 [0063.909] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e5a8) returned 1 [0063.909] MoveFileW (lpExistingFileName="C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Accessories\\Windows PowerShell\\Windows PowerShell.lnk" (normalized: "c:\\programdata\\microsoft\\windows\\start menu\\programs\\accessories\\windows powershell\\windows powershell.lnk"), lpNewFileName="C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Accessories\\Windows PowerShell\\Windows PowerShell.lnk" (normalized: "c:\\programdata\\microsoft\\windows\\start menu\\programs\\accessories\\windows powershell\\windows powershell.lnk")) returned 1 [0063.910] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e6cc) returned 1 [0063.910] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Administrative Tools", nBufferLength=0x105, lpBuffer=0x31e1d4, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Administrative Tools", lpFilePart=0x0) returned 0x49 [0063.910] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Administrative Tools\\", nBufferLength=0x105, lpBuffer=0x31e1a8, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Administrative Tools\\", lpFilePart=0x0) returned 0x4a [0063.910] FindFirstFileW (in: lpFileName="C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Administrative Tools\\*", lpFindFileData=0x31e3f4 | out: lpFindFileData=0x31e3f4*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x7fffaad0, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x81c3cfe0, ftLastAccessTime.dwHighDateTime=0x1d2de2a, ftLastWriteTime.dwLowDateTime=0x81c3cfe0, ftLastWriteTime.dwHighDateTime=0x1d2de2a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5107a60 [0063.910] FindNextFileW (in: hFindFile=0x5107a60, lpFindFileData=0x31e404 | out: lpFindFileData=0x31e404*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x7fffaad0, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x81c3cfe0, ftLastAccessTime.dwHighDateTime=0x1d2de2a, ftLastWriteTime.dwLowDateTime=0x81c3cfe0, ftLastWriteTime.dwHighDateTime=0x1d2de2a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0063.910] FindNextFileW (in: hFindFile=0x5107a60, lpFindFileData=0x31e404 | out: lpFindFileData=0x31e404*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x898d4524, ftCreationTime.dwHighDateTime=0x1ca043f, ftLastAccessTime.dwLowDateTime=0x898d4524, ftLastAccessTime.dwHighDateTime=0x1ca043f, ftLastWriteTime.dwLowDateTime=0x8d692035, ftLastWriteTime.dwHighDateTime=0x1ca043f, nFileSizeHigh=0x0, nFileSizeLow=0x4da, dwReserved0=0x0, dwReserved1=0x0, cFileName="Component Services.lnk", cAlternateFileName="COMPON~1.LNK")) returned 1 [0063.910] FindNextFileW (in: hFindFile=0x5107a60, lpFindFileData=0x31e404 | out: lpFindFileData=0x31e404*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x26ea3fc9, ftCreationTime.dwHighDateTime=0x1ca043f, ftLastAccessTime.dwLowDateTime=0x26ea3fc9, ftLastAccessTime.dwHighDateTime=0x1ca043f, ftLastWriteTime.dwLowDateTime=0x26f163ea, ftLastWriteTime.dwHighDateTime=0x1ca043f, nFileSizeHigh=0x0, nFileSizeLow=0x50e, dwReserved0=0x0, dwReserved1=0x0, cFileName="Computer Management.lnk", cAlternateFileName="COMPUT~1.LNK")) returned 1 [0063.911] FindNextFileW (in: hFindFile=0x5107a60, lpFindFileData=0x31e404 | out: lpFindFileData=0x31e404*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x15444c01, ftCreationTime.dwHighDateTime=0x1ca043f, ftLastAccessTime.dwLowDateTime=0x15444c01, ftLastAccessTime.dwHighDateTime=0x1ca043f, ftLastWriteTime.dwLowDateTime=0x154b7022, ftLastWriteTime.dwHighDateTime=0x1ca043f, nFileSizeHigh=0x0, nFileSizeLow=0x4f6, dwReserved0=0x0, dwReserved1=0x0, cFileName="Data Sources (ODBC).lnk", cAlternateFileName="DATASO~1.LNK")) returned 1 [0063.911] FindNextFileW (in: hFindFile=0x5107a60, lpFindFileData=0x31e404 | out: lpFindFileData=0x31e404*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0xa3aca9c, ftCreationTime.dwHighDateTime=0x1ca043f, ftLastAccessTime.dwLowDateTime=0xa3aca9c, ftLastAccessTime.dwHighDateTime=0x1ca043f, ftLastWriteTime.dwLowDateTime=0x81c3cfe0, ftLastWriteTime.dwHighDateTime=0x1d2de2a, nFileSizeHigh=0x0, nFileSizeLow=0x7a6, dwReserved0=0x0, dwReserved1=0x0, cFileName="desktop.ini", cAlternateFileName="")) returned 1 [0063.911] FindNextFileW (in: hFindFile=0x5107a60, lpFindFileData=0x31e404 | out: lpFindFileData=0x31e404*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2b8e0e72, ftCreationTime.dwHighDateTime=0x1ca043f, ftLastAccessTime.dwLowDateTime=0x2b8e0e72, ftLastAccessTime.dwHighDateTime=0x1ca043f, ftLastWriteTime.dwLowDateTime=0x2b8e0e72, ftLastWriteTime.dwHighDateTime=0x1ca043f, nFileSizeHigh=0x0, nFileSizeLow=0x512, dwReserved0=0x0, dwReserved1=0x0, cFileName="Event Viewer.lnk", cAlternateFileName="EVENTV~1.LNK")) returned 1 [0063.911] FindNextFileW (in: hFindFile=0x5107a60, lpFindFileData=0x31e404 | out: lpFindFileData=0x31e404*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2725c230, ftCreationTime.dwHighDateTime=0x1ca043f, ftLastAccessTime.dwLowDateTime=0x2725c230, ftLastAccessTime.dwHighDateTime=0x1ca043f, ftLastWriteTime.dwLowDateTime=0x272a84f0, ftLastWriteTime.dwHighDateTime=0x1ca043f, nFileSizeHigh=0x0, nFileSizeLow=0x4fa, dwReserved0=0x0, dwReserved1=0x0, cFileName="iSCSI Initiator.lnk", cAlternateFileName="ISCSII~1.LNK")) returned 1 [0063.911] FindNextFileW (in: hFindFile=0x5107a60, lpFindFileData=0x31e404 | out: lpFindFileData=0x31e404*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa38693b, ftCreationTime.dwHighDateTime=0x1ca043f, ftLastAccessTime.dwLowDateTime=0xa38693b, ftLastAccessTime.dwHighDateTime=0x1ca043f, ftLastWriteTime.dwLowDateTime=0xa3aca9c, ftLastWriteTime.dwHighDateTime=0x1ca043f, nFileSizeHigh=0x0, nFileSizeLow=0x4f4, dwReserved0=0x0, dwReserved1=0x0, cFileName="Memory Diagnostics Tool.lnk", cAlternateFileName="MEMORY~1.LNK")) returned 1 [0063.911] FindNextFileW (in: hFindFile=0x5107a60, lpFindFileData=0x31e404 | out: lpFindFileData=0x31e404*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x14139bde, ftCreationTime.dwHighDateTime=0x1ca043f, ftLastAccessTime.dwLowDateTime=0x14139bde, ftLastAccessTime.dwHighDateTime=0x1ca043f, ftLastWriteTime.dwLowDateTime=0x14328dc1, ftLastWriteTime.dwHighDateTime=0x1ca043f, nFileSizeHigh=0x0, nFileSizeLow=0x4d0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Performance Monitor.lnk", cAlternateFileName="PERFOR~1.LNK")) returned 1 [0063.911] FindNextFileW (in: hFindFile=0x5107a60, lpFindFileData=0x31e404 | out: lpFindFileData=0x31e404*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x806d09e0, ftCreationTime.dwHighDateTime=0x1d2de2a, ftLastAccessTime.dwLowDateTime=0x806d09e0, ftLastAccessTime.dwHighDateTime=0x1d2de2a, ftLastWriteTime.dwLowDateTime=0x8071cca0, ftLastWriteTime.dwHighDateTime=0x1d2de2a, nFileSizeHigh=0x0, nFileSizeLow=0x4ee, dwReserved0=0x0, dwReserved1=0x0, cFileName="Print Management.lnk", cAlternateFileName="PRINTM~1.LNK")) returned 1 [0063.912] FindNextFileW (in: hFindFile=0x5107a60, lpFindFileData=0x31e404 | out: lpFindFileData=0x31e404*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x81c3cfe0, ftCreationTime.dwHighDateTime=0x1d2de2a, ftLastAccessTime.dwLowDateTime=0x81c3cfe0, ftLastAccessTime.dwHighDateTime=0x1d2de2a, ftLastWriteTime.dwLowDateTime=0x81c3cfe0, ftLastWriteTime.dwHighDateTime=0x1d2de2a, nFileSizeHigh=0x0, nFileSizeLow=0x4e0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Security Configuration Management.lnk", cAlternateFileName="SECURI~1.LNK")) returned 1 [0063.912] FindNextFileW (in: hFindFile=0x5107a60, lpFindFileData=0x31e404 | out: lpFindFileData=0x31e404*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1d7306f2, ftCreationTime.dwHighDateTime=0x1ca043f, ftLastAccessTime.dwLowDateTime=0x1d7306f2, ftLastAccessTime.dwHighDateTime=0x1ca043f, ftLastWriteTime.dwLowDateTime=0x1d77c9b3, ftLastWriteTime.dwHighDateTime=0x1ca043f, nFileSizeHigh=0x0, nFileSizeLow=0x508, dwReserved0=0x0, dwReserved1=0x0, cFileName="services.lnk", cAlternateFileName="")) returned 1 [0063.912] FindNextFileW (in: hFindFile=0x5107a60, lpFindFileData=0x31e404 | out: lpFindFileData=0x31e404*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa575b1f, ftCreationTime.dwHighDateTime=0x1ca043f, ftLastAccessTime.dwLowDateTime=0xa575b1f, ftLastAccessTime.dwHighDateTime=0x1ca043f, ftLastWriteTime.dwLowDateTime=0xa575b1f, ftLastWriteTime.dwHighDateTime=0x1ca043f, nFileSizeHigh=0x0, nFileSizeLow=0x4de, dwReserved0=0x0, dwReserved1=0x0, cFileName="System Configuration.lnk", cAlternateFileName="SYSTEM~1.LNK")) returned 1 [0063.912] FindNextFileW (in: hFindFile=0x5107a60, lpFindFileData=0x31e404 | out: lpFindFileData=0x31e404*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2b99f553, ftCreationTime.dwHighDateTime=0x1ca043f, ftLastAccessTime.dwLowDateTime=0x2b99f553, ftLastAccessTime.dwHighDateTime=0x1ca043f, ftLastWriteTime.dwLowDateTime=0x2b99f553, ftLastWriteTime.dwHighDateTime=0x1ca043f, nFileSizeHigh=0x0, nFileSizeLow=0x4ee, dwReserved0=0x0, dwReserved1=0x0, cFileName="Task Scheduler.lnk", cAlternateFileName="TASKSC~1.LNK")) returned 1 [0063.912] FindNextFileW (in: hFindFile=0x5107a60, lpFindFileData=0x31e404 | out: lpFindFileData=0x31e404*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x191902f2, ftCreationTime.dwHighDateTime=0x1ca043f, ftLastAccessTime.dwLowDateTime=0x191902f2, ftLastAccessTime.dwHighDateTime=0x1ca043f, ftLastWriteTime.dwLowDateTime=0x1937f4d5, ftLastWriteTime.dwHighDateTime=0x1ca043f, nFileSizeHigh=0x0, nFileSizeLow=0x4fa, dwReserved0=0x0, dwReserved1=0x0, cFileName="Windows Firewall with Advanced Security.lnk", cAlternateFileName="WINDOW~2.LNK")) returned 1 [0063.912] FindNextFileW (in: hFindFile=0x5107a60, lpFindFileData=0x31e404 | out: lpFindFileData=0x31e404*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8038cbd7, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x7bed1018, ftLastAccessTime.dwHighDateTime=0x1ca0444, ftLastWriteTime.dwLowDateTime=0x7bed1018, ftLastWriteTime.dwHighDateTime=0x1ca0444, nFileSizeHigh=0x0, nFileSizeLow=0xab5, dwReserved0=0x0, dwReserved1=0x0, cFileName="Windows PowerShell Modules.lnk", cAlternateFileName="WINDOW~1.LNK")) returned 1 [0063.912] FindNextFileW (in: hFindFile=0x5107a60, lpFindFileData=0x31e404 | out: lpFindFileData=0x31e404*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0063.912] FindClose (in: hFindFile=0x5107a60 | out: hFindFile=0x5107a60) returned 1 [0063.912] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e68c) returned 1 [0063.913] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e698) returned 1 [0063.913] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e6cc) returned 1 [0063.913] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Administrative Tools", nBufferLength=0x105, lpBuffer=0x31e1d4, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Administrative Tools", lpFilePart=0x0) returned 0x49 [0063.913] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Administrative Tools\\", nBufferLength=0x105, lpBuffer=0x31e1a8, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Administrative Tools\\", lpFilePart=0x0) returned 0x4a [0063.913] FindFirstFileW (in: lpFileName="C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Administrative Tools\\*", lpFindFileData=0x31e3f4 | out: lpFindFileData=0x31e3f4*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x7fffaad0, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x81c3cfe0, ftLastAccessTime.dwHighDateTime=0x1d2de2a, ftLastWriteTime.dwLowDateTime=0x81c3cfe0, ftLastWriteTime.dwHighDateTime=0x1d2de2a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5107a60 [0063.913] FindNextFileW (in: hFindFile=0x5107a60, lpFindFileData=0x31e404 | out: lpFindFileData=0x31e404*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x7fffaad0, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x81c3cfe0, ftLastAccessTime.dwHighDateTime=0x1d2de2a, ftLastWriteTime.dwLowDateTime=0x81c3cfe0, ftLastWriteTime.dwHighDateTime=0x1d2de2a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0063.913] FindNextFileW (in: hFindFile=0x5107a60, lpFindFileData=0x31e404 | out: lpFindFileData=0x31e404*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x898d4524, ftCreationTime.dwHighDateTime=0x1ca043f, ftLastAccessTime.dwLowDateTime=0x898d4524, ftLastAccessTime.dwHighDateTime=0x1ca043f, ftLastWriteTime.dwLowDateTime=0x8d692035, ftLastWriteTime.dwHighDateTime=0x1ca043f, nFileSizeHigh=0x0, nFileSizeLow=0x4da, dwReserved0=0x0, dwReserved1=0x0, cFileName="Component Services.lnk", cAlternateFileName="COMPON~1.LNK")) returned 1 [0063.913] FindNextFileW (in: hFindFile=0x5107a60, lpFindFileData=0x31e404 | out: lpFindFileData=0x31e404*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x26ea3fc9, ftCreationTime.dwHighDateTime=0x1ca043f, ftLastAccessTime.dwLowDateTime=0x26ea3fc9, ftLastAccessTime.dwHighDateTime=0x1ca043f, ftLastWriteTime.dwLowDateTime=0x26f163ea, ftLastWriteTime.dwHighDateTime=0x1ca043f, nFileSizeHigh=0x0, nFileSizeLow=0x50e, dwReserved0=0x0, dwReserved1=0x0, cFileName="Computer Management.lnk", cAlternateFileName="COMPUT~1.LNK")) returned 1 [0063.913] FindNextFileW (in: hFindFile=0x5107a60, lpFindFileData=0x31e404 | out: lpFindFileData=0x31e404*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x15444c01, ftCreationTime.dwHighDateTime=0x1ca043f, ftLastAccessTime.dwLowDateTime=0x15444c01, ftLastAccessTime.dwHighDateTime=0x1ca043f, ftLastWriteTime.dwLowDateTime=0x154b7022, ftLastWriteTime.dwHighDateTime=0x1ca043f, nFileSizeHigh=0x0, nFileSizeLow=0x4f6, dwReserved0=0x0, dwReserved1=0x0, cFileName="Data Sources (ODBC).lnk", cAlternateFileName="DATASO~1.LNK")) returned 1 [0063.914] FindNextFileW (in: hFindFile=0x5107a60, lpFindFileData=0x31e404 | out: lpFindFileData=0x31e404*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0xa3aca9c, ftCreationTime.dwHighDateTime=0x1ca043f, ftLastAccessTime.dwLowDateTime=0xa3aca9c, ftLastAccessTime.dwHighDateTime=0x1ca043f, ftLastWriteTime.dwLowDateTime=0x81c3cfe0, ftLastWriteTime.dwHighDateTime=0x1d2de2a, nFileSizeHigh=0x0, nFileSizeLow=0x7a6, dwReserved0=0x0, dwReserved1=0x0, cFileName="desktop.ini", cAlternateFileName="")) returned 1 [0063.914] FindNextFileW (in: hFindFile=0x5107a60, lpFindFileData=0x31e404 | out: lpFindFileData=0x31e404*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2b8e0e72, ftCreationTime.dwHighDateTime=0x1ca043f, ftLastAccessTime.dwLowDateTime=0x2b8e0e72, ftLastAccessTime.dwHighDateTime=0x1ca043f, ftLastWriteTime.dwLowDateTime=0x2b8e0e72, ftLastWriteTime.dwHighDateTime=0x1ca043f, nFileSizeHigh=0x0, nFileSizeLow=0x512, dwReserved0=0x0, dwReserved1=0x0, cFileName="Event Viewer.lnk", cAlternateFileName="EVENTV~1.LNK")) returned 1 [0063.914] FindNextFileW (in: hFindFile=0x5107a60, lpFindFileData=0x31e404 | out: lpFindFileData=0x31e404*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2725c230, ftCreationTime.dwHighDateTime=0x1ca043f, ftLastAccessTime.dwLowDateTime=0x2725c230, ftLastAccessTime.dwHighDateTime=0x1ca043f, ftLastWriteTime.dwLowDateTime=0x272a84f0, ftLastWriteTime.dwHighDateTime=0x1ca043f, nFileSizeHigh=0x0, nFileSizeLow=0x4fa, dwReserved0=0x0, dwReserved1=0x0, cFileName="iSCSI Initiator.lnk", cAlternateFileName="ISCSII~1.LNK")) returned 1 [0063.914] FindNextFileW (in: hFindFile=0x5107a60, lpFindFileData=0x31e404 | out: lpFindFileData=0x31e404*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa38693b, ftCreationTime.dwHighDateTime=0x1ca043f, ftLastAccessTime.dwLowDateTime=0xa38693b, ftLastAccessTime.dwHighDateTime=0x1ca043f, ftLastWriteTime.dwLowDateTime=0xa3aca9c, ftLastWriteTime.dwHighDateTime=0x1ca043f, nFileSizeHigh=0x0, nFileSizeLow=0x4f4, dwReserved0=0x0, dwReserved1=0x0, cFileName="Memory Diagnostics Tool.lnk", cAlternateFileName="MEMORY~1.LNK")) returned 1 [0063.914] FindNextFileW (in: hFindFile=0x5107a60, lpFindFileData=0x31e404 | out: lpFindFileData=0x31e404*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x14139bde, ftCreationTime.dwHighDateTime=0x1ca043f, ftLastAccessTime.dwLowDateTime=0x14139bde, ftLastAccessTime.dwHighDateTime=0x1ca043f, ftLastWriteTime.dwLowDateTime=0x14328dc1, ftLastWriteTime.dwHighDateTime=0x1ca043f, nFileSizeHigh=0x0, nFileSizeLow=0x4d0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Performance Monitor.lnk", cAlternateFileName="PERFOR~1.LNK")) returned 1 [0063.914] FindNextFileW (in: hFindFile=0x5107a60, lpFindFileData=0x31e404 | out: lpFindFileData=0x31e404*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x806d09e0, ftCreationTime.dwHighDateTime=0x1d2de2a, ftLastAccessTime.dwLowDateTime=0x806d09e0, ftLastAccessTime.dwHighDateTime=0x1d2de2a, ftLastWriteTime.dwLowDateTime=0x8071cca0, ftLastWriteTime.dwHighDateTime=0x1d2de2a, nFileSizeHigh=0x0, nFileSizeLow=0x4ee, dwReserved0=0x0, dwReserved1=0x0, cFileName="Print Management.lnk", cAlternateFileName="PRINTM~1.LNK")) returned 1 [0063.915] FindNextFileW (in: hFindFile=0x5107a60, lpFindFileData=0x31e404 | out: lpFindFileData=0x31e404*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x81c3cfe0, ftCreationTime.dwHighDateTime=0x1d2de2a, ftLastAccessTime.dwLowDateTime=0x81c3cfe0, ftLastAccessTime.dwHighDateTime=0x1d2de2a, ftLastWriteTime.dwLowDateTime=0x81c3cfe0, ftLastWriteTime.dwHighDateTime=0x1d2de2a, nFileSizeHigh=0x0, nFileSizeLow=0x4e0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Security Configuration Management.lnk", cAlternateFileName="SECURI~1.LNK")) returned 1 [0063.915] FindNextFileW (in: hFindFile=0x5107a60, lpFindFileData=0x31e404 | out: lpFindFileData=0x31e404*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1d7306f2, ftCreationTime.dwHighDateTime=0x1ca043f, ftLastAccessTime.dwLowDateTime=0x1d7306f2, ftLastAccessTime.dwHighDateTime=0x1ca043f, ftLastWriteTime.dwLowDateTime=0x1d77c9b3, ftLastWriteTime.dwHighDateTime=0x1ca043f, nFileSizeHigh=0x0, nFileSizeLow=0x508, dwReserved0=0x0, dwReserved1=0x0, cFileName="services.lnk", cAlternateFileName="")) returned 1 [0063.915] FindNextFileW (in: hFindFile=0x5107a60, lpFindFileData=0x31e404 | out: lpFindFileData=0x31e404*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa575b1f, ftCreationTime.dwHighDateTime=0x1ca043f, ftLastAccessTime.dwLowDateTime=0xa575b1f, ftLastAccessTime.dwHighDateTime=0x1ca043f, ftLastWriteTime.dwLowDateTime=0xa575b1f, ftLastWriteTime.dwHighDateTime=0x1ca043f, nFileSizeHigh=0x0, nFileSizeLow=0x4de, dwReserved0=0x0, dwReserved1=0x0, cFileName="System Configuration.lnk", cAlternateFileName="SYSTEM~1.LNK")) returned 1 [0063.915] FindNextFileW (in: hFindFile=0x5107a60, lpFindFileData=0x31e404 | out: lpFindFileData=0x31e404*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2b99f553, ftCreationTime.dwHighDateTime=0x1ca043f, ftLastAccessTime.dwLowDateTime=0x2b99f553, ftLastAccessTime.dwHighDateTime=0x1ca043f, ftLastWriteTime.dwLowDateTime=0x2b99f553, ftLastWriteTime.dwHighDateTime=0x1ca043f, nFileSizeHigh=0x0, nFileSizeLow=0x4ee, dwReserved0=0x0, dwReserved1=0x0, cFileName="Task Scheduler.lnk", cAlternateFileName="TASKSC~1.LNK")) returned 1 [0063.915] FindNextFileW (in: hFindFile=0x5107a60, lpFindFileData=0x31e404 | out: lpFindFileData=0x31e404*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x191902f2, ftCreationTime.dwHighDateTime=0x1ca043f, ftLastAccessTime.dwLowDateTime=0x191902f2, ftLastAccessTime.dwHighDateTime=0x1ca043f, ftLastWriteTime.dwLowDateTime=0x1937f4d5, ftLastWriteTime.dwHighDateTime=0x1ca043f, nFileSizeHigh=0x0, nFileSizeLow=0x4fa, dwReserved0=0x0, dwReserved1=0x0, cFileName="Windows Firewall with Advanced Security.lnk", cAlternateFileName="WINDOW~2.LNK")) returned 1 [0063.915] FindNextFileW (in: hFindFile=0x5107a60, lpFindFileData=0x31e404 | out: lpFindFileData=0x31e404*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8038cbd7, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x7bed1018, ftLastAccessTime.dwHighDateTime=0x1ca0444, ftLastWriteTime.dwLowDateTime=0x7bed1018, ftLastWriteTime.dwHighDateTime=0x1ca0444, nFileSizeHigh=0x0, nFileSizeLow=0xab5, dwReserved0=0x0, dwReserved1=0x0, cFileName="Windows PowerShell Modules.lnk", cAlternateFileName="WINDOW~1.LNK")) returned 1 [0063.916] FindNextFileW (in: hFindFile=0x5107a60, lpFindFileData=0x31e404 | out: lpFindFileData=0x31e404*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8038cbd7, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x7bed1018, ftLastAccessTime.dwHighDateTime=0x1ca0444, ftLastWriteTime.dwLowDateTime=0x7bed1018, ftLastWriteTime.dwHighDateTime=0x1ca0444, nFileSizeHigh=0x0, nFileSizeLow=0xab5, dwReserved0=0x0, dwReserved1=0x0, cFileName="Windows PowerShell Modules.lnk", cAlternateFileName="WINDOW~1.LNK")) returned 0 [0063.916] FindClose (in: hFindFile=0x5107a60 | out: hFindFile=0x5107a60) returned 1 [0063.916] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e68c) returned 1 [0063.916] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e698) returned 1 [0063.916] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Administrative Tools\\Component Services.lnk", nBufferLength=0x105, lpBuffer=0x31e0a4, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Administrative Tools\\Component Services.lnk", lpFilePart=0x0) returned 0x60 [0063.916] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e598) returned 1 [0063.916] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Administrative Tools\\Component Services.lnk" (normalized: "c:\\programdata\\microsoft\\windows\\start menu\\programs\\administrative tools\\component services.lnk"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x178 [0063.916] GetFileType (hFile=0x178) returned 0x1 [0063.916] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e594) returned 1 [0063.916] GetFileType (hFile=0x178) returned 0x1 [0063.916] GetFileSize (in: hFile=0x178, lpFileSizeHigh=0x31e6a0 | out: lpFileSizeHigh=0x31e6a0*=0x0) returned 0x4da [0063.917] ReadFile (in: hFile=0x178, lpBuffer=0x272c7a0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x31e64c, lpOverlapped=0x0 | out: lpBuffer=0x272c7a0*, lpNumberOfBytesRead=0x31e64c*=0x4da, lpOverlapped=0x0) returned 1 [0063.918] CloseHandle (hObject=0x178) returned 1 [0063.932] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Administrative Tools\\Component Services.lnk", nBufferLength=0x105, lpBuffer=0x31e090, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Administrative Tools\\Component Services.lnk", lpFilePart=0x0) returned 0x60 [0063.932] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e584) returned 1 [0063.932] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Administrative Tools\\Component Services.lnk" (normalized: "c:\\programdata\\microsoft\\windows\\start menu\\programs\\administrative tools\\component services.lnk"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x178 [0063.933] GetFileType (hFile=0x178) returned 0x1 [0063.933] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e580) returned 1 [0063.933] GetFileType (hFile=0x178) returned 0x1 [0063.933] WriteFile (in: hFile=0x178, lpBuffer=0x277bf60*, nNumberOfBytesToWrite=0x4e0, lpNumberOfBytesWritten=0x31e614, lpOverlapped=0x0 | out: lpBuffer=0x277bf60*, lpNumberOfBytesWritten=0x31e614*=0x4e0, lpOverlapped=0x0) returned 1 [0063.934] CloseHandle (hObject=0x178) returned 1 [0063.934] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Administrative Tools\\Component Services.lnk", nBufferLength=0x105, lpBuffer=0x31e1c4, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Administrative Tools\\Component Services.lnk", lpFilePart=0x0) returned 0x60 [0063.934] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Administrative Tools\\Component Services.lnk", nBufferLength=0x105, lpBuffer=0x31e1c4, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Administrative Tools\\Component Services.lnk", lpFilePart=0x0) returned 0x60 [0063.934] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e624) returned 1 [0063.934] GetFileAttributesExW (in: lpFileName="C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Administrative Tools\\Component Services.lnk" (normalized: "c:\\programdata\\microsoft\\windows\\start menu\\programs\\administrative tools\\component services.lnk"), fInfoLevelId=0x0, lpFileInformation=0x31e6a0 | out: lpFileInformation=0x31e6a0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x898d4524, ftCreationTime.dwHighDateTime=0x1ca043f, ftLastAccessTime.dwLowDateTime=0x898d4524, ftLastAccessTime.dwHighDateTime=0x1ca043f, ftLastWriteTime.dwLowDateTime=0x98d6660, ftLastWriteTime.dwHighDateTime=0x1d6eb7f, nFileSizeHigh=0x0, nFileSizeLow=0x4e0)) returned 1 [0063.934] MoveFileW (lpExistingFileName="C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Administrative Tools\\Component Services.lnk" (normalized: "c:\\programdata\\microsoft\\windows\\start menu\\programs\\administrative tools\\component services.lnk"), lpNewFileName="C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Administrative Tools\\Component Services.lnk" (normalized: "c:\\programdata\\microsoft\\windows\\start menu\\programs\\administrative tools\\component services.lnk")) returned 1 [0063.935] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Administrative Tools\\Computer Management.lnk", nBufferLength=0x105, lpBuffer=0x31e0a4, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Administrative Tools\\Computer Management.lnk", lpFilePart=0x0) returned 0x61 [0063.935] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Administrative Tools\\Computer Management.lnk" (normalized: "c:\\programdata\\microsoft\\windows\\start menu\\programs\\administrative tools\\computer management.lnk"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x178 [0063.935] GetFileType (hFile=0x178) returned 0x1 [0063.935] GetFileType (hFile=0x178) returned 0x1 [0063.935] GetFileSize (in: hFile=0x178, lpFileSizeHigh=0x31e6a0 | out: lpFileSizeHigh=0x31e6a0*=0x0) returned 0x50e [0063.936] ReadFile (in: hFile=0x178, lpBuffer=0x277d7a8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x31e64c, lpOverlapped=0x0 | out: lpBuffer=0x277d7a8*, lpNumberOfBytesRead=0x31e64c*=0x50e, lpOverlapped=0x0) returned 1 [0063.937] CloseHandle (hObject=0x178) returned 1 [0063.950] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Administrative Tools\\Computer Management.lnk", nBufferLength=0x105, lpBuffer=0x31e090, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Administrative Tools\\Computer Management.lnk", lpFilePart=0x0) returned 0x61 [0063.950] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Administrative Tools\\Computer Management.lnk" (normalized: "c:\\programdata\\microsoft\\windows\\start menu\\programs\\administrative tools\\computer management.lnk"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x178 [0063.951] GetFileType (hFile=0x178) returned 0x1 [0063.951] GetFileType (hFile=0x178) returned 0x1 [0063.951] WriteFile (in: hFile=0x178, lpBuffer=0x27cd054*, nNumberOfBytesToWrite=0x510, lpNumberOfBytesWritten=0x31e614, lpOverlapped=0x0 | out: lpBuffer=0x27cd054*, lpNumberOfBytesWritten=0x31e614*=0x510, lpOverlapped=0x0) returned 1 [0063.952] CloseHandle (hObject=0x178) returned 1 [0063.952] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Administrative Tools\\Computer Management.lnk", nBufferLength=0x105, lpBuffer=0x31e1c4, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Administrative Tools\\Computer Management.lnk", lpFilePart=0x0) returned 0x61 [0063.952] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Administrative Tools\\Computer Management.lnk", nBufferLength=0x105, lpBuffer=0x31e1c4, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Administrative Tools\\Computer Management.lnk", lpFilePart=0x0) returned 0x61 [0063.952] GetFileAttributesExW (in: lpFileName="C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Administrative Tools\\Computer Management.lnk" (normalized: "c:\\programdata\\microsoft\\windows\\start menu\\programs\\administrative tools\\computer management.lnk"), fInfoLevelId=0x0, lpFileInformation=0x31e6a0 | out: lpFileInformation=0x31e6a0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x26ea3fc9, ftCreationTime.dwHighDateTime=0x1ca043f, ftLastAccessTime.dwLowDateTime=0x26ea3fc9, ftLastAccessTime.dwHighDateTime=0x1ca043f, ftLastWriteTime.dwLowDateTime=0x98fc7c0, ftLastWriteTime.dwHighDateTime=0x1d6eb7f, nFileSizeHigh=0x0, nFileSizeLow=0x510)) returned 1 [0063.952] MoveFileW (lpExistingFileName="C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Administrative Tools\\Computer Management.lnk" (normalized: "c:\\programdata\\microsoft\\windows\\start menu\\programs\\administrative tools\\computer management.lnk"), lpNewFileName="C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Administrative Tools\\Computer Management.lnk" (normalized: "c:\\programdata\\microsoft\\windows\\start menu\\programs\\administrative tools\\computer management.lnk")) returned 1 [0063.953] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Administrative Tools\\Data Sources (ODBC).lnk", nBufferLength=0x105, lpBuffer=0x31e0a4, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Administrative Tools\\Data Sources (ODBC).lnk", lpFilePart=0x0) returned 0x61 [0063.953] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Administrative Tools\\Data Sources (ODBC).lnk" (normalized: "c:\\programdata\\microsoft\\windows\\start menu\\programs\\administrative tools\\data sources (odbc).lnk"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x178 [0063.953] GetFileType (hFile=0x178) returned 0x1 [0063.953] GetFileType (hFile=0x178) returned 0x1 [0063.954] GetFileSize (in: hFile=0x178, lpFileSizeHigh=0x31e6a0 | out: lpFileSizeHigh=0x31e6a0*=0x0) returned 0x4f6 [0063.954] ReadFile (in: hFile=0x178, lpBuffer=0x27ce884, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x31e64c, lpOverlapped=0x0 | out: lpBuffer=0x27ce884*, lpNumberOfBytesRead=0x31e64c*=0x4f6, lpOverlapped=0x0) returned 1 [0063.955] CloseHandle (hObject=0x178) returned 1 [0063.968] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Administrative Tools\\Data Sources (ODBC).lnk", nBufferLength=0x105, lpBuffer=0x31e090, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Administrative Tools\\Data Sources (ODBC).lnk", lpFilePart=0x0) returned 0x61 [0063.968] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Administrative Tools\\Data Sources (ODBC).lnk" (normalized: "c:\\programdata\\microsoft\\windows\\start menu\\programs\\administrative tools\\data sources (odbc).lnk"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x178 [0063.969] GetFileType (hFile=0x178) returned 0x1 [0063.969] GetFileType (hFile=0x178) returned 0x1 [0063.969] WriteFile (in: hFile=0x178, lpBuffer=0x281e0e8*, nNumberOfBytesToWrite=0x500, lpNumberOfBytesWritten=0x31e614, lpOverlapped=0x0 | out: lpBuffer=0x281e0e8*, lpNumberOfBytesWritten=0x31e614*=0x500, lpOverlapped=0x0) returned 1 [0063.970] CloseHandle (hObject=0x178) returned 1 [0063.970] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Administrative Tools\\Data Sources (ODBC).lnk", nBufferLength=0x105, lpBuffer=0x31e1c4, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Administrative Tools\\Data Sources (ODBC).lnk", lpFilePart=0x0) returned 0x61 [0063.970] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Administrative Tools\\Data Sources (ODBC).lnk", nBufferLength=0x105, lpBuffer=0x31e1c4, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Administrative Tools\\Data Sources (ODBC).lnk", lpFilePart=0x0) returned 0x61 [0063.970] GetFileAttributesExW (in: lpFileName="C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Administrative Tools\\Data Sources (ODBC).lnk" (normalized: "c:\\programdata\\microsoft\\windows\\start menu\\programs\\administrative tools\\data sources (odbc).lnk"), fInfoLevelId=0x0, lpFileInformation=0x31e6a0 | out: lpFileInformation=0x31e6a0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x15444c01, ftCreationTime.dwHighDateTime=0x1ca043f, ftLastAccessTime.dwLowDateTime=0x15444c01, ftLastAccessTime.dwHighDateTime=0x1ca043f, ftLastWriteTime.dwLowDateTime=0x9922920, ftLastWriteTime.dwHighDateTime=0x1d6eb7f, nFileSizeHigh=0x0, nFileSizeLow=0x500)) returned 1 [0063.971] MoveFileW (lpExistingFileName="C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Administrative Tools\\Data Sources (ODBC).lnk" (normalized: "c:\\programdata\\microsoft\\windows\\start menu\\programs\\administrative tools\\data sources (odbc).lnk"), lpNewFileName="C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Administrative Tools\\Data Sources (ODBC).lnk" (normalized: "c:\\programdata\\microsoft\\windows\\start menu\\programs\\administrative tools\\data sources (odbc).lnk")) returned 1 [0063.971] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Administrative Tools\\Event Viewer.lnk", nBufferLength=0x105, lpBuffer=0x31e0a4, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Administrative Tools\\Event Viewer.lnk", lpFilePart=0x0) returned 0x5a [0063.971] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Administrative Tools\\Event Viewer.lnk" (normalized: "c:\\programdata\\microsoft\\windows\\start menu\\programs\\administrative tools\\event viewer.lnk"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x178 [0063.971] GetFileType (hFile=0x178) returned 0x1 [0063.972] GetFileType (hFile=0x178) returned 0x1 [0063.972] GetFileSize (in: hFile=0x178, lpFileSizeHigh=0x31e6a0 | out: lpFileSizeHigh=0x31e6a0*=0x0) returned 0x512 [0063.972] ReadFile (in: hFile=0x178, lpBuffer=0x281f934, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x31e64c, lpOverlapped=0x0 | out: lpBuffer=0x281f934*, lpNumberOfBytesRead=0x31e64c*=0x512, lpOverlapped=0x0) returned 1 [0063.974] CloseHandle (hObject=0x178) returned 1 [0064.016] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Administrative Tools\\Event Viewer.lnk", nBufferLength=0x105, lpBuffer=0x31e090, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Administrative Tools\\Event Viewer.lnk", lpFilePart=0x0) returned 0x5a [0064.016] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e584) returned 1 [0064.016] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Administrative Tools\\Event Viewer.lnk" (normalized: "c:\\programdata\\microsoft\\windows\\start menu\\programs\\administrative tools\\event viewer.lnk"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x178 [0064.017] GetFileType (hFile=0x178) returned 0x1 [0064.017] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e580) returned 1 [0064.017] GetFileType (hFile=0x178) returned 0x1 [0064.020] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Administrative Tools\\Event Viewer.lnk", nBufferLength=0x105, lpBuffer=0x31e1c4, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Administrative Tools\\Event Viewer.lnk", lpFilePart=0x0) returned 0x5a [0064.020] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Administrative Tools\\Event Viewer.lnk", nBufferLength=0x105, lpBuffer=0x31e1c4, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Administrative Tools\\Event Viewer.lnk", lpFilePart=0x0) returned 0x5a [0064.020] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e624) returned 1 [0064.020] GetFileAttributesExW (in: lpFileName="C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Administrative Tools\\Event Viewer.lnk" (normalized: "c:\\programdata\\microsoft\\windows\\start menu\\programs\\administrative tools\\event viewer.lnk"), fInfoLevelId=0x0, lpFileInformation=0x31e6a0 | out: lpFileInformation=0x31e6a0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2b8e0e72, ftCreationTime.dwHighDateTime=0x1ca043f, ftLastAccessTime.dwLowDateTime=0x2b8e0e72, ftLastAccessTime.dwHighDateTime=0x1ca043f, ftLastWriteTime.dwLowDateTime=0x9994d40, ftLastWriteTime.dwHighDateTime=0x1d6eb7f, nFileSizeHigh=0x0, nFileSizeLow=0x520)) returned 1 [0064.020] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e620) returned 1 [0064.020] MoveFileW (lpExistingFileName="C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Administrative Tools\\Event Viewer.lnk" (normalized: "c:\\programdata\\microsoft\\windows\\start menu\\programs\\administrative tools\\event viewer.lnk"), lpNewFileName="C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Administrative Tools\\Event Viewer.lnk" (normalized: "c:\\programdata\\microsoft\\windows\\start menu\\programs\\administrative tools\\event viewer.lnk")) returned 1 [0064.020] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Administrative Tools\\iSCSI Initiator.lnk", nBufferLength=0x105, lpBuffer=0x31e0a4, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Administrative Tools\\iSCSI Initiator.lnk", lpFilePart=0x0) returned 0x5d [0064.020] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e598) returned 1 [0064.021] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Administrative Tools\\iSCSI Initiator.lnk" (normalized: "c:\\programdata\\microsoft\\windows\\start menu\\programs\\administrative tools\\iscsi initiator.lnk"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x178 [0064.022] GetFileType (hFile=0x178) returned 0x1 [0064.022] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e594) returned 1 [0064.022] GetFileType (hFile=0x178) returned 0x1 [0064.022] GetFileSize (in: hFile=0x178, lpFileSizeHigh=0x31e6a0 | out: lpFileSizeHigh=0x31e6a0*=0x0) returned 0x4fa [0064.022] ReadFile (in: hFile=0x178, lpBuffer=0x2672cc0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x31e64c, lpOverlapped=0x0 | out: lpBuffer=0x2672cc0*, lpNumberOfBytesRead=0x31e64c*=0x4fa, lpOverlapped=0x0) returned 1 [0064.023] CloseHandle (hObject=0x178) returned 1 [0064.037] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Administrative Tools\\iSCSI Initiator.lnk", nBufferLength=0x105, lpBuffer=0x31e090, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Administrative Tools\\iSCSI Initiator.lnk", lpFilePart=0x0) returned 0x5d [0064.037] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e584) returned 1 [0064.037] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Administrative Tools\\iSCSI Initiator.lnk" (normalized: "c:\\programdata\\microsoft\\windows\\start menu\\programs\\administrative tools\\iscsi initiator.lnk"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x178 [0064.038] GetFileType (hFile=0x178) returned 0x1 [0064.038] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e580) returned 1 [0064.038] GetFileType (hFile=0x178) returned 0x1 [0064.038] WriteFile (in: hFile=0x178, lpBuffer=0x26c266c*, nNumberOfBytesToWrite=0x500, lpNumberOfBytesWritten=0x31e614, lpOverlapped=0x0 | out: lpBuffer=0x26c266c*, lpNumberOfBytesWritten=0x31e614*=0x500, lpOverlapped=0x0) returned 1 [0064.039] CloseHandle (hObject=0x178) returned 1 [0064.039] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Administrative Tools\\iSCSI Initiator.lnk", nBufferLength=0x105, lpBuffer=0x31e1c4, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Administrative Tools\\iSCSI Initiator.lnk", lpFilePart=0x0) returned 0x5d [0064.039] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Administrative Tools\\iSCSI Initiator.lnk", nBufferLength=0x105, lpBuffer=0x31e1c4, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Administrative Tools\\iSCSI Initiator.lnk", lpFilePart=0x0) returned 0x5d [0064.039] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e624) returned 1 [0064.039] GetFileAttributesExW (in: lpFileName="C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Administrative Tools\\iSCSI Initiator.lnk" (normalized: "c:\\programdata\\microsoft\\windows\\start menu\\programs\\administrative tools\\iscsi initiator.lnk"), fInfoLevelId=0x0, lpFileInformation=0x31e6a0 | out: lpFileInformation=0x31e6a0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2725c230, ftCreationTime.dwHighDateTime=0x1ca043f, ftLastAccessTime.dwLowDateTime=0x2725c230, ftLastAccessTime.dwHighDateTime=0x1ca043f, ftLastWriteTime.dwLowDateTime=0x99e1000, ftLastWriteTime.dwHighDateTime=0x1d6eb7f, nFileSizeHigh=0x0, nFileSizeLow=0x500)) returned 1 [0064.040] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e620) returned 1 [0064.040] MoveFileW (lpExistingFileName="C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Administrative Tools\\iSCSI Initiator.lnk" (normalized: "c:\\programdata\\microsoft\\windows\\start menu\\programs\\administrative tools\\iscsi initiator.lnk"), lpNewFileName="C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Administrative Tools\\iSCSI Initiator.lnk" (normalized: "c:\\programdata\\microsoft\\windows\\start menu\\programs\\administrative tools\\iscsi initiator.lnk")) returned 1 [0064.040] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Administrative Tools\\Memory Diagnostics Tool.lnk", nBufferLength=0x105, lpBuffer=0x31e0a4, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Administrative Tools\\Memory Diagnostics Tool.lnk", lpFilePart=0x0) returned 0x65 [0064.040] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e598) returned 1 [0064.040] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Administrative Tools\\Memory Diagnostics Tool.lnk" (normalized: "c:\\programdata\\microsoft\\windows\\start menu\\programs\\administrative tools\\memory diagnostics tool.lnk"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x178 [0064.041] GetFileType (hFile=0x178) returned 0x1 [0064.041] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e594) returned 1 [0064.041] GetFileType (hFile=0x178) returned 0x1 [0064.041] GetFileSize (in: hFile=0x178, lpFileSizeHigh=0x31e6a0 | out: lpFileSizeHigh=0x31e6a0*=0x0) returned 0x4f4 [0064.041] ReadFile (in: hFile=0x178, lpBuffer=0x26c3e98, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x31e64c, lpOverlapped=0x0 | out: lpBuffer=0x26c3e98*, lpNumberOfBytesRead=0x31e64c*=0x4f4, lpOverlapped=0x0) returned 1 [0064.042] CloseHandle (hObject=0x178) returned 1 [0064.056] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Administrative Tools\\Memory Diagnostics Tool.lnk", nBufferLength=0x105, lpBuffer=0x31e090, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Administrative Tools\\Memory Diagnostics Tool.lnk", lpFilePart=0x0) returned 0x65 [0064.056] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e584) returned 1 [0064.056] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Administrative Tools\\Memory Diagnostics Tool.lnk" (normalized: "c:\\programdata\\microsoft\\windows\\start menu\\programs\\administrative tools\\memory diagnostics tool.lnk"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x178 [0064.057] GetFileType (hFile=0x178) returned 0x1 [0064.057] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e580) returned 1 [0064.057] GetFileType (hFile=0x178) returned 0x1 [0064.057] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Administrative Tools\\Memory Diagnostics Tool.lnk", nBufferLength=0x105, lpBuffer=0x31e1c4, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Administrative Tools\\Memory Diagnostics Tool.lnk", lpFilePart=0x0) returned 0x65 [0064.058] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Administrative Tools\\Memory Diagnostics Tool.lnk", nBufferLength=0x105, lpBuffer=0x31e1c4, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Administrative Tools\\Memory Diagnostics Tool.lnk", lpFilePart=0x0) returned 0x65 [0064.058] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e624) returned 1 [0064.058] GetFileAttributesExW (in: lpFileName="C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Administrative Tools\\Memory Diagnostics Tool.lnk" (normalized: "c:\\programdata\\microsoft\\windows\\start menu\\programs\\administrative tools\\memory diagnostics tool.lnk"), fInfoLevelId=0x0, lpFileInformation=0x31e6a0 | out: lpFileInformation=0x31e6a0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa38693b, ftCreationTime.dwHighDateTime=0x1ca043f, ftLastAccessTime.dwLowDateTime=0xa38693b, ftLastAccessTime.dwHighDateTime=0x1ca043f, ftLastWriteTime.dwLowDateTime=0x9a07160, ftLastWriteTime.dwHighDateTime=0x1d6eb7f, nFileSizeHigh=0x0, nFileSizeLow=0x500)) returned 1 [0064.058] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e620) returned 1 [0064.058] MoveFileW (lpExistingFileName="C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Administrative Tools\\Memory Diagnostics Tool.lnk" (normalized: "c:\\programdata\\microsoft\\windows\\start menu\\programs\\administrative tools\\memory diagnostics tool.lnk"), lpNewFileName="C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Administrative Tools\\Memory Diagnostics Tool.lnk" (normalized: "c:\\programdata\\microsoft\\windows\\start menu\\programs\\administrative tools\\memory diagnostics tool.lnk")) returned 1 [0064.058] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Administrative Tools\\Performance Monitor.lnk", nBufferLength=0x105, lpBuffer=0x31e0a4, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Administrative Tools\\Performance Monitor.lnk", lpFilePart=0x0) returned 0x61 [0064.058] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e598) returned 1 [0064.058] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Administrative Tools\\Performance Monitor.lnk" (normalized: "c:\\programdata\\microsoft\\windows\\start menu\\programs\\administrative tools\\performance monitor.lnk"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x178 [0064.059] GetFileType (hFile=0x178) returned 0x1 [0064.059] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e594) returned 1 [0064.059] GetFileType (hFile=0x178) returned 0x1 [0064.059] GetFileSize (in: hFile=0x178, lpFileSizeHigh=0x31e6a0 | out: lpFileSizeHigh=0x31e6a0*=0x0) returned 0x4d0 [0064.059] ReadFile (in: hFile=0x178, lpBuffer=0x2714f24, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x31e64c, lpOverlapped=0x0 | out: lpBuffer=0x2714f24*, lpNumberOfBytesRead=0x31e64c*=0x4d0, lpOverlapped=0x0) returned 1 [0064.061] CloseHandle (hObject=0x178) returned 1 [0064.074] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Administrative Tools\\Performance Monitor.lnk", nBufferLength=0x105, lpBuffer=0x31e090, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Administrative Tools\\Performance Monitor.lnk", lpFilePart=0x0) returned 0x61 [0064.074] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e584) returned 1 [0064.074] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Administrative Tools\\Performance Monitor.lnk" (normalized: "c:\\programdata\\microsoft\\windows\\start menu\\programs\\administrative tools\\performance monitor.lnk"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x178 [0064.075] GetFileType (hFile=0x178) returned 0x1 [0064.075] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e580) returned 1 [0064.075] GetFileType (hFile=0x178) returned 0x1 [0064.075] WriteFile (in: hFile=0x178, lpBuffer=0x27646ec*, nNumberOfBytesToWrite=0x4e0, lpNumberOfBytesWritten=0x31e614, lpOverlapped=0x0 | out: lpBuffer=0x27646ec*, lpNumberOfBytesWritten=0x31e614*=0x4e0, lpOverlapped=0x0) returned 1 [0064.076] CloseHandle (hObject=0x178) returned 1 [0064.076] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Administrative Tools\\Performance Monitor.lnk", nBufferLength=0x105, lpBuffer=0x31e1c4, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Administrative Tools\\Performance Monitor.lnk", lpFilePart=0x0) returned 0x61 [0064.076] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Administrative Tools\\Performance Monitor.lnk", nBufferLength=0x105, lpBuffer=0x31e1c4, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Administrative Tools\\Performance Monitor.lnk", lpFilePart=0x0) returned 0x61 [0064.076] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e624) returned 1 [0064.076] GetFileAttributesExW (in: lpFileName="C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Administrative Tools\\Performance Monitor.lnk" (normalized: "c:\\programdata\\microsoft\\windows\\start menu\\programs\\administrative tools\\performance monitor.lnk"), fInfoLevelId=0x0, lpFileInformation=0x31e6a0 | out: lpFileInformation=0x31e6a0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x14139bde, ftCreationTime.dwHighDateTime=0x1ca043f, ftLastAccessTime.dwLowDateTime=0x14139bde, ftLastAccessTime.dwHighDateTime=0x1ca043f, ftLastWriteTime.dwLowDateTime=0x9a2d2c0, ftLastWriteTime.dwHighDateTime=0x1d6eb7f, nFileSizeHigh=0x0, nFileSizeLow=0x4e0)) returned 1 [0064.077] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e620) returned 1 [0064.077] MoveFileW (lpExistingFileName="C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Administrative Tools\\Performance Monitor.lnk" (normalized: "c:\\programdata\\microsoft\\windows\\start menu\\programs\\administrative tools\\performance monitor.lnk"), lpNewFileName="C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Administrative Tools\\Performance Monitor.lnk" (normalized: "c:\\programdata\\microsoft\\windows\\start menu\\programs\\administrative tools\\performance monitor.lnk")) returned 1 [0064.077] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Administrative Tools\\Print Management.lnk", nBufferLength=0x105, lpBuffer=0x31e0a4, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Administrative Tools\\Print Management.lnk", lpFilePart=0x0) returned 0x5e [0064.077] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e598) returned 1 [0064.077] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Administrative Tools\\Print Management.lnk" (normalized: "c:\\programdata\\microsoft\\windows\\start menu\\programs\\administrative tools\\print management.lnk"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x178 [0064.078] GetFileType (hFile=0x178) returned 0x1 [0064.078] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e594) returned 1 [0064.078] GetFileType (hFile=0x178) returned 0x1 [0064.078] GetFileSize (in: hFile=0x178, lpFileSizeHigh=0x31e6a0 | out: lpFileSizeHigh=0x31e6a0*=0x0) returned 0x4ee [0064.078] ReadFile (in: hFile=0x178, lpBuffer=0x2765f0c, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x31e64c, lpOverlapped=0x0 | out: lpBuffer=0x2765f0c*, lpNumberOfBytesRead=0x31e64c*=0x4ee, lpOverlapped=0x0) returned 1 [0064.081] CloseHandle (hObject=0x178) returned 1 [0064.094] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Administrative Tools\\Print Management.lnk", nBufferLength=0x105, lpBuffer=0x31e090, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Administrative Tools\\Print Management.lnk", lpFilePart=0x0) returned 0x5e [0064.094] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e584) returned 1 [0064.094] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Administrative Tools\\Print Management.lnk" (normalized: "c:\\programdata\\microsoft\\windows\\start menu\\programs\\administrative tools\\print management.lnk"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x178 [0064.095] GetFileType (hFile=0x178) returned 0x1 [0064.095] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e580) returned 1 [0064.095] GetFileType (hFile=0x178) returned 0x1 [0064.096] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Administrative Tools\\Print Management.lnk", nBufferLength=0x105, lpBuffer=0x31e1c4, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Administrative Tools\\Print Management.lnk", lpFilePart=0x0) returned 0x5e [0064.096] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Administrative Tools\\Print Management.lnk", nBufferLength=0x105, lpBuffer=0x31e1c4, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Administrative Tools\\Print Management.lnk", lpFilePart=0x0) returned 0x5e [0064.096] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e624) returned 1 [0064.096] GetFileAttributesExW (in: lpFileName="C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Administrative Tools\\Print Management.lnk" (normalized: "c:\\programdata\\microsoft\\windows\\start menu\\programs\\administrative tools\\print management.lnk"), fInfoLevelId=0x0, lpFileInformation=0x31e6a0 | out: lpFileInformation=0x31e6a0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x806d09e0, ftCreationTime.dwHighDateTime=0x1d2de2a, ftLastAccessTime.dwLowDateTime=0x806d09e0, ftLastAccessTime.dwHighDateTime=0x1d2de2a, ftLastWriteTime.dwLowDateTime=0x9a53420, ftLastWriteTime.dwHighDateTime=0x1d6eb7f, nFileSizeHigh=0x0, nFileSizeLow=0x4f0)) returned 1 [0064.096] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e620) returned 1 [0064.096] MoveFileW (lpExistingFileName="C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Administrative Tools\\Print Management.lnk" (normalized: "c:\\programdata\\microsoft\\windows\\start menu\\programs\\administrative tools\\print management.lnk"), lpNewFileName="C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Administrative Tools\\Print Management.lnk" (normalized: "c:\\programdata\\microsoft\\windows\\start menu\\programs\\administrative tools\\print management.lnk")) returned 1 [0064.097] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Administrative Tools\\Security Configuration Management.lnk", nBufferLength=0x105, lpBuffer=0x31e0a4, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Administrative Tools\\Security Configuration Management.lnk", lpFilePart=0x0) returned 0x6f [0064.097] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e598) returned 1 [0064.097] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Administrative Tools\\Security Configuration Management.lnk" (normalized: "c:\\programdata\\microsoft\\windows\\start menu\\programs\\administrative tools\\security configuration management.lnk"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x178 [0064.097] GetFileType (hFile=0x178) returned 0x1 [0064.097] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e594) returned 1 [0064.097] GetFileType (hFile=0x178) returned 0x1 [0064.097] GetFileSize (in: hFile=0x178, lpFileSizeHigh=0x31e6a0 | out: lpFileSizeHigh=0x31e6a0*=0x0) returned 0x4e0 [0064.097] ReadFile (in: hFile=0x178, lpBuffer=0x27b6f58, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x31e64c, lpOverlapped=0x0 | out: lpBuffer=0x27b6f58*, lpNumberOfBytesRead=0x31e64c*=0x4e0, lpOverlapped=0x0) returned 1 [0064.099] CloseHandle (hObject=0x178) returned 1 [0064.112] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Administrative Tools\\Security Configuration Management.lnk", nBufferLength=0x105, lpBuffer=0x31e090, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Administrative Tools\\Security Configuration Management.lnk", lpFilePart=0x0) returned 0x6f [0064.112] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e584) returned 1 [0064.112] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Administrative Tools\\Security Configuration Management.lnk" (normalized: "c:\\programdata\\microsoft\\windows\\start menu\\programs\\administrative tools\\security configuration management.lnk"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x178 [0064.113] GetFileType (hFile=0x178) returned 0x1 [0064.113] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e580) returned 1 [0064.113] GetFileType (hFile=0x178) returned 0x1 [0064.113] WriteFile (in: hFile=0x178, lpBuffer=0x28067a8*, nNumberOfBytesToWrite=0x4f0, lpNumberOfBytesWritten=0x31e614, lpOverlapped=0x0 | out: lpBuffer=0x28067a8*, lpNumberOfBytesWritten=0x31e614*=0x4f0, lpOverlapped=0x0) returned 1 [0064.114] CloseHandle (hObject=0x178) returned 1 [0064.114] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Administrative Tools\\Security Configuration Management.lnk", nBufferLength=0x105, lpBuffer=0x31e1c4, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Administrative Tools\\Security Configuration Management.lnk", lpFilePart=0x0) returned 0x6f [0064.114] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Administrative Tools\\Security Configuration Management.lnk", nBufferLength=0x105, lpBuffer=0x31e1c4, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Administrative Tools\\Security Configuration Management.lnk", lpFilePart=0x0) returned 0x6f [0064.114] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e624) returned 1 [0064.114] GetFileAttributesExW (in: lpFileName="C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Administrative Tools\\Security Configuration Management.lnk" (normalized: "c:\\programdata\\microsoft\\windows\\start menu\\programs\\administrative tools\\security configuration management.lnk"), fInfoLevelId=0x0, lpFileInformation=0x31e6a0 | out: lpFileInformation=0x31e6a0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x81c3cfe0, ftCreationTime.dwHighDateTime=0x1d2de2a, ftLastAccessTime.dwLowDateTime=0x81c3cfe0, ftLastAccessTime.dwHighDateTime=0x1d2de2a, ftLastWriteTime.dwLowDateTime=0x9a79580, ftLastWriteTime.dwHighDateTime=0x1d6eb7f, nFileSizeHigh=0x0, nFileSizeLow=0x4f0)) returned 1 [0064.114] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e620) returned 1 [0064.114] MoveFileW (lpExistingFileName="C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Administrative Tools\\Security Configuration Management.lnk" (normalized: "c:\\programdata\\microsoft\\windows\\start menu\\programs\\administrative tools\\security configuration management.lnk"), lpNewFileName="C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Administrative Tools\\Security Configuration Management.lnk" (normalized: "c:\\programdata\\microsoft\\windows\\start menu\\programs\\administrative tools\\security configuration management.lnk")) returned 1 [0064.115] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Administrative Tools\\services.lnk", nBufferLength=0x105, lpBuffer=0x31e0a4, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Administrative Tools\\services.lnk", lpFilePart=0x0) returned 0x56 [0064.115] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e598) returned 1 [0064.115] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Administrative Tools\\services.lnk" (normalized: "c:\\programdata\\microsoft\\windows\\start menu\\programs\\administrative tools\\services.lnk"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x178 [0064.115] GetFileType (hFile=0x178) returned 0x1 [0064.115] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e594) returned 1 [0064.116] GetFileType (hFile=0x178) returned 0x1 [0064.116] GetFileSize (in: hFile=0x178, lpFileSizeHigh=0x31e6a0 | out: lpFileSizeHigh=0x31e6a0*=0x0) returned 0x508 [0064.116] ReadFile (in: hFile=0x178, lpBuffer=0x2807ff8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x31e64c, lpOverlapped=0x0 | out: lpBuffer=0x2807ff8*, lpNumberOfBytesRead=0x31e64c*=0x508, lpOverlapped=0x0) returned 1 [0064.160] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Administrative Tools\\services.lnk", nBufferLength=0x105, lpBuffer=0x31e090, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Administrative Tools\\services.lnk", lpFilePart=0x0) returned 0x56 [0064.160] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e584) returned 1 [0064.160] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Administrative Tools\\services.lnk" (normalized: "c:\\programdata\\microsoft\\windows\\start menu\\programs\\administrative tools\\services.lnk"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x178 [0064.161] GetFileType (hFile=0x178) returned 0x1 [0064.161] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e580) returned 1 [0064.161] GetFileType (hFile=0x178) returned 0x1 [0064.162] WriteFile (in: hFile=0x178, lpBuffer=0x2658c58*, nNumberOfBytesToWrite=0x510, lpNumberOfBytesWritten=0x31e614, lpOverlapped=0x0 | out: lpBuffer=0x2658c58*, lpNumberOfBytesWritten=0x31e614*=0x510, lpOverlapped=0x0) returned 1 [0064.162] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Administrative Tools\\services.lnk", nBufferLength=0x105, lpBuffer=0x31e1c4, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Administrative Tools\\services.lnk", lpFilePart=0x0) returned 0x56 [0064.162] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Administrative Tools\\services.lnk", nBufferLength=0x105, lpBuffer=0x31e1c4, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Administrative Tools\\services.lnk", lpFilePart=0x0) returned 0x56 [0064.163] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e624) returned 1 [0064.163] GetFileAttributesExW (in: lpFileName="C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Administrative Tools\\services.lnk" (normalized: "c:\\programdata\\microsoft\\windows\\start menu\\programs\\administrative tools\\services.lnk"), fInfoLevelId=0x0, lpFileInformation=0x31e6a0 | out: lpFileInformation=0x31e6a0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1d7306f2, ftCreationTime.dwHighDateTime=0x1ca043f, ftLastAccessTime.dwLowDateTime=0x1d7306f2, ftLastAccessTime.dwHighDateTime=0x1ca043f, ftLastWriteTime.dwLowDateTime=0x9aeb9a0, ftLastWriteTime.dwHighDateTime=0x1d6eb7f, nFileSizeHigh=0x0, nFileSizeLow=0x510)) returned 1 [0064.163] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e620) returned 1 [0064.163] MoveFileW (lpExistingFileName="C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Administrative Tools\\services.lnk" (normalized: "c:\\programdata\\microsoft\\windows\\start menu\\programs\\administrative tools\\services.lnk"), lpNewFileName="C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Administrative Tools\\services.lnk" (normalized: "c:\\programdata\\microsoft\\windows\\start menu\\programs\\administrative tools\\services.lnk")) returned 1 [0064.163] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Administrative Tools\\System Configuration.lnk", nBufferLength=0x105, lpBuffer=0x31e0a4, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Administrative Tools\\System Configuration.lnk", lpFilePart=0x0) returned 0x62 [0064.163] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e598) returned 1 [0064.163] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Administrative Tools\\System Configuration.lnk" (normalized: "c:\\programdata\\microsoft\\windows\\start menu\\programs\\administrative tools\\system configuration.lnk"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x178 [0064.165] GetFileType (hFile=0x178) returned 0x1 [0064.165] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e594) returned 1 [0064.165] GetFileType (hFile=0x178) returned 0x1 [0064.165] GetFileSize (in: hFile=0x178, lpFileSizeHigh=0x31e6a0 | out: lpFileSizeHigh=0x31e6a0*=0x0) returned 0x4de [0064.165] ReadFile (in: hFile=0x178, lpBuffer=0x265a450, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x31e64c, lpOverlapped=0x0 | out: lpBuffer=0x265a450*, lpNumberOfBytesRead=0x31e64c*=0x4de, lpOverlapped=0x0) returned 1 [0064.166] CloseHandle (hObject=0x178) returned 1 [0064.180] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Administrative Tools\\System Configuration.lnk", nBufferLength=0x105, lpBuffer=0x31e090, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Administrative Tools\\System Configuration.lnk", lpFilePart=0x0) returned 0x62 [0064.180] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e584) returned 1 [0064.180] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Administrative Tools\\System Configuration.lnk" (normalized: "c:\\programdata\\microsoft\\windows\\start menu\\programs\\administrative tools\\system configuration.lnk"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x178 [0064.181] GetFileType (hFile=0x178) returned 0x1 [0064.181] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e580) returned 1 [0064.181] GetFileType (hFile=0x178) returned 0x1 [0064.181] WriteFile (in: hFile=0x178, lpBuffer=0x26a9d70*, nNumberOfBytesToWrite=0x4e0, lpNumberOfBytesWritten=0x31e614, lpOverlapped=0x0 | out: lpBuffer=0x26a9d70*, lpNumberOfBytesWritten=0x31e614*=0x4e0, lpOverlapped=0x0) returned 1 [0064.182] CloseHandle (hObject=0x178) returned 1 [0064.182] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Administrative Tools\\System Configuration.lnk", nBufferLength=0x105, lpBuffer=0x31e1c4, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Administrative Tools\\System Configuration.lnk", lpFilePart=0x0) returned 0x62 [0064.182] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Administrative Tools\\System Configuration.lnk", nBufferLength=0x105, lpBuffer=0x31e1c4, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Administrative Tools\\System Configuration.lnk", lpFilePart=0x0) returned 0x62 [0064.182] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e624) returned 1 [0064.182] GetFileAttributesExW (in: lpFileName="C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Administrative Tools\\System Configuration.lnk" (normalized: "c:\\programdata\\microsoft\\windows\\start menu\\programs\\administrative tools\\system configuration.lnk"), fInfoLevelId=0x0, lpFileInformation=0x31e6a0 | out: lpFileInformation=0x31e6a0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa575b1f, ftCreationTime.dwHighDateTime=0x1ca043f, ftLastAccessTime.dwLowDateTime=0xa575b1f, ftLastAccessTime.dwHighDateTime=0x1ca043f, ftLastWriteTime.dwLowDateTime=0x9b37c60, ftLastWriteTime.dwHighDateTime=0x1d6eb7f, nFileSizeHigh=0x0, nFileSizeLow=0x4e0)) returned 1 [0064.182] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e620) returned 1 [0064.182] MoveFileW (lpExistingFileName="C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Administrative Tools\\System Configuration.lnk" (normalized: "c:\\programdata\\microsoft\\windows\\start menu\\programs\\administrative tools\\system configuration.lnk"), lpNewFileName="C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Administrative Tools\\System Configuration.lnk" (normalized: "c:\\programdata\\microsoft\\windows\\start menu\\programs\\administrative tools\\system configuration.lnk")) returned 1 [0064.183] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Administrative Tools\\Task Scheduler.lnk", nBufferLength=0x105, lpBuffer=0x31e0a4, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Administrative Tools\\Task Scheduler.lnk", lpFilePart=0x0) returned 0x5c [0064.183] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e598) returned 1 [0064.183] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Administrative Tools\\Task Scheduler.lnk" (normalized: "c:\\programdata\\microsoft\\windows\\start menu\\programs\\administrative tools\\task scheduler.lnk"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x178 [0064.183] GetFileType (hFile=0x178) returned 0x1 [0064.183] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e594) returned 1 [0064.183] GetFileType (hFile=0x178) returned 0x1 [0064.183] GetFileSize (in: hFile=0x178, lpFileSizeHigh=0x31e6a0 | out: lpFileSizeHigh=0x31e6a0*=0x0) returned 0x4ee [0064.183] ReadFile (in: hFile=0x178, lpBuffer=0x26ab590, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x31e64c, lpOverlapped=0x0 | out: lpBuffer=0x26ab590*, lpNumberOfBytesRead=0x31e64c*=0x4ee, lpOverlapped=0x0) returned 1 [0064.185] CloseHandle (hObject=0x178) returned 1 [0064.198] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Administrative Tools\\Task Scheduler.lnk", nBufferLength=0x105, lpBuffer=0x31e090, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Administrative Tools\\Task Scheduler.lnk", lpFilePart=0x0) returned 0x5c [0064.198] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e584) returned 1 [0064.198] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Administrative Tools\\Task Scheduler.lnk" (normalized: "c:\\programdata\\microsoft\\windows\\start menu\\programs\\administrative tools\\task scheduler.lnk"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x178 [0064.199] GetFileType (hFile=0x178) returned 0x1 [0064.199] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e580) returned 1 [0064.199] GetFileType (hFile=0x178) returned 0x1 [0064.199] WriteFile (in: hFile=0x178, lpBuffer=0x26fad8c*, nNumberOfBytesToWrite=0x4f0, lpNumberOfBytesWritten=0x31e614, lpOverlapped=0x0 | out: lpBuffer=0x26fad8c*, lpNumberOfBytesWritten=0x31e614*=0x4f0, lpOverlapped=0x0) returned 1 [0064.200] CloseHandle (hObject=0x178) returned 1 [0064.200] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Administrative Tools\\Task Scheduler.lnk", nBufferLength=0x105, lpBuffer=0x31e1c4, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Administrative Tools\\Task Scheduler.lnk", lpFilePart=0x0) returned 0x5c [0064.200] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Administrative Tools\\Task Scheduler.lnk", nBufferLength=0x105, lpBuffer=0x31e1c4, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Administrative Tools\\Task Scheduler.lnk", lpFilePart=0x0) returned 0x5c [0064.200] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e624) returned 1 [0064.200] GetFileAttributesExW (in: lpFileName="C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Administrative Tools\\Task Scheduler.lnk" (normalized: "c:\\programdata\\microsoft\\windows\\start menu\\programs\\administrative tools\\task scheduler.lnk"), fInfoLevelId=0x0, lpFileInformation=0x31e6a0 | out: lpFileInformation=0x31e6a0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2b99f553, ftCreationTime.dwHighDateTime=0x1ca043f, ftLastAccessTime.dwLowDateTime=0x2b99f553, ftLastAccessTime.dwHighDateTime=0x1ca043f, ftLastWriteTime.dwLowDateTime=0x9b5ddc0, ftLastWriteTime.dwHighDateTime=0x1d6eb7f, nFileSizeHigh=0x0, nFileSizeLow=0x4f0)) returned 1 [0064.200] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e620) returned 1 [0064.200] MoveFileW (lpExistingFileName="C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Administrative Tools\\Task Scheduler.lnk" (normalized: "c:\\programdata\\microsoft\\windows\\start menu\\programs\\administrative tools\\task scheduler.lnk"), lpNewFileName="C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Administrative Tools\\Task Scheduler.lnk" (normalized: "c:\\programdata\\microsoft\\windows\\start menu\\programs\\administrative tools\\task scheduler.lnk")) returned 1 [0064.201] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Administrative Tools\\Windows Firewall with Advanced Security.lnk", nBufferLength=0x105, lpBuffer=0x31e0a4, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Administrative Tools\\Windows Firewall with Advanced Security.lnk", lpFilePart=0x0) returned 0x75 [0064.201] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e598) returned 1 [0064.201] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Administrative Tools\\Windows Firewall with Advanced Security.lnk" (normalized: "c:\\programdata\\microsoft\\windows\\start menu\\programs\\administrative tools\\windows firewall with advanced security.lnk"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x178 [0064.201] GetFileType (hFile=0x178) returned 0x1 [0064.201] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e594) returned 1 [0064.201] GetFileType (hFile=0x178) returned 0x1 [0064.201] GetFileSize (in: hFile=0x178, lpFileSizeHigh=0x31e6a0 | out: lpFileSizeHigh=0x31e6a0*=0x0) returned 0x4fa [0064.202] ReadFile (in: hFile=0x178, lpBuffer=0x26fc600, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x31e64c, lpOverlapped=0x0 | out: lpBuffer=0x26fc600*, lpNumberOfBytesRead=0x31e64c*=0x4fa, lpOverlapped=0x0) returned 1 [0064.203] CloseHandle (hObject=0x178) returned 1 [0064.216] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Administrative Tools\\Windows Firewall with Advanced Security.lnk", nBufferLength=0x105, lpBuffer=0x31e090, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Administrative Tools\\Windows Firewall with Advanced Security.lnk", lpFilePart=0x0) returned 0x75 [0064.217] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e584) returned 1 [0064.217] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Administrative Tools\\Windows Firewall with Advanced Security.lnk" (normalized: "c:\\programdata\\microsoft\\windows\\start menu\\programs\\administrative tools\\windows firewall with advanced security.lnk"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x178 [0064.217] GetFileType (hFile=0x178) returned 0x1 [0064.217] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e580) returned 1 [0064.217] GetFileType (hFile=0x178) returned 0x1 [0064.218] WriteFile (in: hFile=0x178, lpBuffer=0x274beb0*, nNumberOfBytesToWrite=0x500, lpNumberOfBytesWritten=0x31e614, lpOverlapped=0x0 | out: lpBuffer=0x274beb0*, lpNumberOfBytesWritten=0x31e614*=0x500, lpOverlapped=0x0) returned 1 [0064.218] CloseHandle (hObject=0x178) returned 1 [0064.219] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Administrative Tools\\Windows Firewall with Advanced Security.lnk", nBufferLength=0x105, lpBuffer=0x31e1c4, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Administrative Tools\\Windows Firewall with Advanced Security.lnk", lpFilePart=0x0) returned 0x75 [0064.219] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Administrative Tools\\Windows Firewall with Advanced Security.lnk", nBufferLength=0x105, lpBuffer=0x31e1c4, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Administrative Tools\\Windows Firewall with Advanced Security.lnk", lpFilePart=0x0) returned 0x75 [0064.219] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e624) returned 1 [0064.219] GetFileAttributesExW (in: lpFileName="C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Administrative Tools\\Windows Firewall with Advanced Security.lnk" (normalized: "c:\\programdata\\microsoft\\windows\\start menu\\programs\\administrative tools\\windows firewall with advanced security.lnk"), fInfoLevelId=0x0, lpFileInformation=0x31e6a0 | out: lpFileInformation=0x31e6a0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x191902f2, ftCreationTime.dwHighDateTime=0x1ca043f, ftLastAccessTime.dwLowDateTime=0x191902f2, ftLastAccessTime.dwHighDateTime=0x1ca043f, ftLastWriteTime.dwLowDateTime=0x9b83f20, ftLastWriteTime.dwHighDateTime=0x1d6eb7f, nFileSizeHigh=0x0, nFileSizeLow=0x500)) returned 1 [0064.219] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e620) returned 1 [0064.219] MoveFileW (lpExistingFileName="C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Administrative Tools\\Windows Firewall with Advanced Security.lnk" (normalized: "c:\\programdata\\microsoft\\windows\\start menu\\programs\\administrative tools\\windows firewall with advanced security.lnk"), lpNewFileName="C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Administrative Tools\\Windows Firewall with Advanced Security.lnk" (normalized: "c:\\programdata\\microsoft\\windows\\start menu\\programs\\administrative tools\\windows firewall with advanced security.lnk")) returned 1 [0064.219] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Administrative Tools\\Windows PowerShell Modules.lnk", nBufferLength=0x105, lpBuffer=0x31e0a4, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Administrative Tools\\Windows PowerShell Modules.lnk", lpFilePart=0x0) returned 0x68 [0064.219] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e598) returned 1 [0064.220] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Administrative Tools\\Windows PowerShell Modules.lnk" (normalized: "c:\\programdata\\microsoft\\windows\\start menu\\programs\\administrative tools\\windows powershell modules.lnk"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x178 [0064.220] GetFileType (hFile=0x178) returned 0x1 [0064.221] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e594) returned 1 [0064.221] GetFileType (hFile=0x178) returned 0x1 [0064.221] GetFileSize (in: hFile=0x178, lpFileSizeHigh=0x31e6a0 | out: lpFileSizeHigh=0x31e6a0*=0x0) returned 0xab5 [0064.221] ReadFile (in: hFile=0x178, lpBuffer=0x274dd10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x31e64c, lpOverlapped=0x0 | out: lpBuffer=0x274dd10*, lpNumberOfBytesRead=0x31e64c*=0xab5, lpOverlapped=0x0) returned 1 [0064.222] CloseHandle (hObject=0x178) returned 1 [0064.236] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Administrative Tools\\Windows PowerShell Modules.lnk", nBufferLength=0x105, lpBuffer=0x31e090, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Administrative Tools\\Windows PowerShell Modules.lnk", lpFilePart=0x0) returned 0x68 [0064.236] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e584) returned 1 [0064.236] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Administrative Tools\\Windows PowerShell Modules.lnk" (normalized: "c:\\programdata\\microsoft\\windows\\start menu\\programs\\administrative tools\\windows powershell modules.lnk"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x178 [0064.237] GetFileType (hFile=0x178) returned 0x1 [0064.237] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e580) returned 1 [0064.237] GetFileType (hFile=0x178) returned 0x1 [0064.237] WriteFile (in: hFile=0x178, lpBuffer=0x279f254*, nNumberOfBytesToWrite=0xac0, lpNumberOfBytesWritten=0x31e614, lpOverlapped=0x0 | out: lpBuffer=0x279f254*, lpNumberOfBytesWritten=0x31e614*=0xac0, lpOverlapped=0x0) returned 1 [0064.238] CloseHandle (hObject=0x178) returned 1 [0064.238] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Administrative Tools\\Windows PowerShell Modules.lnk", nBufferLength=0x105, lpBuffer=0x31e1c4, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Administrative Tools\\Windows PowerShell Modules.lnk", lpFilePart=0x0) returned 0x68 [0064.238] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Administrative Tools\\Windows PowerShell Modules.lnk", nBufferLength=0x105, lpBuffer=0x31e1c4, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Administrative Tools\\Windows PowerShell Modules.lnk", lpFilePart=0x0) returned 0x68 [0064.238] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e624) returned 1 [0064.238] GetFileAttributesExW (in: lpFileName="C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Administrative Tools\\Windows PowerShell Modules.lnk" (normalized: "c:\\programdata\\microsoft\\windows\\start menu\\programs\\administrative tools\\windows powershell modules.lnk"), fInfoLevelId=0x0, lpFileInformation=0x31e6a0 | out: lpFileInformation=0x31e6a0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8038cbd7, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x7bed1018, ftLastAccessTime.dwHighDateTime=0x1ca0444, ftLastWriteTime.dwLowDateTime=0x9baa080, ftLastWriteTime.dwHighDateTime=0x1d6eb7f, nFileSizeHigh=0x0, nFileSizeLow=0xac0)) returned 1 [0064.238] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e620) returned 1 [0064.238] MoveFileW (lpExistingFileName="C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Administrative Tools\\Windows PowerShell Modules.lnk" (normalized: "c:\\programdata\\microsoft\\windows\\start menu\\programs\\administrative tools\\windows powershell modules.lnk"), lpNewFileName="C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Administrative Tools\\Windows PowerShell Modules.lnk" (normalized: "c:\\programdata\\microsoft\\windows\\start menu\\programs\\administrative tools\\windows powershell modules.lnk")) returned 1 [0064.239] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e6cc) returned 1 [0064.239] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Games", nBufferLength=0x105, lpBuffer=0x31e1d4, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Games", lpFilePart=0x0) returned 0x3a [0064.239] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Games\\", nBufferLength=0x105, lpBuffer=0x31e1a8, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Games\\", lpFilePart=0x0) returned 0x3b [0064.239] FindFirstFileW (in: lpFileName="C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Games\\*", lpFindFileData=0x31e3f4 | out: lpFindFileData=0x31e3f4*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x80020c30, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0xa224bfc3, ftLastAccessTime.dwHighDateTime=0x1cbf8eb, ftLastWriteTime.dwLowDateTime=0xa224bfc3, ftLastWriteTime.dwHighDateTime=0x1cbf8eb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5107a20 [0064.239] FindNextFileW (in: hFindFile=0x5107a20, lpFindFileData=0x31e404 | out: lpFindFileData=0x31e404*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x80020c30, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0xa224bfc3, ftLastAccessTime.dwHighDateTime=0x1cbf8eb, ftLastWriteTime.dwLowDateTime=0xa224bfc3, ftLastWriteTime.dwHighDateTime=0x1cbf8eb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0064.240] FindNextFileW (in: hFindFile=0x5107a20, lpFindFileData=0x31e404 | out: lpFindFileData=0x31e404*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0x8038cbd7, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x8e194aab, ftLastAccessTime.dwHighDateTime=0x1cbf8eb, ftLastWriteTime.dwLowDateTime=0x8e194aab, ftLastWriteTime.dwHighDateTime=0x1cbf8eb, nFileSizeHigh=0x0, nFileSizeLow=0x208, dwReserved0=0x0, dwReserved1=0x0, cFileName="desktop.ini", cAlternateFileName="")) returned 1 [0064.240] FindNextFileW (in: hFindFile=0x5107a20, lpFindFileData=0x31e404 | out: lpFindFileData=0x31e404*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3db22b28, ftCreationTime.dwHighDateTime=0x1ca043f, ftLastAccessTime.dwLowDateTime=0x3db22b28, ftLastAccessTime.dwHighDateTime=0x1ca043f, ftLastWriteTime.dwLowDateTime=0x3db94f49, ftLastWriteTime.dwHighDateTime=0x1ca043f, nFileSizeHigh=0x0, nFileSizeLow=0x102, dwReserved0=0x0, dwReserved1=0x0, cFileName="GameExplorer.lnk", cAlternateFileName="GAMEEX~1.LNK")) returned 1 [0064.240] FindNextFileW (in: hFindFile=0x5107a20, lpFindFileData=0x31e404 | out: lpFindFileData=0x31e404*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0064.240] FindClose (in: hFindFile=0x5107a20 | out: hFindFile=0x5107a20) returned 1 [0064.240] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e68c) returned 1 [0064.240] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e698) returned 1 [0064.240] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e6cc) returned 1 [0064.240] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Games", nBufferLength=0x105, lpBuffer=0x31e1d4, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Games", lpFilePart=0x0) returned 0x3a [0064.240] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Games\\", nBufferLength=0x105, lpBuffer=0x31e1a8, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Games\\", lpFilePart=0x0) returned 0x3b [0064.240] FindFirstFileW (in: lpFileName="C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Games\\*", lpFindFileData=0x31e3f4 | out: lpFindFileData=0x31e3f4*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x80020c30, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0xa224bfc3, ftLastAccessTime.dwHighDateTime=0x1cbf8eb, ftLastWriteTime.dwLowDateTime=0xa224bfc3, ftLastWriteTime.dwHighDateTime=0x1cbf8eb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5107a20 [0064.240] FindNextFileW (in: hFindFile=0x5107a20, lpFindFileData=0x31e404 | out: lpFindFileData=0x31e404*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x80020c30, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0xa224bfc3, ftLastAccessTime.dwHighDateTime=0x1cbf8eb, ftLastWriteTime.dwLowDateTime=0xa224bfc3, ftLastWriteTime.dwHighDateTime=0x1cbf8eb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0064.241] FindNextFileW (in: hFindFile=0x5107a20, lpFindFileData=0x31e404 | out: lpFindFileData=0x31e404*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0x8038cbd7, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x8e194aab, ftLastAccessTime.dwHighDateTime=0x1cbf8eb, ftLastWriteTime.dwLowDateTime=0x8e194aab, ftLastWriteTime.dwHighDateTime=0x1cbf8eb, nFileSizeHigh=0x0, nFileSizeLow=0x208, dwReserved0=0x0, dwReserved1=0x0, cFileName="desktop.ini", cAlternateFileName="")) returned 1 [0064.241] FindNextFileW (in: hFindFile=0x5107a20, lpFindFileData=0x31e404 | out: lpFindFileData=0x31e404*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3db22b28, ftCreationTime.dwHighDateTime=0x1ca043f, ftLastAccessTime.dwLowDateTime=0x3db22b28, ftLastAccessTime.dwHighDateTime=0x1ca043f, ftLastWriteTime.dwLowDateTime=0x3db94f49, ftLastWriteTime.dwHighDateTime=0x1ca043f, nFileSizeHigh=0x0, nFileSizeLow=0x102, dwReserved0=0x0, dwReserved1=0x0, cFileName="GameExplorer.lnk", cAlternateFileName="GAMEEX~1.LNK")) returned 1 [0064.241] FindNextFileW (in: hFindFile=0x5107a20, lpFindFileData=0x31e404 | out: lpFindFileData=0x31e404*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3db22b28, ftCreationTime.dwHighDateTime=0x1ca043f, ftLastAccessTime.dwLowDateTime=0x3db22b28, ftLastAccessTime.dwHighDateTime=0x1ca043f, ftLastWriteTime.dwLowDateTime=0x3db94f49, ftLastWriteTime.dwHighDateTime=0x1ca043f, nFileSizeHigh=0x0, nFileSizeLow=0x102, dwReserved0=0x0, dwReserved1=0x0, cFileName="GameExplorer.lnk", cAlternateFileName="GAMEEX~1.LNK")) returned 0 [0064.241] FindClose (in: hFindFile=0x5107a20 | out: hFindFile=0x5107a20) returned 1 [0064.241] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e68c) returned 1 [0064.241] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e698) returned 1 [0064.241] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Games\\GameExplorer.lnk", nBufferLength=0x105, lpBuffer=0x31e0a4, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Games\\GameExplorer.lnk", lpFilePart=0x0) returned 0x4b [0064.241] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e598) returned 1 [0064.241] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Games\\GameExplorer.lnk" (normalized: "c:\\programdata\\microsoft\\windows\\start menu\\programs\\games\\gameexplorer.lnk"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x178 [0064.242] GetFileType (hFile=0x178) returned 0x1 [0064.242] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e594) returned 1 [0064.242] GetFileType (hFile=0x178) returned 0x1 [0064.242] GetFileSize (in: hFile=0x178, lpFileSizeHigh=0x31e6a0 | out: lpFileSizeHigh=0x31e6a0*=0x0) returned 0x102 [0064.242] ReadFile (in: hFile=0x178, lpBuffer=0x27a2124, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x31e64c, lpOverlapped=0x0 | out: lpBuffer=0x27a2124*, lpNumberOfBytesRead=0x31e64c*=0x102, lpOverlapped=0x0) returned 1 [0064.243] CloseHandle (hObject=0x178) returned 1 [0064.263] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Games\\GameExplorer.lnk", nBufferLength=0x105, lpBuffer=0x31e090, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Games\\GameExplorer.lnk", lpFilePart=0x0) returned 0x4b [0064.263] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e584) returned 1 [0064.263] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Games\\GameExplorer.lnk" (normalized: "c:\\programdata\\microsoft\\windows\\start menu\\programs\\games\\gameexplorer.lnk"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x178 [0064.264] GetFileType (hFile=0x178) returned 0x1 [0064.264] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e580) returned 1 [0064.264] GetFileType (hFile=0x178) returned 0x1 [0064.264] WriteFile (in: hFile=0x178, lpBuffer=0x27f05a4*, nNumberOfBytesToWrite=0x110, lpNumberOfBytesWritten=0x31e614, lpOverlapped=0x0 | out: lpBuffer=0x27f05a4*, lpNumberOfBytesWritten=0x31e614*=0x110, lpOverlapped=0x0) returned 1 [0064.265] CloseHandle (hObject=0x178) returned 1 [0064.266] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Games\\GameExplorer.lnk", nBufferLength=0x105, lpBuffer=0x31e1c4, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Games\\GameExplorer.lnk", lpFilePart=0x0) returned 0x4b [0064.266] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Games\\GameExplorer.lnk", nBufferLength=0x105, lpBuffer=0x31e1c4, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Games\\GameExplorer.lnk", lpFilePart=0x0) returned 0x4b [0064.266] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e624) returned 1 [0064.266] GetFileAttributesExW (in: lpFileName="C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Games\\GameExplorer.lnk" (normalized: "c:\\programdata\\microsoft\\windows\\start menu\\programs\\games\\gameexplorer.lnk"), fInfoLevelId=0x0, lpFileInformation=0x31e6a0 | out: lpFileInformation=0x31e6a0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3db22b28, ftCreationTime.dwHighDateTime=0x1ca043f, ftLastAccessTime.dwLowDateTime=0x3db22b28, ftLastAccessTime.dwHighDateTime=0x1ca043f, ftLastWriteTime.dwLowDateTime=0x9bf6340, ftLastWriteTime.dwHighDateTime=0x1d6eb7f, nFileSizeHigh=0x0, nFileSizeLow=0x110)) returned 1 [0064.266] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e620) returned 1 [0064.266] MoveFileW (lpExistingFileName="C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Games\\GameExplorer.lnk" (normalized: "c:\\programdata\\microsoft\\windows\\start menu\\programs\\games\\gameexplorer.lnk"), lpNewFileName="C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Games\\GameExplorer.lnk" (normalized: "c:\\programdata\\microsoft\\windows\\start menu\\programs\\games\\gameexplorer.lnk")) returned 1 [0064.266] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e6cc) returned 1 [0064.266] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Java", nBufferLength=0x105, lpBuffer=0x31e1d4, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Java", lpFilePart=0x0) returned 0x39 [0064.267] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Java\\", nBufferLength=0x105, lpBuffer=0x31e1a8, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Java\\", lpFilePart=0x0) returned 0x3a [0064.267] FindFirstFileW (in: lpFileName="C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Java\\*", lpFindFileData=0x31e3f4 | out: lpFindFileData=0x31e3f4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7577bc60, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x762ca4e0, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x762ca4e0, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5107d20 [0064.267] FindNextFileW (in: hFindFile=0x5107d20, lpFindFileData=0x31e404 | out: lpFindFileData=0x31e404*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7577bc60, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x762ca4e0, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x762ca4e0, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0064.268] FindNextFileW (in: hFindFile=0x5107d20, lpFindFileData=0x31e404 | out: lpFindFileData=0x31e404*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x762ca4e0, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x762ca4e0, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x762ca4e0, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x7cf, dwReserved0=0x0, dwReserved1=0x0, cFileName="About Java.lnk", cAlternateFileName="ABOUTJ~1.LNK")) returned 1 [0064.268] FindNextFileW (in: hFindFile=0x5107d20, lpFindFileData=0x31e404 | out: lpFindFileData=0x31e404*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x762ca4e0, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x762ca4e0, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x762ca4e0, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x7e1, dwReserved0=0x0, dwReserved1=0x0, cFileName="Check For Updates.lnk", cAlternateFileName="CHECKF~1.LNK")) returned 1 [0064.268] FindNextFileW (in: hFindFile=0x5107d20, lpFindFileData=0x31e404 | out: lpFindFileData=0x31e404*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x762a4380, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x762a4380, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x762ca4e0, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x7b7, dwReserved0=0x0, dwReserved1=0x0, cFileName="Configure Java.lnk", cAlternateFileName="CONFIG~1.LNK")) returned 1 [0064.268] FindNextFileW (in: hFindFile=0x5107d20, lpFindFileData=0x31e404 | out: lpFindFileData=0x31e404*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7591eb80, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x7591eb80, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x7591eb80, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x4b6, dwReserved0=0x0, dwReserved1=0x0, cFileName="Get Help.lnk", cAlternateFileName="GETHEL~1.LNK")) returned 1 [0064.268] FindNextFileW (in: hFindFile=0x5107d20, lpFindFileData=0x31e404 | out: lpFindFileData=0x31e404*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x758f8a20, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x758f8a20, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x7591eb80, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x45a, dwReserved0=0x0, dwReserved1=0x0, cFileName="Visit Java.com.lnk", cAlternateFileName="VISITJ~1.LNK")) returned 1 [0064.268] FindNextFileW (in: hFindFile=0x5107d20, lpFindFileData=0x31e404 | out: lpFindFileData=0x31e404*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0064.268] FindClose (in: hFindFile=0x5107d20 | out: hFindFile=0x5107d20) returned 1 [0064.269] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e68c) returned 1 [0064.269] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e698) returned 1 [0064.269] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e6cc) returned 1 [0064.269] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Java", nBufferLength=0x105, lpBuffer=0x31e1d4, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Java", lpFilePart=0x0) returned 0x39 [0064.269] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Java\\", nBufferLength=0x105, lpBuffer=0x31e1a8, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Java\\", lpFilePart=0x0) returned 0x3a [0064.269] FindFirstFileW (in: lpFileName="C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Java\\*", lpFindFileData=0x31e3f4 | out: lpFindFileData=0x31e3f4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7577bc60, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x762ca4e0, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x762ca4e0, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5107d20 [0064.270] FindNextFileW (in: hFindFile=0x5107d20, lpFindFileData=0x31e404 | out: lpFindFileData=0x31e404*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7577bc60, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x762ca4e0, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x762ca4e0, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0064.270] FindNextFileW (in: hFindFile=0x5107d20, lpFindFileData=0x31e404 | out: lpFindFileData=0x31e404*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x762ca4e0, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x762ca4e0, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x762ca4e0, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x7cf, dwReserved0=0x0, dwReserved1=0x0, cFileName="About Java.lnk", cAlternateFileName="ABOUTJ~1.LNK")) returned 1 [0064.270] FindNextFileW (in: hFindFile=0x5107d20, lpFindFileData=0x31e404 | out: lpFindFileData=0x31e404*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x762ca4e0, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x762ca4e0, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x762ca4e0, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x7e1, dwReserved0=0x0, dwReserved1=0x0, cFileName="Check For Updates.lnk", cAlternateFileName="CHECKF~1.LNK")) returned 1 [0064.271] FindNextFileW (in: hFindFile=0x5107d20, lpFindFileData=0x31e404 | out: lpFindFileData=0x31e404*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x762a4380, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x762a4380, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x762ca4e0, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x7b7, dwReserved0=0x0, dwReserved1=0x0, cFileName="Configure Java.lnk", cAlternateFileName="CONFIG~1.LNK")) returned 1 [0064.271] FindNextFileW (in: hFindFile=0x5107d20, lpFindFileData=0x31e404 | out: lpFindFileData=0x31e404*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7591eb80, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x7591eb80, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x7591eb80, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x4b6, dwReserved0=0x0, dwReserved1=0x0, cFileName="Get Help.lnk", cAlternateFileName="GETHEL~1.LNK")) returned 1 [0064.271] FindNextFileW (in: hFindFile=0x5107d20, lpFindFileData=0x31e404 | out: lpFindFileData=0x31e404*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x758f8a20, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x758f8a20, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x7591eb80, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x45a, dwReserved0=0x0, dwReserved1=0x0, cFileName="Visit Java.com.lnk", cAlternateFileName="VISITJ~1.LNK")) returned 1 [0064.271] FindNextFileW (in: hFindFile=0x5107d20, lpFindFileData=0x31e404 | out: lpFindFileData=0x31e404*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x758f8a20, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x758f8a20, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x7591eb80, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x45a, dwReserved0=0x0, dwReserved1=0x0, cFileName="Visit Java.com.lnk", cAlternateFileName="VISITJ~1.LNK")) returned 0 [0064.271] FindClose (in: hFindFile=0x5107d20 | out: hFindFile=0x5107d20) returned 1 [0064.272] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e68c) returned 1 [0064.272] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e698) returned 1 [0064.272] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Java\\About Java.lnk", nBufferLength=0x105, lpBuffer=0x31e0a4, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Java\\About Java.lnk", lpFilePart=0x0) returned 0x48 [0064.272] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e598) returned 1 [0064.272] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Java\\About Java.lnk" (normalized: "c:\\programdata\\microsoft\\windows\\start menu\\programs\\java\\about java.lnk"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x178 [0064.274] GetFileType (hFile=0x178) returned 0x1 [0064.274] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e594) returned 1 [0064.275] GetFileType (hFile=0x178) returned 0x1 [0064.275] GetFileSize (in: hFile=0x178, lpFileSizeHigh=0x31e6a0 | out: lpFileSizeHigh=0x31e6a0*=0x0) returned 0x7cf [0064.275] ReadFile (in: hFile=0x178, lpBuffer=0x27f4628, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x31e64c, lpOverlapped=0x0 | out: lpBuffer=0x27f4628*, lpNumberOfBytesRead=0x31e64c*=0x7cf, lpOverlapped=0x0) returned 1 [0064.276] CloseHandle (hObject=0x178) returned 1 [0064.346] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Java\\About Java.lnk", nBufferLength=0x105, lpBuffer=0x31e090, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Java\\About Java.lnk", lpFilePart=0x0) returned 0x48 [0064.347] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e584) returned 1 [0064.347] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Java\\About Java.lnk" (normalized: "c:\\programdata\\microsoft\\windows\\start menu\\programs\\java\\about java.lnk"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x178 [0064.347] GetFileType (hFile=0x178) returned 0x1 [0064.347] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e580) returned 1 [0064.348] GetFileType (hFile=0x178) returned 0x1 [0064.348] WriteFile (in: hFile=0x178, lpBuffer=0x2646730*, nNumberOfBytesToWrite=0x7d0, lpNumberOfBytesWritten=0x31e614, lpOverlapped=0x0 | out: lpBuffer=0x2646730*, lpNumberOfBytesWritten=0x31e614*=0x7d0, lpOverlapped=0x0) returned 1 [0064.348] CloseHandle (hObject=0x178) returned 1 [0064.348] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Java\\About Java.lnk", nBufferLength=0x105, lpBuffer=0x31e1c4, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Java\\About Java.lnk", lpFilePart=0x0) returned 0x48 [0064.349] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Java\\About Java.lnk", nBufferLength=0x105, lpBuffer=0x31e1c4, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Java\\About Java.lnk", lpFilePart=0x0) returned 0x48 [0064.349] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e624) returned 1 [0064.349] GetFileAttributesExW (in: lpFileName="C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Java\\About Java.lnk" (normalized: "c:\\programdata\\microsoft\\windows\\start menu\\programs\\java\\about java.lnk"), fInfoLevelId=0x0, lpFileInformation=0x31e6a0 | out: lpFileInformation=0x31e6a0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x762ca4e0, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x762ca4e0, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x9cb4a20, ftLastWriteTime.dwHighDateTime=0x1d6eb7f, nFileSizeHigh=0x0, nFileSizeLow=0x7d0)) returned 1 [0064.349] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e620) returned 1 [0064.349] MoveFileW (lpExistingFileName="C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Java\\About Java.lnk" (normalized: "c:\\programdata\\microsoft\\windows\\start menu\\programs\\java\\about java.lnk"), lpNewFileName="C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Java\\About Java.lnk" (normalized: "c:\\programdata\\microsoft\\windows\\start menu\\programs\\java\\about java.lnk")) returned 1 [0064.349] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Java\\Check For Updates.lnk", nBufferLength=0x105, lpBuffer=0x31e0a4, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Java\\Check For Updates.lnk", lpFilePart=0x0) returned 0x4f [0064.349] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e598) returned 1 [0064.349] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Java\\Check For Updates.lnk" (normalized: "c:\\programdata\\microsoft\\windows\\start menu\\programs\\java\\check for updates.lnk"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x178 [0064.364] GetFileType (hFile=0x178) returned 0x1 [0064.364] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e594) returned 1 [0064.364] GetFileType (hFile=0x178) returned 0x1 [0064.364] GetFileSize (in: hFile=0x178, lpFileSizeHigh=0x31e6a0 | out: lpFileSizeHigh=0x31e6a0*=0x0) returned 0x7e1 [0064.364] ReadFile (in: hFile=0x178, lpBuffer=0x26481c4, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x31e64c, lpOverlapped=0x0 | out: lpBuffer=0x26481c4*, lpNumberOfBytesRead=0x31e64c*=0x7e1, lpOverlapped=0x0) returned 1 [0064.366] CloseHandle (hObject=0x178) returned 1 [0064.381] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Java\\Check For Updates.lnk", nBufferLength=0x105, lpBuffer=0x31e090, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Java\\Check For Updates.lnk", lpFilePart=0x0) returned 0x4f [0064.381] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e584) returned 1 [0064.381] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Java\\Check For Updates.lnk" (normalized: "c:\\programdata\\microsoft\\windows\\start menu\\programs\\java\\check for updates.lnk"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x178 [0064.384] GetFileType (hFile=0x178) returned 0x1 [0064.384] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e580) returned 1 [0064.384] GetFileType (hFile=0x178) returned 0x1 [0064.384] WriteFile (in: hFile=0x178, lpBuffer=0x2698a10*, nNumberOfBytesToWrite=0x7f0, lpNumberOfBytesWritten=0x31e614, lpOverlapped=0x0 | out: lpBuffer=0x2698a10*, lpNumberOfBytesWritten=0x31e614*=0x7f0, lpOverlapped=0x0) returned 1 [0064.385] CloseHandle (hObject=0x178) returned 1 [0064.385] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Java\\Check For Updates.lnk", nBufferLength=0x105, lpBuffer=0x31e1c4, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Java\\Check For Updates.lnk", lpFilePart=0x0) returned 0x4f [0064.386] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Java\\Check For Updates.lnk", nBufferLength=0x105, lpBuffer=0x31e1c4, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Java\\Check For Updates.lnk", lpFilePart=0x0) returned 0x4f [0064.386] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e624) returned 1 [0064.386] GetFileAttributesExW (in: lpFileName="C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Java\\Check For Updates.lnk" (normalized: "c:\\programdata\\microsoft\\windows\\start menu\\programs\\java\\check for updates.lnk"), fInfoLevelId=0x0, lpFileInformation=0x31e6a0 | out: lpFileInformation=0x31e6a0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x762ca4e0, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x762ca4e0, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x9d26e40, ftLastWriteTime.dwHighDateTime=0x1d6eb7f, nFileSizeHigh=0x0, nFileSizeLow=0x7f0)) returned 1 [0064.386] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e620) returned 1 [0064.386] MoveFileW (lpExistingFileName="C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Java\\Check For Updates.lnk" (normalized: "c:\\programdata\\microsoft\\windows\\start menu\\programs\\java\\check for updates.lnk"), lpNewFileName="C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Java\\Check For Updates.lnk" (normalized: "c:\\programdata\\microsoft\\windows\\start menu\\programs\\java\\check for updates.lnk")) returned 1 [0064.386] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Java\\Configure Java.lnk", nBufferLength=0x105, lpBuffer=0x31e0a4, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Java\\Configure Java.lnk", lpFilePart=0x0) returned 0x4c [0064.386] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e598) returned 1 [0064.386] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Java\\Configure Java.lnk" (normalized: "c:\\programdata\\microsoft\\windows\\start menu\\programs\\java\\configure java.lnk"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x178 [0064.387] GetFileType (hFile=0x178) returned 0x1 [0064.387] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e594) returned 1 [0064.387] GetFileType (hFile=0x178) returned 0x1 [0064.388] GetFileSize (in: hFile=0x178, lpFileSizeHigh=0x31e6a0 | out: lpFileSizeHigh=0x31e6a0*=0x0) returned 0x7b7 [0064.388] ReadFile (in: hFile=0x178, lpBuffer=0x269a488, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x31e64c, lpOverlapped=0x0 | out: lpBuffer=0x269a488*, lpNumberOfBytesRead=0x31e64c*=0x7b7, lpOverlapped=0x0) returned 1 [0064.389] CloseHandle (hObject=0x178) returned 1 [0064.402] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Java\\Configure Java.lnk", nBufferLength=0x105, lpBuffer=0x31e090, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Java\\Configure Java.lnk", lpFilePart=0x0) returned 0x4c [0064.402] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e584) returned 1 [0064.402] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Java\\Configure Java.lnk" (normalized: "c:\\programdata\\microsoft\\windows\\start menu\\programs\\java\\configure java.lnk"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x178 [0064.403] GetFileType (hFile=0x178) returned 0x1 [0064.404] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e580) returned 1 [0064.404] GetFileType (hFile=0x178) returned 0x1 [0064.404] WriteFile (in: hFile=0x178, lpBuffer=0x26eaa7c*, nNumberOfBytesToWrite=0x7c0, lpNumberOfBytesWritten=0x31e614, lpOverlapped=0x0 | out: lpBuffer=0x26eaa7c*, lpNumberOfBytesWritten=0x31e614*=0x7c0, lpOverlapped=0x0) returned 1 [0064.404] CloseHandle (hObject=0x178) returned 1 [0064.405] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Java\\Configure Java.lnk", nBufferLength=0x105, lpBuffer=0x31e1c4, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Java\\Configure Java.lnk", lpFilePart=0x0) returned 0x4c [0064.405] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Java\\Configure Java.lnk", nBufferLength=0x105, lpBuffer=0x31e1c4, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Java\\Configure Java.lnk", lpFilePart=0x0) returned 0x4c [0064.405] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e624) returned 1 [0064.405] GetFileAttributesExW (in: lpFileName="C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Java\\Configure Java.lnk" (normalized: "c:\\programdata\\microsoft\\windows\\start menu\\programs\\java\\configure java.lnk"), fInfoLevelId=0x0, lpFileInformation=0x31e6a0 | out: lpFileInformation=0x31e6a0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x762a4380, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x762a4380, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x9d4cfa0, ftLastWriteTime.dwHighDateTime=0x1d6eb7f, nFileSizeHigh=0x0, nFileSizeLow=0x7c0)) returned 1 [0064.405] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e620) returned 1 [0064.405] MoveFileW (lpExistingFileName="C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Java\\Configure Java.lnk" (normalized: "c:\\programdata\\microsoft\\windows\\start menu\\programs\\java\\configure java.lnk"), lpNewFileName="C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Java\\Configure Java.lnk" (normalized: "c:\\programdata\\microsoft\\windows\\start menu\\programs\\java\\configure java.lnk")) returned 1 [0064.406] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Java\\Get Help.lnk", nBufferLength=0x105, lpBuffer=0x31e0a4, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Java\\Get Help.lnk", lpFilePart=0x0) returned 0x46 [0064.406] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e598) returned 1 [0064.406] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Java\\Get Help.lnk" (normalized: "c:\\programdata\\microsoft\\windows\\start menu\\programs\\java\\get help.lnk"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x178 [0064.406] GetFileType (hFile=0x178) returned 0x1 [0064.406] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e594) returned 1 [0064.406] GetFileType (hFile=0x178) returned 0x1 [0064.406] GetFileSize (in: hFile=0x178, lpFileSizeHigh=0x31e6a0 | out: lpFileSizeHigh=0x31e6a0*=0x0) returned 0x4b6 [0064.406] ReadFile (in: hFile=0x178, lpBuffer=0x26ec1d4, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x31e64c, lpOverlapped=0x0 | out: lpBuffer=0x26ec1d4*, lpNumberOfBytesRead=0x31e64c*=0x4b6, lpOverlapped=0x0) returned 1 [0064.408] CloseHandle (hObject=0x178) returned 1 [0064.421] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Java\\Get Help.lnk", nBufferLength=0x105, lpBuffer=0x31e090, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Java\\Get Help.lnk", lpFilePart=0x0) returned 0x46 [0064.421] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e584) returned 1 [0064.421] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Java\\Get Help.lnk" (normalized: "c:\\programdata\\microsoft\\windows\\start menu\\programs\\java\\get help.lnk"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x178 [0064.422] GetFileType (hFile=0x178) returned 0x1 [0064.422] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e580) returned 1 [0064.422] GetFileType (hFile=0x178) returned 0x1 [0064.423] WriteFile (in: hFile=0x178, lpBuffer=0x273b8b0*, nNumberOfBytesToWrite=0x4c0, lpNumberOfBytesWritten=0x31e614, lpOverlapped=0x0 | out: lpBuffer=0x273b8b0*, lpNumberOfBytesWritten=0x31e614*=0x4c0, lpOverlapped=0x0) returned 1 [0064.424] CloseHandle (hObject=0x178) returned 1 [0064.424] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Java\\Get Help.lnk", nBufferLength=0x105, lpBuffer=0x31e1c4, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Java\\Get Help.lnk", lpFilePart=0x0) returned 0x46 [0064.424] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Java\\Get Help.lnk", nBufferLength=0x105, lpBuffer=0x31e1c4, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Java\\Get Help.lnk", lpFilePart=0x0) returned 0x46 [0064.424] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e624) returned 1 [0064.424] GetFileAttributesExW (in: lpFileName="C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Java\\Get Help.lnk" (normalized: "c:\\programdata\\microsoft\\windows\\start menu\\programs\\java\\get help.lnk"), fInfoLevelId=0x0, lpFileInformation=0x31e6a0 | out: lpFileInformation=0x31e6a0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7591eb80, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x7591eb80, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x9d73100, ftLastWriteTime.dwHighDateTime=0x1d6eb7f, nFileSizeHigh=0x0, nFileSizeLow=0x4c0)) returned 1 [0064.424] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e620) returned 1 [0064.424] MoveFileW (lpExistingFileName="C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Java\\Get Help.lnk" (normalized: "c:\\programdata\\microsoft\\windows\\start menu\\programs\\java\\get help.lnk"), lpNewFileName="C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Java\\Get Help.lnk" (normalized: "c:\\programdata\\microsoft\\windows\\start menu\\programs\\java\\get help.lnk")) returned 1 [0064.425] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Java\\Visit Java.com.lnk", nBufferLength=0x105, lpBuffer=0x31e0a4, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Java\\Visit Java.com.lnk", lpFilePart=0x0) returned 0x4c [0064.425] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e598) returned 1 [0064.425] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Java\\Visit Java.com.lnk" (normalized: "c:\\programdata\\microsoft\\windows\\start menu\\programs\\java\\visit java.com.lnk"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x178 [0064.426] GetFileType (hFile=0x178) returned 0x1 [0064.426] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e594) returned 1 [0064.426] GetFileType (hFile=0x178) returned 0x1 [0064.426] GetFileSize (in: hFile=0x178, lpFileSizeHigh=0x31e6a0 | out: lpFileSizeHigh=0x31e6a0*=0x0) returned 0x45a [0064.426] ReadFile (in: hFile=0x178, lpBuffer=0x273cfac, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x31e64c, lpOverlapped=0x0 | out: lpBuffer=0x273cfac*, lpNumberOfBytesRead=0x31e64c*=0x45a, lpOverlapped=0x0) returned 1 [0064.428] CloseHandle (hObject=0x178) returned 1 [0064.441] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Java\\Visit Java.com.lnk", nBufferLength=0x105, lpBuffer=0x31e090, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Java\\Visit Java.com.lnk", lpFilePart=0x0) returned 0x4c [0064.441] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e584) returned 1 [0064.441] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Java\\Visit Java.com.lnk" (normalized: "c:\\programdata\\microsoft\\windows\\start menu\\programs\\java\\visit java.com.lnk"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x178 [0064.442] GetFileType (hFile=0x178) returned 0x1 [0064.442] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e580) returned 1 [0064.442] GetFileType (hFile=0x178) returned 0x1 [0064.442] WriteFile (in: hFile=0x178, lpBuffer=0x278c4bc*, nNumberOfBytesToWrite=0x460, lpNumberOfBytesWritten=0x31e614, lpOverlapped=0x0 | out: lpBuffer=0x278c4bc*, lpNumberOfBytesWritten=0x31e614*=0x460, lpOverlapped=0x0) returned 1 [0064.443] CloseHandle (hObject=0x178) returned 1 [0064.443] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Java\\Visit Java.com.lnk", nBufferLength=0x105, lpBuffer=0x31e1c4, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Java\\Visit Java.com.lnk", lpFilePart=0x0) returned 0x4c [0064.443] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Java\\Visit Java.com.lnk", nBufferLength=0x105, lpBuffer=0x31e1c4, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Java\\Visit Java.com.lnk", lpFilePart=0x0) returned 0x4c [0064.443] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e624) returned 1 [0064.443] GetFileAttributesExW (in: lpFileName="C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Java\\Visit Java.com.lnk" (normalized: "c:\\programdata\\microsoft\\windows\\start menu\\programs\\java\\visit java.com.lnk"), fInfoLevelId=0x0, lpFileInformation=0x31e6a0 | out: lpFileInformation=0x31e6a0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x758f8a20, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x758f8a20, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x9d99260, ftLastWriteTime.dwHighDateTime=0x1d6eb7f, nFileSizeHigh=0x0, nFileSizeLow=0x460)) returned 1 [0064.444] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e620) returned 1 [0064.444] MoveFileW (lpExistingFileName="C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Java\\Visit Java.com.lnk" (normalized: "c:\\programdata\\microsoft\\windows\\start menu\\programs\\java\\visit java.com.lnk"), lpNewFileName="C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Java\\Visit Java.com.lnk" (normalized: "c:\\programdata\\microsoft\\windows\\start menu\\programs\\java\\visit java.com.lnk")) returned 1 [0064.444] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e6cc) returned 1 [0064.444] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Maintenance", nBufferLength=0x105, lpBuffer=0x31e1d4, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Maintenance", lpFilePart=0x0) returned 0x40 [0064.444] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Maintenance\\", nBufferLength=0x105, lpBuffer=0x31e1a8, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Maintenance\\", lpFilePart=0x0) returned 0x41 [0064.444] FindFirstFileW (in: lpFileName="C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Maintenance\\*", lpFindFileData=0x31e3f4 | out: lpFindFileData=0x31e3f4*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0xfd9dbcac, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x8ab46fc5, ftLastAccessTime.dwHighDateTime=0x1ca043f, ftLastWriteTime.dwLowDateTime=0x8ab6d126, ftLastWriteTime.dwHighDateTime=0x1ca043f, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5107b60 [0064.445] FindNextFileW (in: hFindFile=0x5107b60, lpFindFileData=0x31e404 | out: lpFindFileData=0x31e404*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0xfd9dbcac, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x8ab46fc5, ftLastAccessTime.dwHighDateTime=0x1ca043f, ftLastWriteTime.dwLowDateTime=0x8ab6d126, ftLastWriteTime.dwHighDateTime=0x1ca043f, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0064.445] FindNextFileW (in: hFindFile=0x5107b60, lpFindFileData=0x31e404 | out: lpFindFileData=0x31e404*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8a1030d3, ftCreationTime.dwHighDateTime=0x1ca043f, ftLastAccessTime.dwLowDateTime=0x8a1030d3, ftLastAccessTime.dwHighDateTime=0x1ca043f, ftLastWriteTime.dwLowDateTime=0x8a1030d3, ftLastWriteTime.dwHighDateTime=0x1ca043f, nFileSizeHigh=0x0, nFileSizeLow=0x518, dwReserved0=0x0, dwReserved1=0x0, cFileName="Backup and Restore Center.lnk", cAlternateFileName="BACKUP~1.LNK")) returned 1 [0064.445] FindNextFileW (in: hFindFile=0x5107b60, lpFindFileData=0x31e404 | out: lpFindFileData=0x31e404*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x89a77447, ftCreationTime.dwHighDateTime=0x1ca043f, ftLastAccessTime.dwLowDateTime=0x89a77447, ftLastAccessTime.dwHighDateTime=0x1ca043f, ftLastWriteTime.dwLowDateTime=0x89a77447, ftLastWriteTime.dwHighDateTime=0x1ca043f, nFileSizeHigh=0x0, nFileSizeLow=0x4e0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Create Recovery Disc.lnk", cAlternateFileName="CREATE~1.LNK")) returned 1 [0064.445] FindNextFileW (in: hFindFile=0x5107b60, lpFindFileData=0x31e404 | out: lpFindFileData=0x31e404*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0xec13fc0c, ftCreationTime.dwHighDateTime=0x1ca042b, ftLastAccessTime.dwLowDateTime=0xec13fc0c, ftLastAccessTime.dwHighDateTime=0x1ca042b, ftLastWriteTime.dwLowDateTime=0x8ab6d126, ftLastWriteTime.dwHighDateTime=0x1ca043f, nFileSizeHigh=0x0, nFileSizeLow=0x25e, dwReserved0=0x0, dwReserved1=0x0, cFileName="Desktop.ini", cAlternateFileName="")) returned 1 [0064.445] FindNextFileW (in: hFindFile=0x5107b60, lpFindFileData=0x31e404 | out: lpFindFileData=0x31e404*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8ab46fc5, ftCreationTime.dwHighDateTime=0x1ca043f, ftLastAccessTime.dwLowDateTime=0x8ab46fc5, ftLastAccessTime.dwHighDateTime=0x1ca043f, ftLastWriteTime.dwLowDateTime=0x8ab46fc5, ftLastWriteTime.dwHighDateTime=0x1ca043f, nFileSizeHigh=0x0, nFileSizeLow=0x4bc, dwReserved0=0x0, dwReserved1=0x0, cFileName="Remote Assistance.lnk", cAlternateFileName="REMOTE~1.LNK")) returned 1 [0064.445] FindNextFileW (in: hFindFile=0x5107b60, lpFindFileData=0x31e404 | out: lpFindFileData=0x31e404*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0064.446] FindClose (in: hFindFile=0x5107b60 | out: hFindFile=0x5107b60) returned 1 [0064.446] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e68c) returned 1 [0064.446] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e698) returned 1 [0064.446] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e6cc) returned 1 [0064.446] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Maintenance", nBufferLength=0x105, lpBuffer=0x31e1d4, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Maintenance", lpFilePart=0x0) returned 0x40 [0064.446] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Maintenance\\", nBufferLength=0x105, lpBuffer=0x31e1a8, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Maintenance\\", lpFilePart=0x0) returned 0x41 [0064.446] FindFirstFileW (in: lpFileName="C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Maintenance\\*", lpFindFileData=0x31e3f4 | out: lpFindFileData=0x31e3f4*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0xfd9dbcac, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x8ab46fc5, ftLastAccessTime.dwHighDateTime=0x1ca043f, ftLastWriteTime.dwLowDateTime=0x8ab6d126, ftLastWriteTime.dwHighDateTime=0x1ca043f, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5107b60 [0064.446] FindNextFileW (in: hFindFile=0x5107b60, lpFindFileData=0x31e404 | out: lpFindFileData=0x31e404*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0xfd9dbcac, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x8ab46fc5, ftLastAccessTime.dwHighDateTime=0x1ca043f, ftLastWriteTime.dwLowDateTime=0x8ab6d126, ftLastWriteTime.dwHighDateTime=0x1ca043f, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0064.446] FindNextFileW (in: hFindFile=0x5107b60, lpFindFileData=0x31e404 | out: lpFindFileData=0x31e404*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8a1030d3, ftCreationTime.dwHighDateTime=0x1ca043f, ftLastAccessTime.dwLowDateTime=0x8a1030d3, ftLastAccessTime.dwHighDateTime=0x1ca043f, ftLastWriteTime.dwLowDateTime=0x8a1030d3, ftLastWriteTime.dwHighDateTime=0x1ca043f, nFileSizeHigh=0x0, nFileSizeLow=0x518, dwReserved0=0x0, dwReserved1=0x0, cFileName="Backup and Restore Center.lnk", cAlternateFileName="BACKUP~1.LNK")) returned 1 [0064.446] FindNextFileW (in: hFindFile=0x5107b60, lpFindFileData=0x31e404 | out: lpFindFileData=0x31e404*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x89a77447, ftCreationTime.dwHighDateTime=0x1ca043f, ftLastAccessTime.dwLowDateTime=0x89a77447, ftLastAccessTime.dwHighDateTime=0x1ca043f, ftLastWriteTime.dwLowDateTime=0x89a77447, ftLastWriteTime.dwHighDateTime=0x1ca043f, nFileSizeHigh=0x0, nFileSizeLow=0x4e0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Create Recovery Disc.lnk", cAlternateFileName="CREATE~1.LNK")) returned 1 [0064.446] FindNextFileW (in: hFindFile=0x5107b60, lpFindFileData=0x31e404 | out: lpFindFileData=0x31e404*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0xec13fc0c, ftCreationTime.dwHighDateTime=0x1ca042b, ftLastAccessTime.dwLowDateTime=0xec13fc0c, ftLastAccessTime.dwHighDateTime=0x1ca042b, ftLastWriteTime.dwLowDateTime=0x8ab6d126, ftLastWriteTime.dwHighDateTime=0x1ca043f, nFileSizeHigh=0x0, nFileSizeLow=0x25e, dwReserved0=0x0, dwReserved1=0x0, cFileName="Desktop.ini", cAlternateFileName="")) returned 1 [0064.447] FindNextFileW (in: hFindFile=0x5107b60, lpFindFileData=0x31e404 | out: lpFindFileData=0x31e404*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8ab46fc5, ftCreationTime.dwHighDateTime=0x1ca043f, ftLastAccessTime.dwLowDateTime=0x8ab46fc5, ftLastAccessTime.dwHighDateTime=0x1ca043f, ftLastWriteTime.dwLowDateTime=0x8ab46fc5, ftLastWriteTime.dwHighDateTime=0x1ca043f, nFileSizeHigh=0x0, nFileSizeLow=0x4bc, dwReserved0=0x0, dwReserved1=0x0, cFileName="Remote Assistance.lnk", cAlternateFileName="REMOTE~1.LNK")) returned 1 [0064.447] FindNextFileW (in: hFindFile=0x5107b60, lpFindFileData=0x31e404 | out: lpFindFileData=0x31e404*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8ab46fc5, ftCreationTime.dwHighDateTime=0x1ca043f, ftLastAccessTime.dwLowDateTime=0x8ab46fc5, ftLastAccessTime.dwHighDateTime=0x1ca043f, ftLastWriteTime.dwLowDateTime=0x8ab46fc5, ftLastWriteTime.dwHighDateTime=0x1ca043f, nFileSizeHigh=0x0, nFileSizeLow=0x4bc, dwReserved0=0x0, dwReserved1=0x0, cFileName="Remote Assistance.lnk", cAlternateFileName="REMOTE~1.LNK")) returned 0 [0064.447] FindClose (in: hFindFile=0x5107b60 | out: hFindFile=0x5107b60) returned 1 [0064.447] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e68c) returned 1 [0064.447] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e698) returned 1 [0064.447] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Maintenance\\Backup and Restore Center.lnk", nBufferLength=0x105, lpBuffer=0x31e0a4, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Maintenance\\Backup and Restore Center.lnk", lpFilePart=0x0) returned 0x5e [0064.447] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e598) returned 1 [0064.447] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Maintenance\\Backup and Restore Center.lnk" (normalized: "c:\\programdata\\microsoft\\windows\\start menu\\programs\\maintenance\\backup and restore center.lnk"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x178 [0064.447] GetFileType (hFile=0x178) returned 0x1 [0064.448] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e594) returned 1 [0064.448] GetFileType (hFile=0x178) returned 0x1 [0064.448] GetFileSize (in: hFile=0x178, lpFileSizeHigh=0x31e6a0 | out: lpFileSizeHigh=0x31e6a0*=0x0) returned 0x518 [0064.448] ReadFile (in: hFile=0x178, lpBuffer=0x27901e8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x31e64c, lpOverlapped=0x0 | out: lpBuffer=0x27901e8*, lpNumberOfBytesRead=0x31e64c*=0x518, lpOverlapped=0x0) returned 1 [0064.463] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Maintenance\\Backup and Restore Center.lnk", nBufferLength=0x105, lpBuffer=0x31e090, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Maintenance\\Backup and Restore Center.lnk", lpFilePart=0x0) returned 0x5e [0064.463] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e584) returned 1 [0064.463] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Maintenance\\Backup and Restore Center.lnk" (normalized: "c:\\programdata\\microsoft\\windows\\start menu\\programs\\maintenance\\backup and restore center.lnk"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x178 [0064.464] GetFileType (hFile=0x178) returned 0x1 [0064.464] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e580) returned 1 [0064.465] GetFileType (hFile=0x178) returned 0x1 [0064.465] WriteFile (in: hFile=0x178, lpBuffer=0x27dfaf0*, nNumberOfBytesToWrite=0x520, lpNumberOfBytesWritten=0x31e614, lpOverlapped=0x0 | out: lpBuffer=0x27dfaf0*, lpNumberOfBytesWritten=0x31e614*=0x520, lpOverlapped=0x0) returned 1 [0064.466] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Maintenance\\Backup and Restore Center.lnk", nBufferLength=0x105, lpBuffer=0x31e1c4, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Maintenance\\Backup and Restore Center.lnk", lpFilePart=0x0) returned 0x5e [0064.466] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Maintenance\\Backup and Restore Center.lnk", nBufferLength=0x105, lpBuffer=0x31e1c4, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Maintenance\\Backup and Restore Center.lnk", lpFilePart=0x0) returned 0x5e [0064.466] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e624) returned 1 [0064.466] GetFileAttributesExW (in: lpFileName="C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Maintenance\\Backup and Restore Center.lnk" (normalized: "c:\\programdata\\microsoft\\windows\\start menu\\programs\\maintenance\\backup and restore center.lnk"), fInfoLevelId=0x0, lpFileInformation=0x31e6a0 | out: lpFileInformation=0x31e6a0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8a1030d3, ftCreationTime.dwHighDateTime=0x1ca043f, ftLastAccessTime.dwLowDateTime=0x8a1030d3, ftLastAccessTime.dwHighDateTime=0x1ca043f, ftLastWriteTime.dwLowDateTime=0x9de5520, ftLastWriteTime.dwHighDateTime=0x1d6eb7f, nFileSizeHigh=0x0, nFileSizeLow=0x520)) returned 1 [0064.466] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e620) returned 1 [0064.467] MoveFileW (lpExistingFileName="C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Maintenance\\Backup and Restore Center.lnk" (normalized: "c:\\programdata\\microsoft\\windows\\start menu\\programs\\maintenance\\backup and restore center.lnk"), lpNewFileName="C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Maintenance\\Backup and Restore Center.lnk" (normalized: "c:\\programdata\\microsoft\\windows\\start menu\\programs\\maintenance\\backup and restore center.lnk")) returned 1 [0064.467] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Maintenance\\Create Recovery Disc.lnk", nBufferLength=0x105, lpBuffer=0x31e0a4, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Maintenance\\Create Recovery Disc.lnk", lpFilePart=0x0) returned 0x59 [0064.467] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e598) returned 1 [0064.467] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Maintenance\\Create Recovery Disc.lnk" (normalized: "c:\\programdata\\microsoft\\windows\\start menu\\programs\\maintenance\\create recovery disc.lnk"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x178 [0064.467] GetFileType (hFile=0x178) returned 0x1 [0064.468] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e594) returned 1 [0064.468] GetFileType (hFile=0x178) returned 0x1 [0064.468] GetFileSize (in: hFile=0x178, lpFileSizeHigh=0x31e6a0 | out: lpFileSizeHigh=0x31e6a0*=0x0) returned 0x4e0 [0064.468] ReadFile (in: hFile=0x178, lpBuffer=0x27e12f4, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x31e64c, lpOverlapped=0x0 | out: lpBuffer=0x27e12f4*, lpNumberOfBytesRead=0x31e64c*=0x4e0, lpOverlapped=0x0) returned 1 [0064.482] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Maintenance\\Create Recovery Disc.lnk", nBufferLength=0x105, lpBuffer=0x31e090, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Maintenance\\Create Recovery Disc.lnk", lpFilePart=0x0) returned 0x59 [0064.482] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e584) returned 1 [0064.482] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Maintenance\\Create Recovery Disc.lnk" (normalized: "c:\\programdata\\microsoft\\windows\\start menu\\programs\\maintenance\\create recovery disc.lnk"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x178 [0064.483] GetFileType (hFile=0x178) returned 0x1 [0064.483] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e580) returned 1 [0064.483] GetFileType (hFile=0x178) returned 0x1 [0064.483] WriteFile (in: hFile=0x178, lpBuffer=0x2830b00*, nNumberOfBytesToWrite=0x4f0, lpNumberOfBytesWritten=0x31e614, lpOverlapped=0x0 | out: lpBuffer=0x2830b00*, lpNumberOfBytesWritten=0x31e614*=0x4f0, lpOverlapped=0x0) returned 1 [0064.484] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Maintenance\\Create Recovery Disc.lnk", nBufferLength=0x105, lpBuffer=0x31e1c4, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Maintenance\\Create Recovery Disc.lnk", lpFilePart=0x0) returned 0x59 [0064.484] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Maintenance\\Create Recovery Disc.lnk", nBufferLength=0x105, lpBuffer=0x31e1c4, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Maintenance\\Create Recovery Disc.lnk", lpFilePart=0x0) returned 0x59 [0064.484] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e624) returned 1 [0064.484] GetFileAttributesExW (in: lpFileName="C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Maintenance\\Create Recovery Disc.lnk" (normalized: "c:\\programdata\\microsoft\\windows\\start menu\\programs\\maintenance\\create recovery disc.lnk"), fInfoLevelId=0x0, lpFileInformation=0x31e6a0 | out: lpFileInformation=0x31e6a0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x89a77447, ftCreationTime.dwHighDateTime=0x1ca043f, ftLastAccessTime.dwLowDateTime=0x89a77447, ftLastAccessTime.dwHighDateTime=0x1ca043f, ftLastWriteTime.dwLowDateTime=0x9e0b680, ftLastWriteTime.dwHighDateTime=0x1d6eb7f, nFileSizeHigh=0x0, nFileSizeLow=0x4f0)) returned 1 [0064.485] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e620) returned 1 [0064.485] MoveFileW (lpExistingFileName="C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Maintenance\\Create Recovery Disc.lnk" (normalized: "c:\\programdata\\microsoft\\windows\\start menu\\programs\\maintenance\\create recovery disc.lnk"), lpNewFileName="C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Maintenance\\Create Recovery Disc.lnk" (normalized: "c:\\programdata\\microsoft\\windows\\start menu\\programs\\maintenance\\create recovery disc.lnk")) returned 1 [0064.485] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Maintenance\\Remote Assistance.lnk", nBufferLength=0x105, lpBuffer=0x31e0a4, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Maintenance\\Remote Assistance.lnk", lpFilePart=0x0) returned 0x56 [0064.485] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e598) returned 1 [0064.485] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Maintenance\\Remote Assistance.lnk" (normalized: "c:\\programdata\\microsoft\\windows\\start menu\\programs\\maintenance\\remote assistance.lnk"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x178 [0064.486] GetFileType (hFile=0x178) returned 0x1 [0064.486] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e594) returned 1 [0064.486] GetFileType (hFile=0x178) returned 0x1 [0064.486] GetFileSize (in: hFile=0x178, lpFileSizeHigh=0x31e6a0 | out: lpFileSizeHigh=0x31e6a0*=0x0) returned 0x4bc [0064.486] ReadFile (in: hFile=0x178, lpBuffer=0x28322d4, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x31e64c, lpOverlapped=0x0 | out: lpBuffer=0x28322d4*, lpNumberOfBytesRead=0x31e64c*=0x4bc, lpOverlapped=0x0) returned 1 [0064.529] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Maintenance\\Remote Assistance.lnk", nBufferLength=0x105, lpBuffer=0x31e090, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Maintenance\\Remote Assistance.lnk", lpFilePart=0x0) returned 0x56 [0064.530] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e584) returned 1 [0064.530] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Maintenance\\Remote Assistance.lnk" (normalized: "c:\\programdata\\microsoft\\windows\\start menu\\programs\\maintenance\\remote assistance.lnk"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x178 [0064.531] GetFileType (hFile=0x178) returned 0x1 [0064.531] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e580) returned 1 [0064.531] GetFileType (hFile=0x178) returned 0x1 [0064.531] WriteFile (in: hFile=0x178, lpBuffer=0x26836cc*, nNumberOfBytesToWrite=0x4c0, lpNumberOfBytesWritten=0x31e614, lpOverlapped=0x0 | out: lpBuffer=0x26836cc*, lpNumberOfBytesWritten=0x31e614*=0x4c0, lpOverlapped=0x0) returned 1 [0064.532] CloseHandle (hObject=0x178) returned 1 [0064.532] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Maintenance\\Remote Assistance.lnk", nBufferLength=0x105, lpBuffer=0x31e1c4, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Maintenance\\Remote Assistance.lnk", lpFilePart=0x0) returned 0x56 [0064.532] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Maintenance\\Remote Assistance.lnk", nBufferLength=0x105, lpBuffer=0x31e1c4, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Maintenance\\Remote Assistance.lnk", lpFilePart=0x0) returned 0x56 [0064.532] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e624) returned 1 [0064.532] GetFileAttributesExW (in: lpFileName="C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Maintenance\\Remote Assistance.lnk" (normalized: "c:\\programdata\\microsoft\\windows\\start menu\\programs\\maintenance\\remote assistance.lnk"), fInfoLevelId=0x0, lpFileInformation=0x31e6a0 | out: lpFileInformation=0x31e6a0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8ab46fc5, ftCreationTime.dwHighDateTime=0x1ca043f, ftLastAccessTime.dwLowDateTime=0x8ab46fc5, ftLastAccessTime.dwHighDateTime=0x1ca043f, ftLastWriteTime.dwLowDateTime=0x9e7daa0, ftLastWriteTime.dwHighDateTime=0x1d6eb7f, nFileSizeHigh=0x0, nFileSizeLow=0x4c0)) returned 1 [0064.532] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e620) returned 1 [0064.532] MoveFileW (lpExistingFileName="C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Maintenance\\Remote Assistance.lnk" (normalized: "c:\\programdata\\microsoft\\windows\\start menu\\programs\\maintenance\\remote assistance.lnk"), lpNewFileName="C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Maintenance\\Remote Assistance.lnk" (normalized: "c:\\programdata\\microsoft\\windows\\start menu\\programs\\maintenance\\remote assistance.lnk")) returned 1 [0064.533] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e6cc) returned 1 [0064.533] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Microsoft Office", nBufferLength=0x105, lpBuffer=0x31e1d4, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Microsoft Office", lpFilePart=0x0) returned 0x45 [0064.533] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Microsoft Office\\", nBufferLength=0x105, lpBuffer=0x31e1a8, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Microsoft Office\\", lpFilePart=0x0) returned 0x46 [0064.533] FindFirstFileW (in: lpFileName="C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Microsoft Office\\*", lpFindFileData=0x31e3f4 | out: lpFindFileData=0x31e3f4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x77f53bd0, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0xc11c60a0, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0xc11c60a0, ftLastWriteTime.dwHighDateTime=0x1d305f1, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5107960 [0064.533] FindNextFileW (in: hFindFile=0x5107960, lpFindFileData=0x31e404 | out: lpFindFileData=0x31e404*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x77f53bd0, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0xc11c60a0, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0xc11c60a0, ftLastWriteTime.dwHighDateTime=0x1d305f1, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0064.533] FindNextFileW (in: hFindFile=0x5107960, lpFindFileData=0x31e404 | out: lpFindFileData=0x31e404*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x780122b0, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x780122b0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x78038410, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0xb67, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft Access 2010.lnk", cAlternateFileName="MICROS~1.LNK")) returned 1 [0064.533] FindNextFileW (in: hFindFile=0x5107960, lpFindFileData=0x31e404 | out: lpFindFileData=0x31e404*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x78038410, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x78038410, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x78038410, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0xb87, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft Excel 2010.lnk", cAlternateFileName="MICROS~2.LNK")) returned 1 [0064.534] FindNextFileW (in: hFindFile=0x5107960, lpFindFileData=0x31e404 | out: lpFindFileData=0x31e404*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7805e570, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x7805e570, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x7805e570, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0xbe2, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft InfoPath Designer 2010.lnk", cAlternateFileName="MIA4FF~1.LNK")) returned 1 [0064.534] FindNextFileW (in: hFindFile=0x5107960, lpFindFileData=0x31e404 | out: lpFindFileData=0x31e404*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7805e570, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x7805e570, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x7805e570, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0xbd2, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft InfoPath Filler 2010.lnk", cAlternateFileName="MICROS~4.LNK")) returned 1 [0064.534] FindNextFileW (in: hFindFile=0x5107960, lpFindFileData=0x31e404 | out: lpFindFileData=0x31e404*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x77f53bd0, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0xc11c60a0, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0xc11c60a0, ftLastWriteTime.dwHighDateTime=0x1d305f1, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft Office 2010 Tools", cAlternateFileName="MICROS~1")) returned 1 [0064.534] FindNextFileW (in: hFindFile=0x5107960, lpFindFileData=0x31e404 | out: lpFindFileData=0x31e404*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7805e570, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x780846d0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x780846d0, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0xb3f, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft OneNote 2010.lnk", cAlternateFileName="MI807F~1.LNK")) returned 1 [0064.534] FindNextFileW (in: hFindFile=0x5107960, lpFindFileData=0x31e404 | out: lpFindFileData=0x31e404*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x780846d0, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x780846d0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x780846d0, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0xbd5, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft Outlook 2010.lnk", cAlternateFileName="MI4465~1.LNK")) returned 1 [0064.534] FindNextFileW (in: hFindFile=0x5107960, lpFindFileData=0x31e404 | out: lpFindFileData=0x31e404*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x780846d0, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x780846d0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x780846d0, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0xb79, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft PowerPoint 2010.lnk", cAlternateFileName="MIAF79~1.LNK")) returned 1 [0064.534] FindNextFileW (in: hFindFile=0x5107960, lpFindFileData=0x31e404 | out: lpFindFileData=0x31e404*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc11c60a0, ftCreationTime.dwHighDateTime=0x1d305f1, ftLastAccessTime.dwLowDateTime=0xc11c60a0, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0xc11c60a0, ftLastWriteTime.dwHighDateTime=0x1d305f1, nFileSizeHigh=0x0, nFileSizeLow=0xb77, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft Project 2010.lnk", cAlternateFileName="MI6860~1.LNK")) returned 1 [0064.535] FindNextFileW (in: hFindFile=0x5107960, lpFindFileData=0x31e404 | out: lpFindFileData=0x31e404*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x780846d0, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x780846d0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x780846d0, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0xbe1, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft Publisher 2010.lnk", cAlternateFileName="MI260D~1.LNK")) returned 1 [0064.535] FindNextFileW (in: hFindFile=0x5107960, lpFindFileData=0x31e404 | out: lpFindFileData=0x31e404*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x78038410, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x78038410, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x78038410, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0xbef, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft SharePoint Workspace 2010.lnk", cAlternateFileName="MICROS~3.LNK")) returned 1 [0064.535] FindNextFileW (in: hFindFile=0x5107960, lpFindFileData=0x31e404 | out: lpFindFileData=0x31e404*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8735be00, ftCreationTime.dwHighDateTime=0x1d305eb, ftLastAccessTime.dwLowDateTime=0x8735be00, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0x87381f60, ftLastWriteTime.dwHighDateTime=0x1d305eb, nFileSizeHigh=0x0, nFileSizeLow=0xacf, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft Visio 2010.lnk", cAlternateFileName="MI7E65~1.LNK")) returned 1 [0064.535] FindNextFileW (in: hFindFile=0x5107960, lpFindFileData=0x31e404 | out: lpFindFileData=0x31e404*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x780aa830, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x780aa830, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x780aa830, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0xbcd, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft Word 2010.lnk", cAlternateFileName="MI109D~1.LNK")) returned 1 [0064.535] FindNextFileW (in: hFindFile=0x5107960, lpFindFileData=0x31e404 | out: lpFindFileData=0x31e404*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0064.535] FindClose (in: hFindFile=0x5107960 | out: hFindFile=0x5107960) returned 1 [0064.535] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e68c) returned 1 [0064.535] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e698) returned 1 [0064.535] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e6cc) returned 1 [0064.535] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Microsoft Office", nBufferLength=0x105, lpBuffer=0x31e1d4, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Microsoft Office", lpFilePart=0x0) returned 0x45 [0064.535] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Microsoft Office\\", nBufferLength=0x105, lpBuffer=0x31e1a8, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Microsoft Office\\", lpFilePart=0x0) returned 0x46 [0064.536] FindFirstFileW (in: lpFileName="C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Microsoft Office\\*", lpFindFileData=0x31e3f4 | out: lpFindFileData=0x31e3f4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x77f53bd0, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0xc11c60a0, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0xc11c60a0, ftLastWriteTime.dwHighDateTime=0x1d305f1, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5107960 [0064.536] FindNextFileW (in: hFindFile=0x5107960, lpFindFileData=0x31e404 | out: lpFindFileData=0x31e404*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x77f53bd0, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0xc11c60a0, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0xc11c60a0, ftLastWriteTime.dwHighDateTime=0x1d305f1, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0064.536] FindNextFileW (in: hFindFile=0x5107960, lpFindFileData=0x31e404 | out: lpFindFileData=0x31e404*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x780122b0, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x780122b0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x78038410, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0xb67, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft Access 2010.lnk", cAlternateFileName="MICROS~1.LNK")) returned 1 [0064.536] FindNextFileW (in: hFindFile=0x5107960, lpFindFileData=0x31e404 | out: lpFindFileData=0x31e404*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x78038410, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x78038410, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x78038410, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0xb87, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft Excel 2010.lnk", cAlternateFileName="MICROS~2.LNK")) returned 1 [0064.536] FindNextFileW (in: hFindFile=0x5107960, lpFindFileData=0x31e404 | out: lpFindFileData=0x31e404*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7805e570, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x7805e570, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x7805e570, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0xbe2, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft InfoPath Designer 2010.lnk", cAlternateFileName="MIA4FF~1.LNK")) returned 1 [0064.536] FindNextFileW (in: hFindFile=0x5107960, lpFindFileData=0x31e404 | out: lpFindFileData=0x31e404*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7805e570, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x7805e570, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x7805e570, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0xbd2, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft InfoPath Filler 2010.lnk", cAlternateFileName="MICROS~4.LNK")) returned 1 [0064.537] FindNextFileW (in: hFindFile=0x5107960, lpFindFileData=0x31e404 | out: lpFindFileData=0x31e404*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x77f53bd0, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0xc11c60a0, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0xc11c60a0, ftLastWriteTime.dwHighDateTime=0x1d305f1, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft Office 2010 Tools", cAlternateFileName="MICROS~1")) returned 1 [0064.537] FindNextFileW (in: hFindFile=0x5107960, lpFindFileData=0x31e404 | out: lpFindFileData=0x31e404*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7805e570, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x780846d0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x780846d0, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0xb3f, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft OneNote 2010.lnk", cAlternateFileName="MI807F~1.LNK")) returned 1 [0064.537] FindNextFileW (in: hFindFile=0x5107960, lpFindFileData=0x31e404 | out: lpFindFileData=0x31e404*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x780846d0, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x780846d0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x780846d0, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0xbd5, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft Outlook 2010.lnk", cAlternateFileName="MI4465~1.LNK")) returned 1 [0064.537] FindNextFileW (in: hFindFile=0x5107960, lpFindFileData=0x31e404 | out: lpFindFileData=0x31e404*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x780846d0, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x780846d0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x780846d0, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0xb79, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft PowerPoint 2010.lnk", cAlternateFileName="MIAF79~1.LNK")) returned 1 [0064.537] FindNextFileW (in: hFindFile=0x5107960, lpFindFileData=0x31e404 | out: lpFindFileData=0x31e404*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc11c60a0, ftCreationTime.dwHighDateTime=0x1d305f1, ftLastAccessTime.dwLowDateTime=0xc11c60a0, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0xc11c60a0, ftLastWriteTime.dwHighDateTime=0x1d305f1, nFileSizeHigh=0x0, nFileSizeLow=0xb77, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft Project 2010.lnk", cAlternateFileName="MI6860~1.LNK")) returned 1 [0064.537] FindNextFileW (in: hFindFile=0x5107960, lpFindFileData=0x31e404 | out: lpFindFileData=0x31e404*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x780846d0, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x780846d0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x780846d0, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0xbe1, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft Publisher 2010.lnk", cAlternateFileName="MI260D~1.LNK")) returned 1 [0064.538] FindNextFileW (in: hFindFile=0x5107960, lpFindFileData=0x31e404 | out: lpFindFileData=0x31e404*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x78038410, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x78038410, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x78038410, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0xbef, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft SharePoint Workspace 2010.lnk", cAlternateFileName="MICROS~3.LNK")) returned 1 [0064.538] FindNextFileW (in: hFindFile=0x5107960, lpFindFileData=0x31e404 | out: lpFindFileData=0x31e404*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8735be00, ftCreationTime.dwHighDateTime=0x1d305eb, ftLastAccessTime.dwLowDateTime=0x8735be00, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0x87381f60, ftLastWriteTime.dwHighDateTime=0x1d305eb, nFileSizeHigh=0x0, nFileSizeLow=0xacf, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft Visio 2010.lnk", cAlternateFileName="MI7E65~1.LNK")) returned 1 [0064.538] FindNextFileW (in: hFindFile=0x5107960, lpFindFileData=0x31e404 | out: lpFindFileData=0x31e404*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x780aa830, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x780aa830, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x780aa830, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0xbcd, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft Word 2010.lnk", cAlternateFileName="MI109D~1.LNK")) returned 1 [0064.538] FindNextFileW (in: hFindFile=0x5107960, lpFindFileData=0x31e404 | out: lpFindFileData=0x31e404*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x780aa830, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x780aa830, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x780aa830, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0xbcd, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft Word 2010.lnk", cAlternateFileName="MI109D~1.LNK")) returned 0 [0064.538] FindClose (in: hFindFile=0x5107960 | out: hFindFile=0x5107960) returned 1 [0064.538] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e68c) returned 1 [0064.538] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e698) returned 1 [0064.538] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Microsoft Office\\Microsoft Access 2010.lnk", nBufferLength=0x105, lpBuffer=0x31e0a4, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Microsoft Office\\Microsoft Access 2010.lnk", lpFilePart=0x0) returned 0x5f [0064.538] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e598) returned 1 [0064.538] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Microsoft Office\\Microsoft Access 2010.lnk" (normalized: "c:\\programdata\\microsoft\\windows\\start menu\\programs\\microsoft office\\microsoft access 2010.lnk"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x178 [0064.539] GetFileType (hFile=0x178) returned 0x1 [0064.539] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e594) returned 1 [0064.539] GetFileType (hFile=0x178) returned 0x1 [0064.539] GetFileSize (in: hFile=0x178, lpFileSizeHigh=0x31e6a0 | out: lpFileSizeHigh=0x31e6a0*=0x0) returned 0xb67 [0064.539] ReadFile (in: hFile=0x178, lpBuffer=0x268a768, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x31e64c, lpOverlapped=0x0 | out: lpBuffer=0x268a768*, lpNumberOfBytesRead=0x31e64c*=0xb67, lpOverlapped=0x0) returned 1 [0064.541] CloseHandle (hObject=0x178) returned 1 [0064.553] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Microsoft Office\\Microsoft Access 2010.lnk", nBufferLength=0x105, lpBuffer=0x31e090, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Microsoft Office\\Microsoft Access 2010.lnk", lpFilePart=0x0) returned 0x5f [0064.553] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e584) returned 1 [0064.553] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Microsoft Office\\Microsoft Access 2010.lnk" (normalized: "c:\\programdata\\microsoft\\windows\\start menu\\programs\\microsoft office\\microsoft access 2010.lnk"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x178 [0064.555] GetFileType (hFile=0x178) returned 0x1 [0064.555] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e580) returned 1 [0064.555] GetFileType (hFile=0x178) returned 0x1 [0064.555] WriteFile (in: hFile=0x178, lpBuffer=0x26dc158*, nNumberOfBytesToWrite=0xb70, lpNumberOfBytesWritten=0x31e614, lpOverlapped=0x0 | out: lpBuffer=0x26dc158*, lpNumberOfBytesWritten=0x31e614*=0xb70, lpOverlapped=0x0) returned 1 [0064.556] CloseHandle (hObject=0x178) returned 1 [0064.556] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Microsoft Office\\Microsoft Access 2010.lnk", nBufferLength=0x105, lpBuffer=0x31e1c4, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Microsoft Office\\Microsoft Access 2010.lnk", lpFilePart=0x0) returned 0x5f [0064.556] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Microsoft Office\\Microsoft Access 2010.lnk", nBufferLength=0x105, lpBuffer=0x31e1c4, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Microsoft Office\\Microsoft Access 2010.lnk", lpFilePart=0x0) returned 0x5f [0064.556] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e624) returned 1 [0064.556] GetFileAttributesExW (in: lpFileName="C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Microsoft Office\\Microsoft Access 2010.lnk" (normalized: "c:\\programdata\\microsoft\\windows\\start menu\\programs\\microsoft office\\microsoft access 2010.lnk"), fInfoLevelId=0x0, lpFileInformation=0x31e6a0 | out: lpFileInformation=0x31e6a0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x780122b0, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x780122b0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x9ec9d60, ftLastWriteTime.dwHighDateTime=0x1d6eb7f, nFileSizeHigh=0x0, nFileSizeLow=0xb70)) returned 1 [0064.556] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e620) returned 1 [0064.556] MoveFileW (lpExistingFileName="C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Microsoft Office\\Microsoft Access 2010.lnk" (normalized: "c:\\programdata\\microsoft\\windows\\start menu\\programs\\microsoft office\\microsoft access 2010.lnk"), lpNewFileName="C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Microsoft Office\\Microsoft Access 2010.lnk" (normalized: "c:\\programdata\\microsoft\\windows\\start menu\\programs\\microsoft office\\microsoft access 2010.lnk")) returned 1 [0064.557] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Microsoft Office\\Microsoft Excel 2010.lnk", nBufferLength=0x105, lpBuffer=0x31e0a4, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Microsoft Office\\Microsoft Excel 2010.lnk", lpFilePart=0x0) returned 0x5e [0064.557] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e598) returned 1 [0064.557] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Microsoft Office\\Microsoft Excel 2010.lnk" (normalized: "c:\\programdata\\microsoft\\windows\\start menu\\programs\\microsoft office\\microsoft excel 2010.lnk"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x178 [0064.557] GetFileType (hFile=0x178) returned 0x1 [0064.557] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e594) returned 1 [0064.557] GetFileType (hFile=0x178) returned 0x1 [0064.557] GetFileSize (in: hFile=0x178, lpFileSizeHigh=0x31e6a0 | out: lpFileSizeHigh=0x31e6a0*=0x0) returned 0xb87 [0064.557] ReadFile (in: hFile=0x178, lpBuffer=0x26de010, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x31e64c, lpOverlapped=0x0 | out: lpBuffer=0x26de010*, lpNumberOfBytesRead=0x31e64c*=0xb87, lpOverlapped=0x0) returned 1 [0064.559] CloseHandle (hObject=0x178) returned 1 [0064.572] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Microsoft Office\\Microsoft Excel 2010.lnk", nBufferLength=0x105, lpBuffer=0x31e090, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Microsoft Office\\Microsoft Excel 2010.lnk", lpFilePart=0x0) returned 0x5e [0064.572] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e584) returned 1 [0064.572] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Microsoft Office\\Microsoft Excel 2010.lnk" (normalized: "c:\\programdata\\microsoft\\windows\\start menu\\programs\\microsoft office\\microsoft excel 2010.lnk"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x178 [0064.573] GetFileType (hFile=0x178) returned 0x1 [0064.573] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e580) returned 1 [0064.573] GetFileType (hFile=0x178) returned 0x1 [0064.573] WriteFile (in: hFile=0x178, lpBuffer=0x272f944*, nNumberOfBytesToWrite=0xb90, lpNumberOfBytesWritten=0x31e614, lpOverlapped=0x0 | out: lpBuffer=0x272f944*, lpNumberOfBytesWritten=0x31e614*=0xb90, lpOverlapped=0x0) returned 1 [0064.574] CloseHandle (hObject=0x178) returned 1 [0064.574] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Microsoft Office\\Microsoft Excel 2010.lnk", nBufferLength=0x105, lpBuffer=0x31e1c4, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Microsoft Office\\Microsoft Excel 2010.lnk", lpFilePart=0x0) returned 0x5e [0064.574] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Microsoft Office\\Microsoft Excel 2010.lnk", nBufferLength=0x105, lpBuffer=0x31e1c4, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Microsoft Office\\Microsoft Excel 2010.lnk", lpFilePart=0x0) returned 0x5e [0064.574] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e624) returned 1 [0064.574] GetFileAttributesExW (in: lpFileName="C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Microsoft Office\\Microsoft Excel 2010.lnk" (normalized: "c:\\programdata\\microsoft\\windows\\start menu\\programs\\microsoft office\\microsoft excel 2010.lnk"), fInfoLevelId=0x0, lpFileInformation=0x31e6a0 | out: lpFileInformation=0x31e6a0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x78038410, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x78038410, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x9eefec0, ftLastWriteTime.dwHighDateTime=0x1d6eb7f, nFileSizeHigh=0x0, nFileSizeLow=0xb90)) returned 1 [0064.574] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e620) returned 1 [0064.574] MoveFileW (lpExistingFileName="C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Microsoft Office\\Microsoft Excel 2010.lnk" (normalized: "c:\\programdata\\microsoft\\windows\\start menu\\programs\\microsoft office\\microsoft excel 2010.lnk"), lpNewFileName="C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Microsoft Office\\Microsoft Excel 2010.lnk" (normalized: "c:\\programdata\\microsoft\\windows\\start menu\\programs\\microsoft office\\microsoft excel 2010.lnk")) returned 1 [0064.575] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Microsoft Office\\Microsoft InfoPath Designer 2010.lnk", nBufferLength=0x105, lpBuffer=0x31e0a4, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Microsoft Office\\Microsoft InfoPath Designer 2010.lnk", lpFilePart=0x0) returned 0x6a [0064.575] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e598) returned 1 [0064.575] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Microsoft Office\\Microsoft InfoPath Designer 2010.lnk" (normalized: "c:\\programdata\\microsoft\\windows\\start menu\\programs\\microsoft office\\microsoft infopath designer 2010.lnk"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x178 [0064.575] GetFileType (hFile=0x178) returned 0x1 [0064.575] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e594) returned 1 [0064.575] GetFileType (hFile=0x178) returned 0x1 [0064.575] GetFileSize (in: hFile=0x178, lpFileSizeHigh=0x31e6a0 | out: lpFileSizeHigh=0x31e6a0*=0x0) returned 0xbe2 [0064.575] ReadFile (in: hFile=0x178, lpBuffer=0x2731888, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x31e64c, lpOverlapped=0x0 | out: lpBuffer=0x2731888*, lpNumberOfBytesRead=0x31e64c*=0xbe2, lpOverlapped=0x0) returned 1 [0064.577] CloseHandle (hObject=0x178) returned 1 [0064.589] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Microsoft Office\\Microsoft InfoPath Designer 2010.lnk", nBufferLength=0x105, lpBuffer=0x31e090, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Microsoft Office\\Microsoft InfoPath Designer 2010.lnk", lpFilePart=0x0) returned 0x6a [0064.589] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e584) returned 1 [0064.590] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Microsoft Office\\Microsoft InfoPath Designer 2010.lnk" (normalized: "c:\\programdata\\microsoft\\windows\\start menu\\programs\\microsoft office\\microsoft infopath designer 2010.lnk"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x178 [0064.590] GetFileType (hFile=0x178) returned 0x1 [0064.591] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e580) returned 1 [0064.591] GetFileType (hFile=0x178) returned 0x1 [0064.591] WriteFile (in: hFile=0x178, lpBuffer=0x27833d0*, nNumberOfBytesToWrite=0xbf0, lpNumberOfBytesWritten=0x31e614, lpOverlapped=0x0 | out: lpBuffer=0x27833d0*, lpNumberOfBytesWritten=0x31e614*=0xbf0, lpOverlapped=0x0) returned 1 [0064.592] CloseHandle (hObject=0x178) returned 1 [0064.592] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Microsoft Office\\Microsoft InfoPath Designer 2010.lnk", nBufferLength=0x105, lpBuffer=0x31e1c4, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Microsoft Office\\Microsoft InfoPath Designer 2010.lnk", lpFilePart=0x0) returned 0x6a [0064.592] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Microsoft Office\\Microsoft InfoPath Designer 2010.lnk", nBufferLength=0x105, lpBuffer=0x31e1c4, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Microsoft Office\\Microsoft InfoPath Designer 2010.lnk", lpFilePart=0x0) returned 0x6a [0064.592] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e624) returned 1 [0064.592] GetFileAttributesExW (in: lpFileName="C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Microsoft Office\\Microsoft InfoPath Designer 2010.lnk" (normalized: "c:\\programdata\\microsoft\\windows\\start menu\\programs\\microsoft office\\microsoft infopath designer 2010.lnk"), fInfoLevelId=0x0, lpFileInformation=0x31e6a0 | out: lpFileInformation=0x31e6a0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7805e570, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x7805e570, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x9f16020, ftLastWriteTime.dwHighDateTime=0x1d6eb7f, nFileSizeHigh=0x0, nFileSizeLow=0xbf0)) returned 1 [0064.592] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e620) returned 1 [0064.592] MoveFileW (lpExistingFileName="C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Microsoft Office\\Microsoft InfoPath Designer 2010.lnk" (normalized: "c:\\programdata\\microsoft\\windows\\start menu\\programs\\microsoft office\\microsoft infopath designer 2010.lnk"), lpNewFileName="C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Microsoft Office\\Microsoft InfoPath Designer 2010.lnk" (normalized: "c:\\programdata\\microsoft\\windows\\start menu\\programs\\microsoft office\\microsoft infopath designer 2010.lnk")) returned 1 [0064.593] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Microsoft Office\\Microsoft InfoPath Filler 2010.lnk", nBufferLength=0x105, lpBuffer=0x31e0a4, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Microsoft Office\\Microsoft InfoPath Filler 2010.lnk", lpFilePart=0x0) returned 0x68 [0064.593] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e598) returned 1 [0064.593] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Microsoft Office\\Microsoft InfoPath Filler 2010.lnk" (normalized: "c:\\programdata\\microsoft\\windows\\start menu\\programs\\microsoft office\\microsoft infopath filler 2010.lnk"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x178 [0064.593] GetFileType (hFile=0x178) returned 0x1 [0064.593] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e594) returned 1 [0064.593] GetFileType (hFile=0x178) returned 0x1 [0064.593] GetFileSize (in: hFile=0x178, lpFileSizeHigh=0x31e6a0 | out: lpFileSizeHigh=0x31e6a0*=0x0) returned 0xbd2 [0064.593] ReadFile (in: hFile=0x178, lpBuffer=0x278532c, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x31e64c, lpOverlapped=0x0 | out: lpBuffer=0x278532c*, lpNumberOfBytesRead=0x31e64c*=0xbd2, lpOverlapped=0x0) returned 1 [0064.595] CloseHandle (hObject=0x178) returned 1 [0064.608] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Microsoft Office\\Microsoft InfoPath Filler 2010.lnk", nBufferLength=0x105, lpBuffer=0x31e090, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Microsoft Office\\Microsoft InfoPath Filler 2010.lnk", lpFilePart=0x0) returned 0x68 [0064.608] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e584) returned 1 [0064.608] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Microsoft Office\\Microsoft InfoPath Filler 2010.lnk" (normalized: "c:\\programdata\\microsoft\\windows\\start menu\\programs\\microsoft office\\microsoft infopath filler 2010.lnk"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x178 [0064.608] GetFileType (hFile=0x178) returned 0x1 [0064.608] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e580) returned 1 [0064.608] GetFileType (hFile=0x178) returned 0x1 [0064.609] WriteFile (in: hFile=0x178, lpBuffer=0x27d6e1c*, nNumberOfBytesToWrite=0xbe0, lpNumberOfBytesWritten=0x31e614, lpOverlapped=0x0 | out: lpBuffer=0x27d6e1c*, lpNumberOfBytesWritten=0x31e614*=0xbe0, lpOverlapped=0x0) returned 1 [0064.609] CloseHandle (hObject=0x178) returned 1 [0064.610] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Microsoft Office\\Microsoft InfoPath Filler 2010.lnk", nBufferLength=0x105, lpBuffer=0x31e1c4, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Microsoft Office\\Microsoft InfoPath Filler 2010.lnk", lpFilePart=0x0) returned 0x68 [0064.610] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Microsoft Office\\Microsoft InfoPath Filler 2010.lnk", nBufferLength=0x105, lpBuffer=0x31e1c4, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Microsoft Office\\Microsoft InfoPath Filler 2010.lnk", lpFilePart=0x0) returned 0x68 [0064.610] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e624) returned 1 [0064.610] GetFileAttributesExW (in: lpFileName="C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Microsoft Office\\Microsoft InfoPath Filler 2010.lnk" (normalized: "c:\\programdata\\microsoft\\windows\\start menu\\programs\\microsoft office\\microsoft infopath filler 2010.lnk"), fInfoLevelId=0x0, lpFileInformation=0x31e6a0 | out: lpFileInformation=0x31e6a0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7805e570, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x7805e570, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x9f3c180, ftLastWriteTime.dwHighDateTime=0x1d6eb7f, nFileSizeHigh=0x0, nFileSizeLow=0xbe0)) returned 1 [0064.610] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e620) returned 1 [0064.610] MoveFileW (lpExistingFileName="C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Microsoft Office\\Microsoft InfoPath Filler 2010.lnk" (normalized: "c:\\programdata\\microsoft\\windows\\start menu\\programs\\microsoft office\\microsoft infopath filler 2010.lnk"), lpNewFileName="C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Microsoft Office\\Microsoft InfoPath Filler 2010.lnk" (normalized: "c:\\programdata\\microsoft\\windows\\start menu\\programs\\microsoft office\\microsoft infopath filler 2010.lnk")) returned 1 [0064.610] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Microsoft Office\\Microsoft OneNote 2010.lnk", nBufferLength=0x105, lpBuffer=0x31e0a4, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Microsoft Office\\Microsoft OneNote 2010.lnk", lpFilePart=0x0) returned 0x60 [0064.610] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e598) returned 1 [0064.610] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Microsoft Office\\Microsoft OneNote 2010.lnk" (normalized: "c:\\programdata\\microsoft\\windows\\start menu\\programs\\microsoft office\\microsoft onenote 2010.lnk"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x178 [0064.611] GetFileType (hFile=0x178) returned 0x1 [0064.611] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e594) returned 1 [0064.611] GetFileType (hFile=0x178) returned 0x1 [0064.611] GetFileSize (in: hFile=0x178, lpFileSizeHigh=0x31e6a0 | out: lpFileSizeHigh=0x31e6a0*=0x0) returned 0xb3f [0064.611] ReadFile (in: hFile=0x178, lpBuffer=0x27d8cbc, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x31e64c, lpOverlapped=0x0 | out: lpBuffer=0x27d8cbc*, lpNumberOfBytesRead=0x31e64c*=0xb3f, lpOverlapped=0x0) returned 1 [0064.613] CloseHandle (hObject=0x178) returned 1 [0064.625] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Microsoft Office\\Microsoft OneNote 2010.lnk", nBufferLength=0x105, lpBuffer=0x31e090, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Microsoft Office\\Microsoft OneNote 2010.lnk", lpFilePart=0x0) returned 0x60 [0064.625] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e584) returned 1 [0064.625] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Microsoft Office\\Microsoft OneNote 2010.lnk" (normalized: "c:\\programdata\\microsoft\\windows\\start menu\\programs\\microsoft office\\microsoft onenote 2010.lnk"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x178 [0064.626] GetFileType (hFile=0x178) returned 0x1 [0064.626] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e580) returned 1 [0064.627] GetFileType (hFile=0x178) returned 0x1 [0064.627] WriteFile (in: hFile=0x178, lpBuffer=0x282a460*, nNumberOfBytesToWrite=0xb40, lpNumberOfBytesWritten=0x31e614, lpOverlapped=0x0 | out: lpBuffer=0x282a460*, lpNumberOfBytesWritten=0x31e614*=0xb40, lpOverlapped=0x0) returned 1 [0064.627] CloseHandle (hObject=0x178) returned 1 [0064.628] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Microsoft Office\\Microsoft OneNote 2010.lnk", nBufferLength=0x105, lpBuffer=0x31e1c4, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Microsoft Office\\Microsoft OneNote 2010.lnk", lpFilePart=0x0) returned 0x60 [0064.628] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Microsoft Office\\Microsoft OneNote 2010.lnk", nBufferLength=0x105, lpBuffer=0x31e1c4, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Microsoft Office\\Microsoft OneNote 2010.lnk", lpFilePart=0x0) returned 0x60 [0064.628] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e624) returned 1 [0064.628] GetFileAttributesExW (in: lpFileName="C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Microsoft Office\\Microsoft OneNote 2010.lnk" (normalized: "c:\\programdata\\microsoft\\windows\\start menu\\programs\\microsoft office\\microsoft onenote 2010.lnk"), fInfoLevelId=0x0, lpFileInformation=0x31e6a0 | out: lpFileInformation=0x31e6a0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7805e570, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x780846d0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x9f622e0, ftLastWriteTime.dwHighDateTime=0x1d6eb7f, nFileSizeHigh=0x0, nFileSizeLow=0xb40)) returned 1 [0064.628] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e620) returned 1 [0064.628] MoveFileW (lpExistingFileName="C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Microsoft Office\\Microsoft OneNote 2010.lnk" (normalized: "c:\\programdata\\microsoft\\windows\\start menu\\programs\\microsoft office\\microsoft onenote 2010.lnk"), lpNewFileName="C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Microsoft Office\\Microsoft OneNote 2010.lnk" (normalized: "c:\\programdata\\microsoft\\windows\\start menu\\programs\\microsoft office\\microsoft onenote 2010.lnk")) returned 1 [0064.628] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Microsoft Office\\Microsoft Outlook 2010.lnk", nBufferLength=0x105, lpBuffer=0x31e0a4, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Microsoft Office\\Microsoft Outlook 2010.lnk", lpFilePart=0x0) returned 0x60 [0064.628] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e598) returned 1 [0064.629] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Microsoft Office\\Microsoft Outlook 2010.lnk" (normalized: "c:\\programdata\\microsoft\\windows\\start menu\\programs\\microsoft office\\microsoft outlook 2010.lnk"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x178 [0064.629] GetFileType (hFile=0x178) returned 0x1 [0064.629] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e594) returned 1 [0064.629] GetFileType (hFile=0x178) returned 0x1 [0064.629] GetFileSize (in: hFile=0x178, lpFileSizeHigh=0x31e6a0 | out: lpFileSizeHigh=0x31e6a0*=0x0) returned 0xbd5 [0064.629] ReadFile (in: hFile=0x178, lpBuffer=0x282c378, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x31e64c, lpOverlapped=0x0 | out: lpBuffer=0x282c378*, lpNumberOfBytesRead=0x31e64c*=0xbd5, lpOverlapped=0x0) returned 1 [0064.631] CloseHandle (hObject=0x178) returned 1 [0064.672] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Microsoft Office\\Microsoft Outlook 2010.lnk", nBufferLength=0x105, lpBuffer=0x31e090, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Microsoft Office\\Microsoft Outlook 2010.lnk", lpFilePart=0x0) returned 0x60 [0064.672] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e584) returned 1 [0064.672] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Microsoft Office\\Microsoft Outlook 2010.lnk" (normalized: "c:\\programdata\\microsoft\\windows\\start menu\\programs\\microsoft office\\microsoft outlook 2010.lnk"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x178 [0064.673] GetFileType (hFile=0x178) returned 0x1 [0064.673] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e580) returned 1 [0064.673] GetFileType (hFile=0x178) returned 0x1 [0064.673] WriteFile (in: hFile=0x178, lpBuffer=0x2680400*, nNumberOfBytesToWrite=0xbe0, lpNumberOfBytesWritten=0x31e614, lpOverlapped=0x0 | out: lpBuffer=0x2680400*, lpNumberOfBytesWritten=0x31e614*=0xbe0, lpOverlapped=0x0) returned 1 [0064.674] CloseHandle (hObject=0x178) returned 1 [0064.674] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Microsoft Office\\Microsoft Outlook 2010.lnk", nBufferLength=0x105, lpBuffer=0x31e1c4, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Microsoft Office\\Microsoft Outlook 2010.lnk", lpFilePart=0x0) returned 0x60 [0064.674] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Microsoft Office\\Microsoft Outlook 2010.lnk", nBufferLength=0x105, lpBuffer=0x31e1c4, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Microsoft Office\\Microsoft Outlook 2010.lnk", lpFilePart=0x0) returned 0x60 [0064.674] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e624) returned 1 [0064.675] GetFileAttributesExW (in: lpFileName="C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Microsoft Office\\Microsoft Outlook 2010.lnk" (normalized: "c:\\programdata\\microsoft\\windows\\start menu\\programs\\microsoft office\\microsoft outlook 2010.lnk"), fInfoLevelId=0x0, lpFileInformation=0x31e6a0 | out: lpFileInformation=0x31e6a0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x780846d0, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x780846d0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x9fd4700, ftLastWriteTime.dwHighDateTime=0x1d6eb7f, nFileSizeHigh=0x0, nFileSizeLow=0xbe0)) returned 1 [0064.675] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e620) returned 1 [0064.675] MoveFileW (lpExistingFileName="C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Microsoft Office\\Microsoft Outlook 2010.lnk" (normalized: "c:\\programdata\\microsoft\\windows\\start menu\\programs\\microsoft office\\microsoft outlook 2010.lnk"), lpNewFileName="C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Microsoft Office\\Microsoft Outlook 2010.lnk" (normalized: "c:\\programdata\\microsoft\\windows\\start menu\\programs\\microsoft office\\microsoft outlook 2010.lnk")) returned 1 [0064.675] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Microsoft Office\\Microsoft PowerPoint 2010.lnk", nBufferLength=0x105, lpBuffer=0x31e0a4, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Microsoft Office\\Microsoft PowerPoint 2010.lnk", lpFilePart=0x0) returned 0x63 [0064.675] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e598) returned 1 [0064.675] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Microsoft Office\\Microsoft PowerPoint 2010.lnk" (normalized: "c:\\programdata\\microsoft\\windows\\start menu\\programs\\microsoft office\\microsoft powerpoint 2010.lnk"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x178 [0064.676] GetFileType (hFile=0x178) returned 0x1 [0064.676] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e594) returned 1 [0064.676] GetFileType (hFile=0x178) returned 0x1 [0064.676] GetFileSize (in: hFile=0x178, lpFileSizeHigh=0x31e6a0 | out: lpFileSizeHigh=0x31e6a0*=0x0) returned 0xb79 [0064.676] ReadFile (in: hFile=0x178, lpBuffer=0x26822c4, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x31e64c, lpOverlapped=0x0 | out: lpBuffer=0x26822c4*, lpNumberOfBytesRead=0x31e64c*=0xb79, lpOverlapped=0x0) returned 1 [0064.677] CloseHandle (hObject=0x178) returned 1 [0064.691] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Microsoft Office\\Microsoft PowerPoint 2010.lnk", nBufferLength=0x105, lpBuffer=0x31e090, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Microsoft Office\\Microsoft PowerPoint 2010.lnk", lpFilePart=0x0) returned 0x63 [0064.691] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e584) returned 1 [0064.691] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Microsoft Office\\Microsoft PowerPoint 2010.lnk" (normalized: "c:\\programdata\\microsoft\\windows\\start menu\\programs\\microsoft office\\microsoft powerpoint 2010.lnk"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x178 [0064.691] GetFileType (hFile=0x178) returned 0x1 [0064.691] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e580) returned 1 [0064.692] GetFileType (hFile=0x178) returned 0x1 [0064.692] WriteFile (in: hFile=0x178, lpBuffer=0x26d3d10*, nNumberOfBytesToWrite=0xb80, lpNumberOfBytesWritten=0x31e614, lpOverlapped=0x0 | out: lpBuffer=0x26d3d10*, lpNumberOfBytesWritten=0x31e614*=0xb80, lpOverlapped=0x0) returned 1 [0064.692] CloseHandle (hObject=0x178) returned 1 [0064.692] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Microsoft Office\\Microsoft PowerPoint 2010.lnk", nBufferLength=0x105, lpBuffer=0x31e1c4, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Microsoft Office\\Microsoft PowerPoint 2010.lnk", lpFilePart=0x0) returned 0x63 [0064.692] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Microsoft Office\\Microsoft PowerPoint 2010.lnk", nBufferLength=0x105, lpBuffer=0x31e1c4, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Microsoft Office\\Microsoft PowerPoint 2010.lnk", lpFilePart=0x0) returned 0x63 [0064.693] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e624) returned 1 [0064.693] GetFileAttributesExW (in: lpFileName="C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Microsoft Office\\Microsoft PowerPoint 2010.lnk" (normalized: "c:\\programdata\\microsoft\\windows\\start menu\\programs\\microsoft office\\microsoft powerpoint 2010.lnk"), fInfoLevelId=0x0, lpFileInformation=0x31e6a0 | out: lpFileInformation=0x31e6a0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x780846d0, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x780846d0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x9ffa860, ftLastWriteTime.dwHighDateTime=0x1d6eb7f, nFileSizeHigh=0x0, nFileSizeLow=0xb80)) returned 1 [0064.693] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e620) returned 1 [0064.693] MoveFileW (lpExistingFileName="C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Microsoft Office\\Microsoft PowerPoint 2010.lnk" (normalized: "c:\\programdata\\microsoft\\windows\\start menu\\programs\\microsoft office\\microsoft powerpoint 2010.lnk"), lpNewFileName="C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Microsoft Office\\Microsoft PowerPoint 2010.lnk" (normalized: "c:\\programdata\\microsoft\\windows\\start menu\\programs\\microsoft office\\microsoft powerpoint 2010.lnk")) returned 1 [0064.693] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Microsoft Office\\Microsoft Project 2010.lnk", nBufferLength=0x105, lpBuffer=0x31e0a4, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Microsoft Office\\Microsoft Project 2010.lnk", lpFilePart=0x0) returned 0x60 [0064.694] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e598) returned 1 [0064.694] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Microsoft Office\\Microsoft Project 2010.lnk" (normalized: "c:\\programdata\\microsoft\\windows\\start menu\\programs\\microsoft office\\microsoft project 2010.lnk"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x178 [0064.694] GetFileType (hFile=0x178) returned 0x1 [0064.694] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e594) returned 1 [0064.694] GetFileType (hFile=0x178) returned 0x1 [0064.694] GetFileSize (in: hFile=0x178, lpFileSizeHigh=0x31e6a0 | out: lpFileSizeHigh=0x31e6a0*=0x0) returned 0xb77 [0064.694] ReadFile (in: hFile=0x178, lpBuffer=0x26d5bd0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x31e64c, lpOverlapped=0x0 | out: lpBuffer=0x26d5bd0*, lpNumberOfBytesRead=0x31e64c*=0xb77, lpOverlapped=0x0) returned 1 [0064.696] CloseHandle (hObject=0x178) returned 1 [0064.708] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Microsoft Office\\Microsoft Project 2010.lnk", nBufferLength=0x105, lpBuffer=0x31e090, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Microsoft Office\\Microsoft Project 2010.lnk", lpFilePart=0x0) returned 0x60 [0064.708] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e584) returned 1 [0064.708] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Microsoft Office\\Microsoft Project 2010.lnk" (normalized: "c:\\programdata\\microsoft\\windows\\start menu\\programs\\microsoft office\\microsoft project 2010.lnk"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x178 [0064.709] GetFileType (hFile=0x178) returned 0x1 [0064.709] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e580) returned 1 [0064.709] GetFileType (hFile=0x178) returned 0x1 [0064.710] WriteFile (in: hFile=0x178, lpBuffer=0x27274bc*, nNumberOfBytesToWrite=0xb80, lpNumberOfBytesWritten=0x31e614, lpOverlapped=0x0 | out: lpBuffer=0x27274bc*, lpNumberOfBytesWritten=0x31e614*=0xb80, lpOverlapped=0x0) returned 1 [0064.710] CloseHandle (hObject=0x178) returned 1 [0064.711] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Microsoft Office\\Microsoft Project 2010.lnk", nBufferLength=0x105, lpBuffer=0x31e1c4, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Microsoft Office\\Microsoft Project 2010.lnk", lpFilePart=0x0) returned 0x60 [0064.711] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Microsoft Office\\Microsoft Project 2010.lnk", nBufferLength=0x105, lpBuffer=0x31e1c4, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Microsoft Office\\Microsoft Project 2010.lnk", lpFilePart=0x0) returned 0x60 [0064.711] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e624) returned 1 [0064.711] GetFileAttributesExW (in: lpFileName="C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Microsoft Office\\Microsoft Project 2010.lnk" (normalized: "c:\\programdata\\microsoft\\windows\\start menu\\programs\\microsoft office\\microsoft project 2010.lnk"), fInfoLevelId=0x0, lpFileInformation=0x31e6a0 | out: lpFileInformation=0x31e6a0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc11c60a0, ftCreationTime.dwHighDateTime=0x1d305f1, ftLastAccessTime.dwLowDateTime=0xc11c60a0, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0xa046b20, ftLastWriteTime.dwHighDateTime=0x1d6eb7f, nFileSizeHigh=0x0, nFileSizeLow=0xb80)) returned 1 [0064.711] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e620) returned 1 [0064.711] MoveFileW (lpExistingFileName="C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Microsoft Office\\Microsoft Project 2010.lnk" (normalized: "c:\\programdata\\microsoft\\windows\\start menu\\programs\\microsoft office\\microsoft project 2010.lnk"), lpNewFileName="C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Microsoft Office\\Microsoft Project 2010.lnk" (normalized: "c:\\programdata\\microsoft\\windows\\start menu\\programs\\microsoft office\\microsoft project 2010.lnk")) returned 1 [0064.711] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Microsoft Office\\Microsoft Publisher 2010.lnk", nBufferLength=0x105, lpBuffer=0x31e0a4, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Microsoft Office\\Microsoft Publisher 2010.lnk", lpFilePart=0x0) returned 0x62 [0064.711] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e598) returned 1 [0064.711] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Microsoft Office\\Microsoft Publisher 2010.lnk" (normalized: "c:\\programdata\\microsoft\\windows\\start menu\\programs\\microsoft office\\microsoft publisher 2010.lnk"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x178 [0064.712] GetFileType (hFile=0x178) returned 0x1 [0064.712] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e594) returned 1 [0064.712] GetFileType (hFile=0x178) returned 0x1 [0064.712] GetFileSize (in: hFile=0x178, lpFileSizeHigh=0x31e6a0 | out: lpFileSizeHigh=0x31e6a0*=0x0) returned 0xbe1 [0064.712] ReadFile (in: hFile=0x178, lpBuffer=0x27293e8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x31e64c, lpOverlapped=0x0 | out: lpBuffer=0x27293e8*, lpNumberOfBytesRead=0x31e64c*=0xbe1, lpOverlapped=0x0) returned 1 [0064.713] CloseHandle (hObject=0x178) returned 1 [0064.727] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Microsoft Office\\Microsoft Publisher 2010.lnk", nBufferLength=0x105, lpBuffer=0x31e090, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Microsoft Office\\Microsoft Publisher 2010.lnk", lpFilePart=0x0) returned 0x62 [0064.727] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e584) returned 1 [0064.727] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Microsoft Office\\Microsoft Publisher 2010.lnk" (normalized: "c:\\programdata\\microsoft\\windows\\start menu\\programs\\microsoft office\\microsoft publisher 2010.lnk"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x178 [0064.728] GetFileType (hFile=0x178) returned 0x1 [0064.728] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e580) returned 1 [0064.728] GetFileType (hFile=0x178) returned 0x1 [0064.728] WriteFile (in: hFile=0x178, lpBuffer=0x277af10*, nNumberOfBytesToWrite=0xbf0, lpNumberOfBytesWritten=0x31e614, lpOverlapped=0x0 | out: lpBuffer=0x277af10*, lpNumberOfBytesWritten=0x31e614*=0xbf0, lpOverlapped=0x0) returned 1 [0064.729] CloseHandle (hObject=0x178) returned 1 [0064.729] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Microsoft Office\\Microsoft Publisher 2010.lnk", nBufferLength=0x105, lpBuffer=0x31e1c4, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Microsoft Office\\Microsoft Publisher 2010.lnk", lpFilePart=0x0) returned 0x62 [0064.729] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Microsoft Office\\Microsoft Publisher 2010.lnk", nBufferLength=0x105, lpBuffer=0x31e1c4, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Microsoft Office\\Microsoft Publisher 2010.lnk", lpFilePart=0x0) returned 0x62 [0064.729] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e624) returned 1 [0064.729] GetFileAttributesExW (in: lpFileName="C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Microsoft Office\\Microsoft Publisher 2010.lnk" (normalized: "c:\\programdata\\microsoft\\windows\\start menu\\programs\\microsoft office\\microsoft publisher 2010.lnk"), fInfoLevelId=0x0, lpFileInformation=0x31e6a0 | out: lpFileInformation=0x31e6a0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x780846d0, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x780846d0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xa06cc80, ftLastWriteTime.dwHighDateTime=0x1d6eb7f, nFileSizeHigh=0x0, nFileSizeLow=0xbf0)) returned 1 [0064.729] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e620) returned 1 [0064.729] MoveFileW (lpExistingFileName="C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Microsoft Office\\Microsoft Publisher 2010.lnk" (normalized: "c:\\programdata\\microsoft\\windows\\start menu\\programs\\microsoft office\\microsoft publisher 2010.lnk"), lpNewFileName="C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Microsoft Office\\Microsoft Publisher 2010.lnk" (normalized: "c:\\programdata\\microsoft\\windows\\start menu\\programs\\microsoft office\\microsoft publisher 2010.lnk")) returned 1 [0064.730] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Microsoft Office\\Microsoft SharePoint Workspace 2010.lnk", nBufferLength=0x105, lpBuffer=0x31e0a4, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Microsoft Office\\Microsoft SharePoint Workspace 2010.lnk", lpFilePart=0x0) returned 0x6d [0064.730] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e598) returned 1 [0064.730] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Microsoft Office\\Microsoft SharePoint Workspace 2010.lnk" (normalized: "c:\\programdata\\microsoft\\windows\\start menu\\programs\\microsoft office\\microsoft sharepoint workspace 2010.lnk"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x178 [0064.730] GetFileType (hFile=0x178) returned 0x1 [0064.730] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e594) returned 1 [0064.730] GetFileType (hFile=0x178) returned 0x1 [0064.730] GetFileSize (in: hFile=0x178, lpFileSizeHigh=0x31e6a0 | out: lpFileSizeHigh=0x31e6a0*=0x0) returned 0xbef [0064.730] ReadFile (in: hFile=0x178, lpBuffer=0x277ce78, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x31e64c, lpOverlapped=0x0 | out: lpBuffer=0x277ce78*, lpNumberOfBytesRead=0x31e64c*=0xbef, lpOverlapped=0x0) returned 1 [0064.732] CloseHandle (hObject=0x178) returned 1 [0064.744] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Microsoft Office\\Microsoft SharePoint Workspace 2010.lnk", nBufferLength=0x105, lpBuffer=0x31e090, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Microsoft Office\\Microsoft SharePoint Workspace 2010.lnk", lpFilePart=0x0) returned 0x6d [0064.745] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e584) returned 1 [0064.745] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Microsoft Office\\Microsoft SharePoint Workspace 2010.lnk" (normalized: "c:\\programdata\\microsoft\\windows\\start menu\\programs\\microsoft office\\microsoft sharepoint workspace 2010.lnk"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x178 [0064.746] GetFileType (hFile=0x178) returned 0x1 [0064.746] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e580) returned 1 [0064.746] GetFileType (hFile=0x178) returned 0x1 [0064.746] WriteFile (in: hFile=0x178, lpBuffer=0x27ce9bc*, nNumberOfBytesToWrite=0xbf0, lpNumberOfBytesWritten=0x31e614, lpOverlapped=0x0 | out: lpBuffer=0x27ce9bc*, lpNumberOfBytesWritten=0x31e614*=0xbf0, lpOverlapped=0x0) returned 1 [0064.747] CloseHandle (hObject=0x178) returned 1 [0064.747] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Microsoft Office\\Microsoft SharePoint Workspace 2010.lnk", nBufferLength=0x105, lpBuffer=0x31e1c4, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Microsoft Office\\Microsoft SharePoint Workspace 2010.lnk", lpFilePart=0x0) returned 0x6d [0064.747] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Microsoft Office\\Microsoft SharePoint Workspace 2010.lnk", nBufferLength=0x105, lpBuffer=0x31e1c4, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Microsoft Office\\Microsoft SharePoint Workspace 2010.lnk", lpFilePart=0x0) returned 0x6d [0064.747] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e624) returned 1 [0064.747] GetFileAttributesExW (in: lpFileName="C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Microsoft Office\\Microsoft SharePoint Workspace 2010.lnk" (normalized: "c:\\programdata\\microsoft\\windows\\start menu\\programs\\microsoft office\\microsoft sharepoint workspace 2010.lnk"), fInfoLevelId=0x0, lpFileInformation=0x31e6a0 | out: lpFileInformation=0x31e6a0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x78038410, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x78038410, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xa092de0, ftLastWriteTime.dwHighDateTime=0x1d6eb7f, nFileSizeHigh=0x0, nFileSizeLow=0xbf0)) returned 1 [0064.747] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e620) returned 1 [0064.747] MoveFileW (lpExistingFileName="C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Microsoft Office\\Microsoft SharePoint Workspace 2010.lnk" (normalized: "c:\\programdata\\microsoft\\windows\\start menu\\programs\\microsoft office\\microsoft sharepoint workspace 2010.lnk"), lpNewFileName="C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Microsoft Office\\Microsoft SharePoint Workspace 2010.lnk" (normalized: "c:\\programdata\\microsoft\\windows\\start menu\\programs\\microsoft office\\microsoft sharepoint workspace 2010.lnk")) returned 1 [0064.748] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Microsoft Office\\Microsoft Visio 2010.lnk", nBufferLength=0x105, lpBuffer=0x31e0a4, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Microsoft Office\\Microsoft Visio 2010.lnk", lpFilePart=0x0) returned 0x5e [0064.748] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e598) returned 1 [0064.748] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Microsoft Office\\Microsoft Visio 2010.lnk" (normalized: "c:\\programdata\\microsoft\\windows\\start menu\\programs\\microsoft office\\microsoft visio 2010.lnk"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x178 [0064.748] GetFileType (hFile=0x178) returned 0x1 [0064.748] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e594) returned 1 [0064.748] GetFileType (hFile=0x178) returned 0x1 [0064.748] GetFileSize (in: hFile=0x178, lpFileSizeHigh=0x31e6a0 | out: lpFileSizeHigh=0x31e6a0*=0x0) returned 0xacf [0064.748] ReadFile (in: hFile=0x178, lpBuffer=0x27d07f4, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x31e64c, lpOverlapped=0x0 | out: lpBuffer=0x27d07f4*, lpNumberOfBytesRead=0x31e64c*=0xacf, lpOverlapped=0x0) returned 1 [0064.762] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Microsoft Office\\Microsoft Visio 2010.lnk", nBufferLength=0x105, lpBuffer=0x31e090, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Microsoft Office\\Microsoft Visio 2010.lnk", lpFilePart=0x0) returned 0x5e [0064.762] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e584) returned 1 [0064.762] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Microsoft Office\\Microsoft Visio 2010.lnk" (normalized: "c:\\programdata\\microsoft\\windows\\start menu\\programs\\microsoft office\\microsoft visio 2010.lnk"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x178 [0064.763] GetFileType (hFile=0x178) returned 0x1 [0064.763] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e580) returned 1 [0064.763] GetFileType (hFile=0x178) returned 0x1 [0064.763] WriteFile (in: hFile=0x178, lpBuffer=0x2821d60*, nNumberOfBytesToWrite=0xad0, lpNumberOfBytesWritten=0x31e614, lpOverlapped=0x0 | out: lpBuffer=0x2821d60*, lpNumberOfBytesWritten=0x31e614*=0xad0, lpOverlapped=0x0) returned 1 [0064.765] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Microsoft Office\\Microsoft Visio 2010.lnk", nBufferLength=0x105, lpBuffer=0x31e1c4, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Microsoft Office\\Microsoft Visio 2010.lnk", lpFilePart=0x0) returned 0x5e [0064.765] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Microsoft Office\\Microsoft Visio 2010.lnk", nBufferLength=0x105, lpBuffer=0x31e1c4, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Microsoft Office\\Microsoft Visio 2010.lnk", lpFilePart=0x0) returned 0x5e [0064.765] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e624) returned 1 [0064.765] GetFileAttributesExW (in: lpFileName="C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Microsoft Office\\Microsoft Visio 2010.lnk" (normalized: "c:\\programdata\\microsoft\\windows\\start menu\\programs\\microsoft office\\microsoft visio 2010.lnk"), fInfoLevelId=0x0, lpFileInformation=0x31e6a0 | out: lpFileInformation=0x31e6a0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8735be00, ftCreationTime.dwHighDateTime=0x1d305eb, ftLastAccessTime.dwLowDateTime=0x8735be00, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0xa0b8f40, ftLastWriteTime.dwHighDateTime=0x1d6eb7f, nFileSizeHigh=0x0, nFileSizeLow=0xad0)) returned 1 [0064.765] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e620) returned 1 [0064.765] MoveFileW (lpExistingFileName="C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Microsoft Office\\Microsoft Visio 2010.lnk" (normalized: "c:\\programdata\\microsoft\\windows\\start menu\\programs\\microsoft office\\microsoft visio 2010.lnk"), lpNewFileName="C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Microsoft Office\\Microsoft Visio 2010.lnk" (normalized: "c:\\programdata\\microsoft\\windows\\start menu\\programs\\microsoft office\\microsoft visio 2010.lnk")) returned 1 [0064.765] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Microsoft Office\\Microsoft Word 2010.lnk", nBufferLength=0x105, lpBuffer=0x31e0a4, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Microsoft Office\\Microsoft Word 2010.lnk", lpFilePart=0x0) returned 0x5d [0064.765] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e598) returned 1 [0064.765] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Microsoft Office\\Microsoft Word 2010.lnk" (normalized: "c:\\programdata\\microsoft\\windows\\start menu\\programs\\microsoft office\\microsoft word 2010.lnk"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x178 [0064.766] GetFileType (hFile=0x178) returned 0x1 [0064.766] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e594) returned 1 [0064.766] GetFileType (hFile=0x178) returned 0x1 [0064.766] GetFileSize (in: hFile=0x178, lpFileSizeHigh=0x31e6a0 | out: lpFileSizeHigh=0x31e6a0*=0x0) returned 0xbcd [0064.766] ReadFile (in: hFile=0x178, lpBuffer=0x2823c58, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x31e64c, lpOverlapped=0x0 | out: lpBuffer=0x2823c58*, lpNumberOfBytesRead=0x31e64c*=0xbcd, lpOverlapped=0x0) returned 1 [0064.813] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Microsoft Office\\Microsoft Word 2010.lnk", nBufferLength=0x105, lpBuffer=0x31e090, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Microsoft Office\\Microsoft Word 2010.lnk", lpFilePart=0x0) returned 0x5d [0064.813] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e584) returned 1 [0064.813] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Microsoft Office\\Microsoft Word 2010.lnk" (normalized: "c:\\programdata\\microsoft\\windows\\start menu\\programs\\microsoft office\\microsoft word 2010.lnk"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x178 [0064.814] GetFileType (hFile=0x178) returned 0x1 [0064.814] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e580) returned 1 [0064.814] GetFileType (hFile=0x178) returned 0x1 [0064.814] WriteFile (in: hFile=0x178, lpBuffer=0x2677eec*, nNumberOfBytesToWrite=0xbd0, lpNumberOfBytesWritten=0x31e614, lpOverlapped=0x0 | out: lpBuffer=0x2677eec*, lpNumberOfBytesWritten=0x31e614*=0xbd0, lpOverlapped=0x0) returned 1 [0064.815] CloseHandle (hObject=0x178) returned 1 [0064.816] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Microsoft Office\\Microsoft Word 2010.lnk", nBufferLength=0x105, lpBuffer=0x31e1c4, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Microsoft Office\\Microsoft Word 2010.lnk", lpFilePart=0x0) returned 0x5d [0064.816] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Microsoft Office\\Microsoft Word 2010.lnk", nBufferLength=0x105, lpBuffer=0x31e1c4, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Microsoft Office\\Microsoft Word 2010.lnk", lpFilePart=0x0) returned 0x5d [0064.816] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e624) returned 1 [0064.816] GetFileAttributesExW (in: lpFileName="C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Microsoft Office\\Microsoft Word 2010.lnk" (normalized: "c:\\programdata\\microsoft\\windows\\start menu\\programs\\microsoft office\\microsoft word 2010.lnk"), fInfoLevelId=0x0, lpFileInformation=0x31e6a0 | out: lpFileInformation=0x31e6a0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x780aa830, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x780aa830, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xa12b360, ftLastWriteTime.dwHighDateTime=0x1d6eb7f, nFileSizeHigh=0x0, nFileSizeLow=0xbd0)) returned 1 [0064.816] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e620) returned 1 [0064.816] MoveFileW (lpExistingFileName="C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Microsoft Office\\Microsoft Word 2010.lnk" (normalized: "c:\\programdata\\microsoft\\windows\\start menu\\programs\\microsoft office\\microsoft word 2010.lnk"), lpNewFileName="C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Microsoft Office\\Microsoft Word 2010.lnk" (normalized: "c:\\programdata\\microsoft\\windows\\start menu\\programs\\microsoft office\\microsoft word 2010.lnk")) returned 1 [0064.816] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e654) returned 1 [0064.816] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Microsoft Office\\Microsoft Office 2010 Tools", nBufferLength=0x105, lpBuffer=0x31e15c, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Microsoft Office\\Microsoft Office 2010 Tools", lpFilePart=0x0) returned 0x61 [0064.817] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Microsoft Office\\Microsoft Office 2010 Tools\\", nBufferLength=0x105, lpBuffer=0x31e130, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Microsoft Office\\Microsoft Office 2010 Tools\\", lpFilePart=0x0) returned 0x62 [0064.817] FindFirstFileW (in: lpFileName="C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Microsoft Office\\Microsoft Office 2010 Tools\\*", lpFindFileData=0x31e37c | out: lpFindFileData=0x31e37c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x77f53bd0, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0xc11c60a0, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0xc11c60a0, ftLastWriteTime.dwHighDateTime=0x1d305f1, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5107de0 [0064.817] FindNextFileW (in: hFindFile=0x5107de0, lpFindFileData=0x31e38c | out: lpFindFileData=0x31e38c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x77f53bd0, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0xc11c60a0, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0xc11c60a0, ftLastWriteTime.dwHighDateTime=0x1d305f1, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0064.818] FindNextFileW (in: hFindFile=0x5107de0, lpFindFileData=0x31e38c | out: lpFindFileData=0x31e38c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x77fec150, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0xc119ff40, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0xc119ff40, ftLastWriteTime.dwHighDateTime=0x1d305f1, nFileSizeHigh=0x0, nFileSizeLow=0xba1, dwReserved0=0x0, dwReserved1=0x0, cFileName="Digital Certificate for VBA Projects.lnk", cAlternateFileName="DIGITA~1.LNK")) returned 1 [0064.818] FindNextFileW (in: hFindFile=0x5107de0, lpFindFileData=0x31e38c | out: lpFindFileData=0x31e38c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x77f53bd0, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0xc1179de0, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0xc1179de0, ftLastWriteTime.dwHighDateTime=0x1d305f1, nFileSizeHigh=0x0, nFileSizeLow=0xb65, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft Clip Organizer.lnk", cAlternateFileName="MICROS~1.LNK")) returned 1 [0064.818] FindNextFileW (in: hFindFile=0x5107de0, lpFindFileData=0x31e38c | out: lpFindFileData=0x31e38c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x780122b0, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0xc11c60a0, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0xc11c60a0, ftLastWriteTime.dwHighDateTime=0x1d305f1, nFileSizeHigh=0x0, nFileSizeLow=0xabf, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft Office 2010 Language Preferences.lnk", cAlternateFileName="MICROS~4.LNK")) returned 1 [0064.818] FindNextFileW (in: hFindFile=0x5107de0, lpFindFileData=0x31e38c | out: lpFindFileData=0x31e38c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x77fec150, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0xc119ff40, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0xc119ff40, ftLastWriteTime.dwHighDateTime=0x1d305f1, nFileSizeHigh=0x0, nFileSizeLow=0xb15, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft Office 2010 Upload Center.lnk", cAlternateFileName="MICROS~3.LNK")) returned 1 [0064.818] FindNextFileW (in: hFindFile=0x5107de0, lpFindFileData=0x31e38c | out: lpFindFileData=0x31e38c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x77fec150, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0xc1179de0, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0xc1179de0, ftLastWriteTime.dwHighDateTime=0x1d305f1, nFileSizeHigh=0x0, nFileSizeLow=0xb3b, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft Office Picture Manager.lnk", cAlternateFileName="MICROS~2.LNK")) returned 1 [0064.818] FindNextFileW (in: hFindFile=0x5107de0, lpFindFileData=0x31e38c | out: lpFindFileData=0x31e38c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc11c60a0, ftCreationTime.dwHighDateTime=0x1d305f1, ftLastAccessTime.dwLowDateTime=0xc11c60a0, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0xc11c60a0, ftLastWriteTime.dwHighDateTime=0x1d305f1, nFileSizeHigh=0x0, nFileSizeLow=0xbb7, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft Project Server 2010 Accounts.lnk", cAlternateFileName="MIBC23~1.LNK")) returned 1 [0064.819] FindNextFileW (in: hFindFile=0x5107de0, lpFindFileData=0x31e38c | out: lpFindFileData=0x31e38c*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0064.819] FindClose (in: hFindFile=0x5107de0 | out: hFindFile=0x5107de0) returned 1 [0064.819] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e614) returned 1 [0064.819] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e620) returned 1 [0064.819] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e654) returned 1 [0064.819] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Microsoft Office\\Microsoft Office 2010 Tools", nBufferLength=0x105, lpBuffer=0x31e15c, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Microsoft Office\\Microsoft Office 2010 Tools", lpFilePart=0x0) returned 0x61 [0064.820] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Microsoft Office\\Microsoft Office 2010 Tools\\", nBufferLength=0x105, lpBuffer=0x31e130, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Microsoft Office\\Microsoft Office 2010 Tools\\", lpFilePart=0x0) returned 0x62 [0064.820] FindFirstFileW (in: lpFileName="C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Microsoft Office\\Microsoft Office 2010 Tools\\*", lpFindFileData=0x31e37c | out: lpFindFileData=0x31e37c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x77f53bd0, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0xc11c60a0, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0xc11c60a0, ftLastWriteTime.dwHighDateTime=0x1d305f1, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5107de0 [0064.820] FindNextFileW (in: hFindFile=0x5107de0, lpFindFileData=0x31e38c | out: lpFindFileData=0x31e38c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x77f53bd0, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0xc11c60a0, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0xc11c60a0, ftLastWriteTime.dwHighDateTime=0x1d305f1, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0064.820] FindNextFileW (in: hFindFile=0x5107de0, lpFindFileData=0x31e38c | out: lpFindFileData=0x31e38c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x77fec150, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0xc119ff40, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0xc119ff40, ftLastWriteTime.dwHighDateTime=0x1d305f1, nFileSizeHigh=0x0, nFileSizeLow=0xba1, dwReserved0=0x0, dwReserved1=0x0, cFileName="Digital Certificate for VBA Projects.lnk", cAlternateFileName="DIGITA~1.LNK")) returned 1 [0064.821] FindNextFileW (in: hFindFile=0x5107de0, lpFindFileData=0x31e38c | out: lpFindFileData=0x31e38c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x77f53bd0, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0xc1179de0, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0xc1179de0, ftLastWriteTime.dwHighDateTime=0x1d305f1, nFileSizeHigh=0x0, nFileSizeLow=0xb65, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft Clip Organizer.lnk", cAlternateFileName="MICROS~1.LNK")) returned 1 [0064.821] FindNextFileW (in: hFindFile=0x5107de0, lpFindFileData=0x31e38c | out: lpFindFileData=0x31e38c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x780122b0, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0xc11c60a0, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0xc11c60a0, ftLastWriteTime.dwHighDateTime=0x1d305f1, nFileSizeHigh=0x0, nFileSizeLow=0xabf, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft Office 2010 Language Preferences.lnk", cAlternateFileName="MICROS~4.LNK")) returned 1 [0064.821] FindNextFileW (in: hFindFile=0x5107de0, lpFindFileData=0x31e38c | out: lpFindFileData=0x31e38c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x77fec150, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0xc119ff40, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0xc119ff40, ftLastWriteTime.dwHighDateTime=0x1d305f1, nFileSizeHigh=0x0, nFileSizeLow=0xb15, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft Office 2010 Upload Center.lnk", cAlternateFileName="MICROS~3.LNK")) returned 1 [0064.821] FindNextFileW (in: hFindFile=0x5107de0, lpFindFileData=0x31e38c | out: lpFindFileData=0x31e38c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x77fec150, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0xc1179de0, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0xc1179de0, ftLastWriteTime.dwHighDateTime=0x1d305f1, nFileSizeHigh=0x0, nFileSizeLow=0xb3b, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft Office Picture Manager.lnk", cAlternateFileName="MICROS~2.LNK")) returned 1 [0064.821] FindNextFileW (in: hFindFile=0x5107de0, lpFindFileData=0x31e38c | out: lpFindFileData=0x31e38c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc11c60a0, ftCreationTime.dwHighDateTime=0x1d305f1, ftLastAccessTime.dwLowDateTime=0xc11c60a0, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0xc11c60a0, ftLastWriteTime.dwHighDateTime=0x1d305f1, nFileSizeHigh=0x0, nFileSizeLow=0xbb7, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft Project Server 2010 Accounts.lnk", cAlternateFileName="MIBC23~1.LNK")) returned 1 [0064.821] FindNextFileW (in: hFindFile=0x5107de0, lpFindFileData=0x31e38c | out: lpFindFileData=0x31e38c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc11c60a0, ftCreationTime.dwHighDateTime=0x1d305f1, ftLastAccessTime.dwLowDateTime=0xc11c60a0, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0xc11c60a0, ftLastWriteTime.dwHighDateTime=0x1d305f1, nFileSizeHigh=0x0, nFileSizeLow=0xbb7, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft Project Server 2010 Accounts.lnk", cAlternateFileName="MIBC23~1.LNK")) returned 0 [0064.821] FindClose (in: hFindFile=0x5107de0 | out: hFindFile=0x5107de0) returned 1 [0064.822] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e614) returned 1 [0064.822] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e620) returned 1 [0064.822] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Microsoft Office\\Microsoft Office 2010 Tools\\Digital Certificate for VBA Projects.lnk", nBufferLength=0x105, lpBuffer=0x31e02c, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Microsoft Office\\Microsoft Office 2010 Tools\\Digital Certificate for VBA Projects.lnk", lpFilePart=0x0) returned 0x8a [0064.822] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e520) returned 1 [0064.822] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Microsoft Office\\Microsoft Office 2010 Tools\\Digital Certificate for VBA Projects.lnk" (normalized: "c:\\programdata\\microsoft\\windows\\start menu\\programs\\microsoft office\\microsoft office 2010 tools\\digital certificate for vba projects.lnk"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x178 [0064.831] GetFileType (hFile=0x178) returned 0x1 [0064.831] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e51c) returned 1 [0064.831] GetFileType (hFile=0x178) returned 0x1 [0064.831] GetFileSize (in: hFile=0x178, lpFileSizeHigh=0x31e628 | out: lpFileSizeHigh=0x31e628*=0x0) returned 0xba1 [0064.831] ReadFile (in: hFile=0x178, lpBuffer=0x267ddec, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x31e5d4, lpOverlapped=0x0 | out: lpBuffer=0x267ddec*, lpNumberOfBytesRead=0x31e5d4*=0xba1, lpOverlapped=0x0) returned 1 [0064.833] CloseHandle (hObject=0x178) returned 1 [0064.846] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Microsoft Office\\Microsoft Office 2010 Tools\\Digital Certificate for VBA Projects.lnk", nBufferLength=0x105, lpBuffer=0x31e018, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Microsoft Office\\Microsoft Office 2010 Tools\\Digital Certificate for VBA Projects.lnk", lpFilePart=0x0) returned 0x8a [0064.846] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e50c) returned 1 [0064.846] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Microsoft Office\\Microsoft Office 2010 Tools\\Digital Certificate for VBA Projects.lnk" (normalized: "c:\\programdata\\microsoft\\windows\\start menu\\programs\\microsoft office\\microsoft office 2010 tools\\digital certificate for vba projects.lnk"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x178 [0064.847] GetFileType (hFile=0x178) returned 0x1 [0064.847] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e508) returned 1 [0064.847] GetFileType (hFile=0x178) returned 0x1 [0064.847] WriteFile (in: hFile=0x178, lpBuffer=0x26cf998*, nNumberOfBytesToWrite=0xbb0, lpNumberOfBytesWritten=0x31e59c, lpOverlapped=0x0 | out: lpBuffer=0x26cf998*, lpNumberOfBytesWritten=0x31e59c*=0xbb0, lpOverlapped=0x0) returned 1 [0064.848] CloseHandle (hObject=0x178) returned 1 [0064.849] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Microsoft Office\\Microsoft Office 2010 Tools\\Digital Certificate for VBA Projects.lnk", nBufferLength=0x105, lpBuffer=0x31e14c, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Microsoft Office\\Microsoft Office 2010 Tools\\Digital Certificate for VBA Projects.lnk", lpFilePart=0x0) returned 0x8a [0064.849] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Microsoft Office\\Microsoft Office 2010 Tools\\Digital Certificate for VBA Projects.lnk", nBufferLength=0x105, lpBuffer=0x31e14c, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Microsoft Office\\Microsoft Office 2010 Tools\\Digital Certificate for VBA Projects.lnk", lpFilePart=0x0) returned 0x8a [0064.849] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e5ac) returned 1 [0064.849] GetFileAttributesExW (in: lpFileName="C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Microsoft Office\\Microsoft Office 2010 Tools\\Digital Certificate for VBA Projects.lnk" (normalized: "c:\\programdata\\microsoft\\windows\\start menu\\programs\\microsoft office\\microsoft office 2010 tools\\digital certificate for vba projects.lnk"), fInfoLevelId=0x0, lpFileInformation=0x31e628 | out: lpFileInformation=0x31e628*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x77fec150, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0xc119ff40, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0xa177620, ftLastWriteTime.dwHighDateTime=0x1d6eb7f, nFileSizeHigh=0x0, nFileSizeLow=0xbb0)) returned 1 [0064.849] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e5a8) returned 1 [0064.849] MoveFileW (lpExistingFileName="C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Microsoft Office\\Microsoft Office 2010 Tools\\Digital Certificate for VBA Projects.lnk" (normalized: "c:\\programdata\\microsoft\\windows\\start menu\\programs\\microsoft office\\microsoft office 2010 tools\\digital certificate for vba projects.lnk"), lpNewFileName="C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Microsoft Office\\Microsoft Office 2010 Tools\\Digital Certificate for VBA Projects.lnk" (normalized: "c:\\programdata\\microsoft\\windows\\start menu\\programs\\microsoft office\\microsoft office 2010 tools\\digital certificate for vba projects.lnk")) returned 1 [0064.850] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Microsoft Office\\Microsoft Office 2010 Tools\\Microsoft Clip Organizer.lnk", nBufferLength=0x105, lpBuffer=0x31e02c, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Microsoft Office\\Microsoft Office 2010 Tools\\Microsoft Clip Organizer.lnk", lpFilePart=0x0) returned 0x7e [0064.850] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e520) returned 1 [0064.850] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Microsoft Office\\Microsoft Office 2010 Tools\\Microsoft Clip Organizer.lnk" (normalized: "c:\\programdata\\microsoft\\windows\\start menu\\programs\\microsoft office\\microsoft office 2010 tools\\microsoft clip organizer.lnk"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x178 [0064.881] GetFileType (hFile=0x178) returned 0x1 [0064.882] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e51c) returned 1 [0064.882] GetFileType (hFile=0x178) returned 0x1 [0064.882] GetFileSize (in: hFile=0x178, lpFileSizeHigh=0x31e628 | out: lpFileSizeHigh=0x31e628*=0x0) returned 0xb65 [0064.882] ReadFile (in: hFile=0x178, lpBuffer=0x26d1928, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x31e5d4, lpOverlapped=0x0 | out: lpBuffer=0x26d1928*, lpNumberOfBytesRead=0x31e5d4*=0xb65, lpOverlapped=0x0) returned 1 [0064.884] CloseHandle (hObject=0x178) returned 1 [0064.897] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Microsoft Office\\Microsoft Office 2010 Tools\\Microsoft Clip Organizer.lnk", nBufferLength=0x105, lpBuffer=0x31e018, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Microsoft Office\\Microsoft Office 2010 Tools\\Microsoft Clip Organizer.lnk", lpFilePart=0x0) returned 0x7e [0064.897] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e50c) returned 1 [0064.897] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Microsoft Office\\Microsoft Office 2010 Tools\\Microsoft Clip Organizer.lnk" (normalized: "c:\\programdata\\microsoft\\windows\\start menu\\programs\\microsoft office\\microsoft office 2010 tools\\microsoft clip organizer.lnk"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x178 [0064.898] GetFileType (hFile=0x178) returned 0x1 [0064.898] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e508) returned 1 [0064.898] GetFileType (hFile=0x178) returned 0x1 [0064.898] WriteFile (in: hFile=0x178, lpBuffer=0x2723204*, nNumberOfBytesToWrite=0xb70, lpNumberOfBytesWritten=0x31e59c, lpOverlapped=0x0 | out: lpBuffer=0x2723204*, lpNumberOfBytesWritten=0x31e59c*=0xb70, lpOverlapped=0x0) returned 1 [0064.899] CloseHandle (hObject=0x178) returned 1 [0064.899] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Microsoft Office\\Microsoft Office 2010 Tools\\Microsoft Clip Organizer.lnk", nBufferLength=0x105, lpBuffer=0x31e14c, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Microsoft Office\\Microsoft Office 2010 Tools\\Microsoft Clip Organizer.lnk", lpFilePart=0x0) returned 0x7e [0064.899] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Microsoft Office\\Microsoft Office 2010 Tools\\Microsoft Clip Organizer.lnk", nBufferLength=0x105, lpBuffer=0x31e14c, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Microsoft Office\\Microsoft Office 2010 Tools\\Microsoft Clip Organizer.lnk", lpFilePart=0x0) returned 0x7e [0064.899] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e5ac) returned 1 [0064.899] GetFileAttributesExW (in: lpFileName="C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Microsoft Office\\Microsoft Office 2010 Tools\\Microsoft Clip Organizer.lnk" (normalized: "c:\\programdata\\microsoft\\windows\\start menu\\programs\\microsoft office\\microsoft office 2010 tools\\microsoft clip organizer.lnk"), fInfoLevelId=0x0, lpFileInformation=0x31e628 | out: lpFileInformation=0x31e628*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x77f53bd0, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0xc1179de0, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0xa20fba0, ftLastWriteTime.dwHighDateTime=0x1d6eb7f, nFileSizeHigh=0x0, nFileSizeLow=0xb70)) returned 1 [0064.899] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e5a8) returned 1 [0064.899] MoveFileW (lpExistingFileName="C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Microsoft Office\\Microsoft Office 2010 Tools\\Microsoft Clip Organizer.lnk" (normalized: "c:\\programdata\\microsoft\\windows\\start menu\\programs\\microsoft office\\microsoft office 2010 tools\\microsoft clip organizer.lnk"), lpNewFileName="C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Microsoft Office\\Microsoft Office 2010 Tools\\Microsoft Clip Organizer.lnk" (normalized: "c:\\programdata\\microsoft\\windows\\start menu\\programs\\microsoft office\\microsoft office 2010 tools\\microsoft clip organizer.lnk")) returned 1 [0064.900] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Microsoft Office\\Microsoft Office 2010 Tools\\Microsoft Office 2010 Language Preferences.lnk", nBufferLength=0x105, lpBuffer=0x31e02c, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Microsoft Office\\Microsoft Office 2010 Tools\\Microsoft Office 2010 Language Preferences.lnk", lpFilePart=0x0) returned 0x90 [0064.900] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e520) returned 1 [0064.900] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Microsoft Office\\Microsoft Office 2010 Tools\\Microsoft Office 2010 Language Preferences.lnk" (normalized: "c:\\programdata\\microsoft\\windows\\start menu\\programs\\microsoft office\\microsoft office 2010 tools\\microsoft office 2010 language preferences.lnk"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x178 [0064.900] GetFileType (hFile=0x178) returned 0x1 [0064.900] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e51c) returned 1 [0064.900] GetFileType (hFile=0x178) returned 0x1 [0064.900] GetFileSize (in: hFile=0x178, lpFileSizeHigh=0x31e628 | out: lpFileSizeHigh=0x31e628*=0x0) returned 0xabf [0064.901] ReadFile (in: hFile=0x178, lpBuffer=0x2725104, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x31e5d4, lpOverlapped=0x0 | out: lpBuffer=0x2725104*, lpNumberOfBytesRead=0x31e5d4*=0xabf, lpOverlapped=0x0) returned 1 [0064.904] CloseHandle (hObject=0x178) returned 1 [0064.917] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Microsoft Office\\Microsoft Office 2010 Tools\\Microsoft Office 2010 Language Preferences.lnk", nBufferLength=0x105, lpBuffer=0x31e018, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Microsoft Office\\Microsoft Office 2010 Tools\\Microsoft Office 2010 Language Preferences.lnk", lpFilePart=0x0) returned 0x90 [0064.917] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e50c) returned 1 [0064.917] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Microsoft Office\\Microsoft Office 2010 Tools\\Microsoft Office 2010 Language Preferences.lnk" (normalized: "c:\\programdata\\microsoft\\windows\\start menu\\programs\\microsoft office\\microsoft office 2010 tools\\microsoft office 2010 language preferences.lnk"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x178 [0064.918] GetFileType (hFile=0x178) returned 0x1 [0064.919] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e508) returned 1 [0064.919] GetFileType (hFile=0x178) returned 0x1 [0064.921] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Microsoft Office\\Microsoft Office 2010 Tools\\Microsoft Office 2010 Language Preferences.lnk", nBufferLength=0x105, lpBuffer=0x31e14c, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Microsoft Office\\Microsoft Office 2010 Tools\\Microsoft Office 2010 Language Preferences.lnk", lpFilePart=0x0) returned 0x90 [0064.921] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Microsoft Office\\Microsoft Office 2010 Tools\\Microsoft Office 2010 Language Preferences.lnk", nBufferLength=0x105, lpBuffer=0x31e14c, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Microsoft Office\\Microsoft Office 2010 Tools\\Microsoft Office 2010 Language Preferences.lnk", lpFilePart=0x0) returned 0x90 [0064.921] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e5ac) returned 1 [0064.921] GetFileAttributesExW (in: lpFileName="C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Microsoft Office\\Microsoft Office 2010 Tools\\Microsoft Office 2010 Language Preferences.lnk" (normalized: "c:\\programdata\\microsoft\\windows\\start menu\\programs\\microsoft office\\microsoft office 2010 tools\\microsoft office 2010 language preferences.lnk"), fInfoLevelId=0x0, lpFileInformation=0x31e628 | out: lpFileInformation=0x31e628*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x780122b0, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0xc11c60a0, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0xa235d00, ftLastWriteTime.dwHighDateTime=0x1d6eb7f, nFileSizeHigh=0x0, nFileSizeLow=0xac0)) returned 1 [0064.921] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e5a8) returned 1 [0064.921] MoveFileW (lpExistingFileName="C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Microsoft Office\\Microsoft Office 2010 Tools\\Microsoft Office 2010 Language Preferences.lnk" (normalized: "c:\\programdata\\microsoft\\windows\\start menu\\programs\\microsoft office\\microsoft office 2010 tools\\microsoft office 2010 language preferences.lnk"), lpNewFileName="C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Microsoft Office\\Microsoft Office 2010 Tools\\Microsoft Office 2010 Language Preferences.lnk" (normalized: "c:\\programdata\\microsoft\\windows\\start menu\\programs\\microsoft office\\microsoft office 2010 tools\\microsoft office 2010 language preferences.lnk")) returned 1 [0064.922] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Microsoft Office\\Microsoft Office 2010 Tools\\Microsoft Office 2010 Upload Center.lnk", nBufferLength=0x105, lpBuffer=0x31e02c, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Microsoft Office\\Microsoft Office 2010 Tools\\Microsoft Office 2010 Upload Center.lnk", lpFilePart=0x0) returned 0x89 [0064.922] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e520) returned 1 [0064.922] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Microsoft Office\\Microsoft Office 2010 Tools\\Microsoft Office 2010 Upload Center.lnk" (normalized: "c:\\programdata\\microsoft\\windows\\start menu\\programs\\microsoft office\\microsoft office 2010 tools\\microsoft office 2010 upload center.lnk"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x178 [0064.922] GetFileType (hFile=0x178) returned 0x1 [0064.922] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e51c) returned 1 [0064.922] GetFileType (hFile=0x178) returned 0x1 [0064.922] GetFileSize (in: hFile=0x178, lpFileSizeHigh=0x31e628 | out: lpFileSizeHigh=0x31e628*=0x0) returned 0xb15 [0064.922] ReadFile (in: hFile=0x178, lpBuffer=0x2778630, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x31e5d4, lpOverlapped=0x0 | out: lpBuffer=0x2778630*, lpNumberOfBytesRead=0x31e5d4*=0xb15, lpOverlapped=0x0) returned 1 [0064.924] CloseHandle (hObject=0x178) returned 1 [0064.937] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Microsoft Office\\Microsoft Office 2010 Tools\\Microsoft Office 2010 Upload Center.lnk", nBufferLength=0x105, lpBuffer=0x31e018, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Microsoft Office\\Microsoft Office 2010 Tools\\Microsoft Office 2010 Upload Center.lnk", lpFilePart=0x0) returned 0x89 [0064.937] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e50c) returned 1 [0064.937] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Microsoft Office\\Microsoft Office 2010 Tools\\Microsoft Office 2010 Upload Center.lnk" (normalized: "c:\\programdata\\microsoft\\windows\\start menu\\programs\\microsoft office\\microsoft office 2010 tools\\microsoft office 2010 upload center.lnk"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x178 [0064.938] GetFileType (hFile=0x178) returned 0x1 [0064.938] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e508) returned 1 [0064.938] GetFileType (hFile=0x178) returned 0x1 [0064.938] WriteFile (in: hFile=0x178, lpBuffer=0x27c9da4*, nNumberOfBytesToWrite=0xb20, lpNumberOfBytesWritten=0x31e59c, lpOverlapped=0x0 | out: lpBuffer=0x27c9da4*, lpNumberOfBytesWritten=0x31e59c*=0xb20, lpOverlapped=0x0) returned 1 [0064.939] CloseHandle (hObject=0x178) returned 1 [0064.939] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Microsoft Office\\Microsoft Office 2010 Tools\\Microsoft Office 2010 Upload Center.lnk", nBufferLength=0x105, lpBuffer=0x31e14c, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Microsoft Office\\Microsoft Office 2010 Tools\\Microsoft Office 2010 Upload Center.lnk", lpFilePart=0x0) returned 0x89 [0064.939] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Microsoft Office\\Microsoft Office 2010 Tools\\Microsoft Office 2010 Upload Center.lnk", nBufferLength=0x105, lpBuffer=0x31e14c, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Microsoft Office\\Microsoft Office 2010 Tools\\Microsoft Office 2010 Upload Center.lnk", lpFilePart=0x0) returned 0x89 [0064.939] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e5ac) returned 1 [0064.939] GetFileAttributesExW (in: lpFileName="C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Microsoft Office\\Microsoft Office 2010 Tools\\Microsoft Office 2010 Upload Center.lnk" (normalized: "c:\\programdata\\microsoft\\windows\\start menu\\programs\\microsoft office\\microsoft office 2010 tools\\microsoft office 2010 upload center.lnk"), fInfoLevelId=0x0, lpFileInformation=0x31e628 | out: lpFileInformation=0x31e628*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x77fec150, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0xc119ff40, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0xa25be60, ftLastWriteTime.dwHighDateTime=0x1d6eb7f, nFileSizeHigh=0x0, nFileSizeLow=0xb20)) returned 1 [0064.939] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e5a8) returned 1 [0064.939] MoveFileW (lpExistingFileName="C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Microsoft Office\\Microsoft Office 2010 Tools\\Microsoft Office 2010 Upload Center.lnk" (normalized: "c:\\programdata\\microsoft\\windows\\start menu\\programs\\microsoft office\\microsoft office 2010 tools\\microsoft office 2010 upload center.lnk"), lpNewFileName="C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Microsoft Office\\Microsoft Office 2010 Tools\\Microsoft Office 2010 Upload Center.lnk" (normalized: "c:\\programdata\\microsoft\\windows\\start menu\\programs\\microsoft office\\microsoft office 2010 tools\\microsoft office 2010 upload center.lnk")) returned 1 [0064.940] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Microsoft Office\\Microsoft Office 2010 Tools\\Microsoft Office Picture Manager.lnk", nBufferLength=0x105, lpBuffer=0x31e02c, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Microsoft Office\\Microsoft Office 2010 Tools\\Microsoft Office Picture Manager.lnk", lpFilePart=0x0) returned 0x86 [0064.940] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e520) returned 1 [0064.940] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Microsoft Office\\Microsoft Office 2010 Tools\\Microsoft Office Picture Manager.lnk" (normalized: "c:\\programdata\\microsoft\\windows\\start menu\\programs\\microsoft office\\microsoft office 2010 tools\\microsoft office picture manager.lnk"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x178 [0064.940] GetFileType (hFile=0x178) returned 0x1 [0064.940] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e51c) returned 1 [0064.940] GetFileType (hFile=0x178) returned 0x1 [0064.940] GetFileSize (in: hFile=0x178, lpFileSizeHigh=0x31e628 | out: lpFileSizeHigh=0x31e628*=0x0) returned 0xb3b [0064.941] ReadFile (in: hFile=0x178, lpBuffer=0x27cbd20, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x31e5d4, lpOverlapped=0x0 | out: lpBuffer=0x27cbd20*, lpNumberOfBytesRead=0x31e5d4*=0xb3b, lpOverlapped=0x0) returned 1 [0064.942] CloseHandle (hObject=0x178) returned 1 [0064.955] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Microsoft Office\\Microsoft Office 2010 Tools\\Microsoft Office Picture Manager.lnk", nBufferLength=0x105, lpBuffer=0x31e018, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Microsoft Office\\Microsoft Office 2010 Tools\\Microsoft Office Picture Manager.lnk", lpFilePart=0x0) returned 0x86 [0064.955] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e50c) returned 1 [0064.955] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Microsoft Office\\Microsoft Office 2010 Tools\\Microsoft Office Picture Manager.lnk" (normalized: "c:\\programdata\\microsoft\\windows\\start menu\\programs\\microsoft office\\microsoft office 2010 tools\\microsoft office picture manager.lnk"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x178 [0064.956] GetFileType (hFile=0x178) returned 0x1 [0064.956] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e508) returned 1 [0064.956] GetFileType (hFile=0x178) returned 0x1 [0064.956] WriteFile (in: hFile=0x178, lpBuffer=0x281d528*, nNumberOfBytesToWrite=0xb40, lpNumberOfBytesWritten=0x31e59c, lpOverlapped=0x0 | out: lpBuffer=0x281d528*, lpNumberOfBytesWritten=0x31e59c*=0xb40, lpOverlapped=0x0) returned 1 [0064.956] CloseHandle (hObject=0x178) returned 1 [0064.957] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Microsoft Office\\Microsoft Office 2010 Tools\\Microsoft Office Picture Manager.lnk", nBufferLength=0x105, lpBuffer=0x31e14c, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Microsoft Office\\Microsoft Office 2010 Tools\\Microsoft Office Picture Manager.lnk", lpFilePart=0x0) returned 0x86 [0064.957] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Microsoft Office\\Microsoft Office 2010 Tools\\Microsoft Office Picture Manager.lnk", nBufferLength=0x105, lpBuffer=0x31e14c, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Microsoft Office\\Microsoft Office 2010 Tools\\Microsoft Office Picture Manager.lnk", lpFilePart=0x0) returned 0x86 [0064.957] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e5ac) returned 1 [0064.957] GetFileAttributesExW (in: lpFileName="C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Microsoft Office\\Microsoft Office 2010 Tools\\Microsoft Office Picture Manager.lnk" (normalized: "c:\\programdata\\microsoft\\windows\\start menu\\programs\\microsoft office\\microsoft office 2010 tools\\microsoft office picture manager.lnk"), fInfoLevelId=0x0, lpFileInformation=0x31e628 | out: lpFileInformation=0x31e628*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x77fec150, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0xc1179de0, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0xa281fc0, ftLastWriteTime.dwHighDateTime=0x1d6eb7f, nFileSizeHigh=0x0, nFileSizeLow=0xb40)) returned 1 [0064.957] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e5a8) returned 1 [0064.957] MoveFileW (lpExistingFileName="C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Microsoft Office\\Microsoft Office 2010 Tools\\Microsoft Office Picture Manager.lnk" (normalized: "c:\\programdata\\microsoft\\windows\\start menu\\programs\\microsoft office\\microsoft office 2010 tools\\microsoft office picture manager.lnk"), lpNewFileName="C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Microsoft Office\\Microsoft Office 2010 Tools\\Microsoft Office Picture Manager.lnk" (normalized: "c:\\programdata\\microsoft\\windows\\start menu\\programs\\microsoft office\\microsoft office 2010 tools\\microsoft office picture manager.lnk")) returned 1 [0064.957] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Microsoft Office\\Microsoft Office 2010 Tools\\Microsoft Project Server 2010 Accounts.lnk", nBufferLength=0x105, lpBuffer=0x31e02c, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Microsoft Office\\Microsoft Office 2010 Tools\\Microsoft Project Server 2010 Accounts.lnk", lpFilePart=0x0) returned 0x8c [0064.957] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e520) returned 1 [0064.958] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Microsoft Office\\Microsoft Office 2010 Tools\\Microsoft Project Server 2010 Accounts.lnk" (normalized: "c:\\programdata\\microsoft\\windows\\start menu\\programs\\microsoft office\\microsoft office 2010 tools\\microsoft project server 2010 accounts.lnk"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x178 [0064.958] GetFileType (hFile=0x178) returned 0x1 [0064.958] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e51c) returned 1 [0064.958] GetFileType (hFile=0x178) returned 0x1 [0064.958] GetFileSize (in: hFile=0x178, lpFileSizeHigh=0x31e628 | out: lpFileSizeHigh=0x31e628*=0x0) returned 0xbb7 [0064.958] ReadFile (in: hFile=0x178, lpBuffer=0x281f530, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x31e5d4, lpOverlapped=0x0 | out: lpBuffer=0x281f530*, lpNumberOfBytesRead=0x31e5d4*=0xbb7, lpOverlapped=0x0) returned 1 [0064.960] CloseHandle (hObject=0x178) returned 1 [0065.001] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Microsoft Office\\Microsoft Office 2010 Tools\\Microsoft Project Server 2010 Accounts.lnk", nBufferLength=0x105, lpBuffer=0x31e018, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Microsoft Office\\Microsoft Office 2010 Tools\\Microsoft Project Server 2010 Accounts.lnk", lpFilePart=0x0) returned 0x8c [0065.001] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e50c) returned 1 [0065.001] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Microsoft Office\\Microsoft Office 2010 Tools\\Microsoft Project Server 2010 Accounts.lnk" (normalized: "c:\\programdata\\microsoft\\windows\\start menu\\programs\\microsoft office\\microsoft office 2010 tools\\microsoft project server 2010 accounts.lnk"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x178 [0065.002] GetFileType (hFile=0x178) returned 0x1 [0065.002] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e508) returned 1 [0065.002] GetFileType (hFile=0x178) returned 0x1 [0065.002] WriteFile (in: hFile=0x178, lpBuffer=0x2673f94*, nNumberOfBytesToWrite=0xbc0, lpNumberOfBytesWritten=0x31e59c, lpOverlapped=0x0 | out: lpBuffer=0x2673f94*, lpNumberOfBytesWritten=0x31e59c*=0xbc0, lpOverlapped=0x0) returned 1 [0065.003] CloseHandle (hObject=0x178) returned 1 [0065.003] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Microsoft Office\\Microsoft Office 2010 Tools\\Microsoft Project Server 2010 Accounts.lnk", nBufferLength=0x105, lpBuffer=0x31e14c, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Microsoft Office\\Microsoft Office 2010 Tools\\Microsoft Project Server 2010 Accounts.lnk", lpFilePart=0x0) returned 0x8c [0065.003] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Microsoft Office\\Microsoft Office 2010 Tools\\Microsoft Project Server 2010 Accounts.lnk", nBufferLength=0x105, lpBuffer=0x31e14c, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Microsoft Office\\Microsoft Office 2010 Tools\\Microsoft Project Server 2010 Accounts.lnk", lpFilePart=0x0) returned 0x8c [0065.003] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e5ac) returned 1 [0065.003] GetFileAttributesExW (in: lpFileName="C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Microsoft Office\\Microsoft Office 2010 Tools\\Microsoft Project Server 2010 Accounts.lnk" (normalized: "c:\\programdata\\microsoft\\windows\\start menu\\programs\\microsoft office\\microsoft office 2010 tools\\microsoft project server 2010 accounts.lnk"), fInfoLevelId=0x0, lpFileInformation=0x31e628 | out: lpFileInformation=0x31e628*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc11c60a0, ftCreationTime.dwHighDateTime=0x1d305f1, ftLastAccessTime.dwLowDateTime=0xc11c60a0, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0xa2f43e0, ftLastWriteTime.dwHighDateTime=0x1d6eb7f, nFileSizeHigh=0x0, nFileSizeLow=0xbc0)) returned 1 [0065.003] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e5a8) returned 1 [0065.003] MoveFileW (lpExistingFileName="C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Microsoft Office\\Microsoft Office 2010 Tools\\Microsoft Project Server 2010 Accounts.lnk" (normalized: "c:\\programdata\\microsoft\\windows\\start menu\\programs\\microsoft office\\microsoft office 2010 tools\\microsoft project server 2010 accounts.lnk"), lpNewFileName="C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Microsoft Office\\Microsoft Office 2010 Tools\\Microsoft Project Server 2010 Accounts.lnk" (normalized: "c:\\programdata\\microsoft\\windows\\start menu\\programs\\microsoft office\\microsoft office 2010 tools\\microsoft project server 2010 accounts.lnk")) returned 1 [0065.004] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e6cc) returned 1 [0065.004] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\SharePoint", nBufferLength=0x105, lpBuffer=0x31e1d4, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\SharePoint", lpFilePart=0x0) returned 0x3f [0065.004] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\SharePoint\\", nBufferLength=0x105, lpBuffer=0x31e1a8, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\SharePoint\\", lpFilePart=0x0) returned 0x40 [0065.004] FindFirstFileW (in: lpFileName="C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\SharePoint\\*", lpFindFileData=0x31e3f4 | out: lpFindFileData=0x31e3f4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x78038410, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x78038410, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x78038410, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5107de0 [0065.005] FindNextFileW (in: hFindFile=0x5107de0, lpFindFileData=0x31e404 | out: lpFindFileData=0x31e404*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x78038410, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x78038410, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x78038410, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0065.005] FindNextFileW (in: hFindFile=0x5107de0, lpFindFileData=0x31e404 | out: lpFindFileData=0x31e404*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x78038410, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x78038410, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x78038410, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0xbef, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft SharePoint Workspace 2010.lnk", cAlternateFileName="MICROS~1.LNK")) returned 1 [0065.005] FindNextFileW (in: hFindFile=0x5107de0, lpFindFileData=0x31e404 | out: lpFindFileData=0x31e404*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0065.005] FindClose (in: hFindFile=0x5107de0 | out: hFindFile=0x5107de0) returned 1 [0065.006] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e68c) returned 1 [0065.006] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e698) returned 1 [0065.006] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e6cc) returned 1 [0065.006] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\SharePoint", nBufferLength=0x105, lpBuffer=0x31e1d4, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\SharePoint", lpFilePart=0x0) returned 0x3f [0065.006] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\SharePoint\\", nBufferLength=0x105, lpBuffer=0x31e1a8, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\SharePoint\\", lpFilePart=0x0) returned 0x40 [0065.006] FindFirstFileW (in: lpFileName="C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\SharePoint\\*", lpFindFileData=0x31e3f4 | out: lpFindFileData=0x31e3f4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x78038410, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x78038410, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x78038410, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5107de0 [0065.007] FindNextFileW (in: hFindFile=0x5107de0, lpFindFileData=0x31e404 | out: lpFindFileData=0x31e404*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x78038410, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x78038410, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x78038410, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0065.007] FindNextFileW (in: hFindFile=0x5107de0, lpFindFileData=0x31e404 | out: lpFindFileData=0x31e404*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x78038410, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x78038410, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x78038410, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0xbef, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft SharePoint Workspace 2010.lnk", cAlternateFileName="MICROS~1.LNK")) returned 1 [0065.007] FindNextFileW (in: hFindFile=0x5107de0, lpFindFileData=0x31e404 | out: lpFindFileData=0x31e404*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x78038410, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x78038410, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x78038410, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0xbef, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft SharePoint Workspace 2010.lnk", cAlternateFileName="MICROS~1.LNK")) returned 0 [0065.007] FindClose (in: hFindFile=0x5107de0 | out: hFindFile=0x5107de0) returned 1 [0065.008] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e68c) returned 1 [0065.008] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e698) returned 1 [0065.008] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\SharePoint\\Microsoft SharePoint Workspace 2010.lnk", nBufferLength=0x105, lpBuffer=0x31e0a4, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\SharePoint\\Microsoft SharePoint Workspace 2010.lnk", lpFilePart=0x0) returned 0x67 [0065.008] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e598) returned 1 [0065.008] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\SharePoint\\Microsoft SharePoint Workspace 2010.lnk" (normalized: "c:\\programdata\\microsoft\\windows\\start menu\\programs\\sharepoint\\microsoft sharepoint workspace 2010.lnk"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x178 [0065.009] GetFileType (hFile=0x178) returned 0x1 [0065.009] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e594) returned 1 [0065.009] GetFileType (hFile=0x178) returned 0x1 [0065.009] GetFileSize (in: hFile=0x178, lpFileSizeHigh=0x31e6a0 | out: lpFileSizeHigh=0x31e6a0*=0x0) returned 0xbef [0065.009] ReadFile (in: hFile=0x178, lpBuffer=0x2677960, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x31e64c, lpOverlapped=0x0 | out: lpBuffer=0x2677960*, lpNumberOfBytesRead=0x31e64c*=0xbef, lpOverlapped=0x0) returned 1 [0065.011] CloseHandle (hObject=0x178) returned 1 [0065.024] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\SharePoint\\Microsoft SharePoint Workspace 2010.lnk", nBufferLength=0x105, lpBuffer=0x31e090, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\SharePoint\\Microsoft SharePoint Workspace 2010.lnk", lpFilePart=0x0) returned 0x67 [0065.024] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e584) returned 1 [0065.024] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\SharePoint\\Microsoft SharePoint Workspace 2010.lnk" (normalized: "c:\\programdata\\microsoft\\windows\\start menu\\programs\\sharepoint\\microsoft sharepoint workspace 2010.lnk"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x178 [0065.025] GetFileType (hFile=0x178) returned 0x1 [0065.025] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e580) returned 1 [0065.025] GetFileType (hFile=0x178) returned 0x1 [0065.025] WriteFile (in: hFile=0x178, lpBuffer=0x26c95f4*, nNumberOfBytesToWrite=0xbf0, lpNumberOfBytesWritten=0x31e614, lpOverlapped=0x0 | out: lpBuffer=0x26c95f4*, lpNumberOfBytesWritten=0x31e614*=0xbf0, lpOverlapped=0x0) returned 1 [0065.026] CloseHandle (hObject=0x178) returned 1 [0065.026] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\SharePoint\\Microsoft SharePoint Workspace 2010.lnk", nBufferLength=0x105, lpBuffer=0x31e1c4, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\SharePoint\\Microsoft SharePoint Workspace 2010.lnk", lpFilePart=0x0) returned 0x67 [0065.026] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\SharePoint\\Microsoft SharePoint Workspace 2010.lnk", nBufferLength=0x105, lpBuffer=0x31e1c4, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\SharePoint\\Microsoft SharePoint Workspace 2010.lnk", lpFilePart=0x0) returned 0x67 [0065.026] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e624) returned 1 [0065.026] GetFileAttributesExW (in: lpFileName="C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\SharePoint\\Microsoft SharePoint Workspace 2010.lnk" (normalized: "c:\\programdata\\microsoft\\windows\\start menu\\programs\\sharepoint\\microsoft sharepoint workspace 2010.lnk"), fInfoLevelId=0x0, lpFileInformation=0x31e6a0 | out: lpFileInformation=0x31e6a0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x78038410, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x78038410, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xa3406a0, ftLastWriteTime.dwHighDateTime=0x1d6eb7f, nFileSizeHigh=0x0, nFileSizeLow=0xbf0)) returned 1 [0065.026] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e620) returned 1 [0065.026] MoveFileW (lpExistingFileName="C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\SharePoint\\Microsoft SharePoint Workspace 2010.lnk" (normalized: "c:\\programdata\\microsoft\\windows\\start menu\\programs\\sharepoint\\microsoft sharepoint workspace 2010.lnk"), lpNewFileName="C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\SharePoint\\Microsoft SharePoint Workspace 2010.lnk" (normalized: "c:\\programdata\\microsoft\\windows\\start menu\\programs\\sharepoint\\microsoft sharepoint workspace 2010.lnk")) returned 1 [0065.027] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e6cc) returned 1 [0065.027] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Startup", nBufferLength=0x105, lpBuffer=0x31e1d4, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Startup", lpFilePart=0x0) returned 0x3c [0065.027] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Startup\\", nBufferLength=0x105, lpBuffer=0x31e1a8, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Startup\\", lpFilePart=0x0) returned 0x3d [0065.027] FindFirstFileW (in: lpFileName="C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Startup\\*", lpFindFileData=0x31e3f4 | out: lpFindFileData=0x31e3f4*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0xfd9dbcac, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x2832bdaf, ftLastAccessTime.dwHighDateTime=0x1ca043f, ftLastWriteTime.dwLowDateTime=0x288ad099, ftLastWriteTime.dwHighDateTime=0x1ca043f, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5107b20 [0065.027] FindNextFileW (in: hFindFile=0x5107b20, lpFindFileData=0x31e404 | out: lpFindFileData=0x31e404*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0xfd9dbcac, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x2832bdaf, ftLastAccessTime.dwHighDateTime=0x1ca043f, ftLastWriteTime.dwLowDateTime=0x288ad099, ftLastWriteTime.dwHighDateTime=0x1ca043f, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0065.027] FindNextFileW (in: hFindFile=0x5107b20, lpFindFileData=0x31e404 | out: lpFindFileData=0x31e404*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0x2832bdaf, ftCreationTime.dwHighDateTime=0x1ca043f, ftLastAccessTime.dwLowDateTime=0x2832bdaf, ftLastAccessTime.dwHighDateTime=0x1ca043f, ftLastWriteTime.dwLowDateTime=0x288ad099, ftLastWriteTime.dwHighDateTime=0x1ca043f, nFileSizeHigh=0x0, nFileSizeLow=0xae, dwReserved0=0x0, dwReserved1=0x0, cFileName="desktop.ini", cAlternateFileName="")) returned 1 [0065.028] FindNextFileW (in: hFindFile=0x5107b20, lpFindFileData=0x31e404 | out: lpFindFileData=0x31e404*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0065.028] FindClose (in: hFindFile=0x5107b20 | out: hFindFile=0x5107b20) returned 1 [0065.028] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e68c) returned 1 [0065.028] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e698) returned 1 [0065.028] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e6cc) returned 1 [0065.028] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Startup", nBufferLength=0x105, lpBuffer=0x31e1d4, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Startup", lpFilePart=0x0) returned 0x3c [0065.028] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Startup\\", nBufferLength=0x105, lpBuffer=0x31e1a8, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Startup\\", lpFilePart=0x0) returned 0x3d [0065.028] FindFirstFileW (in: lpFileName="C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Startup\\*", lpFindFileData=0x31e3f4 | out: lpFindFileData=0x31e3f4*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0xfd9dbcac, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x2832bdaf, ftLastAccessTime.dwHighDateTime=0x1ca043f, ftLastWriteTime.dwLowDateTime=0x288ad099, ftLastWriteTime.dwHighDateTime=0x1ca043f, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5107b20 [0065.028] FindNextFileW (in: hFindFile=0x5107b20, lpFindFileData=0x31e404 | out: lpFindFileData=0x31e404*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0xfd9dbcac, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x2832bdaf, ftLastAccessTime.dwHighDateTime=0x1ca043f, ftLastWriteTime.dwLowDateTime=0x288ad099, ftLastWriteTime.dwHighDateTime=0x1ca043f, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0065.028] FindNextFileW (in: hFindFile=0x5107b20, lpFindFileData=0x31e404 | out: lpFindFileData=0x31e404*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0x2832bdaf, ftCreationTime.dwHighDateTime=0x1ca043f, ftLastAccessTime.dwLowDateTime=0x2832bdaf, ftLastAccessTime.dwHighDateTime=0x1ca043f, ftLastWriteTime.dwLowDateTime=0x288ad099, ftLastWriteTime.dwHighDateTime=0x1ca043f, nFileSizeHigh=0x0, nFileSizeLow=0xae, dwReserved0=0x0, dwReserved1=0x0, cFileName="desktop.ini", cAlternateFileName="")) returned 1 [0065.028] FindNextFileW (in: hFindFile=0x5107b20, lpFindFileData=0x31e404 | out: lpFindFileData=0x31e404*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0x2832bdaf, ftCreationTime.dwHighDateTime=0x1ca043f, ftLastAccessTime.dwLowDateTime=0x2832bdaf, ftLastAccessTime.dwHighDateTime=0x1ca043f, ftLastWriteTime.dwLowDateTime=0x288ad099, ftLastWriteTime.dwHighDateTime=0x1ca043f, nFileSizeHigh=0x0, nFileSizeLow=0xae, dwReserved0=0x0, dwReserved1=0x0, cFileName="desktop.ini", cAlternateFileName="")) returned 0 [0065.029] FindClose (in: hFindFile=0x5107b20 | out: hFindFile=0x5107b20) returned 1 [0065.029] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e68c) returned 1 [0065.029] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e698) returned 1 [0065.029] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e6cc) returned 1 [0065.029] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Tablet PC", nBufferLength=0x105, lpBuffer=0x31e1d4, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Tablet PC", lpFilePart=0x0) returned 0x3e [0065.029] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Tablet PC\\", nBufferLength=0x105, lpBuffer=0x31e1a8, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Tablet PC\\", lpFilePart=0x0) returned 0x3f [0065.029] FindFirstFileW (in: lpFileName="C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Tablet PC\\*", lpFindFileData=0x31e3f4 | out: lpFindFileData=0x31e3f4*(dwFileAttributes=0x13, ftCreationTime.dwLowDateTime=0x9182055d, ftCreationTime.dwHighDateTime=0x1cbf8eb, ftLastAccessTime.dwLowDateTime=0x9182055d, ftLastAccessTime.dwHighDateTime=0x1cbf8eb, ftLastWriteTime.dwLowDateTime=0x9182055d, ftLastWriteTime.dwHighDateTime=0x1cbf8eb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5107b20 [0065.031] FindNextFileW (in: hFindFile=0x5107b20, lpFindFileData=0x31e404 | out: lpFindFileData=0x31e404*(dwFileAttributes=0x13, ftCreationTime.dwLowDateTime=0x9182055d, ftCreationTime.dwHighDateTime=0x1cbf8eb, ftLastAccessTime.dwLowDateTime=0x9182055d, ftLastAccessTime.dwHighDateTime=0x1cbf8eb, ftLastWriteTime.dwLowDateTime=0x9182055d, ftLastWriteTime.dwHighDateTime=0x1cbf8eb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0065.032] FindNextFileW (in: hFindFile=0x5107b20, lpFindFileData=0x31e404 | out: lpFindFileData=0x31e404*(dwFileAttributes=0x13, ftCreationTime.dwLowDateTime=0x9182055d, ftCreationTime.dwHighDateTime=0x1cbf8eb, ftLastAccessTime.dwLowDateTime=0x9182055d, ftLastAccessTime.dwHighDateTime=0x1cbf8eb, ftLastWriteTime.dwLowDateTime=0x9182055d, ftLastWriteTime.dwHighDateTime=0x1cbf8eb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 0 [0065.032] FindClose (in: hFindFile=0x5107b20 | out: hFindFile=0x5107b20) returned 1 [0065.032] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e68c) returned 1 [0065.032] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e698) returned 1 [0065.032] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e6cc) returned 1 [0065.032] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Tablet PC", nBufferLength=0x105, lpBuffer=0x31e1d4, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Tablet PC", lpFilePart=0x0) returned 0x3e [0065.032] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Tablet PC\\", nBufferLength=0x105, lpBuffer=0x31e1a8, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Tablet PC\\", lpFilePart=0x0) returned 0x3f [0065.032] FindFirstFileW (in: lpFileName="C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Tablet PC\\*", lpFindFileData=0x31e3f4 | out: lpFindFileData=0x31e3f4*(dwFileAttributes=0x13, ftCreationTime.dwLowDateTime=0x9182055d, ftCreationTime.dwHighDateTime=0x1cbf8eb, ftLastAccessTime.dwLowDateTime=0x9182055d, ftLastAccessTime.dwHighDateTime=0x1cbf8eb, ftLastWriteTime.dwLowDateTime=0x9182055d, ftLastWriteTime.dwHighDateTime=0x1cbf8eb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5107b20 [0065.032] FindNextFileW (in: hFindFile=0x5107b20, lpFindFileData=0x31e404 | out: lpFindFileData=0x31e404*(dwFileAttributes=0x13, ftCreationTime.dwLowDateTime=0x9182055d, ftCreationTime.dwHighDateTime=0x1cbf8eb, ftLastAccessTime.dwLowDateTime=0x9182055d, ftLastAccessTime.dwHighDateTime=0x1cbf8eb, ftLastWriteTime.dwLowDateTime=0x9182055d, ftLastWriteTime.dwHighDateTime=0x1cbf8eb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0065.032] FindNextFileW (in: hFindFile=0x5107b20, lpFindFileData=0x31e404 | out: lpFindFileData=0x31e404*(dwFileAttributes=0x13, ftCreationTime.dwLowDateTime=0x9182055d, ftCreationTime.dwHighDateTime=0x1cbf8eb, ftLastAccessTime.dwLowDateTime=0x9182055d, ftLastAccessTime.dwHighDateTime=0x1cbf8eb, ftLastWriteTime.dwLowDateTime=0x9182055d, ftLastWriteTime.dwHighDateTime=0x1cbf8eb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 0 [0065.032] FindClose (in: hFindFile=0x5107b20 | out: hFindFile=0x5107b20) returned 1 [0065.032] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e68c) returned 1 [0065.033] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e698) returned 1 [0065.033] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e7bc) returned 1 [0065.033] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\Windows\\Templates", nBufferLength=0x105, lpBuffer=0x31e2c4, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\Windows\\Templates", lpFilePart=0x0) returned 0x2a [0065.033] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\Windows\\Templates\\", nBufferLength=0x105, lpBuffer=0x31e298, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\Windows\\Templates\\", lpFilePart=0x0) returned 0x2b [0065.033] FindFirstFileW (in: lpFileName="C:\\ProgramData\\Microsoft\\Windows\\Templates\\*", lpFindFileData=0x31e4e4 | out: lpFindFileData=0x31e4e4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xfd9dbcac, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd9dbcac, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xaeea3462, ftLastWriteTime.dwHighDateTime=0x1ca042b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5107b20 [0065.033] FindNextFileW (in: hFindFile=0x5107b20, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xfd9dbcac, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd9dbcac, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xaeea3462, ftLastWriteTime.dwHighDateTime=0x1ca042b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0065.033] FindNextFileW (in: hFindFile=0x5107b20, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xfd9dbcac, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd9dbcac, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xaeea3462, ftLastWriteTime.dwHighDateTime=0x1ca042b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 0 [0065.033] FindClose (in: hFindFile=0x5107b20 | out: hFindFile=0x5107b20) returned 1 [0065.033] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e77c) returned 1 [0065.033] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e788) returned 1 [0065.033] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e7bc) returned 1 [0065.034] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\Windows\\Templates", nBufferLength=0x105, lpBuffer=0x31e2c4, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\Windows\\Templates", lpFilePart=0x0) returned 0x2a [0065.034] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\Windows\\Templates\\", nBufferLength=0x105, lpBuffer=0x31e298, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\Windows\\Templates\\", lpFilePart=0x0) returned 0x2b [0065.034] FindFirstFileW (in: lpFileName="C:\\ProgramData\\Microsoft\\Windows\\Templates\\*", lpFindFileData=0x31e4e4 | out: lpFindFileData=0x31e4e4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xfd9dbcac, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd9dbcac, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xaeea3462, ftLastWriteTime.dwHighDateTime=0x1ca042b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5107b20 [0065.034] FindNextFileW (in: hFindFile=0x5107b20, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xfd9dbcac, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd9dbcac, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xaeea3462, ftLastWriteTime.dwHighDateTime=0x1ca042b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0065.034] FindNextFileW (in: hFindFile=0x5107b20, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xfd9dbcac, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd9dbcac, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xaeea3462, ftLastWriteTime.dwHighDateTime=0x1ca042b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 0 [0065.034] FindClose (in: hFindFile=0x5107b20 | out: hFindFile=0x5107b20) returned 1 [0065.034] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e77c) returned 1 [0065.034] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e788) returned 1 [0065.034] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e7bc) returned 1 [0065.034] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\Windows\\WER", nBufferLength=0x105, lpBuffer=0x31e2c4, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\Windows\\WER", lpFilePart=0x0) returned 0x24 [0065.034] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\Windows\\WER\\", nBufferLength=0x105, lpBuffer=0x31e298, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\Windows\\WER\\", lpFilePart=0x0) returned 0x25 [0065.034] FindFirstFileW (in: lpFileName="C:\\ProgramData\\Microsoft\\Windows\\WER\\*", lpFindFileData=0x31e4e4 | out: lpFindFileData=0x31e4e4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xfd9dbcac, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfda01e06, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xfda01e06, ftLastWriteTime.dwHighDateTime=0x1ca0431, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5107b20 [0065.035] FindNextFileW (in: hFindFile=0x5107b20, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xfd9dbcac, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfda01e06, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xfda01e06, ftLastWriteTime.dwHighDateTime=0x1ca0431, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0065.035] FindNextFileW (in: hFindFile=0x5107b20, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfda01e06, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfda01e06, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0x9a0a5fd1, ftLastWriteTime.dwHighDateTime=0x1ca042b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="ReportArchive", cAlternateFileName="REPORT~1")) returned 1 [0065.035] FindNextFileW (in: hFindFile=0x5107b20, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x810, ftCreationTime.dwLowDateTime=0xfda01e06, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x2fb59300, ftLastAccessTime.dwHighDateTime=0x1d42023, ftLastWriteTime.dwLowDateTime=0x2fb59300, ftLastWriteTime.dwHighDateTime=0x1d42023, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="ReportQueue", cAlternateFileName="REPORT~2")) returned 1 [0065.035] FindNextFileW (in: hFindFile=0x5107b20, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x810, ftCreationTime.dwLowDateTime=0xfda01e06, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x2fb59300, ftLastAccessTime.dwHighDateTime=0x1d42023, ftLastWriteTime.dwLowDateTime=0x2fb59300, ftLastWriteTime.dwHighDateTime=0x1d42023, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="ReportQueue", cAlternateFileName="REPORT~2")) returned 0 [0065.035] FindClose (in: hFindFile=0x5107b20 | out: hFindFile=0x5107b20) returned 1 [0065.035] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e77c) returned 1 [0065.036] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e788) returned 1 [0065.036] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e7bc) returned 1 [0065.036] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\Windows\\WER", nBufferLength=0x105, lpBuffer=0x31e2c4, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\Windows\\WER", lpFilePart=0x0) returned 0x24 [0065.036] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\Windows\\WER\\", nBufferLength=0x105, lpBuffer=0x31e298, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\Windows\\WER\\", lpFilePart=0x0) returned 0x25 [0065.036] FindFirstFileW (in: lpFileName="C:\\ProgramData\\Microsoft\\Windows\\WER\\*", lpFindFileData=0x31e4e4 | out: lpFindFileData=0x31e4e4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xfd9dbcac, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfda01e06, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xfda01e06, ftLastWriteTime.dwHighDateTime=0x1ca0431, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5107b20 [0065.036] FindNextFileW (in: hFindFile=0x5107b20, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xfd9dbcac, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfda01e06, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xfda01e06, ftLastWriteTime.dwHighDateTime=0x1ca0431, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0065.036] FindNextFileW (in: hFindFile=0x5107b20, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfda01e06, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfda01e06, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0x9a0a5fd1, ftLastWriteTime.dwHighDateTime=0x1ca042b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="ReportArchive", cAlternateFileName="REPORT~1")) returned 1 [0065.036] FindNextFileW (in: hFindFile=0x5107b20, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x810, ftCreationTime.dwLowDateTime=0xfda01e06, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x2fb59300, ftLastAccessTime.dwHighDateTime=0x1d42023, ftLastWriteTime.dwLowDateTime=0x2fb59300, ftLastWriteTime.dwHighDateTime=0x1d42023, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="ReportQueue", cAlternateFileName="REPORT~2")) returned 1 [0065.036] FindNextFileW (in: hFindFile=0x5107b20, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0065.036] FindClose (in: hFindFile=0x5107b20 | out: hFindFile=0x5107b20) returned 1 [0065.037] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e77c) returned 1 [0065.037] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e788) returned 1 [0065.037] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e744) returned 1 [0065.037] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\Windows\\WER\\ReportArchive", nBufferLength=0x105, lpBuffer=0x31e24c, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\Windows\\WER\\ReportArchive", lpFilePart=0x0) returned 0x32 [0065.037] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\Windows\\WER\\ReportArchive\\", nBufferLength=0x105, lpBuffer=0x31e220, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\Windows\\WER\\ReportArchive\\", lpFilePart=0x0) returned 0x33 [0065.037] FindFirstFileW (in: lpFileName="C:\\ProgramData\\Microsoft\\Windows\\WER\\ReportArchive\\*", lpFindFileData=0x31e46c | out: lpFindFileData=0x31e46c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfda01e06, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfda01e06, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0x9a0a5fd1, ftLastWriteTime.dwHighDateTime=0x1ca042b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5107b20 [0065.037] FindNextFileW (in: hFindFile=0x5107b20, lpFindFileData=0x31e47c | out: lpFindFileData=0x31e47c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfda01e06, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfda01e06, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0x9a0a5fd1, ftLastWriteTime.dwHighDateTime=0x1ca042b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0065.037] FindNextFileW (in: hFindFile=0x5107b20, lpFindFileData=0x31e47c | out: lpFindFileData=0x31e47c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfda01e06, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfda01e06, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0x9a0a5fd1, ftLastWriteTime.dwHighDateTime=0x1ca042b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 0 [0065.037] FindClose (in: hFindFile=0x5107b20 | out: hFindFile=0x5107b20) returned 1 [0065.037] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e704) returned 1 [0065.037] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e710) returned 1 [0065.037] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e744) returned 1 [0065.037] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\Windows\\WER\\ReportArchive", nBufferLength=0x105, lpBuffer=0x31e24c, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\Windows\\WER\\ReportArchive", lpFilePart=0x0) returned 0x32 [0065.038] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\Windows\\WER\\ReportArchive\\", nBufferLength=0x105, lpBuffer=0x31e220, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\Windows\\WER\\ReportArchive\\", lpFilePart=0x0) returned 0x33 [0065.038] FindFirstFileW (in: lpFileName="C:\\ProgramData\\Microsoft\\Windows\\WER\\ReportArchive\\*", lpFindFileData=0x31e46c | out: lpFindFileData=0x31e46c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfda01e06, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfda01e06, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0x9a0a5fd1, ftLastWriteTime.dwHighDateTime=0x1ca042b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5107b20 [0065.038] FindNextFileW (in: hFindFile=0x5107b20, lpFindFileData=0x31e47c | out: lpFindFileData=0x31e47c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfda01e06, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfda01e06, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0x9a0a5fd1, ftLastWriteTime.dwHighDateTime=0x1ca042b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0065.038] FindNextFileW (in: hFindFile=0x5107b20, lpFindFileData=0x31e47c | out: lpFindFileData=0x31e47c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfda01e06, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfda01e06, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0x9a0a5fd1, ftLastWriteTime.dwHighDateTime=0x1ca042b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 0 [0065.038] FindClose (in: hFindFile=0x5107b20 | out: hFindFile=0x5107b20) returned 1 [0065.038] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e704) returned 1 [0065.038] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e710) returned 1 [0065.038] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e744) returned 1 [0065.038] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\Windows\\WER\\ReportQueue", nBufferLength=0x105, lpBuffer=0x31e24c, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\Windows\\WER\\ReportQueue", lpFilePart=0x0) returned 0x30 [0065.038] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\Windows\\WER\\ReportQueue\\", nBufferLength=0x105, lpBuffer=0x31e220, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\Windows\\WER\\ReportQueue\\", lpFilePart=0x0) returned 0x31 [0065.038] FindFirstFileW (in: lpFileName="C:\\ProgramData\\Microsoft\\Windows\\WER\\ReportQueue\\*", lpFindFileData=0x31e46c | out: lpFindFileData=0x31e46c*(dwFileAttributes=0x810, ftCreationTime.dwLowDateTime=0xfda01e06, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x2fb59300, ftLastAccessTime.dwHighDateTime=0x1d42023, ftLastWriteTime.dwLowDateTime=0x2fb59300, ftLastWriteTime.dwHighDateTime=0x1d42023, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5107b20 [0065.039] FindNextFileW (in: hFindFile=0x5107b20, lpFindFileData=0x31e47c | out: lpFindFileData=0x31e47c*(dwFileAttributes=0x810, ftCreationTime.dwLowDateTime=0xfda01e06, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x2fb59300, ftLastAccessTime.dwHighDateTime=0x1d42023, ftLastWriteTime.dwLowDateTime=0x2fb59300, ftLastWriteTime.dwHighDateTime=0x1d42023, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0065.039] FindNextFileW (in: hFindFile=0x5107b20, lpFindFileData=0x31e47c | out: lpFindFileData=0x31e47c*(dwFileAttributes=0x810, ftCreationTime.dwLowDateTime=0xfda01e06, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x2fb59300, ftLastAccessTime.dwHighDateTime=0x1d42023, ftLastWriteTime.dwLowDateTime=0x2fb59300, ftLastWriteTime.dwHighDateTime=0x1d42023, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 0 [0065.039] FindClose (in: hFindFile=0x5107b20 | out: hFindFile=0x5107b20) returned 1 [0065.039] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e704) returned 1 [0065.040] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e710) returned 1 [0065.040] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e744) returned 1 [0065.040] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\Windows\\WER\\ReportQueue", nBufferLength=0x105, lpBuffer=0x31e24c, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\Windows\\WER\\ReportQueue", lpFilePart=0x0) returned 0x30 [0065.040] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\Windows\\WER\\ReportQueue\\", nBufferLength=0x105, lpBuffer=0x31e220, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\Windows\\WER\\ReportQueue\\", lpFilePart=0x0) returned 0x31 [0065.040] FindFirstFileW (in: lpFileName="C:\\ProgramData\\Microsoft\\Windows\\WER\\ReportQueue\\*", lpFindFileData=0x31e46c | out: lpFindFileData=0x31e46c*(dwFileAttributes=0x810, ftCreationTime.dwLowDateTime=0xfda01e06, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x2fb59300, ftLastAccessTime.dwHighDateTime=0x1d42023, ftLastWriteTime.dwLowDateTime=0x2fb59300, ftLastWriteTime.dwHighDateTime=0x1d42023, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5107b20 [0065.040] FindNextFileW (in: hFindFile=0x5107b20, lpFindFileData=0x31e47c | out: lpFindFileData=0x31e47c*(dwFileAttributes=0x810, ftCreationTime.dwLowDateTime=0xfda01e06, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x2fb59300, ftLastAccessTime.dwHighDateTime=0x1d42023, ftLastWriteTime.dwLowDateTime=0x2fb59300, ftLastWriteTime.dwHighDateTime=0x1d42023, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0065.040] FindNextFileW (in: hFindFile=0x5107b20, lpFindFileData=0x31e47c | out: lpFindFileData=0x31e47c*(dwFileAttributes=0x810, ftCreationTime.dwLowDateTime=0xfda01e06, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x2fb59300, ftLastAccessTime.dwHighDateTime=0x1d42023, ftLastWriteTime.dwLowDateTime=0x2fb59300, ftLastWriteTime.dwHighDateTime=0x1d42023, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 0 [0065.040] FindClose (in: hFindFile=0x5107b20 | out: hFindFile=0x5107b20) returned 1 [0065.040] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e704) returned 1 [0065.040] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e710) returned 1 [0065.040] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e834) returned 1 [0065.040] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\Windows Defender", nBufferLength=0x105, lpBuffer=0x31e33c, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\Windows Defender", lpFilePart=0x0) returned 0x29 [0065.040] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\Windows Defender\\", nBufferLength=0x105, lpBuffer=0x31e310, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\Windows Defender\\", lpFilePart=0x0) returned 0x2a [0065.040] FindFirstFileW (in: lpFileName="C:\\ProgramData\\Microsoft\\Windows Defender\\*", lpFindFileData=0x31e55c | out: lpFindFileData=0x31e55c*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x7fffaad0, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x591e8ca0, ftLastAccessTime.dwHighDateTime=0x1d4d596, ftLastWriteTime.dwLowDateTime=0x591e8ca0, ftLastWriteTime.dwHighDateTime=0x1d4d596, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5107b20 [0065.042] FindNextFileW (in: hFindFile=0x5107b20, lpFindFileData=0x31e56c | out: lpFindFileData=0x31e56c*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x7fffaad0, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x591e8ca0, ftLastAccessTime.dwHighDateTime=0x1d4d596, ftLastWriteTime.dwLowDateTime=0x591e8ca0, ftLastWriteTime.dwHighDateTime=0x1d4d596, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0065.042] FindNextFileW (in: hFindFile=0x5107b20, lpFindFileData=0x31e56c | out: lpFindFileData=0x31e56c*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x7fffaad0, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x1fb3099, ftLastAccessTime.dwHighDateTime=0x1cb892c, ftLastWriteTime.dwLowDateTime=0x1fb3099, ftLastWriteTime.dwHighDateTime=0x1cb892c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Definition Updates", cAlternateFileName="DEFINI~1")) returned 1 [0065.042] FindNextFileW (in: hFindFile=0x5107b20, lpFindFileData=0x31e56c | out: lpFindFileData=0x31e56c*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x7fffaad0, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x7fffaad0, ftLastAccessTime.dwHighDateTime=0x1ca0444, ftLastWriteTime.dwLowDateTime=0x7fffaad0, ftLastWriteTime.dwHighDateTime=0x1ca0444, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="LocalCopy", cAlternateFileName="LOCALC~1")) returned 1 [0065.042] FindNextFileW (in: hFindFile=0x5107b20, lpFindFileData=0x31e56c | out: lpFindFileData=0x31e56c*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x7fffaad0, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x7fffaad0, ftLastAccessTime.dwHighDateTime=0x1ca0444, ftLastWriteTime.dwLowDateTime=0x7fffaad0, ftLastWriteTime.dwHighDateTime=0x1ca0444, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Quarantine", cAlternateFileName="QUARAN~1")) returned 1 [0065.043] FindNextFileW (in: hFindFile=0x5107b20, lpFindFileData=0x31e56c | out: lpFindFileData=0x31e56c*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x7fffaad0, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x7690f9e4, ftLastAccessTime.dwHighDateTime=0x1ca0441, ftLastWriteTime.dwLowDateTime=0x7690f9e4, ftLastWriteTime.dwHighDateTime=0x1ca0441, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Scans", cAlternateFileName="")) returned 1 [0065.043] FindNextFileW (in: hFindFile=0x5107b20, lpFindFileData=0x31e56c | out: lpFindFileData=0x31e56c*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x7fffaad0, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x76792c22, ftLastAccessTime.dwHighDateTime=0x1ca0441, ftLastWriteTime.dwLowDateTime=0x76792c22, ftLastWriteTime.dwHighDateTime=0x1ca0441, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Support", cAlternateFileName="")) returned 1 [0065.043] FindNextFileW (in: hFindFile=0x5107b20, lpFindFileData=0x31e56c | out: lpFindFileData=0x31e56c*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x7fffaad0, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x76792c22, ftLastAccessTime.dwHighDateTime=0x1ca0441, ftLastWriteTime.dwLowDateTime=0x76792c22, ftLastWriteTime.dwHighDateTime=0x1ca0441, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Support", cAlternateFileName="")) returned 0 [0065.043] FindClose (in: hFindFile=0x5107b20 | out: hFindFile=0x5107b20) returned 1 [0065.044] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e7f4) returned 1 [0065.044] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e800) returned 1 [0065.044] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e834) returned 1 [0065.044] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\Windows Defender", nBufferLength=0x105, lpBuffer=0x31e33c, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\Windows Defender", lpFilePart=0x0) returned 0x29 [0065.044] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\Windows Defender\\", nBufferLength=0x105, lpBuffer=0x31e310, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\Windows Defender\\", lpFilePart=0x0) returned 0x2a [0065.044] FindFirstFileW (in: lpFileName="C:\\ProgramData\\Microsoft\\Windows Defender\\*", lpFindFileData=0x31e55c | out: lpFindFileData=0x31e55c*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x7fffaad0, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x591e8ca0, ftLastAccessTime.dwHighDateTime=0x1d4d596, ftLastWriteTime.dwLowDateTime=0x591e8ca0, ftLastWriteTime.dwHighDateTime=0x1d4d596, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5107b20 [0065.045] FindNextFileW (in: hFindFile=0x5107b20, lpFindFileData=0x31e56c | out: lpFindFileData=0x31e56c*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x7fffaad0, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x591e8ca0, ftLastAccessTime.dwHighDateTime=0x1d4d596, ftLastWriteTime.dwLowDateTime=0x591e8ca0, ftLastWriteTime.dwHighDateTime=0x1d4d596, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0065.045] FindNextFileW (in: hFindFile=0x5107b20, lpFindFileData=0x31e56c | out: lpFindFileData=0x31e56c*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x7fffaad0, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x1fb3099, ftLastAccessTime.dwHighDateTime=0x1cb892c, ftLastWriteTime.dwLowDateTime=0x1fb3099, ftLastWriteTime.dwHighDateTime=0x1cb892c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Definition Updates", cAlternateFileName="DEFINI~1")) returned 1 [0065.045] FindNextFileW (in: hFindFile=0x5107b20, lpFindFileData=0x31e56c | out: lpFindFileData=0x31e56c*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x7fffaad0, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x7fffaad0, ftLastAccessTime.dwHighDateTime=0x1ca0444, ftLastWriteTime.dwLowDateTime=0x7fffaad0, ftLastWriteTime.dwHighDateTime=0x1ca0444, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="LocalCopy", cAlternateFileName="LOCALC~1")) returned 1 [0065.045] FindNextFileW (in: hFindFile=0x5107b20, lpFindFileData=0x31e56c | out: lpFindFileData=0x31e56c*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x7fffaad0, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x7fffaad0, ftLastAccessTime.dwHighDateTime=0x1ca0444, ftLastWriteTime.dwLowDateTime=0x7fffaad0, ftLastWriteTime.dwHighDateTime=0x1ca0444, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Quarantine", cAlternateFileName="QUARAN~1")) returned 1 [0065.045] FindNextFileW (in: hFindFile=0x5107b20, lpFindFileData=0x31e56c | out: lpFindFileData=0x31e56c*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x7fffaad0, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x7690f9e4, ftLastAccessTime.dwHighDateTime=0x1ca0441, ftLastWriteTime.dwLowDateTime=0x7690f9e4, ftLastWriteTime.dwHighDateTime=0x1ca0441, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Scans", cAlternateFileName="")) returned 1 [0065.045] FindNextFileW (in: hFindFile=0x5107b20, lpFindFileData=0x31e56c | out: lpFindFileData=0x31e56c*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x7fffaad0, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x76792c22, ftLastAccessTime.dwHighDateTime=0x1ca0441, ftLastWriteTime.dwLowDateTime=0x76792c22, ftLastWriteTime.dwHighDateTime=0x1ca0441, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Support", cAlternateFileName="")) returned 1 [0065.045] FindNextFileW (in: hFindFile=0x5107b20, lpFindFileData=0x31e56c | out: lpFindFileData=0x31e56c*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0065.046] FindClose (in: hFindFile=0x5107b20 | out: hFindFile=0x5107b20) returned 1 [0065.046] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e7f4) returned 1 [0065.046] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e800) returned 1 [0065.046] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e7bc) returned 1 [0065.046] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\Windows Defender\\Definition Updates", nBufferLength=0x105, lpBuffer=0x31e2c4, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\Windows Defender\\Definition Updates", lpFilePart=0x0) returned 0x3c [0065.046] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\Windows Defender\\Definition Updates\\", nBufferLength=0x105, lpBuffer=0x31e298, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\Windows Defender\\Definition Updates\\", lpFilePart=0x0) returned 0x3d [0065.046] FindFirstFileW (in: lpFileName="C:\\ProgramData\\Microsoft\\Windows Defender\\Definition Updates\\*", lpFindFileData=0x31e4e4 | out: lpFindFileData=0x31e4e4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x7fffaad0, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x1fb3099, ftLastAccessTime.dwHighDateTime=0x1cb892c, ftLastWriteTime.dwLowDateTime=0x1fb3099, ftLastWriteTime.dwHighDateTime=0x1cb892c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5107b20 [0065.047] FindNextFileW (in: hFindFile=0x5107b20, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x7fffaad0, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x1fb3099, ftLastAccessTime.dwHighDateTime=0x1cb892c, ftLastWriteTime.dwLowDateTime=0x1fb3099, ftLastWriteTime.dwHighDateTime=0x1cb892c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0065.047] FindNextFileW (in: hFindFile=0x5107b20, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x7fffaad0, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x7fffaad0, ftLastAccessTime.dwHighDateTime=0x1ca0444, ftLastWriteTime.dwLowDateTime=0x7fffaad0, ftLastWriteTime.dwHighDateTime=0x1ca0444, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Backup", cAlternateFileName="")) returned 1 [0065.048] FindNextFileW (in: hFindFile=0x5107b20, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x7fffaad0, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x7fffaad0, ftLastAccessTime.dwHighDateTime=0x1ca0444, ftLastWriteTime.dwLowDateTime=0x7fffaad0, ftLastWriteTime.dwHighDateTime=0x1ca0444, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Updates", cAlternateFileName="")) returned 1 [0065.048] FindNextFileW (in: hFindFile=0x5107b20, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x1fb3099, ftCreationTime.dwHighDateTime=0x1cb892c, ftLastAccessTime.dwLowDateTime=0x1fff35a, ftLastAccessTime.dwHighDateTime=0x1cb892c, ftLastWriteTime.dwLowDateTime=0x1fff35a, ftLastWriteTime.dwHighDateTime=0x1cb892c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="{D2B0B133-42ED-44D3-809A-46EBB62BA863}", cAlternateFileName="{D2B0B~1")) returned 1 [0065.048] FindNextFileW (in: hFindFile=0x5107b20, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x1fb3099, ftCreationTime.dwHighDateTime=0x1cb892c, ftLastAccessTime.dwLowDateTime=0x1fff35a, ftLastAccessTime.dwHighDateTime=0x1cb892c, ftLastWriteTime.dwLowDateTime=0x1fff35a, ftLastWriteTime.dwHighDateTime=0x1cb892c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="{D2B0B133-42ED-44D3-809A-46EBB62BA863}", cAlternateFileName="{D2B0B~1")) returned 0 [0065.048] FindClose (in: hFindFile=0x5107b20 | out: hFindFile=0x5107b20) returned 1 [0065.048] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e77c) returned 1 [0065.048] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e788) returned 1 [0065.048] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e7bc) returned 1 [0065.048] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\Windows Defender\\Definition Updates", nBufferLength=0x105, lpBuffer=0x31e2c4, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\Windows Defender\\Definition Updates", lpFilePart=0x0) returned 0x3c [0065.048] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\Windows Defender\\Definition Updates\\", nBufferLength=0x105, lpBuffer=0x31e298, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\Windows Defender\\Definition Updates\\", lpFilePart=0x0) returned 0x3d [0065.048] FindFirstFileW (in: lpFileName="C:\\ProgramData\\Microsoft\\Windows Defender\\Definition Updates\\*", lpFindFileData=0x31e4e4 | out: lpFindFileData=0x31e4e4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x7fffaad0, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x1fb3099, ftLastAccessTime.dwHighDateTime=0x1cb892c, ftLastWriteTime.dwLowDateTime=0x1fb3099, ftLastWriteTime.dwHighDateTime=0x1cb892c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5107b20 [0065.048] FindNextFileW (in: hFindFile=0x5107b20, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x7fffaad0, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x1fb3099, ftLastAccessTime.dwHighDateTime=0x1cb892c, ftLastWriteTime.dwLowDateTime=0x1fb3099, ftLastWriteTime.dwHighDateTime=0x1cb892c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0065.049] FindNextFileW (in: hFindFile=0x5107b20, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x7fffaad0, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x7fffaad0, ftLastAccessTime.dwHighDateTime=0x1ca0444, ftLastWriteTime.dwLowDateTime=0x7fffaad0, ftLastWriteTime.dwHighDateTime=0x1ca0444, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Backup", cAlternateFileName="")) returned 1 [0065.049] FindNextFileW (in: hFindFile=0x5107b20, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x7fffaad0, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x7fffaad0, ftLastAccessTime.dwHighDateTime=0x1ca0444, ftLastWriteTime.dwLowDateTime=0x7fffaad0, ftLastWriteTime.dwHighDateTime=0x1ca0444, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Updates", cAlternateFileName="")) returned 1 [0065.049] FindNextFileW (in: hFindFile=0x5107b20, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x1fb3099, ftCreationTime.dwHighDateTime=0x1cb892c, ftLastAccessTime.dwLowDateTime=0x1fff35a, ftLastAccessTime.dwHighDateTime=0x1cb892c, ftLastWriteTime.dwLowDateTime=0x1fff35a, ftLastWriteTime.dwHighDateTime=0x1cb892c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="{D2B0B133-42ED-44D3-809A-46EBB62BA863}", cAlternateFileName="{D2B0B~1")) returned 1 [0065.049] FindNextFileW (in: hFindFile=0x5107b20, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0065.049] FindClose (in: hFindFile=0x5107b20 | out: hFindFile=0x5107b20) returned 1 [0065.049] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e77c) returned 1 [0065.049] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e788) returned 1 [0065.049] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e744) returned 1 [0065.049] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\Windows Defender\\Definition Updates\\Backup", nBufferLength=0x105, lpBuffer=0x31e24c, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\Windows Defender\\Definition Updates\\Backup", lpFilePart=0x0) returned 0x43 [0065.049] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\Windows Defender\\Definition Updates\\Backup\\", nBufferLength=0x105, lpBuffer=0x31e220, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\Windows Defender\\Definition Updates\\Backup\\", lpFilePart=0x0) returned 0x44 [0065.049] FindFirstFileW (in: lpFileName="C:\\ProgramData\\Microsoft\\Windows Defender\\Definition Updates\\Backup\\*", lpFindFileData=0x31e46c | out: lpFindFileData=0x31e46c*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x7fffaad0, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x7fffaad0, ftLastAccessTime.dwHighDateTime=0x1ca0444, ftLastWriteTime.dwLowDateTime=0x7fffaad0, ftLastWriteTime.dwHighDateTime=0x1ca0444, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5107b20 [0065.050] FindNextFileW (in: hFindFile=0x5107b20, lpFindFileData=0x31e47c | out: lpFindFileData=0x31e47c*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x7fffaad0, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x7fffaad0, ftLastAccessTime.dwHighDateTime=0x1ca0444, ftLastWriteTime.dwLowDateTime=0x7fffaad0, ftLastWriteTime.dwHighDateTime=0x1ca0444, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0065.050] FindNextFileW (in: hFindFile=0x5107b20, lpFindFileData=0x31e47c | out: lpFindFileData=0x31e47c*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x7fffaad0, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x7fffaad0, ftLastAccessTime.dwHighDateTime=0x1ca0444, ftLastWriteTime.dwLowDateTime=0x7fffaad0, ftLastWriteTime.dwHighDateTime=0x1ca0444, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 0 [0065.050] FindClose (in: hFindFile=0x5107b20 | out: hFindFile=0x5107b20) returned 1 [0065.050] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e704) returned 1 [0065.050] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e710) returned 1 [0065.050] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e744) returned 1 [0065.050] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\Windows Defender\\Definition Updates\\Backup", nBufferLength=0x105, lpBuffer=0x31e24c, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\Windows Defender\\Definition Updates\\Backup", lpFilePart=0x0) returned 0x43 [0065.050] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\Windows Defender\\Definition Updates\\Backup\\", nBufferLength=0x105, lpBuffer=0x31e220, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\Windows Defender\\Definition Updates\\Backup\\", lpFilePart=0x0) returned 0x44 [0065.050] FindFirstFileW (in: lpFileName="C:\\ProgramData\\Microsoft\\Windows Defender\\Definition Updates\\Backup\\*", lpFindFileData=0x31e46c | out: lpFindFileData=0x31e46c*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x7fffaad0, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x7fffaad0, ftLastAccessTime.dwHighDateTime=0x1ca0444, ftLastWriteTime.dwLowDateTime=0x7fffaad0, ftLastWriteTime.dwHighDateTime=0x1ca0444, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5107b20 [0065.050] FindNextFileW (in: hFindFile=0x5107b20, lpFindFileData=0x31e47c | out: lpFindFileData=0x31e47c*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x7fffaad0, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x7fffaad0, ftLastAccessTime.dwHighDateTime=0x1ca0444, ftLastWriteTime.dwLowDateTime=0x7fffaad0, ftLastWriteTime.dwHighDateTime=0x1ca0444, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0065.051] FindNextFileW (in: hFindFile=0x5107b20, lpFindFileData=0x31e47c | out: lpFindFileData=0x31e47c*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x7fffaad0, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x7fffaad0, ftLastAccessTime.dwHighDateTime=0x1ca0444, ftLastWriteTime.dwLowDateTime=0x7fffaad0, ftLastWriteTime.dwHighDateTime=0x1ca0444, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 0 [0065.051] FindClose (in: hFindFile=0x5107b20 | out: hFindFile=0x5107b20) returned 1 [0065.051] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e704) returned 1 [0065.051] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e710) returned 1 [0065.051] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e744) returned 1 [0065.051] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\Windows Defender\\Definition Updates\\Updates", nBufferLength=0x105, lpBuffer=0x31e24c, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\Windows Defender\\Definition Updates\\Updates", lpFilePart=0x0) returned 0x44 [0065.051] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\Windows Defender\\Definition Updates\\Updates\\", nBufferLength=0x105, lpBuffer=0x31e220, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\Windows Defender\\Definition Updates\\Updates\\", lpFilePart=0x0) returned 0x45 [0065.051] FindFirstFileW (in: lpFileName="C:\\ProgramData\\Microsoft\\Windows Defender\\Definition Updates\\Updates\\*", lpFindFileData=0x31e46c | out: lpFindFileData=0x31e46c*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x7fffaad0, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x7fffaad0, ftLastAccessTime.dwHighDateTime=0x1ca0444, ftLastWriteTime.dwLowDateTime=0x7fffaad0, ftLastWriteTime.dwHighDateTime=0x1ca0444, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5107b20 [0065.052] FindNextFileW (in: hFindFile=0x5107b20, lpFindFileData=0x31e47c | out: lpFindFileData=0x31e47c*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x7fffaad0, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x7fffaad0, ftLastAccessTime.dwHighDateTime=0x1ca0444, ftLastWriteTime.dwLowDateTime=0x7fffaad0, ftLastWriteTime.dwHighDateTime=0x1ca0444, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0065.052] FindNextFileW (in: hFindFile=0x5107b20, lpFindFileData=0x31e47c | out: lpFindFileData=0x31e47c*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x7fffaad0, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x7fffaad0, ftLastAccessTime.dwHighDateTime=0x1ca0444, ftLastWriteTime.dwLowDateTime=0x7fffaad0, ftLastWriteTime.dwHighDateTime=0x1ca0444, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 0 [0065.052] FindClose (in: hFindFile=0x5107b20 | out: hFindFile=0x5107b20) returned 1 [0065.052] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e704) returned 1 [0065.052] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e710) returned 1 [0065.052] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e744) returned 1 [0065.052] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\Windows Defender\\Definition Updates\\Updates", nBufferLength=0x105, lpBuffer=0x31e24c, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\Windows Defender\\Definition Updates\\Updates", lpFilePart=0x0) returned 0x44 [0065.053] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\Windows Defender\\Definition Updates\\Updates\\", nBufferLength=0x105, lpBuffer=0x31e220, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\Windows Defender\\Definition Updates\\Updates\\", lpFilePart=0x0) returned 0x45 [0065.053] FindFirstFileW (in: lpFileName="C:\\ProgramData\\Microsoft\\Windows Defender\\Definition Updates\\Updates\\*", lpFindFileData=0x31e46c | out: lpFindFileData=0x31e46c*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x7fffaad0, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x7fffaad0, ftLastAccessTime.dwHighDateTime=0x1ca0444, ftLastWriteTime.dwLowDateTime=0x7fffaad0, ftLastWriteTime.dwHighDateTime=0x1ca0444, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5107b20 [0065.053] FindNextFileW (in: hFindFile=0x5107b20, lpFindFileData=0x31e47c | out: lpFindFileData=0x31e47c*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x7fffaad0, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x7fffaad0, ftLastAccessTime.dwHighDateTime=0x1ca0444, ftLastWriteTime.dwLowDateTime=0x7fffaad0, ftLastWriteTime.dwHighDateTime=0x1ca0444, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0065.053] FindNextFileW (in: hFindFile=0x5107b20, lpFindFileData=0x31e47c | out: lpFindFileData=0x31e47c*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x7fffaad0, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x7fffaad0, ftLastAccessTime.dwHighDateTime=0x1ca0444, ftLastWriteTime.dwLowDateTime=0x7fffaad0, ftLastWriteTime.dwHighDateTime=0x1ca0444, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 0 [0065.053] FindClose (in: hFindFile=0x5107b20 | out: hFindFile=0x5107b20) returned 1 [0065.053] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e704) returned 1 [0065.053] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e710) returned 1 [0065.053] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e744) returned 1 [0065.053] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\Windows Defender\\Definition Updates\\{D2B0B133-42ED-44D3-809A-46EBB62BA863}", nBufferLength=0x105, lpBuffer=0x31e24c, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\Windows Defender\\Definition Updates\\{D2B0B133-42ED-44D3-809A-46EBB62BA863}", lpFilePart=0x0) returned 0x63 [0065.053] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\Windows Defender\\Definition Updates\\{D2B0B133-42ED-44D3-809A-46EBB62BA863}\\", nBufferLength=0x105, lpBuffer=0x31e220, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\Windows Defender\\Definition Updates\\{D2B0B133-42ED-44D3-809A-46EBB62BA863}\\", lpFilePart=0x0) returned 0x64 [0065.053] FindFirstFileW (in: lpFileName="C:\\ProgramData\\Microsoft\\Windows Defender\\Definition Updates\\{D2B0B133-42ED-44D3-809A-46EBB62BA863}\\*", lpFindFileData=0x31e46c | out: lpFindFileData=0x31e46c*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x1fb3099, ftCreationTime.dwHighDateTime=0x1cb892c, ftLastAccessTime.dwLowDateTime=0x1fff35a, ftLastAccessTime.dwHighDateTime=0x1cb892c, ftLastWriteTime.dwLowDateTime=0x1fff35a, ftLastWriteTime.dwHighDateTime=0x1cb892c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5107b20 [0065.054] FindNextFileW (in: hFindFile=0x5107b20, lpFindFileData=0x31e47c | out: lpFindFileData=0x31e47c*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x1fb3099, ftCreationTime.dwHighDateTime=0x1cb892c, ftLastAccessTime.dwLowDateTime=0x1fff35a, ftLastAccessTime.dwHighDateTime=0x1cb892c, ftLastWriteTime.dwLowDateTime=0x1fff35a, ftLastWriteTime.dwHighDateTime=0x1cb892c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0065.054] FindNextFileW (in: hFindFile=0x5107b20, lpFindFileData=0x31e47c | out: lpFindFileData=0x31e47c*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x1fd91f9, ftCreationTime.dwHighDateTime=0x1cb892c, ftLastAccessTime.dwLowDateTime=0x1fd91f9, ftLastAccessTime.dwHighDateTime=0x1cb892c, ftLastWriteTime.dwLowDateTime=0x12c4d000, ftLastWriteTime.dwHighDateTime=0x1cb85c9, nFileSizeHigh=0x0, nFileSizeLow=0xb17190, dwReserved0=0x0, dwReserved1=0x0, cFileName="mpasbase.vdm", cAlternateFileName="")) returned 1 [0065.054] FindNextFileW (in: hFindFile=0x5107b20, lpFindFileData=0x31e47c | out: lpFindFileData=0x31e47c*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x1fff35a, ftCreationTime.dwHighDateTime=0x1cb892c, ftLastAccessTime.dwLowDateTime=0x1fff35a, ftLastAccessTime.dwHighDateTime=0x1cb892c, ftLastWriteTime.dwLowDateTime=0x6da22700, ftLastWriteTime.dwHighDateTime=0x1cb8783, nFileSizeHigh=0x0, nFileSizeLow=0x52d90, dwReserved0=0x0, dwReserved1=0x0, cFileName="mpasdlta.vdm", cAlternateFileName="")) returned 1 [0065.054] FindNextFileW (in: hFindFile=0x5107b20, lpFindFileData=0x31e47c | out: lpFindFileData=0x31e47c*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x1fb3099, ftCreationTime.dwHighDateTime=0x1cb892c, ftLastAccessTime.dwLowDateTime=0x1fb3099, ftLastAccessTime.dwHighDateTime=0x1cb892c, ftLastWriteTime.dwLowDateTime=0x93b6800, ftLastWriteTime.dwHighDateTime=0x1cb85c9, nFileSizeHigh=0x0, nFileSizeLow=0x7d1d50, dwReserved0=0x0, dwReserved1=0x0, cFileName="mpengine.dll", cAlternateFileName="")) returned 1 [0065.054] FindNextFileW (in: hFindFile=0x5107b20, lpFindFileData=0x31e47c | out: lpFindFileData=0x31e47c*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0065.054] FindClose (in: hFindFile=0x5107b20 | out: hFindFile=0x5107b20) returned 1 [0065.054] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e704) returned 1 [0065.054] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e710) returned 1 [0065.054] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e744) returned 1 [0065.054] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\Windows Defender\\Definition Updates\\{D2B0B133-42ED-44D3-809A-46EBB62BA863}", nBufferLength=0x105, lpBuffer=0x31e24c, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\Windows Defender\\Definition Updates\\{D2B0B133-42ED-44D3-809A-46EBB62BA863}", lpFilePart=0x0) returned 0x63 [0065.054] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\Windows Defender\\Definition Updates\\{D2B0B133-42ED-44D3-809A-46EBB62BA863}\\", nBufferLength=0x105, lpBuffer=0x31e220, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\Windows Defender\\Definition Updates\\{D2B0B133-42ED-44D3-809A-46EBB62BA863}\\", lpFilePart=0x0) returned 0x64 [0065.054] FindFirstFileW (in: lpFileName="C:\\ProgramData\\Microsoft\\Windows Defender\\Definition Updates\\{D2B0B133-42ED-44D3-809A-46EBB62BA863}\\*", lpFindFileData=0x31e46c | out: lpFindFileData=0x31e46c*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x1fb3099, ftCreationTime.dwHighDateTime=0x1cb892c, ftLastAccessTime.dwLowDateTime=0x1fff35a, ftLastAccessTime.dwHighDateTime=0x1cb892c, ftLastWriteTime.dwLowDateTime=0x1fff35a, ftLastWriteTime.dwHighDateTime=0x1cb892c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5107b20 [0065.055] FindNextFileW (in: hFindFile=0x5107b20, lpFindFileData=0x31e47c | out: lpFindFileData=0x31e47c*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x1fb3099, ftCreationTime.dwHighDateTime=0x1cb892c, ftLastAccessTime.dwLowDateTime=0x1fff35a, ftLastAccessTime.dwHighDateTime=0x1cb892c, ftLastWriteTime.dwLowDateTime=0x1fff35a, ftLastWriteTime.dwHighDateTime=0x1cb892c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0065.055] FindNextFileW (in: hFindFile=0x5107b20, lpFindFileData=0x31e47c | out: lpFindFileData=0x31e47c*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x1fd91f9, ftCreationTime.dwHighDateTime=0x1cb892c, ftLastAccessTime.dwLowDateTime=0x1fd91f9, ftLastAccessTime.dwHighDateTime=0x1cb892c, ftLastWriteTime.dwLowDateTime=0x12c4d000, ftLastWriteTime.dwHighDateTime=0x1cb85c9, nFileSizeHigh=0x0, nFileSizeLow=0xb17190, dwReserved0=0x0, dwReserved1=0x0, cFileName="mpasbase.vdm", cAlternateFileName="")) returned 1 [0065.055] FindNextFileW (in: hFindFile=0x5107b20, lpFindFileData=0x31e47c | out: lpFindFileData=0x31e47c*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x1fff35a, ftCreationTime.dwHighDateTime=0x1cb892c, ftLastAccessTime.dwLowDateTime=0x1fff35a, ftLastAccessTime.dwHighDateTime=0x1cb892c, ftLastWriteTime.dwLowDateTime=0x6da22700, ftLastWriteTime.dwHighDateTime=0x1cb8783, nFileSizeHigh=0x0, nFileSizeLow=0x52d90, dwReserved0=0x0, dwReserved1=0x0, cFileName="mpasdlta.vdm", cAlternateFileName="")) returned 1 [0065.055] FindNextFileW (in: hFindFile=0x5107b20, lpFindFileData=0x31e47c | out: lpFindFileData=0x31e47c*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x1fb3099, ftCreationTime.dwHighDateTime=0x1cb892c, ftLastAccessTime.dwLowDateTime=0x1fb3099, ftLastAccessTime.dwHighDateTime=0x1cb892c, ftLastWriteTime.dwLowDateTime=0x93b6800, ftLastWriteTime.dwHighDateTime=0x1cb85c9, nFileSizeHigh=0x0, nFileSizeLow=0x7d1d50, dwReserved0=0x0, dwReserved1=0x0, cFileName="mpengine.dll", cAlternateFileName="")) returned 1 [0065.055] FindNextFileW (in: hFindFile=0x5107b20, lpFindFileData=0x31e47c | out: lpFindFileData=0x31e47c*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x1fb3099, ftCreationTime.dwHighDateTime=0x1cb892c, ftLastAccessTime.dwLowDateTime=0x1fb3099, ftLastAccessTime.dwHighDateTime=0x1cb892c, ftLastWriteTime.dwLowDateTime=0x93b6800, ftLastWriteTime.dwHighDateTime=0x1cb85c9, nFileSizeHigh=0x0, nFileSizeLow=0x7d1d50, dwReserved0=0x0, dwReserved1=0x0, cFileName="mpengine.dll", cAlternateFileName="")) returned 0 [0065.055] FindClose (in: hFindFile=0x5107b20 | out: hFindFile=0x5107b20) returned 1 [0065.055] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e704) returned 1 [0065.055] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e710) returned 1 [0065.055] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e7bc) returned 1 [0065.055] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\Windows Defender\\LocalCopy", nBufferLength=0x105, lpBuffer=0x31e2c4, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\Windows Defender\\LocalCopy", lpFilePart=0x0) returned 0x33 [0065.056] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\Windows Defender\\LocalCopy\\", nBufferLength=0x105, lpBuffer=0x31e298, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\Windows Defender\\LocalCopy\\", lpFilePart=0x0) returned 0x34 [0065.056] FindFirstFileW (in: lpFileName="C:\\ProgramData\\Microsoft\\Windows Defender\\LocalCopy\\*", lpFindFileData=0x31e4e4 | out: lpFindFileData=0x31e4e4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x7fffaad0, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x7fffaad0, ftLastAccessTime.dwHighDateTime=0x1ca0444, ftLastWriteTime.dwLowDateTime=0x7fffaad0, ftLastWriteTime.dwHighDateTime=0x1ca0444, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5107b20 [0065.056] FindNextFileW (in: hFindFile=0x5107b20, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x7fffaad0, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x7fffaad0, ftLastAccessTime.dwHighDateTime=0x1ca0444, ftLastWriteTime.dwLowDateTime=0x7fffaad0, ftLastWriteTime.dwHighDateTime=0x1ca0444, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0065.056] FindNextFileW (in: hFindFile=0x5107b20, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x7fffaad0, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x7fffaad0, ftLastAccessTime.dwHighDateTime=0x1ca0444, ftLastWriteTime.dwLowDateTime=0x7fffaad0, ftLastWriteTime.dwHighDateTime=0x1ca0444, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 0 [0065.056] FindClose (in: hFindFile=0x5107b20 | out: hFindFile=0x5107b20) returned 1 [0065.056] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e77c) returned 1 [0065.056] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e788) returned 1 [0065.056] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e7bc) returned 1 [0065.056] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\Windows Defender\\LocalCopy", nBufferLength=0x105, lpBuffer=0x31e2c4, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\Windows Defender\\LocalCopy", lpFilePart=0x0) returned 0x33 [0065.056] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\Windows Defender\\LocalCopy\\", nBufferLength=0x105, lpBuffer=0x31e298, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\Windows Defender\\LocalCopy\\", lpFilePart=0x0) returned 0x34 [0065.056] FindFirstFileW (in: lpFileName="C:\\ProgramData\\Microsoft\\Windows Defender\\LocalCopy\\*", lpFindFileData=0x31e4e4 | out: lpFindFileData=0x31e4e4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x7fffaad0, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x7fffaad0, ftLastAccessTime.dwHighDateTime=0x1ca0444, ftLastWriteTime.dwLowDateTime=0x7fffaad0, ftLastWriteTime.dwHighDateTime=0x1ca0444, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5107b20 [0065.057] FindNextFileW (in: hFindFile=0x5107b20, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x7fffaad0, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x7fffaad0, ftLastAccessTime.dwHighDateTime=0x1ca0444, ftLastWriteTime.dwLowDateTime=0x7fffaad0, ftLastWriteTime.dwHighDateTime=0x1ca0444, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0065.057] FindNextFileW (in: hFindFile=0x5107b20, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x7fffaad0, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x7fffaad0, ftLastAccessTime.dwHighDateTime=0x1ca0444, ftLastWriteTime.dwLowDateTime=0x7fffaad0, ftLastWriteTime.dwHighDateTime=0x1ca0444, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 0 [0065.057] FindClose (in: hFindFile=0x5107b20 | out: hFindFile=0x5107b20) returned 1 [0065.057] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e77c) returned 1 [0065.057] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e788) returned 1 [0065.057] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e7bc) returned 1 [0065.057] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\Windows Defender\\Quarantine", nBufferLength=0x105, lpBuffer=0x31e2c4, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\Windows Defender\\Quarantine", lpFilePart=0x0) returned 0x34 [0065.057] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\Windows Defender\\Quarantine\\", nBufferLength=0x105, lpBuffer=0x31e298, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\Windows Defender\\Quarantine\\", lpFilePart=0x0) returned 0x35 [0065.057] FindFirstFileW (in: lpFileName="C:\\ProgramData\\Microsoft\\Windows Defender\\Quarantine\\*", lpFindFileData=0x31e4e4 | out: lpFindFileData=0x31e4e4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x7fffaad0, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x7fffaad0, ftLastAccessTime.dwHighDateTime=0x1ca0444, ftLastWriteTime.dwLowDateTime=0x7fffaad0, ftLastWriteTime.dwHighDateTime=0x1ca0444, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5107b20 [0065.057] FindNextFileW (in: hFindFile=0x5107b20, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x7fffaad0, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x7fffaad0, ftLastAccessTime.dwHighDateTime=0x1ca0444, ftLastWriteTime.dwLowDateTime=0x7fffaad0, ftLastWriteTime.dwHighDateTime=0x1ca0444, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0065.057] FindNextFileW (in: hFindFile=0x5107b20, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x7fffaad0, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x7fffaad0, ftLastAccessTime.dwHighDateTime=0x1ca0444, ftLastWriteTime.dwLowDateTime=0x7fffaad0, ftLastWriteTime.dwHighDateTime=0x1ca0444, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 0 [0065.058] FindClose (in: hFindFile=0x5107b20 | out: hFindFile=0x5107b20) returned 1 [0065.058] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e77c) returned 1 [0065.058] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e788) returned 1 [0065.058] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e7bc) returned 1 [0065.058] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\Windows Defender\\Quarantine", nBufferLength=0x105, lpBuffer=0x31e2c4, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\Windows Defender\\Quarantine", lpFilePart=0x0) returned 0x34 [0065.058] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\Windows Defender\\Quarantine\\", nBufferLength=0x105, lpBuffer=0x31e298, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\Windows Defender\\Quarantine\\", lpFilePart=0x0) returned 0x35 [0065.058] FindFirstFileW (in: lpFileName="C:\\ProgramData\\Microsoft\\Windows Defender\\Quarantine\\*", lpFindFileData=0x31e4e4 | out: lpFindFileData=0x31e4e4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x7fffaad0, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x7fffaad0, ftLastAccessTime.dwHighDateTime=0x1ca0444, ftLastWriteTime.dwLowDateTime=0x7fffaad0, ftLastWriteTime.dwHighDateTime=0x1ca0444, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5107b20 [0065.058] FindNextFileW (in: hFindFile=0x5107b20, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x7fffaad0, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x7fffaad0, ftLastAccessTime.dwHighDateTime=0x1ca0444, ftLastWriteTime.dwLowDateTime=0x7fffaad0, ftLastWriteTime.dwHighDateTime=0x1ca0444, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0065.058] FindNextFileW (in: hFindFile=0x5107b20, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x7fffaad0, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x7fffaad0, ftLastAccessTime.dwHighDateTime=0x1ca0444, ftLastWriteTime.dwLowDateTime=0x7fffaad0, ftLastWriteTime.dwHighDateTime=0x1ca0444, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 0 [0065.058] FindClose (in: hFindFile=0x5107b20 | out: hFindFile=0x5107b20) returned 1 [0065.058] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e77c) returned 1 [0065.058] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e788) returned 1 [0065.058] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e7bc) returned 1 [0065.058] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\Windows Defender\\Scans", nBufferLength=0x105, lpBuffer=0x31e2c4, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\Windows Defender\\Scans", lpFilePart=0x0) returned 0x2f [0065.058] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\Windows Defender\\Scans\\", nBufferLength=0x105, lpBuffer=0x31e298, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\Windows Defender\\Scans\\", lpFilePart=0x0) returned 0x30 [0065.059] FindFirstFileW (in: lpFileName="C:\\ProgramData\\Microsoft\\Windows Defender\\Scans\\*", lpFindFileData=0x31e4e4 | out: lpFindFileData=0x31e4e4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x7fffaad0, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x7690f9e4, ftLastAccessTime.dwHighDateTime=0x1ca0441, ftLastWriteTime.dwLowDateTime=0x7690f9e4, ftLastWriteTime.dwHighDateTime=0x1ca0441, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5107b20 [0065.059] FindNextFileW (in: hFindFile=0x5107b20, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x7fffaad0, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x7690f9e4, ftLastAccessTime.dwHighDateTime=0x1ca0441, ftLastWriteTime.dwLowDateTime=0x7690f9e4, ftLastWriteTime.dwHighDateTime=0x1ca0441, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0065.059] FindNextFileW (in: hFindFile=0x5107b20, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x7690f9e4, ftCreationTime.dwHighDateTime=0x1ca0441, ftLastAccessTime.dwLowDateTime=0x244fb42, ftLastAccessTime.dwHighDateTime=0x1cb892c, ftLastWriteTime.dwLowDateTime=0x244fb42, ftLastWriteTime.dwHighDateTime=0x1cb892c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="History", cAlternateFileName="")) returned 1 [0065.060] FindNextFileW (in: hFindFile=0x5107b20, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x7690f9e4, ftCreationTime.dwHighDateTime=0x1ca0441, ftLastAccessTime.dwLowDateTime=0x244fb42, ftLastAccessTime.dwHighDateTime=0x1cb892c, ftLastWriteTime.dwLowDateTime=0x244fb42, ftLastWriteTime.dwHighDateTime=0x1cb892c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="History", cAlternateFileName="")) returned 0 [0065.060] FindClose (in: hFindFile=0x5107b20 | out: hFindFile=0x5107b20) returned 1 [0065.060] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e77c) returned 1 [0065.060] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e788) returned 1 [0065.060] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e7bc) returned 1 [0065.060] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\Windows Defender\\Scans", nBufferLength=0x105, lpBuffer=0x31e2c4, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\Windows Defender\\Scans", lpFilePart=0x0) returned 0x2f [0065.060] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\Windows Defender\\Scans\\", nBufferLength=0x105, lpBuffer=0x31e298, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\Windows Defender\\Scans\\", lpFilePart=0x0) returned 0x30 [0065.060] FindFirstFileW (in: lpFileName="C:\\ProgramData\\Microsoft\\Windows Defender\\Scans\\*", lpFindFileData=0x31e4e4 | out: lpFindFileData=0x31e4e4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x7fffaad0, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x7690f9e4, ftLastAccessTime.dwHighDateTime=0x1ca0441, ftLastWriteTime.dwLowDateTime=0x7690f9e4, ftLastWriteTime.dwHighDateTime=0x1ca0441, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5107b20 [0065.060] FindNextFileW (in: hFindFile=0x5107b20, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x7fffaad0, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x7690f9e4, ftLastAccessTime.dwHighDateTime=0x1ca0441, ftLastWriteTime.dwLowDateTime=0x7690f9e4, ftLastWriteTime.dwHighDateTime=0x1ca0441, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0065.060] FindNextFileW (in: hFindFile=0x5107b20, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x7690f9e4, ftCreationTime.dwHighDateTime=0x1ca0441, ftLastAccessTime.dwLowDateTime=0x244fb42, ftLastAccessTime.dwHighDateTime=0x1cb892c, ftLastWriteTime.dwLowDateTime=0x244fb42, ftLastWriteTime.dwHighDateTime=0x1cb892c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="History", cAlternateFileName="")) returned 1 [0065.060] FindNextFileW (in: hFindFile=0x5107b20, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0065.061] FindClose (in: hFindFile=0x5107b20 | out: hFindFile=0x5107b20) returned 1 [0065.061] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e77c) returned 1 [0065.061] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e788) returned 1 [0065.061] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e744) returned 1 [0065.061] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\Windows Defender\\Scans\\History", nBufferLength=0x105, lpBuffer=0x31e24c, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\Windows Defender\\Scans\\History", lpFilePart=0x0) returned 0x37 [0065.061] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\Windows Defender\\Scans\\History\\", nBufferLength=0x105, lpBuffer=0x31e220, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\Windows Defender\\Scans\\History\\", lpFilePart=0x0) returned 0x38 [0065.061] FindFirstFileW (in: lpFileName="C:\\ProgramData\\Microsoft\\Windows Defender\\Scans\\History\\*", lpFindFileData=0x31e46c | out: lpFindFileData=0x31e46c*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x7690f9e4, ftCreationTime.dwHighDateTime=0x1ca0441, ftLastAccessTime.dwLowDateTime=0x244fb42, ftLastAccessTime.dwHighDateTime=0x1cb892c, ftLastWriteTime.dwLowDateTime=0x244fb42, ftLastWriteTime.dwHighDateTime=0x1cb892c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5107b20 [0065.061] FindNextFileW (in: hFindFile=0x5107b20, lpFindFileData=0x31e47c | out: lpFindFileData=0x31e47c*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x7690f9e4, ftCreationTime.dwHighDateTime=0x1ca0441, ftLastAccessTime.dwLowDateTime=0x244fb42, ftLastAccessTime.dwHighDateTime=0x1cb892c, ftLastWriteTime.dwLowDateTime=0x244fb42, ftLastWriteTime.dwHighDateTime=0x1cb892c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0065.061] FindNextFileW (in: hFindFile=0x5107b20, lpFindFileData=0x31e47c | out: lpFindFileData=0x31e47c*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x76b24d28, ftCreationTime.dwHighDateTime=0x1ca0441, ftLastAccessTime.dwLowDateTime=0xcfc0a7e0, ftLastAccessTime.dwHighDateTime=0x1d2faf9, ftLastWriteTime.dwLowDateTime=0xcfc0a7e0, ftLastWriteTime.dwHighDateTime=0x1d2faf9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="CacheManager", cAlternateFileName="CACHEM~1")) returned 1 [0065.061] FindNextFileW (in: hFindFile=0x5107b20, lpFindFileData=0x31e47c | out: lpFindFileData=0x31e47c*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x244fb42, ftCreationTime.dwHighDateTime=0x1cb892c, ftLastAccessTime.dwLowDateTime=0xa13d69d0, ftLastAccessTime.dwHighDateTime=0x1d2dda3, ftLastWriteTime.dwLowDateTime=0xa13d69d0, ftLastWriteTime.dwHighDateTime=0x1d2dda3, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Results", cAlternateFileName="")) returned 1 [0065.061] FindNextFileW (in: hFindFile=0x5107b20, lpFindFileData=0x31e47c | out: lpFindFileData=0x31e47c*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x769ce0c6, ftCreationTime.dwHighDateTime=0x1ca0441, ftLastAccessTime.dwLowDateTime=0xb9820270, ftLastAccessTime.dwHighDateTime=0x1d2faf0, ftLastWriteTime.dwLowDateTime=0xb9820270, ftLastWriteTime.dwHighDateTime=0x1d2faf0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Service", cAlternateFileName="")) returned 1 [0065.061] FindNextFileW (in: hFindFile=0x5107b20, lpFindFileData=0x31e47c | out: lpFindFileData=0x31e47c*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x244fb42, ftCreationTime.dwHighDateTime=0x1cb892c, ftLastAccessTime.dwLowDateTime=0x244fb42, ftLastAccessTime.dwHighDateTime=0x1cb892c, ftLastWriteTime.dwLowDateTime=0x244fb42, ftLastWriteTime.dwHighDateTime=0x1cb892c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Store", cAlternateFileName="")) returned 1 [0065.061] FindNextFileW (in: hFindFile=0x5107b20, lpFindFileData=0x31e47c | out: lpFindFileData=0x31e47c*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x244fb42, ftCreationTime.dwHighDateTime=0x1cb892c, ftLastAccessTime.dwLowDateTime=0x244fb42, ftLastAccessTime.dwHighDateTime=0x1cb892c, ftLastWriteTime.dwLowDateTime=0x244fb42, ftLastWriteTime.dwHighDateTime=0x1cb892c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Store", cAlternateFileName="")) returned 0 [0065.061] FindClose (in: hFindFile=0x5107b20 | out: hFindFile=0x5107b20) returned 1 [0065.062] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e704) returned 1 [0065.062] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e710) returned 1 [0065.062] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e744) returned 1 [0065.062] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\Windows Defender\\Scans\\History", nBufferLength=0x105, lpBuffer=0x31e24c, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\Windows Defender\\Scans\\History", lpFilePart=0x0) returned 0x37 [0065.062] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\Windows Defender\\Scans\\History\\", nBufferLength=0x105, lpBuffer=0x31e220, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\Windows Defender\\Scans\\History\\", lpFilePart=0x0) returned 0x38 [0065.062] FindFirstFileW (in: lpFileName="C:\\ProgramData\\Microsoft\\Windows Defender\\Scans\\History\\*", lpFindFileData=0x31e46c | out: lpFindFileData=0x31e46c*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x7690f9e4, ftCreationTime.dwHighDateTime=0x1ca0441, ftLastAccessTime.dwLowDateTime=0x244fb42, ftLastAccessTime.dwHighDateTime=0x1cb892c, ftLastWriteTime.dwLowDateTime=0x244fb42, ftLastWriteTime.dwHighDateTime=0x1cb892c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5107b20 [0065.062] FindNextFileW (in: hFindFile=0x5107b20, lpFindFileData=0x31e47c | out: lpFindFileData=0x31e47c*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x7690f9e4, ftCreationTime.dwHighDateTime=0x1ca0441, ftLastAccessTime.dwLowDateTime=0x244fb42, ftLastAccessTime.dwHighDateTime=0x1cb892c, ftLastWriteTime.dwLowDateTime=0x244fb42, ftLastWriteTime.dwHighDateTime=0x1cb892c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0065.062] FindNextFileW (in: hFindFile=0x5107b20, lpFindFileData=0x31e47c | out: lpFindFileData=0x31e47c*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x76b24d28, ftCreationTime.dwHighDateTime=0x1ca0441, ftLastAccessTime.dwLowDateTime=0xcfc0a7e0, ftLastAccessTime.dwHighDateTime=0x1d2faf9, ftLastWriteTime.dwLowDateTime=0xcfc0a7e0, ftLastWriteTime.dwHighDateTime=0x1d2faf9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="CacheManager", cAlternateFileName="CACHEM~1")) returned 1 [0065.062] FindNextFileW (in: hFindFile=0x5107b20, lpFindFileData=0x31e47c | out: lpFindFileData=0x31e47c*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x244fb42, ftCreationTime.dwHighDateTime=0x1cb892c, ftLastAccessTime.dwLowDateTime=0xa13d69d0, ftLastAccessTime.dwHighDateTime=0x1d2dda3, ftLastWriteTime.dwLowDateTime=0xa13d69d0, ftLastWriteTime.dwHighDateTime=0x1d2dda3, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Results", cAlternateFileName="")) returned 1 [0065.062] FindNextFileW (in: hFindFile=0x5107b20, lpFindFileData=0x31e47c | out: lpFindFileData=0x31e47c*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x769ce0c6, ftCreationTime.dwHighDateTime=0x1ca0441, ftLastAccessTime.dwLowDateTime=0xb9820270, ftLastAccessTime.dwHighDateTime=0x1d2faf0, ftLastWriteTime.dwLowDateTime=0xb9820270, ftLastWriteTime.dwHighDateTime=0x1d2faf0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Service", cAlternateFileName="")) returned 1 [0065.062] FindNextFileW (in: hFindFile=0x5107b20, lpFindFileData=0x31e47c | out: lpFindFileData=0x31e47c*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x244fb42, ftCreationTime.dwHighDateTime=0x1cb892c, ftLastAccessTime.dwLowDateTime=0x244fb42, ftLastAccessTime.dwHighDateTime=0x1cb892c, ftLastWriteTime.dwLowDateTime=0x244fb42, ftLastWriteTime.dwHighDateTime=0x1cb892c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Store", cAlternateFileName="")) returned 1 [0065.062] FindNextFileW (in: hFindFile=0x5107b20, lpFindFileData=0x31e47c | out: lpFindFileData=0x31e47c*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0065.062] FindClose (in: hFindFile=0x5107b20 | out: hFindFile=0x5107b20) returned 1 [0065.062] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e704) returned 1 [0065.062] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e710) returned 1 [0065.062] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e6cc) returned 1 [0065.062] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\Windows Defender\\Scans\\History\\CacheManager", nBufferLength=0x105, lpBuffer=0x31e1d4, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\Windows Defender\\Scans\\History\\CacheManager", lpFilePart=0x0) returned 0x44 [0065.062] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\Windows Defender\\Scans\\History\\CacheManager\\", nBufferLength=0x105, lpBuffer=0x31e1a8, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\Windows Defender\\Scans\\History\\CacheManager\\", lpFilePart=0x0) returned 0x45 [0065.062] FindFirstFileW (in: lpFileName="C:\\ProgramData\\Microsoft\\Windows Defender\\Scans\\History\\CacheManager\\*", lpFindFileData=0x31e3f4 | out: lpFindFileData=0x31e3f4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x76b24d28, ftCreationTime.dwHighDateTime=0x1ca0441, ftLastAccessTime.dwLowDateTime=0xcfc0a7e0, ftLastAccessTime.dwHighDateTime=0x1d2faf9, ftLastWriteTime.dwLowDateTime=0xcfc0a7e0, ftLastWriteTime.dwHighDateTime=0x1d2faf9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5107b20 [0065.063] FindNextFileW (in: hFindFile=0x5107b20, lpFindFileData=0x31e404 | out: lpFindFileData=0x31e404*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x76b24d28, ftCreationTime.dwHighDateTime=0x1ca0441, ftLastAccessTime.dwLowDateTime=0xcfc0a7e0, ftLastAccessTime.dwHighDateTime=0x1d2faf9, ftLastWriteTime.dwLowDateTime=0xcfc0a7e0, ftLastWriteTime.dwHighDateTime=0x1d2faf9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0065.063] FindNextFileW (in: hFindFile=0x5107b20, lpFindFileData=0x31e404 | out: lpFindFileData=0x31e404*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xcfc0a7e0, ftCreationTime.dwHighDateTime=0x1d2faf9, ftLastAccessTime.dwLowDateTime=0xcfc0a7e0, ftLastAccessTime.dwHighDateTime=0x1d2faf9, ftLastWriteTime.dwLowDateTime=0xcfc30940, ftLastWriteTime.dwHighDateTime=0x1d2faf9, nFileSizeHigh=0x0, nFileSizeLow=0x33b60, dwReserved0=0x0, dwReserved1=0x0, cFileName="MpSfc.bin", cAlternateFileName="")) returned 1 [0065.063] FindNextFileW (in: hFindFile=0x5107b20, lpFindFileData=0x31e404 | out: lpFindFileData=0x31e404*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0065.063] FindClose (in: hFindFile=0x5107b20 | out: hFindFile=0x5107b20) returned 1 [0065.063] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e68c) returned 1 [0065.063] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e698) returned 1 [0065.063] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e6cc) returned 1 [0065.063] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\Windows Defender\\Scans\\History\\CacheManager", nBufferLength=0x105, lpBuffer=0x31e1d4, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\Windows Defender\\Scans\\History\\CacheManager", lpFilePart=0x0) returned 0x44 [0065.063] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\Windows Defender\\Scans\\History\\CacheManager\\", nBufferLength=0x105, lpBuffer=0x31e1a8, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\Windows Defender\\Scans\\History\\CacheManager\\", lpFilePart=0x0) returned 0x45 [0065.063] FindFirstFileW (in: lpFileName="C:\\ProgramData\\Microsoft\\Windows Defender\\Scans\\History\\CacheManager\\*", lpFindFileData=0x31e3f4 | out: lpFindFileData=0x31e3f4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x76b24d28, ftCreationTime.dwHighDateTime=0x1ca0441, ftLastAccessTime.dwLowDateTime=0xcfc0a7e0, ftLastAccessTime.dwHighDateTime=0x1d2faf9, ftLastWriteTime.dwLowDateTime=0xcfc0a7e0, ftLastWriteTime.dwHighDateTime=0x1d2faf9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5107b20 [0065.063] FindNextFileW (in: hFindFile=0x5107b20, lpFindFileData=0x31e404 | out: lpFindFileData=0x31e404*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x76b24d28, ftCreationTime.dwHighDateTime=0x1ca0441, ftLastAccessTime.dwLowDateTime=0xcfc0a7e0, ftLastAccessTime.dwHighDateTime=0x1d2faf9, ftLastWriteTime.dwLowDateTime=0xcfc0a7e0, ftLastWriteTime.dwHighDateTime=0x1d2faf9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0065.063] FindNextFileW (in: hFindFile=0x5107b20, lpFindFileData=0x31e404 | out: lpFindFileData=0x31e404*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xcfc0a7e0, ftCreationTime.dwHighDateTime=0x1d2faf9, ftLastAccessTime.dwLowDateTime=0xcfc0a7e0, ftLastAccessTime.dwHighDateTime=0x1d2faf9, ftLastWriteTime.dwLowDateTime=0xcfc30940, ftLastWriteTime.dwHighDateTime=0x1d2faf9, nFileSizeHigh=0x0, nFileSizeLow=0x33b60, dwReserved0=0x0, dwReserved1=0x0, cFileName="MpSfc.bin", cAlternateFileName="")) returned 1 [0065.063] FindNextFileW (in: hFindFile=0x5107b20, lpFindFileData=0x31e404 | out: lpFindFileData=0x31e404*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xcfc0a7e0, ftCreationTime.dwHighDateTime=0x1d2faf9, ftLastAccessTime.dwLowDateTime=0xcfc0a7e0, ftLastAccessTime.dwHighDateTime=0x1d2faf9, ftLastWriteTime.dwLowDateTime=0xcfc30940, ftLastWriteTime.dwHighDateTime=0x1d2faf9, nFileSizeHigh=0x0, nFileSizeLow=0x33b60, dwReserved0=0x0, dwReserved1=0x0, cFileName="MpSfc.bin", cAlternateFileName="")) returned 0 [0065.063] FindClose (in: hFindFile=0x5107b20 | out: hFindFile=0x5107b20) returned 1 [0065.063] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e68c) returned 1 [0065.063] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e698) returned 1 [0065.063] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e6cc) returned 1 [0065.063] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\Windows Defender\\Scans\\History\\Results", nBufferLength=0x105, lpBuffer=0x31e1d4, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\Windows Defender\\Scans\\History\\Results", lpFilePart=0x0) returned 0x3f [0065.064] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\Windows Defender\\Scans\\History\\Results\\", nBufferLength=0x105, lpBuffer=0x31e1a8, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\Windows Defender\\Scans\\History\\Results\\", lpFilePart=0x0) returned 0x40 [0065.064] FindFirstFileW (in: lpFileName="C:\\ProgramData\\Microsoft\\Windows Defender\\Scans\\History\\Results\\*", lpFindFileData=0x31e3f4 | out: lpFindFileData=0x31e3f4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x244fb42, ftCreationTime.dwHighDateTime=0x1cb892c, ftLastAccessTime.dwLowDateTime=0xa13d69d0, ftLastAccessTime.dwHighDateTime=0x1d2dda3, ftLastWriteTime.dwLowDateTime=0xa13d69d0, ftLastWriteTime.dwHighDateTime=0x1d2dda3, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5107b20 [0065.064] FindNextFileW (in: hFindFile=0x5107b20, lpFindFileData=0x31e404 | out: lpFindFileData=0x31e404*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x244fb42, ftCreationTime.dwHighDateTime=0x1cb892c, ftLastAccessTime.dwLowDateTime=0xa13d69d0, ftLastAccessTime.dwHighDateTime=0x1d2dda3, ftLastWriteTime.dwLowDateTime=0xa13d69d0, ftLastWriteTime.dwHighDateTime=0x1d2dda3, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0065.064] FindNextFileW (in: hFindFile=0x5107b20, lpFindFileData=0x31e404 | out: lpFindFileData=0x31e404*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xa13d69d0, ftCreationTime.dwHighDateTime=0x1d2dda3, ftLastAccessTime.dwLowDateTime=0x80be8ad0, ftLastAccessTime.dwHighDateTime=0x1d33740, ftLastWriteTime.dwLowDateTime=0x80be8ad0, ftLastWriteTime.dwHighDateTime=0x1d33740, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Resource", cAlternateFileName="")) returned 1 [0065.064] FindNextFileW (in: hFindFile=0x5107b20, lpFindFileData=0x31e404 | out: lpFindFileData=0x31e404*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xa13d69d0, ftCreationTime.dwHighDateTime=0x1d2dda3, ftLastAccessTime.dwLowDateTime=0x80be8ad0, ftLastAccessTime.dwHighDateTime=0x1d33740, ftLastWriteTime.dwLowDateTime=0x80be8ad0, ftLastWriteTime.dwHighDateTime=0x1d33740, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Resource", cAlternateFileName="")) returned 0 [0065.064] FindClose (in: hFindFile=0x5107b20 | out: hFindFile=0x5107b20) returned 1 [0065.064] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e68c) returned 1 [0065.064] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e698) returned 1 [0065.064] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e6cc) returned 1 [0065.064] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\Windows Defender\\Scans\\History\\Results", nBufferLength=0x105, lpBuffer=0x31e1d4, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\Windows Defender\\Scans\\History\\Results", lpFilePart=0x0) returned 0x3f [0065.064] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\Windows Defender\\Scans\\History\\Results\\", nBufferLength=0x105, lpBuffer=0x31e1a8, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\Windows Defender\\Scans\\History\\Results\\", lpFilePart=0x0) returned 0x40 [0065.064] FindFirstFileW (in: lpFileName="C:\\ProgramData\\Microsoft\\Windows Defender\\Scans\\History\\Results\\*", lpFindFileData=0x31e3f4 | out: lpFindFileData=0x31e3f4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x244fb42, ftCreationTime.dwHighDateTime=0x1cb892c, ftLastAccessTime.dwLowDateTime=0xa13d69d0, ftLastAccessTime.dwHighDateTime=0x1d2dda3, ftLastWriteTime.dwLowDateTime=0xa13d69d0, ftLastWriteTime.dwHighDateTime=0x1d2dda3, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5107b20 [0065.064] FindNextFileW (in: hFindFile=0x5107b20, lpFindFileData=0x31e404 | out: lpFindFileData=0x31e404*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x244fb42, ftCreationTime.dwHighDateTime=0x1cb892c, ftLastAccessTime.dwLowDateTime=0xa13d69d0, ftLastAccessTime.dwHighDateTime=0x1d2dda3, ftLastWriteTime.dwLowDateTime=0xa13d69d0, ftLastWriteTime.dwHighDateTime=0x1d2dda3, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0065.064] FindNextFileW (in: hFindFile=0x5107b20, lpFindFileData=0x31e404 | out: lpFindFileData=0x31e404*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xa13d69d0, ftCreationTime.dwHighDateTime=0x1d2dda3, ftLastAccessTime.dwLowDateTime=0x80be8ad0, ftLastAccessTime.dwHighDateTime=0x1d33740, ftLastWriteTime.dwLowDateTime=0x80be8ad0, ftLastWriteTime.dwHighDateTime=0x1d33740, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Resource", cAlternateFileName="")) returned 1 [0065.064] FindNextFileW (in: hFindFile=0x5107b20, lpFindFileData=0x31e404 | out: lpFindFileData=0x31e404*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0065.064] FindClose (in: hFindFile=0x5107b20 | out: hFindFile=0x5107b20) returned 1 [0065.064] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e68c) returned 1 [0065.065] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e698) returned 1 [0065.065] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e654) returned 1 [0065.065] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\Windows Defender\\Scans\\History\\Results\\Resource", nBufferLength=0x105, lpBuffer=0x31e15c, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\Windows Defender\\Scans\\History\\Results\\Resource", lpFilePart=0x0) returned 0x48 [0065.065] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\Windows Defender\\Scans\\History\\Results\\Resource\\", nBufferLength=0x105, lpBuffer=0x31e130, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\Windows Defender\\Scans\\History\\Results\\Resource\\", lpFilePart=0x0) returned 0x49 [0065.065] FindFirstFileW (in: lpFileName="C:\\ProgramData\\Microsoft\\Windows Defender\\Scans\\History\\Results\\Resource\\*", lpFindFileData=0x31e37c | out: lpFindFileData=0x31e37c*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xa13d69d0, ftCreationTime.dwHighDateTime=0x1d2dda3, ftLastAccessTime.dwLowDateTime=0x80be8ad0, ftLastAccessTime.dwHighDateTime=0x1d33740, ftLastWriteTime.dwLowDateTime=0x80be8ad0, ftLastWriteTime.dwHighDateTime=0x1d33740, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5107b20 [0065.065] FindNextFileW (in: hFindFile=0x5107b20, lpFindFileData=0x31e38c | out: lpFindFileData=0x31e38c*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xa13d69d0, ftCreationTime.dwHighDateTime=0x1d2dda3, ftLastAccessTime.dwLowDateTime=0x80be8ad0, ftLastAccessTime.dwHighDateTime=0x1d33740, ftLastWriteTime.dwLowDateTime=0x80be8ad0, ftLastWriteTime.dwHighDateTime=0x1d33740, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0065.065] FindNextFileW (in: hFindFile=0x5107b20, lpFindFileData=0x31e38c | out: lpFindFileData=0x31e38c*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x80be8ad0, ftCreationTime.dwHighDateTime=0x1d33740, ftLastAccessTime.dwLowDateTime=0x80be8ad0, ftLastAccessTime.dwHighDateTime=0x1d33740, ftLastWriteTime.dwLowDateTime=0x81085570, ftLastWriteTime.dwHighDateTime=0x1d33740, nFileSizeHigh=0x0, nFileSizeLow=0x1a60, dwReserved0=0x0, dwReserved1=0x0, cFileName="{1D1DBF3A-752F-47E2-BE70-D848D4A9AFB0}", cAlternateFileName="{1D1DB~1")) returned 1 [0065.065] FindNextFileW (in: hFindFile=0x5107b20, lpFindFileData=0x31e38c | out: lpFindFileData=0x31e38c*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0065.065] FindClose (in: hFindFile=0x5107b20 | out: hFindFile=0x5107b20) returned 1 [0065.065] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e614) returned 1 [0065.065] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e620) returned 1 [0065.065] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e654) returned 1 [0065.065] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\Windows Defender\\Scans\\History\\Results\\Resource", nBufferLength=0x105, lpBuffer=0x31e15c, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\Windows Defender\\Scans\\History\\Results\\Resource", lpFilePart=0x0) returned 0x48 [0065.065] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\Windows Defender\\Scans\\History\\Results\\Resource\\", nBufferLength=0x105, lpBuffer=0x31e130, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\Windows Defender\\Scans\\History\\Results\\Resource\\", lpFilePart=0x0) returned 0x49 [0065.065] FindFirstFileW (in: lpFileName="C:\\ProgramData\\Microsoft\\Windows Defender\\Scans\\History\\Results\\Resource\\*", lpFindFileData=0x31e37c | out: lpFindFileData=0x31e37c*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xa13d69d0, ftCreationTime.dwHighDateTime=0x1d2dda3, ftLastAccessTime.dwLowDateTime=0x80be8ad0, ftLastAccessTime.dwHighDateTime=0x1d33740, ftLastWriteTime.dwLowDateTime=0x80be8ad0, ftLastWriteTime.dwHighDateTime=0x1d33740, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5107b20 [0065.065] FindNextFileW (in: hFindFile=0x5107b20, lpFindFileData=0x31e38c | out: lpFindFileData=0x31e38c*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xa13d69d0, ftCreationTime.dwHighDateTime=0x1d2dda3, ftLastAccessTime.dwLowDateTime=0x80be8ad0, ftLastAccessTime.dwHighDateTime=0x1d33740, ftLastWriteTime.dwLowDateTime=0x80be8ad0, ftLastWriteTime.dwHighDateTime=0x1d33740, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0065.065] FindNextFileW (in: hFindFile=0x5107b20, lpFindFileData=0x31e38c | out: lpFindFileData=0x31e38c*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x80be8ad0, ftCreationTime.dwHighDateTime=0x1d33740, ftLastAccessTime.dwLowDateTime=0x80be8ad0, ftLastAccessTime.dwHighDateTime=0x1d33740, ftLastWriteTime.dwLowDateTime=0x81085570, ftLastWriteTime.dwHighDateTime=0x1d33740, nFileSizeHigh=0x0, nFileSizeLow=0x1a60, dwReserved0=0x0, dwReserved1=0x0, cFileName="{1D1DBF3A-752F-47E2-BE70-D848D4A9AFB0}", cAlternateFileName="{1D1DB~1")) returned 1 [0065.066] FindNextFileW (in: hFindFile=0x5107b20, lpFindFileData=0x31e38c | out: lpFindFileData=0x31e38c*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x80be8ad0, ftCreationTime.dwHighDateTime=0x1d33740, ftLastAccessTime.dwLowDateTime=0x80be8ad0, ftLastAccessTime.dwHighDateTime=0x1d33740, ftLastWriteTime.dwLowDateTime=0x81085570, ftLastWriteTime.dwHighDateTime=0x1d33740, nFileSizeHigh=0x0, nFileSizeLow=0x1a60, dwReserved0=0x0, dwReserved1=0x0, cFileName="{1D1DBF3A-752F-47E2-BE70-D848D4A9AFB0}", cAlternateFileName="{1D1DB~1")) returned 0 [0065.066] FindClose (in: hFindFile=0x5107b20 | out: hFindFile=0x5107b20) returned 1 [0065.066] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e614) returned 1 [0065.066] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e620) returned 1 [0065.066] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e6cc) returned 1 [0065.066] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\Windows Defender\\Scans\\History\\Service", nBufferLength=0x105, lpBuffer=0x31e1d4, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\Windows Defender\\Scans\\History\\Service", lpFilePart=0x0) returned 0x3f [0065.066] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\Windows Defender\\Scans\\History\\Service\\", nBufferLength=0x105, lpBuffer=0x31e1a8, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\Windows Defender\\Scans\\History\\Service\\", lpFilePart=0x0) returned 0x40 [0065.066] FindFirstFileW (in: lpFileName="C:\\ProgramData\\Microsoft\\Windows Defender\\Scans\\History\\Service\\*", lpFindFileData=0x31e3f4 | out: lpFindFileData=0x31e3f4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x769ce0c6, ftCreationTime.dwHighDateTime=0x1ca0441, ftLastAccessTime.dwLowDateTime=0xb9820270, ftLastAccessTime.dwHighDateTime=0x1d2faf0, ftLastWriteTime.dwLowDateTime=0xb9820270, ftLastWriteTime.dwHighDateTime=0x1d2faf0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5107b20 [0065.067] FindNextFileW (in: hFindFile=0x5107b20, lpFindFileData=0x31e404 | out: lpFindFileData=0x31e404*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x769ce0c6, ftCreationTime.dwHighDateTime=0x1ca0441, ftLastAccessTime.dwLowDateTime=0xb9820270, ftLastAccessTime.dwHighDateTime=0x1d2faf0, ftLastWriteTime.dwLowDateTime=0xb9820270, ftLastWriteTime.dwHighDateTime=0x1d2faf0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0065.067] FindNextFileW (in: hFindFile=0x5107b20, lpFindFileData=0x31e404 | out: lpFindFileData=0x31e404*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xb9820270, ftCreationTime.dwHighDateTime=0x1d2faf0, ftLastAccessTime.dwLowDateTime=0xb9820270, ftLastAccessTime.dwHighDateTime=0x1d2faf0, ftLastWriteTime.dwLowDateTime=0x7de6c9b0, ftLastWriteTime.dwHighDateTime=0x1d3373d, nFileSizeHigh=0x0, nFileSizeLow=0x2, dwReserved0=0x0, dwReserved1=0x0, cFileName="History.Log", cAlternateFileName="")) returned 1 [0065.067] FindNextFileW (in: hFindFile=0x5107b20, lpFindFileData=0x31e404 | out: lpFindFileData=0x31e404*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xadeed740, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0xadeed740, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x2d1f02a0, ftLastWriteTime.dwHighDateTime=0x1d4d597, nFileSizeHigh=0x0, nFileSizeLow=0x1a86, dwReserved0=0x0, dwReserved1=0x0, cFileName="Unknown.Log", cAlternateFileName="")) returned 1 [0065.067] FindNextFileW (in: hFindFile=0x5107b20, lpFindFileData=0x31e404 | out: lpFindFileData=0x31e404*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0065.067] FindClose (in: hFindFile=0x5107b20 | out: hFindFile=0x5107b20) returned 1 [0065.067] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e68c) returned 1 [0065.067] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e698) returned 1 [0065.067] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e6cc) returned 1 [0065.067] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\Windows Defender\\Scans\\History\\Service", nBufferLength=0x105, lpBuffer=0x31e1d4, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\Windows Defender\\Scans\\History\\Service", lpFilePart=0x0) returned 0x3f [0065.067] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\Windows Defender\\Scans\\History\\Service\\", nBufferLength=0x105, lpBuffer=0x31e1a8, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\Windows Defender\\Scans\\History\\Service\\", lpFilePart=0x0) returned 0x40 [0065.067] FindFirstFileW (in: lpFileName="C:\\ProgramData\\Microsoft\\Windows Defender\\Scans\\History\\Service\\*", lpFindFileData=0x31e3f4 | out: lpFindFileData=0x31e3f4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x769ce0c6, ftCreationTime.dwHighDateTime=0x1ca0441, ftLastAccessTime.dwLowDateTime=0xb9820270, ftLastAccessTime.dwHighDateTime=0x1d2faf0, ftLastWriteTime.dwLowDateTime=0xb9820270, ftLastWriteTime.dwHighDateTime=0x1d2faf0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5107b20 [0065.067] FindNextFileW (in: hFindFile=0x5107b20, lpFindFileData=0x31e404 | out: lpFindFileData=0x31e404*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x769ce0c6, ftCreationTime.dwHighDateTime=0x1ca0441, ftLastAccessTime.dwLowDateTime=0xb9820270, ftLastAccessTime.dwHighDateTime=0x1d2faf0, ftLastWriteTime.dwLowDateTime=0xb9820270, ftLastWriteTime.dwHighDateTime=0x1d2faf0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0065.067] FindNextFileW (in: hFindFile=0x5107b20, lpFindFileData=0x31e404 | out: lpFindFileData=0x31e404*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xb9820270, ftCreationTime.dwHighDateTime=0x1d2faf0, ftLastAccessTime.dwLowDateTime=0xb9820270, ftLastAccessTime.dwHighDateTime=0x1d2faf0, ftLastWriteTime.dwLowDateTime=0x7de6c9b0, ftLastWriteTime.dwHighDateTime=0x1d3373d, nFileSizeHigh=0x0, nFileSizeLow=0x2, dwReserved0=0x0, dwReserved1=0x0, cFileName="History.Log", cAlternateFileName="")) returned 1 [0065.067] FindNextFileW (in: hFindFile=0x5107b20, lpFindFileData=0x31e404 | out: lpFindFileData=0x31e404*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xadeed740, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0xadeed740, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x2d1f02a0, ftLastWriteTime.dwHighDateTime=0x1d4d597, nFileSizeHigh=0x0, nFileSizeLow=0x1a86, dwReserved0=0x0, dwReserved1=0x0, cFileName="Unknown.Log", cAlternateFileName="")) returned 1 [0065.067] FindNextFileW (in: hFindFile=0x5107b20, lpFindFileData=0x31e404 | out: lpFindFileData=0x31e404*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xadeed740, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0xadeed740, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x2d1f02a0, ftLastWriteTime.dwHighDateTime=0x1d4d597, nFileSizeHigh=0x0, nFileSizeLow=0x1a86, dwReserved0=0x0, dwReserved1=0x0, cFileName="Unknown.Log", cAlternateFileName="")) returned 0 [0065.067] FindClose (in: hFindFile=0x5107b20 | out: hFindFile=0x5107b20) returned 1 [0065.068] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e68c) returned 1 [0065.068] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e698) returned 1 [0065.068] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e6cc) returned 1 [0065.068] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\Windows Defender\\Scans\\History\\Store", nBufferLength=0x105, lpBuffer=0x31e1d4, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\Windows Defender\\Scans\\History\\Store", lpFilePart=0x0) returned 0x3d [0065.068] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\Windows Defender\\Scans\\History\\Store\\", nBufferLength=0x105, lpBuffer=0x31e1a8, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\Windows Defender\\Scans\\History\\Store\\", lpFilePart=0x0) returned 0x3e [0065.068] FindFirstFileW (in: lpFileName="C:\\ProgramData\\Microsoft\\Windows Defender\\Scans\\History\\Store\\*", lpFindFileData=0x31e3f4 | out: lpFindFileData=0x31e3f4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x244fb42, ftCreationTime.dwHighDateTime=0x1cb892c, ftLastAccessTime.dwLowDateTime=0x244fb42, ftLastAccessTime.dwHighDateTime=0x1cb892c, ftLastWriteTime.dwLowDateTime=0x244fb42, ftLastWriteTime.dwHighDateTime=0x1cb892c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5107b20 [0065.068] FindNextFileW (in: hFindFile=0x5107b20, lpFindFileData=0x31e404 | out: lpFindFileData=0x31e404*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x244fb42, ftCreationTime.dwHighDateTime=0x1cb892c, ftLastAccessTime.dwLowDateTime=0x244fb42, ftLastAccessTime.dwHighDateTime=0x1cb892c, ftLastWriteTime.dwLowDateTime=0x244fb42, ftLastWriteTime.dwHighDateTime=0x1cb892c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0065.068] FindNextFileW (in: hFindFile=0x5107b20, lpFindFileData=0x31e404 | out: lpFindFileData=0x31e404*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x244fb42, ftCreationTime.dwHighDateTime=0x1cb892c, ftLastAccessTime.dwLowDateTime=0x244fb42, ftLastAccessTime.dwHighDateTime=0x1cb892c, ftLastWriteTime.dwLowDateTime=0x244fb42, ftLastWriteTime.dwHighDateTime=0x1cb892c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 0 [0065.068] FindClose (in: hFindFile=0x5107b20 | out: hFindFile=0x5107b20) returned 1 [0065.068] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e68c) returned 1 [0065.068] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e698) returned 1 [0065.068] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e6cc) returned 1 [0065.068] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\Windows Defender\\Scans\\History\\Store", nBufferLength=0x105, lpBuffer=0x31e1d4, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\Windows Defender\\Scans\\History\\Store", lpFilePart=0x0) returned 0x3d [0065.068] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\Windows Defender\\Scans\\History\\Store\\", nBufferLength=0x105, lpBuffer=0x31e1a8, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\Windows Defender\\Scans\\History\\Store\\", lpFilePart=0x0) returned 0x3e [0065.068] FindFirstFileW (in: lpFileName="C:\\ProgramData\\Microsoft\\Windows Defender\\Scans\\History\\Store\\*", lpFindFileData=0x31e3f4 | out: lpFindFileData=0x31e3f4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x244fb42, ftCreationTime.dwHighDateTime=0x1cb892c, ftLastAccessTime.dwLowDateTime=0x244fb42, ftLastAccessTime.dwHighDateTime=0x1cb892c, ftLastWriteTime.dwLowDateTime=0x244fb42, ftLastWriteTime.dwHighDateTime=0x1cb892c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5107b20 [0065.069] FindNextFileW (in: hFindFile=0x5107b20, lpFindFileData=0x31e404 | out: lpFindFileData=0x31e404*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x244fb42, ftCreationTime.dwHighDateTime=0x1cb892c, ftLastAccessTime.dwLowDateTime=0x244fb42, ftLastAccessTime.dwHighDateTime=0x1cb892c, ftLastWriteTime.dwLowDateTime=0x244fb42, ftLastWriteTime.dwHighDateTime=0x1cb892c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0065.069] FindNextFileW (in: hFindFile=0x5107b20, lpFindFileData=0x31e404 | out: lpFindFileData=0x31e404*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x244fb42, ftCreationTime.dwHighDateTime=0x1cb892c, ftLastAccessTime.dwLowDateTime=0x244fb42, ftLastAccessTime.dwHighDateTime=0x1cb892c, ftLastWriteTime.dwLowDateTime=0x244fb42, ftLastWriteTime.dwHighDateTime=0x1cb892c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 0 [0065.069] FindClose (in: hFindFile=0x5107b20 | out: hFindFile=0x5107b20) returned 1 [0065.069] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e68c) returned 1 [0065.069] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e698) returned 1 [0065.069] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e7bc) returned 1 [0065.069] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\Windows Defender\\Support", nBufferLength=0x105, lpBuffer=0x31e2c4, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\Windows Defender\\Support", lpFilePart=0x0) returned 0x31 [0065.069] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\Windows Defender\\Support\\", nBufferLength=0x105, lpBuffer=0x31e298, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\Windows Defender\\Support\\", lpFilePart=0x0) returned 0x32 [0065.069] FindFirstFileW (in: lpFileName="C:\\ProgramData\\Microsoft\\Windows Defender\\Support\\*", lpFindFileData=0x31e4e4 | out: lpFindFileData=0x31e4e4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x7fffaad0, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x76792c22, ftLastAccessTime.dwHighDateTime=0x1ca0441, ftLastWriteTime.dwLowDateTime=0x76792c22, ftLastWriteTime.dwHighDateTime=0x1ca0441, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5107b20 [0065.069] FindNextFileW (in: hFindFile=0x5107b20, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x7fffaad0, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x76792c22, ftLastAccessTime.dwHighDateTime=0x1ca0441, ftLastWriteTime.dwLowDateTime=0x76792c22, ftLastWriteTime.dwHighDateTime=0x1ca0441, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0065.069] FindNextFileW (in: hFindFile=0x5107b20, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x76792c22, ftCreationTime.dwHighDateTime=0x1ca0441, ftLastAccessTime.dwLowDateTime=0x76792c22, ftLastAccessTime.dwHighDateTime=0x1ca0441, ftLastWriteTime.dwLowDateTime=0x798d48a0, ftLastWriteTime.dwHighDateTime=0x1d4d596, nFileSizeHigh=0x0, nFileSizeLow=0x30ada, dwReserved0=0x0, dwReserved1=0x0, cFileName="MPLog-07132009-221054.log", cAlternateFileName="MPLOG-~1.LOG")) returned 1 [0065.069] FindNextFileW (in: hFindFile=0x5107b20, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0065.069] FindClose (in: hFindFile=0x5107b20 | out: hFindFile=0x5107b20) returned 1 [0065.069] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e77c) returned 1 [0065.069] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e788) returned 1 [0065.069] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e7bc) returned 1 [0065.069] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\Windows Defender\\Support", nBufferLength=0x105, lpBuffer=0x31e2c4, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\Windows Defender\\Support", lpFilePart=0x0) returned 0x31 [0065.069] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\Windows Defender\\Support\\", nBufferLength=0x105, lpBuffer=0x31e298, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\Windows Defender\\Support\\", lpFilePart=0x0) returned 0x32 [0065.070] FindFirstFileW (in: lpFileName="C:\\ProgramData\\Microsoft\\Windows Defender\\Support\\*", lpFindFileData=0x31e4e4 | out: lpFindFileData=0x31e4e4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x7fffaad0, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x76792c22, ftLastAccessTime.dwHighDateTime=0x1ca0441, ftLastWriteTime.dwLowDateTime=0x76792c22, ftLastWriteTime.dwHighDateTime=0x1ca0441, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5107b20 [0065.070] FindNextFileW (in: hFindFile=0x5107b20, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x7fffaad0, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x76792c22, ftLastAccessTime.dwHighDateTime=0x1ca0441, ftLastWriteTime.dwLowDateTime=0x76792c22, ftLastWriteTime.dwHighDateTime=0x1ca0441, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0065.070] FindNextFileW (in: hFindFile=0x5107b20, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x76792c22, ftCreationTime.dwHighDateTime=0x1ca0441, ftLastAccessTime.dwLowDateTime=0x76792c22, ftLastAccessTime.dwHighDateTime=0x1ca0441, ftLastWriteTime.dwLowDateTime=0x798d48a0, ftLastWriteTime.dwHighDateTime=0x1d4d596, nFileSizeHigh=0x0, nFileSizeLow=0x30ada, dwReserved0=0x0, dwReserved1=0x0, cFileName="MPLog-07132009-221054.log", cAlternateFileName="MPLOG-~1.LOG")) returned 1 [0065.070] FindNextFileW (in: hFindFile=0x5107b20, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x76792c22, ftCreationTime.dwHighDateTime=0x1ca0441, ftLastAccessTime.dwLowDateTime=0x76792c22, ftLastAccessTime.dwHighDateTime=0x1ca0441, ftLastWriteTime.dwLowDateTime=0x798d48a0, ftLastWriteTime.dwHighDateTime=0x1d4d596, nFileSizeHigh=0x0, nFileSizeLow=0x30ada, dwReserved0=0x0, dwReserved1=0x0, cFileName="MPLog-07132009-221054.log", cAlternateFileName="MPLOG-~1.LOG")) returned 0 [0065.070] FindClose (in: hFindFile=0x5107b20 | out: hFindFile=0x5107b20) returned 1 [0065.070] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e77c) returned 1 [0065.070] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e788) returned 1 [0065.070] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e834) returned 1 [0065.070] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\Windows NT", nBufferLength=0x105, lpBuffer=0x31e33c, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\Windows NT", lpFilePart=0x0) returned 0x23 [0065.070] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\Windows NT\\", nBufferLength=0x105, lpBuffer=0x31e310, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\Windows NT\\", lpFilePart=0x0) returned 0x24 [0065.070] FindFirstFileW (in: lpFileName="C:\\ProgramData\\Microsoft\\Windows NT\\*", lpFindFileData=0x31e55c | out: lpFindFileData=0x31e55c*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x7fffaad0, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x7fffaad0, ftLastAccessTime.dwHighDateTime=0x1ca0444, ftLastWriteTime.dwLowDateTime=0x7fffaad0, ftLastWriteTime.dwHighDateTime=0x1ca0444, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5107b20 [0065.070] FindNextFileW (in: hFindFile=0x5107b20, lpFindFileData=0x31e56c | out: lpFindFileData=0x31e56c*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x7fffaad0, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x7fffaad0, ftLastAccessTime.dwHighDateTime=0x1ca0444, ftLastWriteTime.dwLowDateTime=0x7fffaad0, ftLastWriteTime.dwHighDateTime=0x1ca0444, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0065.070] FindNextFileW (in: hFindFile=0x5107b20, lpFindFileData=0x31e56c | out: lpFindFileData=0x31e56c*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x7fffaad0, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x1d91b669, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x1d91b669, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="MSFax", cAlternateFileName="")) returned 1 [0065.070] FindNextFileW (in: hFindFile=0x5107b20, lpFindFileData=0x31e56c | out: lpFindFileData=0x31e56c*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x7fffaad0, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x80340916, ftLastAccessTime.dwHighDateTime=0x1ca0444, ftLastWriteTime.dwLowDateTime=0x80340916, ftLastWriteTime.dwHighDateTime=0x1ca0444, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="MSScan", cAlternateFileName="")) returned 1 [0065.070] FindNextFileW (in: hFindFile=0x5107b20, lpFindFileData=0x31e56c | out: lpFindFileData=0x31e56c*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x7fffaad0, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x80340916, ftLastAccessTime.dwHighDateTime=0x1ca0444, ftLastWriteTime.dwLowDateTime=0x80340916, ftLastWriteTime.dwHighDateTime=0x1ca0444, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="MSScan", cAlternateFileName="")) returned 0 [0065.070] FindClose (in: hFindFile=0x5107b20 | out: hFindFile=0x5107b20) returned 1 [0065.071] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e7f4) returned 1 [0065.071] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e800) returned 1 [0065.071] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e834) returned 1 [0065.071] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\Windows NT", nBufferLength=0x105, lpBuffer=0x31e33c, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\Windows NT", lpFilePart=0x0) returned 0x23 [0065.071] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\Windows NT\\", nBufferLength=0x105, lpBuffer=0x31e310, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\Windows NT\\", lpFilePart=0x0) returned 0x24 [0065.071] FindFirstFileW (in: lpFileName="C:\\ProgramData\\Microsoft\\Windows NT\\*", lpFindFileData=0x31e55c | out: lpFindFileData=0x31e55c*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x7fffaad0, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x7fffaad0, ftLastAccessTime.dwHighDateTime=0x1ca0444, ftLastWriteTime.dwLowDateTime=0x7fffaad0, ftLastWriteTime.dwHighDateTime=0x1ca0444, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5107b20 [0065.071] FindNextFileW (in: hFindFile=0x5107b20, lpFindFileData=0x31e56c | out: lpFindFileData=0x31e56c*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x7fffaad0, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x7fffaad0, ftLastAccessTime.dwHighDateTime=0x1ca0444, ftLastWriteTime.dwLowDateTime=0x7fffaad0, ftLastWriteTime.dwHighDateTime=0x1ca0444, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0065.071] FindNextFileW (in: hFindFile=0x5107b20, lpFindFileData=0x31e56c | out: lpFindFileData=0x31e56c*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x7fffaad0, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x1d91b669, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x1d91b669, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="MSFax", cAlternateFileName="")) returned 1 [0065.071] FindNextFileW (in: hFindFile=0x5107b20, lpFindFileData=0x31e56c | out: lpFindFileData=0x31e56c*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x7fffaad0, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x80340916, ftLastAccessTime.dwHighDateTime=0x1ca0444, ftLastWriteTime.dwLowDateTime=0x80340916, ftLastWriteTime.dwHighDateTime=0x1ca0444, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="MSScan", cAlternateFileName="")) returned 1 [0065.071] FindNextFileW (in: hFindFile=0x5107b20, lpFindFileData=0x31e56c | out: lpFindFileData=0x31e56c*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0065.071] FindClose (in: hFindFile=0x5107b20 | out: hFindFile=0x5107b20) returned 1 [0065.071] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e7f4) returned 1 [0065.071] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e800) returned 1 [0065.071] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e7bc) returned 1 [0065.071] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\Windows NT\\MSFax", nBufferLength=0x105, lpBuffer=0x31e2c4, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\Windows NT\\MSFax", lpFilePart=0x0) returned 0x29 [0065.071] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\Windows NT\\MSFax\\", nBufferLength=0x105, lpBuffer=0x31e298, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\Windows NT\\MSFax\\", lpFilePart=0x0) returned 0x2a [0065.071] FindFirstFileW (in: lpFileName="C:\\ProgramData\\Microsoft\\Windows NT\\MSFax\\*", lpFindFileData=0x31e4e4 | out: lpFindFileData=0x31e4e4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x7fffaad0, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x1d91b669, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x1d91b669, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5107b20 [0065.073] FindNextFileW (in: hFindFile=0x5107b20, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x7fffaad0, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x1d91b669, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x1d91b669, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0065.073] FindNextFileW (in: hFindFile=0x5107b20, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x7fffaad0, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x7fffaad0, ftLastAccessTime.dwHighDateTime=0x1ca0444, ftLastWriteTime.dwLowDateTime=0x7fffaad0, ftLastWriteTime.dwHighDateTime=0x1ca0444, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="ActivityLog", cAlternateFileName="ACTIVI~1")) returned 1 [0065.073] FindNextFileW (in: hFindFile=0x5107b20, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x7fffaad0, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x1d91b669, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x1d91b669, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Common Coverpages", cAlternateFileName="COMMON~1")) returned 1 [0065.073] FindNextFileW (in: hFindFile=0x5107b20, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x7fffaad0, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x7fffaad0, ftLastAccessTime.dwHighDateTime=0x1ca0444, ftLastWriteTime.dwLowDateTime=0x7fffaad0, ftLastWriteTime.dwHighDateTime=0x1ca0444, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Inbox", cAlternateFileName="")) returned 1 [0065.073] FindNextFileW (in: hFindFile=0x5107b20, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x7fffaad0, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x7fffaad0, ftLastAccessTime.dwHighDateTime=0x1ca0444, ftLastWriteTime.dwLowDateTime=0x7fffaad0, ftLastWriteTime.dwHighDateTime=0x1ca0444, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Queue", cAlternateFileName="")) returned 1 [0065.074] FindNextFileW (in: hFindFile=0x5107b20, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x7fffaad0, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x7fffaad0, ftLastAccessTime.dwHighDateTime=0x1ca0444, ftLastWriteTime.dwLowDateTime=0x7fffaad0, ftLastWriteTime.dwHighDateTime=0x1ca0444, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="SentItems", cAlternateFileName="SENTIT~1")) returned 1 [0065.074] FindNextFileW (in: hFindFile=0x5107b20, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x1d91b669, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x1d91b669, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x1d91b669, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="VirtualInbox", cAlternateFileName="VIRTUA~1")) returned 1 [0065.074] FindNextFileW (in: hFindFile=0x5107b20, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x1d91b669, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x1d91b669, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x1d91b669, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="VirtualInbox", cAlternateFileName="VIRTUA~1")) returned 0 [0065.074] FindClose (in: hFindFile=0x5107b20 | out: hFindFile=0x5107b20) returned 1 [0065.074] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e77c) returned 1 [0065.074] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e788) returned 1 [0065.074] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e7bc) returned 1 [0065.074] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\Windows NT\\MSFax", nBufferLength=0x105, lpBuffer=0x31e2c4, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\Windows NT\\MSFax", lpFilePart=0x0) returned 0x29 [0065.074] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\Windows NT\\MSFax\\", nBufferLength=0x105, lpBuffer=0x31e298, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\Windows NT\\MSFax\\", lpFilePart=0x0) returned 0x2a [0065.075] FindFirstFileW (in: lpFileName="C:\\ProgramData\\Microsoft\\Windows NT\\MSFax\\*", lpFindFileData=0x31e4e4 | out: lpFindFileData=0x31e4e4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x7fffaad0, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x1d91b669, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x1d91b669, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5107b20 [0065.075] FindNextFileW (in: hFindFile=0x5107b20, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x7fffaad0, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x1d91b669, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x1d91b669, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0065.075] FindNextFileW (in: hFindFile=0x5107b20, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x7fffaad0, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x7fffaad0, ftLastAccessTime.dwHighDateTime=0x1ca0444, ftLastWriteTime.dwLowDateTime=0x7fffaad0, ftLastWriteTime.dwHighDateTime=0x1ca0444, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="ActivityLog", cAlternateFileName="ACTIVI~1")) returned 1 [0065.075] FindNextFileW (in: hFindFile=0x5107b20, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x7fffaad0, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x1d91b669, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x1d91b669, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Common Coverpages", cAlternateFileName="COMMON~1")) returned 1 [0065.075] FindNextFileW (in: hFindFile=0x5107b20, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x7fffaad0, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x7fffaad0, ftLastAccessTime.dwHighDateTime=0x1ca0444, ftLastWriteTime.dwLowDateTime=0x7fffaad0, ftLastWriteTime.dwHighDateTime=0x1ca0444, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Inbox", cAlternateFileName="")) returned 1 [0065.075] FindNextFileW (in: hFindFile=0x5107b20, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x7fffaad0, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x7fffaad0, ftLastAccessTime.dwHighDateTime=0x1ca0444, ftLastWriteTime.dwLowDateTime=0x7fffaad0, ftLastWriteTime.dwHighDateTime=0x1ca0444, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Queue", cAlternateFileName="")) returned 1 [0065.075] FindNextFileW (in: hFindFile=0x5107b20, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x7fffaad0, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x7fffaad0, ftLastAccessTime.dwHighDateTime=0x1ca0444, ftLastWriteTime.dwLowDateTime=0x7fffaad0, ftLastWriteTime.dwHighDateTime=0x1ca0444, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="SentItems", cAlternateFileName="SENTIT~1")) returned 1 [0065.076] FindNextFileW (in: hFindFile=0x5107b20, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x1d91b669, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x1d91b669, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x1d91b669, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="VirtualInbox", cAlternateFileName="VIRTUA~1")) returned 1 [0065.076] FindNextFileW (in: hFindFile=0x5107b20, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0065.076] FindClose (in: hFindFile=0x5107b20 | out: hFindFile=0x5107b20) returned 1 [0065.076] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e77c) returned 1 [0065.076] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e788) returned 1 [0065.076] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e744) returned 1 [0065.076] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\Windows NT\\MSFax\\ActivityLog", nBufferLength=0x105, lpBuffer=0x31e24c, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\Windows NT\\MSFax\\ActivityLog", lpFilePart=0x0) returned 0x35 [0065.076] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\Windows NT\\MSFax\\ActivityLog\\", nBufferLength=0x105, lpBuffer=0x31e220, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\Windows NT\\MSFax\\ActivityLog\\", lpFilePart=0x0) returned 0x36 [0065.076] FindFirstFileW (in: lpFileName="C:\\ProgramData\\Microsoft\\Windows NT\\MSFax\\ActivityLog\\*", lpFindFileData=0x31e46c | out: lpFindFileData=0x31e46c*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x7fffaad0, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x7fffaad0, ftLastAccessTime.dwHighDateTime=0x1ca0444, ftLastWriteTime.dwLowDateTime=0x7fffaad0, ftLastWriteTime.dwHighDateTime=0x1ca0444, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5107b20 [0065.077] FindNextFileW (in: hFindFile=0x5107b20, lpFindFileData=0x31e47c | out: lpFindFileData=0x31e47c*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x7fffaad0, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x7fffaad0, ftLastAccessTime.dwHighDateTime=0x1ca0444, ftLastWriteTime.dwLowDateTime=0x7fffaad0, ftLastWriteTime.dwHighDateTime=0x1ca0444, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0065.077] FindNextFileW (in: hFindFile=0x5107b20, lpFindFileData=0x31e47c | out: lpFindFileData=0x31e47c*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x7fffaad0, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x7fffaad0, ftLastAccessTime.dwHighDateTime=0x1ca0444, ftLastWriteTime.dwLowDateTime=0x7fffaad0, ftLastWriteTime.dwHighDateTime=0x1ca0444, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 0 [0065.077] FindClose (in: hFindFile=0x5107b20 | out: hFindFile=0x5107b20) returned 1 [0065.077] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e704) returned 1 [0065.077] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e710) returned 1 [0065.077] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e744) returned 1 [0065.077] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\Windows NT\\MSFax\\ActivityLog", nBufferLength=0x105, lpBuffer=0x31e24c, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\Windows NT\\MSFax\\ActivityLog", lpFilePart=0x0) returned 0x35 [0065.078] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\Windows NT\\MSFax\\ActivityLog\\", nBufferLength=0x105, lpBuffer=0x31e220, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\Windows NT\\MSFax\\ActivityLog\\", lpFilePart=0x0) returned 0x36 [0065.078] FindFirstFileW (in: lpFileName="C:\\ProgramData\\Microsoft\\Windows NT\\MSFax\\ActivityLog\\*", lpFindFileData=0x31e46c | out: lpFindFileData=0x31e46c*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x7fffaad0, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x7fffaad0, ftLastAccessTime.dwHighDateTime=0x1ca0444, ftLastWriteTime.dwLowDateTime=0x7fffaad0, ftLastWriteTime.dwHighDateTime=0x1ca0444, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5107b20 [0065.078] FindNextFileW (in: hFindFile=0x5107b20, lpFindFileData=0x31e47c | out: lpFindFileData=0x31e47c*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x7fffaad0, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x7fffaad0, ftLastAccessTime.dwHighDateTime=0x1ca0444, ftLastWriteTime.dwLowDateTime=0x7fffaad0, ftLastWriteTime.dwHighDateTime=0x1ca0444, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0065.078] FindNextFileW (in: hFindFile=0x5107b20, lpFindFileData=0x31e47c | out: lpFindFileData=0x31e47c*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x7fffaad0, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x7fffaad0, ftLastAccessTime.dwHighDateTime=0x1ca0444, ftLastWriteTime.dwLowDateTime=0x7fffaad0, ftLastWriteTime.dwHighDateTime=0x1ca0444, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 0 [0065.078] FindClose (in: hFindFile=0x5107b20 | out: hFindFile=0x5107b20) returned 1 [0065.078] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e704) returned 1 [0065.078] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e710) returned 1 [0065.078] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e744) returned 1 [0065.078] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\Windows NT\\MSFax\\Common Coverpages", nBufferLength=0x105, lpBuffer=0x31e24c, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\Windows NT\\MSFax\\Common Coverpages", lpFilePart=0x0) returned 0x3b [0065.078] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\Windows NT\\MSFax\\Common Coverpages\\", nBufferLength=0x105, lpBuffer=0x31e220, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\Windows NT\\MSFax\\Common Coverpages\\", lpFilePart=0x0) returned 0x3c [0065.078] FindFirstFileW (in: lpFileName="C:\\ProgramData\\Microsoft\\Windows NT\\MSFax\\Common Coverpages\\*", lpFindFileData=0x31e46c | out: lpFindFileData=0x31e46c*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x7fffaad0, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x1d91b669, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x1d91b669, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5107b20 [0065.078] FindNextFileW (in: hFindFile=0x5107b20, lpFindFileData=0x31e47c | out: lpFindFileData=0x31e47c*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x7fffaad0, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x1d91b669, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x1d91b669, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0065.078] FindNextFileW (in: hFindFile=0x5107b20, lpFindFileData=0x31e47c | out: lpFindFileData=0x31e47c*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x1d91b669, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x21cf2d38, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x1d91b669, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="en-US", cAlternateFileName="")) returned 1 [0065.078] FindNextFileW (in: hFindFile=0x5107b20, lpFindFileData=0x31e47c | out: lpFindFileData=0x31e47c*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x1d91b669, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x21cf2d38, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x1d91b669, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="en-US", cAlternateFileName="")) returned 0 [0065.078] FindClose (in: hFindFile=0x5107b20 | out: hFindFile=0x5107b20) returned 1 [0065.078] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e704) returned 1 [0065.079] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e710) returned 1 [0065.079] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e744) returned 1 [0065.079] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\Windows NT\\MSFax\\Common Coverpages", nBufferLength=0x105, lpBuffer=0x31e24c, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\Windows NT\\MSFax\\Common Coverpages", lpFilePart=0x0) returned 0x3b [0065.079] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\Windows NT\\MSFax\\Common Coverpages\\", nBufferLength=0x105, lpBuffer=0x31e220, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\Windows NT\\MSFax\\Common Coverpages\\", lpFilePart=0x0) returned 0x3c [0065.079] FindFirstFileW (in: lpFileName="C:\\ProgramData\\Microsoft\\Windows NT\\MSFax\\Common Coverpages\\*", lpFindFileData=0x31e46c | out: lpFindFileData=0x31e46c*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x7fffaad0, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x1d91b669, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x1d91b669, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5107b20 [0065.079] FindNextFileW (in: hFindFile=0x5107b20, lpFindFileData=0x31e47c | out: lpFindFileData=0x31e47c*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x7fffaad0, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x1d91b669, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x1d91b669, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0065.079] FindNextFileW (in: hFindFile=0x5107b20, lpFindFileData=0x31e47c | out: lpFindFileData=0x31e47c*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x1d91b669, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x21cf2d38, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x1d91b669, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="en-US", cAlternateFileName="")) returned 1 [0065.079] FindNextFileW (in: hFindFile=0x5107b20, lpFindFileData=0x31e47c | out: lpFindFileData=0x31e47c*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0065.079] FindClose (in: hFindFile=0x5107b20 | out: hFindFile=0x5107b20) returned 1 [0065.079] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e704) returned 1 [0065.079] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e710) returned 1 [0065.079] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e6cc) returned 1 [0065.079] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\Windows NT\\MSFax\\Common Coverpages\\en-US", nBufferLength=0x105, lpBuffer=0x31e1d4, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\Windows NT\\MSFax\\Common Coverpages\\en-US", lpFilePart=0x0) returned 0x41 [0065.079] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\Windows NT\\MSFax\\Common Coverpages\\en-US\\", nBufferLength=0x105, lpBuffer=0x31e1a8, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\Windows NT\\MSFax\\Common Coverpages\\en-US\\", lpFilePart=0x0) returned 0x42 [0065.079] FindFirstFileW (in: lpFileName="C:\\ProgramData\\Microsoft\\Windows NT\\MSFax\\Common Coverpages\\en-US\\*", lpFindFileData=0x31e3f4 | out: lpFindFileData=0x31e3f4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x1d91b669, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x21cf2d38, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x1d91b669, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5107b20 [0065.079] FindNextFileW (in: hFindFile=0x5107b20, lpFindFileData=0x31e404 | out: lpFindFileData=0x31e404*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x1d91b669, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x21cf2d38, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x1d91b669, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0065.079] FindNextFileW (in: hFindFile=0x5107b20, lpFindFileData=0x31e404 | out: lpFindFileData=0x31e404*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xfe3998d, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x10b3266c, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0xfe3998d, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x28aa, dwReserved0=0x0, dwReserved1=0x0, cFileName="confident.cov", cAlternateFileName="")) returned 1 [0065.080] FindNextFileW (in: hFindFile=0x5107b20, lpFindFileData=0x31e404 | out: lpFindFileData=0x31e404*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xfe3998d, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x10b3266c, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0xfe3998d, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x2a09, dwReserved0=0x0, dwReserved1=0x0, cFileName="fyi.cov", cAlternateFileName="")) returned 1 [0065.080] FindNextFileW (in: hFindFile=0x5107b20, lpFindFileData=0x31e404 | out: lpFindFileData=0x31e404*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xfe3998d, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x10b3266c, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0xfe3998d, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x3aa0, dwReserved0=0x0, dwReserved1=0x0, cFileName="generic.cov", cAlternateFileName="")) returned 1 [0065.080] FindNextFileW (in: hFindFile=0x5107b20, lpFindFileData=0x31e404 | out: lpFindFileData=0x31e404*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xfe3998d, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x10b3266c, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0xfe3998d, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x2886, dwReserved0=0x0, dwReserved1=0x0, cFileName="urgent.cov", cAlternateFileName="")) returned 1 [0065.080] FindNextFileW (in: hFindFile=0x5107b20, lpFindFileData=0x31e404 | out: lpFindFileData=0x31e404*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0065.080] FindClose (in: hFindFile=0x5107b20 | out: hFindFile=0x5107b20) returned 1 [0065.080] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e68c) returned 1 [0065.080] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e698) returned 1 [0065.080] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e6cc) returned 1 [0065.080] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\Windows NT\\MSFax\\Common Coverpages\\en-US", nBufferLength=0x105, lpBuffer=0x31e1d4, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\Windows NT\\MSFax\\Common Coverpages\\en-US", lpFilePart=0x0) returned 0x41 [0065.080] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\Windows NT\\MSFax\\Common Coverpages\\en-US\\", nBufferLength=0x105, lpBuffer=0x31e1a8, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\Windows NT\\MSFax\\Common Coverpages\\en-US\\", lpFilePart=0x0) returned 0x42 [0065.080] FindFirstFileW (in: lpFileName="C:\\ProgramData\\Microsoft\\Windows NT\\MSFax\\Common Coverpages\\en-US\\*", lpFindFileData=0x31e3f4 | out: lpFindFileData=0x31e3f4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x1d91b669, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x21cf2d38, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x1d91b669, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5107b20 [0065.080] FindNextFileW (in: hFindFile=0x5107b20, lpFindFileData=0x31e404 | out: lpFindFileData=0x31e404*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x1d91b669, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x21cf2d38, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x1d91b669, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0065.080] FindNextFileW (in: hFindFile=0x5107b20, lpFindFileData=0x31e404 | out: lpFindFileData=0x31e404*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xfe3998d, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x10b3266c, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0xfe3998d, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x28aa, dwReserved0=0x0, dwReserved1=0x0, cFileName="confident.cov", cAlternateFileName="")) returned 1 [0065.080] FindNextFileW (in: hFindFile=0x5107b20, lpFindFileData=0x31e404 | out: lpFindFileData=0x31e404*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xfe3998d, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x10b3266c, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0xfe3998d, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x2a09, dwReserved0=0x0, dwReserved1=0x0, cFileName="fyi.cov", cAlternateFileName="")) returned 1 [0065.080] FindNextFileW (in: hFindFile=0x5107b20, lpFindFileData=0x31e404 | out: lpFindFileData=0x31e404*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xfe3998d, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x10b3266c, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0xfe3998d, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x3aa0, dwReserved0=0x0, dwReserved1=0x0, cFileName="generic.cov", cAlternateFileName="")) returned 1 [0065.080] FindNextFileW (in: hFindFile=0x5107b20, lpFindFileData=0x31e404 | out: lpFindFileData=0x31e404*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xfe3998d, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x10b3266c, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0xfe3998d, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x2886, dwReserved0=0x0, dwReserved1=0x0, cFileName="urgent.cov", cAlternateFileName="")) returned 1 [0065.080] FindNextFileW (in: hFindFile=0x5107b20, lpFindFileData=0x31e404 | out: lpFindFileData=0x31e404*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xfe3998d, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x10b3266c, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0xfe3998d, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x2886, dwReserved0=0x0, dwReserved1=0x0, cFileName="urgent.cov", cAlternateFileName="")) returned 0 [0065.080] FindClose (in: hFindFile=0x5107b20 | out: hFindFile=0x5107b20) returned 1 [0065.080] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e68c) returned 1 [0065.080] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e698) returned 1 [0065.080] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e744) returned 1 [0065.081] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\Windows NT\\MSFax\\Inbox", nBufferLength=0x105, lpBuffer=0x31e24c, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\Windows NT\\MSFax\\Inbox", lpFilePart=0x0) returned 0x2f [0065.081] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\Windows NT\\MSFax\\Inbox\\", nBufferLength=0x105, lpBuffer=0x31e220, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\Windows NT\\MSFax\\Inbox\\", lpFilePart=0x0) returned 0x30 [0065.081] FindFirstFileW (in: lpFileName="C:\\ProgramData\\Microsoft\\Windows NT\\MSFax\\Inbox\\*", lpFindFileData=0x31e46c | out: lpFindFileData=0x31e46c*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x7fffaad0, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x7fffaad0, ftLastAccessTime.dwHighDateTime=0x1ca0444, ftLastWriteTime.dwLowDateTime=0x7fffaad0, ftLastWriteTime.dwHighDateTime=0x1ca0444, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5107b20 [0065.081] FindNextFileW (in: hFindFile=0x5107b20, lpFindFileData=0x31e47c | out: lpFindFileData=0x31e47c*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x7fffaad0, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x7fffaad0, ftLastAccessTime.dwHighDateTime=0x1ca0444, ftLastWriteTime.dwLowDateTime=0x7fffaad0, ftLastWriteTime.dwHighDateTime=0x1ca0444, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0065.081] FindNextFileW (in: hFindFile=0x5107b20, lpFindFileData=0x31e47c | out: lpFindFileData=0x31e47c*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x7fffaad0, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x7fffaad0, ftLastAccessTime.dwHighDateTime=0x1ca0444, ftLastWriteTime.dwLowDateTime=0x7fffaad0, ftLastWriteTime.dwHighDateTime=0x1ca0444, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 0 [0065.082] FindClose (in: hFindFile=0x5107b20 | out: hFindFile=0x5107b20) returned 1 [0065.082] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e704) returned 1 [0065.082] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e710) returned 1 [0065.082] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e744) returned 1 [0065.082] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\Windows NT\\MSFax\\Inbox", nBufferLength=0x105, lpBuffer=0x31e24c, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\Windows NT\\MSFax\\Inbox", lpFilePart=0x0) returned 0x2f [0065.082] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\Windows NT\\MSFax\\Inbox\\", nBufferLength=0x105, lpBuffer=0x31e220, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\Windows NT\\MSFax\\Inbox\\", lpFilePart=0x0) returned 0x30 [0065.082] FindFirstFileW (in: lpFileName="C:\\ProgramData\\Microsoft\\Windows NT\\MSFax\\Inbox\\*", lpFindFileData=0x31e46c | out: lpFindFileData=0x31e46c*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x7fffaad0, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x7fffaad0, ftLastAccessTime.dwHighDateTime=0x1ca0444, ftLastWriteTime.dwLowDateTime=0x7fffaad0, ftLastWriteTime.dwHighDateTime=0x1ca0444, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5107b20 [0065.082] FindNextFileW (in: hFindFile=0x5107b20, lpFindFileData=0x31e47c | out: lpFindFileData=0x31e47c*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x7fffaad0, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x7fffaad0, ftLastAccessTime.dwHighDateTime=0x1ca0444, ftLastWriteTime.dwLowDateTime=0x7fffaad0, ftLastWriteTime.dwHighDateTime=0x1ca0444, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0065.082] FindNextFileW (in: hFindFile=0x5107b20, lpFindFileData=0x31e47c | out: lpFindFileData=0x31e47c*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x7fffaad0, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x7fffaad0, ftLastAccessTime.dwHighDateTime=0x1ca0444, ftLastWriteTime.dwLowDateTime=0x7fffaad0, ftLastWriteTime.dwHighDateTime=0x1ca0444, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 0 [0065.082] FindClose (in: hFindFile=0x5107b20 | out: hFindFile=0x5107b20) returned 1 [0065.082] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e704) returned 1 [0065.082] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e710) returned 1 [0065.082] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e744) returned 1 [0065.082] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\Windows NT\\MSFax\\Queue", nBufferLength=0x105, lpBuffer=0x31e24c, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\Windows NT\\MSFax\\Queue", lpFilePart=0x0) returned 0x2f [0065.082] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\Windows NT\\MSFax\\Queue\\", nBufferLength=0x105, lpBuffer=0x31e220, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\Windows NT\\MSFax\\Queue\\", lpFilePart=0x0) returned 0x30 [0065.082] FindFirstFileW (in: lpFileName="C:\\ProgramData\\Microsoft\\Windows NT\\MSFax\\Queue\\*", lpFindFileData=0x31e46c | out: lpFindFileData=0x31e46c*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x7fffaad0, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x7fffaad0, ftLastAccessTime.dwHighDateTime=0x1ca0444, ftLastWriteTime.dwLowDateTime=0x7fffaad0, ftLastWriteTime.dwHighDateTime=0x1ca0444, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5107b20 [0065.082] FindNextFileW (in: hFindFile=0x5107b20, lpFindFileData=0x31e47c | out: lpFindFileData=0x31e47c*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x7fffaad0, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x7fffaad0, ftLastAccessTime.dwHighDateTime=0x1ca0444, ftLastWriteTime.dwLowDateTime=0x7fffaad0, ftLastWriteTime.dwHighDateTime=0x1ca0444, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0065.083] FindNextFileW (in: hFindFile=0x5107b20, lpFindFileData=0x31e47c | out: lpFindFileData=0x31e47c*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x7fffaad0, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x7fffaad0, ftLastAccessTime.dwHighDateTime=0x1ca0444, ftLastWriteTime.dwLowDateTime=0x7fffaad0, ftLastWriteTime.dwHighDateTime=0x1ca0444, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 0 [0065.083] FindClose (in: hFindFile=0x5107b20 | out: hFindFile=0x5107b20) returned 1 [0065.083] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e704) returned 1 [0065.083] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e710) returned 1 [0065.083] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e744) returned 1 [0065.083] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\Windows NT\\MSFax\\Queue", nBufferLength=0x105, lpBuffer=0x31e24c, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\Windows NT\\MSFax\\Queue", lpFilePart=0x0) returned 0x2f [0065.083] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\Windows NT\\MSFax\\Queue\\", nBufferLength=0x105, lpBuffer=0x31e220, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\Windows NT\\MSFax\\Queue\\", lpFilePart=0x0) returned 0x30 [0065.083] FindFirstFileW (in: lpFileName="C:\\ProgramData\\Microsoft\\Windows NT\\MSFax\\Queue\\*", lpFindFileData=0x31e46c | out: lpFindFileData=0x31e46c*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x7fffaad0, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x7fffaad0, ftLastAccessTime.dwHighDateTime=0x1ca0444, ftLastWriteTime.dwLowDateTime=0x7fffaad0, ftLastWriteTime.dwHighDateTime=0x1ca0444, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5107b20 [0065.083] FindNextFileW (in: hFindFile=0x5107b20, lpFindFileData=0x31e47c | out: lpFindFileData=0x31e47c*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x7fffaad0, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x7fffaad0, ftLastAccessTime.dwHighDateTime=0x1ca0444, ftLastWriteTime.dwLowDateTime=0x7fffaad0, ftLastWriteTime.dwHighDateTime=0x1ca0444, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0065.083] FindNextFileW (in: hFindFile=0x5107b20, lpFindFileData=0x31e47c | out: lpFindFileData=0x31e47c*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x7fffaad0, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x7fffaad0, ftLastAccessTime.dwHighDateTime=0x1ca0444, ftLastWriteTime.dwLowDateTime=0x7fffaad0, ftLastWriteTime.dwHighDateTime=0x1ca0444, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 0 [0065.083] FindClose (in: hFindFile=0x5107b20 | out: hFindFile=0x5107b20) returned 1 [0065.083] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e704) returned 1 [0065.083] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e710) returned 1 [0065.083] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e744) returned 1 [0065.083] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\Windows NT\\MSFax\\SentItems", nBufferLength=0x105, lpBuffer=0x31e24c, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\Windows NT\\MSFax\\SentItems", lpFilePart=0x0) returned 0x33 [0065.083] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\Windows NT\\MSFax\\SentItems\\", nBufferLength=0x105, lpBuffer=0x31e220, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\Windows NT\\MSFax\\SentItems\\", lpFilePart=0x0) returned 0x34 [0065.083] FindFirstFileW (in: lpFileName="C:\\ProgramData\\Microsoft\\Windows NT\\MSFax\\SentItems\\*", lpFindFileData=0x31e46c | out: lpFindFileData=0x31e46c*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x7fffaad0, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x7fffaad0, ftLastAccessTime.dwHighDateTime=0x1ca0444, ftLastWriteTime.dwLowDateTime=0x7fffaad0, ftLastWriteTime.dwHighDateTime=0x1ca0444, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5107b20 [0065.084] FindNextFileW (in: hFindFile=0x5107b20, lpFindFileData=0x31e47c | out: lpFindFileData=0x31e47c*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x7fffaad0, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x7fffaad0, ftLastAccessTime.dwHighDateTime=0x1ca0444, ftLastWriteTime.dwLowDateTime=0x7fffaad0, ftLastWriteTime.dwHighDateTime=0x1ca0444, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0065.084] FindNextFileW (in: hFindFile=0x5107b20, lpFindFileData=0x31e47c | out: lpFindFileData=0x31e47c*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x7fffaad0, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x7fffaad0, ftLastAccessTime.dwHighDateTime=0x1ca0444, ftLastWriteTime.dwLowDateTime=0x7fffaad0, ftLastWriteTime.dwHighDateTime=0x1ca0444, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 0 [0065.084] FindClose (in: hFindFile=0x5107b20 | out: hFindFile=0x5107b20) returned 1 [0065.084] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e704) returned 1 [0065.084] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e710) returned 1 [0065.084] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e744) returned 1 [0065.084] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\Windows NT\\MSFax\\SentItems", nBufferLength=0x105, lpBuffer=0x31e24c, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\Windows NT\\MSFax\\SentItems", lpFilePart=0x0) returned 0x33 [0065.084] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\Windows NT\\MSFax\\SentItems\\", nBufferLength=0x105, lpBuffer=0x31e220, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\Windows NT\\MSFax\\SentItems\\", lpFilePart=0x0) returned 0x34 [0065.084] FindFirstFileW (in: lpFileName="C:\\ProgramData\\Microsoft\\Windows NT\\MSFax\\SentItems\\*", lpFindFileData=0x31e46c | out: lpFindFileData=0x31e46c*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x7fffaad0, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x7fffaad0, ftLastAccessTime.dwHighDateTime=0x1ca0444, ftLastWriteTime.dwLowDateTime=0x7fffaad0, ftLastWriteTime.dwHighDateTime=0x1ca0444, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5107b20 [0065.084] FindNextFileW (in: hFindFile=0x5107b20, lpFindFileData=0x31e47c | out: lpFindFileData=0x31e47c*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x7fffaad0, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x7fffaad0, ftLastAccessTime.dwHighDateTime=0x1ca0444, ftLastWriteTime.dwLowDateTime=0x7fffaad0, ftLastWriteTime.dwHighDateTime=0x1ca0444, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0065.084] FindNextFileW (in: hFindFile=0x5107b20, lpFindFileData=0x31e47c | out: lpFindFileData=0x31e47c*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x7fffaad0, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x7fffaad0, ftLastAccessTime.dwHighDateTime=0x1ca0444, ftLastWriteTime.dwLowDateTime=0x7fffaad0, ftLastWriteTime.dwHighDateTime=0x1ca0444, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 0 [0065.084] FindClose (in: hFindFile=0x5107b20 | out: hFindFile=0x5107b20) returned 1 [0065.084] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e704) returned 1 [0065.084] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e710) returned 1 [0065.084] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e744) returned 1 [0065.084] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\Windows NT\\MSFax\\VirtualInbox", nBufferLength=0x105, lpBuffer=0x31e24c, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\Windows NT\\MSFax\\VirtualInbox", lpFilePart=0x0) returned 0x36 [0065.084] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\Windows NT\\MSFax\\VirtualInbox\\", nBufferLength=0x105, lpBuffer=0x31e220, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\Windows NT\\MSFax\\VirtualInbox\\", lpFilePart=0x0) returned 0x37 [0065.085] FindFirstFileW (in: lpFileName="C:\\ProgramData\\Microsoft\\Windows NT\\MSFax\\VirtualInbox\\*", lpFindFileData=0x31e46c | out: lpFindFileData=0x31e46c*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x1d91b669, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x1d91b669, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x1d91b669, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5107b20 [0065.085] FindNextFileW (in: hFindFile=0x5107b20, lpFindFileData=0x31e47c | out: lpFindFileData=0x31e47c*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x1d91b669, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x1d91b669, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x1d91b669, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0065.085] FindNextFileW (in: hFindFile=0x5107b20, lpFindFileData=0x31e47c | out: lpFindFileData=0x31e47c*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x1d91b669, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x21cf2d38, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x1d91b669, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="en-US", cAlternateFileName="")) returned 1 [0065.085] FindNextFileW (in: hFindFile=0x5107b20, lpFindFileData=0x31e47c | out: lpFindFileData=0x31e47c*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x1d91b669, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x21cf2d38, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x1d91b669, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="en-US", cAlternateFileName="")) returned 0 [0065.085] FindClose (in: hFindFile=0x5107b20 | out: hFindFile=0x5107b20) returned 1 [0065.085] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e704) returned 1 [0065.085] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e710) returned 1 [0065.085] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e744) returned 1 [0065.085] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\Windows NT\\MSFax\\VirtualInbox", nBufferLength=0x105, lpBuffer=0x31e24c, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\Windows NT\\MSFax\\VirtualInbox", lpFilePart=0x0) returned 0x36 [0065.085] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\Windows NT\\MSFax\\VirtualInbox\\", nBufferLength=0x105, lpBuffer=0x31e220, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\Windows NT\\MSFax\\VirtualInbox\\", lpFilePart=0x0) returned 0x37 [0065.085] FindFirstFileW (in: lpFileName="C:\\ProgramData\\Microsoft\\Windows NT\\MSFax\\VirtualInbox\\*", lpFindFileData=0x31e46c | out: lpFindFileData=0x31e46c*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x1d91b669, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x1d91b669, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x1d91b669, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5107b20 [0065.085] FindNextFileW (in: hFindFile=0x5107b20, lpFindFileData=0x31e47c | out: lpFindFileData=0x31e47c*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x1d91b669, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x1d91b669, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x1d91b669, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0065.085] FindNextFileW (in: hFindFile=0x5107b20, lpFindFileData=0x31e47c | out: lpFindFileData=0x31e47c*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x1d91b669, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x21cf2d38, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x1d91b669, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="en-US", cAlternateFileName="")) returned 1 [0065.085] FindNextFileW (in: hFindFile=0x5107b20, lpFindFileData=0x31e47c | out: lpFindFileData=0x31e47c*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0065.085] FindClose (in: hFindFile=0x5107b20 | out: hFindFile=0x5107b20) returned 1 [0065.085] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e704) returned 1 [0065.085] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e710) returned 1 [0065.086] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e6cc) returned 1 [0065.086] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\Windows NT\\MSFax\\VirtualInbox\\en-US", nBufferLength=0x105, lpBuffer=0x31e1d4, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\Windows NT\\MSFax\\VirtualInbox\\en-US", lpFilePart=0x0) returned 0x3c [0065.086] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\Windows NT\\MSFax\\VirtualInbox\\en-US\\", nBufferLength=0x105, lpBuffer=0x31e1a8, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\Windows NT\\MSFax\\VirtualInbox\\en-US\\", lpFilePart=0x0) returned 0x3d [0065.086] FindFirstFileW (in: lpFileName="C:\\ProgramData\\Microsoft\\Windows NT\\MSFax\\VirtualInbox\\en-US\\*", lpFindFileData=0x31e3f4 | out: lpFindFileData=0x31e3f4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x1d91b669, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x21cf2d38, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x1d91b669, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5107b20 [0065.086] FindNextFileW (in: hFindFile=0x5107b20, lpFindFileData=0x31e404 | out: lpFindFileData=0x31e404*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x1d91b669, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x21cf2d38, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x1d91b669, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0065.087] FindNextFileW (in: hFindFile=0x5107b20, lpFindFileData=0x31e404 | out: lpFindFileData=0x31e404*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xfe3998d, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x10b3266c, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0xfe3998d, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x15dbe, dwReserved0=0x0, dwReserved1=0x0, cFileName="WelcomeFax.tif", cAlternateFileName="")) returned 1 [0065.087] FindNextFileW (in: hFindFile=0x5107b20, lpFindFileData=0x31e404 | out: lpFindFileData=0x31e404*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0065.087] FindClose (in: hFindFile=0x5107b20 | out: hFindFile=0x5107b20) returned 1 [0065.087] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e68c) returned 1 [0065.087] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e698) returned 1 [0065.087] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e6cc) returned 1 [0065.087] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\Windows NT\\MSFax\\VirtualInbox\\en-US", nBufferLength=0x105, lpBuffer=0x31e1d4, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\Windows NT\\MSFax\\VirtualInbox\\en-US", lpFilePart=0x0) returned 0x3c [0065.087] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\Windows NT\\MSFax\\VirtualInbox\\en-US\\", nBufferLength=0x105, lpBuffer=0x31e1a8, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\Windows NT\\MSFax\\VirtualInbox\\en-US\\", lpFilePart=0x0) returned 0x3d [0065.087] FindFirstFileW (in: lpFileName="C:\\ProgramData\\Microsoft\\Windows NT\\MSFax\\VirtualInbox\\en-US\\*", lpFindFileData=0x31e3f4 | out: lpFindFileData=0x31e3f4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x1d91b669, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x21cf2d38, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x1d91b669, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5107b20 [0065.087] FindNextFileW (in: hFindFile=0x5107b20, lpFindFileData=0x31e404 | out: lpFindFileData=0x31e404*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x1d91b669, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x21cf2d38, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x1d91b669, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0065.087] FindNextFileW (in: hFindFile=0x5107b20, lpFindFileData=0x31e404 | out: lpFindFileData=0x31e404*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xfe3998d, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x10b3266c, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0xfe3998d, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x15dbe, dwReserved0=0x0, dwReserved1=0x0, cFileName="WelcomeFax.tif", cAlternateFileName="")) returned 1 [0065.087] FindNextFileW (in: hFindFile=0x5107b20, lpFindFileData=0x31e404 | out: lpFindFileData=0x31e404*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xfe3998d, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x10b3266c, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0xfe3998d, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x15dbe, dwReserved0=0x0, dwReserved1=0x0, cFileName="WelcomeFax.tif", cAlternateFileName="")) returned 0 [0065.087] FindClose (in: hFindFile=0x5107b20 | out: hFindFile=0x5107b20) returned 1 [0065.087] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e68c) returned 1 [0065.087] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e698) returned 1 [0065.087] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e7bc) returned 1 [0065.087] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\Windows NT\\MSScan", nBufferLength=0x105, lpBuffer=0x31e2c4, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\Windows NT\\MSScan", lpFilePart=0x0) returned 0x2a [0065.087] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\Windows NT\\MSScan\\", nBufferLength=0x105, lpBuffer=0x31e298, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\Windows NT\\MSScan\\", lpFilePart=0x0) returned 0x2b [0065.087] FindFirstFileW (in: lpFileName="C:\\ProgramData\\Microsoft\\Windows NT\\MSScan\\*", lpFindFileData=0x31e4e4 | out: lpFindFileData=0x31e4e4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x7fffaad0, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x80340916, ftLastAccessTime.dwHighDateTime=0x1ca0444, ftLastWriteTime.dwLowDateTime=0x80340916, ftLastWriteTime.dwHighDateTime=0x1ca0444, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5107b20 [0065.088] FindNextFileW (in: hFindFile=0x5107b20, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x7fffaad0, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x80340916, ftLastAccessTime.dwHighDateTime=0x1ca0444, ftLastWriteTime.dwLowDateTime=0x80340916, ftLastWriteTime.dwHighDateTime=0x1ca0444, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0065.088] FindNextFileW (in: hFindFile=0x5107b20, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xea12c467, ftCreationTime.dwHighDateTime=0x1c9ea0e, ftLastAccessTime.dwLowDateTime=0xea12c467, ftLastAccessTime.dwHighDateTime=0x1c9ea0e, ftLastWriteTime.dwLowDateTime=0xea1525c5, ftLastWriteTime.dwHighDateTime=0x1c9ea0e, nFileSizeHigh=0x0, nFileSizeLow=0x7e148, dwReserved0=0x0, dwReserved1=0x0, cFileName="WelcomeScan.jpg", cAlternateFileName="")) returned 1 [0065.088] FindNextFileW (in: hFindFile=0x5107b20, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0065.088] FindClose (in: hFindFile=0x5107b20 | out: hFindFile=0x5107b20) returned 1 [0065.088] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e77c) returned 1 [0065.088] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e788) returned 1 [0065.088] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e7bc) returned 1 [0065.088] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\Windows NT\\MSScan", nBufferLength=0x105, lpBuffer=0x31e2c4, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\Windows NT\\MSScan", lpFilePart=0x0) returned 0x2a [0065.088] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\Windows NT\\MSScan\\", nBufferLength=0x105, lpBuffer=0x31e298, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\Windows NT\\MSScan\\", lpFilePart=0x0) returned 0x2b [0065.088] FindFirstFileW (in: lpFileName="C:\\ProgramData\\Microsoft\\Windows NT\\MSScan\\*", lpFindFileData=0x31e4e4 | out: lpFindFileData=0x31e4e4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x7fffaad0, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x80340916, ftLastAccessTime.dwHighDateTime=0x1ca0444, ftLastWriteTime.dwLowDateTime=0x80340916, ftLastWriteTime.dwHighDateTime=0x1ca0444, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5107b20 [0065.088] FindNextFileW (in: hFindFile=0x5107b20, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x7fffaad0, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x80340916, ftLastAccessTime.dwHighDateTime=0x1ca0444, ftLastWriteTime.dwLowDateTime=0x80340916, ftLastWriteTime.dwHighDateTime=0x1ca0444, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0065.088] FindNextFileW (in: hFindFile=0x5107b20, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xea12c467, ftCreationTime.dwHighDateTime=0x1c9ea0e, ftLastAccessTime.dwLowDateTime=0xea12c467, ftLastAccessTime.dwHighDateTime=0x1c9ea0e, ftLastWriteTime.dwLowDateTime=0xea1525c5, ftLastWriteTime.dwHighDateTime=0x1c9ea0e, nFileSizeHigh=0x0, nFileSizeLow=0x7e148, dwReserved0=0x0, dwReserved1=0x0, cFileName="WelcomeScan.jpg", cAlternateFileName="")) returned 1 [0065.088] FindNextFileW (in: hFindFile=0x5107b20, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xea12c467, ftCreationTime.dwHighDateTime=0x1c9ea0e, ftLastAccessTime.dwLowDateTime=0xea12c467, ftLastAccessTime.dwHighDateTime=0x1c9ea0e, ftLastWriteTime.dwLowDateTime=0xea1525c5, ftLastWriteTime.dwHighDateTime=0x1c9ea0e, nFileSizeHigh=0x0, nFileSizeLow=0x7e148, dwReserved0=0x0, dwReserved1=0x0, cFileName="WelcomeScan.jpg", cAlternateFileName="")) returned 0 [0065.088] FindClose (in: hFindFile=0x5107b20 | out: hFindFile=0x5107b20) returned 1 [0065.088] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e77c) returned 1 [0065.088] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e788) returned 1 [0065.088] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\Windows NT\\MSScan\\WelcomeScan.jpg", nBufferLength=0x105, lpBuffer=0x31e194, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\Windows NT\\MSScan\\WelcomeScan.jpg", lpFilePart=0x0) returned 0x3a [0065.088] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e688) returned 1 [0065.089] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft\\Windows NT\\MSScan\\WelcomeScan.jpg" (normalized: "c:\\programdata\\microsoft\\windows nt\\msscan\\welcomescan.jpg"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x178 [0065.089] GetFileType (hFile=0x178) returned 0x1 [0065.089] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e684) returned 1 [0065.089] GetFileType (hFile=0x178) returned 0x1 [0065.089] GetFileSize (in: hFile=0x178, lpFileSizeHigh=0x31e790 | out: lpFileSizeHigh=0x31e790*=0x0) returned 0x7e148 [0065.089] ReadFile (in: hFile=0x178, lpBuffer=0x36194b0, nNumberOfBytesToRead=0x7e148, lpNumberOfBytesRead=0x31e73c, lpOverlapped=0x0 | out: lpBuffer=0x36194b0*, lpNumberOfBytesRead=0x31e73c*=0x7e148, lpOverlapped=0x0) returned 1 [0065.133] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\Windows NT\\MSScan\\WelcomeScan.jpg", nBufferLength=0x105, lpBuffer=0x31e180, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\Windows NT\\MSScan\\WelcomeScan.jpg", lpFilePart=0x0) returned 0x3a [0065.133] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e674) returned 1 [0065.133] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft\\Windows NT\\MSScan\\WelcomeScan.jpg" (normalized: "c:\\programdata\\microsoft\\windows nt\\msscan\\welcomescan.jpg"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0xffffffff [0065.135] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31d4b0) returned 1 [0065.135] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e834) returned 1 [0065.135] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\WwanSvc", nBufferLength=0x105, lpBuffer=0x31e33c, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\WwanSvc", lpFilePart=0x0) returned 0x20 [0065.135] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\WwanSvc\\", nBufferLength=0x105, lpBuffer=0x31e310, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\WwanSvc\\", lpFilePart=0x0) returned 0x21 [0065.135] FindFirstFileW (in: lpFileName="C:\\ProgramData\\Microsoft\\WwanSvc\\*", lpFindFileData=0x31e55c | out: lpFindFileData=0x31e55c*(dwFileAttributes=0x2012, ftCreationTime.dwLowDateTime=0x7fffaad0, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x7fffaad0, ftLastAccessTime.dwHighDateTime=0x1ca0444, ftLastWriteTime.dwLowDateTime=0x7fffaad0, ftLastWriteTime.dwHighDateTime=0x1ca0444, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5107aa0 [0065.135] FindNextFileW (in: hFindFile=0x5107aa0, lpFindFileData=0x31e56c | out: lpFindFileData=0x31e56c*(dwFileAttributes=0x2012, ftCreationTime.dwLowDateTime=0x7fffaad0, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x7fffaad0, ftLastAccessTime.dwHighDateTime=0x1ca0444, ftLastWriteTime.dwLowDateTime=0x7fffaad0, ftLastWriteTime.dwHighDateTime=0x1ca0444, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0065.135] FindNextFileW (in: hFindFile=0x5107aa0, lpFindFileData=0x31e56c | out: lpFindFileData=0x31e56c*(dwFileAttributes=0x2012, ftCreationTime.dwLowDateTime=0x7fffaad0, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x7fffaad0, ftLastAccessTime.dwHighDateTime=0x1ca0444, ftLastWriteTime.dwLowDateTime=0x7fffaad0, ftLastWriteTime.dwHighDateTime=0x1ca0444, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Profiles", cAlternateFileName="")) returned 1 [0065.136] FindNextFileW (in: hFindFile=0x5107aa0, lpFindFileData=0x31e56c | out: lpFindFileData=0x31e56c*(dwFileAttributes=0x2012, ftCreationTime.dwLowDateTime=0x7fffaad0, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x7fffaad0, ftLastAccessTime.dwHighDateTime=0x1ca0444, ftLastWriteTime.dwLowDateTime=0x7fffaad0, ftLastWriteTime.dwHighDateTime=0x1ca0444, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Profiles", cAlternateFileName="")) returned 0 [0065.136] FindClose (in: hFindFile=0x5107aa0 | out: hFindFile=0x5107aa0) returned 1 [0065.136] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e7f4) returned 1 [0065.136] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e800) returned 1 [0065.136] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e834) returned 1 [0065.136] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\WwanSvc", nBufferLength=0x105, lpBuffer=0x31e33c, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\WwanSvc", lpFilePart=0x0) returned 0x20 [0065.136] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\WwanSvc\\", nBufferLength=0x105, lpBuffer=0x31e310, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\WwanSvc\\", lpFilePart=0x0) returned 0x21 [0065.136] FindFirstFileW (in: lpFileName="C:\\ProgramData\\Microsoft\\WwanSvc\\*", lpFindFileData=0x31e55c | out: lpFindFileData=0x31e55c*(dwFileAttributes=0x2012, ftCreationTime.dwLowDateTime=0x7fffaad0, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x7fffaad0, ftLastAccessTime.dwHighDateTime=0x1ca0444, ftLastWriteTime.dwLowDateTime=0x7fffaad0, ftLastWriteTime.dwHighDateTime=0x1ca0444, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5107aa0 [0065.136] FindNextFileW (in: hFindFile=0x5107aa0, lpFindFileData=0x31e56c | out: lpFindFileData=0x31e56c*(dwFileAttributes=0x2012, ftCreationTime.dwLowDateTime=0x7fffaad0, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x7fffaad0, ftLastAccessTime.dwHighDateTime=0x1ca0444, ftLastWriteTime.dwLowDateTime=0x7fffaad0, ftLastWriteTime.dwHighDateTime=0x1ca0444, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0065.136] FindNextFileW (in: hFindFile=0x5107aa0, lpFindFileData=0x31e56c | out: lpFindFileData=0x31e56c*(dwFileAttributes=0x2012, ftCreationTime.dwLowDateTime=0x7fffaad0, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x7fffaad0, ftLastAccessTime.dwHighDateTime=0x1ca0444, ftLastWriteTime.dwLowDateTime=0x7fffaad0, ftLastWriteTime.dwHighDateTime=0x1ca0444, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Profiles", cAlternateFileName="")) returned 1 [0065.136] FindNextFileW (in: hFindFile=0x5107aa0, lpFindFileData=0x31e56c | out: lpFindFileData=0x31e56c*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0065.137] FindClose (in: hFindFile=0x5107aa0 | out: hFindFile=0x5107aa0) returned 1 [0065.137] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e7f4) returned 1 [0065.137] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e800) returned 1 [0065.137] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e7bc) returned 1 [0065.137] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\WwanSvc\\Profiles", nBufferLength=0x105, lpBuffer=0x31e2c4, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\WwanSvc\\Profiles", lpFilePart=0x0) returned 0x29 [0065.137] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\WwanSvc\\Profiles\\", nBufferLength=0x105, lpBuffer=0x31e298, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\WwanSvc\\Profiles\\", lpFilePart=0x0) returned 0x2a [0065.137] FindFirstFileW (in: lpFileName="C:\\ProgramData\\Microsoft\\WwanSvc\\Profiles\\*", lpFindFileData=0x31e4e4 | out: lpFindFileData=0x31e4e4*(dwFileAttributes=0x2012, ftCreationTime.dwLowDateTime=0x7fffaad0, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x7fffaad0, ftLastAccessTime.dwHighDateTime=0x1ca0444, ftLastWriteTime.dwLowDateTime=0x7fffaad0, ftLastWriteTime.dwHighDateTime=0x1ca0444, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5107aa0 [0065.137] FindNextFileW (in: hFindFile=0x5107aa0, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x2012, ftCreationTime.dwLowDateTime=0x7fffaad0, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x7fffaad0, ftLastAccessTime.dwHighDateTime=0x1ca0444, ftLastWriteTime.dwLowDateTime=0x7fffaad0, ftLastWriteTime.dwHighDateTime=0x1ca0444, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0065.137] FindNextFileW (in: hFindFile=0x5107aa0, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x2012, ftCreationTime.dwLowDateTime=0x7fffaad0, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x7fffaad0, ftLastAccessTime.dwHighDateTime=0x1ca0444, ftLastWriteTime.dwLowDateTime=0x7fffaad0, ftLastWriteTime.dwHighDateTime=0x1ca0444, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 0 [0065.137] FindClose (in: hFindFile=0x5107aa0 | out: hFindFile=0x5107aa0) returned 1 [0065.137] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e77c) returned 1 [0065.138] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e788) returned 1 [0065.138] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e7bc) returned 1 [0065.138] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\WwanSvc\\Profiles", nBufferLength=0x105, lpBuffer=0x31e2c4, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\WwanSvc\\Profiles", lpFilePart=0x0) returned 0x29 [0065.138] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\WwanSvc\\Profiles\\", nBufferLength=0x105, lpBuffer=0x31e298, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\WwanSvc\\Profiles\\", lpFilePart=0x0) returned 0x2a [0065.138] FindFirstFileW (in: lpFileName="C:\\ProgramData\\Microsoft\\WwanSvc\\Profiles\\*", lpFindFileData=0x31e4e4 | out: lpFindFileData=0x31e4e4*(dwFileAttributes=0x2012, ftCreationTime.dwLowDateTime=0x7fffaad0, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x7fffaad0, ftLastAccessTime.dwHighDateTime=0x1ca0444, ftLastWriteTime.dwLowDateTime=0x7fffaad0, ftLastWriteTime.dwHighDateTime=0x1ca0444, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5107aa0 [0065.138] FindNextFileW (in: hFindFile=0x5107aa0, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x2012, ftCreationTime.dwLowDateTime=0x7fffaad0, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x7fffaad0, ftLastAccessTime.dwHighDateTime=0x1ca0444, ftLastWriteTime.dwLowDateTime=0x7fffaad0, ftLastWriteTime.dwHighDateTime=0x1ca0444, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0065.138] FindNextFileW (in: hFindFile=0x5107aa0, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x2012, ftCreationTime.dwLowDateTime=0x7fffaad0, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x7fffaad0, ftLastAccessTime.dwHighDateTime=0x1ca0444, ftLastWriteTime.dwLowDateTime=0x7fffaad0, ftLastWriteTime.dwHighDateTime=0x1ca0444, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 0 [0065.138] FindClose (in: hFindFile=0x5107aa0 | out: hFindFile=0x5107aa0) returned 1 [0065.138] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e77c) returned 1 [0065.138] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e788) returned 1 [0065.138] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e8ac) returned 1 [0065.138] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft Help", nBufferLength=0x105, lpBuffer=0x31e3b4, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft Help", lpFilePart=0x0) returned 0x1d [0065.138] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft Help\\", nBufferLength=0x105, lpBuffer=0x31e388, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft Help\\", lpFilePart=0x0) returned 0x1e [0065.139] FindFirstFileW (in: lpFileName="C:\\ProgramData\\Microsoft Help\\*", lpFindFileData=0x31e5d4 | out: lpFindFileData=0x31e5d4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe79db030, ftCreationTime.dwHighDateTime=0x1d2dda1, ftLastAccessTime.dwLowDateTime=0xed25d0a0, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0xed25d0a0, ftLastWriteTime.dwHighDateTime=0x1d305f1, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5107aa0 [0065.141] FindNextFileW (in: hFindFile=0x5107aa0, lpFindFileData=0x31e5e4 | out: lpFindFileData=0x31e5e4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe79db030, ftCreationTime.dwHighDateTime=0x1d2dda1, ftLastAccessTime.dwLowDateTime=0xed25d0a0, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0xed25d0a0, ftLastWriteTime.dwHighDateTime=0x1d305f1, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0065.142] FindNextFileW (in: hFindFile=0x5107aa0, lpFindFileData=0x31e5e4 | out: lpFindFileData=0x31e5e4*(dwFileAttributes=0x2022, ftCreationTime.dwLowDateTime=0x896b9210, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x896b9210, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xe8b8c220, ftLastWriteTime.dwHighDateTime=0x1d305f1, nFileSizeHigh=0x0, nFileSizeLow=0x186, dwReserved0=0x0, dwReserved1=0x0, cFileName="Hx.hxn", cAlternateFileName="")) returned 1 [0065.142] FindNextFileW (in: hFindFile=0x5107aa0, lpFindFileData=0x31e5e4 | out: lpFindFileData=0x31e5e4*(dwFileAttributes=0x2022, ftCreationTime.dwLowDateTime=0xfa72fc10, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xfa72fc10, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xfa7a2030, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x146, dwReserved0=0x0, dwReserved1=0x0, cFileName="MS.EXCEL.14.1033.hxn", cAlternateFileName="MSEXCE~1.HXN")) returned 1 [0065.142] FindNextFileW (in: hFindFile=0x5107aa0, lpFindFileData=0x31e5e4 | out: lpFindFileData=0x31e5e4*(dwFileAttributes=0x2022, ftCreationTime.dwLowDateTime=0xfa755d70, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xfa755d70, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xfa7a2030, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x15e, dwReserved0=0x0, dwReserved1=0x0, cFileName="MS.EXCEL.DEV.14.1033.hxn", cAlternateFileName="MSEXCE~2.HXN")) returned 1 [0065.142] FindNextFileW (in: hFindFile=0x5107aa0, lpFindFileData=0x31e5e4 | out: lpFindFileData=0x31e5e4*(dwFileAttributes=0x2022, ftCreationTime.dwLowDateTime=0xef377f10, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xef377f10, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xef3ea330, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x146, dwReserved0=0x0, dwReserved1=0x0, cFileName="MS.GRAPH.14.1033.hxn", cAlternateFileName="MSGRAP~1.HXN")) returned 1 [0065.142] FindNextFileW (in: hFindFile=0x5107aa0, lpFindFileData=0x31e5e4 | out: lpFindFileData=0x31e5e4*(dwFileAttributes=0x2022, ftCreationTime.dwLowDateTime=0xfd789af0, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xfd789af0, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xfd822070, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x14c, dwReserved0=0x0, dwReserved1=0x0, cFileName="MS.GROOVE.14.1033.hxn", cAlternateFileName="MSGROO~1.HXN")) returned 1 [0065.143] FindNextFileW (in: hFindFile=0x5107aa0, lpFindFileData=0x31e5e4 | out: lpFindFileData=0x31e5e4*(dwFileAttributes=0x2022, ftCreationTime.dwLowDateTime=0x113ae4d0, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x113ae4d0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x11446a50, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x158, dwReserved0=0x0, dwReserved1=0x0, cFileName="MS.INFOPATH.14.1033.hxn", cAlternateFileName="MSINFO~1.HXN")) returned 1 [0065.143] FindNextFileW (in: hFindFile=0x5107aa0, lpFindFileData=0x31e5e4 | out: lpFindFileData=0x31e5e4*(dwFileAttributes=0x2022, ftCreationTime.dwLowDateTime=0x113ae4d0, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x113ae4d0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x1146cbb0, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x17c, dwReserved0=0x0, dwReserved1=0x0, cFileName="MS.INFOPATHEDITOR.14.1033.hxn", cAlternateFileName="MSINFO~2.HXN")) returned 1 [0065.143] FindNextFileW (in: hFindFile=0x5107aa0, lpFindFileData=0x31e5e4 | out: lpFindFileData=0x31e5e4*(dwFileAttributes=0x2022, ftCreationTime.dwLowDateTime=0x15f8e210, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x15f8e210, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x1604c8f0, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x158, dwReserved0=0x0, dwReserved1=0x0, cFileName="MS.MSACCESS.14.1033.hxn", cAlternateFileName="MSMSAC~1.HXN")) returned 1 [0065.143] FindNextFileW (in: hFindFile=0x5107aa0, lpFindFileData=0x31e5e4 | out: lpFindFileData=0x31e5e4*(dwFileAttributes=0x2022, ftCreationTime.dwLowDateTime=0x15f8e210, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x15f8e210, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x1604c8f0, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x170, dwReserved0=0x0, dwReserved1=0x0, cFileName="MS.MSACCESS.DEV.14.1033.hxn", cAlternateFileName="MSMSAC~2.HXN")) returned 1 [0065.143] FindNextFileW (in: hFindFile=0x5107aa0, lpFindFileData=0x31e5e4 | out: lpFindFileData=0x31e5e4*(dwFileAttributes=0x2022, ftCreationTime.dwLowDateTime=0xef377f10, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xef377f10, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xef3ea330, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x146, dwReserved0=0x0, dwReserved1=0x0, cFileName="MS.MSOUC.14.1033.hxn", cAlternateFileName="MSMSOU~1.HXN")) returned 1 [0065.143] FindNextFileW (in: hFindFile=0x5107aa0, lpFindFileData=0x31e5e4 | out: lpFindFileData=0x31e5e4*(dwFileAttributes=0x2022, ftCreationTime.dwLowDateTime=0x1beeb370, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x1beeb370, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x1bf5d790, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x146, dwReserved0=0x0, dwReserved1=0x0, cFileName="MS.MSPUB.14.1033.hxn", cAlternateFileName="MSMSPU~1.HXN")) returned 1 [0065.143] FindNextFileW (in: hFindFile=0x5107aa0, lpFindFileData=0x31e5e4 | out: lpFindFileData=0x31e5e4*(dwFileAttributes=0x2022, ftCreationTime.dwLowDateTime=0x1beeb370, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x1beeb370, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x1bf5d790, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x15e, dwReserved0=0x0, dwReserved1=0x0, cFileName="MS.MSPUB.DEV.14.1033.hxn", cAlternateFileName="MSMSPU~2.HXN")) returned 1 [0065.144] FindNextFileW (in: hFindFile=0x5107aa0, lpFindFileData=0x31e5e4 | out: lpFindFileData=0x31e5e4*(dwFileAttributes=0x2022, ftCreationTime.dwLowDateTime=0xef377f10, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xef377f10, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xef3ea330, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x14c, dwReserved0=0x0, dwReserved1=0x0, cFileName="MS.MSTORE.14.1033.hxn", cAlternateFileName="MSMSTO~1.HXN")) returned 1 [0065.144] FindNextFileW (in: hFindFile=0x5107aa0, lpFindFileData=0x31e5e4 | out: lpFindFileData=0x31e5e4*(dwFileAttributes=0x2022, ftCreationTime.dwLowDateTime=0xef377f10, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xef377f10, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xef3ea330, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x13a, dwReserved0=0x0, dwReserved1=0x0, cFileName="MS.OIS.14.1033.hxn", cAlternateFileName="MSOIS1~1.HXN")) returned 1 [0065.144] FindNextFileW (in: hFindFile=0x5107aa0, lpFindFileData=0x31e5e4 | out: lpFindFileData=0x31e5e4*(dwFileAttributes=0x2022, ftCreationTime.dwLowDateTime=0xc997810, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0xc997810, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xc9e3ad0, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x152, dwReserved0=0x0, dwReserved1=0x0, cFileName="MS.ONENOTE.14.1033.hxn", cAlternateFileName="MSONEN~1.HXN")) returned 1 [0065.144] FindNextFileW (in: hFindFile=0x5107aa0, lpFindFileData=0x31e5e4 | out: lpFindFileData=0x31e5e4*(dwFileAttributes=0x2022, ftCreationTime.dwLowDateTime=0x25328b0, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x25328b0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x2689510, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x152, dwReserved0=0x0, dwReserved1=0x0, cFileName="MS.OUTLOOK.14.1033.hxn", cAlternateFileName="MSOUTL~1.HXN")) returned 1 [0065.144] FindNextFileW (in: hFindFile=0x5107aa0, lpFindFileData=0x31e5e4 | out: lpFindFileData=0x31e5e4*(dwFileAttributes=0x2022, ftCreationTime.dwLowDateTime=0x25328b0, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x25328b0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x26af670, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x16a, dwReserved0=0x0, dwReserved1=0x0, cFileName="MS.OUTLOOK.DEV.14.1033.hxn", cAlternateFileName="MSOUTL~2.HXN")) returned 1 [0065.144] FindNextFileW (in: hFindFile=0x5107aa0, lpFindFileData=0x31e5e4 | out: lpFindFileData=0x31e5e4*(dwFileAttributes=0x2022, ftCreationTime.dwLowDateTime=0xf5fa06b0, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xf5fa06b0, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xf5fec970, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x158, dwReserved0=0x0, dwReserved1=0x0, cFileName="MS.POWERPNT.14.1033.hxn", cAlternateFileName="MSPOWE~1.HXN")) returned 1 [0065.144] FindNextFileW (in: hFindFile=0x5107aa0, lpFindFileData=0x31e5e4 | out: lpFindFileData=0x31e5e4*(dwFileAttributes=0x2022, ftCreationTime.dwLowDateTime=0xf5fa06b0, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xf5fa06b0, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xf5fec970, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x170, dwReserved0=0x0, dwReserved1=0x0, cFileName="MS.POWERPNT.DEV.14.1033.hxn", cAlternateFileName="MSPOWE~2.HXN")) returned 1 [0065.144] FindNextFileW (in: hFindFile=0x5107aa0, lpFindFileData=0x31e5e4 | out: lpFindFileData=0x31e5e4*(dwFileAttributes=0x2022, ftCreationTime.dwLowDateTime=0xef377f10, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xef377f10, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xef3ea330, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x152, dwReserved0=0x0, dwReserved1=0x0, cFileName="MS.SETLANG.14.1033.hxn", cAlternateFileName="MSSETL~1.HXN")) returned 1 [0065.145] FindNextFileW (in: hFindFile=0x5107aa0, lpFindFileData=0x31e5e4 | out: lpFindFileData=0x31e5e4*(dwFileAttributes=0x2022, ftCreationTime.dwLowDateTime=0x523a6340, ftCreationTime.dwHighDateTime=0x1d305eb, ftLastAccessTime.dwLowDateTime=0x523a6340, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0x5269fec0, ftLastWriteTime.dwHighDateTime=0x1d305eb, nFileSizeHigh=0x0, nFileSizeLow=0x146, dwReserved0=0x0, dwReserved1=0x0, cFileName="MS.VISIO.14.1033.hxn", cAlternateFileName="MSVISI~1.HXN")) returned 1 [0065.145] FindNextFileW (in: hFindFile=0x5107aa0, lpFindFileData=0x31e5e4 | out: lpFindFileData=0x31e5e4*(dwFileAttributes=0x2022, ftCreationTime.dwLowDateTime=0x523a6340, ftCreationTime.dwHighDateTime=0x1d305eb, ftLastAccessTime.dwLowDateTime=0x523a6340, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0x527122e0, ftLastWriteTime.dwHighDateTime=0x1d305eb, nFileSizeHigh=0x0, nFileSizeLow=0x15e, dwReserved0=0x0, dwReserved1=0x0, cFileName="MS.VISIO.DEV.14.1033.hxn", cAlternateFileName="MSVISI~3.HXN")) returned 1 [0065.145] FindNextFileW (in: hFindFile=0x5107aa0, lpFindFileData=0x31e5e4 | out: lpFindFileData=0x31e5e4*(dwFileAttributes=0x2022, ftCreationTime.dwLowDateTime=0x523a6340, ftCreationTime.dwHighDateTime=0x1d305eb, ftLastAccessTime.dwLowDateTime=0x523a6340, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0x52738440, ftLastWriteTime.dwHighDateTime=0x1d305eb, nFileSizeHigh=0x0, nFileSizeLow=0x188, dwReserved0=0x0, dwReserved1=0x0, cFileName="MS.VISIO.SHAPESHEET.14.1033.hxn", cAlternateFileName="MSVISI~4.HXN")) returned 1 [0065.145] FindNextFileW (in: hFindFile=0x5107aa0, lpFindFileData=0x31e5e4 | out: lpFindFileData=0x31e5e4*(dwFileAttributes=0x2022, ftCreationTime.dwLowDateTime=0x523a6340, ftCreationTime.dwHighDateTime=0x1d305eb, ftLastAccessTime.dwLowDateTime=0x523a6340, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0x52738440, ftLastWriteTime.dwHighDateTime=0x1d305eb, nFileSizeHigh=0x0, nFileSizeLow=0x15e, dwReserved0=0x0, dwReserved1=0x0, cFileName="MS.VISIO_PRM.14.1033.hxn", cAlternateFileName="MSE1C9~1.HXN")) returned 1 [0065.145] FindNextFileW (in: hFindFile=0x5107aa0, lpFindFileData=0x31e5e4 | out: lpFindFileData=0x31e5e4*(dwFileAttributes=0x2022, ftCreationTime.dwLowDateTime=0x523a6340, ftCreationTime.dwHighDateTime=0x1d305eb, ftLastAccessTime.dwLowDateTime=0x523a6340, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0x527122e0, ftLastWriteTime.dwHighDateTime=0x1d305eb, nFileSizeHigh=0x0, nFileSizeLow=0x15e, dwReserved0=0x0, dwReserved1=0x0, cFileName="MS.VISIO_STD.14.1033.hxn", cAlternateFileName="MSVISI~2.HXN")) returned 1 [0065.145] FindNextFileW (in: hFindFile=0x5107aa0, lpFindFileData=0x31e5e4 | out: lpFindFileData=0x31e5e4*(dwFileAttributes=0x2022, ftCreationTime.dwLowDateTime=0xaf766ee0, ftCreationTime.dwHighDateTime=0x1d305f1, ftLastAccessTime.dwLowDateTime=0xaf766ee0, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0xaf7d9300, ftLastWriteTime.dwHighDateTime=0x1d305f1, nFileSizeHigh=0x0, nFileSizeLow=0x152, dwReserved0=0x0, dwReserved1=0x0, cFileName="MS.WINPROJ.14.1033.hxn", cAlternateFileName="MSWINP~1.HXN")) returned 1 [0065.145] FindNextFileW (in: hFindFile=0x5107aa0, lpFindFileData=0x31e5e4 | out: lpFindFileData=0x31e5e4*(dwFileAttributes=0x2022, ftCreationTime.dwLowDateTime=0xaf766ee0, ftCreationTime.dwHighDateTime=0x1d305f1, ftLastAccessTime.dwLowDateTime=0xaf766ee0, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0xaf7d9300, ftLastWriteTime.dwHighDateTime=0x1d305f1, nFileSizeHigh=0x0, nFileSizeLow=0x16a, dwReserved0=0x0, dwReserved1=0x0, cFileName="MS.WINPROJ.DEV.14.1033.hxn", cAlternateFileName="MSWINP~2.HXN")) returned 1 [0065.145] FindNextFileW (in: hFindFile=0x5107aa0, lpFindFileData=0x31e5e4 | out: lpFindFileData=0x31e5e4*(dwFileAttributes=0x2022, ftCreationTime.dwLowDateTime=0x1e67e130, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x1e67e130, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x1e6f0550, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x152, dwReserved0=0x0, dwReserved1=0x0, cFileName="MS.WINWORD.14.1033.hxn", cAlternateFileName="MSWINW~1.HXN")) returned 1 [0065.146] FindNextFileW (in: hFindFile=0x5107aa0, lpFindFileData=0x31e5e4 | out: lpFindFileData=0x31e5e4*(dwFileAttributes=0x2022, ftCreationTime.dwLowDateTime=0x1e67e130, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x1e67e130, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x1e6f0550, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x16a, dwReserved0=0x0, dwReserved1=0x0, cFileName="MS.WINWORD.DEV.14.1033.hxn", cAlternateFileName="MSWINW~2.HXN")) returned 1 [0065.146] FindNextFileW (in: hFindFile=0x5107aa0, lpFindFileData=0x31e5e4 | out: lpFindFileData=0x31e5e4*(dwFileAttributes=0x2022, ftCreationTime.dwLowDateTime=0xe80ff230, ftCreationTime.dwHighDateTime=0x1d2dda1, ftLastAccessTime.dwLowDateTime=0xe80ff230, ftLastAccessTime.dwHighDateTime=0x1d2dda1, ftLastWriteTime.dwLowDateTime=0xe8b8c220, ftLastWriteTime.dwHighDateTime=0x1d305f1, nFileSizeHigh=0x0, nFileSizeLow=0x21dc, dwReserved0=0x0, dwReserved1=0x0, cFileName="nslist.hxl", cAlternateFileName="")) returned 1 [0065.146] FindNextFileW (in: hFindFile=0x5107aa0, lpFindFileData=0x31e5e4 | out: lpFindFileData=0x31e5e4*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0065.146] FindClose (in: hFindFile=0x5107aa0 | out: hFindFile=0x5107aa0) returned 1 [0065.147] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e86c) returned 1 [0065.147] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e878) returned 1 [0065.147] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e8ac) returned 1 [0065.147] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft Help", nBufferLength=0x105, lpBuffer=0x31e3b4, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft Help", lpFilePart=0x0) returned 0x1d [0065.147] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft Help\\", nBufferLength=0x105, lpBuffer=0x31e388, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft Help\\", lpFilePart=0x0) returned 0x1e [0065.147] FindFirstFileW (in: lpFileName="C:\\ProgramData\\Microsoft Help\\*", lpFindFileData=0x31e5d4 | out: lpFindFileData=0x31e5d4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe79db030, ftCreationTime.dwHighDateTime=0x1d2dda1, ftLastAccessTime.dwLowDateTime=0xed25d0a0, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0xed25d0a0, ftLastWriteTime.dwHighDateTime=0x1d305f1, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5107aa0 [0065.148] FindNextFileW (in: hFindFile=0x5107aa0, lpFindFileData=0x31e5e4 | out: lpFindFileData=0x31e5e4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe79db030, ftCreationTime.dwHighDateTime=0x1d2dda1, ftLastAccessTime.dwLowDateTime=0xed25d0a0, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0xed25d0a0, ftLastWriteTime.dwHighDateTime=0x1d305f1, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0065.148] FindNextFileW (in: hFindFile=0x5107aa0, lpFindFileData=0x31e5e4 | out: lpFindFileData=0x31e5e4*(dwFileAttributes=0x2022, ftCreationTime.dwLowDateTime=0x896b9210, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x896b9210, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xe8b8c220, ftLastWriteTime.dwHighDateTime=0x1d305f1, nFileSizeHigh=0x0, nFileSizeLow=0x186, dwReserved0=0x0, dwReserved1=0x0, cFileName="Hx.hxn", cAlternateFileName="")) returned 1 [0065.148] FindNextFileW (in: hFindFile=0x5107aa0, lpFindFileData=0x31e5e4 | out: lpFindFileData=0x31e5e4*(dwFileAttributes=0x2022, ftCreationTime.dwLowDateTime=0xfa72fc10, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xfa72fc10, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xfa7a2030, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x146, dwReserved0=0x0, dwReserved1=0x0, cFileName="MS.EXCEL.14.1033.hxn", cAlternateFileName="MSEXCE~1.HXN")) returned 1 [0065.149] FindNextFileW (in: hFindFile=0x5107aa0, lpFindFileData=0x31e5e4 | out: lpFindFileData=0x31e5e4*(dwFileAttributes=0x2022, ftCreationTime.dwLowDateTime=0xfa755d70, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xfa755d70, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xfa7a2030, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x15e, dwReserved0=0x0, dwReserved1=0x0, cFileName="MS.EXCEL.DEV.14.1033.hxn", cAlternateFileName="MSEXCE~2.HXN")) returned 1 [0065.149] FindNextFileW (in: hFindFile=0x5107aa0, lpFindFileData=0x31e5e4 | out: lpFindFileData=0x31e5e4*(dwFileAttributes=0x2022, ftCreationTime.dwLowDateTime=0xef377f10, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xef377f10, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xef3ea330, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x146, dwReserved0=0x0, dwReserved1=0x0, cFileName="MS.GRAPH.14.1033.hxn", cAlternateFileName="MSGRAP~1.HXN")) returned 1 [0065.149] FindNextFileW (in: hFindFile=0x5107aa0, lpFindFileData=0x31e5e4 | out: lpFindFileData=0x31e5e4*(dwFileAttributes=0x2022, ftCreationTime.dwLowDateTime=0xfd789af0, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xfd789af0, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xfd822070, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x14c, dwReserved0=0x0, dwReserved1=0x0, cFileName="MS.GROOVE.14.1033.hxn", cAlternateFileName="MSGROO~1.HXN")) returned 1 [0065.149] FindNextFileW (in: hFindFile=0x5107aa0, lpFindFileData=0x31e5e4 | out: lpFindFileData=0x31e5e4*(dwFileAttributes=0x2022, ftCreationTime.dwLowDateTime=0x113ae4d0, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x113ae4d0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x11446a50, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x158, dwReserved0=0x0, dwReserved1=0x0, cFileName="MS.INFOPATH.14.1033.hxn", cAlternateFileName="MSINFO~1.HXN")) returned 1 [0065.149] FindNextFileW (in: hFindFile=0x5107aa0, lpFindFileData=0x31e5e4 | out: lpFindFileData=0x31e5e4*(dwFileAttributes=0x2022, ftCreationTime.dwLowDateTime=0x113ae4d0, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x113ae4d0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x1146cbb0, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x17c, dwReserved0=0x0, dwReserved1=0x0, cFileName="MS.INFOPATHEDITOR.14.1033.hxn", cAlternateFileName="MSINFO~2.HXN")) returned 1 [0065.149] FindNextFileW (in: hFindFile=0x5107aa0, lpFindFileData=0x31e5e4 | out: lpFindFileData=0x31e5e4*(dwFileAttributes=0x2022, ftCreationTime.dwLowDateTime=0x15f8e210, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x15f8e210, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x1604c8f0, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x158, dwReserved0=0x0, dwReserved1=0x0, cFileName="MS.MSACCESS.14.1033.hxn", cAlternateFileName="MSMSAC~1.HXN")) returned 1 [0065.150] FindNextFileW (in: hFindFile=0x5107aa0, lpFindFileData=0x31e5e4 | out: lpFindFileData=0x31e5e4*(dwFileAttributes=0x2022, ftCreationTime.dwLowDateTime=0x15f8e210, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x15f8e210, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x1604c8f0, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x170, dwReserved0=0x0, dwReserved1=0x0, cFileName="MS.MSACCESS.DEV.14.1033.hxn", cAlternateFileName="MSMSAC~2.HXN")) returned 1 [0065.150] FindNextFileW (in: hFindFile=0x5107aa0, lpFindFileData=0x31e5e4 | out: lpFindFileData=0x31e5e4*(dwFileAttributes=0x2022, ftCreationTime.dwLowDateTime=0xef377f10, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xef377f10, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xef3ea330, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x146, dwReserved0=0x0, dwReserved1=0x0, cFileName="MS.MSOUC.14.1033.hxn", cAlternateFileName="MSMSOU~1.HXN")) returned 1 [0065.150] FindNextFileW (in: hFindFile=0x5107aa0, lpFindFileData=0x31e5e4 | out: lpFindFileData=0x31e5e4*(dwFileAttributes=0x2022, ftCreationTime.dwLowDateTime=0x1beeb370, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x1beeb370, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x1bf5d790, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x146, dwReserved0=0x0, dwReserved1=0x0, cFileName="MS.MSPUB.14.1033.hxn", cAlternateFileName="MSMSPU~1.HXN")) returned 1 [0065.150] FindNextFileW (in: hFindFile=0x5107aa0, lpFindFileData=0x31e5e4 | out: lpFindFileData=0x31e5e4*(dwFileAttributes=0x2022, ftCreationTime.dwLowDateTime=0x1beeb370, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x1beeb370, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x1bf5d790, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x15e, dwReserved0=0x0, dwReserved1=0x0, cFileName="MS.MSPUB.DEV.14.1033.hxn", cAlternateFileName="MSMSPU~2.HXN")) returned 1 [0065.150] FindNextFileW (in: hFindFile=0x5107aa0, lpFindFileData=0x31e5e4 | out: lpFindFileData=0x31e5e4*(dwFileAttributes=0x2022, ftCreationTime.dwLowDateTime=0xef377f10, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xef377f10, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xef3ea330, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x14c, dwReserved0=0x0, dwReserved1=0x0, cFileName="MS.MSTORE.14.1033.hxn", cAlternateFileName="MSMSTO~1.HXN")) returned 1 [0065.150] FindNextFileW (in: hFindFile=0x5107aa0, lpFindFileData=0x31e5e4 | out: lpFindFileData=0x31e5e4*(dwFileAttributes=0x2022, ftCreationTime.dwLowDateTime=0xef377f10, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xef377f10, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xef3ea330, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x13a, dwReserved0=0x0, dwReserved1=0x0, cFileName="MS.OIS.14.1033.hxn", cAlternateFileName="MSOIS1~1.HXN")) returned 1 [0065.151] FindNextFileW (in: hFindFile=0x5107aa0, lpFindFileData=0x31e5e4 | out: lpFindFileData=0x31e5e4*(dwFileAttributes=0x2022, ftCreationTime.dwLowDateTime=0xc997810, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0xc997810, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xc9e3ad0, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x152, dwReserved0=0x0, dwReserved1=0x0, cFileName="MS.ONENOTE.14.1033.hxn", cAlternateFileName="MSONEN~1.HXN")) returned 1 [0065.151] FindNextFileW (in: hFindFile=0x5107aa0, lpFindFileData=0x31e5e4 | out: lpFindFileData=0x31e5e4*(dwFileAttributes=0x2022, ftCreationTime.dwLowDateTime=0x25328b0, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x25328b0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x2689510, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x152, dwReserved0=0x0, dwReserved1=0x0, cFileName="MS.OUTLOOK.14.1033.hxn", cAlternateFileName="MSOUTL~1.HXN")) returned 1 [0065.151] FindNextFileW (in: hFindFile=0x5107aa0, lpFindFileData=0x31e5e4 | out: lpFindFileData=0x31e5e4*(dwFileAttributes=0x2022, ftCreationTime.dwLowDateTime=0x25328b0, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x25328b0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x26af670, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x16a, dwReserved0=0x0, dwReserved1=0x0, cFileName="MS.OUTLOOK.DEV.14.1033.hxn", cAlternateFileName="MSOUTL~2.HXN")) returned 1 [0065.151] FindNextFileW (in: hFindFile=0x5107aa0, lpFindFileData=0x31e5e4 | out: lpFindFileData=0x31e5e4*(dwFileAttributes=0x2022, ftCreationTime.dwLowDateTime=0xf5fa06b0, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xf5fa06b0, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xf5fec970, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x158, dwReserved0=0x0, dwReserved1=0x0, cFileName="MS.POWERPNT.14.1033.hxn", cAlternateFileName="MSPOWE~1.HXN")) returned 1 [0065.151] FindNextFileW (in: hFindFile=0x5107aa0, lpFindFileData=0x31e5e4 | out: lpFindFileData=0x31e5e4*(dwFileAttributes=0x2022, ftCreationTime.dwLowDateTime=0xf5fa06b0, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xf5fa06b0, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xf5fec970, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x170, dwReserved0=0x0, dwReserved1=0x0, cFileName="MS.POWERPNT.DEV.14.1033.hxn", cAlternateFileName="MSPOWE~2.HXN")) returned 1 [0065.151] FindNextFileW (in: hFindFile=0x5107aa0, lpFindFileData=0x31e5e4 | out: lpFindFileData=0x31e5e4*(dwFileAttributes=0x2022, ftCreationTime.dwLowDateTime=0xef377f10, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xef377f10, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xef3ea330, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x152, dwReserved0=0x0, dwReserved1=0x0, cFileName="MS.SETLANG.14.1033.hxn", cAlternateFileName="MSSETL~1.HXN")) returned 1 [0065.152] FindNextFileW (in: hFindFile=0x5107aa0, lpFindFileData=0x31e5e4 | out: lpFindFileData=0x31e5e4*(dwFileAttributes=0x2022, ftCreationTime.dwLowDateTime=0x523a6340, ftCreationTime.dwHighDateTime=0x1d305eb, ftLastAccessTime.dwLowDateTime=0x523a6340, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0x5269fec0, ftLastWriteTime.dwHighDateTime=0x1d305eb, nFileSizeHigh=0x0, nFileSizeLow=0x146, dwReserved0=0x0, dwReserved1=0x0, cFileName="MS.VISIO.14.1033.hxn", cAlternateFileName="MSVISI~1.HXN")) returned 1 [0065.152] FindNextFileW (in: hFindFile=0x5107aa0, lpFindFileData=0x31e5e4 | out: lpFindFileData=0x31e5e4*(dwFileAttributes=0x2022, ftCreationTime.dwLowDateTime=0x523a6340, ftCreationTime.dwHighDateTime=0x1d305eb, ftLastAccessTime.dwLowDateTime=0x523a6340, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0x527122e0, ftLastWriteTime.dwHighDateTime=0x1d305eb, nFileSizeHigh=0x0, nFileSizeLow=0x15e, dwReserved0=0x0, dwReserved1=0x0, cFileName="MS.VISIO.DEV.14.1033.hxn", cAlternateFileName="MSVISI~3.HXN")) returned 1 [0065.152] FindNextFileW (in: hFindFile=0x5107aa0, lpFindFileData=0x31e5e4 | out: lpFindFileData=0x31e5e4*(dwFileAttributes=0x2022, ftCreationTime.dwLowDateTime=0x523a6340, ftCreationTime.dwHighDateTime=0x1d305eb, ftLastAccessTime.dwLowDateTime=0x523a6340, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0x52738440, ftLastWriteTime.dwHighDateTime=0x1d305eb, nFileSizeHigh=0x0, nFileSizeLow=0x188, dwReserved0=0x0, dwReserved1=0x0, cFileName="MS.VISIO.SHAPESHEET.14.1033.hxn", cAlternateFileName="MSVISI~4.HXN")) returned 1 [0065.152] FindNextFileW (in: hFindFile=0x5107aa0, lpFindFileData=0x31e5e4 | out: lpFindFileData=0x31e5e4*(dwFileAttributes=0x2022, ftCreationTime.dwLowDateTime=0x523a6340, ftCreationTime.dwHighDateTime=0x1d305eb, ftLastAccessTime.dwLowDateTime=0x523a6340, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0x52738440, ftLastWriteTime.dwHighDateTime=0x1d305eb, nFileSizeHigh=0x0, nFileSizeLow=0x15e, dwReserved0=0x0, dwReserved1=0x0, cFileName="MS.VISIO_PRM.14.1033.hxn", cAlternateFileName="MSE1C9~1.HXN")) returned 1 [0065.152] FindNextFileW (in: hFindFile=0x5107aa0, lpFindFileData=0x31e5e4 | out: lpFindFileData=0x31e5e4*(dwFileAttributes=0x2022, ftCreationTime.dwLowDateTime=0x523a6340, ftCreationTime.dwHighDateTime=0x1d305eb, ftLastAccessTime.dwLowDateTime=0x523a6340, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0x527122e0, ftLastWriteTime.dwHighDateTime=0x1d305eb, nFileSizeHigh=0x0, nFileSizeLow=0x15e, dwReserved0=0x0, dwReserved1=0x0, cFileName="MS.VISIO_STD.14.1033.hxn", cAlternateFileName="MSVISI~2.HXN")) returned 1 [0065.152] FindNextFileW (in: hFindFile=0x5107aa0, lpFindFileData=0x31e5e4 | out: lpFindFileData=0x31e5e4*(dwFileAttributes=0x2022, ftCreationTime.dwLowDateTime=0xaf766ee0, ftCreationTime.dwHighDateTime=0x1d305f1, ftLastAccessTime.dwLowDateTime=0xaf766ee0, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0xaf7d9300, ftLastWriteTime.dwHighDateTime=0x1d305f1, nFileSizeHigh=0x0, nFileSizeLow=0x152, dwReserved0=0x0, dwReserved1=0x0, cFileName="MS.WINPROJ.14.1033.hxn", cAlternateFileName="MSWINP~1.HXN")) returned 1 [0065.153] FindNextFileW (in: hFindFile=0x5107aa0, lpFindFileData=0x31e5e4 | out: lpFindFileData=0x31e5e4*(dwFileAttributes=0x2022, ftCreationTime.dwLowDateTime=0xaf766ee0, ftCreationTime.dwHighDateTime=0x1d305f1, ftLastAccessTime.dwLowDateTime=0xaf766ee0, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0xaf7d9300, ftLastWriteTime.dwHighDateTime=0x1d305f1, nFileSizeHigh=0x0, nFileSizeLow=0x16a, dwReserved0=0x0, dwReserved1=0x0, cFileName="MS.WINPROJ.DEV.14.1033.hxn", cAlternateFileName="MSWINP~2.HXN")) returned 1 [0065.153] FindNextFileW (in: hFindFile=0x5107aa0, lpFindFileData=0x31e5e4 | out: lpFindFileData=0x31e5e4*(dwFileAttributes=0x2022, ftCreationTime.dwLowDateTime=0x1e67e130, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x1e67e130, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x1e6f0550, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x152, dwReserved0=0x0, dwReserved1=0x0, cFileName="MS.WINWORD.14.1033.hxn", cAlternateFileName="MSWINW~1.HXN")) returned 1 [0065.153] FindNextFileW (in: hFindFile=0x5107aa0, lpFindFileData=0x31e5e4 | out: lpFindFileData=0x31e5e4*(dwFileAttributes=0x2022, ftCreationTime.dwLowDateTime=0x1e67e130, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x1e67e130, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x1e6f0550, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x16a, dwReserved0=0x0, dwReserved1=0x0, cFileName="MS.WINWORD.DEV.14.1033.hxn", cAlternateFileName="MSWINW~2.HXN")) returned 1 [0065.153] FindNextFileW (in: hFindFile=0x5107aa0, lpFindFileData=0x31e5e4 | out: lpFindFileData=0x31e5e4*(dwFileAttributes=0x2022, ftCreationTime.dwLowDateTime=0xe80ff230, ftCreationTime.dwHighDateTime=0x1d2dda1, ftLastAccessTime.dwLowDateTime=0xe80ff230, ftLastAccessTime.dwHighDateTime=0x1d2dda1, ftLastWriteTime.dwLowDateTime=0xe8b8c220, ftLastWriteTime.dwHighDateTime=0x1d305f1, nFileSizeHigh=0x0, nFileSizeLow=0x21dc, dwReserved0=0x0, dwReserved1=0x0, cFileName="nslist.hxl", cAlternateFileName="")) returned 1 [0065.153] FindNextFileW (in: hFindFile=0x5107aa0, lpFindFileData=0x31e5e4 | out: lpFindFileData=0x31e5e4*(dwFileAttributes=0x2022, ftCreationTime.dwLowDateTime=0xe80ff230, ftCreationTime.dwHighDateTime=0x1d2dda1, ftLastAccessTime.dwLowDateTime=0xe80ff230, ftLastAccessTime.dwHighDateTime=0x1d2dda1, ftLastWriteTime.dwLowDateTime=0xe8b8c220, ftLastWriteTime.dwHighDateTime=0x1d305f1, nFileSizeHigh=0x0, nFileSizeLow=0x21dc, dwReserved0=0x0, dwReserved1=0x0, cFileName="nslist.hxl", cAlternateFileName="")) returned 0 [0065.153] FindClose (in: hFindFile=0x5107aa0 | out: hFindFile=0x5107aa0) returned 1 [0065.154] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e86c) returned 1 [0065.154] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e878) returned 1 [0065.154] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e8ac) returned 1 [0065.154] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Mozilla", nBufferLength=0x105, lpBuffer=0x31e3b4, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Mozilla", lpFilePart=0x0) returned 0x16 [0065.154] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Mozilla\\", nBufferLength=0x105, lpBuffer=0x31e388, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Mozilla\\", lpFilePart=0x0) returned 0x17 [0065.154] FindFirstFileW (in: lpFileName="C:\\ProgramData\\Mozilla\\*", lpFindFileData=0x31e5d4 | out: lpFindFileData=0x31e5d4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xaf8556a0, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xaf8556a0, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0xaf8556a0, ftLastWriteTime.dwHighDateTime=0x1d2dda4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5107aa0 [0065.155] FindNextFileW (in: hFindFile=0x5107aa0, lpFindFileData=0x31e5e4 | out: lpFindFileData=0x31e5e4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xaf8556a0, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xaf8556a0, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0xaf8556a0, ftLastWriteTime.dwHighDateTime=0x1d2dda4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0065.155] FindNextFileW (in: hFindFile=0x5107aa0, lpFindFileData=0x31e5e4 | out: lpFindFileData=0x31e5e4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xaf8556a0, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xaf8556a0, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0xaf8556a0, ftLastWriteTime.dwHighDateTime=0x1d2dda4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="logs", cAlternateFileName="")) returned 1 [0065.155] FindNextFileW (in: hFindFile=0x5107aa0, lpFindFileData=0x31e5e4 | out: lpFindFileData=0x31e5e4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xaf8556a0, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xaf8556a0, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0xaf8556a0, ftLastWriteTime.dwHighDateTime=0x1d2dda4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="logs", cAlternateFileName="")) returned 0 [0065.155] FindClose (in: hFindFile=0x5107aa0 | out: hFindFile=0x5107aa0) returned 1 [0065.155] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e86c) returned 1 [0065.155] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e878) returned 1 [0065.155] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e8ac) returned 1 [0065.155] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Mozilla", nBufferLength=0x105, lpBuffer=0x31e3b4, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Mozilla", lpFilePart=0x0) returned 0x16 [0065.155] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Mozilla\\", nBufferLength=0x105, lpBuffer=0x31e388, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Mozilla\\", lpFilePart=0x0) returned 0x17 [0065.155] FindFirstFileW (in: lpFileName="C:\\ProgramData\\Mozilla\\*", lpFindFileData=0x31e5d4 | out: lpFindFileData=0x31e5d4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xaf8556a0, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xaf8556a0, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0xaf8556a0, ftLastWriteTime.dwHighDateTime=0x1d2dda4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5107aa0 [0065.156] FindNextFileW (in: hFindFile=0x5107aa0, lpFindFileData=0x31e5e4 | out: lpFindFileData=0x31e5e4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xaf8556a0, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xaf8556a0, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0xaf8556a0, ftLastWriteTime.dwHighDateTime=0x1d2dda4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0065.156] FindNextFileW (in: hFindFile=0x5107aa0, lpFindFileData=0x31e5e4 | out: lpFindFileData=0x31e5e4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xaf8556a0, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xaf8556a0, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0xaf8556a0, ftLastWriteTime.dwHighDateTime=0x1d2dda4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="logs", cAlternateFileName="")) returned 1 [0065.156] FindNextFileW (in: hFindFile=0x5107aa0, lpFindFileData=0x31e5e4 | out: lpFindFileData=0x31e5e4*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0065.156] FindClose (in: hFindFile=0x5107aa0 | out: hFindFile=0x5107aa0) returned 1 [0065.156] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e86c) returned 1 [0065.156] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e878) returned 1 [0065.156] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e834) returned 1 [0065.156] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Mozilla\\logs", nBufferLength=0x105, lpBuffer=0x31e33c, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Mozilla\\logs", lpFilePart=0x0) returned 0x1b [0065.156] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Mozilla\\logs\\", nBufferLength=0x105, lpBuffer=0x31e310, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Mozilla\\logs\\", lpFilePart=0x0) returned 0x1c [0065.156] FindFirstFileW (in: lpFileName="C:\\ProgramData\\Mozilla\\logs\\*", lpFindFileData=0x31e55c | out: lpFindFileData=0x31e55c*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xaf8556a0, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xaf8556a0, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0xaf8556a0, ftLastWriteTime.dwHighDateTime=0x1d2dda4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5107aa0 [0065.157] FindNextFileW (in: hFindFile=0x5107aa0, lpFindFileData=0x31e56c | out: lpFindFileData=0x31e56c*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xaf8556a0, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xaf8556a0, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0xaf8556a0, ftLastWriteTime.dwHighDateTime=0x1d2dda4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0065.157] FindNextFileW (in: hFindFile=0x5107aa0, lpFindFileData=0x31e56c | out: lpFindFileData=0x31e56c*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xaf8556a0, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xaf8556a0, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0xb07822e0, ftLastWriteTime.dwHighDateTime=0x1d2dda4, nFileSizeHigh=0x0, nFileSizeLow=0xa4, dwReserved0=0x0, dwReserved1=0x0, cFileName="maintenanceservice-install.log", cAlternateFileName="MAINTE~1.LOG")) returned 1 [0065.157] FindNextFileW (in: hFindFile=0x5107aa0, lpFindFileData=0x31e56c | out: lpFindFileData=0x31e56c*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0065.158] FindClose (in: hFindFile=0x5107aa0 | out: hFindFile=0x5107aa0) returned 1 [0065.158] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e7f4) returned 1 [0065.158] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e800) returned 1 [0065.158] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e834) returned 1 [0065.158] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Mozilla\\logs", nBufferLength=0x105, lpBuffer=0x31e33c, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Mozilla\\logs", lpFilePart=0x0) returned 0x1b [0065.158] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Mozilla\\logs\\", nBufferLength=0x105, lpBuffer=0x31e310, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Mozilla\\logs\\", lpFilePart=0x0) returned 0x1c [0065.158] FindFirstFileW (in: lpFileName="C:\\ProgramData\\Mozilla\\logs\\*", lpFindFileData=0x31e55c | out: lpFindFileData=0x31e55c*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xaf8556a0, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xaf8556a0, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0xaf8556a0, ftLastWriteTime.dwHighDateTime=0x1d2dda4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5107aa0 [0065.158] FindNextFileW (in: hFindFile=0x5107aa0, lpFindFileData=0x31e56c | out: lpFindFileData=0x31e56c*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xaf8556a0, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xaf8556a0, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0xaf8556a0, ftLastWriteTime.dwHighDateTime=0x1d2dda4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0065.158] FindNextFileW (in: hFindFile=0x5107aa0, lpFindFileData=0x31e56c | out: lpFindFileData=0x31e56c*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xaf8556a0, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xaf8556a0, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0xb07822e0, ftLastWriteTime.dwHighDateTime=0x1d2dda4, nFileSizeHigh=0x0, nFileSizeLow=0xa4, dwReserved0=0x0, dwReserved1=0x0, cFileName="maintenanceservice-install.log", cAlternateFileName="MAINTE~1.LOG")) returned 1 [0065.158] FindNextFileW (in: hFindFile=0x5107aa0, lpFindFileData=0x31e56c | out: lpFindFileData=0x31e56c*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xaf8556a0, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xaf8556a0, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0xb07822e0, ftLastWriteTime.dwHighDateTime=0x1d2dda4, nFileSizeHigh=0x0, nFileSizeLow=0xa4, dwReserved0=0x0, dwReserved1=0x0, cFileName="maintenanceservice-install.log", cAlternateFileName="MAINTE~1.LOG")) returned 0 [0065.159] FindClose (in: hFindFile=0x5107aa0 | out: hFindFile=0x5107aa0) returned 1 [0065.159] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e7f4) returned 1 [0065.159] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e800) returned 1 [0065.159] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e8ac) returned 1 [0065.159] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Oracle", nBufferLength=0x105, lpBuffer=0x31e3b4, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Oracle", lpFilePart=0x0) returned 0x15 [0065.159] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Oracle\\", nBufferLength=0x105, lpBuffer=0x31e388, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Oracle\\", lpFilePart=0x0) returned 0x16 [0065.159] FindFirstFileW (in: lpFileName="C:\\ProgramData\\Oracle\\*", lpFindFileData=0x31e5d4 | out: lpFindFileData=0x31e5d4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x7e3c6d00, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x7e3c6d00, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x7eea3160, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5107aa0 [0065.159] FindNextFileW (in: hFindFile=0x5107aa0, lpFindFileData=0x31e5e4 | out: lpFindFileData=0x31e5e4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x7e3c6d00, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x7e3c6d00, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x7eea3160, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0065.159] FindNextFileW (in: hFindFile=0x5107aa0, lpFindFileData=0x31e5e4 | out: lpFindFileData=0x31e5e4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x7e3c6d00, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x7e3c6d00, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x7eea3160, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 0 [0065.159] FindClose (in: hFindFile=0x5107aa0 | out: hFindFile=0x5107aa0) returned 1 [0065.159] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e86c) returned 1 [0065.160] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e878) returned 1 [0065.160] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e8ac) returned 1 [0065.160] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Oracle", nBufferLength=0x105, lpBuffer=0x31e3b4, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Oracle", lpFilePart=0x0) returned 0x15 [0065.160] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Oracle\\", nBufferLength=0x105, lpBuffer=0x31e388, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Oracle\\", lpFilePart=0x0) returned 0x16 [0065.160] FindFirstFileW (in: lpFileName="C:\\ProgramData\\Oracle\\*", lpFindFileData=0x31e5d4 | out: lpFindFileData=0x31e5d4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x7e3c6d00, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x7e3c6d00, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x7eea3160, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5107aa0 [0065.160] FindNextFileW (in: hFindFile=0x5107aa0, lpFindFileData=0x31e5e4 | out: lpFindFileData=0x31e5e4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x7e3c6d00, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x7e3c6d00, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x7eea3160, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0065.160] FindNextFileW (in: hFindFile=0x5107aa0, lpFindFileData=0x31e5e4 | out: lpFindFileData=0x31e5e4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x7e3c6d00, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x7e3c6d00, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x7eea3160, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 0 [0065.160] FindClose (in: hFindFile=0x5107aa0 | out: hFindFile=0x5107aa0) returned 1 [0065.160] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e86c) returned 1 [0065.160] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e878) returned 1 [0065.160] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e8ac) returned 1 [0065.160] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Package Cache", nBufferLength=0x105, lpBuffer=0x31e3b4, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Package Cache", lpFilePart=0x0) returned 0x1c [0065.160] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Package Cache\\", nBufferLength=0x105, lpBuffer=0x31e388, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Package Cache\\", lpFilePart=0x0) returned 0x1d [0065.160] FindFirstFileW (in: lpFileName="C:\\ProgramData\\Package Cache\\*", lpFindFileData=0x31e5d4 | out: lpFindFileData=0x31e5d4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xecce51e0, ftCreationTime.dwHighDateTime=0x1d2e620, ftLastAccessTime.dwLowDateTime=0x4819be0, ftLastAccessTime.dwHighDateTime=0x1d2fc28, ftLastWriteTime.dwLowDateTime=0x4819be0, ftLastWriteTime.dwHighDateTime=0x1d2fc28, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5107aa0 [0065.163] FindNextFileW (in: hFindFile=0x5107aa0, lpFindFileData=0x31e5e4 | out: lpFindFileData=0x31e5e4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xecce51e0, ftCreationTime.dwHighDateTime=0x1d2e620, ftLastAccessTime.dwLowDateTime=0x4819be0, ftLastAccessTime.dwHighDateTime=0x1d2fc28, ftLastWriteTime.dwLowDateTime=0x4819be0, ftLastWriteTime.dwHighDateTime=0x1d2fc28, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0065.164] FindNextFileW (in: hFindFile=0x5107aa0, lpFindFileData=0x31e5e4 | out: lpFindFileData=0x31e5e4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x2924cac0, ftCreationTime.dwHighDateTime=0x1d2e621, ftLastAccessTime.dwLowDateTime=0x29272c20, ftLastAccessTime.dwHighDateTime=0x1d2e621, ftLastWriteTime.dwLowDateTime=0x29272c20, ftLastWriteTime.dwHighDateTime=0x1d2e621, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="42D5BEC7DDFBD49E76467529CBC2868987BF8460", cAlternateFileName="42D5BE~1")) returned 1 [0065.164] FindNextFileW (in: hFindFile=0x5107aa0, lpFindFileData=0x31e5e4 | out: lpFindFileData=0x31e5e4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa938e870, ftCreationTime.dwHighDateTime=0x1d2fab4, ftLastAccessTime.dwLowDateTime=0xa989d730, ftLastAccessTime.dwHighDateTime=0x1d2fab4, ftLastWriteTime.dwLowDateTime=0xa989d730, ftLastWriteTime.dwHighDateTime=0x1d2fab4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="54050A5F8AE7F0C56E553F0090146C17A1D2BF8D", cAlternateFileName="54050A~1")) returned 1 [0065.164] FindNextFileW (in: hFindFile=0x5107aa0, lpFindFileData=0x31e5e4 | out: lpFindFileData=0x31e5e4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xcb49460, ftCreationTime.dwHighDateTime=0x1d2e621, ftLastAccessTime.dwLowDateTime=0xcb95720, ftLastAccessTime.dwHighDateTime=0x1d2e621, ftLastWriteTime.dwLowDateTime=0xcb95720, ftLastWriteTime.dwHighDateTime=0x1d2e621, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="{13A4EE12-23EA-3371-91EE-EFB36DDFFF3E}v12.0.21005", cAlternateFileName="{13A4E~1.210")) returned 1 [0065.164] FindNextFileW (in: hFindFile=0x5107aa0, lpFindFileData=0x31e5e4 | out: lpFindFileData=0x31e5e4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xecd0b340, ftCreationTime.dwHighDateTime=0x1d2e620, ftLastAccessTime.dwLowDateTime=0xecd314a0, ftLastAccessTime.dwHighDateTime=0x1d2e620, ftLastWriteTime.dwLowDateTime=0xecd314a0, ftLastWriteTime.dwHighDateTime=0x1d2e620, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="{33d1fd90-4274-48a1-9bc1-97e33d9c2d6f}", cAlternateFileName="{33D1F~1")) returned 1 [0065.164] FindNextFileW (in: hFindFile=0x5107aa0, lpFindFileData=0x31e5e4 | out: lpFindFileData=0x31e5e4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfabe4080, ftCreationTime.dwHighDateTime=0x1d2e620, ftLastAccessTime.dwLowDateTime=0xfabe4080, ftLastAccessTime.dwHighDateTime=0x1d2e620, ftLastWriteTime.dwLowDateTime=0xfabe4080, ftLastWriteTime.dwHighDateTime=0x1d2e620, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="{37B8F9C7-03FB-3253-8781-2517C99D7C00}v11.0.61030", cAlternateFileName="{37B8F~1.610")) returned 1 [0065.164] FindNextFileW (in: hFindFile=0x5107aa0, lpFindFileData=0x31e5e4 | out: lpFindFileData=0x31e5e4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1a0db1a0, ftCreationTime.dwHighDateTime=0x1d2e621, ftLastAccessTime.dwLowDateTime=0x1a127460, ftLastAccessTime.dwHighDateTime=0x1d2e621, ftLastWriteTime.dwLowDateTime=0x1a127460, ftLastWriteTime.dwHighDateTime=0x1d2e621, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="{3c3aafc8-d898-43ec-998f-965ffdae065a}", cAlternateFileName="{3C3AA~1")) returned 1 [0065.165] FindNextFileW (in: hFindFile=0x5107aa0, lpFindFileData=0x31e5e4 | out: lpFindFileData=0x31e5e4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf94d4300, ftCreationTime.dwHighDateTime=0x1d2fc27, ftLastAccessTime.dwLowDateTime=0xf94d4300, ftLastAccessTime.dwHighDateTime=0x1d2fc27, ftLastWriteTime.dwLowDateTime=0xf94d4300, ftLastWriteTime.dwHighDateTime=0x1d2fc27, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="{582EA838-9199-3518-A05C-DB09462F68EC}v14.10.25017", cAlternateFileName="{582EA~1.250")) returned 1 [0065.165] FindNextFileW (in: hFindFile=0x5107aa0, lpFindFileData=0x31e5e4 | out: lpFindFileData=0x31e5e4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf94d4300, ftCreationTime.dwHighDateTime=0x1d2fc27, ftLastAccessTime.dwLowDateTime=0xf94d4300, ftLastAccessTime.dwHighDateTime=0x1d2fc27, ftLastWriteTime.dwLowDateTime=0xf94d4300, ftLastWriteTime.dwHighDateTime=0x1d2fc27, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="{68306422-7C57-373F-8860-D26CE4BA2A15}v14.10.25017", cAlternateFileName="{68306~1.250")) returned 1 [0065.165] FindNextFileW (in: hFindFile=0x5107aa0, lpFindFileData=0x31e5e4 | out: lpFindFileData=0x31e5e4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa931c450, ftCreationTime.dwHighDateTime=0x1d2fab4, ftLastAccessTime.dwLowDateTime=0xa931c450, ftLastAccessTime.dwHighDateTime=0x1d2fab4, ftLastWriteTime.dwLowDateTime=0xa931c450, ftLastWriteTime.dwHighDateTime=0x1d2fab4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="{8D4F7A6D-6B81-3DC8-9C21-6008E4866727}v14.10.25017", cAlternateFileName="{8D4F7~1.250")) returned 1 [0065.165] FindNextFileW (in: hFindFile=0x5107aa0, lpFindFileData=0x31e5e4 | out: lpFindFileData=0x31e5e4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1a1e5b40, ftCreationTime.dwHighDateTime=0x1d2e621, ftLastAccessTime.dwLowDateTime=0x1a20bca0, ftLastAccessTime.dwHighDateTime=0x1d2e621, ftLastWriteTime.dwLowDateTime=0x1a20bca0, ftLastWriteTime.dwHighDateTime=0x1d2e621, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="{929FBD26-9020-399B-9A7A-751D61F0B942}v12.0.21005", cAlternateFileName="{929FB~1.210")) returned 1 [0065.165] FindNextFileW (in: hFindFile=0x5107aa0, lpFindFileData=0x31e5e4 | out: lpFindFileData=0x31e5e4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1a199880, ftCreationTime.dwHighDateTime=0x1d2e621, ftLastAccessTime.dwLowDateTime=0x1a1e5b40, ftLastAccessTime.dwHighDateTime=0x1d2e621, ftLastWriteTime.dwLowDateTime=0x1a1e5b40, ftLastWriteTime.dwHighDateTime=0x1d2e621, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="{A749D8E6-B613-3BE3-8F5F-045C84EBA29B}v12.0.21005", cAlternateFileName="{A749D~1.210")) returned 1 [0065.165] FindNextFileW (in: hFindFile=0x5107aa0, lpFindFileData=0x31e5e4 | out: lpFindFileData=0x31e5e4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xedbebcc0, ftCreationTime.dwHighDateTime=0x1d2e620, ftLastAccessTime.dwLowDateTime=0xedbebcc0, ftLastAccessTime.dwHighDateTime=0x1d2e620, ftLastWriteTime.dwLowDateTime=0xedbebcc0, ftLastWriteTime.dwHighDateTime=0x1d2e620, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="{B175520C-86A2-35A7-8619-86DC379688B9}v11.0.61030", cAlternateFileName="{B1755~1.610")) returned 1 [0065.165] FindNextFileW (in: hFindFile=0x5107aa0, lpFindFileData=0x31e5e4 | out: lpFindFileData=0x31e5e4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xecd7d760, ftCreationTime.dwHighDateTime=0x1d2e620, ftLastAccessTime.dwLowDateTime=0xedbebcc0, ftLastAccessTime.dwHighDateTime=0x1d2e620, ftLastWriteTime.dwLowDateTime=0xedbebcc0, ftLastWriteTime.dwHighDateTime=0x1d2e620, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="{BD95A8CD-1D9F-35AD-981A-3E7925026EBB}v11.0.61030", cAlternateFileName="{BD95A~1.610")) returned 1 [0065.166] FindNextFileW (in: hFindFile=0x5107aa0, lpFindFileData=0x31e5e4 | out: lpFindFileData=0x31e5e4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfaaff840, ftCreationTime.dwHighDateTime=0x1d2e620, ftLastAccessTime.dwLowDateTime=0xfaaff840, ftLastAccessTime.dwHighDateTime=0x1d2e620, ftLastWriteTime.dwLowDateTime=0xfaaff840, ftLastWriteTime.dwHighDateTime=0x1d2e620, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="{ca67548a-5ebe-413a-b50c-4b9ceb6d66c6}", cAlternateFileName="{CA675~1")) returned 1 [0065.166] FindNextFileW (in: hFindFile=0x5107aa0, lpFindFileData=0x31e5e4 | out: lpFindFileData=0x31e5e4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfab71c60, ftCreationTime.dwHighDateTime=0x1d2e620, ftLastAccessTime.dwLowDateTime=0xfabbdf20, ftLastAccessTime.dwHighDateTime=0x1d2e620, ftLastWriteTime.dwLowDateTime=0xfabbdf20, ftLastWriteTime.dwHighDateTime=0x1d2e620, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="{CF2BEA3C-26EA-32F8-AA9B-331F7E34BA97}v11.0.61030", cAlternateFileName="{CF2BE~1.610")) returned 1 [0065.166] FindNextFileW (in: hFindFile=0x5107aa0, lpFindFileData=0x31e5e4 | out: lpFindFileData=0x31e5e4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa93425b0, ftCreationTime.dwHighDateTime=0x1d2fab4, ftLastAccessTime.dwLowDateTime=0xa9368710, ftLastAccessTime.dwHighDateTime=0x1d2fab4, ftLastWriteTime.dwLowDateTime=0xa9368710, ftLastWriteTime.dwHighDateTime=0x1d2fab4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="{E512788E-C50B-3858-A4B9-73AD5F3F9E93}v14.10.25017", cAlternateFileName="{E5127~1.250")) returned 1 [0065.166] FindNextFileW (in: hFindFile=0x5107aa0, lpFindFileData=0x31e5e4 | out: lpFindFileData=0x31e5e4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa912d270, ftCreationTime.dwHighDateTime=0x1d2fab4, ftLastAccessTime.dwLowDateTime=0xa912d270, ftLastAccessTime.dwHighDateTime=0x1d2fab4, ftLastWriteTime.dwLowDateTime=0xa912d270, ftLastWriteTime.dwHighDateTime=0x1d2fab4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="{e52a6842-b0ac-476e-b48f-378a97a67346}", cAlternateFileName="{E52A6~1")) returned 1 [0065.166] FindNextFileW (in: hFindFile=0x5107aa0, lpFindFileData=0x31e5e4 | out: lpFindFileData=0x31e5e4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xca64c20, ftCreationTime.dwHighDateTime=0x1d2e621, ftLastAccessTime.dwLowDateTime=0xcad7040, ftLastAccessTime.dwHighDateTime=0x1d2e621, ftLastWriteTime.dwLowDateTime=0xcad7040, ftLastWriteTime.dwHighDateTime=0x1d2e621, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="{e6e75766-da0f-4ba2-9788-6ea593ce702d}", cAlternateFileName="{E6E75~1")) returned 1 [0065.166] FindNextFileW (in: hFindFile=0x5107aa0, lpFindFileData=0x31e5e4 | out: lpFindFileData=0x31e5e4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf93c9960, ftCreationTime.dwHighDateTime=0x1d2fc27, ftLastAccessTime.dwLowDateTime=0xf93efac0, ftLastAccessTime.dwHighDateTime=0x1d2fc27, ftLastWriteTime.dwLowDateTime=0xf93efac0, ftLastWriteTime.dwHighDateTime=0x1d2fc27, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="{f325f05b-f963-4640-a43b-c8a494cdda0f}", cAlternateFileName="{F325F~1")) returned 1 [0065.167] FindNextFileW (in: hFindFile=0x5107aa0, lpFindFileData=0x31e5e4 | out: lpFindFileData=0x31e5e4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xcbbb880, ftCreationTime.dwHighDateTime=0x1d2e621, ftLastAccessTime.dwLowDateTime=0xcbbb880, ftLastAccessTime.dwHighDateTime=0x1d2e621, ftLastWriteTime.dwLowDateTime=0xcbbb880, ftLastWriteTime.dwHighDateTime=0x1d2e621, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="{F8CFEB22-A2E7-3971-9EDA-4B11EDEFC185}v12.0.21005", cAlternateFileName="{F8CFE~1.210")) returned 1 [0065.167] FindNextFileW (in: hFindFile=0x5107aa0, lpFindFileData=0x31e5e4 | out: lpFindFileData=0x31e5e4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xcbbb880, ftCreationTime.dwHighDateTime=0x1d2e621, ftLastAccessTime.dwLowDateTime=0xcbbb880, ftLastAccessTime.dwHighDateTime=0x1d2e621, ftLastWriteTime.dwLowDateTime=0xcbbb880, ftLastWriteTime.dwHighDateTime=0x1d2e621, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="{F8CFEB22-A2E7-3971-9EDA-4B11EDEFC185}v12.0.21005", cAlternateFileName="{F8CFE~1.210")) returned 0 [0065.167] FindClose (in: hFindFile=0x5107aa0 | out: hFindFile=0x5107aa0) returned 1 [0065.168] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Package Cache", nBufferLength=0x105, lpBuffer=0x31e3b4, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Package Cache", lpFilePart=0x0) returned 0x1c [0065.168] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Package Cache\\", nBufferLength=0x105, lpBuffer=0x31e388, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Package Cache\\", lpFilePart=0x0) returned 0x1d [0065.168] FindFirstFileW (in: lpFileName="C:\\ProgramData\\Package Cache\\*", lpFindFileData=0x31e5d4 | out: lpFindFileData=0x31e5d4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xecce51e0, ftCreationTime.dwHighDateTime=0x1d2e620, ftLastAccessTime.dwLowDateTime=0x4819be0, ftLastAccessTime.dwHighDateTime=0x1d2fc28, ftLastWriteTime.dwLowDateTime=0x4819be0, ftLastWriteTime.dwHighDateTime=0x1d2fc28, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5107aa0 [0065.168] FindNextFileW (in: hFindFile=0x5107aa0, lpFindFileData=0x31e5e4 | out: lpFindFileData=0x31e5e4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xecce51e0, ftCreationTime.dwHighDateTime=0x1d2e620, ftLastAccessTime.dwLowDateTime=0x4819be0, ftLastAccessTime.dwHighDateTime=0x1d2fc28, ftLastWriteTime.dwLowDateTime=0x4819be0, ftLastWriteTime.dwHighDateTime=0x1d2fc28, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0065.169] FindNextFileW (in: hFindFile=0x5107aa0, lpFindFileData=0x31e5e4 | out: lpFindFileData=0x31e5e4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x2924cac0, ftCreationTime.dwHighDateTime=0x1d2e621, ftLastAccessTime.dwLowDateTime=0x29272c20, ftLastAccessTime.dwHighDateTime=0x1d2e621, ftLastWriteTime.dwLowDateTime=0x29272c20, ftLastWriteTime.dwHighDateTime=0x1d2e621, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="42D5BEC7DDFBD49E76467529CBC2868987BF8460", cAlternateFileName="42D5BE~1")) returned 1 [0065.169] FindNextFileW (in: hFindFile=0x5107aa0, lpFindFileData=0x31e5e4 | out: lpFindFileData=0x31e5e4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa938e870, ftCreationTime.dwHighDateTime=0x1d2fab4, ftLastAccessTime.dwLowDateTime=0xa989d730, ftLastAccessTime.dwHighDateTime=0x1d2fab4, ftLastWriteTime.dwLowDateTime=0xa989d730, ftLastWriteTime.dwHighDateTime=0x1d2fab4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="54050A5F8AE7F0C56E553F0090146C17A1D2BF8D", cAlternateFileName="54050A~1")) returned 1 [0065.169] FindNextFileW (in: hFindFile=0x5107aa0, lpFindFileData=0x31e5e4 | out: lpFindFileData=0x31e5e4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xcb49460, ftCreationTime.dwHighDateTime=0x1d2e621, ftLastAccessTime.dwLowDateTime=0xcb95720, ftLastAccessTime.dwHighDateTime=0x1d2e621, ftLastWriteTime.dwLowDateTime=0xcb95720, ftLastWriteTime.dwHighDateTime=0x1d2e621, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="{13A4EE12-23EA-3371-91EE-EFB36DDFFF3E}v12.0.21005", cAlternateFileName="{13A4E~1.210")) returned 1 [0065.169] FindNextFileW (in: hFindFile=0x5107aa0, lpFindFileData=0x31e5e4 | out: lpFindFileData=0x31e5e4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xecd0b340, ftCreationTime.dwHighDateTime=0x1d2e620, ftLastAccessTime.dwLowDateTime=0xecd314a0, ftLastAccessTime.dwHighDateTime=0x1d2e620, ftLastWriteTime.dwLowDateTime=0xecd314a0, ftLastWriteTime.dwHighDateTime=0x1d2e620, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="{33d1fd90-4274-48a1-9bc1-97e33d9c2d6f}", cAlternateFileName="{33D1F~1")) returned 1 [0065.169] FindNextFileW (in: hFindFile=0x5107aa0, lpFindFileData=0x31e5e4 | out: lpFindFileData=0x31e5e4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfabe4080, ftCreationTime.dwHighDateTime=0x1d2e620, ftLastAccessTime.dwLowDateTime=0xfabe4080, ftLastAccessTime.dwHighDateTime=0x1d2e620, ftLastWriteTime.dwLowDateTime=0xfabe4080, ftLastWriteTime.dwHighDateTime=0x1d2e620, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="{37B8F9C7-03FB-3253-8781-2517C99D7C00}v11.0.61030", cAlternateFileName="{37B8F~1.610")) returned 1 [0065.169] FindNextFileW (in: hFindFile=0x5107aa0, lpFindFileData=0x31e5e4 | out: lpFindFileData=0x31e5e4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1a0db1a0, ftCreationTime.dwHighDateTime=0x1d2e621, ftLastAccessTime.dwLowDateTime=0x1a127460, ftLastAccessTime.dwHighDateTime=0x1d2e621, ftLastWriteTime.dwLowDateTime=0x1a127460, ftLastWriteTime.dwHighDateTime=0x1d2e621, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="{3c3aafc8-d898-43ec-998f-965ffdae065a}", cAlternateFileName="{3C3AA~1")) returned 1 [0065.169] FindNextFileW (in: hFindFile=0x5107aa0, lpFindFileData=0x31e5e4 | out: lpFindFileData=0x31e5e4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf94d4300, ftCreationTime.dwHighDateTime=0x1d2fc27, ftLastAccessTime.dwLowDateTime=0xf94d4300, ftLastAccessTime.dwHighDateTime=0x1d2fc27, ftLastWriteTime.dwLowDateTime=0xf94d4300, ftLastWriteTime.dwHighDateTime=0x1d2fc27, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="{582EA838-9199-3518-A05C-DB09462F68EC}v14.10.25017", cAlternateFileName="{582EA~1.250")) returned 1 [0065.169] FindNextFileW (in: hFindFile=0x5107aa0, lpFindFileData=0x31e5e4 | out: lpFindFileData=0x31e5e4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf94d4300, ftCreationTime.dwHighDateTime=0x1d2fc27, ftLastAccessTime.dwLowDateTime=0xf94d4300, ftLastAccessTime.dwHighDateTime=0x1d2fc27, ftLastWriteTime.dwLowDateTime=0xf94d4300, ftLastWriteTime.dwHighDateTime=0x1d2fc27, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="{68306422-7C57-373F-8860-D26CE4BA2A15}v14.10.25017", cAlternateFileName="{68306~1.250")) returned 1 [0065.170] FindNextFileW (in: hFindFile=0x5107aa0, lpFindFileData=0x31e5e4 | out: lpFindFileData=0x31e5e4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa931c450, ftCreationTime.dwHighDateTime=0x1d2fab4, ftLastAccessTime.dwLowDateTime=0xa931c450, ftLastAccessTime.dwHighDateTime=0x1d2fab4, ftLastWriteTime.dwLowDateTime=0xa931c450, ftLastWriteTime.dwHighDateTime=0x1d2fab4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="{8D4F7A6D-6B81-3DC8-9C21-6008E4866727}v14.10.25017", cAlternateFileName="{8D4F7~1.250")) returned 1 [0065.170] FindNextFileW (in: hFindFile=0x5107aa0, lpFindFileData=0x31e5e4 | out: lpFindFileData=0x31e5e4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1a1e5b40, ftCreationTime.dwHighDateTime=0x1d2e621, ftLastAccessTime.dwLowDateTime=0x1a20bca0, ftLastAccessTime.dwHighDateTime=0x1d2e621, ftLastWriteTime.dwLowDateTime=0x1a20bca0, ftLastWriteTime.dwHighDateTime=0x1d2e621, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="{929FBD26-9020-399B-9A7A-751D61F0B942}v12.0.21005", cAlternateFileName="{929FB~1.210")) returned 1 [0065.170] FindNextFileW (in: hFindFile=0x5107aa0, lpFindFileData=0x31e5e4 | out: lpFindFileData=0x31e5e4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1a199880, ftCreationTime.dwHighDateTime=0x1d2e621, ftLastAccessTime.dwLowDateTime=0x1a1e5b40, ftLastAccessTime.dwHighDateTime=0x1d2e621, ftLastWriteTime.dwLowDateTime=0x1a1e5b40, ftLastWriteTime.dwHighDateTime=0x1d2e621, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="{A749D8E6-B613-3BE3-8F5F-045C84EBA29B}v12.0.21005", cAlternateFileName="{A749D~1.210")) returned 1 [0065.170] FindNextFileW (in: hFindFile=0x5107aa0, lpFindFileData=0x31e5e4 | out: lpFindFileData=0x31e5e4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xedbebcc0, ftCreationTime.dwHighDateTime=0x1d2e620, ftLastAccessTime.dwLowDateTime=0xedbebcc0, ftLastAccessTime.dwHighDateTime=0x1d2e620, ftLastWriteTime.dwLowDateTime=0xedbebcc0, ftLastWriteTime.dwHighDateTime=0x1d2e620, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="{B175520C-86A2-35A7-8619-86DC379688B9}v11.0.61030", cAlternateFileName="{B1755~1.610")) returned 1 [0065.170] FindNextFileW (in: hFindFile=0x5107aa0, lpFindFileData=0x31e5e4 | out: lpFindFileData=0x31e5e4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xecd7d760, ftCreationTime.dwHighDateTime=0x1d2e620, ftLastAccessTime.dwLowDateTime=0xedbebcc0, ftLastAccessTime.dwHighDateTime=0x1d2e620, ftLastWriteTime.dwLowDateTime=0xedbebcc0, ftLastWriteTime.dwHighDateTime=0x1d2e620, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="{BD95A8CD-1D9F-35AD-981A-3E7925026EBB}v11.0.61030", cAlternateFileName="{BD95A~1.610")) returned 1 [0065.170] FindNextFileW (in: hFindFile=0x5107aa0, lpFindFileData=0x31e5e4 | out: lpFindFileData=0x31e5e4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfaaff840, ftCreationTime.dwHighDateTime=0x1d2e620, ftLastAccessTime.dwLowDateTime=0xfaaff840, ftLastAccessTime.dwHighDateTime=0x1d2e620, ftLastWriteTime.dwLowDateTime=0xfaaff840, ftLastWriteTime.dwHighDateTime=0x1d2e620, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="{ca67548a-5ebe-413a-b50c-4b9ceb6d66c6}", cAlternateFileName="{CA675~1")) returned 1 [0065.170] FindNextFileW (in: hFindFile=0x5107aa0, lpFindFileData=0x31e5e4 | out: lpFindFileData=0x31e5e4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfab71c60, ftCreationTime.dwHighDateTime=0x1d2e620, ftLastAccessTime.dwLowDateTime=0xfabbdf20, ftLastAccessTime.dwHighDateTime=0x1d2e620, ftLastWriteTime.dwLowDateTime=0xfabbdf20, ftLastWriteTime.dwHighDateTime=0x1d2e620, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="{CF2BEA3C-26EA-32F8-AA9B-331F7E34BA97}v11.0.61030", cAlternateFileName="{CF2BE~1.610")) returned 1 [0065.171] FindNextFileW (in: hFindFile=0x5107aa0, lpFindFileData=0x31e5e4 | out: lpFindFileData=0x31e5e4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa93425b0, ftCreationTime.dwHighDateTime=0x1d2fab4, ftLastAccessTime.dwLowDateTime=0xa9368710, ftLastAccessTime.dwHighDateTime=0x1d2fab4, ftLastWriteTime.dwLowDateTime=0xa9368710, ftLastWriteTime.dwHighDateTime=0x1d2fab4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="{E512788E-C50B-3858-A4B9-73AD5F3F9E93}v14.10.25017", cAlternateFileName="{E5127~1.250")) returned 1 [0065.171] FindNextFileW (in: hFindFile=0x5107aa0, lpFindFileData=0x31e5e4 | out: lpFindFileData=0x31e5e4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa912d270, ftCreationTime.dwHighDateTime=0x1d2fab4, ftLastAccessTime.dwLowDateTime=0xa912d270, ftLastAccessTime.dwHighDateTime=0x1d2fab4, ftLastWriteTime.dwLowDateTime=0xa912d270, ftLastWriteTime.dwHighDateTime=0x1d2fab4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="{e52a6842-b0ac-476e-b48f-378a97a67346}", cAlternateFileName="{E52A6~1")) returned 1 [0065.171] FindNextFileW (in: hFindFile=0x5107aa0, lpFindFileData=0x31e5e4 | out: lpFindFileData=0x31e5e4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xca64c20, ftCreationTime.dwHighDateTime=0x1d2e621, ftLastAccessTime.dwLowDateTime=0xcad7040, ftLastAccessTime.dwHighDateTime=0x1d2e621, ftLastWriteTime.dwLowDateTime=0xcad7040, ftLastWriteTime.dwHighDateTime=0x1d2e621, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="{e6e75766-da0f-4ba2-9788-6ea593ce702d}", cAlternateFileName="{E6E75~1")) returned 1 [0065.171] FindNextFileW (in: hFindFile=0x5107aa0, lpFindFileData=0x31e5e4 | out: lpFindFileData=0x31e5e4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf93c9960, ftCreationTime.dwHighDateTime=0x1d2fc27, ftLastAccessTime.dwLowDateTime=0xf93efac0, ftLastAccessTime.dwHighDateTime=0x1d2fc27, ftLastWriteTime.dwLowDateTime=0xf93efac0, ftLastWriteTime.dwHighDateTime=0x1d2fc27, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="{f325f05b-f963-4640-a43b-c8a494cdda0f}", cAlternateFileName="{F325F~1")) returned 1 [0065.171] FindNextFileW (in: hFindFile=0x5107aa0, lpFindFileData=0x31e5e4 | out: lpFindFileData=0x31e5e4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xcbbb880, ftCreationTime.dwHighDateTime=0x1d2e621, ftLastAccessTime.dwLowDateTime=0xcbbb880, ftLastAccessTime.dwHighDateTime=0x1d2e621, ftLastWriteTime.dwLowDateTime=0xcbbb880, ftLastWriteTime.dwHighDateTime=0x1d2e621, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="{F8CFEB22-A2E7-3971-9EDA-4B11EDEFC185}v12.0.21005", cAlternateFileName="{F8CFE~1.210")) returned 1 [0065.171] FindNextFileW (in: hFindFile=0x5107aa0, lpFindFileData=0x31e5e4 | out: lpFindFileData=0x31e5e4*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0065.171] FindClose (in: hFindFile=0x5107aa0 | out: hFindFile=0x5107aa0) returned 1 [0065.172] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Package Cache\\42D5BEC7DDFBD49E76467529CBC2868987BF8460", nBufferLength=0x105, lpBuffer=0x31e33c, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Package Cache\\42D5BEC7DDFBD49E76467529CBC2868987BF8460", lpFilePart=0x0) returned 0x45 [0065.172] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Package Cache\\42D5BEC7DDFBD49E76467529CBC2868987BF8460\\", nBufferLength=0x105, lpBuffer=0x31e310, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Package Cache\\42D5BEC7DDFBD49E76467529CBC2868987BF8460\\", lpFilePart=0x0) returned 0x46 [0065.172] FindFirstFileW (in: lpFileName="C:\\ProgramData\\Package Cache\\42D5BEC7DDFBD49E76467529CBC2868987BF8460\\*", lpFindFileData=0x31e55c | out: lpFindFileData=0x31e55c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x2924cac0, ftCreationTime.dwHighDateTime=0x1d2e621, ftLastAccessTime.dwLowDateTime=0x29272c20, ftLastAccessTime.dwHighDateTime=0x1d2e621, ftLastWriteTime.dwLowDateTime=0x29272c20, ftLastWriteTime.dwHighDateTime=0x1d2e621, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5107aa0 [0065.173] FindNextFileW (in: hFindFile=0x5107aa0, lpFindFileData=0x31e56c | out: lpFindFileData=0x31e56c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x2924cac0, ftCreationTime.dwHighDateTime=0x1d2e621, ftLastAccessTime.dwLowDateTime=0x29272c20, ftLastAccessTime.dwHighDateTime=0x1d2e621, ftLastWriteTime.dwLowDateTime=0x29272c20, ftLastWriteTime.dwHighDateTime=0x1d2e621, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0065.173] FindNextFileW (in: hFindFile=0x5107aa0, lpFindFileData=0x31e56c | out: lpFindFileData=0x31e56c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x29272c20, ftCreationTime.dwHighDateTime=0x1d2e621, ftLastAccessTime.dwLowDateTime=0x29272c20, ftLastAccessTime.dwHighDateTime=0x1d2e621, ftLastWriteTime.dwLowDateTime=0x29272c20, ftLastWriteTime.dwHighDateTime=0x1d2e621, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="packages", cAlternateFileName="")) returned 1 [0065.173] FindNextFileW (in: hFindFile=0x5107aa0, lpFindFileData=0x31e56c | out: lpFindFileData=0x31e56c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x29272c20, ftCreationTime.dwHighDateTime=0x1d2e621, ftLastAccessTime.dwLowDateTime=0x29272c20, ftLastAccessTime.dwHighDateTime=0x1d2e621, ftLastWriteTime.dwLowDateTime=0x29272c20, ftLastWriteTime.dwHighDateTime=0x1d2e621, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="packages", cAlternateFileName="")) returned 0 [0065.173] FindClose (in: hFindFile=0x5107aa0 | out: hFindFile=0x5107aa0) returned 1 [0065.173] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Package Cache\\42D5BEC7DDFBD49E76467529CBC2868987BF8460", nBufferLength=0x105, lpBuffer=0x31e33c, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Package Cache\\42D5BEC7DDFBD49E76467529CBC2868987BF8460", lpFilePart=0x0) returned 0x45 [0065.173] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Package Cache\\42D5BEC7DDFBD49E76467529CBC2868987BF8460\\", nBufferLength=0x105, lpBuffer=0x31e310, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Package Cache\\42D5BEC7DDFBD49E76467529CBC2868987BF8460\\", lpFilePart=0x0) returned 0x46 [0065.173] FindFirstFileW (in: lpFileName="C:\\ProgramData\\Package Cache\\42D5BEC7DDFBD49E76467529CBC2868987BF8460\\*", lpFindFileData=0x31e55c | out: lpFindFileData=0x31e55c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x2924cac0, ftCreationTime.dwHighDateTime=0x1d2e621, ftLastAccessTime.dwLowDateTime=0x29272c20, ftLastAccessTime.dwHighDateTime=0x1d2e621, ftLastWriteTime.dwLowDateTime=0x29272c20, ftLastWriteTime.dwHighDateTime=0x1d2e621, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5107aa0 [0065.174] FindNextFileW (in: hFindFile=0x5107aa0, lpFindFileData=0x31e56c | out: lpFindFileData=0x31e56c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x2924cac0, ftCreationTime.dwHighDateTime=0x1d2e621, ftLastAccessTime.dwLowDateTime=0x29272c20, ftLastAccessTime.dwHighDateTime=0x1d2e621, ftLastWriteTime.dwLowDateTime=0x29272c20, ftLastWriteTime.dwHighDateTime=0x1d2e621, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0065.174] FindNextFileW (in: hFindFile=0x5107aa0, lpFindFileData=0x31e56c | out: lpFindFileData=0x31e56c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x29272c20, ftCreationTime.dwHighDateTime=0x1d2e621, ftLastAccessTime.dwLowDateTime=0x29272c20, ftLastAccessTime.dwHighDateTime=0x1d2e621, ftLastWriteTime.dwLowDateTime=0x29272c20, ftLastWriteTime.dwHighDateTime=0x1d2e621, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="packages", cAlternateFileName="")) returned 1 [0065.174] FindNextFileW (in: hFindFile=0x5107aa0, lpFindFileData=0x31e56c | out: lpFindFileData=0x31e56c*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0065.174] FindClose (in: hFindFile=0x5107aa0 | out: hFindFile=0x5107aa0) returned 1 [0065.174] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Package Cache\\42D5BEC7DDFBD49E76467529CBC2868987BF8460\\packages", nBufferLength=0x105, lpBuffer=0x31e2c4, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Package Cache\\42D5BEC7DDFBD49E76467529CBC2868987BF8460\\packages", lpFilePart=0x0) returned 0x4e [0065.174] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Package Cache\\42D5BEC7DDFBD49E76467529CBC2868987BF8460\\packages\\", nBufferLength=0x105, lpBuffer=0x31e298, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Package Cache\\42D5BEC7DDFBD49E76467529CBC2868987BF8460\\packages\\", lpFilePart=0x0) returned 0x4f [0065.174] FindFirstFileW (in: lpFileName="C:\\ProgramData\\Package Cache\\42D5BEC7DDFBD49E76467529CBC2868987BF8460\\packages\\*", lpFindFileData=0x31e4e4 | out: lpFindFileData=0x31e4e4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x29272c20, ftCreationTime.dwHighDateTime=0x1d2e621, ftLastAccessTime.dwLowDateTime=0x29272c20, ftLastAccessTime.dwHighDateTime=0x1d2e621, ftLastWriteTime.dwLowDateTime=0x29272c20, ftLastWriteTime.dwHighDateTime=0x1d2e621, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5107aa0 [0065.174] FindNextFileW (in: hFindFile=0x5107aa0, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x29272c20, ftCreationTime.dwHighDateTime=0x1d2e621, ftLastAccessTime.dwLowDateTime=0x29272c20, ftLastAccessTime.dwHighDateTime=0x1d2e621, ftLastWriteTime.dwLowDateTime=0x29272c20, ftLastWriteTime.dwHighDateTime=0x1d2e621, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0065.175] FindNextFileW (in: hFindFile=0x5107aa0, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x29272c20, ftCreationTime.dwHighDateTime=0x1d2e621, ftLastAccessTime.dwLowDateTime=0x29272c20, ftLastAccessTime.dwHighDateTime=0x1d2e621, ftLastWriteTime.dwLowDateTime=0x29272c20, ftLastWriteTime.dwHighDateTime=0x1d2e621, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Patch", cAlternateFileName="")) returned 1 [0065.175] FindNextFileW (in: hFindFile=0x5107aa0, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x29272c20, ftCreationTime.dwHighDateTime=0x1d2e621, ftLastAccessTime.dwLowDateTime=0x29272c20, ftLastAccessTime.dwHighDateTime=0x1d2e621, ftLastWriteTime.dwLowDateTime=0x29272c20, ftLastWriteTime.dwHighDateTime=0x1d2e621, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Patch", cAlternateFileName="")) returned 0 [0065.175] FindClose (in: hFindFile=0x5107aa0 | out: hFindFile=0x5107aa0) returned 1 [0065.175] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Package Cache\\42D5BEC7DDFBD49E76467529CBC2868987BF8460\\packages", nBufferLength=0x105, lpBuffer=0x31e2c4, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Package Cache\\42D5BEC7DDFBD49E76467529CBC2868987BF8460\\packages", lpFilePart=0x0) returned 0x4e [0065.175] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Package Cache\\42D5BEC7DDFBD49E76467529CBC2868987BF8460\\packages\\", nBufferLength=0x105, lpBuffer=0x31e298, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Package Cache\\42D5BEC7DDFBD49E76467529CBC2868987BF8460\\packages\\", lpFilePart=0x0) returned 0x4f [0065.175] FindFirstFileW (in: lpFileName="C:\\ProgramData\\Package Cache\\42D5BEC7DDFBD49E76467529CBC2868987BF8460\\packages\\*", lpFindFileData=0x31e4e4 | out: lpFindFileData=0x31e4e4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x29272c20, ftCreationTime.dwHighDateTime=0x1d2e621, ftLastAccessTime.dwLowDateTime=0x29272c20, ftLastAccessTime.dwHighDateTime=0x1d2e621, ftLastWriteTime.dwLowDateTime=0x29272c20, ftLastWriteTime.dwHighDateTime=0x1d2e621, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5107aa0 [0065.175] FindNextFileW (in: hFindFile=0x5107aa0, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x29272c20, ftCreationTime.dwHighDateTime=0x1d2e621, ftLastAccessTime.dwLowDateTime=0x29272c20, ftLastAccessTime.dwHighDateTime=0x1d2e621, ftLastWriteTime.dwLowDateTime=0x29272c20, ftLastWriteTime.dwHighDateTime=0x1d2e621, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0065.175] FindNextFileW (in: hFindFile=0x5107aa0, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x29272c20, ftCreationTime.dwHighDateTime=0x1d2e621, ftLastAccessTime.dwLowDateTime=0x29272c20, ftLastAccessTime.dwHighDateTime=0x1d2e621, ftLastWriteTime.dwLowDateTime=0x29272c20, ftLastWriteTime.dwHighDateTime=0x1d2e621, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Patch", cAlternateFileName="")) returned 1 [0065.175] FindNextFileW (in: hFindFile=0x5107aa0, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0065.175] FindClose (in: hFindFile=0x5107aa0 | out: hFindFile=0x5107aa0) returned 1 [0065.175] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Package Cache\\42D5BEC7DDFBD49E76467529CBC2868987BF8460\\packages\\Patch", nBufferLength=0x105, lpBuffer=0x31e24c, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Package Cache\\42D5BEC7DDFBD49E76467529CBC2868987BF8460\\packages\\Patch", lpFilePart=0x0) returned 0x54 [0065.176] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Package Cache\\42D5BEC7DDFBD49E76467529CBC2868987BF8460\\packages\\Patch\\", nBufferLength=0x105, lpBuffer=0x31e220, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Package Cache\\42D5BEC7DDFBD49E76467529CBC2868987BF8460\\packages\\Patch\\", lpFilePart=0x0) returned 0x55 [0065.176] FindFirstFileW (in: lpFileName="C:\\ProgramData\\Package Cache\\42D5BEC7DDFBD49E76467529CBC2868987BF8460\\packages\\Patch\\*", lpFindFileData=0x31e46c | out: lpFindFileData=0x31e46c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x29272c20, ftCreationTime.dwHighDateTime=0x1d2e621, ftLastAccessTime.dwLowDateTime=0x29272c20, ftLastAccessTime.dwHighDateTime=0x1d2e621, ftLastWriteTime.dwLowDateTime=0x29272c20, ftLastWriteTime.dwHighDateTime=0x1d2e621, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5107aa0 [0065.176] FindNextFileW (in: hFindFile=0x5107aa0, lpFindFileData=0x31e47c | out: lpFindFileData=0x31e47c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x29272c20, ftCreationTime.dwHighDateTime=0x1d2e621, ftLastAccessTime.dwLowDateTime=0x29272c20, ftLastAccessTime.dwHighDateTime=0x1d2e621, ftLastWriteTime.dwLowDateTime=0x29272c20, ftLastWriteTime.dwHighDateTime=0x1d2e621, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0065.176] FindNextFileW (in: hFindFile=0x5107aa0, lpFindFileData=0x31e47c | out: lpFindFileData=0x31e47c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x29272c20, ftCreationTime.dwHighDateTime=0x1d2e621, ftLastAccessTime.dwLowDateTime=0x29272c20, ftLastAccessTime.dwHighDateTime=0x1d2e621, ftLastWriteTime.dwLowDateTime=0x29272c20, ftLastWriteTime.dwHighDateTime=0x1d2e621, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="x64", cAlternateFileName="")) returned 1 [0065.176] FindNextFileW (in: hFindFile=0x5107aa0, lpFindFileData=0x31e47c | out: lpFindFileData=0x31e47c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x29272c20, ftCreationTime.dwHighDateTime=0x1d2e621, ftLastAccessTime.dwLowDateTime=0x29272c20, ftLastAccessTime.dwHighDateTime=0x1d2e621, ftLastWriteTime.dwLowDateTime=0x29272c20, ftLastWriteTime.dwHighDateTime=0x1d2e621, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="x64", cAlternateFileName="")) returned 0 [0065.176] FindClose (in: hFindFile=0x5107aa0 | out: hFindFile=0x5107aa0) returned 1 [0065.179] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Package Cache\\42D5BEC7DDFBD49E76467529CBC2868987BF8460\\packages\\Patch", nBufferLength=0x105, lpBuffer=0x31e24c, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Package Cache\\42D5BEC7DDFBD49E76467529CBC2868987BF8460\\packages\\Patch", lpFilePart=0x0) returned 0x54 [0065.179] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Package Cache\\42D5BEC7DDFBD49E76467529CBC2868987BF8460\\packages\\Patch\\", nBufferLength=0x105, lpBuffer=0x31e220, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Package Cache\\42D5BEC7DDFBD49E76467529CBC2868987BF8460\\packages\\Patch\\", lpFilePart=0x0) returned 0x55 [0065.179] FindFirstFileW (in: lpFileName="C:\\ProgramData\\Package Cache\\42D5BEC7DDFBD49E76467529CBC2868987BF8460\\packages\\Patch\\*", lpFindFileData=0x31e46c | out: lpFindFileData=0x31e46c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x29272c20, ftCreationTime.dwHighDateTime=0x1d2e621, ftLastAccessTime.dwLowDateTime=0x29272c20, ftLastAccessTime.dwHighDateTime=0x1d2e621, ftLastWriteTime.dwLowDateTime=0x29272c20, ftLastWriteTime.dwHighDateTime=0x1d2e621, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5107aa0 [0065.179] FindNextFileW (in: hFindFile=0x5107aa0, lpFindFileData=0x31e47c | out: lpFindFileData=0x31e47c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x29272c20, ftCreationTime.dwHighDateTime=0x1d2e621, ftLastAccessTime.dwLowDateTime=0x29272c20, ftLastAccessTime.dwHighDateTime=0x1d2e621, ftLastWriteTime.dwLowDateTime=0x29272c20, ftLastWriteTime.dwHighDateTime=0x1d2e621, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0065.180] FindNextFileW (in: hFindFile=0x5107aa0, lpFindFileData=0x31e47c | out: lpFindFileData=0x31e47c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x29272c20, ftCreationTime.dwHighDateTime=0x1d2e621, ftLastAccessTime.dwLowDateTime=0x29272c20, ftLastAccessTime.dwHighDateTime=0x1d2e621, ftLastWriteTime.dwLowDateTime=0x29272c20, ftLastWriteTime.dwHighDateTime=0x1d2e621, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="x64", cAlternateFileName="")) returned 1 [0065.180] FindNextFileW (in: hFindFile=0x5107aa0, lpFindFileData=0x31e47c | out: lpFindFileData=0x31e47c*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0065.180] FindClose (in: hFindFile=0x5107aa0 | out: hFindFile=0x5107aa0) returned 1 [0065.180] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Package Cache\\42D5BEC7DDFBD49E76467529CBC2868987BF8460\\packages\\Patch\\x64", nBufferLength=0x105, lpBuffer=0x31e1d4, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Package Cache\\42D5BEC7DDFBD49E76467529CBC2868987BF8460\\packages\\Patch\\x64", lpFilePart=0x0) returned 0x58 [0065.180] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Package Cache\\42D5BEC7DDFBD49E76467529CBC2868987BF8460\\packages\\Patch\\x64\\", nBufferLength=0x105, lpBuffer=0x31e1a8, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Package Cache\\42D5BEC7DDFBD49E76467529CBC2868987BF8460\\packages\\Patch\\x64\\", lpFilePart=0x0) returned 0x59 [0065.180] FindFirstFileW (in: lpFileName="C:\\ProgramData\\Package Cache\\42D5BEC7DDFBD49E76467529CBC2868987BF8460\\packages\\Patch\\x64\\*", lpFindFileData=0x31e3f4 | out: lpFindFileData=0x31e3f4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x29272c20, ftCreationTime.dwHighDateTime=0x1d2e621, ftLastAccessTime.dwLowDateTime=0x29272c20, ftLastAccessTime.dwHighDateTime=0x1d2e621, ftLastWriteTime.dwLowDateTime=0x29272c20, ftLastWriteTime.dwHighDateTime=0x1d2e621, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5107aa0 [0065.180] FindNextFileW (in: hFindFile=0x5107aa0, lpFindFileData=0x31e404 | out: lpFindFileData=0x31e404*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x29272c20, ftCreationTime.dwHighDateTime=0x1d2e621, ftLastAccessTime.dwLowDateTime=0x29272c20, ftLastAccessTime.dwHighDateTime=0x1d2e621, ftLastWriteTime.dwLowDateTime=0x29272c20, ftLastWriteTime.dwHighDateTime=0x1d2e621, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0065.180] FindNextFileW (in: hFindFile=0x5107aa0, lpFindFileData=0x31e404 | out: lpFindFileData=0x31e404*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x59d2100, ftCreationTime.dwHighDateTime=0x1d0a100, ftLastAccessTime.dwLowDateTime=0x59d2100, ftLastAccessTime.dwHighDateTime=0x1d0a100, ftLastWriteTime.dwLowDateTime=0x59d2100, ftLastWriteTime.dwHighDateTime=0x1d0a100, nFileSizeHigh=0x0, nFileSizeLow=0xf7139, dwReserved0=0x0, dwReserved1=0x0, cFileName="Windows6.1-KB2999226-x64.msu", cAlternateFileName="WINDOW~1.MSU")) returned 1 [0065.180] FindNextFileW (in: hFindFile=0x5107aa0, lpFindFileData=0x31e404 | out: lpFindFileData=0x31e404*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0065.180] FindClose (in: hFindFile=0x5107aa0 | out: hFindFile=0x5107aa0) returned 1 [0065.180] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Package Cache\\42D5BEC7DDFBD49E76467529CBC2868987BF8460\\packages\\Patch\\x64", nBufferLength=0x105, lpBuffer=0x31e1d4, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Package Cache\\42D5BEC7DDFBD49E76467529CBC2868987BF8460\\packages\\Patch\\x64", lpFilePart=0x0) returned 0x58 [0065.180] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Package Cache\\42D5BEC7DDFBD49E76467529CBC2868987BF8460\\packages\\Patch\\x64\\", nBufferLength=0x105, lpBuffer=0x31e1a8, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Package Cache\\42D5BEC7DDFBD49E76467529CBC2868987BF8460\\packages\\Patch\\x64\\", lpFilePart=0x0) returned 0x59 [0065.180] FindFirstFileW (in: lpFileName="C:\\ProgramData\\Package Cache\\42D5BEC7DDFBD49E76467529CBC2868987BF8460\\packages\\Patch\\x64\\*", lpFindFileData=0x31e3f4 | out: lpFindFileData=0x31e3f4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x29272c20, ftCreationTime.dwHighDateTime=0x1d2e621, ftLastAccessTime.dwLowDateTime=0x29272c20, ftLastAccessTime.dwHighDateTime=0x1d2e621, ftLastWriteTime.dwLowDateTime=0x29272c20, ftLastWriteTime.dwHighDateTime=0x1d2e621, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5107aa0 [0065.181] FindNextFileW (in: hFindFile=0x5107aa0, lpFindFileData=0x31e404 | out: lpFindFileData=0x31e404*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x29272c20, ftCreationTime.dwHighDateTime=0x1d2e621, ftLastAccessTime.dwLowDateTime=0x29272c20, ftLastAccessTime.dwHighDateTime=0x1d2e621, ftLastWriteTime.dwLowDateTime=0x29272c20, ftLastWriteTime.dwHighDateTime=0x1d2e621, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0065.181] FindNextFileW (in: hFindFile=0x5107aa0, lpFindFileData=0x31e404 | out: lpFindFileData=0x31e404*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x59d2100, ftCreationTime.dwHighDateTime=0x1d0a100, ftLastAccessTime.dwLowDateTime=0x59d2100, ftLastAccessTime.dwHighDateTime=0x1d0a100, ftLastWriteTime.dwLowDateTime=0x59d2100, ftLastWriteTime.dwHighDateTime=0x1d0a100, nFileSizeHigh=0x0, nFileSizeLow=0xf7139, dwReserved0=0x0, dwReserved1=0x0, cFileName="Windows6.1-KB2999226-x64.msu", cAlternateFileName="WINDOW~1.MSU")) returned 1 [0065.181] FindNextFileW (in: hFindFile=0x5107aa0, lpFindFileData=0x31e404 | out: lpFindFileData=0x31e404*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x59d2100, ftCreationTime.dwHighDateTime=0x1d0a100, ftLastAccessTime.dwLowDateTime=0x59d2100, ftLastAccessTime.dwHighDateTime=0x1d0a100, ftLastWriteTime.dwLowDateTime=0x59d2100, ftLastWriteTime.dwHighDateTime=0x1d0a100, nFileSizeHigh=0x0, nFileSizeLow=0xf7139, dwReserved0=0x0, dwReserved1=0x0, cFileName="Windows6.1-KB2999226-x64.msu", cAlternateFileName="WINDOW~1.MSU")) returned 0 [0065.181] FindClose (in: hFindFile=0x5107aa0 | out: hFindFile=0x5107aa0) returned 1 [0065.181] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Package Cache\\54050A5F8AE7F0C56E553F0090146C17A1D2BF8D", nBufferLength=0x105, lpBuffer=0x31e33c, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Package Cache\\54050A5F8AE7F0C56E553F0090146C17A1D2BF8D", lpFilePart=0x0) returned 0x45 [0065.181] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Package Cache\\54050A5F8AE7F0C56E553F0090146C17A1D2BF8D\\", nBufferLength=0x105, lpBuffer=0x31e310, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Package Cache\\54050A5F8AE7F0C56E553F0090146C17A1D2BF8D\\", lpFilePart=0x0) returned 0x46 [0065.181] FindFirstFileW (in: lpFileName="C:\\ProgramData\\Package Cache\\54050A5F8AE7F0C56E553F0090146C17A1D2BF8D\\*", lpFindFileData=0x31e55c | out: lpFindFileData=0x31e55c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa938e870, ftCreationTime.dwHighDateTime=0x1d2fab4, ftLastAccessTime.dwLowDateTime=0xa989d730, ftLastAccessTime.dwHighDateTime=0x1d2fab4, ftLastWriteTime.dwLowDateTime=0xa989d730, ftLastWriteTime.dwHighDateTime=0x1d2fab4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5107aa0 [0065.182] FindNextFileW (in: hFindFile=0x5107aa0, lpFindFileData=0x31e56c | out: lpFindFileData=0x31e56c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa938e870, ftCreationTime.dwHighDateTime=0x1d2fab4, ftLastAccessTime.dwLowDateTime=0xa989d730, ftLastAccessTime.dwHighDateTime=0x1d2fab4, ftLastWriteTime.dwLowDateTime=0xa989d730, ftLastWriteTime.dwHighDateTime=0x1d2fab4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0065.182] FindNextFileW (in: hFindFile=0x5107aa0, lpFindFileData=0x31e56c | out: lpFindFileData=0x31e56c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa989d730, ftCreationTime.dwHighDateTime=0x1d2fab4, ftLastAccessTime.dwLowDateTime=0xa989d730, ftLastAccessTime.dwHighDateTime=0x1d2fab4, ftLastWriteTime.dwLowDateTime=0xa989d730, ftLastWriteTime.dwHighDateTime=0x1d2fab4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="packages", cAlternateFileName="")) returned 1 [0065.182] FindNextFileW (in: hFindFile=0x5107aa0, lpFindFileData=0x31e56c | out: lpFindFileData=0x31e56c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa989d730, ftCreationTime.dwHighDateTime=0x1d2fab4, ftLastAccessTime.dwLowDateTime=0xa989d730, ftLastAccessTime.dwHighDateTime=0x1d2fab4, ftLastWriteTime.dwLowDateTime=0xa989d730, ftLastWriteTime.dwHighDateTime=0x1d2fab4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="packages", cAlternateFileName="")) returned 0 [0065.182] FindClose (in: hFindFile=0x5107aa0 | out: hFindFile=0x5107aa0) returned 1 [0065.182] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Package Cache\\54050A5F8AE7F0C56E553F0090146C17A1D2BF8D", nBufferLength=0x105, lpBuffer=0x31e33c, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Package Cache\\54050A5F8AE7F0C56E553F0090146C17A1D2BF8D", lpFilePart=0x0) returned 0x45 [0065.182] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Package Cache\\54050A5F8AE7F0C56E553F0090146C17A1D2BF8D\\", nBufferLength=0x105, lpBuffer=0x31e310, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Package Cache\\54050A5F8AE7F0C56E553F0090146C17A1D2BF8D\\", lpFilePart=0x0) returned 0x46 [0065.182] FindFirstFileW (in: lpFileName="C:\\ProgramData\\Package Cache\\54050A5F8AE7F0C56E553F0090146C17A1D2BF8D\\*", lpFindFileData=0x31e55c | out: lpFindFileData=0x31e55c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa938e870, ftCreationTime.dwHighDateTime=0x1d2fab4, ftLastAccessTime.dwLowDateTime=0xa989d730, ftLastAccessTime.dwHighDateTime=0x1d2fab4, ftLastWriteTime.dwLowDateTime=0xa989d730, ftLastWriteTime.dwHighDateTime=0x1d2fab4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5107aa0 [0065.182] FindNextFileW (in: hFindFile=0x5107aa0, lpFindFileData=0x31e56c | out: lpFindFileData=0x31e56c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa938e870, ftCreationTime.dwHighDateTime=0x1d2fab4, ftLastAccessTime.dwLowDateTime=0xa989d730, ftLastAccessTime.dwHighDateTime=0x1d2fab4, ftLastWriteTime.dwLowDateTime=0xa989d730, ftLastWriteTime.dwHighDateTime=0x1d2fab4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0065.183] FindNextFileW (in: hFindFile=0x5107aa0, lpFindFileData=0x31e56c | out: lpFindFileData=0x31e56c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa989d730, ftCreationTime.dwHighDateTime=0x1d2fab4, ftLastAccessTime.dwLowDateTime=0xa989d730, ftLastAccessTime.dwHighDateTime=0x1d2fab4, ftLastWriteTime.dwLowDateTime=0xa989d730, ftLastWriteTime.dwHighDateTime=0x1d2fab4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="packages", cAlternateFileName="")) returned 1 [0065.183] FindNextFileW (in: hFindFile=0x5107aa0, lpFindFileData=0x31e56c | out: lpFindFileData=0x31e56c*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0065.183] FindClose (in: hFindFile=0x5107aa0 | out: hFindFile=0x5107aa0) returned 1 [0065.183] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Package Cache\\54050A5F8AE7F0C56E553F0090146C17A1D2BF8D\\packages", nBufferLength=0x105, lpBuffer=0x31e2c4, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Package Cache\\54050A5F8AE7F0C56E553F0090146C17A1D2BF8D\\packages", lpFilePart=0x0) returned 0x4e [0065.183] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Package Cache\\54050A5F8AE7F0C56E553F0090146C17A1D2BF8D\\packages\\", nBufferLength=0x105, lpBuffer=0x31e298, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Package Cache\\54050A5F8AE7F0C56E553F0090146C17A1D2BF8D\\packages\\", lpFilePart=0x0) returned 0x4f [0065.183] FindFirstFileW (in: lpFileName="C:\\ProgramData\\Package Cache\\54050A5F8AE7F0C56E553F0090146C17A1D2BF8D\\packages\\*", lpFindFileData=0x31e4e4 | out: lpFindFileData=0x31e4e4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa989d730, ftCreationTime.dwHighDateTime=0x1d2fab4, ftLastAccessTime.dwLowDateTime=0xa989d730, ftLastAccessTime.dwHighDateTime=0x1d2fab4, ftLastWriteTime.dwLowDateTime=0xa989d730, ftLastWriteTime.dwHighDateTime=0x1d2fab4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5107aa0 [0065.183] FindNextFileW (in: hFindFile=0x5107aa0, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa989d730, ftCreationTime.dwHighDateTime=0x1d2fab4, ftLastAccessTime.dwLowDateTime=0xa989d730, ftLastAccessTime.dwHighDateTime=0x1d2fab4, ftLastWriteTime.dwLowDateTime=0xa989d730, ftLastWriteTime.dwHighDateTime=0x1d2fab4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0065.183] FindNextFileW (in: hFindFile=0x5107aa0, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa989d730, ftCreationTime.dwHighDateTime=0x1d2fab4, ftLastAccessTime.dwLowDateTime=0xa989d730, ftLastAccessTime.dwHighDateTime=0x1d2fab4, ftLastWriteTime.dwLowDateTime=0xa989d730, ftLastWriteTime.dwHighDateTime=0x1d2fab4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Patch", cAlternateFileName="")) returned 1 [0065.183] FindNextFileW (in: hFindFile=0x5107aa0, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa989d730, ftCreationTime.dwHighDateTime=0x1d2fab4, ftLastAccessTime.dwLowDateTime=0xa989d730, ftLastAccessTime.dwHighDateTime=0x1d2fab4, ftLastWriteTime.dwLowDateTime=0xa989d730, ftLastWriteTime.dwHighDateTime=0x1d2fab4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Patch", cAlternateFileName="")) returned 0 [0065.183] FindClose (in: hFindFile=0x5107aa0 | out: hFindFile=0x5107aa0) returned 1 [0065.183] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Package Cache\\54050A5F8AE7F0C56E553F0090146C17A1D2BF8D\\packages", nBufferLength=0x105, lpBuffer=0x31e2c4, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Package Cache\\54050A5F8AE7F0C56E553F0090146C17A1D2BF8D\\packages", lpFilePart=0x0) returned 0x4e [0065.183] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Package Cache\\54050A5F8AE7F0C56E553F0090146C17A1D2BF8D\\packages\\", nBufferLength=0x105, lpBuffer=0x31e298, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Package Cache\\54050A5F8AE7F0C56E553F0090146C17A1D2BF8D\\packages\\", lpFilePart=0x0) returned 0x4f [0065.184] FindFirstFileW (in: lpFileName="C:\\ProgramData\\Package Cache\\54050A5F8AE7F0C56E553F0090146C17A1D2BF8D\\packages\\*", lpFindFileData=0x31e4e4 | out: lpFindFileData=0x31e4e4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa989d730, ftCreationTime.dwHighDateTime=0x1d2fab4, ftLastAccessTime.dwLowDateTime=0xa989d730, ftLastAccessTime.dwHighDateTime=0x1d2fab4, ftLastWriteTime.dwLowDateTime=0xa989d730, ftLastWriteTime.dwHighDateTime=0x1d2fab4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5107aa0 [0065.184] FindNextFileW (in: hFindFile=0x5107aa0, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa989d730, ftCreationTime.dwHighDateTime=0x1d2fab4, ftLastAccessTime.dwLowDateTime=0xa989d730, ftLastAccessTime.dwHighDateTime=0x1d2fab4, ftLastWriteTime.dwLowDateTime=0xa989d730, ftLastWriteTime.dwHighDateTime=0x1d2fab4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0065.184] FindNextFileW (in: hFindFile=0x5107aa0, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa989d730, ftCreationTime.dwHighDateTime=0x1d2fab4, ftLastAccessTime.dwLowDateTime=0xa989d730, ftLastAccessTime.dwHighDateTime=0x1d2fab4, ftLastWriteTime.dwLowDateTime=0xa989d730, ftLastWriteTime.dwHighDateTime=0x1d2fab4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Patch", cAlternateFileName="")) returned 1 [0065.184] FindNextFileW (in: hFindFile=0x5107aa0, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0065.184] FindClose (in: hFindFile=0x5107aa0 | out: hFindFile=0x5107aa0) returned 1 [0065.184] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Package Cache\\54050A5F8AE7F0C56E553F0090146C17A1D2BF8D\\packages\\Patch", nBufferLength=0x105, lpBuffer=0x31e24c, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Package Cache\\54050A5F8AE7F0C56E553F0090146C17A1D2BF8D\\packages\\Patch", lpFilePart=0x0) returned 0x54 [0065.184] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Package Cache\\54050A5F8AE7F0C56E553F0090146C17A1D2BF8D\\packages\\Patch\\", nBufferLength=0x105, lpBuffer=0x31e220, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Package Cache\\54050A5F8AE7F0C56E553F0090146C17A1D2BF8D\\packages\\Patch\\", lpFilePart=0x0) returned 0x55 [0065.184] FindFirstFileW (in: lpFileName="C:\\ProgramData\\Package Cache\\54050A5F8AE7F0C56E553F0090146C17A1D2BF8D\\packages\\Patch\\*", lpFindFileData=0x31e46c | out: lpFindFileData=0x31e46c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa989d730, ftCreationTime.dwHighDateTime=0x1d2fab4, ftLastAccessTime.dwLowDateTime=0xa989d730, ftLastAccessTime.dwHighDateTime=0x1d2fab4, ftLastWriteTime.dwLowDateTime=0xa989d730, ftLastWriteTime.dwHighDateTime=0x1d2fab4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5107aa0 [0065.185] FindNextFileW (in: hFindFile=0x5107aa0, lpFindFileData=0x31e47c | out: lpFindFileData=0x31e47c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa989d730, ftCreationTime.dwHighDateTime=0x1d2fab4, ftLastAccessTime.dwLowDateTime=0xa989d730, ftLastAccessTime.dwHighDateTime=0x1d2fab4, ftLastWriteTime.dwLowDateTime=0xa989d730, ftLastWriteTime.dwHighDateTime=0x1d2fab4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0065.185] FindNextFileW (in: hFindFile=0x5107aa0, lpFindFileData=0x31e47c | out: lpFindFileData=0x31e47c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa989d730, ftCreationTime.dwHighDateTime=0x1d2fab4, ftLastAccessTime.dwLowDateTime=0xa989d730, ftLastAccessTime.dwHighDateTime=0x1d2fab4, ftLastWriteTime.dwLowDateTime=0xa989d730, ftLastWriteTime.dwHighDateTime=0x1d2fab4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="x64", cAlternateFileName="")) returned 1 [0065.185] FindNextFileW (in: hFindFile=0x5107aa0, lpFindFileData=0x31e47c | out: lpFindFileData=0x31e47c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa989d730, ftCreationTime.dwHighDateTime=0x1d2fab4, ftLastAccessTime.dwLowDateTime=0xa989d730, ftLastAccessTime.dwHighDateTime=0x1d2fab4, ftLastWriteTime.dwLowDateTime=0xa989d730, ftLastWriteTime.dwHighDateTime=0x1d2fab4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="x64", cAlternateFileName="")) returned 0 [0065.185] FindClose (in: hFindFile=0x5107aa0 | out: hFindFile=0x5107aa0) returned 1 [0065.185] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Package Cache\\54050A5F8AE7F0C56E553F0090146C17A1D2BF8D\\packages\\Patch", nBufferLength=0x105, lpBuffer=0x31e24c, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Package Cache\\54050A5F8AE7F0C56E553F0090146C17A1D2BF8D\\packages\\Patch", lpFilePart=0x0) returned 0x54 [0065.185] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Package Cache\\54050A5F8AE7F0C56E553F0090146C17A1D2BF8D\\packages\\Patch\\", nBufferLength=0x105, lpBuffer=0x31e220, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Package Cache\\54050A5F8AE7F0C56E553F0090146C17A1D2BF8D\\packages\\Patch\\", lpFilePart=0x0) returned 0x55 [0065.185] FindFirstFileW (in: lpFileName="C:\\ProgramData\\Package Cache\\54050A5F8AE7F0C56E553F0090146C17A1D2BF8D\\packages\\Patch\\*", lpFindFileData=0x31e46c | out: lpFindFileData=0x31e46c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa989d730, ftCreationTime.dwHighDateTime=0x1d2fab4, ftLastAccessTime.dwLowDateTime=0xa989d730, ftLastAccessTime.dwHighDateTime=0x1d2fab4, ftLastWriteTime.dwLowDateTime=0xa989d730, ftLastWriteTime.dwHighDateTime=0x1d2fab4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5107aa0 [0065.185] FindNextFileW (in: hFindFile=0x5107aa0, lpFindFileData=0x31e47c | out: lpFindFileData=0x31e47c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa989d730, ftCreationTime.dwHighDateTime=0x1d2fab4, ftLastAccessTime.dwLowDateTime=0xa989d730, ftLastAccessTime.dwHighDateTime=0x1d2fab4, ftLastWriteTime.dwLowDateTime=0xa989d730, ftLastWriteTime.dwHighDateTime=0x1d2fab4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0065.186] FindNextFileW (in: hFindFile=0x5107aa0, lpFindFileData=0x31e47c | out: lpFindFileData=0x31e47c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa989d730, ftCreationTime.dwHighDateTime=0x1d2fab4, ftLastAccessTime.dwLowDateTime=0xa989d730, ftLastAccessTime.dwHighDateTime=0x1d2fab4, ftLastWriteTime.dwLowDateTime=0xa989d730, ftLastWriteTime.dwHighDateTime=0x1d2fab4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="x64", cAlternateFileName="")) returned 1 [0065.186] FindNextFileW (in: hFindFile=0x5107aa0, lpFindFileData=0x31e47c | out: lpFindFileData=0x31e47c*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0065.186] FindClose (in: hFindFile=0x5107aa0 | out: hFindFile=0x5107aa0) returned 1 [0065.186] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Package Cache\\54050A5F8AE7F0C56E553F0090146C17A1D2BF8D\\packages\\Patch\\x64", nBufferLength=0x105, lpBuffer=0x31e1d4, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Package Cache\\54050A5F8AE7F0C56E553F0090146C17A1D2BF8D\\packages\\Patch\\x64", lpFilePart=0x0) returned 0x58 [0065.186] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Package Cache\\54050A5F8AE7F0C56E553F0090146C17A1D2BF8D\\packages\\Patch\\x64\\", nBufferLength=0x105, lpBuffer=0x31e1a8, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Package Cache\\54050A5F8AE7F0C56E553F0090146C17A1D2BF8D\\packages\\Patch\\x64\\", lpFilePart=0x0) returned 0x59 [0065.186] FindFirstFileW (in: lpFileName="C:\\ProgramData\\Package Cache\\54050A5F8AE7F0C56E553F0090146C17A1D2BF8D\\packages\\Patch\\x64\\*", lpFindFileData=0x31e3f4 | out: lpFindFileData=0x31e3f4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa989d730, ftCreationTime.dwHighDateTime=0x1d2fab4, ftLastAccessTime.dwLowDateTime=0xa989d730, ftLastAccessTime.dwHighDateTime=0x1d2fab4, ftLastWriteTime.dwLowDateTime=0xa989d730, ftLastWriteTime.dwHighDateTime=0x1d2fab4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5107aa0 [0065.186] FindNextFileW (in: hFindFile=0x5107aa0, lpFindFileData=0x31e404 | out: lpFindFileData=0x31e404*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa989d730, ftCreationTime.dwHighDateTime=0x1d2fab4, ftLastAccessTime.dwLowDateTime=0xa989d730, ftLastAccessTime.dwHighDateTime=0x1d2fab4, ftLastWriteTime.dwLowDateTime=0xa989d730, ftLastWriteTime.dwHighDateTime=0x1d2fab4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0065.186] FindNextFileW (in: hFindFile=0x5107aa0, lpFindFileData=0x31e404 | out: lpFindFileData=0x31e404*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9ab54b00, ftCreationTime.dwHighDateTime=0x1d1a02d, ftLastAccessTime.dwLowDateTime=0x9ab54b00, ftLastAccessTime.dwHighDateTime=0x1d1a02d, ftLastWriteTime.dwLowDateTime=0x9ab54b00, ftLastWriteTime.dwHighDateTime=0x1d1a02d, nFileSizeHigh=0x0, nFileSizeLow=0xfc93c, dwReserved0=0x0, dwReserved1=0x0, cFileName="Windows6.1-KB2999226-x64.msu", cAlternateFileName="WINDOW~1.MSU")) returned 1 [0065.186] FindNextFileW (in: hFindFile=0x5107aa0, lpFindFileData=0x31e404 | out: lpFindFileData=0x31e404*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0065.186] FindClose (in: hFindFile=0x5107aa0 | out: hFindFile=0x5107aa0) returned 1 [0065.186] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Package Cache\\54050A5F8AE7F0C56E553F0090146C17A1D2BF8D\\packages\\Patch\\x64", nBufferLength=0x105, lpBuffer=0x31e1d4, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Package Cache\\54050A5F8AE7F0C56E553F0090146C17A1D2BF8D\\packages\\Patch\\x64", lpFilePart=0x0) returned 0x58 [0065.186] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Package Cache\\54050A5F8AE7F0C56E553F0090146C17A1D2BF8D\\packages\\Patch\\x64\\", nBufferLength=0x105, lpBuffer=0x31e1a8, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Package Cache\\54050A5F8AE7F0C56E553F0090146C17A1D2BF8D\\packages\\Patch\\x64\\", lpFilePart=0x0) returned 0x59 [0065.186] FindFirstFileW (in: lpFileName="C:\\ProgramData\\Package Cache\\54050A5F8AE7F0C56E553F0090146C17A1D2BF8D\\packages\\Patch\\x64\\*", lpFindFileData=0x31e3f4 | out: lpFindFileData=0x31e3f4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa989d730, ftCreationTime.dwHighDateTime=0x1d2fab4, ftLastAccessTime.dwLowDateTime=0xa989d730, ftLastAccessTime.dwHighDateTime=0x1d2fab4, ftLastWriteTime.dwLowDateTime=0xa989d730, ftLastWriteTime.dwHighDateTime=0x1d2fab4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5107aa0 [0065.187] FindNextFileW (in: hFindFile=0x5107aa0, lpFindFileData=0x31e404 | out: lpFindFileData=0x31e404*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa989d730, ftCreationTime.dwHighDateTime=0x1d2fab4, ftLastAccessTime.dwLowDateTime=0xa989d730, ftLastAccessTime.dwHighDateTime=0x1d2fab4, ftLastWriteTime.dwLowDateTime=0xa989d730, ftLastWriteTime.dwHighDateTime=0x1d2fab4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0065.187] FindNextFileW (in: hFindFile=0x5107aa0, lpFindFileData=0x31e404 | out: lpFindFileData=0x31e404*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9ab54b00, ftCreationTime.dwHighDateTime=0x1d1a02d, ftLastAccessTime.dwLowDateTime=0x9ab54b00, ftLastAccessTime.dwHighDateTime=0x1d1a02d, ftLastWriteTime.dwLowDateTime=0x9ab54b00, ftLastWriteTime.dwHighDateTime=0x1d1a02d, nFileSizeHigh=0x0, nFileSizeLow=0xfc93c, dwReserved0=0x0, dwReserved1=0x0, cFileName="Windows6.1-KB2999226-x64.msu", cAlternateFileName="WINDOW~1.MSU")) returned 1 [0065.187] FindNextFileW (in: hFindFile=0x5107aa0, lpFindFileData=0x31e404 | out: lpFindFileData=0x31e404*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9ab54b00, ftCreationTime.dwHighDateTime=0x1d1a02d, ftLastAccessTime.dwLowDateTime=0x9ab54b00, ftLastAccessTime.dwHighDateTime=0x1d1a02d, ftLastWriteTime.dwLowDateTime=0x9ab54b00, ftLastWriteTime.dwHighDateTime=0x1d1a02d, nFileSizeHigh=0x0, nFileSizeLow=0xfc93c, dwReserved0=0x0, dwReserved1=0x0, cFileName="Windows6.1-KB2999226-x64.msu", cAlternateFileName="WINDOW~1.MSU")) returned 0 [0065.187] FindClose (in: hFindFile=0x5107aa0 | out: hFindFile=0x5107aa0) returned 1 [0065.187] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Package Cache\\{13A4EE12-23EA-3371-91EE-EFB36DDFFF3E}v12.0.21005", nBufferLength=0x105, lpBuffer=0x31e33c, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Package Cache\\{13A4EE12-23EA-3371-91EE-EFB36DDFFF3E}v12.0.21005", lpFilePart=0x0) returned 0x4e [0065.187] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Package Cache\\{13A4EE12-23EA-3371-91EE-EFB36DDFFF3E}v12.0.21005\\", nBufferLength=0x105, lpBuffer=0x31e310, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Package Cache\\{13A4EE12-23EA-3371-91EE-EFB36DDFFF3E}v12.0.21005\\", lpFilePart=0x0) returned 0x4f [0065.187] FindFirstFileW (in: lpFileName="C:\\ProgramData\\Package Cache\\{13A4EE12-23EA-3371-91EE-EFB36DDFFF3E}v12.0.21005\\*", lpFindFileData=0x31e55c | out: lpFindFileData=0x31e55c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xcb49460, ftCreationTime.dwHighDateTime=0x1d2e621, ftLastAccessTime.dwLowDateTime=0xcb95720, ftLastAccessTime.dwHighDateTime=0x1d2e621, ftLastWriteTime.dwLowDateTime=0xcb95720, ftLastWriteTime.dwHighDateTime=0x1d2e621, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5107aa0 [0065.187] FindNextFileW (in: hFindFile=0x5107aa0, lpFindFileData=0x31e56c | out: lpFindFileData=0x31e56c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xcb49460, ftCreationTime.dwHighDateTime=0x1d2e621, ftLastAccessTime.dwLowDateTime=0xcb95720, ftLastAccessTime.dwHighDateTime=0x1d2e621, ftLastWriteTime.dwLowDateTime=0xcb95720, ftLastWriteTime.dwHighDateTime=0x1d2e621, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0065.187] FindNextFileW (in: hFindFile=0x5107aa0, lpFindFileData=0x31e56c | out: lpFindFileData=0x31e56c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xcb95720, ftCreationTime.dwHighDateTime=0x1d2e621, ftLastAccessTime.dwLowDateTime=0xcb95720, ftLastAccessTime.dwHighDateTime=0x1d2e621, ftLastWriteTime.dwLowDateTime=0xcb95720, ftLastWriteTime.dwHighDateTime=0x1d2e621, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="packages", cAlternateFileName="")) returned 1 [0065.187] FindNextFileW (in: hFindFile=0x5107aa0, lpFindFileData=0x31e56c | out: lpFindFileData=0x31e56c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xcb95720, ftCreationTime.dwHighDateTime=0x1d2e621, ftLastAccessTime.dwLowDateTime=0xcb95720, ftLastAccessTime.dwHighDateTime=0x1d2e621, ftLastWriteTime.dwLowDateTime=0xcb95720, ftLastWriteTime.dwHighDateTime=0x1d2e621, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="packages", cAlternateFileName="")) returned 0 [0065.188] FindClose (in: hFindFile=0x5107aa0 | out: hFindFile=0x5107aa0) returned 1 [0065.188] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Package Cache\\{13A4EE12-23EA-3371-91EE-EFB36DDFFF3E}v12.0.21005", nBufferLength=0x105, lpBuffer=0x31e33c, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Package Cache\\{13A4EE12-23EA-3371-91EE-EFB36DDFFF3E}v12.0.21005", lpFilePart=0x0) returned 0x4e [0065.188] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Package Cache\\{13A4EE12-23EA-3371-91EE-EFB36DDFFF3E}v12.0.21005\\", nBufferLength=0x105, lpBuffer=0x31e310, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Package Cache\\{13A4EE12-23EA-3371-91EE-EFB36DDFFF3E}v12.0.21005\\", lpFilePart=0x0) returned 0x4f [0065.188] FindFirstFileW (in: lpFileName="C:\\ProgramData\\Package Cache\\{13A4EE12-23EA-3371-91EE-EFB36DDFFF3E}v12.0.21005\\*", lpFindFileData=0x31e55c | out: lpFindFileData=0x31e55c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xcb49460, ftCreationTime.dwHighDateTime=0x1d2e621, ftLastAccessTime.dwLowDateTime=0xcb95720, ftLastAccessTime.dwHighDateTime=0x1d2e621, ftLastWriteTime.dwLowDateTime=0xcb95720, ftLastWriteTime.dwHighDateTime=0x1d2e621, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5107aa0 [0065.188] FindNextFileW (in: hFindFile=0x5107aa0, lpFindFileData=0x31e56c | out: lpFindFileData=0x31e56c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xcb49460, ftCreationTime.dwHighDateTime=0x1d2e621, ftLastAccessTime.dwLowDateTime=0xcb95720, ftLastAccessTime.dwHighDateTime=0x1d2e621, ftLastWriteTime.dwLowDateTime=0xcb95720, ftLastWriteTime.dwHighDateTime=0x1d2e621, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0065.188] FindNextFileW (in: hFindFile=0x5107aa0, lpFindFileData=0x31e56c | out: lpFindFileData=0x31e56c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xcb95720, ftCreationTime.dwHighDateTime=0x1d2e621, ftLastAccessTime.dwLowDateTime=0xcb95720, ftLastAccessTime.dwHighDateTime=0x1d2e621, ftLastWriteTime.dwLowDateTime=0xcb95720, ftLastWriteTime.dwHighDateTime=0x1d2e621, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="packages", cAlternateFileName="")) returned 1 [0065.188] FindNextFileW (in: hFindFile=0x5107aa0, lpFindFileData=0x31e56c | out: lpFindFileData=0x31e56c*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0065.188] FindClose (in: hFindFile=0x5107aa0 | out: hFindFile=0x5107aa0) returned 1 [0065.188] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Package Cache\\{13A4EE12-23EA-3371-91EE-EFB36DDFFF3E}v12.0.21005\\packages", nBufferLength=0x105, lpBuffer=0x31e2c4, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Package Cache\\{13A4EE12-23EA-3371-91EE-EFB36DDFFF3E}v12.0.21005\\packages", lpFilePart=0x0) returned 0x57 [0065.188] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Package Cache\\{13A4EE12-23EA-3371-91EE-EFB36DDFFF3E}v12.0.21005\\packages\\", nBufferLength=0x105, lpBuffer=0x31e298, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Package Cache\\{13A4EE12-23EA-3371-91EE-EFB36DDFFF3E}v12.0.21005\\packages\\", lpFilePart=0x0) returned 0x58 [0065.188] FindFirstFileW (in: lpFileName="C:\\ProgramData\\Package Cache\\{13A4EE12-23EA-3371-91EE-EFB36DDFFF3E}v12.0.21005\\packages\\*", lpFindFileData=0x31e4e4 | out: lpFindFileData=0x31e4e4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xcb95720, ftCreationTime.dwHighDateTime=0x1d2e621, ftLastAccessTime.dwLowDateTime=0xcb95720, ftLastAccessTime.dwHighDateTime=0x1d2e621, ftLastWriteTime.dwLowDateTime=0xcb95720, ftLastWriteTime.dwHighDateTime=0x1d2e621, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5107aa0 [0065.189] FindNextFileW (in: hFindFile=0x5107aa0, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xcb95720, ftCreationTime.dwHighDateTime=0x1d2e621, ftLastAccessTime.dwLowDateTime=0xcb95720, ftLastAccessTime.dwHighDateTime=0x1d2e621, ftLastWriteTime.dwLowDateTime=0xcb95720, ftLastWriteTime.dwHighDateTime=0x1d2e621, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0065.189] FindNextFileW (in: hFindFile=0x5107aa0, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xcb95720, ftCreationTime.dwHighDateTime=0x1d2e621, ftLastAccessTime.dwLowDateTime=0xcbbb880, ftLastAccessTime.dwHighDateTime=0x1d2e621, ftLastWriteTime.dwLowDateTime=0xcbbb880, ftLastWriteTime.dwHighDateTime=0x1d2e621, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="vcRuntimeMinimum_x86", cAlternateFileName="VCRUNT~1")) returned 1 [0065.189] FindNextFileW (in: hFindFile=0x5107aa0, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xcb95720, ftCreationTime.dwHighDateTime=0x1d2e621, ftLastAccessTime.dwLowDateTime=0xcbbb880, ftLastAccessTime.dwHighDateTime=0x1d2e621, ftLastWriteTime.dwLowDateTime=0xcbbb880, ftLastWriteTime.dwHighDateTime=0x1d2e621, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="vcRuntimeMinimum_x86", cAlternateFileName="VCRUNT~1")) returned 0 [0065.189] FindClose (in: hFindFile=0x5107aa0 | out: hFindFile=0x5107aa0) returned 1 [0065.189] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Package Cache\\{13A4EE12-23EA-3371-91EE-EFB36DDFFF3E}v12.0.21005\\packages", nBufferLength=0x105, lpBuffer=0x31e2c4, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Package Cache\\{13A4EE12-23EA-3371-91EE-EFB36DDFFF3E}v12.0.21005\\packages", lpFilePart=0x0) returned 0x57 [0065.189] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Package Cache\\{13A4EE12-23EA-3371-91EE-EFB36DDFFF3E}v12.0.21005\\packages\\", nBufferLength=0x105, lpBuffer=0x31e298, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Package Cache\\{13A4EE12-23EA-3371-91EE-EFB36DDFFF3E}v12.0.21005\\packages\\", lpFilePart=0x0) returned 0x58 [0065.190] FindFirstFileW (in: lpFileName="C:\\ProgramData\\Package Cache\\{13A4EE12-23EA-3371-91EE-EFB36DDFFF3E}v12.0.21005\\packages\\*", lpFindFileData=0x31e4e4 | out: lpFindFileData=0x31e4e4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xcb95720, ftCreationTime.dwHighDateTime=0x1d2e621, ftLastAccessTime.dwLowDateTime=0xcb95720, ftLastAccessTime.dwHighDateTime=0x1d2e621, ftLastWriteTime.dwLowDateTime=0xcb95720, ftLastWriteTime.dwHighDateTime=0x1d2e621, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5107aa0 [0065.190] FindNextFileW (in: hFindFile=0x5107aa0, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xcb95720, ftCreationTime.dwHighDateTime=0x1d2e621, ftLastAccessTime.dwLowDateTime=0xcb95720, ftLastAccessTime.dwHighDateTime=0x1d2e621, ftLastWriteTime.dwLowDateTime=0xcb95720, ftLastWriteTime.dwHighDateTime=0x1d2e621, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0065.190] FindNextFileW (in: hFindFile=0x5107aa0, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xcb95720, ftCreationTime.dwHighDateTime=0x1d2e621, ftLastAccessTime.dwLowDateTime=0xcbbb880, ftLastAccessTime.dwHighDateTime=0x1d2e621, ftLastWriteTime.dwLowDateTime=0xcbbb880, ftLastWriteTime.dwHighDateTime=0x1d2e621, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="vcRuntimeMinimum_x86", cAlternateFileName="VCRUNT~1")) returned 1 [0065.190] FindNextFileW (in: hFindFile=0x5107aa0, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0065.190] FindClose (in: hFindFile=0x5107aa0 | out: hFindFile=0x5107aa0) returned 1 [0065.190] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Package Cache\\{13A4EE12-23EA-3371-91EE-EFB36DDFFF3E}v12.0.21005\\packages\\vcRuntimeMinimum_x86", nBufferLength=0x105, lpBuffer=0x31e24c, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Package Cache\\{13A4EE12-23EA-3371-91EE-EFB36DDFFF3E}v12.0.21005\\packages\\vcRuntimeMinimum_x86", lpFilePart=0x0) returned 0x6c [0065.190] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Package Cache\\{13A4EE12-23EA-3371-91EE-EFB36DDFFF3E}v12.0.21005\\packages\\vcRuntimeMinimum_x86\\", nBufferLength=0x105, lpBuffer=0x31e220, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Package Cache\\{13A4EE12-23EA-3371-91EE-EFB36DDFFF3E}v12.0.21005\\packages\\vcRuntimeMinimum_x86\\", lpFilePart=0x0) returned 0x6d [0065.190] FindFirstFileW (in: lpFileName="C:\\ProgramData\\Package Cache\\{13A4EE12-23EA-3371-91EE-EFB36DDFFF3E}v12.0.21005\\packages\\vcRuntimeMinimum_x86\\*", lpFindFileData=0x31e46c | out: lpFindFileData=0x31e46c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xcb95720, ftCreationTime.dwHighDateTime=0x1d2e621, ftLastAccessTime.dwLowDateTime=0xcbbb880, ftLastAccessTime.dwHighDateTime=0x1d2e621, ftLastWriteTime.dwLowDateTime=0xcbbb880, ftLastWriteTime.dwHighDateTime=0x1d2e621, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5107aa0 [0065.190] FindNextFileW (in: hFindFile=0x5107aa0, lpFindFileData=0x31e47c | out: lpFindFileData=0x31e47c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xcb95720, ftCreationTime.dwHighDateTime=0x1d2e621, ftLastAccessTime.dwLowDateTime=0xcbbb880, ftLastAccessTime.dwHighDateTime=0x1d2e621, ftLastWriteTime.dwLowDateTime=0xcbbb880, ftLastWriteTime.dwHighDateTime=0x1d2e621, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0065.190] FindNextFileW (in: hFindFile=0x5107aa0, lpFindFileData=0x31e47c | out: lpFindFileData=0x31e47c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x50cc6500, ftCreationTime.dwHighDateTime=0x1cf3dd3, ftLastAccessTime.dwLowDateTime=0x50cc6500, ftLastAccessTime.dwHighDateTime=0x1cf3dd3, ftLastWriteTime.dwLowDateTime=0x50cc6500, ftLastWriteTime.dwHighDateTime=0x1cf3dd3, nFileSizeHigh=0x0, nFileSizeLow=0xf36be, dwReserved0=0x0, dwReserved1=0x0, cFileName="cab1.cab", cAlternateFileName="")) returned 1 [0065.190] FindNextFileW (in: hFindFile=0x5107aa0, lpFindFileData=0x31e47c | out: lpFindFileData=0x31e47c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x50cc6500, ftCreationTime.dwHighDateTime=0x1cf3dd3, ftLastAccessTime.dwLowDateTime=0x50cc6500, ftLastAccessTime.dwHighDateTime=0x1cf3dd3, ftLastWriteTime.dwLowDateTime=0x50cc6500, ftLastWriteTime.dwHighDateTime=0x1cf3dd3, nFileSizeHigh=0x0, nFileSizeLow=0x23000, dwReserved0=0x0, dwReserved1=0x0, cFileName="vc_runtimeMinimum_x86.msi", cAlternateFileName="VC_RUN~1.MSI")) returned 1 [0065.190] FindNextFileW (in: hFindFile=0x5107aa0, lpFindFileData=0x31e47c | out: lpFindFileData=0x31e47c*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0065.190] FindClose (in: hFindFile=0x5107aa0 | out: hFindFile=0x5107aa0) returned 1 [0065.191] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Package Cache\\{13A4EE12-23EA-3371-91EE-EFB36DDFFF3E}v12.0.21005\\packages\\vcRuntimeMinimum_x86", nBufferLength=0x105, lpBuffer=0x31e24c, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Package Cache\\{13A4EE12-23EA-3371-91EE-EFB36DDFFF3E}v12.0.21005\\packages\\vcRuntimeMinimum_x86", lpFilePart=0x0) returned 0x6c [0065.191] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Package Cache\\{13A4EE12-23EA-3371-91EE-EFB36DDFFF3E}v12.0.21005\\packages\\vcRuntimeMinimum_x86\\", nBufferLength=0x105, lpBuffer=0x31e220, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Package Cache\\{13A4EE12-23EA-3371-91EE-EFB36DDFFF3E}v12.0.21005\\packages\\vcRuntimeMinimum_x86\\", lpFilePart=0x0) returned 0x6d [0065.191] FindFirstFileW (in: lpFileName="C:\\ProgramData\\Package Cache\\{13A4EE12-23EA-3371-91EE-EFB36DDFFF3E}v12.0.21005\\packages\\vcRuntimeMinimum_x86\\*", lpFindFileData=0x31e46c | out: lpFindFileData=0x31e46c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xcb95720, ftCreationTime.dwHighDateTime=0x1d2e621, ftLastAccessTime.dwLowDateTime=0xcbbb880, ftLastAccessTime.dwHighDateTime=0x1d2e621, ftLastWriteTime.dwLowDateTime=0xcbbb880, ftLastWriteTime.dwHighDateTime=0x1d2e621, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5107aa0 [0065.191] FindNextFileW (in: hFindFile=0x5107aa0, lpFindFileData=0x31e47c | out: lpFindFileData=0x31e47c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xcb95720, ftCreationTime.dwHighDateTime=0x1d2e621, ftLastAccessTime.dwLowDateTime=0xcbbb880, ftLastAccessTime.dwHighDateTime=0x1d2e621, ftLastWriteTime.dwLowDateTime=0xcbbb880, ftLastWriteTime.dwHighDateTime=0x1d2e621, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0065.191] FindNextFileW (in: hFindFile=0x5107aa0, lpFindFileData=0x31e47c | out: lpFindFileData=0x31e47c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x50cc6500, ftCreationTime.dwHighDateTime=0x1cf3dd3, ftLastAccessTime.dwLowDateTime=0x50cc6500, ftLastAccessTime.dwHighDateTime=0x1cf3dd3, ftLastWriteTime.dwLowDateTime=0x50cc6500, ftLastWriteTime.dwHighDateTime=0x1cf3dd3, nFileSizeHigh=0x0, nFileSizeLow=0xf36be, dwReserved0=0x0, dwReserved1=0x0, cFileName="cab1.cab", cAlternateFileName="")) returned 1 [0065.191] FindNextFileW (in: hFindFile=0x5107aa0, lpFindFileData=0x31e47c | out: lpFindFileData=0x31e47c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x50cc6500, ftCreationTime.dwHighDateTime=0x1cf3dd3, ftLastAccessTime.dwLowDateTime=0x50cc6500, ftLastAccessTime.dwHighDateTime=0x1cf3dd3, ftLastWriteTime.dwLowDateTime=0x50cc6500, ftLastWriteTime.dwHighDateTime=0x1cf3dd3, nFileSizeHigh=0x0, nFileSizeLow=0x23000, dwReserved0=0x0, dwReserved1=0x0, cFileName="vc_runtimeMinimum_x86.msi", cAlternateFileName="VC_RUN~1.MSI")) returned 1 [0065.191] FindNextFileW (in: hFindFile=0x5107aa0, lpFindFileData=0x31e47c | out: lpFindFileData=0x31e47c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x50cc6500, ftCreationTime.dwHighDateTime=0x1cf3dd3, ftLastAccessTime.dwLowDateTime=0x50cc6500, ftLastAccessTime.dwHighDateTime=0x1cf3dd3, ftLastWriteTime.dwLowDateTime=0x50cc6500, ftLastWriteTime.dwHighDateTime=0x1cf3dd3, nFileSizeHigh=0x0, nFileSizeLow=0x23000, dwReserved0=0x0, dwReserved1=0x0, cFileName="vc_runtimeMinimum_x86.msi", cAlternateFileName="VC_RUN~1.MSI")) returned 0 [0065.191] FindClose (in: hFindFile=0x5107aa0 | out: hFindFile=0x5107aa0) returned 1 [0065.191] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Package Cache\\{33d1fd90-4274-48a1-9bc1-97e33d9c2d6f}", nBufferLength=0x105, lpBuffer=0x31e33c, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Package Cache\\{33d1fd90-4274-48a1-9bc1-97e33d9c2d6f}", lpFilePart=0x0) returned 0x43 [0065.191] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Package Cache\\{33d1fd90-4274-48a1-9bc1-97e33d9c2d6f}\\", nBufferLength=0x105, lpBuffer=0x31e310, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Package Cache\\{33d1fd90-4274-48a1-9bc1-97e33d9c2d6f}\\", lpFilePart=0x0) returned 0x44 [0065.191] FindFirstFileW (in: lpFileName="C:\\ProgramData\\Package Cache\\{33d1fd90-4274-48a1-9bc1-97e33d9c2d6f}\\*", lpFindFileData=0x31e55c | out: lpFindFileData=0x31e55c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xecd0b340, ftCreationTime.dwHighDateTime=0x1d2e620, ftLastAccessTime.dwLowDateTime=0xecd314a0, ftLastAccessTime.dwHighDateTime=0x1d2e620, ftLastWriteTime.dwLowDateTime=0xecd314a0, ftLastWriteTime.dwHighDateTime=0x1d2e620, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5107aa0 [0065.191] FindNextFileW (in: hFindFile=0x5107aa0, lpFindFileData=0x31e56c | out: lpFindFileData=0x31e56c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xecd0b340, ftCreationTime.dwHighDateTime=0x1d2e620, ftLastAccessTime.dwLowDateTime=0xecd314a0, ftLastAccessTime.dwHighDateTime=0x1d2e620, ftLastWriteTime.dwLowDateTime=0xecd314a0, ftLastWriteTime.dwHighDateTime=0x1d2e620, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0065.191] FindNextFileW (in: hFindFile=0x5107aa0, lpFindFileData=0x31e56c | out: lpFindFileData=0x31e56c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xecd314a0, ftCreationTime.dwHighDateTime=0x1d2e620, ftLastAccessTime.dwLowDateTime=0xecd314a0, ftLastAccessTime.dwHighDateTime=0x1d2e620, ftLastWriteTime.dwLowDateTime=0xf08b3aa0, ftLastWriteTime.dwHighDateTime=0x1d2e620, nFileSizeHigh=0x0, nFileSizeLow=0x28e, dwReserved0=0x0, dwReserved1=0x0, cFileName="state.rsm", cAlternateFileName="")) returned 1 [0065.191] FindNextFileW (in: hFindFile=0x5107aa0, lpFindFileData=0x31e56c | out: lpFindFileData=0x31e56c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xecd0b340, ftCreationTime.dwHighDateTime=0x1d2e620, ftLastAccessTime.dwLowDateTime=0xecd0b340, ftLastAccessTime.dwHighDateTime=0x1d2e620, ftLastWriteTime.dwLowDateTime=0xd3ea4f80, ftLastWriteTime.dwHighDateTime=0x1d2e620, nFileSizeHigh=0x0, nFileSizeLow=0x6f428, dwReserved0=0x0, dwReserved1=0x0, cFileName="vcredist_x86.exe", cAlternateFileName="VCREDI~1.EXE")) returned 1 [0065.191] FindNextFileW (in: hFindFile=0x5107aa0, lpFindFileData=0x31e56c | out: lpFindFileData=0x31e56c*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0065.192] FindClose (in: hFindFile=0x5107aa0 | out: hFindFile=0x5107aa0) returned 1 [0065.192] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Package Cache\\{33d1fd90-4274-48a1-9bc1-97e33d9c2d6f}", nBufferLength=0x105, lpBuffer=0x31e33c, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Package Cache\\{33d1fd90-4274-48a1-9bc1-97e33d9c2d6f}", lpFilePart=0x0) returned 0x43 [0065.192] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Package Cache\\{33d1fd90-4274-48a1-9bc1-97e33d9c2d6f}\\", nBufferLength=0x105, lpBuffer=0x31e310, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Package Cache\\{33d1fd90-4274-48a1-9bc1-97e33d9c2d6f}\\", lpFilePart=0x0) returned 0x44 [0065.192] FindFirstFileW (in: lpFileName="C:\\ProgramData\\Package Cache\\{33d1fd90-4274-48a1-9bc1-97e33d9c2d6f}\\*", lpFindFileData=0x31e55c | out: lpFindFileData=0x31e55c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xecd0b340, ftCreationTime.dwHighDateTime=0x1d2e620, ftLastAccessTime.dwLowDateTime=0xecd314a0, ftLastAccessTime.dwHighDateTime=0x1d2e620, ftLastWriteTime.dwLowDateTime=0xecd314a0, ftLastWriteTime.dwHighDateTime=0x1d2e620, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5107aa0 [0065.192] FindNextFileW (in: hFindFile=0x5107aa0, lpFindFileData=0x31e56c | out: lpFindFileData=0x31e56c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xecd0b340, ftCreationTime.dwHighDateTime=0x1d2e620, ftLastAccessTime.dwLowDateTime=0xecd314a0, ftLastAccessTime.dwHighDateTime=0x1d2e620, ftLastWriteTime.dwLowDateTime=0xecd314a0, ftLastWriteTime.dwHighDateTime=0x1d2e620, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0065.192] FindNextFileW (in: hFindFile=0x5107aa0, lpFindFileData=0x31e56c | out: lpFindFileData=0x31e56c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xecd314a0, ftCreationTime.dwHighDateTime=0x1d2e620, ftLastAccessTime.dwLowDateTime=0xecd314a0, ftLastAccessTime.dwHighDateTime=0x1d2e620, ftLastWriteTime.dwLowDateTime=0xf08b3aa0, ftLastWriteTime.dwHighDateTime=0x1d2e620, nFileSizeHigh=0x0, nFileSizeLow=0x28e, dwReserved0=0x0, dwReserved1=0x0, cFileName="state.rsm", cAlternateFileName="")) returned 1 [0065.192] FindNextFileW (in: hFindFile=0x5107aa0, lpFindFileData=0x31e56c | out: lpFindFileData=0x31e56c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xecd0b340, ftCreationTime.dwHighDateTime=0x1d2e620, ftLastAccessTime.dwLowDateTime=0xecd0b340, ftLastAccessTime.dwHighDateTime=0x1d2e620, ftLastWriteTime.dwLowDateTime=0xd3ea4f80, ftLastWriteTime.dwHighDateTime=0x1d2e620, nFileSizeHigh=0x0, nFileSizeLow=0x6f428, dwReserved0=0x0, dwReserved1=0x0, cFileName="vcredist_x86.exe", cAlternateFileName="VCREDI~1.EXE")) returned 1 [0065.192] FindNextFileW (in: hFindFile=0x5107aa0, lpFindFileData=0x31e56c | out: lpFindFileData=0x31e56c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xecd0b340, ftCreationTime.dwHighDateTime=0x1d2e620, ftLastAccessTime.dwLowDateTime=0xecd0b340, ftLastAccessTime.dwHighDateTime=0x1d2e620, ftLastWriteTime.dwLowDateTime=0xd3ea4f80, ftLastWriteTime.dwHighDateTime=0x1d2e620, nFileSizeHigh=0x0, nFileSizeLow=0x6f428, dwReserved0=0x0, dwReserved1=0x0, cFileName="vcredist_x86.exe", cAlternateFileName="VCREDI~1.EXE")) returned 0 [0065.192] FindClose (in: hFindFile=0x5107aa0 | out: hFindFile=0x5107aa0) returned 1 [0065.192] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Package Cache\\{37B8F9C7-03FB-3253-8781-2517C99D7C00}v11.0.61030", nBufferLength=0x105, lpBuffer=0x31e33c, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Package Cache\\{37B8F9C7-03FB-3253-8781-2517C99D7C00}v11.0.61030", lpFilePart=0x0) returned 0x4e [0065.192] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Package Cache\\{37B8F9C7-03FB-3253-8781-2517C99D7C00}v11.0.61030\\", nBufferLength=0x105, lpBuffer=0x31e310, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Package Cache\\{37B8F9C7-03FB-3253-8781-2517C99D7C00}v11.0.61030\\", lpFilePart=0x0) returned 0x4f [0065.192] FindFirstFileW (in: lpFileName="C:\\ProgramData\\Package Cache\\{37B8F9C7-03FB-3253-8781-2517C99D7C00}v11.0.61030\\*", lpFindFileData=0x31e55c | out: lpFindFileData=0x31e55c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfabe4080, ftCreationTime.dwHighDateTime=0x1d2e620, ftLastAccessTime.dwLowDateTime=0xfabe4080, ftLastAccessTime.dwHighDateTime=0x1d2e620, ftLastWriteTime.dwLowDateTime=0xfabe4080, ftLastWriteTime.dwHighDateTime=0x1d2e620, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5107aa0 [0065.193] FindNextFileW (in: hFindFile=0x5107aa0, lpFindFileData=0x31e56c | out: lpFindFileData=0x31e56c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfabe4080, ftCreationTime.dwHighDateTime=0x1d2e620, ftLastAccessTime.dwLowDateTime=0xfabe4080, ftLastAccessTime.dwHighDateTime=0x1d2e620, ftLastWriteTime.dwLowDateTime=0xfabe4080, ftLastWriteTime.dwHighDateTime=0x1d2e620, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0065.193] FindNextFileW (in: hFindFile=0x5107aa0, lpFindFileData=0x31e56c | out: lpFindFileData=0x31e56c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfabe4080, ftCreationTime.dwHighDateTime=0x1d2e620, ftLastAccessTime.dwLowDateTime=0xfabe4080, ftLastAccessTime.dwHighDateTime=0x1d2e620, ftLastWriteTime.dwLowDateTime=0xfabe4080, ftLastWriteTime.dwHighDateTime=0x1d2e620, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="packages", cAlternateFileName="")) returned 1 [0065.193] FindNextFileW (in: hFindFile=0x5107aa0, lpFindFileData=0x31e56c | out: lpFindFileData=0x31e56c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfabe4080, ftCreationTime.dwHighDateTime=0x1d2e620, ftLastAccessTime.dwLowDateTime=0xfabe4080, ftLastAccessTime.dwHighDateTime=0x1d2e620, ftLastWriteTime.dwLowDateTime=0xfabe4080, ftLastWriteTime.dwHighDateTime=0x1d2e620, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="packages", cAlternateFileName="")) returned 0 [0065.193] FindClose (in: hFindFile=0x5107aa0 | out: hFindFile=0x5107aa0) returned 1 [0065.194] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Package Cache\\{37B8F9C7-03FB-3253-8781-2517C99D7C00}v11.0.61030", nBufferLength=0x105, lpBuffer=0x31e33c, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Package Cache\\{37B8F9C7-03FB-3253-8781-2517C99D7C00}v11.0.61030", lpFilePart=0x0) returned 0x4e [0065.194] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Package Cache\\{37B8F9C7-03FB-3253-8781-2517C99D7C00}v11.0.61030\\", nBufferLength=0x105, lpBuffer=0x31e310, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Package Cache\\{37B8F9C7-03FB-3253-8781-2517C99D7C00}v11.0.61030\\", lpFilePart=0x0) returned 0x4f [0065.194] FindFirstFileW (in: lpFileName="C:\\ProgramData\\Package Cache\\{37B8F9C7-03FB-3253-8781-2517C99D7C00}v11.0.61030\\*", lpFindFileData=0x31e55c | out: lpFindFileData=0x31e55c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfabe4080, ftCreationTime.dwHighDateTime=0x1d2e620, ftLastAccessTime.dwLowDateTime=0xfabe4080, ftLastAccessTime.dwHighDateTime=0x1d2e620, ftLastWriteTime.dwLowDateTime=0xfabe4080, ftLastWriteTime.dwHighDateTime=0x1d2e620, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5107aa0 [0065.194] FindNextFileW (in: hFindFile=0x5107aa0, lpFindFileData=0x31e56c | out: lpFindFileData=0x31e56c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfabe4080, ftCreationTime.dwHighDateTime=0x1d2e620, ftLastAccessTime.dwLowDateTime=0xfabe4080, ftLastAccessTime.dwHighDateTime=0x1d2e620, ftLastWriteTime.dwLowDateTime=0xfabe4080, ftLastWriteTime.dwHighDateTime=0x1d2e620, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0065.194] FindNextFileW (in: hFindFile=0x5107aa0, lpFindFileData=0x31e56c | out: lpFindFileData=0x31e56c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfabe4080, ftCreationTime.dwHighDateTime=0x1d2e620, ftLastAccessTime.dwLowDateTime=0xfabe4080, ftLastAccessTime.dwHighDateTime=0x1d2e620, ftLastWriteTime.dwLowDateTime=0xfabe4080, ftLastWriteTime.dwHighDateTime=0x1d2e620, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="packages", cAlternateFileName="")) returned 1 [0065.194] FindNextFileW (in: hFindFile=0x5107aa0, lpFindFileData=0x31e56c | out: lpFindFileData=0x31e56c*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0065.194] FindClose (in: hFindFile=0x5107aa0 | out: hFindFile=0x5107aa0) returned 1 [0065.194] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Package Cache\\{37B8F9C7-03FB-3253-8781-2517C99D7C00}v11.0.61030\\packages", nBufferLength=0x105, lpBuffer=0x31e2c4, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Package Cache\\{37B8F9C7-03FB-3253-8781-2517C99D7C00}v11.0.61030\\packages", lpFilePart=0x0) returned 0x57 [0065.194] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Package Cache\\{37B8F9C7-03FB-3253-8781-2517C99D7C00}v11.0.61030\\packages\\", nBufferLength=0x105, lpBuffer=0x31e298, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Package Cache\\{37B8F9C7-03FB-3253-8781-2517C99D7C00}v11.0.61030\\packages\\", lpFilePart=0x0) returned 0x58 [0065.194] FindFirstFileW (in: lpFileName="C:\\ProgramData\\Package Cache\\{37B8F9C7-03FB-3253-8781-2517C99D7C00}v11.0.61030\\packages\\*", lpFindFileData=0x31e4e4 | out: lpFindFileData=0x31e4e4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfabe4080, ftCreationTime.dwHighDateTime=0x1d2e620, ftLastAccessTime.dwLowDateTime=0xfabe4080, ftLastAccessTime.dwHighDateTime=0x1d2e620, ftLastWriteTime.dwLowDateTime=0xfabe4080, ftLastWriteTime.dwHighDateTime=0x1d2e620, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5107aa0 [0065.194] FindNextFileW (in: hFindFile=0x5107aa0, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfabe4080, ftCreationTime.dwHighDateTime=0x1d2e620, ftLastAccessTime.dwLowDateTime=0xfabe4080, ftLastAccessTime.dwHighDateTime=0x1d2e620, ftLastWriteTime.dwLowDateTime=0xfabe4080, ftLastWriteTime.dwHighDateTime=0x1d2e620, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0065.194] FindNextFileW (in: hFindFile=0x5107aa0, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfabe4080, ftCreationTime.dwHighDateTime=0x1d2e620, ftLastAccessTime.dwLowDateTime=0xfac0a1e0, ftLastAccessTime.dwHighDateTime=0x1d2e620, ftLastWriteTime.dwLowDateTime=0xfac0a1e0, ftLastWriteTime.dwHighDateTime=0x1d2e620, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="vcRuntimeAdditional_amd64", cAlternateFileName="VCRUNT~1")) returned 1 [0065.194] FindNextFileW (in: hFindFile=0x5107aa0, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfabe4080, ftCreationTime.dwHighDateTime=0x1d2e620, ftLastAccessTime.dwLowDateTime=0xfac0a1e0, ftLastAccessTime.dwHighDateTime=0x1d2e620, ftLastWriteTime.dwLowDateTime=0xfac0a1e0, ftLastWriteTime.dwHighDateTime=0x1d2e620, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="vcRuntimeAdditional_amd64", cAlternateFileName="VCRUNT~1")) returned 0 [0065.194] FindClose (in: hFindFile=0x5107aa0 | out: hFindFile=0x5107aa0) returned 1 [0065.194] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Package Cache\\{37B8F9C7-03FB-3253-8781-2517C99D7C00}v11.0.61030\\packages", nBufferLength=0x105, lpBuffer=0x31e2c4, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Package Cache\\{37B8F9C7-03FB-3253-8781-2517C99D7C00}v11.0.61030\\packages", lpFilePart=0x0) returned 0x57 [0065.195] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Package Cache\\{37B8F9C7-03FB-3253-8781-2517C99D7C00}v11.0.61030\\packages\\", nBufferLength=0x105, lpBuffer=0x31e298, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Package Cache\\{37B8F9C7-03FB-3253-8781-2517C99D7C00}v11.0.61030\\packages\\", lpFilePart=0x0) returned 0x58 [0065.195] FindFirstFileW (in: lpFileName="C:\\ProgramData\\Package Cache\\{37B8F9C7-03FB-3253-8781-2517C99D7C00}v11.0.61030\\packages\\*", lpFindFileData=0x31e4e4 | out: lpFindFileData=0x31e4e4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfabe4080, ftCreationTime.dwHighDateTime=0x1d2e620, ftLastAccessTime.dwLowDateTime=0xfabe4080, ftLastAccessTime.dwHighDateTime=0x1d2e620, ftLastWriteTime.dwLowDateTime=0xfabe4080, ftLastWriteTime.dwHighDateTime=0x1d2e620, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5107aa0 [0065.195] FindNextFileW (in: hFindFile=0x5107aa0, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfabe4080, ftCreationTime.dwHighDateTime=0x1d2e620, ftLastAccessTime.dwLowDateTime=0xfabe4080, ftLastAccessTime.dwHighDateTime=0x1d2e620, ftLastWriteTime.dwLowDateTime=0xfabe4080, ftLastWriteTime.dwHighDateTime=0x1d2e620, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0065.195] FindNextFileW (in: hFindFile=0x5107aa0, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfabe4080, ftCreationTime.dwHighDateTime=0x1d2e620, ftLastAccessTime.dwLowDateTime=0xfac0a1e0, ftLastAccessTime.dwHighDateTime=0x1d2e620, ftLastWriteTime.dwLowDateTime=0xfac0a1e0, ftLastWriteTime.dwHighDateTime=0x1d2e620, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="vcRuntimeAdditional_amd64", cAlternateFileName="VCRUNT~1")) returned 1 [0065.195] FindNextFileW (in: hFindFile=0x5107aa0, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0065.195] FindClose (in: hFindFile=0x5107aa0 | out: hFindFile=0x5107aa0) returned 1 [0065.195] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Package Cache\\{37B8F9C7-03FB-3253-8781-2517C99D7C00}v11.0.61030\\packages\\vcRuntimeAdditional_amd64", nBufferLength=0x105, lpBuffer=0x31e24c, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Package Cache\\{37B8F9C7-03FB-3253-8781-2517C99D7C00}v11.0.61030\\packages\\vcRuntimeAdditional_amd64", lpFilePart=0x0) returned 0x71 [0065.195] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Package Cache\\{37B8F9C7-03FB-3253-8781-2517C99D7C00}v11.0.61030\\packages\\vcRuntimeAdditional_amd64\\", nBufferLength=0x105, lpBuffer=0x31e220, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Package Cache\\{37B8F9C7-03FB-3253-8781-2517C99D7C00}v11.0.61030\\packages\\vcRuntimeAdditional_amd64\\", lpFilePart=0x0) returned 0x72 [0065.195] FindFirstFileW (in: lpFileName="C:\\ProgramData\\Package Cache\\{37B8F9C7-03FB-3253-8781-2517C99D7C00}v11.0.61030\\packages\\vcRuntimeAdditional_amd64\\*", lpFindFileData=0x31e46c | out: lpFindFileData=0x31e46c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfabe4080, ftCreationTime.dwHighDateTime=0x1d2e620, ftLastAccessTime.dwLowDateTime=0xfac0a1e0, ftLastAccessTime.dwHighDateTime=0x1d2e620, ftLastWriteTime.dwLowDateTime=0xfac0a1e0, ftLastWriteTime.dwHighDateTime=0x1d2e620, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5107aa0 [0065.195] FindNextFileW (in: hFindFile=0x5107aa0, lpFindFileData=0x31e47c | out: lpFindFileData=0x31e47c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfabe4080, ftCreationTime.dwHighDateTime=0x1d2e620, ftLastAccessTime.dwLowDateTime=0xfac0a1e0, ftLastAccessTime.dwHighDateTime=0x1d2e620, ftLastWriteTime.dwLowDateTime=0xfac0a1e0, ftLastWriteTime.dwHighDateTime=0x1d2e620, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0065.195] FindNextFileW (in: hFindFile=0x5107aa0, lpFindFileData=0x31e47c | out: lpFindFileData=0x31e47c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa87bcb00, ftCreationTime.dwHighDateTime=0x1ced4d9, ftLastAccessTime.dwLowDateTime=0xa87bcb00, ftLastAccessTime.dwHighDateTime=0x1ced4d9, ftLastWriteTime.dwLowDateTime=0xa87bcb00, ftLastWriteTime.dwHighDateTime=0x1ced4d9, nFileSizeHigh=0x0, nFileSizeLow=0x588124, dwReserved0=0x0, dwReserved1=0x0, cFileName="cab1.cab", cAlternateFileName="")) returned 1 [0065.195] FindNextFileW (in: hFindFile=0x5107aa0, lpFindFileData=0x31e47c | out: lpFindFileData=0x31e47c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4374a500, ftCreationTime.dwHighDateTime=0x1ced4da, ftLastAccessTime.dwLowDateTime=0x4374a500, ftLastAccessTime.dwHighDateTime=0x1ced4da, ftLastWriteTime.dwLowDateTime=0x4374a500, ftLastWriteTime.dwHighDateTime=0x1ced4da, nFileSizeHigh=0x0, nFileSizeLow=0x25000, dwReserved0=0x0, dwReserved1=0x0, cFileName="vc_runtimeAdditional_x64.msi", cAlternateFileName="VC_RUN~1.MSI")) returned 1 [0065.195] FindNextFileW (in: hFindFile=0x5107aa0, lpFindFileData=0x31e47c | out: lpFindFileData=0x31e47c*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0065.195] FindClose (in: hFindFile=0x5107aa0 | out: hFindFile=0x5107aa0) returned 1 [0065.195] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Package Cache\\{37B8F9C7-03FB-3253-8781-2517C99D7C00}v11.0.61030\\packages\\vcRuntimeAdditional_amd64", nBufferLength=0x105, lpBuffer=0x31e24c, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Package Cache\\{37B8F9C7-03FB-3253-8781-2517C99D7C00}v11.0.61030\\packages\\vcRuntimeAdditional_amd64", lpFilePart=0x0) returned 0x71 [0065.195] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Package Cache\\{37B8F9C7-03FB-3253-8781-2517C99D7C00}v11.0.61030\\packages\\vcRuntimeAdditional_amd64\\", nBufferLength=0x105, lpBuffer=0x31e220, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Package Cache\\{37B8F9C7-03FB-3253-8781-2517C99D7C00}v11.0.61030\\packages\\vcRuntimeAdditional_amd64\\", lpFilePart=0x0) returned 0x72 [0065.196] FindFirstFileW (in: lpFileName="C:\\ProgramData\\Package Cache\\{37B8F9C7-03FB-3253-8781-2517C99D7C00}v11.0.61030\\packages\\vcRuntimeAdditional_amd64\\*", lpFindFileData=0x31e46c | out: lpFindFileData=0x31e46c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfabe4080, ftCreationTime.dwHighDateTime=0x1d2e620, ftLastAccessTime.dwLowDateTime=0xfac0a1e0, ftLastAccessTime.dwHighDateTime=0x1d2e620, ftLastWriteTime.dwLowDateTime=0xfac0a1e0, ftLastWriteTime.dwHighDateTime=0x1d2e620, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5107aa0 [0065.196] FindNextFileW (in: hFindFile=0x5107aa0, lpFindFileData=0x31e47c | out: lpFindFileData=0x31e47c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfabe4080, ftCreationTime.dwHighDateTime=0x1d2e620, ftLastAccessTime.dwLowDateTime=0xfac0a1e0, ftLastAccessTime.dwHighDateTime=0x1d2e620, ftLastWriteTime.dwLowDateTime=0xfac0a1e0, ftLastWriteTime.dwHighDateTime=0x1d2e620, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0065.196] FindNextFileW (in: hFindFile=0x5107aa0, lpFindFileData=0x31e47c | out: lpFindFileData=0x31e47c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa87bcb00, ftCreationTime.dwHighDateTime=0x1ced4d9, ftLastAccessTime.dwLowDateTime=0xa87bcb00, ftLastAccessTime.dwHighDateTime=0x1ced4d9, ftLastWriteTime.dwLowDateTime=0xa87bcb00, ftLastWriteTime.dwHighDateTime=0x1ced4d9, nFileSizeHigh=0x0, nFileSizeLow=0x588124, dwReserved0=0x0, dwReserved1=0x0, cFileName="cab1.cab", cAlternateFileName="")) returned 1 [0065.196] FindNextFileW (in: hFindFile=0x5107aa0, lpFindFileData=0x31e47c | out: lpFindFileData=0x31e47c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4374a500, ftCreationTime.dwHighDateTime=0x1ced4da, ftLastAccessTime.dwLowDateTime=0x4374a500, ftLastAccessTime.dwHighDateTime=0x1ced4da, ftLastWriteTime.dwLowDateTime=0x4374a500, ftLastWriteTime.dwHighDateTime=0x1ced4da, nFileSizeHigh=0x0, nFileSizeLow=0x25000, dwReserved0=0x0, dwReserved1=0x0, cFileName="vc_runtimeAdditional_x64.msi", cAlternateFileName="VC_RUN~1.MSI")) returned 1 [0065.196] FindNextFileW (in: hFindFile=0x5107aa0, lpFindFileData=0x31e47c | out: lpFindFileData=0x31e47c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4374a500, ftCreationTime.dwHighDateTime=0x1ced4da, ftLastAccessTime.dwLowDateTime=0x4374a500, ftLastAccessTime.dwHighDateTime=0x1ced4da, ftLastWriteTime.dwLowDateTime=0x4374a500, ftLastWriteTime.dwHighDateTime=0x1ced4da, nFileSizeHigh=0x0, nFileSizeLow=0x25000, dwReserved0=0x0, dwReserved1=0x0, cFileName="vc_runtimeAdditional_x64.msi", cAlternateFileName="VC_RUN~1.MSI")) returned 0 [0065.196] FindClose (in: hFindFile=0x5107aa0 | out: hFindFile=0x5107aa0) returned 1 [0065.196] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Package Cache\\{3c3aafc8-d898-43ec-998f-965ffdae065a}", nBufferLength=0x105, lpBuffer=0x31e33c, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Package Cache\\{3c3aafc8-d898-43ec-998f-965ffdae065a}", lpFilePart=0x0) returned 0x43 [0065.196] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Package Cache\\{3c3aafc8-d898-43ec-998f-965ffdae065a}\\", nBufferLength=0x105, lpBuffer=0x31e310, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Package Cache\\{3c3aafc8-d898-43ec-998f-965ffdae065a}\\", lpFilePart=0x0) returned 0x44 [0065.196] FindFirstFileW (in: lpFileName="C:\\ProgramData\\Package Cache\\{3c3aafc8-d898-43ec-998f-965ffdae065a}\\*", lpFindFileData=0x31e55c | out: lpFindFileData=0x31e55c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1a0db1a0, ftCreationTime.dwHighDateTime=0x1d2e621, ftLastAccessTime.dwLowDateTime=0x1a127460, ftLastAccessTime.dwHighDateTime=0x1d2e621, ftLastWriteTime.dwLowDateTime=0x1a127460, ftLastWriteTime.dwHighDateTime=0x1d2e621, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5107aa0 [0065.197] FindNextFileW (in: hFindFile=0x5107aa0, lpFindFileData=0x31e56c | out: lpFindFileData=0x31e56c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1a0db1a0, ftCreationTime.dwHighDateTime=0x1d2e621, ftLastAccessTime.dwLowDateTime=0x1a127460, ftLastAccessTime.dwHighDateTime=0x1d2e621, ftLastWriteTime.dwLowDateTime=0x1a127460, ftLastWriteTime.dwHighDateTime=0x1d2e621, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0065.197] FindNextFileW (in: hFindFile=0x5107aa0, lpFindFileData=0x31e56c | out: lpFindFileData=0x31e56c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1a127460, ftCreationTime.dwHighDateTime=0x1d2e621, ftLastAccessTime.dwLowDateTime=0x1a127460, ftLastAccessTime.dwHighDateTime=0x1d2e621, ftLastWriteTime.dwLowDateTime=0x1c821ca0, ftLastWriteTime.dwHighDateTime=0x1d2e621, nFileSizeHigh=0x0, nFileSizeLow=0x29a, dwReserved0=0x0, dwReserved1=0x0, cFileName="state.rsm", cAlternateFileName="")) returned 1 [0065.197] FindNextFileW (in: hFindFile=0x5107aa0, lpFindFileData=0x31e56c | out: lpFindFileData=0x31e56c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1a0db1a0, ftCreationTime.dwHighDateTime=0x1d2e621, ftLastAccessTime.dwLowDateTime=0x1a0db1a0, ftLastAccessTime.dwHighDateTime=0x1d2e621, ftLastWriteTime.dwLowDateTime=0x1073de80, ftLastWriteTime.dwHighDateTime=0x1d2e621, nFileSizeHigh=0x0, nFileSizeLow=0x710a8, dwReserved0=0x0, dwReserved1=0x0, cFileName="vcredist_x64.exe", cAlternateFileName="VCREDI~1.EXE")) returned 1 [0065.197] FindNextFileW (in: hFindFile=0x5107aa0, lpFindFileData=0x31e56c | out: lpFindFileData=0x31e56c*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0065.197] FindClose (in: hFindFile=0x5107aa0 | out: hFindFile=0x5107aa0) returned 1 [0065.197] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Package Cache\\{3c3aafc8-d898-43ec-998f-965ffdae065a}", nBufferLength=0x105, lpBuffer=0x31e33c, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Package Cache\\{3c3aafc8-d898-43ec-998f-965ffdae065a}", lpFilePart=0x0) returned 0x43 [0065.197] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Package Cache\\{3c3aafc8-d898-43ec-998f-965ffdae065a}\\", nBufferLength=0x105, lpBuffer=0x31e310, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Package Cache\\{3c3aafc8-d898-43ec-998f-965ffdae065a}\\", lpFilePart=0x0) returned 0x44 [0065.197] FindFirstFileW (in: lpFileName="C:\\ProgramData\\Package Cache\\{3c3aafc8-d898-43ec-998f-965ffdae065a}\\*", lpFindFileData=0x31e55c | out: lpFindFileData=0x31e55c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1a0db1a0, ftCreationTime.dwHighDateTime=0x1d2e621, ftLastAccessTime.dwLowDateTime=0x1a127460, ftLastAccessTime.dwHighDateTime=0x1d2e621, ftLastWriteTime.dwLowDateTime=0x1a127460, ftLastWriteTime.dwHighDateTime=0x1d2e621, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5107aa0 [0065.197] FindNextFileW (in: hFindFile=0x5107aa0, lpFindFileData=0x31e56c | out: lpFindFileData=0x31e56c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1a0db1a0, ftCreationTime.dwHighDateTime=0x1d2e621, ftLastAccessTime.dwLowDateTime=0x1a127460, ftLastAccessTime.dwHighDateTime=0x1d2e621, ftLastWriteTime.dwLowDateTime=0x1a127460, ftLastWriteTime.dwHighDateTime=0x1d2e621, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0065.197] FindNextFileW (in: hFindFile=0x5107aa0, lpFindFileData=0x31e56c | out: lpFindFileData=0x31e56c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1a127460, ftCreationTime.dwHighDateTime=0x1d2e621, ftLastAccessTime.dwLowDateTime=0x1a127460, ftLastAccessTime.dwHighDateTime=0x1d2e621, ftLastWriteTime.dwLowDateTime=0x1c821ca0, ftLastWriteTime.dwHighDateTime=0x1d2e621, nFileSizeHigh=0x0, nFileSizeLow=0x29a, dwReserved0=0x0, dwReserved1=0x0, cFileName="state.rsm", cAlternateFileName="")) returned 1 [0065.197] FindNextFileW (in: hFindFile=0x5107aa0, lpFindFileData=0x31e56c | out: lpFindFileData=0x31e56c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1a0db1a0, ftCreationTime.dwHighDateTime=0x1d2e621, ftLastAccessTime.dwLowDateTime=0x1a0db1a0, ftLastAccessTime.dwHighDateTime=0x1d2e621, ftLastWriteTime.dwLowDateTime=0x1073de80, ftLastWriteTime.dwHighDateTime=0x1d2e621, nFileSizeHigh=0x0, nFileSizeLow=0x710a8, dwReserved0=0x0, dwReserved1=0x0, cFileName="vcredist_x64.exe", cAlternateFileName="VCREDI~1.EXE")) returned 1 [0065.197] FindNextFileW (in: hFindFile=0x5107aa0, lpFindFileData=0x31e56c | out: lpFindFileData=0x31e56c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1a0db1a0, ftCreationTime.dwHighDateTime=0x1d2e621, ftLastAccessTime.dwLowDateTime=0x1a0db1a0, ftLastAccessTime.dwHighDateTime=0x1d2e621, ftLastWriteTime.dwLowDateTime=0x1073de80, ftLastWriteTime.dwHighDateTime=0x1d2e621, nFileSizeHigh=0x0, nFileSizeLow=0x710a8, dwReserved0=0x0, dwReserved1=0x0, cFileName="vcredist_x64.exe", cAlternateFileName="VCREDI~1.EXE")) returned 0 [0065.197] FindClose (in: hFindFile=0x5107aa0 | out: hFindFile=0x5107aa0) returned 1 [0065.198] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Package Cache\\{582EA838-9199-3518-A05C-DB09462F68EC}v14.10.25017", nBufferLength=0x105, lpBuffer=0x31e33c, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Package Cache\\{582EA838-9199-3518-A05C-DB09462F68EC}v14.10.25017", lpFilePart=0x0) returned 0x4f [0065.198] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Package Cache\\{582EA838-9199-3518-A05C-DB09462F68EC}v14.10.25017\\", nBufferLength=0x105, lpBuffer=0x31e310, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Package Cache\\{582EA838-9199-3518-A05C-DB09462F68EC}v14.10.25017\\", lpFilePart=0x0) returned 0x50 [0065.198] FindFirstFileW (in: lpFileName="C:\\ProgramData\\Package Cache\\{582EA838-9199-3518-A05C-DB09462F68EC}v14.10.25017\\*", lpFindFileData=0x31e55c | out: lpFindFileData=0x31e55c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf94d4300, ftCreationTime.dwHighDateTime=0x1d2fc27, ftLastAccessTime.dwLowDateTime=0xf94d4300, ftLastAccessTime.dwHighDateTime=0x1d2fc27, ftLastWriteTime.dwLowDateTime=0xf94d4300, ftLastWriteTime.dwHighDateTime=0x1d2fc27, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5107aa0 [0065.198] FindNextFileW (in: hFindFile=0x5107aa0, lpFindFileData=0x31e56c | out: lpFindFileData=0x31e56c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf94d4300, ftCreationTime.dwHighDateTime=0x1d2fc27, ftLastAccessTime.dwLowDateTime=0xf94d4300, ftLastAccessTime.dwHighDateTime=0x1d2fc27, ftLastWriteTime.dwLowDateTime=0xf94d4300, ftLastWriteTime.dwHighDateTime=0x1d2fc27, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0065.198] FindNextFileW (in: hFindFile=0x5107aa0, lpFindFileData=0x31e56c | out: lpFindFileData=0x31e56c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf94d4300, ftCreationTime.dwHighDateTime=0x1d2fc27, ftLastAccessTime.dwLowDateTime=0xf94d4300, ftLastAccessTime.dwHighDateTime=0x1d2fc27, ftLastWriteTime.dwLowDateTime=0xf94d4300, ftLastWriteTime.dwHighDateTime=0x1d2fc27, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="packages", cAlternateFileName="")) returned 1 [0065.198] FindNextFileW (in: hFindFile=0x5107aa0, lpFindFileData=0x31e56c | out: lpFindFileData=0x31e56c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf94d4300, ftCreationTime.dwHighDateTime=0x1d2fc27, ftLastAccessTime.dwLowDateTime=0xf94d4300, ftLastAccessTime.dwHighDateTime=0x1d2fc27, ftLastWriteTime.dwLowDateTime=0xf94d4300, ftLastWriteTime.dwHighDateTime=0x1d2fc27, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="packages", cAlternateFileName="")) returned 0 [0065.198] FindClose (in: hFindFile=0x5107aa0 | out: hFindFile=0x5107aa0) returned 1 [0065.198] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Package Cache\\{582EA838-9199-3518-A05C-DB09462F68EC}v14.10.25017", nBufferLength=0x105, lpBuffer=0x31e33c, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Package Cache\\{582EA838-9199-3518-A05C-DB09462F68EC}v14.10.25017", lpFilePart=0x0) returned 0x4f [0065.198] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Package Cache\\{582EA838-9199-3518-A05C-DB09462F68EC}v14.10.25017\\", nBufferLength=0x105, lpBuffer=0x31e310, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Package Cache\\{582EA838-9199-3518-A05C-DB09462F68EC}v14.10.25017\\", lpFilePart=0x0) returned 0x50 [0065.198] FindFirstFileW (in: lpFileName="C:\\ProgramData\\Package Cache\\{582EA838-9199-3518-A05C-DB09462F68EC}v14.10.25017\\*", lpFindFileData=0x31e55c | out: lpFindFileData=0x31e55c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf94d4300, ftCreationTime.dwHighDateTime=0x1d2fc27, ftLastAccessTime.dwLowDateTime=0xf94d4300, ftLastAccessTime.dwHighDateTime=0x1d2fc27, ftLastWriteTime.dwLowDateTime=0xf94d4300, ftLastWriteTime.dwHighDateTime=0x1d2fc27, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5107aa0 [0065.198] FindNextFileW (in: hFindFile=0x5107aa0, lpFindFileData=0x31e56c | out: lpFindFileData=0x31e56c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf94d4300, ftCreationTime.dwHighDateTime=0x1d2fc27, ftLastAccessTime.dwLowDateTime=0xf94d4300, ftLastAccessTime.dwHighDateTime=0x1d2fc27, ftLastWriteTime.dwLowDateTime=0xf94d4300, ftLastWriteTime.dwHighDateTime=0x1d2fc27, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0065.198] FindNextFileW (in: hFindFile=0x5107aa0, lpFindFileData=0x31e56c | out: lpFindFileData=0x31e56c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf94d4300, ftCreationTime.dwHighDateTime=0x1d2fc27, ftLastAccessTime.dwLowDateTime=0xf94d4300, ftLastAccessTime.dwHighDateTime=0x1d2fc27, ftLastWriteTime.dwLowDateTime=0xf94d4300, ftLastWriteTime.dwHighDateTime=0x1d2fc27, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="packages", cAlternateFileName="")) returned 1 [0065.198] FindNextFileW (in: hFindFile=0x5107aa0, lpFindFileData=0x31e56c | out: lpFindFileData=0x31e56c*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0065.198] FindClose (in: hFindFile=0x5107aa0 | out: hFindFile=0x5107aa0) returned 1 [0065.199] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Package Cache\\{582EA838-9199-3518-A05C-DB09462F68EC}v14.10.25017\\packages", nBufferLength=0x105, lpBuffer=0x31e2c4, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Package Cache\\{582EA838-9199-3518-A05C-DB09462F68EC}v14.10.25017\\packages", lpFilePart=0x0) returned 0x58 [0065.199] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Package Cache\\{582EA838-9199-3518-A05C-DB09462F68EC}v14.10.25017\\packages\\", nBufferLength=0x105, lpBuffer=0x31e298, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Package Cache\\{582EA838-9199-3518-A05C-DB09462F68EC}v14.10.25017\\packages\\", lpFilePart=0x0) returned 0x59 [0065.199] FindFirstFileW (in: lpFileName="C:\\ProgramData\\Package Cache\\{582EA838-9199-3518-A05C-DB09462F68EC}v14.10.25017\\packages\\*", lpFindFileData=0x31e4e4 | out: lpFindFileData=0x31e4e4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf94d4300, ftCreationTime.dwHighDateTime=0x1d2fc27, ftLastAccessTime.dwLowDateTime=0xf94d4300, ftLastAccessTime.dwHighDateTime=0x1d2fc27, ftLastWriteTime.dwLowDateTime=0xf94d4300, ftLastWriteTime.dwHighDateTime=0x1d2fc27, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5107aa0 [0065.199] FindNextFileW (in: hFindFile=0x5107aa0, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf94d4300, ftCreationTime.dwHighDateTime=0x1d2fc27, ftLastAccessTime.dwLowDateTime=0xf94d4300, ftLastAccessTime.dwHighDateTime=0x1d2fc27, ftLastWriteTime.dwLowDateTime=0xf94d4300, ftLastWriteTime.dwHighDateTime=0x1d2fc27, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0065.199] FindNextFileW (in: hFindFile=0x5107aa0, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf94d4300, ftCreationTime.dwHighDateTime=0x1d2fc27, ftLastAccessTime.dwLowDateTime=0xf94d4300, ftLastAccessTime.dwHighDateTime=0x1d2fc27, ftLastWriteTime.dwLowDateTime=0xf94d4300, ftLastWriteTime.dwHighDateTime=0x1d2fc27, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="vcRuntimeMinimum_x86", cAlternateFileName="VCRUNT~1")) returned 1 [0065.199] FindNextFileW (in: hFindFile=0x5107aa0, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf94d4300, ftCreationTime.dwHighDateTime=0x1d2fc27, ftLastAccessTime.dwLowDateTime=0xf94d4300, ftLastAccessTime.dwHighDateTime=0x1d2fc27, ftLastWriteTime.dwLowDateTime=0xf94d4300, ftLastWriteTime.dwHighDateTime=0x1d2fc27, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="vcRuntimeMinimum_x86", cAlternateFileName="VCRUNT~1")) returned 0 [0065.199] FindClose (in: hFindFile=0x5107aa0 | out: hFindFile=0x5107aa0) returned 1 [0065.199] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Package Cache\\{582EA838-9199-3518-A05C-DB09462F68EC}v14.10.25017\\packages", nBufferLength=0x105, lpBuffer=0x31e2c4, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Package Cache\\{582EA838-9199-3518-A05C-DB09462F68EC}v14.10.25017\\packages", lpFilePart=0x0) returned 0x58 [0065.199] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Package Cache\\{582EA838-9199-3518-A05C-DB09462F68EC}v14.10.25017\\packages\\", nBufferLength=0x105, lpBuffer=0x31e298, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Package Cache\\{582EA838-9199-3518-A05C-DB09462F68EC}v14.10.25017\\packages\\", lpFilePart=0x0) returned 0x59 [0065.199] FindFirstFileW (in: lpFileName="C:\\ProgramData\\Package Cache\\{582EA838-9199-3518-A05C-DB09462F68EC}v14.10.25017\\packages\\*", lpFindFileData=0x31e4e4 | out: lpFindFileData=0x31e4e4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf94d4300, ftCreationTime.dwHighDateTime=0x1d2fc27, ftLastAccessTime.dwLowDateTime=0xf94d4300, ftLastAccessTime.dwHighDateTime=0x1d2fc27, ftLastWriteTime.dwLowDateTime=0xf94d4300, ftLastWriteTime.dwHighDateTime=0x1d2fc27, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5107aa0 [0065.199] FindNextFileW (in: hFindFile=0x5107aa0, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf94d4300, ftCreationTime.dwHighDateTime=0x1d2fc27, ftLastAccessTime.dwLowDateTime=0xf94d4300, ftLastAccessTime.dwHighDateTime=0x1d2fc27, ftLastWriteTime.dwLowDateTime=0xf94d4300, ftLastWriteTime.dwHighDateTime=0x1d2fc27, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0065.199] FindNextFileW (in: hFindFile=0x5107aa0, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf94d4300, ftCreationTime.dwHighDateTime=0x1d2fc27, ftLastAccessTime.dwLowDateTime=0xf94d4300, ftLastAccessTime.dwHighDateTime=0x1d2fc27, ftLastWriteTime.dwLowDateTime=0xf94d4300, ftLastWriteTime.dwHighDateTime=0x1d2fc27, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="vcRuntimeMinimum_x86", cAlternateFileName="VCRUNT~1")) returned 1 [0065.200] FindClose (in: hFindFile=0x5107aa0 | out: hFindFile=0x5107aa0) returned 1 [0065.200] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Package Cache\\{582EA838-9199-3518-A05C-DB09462F68EC}v14.10.25017\\packages\\vcRuntimeMinimum_x86", nBufferLength=0x105, lpBuffer=0x31e24c, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Package Cache\\{582EA838-9199-3518-A05C-DB09462F68EC}v14.10.25017\\packages\\vcRuntimeMinimum_x86", lpFilePart=0x0) returned 0x6d [0065.200] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Package Cache\\{582EA838-9199-3518-A05C-DB09462F68EC}v14.10.25017\\packages\\vcRuntimeMinimum_x86\\", nBufferLength=0x105, lpBuffer=0x31e220, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Package Cache\\{582EA838-9199-3518-A05C-DB09462F68EC}v14.10.25017\\packages\\vcRuntimeMinimum_x86\\", lpFilePart=0x0) returned 0x6e [0065.200] FindFirstFileW (in: lpFileName="C:\\ProgramData\\Package Cache\\{582EA838-9199-3518-A05C-DB09462F68EC}v14.10.25017\\packages\\vcRuntimeMinimum_x86\\*", lpFindFileData=0x31e46c | out: lpFindFileData=0x31e46c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf94d4300, ftCreationTime.dwHighDateTime=0x1d2fc27, ftLastAccessTime.dwLowDateTime=0xf94d4300, ftLastAccessTime.dwHighDateTime=0x1d2fc27, ftLastWriteTime.dwLowDateTime=0xf94d4300, ftLastWriteTime.dwHighDateTime=0x1d2fc27, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5107aa0 [0065.200] FindClose (in: hFindFile=0x5107aa0 | out: hFindFile=0x5107aa0) returned 1 [0065.200] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Package Cache\\{582EA838-9199-3518-A05C-DB09462F68EC}v14.10.25017\\packages\\vcRuntimeMinimum_x86", nBufferLength=0x105, lpBuffer=0x31e24c, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Package Cache\\{582EA838-9199-3518-A05C-DB09462F68EC}v14.10.25017\\packages\\vcRuntimeMinimum_x86", lpFilePart=0x0) returned 0x6d [0065.201] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Package Cache\\{582EA838-9199-3518-A05C-DB09462F68EC}v14.10.25017\\packages\\vcRuntimeMinimum_x86\\", nBufferLength=0x105, lpBuffer=0x31e220, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Package Cache\\{582EA838-9199-3518-A05C-DB09462F68EC}v14.10.25017\\packages\\vcRuntimeMinimum_x86\\", lpFilePart=0x0) returned 0x6e [0065.201] FindFirstFileW (in: lpFileName="C:\\ProgramData\\Package Cache\\{582EA838-9199-3518-A05C-DB09462F68EC}v14.10.25017\\packages\\vcRuntimeMinimum_x86\\*", lpFindFileData=0x31e46c | out: lpFindFileData=0x31e46c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf94d4300, ftCreationTime.dwHighDateTime=0x1d2fc27, ftLastAccessTime.dwLowDateTime=0xf94d4300, ftLastAccessTime.dwHighDateTime=0x1d2fc27, ftLastWriteTime.dwLowDateTime=0xf94d4300, ftLastWriteTime.dwHighDateTime=0x1d2fc27, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5107aa0 [0065.201] FindClose (in: hFindFile=0x5107aa0 | out: hFindFile=0x5107aa0) returned 1 [0065.201] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Package Cache\\{68306422-7C57-373F-8860-D26CE4BA2A15}v14.10.25017", nBufferLength=0x105, lpBuffer=0x31e33c, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Package Cache\\{68306422-7C57-373F-8860-D26CE4BA2A15}v14.10.25017", lpFilePart=0x0) returned 0x4f [0065.201] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Package Cache\\{68306422-7C57-373F-8860-D26CE4BA2A15}v14.10.25017\\", nBufferLength=0x105, lpBuffer=0x31e310, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Package Cache\\{68306422-7C57-373F-8860-D26CE4BA2A15}v14.10.25017\\", lpFilePart=0x0) returned 0x50 [0065.201] FindFirstFileW (in: lpFileName="C:\\ProgramData\\Package Cache\\{68306422-7C57-373F-8860-D26CE4BA2A15}v14.10.25017\\*", lpFindFileData=0x31e55c | out: lpFindFileData=0x31e55c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf94d4300, ftCreationTime.dwHighDateTime=0x1d2fc27, ftLastAccessTime.dwLowDateTime=0xf94d4300, ftLastAccessTime.dwHighDateTime=0x1d2fc27, ftLastWriteTime.dwLowDateTime=0xf94d4300, ftLastWriteTime.dwHighDateTime=0x1d2fc27, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5107aa0 [0065.202] FindClose (in: hFindFile=0x5107aa0 | out: hFindFile=0x5107aa0) returned 1 [0065.202] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Package Cache\\{68306422-7C57-373F-8860-D26CE4BA2A15}v14.10.25017", nBufferLength=0x105, lpBuffer=0x31e33c, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Package Cache\\{68306422-7C57-373F-8860-D26CE4BA2A15}v14.10.25017", lpFilePart=0x0) returned 0x4f [0065.202] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Package Cache\\{68306422-7C57-373F-8860-D26CE4BA2A15}v14.10.25017\\", nBufferLength=0x105, lpBuffer=0x31e310, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Package Cache\\{68306422-7C57-373F-8860-D26CE4BA2A15}v14.10.25017\\", lpFilePart=0x0) returned 0x50 [0065.202] FindFirstFileW (in: lpFileName="C:\\ProgramData\\Package Cache\\{68306422-7C57-373F-8860-D26CE4BA2A15}v14.10.25017\\*", lpFindFileData=0x31e55c | out: lpFindFileData=0x31e55c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf94d4300, ftCreationTime.dwHighDateTime=0x1d2fc27, ftLastAccessTime.dwLowDateTime=0xf94d4300, ftLastAccessTime.dwHighDateTime=0x1d2fc27, ftLastWriteTime.dwLowDateTime=0xf94d4300, ftLastWriteTime.dwHighDateTime=0x1d2fc27, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5107aa0 [0065.202] FindClose (in: hFindFile=0x5107aa0 | out: hFindFile=0x5107aa0) returned 1 [0065.219] CreateFileW (lpFileName="C:\\ProgramData\\Sun\\Java\\Java Update\\jaureglist.xml" (normalized: "c:\\programdata\\sun\\java\\java update\\jaureglist.xml"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x178 [0065.219] GetFileType (hFile=0x178) returned 0x1 [0065.219] GetFileType (hFile=0x178) returned 0x1 [0065.219] GetFileSize (in: hFile=0x178, lpFileSizeHigh=0x31e790 | out: lpFileSizeHigh=0x31e790*=0x0) returned 0x77 [0065.219] ReadFile (in: hFile=0x178, lpBuffer=0x27bde48, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x31e73c, lpOverlapped=0x0 | out: lpBuffer=0x27bde48*, lpNumberOfBytesRead=0x31e73c*=0x77, lpOverlapped=0x0) returned 1 [0065.265] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e674) returned 1 [0065.265] CreateFileW (lpFileName="C:\\ProgramData\\Sun\\Java\\Java Update\\jaureglist.xml" (normalized: "c:\\programdata\\sun\\java\\java update\\jaureglist.xml"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x178 [0065.266] GetFileType (hFile=0x178) returned 0x1 [0065.266] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e670) returned 1 [0065.266] GetFileType (hFile=0x178) returned 0x1 [0065.266] WriteFile (in: hFile=0x178, lpBuffer=0x280bf64*, nNumberOfBytesToWrite=0x80, lpNumberOfBytesWritten=0x31e704, lpOverlapped=0x0 | out: lpBuffer=0x280bf64*, lpNumberOfBytesWritten=0x31e704*=0x80, lpOverlapped=0x0) returned 1 [0065.267] CloseHandle (hObject=0x178) returned 1 [0065.267] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Sun\\Java\\Java Update\\jaureglist.xml", nBufferLength=0x105, lpBuffer=0x31e2b4, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Sun\\Java\\Java Update\\jaureglist.xml", lpFilePart=0x0) returned 0x32 [0065.267] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Sun\\Java\\Java Update\\jaureglist.xml", nBufferLength=0x105, lpBuffer=0x31e2b4, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Sun\\Java\\Java Update\\jaureglist.xml", lpFilePart=0x0) returned 0x32 [0065.267] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e714) returned 1 [0065.267] GetFileAttributesExW (in: lpFileName="C:\\ProgramData\\Sun\\Java\\Java Update\\jaureglist.xml" (normalized: "c:\\programdata\\sun\\java\\java update\\jaureglist.xml"), fInfoLevelId=0x0, lpFileInformation=0x31e790 | out: lpFileInformation=0x31e790*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x803771e0, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x803771e0, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0xa57bb40, ftLastWriteTime.dwHighDateTime=0x1d6eb7f, nFileSizeHigh=0x0, nFileSizeLow=0x80)) returned 1 [0065.267] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e710) returned 1 [0065.267] MoveFileW (lpExistingFileName="C:\\ProgramData\\Sun\\Java\\Java Update\\jaureglist.xml" (normalized: "c:\\programdata\\sun\\java\\java update\\jaureglist.xml"), lpNewFileName="C:\\ProgramData\\Sun\\Java\\Java Update\\jaureglist.xml" (normalized: "c:\\programdata\\sun\\java\\java update\\jaureglist.xml")) returned 1 [0065.268] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e8ac) returned 1 [0065.268] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Templates", nBufferLength=0x105, lpBuffer=0x31e3b4, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Templates", lpFilePart=0x0) returned 0x18 [0065.268] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Templates\\", nBufferLength=0x105, lpBuffer=0x31e388, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Templates\\", lpFilePart=0x0) returned 0x19 [0065.268] FindFirstFileW (in: lpFileName="C:\\ProgramData\\Templates\\*", lpFindFileData=0x31e5d4 | out: lpFindFileData=0x31e5d4*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0065.268] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e870) returned 1 [0065.269] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e924) returned 1 [0065.269] GetFullPathNameW (in: lpFileName="C:\\Recovery", nBufferLength=0x105, lpBuffer=0x31e42c, lpFilePart=0x0 | out: lpBuffer="C:\\Recovery", lpFilePart=0x0) returned 0xb [0065.269] GetFullPathNameW (in: lpFileName="C:\\Recovery\\", nBufferLength=0x105, lpBuffer=0x31e400, lpFilePart=0x0 | out: lpBuffer="C:\\Recovery\\", lpFilePart=0x0) returned 0xc [0065.269] FindFirstFileW (in: lpFileName="C:\\Recovery\\*", lpFindFileData=0x31e64c | out: lpFindFileData=0x31e64c*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0x27c09980, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x27cc8060, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x27cc8060, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x51079a0 [0065.270] FindNextFileW (in: hFindFile=0x51079a0, lpFindFileData=0x31e65c | out: lpFindFileData=0x31e65c*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0x27c09980, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x27cc8060, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x27cc8060, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0065.271] FindNextFileW (in: hFindFile=0x51079a0, lpFindFileData=0x31e65c | out: lpFindFileData=0x31e65c*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0x27c09980, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x27c2fae0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x27c2fae0, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="e9e23962-4a25-11e7-88e8-91fb2ec43f0b", cAlternateFileName="E9E239~1")) returned 1 [0065.271] FindNextFileW (in: hFindFile=0x51079a0, lpFindFileData=0x31e65c | out: lpFindFileData=0x31e65c*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0x27c09980, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x27c2fae0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x27c2fae0, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="e9e23962-4a25-11e7-88e8-91fb2ec43f0b", cAlternateFileName="E9E239~1")) returned 0 [0065.271] FindClose (in: hFindFile=0x51079a0 | out: hFindFile=0x51079a0) returned 1 [0065.271] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e8e4) returned 1 [0065.271] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e8f0) returned 1 [0065.271] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e924) returned 1 [0065.271] GetFullPathNameW (in: lpFileName="C:\\Recovery", nBufferLength=0x105, lpBuffer=0x31e42c, lpFilePart=0x0 | out: lpBuffer="C:\\Recovery", lpFilePart=0x0) returned 0xb [0065.271] GetFullPathNameW (in: lpFileName="C:\\Recovery\\", nBufferLength=0x105, lpBuffer=0x31e400, lpFilePart=0x0 | out: lpBuffer="C:\\Recovery\\", lpFilePart=0x0) returned 0xc [0065.271] FindFirstFileW (in: lpFileName="C:\\Recovery\\*", lpFindFileData=0x31e64c | out: lpFindFileData=0x31e64c*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0x27c09980, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x27cc8060, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x27cc8060, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x51079a0 [0065.271] FindNextFileW (in: hFindFile=0x51079a0, lpFindFileData=0x31e65c | out: lpFindFileData=0x31e65c*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0x27c09980, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x27cc8060, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x27cc8060, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0065.272] FindNextFileW (in: hFindFile=0x51079a0, lpFindFileData=0x31e65c | out: lpFindFileData=0x31e65c*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0x27c09980, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x27c2fae0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x27c2fae0, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="e9e23962-4a25-11e7-88e8-91fb2ec43f0b", cAlternateFileName="E9E239~1")) returned 1 [0065.272] FindNextFileW (in: hFindFile=0x51079a0, lpFindFileData=0x31e65c | out: lpFindFileData=0x31e65c*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0065.272] FindClose (in: hFindFile=0x51079a0 | out: hFindFile=0x51079a0) returned 1 [0065.272] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e8e4) returned 1 [0065.272] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e8f0) returned 1 [0065.272] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e8ac) returned 1 [0065.272] GetFullPathNameW (in: lpFileName="C:\\Recovery\\e9e23962-4a25-11e7-88e8-91fb2ec43f0b", nBufferLength=0x105, lpBuffer=0x31e3b4, lpFilePart=0x0 | out: lpBuffer="C:\\Recovery\\e9e23962-4a25-11e7-88e8-91fb2ec43f0b", lpFilePart=0x0) returned 0x30 [0065.272] GetFullPathNameW (in: lpFileName="C:\\Recovery\\e9e23962-4a25-11e7-88e8-91fb2ec43f0b\\", nBufferLength=0x105, lpBuffer=0x31e388, lpFilePart=0x0 | out: lpBuffer="C:\\Recovery\\e9e23962-4a25-11e7-88e8-91fb2ec43f0b\\", lpFilePart=0x0) returned 0x31 [0065.272] FindFirstFileW (in: lpFileName="C:\\Recovery\\e9e23962-4a25-11e7-88e8-91fb2ec43f0b\\*", lpFindFileData=0x31e5d4 | out: lpFindFileData=0x31e5d4*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0x27c09980, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x27c2fae0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x27c2fae0, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x51079a0 [0065.272] FindNextFileW (in: hFindFile=0x51079a0, lpFindFileData=0x31e5e4 | out: lpFindFileData=0x31e5e4*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0x27c09980, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x27c2fae0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x27c2fae0, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0065.272] FindNextFileW (in: hFindFile=0x51079a0, lpFindFileData=0x31e5e4 | out: lpFindFileData=0x31e5e4*(dwFileAttributes=0x2006, ftCreationTime.dwLowDateTime=0x27c2fae0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x27c2fae0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x4185decd, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x306000, dwReserved0=0x0, dwReserved1=0x0, cFileName="boot.sdi", cAlternateFileName="")) returned 1 [0065.273] FindNextFileW (in: hFindFile=0x51079a0, lpFindFileData=0x31e5e4 | out: lpFindFileData=0x31e5e4*(dwFileAttributes=0x2006, ftCreationTime.dwLowDateTime=0x6496a3c6, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x64b0e1b9, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0xfa6eb761, ftLastWriteTime.dwHighDateTime=0x1cb88d1, nFileSizeHigh=0x0, nFileSizeLow=0xa160012, dwReserved0=0x0, dwReserved1=0x0, cFileName="Winre.wim", cAlternateFileName="")) returned 1 [0065.273] FindNextFileW (in: hFindFile=0x51079a0, lpFindFileData=0x31e5e4 | out: lpFindFileData=0x31e5e4*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0065.273] FindClose (in: hFindFile=0x51079a0 | out: hFindFile=0x51079a0) returned 1 [0065.273] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e86c) returned 1 [0065.273] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e878) returned 1 [0065.273] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e8ac) returned 1 [0065.273] GetFullPathNameW (in: lpFileName="C:\\Recovery\\e9e23962-4a25-11e7-88e8-91fb2ec43f0b", nBufferLength=0x105, lpBuffer=0x31e3b4, lpFilePart=0x0 | out: lpBuffer="C:\\Recovery\\e9e23962-4a25-11e7-88e8-91fb2ec43f0b", lpFilePart=0x0) returned 0x30 [0065.273] GetFullPathNameW (in: lpFileName="C:\\Recovery\\e9e23962-4a25-11e7-88e8-91fb2ec43f0b\\", nBufferLength=0x105, lpBuffer=0x31e388, lpFilePart=0x0 | out: lpBuffer="C:\\Recovery\\e9e23962-4a25-11e7-88e8-91fb2ec43f0b\\", lpFilePart=0x0) returned 0x31 [0065.273] FindFirstFileW (in: lpFileName="C:\\Recovery\\e9e23962-4a25-11e7-88e8-91fb2ec43f0b\\*", lpFindFileData=0x31e5d4 | out: lpFindFileData=0x31e5d4*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0x27c09980, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x27c2fae0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x27c2fae0, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x51079a0 [0065.273] FindNextFileW (in: hFindFile=0x51079a0, lpFindFileData=0x31e5e4 | out: lpFindFileData=0x31e5e4*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0x27c09980, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x27c2fae0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x27c2fae0, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0065.273] FindNextFileW (in: hFindFile=0x51079a0, lpFindFileData=0x31e5e4 | out: lpFindFileData=0x31e5e4*(dwFileAttributes=0x2006, ftCreationTime.dwLowDateTime=0x27c2fae0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x27c2fae0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x4185decd, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x306000, dwReserved0=0x0, dwReserved1=0x0, cFileName="boot.sdi", cAlternateFileName="")) returned 1 [0065.274] FindNextFileW (in: hFindFile=0x51079a0, lpFindFileData=0x31e5e4 | out: lpFindFileData=0x31e5e4*(dwFileAttributes=0x2006, ftCreationTime.dwLowDateTime=0x6496a3c6, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x64b0e1b9, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0xfa6eb761, ftLastWriteTime.dwHighDateTime=0x1cb88d1, nFileSizeHigh=0x0, nFileSizeLow=0xa160012, dwReserved0=0x0, dwReserved1=0x0, cFileName="Winre.wim", cAlternateFileName="")) returned 1 [0065.274] FindNextFileW (in: hFindFile=0x51079a0, lpFindFileData=0x31e5e4 | out: lpFindFileData=0x31e5e4*(dwFileAttributes=0x2006, ftCreationTime.dwLowDateTime=0x6496a3c6, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x64b0e1b9, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0xfa6eb761, ftLastWriteTime.dwHighDateTime=0x1cb88d1, nFileSizeHigh=0x0, nFileSizeLow=0xa160012, dwReserved0=0x0, dwReserved1=0x0, cFileName="Winre.wim", cAlternateFileName="")) returned 0 [0065.274] FindClose (in: hFindFile=0x51079a0 | out: hFindFile=0x51079a0) returned 1 [0065.274] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e86c) returned 1 [0065.274] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e878) returned 1 [0065.274] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e924) returned 1 [0065.274] GetFullPathNameW (in: lpFileName="C:\\System Volume Information", nBufferLength=0x105, lpBuffer=0x31e42c, lpFilePart=0x0 | out: lpBuffer="C:\\System Volume Information", lpFilePart=0x0) returned 0x1c [0065.274] GetFullPathNameW (in: lpFileName="C:\\System Volume Information\\", nBufferLength=0x105, lpBuffer=0x31e400, lpFilePart=0x0 | out: lpBuffer="C:\\System Volume Information\\", lpFilePart=0x0) returned 0x1d [0065.274] FindFirstFileW (in: lpFileName="C:\\System Volume Information\\*", lpFindFileData=0x31e64c | out: lpFindFileData=0x31e64c*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0065.274] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e8e8) returned 1 [0065.275] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e924) returned 1 [0065.275] GetFullPathNameW (in: lpFileName="C:\\Users", nBufferLength=0x105, lpBuffer=0x31e42c, lpFilePart=0x0 | out: lpBuffer="C:\\Users", lpFilePart=0x0) returned 0x8 [0065.276] GetFullPathNameW (in: lpFileName="C:\\Users\\", nBufferLength=0x105, lpBuffer=0x31e400, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\", lpFilePart=0x0) returned 0x9 [0065.276] FindFirstFileW (in: lpFileName="C:\\Users\\*", lpFindFileData=0x31e64c | out: lpFindFileData=0x31e64c*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0xfda01e06, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x28c670c0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x28c670c0, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x51079a0 [0065.276] FindNextFileW (in: hFindFile=0x51079a0, lpFindFileData=0x31e65c | out: lpFindFileData=0x31e65c*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0xfda01e06, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x28c670c0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x28c670c0, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0065.276] FindNextFileW (in: hFindFile=0x51079a0, lpFindFileData=0x31e65c | out: lpFindFileData=0x31e65c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x28c670c0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x2914fe20, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x2914fe20, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="5p5NrGJn0jS HALPmcxz", cAlternateFileName="5P5NRG~1")) returned 1 [0065.276] FindNextFileW (in: hFindFile=0x51079a0, lpFindFileData=0x31e65c | out: lpFindFileData=0x31e65c*(dwFileAttributes=0x2416, ftCreationTime.dwLowDateTime=0x307290f2, ftCreationTime.dwHighDateTime=0x1ca0441, ftLastAccessTime.dwLowDateTime=0x307290f2, ftLastAccessTime.dwHighDateTime=0x1ca0441, ftLastWriteTime.dwLowDateTime=0x307290f2, ftLastWriteTime.dwHighDateTime=0x1ca0441, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa000000c, dwReserved1=0x0, cFileName="All Users", cAlternateFileName="ALLUSE~1")) returned 1 [0065.276] FindNextFileW (in: hFindFile=0x51079a0, lpFindFileData=0x31e65c | out: lpFindFileData=0x31e65c*(dwFileAttributes=0x13, ftCreationTime.dwLowDateTime=0xfda01e06, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x62fa4a0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x62fa4a0, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa000000c, dwReserved1=0x0, cFileName="Default", cAlternateFileName="")) returned 1 [0065.276] FindNextFileW (in: hFindFile=0x51079a0, lpFindFileData=0x31e65c | out: lpFindFileData=0x31e65c*(dwFileAttributes=0x2416, ftCreationTime.dwLowDateTime=0x307290f2, ftCreationTime.dwHighDateTime=0x1ca0441, ftLastAccessTime.dwLowDateTime=0x307290f2, ftLastAccessTime.dwHighDateTime=0x1ca0441, ftLastWriteTime.dwLowDateTime=0x307290f2, ftLastWriteTime.dwHighDateTime=0x1ca0441, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Default User", cAlternateFileName="DEFAUL~1")) returned 1 [0065.277] FindNextFileW (in: hFindFile=0x51079a0, lpFindFileData=0x31e65c | out: lpFindFileData=0x31e65c*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0x286e4016, ftCreationTime.dwHighDateTime=0x1ca043f, ftLastAccessTime.dwLowDateTime=0x286e4016, ftLastAccessTime.dwHighDateTime=0x1ca043f, ftLastWriteTime.dwLowDateTime=0x28a4ffbc, ftLastWriteTime.dwHighDateTime=0x1ca043f, nFileSizeHigh=0x0, nFileSizeLow=0xae, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="desktop.ini", cAlternateFileName="")) returned 1 [0065.277] FindNextFileW (in: hFindFile=0x51079a0, lpFindFileData=0x31e65c | out: lpFindFileData=0x31e65c*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0xfdac04c8, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x917fa2ee, ftLastAccessTime.dwHighDateTime=0x1cbf8eb, ftLastWriteTime.dwLowDateTime=0x917fa2ee, ftLastWriteTime.dwHighDateTime=0x1cbf8eb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Public", cAlternateFileName="")) returned 1 [0065.277] FindNextFileW (in: hFindFile=0x51079a0, lpFindFileData=0x31e65c | out: lpFindFileData=0x31e65c*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0xfdac04c8, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x917fa2ee, ftLastAccessTime.dwHighDateTime=0x1cbf8eb, ftLastWriteTime.dwLowDateTime=0x917fa2ee, ftLastWriteTime.dwHighDateTime=0x1cbf8eb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Public", cAlternateFileName="")) returned 0 [0065.277] FindClose (in: hFindFile=0x51079a0 | out: hFindFile=0x51079a0) returned 1 [0065.277] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e8e4) returned 1 [0065.277] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e8f0) returned 1 [0065.277] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e924) returned 1 [0065.277] GetFullPathNameW (in: lpFileName="C:\\Users", nBufferLength=0x105, lpBuffer=0x31e42c, lpFilePart=0x0 | out: lpBuffer="C:\\Users", lpFilePart=0x0) returned 0x8 [0065.277] GetFullPathNameW (in: lpFileName="C:\\Users\\", nBufferLength=0x105, lpBuffer=0x31e400, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\", lpFilePart=0x0) returned 0x9 [0065.277] FindFirstFileW (in: lpFileName="C:\\Users\\*", lpFindFileData=0x31e64c | out: lpFindFileData=0x31e64c*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0xfda01e06, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x28c670c0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x28c670c0, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x51079a0 [0065.277] FindNextFileW (in: hFindFile=0x51079a0, lpFindFileData=0x31e65c | out: lpFindFileData=0x31e65c*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0xfda01e06, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x28c670c0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x28c670c0, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0065.278] FindNextFileW (in: hFindFile=0x51079a0, lpFindFileData=0x31e65c | out: lpFindFileData=0x31e65c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x28c670c0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x2914fe20, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x2914fe20, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="5p5NrGJn0jS HALPmcxz", cAlternateFileName="5P5NRG~1")) returned 1 [0065.278] FindNextFileW (in: hFindFile=0x51079a0, lpFindFileData=0x31e65c | out: lpFindFileData=0x31e65c*(dwFileAttributes=0x2416, ftCreationTime.dwLowDateTime=0x307290f2, ftCreationTime.dwHighDateTime=0x1ca0441, ftLastAccessTime.dwLowDateTime=0x307290f2, ftLastAccessTime.dwHighDateTime=0x1ca0441, ftLastWriteTime.dwLowDateTime=0x307290f2, ftLastWriteTime.dwHighDateTime=0x1ca0441, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa000000c, dwReserved1=0x0, cFileName="All Users", cAlternateFileName="ALLUSE~1")) returned 1 [0065.278] FindNextFileW (in: hFindFile=0x51079a0, lpFindFileData=0x31e65c | out: lpFindFileData=0x31e65c*(dwFileAttributes=0x13, ftCreationTime.dwLowDateTime=0xfda01e06, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x62fa4a0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x62fa4a0, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Default", cAlternateFileName="")) returned 1 [0065.278] FindNextFileW (in: hFindFile=0x51079a0, lpFindFileData=0x31e65c | out: lpFindFileData=0x31e65c*(dwFileAttributes=0x2416, ftCreationTime.dwLowDateTime=0x307290f2, ftCreationTime.dwHighDateTime=0x1ca0441, ftLastAccessTime.dwLowDateTime=0x307290f2, ftLastAccessTime.dwHighDateTime=0x1ca0441, ftLastWriteTime.dwLowDateTime=0x307290f2, ftLastWriteTime.dwHighDateTime=0x1ca0441, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Default User", cAlternateFileName="DEFAUL~1")) returned 1 [0065.278] FindNextFileW (in: hFindFile=0x51079a0, lpFindFileData=0x31e65c | out: lpFindFileData=0x31e65c*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0x286e4016, ftCreationTime.dwHighDateTime=0x1ca043f, ftLastAccessTime.dwLowDateTime=0x286e4016, ftLastAccessTime.dwHighDateTime=0x1ca043f, ftLastWriteTime.dwLowDateTime=0x28a4ffbc, ftLastWriteTime.dwHighDateTime=0x1ca043f, nFileSizeHigh=0x0, nFileSizeLow=0xae, dwReserved0=0x0, dwReserved1=0x0, cFileName="desktop.ini", cAlternateFileName="")) returned 1 [0065.278] FindNextFileW (in: hFindFile=0x51079a0, lpFindFileData=0x31e65c | out: lpFindFileData=0x31e65c*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0xfdac04c8, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x917fa2ee, ftLastAccessTime.dwHighDateTime=0x1cbf8eb, ftLastWriteTime.dwLowDateTime=0x917fa2ee, ftLastWriteTime.dwHighDateTime=0x1cbf8eb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Public", cAlternateFileName="")) returned 1 [0065.278] FindNextFileW (in: hFindFile=0x51079a0, lpFindFileData=0x31e65c | out: lpFindFileData=0x31e65c*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0065.278] FindClose (in: hFindFile=0x51079a0 | out: hFindFile=0x51079a0) returned 1 [0065.279] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e8e4) returned 1 [0065.279] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e8f0) returned 1 [0065.279] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e8ac) returned 1 [0065.279] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz", nBufferLength=0x105, lpBuffer=0x31e3b4, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz", lpFilePart=0x0) returned 0x1d [0065.279] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\", nBufferLength=0x105, lpBuffer=0x31e388, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\", lpFilePart=0x0) returned 0x1e [0065.279] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\*", lpFindFileData=0x31e5d4 | out: lpFindFileData=0x31e5d4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x28c670c0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x2914fe20, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x2914fe20, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x51079a0 [0065.279] FindNextFileW (in: hFindFile=0x51079a0, lpFindFileData=0x31e5e4 | out: lpFindFileData=0x31e5e4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x28c670c0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x2914fe20, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x2914fe20, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0065.279] FindNextFileW (in: hFindFile=0x51079a0, lpFindFileData=0x31e5e4 | out: lpFindFileData=0x31e5e4*(dwFileAttributes=0x2012, ftCreationTime.dwLowDateTime=0x28cff640, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28cff640, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xe9bbeade, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="AppData", cAlternateFileName="")) returned 1 [0065.279] FindNextFileW (in: hFindFile=0x51079a0, lpFindFileData=0x31e5e4 | out: lpFindFileData=0x31e5e4*(dwFileAttributes=0x2416, ftCreationTime.dwLowDateTime=0x29103b60, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x29103b60, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x29103b60, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Application Data", cAlternateFileName="APPLIC~1")) returned 1 [0065.279] FindNextFileW (in: hFindFile=0x51079a0, lpFindFileData=0x31e5e4 | out: lpFindFileData=0x31e5e4*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x28cff640, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x2eaf1340, ftLastAccessTime.dwHighDateTime=0x1d2fad7, ftLastWriteTime.dwLowDateTime=0x2eaf1340, ftLastWriteTime.dwHighDateTime=0x1d2fad7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Contacts", cAlternateFileName="")) returned 1 [0065.280] FindNextFileW (in: hFindFile=0x51079a0, lpFindFileData=0x31e5e4 | out: lpFindFileData=0x31e5e4*(dwFileAttributes=0x2416, ftCreationTime.dwLowDateTime=0x29103b60, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x29103b60, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x29103b60, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Cookies", cAlternateFileName="")) returned 1 [0065.280] FindNextFileW (in: hFindFile=0x51079a0, lpFindFileData=0x31e5e4 | out: lpFindFileData=0x31e5e4*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x28cff640, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0xee595980, ftLastAccessTime.dwHighDateTime=0x1d6eb7e, ftLastWriteTime.dwLowDateTime=0xee595980, ftLastWriteTime.dwHighDateTime=0x1d6eb7e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Desktop", cAlternateFileName="")) returned 1 [0065.280] FindNextFileW (in: hFindFile=0x51079a0, lpFindFileData=0x31e5e4 | out: lpFindFileData=0x31e5e4*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x28cff640, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0xd8df9720, ftLastAccessTime.dwHighDateTime=0x1d5e82a, ftLastWriteTime.dwLowDateTime=0xd8df9720, ftLastWriteTime.dwHighDateTime=0x1d5e82a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Documents", cAlternateFileName="DOCUME~1")) returned 1 [0065.280] FindNextFileW (in: hFindFile=0x51079a0, lpFindFileData=0x31e5e4 | out: lpFindFileData=0x31e5e4*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x28cff640, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28d4b900, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x2d1e12e0, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Downloads", cAlternateFileName="DOWNLO~1")) returned 1 [0065.280] FindNextFileW (in: hFindFile=0x51079a0, lpFindFileData=0x31e5e4 | out: lpFindFileData=0x31e5e4*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x28cff640, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28d4b900, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x2d1bb180, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Favorites", cAlternateFileName="FAVORI~1")) returned 1 [0065.280] FindNextFileW (in: hFindFile=0x51079a0, lpFindFileData=0x31e5e4 | out: lpFindFileData=0x31e5e4*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x28cff640, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28d4b900, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x2d2c5b20, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Links", cAlternateFileName="")) returned 1 [0065.281] FindNextFileW (in: hFindFile=0x51079a0, lpFindFileData=0x31e5e4 | out: lpFindFileData=0x31e5e4*(dwFileAttributes=0x2416, ftCreationTime.dwLowDateTime=0x2914fe20, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x2914fe20, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x2914fe20, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Local Settings", cAlternateFileName="LOCALS~1")) returned 1 [0065.281] FindNextFileW (in: hFindFile=0x51079a0, lpFindFileData=0x31e5e4 | out: lpFindFileData=0x31e5e4*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x28cff640, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0xd8e6bb40, ftLastAccessTime.dwHighDateTime=0x1d5e82a, ftLastWriteTime.dwLowDateTime=0xd8e6bb40, ftLastWriteTime.dwHighDateTime=0x1d5e82a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Music", cAlternateFileName="")) returned 1 [0065.281] FindNextFileW (in: hFindFile=0x51079a0, lpFindFileData=0x31e5e4 | out: lpFindFileData=0x31e5e4*(dwFileAttributes=0x2416, ftCreationTime.dwLowDateTime=0x290dda00, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x290dda00, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x290dda00, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="My Documents", cAlternateFileName="MYDOCU~1")) returned 1 [0065.281] FindNextFileW (in: hFindFile=0x51079a0, lpFindFileData=0x31e5e4 | out: lpFindFileData=0x31e5e4*(dwFileAttributes=0x2416, ftCreationTime.dwLowDateTime=0x29103b60, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x29103b60, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x29103b60, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="NetHood", cAlternateFileName="")) returned 1 [0065.281] FindNextFileW (in: hFindFile=0x51079a0, lpFindFileData=0x31e5e4 | out: lpFindFileData=0x31e5e4*(dwFileAttributes=0x2026, ftCreationTime.dwLowDateTime=0x28cd94e0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x8f3afd80, ftLastAccessTime.dwHighDateTime=0x1d5e82a, ftLastWriteTime.dwLowDateTime=0x8f3afd80, ftLastWriteTime.dwHighDateTime=0x1d5e82a, nFileSizeHigh=0x0, nFileSizeLow=0x100000, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="NTUSER.DAT", cAlternateFileName="")) returned 1 [0065.281] FindNextFileW (in: hFindFile=0x51079a0, lpFindFileData=0x31e5e4 | out: lpFindFileData=0x31e5e4*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0x28f60c40, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28f60c40, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x8f389c20, ftLastWriteTime.dwHighDateTime=0x1d5e82a, nFileSizeHigh=0x0, nFileSizeLow=0x40000, dwReserved0=0x0, dwReserved1=0x0, cFileName="ntuser.dat.LOG1", cAlternateFileName="NTUSER~1.LOG")) returned 1 [0065.281] FindNextFileW (in: hFindFile=0x51079a0, lpFindFileData=0x31e5e4 | out: lpFindFileData=0x31e5e4*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0x28f60c40, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28f60c40, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x28f60c40, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="ntuser.dat.LOG2", cAlternateFileName="NTUSER~2.LOG")) returned 1 [0065.281] FindNextFileW (in: hFindFile=0x51079a0, lpFindFileData=0x31e5e4 | out: lpFindFileData=0x31e5e4*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0x28f60c40, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28f60c40, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x40b0f7f0, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x10000, dwReserved0=0x0, dwReserved1=0x0, cFileName="NTUSER.DAT{016888bd-6c6f-11de-8d1d-001e0bcde3ec}.TM.blf", cAlternateFileName="NTUSER~1.BLF")) returned 1 [0065.282] FindNextFileW (in: hFindFile=0x51079a0, lpFindFileData=0x31e5e4 | out: lpFindFileData=0x31e5e4*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0x28f86da0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28f86da0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x40b0f7f0, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x80000, dwReserved0=0x0, dwReserved1=0x0, cFileName="NTUSER.DAT{016888bd-6c6f-11de-8d1d-001e0bcde3ec}.TMContainer00000000000000000001.regtrans-ms", cAlternateFileName="NTUSER~1.REG")) returned 1 [0065.282] FindNextFileW (in: hFindFile=0x51079a0, lpFindFileData=0x31e5e4 | out: lpFindFileData=0x31e5e4*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0x28f86da0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28f86da0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x40b0f7f0, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x80000, dwReserved0=0x0, dwReserved1=0x0, cFileName="NTUSER.DAT{016888bd-6c6f-11de-8d1d-001e0bcde3ec}.TMContainer00000000000000000002.regtrans-ms", cAlternateFileName="NTUSER~2.REG")) returned 1 [0065.282] FindNextFileW (in: hFindFile=0x51079a0, lpFindFileData=0x31e5e4 | out: lpFindFileData=0x31e5e4*(dwFileAttributes=0x6, ftCreationTime.dwLowDateTime=0x28cd94e0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28cd94e0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xe9bbeade, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x14, dwReserved0=0x0, dwReserved1=0x0, cFileName="ntuser.ini", cAlternateFileName="")) returned 1 [0065.282] FindNextFileW (in: hFindFile=0x51079a0, lpFindFileData=0x31e5e4 | out: lpFindFileData=0x31e5e4*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x28cd94e0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0xd8fc27a0, ftLastAccessTime.dwHighDateTime=0x1d5e82a, ftLastWriteTime.dwLowDateTime=0xd8fc27a0, ftLastWriteTime.dwHighDateTime=0x1d5e82a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Pictures", cAlternateFileName="")) returned 1 [0065.282] FindNextFileW (in: hFindFile=0x51079a0, lpFindFileData=0x31e5e4 | out: lpFindFileData=0x31e5e4*(dwFileAttributes=0x2416, ftCreationTime.dwLowDateTime=0x29103b60, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x29103b60, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x29103b60, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="PrintHood", cAlternateFileName="PRINTH~1")) returned 1 [0065.282] FindNextFileW (in: hFindFile=0x51079a0, lpFindFileData=0x31e5e4 | out: lpFindFileData=0x31e5e4*(dwFileAttributes=0x2416, ftCreationTime.dwLowDateTime=0x29129cc0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x29129cc0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x29129cc0, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Recent", cAlternateFileName="")) returned 1 [0065.282] FindNextFileW (in: hFindFile=0x51079a0, lpFindFileData=0x31e5e4 | out: lpFindFileData=0x31e5e4*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x28cd94e0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28d257a0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x2d22d5a0, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Saved Games", cAlternateFileName="SAVEDG~1")) returned 1 [0065.283] FindNextFileW (in: hFindFile=0x51079a0, lpFindFileData=0x31e5e4 | out: lpFindFileData=0x31e5e4*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x28cd94e0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28de3e80, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x2d1e12e0, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Searches", cAlternateFileName="")) returned 1 [0065.283] FindNextFileW (in: hFindFile=0x51079a0, lpFindFileData=0x31e5e4 | out: lpFindFileData=0x31e5e4*(dwFileAttributes=0x2416, ftCreationTime.dwLowDateTime=0x29129cc0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x29129cc0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x29129cc0, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="SendTo", cAlternateFileName="")) returned 1 [0065.283] FindNextFileW (in: hFindFile=0x51079a0, lpFindFileData=0x31e5e4 | out: lpFindFileData=0x31e5e4*(dwFileAttributes=0x2416, ftCreationTime.dwLowDateTime=0x29129cc0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x29129cc0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x29129cc0, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Start Menu", cAlternateFileName="STARTM~1")) returned 1 [0065.283] FindNextFileW (in: hFindFile=0x51079a0, lpFindFileData=0x31e5e4 | out: lpFindFileData=0x31e5e4*(dwFileAttributes=0x2416, ftCreationTime.dwLowDateTime=0x2914fe20, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x2914fe20, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x2914fe20, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Templates", cAlternateFileName="TEMPLA~1")) returned 1 [0065.283] FindNextFileW (in: hFindFile=0x51079a0, lpFindFileData=0x31e5e4 | out: lpFindFileData=0x31e5e4*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x28cd94e0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0xd8f50380, ftLastAccessTime.dwHighDateTime=0x1d5e82a, ftLastWriteTime.dwLowDateTime=0xd8f50380, ftLastWriteTime.dwHighDateTime=0x1d5e82a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Videos", cAlternateFileName="")) returned 1 [0065.283] FindNextFileW (in: hFindFile=0x51079a0, lpFindFileData=0x31e5e4 | out: lpFindFileData=0x31e5e4*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x28cd94e0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0xd8f50380, ftLastAccessTime.dwHighDateTime=0x1d5e82a, ftLastWriteTime.dwLowDateTime=0xd8f50380, ftLastWriteTime.dwHighDateTime=0x1d5e82a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Videos", cAlternateFileName="")) returned 0 [0065.283] FindClose (in: hFindFile=0x51079a0 | out: hFindFile=0x51079a0) returned 1 [0065.284] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e86c) returned 1 [0065.284] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e878) returned 1 [0065.284] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e8ac) returned 1 [0065.284] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz", nBufferLength=0x105, lpBuffer=0x31e3b4, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz", lpFilePart=0x0) returned 0x1d [0065.284] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\", nBufferLength=0x105, lpBuffer=0x31e388, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\", lpFilePart=0x0) returned 0x1e [0065.284] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\*", lpFindFileData=0x31e5d4 | out: lpFindFileData=0x31e5d4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x28c670c0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x2914fe20, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x2914fe20, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x51079a0 [0065.284] FindNextFileW (in: hFindFile=0x51079a0, lpFindFileData=0x31e5e4 | out: lpFindFileData=0x31e5e4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x28c670c0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x2914fe20, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x2914fe20, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0065.284] FindNextFileW (in: hFindFile=0x51079a0, lpFindFileData=0x31e5e4 | out: lpFindFileData=0x31e5e4*(dwFileAttributes=0x2012, ftCreationTime.dwLowDateTime=0x28cff640, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28cff640, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xe9bbeade, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="AppData", cAlternateFileName="")) returned 1 [0065.284] FindNextFileW (in: hFindFile=0x51079a0, lpFindFileData=0x31e5e4 | out: lpFindFileData=0x31e5e4*(dwFileAttributes=0x2416, ftCreationTime.dwLowDateTime=0x29103b60, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x29103b60, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x29103b60, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Application Data", cAlternateFileName="APPLIC~1")) returned 1 [0065.284] FindNextFileW (in: hFindFile=0x51079a0, lpFindFileData=0x31e5e4 | out: lpFindFileData=0x31e5e4*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x28cff640, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x2eaf1340, ftLastAccessTime.dwHighDateTime=0x1d2fad7, ftLastWriteTime.dwLowDateTime=0x2eaf1340, ftLastWriteTime.dwHighDateTime=0x1d2fad7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Contacts", cAlternateFileName="")) returned 1 [0065.284] FindNextFileW (in: hFindFile=0x51079a0, lpFindFileData=0x31e5e4 | out: lpFindFileData=0x31e5e4*(dwFileAttributes=0x2416, ftCreationTime.dwLowDateTime=0x29103b60, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x29103b60, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x29103b60, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Cookies", cAlternateFileName="")) returned 1 [0065.285] FindNextFileW (in: hFindFile=0x51079a0, lpFindFileData=0x31e5e4 | out: lpFindFileData=0x31e5e4*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x28cff640, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0xee595980, ftLastAccessTime.dwHighDateTime=0x1d6eb7e, ftLastWriteTime.dwLowDateTime=0xee595980, ftLastWriteTime.dwHighDateTime=0x1d6eb7e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Desktop", cAlternateFileName="")) returned 1 [0065.285] FindNextFileW (in: hFindFile=0x51079a0, lpFindFileData=0x31e5e4 | out: lpFindFileData=0x31e5e4*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x28cff640, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0xd8df9720, ftLastAccessTime.dwHighDateTime=0x1d5e82a, ftLastWriteTime.dwLowDateTime=0xd8df9720, ftLastWriteTime.dwHighDateTime=0x1d5e82a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Documents", cAlternateFileName="DOCUME~1")) returned 1 [0065.285] FindNextFileW (in: hFindFile=0x51079a0, lpFindFileData=0x31e5e4 | out: lpFindFileData=0x31e5e4*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x28cff640, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28d4b900, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x2d1e12e0, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Downloads", cAlternateFileName="DOWNLO~1")) returned 1 [0065.285] FindNextFileW (in: hFindFile=0x51079a0, lpFindFileData=0x31e5e4 | out: lpFindFileData=0x31e5e4*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x28cff640, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28d4b900, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x2d1bb180, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Favorites", cAlternateFileName="FAVORI~1")) returned 1 [0065.285] FindNextFileW (in: hFindFile=0x51079a0, lpFindFileData=0x31e5e4 | out: lpFindFileData=0x31e5e4*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x28cff640, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28d4b900, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x2d2c5b20, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Links", cAlternateFileName="")) returned 1 [0065.285] FindNextFileW (in: hFindFile=0x51079a0, lpFindFileData=0x31e5e4 | out: lpFindFileData=0x31e5e4*(dwFileAttributes=0x2416, ftCreationTime.dwLowDateTime=0x2914fe20, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x2914fe20, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x2914fe20, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Local Settings", cAlternateFileName="LOCALS~1")) returned 1 [0065.285] FindNextFileW (in: hFindFile=0x51079a0, lpFindFileData=0x31e5e4 | out: lpFindFileData=0x31e5e4*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x28cff640, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0xd8e6bb40, ftLastAccessTime.dwHighDateTime=0x1d5e82a, ftLastWriteTime.dwLowDateTime=0xd8e6bb40, ftLastWriteTime.dwHighDateTime=0x1d5e82a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Music", cAlternateFileName="")) returned 1 [0065.285] FindNextFileW (in: hFindFile=0x51079a0, lpFindFileData=0x31e5e4 | out: lpFindFileData=0x31e5e4*(dwFileAttributes=0x2416, ftCreationTime.dwLowDateTime=0x290dda00, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x290dda00, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x290dda00, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="My Documents", cAlternateFileName="MYDOCU~1")) returned 1 [0065.285] FindNextFileW (in: hFindFile=0x51079a0, lpFindFileData=0x31e5e4 | out: lpFindFileData=0x31e5e4*(dwFileAttributes=0x2416, ftCreationTime.dwLowDateTime=0x29103b60, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x29103b60, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x29103b60, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="NetHood", cAlternateFileName="")) returned 1 [0065.286] FindNextFileW (in: hFindFile=0x51079a0, lpFindFileData=0x31e5e4 | out: lpFindFileData=0x31e5e4*(dwFileAttributes=0x2026, ftCreationTime.dwLowDateTime=0x28cd94e0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x8f3afd80, ftLastAccessTime.dwHighDateTime=0x1d5e82a, ftLastWriteTime.dwLowDateTime=0x8f3afd80, ftLastWriteTime.dwHighDateTime=0x1d5e82a, nFileSizeHigh=0x0, nFileSizeLow=0x100000, dwReserved0=0x0, dwReserved1=0x0, cFileName="NTUSER.DAT", cAlternateFileName="")) returned 1 [0065.286] FindNextFileW (in: hFindFile=0x51079a0, lpFindFileData=0x31e5e4 | out: lpFindFileData=0x31e5e4*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0x28f60c40, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28f60c40, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x8f389c20, ftLastWriteTime.dwHighDateTime=0x1d5e82a, nFileSizeHigh=0x0, nFileSizeLow=0x40000, dwReserved0=0x0, dwReserved1=0x0, cFileName="ntuser.dat.LOG1", cAlternateFileName="NTUSER~1.LOG")) returned 1 [0065.286] FindNextFileW (in: hFindFile=0x51079a0, lpFindFileData=0x31e5e4 | out: lpFindFileData=0x31e5e4*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0x28f60c40, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28f60c40, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x28f60c40, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="ntuser.dat.LOG2", cAlternateFileName="NTUSER~2.LOG")) returned 1 [0065.286] FindNextFileW (in: hFindFile=0x51079a0, lpFindFileData=0x31e5e4 | out: lpFindFileData=0x31e5e4*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0x28f60c40, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28f60c40, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x40b0f7f0, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x10000, dwReserved0=0x0, dwReserved1=0x0, cFileName="NTUSER.DAT{016888bd-6c6f-11de-8d1d-001e0bcde3ec}.TM.blf", cAlternateFileName="NTUSER~1.BLF")) returned 1 [0065.286] FindNextFileW (in: hFindFile=0x51079a0, lpFindFileData=0x31e5e4 | out: lpFindFileData=0x31e5e4*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0x28f86da0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28f86da0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x40b0f7f0, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x80000, dwReserved0=0x0, dwReserved1=0x0, cFileName="NTUSER.DAT{016888bd-6c6f-11de-8d1d-001e0bcde3ec}.TMContainer00000000000000000001.regtrans-ms", cAlternateFileName="NTUSER~1.REG")) returned 1 [0065.286] FindNextFileW (in: hFindFile=0x51079a0, lpFindFileData=0x31e5e4 | out: lpFindFileData=0x31e5e4*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0x28f86da0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28f86da0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x40b0f7f0, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x80000, dwReserved0=0x0, dwReserved1=0x0, cFileName="NTUSER.DAT{016888bd-6c6f-11de-8d1d-001e0bcde3ec}.TMContainer00000000000000000002.regtrans-ms", cAlternateFileName="NTUSER~2.REG")) returned 1 [0065.287] FindNextFileW (in: hFindFile=0x51079a0, lpFindFileData=0x31e5e4 | out: lpFindFileData=0x31e5e4*(dwFileAttributes=0x6, ftCreationTime.dwLowDateTime=0x28cd94e0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28cd94e0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xe9bbeade, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x14, dwReserved0=0x0, dwReserved1=0x0, cFileName="ntuser.ini", cAlternateFileName="")) returned 1 [0065.287] FindNextFileW (in: hFindFile=0x51079a0, lpFindFileData=0x31e5e4 | out: lpFindFileData=0x31e5e4*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x28cd94e0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0xd8fc27a0, ftLastAccessTime.dwHighDateTime=0x1d5e82a, ftLastWriteTime.dwLowDateTime=0xd8fc27a0, ftLastWriteTime.dwHighDateTime=0x1d5e82a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Pictures", cAlternateFileName="")) returned 1 [0065.287] FindNextFileW (in: hFindFile=0x51079a0, lpFindFileData=0x31e5e4 | out: lpFindFileData=0x31e5e4*(dwFileAttributes=0x2416, ftCreationTime.dwLowDateTime=0x29103b60, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x29103b60, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x29103b60, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="PrintHood", cAlternateFileName="PRINTH~1")) returned 1 [0065.287] FindNextFileW (in: hFindFile=0x51079a0, lpFindFileData=0x31e5e4 | out: lpFindFileData=0x31e5e4*(dwFileAttributes=0x2416, ftCreationTime.dwLowDateTime=0x29129cc0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x29129cc0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x29129cc0, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Recent", cAlternateFileName="")) returned 1 [0065.287] FindNextFileW (in: hFindFile=0x51079a0, lpFindFileData=0x31e5e4 | out: lpFindFileData=0x31e5e4*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x28cd94e0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28d257a0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x2d22d5a0, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Saved Games", cAlternateFileName="SAVEDG~1")) returned 1 [0065.287] FindNextFileW (in: hFindFile=0x51079a0, lpFindFileData=0x31e5e4 | out: lpFindFileData=0x31e5e4*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x28cd94e0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28de3e80, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x2d1e12e0, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Searches", cAlternateFileName="")) returned 1 [0065.287] FindNextFileW (in: hFindFile=0x51079a0, lpFindFileData=0x31e5e4 | out: lpFindFileData=0x31e5e4*(dwFileAttributes=0x2416, ftCreationTime.dwLowDateTime=0x29129cc0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x29129cc0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x29129cc0, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="SendTo", cAlternateFileName="")) returned 1 [0065.288] FindNextFileW (in: hFindFile=0x51079a0, lpFindFileData=0x31e5e4 | out: lpFindFileData=0x31e5e4*(dwFileAttributes=0x2416, ftCreationTime.dwLowDateTime=0x29129cc0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x29129cc0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x29129cc0, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Start Menu", cAlternateFileName="STARTM~1")) returned 1 [0065.288] FindNextFileW (in: hFindFile=0x51079a0, lpFindFileData=0x31e5e4 | out: lpFindFileData=0x31e5e4*(dwFileAttributes=0x2416, ftCreationTime.dwLowDateTime=0x2914fe20, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x2914fe20, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x2914fe20, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Templates", cAlternateFileName="TEMPLA~1")) returned 1 [0065.288] FindNextFileW (in: hFindFile=0x51079a0, lpFindFileData=0x31e5e4 | out: lpFindFileData=0x31e5e4*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x28cd94e0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0xd8f50380, ftLastAccessTime.dwHighDateTime=0x1d5e82a, ftLastWriteTime.dwLowDateTime=0xd8f50380, ftLastWriteTime.dwHighDateTime=0x1d5e82a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Videos", cAlternateFileName="")) returned 1 [0065.288] FindNextFileW (in: hFindFile=0x51079a0, lpFindFileData=0x31e5e4 | out: lpFindFileData=0x31e5e4*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0065.288] FindClose (in: hFindFile=0x51079a0 | out: hFindFile=0x51079a0) returned 1 [0065.288] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e86c) returned 1 [0065.288] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e878) returned 1 [0065.288] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e834) returned 1 [0065.288] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData", nBufferLength=0x105, lpBuffer=0x31e33c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData", lpFilePart=0x0) returned 0x25 [0065.288] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\", nBufferLength=0x105, lpBuffer=0x31e310, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\", lpFilePart=0x0) returned 0x26 [0065.288] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\*", lpFindFileData=0x31e55c | out: lpFindFileData=0x31e55c*(dwFileAttributes=0x2012, ftCreationTime.dwLowDateTime=0x28cff640, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28cff640, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xe9bbeade, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x51079a0 [0065.288] FindNextFileW (in: hFindFile=0x51079a0, lpFindFileData=0x31e56c | out: lpFindFileData=0x31e56c*(dwFileAttributes=0x2012, ftCreationTime.dwLowDateTime=0x28cff640, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28cff640, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xe9bbeade, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0065.289] FindNextFileW (in: hFindFile=0x51079a0, lpFindFileData=0x31e56c | out: lpFindFileData=0x31e56c*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x28cff640, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0xb264df80, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0xb264df80, ftLastWriteTime.dwHighDateTime=0x1d2dda4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Local", cAlternateFileName="")) returned 1 [0065.289] FindNextFileW (in: hFindFile=0x51079a0, lpFindFileData=0x31e56c | out: lpFindFileData=0x31e56c*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x28cff640, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x68cb4a40, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x68cb4a40, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="LocalLow", cAlternateFileName="")) returned 1 [0065.289] FindNextFileW (in: hFindFile=0x51079a0, lpFindFileData=0x31e56c | out: lpFindFileData=0x31e56c*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x28cff640, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0xd900ea60, ftLastAccessTime.dwHighDateTime=0x1d5e82a, ftLastWriteTime.dwLowDateTime=0xd900ea60, ftLastWriteTime.dwHighDateTime=0x1d5e82a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Roaming", cAlternateFileName="")) returned 1 [0065.289] FindNextFileW (in: hFindFile=0x51079a0, lpFindFileData=0x31e56c | out: lpFindFileData=0x31e56c*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x28cff640, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0xd900ea60, ftLastAccessTime.dwHighDateTime=0x1d5e82a, ftLastWriteTime.dwLowDateTime=0xd900ea60, ftLastWriteTime.dwHighDateTime=0x1d5e82a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Roaming", cAlternateFileName="")) returned 0 [0065.289] FindClose (in: hFindFile=0x51079a0 | out: hFindFile=0x51079a0) returned 1 [0065.292] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e7f4) returned 1 [0065.292] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e800) returned 1 [0065.292] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e834) returned 1 [0065.292] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData", nBufferLength=0x105, lpBuffer=0x31e33c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData", lpFilePart=0x0) returned 0x25 [0065.292] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\", nBufferLength=0x105, lpBuffer=0x31e310, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\", lpFilePart=0x0) returned 0x26 [0065.292] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\*", lpFindFileData=0x31e55c | out: lpFindFileData=0x31e55c*(dwFileAttributes=0x2012, ftCreationTime.dwLowDateTime=0x28cff640, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28cff640, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xe9bbeade, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x51079a0 [0065.292] FindNextFileW (in: hFindFile=0x51079a0, lpFindFileData=0x31e56c | out: lpFindFileData=0x31e56c*(dwFileAttributes=0x2012, ftCreationTime.dwLowDateTime=0x28cff640, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28cff640, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xe9bbeade, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0065.292] FindNextFileW (in: hFindFile=0x51079a0, lpFindFileData=0x31e56c | out: lpFindFileData=0x31e56c*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x28cff640, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0xb264df80, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0xb264df80, ftLastWriteTime.dwHighDateTime=0x1d2dda4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Local", cAlternateFileName="")) returned 1 [0065.293] FindNextFileW (in: hFindFile=0x51079a0, lpFindFileData=0x31e56c | out: lpFindFileData=0x31e56c*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x28cff640, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x68cb4a40, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x68cb4a40, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="LocalLow", cAlternateFileName="")) returned 1 [0065.293] FindNextFileW (in: hFindFile=0x51079a0, lpFindFileData=0x31e56c | out: lpFindFileData=0x31e56c*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x28cff640, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0xd900ea60, ftLastAccessTime.dwHighDateTime=0x1d5e82a, ftLastWriteTime.dwLowDateTime=0xd900ea60, ftLastWriteTime.dwHighDateTime=0x1d5e82a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Roaming", cAlternateFileName="")) returned 1 [0065.293] FindNextFileW (in: hFindFile=0x51079a0, lpFindFileData=0x31e56c | out: lpFindFileData=0x31e56c*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0065.293] FindClose (in: hFindFile=0x51079a0 | out: hFindFile=0x51079a0) returned 1 [0065.293] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e7f4) returned 1 [0065.293] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e800) returned 1 [0065.293] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e7bc) returned 1 [0065.293] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local", nBufferLength=0x105, lpBuffer=0x31e2c4, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local", lpFilePart=0x0) returned 0x2b [0065.293] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\", nBufferLength=0x105, lpBuffer=0x31e298, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\", lpFilePart=0x0) returned 0x2c [0065.293] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\*", lpFindFileData=0x31e4e4 | out: lpFindFileData=0x31e4e4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x28cff640, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0xb264df80, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0xb264df80, ftLastWriteTime.dwHighDateTime=0x1d2dda4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x51079a0 [0065.293] FindNextFileW (in: hFindFile=0x51079a0, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x28cff640, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0xb264df80, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0xb264df80, ftLastWriteTime.dwHighDateTime=0x1d2dda4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0065.294] FindNextFileW (in: hFindFile=0x51079a0, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xcd708940, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0xcd72eaa0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0xcd72eaa0, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Adobe", cAlternateFileName="")) returned 1 [0065.294] FindNextFileW (in: hFindFile=0x51079a0, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x2416, ftCreationTime.dwLowDateTime=0x2914fe20, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x2914fe20, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x2914fe20, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Application Data", cAlternateFileName="APPLIC~1")) returned 1 [0065.294] FindNextFileW (in: hFindFile=0x51079a0, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x65f935c0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x65f935c0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x65f935c0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Apps", cAlternateFileName="")) returned 1 [0065.294] FindNextFileW (in: hFindFile=0x51079a0, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x65e16800, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x6adbe1a0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x6adbe1a0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Deployment", cAlternateFileName="DEPLOY~1")) returned 1 [0065.294] FindNextFileW (in: hFindFile=0x51079a0, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x66051ca0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x66051ca0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x9791f220, ftLastWriteTime.dwHighDateTime=0x1d305ee, nFileSizeHigh=0x0, nFileSizeLow=0x1a918, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="GDIPFONTCACHEV1.DAT", cAlternateFileName="GDIPFO~1.DAT")) returned 1 [0065.294] FindNextFileW (in: hFindFile=0x51079a0, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x6b0b7d20, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x7f572ae0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x7f572ae0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Google", cAlternateFileName="")) returned 1 [0065.294] FindNextFileW (in: hFindFile=0x51079a0, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x2416, ftCreationTime.dwLowDateTime=0x29175f80, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x29175f80, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x29175f80, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="History", cAlternateFileName="")) returned 1 [0065.295] FindNextFileW (in: hFindFile=0x51079a0, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x2022, ftCreationTime.dwLowDateTime=0x28f14980, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28f14980, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x8de8eaa0, ftLastWriteTime.dwHighDateTime=0x1d5e82a, nFileSizeHigh=0x0, nFileSizeLow=0x126da7, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="IconCache.db", cAlternateFileName="ICONCA~1.DB")) returned 1 [0065.295] FindNextFileW (in: hFindFile=0x51079a0, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x28d257a0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x962f4540, ftLastAccessTime.dwHighDateTime=0x1d305ee, ftLastWriteTime.dwLowDateTime=0x962f4540, ftLastWriteTime.dwHighDateTime=0x1d305ee, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft", cAlternateFileName="MICROS~1")) returned 1 [0065.295] FindNextFileW (in: hFindFile=0x51079a0, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe80ff230, ftCreationTime.dwHighDateTime=0x1d2dda1, ftLastAccessTime.dwLowDateTime=0xe80ff230, ftLastAccessTime.dwHighDateTime=0x1d2dda1, ftLastWriteTime.dwLowDateTime=0xe80ff230, ftLastWriteTime.dwHighDateTime=0x1d2dda1, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft Help", cAlternateFileName="MICROS~2")) returned 1 [0065.295] FindNextFileW (in: hFindFile=0x51079a0, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xb264df80, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xb7314c10, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0xb7314c10, ftLastWriteTime.dwHighDateTime=0x1d2dda4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Mozilla", cAlternateFileName="")) returned 1 [0065.295] FindNextFileW (in: hFindFile=0x51079a0, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x28cff640, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0xf2ba8120, ftLastAccessTime.dwHighDateTime=0x1d6eb7e, ftLastWriteTime.dwLowDateTime=0xf2ba8120, ftLastWriteTime.dwHighDateTime=0x1d6eb7e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Temp", cAlternateFileName="")) returned 1 [0065.295] FindNextFileW (in: hFindFile=0x51079a0, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x2416, ftCreationTime.dwLowDateTime=0x29175f80, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x29175f80, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x29175f80, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Temporary Internet Files", cAlternateFileName="TEMPOR~1")) returned 1 [0065.295] FindNextFileW (in: hFindFile=0x51079a0, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x2ab32d60, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x2ab32d60, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x2ab32d60, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="VirtualStore", cAlternateFileName="VIRTUA~1")) returned 1 [0065.296] FindNextFileW (in: hFindFile=0x51079a0, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x2ab32d60, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x2ab32d60, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x2ab32d60, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="VirtualStore", cAlternateFileName="VIRTUA~1")) returned 0 [0065.296] FindClose (in: hFindFile=0x51079a0 | out: hFindFile=0x51079a0) returned 1 [0065.296] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e77c) returned 1 [0065.296] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e788) returned 1 [0065.296] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e7bc) returned 1 [0065.296] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local", nBufferLength=0x105, lpBuffer=0x31e2c4, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local", lpFilePart=0x0) returned 0x2b [0065.296] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\", nBufferLength=0x105, lpBuffer=0x31e298, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\", lpFilePart=0x0) returned 0x2c [0065.296] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\*", lpFindFileData=0x31e4e4 | out: lpFindFileData=0x31e4e4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x28cff640, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0xb264df80, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0xb264df80, ftLastWriteTime.dwHighDateTime=0x1d2dda4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x51079a0 [0065.296] FindNextFileW (in: hFindFile=0x51079a0, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x28cff640, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0xb264df80, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0xb264df80, ftLastWriteTime.dwHighDateTime=0x1d2dda4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0065.296] FindNextFileW (in: hFindFile=0x51079a0, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xcd708940, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0xcd72eaa0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0xcd72eaa0, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Adobe", cAlternateFileName="")) returned 1 [0065.296] FindNextFileW (in: hFindFile=0x51079a0, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x2416, ftCreationTime.dwLowDateTime=0x2914fe20, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x2914fe20, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x2914fe20, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Application Data", cAlternateFileName="APPLIC~1")) returned 1 [0065.297] FindNextFileW (in: hFindFile=0x51079a0, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x65f935c0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x65f935c0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x65f935c0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Apps", cAlternateFileName="")) returned 1 [0065.297] FindNextFileW (in: hFindFile=0x51079a0, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x65e16800, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x6adbe1a0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x6adbe1a0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Deployment", cAlternateFileName="DEPLOY~1")) returned 1 [0065.297] FindNextFileW (in: hFindFile=0x51079a0, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x66051ca0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x66051ca0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x9791f220, ftLastWriteTime.dwHighDateTime=0x1d305ee, nFileSizeHigh=0x0, nFileSizeLow=0x1a918, dwReserved0=0x0, dwReserved1=0x0, cFileName="GDIPFONTCACHEV1.DAT", cAlternateFileName="GDIPFO~1.DAT")) returned 1 [0065.297] FindNextFileW (in: hFindFile=0x51079a0, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x6b0b7d20, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x7f572ae0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x7f572ae0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Google", cAlternateFileName="")) returned 1 [0065.297] FindNextFileW (in: hFindFile=0x51079a0, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x2416, ftCreationTime.dwLowDateTime=0x29175f80, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x29175f80, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x29175f80, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="History", cAlternateFileName="")) returned 1 [0065.297] FindNextFileW (in: hFindFile=0x51079a0, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x2022, ftCreationTime.dwLowDateTime=0x28f14980, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28f14980, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x8de8eaa0, ftLastWriteTime.dwHighDateTime=0x1d5e82a, nFileSizeHigh=0x0, nFileSizeLow=0x126da7, dwReserved0=0x0, dwReserved1=0x0, cFileName="IconCache.db", cAlternateFileName="ICONCA~1.DB")) returned 1 [0065.297] FindNextFileW (in: hFindFile=0x51079a0, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x28d257a0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x962f4540, ftLastAccessTime.dwHighDateTime=0x1d305ee, ftLastWriteTime.dwLowDateTime=0x962f4540, ftLastWriteTime.dwHighDateTime=0x1d305ee, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft", cAlternateFileName="MICROS~1")) returned 1 [0065.297] FindNextFileW (in: hFindFile=0x51079a0, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe80ff230, ftCreationTime.dwHighDateTime=0x1d2dda1, ftLastAccessTime.dwLowDateTime=0xe80ff230, ftLastAccessTime.dwHighDateTime=0x1d2dda1, ftLastWriteTime.dwLowDateTime=0xe80ff230, ftLastWriteTime.dwHighDateTime=0x1d2dda1, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft Help", cAlternateFileName="MICROS~2")) returned 1 [0065.297] FindNextFileW (in: hFindFile=0x51079a0, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xb264df80, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xb7314c10, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0xb7314c10, ftLastWriteTime.dwHighDateTime=0x1d2dda4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Mozilla", cAlternateFileName="")) returned 1 [0065.298] FindNextFileW (in: hFindFile=0x51079a0, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x28cff640, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0xf2ba8120, ftLastAccessTime.dwHighDateTime=0x1d6eb7e, ftLastWriteTime.dwLowDateTime=0xf2ba8120, ftLastWriteTime.dwHighDateTime=0x1d6eb7e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Temp", cAlternateFileName="")) returned 1 [0065.298] FindNextFileW (in: hFindFile=0x51079a0, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x2416, ftCreationTime.dwLowDateTime=0x29175f80, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x29175f80, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x29175f80, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Temporary Internet Files", cAlternateFileName="TEMPOR~1")) returned 1 [0065.298] FindNextFileW (in: hFindFile=0x51079a0, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x2ab32d60, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x2ab32d60, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x2ab32d60, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="VirtualStore", cAlternateFileName="VIRTUA~1")) returned 1 [0065.298] FindNextFileW (in: hFindFile=0x51079a0, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0065.298] FindClose (in: hFindFile=0x51079a0 | out: hFindFile=0x51079a0) returned 1 [0065.298] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e77c) returned 1 [0065.298] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e788) returned 1 [0065.298] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e744) returned 1 [0065.298] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Adobe", nBufferLength=0x105, lpBuffer=0x31e24c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Adobe", lpFilePart=0x0) returned 0x31 [0065.298] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Adobe\\", nBufferLength=0x105, lpBuffer=0x31e220, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Adobe\\", lpFilePart=0x0) returned 0x32 [0065.298] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Adobe\\*", lpFindFileData=0x31e46c | out: lpFindFileData=0x31e46c*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xcd708940, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0xcd72eaa0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0xcd72eaa0, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x51079a0 [0065.298] FindNextFileW (in: hFindFile=0x51079a0, lpFindFileData=0x31e47c | out: lpFindFileData=0x31e47c*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xcd708940, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0xcd72eaa0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0xcd72eaa0, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0065.299] FindNextFileW (in: hFindFile=0x51079a0, lpFindFileData=0x31e47c | out: lpFindFileData=0x31e47c*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xcd708940, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0xcd72eaa0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0xcd72eaa0, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Acrobat", cAlternateFileName="")) returned 1 [0065.299] FindNextFileW (in: hFindFile=0x51079a0, lpFindFileData=0x31e47c | out: lpFindFileData=0x31e47c*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xcd72eaa0, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0xce60f420, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0xce60f420, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Color", cAlternateFileName="")) returned 1 [0065.299] FindNextFileW (in: hFindFile=0x51079a0, lpFindFileData=0x31e47c | out: lpFindFileData=0x31e47c*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xcd72eaa0, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0xce60f420, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0xce60f420, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Color", cAlternateFileName="")) returned 0 [0065.299] FindClose (in: hFindFile=0x51079a0 | out: hFindFile=0x51079a0) returned 1 [0065.299] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e704) returned 1 [0065.299] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e710) returned 1 [0065.299] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e744) returned 1 [0065.299] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Adobe", nBufferLength=0x105, lpBuffer=0x31e24c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Adobe", lpFilePart=0x0) returned 0x31 [0065.299] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Adobe\\", nBufferLength=0x105, lpBuffer=0x31e220, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Adobe\\", lpFilePart=0x0) returned 0x32 [0065.299] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Adobe\\*", lpFindFileData=0x31e46c | out: lpFindFileData=0x31e46c*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xcd708940, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0xcd72eaa0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0xcd72eaa0, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x51079a0 [0065.299] FindNextFileW (in: hFindFile=0x51079a0, lpFindFileData=0x31e47c | out: lpFindFileData=0x31e47c*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xcd708940, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0xcd72eaa0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0xcd72eaa0, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0065.300] FindNextFileW (in: hFindFile=0x51079a0, lpFindFileData=0x31e47c | out: lpFindFileData=0x31e47c*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xcd708940, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0xcd72eaa0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0xcd72eaa0, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Acrobat", cAlternateFileName="")) returned 1 [0065.300] FindNextFileW (in: hFindFile=0x51079a0, lpFindFileData=0x31e47c | out: lpFindFileData=0x31e47c*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xcd72eaa0, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0xce60f420, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0xce60f420, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Color", cAlternateFileName="")) returned 1 [0065.300] FindNextFileW (in: hFindFile=0x51079a0, lpFindFileData=0x31e47c | out: lpFindFileData=0x31e47c*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0065.300] FindClose (in: hFindFile=0x51079a0 | out: hFindFile=0x51079a0) returned 1 [0065.300] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e704) returned 1 [0065.300] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e710) returned 1 [0065.300] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e6cc) returned 1 [0065.300] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Adobe\\Acrobat", nBufferLength=0x105, lpBuffer=0x31e1d4, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Adobe\\Acrobat", lpFilePart=0x0) returned 0x39 [0065.300] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Adobe\\Acrobat\\", nBufferLength=0x105, lpBuffer=0x31e1a8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Adobe\\Acrobat\\", lpFilePart=0x0) returned 0x3a [0065.300] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Adobe\\Acrobat\\*", lpFindFileData=0x31e3f4 | out: lpFindFileData=0x31e3f4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xcd708940, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0xcd72eaa0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0xcd72eaa0, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x51079a0 [0065.300] FindNextFileW (in: hFindFile=0x51079a0, lpFindFileData=0x31e404 | out: lpFindFileData=0x31e404*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xcd708940, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0xcd72eaa0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0xcd72eaa0, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0065.300] FindNextFileW (in: hFindFile=0x51079a0, lpFindFileData=0x31e404 | out: lpFindFileData=0x31e404*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xcd72eaa0, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0xee135b70, ftLastAccessTime.dwHighDateTime=0x1d35d05, ftLastWriteTime.dwLowDateTime=0xee135b70, ftLastWriteTime.dwHighDateTime=0x1d35d05, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="10.0", cAlternateFileName="")) returned 1 [0065.301] FindNextFileW (in: hFindFile=0x51079a0, lpFindFileData=0x31e404 | out: lpFindFileData=0x31e404*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xcd72eaa0, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0xee135b70, ftLastAccessTime.dwHighDateTime=0x1d35d05, ftLastWriteTime.dwLowDateTime=0xee135b70, ftLastWriteTime.dwHighDateTime=0x1d35d05, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="10.0", cAlternateFileName="")) returned 0 [0065.301] FindClose (in: hFindFile=0x51079a0 | out: hFindFile=0x51079a0) returned 1 [0065.301] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e68c) returned 1 [0065.301] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e698) returned 1 [0065.301] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e6cc) returned 1 [0065.301] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Adobe\\Acrobat", nBufferLength=0x105, lpBuffer=0x31e1d4, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Adobe\\Acrobat", lpFilePart=0x0) returned 0x39 [0065.301] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Adobe\\Acrobat\\", nBufferLength=0x105, lpBuffer=0x31e1a8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Adobe\\Acrobat\\", lpFilePart=0x0) returned 0x3a [0065.301] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Adobe\\Acrobat\\*", lpFindFileData=0x31e3f4 | out: lpFindFileData=0x31e3f4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xcd708940, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0xcd72eaa0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0xcd72eaa0, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x51079a0 [0065.301] FindNextFileW (in: hFindFile=0x51079a0, lpFindFileData=0x31e404 | out: lpFindFileData=0x31e404*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xcd708940, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0xcd72eaa0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0xcd72eaa0, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0065.301] FindNextFileW (in: hFindFile=0x51079a0, lpFindFileData=0x31e404 | out: lpFindFileData=0x31e404*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xcd72eaa0, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0xee135b70, ftLastAccessTime.dwHighDateTime=0x1d35d05, ftLastWriteTime.dwLowDateTime=0xee135b70, ftLastWriteTime.dwHighDateTime=0x1d35d05, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="10.0", cAlternateFileName="")) returned 1 [0065.301] FindNextFileW (in: hFindFile=0x51079a0, lpFindFileData=0x31e404 | out: lpFindFileData=0x31e404*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0065.301] FindClose (in: hFindFile=0x51079a0 | out: hFindFile=0x51079a0) returned 1 [0065.301] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e68c) returned 1 [0065.301] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e698) returned 1 [0065.301] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e654) returned 1 [0065.301] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Adobe\\Acrobat\\10.0", nBufferLength=0x105, lpBuffer=0x31e15c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Adobe\\Acrobat\\10.0", lpFilePart=0x0) returned 0x3e [0065.302] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Adobe\\Acrobat\\10.0\\", nBufferLength=0x105, lpBuffer=0x31e130, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Adobe\\Acrobat\\10.0\\", lpFilePart=0x0) returned 0x3f [0065.302] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Adobe\\Acrobat\\10.0\\*", lpFindFileData=0x31e37c | out: lpFindFileData=0x31e37c*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xcd72eaa0, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0xee135b70, ftLastAccessTime.dwHighDateTime=0x1d35d05, ftLastWriteTime.dwLowDateTime=0xee135b70, ftLastWriteTime.dwHighDateTime=0x1d35d05, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x51079a0 [0065.303] FindNextFileW (in: hFindFile=0x51079a0, lpFindFileData=0x31e38c | out: lpFindFileData=0x31e38c*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xcd72eaa0, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0xee135b70, ftLastAccessTime.dwHighDateTime=0x1d35d05, ftLastWriteTime.dwLowDateTime=0xee135b70, ftLastWriteTime.dwHighDateTime=0x1d35d05, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0065.303] FindNextFileW (in: hFindFile=0x51079a0, lpFindFileData=0x31e38c | out: lpFindFileData=0x31e38c*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xecb5bdd0, ftCreationTime.dwHighDateTime=0x1d2ddf4, ftLastAccessTime.dwLowDateTime=0xecb5bdd0, ftLastAccessTime.dwHighDateTime=0x1d2ddf4, ftLastWriteTime.dwLowDateTime=0xe952fcd0, ftLastWriteTime.dwHighDateTime=0x1d35d05, nFileSizeHigh=0x0, nFileSizeLow=0x892c, dwReserved0=0x0, dwReserved1=0x0, cFileName="AdobeCMapFnt10.lst", cAlternateFileName="ADOBEC~1.LST")) returned 1 [0065.303] FindNextFileW (in: hFindFile=0x51079a0, lpFindFileData=0x31e38c | out: lpFindFileData=0x31e38c*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xecb5bdd0, ftCreationTime.dwHighDateTime=0x1d2ddf4, ftLastAccessTime.dwLowDateTime=0xecb5bdd0, ftLastAccessTime.dwHighDateTime=0x1d2ddf4, ftLastWriteTime.dwLowDateTime=0xd9c071a0, ftLastWriteTime.dwHighDateTime=0x1d2e625, nFileSizeHigh=0x0, nFileSizeLow=0x21cdb, dwReserved0=0x0, dwReserved1=0x0, cFileName="AdobeSysFnt10.lst", cAlternateFileName="ADOBES~1.LST")) returned 1 [0065.303] FindNextFileW (in: hFindFile=0x51079a0, lpFindFileData=0x31e38c | out: lpFindFileData=0x31e38c*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xecb5bdd0, ftCreationTime.dwHighDateTime=0x1d2ddf4, ftLastAccessTime.dwLowDateTime=0xecb5bdd0, ftLastAccessTime.dwHighDateTime=0x1d2ddf4, ftLastWriteTime.dwLowDateTime=0xecb5bdd0, ftLastWriteTime.dwHighDateTime=0x1d2ddf4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Cache", cAlternateFileName="")) returned 1 [0065.303] FindNextFileW (in: hFindFile=0x51079a0, lpFindFileData=0x31e38c | out: lpFindFileData=0x31e38c*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xd3b286a0, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0xd3b286a0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0xee0c3750, ftLastWriteTime.dwHighDateTime=0x1d35d05, nFileSizeHigh=0x0, nFileSizeLow=0x1400, dwReserved0=0x0, dwReserved1=0x0, cFileName="SharedDataEvents", cAlternateFileName="SHARED~1")) returned 1 [0065.303] FindNextFileW (in: hFindFile=0x51079a0, lpFindFileData=0x31e38c | out: lpFindFileData=0x31e38c*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xd243f2e0, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0xd243f2e0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0xe99341f0, ftLastWriteTime.dwHighDateTime=0x1d35d05, nFileSizeHigh=0x0, nFileSizeLow=0x12ea5, dwReserved0=0x0, dwReserved1=0x0, cFileName="UserCache.bin", cAlternateFileName="USERCA~1.BIN")) returned 1 [0065.304] FindNextFileW (in: hFindFile=0x51079a0, lpFindFileData=0x31e38c | out: lpFindFileData=0x31e38c*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0065.304] FindClose (in: hFindFile=0x51079a0 | out: hFindFile=0x51079a0) returned 1 [0065.304] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e614) returned 1 [0065.304] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e620) returned 1 [0065.304] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e654) returned 1 [0065.304] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Adobe\\Acrobat\\10.0", nBufferLength=0x105, lpBuffer=0x31e15c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Adobe\\Acrobat\\10.0", lpFilePart=0x0) returned 0x3e [0065.304] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Adobe\\Acrobat\\10.0\\", nBufferLength=0x105, lpBuffer=0x31e130, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Adobe\\Acrobat\\10.0\\", lpFilePart=0x0) returned 0x3f [0065.304] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Adobe\\Acrobat\\10.0\\*", lpFindFileData=0x31e37c | out: lpFindFileData=0x31e37c*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xcd72eaa0, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0xee135b70, ftLastAccessTime.dwHighDateTime=0x1d35d05, ftLastWriteTime.dwLowDateTime=0xee135b70, ftLastWriteTime.dwHighDateTime=0x1d35d05, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x51079a0 [0065.305] FindNextFileW (in: hFindFile=0x51079a0, lpFindFileData=0x31e38c | out: lpFindFileData=0x31e38c*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xcd72eaa0, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0xee135b70, ftLastAccessTime.dwHighDateTime=0x1d35d05, ftLastWriteTime.dwLowDateTime=0xee135b70, ftLastWriteTime.dwHighDateTime=0x1d35d05, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0065.305] FindNextFileW (in: hFindFile=0x51079a0, lpFindFileData=0x31e38c | out: lpFindFileData=0x31e38c*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xecb5bdd0, ftCreationTime.dwHighDateTime=0x1d2ddf4, ftLastAccessTime.dwLowDateTime=0xecb5bdd0, ftLastAccessTime.dwHighDateTime=0x1d2ddf4, ftLastWriteTime.dwLowDateTime=0xe952fcd0, ftLastWriteTime.dwHighDateTime=0x1d35d05, nFileSizeHigh=0x0, nFileSizeLow=0x892c, dwReserved0=0x0, dwReserved1=0x0, cFileName="AdobeCMapFnt10.lst", cAlternateFileName="ADOBEC~1.LST")) returned 1 [0065.305] FindNextFileW (in: hFindFile=0x51079a0, lpFindFileData=0x31e38c | out: lpFindFileData=0x31e38c*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xecb5bdd0, ftCreationTime.dwHighDateTime=0x1d2ddf4, ftLastAccessTime.dwLowDateTime=0xecb5bdd0, ftLastAccessTime.dwHighDateTime=0x1d2ddf4, ftLastWriteTime.dwLowDateTime=0xd9c071a0, ftLastWriteTime.dwHighDateTime=0x1d2e625, nFileSizeHigh=0x0, nFileSizeLow=0x21cdb, dwReserved0=0x0, dwReserved1=0x0, cFileName="AdobeSysFnt10.lst", cAlternateFileName="ADOBES~1.LST")) returned 1 [0065.305] FindNextFileW (in: hFindFile=0x51079a0, lpFindFileData=0x31e38c | out: lpFindFileData=0x31e38c*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xecb5bdd0, ftCreationTime.dwHighDateTime=0x1d2ddf4, ftLastAccessTime.dwLowDateTime=0xecb5bdd0, ftLastAccessTime.dwHighDateTime=0x1d2ddf4, ftLastWriteTime.dwLowDateTime=0xecb5bdd0, ftLastWriteTime.dwHighDateTime=0x1d2ddf4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Cache", cAlternateFileName="")) returned 1 [0065.305] FindNextFileW (in: hFindFile=0x51079a0, lpFindFileData=0x31e38c | out: lpFindFileData=0x31e38c*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xd3b286a0, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0xd3b286a0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0xee0c3750, ftLastWriteTime.dwHighDateTime=0x1d35d05, nFileSizeHigh=0x0, nFileSizeLow=0x1400, dwReserved0=0x0, dwReserved1=0x0, cFileName="SharedDataEvents", cAlternateFileName="SHARED~1")) returned 1 [0065.306] FindNextFileW (in: hFindFile=0x51079a0, lpFindFileData=0x31e38c | out: lpFindFileData=0x31e38c*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xd243f2e0, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0xd243f2e0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0xe99341f0, ftLastWriteTime.dwHighDateTime=0x1d35d05, nFileSizeHigh=0x0, nFileSizeLow=0x12ea5, dwReserved0=0x0, dwReserved1=0x0, cFileName="UserCache.bin", cAlternateFileName="USERCA~1.BIN")) returned 1 [0065.306] FindNextFileW (in: hFindFile=0x51079a0, lpFindFileData=0x31e38c | out: lpFindFileData=0x31e38c*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xd243f2e0, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0xd243f2e0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0xe99341f0, ftLastWriteTime.dwHighDateTime=0x1d35d05, nFileSizeHigh=0x0, nFileSizeLow=0x12ea5, dwReserved0=0x0, dwReserved1=0x0, cFileName="UserCache.bin", cAlternateFileName="USERCA~1.BIN")) returned 0 [0065.306] FindClose (in: hFindFile=0x51079a0 | out: hFindFile=0x51079a0) returned 1 [0065.306] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e614) returned 1 [0065.306] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e620) returned 1 [0065.307] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e5dc) returned 1 [0065.307] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Adobe\\Acrobat\\10.0\\Cache", nBufferLength=0x105, lpBuffer=0x31e0e4, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Adobe\\Acrobat\\10.0\\Cache", lpFilePart=0x0) returned 0x44 [0065.307] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Adobe\\Acrobat\\10.0\\Cache\\", nBufferLength=0x105, lpBuffer=0x31e0b8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Adobe\\Acrobat\\10.0\\Cache\\", lpFilePart=0x0) returned 0x45 [0065.307] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Adobe\\Acrobat\\10.0\\Cache\\*", lpFindFileData=0x31e304 | out: lpFindFileData=0x31e304*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xecb5bdd0, ftCreationTime.dwHighDateTime=0x1d2ddf4, ftLastAccessTime.dwLowDateTime=0xecb5bdd0, ftLastAccessTime.dwHighDateTime=0x1d2ddf4, ftLastWriteTime.dwLowDateTime=0xecb5bdd0, ftLastWriteTime.dwHighDateTime=0x1d2ddf4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x51079a0 [0065.308] FindNextFileW (in: hFindFile=0x51079a0, lpFindFileData=0x31e314 | out: lpFindFileData=0x31e314*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xecb5bdd0, ftCreationTime.dwHighDateTime=0x1d2ddf4, ftLastAccessTime.dwLowDateTime=0xecb5bdd0, ftLastAccessTime.dwHighDateTime=0x1d2ddf4, ftLastWriteTime.dwLowDateTime=0xecb5bdd0, ftLastWriteTime.dwHighDateTime=0x1d2ddf4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0065.308] FindNextFileW (in: hFindFile=0x51079a0, lpFindFileData=0x31e314 | out: lpFindFileData=0x31e314*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xecb5bdd0, ftCreationTime.dwHighDateTime=0x1d2ddf4, ftLastAccessTime.dwLowDateTime=0xecb5bdd0, ftLastAccessTime.dwHighDateTime=0x1d2ddf4, ftLastWriteTime.dwLowDateTime=0xe952fcd0, ftLastWriteTime.dwHighDateTime=0x1d35d05, nFileSizeHigh=0x0, nFileSizeLow=0xcfc4, dwReserved0=0x0, dwReserved1=0x0, cFileName="AcroFnt10.lst", cAlternateFileName="ACROFN~1.LST")) returned 1 [0065.308] FindNextFileW (in: hFindFile=0x51079a0, lpFindFileData=0x31e314 | out: lpFindFileData=0x31e314*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0065.308] FindClose (in: hFindFile=0x51079a0 | out: hFindFile=0x51079a0) returned 1 [0065.308] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e59c) returned 1 [0065.309] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e5a8) returned 1 [0065.309] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e5dc) returned 1 [0065.309] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Adobe\\Acrobat\\10.0\\Cache", nBufferLength=0x105, lpBuffer=0x31e0e4, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Adobe\\Acrobat\\10.0\\Cache", lpFilePart=0x0) returned 0x44 [0065.309] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Adobe\\Acrobat\\10.0\\Cache\\", nBufferLength=0x105, lpBuffer=0x31e0b8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Adobe\\Acrobat\\10.0\\Cache\\", lpFilePart=0x0) returned 0x45 [0065.309] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Adobe\\Acrobat\\10.0\\Cache\\*", lpFindFileData=0x31e304 | out: lpFindFileData=0x31e304*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xecb5bdd0, ftCreationTime.dwHighDateTime=0x1d2ddf4, ftLastAccessTime.dwLowDateTime=0xecb5bdd0, ftLastAccessTime.dwHighDateTime=0x1d2ddf4, ftLastWriteTime.dwLowDateTime=0xecb5bdd0, ftLastWriteTime.dwHighDateTime=0x1d2ddf4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x51079a0 [0065.309] FindNextFileW (in: hFindFile=0x51079a0, lpFindFileData=0x31e314 | out: lpFindFileData=0x31e314*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xecb5bdd0, ftCreationTime.dwHighDateTime=0x1d2ddf4, ftLastAccessTime.dwLowDateTime=0xecb5bdd0, ftLastAccessTime.dwHighDateTime=0x1d2ddf4, ftLastWriteTime.dwLowDateTime=0xecb5bdd0, ftLastWriteTime.dwHighDateTime=0x1d2ddf4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0065.309] FindNextFileW (in: hFindFile=0x51079a0, lpFindFileData=0x31e314 | out: lpFindFileData=0x31e314*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xecb5bdd0, ftCreationTime.dwHighDateTime=0x1d2ddf4, ftLastAccessTime.dwLowDateTime=0xecb5bdd0, ftLastAccessTime.dwHighDateTime=0x1d2ddf4, ftLastWriteTime.dwLowDateTime=0xe952fcd0, ftLastWriteTime.dwHighDateTime=0x1d35d05, nFileSizeHigh=0x0, nFileSizeLow=0xcfc4, dwReserved0=0x0, dwReserved1=0x0, cFileName="AcroFnt10.lst", cAlternateFileName="ACROFN~1.LST")) returned 1 [0065.309] FindNextFileW (in: hFindFile=0x51079a0, lpFindFileData=0x31e314 | out: lpFindFileData=0x31e314*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xecb5bdd0, ftCreationTime.dwHighDateTime=0x1d2ddf4, ftLastAccessTime.dwLowDateTime=0xecb5bdd0, ftLastAccessTime.dwHighDateTime=0x1d2ddf4, ftLastWriteTime.dwLowDateTime=0xe952fcd0, ftLastWriteTime.dwHighDateTime=0x1d35d05, nFileSizeHigh=0x0, nFileSizeLow=0xcfc4, dwReserved0=0x0, dwReserved1=0x0, cFileName="AcroFnt10.lst", cAlternateFileName="ACROFN~1.LST")) returned 0 [0065.309] FindClose (in: hFindFile=0x51079a0 | out: hFindFile=0x51079a0) returned 1 [0065.309] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e59c) returned 1 [0065.309] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e5a8) returned 1 [0065.309] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e6cc) returned 1 [0065.309] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Adobe\\Color", nBufferLength=0x105, lpBuffer=0x31e1d4, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Adobe\\Color", lpFilePart=0x0) returned 0x37 [0065.309] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Adobe\\Color\\", nBufferLength=0x105, lpBuffer=0x31e1a8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Adobe\\Color\\", lpFilePart=0x0) returned 0x38 [0065.309] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Adobe\\Color\\*", lpFindFileData=0x31e3f4 | out: lpFindFileData=0x31e3f4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xcd72eaa0, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0xce60f420, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0xce60f420, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x51079a0 [0065.310] FindNextFileW (in: hFindFile=0x51079a0, lpFindFileData=0x31e404 | out: lpFindFileData=0x31e404*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xcd72eaa0, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0xce60f420, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0xce60f420, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0065.310] FindNextFileW (in: hFindFile=0x51079a0, lpFindFileData=0x31e404 | out: lpFindFileData=0x31e404*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xce60f420, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0xce60f420, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0xce719dc0, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x49c, dwReserved0=0x0, dwReserved1=0x0, cFileName="ACECache11.lst", cAlternateFileName="ACECAC~1.LST")) returned 1 [0065.310] FindNextFileW (in: hFindFile=0x51079a0, lpFindFileData=0x31e404 | out: lpFindFileData=0x31e404*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xce4463a0, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0xce6f3c60, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0xce6f3c60, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Profiles", cAlternateFileName="")) returned 1 [0065.310] FindNextFileW (in: hFindFile=0x51079a0, lpFindFileData=0x31e404 | out: lpFindFileData=0x31e404*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xce4463a0, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0xce6f3c60, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0xce6f3c60, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Profiles", cAlternateFileName="")) returned 0 [0065.310] FindClose (in: hFindFile=0x51079a0 | out: hFindFile=0x51079a0) returned 1 [0065.310] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e68c) returned 1 [0065.310] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e698) returned 1 [0065.310] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e6cc) returned 1 [0065.310] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Adobe\\Color", nBufferLength=0x105, lpBuffer=0x31e1d4, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Adobe\\Color", lpFilePart=0x0) returned 0x37 [0065.310] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Adobe\\Color\\", nBufferLength=0x105, lpBuffer=0x31e1a8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Adobe\\Color\\", lpFilePart=0x0) returned 0x38 [0065.310] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Adobe\\Color\\*", lpFindFileData=0x31e3f4 | out: lpFindFileData=0x31e3f4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xcd72eaa0, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0xce60f420, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0xce60f420, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x51079a0 [0065.310] FindNextFileW (in: hFindFile=0x51079a0, lpFindFileData=0x31e404 | out: lpFindFileData=0x31e404*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xcd72eaa0, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0xce60f420, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0xce60f420, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0065.311] FindNextFileW (in: hFindFile=0x51079a0, lpFindFileData=0x31e404 | out: lpFindFileData=0x31e404*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xce60f420, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0xce60f420, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0xce719dc0, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x49c, dwReserved0=0x0, dwReserved1=0x0, cFileName="ACECache11.lst", cAlternateFileName="ACECAC~1.LST")) returned 1 [0065.311] FindNextFileW (in: hFindFile=0x51079a0, lpFindFileData=0x31e404 | out: lpFindFileData=0x31e404*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xce4463a0, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0xce6f3c60, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0xce6f3c60, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Profiles", cAlternateFileName="")) returned 1 [0065.311] FindNextFileW (in: hFindFile=0x51079a0, lpFindFileData=0x31e404 | out: lpFindFileData=0x31e404*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0065.311] FindClose (in: hFindFile=0x51079a0 | out: hFindFile=0x51079a0) returned 1 [0065.311] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e68c) returned 1 [0065.311] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e698) returned 1 [0065.311] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e654) returned 1 [0065.311] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Adobe\\Color\\Profiles", nBufferLength=0x105, lpBuffer=0x31e15c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Adobe\\Color\\Profiles", lpFilePart=0x0) returned 0x40 [0065.311] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Adobe\\Color\\Profiles\\", nBufferLength=0x105, lpBuffer=0x31e130, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Adobe\\Color\\Profiles\\", lpFilePart=0x0) returned 0x41 [0065.311] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Adobe\\Color\\Profiles\\*", lpFindFileData=0x31e37c | out: lpFindFileData=0x31e37c*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xce4463a0, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0xce6f3c60, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0xce6f3c60, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x51079a0 [0065.312] FindNextFileW (in: hFindFile=0x51079a0, lpFindFileData=0x31e38c | out: lpFindFileData=0x31e38c*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xce4463a0, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0xce6f3c60, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0xce6f3c60, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0065.312] FindNextFileW (in: hFindFile=0x51079a0, lpFindFileData=0x31e38c | out: lpFindFileData=0x31e38c*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xce60f420, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0xce6f3c60, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0xce6f3c60, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x102a0, dwReserved0=0x0, dwReserved1=0x0, cFileName="wscRGB.icc", cAlternateFileName="")) returned 1 [0065.312] FindNextFileW (in: hFindFile=0x51079a0, lpFindFileData=0x31e38c | out: lpFindFileData=0x31e38c*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xce60f420, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0xce6f3c60, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0xce6f3c60, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0xa74, dwReserved0=0x0, dwReserved1=0x0, cFileName="wsRGB.icc", cAlternateFileName="")) returned 1 [0065.312] FindNextFileW (in: hFindFile=0x51079a0, lpFindFileData=0x31e38c | out: lpFindFileData=0x31e38c*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0065.312] FindClose (in: hFindFile=0x51079a0 | out: hFindFile=0x51079a0) returned 1 [0065.312] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e614) returned 1 [0065.312] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e620) returned 1 [0065.312] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e654) returned 1 [0065.312] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Adobe\\Color\\Profiles", nBufferLength=0x105, lpBuffer=0x31e15c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Adobe\\Color\\Profiles", lpFilePart=0x0) returned 0x40 [0065.312] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Adobe\\Color\\Profiles\\", nBufferLength=0x105, lpBuffer=0x31e130, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Adobe\\Color\\Profiles\\", lpFilePart=0x0) returned 0x41 [0065.312] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Adobe\\Color\\Profiles\\*", lpFindFileData=0x31e37c | out: lpFindFileData=0x31e37c*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xce4463a0, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0xce6f3c60, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0xce6f3c60, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x51079a0 [0065.313] FindNextFileW (in: hFindFile=0x51079a0, lpFindFileData=0x31e38c | out: lpFindFileData=0x31e38c*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xce4463a0, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0xce6f3c60, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0xce6f3c60, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0065.313] FindNextFileW (in: hFindFile=0x51079a0, lpFindFileData=0x31e38c | out: lpFindFileData=0x31e38c*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xce60f420, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0xce6f3c60, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0xce6f3c60, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x102a0, dwReserved0=0x0, dwReserved1=0x0, cFileName="wscRGB.icc", cAlternateFileName="")) returned 1 [0065.313] FindNextFileW (in: hFindFile=0x51079a0, lpFindFileData=0x31e38c | out: lpFindFileData=0x31e38c*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xce60f420, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0xce6f3c60, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0xce6f3c60, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0xa74, dwReserved0=0x0, dwReserved1=0x0, cFileName="wsRGB.icc", cAlternateFileName="")) returned 1 [0065.313] FindNextFileW (in: hFindFile=0x51079a0, lpFindFileData=0x31e38c | out: lpFindFileData=0x31e38c*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xce60f420, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0xce6f3c60, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0xce6f3c60, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0xa74, dwReserved0=0x0, dwReserved1=0x0, cFileName="wsRGB.icc", cAlternateFileName="")) returned 0 [0065.313] FindClose (in: hFindFile=0x51079a0 | out: hFindFile=0x51079a0) returned 1 [0065.313] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e614) returned 1 [0065.313] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e620) returned 1 [0065.313] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e744) returned 1 [0065.313] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Application Data", nBufferLength=0x105, lpBuffer=0x31e24c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Application Data", lpFilePart=0x0) returned 0x3c [0065.313] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Application Data\\", nBufferLength=0x105, lpBuffer=0x31e220, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Application Data\\", lpFilePart=0x0) returned 0x3d [0065.313] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Application Data\\*", lpFindFileData=0x31e46c | out: lpFindFileData=0x31e46c*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0065.313] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e708) returned 1 [0065.314] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e744) returned 1 [0065.314] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Apps", nBufferLength=0x105, lpBuffer=0x31e24c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Apps", lpFilePart=0x0) returned 0x30 [0065.314] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Apps\\", nBufferLength=0x105, lpBuffer=0x31e220, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Apps\\", lpFilePart=0x0) returned 0x31 [0065.315] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Apps\\*", lpFindFileData=0x31e46c | out: lpFindFileData=0x31e46c*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x65f935c0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x65f935c0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x65f935c0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x51079a0 [0065.315] FindNextFileW (in: hFindFile=0x51079a0, lpFindFileData=0x31e47c | out: lpFindFileData=0x31e47c*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x65f935c0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x65f935c0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x65f935c0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0065.315] FindNextFileW (in: hFindFile=0x51079a0, lpFindFileData=0x31e47c | out: lpFindFileData=0x31e47c*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x65f935c0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x65fb9720, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x65fb9720, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="2.0", cAlternateFileName="")) returned 1 [0065.315] FindNextFileW (in: hFindFile=0x51079a0, lpFindFileData=0x31e47c | out: lpFindFileData=0x31e47c*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x65f935c0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x65fb9720, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x65fb9720, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="2.0", cAlternateFileName="")) returned 0 [0065.315] FindClose (in: hFindFile=0x51079a0 | out: hFindFile=0x51079a0) returned 1 [0065.315] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e704) returned 1 [0065.315] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e710) returned 1 [0065.316] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e744) returned 1 [0065.316] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Apps", nBufferLength=0x105, lpBuffer=0x31e24c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Apps", lpFilePart=0x0) returned 0x30 [0065.316] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Apps\\", nBufferLength=0x105, lpBuffer=0x31e220, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Apps\\", lpFilePart=0x0) returned 0x31 [0065.316] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Apps\\*", lpFindFileData=0x31e46c | out: lpFindFileData=0x31e46c*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x65f935c0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x65f935c0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x65f935c0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x51079a0 [0065.316] FindNextFileW (in: hFindFile=0x51079a0, lpFindFileData=0x31e47c | out: lpFindFileData=0x31e47c*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x65f935c0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x65f935c0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x65f935c0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0065.316] FindNextFileW (in: hFindFile=0x51079a0, lpFindFileData=0x31e47c | out: lpFindFileData=0x31e47c*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x65f935c0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x65fb9720, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x65fb9720, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="2.0", cAlternateFileName="")) returned 1 [0065.316] FindNextFileW (in: hFindFile=0x51079a0, lpFindFileData=0x31e47c | out: lpFindFileData=0x31e47c*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0065.316] FindClose (in: hFindFile=0x51079a0 | out: hFindFile=0x51079a0) returned 1 [0065.316] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e704) returned 1 [0065.316] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e710) returned 1 [0065.316] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e6cc) returned 1 [0065.316] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Apps\\2.0", nBufferLength=0x105, lpBuffer=0x31e1d4, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Apps\\2.0", lpFilePart=0x0) returned 0x34 [0065.316] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Apps\\2.0\\", nBufferLength=0x105, lpBuffer=0x31e1a8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Apps\\2.0\\", lpFilePart=0x0) returned 0x35 [0065.316] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Apps\\2.0\\*", lpFindFileData=0x31e3f4 | out: lpFindFileData=0x31e3f4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x65f935c0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x65fb9720, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x65fb9720, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x51079a0 [0065.317] FindNextFileW (in: hFindFile=0x51079a0, lpFindFileData=0x31e404 | out: lpFindFileData=0x31e404*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x65f935c0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x65fb9720, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x65fb9720, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0065.317] FindNextFileW (in: hFindFile=0x51079a0, lpFindFileData=0x31e404 | out: lpFindFileData=0x31e404*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x65fb9720, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x65fb9720, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x65fb9720, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Data", cAlternateFileName="")) returned 1 [0065.317] FindNextFileW (in: hFindFile=0x51079a0, lpFindFileData=0x31e404 | out: lpFindFileData=0x31e404*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x65f935c0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x65f935c0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x65f935c0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="DQQ19BCJ.JAX", cAlternateFileName="")) returned 1 [0065.317] FindNextFileW (in: hFindFile=0x51079a0, lpFindFileData=0x31e404 | out: lpFindFileData=0x31e404*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x65f935c0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x65f935c0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x65f935c0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="DQQ19BCJ.JAX", cAlternateFileName="")) returned 0 [0065.317] FindClose (in: hFindFile=0x51079a0 | out: hFindFile=0x51079a0) returned 1 [0065.317] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e68c) returned 1 [0065.318] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e698) returned 1 [0065.318] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e6cc) returned 1 [0065.318] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Apps\\2.0", nBufferLength=0x105, lpBuffer=0x31e1d4, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Apps\\2.0", lpFilePart=0x0) returned 0x34 [0065.318] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Apps\\2.0\\", nBufferLength=0x105, lpBuffer=0x31e1a8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Apps\\2.0\\", lpFilePart=0x0) returned 0x35 [0065.318] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Apps\\2.0\\*", lpFindFileData=0x31e3f4 | out: lpFindFileData=0x31e3f4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x65f935c0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x65fb9720, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x65fb9720, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x51079a0 [0065.318] FindNextFileW (in: hFindFile=0x51079a0, lpFindFileData=0x31e404 | out: lpFindFileData=0x31e404*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x65f935c0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x65fb9720, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x65fb9720, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0065.318] FindNextFileW (in: hFindFile=0x51079a0, lpFindFileData=0x31e404 | out: lpFindFileData=0x31e404*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x65fb9720, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x65fb9720, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x65fb9720, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Data", cAlternateFileName="")) returned 1 [0065.318] FindNextFileW (in: hFindFile=0x51079a0, lpFindFileData=0x31e404 | out: lpFindFileData=0x31e404*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x65f935c0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x65f935c0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x65f935c0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="DQQ19BCJ.JAX", cAlternateFileName="")) returned 1 [0065.319] FindNextFileW (in: hFindFile=0x51079a0, lpFindFileData=0x31e404 | out: lpFindFileData=0x31e404*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0065.319] FindClose (in: hFindFile=0x51079a0 | out: hFindFile=0x51079a0) returned 1 [0065.319] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e68c) returned 1 [0065.319] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e698) returned 1 [0065.319] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e654) returned 1 [0065.319] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Apps\\2.0\\Data", nBufferLength=0x105, lpBuffer=0x31e15c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Apps\\2.0\\Data", lpFilePart=0x0) returned 0x39 [0065.319] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Apps\\2.0\\Data\\", nBufferLength=0x105, lpBuffer=0x31e130, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Apps\\2.0\\Data\\", lpFilePart=0x0) returned 0x3a [0065.319] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Apps\\2.0\\Data\\*", lpFindFileData=0x31e37c | out: lpFindFileData=0x31e37c*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x65fb9720, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x65fb9720, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x65fb9720, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x51079a0 [0065.320] FindNextFileW (in: hFindFile=0x51079a0, lpFindFileData=0x31e38c | out: lpFindFileData=0x31e38c*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x65fb9720, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x65fb9720, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x65fb9720, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0065.320] FindNextFileW (in: hFindFile=0x51079a0, lpFindFileData=0x31e38c | out: lpFindFileData=0x31e38c*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x65fb9720, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x65fb9720, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x65fb9720, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="CJW3O3KP.BX7", cAlternateFileName="")) returned 1 [0065.320] FindNextFileW (in: hFindFile=0x51079a0, lpFindFileData=0x31e38c | out: lpFindFileData=0x31e38c*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x65fb9720, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x65fb9720, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x65fb9720, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="CJW3O3KP.BX7", cAlternateFileName="")) returned 0 [0065.320] FindClose (in: hFindFile=0x51079a0 | out: hFindFile=0x51079a0) returned 1 [0065.320] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e614) returned 1 [0065.320] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e620) returned 1 [0065.320] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e654) returned 1 [0065.320] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Apps\\2.0\\Data", nBufferLength=0x105, lpBuffer=0x31e15c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Apps\\2.0\\Data", lpFilePart=0x0) returned 0x39 [0065.320] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Apps\\2.0\\Data\\", nBufferLength=0x105, lpBuffer=0x31e130, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Apps\\2.0\\Data\\", lpFilePart=0x0) returned 0x3a [0065.320] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Apps\\2.0\\Data\\*", lpFindFileData=0x31e37c | out: lpFindFileData=0x31e37c*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x65fb9720, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x65fb9720, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x65fb9720, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x51079a0 [0065.321] FindNextFileW (in: hFindFile=0x51079a0, lpFindFileData=0x31e38c | out: lpFindFileData=0x31e38c*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x65fb9720, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x65fb9720, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x65fb9720, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0065.321] FindNextFileW (in: hFindFile=0x51079a0, lpFindFileData=0x31e38c | out: lpFindFileData=0x31e38c*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x65fb9720, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x65fb9720, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x65fb9720, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="CJW3O3KP.BX7", cAlternateFileName="")) returned 1 [0065.321] FindNextFileW (in: hFindFile=0x51079a0, lpFindFileData=0x31e38c | out: lpFindFileData=0x31e38c*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0065.321] FindClose (in: hFindFile=0x51079a0 | out: hFindFile=0x51079a0) returned 1 [0065.321] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e614) returned 1 [0065.321] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e620) returned 1 [0065.321] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e5dc) returned 1 [0065.321] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Apps\\2.0\\Data\\CJW3O3KP.BX7", nBufferLength=0x105, lpBuffer=0x31e0e4, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Apps\\2.0\\Data\\CJW3O3KP.BX7", lpFilePart=0x0) returned 0x46 [0065.321] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Apps\\2.0\\Data\\CJW3O3KP.BX7\\", nBufferLength=0x105, lpBuffer=0x31e0b8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Apps\\2.0\\Data\\CJW3O3KP.BX7\\", lpFilePart=0x0) returned 0x47 [0065.321] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Apps\\2.0\\Data\\CJW3O3KP.BX7\\*", lpFindFileData=0x31e304 | out: lpFindFileData=0x31e304*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x65fb9720, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x65fb9720, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x65fb9720, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x51079a0 [0065.322] FindNextFileW (in: hFindFile=0x51079a0, lpFindFileData=0x31e314 | out: lpFindFileData=0x31e314*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x65fb9720, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x65fb9720, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x65fb9720, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0065.322] FindNextFileW (in: hFindFile=0x51079a0, lpFindFileData=0x31e314 | out: lpFindFileData=0x31e314*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x65fb9720, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x6a3a0420, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x6a3a0420, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="6NG60CXZ.9GJ", cAlternateFileName="")) returned 1 [0065.322] FindNextFileW (in: hFindFile=0x51079a0, lpFindFileData=0x31e314 | out: lpFindFileData=0x31e314*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x65fb9720, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x6a3a0420, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x6a3a0420, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="6NG60CXZ.9GJ", cAlternateFileName="")) returned 0 [0065.322] FindClose (in: hFindFile=0x51079a0 | out: hFindFile=0x51079a0) returned 1 [0065.322] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e59c) returned 1 [0065.322] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e5a8) returned 1 [0065.322] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e5dc) returned 1 [0065.322] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Apps\\2.0\\Data\\CJW3O3KP.BX7", nBufferLength=0x105, lpBuffer=0x31e0e4, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Apps\\2.0\\Data\\CJW3O3KP.BX7", lpFilePart=0x0) returned 0x46 [0065.322] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Apps\\2.0\\Data\\CJW3O3KP.BX7\\", nBufferLength=0x105, lpBuffer=0x31e0b8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Apps\\2.0\\Data\\CJW3O3KP.BX7\\", lpFilePart=0x0) returned 0x47 [0065.322] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Apps\\2.0\\Data\\CJW3O3KP.BX7\\*", lpFindFileData=0x31e304 | out: lpFindFileData=0x31e304*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x65fb9720, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x65fb9720, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x65fb9720, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x51079a0 [0065.322] FindNextFileW (in: hFindFile=0x51079a0, lpFindFileData=0x31e314 | out: lpFindFileData=0x31e314*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x65fb9720, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x65fb9720, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x65fb9720, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0065.323] FindNextFileW (in: hFindFile=0x51079a0, lpFindFileData=0x31e314 | out: lpFindFileData=0x31e314*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x65fb9720, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x6a3a0420, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x6a3a0420, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="6NG60CXZ.9GJ", cAlternateFileName="")) returned 1 [0065.323] FindNextFileW (in: hFindFile=0x51079a0, lpFindFileData=0x31e314 | out: lpFindFileData=0x31e314*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0065.323] FindClose (in: hFindFile=0x51079a0 | out: hFindFile=0x51079a0) returned 1 [0065.323] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e59c) returned 1 [0065.323] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e5a8) returned 1 [0065.323] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e564) returned 1 [0065.323] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Apps\\2.0\\Data\\CJW3O3KP.BX7\\6NG60CXZ.9GJ", nBufferLength=0x105, lpBuffer=0x31e06c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Apps\\2.0\\Data\\CJW3O3KP.BX7\\6NG60CXZ.9GJ", lpFilePart=0x0) returned 0x53 [0065.323] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Apps\\2.0\\Data\\CJW3O3KP.BX7\\6NG60CXZ.9GJ\\", nBufferLength=0x105, lpBuffer=0x31e040, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Apps\\2.0\\Data\\CJW3O3KP.BX7\\6NG60CXZ.9GJ\\", lpFilePart=0x0) returned 0x54 [0065.323] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Apps\\2.0\\Data\\CJW3O3KP.BX7\\6NG60CXZ.9GJ\\*", lpFindFileData=0x31e28c | out: lpFindFileData=0x31e28c*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x65fb9720, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x6a3a0420, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x6a3a0420, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x51079a0 [0065.323] FindNextFileW (in: hFindFile=0x51079a0, lpFindFileData=0x31e29c | out: lpFindFileData=0x31e29c*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x65fb9720, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x6a3a0420, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x6a3a0420, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0065.323] FindNextFileW (in: hFindFile=0x51079a0, lpFindFileData=0x31e29c | out: lpFindFileData=0x31e29c*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x6a3a0420, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x6a3a0420, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x6a3a0420, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="goog...app_baa8013a79450f71_0001.0003_290679d077f4cfec", cAlternateFileName="GOOGAP~1.000")) returned 1 [0065.324] FindNextFileW (in: hFindFile=0x51079a0, lpFindFileData=0x31e29c | out: lpFindFileData=0x31e29c*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x6a3a0420, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x6a3a0420, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x6a3a0420, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="goog...app_baa8013a79450f71_0001.0003_290679d077f4cfec", cAlternateFileName="GOOGAP~1.000")) returned 0 [0065.324] FindClose (in: hFindFile=0x51079a0 | out: hFindFile=0x51079a0) returned 1 [0065.324] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e524) returned 1 [0065.324] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e530) returned 1 [0065.324] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e564) returned 1 [0065.324] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Apps\\2.0\\Data\\CJW3O3KP.BX7\\6NG60CXZ.9GJ", nBufferLength=0x105, lpBuffer=0x31e06c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Apps\\2.0\\Data\\CJW3O3KP.BX7\\6NG60CXZ.9GJ", lpFilePart=0x0) returned 0x53 [0065.324] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Apps\\2.0\\Data\\CJW3O3KP.BX7\\6NG60CXZ.9GJ\\", nBufferLength=0x105, lpBuffer=0x31e040, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Apps\\2.0\\Data\\CJW3O3KP.BX7\\6NG60CXZ.9GJ\\", lpFilePart=0x0) returned 0x54 [0065.324] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Apps\\2.0\\Data\\CJW3O3KP.BX7\\6NG60CXZ.9GJ\\*", lpFindFileData=0x31e28c | out: lpFindFileData=0x31e28c*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x65fb9720, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x6a3a0420, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x6a3a0420, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x51079a0 [0065.324] FindNextFileW (in: hFindFile=0x51079a0, lpFindFileData=0x31e29c | out: lpFindFileData=0x31e29c*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x65fb9720, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x6a3a0420, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x6a3a0420, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0065.324] FindNextFileW (in: hFindFile=0x51079a0, lpFindFileData=0x31e29c | out: lpFindFileData=0x31e29c*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x6a3a0420, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x6a3a0420, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x6a3a0420, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="goog...app_baa8013a79450f71_0001.0003_290679d077f4cfec", cAlternateFileName="GOOGAP~1.000")) returned 1 [0065.324] FindNextFileW (in: hFindFile=0x51079a0, lpFindFileData=0x31e29c | out: lpFindFileData=0x31e29c*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0065.325] FindClose (in: hFindFile=0x51079a0 | out: hFindFile=0x51079a0) returned 1 [0065.325] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e524) returned 1 [0065.325] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e530) returned 1 [0065.325] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e4ec) returned 1 [0065.325] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Apps\\2.0\\Data\\CJW3O3KP.BX7\\6NG60CXZ.9GJ\\goog...app_baa8013a79450f71_0001.0003_290679d077f4cfec", nBufferLength=0x105, lpBuffer=0x31dff4, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Apps\\2.0\\Data\\CJW3O3KP.BX7\\6NG60CXZ.9GJ\\goog...app_baa8013a79450f71_0001.0003_290679d077f4cfec", lpFilePart=0x0) returned 0x8a [0065.325] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Apps\\2.0\\Data\\CJW3O3KP.BX7\\6NG60CXZ.9GJ\\goog...app_baa8013a79450f71_0001.0003_290679d077f4cfec\\", nBufferLength=0x105, lpBuffer=0x31dfc8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Apps\\2.0\\Data\\CJW3O3KP.BX7\\6NG60CXZ.9GJ\\goog...app_baa8013a79450f71_0001.0003_290679d077f4cfec\\", lpFilePart=0x0) returned 0x8b [0065.325] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Apps\\2.0\\Data\\CJW3O3KP.BX7\\6NG60CXZ.9GJ\\goog...app_baa8013a79450f71_0001.0003_290679d077f4cfec\\*", lpFindFileData=0x31e214 | out: lpFindFileData=0x31e214*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x6a3a0420, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x6a3a0420, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x6a3a0420, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x51079a0 [0065.326] FindNextFileW (in: hFindFile=0x51079a0, lpFindFileData=0x31e224 | out: lpFindFileData=0x31e224*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x6a3a0420, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x6a3a0420, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x6a3a0420, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0065.326] FindNextFileW (in: hFindFile=0x51079a0, lpFindFileData=0x31e224 | out: lpFindFileData=0x31e224*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x6a3a0420, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x6a3a0420, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x6a3a0420, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Data", cAlternateFileName="")) returned 1 [0065.326] FindNextFileW (in: hFindFile=0x51079a0, lpFindFileData=0x31e224 | out: lpFindFileData=0x31e224*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x6a3a0420, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x6a3a0420, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x6a3a0420, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Data", cAlternateFileName="")) returned 0 [0065.326] FindClose (in: hFindFile=0x51079a0 | out: hFindFile=0x51079a0) returned 1 [0065.326] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e4ac) returned 1 [0065.326] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e4b8) returned 1 [0065.326] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e4ec) returned 1 [0065.326] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Apps\\2.0\\Data\\CJW3O3KP.BX7\\6NG60CXZ.9GJ\\goog...app_baa8013a79450f71_0001.0003_290679d077f4cfec", nBufferLength=0x105, lpBuffer=0x31dff4, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Apps\\2.0\\Data\\CJW3O3KP.BX7\\6NG60CXZ.9GJ\\goog...app_baa8013a79450f71_0001.0003_290679d077f4cfec", lpFilePart=0x0) returned 0x8a [0065.326] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Apps\\2.0\\Data\\CJW3O3KP.BX7\\6NG60CXZ.9GJ\\goog...app_baa8013a79450f71_0001.0003_290679d077f4cfec\\", nBufferLength=0x105, lpBuffer=0x31dfc8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Apps\\2.0\\Data\\CJW3O3KP.BX7\\6NG60CXZ.9GJ\\goog...app_baa8013a79450f71_0001.0003_290679d077f4cfec\\", lpFilePart=0x0) returned 0x8b [0065.326] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Apps\\2.0\\Data\\CJW3O3KP.BX7\\6NG60CXZ.9GJ\\goog...app_baa8013a79450f71_0001.0003_290679d077f4cfec\\*", lpFindFileData=0x31e214 | out: lpFindFileData=0x31e214*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x6a3a0420, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x6a3a0420, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x6a3a0420, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x51079a0 [0065.327] FindNextFileW (in: hFindFile=0x51079a0, lpFindFileData=0x31e224 | out: lpFindFileData=0x31e224*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x6a3a0420, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x6a3a0420, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x6a3a0420, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0065.327] FindNextFileW (in: hFindFile=0x51079a0, lpFindFileData=0x31e224 | out: lpFindFileData=0x31e224*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x6a3a0420, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x6a3a0420, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x6a3a0420, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Data", cAlternateFileName="")) returned 1 [0065.327] FindNextFileW (in: hFindFile=0x51079a0, lpFindFileData=0x31e224 | out: lpFindFileData=0x31e224*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0065.327] FindClose (in: hFindFile=0x51079a0 | out: hFindFile=0x51079a0) returned 1 [0065.327] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e4ac) returned 1 [0065.327] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e4b8) returned 1 [0065.327] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e474) returned 1 [0065.327] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Apps\\2.0\\Data\\CJW3O3KP.BX7\\6NG60CXZ.9GJ\\goog...app_baa8013a79450f71_0001.0003_290679d077f4cfec\\Data", nBufferLength=0x105, lpBuffer=0x31df7c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Apps\\2.0\\Data\\CJW3O3KP.BX7\\6NG60CXZ.9GJ\\goog...app_baa8013a79450f71_0001.0003_290679d077f4cfec\\Data", lpFilePart=0x0) returned 0x8f [0065.327] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Apps\\2.0\\Data\\CJW3O3KP.BX7\\6NG60CXZ.9GJ\\goog...app_baa8013a79450f71_0001.0003_290679d077f4cfec\\Data\\", nBufferLength=0x105, lpBuffer=0x31df50, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Apps\\2.0\\Data\\CJW3O3KP.BX7\\6NG60CXZ.9GJ\\goog...app_baa8013a79450f71_0001.0003_290679d077f4cfec\\Data\\", lpFilePart=0x0) returned 0x90 [0065.327] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Apps\\2.0\\Data\\CJW3O3KP.BX7\\6NG60CXZ.9GJ\\goog...app_baa8013a79450f71_0001.0003_290679d077f4cfec\\Data\\*", lpFindFileData=0x31e19c | out: lpFindFileData=0x31e19c*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x6a3a0420, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x6a3a0420, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x6a3a0420, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x51079a0 [0065.327] FindNextFileW (in: hFindFile=0x51079a0, lpFindFileData=0x31e1ac | out: lpFindFileData=0x31e1ac*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x6a3a0420, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x6a3a0420, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x6a3a0420, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0065.328] FindNextFileW (in: hFindFile=0x51079a0, lpFindFileData=0x31e1ac | out: lpFindFileData=0x31e1ac*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x6a3a0420, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x6a3a0420, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x6a3a0420, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 0 [0065.328] FindClose (in: hFindFile=0x51079a0 | out: hFindFile=0x51079a0) returned 1 [0065.328] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e434) returned 1 [0065.328] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e440) returned 1 [0065.328] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e474) returned 1 [0065.328] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Apps\\2.0\\Data\\CJW3O3KP.BX7\\6NG60CXZ.9GJ\\goog...app_baa8013a79450f71_0001.0003_290679d077f4cfec\\Data", nBufferLength=0x105, lpBuffer=0x31df7c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Apps\\2.0\\Data\\CJW3O3KP.BX7\\6NG60CXZ.9GJ\\goog...app_baa8013a79450f71_0001.0003_290679d077f4cfec\\Data", lpFilePart=0x0) returned 0x8f [0065.328] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Apps\\2.0\\Data\\CJW3O3KP.BX7\\6NG60CXZ.9GJ\\goog...app_baa8013a79450f71_0001.0003_290679d077f4cfec\\Data\\", nBufferLength=0x105, lpBuffer=0x31df50, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Apps\\2.0\\Data\\CJW3O3KP.BX7\\6NG60CXZ.9GJ\\goog...app_baa8013a79450f71_0001.0003_290679d077f4cfec\\Data\\", lpFilePart=0x0) returned 0x90 [0065.328] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Apps\\2.0\\Data\\CJW3O3KP.BX7\\6NG60CXZ.9GJ\\goog...app_baa8013a79450f71_0001.0003_290679d077f4cfec\\Data\\*", lpFindFileData=0x31e19c | out: lpFindFileData=0x31e19c*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x6a3a0420, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x6a3a0420, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x6a3a0420, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x51079a0 [0065.328] FindNextFileW (in: hFindFile=0x51079a0, lpFindFileData=0x31e1ac | out: lpFindFileData=0x31e1ac*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x6a3a0420, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x6a3a0420, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x6a3a0420, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0065.328] FindNextFileW (in: hFindFile=0x51079a0, lpFindFileData=0x31e1ac | out: lpFindFileData=0x31e1ac*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x6a3a0420, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x6a3a0420, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x6a3a0420, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 0 [0065.328] FindClose (in: hFindFile=0x51079a0 | out: hFindFile=0x51079a0) returned 1 [0065.329] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e434) returned 1 [0065.329] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e440) returned 1 [0065.329] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e654) returned 1 [0065.329] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Apps\\2.0\\DQQ19BCJ.JAX", nBufferLength=0x105, lpBuffer=0x31e15c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Apps\\2.0\\DQQ19BCJ.JAX", lpFilePart=0x0) returned 0x41 [0065.329] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Apps\\2.0\\DQQ19BCJ.JAX\\", nBufferLength=0x105, lpBuffer=0x31e130, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Apps\\2.0\\DQQ19BCJ.JAX\\", lpFilePart=0x0) returned 0x42 [0065.329] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Apps\\2.0\\DQQ19BCJ.JAX\\*", lpFindFileData=0x31e37c | out: lpFindFileData=0x31e37c*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x65f935c0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x65f935c0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x65f935c0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x51079a0 [0065.329] FindNextFileW (in: hFindFile=0x51079a0, lpFindFileData=0x31e38c | out: lpFindFileData=0x31e38c*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x65f935c0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x65f935c0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x65f935c0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0065.329] FindNextFileW (in: hFindFile=0x51079a0, lpFindFileData=0x31e38c | out: lpFindFileData=0x31e38c*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x65f935c0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x6a37a2c0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x6a37a2c0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="YVORLGOR.PNT", cAlternateFileName="")) returned 1 [0065.329] FindNextFileW (in: hFindFile=0x51079a0, lpFindFileData=0x31e38c | out: lpFindFileData=0x31e38c*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x65f935c0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x6a37a2c0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x6a37a2c0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="YVORLGOR.PNT", cAlternateFileName="")) returned 0 [0065.329] FindClose (in: hFindFile=0x51079a0 | out: hFindFile=0x51079a0) returned 1 [0065.329] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e614) returned 1 [0065.329] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e620) returned 1 [0065.330] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e654) returned 1 [0065.330] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Apps\\2.0\\DQQ19BCJ.JAX", nBufferLength=0x105, lpBuffer=0x31e15c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Apps\\2.0\\DQQ19BCJ.JAX", lpFilePart=0x0) returned 0x41 [0065.330] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Apps\\2.0\\DQQ19BCJ.JAX\\", nBufferLength=0x105, lpBuffer=0x31e130, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Apps\\2.0\\DQQ19BCJ.JAX\\", lpFilePart=0x0) returned 0x42 [0065.330] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Apps\\2.0\\DQQ19BCJ.JAX\\*", lpFindFileData=0x31e37c | out: lpFindFileData=0x31e37c*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x65f935c0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x65f935c0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x65f935c0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x51079a0 [0065.330] FindNextFileW (in: hFindFile=0x51079a0, lpFindFileData=0x31e38c | out: lpFindFileData=0x31e38c*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x65f935c0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x65f935c0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x65f935c0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0065.330] FindNextFileW (in: hFindFile=0x51079a0, lpFindFileData=0x31e38c | out: lpFindFileData=0x31e38c*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x65f935c0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x6a37a2c0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x6a37a2c0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="YVORLGOR.PNT", cAlternateFileName="")) returned 1 [0065.330] FindNextFileW (in: hFindFile=0x51079a0, lpFindFileData=0x31e38c | out: lpFindFileData=0x31e38c*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0065.330] FindClose (in: hFindFile=0x51079a0 | out: hFindFile=0x51079a0) returned 1 [0065.330] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e614) returned 1 [0065.330] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e620) returned 1 [0065.330] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e5dc) returned 1 [0065.330] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Apps\\2.0\\DQQ19BCJ.JAX\\YVORLGOR.PNT", nBufferLength=0x105, lpBuffer=0x31e0e4, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Apps\\2.0\\DQQ19BCJ.JAX\\YVORLGOR.PNT", lpFilePart=0x0) returned 0x4e [0065.330] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Apps\\2.0\\DQQ19BCJ.JAX\\YVORLGOR.PNT\\", nBufferLength=0x105, lpBuffer=0x31e0b8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Apps\\2.0\\DQQ19BCJ.JAX\\YVORLGOR.PNT\\", lpFilePart=0x0) returned 0x4f [0065.330] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Apps\\2.0\\DQQ19BCJ.JAX\\YVORLGOR.PNT\\*", lpFindFileData=0x31e304 | out: lpFindFileData=0x31e304*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x65f935c0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x6a37a2c0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x6a37a2c0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x51079a0 [0065.332] FindNextFileW (in: hFindFile=0x51079a0, lpFindFileData=0x31e314 | out: lpFindFileData=0x31e314*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x65f935c0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x6a37a2c0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x6a37a2c0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0065.332] FindNextFileW (in: hFindFile=0x51079a0, lpFindFileData=0x31e314 | out: lpFindFileData=0x31e314*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x6a37a2c0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x6a37a2c0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x6a37a2c0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="clic...exe_baa8013a79450f71_0001.0003_none_855491bb37a51715", cAlternateFileName="CLICEX~1.000")) returned 1 [0065.332] FindNextFileW (in: hFindFile=0x51079a0, lpFindFileData=0x31e314 | out: lpFindFileData=0x31e314*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x6a37a2c0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x6a3a0420, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x6a3a0420, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="goog...app_baa8013a79450f71_0001.0003_290679d077f4cfec", cAlternateFileName="GOOGAP~1.000")) returned 1 [0065.333] FindNextFileW (in: hFindFile=0x51079a0, lpFindFileData=0x31e314 | out: lpFindFileData=0x31e314*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x65f935c0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x6a37a2c0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x6a37a2c0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="manifests", cAlternateFileName="MANIFE~1")) returned 1 [0065.333] FindNextFileW (in: hFindFile=0x51079a0, lpFindFileData=0x31e314 | out: lpFindFileData=0x31e314*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x65f935c0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x6a37a2c0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x6a37a2c0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="manifests", cAlternateFileName="MANIFE~1")) returned 0 [0065.333] FindClose (in: hFindFile=0x51079a0 | out: hFindFile=0x51079a0) returned 1 [0065.334] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e59c) returned 1 [0065.334] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e5a8) returned 1 [0065.334] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e5dc) returned 1 [0065.334] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Apps\\2.0\\DQQ19BCJ.JAX\\YVORLGOR.PNT", nBufferLength=0x105, lpBuffer=0x31e0e4, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Apps\\2.0\\DQQ19BCJ.JAX\\YVORLGOR.PNT", lpFilePart=0x0) returned 0x4e [0065.334] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Apps\\2.0\\DQQ19BCJ.JAX\\YVORLGOR.PNT\\", nBufferLength=0x105, lpBuffer=0x31e0b8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Apps\\2.0\\DQQ19BCJ.JAX\\YVORLGOR.PNT\\", lpFilePart=0x0) returned 0x4f [0065.334] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Apps\\2.0\\DQQ19BCJ.JAX\\YVORLGOR.PNT\\*", lpFindFileData=0x31e304 | out: lpFindFileData=0x31e304*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x65f935c0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x6a37a2c0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x6a37a2c0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x51079a0 [0065.335] FindNextFileW (in: hFindFile=0x51079a0, lpFindFileData=0x31e314 | out: lpFindFileData=0x31e314*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x65f935c0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x6a37a2c0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x6a37a2c0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0065.335] FindNextFileW (in: hFindFile=0x51079a0, lpFindFileData=0x31e314 | out: lpFindFileData=0x31e314*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x6a37a2c0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x6a37a2c0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x6a37a2c0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="clic...exe_baa8013a79450f71_0001.0003_none_855491bb37a51715", cAlternateFileName="CLICEX~1.000")) returned 1 [0065.335] FindNextFileW (in: hFindFile=0x51079a0, lpFindFileData=0x31e314 | out: lpFindFileData=0x31e314*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x6a37a2c0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x6a3a0420, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x6a3a0420, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="goog...app_baa8013a79450f71_0001.0003_290679d077f4cfec", cAlternateFileName="GOOGAP~1.000")) returned 1 [0065.335] FindNextFileW (in: hFindFile=0x51079a0, lpFindFileData=0x31e314 | out: lpFindFileData=0x31e314*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x65f935c0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x6a37a2c0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x6a37a2c0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="manifests", cAlternateFileName="MANIFE~1")) returned 1 [0065.335] FindNextFileW (in: hFindFile=0x51079a0, lpFindFileData=0x31e314 | out: lpFindFileData=0x31e314*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0065.335] FindClose (in: hFindFile=0x51079a0 | out: hFindFile=0x51079a0) returned 1 [0065.336] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e59c) returned 1 [0065.336] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e5a8) returned 1 [0065.336] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e564) returned 1 [0065.336] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Apps\\2.0\\DQQ19BCJ.JAX\\YVORLGOR.PNT\\clic...exe_baa8013a79450f71_0001.0003_none_855491bb37a51715", nBufferLength=0x105, lpBuffer=0x31e06c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Apps\\2.0\\DQQ19BCJ.JAX\\YVORLGOR.PNT\\clic...exe_baa8013a79450f71_0001.0003_none_855491bb37a51715", lpFilePart=0x0) returned 0x8a [0065.336] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Apps\\2.0\\DQQ19BCJ.JAX\\YVORLGOR.PNT\\clic...exe_baa8013a79450f71_0001.0003_none_855491bb37a51715\\", nBufferLength=0x105, lpBuffer=0x31e040, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Apps\\2.0\\DQQ19BCJ.JAX\\YVORLGOR.PNT\\clic...exe_baa8013a79450f71_0001.0003_none_855491bb37a51715\\", lpFilePart=0x0) returned 0x8b [0065.336] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Apps\\2.0\\DQQ19BCJ.JAX\\YVORLGOR.PNT\\clic...exe_baa8013a79450f71_0001.0003_none_855491bb37a51715\\*", lpFindFileData=0x31e28c | out: lpFindFileData=0x31e28c*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x6a37a2c0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x6a37a2c0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x6a37a2c0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x51079a0 [0065.337] FindNextFileW (in: hFindFile=0x51079a0, lpFindFileData=0x31e29c | out: lpFindFileData=0x31e29c*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x6a37a2c0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x6a37a2c0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x6a37a2c0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0065.338] FindNextFileW (in: hFindFile=0x51079a0, lpFindFileData=0x31e29c | out: lpFindFileData=0x31e29c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6a37a2c0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x6a37a2c0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x6a295a80, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x113f58, dwReserved0=0x0, dwReserved1=0x0, cFileName="GoogleUpdateSetup.exe", cAlternateFileName="GOOGLE~1.EXE")) returned 1 [0065.338] FindNextFileW (in: hFindFile=0x51079a0, lpFindFileData=0x31e29c | out: lpFindFileData=0x31e29c*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0065.338] FindClose (in: hFindFile=0x51079a0 | out: hFindFile=0x51079a0) returned 1 [0065.338] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e524) returned 1 [0065.338] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e530) returned 1 [0065.338] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e564) returned 1 [0065.338] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Apps\\2.0\\DQQ19BCJ.JAX\\YVORLGOR.PNT\\clic...exe_baa8013a79450f71_0001.0003_none_855491bb37a51715", nBufferLength=0x105, lpBuffer=0x31e06c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Apps\\2.0\\DQQ19BCJ.JAX\\YVORLGOR.PNT\\clic...exe_baa8013a79450f71_0001.0003_none_855491bb37a51715", lpFilePart=0x0) returned 0x8a [0065.338] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Apps\\2.0\\DQQ19BCJ.JAX\\YVORLGOR.PNT\\clic...exe_baa8013a79450f71_0001.0003_none_855491bb37a51715\\", nBufferLength=0x105, lpBuffer=0x31e040, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Apps\\2.0\\DQQ19BCJ.JAX\\YVORLGOR.PNT\\clic...exe_baa8013a79450f71_0001.0003_none_855491bb37a51715\\", lpFilePart=0x0) returned 0x8b [0065.338] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Apps\\2.0\\DQQ19BCJ.JAX\\YVORLGOR.PNT\\clic...exe_baa8013a79450f71_0001.0003_none_855491bb37a51715\\*", lpFindFileData=0x31e28c | out: lpFindFileData=0x31e28c*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x6a37a2c0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x6a37a2c0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x6a37a2c0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x51079a0 [0065.338] FindNextFileW (in: hFindFile=0x51079a0, lpFindFileData=0x31e29c | out: lpFindFileData=0x31e29c*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x6a37a2c0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x6a37a2c0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x6a37a2c0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0065.339] FindNextFileW (in: hFindFile=0x51079a0, lpFindFileData=0x31e29c | out: lpFindFileData=0x31e29c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6a37a2c0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x6a37a2c0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x6a295a80, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x113f58, dwReserved0=0x0, dwReserved1=0x0, cFileName="GoogleUpdateSetup.exe", cAlternateFileName="GOOGLE~1.EXE")) returned 1 [0065.339] FindNextFileW (in: hFindFile=0x51079a0, lpFindFileData=0x31e29c | out: lpFindFileData=0x31e29c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6a37a2c0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x6a37a2c0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x6a295a80, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x113f58, dwReserved0=0x0, dwReserved1=0x0, cFileName="GoogleUpdateSetup.exe", cAlternateFileName="GOOGLE~1.EXE")) returned 0 [0065.339] FindClose (in: hFindFile=0x51079a0 | out: hFindFile=0x51079a0) returned 1 [0065.339] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e524) returned 1 [0065.339] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e530) returned 1 [0065.339] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e564) returned 1 [0065.339] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Apps\\2.0\\DQQ19BCJ.JAX\\YVORLGOR.PNT\\goog...app_baa8013a79450f71_0001.0003_290679d077f4cfec", nBufferLength=0x105, lpBuffer=0x31e06c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Apps\\2.0\\DQQ19BCJ.JAX\\YVORLGOR.PNT\\goog...app_baa8013a79450f71_0001.0003_290679d077f4cfec", lpFilePart=0x0) returned 0x85 [0065.339] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Apps\\2.0\\DQQ19BCJ.JAX\\YVORLGOR.PNT\\goog...app_baa8013a79450f71_0001.0003_290679d077f4cfec\\", nBufferLength=0x105, lpBuffer=0x31e040, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Apps\\2.0\\DQQ19BCJ.JAX\\YVORLGOR.PNT\\goog...app_baa8013a79450f71_0001.0003_290679d077f4cfec\\", lpFilePart=0x0) returned 0x86 [0065.339] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Apps\\2.0\\DQQ19BCJ.JAX\\YVORLGOR.PNT\\goog...app_baa8013a79450f71_0001.0003_290679d077f4cfec\\*", lpFindFileData=0x31e28c | out: lpFindFileData=0x31e28c*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x6a37a2c0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x6a3a0420, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x6a3a0420, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x51079a0 [0065.341] FindNextFileW (in: hFindFile=0x51079a0, lpFindFileData=0x31e29c | out: lpFindFileData=0x31e29c*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x6a37a2c0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x6a3a0420, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x6a3a0420, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0065.343] FindClose (in: hFindFile=0x51079a0 | out: hFindFile=0x51079a0) returned 1 [0065.343] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e524) returned 1 [0065.343] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e530) returned 1 [0065.343] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e564) returned 1 [0065.343] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Apps\\2.0\\DQQ19BCJ.JAX\\YVORLGOR.PNT\\goog...app_baa8013a79450f71_0001.0003_290679d077f4cfec", nBufferLength=0x105, lpBuffer=0x31e06c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Apps\\2.0\\DQQ19BCJ.JAX\\YVORLGOR.PNT\\goog...app_baa8013a79450f71_0001.0003_290679d077f4cfec", lpFilePart=0x0) returned 0x85 [0065.343] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Apps\\2.0\\DQQ19BCJ.JAX\\YVORLGOR.PNT\\goog...app_baa8013a79450f71_0001.0003_290679d077f4cfec\\", nBufferLength=0x105, lpBuffer=0x31e040, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Apps\\2.0\\DQQ19BCJ.JAX\\YVORLGOR.PNT\\goog...app_baa8013a79450f71_0001.0003_290679d077f4cfec\\", lpFilePart=0x0) returned 0x86 [0065.343] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Apps\\2.0\\DQQ19BCJ.JAX\\YVORLGOR.PNT\\goog...app_baa8013a79450f71_0001.0003_290679d077f4cfec\\*", lpFindFileData=0x31e28c | out: lpFindFileData=0x31e28c*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x6a37a2c0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x6a3a0420, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x6a3a0420, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x51079a0 [0065.345] FindClose (in: hFindFile=0x51079a0 | out: hFindFile=0x51079a0) returned 1 [0065.346] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e524) returned 1 [0065.346] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e530) returned 1 [0065.346] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e564) returned 1 [0065.346] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Apps\\2.0\\DQQ19BCJ.JAX\\YVORLGOR.PNT\\manifests", nBufferLength=0x105, lpBuffer=0x31e06c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Apps\\2.0\\DQQ19BCJ.JAX\\YVORLGOR.PNT\\manifests", lpFilePart=0x0) returned 0x58 [0065.346] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Apps\\2.0\\DQQ19BCJ.JAX\\YVORLGOR.PNT\\manifests\\", nBufferLength=0x105, lpBuffer=0x31e040, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Apps\\2.0\\DQQ19BCJ.JAX\\YVORLGOR.PNT\\manifests\\", lpFilePart=0x0) returned 0x59 [0065.346] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Apps\\2.0\\DQQ19BCJ.JAX\\YVORLGOR.PNT\\manifests\\*", lpFindFileData=0x31e28c | out: lpFindFileData=0x31e28c*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x65f935c0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x6a37a2c0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x6a37a2c0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x51079a0 [0065.348] FindClose (in: hFindFile=0x51079a0 | out: hFindFile=0x51079a0) returned 1 [0065.349] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e524) returned 1 [0065.349] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e530) returned 1 [0065.349] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e564) returned 1 [0065.349] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Apps\\2.0\\DQQ19BCJ.JAX\\YVORLGOR.PNT\\manifests", nBufferLength=0x105, lpBuffer=0x31e06c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Apps\\2.0\\DQQ19BCJ.JAX\\YVORLGOR.PNT\\manifests", lpFilePart=0x0) returned 0x58 [0065.349] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Apps\\2.0\\DQQ19BCJ.JAX\\YVORLGOR.PNT\\manifests\\", nBufferLength=0x105, lpBuffer=0x31e040, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Apps\\2.0\\DQQ19BCJ.JAX\\YVORLGOR.PNT\\manifests\\", lpFilePart=0x0) returned 0x59 [0065.349] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Apps\\2.0\\DQQ19BCJ.JAX\\YVORLGOR.PNT\\manifests\\*", lpFindFileData=0x31e28c | out: lpFindFileData=0x31e28c*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x65f935c0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x6a37a2c0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x6a37a2c0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x51079a0 [0065.350] FindClose (in: hFindFile=0x51079a0 | out: hFindFile=0x51079a0) returned 1 [0065.351] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e524) returned 1 [0065.351] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e530) returned 1 [0065.351] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e744) returned 1 [0065.351] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Deployment", nBufferLength=0x105, lpBuffer=0x31e24c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Deployment", lpFilePart=0x0) returned 0x36 [0065.351] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Deployment\\", nBufferLength=0x105, lpBuffer=0x31e220, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Deployment\\", lpFilePart=0x0) returned 0x37 [0065.351] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Deployment\\*", lpFindFileData=0x31e46c | out: lpFindFileData=0x31e46c*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x65e16800, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x6adbe1a0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x6adbe1a0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x51079a0 [0065.352] FindClose (in: hFindFile=0x51079a0 | out: hFindFile=0x51079a0) returned 1 [0065.352] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e704) returned 1 [0065.352] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e710) returned 1 [0065.352] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e744) returned 1 [0065.352] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Deployment", nBufferLength=0x105, lpBuffer=0x31e24c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Deployment", lpFilePart=0x0) returned 0x36 [0065.352] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Deployment\\", nBufferLength=0x105, lpBuffer=0x31e220, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Deployment\\", lpFilePart=0x0) returned 0x37 [0065.352] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Deployment\\*", lpFindFileData=0x31e46c | out: lpFindFileData=0x31e46c*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x65e16800, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x6adbe1a0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x6adbe1a0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x51079a0 [0065.352] FindClose (in: hFindFile=0x51079a0 | out: hFindFile=0x51079a0) returned 1 [0065.352] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e704) returned 1 [0065.352] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e710) returned 1 [0065.352] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e744) returned 1 [0065.352] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google", nBufferLength=0x105, lpBuffer=0x31e24c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google", lpFilePart=0x0) returned 0x32 [0065.352] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\", nBufferLength=0x105, lpBuffer=0x31e220, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\", lpFilePart=0x0) returned 0x33 [0065.353] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\*", lpFindFileData=0x31e46c | out: lpFindFileData=0x31e46c*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x6b0b7d20, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x7f572ae0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x7f572ae0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x51079a0 [0065.360] FindClose (in: hFindFile=0x51079a0 | out: hFindFile=0x51079a0) returned 1 [0065.360] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e704) returned 1 [0065.360] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e710) returned 1 [0065.360] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e744) returned 1 [0065.360] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google", nBufferLength=0x105, lpBuffer=0x31e24c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google", lpFilePart=0x0) returned 0x32 [0065.360] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\", nBufferLength=0x105, lpBuffer=0x31e220, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\", lpFilePart=0x0) returned 0x33 [0065.360] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\*", lpFindFileData=0x31e46c | out: lpFindFileData=0x31e46c*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x6b0b7d20, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x7f572ae0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x7f572ae0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x51079a0 [0065.360] FindClose (in: hFindFile=0x51079a0 | out: hFindFile=0x51079a0) returned 1 [0065.360] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e704) returned 1 [0065.360] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e710) returned 1 [0065.360] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e6cc) returned 1 [0065.361] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome", nBufferLength=0x105, lpBuffer=0x31e1d4, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome", lpFilePart=0x0) returned 0x39 [0065.361] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\", nBufferLength=0x105, lpBuffer=0x31e1a8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\", lpFilePart=0x0) returned 0x3a [0065.361] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\*", lpFindFileData=0x31e3f4 | out: lpFindFileData=0x31e3f4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x7f572ae0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x7f572ae0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x7f572ae0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x51079a0 [0065.361] FindClose (in: hFindFile=0x51079a0 | out: hFindFile=0x51079a0) returned 1 [0065.361] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e68c) returned 1 [0065.361] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e698) returned 1 [0065.361] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e6cc) returned 1 [0065.361] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome", nBufferLength=0x105, lpBuffer=0x31e1d4, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome", lpFilePart=0x0) returned 0x39 [0065.361] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\", nBufferLength=0x105, lpBuffer=0x31e1a8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\", lpFilePart=0x0) returned 0x3a [0065.361] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\*", lpFindFileData=0x31e3f4 | out: lpFindFileData=0x31e3f4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x7f572ae0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x7f572ae0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x7f572ae0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x51079a0 [0065.361] FindClose (in: hFindFile=0x51079a0 | out: hFindFile=0x51079a0) returned 1 [0065.361] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e68c) returned 1 [0065.361] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e698) returned 1 [0065.361] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e654) returned 1 [0065.361] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data", nBufferLength=0x105, lpBuffer=0x31e15c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data", lpFilePart=0x0) returned 0x43 [0065.361] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\", nBufferLength=0x105, lpBuffer=0x31e130, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\", lpFilePart=0x0) returned 0x44 [0065.361] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\*", lpFindFileData=0x31e37c | out: lpFindFileData=0x31e37c*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x7f572ae0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x9c593160, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x9c593160, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x51079a0 [0065.365] FindClose (in: hFindFile=0x51079a0 | out: hFindFile=0x51079a0) returned 1 [0065.366] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e614) returned 1 [0065.366] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e620) returned 1 [0065.366] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e654) returned 1 [0065.366] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data", nBufferLength=0x105, lpBuffer=0x31e15c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data", lpFilePart=0x0) returned 0x43 [0065.366] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\", nBufferLength=0x105, lpBuffer=0x31e130, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\", lpFilePart=0x0) returned 0x44 [0065.366] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\*", lpFindFileData=0x31e37c | out: lpFindFileData=0x31e37c*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x7f572ae0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x9c593160, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x9c593160, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x51079a0 [0065.367] FindClose (in: hFindFile=0x51079a0 | out: hFindFile=0x51079a0) returned 1 [0065.368] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e614) returned 1 [0065.368] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e620) returned 1 [0065.368] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e5dc) returned 1 [0065.368] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\CertificateTransparency", nBufferLength=0x105, lpBuffer=0x31e0e4, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\CertificateTransparency", lpFilePart=0x0) returned 0x5b [0065.368] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\CertificateTransparency\\", nBufferLength=0x105, lpBuffer=0x31e0b8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\CertificateTransparency\\", lpFilePart=0x0) returned 0x5c [0065.368] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\CertificateTransparency\\*", lpFindFileData=0x31e304 | out: lpFindFileData=0x31e304*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x81dfb250, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x81dfb250, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x81dfb250, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x51079a0 [0065.369] FindClose (in: hFindFile=0x51079a0 | out: hFindFile=0x51079a0) returned 1 [0065.369] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e59c) returned 1 [0065.369] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e5a8) returned 1 [0065.369] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e5dc) returned 1 [0065.370] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\CertificateTransparency", nBufferLength=0x105, lpBuffer=0x31e0e4, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\CertificateTransparency", lpFilePart=0x0) returned 0x5b [0065.370] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\CertificateTransparency\\", nBufferLength=0x105, lpBuffer=0x31e0b8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\CertificateTransparency\\", lpFilePart=0x0) returned 0x5c [0065.370] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\CertificateTransparency\\*", lpFindFileData=0x31e304 | out: lpFindFileData=0x31e304*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x81dfb250, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x81dfb250, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x81dfb250, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x51079a0 [0065.370] FindClose (in: hFindFile=0x51079a0 | out: hFindFile=0x51079a0) returned 1 [0065.370] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e59c) returned 1 [0065.370] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e5a8) returned 1 [0065.370] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e5dc) returned 1 [0065.370] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Crashpad", nBufferLength=0x105, lpBuffer=0x31e0e4, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Crashpad", lpFilePart=0x0) returned 0x4c [0065.370] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Crashpad\\", nBufferLength=0x105, lpBuffer=0x31e0b8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Crashpad\\", lpFilePart=0x0) returned 0x4d [0065.370] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Crashpad\\*", lpFindFileData=0x31e304 | out: lpFindFileData=0x31e304*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x7f598c40, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x7f5beda0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x7f5beda0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x51079a0 [0065.371] FindClose (in: hFindFile=0x51079a0 | out: hFindFile=0x51079a0) returned 1 [0065.371] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e59c) returned 1 [0065.371] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e5a8) returned 1 [0065.371] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e5dc) returned 1 [0065.371] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Crashpad", nBufferLength=0x105, lpBuffer=0x31e0e4, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Crashpad", lpFilePart=0x0) returned 0x4c [0065.371] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Crashpad\\", nBufferLength=0x105, lpBuffer=0x31e0b8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Crashpad\\", lpFilePart=0x0) returned 0x4d [0065.371] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Crashpad\\*", lpFindFileData=0x31e304 | out: lpFindFileData=0x31e304*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x7f598c40, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x7f5beda0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x7f5beda0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x51079a0 [0065.371] FindClose (in: hFindFile=0x51079a0 | out: hFindFile=0x51079a0) returned 1 [0065.371] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e59c) returned 1 [0065.371] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e5a8) returned 1 [0065.371] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e564) returned 1 [0065.371] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Crashpad\\reports", nBufferLength=0x105, lpBuffer=0x31e06c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Crashpad\\reports", lpFilePart=0x0) returned 0x54 [0065.371] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Crashpad\\reports\\", nBufferLength=0x105, lpBuffer=0x31e040, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Crashpad\\reports\\", lpFilePart=0x0) returned 0x55 [0065.371] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Crashpad\\reports\\*", lpFindFileData=0x31e28c | out: lpFindFileData=0x31e28c*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x7f598c40, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x7f598c40, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x7f598c40, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x51079a0 [0065.372] FindClose (in: hFindFile=0x51079a0 | out: hFindFile=0x51079a0) returned 1 [0065.372] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e524) returned 1 [0065.372] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e530) returned 1 [0065.372] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e564) returned 1 [0065.372] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Crashpad\\reports", nBufferLength=0x105, lpBuffer=0x31e06c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Crashpad\\reports", lpFilePart=0x0) returned 0x54 [0065.372] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Crashpad\\reports\\", nBufferLength=0x105, lpBuffer=0x31e040, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Crashpad\\reports\\", lpFilePart=0x0) returned 0x55 [0065.372] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Crashpad\\reports\\*", lpFindFileData=0x31e28c | out: lpFindFileData=0x31e28c*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x7f598c40, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x7f598c40, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x7f598c40, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x51079a0 [0065.372] FindClose (in: hFindFile=0x51079a0 | out: hFindFile=0x51079a0) returned 1 [0065.372] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e524) returned 1 [0065.372] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e530) returned 1 [0065.372] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e5dc) returned 1 [0065.372] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default", nBufferLength=0x105, lpBuffer=0x31e0e4, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default", lpFilePart=0x0) returned 0x4b [0065.372] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\", nBufferLength=0x105, lpBuffer=0x31e0b8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\", lpFilePart=0x0) returned 0x4c [0065.372] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\*", lpFindFileData=0x31e304 | out: lpFindFileData=0x31e304*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x7f846500, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x9c4887c0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x9c4887c0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x51079a0 [0065.376] FindClose (in: hFindFile=0x51079a0 | out: hFindFile=0x51079a0) returned 1 [0065.377] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e59c) returned 1 [0065.377] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e5a8) returned 1 [0065.377] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e5dc) returned 1 [0065.377] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default", nBufferLength=0x105, lpBuffer=0x31e0e4, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default", lpFilePart=0x0) returned 0x4b [0065.377] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\", nBufferLength=0x105, lpBuffer=0x31e0b8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\", lpFilePart=0x0) returned 0x4c [0065.377] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\*", lpFindFileData=0x31e304 | out: lpFindFileData=0x31e304*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x7f846500, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x9c4887c0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x9c4887c0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x51079a0 [0065.378] FindClose (in: hFindFile=0x51079a0 | out: hFindFile=0x51079a0) returned 1 [0065.378] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e59c) returned 1 [0065.378] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e5a8) returned 1 [0065.378] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e564) returned 1 [0065.378] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Cache", nBufferLength=0x105, lpBuffer=0x31e06c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Cache", lpFilePart=0x0) returned 0x51 [0065.378] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Cache\\", nBufferLength=0x105, lpBuffer=0x31e040, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Cache\\", lpFilePart=0x0) returned 0x52 [0065.378] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Cache\\*", lpFindFileData=0x31e28c | out: lpFindFileData=0x31e28c*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x805aa0c0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x805aa0c0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x805aa0c0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x51079a0 [0065.380] FindClose (in: hFindFile=0x51079a0 | out: hFindFile=0x51079a0) returned 1 [0065.380] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e524) returned 1 [0065.380] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e530) returned 1 [0065.380] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e564) returned 1 [0065.380] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Cache", nBufferLength=0x105, lpBuffer=0x31e06c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Cache", lpFilePart=0x0) returned 0x51 [0065.380] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Cache\\", nBufferLength=0x105, lpBuffer=0x31e040, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Cache\\", lpFilePart=0x0) returned 0x52 [0065.380] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Cache\\*", lpFindFileData=0x31e28c | out: lpFindFileData=0x31e28c*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x805aa0c0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x805aa0c0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x805aa0c0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x51079a0 [0065.380] FindClose (in: hFindFile=0x51079a0 | out: hFindFile=0x51079a0) returned 1 [0065.380] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e524) returned 1 [0065.380] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e530) returned 1 [0065.380] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e564) returned 1 [0065.380] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\data_reduction_proxy_leveldb", nBufferLength=0x105, lpBuffer=0x31e06c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\data_reduction_proxy_leveldb", lpFilePart=0x0) returned 0x68 [0065.380] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\data_reduction_proxy_leveldb\\", nBufferLength=0x105, lpBuffer=0x31e040, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\data_reduction_proxy_leveldb\\", lpFilePart=0x0) returned 0x69 [0065.381] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\data_reduction_proxy_leveldb\\*", lpFindFileData=0x31e28c | out: lpFindFileData=0x31e28c*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x802d66a0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x80916060, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x80916060, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x51079a0 [0065.382] FindClose (in: hFindFile=0x51079a0 | out: hFindFile=0x51079a0) returned 1 [0065.383] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e524) returned 1 [0065.383] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e530) returned 1 [0065.383] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e564) returned 1 [0065.383] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\data_reduction_proxy_leveldb", nBufferLength=0x105, lpBuffer=0x31e06c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\data_reduction_proxy_leveldb", lpFilePart=0x0) returned 0x68 [0065.383] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\data_reduction_proxy_leveldb\\", nBufferLength=0x105, lpBuffer=0x31e040, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\data_reduction_proxy_leveldb\\", lpFilePart=0x0) returned 0x69 [0065.383] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\data_reduction_proxy_leveldb\\*", lpFindFileData=0x31e28c | out: lpFindFileData=0x31e28c*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x802d66a0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x80916060, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x80916060, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x51079a0 [0065.384] FindClose (in: hFindFile=0x51079a0 | out: hFindFile=0x51079a0) returned 1 [0065.384] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e524) returned 1 [0065.384] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e530) returned 1 [0065.384] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e564) returned 1 [0065.384] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extension Rules", nBufferLength=0x105, lpBuffer=0x31e06c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extension Rules", lpFilePart=0x0) returned 0x5b [0065.384] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extension Rules\\", nBufferLength=0x105, lpBuffer=0x31e040, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extension Rules\\", lpFilePart=0x0) returned 0x5c [0065.384] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extension Rules\\*", lpFindFileData=0x31e28c | out: lpFindFileData=0x31e28c*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x82ad9940, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x82bed750, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x82bed750, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x51079a0 [0065.387] FindClose (in: hFindFile=0x51079a0 | out: hFindFile=0x51079a0) returned 1 [0065.387] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e524) returned 1 [0065.387] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e530) returned 1 [0065.387] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e564) returned 1 [0065.387] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extension Rules", nBufferLength=0x105, lpBuffer=0x31e06c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extension Rules", lpFilePart=0x0) returned 0x5b [0065.387] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extension Rules\\", nBufferLength=0x105, lpBuffer=0x31e040, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extension Rules\\", lpFilePart=0x0) returned 0x5c [0065.387] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extension Rules\\*", lpFindFileData=0x31e28c | out: lpFindFileData=0x31e28c*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x82ad9940, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x82bed750, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x82bed750, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x51079a0 [0065.388] FindClose (in: hFindFile=0x51079a0 | out: hFindFile=0x51079a0) returned 1 [0065.389] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e524) returned 1 [0065.389] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e530) returned 1 [0065.389] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e564) returned 1 [0065.389] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extension State", nBufferLength=0x105, lpBuffer=0x31e06c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extension State", lpFilePart=0x0) returned 0x5b [0065.389] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extension State\\", nBufferLength=0x105, lpBuffer=0x31e040, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extension State\\", lpFilePart=0x0) returned 0x5c [0065.389] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extension State\\*", lpFindFileData=0x31e28c | out: lpFindFileData=0x31e28c*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x824ad030, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x82556720, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x82556720, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x51079a0 [0065.391] FindClose (in: hFindFile=0x51079a0 | out: hFindFile=0x51079a0) returned 1 [0065.392] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e524) returned 1 [0065.392] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e530) returned 1 [0065.392] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e564) returned 1 [0065.392] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extension State", nBufferLength=0x105, lpBuffer=0x31e06c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extension State", lpFilePart=0x0) returned 0x5b [0065.392] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extension State\\", nBufferLength=0x105, lpBuffer=0x31e040, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extension State\\", lpFilePart=0x0) returned 0x5c [0065.392] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extension State\\*", lpFindFileData=0x31e28c | out: lpFindFileData=0x31e28c*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x824ad030, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x82556720, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x82556720, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x51079a0 [0065.393] FindClose (in: hFindFile=0x51079a0 | out: hFindFile=0x51079a0) returned 1 [0065.393] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e524) returned 1 [0065.393] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e530) returned 1 [0065.393] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e564) returned 1 [0065.393] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions", nBufferLength=0x105, lpBuffer=0x31e06c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions", lpFilePart=0x0) returned 0x56 [0065.393] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\", nBufferLength=0x105, lpBuffer=0x31e040, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\", lpFilePart=0x0) returned 0x57 [0065.393] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\*", lpFindFileData=0x31e28c | out: lpFindFileData=0x31e28c*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x80d1a580, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x9174a630, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x9174a630, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x51079a0 [0065.400] FindClose (in: hFindFile=0x51079a0 | out: hFindFile=0x51079a0) returned 1 [0065.401] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e524) returned 1 [0065.401] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e530) returned 1 [0065.401] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e564) returned 1 [0065.401] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions", nBufferLength=0x105, lpBuffer=0x31e06c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions", lpFilePart=0x0) returned 0x56 [0065.401] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\", nBufferLength=0x105, lpBuffer=0x31e040, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\", lpFilePart=0x0) returned 0x57 [0065.401] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\*", lpFindFileData=0x31e28c | out: lpFindFileData=0x31e28c*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x80d1a580, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x9174a630, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x9174a630, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x51079a0 [0065.402] FindClose (in: hFindFile=0x51079a0 | out: hFindFile=0x51079a0) returned 1 [0065.402] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e524) returned 1 [0065.402] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e530) returned 1 [0065.402] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e4ec) returned 1 [0065.402] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek", nBufferLength=0x105, lpBuffer=0x31dff4, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek", lpFilePart=0x0) returned 0x77 [0065.402] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\", nBufferLength=0x105, lpBuffer=0x31dfc8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\", lpFilePart=0x0) returned 0x78 [0065.402] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\*", lpFindFileData=0x31e214 | out: lpFindFileData=0x31e214*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x85cca3f0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85cf0550, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85cf0550, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x51079a0 [0065.405] FindClose (in: hFindFile=0x51079a0 | out: hFindFile=0x51079a0) returned 1 [0065.405] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e4ac) returned 1 [0065.405] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e4b8) returned 1 [0065.405] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e4ec) returned 1 [0065.405] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek", nBufferLength=0x105, lpBuffer=0x31dff4, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek", lpFilePart=0x0) returned 0x77 [0065.405] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\", nBufferLength=0x105, lpBuffer=0x31dfc8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\", lpFilePart=0x0) returned 0x78 [0065.405] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\*", lpFindFileData=0x31e214 | out: lpFindFileData=0x31e214*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x85cca3f0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85cf0550, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85cf0550, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x51079a0 [0065.405] FindClose (in: hFindFile=0x51079a0 | out: hFindFile=0x51079a0) returned 1 [0065.405] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e4ac) returned 1 [0065.405] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e4b8) returned 1 [0065.405] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e474) returned 1 [0065.405] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0", nBufferLength=0x105, lpBuffer=0x31df7c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0", lpFilePart=0x0) returned 0x7d [0065.405] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\", nBufferLength=0x105, lpBuffer=0x31df50, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\", lpFilePart=0x0) returned 0x7e [0065.405] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\*", lpFindFileData=0x31e19c | out: lpFindFileData=0x31e19c*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x857953d0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85cca3f0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85cca3f0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x51079a0 [0065.408] FindClose (in: hFindFile=0x51079a0 | out: hFindFile=0x51079a0) returned 1 [0065.408] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e434) returned 1 [0065.408] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e440) returned 1 [0065.408] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e474) returned 1 [0065.408] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0", nBufferLength=0x105, lpBuffer=0x31df7c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0", lpFilePart=0x0) returned 0x7d [0065.408] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\", nBufferLength=0x105, lpBuffer=0x31df50, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\", lpFilePart=0x0) returned 0x7e [0065.408] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\*", lpFindFileData=0x31e19c | out: lpFindFileData=0x31e19c*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x857953d0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85cca3f0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85cca3f0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x51079a0 [0065.409] FindClose (in: hFindFile=0x51079a0 | out: hFindFile=0x51079a0) returned 1 [0065.410] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e434) returned 1 [0065.410] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e440) returned 1 [0065.410] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\icon_128.png", nBufferLength=0x105, lpBuffer=0x31de4c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\icon_128.png", lpFilePart=0x0) returned 0x8a [0065.410] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e340) returned 1 [0065.410] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\icon_128.png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\icon_128.png"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x178 [0065.411] GetFileType (hFile=0x178) returned 0x1 [0065.411] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e33c) returned 1 [0065.411] GetFileType (hFile=0x178) returned 0x1 [0065.411] GetFileSize (in: hFile=0x178, lpFileSizeHigh=0x31e448 | out: lpFileSizeHigh=0x31e448*=0x0) returned 0xd2c [0065.411] ReadFile (in: hFile=0x178, lpBuffer=0x2678f1c, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x31e3f4, lpOverlapped=0x0 | out: lpBuffer=0x2678f1c*, lpNumberOfBytesRead=0x31e3f4*=0xd2c, lpOverlapped=0x0) returned 1 [0065.442] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\icon_128.png", nBufferLength=0x105, lpBuffer=0x31de38, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\icon_128.png", lpFilePart=0x0) returned 0x8a [0065.442] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e32c) returned 1 [0065.442] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\icon_128.png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\icon_128.png"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x178 [0065.443] GetFileType (hFile=0x178) returned 0x1 [0065.443] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e328) returned 1 [0065.443] GetFileType (hFile=0x178) returned 0x1 [0065.443] WriteFile (in: hFile=0x178, lpBuffer=0x26cb204*, nNumberOfBytesToWrite=0xd30, lpNumberOfBytesWritten=0x31e3bc, lpOverlapped=0x0 | out: lpBuffer=0x26cb204*, lpNumberOfBytesWritten=0x31e3bc*=0xd30, lpOverlapped=0x0) returned 1 [0065.445] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\icon_128.png", nBufferLength=0x105, lpBuffer=0x31df6c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\icon_128.png", lpFilePart=0x0) returned 0x8a [0065.445] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\icon_128.png", nBufferLength=0x105, lpBuffer=0x31df6c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\icon_128.png", lpFilePart=0x0) returned 0x8a [0065.445] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e3cc) returned 1 [0065.445] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\icon_128.png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\icon_128.png"), fInfoLevelId=0x0, lpFileInformation=0x31e448 | out: lpFileInformation=0x31e448*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x85b4d630, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85cca3f0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0xa744bc0, ftLastWriteTime.dwHighDateTime=0x1d6eb7f, nFileSizeHigh=0x0, nFileSizeLow=0xd30)) returned 1 [0065.445] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\icon_128.png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\icon_128.png"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\icon_128.png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\icon_128.png")) returned 1 [0065.445] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\icon_16.png", nBufferLength=0x105, lpBuffer=0x31de4c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\icon_16.png", lpFilePart=0x0) returned 0x89 [0065.445] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\icon_16.png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\icon_16.png"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x178 [0065.446] GetFileType (hFile=0x178) returned 0x1 [0065.446] GetFileType (hFile=0x178) returned 0x1 [0065.446] GetFileSize (in: hFile=0x178, lpFileSizeHigh=0x31e448 | out: lpFileSizeHigh=0x31e448*=0x0) returned 0xa0 [0065.446] ReadFile (in: hFile=0x178, lpBuffer=0x26cc6bc, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x31e3f4, lpOverlapped=0x0 | out: lpBuffer=0x26cc6bc*, lpNumberOfBytesRead=0x31e3f4*=0xa0, lpOverlapped=0x0) returned 1 [0065.447] CloseHandle (hObject=0x178) returned 1 [0065.470] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\icon_16.png", nBufferLength=0x105, lpBuffer=0x31de38, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\icon_16.png", lpFilePart=0x0) returned 0x89 [0065.470] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\icon_16.png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\icon_16.png"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x178 [0065.471] GetFileType (hFile=0x178) returned 0x1 [0065.471] GetFileType (hFile=0x178) returned 0x1 [0065.471] WriteFile (in: hFile=0x178, lpBuffer=0x271a8e0*, nNumberOfBytesToWrite=0xb0, lpNumberOfBytesWritten=0x31e3bc, lpOverlapped=0x0 | out: lpBuffer=0x271a8e0*, lpNumberOfBytesWritten=0x31e3bc*=0xb0, lpOverlapped=0x0) returned 1 [0065.471] CloseHandle (hObject=0x178) returned 1 [0065.472] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\icon_16.png", nBufferLength=0x105, lpBuffer=0x31df6c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\icon_16.png", lpFilePart=0x0) returned 0x89 [0065.472] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\icon_16.png", nBufferLength=0x105, lpBuffer=0x31df6c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\icon_16.png", lpFilePart=0x0) returned 0x89 [0065.472] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\icon_16.png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\icon_16.png"), fInfoLevelId=0x0, lpFileInformation=0x31e448 | out: lpFileInformation=0x31e448*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x85b4d630, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85cca3f0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0xa76ad20, ftLastWriteTime.dwHighDateTime=0x1d6eb7f, nFileSizeHigh=0x0, nFileSizeLow=0xb0)) returned 1 [0065.472] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\icon_16.png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\icon_16.png"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\icon_16.png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\icon_16.png")) returned 1 [0065.472] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\main.html", nBufferLength=0x105, lpBuffer=0x31de4c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\main.html", lpFilePart=0x0) returned 0x87 [0065.472] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\main.html" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\main.html"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x178 [0065.473] GetFileType (hFile=0x178) returned 0x1 [0065.473] GetFileType (hFile=0x178) returned 0x1 [0065.473] GetFileSize (in: hFile=0x178, lpFileSizeHigh=0x31e448 | out: lpFileSizeHigh=0x31e448*=0x0) returned 0x5c [0065.473] ReadFile (in: hFile=0x178, lpBuffer=0x271bd44, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x31e3f4, lpOverlapped=0x0 | out: lpBuffer=0x271bd44*, lpNumberOfBytesRead=0x31e3f4*=0x5c, lpOverlapped=0x0) returned 1 [0065.474] CloseHandle (hObject=0x178) returned 1 [0065.487] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\main.html", nBufferLength=0x105, lpBuffer=0x31de38, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\main.html", lpFilePart=0x0) returned 0x87 [0065.487] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\main.html" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\main.html"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x178 [0065.488] GetFileType (hFile=0x178) returned 0x1 [0065.488] GetFileType (hFile=0x178) returned 0x1 [0065.488] WriteFile (in: hFile=0x178, lpBuffer=0x2769eb4*, nNumberOfBytesToWrite=0x60, lpNumberOfBytesWritten=0x31e3bc, lpOverlapped=0x0 | out: lpBuffer=0x2769eb4*, lpNumberOfBytesWritten=0x31e3bc*=0x60, lpOverlapped=0x0) returned 1 [0065.488] CloseHandle (hObject=0x178) returned 1 [0065.489] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\main.html", nBufferLength=0x105, lpBuffer=0x31df6c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\main.html", lpFilePart=0x0) returned 0x87 [0065.489] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\main.html", nBufferLength=0x105, lpBuffer=0x31df6c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\main.html", lpFilePart=0x0) returned 0x87 [0065.489] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\main.html" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\main.html"), fInfoLevelId=0x0, lpFileInformation=0x31e448 | out: lpFileInformation=0x31e448*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x85b4d630, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85b74730, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0xa790e80, ftLastWriteTime.dwHighDateTime=0x1d6eb7f, nFileSizeHigh=0x0, nFileSizeLow=0x60)) returned 1 [0065.489] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\main.html" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\main.html"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\main.html" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\main.html")) returned 1 [0065.489] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales", nBufferLength=0x105, lpBuffer=0x31df04, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales", lpFilePart=0x0) returned 0x86 [0065.489] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\", nBufferLength=0x105, lpBuffer=0x31ded8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\", lpFilePart=0x0) returned 0x87 [0065.489] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\*", lpFindFileData=0x31e124 | out: lpFindFileData=0x31e124*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x857953d0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85b4d630, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85b4d630, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x51079e0 [0065.492] FindNextFileW (in: hFindFile=0x51079e0, lpFindFileData=0x31e134 | out: lpFindFileData=0x31e134*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x857953d0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85b4d630, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85b4d630, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0065.492] FindNextFileW (in: hFindFile=0x51079e0, lpFindFileData=0x31e134 | out: lpFindFileData=0x31e134*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x857953d0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x857953d0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x857953d0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="ar", cAlternateFileName="")) returned 1 [0065.492] FindNextFileW (in: hFindFile=0x51079e0, lpFindFileData=0x31e134 | out: lpFindFileData=0x31e134*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x857bb530, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x857bb530, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x857bb530, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="bg", cAlternateFileName="")) returned 1 [0065.493] FindNextFileW (in: hFindFile=0x51079e0, lpFindFileData=0x31e134 | out: lpFindFileData=0x31e134*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x857bb530, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x857bb530, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x857bb530, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="ca", cAlternateFileName="")) returned 1 [0065.493] FindNextFileW (in: hFindFile=0x51079e0, lpFindFileData=0x31e134 | out: lpFindFileData=0x31e134*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x857bb530, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x857bb530, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x857bb530, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="cs", cAlternateFileName="")) returned 1 [0065.493] FindNextFileW (in: hFindFile=0x51079e0, lpFindFileData=0x31e134 | out: lpFindFileData=0x31e134*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x857bb530, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x857bb530, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x857bb530, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="da", cAlternateFileName="")) returned 1 [0065.493] FindNextFileW (in: hFindFile=0x51079e0, lpFindFileData=0x31e134 | out: lpFindFileData=0x31e134*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x857bb530, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x857bb530, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x857bb530, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="de", cAlternateFileName="")) returned 1 [0065.493] FindNextFileW (in: hFindFile=0x51079e0, lpFindFileData=0x31e134 | out: lpFindFileData=0x31e134*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x857bb530, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x857bb530, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x857bb530, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="el", cAlternateFileName="")) returned 1 [0065.493] FindNextFileW (in: hFindFile=0x51079e0, lpFindFileData=0x31e134 | out: lpFindFileData=0x31e134*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x857e1690, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x859aa710, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x859aa710, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="en_GB", cAlternateFileName="")) returned 1 [0065.493] FindNextFileW (in: hFindFile=0x51079e0, lpFindFileData=0x31e134 | out: lpFindFileData=0x31e134*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x859aa710, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x859aa710, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x859aa710, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="en_US", cAlternateFileName="")) returned 1 [0065.494] FindNextFileW (in: hFindFile=0x51079e0, lpFindFileData=0x31e134 | out: lpFindFileData=0x31e134*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x859aa710, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x859aa710, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x859aa710, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="es", cAlternateFileName="")) returned 1 [0065.494] FindNextFileW (in: hFindFile=0x51079e0, lpFindFileData=0x31e134 | out: lpFindFileData=0x31e134*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x859d0870, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x859d0870, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x859d0870, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="es_419", cAlternateFileName="")) returned 1 [0065.494] FindNextFileW (in: hFindFile=0x51079e0, lpFindFileData=0x31e134 | out: lpFindFileData=0x31e134*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x859d0870, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x859d0870, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x859d0870, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="et", cAlternateFileName="")) returned 1 [0065.494] FindNextFileW (in: hFindFile=0x51079e0, lpFindFileData=0x31e134 | out: lpFindFileData=0x31e134*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x859d0870, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x859d0870, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x859d0870, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="fi", cAlternateFileName="")) returned 1 [0065.494] FindNextFileW (in: hFindFile=0x51079e0, lpFindFileData=0x31e134 | out: lpFindFileData=0x31e134*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x859f69d0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x859f69d0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x859f69d0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="fil", cAlternateFileName="")) returned 1 [0065.494] FindNextFileW (in: hFindFile=0x51079e0, lpFindFileData=0x31e134 | out: lpFindFileData=0x31e134*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x859f69d0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x859f69d0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x859f69d0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="fr", cAlternateFileName="")) returned 1 [0065.494] FindNextFileW (in: hFindFile=0x51079e0, lpFindFileData=0x31e134 | out: lpFindFileData=0x31e134*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x859f69d0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x859f69d0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x859f69d0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="he", cAlternateFileName="")) returned 1 [0065.495] FindNextFileW (in: hFindFile=0x51079e0, lpFindFileData=0x31e134 | out: lpFindFileData=0x31e134*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x85a1cb30, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85a1cb30, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85a1cb30, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="hi", cAlternateFileName="")) returned 1 [0065.495] FindNextFileW (in: hFindFile=0x51079e0, lpFindFileData=0x31e134 | out: lpFindFileData=0x31e134*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x85a1cb30, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85a1cb30, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85a1cb30, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="hu", cAlternateFileName="")) returned 1 [0065.495] FindNextFileW (in: hFindFile=0x51079e0, lpFindFileData=0x31e134 | out: lpFindFileData=0x31e134*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x85a1cb30, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85a1cb30, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85a1cb30, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="id", cAlternateFileName="")) returned 1 [0065.495] FindNextFileW (in: hFindFile=0x51079e0, lpFindFileData=0x31e134 | out: lpFindFileData=0x31e134*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x85a1cb30, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85a42c90, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85a42c90, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="it", cAlternateFileName="")) returned 1 [0065.495] FindNextFileW (in: hFindFile=0x51079e0, lpFindFileData=0x31e134 | out: lpFindFileData=0x31e134*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x85a42c90, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85a42c90, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85a42c90, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="ja", cAlternateFileName="")) returned 1 [0065.495] FindNextFileW (in: hFindFile=0x51079e0, lpFindFileData=0x31e134 | out: lpFindFileData=0x31e134*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x85a42c90, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85a42c90, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85a42c90, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="ko", cAlternateFileName="")) returned 1 [0065.495] FindNextFileW (in: hFindFile=0x51079e0, lpFindFileData=0x31e134 | out: lpFindFileData=0x31e134*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x85a68df0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85a68df0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85a68df0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="lt", cAlternateFileName="")) returned 1 [0065.496] FindNextFileW (in: hFindFile=0x51079e0, lpFindFileData=0x31e134 | out: lpFindFileData=0x31e134*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x85a68df0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85a68df0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85a68df0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="lv", cAlternateFileName="")) returned 1 [0065.496] FindNextFileW (in: hFindFile=0x51079e0, lpFindFileData=0x31e134 | out: lpFindFileData=0x31e134*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x85a68df0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85a8ef50, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85a8ef50, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="ms", cAlternateFileName="")) returned 1 [0065.496] FindNextFileW (in: hFindFile=0x51079e0, lpFindFileData=0x31e134 | out: lpFindFileData=0x31e134*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x85a8ef50, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85a8ef50, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85a8ef50, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="nl", cAlternateFileName="")) returned 1 [0065.496] FindNextFileW (in: hFindFile=0x51079e0, lpFindFileData=0x31e134 | out: lpFindFileData=0x31e134*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x85a8ef50, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85a8ef50, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85a8ef50, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="no", cAlternateFileName="")) returned 1 [0065.496] FindNextFileW (in: hFindFile=0x51079e0, lpFindFileData=0x31e134 | out: lpFindFileData=0x31e134*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x85a8ef50, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85a8ef50, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85a8ef50, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="pl", cAlternateFileName="")) returned 1 [0065.496] FindNextFileW (in: hFindFile=0x51079e0, lpFindFileData=0x31e134 | out: lpFindFileData=0x31e134*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x85ab50b0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85ab50b0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85ab50b0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="pt_BR", cAlternateFileName="")) returned 1 [0065.496] FindNextFileW (in: hFindFile=0x51079e0, lpFindFileData=0x31e134 | out: lpFindFileData=0x31e134*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x85ab50b0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85ab50b0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85ab50b0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="pt_PT", cAlternateFileName="")) returned 1 [0065.497] FindNextFileW (in: hFindFile=0x51079e0, lpFindFileData=0x31e134 | out: lpFindFileData=0x31e134*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x85ab50b0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85adb210, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85adb210, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="ro", cAlternateFileName="")) returned 1 [0065.497] FindNextFileW (in: hFindFile=0x51079e0, lpFindFileData=0x31e134 | out: lpFindFileData=0x31e134*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x85adb210, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85adb210, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85adb210, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="ru", cAlternateFileName="")) returned 1 [0065.497] FindNextFileW (in: hFindFile=0x51079e0, lpFindFileData=0x31e134 | out: lpFindFileData=0x31e134*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x85adb210, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85adb210, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85adb210, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="sk", cAlternateFileName="")) returned 1 [0065.497] FindNextFileW (in: hFindFile=0x51079e0, lpFindFileData=0x31e134 | out: lpFindFileData=0x31e134*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x85adb210, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85adb210, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85adb210, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="sl", cAlternateFileName="")) returned 1 [0065.497] FindNextFileW (in: hFindFile=0x51079e0, lpFindFileData=0x31e134 | out: lpFindFileData=0x31e134*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x85b01370, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85b01370, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85b01370, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="sr", cAlternateFileName="")) returned 1 [0065.497] FindNextFileW (in: hFindFile=0x51079e0, lpFindFileData=0x31e134 | out: lpFindFileData=0x31e134*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x85b01370, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85b01370, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85b01370, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="sv", cAlternateFileName="")) returned 1 [0065.497] FindNextFileW (in: hFindFile=0x51079e0, lpFindFileData=0x31e134 | out: lpFindFileData=0x31e134*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x85b01370, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85b01370, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85b01370, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="th", cAlternateFileName="")) returned 1 [0065.498] FindNextFileW (in: hFindFile=0x51079e0, lpFindFileData=0x31e134 | out: lpFindFileData=0x31e134*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x85b01370, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85b274d0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85b274d0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="tr", cAlternateFileName="")) returned 1 [0065.498] FindNextFileW (in: hFindFile=0x51079e0, lpFindFileData=0x31e134 | out: lpFindFileData=0x31e134*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x85b274d0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85b274d0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85b274d0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="uk", cAlternateFileName="")) returned 1 [0065.498] FindNextFileW (in: hFindFile=0x51079e0, lpFindFileData=0x31e134 | out: lpFindFileData=0x31e134*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x85b274d0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85b274d0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85b274d0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="vi", cAlternateFileName="")) returned 1 [0065.498] FindNextFileW (in: hFindFile=0x51079e0, lpFindFileData=0x31e134 | out: lpFindFileData=0x31e134*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x85b274d0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85b274d0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85b274d0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="zh_CN", cAlternateFileName="")) returned 1 [0065.498] FindNextFileW (in: hFindFile=0x51079e0, lpFindFileData=0x31e134 | out: lpFindFileData=0x31e134*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x85b4d630, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85b4d630, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85b4d630, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="zh_TW", cAlternateFileName="")) returned 1 [0065.498] FindNextFileW (in: hFindFile=0x51079e0, lpFindFileData=0x31e134 | out: lpFindFileData=0x31e134*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x85b4d630, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85b4d630, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85b4d630, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="zh_TW", cAlternateFileName="")) returned 0 [0065.499] FindClose (in: hFindFile=0x51079e0 | out: hFindFile=0x51079e0) returned 1 [0065.499] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales", nBufferLength=0x105, lpBuffer=0x31df04, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales", lpFilePart=0x0) returned 0x86 [0065.499] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\", nBufferLength=0x105, lpBuffer=0x31ded8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\", lpFilePart=0x0) returned 0x87 [0065.499] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\*", lpFindFileData=0x31e124 | out: lpFindFileData=0x31e124*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x857953d0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85b4d630, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85b4d630, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x51079e0 [0065.500] FindNextFileW (in: hFindFile=0x51079e0, lpFindFileData=0x31e134 | out: lpFindFileData=0x31e134*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x857953d0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85b4d630, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85b4d630, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0065.500] FindNextFileW (in: hFindFile=0x51079e0, lpFindFileData=0x31e134 | out: lpFindFileData=0x31e134*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x857953d0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x857953d0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x857953d0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="ar", cAlternateFileName="")) returned 1 [0065.500] FindNextFileW (in: hFindFile=0x51079e0, lpFindFileData=0x31e134 | out: lpFindFileData=0x31e134*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x857bb530, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x857bb530, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x857bb530, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="bg", cAlternateFileName="")) returned 1 [0065.500] FindNextFileW (in: hFindFile=0x51079e0, lpFindFileData=0x31e134 | out: lpFindFileData=0x31e134*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x857bb530, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x857bb530, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x857bb530, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="ca", cAlternateFileName="")) returned 1 [0065.501] FindNextFileW (in: hFindFile=0x51079e0, lpFindFileData=0x31e134 | out: lpFindFileData=0x31e134*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x857bb530, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x857bb530, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x857bb530, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="cs", cAlternateFileName="")) returned 1 [0065.501] FindNextFileW (in: hFindFile=0x51079e0, lpFindFileData=0x31e134 | out: lpFindFileData=0x31e134*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x857bb530, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x857bb530, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x857bb530, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="da", cAlternateFileName="")) returned 1 [0065.501] FindNextFileW (in: hFindFile=0x51079e0, lpFindFileData=0x31e134 | out: lpFindFileData=0x31e134*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x857bb530, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x857bb530, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x857bb530, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="de", cAlternateFileName="")) returned 1 [0065.501] FindNextFileW (in: hFindFile=0x51079e0, lpFindFileData=0x31e134 | out: lpFindFileData=0x31e134*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x857bb530, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x857bb530, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x857bb530, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="el", cAlternateFileName="")) returned 1 [0065.501] FindNextFileW (in: hFindFile=0x51079e0, lpFindFileData=0x31e134 | out: lpFindFileData=0x31e134*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x857e1690, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x859aa710, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x859aa710, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="en_GB", cAlternateFileName="")) returned 1 [0065.501] FindNextFileW (in: hFindFile=0x51079e0, lpFindFileData=0x31e134 | out: lpFindFileData=0x31e134*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x859aa710, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x859aa710, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x859aa710, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="en_US", cAlternateFileName="")) returned 1 [0065.501] FindNextFileW (in: hFindFile=0x51079e0, lpFindFileData=0x31e134 | out: lpFindFileData=0x31e134*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x859aa710, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x859aa710, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x859aa710, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="es", cAlternateFileName="")) returned 1 [0065.501] FindNextFileW (in: hFindFile=0x51079e0, lpFindFileData=0x31e134 | out: lpFindFileData=0x31e134*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x859d0870, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x859d0870, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x859d0870, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="es_419", cAlternateFileName="")) returned 1 [0065.502] FindNextFileW (in: hFindFile=0x51079e0, lpFindFileData=0x31e134 | out: lpFindFileData=0x31e134*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x859d0870, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x859d0870, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x859d0870, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="et", cAlternateFileName="")) returned 1 [0065.502] FindNextFileW (in: hFindFile=0x51079e0, lpFindFileData=0x31e134 | out: lpFindFileData=0x31e134*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x859d0870, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x859d0870, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x859d0870, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="fi", cAlternateFileName="")) returned 1 [0065.502] FindNextFileW (in: hFindFile=0x51079e0, lpFindFileData=0x31e134 | out: lpFindFileData=0x31e134*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x859f69d0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x859f69d0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x859f69d0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="fil", cAlternateFileName="")) returned 1 [0065.502] FindNextFileW (in: hFindFile=0x51079e0, lpFindFileData=0x31e134 | out: lpFindFileData=0x31e134*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x859f69d0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x859f69d0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x859f69d0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="fr", cAlternateFileName="")) returned 1 [0065.502] FindNextFileW (in: hFindFile=0x51079e0, lpFindFileData=0x31e134 | out: lpFindFileData=0x31e134*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x859f69d0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x859f69d0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x859f69d0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="he", cAlternateFileName="")) returned 1 [0065.502] FindNextFileW (in: hFindFile=0x51079e0, lpFindFileData=0x31e134 | out: lpFindFileData=0x31e134*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x85a1cb30, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85a1cb30, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85a1cb30, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="hi", cAlternateFileName="")) returned 1 [0065.502] FindNextFileW (in: hFindFile=0x51079e0, lpFindFileData=0x31e134 | out: lpFindFileData=0x31e134*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x85a1cb30, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85a1cb30, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85a1cb30, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="hu", cAlternateFileName="")) returned 1 [0065.502] FindNextFileW (in: hFindFile=0x51079e0, lpFindFileData=0x31e134 | out: lpFindFileData=0x31e134*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x85a1cb30, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85a1cb30, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85a1cb30, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="id", cAlternateFileName="")) returned 1 [0065.502] FindNextFileW (in: hFindFile=0x51079e0, lpFindFileData=0x31e134 | out: lpFindFileData=0x31e134*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x85a1cb30, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85a42c90, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85a42c90, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="it", cAlternateFileName="")) returned 1 [0065.503] FindNextFileW (in: hFindFile=0x51079e0, lpFindFileData=0x31e134 | out: lpFindFileData=0x31e134*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x85a42c90, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85a42c90, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85a42c90, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="ja", cAlternateFileName="")) returned 1 [0065.503] FindNextFileW (in: hFindFile=0x51079e0, lpFindFileData=0x31e134 | out: lpFindFileData=0x31e134*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x85a42c90, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85a42c90, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85a42c90, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="ko", cAlternateFileName="")) returned 1 [0065.503] FindNextFileW (in: hFindFile=0x51079e0, lpFindFileData=0x31e134 | out: lpFindFileData=0x31e134*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x85a68df0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85a68df0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85a68df0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="lt", cAlternateFileName="")) returned 1 [0065.503] FindNextFileW (in: hFindFile=0x51079e0, lpFindFileData=0x31e134 | out: lpFindFileData=0x31e134*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x85a68df0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85a68df0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85a68df0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="lv", cAlternateFileName="")) returned 1 [0065.503] FindNextFileW (in: hFindFile=0x51079e0, lpFindFileData=0x31e134 | out: lpFindFileData=0x31e134*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x85a68df0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85a8ef50, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85a8ef50, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="ms", cAlternateFileName="")) returned 1 [0065.503] FindNextFileW (in: hFindFile=0x51079e0, lpFindFileData=0x31e134 | out: lpFindFileData=0x31e134*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x85a8ef50, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85a8ef50, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85a8ef50, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="nl", cAlternateFileName="")) returned 1 [0065.503] FindNextFileW (in: hFindFile=0x51079e0, lpFindFileData=0x31e134 | out: lpFindFileData=0x31e134*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x85a8ef50, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85a8ef50, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85a8ef50, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="no", cAlternateFileName="")) returned 1 [0065.503] FindNextFileW (in: hFindFile=0x51079e0, lpFindFileData=0x31e134 | out: lpFindFileData=0x31e134*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x85a8ef50, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85a8ef50, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85a8ef50, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="pl", cAlternateFileName="")) returned 1 [0065.504] FindNextFileW (in: hFindFile=0x51079e0, lpFindFileData=0x31e134 | out: lpFindFileData=0x31e134*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x85ab50b0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85ab50b0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85ab50b0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="pt_BR", cAlternateFileName="")) returned 1 [0065.504] FindNextFileW (in: hFindFile=0x51079e0, lpFindFileData=0x31e134 | out: lpFindFileData=0x31e134*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x85ab50b0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85ab50b0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85ab50b0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="pt_PT", cAlternateFileName="")) returned 1 [0065.504] FindNextFileW (in: hFindFile=0x51079e0, lpFindFileData=0x31e134 | out: lpFindFileData=0x31e134*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x85ab50b0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85adb210, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85adb210, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="ro", cAlternateFileName="")) returned 1 [0065.504] FindNextFileW (in: hFindFile=0x51079e0, lpFindFileData=0x31e134 | out: lpFindFileData=0x31e134*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x85adb210, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85adb210, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85adb210, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="ru", cAlternateFileName="")) returned 1 [0065.504] FindNextFileW (in: hFindFile=0x51079e0, lpFindFileData=0x31e134 | out: lpFindFileData=0x31e134*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x85adb210, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85adb210, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85adb210, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="sk", cAlternateFileName="")) returned 1 [0065.504] FindNextFileW (in: hFindFile=0x51079e0, lpFindFileData=0x31e134 | out: lpFindFileData=0x31e134*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x85adb210, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85adb210, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85adb210, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="sl", cAlternateFileName="")) returned 1 [0065.504] FindNextFileW (in: hFindFile=0x51079e0, lpFindFileData=0x31e134 | out: lpFindFileData=0x31e134*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x85b01370, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85b01370, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85b01370, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="sr", cAlternateFileName="")) returned 1 [0065.504] FindNextFileW (in: hFindFile=0x51079e0, lpFindFileData=0x31e134 | out: lpFindFileData=0x31e134*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x85b01370, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85b01370, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85b01370, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="sv", cAlternateFileName="")) returned 1 [0065.505] FindNextFileW (in: hFindFile=0x51079e0, lpFindFileData=0x31e134 | out: lpFindFileData=0x31e134*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x85b01370, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85b01370, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85b01370, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="th", cAlternateFileName="")) returned 1 [0065.505] FindNextFileW (in: hFindFile=0x51079e0, lpFindFileData=0x31e134 | out: lpFindFileData=0x31e134*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x85b01370, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85b274d0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85b274d0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="tr", cAlternateFileName="")) returned 1 [0065.505] FindNextFileW (in: hFindFile=0x51079e0, lpFindFileData=0x31e134 | out: lpFindFileData=0x31e134*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x85b274d0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85b274d0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85b274d0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="uk", cAlternateFileName="")) returned 1 [0065.505] FindNextFileW (in: hFindFile=0x51079e0, lpFindFileData=0x31e134 | out: lpFindFileData=0x31e134*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x85b274d0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85b274d0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85b274d0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="vi", cAlternateFileName="")) returned 1 [0065.505] FindNextFileW (in: hFindFile=0x51079e0, lpFindFileData=0x31e134 | out: lpFindFileData=0x31e134*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x85b274d0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85b274d0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85b274d0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="zh_CN", cAlternateFileName="")) returned 1 [0065.505] FindNextFileW (in: hFindFile=0x51079e0, lpFindFileData=0x31e134 | out: lpFindFileData=0x31e134*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x85b4d630, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85b4d630, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85b4d630, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="zh_TW", cAlternateFileName="")) returned 1 [0065.506] FindNextFileW (in: hFindFile=0x51079e0, lpFindFileData=0x31e134 | out: lpFindFileData=0x31e134*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0065.506] FindClose (in: hFindFile=0x51079e0 | out: hFindFile=0x51079e0) returned 1 [0065.506] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\ar", nBufferLength=0x105, lpBuffer=0x31de8c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\ar", lpFilePart=0x0) returned 0x89 [0065.506] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\ar\\", nBufferLength=0x105, lpBuffer=0x31de60, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\ar\\", lpFilePart=0x0) returned 0x8a [0065.506] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\ar\\*", lpFindFileData=0x31e0ac | out: lpFindFileData=0x31e0ac*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x857953d0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x857953d0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x857953d0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x51079e0 [0065.507] FindNextFileW (in: hFindFile=0x51079e0, lpFindFileData=0x31e0bc | out: lpFindFileData=0x31e0bc*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x857953d0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x857953d0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x857953d0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0065.507] FindNextFileW (in: hFindFile=0x51079e0, lpFindFileData=0x31e0bc | out: lpFindFileData=0x31e0bc*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x857953d0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x857953d0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85cca3f0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x101, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1 [0065.508] FindNextFileW (in: hFindFile=0x51079e0, lpFindFileData=0x31e0bc | out: lpFindFileData=0x31e0bc*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0065.508] FindClose (in: hFindFile=0x51079e0 | out: hFindFile=0x51079e0) returned 1 [0065.508] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\ar", nBufferLength=0x105, lpBuffer=0x31de8c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\ar", lpFilePart=0x0) returned 0x89 [0065.508] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\ar\\", nBufferLength=0x105, lpBuffer=0x31de60, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\ar\\", lpFilePart=0x0) returned 0x8a [0065.508] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\ar\\*", lpFindFileData=0x31e0ac | out: lpFindFileData=0x31e0ac*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x857953d0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x857953d0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x857953d0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x51079e0 [0065.508] FindNextFileW (in: hFindFile=0x51079e0, lpFindFileData=0x31e0bc | out: lpFindFileData=0x31e0bc*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x857953d0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x857953d0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x857953d0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0065.508] FindNextFileW (in: hFindFile=0x51079e0, lpFindFileData=0x31e0bc | out: lpFindFileData=0x31e0bc*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x857953d0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x857953d0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85cca3f0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x101, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1 [0065.508] FindNextFileW (in: hFindFile=0x51079e0, lpFindFileData=0x31e0bc | out: lpFindFileData=0x31e0bc*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x857953d0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x857953d0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85cca3f0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x101, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 0 [0065.508] FindClose (in: hFindFile=0x51079e0 | out: hFindFile=0x51079e0) returned 1 [0065.509] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\bg", nBufferLength=0x105, lpBuffer=0x31de8c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\bg", lpFilePart=0x0) returned 0x89 [0065.509] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\bg\\", nBufferLength=0x105, lpBuffer=0x31de60, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\bg\\", lpFilePart=0x0) returned 0x8a [0065.509] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\bg\\*", lpFindFileData=0x31e0ac | out: lpFindFileData=0x31e0ac*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x857bb530, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x857bb530, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x857bb530, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x51079e0 [0065.509] FindNextFileW (in: hFindFile=0x51079e0, lpFindFileData=0x31e0bc | out: lpFindFileData=0x31e0bc*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x857bb530, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x857bb530, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x857bb530, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0065.509] FindNextFileW (in: hFindFile=0x51079e0, lpFindFileData=0x31e0bc | out: lpFindFileData=0x31e0bc*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x857bb530, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x857bc4d0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85cca3f0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x110, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1 [0065.509] FindNextFileW (in: hFindFile=0x51079e0, lpFindFileData=0x31e0bc | out: lpFindFileData=0x31e0bc*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0065.509] FindClose (in: hFindFile=0x51079e0 | out: hFindFile=0x51079e0) returned 1 [0065.509] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\bg", nBufferLength=0x105, lpBuffer=0x31de8c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\bg", lpFilePart=0x0) returned 0x89 [0065.509] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\bg\\", nBufferLength=0x105, lpBuffer=0x31de60, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\bg\\", lpFilePart=0x0) returned 0x8a [0065.510] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\bg\\*", lpFindFileData=0x31e0ac | out: lpFindFileData=0x31e0ac*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x857bb530, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x857bb530, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x857bb530, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x51079e0 [0065.510] FindNextFileW (in: hFindFile=0x51079e0, lpFindFileData=0x31e0bc | out: lpFindFileData=0x31e0bc*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x857bb530, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x857bb530, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x857bb530, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0065.510] FindNextFileW (in: hFindFile=0x51079e0, lpFindFileData=0x31e0bc | out: lpFindFileData=0x31e0bc*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x857bb530, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x857bc4d0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85cca3f0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x110, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1 [0065.510] FindNextFileW (in: hFindFile=0x51079e0, lpFindFileData=0x31e0bc | out: lpFindFileData=0x31e0bc*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x857bb530, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x857bc4d0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85cca3f0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x110, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 0 [0065.510] FindClose (in: hFindFile=0x51079e0 | out: hFindFile=0x51079e0) returned 1 [0065.510] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\ca", nBufferLength=0x105, lpBuffer=0x31de8c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\ca", lpFilePart=0x0) returned 0x89 [0065.510] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\ca\\", nBufferLength=0x105, lpBuffer=0x31de60, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\ca\\", lpFilePart=0x0) returned 0x8a [0065.510] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\ca\\*", lpFindFileData=0x31e0ac | out: lpFindFileData=0x31e0ac*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x857bb530, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x857bb530, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x857bb530, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x51079e0 [0065.511] FindNextFileW (in: hFindFile=0x51079e0, lpFindFileData=0x31e0bc | out: lpFindFileData=0x31e0bc*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x857bb530, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x857bb530, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x857bb530, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0065.512] FindNextFileW (in: hFindFile=0x51079e0, lpFindFileData=0x31e0bc | out: lpFindFileData=0x31e0bc*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x857bb530, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x857bc4d0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85cca3f0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0xe0, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1 [0065.512] FindNextFileW (in: hFindFile=0x51079e0, lpFindFileData=0x31e0bc | out: lpFindFileData=0x31e0bc*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0065.512] FindClose (in: hFindFile=0x51079e0 | out: hFindFile=0x51079e0) returned 1 [0065.512] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\ca", nBufferLength=0x105, lpBuffer=0x31de8c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\ca", lpFilePart=0x0) returned 0x89 [0065.512] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\ca\\", nBufferLength=0x105, lpBuffer=0x31de60, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\ca\\", lpFilePart=0x0) returned 0x8a [0065.512] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\ca\\*", lpFindFileData=0x31e0ac | out: lpFindFileData=0x31e0ac*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x857bb530, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x857bb530, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x857bb530, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x51079e0 [0065.512] FindNextFileW (in: hFindFile=0x51079e0, lpFindFileData=0x31e0bc | out: lpFindFileData=0x31e0bc*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x857bb530, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x857bb530, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x857bb530, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0065.512] FindNextFileW (in: hFindFile=0x51079e0, lpFindFileData=0x31e0bc | out: lpFindFileData=0x31e0bc*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x857bb530, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x857bc4d0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85cca3f0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0xe0, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1 [0065.512] FindNextFileW (in: hFindFile=0x51079e0, lpFindFileData=0x31e0bc | out: lpFindFileData=0x31e0bc*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x857bb530, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x857bc4d0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85cca3f0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0xe0, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 0 [0065.513] FindClose (in: hFindFile=0x51079e0 | out: hFindFile=0x51079e0) returned 1 [0065.513] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\cs", nBufferLength=0x105, lpBuffer=0x31de8c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\cs", lpFilePart=0x0) returned 0x89 [0065.513] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\cs\\", nBufferLength=0x105, lpBuffer=0x31de60, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\cs\\", lpFilePart=0x0) returned 0x8a [0065.513] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\cs\\*", lpFindFileData=0x31e0ac | out: lpFindFileData=0x31e0ac*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x857bb530, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x857bb530, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x857bb530, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x51079e0 [0065.513] FindNextFileW (in: hFindFile=0x51079e0, lpFindFileData=0x31e0bc | out: lpFindFileData=0x31e0bc*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x857bb530, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x857bb530, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x857bb530, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0065.513] FindNextFileW (in: hFindFile=0x51079e0, lpFindFileData=0x31e0bc | out: lpFindFileData=0x31e0bc*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x857bb530, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x857bc4d0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85cca3f0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0xe0, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1 [0065.513] FindNextFileW (in: hFindFile=0x51079e0, lpFindFileData=0x31e0bc | out: lpFindFileData=0x31e0bc*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0065.513] FindClose (in: hFindFile=0x51079e0 | out: hFindFile=0x51079e0) returned 1 [0065.514] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\cs", nBufferLength=0x105, lpBuffer=0x31de8c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\cs", lpFilePart=0x0) returned 0x89 [0065.514] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\cs\\", nBufferLength=0x105, lpBuffer=0x31de60, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\cs\\", lpFilePart=0x0) returned 0x8a [0065.514] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\cs\\*", lpFindFileData=0x31e0ac | out: lpFindFileData=0x31e0ac*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x857bb530, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x857bb530, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x857bb530, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x51079e0 [0065.514] FindNextFileW (in: hFindFile=0x51079e0, lpFindFileData=0x31e0bc | out: lpFindFileData=0x31e0bc*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x857bb530, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x857bb530, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x857bb530, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0065.514] FindNextFileW (in: hFindFile=0x51079e0, lpFindFileData=0x31e0bc | out: lpFindFileData=0x31e0bc*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x857bb530, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x857bc4d0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85cca3f0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0xe0, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1 [0065.514] FindNextFileW (in: hFindFile=0x51079e0, lpFindFileData=0x31e0bc | out: lpFindFileData=0x31e0bc*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x857bb530, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x857bc4d0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85cca3f0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0xe0, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 0 [0065.514] FindClose (in: hFindFile=0x51079e0 | out: hFindFile=0x51079e0) returned 1 [0065.514] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\da", nBufferLength=0x105, lpBuffer=0x31de8c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\da", lpFilePart=0x0) returned 0x89 [0065.514] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\da\\", nBufferLength=0x105, lpBuffer=0x31de60, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\da\\", lpFilePart=0x0) returned 0x8a [0065.515] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\da\\*", lpFindFileData=0x31e0ac | out: lpFindFileData=0x31e0ac*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x857bb530, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x857bb530, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x857bb530, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x51079e0 [0065.515] FindNextFileW (in: hFindFile=0x51079e0, lpFindFileData=0x31e0bc | out: lpFindFileData=0x31e0bc*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x857bb530, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x857bb530, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x857bb530, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0065.515] FindNextFileW (in: hFindFile=0x51079e0, lpFindFileData=0x31e0bc | out: lpFindFileData=0x31e0bc*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x857bb530, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x857bc4d0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85cca3f0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0xe0, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1 [0065.516] FindNextFileW (in: hFindFile=0x51079e0, lpFindFileData=0x31e0bc | out: lpFindFileData=0x31e0bc*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0065.516] FindClose (in: hFindFile=0x51079e0 | out: hFindFile=0x51079e0) returned 1 [0065.516] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\da", nBufferLength=0x105, lpBuffer=0x31de8c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\da", lpFilePart=0x0) returned 0x89 [0065.516] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\da\\", nBufferLength=0x105, lpBuffer=0x31de60, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\da\\", lpFilePart=0x0) returned 0x8a [0065.516] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\da\\*", lpFindFileData=0x31e0ac | out: lpFindFileData=0x31e0ac*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x857bb530, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x857bb530, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x857bb530, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x51079e0 [0065.516] FindNextFileW (in: hFindFile=0x51079e0, lpFindFileData=0x31e0bc | out: lpFindFileData=0x31e0bc*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x857bb530, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x857bb530, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x857bb530, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0065.516] FindNextFileW (in: hFindFile=0x51079e0, lpFindFileData=0x31e0bc | out: lpFindFileData=0x31e0bc*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x857bb530, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x857bc4d0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85cca3f0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0xe0, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1 [0065.516] FindNextFileW (in: hFindFile=0x51079e0, lpFindFileData=0x31e0bc | out: lpFindFileData=0x31e0bc*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x857bb530, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x857bc4d0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85cca3f0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0xe0, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 0 [0065.516] FindClose (in: hFindFile=0x51079e0 | out: hFindFile=0x51079e0) returned 1 [0065.516] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\de", nBufferLength=0x105, lpBuffer=0x31de8c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\de", lpFilePart=0x0) returned 0x89 [0065.516] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\de\\", nBufferLength=0x105, lpBuffer=0x31de60, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\de\\", lpFilePart=0x0) returned 0x8a [0065.516] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\de\\*", lpFindFileData=0x31e0ac | out: lpFindFileData=0x31e0ac*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x857bb530, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x857bb530, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x857bb530, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x51079e0 [0065.517] FindNextFileW (in: hFindFile=0x51079e0, lpFindFileData=0x31e0bc | out: lpFindFileData=0x31e0bc*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x857bb530, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x857bb530, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x857bb530, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0065.517] FindNextFileW (in: hFindFile=0x51079e0, lpFindFileData=0x31e0bc | out: lpFindFileData=0x31e0bc*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x857bb530, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x857bc4d0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85cca3f0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0xea, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1 [0065.517] FindNextFileW (in: hFindFile=0x51079e0, lpFindFileData=0x31e0bc | out: lpFindFileData=0x31e0bc*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0065.517] FindClose (in: hFindFile=0x51079e0 | out: hFindFile=0x51079e0) returned 1 [0065.517] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\de", nBufferLength=0x105, lpBuffer=0x31de8c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\de", lpFilePart=0x0) returned 0x89 [0065.517] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\de\\", nBufferLength=0x105, lpBuffer=0x31de60, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\de\\", lpFilePart=0x0) returned 0x8a [0065.517] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\de\\*", lpFindFileData=0x31e0ac | out: lpFindFileData=0x31e0ac*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x857bb530, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x857bb530, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x857bb530, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x51079e0 [0065.517] FindNextFileW (in: hFindFile=0x51079e0, lpFindFileData=0x31e0bc | out: lpFindFileData=0x31e0bc*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x857bb530, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x857bb530, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x857bb530, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0065.517] FindNextFileW (in: hFindFile=0x51079e0, lpFindFileData=0x31e0bc | out: lpFindFileData=0x31e0bc*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x857bb530, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x857bc4d0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85cca3f0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0xea, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1 [0065.517] FindNextFileW (in: hFindFile=0x51079e0, lpFindFileData=0x31e0bc | out: lpFindFileData=0x31e0bc*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x857bb530, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x857bc4d0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85cca3f0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0xea, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 0 [0065.517] FindClose (in: hFindFile=0x51079e0 | out: hFindFile=0x51079e0) returned 1 [0065.517] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\el", nBufferLength=0x105, lpBuffer=0x31de8c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\el", lpFilePart=0x0) returned 0x89 [0065.517] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\el\\", nBufferLength=0x105, lpBuffer=0x31de60, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\el\\", lpFilePart=0x0) returned 0x8a [0065.518] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\el\\*", lpFindFileData=0x31e0ac | out: lpFindFileData=0x31e0ac*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x857bb530, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x857bb530, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x857bb530, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x51079e0 [0065.518] FindNextFileW (in: hFindFile=0x51079e0, lpFindFileData=0x31e0bc | out: lpFindFileData=0x31e0bc*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x857bb530, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x857bb530, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x857bb530, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0065.518] FindNextFileW (in: hFindFile=0x51079e0, lpFindFileData=0x31e0bc | out: lpFindFileData=0x31e0bc*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x857bb530, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x857e35d0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85cca3f0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x112, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1 [0065.519] FindNextFileW (in: hFindFile=0x51079e0, lpFindFileData=0x31e0bc | out: lpFindFileData=0x31e0bc*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0065.519] FindClose (in: hFindFile=0x51079e0 | out: hFindFile=0x51079e0) returned 1 [0065.519] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\el", nBufferLength=0x105, lpBuffer=0x31de8c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\el", lpFilePart=0x0) returned 0x89 [0065.519] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\el\\", nBufferLength=0x105, lpBuffer=0x31de60, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\el\\", lpFilePart=0x0) returned 0x8a [0065.519] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\el\\*", lpFindFileData=0x31e0ac | out: lpFindFileData=0x31e0ac*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x857bb530, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x857bb530, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x857bb530, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x51079e0 [0065.519] FindNextFileW (in: hFindFile=0x51079e0, lpFindFileData=0x31e0bc | out: lpFindFileData=0x31e0bc*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x857bb530, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x857bb530, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x857bb530, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0065.519] FindNextFileW (in: hFindFile=0x51079e0, lpFindFileData=0x31e0bc | out: lpFindFileData=0x31e0bc*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x857bb530, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x857e35d0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85cca3f0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x112, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1 [0065.519] FindNextFileW (in: hFindFile=0x51079e0, lpFindFileData=0x31e0bc | out: lpFindFileData=0x31e0bc*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x857bb530, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x857e35d0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85cca3f0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x112, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 0 [0065.519] FindClose (in: hFindFile=0x51079e0 | out: hFindFile=0x51079e0) returned 1 [0065.519] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\en_GB", nBufferLength=0x105, lpBuffer=0x31de8c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\en_GB", lpFilePart=0x0) returned 0x8c [0065.519] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\en_GB\\", nBufferLength=0x105, lpBuffer=0x31de60, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\en_GB\\", lpFilePart=0x0) returned 0x8d [0065.519] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\en_GB\\*", lpFindFileData=0x31e0ac | out: lpFindFileData=0x31e0ac*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x857e1690, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x859aa710, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x859aa710, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x51079e0 [0065.520] FindNextFileW (in: hFindFile=0x51079e0, lpFindFileData=0x31e0bc | out: lpFindFileData=0x31e0bc*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x857e1690, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x859aa710, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x859aa710, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0065.520] FindNextFileW (in: hFindFile=0x51079e0, lpFindFileData=0x31e0bc | out: lpFindFileData=0x31e0bc*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x859aa710, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x859abe80, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85cca3f0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0xd6, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1 [0065.520] FindNextFileW (in: hFindFile=0x51079e0, lpFindFileData=0x31e0bc | out: lpFindFileData=0x31e0bc*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0065.520] FindClose (in: hFindFile=0x51079e0 | out: hFindFile=0x51079e0) returned 1 [0065.521] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\en_GB", nBufferLength=0x105, lpBuffer=0x31de8c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\en_GB", lpFilePart=0x0) returned 0x8c [0065.521] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\en_GB\\", nBufferLength=0x105, lpBuffer=0x31de60, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\en_GB\\", lpFilePart=0x0) returned 0x8d [0065.521] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\en_GB\\*", lpFindFileData=0x31e0ac | out: lpFindFileData=0x31e0ac*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x857e1690, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x859aa710, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x859aa710, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x51079e0 [0065.521] FindNextFileW (in: hFindFile=0x51079e0, lpFindFileData=0x31e0bc | out: lpFindFileData=0x31e0bc*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x857e1690, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x859aa710, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x859aa710, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0065.521] FindNextFileW (in: hFindFile=0x51079e0, lpFindFileData=0x31e0bc | out: lpFindFileData=0x31e0bc*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x859aa710, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x859abe80, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85cca3f0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0xd6, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1 [0065.521] FindNextFileW (in: hFindFile=0x51079e0, lpFindFileData=0x31e0bc | out: lpFindFileData=0x31e0bc*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x859aa710, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x859abe80, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85cca3f0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0xd6, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 0 [0065.521] FindClose (in: hFindFile=0x51079e0 | out: hFindFile=0x51079e0) returned 1 [0065.521] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\en_US", nBufferLength=0x105, lpBuffer=0x31de8c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\en_US", lpFilePart=0x0) returned 0x8c [0065.521] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\en_US\\", nBufferLength=0x105, lpBuffer=0x31de60, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\en_US\\", lpFilePart=0x0) returned 0x8d [0065.521] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\en_US\\*", lpFindFileData=0x31e0ac | out: lpFindFileData=0x31e0ac*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x859aa710, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x859aa710, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x859aa710, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x51079e0 [0065.522] FindNextFileW (in: hFindFile=0x51079e0, lpFindFileData=0x31e0bc | out: lpFindFileData=0x31e0bc*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x859aa710, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x859aa710, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x859aa710, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0065.522] FindNextFileW (in: hFindFile=0x51079e0, lpFindFileData=0x31e0bc | out: lpFindFileData=0x31e0bc*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x859aa710, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x859abe80, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85cca3f0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0xd7, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1 [0065.522] FindNextFileW (in: hFindFile=0x51079e0, lpFindFileData=0x31e0bc | out: lpFindFileData=0x31e0bc*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0065.522] FindClose (in: hFindFile=0x51079e0 | out: hFindFile=0x51079e0) returned 1 [0065.522] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\en_US", nBufferLength=0x105, lpBuffer=0x31de8c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\en_US", lpFilePart=0x0) returned 0x8c [0065.522] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\en_US\\", nBufferLength=0x105, lpBuffer=0x31de60, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\en_US\\", lpFilePart=0x0) returned 0x8d [0065.523] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\en_US\\*", lpFindFileData=0x31e0ac | out: lpFindFileData=0x31e0ac*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x859aa710, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x859aa710, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x859aa710, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x51079e0 [0065.523] FindNextFileW (in: hFindFile=0x51079e0, lpFindFileData=0x31e0bc | out: lpFindFileData=0x31e0bc*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x859aa710, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x859aa710, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x859aa710, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0065.523] FindNextFileW (in: hFindFile=0x51079e0, lpFindFileData=0x31e0bc | out: lpFindFileData=0x31e0bc*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x859aa710, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x859abe80, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85cca3f0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0xd7, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1 [0065.523] FindNextFileW (in: hFindFile=0x51079e0, lpFindFileData=0x31e0bc | out: lpFindFileData=0x31e0bc*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x859aa710, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x859abe80, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85cca3f0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0xd7, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 0 [0065.523] FindClose (in: hFindFile=0x51079e0 | out: hFindFile=0x51079e0) returned 1 [0065.523] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\es", nBufferLength=0x105, lpBuffer=0x31de8c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\es", lpFilePart=0x0) returned 0x89 [0065.523] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\es\\", nBufferLength=0x105, lpBuffer=0x31de60, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\es\\", lpFilePart=0x0) returned 0x8a [0065.523] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\es\\*", lpFindFileData=0x31e0ac | out: lpFindFileData=0x31e0ac*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x859aa710, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x859aa710, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x859aa710, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x51079e0 [0065.524] FindNextFileW (in: hFindFile=0x51079e0, lpFindFileData=0x31e0bc | out: lpFindFileData=0x31e0bc*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x859aa710, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x859aa710, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x859aa710, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0065.524] FindNextFileW (in: hFindFile=0x51079e0, lpFindFileData=0x31e0bc | out: lpFindFileData=0x31e0bc*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x859aa710, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x859abe80, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85cca3f0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0xdf, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1 [0065.524] FindNextFileW (in: hFindFile=0x51079e0, lpFindFileData=0x31e0bc | out: lpFindFileData=0x31e0bc*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0065.524] FindClose (in: hFindFile=0x51079e0 | out: hFindFile=0x51079e0) returned 1 [0065.524] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\es", nBufferLength=0x105, lpBuffer=0x31de8c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\es", lpFilePart=0x0) returned 0x89 [0065.524] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\es\\", nBufferLength=0x105, lpBuffer=0x31de60, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\es\\", lpFilePart=0x0) returned 0x8a [0065.524] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\es\\*", lpFindFileData=0x31e0ac | out: lpFindFileData=0x31e0ac*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x859aa710, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x859aa710, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x859aa710, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x51079e0 [0065.524] FindNextFileW (in: hFindFile=0x51079e0, lpFindFileData=0x31e0bc | out: lpFindFileData=0x31e0bc*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x859aa710, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x859aa710, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x859aa710, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0065.525] FindNextFileW (in: hFindFile=0x51079e0, lpFindFileData=0x31e0bc | out: lpFindFileData=0x31e0bc*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x859aa710, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x859abe80, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85cca3f0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0xdf, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1 [0065.525] FindNextFileW (in: hFindFile=0x51079e0, lpFindFileData=0x31e0bc | out: lpFindFileData=0x31e0bc*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x859aa710, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x859abe80, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85cca3f0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0xdf, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 0 [0065.525] FindClose (in: hFindFile=0x51079e0 | out: hFindFile=0x51079e0) returned 1 [0065.525] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\es_419", nBufferLength=0x105, lpBuffer=0x31de8c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\es_419", lpFilePart=0x0) returned 0x8d [0065.525] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\es_419\\", nBufferLength=0x105, lpBuffer=0x31de60, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\es_419\\", lpFilePart=0x0) returned 0x8e [0065.525] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\es_419\\*", lpFindFileData=0x31e0ac | out: lpFindFileData=0x31e0ac*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x859d0870, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x859d0870, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x859d0870, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x51079e0 [0065.525] FindNextFileW (in: hFindFile=0x51079e0, lpFindFileData=0x31e0bc | out: lpFindFileData=0x31e0bc*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x859d0870, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x859d0870, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x859d0870, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0065.525] FindNextFileW (in: hFindFile=0x51079e0, lpFindFileData=0x31e0bc | out: lpFindFileData=0x31e0bc*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x859d0870, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x859d0870, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85cca3f0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0xdd, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1 [0065.525] FindNextFileW (in: hFindFile=0x51079e0, lpFindFileData=0x31e0bc | out: lpFindFileData=0x31e0bc*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0065.525] FindClose (in: hFindFile=0x51079e0 | out: hFindFile=0x51079e0) returned 1 [0065.525] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\es_419", nBufferLength=0x105, lpBuffer=0x31de8c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\es_419", lpFilePart=0x0) returned 0x8d [0065.525] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\es_419\\", nBufferLength=0x105, lpBuffer=0x31de60, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\es_419\\", lpFilePart=0x0) returned 0x8e [0065.525] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\es_419\\*", lpFindFileData=0x31e0ac | out: lpFindFileData=0x31e0ac*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x859d0870, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x859d0870, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x859d0870, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x51079e0 [0065.526] FindNextFileW (in: hFindFile=0x51079e0, lpFindFileData=0x31e0bc | out: lpFindFileData=0x31e0bc*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x859d0870, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x859d0870, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x859d0870, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0065.526] FindNextFileW (in: hFindFile=0x51079e0, lpFindFileData=0x31e0bc | out: lpFindFileData=0x31e0bc*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x859d0870, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x859d0870, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85cca3f0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0xdd, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1 [0065.526] FindNextFileW (in: hFindFile=0x51079e0, lpFindFileData=0x31e0bc | out: lpFindFileData=0x31e0bc*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x859d0870, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x859d0870, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85cca3f0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0xdd, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 0 [0065.526] FindClose (in: hFindFile=0x51079e0 | out: hFindFile=0x51079e0) returned 1 [0065.526] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\et", nBufferLength=0x105, lpBuffer=0x31de8c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\et", lpFilePart=0x0) returned 0x89 [0065.526] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\et\\", nBufferLength=0x105, lpBuffer=0x31de60, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\et\\", lpFilePart=0x0) returned 0x8a [0065.526] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\et\\*", lpFindFileData=0x31e0ac | out: lpFindFileData=0x31e0ac*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x859d0870, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x859d0870, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x859d0870, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x51079e0 [0065.527] FindNextFileW (in: hFindFile=0x51079e0, lpFindFileData=0x31e0bc | out: lpFindFileData=0x31e0bc*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x859d0870, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x859d0870, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x859d0870, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0065.527] FindNextFileW (in: hFindFile=0x51079e0, lpFindFileData=0x31e0bc | out: lpFindFileData=0x31e0bc*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x859d0870, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x859d0870, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85cca3f0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0xd6, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1 [0065.527] FindNextFileW (in: hFindFile=0x51079e0, lpFindFileData=0x31e0bc | out: lpFindFileData=0x31e0bc*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0065.527] FindClose (in: hFindFile=0x51079e0 | out: hFindFile=0x51079e0) returned 1 [0065.527] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\et", nBufferLength=0x105, lpBuffer=0x31de8c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\et", lpFilePart=0x0) returned 0x89 [0065.527] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\et\\", nBufferLength=0x105, lpBuffer=0x31de60, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\et\\", lpFilePart=0x0) returned 0x8a [0065.527] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\et\\*", lpFindFileData=0x31e0ac | out: lpFindFileData=0x31e0ac*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x859d0870, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x859d0870, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x859d0870, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x51079e0 [0065.527] FindNextFileW (in: hFindFile=0x51079e0, lpFindFileData=0x31e0bc | out: lpFindFileData=0x31e0bc*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x859d0870, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x859d0870, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x859d0870, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0065.527] FindNextFileW (in: hFindFile=0x51079e0, lpFindFileData=0x31e0bc | out: lpFindFileData=0x31e0bc*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x859d0870, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x859d0870, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85cca3f0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0xd6, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1 [0065.527] FindNextFileW (in: hFindFile=0x51079e0, lpFindFileData=0x31e0bc | out: lpFindFileData=0x31e0bc*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x859d0870, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x859d0870, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85cca3f0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0xd6, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 0 [0065.527] FindClose (in: hFindFile=0x51079e0 | out: hFindFile=0x51079e0) returned 1 [0065.527] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\fi", nBufferLength=0x105, lpBuffer=0x31de8c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\fi", lpFilePart=0x0) returned 0x89 [0065.527] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\fi\\", nBufferLength=0x105, lpBuffer=0x31de60, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\fi\\", lpFilePart=0x0) returned 0x8a [0065.527] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\fi\\*", lpFindFileData=0x31e0ac | out: lpFindFileData=0x31e0ac*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x859d0870, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x859d0870, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x859d0870, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x51079e0 [0065.528] FindNextFileW (in: hFindFile=0x51079e0, lpFindFileData=0x31e0bc | out: lpFindFileData=0x31e0bc*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x859d0870, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x859d0870, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x859d0870, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0065.528] FindNextFileW (in: hFindFile=0x51079e0, lpFindFileData=0x31e0bc | out: lpFindFileData=0x31e0bc*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x859d0870, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x859d0870, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85cca3f0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0xd9, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1 [0065.528] FindNextFileW (in: hFindFile=0x51079e0, lpFindFileData=0x31e0bc | out: lpFindFileData=0x31e0bc*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0065.528] FindClose (in: hFindFile=0x51079e0 | out: hFindFile=0x51079e0) returned 1 [0065.528] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\fi", nBufferLength=0x105, lpBuffer=0x31de8c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\fi", lpFilePart=0x0) returned 0x89 [0065.528] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\fi\\", nBufferLength=0x105, lpBuffer=0x31de60, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\fi\\", lpFilePart=0x0) returned 0x8a [0065.528] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\fi\\*", lpFindFileData=0x31e0ac | out: lpFindFileData=0x31e0ac*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x859d0870, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x859d0870, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x859d0870, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x51079e0 [0065.528] FindNextFileW (in: hFindFile=0x51079e0, lpFindFileData=0x31e0bc | out: lpFindFileData=0x31e0bc*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x859d0870, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x859d0870, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x859d0870, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0065.528] FindNextFileW (in: hFindFile=0x51079e0, lpFindFileData=0x31e0bc | out: lpFindFileData=0x31e0bc*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x859d0870, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x859d0870, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85cca3f0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0xd9, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1 [0065.528] FindNextFileW (in: hFindFile=0x51079e0, lpFindFileData=0x31e0bc | out: lpFindFileData=0x31e0bc*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x859d0870, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x859d0870, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85cca3f0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0xd9, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 0 [0065.528] FindClose (in: hFindFile=0x51079e0 | out: hFindFile=0x51079e0) returned 1 [0065.528] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\fil", nBufferLength=0x105, lpBuffer=0x31de8c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\fil", lpFilePart=0x0) returned 0x8a [0065.528] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\fil\\", nBufferLength=0x105, lpBuffer=0x31de60, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\fil\\", lpFilePart=0x0) returned 0x8b [0065.528] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\fil\\*", lpFindFileData=0x31e0ac | out: lpFindFileData=0x31e0ac*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x859f69d0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x859f69d0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x859f69d0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x51079e0 [0065.529] FindNextFileW (in: hFindFile=0x51079e0, lpFindFileData=0x31e0bc | out: lpFindFileData=0x31e0bc*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x859f69d0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x859f69d0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x859f69d0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0065.529] FindNextFileW (in: hFindFile=0x51079e0, lpFindFileData=0x31e0bc | out: lpFindFileData=0x31e0bc*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x859f69d0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x859f7970, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85cca3f0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0xe0, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1 [0065.529] FindNextFileW (in: hFindFile=0x51079e0, lpFindFileData=0x31e0bc | out: lpFindFileData=0x31e0bc*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0065.529] FindClose (in: hFindFile=0x51079e0 | out: hFindFile=0x51079e0) returned 1 [0065.529] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\fil", nBufferLength=0x105, lpBuffer=0x31de8c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\fil", lpFilePart=0x0) returned 0x8a [0065.529] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\fil\\", nBufferLength=0x105, lpBuffer=0x31de60, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\fil\\", lpFilePart=0x0) returned 0x8b [0065.529] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\fil\\*", lpFindFileData=0x31e0ac | out: lpFindFileData=0x31e0ac*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x859f69d0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x859f69d0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x859f69d0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x51079e0 [0065.530] FindNextFileW (in: hFindFile=0x51079e0, lpFindFileData=0x31e0bc | out: lpFindFileData=0x31e0bc*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x859f69d0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x859f69d0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x859f69d0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0065.530] FindNextFileW (in: hFindFile=0x51079e0, lpFindFileData=0x31e0bc | out: lpFindFileData=0x31e0bc*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x859f69d0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x859f7970, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85cca3f0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0xe0, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1 [0065.530] FindNextFileW (in: hFindFile=0x51079e0, lpFindFileData=0x31e0bc | out: lpFindFileData=0x31e0bc*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x859f69d0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x859f7970, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85cca3f0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0xe0, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 0 [0065.530] FindClose (in: hFindFile=0x51079e0 | out: hFindFile=0x51079e0) returned 1 [0065.530] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\fr", nBufferLength=0x105, lpBuffer=0x31de8c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\fr", lpFilePart=0x0) returned 0x89 [0065.530] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\fr\\", nBufferLength=0x105, lpBuffer=0x31de60, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\fr\\", lpFilePart=0x0) returned 0x8a [0065.530] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\fr\\*", lpFindFileData=0x31e0ac | out: lpFindFileData=0x31e0ac*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x859f69d0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x859f69d0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x859f69d0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x51079e0 [0065.530] FindNextFileW (in: hFindFile=0x51079e0, lpFindFileData=0x31e0bc | out: lpFindFileData=0x31e0bc*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x859f69d0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x859f69d0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x859f69d0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0065.530] FindNextFileW (in: hFindFile=0x51079e0, lpFindFileData=0x31e0bc | out: lpFindFileData=0x31e0bc*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x859f69d0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x859f7970, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85cca3f0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0xde, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1 [0065.530] FindNextFileW (in: hFindFile=0x51079e0, lpFindFileData=0x31e0bc | out: lpFindFileData=0x31e0bc*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0065.530] FindClose (in: hFindFile=0x51079e0 | out: hFindFile=0x51079e0) returned 1 [0065.530] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\fr", nBufferLength=0x105, lpBuffer=0x31de8c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\fr", lpFilePart=0x0) returned 0x89 [0065.530] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\fr\\", nBufferLength=0x105, lpBuffer=0x31de60, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\fr\\", lpFilePart=0x0) returned 0x8a [0065.531] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\fr\\*", lpFindFileData=0x31e0ac | out: lpFindFileData=0x31e0ac*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x859f69d0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x859f69d0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x859f69d0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x51079e0 [0065.531] FindNextFileW (in: hFindFile=0x51079e0, lpFindFileData=0x31e0bc | out: lpFindFileData=0x31e0bc*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x859f69d0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x859f69d0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x859f69d0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0065.531] FindNextFileW (in: hFindFile=0x51079e0, lpFindFileData=0x31e0bc | out: lpFindFileData=0x31e0bc*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x859f69d0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x859f7970, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85cca3f0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0xde, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1 [0065.531] FindNextFileW (in: hFindFile=0x51079e0, lpFindFileData=0x31e0bc | out: lpFindFileData=0x31e0bc*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x859f69d0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x859f7970, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85cca3f0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0xde, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 0 [0065.531] FindClose (in: hFindFile=0x51079e0 | out: hFindFile=0x51079e0) returned 1 [0065.531] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\he", nBufferLength=0x105, lpBuffer=0x31de8c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\he", lpFilePart=0x0) returned 0x89 [0065.531] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\he\\", nBufferLength=0x105, lpBuffer=0x31de60, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\he\\", lpFilePart=0x0) returned 0x8a [0065.531] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\he\\*", lpFindFileData=0x31e0ac | out: lpFindFileData=0x31e0ac*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x859f69d0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x859f69d0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x859f69d0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x51079e0 [0065.532] FindNextFileW (in: hFindFile=0x51079e0, lpFindFileData=0x31e0bc | out: lpFindFileData=0x31e0bc*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x859f69d0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x859f69d0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x859f69d0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0065.532] FindNextFileW (in: hFindFile=0x51079e0, lpFindFileData=0x31e0bc | out: lpFindFileData=0x31e0bc*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x859f69d0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x859f7970, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85cca3f0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0xe1, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1 [0065.532] FindNextFileW (in: hFindFile=0x51079e0, lpFindFileData=0x31e0bc | out: lpFindFileData=0x31e0bc*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0065.532] FindClose (in: hFindFile=0x51079e0 | out: hFindFile=0x51079e0) returned 1 [0065.532] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\he", nBufferLength=0x105, lpBuffer=0x31de8c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\he", lpFilePart=0x0) returned 0x89 [0065.532] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\he\\", nBufferLength=0x105, lpBuffer=0x31de60, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\he\\", lpFilePart=0x0) returned 0x8a [0065.532] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\he\\*", lpFindFileData=0x31e0ac | out: lpFindFileData=0x31e0ac*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x859f69d0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x859f69d0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x859f69d0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x51079e0 [0065.532] FindNextFileW (in: hFindFile=0x51079e0, lpFindFileData=0x31e0bc | out: lpFindFileData=0x31e0bc*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x859f69d0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x859f69d0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x859f69d0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0065.532] FindNextFileW (in: hFindFile=0x51079e0, lpFindFileData=0x31e0bc | out: lpFindFileData=0x31e0bc*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x859f69d0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x859f7970, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85cca3f0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0xe1, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1 [0065.532] FindNextFileW (in: hFindFile=0x51079e0, lpFindFileData=0x31e0bc | out: lpFindFileData=0x31e0bc*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x859f69d0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x859f7970, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85cca3f0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0xe1, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 0 [0065.532] FindClose (in: hFindFile=0x51079e0 | out: hFindFile=0x51079e0) returned 1 [0065.532] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\hi", nBufferLength=0x105, lpBuffer=0x31de8c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\hi", lpFilePart=0x0) returned 0x89 [0065.532] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\hi\\", nBufferLength=0x105, lpBuffer=0x31de60, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\hi\\", lpFilePart=0x0) returned 0x8a [0065.532] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\hi\\*", lpFindFileData=0x31e0ac | out: lpFindFileData=0x31e0ac*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x85a1cb30, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85a1cb30, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85a1cb30, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x51079e0 [0065.533] FindNextFileW (in: hFindFile=0x51079e0, lpFindFileData=0x31e0bc | out: lpFindFileData=0x31e0bc*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x85a1cb30, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85a1cb30, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85a1cb30, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0065.533] FindNextFileW (in: hFindFile=0x51079e0, lpFindFileData=0x31e0bc | out: lpFindFileData=0x31e0bc*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x85a1cb30, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85a1ea70, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85cca3f0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x123, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1 [0065.533] FindNextFileW (in: hFindFile=0x51079e0, lpFindFileData=0x31e0bc | out: lpFindFileData=0x31e0bc*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0065.533] FindClose (in: hFindFile=0x51079e0 | out: hFindFile=0x51079e0) returned 1 [0065.533] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\hi", nBufferLength=0x105, lpBuffer=0x31de8c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\hi", lpFilePart=0x0) returned 0x89 [0065.533] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\hi\\", nBufferLength=0x105, lpBuffer=0x31de60, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\hi\\", lpFilePart=0x0) returned 0x8a [0065.533] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\hi\\*", lpFindFileData=0x31e0ac | out: lpFindFileData=0x31e0ac*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x85a1cb30, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85a1cb30, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85a1cb30, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x51079e0 [0065.533] FindNextFileW (in: hFindFile=0x51079e0, lpFindFileData=0x31e0bc | out: lpFindFileData=0x31e0bc*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x85a1cb30, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85a1cb30, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85a1cb30, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0065.533] FindNextFileW (in: hFindFile=0x51079e0, lpFindFileData=0x31e0bc | out: lpFindFileData=0x31e0bc*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x85a1cb30, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85a1ea70, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85cca3f0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x123, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1 [0065.533] FindNextFileW (in: hFindFile=0x51079e0, lpFindFileData=0x31e0bc | out: lpFindFileData=0x31e0bc*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x85a1cb30, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85a1ea70, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85cca3f0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x123, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 0 [0065.533] FindClose (in: hFindFile=0x51079e0 | out: hFindFile=0x51079e0) returned 1 [0065.533] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\hu", nBufferLength=0x105, lpBuffer=0x31de8c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\hu", lpFilePart=0x0) returned 0x89 [0065.536] FindNextFileW (in: hFindFile=0x51079e0, lpFindFileData=0x31e0bc | out: lpFindFileData=0x31e0bc*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x85a1cb30, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85a1cb30, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85a1cb30, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0065.536] FindNextFileW (in: hFindFile=0x51079e0, lpFindFileData=0x31e0bc | out: lpFindFileData=0x31e0bc*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x85a1cb30, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85a1ea70, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85cca3f0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0xe6, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1 [0065.537] FindNextFileW (in: hFindFile=0x51079e0, lpFindFileData=0x31e0bc | out: lpFindFileData=0x31e0bc*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0065.537] FindNextFileW (in: hFindFile=0x51079e0, lpFindFileData=0x31e0bc | out: lpFindFileData=0x31e0bc*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x85a1cb30, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85a1cb30, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85a1cb30, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0065.537] FindNextFileW (in: hFindFile=0x51079e0, lpFindFileData=0x31e0bc | out: lpFindFileData=0x31e0bc*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x85a1cb30, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85a1ea70, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85cca3f0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0xe6, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1 [0065.537] FindNextFileW (in: hFindFile=0x51079e0, lpFindFileData=0x31e0bc | out: lpFindFileData=0x31e0bc*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x85a1cb30, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85a1ea70, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85cca3f0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0xe6, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 0 [0065.537] FindNextFileW (in: hFindFile=0x51079e0, lpFindFileData=0x31e0bc | out: lpFindFileData=0x31e0bc*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x85a1cb30, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85a1cb30, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85a1cb30, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0065.537] FindNextFileW (in: hFindFile=0x51079e0, lpFindFileData=0x31e0bc | out: lpFindFileData=0x31e0bc*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x85a1cb30, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85a1ea70, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85cca3f0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0xd0, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1 [0065.537] FindNextFileW (in: hFindFile=0x51079e0, lpFindFileData=0x31e0bc | out: lpFindFileData=0x31e0bc*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0065.537] FindNextFileW (in: hFindFile=0x51079e0, lpFindFileData=0x31e0bc | out: lpFindFileData=0x31e0bc*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x85a1cb30, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85a1cb30, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85a1cb30, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0065.537] FindNextFileW (in: hFindFile=0x51079e0, lpFindFileData=0x31e0bc | out: lpFindFileData=0x31e0bc*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x85a1cb30, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85a1ea70, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85cca3f0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0xd0, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1 [0065.538] FindNextFileW (in: hFindFile=0x51079e0, lpFindFileData=0x31e0bc | out: lpFindFileData=0x31e0bc*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x85a1cb30, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85a1ea70, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85cca3f0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0xd0, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 0 [0065.538] FindNextFileW (in: hFindFile=0x51079e0, lpFindFileData=0x31e0bc | out: lpFindFileData=0x31e0bc*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x85a1cb30, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85a42c90, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85a42c90, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0065.538] FindNextFileW (in: hFindFile=0x51079e0, lpFindFileData=0x31e0bc | out: lpFindFileData=0x31e0bc*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x85a42c90, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85a43460, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85cca3f0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0xdd, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1 [0065.538] FindNextFileW (in: hFindFile=0x51079e0, lpFindFileData=0x31e0bc | out: lpFindFileData=0x31e0bc*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0065.539] FindNextFileW (in: hFindFile=0x51079e0, lpFindFileData=0x31e0bc | out: lpFindFileData=0x31e0bc*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x85a1cb30, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85a42c90, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85a42c90, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0065.539] FindNextFileW (in: hFindFile=0x51079e0, lpFindFileData=0x31e0bc | out: lpFindFileData=0x31e0bc*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x85a42c90, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85a43460, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85cca3f0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0xdd, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1 [0065.539] FindNextFileW (in: hFindFile=0x51079e0, lpFindFileData=0x31e0bc | out: lpFindFileData=0x31e0bc*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x85a42c90, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85a43460, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85cca3f0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0xdd, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 0 [0065.539] FindNextFileW (in: hFindFile=0x51079e0, lpFindFileData=0x31e0bc | out: lpFindFileData=0x31e0bc*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x85a42c90, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85a42c90, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85a42c90, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0065.539] FindNextFileW (in: hFindFile=0x51079e0, lpFindFileData=0x31e0bc | out: lpFindFileData=0x31e0bc*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x85a42c90, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85a43460, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85cca3f0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0xec, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1 [0065.539] FindNextFileW (in: hFindFile=0x51079e0, lpFindFileData=0x31e0bc | out: lpFindFileData=0x31e0bc*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0065.539] FindNextFileW (in: hFindFile=0x51079e0, lpFindFileData=0x31e0bc | out: lpFindFileData=0x31e0bc*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x85a42c90, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85a42c90, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85a42c90, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0065.539] FindNextFileW (in: hFindFile=0x51079e0, lpFindFileData=0x31e0bc | out: lpFindFileData=0x31e0bc*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x85a42c90, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85a43460, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85cca3f0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0xec, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1 [0065.539] FindNextFileW (in: hFindFile=0x51079e0, lpFindFileData=0x31e0bc | out: lpFindFileData=0x31e0bc*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x85a42c90, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85a43460, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85cca3f0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0xec, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 0 [0065.540] FindNextFileW (in: hFindFile=0x51079e0, lpFindFileData=0x31e0bc | out: lpFindFileData=0x31e0bc*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x85a42c90, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85a42c90, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85a42c90, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0065.540] FindNextFileW (in: hFindFile=0x51079e0, lpFindFileData=0x31e0bc | out: lpFindFileData=0x31e0bc*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x85a42c90, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85a6a560, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85cca3f0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0xe6, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1 [0065.540] FindNextFileW (in: hFindFile=0x51079e0, lpFindFileData=0x31e0bc | out: lpFindFileData=0x31e0bc*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0065.540] FindNextFileW (in: hFindFile=0x51079e0, lpFindFileData=0x31e0bc | out: lpFindFileData=0x31e0bc*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x85a42c90, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85a42c90, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85a42c90, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0065.540] FindNextFileW (in: hFindFile=0x51079e0, lpFindFileData=0x31e0bc | out: lpFindFileData=0x31e0bc*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x85a42c90, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85a6a560, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85cca3f0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0xe6, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1 [0065.540] FindNextFileW (in: hFindFile=0x51079e0, lpFindFileData=0x31e0bc | out: lpFindFileData=0x31e0bc*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x85a42c90, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85a6a560, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85cca3f0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0xe6, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 0 [0065.541] FindNextFileW (in: hFindFile=0x51079e0, lpFindFileData=0x31e0bc | out: lpFindFileData=0x31e0bc*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x85a68df0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85a68df0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85a68df0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0065.541] FindNextFileW (in: hFindFile=0x51079e0, lpFindFileData=0x31e0bc | out: lpFindFileData=0x31e0bc*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x85a68df0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85a6a560, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85cca3f0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0xe4, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1 [0065.541] FindNextFileW (in: hFindFile=0x51079e0, lpFindFileData=0x31e0bc | out: lpFindFileData=0x31e0bc*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0065.541] FindNextFileW (in: hFindFile=0x51079e0, lpFindFileData=0x31e0bc | out: lpFindFileData=0x31e0bc*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x85a68df0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85a68df0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85a68df0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0065.541] FindNextFileW (in: hFindFile=0x51079e0, lpFindFileData=0x31e0bc | out: lpFindFileData=0x31e0bc*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x85a68df0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85a6a560, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85cca3f0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0xe4, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1 [0065.541] FindNextFileW (in: hFindFile=0x51079e0, lpFindFileData=0x31e0bc | out: lpFindFileData=0x31e0bc*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x85a68df0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85a6a560, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85cca3f0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0xe4, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 0 [0065.542] FindNextFileW (in: hFindFile=0x51079e0, lpFindFileData=0x31e0bc | out: lpFindFileData=0x31e0bc*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x85a68df0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85a68df0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85a68df0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0065.542] FindNextFileW (in: hFindFile=0x51079e0, lpFindFileData=0x31e0bc | out: lpFindFileData=0x31e0bc*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x85a68df0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85a6a560, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85cca3f0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0xe9, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1 [0065.542] FindNextFileW (in: hFindFile=0x51079e0, lpFindFileData=0x31e0bc | out: lpFindFileData=0x31e0bc*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0065.542] FindNextFileW (in: hFindFile=0x51079e0, lpFindFileData=0x31e0bc | out: lpFindFileData=0x31e0bc*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x85a68df0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85a68df0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85a68df0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0065.542] FindNextFileW (in: hFindFile=0x51079e0, lpFindFileData=0x31e0bc | out: lpFindFileData=0x31e0bc*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x85a68df0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85a6a560, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85cca3f0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0xe9, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1 [0065.542] FindNextFileW (in: hFindFile=0x51079e0, lpFindFileData=0x31e0bc | out: lpFindFileData=0x31e0bc*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x85a68df0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85a6a560, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85cca3f0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0xe9, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 0 [0065.542] FindNextFileW (in: hFindFile=0x51079e0, lpFindFileData=0x31e0bc | out: lpFindFileData=0x31e0bc*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x85a68df0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85a8ef50, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85a8ef50, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0065.542] FindNextFileW (in: hFindFile=0x51079e0, lpFindFileData=0x31e0bc | out: lpFindFileData=0x31e0bc*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x85a8ef50, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85a8ef50, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85cca3f0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0xd2, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1 [0065.542] FindNextFileW (in: hFindFile=0x51079e0, lpFindFileData=0x31e0bc | out: lpFindFileData=0x31e0bc*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0065.542] FindNextFileW (in: hFindFile=0x51079e0, lpFindFileData=0x31e0bc | out: lpFindFileData=0x31e0bc*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x85a68df0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85a8ef50, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85a8ef50, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0065.543] FindNextFileW (in: hFindFile=0x51079e0, lpFindFileData=0x31e0bc | out: lpFindFileData=0x31e0bc*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x85a8ef50, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85a8ef50, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85cca3f0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0xd2, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1 [0065.543] FindNextFileW (in: hFindFile=0x51079e0, lpFindFileData=0x31e0bc | out: lpFindFileData=0x31e0bc*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x85a8ef50, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85a8ef50, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85cca3f0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0xd2, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 0 [0065.543] FindNextFileW (in: hFindFile=0x51079e0, lpFindFileData=0x31e0bc | out: lpFindFileData=0x31e0bc*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x85a8ef50, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85a8ef50, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85a8ef50, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0065.543] FindNextFileW (in: hFindFile=0x51079e0, lpFindFileData=0x31e0bc | out: lpFindFileData=0x31e0bc*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x85a8ef50, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85a8ef50, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85cca3f0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0xdd, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1 [0065.543] FindNextFileW (in: hFindFile=0x51079e0, lpFindFileData=0x31e0bc | out: lpFindFileData=0x31e0bc*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0065.544] FindNextFileW (in: hFindFile=0x51079e0, lpFindFileData=0x31e0bc | out: lpFindFileData=0x31e0bc*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x85a8ef50, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85a8ef50, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85a8ef50, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0065.544] FindNextFileW (in: hFindFile=0x51079e0, lpFindFileData=0x31e0bc | out: lpFindFileData=0x31e0bc*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x85a8ef50, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85a8ef50, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85cca3f0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0xdd, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1 [0065.544] FindNextFileW (in: hFindFile=0x51079e0, lpFindFileData=0x31e0bc | out: lpFindFileData=0x31e0bc*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x85a8ef50, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85a8ef50, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85cca3f0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0xdd, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 0 [0065.544] FindNextFileW (in: hFindFile=0x51079e0, lpFindFileData=0x31e0bc | out: lpFindFileData=0x31e0bc*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x85a8ef50, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85a8ef50, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85a8ef50, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0065.544] FindNextFileW (in: hFindFile=0x51079e0, lpFindFileData=0x31e0bc | out: lpFindFileData=0x31e0bc*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x85a8ef50, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85a8ef50, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0xe4180700, ftLastWriteTime.dwHighDateTime=0x1d03f5e, nFileSizeHigh=0x0, nFileSizeLow=0xcb, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1 [0065.544] FindNextFileW (in: hFindFile=0x51079e0, lpFindFileData=0x31e0bc | out: lpFindFileData=0x31e0bc*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0065.544] FindNextFileW (in: hFindFile=0x51079e0, lpFindFileData=0x31e0bc | out: lpFindFileData=0x31e0bc*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x85a8ef50, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85a8ef50, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85a8ef50, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0065.544] FindNextFileW (in: hFindFile=0x51079e0, lpFindFileData=0x31e0bc | out: lpFindFileData=0x31e0bc*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x85a8ef50, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85a8ef50, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0xe4180700, ftLastWriteTime.dwHighDateTime=0x1d03f5e, nFileSizeHigh=0x0, nFileSizeLow=0xcb, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1 [0065.637] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\icon_128.png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\icon_128.png"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x178 [0065.640] GetFileType (hFile=0x178) returned 0x1 [0065.640] GetFileType (hFile=0x178) returned 0x1 [0065.640] GetFileSize (in: hFile=0x178, lpFileSizeHigh=0x31e448 | out: lpFileSizeHigh=0x31e448*=0x0) returned 0xc8d [0065.640] ReadFile (in: hFile=0x178, lpBuffer=0x27f3734, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x31e3f4, lpOverlapped=0x0 | out: lpBuffer=0x27f3734*, lpNumberOfBytesRead=0x31e3f4*=0xc8d, lpOverlapped=0x0) returned 1 [0065.656] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\icon_128.png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\icon_128.png"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x178 [0065.657] GetFileType (hFile=0x178) returned 0x1 [0065.657] GetFileType (hFile=0x178) returned 0x1 [0065.657] WriteFile (in: hFile=0x178, lpBuffer=0x28455a0*, nNumberOfBytesToWrite=0xc90, lpNumberOfBytesWritten=0x31e3bc, lpOverlapped=0x0 | out: lpBuffer=0x28455a0*, lpNumberOfBytesWritten=0x31e3bc*=0xc90, lpOverlapped=0x0) returned 1 [0065.658] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\icon_128.png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\icon_128.png"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\icon_128.png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\icon_128.png")) returned 1 [0065.659] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\icon_16.png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\icon_16.png"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x178 [0065.660] GetFileType (hFile=0x178) returned 0x1 [0065.660] GetFileType (hFile=0x178) returned 0x1 [0065.660] GetFileSize (in: hFile=0x178, lpFileSizeHigh=0x31e448 | out: lpFileSizeHigh=0x31e448*=0x0) returned 0x8f [0065.660] ReadFile (in: hFile=0x178, lpBuffer=0x2846a48, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x31e3f4, lpOverlapped=0x0 | out: lpBuffer=0x2846a48*, lpNumberOfBytesRead=0x31e3f4*=0x8f, lpOverlapped=0x0) returned 1 [0065.704] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\icon_16.png", nBufferLength=0x105, lpBuffer=0x31de38, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\icon_16.png", lpFilePart=0x0) returned 0x89 [0065.704] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e32c) returned 1 [0065.704] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\icon_16.png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\icon_16.png"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x178 [0065.705] GetFileType (hFile=0x178) returned 0x1 [0065.705] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e328) returned 1 [0065.705] GetFileType (hFile=0x178) returned 0x1 [0065.705] WriteFile (in: hFile=0x178, lpBuffer=0x26988a8*, nNumberOfBytesToWrite=0x90, lpNumberOfBytesWritten=0x31e3bc, lpOverlapped=0x0 | out: lpBuffer=0x26988a8*, lpNumberOfBytesWritten=0x31e3bc*=0x90, lpOverlapped=0x0) returned 1 [0065.706] CloseHandle (hObject=0x178) returned 1 [0065.706] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\icon_16.png", nBufferLength=0x105, lpBuffer=0x31df6c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\icon_16.png", lpFilePart=0x0) returned 0x89 [0065.706] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\icon_16.png", nBufferLength=0x105, lpBuffer=0x31df6c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\icon_16.png", lpFilePart=0x0) returned 0x89 [0065.706] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e3cc) returned 1 [0065.706] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\icon_16.png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\icon_16.png"), fInfoLevelId=0x0, lpFileInformation=0x31e448 | out: lpFileInformation=0x31e448*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x86702750, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86833250, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0xa9a61c0, ftLastWriteTime.dwHighDateTime=0x1d6eb7f, nFileSizeHigh=0x0, nFileSizeLow=0x90)) returned 1 [0065.706] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e3c8) returned 1 [0065.706] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\icon_16.png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\icon_16.png"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\icon_16.png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\icon_16.png")) returned 1 [0065.707] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\main.html", nBufferLength=0x105, lpBuffer=0x31de4c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\main.html", lpFilePart=0x0) returned 0x87 [0065.707] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e340) returned 1 [0065.707] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\main.html" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\main.html"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x178 [0065.707] GetFileType (hFile=0x178) returned 0x1 [0065.707] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e33c) returned 1 [0065.707] GetFileType (hFile=0x178) returned 0x1 [0065.707] GetFileSize (in: hFile=0x178, lpFileSizeHigh=0x31e448 | out: lpFileSizeHigh=0x31e448*=0x0) returned 0x5c [0065.707] ReadFile (in: hFile=0x178, lpBuffer=0x2699d0c, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x31e3f4, lpOverlapped=0x0 | out: lpBuffer=0x2699d0c*, lpNumberOfBytesRead=0x31e3f4*=0x5c, lpOverlapped=0x0) returned 1 [0065.708] CloseHandle (hObject=0x178) returned 1 [0065.721] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\main.html", nBufferLength=0x105, lpBuffer=0x31de38, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\main.html", lpFilePart=0x0) returned 0x87 [0065.721] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e32c) returned 1 [0065.721] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\main.html" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\main.html"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x178 [0065.722] GetFileType (hFile=0x178) returned 0x1 [0065.722] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e328) returned 1 [0065.722] GetFileType (hFile=0x178) returned 0x1 [0065.722] WriteFile (in: hFile=0x178, lpBuffer=0x26e7fd8*, nNumberOfBytesToWrite=0x60, lpNumberOfBytesWritten=0x31e3bc, lpOverlapped=0x0 | out: lpBuffer=0x26e7fd8*, lpNumberOfBytesWritten=0x31e3bc*=0x60, lpOverlapped=0x0) returned 1 [0065.728] CloseHandle (hObject=0x178) returned 1 [0065.728] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\main.html", nBufferLength=0x105, lpBuffer=0x31df6c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\main.html", lpFilePart=0x0) returned 0x87 [0065.728] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\main.html", nBufferLength=0x105, lpBuffer=0x31df6c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\main.html", lpFilePart=0x0) returned 0x87 [0065.728] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e3cc) returned 1 [0065.728] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\main.html" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\main.html"), fInfoLevelId=0x0, lpFileInformation=0x31e448 | out: lpFileInformation=0x31e448*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x86702750, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86702750, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0xa9f2480, ftLastWriteTime.dwHighDateTime=0x1d6eb7f, nFileSizeHigh=0x0, nFileSizeLow=0x60)) returned 1 [0065.729] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e3c8) returned 1 [0065.729] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\main.html" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\main.html"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\main.html" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\main.html")) returned 1 [0065.729] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e3fc) returned 1 [0065.729] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales", nBufferLength=0x105, lpBuffer=0x31df04, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales", lpFilePart=0x0) returned 0x86 [0065.729] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\", nBufferLength=0x105, lpBuffer=0x31ded8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\", lpFilePart=0x0) returned 0x87 [0065.729] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\*", lpFindFileData=0x31e124 | out: lpFindFileData=0x31e124*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x864c72b0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86702750, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86702750, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5107ae0 [0065.733] FindNextFileW (in: hFindFile=0x5107ae0, lpFindFileData=0x31e134 | out: lpFindFileData=0x31e134*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x864c72b0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86702750, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86702750, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0065.733] FindNextFileW (in: hFindFile=0x5107ae0, lpFindFileData=0x31e134 | out: lpFindFileData=0x31e134*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x864c72b0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x864c72b0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x864c72b0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="ar", cAlternateFileName="")) returned 1 [0065.733] FindNextFileW (in: hFindFile=0x5107ae0, lpFindFileData=0x31e134 | out: lpFindFileData=0x31e134*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x864c72b0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x864c72b0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x864c72b0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="bg", cAlternateFileName="")) returned 1 [0065.733] FindNextFileW (in: hFindFile=0x5107ae0, lpFindFileData=0x31e134 | out: lpFindFileData=0x31e134*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x864c72b0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x864c72b0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x864c72b0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="ca", cAlternateFileName="")) returned 1 [0065.734] FindNextFileW (in: hFindFile=0x5107ae0, lpFindFileData=0x31e134 | out: lpFindFileData=0x31e134*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x864c72b0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x864c72b0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x864c72b0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="cs", cAlternateFileName="")) returned 1 [0065.734] FindNextFileW (in: hFindFile=0x5107ae0, lpFindFileData=0x31e134 | out: lpFindFileData=0x31e134*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x864ed410, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x864ed410, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x864ed410, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="da", cAlternateFileName="")) returned 1 [0065.734] FindNextFileW (in: hFindFile=0x5107ae0, lpFindFileData=0x31e134 | out: lpFindFileData=0x31e134*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x864ed410, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x864ed410, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x864ed410, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="de", cAlternateFileName="")) returned 1 [0065.734] FindNextFileW (in: hFindFile=0x5107ae0, lpFindFileData=0x31e134 | out: lpFindFileData=0x31e134*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x864ed410, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x864ed410, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x864ed410, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="el", cAlternateFileName="")) returned 1 [0065.734] FindNextFileW (in: hFindFile=0x5107ae0, lpFindFileData=0x31e134 | out: lpFindFileData=0x31e134*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x864ed410, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x865396d0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x865396d0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="en_GB", cAlternateFileName="")) returned 1 [0065.734] FindNextFileW (in: hFindFile=0x5107ae0, lpFindFileData=0x31e134 | out: lpFindFileData=0x31e134*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x865396d0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x865396d0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x865396d0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="en_US", cAlternateFileName="")) returned 1 [0065.735] FindNextFileW (in: hFindFile=0x5107ae0, lpFindFileData=0x31e134 | out: lpFindFileData=0x31e134*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x865396d0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x865396d0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x865396d0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="es", cAlternateFileName="")) returned 1 [0065.735] FindNextFileW (in: hFindFile=0x5107ae0, lpFindFileData=0x31e134 | out: lpFindFileData=0x31e134*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x865396d0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x865396d0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x865396d0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="es_419", cAlternateFileName="")) returned 1 [0065.735] FindNextFileW (in: hFindFile=0x5107ae0, lpFindFileData=0x31e134 | out: lpFindFileData=0x31e134*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x8655f830, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x8655f830, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x8655f830, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="et", cAlternateFileName="")) returned 1 [0065.735] FindNextFileW (in: hFindFile=0x5107ae0, lpFindFileData=0x31e134 | out: lpFindFileData=0x31e134*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x8655f830, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x8655f830, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x8655f830, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="fi", cAlternateFileName="")) returned 1 [0065.735] FindNextFileW (in: hFindFile=0x5107ae0, lpFindFileData=0x31e134 | out: lpFindFileData=0x31e134*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x8655f830, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x8655f830, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x8655f830, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="fil", cAlternateFileName="")) returned 1 [0065.735] FindNextFileW (in: hFindFile=0x5107ae0, lpFindFileData=0x31e134 | out: lpFindFileData=0x31e134*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x8655f830, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x8655f830, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x8655f830, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="fr", cAlternateFileName="")) returned 1 [0065.735] FindNextFileW (in: hFindFile=0x5107ae0, lpFindFileData=0x31e134 | out: lpFindFileData=0x31e134*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x8655f830, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x8655f830, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x8655f830, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="he", cAlternateFileName="")) returned 1 [0065.736] FindNextFileW (in: hFindFile=0x5107ae0, lpFindFileData=0x31e134 | out: lpFindFileData=0x31e134*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x86585990, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86585990, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86585990, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="hi", cAlternateFileName="")) returned 1 [0065.736] FindNextFileW (in: hFindFile=0x5107ae0, lpFindFileData=0x31e134 | out: lpFindFileData=0x31e134*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x86585990, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86585990, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86585990, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="hu", cAlternateFileName="")) returned 1 [0065.736] FindNextFileW (in: hFindFile=0x5107ae0, lpFindFileData=0x31e134 | out: lpFindFileData=0x31e134*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x86585990, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86585990, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86585990, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="id", cAlternateFileName="")) returned 1 [0065.736] FindNextFileW (in: hFindFile=0x5107ae0, lpFindFileData=0x31e134 | out: lpFindFileData=0x31e134*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x86585990, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86585990, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86585990, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="it", cAlternateFileName="")) returned 1 [0065.736] FindNextFileW (in: hFindFile=0x5107ae0, lpFindFileData=0x31e134 | out: lpFindFileData=0x31e134*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x86585990, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86585990, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86585990, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="ja", cAlternateFileName="")) returned 1 [0065.736] FindNextFileW (in: hFindFile=0x5107ae0, lpFindFileData=0x31e134 | out: lpFindFileData=0x31e134*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x86585990, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86585990, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86585990, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="ko", cAlternateFileName="")) returned 1 [0065.736] FindNextFileW (in: hFindFile=0x5107ae0, lpFindFileData=0x31e134 | out: lpFindFileData=0x31e134*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x865abaf0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x865abaf0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x865abaf0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="lt", cAlternateFileName="")) returned 1 [0065.737] FindNextFileW (in: hFindFile=0x5107ae0, lpFindFileData=0x31e134 | out: lpFindFileData=0x31e134*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x865abaf0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x865abaf0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x865abaf0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="lv", cAlternateFileName="")) returned 1 [0065.737] FindNextFileW (in: hFindFile=0x5107ae0, lpFindFileData=0x31e134 | out: lpFindFileData=0x31e134*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x865d1c50, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x865d1c50, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x865d1c50, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="ms", cAlternateFileName="")) returned 1 [0065.737] FindNextFileW (in: hFindFile=0x5107ae0, lpFindFileData=0x31e134 | out: lpFindFileData=0x31e134*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x865d1c50, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x865f7db0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x865f7db0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="nl", cAlternateFileName="")) returned 1 [0065.737] FindNextFileW (in: hFindFile=0x5107ae0, lpFindFileData=0x31e134 | out: lpFindFileData=0x31e134*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x865f7db0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x8661df10, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x8661df10, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="no", cAlternateFileName="")) returned 1 [0065.737] FindNextFileW (in: hFindFile=0x5107ae0, lpFindFileData=0x31e134 | out: lpFindFileData=0x31e134*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x8661df10, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x8661df10, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x8661df10, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="pl", cAlternateFileName="")) returned 1 [0065.737] FindNextFileW (in: hFindFile=0x5107ae0, lpFindFileData=0x31e134 | out: lpFindFileData=0x31e134*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x86644070, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86644070, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86644070, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="pt_BR", cAlternateFileName="")) returned 1 [0065.737] FindNextFileW (in: hFindFile=0x5107ae0, lpFindFileData=0x31e134 | out: lpFindFileData=0x31e134*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x86644070, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86644070, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86644070, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="pt_PT", cAlternateFileName="")) returned 1 [0065.737] FindNextFileW (in: hFindFile=0x5107ae0, lpFindFileData=0x31e134 | out: lpFindFileData=0x31e134*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x8666a1d0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86690330, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86690330, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="ro", cAlternateFileName="")) returned 1 [0065.738] FindNextFileW (in: hFindFile=0x5107ae0, lpFindFileData=0x31e134 | out: lpFindFileData=0x31e134*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x86690330, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86690330, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86690330, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="ru", cAlternateFileName="")) returned 1 [0065.738] FindNextFileW (in: hFindFile=0x5107ae0, lpFindFileData=0x31e134 | out: lpFindFileData=0x31e134*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x866b6490, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x866b6490, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x866b6490, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="sk", cAlternateFileName="")) returned 1 [0065.738] FindNextFileW (in: hFindFile=0x5107ae0, lpFindFileData=0x31e134 | out: lpFindFileData=0x31e134*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x866b6490, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x866b6490, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x866b6490, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="sl", cAlternateFileName="")) returned 1 [0065.738] FindNextFileW (in: hFindFile=0x5107ae0, lpFindFileData=0x31e134 | out: lpFindFileData=0x31e134*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x866dc5f0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x866dc5f0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x866dc5f0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="sr", cAlternateFileName="")) returned 1 [0065.738] FindNextFileW (in: hFindFile=0x5107ae0, lpFindFileData=0x31e134 | out: lpFindFileData=0x31e134*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x866dc5f0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x866dc5f0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x866dc5f0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="sv", cAlternateFileName="")) returned 1 [0065.738] FindNextFileW (in: hFindFile=0x5107ae0, lpFindFileData=0x31e134 | out: lpFindFileData=0x31e134*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x866dc5f0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x866dc5f0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x866dc5f0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="th", cAlternateFileName="")) returned 1 [0065.738] FindNextFileW (in: hFindFile=0x5107ae0, lpFindFileData=0x31e134 | out: lpFindFileData=0x31e134*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x866dc5f0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x866dc5f0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x866dc5f0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="tr", cAlternateFileName="")) returned 1 [0065.739] FindNextFileW (in: hFindFile=0x5107ae0, lpFindFileData=0x31e134 | out: lpFindFileData=0x31e134*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x866dc5f0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86702750, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86702750, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="uk", cAlternateFileName="")) returned 1 [0065.739] FindNextFileW (in: hFindFile=0x5107ae0, lpFindFileData=0x31e134 | out: lpFindFileData=0x31e134*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x86702750, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86702750, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86702750, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="vi", cAlternateFileName="")) returned 1 [0065.739] FindNextFileW (in: hFindFile=0x5107ae0, lpFindFileData=0x31e134 | out: lpFindFileData=0x31e134*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x86702750, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86702750, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86702750, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="zh_CN", cAlternateFileName="")) returned 1 [0065.739] FindNextFileW (in: hFindFile=0x5107ae0, lpFindFileData=0x31e134 | out: lpFindFileData=0x31e134*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x86702750, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86702750, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86702750, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="zh_TW", cAlternateFileName="")) returned 1 [0065.739] FindNextFileW (in: hFindFile=0x5107ae0, lpFindFileData=0x31e134 | out: lpFindFileData=0x31e134*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x86702750, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86702750, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86702750, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="zh_TW", cAlternateFileName="")) returned 0 [0065.739] FindClose (in: hFindFile=0x5107ae0 | out: hFindFile=0x5107ae0) returned 1 [0065.740] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e3bc) returned 1 [0065.740] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e3c8) returned 1 [0065.740] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e3fc) returned 1 [0065.740] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales", nBufferLength=0x105, lpBuffer=0x31df04, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales", lpFilePart=0x0) returned 0x86 [0065.740] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\", nBufferLength=0x105, lpBuffer=0x31ded8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\", lpFilePart=0x0) returned 0x87 [0065.740] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\*", lpFindFileData=0x31e124 | out: lpFindFileData=0x31e124*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x864c72b0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86702750, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86702750, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5107ae0 [0065.741] FindNextFileW (in: hFindFile=0x5107ae0, lpFindFileData=0x31e134 | out: lpFindFileData=0x31e134*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x864c72b0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86702750, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86702750, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0065.741] FindNextFileW (in: hFindFile=0x5107ae0, lpFindFileData=0x31e134 | out: lpFindFileData=0x31e134*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x864c72b0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x864c72b0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x864c72b0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="ar", cAlternateFileName="")) returned 1 [0065.741] FindNextFileW (in: hFindFile=0x5107ae0, lpFindFileData=0x31e134 | out: lpFindFileData=0x31e134*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x864c72b0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x864c72b0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x864c72b0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="bg", cAlternateFileName="")) returned 1 [0065.741] FindNextFileW (in: hFindFile=0x5107ae0, lpFindFileData=0x31e134 | out: lpFindFileData=0x31e134*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x864c72b0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x864c72b0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x864c72b0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="ca", cAlternateFileName="")) returned 1 [0065.742] FindNextFileW (in: hFindFile=0x5107ae0, lpFindFileData=0x31e134 | out: lpFindFileData=0x31e134*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x864c72b0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x864c72b0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x864c72b0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="cs", cAlternateFileName="")) returned 1 [0065.742] FindNextFileW (in: hFindFile=0x5107ae0, lpFindFileData=0x31e134 | out: lpFindFileData=0x31e134*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x864ed410, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x864ed410, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x864ed410, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="da", cAlternateFileName="")) returned 1 [0065.742] FindNextFileW (in: hFindFile=0x5107ae0, lpFindFileData=0x31e134 | out: lpFindFileData=0x31e134*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x864ed410, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x864ed410, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x864ed410, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="de", cAlternateFileName="")) returned 1 [0065.742] FindNextFileW (in: hFindFile=0x5107ae0, lpFindFileData=0x31e134 | out: lpFindFileData=0x31e134*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x864ed410, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x864ed410, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x864ed410, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="el", cAlternateFileName="")) returned 1 [0065.742] FindNextFileW (in: hFindFile=0x5107ae0, lpFindFileData=0x31e134 | out: lpFindFileData=0x31e134*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x864ed410, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x865396d0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x865396d0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="en_GB", cAlternateFileName="")) returned 1 [0065.742] FindNextFileW (in: hFindFile=0x5107ae0, lpFindFileData=0x31e134 | out: lpFindFileData=0x31e134*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x865396d0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x865396d0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x865396d0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="en_US", cAlternateFileName="")) returned 1 [0065.742] FindNextFileW (in: hFindFile=0x5107ae0, lpFindFileData=0x31e134 | out: lpFindFileData=0x31e134*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x865396d0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x865396d0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x865396d0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="es", cAlternateFileName="")) returned 1 [0065.742] FindNextFileW (in: hFindFile=0x5107ae0, lpFindFileData=0x31e134 | out: lpFindFileData=0x31e134*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x865396d0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x865396d0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x865396d0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="es_419", cAlternateFileName="")) returned 1 [0065.742] FindNextFileW (in: hFindFile=0x5107ae0, lpFindFileData=0x31e134 | out: lpFindFileData=0x31e134*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x8655f830, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x8655f830, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x8655f830, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="et", cAlternateFileName="")) returned 1 [0065.743] FindNextFileW (in: hFindFile=0x5107ae0, lpFindFileData=0x31e134 | out: lpFindFileData=0x31e134*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x8655f830, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x8655f830, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x8655f830, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="fi", cAlternateFileName="")) returned 1 [0065.743] FindNextFileW (in: hFindFile=0x5107ae0, lpFindFileData=0x31e134 | out: lpFindFileData=0x31e134*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x8655f830, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x8655f830, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x8655f830, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="fil", cAlternateFileName="")) returned 1 [0065.743] FindNextFileW (in: hFindFile=0x5107ae0, lpFindFileData=0x31e134 | out: lpFindFileData=0x31e134*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x8655f830, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x8655f830, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x8655f830, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="fr", cAlternateFileName="")) returned 1 [0065.743] FindNextFileW (in: hFindFile=0x5107ae0, lpFindFileData=0x31e134 | out: lpFindFileData=0x31e134*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x8655f830, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x8655f830, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x8655f830, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="he", cAlternateFileName="")) returned 1 [0065.743] FindNextFileW (in: hFindFile=0x5107ae0, lpFindFileData=0x31e134 | out: lpFindFileData=0x31e134*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x86585990, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86585990, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86585990, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="hi", cAlternateFileName="")) returned 1 [0065.743] FindNextFileW (in: hFindFile=0x5107ae0, lpFindFileData=0x31e134 | out: lpFindFileData=0x31e134*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x86585990, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86585990, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86585990, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="hu", cAlternateFileName="")) returned 1 [0065.743] FindNextFileW (in: hFindFile=0x5107ae0, lpFindFileData=0x31e134 | out: lpFindFileData=0x31e134*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x86585990, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86585990, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86585990, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="id", cAlternateFileName="")) returned 1 [0065.743] FindNextFileW (in: hFindFile=0x5107ae0, lpFindFileData=0x31e134 | out: lpFindFileData=0x31e134*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x86585990, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86585990, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86585990, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="it", cAlternateFileName="")) returned 1 [0065.743] FindNextFileW (in: hFindFile=0x5107ae0, lpFindFileData=0x31e134 | out: lpFindFileData=0x31e134*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x86585990, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86585990, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86585990, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="ja", cAlternateFileName="")) returned 1 [0065.744] FindNextFileW (in: hFindFile=0x5107ae0, lpFindFileData=0x31e134 | out: lpFindFileData=0x31e134*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x86585990, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86585990, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86585990, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="ko", cAlternateFileName="")) returned 1 [0065.744] FindNextFileW (in: hFindFile=0x5107ae0, lpFindFileData=0x31e134 | out: lpFindFileData=0x31e134*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x865abaf0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x865abaf0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x865abaf0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="lt", cAlternateFileName="")) returned 1 [0065.744] FindNextFileW (in: hFindFile=0x5107ae0, lpFindFileData=0x31e134 | out: lpFindFileData=0x31e134*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x865abaf0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x865abaf0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x865abaf0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="lv", cAlternateFileName="")) returned 1 [0065.744] FindNextFileW (in: hFindFile=0x5107ae0, lpFindFileData=0x31e134 | out: lpFindFileData=0x31e134*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x865d1c50, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x865d1c50, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x865d1c50, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="ms", cAlternateFileName="")) returned 1 [0065.744] FindNextFileW (in: hFindFile=0x5107ae0, lpFindFileData=0x31e134 | out: lpFindFileData=0x31e134*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x865d1c50, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x865f7db0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x865f7db0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="nl", cAlternateFileName="")) returned 1 [0065.744] FindNextFileW (in: hFindFile=0x5107ae0, lpFindFileData=0x31e134 | out: lpFindFileData=0x31e134*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x865f7db0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x8661df10, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x8661df10, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="no", cAlternateFileName="")) returned 1 [0065.744] FindNextFileW (in: hFindFile=0x5107ae0, lpFindFileData=0x31e134 | out: lpFindFileData=0x31e134*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x8661df10, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x8661df10, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x8661df10, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="pl", cAlternateFileName="")) returned 1 [0065.744] FindNextFileW (in: hFindFile=0x5107ae0, lpFindFileData=0x31e134 | out: lpFindFileData=0x31e134*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x86644070, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86644070, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86644070, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="pt_BR", cAlternateFileName="")) returned 1 [0065.744] FindNextFileW (in: hFindFile=0x5107ae0, lpFindFileData=0x31e134 | out: lpFindFileData=0x31e134*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x86644070, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86644070, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86644070, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="pt_PT", cAlternateFileName="")) returned 1 [0065.745] FindNextFileW (in: hFindFile=0x5107ae0, lpFindFileData=0x31e134 | out: lpFindFileData=0x31e134*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x8666a1d0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86690330, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86690330, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="ro", cAlternateFileName="")) returned 1 [0065.745] FindNextFileW (in: hFindFile=0x5107ae0, lpFindFileData=0x31e134 | out: lpFindFileData=0x31e134*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x86690330, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86690330, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86690330, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="ru", cAlternateFileName="")) returned 1 [0065.745] FindNextFileW (in: hFindFile=0x5107ae0, lpFindFileData=0x31e134 | out: lpFindFileData=0x31e134*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x866b6490, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x866b6490, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x866b6490, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="sk", cAlternateFileName="")) returned 1 [0065.745] FindNextFileW (in: hFindFile=0x5107ae0, lpFindFileData=0x31e134 | out: lpFindFileData=0x31e134*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x866b6490, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x866b6490, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x866b6490, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="sl", cAlternateFileName="")) returned 1 [0065.745] FindNextFileW (in: hFindFile=0x5107ae0, lpFindFileData=0x31e134 | out: lpFindFileData=0x31e134*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x866dc5f0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x866dc5f0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x866dc5f0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="sr", cAlternateFileName="")) returned 1 [0065.745] FindNextFileW (in: hFindFile=0x5107ae0, lpFindFileData=0x31e134 | out: lpFindFileData=0x31e134*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x866dc5f0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x866dc5f0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x866dc5f0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="sv", cAlternateFileName="")) returned 1 [0065.745] FindNextFileW (in: hFindFile=0x5107ae0, lpFindFileData=0x31e134 | out: lpFindFileData=0x31e134*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x866dc5f0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x866dc5f0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x866dc5f0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="th", cAlternateFileName="")) returned 1 [0065.745] FindNextFileW (in: hFindFile=0x5107ae0, lpFindFileData=0x31e134 | out: lpFindFileData=0x31e134*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x866dc5f0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x866dc5f0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x866dc5f0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="tr", cAlternateFileName="")) returned 1 [0065.745] FindNextFileW (in: hFindFile=0x5107ae0, lpFindFileData=0x31e134 | out: lpFindFileData=0x31e134*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x866dc5f0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86702750, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86702750, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="uk", cAlternateFileName="")) returned 1 [0065.746] FindNextFileW (in: hFindFile=0x5107ae0, lpFindFileData=0x31e134 | out: lpFindFileData=0x31e134*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x86702750, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86702750, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86702750, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="vi", cAlternateFileName="")) returned 1 [0065.746] FindNextFileW (in: hFindFile=0x5107ae0, lpFindFileData=0x31e134 | out: lpFindFileData=0x31e134*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x86702750, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86702750, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86702750, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="zh_CN", cAlternateFileName="")) returned 1 [0065.746] FindNextFileW (in: hFindFile=0x5107ae0, lpFindFileData=0x31e134 | out: lpFindFileData=0x31e134*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x86702750, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86702750, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86702750, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="zh_TW", cAlternateFileName="")) returned 1 [0065.746] FindNextFileW (in: hFindFile=0x5107ae0, lpFindFileData=0x31e134 | out: lpFindFileData=0x31e134*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0065.746] FindClose (in: hFindFile=0x5107ae0 | out: hFindFile=0x5107ae0) returned 1 [0065.747] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e3bc) returned 1 [0065.747] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e3c8) returned 1 [0065.747] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e384) returned 1 [0065.747] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\ar", nBufferLength=0x105, lpBuffer=0x31de8c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\ar", lpFilePart=0x0) returned 0x89 [0065.747] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\ar\\", nBufferLength=0x105, lpBuffer=0x31de60, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\ar\\", lpFilePart=0x0) returned 0x8a [0065.747] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\ar\\*", lpFindFileData=0x31e0ac | out: lpFindFileData=0x31e0ac*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x864c72b0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x864c72b0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x864c72b0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5107ae0 [0065.748] FindNextFileW (in: hFindFile=0x5107ae0, lpFindFileData=0x31e0bc | out: lpFindFileData=0x31e0bc*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x864c72b0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x864c72b0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x864c72b0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0065.748] FindNextFileW (in: hFindFile=0x5107ae0, lpFindFileData=0x31e0bc | out: lpFindFileData=0x31e0bc*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x864c72b0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x864c72b0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86833250, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0xf6, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1 [0065.748] FindNextFileW (in: hFindFile=0x5107ae0, lpFindFileData=0x31e0bc | out: lpFindFileData=0x31e0bc*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0065.748] FindClose (in: hFindFile=0x5107ae0 | out: hFindFile=0x5107ae0) returned 1 [0065.748] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e344) returned 1 [0065.748] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e350) returned 1 [0065.748] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e384) returned 1 [0065.748] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\ar", nBufferLength=0x105, lpBuffer=0x31de8c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\ar", lpFilePart=0x0) returned 0x89 [0065.748] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\ar\\", nBufferLength=0x105, lpBuffer=0x31de60, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\ar\\", lpFilePart=0x0) returned 0x8a [0065.748] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\ar\\*", lpFindFileData=0x31e0ac | out: lpFindFileData=0x31e0ac*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x864c72b0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x864c72b0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x864c72b0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5107ae0 [0065.749] FindNextFileW (in: hFindFile=0x5107ae0, lpFindFileData=0x31e0bc | out: lpFindFileData=0x31e0bc*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x864c72b0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x864c72b0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x864c72b0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0065.749] FindNextFileW (in: hFindFile=0x5107ae0, lpFindFileData=0x31e0bc | out: lpFindFileData=0x31e0bc*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x864c72b0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x864c72b0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86833250, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0xf6, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1 [0065.749] FindNextFileW (in: hFindFile=0x5107ae0, lpFindFileData=0x31e0bc | out: lpFindFileData=0x31e0bc*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x864c72b0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x864c72b0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86833250, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0xf6, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 0 [0065.749] FindClose (in: hFindFile=0x5107ae0 | out: hFindFile=0x5107ae0) returned 1 [0065.749] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e344) returned 1 [0065.749] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e350) returned 1 [0065.749] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e384) returned 1 [0065.749] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\bg", nBufferLength=0x105, lpBuffer=0x31de8c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\bg", lpFilePart=0x0) returned 0x89 [0065.749] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\bg\\", nBufferLength=0x105, lpBuffer=0x31de60, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\bg\\", lpFilePart=0x0) returned 0x8a [0065.749] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\bg\\*", lpFindFileData=0x31e0ac | out: lpFindFileData=0x31e0ac*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x864c72b0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x864c72b0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x864c72b0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5107ae0 [0065.750] FindNextFileW (in: hFindFile=0x5107ae0, lpFindFileData=0x31e0bc | out: lpFindFileData=0x31e0bc*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x864c72b0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x864c72b0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x864c72b0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0065.750] FindNextFileW (in: hFindFile=0x5107ae0, lpFindFileData=0x31e0bc | out: lpFindFileData=0x31e0bc*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x864c72b0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x864c72b0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86833250, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x108, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1 [0065.750] FindNextFileW (in: hFindFile=0x5107ae0, lpFindFileData=0x31e0bc | out: lpFindFileData=0x31e0bc*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0065.750] FindClose (in: hFindFile=0x5107ae0 | out: hFindFile=0x5107ae0) returned 1 [0065.750] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e344) returned 1 [0065.750] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e350) returned 1 [0065.750] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e384) returned 1 [0065.750] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\bg", nBufferLength=0x105, lpBuffer=0x31de8c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\bg", lpFilePart=0x0) returned 0x89 [0065.750] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\bg\\", nBufferLength=0x105, lpBuffer=0x31de60, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\bg\\", lpFilePart=0x0) returned 0x8a [0065.750] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\bg\\*", lpFindFileData=0x31e0ac | out: lpFindFileData=0x31e0ac*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x864c72b0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x864c72b0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x864c72b0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5107ae0 [0065.751] FindNextFileW (in: hFindFile=0x5107ae0, lpFindFileData=0x31e0bc | out: lpFindFileData=0x31e0bc*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x864c72b0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x864c72b0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x864c72b0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0065.751] FindNextFileW (in: hFindFile=0x5107ae0, lpFindFileData=0x31e0bc | out: lpFindFileData=0x31e0bc*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x864c72b0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x864c72b0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86833250, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x108, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1 [0065.751] FindNextFileW (in: hFindFile=0x5107ae0, lpFindFileData=0x31e0bc | out: lpFindFileData=0x31e0bc*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x864c72b0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x864c72b0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86833250, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x108, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 0 [0065.751] FindClose (in: hFindFile=0x5107ae0 | out: hFindFile=0x5107ae0) returned 1 [0065.751] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e344) returned 1 [0065.751] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e350) returned 1 [0065.751] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e384) returned 1 [0065.751] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\ca", nBufferLength=0x105, lpBuffer=0x31de8c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\ca", lpFilePart=0x0) returned 0x89 [0065.751] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\ca\\", nBufferLength=0x105, lpBuffer=0x31de60, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\ca\\", lpFilePart=0x0) returned 0x8a [0065.751] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\ca\\*", lpFindFileData=0x31e0ac | out: lpFindFileData=0x31e0ac*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x864c72b0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x864c72b0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x864c72b0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5107ae0 [0065.752] FindNextFileW (in: hFindFile=0x5107ae0, lpFindFileData=0x31e0bc | out: lpFindFileData=0x31e0bc*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x864c72b0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x864c72b0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x864c72b0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0065.752] FindNextFileW (in: hFindFile=0x5107ae0, lpFindFileData=0x31e0bc | out: lpFindFileData=0x31e0bc*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x864c72b0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x864c72b0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86833250, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0xcf, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1 [0065.753] FindNextFileW (in: hFindFile=0x5107ae0, lpFindFileData=0x31e0bc | out: lpFindFileData=0x31e0bc*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0065.753] FindClose (in: hFindFile=0x5107ae0 | out: hFindFile=0x5107ae0) returned 1 [0065.753] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e344) returned 1 [0065.753] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e350) returned 1 [0065.753] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e384) returned 1 [0065.753] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\ca", nBufferLength=0x105, lpBuffer=0x31de8c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\ca", lpFilePart=0x0) returned 0x89 [0065.753] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\ca\\", nBufferLength=0x105, lpBuffer=0x31de60, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\ca\\", lpFilePart=0x0) returned 0x8a [0065.753] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\ca\\*", lpFindFileData=0x31e0ac | out: lpFindFileData=0x31e0ac*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x864c72b0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x864c72b0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x864c72b0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5107ae0 [0065.753] FindNextFileW (in: hFindFile=0x5107ae0, lpFindFileData=0x31e0bc | out: lpFindFileData=0x31e0bc*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x864c72b0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x864c72b0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x864c72b0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0065.753] FindNextFileW (in: hFindFile=0x5107ae0, lpFindFileData=0x31e0bc | out: lpFindFileData=0x31e0bc*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x864c72b0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x864c72b0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86833250, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0xcf, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1 [0065.753] FindNextFileW (in: hFindFile=0x5107ae0, lpFindFileData=0x31e0bc | out: lpFindFileData=0x31e0bc*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x864c72b0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x864c72b0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86833250, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0xcf, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 0 [0065.754] FindClose (in: hFindFile=0x5107ae0 | out: hFindFile=0x5107ae0) returned 1 [0065.754] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e344) returned 1 [0065.754] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e350) returned 1 [0065.754] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e384) returned 1 [0065.754] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\cs", nBufferLength=0x105, lpBuffer=0x31de8c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\cs", lpFilePart=0x0) returned 0x89 [0065.754] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\cs\\", nBufferLength=0x105, lpBuffer=0x31de60, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\cs\\", lpFilePart=0x0) returned 0x8a [0065.754] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\cs\\*", lpFindFileData=0x31e0ac | out: lpFindFileData=0x31e0ac*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x864c72b0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x864c72b0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x864c72b0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5107ae0 [0065.754] FindNextFileW (in: hFindFile=0x5107ae0, lpFindFileData=0x31e0bc | out: lpFindFileData=0x31e0bc*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x864c72b0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x864c72b0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x864c72b0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0065.754] FindNextFileW (in: hFindFile=0x5107ae0, lpFindFileData=0x31e0bc | out: lpFindFileData=0x31e0bc*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x864c72b0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x864c72b0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86833250, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0xde, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1 [0065.755] FindNextFileW (in: hFindFile=0x5107ae0, lpFindFileData=0x31e0bc | out: lpFindFileData=0x31e0bc*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0065.755] FindClose (in: hFindFile=0x5107ae0 | out: hFindFile=0x5107ae0) returned 1 [0065.755] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e344) returned 1 [0065.755] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e350) returned 1 [0065.755] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e384) returned 1 [0065.755] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\cs", nBufferLength=0x105, lpBuffer=0x31de8c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\cs", lpFilePart=0x0) returned 0x89 [0065.755] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\cs\\", nBufferLength=0x105, lpBuffer=0x31de60, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\cs\\", lpFilePart=0x0) returned 0x8a [0065.755] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\cs\\*", lpFindFileData=0x31e0ac | out: lpFindFileData=0x31e0ac*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x864c72b0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x864c72b0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x864c72b0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5107ae0 [0065.755] FindNextFileW (in: hFindFile=0x5107ae0, lpFindFileData=0x31e0bc | out: lpFindFileData=0x31e0bc*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x864c72b0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x864c72b0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x864c72b0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0065.755] FindNextFileW (in: hFindFile=0x5107ae0, lpFindFileData=0x31e0bc | out: lpFindFileData=0x31e0bc*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x864c72b0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x864c72b0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86833250, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0xde, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1 [0065.755] FindNextFileW (in: hFindFile=0x5107ae0, lpFindFileData=0x31e0bc | out: lpFindFileData=0x31e0bc*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x864c72b0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x864c72b0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86833250, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0xde, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 0 [0065.756] FindClose (in: hFindFile=0x5107ae0 | out: hFindFile=0x5107ae0) returned 1 [0065.756] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e344) returned 1 [0065.756] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e350) returned 1 [0065.756] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e384) returned 1 [0065.756] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\da", nBufferLength=0x105, lpBuffer=0x31de8c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\da", lpFilePart=0x0) returned 0x89 [0065.756] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\da\\", nBufferLength=0x105, lpBuffer=0x31de60, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\da\\", lpFilePart=0x0) returned 0x8a [0065.756] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\da\\*", lpFindFileData=0x31e0ac | out: lpFindFileData=0x31e0ac*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x864ed410, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x864ed410, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x864ed410, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5107ae0 [0065.757] FindNextFileW (in: hFindFile=0x5107ae0, lpFindFileData=0x31e0bc | out: lpFindFileData=0x31e0bc*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x864ed410, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x864ed410, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x864ed410, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0065.757] FindNextFileW (in: hFindFile=0x5107ae0, lpFindFileData=0x31e0bc | out: lpFindFileData=0x31e0bc*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x864ed410, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x864ebca0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86833250, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0xd8, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1 [0065.757] FindNextFileW (in: hFindFile=0x5107ae0, lpFindFileData=0x31e0bc | out: lpFindFileData=0x31e0bc*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0065.757] FindClose (in: hFindFile=0x5107ae0 | out: hFindFile=0x5107ae0) returned 1 [0065.757] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e344) returned 1 [0065.757] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e350) returned 1 [0065.757] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e384) returned 1 [0065.757] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\da", nBufferLength=0x105, lpBuffer=0x31de8c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\da", lpFilePart=0x0) returned 0x89 [0065.757] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\da\\", nBufferLength=0x105, lpBuffer=0x31de60, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\da\\", lpFilePart=0x0) returned 0x8a [0065.757] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\da\\*", lpFindFileData=0x31e0ac | out: lpFindFileData=0x31e0ac*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x864ed410, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x864ed410, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x864ed410, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5107ae0 [0065.757] FindNextFileW (in: hFindFile=0x5107ae0, lpFindFileData=0x31e0bc | out: lpFindFileData=0x31e0bc*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x864ed410, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x864ed410, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x864ed410, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0065.758] FindNextFileW (in: hFindFile=0x5107ae0, lpFindFileData=0x31e0bc | out: lpFindFileData=0x31e0bc*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x864ed410, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x864ebca0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86833250, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0xd8, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1 [0065.758] FindNextFileW (in: hFindFile=0x5107ae0, lpFindFileData=0x31e0bc | out: lpFindFileData=0x31e0bc*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x864ed410, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x864ebca0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86833250, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0xd8, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 0 [0065.758] FindClose (in: hFindFile=0x5107ae0 | out: hFindFile=0x5107ae0) returned 1 [0065.758] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e344) returned 1 [0065.758] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e350) returned 1 [0065.758] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e384) returned 1 [0065.758] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\de", nBufferLength=0x105, lpBuffer=0x31de8c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\de", lpFilePart=0x0) returned 0x89 [0065.758] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\de\\", nBufferLength=0x105, lpBuffer=0x31de60, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\de\\", lpFilePart=0x0) returned 0x8a [0065.758] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\de\\*", lpFindFileData=0x31e0ac | out: lpFindFileData=0x31e0ac*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x864ed410, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x864ed410, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x864ed410, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5107ae0 [0065.758] FindNextFileW (in: hFindFile=0x5107ae0, lpFindFileData=0x31e0bc | out: lpFindFileData=0x31e0bc*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x864ed410, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x864ed410, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x864ed410, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0065.758] FindNextFileW (in: hFindFile=0x5107ae0, lpFindFileData=0x31e0bc | out: lpFindFileData=0x31e0bc*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x864ed410, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x864ebca0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86833250, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0xd9, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1 [0065.758] FindNextFileW (in: hFindFile=0x5107ae0, lpFindFileData=0x31e0bc | out: lpFindFileData=0x31e0bc*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0065.759] FindClose (in: hFindFile=0x5107ae0 | out: hFindFile=0x5107ae0) returned 1 [0065.759] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e344) returned 1 [0065.759] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e350) returned 1 [0065.759] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e384) returned 1 [0065.759] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\de", nBufferLength=0x105, lpBuffer=0x31de8c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\de", lpFilePart=0x0) returned 0x89 [0065.759] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\de\\", nBufferLength=0x105, lpBuffer=0x31de60, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\de\\", lpFilePart=0x0) returned 0x8a [0065.759] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\de\\*", lpFindFileData=0x31e0ac | out: lpFindFileData=0x31e0ac*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x864ed410, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x864ed410, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x864ed410, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5107ae0 [0065.759] FindNextFileW (in: hFindFile=0x5107ae0, lpFindFileData=0x31e0bc | out: lpFindFileData=0x31e0bc*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x864ed410, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x864ed410, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x864ed410, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0065.759] FindNextFileW (in: hFindFile=0x5107ae0, lpFindFileData=0x31e0bc | out: lpFindFileData=0x31e0bc*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x864ed410, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x864ebca0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86833250, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0xd9, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1 [0065.759] FindNextFileW (in: hFindFile=0x5107ae0, lpFindFileData=0x31e0bc | out: lpFindFileData=0x31e0bc*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x864ed410, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x864ebca0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86833250, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0xd9, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 0 [0065.759] FindClose (in: hFindFile=0x5107ae0 | out: hFindFile=0x5107ae0) returned 1 [0065.759] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e344) returned 1 [0065.759] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e350) returned 1 [0065.759] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e384) returned 1 [0065.759] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\el", nBufferLength=0x105, lpBuffer=0x31de8c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\el", lpFilePart=0x0) returned 0x89 [0065.759] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\el\\", nBufferLength=0x105, lpBuffer=0x31de60, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\el\\", lpFilePart=0x0) returned 0x8a [0065.760] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\el\\*", lpFindFileData=0x31e0ac | out: lpFindFileData=0x31e0ac*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x864ed410, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x864ed410, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x864ed410, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5107ae0 [0065.760] FindNextFileW (in: hFindFile=0x5107ae0, lpFindFileData=0x31e0bc | out: lpFindFileData=0x31e0bc*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x864ed410, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x864ed410, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x864ed410, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0065.760] FindNextFileW (in: hFindFile=0x5107ae0, lpFindFileData=0x31e0bc | out: lpFindFileData=0x31e0bc*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x864ed410, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x864ebca0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86833250, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x104, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1 [0065.761] FindNextFileW (in: hFindFile=0x5107ae0, lpFindFileData=0x31e0bc | out: lpFindFileData=0x31e0bc*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0065.761] FindClose (in: hFindFile=0x5107ae0 | out: hFindFile=0x5107ae0) returned 1 [0065.761] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e344) returned 1 [0065.761] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e350) returned 1 [0065.761] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e384) returned 1 [0065.761] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\el", nBufferLength=0x105, lpBuffer=0x31de8c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\el", lpFilePart=0x0) returned 0x89 [0065.761] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\el\\", nBufferLength=0x105, lpBuffer=0x31de60, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\el\\", lpFilePart=0x0) returned 0x8a [0065.761] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\el\\*", lpFindFileData=0x31e0ac | out: lpFindFileData=0x31e0ac*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x864ed410, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x864ed410, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x864ed410, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5107ae0 [0065.761] FindNextFileW (in: hFindFile=0x5107ae0, lpFindFileData=0x31e0bc | out: lpFindFileData=0x31e0bc*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x864ed410, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x864ed410, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x864ed410, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0065.761] FindNextFileW (in: hFindFile=0x5107ae0, lpFindFileData=0x31e0bc | out: lpFindFileData=0x31e0bc*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x864ed410, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x864ebca0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86833250, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x104, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1 [0065.761] FindNextFileW (in: hFindFile=0x5107ae0, lpFindFileData=0x31e0bc | out: lpFindFileData=0x31e0bc*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x864ed410, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x864ebca0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86833250, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x104, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 0 [0065.761] FindClose (in: hFindFile=0x5107ae0 | out: hFindFile=0x5107ae0) returned 1 [0065.761] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e344) returned 1 [0065.761] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e350) returned 1 [0065.761] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e384) returned 1 [0065.761] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\en_GB", nBufferLength=0x105, lpBuffer=0x31de8c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\en_GB", lpFilePart=0x0) returned 0x8c [0065.761] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\en_GB\\", nBufferLength=0x105, lpBuffer=0x31de60, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\en_GB\\", lpFilePart=0x0) returned 0x8d [0065.762] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\en_GB\\*", lpFindFileData=0x31e0ac | out: lpFindFileData=0x31e0ac*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x864ed410, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x865396d0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x865396d0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5107ae0 [0065.762] FindNextFileW (in: hFindFile=0x5107ae0, lpFindFileData=0x31e0bc | out: lpFindFileData=0x31e0bc*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x864ed410, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x865396d0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x865396d0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0065.762] FindNextFileW (in: hFindFile=0x5107ae0, lpFindFileData=0x31e0bc | out: lpFindFileData=0x31e0bc*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x865396d0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86539ea0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86833250, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0xd0, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1 [0065.762] FindNextFileW (in: hFindFile=0x5107ae0, lpFindFileData=0x31e0bc | out: lpFindFileData=0x31e0bc*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0065.762] FindClose (in: hFindFile=0x5107ae0 | out: hFindFile=0x5107ae0) returned 1 [0065.762] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e344) returned 1 [0065.762] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e350) returned 1 [0065.762] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e384) returned 1 [0065.762] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\en_GB", nBufferLength=0x105, lpBuffer=0x31de8c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\en_GB", lpFilePart=0x0) returned 0x8c [0065.762] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\en_GB\\", nBufferLength=0x105, lpBuffer=0x31de60, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\en_GB\\", lpFilePart=0x0) returned 0x8d [0065.762] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\en_GB\\*", lpFindFileData=0x31e0ac | out: lpFindFileData=0x31e0ac*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x864ed410, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x865396d0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x865396d0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5107ae0 [0065.762] FindNextFileW (in: hFindFile=0x5107ae0, lpFindFileData=0x31e0bc | out: lpFindFileData=0x31e0bc*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x864ed410, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x865396d0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x865396d0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0065.762] FindNextFileW (in: hFindFile=0x5107ae0, lpFindFileData=0x31e0bc | out: lpFindFileData=0x31e0bc*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x865396d0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86539ea0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86833250, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0xd0, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1 [0065.762] FindNextFileW (in: hFindFile=0x5107ae0, lpFindFileData=0x31e0bc | out: lpFindFileData=0x31e0bc*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x865396d0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86539ea0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86833250, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0xd0, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 0 [0065.762] FindClose (in: hFindFile=0x5107ae0 | out: hFindFile=0x5107ae0) returned 1 [0065.762] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e344) returned 1 [0065.763] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e350) returned 1 [0065.763] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e384) returned 1 [0065.763] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\en_US", nBufferLength=0x105, lpBuffer=0x31de8c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\en_US", lpFilePart=0x0) returned 0x8c [0065.763] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\en_US\\", nBufferLength=0x105, lpBuffer=0x31de60, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\en_US\\", lpFilePart=0x0) returned 0x8d [0065.763] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\en_US\\*", lpFindFileData=0x31e0ac | out: lpFindFileData=0x31e0ac*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x865396d0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x865396d0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x865396d0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5107ae0 [0065.764] FindNextFileW (in: hFindFile=0x5107ae0, lpFindFileData=0x31e0bc | out: lpFindFileData=0x31e0bc*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x865396d0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x865396d0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x865396d0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0065.764] FindNextFileW (in: hFindFile=0x5107ae0, lpFindFileData=0x31e0bc | out: lpFindFileData=0x31e0bc*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x865396d0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86539ea0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86833250, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0xd1, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1 [0065.764] FindNextFileW (in: hFindFile=0x5107ae0, lpFindFileData=0x31e0bc | out: lpFindFileData=0x31e0bc*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0065.764] FindClose (in: hFindFile=0x5107ae0 | out: hFindFile=0x5107ae0) returned 1 [0065.764] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e344) returned 1 [0065.764] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e350) returned 1 [0065.764] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e384) returned 1 [0065.764] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\en_US", nBufferLength=0x105, lpBuffer=0x31de8c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\en_US", lpFilePart=0x0) returned 0x8c [0065.764] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\en_US\\", nBufferLength=0x105, lpBuffer=0x31de60, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\en_US\\", lpFilePart=0x0) returned 0x8d [0065.764] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\en_US\\*", lpFindFileData=0x31e0ac | out: lpFindFileData=0x31e0ac*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x865396d0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x865396d0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x865396d0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5107ae0 [0065.764] FindNextFileW (in: hFindFile=0x5107ae0, lpFindFileData=0x31e0bc | out: lpFindFileData=0x31e0bc*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x865396d0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x865396d0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x865396d0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0065.764] FindNextFileW (in: hFindFile=0x5107ae0, lpFindFileData=0x31e0bc | out: lpFindFileData=0x31e0bc*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x865396d0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86539ea0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86833250, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0xd1, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1 [0065.764] FindNextFileW (in: hFindFile=0x5107ae0, lpFindFileData=0x31e0bc | out: lpFindFileData=0x31e0bc*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x865396d0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86539ea0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86833250, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0xd1, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 0 [0065.764] FindClose (in: hFindFile=0x5107ae0 | out: hFindFile=0x5107ae0) returned 1 [0065.764] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e344) returned 1 [0065.764] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e350) returned 1 [0065.764] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e384) returned 1 [0065.764] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\es", nBufferLength=0x105, lpBuffer=0x31de8c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\es", lpFilePart=0x0) returned 0x89 [0065.765] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\es\\", nBufferLength=0x105, lpBuffer=0x31de60, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\es\\", lpFilePart=0x0) returned 0x8a [0065.765] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\es\\*", lpFindFileData=0x31e0ac | out: lpFindFileData=0x31e0ac*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x865396d0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x865396d0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x865396d0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5107ae0 [0065.765] FindNextFileW (in: hFindFile=0x5107ae0, lpFindFileData=0x31e0bc | out: lpFindFileData=0x31e0bc*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x865396d0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x865396d0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x865396d0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0065.765] FindNextFileW (in: hFindFile=0x5107ae0, lpFindFileData=0x31e0bc | out: lpFindFileData=0x31e0bc*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x865396d0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86539ea0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86833250, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0xce, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1 [0065.765] FindNextFileW (in: hFindFile=0x5107ae0, lpFindFileData=0x31e0bc | out: lpFindFileData=0x31e0bc*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0065.766] FindClose (in: hFindFile=0x5107ae0 | out: hFindFile=0x5107ae0) returned 1 [0065.766] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e344) returned 1 [0065.766] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e350) returned 1 [0065.766] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e384) returned 1 [0065.766] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\es", nBufferLength=0x105, lpBuffer=0x31de8c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\es", lpFilePart=0x0) returned 0x89 [0065.766] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\es\\", nBufferLength=0x105, lpBuffer=0x31de60, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\es\\", lpFilePart=0x0) returned 0x8a [0065.766] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\es\\*", lpFindFileData=0x31e0ac | out: lpFindFileData=0x31e0ac*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x865396d0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x865396d0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x865396d0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5107ae0 [0065.766] FindNextFileW (in: hFindFile=0x5107ae0, lpFindFileData=0x31e0bc | out: lpFindFileData=0x31e0bc*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x865396d0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x865396d0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x865396d0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0065.766] FindNextFileW (in: hFindFile=0x5107ae0, lpFindFileData=0x31e0bc | out: lpFindFileData=0x31e0bc*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x865396d0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86539ea0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86833250, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0xce, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1 [0065.766] FindNextFileW (in: hFindFile=0x5107ae0, lpFindFileData=0x31e0bc | out: lpFindFileData=0x31e0bc*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x865396d0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86539ea0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86833250, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0xce, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 0 [0065.766] FindClose (in: hFindFile=0x5107ae0 | out: hFindFile=0x5107ae0) returned 1 [0065.766] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e344) returned 1 [0065.766] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e350) returned 1 [0065.766] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e384) returned 1 [0065.766] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\es_419", nBufferLength=0x105, lpBuffer=0x31de8c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\es_419", lpFilePart=0x0) returned 0x8d [0065.766] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\es_419\\", nBufferLength=0x105, lpBuffer=0x31de60, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\es_419\\", lpFilePart=0x0) returned 0x8e [0065.766] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\es_419\\*", lpFindFileData=0x31e0ac | out: lpFindFileData=0x31e0ac*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x865396d0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x865396d0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x865396d0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5107ae0 [0065.767] FindNextFileW (in: hFindFile=0x5107ae0, lpFindFileData=0x31e0bc | out: lpFindFileData=0x31e0bc*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x865396d0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x865396d0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x865396d0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0065.767] FindNextFileW (in: hFindFile=0x5107ae0, lpFindFileData=0x31e0bc | out: lpFindFileData=0x31e0bc*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x865396d0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86539ea0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86833250, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0xce, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1 [0065.767] FindNextFileW (in: hFindFile=0x5107ae0, lpFindFileData=0x31e0bc | out: lpFindFileData=0x31e0bc*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0065.767] FindClose (in: hFindFile=0x5107ae0 | out: hFindFile=0x5107ae0) returned 1 [0065.767] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e344) returned 1 [0065.767] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e350) returned 1 [0065.767] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e384) returned 1 [0065.767] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\es_419", nBufferLength=0x105, lpBuffer=0x31de8c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\es_419", lpFilePart=0x0) returned 0x8d [0065.767] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\es_419\\", nBufferLength=0x105, lpBuffer=0x31de60, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\es_419\\", lpFilePart=0x0) returned 0x8e [0065.767] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\es_419\\*", lpFindFileData=0x31e0ac | out: lpFindFileData=0x31e0ac*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x865396d0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x865396d0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x865396d0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5107ae0 [0065.767] FindNextFileW (in: hFindFile=0x5107ae0, lpFindFileData=0x31e0bc | out: lpFindFileData=0x31e0bc*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x865396d0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x865396d0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x865396d0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0065.767] FindNextFileW (in: hFindFile=0x5107ae0, lpFindFileData=0x31e0bc | out: lpFindFileData=0x31e0bc*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x865396d0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86539ea0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86833250, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0xce, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1 [0065.767] FindNextFileW (in: hFindFile=0x5107ae0, lpFindFileData=0x31e0bc | out: lpFindFileData=0x31e0bc*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x865396d0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86539ea0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86833250, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0xce, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 0 [0065.767] FindClose (in: hFindFile=0x5107ae0 | out: hFindFile=0x5107ae0) returned 1 [0065.767] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e344) returned 1 [0065.767] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e350) returned 1 [0065.767] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e384) returned 1 [0065.767] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\et", nBufferLength=0x105, lpBuffer=0x31de8c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\et", lpFilePart=0x0) returned 0x89 [0065.767] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\et\\", nBufferLength=0x105, lpBuffer=0x31de60, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\et\\", lpFilePart=0x0) returned 0x8a [0065.768] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\et\\*", lpFindFileData=0x31e0ac | out: lpFindFileData=0x31e0ac*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x8655f830, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x8655f830, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x8655f830, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5107ae0 [0065.768] FindNextFileW (in: hFindFile=0x5107ae0, lpFindFileData=0x31e0bc | out: lpFindFileData=0x31e0bc*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x8655f830, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x8655f830, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x8655f830, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0065.768] FindNextFileW (in: hFindFile=0x5107ae0, lpFindFileData=0x31e0bc | out: lpFindFileData=0x31e0bc*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x8655f830, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x8655e890, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86833250, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0xd8, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1 [0065.768] FindNextFileW (in: hFindFile=0x5107ae0, lpFindFileData=0x31e0bc | out: lpFindFileData=0x31e0bc*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0065.768] FindClose (in: hFindFile=0x5107ae0 | out: hFindFile=0x5107ae0) returned 1 [0065.769] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e344) returned 1 [0065.769] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e350) returned 1 [0065.769] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e384) returned 1 [0065.769] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\et", nBufferLength=0x105, lpBuffer=0x31de8c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\et", lpFilePart=0x0) returned 0x89 [0065.769] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\et\\", nBufferLength=0x105, lpBuffer=0x31de60, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\et\\", lpFilePart=0x0) returned 0x8a [0065.769] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\et\\*", lpFindFileData=0x31e0ac | out: lpFindFileData=0x31e0ac*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x8655f830, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x8655f830, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x8655f830, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5107ae0 [0065.769] FindNextFileW (in: hFindFile=0x5107ae0, lpFindFileData=0x31e0bc | out: lpFindFileData=0x31e0bc*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x8655f830, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x8655f830, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x8655f830, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0065.769] FindNextFileW (in: hFindFile=0x5107ae0, lpFindFileData=0x31e0bc | out: lpFindFileData=0x31e0bc*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x8655f830, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x8655e890, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86833250, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0xd8, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1 [0065.769] FindNextFileW (in: hFindFile=0x5107ae0, lpFindFileData=0x31e0bc | out: lpFindFileData=0x31e0bc*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x8655f830, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x8655e890, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86833250, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0xd8, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 0 [0065.769] FindClose (in: hFindFile=0x5107ae0 | out: hFindFile=0x5107ae0) returned 1 [0065.769] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e344) returned 1 [0065.769] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e350) returned 1 [0065.769] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e384) returned 1 [0065.769] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\fi", nBufferLength=0x105, lpBuffer=0x31de8c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\fi", lpFilePart=0x0) returned 0x89 [0065.769] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\fi\\", nBufferLength=0x105, lpBuffer=0x31de60, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\fi\\", lpFilePart=0x0) returned 0x8a [0065.769] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\fi\\*", lpFindFileData=0x31e0ac | out: lpFindFileData=0x31e0ac*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x8655f830, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x8655f830, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x8655f830, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5107ae0 [0065.769] FindNextFileW (in: hFindFile=0x5107ae0, lpFindFileData=0x31e0bc | out: lpFindFileData=0x31e0bc*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x8655f830, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x8655f830, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x8655f830, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0065.770] FindNextFileW (in: hFindFile=0x5107ae0, lpFindFileData=0x31e0bc | out: lpFindFileData=0x31e0bc*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x8655f830, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x8655e890, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86833250, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0xd8, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1 [0065.770] FindNextFileW (in: hFindFile=0x5107ae0, lpFindFileData=0x31e0bc | out: lpFindFileData=0x31e0bc*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0065.770] FindClose (in: hFindFile=0x5107ae0 | out: hFindFile=0x5107ae0) returned 1 [0065.770] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e344) returned 1 [0065.770] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e350) returned 1 [0065.770] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e384) returned 1 [0065.770] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\fi", nBufferLength=0x105, lpBuffer=0x31de8c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\fi", lpFilePart=0x0) returned 0x89 [0065.770] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\fi\\", nBufferLength=0x105, lpBuffer=0x31de60, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\fi\\", lpFilePart=0x0) returned 0x8a [0065.770] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\fi\\*", lpFindFileData=0x31e0ac | out: lpFindFileData=0x31e0ac*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x8655f830, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x8655f830, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x8655f830, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5107ae0 [0065.770] FindNextFileW (in: hFindFile=0x5107ae0, lpFindFileData=0x31e0bc | out: lpFindFileData=0x31e0bc*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x8655f830, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x8655f830, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x8655f830, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0065.770] FindNextFileW (in: hFindFile=0x5107ae0, lpFindFileData=0x31e0bc | out: lpFindFileData=0x31e0bc*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x8655f830, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x8655e890, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86833250, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0xd8, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1 [0065.770] FindNextFileW (in: hFindFile=0x5107ae0, lpFindFileData=0x31e0bc | out: lpFindFileData=0x31e0bc*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x8655f830, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x8655e890, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86833250, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0xd8, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 0 [0065.770] FindClose (in: hFindFile=0x5107ae0 | out: hFindFile=0x5107ae0) returned 1 [0065.770] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e344) returned 1 [0065.770] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e350) returned 1 [0065.771] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e384) returned 1 [0065.771] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\fil", nBufferLength=0x105, lpBuffer=0x31de8c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\fil", lpFilePart=0x0) returned 0x8a [0065.771] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\fil\\", nBufferLength=0x105, lpBuffer=0x31de60, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\fil\\", lpFilePart=0x0) returned 0x8b [0065.771] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\fil\\*", lpFindFileData=0x31e0ac | out: lpFindFileData=0x31e0ac*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x8655f830, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x8655f830, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x8655f830, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5107ae0 [0065.771] FindNextFileW (in: hFindFile=0x5107ae0, lpFindFileData=0x31e0bc | out: lpFindFileData=0x31e0bc*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x8655f830, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x8655f830, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x8655f830, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0065.772] FindNextFileW (in: hFindFile=0x5107ae0, lpFindFileData=0x31e0bc | out: lpFindFileData=0x31e0bc*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x8655f830, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x8655e890, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86833250, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0xdb, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1 [0065.772] FindNextFileW (in: hFindFile=0x5107ae0, lpFindFileData=0x31e0bc | out: lpFindFileData=0x31e0bc*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0065.772] FindClose (in: hFindFile=0x5107ae0 | out: hFindFile=0x5107ae0) returned 1 [0065.772] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e344) returned 1 [0065.772] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e350) returned 1 [0065.772] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e384) returned 1 [0065.772] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\fil", nBufferLength=0x105, lpBuffer=0x31de8c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\fil", lpFilePart=0x0) returned 0x8a [0065.772] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\fil\\", nBufferLength=0x105, lpBuffer=0x31de60, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\fil\\", lpFilePart=0x0) returned 0x8b [0065.772] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\fil\\*", lpFindFileData=0x31e0ac | out: lpFindFileData=0x31e0ac*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x8655f830, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x8655f830, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x8655f830, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5107ae0 [0065.772] FindNextFileW (in: hFindFile=0x5107ae0, lpFindFileData=0x31e0bc | out: lpFindFileData=0x31e0bc*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x8655f830, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x8655f830, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x8655f830, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0065.772] FindNextFileW (in: hFindFile=0x5107ae0, lpFindFileData=0x31e0bc | out: lpFindFileData=0x31e0bc*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x8655f830, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x8655e890, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86833250, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0xdb, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1 [0065.772] FindNextFileW (in: hFindFile=0x5107ae0, lpFindFileData=0x31e0bc | out: lpFindFileData=0x31e0bc*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x8655f830, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x8655e890, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86833250, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0xdb, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 0 [0065.772] FindClose (in: hFindFile=0x5107ae0 | out: hFindFile=0x5107ae0) returned 1 [0065.772] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e344) returned 1 [0065.772] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e350) returned 1 [0065.772] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e384) returned 1 [0065.772] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\fr", nBufferLength=0x105, lpBuffer=0x31de8c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\fr", lpFilePart=0x0) returned 0x89 [0065.772] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\fr\\", nBufferLength=0x105, lpBuffer=0x31de60, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\fr\\", lpFilePart=0x0) returned 0x8a [0065.772] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\fr\\*", lpFindFileData=0x31e0ac | out: lpFindFileData=0x31e0ac*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x8655f830, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x8655f830, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x8655f830, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5107ae0 [0065.773] FindNextFileW (in: hFindFile=0x5107ae0, lpFindFileData=0x31e0bc | out: lpFindFileData=0x31e0bc*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x8655f830, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x8655f830, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x8655f830, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0065.773] FindNextFileW (in: hFindFile=0x5107ae0, lpFindFileData=0x31e0bc | out: lpFindFileData=0x31e0bc*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x8655f830, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x8655e890, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86833250, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0xd7, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1 [0065.773] FindNextFileW (in: hFindFile=0x5107ae0, lpFindFileData=0x31e0bc | out: lpFindFileData=0x31e0bc*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0065.773] FindClose (in: hFindFile=0x5107ae0 | out: hFindFile=0x5107ae0) returned 1 [0065.773] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e344) returned 1 [0065.773] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e350) returned 1 [0065.773] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e384) returned 1 [0065.773] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\fr", nBufferLength=0x105, lpBuffer=0x31de8c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\fr", lpFilePart=0x0) returned 0x89 [0065.773] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\fr\\", nBufferLength=0x105, lpBuffer=0x31de60, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\fr\\", lpFilePart=0x0) returned 0x8a [0065.773] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\fr\\*", lpFindFileData=0x31e0ac | out: lpFindFileData=0x31e0ac*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x8655f830, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x8655f830, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x8655f830, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5107ae0 [0065.773] FindNextFileW (in: hFindFile=0x5107ae0, lpFindFileData=0x31e0bc | out: lpFindFileData=0x31e0bc*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x8655f830, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x8655f830, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x8655f830, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0065.773] FindNextFileW (in: hFindFile=0x5107ae0, lpFindFileData=0x31e0bc | out: lpFindFileData=0x31e0bc*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x8655f830, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x8655e890, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86833250, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0xd7, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1 [0065.773] FindNextFileW (in: hFindFile=0x5107ae0, lpFindFileData=0x31e0bc | out: lpFindFileData=0x31e0bc*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x8655f830, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x8655e890, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86833250, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0xd7, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 0 [0065.773] FindClose (in: hFindFile=0x5107ae0 | out: hFindFile=0x5107ae0) returned 1 [0065.773] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e344) returned 1 [0065.774] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e350) returned 1 [0065.774] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e384) returned 1 [0065.774] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\he", nBufferLength=0x105, lpBuffer=0x31de8c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\he", lpFilePart=0x0) returned 0x89 [0065.774] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\he\\", nBufferLength=0x105, lpBuffer=0x31de60, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\he\\", lpFilePart=0x0) returned 0x8a [0065.774] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\he\\*", lpFindFileData=0x31e0ac | out: lpFindFileData=0x31e0ac*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x8655f830, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x8655f830, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x8655f830, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5107ae0 [0065.775] FindNextFileW (in: hFindFile=0x5107ae0, lpFindFileData=0x31e0bc | out: lpFindFileData=0x31e0bc*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x8655f830, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x8655f830, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x8655f830, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0065.775] FindNextFileW (in: hFindFile=0x5107ae0, lpFindFileData=0x31e0bc | out: lpFindFileData=0x31e0bc*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x8655f830, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x8655e890, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86833250, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0xdd, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1 [0065.775] FindNextFileW (in: hFindFile=0x5107ae0, lpFindFileData=0x31e0bc | out: lpFindFileData=0x31e0bc*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0065.775] FindClose (in: hFindFile=0x5107ae0 | out: hFindFile=0x5107ae0) returned 1 [0065.775] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e344) returned 1 [0065.775] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e350) returned 1 [0065.775] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e384) returned 1 [0065.775] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\he", nBufferLength=0x105, lpBuffer=0x31de8c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\he", lpFilePart=0x0) returned 0x89 [0065.775] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\he\\", nBufferLength=0x105, lpBuffer=0x31de60, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\he\\", lpFilePart=0x0) returned 0x8a [0065.775] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\he\\*", lpFindFileData=0x31e0ac | out: lpFindFileData=0x31e0ac*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x8655f830, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x8655f830, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x8655f830, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5107ae0 [0065.775] FindNextFileW (in: hFindFile=0x5107ae0, lpFindFileData=0x31e0bc | out: lpFindFileData=0x31e0bc*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x8655f830, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x8655f830, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x8655f830, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0065.775] FindNextFileW (in: hFindFile=0x5107ae0, lpFindFileData=0x31e0bc | out: lpFindFileData=0x31e0bc*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x8655f830, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x8655e890, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86833250, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0xdd, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1 [0065.775] FindNextFileW (in: hFindFile=0x5107ae0, lpFindFileData=0x31e0bc | out: lpFindFileData=0x31e0bc*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x8655f830, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x8655e890, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86833250, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0xdd, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 0 [0065.775] FindClose (in: hFindFile=0x5107ae0 | out: hFindFile=0x5107ae0) returned 1 [0065.775] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e344) returned 1 [0065.775] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e350) returned 1 [0065.775] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e384) returned 1 [0065.775] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\hi", nBufferLength=0x105, lpBuffer=0x31de8c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\hi", lpFilePart=0x0) returned 0x89 [0065.775] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\hi\\", nBufferLength=0x105, lpBuffer=0x31de60, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\hi\\", lpFilePart=0x0) returned 0x8a [0065.776] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\hi\\*", lpFindFileData=0x31e0ac | out: lpFindFileData=0x31e0ac*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x86585990, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86585990, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86585990, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5107ae0 [0065.776] FindNextFileW (in: hFindFile=0x5107ae0, lpFindFileData=0x31e0bc | out: lpFindFileData=0x31e0bc*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x86585990, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86585990, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86585990, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0065.776] FindNextFileW (in: hFindFile=0x5107ae0, lpFindFileData=0x31e0bc | out: lpFindFileData=0x31e0bc*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x86585990, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86585990, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86833250, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x117, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1 [0065.776] FindNextFileW (in: hFindFile=0x5107ae0, lpFindFileData=0x31e0bc | out: lpFindFileData=0x31e0bc*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0065.776] FindClose (in: hFindFile=0x5107ae0 | out: hFindFile=0x5107ae0) returned 1 [0065.776] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e344) returned 1 [0065.776] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e350) returned 1 [0065.776] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e384) returned 1 [0065.776] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\hi", nBufferLength=0x105, lpBuffer=0x31de8c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\hi", lpFilePart=0x0) returned 0x89 [0065.776] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\hi\\", nBufferLength=0x105, lpBuffer=0x31de60, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\hi\\", lpFilePart=0x0) returned 0x8a [0065.776] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\hi\\*", lpFindFileData=0x31e0ac | out: lpFindFileData=0x31e0ac*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x86585990, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86585990, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86585990, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5107ae0 [0065.776] FindNextFileW (in: hFindFile=0x5107ae0, lpFindFileData=0x31e0bc | out: lpFindFileData=0x31e0bc*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x86585990, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86585990, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86585990, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0065.776] FindNextFileW (in: hFindFile=0x5107ae0, lpFindFileData=0x31e0bc | out: lpFindFileData=0x31e0bc*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x86585990, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86585990, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86833250, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x117, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1 [0065.776] FindNextFileW (in: hFindFile=0x5107ae0, lpFindFileData=0x31e0bc | out: lpFindFileData=0x31e0bc*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x86585990, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86585990, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86833250, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x117, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 0 [0065.776] FindClose (in: hFindFile=0x5107ae0 | out: hFindFile=0x5107ae0) returned 1 [0065.776] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e344) returned 1 [0065.777] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e350) returned 1 [0065.777] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e384) returned 1 [0065.777] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\hu", nBufferLength=0x105, lpBuffer=0x31de8c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\hu", lpFilePart=0x0) returned 0x89 [0065.777] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\hu\\", nBufferLength=0x105, lpBuffer=0x31de60, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\hu\\", lpFilePart=0x0) returned 0x8a [0065.777] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\hu\\*", lpFindFileData=0x31e0ac | out: lpFindFileData=0x31e0ac*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x86585990, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86585990, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86585990, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5107ae0 [0065.777] FindNextFileW (in: hFindFile=0x5107ae0, lpFindFileData=0x31e0bc | out: lpFindFileData=0x31e0bc*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x86585990, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86585990, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86585990, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0065.778] FindNextFileW (in: hFindFile=0x5107ae0, lpFindFileData=0x31e0bc | out: lpFindFileData=0x31e0bc*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x86585990, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86585990, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86833250, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0xeb, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1 [0065.778] FindNextFileW (in: hFindFile=0x5107ae0, lpFindFileData=0x31e0bc | out: lpFindFileData=0x31e0bc*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0065.778] FindClose (in: hFindFile=0x5107ae0 | out: hFindFile=0x5107ae0) returned 1 [0065.778] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e344) returned 1 [0065.778] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e350) returned 1 [0065.778] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e384) returned 1 [0065.778] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\hu", nBufferLength=0x105, lpBuffer=0x31de8c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\hu", lpFilePart=0x0) returned 0x89 [0065.778] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\hu\\", nBufferLength=0x105, lpBuffer=0x31de60, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\hu\\", lpFilePart=0x0) returned 0x8a [0065.778] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\hu\\*", lpFindFileData=0x31e0ac | out: lpFindFileData=0x31e0ac*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x86585990, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86585990, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86585990, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5107ae0 [0065.778] FindNextFileW (in: hFindFile=0x5107ae0, lpFindFileData=0x31e0bc | out: lpFindFileData=0x31e0bc*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x86585990, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86585990, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86585990, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0065.778] FindNextFileW (in: hFindFile=0x5107ae0, lpFindFileData=0x31e0bc | out: lpFindFileData=0x31e0bc*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x86585990, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86585990, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86833250, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0xeb, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1 [0065.778] FindNextFileW (in: hFindFile=0x5107ae0, lpFindFileData=0x31e0bc | out: lpFindFileData=0x31e0bc*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x86585990, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86585990, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86833250, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0xeb, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 0 [0065.778] FindClose (in: hFindFile=0x5107ae0 | out: hFindFile=0x5107ae0) returned 1 [0065.778] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e344) returned 1 [0065.778] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e350) returned 1 [0065.778] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e384) returned 1 [0065.778] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\id", nBufferLength=0x105, lpBuffer=0x31de8c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\id", lpFilePart=0x0) returned 0x89 [0065.778] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\id\\", nBufferLength=0x105, lpBuffer=0x31de60, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\id\\", lpFilePart=0x0) returned 0x8a [0065.779] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\id\\*", lpFindFileData=0x31e0ac | out: lpFindFileData=0x31e0ac*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x86585990, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86585990, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86585990, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5107ae0 [0065.779] FindNextFileW (in: hFindFile=0x5107ae0, lpFindFileData=0x31e0bc | out: lpFindFileData=0x31e0bc*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x86585990, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86585990, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86585990, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0065.779] FindNextFileW (in: hFindFile=0x5107ae0, lpFindFileData=0x31e0bc | out: lpFindFileData=0x31e0bc*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x86585990, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86585990, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86833250, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0xd1, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1 [0065.779] FindNextFileW (in: hFindFile=0x5107ae0, lpFindFileData=0x31e0bc | out: lpFindFileData=0x31e0bc*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0065.779] FindClose (in: hFindFile=0x5107ae0 | out: hFindFile=0x5107ae0) returned 1 [0065.779] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e344) returned 1 [0065.779] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e350) returned 1 [0065.779] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e384) returned 1 [0065.779] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\id", nBufferLength=0x105, lpBuffer=0x31de8c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\id", lpFilePart=0x0) returned 0x89 [0065.779] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\id\\", nBufferLength=0x105, lpBuffer=0x31de60, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\id\\", lpFilePart=0x0) returned 0x8a [0065.779] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\id\\*", lpFindFileData=0x31e0ac | out: lpFindFileData=0x31e0ac*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x86585990, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86585990, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86585990, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5107ae0 [0065.779] FindNextFileW (in: hFindFile=0x5107ae0, lpFindFileData=0x31e0bc | out: lpFindFileData=0x31e0bc*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x86585990, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86585990, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86585990, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0065.779] FindNextFileW (in: hFindFile=0x5107ae0, lpFindFileData=0x31e0bc | out: lpFindFileData=0x31e0bc*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x86585990, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86585990, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86833250, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0xd1, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1 [0065.779] FindNextFileW (in: hFindFile=0x5107ae0, lpFindFileData=0x31e0bc | out: lpFindFileData=0x31e0bc*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x86585990, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86585990, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86833250, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0xd1, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 0 [0065.779] FindClose (in: hFindFile=0x5107ae0 | out: hFindFile=0x5107ae0) returned 1 [0065.779] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e344) returned 1 [0065.780] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e350) returned 1 [0065.780] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e384) returned 1 [0065.780] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\it", nBufferLength=0x105, lpBuffer=0x31de8c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\it", lpFilePart=0x0) returned 0x89 [0065.780] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\it\\", nBufferLength=0x105, lpBuffer=0x31de60, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\it\\", lpFilePart=0x0) returned 0x8a [0065.780] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\it\\*", lpFindFileData=0x31e0ac | out: lpFindFileData=0x31e0ac*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x86585990, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86585990, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86585990, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5107ae0 [0065.781] FindNextFileW (in: hFindFile=0x5107ae0, lpFindFileData=0x31e0bc | out: lpFindFileData=0x31e0bc*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x86585990, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86585990, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86585990, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0065.781] FindNextFileW (in: hFindFile=0x5107ae0, lpFindFileData=0x31e0bc | out: lpFindFileData=0x31e0bc*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x86585990, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86585990, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86833250, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0xd5, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1 [0065.781] FindNextFileW (in: hFindFile=0x5107ae0, lpFindFileData=0x31e0bc | out: lpFindFileData=0x31e0bc*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0065.781] FindClose (in: hFindFile=0x5107ae0 | out: hFindFile=0x5107ae0) returned 1 [0065.781] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e344) returned 1 [0065.781] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e350) returned 1 [0065.781] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e384) returned 1 [0065.781] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\it", nBufferLength=0x105, lpBuffer=0x31de8c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\it", lpFilePart=0x0) returned 0x89 [0065.781] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\it\\", nBufferLength=0x105, lpBuffer=0x31de60, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\it\\", lpFilePart=0x0) returned 0x8a [0065.781] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\it\\*", lpFindFileData=0x31e0ac | out: lpFindFileData=0x31e0ac*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x86585990, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86585990, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86585990, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5107ae0 [0065.781] FindNextFileW (in: hFindFile=0x5107ae0, lpFindFileData=0x31e0bc | out: lpFindFileData=0x31e0bc*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x86585990, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86585990, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86585990, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0065.781] FindNextFileW (in: hFindFile=0x5107ae0, lpFindFileData=0x31e0bc | out: lpFindFileData=0x31e0bc*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x86585990, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86585990, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86833250, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0xd5, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1 [0065.781] FindNextFileW (in: hFindFile=0x5107ae0, lpFindFileData=0x31e0bc | out: lpFindFileData=0x31e0bc*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x86585990, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86585990, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86833250, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0xd5, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 0 [0065.781] FindClose (in: hFindFile=0x5107ae0 | out: hFindFile=0x5107ae0) returned 1 [0065.781] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e344) returned 1 [0065.781] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e350) returned 1 [0065.781] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e384) returned 1 [0065.781] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\ja", nBufferLength=0x105, lpBuffer=0x31de8c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\ja", lpFilePart=0x0) returned 0x89 [0065.782] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\ja\\", nBufferLength=0x105, lpBuffer=0x31de60, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\ja\\", lpFilePart=0x0) returned 0x8a [0065.782] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\ja\\*", lpFindFileData=0x31e0ac | out: lpFindFileData=0x31e0ac*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x86585990, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86585990, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86585990, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5107ae0 [0065.782] FindNextFileW (in: hFindFile=0x5107ae0, lpFindFileData=0x31e0bc | out: lpFindFileData=0x31e0bc*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x86585990, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86585990, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86585990, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0065.782] FindNextFileW (in: hFindFile=0x5107ae0, lpFindFileData=0x31e0bc | out: lpFindFileData=0x31e0bc*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x86585990, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86585990, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86833250, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0xdd, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1 [0065.782] FindNextFileW (in: hFindFile=0x5107ae0, lpFindFileData=0x31e0bc | out: lpFindFileData=0x31e0bc*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0065.782] FindClose (in: hFindFile=0x5107ae0 | out: hFindFile=0x5107ae0) returned 1 [0065.782] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e344) returned 1 [0065.782] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e350) returned 1 [0065.782] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e384) returned 1 [0065.782] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\ja", nBufferLength=0x105, lpBuffer=0x31de8c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\ja", lpFilePart=0x0) returned 0x89 [0065.782] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\ja\\", nBufferLength=0x105, lpBuffer=0x31de60, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\ja\\", lpFilePart=0x0) returned 0x8a [0065.782] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\ja\\*", lpFindFileData=0x31e0ac | out: lpFindFileData=0x31e0ac*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x86585990, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86585990, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86585990, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5107ae0 [0065.782] FindNextFileW (in: hFindFile=0x5107ae0, lpFindFileData=0x31e0bc | out: lpFindFileData=0x31e0bc*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x86585990, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86585990, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86585990, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0065.782] FindNextFileW (in: hFindFile=0x5107ae0, lpFindFileData=0x31e0bc | out: lpFindFileData=0x31e0bc*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x86585990, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86585990, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86833250, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0xdd, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1 [0065.782] FindNextFileW (in: hFindFile=0x5107ae0, lpFindFileData=0x31e0bc | out: lpFindFileData=0x31e0bc*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x86585990, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86585990, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86833250, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0xdd, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 0 [0065.783] FindClose (in: hFindFile=0x5107ae0 | out: hFindFile=0x5107ae0) returned 1 [0065.783] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e344) returned 1 [0065.783] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e350) returned 1 [0065.783] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e384) returned 1 [0065.783] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\ko", nBufferLength=0x105, lpBuffer=0x31de8c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\ko", lpFilePart=0x0) returned 0x89 [0065.783] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\ko\\", nBufferLength=0x105, lpBuffer=0x31de60, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\ko\\", lpFilePart=0x0) returned 0x8a [0065.783] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\ko\\*", lpFindFileData=0x31e0ac | out: lpFindFileData=0x31e0ac*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x86585990, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86585990, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86585990, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5107ae0 [0065.784] FindNextFileW (in: hFindFile=0x5107ae0, lpFindFileData=0x31e0bc | out: lpFindFileData=0x31e0bc*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x86585990, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86585990, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86585990, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0065.784] FindNextFileW (in: hFindFile=0x5107ae0, lpFindFileData=0x31e0bc | out: lpFindFileData=0x31e0bc*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x86585990, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86585990, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86833250, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0xda, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1 [0065.784] FindNextFileW (in: hFindFile=0x5107ae0, lpFindFileData=0x31e0bc | out: lpFindFileData=0x31e0bc*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0065.784] FindClose (in: hFindFile=0x5107ae0 | out: hFindFile=0x5107ae0) returned 1 [0065.784] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e344) returned 1 [0065.784] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e350) returned 1 [0065.784] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e384) returned 1 [0065.784] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\ko", nBufferLength=0x105, lpBuffer=0x31de8c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\ko", lpFilePart=0x0) returned 0x89 [0065.784] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\ko\\", nBufferLength=0x105, lpBuffer=0x31de60, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\ko\\", lpFilePart=0x0) returned 0x8a [0065.784] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\ko\\*", lpFindFileData=0x31e0ac | out: lpFindFileData=0x31e0ac*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x86585990, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86585990, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86585990, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5107ae0 [0065.784] FindNextFileW (in: hFindFile=0x5107ae0, lpFindFileData=0x31e0bc | out: lpFindFileData=0x31e0bc*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x86585990, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86585990, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86585990, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0065.784] FindNextFileW (in: hFindFile=0x5107ae0, lpFindFileData=0x31e0bc | out: lpFindFileData=0x31e0bc*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x86585990, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86585990, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86833250, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0xda, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1 [0065.784] FindNextFileW (in: hFindFile=0x5107ae0, lpFindFileData=0x31e0bc | out: lpFindFileData=0x31e0bc*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x86585990, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86585990, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86833250, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0xda, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 0 [0065.784] FindClose (in: hFindFile=0x5107ae0 | out: hFindFile=0x5107ae0) returned 1 [0065.784] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e344) returned 1 [0065.784] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e350) returned 1 [0065.785] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e384) returned 1 [0065.785] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\lt", nBufferLength=0x105, lpBuffer=0x31de8c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\lt", lpFilePart=0x0) returned 0x89 [0065.785] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\lt\\", nBufferLength=0x105, lpBuffer=0x31de60, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\lt\\", lpFilePart=0x0) returned 0x8a [0065.785] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\lt\\*", lpFindFileData=0x31e0ac | out: lpFindFileData=0x31e0ac*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x865abaf0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x865abaf0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x865abaf0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5107ae0 [0065.785] FindNextFileW (in: hFindFile=0x5107ae0, lpFindFileData=0x31e0bc | out: lpFindFileData=0x31e0bc*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x865abaf0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x865abaf0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x865abaf0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0065.785] FindNextFileW (in: hFindFile=0x5107ae0, lpFindFileData=0x31e0bc | out: lpFindFileData=0x31e0bc*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x865abaf0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x865aa380, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86833250, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0xe4, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1 [0065.785] FindNextFileW (in: hFindFile=0x5107ae0, lpFindFileData=0x31e0bc | out: lpFindFileData=0x31e0bc*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0065.785] FindClose (in: hFindFile=0x5107ae0 | out: hFindFile=0x5107ae0) returned 1 [0065.785] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e344) returned 1 [0065.785] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e350) returned 1 [0065.785] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e384) returned 1 [0065.785] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\lt", nBufferLength=0x105, lpBuffer=0x31de8c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\lt", lpFilePart=0x0) returned 0x89 [0065.785] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\lt\\", nBufferLength=0x105, lpBuffer=0x31de60, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\lt\\", lpFilePart=0x0) returned 0x8a [0065.785] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\lt\\*", lpFindFileData=0x31e0ac | out: lpFindFileData=0x31e0ac*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x865abaf0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x865abaf0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x865abaf0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5107ae0 [0065.785] FindNextFileW (in: hFindFile=0x5107ae0, lpFindFileData=0x31e0bc | out: lpFindFileData=0x31e0bc*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x865abaf0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x865abaf0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x865abaf0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0065.785] FindNextFileW (in: hFindFile=0x5107ae0, lpFindFileData=0x31e0bc | out: lpFindFileData=0x31e0bc*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x865abaf0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x865aa380, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86833250, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0xe4, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1 [0065.786] FindNextFileW (in: hFindFile=0x5107ae0, lpFindFileData=0x31e0bc | out: lpFindFileData=0x31e0bc*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x865abaf0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x865aa380, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86833250, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0xe4, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 0 [0065.786] FindClose (in: hFindFile=0x5107ae0 | out: hFindFile=0x5107ae0) returned 1 [0065.786] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e344) returned 1 [0065.786] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e350) returned 1 [0065.786] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e384) returned 1 [0065.786] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\lv", nBufferLength=0x105, lpBuffer=0x31de8c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\lv", lpFilePart=0x0) returned 0x89 [0065.786] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\lv\\", nBufferLength=0x105, lpBuffer=0x31de60, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\lv\\", lpFilePart=0x0) returned 0x8a [0065.786] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\lv\\*", lpFindFileData=0x31e0ac | out: lpFindFileData=0x31e0ac*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x865abaf0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x865abaf0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x865abaf0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5107ae0 [0065.787] FindNextFileW (in: hFindFile=0x5107ae0, lpFindFileData=0x31e0bc | out: lpFindFileData=0x31e0bc*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x865abaf0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x865abaf0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x865abaf0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0065.787] FindNextFileW (in: hFindFile=0x5107ae0, lpFindFileData=0x31e0bc | out: lpFindFileData=0x31e0bc*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x865abaf0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x865aa380, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86833250, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0xe0, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1 [0065.787] FindNextFileW (in: hFindFile=0x5107ae0, lpFindFileData=0x31e0bc | out: lpFindFileData=0x31e0bc*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0065.787] FindClose (in: hFindFile=0x5107ae0 | out: hFindFile=0x5107ae0) returned 1 [0065.787] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e344) returned 1 [0065.787] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e350) returned 1 [0065.787] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e384) returned 1 [0065.787] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\lv", nBufferLength=0x105, lpBuffer=0x31de8c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\lv", lpFilePart=0x0) returned 0x89 [0065.787] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\lv\\", nBufferLength=0x105, lpBuffer=0x31de60, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\lv\\", lpFilePart=0x0) returned 0x8a [0065.787] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\lv\\*", lpFindFileData=0x31e0ac | out: lpFindFileData=0x31e0ac*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x865abaf0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x865abaf0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x865abaf0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5107ae0 [0065.787] FindNextFileW (in: hFindFile=0x5107ae0, lpFindFileData=0x31e0bc | out: lpFindFileData=0x31e0bc*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x865abaf0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x865abaf0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x865abaf0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0065.787] FindNextFileW (in: hFindFile=0x5107ae0, lpFindFileData=0x31e0bc | out: lpFindFileData=0x31e0bc*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x865abaf0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x865aa380, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86833250, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0xe0, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1 [0065.787] FindNextFileW (in: hFindFile=0x5107ae0, lpFindFileData=0x31e0bc | out: lpFindFileData=0x31e0bc*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x865abaf0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x865aa380, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86833250, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0xe0, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 0 [0065.787] FindClose (in: hFindFile=0x5107ae0 | out: hFindFile=0x5107ae0) returned 1 [0065.787] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e344) returned 1 [0065.787] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e350) returned 1 [0065.788] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e384) returned 1 [0065.788] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\ms", nBufferLength=0x105, lpBuffer=0x31de8c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\ms", lpFilePart=0x0) returned 0x89 [0065.788] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\ms\\", nBufferLength=0x105, lpBuffer=0x31de60, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\ms\\", lpFilePart=0x0) returned 0x8a [0065.788] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\ms\\*", lpFindFileData=0x31e0ac | out: lpFindFileData=0x31e0ac*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x865d1c50, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x865d1c50, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x865d1c50, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5107ae0 [0065.788] FindNextFileW (in: hFindFile=0x5107ae0, lpFindFileData=0x31e0bc | out: lpFindFileData=0x31e0bc*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x865d1c50, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x865d1c50, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x865d1c50, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0065.788] FindNextFileW (in: hFindFile=0x5107ae0, lpFindFileData=0x31e0bc | out: lpFindFileData=0x31e0bc*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x865d1c50, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x865d1480, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86833250, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0xcf, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1 [0065.788] FindNextFileW (in: hFindFile=0x5107ae0, lpFindFileData=0x31e0bc | out: lpFindFileData=0x31e0bc*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0065.788] FindClose (in: hFindFile=0x5107ae0 | out: hFindFile=0x5107ae0) returned 1 [0065.788] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e344) returned 1 [0065.788] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e350) returned 1 [0065.788] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e384) returned 1 [0065.788] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\ms", nBufferLength=0x105, lpBuffer=0x31de8c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\ms", lpFilePart=0x0) returned 0x89 [0065.788] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\ms\\", nBufferLength=0x105, lpBuffer=0x31de60, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\ms\\", lpFilePart=0x0) returned 0x8a [0065.788] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\ms\\*", lpFindFileData=0x31e0ac | out: lpFindFileData=0x31e0ac*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x865d1c50, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x865d1c50, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x865d1c50, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5107ae0 [0065.788] FindNextFileW (in: hFindFile=0x5107ae0, lpFindFileData=0x31e0bc | out: lpFindFileData=0x31e0bc*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x865d1c50, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x865d1c50, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x865d1c50, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0065.788] FindNextFileW (in: hFindFile=0x5107ae0, lpFindFileData=0x31e0bc | out: lpFindFileData=0x31e0bc*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x865d1c50, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x865d1480, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86833250, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0xcf, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1 [0065.788] FindNextFileW (in: hFindFile=0x5107ae0, lpFindFileData=0x31e0bc | out: lpFindFileData=0x31e0bc*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x865d1c50, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x865d1480, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86833250, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0xcf, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 0 [0065.789] FindClose (in: hFindFile=0x5107ae0 | out: hFindFile=0x5107ae0) returned 1 [0065.789] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e344) returned 1 [0065.789] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e350) returned 1 [0065.789] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e384) returned 1 [0065.789] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\nl", nBufferLength=0x105, lpBuffer=0x31de8c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\nl", lpFilePart=0x0) returned 0x89 [0065.789] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\nl\\", nBufferLength=0x105, lpBuffer=0x31de60, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\nl\\", lpFilePart=0x0) returned 0x8a [0065.789] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\nl\\*", lpFindFileData=0x31e0ac | out: lpFindFileData=0x31e0ac*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x865d1c50, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x865f7db0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x865f7db0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5107ae0 [0065.790] FindNextFileW (in: hFindFile=0x5107ae0, lpFindFileData=0x31e0bc | out: lpFindFileData=0x31e0bc*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x865d1c50, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x865f7db0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x865f7db0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0065.790] FindNextFileW (in: hFindFile=0x5107ae0, lpFindFileData=0x31e0bc | out: lpFindFileData=0x31e0bc*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x865f7db0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x865f8580, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86833250, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0xd9, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1 [0065.790] FindNextFileW (in: hFindFile=0x5107ae0, lpFindFileData=0x31e0bc | out: lpFindFileData=0x31e0bc*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0065.790] FindClose (in: hFindFile=0x5107ae0 | out: hFindFile=0x5107ae0) returned 1 [0065.790] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e344) returned 1 [0065.790] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e350) returned 1 [0065.790] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e384) returned 1 [0065.790] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\nl", nBufferLength=0x105, lpBuffer=0x31de8c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\nl", lpFilePart=0x0) returned 0x89 [0065.790] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\nl\\", nBufferLength=0x105, lpBuffer=0x31de60, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\nl\\", lpFilePart=0x0) returned 0x8a [0065.790] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\nl\\*", lpFindFileData=0x31e0ac | out: lpFindFileData=0x31e0ac*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x865d1c50, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x865f7db0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x865f7db0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5107ae0 [0065.790] FindNextFileW (in: hFindFile=0x5107ae0, lpFindFileData=0x31e0bc | out: lpFindFileData=0x31e0bc*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x865d1c50, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x865f7db0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x865f7db0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0065.790] FindNextFileW (in: hFindFile=0x5107ae0, lpFindFileData=0x31e0bc | out: lpFindFileData=0x31e0bc*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x865f7db0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x865f8580, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86833250, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0xd9, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1 [0065.790] FindNextFileW (in: hFindFile=0x5107ae0, lpFindFileData=0x31e0bc | out: lpFindFileData=0x31e0bc*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x865f7db0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x865f8580, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86833250, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0xd9, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 0 [0065.790] FindClose (in: hFindFile=0x5107ae0 | out: hFindFile=0x5107ae0) returned 1 [0065.790] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e344) returned 1 [0065.790] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e350) returned 1 [0065.790] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e384) returned 1 [0065.791] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\no", nBufferLength=0x105, lpBuffer=0x31de8c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\no", lpFilePart=0x0) returned 0x89 [0065.791] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\no\\", nBufferLength=0x105, lpBuffer=0x31de60, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\no\\", lpFilePart=0x0) returned 0x8a [0065.791] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\no\\*", lpFindFileData=0x31e0ac | out: lpFindFileData=0x31e0ac*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x865f7db0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x8661df10, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x8661df10, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5107ae0 [0065.791] FindNextFileW (in: hFindFile=0x5107ae0, lpFindFileData=0x31e0bc | out: lpFindFileData=0x31e0bc*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x865f7db0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x8661df10, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x8661df10, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0065.791] FindNextFileW (in: hFindFile=0x5107ae0, lpFindFileData=0x31e0bc | out: lpFindFileData=0x31e0bc*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x8661df10, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x8661cf70, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0xfe051a00, ftLastWriteTime.dwHighDateTime=0x1d03f5d, nFileSizeHigh=0x0, nFileSizeLow=0xc3, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1 [0065.791] FindNextFileW (in: hFindFile=0x5107ae0, lpFindFileData=0x31e0bc | out: lpFindFileData=0x31e0bc*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0065.791] FindClose (in: hFindFile=0x5107ae0 | out: hFindFile=0x5107ae0) returned 1 [0065.791] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e344) returned 1 [0065.791] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e350) returned 1 [0065.791] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e384) returned 1 [0065.791] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\no", nBufferLength=0x105, lpBuffer=0x31de8c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\no", lpFilePart=0x0) returned 0x89 [0065.791] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\no\\", nBufferLength=0x105, lpBuffer=0x31de60, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\no\\", lpFilePart=0x0) returned 0x8a [0065.791] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\no\\*", lpFindFileData=0x31e0ac | out: lpFindFileData=0x31e0ac*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x865f7db0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x8661df10, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x8661df10, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5107ae0 [0065.791] FindNextFileW (in: hFindFile=0x5107ae0, lpFindFileData=0x31e0bc | out: lpFindFileData=0x31e0bc*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x865f7db0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x8661df10, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x8661df10, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0065.791] FindNextFileW (in: hFindFile=0x5107ae0, lpFindFileData=0x31e0bc | out: lpFindFileData=0x31e0bc*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x8661df10, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x8661cf70, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0xfe051a00, ftLastWriteTime.dwHighDateTime=0x1d03f5d, nFileSizeHigh=0x0, nFileSizeLow=0xc3, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1 [0065.792] FindClose (in: hFindFile=0x5107ae0 | out: hFindFile=0x5107ae0) returned 1 [0065.792] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e344) returned 1 [0065.792] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e350) returned 1 [0065.792] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e384) returned 1 [0065.792] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\pl", nBufferLength=0x105, lpBuffer=0x31de8c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\pl", lpFilePart=0x0) returned 0x89 [0065.792] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\pl\\", nBufferLength=0x105, lpBuffer=0x31de60, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\pl\\", lpFilePart=0x0) returned 0x8a [0065.792] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\pl\\*", lpFindFileData=0x31e0ac | out: lpFindFileData=0x31e0ac*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x8661df10, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x8661df10, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x8661df10, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5107ae0 [0065.793] FindClose (in: hFindFile=0x5107ae0 | out: hFindFile=0x5107ae0) returned 1 [0065.793] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e344) returned 1 [0065.793] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e350) returned 1 [0065.793] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e384) returned 1 [0065.793] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\pl", nBufferLength=0x105, lpBuffer=0x31de8c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\pl", lpFilePart=0x0) returned 0x89 [0065.793] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\pl\\", nBufferLength=0x105, lpBuffer=0x31de60, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\pl\\", lpFilePart=0x0) returned 0x8a [0065.793] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\pl\\*", lpFindFileData=0x31e0ac | out: lpFindFileData=0x31e0ac*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x8661df10, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x8661df10, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x8661df10, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5107ae0 [0065.794] FindClose (in: hFindFile=0x5107ae0 | out: hFindFile=0x5107ae0) returned 1 [0065.794] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e344) returned 1 [0065.794] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e350) returned 1 [0065.794] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e384) returned 1 [0065.794] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\pt_BR", nBufferLength=0x105, lpBuffer=0x31de8c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\pt_BR", lpFilePart=0x0) returned 0x8c [0065.794] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\pt_BR\\", nBufferLength=0x105, lpBuffer=0x31de60, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\pt_BR\\", lpFilePart=0x0) returned 0x8d [0065.794] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\pt_BR\\*", lpFindFileData=0x31e0ac | out: lpFindFileData=0x31e0ac*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x86644070, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86644070, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86644070, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5107ae0 [0065.794] FindClose (in: hFindFile=0x5107ae0 | out: hFindFile=0x5107ae0) returned 1 [0065.794] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e344) returned 1 [0065.794] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e350) returned 1 [0065.794] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e384) returned 1 [0065.794] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\pt_BR", nBufferLength=0x105, lpBuffer=0x31de8c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\pt_BR", lpFilePart=0x0) returned 0x8c [0065.794] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\pt_BR\\", nBufferLength=0x105, lpBuffer=0x31de60, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\pt_BR\\", lpFilePart=0x0) returned 0x8d [0065.794] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\pt_BR\\*", lpFindFileData=0x31e0ac | out: lpFindFileData=0x31e0ac*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x86644070, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86644070, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86644070, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5107ae0 [0065.794] FindClose (in: hFindFile=0x5107ae0 | out: hFindFile=0x5107ae0) returned 1 [0065.795] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e344) returned 1 [0065.795] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e350) returned 1 [0065.795] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e384) returned 1 [0065.795] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\pt_PT", nBufferLength=0x105, lpBuffer=0x31de8c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\pt_PT", lpFilePart=0x0) returned 0x8c [0065.795] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\pt_PT\\", nBufferLength=0x105, lpBuffer=0x31de60, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\pt_PT\\", lpFilePart=0x0) returned 0x8d [0065.795] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\pt_PT\\*", lpFindFileData=0x31e0ac | out: lpFindFileData=0x31e0ac*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x86644070, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86644070, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86644070, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5107ae0 [0065.796] FindClose (in: hFindFile=0x5107ae0 | out: hFindFile=0x5107ae0) returned 1 [0065.796] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e344) returned 1 [0065.796] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e350) returned 1 [0065.796] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e384) returned 1 [0065.796] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\pt_PT", nBufferLength=0x105, lpBuffer=0x31de8c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\pt_PT", lpFilePart=0x0) returned 0x8c [0065.796] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\pt_PT\\", nBufferLength=0x105, lpBuffer=0x31de60, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\pt_PT\\", lpFilePart=0x0) returned 0x8d [0065.796] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\pt_PT\\*", lpFindFileData=0x31e0ac | out: lpFindFileData=0x31e0ac*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x86644070, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86644070, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86644070, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5107ae0 [0065.796] FindClose (in: hFindFile=0x5107ae0 | out: hFindFile=0x5107ae0) returned 1 [0065.796] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e344) returned 1 [0065.796] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e350) returned 1 [0065.796] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e384) returned 1 [0065.796] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\ro", nBufferLength=0x105, lpBuffer=0x31de8c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\ro", lpFilePart=0x0) returned 0x89 [0065.796] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\ro\\", nBufferLength=0x105, lpBuffer=0x31de60, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\ro\\", lpFilePart=0x0) returned 0x8a [0065.796] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\ro\\*", lpFindFileData=0x31e0ac | out: lpFindFileData=0x31e0ac*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x8666a1d0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86690330, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86690330, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5107ae0 [0065.796] FindClose (in: hFindFile=0x5107ae0 | out: hFindFile=0x5107ae0) returned 1 [0065.796] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e344) returned 1 [0065.796] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e350) returned 1 [0065.797] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e384) returned 1 [0065.797] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\ro", nBufferLength=0x105, lpBuffer=0x31de8c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\ro", lpFilePart=0x0) returned 0x89 [0065.797] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\ro\\", nBufferLength=0x105, lpBuffer=0x31de60, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\ro\\", lpFilePart=0x0) returned 0x8a [0065.797] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\ro\\*", lpFindFileData=0x31e0ac | out: lpFindFileData=0x31e0ac*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x8666a1d0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86690330, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86690330, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5107ae0 [0065.797] FindClose (in: hFindFile=0x5107ae0 | out: hFindFile=0x5107ae0) returned 1 [0065.797] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e344) returned 1 [0065.797] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e350) returned 1 [0065.797] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e384) returned 1 [0065.797] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\ru", nBufferLength=0x105, lpBuffer=0x31de8c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\ru", lpFilePart=0x0) returned 0x89 [0065.797] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\ru\\", nBufferLength=0x105, lpBuffer=0x31de60, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\ru\\", lpFilePart=0x0) returned 0x8a [0065.797] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\ru\\*", lpFindFileData=0x31e0ac | out: lpFindFileData=0x31e0ac*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x86690330, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86690330, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86690330, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5107ae0 [0065.798] FindClose (in: hFindFile=0x5107ae0 | out: hFindFile=0x5107ae0) returned 1 [0065.798] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e344) returned 1 [0065.798] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e350) returned 1 [0065.798] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e384) returned 1 [0065.798] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\ru", nBufferLength=0x105, lpBuffer=0x31de8c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\ru", lpFilePart=0x0) returned 0x89 [0065.798] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\ru\\", nBufferLength=0x105, lpBuffer=0x31de60, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\ru\\", lpFilePart=0x0) returned 0x8a [0065.798] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\ru\\*", lpFindFileData=0x31e0ac | out: lpFindFileData=0x31e0ac*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x86690330, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86690330, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86690330, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5107ae0 [0065.798] FindClose (in: hFindFile=0x5107ae0 | out: hFindFile=0x5107ae0) returned 1 [0065.798] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e344) returned 1 [0065.798] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e350) returned 1 [0065.798] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e384) returned 1 [0065.798] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\sk", nBufferLength=0x105, lpBuffer=0x31de8c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\sk", lpFilePart=0x0) returned 0x89 [0065.799] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\sk\\", nBufferLength=0x105, lpBuffer=0x31de60, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\sk\\", lpFilePart=0x0) returned 0x8a [0065.799] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\sk\\*", lpFindFileData=0x31e0ac | out: lpFindFileData=0x31e0ac*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x866b6490, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x866b6490, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x866b6490, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5107ae0 [0065.799] FindClose (in: hFindFile=0x5107ae0 | out: hFindFile=0x5107ae0) returned 1 [0065.799] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e344) returned 1 [0065.799] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e350) returned 1 [0065.799] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e384) returned 1 [0065.799] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\sk", nBufferLength=0x105, lpBuffer=0x31de8c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\sk", lpFilePart=0x0) returned 0x89 [0065.799] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\sk\\", nBufferLength=0x105, lpBuffer=0x31de60, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\sk\\", lpFilePart=0x0) returned 0x8a [0065.799] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\sk\\*", lpFindFileData=0x31e0ac | out: lpFindFileData=0x31e0ac*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x866b6490, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x866b6490, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x866b6490, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5107ae0 [0065.799] FindClose (in: hFindFile=0x5107ae0 | out: hFindFile=0x5107ae0) returned 1 [0065.799] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e344) returned 1 [0065.799] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e350) returned 1 [0065.799] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e384) returned 1 [0065.799] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\sl", nBufferLength=0x105, lpBuffer=0x31de8c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\sl", lpFilePart=0x0) returned 0x89 [0065.799] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\sl\\", nBufferLength=0x105, lpBuffer=0x31de60, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\sl\\", lpFilePart=0x0) returned 0x8a [0065.799] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\sl\\*", lpFindFileData=0x31e0ac | out: lpFindFileData=0x31e0ac*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x866b6490, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x866b6490, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x866b6490, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5107ae0 [0065.800] FindClose (in: hFindFile=0x5107ae0 | out: hFindFile=0x5107ae0) returned 1 [0065.800] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e344) returned 1 [0065.800] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e350) returned 1 [0065.800] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e384) returned 1 [0065.800] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\sl", nBufferLength=0x105, lpBuffer=0x31de8c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\sl", lpFilePart=0x0) returned 0x89 [0065.801] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\sl\\", nBufferLength=0x105, lpBuffer=0x31de60, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\sl\\", lpFilePart=0x0) returned 0x8a [0065.801] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\sl\\*", lpFindFileData=0x31e0ac | out: lpFindFileData=0x31e0ac*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x866b6490, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x866b6490, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x866b6490, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5107ae0 [0065.801] FindClose (in: hFindFile=0x5107ae0 | out: hFindFile=0x5107ae0) returned 1 [0065.801] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e344) returned 1 [0065.801] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e350) returned 1 [0065.801] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e384) returned 1 [0065.801] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\sr", nBufferLength=0x105, lpBuffer=0x31de8c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\sr", lpFilePart=0x0) returned 0x89 [0065.801] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\sr\\", nBufferLength=0x105, lpBuffer=0x31de60, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\sr\\", lpFilePart=0x0) returned 0x8a [0065.801] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\sr\\*", lpFindFileData=0x31e0ac | out: lpFindFileData=0x31e0ac*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x866dc5f0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x866dc5f0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x866dc5f0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5107ae0 [0065.801] FindClose (in: hFindFile=0x5107ae0 | out: hFindFile=0x5107ae0) returned 1 [0065.802] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e344) returned 1 [0065.802] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e350) returned 1 [0065.802] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e384) returned 1 [0065.802] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\sr", nBufferLength=0x105, lpBuffer=0x31de8c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\sr", lpFilePart=0x0) returned 0x89 [0065.802] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\sr\\", nBufferLength=0x105, lpBuffer=0x31de60, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\sr\\", lpFilePart=0x0) returned 0x8a [0065.802] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\sr\\*", lpFindFileData=0x31e0ac | out: lpFindFileData=0x31e0ac*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x866dc5f0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x866dc5f0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x866dc5f0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5107ae0 [0065.802] FindClose (in: hFindFile=0x5107ae0 | out: hFindFile=0x5107ae0) returned 1 [0065.802] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e344) returned 1 [0065.802] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e350) returned 1 [0065.802] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e384) returned 1 [0065.802] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\sv", nBufferLength=0x105, lpBuffer=0x31de8c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\sv", lpFilePart=0x0) returned 0x89 [0065.802] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\sv\\", nBufferLength=0x105, lpBuffer=0x31de60, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\sv\\", lpFilePart=0x0) returned 0x8a [0065.802] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\sv\\*", lpFindFileData=0x31e0ac | out: lpFindFileData=0x31e0ac*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x866dc5f0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x866dc5f0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x866dc5f0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5107ae0 [0065.803] FindClose (in: hFindFile=0x5107ae0 | out: hFindFile=0x5107ae0) returned 1 [0065.803] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e344) returned 1 [0065.803] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e350) returned 1 [0065.803] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e384) returned 1 [0065.803] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\sv", nBufferLength=0x105, lpBuffer=0x31de8c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\sv", lpFilePart=0x0) returned 0x89 [0065.803] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\sv\\", nBufferLength=0x105, lpBuffer=0x31de60, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\sv\\", lpFilePart=0x0) returned 0x8a [0065.803] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\sv\\*", lpFindFileData=0x31e0ac | out: lpFindFileData=0x31e0ac*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x866dc5f0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x866dc5f0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x866dc5f0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5107ae0 [0065.804] FindClose (in: hFindFile=0x5107ae0 | out: hFindFile=0x5107ae0) returned 1 [0065.804] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e344) returned 1 [0065.804] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e350) returned 1 [0065.804] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e384) returned 1 [0065.804] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\th", nBufferLength=0x105, lpBuffer=0x31de8c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\th", lpFilePart=0x0) returned 0x89 [0065.804] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\th\\", nBufferLength=0x105, lpBuffer=0x31de60, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\th\\", lpFilePart=0x0) returned 0x8a [0065.804] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\th\\*", lpFindFileData=0x31e0ac | out: lpFindFileData=0x31e0ac*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x866dc5f0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x866dc5f0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x866dc5f0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5107ae0 [0065.804] FindClose (in: hFindFile=0x5107ae0 | out: hFindFile=0x5107ae0) returned 1 [0065.804] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e344) returned 1 [0065.804] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e350) returned 1 [0065.804] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e384) returned 1 [0065.804] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\th", nBufferLength=0x105, lpBuffer=0x31de8c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\th", lpFilePart=0x0) returned 0x89 [0065.804] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\th\\", nBufferLength=0x105, lpBuffer=0x31de60, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\th\\", lpFilePart=0x0) returned 0x8a [0065.804] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\th\\*", lpFindFileData=0x31e0ac | out: lpFindFileData=0x31e0ac*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x866dc5f0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x866dc5f0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x866dc5f0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5107ae0 [0065.804] FindClose (in: hFindFile=0x5107ae0 | out: hFindFile=0x5107ae0) returned 1 [0065.805] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e344) returned 1 [0065.805] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e350) returned 1 [0065.805] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e384) returned 1 [0065.805] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\tr", nBufferLength=0x105, lpBuffer=0x31de8c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\tr", lpFilePart=0x0) returned 0x89 [0065.805] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\tr\\", nBufferLength=0x105, lpBuffer=0x31de60, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\tr\\", lpFilePart=0x0) returned 0x8a [0065.805] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\tr\\*", lpFindFileData=0x31e0ac | out: lpFindFileData=0x31e0ac*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x866dc5f0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x866dc5f0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x866dc5f0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5107ae0 [0065.806] FindClose (in: hFindFile=0x5107ae0 | out: hFindFile=0x5107ae0) returned 1 [0065.806] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e344) returned 1 [0065.806] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e350) returned 1 [0065.806] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e384) returned 1 [0065.806] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\tr", nBufferLength=0x105, lpBuffer=0x31de8c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\tr", lpFilePart=0x0) returned 0x89 [0065.806] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\tr\\", nBufferLength=0x105, lpBuffer=0x31de60, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\tr\\", lpFilePart=0x0) returned 0x8a [0065.806] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\tr\\*", lpFindFileData=0x31e0ac | out: lpFindFileData=0x31e0ac*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x866dc5f0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x866dc5f0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x866dc5f0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5107ae0 [0065.806] FindClose (in: hFindFile=0x5107ae0 | out: hFindFile=0x5107ae0) returned 1 [0065.806] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e344) returned 1 [0065.806] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e350) returned 1 [0065.806] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e384) returned 1 [0065.806] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\uk", nBufferLength=0x105, lpBuffer=0x31de8c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\uk", lpFilePart=0x0) returned 0x89 [0065.806] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\uk\\", nBufferLength=0x105, lpBuffer=0x31de60, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\uk\\", lpFilePart=0x0) returned 0x8a [0065.806] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\uk\\*", lpFindFileData=0x31e0ac | out: lpFindFileData=0x31e0ac*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x866dc5f0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86702750, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86702750, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5107ae0 [0065.806] FindClose (in: hFindFile=0x5107ae0 | out: hFindFile=0x5107ae0) returned 1 [0065.807] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e344) returned 1 [0065.807] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e350) returned 1 [0065.807] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e384) returned 1 [0065.807] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\uk", nBufferLength=0x105, lpBuffer=0x31de8c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\uk", lpFilePart=0x0) returned 0x89 [0065.807] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\uk\\", nBufferLength=0x105, lpBuffer=0x31de60, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\uk\\", lpFilePart=0x0) returned 0x8a [0065.807] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\uk\\*", lpFindFileData=0x31e0ac | out: lpFindFileData=0x31e0ac*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x866dc5f0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86702750, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86702750, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5107ae0 [0065.807] FindClose (in: hFindFile=0x5107ae0 | out: hFindFile=0x5107ae0) returned 1 [0065.807] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e344) returned 1 [0065.807] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\vi", nBufferLength=0x105, lpBuffer=0x31de8c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\vi", lpFilePart=0x0) returned 0x89 [0065.807] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\vi\\", nBufferLength=0x105, lpBuffer=0x31de60, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\vi\\", lpFilePart=0x0) returned 0x8a [0065.807] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\vi\\*", lpFindFileData=0x31e0ac | out: lpFindFileData=0x31e0ac*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x86702750, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86702750, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86702750, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5107ae0 [0065.808] FindClose (in: hFindFile=0x5107ae0 | out: hFindFile=0x5107ae0) returned 1 [0065.808] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\vi", nBufferLength=0x105, lpBuffer=0x31de8c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\vi", lpFilePart=0x0) returned 0x89 [0065.808] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\vi\\", nBufferLength=0x105, lpBuffer=0x31de60, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\vi\\", lpFilePart=0x0) returned 0x8a [0065.808] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\vi\\*", lpFindFileData=0x31e0ac | out: lpFindFileData=0x31e0ac*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x86702750, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86702750, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86702750, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5107ae0 [0065.808] FindClose (in: hFindFile=0x5107ae0 | out: hFindFile=0x5107ae0) returned 1 [0065.808] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\zh_CN", nBufferLength=0x105, lpBuffer=0x31de8c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\zh_CN", lpFilePart=0x0) returned 0x8c [0065.808] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\zh_CN\\", nBufferLength=0x105, lpBuffer=0x31de60, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\zh_CN\\", lpFilePart=0x0) returned 0x8d [0065.808] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\zh_CN\\*", lpFindFileData=0x31e0ac | out: lpFindFileData=0x31e0ac*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x86702750, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86702750, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86702750, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5107ae0 [0065.809] FindClose (in: hFindFile=0x5107ae0 | out: hFindFile=0x5107ae0) returned 1 [0065.809] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\zh_CN", nBufferLength=0x105, lpBuffer=0x31de8c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\zh_CN", lpFilePart=0x0) returned 0x8c [0065.809] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\zh_CN\\", nBufferLength=0x105, lpBuffer=0x31de60, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\zh_CN\\", lpFilePart=0x0) returned 0x8d [0065.809] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\zh_CN\\*", lpFindFileData=0x31e0ac | out: lpFindFileData=0x31e0ac*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x86702750, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86702750, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86702750, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5107ae0 [0065.809] FindClose (in: hFindFile=0x5107ae0 | out: hFindFile=0x5107ae0) returned 1 [0065.809] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\zh_TW", nBufferLength=0x105, lpBuffer=0x31de8c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\zh_TW", lpFilePart=0x0) returned 0x8c [0065.809] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\zh_TW\\", nBufferLength=0x105, lpBuffer=0x31de60, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\zh_TW\\", lpFilePart=0x0) returned 0x8d [0065.809] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\zh_TW\\*", lpFindFileData=0x31e0ac | out: lpFindFileData=0x31e0ac*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x86702750, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86702750, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86702750, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5107ae0 [0065.809] FindClose (in: hFindFile=0x5107ae0 | out: hFindFile=0x5107ae0) returned 1 [0065.809] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\zh_TW", nBufferLength=0x105, lpBuffer=0x31de8c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\zh_TW", lpFilePart=0x0) returned 0x8c [0065.809] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\zh_TW\\", nBufferLength=0x105, lpBuffer=0x31de60, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\zh_TW\\", lpFilePart=0x0) returned 0x8d [0065.810] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\zh_TW\\*", lpFindFileData=0x31e0ac | out: lpFindFileData=0x31e0ac*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x86702750, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86702750, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86702750, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5107ae0 [0065.810] FindClose (in: hFindFile=0x5107ae0 | out: hFindFile=0x5107ae0) returned 1 [0065.810] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_metadata", nBufferLength=0x105, lpBuffer=0x31df04, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_metadata", lpFilePart=0x0) returned 0x87 [0065.810] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_metadata\\", nBufferLength=0x105, lpBuffer=0x31ded8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_metadata\\", lpFilePart=0x0) returned 0x88 [0065.810] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_metadata\\*", lpFindFileData=0x31e124 | out: lpFindFileData=0x31e124*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x867288b0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x8687f510, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x8687f510, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5107ae0 [0065.810] FindClose (in: hFindFile=0x5107ae0 | out: hFindFile=0x5107ae0) returned 1 [0065.810] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_metadata", nBufferLength=0x105, lpBuffer=0x31df04, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_metadata", lpFilePart=0x0) returned 0x87 [0065.810] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_metadata\\", nBufferLength=0x105, lpBuffer=0x31ded8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_metadata\\", lpFilePart=0x0) returned 0x88 [0065.810] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_metadata\\*", lpFindFileData=0x31e124 | out: lpFindFileData=0x31e124*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x867288b0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x8687f510, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x8687f510, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5107ae0 [0065.810] FindClose (in: hFindFile=0x5107ae0 | out: hFindFile=0x5107ae0) returned 1 [0065.810] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf", nBufferLength=0x105, lpBuffer=0x31dff4, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf", lpFilePart=0x0) returned 0x77 [0065.811] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\", nBufferLength=0x105, lpBuffer=0x31dfc8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\", lpFilePart=0x0) returned 0x78 [0065.811] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\*", lpFindFileData=0x31e214 | out: lpFindFileData=0x31e214*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x819d0bd0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x916d8210, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x916d8210, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5107ae0 [0065.811] FindClose (in: hFindFile=0x5107ae0 | out: hFindFile=0x5107ae0) returned 1 [0065.811] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf", nBufferLength=0x105, lpBuffer=0x31dff4, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf", lpFilePart=0x0) returned 0x77 [0065.811] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\", nBufferLength=0x105, lpBuffer=0x31dfc8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\", lpFilePart=0x0) returned 0x78 [0065.811] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\*", lpFindFileData=0x31e214 | out: lpFindFileData=0x31e214*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x819d0bd0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x916d8210, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x916d8210, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5107ae0 [0065.811] FindClose (in: hFindFile=0x5107ae0 | out: hFindFile=0x5107ae0) returned 1 [0065.811] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0", nBufferLength=0x105, lpBuffer=0x31df7c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0", lpFilePart=0x0) returned 0x7e [0065.811] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\", nBufferLength=0x105, lpBuffer=0x31df50, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\", lpFilePart=0x0) returned 0x7f [0065.811] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\*", lpFindFileData=0x31e19c | out: lpFindFileData=0x31e19c*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x86e26950, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x871928f0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x871928f0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5107ae0 [0065.815] FindClose (in: hFindFile=0x5107ae0 | out: hFindFile=0x5107ae0) returned 1 [0065.816] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0", nBufferLength=0x105, lpBuffer=0x31df7c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0", lpFilePart=0x0) returned 0x7e [0065.816] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\", nBufferLength=0x105, lpBuffer=0x31df50, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\", lpFilePart=0x0) returned 0x7f [0065.816] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\*", lpFindFileData=0x31e19c | out: lpFindFileData=0x31e19c*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x86e26950, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x871928f0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x871928f0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5107ae0 [0065.817] FindClose (in: hFindFile=0x5107ae0 | out: hFindFile=0x5107ae0) returned 1 [0065.817] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\128.png", nBufferLength=0x105, lpBuffer=0x31de4c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\128.png", lpFilePart=0x0) returned 0x86 [0065.818] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\128.png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\128.png"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x178 [0065.819] GetFileType (hFile=0x178) returned 0x1 [0065.819] GetFileType (hFile=0x178) returned 0x1 [0065.819] GetFileSize (in: hFile=0x178, lpFileSizeHigh=0x31e448 | out: lpFileSizeHigh=0x31e448*=0x0) returned 0x1a33 [0065.819] ReadFile (in: hFile=0x178, lpBuffer=0x276fc38, nNumberOfBytesToRead=0x1a33, lpNumberOfBytesRead=0x31e3f4, lpOverlapped=0x0 | out: lpBuffer=0x276fc38*, lpNumberOfBytesRead=0x31e3f4*=0x1a33, lpOverlapped=0x0) returned 1 [0065.835] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\128.png", nBufferLength=0x105, lpBuffer=0x31de38, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\128.png", lpFilePart=0x0) returned 0x86 [0065.835] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\128.png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\128.png"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x178 [0065.836] GetFileType (hFile=0x178) returned 0x1 [0065.836] GetFileType (hFile=0x178) returned 0x1 [0065.836] WriteFile (in: hFile=0x178, lpBuffer=0x27c4d60*, nNumberOfBytesToWrite=0x1a40, lpNumberOfBytesWritten=0x31e3e8, lpOverlapped=0x0 | out: lpBuffer=0x27c4d60*, lpNumberOfBytesWritten=0x31e3e8*=0x1a40, lpOverlapped=0x0) returned 1 [0065.838] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\128.png", nBufferLength=0x105, lpBuffer=0x31df6c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\128.png", lpFilePart=0x0) returned 0x86 [0065.838] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\128.png", nBufferLength=0x105, lpBuffer=0x31df6c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\128.png", lpFilePart=0x0) returned 0x86 [0065.838] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\128.png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\128.png"), fInfoLevelId=0x0, lpFileInformation=0x31e448 | out: lpFileInformation=0x31e448*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x86e26950, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x871928f0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0xaafce20, ftLastWriteTime.dwHighDateTime=0x1d6eb7f, nFileSizeHigh=0x0, nFileSizeLow=0x1a40)) returned 1 [0065.838] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\128.png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\128.png"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\128.png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\128.png")) returned 1 [0065.838] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales", nBufferLength=0x105, lpBuffer=0x31df04, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales", lpFilePart=0x0) returned 0x87 [0065.838] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\", nBufferLength=0x105, lpBuffer=0x31ded8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\", lpFilePart=0x0) returned 0x88 [0065.838] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\*", lpFindFileData=0x31e124 | out: lpFindFileData=0x31e124*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x86e26950, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86fef9d0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86fef9d0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5107de0 [0065.862] FindClose (in: hFindFile=0x5107de0 | out: hFindFile=0x5107de0) returned 1 [0065.864] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales", nBufferLength=0x105, lpBuffer=0x31df04, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales", lpFilePart=0x0) returned 0x87 [0065.864] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\", nBufferLength=0x105, lpBuffer=0x31ded8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\", lpFilePart=0x0) returned 0x88 [0065.864] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\*", lpFindFileData=0x31e124 | out: lpFindFileData=0x31e124*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x86e26950, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86fef9d0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86fef9d0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5107de0 [0065.865] FindClose (in: hFindFile=0x5107de0 | out: hFindFile=0x5107de0) returned 1 [0065.865] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\ar", nBufferLength=0x105, lpBuffer=0x31de8c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\ar", lpFilePart=0x0) returned 0x8a [0065.865] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\ar\\", nBufferLength=0x105, lpBuffer=0x31de60, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\ar\\", lpFilePart=0x0) returned 0x8b [0065.865] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\ar\\*", lpFindFileData=0x31e0ac | out: lpFindFileData=0x31e0ac*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x86e4cab0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86e4cab0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86e4cab0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5107de0 [0065.866] FindClose (in: hFindFile=0x5107de0 | out: hFindFile=0x5107de0) returned 1 [0065.866] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\ar", nBufferLength=0x105, lpBuffer=0x31de8c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\ar", lpFilePart=0x0) returned 0x8a [0065.867] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\ar\\", nBufferLength=0x105, lpBuffer=0x31de60, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\ar\\", lpFilePart=0x0) returned 0x8b [0065.867] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\ar\\*", lpFindFileData=0x31e0ac | out: lpFindFileData=0x31e0ac*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x86e4cab0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86e4cab0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86e4cab0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5107de0 [0065.867] FindClose (in: hFindFile=0x5107de0 | out: hFindFile=0x5107de0) returned 1 [0065.867] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\bg", nBufferLength=0x105, lpBuffer=0x31de8c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\bg", lpFilePart=0x0) returned 0x8a [0065.867] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\bg\\", nBufferLength=0x105, lpBuffer=0x31de60, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\bg\\", lpFilePart=0x0) returned 0x8b [0065.867] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\bg\\*", lpFindFileData=0x31e0ac | out: lpFindFileData=0x31e0ac*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x86e4cab0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86e4cab0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86e4cab0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5107de0 [0065.868] FindClose (in: hFindFile=0x5107de0 | out: hFindFile=0x5107de0) returned 1 [0065.868] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\bg", nBufferLength=0x105, lpBuffer=0x31de8c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\bg", lpFilePart=0x0) returned 0x8a [0065.868] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\bg\\", nBufferLength=0x105, lpBuffer=0x31de60, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\bg\\", lpFilePart=0x0) returned 0x8b [0065.868] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\bg\\*", lpFindFileData=0x31e0ac | out: lpFindFileData=0x31e0ac*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x86e4cab0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86e4cab0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86e4cab0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5107de0 [0065.869] FindClose (in: hFindFile=0x5107de0 | out: hFindFile=0x5107de0) returned 1 [0065.869] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\ca", nBufferLength=0x105, lpBuffer=0x31de8c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\ca", lpFilePart=0x0) returned 0x8a [0065.869] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\ca\\", nBufferLength=0x105, lpBuffer=0x31de60, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\ca\\", lpFilePart=0x0) returned 0x8b [0065.869] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\ca\\*", lpFindFileData=0x31e0ac | out: lpFindFileData=0x31e0ac*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x86e4cab0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86e4cab0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86e4cab0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5107de0 [0065.869] FindClose (in: hFindFile=0x5107de0 | out: hFindFile=0x5107de0) returned 1 [0065.869] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\ca", nBufferLength=0x105, lpBuffer=0x31de8c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\ca", lpFilePart=0x0) returned 0x8a [0065.869] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\ca\\", nBufferLength=0x105, lpBuffer=0x31de60, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\ca\\", lpFilePart=0x0) returned 0x8b [0065.869] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\ca\\*", lpFindFileData=0x31e0ac | out: lpFindFileData=0x31e0ac*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x86e4cab0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86e4cab0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86e4cab0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5107de0 [0065.869] FindClose (in: hFindFile=0x5107de0 | out: hFindFile=0x5107de0) returned 1 [0065.869] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\cs", nBufferLength=0x105, lpBuffer=0x31de8c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\cs", lpFilePart=0x0) returned 0x8a [0065.869] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\cs\\", nBufferLength=0x105, lpBuffer=0x31de60, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\cs\\", lpFilePart=0x0) returned 0x8b [0065.869] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\cs\\*", lpFindFileData=0x31e0ac | out: lpFindFileData=0x31e0ac*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x86e4cab0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86e4cab0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86e4cab0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5107de0 [0065.870] FindClose (in: hFindFile=0x5107de0 | out: hFindFile=0x5107de0) returned 1 [0065.870] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\cs", nBufferLength=0x105, lpBuffer=0x31de8c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\cs", lpFilePart=0x0) returned 0x8a [0065.870] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\cs\\", nBufferLength=0x105, lpBuffer=0x31de60, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\cs\\", lpFilePart=0x0) returned 0x8b [0065.871] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\cs\\*", lpFindFileData=0x31e0ac | out: lpFindFileData=0x31e0ac*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x86e4cab0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86e4cab0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86e4cab0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5107de0 [0065.871] FindClose (in: hFindFile=0x5107de0 | out: hFindFile=0x5107de0) returned 1 [0065.871] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\da", nBufferLength=0x105, lpBuffer=0x31de8c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\da", lpFilePart=0x0) returned 0x8a [0065.871] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\da\\", nBufferLength=0x105, lpBuffer=0x31de60, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\da\\", lpFilePart=0x0) returned 0x8b [0065.871] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\da\\*", lpFindFileData=0x31e0ac | out: lpFindFileData=0x31e0ac*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x86e4cab0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86e4cab0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86e4cab0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5107de0 [0065.871] FindClose (in: hFindFile=0x5107de0 | out: hFindFile=0x5107de0) returned 1 [0065.871] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\da", nBufferLength=0x105, lpBuffer=0x31de8c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\da", lpFilePart=0x0) returned 0x8a [0065.871] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\da\\", nBufferLength=0x105, lpBuffer=0x31de60, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\da\\", lpFilePart=0x0) returned 0x8b [0065.871] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\da\\*", lpFindFileData=0x31e0ac | out: lpFindFileData=0x31e0ac*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x86e4cab0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86e4cab0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86e4cab0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5107de0 [0065.871] FindClose (in: hFindFile=0x5107de0 | out: hFindFile=0x5107de0) returned 1 [0065.871] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\de", nBufferLength=0x105, lpBuffer=0x31de8c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\de", lpFilePart=0x0) returned 0x8a [0065.871] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\de\\", nBufferLength=0x105, lpBuffer=0x31de60, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\de\\", lpFilePart=0x0) returned 0x8b [0065.872] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\de\\*", lpFindFileData=0x31e0ac | out: lpFindFileData=0x31e0ac*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x86e72c10, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86e72c10, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86e72c10, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5107de0 [0065.872] FindClose (in: hFindFile=0x5107de0 | out: hFindFile=0x5107de0) returned 1 [0065.872] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\de", nBufferLength=0x105, lpBuffer=0x31de8c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\de", lpFilePart=0x0) returned 0x8a [0065.872] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\de\\", nBufferLength=0x105, lpBuffer=0x31de60, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\de\\", lpFilePart=0x0) returned 0x8b [0065.872] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\de\\*", lpFindFileData=0x31e0ac | out: lpFindFileData=0x31e0ac*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x86e72c10, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86e72c10, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86e72c10, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5107de0 [0065.873] FindClose (in: hFindFile=0x5107de0 | out: hFindFile=0x5107de0) returned 1 [0065.873] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\el", nBufferLength=0x105, lpBuffer=0x31de8c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\el", lpFilePart=0x0) returned 0x8a [0065.873] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\el\\", nBufferLength=0x105, lpBuffer=0x31de60, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\el\\", lpFilePart=0x0) returned 0x8b [0065.873] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\el\\*", lpFindFileData=0x31e0ac | out: lpFindFileData=0x31e0ac*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x86e72c10, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86e72c10, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86e72c10, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5107de0 [0065.873] FindClose (in: hFindFile=0x5107de0 | out: hFindFile=0x5107de0) returned 1 [0065.873] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\el", nBufferLength=0x105, lpBuffer=0x31de8c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\el", lpFilePart=0x0) returned 0x8a [0065.873] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\el\\", nBufferLength=0x105, lpBuffer=0x31de60, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\el\\", lpFilePart=0x0) returned 0x8b [0065.873] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\el\\*", lpFindFileData=0x31e0ac | out: lpFindFileData=0x31e0ac*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x86e72c10, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86e72c10, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86e72c10, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5107de0 [0065.873] FindClose (in: hFindFile=0x5107de0 | out: hFindFile=0x5107de0) returned 1 [0065.873] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\en_GB", nBufferLength=0x105, lpBuffer=0x31de8c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\en_GB", lpFilePart=0x0) returned 0x8d [0065.873] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\en_GB\\", nBufferLength=0x105, lpBuffer=0x31de60, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\en_GB\\", lpFilePart=0x0) returned 0x8e [0065.874] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\en_GB\\*", lpFindFileData=0x31e0ac | out: lpFindFileData=0x31e0ac*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x86e72c10, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86e72c10, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86e72c10, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5107de0 [0065.874] FindClose (in: hFindFile=0x5107de0 | out: hFindFile=0x5107de0) returned 1 [0065.874] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\en_GB", nBufferLength=0x105, lpBuffer=0x31de8c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\en_GB", lpFilePart=0x0) returned 0x8d [0065.874] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\en_GB\\", nBufferLength=0x105, lpBuffer=0x31de60, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\en_GB\\", lpFilePart=0x0) returned 0x8e [0065.875] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\en_GB\\*", lpFindFileData=0x31e0ac | out: lpFindFileData=0x31e0ac*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x86e72c10, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86e72c10, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86e72c10, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5107de0 [0065.875] FindClose (in: hFindFile=0x5107de0 | out: hFindFile=0x5107de0) returned 1 [0065.875] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\en_US", nBufferLength=0x105, lpBuffer=0x31de8c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\en_US", lpFilePart=0x0) returned 0x8d [0065.875] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\en_US\\", nBufferLength=0x105, lpBuffer=0x31de60, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\en_US\\", lpFilePart=0x0) returned 0x8e [0065.875] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\en_US\\*", lpFindFileData=0x31e0ac | out: lpFindFileData=0x31e0ac*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x86e72c10, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86e98d70, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86e98d70, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5107de0 [0065.875] FindClose (in: hFindFile=0x5107de0 | out: hFindFile=0x5107de0) returned 1 [0065.875] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\en_US", nBufferLength=0x105, lpBuffer=0x31de8c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\en_US", lpFilePart=0x0) returned 0x8d [0065.875] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\en_US\\", nBufferLength=0x105, lpBuffer=0x31de60, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\en_US\\", lpFilePart=0x0) returned 0x8e [0065.875] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\en_US\\*", lpFindFileData=0x31e0ac | out: lpFindFileData=0x31e0ac*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x86e72c10, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86e98d70, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86e98d70, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5107de0 [0065.875] FindClose (in: hFindFile=0x5107de0 | out: hFindFile=0x5107de0) returned 1 [0065.875] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\es", nBufferLength=0x105, lpBuffer=0x31de8c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\es", lpFilePart=0x0) returned 0x8a [0065.876] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\es\\", nBufferLength=0x105, lpBuffer=0x31de60, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\es\\", lpFilePart=0x0) returned 0x8b [0065.876] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\es\\*", lpFindFileData=0x31e0ac | out: lpFindFileData=0x31e0ac*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x86e98d70, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86e98d70, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86e98d70, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5107de0 [0065.879] FindClose (in: hFindFile=0x5107de0 | out: hFindFile=0x5107de0) returned 1 [0065.879] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\es", nBufferLength=0x105, lpBuffer=0x31de8c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\es", lpFilePart=0x0) returned 0x8a [0065.879] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\es\\", nBufferLength=0x105, lpBuffer=0x31de60, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\es\\", lpFilePart=0x0) returned 0x8b [0065.879] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\es\\*", lpFindFileData=0x31e0ac | out: lpFindFileData=0x31e0ac*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x86e98d70, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86e98d70, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86e98d70, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5107de0 [0065.879] FindClose (in: hFindFile=0x5107de0 | out: hFindFile=0x5107de0) returned 1 [0065.879] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\es_419", nBufferLength=0x105, lpBuffer=0x31de8c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\es_419", lpFilePart=0x0) returned 0x8e [0065.879] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\es_419\\", nBufferLength=0x105, lpBuffer=0x31de60, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\es_419\\", lpFilePart=0x0) returned 0x8f [0065.879] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\es_419\\*", lpFindFileData=0x31e0ac | out: lpFindFileData=0x31e0ac*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x86e98d70, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86e98d70, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86e98d70, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5107de0 [0065.880] FindClose (in: hFindFile=0x5107de0 | out: hFindFile=0x5107de0) returned 1 [0065.880] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\es_419", nBufferLength=0x105, lpBuffer=0x31de8c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\es_419", lpFilePart=0x0) returned 0x8e [0065.880] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\es_419\\", nBufferLength=0x105, lpBuffer=0x31de60, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\es_419\\", lpFilePart=0x0) returned 0x8f [0065.880] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\es_419\\*", lpFindFileData=0x31e0ac | out: lpFindFileData=0x31e0ac*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x86e98d70, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86e98d70, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86e98d70, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5107de0 [0065.880] FindClose (in: hFindFile=0x5107de0 | out: hFindFile=0x5107de0) returned 1 [0065.880] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\et", nBufferLength=0x105, lpBuffer=0x31de8c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\et", lpFilePart=0x0) returned 0x8a [0065.880] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\et\\", nBufferLength=0x105, lpBuffer=0x31de60, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\et\\", lpFilePart=0x0) returned 0x8b [0065.880] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\et\\*", lpFindFileData=0x31e0ac | out: lpFindFileData=0x31e0ac*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x86e98d70, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86e98d70, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86e98d70, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5107de0 [0065.881] FindClose (in: hFindFile=0x5107de0 | out: hFindFile=0x5107de0) returned 1 [0065.881] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\et", nBufferLength=0x105, lpBuffer=0x31de8c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\et", lpFilePart=0x0) returned 0x8a [0065.881] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\et\\", nBufferLength=0x105, lpBuffer=0x31de60, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\et\\", lpFilePart=0x0) returned 0x8b [0065.881] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\et\\*", lpFindFileData=0x31e0ac | out: lpFindFileData=0x31e0ac*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x86e98d70, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86e98d70, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86e98d70, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5107de0 [0065.881] FindClose (in: hFindFile=0x5107de0 | out: hFindFile=0x5107de0) returned 1 [0065.881] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\eu", nBufferLength=0x105, lpBuffer=0x31de8c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\eu", lpFilePart=0x0) returned 0x8a [0065.881] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\eu\\", nBufferLength=0x105, lpBuffer=0x31de60, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\eu\\", lpFilePart=0x0) returned 0x8b [0065.881] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\eu\\*", lpFindFileData=0x31e0ac | out: lpFindFileData=0x31e0ac*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x86ebeed0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86ebeed0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86ebeed0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5107de0 [0065.882] FindClose (in: hFindFile=0x5107de0 | out: hFindFile=0x5107de0) returned 1 [0065.935] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\128.png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\128.png"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x178 [0065.938] GetFileType (hFile=0x178) returned 0x1 [0065.939] GetFileType (hFile=0x178) returned 0x1 [0065.939] GetFileSize (in: hFile=0x178, lpFileSizeHigh=0x31e448 | out: lpFileSizeHigh=0x31e448*=0x0) returned 0xd4e [0065.939] ReadFile (in: hFile=0x178, lpBuffer=0x2655810, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x31e3f4, lpOverlapped=0x0 | out: lpBuffer=0x2655810*, lpNumberOfBytesRead=0x31e3f4*=0xd4e, lpOverlapped=0x0) returned 1 [0065.980] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\128.png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\128.png"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x178 [0065.980] GetFileType (hFile=0x178) returned 0x1 [0065.981] GetFileType (hFile=0x178) returned 0x1 [0065.981] WriteFile (in: hFile=0x178, lpBuffer=0x26a7b84*, nNumberOfBytesToWrite=0xd50, lpNumberOfBytesWritten=0x31e3bc, lpOverlapped=0x0 | out: lpBuffer=0x26a7b84*, lpNumberOfBytesWritten=0x31e3bc*=0xd50, lpOverlapped=0x0) returned 1 [0065.982] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\128.png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\128.png"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\128.png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\128.png")) returned 1 [0066.013] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\icon_128.png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\icon_128.png"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x178 [0066.015] GetFileType (hFile=0x178) returned 0x1 [0066.015] GetFileType (hFile=0x178) returned 0x1 [0066.015] GetFileSize (in: hFile=0x178, lpFileSizeHigh=0x31e448 | out: lpFileSizeHigh=0x31e448*=0x0) returned 0xd47 [0066.015] ReadFile (in: hFile=0x178, lpBuffer=0x272943c, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x31e3f4, lpOverlapped=0x0 | out: lpBuffer=0x272943c*, lpNumberOfBytesRead=0x31e3f4*=0xd47, lpOverlapped=0x0) returned 1 [0066.030] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\icon_128.png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\icon_128.png"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x178 [0066.031] GetFileType (hFile=0x178) returned 0x1 [0066.031] GetFileType (hFile=0x178) returned 0x1 [0066.031] WriteFile (in: hFile=0x178, lpBuffer=0x277b670*, nNumberOfBytesToWrite=0xd50, lpNumberOfBytesWritten=0x31e3bc, lpOverlapped=0x0 | out: lpBuffer=0x277b670*, lpNumberOfBytesWritten=0x31e3bc*=0xd50, lpOverlapped=0x0) returned 1 [0066.032] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\icon_128.png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\icon_128.png"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\icon_128.png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\icon_128.png")) returned 1 [0066.032] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\icon_16.png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\icon_16.png"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x178 [0066.033] GetFileType (hFile=0x178) returned 0x1 [0066.033] GetFileType (hFile=0x178) returned 0x1 [0066.033] GetFileSize (in: hFile=0x178, lpFileSizeHigh=0x31e448 | out: lpFileSizeHigh=0x31e448*=0x0) returned 0x9d [0066.033] ReadFile (in: hFile=0x178, lpBuffer=0x277cb28, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x31e3f4, lpOverlapped=0x0 | out: lpBuffer=0x277cb28*, lpNumberOfBytesRead=0x31e3f4*=0x9d, lpOverlapped=0x0) returned 1 [0066.047] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\icon_16.png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\icon_16.png"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x178 [0066.048] GetFileType (hFile=0x178) returned 0x1 [0066.048] GetFileType (hFile=0x178) returned 0x1 [0066.049] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\icon_16.png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\icon_16.png"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\icon_16.png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\icon_16.png")) returned 1 [0066.050] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\main.html" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\main.html"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x178 [0066.050] GetFileType (hFile=0x178) returned 0x1 [0066.050] GetFileType (hFile=0x178) returned 0x1 [0066.050] GetFileSize (in: hFile=0x178, lpFileSizeHigh=0x31e448 | out: lpFileSizeHigh=0x31e448*=0x0) returned 0x5c [0066.050] ReadFile (in: hFile=0x178, lpBuffer=0x27cc184, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x31e3f4, lpOverlapped=0x0 | out: lpBuffer=0x27cc184*, lpNumberOfBytesRead=0x31e3f4*=0x5c, lpOverlapped=0x0) returned 1 [0066.064] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\main.html" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\main.html"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x178 [0066.065] GetFileType (hFile=0x178) returned 0x1 [0066.065] GetFileType (hFile=0x178) returned 0x1 [0066.066] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\main.html" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\main.html"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\main.html" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\main.html")) returned 1 [0066.074] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\ca\\*", lpFindFileData=0x31e0ac | out: lpFindFileData=0x31e0ac*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x84062460, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x84067280, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x84067280, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5107fa0 [0066.075] FindClose (in: hFindFile=0x5107fa0 | out: hFindFile=0x5107fa0) returned 1 [0066.075] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\cs\\*", lpFindFileData=0x31e0ac | out: lpFindFileData=0x31e0ac*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x8406e7b0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x8407f920, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x8407f920, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5107fa0 [0066.076] FindNextFileW (in: hFindFile=0x5107fa0, lpFindFileData=0x31e0bc | out: lpFindFileData=0x31e0bc*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x8406e7b0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x8407f920, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x8407f920, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0066.076] FindNextFileW (in: hFindFile=0x5107fa0, lpFindFileData=0x31e0bc | out: lpFindFileData=0x31e0bc*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x8407f920, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x84082030, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x844b1ca0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0xda, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1 [0066.076] FindNextFileW (in: hFindFile=0x5107fa0, lpFindFileData=0x31e0bc | out: lpFindFileData=0x31e0bc*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0066.076] FindClose (in: hFindFile=0x5107fa0 | out: hFindFile=0x5107fa0) returned 1 [0066.076] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e344) returned 1 [0066.076] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e350) returned 1 [0066.076] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e384) returned 1 [0066.077] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\cs\\*", lpFindFileData=0x31e0ac | out: lpFindFileData=0x31e0ac*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x8406e7b0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x8407f920, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x8407f920, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5107fa0 [0066.077] FindNextFileW (in: hFindFile=0x5107fa0, lpFindFileData=0x31e0bc | out: lpFindFileData=0x31e0bc*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x8406e7b0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x8407f920, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x8407f920, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0066.077] FindNextFileW (in: hFindFile=0x5107fa0, lpFindFileData=0x31e0bc | out: lpFindFileData=0x31e0bc*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x8407f920, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x84082030, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x844b1ca0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0xda, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1 [0066.077] FindNextFileW (in: hFindFile=0x5107fa0, lpFindFileData=0x31e0bc | out: lpFindFileData=0x31e0bc*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x8407f920, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x84082030, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x844b1ca0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0xda, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 0 [0066.077] FindClose (in: hFindFile=0x5107fa0 | out: hFindFile=0x5107fa0) returned 1 [0066.077] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e344) returned 1 [0066.077] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e350) returned 1 [0066.077] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e384) returned 1 [0066.077] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\da\\*", lpFindFileData=0x31e0ac | out: lpFindFileData=0x31e0ac*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x8408bc70, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x84090a90, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x84090a90, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5107fa0 [0066.078] FindNextFileW (in: hFindFile=0x5107fa0, lpFindFileData=0x31e0bc | out: lpFindFileData=0x31e0bc*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x8408bc70, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x84090a90, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x84090a90, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0066.078] FindNextFileW (in: hFindFile=0x5107fa0, lpFindFileData=0x31e0bc | out: lpFindFileData=0x31e0bc*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x84090a90, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x84090a90, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x844b1ca0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0xcf, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1 [0066.078] FindNextFileW (in: hFindFile=0x5107fa0, lpFindFileData=0x31e0bc | out: lpFindFileData=0x31e0bc*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0066.078] FindClose (in: hFindFile=0x5107fa0 | out: hFindFile=0x5107fa0) returned 1 [0066.078] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e344) returned 1 [0066.078] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e350) returned 1 [0066.078] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e384) returned 1 [0066.078] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\da\\*", lpFindFileData=0x31e0ac | out: lpFindFileData=0x31e0ac*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x8408bc70, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x84090a90, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x84090a90, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5107fa0 [0066.079] FindNextFileW (in: hFindFile=0x5107fa0, lpFindFileData=0x31e0bc | out: lpFindFileData=0x31e0bc*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x8408bc70, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x84090a90, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x84090a90, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0066.079] FindNextFileW (in: hFindFile=0x5107fa0, lpFindFileData=0x31e0bc | out: lpFindFileData=0x31e0bc*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x84090a90, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x84090a90, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x844b1ca0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0xcf, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1 [0066.079] FindNextFileW (in: hFindFile=0x5107fa0, lpFindFileData=0x31e0bc | out: lpFindFileData=0x31e0bc*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x84090a90, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x84090a90, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x844b1ca0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0xcf, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 0 [0066.079] FindClose (in: hFindFile=0x5107fa0 | out: hFindFile=0x5107fa0) returned 1 [0066.079] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e344) returned 1 [0066.079] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e350) returned 1 [0066.079] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e384) returned 1 [0066.079] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\de\\*", lpFindFileData=0x31e0ac | out: lpFindFileData=0x31e0ac*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x84097fc0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x8409cde0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x8409cde0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5107fa0 [0066.080] FindNextFileW (in: hFindFile=0x5107fa0, lpFindFileData=0x31e0bc | out: lpFindFileData=0x31e0bc*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x84097fc0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x8409cde0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x8409cde0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0066.080] FindNextFileW (in: hFindFile=0x5107fa0, lpFindFileData=0x31e0bc | out: lpFindFileData=0x31e0bc*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x8409cde0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x8409cde0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x844b1ca0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0xdc, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1 [0066.080] FindNextFileW (in: hFindFile=0x5107fa0, lpFindFileData=0x31e0bc | out: lpFindFileData=0x31e0bc*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0066.081] FindClose (in: hFindFile=0x5107fa0 | out: hFindFile=0x5107fa0) returned 1 [0066.081] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e344) returned 1 [0066.081] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e350) returned 1 [0066.081] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e384) returned 1 [0066.081] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\de\\*", lpFindFileData=0x31e0ac | out: lpFindFileData=0x31e0ac*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x84097fc0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x8409cde0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x8409cde0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5107fa0 [0066.081] FindNextFileW (in: hFindFile=0x5107fa0, lpFindFileData=0x31e0bc | out: lpFindFileData=0x31e0bc*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x84097fc0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x8409cde0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x8409cde0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0066.081] FindNextFileW (in: hFindFile=0x5107fa0, lpFindFileData=0x31e0bc | out: lpFindFileData=0x31e0bc*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x8409cde0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x8409cde0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x844b1ca0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0xdc, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1 [0066.081] FindNextFileW (in: hFindFile=0x5107fa0, lpFindFileData=0x31e0bc | out: lpFindFileData=0x31e0bc*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x8409cde0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x8409cde0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x844b1ca0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0xdc, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 0 [0066.082] FindClose (in: hFindFile=0x5107fa0 | out: hFindFile=0x5107fa0) returned 1 [0066.082] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e344) returned 1 [0066.082] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e350) returned 1 [0066.082] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e384) returned 1 [0066.082] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\el\\*", lpFindFileData=0x31e0ac | out: lpFindFileData=0x31e0ac*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x841147f0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x84116f00, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x84116f00, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5107fa0 [0066.082] FindNextFileW (in: hFindFile=0x5107fa0, lpFindFileData=0x31e0bc | out: lpFindFileData=0x31e0bc*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x841147f0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x84116f00, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x84116f00, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0066.082] FindNextFileW (in: hFindFile=0x5107fa0, lpFindFileData=0x31e0bc | out: lpFindFileData=0x31e0bc*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x84116f00, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x84116f00, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x844b43b0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x130, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1 [0066.083] FindNextFileW (in: hFindFile=0x5107fa0, lpFindFileData=0x31e0bc | out: lpFindFileData=0x31e0bc*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0066.083] FindClose (in: hFindFile=0x5107fa0 | out: hFindFile=0x5107fa0) returned 1 [0066.083] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e344) returned 1 [0066.083] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e350) returned 1 [0066.083] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e384) returned 1 [0066.083] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\el\\*", lpFindFileData=0x31e0ac | out: lpFindFileData=0x31e0ac*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x841147f0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x84116f00, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x84116f00, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5107fa0 [0066.083] FindNextFileW (in: hFindFile=0x5107fa0, lpFindFileData=0x31e0bc | out: lpFindFileData=0x31e0bc*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x841147f0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x84116f00, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x84116f00, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0066.083] FindNextFileW (in: hFindFile=0x5107fa0, lpFindFileData=0x31e0bc | out: lpFindFileData=0x31e0bc*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x84116f00, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x84116f00, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x844b43b0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x130, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1 [0066.083] FindNextFileW (in: hFindFile=0x5107fa0, lpFindFileData=0x31e0bc | out: lpFindFileData=0x31e0bc*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x84116f00, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x84116f00, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x844b43b0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x130, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 0 [0066.084] FindClose (in: hFindFile=0x5107fa0 | out: hFindFile=0x5107fa0) returned 1 [0066.084] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e344) returned 1 [0066.084] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e350) returned 1 [0066.084] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e384) returned 1 [0066.084] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\en_GB\\*", lpFindFileData=0x31e0ac | out: lpFindFileData=0x31e0ac*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x8411bd20, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x84120b40, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x84120b40, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5107fa0 [0066.085] FindNextFileW (in: hFindFile=0x5107fa0, lpFindFileData=0x31e0bc | out: lpFindFileData=0x31e0bc*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x8411bd20, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x84120b40, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x84120b40, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0066.085] FindNextFileW (in: hFindFile=0x5107fa0, lpFindFileData=0x31e0bc | out: lpFindFileData=0x31e0bc*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x84120b40, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x84120b40, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x844b43b0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0xd5, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1 [0066.085] FindNextFileW (in: hFindFile=0x5107fa0, lpFindFileData=0x31e0bc | out: lpFindFileData=0x31e0bc*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0066.085] FindClose (in: hFindFile=0x5107fa0 | out: hFindFile=0x5107fa0) returned 1 [0066.085] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e344) returned 1 [0066.085] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e350) returned 1 [0066.085] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e384) returned 1 [0066.085] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\en_GB\\*", lpFindFileData=0x31e0ac | out: lpFindFileData=0x31e0ac*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x8411bd20, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x84120b40, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x84120b40, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5107fa0 [0066.086] FindNextFileW (in: hFindFile=0x5107fa0, lpFindFileData=0x31e0bc | out: lpFindFileData=0x31e0bc*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x8411bd20, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x84120b40, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x84120b40, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0066.086] FindNextFileW (in: hFindFile=0x5107fa0, lpFindFileData=0x31e0bc | out: lpFindFileData=0x31e0bc*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x84120b40, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x84120b40, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x844b43b0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0xd5, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1 [0066.086] FindNextFileW (in: hFindFile=0x5107fa0, lpFindFileData=0x31e0bc | out: lpFindFileData=0x31e0bc*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x84120b40, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x84120b40, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x844b43b0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0xd5, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 0 [0066.086] FindClose (in: hFindFile=0x5107fa0 | out: hFindFile=0x5107fa0) returned 1 [0066.086] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e344) returned 1 [0066.086] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e350) returned 1 [0066.086] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e384) returned 1 [0066.086] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\en_US\\*", lpFindFileData=0x31e0ac | out: lpFindFileData=0x31e0ac*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x8412a780, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x8412ce90, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x8412ce90, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5107fa0 [0066.087] FindNextFileW (in: hFindFile=0x5107fa0, lpFindFileData=0x31e0bc | out: lpFindFileData=0x31e0bc*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x8412a780, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x8412ce90, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x8412ce90, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0066.087] FindNextFileW (in: hFindFile=0x5107fa0, lpFindFileData=0x31e0bc | out: lpFindFileData=0x31e0bc*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x8412ce90, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x8412ce90, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x844b43b0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0xd5, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1 [0066.087] FindNextFileW (in: hFindFile=0x5107fa0, lpFindFileData=0x31e0bc | out: lpFindFileData=0x31e0bc*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0066.087] FindClose (in: hFindFile=0x5107fa0 | out: hFindFile=0x5107fa0) returned 1 [0066.087] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e344) returned 1 [0066.087] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e350) returned 1 [0066.087] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e384) returned 1 [0066.087] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\en_US\\*", lpFindFileData=0x31e0ac | out: lpFindFileData=0x31e0ac*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x8412a780, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x8412ce90, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x8412ce90, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5107fa0 [0066.087] FindNextFileW (in: hFindFile=0x5107fa0, lpFindFileData=0x31e0bc | out: lpFindFileData=0x31e0bc*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x8412a780, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x8412ce90, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x8412ce90, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0066.088] FindNextFileW (in: hFindFile=0x5107fa0, lpFindFileData=0x31e0bc | out: lpFindFileData=0x31e0bc*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x8412ce90, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x8412ce90, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x844b43b0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0xd5, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1 [0066.088] FindNextFileW (in: hFindFile=0x5107fa0, lpFindFileData=0x31e0bc | out: lpFindFileData=0x31e0bc*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x8412ce90, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x8412ce90, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x844b43b0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0xd5, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 0 [0066.088] FindClose (in: hFindFile=0x5107fa0 | out: hFindFile=0x5107fa0) returned 1 [0066.088] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e344) returned 1 [0066.088] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e350) returned 1 [0066.088] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e384) returned 1 [0066.088] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\es\\*", lpFindFileData=0x31e0ac | out: lpFindFileData=0x31e0ac*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x84131cb0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x841343c0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x841343c0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5107fa0 [0066.089] FindNextFileW (in: hFindFile=0x5107fa0, lpFindFileData=0x31e0bc | out: lpFindFileData=0x31e0bc*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x84131cb0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x841343c0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x841343c0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0066.089] FindNextFileW (in: hFindFile=0x5107fa0, lpFindFileData=0x31e0bc | out: lpFindFileData=0x31e0bc*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x841343c0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x841343c0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x844b43b0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0xe5, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1 [0066.089] FindNextFileW (in: hFindFile=0x5107fa0, lpFindFileData=0x31e0bc | out: lpFindFileData=0x31e0bc*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0066.089] FindClose (in: hFindFile=0x5107fa0 | out: hFindFile=0x5107fa0) returned 1 [0066.089] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e344) returned 1 [0066.089] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e350) returned 1 [0066.089] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e384) returned 1 [0066.090] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\es\\*", lpFindFileData=0x31e0ac | out: lpFindFileData=0x31e0ac*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x84131cb0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x841343c0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x841343c0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5107fa0 [0066.090] FindNextFileW (in: hFindFile=0x5107fa0, lpFindFileData=0x31e0bc | out: lpFindFileData=0x31e0bc*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x84131cb0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x841343c0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x841343c0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0066.090] FindNextFileW (in: hFindFile=0x5107fa0, lpFindFileData=0x31e0bc | out: lpFindFileData=0x31e0bc*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x841343c0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x841343c0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x844b43b0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0xe5, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1 [0066.090] FindNextFileW (in: hFindFile=0x5107fa0, lpFindFileData=0x31e0bc | out: lpFindFileData=0x31e0bc*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x841343c0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x841343c0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x844b43b0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0xe5, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 0 [0066.090] FindClose (in: hFindFile=0x5107fa0 | out: hFindFile=0x5107fa0) returned 1 [0066.090] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e344) returned 1 [0066.090] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e350) returned 1 [0066.090] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e384) returned 1 [0066.091] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\es_419\\*", lpFindFileData=0x31e0ac | out: lpFindFileData=0x31e0ac*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x841391e0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x8413b8f0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x8413b8f0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5107fa0 [0066.091] FindNextFileW (in: hFindFile=0x5107fa0, lpFindFileData=0x31e0bc | out: lpFindFileData=0x31e0bc*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x841391e0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x8413b8f0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x8413b8f0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0066.091] FindNextFileW (in: hFindFile=0x5107fa0, lpFindFileData=0x31e0bc | out: lpFindFileData=0x31e0bc*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x8413b8f0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x8413b8f0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x844b43b0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0xe5, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1 [0066.091] FindNextFileW (in: hFindFile=0x5107fa0, lpFindFileData=0x31e0bc | out: lpFindFileData=0x31e0bc*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0066.091] FindClose (in: hFindFile=0x5107fa0 | out: hFindFile=0x5107fa0) returned 1 [0066.091] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e344) returned 1 [0066.091] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e350) returned 1 [0066.091] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e384) returned 1 [0066.091] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\es_419\\*", lpFindFileData=0x31e0ac | out: lpFindFileData=0x31e0ac*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x841391e0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x8413b8f0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x8413b8f0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5107fa0 [0066.092] FindNextFileW (in: hFindFile=0x5107fa0, lpFindFileData=0x31e0bc | out: lpFindFileData=0x31e0bc*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x841391e0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x8413b8f0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x8413b8f0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0066.092] FindNextFileW (in: hFindFile=0x5107fa0, lpFindFileData=0x31e0bc | out: lpFindFileData=0x31e0bc*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x8413b8f0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x8413b8f0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x844b43b0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0xe5, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1 [0066.092] FindNextFileW (in: hFindFile=0x5107fa0, lpFindFileData=0x31e0bc | out: lpFindFileData=0x31e0bc*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x8413b8f0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x8413b8f0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x844b43b0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0xe5, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 0 [0066.092] FindClose (in: hFindFile=0x5107fa0 | out: hFindFile=0x5107fa0) returned 1 [0066.092] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e344) returned 1 [0066.092] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e350) returned 1 [0066.092] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e384) returned 1 [0066.092] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\et\\*", lpFindFileData=0x31e0ac | out: lpFindFileData=0x31e0ac*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x84140710, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x84142e20, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x84142e20, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5107fa0 [0066.093] FindNextFileW (in: hFindFile=0x5107fa0, lpFindFileData=0x31e0bc | out: lpFindFileData=0x31e0bc*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x84140710, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x84142e20, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x84142e20, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0066.093] FindNextFileW (in: hFindFile=0x5107fa0, lpFindFileData=0x31e0bc | out: lpFindFileData=0x31e0bc*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x84142e20, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x84142e20, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x844b43b0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0xe2, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1 [0066.094] FindNextFileW (in: hFindFile=0x5107fa0, lpFindFileData=0x31e0bc | out: lpFindFileData=0x31e0bc*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0066.094] FindClose (in: hFindFile=0x5107fa0 | out: hFindFile=0x5107fa0) returned 1 [0066.094] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e344) returned 1 [0066.094] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e350) returned 1 [0066.094] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e384) returned 1 [0066.094] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\et\\*", lpFindFileData=0x31e0ac | out: lpFindFileData=0x31e0ac*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x84140710, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x84142e20, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x84142e20, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5107fa0 [0066.094] FindNextFileW (in: hFindFile=0x5107fa0, lpFindFileData=0x31e0bc | out: lpFindFileData=0x31e0bc*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x84140710, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x84142e20, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x84142e20, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0066.094] FindNextFileW (in: hFindFile=0x5107fa0, lpFindFileData=0x31e0bc | out: lpFindFileData=0x31e0bc*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x84142e20, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x84142e20, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x844b43b0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0xe2, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1 [0066.094] FindNextFileW (in: hFindFile=0x5107fa0, lpFindFileData=0x31e0bc | out: lpFindFileData=0x31e0bc*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x84142e20, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x84142e20, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x844b43b0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0xe2, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 0 [0066.095] FindClose (in: hFindFile=0x5107fa0 | out: hFindFile=0x5107fa0) returned 1 [0066.095] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e344) returned 1 [0066.095] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e350) returned 1 [0066.095] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e384) returned 1 [0066.095] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\fi\\*", lpFindFileData=0x31e0ac | out: lpFindFileData=0x31e0ac*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x84147c40, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x8414a350, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x8414a350, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5107fa0 [0066.095] FindNextFileW (in: hFindFile=0x5107fa0, lpFindFileData=0x31e0bc | out: lpFindFileData=0x31e0bc*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x84147c40, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x8414a350, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x8414a350, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0066.095] FindNextFileW (in: hFindFile=0x5107fa0, lpFindFileData=0x31e0bc | out: lpFindFileData=0x31e0bc*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x8414a350, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x8414f170, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x844b43b0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0xdc, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1 [0066.095] FindNextFileW (in: hFindFile=0x5107fa0, lpFindFileData=0x31e0bc | out: lpFindFileData=0x31e0bc*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0066.096] FindClose (in: hFindFile=0x5107fa0 | out: hFindFile=0x5107fa0) returned 1 [0066.096] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e344) returned 1 [0066.096] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e350) returned 1 [0066.096] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e384) returned 1 [0066.096] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\fi\\*", lpFindFileData=0x31e0ac | out: lpFindFileData=0x31e0ac*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x84147c40, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x8414a350, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x8414a350, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5107fa0 [0066.096] FindNextFileW (in: hFindFile=0x5107fa0, lpFindFileData=0x31e0bc | out: lpFindFileData=0x31e0bc*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x84147c40, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x8414a350, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x8414a350, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0066.096] FindNextFileW (in: hFindFile=0x5107fa0, lpFindFileData=0x31e0bc | out: lpFindFileData=0x31e0bc*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x8414a350, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x8414f170, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x844b43b0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0xdc, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1 [0066.096] FindNextFileW (in: hFindFile=0x5107fa0, lpFindFileData=0x31e0bc | out: lpFindFileData=0x31e0bc*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x8414a350, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x8414f170, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x844b43b0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0xdc, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 0 [0066.099] FindClose (in: hFindFile=0x5107fa0 | out: hFindFile=0x5107fa0) returned 1 [0066.099] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e344) returned 1 [0066.099] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e350) returned 1 [0066.099] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e384) returned 1 [0066.099] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\fil", nBufferLength=0x105, lpBuffer=0x31de8c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\fil", lpFilePart=0x0) returned 0x8a [0066.099] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\fil\\", nBufferLength=0x105, lpBuffer=0x31de60, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\fil\\", lpFilePart=0x0) returned 0x8b [0066.100] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\fil\\*", lpFindFileData=0x31e0ac | out: lpFindFileData=0x31e0ac*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x84153f90, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x841566a0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x841566a0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5107fa0 [0066.101] FindNextFileW (in: hFindFile=0x5107fa0, lpFindFileData=0x31e0bc | out: lpFindFileData=0x31e0bc*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x84153f90, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x841566a0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x841566a0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0066.101] FindNextFileW (in: hFindFile=0x5107fa0, lpFindFileData=0x31e0bc | out: lpFindFileData=0x31e0bc*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x841566a0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x841566a0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x844b43b0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0xdf, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1 [0066.101] FindNextFileW (in: hFindFile=0x5107fa0, lpFindFileData=0x31e0bc | out: lpFindFileData=0x31e0bc*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0066.101] FindClose (in: hFindFile=0x5107fa0 | out: hFindFile=0x5107fa0) returned 1 [0066.101] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e344) returned 1 [0066.101] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e350) returned 1 [0066.101] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e384) returned 1 [0066.101] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\fil", nBufferLength=0x105, lpBuffer=0x31de8c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\fil", lpFilePart=0x0) returned 0x8a [0066.101] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\fil\\", nBufferLength=0x105, lpBuffer=0x31de60, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\fil\\", lpFilePart=0x0) returned 0x8b [0066.102] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\fil\\*", lpFindFileData=0x31e0ac | out: lpFindFileData=0x31e0ac*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x84153f90, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x841566a0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x841566a0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5107fa0 [0066.102] FindNextFileW (in: hFindFile=0x5107fa0, lpFindFileData=0x31e0bc | out: lpFindFileData=0x31e0bc*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x84153f90, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x841566a0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x841566a0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0066.102] FindNextFileW (in: hFindFile=0x5107fa0, lpFindFileData=0x31e0bc | out: lpFindFileData=0x31e0bc*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x841566a0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x841566a0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x844b43b0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0xdf, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1 [0066.102] FindNextFileW (in: hFindFile=0x5107fa0, lpFindFileData=0x31e0bc | out: lpFindFileData=0x31e0bc*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x841566a0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x841566a0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x844b43b0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0xdf, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 0 [0066.102] FindClose (in: hFindFile=0x5107fa0 | out: hFindFile=0x5107fa0) returned 1 [0066.102] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e344) returned 1 [0066.102] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e350) returned 1 [0066.102] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e384) returned 1 [0066.102] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\fr", nBufferLength=0x105, lpBuffer=0x31de8c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\fr", lpFilePart=0x0) returned 0x89 [0066.102] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\fr\\", nBufferLength=0x105, lpBuffer=0x31de60, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\fr\\", lpFilePart=0x0) returned 0x8a [0066.103] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\fr\\*", lpFindFileData=0x31e0ac | out: lpFindFileData=0x31e0ac*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x8415b4c0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x8415dbd0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x8415dbd0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5107fa0 [0066.103] FindNextFileW (in: hFindFile=0x5107fa0, lpFindFileData=0x31e0bc | out: lpFindFileData=0x31e0bc*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x8415b4c0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x8415dbd0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x8415dbd0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0066.103] FindNextFileW (in: hFindFile=0x5107fa0, lpFindFileData=0x31e0bc | out: lpFindFileData=0x31e0bc*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x8415dbd0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x8415dbd0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x844b43b0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0xe2, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1 [0066.103] FindNextFileW (in: hFindFile=0x5107fa0, lpFindFileData=0x31e0bc | out: lpFindFileData=0x31e0bc*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0066.103] FindClose (in: hFindFile=0x5107fa0 | out: hFindFile=0x5107fa0) returned 1 [0066.103] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e344) returned 1 [0066.103] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e350) returned 1 [0066.103] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e384) returned 1 [0066.103] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\fr", nBufferLength=0x105, lpBuffer=0x31de8c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\fr", lpFilePart=0x0) returned 0x89 [0066.104] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\fr\\", nBufferLength=0x105, lpBuffer=0x31de60, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\fr\\", lpFilePart=0x0) returned 0x8a [0066.104] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\fr\\*", lpFindFileData=0x31e0ac | out: lpFindFileData=0x31e0ac*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x8415b4c0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x8415dbd0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x8415dbd0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5107fa0 [0066.104] FindNextFileW (in: hFindFile=0x5107fa0, lpFindFileData=0x31e0bc | out: lpFindFileData=0x31e0bc*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x8415b4c0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x8415dbd0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x8415dbd0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0066.104] FindNextFileW (in: hFindFile=0x5107fa0, lpFindFileData=0x31e0bc | out: lpFindFileData=0x31e0bc*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x8415dbd0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x8415dbd0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x844b43b0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0xe2, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1 [0066.104] FindNextFileW (in: hFindFile=0x5107fa0, lpFindFileData=0x31e0bc | out: lpFindFileData=0x31e0bc*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x8415dbd0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x8415dbd0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x844b43b0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0xe2, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 0 [0066.104] FindClose (in: hFindFile=0x5107fa0 | out: hFindFile=0x5107fa0) returned 1 [0066.104] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e344) returned 1 [0066.104] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e350) returned 1 [0066.104] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e384) returned 1 [0066.104] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\he", nBufferLength=0x105, lpBuffer=0x31de8c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\he", lpFilePart=0x0) returned 0x89 [0066.105] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\he\\", nBufferLength=0x105, lpBuffer=0x31de60, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\he\\", lpFilePart=0x0) returned 0x8a [0066.105] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\he\\*", lpFindFileData=0x31e0ac | out: lpFindFileData=0x31e0ac*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x841629f0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x84165100, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x84165100, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5107fa0 [0066.106] FindNextFileW (in: hFindFile=0x5107fa0, lpFindFileData=0x31e0bc | out: lpFindFileData=0x31e0bc*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x841629f0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x84165100, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x84165100, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0066.107] FindNextFileW (in: hFindFile=0x5107fa0, lpFindFileData=0x31e0bc | out: lpFindFileData=0x31e0bc*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x84165100, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x84165100, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x844b43b0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0xee, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1 [0066.107] FindNextFileW (in: hFindFile=0x5107fa0, lpFindFileData=0x31e0bc | out: lpFindFileData=0x31e0bc*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0066.107] FindClose (in: hFindFile=0x5107fa0 | out: hFindFile=0x5107fa0) returned 1 [0066.107] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e344) returned 1 [0066.107] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e350) returned 1 [0066.107] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e384) returned 1 [0066.107] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\he", nBufferLength=0x105, lpBuffer=0x31de8c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\he", lpFilePart=0x0) returned 0x89 [0066.107] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\he\\", nBufferLength=0x105, lpBuffer=0x31de60, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\he\\", lpFilePart=0x0) returned 0x8a [0066.107] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\he\\*", lpFindFileData=0x31e0ac | out: lpFindFileData=0x31e0ac*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x841629f0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x84165100, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x84165100, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5107fa0 [0066.107] FindNextFileW (in: hFindFile=0x5107fa0, lpFindFileData=0x31e0bc | out: lpFindFileData=0x31e0bc*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x841629f0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x84165100, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x84165100, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0066.107] FindNextFileW (in: hFindFile=0x5107fa0, lpFindFileData=0x31e0bc | out: lpFindFileData=0x31e0bc*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x84165100, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x84165100, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x844b43b0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0xee, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1 [0066.108] FindNextFileW (in: hFindFile=0x5107fa0, lpFindFileData=0x31e0bc | out: lpFindFileData=0x31e0bc*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x84165100, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x84165100, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x844b43b0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0xee, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 0 [0066.108] FindClose (in: hFindFile=0x5107fa0 | out: hFindFile=0x5107fa0) returned 1 [0066.108] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e344) returned 1 [0066.108] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e350) returned 1 [0066.108] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e384) returned 1 [0066.108] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\hi", nBufferLength=0x105, lpBuffer=0x31de8c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\hi", lpFilePart=0x0) returned 0x89 [0066.108] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\hi\\", nBufferLength=0x105, lpBuffer=0x31de60, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\hi\\", lpFilePart=0x0) returned 0x8a [0066.108] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\hi\\*", lpFindFileData=0x31e0ac | out: lpFindFileData=0x31e0ac*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x84169f20, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x8416c630, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x8416c630, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5107fa0 [0066.108] FindNextFileW (in: hFindFile=0x5107fa0, lpFindFileData=0x31e0bc | out: lpFindFileData=0x31e0bc*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x84169f20, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x8416c630, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x8416c630, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0066.109] FindNextFileW (in: hFindFile=0x5107fa0, lpFindFileData=0x31e0bc | out: lpFindFileData=0x31e0bc*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x8416c630, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x8416c630, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x844b43b0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x11a, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1 [0066.109] FindNextFileW (in: hFindFile=0x5107fa0, lpFindFileData=0x31e0bc | out: lpFindFileData=0x31e0bc*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0066.109] FindClose (in: hFindFile=0x5107fa0 | out: hFindFile=0x5107fa0) returned 1 [0066.109] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e344) returned 1 [0066.109] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e350) returned 1 [0066.109] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e384) returned 1 [0066.109] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\hi", nBufferLength=0x105, lpBuffer=0x31de8c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\hi", lpFilePart=0x0) returned 0x89 [0066.109] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\hi\\", nBufferLength=0x105, lpBuffer=0x31de60, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\hi\\", lpFilePart=0x0) returned 0x8a [0066.109] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\hi\\*", lpFindFileData=0x31e0ac | out: lpFindFileData=0x31e0ac*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x84169f20, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x8416c630, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x8416c630, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5107fa0 [0066.109] FindNextFileW (in: hFindFile=0x5107fa0, lpFindFileData=0x31e0bc | out: lpFindFileData=0x31e0bc*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x84169f20, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x8416c630, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x8416c630, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0066.110] FindNextFileW (in: hFindFile=0x5107fa0, lpFindFileData=0x31e0bc | out: lpFindFileData=0x31e0bc*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x8416c630, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x8416c630, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x844b43b0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x11a, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1 [0066.110] FindNextFileW (in: hFindFile=0x5107fa0, lpFindFileData=0x31e0bc | out: lpFindFileData=0x31e0bc*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x8416c630, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x8416c630, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x844b43b0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x11a, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 0 [0066.110] FindClose (in: hFindFile=0x5107fa0 | out: hFindFile=0x5107fa0) returned 1 [0066.110] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e344) returned 1 [0066.110] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e350) returned 1 [0066.110] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e384) returned 1 [0066.110] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\hu", nBufferLength=0x105, lpBuffer=0x31de8c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\hu", lpFilePart=0x0) returned 0x89 [0066.110] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\hu\\", nBufferLength=0x105, lpBuffer=0x31de60, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\hu\\", lpFilePart=0x0) returned 0x8a [0066.110] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\hu\\*", lpFindFileData=0x31e0ac | out: lpFindFileData=0x31e0ac*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x84171450, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x84173b60, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x84173b60, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5107fa0 [0066.111] FindNextFileW (in: hFindFile=0x5107fa0, lpFindFileData=0x31e0bc | out: lpFindFileData=0x31e0bc*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x84171450, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x84173b60, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x84173b60, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0066.111] FindNextFileW (in: hFindFile=0x5107fa0, lpFindFileData=0x31e0bc | out: lpFindFileData=0x31e0bc*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x84173b60, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x84173b60, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x844b43b0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0xeb, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1 [0066.111] FindNextFileW (in: hFindFile=0x5107fa0, lpFindFileData=0x31e0bc | out: lpFindFileData=0x31e0bc*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0066.112] FindClose (in: hFindFile=0x5107fa0 | out: hFindFile=0x5107fa0) returned 1 [0066.112] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e344) returned 1 [0066.112] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e350) returned 1 [0066.112] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e384) returned 1 [0066.112] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\hu", nBufferLength=0x105, lpBuffer=0x31de8c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\hu", lpFilePart=0x0) returned 0x89 [0066.112] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\hu\\", nBufferLength=0x105, lpBuffer=0x31de60, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\hu\\", lpFilePart=0x0) returned 0x8a [0066.112] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\hu\\*", lpFindFileData=0x31e0ac | out: lpFindFileData=0x31e0ac*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x84171450, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x84173b60, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x84173b60, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5107fa0 [0066.112] FindNextFileW (in: hFindFile=0x5107fa0, lpFindFileData=0x31e0bc | out: lpFindFileData=0x31e0bc*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x84171450, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x84173b60, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x84173b60, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0066.112] FindNextFileW (in: hFindFile=0x5107fa0, lpFindFileData=0x31e0bc | out: lpFindFileData=0x31e0bc*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x84173b60, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x84173b60, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x844b43b0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0xeb, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1 [0066.112] FindNextFileW (in: hFindFile=0x5107fa0, lpFindFileData=0x31e0bc | out: lpFindFileData=0x31e0bc*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x84173b60, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x84173b60, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x844b43b0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0xeb, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 0 [0066.113] FindClose (in: hFindFile=0x5107fa0 | out: hFindFile=0x5107fa0) returned 1 [0066.113] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e344) returned 1 [0066.113] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e350) returned 1 [0066.113] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e384) returned 1 [0066.113] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\id", nBufferLength=0x105, lpBuffer=0x31de8c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\id", lpFilePart=0x0) returned 0x89 [0066.113] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\id\\", nBufferLength=0x105, lpBuffer=0x31de60, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\id\\", lpFilePart=0x0) returned 0x8a [0066.113] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\id\\*", lpFindFileData=0x31e0ac | out: lpFindFileData=0x31e0ac*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x84176270, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x8417b090, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x8417b090, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5107fa0 [0066.113] FindNextFileW (in: hFindFile=0x5107fa0, lpFindFileData=0x31e0bc | out: lpFindFileData=0x31e0bc*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x84176270, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x8417b090, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x8417b090, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0066.113] FindNextFileW (in: hFindFile=0x5107fa0, lpFindFileData=0x31e0bc | out: lpFindFileData=0x31e0bc*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x8417b090, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x8417b090, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x844b43b0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0xd8, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1 [0066.114] FindNextFileW (in: hFindFile=0x5107fa0, lpFindFileData=0x31e0bc | out: lpFindFileData=0x31e0bc*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0066.114] FindClose (in: hFindFile=0x5107fa0 | out: hFindFile=0x5107fa0) returned 1 [0066.114] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e344) returned 1 [0066.114] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e350) returned 1 [0066.114] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e384) returned 1 [0066.114] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\id", nBufferLength=0x105, lpBuffer=0x31de8c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\id", lpFilePart=0x0) returned 0x89 [0066.114] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\id\\", nBufferLength=0x105, lpBuffer=0x31de60, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\id\\", lpFilePart=0x0) returned 0x8a [0066.114] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\id\\*", lpFindFileData=0x31e0ac | out: lpFindFileData=0x31e0ac*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x84176270, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x8417b090, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x8417b090, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5107fa0 [0066.114] FindNextFileW (in: hFindFile=0x5107fa0, lpFindFileData=0x31e0bc | out: lpFindFileData=0x31e0bc*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x84176270, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x8417b090, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x8417b090, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0066.114] FindNextFileW (in: hFindFile=0x5107fa0, lpFindFileData=0x31e0bc | out: lpFindFileData=0x31e0bc*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x8417b090, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x8417b090, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x844b43b0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0xd8, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1 [0066.115] FindNextFileW (in: hFindFile=0x5107fa0, lpFindFileData=0x31e0bc | out: lpFindFileData=0x31e0bc*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x8417b090, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x8417b090, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x844b43b0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0xd8, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 0 [0066.115] FindClose (in: hFindFile=0x5107fa0 | out: hFindFile=0x5107fa0) returned 1 [0066.115] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e344) returned 1 [0066.115] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e350) returned 1 [0066.115] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e384) returned 1 [0066.115] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\it", nBufferLength=0x105, lpBuffer=0x31de8c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\it", lpFilePart=0x0) returned 0x89 [0066.115] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\it\\", nBufferLength=0x105, lpBuffer=0x31de60, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\it\\", lpFilePart=0x0) returned 0x8a [0066.115] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\it\\*", lpFindFileData=0x31e0ac | out: lpFindFileData=0x31e0ac*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x8417feb0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x841825c0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x841825c0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5107fa0 [0066.116] FindNextFileW (in: hFindFile=0x5107fa0, lpFindFileData=0x31e0bc | out: lpFindFileData=0x31e0bc*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x8417feb0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x841825c0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x841825c0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0066.116] FindNextFileW (in: hFindFile=0x5107fa0, lpFindFileData=0x31e0bc | out: lpFindFileData=0x31e0bc*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x841825c0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x841825c0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x844b43b0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0xd7, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1 [0066.116] FindNextFileW (in: hFindFile=0x5107fa0, lpFindFileData=0x31e0bc | out: lpFindFileData=0x31e0bc*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0066.116] FindClose (in: hFindFile=0x5107fa0 | out: hFindFile=0x5107fa0) returned 1 [0066.116] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e344) returned 1 [0066.116] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e350) returned 1 [0066.116] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e384) returned 1 [0066.116] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\it", nBufferLength=0x105, lpBuffer=0x31de8c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\it", lpFilePart=0x0) returned 0x89 [0066.116] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\it\\", nBufferLength=0x105, lpBuffer=0x31de60, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\it\\", lpFilePart=0x0) returned 0x8a [0066.116] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\it\\*", lpFindFileData=0x31e0ac | out: lpFindFileData=0x31e0ac*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x8417feb0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x841825c0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x841825c0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5107fa0 [0066.117] FindNextFileW (in: hFindFile=0x5107fa0, lpFindFileData=0x31e0bc | out: lpFindFileData=0x31e0bc*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x8417feb0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x841825c0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x841825c0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0066.117] FindNextFileW (in: hFindFile=0x5107fa0, lpFindFileData=0x31e0bc | out: lpFindFileData=0x31e0bc*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x841825c0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x841825c0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x844b43b0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0xd7, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1 [0066.117] FindNextFileW (in: hFindFile=0x5107fa0, lpFindFileData=0x31e0bc | out: lpFindFileData=0x31e0bc*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x841825c0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x841825c0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x844b43b0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0xd7, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 0 [0066.117] FindClose (in: hFindFile=0x5107fa0 | out: hFindFile=0x5107fa0) returned 1 [0066.117] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e344) returned 1 [0066.117] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e350) returned 1 [0066.117] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e384) returned 1 [0066.117] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\ja", nBufferLength=0x105, lpBuffer=0x31de8c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\ja", lpFilePart=0x0) returned 0x89 [0066.117] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\ja\\", nBufferLength=0x105, lpBuffer=0x31de60, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\ja\\", lpFilePart=0x0) returned 0x8a [0066.117] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\ja\\*", lpFindFileData=0x31e0ac | out: lpFindFileData=0x31e0ac*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x841873e0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x84189af0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x84189af0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5107fa0 [0066.118] FindNextFileW (in: hFindFile=0x5107fa0, lpFindFileData=0x31e0bc | out: lpFindFileData=0x31e0bc*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x841873e0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x84189af0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x84189af0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0066.118] FindNextFileW (in: hFindFile=0x5107fa0, lpFindFileData=0x31e0bc | out: lpFindFileData=0x31e0bc*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x84189af0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x84189af0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x844b43b0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0xf5, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1 [0066.118] FindNextFileW (in: hFindFile=0x5107fa0, lpFindFileData=0x31e0bc | out: lpFindFileData=0x31e0bc*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0066.118] FindClose (in: hFindFile=0x5107fa0 | out: hFindFile=0x5107fa0) returned 1 [0066.118] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e344) returned 1 [0066.118] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e350) returned 1 [0066.118] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e384) returned 1 [0066.118] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\ja", nBufferLength=0x105, lpBuffer=0x31de8c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\ja", lpFilePart=0x0) returned 0x89 [0066.118] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\ja\\", nBufferLength=0x105, lpBuffer=0x31de60, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\ja\\", lpFilePart=0x0) returned 0x8a [0066.118] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\ja\\*", lpFindFileData=0x31e0ac | out: lpFindFileData=0x31e0ac*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x841873e0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x84189af0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x84189af0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5107fa0 [0066.118] FindNextFileW (in: hFindFile=0x5107fa0, lpFindFileData=0x31e0bc | out: lpFindFileData=0x31e0bc*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x841873e0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x84189af0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x84189af0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0066.118] FindNextFileW (in: hFindFile=0x5107fa0, lpFindFileData=0x31e0bc | out: lpFindFileData=0x31e0bc*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x84189af0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x84189af0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x844b43b0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0xf5, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1 [0066.119] FindNextFileW (in: hFindFile=0x5107fa0, lpFindFileData=0x31e0bc | out: lpFindFileData=0x31e0bc*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x84189af0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x84189af0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x844b43b0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0xf5, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 0 [0066.119] FindClose (in: hFindFile=0x5107fa0 | out: hFindFile=0x5107fa0) returned 1 [0066.119] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e344) returned 1 [0066.119] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e350) returned 1 [0066.119] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e384) returned 1 [0066.119] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\ko", nBufferLength=0x105, lpBuffer=0x31de8c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\ko", lpFilePart=0x0) returned 0x89 [0066.119] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\ko\\", nBufferLength=0x105, lpBuffer=0x31de60, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\ko\\", lpFilePart=0x0) returned 0x8a [0066.119] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\ko\\*", lpFindFileData=0x31e0ac | out: lpFindFileData=0x31e0ac*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x8418e910, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x84191020, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x84191020, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5107fa0 [0066.120] FindNextFileW (in: hFindFile=0x5107fa0, lpFindFileData=0x31e0bc | out: lpFindFileData=0x31e0bc*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x8418e910, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x84191020, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x84191020, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0066.120] FindNextFileW (in: hFindFile=0x5107fa0, lpFindFileData=0x31e0bc | out: lpFindFileData=0x31e0bc*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x84191020, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x84191020, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x844b6ac0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0xe0, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1 [0066.120] FindNextFileW (in: hFindFile=0x5107fa0, lpFindFileData=0x31e0bc | out: lpFindFileData=0x31e0bc*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0066.120] FindClose (in: hFindFile=0x5107fa0 | out: hFindFile=0x5107fa0) returned 1 [0066.120] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e344) returned 1 [0066.120] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e350) returned 1 [0066.120] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e384) returned 1 [0066.120] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\ko", nBufferLength=0x105, lpBuffer=0x31de8c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\ko", lpFilePart=0x0) returned 0x89 [0066.120] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\ko\\", nBufferLength=0x105, lpBuffer=0x31de60, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\ko\\", lpFilePart=0x0) returned 0x8a [0066.120] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\ko\\*", lpFindFileData=0x31e0ac | out: lpFindFileData=0x31e0ac*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x8418e910, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x84191020, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x84191020, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5107fa0 [0066.121] FindNextFileW (in: hFindFile=0x5107fa0, lpFindFileData=0x31e0bc | out: lpFindFileData=0x31e0bc*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x8418e910, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x84191020, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x84191020, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0066.121] FindNextFileW (in: hFindFile=0x5107fa0, lpFindFileData=0x31e0bc | out: lpFindFileData=0x31e0bc*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x84191020, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x84191020, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x844b6ac0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0xe0, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1 [0066.121] FindNextFileW (in: hFindFile=0x5107fa0, lpFindFileData=0x31e0bc | out: lpFindFileData=0x31e0bc*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x84191020, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x84191020, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x844b6ac0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0xe0, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 0 [0066.121] FindClose (in: hFindFile=0x5107fa0 | out: hFindFile=0x5107fa0) returned 1 [0066.121] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e344) returned 1 [0066.121] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e350) returned 1 [0066.121] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e384) returned 1 [0066.121] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\lt", nBufferLength=0x105, lpBuffer=0x31de8c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\lt", lpFilePart=0x0) returned 0x89 [0066.121] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\lt\\", nBufferLength=0x105, lpBuffer=0x31de60, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\lt\\", lpFilePart=0x0) returned 0x8a [0066.121] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\lt\\*", lpFindFileData=0x31e0ac | out: lpFindFileData=0x31e0ac*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x84195e40, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x84198550, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x84198550, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5107fa0 [0066.122] FindNextFileW (in: hFindFile=0x5107fa0, lpFindFileData=0x31e0bc | out: lpFindFileData=0x31e0bc*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x84195e40, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x84198550, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x84198550, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0066.122] FindNextFileW (in: hFindFile=0x5107fa0, lpFindFileData=0x31e0bc | out: lpFindFileData=0x31e0bc*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x84198550, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x8419d370, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x844b6ac0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0xeb, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1 [0066.122] FindNextFileW (in: hFindFile=0x5107fa0, lpFindFileData=0x31e0bc | out: lpFindFileData=0x31e0bc*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0066.122] FindClose (in: hFindFile=0x5107fa0 | out: hFindFile=0x5107fa0) returned 1 [0066.122] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e344) returned 1 [0066.122] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e350) returned 1 [0066.122] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e384) returned 1 [0066.122] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\lt", nBufferLength=0x105, lpBuffer=0x31de8c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\lt", lpFilePart=0x0) returned 0x89 [0066.122] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\lt\\", nBufferLength=0x105, lpBuffer=0x31de60, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\lt\\", lpFilePart=0x0) returned 0x8a [0066.122] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\lt\\*", lpFindFileData=0x31e0ac | out: lpFindFileData=0x31e0ac*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x84195e40, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x84198550, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x84198550, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5107fa0 [0066.122] FindNextFileW (in: hFindFile=0x5107fa0, lpFindFileData=0x31e0bc | out: lpFindFileData=0x31e0bc*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x84195e40, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x84198550, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x84198550, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0066.122] FindNextFileW (in: hFindFile=0x5107fa0, lpFindFileData=0x31e0bc | out: lpFindFileData=0x31e0bc*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x84198550, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x8419d370, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x844b6ac0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0xeb, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1 [0066.123] FindNextFileW (in: hFindFile=0x5107fa0, lpFindFileData=0x31e0bc | out: lpFindFileData=0x31e0bc*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x84198550, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x8419d370, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x844b6ac0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0xeb, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 0 [0066.123] FindClose (in: hFindFile=0x5107fa0 | out: hFindFile=0x5107fa0) returned 1 [0066.123] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e344) returned 1 [0066.123] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e350) returned 1 [0066.123] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e384) returned 1 [0066.123] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\lv", nBufferLength=0x105, lpBuffer=0x31de8c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\lv", lpFilePart=0x0) returned 0x89 [0066.123] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\lv\\", nBufferLength=0x105, lpBuffer=0x31de60, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\lv\\", lpFilePart=0x0) returned 0x8a [0066.123] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\lv\\*", lpFindFileData=0x31e0ac | out: lpFindFileData=0x31e0ac*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x8419fa80, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x841a2190, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x841a2190, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5107fa0 [0066.124] FindNextFileW (in: hFindFile=0x5107fa0, lpFindFileData=0x31e0bc | out: lpFindFileData=0x31e0bc*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x8419fa80, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x841a2190, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x841a2190, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0066.124] FindNextFileW (in: hFindFile=0x5107fa0, lpFindFileData=0x31e0bc | out: lpFindFileData=0x31e0bc*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x841a2190, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x841a48a0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x844b6ac0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0xe5, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1 [0066.124] FindNextFileW (in: hFindFile=0x5107fa0, lpFindFileData=0x31e0bc | out: lpFindFileData=0x31e0bc*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0066.124] FindClose (in: hFindFile=0x5107fa0 | out: hFindFile=0x5107fa0) returned 1 [0066.124] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e344) returned 1 [0066.124] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e350) returned 1 [0066.124] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e384) returned 1 [0066.124] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\lv", nBufferLength=0x105, lpBuffer=0x31de8c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\lv", lpFilePart=0x0) returned 0x89 [0066.124] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\lv\\", nBufferLength=0x105, lpBuffer=0x31de60, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\lv\\", lpFilePart=0x0) returned 0x8a [0066.124] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\lv\\*", lpFindFileData=0x31e0ac | out: lpFindFileData=0x31e0ac*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x8419fa80, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x841a2190, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x841a2190, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5107fa0 [0066.125] FindNextFileW (in: hFindFile=0x5107fa0, lpFindFileData=0x31e0bc | out: lpFindFileData=0x31e0bc*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x8419fa80, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x841a2190, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x841a2190, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0066.125] FindNextFileW (in: hFindFile=0x5107fa0, lpFindFileData=0x31e0bc | out: lpFindFileData=0x31e0bc*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x841a2190, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x841a48a0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x844b6ac0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0xe5, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1 [0066.125] FindNextFileW (in: hFindFile=0x5107fa0, lpFindFileData=0x31e0bc | out: lpFindFileData=0x31e0bc*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x841a2190, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x841a48a0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x844b6ac0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0xe5, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 0 [0066.125] FindClose (in: hFindFile=0x5107fa0 | out: hFindFile=0x5107fa0) returned 1 [0066.125] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e344) returned 1 [0066.125] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e350) returned 1 [0066.125] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e384) returned 1 [0066.125] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\ms", nBufferLength=0x105, lpBuffer=0x31de8c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\ms", lpFilePart=0x0) returned 0x89 [0066.125] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\ms\\", nBufferLength=0x105, lpBuffer=0x31de60, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\ms\\", lpFilePart=0x0) returned 0x8a [0066.125] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\ms\\*", lpFindFileData=0x31e0ac | out: lpFindFileData=0x31e0ac*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x841a6fb0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x841a96c0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x841a96c0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5107fa0 [0066.126] FindNextFileW (in: hFindFile=0x5107fa0, lpFindFileData=0x31e0bc | out: lpFindFileData=0x31e0bc*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x841a6fb0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x841a96c0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x841a96c0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0066.126] FindNextFileW (in: hFindFile=0x5107fa0, lpFindFileData=0x31e0bc | out: lpFindFileData=0x31e0bc*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x841a96c0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x841a96c0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x844b6ac0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0xd0, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1 [0066.126] FindNextFileW (in: hFindFile=0x5107fa0, lpFindFileData=0x31e0bc | out: lpFindFileData=0x31e0bc*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0066.126] FindClose (in: hFindFile=0x5107fa0 | out: hFindFile=0x5107fa0) returned 1 [0066.126] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e344) returned 1 [0066.126] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e350) returned 1 [0066.126] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e384) returned 1 [0066.126] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\ms", nBufferLength=0x105, lpBuffer=0x31de8c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\ms", lpFilePart=0x0) returned 0x89 [0066.126] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\ms\\", nBufferLength=0x105, lpBuffer=0x31de60, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\ms\\", lpFilePart=0x0) returned 0x8a [0066.126] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\ms\\*", lpFindFileData=0x31e0ac | out: lpFindFileData=0x31e0ac*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x841a6fb0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x841a96c0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x841a96c0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5107fa0 [0066.126] FindNextFileW (in: hFindFile=0x5107fa0, lpFindFileData=0x31e0bc | out: lpFindFileData=0x31e0bc*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x841a6fb0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x841a96c0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x841a96c0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0066.126] FindNextFileW (in: hFindFile=0x5107fa0, lpFindFileData=0x31e0bc | out: lpFindFileData=0x31e0bc*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x841a96c0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x841a96c0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x844b6ac0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0xd0, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1 [0066.127] FindNextFileW (in: hFindFile=0x5107fa0, lpFindFileData=0x31e0bc | out: lpFindFileData=0x31e0bc*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x841a96c0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x841a96c0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x844b6ac0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0xd0, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 0 [0066.127] FindClose (in: hFindFile=0x5107fa0 | out: hFindFile=0x5107fa0) returned 1 [0066.127] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e344) returned 1 [0066.127] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e350) returned 1 [0066.127] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e384) returned 1 [0066.127] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\nl", nBufferLength=0x105, lpBuffer=0x31de8c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\nl", lpFilePart=0x0) returned 0x89 [0066.127] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\nl\\", nBufferLength=0x105, lpBuffer=0x31de60, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\nl\\", lpFilePart=0x0) returned 0x8a [0066.127] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\nl\\*", lpFindFileData=0x31e0ac | out: lpFindFileData=0x31e0ac*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x841ae4e0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x841b0bf0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x841b0bf0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5107fa0 [0066.128] FindNextFileW (in: hFindFile=0x5107fa0, lpFindFileData=0x31e0bc | out: lpFindFileData=0x31e0bc*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x841ae4e0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x841b0bf0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x841b0bf0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0066.128] FindNextFileW (in: hFindFile=0x5107fa0, lpFindFileData=0x31e0bc | out: lpFindFileData=0x31e0bc*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x841b0bf0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x841b0bf0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x844b6ac0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0xdd, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1 [0066.128] FindNextFileW (in: hFindFile=0x5107fa0, lpFindFileData=0x31e0bc | out: lpFindFileData=0x31e0bc*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0066.128] FindClose (in: hFindFile=0x5107fa0 | out: hFindFile=0x5107fa0) returned 1 [0066.128] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e344) returned 1 [0066.128] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e350) returned 1 [0066.128] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e384) returned 1 [0066.128] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\nl", nBufferLength=0x105, lpBuffer=0x31de8c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\nl", lpFilePart=0x0) returned 0x89 [0066.128] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\nl\\", nBufferLength=0x105, lpBuffer=0x31de60, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\nl\\", lpFilePart=0x0) returned 0x8a [0066.129] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\nl\\*", lpFindFileData=0x31e0ac | out: lpFindFileData=0x31e0ac*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x841ae4e0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x841b0bf0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x841b0bf0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5107fa0 [0066.129] FindNextFileW (in: hFindFile=0x5107fa0, lpFindFileData=0x31e0bc | out: lpFindFileData=0x31e0bc*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x841ae4e0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x841b0bf0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x841b0bf0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0066.129] FindNextFileW (in: hFindFile=0x5107fa0, lpFindFileData=0x31e0bc | out: lpFindFileData=0x31e0bc*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x841b0bf0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x841b0bf0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x844b6ac0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0xdd, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1 [0066.129] FindNextFileW (in: hFindFile=0x5107fa0, lpFindFileData=0x31e0bc | out: lpFindFileData=0x31e0bc*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x841b0bf0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x841b0bf0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x844b6ac0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0xdd, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 0 [0066.129] FindClose (in: hFindFile=0x5107fa0 | out: hFindFile=0x5107fa0) returned 1 [0066.129] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e344) returned 1 [0066.129] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e350) returned 1 [0066.129] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e384) returned 1 [0066.129] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\no", nBufferLength=0x105, lpBuffer=0x31de8c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\no", lpFilePart=0x0) returned 0x89 [0066.129] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\no\\", nBufferLength=0x105, lpBuffer=0x31de60, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\no\\", lpFilePart=0x0) returned 0x8a [0066.129] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\no\\*", lpFindFileData=0x31e0ac | out: lpFindFileData=0x31e0ac*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x841b5a10, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x841b8120, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x841b8120, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5107fa0 [0066.130] FindNextFileW (in: hFindFile=0x5107fa0, lpFindFileData=0x31e0bc | out: lpFindFileData=0x31e0bc*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x841b5a10, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x841b8120, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x841b8120, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0066.130] FindNextFileW (in: hFindFile=0x5107fa0, lpFindFileData=0x31e0bc | out: lpFindFileData=0x31e0bc*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x841b8120, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x841b8120, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0xbcc13a00, ftLastWriteTime.dwHighDateTime=0x1d03f5e, nFileSizeHigh=0x0, nFileSizeLow=0xbf, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1 [0066.130] FindNextFileW (in: hFindFile=0x5107fa0, lpFindFileData=0x31e0bc | out: lpFindFileData=0x31e0bc*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0066.130] FindClose (in: hFindFile=0x5107fa0 | out: hFindFile=0x5107fa0) returned 1 [0066.130] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e344) returned 1 [0066.130] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e350) returned 1 [0066.130] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e384) returned 1 [0066.130] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\no", nBufferLength=0x105, lpBuffer=0x31de8c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\no", lpFilePart=0x0) returned 0x89 [0066.130] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\no\\", nBufferLength=0x105, lpBuffer=0x31de60, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\no\\", lpFilePart=0x0) returned 0x8a [0066.130] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\no\\*", lpFindFileData=0x31e0ac | out: lpFindFileData=0x31e0ac*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x841b5a10, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x841b8120, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x841b8120, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5107fa0 [0066.130] FindNextFileW (in: hFindFile=0x5107fa0, lpFindFileData=0x31e0bc | out: lpFindFileData=0x31e0bc*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x841b5a10, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x841b8120, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x841b8120, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0066.131] FindNextFileW (in: hFindFile=0x5107fa0, lpFindFileData=0x31e0bc | out: lpFindFileData=0x31e0bc*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x841b8120, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x841b8120, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0xbcc13a00, ftLastWriteTime.dwHighDateTime=0x1d03f5e, nFileSizeHigh=0x0, nFileSizeLow=0xbf, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1 [0066.131] FindNextFileW (in: hFindFile=0x5107fa0, lpFindFileData=0x31e0bc | out: lpFindFileData=0x31e0bc*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x841b8120, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x841b8120, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0xbcc13a00, ftLastWriteTime.dwHighDateTime=0x1d03f5e, nFileSizeHigh=0x0, nFileSizeLow=0xbf, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 0 [0066.131] FindClose (in: hFindFile=0x5107fa0 | out: hFindFile=0x5107fa0) returned 1 [0066.131] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e344) returned 1 [0066.131] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e350) returned 1 [0066.131] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e384) returned 1 [0066.131] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\pl", nBufferLength=0x105, lpBuffer=0x31de8c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\pl", lpFilePart=0x0) returned 0x89 [0066.131] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\pl\\", nBufferLength=0x105, lpBuffer=0x31de60, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\pl\\", lpFilePart=0x0) returned 0x8a [0066.131] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\pl\\*", lpFindFileData=0x31e0ac | out: lpFindFileData=0x31e0ac*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x841bcf40, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x841bf650, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x841bf650, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5107fa0 [0066.132] FindNextFileW (in: hFindFile=0x5107fa0, lpFindFileData=0x31e0bc | out: lpFindFileData=0x31e0bc*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x841bcf40, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x841bf650, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x841bf650, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0066.132] FindNextFileW (in: hFindFile=0x5107fa0, lpFindFileData=0x31e0bc | out: lpFindFileData=0x31e0bc*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x841bf650, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x841bf650, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x844b6ac0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0xd1, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1 [0066.132] FindNextFileW (in: hFindFile=0x5107fa0, lpFindFileData=0x31e0bc | out: lpFindFileData=0x31e0bc*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0066.132] FindClose (in: hFindFile=0x5107fa0 | out: hFindFile=0x5107fa0) returned 1 [0066.132] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e344) returned 1 [0066.132] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e350) returned 1 [0066.132] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e384) returned 1 [0066.132] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\pl", nBufferLength=0x105, lpBuffer=0x31de8c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\pl", lpFilePart=0x0) returned 0x89 [0066.132] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\pl\\", nBufferLength=0x105, lpBuffer=0x31de60, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\pl\\", lpFilePart=0x0) returned 0x8a [0066.133] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\pl\\*", lpFindFileData=0x31e0ac | out: lpFindFileData=0x31e0ac*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x841bcf40, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x841bf650, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x841bf650, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5107fa0 [0066.133] FindNextFileW (in: hFindFile=0x5107fa0, lpFindFileData=0x31e0bc | out: lpFindFileData=0x31e0bc*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x841bcf40, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x841bf650, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x841bf650, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0066.133] FindNextFileW (in: hFindFile=0x5107fa0, lpFindFileData=0x31e0bc | out: lpFindFileData=0x31e0bc*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x841bf650, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x841bf650, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x844b6ac0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0xd1, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1 [0066.133] FindNextFileW (in: hFindFile=0x5107fa0, lpFindFileData=0x31e0bc | out: lpFindFileData=0x31e0bc*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x841bf650, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x841bf650, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x844b6ac0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0xd1, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 0 [0066.133] FindClose (in: hFindFile=0x5107fa0 | out: hFindFile=0x5107fa0) returned 1 [0066.133] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e344) returned 1 [0066.133] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e350) returned 1 [0066.133] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e384) returned 1 [0066.133] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\pt_BR", nBufferLength=0x105, lpBuffer=0x31de8c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\pt_BR", lpFilePart=0x0) returned 0x8c [0066.133] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\pt_BR\\", nBufferLength=0x105, lpBuffer=0x31de60, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\pt_BR\\", lpFilePart=0x0) returned 0x8d [0066.133] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\pt_BR\\*", lpFindFileData=0x31e0ac | out: lpFindFileData=0x31e0ac*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x841c6b80, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x841c9290, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x841c9290, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5107fa0 [0066.133] FindNextFileW (in: hFindFile=0x5107fa0, lpFindFileData=0x31e0bc | out: lpFindFileData=0x31e0bc*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x841c6b80, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x841c9290, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x841c9290, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0066.133] FindNextFileW (in: hFindFile=0x5107fa0, lpFindFileData=0x31e0bc | out: lpFindFileData=0x31e0bc*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x841c9290, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x841c9290, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x844b6ac0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0xd5, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1 [0066.133] FindNextFileW (in: hFindFile=0x5107fa0, lpFindFileData=0x31e0bc | out: lpFindFileData=0x31e0bc*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0066.133] FindClose (in: hFindFile=0x5107fa0 | out: hFindFile=0x5107fa0) returned 1 [0066.134] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e344) returned 1 [0066.134] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e350) returned 1 [0066.134] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e384) returned 1 [0066.134] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\pt_BR", nBufferLength=0x105, lpBuffer=0x31de8c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\pt_BR", lpFilePart=0x0) returned 0x8c [0066.134] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\pt_BR\\", nBufferLength=0x105, lpBuffer=0x31de60, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\pt_BR\\", lpFilePart=0x0) returned 0x8d [0066.134] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\pt_BR\\*", lpFindFileData=0x31e0ac | out: lpFindFileData=0x31e0ac*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x841c6b80, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x841c9290, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x841c9290, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5107fa0 [0066.134] FindNextFileW (in: hFindFile=0x5107fa0, lpFindFileData=0x31e0bc | out: lpFindFileData=0x31e0bc*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x841c6b80, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x841c9290, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x841c9290, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0066.134] FindNextFileW (in: hFindFile=0x5107fa0, lpFindFileData=0x31e0bc | out: lpFindFileData=0x31e0bc*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x841c9290, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x841c9290, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x844b6ac0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0xd5, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1 [0066.134] FindNextFileW (in: hFindFile=0x5107fa0, lpFindFileData=0x31e0bc | out: lpFindFileData=0x31e0bc*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x841c9290, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x841c9290, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x844b6ac0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0xd5, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 0 [0066.134] FindClose (in: hFindFile=0x5107fa0 | out: hFindFile=0x5107fa0) returned 1 [0066.134] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e344) returned 1 [0066.134] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e350) returned 1 [0066.134] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e384) returned 1 [0066.134] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\pt_PT", nBufferLength=0x105, lpBuffer=0x31de8c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\pt_PT", lpFilePart=0x0) returned 0x8c [0066.134] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\pt_PT\\", nBufferLength=0x105, lpBuffer=0x31de60, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\pt_PT\\", lpFilePart=0x0) returned 0x8d [0066.134] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\pt_PT\\*", lpFindFileData=0x31e0ac | out: lpFindFileData=0x31e0ac*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x841ce0b0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x841d07c0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x841d07c0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5107fa0 [0066.135] FindNextFileW (in: hFindFile=0x5107fa0, lpFindFileData=0x31e0bc | out: lpFindFileData=0x31e0bc*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x841ce0b0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x841d07c0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x841d07c0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0066.135] FindNextFileW (in: hFindFile=0x5107fa0, lpFindFileData=0x31e0bc | out: lpFindFileData=0x31e0bc*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x841d07c0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x841d07c0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x844b6ac0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0xe6, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1 [0066.136] FindNextFileW (in: hFindFile=0x5107fa0, lpFindFileData=0x31e0bc | out: lpFindFileData=0x31e0bc*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0066.136] FindClose (in: hFindFile=0x5107fa0 | out: hFindFile=0x5107fa0) returned 1 [0066.136] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e344) returned 1 [0066.136] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e350) returned 1 [0066.136] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e384) returned 1 [0066.136] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\pt_PT", nBufferLength=0x105, lpBuffer=0x31de8c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\pt_PT", lpFilePart=0x0) returned 0x8c [0066.136] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\pt_PT\\", nBufferLength=0x105, lpBuffer=0x31de60, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\pt_PT\\", lpFilePart=0x0) returned 0x8d [0066.136] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\pt_PT\\*", lpFindFileData=0x31e0ac | out: lpFindFileData=0x31e0ac*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x841ce0b0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x841d07c0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x841d07c0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5107fa0 [0066.136] FindNextFileW (in: hFindFile=0x5107fa0, lpFindFileData=0x31e0bc | out: lpFindFileData=0x31e0bc*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x841ce0b0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x841d07c0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x841d07c0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0066.136] FindNextFileW (in: hFindFile=0x5107fa0, lpFindFileData=0x31e0bc | out: lpFindFileData=0x31e0bc*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x841d07c0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x841d07c0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x844b6ac0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0xe6, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1 [0066.136] FindNextFileW (in: hFindFile=0x5107fa0, lpFindFileData=0x31e0bc | out: lpFindFileData=0x31e0bc*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x841d07c0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x841d07c0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x844b6ac0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0xe6, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 0 [0066.136] FindClose (in: hFindFile=0x5107fa0 | out: hFindFile=0x5107fa0) returned 1 [0066.136] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e344) returned 1 [0066.136] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e350) returned 1 [0066.136] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e384) returned 1 [0066.136] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\ro", nBufferLength=0x105, lpBuffer=0x31de8c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\ro", lpFilePart=0x0) returned 0x89 [0066.136] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\ro\\", nBufferLength=0x105, lpBuffer=0x31de60, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\ro\\", lpFilePart=0x0) returned 0x8a [0066.136] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\ro\\*", lpFindFileData=0x31e0ac | out: lpFindFileData=0x31e0ac*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x841d55e0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x841d7cf0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x841d7cf0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5107fa0 [0066.137] FindNextFileW (in: hFindFile=0x5107fa0, lpFindFileData=0x31e0bc | out: lpFindFileData=0x31e0bc*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x841d55e0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x841d7cf0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x841d7cf0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0066.137] FindNextFileW (in: hFindFile=0x5107fa0, lpFindFileData=0x31e0bc | out: lpFindFileData=0x31e0bc*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x841d7cf0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x841d7cf0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x844b6ac0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0xe2, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1 [0066.137] FindNextFileW (in: hFindFile=0x5107fa0, lpFindFileData=0x31e0bc | out: lpFindFileData=0x31e0bc*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0066.137] FindClose (in: hFindFile=0x5107fa0 | out: hFindFile=0x5107fa0) returned 1 [0066.137] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e344) returned 1 [0066.137] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e350) returned 1 [0066.137] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e384) returned 1 [0066.137] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\ro", nBufferLength=0x105, lpBuffer=0x31de8c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\ro", lpFilePart=0x0) returned 0x89 [0066.137] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\ro\\", nBufferLength=0x105, lpBuffer=0x31de60, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\ro\\", lpFilePart=0x0) returned 0x8a [0066.137] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\ro\\*", lpFindFileData=0x31e0ac | out: lpFindFileData=0x31e0ac*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x841d55e0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x841d7cf0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x841d7cf0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5107fa0 [0066.137] FindNextFileW (in: hFindFile=0x5107fa0, lpFindFileData=0x31e0bc | out: lpFindFileData=0x31e0bc*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x841d55e0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x841d7cf0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x841d7cf0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0066.137] FindNextFileW (in: hFindFile=0x5107fa0, lpFindFileData=0x31e0bc | out: lpFindFileData=0x31e0bc*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x841d7cf0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x841d7cf0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x844b6ac0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0xe2, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1 [0066.137] FindNextFileW (in: hFindFile=0x5107fa0, lpFindFileData=0x31e0bc | out: lpFindFileData=0x31e0bc*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x841d7cf0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x841d7cf0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x844b6ac0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0xe2, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 0 [0066.137] FindClose (in: hFindFile=0x5107fa0 | out: hFindFile=0x5107fa0) returned 1 [0066.137] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e344) returned 1 [0066.137] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e350) returned 1 [0066.137] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e384) returned 1 [0066.138] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\ru", nBufferLength=0x105, lpBuffer=0x31de8c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\ru", lpFilePart=0x0) returned 0x89 [0066.138] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\ru\\", nBufferLength=0x105, lpBuffer=0x31de60, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\ru\\", lpFilePart=0x0) returned 0x8a [0066.138] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\ru\\*", lpFindFileData=0x31e0ac | out: lpFindFileData=0x31e0ac*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x841dcb10, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x841df220, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x841df220, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5107fa0 [0066.139] FindNextFileW (in: hFindFile=0x5107fa0, lpFindFileData=0x31e0bc | out: lpFindFileData=0x31e0bc*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x841dcb10, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x841df220, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x841df220, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0066.139] FindNextFileW (in: hFindFile=0x5107fa0, lpFindFileData=0x31e0bc | out: lpFindFileData=0x31e0bc*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x841df220, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x841df220, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x844b6ac0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0xfe, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1 [0066.139] FindNextFileW (in: hFindFile=0x5107fa0, lpFindFileData=0x31e0bc | out: lpFindFileData=0x31e0bc*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0066.139] FindClose (in: hFindFile=0x5107fa0 | out: hFindFile=0x5107fa0) returned 1 [0066.139] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e344) returned 1 [0066.139] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e350) returned 1 [0066.139] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e384) returned 1 [0066.139] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\ru", nBufferLength=0x105, lpBuffer=0x31de8c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\ru", lpFilePart=0x0) returned 0x89 [0066.139] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\ru\\", nBufferLength=0x105, lpBuffer=0x31de60, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\ru\\", lpFilePart=0x0) returned 0x8a [0066.139] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\ru\\*", lpFindFileData=0x31e0ac | out: lpFindFileData=0x31e0ac*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x841dcb10, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x841df220, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x841df220, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5107fa0 [0066.139] FindNextFileW (in: hFindFile=0x5107fa0, lpFindFileData=0x31e0bc | out: lpFindFileData=0x31e0bc*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x841dcb10, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x841df220, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x841df220, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0066.139] FindNextFileW (in: hFindFile=0x5107fa0, lpFindFileData=0x31e0bc | out: lpFindFileData=0x31e0bc*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x841df220, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x841df220, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x844b6ac0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0xfe, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1 [0066.139] FindNextFileW (in: hFindFile=0x5107fa0, lpFindFileData=0x31e0bc | out: lpFindFileData=0x31e0bc*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x841df220, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x841df220, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x844b6ac0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0xfe, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 0 [0066.140] FindClose (in: hFindFile=0x5107fa0 | out: hFindFile=0x5107fa0) returned 1 [0066.140] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e344) returned 1 [0066.140] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e350) returned 1 [0066.140] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e384) returned 1 [0066.140] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\sk", nBufferLength=0x105, lpBuffer=0x31de8c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\sk", lpFilePart=0x0) returned 0x89 [0066.140] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\sk\\", nBufferLength=0x105, lpBuffer=0x31de60, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\sk\\", lpFilePart=0x0) returned 0x8a [0066.140] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\sk\\*", lpFindFileData=0x31e0ac | out: lpFindFileData=0x31e0ac*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x841eb570, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x841f0390, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x841f0390, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5107fa0 [0066.140] FindNextFileW (in: hFindFile=0x5107fa0, lpFindFileData=0x31e0bc | out: lpFindFileData=0x31e0bc*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x841eb570, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x841f0390, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x841f0390, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0066.140] FindNextFileW (in: hFindFile=0x5107fa0, lpFindFileData=0x31e0bc | out: lpFindFileData=0x31e0bc*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x841f0390, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x841f0390, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x844b6ac0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0xdb, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1 [0066.140] FindNextFileW (in: hFindFile=0x5107fa0, lpFindFileData=0x31e0bc | out: lpFindFileData=0x31e0bc*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0066.140] FindClose (in: hFindFile=0x5107fa0 | out: hFindFile=0x5107fa0) returned 1 [0066.140] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e344) returned 1 [0066.140] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e350) returned 1 [0066.140] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e384) returned 1 [0066.140] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\sk", nBufferLength=0x105, lpBuffer=0x31de8c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\sk", lpFilePart=0x0) returned 0x89 [0066.140] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\sk\\", nBufferLength=0x105, lpBuffer=0x31de60, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\sk\\", lpFilePart=0x0) returned 0x8a [0066.140] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\sk\\*", lpFindFileData=0x31e0ac | out: lpFindFileData=0x31e0ac*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x841eb570, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x841f0390, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x841f0390, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5107fa0 [0066.141] FindNextFileW (in: hFindFile=0x5107fa0, lpFindFileData=0x31e0bc | out: lpFindFileData=0x31e0bc*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x841eb570, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x841f0390, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x841f0390, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0066.141] FindNextFileW (in: hFindFile=0x5107fa0, lpFindFileData=0x31e0bc | out: lpFindFileData=0x31e0bc*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x841f0390, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x841f0390, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x844b6ac0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0xdb, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1 [0066.141] FindNextFileW (in: hFindFile=0x5107fa0, lpFindFileData=0x31e0bc | out: lpFindFileData=0x31e0bc*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x841f0390, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x841f0390, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x844b6ac0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0xdb, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 0 [0066.141] FindClose (in: hFindFile=0x5107fa0 | out: hFindFile=0x5107fa0) returned 1 [0066.141] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e344) returned 1 [0066.141] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e350) returned 1 [0066.141] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e384) returned 1 [0066.141] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\sl", nBufferLength=0x105, lpBuffer=0x31de8c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\sl", lpFilePart=0x0) returned 0x89 [0066.141] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\sl\\", nBufferLength=0x105, lpBuffer=0x31de60, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\sl\\", lpFilePart=0x0) returned 0x8a [0066.141] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\sl\\*", lpFindFileData=0x31e0ac | out: lpFindFileData=0x31e0ac*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x841f51b0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x841f78c0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x841f78c0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5107fa0 [0066.142] FindNextFileW (in: hFindFile=0x5107fa0, lpFindFileData=0x31e0bc | out: lpFindFileData=0x31e0bc*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x841f51b0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x841f78c0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x841f78c0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0066.142] FindNextFileW (in: hFindFile=0x5107fa0, lpFindFileData=0x31e0bc | out: lpFindFileData=0x31e0bc*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x841f78c0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x841f78c0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x844b6ac0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0xde, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1 [0066.142] FindNextFileW (in: hFindFile=0x5107fa0, lpFindFileData=0x31e0bc | out: lpFindFileData=0x31e0bc*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0066.142] FindClose (in: hFindFile=0x5107fa0 | out: hFindFile=0x5107fa0) returned 1 [0066.142] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e344) returned 1 [0066.142] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e350) returned 1 [0066.142] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e384) returned 1 [0066.142] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\sl", nBufferLength=0x105, lpBuffer=0x31de8c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\sl", lpFilePart=0x0) returned 0x89 [0066.142] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\sl\\", nBufferLength=0x105, lpBuffer=0x31de60, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\sl\\", lpFilePart=0x0) returned 0x8a [0066.142] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\sl\\*", lpFindFileData=0x31e0ac | out: lpFindFileData=0x31e0ac*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x841f51b0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x841f78c0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x841f78c0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5107fa0 [0066.142] FindNextFileW (in: hFindFile=0x5107fa0, lpFindFileData=0x31e0bc | out: lpFindFileData=0x31e0bc*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x841f51b0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x841f78c0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x841f78c0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0066.142] FindNextFileW (in: hFindFile=0x5107fa0, lpFindFileData=0x31e0bc | out: lpFindFileData=0x31e0bc*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x841f78c0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x841f78c0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x844b6ac0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0xde, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1 [0066.142] FindNextFileW (in: hFindFile=0x5107fa0, lpFindFileData=0x31e0bc | out: lpFindFileData=0x31e0bc*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x841f78c0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x841f78c0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x844b6ac0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0xde, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 0 [0066.143] FindClose (in: hFindFile=0x5107fa0 | out: hFindFile=0x5107fa0) returned 1 [0066.143] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e344) returned 1 [0066.143] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e350) returned 1 [0066.143] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e384) returned 1 [0066.143] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\sr", nBufferLength=0x105, lpBuffer=0x31de8c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\sr", lpFilePart=0x0) returned 0x89 [0066.143] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\sr\\", nBufferLength=0x105, lpBuffer=0x31de60, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\sr\\", lpFilePart=0x0) returned 0x8a [0066.143] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\sr\\*", lpFindFileData=0x31e0ac | out: lpFindFileData=0x31e0ac*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x841fc6e0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x841fedf0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x841fedf0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5107fa0 [0066.143] FindNextFileW (in: hFindFile=0x5107fa0, lpFindFileData=0x31e0bc | out: lpFindFileData=0x31e0bc*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x841fc6e0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x841fedf0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x841fedf0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0066.143] FindNextFileW (in: hFindFile=0x5107fa0, lpFindFileData=0x31e0bc | out: lpFindFileData=0x31e0bc*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x841fedf0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x841fedf0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x844b6ac0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0xec, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1 [0066.143] FindNextFileW (in: hFindFile=0x5107fa0, lpFindFileData=0x31e0bc | out: lpFindFileData=0x31e0bc*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0066.143] FindClose (in: hFindFile=0x5107fa0 | out: hFindFile=0x5107fa0) returned 1 [0066.143] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e344) returned 1 [0066.143] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e350) returned 1 [0066.143] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e384) returned 1 [0066.143] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\sr", nBufferLength=0x105, lpBuffer=0x31de8c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\sr", lpFilePart=0x0) returned 0x89 [0066.143] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\sr\\", nBufferLength=0x105, lpBuffer=0x31de60, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\sr\\", lpFilePart=0x0) returned 0x8a [0066.143] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\sr\\*", lpFindFileData=0x31e0ac | out: lpFindFileData=0x31e0ac*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x841fc6e0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x841fedf0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x841fedf0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5107fa0 [0066.144] FindNextFileW (in: hFindFile=0x5107fa0, lpFindFileData=0x31e0bc | out: lpFindFileData=0x31e0bc*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x841fc6e0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x841fedf0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x841fedf0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0066.144] FindNextFileW (in: hFindFile=0x5107fa0, lpFindFileData=0x31e0bc | out: lpFindFileData=0x31e0bc*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x841fedf0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x841fedf0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x844b6ac0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0xec, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1 [0066.144] FindNextFileW (in: hFindFile=0x5107fa0, lpFindFileData=0x31e0bc | out: lpFindFileData=0x31e0bc*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x841fedf0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x841fedf0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x844b6ac0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0xec, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 0 [0066.144] FindClose (in: hFindFile=0x5107fa0 | out: hFindFile=0x5107fa0) returned 1 [0066.144] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e344) returned 1 [0066.144] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e350) returned 1 [0066.144] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e384) returned 1 [0066.144] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\sv", nBufferLength=0x105, lpBuffer=0x31de8c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\sv", lpFilePart=0x0) returned 0x89 [0066.144] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\sv\\", nBufferLength=0x105, lpBuffer=0x31de60, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\sv\\", lpFilePart=0x0) returned 0x8a [0066.144] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\sv\\*", lpFindFileData=0x31e0ac | out: lpFindFileData=0x31e0ac*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x84203c10, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x84206320, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x84206320, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5107fa0 [0066.145] FindNextFileW (in: hFindFile=0x5107fa0, lpFindFileData=0x31e0bc | out: lpFindFileData=0x31e0bc*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x84203c10, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x84206320, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x84206320, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0066.145] FindNextFileW (in: hFindFile=0x5107fa0, lpFindFileData=0x31e0bc | out: lpFindFileData=0x31e0bc*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x84206320, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x84206320, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x844b91d0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0xd8, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1 [0066.145] FindNextFileW (in: hFindFile=0x5107fa0, lpFindFileData=0x31e0bc | out: lpFindFileData=0x31e0bc*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0066.145] FindClose (in: hFindFile=0x5107fa0 | out: hFindFile=0x5107fa0) returned 1 [0066.145] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e344) returned 1 [0066.145] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e350) returned 1 [0066.145] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e384) returned 1 [0066.145] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\sv", nBufferLength=0x105, lpBuffer=0x31de8c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\sv", lpFilePart=0x0) returned 0x89 [0066.145] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\sv\\", nBufferLength=0x105, lpBuffer=0x31de60, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\sv\\", lpFilePart=0x0) returned 0x8a [0066.145] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\sv\\*", lpFindFileData=0x31e0ac | out: lpFindFileData=0x31e0ac*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x84203c10, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x84206320, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x84206320, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5107fa0 [0066.146] FindNextFileW (in: hFindFile=0x5107fa0, lpFindFileData=0x31e0bc | out: lpFindFileData=0x31e0bc*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x84203c10, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x84206320, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x84206320, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0066.146] FindNextFileW (in: hFindFile=0x5107fa0, lpFindFileData=0x31e0bc | out: lpFindFileData=0x31e0bc*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x84206320, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x84206320, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x844b91d0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0xd8, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1 [0066.146] FindNextFileW (in: hFindFile=0x5107fa0, lpFindFileData=0x31e0bc | out: lpFindFileData=0x31e0bc*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x84206320, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x84206320, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x844b91d0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0xd8, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 0 [0066.146] FindClose (in: hFindFile=0x5107fa0 | out: hFindFile=0x5107fa0) returned 1 [0066.146] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e344) returned 1 [0066.146] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e350) returned 1 [0066.146] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e384) returned 1 [0066.146] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\th", nBufferLength=0x105, lpBuffer=0x31de8c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\th", lpFilePart=0x0) returned 0x89 [0066.146] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\th\\", nBufferLength=0x105, lpBuffer=0x31de60, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\th\\", lpFilePart=0x0) returned 0x8a [0066.146] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\th\\*", lpFindFileData=0x31e0ac | out: lpFindFileData=0x31e0ac*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x8420b140, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x8420d850, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x8420d850, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5107fa0 [0066.146] FindNextFileW (in: hFindFile=0x5107fa0, lpFindFileData=0x31e0bc | out: lpFindFileData=0x31e0bc*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x8420b140, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x8420d850, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x8420d850, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0066.146] FindNextFileW (in: hFindFile=0x5107fa0, lpFindFileData=0x31e0bc | out: lpFindFileData=0x31e0bc*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x8420d850, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x8420d850, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x844b91d0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x10a, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1 [0066.146] FindNextFileW (in: hFindFile=0x5107fa0, lpFindFileData=0x31e0bc | out: lpFindFileData=0x31e0bc*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0066.146] FindClose (in: hFindFile=0x5107fa0 | out: hFindFile=0x5107fa0) returned 1 [0066.146] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e344) returned 1 [0066.146] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e350) returned 1 [0066.146] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e384) returned 1 [0066.146] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\th", nBufferLength=0x105, lpBuffer=0x31de8c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\th", lpFilePart=0x0) returned 0x89 [0066.147] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\th\\", nBufferLength=0x105, lpBuffer=0x31de60, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\th\\", lpFilePart=0x0) returned 0x8a [0066.147] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\th\\*", lpFindFileData=0x31e0ac | out: lpFindFileData=0x31e0ac*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x8420b140, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x8420d850, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x8420d850, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5107fa0 [0066.147] FindNextFileW (in: hFindFile=0x5107fa0, lpFindFileData=0x31e0bc | out: lpFindFileData=0x31e0bc*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x8420b140, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x8420d850, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x8420d850, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0066.147] FindNextFileW (in: hFindFile=0x5107fa0, lpFindFileData=0x31e0bc | out: lpFindFileData=0x31e0bc*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x8420d850, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x8420d850, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x844b91d0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x10a, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1 [0066.147] FindNextFileW (in: hFindFile=0x5107fa0, lpFindFileData=0x31e0bc | out: lpFindFileData=0x31e0bc*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x8420d850, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x8420d850, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x844b91d0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x10a, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 0 [0066.147] FindClose (in: hFindFile=0x5107fa0 | out: hFindFile=0x5107fa0) returned 1 [0066.147] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e344) returned 1 [0066.147] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e350) returned 1 [0066.147] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e384) returned 1 [0066.147] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\tr", nBufferLength=0x105, lpBuffer=0x31de8c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\tr", lpFilePart=0x0) returned 0x89 [0066.147] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\tr\\", nBufferLength=0x105, lpBuffer=0x31de60, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\tr\\", lpFilePart=0x0) returned 0x8a [0066.147] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\tr\\*", lpFindFileData=0x31e0ac | out: lpFindFileData=0x31e0ac*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x84212670, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x84212670, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x84212670, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5107fa0 [0066.148] FindNextFileW (in: hFindFile=0x5107fa0, lpFindFileData=0x31e0bc | out: lpFindFileData=0x31e0bc*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x84212670, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x84212670, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x84212670, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0066.148] FindNextFileW (in: hFindFile=0x5107fa0, lpFindFileData=0x31e0bc | out: lpFindFileData=0x31e0bc*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x84212670, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x84214d80, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x844b91d0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0xe1, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1 [0066.148] FindNextFileW (in: hFindFile=0x5107fa0, lpFindFileData=0x31e0bc | out: lpFindFileData=0x31e0bc*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0066.148] FindClose (in: hFindFile=0x5107fa0 | out: hFindFile=0x5107fa0) returned 1 [0066.148] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e344) returned 1 [0066.148] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e350) returned 1 [0066.148] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e384) returned 1 [0066.148] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\tr", nBufferLength=0x105, lpBuffer=0x31de8c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\tr", lpFilePart=0x0) returned 0x89 [0066.148] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\tr\\", nBufferLength=0x105, lpBuffer=0x31de60, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\tr\\", lpFilePart=0x0) returned 0x8a [0066.148] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\tr\\*", lpFindFileData=0x31e0ac | out: lpFindFileData=0x31e0ac*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x84212670, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x84212670, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x84212670, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5107fa0 [0066.148] FindNextFileW (in: hFindFile=0x5107fa0, lpFindFileData=0x31e0bc | out: lpFindFileData=0x31e0bc*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x84212670, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x84212670, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x84212670, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0066.149] FindNextFileW (in: hFindFile=0x5107fa0, lpFindFileData=0x31e0bc | out: lpFindFileData=0x31e0bc*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x84212670, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x84214d80, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x844b91d0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0xe1, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1 [0066.149] FindNextFileW (in: hFindFile=0x5107fa0, lpFindFileData=0x31e0bc | out: lpFindFileData=0x31e0bc*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x84212670, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x84214d80, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x844b91d0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0xe1, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 0 [0066.149] FindClose (in: hFindFile=0x5107fa0 | out: hFindFile=0x5107fa0) returned 1 [0066.149] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e344) returned 1 [0066.149] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e350) returned 1 [0066.149] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e384) returned 1 [0066.149] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\uk", nBufferLength=0x105, lpBuffer=0x31de8c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\uk", lpFilePart=0x0) returned 0x89 [0066.149] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\uk\\", nBufferLength=0x105, lpBuffer=0x31de60, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\uk\\", lpFilePart=0x0) returned 0x8a [0066.149] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\uk\\*", lpFindFileData=0x31e0ac | out: lpFindFileData=0x31e0ac*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x84219ba0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x8421c2b0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x8421c2b0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5107fa0 [0066.149] FindNextFileW (in: hFindFile=0x5107fa0, lpFindFileData=0x31e0bc | out: lpFindFileData=0x31e0bc*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x84219ba0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x8421c2b0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x8421c2b0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0066.149] FindNextFileW (in: hFindFile=0x5107fa0, lpFindFileData=0x31e0bc | out: lpFindFileData=0x31e0bc*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x8421c2b0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x8421c2b0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x844b91d0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0xfe, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1 [0066.149] FindNextFileW (in: hFindFile=0x5107fa0, lpFindFileData=0x31e0bc | out: lpFindFileData=0x31e0bc*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0066.149] FindClose (in: hFindFile=0x5107fa0 | out: hFindFile=0x5107fa0) returned 1 [0066.149] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e344) returned 1 [0066.149] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e350) returned 1 [0066.149] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e384) returned 1 [0066.149] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\uk", nBufferLength=0x105, lpBuffer=0x31de8c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\uk", lpFilePart=0x0) returned 0x89 [0066.149] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\uk\\", nBufferLength=0x105, lpBuffer=0x31de60, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\uk\\", lpFilePart=0x0) returned 0x8a [0066.150] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\uk\\*", lpFindFileData=0x31e0ac | out: lpFindFileData=0x31e0ac*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x84219ba0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x8421c2b0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x8421c2b0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5107fa0 [0066.150] FindNextFileW (in: hFindFile=0x5107fa0, lpFindFileData=0x31e0bc | out: lpFindFileData=0x31e0bc*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x84219ba0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x8421c2b0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x8421c2b0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0066.150] FindNextFileW (in: hFindFile=0x5107fa0, lpFindFileData=0x31e0bc | out: lpFindFileData=0x31e0bc*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x8421c2b0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x8421c2b0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x844b91d0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0xfe, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1 [0066.150] FindNextFileW (in: hFindFile=0x5107fa0, lpFindFileData=0x31e0bc | out: lpFindFileData=0x31e0bc*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x8421c2b0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x8421c2b0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x844b91d0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0xfe, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 0 [0066.150] FindClose (in: hFindFile=0x5107fa0 | out: hFindFile=0x5107fa0) returned 1 [0066.150] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e344) returned 1 [0066.150] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e350) returned 1 [0066.150] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e384) returned 1 [0066.150] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\vi", nBufferLength=0x105, lpBuffer=0x31de8c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\vi", lpFilePart=0x0) returned 0x89 [0066.150] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\vi\\", nBufferLength=0x105, lpBuffer=0x31de60, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\vi\\", lpFilePart=0x0) returned 0x8a [0066.150] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\vi\\*", lpFindFileData=0x31e0ac | out: lpFindFileData=0x31e0ac*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x842210d0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x842237e0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x842237e0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5107fa0 [0066.151] FindNextFileW (in: hFindFile=0x5107fa0, lpFindFileData=0x31e0bc | out: lpFindFileData=0x31e0bc*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x842210d0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x842237e0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x842237e0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0066.151] FindNextFileW (in: hFindFile=0x5107fa0, lpFindFileData=0x31e0bc | out: lpFindFileData=0x31e0bc*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x842237e0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x842237e0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x844b91d0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0xe3, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1 [0066.151] FindNextFileW (in: hFindFile=0x5107fa0, lpFindFileData=0x31e0bc | out: lpFindFileData=0x31e0bc*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0066.151] FindClose (in: hFindFile=0x5107fa0 | out: hFindFile=0x5107fa0) returned 1 [0066.151] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e344) returned 1 [0066.151] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e350) returned 1 [0066.151] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e384) returned 1 [0066.151] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\vi", nBufferLength=0x105, lpBuffer=0x31de8c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\vi", lpFilePart=0x0) returned 0x89 [0066.151] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\vi\\", nBufferLength=0x105, lpBuffer=0x31de60, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\vi\\", lpFilePart=0x0) returned 0x8a [0066.151] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\vi\\*", lpFindFileData=0x31e0ac | out: lpFindFileData=0x31e0ac*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x842210d0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x842237e0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x842237e0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5107fa0 [0066.151] FindNextFileW (in: hFindFile=0x5107fa0, lpFindFileData=0x31e0bc | out: lpFindFileData=0x31e0bc*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x842210d0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x842237e0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x842237e0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0066.152] FindNextFileW (in: hFindFile=0x5107fa0, lpFindFileData=0x31e0bc | out: lpFindFileData=0x31e0bc*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x842237e0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x842237e0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x844b91d0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0xe3, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1 [0066.152] FindNextFileW (in: hFindFile=0x5107fa0, lpFindFileData=0x31e0bc | out: lpFindFileData=0x31e0bc*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x842237e0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x842237e0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x844b91d0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0xe3, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 0 [0066.152] FindClose (in: hFindFile=0x5107fa0 | out: hFindFile=0x5107fa0) returned 1 [0066.152] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e344) returned 1 [0066.152] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e350) returned 1 [0066.152] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e384) returned 1 [0066.152] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\zh_CN", nBufferLength=0x105, lpBuffer=0x31de8c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\zh_CN", lpFilePart=0x0) returned 0x8c [0066.152] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\zh_CN\\", nBufferLength=0x105, lpBuffer=0x31de60, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\zh_CN\\", lpFilePart=0x0) returned 0x8d [0066.152] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\zh_CN\\*", lpFindFileData=0x31e0ac | out: lpFindFileData=0x31e0ac*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x84228600, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x8422ad10, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x8422ad10, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5107fa0 [0066.152] FindNextFileW (in: hFindFile=0x5107fa0, lpFindFileData=0x31e0bc | out: lpFindFileData=0x31e0bc*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x84228600, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x8422ad10, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x8422ad10, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0066.152] FindNextFileW (in: hFindFile=0x5107fa0, lpFindFileData=0x31e0bc | out: lpFindFileData=0x31e0bc*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x8422ad10, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x8422ad10, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x844b91d0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0xd4, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1 [0066.152] FindNextFileW (in: hFindFile=0x5107fa0, lpFindFileData=0x31e0bc | out: lpFindFileData=0x31e0bc*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0066.152] FindClose (in: hFindFile=0x5107fa0 | out: hFindFile=0x5107fa0) returned 1 [0066.152] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e344) returned 1 [0066.152] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e350) returned 1 [0066.152] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e384) returned 1 [0066.152] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\zh_CN", nBufferLength=0x105, lpBuffer=0x31de8c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\zh_CN", lpFilePart=0x0) returned 0x8c [0066.153] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\zh_CN\\", nBufferLength=0x105, lpBuffer=0x31de60, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\zh_CN\\", lpFilePart=0x0) returned 0x8d [0066.153] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\zh_CN\\*", lpFindFileData=0x31e0ac | out: lpFindFileData=0x31e0ac*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x84228600, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x8422ad10, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x8422ad10, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5107fa0 [0066.153] FindNextFileW (in: hFindFile=0x5107fa0, lpFindFileData=0x31e0bc | out: lpFindFileData=0x31e0bc*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x84228600, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x8422ad10, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x8422ad10, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0066.153] FindNextFileW (in: hFindFile=0x5107fa0, lpFindFileData=0x31e0bc | out: lpFindFileData=0x31e0bc*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x8422ad10, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x8422ad10, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x844b91d0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0xd4, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1 [0066.153] FindNextFileW (in: hFindFile=0x5107fa0, lpFindFileData=0x31e0bc | out: lpFindFileData=0x31e0bc*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x8422ad10, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x8422ad10, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x844b91d0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0xd4, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 0 [0066.153] FindClose (in: hFindFile=0x5107fa0 | out: hFindFile=0x5107fa0) returned 1 [0066.153] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e344) returned 1 [0066.153] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e350) returned 1 [0066.153] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e384) returned 1 [0066.153] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\zh_TW", nBufferLength=0x105, lpBuffer=0x31de8c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\zh_TW", lpFilePart=0x0) returned 0x8c [0066.153] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\zh_TW\\", nBufferLength=0x105, lpBuffer=0x31de60, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\zh_TW\\", lpFilePart=0x0) returned 0x8d [0066.153] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\zh_TW\\*", lpFindFileData=0x31e0ac | out: lpFindFileData=0x31e0ac*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x8422fb30, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x84232240, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x84232240, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5107fa0 [0066.153] FindNextFileW (in: hFindFile=0x5107fa0, lpFindFileData=0x31e0bc | out: lpFindFileData=0x31e0bc*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x8422fb30, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x84232240, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x84232240, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0066.153] FindNextFileW (in: hFindFile=0x5107fa0, lpFindFileData=0x31e0bc | out: lpFindFileData=0x31e0bc*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x84232240, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x84232240, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x844b91d0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0xd4, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1 [0066.153] FindNextFileW (in: hFindFile=0x5107fa0, lpFindFileData=0x31e0bc | out: lpFindFileData=0x31e0bc*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0066.153] FindClose (in: hFindFile=0x5107fa0 | out: hFindFile=0x5107fa0) returned 1 [0066.154] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e344) returned 1 [0066.154] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e350) returned 1 [0066.154] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e384) returned 1 [0066.154] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\zh_TW", nBufferLength=0x105, lpBuffer=0x31de8c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\zh_TW", lpFilePart=0x0) returned 0x8c [0066.154] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\zh_TW\\", nBufferLength=0x105, lpBuffer=0x31de60, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\zh_TW\\", lpFilePart=0x0) returned 0x8d [0066.154] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\zh_TW\\*", lpFindFileData=0x31e0ac | out: lpFindFileData=0x31e0ac*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x8422fb30, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x84232240, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x84232240, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5107fa0 [0066.154] FindNextFileW (in: hFindFile=0x5107fa0, lpFindFileData=0x31e0bc | out: lpFindFileData=0x31e0bc*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x8422fb30, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x84232240, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x84232240, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0066.154] FindNextFileW (in: hFindFile=0x5107fa0, lpFindFileData=0x31e0bc | out: lpFindFileData=0x31e0bc*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x84232240, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x84232240, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x844b91d0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0xd4, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1 [0066.154] FindNextFileW (in: hFindFile=0x5107fa0, lpFindFileData=0x31e0bc | out: lpFindFileData=0x31e0bc*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x84232240, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x84232240, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x844b91d0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0xd4, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 0 [0066.154] FindClose (in: hFindFile=0x5107fa0 | out: hFindFile=0x5107fa0) returned 1 [0066.154] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e344) returned 1 [0066.154] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e350) returned 1 [0066.154] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e3fc) returned 1 [0066.154] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_metadata", nBufferLength=0x105, lpBuffer=0x31df04, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_metadata", lpFilePart=0x0) returned 0x87 [0066.154] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_metadata\\", nBufferLength=0x105, lpBuffer=0x31ded8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_metadata\\", lpFilePart=0x0) returned 0x88 [0066.154] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_metadata\\*", lpFindFileData=0x31e124 | out: lpFindFileData=0x31e124*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x842481d0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x844eed30, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x844eed30, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5107fa0 [0066.154] FindNextFileW (in: hFindFile=0x5107fa0, lpFindFileData=0x31e134 | out: lpFindFileData=0x31e134*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x842481d0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x844eed30, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x844eed30, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0066.155] FindNextFileW (in: hFindFile=0x5107fa0, lpFindFileData=0x31e134 | out: lpFindFileData=0x31e134*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x844eed30, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x844eed30, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x844eed30, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x160, dwReserved0=0x0, dwReserved1=0x0, cFileName="computed_hashes.json", cAlternateFileName="COMPUT~1.JSO")) returned 1 [0066.155] FindNextFileW (in: hFindFile=0x5107fa0, lpFindFileData=0x31e134 | out: lpFindFileData=0x31e134*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x8424a8e0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x8424a8e0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0xbcc13a00, ftLastWriteTime.dwHighDateTime=0x1d03f5e, nFileSizeHigh=0x0, nFileSizeLow=0x2b56, dwReserved0=0x0, dwReserved1=0x0, cFileName="verified_contents.json", cAlternateFileName="VERIFI~1.JSO")) returned 1 [0066.155] FindNextFileW (in: hFindFile=0x5107fa0, lpFindFileData=0x31e134 | out: lpFindFileData=0x31e134*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0066.155] FindClose (in: hFindFile=0x5107fa0 | out: hFindFile=0x5107fa0) returned 1 [0066.155] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e3bc) returned 1 [0066.155] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e3c8) returned 1 [0066.155] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e3fc) returned 1 [0066.155] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_metadata", nBufferLength=0x105, lpBuffer=0x31df04, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_metadata", lpFilePart=0x0) returned 0x87 [0066.155] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_metadata\\", nBufferLength=0x105, lpBuffer=0x31ded8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_metadata\\", lpFilePart=0x0) returned 0x88 [0066.155] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_metadata\\*", lpFindFileData=0x31e124 | out: lpFindFileData=0x31e124*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x842481d0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x844eed30, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x844eed30, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5107fa0 [0066.155] FindNextFileW (in: hFindFile=0x5107fa0, lpFindFileData=0x31e134 | out: lpFindFileData=0x31e134*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x842481d0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x844eed30, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x844eed30, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0066.155] FindNextFileW (in: hFindFile=0x5107fa0, lpFindFileData=0x31e134 | out: lpFindFileData=0x31e134*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x844eed30, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x844eed30, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x844eed30, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x160, dwReserved0=0x0, dwReserved1=0x0, cFileName="computed_hashes.json", cAlternateFileName="COMPUT~1.JSO")) returned 1 [0066.155] FindNextFileW (in: hFindFile=0x5107fa0, lpFindFileData=0x31e134 | out: lpFindFileData=0x31e134*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x8424a8e0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x8424a8e0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0xbcc13a00, ftLastWriteTime.dwHighDateTime=0x1d03f5e, nFileSizeHigh=0x0, nFileSizeLow=0x2b56, dwReserved0=0x0, dwReserved1=0x0, cFileName="verified_contents.json", cAlternateFileName="VERIFI~1.JSO")) returned 1 [0066.155] FindNextFileW (in: hFindFile=0x5107fa0, lpFindFileData=0x31e134 | out: lpFindFileData=0x31e134*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x8424a8e0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x8424a8e0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0xbcc13a00, ftLastWriteTime.dwHighDateTime=0x1d03f5e, nFileSizeHigh=0x0, nFileSizeLow=0x2b56, dwReserved0=0x0, dwReserved1=0x0, cFileName="verified_contents.json", cAlternateFileName="VERIFI~1.JSO")) returned 0 [0066.155] FindClose (in: hFindFile=0x5107fa0 | out: hFindFile=0x5107fa0) returned 1 [0066.155] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e3bc) returned 1 [0066.155] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e3c8) returned 1 [0066.155] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e4ec) returned 1 [0066.155] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi", nBufferLength=0x105, lpBuffer=0x31dff4, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi", lpFilePart=0x0) returned 0x77 [0066.156] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\", nBufferLength=0x105, lpBuffer=0x31dfc8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\", lpFilePart=0x0) returned 0x78 [0066.156] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\*", lpFindFileData=0x31e214 | out: lpFindFileData=0x31e214*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x862fc2f0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86322450, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86322450, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5107fa0 [0066.157] FindNextFileW (in: hFindFile=0x5107fa0, lpFindFileData=0x31e224 | out: lpFindFileData=0x31e224*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x862fc2f0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86322450, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86322450, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0066.157] FindNextFileW (in: hFindFile=0x5107fa0, lpFindFileData=0x31e224 | out: lpFindFileData=0x31e224*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x85dd4d90, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x862fc2f0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x862fc2f0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="1.4_0", cAlternateFileName="")) returned 1 [0066.157] FindNextFileW (in: hFindFile=0x5107fa0, lpFindFileData=0x31e224 | out: lpFindFileData=0x31e224*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x85dd4d90, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x862fc2f0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x862fc2f0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="1.4_0", cAlternateFileName="")) returned 0 [0066.157] FindClose (in: hFindFile=0x5107fa0 | out: hFindFile=0x5107fa0) returned 1 [0066.157] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e4ac) returned 1 [0066.157] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e4b8) returned 1 [0066.157] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e4ec) returned 1 [0066.158] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi", nBufferLength=0x105, lpBuffer=0x31dff4, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi", lpFilePart=0x0) returned 0x77 [0066.158] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\", nBufferLength=0x105, lpBuffer=0x31dfc8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\", lpFilePart=0x0) returned 0x78 [0066.158] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\*", lpFindFileData=0x31e214 | out: lpFindFileData=0x31e214*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x862fc2f0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86322450, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86322450, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5107fa0 [0066.158] FindNextFileW (in: hFindFile=0x5107fa0, lpFindFileData=0x31e224 | out: lpFindFileData=0x31e224*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x862fc2f0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86322450, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86322450, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0066.158] FindNextFileW (in: hFindFile=0x5107fa0, lpFindFileData=0x31e224 | out: lpFindFileData=0x31e224*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x85dd4d90, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x862fc2f0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x862fc2f0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="1.4_0", cAlternateFileName="")) returned 1 [0066.158] FindNextFileW (in: hFindFile=0x5107fa0, lpFindFileData=0x31e224 | out: lpFindFileData=0x31e224*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0066.158] FindClose (in: hFindFile=0x5107fa0 | out: hFindFile=0x5107fa0) returned 1 [0066.158] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e4ac) returned 1 [0066.158] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e4b8) returned 1 [0066.158] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e474) returned 1 [0066.158] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0", nBufferLength=0x105, lpBuffer=0x31df7c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0", lpFilePart=0x0) returned 0x7d [0066.158] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\", nBufferLength=0x105, lpBuffer=0x31df50, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\", lpFilePart=0x0) returned 0x7e [0066.158] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\*", lpFindFileData=0x31e19c | out: lpFindFileData=0x31e19c*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x85dd4d90, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x862fc2f0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x862fc2f0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5107fa0 [0066.160] FindNextFileW (in: hFindFile=0x5107fa0, lpFindFileData=0x31e1ac | out: lpFindFileData=0x31e1ac*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x85dd4d90, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x862fc2f0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x862fc2f0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0066.160] FindClose (in: hFindFile=0x5107fa0 | out: hFindFile=0x5107fa0) returned 1 [0066.161] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e434) returned 1 [0066.161] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e440) returned 1 [0066.161] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e474) returned 1 [0066.161] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0", nBufferLength=0x105, lpBuffer=0x31df7c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0", lpFilePart=0x0) returned 0x7d [0066.161] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\", nBufferLength=0x105, lpBuffer=0x31df50, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\", lpFilePart=0x0) returned 0x7e [0066.161] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\*", lpFindFileData=0x31e19c | out: lpFindFileData=0x31e19c*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x85dd4d90, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x862fc2f0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x862fc2f0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5107fa0 [0066.162] FindClose (in: hFindFile=0x5107fa0 | out: hFindFile=0x5107fa0) returned 1 [0066.163] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\128.png", nBufferLength=0x105, lpBuffer=0x31de4c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\128.png", lpFilePart=0x0) returned 0x85 [0066.163] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\128.png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\128.png"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x178 [0066.164] GetFileType (hFile=0x178) returned 0x1 [0066.164] GetFileType (hFile=0x178) returned 0x1 [0066.164] GetFileSize (in: hFile=0x178, lpFileSizeHigh=0x31e448 | out: lpFileSizeHigh=0x31e448*=0x0) returned 0x1378 [0066.164] ReadFile (in: hFile=0x178, lpBuffer=0x26a6b7c, nNumberOfBytesToRead=0x1378, lpNumberOfBytesRead=0x31e3f4, lpOverlapped=0x0 | out: lpBuffer=0x26a6b7c*, lpNumberOfBytesRead=0x31e3f4*=0x1378, lpOverlapped=0x0) returned 1 [0066.195] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\128.png", nBufferLength=0x105, lpBuffer=0x31de38, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\128.png", lpFilePart=0x0) returned 0x85 [0066.195] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\128.png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\128.png"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x178 [0066.196] GetFileType (hFile=0x178) returned 0x1 [0066.196] GetFileType (hFile=0x178) returned 0x1 [0066.196] WriteFile (in: hFile=0x178, lpBuffer=0x26f9c3c*, nNumberOfBytesToWrite=0x1380, lpNumberOfBytesWritten=0x31e3e8, lpOverlapped=0x0 | out: lpBuffer=0x26f9c3c*, lpNumberOfBytesWritten=0x31e3e8*=0x1380, lpOverlapped=0x0) returned 1 [0066.197] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\128.png", nBufferLength=0x105, lpBuffer=0x31df6c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\128.png", lpFilePart=0x0) returned 0x85 [0066.197] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\128.png", nBufferLength=0x105, lpBuffer=0x31df6c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\128.png", lpFilePart=0x0) returned 0x85 [0066.197] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\128.png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\128.png"), fInfoLevelId=0x0, lpFileInformation=0x31e448 | out: lpFileInformation=0x31e448*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x85dd4d90, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x862fc2f0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0xae68dc0, ftLastWriteTime.dwHighDateTime=0x1d6eb7f, nFileSizeHigh=0x0, nFileSizeLow=0x1380)) returned 1 [0066.198] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\128.png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\128.png"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\128.png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\128.png")) returned 1 [0066.198] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales", nBufferLength=0x105, lpBuffer=0x31df04, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales", lpFilePart=0x0) returned 0x86 [0066.198] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\", nBufferLength=0x105, lpBuffer=0x31ded8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\", lpFilePart=0x0) returned 0x87 [0066.198] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\*", lpFindFileData=0x31e124 | out: lpFindFileData=0x31e124*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x85dd4d90, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85fec7e0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85fec7e0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5107ae0 [0066.204] FindClose (in: hFindFile=0x5107ae0 | out: hFindFile=0x5107ae0) returned 1 [0066.205] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales", nBufferLength=0x105, lpBuffer=0x31df04, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales", lpFilePart=0x0) returned 0x86 [0066.205] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\", nBufferLength=0x105, lpBuffer=0x31ded8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\", lpFilePart=0x0) returned 0x87 [0066.205] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\*", lpFindFileData=0x31e124 | out: lpFindFileData=0x31e124*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x85dd4d90, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85fec7e0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85fec7e0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5107ae0 [0066.206] FindClose (in: hFindFile=0x5107ae0 | out: hFindFile=0x5107ae0) returned 1 [0066.207] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\af", nBufferLength=0x105, lpBuffer=0x31de8c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\af", lpFilePart=0x0) returned 0x89 [0066.207] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\af\\", nBufferLength=0x105, lpBuffer=0x31de60, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\af\\", lpFilePart=0x0) returned 0x8a [0066.207] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\af\\*", lpFindFileData=0x31e0ac | out: lpFindFileData=0x31e0ac*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x85dd4d90, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85dd4d90, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85dd4d90, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5107ae0 [0066.209] FindClose (in: hFindFile=0x5107ae0 | out: hFindFile=0x5107ae0) returned 1 [0066.209] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\af", nBufferLength=0x105, lpBuffer=0x31de8c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\af", lpFilePart=0x0) returned 0x89 [0066.209] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\af\\", nBufferLength=0x105, lpBuffer=0x31de60, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\af\\", lpFilePart=0x0) returned 0x8a [0066.209] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\af\\*", lpFindFileData=0x31e0ac | out: lpFindFileData=0x31e0ac*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x85dd4d90, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85dd4d90, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85dd4d90, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5107ae0 [0066.209] FindClose (in: hFindFile=0x5107ae0 | out: hFindFile=0x5107ae0) returned 1 [0066.209] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\am", nBufferLength=0x105, lpBuffer=0x31de8c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\am", lpFilePart=0x0) returned 0x89 [0066.209] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\am\\", nBufferLength=0x105, lpBuffer=0x31de60, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\am\\", lpFilePart=0x0) returned 0x8a [0066.209] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\am\\*", lpFindFileData=0x31e0ac | out: lpFindFileData=0x31e0ac*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x85dfaef0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85dfaef0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85dfaef0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5107ae0 [0066.209] FindClose (in: hFindFile=0x5107ae0 | out: hFindFile=0x5107ae0) returned 1 [0066.210] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\am", nBufferLength=0x105, lpBuffer=0x31de8c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\am", lpFilePart=0x0) returned 0x89 [0066.210] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\am\\", nBufferLength=0x105, lpBuffer=0x31de60, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\am\\", lpFilePart=0x0) returned 0x8a [0066.210] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\am\\*", lpFindFileData=0x31e0ac | out: lpFindFileData=0x31e0ac*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x85dfaef0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85dfaef0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85dfaef0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5107ae0 [0066.210] FindClose (in: hFindFile=0x5107ae0 | out: hFindFile=0x5107ae0) returned 1 [0066.210] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\ar", nBufferLength=0x105, lpBuffer=0x31de8c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\ar", lpFilePart=0x0) returned 0x89 [0066.210] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\ar\\", nBufferLength=0x105, lpBuffer=0x31de60, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\ar\\", lpFilePart=0x0) returned 0x8a [0066.210] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\ar\\*", lpFindFileData=0x31e0ac | out: lpFindFileData=0x31e0ac*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x85dfaef0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85dfaef0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85dfaef0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5107ae0 [0066.211] FindClose (in: hFindFile=0x5107ae0 | out: hFindFile=0x5107ae0) returned 1 [0066.211] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\ar", nBufferLength=0x105, lpBuffer=0x31de8c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\ar", lpFilePart=0x0) returned 0x89 [0066.211] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\ar\\", nBufferLength=0x105, lpBuffer=0x31de60, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\ar\\", lpFilePart=0x0) returned 0x8a [0066.211] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\ar\\*", lpFindFileData=0x31e0ac | out: lpFindFileData=0x31e0ac*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x85dfaef0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85dfaef0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85dfaef0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5107ae0 [0066.211] FindClose (in: hFindFile=0x5107ae0 | out: hFindFile=0x5107ae0) returned 1 [0066.211] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\az", nBufferLength=0x105, lpBuffer=0x31de8c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\az", lpFilePart=0x0) returned 0x89 [0066.211] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\az\\", nBufferLength=0x105, lpBuffer=0x31de60, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\az\\", lpFilePart=0x0) returned 0x8a [0066.211] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\az\\*", lpFindFileData=0x31e0ac | out: lpFindFileData=0x31e0ac*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x85dfaef0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85dfaef0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85dfaef0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5107ae0 [0066.212] FindClose (in: hFindFile=0x5107ae0 | out: hFindFile=0x5107ae0) returned 1 [0066.212] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\az", nBufferLength=0x105, lpBuffer=0x31de8c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\az", lpFilePart=0x0) returned 0x89 [0066.212] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\az\\", nBufferLength=0x105, lpBuffer=0x31de60, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\az\\", lpFilePart=0x0) returned 0x8a [0066.212] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\az\\*", lpFindFileData=0x31e0ac | out: lpFindFileData=0x31e0ac*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x85dfaef0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85dfaef0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85dfaef0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5107ae0 [0066.212] FindClose (in: hFindFile=0x5107ae0 | out: hFindFile=0x5107ae0) returned 1 [0066.212] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\bg", nBufferLength=0x105, lpBuffer=0x31de8c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\bg", lpFilePart=0x0) returned 0x89 [0066.212] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\bg\\", nBufferLength=0x105, lpBuffer=0x31de60, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\bg\\", lpFilePart=0x0) returned 0x8a [0066.212] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\bg\\*", lpFindFileData=0x31e0ac | out: lpFindFileData=0x31e0ac*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x85dfaef0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85dfaef0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85dfaef0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5107ae0 [0066.213] FindClose (in: hFindFile=0x5107ae0 | out: hFindFile=0x5107ae0) returned 1 [0066.213] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\bg", nBufferLength=0x105, lpBuffer=0x31de8c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\bg", lpFilePart=0x0) returned 0x89 [0066.213] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\bg\\", nBufferLength=0x105, lpBuffer=0x31de60, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\bg\\", lpFilePart=0x0) returned 0x8a [0066.213] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\bg\\*", lpFindFileData=0x31e0ac | out: lpFindFileData=0x31e0ac*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x85dfaef0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85dfaef0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85dfaef0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5107ae0 [0066.213] FindClose (in: hFindFile=0x5107ae0 | out: hFindFile=0x5107ae0) returned 1 [0066.213] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\bn", nBufferLength=0x105, lpBuffer=0x31de8c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\bn", lpFilePart=0x0) returned 0x89 [0066.213] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\bn\\", nBufferLength=0x105, lpBuffer=0x31de60, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\bn\\", lpFilePart=0x0) returned 0x8a [0066.213] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\bn\\*", lpFindFileData=0x31e0ac | out: lpFindFileData=0x31e0ac*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x85dfaef0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85dfaef0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85dfaef0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5107ae0 [0066.214] FindClose (in: hFindFile=0x5107ae0 | out: hFindFile=0x5107ae0) returned 1 [0066.214] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\bn", nBufferLength=0x105, lpBuffer=0x31de8c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\bn", lpFilePart=0x0) returned 0x89 [0066.215] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\bn\\", nBufferLength=0x105, lpBuffer=0x31de60, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\bn\\", lpFilePart=0x0) returned 0x8a [0066.215] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\bn\\*", lpFindFileData=0x31e0ac | out: lpFindFileData=0x31e0ac*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x85dfaef0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85dfaef0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85dfaef0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5107ae0 [0066.215] FindClose (in: hFindFile=0x5107ae0 | out: hFindFile=0x5107ae0) returned 1 [0066.215] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\ca", nBufferLength=0x105, lpBuffer=0x31de8c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\ca", lpFilePart=0x0) returned 0x89 [0066.215] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\ca\\", nBufferLength=0x105, lpBuffer=0x31de60, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\ca\\", lpFilePart=0x0) returned 0x8a [0066.215] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\ca\\*", lpFindFileData=0x31e0ac | out: lpFindFileData=0x31e0ac*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x85dfaef0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85dfaef0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85dfaef0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5107ae0 [0066.216] FindClose (in: hFindFile=0x5107ae0 | out: hFindFile=0x5107ae0) returned 1 [0066.216] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\ca", nBufferLength=0x105, lpBuffer=0x31de8c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\ca", lpFilePart=0x0) returned 0x89 [0066.216] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\ca\\", nBufferLength=0x105, lpBuffer=0x31de60, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\ca\\", lpFilePart=0x0) returned 0x8a [0066.216] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\ca\\*", lpFindFileData=0x31e0ac | out: lpFindFileData=0x31e0ac*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x85dfaef0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85dfaef0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85dfaef0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5107ae0 [0066.216] FindClose (in: hFindFile=0x5107ae0 | out: hFindFile=0x5107ae0) returned 1 [0066.216] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\cs", nBufferLength=0x105, lpBuffer=0x31de8c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\cs", lpFilePart=0x0) returned 0x89 [0066.216] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\cs\\", nBufferLength=0x105, lpBuffer=0x31de60, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\cs\\", lpFilePart=0x0) returned 0x8a [0066.216] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\cs\\*", lpFindFileData=0x31e0ac | out: lpFindFileData=0x31e0ac*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x85e23760, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85e23760, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85e23760, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5107ae0 [0066.216] FindClose (in: hFindFile=0x5107ae0 | out: hFindFile=0x5107ae0) returned 1 [0066.217] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\cs", nBufferLength=0x105, lpBuffer=0x31de8c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\cs", lpFilePart=0x0) returned 0x89 [0066.217] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\cs\\", nBufferLength=0x105, lpBuffer=0x31de60, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\cs\\", lpFilePart=0x0) returned 0x8a [0066.217] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\cs\\*", lpFindFileData=0x31e0ac | out: lpFindFileData=0x31e0ac*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x85e23760, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85e23760, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85e23760, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5107ae0 [0066.217] FindClose (in: hFindFile=0x5107ae0 | out: hFindFile=0x5107ae0) returned 1 [0066.217] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\da", nBufferLength=0x105, lpBuffer=0x31de8c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\da", lpFilePart=0x0) returned 0x89 [0066.217] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\da\\", nBufferLength=0x105, lpBuffer=0x31de60, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\da\\", lpFilePart=0x0) returned 0x8a [0066.217] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\da\\*", lpFindFileData=0x31e0ac | out: lpFindFileData=0x31e0ac*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x85e23760, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85e23760, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85e23760, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5107ae0 [0066.218] FindClose (in: hFindFile=0x5107ae0 | out: hFindFile=0x5107ae0) returned 1 [0066.218] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\da", nBufferLength=0x105, lpBuffer=0x31de8c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\da", lpFilePart=0x0) returned 0x89 [0066.218] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\da\\", nBufferLength=0x105, lpBuffer=0x31de60, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\da\\", lpFilePart=0x0) returned 0x8a [0066.218] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\da\\*", lpFindFileData=0x31e0ac | out: lpFindFileData=0x31e0ac*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x85e23760, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85e23760, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85e23760, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5107ae0 [0066.218] FindClose (in: hFindFile=0x5107ae0 | out: hFindFile=0x5107ae0) returned 1 [0066.218] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\de", nBufferLength=0x105, lpBuffer=0x31de8c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\de", lpFilePart=0x0) returned 0x89 [0066.218] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\de\\", nBufferLength=0x105, lpBuffer=0x31de60, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\de\\", lpFilePart=0x0) returned 0x8a [0066.218] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\de\\*", lpFindFileData=0x31e0ac | out: lpFindFileData=0x31e0ac*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x85e23760, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85e23760, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85e23760, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5107ae0 [0066.218] FindClose (in: hFindFile=0x5107ae0 | out: hFindFile=0x5107ae0) returned 1 [0066.218] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\de", nBufferLength=0x105, lpBuffer=0x31de8c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\de", lpFilePart=0x0) returned 0x89 [0066.219] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\de\\", nBufferLength=0x105, lpBuffer=0x31de60, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\de\\", lpFilePart=0x0) returned 0x8a [0066.219] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\de\\*", lpFindFileData=0x31e0ac | out: lpFindFileData=0x31e0ac*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x85e23760, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85e23760, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85e23760, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5107ae0 [0066.219] FindClose (in: hFindFile=0x5107ae0 | out: hFindFile=0x5107ae0) returned 1 [0066.219] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\el", nBufferLength=0x105, lpBuffer=0x31de8c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\el", lpFilePart=0x0) returned 0x89 [0066.219] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\el\\", nBufferLength=0x105, lpBuffer=0x31de60, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\el\\", lpFilePart=0x0) returned 0x8a [0066.219] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\el\\*", lpFindFileData=0x31e0ac | out: lpFindFileData=0x31e0ac*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x85e23760, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85e23760, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85e23760, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5107ae0 [0066.220] FindClose (in: hFindFile=0x5107ae0 | out: hFindFile=0x5107ae0) returned 1 [0066.220] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\el", nBufferLength=0x105, lpBuffer=0x31de8c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\el", lpFilePart=0x0) returned 0x89 [0066.220] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\el\\", nBufferLength=0x105, lpBuffer=0x31de60, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\el\\", lpFilePart=0x0) returned 0x8a [0066.220] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\el\\*", lpFindFileData=0x31e0ac | out: lpFindFileData=0x31e0ac*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x85e23760, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85e23760, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85e23760, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5107ae0 [0066.220] FindClose (in: hFindFile=0x5107ae0 | out: hFindFile=0x5107ae0) returned 1 [0066.220] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\en_GB", nBufferLength=0x105, lpBuffer=0x31de8c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\en_GB", lpFilePart=0x0) returned 0x8c [0066.220] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\en_GB\\", nBufferLength=0x105, lpBuffer=0x31de60, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\en_GB\\", lpFilePart=0x0) returned 0x8d [0066.220] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\en_GB\\*", lpFindFileData=0x31e0ac | out: lpFindFileData=0x31e0ac*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x85e23760, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85e23760, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85e23760, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5107ae0 [0066.220] FindClose (in: hFindFile=0x5107ae0 | out: hFindFile=0x5107ae0) returned 1 [0066.220] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\en_GB", nBufferLength=0x105, lpBuffer=0x31de8c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\en_GB", lpFilePart=0x0) returned 0x8c [0066.221] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\en_GB\\", nBufferLength=0x105, lpBuffer=0x31de60, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\en_GB\\", lpFilePart=0x0) returned 0x8d [0066.221] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\en_GB\\*", lpFindFileData=0x31e0ac | out: lpFindFileData=0x31e0ac*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x85e23760, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85e23760, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85e23760, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5107ae0 [0066.221] FindClose (in: hFindFile=0x5107ae0 | out: hFindFile=0x5107ae0) returned 1 [0066.221] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\en_US", nBufferLength=0x105, lpBuffer=0x31de8c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\en_US", lpFilePart=0x0) returned 0x8c [0066.221] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\en_US\\", nBufferLength=0x105, lpBuffer=0x31de60, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\en_US\\", lpFilePart=0x0) returned 0x8d [0066.221] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\en_US\\*", lpFindFileData=0x31e0ac | out: lpFindFileData=0x31e0ac*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x85e23760, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85e498c0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85e498c0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5107ae0 [0066.222] FindClose (in: hFindFile=0x5107ae0 | out: hFindFile=0x5107ae0) returned 1 [0066.222] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\en_US", nBufferLength=0x105, lpBuffer=0x31de8c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\en_US", lpFilePart=0x0) returned 0x8c [0066.222] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\en_US\\", nBufferLength=0x105, lpBuffer=0x31de60, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\en_US\\", lpFilePart=0x0) returned 0x8d [0066.222] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\en_US\\*", lpFindFileData=0x31e0ac | out: lpFindFileData=0x31e0ac*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x85e23760, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85e498c0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85e498c0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5107ae0 [0066.222] FindClose (in: hFindFile=0x5107ae0 | out: hFindFile=0x5107ae0) returned 1 [0066.222] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\es", nBufferLength=0x105, lpBuffer=0x31de8c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\es", lpFilePart=0x0) returned 0x89 [0066.222] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\es\\", nBufferLength=0x105, lpBuffer=0x31de60, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\es\\", lpFilePart=0x0) returned 0x8a [0066.222] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\es\\*", lpFindFileData=0x31e0ac | out: lpFindFileData=0x31e0ac*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x85e498c0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85e498c0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85e498c0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5107ae0 [0066.223] FindClose (in: hFindFile=0x5107ae0 | out: hFindFile=0x5107ae0) returned 1 [0066.223] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\es", nBufferLength=0x105, lpBuffer=0x31de8c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\es", lpFilePart=0x0) returned 0x89 [0066.223] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\es\\", nBufferLength=0x105, lpBuffer=0x31de60, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\es\\", lpFilePart=0x0) returned 0x8a [0066.223] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\es\\*", lpFindFileData=0x31e0ac | out: lpFindFileData=0x31e0ac*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x85e498c0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85e498c0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85e498c0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5107ae0 [0066.223] FindClose (in: hFindFile=0x5107ae0 | out: hFindFile=0x5107ae0) returned 1 [0066.223] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\es_419", nBufferLength=0x105, lpBuffer=0x31de8c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\es_419", lpFilePart=0x0) returned 0x8d [0066.223] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\es_419\\", nBufferLength=0x105, lpBuffer=0x31de60, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\es_419\\", lpFilePart=0x0) returned 0x8e [0066.223] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\es_419\\*", lpFindFileData=0x31e0ac | out: lpFindFileData=0x31e0ac*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x85e498c0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85e498c0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85e498c0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5107ae0 [0066.224] FindClose (in: hFindFile=0x5107ae0 | out: hFindFile=0x5107ae0) returned 1 [0066.224] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\es_419", nBufferLength=0x105, lpBuffer=0x31de8c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\es_419", lpFilePart=0x0) returned 0x8d [0066.224] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\es_419\\", nBufferLength=0x105, lpBuffer=0x31de60, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\es_419\\", lpFilePart=0x0) returned 0x8e [0066.224] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\es_419\\*", lpFindFileData=0x31e0ac | out: lpFindFileData=0x31e0ac*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x85e498c0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85e498c0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85e498c0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5107ae0 [0066.224] FindClose (in: hFindFile=0x5107ae0 | out: hFindFile=0x5107ae0) returned 1 [0066.224] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\et", nBufferLength=0x105, lpBuffer=0x31de8c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\et", lpFilePart=0x0) returned 0x89 [0066.224] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\et\\", nBufferLength=0x105, lpBuffer=0x31de60, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\et\\", lpFilePart=0x0) returned 0x8a [0066.224] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\et\\*", lpFindFileData=0x31e0ac | out: lpFindFileData=0x31e0ac*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x85e498c0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85e498c0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85e498c0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5107ae0 [0066.225] FindClose (in: hFindFile=0x5107ae0 | out: hFindFile=0x5107ae0) returned 1 [0066.225] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\et", nBufferLength=0x105, lpBuffer=0x31de8c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\et", lpFilePart=0x0) returned 0x89 [0066.225] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\et\\", nBufferLength=0x105, lpBuffer=0x31de60, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\et\\", lpFilePart=0x0) returned 0x8a [0066.225] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\et\\*", lpFindFileData=0x31e0ac | out: lpFindFileData=0x31e0ac*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x85e498c0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85e498c0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85e498c0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5107ae0 [0066.225] FindClose (in: hFindFile=0x5107ae0 | out: hFindFile=0x5107ae0) returned 1 [0066.225] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\eu", nBufferLength=0x105, lpBuffer=0x31de8c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\eu", lpFilePart=0x0) returned 0x89 [0066.225] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\eu\\", nBufferLength=0x105, lpBuffer=0x31de60, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\eu\\", lpFilePart=0x0) returned 0x8a [0066.225] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\eu\\*", lpFindFileData=0x31e0ac | out: lpFindFileData=0x31e0ac*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x85e498c0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85e498c0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85e498c0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5107ae0 [0066.226] FindClose (in: hFindFile=0x5107ae0 | out: hFindFile=0x5107ae0) returned 1 [0066.226] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\eu", nBufferLength=0x105, lpBuffer=0x31de8c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\eu", lpFilePart=0x0) returned 0x89 [0066.226] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\eu\\", nBufferLength=0x105, lpBuffer=0x31de60, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\eu\\", lpFilePart=0x0) returned 0x8a [0066.226] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\eu\\*", lpFindFileData=0x31e0ac | out: lpFindFileData=0x31e0ac*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x85e498c0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85e498c0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85e498c0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5107ae0 [0066.226] FindClose (in: hFindFile=0x5107ae0 | out: hFindFile=0x5107ae0) returned 1 [0066.226] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\fa", nBufferLength=0x105, lpBuffer=0x31de8c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\fa", lpFilePart=0x0) returned 0x89 [0066.226] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\fa\\", nBufferLength=0x105, lpBuffer=0x31de60, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\fa\\", lpFilePart=0x0) returned 0x8a [0066.227] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\fa\\*", lpFindFileData=0x31e0ac | out: lpFindFileData=0x31e0ac*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x85e498c0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85e498c0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85e498c0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5107ae0 [0066.227] FindClose (in: hFindFile=0x5107ae0 | out: hFindFile=0x5107ae0) returned 1 [0066.227] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\fa", nBufferLength=0x105, lpBuffer=0x31de8c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\fa", lpFilePart=0x0) returned 0x89 [0066.227] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\fa\\", nBufferLength=0x105, lpBuffer=0x31de60, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\fa\\", lpFilePart=0x0) returned 0x8a [0066.227] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\fa\\*", lpFindFileData=0x31e0ac | out: lpFindFileData=0x31e0ac*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x85e498c0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85e498c0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85e498c0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5107ae0 [0066.227] FindClose (in: hFindFile=0x5107ae0 | out: hFindFile=0x5107ae0) returned 1 [0066.227] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\fi", nBufferLength=0x105, lpBuffer=0x31de8c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\fi", lpFilePart=0x0) returned 0x89 [0066.227] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\fi\\", nBufferLength=0x105, lpBuffer=0x31de60, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\fi\\", lpFilePart=0x0) returned 0x8a [0066.227] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\fi\\*", lpFindFileData=0x31e0ac | out: lpFindFileData=0x31e0ac*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x85e498c0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85e6fa20, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85e6fa20, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5107ae0 [0066.228] FindClose (in: hFindFile=0x5107ae0 | out: hFindFile=0x5107ae0) returned 1 [0066.228] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\fi", nBufferLength=0x105, lpBuffer=0x31de8c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\fi", lpFilePart=0x0) returned 0x89 [0066.228] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\fi\\", nBufferLength=0x105, lpBuffer=0x31de60, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\fi\\", lpFilePart=0x0) returned 0x8a [0066.228] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\fi\\*", lpFindFileData=0x31e0ac | out: lpFindFileData=0x31e0ac*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x85e498c0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85e6fa20, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85e6fa20, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5107ae0 [0066.228] FindClose (in: hFindFile=0x5107ae0 | out: hFindFile=0x5107ae0) returned 1 [0066.228] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\fil", nBufferLength=0x105, lpBuffer=0x31de8c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\fil", lpFilePart=0x0) returned 0x8a [0066.229] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\fil\\", nBufferLength=0x105, lpBuffer=0x31de60, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\fil\\", lpFilePart=0x0) returned 0x8b [0066.229] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\fil\\*", lpFindFileData=0x31e0ac | out: lpFindFileData=0x31e0ac*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x85e6fa20, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85e6fa20, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85e6fa20, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5107ae0 [0066.229] FindClose (in: hFindFile=0x5107ae0 | out: hFindFile=0x5107ae0) returned 1 [0066.229] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\fil", nBufferLength=0x105, lpBuffer=0x31de8c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\fil", lpFilePart=0x0) returned 0x8a [0066.229] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\fil\\", nBufferLength=0x105, lpBuffer=0x31de60, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\fil\\", lpFilePart=0x0) returned 0x8b [0066.229] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\fil\\*", lpFindFileData=0x31e0ac | out: lpFindFileData=0x31e0ac*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x85e6fa20, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85e6fa20, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85e6fa20, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5107ae0 [0066.229] FindClose (in: hFindFile=0x5107ae0 | out: hFindFile=0x5107ae0) returned 1 [0066.229] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\fr", nBufferLength=0x105, lpBuffer=0x31de8c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\fr", lpFilePart=0x0) returned 0x89 [0066.229] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\fr\\", nBufferLength=0x105, lpBuffer=0x31de60, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\fr\\", lpFilePart=0x0) returned 0x8a [0066.229] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\fr\\*", lpFindFileData=0x31e0ac | out: lpFindFileData=0x31e0ac*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x85e6fa20, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85e6fa20, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85e6fa20, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5107ae0 [0066.230] FindClose (in: hFindFile=0x5107ae0 | out: hFindFile=0x5107ae0) returned 1 [0066.230] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\fr", nBufferLength=0x105, lpBuffer=0x31de8c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\fr", lpFilePart=0x0) returned 0x89 [0066.230] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\fr\\", nBufferLength=0x105, lpBuffer=0x31de60, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\fr\\", lpFilePart=0x0) returned 0x8a [0066.230] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\fr\\*", lpFindFileData=0x31e0ac | out: lpFindFileData=0x31e0ac*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x85e6fa20, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85e6fa20, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85e6fa20, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5107ae0 [0066.230] FindClose (in: hFindFile=0x5107ae0 | out: hFindFile=0x5107ae0) returned 1 [0066.230] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\fr_CA", nBufferLength=0x105, lpBuffer=0x31de8c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\fr_CA", lpFilePart=0x0) returned 0x8c [0066.230] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\fr_CA\\", nBufferLength=0x105, lpBuffer=0x31de60, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\fr_CA\\", lpFilePart=0x0) returned 0x8d [0066.231] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\fr_CA\\*", lpFindFileData=0x31e0ac | out: lpFindFileData=0x31e0ac*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x85e6fa20, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85e6fa20, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85e6fa20, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5107ae0 [0066.231] FindClose (in: hFindFile=0x5107ae0 | out: hFindFile=0x5107ae0) returned 1 [0066.231] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\fr_CA", nBufferLength=0x105, lpBuffer=0x31de8c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\fr_CA", lpFilePart=0x0) returned 0x8c [0066.231] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\fr_CA\\", nBufferLength=0x105, lpBuffer=0x31de60, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\fr_CA\\", lpFilePart=0x0) returned 0x8d [0066.278] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\css\\craw_window.css" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\css\\craw_window.css"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x178 [0066.279] GetFileType (hFile=0x178) returned 0x1 [0066.279] GetFileType (hFile=0x178) returned 0x1 [0066.279] GetFileSize (in: hFile=0x178, lpFileSizeHigh=0x31e3d0 | out: lpFileSizeHigh=0x31e3d0*=0x0) returned 0x6cd [0066.279] ReadFile (in: hFile=0x178, lpBuffer=0x27d5a70, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x31e37c, lpOverlapped=0x0 | out: lpBuffer=0x27d5a70*, lpNumberOfBytesRead=0x31e37c*=0x6cd, lpOverlapped=0x0) returned 1 [0066.293] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\css\\craw_window.css" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\css\\craw_window.css"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x178 [0066.294] GetFileType (hFile=0x178) returned 0x1 [0066.294] GetFileType (hFile=0x178) returned 0x1 [0066.294] WriteFile (in: hFile=0x178, lpBuffer=0x2825c34*, nNumberOfBytesToWrite=0x6d0, lpNumberOfBytesWritten=0x31e344, lpOverlapped=0x0 | out: lpBuffer=0x2825c34*, lpNumberOfBytesWritten=0x31e344*=0x6d0, lpOverlapped=0x0) returned 1 [0066.295] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\css\\craw_window.css" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\css\\craw_window.css"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\css\\craw_window.css" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\css\\craw_window.css")) returned 1 [0066.296] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\html\\craw_window.html" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\html\\craw_window.html"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x178 [0066.297] GetFileType (hFile=0x178) returned 0x1 [0066.297] GetFileType (hFile=0x178) returned 0x1 [0066.297] GetFileSize (in: hFile=0x178, lpFileSizeHigh=0x31e3d0 | out: lpFileSizeHigh=0x31e3d0*=0x0) returned 0x32a [0066.297] ReadFile (in: hFile=0x178, lpBuffer=0x2829d0c, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x31e37c, lpOverlapped=0x0 | out: lpBuffer=0x2829d0c*, lpNumberOfBytesRead=0x31e37c*=0x32a, lpOverlapped=0x0) returned 1 [0066.331] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e2b4) returned 1 [0066.331] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\html\\craw_window.html" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\html\\craw_window.html"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x178 [0066.334] GetFileType (hFile=0x178) returned 0x1 [0066.334] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e2b0) returned 1 [0066.335] GetFileType (hFile=0x178) returned 0x1 [0066.335] WriteFile (in: hFile=0x178, lpBuffer=0x2676080*, nNumberOfBytesToWrite=0x330, lpNumberOfBytesWritten=0x31e344, lpOverlapped=0x0 | out: lpBuffer=0x2676080*, lpNumberOfBytesWritten=0x31e344*=0x330, lpOverlapped=0x0) returned 1 [0066.335] CloseHandle (hObject=0x178) returned 1 [0066.336] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\html\\craw_window.html", nBufferLength=0x105, lpBuffer=0x31def4, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\html\\craw_window.html", lpFilePart=0x0) returned 0x97 [0066.336] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\html\\craw_window.html", nBufferLength=0x105, lpBuffer=0x31def4, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\html\\craw_window.html", lpFilePart=0x0) returned 0x97 [0066.336] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e354) returned 1 [0066.336] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\html\\craw_window.html" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\html\\craw_window.html"), fInfoLevelId=0x0, lpFileInformation=0x31e3d0 | out: lpFileInformation=0x31e3d0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x828a0bb0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x828a0bb0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0xafbfa20, ftLastWriteTime.dwHighDateTime=0x1d6eb7f, nFileSizeHigh=0x0, nFileSizeLow=0x330)) returned 1 [0066.336] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e350) returned 1 [0066.336] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\html\\craw_window.html" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\html\\craw_window.html"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\html\\craw_window.html" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\html\\craw_window.html")) returned 1 [0066.336] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e3fc) returned 1 [0066.336] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\images", nBufferLength=0x105, lpBuffer=0x31df04, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\images", lpFilePart=0x0) returned 0x88 [0066.336] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\images\\", nBufferLength=0x105, lpBuffer=0x31ded8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\images\\", lpFilePart=0x0) returned 0x89 [0066.336] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\images\\*", lpFindFileData=0x31e124 | out: lpFindFileData=0x31e124*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x828a32c0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x82aab310, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x82aab310, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5107de0 [0066.338] FindNextFileW (in: hFindFile=0x5107de0, lpFindFileData=0x31e134 | out: lpFindFileData=0x31e134*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x828a32c0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x82aab310, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x82aab310, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0066.339] FindNextFileW (in: hFindFile=0x5107de0, lpFindFileData=0x31e134 | out: lpFindFileData=0x31e134*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x828a80e0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x828aa7f0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0xe7591500, ftLastWriteTime.dwHighDateTime=0x1ce931e, nFileSizeHigh=0x0, nFileSizeLow=0x112dc, dwReserved0=0x0, dwReserved1=0x0, cFileName="flapper.gif", cAlternateFileName="")) returned 1 [0066.339] FindNextFileW (in: hFindFile=0x5107de0, lpFindFileData=0x31e134 | out: lpFindFileData=0x31e134*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x828af610, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x82aab310, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x82aab310, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x1109, dwReserved0=0x0, dwReserved1=0x0, cFileName="icon_128.png", cAlternateFileName="")) returned 1 [0066.339] FindNextFileW (in: hFindFile=0x5107de0, lpFindFileData=0x31e134 | out: lpFindFileData=0x31e134*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x828c7cb0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x82aab310, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x82aab310, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x22c, dwReserved0=0x0, dwReserved1=0x0, cFileName="icon_16.png", cAlternateFileName="")) returned 1 [0066.339] FindNextFileW (in: hFindFile=0x5107de0, lpFindFileData=0x31e134 | out: lpFindFileData=0x31e134*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x828ccad0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x828ccad0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0xe7591500, ftLastWriteTime.dwHighDateTime=0x1ce931e, nFileSizeHigh=0x0, nFileSizeLow=0xa0, dwReserved0=0x0, dwReserved1=0x0, cFileName="topbar_floating_button.png", cAlternateFileName="TOPBAR~1.PNG")) returned 1 [0066.339] FindNextFileW (in: hFindFile=0x5107de0, lpFindFileData=0x31e134 | out: lpFindFileData=0x31e134*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x828cf1e0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x828d18f0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0xe7591500, ftLastWriteTime.dwHighDateTime=0x1ce931e, nFileSizeHigh=0x0, nFileSizeLow=0xfc, dwReserved0=0x0, dwReserved1=0x0, cFileName="topbar_floating_button_close.png", cAlternateFileName="TOPBAR~2.PNG")) returned 1 [0066.339] FindNextFileW (in: hFindFile=0x5107de0, lpFindFileData=0x31e134 | out: lpFindFileData=0x31e134*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x828d6710, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x828d6710, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0xe7591500, ftLastWriteTime.dwHighDateTime=0x1ce931e, nFileSizeHigh=0x0, nFileSizeLow=0xa0, dwReserved0=0x0, dwReserved1=0x0, cFileName="topbar_floating_button_hover.png", cAlternateFileName="TOPBAR~3.PNG")) returned 1 [0066.339] FindNextFileW (in: hFindFile=0x5107de0, lpFindFileData=0x31e134 | out: lpFindFileData=0x31e134*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x828d8e20, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x828d8e20, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0xe7591500, ftLastWriteTime.dwHighDateTime=0x1ce931e, nFileSizeHigh=0x0, nFileSizeLow=0xa6, dwReserved0=0x0, dwReserved1=0x0, cFileName="topbar_floating_button_maximize.png", cAlternateFileName="TOPBAR~4.PNG")) returned 1 [0066.340] FindNextFileW (in: hFindFile=0x5107de0, lpFindFileData=0x31e134 | out: lpFindFileData=0x31e134*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x828ddc40, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x828ddc40, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0xe7591500, ftLastWriteTime.dwHighDateTime=0x1ce931e, nFileSizeHigh=0x0, nFileSizeLow=0xa0, dwReserved0=0x0, dwReserved1=0x0, cFileName="topbar_floating_button_pressed.png", cAlternateFileName="TOF9E1~1.PNG")) returned 1 [0066.340] FindNextFileW (in: hFindFile=0x5107de0, lpFindFileData=0x31e134 | out: lpFindFileData=0x31e134*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0066.340] FindClose (in: hFindFile=0x5107de0 | out: hFindFile=0x5107de0) returned 1 [0066.340] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e3bc) returned 1 [0066.341] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e3c8) returned 1 [0066.341] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e3fc) returned 1 [0066.341] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\images", nBufferLength=0x105, lpBuffer=0x31df04, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\images", lpFilePart=0x0) returned 0x88 [0066.341] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\images\\", nBufferLength=0x105, lpBuffer=0x31ded8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\images\\", lpFilePart=0x0) returned 0x89 [0066.341] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\images\\*", lpFindFileData=0x31e124 | out: lpFindFileData=0x31e124*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x828a32c0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x82aab310, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x82aab310, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5107de0 [0066.342] FindNextFileW (in: hFindFile=0x5107de0, lpFindFileData=0x31e134 | out: lpFindFileData=0x31e134*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x828a32c0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x82aab310, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x82aab310, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0066.342] FindNextFileW (in: hFindFile=0x5107de0, lpFindFileData=0x31e134 | out: lpFindFileData=0x31e134*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x828a80e0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x828aa7f0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0xe7591500, ftLastWriteTime.dwHighDateTime=0x1ce931e, nFileSizeHigh=0x0, nFileSizeLow=0x112dc, dwReserved0=0x0, dwReserved1=0x0, cFileName="flapper.gif", cAlternateFileName="")) returned 1 [0066.342] FindNextFileW (in: hFindFile=0x5107de0, lpFindFileData=0x31e134 | out: lpFindFileData=0x31e134*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x828af610, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x82aab310, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x82aab310, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x1109, dwReserved0=0x0, dwReserved1=0x0, cFileName="icon_128.png", cAlternateFileName="")) returned 1 [0066.342] FindNextFileW (in: hFindFile=0x5107de0, lpFindFileData=0x31e134 | out: lpFindFileData=0x31e134*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x828c7cb0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x82aab310, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x82aab310, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x22c, dwReserved0=0x0, dwReserved1=0x0, cFileName="icon_16.png", cAlternateFileName="")) returned 1 [0066.342] FindNextFileW (in: hFindFile=0x5107de0, lpFindFileData=0x31e134 | out: lpFindFileData=0x31e134*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x828ccad0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x828ccad0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0xe7591500, ftLastWriteTime.dwHighDateTime=0x1ce931e, nFileSizeHigh=0x0, nFileSizeLow=0xa0, dwReserved0=0x0, dwReserved1=0x0, cFileName="topbar_floating_button.png", cAlternateFileName="TOPBAR~1.PNG")) returned 1 [0066.342] FindNextFileW (in: hFindFile=0x5107de0, lpFindFileData=0x31e134 | out: lpFindFileData=0x31e134*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x828cf1e0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x828d18f0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0xe7591500, ftLastWriteTime.dwHighDateTime=0x1ce931e, nFileSizeHigh=0x0, nFileSizeLow=0xfc, dwReserved0=0x0, dwReserved1=0x0, cFileName="topbar_floating_button_close.png", cAlternateFileName="TOPBAR~2.PNG")) returned 1 [0066.343] FindNextFileW (in: hFindFile=0x5107de0, lpFindFileData=0x31e134 | out: lpFindFileData=0x31e134*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x828d6710, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x828d6710, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0xe7591500, ftLastWriteTime.dwHighDateTime=0x1ce931e, nFileSizeHigh=0x0, nFileSizeLow=0xa0, dwReserved0=0x0, dwReserved1=0x0, cFileName="topbar_floating_button_hover.png", cAlternateFileName="TOPBAR~3.PNG")) returned 1 [0066.343] FindNextFileW (in: hFindFile=0x5107de0, lpFindFileData=0x31e134 | out: lpFindFileData=0x31e134*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x828d8e20, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x828d8e20, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0xe7591500, ftLastWriteTime.dwHighDateTime=0x1ce931e, nFileSizeHigh=0x0, nFileSizeLow=0xa6, dwReserved0=0x0, dwReserved1=0x0, cFileName="topbar_floating_button_maximize.png", cAlternateFileName="TOPBAR~4.PNG")) returned 1 [0066.343] FindNextFileW (in: hFindFile=0x5107de0, lpFindFileData=0x31e134 | out: lpFindFileData=0x31e134*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x828ddc40, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x828ddc40, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0xe7591500, ftLastWriteTime.dwHighDateTime=0x1ce931e, nFileSizeHigh=0x0, nFileSizeLow=0xa0, dwReserved0=0x0, dwReserved1=0x0, cFileName="topbar_floating_button_pressed.png", cAlternateFileName="TOF9E1~1.PNG")) returned 1 [0066.343] FindNextFileW (in: hFindFile=0x5107de0, lpFindFileData=0x31e134 | out: lpFindFileData=0x31e134*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x828ddc40, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x828ddc40, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0xe7591500, ftLastWriteTime.dwHighDateTime=0x1ce931e, nFileSizeHigh=0x0, nFileSizeLow=0xa0, dwReserved0=0x0, dwReserved1=0x0, cFileName="topbar_floating_button_pressed.png", cAlternateFileName="TOF9E1~1.PNG")) returned 0 [0066.343] FindClose (in: hFindFile=0x5107de0 | out: hFindFile=0x5107de0) returned 1 [0066.344] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e3bc) returned 1 [0066.344] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e3c8) returned 1 [0066.344] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\images\\icon_128.png", nBufferLength=0x105, lpBuffer=0x31ddd4, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\images\\icon_128.png", lpFilePart=0x0) returned 0x95 [0066.344] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e2c8) returned 1 [0066.344] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\images\\icon_128.png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\images\\icon_128.png"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x178 [0066.345] GetFileType (hFile=0x178) returned 0x1 [0066.345] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e2c4) returned 1 [0066.345] GetFileType (hFile=0x178) returned 0x1 [0066.345] GetFileSize (in: hFile=0x178, lpFileSizeHigh=0x31e3d0 | out: lpFileSizeHigh=0x31e3d0*=0x0) returned 0x1109 [0066.345] ReadFile (in: hFile=0x178, lpBuffer=0x267cbcc, nNumberOfBytesToRead=0x1109, lpNumberOfBytesRead=0x31e37c, lpOverlapped=0x0 | out: lpBuffer=0x267cbcc*, lpNumberOfBytesRead=0x31e37c*=0x1109, lpOverlapped=0x0) returned 1 [0066.347] CloseHandle (hObject=0x178) returned 1 [0066.360] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\images\\icon_128.png", nBufferLength=0x105, lpBuffer=0x31ddc0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\images\\icon_128.png", lpFilePart=0x0) returned 0x95 [0066.360] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e2b4) returned 1 [0066.360] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\images\\icon_128.png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\images\\icon_128.png"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x178 [0066.361] GetFileType (hFile=0x178) returned 0x1 [0066.361] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e2b0) returned 1 [0066.361] GetFileType (hFile=0x178) returned 0x1 [0066.361] WriteFile (in: hFile=0x178, lpBuffer=0x26cf060*, nNumberOfBytesToWrite=0x1110, lpNumberOfBytesWritten=0x31e370, lpOverlapped=0x0 | out: lpBuffer=0x26cf060*, lpNumberOfBytesWritten=0x31e370*=0x1110, lpOverlapped=0x0) returned 1 [0066.362] CloseHandle (hObject=0x178) returned 1 [0066.362] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\images\\icon_128.png", nBufferLength=0x105, lpBuffer=0x31def4, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\images\\icon_128.png", lpFilePart=0x0) returned 0x95 [0066.362] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\images\\icon_128.png", nBufferLength=0x105, lpBuffer=0x31def4, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\images\\icon_128.png", lpFilePart=0x0) returned 0x95 [0066.362] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e354) returned 1 [0066.362] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\images\\icon_128.png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\images\\icon_128.png"), fInfoLevelId=0x0, lpFileInformation=0x31e3d0 | out: lpFileInformation=0x31e3d0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x828af610, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x82aab310, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0xafe5b80, ftLastWriteTime.dwHighDateTime=0x1d6eb7f, nFileSizeHigh=0x0, nFileSizeLow=0x1110)) returned 1 [0066.362] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e350) returned 1 [0066.362] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\images\\icon_128.png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\images\\icon_128.png"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\images\\icon_128.png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\images\\icon_128.png")) returned 1 [0066.363] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\images\\icon_16.png", nBufferLength=0x105, lpBuffer=0x31ddd4, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\images\\icon_16.png", lpFilePart=0x0) returned 0x94 [0066.363] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e2c8) returned 1 [0066.363] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\images\\icon_16.png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\images\\icon_16.png"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x178 [0066.364] GetFileType (hFile=0x178) returned 0x1 [0066.364] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e2c4) returned 1 [0066.364] GetFileType (hFile=0x178) returned 0x1 [0066.364] GetFileSize (in: hFile=0x178, lpFileSizeHigh=0x31e3d0 | out: lpFileSizeHigh=0x31e3d0*=0x0) returned 0x22c [0066.364] ReadFile (in: hFile=0x178, lpBuffer=0x26d09b0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x31e37c, lpOverlapped=0x0 | out: lpBuffer=0x26d09b0*, lpNumberOfBytesRead=0x31e37c*=0x22c, lpOverlapped=0x0) returned 1 [0066.365] CloseHandle (hObject=0x178) returned 1 [0066.378] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\images\\icon_16.png", nBufferLength=0x105, lpBuffer=0x31ddc0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\images\\icon_16.png", lpFilePart=0x0) returned 0x94 [0066.378] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e2b4) returned 1 [0066.378] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\images\\icon_16.png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\images\\icon_16.png"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x178 [0066.379] GetFileType (hFile=0x178) returned 0x1 [0066.379] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e2b0) returned 1 [0066.379] GetFileType (hFile=0x178) returned 0x1 [0066.379] WriteFile (in: hFile=0x178, lpBuffer=0x271f44c*, nNumberOfBytesToWrite=0x230, lpNumberOfBytesWritten=0x31e344, lpOverlapped=0x0 | out: lpBuffer=0x271f44c*, lpNumberOfBytesWritten=0x31e344*=0x230, lpOverlapped=0x0) returned 1 [0066.380] CloseHandle (hObject=0x178) returned 1 [0066.380] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\images\\icon_16.png", nBufferLength=0x105, lpBuffer=0x31def4, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\images\\icon_16.png", lpFilePart=0x0) returned 0x94 [0066.381] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\images\\icon_16.png", nBufferLength=0x105, lpBuffer=0x31def4, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\images\\icon_16.png", lpFilePart=0x0) returned 0x94 [0066.381] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e354) returned 1 [0066.381] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\images\\icon_16.png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\images\\icon_16.png"), fInfoLevelId=0x0, lpFileInformation=0x31e3d0 | out: lpFileInformation=0x31e3d0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x828c7cb0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x82aab310, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0xb031e40, ftLastWriteTime.dwHighDateTime=0x1d6eb7f, nFileSizeHigh=0x0, nFileSizeLow=0x230)) returned 1 [0066.381] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e350) returned 1 [0066.381] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\images\\icon_16.png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\images\\icon_16.png"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\images\\icon_16.png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\images\\icon_16.png")) returned 1 [0066.381] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\images\\topbar_floating_button.png", nBufferLength=0x105, lpBuffer=0x31ddd4, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\images\\topbar_floating_button.png", lpFilePart=0x0) returned 0xa3 [0066.381] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e2c8) returned 1 [0066.381] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\images\\topbar_floating_button.png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\images\\topbar_floating_button.png"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x178 [0066.381] GetFileType (hFile=0x178) returned 0x1 [0066.381] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e2c4) returned 1 [0066.381] GetFileType (hFile=0x178) returned 0x1 [0066.382] GetFileSize (in: hFile=0x178, lpFileSizeHigh=0x31e3d0 | out: lpFileSizeHigh=0x31e3d0*=0x0) returned 0xa0 [0066.382] ReadFile (in: hFile=0x178, lpBuffer=0x2720980, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x31e37c, lpOverlapped=0x0 | out: lpBuffer=0x2720980*, lpNumberOfBytesRead=0x31e37c*=0xa0, lpOverlapped=0x0) returned 1 [0066.382] CloseHandle (hObject=0x178) returned 1 [0066.396] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\images\\topbar_floating_button.png", nBufferLength=0x105, lpBuffer=0x31ddc0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\images\\topbar_floating_button.png", lpFilePart=0x0) returned 0xa3 [0066.396] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e2b4) returned 1 [0066.396] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\images\\topbar_floating_button.png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\images\\topbar_floating_button.png"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x178 [0066.397] GetFileType (hFile=0x178) returned 0x1 [0066.397] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e2b0) returned 1 [0066.397] GetFileType (hFile=0x178) returned 0x1 [0066.397] WriteFile (in: hFile=0x178, lpBuffer=0x276ebf8*, nNumberOfBytesToWrite=0xb0, lpNumberOfBytesWritten=0x31e344, lpOverlapped=0x0 | out: lpBuffer=0x276ebf8*, lpNumberOfBytesWritten=0x31e344*=0xb0, lpOverlapped=0x0) returned 1 [0066.398] CloseHandle (hObject=0x178) returned 1 [0066.398] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\images\\topbar_floating_button.png", nBufferLength=0x105, lpBuffer=0x31def4, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\images\\topbar_floating_button.png", lpFilePart=0x0) returned 0xa3 [0066.398] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\images\\topbar_floating_button.png", nBufferLength=0x105, lpBuffer=0x31def4, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\images\\topbar_floating_button.png", lpFilePart=0x0) returned 0xa3 [0066.398] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e354) returned 1 [0066.398] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\images\\topbar_floating_button.png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\images\\topbar_floating_button.png"), fInfoLevelId=0x0, lpFileInformation=0x31e3d0 | out: lpFileInformation=0x31e3d0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x828ccad0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x828ccad0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0xb057fa0, ftLastWriteTime.dwHighDateTime=0x1d6eb7f, nFileSizeHigh=0x0, nFileSizeLow=0xb0)) returned 1 [0066.398] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e350) returned 1 [0066.398] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\images\\topbar_floating_button.png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\images\\topbar_floating_button.png"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\images\\topbar_floating_button.png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\images\\topbar_floating_button.png")) returned 1 [0066.398] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\images\\topbar_floating_button_close.png", nBufferLength=0x105, lpBuffer=0x31ddd4, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\images\\topbar_floating_button_close.png", lpFilePart=0x0) returned 0xa9 [0066.398] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e2c8) returned 1 [0066.399] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\images\\topbar_floating_button_close.png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\images\\topbar_floating_button_close.png"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x178 [0066.399] GetFileType (hFile=0x178) returned 0x1 [0066.399] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e2c4) returned 1 [0066.399] GetFileType (hFile=0x178) returned 0x1 [0066.399] GetFileSize (in: hFile=0x178, lpFileSizeHigh=0x31e3d0 | out: lpFileSizeHigh=0x31e3d0*=0x0) returned 0xfc [0066.399] ReadFile (in: hFile=0x178, lpBuffer=0x27701d8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x31e37c, lpOverlapped=0x0 | out: lpBuffer=0x27701d8*, lpNumberOfBytesRead=0x31e37c*=0xfc, lpOverlapped=0x0) returned 1 [0066.400] CloseHandle (hObject=0x178) returned 1 [0066.413] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\images\\topbar_floating_button_close.png", nBufferLength=0x105, lpBuffer=0x31ddc0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\images\\topbar_floating_button_close.png", lpFilePart=0x0) returned 0xa9 [0066.413] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e2b4) returned 1 [0066.413] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\images\\topbar_floating_button_close.png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\images\\topbar_floating_button_close.png"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x178 [0066.414] GetFileType (hFile=0x178) returned 0x1 [0066.414] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e2b0) returned 1 [0066.414] GetFileType (hFile=0x178) returned 0x1 [0066.414] WriteFile (in: hFile=0x178, lpBuffer=0x27be4fc*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x31e344, lpOverlapped=0x0 | out: lpBuffer=0x27be4fc*, lpNumberOfBytesWritten=0x31e344*=0x100, lpOverlapped=0x0) returned 1 [0066.415] CloseHandle (hObject=0x178) returned 1 [0066.415] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\images\\topbar_floating_button_close.png", nBufferLength=0x105, lpBuffer=0x31def4, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\images\\topbar_floating_button_close.png", lpFilePart=0x0) returned 0xa9 [0066.415] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\images\\topbar_floating_button_close.png", nBufferLength=0x105, lpBuffer=0x31def4, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\images\\topbar_floating_button_close.png", lpFilePart=0x0) returned 0xa9 [0066.415] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e354) returned 1 [0066.415] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\images\\topbar_floating_button_close.png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\images\\topbar_floating_button_close.png"), fInfoLevelId=0x0, lpFileInformation=0x31e3d0 | out: lpFileInformation=0x31e3d0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x828cf1e0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x828d18f0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0xb07e100, ftLastWriteTime.dwHighDateTime=0x1d6eb7f, nFileSizeHigh=0x0, nFileSizeLow=0x100)) returned 1 [0066.415] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e350) returned 1 [0066.415] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\images\\topbar_floating_button_close.png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\images\\topbar_floating_button_close.png"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\images\\topbar_floating_button_close.png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\images\\topbar_floating_button_close.png")) returned 1 [0066.416] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\images\\topbar_floating_button_hover.png", nBufferLength=0x105, lpBuffer=0x31ddd4, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\images\\topbar_floating_button_hover.png", lpFilePart=0x0) returned 0xa9 [0066.416] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e2c8) returned 1 [0066.416] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\images\\topbar_floating_button_hover.png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\images\\topbar_floating_button_hover.png"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x178 [0066.416] GetFileType (hFile=0x178) returned 0x1 [0066.416] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e2c4) returned 1 [0066.416] GetFileType (hFile=0x178) returned 0x1 [0066.416] GetFileSize (in: hFile=0x178, lpFileSizeHigh=0x31e3d0 | out: lpFileSizeHigh=0x31e3d0*=0x0) returned 0xa0 [0066.416] ReadFile (in: hFile=0x178, lpBuffer=0x27bfa98, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x31e37c, lpOverlapped=0x0 | out: lpBuffer=0x27bfa98*, lpNumberOfBytesRead=0x31e37c*=0xa0, lpOverlapped=0x0) returned 1 [0066.417] CloseHandle (hObject=0x178) returned 1 [0066.431] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\images\\topbar_floating_button_hover.png", nBufferLength=0x105, lpBuffer=0x31ddc0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\images\\topbar_floating_button_hover.png", lpFilePart=0x0) returned 0xa9 [0066.431] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e2b4) returned 1 [0066.431] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\images\\topbar_floating_button_hover.png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\images\\topbar_floating_button_hover.png"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x178 [0066.432] GetFileType (hFile=0x178) returned 0x1 [0066.432] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e2b0) returned 1 [0066.432] GetFileType (hFile=0x178) returned 0x1 [0066.432] WriteFile (in: hFile=0x178, lpBuffer=0x280dd28*, nNumberOfBytesToWrite=0xb0, lpNumberOfBytesWritten=0x31e344, lpOverlapped=0x0 | out: lpBuffer=0x280dd28*, lpNumberOfBytesWritten=0x31e344*=0xb0, lpOverlapped=0x0) returned 1 [0066.432] CloseHandle (hObject=0x178) returned 1 [0066.433] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\images\\topbar_floating_button_hover.png", nBufferLength=0x105, lpBuffer=0x31def4, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\images\\topbar_floating_button_hover.png", lpFilePart=0x0) returned 0xa9 [0066.433] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\images\\topbar_floating_button_hover.png", nBufferLength=0x105, lpBuffer=0x31def4, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\images\\topbar_floating_button_hover.png", lpFilePart=0x0) returned 0xa9 [0066.433] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e354) returned 1 [0066.433] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\images\\topbar_floating_button_hover.png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\images\\topbar_floating_button_hover.png"), fInfoLevelId=0x0, lpFileInformation=0x31e3d0 | out: lpFileInformation=0x31e3d0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x828d6710, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x828d6710, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0xb0a4260, ftLastWriteTime.dwHighDateTime=0x1d6eb7f, nFileSizeHigh=0x0, nFileSizeLow=0xb0)) returned 1 [0066.433] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e350) returned 1 [0066.433] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\images\\topbar_floating_button_hover.png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\images\\topbar_floating_button_hover.png"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\images\\topbar_floating_button_hover.png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\images\\topbar_floating_button_hover.png")) returned 1 [0066.433] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\images\\topbar_floating_button_maximize.png", nBufferLength=0x105, lpBuffer=0x31ddd4, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\images\\topbar_floating_button_maximize.png", lpFilePart=0x0) returned 0xac [0066.433] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e2c8) returned 1 [0066.433] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\images\\topbar_floating_button_maximize.png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\images\\topbar_floating_button_maximize.png"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x178 [0066.434] GetFileType (hFile=0x178) returned 0x1 [0066.434] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e2c4) returned 1 [0066.434] GetFileType (hFile=0x178) returned 0x1 [0066.434] GetFileSize (in: hFile=0x178, lpFileSizeHigh=0x31e3d0 | out: lpFileSizeHigh=0x31e3d0*=0x0) returned 0xa6 [0066.434] ReadFile (in: hFile=0x178, lpBuffer=0x280f2d8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x31e37c, lpOverlapped=0x0 | out: lpBuffer=0x280f2d8*, lpNumberOfBytesRead=0x31e37c*=0xa6, lpOverlapped=0x0) returned 1 [0066.435] CloseHandle (hObject=0x178) returned 1 [0066.480] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\images\\topbar_floating_button_maximize.png", nBufferLength=0x105, lpBuffer=0x31ddc0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\images\\topbar_floating_button_maximize.png", lpFilePart=0x0) returned 0xac [0066.480] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e2b4) returned 1 [0066.480] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\images\\topbar_floating_button_maximize.png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\images\\topbar_floating_button_maximize.png"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x178 [0066.481] GetFileType (hFile=0x178) returned 0x1 [0066.481] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e2b0) returned 1 [0066.481] GetFileType (hFile=0x178) returned 0x1 [0066.481] WriteFile (in: hFile=0x178, lpBuffer=0x265dd4c*, nNumberOfBytesToWrite=0xb0, lpNumberOfBytesWritten=0x31e344, lpOverlapped=0x0 | out: lpBuffer=0x265dd4c*, lpNumberOfBytesWritten=0x31e344*=0xb0, lpOverlapped=0x0) returned 1 [0066.482] CloseHandle (hObject=0x178) returned 1 [0066.482] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\images\\topbar_floating_button_maximize.png", nBufferLength=0x105, lpBuffer=0x31def4, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\images\\topbar_floating_button_maximize.png", lpFilePart=0x0) returned 0xac [0066.482] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\images\\topbar_floating_button_maximize.png", nBufferLength=0x105, lpBuffer=0x31def4, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\images\\topbar_floating_button_maximize.png", lpFilePart=0x0) returned 0xac [0066.482] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e354) returned 1 [0066.482] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\images\\topbar_floating_button_maximize.png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\images\\topbar_floating_button_maximize.png"), fInfoLevelId=0x0, lpFileInformation=0x31e3d0 | out: lpFileInformation=0x31e3d0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x828d8e20, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x828d8e20, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0xb116680, ftLastWriteTime.dwHighDateTime=0x1d6eb7f, nFileSizeHigh=0x0, nFileSizeLow=0xb0)) returned 1 [0066.482] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e350) returned 1 [0066.482] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\images\\topbar_floating_button_maximize.png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\images\\topbar_floating_button_maximize.png"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\images\\topbar_floating_button_maximize.png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\images\\topbar_floating_button_maximize.png")) returned 1 [0066.483] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\images\\topbar_floating_button_pressed.png", nBufferLength=0x105, lpBuffer=0x31ddd4, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\images\\topbar_floating_button_pressed.png", lpFilePart=0x0) returned 0xab [0066.483] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e2c8) returned 1 [0066.483] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\images\\topbar_floating_button_pressed.png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\images\\topbar_floating_button_pressed.png"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x178 [0066.483] GetFileType (hFile=0x178) returned 0x1 [0066.483] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e2c4) returned 1 [0066.483] GetFileType (hFile=0x178) returned 0x1 [0066.483] GetFileSize (in: hFile=0x178, lpFileSizeHigh=0x31e3d0 | out: lpFileSizeHigh=0x31e3d0*=0x0) returned 0xa0 [0066.483] ReadFile (in: hFile=0x178, lpBuffer=0x265f300, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x31e37c, lpOverlapped=0x0 | out: lpBuffer=0x265f300*, lpNumberOfBytesRead=0x31e37c*=0xa0, lpOverlapped=0x0) returned 1 [0066.484] CloseHandle (hObject=0x178) returned 1 [0066.497] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\images\\topbar_floating_button_pressed.png", nBufferLength=0x105, lpBuffer=0x31ddc0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\images\\topbar_floating_button_pressed.png", lpFilePart=0x0) returned 0xab [0066.498] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e2b4) returned 1 [0066.498] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\images\\topbar_floating_button_pressed.png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\images\\topbar_floating_button_pressed.png"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x178 [0066.498] GetFileType (hFile=0x178) returned 0x1 [0066.498] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e2b0) returned 1 [0066.498] GetFileType (hFile=0x178) returned 0x1 [0066.499] WriteFile (in: hFile=0x178, lpBuffer=0x26ad6f4*, nNumberOfBytesToWrite=0xb0, lpNumberOfBytesWritten=0x31e344, lpOverlapped=0x0 | out: lpBuffer=0x26ad6f4*, lpNumberOfBytesWritten=0x31e344*=0xb0, lpOverlapped=0x0) returned 1 [0066.499] CloseHandle (hObject=0x178) returned 1 [0066.499] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\images\\topbar_floating_button_pressed.png", nBufferLength=0x105, lpBuffer=0x31def4, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\images\\topbar_floating_button_pressed.png", lpFilePart=0x0) returned 0xab [0066.500] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\images\\topbar_floating_button_pressed.png", nBufferLength=0x105, lpBuffer=0x31def4, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\images\\topbar_floating_button_pressed.png", lpFilePart=0x0) returned 0xab [0066.500] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e354) returned 1 [0066.500] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\images\\topbar_floating_button_pressed.png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\images\\topbar_floating_button_pressed.png"), fInfoLevelId=0x0, lpFileInformation=0x31e3d0 | out: lpFileInformation=0x31e3d0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x828ddc40, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x828ddc40, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0xb13c7e0, ftLastWriteTime.dwHighDateTime=0x1d6eb7f, nFileSizeHigh=0x0, nFileSizeLow=0xb0)) returned 1 [0066.500] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e350) returned 1 [0066.500] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\images\\topbar_floating_button_pressed.png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\images\\topbar_floating_button_pressed.png"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\images\\topbar_floating_button_pressed.png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\images\\topbar_floating_button_pressed.png")) returned 1 [0066.500] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e3fc) returned 1 [0066.500] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales", nBufferLength=0x105, lpBuffer=0x31df04, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales", lpFilePart=0x0) returned 0x8a [0066.500] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\", nBufferLength=0x105, lpBuffer=0x31ded8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\", lpFilePart=0x0) returned 0x8b [0066.500] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\*", lpFindFileData=0x31e124 | out: lpFindFileData=0x31e124*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x82665710, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x828836f0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x828836f0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5107a60 [0066.502] FindNextFileW (in: hFindFile=0x5107a60, lpFindFileData=0x31e134 | out: lpFindFileData=0x31e134*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x82665710, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x828836f0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x828836f0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0066.503] FindNextFileW (in: hFindFile=0x5107a60, lpFindFileData=0x31e134 | out: lpFindFileData=0x31e134*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x8266a530, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x8266f350, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x8266f350, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="bg", cAlternateFileName="")) returned 1 [0066.503] FindNextFileW (in: hFindFile=0x5107a60, lpFindFileData=0x31e134 | out: lpFindFileData=0x31e134*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x82676880, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x8267ddb0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x8267ddb0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="ca", cAlternateFileName="")) returned 1 [0066.503] FindNextFileW (in: hFindFile=0x5107a60, lpFindFileData=0x31e134 | out: lpFindFileData=0x31e134*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x826a0090, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x826a27a0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x826a27a0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="cs", cAlternateFileName="")) returned 1 [0066.503] FindNextFileW (in: hFindFile=0x5107a60, lpFindFileData=0x31e134 | out: lpFindFileData=0x31e134*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x826ac3e0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x826b1200, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x826b1200, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="da", cAlternateFileName="")) returned 1 [0066.503] FindNextFileW (in: hFindFile=0x5107a60, lpFindFileData=0x31e134 | out: lpFindFileData=0x31e134*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x826b8730, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x826bae40, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x826bae40, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="de", cAlternateFileName="")) returned 1 [0066.504] FindNextFileW (in: hFindFile=0x5107a60, lpFindFileData=0x31e134 | out: lpFindFileData=0x31e134*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x826c2370, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x826c7190, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x826c7190, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="el", cAlternateFileName="")) returned 1 [0066.504] FindNextFileW (in: hFindFile=0x5107a60, lpFindFileData=0x31e134 | out: lpFindFileData=0x31e134*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x826ce6c0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x826d0dd0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x826d0dd0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="en", cAlternateFileName="")) returned 1 [0066.504] FindNextFileW (in: hFindFile=0x5107a60, lpFindFileData=0x31e134 | out: lpFindFileData=0x31e134*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x826d8300, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x826df830, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x826df830, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="en_GB", cAlternateFileName="")) returned 1 [0066.504] FindNextFileW (in: hFindFile=0x5107a60, lpFindFileData=0x31e134 | out: lpFindFileData=0x31e134*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x826e9470, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x826ebb80, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x826ebb80, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="es", cAlternateFileName="")) returned 1 [0066.504] FindNextFileW (in: hFindFile=0x5107a60, lpFindFileData=0x31e134 | out: lpFindFileData=0x31e134*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x826f30b0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x826f7ed0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x826f7ed0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="es_419", cAlternateFileName="")) returned 1 [0066.504] FindNextFileW (in: hFindFile=0x5107a60, lpFindFileData=0x31e134 | out: lpFindFileData=0x31e134*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x826ff400, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x82701b10, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x82701b10, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="et", cAlternateFileName="")) returned 1 [0066.504] FindNextFileW (in: hFindFile=0x5107a60, lpFindFileData=0x31e134 | out: lpFindFileData=0x31e134*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x82709040, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x8270de60, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x8270de60, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="fi", cAlternateFileName="")) returned 1 [0066.505] FindNextFileW (in: hFindFile=0x5107a60, lpFindFileData=0x31e134 | out: lpFindFileData=0x31e134*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x82715390, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x82717aa0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x82717aa0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="fil", cAlternateFileName="")) returned 1 [0066.505] FindNextFileW (in: hFindFile=0x5107a60, lpFindFileData=0x31e134 | out: lpFindFileData=0x31e134*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x8271efd0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x827216e0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x827216e0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="fr", cAlternateFileName="")) returned 1 [0066.505] FindNextFileW (in: hFindFile=0x5107a60, lpFindFileData=0x31e134 | out: lpFindFileData=0x31e134*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x82728c10, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x8272da30, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x8272da30, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="hi", cAlternateFileName="")) returned 1 [0066.505] FindNextFileW (in: hFindFile=0x5107a60, lpFindFileData=0x31e134 | out: lpFindFileData=0x31e134*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x827412b0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x827439c0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x827439c0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="hr", cAlternateFileName="")) returned 1 [0066.505] FindNextFileW (in: hFindFile=0x5107a60, lpFindFileData=0x31e134 | out: lpFindFileData=0x31e134*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x8274aef0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x8274d600, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x8274d600, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="hu", cAlternateFileName="")) returned 1 [0066.505] FindNextFileW (in: hFindFile=0x5107a60, lpFindFileData=0x31e134 | out: lpFindFileData=0x31e134*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x82752420, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x82752420, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x82752420, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="id", cAlternateFileName="")) returned 1 [0066.506] FindNextFileW (in: hFindFile=0x5107a60, lpFindFileData=0x31e134 | out: lpFindFileData=0x31e134*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x82759950, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x8275c060, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x8275c060, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="it", cAlternateFileName="")) returned 1 [0066.506] FindNextFileW (in: hFindFile=0x5107a60, lpFindFileData=0x31e134 | out: lpFindFileData=0x31e134*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x82763590, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x82765ca0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x82765ca0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="ja", cAlternateFileName="")) returned 1 [0066.506] FindNextFileW (in: hFindFile=0x5107a60, lpFindFileData=0x31e134 | out: lpFindFileData=0x31e134*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x8276d1d0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x8276f8e0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x8276f8e0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="ko", cAlternateFileName="")) returned 1 [0066.506] FindNextFileW (in: hFindFile=0x5107a60, lpFindFileData=0x31e134 | out: lpFindFileData=0x31e134*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x82776e10, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x82779520, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x82779520, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="lt", cAlternateFileName="")) returned 1 [0066.506] FindNextFileW (in: hFindFile=0x5107a60, lpFindFileData=0x31e134 | out: lpFindFileData=0x31e134*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x8277e340, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x82783160, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x82783160, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="lv", cAlternateFileName="")) returned 1 [0066.506] FindNextFileW (in: hFindFile=0x5107a60, lpFindFileData=0x31e134 | out: lpFindFileData=0x31e134*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x82787f80, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x8278a690, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x8278a690, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="nb", cAlternateFileName="")) returned 1 [0066.506] FindNextFileW (in: hFindFile=0x5107a60, lpFindFileData=0x31e134 | out: lpFindFileData=0x31e134*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x82791bc0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x827942d0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x827942d0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="nl", cAlternateFileName="")) returned 1 [0066.507] FindNextFileW (in: hFindFile=0x5107a60, lpFindFileData=0x31e134 | out: lpFindFileData=0x31e134*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x8279b800, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x8279df10, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x8279df10, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="pl", cAlternateFileName="")) returned 1 [0066.507] FindNextFileW (in: hFindFile=0x5107a60, lpFindFileData=0x31e134 | out: lpFindFileData=0x31e134*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x827a2d30, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x827a5440, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x827a5440, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="pt_BR", cAlternateFileName="")) returned 1 [0066.507] FindNextFileW (in: hFindFile=0x5107a60, lpFindFileData=0x31e134 | out: lpFindFileData=0x31e134*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x827aa260, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x827af080, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x827af080, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="pt_PT", cAlternateFileName="")) returned 1 [0066.507] FindNextFileW (in: hFindFile=0x5107a60, lpFindFileData=0x31e134 | out: lpFindFileData=0x31e134*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x827b3ea0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x827b65b0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x827b65b0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="ro", cAlternateFileName="")) returned 1 [0066.507] FindNextFileW (in: hFindFile=0x5107a60, lpFindFileData=0x31e134 | out: lpFindFileData=0x31e134*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x827c7720, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x827cc540, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x827cc540, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="ru", cAlternateFileName="")) returned 1 [0066.507] FindNextFileW (in: hFindFile=0x5107a60, lpFindFileData=0x31e134 | out: lpFindFileData=0x31e134*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x827e4be0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x827e72f0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x827e72f0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="sk", cAlternateFileName="")) returned 1 [0066.507] FindNextFileW (in: hFindFile=0x5107a60, lpFindFileData=0x31e134 | out: lpFindFileData=0x31e134*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x827f5d50, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x827fab70, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x827fab70, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="sl", cAlternateFileName="")) returned 1 [0066.508] FindNextFileW (in: hFindFile=0x5107a60, lpFindFileData=0x31e134 | out: lpFindFileData=0x31e134*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x828095d0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x8280e3f0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x8280e3f0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="sr", cAlternateFileName="")) returned 1 [0066.508] FindNextFileW (in: hFindFile=0x5107a60, lpFindFileData=0x31e134 | out: lpFindFileData=0x31e134*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x8282b8b0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x828306d0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x828306d0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="sv", cAlternateFileName="")) returned 1 [0066.508] FindNextFileW (in: hFindFile=0x5107a60, lpFindFileData=0x31e134 | out: lpFindFileData=0x31e134*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x8284db90, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x828529b0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x828529b0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="th", cAlternateFileName="")) returned 1 [0066.508] FindNextFileW (in: hFindFile=0x5107a60, lpFindFileData=0x31e134 | out: lpFindFileData=0x31e134*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x82863b20, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x82866230, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x82866230, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="tr", cAlternateFileName="")) returned 1 [0066.508] FindNextFileW (in: hFindFile=0x5107a60, lpFindFileData=0x31e134 | out: lpFindFileData=0x31e134*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x8286b050, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x8286d760, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x8286d760, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="uk", cAlternateFileName="")) returned 1 [0066.508] FindNextFileW (in: hFindFile=0x5107a60, lpFindFileData=0x31e134 | out: lpFindFileData=0x31e134*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x82872580, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x82874c90, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x82874c90, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="vi", cAlternateFileName="")) returned 1 [0066.509] FindNextFileW (in: hFindFile=0x5107a60, lpFindFileData=0x31e134 | out: lpFindFileData=0x31e134*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x82879ab0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x8287e8d0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x8287e8d0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="zh_CN", cAlternateFileName="")) returned 1 [0066.509] FindNextFileW (in: hFindFile=0x5107a60, lpFindFileData=0x31e134 | out: lpFindFileData=0x31e134*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x828836f0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x82885e00, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x82885e00, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="zh_TW", cAlternateFileName="")) returned 1 [0066.509] FindNextFileW (in: hFindFile=0x5107a60, lpFindFileData=0x31e134 | out: lpFindFileData=0x31e134*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x828836f0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x82885e00, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x82885e00, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="zh_TW", cAlternateFileName="")) returned 0 [0066.509] FindClose (in: hFindFile=0x5107a60 | out: hFindFile=0x5107a60) returned 1 [0066.510] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e3bc) returned 1 [0066.510] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e3c8) returned 1 [0066.510] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e3fc) returned 1 [0066.510] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales", nBufferLength=0x105, lpBuffer=0x31df04, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales", lpFilePart=0x0) returned 0x8a [0066.510] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\", nBufferLength=0x105, lpBuffer=0x31ded8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\", lpFilePart=0x0) returned 0x8b [0066.510] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\*", lpFindFileData=0x31e124 | out: lpFindFileData=0x31e124*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x82665710, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x828836f0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x828836f0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5107a60 [0066.511] FindNextFileW (in: hFindFile=0x5107a60, lpFindFileData=0x31e134 | out: lpFindFileData=0x31e134*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x82665710, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x828836f0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x828836f0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0066.511] FindNextFileW (in: hFindFile=0x5107a60, lpFindFileData=0x31e134 | out: lpFindFileData=0x31e134*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x8266a530, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x8266f350, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x8266f350, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="bg", cAlternateFileName="")) returned 1 [0066.511] FindNextFileW (in: hFindFile=0x5107a60, lpFindFileData=0x31e134 | out: lpFindFileData=0x31e134*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x82676880, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x8267ddb0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x8267ddb0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="ca", cAlternateFileName="")) returned 1 [0066.511] FindNextFileW (in: hFindFile=0x5107a60, lpFindFileData=0x31e134 | out: lpFindFileData=0x31e134*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x826a0090, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x826a27a0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x826a27a0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="cs", cAlternateFileName="")) returned 1 [0066.511] FindNextFileW (in: hFindFile=0x5107a60, lpFindFileData=0x31e134 | out: lpFindFileData=0x31e134*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x826ac3e0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x826b1200, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x826b1200, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="da", cAlternateFileName="")) returned 1 [0066.511] FindNextFileW (in: hFindFile=0x5107a60, lpFindFileData=0x31e134 | out: lpFindFileData=0x31e134*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x826b8730, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x826bae40, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x826bae40, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="de", cAlternateFileName="")) returned 1 [0066.512] FindNextFileW (in: hFindFile=0x5107a60, lpFindFileData=0x31e134 | out: lpFindFileData=0x31e134*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x826c2370, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x826c7190, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x826c7190, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="el", cAlternateFileName="")) returned 1 [0066.512] FindNextFileW (in: hFindFile=0x5107a60, lpFindFileData=0x31e134 | out: lpFindFileData=0x31e134*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x826ce6c0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x826d0dd0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x826d0dd0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="en", cAlternateFileName="")) returned 1 [0066.512] FindNextFileW (in: hFindFile=0x5107a60, lpFindFileData=0x31e134 | out: lpFindFileData=0x31e134*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x826d8300, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x826df830, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x826df830, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="en_GB", cAlternateFileName="")) returned 1 [0066.512] FindNextFileW (in: hFindFile=0x5107a60, lpFindFileData=0x31e134 | out: lpFindFileData=0x31e134*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x826e9470, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x826ebb80, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x826ebb80, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="es", cAlternateFileName="")) returned 1 [0066.512] FindNextFileW (in: hFindFile=0x5107a60, lpFindFileData=0x31e134 | out: lpFindFileData=0x31e134*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x826f30b0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x826f7ed0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x826f7ed0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="es_419", cAlternateFileName="")) returned 1 [0066.512] FindNextFileW (in: hFindFile=0x5107a60, lpFindFileData=0x31e134 | out: lpFindFileData=0x31e134*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x826ff400, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x82701b10, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x82701b10, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="et", cAlternateFileName="")) returned 1 [0066.512] FindNextFileW (in: hFindFile=0x5107a60, lpFindFileData=0x31e134 | out: lpFindFileData=0x31e134*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x82709040, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x8270de60, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x8270de60, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="fi", cAlternateFileName="")) returned 1 [0066.512] FindNextFileW (in: hFindFile=0x5107a60, lpFindFileData=0x31e134 | out: lpFindFileData=0x31e134*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x82715390, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x82717aa0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x82717aa0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="fil", cAlternateFileName="")) returned 1 [0066.513] FindNextFileW (in: hFindFile=0x5107a60, lpFindFileData=0x31e134 | out: lpFindFileData=0x31e134*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x8271efd0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x827216e0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x827216e0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="fr", cAlternateFileName="")) returned 1 [0066.513] FindNextFileW (in: hFindFile=0x5107a60, lpFindFileData=0x31e134 | out: lpFindFileData=0x31e134*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x82728c10, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x8272da30, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x8272da30, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="hi", cAlternateFileName="")) returned 1 [0066.513] FindNextFileW (in: hFindFile=0x5107a60, lpFindFileData=0x31e134 | out: lpFindFileData=0x31e134*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x827412b0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x827439c0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x827439c0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="hr", cAlternateFileName="")) returned 1 [0066.513] FindNextFileW (in: hFindFile=0x5107a60, lpFindFileData=0x31e134 | out: lpFindFileData=0x31e134*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x8274aef0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x8274d600, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x8274d600, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="hu", cAlternateFileName="")) returned 1 [0066.513] FindNextFileW (in: hFindFile=0x5107a60, lpFindFileData=0x31e134 | out: lpFindFileData=0x31e134*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x82752420, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x82752420, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x82752420, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="id", cAlternateFileName="")) returned 1 [0066.513] FindNextFileW (in: hFindFile=0x5107a60, lpFindFileData=0x31e134 | out: lpFindFileData=0x31e134*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x82759950, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x8275c060, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x8275c060, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="it", cAlternateFileName="")) returned 1 [0066.513] FindNextFileW (in: hFindFile=0x5107a60, lpFindFileData=0x31e134 | out: lpFindFileData=0x31e134*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x82763590, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x82765ca0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x82765ca0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="ja", cAlternateFileName="")) returned 1 [0066.513] FindNextFileW (in: hFindFile=0x5107a60, lpFindFileData=0x31e134 | out: lpFindFileData=0x31e134*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x8276d1d0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x8276f8e0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x8276f8e0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="ko", cAlternateFileName="")) returned 1 [0066.514] FindNextFileW (in: hFindFile=0x5107a60, lpFindFileData=0x31e134 | out: lpFindFileData=0x31e134*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x82776e10, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x82779520, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x82779520, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="lt", cAlternateFileName="")) returned 1 [0066.514] FindNextFileW (in: hFindFile=0x5107a60, lpFindFileData=0x31e134 | out: lpFindFileData=0x31e134*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x8277e340, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x82783160, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x82783160, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="lv", cAlternateFileName="")) returned 1 [0066.514] FindNextFileW (in: hFindFile=0x5107a60, lpFindFileData=0x31e134 | out: lpFindFileData=0x31e134*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x82787f80, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x8278a690, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x8278a690, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="nb", cAlternateFileName="")) returned 1 [0066.514] FindNextFileW (in: hFindFile=0x5107a60, lpFindFileData=0x31e134 | out: lpFindFileData=0x31e134*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x82791bc0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x827942d0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x827942d0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="nl", cAlternateFileName="")) returned 1 [0066.514] FindNextFileW (in: hFindFile=0x5107a60, lpFindFileData=0x31e134 | out: lpFindFileData=0x31e134*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x8279b800, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x8279df10, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x8279df10, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="pl", cAlternateFileName="")) returned 1 [0066.514] FindNextFileW (in: hFindFile=0x5107a60, lpFindFileData=0x31e134 | out: lpFindFileData=0x31e134*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x827a2d30, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x827a5440, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x827a5440, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="pt_BR", cAlternateFileName="")) returned 1 [0066.514] FindNextFileW (in: hFindFile=0x5107a60, lpFindFileData=0x31e134 | out: lpFindFileData=0x31e134*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x827aa260, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x827af080, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x827af080, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="pt_PT", cAlternateFileName="")) returned 1 [0066.514] FindNextFileW (in: hFindFile=0x5107a60, lpFindFileData=0x31e134 | out: lpFindFileData=0x31e134*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x827b3ea0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x827b65b0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x827b65b0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="ro", cAlternateFileName="")) returned 1 [0066.514] FindNextFileW (in: hFindFile=0x5107a60, lpFindFileData=0x31e134 | out: lpFindFileData=0x31e134*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x827c7720, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x827cc540, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x827cc540, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="ru", cAlternateFileName="")) returned 1 [0066.515] FindNextFileW (in: hFindFile=0x5107a60, lpFindFileData=0x31e134 | out: lpFindFileData=0x31e134*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x827e4be0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x827e72f0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x827e72f0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="sk", cAlternateFileName="")) returned 1 [0066.515] FindNextFileW (in: hFindFile=0x5107a60, lpFindFileData=0x31e134 | out: lpFindFileData=0x31e134*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x827f5d50, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x827fab70, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x827fab70, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="sl", cAlternateFileName="")) returned 1 [0066.515] FindNextFileW (in: hFindFile=0x5107a60, lpFindFileData=0x31e134 | out: lpFindFileData=0x31e134*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x828095d0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x8280e3f0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x8280e3f0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="sr", cAlternateFileName="")) returned 1 [0066.515] FindNextFileW (in: hFindFile=0x5107a60, lpFindFileData=0x31e134 | out: lpFindFileData=0x31e134*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x8282b8b0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x828306d0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x828306d0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="sv", cAlternateFileName="")) returned 1 [0066.515] FindNextFileW (in: hFindFile=0x5107a60, lpFindFileData=0x31e134 | out: lpFindFileData=0x31e134*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x8284db90, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x828529b0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x828529b0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="th", cAlternateFileName="")) returned 1 [0066.515] FindNextFileW (in: hFindFile=0x5107a60, lpFindFileData=0x31e134 | out: lpFindFileData=0x31e134*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x82863b20, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x82866230, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x82866230, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="tr", cAlternateFileName="")) returned 1 [0066.515] FindNextFileW (in: hFindFile=0x5107a60, lpFindFileData=0x31e134 | out: lpFindFileData=0x31e134*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x8286b050, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x8286d760, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x8286d760, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="uk", cAlternateFileName="")) returned 1 [0066.515] FindNextFileW (in: hFindFile=0x5107a60, lpFindFileData=0x31e134 | out: lpFindFileData=0x31e134*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x82872580, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x82874c90, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x82874c90, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="vi", cAlternateFileName="")) returned 1 [0066.515] FindNextFileW (in: hFindFile=0x5107a60, lpFindFileData=0x31e134 | out: lpFindFileData=0x31e134*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x82879ab0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x8287e8d0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x8287e8d0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="zh_CN", cAlternateFileName="")) returned 1 [0066.516] FindNextFileW (in: hFindFile=0x5107a60, lpFindFileData=0x31e134 | out: lpFindFileData=0x31e134*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x828836f0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x82885e00, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x82885e00, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="zh_TW", cAlternateFileName="")) returned 1 [0066.516] FindNextFileW (in: hFindFile=0x5107a60, lpFindFileData=0x31e134 | out: lpFindFileData=0x31e134*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0066.516] FindClose (in: hFindFile=0x5107a60 | out: hFindFile=0x5107a60) returned 1 [0066.516] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e3bc) returned 1 [0066.516] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e3c8) returned 1 [0066.517] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e384) returned 1 [0066.517] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\bg", nBufferLength=0x105, lpBuffer=0x31de8c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\bg", lpFilePart=0x0) returned 0x8d [0066.517] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\bg\\", nBufferLength=0x105, lpBuffer=0x31de60, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\bg\\", lpFilePart=0x0) returned 0x8e [0066.517] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\bg\\*", lpFindFileData=0x31e0ac | out: lpFindFileData=0x31e0ac*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x8266a530, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x8266f350, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x8266f350, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5107a60 [0066.518] FindNextFileW (in: hFindFile=0x5107a60, lpFindFileData=0x31e0bc | out: lpFindFileData=0x31e0bc*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x8266a530, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x8266f350, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x8266f350, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0066.518] FindNextFileW (in: hFindFile=0x5107a60, lpFindFileData=0x31e0bc | out: lpFindFileData=0x31e0bc*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x8266f350, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x8266f350, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x82aab310, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x376, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1 [0066.518] FindNextFileW (in: hFindFile=0x5107a60, lpFindFileData=0x31e0bc | out: lpFindFileData=0x31e0bc*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0066.518] FindClose (in: hFindFile=0x5107a60 | out: hFindFile=0x5107a60) returned 1 [0066.518] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e344) returned 1 [0066.518] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e350) returned 1 [0066.518] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e384) returned 1 [0066.518] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\bg", nBufferLength=0x105, lpBuffer=0x31de8c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\bg", lpFilePart=0x0) returned 0x8d [0066.518] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\bg\\", nBufferLength=0x105, lpBuffer=0x31de60, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\bg\\", lpFilePart=0x0) returned 0x8e [0066.518] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\bg\\*", lpFindFileData=0x31e0ac | out: lpFindFileData=0x31e0ac*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x8266a530, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x8266f350, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x8266f350, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5107a60 [0066.519] FindNextFileW (in: hFindFile=0x5107a60, lpFindFileData=0x31e0bc | out: lpFindFileData=0x31e0bc*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x8266a530, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x8266f350, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x8266f350, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0066.519] FindNextFileW (in: hFindFile=0x5107a60, lpFindFileData=0x31e0bc | out: lpFindFileData=0x31e0bc*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x8266f350, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x8266f350, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x82aab310, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x376, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1 [0066.519] FindNextFileW (in: hFindFile=0x5107a60, lpFindFileData=0x31e0bc | out: lpFindFileData=0x31e0bc*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x8266f350, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x8266f350, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x82aab310, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x376, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 0 [0066.519] FindClose (in: hFindFile=0x5107a60 | out: hFindFile=0x5107a60) returned 1 [0066.519] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e344) returned 1 [0066.519] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e350) returned 1 [0066.519] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e384) returned 1 [0066.519] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\ca", nBufferLength=0x105, lpBuffer=0x31de8c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\ca", lpFilePart=0x0) returned 0x8d [0066.519] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\ca\\", nBufferLength=0x105, lpBuffer=0x31de60, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\ca\\", lpFilePart=0x0) returned 0x8e [0066.519] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\ca\\*", lpFindFileData=0x31e0ac | out: lpFindFileData=0x31e0ac*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x82676880, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x8267ddb0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x8267ddb0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5107a60 [0066.520] FindNextFileW (in: hFindFile=0x5107a60, lpFindFileData=0x31e0bc | out: lpFindFileData=0x31e0bc*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x82676880, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x8267ddb0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x8267ddb0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0066.520] FindNextFileW (in: hFindFile=0x5107a60, lpFindFileData=0x31e0bc | out: lpFindFileData=0x31e0bc*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x8267ddb0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x8267ddb0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x82aab310, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x2c1, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1 [0066.521] FindNextFileW (in: hFindFile=0x5107a60, lpFindFileData=0x31e0bc | out: lpFindFileData=0x31e0bc*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0066.521] FindClose (in: hFindFile=0x5107a60 | out: hFindFile=0x5107a60) returned 1 [0066.521] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e344) returned 1 [0066.521] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e350) returned 1 [0066.521] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e384) returned 1 [0066.521] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\ca", nBufferLength=0x105, lpBuffer=0x31de8c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\ca", lpFilePart=0x0) returned 0x8d [0066.521] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\ca\\", nBufferLength=0x105, lpBuffer=0x31de60, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\ca\\", lpFilePart=0x0) returned 0x8e [0066.521] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\ca\\*", lpFindFileData=0x31e0ac | out: lpFindFileData=0x31e0ac*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x82676880, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x8267ddb0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x8267ddb0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5107a60 [0066.521] FindNextFileW (in: hFindFile=0x5107a60, lpFindFileData=0x31e0bc | out: lpFindFileData=0x31e0bc*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x82676880, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x8267ddb0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x8267ddb0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0066.521] FindNextFileW (in: hFindFile=0x5107a60, lpFindFileData=0x31e0bc | out: lpFindFileData=0x31e0bc*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x8267ddb0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x8267ddb0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x82aab310, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x2c1, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1 [0066.522] FindNextFileW (in: hFindFile=0x5107a60, lpFindFileData=0x31e0bc | out: lpFindFileData=0x31e0bc*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x8267ddb0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x8267ddb0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x82aab310, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x2c1, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 0 [0066.522] FindClose (in: hFindFile=0x5107a60 | out: hFindFile=0x5107a60) returned 1 [0066.522] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e344) returned 1 [0066.522] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e350) returned 1 [0066.522] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e384) returned 1 [0066.522] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\cs", nBufferLength=0x105, lpBuffer=0x31de8c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\cs", lpFilePart=0x0) returned 0x8d [0066.522] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\cs\\", nBufferLength=0x105, lpBuffer=0x31de60, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\cs\\", lpFilePart=0x0) returned 0x8e [0066.522] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\cs\\*", lpFindFileData=0x31e0ac | out: lpFindFileData=0x31e0ac*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x826a0090, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x826a27a0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x826a27a0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5107a60 [0066.522] FindNextFileW (in: hFindFile=0x5107a60, lpFindFileData=0x31e0bc | out: lpFindFileData=0x31e0bc*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x826a0090, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x826a27a0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x826a27a0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0066.522] FindNextFileW (in: hFindFile=0x5107a60, lpFindFileData=0x31e0bc | out: lpFindFileData=0x31e0bc*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x826a27a0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x826a4eb0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x82aada20, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x297, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1 [0066.523] FindNextFileW (in: hFindFile=0x5107a60, lpFindFileData=0x31e0bc | out: lpFindFileData=0x31e0bc*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0066.523] FindClose (in: hFindFile=0x5107a60 | out: hFindFile=0x5107a60) returned 1 [0066.523] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e344) returned 1 [0066.523] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e350) returned 1 [0066.523] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e384) returned 1 [0066.523] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\cs", nBufferLength=0x105, lpBuffer=0x31de8c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\cs", lpFilePart=0x0) returned 0x8d [0066.523] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\cs\\", nBufferLength=0x105, lpBuffer=0x31de60, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\cs\\", lpFilePart=0x0) returned 0x8e [0066.523] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\cs\\*", lpFindFileData=0x31e0ac | out: lpFindFileData=0x31e0ac*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x826a0090, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x826a27a0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x826a27a0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5107a60 [0066.523] FindNextFileW (in: hFindFile=0x5107a60, lpFindFileData=0x31e0bc | out: lpFindFileData=0x31e0bc*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x826a0090, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x826a27a0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x826a27a0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0066.523] FindNextFileW (in: hFindFile=0x5107a60, lpFindFileData=0x31e0bc | out: lpFindFileData=0x31e0bc*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x826a27a0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x826a4eb0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x82aada20, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x297, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1 [0066.523] FindNextFileW (in: hFindFile=0x5107a60, lpFindFileData=0x31e0bc | out: lpFindFileData=0x31e0bc*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x826a27a0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x826a4eb0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x82aada20, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x297, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 0 [0066.524] FindClose (in: hFindFile=0x5107a60 | out: hFindFile=0x5107a60) returned 1 [0066.524] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e344) returned 1 [0066.524] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e350) returned 1 [0066.524] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e384) returned 1 [0066.524] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\da", nBufferLength=0x105, lpBuffer=0x31de8c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\da", lpFilePart=0x0) returned 0x8d [0066.524] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\da\\", nBufferLength=0x105, lpBuffer=0x31de60, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\da\\", lpFilePart=0x0) returned 0x8e [0066.524] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\da\\*", lpFindFileData=0x31e0ac | out: lpFindFileData=0x31e0ac*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x826ac3e0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x826b1200, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x826b1200, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5107a60 [0066.525] FindNextFileW (in: hFindFile=0x5107a60, lpFindFileData=0x31e0bc | out: lpFindFileData=0x31e0bc*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x826ac3e0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x826b1200, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x826b1200, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0066.525] FindNextFileW (in: hFindFile=0x5107a60, lpFindFileData=0x31e0bc | out: lpFindFileData=0x31e0bc*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x826b1200, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x826b1200, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x82aada20, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x282, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1 [0066.525] FindNextFileW (in: hFindFile=0x5107a60, lpFindFileData=0x31e0bc | out: lpFindFileData=0x31e0bc*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0066.525] FindClose (in: hFindFile=0x5107a60 | out: hFindFile=0x5107a60) returned 1 [0066.525] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e344) returned 1 [0066.525] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e350) returned 1 [0066.525] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e384) returned 1 [0066.525] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\da", nBufferLength=0x105, lpBuffer=0x31de8c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\da", lpFilePart=0x0) returned 0x8d [0066.525] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\da\\", nBufferLength=0x105, lpBuffer=0x31de60, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\da\\", lpFilePart=0x0) returned 0x8e [0066.525] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\da\\*", lpFindFileData=0x31e0ac | out: lpFindFileData=0x31e0ac*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x826ac3e0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x826b1200, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x826b1200, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5107a60 [0066.526] FindNextFileW (in: hFindFile=0x5107a60, lpFindFileData=0x31e0bc | out: lpFindFileData=0x31e0bc*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x826ac3e0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x826b1200, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x826b1200, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0066.526] FindNextFileW (in: hFindFile=0x5107a60, lpFindFileData=0x31e0bc | out: lpFindFileData=0x31e0bc*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x826b1200, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x826b1200, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x82aada20, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x282, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1 [0066.526] FindNextFileW (in: hFindFile=0x5107a60, lpFindFileData=0x31e0bc | out: lpFindFileData=0x31e0bc*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x826b1200, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x826b1200, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x82aada20, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x282, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 0 [0066.526] FindClose (in: hFindFile=0x5107a60 | out: hFindFile=0x5107a60) returned 1 [0066.526] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e344) returned 1 [0066.526] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e350) returned 1 [0066.526] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e384) returned 1 [0066.526] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\de", nBufferLength=0x105, lpBuffer=0x31de8c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\de", lpFilePart=0x0) returned 0x8d [0066.526] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\de\\", nBufferLength=0x105, lpBuffer=0x31de60, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\de\\", lpFilePart=0x0) returned 0x8e [0066.526] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\de\\*", lpFindFileData=0x31e0ac | out: lpFindFileData=0x31e0ac*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x826b8730, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x826bae40, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x826bae40, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5107a60 [0066.527] FindNextFileW (in: hFindFile=0x5107a60, lpFindFileData=0x31e0bc | out: lpFindFileData=0x31e0bc*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x826b8730, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x826bae40, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x826bae40, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0066.527] FindNextFileW (in: hFindFile=0x5107a60, lpFindFileData=0x31e0bc | out: lpFindFileData=0x31e0bc*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x826bae40, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x826bae40, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x82aada20, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x2bd, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1 [0066.527] FindNextFileW (in: hFindFile=0x5107a60, lpFindFileData=0x31e0bc | out: lpFindFileData=0x31e0bc*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0066.527] FindClose (in: hFindFile=0x5107a60 | out: hFindFile=0x5107a60) returned 1 [0066.527] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e344) returned 1 [0066.527] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e350) returned 1 [0066.527] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e384) returned 1 [0066.527] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\de", nBufferLength=0x105, lpBuffer=0x31de8c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\de", lpFilePart=0x0) returned 0x8d [0066.527] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\de\\", nBufferLength=0x105, lpBuffer=0x31de60, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\de\\", lpFilePart=0x0) returned 0x8e [0066.527] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\de\\*", lpFindFileData=0x31e0ac | out: lpFindFileData=0x31e0ac*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x826b8730, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x826bae40, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x826bae40, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5107a60 [0066.527] FindNextFileW (in: hFindFile=0x5107a60, lpFindFileData=0x31e0bc | out: lpFindFileData=0x31e0bc*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x826b8730, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x826bae40, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x826bae40, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0066.528] FindNextFileW (in: hFindFile=0x5107a60, lpFindFileData=0x31e0bc | out: lpFindFileData=0x31e0bc*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x826bae40, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x826bae40, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x82aada20, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x2bd, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1 [0066.528] FindNextFileW (in: hFindFile=0x5107a60, lpFindFileData=0x31e0bc | out: lpFindFileData=0x31e0bc*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x826bae40, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x826bae40, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x82aada20, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x2bd, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 0 [0066.528] FindClose (in: hFindFile=0x5107a60 | out: hFindFile=0x5107a60) returned 1 [0066.528] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e344) returned 1 [0066.528] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e350) returned 1 [0066.528] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e384) returned 1 [0066.528] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\el", nBufferLength=0x105, lpBuffer=0x31de8c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\el", lpFilePart=0x0) returned 0x8d [0066.528] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\el\\", nBufferLength=0x105, lpBuffer=0x31de60, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\el\\", lpFilePart=0x0) returned 0x8e [0066.528] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\el\\*", lpFindFileData=0x31e0ac | out: lpFindFileData=0x31e0ac*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x826c2370, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x826c7190, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x826c7190, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5107a60 [0066.531] FindNextFileW (in: hFindFile=0x5107a60, lpFindFileData=0x31e0bc | out: lpFindFileData=0x31e0bc*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x826c2370, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x826c7190, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x826c7190, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0066.531] FindNextFileW (in: hFindFile=0x5107a60, lpFindFileData=0x31e0bc | out: lpFindFileData=0x31e0bc*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x826c7190, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x826c7190, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x82aada20, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x36b, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1 [0066.531] FindNextFileW (in: hFindFile=0x5107a60, lpFindFileData=0x31e0bc | out: lpFindFileData=0x31e0bc*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0066.531] FindClose (in: hFindFile=0x5107a60 | out: hFindFile=0x5107a60) returned 1 [0066.531] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e344) returned 1 [0066.531] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e350) returned 1 [0066.531] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e384) returned 1 [0066.531] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\el", nBufferLength=0x105, lpBuffer=0x31de8c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\el", lpFilePart=0x0) returned 0x8d [0066.531] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\el\\", nBufferLength=0x105, lpBuffer=0x31de60, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\el\\", lpFilePart=0x0) returned 0x8e [0066.531] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\el\\*", lpFindFileData=0x31e0ac | out: lpFindFileData=0x31e0ac*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x826c2370, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x826c7190, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x826c7190, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5107a60 [0066.531] FindNextFileW (in: hFindFile=0x5107a60, lpFindFileData=0x31e0bc | out: lpFindFileData=0x31e0bc*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x826c2370, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x826c7190, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x826c7190, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0066.531] FindNextFileW (in: hFindFile=0x5107a60, lpFindFileData=0x31e0bc | out: lpFindFileData=0x31e0bc*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x826c7190, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x826c7190, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x82aada20, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x36b, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1 [0066.531] FindNextFileW (in: hFindFile=0x5107a60, lpFindFileData=0x31e0bc | out: lpFindFileData=0x31e0bc*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x826c7190, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x826c7190, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x82aada20, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x36b, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 0 [0066.531] FindClose (in: hFindFile=0x5107a60 | out: hFindFile=0x5107a60) returned 1 [0066.531] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e344) returned 1 [0066.532] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e350) returned 1 [0066.532] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e384) returned 1 [0066.532] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\en", nBufferLength=0x105, lpBuffer=0x31de8c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\en", lpFilePart=0x0) returned 0x8d [0066.532] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\en\\", nBufferLength=0x105, lpBuffer=0x31de60, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\en\\", lpFilePart=0x0) returned 0x8e [0066.532] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\en\\*", lpFindFileData=0x31e0ac | out: lpFindFileData=0x31e0ac*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x826ce6c0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x826d0dd0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x826d0dd0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5107a60 [0066.532] FindNextFileW (in: hFindFile=0x5107a60, lpFindFileData=0x31e0bc | out: lpFindFileData=0x31e0bc*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x826ce6c0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x826d0dd0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x826d0dd0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0066.532] FindNextFileW (in: hFindFile=0x5107a60, lpFindFileData=0x31e0bc | out: lpFindFileData=0x31e0bc*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x826d0dd0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x826d34e0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x82aada20, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x269, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1 [0066.532] FindNextFileW (in: hFindFile=0x5107a60, lpFindFileData=0x31e0bc | out: lpFindFileData=0x31e0bc*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0066.532] FindClose (in: hFindFile=0x5107a60 | out: hFindFile=0x5107a60) returned 1 [0066.532] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e344) returned 1 [0066.532] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e350) returned 1 [0066.532] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e384) returned 1 [0066.532] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\en", nBufferLength=0x105, lpBuffer=0x31de8c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\en", lpFilePart=0x0) returned 0x8d [0066.532] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\en\\", nBufferLength=0x105, lpBuffer=0x31de60, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\en\\", lpFilePart=0x0) returned 0x8e [0066.532] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\en\\*", lpFindFileData=0x31e0ac | out: lpFindFileData=0x31e0ac*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x826ce6c0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x826d0dd0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x826d0dd0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5107a60 [0066.532] FindNextFileW (in: hFindFile=0x5107a60, lpFindFileData=0x31e0bc | out: lpFindFileData=0x31e0bc*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x826ce6c0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x826d0dd0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x826d0dd0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0066.533] FindNextFileW (in: hFindFile=0x5107a60, lpFindFileData=0x31e0bc | out: lpFindFileData=0x31e0bc*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x826d0dd0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x826d34e0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x82aada20, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x269, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1 [0066.533] FindNextFileW (in: hFindFile=0x5107a60, lpFindFileData=0x31e0bc | out: lpFindFileData=0x31e0bc*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x826d0dd0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x826d34e0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x82aada20, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x269, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 0 [0066.533] FindClose (in: hFindFile=0x5107a60 | out: hFindFile=0x5107a60) returned 1 [0066.533] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e344) returned 1 [0066.533] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e350) returned 1 [0066.533] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e384) returned 1 [0066.533] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\en_GB", nBufferLength=0x105, lpBuffer=0x31de8c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\en_GB", lpFilePart=0x0) returned 0x90 [0066.533] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\en_GB\\", nBufferLength=0x105, lpBuffer=0x31de60, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\en_GB\\", lpFilePart=0x0) returned 0x91 [0066.533] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\en_GB\\*", lpFindFileData=0x31e0ac | out: lpFindFileData=0x31e0ac*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x826d8300, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x826df830, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x826df830, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5107a60 [0066.534] FindNextFileW (in: hFindFile=0x5107a60, lpFindFileData=0x31e0bc | out: lpFindFileData=0x31e0bc*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x826d8300, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x826df830, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x826df830, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0066.534] FindNextFileW (in: hFindFile=0x5107a60, lpFindFileData=0x31e0bc | out: lpFindFileData=0x31e0bc*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x826df830, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x826e1f40, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x82aada20, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x269, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1 [0066.534] FindNextFileW (in: hFindFile=0x5107a60, lpFindFileData=0x31e0bc | out: lpFindFileData=0x31e0bc*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0066.534] FindClose (in: hFindFile=0x5107a60 | out: hFindFile=0x5107a60) returned 1 [0066.534] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e344) returned 1 [0066.534] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e350) returned 1 [0066.534] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e384) returned 1 [0066.534] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\en_GB", nBufferLength=0x105, lpBuffer=0x31de8c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\en_GB", lpFilePart=0x0) returned 0x90 [0066.534] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\en_GB\\", nBufferLength=0x105, lpBuffer=0x31de60, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\en_GB\\", lpFilePart=0x0) returned 0x91 [0066.534] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\en_GB\\*", lpFindFileData=0x31e0ac | out: lpFindFileData=0x31e0ac*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x826d8300, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x826df830, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x826df830, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5107a60 [0066.534] FindNextFileW (in: hFindFile=0x5107a60, lpFindFileData=0x31e0bc | out: lpFindFileData=0x31e0bc*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x826d8300, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x826df830, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x826df830, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0066.534] FindNextFileW (in: hFindFile=0x5107a60, lpFindFileData=0x31e0bc | out: lpFindFileData=0x31e0bc*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x826df830, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x826e1f40, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x82aada20, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x269, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1 [0066.534] FindNextFileW (in: hFindFile=0x5107a60, lpFindFileData=0x31e0bc | out: lpFindFileData=0x31e0bc*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x826df830, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x826e1f40, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x82aada20, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x269, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 0 [0066.534] FindClose (in: hFindFile=0x5107a60 | out: hFindFile=0x5107a60) returned 1 [0066.535] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e344) returned 1 [0066.535] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e350) returned 1 [0066.535] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e384) returned 1 [0066.535] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\es", nBufferLength=0x105, lpBuffer=0x31de8c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\es", lpFilePart=0x0) returned 0x8d [0066.535] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\es\\", nBufferLength=0x105, lpBuffer=0x31de60, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\es\\", lpFilePart=0x0) returned 0x8e [0066.535] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\es\\*", lpFindFileData=0x31e0ac | out: lpFindFileData=0x31e0ac*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x826e9470, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x826ebb80, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x826ebb80, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5107a60 [0066.535] FindNextFileW (in: hFindFile=0x5107a60, lpFindFileData=0x31e0bc | out: lpFindFileData=0x31e0bc*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x826e9470, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x826ebb80, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x826ebb80, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0066.535] FindNextFileW (in: hFindFile=0x5107a60, lpFindFileData=0x31e0bc | out: lpFindFileData=0x31e0bc*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x826ebb80, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x826ebb80, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x82aada20, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x2b8, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1 [0066.535] FindNextFileW (in: hFindFile=0x5107a60, lpFindFileData=0x31e0bc | out: lpFindFileData=0x31e0bc*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0066.535] FindClose (in: hFindFile=0x5107a60 | out: hFindFile=0x5107a60) returned 1 [0066.535] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e344) returned 1 [0066.535] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e350) returned 1 [0066.535] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e384) returned 1 [0066.535] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\es", nBufferLength=0x105, lpBuffer=0x31de8c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\es", lpFilePart=0x0) returned 0x8d [0066.535] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\es\\", nBufferLength=0x105, lpBuffer=0x31de60, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\es\\", lpFilePart=0x0) returned 0x8e [0066.535] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\es\\*", lpFindFileData=0x31e0ac | out: lpFindFileData=0x31e0ac*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x826e9470, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x826ebb80, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x826ebb80, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5107a60 [0066.535] FindNextFileW (in: hFindFile=0x5107a60, lpFindFileData=0x31e0bc | out: lpFindFileData=0x31e0bc*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x826e9470, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x826ebb80, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x826ebb80, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0066.536] FindNextFileW (in: hFindFile=0x5107a60, lpFindFileData=0x31e0bc | out: lpFindFileData=0x31e0bc*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x826ebb80, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x826ebb80, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x82aada20, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x2b8, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1 [0066.536] FindNextFileW (in: hFindFile=0x5107a60, lpFindFileData=0x31e0bc | out: lpFindFileData=0x31e0bc*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x826ebb80, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x826ebb80, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x82aada20, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x2b8, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 0 [0066.536] FindClose (in: hFindFile=0x5107a60 | out: hFindFile=0x5107a60) returned 1 [0066.536] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e344) returned 1 [0066.536] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e350) returned 1 [0066.536] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e384) returned 1 [0066.536] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\es_419", nBufferLength=0x105, lpBuffer=0x31de8c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\es_419", lpFilePart=0x0) returned 0x91 [0066.536] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\es_419\\", nBufferLength=0x105, lpBuffer=0x31de60, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\es_419\\", lpFilePart=0x0) returned 0x92 [0066.536] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\es_419\\*", lpFindFileData=0x31e0ac | out: lpFindFileData=0x31e0ac*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x826f30b0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x826f7ed0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x826f7ed0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5107a60 [0066.537] FindNextFileW (in: hFindFile=0x5107a60, lpFindFileData=0x31e0bc | out: lpFindFileData=0x31e0bc*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x826f30b0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x826f7ed0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x826f7ed0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0066.537] FindNextFileW (in: hFindFile=0x5107a60, lpFindFileData=0x31e0bc | out: lpFindFileData=0x31e0bc*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x826f7ed0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x826f7ed0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x82aada20, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x29b, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1 [0066.537] FindNextFileW (in: hFindFile=0x5107a60, lpFindFileData=0x31e0bc | out: lpFindFileData=0x31e0bc*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0066.537] FindClose (in: hFindFile=0x5107a60 | out: hFindFile=0x5107a60) returned 1 [0066.537] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e344) returned 1 [0066.537] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e350) returned 1 [0066.537] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e384) returned 1 [0066.537] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\es_419", nBufferLength=0x105, lpBuffer=0x31de8c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\es_419", lpFilePart=0x0) returned 0x91 [0066.537] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\es_419\\", nBufferLength=0x105, lpBuffer=0x31de60, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\es_419\\", lpFilePart=0x0) returned 0x92 [0066.537] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\es_419\\*", lpFindFileData=0x31e0ac | out: lpFindFileData=0x31e0ac*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x826f30b0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x826f7ed0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x826f7ed0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5107a60 [0066.537] FindNextFileW (in: hFindFile=0x5107a60, lpFindFileData=0x31e0bc | out: lpFindFileData=0x31e0bc*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x826f30b0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x826f7ed0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x826f7ed0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0066.537] FindNextFileW (in: hFindFile=0x5107a60, lpFindFileData=0x31e0bc | out: lpFindFileData=0x31e0bc*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x826f7ed0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x826f7ed0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x82aada20, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x29b, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1 [0066.537] FindNextFileW (in: hFindFile=0x5107a60, lpFindFileData=0x31e0bc | out: lpFindFileData=0x31e0bc*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x826f7ed0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x826f7ed0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x82aada20, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x29b, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 0 [0066.537] FindClose (in: hFindFile=0x5107a60 | out: hFindFile=0x5107a60) returned 1 [0066.537] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e344) returned 1 [0066.537] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e350) returned 1 [0066.538] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e384) returned 1 [0066.538] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\et", nBufferLength=0x105, lpBuffer=0x31de8c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\et", lpFilePart=0x0) returned 0x8d [0066.538] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\et\\", nBufferLength=0x105, lpBuffer=0x31de60, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\et\\", lpFilePart=0x0) returned 0x8e [0066.538] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\et\\*", lpFindFileData=0x31e0ac | out: lpFindFileData=0x31e0ac*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x826ff400, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x82701b10, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x82701b10, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5107a60 [0066.538] FindNextFileW (in: hFindFile=0x5107a60, lpFindFileData=0x31e0bc | out: lpFindFileData=0x31e0bc*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x826ff400, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x82701b10, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x82701b10, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0066.538] FindNextFileW (in: hFindFile=0x5107a60, lpFindFileData=0x31e0bc | out: lpFindFileData=0x31e0bc*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x82701b10, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x82704220, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x82aada20, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x261, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1 [0066.538] FindNextFileW (in: hFindFile=0x5107a60, lpFindFileData=0x31e0bc | out: lpFindFileData=0x31e0bc*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0066.538] FindClose (in: hFindFile=0x5107a60 | out: hFindFile=0x5107a60) returned 1 [0066.538] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e344) returned 1 [0066.538] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e350) returned 1 [0066.538] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e384) returned 1 [0066.538] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\et", nBufferLength=0x105, lpBuffer=0x31de8c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\et", lpFilePart=0x0) returned 0x8d [0066.538] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\et\\", nBufferLength=0x105, lpBuffer=0x31de60, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\et\\", lpFilePart=0x0) returned 0x8e [0066.538] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\et\\*", lpFindFileData=0x31e0ac | out: lpFindFileData=0x31e0ac*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x826ff400, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x82701b10, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x82701b10, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5107a60 [0066.538] FindNextFileW (in: hFindFile=0x5107a60, lpFindFileData=0x31e0bc | out: lpFindFileData=0x31e0bc*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x826ff400, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x82701b10, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x82701b10, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0066.538] FindNextFileW (in: hFindFile=0x5107a60, lpFindFileData=0x31e0bc | out: lpFindFileData=0x31e0bc*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x82701b10, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x82704220, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x82aada20, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x261, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1 [0066.538] FindNextFileW (in: hFindFile=0x5107a60, lpFindFileData=0x31e0bc | out: lpFindFileData=0x31e0bc*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x82701b10, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x82704220, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x82aada20, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x261, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 0 [0066.539] FindClose (in: hFindFile=0x5107a60 | out: hFindFile=0x5107a60) returned 1 [0066.539] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e344) returned 1 [0066.539] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e350) returned 1 [0066.539] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e384) returned 1 [0066.539] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\fi", nBufferLength=0x105, lpBuffer=0x31de8c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\fi", lpFilePart=0x0) returned 0x8d [0066.539] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\fi\\", nBufferLength=0x105, lpBuffer=0x31de60, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\fi\\", lpFilePart=0x0) returned 0x8e [0066.539] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\fi\\*", lpFindFileData=0x31e0ac | out: lpFindFileData=0x31e0ac*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x82709040, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x8270de60, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x8270de60, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5107a60 [0066.540] FindNextFileW (in: hFindFile=0x5107a60, lpFindFileData=0x31e0bc | out: lpFindFileData=0x31e0bc*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x82709040, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x8270de60, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x8270de60, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0066.540] FindNextFileW (in: hFindFile=0x5107a60, lpFindFileData=0x31e0bc | out: lpFindFileData=0x31e0bc*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x8270de60, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x8270de60, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x82aada20, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x2a1, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1 [0066.540] FindNextFileW (in: hFindFile=0x5107a60, lpFindFileData=0x31e0bc | out: lpFindFileData=0x31e0bc*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0066.540] FindClose (in: hFindFile=0x5107a60 | out: hFindFile=0x5107a60) returned 1 [0066.540] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e344) returned 1 [0066.540] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e350) returned 1 [0066.540] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e384) returned 1 [0066.540] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\fi", nBufferLength=0x105, lpBuffer=0x31de8c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\fi", lpFilePart=0x0) returned 0x8d [0066.540] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\fi\\", nBufferLength=0x105, lpBuffer=0x31de60, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\fi\\", lpFilePart=0x0) returned 0x8e [0066.540] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\fi\\*", lpFindFileData=0x31e0ac | out: lpFindFileData=0x31e0ac*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x82709040, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x8270de60, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x8270de60, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5107a60 [0066.540] FindNextFileW (in: hFindFile=0x5107a60, lpFindFileData=0x31e0bc | out: lpFindFileData=0x31e0bc*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x82709040, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x8270de60, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x8270de60, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0066.540] FindNextFileW (in: hFindFile=0x5107a60, lpFindFileData=0x31e0bc | out: lpFindFileData=0x31e0bc*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x8270de60, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x8270de60, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x82aada20, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x2a1, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1 [0066.540] FindNextFileW (in: hFindFile=0x5107a60, lpFindFileData=0x31e0bc | out: lpFindFileData=0x31e0bc*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x8270de60, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x8270de60, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x82aada20, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x2a1, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 0 [0066.540] FindClose (in: hFindFile=0x5107a60 | out: hFindFile=0x5107a60) returned 1 [0066.540] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e344) returned 1 [0066.540] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e350) returned 1 [0066.540] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e384) returned 1 [0066.540] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\fil", nBufferLength=0x105, lpBuffer=0x31de8c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\fil", lpFilePart=0x0) returned 0x8e [0066.541] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\fil\\", nBufferLength=0x105, lpBuffer=0x31de60, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\fil\\", lpFilePart=0x0) returned 0x8f [0066.541] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\fil\\*", lpFindFileData=0x31e0ac | out: lpFindFileData=0x31e0ac*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x82715390, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x82717aa0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x82717aa0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5107a60 [0066.541] FindNextFileW (in: hFindFile=0x5107a60, lpFindFileData=0x31e0bc | out: lpFindFileData=0x31e0bc*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x82715390, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x82717aa0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x82717aa0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0066.541] FindNextFileW (in: hFindFile=0x5107a60, lpFindFileData=0x31e0bc | out: lpFindFileData=0x31e0bc*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x82717aa0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x82717aa0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x82aada20, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x2b4, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1 [0066.541] FindNextFileW (in: hFindFile=0x5107a60, lpFindFileData=0x31e0bc | out: lpFindFileData=0x31e0bc*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0066.541] FindClose (in: hFindFile=0x5107a60 | out: hFindFile=0x5107a60) returned 1 [0066.541] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e344) returned 1 [0066.541] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e350) returned 1 [0066.541] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e384) returned 1 [0066.541] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\fil", nBufferLength=0x105, lpBuffer=0x31de8c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\fil", lpFilePart=0x0) returned 0x8e [0066.541] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\fil\\", nBufferLength=0x105, lpBuffer=0x31de60, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\fil\\", lpFilePart=0x0) returned 0x8f [0066.541] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\fil\\*", lpFindFileData=0x31e0ac | out: lpFindFileData=0x31e0ac*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x82715390, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x82717aa0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x82717aa0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5107a60 [0066.541] FindNextFileW (in: hFindFile=0x5107a60, lpFindFileData=0x31e0bc | out: lpFindFileData=0x31e0bc*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x82715390, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x82717aa0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x82717aa0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0066.541] FindNextFileW (in: hFindFile=0x5107a60, lpFindFileData=0x31e0bc | out: lpFindFileData=0x31e0bc*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x82717aa0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x82717aa0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x82aada20, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x2b4, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1 [0066.541] FindNextFileW (in: hFindFile=0x5107a60, lpFindFileData=0x31e0bc | out: lpFindFileData=0x31e0bc*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x82717aa0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x82717aa0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x82aada20, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x2b4, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 0 [0066.541] FindClose (in: hFindFile=0x5107a60 | out: hFindFile=0x5107a60) returned 1 [0066.542] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e344) returned 1 [0066.542] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e350) returned 1 [0066.542] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e384) returned 1 [0066.542] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\fr", nBufferLength=0x105, lpBuffer=0x31de8c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\fr", lpFilePart=0x0) returned 0x8d [0066.542] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\fr\\", nBufferLength=0x105, lpBuffer=0x31de60, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\fr\\", lpFilePart=0x0) returned 0x8e [0066.542] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\fr\\*", lpFindFileData=0x31e0ac | out: lpFindFileData=0x31e0ac*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x8271efd0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x827216e0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x827216e0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5107a60 [0066.543] FindNextFileW (in: hFindFile=0x5107a60, lpFindFileData=0x31e0bc | out: lpFindFileData=0x31e0bc*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x8271efd0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x827216e0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x827216e0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0066.543] FindNextFileW (in: hFindFile=0x5107a60, lpFindFileData=0x31e0bc | out: lpFindFileData=0x31e0bc*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x827216e0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x82723df0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x82ab0130, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x2c4, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1 [0066.543] FindNextFileW (in: hFindFile=0x5107a60, lpFindFileData=0x31e0bc | out: lpFindFileData=0x31e0bc*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0066.543] FindClose (in: hFindFile=0x5107a60 | out: hFindFile=0x5107a60) returned 1 [0066.543] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e344) returned 1 [0066.543] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e350) returned 1 [0066.543] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e384) returned 1 [0066.543] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\fr", nBufferLength=0x105, lpBuffer=0x31de8c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\fr", lpFilePart=0x0) returned 0x8d [0066.543] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\fr\\", nBufferLength=0x105, lpBuffer=0x31de60, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\fr\\", lpFilePart=0x0) returned 0x8e [0066.543] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\fr\\*", lpFindFileData=0x31e0ac | out: lpFindFileData=0x31e0ac*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x8271efd0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x827216e0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x827216e0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5107a60 [0066.543] FindNextFileW (in: hFindFile=0x5107a60, lpFindFileData=0x31e0bc | out: lpFindFileData=0x31e0bc*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x8271efd0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x827216e0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x827216e0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0066.543] FindNextFileW (in: hFindFile=0x5107a60, lpFindFileData=0x31e0bc | out: lpFindFileData=0x31e0bc*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x827216e0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x82723df0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x82ab0130, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x2c4, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1 [0066.543] FindNextFileW (in: hFindFile=0x5107a60, lpFindFileData=0x31e0bc | out: lpFindFileData=0x31e0bc*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x827216e0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x82723df0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x82ab0130, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x2c4, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 0 [0066.544] FindClose (in: hFindFile=0x5107a60 | out: hFindFile=0x5107a60) returned 1 [0066.544] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e344) returned 1 [0066.544] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e350) returned 1 [0066.544] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e384) returned 1 [0066.544] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\hi", nBufferLength=0x105, lpBuffer=0x31de8c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\hi", lpFilePart=0x0) returned 0x8d [0066.544] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\hi\\", nBufferLength=0x105, lpBuffer=0x31de60, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\hi\\", lpFilePart=0x0) returned 0x8e [0066.544] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\hi\\*", lpFindFileData=0x31e0ac | out: lpFindFileData=0x31e0ac*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x82728c10, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x8272da30, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x8272da30, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5107a60 [0066.544] FindNextFileW (in: hFindFile=0x5107a60, lpFindFileData=0x31e0bc | out: lpFindFileData=0x31e0bc*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x82728c10, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x8272da30, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x8272da30, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0066.544] FindNextFileW (in: hFindFile=0x5107a60, lpFindFileData=0x31e0bc | out: lpFindFileData=0x31e0bc*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x8272da30, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x8272da30, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x82ab0130, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x3ad, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1 [0066.544] FindNextFileW (in: hFindFile=0x5107a60, lpFindFileData=0x31e0bc | out: lpFindFileData=0x31e0bc*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0066.544] FindClose (in: hFindFile=0x5107a60 | out: hFindFile=0x5107a60) returned 1 [0066.544] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e344) returned 1 [0066.544] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e350) returned 1 [0066.544] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e384) returned 1 [0066.544] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\hi", nBufferLength=0x105, lpBuffer=0x31de8c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\hi", lpFilePart=0x0) returned 0x8d [0066.544] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\hi\\", nBufferLength=0x105, lpBuffer=0x31de60, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\hi\\", lpFilePart=0x0) returned 0x8e [0066.544] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\hi\\*", lpFindFileData=0x31e0ac | out: lpFindFileData=0x31e0ac*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x82728c10, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x8272da30, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x8272da30, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5107a60 [0066.544] FindNextFileW (in: hFindFile=0x5107a60, lpFindFileData=0x31e0bc | out: lpFindFileData=0x31e0bc*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x82728c10, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x8272da30, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x8272da30, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0066.545] FindNextFileW (in: hFindFile=0x5107a60, lpFindFileData=0x31e0bc | out: lpFindFileData=0x31e0bc*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x8272da30, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x8272da30, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x82ab0130, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x3ad, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1 [0066.545] FindNextFileW (in: hFindFile=0x5107a60, lpFindFileData=0x31e0bc | out: lpFindFileData=0x31e0bc*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x8272da30, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x8272da30, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x82ab0130, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x3ad, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 0 [0066.545] FindClose (in: hFindFile=0x5107a60 | out: hFindFile=0x5107a60) returned 1 [0066.545] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e344) returned 1 [0066.545] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e350) returned 1 [0066.545] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e384) returned 1 [0066.545] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\hr", nBufferLength=0x105, lpBuffer=0x31de8c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\hr", lpFilePart=0x0) returned 0x8d [0066.545] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\hr\\", nBufferLength=0x105, lpBuffer=0x31de60, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\hr\\", lpFilePart=0x0) returned 0x8e [0066.545] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\hr\\*", lpFindFileData=0x31e0ac | out: lpFindFileData=0x31e0ac*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x827412b0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x827439c0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x827439c0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5107a60 [0066.546] FindNextFileW (in: hFindFile=0x5107a60, lpFindFileData=0x31e0bc | out: lpFindFileData=0x31e0bc*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x827412b0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x827439c0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x827439c0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0066.546] FindNextFileW (in: hFindFile=0x5107a60, lpFindFileData=0x31e0bc | out: lpFindFileData=0x31e0bc*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x827439c0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x827460d0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x82ab0130, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x279, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1 [0066.546] FindNextFileW (in: hFindFile=0x5107a60, lpFindFileData=0x31e0bc | out: lpFindFileData=0x31e0bc*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0066.546] FindClose (in: hFindFile=0x5107a60 | out: hFindFile=0x5107a60) returned 1 [0066.546] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e344) returned 1 [0066.546] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e350) returned 1 [0066.546] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e384) returned 1 [0066.546] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\hr", nBufferLength=0x105, lpBuffer=0x31de8c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\hr", lpFilePart=0x0) returned 0x8d [0066.546] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\hr\\", nBufferLength=0x105, lpBuffer=0x31de60, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\hr\\", lpFilePart=0x0) returned 0x8e [0066.546] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\hr\\*", lpFindFileData=0x31e0ac | out: lpFindFileData=0x31e0ac*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x827412b0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x827439c0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x827439c0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5107a60 [0066.546] FindNextFileW (in: hFindFile=0x5107a60, lpFindFileData=0x31e0bc | out: lpFindFileData=0x31e0bc*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x827412b0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x827439c0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x827439c0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0066.546] FindNextFileW (in: hFindFile=0x5107a60, lpFindFileData=0x31e0bc | out: lpFindFileData=0x31e0bc*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x827439c0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x827460d0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x82ab0130, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x279, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1 [0066.546] FindNextFileW (in: hFindFile=0x5107a60, lpFindFileData=0x31e0bc | out: lpFindFileData=0x31e0bc*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x827439c0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x827460d0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x82ab0130, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x279, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 0 [0066.546] FindClose (in: hFindFile=0x5107a60 | out: hFindFile=0x5107a60) returned 1 [0066.547] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e344) returned 1 [0066.547] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e350) returned 1 [0066.547] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e384) returned 1 [0066.547] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\hu", nBufferLength=0x105, lpBuffer=0x31de8c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\hu", lpFilePart=0x0) returned 0x8d [0066.547] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\hu\\", nBufferLength=0x105, lpBuffer=0x31de60, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\hu\\", lpFilePart=0x0) returned 0x8e [0066.547] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\hu\\*", lpFindFileData=0x31e0ac | out: lpFindFileData=0x31e0ac*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x8274aef0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x8274d600, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x8274d600, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5107a60 [0066.547] FindNextFileW (in: hFindFile=0x5107a60, lpFindFileData=0x31e0bc | out: lpFindFileData=0x31e0bc*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x8274aef0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x8274d600, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x8274d600, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0066.547] FindNextFileW (in: hFindFile=0x5107a60, lpFindFileData=0x31e0bc | out: lpFindFileData=0x31e0bc*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x8274d600, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x8274fd10, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x82ab0130, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x2c6, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1 [0066.547] FindNextFileW (in: hFindFile=0x5107a60, lpFindFileData=0x31e0bc | out: lpFindFileData=0x31e0bc*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0066.547] FindClose (in: hFindFile=0x5107a60 | out: hFindFile=0x5107a60) returned 1 [0066.547] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e344) returned 1 [0066.547] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e350) returned 1 [0066.547] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e384) returned 1 [0066.547] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\hu", nBufferLength=0x105, lpBuffer=0x31de8c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\hu", lpFilePart=0x0) returned 0x8d [0066.547] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\hu\\", nBufferLength=0x105, lpBuffer=0x31de60, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\hu\\", lpFilePart=0x0) returned 0x8e [0066.547] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\hu\\*", lpFindFileData=0x31e0ac | out: lpFindFileData=0x31e0ac*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x8274aef0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x8274d600, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x8274d600, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5107a60 [0066.547] FindNextFileW (in: hFindFile=0x5107a60, lpFindFileData=0x31e0bc | out: lpFindFileData=0x31e0bc*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x8274aef0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x8274d600, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x8274d600, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0066.548] FindNextFileW (in: hFindFile=0x5107a60, lpFindFileData=0x31e0bc | out: lpFindFileData=0x31e0bc*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x8274d600, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x8274fd10, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x82ab0130, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x2c6, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1 [0066.548] FindNextFileW (in: hFindFile=0x5107a60, lpFindFileData=0x31e0bc | out: lpFindFileData=0x31e0bc*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x8274d600, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x8274fd10, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x82ab0130, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x2c6, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 0 [0066.548] FindClose (in: hFindFile=0x5107a60 | out: hFindFile=0x5107a60) returned 1 [0066.548] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e344) returned 1 [0066.548] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e350) returned 1 [0066.548] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e384) returned 1 [0066.548] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\id", nBufferLength=0x105, lpBuffer=0x31de8c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\id", lpFilePart=0x0) returned 0x8d [0066.548] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\id\\", nBufferLength=0x105, lpBuffer=0x31de60, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\id\\", lpFilePart=0x0) returned 0x8e [0066.548] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\id\\*", lpFindFileData=0x31e0ac | out: lpFindFileData=0x31e0ac*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x82752420, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x82752420, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x82752420, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5107a60 [0066.549] FindNextFileW (in: hFindFile=0x5107a60, lpFindFileData=0x31e0bc | out: lpFindFileData=0x31e0bc*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x82752420, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x82752420, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x82752420, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0066.549] FindNextFileW (in: hFindFile=0x5107a60, lpFindFileData=0x31e0bc | out: lpFindFileData=0x31e0bc*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x82752420, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x82752420, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x82ab0130, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x269, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1 [0066.549] FindNextFileW (in: hFindFile=0x5107a60, lpFindFileData=0x31e0bc | out: lpFindFileData=0x31e0bc*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0066.549] FindClose (in: hFindFile=0x5107a60 | out: hFindFile=0x5107a60) returned 1 [0066.549] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e344) returned 1 [0066.549] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e350) returned 1 [0066.549] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e384) returned 1 [0066.549] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\id", nBufferLength=0x105, lpBuffer=0x31de8c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\id", lpFilePart=0x0) returned 0x8d [0066.549] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\id\\", nBufferLength=0x105, lpBuffer=0x31de60, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\id\\", lpFilePart=0x0) returned 0x8e [0066.549] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\id\\*", lpFindFileData=0x31e0ac | out: lpFindFileData=0x31e0ac*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x82752420, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x82752420, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x82752420, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5107a60 [0066.549] FindNextFileW (in: hFindFile=0x5107a60, lpFindFileData=0x31e0bc | out: lpFindFileData=0x31e0bc*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x82752420, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x82752420, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x82752420, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0066.549] FindNextFileW (in: hFindFile=0x5107a60, lpFindFileData=0x31e0bc | out: lpFindFileData=0x31e0bc*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x82752420, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x82752420, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x82ab0130, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x269, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1 [0066.549] FindNextFileW (in: hFindFile=0x5107a60, lpFindFileData=0x31e0bc | out: lpFindFileData=0x31e0bc*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x82752420, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x82752420, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x82ab0130, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x269, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 0 [0066.550] FindClose (in: hFindFile=0x5107a60 | out: hFindFile=0x5107a60) returned 1 [0066.550] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e344) returned 1 [0066.550] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e350) returned 1 [0066.550] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e384) returned 1 [0066.550] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\it", nBufferLength=0x105, lpBuffer=0x31de8c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\it", lpFilePart=0x0) returned 0x8d [0066.550] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\it\\", nBufferLength=0x105, lpBuffer=0x31de60, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\it\\", lpFilePart=0x0) returned 0x8e [0066.550] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\it\\*", lpFindFileData=0x31e0ac | out: lpFindFileData=0x31e0ac*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x82759950, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x8275c060, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x8275c060, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5107a60 [0066.550] FindNextFileW (in: hFindFile=0x5107a60, lpFindFileData=0x31e0bc | out: lpFindFileData=0x31e0bc*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x82759950, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x8275c060, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x8275c060, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0066.550] FindNextFileW (in: hFindFile=0x5107a60, lpFindFileData=0x31e0bc | out: lpFindFileData=0x31e0bc*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x8275c060, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x8275c060, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x82ab0130, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x26e, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1 [0066.550] FindNextFileW (in: hFindFile=0x5107a60, lpFindFileData=0x31e0bc | out: lpFindFileData=0x31e0bc*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0066.550] FindClose (in: hFindFile=0x5107a60 | out: hFindFile=0x5107a60) returned 1 [0066.550] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e344) returned 1 [0066.550] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e350) returned 1 [0066.550] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e384) returned 1 [0066.550] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\it", nBufferLength=0x105, lpBuffer=0x31de8c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\it", lpFilePart=0x0) returned 0x8d [0066.551] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\it\\", nBufferLength=0x105, lpBuffer=0x31de60, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\it\\", lpFilePart=0x0) returned 0x8e [0066.551] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\it\\*", lpFindFileData=0x31e0ac | out: lpFindFileData=0x31e0ac*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x82759950, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x8275c060, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x8275c060, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5107a60 [0066.551] FindNextFileW (in: hFindFile=0x5107a60, lpFindFileData=0x31e0bc | out: lpFindFileData=0x31e0bc*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x82759950, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x8275c060, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x8275c060, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0066.551] FindNextFileW (in: hFindFile=0x5107a60, lpFindFileData=0x31e0bc | out: lpFindFileData=0x31e0bc*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x8275c060, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x8275c060, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x82ab0130, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x26e, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1 [0066.551] FindNextFileW (in: hFindFile=0x5107a60, lpFindFileData=0x31e0bc | out: lpFindFileData=0x31e0bc*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x8275c060, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x8275c060, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x82ab0130, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x26e, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 0 [0066.551] FindClose (in: hFindFile=0x5107a60 | out: hFindFile=0x5107a60) returned 1 [0066.551] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e344) returned 1 [0066.551] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e350) returned 1 [0066.551] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e384) returned 1 [0066.551] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\ja", nBufferLength=0x105, lpBuffer=0x31de8c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\ja", lpFilePart=0x0) returned 0x8d [0066.551] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\ja\\", nBufferLength=0x105, lpBuffer=0x31de60, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\ja\\", lpFilePart=0x0) returned 0x8e [0066.551] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\ja\\*", lpFindFileData=0x31e0ac | out: lpFindFileData=0x31e0ac*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x82763590, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x82765ca0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x82765ca0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5107a60 [0066.552] FindNextFileW (in: hFindFile=0x5107a60, lpFindFileData=0x31e0bc | out: lpFindFileData=0x31e0bc*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x82763590, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x82765ca0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x82765ca0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0066.552] FindNextFileW (in: hFindFile=0x5107a60, lpFindFileData=0x31e0bc | out: lpFindFileData=0x31e0bc*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x82765ca0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x82765ca0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x82ab0130, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x30a, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1 [0066.552] FindNextFileW (in: hFindFile=0x5107a60, lpFindFileData=0x31e0bc | out: lpFindFileData=0x31e0bc*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0066.552] FindClose (in: hFindFile=0x5107a60 | out: hFindFile=0x5107a60) returned 1 [0066.552] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e344) returned 1 [0066.552] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e350) returned 1 [0066.552] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e384) returned 1 [0066.552] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\ja", nBufferLength=0x105, lpBuffer=0x31de8c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\ja", lpFilePart=0x0) returned 0x8d [0066.552] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\ja\\", nBufferLength=0x105, lpBuffer=0x31de60, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\ja\\", lpFilePart=0x0) returned 0x8e [0066.552] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\ja\\*", lpFindFileData=0x31e0ac | out: lpFindFileData=0x31e0ac*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x82763590, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x82765ca0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x82765ca0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5107a60 [0066.552] FindNextFileW (in: hFindFile=0x5107a60, lpFindFileData=0x31e0bc | out: lpFindFileData=0x31e0bc*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x82763590, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x82765ca0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x82765ca0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0066.553] FindNextFileW (in: hFindFile=0x5107a60, lpFindFileData=0x31e0bc | out: lpFindFileData=0x31e0bc*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x82765ca0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x82765ca0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x82ab0130, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x30a, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1 [0066.553] FindNextFileW (in: hFindFile=0x5107a60, lpFindFileData=0x31e0bc | out: lpFindFileData=0x31e0bc*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x82765ca0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x82765ca0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x82ab0130, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x30a, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 0 [0066.553] FindClose (in: hFindFile=0x5107a60 | out: hFindFile=0x5107a60) returned 1 [0066.553] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e344) returned 1 [0066.553] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e350) returned 1 [0066.553] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e384) returned 1 [0066.553] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\ko", nBufferLength=0x105, lpBuffer=0x31de8c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\ko", lpFilePart=0x0) returned 0x8d [0066.553] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\ko\\", nBufferLength=0x105, lpBuffer=0x31de60, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\ko\\", lpFilePart=0x0) returned 0x8e [0066.553] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\ko\\*", lpFindFileData=0x31e0ac | out: lpFindFileData=0x31e0ac*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x8276d1d0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x8276f8e0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x8276f8e0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5107a60 [0066.553] FindNextFileW (in: hFindFile=0x5107a60, lpFindFileData=0x31e0bc | out: lpFindFileData=0x31e0bc*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x8276d1d0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x8276f8e0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x8276f8e0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0066.553] FindNextFileW (in: hFindFile=0x5107a60, lpFindFileData=0x31e0bc | out: lpFindFileData=0x31e0bc*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x8276f8e0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x8276f8e0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x82ab0130, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x29d, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1 [0066.553] FindNextFileW (in: hFindFile=0x5107a60, lpFindFileData=0x31e0bc | out: lpFindFileData=0x31e0bc*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0066.553] FindClose (in: hFindFile=0x5107a60 | out: hFindFile=0x5107a60) returned 1 [0066.553] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e344) returned 1 [0066.553] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e350) returned 1 [0066.553] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e384) returned 1 [0066.553] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\ko", nBufferLength=0x105, lpBuffer=0x31de8c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\ko", lpFilePart=0x0) returned 0x8d [0066.553] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\ko\\", nBufferLength=0x105, lpBuffer=0x31de60, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\ko\\", lpFilePart=0x0) returned 0x8e [0066.553] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\ko\\*", lpFindFileData=0x31e0ac | out: lpFindFileData=0x31e0ac*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x8276d1d0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x8276f8e0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x8276f8e0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5107a60 [0066.554] FindNextFileW (in: hFindFile=0x5107a60, lpFindFileData=0x31e0bc | out: lpFindFileData=0x31e0bc*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x8276d1d0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x8276f8e0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x8276f8e0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0066.554] FindNextFileW (in: hFindFile=0x5107a60, lpFindFileData=0x31e0bc | out: lpFindFileData=0x31e0bc*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x8276f8e0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x8276f8e0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x82ab0130, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x29d, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1 [0066.554] FindNextFileW (in: hFindFile=0x5107a60, lpFindFileData=0x31e0bc | out: lpFindFileData=0x31e0bc*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x8276f8e0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x8276f8e0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x82ab0130, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x29d, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 0 [0066.554] FindClose (in: hFindFile=0x5107a60 | out: hFindFile=0x5107a60) returned 1 [0066.554] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e344) returned 1 [0066.554] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e350) returned 1 [0066.554] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e384) returned 1 [0066.554] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\lt", nBufferLength=0x105, lpBuffer=0x31de8c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\lt", lpFilePart=0x0) returned 0x8d [0066.554] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\lt\\", nBufferLength=0x105, lpBuffer=0x31de60, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\lt\\", lpFilePart=0x0) returned 0x8e [0066.554] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\lt\\*", lpFindFileData=0x31e0ac | out: lpFindFileData=0x31e0ac*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x82776e10, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x82779520, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x82779520, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5107a60 [0066.555] FindNextFileW (in: hFindFile=0x5107a60, lpFindFileData=0x31e0bc | out: lpFindFileData=0x31e0bc*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x82776e10, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x82779520, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x82779520, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0066.555] FindNextFileW (in: hFindFile=0x5107a60, lpFindFileData=0x31e0bc | out: lpFindFileData=0x31e0bc*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x82779520, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x82779520, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x82ab0130, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x2ae, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1 [0066.555] FindNextFileW (in: hFindFile=0x5107a60, lpFindFileData=0x31e0bc | out: lpFindFileData=0x31e0bc*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0066.555] FindClose (in: hFindFile=0x5107a60 | out: hFindFile=0x5107a60) returned 1 [0066.555] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e344) returned 1 [0066.555] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e350) returned 1 [0066.555] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e384) returned 1 [0066.555] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\lt", nBufferLength=0x105, lpBuffer=0x31de8c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\lt", lpFilePart=0x0) returned 0x8d [0066.555] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\lt\\", nBufferLength=0x105, lpBuffer=0x31de60, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\lt\\", lpFilePart=0x0) returned 0x8e [0066.555] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\lt\\*", lpFindFileData=0x31e0ac | out: lpFindFileData=0x31e0ac*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x82776e10, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x82779520, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x82779520, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5107a60 [0066.555] FindNextFileW (in: hFindFile=0x5107a60, lpFindFileData=0x31e0bc | out: lpFindFileData=0x31e0bc*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x82776e10, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x82779520, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x82779520, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0066.555] FindNextFileW (in: hFindFile=0x5107a60, lpFindFileData=0x31e0bc | out: lpFindFileData=0x31e0bc*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x82779520, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x82779520, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x82ab0130, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x2ae, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1 [0066.555] FindNextFileW (in: hFindFile=0x5107a60, lpFindFileData=0x31e0bc | out: lpFindFileData=0x31e0bc*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x82779520, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x82779520, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x82ab0130, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x2ae, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 0 [0066.556] FindClose (in: hFindFile=0x5107a60 | out: hFindFile=0x5107a60) returned 1 [0066.556] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e344) returned 1 [0066.556] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e350) returned 1 [0066.556] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e384) returned 1 [0066.556] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\lv", nBufferLength=0x105, lpBuffer=0x31de8c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\lv", lpFilePart=0x0) returned 0x8d [0066.556] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\lv\\", nBufferLength=0x105, lpBuffer=0x31de60, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\lv\\", lpFilePart=0x0) returned 0x8e [0066.556] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\lv\\*", lpFindFileData=0x31e0ac | out: lpFindFileData=0x31e0ac*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x8277e340, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x82783160, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x82783160, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5107a60 [0066.556] FindNextFileW (in: hFindFile=0x5107a60, lpFindFileData=0x31e0bc | out: lpFindFileData=0x31e0bc*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x8277e340, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x82783160, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x82783160, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0066.556] FindNextFileW (in: hFindFile=0x5107a60, lpFindFileData=0x31e0bc | out: lpFindFileData=0x31e0bc*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x82783160, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x82783160, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x82ab0130, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x2bb, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1 [0066.556] FindNextFileW (in: hFindFile=0x5107a60, lpFindFileData=0x31e0bc | out: lpFindFileData=0x31e0bc*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0066.556] FindClose (in: hFindFile=0x5107a60 | out: hFindFile=0x5107a60) returned 1 [0066.556] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e344) returned 1 [0066.556] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e350) returned 1 [0066.556] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e384) returned 1 [0066.556] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\lv", nBufferLength=0x105, lpBuffer=0x31de8c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\lv", lpFilePart=0x0) returned 0x8d [0066.556] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\lv\\", nBufferLength=0x105, lpBuffer=0x31de60, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\lv\\", lpFilePart=0x0) returned 0x8e [0066.556] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\lv\\*", lpFindFileData=0x31e0ac | out: lpFindFileData=0x31e0ac*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x8277e340, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x82783160, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x82783160, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5107a60 [0066.557] FindNextFileW (in: hFindFile=0x5107a60, lpFindFileData=0x31e0bc | out: lpFindFileData=0x31e0bc*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x8277e340, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x82783160, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x82783160, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0066.557] FindNextFileW (in: hFindFile=0x5107a60, lpFindFileData=0x31e0bc | out: lpFindFileData=0x31e0bc*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x82783160, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x82783160, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x82ab0130, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x2bb, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1 [0066.557] FindNextFileW (in: hFindFile=0x5107a60, lpFindFileData=0x31e0bc | out: lpFindFileData=0x31e0bc*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x82783160, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x82783160, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x82ab0130, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x2bb, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 0 [0066.557] FindClose (in: hFindFile=0x5107a60 | out: hFindFile=0x5107a60) returned 1 [0066.557] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e344) returned 1 [0066.557] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e350) returned 1 [0066.557] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e384) returned 1 [0066.557] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\nb", nBufferLength=0x105, lpBuffer=0x31de8c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\nb", lpFilePart=0x0) returned 0x8d [0066.557] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\nb\\", nBufferLength=0x105, lpBuffer=0x31de60, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\nb\\", lpFilePart=0x0) returned 0x8e [0066.557] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\nb\\*", lpFindFileData=0x31e0ac | out: lpFindFileData=0x31e0ac*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x82787f80, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x8278a690, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x8278a690, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5107a60 [0066.558] FindNextFileW (in: hFindFile=0x5107a60, lpFindFileData=0x31e0bc | out: lpFindFileData=0x31e0bc*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x82787f80, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x8278a690, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x8278a690, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0066.558] FindNextFileW (in: hFindFile=0x5107a60, lpFindFileData=0x31e0bc | out: lpFindFileData=0x31e0bc*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x8278a690, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x8278a690, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x82ab0130, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x284, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1 [0066.558] FindNextFileW (in: hFindFile=0x5107a60, lpFindFileData=0x31e0bc | out: lpFindFileData=0x31e0bc*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0066.558] FindClose (in: hFindFile=0x5107a60 | out: hFindFile=0x5107a60) returned 1 [0066.558] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e344) returned 1 [0066.558] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e350) returned 1 [0066.558] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e384) returned 1 [0066.558] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\nb", nBufferLength=0x105, lpBuffer=0x31de8c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\nb", lpFilePart=0x0) returned 0x8d [0066.558] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\nb\\", nBufferLength=0x105, lpBuffer=0x31de60, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\nb\\", lpFilePart=0x0) returned 0x8e [0066.558] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\nb\\*", lpFindFileData=0x31e0ac | out: lpFindFileData=0x31e0ac*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x82787f80, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x8278a690, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x8278a690, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5107a60 [0066.558] FindNextFileW (in: hFindFile=0x5107a60, lpFindFileData=0x31e0bc | out: lpFindFileData=0x31e0bc*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x82787f80, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x8278a690, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x8278a690, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0066.558] FindNextFileW (in: hFindFile=0x5107a60, lpFindFileData=0x31e0bc | out: lpFindFileData=0x31e0bc*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x8278a690, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x8278a690, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x82ab0130, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x284, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1 [0066.558] FindNextFileW (in: hFindFile=0x5107a60, lpFindFileData=0x31e0bc | out: lpFindFileData=0x31e0bc*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x8278a690, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x8278a690, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x82ab0130, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x284, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 0 [0066.558] FindClose (in: hFindFile=0x5107a60 | out: hFindFile=0x5107a60) returned 1 [0066.559] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e344) returned 1 [0066.559] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e350) returned 1 [0066.559] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e384) returned 1 [0066.559] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\nl", nBufferLength=0x105, lpBuffer=0x31de8c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\nl", lpFilePart=0x0) returned 0x8d [0066.559] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\nl\\", nBufferLength=0x105, lpBuffer=0x31de60, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\nl\\", lpFilePart=0x0) returned 0x8e [0066.559] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\nl\\*", lpFindFileData=0x31e0ac | out: lpFindFileData=0x31e0ac*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x82791bc0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x827942d0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x827942d0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5107a60 [0066.559] FindNextFileW (in: hFindFile=0x5107a60, lpFindFileData=0x31e0bc | out: lpFindFileData=0x31e0bc*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x82791bc0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x827942d0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x827942d0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0066.559] FindNextFileW (in: hFindFile=0x5107a60, lpFindFileData=0x31e0bc | out: lpFindFileData=0x31e0bc*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x827942d0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x827969e0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x82ab0130, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x282, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1 [0066.559] FindNextFileW (in: hFindFile=0x5107a60, lpFindFileData=0x31e0bc | out: lpFindFileData=0x31e0bc*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0066.559] FindClose (in: hFindFile=0x5107a60 | out: hFindFile=0x5107a60) returned 1 [0066.559] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e344) returned 1 [0066.559] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e350) returned 1 [0066.559] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e384) returned 1 [0066.559] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\nl", nBufferLength=0x105, lpBuffer=0x31de8c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\nl", lpFilePart=0x0) returned 0x8d [0066.559] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\nl\\", nBufferLength=0x105, lpBuffer=0x31de60, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\nl\\", lpFilePart=0x0) returned 0x8e [0066.559] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\nl\\*", lpFindFileData=0x31e0ac | out: lpFindFileData=0x31e0ac*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x82791bc0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x827942d0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x827942d0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5107a60 [0066.559] FindNextFileW (in: hFindFile=0x5107a60, lpFindFileData=0x31e0bc | out: lpFindFileData=0x31e0bc*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x82791bc0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x827942d0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x827942d0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0066.560] FindNextFileW (in: hFindFile=0x5107a60, lpFindFileData=0x31e0bc | out: lpFindFileData=0x31e0bc*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x827942d0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x827969e0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x82ab0130, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x282, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1 [0066.560] FindNextFileW (in: hFindFile=0x5107a60, lpFindFileData=0x31e0bc | out: lpFindFileData=0x31e0bc*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x827942d0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x827969e0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x82ab0130, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x282, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 0 [0066.560] FindClose (in: hFindFile=0x5107a60 | out: hFindFile=0x5107a60) returned 1 [0066.560] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e344) returned 1 [0066.560] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e350) returned 1 [0066.560] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e384) returned 1 [0066.560] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\pl", nBufferLength=0x105, lpBuffer=0x31de8c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\pl", lpFilePart=0x0) returned 0x8d [0066.560] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\pl\\", nBufferLength=0x105, lpBuffer=0x31de60, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\pl\\", lpFilePart=0x0) returned 0x8e [0066.560] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\pl\\*", lpFindFileData=0x31e0ac | out: lpFindFileData=0x31e0ac*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x8279b800, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x8279df10, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x8279df10, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5107a60 [0066.561] FindNextFileW (in: hFindFile=0x5107a60, lpFindFileData=0x31e0bc | out: lpFindFileData=0x31e0bc*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x8279b800, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x8279df10, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x8279df10, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0066.561] FindNextFileW (in: hFindFile=0x5107a60, lpFindFileData=0x31e0bc | out: lpFindFileData=0x31e0bc*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x8279df10, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x8279df10, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x82ab2840, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x29a, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1 [0066.561] FindNextFileW (in: hFindFile=0x5107a60, lpFindFileData=0x31e0bc | out: lpFindFileData=0x31e0bc*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0066.561] FindClose (in: hFindFile=0x5107a60 | out: hFindFile=0x5107a60) returned 1 [0066.561] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e344) returned 1 [0066.561] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e350) returned 1 [0066.561] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e384) returned 1 [0066.561] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\pl", nBufferLength=0x105, lpBuffer=0x31de8c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\pl", lpFilePart=0x0) returned 0x8d [0066.561] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\pl\\", nBufferLength=0x105, lpBuffer=0x31de60, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\pl\\", lpFilePart=0x0) returned 0x8e [0066.561] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\pl\\*", lpFindFileData=0x31e0ac | out: lpFindFileData=0x31e0ac*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x8279b800, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x8279df10, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x8279df10, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5107a60 [0066.561] FindNextFileW (in: hFindFile=0x5107a60, lpFindFileData=0x31e0bc | out: lpFindFileData=0x31e0bc*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x8279b800, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x8279df10, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x8279df10, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0066.561] FindNextFileW (in: hFindFile=0x5107a60, lpFindFileData=0x31e0bc | out: lpFindFileData=0x31e0bc*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x8279df10, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x8279df10, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x82ab2840, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x29a, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1 [0066.561] FindNextFileW (in: hFindFile=0x5107a60, lpFindFileData=0x31e0bc | out: lpFindFileData=0x31e0bc*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x8279df10, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x8279df10, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x82ab2840, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x29a, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 0 [0066.562] FindClose (in: hFindFile=0x5107a60 | out: hFindFile=0x5107a60) returned 1 [0066.562] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e344) returned 1 [0066.562] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e350) returned 1 [0066.562] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e384) returned 1 [0066.562] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\pt_BR", nBufferLength=0x105, lpBuffer=0x31de8c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\pt_BR", lpFilePart=0x0) returned 0x90 [0066.562] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\pt_BR\\", nBufferLength=0x105, lpBuffer=0x31de60, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\pt_BR\\", lpFilePart=0x0) returned 0x91 [0066.562] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\pt_BR\\*", lpFindFileData=0x31e0ac | out: lpFindFileData=0x31e0ac*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x827a2d30, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x827a5440, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x827a5440, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5107a60 [0066.562] FindNextFileW (in: hFindFile=0x5107a60, lpFindFileData=0x31e0bc | out: lpFindFileData=0x31e0bc*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x827a2d30, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x827a5440, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x827a5440, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0066.562] FindNextFileW (in: hFindFile=0x5107a60, lpFindFileData=0x31e0bc | out: lpFindFileData=0x31e0bc*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x827a5440, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x827a5440, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x82ab2840, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x29b, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1 [0066.562] FindNextFileW (in: hFindFile=0x5107a60, lpFindFileData=0x31e0bc | out: lpFindFileData=0x31e0bc*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0066.562] FindClose (in: hFindFile=0x5107a60 | out: hFindFile=0x5107a60) returned 1 [0066.562] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e344) returned 1 [0066.562] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e350) returned 1 [0066.562] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e384) returned 1 [0066.562] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\pt_BR", nBufferLength=0x105, lpBuffer=0x31de8c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\pt_BR", lpFilePart=0x0) returned 0x90 [0066.562] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\pt_BR\\", nBufferLength=0x105, lpBuffer=0x31de60, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\pt_BR\\", lpFilePart=0x0) returned 0x91 [0066.562] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\pt_BR\\*", lpFindFileData=0x31e0ac | out: lpFindFileData=0x31e0ac*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x827a2d30, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x827a5440, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x827a5440, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5107a60 [0066.563] FindNextFileW (in: hFindFile=0x5107a60, lpFindFileData=0x31e0bc | out: lpFindFileData=0x31e0bc*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x827a2d30, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x827a5440, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x827a5440, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0066.563] FindNextFileW (in: hFindFile=0x5107a60, lpFindFileData=0x31e0bc | out: lpFindFileData=0x31e0bc*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x827a5440, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x827a5440, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x82ab2840, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x29b, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1 [0066.563] FindNextFileW (in: hFindFile=0x5107a60, lpFindFileData=0x31e0bc | out: lpFindFileData=0x31e0bc*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x827a5440, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x827a5440, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x82ab2840, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x29b, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 0 [0066.563] FindClose (in: hFindFile=0x5107a60 | out: hFindFile=0x5107a60) returned 1 [0066.563] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e344) returned 1 [0066.563] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e350) returned 1 [0066.563] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e384) returned 1 [0066.563] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\pt_PT", nBufferLength=0x105, lpBuffer=0x31de8c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\pt_PT", lpFilePart=0x0) returned 0x90 [0066.563] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\pt_PT\\", nBufferLength=0x105, lpBuffer=0x31de60, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\pt_PT\\", lpFilePart=0x0) returned 0x91 [0066.563] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\pt_PT\\*", lpFindFileData=0x31e0ac | out: lpFindFileData=0x31e0ac*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x827aa260, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x827af080, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x827af080, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5107a60 [0066.564] FindNextFileW (in: hFindFile=0x5107a60, lpFindFileData=0x31e0bc | out: lpFindFileData=0x31e0bc*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x827aa260, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x827af080, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x827af080, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0066.564] FindNextFileW (in: hFindFile=0x5107a60, lpFindFileData=0x31e0bc | out: lpFindFileData=0x31e0bc*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x827af080, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x827af080, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x82ab2840, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x295, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1 [0066.564] FindNextFileW (in: hFindFile=0x5107a60, lpFindFileData=0x31e0bc | out: lpFindFileData=0x31e0bc*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0066.564] FindClose (in: hFindFile=0x5107a60 | out: hFindFile=0x5107a60) returned 1 [0066.564] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e344) returned 1 [0066.564] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e350) returned 1 [0066.564] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e384) returned 1 [0066.564] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\pt_PT", nBufferLength=0x105, lpBuffer=0x31de8c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\pt_PT", lpFilePart=0x0) returned 0x90 [0066.564] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\pt_PT\\", nBufferLength=0x105, lpBuffer=0x31de60, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\pt_PT\\", lpFilePart=0x0) returned 0x91 [0066.564] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\pt_PT\\*", lpFindFileData=0x31e0ac | out: lpFindFileData=0x31e0ac*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x827aa260, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x827af080, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x827af080, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5107a60 [0066.565] FindClose (in: hFindFile=0x5107a60 | out: hFindFile=0x5107a60) returned 1 [0066.565] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e344) returned 1 [0066.565] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e350) returned 1 [0066.565] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e384) returned 1 [0066.565] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\ro", nBufferLength=0x105, lpBuffer=0x31de8c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\ro", lpFilePart=0x0) returned 0x8d [0066.565] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\ro\\", nBufferLength=0x105, lpBuffer=0x31de60, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\ro\\", lpFilePart=0x0) returned 0x8e [0066.565] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\ro\\*", lpFindFileData=0x31e0ac | out: lpFindFileData=0x31e0ac*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x827b3ea0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x827b65b0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x827b65b0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5107a60 [0066.566] FindClose (in: hFindFile=0x5107a60 | out: hFindFile=0x5107a60) returned 1 [0066.566] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e344) returned 1 [0066.566] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e350) returned 1 [0066.566] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e384) returned 1 [0066.566] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\ro", nBufferLength=0x105, lpBuffer=0x31de8c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\ro", lpFilePart=0x0) returned 0x8d [0066.566] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\ro\\", nBufferLength=0x105, lpBuffer=0x31de60, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\ro\\", lpFilePart=0x0) returned 0x8e [0066.566] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\ro\\*", lpFindFileData=0x31e0ac | out: lpFindFileData=0x31e0ac*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x827b3ea0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x827b65b0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x827b65b0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5107a60 [0066.566] FindClose (in: hFindFile=0x5107a60 | out: hFindFile=0x5107a60) returned 1 [0066.566] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e344) returned 1 [0066.566] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e350) returned 1 [0066.566] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e384) returned 1 [0066.566] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\ru", nBufferLength=0x105, lpBuffer=0x31de8c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\ru", lpFilePart=0x0) returned 0x8d [0066.566] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\ru\\", nBufferLength=0x105, lpBuffer=0x31de60, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\ru\\", lpFilePart=0x0) returned 0x8e [0066.566] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\ru\\*", lpFindFileData=0x31e0ac | out: lpFindFileData=0x31e0ac*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x827c7720, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x827cc540, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x827cc540, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5107a60 [0066.567] FindClose (in: hFindFile=0x5107a60 | out: hFindFile=0x5107a60) returned 1 [0066.567] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e344) returned 1 [0066.567] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e350) returned 1 [0066.567] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e384) returned 1 [0066.567] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\ru", nBufferLength=0x105, lpBuffer=0x31de8c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\ru", lpFilePart=0x0) returned 0x8d [0066.567] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\ru\\", nBufferLength=0x105, lpBuffer=0x31de60, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\ru\\", lpFilePart=0x0) returned 0x8e [0066.567] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\ru\\*", lpFindFileData=0x31e0ac | out: lpFindFileData=0x31e0ac*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x827c7720, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x827cc540, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x827cc540, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5107a60 [0066.568] FindClose (in: hFindFile=0x5107a60 | out: hFindFile=0x5107a60) returned 1 [0066.568] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e344) returned 1 [0066.568] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e350) returned 1 [0066.568] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e384) returned 1 [0066.568] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\sk", nBufferLength=0x105, lpBuffer=0x31de8c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\sk", lpFilePart=0x0) returned 0x8d [0066.568] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\sk\\", nBufferLength=0x105, lpBuffer=0x31de60, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\sk\\", lpFilePart=0x0) returned 0x8e [0066.568] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\sk\\*", lpFindFileData=0x31e0ac | out: lpFindFileData=0x31e0ac*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x827e4be0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x827e72f0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x827e72f0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5107a60 [0066.568] FindClose (in: hFindFile=0x5107a60 | out: hFindFile=0x5107a60) returned 1 [0066.568] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e344) returned 1 [0066.568] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e350) returned 1 [0066.568] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e384) returned 1 [0066.568] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\sk", nBufferLength=0x105, lpBuffer=0x31de8c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\sk", lpFilePart=0x0) returned 0x8d [0066.568] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\sk\\", nBufferLength=0x105, lpBuffer=0x31de60, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\sk\\", lpFilePart=0x0) returned 0x8e [0066.568] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\sk\\*", lpFindFileData=0x31e0ac | out: lpFindFileData=0x31e0ac*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x827e4be0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x827e72f0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x827e72f0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5107a60 [0066.568] FindClose (in: hFindFile=0x5107a60 | out: hFindFile=0x5107a60) returned 1 [0066.568] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e344) returned 1 [0066.569] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e350) returned 1 [0066.569] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e384) returned 1 [0066.569] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\sl", nBufferLength=0x105, lpBuffer=0x31de8c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\sl", lpFilePart=0x0) returned 0x8d [0066.569] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\sl\\", nBufferLength=0x105, lpBuffer=0x31de60, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\sl\\", lpFilePart=0x0) returned 0x8e [0066.569] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\sl\\*", lpFindFileData=0x31e0ac | out: lpFindFileData=0x31e0ac*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x827f5d50, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x827fab70, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x827fab70, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5107a60 [0066.569] FindClose (in: hFindFile=0x5107a60 | out: hFindFile=0x5107a60) returned 1 [0066.570] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e344) returned 1 [0066.570] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e350) returned 1 [0066.570] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e384) returned 1 [0066.570] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\sl", nBufferLength=0x105, lpBuffer=0x31de8c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\sl", lpFilePart=0x0) returned 0x8d [0066.570] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\sl\\", nBufferLength=0x105, lpBuffer=0x31de60, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\sl\\", lpFilePart=0x0) returned 0x8e [0066.570] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\sl\\*", lpFindFileData=0x31e0ac | out: lpFindFileData=0x31e0ac*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x827f5d50, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x827fab70, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x827fab70, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5107a60 [0066.570] FindClose (in: hFindFile=0x5107a60 | out: hFindFile=0x5107a60) returned 1 [0066.570] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e344) returned 1 [0066.570] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e350) returned 1 [0066.570] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e384) returned 1 [0066.570] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\sr", nBufferLength=0x105, lpBuffer=0x31de8c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\sr", lpFilePart=0x0) returned 0x8d [0066.570] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\sr\\", nBufferLength=0x105, lpBuffer=0x31de60, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\sr\\", lpFilePart=0x0) returned 0x8e [0066.570] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\sr\\*", lpFindFileData=0x31e0ac | out: lpFindFileData=0x31e0ac*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x828095d0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x8280e3f0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x8280e3f0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5107a60 [0066.570] FindClose (in: hFindFile=0x5107a60 | out: hFindFile=0x5107a60) returned 1 [0066.570] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e344) returned 1 [0066.570] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e350) returned 1 [0066.570] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e384) returned 1 [0066.571] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\sr", nBufferLength=0x105, lpBuffer=0x31de8c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\sr", lpFilePart=0x0) returned 0x8d [0066.571] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\sr\\", nBufferLength=0x105, lpBuffer=0x31de60, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\sr\\", lpFilePart=0x0) returned 0x8e [0066.571] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\sr\\*", lpFindFileData=0x31e0ac | out: lpFindFileData=0x31e0ac*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x828095d0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x8280e3f0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x8280e3f0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5107a60 [0066.571] FindClose (in: hFindFile=0x5107a60 | out: hFindFile=0x5107a60) returned 1 [0066.571] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e344) returned 1 [0066.571] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e350) returned 1 [0066.571] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e384) returned 1 [0066.571] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\sv", nBufferLength=0x105, lpBuffer=0x31de8c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\sv", lpFilePart=0x0) returned 0x8d [0066.571] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\sv\\", nBufferLength=0x105, lpBuffer=0x31de60, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\sv\\", lpFilePart=0x0) returned 0x8e [0066.571] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\sv\\*", lpFindFileData=0x31e0ac | out: lpFindFileData=0x31e0ac*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x8282b8b0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x828306d0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x828306d0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5107a60 [0066.572] FindClose (in: hFindFile=0x5107a60 | out: hFindFile=0x5107a60) returned 1 [0066.572] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e344) returned 1 [0066.572] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e350) returned 1 [0066.572] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e384) returned 1 [0066.572] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\sv", nBufferLength=0x105, lpBuffer=0x31de8c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\sv", lpFilePart=0x0) returned 0x8d [0066.572] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\sv\\", nBufferLength=0x105, lpBuffer=0x31de60, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\sv\\", lpFilePart=0x0) returned 0x8e [0066.572] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\sv\\*", lpFindFileData=0x31e0ac | out: lpFindFileData=0x31e0ac*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x8282b8b0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x828306d0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x828306d0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5107a60 [0066.572] FindClose (in: hFindFile=0x5107a60 | out: hFindFile=0x5107a60) returned 1 [0066.572] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e344) returned 1 [0066.572] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e350) returned 1 [0066.572] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e384) returned 1 [0066.572] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\th", nBufferLength=0x105, lpBuffer=0x31de8c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\th", lpFilePart=0x0) returned 0x8d [0066.572] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\th\\", nBufferLength=0x105, lpBuffer=0x31de60, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\th\\", lpFilePart=0x0) returned 0x8e [0066.573] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\th\\*", lpFindFileData=0x31e0ac | out: lpFindFileData=0x31e0ac*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x8284db90, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x828529b0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x828529b0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5107a60 [0066.573] FindClose (in: hFindFile=0x5107a60 | out: hFindFile=0x5107a60) returned 1 [0066.573] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e344) returned 1 [0066.573] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e350) returned 1 [0066.573] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e384) returned 1 [0066.573] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\th", nBufferLength=0x105, lpBuffer=0x31de8c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\th", lpFilePart=0x0) returned 0x8d [0066.573] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\th\\", nBufferLength=0x105, lpBuffer=0x31de60, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\th\\", lpFilePart=0x0) returned 0x8e [0066.573] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\th\\*", lpFindFileData=0x31e0ac | out: lpFindFileData=0x31e0ac*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x8284db90, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x828529b0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x828529b0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5107a60 [0066.573] FindClose (in: hFindFile=0x5107a60 | out: hFindFile=0x5107a60) returned 1 [0066.573] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e344) returned 1 [0066.573] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e350) returned 1 [0066.573] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e384) returned 1 [0066.573] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\tr", nBufferLength=0x105, lpBuffer=0x31de8c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\tr", lpFilePart=0x0) returned 0x8d [0066.573] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\tr\\", nBufferLength=0x105, lpBuffer=0x31de60, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\tr\\", lpFilePart=0x0) returned 0x8e [0066.573] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\tr\\*", lpFindFileData=0x31e0ac | out: lpFindFileData=0x31e0ac*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x82863b20, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x82866230, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x82866230, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5107a60 [0066.574] FindClose (in: hFindFile=0x5107a60 | out: hFindFile=0x5107a60) returned 1 [0066.574] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e344) returned 1 [0066.574] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e350) returned 1 [0066.574] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e384) returned 1 [0066.574] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\tr", nBufferLength=0x105, lpBuffer=0x31de8c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\tr", lpFilePart=0x0) returned 0x8d [0066.574] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\tr\\", nBufferLength=0x105, lpBuffer=0x31de60, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\tr\\", lpFilePart=0x0) returned 0x8e [0066.575] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\tr\\*", lpFindFileData=0x31e0ac | out: lpFindFileData=0x31e0ac*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x82863b20, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x82866230, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x82866230, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5107a60 [0066.575] FindClose (in: hFindFile=0x5107a60 | out: hFindFile=0x5107a60) returned 1 [0066.575] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e344) returned 1 [0066.575] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e350) returned 1 [0066.575] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e384) returned 1 [0066.575] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\uk", nBufferLength=0x105, lpBuffer=0x31de8c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\uk", lpFilePart=0x0) returned 0x8d [0066.575] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\uk\\", nBufferLength=0x105, lpBuffer=0x31de60, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\uk\\", lpFilePart=0x0) returned 0x8e [0066.575] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\uk\\*", lpFindFileData=0x31e0ac | out: lpFindFileData=0x31e0ac*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x8286b050, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x8286d760, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x8286d760, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5107a60 [0066.575] FindClose (in: hFindFile=0x5107a60 | out: hFindFile=0x5107a60) returned 1 [0066.575] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e344) returned 1 [0066.575] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e350) returned 1 [0066.575] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e384) returned 1 [0066.575] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\uk", nBufferLength=0x105, lpBuffer=0x31de8c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\uk", lpFilePart=0x0) returned 0x8d [0066.575] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\uk\\", nBufferLength=0x105, lpBuffer=0x31de60, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\uk\\", lpFilePart=0x0) returned 0x8e [0066.575] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\uk\\*", lpFindFileData=0x31e0ac | out: lpFindFileData=0x31e0ac*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x8286b050, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x8286d760, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x8286d760, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5107a60 [0066.576] FindClose (in: hFindFile=0x5107a60 | out: hFindFile=0x5107a60) returned 1 [0066.576] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e344) returned 1 [0066.576] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e350) returned 1 [0066.576] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e384) returned 1 [0066.576] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\vi", nBufferLength=0x105, lpBuffer=0x31de8c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\vi", lpFilePart=0x0) returned 0x8d [0066.576] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\vi\\", nBufferLength=0x105, lpBuffer=0x31de60, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\vi\\", lpFilePart=0x0) returned 0x8e [0066.576] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\vi\\*", lpFindFileData=0x31e0ac | out: lpFindFileData=0x31e0ac*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x82872580, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x82874c90, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x82874c90, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5107a60 [0066.577] FindClose (in: hFindFile=0x5107a60 | out: hFindFile=0x5107a60) returned 1 [0066.577] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e344) returned 1 [0066.577] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e350) returned 1 [0066.577] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e384) returned 1 [0066.577] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\vi", nBufferLength=0x105, lpBuffer=0x31de8c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\vi", lpFilePart=0x0) returned 0x8d [0066.577] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\vi\\", nBufferLength=0x105, lpBuffer=0x31de60, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\vi\\", lpFilePart=0x0) returned 0x8e [0066.577] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\vi\\*", lpFindFileData=0x31e0ac | out: lpFindFileData=0x31e0ac*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x82872580, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x82874c90, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x82874c90, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5107a60 [0066.577] FindClose (in: hFindFile=0x5107a60 | out: hFindFile=0x5107a60) returned 1 [0066.577] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e344) returned 1 [0066.577] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e350) returned 1 [0066.577] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e384) returned 1 [0066.577] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\zh_CN", nBufferLength=0x105, lpBuffer=0x31de8c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\zh_CN", lpFilePart=0x0) returned 0x90 [0066.577] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\zh_CN\\", nBufferLength=0x105, lpBuffer=0x31de60, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\zh_CN\\", lpFilePart=0x0) returned 0x91 [0066.577] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\zh_CN\\*", lpFindFileData=0x31e0ac | out: lpFindFileData=0x31e0ac*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x82879ab0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x8287e8d0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x8287e8d0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5107a60 [0066.578] FindClose (in: hFindFile=0x5107a60 | out: hFindFile=0x5107a60) returned 1 [0066.579] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e344) returned 1 [0066.579] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e350) returned 1 [0066.579] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e384) returned 1 [0066.579] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\zh_CN", nBufferLength=0x105, lpBuffer=0x31de8c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\zh_CN", lpFilePart=0x0) returned 0x90 [0066.579] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\zh_CN\\", nBufferLength=0x105, lpBuffer=0x31de60, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\zh_CN\\", lpFilePart=0x0) returned 0x91 [0066.579] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\zh_CN\\*", lpFindFileData=0x31e0ac | out: lpFindFileData=0x31e0ac*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x82879ab0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x8287e8d0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x8287e8d0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5107a60 [0066.579] FindClose (in: hFindFile=0x5107a60 | out: hFindFile=0x5107a60) returned 1 [0066.579] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e344) returned 1 [0066.579] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\zh_TW", nBufferLength=0x105, lpBuffer=0x31de8c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\zh_TW", lpFilePart=0x0) returned 0x90 [0066.579] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\zh_TW\\", nBufferLength=0x105, lpBuffer=0x31de60, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\zh_TW\\", lpFilePart=0x0) returned 0x91 [0066.579] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\zh_TW\\*", lpFindFileData=0x31e0ac | out: lpFindFileData=0x31e0ac*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x828836f0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x82885e00, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x82885e00, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5107a60 [0066.580] FindClose (in: hFindFile=0x5107a60 | out: hFindFile=0x5107a60) returned 1 [0066.580] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\zh_TW", nBufferLength=0x105, lpBuffer=0x31de8c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\zh_TW", lpFilePart=0x0) returned 0x90 [0066.580] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\zh_TW\\", nBufferLength=0x105, lpBuffer=0x31de60, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\zh_TW\\", lpFilePart=0x0) returned 0x91 [0066.580] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\zh_TW\\*", lpFindFileData=0x31e0ac | out: lpFindFileData=0x31e0ac*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x828836f0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x82885e00, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x82885e00, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5107a60 [0066.580] FindClose (in: hFindFile=0x5107a60 | out: hFindFile=0x5107a60) returned 1 [0066.580] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_metadata", nBufferLength=0x105, lpBuffer=0x31df04, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_metadata", lpFilePart=0x0) returned 0x8b [0066.580] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_metadata\\", nBufferLength=0x105, lpBuffer=0x31ded8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_metadata\\", lpFilePart=0x0) returned 0x8c [0066.580] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_metadata\\*", lpFindFileData=0x31e124 | out: lpFindFileData=0x31e124*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x828e7880, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x828e9f90, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x828e9f90, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5107a60 [0066.581] FindClose (in: hFindFile=0x5107a60 | out: hFindFile=0x5107a60) returned 1 [0066.581] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_metadata", nBufferLength=0x105, lpBuffer=0x31df04, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_metadata", lpFilePart=0x0) returned 0x8b [0066.581] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_metadata\\", nBufferLength=0x105, lpBuffer=0x31ded8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_metadata\\", lpFilePart=0x0) returned 0x8c [0066.581] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_metadata\\*", lpFindFileData=0x31e124 | out: lpFindFileData=0x31e124*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x828e7880, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x828e9f90, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x828e9f90, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5107a60 [0066.581] FindClose (in: hFindFile=0x5107a60 | out: hFindFile=0x5107a60) returned 1 [0066.581] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia", nBufferLength=0x105, lpBuffer=0x31dff4, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia", lpFilePart=0x0) returned 0x77 [0066.581] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\", nBufferLength=0x105, lpBuffer=0x31dfc8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\", lpFilePart=0x0) returned 0x78 [0066.581] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\*", lpFindFileData=0x31e214 | out: lpFindFileData=0x31e214*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x814d6d00, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x9174a630, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x9174a630, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5107a60 [0066.581] FindClose (in: hFindFile=0x5107a60 | out: hFindFile=0x5107a60) returned 1 [0066.582] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia", nBufferLength=0x105, lpBuffer=0x31dff4, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia", lpFilePart=0x0) returned 0x77 [0066.582] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\", nBufferLength=0x105, lpBuffer=0x31dfc8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\", lpFilePart=0x0) returned 0x78 [0066.582] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\*", lpFindFileData=0x31e214 | out: lpFindFileData=0x31e214*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x814d6d00, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x9174a630, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x9174a630, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5107a60 [0066.582] FindClose (in: hFindFile=0x5107a60 | out: hFindFile=0x5107a60) returned 1 [0066.582] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0", nBufferLength=0x105, lpBuffer=0x31df7c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0", lpFilePart=0x0) returned 0x7d [0066.582] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\", nBufferLength=0x105, lpBuffer=0x31df50, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\", lpFilePart=0x0) returned 0x7e [0066.582] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\*", lpFindFileData=0x31e19c | out: lpFindFileData=0x31e19c*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x86989eb0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86d1bfb0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86d1bfb0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5107a60 [0066.584] FindClose (in: hFindFile=0x5107a60 | out: hFindFile=0x5107a60) returned 1 [0066.585] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0", nBufferLength=0x105, lpBuffer=0x31df7c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0", lpFilePart=0x0) returned 0x7d [0066.585] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\", nBufferLength=0x105, lpBuffer=0x31df50, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\", lpFilePart=0x0) returned 0x7e [0066.585] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\*", lpFindFileData=0x31e19c | out: lpFindFileData=0x31e19c*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x86989eb0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86d1bfb0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86d1bfb0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5107a60 [0066.586] FindClose (in: hFindFile=0x5107a60 | out: hFindFile=0x5107a60) returned 1 [0066.586] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\128.png", nBufferLength=0x105, lpBuffer=0x31de4c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\128.png", lpFilePart=0x0) returned 0x85 [0066.587] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\128.png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\128.png"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x178 [0066.588] GetFileType (hFile=0x178) returned 0x1 [0066.588] GetFileType (hFile=0x178) returned 0x1 [0066.588] GetFileSize (in: hFile=0x178, lpFileSizeHigh=0x31e448 | out: lpFileSizeHigh=0x31e448*=0x0) returned 0x180f [0066.588] ReadFile (in: hFile=0x178, lpBuffer=0x2731a50, nNumberOfBytesToRead=0x180f, lpNumberOfBytesRead=0x31e3f4, lpOverlapped=0x0 | out: lpBuffer=0x2731a50*, lpNumberOfBytesRead=0x31e3f4*=0x180f, lpOverlapped=0x0) returned 1 [0066.604] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\128.png", nBufferLength=0x105, lpBuffer=0x31de38, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\128.png", lpFilePart=0x0) returned 0x85 [0066.604] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\128.png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\128.png"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x178 [0066.605] GetFileType (hFile=0x178) returned 0x1 [0066.605] GetFileType (hFile=0x178) returned 0x1 [0066.605] WriteFile (in: hFile=0x178, lpBuffer=0x2786088*, nNumberOfBytesToWrite=0x1810, lpNumberOfBytesWritten=0x31e3e8, lpOverlapped=0x0 | out: lpBuffer=0x2786088*, lpNumberOfBytesWritten=0x31e3e8*=0x1810, lpOverlapped=0x0) returned 1 [0066.606] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\128.png", nBufferLength=0x105, lpBuffer=0x31df6c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\128.png", lpFilePart=0x0) returned 0x85 [0066.606] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\128.png", nBufferLength=0x105, lpBuffer=0x31df6c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\128.png", lpFilePart=0x0) returned 0x85 [0066.606] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\128.png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\128.png"), fInfoLevelId=0x0, lpFileInformation=0x31e448 | out: lpFileInformation=0x31e448*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x869b0010, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86d1bfb0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0xb247180, ftLastWriteTime.dwHighDateTime=0x1d6eb7f, nFileSizeHigh=0x0, nFileSizeLow=0x1810)) returned 1 [0066.606] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\128.png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\128.png"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\128.png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\128.png")) returned 1 [0066.607] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales", nBufferLength=0x105, lpBuffer=0x31df04, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales", lpFilePart=0x0) returned 0x86 [0066.607] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\", nBufferLength=0x105, lpBuffer=0x31ded8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\", lpFilePart=0x0) returned 0x87 [0066.607] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\*", lpFindFileData=0x31e124 | out: lpFindFileData=0x31e124*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x869b0010, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86a22430, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86a22430, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5107b60 [0066.609] FindClose (in: hFindFile=0x5107b60 | out: hFindFile=0x5107b60) returned 1 [0066.610] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales", nBufferLength=0x105, lpBuffer=0x31df04, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales", lpFilePart=0x0) returned 0x86 [0066.610] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\", nBufferLength=0x105, lpBuffer=0x31ded8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\", lpFilePart=0x0) returned 0x87 [0066.610] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\*", lpFindFileData=0x31e124 | out: lpFindFileData=0x31e124*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x869b0010, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86a22430, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86a22430, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5107b60 [0066.611] FindClose (in: hFindFile=0x5107b60 | out: hFindFile=0x5107b60) returned 1 [0066.611] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\ar", nBufferLength=0x105, lpBuffer=0x31de8c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\ar", lpFilePart=0x0) returned 0x89 [0066.611] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\ar\\", nBufferLength=0x105, lpBuffer=0x31de60, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\ar\\", lpFilePart=0x0) returned 0x8a [0066.611] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\ar\\*", lpFindFileData=0x31e0ac | out: lpFindFileData=0x31e0ac*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x86a22430, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86aba9b0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86aba9b0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5107b60 [0066.613] FindClose (in: hFindFile=0x5107b60 | out: hFindFile=0x5107b60) returned 1 [0066.613] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\ar", nBufferLength=0x105, lpBuffer=0x31de8c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\ar", lpFilePart=0x0) returned 0x89 [0066.613] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\ar\\", nBufferLength=0x105, lpBuffer=0x31de60, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\ar\\", lpFilePart=0x0) returned 0x8a [0066.613] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\ar\\*", lpFindFileData=0x31e0ac | out: lpFindFileData=0x31e0ac*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x86a22430, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86aba9b0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86aba9b0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5107b60 [0066.614] FindClose (in: hFindFile=0x5107b60 | out: hFindFile=0x5107b60) returned 1 [0066.614] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\bg", nBufferLength=0x105, lpBuffer=0x31de8c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\bg", lpFilePart=0x0) returned 0x89 [0066.614] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\bg\\", nBufferLength=0x105, lpBuffer=0x31de60, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\bg\\", lpFilePart=0x0) returned 0x8a [0066.614] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\bg\\*", lpFindFileData=0x31e0ac | out: lpFindFileData=0x31e0ac*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x86a22430, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86aba9b0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86aba9b0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5107b60 [0066.614] FindClose (in: hFindFile=0x5107b60 | out: hFindFile=0x5107b60) returned 1 [0066.614] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\bg", nBufferLength=0x105, lpBuffer=0x31de8c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\bg", lpFilePart=0x0) returned 0x89 [0066.614] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\bg\\", nBufferLength=0x105, lpBuffer=0x31de60, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\bg\\", lpFilePart=0x0) returned 0x8a [0066.614] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\bg\\*", lpFindFileData=0x31e0ac | out: lpFindFileData=0x31e0ac*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x86a22430, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86aba9b0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86aba9b0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5107b60 [0066.614] FindClose (in: hFindFile=0x5107b60 | out: hFindFile=0x5107b60) returned 1 [0066.614] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\ca", nBufferLength=0x105, lpBuffer=0x31de8c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\ca", lpFilePart=0x0) returned 0x89 [0066.614] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\ca\\", nBufferLength=0x105, lpBuffer=0x31de60, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\ca\\", lpFilePart=0x0) returned 0x8a [0066.614] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\ca\\*", lpFindFileData=0x31e0ac | out: lpFindFileData=0x31e0ac*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x869d6170, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86a48590, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86a48590, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5107b60 [0066.615] FindClose (in: hFindFile=0x5107b60 | out: hFindFile=0x5107b60) returned 1 [0066.615] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\ca", nBufferLength=0x105, lpBuffer=0x31de8c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\ca", lpFilePart=0x0) returned 0x89 [0066.615] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\ca\\", nBufferLength=0x105, lpBuffer=0x31de60, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\ca\\", lpFilePart=0x0) returned 0x8a [0066.615] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\ca\\*", lpFindFileData=0x31e0ac | out: lpFindFileData=0x31e0ac*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x869d6170, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86a48590, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86a48590, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5107b60 [0066.615] FindClose (in: hFindFile=0x5107b60 | out: hFindFile=0x5107b60) returned 1 [0066.616] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\cs", nBufferLength=0x105, lpBuffer=0x31de8c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\cs", lpFilePart=0x0) returned 0x89 [0066.616] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\cs\\", nBufferLength=0x105, lpBuffer=0x31de60, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\cs\\", lpFilePart=0x0) returned 0x8a [0066.616] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\cs\\*", lpFindFileData=0x31e0ac | out: lpFindFileData=0x31e0ac*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x869b0010, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86a48590, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86a48590, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5107b60 [0066.616] FindClose (in: hFindFile=0x5107b60 | out: hFindFile=0x5107b60) returned 1 [0066.617] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\cs", nBufferLength=0x105, lpBuffer=0x31de8c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\cs", lpFilePart=0x0) returned 0x89 [0066.617] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\cs\\", nBufferLength=0x105, lpBuffer=0x31de60, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\cs\\", lpFilePart=0x0) returned 0x8a [0066.617] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\cs\\*", lpFindFileData=0x31e0ac | out: lpFindFileData=0x31e0ac*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x869b0010, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86a48590, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86a48590, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5107b60 [0066.617] FindClose (in: hFindFile=0x5107b60 | out: hFindFile=0x5107b60) returned 1 [0066.617] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\da", nBufferLength=0x105, lpBuffer=0x31de8c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\da", lpFilePart=0x0) returned 0x89 [0066.617] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\da\\", nBufferLength=0x105, lpBuffer=0x31de60, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\da\\", lpFilePart=0x0) returned 0x8a [0066.617] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\da\\*", lpFindFileData=0x31e0ac | out: lpFindFileData=0x31e0ac*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x86a22430, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86aba9b0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86aba9b0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5107b60 [0066.618] FindClose (in: hFindFile=0x5107b60 | out: hFindFile=0x5107b60) returned 1 [0066.618] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\da", nBufferLength=0x105, lpBuffer=0x31de8c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\da", lpFilePart=0x0) returned 0x89 [0066.618] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\da\\", nBufferLength=0x105, lpBuffer=0x31de60, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\da\\", lpFilePart=0x0) returned 0x8a [0066.618] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\da\\*", lpFindFileData=0x31e0ac | out: lpFindFileData=0x31e0ac*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x86a22430, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86aba9b0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86aba9b0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5107b60 [0066.618] FindClose (in: hFindFile=0x5107b60 | out: hFindFile=0x5107b60) returned 1 [0066.618] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\de", nBufferLength=0x105, lpBuffer=0x31de8c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\de", lpFilePart=0x0) returned 0x89 [0066.618] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\de\\", nBufferLength=0x105, lpBuffer=0x31de60, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\de\\", lpFilePart=0x0) returned 0x8a [0066.618] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\de\\*", lpFindFileData=0x31e0ac | out: lpFindFileData=0x31e0ac*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x869d6170, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86a48590, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86a48590, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5107b60 [0066.619] FindClose (in: hFindFile=0x5107b60 | out: hFindFile=0x5107b60) returned 1 [0066.619] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\de", nBufferLength=0x105, lpBuffer=0x31de8c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\de", lpFilePart=0x0) returned 0x89 [0066.619] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\de\\", nBufferLength=0x105, lpBuffer=0x31de60, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\de\\", lpFilePart=0x0) returned 0x8a [0066.619] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\de\\*", lpFindFileData=0x31e0ac | out: lpFindFileData=0x31e0ac*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x869d6170, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86a48590, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86a48590, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5107b60 [0066.619] FindClose (in: hFindFile=0x5107b60 | out: hFindFile=0x5107b60) returned 1 [0066.619] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\el", nBufferLength=0x105, lpBuffer=0x31de8c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\el", lpFilePart=0x0) returned 0x89 [0066.619] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\el\\", nBufferLength=0x105, lpBuffer=0x31de60, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\el\\", lpFilePart=0x0) returned 0x8a [0066.620] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\el\\*", lpFindFileData=0x31e0ac | out: lpFindFileData=0x31e0ac*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x869fc2d0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86a6e6f0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86a6e6f0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5107b60 [0066.620] FindClose (in: hFindFile=0x5107b60 | out: hFindFile=0x5107b60) returned 1 [0066.620] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\el", nBufferLength=0x105, lpBuffer=0x31de8c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\el", lpFilePart=0x0) returned 0x89 [0066.620] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\el\\", nBufferLength=0x105, lpBuffer=0x31de60, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\el\\", lpFilePart=0x0) returned 0x8a [0066.621] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\el\\*", lpFindFileData=0x31e0ac | out: lpFindFileData=0x31e0ac*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x869fc2d0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86a6e6f0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86a6e6f0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5107b60 [0066.621] FindClose (in: hFindFile=0x5107b60 | out: hFindFile=0x5107b60) returned 1 [0066.621] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\en", nBufferLength=0x105, lpBuffer=0x31de8c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\en", lpFilePart=0x0) returned 0x89 [0066.621] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\en\\", nBufferLength=0x105, lpBuffer=0x31de60, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\en\\", lpFilePart=0x0) returned 0x8a [0066.621] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\en\\*", lpFindFileData=0x31e0ac | out: lpFindFileData=0x31e0ac*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x86a22430, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86aba9b0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86aba9b0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5107b60 [0066.621] FindClose (in: hFindFile=0x5107b60 | out: hFindFile=0x5107b60) returned 1 [0066.621] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\en", nBufferLength=0x105, lpBuffer=0x31de8c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\en", lpFilePart=0x0) returned 0x89 [0066.621] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\en\\", nBufferLength=0x105, lpBuffer=0x31de60, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\en\\", lpFilePart=0x0) returned 0x8a [0066.621] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\en\\*", lpFindFileData=0x31e0ac | out: lpFindFileData=0x31e0ac*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x86a22430, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86aba9b0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86aba9b0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5107b60 [0066.621] FindClose (in: hFindFile=0x5107b60 | out: hFindFile=0x5107b60) returned 1 [0066.621] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\es", nBufferLength=0x105, lpBuffer=0x31de8c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\es", lpFilePart=0x0) returned 0x89 [0066.622] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\es\\", nBufferLength=0x105, lpBuffer=0x31de60, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\es\\", lpFilePart=0x0) returned 0x8a [0066.622] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\es\\*", lpFindFileData=0x31e0ac | out: lpFindFileData=0x31e0ac*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x869d6170, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86a48590, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86a48590, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5107b60 [0066.622] FindClose (in: hFindFile=0x5107b60 | out: hFindFile=0x5107b60) returned 1 [0066.622] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\es", nBufferLength=0x105, lpBuffer=0x31de8c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\es", lpFilePart=0x0) returned 0x89 [0066.622] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\es\\", nBufferLength=0x105, lpBuffer=0x31de60, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\es\\", lpFilePart=0x0) returned 0x8a [0066.622] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\es\\*", lpFindFileData=0x31e0ac | out: lpFindFileData=0x31e0ac*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x869d6170, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86a48590, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86a48590, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5107b60 [0066.622] FindClose (in: hFindFile=0x5107b60 | out: hFindFile=0x5107b60) returned 1 [0066.622] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\fi", nBufferLength=0x105, lpBuffer=0x31de8c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\fi", lpFilePart=0x0) returned 0x89 [0066.622] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\fi\\", nBufferLength=0x105, lpBuffer=0x31de60, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\fi\\", lpFilePart=0x0) returned 0x8a [0066.622] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\fi\\*", lpFindFileData=0x31e0ac | out: lpFindFileData=0x31e0ac*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x869fc2d0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86a6e6f0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86a6e6f0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5107b60 [0066.623] FindClose (in: hFindFile=0x5107b60 | out: hFindFile=0x5107b60) returned 1 [0066.623] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\fi", nBufferLength=0x105, lpBuffer=0x31de8c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\fi", lpFilePart=0x0) returned 0x89 [0066.623] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\fi\\", nBufferLength=0x105, lpBuffer=0x31de60, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\fi\\", lpFilePart=0x0) returned 0x8a [0066.623] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\fi\\*", lpFindFileData=0x31e0ac | out: lpFindFileData=0x31e0ac*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x869fc2d0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86a6e6f0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86a6e6f0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5107b60 [0066.623] FindClose (in: hFindFile=0x5107b60 | out: hFindFile=0x5107b60) returned 1 [0066.623] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\fil", nBufferLength=0x105, lpBuffer=0x31de8c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\fil", lpFilePart=0x0) returned 0x8a [0066.624] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\fil\\", nBufferLength=0x105, lpBuffer=0x31de60, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\fil\\", lpFilePart=0x0) returned 0x8b [0066.624] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\fil\\*", lpFindFileData=0x31e0ac | out: lpFindFileData=0x31e0ac*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x869fc2d0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86a94850, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86a94850, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5107b60 [0066.624] FindClose (in: hFindFile=0x5107b60 | out: hFindFile=0x5107b60) returned 1 [0066.624] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\fil", nBufferLength=0x105, lpBuffer=0x31de8c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\fil", lpFilePart=0x0) returned 0x8a [0066.625] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\fil\\", nBufferLength=0x105, lpBuffer=0x31de60, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\fil\\", lpFilePart=0x0) returned 0x8b [0066.625] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\fil\\*", lpFindFileData=0x31e0ac | out: lpFindFileData=0x31e0ac*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x869fc2d0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86a94850, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86a94850, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5107b60 [0066.625] FindClose (in: hFindFile=0x5107b60 | out: hFindFile=0x5107b60) returned 1 [0066.625] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\fr", nBufferLength=0x105, lpBuffer=0x31de8c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\fr", lpFilePart=0x0) returned 0x89 [0066.625] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\fr\\", nBufferLength=0x105, lpBuffer=0x31de60, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\fr\\", lpFilePart=0x0) returned 0x8a [0066.625] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\fr\\*", lpFindFileData=0x31e0ac | out: lpFindFileData=0x31e0ac*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x869d6170, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86a48590, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86a48590, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5107b60 [0066.625] FindClose (in: hFindFile=0x5107b60 | out: hFindFile=0x5107b60) returned 1 [0066.625] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\fr", nBufferLength=0x105, lpBuffer=0x31de8c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\fr", lpFilePart=0x0) returned 0x89 [0066.625] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\fr\\", nBufferLength=0x105, lpBuffer=0x31de60, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\fr\\", lpFilePart=0x0) returned 0x8a [0066.625] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\fr\\*", lpFindFileData=0x31e0ac | out: lpFindFileData=0x31e0ac*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x869d6170, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86a48590, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86a48590, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5107b60 [0066.625] FindClose (in: hFindFile=0x5107b60 | out: hFindFile=0x5107b60) returned 1 [0066.625] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\hi", nBufferLength=0x105, lpBuffer=0x31de8c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\hi", lpFilePart=0x0) returned 0x89 [0066.626] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\hi\\", nBufferLength=0x105, lpBuffer=0x31de60, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\hi\\", lpFilePart=0x0) returned 0x8a [0066.626] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\hi\\*", lpFindFileData=0x31e0ac | out: lpFindFileData=0x31e0ac*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x869b0010, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86a22430, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86a22430, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5107b60 [0066.626] FindClose (in: hFindFile=0x5107b60 | out: hFindFile=0x5107b60) returned 1 [0066.626] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\hi", nBufferLength=0x105, lpBuffer=0x31de8c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\hi", lpFilePart=0x0) returned 0x89 [0066.626] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\hi\\", nBufferLength=0x105, lpBuffer=0x31de60, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\hi\\", lpFilePart=0x0) returned 0x8a [0066.626] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\hi\\*", lpFindFileData=0x31e0ac | out: lpFindFileData=0x31e0ac*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x869b0010, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86a22430, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86a22430, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5107b60 [0066.626] FindClose (in: hFindFile=0x5107b60 | out: hFindFile=0x5107b60) returned 1 [0066.626] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\hr", nBufferLength=0x105, lpBuffer=0x31de8c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\hr", lpFilePart=0x0) returned 0x89 [0066.626] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\hr\\", nBufferLength=0x105, lpBuffer=0x31de60, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\hr\\", lpFilePart=0x0) returned 0x8a [0066.626] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\hr\\*", lpFindFileData=0x31e0ac | out: lpFindFileData=0x31e0ac*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x869fc2d0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86a6e6f0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86a6e6f0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5107b60 [0066.627] FindClose (in: hFindFile=0x5107b60 | out: hFindFile=0x5107b60) returned 1 [0066.627] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\hr", nBufferLength=0x105, lpBuffer=0x31de8c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\hr", lpFilePart=0x0) returned 0x89 [0066.627] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\hr\\", nBufferLength=0x105, lpBuffer=0x31de60, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\hr\\", lpFilePart=0x0) returned 0x8a [0066.627] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\hr\\*", lpFindFileData=0x31e0ac | out: lpFindFileData=0x31e0ac*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x869fc2d0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86a6e6f0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86a6e6f0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5107b60 [0066.627] FindClose (in: hFindFile=0x5107b60 | out: hFindFile=0x5107b60) returned 1 [0066.627] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\hu", nBufferLength=0x105, lpBuffer=0x31de8c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\hu", lpFilePart=0x0) returned 0x89 [0066.627] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\hu\\", nBufferLength=0x105, lpBuffer=0x31de60, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\hu\\", lpFilePart=0x0) returned 0x8a [0066.627] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\hu\\*", lpFindFileData=0x31e0ac | out: lpFindFileData=0x31e0ac*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x869d6170, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86a48590, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86a48590, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5107b60 [0066.627] FindClose (in: hFindFile=0x5107b60 | out: hFindFile=0x5107b60) returned 1 [0066.641] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\cast_route_details.html" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\cast_route_details.html"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x178 [0066.642] GetFileType (hFile=0x178) returned 0x1 [0066.642] GetFileType (hFile=0x178) returned 0x1 [0066.642] GetFileSize (in: hFile=0x178, lpFileSizeHigh=0x31e448 | out: lpFileSizeHigh=0x31e448*=0x0) returned 0x111e1 [0066.642] ReadFile (in: hFile=0x178, lpBuffer=0x2808728, nNumberOfBytesToRead=0x111e1, lpNumberOfBytesRead=0x31e3f4, lpOverlapped=0x0 | out: lpBuffer=0x2808728*, lpNumberOfBytesRead=0x31e3f4*=0x111e1, lpOverlapped=0x0) returned 1 [0066.692] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\cast_route_details.html" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\cast_route_details.html"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x178 [0066.693] GetFileType (hFile=0x178) returned 0x1 [0066.693] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e328) returned 1 [0066.693] GetFileType (hFile=0x178) returned 0x1 [0066.693] WriteFile (in: hFile=0x178, lpBuffer=0x269a010*, nNumberOfBytesToWrite=0x111f0, lpNumberOfBytesWritten=0x31e3e8, lpOverlapped=0x0 | out: lpBuffer=0x269a010*, lpNumberOfBytesWritten=0x31e3e8*=0x111f0, lpOverlapped=0x0) returned 1 [0066.695] CloseHandle (hObject=0x178) returned 1 [0066.695] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e3cc) returned 1 [0066.695] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\cast_route_details.html" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\cast_route_details.html"), fInfoLevelId=0x0, lpFileInformation=0x31e448 | out: lpFileInformation=0x31e448*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x8364db50, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x8364db50, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0xb32b9c0, ftLastWriteTime.dwHighDateTime=0x1d6eb7f, nFileSizeHigh=0x0, nFileSizeLow=0x111f0)) returned 1 [0066.695] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e3c8) returned 1 [0066.695] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\cast_route_details.html" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\cast_route_details.html"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\cast_route_details.html" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\cast_route_details.html")) returned 1 [0066.695] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e340) returned 1 [0066.695] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\feedback.css" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\feedback.css"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x178 [0066.696] GetFileType (hFile=0x178) returned 0x1 [0066.696] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e33c) returned 1 [0066.696] GetFileType (hFile=0x178) returned 0x1 [0066.696] GetFileSize (in: hFile=0x178, lpFileSizeHigh=0x31e448 | out: lpFileSizeHigh=0x31e448*=0x0) returned 0xc26 [0066.696] ReadFile (in: hFile=0x178, lpBuffer=0x26ac4c8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x31e3f4, lpOverlapped=0x0 | out: lpBuffer=0x26ac4c8*, lpNumberOfBytesRead=0x31e3f4*=0xc26, lpOverlapped=0x0) returned 1 [0066.698] CloseHandle (hObject=0x178) returned 1 [0066.711] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\feedback.css", nBufferLength=0x105, lpBuffer=0x31de38, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\feedback.css", lpFilePart=0x0) returned 0x93 [0066.711] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e32c) returned 1 [0066.712] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\feedback.css" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\feedback.css"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x178 [0066.712] GetFileType (hFile=0x178) returned 0x1 [0066.712] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e328) returned 1 [0066.712] GetFileType (hFile=0x178) returned 0x1 [0066.713] WriteFile (in: hFile=0x178, lpBuffer=0x26fe2c8*, nNumberOfBytesToWrite=0xc30, lpNumberOfBytesWritten=0x31e3bc, lpOverlapped=0x0 | out: lpBuffer=0x26fe2c8*, lpNumberOfBytesWritten=0x31e3bc*=0xc30, lpOverlapped=0x0) returned 1 [0066.713] CloseHandle (hObject=0x178) returned 1 [0066.713] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\feedback.css", nBufferLength=0x105, lpBuffer=0x31df6c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\feedback.css", lpFilePart=0x0) returned 0x93 [0066.713] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\feedback.css", nBufferLength=0x105, lpBuffer=0x31df6c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\feedback.css", lpFilePart=0x0) returned 0x93 [0066.714] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e3cc) returned 1 [0066.714] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\feedback.css" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\feedback.css"), fInfoLevelId=0x0, lpFileInformation=0x31e448 | out: lpFileInformation=0x31e448*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x8369bd50, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x8369bd50, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0xb351b20, ftLastWriteTime.dwHighDateTime=0x1d6eb7f, nFileSizeHigh=0x0, nFileSizeLow=0xc30)) returned 1 [0066.714] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e3c8) returned 1 [0066.714] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\feedback.css" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\feedback.css"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\feedback.css" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\feedback.css")) returned 1 [0066.714] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\feedback.html", nBufferLength=0x105, lpBuffer=0x31de4c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\feedback.html", lpFilePart=0x0) returned 0x94 [0066.714] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e340) returned 1 [0066.714] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\feedback.html" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\feedback.html"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x178 [0066.714] GetFileType (hFile=0x178) returned 0x1 [0066.714] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e33c) returned 1 [0066.714] GetFileType (hFile=0x178) returned 0x1 [0066.714] GetFileSize (in: hFile=0x178, lpFileSizeHigh=0x31e448 | out: lpFileSizeHigh=0x31e448*=0x0) returned 0x38a8 [0066.715] ReadFile (in: hFile=0x178, lpBuffer=0x26ff710, nNumberOfBytesToRead=0x38a8, lpNumberOfBytesRead=0x31e3f4, lpOverlapped=0x0 | out: lpBuffer=0x26ff710*, lpNumberOfBytesRead=0x31e3f4*=0x38a8, lpOverlapped=0x0) returned 1 [0066.716] CloseHandle (hObject=0x178) returned 1 [0066.730] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\feedback.html", nBufferLength=0x105, lpBuffer=0x31de38, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\feedback.html", lpFilePart=0x0) returned 0x94 [0066.730] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e32c) returned 1 [0066.730] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\feedback.html" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\feedback.html"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x178 [0066.731] GetFileType (hFile=0x178) returned 0x1 [0066.731] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e328) returned 1 [0066.731] GetFileType (hFile=0x178) returned 0x1 [0066.731] WriteFile (in: hFile=0x178, lpBuffer=0x275e064*, nNumberOfBytesToWrite=0x38b0, lpNumberOfBytesWritten=0x31e3e8, lpOverlapped=0x0 | out: lpBuffer=0x275e064*, lpNumberOfBytesWritten=0x31e3e8*=0x38b0, lpOverlapped=0x0) returned 1 [0066.732] CloseHandle (hObject=0x178) returned 1 [0066.733] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\feedback.html", nBufferLength=0x105, lpBuffer=0x31df6c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\feedback.html", lpFilePart=0x0) returned 0x94 [0066.733] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\feedback.html", nBufferLength=0x105, lpBuffer=0x31df6c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\feedback.html", lpFilePart=0x0) returned 0x94 [0066.733] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e3cc) returned 1 [0066.733] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\feedback.html" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\feedback.html"), fInfoLevelId=0x0, lpFileInformation=0x31e448 | out: lpFileInformation=0x31e448*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x836a0b70, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x836a0b70, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0xb377c80, ftLastWriteTime.dwHighDateTime=0x1d6eb7f, nFileSizeHigh=0x0, nFileSizeLow=0x38b0)) returned 1 [0066.733] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e3c8) returned 1 [0066.733] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\feedback.html" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\feedback.html"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\feedback.html" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\feedback.html")) returned 1 [0066.733] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\material_css_min.css", nBufferLength=0x105, lpBuffer=0x31de4c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\material_css_min.css", lpFilePart=0x0) returned 0x9b [0066.733] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e340) returned 1 [0066.733] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\material_css_min.css" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\material_css_min.css"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x178 [0066.734] GetFileType (hFile=0x178) returned 0x1 [0066.734] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e33c) returned 1 [0066.734] GetFileType (hFile=0x178) returned 0x1 [0066.734] GetFileSize (in: hFile=0x178, lpFileSizeHigh=0x31e448 | out: lpFileSizeHigh=0x31e448*=0x0) returned 0x46039 [0066.741] ReadFile (in: hFile=0x178, lpBuffer=0x36194b0, nNumberOfBytesToRead=0x46039, lpNumberOfBytesRead=0x31e3f4, lpOverlapped=0x0 | out: lpBuffer=0x36194b0*, lpNumberOfBytesRead=0x31e3f4*=0x46039, lpOverlapped=0x0) returned 1 [0066.746] CloseHandle (hObject=0x178) returned 1 [0066.799] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\material_css_min.css", nBufferLength=0x105, lpBuffer=0x31de38, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\material_css_min.css", lpFilePart=0x0) returned 0x9b [0066.800] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e32c) returned 1 [0066.800] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\material_css_min.css" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\material_css_min.css"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x178 [0066.803] GetFileType (hFile=0x178) returned 0x1 [0066.803] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e328) returned 1 [0066.803] GetFileType (hFile=0x178) returned 0x1 [0066.803] WriteFile (in: hFile=0x178, lpBuffer=0x3777628*, nNumberOfBytesToWrite=0x46040, lpNumberOfBytesWritten=0x31e3e8, lpOverlapped=0x0 | out: lpBuffer=0x3777628*, lpNumberOfBytesWritten=0x31e3e8*=0x46040, lpOverlapped=0x0) returned 1 [0066.808] CloseHandle (hObject=0x178) returned 1 [0066.808] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\material_css_min.css", nBufferLength=0x105, lpBuffer=0x31df6c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\material_css_min.css", lpFilePart=0x0) returned 0x9b [0066.808] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\material_css_min.css", nBufferLength=0x105, lpBuffer=0x31df6c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\material_css_min.css", lpFilePart=0x0) returned 0x9b [0066.808] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e3cc) returned 1 [0066.808] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\material_css_min.css" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\material_css_min.css"), fInfoLevelId=0x0, lpFileInformation=0x31e448 | out: lpFileInformation=0x31e448*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x836b1ce0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x836b43f0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0xb436360, ftLastWriteTime.dwHighDateTime=0x1d6eb7f, nFileSizeHigh=0x0, nFileSizeLow=0x46040)) returned 1 [0066.809] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e3c8) returned 1 [0066.809] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\material_css_min.css" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\material_css_min.css"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\material_css_min.css" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\material_css_min.css")) returned 1 [0066.809] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e3fc) returned 1 [0066.809] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\cast_setup", nBufferLength=0x105, lpBuffer=0x31df04, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\cast_setup", lpFilePart=0x0) returned 0x91 [0066.809] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\cast_setup\\", nBufferLength=0x105, lpBuffer=0x31ded8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\cast_setup\\", lpFilePart=0x0) returned 0x92 [0066.809] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\cast_setup\\*", lpFindFileData=0x31e124 | out: lpFindFileData=0x31e124*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x83663ae0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x836884d0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x836884d0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x381d40 [0066.811] FindNextFileW (in: hFindFile=0x381d40, lpFindFileData=0x31e134 | out: lpFindFileData=0x31e134*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x83663ae0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x836884d0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x836884d0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0066.812] FindNextFileW (in: hFindFile=0x381d40, lpFindFileData=0x31e134 | out: lpFindFileData=0x31e134*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x836661f0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x836661f0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x1caf9500, ftLastWriteTime.dwHighDateTime=0x1d2c87a, nFileSizeHigh=0x0, nFileSizeLow=0x1a1d, dwReserved0=0x0, dwReserved1=0x0, cFileName="cast_app.css", cAlternateFileName="")) returned 1 [0066.812] FindNextFileW (in: hFindFile=0x381d40, lpFindFileData=0x31e134 | out: lpFindFileData=0x31e134*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x8366b010, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x8366d720, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x1caf9500, ftLastWriteTime.dwHighDateTime=0x1d2c87a, nFileSizeHigh=0x0, nFileSizeLow=0x221da, dwReserved0=0x0, dwReserved1=0x0, cFileName="cast_app.js", cAlternateFileName="")) returned 1 [0066.812] FindNextFileW (in: hFindFile=0x381d40, lpFindFileData=0x31e134 | out: lpFindFileData=0x31e134*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x8366fe30, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x8366fe30, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x1caf9500, ftLastWriteTime.dwHighDateTime=0x1d2c87a, nFileSizeHigh=0x0, nFileSizeLow=0xf2, dwReserved0=0x0, dwReserved1=0x0, cFileName="cast_app_redirect.js", cAlternateFileName="CAST_A~1.JS")) returned 1 [0066.812] FindNextFileW (in: hFindFile=0x381d40, lpFindFileData=0x31e134 | out: lpFindFileData=0x31e134*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x83674c50, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x83674c50, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x1caf9500, ftLastWriteTime.dwHighDateTime=0x1d2c87a, nFileSizeHigh=0x0, nFileSizeLow=0x1bef, dwReserved0=0x0, dwReserved1=0x0, cFileName="chromecast_logo_grey.png", cAlternateFileName="CHROME~1.PNG")) returned 1 [0066.812] FindNextFileW (in: hFindFile=0x381d40, lpFindFileData=0x31e134 | out: lpFindFileData=0x31e134*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x83679a70, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x83679a70, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x1caf9500, ftLastWriteTime.dwHighDateTime=0x1d2c87a, nFileSizeHigh=0x0, nFileSizeLow=0x3b, dwReserved0=0x0, dwReserved1=0x0, cFileName="devices.html", cAlternateFileName="DEVICE~1.HTM")) returned 1 [0066.812] FindNextFileW (in: hFindFile=0x381d40, lpFindFileData=0x31e134 | out: lpFindFileData=0x31e134*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x8367c180, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x8367c180, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x1caf9500, ftLastWriteTime.dwHighDateTime=0x1d2c87a, nFileSizeHigh=0x0, nFileSizeLow=0x828, dwReserved0=0x0, dwReserved1=0x0, cFileName="index.html", cAlternateFileName="INDEX~1.HTM")) returned 1 [0066.812] FindNextFileW (in: hFindFile=0x381d40, lpFindFileData=0x31e134 | out: lpFindFileData=0x31e134*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x83685dc0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x83685dc0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x1caf9500, ftLastWriteTime.dwHighDateTime=0x1d2c87a, nFileSizeHigh=0x0, nFileSizeLow=0x3b, dwReserved0=0x0, dwReserved1=0x0, cFileName="offers.html", cAlternateFileName="OFFERS~1.HTM")) returned 1 [0066.812] FindNextFileW (in: hFindFile=0x381d40, lpFindFileData=0x31e134 | out: lpFindFileData=0x31e134*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x836884d0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x8368abe0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x1caf9500, ftLastWriteTime.dwHighDateTime=0x1d2c87a, nFileSizeHigh=0x0, nFileSizeLow=0x3b, dwReserved0=0x0, dwReserved1=0x0, cFileName="setup.html", cAlternateFileName="SETUP~1.HTM")) returned 1 [0066.813] FindNextFileW (in: hFindFile=0x381d40, lpFindFileData=0x31e134 | out: lpFindFileData=0x31e134*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0066.813] FindClose (in: hFindFile=0x381d40 | out: hFindFile=0x381d40) returned 1 [0066.813] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e3bc) returned 1 [0066.813] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e3c8) returned 1 [0066.813] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e3fc) returned 1 [0066.813] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\cast_setup", nBufferLength=0x105, lpBuffer=0x31df04, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\cast_setup", lpFilePart=0x0) returned 0x91 [0066.814] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\cast_setup\\", nBufferLength=0x105, lpBuffer=0x31ded8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\cast_setup\\", lpFilePart=0x0) returned 0x92 [0066.814] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\cast_setup\\*", lpFindFileData=0x31e124 | out: lpFindFileData=0x31e124*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x83663ae0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x836884d0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x836884d0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x381d40 [0066.814] FindNextFileW (in: hFindFile=0x381d40, lpFindFileData=0x31e134 | out: lpFindFileData=0x31e134*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x83663ae0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x836884d0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x836884d0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0066.815] FindNextFileW (in: hFindFile=0x381d40, lpFindFileData=0x31e134 | out: lpFindFileData=0x31e134*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x836661f0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x836661f0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x1caf9500, ftLastWriteTime.dwHighDateTime=0x1d2c87a, nFileSizeHigh=0x0, nFileSizeLow=0x1a1d, dwReserved0=0x0, dwReserved1=0x0, cFileName="cast_app.css", cAlternateFileName="")) returned 1 [0066.815] FindNextFileW (in: hFindFile=0x381d40, lpFindFileData=0x31e134 | out: lpFindFileData=0x31e134*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x8366b010, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x8366d720, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x1caf9500, ftLastWriteTime.dwHighDateTime=0x1d2c87a, nFileSizeHigh=0x0, nFileSizeLow=0x221da, dwReserved0=0x0, dwReserved1=0x0, cFileName="cast_app.js", cAlternateFileName="")) returned 1 [0066.815] FindNextFileW (in: hFindFile=0x381d40, lpFindFileData=0x31e134 | out: lpFindFileData=0x31e134*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x8366fe30, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x8366fe30, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x1caf9500, ftLastWriteTime.dwHighDateTime=0x1d2c87a, nFileSizeHigh=0x0, nFileSizeLow=0xf2, dwReserved0=0x0, dwReserved1=0x0, cFileName="cast_app_redirect.js", cAlternateFileName="CAST_A~1.JS")) returned 1 [0066.815] FindNextFileW (in: hFindFile=0x381d40, lpFindFileData=0x31e134 | out: lpFindFileData=0x31e134*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x83674c50, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x83674c50, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x1caf9500, ftLastWriteTime.dwHighDateTime=0x1d2c87a, nFileSizeHigh=0x0, nFileSizeLow=0x1bef, dwReserved0=0x0, dwReserved1=0x0, cFileName="chromecast_logo_grey.png", cAlternateFileName="CHROME~1.PNG")) returned 1 [0066.815] FindNextFileW (in: hFindFile=0x381d40, lpFindFileData=0x31e134 | out: lpFindFileData=0x31e134*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x83679a70, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x83679a70, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x1caf9500, ftLastWriteTime.dwHighDateTime=0x1d2c87a, nFileSizeHigh=0x0, nFileSizeLow=0x3b, dwReserved0=0x0, dwReserved1=0x0, cFileName="devices.html", cAlternateFileName="DEVICE~1.HTM")) returned 1 [0066.816] FindNextFileW (in: hFindFile=0x381d40, lpFindFileData=0x31e134 | out: lpFindFileData=0x31e134*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x8367c180, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x8367c180, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x1caf9500, ftLastWriteTime.dwHighDateTime=0x1d2c87a, nFileSizeHigh=0x0, nFileSizeLow=0x828, dwReserved0=0x0, dwReserved1=0x0, cFileName="index.html", cAlternateFileName="INDEX~1.HTM")) returned 1 [0066.816] FindNextFileW (in: hFindFile=0x381d40, lpFindFileData=0x31e134 | out: lpFindFileData=0x31e134*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x83685dc0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x83685dc0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x1caf9500, ftLastWriteTime.dwHighDateTime=0x1d2c87a, nFileSizeHigh=0x0, nFileSizeLow=0x3b, dwReserved0=0x0, dwReserved1=0x0, cFileName="offers.html", cAlternateFileName="OFFERS~1.HTM")) returned 1 [0066.816] FindNextFileW (in: hFindFile=0x381d40, lpFindFileData=0x31e134 | out: lpFindFileData=0x31e134*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x836884d0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x8368abe0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x1caf9500, ftLastWriteTime.dwHighDateTime=0x1d2c87a, nFileSizeHigh=0x0, nFileSizeLow=0x3b, dwReserved0=0x0, dwReserved1=0x0, cFileName="setup.html", cAlternateFileName="SETUP~1.HTM")) returned 1 [0066.816] FindNextFileW (in: hFindFile=0x381d40, lpFindFileData=0x31e134 | out: lpFindFileData=0x31e134*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x836884d0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x8368abe0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x1caf9500, ftLastWriteTime.dwHighDateTime=0x1d2c87a, nFileSizeHigh=0x0, nFileSizeLow=0x3b, dwReserved0=0x0, dwReserved1=0x0, cFileName="setup.html", cAlternateFileName="SETUP~1.HTM")) returned 0 [0066.816] FindClose (in: hFindFile=0x381d40 | out: hFindFile=0x381d40) returned 1 [0066.817] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e3bc) returned 1 [0066.817] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e3c8) returned 1 [0066.817] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\cast_setup\\cast_app.css", nBufferLength=0x105, lpBuffer=0x31ddd4, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\cast_setup\\cast_app.css", lpFilePart=0x0) returned 0x9e [0066.817] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e2c8) returned 1 [0066.817] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\cast_setup\\cast_app.css" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\cast_setup\\cast_app.css"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x178 [0066.818] GetFileType (hFile=0x178) returned 0x1 [0066.818] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e2c4) returned 1 [0066.818] GetFileType (hFile=0x178) returned 0x1 [0066.818] GetFileSize (in: hFile=0x178, lpFileSizeHigh=0x31e3d0 | out: lpFileSizeHigh=0x31e3d0*=0x0) returned 0x1a1d [0066.818] ReadFile (in: hFile=0x178, lpBuffer=0x26837d4, nNumberOfBytesToRead=0x1a1d, lpNumberOfBytesRead=0x31e37c, lpOverlapped=0x0 | out: lpBuffer=0x26837d4*, lpNumberOfBytesRead=0x31e37c*=0x1a1d, lpOverlapped=0x0) returned 1 [0066.820] CloseHandle (hObject=0x178) returned 1 [0066.846] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\cast_setup\\cast_app.css", nBufferLength=0x105, lpBuffer=0x31ddc0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\cast_setup\\cast_app.css", lpFilePart=0x0) returned 0x9e [0066.846] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e2b4) returned 1 [0066.846] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\cast_setup\\cast_app.css" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\cast_setup\\cast_app.css"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x178 [0066.847] GetFileType (hFile=0x178) returned 0x1 [0066.847] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e2b0) returned 1 [0066.847] GetFileType (hFile=0x178) returned 0x1 [0066.847] WriteFile (in: hFile=0x178, lpBuffer=0x26d885c*, nNumberOfBytesToWrite=0x1a20, lpNumberOfBytesWritten=0x31e370, lpOverlapped=0x0 | out: lpBuffer=0x26d885c*, lpNumberOfBytesWritten=0x31e370*=0x1a20, lpOverlapped=0x0) returned 1 [0066.849] CloseHandle (hObject=0x178) returned 1 [0066.849] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\cast_setup\\cast_app.css", nBufferLength=0x105, lpBuffer=0x31def4, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\cast_setup\\cast_app.css", lpFilePart=0x0) returned 0x9e [0066.849] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\cast_setup\\cast_app.css", nBufferLength=0x105, lpBuffer=0x31def4, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\cast_setup\\cast_app.css", lpFilePart=0x0) returned 0x9e [0066.849] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e354) returned 1 [0066.849] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\cast_setup\\cast_app.css" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\cast_setup\\cast_app.css"), fInfoLevelId=0x0, lpFileInformation=0x31e3d0 | out: lpFileInformation=0x31e3d0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x836661f0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x836661f0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0xb4a8780, ftLastWriteTime.dwHighDateTime=0x1d6eb7f, nFileSizeHigh=0x0, nFileSizeLow=0x1a20)) returned 1 [0066.849] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e350) returned 1 [0066.849] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\cast_setup\\cast_app.css" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\cast_setup\\cast_app.css"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\cast_setup\\cast_app.css" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\cast_setup\\cast_app.css")) returned 1 [0066.850] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\cast_setup\\chromecast_logo_grey.png", nBufferLength=0x105, lpBuffer=0x31ddd4, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\cast_setup\\chromecast_logo_grey.png", lpFilePart=0x0) returned 0xaa [0066.850] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e2c8) returned 1 [0066.850] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\cast_setup\\chromecast_logo_grey.png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\cast_setup\\chromecast_logo_grey.png"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x178 [0066.858] GetFileType (hFile=0x178) returned 0x1 [0066.859] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e2c4) returned 1 [0066.859] GetFileType (hFile=0x178) returned 0x1 [0066.859] GetFileSize (in: hFile=0x178, lpFileSizeHigh=0x31e3d0 | out: lpFileSizeHigh=0x31e3d0*=0x0) returned 0x1bef [0066.859] ReadFile (in: hFile=0x178, lpBuffer=0x26da930, nNumberOfBytesToRead=0x1bef, lpNumberOfBytesRead=0x31e37c, lpOverlapped=0x0 | out: lpBuffer=0x26da930*, lpNumberOfBytesRead=0x31e37c*=0x1bef, lpOverlapped=0x0) returned 1 [0066.860] CloseHandle (hObject=0x178) returned 1 [0066.891] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\cast_setup\\chromecast_logo_grey.png", nBufferLength=0x105, lpBuffer=0x31ddc0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\cast_setup\\chromecast_logo_grey.png", lpFilePart=0x0) returned 0xaa [0066.891] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e2b4) returned 1 [0066.891] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\cast_setup\\chromecast_logo_grey.png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\cast_setup\\chromecast_logo_grey.png"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x178 [0066.892] GetFileType (hFile=0x178) returned 0x1 [0066.892] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e2b0) returned 1 [0066.892] GetFileType (hFile=0x178) returned 0x1 [0066.892] WriteFile (in: hFile=0x178, lpBuffer=0x27302c8*, nNumberOfBytesToWrite=0x1bf0, lpNumberOfBytesWritten=0x31e370, lpOverlapped=0x0 | out: lpBuffer=0x27302c8*, lpNumberOfBytesWritten=0x31e370*=0x1bf0, lpOverlapped=0x0) returned 1 [0066.925] CloseHandle (hObject=0x178) returned 1 [0066.925] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\cast_setup\\chromecast_logo_grey.png", nBufferLength=0x105, lpBuffer=0x31def4, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\cast_setup\\chromecast_logo_grey.png", lpFilePart=0x0) returned 0xaa [0066.925] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\cast_setup\\chromecast_logo_grey.png", nBufferLength=0x105, lpBuffer=0x31def4, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\cast_setup\\chromecast_logo_grey.png", lpFilePart=0x0) returned 0xaa [0066.925] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e354) returned 1 [0066.925] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\cast_setup\\chromecast_logo_grey.png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\cast_setup\\chromecast_logo_grey.png"), fInfoLevelId=0x0, lpFileInformation=0x31e3d0 | out: lpFileInformation=0x31e3d0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x83674c50, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x83674c50, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0xb566e60, ftLastWriteTime.dwHighDateTime=0x1d6eb7f, nFileSizeHigh=0x0, nFileSizeLow=0x1bf0)) returned 1 [0066.925] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e350) returned 1 [0066.926] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\cast_setup\\chromecast_logo_grey.png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\cast_setup\\chromecast_logo_grey.png"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\cast_setup\\chromecast_logo_grey.png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\cast_setup\\chromecast_logo_grey.png")) returned 1 [0066.926] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\cast_setup\\devices.html", nBufferLength=0x105, lpBuffer=0x31ddd4, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\cast_setup\\devices.html", lpFilePart=0x0) returned 0x9e [0066.926] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e2c8) returned 1 [0066.926] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\cast_setup\\devices.html" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\cast_setup\\devices.html"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x178 [0066.926] GetFileType (hFile=0x178) returned 0x1 [0066.926] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e2c4) returned 1 [0066.926] GetFileType (hFile=0x178) returned 0x1 [0066.926] GetFileSize (in: hFile=0x178, lpFileSizeHigh=0x31e3d0 | out: lpFileSizeHigh=0x31e3d0*=0x0) returned 0x3b [0066.926] ReadFile (in: hFile=0x178, lpBuffer=0x27325bc, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x31e37c, lpOverlapped=0x0 | out: lpBuffer=0x27325bc*, lpNumberOfBytesRead=0x31e37c*=0x3b, lpOverlapped=0x0) returned 1 [0066.927] CloseHandle (hObject=0x178) returned 1 [0066.941] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\cast_setup\\devices.html", nBufferLength=0x105, lpBuffer=0x31ddc0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\cast_setup\\devices.html", lpFilePart=0x0) returned 0x9e [0066.941] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e2b4) returned 1 [0066.941] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\cast_setup\\devices.html" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\cast_setup\\devices.html"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x178 [0066.942] GetFileType (hFile=0x178) returned 0x1 [0066.942] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e2b0) returned 1 [0066.942] GetFileType (hFile=0x178) returned 0x1 [0066.942] WriteFile (in: hFile=0x178, lpBuffer=0x2780728*, nNumberOfBytesToWrite=0x40, lpNumberOfBytesWritten=0x31e344, lpOverlapped=0x0 | out: lpBuffer=0x2780728*, lpNumberOfBytesWritten=0x31e344*=0x40, lpOverlapped=0x0) returned 1 [0066.943] CloseHandle (hObject=0x178) returned 1 [0066.943] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\cast_setup\\devices.html", nBufferLength=0x105, lpBuffer=0x31def4, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\cast_setup\\devices.html", lpFilePart=0x0) returned 0x9e [0066.943] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\cast_setup\\devices.html", nBufferLength=0x105, lpBuffer=0x31def4, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\cast_setup\\devices.html", lpFilePart=0x0) returned 0x9e [0066.943] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e354) returned 1 [0066.943] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\cast_setup\\devices.html" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\cast_setup\\devices.html"), fInfoLevelId=0x0, lpFileInformation=0x31e3d0 | out: lpFileInformation=0x31e3d0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x83679a70, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x83679a70, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0xb58cfc0, ftLastWriteTime.dwHighDateTime=0x1d6eb7f, nFileSizeHigh=0x0, nFileSizeLow=0x40)) returned 1 [0066.943] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e350) returned 1 [0066.943] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\cast_setup\\devices.html" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\cast_setup\\devices.html"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\cast_setup\\devices.html" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\cast_setup\\devices.html")) returned 1 [0066.943] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\cast_setup\\index.html", nBufferLength=0x105, lpBuffer=0x31ddd4, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\cast_setup\\index.html", lpFilePart=0x0) returned 0x9c [0066.943] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e2c8) returned 1 [0066.943] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\cast_setup\\index.html" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\cast_setup\\index.html"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x178 [0066.944] GetFileType (hFile=0x178) returned 0x1 [0066.944] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e2c4) returned 1 [0066.944] GetFileType (hFile=0x178) returned 0x1 [0066.944] GetFileSize (in: hFile=0x178, lpFileSizeHigh=0x31e3d0 | out: lpFileSizeHigh=0x31e3d0*=0x0) returned 0x828 [0066.944] ReadFile (in: hFile=0x178, lpBuffer=0x27823e0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x31e37c, lpOverlapped=0x0 | out: lpBuffer=0x27823e0*, lpNumberOfBytesRead=0x31e37c*=0x828, lpOverlapped=0x0) returned 1 [0066.945] CloseHandle (hObject=0x178) returned 1 [0066.959] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\cast_setup\\index.html", nBufferLength=0x105, lpBuffer=0x31ddc0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\cast_setup\\index.html", lpFilePart=0x0) returned 0x9c [0066.959] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e2b4) returned 1 [0066.959] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\cast_setup\\index.html" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\cast_setup\\index.html"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x178 [0066.960] GetFileType (hFile=0x178) returned 0x1 [0066.960] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e2b0) returned 1 [0066.960] GetFileType (hFile=0x178) returned 0x1 [0066.960] WriteFile (in: hFile=0x178, lpBuffer=0x27d2c90*, nNumberOfBytesToWrite=0x830, lpNumberOfBytesWritten=0x31e344, lpOverlapped=0x0 | out: lpBuffer=0x27d2c90*, lpNumberOfBytesWritten=0x31e344*=0x830, lpOverlapped=0x0) returned 1 [0066.961] CloseHandle (hObject=0x178) returned 1 [0066.961] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\cast_setup\\index.html", nBufferLength=0x105, lpBuffer=0x31def4, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\cast_setup\\index.html", lpFilePart=0x0) returned 0x9c [0066.961] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\cast_setup\\index.html", nBufferLength=0x105, lpBuffer=0x31def4, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\cast_setup\\index.html", lpFilePart=0x0) returned 0x9c [0066.961] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e354) returned 1 [0066.961] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\cast_setup\\index.html" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\cast_setup\\index.html"), fInfoLevelId=0x0, lpFileInformation=0x31e3d0 | out: lpFileInformation=0x31e3d0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x8367c180, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x8367c180, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0xb5b3120, ftLastWriteTime.dwHighDateTime=0x1d6eb7f, nFileSizeHigh=0x0, nFileSizeLow=0x830)) returned 1 [0066.961] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e350) returned 1 [0066.961] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\cast_setup\\index.html" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\cast_setup\\index.html"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\cast_setup\\index.html" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\cast_setup\\index.html")) returned 1 [0066.961] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\cast_setup\\offers.html", nBufferLength=0x105, lpBuffer=0x31ddd4, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\cast_setup\\offers.html", lpFilePart=0x0) returned 0x9d [0066.961] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e2c8) returned 1 [0066.961] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\cast_setup\\offers.html" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\cast_setup\\offers.html"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x178 [0066.963] GetFileType (hFile=0x178) returned 0x1 [0066.963] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e2c4) returned 1 [0066.963] GetFileType (hFile=0x178) returned 0x1 [0066.963] GetFileSize (in: hFile=0x178, lpFileSizeHigh=0x31e3d0 | out: lpFileSizeHigh=0x31e3d0*=0x0) returned 0x3b [0066.963] ReadFile (in: hFile=0x178, lpBuffer=0x27d4154, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x31e37c, lpOverlapped=0x0 | out: lpBuffer=0x27d4154*, lpNumberOfBytesRead=0x31e37c*=0x3b, lpOverlapped=0x0) returned 1 [0066.964] CloseHandle (hObject=0x178) returned 1 [0066.977] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\cast_setup\\offers.html", nBufferLength=0x105, lpBuffer=0x31ddc0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\cast_setup\\offers.html", lpFilePart=0x0) returned 0x9d [0066.977] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e2b4) returned 1 [0066.977] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\cast_setup\\offers.html" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\cast_setup\\offers.html"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x178 [0066.978] GetFileType (hFile=0x178) returned 0x1 [0066.978] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e2b0) returned 1 [0066.978] GetFileType (hFile=0x178) returned 0x1 [0066.978] WriteFile (in: hFile=0x178, lpBuffer=0x28222b8*, nNumberOfBytesToWrite=0x40, lpNumberOfBytesWritten=0x31e344, lpOverlapped=0x0 | out: lpBuffer=0x28222b8*, lpNumberOfBytesWritten=0x31e344*=0x40, lpOverlapped=0x0) returned 1 [0066.979] CloseHandle (hObject=0x178) returned 1 [0066.979] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\cast_setup\\offers.html", nBufferLength=0x105, lpBuffer=0x31def4, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\cast_setup\\offers.html", lpFilePart=0x0) returned 0x9d [0066.979] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\cast_setup\\offers.html", nBufferLength=0x105, lpBuffer=0x31def4, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\cast_setup\\offers.html", lpFilePart=0x0) returned 0x9d [0066.979] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e354) returned 1 [0066.979] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\cast_setup\\offers.html" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\cast_setup\\offers.html"), fInfoLevelId=0x0, lpFileInformation=0x31e3d0 | out: lpFileInformation=0x31e3d0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x83685dc0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x83685dc0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0xb5d9280, ftLastWriteTime.dwHighDateTime=0x1d6eb7f, nFileSizeHigh=0x0, nFileSizeLow=0x40)) returned 1 [0066.979] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e350) returned 1 [0066.979] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\cast_setup\\offers.html" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\cast_setup\\offers.html"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\cast_setup\\offers.html" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\cast_setup\\offers.html")) returned 1 [0066.980] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\cast_setup\\setup.html", nBufferLength=0x105, lpBuffer=0x31ddd4, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\cast_setup\\setup.html", lpFilePart=0x0) returned 0x9c [0066.980] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e2c8) returned 1 [0066.980] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\cast_setup\\setup.html" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\cast_setup\\setup.html"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x178 [0066.980] GetFileType (hFile=0x178) returned 0x1 [0066.980] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e2c4) returned 1 [0066.980] GetFileType (hFile=0x178) returned 0x1 [0066.980] GetFileSize (in: hFile=0x178, lpFileSizeHigh=0x31e3d0 | out: lpFileSizeHigh=0x31e3d0*=0x0) returned 0x3b [0066.980] ReadFile (in: hFile=0x178, lpBuffer=0x282377c, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x31e37c, lpOverlapped=0x0 | out: lpBuffer=0x282377c*, lpNumberOfBytesRead=0x31e37c*=0x3b, lpOverlapped=0x0) returned 1 [0066.981] CloseHandle (hObject=0x178) returned 1 [0067.028] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\cast_setup\\setup.html", nBufferLength=0x105, lpBuffer=0x31ddc0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\cast_setup\\setup.html", lpFilePart=0x0) returned 0x9c [0067.028] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e2b4) returned 1 [0067.028] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\cast_setup\\setup.html" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\cast_setup\\setup.html"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x178 [0067.029] GetFileType (hFile=0x178) returned 0x1 [0067.029] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e2b0) returned 1 [0067.029] GetFileType (hFile=0x178) returned 0x1 [0067.029] WriteFile (in: hFile=0x178, lpBuffer=0x2672900*, nNumberOfBytesToWrite=0x40, lpNumberOfBytesWritten=0x31e344, lpOverlapped=0x0 | out: lpBuffer=0x2672900*, lpNumberOfBytesWritten=0x31e344*=0x40, lpOverlapped=0x0) returned 1 [0067.030] CloseHandle (hObject=0x178) returned 1 [0067.030] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\cast_setup\\setup.html", nBufferLength=0x105, lpBuffer=0x31def4, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\cast_setup\\setup.html", lpFilePart=0x0) returned 0x9c [0067.030] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\cast_setup\\setup.html", nBufferLength=0x105, lpBuffer=0x31def4, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\cast_setup\\setup.html", lpFilePart=0x0) returned 0x9c [0067.030] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e354) returned 1 [0067.030] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\cast_setup\\setup.html" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\cast_setup\\setup.html"), fInfoLevelId=0x0, lpFileInformation=0x31e3d0 | out: lpFileInformation=0x31e3d0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x836884d0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x8368abe0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0xb64b6a0, ftLastWriteTime.dwHighDateTime=0x1d6eb7f, nFileSizeHigh=0x0, nFileSizeLow=0x40)) returned 1 [0067.030] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e350) returned 1 [0067.030] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\cast_setup\\setup.html" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\cast_setup\\setup.html"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\cast_setup\\setup.html" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\cast_setup\\setup.html")) returned 1 [0067.030] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e3fc) returned 1 [0067.030] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\cloud_route_details", nBufferLength=0x105, lpBuffer=0x31df04, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\cloud_route_details", lpFilePart=0x0) returned 0x9a [0067.031] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\cloud_route_details\\", nBufferLength=0x105, lpBuffer=0x31ded8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\cloud_route_details\\", lpFilePart=0x0) returned 0x9b [0067.031] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\cloud_route_details\\*", lpFindFileData=0x31e124 | out: lpFindFileData=0x31e124*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x8368d2f0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x83694820, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x83694820, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x381b40 [0067.031] FindNextFileW (in: hFindFile=0x381b40, lpFindFileData=0x31e134 | out: lpFindFileData=0x31e134*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x8368d2f0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x83694820, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x83694820, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0067.031] FindNextFileW (in: hFindFile=0x381b40, lpFindFileData=0x31e134 | out: lpFindFileData=0x31e134*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x8368fa00, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x8368fa00, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x1caf9500, ftLastWriteTime.dwHighDateTime=0x1d2c87a, nFileSizeHigh=0x0, nFileSizeLow=0x174c, dwReserved0=0x0, dwReserved1=0x0, cFileName="view.html", cAlternateFileName="VIEW~1.HTM")) returned 1 [0067.031] FindNextFileW (in: hFindFile=0x381b40, lpFindFileData=0x31e134 | out: lpFindFileData=0x31e134*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x83694820, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x83694820, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x1caf9500, ftLastWriteTime.dwHighDateTime=0x1d2c87a, nFileSizeHigh=0x0, nFileSizeLow=0x945, dwReserved0=0x0, dwReserved1=0x0, cFileName="view.js", cAlternateFileName="")) returned 1 [0067.031] FindNextFileW (in: hFindFile=0x381b40, lpFindFileData=0x31e134 | out: lpFindFileData=0x31e134*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0067.031] FindClose (in: hFindFile=0x381b40 | out: hFindFile=0x381b40) returned 1 [0067.032] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e3bc) returned 1 [0067.032] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e3c8) returned 1 [0067.032] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e3fc) returned 1 [0067.032] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\cloud_route_details", nBufferLength=0x105, lpBuffer=0x31df04, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\cloud_route_details", lpFilePart=0x0) returned 0x9a [0067.032] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\cloud_route_details\\", nBufferLength=0x105, lpBuffer=0x31ded8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\cloud_route_details\\", lpFilePart=0x0) returned 0x9b [0067.032] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\cloud_route_details\\*", lpFindFileData=0x31e124 | out: lpFindFileData=0x31e124*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x8368d2f0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x83694820, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x83694820, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x381b40 [0067.032] FindNextFileW (in: hFindFile=0x381b40, lpFindFileData=0x31e134 | out: lpFindFileData=0x31e134*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x8368d2f0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x83694820, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x83694820, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0067.032] FindNextFileW (in: hFindFile=0x381b40, lpFindFileData=0x31e134 | out: lpFindFileData=0x31e134*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x8368fa00, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x8368fa00, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x1caf9500, ftLastWriteTime.dwHighDateTime=0x1d2c87a, nFileSizeHigh=0x0, nFileSizeLow=0x174c, dwReserved0=0x0, dwReserved1=0x0, cFileName="view.html", cAlternateFileName="VIEW~1.HTM")) returned 1 [0067.032] FindNextFileW (in: hFindFile=0x381b40, lpFindFileData=0x31e134 | out: lpFindFileData=0x31e134*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x83694820, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x83694820, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x1caf9500, ftLastWriteTime.dwHighDateTime=0x1d2c87a, nFileSizeHigh=0x0, nFileSizeLow=0x945, dwReserved0=0x0, dwReserved1=0x0, cFileName="view.js", cAlternateFileName="")) returned 1 [0067.032] FindNextFileW (in: hFindFile=0x381b40, lpFindFileData=0x31e134 | out: lpFindFileData=0x31e134*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x83694820, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x83694820, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x1caf9500, ftLastWriteTime.dwHighDateTime=0x1d2c87a, nFileSizeHigh=0x0, nFileSizeLow=0x945, dwReserved0=0x0, dwReserved1=0x0, cFileName="view.js", cAlternateFileName="")) returned 0 [0067.033] FindClose (in: hFindFile=0x381b40 | out: hFindFile=0x381b40) returned 1 [0067.033] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e3bc) returned 1 [0067.033] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e3c8) returned 1 [0067.033] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\cloud_route_details\\view.html", nBufferLength=0x105, lpBuffer=0x31ddd4, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\cloud_route_details\\view.html", lpFilePart=0x0) returned 0xa4 [0067.033] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e2c8) returned 1 [0067.033] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\cloud_route_details\\view.html" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\cloud_route_details\\view.html"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x178 [0067.033] GetFileType (hFile=0x178) returned 0x1 [0067.033] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e2c4) returned 1 [0067.033] GetFileType (hFile=0x178) returned 0x1 [0067.033] GetFileSize (in: hFile=0x178, lpFileSizeHigh=0x31e3d0 | out: lpFileSizeHigh=0x31e3d0*=0x0) returned 0x174c [0067.033] ReadFile (in: hFile=0x178, lpBuffer=0x26770d8, nNumberOfBytesToRead=0x174c, lpNumberOfBytesRead=0x31e37c, lpOverlapped=0x0 | out: lpBuffer=0x26770d8*, lpNumberOfBytesRead=0x31e37c*=0x174c, lpOverlapped=0x0) returned 1 [0067.035] CloseHandle (hObject=0x178) returned 1 [0067.048] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\cloud_route_details\\view.html", nBufferLength=0x105, lpBuffer=0x31ddc0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\cloud_route_details\\view.html", lpFilePart=0x0) returned 0xa4 [0067.048] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e2b4) returned 1 [0067.049] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\cloud_route_details\\view.html" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\cloud_route_details\\view.html"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x178 [0067.049] GetFileType (hFile=0x178) returned 0x1 [0067.049] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e2b0) returned 1 [0067.049] GetFileType (hFile=0x178) returned 0x1 [0067.050] WriteFile (in: hFile=0x178, lpBuffer=0x26cb4a8*, nNumberOfBytesToWrite=0x1750, lpNumberOfBytesWritten=0x31e370, lpOverlapped=0x0 | out: lpBuffer=0x26cb4a8*, lpNumberOfBytesWritten=0x31e370*=0x1750, lpOverlapped=0x0) returned 1 [0067.051] CloseHandle (hObject=0x178) returned 1 [0067.051] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\cloud_route_details\\view.html", nBufferLength=0x105, lpBuffer=0x31def4, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\cloud_route_details\\view.html", lpFilePart=0x0) returned 0xa4 [0067.051] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\cloud_route_details\\view.html", nBufferLength=0x105, lpBuffer=0x31def4, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\cloud_route_details\\view.html", lpFilePart=0x0) returned 0xa4 [0067.051] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e354) returned 1 [0067.051] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\cloud_route_details\\view.html" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\cloud_route_details\\view.html"), fInfoLevelId=0x0, lpFileInformation=0x31e3d0 | out: lpFileInformation=0x31e3d0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x8368fa00, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x8368fa00, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0xb697960, ftLastWriteTime.dwHighDateTime=0x1d6eb7f, nFileSizeHigh=0x0, nFileSizeLow=0x1750)) returned 1 [0067.051] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e350) returned 1 [0067.051] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\cloud_route_details\\view.html" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\cloud_route_details\\view.html"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\cloud_route_details\\view.html" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\cloud_route_details\\view.html")) returned 1 [0067.051] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e3fc) returned 1 [0067.051] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales", nBufferLength=0x105, lpBuffer=0x31df04, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales", lpFilePart=0x0) returned 0x8f [0067.052] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\", nBufferLength=0x105, lpBuffer=0x31ded8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\", lpFilePart=0x0) returned 0x90 [0067.052] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\*", lpFindFileData=0x31e124 | out: lpFindFileData=0x31e124*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x833e6790, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x83624340, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x83624340, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x381d80 [0067.053] FindNextFileW (in: hFindFile=0x381d80, lpFindFileData=0x31e134 | out: lpFindFileData=0x31e134*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x833e6790, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x83624340, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x83624340, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0067.054] FindNextFileW (in: hFindFile=0x381d80, lpFindFileData=0x31e134 | out: lpFindFileData=0x31e134*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x833e8ea0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x833eb5b0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x833eb5b0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="am", cAlternateFileName="")) returned 1 [0067.054] FindNextFileW (in: hFindFile=0x381d80, lpFindFileData=0x31e134 | out: lpFindFileData=0x31e134*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x833f7900, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x833fee30, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x833fee30, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="ar", cAlternateFileName="")) returned 1 [0067.054] FindNextFileW (in: hFindFile=0x381d80, lpFindFileData=0x31e134 | out: lpFindFileData=0x31e134*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x83403c50, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x83406360, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x83406360, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="bg", cAlternateFileName="")) returned 1 [0067.054] FindNextFileW (in: hFindFile=0x381d80, lpFindFileData=0x31e134 | out: lpFindFileData=0x31e134*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x8340b180, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x8340b180, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x8340b180, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="bn", cAlternateFileName="")) returned 1 [0067.054] FindNextFileW (in: hFindFile=0x381d80, lpFindFileData=0x31e134 | out: lpFindFileData=0x31e134*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x8340ffa0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x834126b0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x834126b0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="ca", cAlternateFileName="")) returned 1 [0067.055] FindNextFileW (in: hFindFile=0x381d80, lpFindFileData=0x31e134 | out: lpFindFileData=0x31e134*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x83419be0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x8341c2f0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x8341c2f0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="cs", cAlternateFileName="")) returned 1 [0067.055] FindNextFileW (in: hFindFile=0x381d80, lpFindFileData=0x31e134 | out: lpFindFileData=0x31e134*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x83425f30, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x83428640, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x83428640, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="da", cAlternateFileName="")) returned 1 [0067.055] FindNextFileW (in: hFindFile=0x381d80, lpFindFileData=0x31e134 | out: lpFindFileData=0x31e134*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x8342d460, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x8342fb70, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x8342fb70, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="de", cAlternateFileName="")) returned 1 [0067.055] FindNextFileW (in: hFindFile=0x381d80, lpFindFileData=0x31e134 | out: lpFindFileData=0x31e134*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x83434990, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x834370a0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x834370a0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="el", cAlternateFileName="")) returned 1 [0067.055] FindNextFileW (in: hFindFile=0x381d80, lpFindFileData=0x31e134 | out: lpFindFileData=0x31e134*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x8343bec0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x83440ce0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x83440ce0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="en", cAlternateFileName="")) returned 1 [0067.055] FindNextFileW (in: hFindFile=0x381d80, lpFindFileData=0x31e134 | out: lpFindFileData=0x31e134*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x8344a920, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x8344d030, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x8344d030, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="es", cAlternateFileName="")) returned 1 [0067.055] FindNextFileW (in: hFindFile=0x381d80, lpFindFileData=0x31e134 | out: lpFindFileData=0x31e134*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x83451e50, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x83454560, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x83454560, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="et", cAlternateFileName="")) returned 1 [0067.056] FindNextFileW (in: hFindFile=0x381d80, lpFindFileData=0x31e134 | out: lpFindFileData=0x31e134*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x83459380, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x8345ba90, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x8345ba90, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="fa", cAlternateFileName="")) returned 1 [0067.056] FindNextFileW (in: hFindFile=0x381d80, lpFindFileData=0x31e134 | out: lpFindFileData=0x31e134*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x834608b0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x83462fc0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x83462fc0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="fi", cAlternateFileName="")) returned 1 [0067.056] FindNextFileW (in: hFindFile=0x381d80, lpFindFileData=0x31e134 | out: lpFindFileData=0x31e134*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x83467de0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x8346cc00, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x8346cc00, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="fil", cAlternateFileName="")) returned 1 [0067.056] FindNextFileW (in: hFindFile=0x381d80, lpFindFileData=0x31e134 | out: lpFindFileData=0x31e134*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x83476840, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x83478f50, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x83478f50, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="fr", cAlternateFileName="")) returned 1 [0067.056] FindNextFileW (in: hFindFile=0x381d80, lpFindFileData=0x31e134 | out: lpFindFileData=0x31e134*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x8347dd70, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x83480480, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x83480480, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="gu", cAlternateFileName="")) returned 1 [0067.056] FindNextFileW (in: hFindFile=0x381d80, lpFindFileData=0x31e134 | out: lpFindFileData=0x31e134*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x834852a0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x834879b0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x834879b0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="hi", cAlternateFileName="")) returned 1 [0067.056] FindNextFileW (in: hFindFile=0x381d80, lpFindFileData=0x31e134 | out: lpFindFileData=0x31e134*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x8348c7d0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x8348eee0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x8348eee0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="hr", cAlternateFileName="")) returned 1 [0067.057] FindNextFileW (in: hFindFile=0x381d80, lpFindFileData=0x31e134 | out: lpFindFileData=0x31e134*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x83496410, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x83498b20, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x83498b20, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="hu", cAlternateFileName="")) returned 1 [0067.057] FindNextFileW (in: hFindFile=0x381d80, lpFindFileData=0x31e134 | out: lpFindFileData=0x31e134*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x834a2760, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x834a4e70, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x834a4e70, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="id", cAlternateFileName="")) returned 1 [0067.057] FindNextFileW (in: hFindFile=0x381d80, lpFindFileData=0x31e134 | out: lpFindFileData=0x31e134*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x834a7580, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x834a7580, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x834a7580, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="it", cAlternateFileName="")) returned 1 [0067.057] FindNextFileW (in: hFindFile=0x381d80, lpFindFileData=0x31e134 | out: lpFindFileData=0x31e134*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x834aeab0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x834b11c0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x834b11c0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="iw", cAlternateFileName="")) returned 1 [0067.057] FindNextFileW (in: hFindFile=0x381d80, lpFindFileData=0x31e134 | out: lpFindFileData=0x31e134*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x834b86f0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x834bae00, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x834bae00, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="ja", cAlternateFileName="")) returned 1 [0067.057] FindNextFileW (in: hFindFile=0x381d80, lpFindFileData=0x31e134 | out: lpFindFileData=0x31e134*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x834c4a40, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x834c7150, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x834c7150, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="kn", cAlternateFileName="")) returned 1 [0067.057] FindNextFileW (in: hFindFile=0x381d80, lpFindFileData=0x31e134 | out: lpFindFileData=0x31e134*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x834cbf70, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x834ce680, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x834ce680, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="ko", cAlternateFileName="")) returned 1 [0067.058] FindNextFileW (in: hFindFile=0x381d80, lpFindFileData=0x31e134 | out: lpFindFileData=0x31e134*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x834d34a0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x834d5bb0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x834d5bb0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="lt", cAlternateFileName="")) returned 1 [0067.058] FindNextFileW (in: hFindFile=0x381d80, lpFindFileData=0x31e134 | out: lpFindFileData=0x31e134*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x834da9d0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x834dd0e0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x834dd0e0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="lv", cAlternateFileName="")) returned 1 [0067.058] FindNextFileW (in: hFindFile=0x381d80, lpFindFileData=0x31e134 | out: lpFindFileData=0x31e134*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x834e9430, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x834ebb40, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x834ebb40, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="ml", cAlternateFileName="")) returned 1 [0067.058] FindNextFileW (in: hFindFile=0x381d80, lpFindFileData=0x31e134 | out: lpFindFileData=0x31e134*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x834f0960, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x834f3070, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x834f3070, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="mr", cAlternateFileName="")) returned 1 [0067.058] FindNextFileW (in: hFindFile=0x381d80, lpFindFileData=0x31e134 | out: lpFindFileData=0x31e134*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x834fccb0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x834ff3c0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x834ff3c0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="ms", cAlternateFileName="")) returned 1 [0067.058] FindNextFileW (in: hFindFile=0x381d80, lpFindFileData=0x31e134 | out: lpFindFileData=0x31e134*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x835041e0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x835068f0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x835068f0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="nb", cAlternateFileName="")) returned 1 [0067.059] FindNextFileW (in: hFindFile=0x381d80, lpFindFileData=0x31e134 | out: lpFindFileData=0x31e134*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x835794e0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x8357bbf0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x8357bbf0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="nl", cAlternateFileName="")) returned 1 [0067.059] FindNextFileW (in: hFindFile=0x381d80, lpFindFileData=0x31e134 | out: lpFindFileData=0x31e134*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x83580a10, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x83583120, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x83583120, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="pl", cAlternateFileName="")) returned 1 [0067.059] FindNextFileW (in: hFindFile=0x381d80, lpFindFileData=0x31e134 | out: lpFindFileData=0x31e134*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x8358f470, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x8359b7c0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x8359b7c0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="pt", cAlternateFileName="")) returned 1 [0067.059] FindNextFileW (in: hFindFile=0x381d80, lpFindFileData=0x31e134 | out: lpFindFileData=0x31e134*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x835969a0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x835a05e0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x835a05e0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="pt_BR", cAlternateFileName="")) returned 1 [0067.059] FindNextFileW (in: hFindFile=0x381d80, lpFindFileData=0x31e134 | out: lpFindFileData=0x31e134*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x835990b0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x835a5400, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x835a5400, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="pt_PT", cAlternateFileName="")) returned 1 [0067.059] FindNextFileW (in: hFindFile=0x381d80, lpFindFileData=0x31e134 | out: lpFindFileData=0x31e134*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x835aa220, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x835b1750, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x835b1750, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="ro", cAlternateFileName="")) returned 1 [0067.059] FindNextFileW (in: hFindFile=0x381d80, lpFindFileData=0x31e134 | out: lpFindFileData=0x31e134*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x835b6570, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x835b8c80, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x835b8c80, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="ru", cAlternateFileName="")) returned 1 [0067.060] FindNextFileW (in: hFindFile=0x381d80, lpFindFileData=0x31e134 | out: lpFindFileData=0x31e134*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x835c01b0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x835c01b0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x835c01b0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="sk", cAlternateFileName="")) returned 1 [0067.060] FindNextFileW (in: hFindFile=0x381d80, lpFindFileData=0x31e134 | out: lpFindFileData=0x31e134*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x835c4fd0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x835c9df0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x835c9df0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="sl", cAlternateFileName="")) returned 1 [0067.060] FindNextFileW (in: hFindFile=0x381d80, lpFindFileData=0x31e134 | out: lpFindFileData=0x31e134*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x835cec10, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x835cec10, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x835cec10, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="sr", cAlternateFileName="")) returned 1 [0067.060] FindNextFileW (in: hFindFile=0x381d80, lpFindFileData=0x31e134 | out: lpFindFileData=0x31e134*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x835daf60, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x835dd670, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x835dd670, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="sv", cAlternateFileName="")) returned 1 [0067.060] FindNextFileW (in: hFindFile=0x381d80, lpFindFileData=0x31e134 | out: lpFindFileData=0x31e134*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x835dd670, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x835dfd80, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x835dfd80, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="sw", cAlternateFileName="")) returned 1 [0067.060] FindNextFileW (in: hFindFile=0x381d80, lpFindFileData=0x31e134 | out: lpFindFileData=0x31e134*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x835e4ba0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x835e72b0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x835e72b0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="ta", cAlternateFileName="")) returned 1 [0067.060] FindNextFileW (in: hFindFile=0x381d80, lpFindFileData=0x31e134 | out: lpFindFileData=0x31e134*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x835ec0d0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x835f0ef0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x835f0ef0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="te", cAlternateFileName="")) returned 1 [0067.061] FindNextFileW (in: hFindFile=0x381d80, lpFindFileData=0x31e134 | out: lpFindFileData=0x31e134*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x835f5d10, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x835f8420, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x835f8420, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="th", cAlternateFileName="")) returned 1 [0067.061] FindNextFileW (in: hFindFile=0x381d80, lpFindFileData=0x31e134 | out: lpFindFileData=0x31e134*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x835fd240, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x835ff950, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x835ff950, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="tr", cAlternateFileName="")) returned 1 [0067.061] FindNextFileW (in: hFindFile=0x381d80, lpFindFileData=0x31e134 | out: lpFindFileData=0x31e134*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x8360bca0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x8360e3b0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x8360e3b0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="uk", cAlternateFileName="")) returned 1 [0067.061] FindNextFileW (in: hFindFile=0x381d80, lpFindFileData=0x31e134 | out: lpFindFileData=0x31e134*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x836158e0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x83617ff0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x83617ff0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="vi", cAlternateFileName="")) returned 1 [0067.061] FindNextFileW (in: hFindFile=0x381d80, lpFindFileData=0x31e134 | out: lpFindFileData=0x31e134*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x8361ce10, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x8361f520, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x8361f520, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="zh", cAlternateFileName="")) returned 1 [0067.061] FindNextFileW (in: hFindFile=0x381d80, lpFindFileData=0x31e134 | out: lpFindFileData=0x31e134*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x83624340, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x8362b870, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x8362b870, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="zh_TW", cAlternateFileName="")) returned 1 [0067.061] FindNextFileW (in: hFindFile=0x381d80, lpFindFileData=0x31e134 | out: lpFindFileData=0x31e134*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x83624340, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x8362b870, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x8362b870, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="zh_TW", cAlternateFileName="")) returned 0 [0067.062] FindClose (in: hFindFile=0x381d80 | out: hFindFile=0x381d80) returned 1 [0067.062] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e3bc) returned 1 [0067.062] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e3c8) returned 1 [0067.062] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e3fc) returned 1 [0067.062] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales", nBufferLength=0x105, lpBuffer=0x31df04, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales", lpFilePart=0x0) returned 0x8f [0067.062] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\", nBufferLength=0x105, lpBuffer=0x31ded8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\", lpFilePart=0x0) returned 0x90 [0067.062] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\*", lpFindFileData=0x31e124 | out: lpFindFileData=0x31e124*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x833e6790, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x83624340, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x83624340, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x381d80 [0067.063] FindNextFileW (in: hFindFile=0x381d80, lpFindFileData=0x31e134 | out: lpFindFileData=0x31e134*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x833e6790, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x83624340, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x83624340, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0067.063] FindNextFileW (in: hFindFile=0x381d80, lpFindFileData=0x31e134 | out: lpFindFileData=0x31e134*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x833e8ea0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x833eb5b0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x833eb5b0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="am", cAlternateFileName="")) returned 1 [0067.064] FindNextFileW (in: hFindFile=0x381d80, lpFindFileData=0x31e134 | out: lpFindFileData=0x31e134*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x833f7900, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x833fee30, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x833fee30, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="ar", cAlternateFileName="")) returned 1 [0067.064] FindNextFileW (in: hFindFile=0x381d80, lpFindFileData=0x31e134 | out: lpFindFileData=0x31e134*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x83403c50, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x83406360, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x83406360, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="bg", cAlternateFileName="")) returned 1 [0067.064] FindNextFileW (in: hFindFile=0x381d80, lpFindFileData=0x31e134 | out: lpFindFileData=0x31e134*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x8340b180, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x8340b180, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x8340b180, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="bn", cAlternateFileName="")) returned 1 [0067.064] FindNextFileW (in: hFindFile=0x381d80, lpFindFileData=0x31e134 | out: lpFindFileData=0x31e134*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x8340ffa0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x834126b0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x834126b0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="ca", cAlternateFileName="")) returned 1 [0067.064] FindNextFileW (in: hFindFile=0x381d80, lpFindFileData=0x31e134 | out: lpFindFileData=0x31e134*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x83419be0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x8341c2f0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x8341c2f0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="cs", cAlternateFileName="")) returned 1 [0067.064] FindNextFileW (in: hFindFile=0x381d80, lpFindFileData=0x31e134 | out: lpFindFileData=0x31e134*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x83425f30, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x83428640, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x83428640, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="da", cAlternateFileName="")) returned 1 [0067.064] FindNextFileW (in: hFindFile=0x381d80, lpFindFileData=0x31e134 | out: lpFindFileData=0x31e134*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x8342d460, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x8342fb70, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x8342fb70, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="de", cAlternateFileName="")) returned 1 [0067.065] FindNextFileW (in: hFindFile=0x381d80, lpFindFileData=0x31e134 | out: lpFindFileData=0x31e134*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x83434990, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x834370a0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x834370a0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="el", cAlternateFileName="")) returned 1 [0067.065] FindNextFileW (in: hFindFile=0x381d80, lpFindFileData=0x31e134 | out: lpFindFileData=0x31e134*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x8343bec0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x83440ce0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x83440ce0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="en", cAlternateFileName="")) returned 1 [0067.065] FindNextFileW (in: hFindFile=0x381d80, lpFindFileData=0x31e134 | out: lpFindFileData=0x31e134*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x8344a920, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x8344d030, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x8344d030, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="es", cAlternateFileName="")) returned 1 [0067.065] FindNextFileW (in: hFindFile=0x381d80, lpFindFileData=0x31e134 | out: lpFindFileData=0x31e134*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x83451e50, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x83454560, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x83454560, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="et", cAlternateFileName="")) returned 1 [0067.065] FindNextFileW (in: hFindFile=0x381d80, lpFindFileData=0x31e134 | out: lpFindFileData=0x31e134*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x83459380, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x8345ba90, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x8345ba90, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="fa", cAlternateFileName="")) returned 1 [0067.066] FindNextFileW (in: hFindFile=0x381d80, lpFindFileData=0x31e134 | out: lpFindFileData=0x31e134*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x834608b0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x83462fc0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x83462fc0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="fi", cAlternateFileName="")) returned 1 [0067.066] FindNextFileW (in: hFindFile=0x381d80, lpFindFileData=0x31e134 | out: lpFindFileData=0x31e134*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x83467de0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x8346cc00, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x8346cc00, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="fil", cAlternateFileName="")) returned 1 [0067.066] FindNextFileW (in: hFindFile=0x381d80, lpFindFileData=0x31e134 | out: lpFindFileData=0x31e134*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x83476840, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x83478f50, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x83478f50, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="fr", cAlternateFileName="")) returned 1 [0067.066] FindNextFileW (in: hFindFile=0x381d80, lpFindFileData=0x31e134 | out: lpFindFileData=0x31e134*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x8347dd70, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x83480480, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x83480480, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="gu", cAlternateFileName="")) returned 1 [0067.066] FindNextFileW (in: hFindFile=0x381d80, lpFindFileData=0x31e134 | out: lpFindFileData=0x31e134*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x834852a0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x834879b0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x834879b0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="hi", cAlternateFileName="")) returned 1 [0067.066] FindNextFileW (in: hFindFile=0x381d80, lpFindFileData=0x31e134 | out: lpFindFileData=0x31e134*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x8348c7d0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x8348eee0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x8348eee0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="hr", cAlternateFileName="")) returned 1 [0067.066] FindNextFileW (in: hFindFile=0x381d80, lpFindFileData=0x31e134 | out: lpFindFileData=0x31e134*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x83496410, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x83498b20, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x83498b20, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="hu", cAlternateFileName="")) returned 1 [0067.066] FindNextFileW (in: hFindFile=0x381d80, lpFindFileData=0x31e134 | out: lpFindFileData=0x31e134*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x834a2760, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x834a4e70, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x834a4e70, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="id", cAlternateFileName="")) returned 1 [0067.067] FindNextFileW (in: hFindFile=0x381d80, lpFindFileData=0x31e134 | out: lpFindFileData=0x31e134*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x834a7580, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x834a7580, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x834a7580, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="it", cAlternateFileName="")) returned 1 [0067.067] FindNextFileW (in: hFindFile=0x381d80, lpFindFileData=0x31e134 | out: lpFindFileData=0x31e134*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x834aeab0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x834b11c0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x834b11c0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="iw", cAlternateFileName="")) returned 1 [0067.067] FindNextFileW (in: hFindFile=0x381d80, lpFindFileData=0x31e134 | out: lpFindFileData=0x31e134*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x834b86f0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x834bae00, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x834bae00, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="ja", cAlternateFileName="")) returned 1 [0067.067] FindNextFileW (in: hFindFile=0x381d80, lpFindFileData=0x31e134 | out: lpFindFileData=0x31e134*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x834c4a40, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x834c7150, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x834c7150, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="kn", cAlternateFileName="")) returned 1 [0067.067] FindNextFileW (in: hFindFile=0x381d80, lpFindFileData=0x31e134 | out: lpFindFileData=0x31e134*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x834cbf70, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x834ce680, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x834ce680, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="ko", cAlternateFileName="")) returned 1 [0067.067] FindNextFileW (in: hFindFile=0x381d80, lpFindFileData=0x31e134 | out: lpFindFileData=0x31e134*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x834d34a0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x834d5bb0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x834d5bb0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="lt", cAlternateFileName="")) returned 1 [0067.067] FindNextFileW (in: hFindFile=0x381d80, lpFindFileData=0x31e134 | out: lpFindFileData=0x31e134*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x834da9d0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x834dd0e0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x834dd0e0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="lv", cAlternateFileName="")) returned 1 [0067.067] FindNextFileW (in: hFindFile=0x381d80, lpFindFileData=0x31e134 | out: lpFindFileData=0x31e134*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x834e9430, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x834ebb40, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x834ebb40, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="ml", cAlternateFileName="")) returned 1 [0067.067] FindNextFileW (in: hFindFile=0x381d80, lpFindFileData=0x31e134 | out: lpFindFileData=0x31e134*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x834f0960, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x834f3070, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x834f3070, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="mr", cAlternateFileName="")) returned 1 [0067.068] FindNextFileW (in: hFindFile=0x381d80, lpFindFileData=0x31e134 | out: lpFindFileData=0x31e134*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x834fccb0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x834ff3c0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x834ff3c0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="ms", cAlternateFileName="")) returned 1 [0067.068] FindNextFileW (in: hFindFile=0x381d80, lpFindFileData=0x31e134 | out: lpFindFileData=0x31e134*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x835041e0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x835068f0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x835068f0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="nb", cAlternateFileName="")) returned 1 [0067.068] FindNextFileW (in: hFindFile=0x381d80, lpFindFileData=0x31e134 | out: lpFindFileData=0x31e134*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x835794e0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x8357bbf0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x8357bbf0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="nl", cAlternateFileName="")) returned 1 [0067.068] FindNextFileW (in: hFindFile=0x381d80, lpFindFileData=0x31e134 | out: lpFindFileData=0x31e134*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x83580a10, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x83583120, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x83583120, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="pl", cAlternateFileName="")) returned 1 [0067.068] FindNextFileW (in: hFindFile=0x381d80, lpFindFileData=0x31e134 | out: lpFindFileData=0x31e134*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x8358f470, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x8359b7c0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x8359b7c0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="pt", cAlternateFileName="")) returned 1 [0067.068] FindNextFileW (in: hFindFile=0x381d80, lpFindFileData=0x31e134 | out: lpFindFileData=0x31e134*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x835969a0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x835a05e0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x835a05e0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="pt_BR", cAlternateFileName="")) returned 1 [0067.068] FindNextFileW (in: hFindFile=0x381d80, lpFindFileData=0x31e134 | out: lpFindFileData=0x31e134*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x835990b0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x835a5400, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x835a5400, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="pt_PT", cAlternateFileName="")) returned 1 [0067.068] FindNextFileW (in: hFindFile=0x381d80, lpFindFileData=0x31e134 | out: lpFindFileData=0x31e134*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x835aa220, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x835b1750, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x835b1750, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="ro", cAlternateFileName="")) returned 1 [0067.068] FindNextFileW (in: hFindFile=0x381d80, lpFindFileData=0x31e134 | out: lpFindFileData=0x31e134*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x835b6570, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x835b8c80, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x835b8c80, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="ru", cAlternateFileName="")) returned 1 [0067.069] FindNextFileW (in: hFindFile=0x381d80, lpFindFileData=0x31e134 | out: lpFindFileData=0x31e134*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x835c01b0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x835c01b0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x835c01b0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="sk", cAlternateFileName="")) returned 1 [0067.069] FindNextFileW (in: hFindFile=0x381d80, lpFindFileData=0x31e134 | out: lpFindFileData=0x31e134*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x835c4fd0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x835c9df0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x835c9df0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="sl", cAlternateFileName="")) returned 1 [0067.069] FindNextFileW (in: hFindFile=0x381d80, lpFindFileData=0x31e134 | out: lpFindFileData=0x31e134*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x835cec10, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x835cec10, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x835cec10, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="sr", cAlternateFileName="")) returned 1 [0067.069] FindNextFileW (in: hFindFile=0x381d80, lpFindFileData=0x31e134 | out: lpFindFileData=0x31e134*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x835daf60, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x835dd670, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x835dd670, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="sv", cAlternateFileName="")) returned 1 [0067.069] FindNextFileW (in: hFindFile=0x381d80, lpFindFileData=0x31e134 | out: lpFindFileData=0x31e134*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x835dd670, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x835dfd80, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x835dfd80, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="sw", cAlternateFileName="")) returned 1 [0067.069] FindNextFileW (in: hFindFile=0x381d80, lpFindFileData=0x31e134 | out: lpFindFileData=0x31e134*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x835e4ba0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x835e72b0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x835e72b0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="ta", cAlternateFileName="")) returned 1 [0067.069] FindNextFileW (in: hFindFile=0x381d80, lpFindFileData=0x31e134 | out: lpFindFileData=0x31e134*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x835ec0d0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x835f0ef0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x835f0ef0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="te", cAlternateFileName="")) returned 1 [0067.069] FindNextFileW (in: hFindFile=0x381d80, lpFindFileData=0x31e134 | out: lpFindFileData=0x31e134*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x835f5d10, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x835f8420, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x835f8420, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="th", cAlternateFileName="")) returned 1 [0067.069] FindNextFileW (in: hFindFile=0x381d80, lpFindFileData=0x31e134 | out: lpFindFileData=0x31e134*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x835fd240, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x835ff950, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x835ff950, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="tr", cAlternateFileName="")) returned 1 [0067.070] FindNextFileW (in: hFindFile=0x381d80, lpFindFileData=0x31e134 | out: lpFindFileData=0x31e134*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x8360bca0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x8360e3b0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x8360e3b0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="uk", cAlternateFileName="")) returned 1 [0067.070] FindNextFileW (in: hFindFile=0x381d80, lpFindFileData=0x31e134 | out: lpFindFileData=0x31e134*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x836158e0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x83617ff0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x83617ff0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="vi", cAlternateFileName="")) returned 1 [0067.070] FindNextFileW (in: hFindFile=0x381d80, lpFindFileData=0x31e134 | out: lpFindFileData=0x31e134*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x8361ce10, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x8361f520, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x8361f520, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="zh", cAlternateFileName="")) returned 1 [0067.070] FindNextFileW (in: hFindFile=0x381d80, lpFindFileData=0x31e134 | out: lpFindFileData=0x31e134*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x83624340, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x8362b870, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x8362b870, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="zh_TW", cAlternateFileName="")) returned 1 [0067.070] FindNextFileW (in: hFindFile=0x381d80, lpFindFileData=0x31e134 | out: lpFindFileData=0x31e134*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0067.070] FindClose (in: hFindFile=0x381d80 | out: hFindFile=0x381d80) returned 1 [0067.071] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e3bc) returned 1 [0067.071] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e3c8) returned 1 [0067.071] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e384) returned 1 [0067.071] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\am", nBufferLength=0x105, lpBuffer=0x31de8c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\am", lpFilePart=0x0) returned 0x92 [0067.071] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\am\\", nBufferLength=0x105, lpBuffer=0x31de60, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\am\\", lpFilePart=0x0) returned 0x93 [0067.071] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\am\\*", lpFindFileData=0x31e0ac | out: lpFindFileData=0x31e0ac*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x833e8ea0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x833eb5b0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x833eb5b0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x381d80 [0067.072] FindNextFileW (in: hFindFile=0x381d80, lpFindFileData=0x31e0bc | out: lpFindFileData=0x31e0bc*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x833e8ea0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x833eb5b0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x833eb5b0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0067.072] FindNextFileW (in: hFindFile=0x381d80, lpFindFileData=0x31e0bc | out: lpFindFileData=0x31e0bc*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x833eb5b0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x833eb5b0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x8397d230, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x4827, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1 [0067.072] FindNextFileW (in: hFindFile=0x381d80, lpFindFileData=0x31e0bc | out: lpFindFileData=0x31e0bc*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0067.072] FindClose (in: hFindFile=0x381d80 | out: hFindFile=0x381d80) returned 1 [0067.073] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e344) returned 1 [0067.073] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e350) returned 1 [0067.073] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e384) returned 1 [0067.073] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\am", nBufferLength=0x105, lpBuffer=0x31de8c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\am", lpFilePart=0x0) returned 0x92 [0067.073] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\am\\", nBufferLength=0x105, lpBuffer=0x31de60, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\am\\", lpFilePart=0x0) returned 0x93 [0067.073] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\am\\*", lpFindFileData=0x31e0ac | out: lpFindFileData=0x31e0ac*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x833e8ea0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x833eb5b0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x833eb5b0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x381d80 [0067.073] FindNextFileW (in: hFindFile=0x381d80, lpFindFileData=0x31e0bc | out: lpFindFileData=0x31e0bc*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x833e8ea0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x833eb5b0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x833eb5b0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0067.073] FindNextFileW (in: hFindFile=0x381d80, lpFindFileData=0x31e0bc | out: lpFindFileData=0x31e0bc*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x833eb5b0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x833eb5b0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x8397d230, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x4827, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1 [0067.073] FindNextFileW (in: hFindFile=0x381d80, lpFindFileData=0x31e0bc | out: lpFindFileData=0x31e0bc*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x833eb5b0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x833eb5b0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x8397d230, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x4827, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 0 [0067.073] FindClose (in: hFindFile=0x381d80 | out: hFindFile=0x381d80) returned 1 [0067.073] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e344) returned 1 [0067.073] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e350) returned 1 [0067.073] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e384) returned 1 [0067.073] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\ar", nBufferLength=0x105, lpBuffer=0x31de8c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\ar", lpFilePart=0x0) returned 0x92 [0067.073] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\ar\\", nBufferLength=0x105, lpBuffer=0x31de60, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\ar\\", lpFilePart=0x0) returned 0x93 [0067.073] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\ar\\*", lpFindFileData=0x31e0ac | out: lpFindFileData=0x31e0ac*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x833f7900, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x833fee30, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x833fee30, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x381d80 [0067.074] FindNextFileW (in: hFindFile=0x381d80, lpFindFileData=0x31e0bc | out: lpFindFileData=0x31e0bc*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x833f7900, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x833fee30, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x833fee30, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0067.075] FindNextFileW (in: hFindFile=0x381d80, lpFindFileData=0x31e0bc | out: lpFindFileData=0x31e0bc*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x833fee30, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x833fee30, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x8397f940, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x45bf, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1 [0067.075] FindNextFileW (in: hFindFile=0x381d80, lpFindFileData=0x31e0bc | out: lpFindFileData=0x31e0bc*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0067.075] FindClose (in: hFindFile=0x381d80 | out: hFindFile=0x381d80) returned 1 [0067.075] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e344) returned 1 [0067.075] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e350) returned 1 [0067.075] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e384) returned 1 [0067.075] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\ar", nBufferLength=0x105, lpBuffer=0x31de8c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\ar", lpFilePart=0x0) returned 0x92 [0067.075] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\ar\\", nBufferLength=0x105, lpBuffer=0x31de60, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\ar\\", lpFilePart=0x0) returned 0x93 [0067.075] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\ar\\*", lpFindFileData=0x31e0ac | out: lpFindFileData=0x31e0ac*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x833f7900, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x833fee30, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x833fee30, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x381d80 [0067.075] FindNextFileW (in: hFindFile=0x381d80, lpFindFileData=0x31e0bc | out: lpFindFileData=0x31e0bc*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x833f7900, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x833fee30, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x833fee30, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0067.075] FindNextFileW (in: hFindFile=0x381d80, lpFindFileData=0x31e0bc | out: lpFindFileData=0x31e0bc*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x833fee30, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x833fee30, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x8397f940, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x45bf, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1 [0067.075] FindNextFileW (in: hFindFile=0x381d80, lpFindFileData=0x31e0bc | out: lpFindFileData=0x31e0bc*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x833fee30, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x833fee30, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x8397f940, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x45bf, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 0 [0067.075] FindClose (in: hFindFile=0x381d80 | out: hFindFile=0x381d80) returned 1 [0067.075] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e344) returned 1 [0067.075] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e350) returned 1 [0067.075] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e384) returned 1 [0067.075] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\bg", nBufferLength=0x105, lpBuffer=0x31de8c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\bg", lpFilePart=0x0) returned 0x92 [0067.075] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\bg\\", nBufferLength=0x105, lpBuffer=0x31de60, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\bg\\", lpFilePart=0x0) returned 0x93 [0067.075] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\bg\\*", lpFindFileData=0x31e0ac | out: lpFindFileData=0x31e0ac*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x83403c50, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x83406360, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x83406360, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x381d80 [0067.076] FindNextFileW (in: hFindFile=0x381d80, lpFindFileData=0x31e0bc | out: lpFindFileData=0x31e0bc*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x83403c50, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x83406360, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x83406360, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0067.076] FindNextFileW (in: hFindFile=0x381d80, lpFindFileData=0x31e0bc | out: lpFindFileData=0x31e0bc*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x83406360, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x83408a70, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x8397f940, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x4b63, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1 [0067.076] FindNextFileW (in: hFindFile=0x381d80, lpFindFileData=0x31e0bc | out: lpFindFileData=0x31e0bc*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0067.076] FindClose (in: hFindFile=0x381d80 | out: hFindFile=0x381d80) returned 1 [0067.076] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e344) returned 1 [0067.076] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e350) returned 1 [0067.076] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e384) returned 1 [0067.076] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\bg", nBufferLength=0x105, lpBuffer=0x31de8c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\bg", lpFilePart=0x0) returned 0x92 [0067.076] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\bg\\", nBufferLength=0x105, lpBuffer=0x31de60, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\bg\\", lpFilePart=0x0) returned 0x93 [0067.076] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\bg\\*", lpFindFileData=0x31e0ac | out: lpFindFileData=0x31e0ac*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x83403c50, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x83406360, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x83406360, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x381d80 [0067.076] FindNextFileW (in: hFindFile=0x381d80, lpFindFileData=0x31e0bc | out: lpFindFileData=0x31e0bc*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x83403c50, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x83406360, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x83406360, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0067.076] FindNextFileW (in: hFindFile=0x381d80, lpFindFileData=0x31e0bc | out: lpFindFileData=0x31e0bc*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x83406360, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x83408a70, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x8397f940, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x4b63, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1 [0067.076] FindNextFileW (in: hFindFile=0x381d80, lpFindFileData=0x31e0bc | out: lpFindFileData=0x31e0bc*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x83406360, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x83408a70, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x8397f940, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x4b63, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 0 [0067.076] FindClose (in: hFindFile=0x381d80 | out: hFindFile=0x381d80) returned 1 [0067.076] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e344) returned 1 [0067.076] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e350) returned 1 [0067.077] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e384) returned 1 [0067.077] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\bn", nBufferLength=0x105, lpBuffer=0x31de8c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\bn", lpFilePart=0x0) returned 0x92 [0067.077] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\bn\\", nBufferLength=0x105, lpBuffer=0x31de60, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\bn\\", lpFilePart=0x0) returned 0x93 [0067.077] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\bn\\*", lpFindFileData=0x31e0ac | out: lpFindFileData=0x31e0ac*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x8340b180, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x8340b180, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x8340b180, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x381d80 [0067.077] FindNextFileW (in: hFindFile=0x381d80, lpFindFileData=0x31e0bc | out: lpFindFileData=0x31e0bc*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x8340b180, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x8340b180, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x8340b180, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0067.078] FindNextFileW (in: hFindFile=0x381d80, lpFindFileData=0x31e0bc | out: lpFindFileData=0x31e0bc*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x8340b180, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x8340b180, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x8397f940, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x52cb, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1 [0067.078] FindNextFileW (in: hFindFile=0x381d80, lpFindFileData=0x31e0bc | out: lpFindFileData=0x31e0bc*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0067.078] FindClose (in: hFindFile=0x381d80 | out: hFindFile=0x381d80) returned 1 [0067.078] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e344) returned 1 [0067.078] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e350) returned 1 [0067.078] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e384) returned 1 [0067.078] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\bn", nBufferLength=0x105, lpBuffer=0x31de8c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\bn", lpFilePart=0x0) returned 0x92 [0067.078] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\bn\\", nBufferLength=0x105, lpBuffer=0x31de60, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\bn\\", lpFilePart=0x0) returned 0x93 [0067.078] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\bn\\*", lpFindFileData=0x31e0ac | out: lpFindFileData=0x31e0ac*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x8340b180, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x8340b180, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x8340b180, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x381d80 [0067.078] FindNextFileW (in: hFindFile=0x381d80, lpFindFileData=0x31e0bc | out: lpFindFileData=0x31e0bc*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x8340b180, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x8340b180, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x8340b180, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0067.078] FindNextFileW (in: hFindFile=0x381d80, lpFindFileData=0x31e0bc | out: lpFindFileData=0x31e0bc*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x8340b180, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x8340b180, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x8397f940, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x52cb, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1 [0067.078] FindNextFileW (in: hFindFile=0x381d80, lpFindFileData=0x31e0bc | out: lpFindFileData=0x31e0bc*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x8340b180, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x8340b180, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x8397f940, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x52cb, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 0 [0067.078] FindClose (in: hFindFile=0x381d80 | out: hFindFile=0x381d80) returned 1 [0067.078] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e344) returned 1 [0067.078] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e350) returned 1 [0067.078] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e384) returned 1 [0067.078] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\ca", nBufferLength=0x105, lpBuffer=0x31de8c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\ca", lpFilePart=0x0) returned 0x92 [0067.078] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\ca\\", nBufferLength=0x105, lpBuffer=0x31de60, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\ca\\", lpFilePart=0x0) returned 0x93 [0067.078] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\ca\\*", lpFindFileData=0x31e0ac | out: lpFindFileData=0x31e0ac*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x8340ffa0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x834126b0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x834126b0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x381d80 [0067.079] FindNextFileW (in: hFindFile=0x381d80, lpFindFileData=0x31e0bc | out: lpFindFileData=0x31e0bc*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x8340ffa0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x834126b0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x834126b0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0067.079] FindNextFileW (in: hFindFile=0x381d80, lpFindFileData=0x31e0bc | out: lpFindFileData=0x31e0bc*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x834126b0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x83414dc0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x8397f940, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x405d, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1 [0067.079] FindNextFileW (in: hFindFile=0x381d80, lpFindFileData=0x31e0bc | out: lpFindFileData=0x31e0bc*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0067.079] FindClose (in: hFindFile=0x381d80 | out: hFindFile=0x381d80) returned 1 [0067.079] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e344) returned 1 [0067.079] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e350) returned 1 [0067.079] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e384) returned 1 [0067.079] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\ca", nBufferLength=0x105, lpBuffer=0x31de8c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\ca", lpFilePart=0x0) returned 0x92 [0067.079] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\ca\\", nBufferLength=0x105, lpBuffer=0x31de60, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\ca\\", lpFilePart=0x0) returned 0x93 [0067.079] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\ca\\*", lpFindFileData=0x31e0ac | out: lpFindFileData=0x31e0ac*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x8340ffa0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x834126b0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x834126b0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x381d80 [0067.079] FindNextFileW (in: hFindFile=0x381d80, lpFindFileData=0x31e0bc | out: lpFindFileData=0x31e0bc*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x8340ffa0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x834126b0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x834126b0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0067.079] FindNextFileW (in: hFindFile=0x381d80, lpFindFileData=0x31e0bc | out: lpFindFileData=0x31e0bc*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x834126b0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x83414dc0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x8397f940, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x405d, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1 [0067.079] FindNextFileW (in: hFindFile=0x381d80, lpFindFileData=0x31e0bc | out: lpFindFileData=0x31e0bc*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x834126b0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x83414dc0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x8397f940, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x405d, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 0 [0067.079] FindClose (in: hFindFile=0x381d80 | out: hFindFile=0x381d80) returned 1 [0067.079] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e344) returned 1 [0067.080] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e350) returned 1 [0067.080] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e384) returned 1 [0067.080] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\cs", nBufferLength=0x105, lpBuffer=0x31de8c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\cs", lpFilePart=0x0) returned 0x92 [0067.080] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\cs\\", nBufferLength=0x105, lpBuffer=0x31de60, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\cs\\", lpFilePart=0x0) returned 0x93 [0067.080] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\cs\\*", lpFindFileData=0x31e0ac | out: lpFindFileData=0x31e0ac*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x83419be0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x8341c2f0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x8341c2f0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x381d80 [0067.081] FindNextFileW (in: hFindFile=0x381d80, lpFindFileData=0x31e0bc | out: lpFindFileData=0x31e0bc*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x83419be0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x8341c2f0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x8341c2f0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0067.081] FindNextFileW (in: hFindFile=0x381d80, lpFindFileData=0x31e0bc | out: lpFindFileData=0x31e0bc*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x8341c2f0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x83421110, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x83982050, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x4029, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1 [0067.081] FindNextFileW (in: hFindFile=0x381d80, lpFindFileData=0x31e0bc | out: lpFindFileData=0x31e0bc*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0067.081] FindClose (in: hFindFile=0x381d80 | out: hFindFile=0x381d80) returned 1 [0067.081] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e344) returned 1 [0067.081] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e350) returned 1 [0067.081] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e384) returned 1 [0067.081] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\cs", nBufferLength=0x105, lpBuffer=0x31de8c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\cs", lpFilePart=0x0) returned 0x92 [0067.081] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\cs\\", nBufferLength=0x105, lpBuffer=0x31de60, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\cs\\", lpFilePart=0x0) returned 0x93 [0067.081] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\cs\\*", lpFindFileData=0x31e0ac | out: lpFindFileData=0x31e0ac*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x83419be0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x8341c2f0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x8341c2f0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x381d80 [0067.081] FindNextFileW (in: hFindFile=0x381d80, lpFindFileData=0x31e0bc | out: lpFindFileData=0x31e0bc*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x83419be0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x8341c2f0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x8341c2f0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0067.081] FindNextFileW (in: hFindFile=0x381d80, lpFindFileData=0x31e0bc | out: lpFindFileData=0x31e0bc*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x8341c2f0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x83421110, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x83982050, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x4029, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1 [0067.081] FindNextFileW (in: hFindFile=0x381d80, lpFindFileData=0x31e0bc | out: lpFindFileData=0x31e0bc*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x8341c2f0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x83421110, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x83982050, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x4029, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 0 [0067.081] FindClose (in: hFindFile=0x381d80 | out: hFindFile=0x381d80) returned 1 [0067.081] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e344) returned 1 [0067.081] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e350) returned 1 [0067.081] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e384) returned 1 [0067.081] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\da", nBufferLength=0x105, lpBuffer=0x31de8c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\da", lpFilePart=0x0) returned 0x92 [0067.081] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\da\\", nBufferLength=0x105, lpBuffer=0x31de60, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\da\\", lpFilePart=0x0) returned 0x93 [0067.082] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\da\\*", lpFindFileData=0x31e0ac | out: lpFindFileData=0x31e0ac*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x83425f30, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x83428640, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x83428640, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x381d80 [0067.082] FindNextFileW (in: hFindFile=0x381d80, lpFindFileData=0x31e0bc | out: lpFindFileData=0x31e0bc*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x83425f30, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x83428640, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x83428640, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0067.082] FindNextFileW (in: hFindFile=0x381d80, lpFindFileData=0x31e0bc | out: lpFindFileData=0x31e0bc*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x83428640, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x83428640, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x83982050, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x3f79, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1 [0067.082] FindNextFileW (in: hFindFile=0x381d80, lpFindFileData=0x31e0bc | out: lpFindFileData=0x31e0bc*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0067.082] FindClose (in: hFindFile=0x381d80 | out: hFindFile=0x381d80) returned 1 [0067.082] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e344) returned 1 [0067.082] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e350) returned 1 [0067.082] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e384) returned 1 [0067.082] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\da", nBufferLength=0x105, lpBuffer=0x31de8c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\da", lpFilePart=0x0) returned 0x92 [0067.082] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\da\\", nBufferLength=0x105, lpBuffer=0x31de60, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\da\\", lpFilePart=0x0) returned 0x93 [0067.082] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\da\\*", lpFindFileData=0x31e0ac | out: lpFindFileData=0x31e0ac*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x83425f30, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x83428640, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x83428640, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x381d80 [0067.082] FindNextFileW (in: hFindFile=0x381d80, lpFindFileData=0x31e0bc | out: lpFindFileData=0x31e0bc*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x83425f30, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x83428640, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x83428640, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0067.082] FindNextFileW (in: hFindFile=0x381d80, lpFindFileData=0x31e0bc | out: lpFindFileData=0x31e0bc*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x83428640, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x83428640, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x83982050, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x3f79, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1 [0067.082] FindNextFileW (in: hFindFile=0x381d80, lpFindFileData=0x31e0bc | out: lpFindFileData=0x31e0bc*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x83428640, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x83428640, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x83982050, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x3f79, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 0 [0067.082] FindClose (in: hFindFile=0x381d80 | out: hFindFile=0x381d80) returned 1 [0067.083] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e344) returned 1 [0067.083] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e350) returned 1 [0067.083] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e384) returned 1 [0067.083] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\de", nBufferLength=0x105, lpBuffer=0x31de8c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\de", lpFilePart=0x0) returned 0x92 [0067.083] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\de\\", nBufferLength=0x105, lpBuffer=0x31de60, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\de\\", lpFilePart=0x0) returned 0x93 [0067.083] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\de\\*", lpFindFileData=0x31e0ac | out: lpFindFileData=0x31e0ac*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x8342d460, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x8342fb70, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x8342fb70, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x381d80 [0067.083] FindNextFileW (in: hFindFile=0x381d80, lpFindFileData=0x31e0bc | out: lpFindFileData=0x31e0bc*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x8342d460, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x8342fb70, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x8342fb70, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0067.084] FindNextFileW (in: hFindFile=0x381d80, lpFindFileData=0x31e0bc | out: lpFindFileData=0x31e0bc*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x8342fb70, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x83432280, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x83982050, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x406f, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1 [0067.084] FindNextFileW (in: hFindFile=0x381d80, lpFindFileData=0x31e0bc | out: lpFindFileData=0x31e0bc*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0067.084] FindClose (in: hFindFile=0x381d80 | out: hFindFile=0x381d80) returned 1 [0067.084] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e344) returned 1 [0067.084] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e350) returned 1 [0067.084] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e384) returned 1 [0067.084] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\de", nBufferLength=0x105, lpBuffer=0x31de8c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\de", lpFilePart=0x0) returned 0x92 [0067.084] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\de\\", nBufferLength=0x105, lpBuffer=0x31de60, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\de\\", lpFilePart=0x0) returned 0x93 [0067.084] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\de\\*", lpFindFileData=0x31e0ac | out: lpFindFileData=0x31e0ac*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x8342d460, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x8342fb70, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x8342fb70, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x381d80 [0067.084] FindNextFileW (in: hFindFile=0x381d80, lpFindFileData=0x31e0bc | out: lpFindFileData=0x31e0bc*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x8342d460, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x8342fb70, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x8342fb70, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0067.084] FindNextFileW (in: hFindFile=0x381d80, lpFindFileData=0x31e0bc | out: lpFindFileData=0x31e0bc*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x8342fb70, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x83432280, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x83982050, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x406f, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1 [0067.084] FindNextFileW (in: hFindFile=0x381d80, lpFindFileData=0x31e0bc | out: lpFindFileData=0x31e0bc*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x8342fb70, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x83432280, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x83982050, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x406f, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 0 [0067.084] FindClose (in: hFindFile=0x381d80 | out: hFindFile=0x381d80) returned 1 [0067.084] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e344) returned 1 [0067.084] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e350) returned 1 [0067.084] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e384) returned 1 [0067.084] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\el", nBufferLength=0x105, lpBuffer=0x31de8c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\el", lpFilePart=0x0) returned 0x92 [0067.084] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\el\\", nBufferLength=0x105, lpBuffer=0x31de60, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\el\\", lpFilePart=0x0) returned 0x93 [0067.084] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\el\\*", lpFindFileData=0x31e0ac | out: lpFindFileData=0x31e0ac*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x83434990, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x834370a0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x834370a0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x381d80 [0067.085] FindNextFileW (in: hFindFile=0x381d80, lpFindFileData=0x31e0bc | out: lpFindFileData=0x31e0bc*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x83434990, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x834370a0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x834370a0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0067.085] FindNextFileW (in: hFindFile=0x381d80, lpFindFileData=0x31e0bc | out: lpFindFileData=0x31e0bc*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x834370a0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x834397b0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x83982050, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x4afe, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1 [0067.085] FindNextFileW (in: hFindFile=0x381d80, lpFindFileData=0x31e0bc | out: lpFindFileData=0x31e0bc*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0067.085] FindClose (in: hFindFile=0x381d80 | out: hFindFile=0x381d80) returned 1 [0067.086] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e344) returned 1 [0067.086] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e350) returned 1 [0067.086] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e384) returned 1 [0067.086] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\el", nBufferLength=0x105, lpBuffer=0x31de8c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\el", lpFilePart=0x0) returned 0x92 [0067.086] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\el\\", nBufferLength=0x105, lpBuffer=0x31de60, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\el\\", lpFilePart=0x0) returned 0x93 [0067.086] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\el\\*", lpFindFileData=0x31e0ac | out: lpFindFileData=0x31e0ac*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x83434990, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x834370a0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x834370a0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x381d80 [0067.086] FindNextFileW (in: hFindFile=0x381d80, lpFindFileData=0x31e0bc | out: lpFindFileData=0x31e0bc*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x83434990, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x834370a0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x834370a0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0067.086] FindNextFileW (in: hFindFile=0x381d80, lpFindFileData=0x31e0bc | out: lpFindFileData=0x31e0bc*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x834370a0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x834397b0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x83982050, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x4afe, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1 [0067.086] FindNextFileW (in: hFindFile=0x381d80, lpFindFileData=0x31e0bc | out: lpFindFileData=0x31e0bc*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x834370a0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x834397b0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x83982050, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x4afe, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 0 [0067.086] FindClose (in: hFindFile=0x381d80 | out: hFindFile=0x381d80) returned 1 [0067.086] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e344) returned 1 [0067.087] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e350) returned 1 [0067.087] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e384) returned 1 [0067.087] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\en", nBufferLength=0x105, lpBuffer=0x31de8c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\en", lpFilePart=0x0) returned 0x92 [0067.087] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\en\\", nBufferLength=0x105, lpBuffer=0x31de60, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\en\\", lpFilePart=0x0) returned 0x93 [0067.087] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\en\\*", lpFindFileData=0x31e0ac | out: lpFindFileData=0x31e0ac*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x8343bec0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x83440ce0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x83440ce0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x381d80 [0067.088] FindNextFileW (in: hFindFile=0x381d80, lpFindFileData=0x31e0bc | out: lpFindFileData=0x31e0bc*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x8343bec0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x83440ce0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x83440ce0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0067.088] FindNextFileW (in: hFindFile=0x381d80, lpFindFileData=0x31e0bc | out: lpFindFileData=0x31e0bc*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x8343e5d0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x83440ce0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x83984760, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x3d7a, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1 [0067.088] FindNextFileW (in: hFindFile=0x381d80, lpFindFileData=0x31e0bc | out: lpFindFileData=0x31e0bc*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0067.088] FindClose (in: hFindFile=0x381d80 | out: hFindFile=0x381d80) returned 1 [0067.088] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e344) returned 1 [0067.088] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e350) returned 1 [0067.088] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e384) returned 1 [0067.088] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\en", nBufferLength=0x105, lpBuffer=0x31de8c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\en", lpFilePart=0x0) returned 0x92 [0067.088] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\en\\", nBufferLength=0x105, lpBuffer=0x31de60, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\en\\", lpFilePart=0x0) returned 0x93 [0067.088] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\en\\*", lpFindFileData=0x31e0ac | out: lpFindFileData=0x31e0ac*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x8343bec0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x83440ce0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x83440ce0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x381d80 [0067.088] FindNextFileW (in: hFindFile=0x381d80, lpFindFileData=0x31e0bc | out: lpFindFileData=0x31e0bc*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x8343bec0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x83440ce0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x83440ce0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0067.088] FindNextFileW (in: hFindFile=0x381d80, lpFindFileData=0x31e0bc | out: lpFindFileData=0x31e0bc*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x8343e5d0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x83440ce0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x83984760, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x3d7a, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1 [0067.088] FindNextFileW (in: hFindFile=0x381d80, lpFindFileData=0x31e0bc | out: lpFindFileData=0x31e0bc*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x8343e5d0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x83440ce0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x83984760, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x3d7a, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 0 [0067.088] FindClose (in: hFindFile=0x381d80 | out: hFindFile=0x381d80) returned 1 [0067.088] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e344) returned 1 [0067.088] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e350) returned 1 [0067.088] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e384) returned 1 [0067.088] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\es", nBufferLength=0x105, lpBuffer=0x31de8c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\es", lpFilePart=0x0) returned 0x92 [0067.088] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\es\\", nBufferLength=0x105, lpBuffer=0x31de60, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\es\\", lpFilePart=0x0) returned 0x93 [0067.089] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\es\\*", lpFindFileData=0x31e0ac | out: lpFindFileData=0x31e0ac*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x8344a920, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x8344d030, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x8344d030, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x381d80 [0067.089] FindNextFileW (in: hFindFile=0x381d80, lpFindFileData=0x31e0bc | out: lpFindFileData=0x31e0bc*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x8344a920, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x8344d030, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x8344d030, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0067.089] FindNextFileW (in: hFindFile=0x381d80, lpFindFileData=0x31e0bc | out: lpFindFileData=0x31e0bc*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x8344d030, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x8344d030, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x83984760, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x404b, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1 [0067.089] FindNextFileW (in: hFindFile=0x381d80, lpFindFileData=0x31e0bc | out: lpFindFileData=0x31e0bc*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0067.089] FindClose (in: hFindFile=0x381d80 | out: hFindFile=0x381d80) returned 1 [0067.089] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e344) returned 1 [0067.089] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e350) returned 1 [0067.089] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e384) returned 1 [0067.089] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\es", nBufferLength=0x105, lpBuffer=0x31de8c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\es", lpFilePart=0x0) returned 0x92 [0067.089] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\es\\", nBufferLength=0x105, lpBuffer=0x31de60, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\es\\", lpFilePart=0x0) returned 0x93 [0067.089] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\es\\*", lpFindFileData=0x31e0ac | out: lpFindFileData=0x31e0ac*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x8344a920, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x8344d030, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x8344d030, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x381d80 [0067.089] FindNextFileW (in: hFindFile=0x381d80, lpFindFileData=0x31e0bc | out: lpFindFileData=0x31e0bc*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x8344a920, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x8344d030, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x8344d030, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0067.089] FindNextFileW (in: hFindFile=0x381d80, lpFindFileData=0x31e0bc | out: lpFindFileData=0x31e0bc*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x8344d030, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x8344d030, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x83984760, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x404b, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1 [0067.089] FindNextFileW (in: hFindFile=0x381d80, lpFindFileData=0x31e0bc | out: lpFindFileData=0x31e0bc*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x8344d030, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x8344d030, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x83984760, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x404b, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 0 [0067.089] FindClose (in: hFindFile=0x381d80 | out: hFindFile=0x381d80) returned 1 [0067.089] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e344) returned 1 [0067.090] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e350) returned 1 [0067.090] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e384) returned 1 [0067.090] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\et", nBufferLength=0x105, lpBuffer=0x31de8c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\et", lpFilePart=0x0) returned 0x92 [0067.090] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\et\\", nBufferLength=0x105, lpBuffer=0x31de60, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\et\\", lpFilePart=0x0) returned 0x93 [0067.090] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\et\\*", lpFindFileData=0x31e0ac | out: lpFindFileData=0x31e0ac*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x83451e50, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x83454560, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x83454560, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x381d80 [0067.091] FindNextFileW (in: hFindFile=0x381d80, lpFindFileData=0x31e0bc | out: lpFindFileData=0x31e0bc*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x83451e50, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x83454560, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x83454560, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0067.091] FindNextFileW (in: hFindFile=0x381d80, lpFindFileData=0x31e0bc | out: lpFindFileData=0x31e0bc*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x83454560, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x83454560, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x83984760, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x3e85, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1 [0067.091] FindNextFileW (in: hFindFile=0x381d80, lpFindFileData=0x31e0bc | out: lpFindFileData=0x31e0bc*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0067.091] FindClose (in: hFindFile=0x381d80 | out: hFindFile=0x381d80) returned 1 [0067.091] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e344) returned 1 [0067.091] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e350) returned 1 [0067.091] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e384) returned 1 [0067.091] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\et", nBufferLength=0x105, lpBuffer=0x31de8c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\et", lpFilePart=0x0) returned 0x92 [0067.091] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\et\\", nBufferLength=0x105, lpBuffer=0x31de60, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\et\\", lpFilePart=0x0) returned 0x93 [0067.091] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\et\\*", lpFindFileData=0x31e0ac | out: lpFindFileData=0x31e0ac*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x83451e50, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x83454560, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x83454560, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x381d80 [0067.091] FindNextFileW (in: hFindFile=0x381d80, lpFindFileData=0x31e0bc | out: lpFindFileData=0x31e0bc*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x83451e50, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x83454560, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x83454560, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0067.091] FindNextFileW (in: hFindFile=0x381d80, lpFindFileData=0x31e0bc | out: lpFindFileData=0x31e0bc*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x83454560, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x83454560, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x83984760, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x3e85, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1 [0067.091] FindNextFileW (in: hFindFile=0x381d80, lpFindFileData=0x31e0bc | out: lpFindFileData=0x31e0bc*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x83454560, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x83454560, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x83984760, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x3e85, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 0 [0067.091] FindClose (in: hFindFile=0x381d80 | out: hFindFile=0x381d80) returned 1 [0067.091] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e344) returned 1 [0067.091] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e350) returned 1 [0067.091] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e384) returned 1 [0067.091] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\fa", nBufferLength=0x105, lpBuffer=0x31de8c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\fa", lpFilePart=0x0) returned 0x92 [0067.091] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\fa\\", nBufferLength=0x105, lpBuffer=0x31de60, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\fa\\", lpFilePart=0x0) returned 0x93 [0067.092] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\fa\\*", lpFindFileData=0x31e0ac | out: lpFindFileData=0x31e0ac*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x83459380, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x8345ba90, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x8345ba90, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x381d80 [0067.092] FindNextFileW (in: hFindFile=0x381d80, lpFindFileData=0x31e0bc | out: lpFindFileData=0x31e0bc*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x83459380, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x8345ba90, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x8345ba90, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0067.092] FindNextFileW (in: hFindFile=0x381d80, lpFindFileData=0x31e0bc | out: lpFindFileData=0x31e0bc*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x8345ba90, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x8345ba90, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x83984760, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x46f5, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1 [0067.092] FindNextFileW (in: hFindFile=0x381d80, lpFindFileData=0x31e0bc | out: lpFindFileData=0x31e0bc*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0067.092] FindClose (in: hFindFile=0x381d80 | out: hFindFile=0x381d80) returned 1 [0067.092] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e344) returned 1 [0067.092] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e350) returned 1 [0067.092] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e384) returned 1 [0067.092] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\fa", nBufferLength=0x105, lpBuffer=0x31de8c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\fa", lpFilePart=0x0) returned 0x92 [0067.092] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\fa\\", nBufferLength=0x105, lpBuffer=0x31de60, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\fa\\", lpFilePart=0x0) returned 0x93 [0067.092] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\fa\\*", lpFindFileData=0x31e0ac | out: lpFindFileData=0x31e0ac*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x83459380, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x8345ba90, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x8345ba90, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x381d80 [0067.092] FindNextFileW (in: hFindFile=0x381d80, lpFindFileData=0x31e0bc | out: lpFindFileData=0x31e0bc*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x83459380, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x8345ba90, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x8345ba90, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0067.092] FindNextFileW (in: hFindFile=0x381d80, lpFindFileData=0x31e0bc | out: lpFindFileData=0x31e0bc*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x8345ba90, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x8345ba90, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x83984760, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x46f5, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1 [0067.092] FindNextFileW (in: hFindFile=0x381d80, lpFindFileData=0x31e0bc | out: lpFindFileData=0x31e0bc*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x8345ba90, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x8345ba90, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x83984760, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x46f5, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 0 [0067.092] FindClose (in: hFindFile=0x381d80 | out: hFindFile=0x381d80) returned 1 [0067.092] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e344) returned 1 [0067.093] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e350) returned 1 [0067.093] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e384) returned 1 [0067.093] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\fi", nBufferLength=0x105, lpBuffer=0x31de8c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\fi", lpFilePart=0x0) returned 0x92 [0067.093] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\fi\\", nBufferLength=0x105, lpBuffer=0x31de60, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\fi\\", lpFilePart=0x0) returned 0x93 [0067.093] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\fi\\*", lpFindFileData=0x31e0ac | out: lpFindFileData=0x31e0ac*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x834608b0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x83462fc0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x83462fc0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x381d80 [0067.093] FindNextFileW (in: hFindFile=0x381d80, lpFindFileData=0x31e0bc | out: lpFindFileData=0x31e0bc*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x834608b0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x83462fc0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x83462fc0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0067.094] FindNextFileW (in: hFindFile=0x381d80, lpFindFileData=0x31e0bc | out: lpFindFileData=0x31e0bc*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x83462fc0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x83462fc0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x83986e70, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x3f4c, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1 [0067.094] FindNextFileW (in: hFindFile=0x381d80, lpFindFileData=0x31e0bc | out: lpFindFileData=0x31e0bc*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0067.094] FindClose (in: hFindFile=0x381d80 | out: hFindFile=0x381d80) returned 1 [0067.094] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e344) returned 1 [0067.094] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e350) returned 1 [0067.094] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e384) returned 1 [0067.094] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\fi", nBufferLength=0x105, lpBuffer=0x31de8c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\fi", lpFilePart=0x0) returned 0x92 [0067.094] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\fi\\", nBufferLength=0x105, lpBuffer=0x31de60, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\fi\\", lpFilePart=0x0) returned 0x93 [0067.094] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\fi\\*", lpFindFileData=0x31e0ac | out: lpFindFileData=0x31e0ac*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x834608b0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x83462fc0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x83462fc0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x381d80 [0067.094] FindNextFileW (in: hFindFile=0x381d80, lpFindFileData=0x31e0bc | out: lpFindFileData=0x31e0bc*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x834608b0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x83462fc0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x83462fc0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0067.094] FindNextFileW (in: hFindFile=0x381d80, lpFindFileData=0x31e0bc | out: lpFindFileData=0x31e0bc*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x83462fc0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x83462fc0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x83986e70, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x3f4c, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1 [0067.094] FindNextFileW (in: hFindFile=0x381d80, lpFindFileData=0x31e0bc | out: lpFindFileData=0x31e0bc*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x83462fc0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x83462fc0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x83986e70, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x3f4c, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 0 [0067.094] FindClose (in: hFindFile=0x381d80 | out: hFindFile=0x381d80) returned 1 [0067.094] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e344) returned 1 [0067.094] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e350) returned 1 [0067.094] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e384) returned 1 [0067.094] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\fil", nBufferLength=0x105, lpBuffer=0x31de8c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\fil", lpFilePart=0x0) returned 0x93 [0067.094] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\fil\\", nBufferLength=0x105, lpBuffer=0x31de60, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\fil\\", lpFilePart=0x0) returned 0x94 [0067.094] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\fil\\*", lpFindFileData=0x31e0ac | out: lpFindFileData=0x31e0ac*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x83467de0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x8346cc00, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x8346cc00, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x381d80 [0067.095] FindNextFileW (in: hFindFile=0x381d80, lpFindFileData=0x31e0bc | out: lpFindFileData=0x31e0bc*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x83467de0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x8346cc00, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x8346cc00, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0067.095] FindNextFileW (in: hFindFile=0x381d80, lpFindFileData=0x31e0bc | out: lpFindFileData=0x31e0bc*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x8346cc00, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x83471a20, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x83986e70, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x4082, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1 [0067.095] FindNextFileW (in: hFindFile=0x381d80, lpFindFileData=0x31e0bc | out: lpFindFileData=0x31e0bc*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0067.095] FindClose (in: hFindFile=0x381d80 | out: hFindFile=0x381d80) returned 1 [0067.095] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e344) returned 1 [0067.095] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e350) returned 1 [0067.095] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e384) returned 1 [0067.095] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\fil", nBufferLength=0x105, lpBuffer=0x31de8c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\fil", lpFilePart=0x0) returned 0x93 [0067.095] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\fil\\", nBufferLength=0x105, lpBuffer=0x31de60, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\fil\\", lpFilePart=0x0) returned 0x94 [0067.095] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\fil\\*", lpFindFileData=0x31e0ac | out: lpFindFileData=0x31e0ac*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x83467de0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x8346cc00, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x8346cc00, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x381d80 [0067.095] FindNextFileW (in: hFindFile=0x381d80, lpFindFileData=0x31e0bc | out: lpFindFileData=0x31e0bc*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x83467de0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x8346cc00, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x8346cc00, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0067.095] FindNextFileW (in: hFindFile=0x381d80, lpFindFileData=0x31e0bc | out: lpFindFileData=0x31e0bc*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x8346cc00, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x83471a20, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x83986e70, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x4082, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1 [0067.095] FindNextFileW (in: hFindFile=0x381d80, lpFindFileData=0x31e0bc | out: lpFindFileData=0x31e0bc*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x8346cc00, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x83471a20, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x83986e70, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x4082, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 0 [0067.095] FindClose (in: hFindFile=0x381d80 | out: hFindFile=0x381d80) returned 1 [0067.095] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e344) returned 1 [0067.095] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e350) returned 1 [0067.096] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e384) returned 1 [0067.096] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\fr", nBufferLength=0x105, lpBuffer=0x31de8c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\fr", lpFilePart=0x0) returned 0x92 [0067.096] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\fr\\", nBufferLength=0x105, lpBuffer=0x31de60, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\fr\\", lpFilePart=0x0) returned 0x93 [0067.096] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\fr\\*", lpFindFileData=0x31e0ac | out: lpFindFileData=0x31e0ac*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x83476840, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x83478f50, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x83478f50, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x381d80 [0067.096] FindNextFileW (in: hFindFile=0x381d80, lpFindFileData=0x31e0bc | out: lpFindFileData=0x31e0bc*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x83476840, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x83478f50, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x83478f50, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0067.097] FindNextFileW (in: hFindFile=0x381d80, lpFindFileData=0x31e0bc | out: lpFindFileData=0x31e0bc*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x83478f50, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x83478f50, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x83986e70, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x419f, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1 [0067.097] FindNextFileW (in: hFindFile=0x381d80, lpFindFileData=0x31e0bc | out: lpFindFileData=0x31e0bc*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0067.097] FindClose (in: hFindFile=0x381d80 | out: hFindFile=0x381d80) returned 1 [0067.097] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e344) returned 1 [0067.097] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e350) returned 1 [0067.097] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e384) returned 1 [0067.097] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\fr", nBufferLength=0x105, lpBuffer=0x31de8c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\fr", lpFilePart=0x0) returned 0x92 [0067.097] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\fr\\", nBufferLength=0x105, lpBuffer=0x31de60, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\fr\\", lpFilePart=0x0) returned 0x93 [0067.097] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\fr\\*", lpFindFileData=0x31e0ac | out: lpFindFileData=0x31e0ac*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x83476840, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x83478f50, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x83478f50, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x381d80 [0067.097] FindNextFileW (in: hFindFile=0x381d80, lpFindFileData=0x31e0bc | out: lpFindFileData=0x31e0bc*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x83476840, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x83478f50, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x83478f50, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0067.097] FindNextFileW (in: hFindFile=0x381d80, lpFindFileData=0x31e0bc | out: lpFindFileData=0x31e0bc*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x83478f50, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x83478f50, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x83986e70, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x419f, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1 [0067.097] FindNextFileW (in: hFindFile=0x381d80, lpFindFileData=0x31e0bc | out: lpFindFileData=0x31e0bc*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x83478f50, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x83478f50, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x83986e70, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x419f, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 0 [0067.097] FindClose (in: hFindFile=0x381d80 | out: hFindFile=0x381d80) returned 1 [0067.097] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e344) returned 1 [0067.097] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e350) returned 1 [0067.097] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e384) returned 1 [0067.097] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\gu", nBufferLength=0x105, lpBuffer=0x31de8c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\gu", lpFilePart=0x0) returned 0x92 [0067.097] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\gu\\", nBufferLength=0x105, lpBuffer=0x31de60, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\gu\\", lpFilePart=0x0) returned 0x93 [0067.097] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\gu\\*", lpFindFileData=0x31e0ac | out: lpFindFileData=0x31e0ac*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x8347dd70, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x83480480, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x83480480, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x381d80 [0067.098] FindNextFileW (in: hFindFile=0x381d80, lpFindFileData=0x31e0bc | out: lpFindFileData=0x31e0bc*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x8347dd70, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x83480480, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x83480480, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0067.098] FindNextFileW (in: hFindFile=0x381d80, lpFindFileData=0x31e0bc | out: lpFindFileData=0x31e0bc*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x83480480, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x83480480, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x83986e70, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x5079, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1 [0067.098] FindNextFileW (in: hFindFile=0x381d80, lpFindFileData=0x31e0bc | out: lpFindFileData=0x31e0bc*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0067.098] FindClose (in: hFindFile=0x381d80 | out: hFindFile=0x381d80) returned 1 [0067.098] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e344) returned 1 [0067.098] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e350) returned 1 [0067.098] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e384) returned 1 [0067.098] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\gu", nBufferLength=0x105, lpBuffer=0x31de8c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\gu", lpFilePart=0x0) returned 0x92 [0067.098] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\gu\\", nBufferLength=0x105, lpBuffer=0x31de60, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\gu\\", lpFilePart=0x0) returned 0x93 [0067.098] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\gu\\*", lpFindFileData=0x31e0ac | out: lpFindFileData=0x31e0ac*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x8347dd70, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x83480480, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x83480480, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x381d80 [0067.098] FindNextFileW (in: hFindFile=0x381d80, lpFindFileData=0x31e0bc | out: lpFindFileData=0x31e0bc*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x8347dd70, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x83480480, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x83480480, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0067.098] FindNextFileW (in: hFindFile=0x381d80, lpFindFileData=0x31e0bc | out: lpFindFileData=0x31e0bc*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x83480480, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x83480480, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x83986e70, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x5079, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1 [0067.098] FindNextFileW (in: hFindFile=0x381d80, lpFindFileData=0x31e0bc | out: lpFindFileData=0x31e0bc*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x83480480, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x83480480, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x83986e70, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x5079, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 0 [0067.098] FindClose (in: hFindFile=0x381d80 | out: hFindFile=0x381d80) returned 1 [0067.098] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e344) returned 1 [0067.098] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e350) returned 1 [0067.099] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e384) returned 1 [0067.099] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\hi", nBufferLength=0x105, lpBuffer=0x31de8c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\hi", lpFilePart=0x0) returned 0x92 [0067.099] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\hi\\", nBufferLength=0x105, lpBuffer=0x31de60, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\hi\\", lpFilePart=0x0) returned 0x93 [0067.099] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\hi\\*", lpFindFileData=0x31e0ac | out: lpFindFileData=0x31e0ac*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x834852a0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x834879b0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x834879b0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x381d80 [0067.099] FindNextFileW (in: hFindFile=0x381d80, lpFindFileData=0x31e0bc | out: lpFindFileData=0x31e0bc*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x834852a0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x834879b0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x834879b0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0067.100] FindNextFileW (in: hFindFile=0x381d80, lpFindFileData=0x31e0bc | out: lpFindFileData=0x31e0bc*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x834879b0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x834879b0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x83986e70, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x50f7, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1 [0067.100] FindNextFileW (in: hFindFile=0x381d80, lpFindFileData=0x31e0bc | out: lpFindFileData=0x31e0bc*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0067.100] FindClose (in: hFindFile=0x381d80 | out: hFindFile=0x381d80) returned 1 [0067.100] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e344) returned 1 [0067.100] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e350) returned 1 [0067.100] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e384) returned 1 [0067.100] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\hi", nBufferLength=0x105, lpBuffer=0x31de8c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\hi", lpFilePart=0x0) returned 0x92 [0067.100] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\hi\\", nBufferLength=0x105, lpBuffer=0x31de60, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\hi\\", lpFilePart=0x0) returned 0x93 [0067.100] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\hi\\*", lpFindFileData=0x31e0ac | out: lpFindFileData=0x31e0ac*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x834852a0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x834879b0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x834879b0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x381d80 [0067.100] FindNextFileW (in: hFindFile=0x381d80, lpFindFileData=0x31e0bc | out: lpFindFileData=0x31e0bc*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x834852a0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x834879b0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x834879b0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0067.100] FindNextFileW (in: hFindFile=0x381d80, lpFindFileData=0x31e0bc | out: lpFindFileData=0x31e0bc*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x834879b0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x834879b0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x83986e70, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x50f7, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1 [0067.100] FindNextFileW (in: hFindFile=0x381d80, lpFindFileData=0x31e0bc | out: lpFindFileData=0x31e0bc*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x834879b0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x834879b0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x83986e70, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x50f7, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 0 [0067.100] FindClose (in: hFindFile=0x381d80 | out: hFindFile=0x381d80) returned 1 [0067.100] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e344) returned 1 [0067.100] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e350) returned 1 [0067.100] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e384) returned 1 [0067.100] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\hr", nBufferLength=0x105, lpBuffer=0x31de8c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\hr", lpFilePart=0x0) returned 0x92 [0067.100] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\hr\\", nBufferLength=0x105, lpBuffer=0x31de60, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\hr\\", lpFilePart=0x0) returned 0x93 [0067.100] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\hr\\*", lpFindFileData=0x31e0ac | out: lpFindFileData=0x31e0ac*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x8348c7d0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x8348eee0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x8348eee0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x381d80 [0067.101] FindNextFileW (in: hFindFile=0x381d80, lpFindFileData=0x31e0bc | out: lpFindFileData=0x31e0bc*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x8348c7d0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x8348eee0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x8348eee0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0067.101] FindNextFileW (in: hFindFile=0x381d80, lpFindFileData=0x31e0bc | out: lpFindFileData=0x31e0bc*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x8348eee0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x8348eee0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x83986e70, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x3ff2, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1 [0067.101] FindNextFileW (in: hFindFile=0x381d80, lpFindFileData=0x31e0bc | out: lpFindFileData=0x31e0bc*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0067.101] FindClose (in: hFindFile=0x381d80 | out: hFindFile=0x381d80) returned 1 [0067.101] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e344) returned 1 [0067.101] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e350) returned 1 [0067.101] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e384) returned 1 [0067.101] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\hr", nBufferLength=0x105, lpBuffer=0x31de8c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\hr", lpFilePart=0x0) returned 0x92 [0067.101] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\hr\\", nBufferLength=0x105, lpBuffer=0x31de60, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\hr\\", lpFilePart=0x0) returned 0x93 [0067.101] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\hr\\*", lpFindFileData=0x31e0ac | out: lpFindFileData=0x31e0ac*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x8348c7d0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x8348eee0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x8348eee0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x381d80 [0067.101] FindNextFileW (in: hFindFile=0x381d80, lpFindFileData=0x31e0bc | out: lpFindFileData=0x31e0bc*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x8348c7d0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x8348eee0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x8348eee0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0067.101] FindNextFileW (in: hFindFile=0x381d80, lpFindFileData=0x31e0bc | out: lpFindFileData=0x31e0bc*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x8348eee0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x8348eee0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x83986e70, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x3ff2, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1 [0067.101] FindNextFileW (in: hFindFile=0x381d80, lpFindFileData=0x31e0bc | out: lpFindFileData=0x31e0bc*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x8348eee0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x8348eee0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x83986e70, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x3ff2, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 0 [0067.101] FindClose (in: hFindFile=0x381d80 | out: hFindFile=0x381d80) returned 1 [0067.101] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e344) returned 1 [0067.101] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e350) returned 1 [0067.101] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e384) returned 1 [0067.102] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\hu", nBufferLength=0x105, lpBuffer=0x31de8c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\hu", lpFilePart=0x0) returned 0x92 [0067.102] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\hu\\", nBufferLength=0x105, lpBuffer=0x31de60, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\hu\\", lpFilePart=0x0) returned 0x93 [0067.102] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\hu\\*", lpFindFileData=0x31e0ac | out: lpFindFileData=0x31e0ac*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x83496410, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x83498b20, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x83498b20, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x381d80 [0067.102] FindNextFileW (in: hFindFile=0x381d80, lpFindFileData=0x31e0bc | out: lpFindFileData=0x31e0bc*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x83496410, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x83498b20, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x83498b20, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0067.102] FindNextFileW (in: hFindFile=0x381d80, lpFindFileData=0x31e0bc | out: lpFindFileData=0x31e0bc*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x83498b20, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x8349d940, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x83986e70, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x40d4, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1 [0067.102] FindNextFileW (in: hFindFile=0x381d80, lpFindFileData=0x31e0bc | out: lpFindFileData=0x31e0bc*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0067.103] FindClose (in: hFindFile=0x381d80 | out: hFindFile=0x381d80) returned 1 [0067.103] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e344) returned 1 [0067.103] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e350) returned 1 [0067.103] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e384) returned 1 [0067.103] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\hu", nBufferLength=0x105, lpBuffer=0x31de8c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\hu", lpFilePart=0x0) returned 0x92 [0067.103] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\hu\\", nBufferLength=0x105, lpBuffer=0x31de60, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\hu\\", lpFilePart=0x0) returned 0x93 [0067.103] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\hu\\*", lpFindFileData=0x31e0ac | out: lpFindFileData=0x31e0ac*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x83496410, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x83498b20, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x83498b20, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x381d80 [0067.103] FindNextFileW (in: hFindFile=0x381d80, lpFindFileData=0x31e0bc | out: lpFindFileData=0x31e0bc*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x83496410, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x83498b20, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x83498b20, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0067.103] FindNextFileW (in: hFindFile=0x381d80, lpFindFileData=0x31e0bc | out: lpFindFileData=0x31e0bc*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x83498b20, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x8349d940, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x83986e70, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x40d4, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1 [0067.103] FindNextFileW (in: hFindFile=0x381d80, lpFindFileData=0x31e0bc | out: lpFindFileData=0x31e0bc*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x83498b20, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x8349d940, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x83986e70, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x40d4, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 0 [0067.103] FindClose (in: hFindFile=0x381d80 | out: hFindFile=0x381d80) returned 1 [0067.103] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e344) returned 1 [0067.103] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e350) returned 1 [0067.103] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e384) returned 1 [0067.103] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\id", nBufferLength=0x105, lpBuffer=0x31de8c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\id", lpFilePart=0x0) returned 0x92 [0067.103] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\id\\", nBufferLength=0x105, lpBuffer=0x31de60, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\id\\", lpFilePart=0x0) returned 0x93 [0067.103] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\id\\*", lpFindFileData=0x31e0ac | out: lpFindFileData=0x31e0ac*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x834a2760, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x834a4e70, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x834a4e70, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x381d80 [0067.104] FindNextFileW (in: hFindFile=0x381d80, lpFindFileData=0x31e0bc | out: lpFindFileData=0x31e0bc*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x834a2760, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x834a4e70, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x834a4e70, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0067.104] FindNextFileW (in: hFindFile=0x381d80, lpFindFileData=0x31e0bc | out: lpFindFileData=0x31e0bc*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x834a4e70, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x834a4e70, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x83986e70, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x3e5d, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1 [0067.104] FindNextFileW (in: hFindFile=0x381d80, lpFindFileData=0x31e0bc | out: lpFindFileData=0x31e0bc*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0067.104] FindClose (in: hFindFile=0x381d80 | out: hFindFile=0x381d80) returned 1 [0067.104] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e344) returned 1 [0067.104] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e350) returned 1 [0067.104] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e384) returned 1 [0067.104] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\id", nBufferLength=0x105, lpBuffer=0x31de8c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\id", lpFilePart=0x0) returned 0x92 [0067.104] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\id\\", nBufferLength=0x105, lpBuffer=0x31de60, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\id\\", lpFilePart=0x0) returned 0x93 [0067.104] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\id\\*", lpFindFileData=0x31e0ac | out: lpFindFileData=0x31e0ac*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x834a2760, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x834a4e70, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x834a4e70, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x381d80 [0067.104] FindNextFileW (in: hFindFile=0x381d80, lpFindFileData=0x31e0bc | out: lpFindFileData=0x31e0bc*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x834a2760, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x834a4e70, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x834a4e70, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0067.104] FindNextFileW (in: hFindFile=0x381d80, lpFindFileData=0x31e0bc | out: lpFindFileData=0x31e0bc*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x834a4e70, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x834a4e70, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x83986e70, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x3e5d, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1 [0067.104] FindNextFileW (in: hFindFile=0x381d80, lpFindFileData=0x31e0bc | out: lpFindFileData=0x31e0bc*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x834a4e70, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x834a4e70, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x83986e70, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x3e5d, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 0 [0067.104] FindClose (in: hFindFile=0x381d80 | out: hFindFile=0x381d80) returned 1 [0067.104] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e344) returned 1 [0067.104] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e350) returned 1 [0067.104] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e384) returned 1 [0067.104] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\it", nBufferLength=0x105, lpBuffer=0x31de8c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\it", lpFilePart=0x0) returned 0x92 [0067.104] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\it\\", nBufferLength=0x105, lpBuffer=0x31de60, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\it\\", lpFilePart=0x0) returned 0x93 [0067.105] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\it\\*", lpFindFileData=0x31e0ac | out: lpFindFileData=0x31e0ac*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x834a7580, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x834a7580, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x834a7580, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x381d80 [0067.105] FindNextFileW (in: hFindFile=0x381d80, lpFindFileData=0x31e0bc | out: lpFindFileData=0x31e0bc*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x834a7580, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x834a7580, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x834a7580, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0067.105] FindNextFileW (in: hFindFile=0x381d80, lpFindFileData=0x31e0bc | out: lpFindFileData=0x31e0bc*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x834a7580, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x834a7580, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x83986e70, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x3f0c, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1 [0067.105] FindNextFileW (in: hFindFile=0x381d80, lpFindFileData=0x31e0bc | out: lpFindFileData=0x31e0bc*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0067.105] FindClose (in: hFindFile=0x381d80 | out: hFindFile=0x381d80) returned 1 [0067.106] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e344) returned 1 [0067.106] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e350) returned 1 [0067.106] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e384) returned 1 [0067.106] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\it", nBufferLength=0x105, lpBuffer=0x31de8c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\it", lpFilePart=0x0) returned 0x92 [0067.106] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\it\\", nBufferLength=0x105, lpBuffer=0x31de60, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\it\\", lpFilePart=0x0) returned 0x93 [0067.106] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\it\\*", lpFindFileData=0x31e0ac | out: lpFindFileData=0x31e0ac*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x834a7580, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x834a7580, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x834a7580, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x381d80 [0067.106] FindNextFileW (in: hFindFile=0x381d80, lpFindFileData=0x31e0bc | out: lpFindFileData=0x31e0bc*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x834a7580, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x834a7580, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x834a7580, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0067.106] FindNextFileW (in: hFindFile=0x381d80, lpFindFileData=0x31e0bc | out: lpFindFileData=0x31e0bc*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x834a7580, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x834a7580, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x83986e70, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x3f0c, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1 [0067.106] FindNextFileW (in: hFindFile=0x381d80, lpFindFileData=0x31e0bc | out: lpFindFileData=0x31e0bc*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x834a7580, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x834a7580, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x83986e70, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x3f0c, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 0 [0067.106] FindClose (in: hFindFile=0x381d80 | out: hFindFile=0x381d80) returned 1 [0067.106] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e344) returned 1 [0067.106] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e350) returned 1 [0067.106] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e384) returned 1 [0067.106] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\iw", nBufferLength=0x105, lpBuffer=0x31de8c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\iw", lpFilePart=0x0) returned 0x92 [0067.106] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\iw\\", nBufferLength=0x105, lpBuffer=0x31de60, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\iw\\", lpFilePart=0x0) returned 0x93 [0067.106] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\iw\\*", lpFindFileData=0x31e0ac | out: lpFindFileData=0x31e0ac*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x834aeab0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x834b11c0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x834b11c0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x381d80 [0067.107] FindNextFileW (in: hFindFile=0x381d80, lpFindFileData=0x31e0bc | out: lpFindFileData=0x31e0bc*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x834aeab0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x834b11c0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x834b11c0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0067.107] FindClose (in: hFindFile=0x381d80 | out: hFindFile=0x381d80) returned 1 [0067.107] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e344) returned 1 [0067.107] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e350) returned 1 [0067.107] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e384) returned 1 [0067.107] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\iw", nBufferLength=0x105, lpBuffer=0x31de8c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\iw", lpFilePart=0x0) returned 0x92 [0067.107] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\iw\\", nBufferLength=0x105, lpBuffer=0x31de60, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\iw\\", lpFilePart=0x0) returned 0x93 [0067.107] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\iw\\*", lpFindFileData=0x31e0ac | out: lpFindFileData=0x31e0ac*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x834aeab0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x834b11c0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x834b11c0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x381d80 [0067.108] FindClose (in: hFindFile=0x381d80 | out: hFindFile=0x381d80) returned 1 [0067.108] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e344) returned 1 [0067.108] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e350) returned 1 [0067.108] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e384) returned 1 [0067.108] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\ja", nBufferLength=0x105, lpBuffer=0x31de8c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\ja", lpFilePart=0x0) returned 0x92 [0067.108] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\ja\\", nBufferLength=0x105, lpBuffer=0x31de60, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\ja\\", lpFilePart=0x0) returned 0x93 [0067.108] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\ja\\*", lpFindFileData=0x31e0ac | out: lpFindFileData=0x31e0ac*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x834b86f0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x834bae00, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x834bae00, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x381d80 [0067.109] FindClose (in: hFindFile=0x381d80 | out: hFindFile=0x381d80) returned 1 [0067.109] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e344) returned 1 [0067.109] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e350) returned 1 [0067.109] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e384) returned 1 [0067.109] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\ja", nBufferLength=0x105, lpBuffer=0x31de8c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\ja", lpFilePart=0x0) returned 0x92 [0067.109] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\ja\\", nBufferLength=0x105, lpBuffer=0x31de60, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\ja\\", lpFilePart=0x0) returned 0x93 [0067.109] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\ja\\*", lpFindFileData=0x31e0ac | out: lpFindFileData=0x31e0ac*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x834b86f0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x834bae00, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x834bae00, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x381d80 [0067.109] FindClose (in: hFindFile=0x381d80 | out: hFindFile=0x381d80) returned 1 [0067.109] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e344) returned 1 [0067.109] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e350) returned 1 [0067.109] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e384) returned 1 [0067.109] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\kn", nBufferLength=0x105, lpBuffer=0x31de8c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\kn", lpFilePart=0x0) returned 0x92 [0067.109] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\kn\\", nBufferLength=0x105, lpBuffer=0x31de60, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\kn\\", lpFilePart=0x0) returned 0x93 [0067.109] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\kn\\*", lpFindFileData=0x31e0ac | out: lpFindFileData=0x31e0ac*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x834c4a40, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x834c7150, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x834c7150, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x381d80 [0067.110] FindClose (in: hFindFile=0x381d80 | out: hFindFile=0x381d80) returned 1 [0067.110] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e344) returned 1 [0067.110] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e350) returned 1 [0067.110] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e384) returned 1 [0067.110] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\kn", nBufferLength=0x105, lpBuffer=0x31de8c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\kn", lpFilePart=0x0) returned 0x92 [0067.110] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\kn\\", nBufferLength=0x105, lpBuffer=0x31de60, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\kn\\", lpFilePart=0x0) returned 0x93 [0067.110] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\kn\\*", lpFindFileData=0x31e0ac | out: lpFindFileData=0x31e0ac*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x834c4a40, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x834c7150, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x834c7150, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x381d80 [0067.110] FindClose (in: hFindFile=0x381d80 | out: hFindFile=0x381d80) returned 1 [0067.110] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e344) returned 1 [0067.110] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e350) returned 1 [0067.110] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e384) returned 1 [0067.110] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\ko", nBufferLength=0x105, lpBuffer=0x31de8c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\ko", lpFilePart=0x0) returned 0x92 [0067.110] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\ko\\", nBufferLength=0x105, lpBuffer=0x31de60, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\ko\\", lpFilePart=0x0) returned 0x93 [0067.110] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\ko\\*", lpFindFileData=0x31e0ac | out: lpFindFileData=0x31e0ac*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x834cbf70, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x834ce680, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x834ce680, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x381d80 [0067.111] FindClose (in: hFindFile=0x381d80 | out: hFindFile=0x381d80) returned 1 [0067.111] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e344) returned 1 [0067.111] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e350) returned 1 [0067.111] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e384) returned 1 [0067.111] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\ko", nBufferLength=0x105, lpBuffer=0x31de8c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\ko", lpFilePart=0x0) returned 0x92 [0067.111] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\ko\\", nBufferLength=0x105, lpBuffer=0x31de60, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\ko\\", lpFilePart=0x0) returned 0x93 [0067.112] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\ko\\*", lpFindFileData=0x31e0ac | out: lpFindFileData=0x31e0ac*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x834cbf70, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x834ce680, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x834ce680, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x381d80 [0067.112] FindClose (in: hFindFile=0x381d80 | out: hFindFile=0x381d80) returned 1 [0067.112] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e344) returned 1 [0067.112] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e350) returned 1 [0067.112] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e384) returned 1 [0067.112] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\lt", nBufferLength=0x105, lpBuffer=0x31de8c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\lt", lpFilePart=0x0) returned 0x92 [0067.112] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\lt\\", nBufferLength=0x105, lpBuffer=0x31de60, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\lt\\", lpFilePart=0x0) returned 0x93 [0067.112] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\lt\\*", lpFindFileData=0x31e0ac | out: lpFindFileData=0x31e0ac*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x834d34a0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x834d5bb0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x834d5bb0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x381d80 [0067.112] FindClose (in: hFindFile=0x381d80 | out: hFindFile=0x381d80) returned 1 [0067.112] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e344) returned 1 [0067.112] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e350) returned 1 [0067.112] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e384) returned 1 [0067.112] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\lt", nBufferLength=0x105, lpBuffer=0x31de8c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\lt", lpFilePart=0x0) returned 0x92 [0067.112] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\lt\\", nBufferLength=0x105, lpBuffer=0x31de60, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\lt\\", lpFilePart=0x0) returned 0x93 [0067.112] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\lt\\*", lpFindFileData=0x31e0ac | out: lpFindFileData=0x31e0ac*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x834d34a0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x834d5bb0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x834d5bb0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x381d80 [0067.113] FindClose (in: hFindFile=0x381d80 | out: hFindFile=0x381d80) returned 1 [0067.113] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e344) returned 1 [0067.113] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e350) returned 1 [0067.113] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e384) returned 1 [0067.113] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\lv", nBufferLength=0x105, lpBuffer=0x31de8c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\lv", lpFilePart=0x0) returned 0x92 [0067.113] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\lv\\", nBufferLength=0x105, lpBuffer=0x31de60, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\lv\\", lpFilePart=0x0) returned 0x93 [0067.113] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\lv\\*", lpFindFileData=0x31e0ac | out: lpFindFileData=0x31e0ac*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x834da9d0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x834dd0e0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x834dd0e0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x381d80 [0067.116] FindClose (in: hFindFile=0x381d80 | out: hFindFile=0x381d80) returned 1 [0067.116] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e344) returned 1 [0067.116] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e350) returned 1 [0067.116] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e384) returned 1 [0067.116] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\lv", nBufferLength=0x105, lpBuffer=0x31de8c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\lv", lpFilePart=0x0) returned 0x92 [0067.116] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\lv\\", nBufferLength=0x105, lpBuffer=0x31de60, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\lv\\", lpFilePart=0x0) returned 0x93 [0067.116] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\lv\\*", lpFindFileData=0x31e0ac | out: lpFindFileData=0x31e0ac*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x834da9d0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x834dd0e0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x834dd0e0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x381d80 [0067.116] FindClose (in: hFindFile=0x381d80 | out: hFindFile=0x381d80) returned 1 [0067.116] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e344) returned 1 [0067.117] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e350) returned 1 [0067.117] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e384) returned 1 [0067.117] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\ml", nBufferLength=0x105, lpBuffer=0x31de8c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\ml", lpFilePart=0x0) returned 0x92 [0067.117] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\ml\\", nBufferLength=0x105, lpBuffer=0x31de60, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\ml\\", lpFilePart=0x0) returned 0x93 [0067.117] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\ml\\*", lpFindFileData=0x31e0ac | out: lpFindFileData=0x31e0ac*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x834e9430, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x834ebb40, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x834ebb40, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x381d80 [0067.117] FindClose (in: hFindFile=0x381d80 | out: hFindFile=0x381d80) returned 1 [0067.117] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e344) returned 1 [0067.117] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e350) returned 1 [0067.117] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e384) returned 1 [0067.117] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\ml", nBufferLength=0x105, lpBuffer=0x31de8c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\ml", lpFilePart=0x0) returned 0x92 [0067.117] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\ml\\", nBufferLength=0x105, lpBuffer=0x31de60, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\ml\\", lpFilePart=0x0) returned 0x93 [0067.117] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\ml\\*", lpFindFileData=0x31e0ac | out: lpFindFileData=0x31e0ac*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x834e9430, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x834ebb40, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x834ebb40, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x381d80 [0067.117] FindClose (in: hFindFile=0x381d80 | out: hFindFile=0x381d80) returned 1 [0067.117] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e344) returned 1 [0067.117] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e350) returned 1 [0067.117] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e384) returned 1 [0067.117] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\mr", nBufferLength=0x105, lpBuffer=0x31de8c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\mr", lpFilePart=0x0) returned 0x92 [0067.118] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\mr\\", nBufferLength=0x105, lpBuffer=0x31de60, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\mr\\", lpFilePart=0x0) returned 0x93 [0067.118] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\mr\\*", lpFindFileData=0x31e0ac | out: lpFindFileData=0x31e0ac*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x834f0960, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x834f3070, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x834f3070, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x381d80 [0067.118] FindClose (in: hFindFile=0x381d80 | out: hFindFile=0x381d80) returned 1 [0067.118] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e344) returned 1 [0067.118] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e350) returned 1 [0067.119] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e384) returned 1 [0067.119] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\mr", nBufferLength=0x105, lpBuffer=0x31de8c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\mr", lpFilePart=0x0) returned 0x92 [0067.119] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\mr\\", nBufferLength=0x105, lpBuffer=0x31de60, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\mr\\", lpFilePart=0x0) returned 0x93 [0067.119] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\mr\\*", lpFindFileData=0x31e0ac | out: lpFindFileData=0x31e0ac*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x834f0960, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x834f3070, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x834f3070, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x381d80 [0067.119] FindClose (in: hFindFile=0x381d80 | out: hFindFile=0x381d80) returned 1 [0067.119] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e344) returned 1 [0067.119] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e350) returned 1 [0067.119] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e384) returned 1 [0067.119] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\ms", nBufferLength=0x105, lpBuffer=0x31de8c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\ms", lpFilePart=0x0) returned 0x92 [0067.119] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\ms\\", nBufferLength=0x105, lpBuffer=0x31de60, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\ms\\", lpFilePart=0x0) returned 0x93 [0067.119] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\ms\\*", lpFindFileData=0x31e0ac | out: lpFindFileData=0x31e0ac*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x834fccb0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x834ff3c0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x834ff3c0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x381d80 [0067.119] FindClose (in: hFindFile=0x381d80 | out: hFindFile=0x381d80) returned 1 [0067.119] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e344) returned 1 [0067.119] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e350) returned 1 [0067.119] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e384) returned 1 [0067.119] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\ms", nBufferLength=0x105, lpBuffer=0x31de8c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\ms", lpFilePart=0x0) returned 0x92 [0067.119] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\ms\\", nBufferLength=0x105, lpBuffer=0x31de60, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\ms\\", lpFilePart=0x0) returned 0x93 [0067.120] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\ms\\*", lpFindFileData=0x31e0ac | out: lpFindFileData=0x31e0ac*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x834fccb0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x834ff3c0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x834ff3c0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x381d80 [0067.120] FindClose (in: hFindFile=0x381d80 | out: hFindFile=0x381d80) returned 1 [0067.120] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e344) returned 1 [0067.120] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e350) returned 1 [0067.120] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e384) returned 1 [0067.120] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\nb", nBufferLength=0x105, lpBuffer=0x31de8c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\nb", lpFilePart=0x0) returned 0x92 [0067.120] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\nb\\", nBufferLength=0x105, lpBuffer=0x31de60, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\nb\\", lpFilePart=0x0) returned 0x93 [0067.120] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\nb\\*", lpFindFileData=0x31e0ac | out: lpFindFileData=0x31e0ac*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x835041e0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x835068f0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x835068f0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x381d80 [0067.121] FindClose (in: hFindFile=0x381d80 | out: hFindFile=0x381d80) returned 1 [0067.121] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e344) returned 1 [0067.121] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e350) returned 1 [0067.121] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e384) returned 1 [0067.121] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\nb", nBufferLength=0x105, lpBuffer=0x31de8c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\nb", lpFilePart=0x0) returned 0x92 [0067.121] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\nb\\", nBufferLength=0x105, lpBuffer=0x31de60, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\nb\\", lpFilePart=0x0) returned 0x93 [0067.121] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\nb\\*", lpFindFileData=0x31e0ac | out: lpFindFileData=0x31e0ac*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x835041e0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x835068f0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x835068f0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x381d80 [0067.121] FindClose (in: hFindFile=0x381d80 | out: hFindFile=0x381d80) returned 1 [0067.121] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e344) returned 1 [0067.121] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e350) returned 1 [0067.121] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e384) returned 1 [0067.121] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\nl", nBufferLength=0x105, lpBuffer=0x31de8c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\nl", lpFilePart=0x0) returned 0x92 [0067.121] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\nl\\", nBufferLength=0x105, lpBuffer=0x31de60, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\nl\\", lpFilePart=0x0) returned 0x93 [0067.121] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\nl\\*", lpFindFileData=0x31e0ac | out: lpFindFileData=0x31e0ac*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x835794e0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x8357bbf0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x8357bbf0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x381d80 [0067.122] FindClose (in: hFindFile=0x381d80 | out: hFindFile=0x381d80) returned 1 [0067.122] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e344) returned 1 [0067.122] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e350) returned 1 [0067.122] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e384) returned 1 [0067.122] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\nl", nBufferLength=0x105, lpBuffer=0x31de8c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\nl", lpFilePart=0x0) returned 0x92 [0067.122] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\nl\\", nBufferLength=0x105, lpBuffer=0x31de60, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\nl\\", lpFilePart=0x0) returned 0x93 [0067.122] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\nl\\*", lpFindFileData=0x31e0ac | out: lpFindFileData=0x31e0ac*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x835794e0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x8357bbf0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x8357bbf0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x381d80 [0067.122] FindClose (in: hFindFile=0x381d80 | out: hFindFile=0x381d80) returned 1 [0067.122] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e344) returned 1 [0067.122] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e350) returned 1 [0067.122] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e384) returned 1 [0067.122] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\pl", nBufferLength=0x105, lpBuffer=0x31de8c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\pl", lpFilePart=0x0) returned 0x92 [0067.122] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\pl\\", nBufferLength=0x105, lpBuffer=0x31de60, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\pl\\", lpFilePart=0x0) returned 0x93 [0067.122] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\pl\\*", lpFindFileData=0x31e0ac | out: lpFindFileData=0x31e0ac*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x83580a10, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x83583120, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x83583120, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x381d80 [0067.123] FindClose (in: hFindFile=0x381d80 | out: hFindFile=0x381d80) returned 1 [0067.123] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e344) returned 1 [0067.123] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e350) returned 1 [0067.123] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e384) returned 1 [0067.123] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\pl", nBufferLength=0x105, lpBuffer=0x31de8c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\pl", lpFilePart=0x0) returned 0x92 [0067.123] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\pl\\", nBufferLength=0x105, lpBuffer=0x31de60, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\pl\\", lpFilePart=0x0) returned 0x93 [0067.123] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\pl\\*", lpFindFileData=0x31e0ac | out: lpFindFileData=0x31e0ac*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x83580a10, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x83583120, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x83583120, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x381d80 [0067.123] FindClose (in: hFindFile=0x381d80 | out: hFindFile=0x381d80) returned 1 [0067.123] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e344) returned 1 [0067.123] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e350) returned 1 [0067.123] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e384) returned 1 [0067.124] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\pt", nBufferLength=0x105, lpBuffer=0x31de8c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\pt", lpFilePart=0x0) returned 0x92 [0067.124] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\pt\\", nBufferLength=0x105, lpBuffer=0x31de60, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\pt\\", lpFilePart=0x0) returned 0x93 [0067.124] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\pt\\*", lpFindFileData=0x31e0ac | out: lpFindFileData=0x31e0ac*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x8358f470, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x8359b7c0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x8359b7c0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x381d80 [0067.124] FindClose (in: hFindFile=0x381d80 | out: hFindFile=0x381d80) returned 1 [0067.124] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e344) returned 1 [0067.124] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e350) returned 1 [0067.124] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e384) returned 1 [0067.124] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\pt", nBufferLength=0x105, lpBuffer=0x31de8c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\pt", lpFilePart=0x0) returned 0x92 [0067.124] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\pt\\", nBufferLength=0x105, lpBuffer=0x31de60, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\pt\\", lpFilePart=0x0) returned 0x93 [0067.124] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\pt\\*", lpFindFileData=0x31e0ac | out: lpFindFileData=0x31e0ac*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x8358f470, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x8359b7c0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x8359b7c0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x381d80 [0067.124] FindClose (in: hFindFile=0x381d80 | out: hFindFile=0x381d80) returned 1 [0067.124] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e344) returned 1 [0067.124] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e350) returned 1 [0067.124] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e384) returned 1 [0067.124] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\pt_BR", nBufferLength=0x105, lpBuffer=0x31de8c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\pt_BR", lpFilePart=0x0) returned 0x95 [0067.124] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\pt_BR\\", nBufferLength=0x105, lpBuffer=0x31de60, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\pt_BR\\", lpFilePart=0x0) returned 0x96 [0067.124] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\pt_BR\\*", lpFindFileData=0x31e0ac | out: lpFindFileData=0x31e0ac*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x835969a0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x835a05e0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x835a05e0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x381d80 [0067.125] FindClose (in: hFindFile=0x381d80 | out: hFindFile=0x381d80) returned 1 [0067.125] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e344) returned 1 [0067.125] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e350) returned 1 [0067.125] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e384) returned 1 [0067.125] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\pt_BR", nBufferLength=0x105, lpBuffer=0x31de8c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\pt_BR", lpFilePart=0x0) returned 0x95 [0067.125] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\pt_BR\\", nBufferLength=0x105, lpBuffer=0x31de60, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\pt_BR\\", lpFilePart=0x0) returned 0x96 [0067.126] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\pt_BR\\*", lpFindFileData=0x31e0ac | out: lpFindFileData=0x31e0ac*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x835969a0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x835a05e0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x835a05e0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x381d80 [0067.126] FindClose (in: hFindFile=0x381d80 | out: hFindFile=0x381d80) returned 1 [0067.126] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e344) returned 1 [0067.126] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e350) returned 1 [0067.126] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e384) returned 1 [0067.126] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\pt_PT", nBufferLength=0x105, lpBuffer=0x31de8c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\pt_PT", lpFilePart=0x0) returned 0x95 [0067.126] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\pt_PT\\", nBufferLength=0x105, lpBuffer=0x31de60, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\pt_PT\\", lpFilePart=0x0) returned 0x96 [0067.126] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\pt_PT\\*", lpFindFileData=0x31e0ac | out: lpFindFileData=0x31e0ac*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x835990b0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x835a5400, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x835a5400, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x381d80 [0067.126] FindClose (in: hFindFile=0x381d80 | out: hFindFile=0x381d80) returned 1 [0067.126] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e344) returned 1 [0067.126] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e350) returned 1 [0067.126] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e384) returned 1 [0067.126] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\pt_PT", nBufferLength=0x105, lpBuffer=0x31de8c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\pt_PT", lpFilePart=0x0) returned 0x95 [0067.126] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\pt_PT\\", nBufferLength=0x105, lpBuffer=0x31de60, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\pt_PT\\", lpFilePart=0x0) returned 0x96 [0067.126] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\pt_PT\\*", lpFindFileData=0x31e0ac | out: lpFindFileData=0x31e0ac*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x835990b0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x835a5400, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x835a5400, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x381d80 [0067.127] FindClose (in: hFindFile=0x381d80 | out: hFindFile=0x381d80) returned 1 [0067.127] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e344) returned 1 [0067.127] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e350) returned 1 [0067.127] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e384) returned 1 [0067.127] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\ro", nBufferLength=0x105, lpBuffer=0x31de8c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\ro", lpFilePart=0x0) returned 0x92 [0067.127] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\ro\\", nBufferLength=0x105, lpBuffer=0x31de60, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\ro\\", lpFilePart=0x0) returned 0x93 [0067.127] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\ro\\*", lpFindFileData=0x31e0ac | out: lpFindFileData=0x31e0ac*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x835aa220, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x835b1750, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x835b1750, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x381d80 [0067.128] FindClose (in: hFindFile=0x381d80 | out: hFindFile=0x381d80) returned 1 [0067.128] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e344) returned 1 [0067.128] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e350) returned 1 [0067.128] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e384) returned 1 [0067.128] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\ro", nBufferLength=0x105, lpBuffer=0x31de8c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\ro", lpFilePart=0x0) returned 0x92 [0067.128] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\ro\\", nBufferLength=0x105, lpBuffer=0x31de60, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\ro\\", lpFilePart=0x0) returned 0x93 [0067.128] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\ro\\*", lpFindFileData=0x31e0ac | out: lpFindFileData=0x31e0ac*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x835aa220, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x835b1750, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x835b1750, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x381d80 [0067.128] FindClose (in: hFindFile=0x381d80 | out: hFindFile=0x381d80) returned 1 [0067.128] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e344) returned 1 [0067.128] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\ru", nBufferLength=0x105, lpBuffer=0x31de8c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\ru", lpFilePart=0x0) returned 0x92 [0067.128] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\ru\\", nBufferLength=0x105, lpBuffer=0x31de60, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\ru\\", lpFilePart=0x0) returned 0x93 [0067.128] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\ru\\*", lpFindFileData=0x31e0ac | out: lpFindFileData=0x31e0ac*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x835b6570, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x835b8c80, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x835b8c80, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x381d80 [0067.129] FindClose (in: hFindFile=0x381d80 | out: hFindFile=0x381d80) returned 1 [0067.129] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\ru", nBufferLength=0x105, lpBuffer=0x31de8c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\ru", lpFilePart=0x0) returned 0x92 [0067.129] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\ru\\", nBufferLength=0x105, lpBuffer=0x31de60, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\ru\\", lpFilePart=0x0) returned 0x93 [0067.129] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\ru\\*", lpFindFileData=0x31e0ac | out: lpFindFileData=0x31e0ac*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x835b6570, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x835b8c80, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x835b8c80, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x381d80 [0067.129] FindClose (in: hFindFile=0x381d80 | out: hFindFile=0x381d80) returned 1 [0067.129] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\sk", nBufferLength=0x105, lpBuffer=0x31de8c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\sk", lpFilePart=0x0) returned 0x92 [0067.129] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\sk\\", nBufferLength=0x105, lpBuffer=0x31de60, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\sk\\", lpFilePart=0x0) returned 0x93 [0067.129] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\sk\\*", lpFindFileData=0x31e0ac | out: lpFindFileData=0x31e0ac*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x835c01b0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x835c01b0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x835c01b0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x381d80 [0067.130] FindClose (in: hFindFile=0x381d80 | out: hFindFile=0x381d80) returned 1 [0067.130] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\sk", nBufferLength=0x105, lpBuffer=0x31de8c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\sk", lpFilePart=0x0) returned 0x92 [0067.130] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\sk\\", nBufferLength=0x105, lpBuffer=0x31de60, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\sk\\", lpFilePart=0x0) returned 0x93 [0067.130] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\sk\\*", lpFindFileData=0x31e0ac | out: lpFindFileData=0x31e0ac*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x835c01b0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x835c01b0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x835c01b0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x381d80 [0067.130] FindClose (in: hFindFile=0x381d80 | out: hFindFile=0x381d80) returned 1 [0067.130] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\sl", nBufferLength=0x105, lpBuffer=0x31de8c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\sl", lpFilePart=0x0) returned 0x92 [0067.130] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\sl\\", nBufferLength=0x105, lpBuffer=0x31de60, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\sl\\", lpFilePart=0x0) returned 0x93 [0067.130] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\sl\\*", lpFindFileData=0x31e0ac | out: lpFindFileData=0x31e0ac*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x835c4fd0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x835c9df0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x835c9df0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x381d80 [0067.131] FindClose (in: hFindFile=0x381d80 | out: hFindFile=0x381d80) returned 1 [0067.131] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\sl", nBufferLength=0x105, lpBuffer=0x31de8c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\sl", lpFilePart=0x0) returned 0x92 [0067.131] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\sl\\", nBufferLength=0x105, lpBuffer=0x31de60, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\sl\\", lpFilePart=0x0) returned 0x93 [0067.131] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\sl\\*", lpFindFileData=0x31e0ac | out: lpFindFileData=0x31e0ac*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x835c4fd0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x835c9df0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x835c9df0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x381d80 [0067.131] FindClose (in: hFindFile=0x381d80 | out: hFindFile=0x381d80) returned 1 [0067.131] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\sr", nBufferLength=0x105, lpBuffer=0x31de8c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\sr", lpFilePart=0x0) returned 0x92 [0067.131] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\sr\\", nBufferLength=0x105, lpBuffer=0x31de60, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\sr\\", lpFilePart=0x0) returned 0x93 [0067.131] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\sr\\*", lpFindFileData=0x31e0ac | out: lpFindFileData=0x31e0ac*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x835cec10, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x835cec10, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x835cec10, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x381d80 [0067.132] FindClose (in: hFindFile=0x381d80 | out: hFindFile=0x381d80) returned 1 [0067.132] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\sr", nBufferLength=0x105, lpBuffer=0x31de8c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\sr", lpFilePart=0x0) returned 0x92 [0067.132] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\sr\\", nBufferLength=0x105, lpBuffer=0x31de60, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\sr\\", lpFilePart=0x0) returned 0x93 [0067.132] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\sr\\*", lpFindFileData=0x31e0ac | out: lpFindFileData=0x31e0ac*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x835cec10, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x835cec10, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x835cec10, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x381d80 [0067.132] FindClose (in: hFindFile=0x381d80 | out: hFindFile=0x381d80) returned 1 [0067.132] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\sv", nBufferLength=0x105, lpBuffer=0x31de8c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\sv", lpFilePart=0x0) returned 0x92 [0067.132] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\sv\\", nBufferLength=0x105, lpBuffer=0x31de60, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\sv\\", lpFilePart=0x0) returned 0x93 [0067.132] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\sv\\*", lpFindFileData=0x31e0ac | out: lpFindFileData=0x31e0ac*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x835daf60, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x835dd670, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x835dd670, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x381d80 [0067.133] FindClose (in: hFindFile=0x381d80 | out: hFindFile=0x381d80) returned 1 [0067.133] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\sv", nBufferLength=0x105, lpBuffer=0x31de8c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\sv", lpFilePart=0x0) returned 0x92 [0067.133] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\sv\\", nBufferLength=0x105, lpBuffer=0x31de60, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\sv\\", lpFilePart=0x0) returned 0x93 [0067.133] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\sv\\*", lpFindFileData=0x31e0ac | out: lpFindFileData=0x31e0ac*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x835daf60, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x835dd670, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x835dd670, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x381d80 [0067.133] FindClose (in: hFindFile=0x381d80 | out: hFindFile=0x381d80) returned 1 [0067.133] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\sw", nBufferLength=0x105, lpBuffer=0x31de8c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\sw", lpFilePart=0x0) returned 0x92 [0067.133] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\sw\\", nBufferLength=0x105, lpBuffer=0x31de60, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\sw\\", lpFilePart=0x0) returned 0x93 [0067.133] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\sw\\*", lpFindFileData=0x31e0ac | out: lpFindFileData=0x31e0ac*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x835dd670, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x835dfd80, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x835dfd80, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x381d80 [0067.134] FindClose (in: hFindFile=0x381d80 | out: hFindFile=0x381d80) returned 1 [0067.134] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\sw", nBufferLength=0x105, lpBuffer=0x31de8c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\sw", lpFilePart=0x0) returned 0x92 [0067.134] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\sw\\", nBufferLength=0x105, lpBuffer=0x31de60, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\sw\\", lpFilePart=0x0) returned 0x93 [0067.134] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\sw\\*", lpFindFileData=0x31e0ac | out: lpFindFileData=0x31e0ac*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x835dd670, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x835dfd80, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x835dfd80, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x381d80 [0067.134] FindClose (in: hFindFile=0x381d80 | out: hFindFile=0x381d80) returned 1 [0067.134] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\ta", nBufferLength=0x105, lpBuffer=0x31de8c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\ta", lpFilePart=0x0) returned 0x92 [0067.134] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\ta\\", nBufferLength=0x105, lpBuffer=0x31de60, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\ta\\", lpFilePart=0x0) returned 0x93 [0067.134] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\ta\\*", lpFindFileData=0x31e0ac | out: lpFindFileData=0x31e0ac*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x835e4ba0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x835e72b0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x835e72b0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x381d80 [0067.134] FindClose (in: hFindFile=0x381d80 | out: hFindFile=0x381d80) returned 1 [0067.135] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\ta", nBufferLength=0x105, lpBuffer=0x31de8c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\ta", lpFilePart=0x0) returned 0x92 [0067.135] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\ta\\", nBufferLength=0x105, lpBuffer=0x31de60, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\ta\\", lpFilePart=0x0) returned 0x93 [0067.135] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\ta\\*", lpFindFileData=0x31e0ac | out: lpFindFileData=0x31e0ac*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x835e4ba0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x835e72b0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x835e72b0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x381d80 [0067.135] FindClose (in: hFindFile=0x381d80 | out: hFindFile=0x381d80) returned 1 [0067.135] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\te", nBufferLength=0x105, lpBuffer=0x31de8c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\te", lpFilePart=0x0) returned 0x92 [0067.135] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\te\\", nBufferLength=0x105, lpBuffer=0x31de60, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\te\\", lpFilePart=0x0) returned 0x93 [0067.135] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\te\\*", lpFindFileData=0x31e0ac | out: lpFindFileData=0x31e0ac*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x835ec0d0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x835f0ef0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x835f0ef0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x381d80 [0067.136] FindClose (in: hFindFile=0x381d80 | out: hFindFile=0x381d80) returned 1 [0067.136] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\te", nBufferLength=0x105, lpBuffer=0x31de8c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\te", lpFilePart=0x0) returned 0x92 [0067.136] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\te\\", nBufferLength=0x105, lpBuffer=0x31de60, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\te\\", lpFilePart=0x0) returned 0x93 [0067.136] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\te\\*", lpFindFileData=0x31e0ac | out: lpFindFileData=0x31e0ac*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x835ec0d0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x835f0ef0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x835f0ef0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x381d80 [0067.136] FindClose (in: hFindFile=0x381d80 | out: hFindFile=0x381d80) returned 1 [0067.136] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\th", nBufferLength=0x105, lpBuffer=0x31de8c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\th", lpFilePart=0x0) returned 0x92 [0067.136] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\th\\", nBufferLength=0x105, lpBuffer=0x31de60, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\th\\", lpFilePart=0x0) returned 0x93 [0067.136] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\th\\*", lpFindFileData=0x31e0ac | out: lpFindFileData=0x31e0ac*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x835f5d10, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x835f8420, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x835f8420, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x381d80 [0067.136] FindClose (in: hFindFile=0x381d80 | out: hFindFile=0x381d80) returned 1 [0067.136] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\th", nBufferLength=0x105, lpBuffer=0x31de8c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\th", lpFilePart=0x0) returned 0x92 [0067.137] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\th\\", nBufferLength=0x105, lpBuffer=0x31de60, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\th\\", lpFilePart=0x0) returned 0x93 [0067.137] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\th\\*", lpFindFileData=0x31e0ac | out: lpFindFileData=0x31e0ac*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x835f5d10, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x835f8420, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x835f8420, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x381d80 [0067.137] FindClose (in: hFindFile=0x381d80 | out: hFindFile=0x381d80) returned 1 [0067.137] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\tr", nBufferLength=0x105, lpBuffer=0x31de8c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\tr", lpFilePart=0x0) returned 0x92 [0067.137] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\tr\\", nBufferLength=0x105, lpBuffer=0x31de60, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\tr\\", lpFilePart=0x0) returned 0x93 [0067.137] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\tr\\*", lpFindFileData=0x31e0ac | out: lpFindFileData=0x31e0ac*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x835fd240, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x835ff950, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x835ff950, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x381d80 [0067.138] FindClose (in: hFindFile=0x381d80 | out: hFindFile=0x381d80) returned 1 [0067.138] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\tr", nBufferLength=0x105, lpBuffer=0x31de8c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\tr", lpFilePart=0x0) returned 0x92 [0067.138] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\tr\\", nBufferLength=0x105, lpBuffer=0x31de60, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\tr\\", lpFilePart=0x0) returned 0x93 [0067.138] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\tr\\*", lpFindFileData=0x31e0ac | out: lpFindFileData=0x31e0ac*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x835fd240, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x835ff950, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x835ff950, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x381d80 [0067.138] FindClose (in: hFindFile=0x381d80 | out: hFindFile=0x381d80) returned 1 [0067.138] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\uk", nBufferLength=0x105, lpBuffer=0x31de8c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\uk", lpFilePart=0x0) returned 0x92 [0067.138] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\uk\\", nBufferLength=0x105, lpBuffer=0x31de60, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\uk\\", lpFilePart=0x0) returned 0x93 [0067.138] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\uk\\*", lpFindFileData=0x31e0ac | out: lpFindFileData=0x31e0ac*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x8360bca0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x8360e3b0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x8360e3b0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x381d80 [0067.138] FindClose (in: hFindFile=0x381d80 | out: hFindFile=0x381d80) returned 1 [0067.138] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\uk", nBufferLength=0x105, lpBuffer=0x31de8c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\uk", lpFilePart=0x0) returned 0x92 [0067.138] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\uk\\", nBufferLength=0x105, lpBuffer=0x31de60, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\uk\\", lpFilePart=0x0) returned 0x93 [0067.139] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\uk\\*", lpFindFileData=0x31e0ac | out: lpFindFileData=0x31e0ac*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x8360bca0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x8360e3b0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x8360e3b0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x381d80 [0067.139] FindClose (in: hFindFile=0x381d80 | out: hFindFile=0x381d80) returned 1 [0067.139] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\vi", nBufferLength=0x105, lpBuffer=0x31de8c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\vi", lpFilePart=0x0) returned 0x92 [0067.139] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\vi\\", nBufferLength=0x105, lpBuffer=0x31de60, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\vi\\", lpFilePart=0x0) returned 0x93 [0067.139] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\vi\\*", lpFindFileData=0x31e0ac | out: lpFindFileData=0x31e0ac*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x836158e0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x83617ff0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x83617ff0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x381d80 [0067.140] FindClose (in: hFindFile=0x381d80 | out: hFindFile=0x381d80) returned 1 [0067.140] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\vi", nBufferLength=0x105, lpBuffer=0x31de8c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\vi", lpFilePart=0x0) returned 0x92 [0067.140] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\vi\\", nBufferLength=0x105, lpBuffer=0x31de60, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\vi\\", lpFilePart=0x0) returned 0x93 [0067.140] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\vi\\*", lpFindFileData=0x31e0ac | out: lpFindFileData=0x31e0ac*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x836158e0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x83617ff0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x83617ff0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x381d80 [0067.140] FindClose (in: hFindFile=0x381d80 | out: hFindFile=0x381d80) returned 1 [0067.140] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\zh", nBufferLength=0x105, lpBuffer=0x31de8c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\zh", lpFilePart=0x0) returned 0x92 [0067.140] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\zh\\", nBufferLength=0x105, lpBuffer=0x31de60, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\zh\\", lpFilePart=0x0) returned 0x93 [0067.140] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\zh\\*", lpFindFileData=0x31e0ac | out: lpFindFileData=0x31e0ac*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x8361ce10, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x8361f520, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x8361f520, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x381d80 [0067.140] FindClose (in: hFindFile=0x381d80 | out: hFindFile=0x381d80) returned 1 [0067.140] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\zh", nBufferLength=0x105, lpBuffer=0x31de8c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\zh", lpFilePart=0x0) returned 0x92 [0067.140] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\zh\\", nBufferLength=0x105, lpBuffer=0x31de60, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\zh\\", lpFilePart=0x0) returned 0x93 [0067.141] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\zh\\*", lpFindFileData=0x31e0ac | out: lpFindFileData=0x31e0ac*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x8361ce10, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x8361f520, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x8361f520, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x381d80 [0067.141] FindClose (in: hFindFile=0x381d80 | out: hFindFile=0x381d80) returned 1 [0067.141] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\zh_TW", nBufferLength=0x105, lpBuffer=0x31de8c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\zh_TW", lpFilePart=0x0) returned 0x95 [0067.141] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\zh_TW\\", nBufferLength=0x105, lpBuffer=0x31de60, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\zh_TW\\", lpFilePart=0x0) returned 0x96 [0067.141] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\zh_TW\\*", lpFindFileData=0x31e0ac | out: lpFindFileData=0x31e0ac*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x83624340, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x8362b870, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x8362b870, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x381d80 [0067.142] FindClose (in: hFindFile=0x381d80 | out: hFindFile=0x381d80) returned 1 [0067.142] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\zh_TW", nBufferLength=0x105, lpBuffer=0x31de8c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\zh_TW", lpFilePart=0x0) returned 0x95 [0067.142] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\zh_TW\\", nBufferLength=0x105, lpBuffer=0x31de60, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\zh_TW\\", lpFilePart=0x0) returned 0x96 [0067.142] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\zh_TW\\*", lpFindFileData=0x31e0ac | out: lpFindFileData=0x31e0ac*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x83624340, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x8362b870, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x8362b870, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x381d80 [0067.142] FindClose (in: hFindFile=0x381d80 | out: hFindFile=0x381d80) returned 1 [0067.142] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_metadata", nBufferLength=0x105, lpBuffer=0x31df04, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_metadata", lpFilePart=0x0) returned 0x90 [0067.142] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_metadata\\", nBufferLength=0x105, lpBuffer=0x31ded8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_metadata\\", lpFilePart=0x0) returned 0x91 [0067.142] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_metadata\\*", lpFindFileData=0x31e124 | out: lpFindFileData=0x31e124*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x836ddc00, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x839fe880, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x839fe880, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x381d80 [0067.143] FindClose (in: hFindFile=0x381d80 | out: hFindFile=0x381d80) returned 1 [0067.143] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_metadata", nBufferLength=0x105, lpBuffer=0x31df04, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_metadata", lpFilePart=0x0) returned 0x90 [0067.143] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_metadata\\", nBufferLength=0x105, lpBuffer=0x31ded8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_metadata\\", lpFilePart=0x0) returned 0x91 [0067.143] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_metadata\\*", lpFindFileData=0x31e124 | out: lpFindFileData=0x31e124*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x836ddc00, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x839fe880, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x839fe880, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x381d80 [0067.143] FindClose (in: hFindFile=0x381d80 | out: hFindFile=0x381d80) returned 1 [0067.143] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\JumpListIcons", nBufferLength=0x105, lpBuffer=0x31e06c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\JumpListIcons", lpFilePart=0x0) returned 0x59 [0067.143] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\JumpListIcons\\", nBufferLength=0x105, lpBuffer=0x31e040, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\JumpListIcons\\", lpFilePart=0x0) returned 0x5a [0067.143] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\JumpListIcons\\*", lpFindFileData=0x31e28c | out: lpFindFileData=0x31e28c*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x96ec4eb0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x96ec4eb0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x96ec4eb0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x381d80 [0067.144] FindClose (in: hFindFile=0x381d80 | out: hFindFile=0x381d80) returned 1 [0067.144] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\JumpListIcons", nBufferLength=0x105, lpBuffer=0x31e06c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\JumpListIcons", lpFilePart=0x0) returned 0x59 [0067.144] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\JumpListIcons\\", nBufferLength=0x105, lpBuffer=0x31e040, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\JumpListIcons\\", lpFilePart=0x0) returned 0x5a [0067.144] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\JumpListIcons\\*", lpFindFileData=0x31e28c | out: lpFindFileData=0x31e28c*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x96ec4eb0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x96ec4eb0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x96ec4eb0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x381d80 [0067.144] FindClose (in: hFindFile=0x381d80 | out: hFindFile=0x381d80) returned 1 [0067.145] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\JumpListIconsOld", nBufferLength=0x105, lpBuffer=0x31e06c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\JumpListIconsOld", lpFilePart=0x0) returned 0x5c [0067.145] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\JumpListIconsOld\\", nBufferLength=0x105, lpBuffer=0x31e040, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\JumpListIconsOld\\", lpFilePart=0x0) returned 0x5d [0067.145] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\JumpListIconsOld\\*", lpFindFileData=0x31e28c | out: lpFindFileData=0x31e28c*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x85096390, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85096390, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85096390, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x381d80 [0067.145] FindClose (in: hFindFile=0x381d80 | out: hFindFile=0x381d80) returned 1 [0067.145] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\JumpListIconsOld", nBufferLength=0x105, lpBuffer=0x31e06c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\JumpListIconsOld", lpFilePart=0x0) returned 0x5c [0067.145] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\JumpListIconsOld\\", nBufferLength=0x105, lpBuffer=0x31e040, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\JumpListIconsOld\\", lpFilePart=0x0) returned 0x5d [0067.145] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\JumpListIconsOld\\*", lpFindFileData=0x31e28c | out: lpFindFileData=0x31e28c*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x85096390, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85096390, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85096390, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x381d80 [0067.145] FindClose (in: hFindFile=0x381d80 | out: hFindFile=0x381d80) returned 1 [0067.145] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Local Extension Settings", nBufferLength=0x105, lpBuffer=0x31e06c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Local Extension Settings", lpFilePart=0x0) returned 0x64 [0067.145] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Local Extension Settings\\", nBufferLength=0x105, lpBuffer=0x31e040, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Local Extension Settings\\", lpFilePart=0x0) returned 0x65 [0067.145] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Local Extension Settings\\*", lpFindFileData=0x31e28c | out: lpFindFileData=0x31e28c*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x8642cdf0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x8642cdf0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x8642cdf0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x381d80 [0067.146] FindClose (in: hFindFile=0x381d80 | out: hFindFile=0x381d80) returned 1 [0067.146] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Local Extension Settings", nBufferLength=0x105, lpBuffer=0x31e06c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Local Extension Settings", lpFilePart=0x0) returned 0x64 [0067.146] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Local Extension Settings\\", nBufferLength=0x105, lpBuffer=0x31e040, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Local Extension Settings\\", lpFilePart=0x0) returned 0x65 [0067.146] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Local Extension Settings\\*", lpFindFileData=0x31e28c | out: lpFindFileData=0x31e28c*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x8642cdf0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x8642cdf0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x8642cdf0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x381d80 [0067.146] FindClose (in: hFindFile=0x381d80 | out: hFindFile=0x381d80) returned 1 [0067.146] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Local Extension Settings\\ghbmnnjooekpmoecnnnilnnbdlolhkhi", nBufferLength=0x105, lpBuffer=0x31dff4, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Local Extension Settings\\ghbmnnjooekpmoecnnnilnnbdlolhkhi", lpFilePart=0x0) returned 0x85 [0067.146] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Local Extension Settings\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\", nBufferLength=0x105, lpBuffer=0x31dfc8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Local Extension Settings\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\", lpFilePart=0x0) returned 0x86 [0067.146] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Local Extension Settings\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\*", lpFindFileData=0x31e214 | out: lpFindFileData=0x31e214*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x8642cdf0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86513570, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86513570, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x381d80 [0067.148] FindClose (in: hFindFile=0x381d80 | out: hFindFile=0x381d80) returned 1 [0067.148] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Local Extension Settings\\ghbmnnjooekpmoecnnnilnnbdlolhkhi", nBufferLength=0x105, lpBuffer=0x31dff4, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Local Extension Settings\\ghbmnnjooekpmoecnnnilnnbdlolhkhi", lpFilePart=0x0) returned 0x85 [0067.148] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Local Extension Settings\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\", nBufferLength=0x105, lpBuffer=0x31dfc8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Local Extension Settings\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\", lpFilePart=0x0) returned 0x86 [0067.148] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Local Extension Settings\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\*", lpFindFileData=0x31e214 | out: lpFindFileData=0x31e214*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x8642cdf0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86513570, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86513570, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x381d80 [0067.149] FindClose (in: hFindFile=0x381d80 | out: hFindFile=0x381d80) returned 1 [0067.150] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Local Storage", nBufferLength=0x105, lpBuffer=0x31e06c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Local Storage", lpFilePart=0x0) returned 0x59 [0067.150] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Local Storage\\", nBufferLength=0x105, lpBuffer=0x31e040, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Local Storage\\", lpFilePart=0x0) returned 0x5a [0067.150] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Local Storage\\*", lpFindFileData=0x31e28c | out: lpFindFileData=0x31e28c*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x83ede170, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x90191d70, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x90191d70, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x381d80 [0067.151] FindClose (in: hFindFile=0x381d80 | out: hFindFile=0x381d80) returned 1 [0067.152] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Local Storage", nBufferLength=0x105, lpBuffer=0x31e06c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Local Storage", lpFilePart=0x0) returned 0x59 [0067.152] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Local Storage\\", nBufferLength=0x105, lpBuffer=0x31e040, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Local Storage\\", lpFilePart=0x0) returned 0x5a [0067.152] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Local Storage\\*", lpFindFileData=0x31e28c | out: lpFindFileData=0x31e28c*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x83ede170, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x90191d70, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x90191d70, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x381d80 [0067.153] FindClose (in: hFindFile=0x381d80 | out: hFindFile=0x381d80) returned 1 [0067.154] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Sync Extension Settings", nBufferLength=0x105, lpBuffer=0x31e06c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Sync Extension Settings", lpFilePart=0x0) returned 0x63 [0067.154] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Sync Extension Settings\\", nBufferLength=0x105, lpBuffer=0x31e040, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Sync Extension Settings\\", lpFilePart=0x0) returned 0x64 [0067.154] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Sync Extension Settings\\*", lpFindFileData=0x31e28c | out: lpFindFileData=0x31e28c*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x84251e10, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x84251e10, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x84251e10, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x381d80 [0067.155] FindClose (in: hFindFile=0x381d80 | out: hFindFile=0x381d80) returned 1 [0067.167] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\*", lpFindFileData=0x31e46c | out: lpFindFileData=0x31e46c*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x28d257a0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x962f4540, ftLastAccessTime.dwHighDateTime=0x1d305ee, ftLastWriteTime.dwLowDateTime=0x962f4540, ftLastWriteTime.dwHighDateTime=0x1d305ee, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x381d80 [0067.168] FindNextFileW (in: hFindFile=0x381d80, lpFindFileData=0x31e47c | out: lpFindFileData=0x31e47c*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x28d257a0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x962f4540, ftLastAccessTime.dwHighDateTime=0x1d305ee, ftLastWriteTime.dwLowDateTime=0x962f4540, ftLastWriteTime.dwHighDateTime=0x1d305ee, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0067.168] FindNextFileW (in: hFindFile=0x381d80, lpFindFileData=0x31e47c | out: lpFindFileData=0x31e47c*(dwFileAttributes=0x2014, ftCreationTime.dwLowDateTime=0x28d257a0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28d257a0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xea43994d, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Credentials", cAlternateFileName="CREDEN~1")) returned 1 [0067.168] FindNextFileW (in: hFindFile=0x381d80, lpFindFileData=0x31e47c | out: lpFindFileData=0x31e47c*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x32121370, ftCreationTime.dwHighDateTime=0x1d2fa9b, ftLastAccessTime.dwLowDateTime=0x32121370, ftLastAccessTime.dwHighDateTime=0x1d2fa9b, ftLastWriteTime.dwLowDateTime=0x32121370, ftLastWriteTime.dwHighDateTime=0x1d2fa9b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Event Viewer", cAlternateFileName="EVENTV~1")) returned 1 [0067.168] FindNextFileW (in: hFindFile=0x381d80, lpFindFileData=0x31e47c | out: lpFindFileData=0x31e47c*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x28d257a0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28f14980, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xff0498b1, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Feeds", cAlternateFileName="")) returned 1 [0067.168] FindNextFileW (in: hFindFile=0x381d80, lpFindFileData=0x31e47c | out: lpFindFileData=0x31e47c*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0x28d257a0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28f3aae0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xfea09ee5, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Feeds Cache", cAlternateFileName="FEEDSC~1")) returned 1 [0067.168] FindNextFileW (in: hFindFile=0x381d80, lpFindFileData=0x31e47c | out: lpFindFileData=0x31e47c*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x3d1d6940, ftCreationTime.dwHighDateTime=0x1d2fad7, ftLastAccessTime.dwLowDateTime=0x3d1d6940, ftLastAccessTime.dwHighDateTime=0x1d2fad7, ftLastWriteTime.dwLowDateTime=0x3d1d6940, ftLastWriteTime.dwHighDateTime=0x1d2fad7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="FORMS", cAlternateFileName="")) returned 1 [0067.168] FindNextFileW (in: hFindFile=0x381d80, lpFindFileData=0x31e47c | out: lpFindFileData=0x31e47c*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xcd754c00, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0xcd754c00, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0xcd754c00, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="IME12", cAlternateFileName="")) returned 1 [0067.169] FindNextFileW (in: hFindFile=0x381d80, lpFindFileData=0x31e47c | out: lpFindFileData=0x31e47c*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xcd72eaa0, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0xcd72eaa0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0xcd72eaa0, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="IMJP12", cAlternateFileName="")) returned 1 [0067.169] FindNextFileW (in: hFindFile=0x381d80, lpFindFileData=0x31e47c | out: lpFindFileData=0x31e47c*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xcd72eaa0, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0xcd72eaa0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0xcd72eaa0, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="IMJP8_1", cAlternateFileName="")) returned 1 [0067.169] FindNextFileW (in: hFindFile=0x381d80, lpFindFileData=0x31e47c | out: lpFindFileData=0x31e47c*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xcd72eaa0, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0xcd72eaa0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0xcd72eaa0, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="IMJP9_0", cAlternateFileName="")) returned 1 [0067.169] FindNextFileW (in: hFindFile=0x381d80, lpFindFileData=0x31e47c | out: lpFindFileData=0x31e47c*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x28d257a0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x1d705b70, ftLastAccessTime.dwHighDateTime=0x1d35d06, ftLastWriteTime.dwLowDateTime=0x1d705b70, ftLastWriteTime.dwHighDateTime=0x1d35d06, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Internet Explorer", cAlternateFileName="INTERN~1")) returned 1 [0067.169] FindNextFileW (in: hFindFile=0x381d80, lpFindFileData=0x31e47c | out: lpFindFileData=0x31e47c*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x28d257a0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0xf7f22040, ftLastAccessTime.dwHighDateTime=0x1d3373f, ftLastWriteTime.dwLowDateTime=0xf7f22040, ftLastWriteTime.dwHighDateTime=0x1d3373f, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Media Player", cAlternateFileName="MEDIAP~1")) returned 1 [0067.169] FindNextFileW (in: hFindFile=0x381d80, lpFindFileData=0x31e47c | out: lpFindFileData=0x31e47c*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x4f780d90, ftCreationTime.dwHighDateTime=0x1d2dda2, ftLastAccessTime.dwLowDateTime=0x4bb72310, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0x4bb72310, ftLastWriteTime.dwHighDateTime=0x1d2dda4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Office", cAlternateFileName="")) returned 1 [0067.170] FindNextFileW (in: hFindFile=0x381d80, lpFindFileData=0x31e47c | out: lpFindFileData=0x31e47c*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x3dc40980, ftCreationTime.dwHighDateTime=0x1d2fad7, ftLastAccessTime.dwLowDateTime=0x8ae80e80, ftLastAccessTime.dwHighDateTime=0x1d5e82a, ftLastWriteTime.dwLowDateTime=0x8ae80e80, ftLastWriteTime.dwHighDateTime=0x1d5e82a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Outlook", cAlternateFileName="")) returned 1 [0067.170] FindNextFileW (in: hFindFile=0x381d80, lpFindFileData=0x31e47c | out: lpFindFileData=0x31e47c*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x4bb4c1b0, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0x4bb4c1b0, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0x4bb4c1b0, ftLastWriteTime.dwHighDateTime=0x1d2dda4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Publisher", cAlternateFileName="PUBLIS~1")) returned 1 [0067.170] FindNextFileW (in: hFindFile=0x381d80, lpFindFileData=0x31e47c | out: lpFindFileData=0x31e47c*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x3abef650, ftCreationTime.dwHighDateTime=0x1d2fa9b, ftLastAccessTime.dwLowDateTime=0x3abef650, ftLastAccessTime.dwHighDateTime=0x1d2fa9b, ftLastWriteTime.dwLowDateTime=0x3abef650, ftLastWriteTime.dwHighDateTime=0x1d2fa9b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="TaskSchedulerConfig", cAlternateFileName="TASKSC~1")) returned 1 [0067.170] FindNextFileW (in: hFindFile=0x381d80, lpFindFileData=0x31e47c | out: lpFindFileData=0x31e47c*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x962f4540, ftCreationTime.dwHighDateTime=0x1d305ee, ftLastAccessTime.dwLowDateTime=0x5ef99320, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0x5ef99320, ftLastWriteTime.dwHighDateTime=0x1d305f1, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Visio", cAlternateFileName="")) returned 1 [0067.170] FindNextFileW (in: hFindFile=0x381d80, lpFindFileData=0x31e47c | out: lpFindFileData=0x31e47c*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x28d257a0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0xd8d1fc80, ftLastAccessTime.dwHighDateTime=0x1d3373f, ftLastWriteTime.dwLowDateTime=0xd8d1fc80, ftLastWriteTime.dwHighDateTime=0x1d3373f, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Windows", cAlternateFileName="")) returned 1 [0067.170] FindNextFileW (in: hFindFile=0x381d80, lpFindFileData=0x31e47c | out: lpFindFileData=0x31e47c*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x28d257a0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x2c881c40, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x2c881c40, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Windows Mail", cAlternateFileName="WINDOW~3")) returned 1 [0067.170] FindNextFileW (in: hFindFile=0x381d80, lpFindFileData=0x31e47c | out: lpFindFileData=0x31e47c*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x28d257a0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28d257a0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xf7de167e, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Windows Media", cAlternateFileName="WINDOW~2")) returned 1 [0067.171] FindNextFileW (in: hFindFile=0x381d80, lpFindFileData=0x31e47c | out: lpFindFileData=0x31e47c*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x28d257a0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28de3e80, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x184eadb, ftLastWriteTime.dwHighDateTime=0x1cb8927, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Windows Sidebar", cAlternateFileName="WINDOW~1")) returned 1 [0067.171] FindNextFileW (in: hFindFile=0x381d80, lpFindFileData=0x31e47c | out: lpFindFileData=0x31e47c*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x28d257a0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28de3e80, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x184eadb, ftLastWriteTime.dwHighDateTime=0x1cb8927, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Windows Sidebar", cAlternateFileName="WINDOW~1")) returned 0 [0067.171] FindClose (in: hFindFile=0x381d80 | out: hFindFile=0x381d80) returned 1 [0067.171] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\*", lpFindFileData=0x31e46c | out: lpFindFileData=0x31e46c*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x28d257a0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x962f4540, ftLastAccessTime.dwHighDateTime=0x1d305ee, ftLastWriteTime.dwLowDateTime=0x962f4540, ftLastWriteTime.dwHighDateTime=0x1d305ee, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x381d80 [0067.171] FindNextFileW (in: hFindFile=0x381d80, lpFindFileData=0x31e47c | out: lpFindFileData=0x31e47c*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x28d257a0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x962f4540, ftLastAccessTime.dwHighDateTime=0x1d305ee, ftLastWriteTime.dwLowDateTime=0x962f4540, ftLastWriteTime.dwHighDateTime=0x1d305ee, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0067.172] FindNextFileW (in: hFindFile=0x381d80, lpFindFileData=0x31e47c | out: lpFindFileData=0x31e47c*(dwFileAttributes=0x2014, ftCreationTime.dwLowDateTime=0x28d257a0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28d257a0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xea43994d, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Credentials", cAlternateFileName="CREDEN~1")) returned 1 [0067.172] FindNextFileW (in: hFindFile=0x381d80, lpFindFileData=0x31e47c | out: lpFindFileData=0x31e47c*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x32121370, ftCreationTime.dwHighDateTime=0x1d2fa9b, ftLastAccessTime.dwLowDateTime=0x32121370, ftLastAccessTime.dwHighDateTime=0x1d2fa9b, ftLastWriteTime.dwLowDateTime=0x32121370, ftLastWriteTime.dwHighDateTime=0x1d2fa9b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Event Viewer", cAlternateFileName="EVENTV~1")) returned 1 [0067.172] FindNextFileW (in: hFindFile=0x381d80, lpFindFileData=0x31e47c | out: lpFindFileData=0x31e47c*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x28d257a0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28f14980, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xff0498b1, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Feeds", cAlternateFileName="")) returned 1 [0067.172] FindNextFileW (in: hFindFile=0x381d80, lpFindFileData=0x31e47c | out: lpFindFileData=0x31e47c*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0x28d257a0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28f3aae0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xfea09ee5, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Feeds Cache", cAlternateFileName="FEEDSC~1")) returned 1 [0067.172] FindNextFileW (in: hFindFile=0x381d80, lpFindFileData=0x31e47c | out: lpFindFileData=0x31e47c*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x3d1d6940, ftCreationTime.dwHighDateTime=0x1d2fad7, ftLastAccessTime.dwLowDateTime=0x3d1d6940, ftLastAccessTime.dwHighDateTime=0x1d2fad7, ftLastWriteTime.dwLowDateTime=0x3d1d6940, ftLastWriteTime.dwHighDateTime=0x1d2fad7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="FORMS", cAlternateFileName="")) returned 1 [0067.172] FindNextFileW (in: hFindFile=0x381d80, lpFindFileData=0x31e47c | out: lpFindFileData=0x31e47c*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xcd754c00, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0xcd754c00, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0xcd754c00, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="IME12", cAlternateFileName="")) returned 1 [0067.172] FindNextFileW (in: hFindFile=0x381d80, lpFindFileData=0x31e47c | out: lpFindFileData=0x31e47c*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xcd72eaa0, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0xcd72eaa0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0xcd72eaa0, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="IMJP12", cAlternateFileName="")) returned 1 [0067.172] FindNextFileW (in: hFindFile=0x381d80, lpFindFileData=0x31e47c | out: lpFindFileData=0x31e47c*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xcd72eaa0, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0xcd72eaa0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0xcd72eaa0, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="IMJP8_1", cAlternateFileName="")) returned 1 [0067.173] FindNextFileW (in: hFindFile=0x381d80, lpFindFileData=0x31e47c | out: lpFindFileData=0x31e47c*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xcd72eaa0, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0xcd72eaa0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0xcd72eaa0, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="IMJP9_0", cAlternateFileName="")) returned 1 [0067.173] FindNextFileW (in: hFindFile=0x381d80, lpFindFileData=0x31e47c | out: lpFindFileData=0x31e47c*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x28d257a0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x1d705b70, ftLastAccessTime.dwHighDateTime=0x1d35d06, ftLastWriteTime.dwLowDateTime=0x1d705b70, ftLastWriteTime.dwHighDateTime=0x1d35d06, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Internet Explorer", cAlternateFileName="INTERN~1")) returned 1 [0067.173] FindNextFileW (in: hFindFile=0x381d80, lpFindFileData=0x31e47c | out: lpFindFileData=0x31e47c*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x28d257a0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0xf7f22040, ftLastAccessTime.dwHighDateTime=0x1d3373f, ftLastWriteTime.dwLowDateTime=0xf7f22040, ftLastWriteTime.dwHighDateTime=0x1d3373f, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Media Player", cAlternateFileName="MEDIAP~1")) returned 1 [0067.173] FindNextFileW (in: hFindFile=0x381d80, lpFindFileData=0x31e47c | out: lpFindFileData=0x31e47c*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x4f780d90, ftCreationTime.dwHighDateTime=0x1d2dda2, ftLastAccessTime.dwLowDateTime=0x4bb72310, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0x4bb72310, ftLastWriteTime.dwHighDateTime=0x1d2dda4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Office", cAlternateFileName="")) returned 1 [0067.173] FindNextFileW (in: hFindFile=0x381d80, lpFindFileData=0x31e47c | out: lpFindFileData=0x31e47c*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x3dc40980, ftCreationTime.dwHighDateTime=0x1d2fad7, ftLastAccessTime.dwLowDateTime=0x8ae80e80, ftLastAccessTime.dwHighDateTime=0x1d5e82a, ftLastWriteTime.dwLowDateTime=0x8ae80e80, ftLastWriteTime.dwHighDateTime=0x1d5e82a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Outlook", cAlternateFileName="")) returned 1 [0067.173] FindNextFileW (in: hFindFile=0x381d80, lpFindFileData=0x31e47c | out: lpFindFileData=0x31e47c*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x4bb4c1b0, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0x4bb4c1b0, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0x4bb4c1b0, ftLastWriteTime.dwHighDateTime=0x1d2dda4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Publisher", cAlternateFileName="PUBLIS~1")) returned 1 [0067.173] FindNextFileW (in: hFindFile=0x381d80, lpFindFileData=0x31e47c | out: lpFindFileData=0x31e47c*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x3abef650, ftCreationTime.dwHighDateTime=0x1d2fa9b, ftLastAccessTime.dwLowDateTime=0x3abef650, ftLastAccessTime.dwHighDateTime=0x1d2fa9b, ftLastWriteTime.dwLowDateTime=0x3abef650, ftLastWriteTime.dwHighDateTime=0x1d2fa9b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="TaskSchedulerConfig", cAlternateFileName="TASKSC~1")) returned 1 [0067.173] FindNextFileW (in: hFindFile=0x381d80, lpFindFileData=0x31e47c | out: lpFindFileData=0x31e47c*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x962f4540, ftCreationTime.dwHighDateTime=0x1d305ee, ftLastAccessTime.dwLowDateTime=0x5ef99320, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0x5ef99320, ftLastWriteTime.dwHighDateTime=0x1d305f1, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Visio", cAlternateFileName="")) returned 1 [0067.173] FindNextFileW (in: hFindFile=0x381d80, lpFindFileData=0x31e47c | out: lpFindFileData=0x31e47c*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x28d257a0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0xd8d1fc80, ftLastAccessTime.dwHighDateTime=0x1d3373f, ftLastWriteTime.dwLowDateTime=0xd8d1fc80, ftLastWriteTime.dwHighDateTime=0x1d3373f, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Windows", cAlternateFileName="")) returned 1 [0067.174] FindNextFileW (in: hFindFile=0x381d80, lpFindFileData=0x31e47c | out: lpFindFileData=0x31e47c*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x28d257a0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x2c881c40, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x2c881c40, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Windows Mail", cAlternateFileName="WINDOW~3")) returned 1 [0067.174] FindNextFileW (in: hFindFile=0x381d80, lpFindFileData=0x31e47c | out: lpFindFileData=0x31e47c*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x28d257a0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28d257a0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xf7de167e, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Windows Media", cAlternateFileName="WINDOW~2")) returned 1 [0067.174] FindNextFileW (in: hFindFile=0x381d80, lpFindFileData=0x31e47c | out: lpFindFileData=0x31e47c*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x28d257a0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28de3e80, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x184eadb, ftLastWriteTime.dwHighDateTime=0x1cb8927, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Windows Sidebar", cAlternateFileName="WINDOW~1")) returned 1 [0067.174] FindNextFileW (in: hFindFile=0x381d80, lpFindFileData=0x31e47c | out: lpFindFileData=0x31e47c*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0067.174] FindClose (in: hFindFile=0x381d80 | out: hFindFile=0x381d80) returned 1 [0067.174] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e704) returned 1 [0067.174] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e710) returned 1 [0067.174] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e6cc) returned 1 [0067.174] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Credentials", nBufferLength=0x105, lpBuffer=0x31e1d4, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Credentials", lpFilePart=0x0) returned 0x41 [0067.175] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Credentials\\", nBufferLength=0x105, lpBuffer=0x31e1a8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Credentials\\", lpFilePart=0x0) returned 0x42 [0067.175] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Credentials\\*", lpFindFileData=0x31e3f4 | out: lpFindFileData=0x31e3f4*(dwFileAttributes=0x2014, ftCreationTime.dwLowDateTime=0x28d257a0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28d257a0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xea43994d, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x381d80 [0067.175] FindNextFileW (in: hFindFile=0x381d80, lpFindFileData=0x31e404 | out: lpFindFileData=0x31e404*(dwFileAttributes=0x2014, ftCreationTime.dwLowDateTime=0x28d257a0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28d257a0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xea43994d, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0067.175] FindNextFileW (in: hFindFile=0x381d80, lpFindFileData=0x31e404 | out: lpFindFileData=0x31e404*(dwFileAttributes=0x2014, ftCreationTime.dwLowDateTime=0x28d257a0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28d257a0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xea43994d, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 0 [0067.175] FindClose (in: hFindFile=0x381d80 | out: hFindFile=0x381d80) returned 1 [0067.175] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e68c) returned 1 [0067.175] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e698) returned 1 [0067.175] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e6cc) returned 1 [0067.175] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Credentials", nBufferLength=0x105, lpBuffer=0x31e1d4, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Credentials", lpFilePart=0x0) returned 0x41 [0067.175] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Credentials\\", nBufferLength=0x105, lpBuffer=0x31e1a8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Credentials\\", lpFilePart=0x0) returned 0x42 [0067.175] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Credentials\\*", lpFindFileData=0x31e3f4 | out: lpFindFileData=0x31e3f4*(dwFileAttributes=0x2014, ftCreationTime.dwLowDateTime=0x28d257a0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28d257a0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xea43994d, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x381d80 [0067.176] FindNextFileW (in: hFindFile=0x381d80, lpFindFileData=0x31e404 | out: lpFindFileData=0x31e404*(dwFileAttributes=0x2014, ftCreationTime.dwLowDateTime=0x28d257a0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28d257a0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xea43994d, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0067.176] FindNextFileW (in: hFindFile=0x381d80, lpFindFileData=0x31e404 | out: lpFindFileData=0x31e404*(dwFileAttributes=0x2014, ftCreationTime.dwLowDateTime=0x28d257a0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28d257a0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xea43994d, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 0 [0067.176] FindClose (in: hFindFile=0x381d80 | out: hFindFile=0x381d80) returned 1 [0067.176] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e68c) returned 1 [0067.176] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e698) returned 1 [0067.176] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e6cc) returned 1 [0067.176] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Event Viewer", nBufferLength=0x105, lpBuffer=0x31e1d4, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Event Viewer", lpFilePart=0x0) returned 0x42 [0067.176] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Event Viewer\\", nBufferLength=0x105, lpBuffer=0x31e1a8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Event Viewer\\", lpFilePart=0x0) returned 0x43 [0067.176] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Event Viewer\\*", lpFindFileData=0x31e3f4 | out: lpFindFileData=0x31e3f4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x32121370, ftCreationTime.dwHighDateTime=0x1d2fa9b, ftLastAccessTime.dwLowDateTime=0x32121370, ftLastAccessTime.dwHighDateTime=0x1d2fa9b, ftLastWriteTime.dwLowDateTime=0x32121370, ftLastWriteTime.dwHighDateTime=0x1d2fa9b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x381d80 [0067.177] FindNextFileW (in: hFindFile=0x381d80, lpFindFileData=0x31e404 | out: lpFindFileData=0x31e404*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x32121370, ftCreationTime.dwHighDateTime=0x1d2fa9b, ftLastAccessTime.dwLowDateTime=0x32121370, ftLastAccessTime.dwHighDateTime=0x1d2fa9b, ftLastWriteTime.dwLowDateTime=0x32121370, ftLastWriteTime.dwHighDateTime=0x1d2fa9b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0067.177] FindNextFileW (in: hFindFile=0x381d80, lpFindFileData=0x31e404 | out: lpFindFileData=0x31e404*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x32121370, ftCreationTime.dwHighDateTime=0x1d2fa9b, ftLastAccessTime.dwLowDateTime=0x32121370, ftLastAccessTime.dwHighDateTime=0x1d2fa9b, ftLastWriteTime.dwLowDateTime=0x32121370, ftLastWriteTime.dwHighDateTime=0x1d2fa9b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 0 [0067.177] FindClose (in: hFindFile=0x381d80 | out: hFindFile=0x381d80) returned 1 [0067.177] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e68c) returned 1 [0067.177] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e698) returned 1 [0067.177] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e6cc) returned 1 [0067.177] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Event Viewer", nBufferLength=0x105, lpBuffer=0x31e1d4, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Event Viewer", lpFilePart=0x0) returned 0x42 [0067.177] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Event Viewer\\", nBufferLength=0x105, lpBuffer=0x31e1a8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Event Viewer\\", lpFilePart=0x0) returned 0x43 [0067.177] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Event Viewer\\*", lpFindFileData=0x31e3f4 | out: lpFindFileData=0x31e3f4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x32121370, ftCreationTime.dwHighDateTime=0x1d2fa9b, ftLastAccessTime.dwLowDateTime=0x32121370, ftLastAccessTime.dwHighDateTime=0x1d2fa9b, ftLastWriteTime.dwLowDateTime=0x32121370, ftLastWriteTime.dwHighDateTime=0x1d2fa9b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x381d80 [0067.177] FindNextFileW (in: hFindFile=0x381d80, lpFindFileData=0x31e404 | out: lpFindFileData=0x31e404*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x32121370, ftCreationTime.dwHighDateTime=0x1d2fa9b, ftLastAccessTime.dwLowDateTime=0x32121370, ftLastAccessTime.dwHighDateTime=0x1d2fa9b, ftLastWriteTime.dwLowDateTime=0x32121370, ftLastWriteTime.dwHighDateTime=0x1d2fa9b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0067.178] FindNextFileW (in: hFindFile=0x381d80, lpFindFileData=0x31e404 | out: lpFindFileData=0x31e404*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x32121370, ftCreationTime.dwHighDateTime=0x1d2fa9b, ftLastAccessTime.dwLowDateTime=0x32121370, ftLastAccessTime.dwHighDateTime=0x1d2fa9b, ftLastWriteTime.dwLowDateTime=0x32121370, ftLastWriteTime.dwHighDateTime=0x1d2fa9b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 0 [0067.178] FindClose (in: hFindFile=0x381d80 | out: hFindFile=0x381d80) returned 1 [0067.178] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e68c) returned 1 [0067.178] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e698) returned 1 [0067.178] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e6cc) returned 1 [0067.178] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Feeds", nBufferLength=0x105, lpBuffer=0x31e1d4, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Feeds", lpFilePart=0x0) returned 0x3b [0067.178] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Feeds\\", nBufferLength=0x105, lpBuffer=0x31e1a8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Feeds\\", lpFilePart=0x0) returned 0x3c [0067.178] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Feeds\\*", lpFindFileData=0x31e3f4 | out: lpFindFileData=0x31e3f4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x28d257a0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28f14980, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xff0498b1, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x381d80 [0067.183] FindNextFileW (in: hFindFile=0x381d80, lpFindFileData=0x31e404 | out: lpFindFileData=0x31e404*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x28d257a0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28f14980, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xff0498b1, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0067.183] FindNextFileW (in: hFindFile=0x381d80, lpFindFileData=0x31e404 | out: lpFindFileData=0x31e404*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x28f14980, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28f14980, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x6e0227e0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x1a00, dwReserved0=0x0, dwReserved1=0x0, cFileName="FeedsStore.feedsdb-ms", cAlternateFileName="FEEDSS~1.FEE")) returned 1 [0067.183] FindNextFileW (in: hFindFile=0x381d80, lpFindFileData=0x31e404 | out: lpFindFileData=0x31e404*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x28d257a0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28f14980, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xfee3456d, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft Feeds~", cAlternateFileName="MICROS~1")) returned 1 [0067.183] FindNextFileW (in: hFindFile=0x381d80, lpFindFileData=0x31e404 | out: lpFindFileData=0x31e404*(dwFileAttributes=0x2012, ftCreationTime.dwLowDateTime=0x28d257a0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28d257a0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xff0498b1, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="{5588ACFD-6436-411B-A5CE-666AE6A92D3D}~", cAlternateFileName="{5588A~1")) returned 1 [0067.183] FindNextFileW (in: hFindFile=0x381d80, lpFindFileData=0x31e404 | out: lpFindFileData=0x31e404*(dwFileAttributes=0x2012, ftCreationTime.dwLowDateTime=0x28d257a0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28d257a0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xff0498b1, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="{5588ACFD-6436-411B-A5CE-666AE6A92D3D}~", cAlternateFileName="{5588A~1")) returned 0 [0067.183] FindClose (in: hFindFile=0x381d80 | out: hFindFile=0x381d80) returned 1 [0067.184] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e68c) returned 1 [0067.184] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e698) returned 1 [0067.184] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e6cc) returned 1 [0067.184] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Feeds", nBufferLength=0x105, lpBuffer=0x31e1d4, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Feeds", lpFilePart=0x0) returned 0x3b [0067.184] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Feeds\\", nBufferLength=0x105, lpBuffer=0x31e1a8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Feeds\\", lpFilePart=0x0) returned 0x3c [0067.184] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Feeds\\*", lpFindFileData=0x31e3f4 | out: lpFindFileData=0x31e3f4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x28d257a0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28f14980, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xff0498b1, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x381d80 [0067.185] FindNextFileW (in: hFindFile=0x381d80, lpFindFileData=0x31e404 | out: lpFindFileData=0x31e404*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x28d257a0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28f14980, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xff0498b1, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0067.185] FindNextFileW (in: hFindFile=0x381d80, lpFindFileData=0x31e404 | out: lpFindFileData=0x31e404*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x28f14980, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28f14980, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x6e0227e0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x1a00, dwReserved0=0x0, dwReserved1=0x0, cFileName="FeedsStore.feedsdb-ms", cAlternateFileName="FEEDSS~1.FEE")) returned 1 [0067.186] FindNextFileW (in: hFindFile=0x381d80, lpFindFileData=0x31e404 | out: lpFindFileData=0x31e404*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x28d257a0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28f14980, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xfee3456d, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft Feeds~", cAlternateFileName="MICROS~1")) returned 1 [0067.186] FindNextFileW (in: hFindFile=0x381d80, lpFindFileData=0x31e404 | out: lpFindFileData=0x31e404*(dwFileAttributes=0x2012, ftCreationTime.dwLowDateTime=0x28d257a0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28d257a0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xff0498b1, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="{5588ACFD-6436-411B-A5CE-666AE6A92D3D}~", cAlternateFileName="{5588A~1")) returned 1 [0067.186] FindNextFileW (in: hFindFile=0x381d80, lpFindFileData=0x31e404 | out: lpFindFileData=0x31e404*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0067.186] FindClose (in: hFindFile=0x381d80 | out: hFindFile=0x381d80) returned 1 [0067.187] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e68c) returned 1 [0067.187] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e698) returned 1 [0067.187] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e654) returned 1 [0067.188] GetLongPathNameW (in: lpszShortPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Feeds\\Microsoft Feeds~", lpszLongPath=0x31e148, cchBuffer=0x104 | out: lpszLongPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Feeds\\Microsoft Feeds~") returned 0x4c [0067.190] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Feeds\\Microsoft Feeds~", nBufferLength=0x105, lpBuffer=0x31e15c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Feeds\\Microsoft Feeds~", lpFilePart=0x0) returned 0x4c [0067.190] GetLongPathNameW (in: lpszShortPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Feeds\\Microsoft Feeds~", lpszLongPath=0x31e148, cchBuffer=0x104 | out: lpszLongPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Feeds\\Microsoft Feeds~") returned 0x4c [0067.190] GetLongPathNameW (in: lpszShortPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Feeds\\Microsoft Feeds~\\", lpszLongPath=0x31e128, cchBuffer=0x104 | out: lpszLongPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Feeds\\Microsoft Feeds~\\") returned 0x4d [0067.191] GetLongPathNameW (in: lpszShortPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Feeds\\Microsoft Feeds~\\", lpszLongPath=0x31e11c, cchBuffer=0x104 | out: lpszLongPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Feeds\\Microsoft Feeds~\\") returned 0x4d [0067.191] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Feeds\\Microsoft Feeds~\\", nBufferLength=0x105, lpBuffer=0x31e130, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Feeds\\Microsoft Feeds~\\", lpFilePart=0x0) returned 0x4d [0067.191] GetLongPathNameW (in: lpszShortPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Feeds\\Microsoft Feeds~\\", lpszLongPath=0x31e11c, cchBuffer=0x104 | out: lpszLongPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Feeds\\Microsoft Feeds~\\") returned 0x4d [0067.193] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Feeds\\Microsoft Feeds~\\*", lpFindFileData=0x31e37c | out: lpFindFileData=0x31e37c*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x28d257a0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28f14980, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xfee3456d, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x381d80 [0067.194] FindNextFileW (in: hFindFile=0x381d80, lpFindFileData=0x31e38c | out: lpFindFileData=0x31e38c*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x28d257a0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28f14980, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xfee3456d, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0067.195] FindNextFileW (in: hFindFile=0x381d80, lpFindFileData=0x31e38c | out: lpFindFileData=0x31e38c*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x28f14980, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28f14980, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xfeaa2466, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x7000, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft at Home~.feed-ms", cAlternateFileName="MICROS~2.FEE")) returned 1 [0067.195] FindNextFileW (in: hFindFile=0x381d80, lpFindFileData=0x31e38c | out: lpFindFileData=0x31e38c*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x28f14980, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28f14980, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xfedc214c, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x7000, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft at Work~.feed-ms", cAlternateFileName="MICROS~1.FEE")) returned 1 [0067.195] FindNextFileW (in: hFindFile=0x381d80, lpFindFileData=0x31e38c | out: lpFindFileData=0x31e38c*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x28f14980, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28f14980, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xfee8082e, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x7000, dwReserved0=0x0, dwReserved1=0x0, cFileName="MSNBC News~.feed-ms", cAlternateFileName="MSNBCN~1.FEE")) returned 1 [0067.195] FindNextFileW (in: hFindFile=0x381d80, lpFindFileData=0x31e38c | out: lpFindFileData=0x31e38c*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0067.195] FindClose (in: hFindFile=0x381d80 | out: hFindFile=0x381d80) returned 1 [0067.196] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e614) returned 1 [0067.196] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e620) returned 1 [0067.196] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e654) returned 1 [0067.196] GetLongPathNameW (in: lpszShortPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Feeds\\Microsoft Feeds~", lpszLongPath=0x31e148, cchBuffer=0x104 | out: lpszLongPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Feeds\\Microsoft Feeds~") returned 0x4c [0067.196] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Feeds\\Microsoft Feeds~", nBufferLength=0x105, lpBuffer=0x31e15c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Feeds\\Microsoft Feeds~", lpFilePart=0x0) returned 0x4c [0067.196] GetLongPathNameW (in: lpszShortPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Feeds\\Microsoft Feeds~", lpszLongPath=0x31e148, cchBuffer=0x104 | out: lpszLongPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Feeds\\Microsoft Feeds~") returned 0x4c [0067.197] GetLongPathNameW (in: lpszShortPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Feeds\\Microsoft Feeds~\\", lpszLongPath=0x31e128, cchBuffer=0x104 | out: lpszLongPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Feeds\\Microsoft Feeds~\\") returned 0x4d [0067.197] GetLongPathNameW (in: lpszShortPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Feeds\\Microsoft Feeds~\\", lpszLongPath=0x31e11c, cchBuffer=0x104 | out: lpszLongPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Feeds\\Microsoft Feeds~\\") returned 0x4d [0067.198] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Feeds\\Microsoft Feeds~\\", nBufferLength=0x105, lpBuffer=0x31e130, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Feeds\\Microsoft Feeds~\\", lpFilePart=0x0) returned 0x4d [0067.198] GetLongPathNameW (in: lpszShortPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Feeds\\Microsoft Feeds~\\", lpszLongPath=0x31e11c, cchBuffer=0x104 | out: lpszLongPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Feeds\\Microsoft Feeds~\\") returned 0x4d [0067.199] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Feeds\\Microsoft Feeds~\\*", lpFindFileData=0x31e37c | out: lpFindFileData=0x31e37c*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x28d257a0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28f14980, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xfee3456d, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x381d80 [0067.200] FindNextFileW (in: hFindFile=0x381d80, lpFindFileData=0x31e38c | out: lpFindFileData=0x31e38c*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x28d257a0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28f14980, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xfee3456d, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0067.200] FindNextFileW (in: hFindFile=0x381d80, lpFindFileData=0x31e38c | out: lpFindFileData=0x31e38c*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x28f14980, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28f14980, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xfeaa2466, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x7000, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft at Home~.feed-ms", cAlternateFileName="MICROS~2.FEE")) returned 1 [0067.201] FindNextFileW (in: hFindFile=0x381d80, lpFindFileData=0x31e38c | out: lpFindFileData=0x31e38c*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x28f14980, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28f14980, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xfedc214c, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x7000, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft at Work~.feed-ms", cAlternateFileName="MICROS~1.FEE")) returned 1 [0067.201] FindNextFileW (in: hFindFile=0x381d80, lpFindFileData=0x31e38c | out: lpFindFileData=0x31e38c*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x28f14980, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28f14980, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xfee8082e, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x7000, dwReserved0=0x0, dwReserved1=0x0, cFileName="MSNBC News~.feed-ms", cAlternateFileName="MSNBCN~1.FEE")) returned 1 [0067.201] FindNextFileW (in: hFindFile=0x381d80, lpFindFileData=0x31e38c | out: lpFindFileData=0x31e38c*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x28f14980, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28f14980, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xfee8082e, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x7000, dwReserved0=0x0, dwReserved1=0x0, cFileName="MSNBC News~.feed-ms", cAlternateFileName="MSNBCN~1.FEE")) returned 0 [0067.201] FindClose (in: hFindFile=0x381d80 | out: hFindFile=0x381d80) returned 1 [0067.202] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e614) returned 1 [0067.202] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e620) returned 1 [0067.202] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e654) returned 1 [0067.202] GetLongPathNameW (in: lpszShortPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Feeds\\{5588ACFD-6436-411B-A5CE-666AE6A92D3D}~", lpszLongPath=0x31e148, cchBuffer=0x104 | out: lpszLongPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Feeds\\{5588ACFD-6436-411B-A5CE-666AE6A92D3D}~") returned 0x63 [0067.202] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Feeds\\{5588ACFD-6436-411B-A5CE-666AE6A92D3D}~", nBufferLength=0x105, lpBuffer=0x31e15c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Feeds\\{5588ACFD-6436-411B-A5CE-666AE6A92D3D}~", lpFilePart=0x0) returned 0x63 [0067.203] GetLongPathNameW (in: lpszShortPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Feeds\\{5588ACFD-6436-411B-A5CE-666AE6A92D3D}~", lpszLongPath=0x31e148, cchBuffer=0x104 | out: lpszLongPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Feeds\\{5588ACFD-6436-411B-A5CE-666AE6A92D3D}~") returned 0x63 [0067.203] GetLongPathNameW (in: lpszShortPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Feeds\\{5588ACFD-6436-411B-A5CE-666AE6A92D3D}~\\", lpszLongPath=0x31e128, cchBuffer=0x104 | out: lpszLongPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Feeds\\{5588ACFD-6436-411B-A5CE-666AE6A92D3D}~\\") returned 0x64 [0067.204] GetLongPathNameW (in: lpszShortPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Feeds\\{5588ACFD-6436-411B-A5CE-666AE6A92D3D}~\\", lpszLongPath=0x31e11c, cchBuffer=0x104 | out: lpszLongPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Feeds\\{5588ACFD-6436-411B-A5CE-666AE6A92D3D}~\\") returned 0x64 [0067.204] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Feeds\\{5588ACFD-6436-411B-A5CE-666AE6A92D3D}~\\", nBufferLength=0x105, lpBuffer=0x31e130, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Feeds\\{5588ACFD-6436-411B-A5CE-666AE6A92D3D}~\\", lpFilePart=0x0) returned 0x64 [0067.204] GetLongPathNameW (in: lpszShortPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Feeds\\{5588ACFD-6436-411B-A5CE-666AE6A92D3D}~\\", lpszLongPath=0x31e11c, cchBuffer=0x104 | out: lpszLongPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Feeds\\{5588ACFD-6436-411B-A5CE-666AE6A92D3D}~\\") returned 0x64 [0067.206] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Feeds\\{5588ACFD-6436-411B-A5CE-666AE6A92D3D}~\\*", lpFindFileData=0x31e37c | out: lpFindFileData=0x31e37c*(dwFileAttributes=0x2012, ftCreationTime.dwLowDateTime=0x28d257a0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28d257a0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xff0498b1, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x381d80 [0067.206] FindNextFileW (in: hFindFile=0x381d80, lpFindFileData=0x31e38c | out: lpFindFileData=0x31e38c*(dwFileAttributes=0x2012, ftCreationTime.dwLowDateTime=0x28d257a0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28d257a0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xff0498b1, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0067.206] FindNextFileW (in: hFindFile=0x381d80, lpFindFileData=0x31e38c | out: lpFindFileData=0x31e38c*(dwFileAttributes=0x2012, ftCreationTime.dwLowDateTime=0x28d257a0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x52d69eb0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x52d69eb0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="WebSlices~", cAlternateFileName="WEBSLI~1")) returned 1 [0067.206] FindNextFileW (in: hFindFile=0x381d80, lpFindFileData=0x31e38c | out: lpFindFileData=0x31e38c*(dwFileAttributes=0x2012, ftCreationTime.dwLowDateTime=0x28d257a0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x52d69eb0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x52d69eb0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="WebSlices~", cAlternateFileName="WEBSLI~1")) returned 0 [0067.206] FindClose (in: hFindFile=0x381d80 | out: hFindFile=0x381d80) returned 1 [0067.206] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e614) returned 1 [0067.206] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e620) returned 1 [0067.207] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e654) returned 1 [0067.207] GetLongPathNameW (in: lpszShortPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Feeds\\{5588ACFD-6436-411B-A5CE-666AE6A92D3D}~", lpszLongPath=0x31e148, cchBuffer=0x104 | out: lpszLongPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Feeds\\{5588ACFD-6436-411B-A5CE-666AE6A92D3D}~") returned 0x63 [0067.207] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Feeds\\{5588ACFD-6436-411B-A5CE-666AE6A92D3D}~", nBufferLength=0x105, lpBuffer=0x31e15c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Feeds\\{5588ACFD-6436-411B-A5CE-666AE6A92D3D}~", lpFilePart=0x0) returned 0x63 [0067.207] GetLongPathNameW (in: lpszShortPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Feeds\\{5588ACFD-6436-411B-A5CE-666AE6A92D3D}~", lpszLongPath=0x31e148, cchBuffer=0x104 | out: lpszLongPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Feeds\\{5588ACFD-6436-411B-A5CE-666AE6A92D3D}~") returned 0x63 [0067.208] GetLongPathNameW (in: lpszShortPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Feeds\\{5588ACFD-6436-411B-A5CE-666AE6A92D3D}~\\", lpszLongPath=0x31e128, cchBuffer=0x104 | out: lpszLongPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Feeds\\{5588ACFD-6436-411B-A5CE-666AE6A92D3D}~\\") returned 0x64 [0067.208] GetLongPathNameW (in: lpszShortPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Feeds\\{5588ACFD-6436-411B-A5CE-666AE6A92D3D}~\\", lpszLongPath=0x31e11c, cchBuffer=0x104 | out: lpszLongPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Feeds\\{5588ACFD-6436-411B-A5CE-666AE6A92D3D}~\\") returned 0x64 [0067.209] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Feeds\\{5588ACFD-6436-411B-A5CE-666AE6A92D3D}~\\", nBufferLength=0x105, lpBuffer=0x31e130, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Feeds\\{5588ACFD-6436-411B-A5CE-666AE6A92D3D}~\\", lpFilePart=0x0) returned 0x64 [0067.209] GetLongPathNameW (in: lpszShortPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Feeds\\{5588ACFD-6436-411B-A5CE-666AE6A92D3D}~\\", lpszLongPath=0x31e11c, cchBuffer=0x104 | out: lpszLongPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Feeds\\{5588ACFD-6436-411B-A5CE-666AE6A92D3D}~\\") returned 0x64 [0067.210] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Feeds\\{5588ACFD-6436-411B-A5CE-666AE6A92D3D}~\\*", lpFindFileData=0x31e37c | out: lpFindFileData=0x31e37c*(dwFileAttributes=0x2012, ftCreationTime.dwLowDateTime=0x28d257a0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28d257a0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xff0498b1, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x381d80 [0067.210] FindNextFileW (in: hFindFile=0x381d80, lpFindFileData=0x31e38c | out: lpFindFileData=0x31e38c*(dwFileAttributes=0x2012, ftCreationTime.dwLowDateTime=0x28d257a0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28d257a0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xff0498b1, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0067.211] FindNextFileW (in: hFindFile=0x381d80, lpFindFileData=0x31e38c | out: lpFindFileData=0x31e38c*(dwFileAttributes=0x2012, ftCreationTime.dwLowDateTime=0x28d257a0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x52d69eb0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x52d69eb0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="WebSlices~", cAlternateFileName="WEBSLI~1")) returned 1 [0067.211] FindNextFileW (in: hFindFile=0x381d80, lpFindFileData=0x31e38c | out: lpFindFileData=0x31e38c*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0067.211] FindClose (in: hFindFile=0x381d80 | out: hFindFile=0x381d80) returned 1 [0067.211] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e614) returned 1 [0067.211] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e620) returned 1 [0067.211] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e5dc) returned 1 [0067.211] GetLongPathNameW (in: lpszShortPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Feeds\\{5588ACFD-6436-411B-A5CE-666AE6A92D3D}~\\", lpszLongPath=0x31e0d0, cchBuffer=0x104 | out: lpszLongPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Feeds\\{5588ACFD-6436-411B-A5CE-666AE6A92D3D}~\\") returned 0x64 [0067.211] GetLongPathNameW (in: lpszShortPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Feeds\\{5588ACFD-6436-411B-A5CE-666AE6A92D3D}~\\WebSlices~", lpszLongPath=0x31e0d0, cchBuffer=0x104 | out: lpszLongPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Feeds\\{5588ACFD-6436-411B-A5CE-666AE6A92D3D}~\\WebSlices~") returned 0x6e [0067.212] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Feeds\\{5588ACFD-6436-411B-A5CE-666AE6A92D3D}~\\WebSlices~", nBufferLength=0x105, lpBuffer=0x31e0e4, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Feeds\\{5588ACFD-6436-411B-A5CE-666AE6A92D3D}~\\WebSlices~", lpFilePart=0x0) returned 0x6e [0067.212] GetLongPathNameW (in: lpszShortPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Feeds\\{5588ACFD-6436-411B-A5CE-666AE6A92D3D}~\\WebSlices~", lpszLongPath=0x31e0d0, cchBuffer=0x104 | out: lpszLongPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Feeds\\{5588ACFD-6436-411B-A5CE-666AE6A92D3D}~\\WebSlices~") returned 0x6e [0067.213] GetLongPathNameW (in: lpszShortPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Feeds\\{5588ACFD-6436-411B-A5CE-666AE6A92D3D}~\\", lpszLongPath=0x31e0b0, cchBuffer=0x104 | out: lpszLongPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Feeds\\{5588ACFD-6436-411B-A5CE-666AE6A92D3D}~\\") returned 0x64 [0067.213] GetLongPathNameW (in: lpszShortPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Feeds\\{5588ACFD-6436-411B-A5CE-666AE6A92D3D}~\\WebSlices~\\", lpszLongPath=0x31e0b0, cchBuffer=0x104 | out: lpszLongPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Feeds\\{5588ACFD-6436-411B-A5CE-666AE6A92D3D}~\\WebSlices~\\") returned 0x6f [0067.214] GetLongPathNameW (in: lpszShortPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Feeds\\{5588ACFD-6436-411B-A5CE-666AE6A92D3D}~\\", lpszLongPath=0x31e0a4, cchBuffer=0x104 | out: lpszLongPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Feeds\\{5588ACFD-6436-411B-A5CE-666AE6A92D3D}~\\") returned 0x64 [0067.214] GetLongPathNameW (in: lpszShortPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Feeds\\{5588ACFD-6436-411B-A5CE-666AE6A92D3D}~\\WebSlices~\\", lpszLongPath=0x31e0a4, cchBuffer=0x104 | out: lpszLongPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Feeds\\{5588ACFD-6436-411B-A5CE-666AE6A92D3D}~\\WebSlices~\\") returned 0x6f [0067.215] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Feeds\\{5588ACFD-6436-411B-A5CE-666AE6A92D3D}~\\WebSlices~\\", nBufferLength=0x105, lpBuffer=0x31e0b8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Feeds\\{5588ACFD-6436-411B-A5CE-666AE6A92D3D}~\\WebSlices~\\", lpFilePart=0x0) returned 0x6f [0067.215] GetLongPathNameW (in: lpszShortPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Feeds\\{5588ACFD-6436-411B-A5CE-666AE6A92D3D}~\\WebSlices~\\", lpszLongPath=0x31e0a4, cchBuffer=0x104 | out: lpszLongPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Feeds\\{5588ACFD-6436-411B-A5CE-666AE6A92D3D}~\\WebSlices~\\") returned 0x6f [0067.216] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Feeds\\{5588ACFD-6436-411B-A5CE-666AE6A92D3D}~\\WebSlices~\\*", lpFindFileData=0x31e304 | out: lpFindFileData=0x31e304*(dwFileAttributes=0x2012, ftCreationTime.dwLowDateTime=0x28d257a0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x52d69eb0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x52d69eb0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x381d80 [0067.216] FindNextFileW (in: hFindFile=0x381d80, lpFindFileData=0x31e314 | out: lpFindFileData=0x31e314*(dwFileAttributes=0x2012, ftCreationTime.dwLowDateTime=0x28d257a0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x52d69eb0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x52d69eb0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0067.216] FindNextFileW (in: hFindFile=0x381d80, lpFindFileData=0x31e314 | out: lpFindFileData=0x31e314*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x52d69eb0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x52d69eb0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x6e0227e0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x8000, dwReserved0=0x0, dwReserved1=0x0, cFileName="Suggested Sites~.feed-ms", cAlternateFileName="SUGGES~1.FEE")) returned 1 [0067.217] FindNextFileW (in: hFindFile=0x381d80, lpFindFileData=0x31e314 | out: lpFindFileData=0x31e314*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x28f14980, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28f14980, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xff06fa11, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x7000, dwReserved0=0x0, dwReserved1=0x0, cFileName="Web Slice Gallery~.feed-ms", cAlternateFileName="WEBSLI~1.FEE")) returned 1 [0067.217] FindNextFileW (in: hFindFile=0x381d80, lpFindFileData=0x31e314 | out: lpFindFileData=0x31e314*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0067.217] FindClose (in: hFindFile=0x381d80 | out: hFindFile=0x381d80) returned 1 [0067.217] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e59c) returned 1 [0067.217] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e5a8) returned 1 [0067.217] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e5dc) returned 1 [0067.217] GetLongPathNameW (in: lpszShortPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Feeds\\{5588ACFD-6436-411B-A5CE-666AE6A92D3D}~\\", lpszLongPath=0x31e0d0, cchBuffer=0x104 | out: lpszLongPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Feeds\\{5588ACFD-6436-411B-A5CE-666AE6A92D3D}~\\") returned 0x64 [0067.217] GetLongPathNameW (in: lpszShortPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Feeds\\{5588ACFD-6436-411B-A5CE-666AE6A92D3D}~\\WebSlices~", lpszLongPath=0x31e0d0, cchBuffer=0x104 | out: lpszLongPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Feeds\\{5588ACFD-6436-411B-A5CE-666AE6A92D3D}~\\WebSlices~") returned 0x6e [0067.218] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Feeds\\{5588ACFD-6436-411B-A5CE-666AE6A92D3D}~\\WebSlices~", nBufferLength=0x105, lpBuffer=0x31e0e4, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Feeds\\{5588ACFD-6436-411B-A5CE-666AE6A92D3D}~\\WebSlices~", lpFilePart=0x0) returned 0x6e [0067.218] GetLongPathNameW (in: lpszShortPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Feeds\\{5588ACFD-6436-411B-A5CE-666AE6A92D3D}~\\WebSlices~", lpszLongPath=0x31e0d0, cchBuffer=0x104 | out: lpszLongPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Feeds\\{5588ACFD-6436-411B-A5CE-666AE6A92D3D}~\\WebSlices~") returned 0x6e [0067.219] GetLongPathNameW (in: lpszShortPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Feeds\\{5588ACFD-6436-411B-A5CE-666AE6A92D3D}~\\", lpszLongPath=0x31e0b0, cchBuffer=0x104 | out: lpszLongPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Feeds\\{5588ACFD-6436-411B-A5CE-666AE6A92D3D}~\\") returned 0x64 [0067.219] GetLongPathNameW (in: lpszShortPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Feeds\\{5588ACFD-6436-411B-A5CE-666AE6A92D3D}~\\WebSlices~\\", lpszLongPath=0x31e0b0, cchBuffer=0x104 | out: lpszLongPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Feeds\\{5588ACFD-6436-411B-A5CE-666AE6A92D3D}~\\WebSlices~\\") returned 0x6f [0067.220] GetLongPathNameW (in: lpszShortPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Feeds\\{5588ACFD-6436-411B-A5CE-666AE6A92D3D}~\\", lpszLongPath=0x31e0a4, cchBuffer=0x104 | out: lpszLongPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Feeds\\{5588ACFD-6436-411B-A5CE-666AE6A92D3D}~\\") returned 0x64 [0067.220] GetLongPathNameW (in: lpszShortPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Feeds\\{5588ACFD-6436-411B-A5CE-666AE6A92D3D}~\\WebSlices~\\", lpszLongPath=0x31e0a4, cchBuffer=0x104 | out: lpszLongPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Feeds\\{5588ACFD-6436-411B-A5CE-666AE6A92D3D}~\\WebSlices~\\") returned 0x6f [0067.221] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Feeds\\{5588ACFD-6436-411B-A5CE-666AE6A92D3D}~\\WebSlices~\\", nBufferLength=0x105, lpBuffer=0x31e0b8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Feeds\\{5588ACFD-6436-411B-A5CE-666AE6A92D3D}~\\WebSlices~\\", lpFilePart=0x0) returned 0x6f [0067.221] GetLongPathNameW (in: lpszShortPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Feeds\\{5588ACFD-6436-411B-A5CE-666AE6A92D3D}~\\WebSlices~\\", lpszLongPath=0x31e0a4, cchBuffer=0x104 | out: lpszLongPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Feeds\\{5588ACFD-6436-411B-A5CE-666AE6A92D3D}~\\WebSlices~\\") returned 0x6f [0067.222] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Feeds\\{5588ACFD-6436-411B-A5CE-666AE6A92D3D}~\\WebSlices~\\*", lpFindFileData=0x31e304 | out: lpFindFileData=0x31e304*(dwFileAttributes=0x2012, ftCreationTime.dwLowDateTime=0x28d257a0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x52d69eb0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x52d69eb0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x381d80 [0067.222] FindNextFileW (in: hFindFile=0x381d80, lpFindFileData=0x31e314 | out: lpFindFileData=0x31e314*(dwFileAttributes=0x2012, ftCreationTime.dwLowDateTime=0x28d257a0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x52d69eb0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x52d69eb0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0067.222] FindNextFileW (in: hFindFile=0x381d80, lpFindFileData=0x31e314 | out: lpFindFileData=0x31e314*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x52d69eb0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x52d69eb0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x6e0227e0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x8000, dwReserved0=0x0, dwReserved1=0x0, cFileName="Suggested Sites~.feed-ms", cAlternateFileName="SUGGES~1.FEE")) returned 1 [0067.223] FindNextFileW (in: hFindFile=0x381d80, lpFindFileData=0x31e314 | out: lpFindFileData=0x31e314*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x28f14980, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28f14980, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xff06fa11, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x7000, dwReserved0=0x0, dwReserved1=0x0, cFileName="Web Slice Gallery~.feed-ms", cAlternateFileName="WEBSLI~1.FEE")) returned 1 [0067.223] FindNextFileW (in: hFindFile=0x381d80, lpFindFileData=0x31e314 | out: lpFindFileData=0x31e314*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x28f14980, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28f14980, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xff06fa11, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x7000, dwReserved0=0x0, dwReserved1=0x0, cFileName="Web Slice Gallery~.feed-ms", cAlternateFileName="WEBSLI~1.FEE")) returned 0 [0067.223] FindClose (in: hFindFile=0x381d80 | out: hFindFile=0x381d80) returned 1 [0067.223] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e59c) returned 1 [0067.223] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e5a8) returned 1 [0067.223] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e6cc) returned 1 [0067.223] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Feeds Cache", nBufferLength=0x105, lpBuffer=0x31e1d4, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Feeds Cache", lpFilePart=0x0) returned 0x41 [0067.223] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Feeds Cache\\", nBufferLength=0x105, lpBuffer=0x31e1a8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Feeds Cache\\", lpFilePart=0x0) returned 0x42 [0067.223] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Feeds Cache\\*", lpFindFileData=0x31e3f4 | out: lpFindFileData=0x31e3f4*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0x28d257a0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28f3aae0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xfea09ee5, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x381d80 [0067.225] FindNextFileW (in: hFindFile=0x381d80, lpFindFileData=0x31e404 | out: lpFindFileData=0x31e404*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0x28d257a0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28f3aae0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xfea09ee5, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0067.226] FindNextFileW (in: hFindFile=0x381d80, lpFindFileData=0x31e404 | out: lpFindFileData=0x31e404*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0x28d257a0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28f14980, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xfedc214c, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="1NBUR4HR", cAlternateFileName="")) returned 1 [0067.226] FindNextFileW (in: hFindFile=0x381d80, lpFindFileData=0x31e404 | out: lpFindFileData=0x31e404*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0x28d257a0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28f14980, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xfee8082e, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="6ASVN7J7", cAlternateFileName="")) returned 1 [0067.226] FindNextFileW (in: hFindFile=0x381d80, lpFindFileData=0x31e404 | out: lpFindFileData=0x31e404*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0x28d257a0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28f14980, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xff06fa11, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="D68G7BIJ", cAlternateFileName="")) returned 1 [0067.226] FindNextFileW (in: hFindFile=0x381d80, lpFindFileData=0x31e404 | out: lpFindFileData=0x31e404*(dwFileAttributes=0x2026, ftCreationTime.dwLowDateTime=0x28f14980, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28f14980, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xfe9e3d85, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x43, dwReserved0=0x0, dwReserved1=0x0, cFileName="desktop.ini", cAlternateFileName="")) returned 1 [0067.226] FindNextFileW (in: hFindFile=0x381d80, lpFindFileData=0x31e404 | out: lpFindFileData=0x31e404*(dwFileAttributes=0x2026, ftCreationTime.dwLowDateTime=0x28f14980, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28f14980, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x2bc126f0, ftLastWriteTime.dwHighDateTime=0x1d35d06, nFileSizeHigh=0x0, nFileSizeLow=0x8000, dwReserved0=0x0, dwReserved1=0x0, cFileName="index.dat", cAlternateFileName="")) returned 1 [0067.226] FindNextFileW (in: hFindFile=0x381d80, lpFindFileData=0x31e404 | out: lpFindFileData=0x31e404*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0x28d257a0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x52d90010, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x52d90010, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="KQMHSVKD", cAlternateFileName="")) returned 1 [0067.226] FindNextFileW (in: hFindFile=0x381d80, lpFindFileData=0x31e404 | out: lpFindFileData=0x31e404*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0x28d257a0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x52d90010, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x52d90010, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="KQMHSVKD", cAlternateFileName="")) returned 0 [0067.227] FindClose (in: hFindFile=0x381d80 | out: hFindFile=0x381d80) returned 1 [0067.227] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e68c) returned 1 [0067.227] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e698) returned 1 [0067.227] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e6cc) returned 1 [0067.227] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Feeds Cache", nBufferLength=0x105, lpBuffer=0x31e1d4, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Feeds Cache", lpFilePart=0x0) returned 0x41 [0067.227] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Feeds Cache\\", nBufferLength=0x105, lpBuffer=0x31e1a8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Feeds Cache\\", lpFilePart=0x0) returned 0x42 [0067.227] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Feeds Cache\\*", lpFindFileData=0x31e3f4 | out: lpFindFileData=0x31e3f4*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0x28d257a0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28f3aae0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xfea09ee5, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x381d80 [0067.228] FindNextFileW (in: hFindFile=0x381d80, lpFindFileData=0x31e404 | out: lpFindFileData=0x31e404*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0x28d257a0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28f3aae0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xfea09ee5, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0067.228] FindNextFileW (in: hFindFile=0x381d80, lpFindFileData=0x31e404 | out: lpFindFileData=0x31e404*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0x28d257a0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28f14980, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xfedc214c, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="1NBUR4HR", cAlternateFileName="")) returned 1 [0067.228] FindNextFileW (in: hFindFile=0x381d80, lpFindFileData=0x31e404 | out: lpFindFileData=0x31e404*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0x28d257a0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28f14980, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xfee8082e, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="6ASVN7J7", cAlternateFileName="")) returned 1 [0067.229] FindNextFileW (in: hFindFile=0x381d80, lpFindFileData=0x31e404 | out: lpFindFileData=0x31e404*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0x28d257a0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28f14980, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xff06fa11, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="D68G7BIJ", cAlternateFileName="")) returned 1 [0067.229] FindNextFileW (in: hFindFile=0x381d80, lpFindFileData=0x31e404 | out: lpFindFileData=0x31e404*(dwFileAttributes=0x2026, ftCreationTime.dwLowDateTime=0x28f14980, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28f14980, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xfe9e3d85, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x43, dwReserved0=0x0, dwReserved1=0x0, cFileName="desktop.ini", cAlternateFileName="")) returned 1 [0067.229] FindNextFileW (in: hFindFile=0x381d80, lpFindFileData=0x31e404 | out: lpFindFileData=0x31e404*(dwFileAttributes=0x2026, ftCreationTime.dwLowDateTime=0x28f14980, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28f14980, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x2bc126f0, ftLastWriteTime.dwHighDateTime=0x1d35d06, nFileSizeHigh=0x0, nFileSizeLow=0x8000, dwReserved0=0x0, dwReserved1=0x0, cFileName="index.dat", cAlternateFileName="")) returned 1 [0067.229] FindNextFileW (in: hFindFile=0x381d80, lpFindFileData=0x31e404 | out: lpFindFileData=0x31e404*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0x28d257a0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x52d90010, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x52d90010, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="KQMHSVKD", cAlternateFileName="")) returned 1 [0067.229] FindNextFileW (in: hFindFile=0x381d80, lpFindFileData=0x31e404 | out: lpFindFileData=0x31e404*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0067.229] FindClose (in: hFindFile=0x381d80 | out: hFindFile=0x381d80) returned 1 [0067.230] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e68c) returned 1 [0067.230] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e698) returned 1 [0067.230] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e654) returned 1 [0067.230] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Feeds Cache\\1NBUR4HR", nBufferLength=0x105, lpBuffer=0x31e15c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Feeds Cache\\1NBUR4HR", lpFilePart=0x0) returned 0x4a [0067.230] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Feeds Cache\\1NBUR4HR\\", nBufferLength=0x105, lpBuffer=0x31e130, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Feeds Cache\\1NBUR4HR\\", lpFilePart=0x0) returned 0x4b [0067.230] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Feeds Cache\\1NBUR4HR\\*", lpFindFileData=0x31e37c | out: lpFindFileData=0x31e37c*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0x28d257a0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28f14980, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xfedc214c, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x381d80 [0067.231] FindNextFileW (in: hFindFile=0x381d80, lpFindFileData=0x31e38c | out: lpFindFileData=0x31e38c*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0x28d257a0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28f14980, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xfedc214c, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0067.231] FindNextFileW (in: hFindFile=0x381d80, lpFindFileData=0x31e38c | out: lpFindFileData=0x31e38c*(dwFileAttributes=0x2026, ftCreationTime.dwLowDateTime=0x28f14980, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28f14980, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xfea09ee5, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x43, dwReserved0=0x0, dwReserved1=0x0, cFileName="desktop.ini", cAlternateFileName="")) returned 1 [0067.231] FindNextFileW (in: hFindFile=0x381d80, lpFindFileData=0x31e38c | out: lpFindFileData=0x31e38c*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x28f14980, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28f14980, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xfedc214c, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="fwlink[1]", cAlternateFileName="FWLINK~1")) returned 1 [0067.231] FindNextFileW (in: hFindFile=0x381d80, lpFindFileData=0x31e38c | out: lpFindFileData=0x31e38c*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0067.231] FindClose (in: hFindFile=0x381d80 | out: hFindFile=0x381d80) returned 1 [0067.232] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e614) returned 1 [0067.232] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e620) returned 1 [0067.232] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e654) returned 1 [0067.232] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Feeds Cache\\1NBUR4HR", nBufferLength=0x105, lpBuffer=0x31e15c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Feeds Cache\\1NBUR4HR", lpFilePart=0x0) returned 0x4a [0067.232] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Feeds Cache\\1NBUR4HR\\", nBufferLength=0x105, lpBuffer=0x31e130, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Feeds Cache\\1NBUR4HR\\", lpFilePart=0x0) returned 0x4b [0067.232] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Feeds Cache\\1NBUR4HR\\*", lpFindFileData=0x31e37c | out: lpFindFileData=0x31e37c*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0x28d257a0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28f14980, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xfedc214c, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x381d80 [0067.232] FindNextFileW (in: hFindFile=0x381d80, lpFindFileData=0x31e38c | out: lpFindFileData=0x31e38c*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0x28d257a0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28f14980, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xfedc214c, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0067.232] FindNextFileW (in: hFindFile=0x381d80, lpFindFileData=0x31e38c | out: lpFindFileData=0x31e38c*(dwFileAttributes=0x2026, ftCreationTime.dwLowDateTime=0x28f14980, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28f14980, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xfea09ee5, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x43, dwReserved0=0x0, dwReserved1=0x0, cFileName="desktop.ini", cAlternateFileName="")) returned 1 [0067.232] FindNextFileW (in: hFindFile=0x381d80, lpFindFileData=0x31e38c | out: lpFindFileData=0x31e38c*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x28f14980, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28f14980, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xfedc214c, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="fwlink[1]", cAlternateFileName="FWLINK~1")) returned 1 [0067.232] FindNextFileW (in: hFindFile=0x381d80, lpFindFileData=0x31e38c | out: lpFindFileData=0x31e38c*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x28f14980, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28f14980, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xfedc214c, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="fwlink[1]", cAlternateFileName="FWLINK~1")) returned 0 [0067.232] FindClose (in: hFindFile=0x381d80 | out: hFindFile=0x381d80) returned 1 [0067.232] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e614) returned 1 [0067.233] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e620) returned 1 [0067.233] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e654) returned 1 [0067.233] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Feeds Cache\\6ASVN7J7", nBufferLength=0x105, lpBuffer=0x31e15c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Feeds Cache\\6ASVN7J7", lpFilePart=0x0) returned 0x4a [0067.233] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Feeds Cache\\6ASVN7J7\\", nBufferLength=0x105, lpBuffer=0x31e130, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Feeds Cache\\6ASVN7J7\\", lpFilePart=0x0) returned 0x4b [0067.233] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Feeds Cache\\6ASVN7J7\\*", lpFindFileData=0x31e37c | out: lpFindFileData=0x31e37c*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0x28d257a0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28f14980, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xfee8082e, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x381d80 [0067.233] FindNextFileW (in: hFindFile=0x381d80, lpFindFileData=0x31e38c | out: lpFindFileData=0x31e38c*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0x28d257a0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28f14980, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xfee8082e, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0067.233] FindNextFileW (in: hFindFile=0x381d80, lpFindFileData=0x31e38c | out: lpFindFileData=0x31e38c*(dwFileAttributes=0x2026, ftCreationTime.dwLowDateTime=0x28f14980, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28f14980, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xfea09ee5, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x43, dwReserved0=0x0, dwReserved1=0x0, cFileName="desktop.ini", cAlternateFileName="")) returned 1 [0067.233] FindNextFileW (in: hFindFile=0x381d80, lpFindFileData=0x31e38c | out: lpFindFileData=0x31e38c*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x28f14980, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28f14980, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xfee8082e, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="fwlink[1]", cAlternateFileName="FWLINK~1")) returned 1 [0067.233] FindNextFileW (in: hFindFile=0x381d80, lpFindFileData=0x31e38c | out: lpFindFileData=0x31e38c*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0067.233] FindClose (in: hFindFile=0x381d80 | out: hFindFile=0x381d80) returned 1 [0067.233] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e614) returned 1 [0067.233] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e620) returned 1 [0067.233] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e654) returned 1 [0067.233] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Feeds Cache\\6ASVN7J7", nBufferLength=0x105, lpBuffer=0x31e15c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Feeds Cache\\6ASVN7J7", lpFilePart=0x0) returned 0x4a [0067.233] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Feeds Cache\\6ASVN7J7\\", nBufferLength=0x105, lpBuffer=0x31e130, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Feeds Cache\\6ASVN7J7\\", lpFilePart=0x0) returned 0x4b [0067.233] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Feeds Cache\\6ASVN7J7\\*", lpFindFileData=0x31e37c | out: lpFindFileData=0x31e37c*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0x28d257a0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28f14980, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xfee8082e, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x381d80 [0067.234] FindNextFileW (in: hFindFile=0x381d80, lpFindFileData=0x31e38c | out: lpFindFileData=0x31e38c*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0x28d257a0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28f14980, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xfee8082e, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0067.234] FindNextFileW (in: hFindFile=0x381d80, lpFindFileData=0x31e38c | out: lpFindFileData=0x31e38c*(dwFileAttributes=0x2026, ftCreationTime.dwLowDateTime=0x28f14980, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28f14980, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xfea09ee5, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x43, dwReserved0=0x0, dwReserved1=0x0, cFileName="desktop.ini", cAlternateFileName="")) returned 1 [0067.234] FindNextFileW (in: hFindFile=0x381d80, lpFindFileData=0x31e38c | out: lpFindFileData=0x31e38c*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x28f14980, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28f14980, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xfee8082e, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="fwlink[1]", cAlternateFileName="FWLINK~1")) returned 1 [0067.234] FindNextFileW (in: hFindFile=0x381d80, lpFindFileData=0x31e38c | out: lpFindFileData=0x31e38c*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x28f14980, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28f14980, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xfee8082e, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="fwlink[1]", cAlternateFileName="FWLINK~1")) returned 0 [0067.234] FindClose (in: hFindFile=0x381d80 | out: hFindFile=0x381d80) returned 1 [0067.234] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e614) returned 1 [0067.234] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e620) returned 1 [0067.234] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e654) returned 1 [0067.234] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Feeds Cache\\D68G7BIJ", nBufferLength=0x105, lpBuffer=0x31e15c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Feeds Cache\\D68G7BIJ", lpFilePart=0x0) returned 0x4a [0067.234] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Feeds Cache\\D68G7BIJ\\", nBufferLength=0x105, lpBuffer=0x31e130, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Feeds Cache\\D68G7BIJ\\", lpFilePart=0x0) returned 0x4b [0067.234] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Feeds Cache\\D68G7BIJ\\*", lpFindFileData=0x31e37c | out: lpFindFileData=0x31e37c*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0x28d257a0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28f14980, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xff06fa11, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x381d80 [0067.235] FindNextFileW (in: hFindFile=0x381d80, lpFindFileData=0x31e38c | out: lpFindFileData=0x31e38c*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0x28d257a0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28f14980, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xff06fa11, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0067.235] FindNextFileW (in: hFindFile=0x381d80, lpFindFileData=0x31e38c | out: lpFindFileData=0x31e38c*(dwFileAttributes=0x2026, ftCreationTime.dwLowDateTime=0x28f14980, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28f14980, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xfea09ee5, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x43, dwReserved0=0x0, dwReserved1=0x0, cFileName="desktop.ini", cAlternateFileName="")) returned 1 [0067.235] FindNextFileW (in: hFindFile=0x381d80, lpFindFileData=0x31e38c | out: lpFindFileData=0x31e38c*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x28f14980, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28f14980, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xff06fa11, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="fwlink[1]", cAlternateFileName="FWLINK~1")) returned 1 [0067.235] FindNextFileW (in: hFindFile=0x381d80, lpFindFileData=0x31e38c | out: lpFindFileData=0x31e38c*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0067.235] FindClose (in: hFindFile=0x381d80 | out: hFindFile=0x381d80) returned 1 [0067.235] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e614) returned 1 [0067.235] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e620) returned 1 [0067.235] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e654) returned 1 [0067.235] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Feeds Cache\\D68G7BIJ", nBufferLength=0x105, lpBuffer=0x31e15c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Feeds Cache\\D68G7BIJ", lpFilePart=0x0) returned 0x4a [0067.235] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Feeds Cache\\D68G7BIJ\\", nBufferLength=0x105, lpBuffer=0x31e130, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Feeds Cache\\D68G7BIJ\\", lpFilePart=0x0) returned 0x4b [0067.235] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Feeds Cache\\D68G7BIJ\\*", lpFindFileData=0x31e37c | out: lpFindFileData=0x31e37c*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0x28d257a0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28f14980, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xff06fa11, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x381d80 [0067.235] FindNextFileW (in: hFindFile=0x381d80, lpFindFileData=0x31e38c | out: lpFindFileData=0x31e38c*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0x28d257a0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28f14980, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xff06fa11, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0067.235] FindNextFileW (in: hFindFile=0x381d80, lpFindFileData=0x31e38c | out: lpFindFileData=0x31e38c*(dwFileAttributes=0x2026, ftCreationTime.dwLowDateTime=0x28f14980, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28f14980, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xfea09ee5, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x43, dwReserved0=0x0, dwReserved1=0x0, cFileName="desktop.ini", cAlternateFileName="")) returned 1 [0067.236] FindNextFileW (in: hFindFile=0x381d80, lpFindFileData=0x31e38c | out: lpFindFileData=0x31e38c*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x28f14980, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28f14980, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xff06fa11, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="fwlink[1]", cAlternateFileName="FWLINK~1")) returned 1 [0067.236] FindNextFileW (in: hFindFile=0x381d80, lpFindFileData=0x31e38c | out: lpFindFileData=0x31e38c*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x28f14980, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28f14980, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xff06fa11, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="fwlink[1]", cAlternateFileName="FWLINK~1")) returned 0 [0067.236] FindClose (in: hFindFile=0x381d80 | out: hFindFile=0x381d80) returned 1 [0067.236] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e614) returned 1 [0067.236] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e620) returned 1 [0067.236] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e654) returned 1 [0067.236] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Feeds Cache\\KQMHSVKD", nBufferLength=0x105, lpBuffer=0x31e15c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Feeds Cache\\KQMHSVKD", lpFilePart=0x0) returned 0x4a [0067.236] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Feeds Cache\\KQMHSVKD\\", nBufferLength=0x105, lpBuffer=0x31e130, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Feeds Cache\\KQMHSVKD\\", lpFilePart=0x0) returned 0x4b [0067.236] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Feeds Cache\\KQMHSVKD\\*", lpFindFileData=0x31e37c | out: lpFindFileData=0x31e37c*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0x28d257a0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x52d90010, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x52d90010, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x381d80 [0067.236] FindNextFileW (in: hFindFile=0x381d80, lpFindFileData=0x31e38c | out: lpFindFileData=0x31e38c*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0x28d257a0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x52d90010, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x52d90010, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0067.236] FindNextFileW (in: hFindFile=0x381d80, lpFindFileData=0x31e38c | out: lpFindFileData=0x31e38c*(dwFileAttributes=0x2026, ftCreationTime.dwLowDateTime=0x28f14980, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28f14980, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xfe9e3d85, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x43, dwReserved0=0x0, dwReserved1=0x0, cFileName="desktop.ini", cAlternateFileName="")) returned 1 [0067.237] FindNextFileW (in: hFindFile=0x381d80, lpFindFileData=0x31e38c | out: lpFindFileData=0x31e38c*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x28f14980, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28f14980, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xfed03a6b, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="fwlink[1]", cAlternateFileName="FWLINK~1")) returned 1 [0067.237] FindNextFileW (in: hFindFile=0x381d80, lpFindFileData=0x31e38c | out: lpFindFileData=0x31e38c*(dwFileAttributes=0x2000, ftCreationTime.dwLowDateTime=0x52d90010, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x52d90010, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x52d90010, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="ieonline.microsoft[1]", cAlternateFileName="IEONLI~1.MIC")) returned 1 [0067.237] FindNextFileW (in: hFindFile=0x381d80, lpFindFileData=0x31e38c | out: lpFindFileData=0x31e38c*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0067.237] FindClose (in: hFindFile=0x381d80 | out: hFindFile=0x381d80) returned 1 [0067.237] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e614) returned 1 [0067.237] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e620) returned 1 [0067.237] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e654) returned 1 [0067.237] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Feeds Cache\\KQMHSVKD", nBufferLength=0x105, lpBuffer=0x31e15c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Feeds Cache\\KQMHSVKD", lpFilePart=0x0) returned 0x4a [0067.237] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Feeds Cache\\KQMHSVKD\\", nBufferLength=0x105, lpBuffer=0x31e130, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Feeds Cache\\KQMHSVKD\\", lpFilePart=0x0) returned 0x4b [0067.237] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Feeds Cache\\KQMHSVKD\\*", lpFindFileData=0x31e37c | out: lpFindFileData=0x31e37c*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0x28d257a0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x52d90010, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x52d90010, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x381d80 [0067.237] FindNextFileW (in: hFindFile=0x381d80, lpFindFileData=0x31e38c | out: lpFindFileData=0x31e38c*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0x28d257a0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x52d90010, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x52d90010, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0067.237] FindNextFileW (in: hFindFile=0x381d80, lpFindFileData=0x31e38c | out: lpFindFileData=0x31e38c*(dwFileAttributes=0x2026, ftCreationTime.dwLowDateTime=0x28f14980, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28f14980, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xfe9e3d85, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x43, dwReserved0=0x0, dwReserved1=0x0, cFileName="desktop.ini", cAlternateFileName="")) returned 1 [0067.237] FindNextFileW (in: hFindFile=0x381d80, lpFindFileData=0x31e38c | out: lpFindFileData=0x31e38c*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x28f14980, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28f14980, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xfed03a6b, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="fwlink[1]", cAlternateFileName="FWLINK~1")) returned 1 [0067.238] FindNextFileW (in: hFindFile=0x381d80, lpFindFileData=0x31e38c | out: lpFindFileData=0x31e38c*(dwFileAttributes=0x2000, ftCreationTime.dwLowDateTime=0x52d90010, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x52d90010, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x52d90010, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="ieonline.microsoft[1]", cAlternateFileName="IEONLI~1.MIC")) returned 1 [0067.238] FindNextFileW (in: hFindFile=0x381d80, lpFindFileData=0x31e38c | out: lpFindFileData=0x31e38c*(dwFileAttributes=0x2000, ftCreationTime.dwLowDateTime=0x52d90010, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x52d90010, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x52d90010, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="ieonline.microsoft[1]", cAlternateFileName="IEONLI~1.MIC")) returned 0 [0067.238] FindClose (in: hFindFile=0x381d80 | out: hFindFile=0x381d80) returned 1 [0067.238] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e614) returned 1 [0067.238] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e620) returned 1 [0067.238] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e6cc) returned 1 [0067.238] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\FORMS", nBufferLength=0x105, lpBuffer=0x31e1d4, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\FORMS", lpFilePart=0x0) returned 0x3b [0067.238] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\FORMS\\", nBufferLength=0x105, lpBuffer=0x31e1a8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\FORMS\\", lpFilePart=0x0) returned 0x3c [0067.238] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\FORMS\\*", lpFindFileData=0x31e3f4 | out: lpFindFileData=0x31e3f4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x3d1d6940, ftCreationTime.dwHighDateTime=0x1d2fad7, ftLastAccessTime.dwLowDateTime=0x3d1d6940, ftLastAccessTime.dwHighDateTime=0x1d2fad7, ftLastWriteTime.dwLowDateTime=0x3d1d6940, ftLastWriteTime.dwHighDateTime=0x1d2fad7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x381d80 [0067.239] FindNextFileW (in: hFindFile=0x381d80, lpFindFileData=0x31e404 | out: lpFindFileData=0x31e404*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x3d1d6940, ftCreationTime.dwHighDateTime=0x1d2fad7, ftLastAccessTime.dwLowDateTime=0x3d1d6940, ftLastAccessTime.dwHighDateTime=0x1d2fad7, ftLastWriteTime.dwLowDateTime=0x3d1d6940, ftLastWriteTime.dwHighDateTime=0x1d2fad7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0067.239] FindNextFileW (in: hFindFile=0x381d80, lpFindFileData=0x31e404 | out: lpFindFileData=0x31e404*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x3d1d6940, ftCreationTime.dwHighDateTime=0x1d2fad7, ftLastAccessTime.dwLowDateTime=0x3d1d6940, ftLastAccessTime.dwHighDateTime=0x1d2fad7, ftLastWriteTime.dwLowDateTime=0x3d757c20, ftLastWriteTime.dwHighDateTime=0x1d2fad7, nFileSizeHigh=0x0, nFileSizeLow=0x3c0dc, dwReserved0=0x0, dwReserved1=0x0, cFileName="FRMCACHE.DAT", cAlternateFileName="")) returned 1 [0067.239] FindNextFileW (in: hFindFile=0x381d80, lpFindFileData=0x31e404 | out: lpFindFileData=0x31e404*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0067.239] FindClose (in: hFindFile=0x381d80 | out: hFindFile=0x381d80) returned 1 [0067.239] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e68c) returned 1 [0067.239] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e698) returned 1 [0067.239] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e6cc) returned 1 [0067.239] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\FORMS", nBufferLength=0x105, lpBuffer=0x31e1d4, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\FORMS", lpFilePart=0x0) returned 0x3b [0067.239] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\FORMS\\", nBufferLength=0x105, lpBuffer=0x31e1a8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\FORMS\\", lpFilePart=0x0) returned 0x3c [0067.239] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\FORMS\\*", lpFindFileData=0x31e3f4 | out: lpFindFileData=0x31e3f4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x3d1d6940, ftCreationTime.dwHighDateTime=0x1d2fad7, ftLastAccessTime.dwLowDateTime=0x3d1d6940, ftLastAccessTime.dwHighDateTime=0x1d2fad7, ftLastWriteTime.dwLowDateTime=0x3d1d6940, ftLastWriteTime.dwHighDateTime=0x1d2fad7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x381d80 [0067.239] FindNextFileW (in: hFindFile=0x381d80, lpFindFileData=0x31e404 | out: lpFindFileData=0x31e404*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x3d1d6940, ftCreationTime.dwHighDateTime=0x1d2fad7, ftLastAccessTime.dwLowDateTime=0x3d1d6940, ftLastAccessTime.dwHighDateTime=0x1d2fad7, ftLastWriteTime.dwLowDateTime=0x3d1d6940, ftLastWriteTime.dwHighDateTime=0x1d2fad7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0067.239] FindNextFileW (in: hFindFile=0x381d80, lpFindFileData=0x31e404 | out: lpFindFileData=0x31e404*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x3d1d6940, ftCreationTime.dwHighDateTime=0x1d2fad7, ftLastAccessTime.dwLowDateTime=0x3d1d6940, ftLastAccessTime.dwHighDateTime=0x1d2fad7, ftLastWriteTime.dwLowDateTime=0x3d757c20, ftLastWriteTime.dwHighDateTime=0x1d2fad7, nFileSizeHigh=0x0, nFileSizeLow=0x3c0dc, dwReserved0=0x0, dwReserved1=0x0, cFileName="FRMCACHE.DAT", cAlternateFileName="")) returned 1 [0067.239] FindNextFileW (in: hFindFile=0x381d80, lpFindFileData=0x31e404 | out: lpFindFileData=0x31e404*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x3d1d6940, ftCreationTime.dwHighDateTime=0x1d2fad7, ftLastAccessTime.dwLowDateTime=0x3d1d6940, ftLastAccessTime.dwHighDateTime=0x1d2fad7, ftLastWriteTime.dwLowDateTime=0x3d757c20, ftLastWriteTime.dwHighDateTime=0x1d2fad7, nFileSizeHigh=0x0, nFileSizeLow=0x3c0dc, dwReserved0=0x0, dwReserved1=0x0, cFileName="FRMCACHE.DAT", cAlternateFileName="")) returned 0 [0067.239] FindClose (in: hFindFile=0x381d80 | out: hFindFile=0x381d80) returned 1 [0067.240] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e68c) returned 1 [0067.240] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e698) returned 1 [0067.240] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e6cc) returned 1 [0067.240] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\IME12", nBufferLength=0x105, lpBuffer=0x31e1d4, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\IME12", lpFilePart=0x0) returned 0x3b [0067.240] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\IME12\\", nBufferLength=0x105, lpBuffer=0x31e1a8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\IME12\\", lpFilePart=0x0) returned 0x3c [0067.240] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\IME12\\*", lpFindFileData=0x31e3f4 | out: lpFindFileData=0x31e3f4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xcd754c00, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0xcd754c00, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0xcd754c00, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x381d80 [0067.240] FindNextFileW (in: hFindFile=0x381d80, lpFindFileData=0x31e404 | out: lpFindFileData=0x31e404*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xcd754c00, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0xcd754c00, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0xcd754c00, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0067.240] FindNextFileW (in: hFindFile=0x381d80, lpFindFileData=0x31e404 | out: lpFindFileData=0x31e404*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xcd754c00, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0xcd754c00, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0xcd754c00, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 0 [0067.240] FindClose (in: hFindFile=0x381d80 | out: hFindFile=0x381d80) returned 1 [0067.240] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e68c) returned 1 [0067.240] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e698) returned 1 [0067.240] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e6cc) returned 1 [0067.240] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\IME12", nBufferLength=0x105, lpBuffer=0x31e1d4, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\IME12", lpFilePart=0x0) returned 0x3b [0067.241] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\IME12\\", nBufferLength=0x105, lpBuffer=0x31e1a8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\IME12\\", lpFilePart=0x0) returned 0x3c [0067.241] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\IME12\\*", lpFindFileData=0x31e3f4 | out: lpFindFileData=0x31e3f4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xcd754c00, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0xcd754c00, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0xcd754c00, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x381d80 [0067.241] FindNextFileW (in: hFindFile=0x381d80, lpFindFileData=0x31e404 | out: lpFindFileData=0x31e404*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xcd754c00, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0xcd754c00, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0xcd754c00, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0067.241] FindNextFileW (in: hFindFile=0x381d80, lpFindFileData=0x31e404 | out: lpFindFileData=0x31e404*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xcd754c00, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0xcd754c00, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0xcd754c00, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 0 [0067.241] FindClose (in: hFindFile=0x381d80 | out: hFindFile=0x381d80) returned 1 [0067.241] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e68c) returned 1 [0067.241] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e698) returned 1 [0067.241] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e6cc) returned 1 [0067.241] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\IMJP12", nBufferLength=0x105, lpBuffer=0x31e1d4, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\IMJP12", lpFilePart=0x0) returned 0x3c [0067.241] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\IMJP12\\", nBufferLength=0x105, lpBuffer=0x31e1a8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\IMJP12\\", lpFilePart=0x0) returned 0x3d [0067.241] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\IMJP12\\*", lpFindFileData=0x31e3f4 | out: lpFindFileData=0x31e3f4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xcd72eaa0, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0xcd72eaa0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0xcd72eaa0, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x381d80 [0067.242] FindNextFileW (in: hFindFile=0x381d80, lpFindFileData=0x31e404 | out: lpFindFileData=0x31e404*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xcd72eaa0, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0xcd72eaa0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0xcd72eaa0, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0067.242] FindNextFileW (in: hFindFile=0x381d80, lpFindFileData=0x31e404 | out: lpFindFileData=0x31e404*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xcd72eaa0, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0xcd72eaa0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0xcd72eaa0, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 0 [0067.242] FindClose (in: hFindFile=0x381d80 | out: hFindFile=0x381d80) returned 1 [0067.242] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e68c) returned 1 [0067.243] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e698) returned 1 [0067.243] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e6cc) returned 1 [0067.243] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\IMJP12", nBufferLength=0x105, lpBuffer=0x31e1d4, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\IMJP12", lpFilePart=0x0) returned 0x3c [0067.243] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\IMJP12\\", nBufferLength=0x105, lpBuffer=0x31e1a8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\IMJP12\\", lpFilePart=0x0) returned 0x3d [0067.243] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\IMJP12\\*", lpFindFileData=0x31e3f4 | out: lpFindFileData=0x31e3f4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xcd72eaa0, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0xcd72eaa0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0xcd72eaa0, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x381d80 [0067.243] FindNextFileW (in: hFindFile=0x381d80, lpFindFileData=0x31e404 | out: lpFindFileData=0x31e404*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xcd72eaa0, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0xcd72eaa0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0xcd72eaa0, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0067.243] FindNextFileW (in: hFindFile=0x381d80, lpFindFileData=0x31e404 | out: lpFindFileData=0x31e404*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xcd72eaa0, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0xcd72eaa0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0xcd72eaa0, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 0 [0067.243] FindClose (in: hFindFile=0x381d80 | out: hFindFile=0x381d80) returned 1 [0067.243] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e68c) returned 1 [0067.243] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e698) returned 1 [0067.243] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e6cc) returned 1 [0067.243] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\IMJP8_1", nBufferLength=0x105, lpBuffer=0x31e1d4, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\IMJP8_1", lpFilePart=0x0) returned 0x3d [0067.243] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\IMJP8_1\\", nBufferLength=0x105, lpBuffer=0x31e1a8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\IMJP8_1\\", lpFilePart=0x0) returned 0x3e [0067.243] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\IMJP8_1\\*", lpFindFileData=0x31e3f4 | out: lpFindFileData=0x31e3f4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xcd72eaa0, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0xcd72eaa0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0xcd72eaa0, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x381d80 [0067.247] FindNextFileW (in: hFindFile=0x381d80, lpFindFileData=0x31e404 | out: lpFindFileData=0x31e404*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xcd72eaa0, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0xcd72eaa0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0xcd72eaa0, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0067.247] FindNextFileW (in: hFindFile=0x381d80, lpFindFileData=0x31e404 | out: lpFindFileData=0x31e404*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xcd72eaa0, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0xcd72eaa0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0xcd72eaa0, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 0 [0067.247] FindClose (in: hFindFile=0x381d80 | out: hFindFile=0x381d80) returned 1 [0067.247] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e68c) returned 1 [0067.247] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e698) returned 1 [0067.247] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e6cc) returned 1 [0067.247] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\IMJP8_1", nBufferLength=0x105, lpBuffer=0x31e1d4, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\IMJP8_1", lpFilePart=0x0) returned 0x3d [0067.247] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\IMJP8_1\\", nBufferLength=0x105, lpBuffer=0x31e1a8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\IMJP8_1\\", lpFilePart=0x0) returned 0x3e [0067.247] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\IMJP8_1\\*", lpFindFileData=0x31e3f4 | out: lpFindFileData=0x31e3f4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xcd72eaa0, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0xcd72eaa0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0xcd72eaa0, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x381d80 [0067.247] FindNextFileW (in: hFindFile=0x381d80, lpFindFileData=0x31e404 | out: lpFindFileData=0x31e404*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xcd72eaa0, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0xcd72eaa0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0xcd72eaa0, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0067.247] FindNextFileW (in: hFindFile=0x381d80, lpFindFileData=0x31e404 | out: lpFindFileData=0x31e404*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xcd72eaa0, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0xcd72eaa0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0xcd72eaa0, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 0 [0067.247] FindClose (in: hFindFile=0x381d80 | out: hFindFile=0x381d80) returned 1 [0067.247] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e68c) returned 1 [0067.247] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e698) returned 1 [0067.248] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e6cc) returned 1 [0067.248] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\IMJP9_0", nBufferLength=0x105, lpBuffer=0x31e1d4, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\IMJP9_0", lpFilePart=0x0) returned 0x3d [0067.248] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\IMJP9_0\\", nBufferLength=0x105, lpBuffer=0x31e1a8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\IMJP9_0\\", lpFilePart=0x0) returned 0x3e [0067.248] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\IMJP9_0\\*", lpFindFileData=0x31e3f4 | out: lpFindFileData=0x31e3f4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xcd72eaa0, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0xcd72eaa0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0xcd72eaa0, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x381d80 [0067.248] FindNextFileW (in: hFindFile=0x381d80, lpFindFileData=0x31e404 | out: lpFindFileData=0x31e404*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xcd72eaa0, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0xcd72eaa0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0xcd72eaa0, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0067.248] FindNextFileW (in: hFindFile=0x381d80, lpFindFileData=0x31e404 | out: lpFindFileData=0x31e404*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xcd72eaa0, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0xcd72eaa0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0xcd72eaa0, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 0 [0067.248] FindClose (in: hFindFile=0x381d80 | out: hFindFile=0x381d80) returned 1 [0067.248] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e68c) returned 1 [0067.248] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e698) returned 1 [0067.248] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e6cc) returned 1 [0067.248] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\IMJP9_0", nBufferLength=0x105, lpBuffer=0x31e1d4, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\IMJP9_0", lpFilePart=0x0) returned 0x3d [0067.248] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\IMJP9_0\\", nBufferLength=0x105, lpBuffer=0x31e1a8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\IMJP9_0\\", lpFilePart=0x0) returned 0x3e [0067.249] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\IMJP9_0\\*", lpFindFileData=0x31e3f4 | out: lpFindFileData=0x31e3f4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xcd72eaa0, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0xcd72eaa0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0xcd72eaa0, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x381d80 [0067.249] FindNextFileW (in: hFindFile=0x381d80, lpFindFileData=0x31e404 | out: lpFindFileData=0x31e404*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xcd72eaa0, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0xcd72eaa0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0xcd72eaa0, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0067.249] FindNextFileW (in: hFindFile=0x381d80, lpFindFileData=0x31e404 | out: lpFindFileData=0x31e404*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xcd72eaa0, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0xcd72eaa0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0xcd72eaa0, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 0 [0067.249] FindClose (in: hFindFile=0x381d80 | out: hFindFile=0x381d80) returned 1 [0067.249] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e68c) returned 1 [0067.249] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e698) returned 1 [0067.249] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e6cc) returned 1 [0067.249] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Internet Explorer", nBufferLength=0x105, lpBuffer=0x31e1d4, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Internet Explorer", lpFilePart=0x0) returned 0x47 [0067.249] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Internet Explorer\\", nBufferLength=0x105, lpBuffer=0x31e1a8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Internet Explorer\\", lpFilePart=0x0) returned 0x48 [0067.249] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Internet Explorer\\*", lpFindFileData=0x31e3f4 | out: lpFindFileData=0x31e3f4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x28d257a0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x1d705b70, ftLastAccessTime.dwHighDateTime=0x1d35d06, ftLastWriteTime.dwLowDateTime=0x1d705b70, ftLastWriteTime.dwHighDateTime=0x1d35d06, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x381d80 [0067.251] FindNextFileW (in: hFindFile=0x381d80, lpFindFileData=0x31e404 | out: lpFindFileData=0x31e404*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x28d257a0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x1d705b70, ftLastAccessTime.dwHighDateTime=0x1d35d06, ftLastWriteTime.dwLowDateTime=0x1d705b70, ftLastWriteTime.dwHighDateTime=0x1d35d06, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0067.258] FindNextFileW (in: hFindFile=0x381d80, lpFindFileData=0x31e404 | out: lpFindFileData=0x31e404*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x28f14980, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28f14980, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xb371c2, ftLastWriteTime.dwHighDateTime=0x1cb8927, nFileSizeHigh=0x0, nFileSizeLow=0x2fa9, dwReserved0=0x0, dwReserved1=0x0, cFileName="brndlog.bak", cAlternateFileName="")) returned 1 [0067.258] FindNextFileW (in: hFindFile=0x381d80, lpFindFileData=0x31e404 | out: lpFindFileData=0x31e404*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x28f14980, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28f14980, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x2d977900, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x2fb0, dwReserved0=0x0, dwReserved1=0x0, cFileName="brndlog.txt", cAlternateFileName="")) returned 1 [0067.258] FindNextFileW (in: hFindFile=0x381d80, lpFindFileData=0x31e404 | out: lpFindFileData=0x31e404*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0x1d705b70, ftCreationTime.dwHighDateTime=0x1d35d06, ftLastAccessTime.dwLowDateTime=0x1d705b70, ftLastAccessTime.dwHighDateTime=0x1d35d06, ftLastWriteTime.dwLowDateTime=0x1d705b70, ftLastWriteTime.dwHighDateTime=0x1d35d06, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="DOMStore", cAlternateFileName="")) returned 1 [0067.259] FindNextFileW (in: hFindFile=0x381d80, lpFindFileData=0x31e404 | out: lpFindFileData=0x31e404*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x65d58120, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x65d58120, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x65d58120, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x23f4, dwReserved0=0x0, dwReserved1=0x0, cFileName="frameiconcache.dat", cAlternateFileName="FRAMEI~1.DAT")) returned 1 [0067.259] FindNextFileW (in: hFindFile=0x381d80, lpFindFileData=0x31e404 | out: lpFindFileData=0x31e404*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x95014270, ftCreationTime.dwHighDateTime=0x1d2fab5, ftLastAccessTime.dwLowDateTime=0x95014270, ftLastAccessTime.dwHighDateTime=0x1d2fab5, ftLastWriteTime.dwLowDateTime=0x95014270, ftLastWriteTime.dwHighDateTime=0x1d2fab5, nFileSizeHigh=0x0, nFileSizeLow=0x4000, dwReserved0=0x0, dwReserved1=0x0, cFileName="MSIMGSIZ.DAT", cAlternateFileName="")) returned 1 [0067.259] FindNextFileW (in: hFindFile=0x381d80, lpFindFileData=0x31e404 | out: lpFindFileData=0x31e404*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x4ed4ae10, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x6db5fbe0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x6db5fbe0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Recovery", cAlternateFileName="")) returned 1 [0067.259] FindNextFileW (in: hFindFile=0x381d80, lpFindFileData=0x31e404 | out: lpFindFileData=0x31e404*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x4ed4ae10, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x6db5fbe0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x6db5fbe0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Recovery", cAlternateFileName="")) returned 0 [0067.259] FindClose (in: hFindFile=0x381d80 | out: hFindFile=0x381d80) returned 1 [0067.260] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e68c) returned 1 [0067.260] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e698) returned 1 [0067.260] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e6cc) returned 1 [0067.260] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Internet Explorer", nBufferLength=0x105, lpBuffer=0x31e1d4, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Internet Explorer", lpFilePart=0x0) returned 0x47 [0067.260] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Internet Explorer\\", nBufferLength=0x105, lpBuffer=0x31e1a8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Internet Explorer\\", lpFilePart=0x0) returned 0x48 [0067.260] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Internet Explorer\\*", lpFindFileData=0x31e3f4 | out: lpFindFileData=0x31e3f4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x28d257a0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x1d705b70, ftLastAccessTime.dwHighDateTime=0x1d35d06, ftLastWriteTime.dwLowDateTime=0x1d705b70, ftLastWriteTime.dwHighDateTime=0x1d35d06, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x381d80 [0067.261] FindNextFileW (in: hFindFile=0x381d80, lpFindFileData=0x31e404 | out: lpFindFileData=0x31e404*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x28d257a0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x1d705b70, ftLastAccessTime.dwHighDateTime=0x1d35d06, ftLastWriteTime.dwLowDateTime=0x1d705b70, ftLastWriteTime.dwHighDateTime=0x1d35d06, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0067.261] FindNextFileW (in: hFindFile=0x381d80, lpFindFileData=0x31e404 | out: lpFindFileData=0x31e404*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x28f14980, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28f14980, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xb371c2, ftLastWriteTime.dwHighDateTime=0x1cb8927, nFileSizeHigh=0x0, nFileSizeLow=0x2fa9, dwReserved0=0x0, dwReserved1=0x0, cFileName="brndlog.bak", cAlternateFileName="")) returned 1 [0067.261] FindNextFileW (in: hFindFile=0x381d80, lpFindFileData=0x31e404 | out: lpFindFileData=0x31e404*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x28f14980, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28f14980, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x2d977900, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x2fb0, dwReserved0=0x0, dwReserved1=0x0, cFileName="brndlog.txt", cAlternateFileName="")) returned 1 [0067.261] FindNextFileW (in: hFindFile=0x381d80, lpFindFileData=0x31e404 | out: lpFindFileData=0x31e404*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0x1d705b70, ftCreationTime.dwHighDateTime=0x1d35d06, ftLastAccessTime.dwLowDateTime=0x1d705b70, ftLastAccessTime.dwHighDateTime=0x1d35d06, ftLastWriteTime.dwLowDateTime=0x1d705b70, ftLastWriteTime.dwHighDateTime=0x1d35d06, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="DOMStore", cAlternateFileName="")) returned 1 [0067.261] FindNextFileW (in: hFindFile=0x381d80, lpFindFileData=0x31e404 | out: lpFindFileData=0x31e404*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x65d58120, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x65d58120, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x65d58120, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x23f4, dwReserved0=0x0, dwReserved1=0x0, cFileName="frameiconcache.dat", cAlternateFileName="FRAMEI~1.DAT")) returned 1 [0067.261] FindNextFileW (in: hFindFile=0x381d80, lpFindFileData=0x31e404 | out: lpFindFileData=0x31e404*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x95014270, ftCreationTime.dwHighDateTime=0x1d2fab5, ftLastAccessTime.dwLowDateTime=0x95014270, ftLastAccessTime.dwHighDateTime=0x1d2fab5, ftLastWriteTime.dwLowDateTime=0x95014270, ftLastWriteTime.dwHighDateTime=0x1d2fab5, nFileSizeHigh=0x0, nFileSizeLow=0x4000, dwReserved0=0x0, dwReserved1=0x0, cFileName="MSIMGSIZ.DAT", cAlternateFileName="")) returned 1 [0067.261] FindNextFileW (in: hFindFile=0x381d80, lpFindFileData=0x31e404 | out: lpFindFileData=0x31e404*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x4ed4ae10, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x6db5fbe0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x6db5fbe0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Recovery", cAlternateFileName="")) returned 1 [0067.261] FindNextFileW (in: hFindFile=0x381d80, lpFindFileData=0x31e404 | out: lpFindFileData=0x31e404*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0067.261] FindClose (in: hFindFile=0x381d80 | out: hFindFile=0x381d80) returned 1 [0067.262] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e68c) returned 1 [0067.262] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e698) returned 1 [0067.262] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Internet Explorer\\brndlog.txt", nBufferLength=0x105, lpBuffer=0x31e0a4, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Internet Explorer\\brndlog.txt", lpFilePart=0x0) returned 0x53 [0067.262] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e598) returned 1 [0067.262] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Internet Explorer\\brndlog.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\internet explorer\\brndlog.txt"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x178 [0067.263] GetFileType (hFile=0x178) returned 0x1 [0067.263] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e594) returned 1 [0067.263] GetFileType (hFile=0x178) returned 0x1 [0067.263] GetFileSize (in: hFile=0x178, lpFileSizeHigh=0x31e6a0 | out: lpFileSizeHigh=0x31e6a0*=0x0) returned 0x2fb0 [0067.263] ReadFile (in: hFile=0x178, lpBuffer=0x27bdd50, nNumberOfBytesToRead=0x2fb0, lpNumberOfBytesRead=0x31e64c, lpOverlapped=0x0 | out: lpBuffer=0x27bdd50*, lpNumberOfBytesRead=0x31e64c*=0x2fb0, lpOverlapped=0x0) returned 1 [0067.304] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Internet Explorer\\brndlog.txt", nBufferLength=0x105, lpBuffer=0x31e090, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Internet Explorer\\brndlog.txt", lpFilePart=0x0) returned 0x53 [0067.304] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e584) returned 1 [0067.304] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Internet Explorer\\brndlog.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\internet explorer\\brndlog.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x178 [0067.305] GetFileType (hFile=0x178) returned 0x1 [0067.305] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e580) returned 1 [0067.305] GetFileType (hFile=0x178) returned 0x1 [0067.305] WriteFile (in: hFile=0x178, lpBuffer=0x28199f4*, nNumberOfBytesToWrite=0x2fc0, lpNumberOfBytesWritten=0x31e640, lpOverlapped=0x0 | out: lpBuffer=0x28199f4*, lpNumberOfBytesWritten=0x31e640*=0x2fc0, lpOverlapped=0x0) returned 1 [0067.307] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Internet Explorer\\brndlog.txt", nBufferLength=0x105, lpBuffer=0x31e1c4, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Internet Explorer\\brndlog.txt", lpFilePart=0x0) returned 0x53 [0067.307] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Internet Explorer\\brndlog.txt", nBufferLength=0x105, lpBuffer=0x31e1c4, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Internet Explorer\\brndlog.txt", lpFilePart=0x0) returned 0x53 [0067.307] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e624) returned 1 [0067.307] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Internet Explorer\\brndlog.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\internet explorer\\brndlog.txt"), fInfoLevelId=0x0, lpFileInformation=0x31e6a0 | out: lpFileInformation=0x31e6a0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x28f14980, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28f14980, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xb8f8f60, ftLastWriteTime.dwHighDateTime=0x1d6eb7f, nFileSizeHigh=0x0, nFileSizeLow=0x2fc0)) returned 1 [0067.307] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e620) returned 1 [0067.307] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Internet Explorer\\brndlog.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\internet explorer\\brndlog.txt"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Internet Explorer\\brndlog.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\internet explorer\\brndlog.txt")) returned 1 [0067.307] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e654) returned 1 [0067.307] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Internet Explorer\\DOMStore", nBufferLength=0x105, lpBuffer=0x31e15c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Internet Explorer\\DOMStore", lpFilePart=0x0) returned 0x50 [0067.307] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Internet Explorer\\DOMStore\\", nBufferLength=0x105, lpBuffer=0x31e130, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Internet Explorer\\DOMStore\\", lpFilePart=0x0) returned 0x51 [0067.307] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Internet Explorer\\DOMStore\\*", lpFindFileData=0x31e37c | out: lpFindFileData=0x31e37c*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0x1d705b70, ftCreationTime.dwHighDateTime=0x1d35d06, ftLastAccessTime.dwLowDateTime=0x1d705b70, ftLastAccessTime.dwHighDateTime=0x1d35d06, ftLastWriteTime.dwLowDateTime=0x1d705b70, ftLastWriteTime.dwHighDateTime=0x1d35d06, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x381f40 [0067.308] FindNextFileW (in: hFindFile=0x381f40, lpFindFileData=0x31e38c | out: lpFindFileData=0x31e38c*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0x1d705b70, ftCreationTime.dwHighDateTime=0x1d35d06, ftLastAccessTime.dwLowDateTime=0x1d705b70, ftLastAccessTime.dwHighDateTime=0x1d35d06, ftLastWriteTime.dwLowDateTime=0x1d705b70, ftLastWriteTime.dwHighDateTime=0x1d35d06, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0067.308] FindNextFileW (in: hFindFile=0x381f40, lpFindFileData=0x31e38c | out: lpFindFileData=0x31e38c*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0x1d705b70, ftCreationTime.dwHighDateTime=0x1d35d06, ftLastAccessTime.dwLowDateTime=0x1d705b70, ftLastAccessTime.dwHighDateTime=0x1d35d06, ftLastWriteTime.dwLowDateTime=0x1d705b70, ftLastWriteTime.dwHighDateTime=0x1d35d06, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="3LKBQZJ3", cAlternateFileName="")) returned 1 [0067.308] FindNextFileW (in: hFindFile=0x381f40, lpFindFileData=0x31e38c | out: lpFindFileData=0x31e38c*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0x1d705b70, ftCreationTime.dwHighDateTime=0x1d35d06, ftLastAccessTime.dwLowDateTime=0x1d705b70, ftLastAccessTime.dwHighDateTime=0x1d35d06, ftLastWriteTime.dwLowDateTime=0x1d705b70, ftLastWriteTime.dwHighDateTime=0x1d35d06, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="8NES5H33", cAlternateFileName="")) returned 1 [0067.308] FindNextFileW (in: hFindFile=0x381f40, lpFindFileData=0x31e38c | out: lpFindFileData=0x31e38c*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0x1d705b70, ftCreationTime.dwHighDateTime=0x1d35d06, ftLastAccessTime.dwLowDateTime=0x1d705b70, ftLastAccessTime.dwHighDateTime=0x1d35d06, ftLastWriteTime.dwLowDateTime=0x1d705b70, ftLastWriteTime.dwHighDateTime=0x1d35d06, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="FKLUIDU0", cAlternateFileName="")) returned 1 [0067.308] FindNextFileW (in: hFindFile=0x381f40, lpFindFileData=0x31e38c | out: lpFindFileData=0x31e38c*(dwFileAttributes=0x2026, ftCreationTime.dwLowDateTime=0x1d705b70, ftCreationTime.dwHighDateTime=0x1d35d06, ftLastAccessTime.dwLowDateTime=0x1d705b70, ftLastAccessTime.dwHighDateTime=0x1d35d06, ftLastWriteTime.dwLowDateTime=0x125db390, ftLastWriteTime.dwHighDateTime=0x1d35d06, nFileSizeHigh=0x0, nFileSizeLow=0x8000, dwReserved0=0x0, dwReserved1=0x0, cFileName="index.dat", cAlternateFileName="")) returned 1 [0067.308] FindNextFileW (in: hFindFile=0x381f40, lpFindFileData=0x31e38c | out: lpFindFileData=0x31e38c*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0x1d705b70, ftCreationTime.dwHighDateTime=0x1d35d06, ftLastAccessTime.dwLowDateTime=0x1d705b70, ftLastAccessTime.dwHighDateTime=0x1d35d06, ftLastWriteTime.dwLowDateTime=0x1d705b70, ftLastWriteTime.dwHighDateTime=0x1d35d06, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="OWLVMZRC", cAlternateFileName="")) returned 1 [0067.308] FindNextFileW (in: hFindFile=0x381f40, lpFindFileData=0x31e38c | out: lpFindFileData=0x31e38c*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0x1d705b70, ftCreationTime.dwHighDateTime=0x1d35d06, ftLastAccessTime.dwLowDateTime=0x1d705b70, ftLastAccessTime.dwHighDateTime=0x1d35d06, ftLastWriteTime.dwLowDateTime=0x1d705b70, ftLastWriteTime.dwHighDateTime=0x1d35d06, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="OWLVMZRC", cAlternateFileName="")) returned 0 [0067.308] FindClose (in: hFindFile=0x381f40 | out: hFindFile=0x381f40) returned 1 [0067.308] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e614) returned 1 [0067.309] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e620) returned 1 [0067.309] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e654) returned 1 [0067.309] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Internet Explorer\\DOMStore", nBufferLength=0x105, lpBuffer=0x31e15c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Internet Explorer\\DOMStore", lpFilePart=0x0) returned 0x50 [0067.309] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Internet Explorer\\DOMStore\\", nBufferLength=0x105, lpBuffer=0x31e130, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Internet Explorer\\DOMStore\\", lpFilePart=0x0) returned 0x51 [0067.309] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Internet Explorer\\DOMStore\\*", lpFindFileData=0x31e37c | out: lpFindFileData=0x31e37c*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0x1d705b70, ftCreationTime.dwHighDateTime=0x1d35d06, ftLastAccessTime.dwLowDateTime=0x1d705b70, ftLastAccessTime.dwHighDateTime=0x1d35d06, ftLastWriteTime.dwLowDateTime=0x1d705b70, ftLastWriteTime.dwHighDateTime=0x1d35d06, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x381f40 [0067.309] FindNextFileW (in: hFindFile=0x381f40, lpFindFileData=0x31e38c | out: lpFindFileData=0x31e38c*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0x1d705b70, ftCreationTime.dwHighDateTime=0x1d35d06, ftLastAccessTime.dwLowDateTime=0x1d705b70, ftLastAccessTime.dwHighDateTime=0x1d35d06, ftLastWriteTime.dwLowDateTime=0x1d705b70, ftLastWriteTime.dwHighDateTime=0x1d35d06, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0067.309] FindNextFileW (in: hFindFile=0x381f40, lpFindFileData=0x31e38c | out: lpFindFileData=0x31e38c*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0x1d705b70, ftCreationTime.dwHighDateTime=0x1d35d06, ftLastAccessTime.dwLowDateTime=0x1d705b70, ftLastAccessTime.dwHighDateTime=0x1d35d06, ftLastWriteTime.dwLowDateTime=0x1d705b70, ftLastWriteTime.dwHighDateTime=0x1d35d06, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="3LKBQZJ3", cAlternateFileName="")) returned 1 [0067.309] FindNextFileW (in: hFindFile=0x381f40, lpFindFileData=0x31e38c | out: lpFindFileData=0x31e38c*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0x1d705b70, ftCreationTime.dwHighDateTime=0x1d35d06, ftLastAccessTime.dwLowDateTime=0x1d705b70, ftLastAccessTime.dwHighDateTime=0x1d35d06, ftLastWriteTime.dwLowDateTime=0x1d705b70, ftLastWriteTime.dwHighDateTime=0x1d35d06, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="8NES5H33", cAlternateFileName="")) returned 1 [0067.309] FindNextFileW (in: hFindFile=0x381f40, lpFindFileData=0x31e38c | out: lpFindFileData=0x31e38c*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0x1d705b70, ftCreationTime.dwHighDateTime=0x1d35d06, ftLastAccessTime.dwLowDateTime=0x1d705b70, ftLastAccessTime.dwHighDateTime=0x1d35d06, ftLastWriteTime.dwLowDateTime=0x1d705b70, ftLastWriteTime.dwHighDateTime=0x1d35d06, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="FKLUIDU0", cAlternateFileName="")) returned 1 [0067.309] FindNextFileW (in: hFindFile=0x381f40, lpFindFileData=0x31e38c | out: lpFindFileData=0x31e38c*(dwFileAttributes=0x2026, ftCreationTime.dwLowDateTime=0x1d705b70, ftCreationTime.dwHighDateTime=0x1d35d06, ftLastAccessTime.dwLowDateTime=0x1d705b70, ftLastAccessTime.dwHighDateTime=0x1d35d06, ftLastWriteTime.dwLowDateTime=0x125db390, ftLastWriteTime.dwHighDateTime=0x1d35d06, nFileSizeHigh=0x0, nFileSizeLow=0x8000, dwReserved0=0x0, dwReserved1=0x0, cFileName="index.dat", cAlternateFileName="")) returned 1 [0067.309] FindNextFileW (in: hFindFile=0x381f40, lpFindFileData=0x31e38c | out: lpFindFileData=0x31e38c*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0x1d705b70, ftCreationTime.dwHighDateTime=0x1d35d06, ftLastAccessTime.dwLowDateTime=0x1d705b70, ftLastAccessTime.dwHighDateTime=0x1d35d06, ftLastWriteTime.dwLowDateTime=0x1d705b70, ftLastWriteTime.dwHighDateTime=0x1d35d06, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="OWLVMZRC", cAlternateFileName="")) returned 1 [0067.309] FindNextFileW (in: hFindFile=0x381f40, lpFindFileData=0x31e38c | out: lpFindFileData=0x31e38c*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0067.309] FindClose (in: hFindFile=0x381f40 | out: hFindFile=0x381f40) returned 1 [0067.309] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e614) returned 1 [0067.309] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e620) returned 1 [0067.309] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e5dc) returned 1 [0067.309] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Internet Explorer\\DOMStore\\3LKBQZJ3", nBufferLength=0x105, lpBuffer=0x31e0e4, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Internet Explorer\\DOMStore\\3LKBQZJ3", lpFilePart=0x0) returned 0x59 [0067.309] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Internet Explorer\\DOMStore\\3LKBQZJ3\\", nBufferLength=0x105, lpBuffer=0x31e0b8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Internet Explorer\\DOMStore\\3LKBQZJ3\\", lpFilePart=0x0) returned 0x5a [0067.309] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Internet Explorer\\DOMStore\\3LKBQZJ3\\*", lpFindFileData=0x31e304 | out: lpFindFileData=0x31e304*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0x1d705b70, ftCreationTime.dwHighDateTime=0x1d35d06, ftLastAccessTime.dwLowDateTime=0x1d705b70, ftLastAccessTime.dwHighDateTime=0x1d35d06, ftLastWriteTime.dwLowDateTime=0x1d705b70, ftLastWriteTime.dwHighDateTime=0x1d35d06, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x381f40 [0067.310] FindNextFileW (in: hFindFile=0x381f40, lpFindFileData=0x31e314 | out: lpFindFileData=0x31e314*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0x1d705b70, ftCreationTime.dwHighDateTime=0x1d35d06, ftLastAccessTime.dwLowDateTime=0x1d705b70, ftLastAccessTime.dwHighDateTime=0x1d35d06, ftLastWriteTime.dwLowDateTime=0x1d705b70, ftLastWriteTime.dwHighDateTime=0x1d35d06, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0067.310] FindNextFileW (in: hFindFile=0x381f40, lpFindFileData=0x31e314 | out: lpFindFileData=0x31e314*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0x1d705b70, ftCreationTime.dwHighDateTime=0x1d35d06, ftLastAccessTime.dwLowDateTime=0x1d705b70, ftLastAccessTime.dwHighDateTime=0x1d35d06, ftLastWriteTime.dwLowDateTime=0x1d705b70, ftLastWriteTime.dwHighDateTime=0x1d35d06, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 0 [0067.310] FindClose (in: hFindFile=0x381f40 | out: hFindFile=0x381f40) returned 1 [0067.310] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e59c) returned 1 [0067.310] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e5a8) returned 1 [0067.310] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e5dc) returned 1 [0067.310] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Internet Explorer\\DOMStore\\3LKBQZJ3", nBufferLength=0x105, lpBuffer=0x31e0e4, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Internet Explorer\\DOMStore\\3LKBQZJ3", lpFilePart=0x0) returned 0x59 [0067.310] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Internet Explorer\\DOMStore\\3LKBQZJ3\\", nBufferLength=0x105, lpBuffer=0x31e0b8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Internet Explorer\\DOMStore\\3LKBQZJ3\\", lpFilePart=0x0) returned 0x5a [0067.310] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Internet Explorer\\DOMStore\\3LKBQZJ3\\*", lpFindFileData=0x31e304 | out: lpFindFileData=0x31e304*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0x1d705b70, ftCreationTime.dwHighDateTime=0x1d35d06, ftLastAccessTime.dwLowDateTime=0x1d705b70, ftLastAccessTime.dwHighDateTime=0x1d35d06, ftLastWriteTime.dwLowDateTime=0x1d705b70, ftLastWriteTime.dwHighDateTime=0x1d35d06, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x381f40 [0067.310] FindNextFileW (in: hFindFile=0x381f40, lpFindFileData=0x31e314 | out: lpFindFileData=0x31e314*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0x1d705b70, ftCreationTime.dwHighDateTime=0x1d35d06, ftLastAccessTime.dwLowDateTime=0x1d705b70, ftLastAccessTime.dwHighDateTime=0x1d35d06, ftLastWriteTime.dwLowDateTime=0x1d705b70, ftLastWriteTime.dwHighDateTime=0x1d35d06, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0067.310] FindNextFileW (in: hFindFile=0x381f40, lpFindFileData=0x31e314 | out: lpFindFileData=0x31e314*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0x1d705b70, ftCreationTime.dwHighDateTime=0x1d35d06, ftLastAccessTime.dwLowDateTime=0x1d705b70, ftLastAccessTime.dwHighDateTime=0x1d35d06, ftLastWriteTime.dwLowDateTime=0x1d705b70, ftLastWriteTime.dwHighDateTime=0x1d35d06, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 0 [0067.310] FindClose (in: hFindFile=0x381f40 | out: hFindFile=0x381f40) returned 1 [0067.310] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e59c) returned 1 [0067.310] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e5a8) returned 1 [0067.310] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e5dc) returned 1 [0067.310] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Internet Explorer\\DOMStore\\8NES5H33", nBufferLength=0x105, lpBuffer=0x31e0e4, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Internet Explorer\\DOMStore\\8NES5H33", lpFilePart=0x0) returned 0x59 [0067.310] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Internet Explorer\\DOMStore\\8NES5H33\\", nBufferLength=0x105, lpBuffer=0x31e0b8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Internet Explorer\\DOMStore\\8NES5H33\\", lpFilePart=0x0) returned 0x5a [0067.311] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Internet Explorer\\DOMStore\\8NES5H33\\*", lpFindFileData=0x31e304 | out: lpFindFileData=0x31e304*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0x1d705b70, ftCreationTime.dwHighDateTime=0x1d35d06, ftLastAccessTime.dwLowDateTime=0x1d705b70, ftLastAccessTime.dwHighDateTime=0x1d35d06, ftLastWriteTime.dwLowDateTime=0x1d705b70, ftLastWriteTime.dwHighDateTime=0x1d35d06, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x381f40 [0067.311] FindNextFileW (in: hFindFile=0x381f40, lpFindFileData=0x31e314 | out: lpFindFileData=0x31e314*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0x1d705b70, ftCreationTime.dwHighDateTime=0x1d35d06, ftLastAccessTime.dwLowDateTime=0x1d705b70, ftLastAccessTime.dwHighDateTime=0x1d35d06, ftLastWriteTime.dwLowDateTime=0x1d705b70, ftLastWriteTime.dwHighDateTime=0x1d35d06, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0067.311] FindNextFileW (in: hFindFile=0x381f40, lpFindFileData=0x31e314 | out: lpFindFileData=0x31e314*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x1d705b70, ftCreationTime.dwHighDateTime=0x1d35d06, ftLastAccessTime.dwLowDateTime=0x1d705b70, ftLastAccessTime.dwHighDateTime=0x1d35d06, ftLastWriteTime.dwLowDateTime=0x1d941010, ftLastWriteTime.dwHighDateTime=0x1d35d06, nFileSizeHigh=0x0, nFileSizeLow=0xd, dwReserved0=0x0, dwReserved1=0x0, cFileName="get.adobe[1].xml", cAlternateFileName="GETADO~1.XML")) returned 1 [0067.311] FindNextFileW (in: hFindFile=0x381f40, lpFindFileData=0x31e314 | out: lpFindFileData=0x31e314*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0067.311] FindClose (in: hFindFile=0x381f40 | out: hFindFile=0x381f40) returned 1 [0067.311] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e59c) returned 1 [0067.311] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e5a8) returned 1 [0067.311] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e5dc) returned 1 [0067.311] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Internet Explorer\\DOMStore\\8NES5H33", nBufferLength=0x105, lpBuffer=0x31e0e4, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Internet Explorer\\DOMStore\\8NES5H33", lpFilePart=0x0) returned 0x59 [0067.311] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Internet Explorer\\DOMStore\\8NES5H33\\", nBufferLength=0x105, lpBuffer=0x31e0b8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Internet Explorer\\DOMStore\\8NES5H33\\", lpFilePart=0x0) returned 0x5a [0067.311] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Internet Explorer\\DOMStore\\8NES5H33\\*", lpFindFileData=0x31e304 | out: lpFindFileData=0x31e304*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0x1d705b70, ftCreationTime.dwHighDateTime=0x1d35d06, ftLastAccessTime.dwLowDateTime=0x1d705b70, ftLastAccessTime.dwHighDateTime=0x1d35d06, ftLastWriteTime.dwLowDateTime=0x1d705b70, ftLastWriteTime.dwHighDateTime=0x1d35d06, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x381f40 [0067.311] FindNextFileW (in: hFindFile=0x381f40, lpFindFileData=0x31e314 | out: lpFindFileData=0x31e314*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0x1d705b70, ftCreationTime.dwHighDateTime=0x1d35d06, ftLastAccessTime.dwLowDateTime=0x1d705b70, ftLastAccessTime.dwHighDateTime=0x1d35d06, ftLastWriteTime.dwLowDateTime=0x1d705b70, ftLastWriteTime.dwHighDateTime=0x1d35d06, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0067.311] FindNextFileW (in: hFindFile=0x381f40, lpFindFileData=0x31e314 | out: lpFindFileData=0x31e314*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x1d705b70, ftCreationTime.dwHighDateTime=0x1d35d06, ftLastAccessTime.dwLowDateTime=0x1d705b70, ftLastAccessTime.dwHighDateTime=0x1d35d06, ftLastWriteTime.dwLowDateTime=0x1d941010, ftLastWriteTime.dwHighDateTime=0x1d35d06, nFileSizeHigh=0x0, nFileSizeLow=0xd, dwReserved0=0x0, dwReserved1=0x0, cFileName="get.adobe[1].xml", cAlternateFileName="GETADO~1.XML")) returned 1 [0067.311] FindNextFileW (in: hFindFile=0x381f40, lpFindFileData=0x31e314 | out: lpFindFileData=0x31e314*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x1d705b70, ftCreationTime.dwHighDateTime=0x1d35d06, ftLastAccessTime.dwLowDateTime=0x1d705b70, ftLastAccessTime.dwHighDateTime=0x1d35d06, ftLastWriteTime.dwLowDateTime=0x1d941010, ftLastWriteTime.dwHighDateTime=0x1d35d06, nFileSizeHigh=0x0, nFileSizeLow=0xd, dwReserved0=0x0, dwReserved1=0x0, cFileName="get.adobe[1].xml", cAlternateFileName="GETADO~1.XML")) returned 0 [0067.311] FindClose (in: hFindFile=0x381f40 | out: hFindFile=0x381f40) returned 1 [0067.311] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e59c) returned 1 [0067.312] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e5a8) returned 1 [0067.312] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Internet Explorer\\DOMStore\\8NES5H33\\get.adobe[1].xml", nBufferLength=0x105, lpBuffer=0x31dfb4, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Internet Explorer\\DOMStore\\8NES5H33\\get.adobe[1].xml", lpFilePart=0x0) returned 0x6a [0067.312] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e4a8) returned 1 [0067.312] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Internet Explorer\\DOMStore\\8NES5H33\\get.adobe[1].xml" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\internet explorer\\domstore\\8nes5h33\\get.adobe[1].xml"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x178 [0067.312] GetFileType (hFile=0x178) returned 0x1 [0067.312] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e4a4) returned 1 [0067.312] GetFileType (hFile=0x178) returned 0x1 [0067.312] GetFileSize (in: hFile=0x178, lpFileSizeHigh=0x31e5b0 | out: lpFileSizeHigh=0x31e5b0*=0x0) returned 0xd [0067.312] ReadFile (in: hFile=0x178, lpBuffer=0x282312c, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x31e55c, lpOverlapped=0x0 | out: lpBuffer=0x282312c*, lpNumberOfBytesRead=0x31e55c*=0xd, lpOverlapped=0x0) returned 1 [0067.351] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Internet Explorer\\DOMStore\\8NES5H33\\get.adobe[1].xml", nBufferLength=0x105, lpBuffer=0x31dfa0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Internet Explorer\\DOMStore\\8NES5H33\\get.adobe[1].xml", lpFilePart=0x0) returned 0x6a [0067.351] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e494) returned 1 [0067.351] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Internet Explorer\\DOMStore\\8NES5H33\\get.adobe[1].xml" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\internet explorer\\domstore\\8nes5h33\\get.adobe[1].xml"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x178 [0067.352] GetFileType (hFile=0x178) returned 0x1 [0067.352] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e490) returned 1 [0067.352] GetFileType (hFile=0x178) returned 0x1 [0067.352] WriteFile (in: hFile=0x178, lpBuffer=0x2672f30*, nNumberOfBytesToWrite=0x10, lpNumberOfBytesWritten=0x31e524, lpOverlapped=0x0 | out: lpBuffer=0x2672f30*, lpNumberOfBytesWritten=0x31e524*=0x10, lpOverlapped=0x0) returned 1 [0067.353] CloseHandle (hObject=0x178) returned 1 [0067.353] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Internet Explorer\\DOMStore\\8NES5H33\\get.adobe[1].xml", nBufferLength=0x105, lpBuffer=0x31e0d4, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Internet Explorer\\DOMStore\\8NES5H33\\get.adobe[1].xml", lpFilePart=0x0) returned 0x6a [0067.353] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Internet Explorer\\DOMStore\\8NES5H33\\get.adobe[1].xml", nBufferLength=0x105, lpBuffer=0x31e0d4, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Internet Explorer\\DOMStore\\8NES5H33\\get.adobe[1].xml", lpFilePart=0x0) returned 0x6a [0067.353] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e534) returned 1 [0067.353] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Internet Explorer\\DOMStore\\8NES5H33\\get.adobe[1].xml" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\internet explorer\\domstore\\8nes5h33\\get.adobe[1].xml"), fInfoLevelId=0x0, lpFileInformation=0x31e5b0 | out: lpFileInformation=0x31e5b0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x1d705b70, ftCreationTime.dwHighDateTime=0x1d35d06, ftLastAccessTime.dwLowDateTime=0x1d705b70, ftLastAccessTime.dwHighDateTime=0x1d35d06, ftLastWriteTime.dwLowDateTime=0xb96b380, ftLastWriteTime.dwHighDateTime=0x1d6eb7f, nFileSizeHigh=0x0, nFileSizeLow=0x10)) returned 1 [0067.353] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e530) returned 1 [0067.353] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Internet Explorer\\DOMStore\\8NES5H33\\get.adobe[1].xml" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\internet explorer\\domstore\\8nes5h33\\get.adobe[1].xml"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Internet Explorer\\DOMStore\\8NES5H33\\get.adobe[1].xml" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\internet explorer\\domstore\\8nes5h33\\get.adobe[1].xml")) returned 1 [0067.353] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e5dc) returned 1 [0067.353] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Internet Explorer\\DOMStore\\FKLUIDU0", nBufferLength=0x105, lpBuffer=0x31e0e4, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Internet Explorer\\DOMStore\\FKLUIDU0", lpFilePart=0x0) returned 0x59 [0067.354] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Internet Explorer\\DOMStore\\FKLUIDU0\\", nBufferLength=0x105, lpBuffer=0x31e0b8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Internet Explorer\\DOMStore\\FKLUIDU0\\", lpFilePart=0x0) returned 0x5a [0067.354] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Internet Explorer\\DOMStore\\FKLUIDU0\\*", lpFindFileData=0x31e304 | out: lpFindFileData=0x31e304*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0x1d705b70, ftCreationTime.dwHighDateTime=0x1d35d06, ftLastAccessTime.dwLowDateTime=0x1d705b70, ftLastAccessTime.dwHighDateTime=0x1d35d06, ftLastWriteTime.dwLowDateTime=0x1d705b70, ftLastWriteTime.dwHighDateTime=0x1d35d06, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x381d80 [0067.354] FindNextFileW (in: hFindFile=0x381d80, lpFindFileData=0x31e314 | out: lpFindFileData=0x31e314*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0x1d705b70, ftCreationTime.dwHighDateTime=0x1d35d06, ftLastAccessTime.dwLowDateTime=0x1d705b70, ftLastAccessTime.dwHighDateTime=0x1d35d06, ftLastWriteTime.dwLowDateTime=0x1d705b70, ftLastWriteTime.dwHighDateTime=0x1d35d06, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0067.354] FindNextFileW (in: hFindFile=0x381d80, lpFindFileData=0x31e314 | out: lpFindFileData=0x31e314*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0x1d705b70, ftCreationTime.dwHighDateTime=0x1d35d06, ftLastAccessTime.dwLowDateTime=0x1d705b70, ftLastAccessTime.dwHighDateTime=0x1d35d06, ftLastWriteTime.dwLowDateTime=0x1d705b70, ftLastWriteTime.dwHighDateTime=0x1d35d06, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 0 [0067.354] FindClose (in: hFindFile=0x381d80 | out: hFindFile=0x381d80) returned 1 [0067.354] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e59c) returned 1 [0067.354] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e5a8) returned 1 [0067.354] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e5dc) returned 1 [0067.354] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Internet Explorer\\DOMStore\\FKLUIDU0", nBufferLength=0x105, lpBuffer=0x31e0e4, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Internet Explorer\\DOMStore\\FKLUIDU0", lpFilePart=0x0) returned 0x59 [0067.354] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Internet Explorer\\DOMStore\\FKLUIDU0\\", nBufferLength=0x105, lpBuffer=0x31e0b8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Internet Explorer\\DOMStore\\FKLUIDU0\\", lpFilePart=0x0) returned 0x5a [0067.354] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Internet Explorer\\DOMStore\\FKLUIDU0\\*", lpFindFileData=0x31e304 | out: lpFindFileData=0x31e304*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0x1d705b70, ftCreationTime.dwHighDateTime=0x1d35d06, ftLastAccessTime.dwLowDateTime=0x1d705b70, ftLastAccessTime.dwHighDateTime=0x1d35d06, ftLastWriteTime.dwLowDateTime=0x1d705b70, ftLastWriteTime.dwHighDateTime=0x1d35d06, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x381d80 [0067.355] FindNextFileW (in: hFindFile=0x381d80, lpFindFileData=0x31e314 | out: lpFindFileData=0x31e314*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0x1d705b70, ftCreationTime.dwHighDateTime=0x1d35d06, ftLastAccessTime.dwLowDateTime=0x1d705b70, ftLastAccessTime.dwHighDateTime=0x1d35d06, ftLastWriteTime.dwLowDateTime=0x1d705b70, ftLastWriteTime.dwHighDateTime=0x1d35d06, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0067.355] FindNextFileW (in: hFindFile=0x381d80, lpFindFileData=0x31e314 | out: lpFindFileData=0x31e314*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0x1d705b70, ftCreationTime.dwHighDateTime=0x1d35d06, ftLastAccessTime.dwLowDateTime=0x1d705b70, ftLastAccessTime.dwHighDateTime=0x1d35d06, ftLastWriteTime.dwLowDateTime=0x1d705b70, ftLastWriteTime.dwHighDateTime=0x1d35d06, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 0 [0067.355] FindClose (in: hFindFile=0x381d80 | out: hFindFile=0x381d80) returned 1 [0067.355] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e59c) returned 1 [0067.355] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e5a8) returned 1 [0067.355] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e5dc) returned 1 [0067.355] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Internet Explorer\\DOMStore\\OWLVMZRC", nBufferLength=0x105, lpBuffer=0x31e0e4, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Internet Explorer\\DOMStore\\OWLVMZRC", lpFilePart=0x0) returned 0x59 [0067.355] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Internet Explorer\\DOMStore\\OWLVMZRC\\", nBufferLength=0x105, lpBuffer=0x31e0b8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Internet Explorer\\DOMStore\\OWLVMZRC\\", lpFilePart=0x0) returned 0x5a [0067.355] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Internet Explorer\\DOMStore\\OWLVMZRC\\*", lpFindFileData=0x31e304 | out: lpFindFileData=0x31e304*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0x1d705b70, ftCreationTime.dwHighDateTime=0x1d35d06, ftLastAccessTime.dwLowDateTime=0x1d705b70, ftLastAccessTime.dwHighDateTime=0x1d35d06, ftLastWriteTime.dwLowDateTime=0x1d705b70, ftLastWriteTime.dwHighDateTime=0x1d35d06, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x381d80 [0067.355] FindNextFileW (in: hFindFile=0x381d80, lpFindFileData=0x31e314 | out: lpFindFileData=0x31e314*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0x1d705b70, ftCreationTime.dwHighDateTime=0x1d35d06, ftLastAccessTime.dwLowDateTime=0x1d705b70, ftLastAccessTime.dwHighDateTime=0x1d35d06, ftLastWriteTime.dwLowDateTime=0x1d705b70, ftLastWriteTime.dwHighDateTime=0x1d35d06, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0067.356] FindNextFileW (in: hFindFile=0x381d80, lpFindFileData=0x31e314 | out: lpFindFileData=0x31e314*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0x1d705b70, ftCreationTime.dwHighDateTime=0x1d35d06, ftLastAccessTime.dwLowDateTime=0x1d705b70, ftLastAccessTime.dwHighDateTime=0x1d35d06, ftLastWriteTime.dwLowDateTime=0x1d705b70, ftLastWriteTime.dwHighDateTime=0x1d35d06, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 0 [0067.356] FindClose (in: hFindFile=0x381d80 | out: hFindFile=0x381d80) returned 1 [0067.356] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e59c) returned 1 [0067.356] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e5a8) returned 1 [0067.356] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e5dc) returned 1 [0067.356] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Internet Explorer\\DOMStore\\OWLVMZRC", nBufferLength=0x105, lpBuffer=0x31e0e4, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Internet Explorer\\DOMStore\\OWLVMZRC", lpFilePart=0x0) returned 0x59 [0067.356] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Internet Explorer\\DOMStore\\OWLVMZRC\\", nBufferLength=0x105, lpBuffer=0x31e0b8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Internet Explorer\\DOMStore\\OWLVMZRC\\", lpFilePart=0x0) returned 0x5a [0067.356] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Internet Explorer\\DOMStore\\OWLVMZRC\\*", lpFindFileData=0x31e304 | out: lpFindFileData=0x31e304*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0x1d705b70, ftCreationTime.dwHighDateTime=0x1d35d06, ftLastAccessTime.dwLowDateTime=0x1d705b70, ftLastAccessTime.dwHighDateTime=0x1d35d06, ftLastWriteTime.dwLowDateTime=0x1d705b70, ftLastWriteTime.dwHighDateTime=0x1d35d06, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x381d80 [0067.356] FindNextFileW (in: hFindFile=0x381d80, lpFindFileData=0x31e314 | out: lpFindFileData=0x31e314*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0x1d705b70, ftCreationTime.dwHighDateTime=0x1d35d06, ftLastAccessTime.dwLowDateTime=0x1d705b70, ftLastAccessTime.dwHighDateTime=0x1d35d06, ftLastWriteTime.dwLowDateTime=0x1d705b70, ftLastWriteTime.dwHighDateTime=0x1d35d06, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0067.356] FindNextFileW (in: hFindFile=0x381d80, lpFindFileData=0x31e314 | out: lpFindFileData=0x31e314*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0x1d705b70, ftCreationTime.dwHighDateTime=0x1d35d06, ftLastAccessTime.dwLowDateTime=0x1d705b70, ftLastAccessTime.dwHighDateTime=0x1d35d06, ftLastWriteTime.dwLowDateTime=0x1d705b70, ftLastWriteTime.dwHighDateTime=0x1d35d06, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 0 [0067.356] FindClose (in: hFindFile=0x381d80 | out: hFindFile=0x381d80) returned 1 [0067.356] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e59c) returned 1 [0067.356] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e5a8) returned 1 [0067.357] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e654) returned 1 [0067.357] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Internet Explorer\\Recovery", nBufferLength=0x105, lpBuffer=0x31e15c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Internet Explorer\\Recovery", lpFilePart=0x0) returned 0x50 [0067.357] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Internet Explorer\\Recovery\\", nBufferLength=0x105, lpBuffer=0x31e130, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Internet Explorer\\Recovery\\", lpFilePart=0x0) returned 0x51 [0067.357] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Internet Explorer\\Recovery\\*", lpFindFileData=0x31e37c | out: lpFindFileData=0x31e37c*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x4ed4ae10, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x6db5fbe0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x6db5fbe0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x381d80 [0067.357] FindNextFileW (in: hFindFile=0x381d80, lpFindFileData=0x31e38c | out: lpFindFileData=0x31e38c*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x4ed4ae10, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x6db5fbe0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x6db5fbe0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0067.357] FindNextFileW (in: hFindFile=0x381d80, lpFindFileData=0x31e38c | out: lpFindFileData=0x31e38c*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x4ed70f70, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x2bc84b10, ftLastAccessTime.dwHighDateTime=0x1d35d06, ftLastWriteTime.dwLowDateTime=0x2bc84b10, ftLastWriteTime.dwHighDateTime=0x1d35d06, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Active", cAlternateFileName="")) returned 1 [0067.357] FindNextFileW (in: hFindFile=0x381d80, lpFindFileData=0x31e38c | out: lpFindFileData=0x31e38c*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x6db5fbe0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x30603250, ftLastAccessTime.dwHighDateTime=0x1d35d06, ftLastWriteTime.dwLowDateTime=0x30603250, ftLastWriteTime.dwHighDateTime=0x1d35d06, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Last Active", cAlternateFileName="LASTAC~1")) returned 1 [0067.357] FindNextFileW (in: hFindFile=0x381d80, lpFindFileData=0x31e38c | out: lpFindFileData=0x31e38c*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x6db5fbe0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x30603250, ftLastAccessTime.dwHighDateTime=0x1d35d06, ftLastWriteTime.dwLowDateTime=0x30603250, ftLastWriteTime.dwHighDateTime=0x1d35d06, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Last Active", cAlternateFileName="LASTAC~1")) returned 0 [0067.358] FindClose (in: hFindFile=0x381d80 | out: hFindFile=0x381d80) returned 1 [0067.358] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e614) returned 1 [0067.358] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e620) returned 1 [0067.358] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e654) returned 1 [0067.358] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Internet Explorer\\Recovery", nBufferLength=0x105, lpBuffer=0x31e15c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Internet Explorer\\Recovery", lpFilePart=0x0) returned 0x50 [0067.358] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Internet Explorer\\Recovery\\", nBufferLength=0x105, lpBuffer=0x31e130, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Internet Explorer\\Recovery\\", lpFilePart=0x0) returned 0x51 [0067.358] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Internet Explorer\\Recovery\\*", lpFindFileData=0x31e37c | out: lpFindFileData=0x31e37c*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x4ed4ae10, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x6db5fbe0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x6db5fbe0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x381d80 [0067.358] FindNextFileW (in: hFindFile=0x381d80, lpFindFileData=0x31e38c | out: lpFindFileData=0x31e38c*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x4ed4ae10, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x6db5fbe0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x6db5fbe0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0067.358] FindNextFileW (in: hFindFile=0x381d80, lpFindFileData=0x31e38c | out: lpFindFileData=0x31e38c*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x4ed70f70, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x2bc84b10, ftLastAccessTime.dwHighDateTime=0x1d35d06, ftLastWriteTime.dwLowDateTime=0x2bc84b10, ftLastWriteTime.dwHighDateTime=0x1d35d06, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Active", cAlternateFileName="")) returned 1 [0067.358] FindNextFileW (in: hFindFile=0x381d80, lpFindFileData=0x31e38c | out: lpFindFileData=0x31e38c*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x6db5fbe0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x30603250, ftLastAccessTime.dwHighDateTime=0x1d35d06, ftLastWriteTime.dwLowDateTime=0x30603250, ftLastWriteTime.dwHighDateTime=0x1d35d06, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Last Active", cAlternateFileName="LASTAC~1")) returned 1 [0067.358] FindNextFileW (in: hFindFile=0x381d80, lpFindFileData=0x31e38c | out: lpFindFileData=0x31e38c*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0067.358] FindClose (in: hFindFile=0x381d80 | out: hFindFile=0x381d80) returned 1 [0067.359] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e614) returned 1 [0067.359] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e620) returned 1 [0067.359] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e5dc) returned 1 [0067.359] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Internet Explorer\\Recovery\\Active", nBufferLength=0x105, lpBuffer=0x31e0e4, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Internet Explorer\\Recovery\\Active", lpFilePart=0x0) returned 0x57 [0067.359] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Internet Explorer\\Recovery\\Active\\", nBufferLength=0x105, lpBuffer=0x31e0b8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Internet Explorer\\Recovery\\Active\\", lpFilePart=0x0) returned 0x58 [0067.359] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Internet Explorer\\Recovery\\Active\\*", lpFindFileData=0x31e304 | out: lpFindFileData=0x31e304*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x4ed70f70, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x2bc84b10, ftLastAccessTime.dwHighDateTime=0x1d35d06, ftLastWriteTime.dwLowDateTime=0x2bc84b10, ftLastWriteTime.dwHighDateTime=0x1d35d06, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x381d80 [0067.359] FindNextFileW (in: hFindFile=0x381d80, lpFindFileData=0x31e314 | out: lpFindFileData=0x31e314*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x4ed70f70, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x2bc84b10, ftLastAccessTime.dwHighDateTime=0x1d35d06, ftLastWriteTime.dwLowDateTime=0x2bc84b10, ftLastWriteTime.dwHighDateTime=0x1d35d06, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0067.359] FindNextFileW (in: hFindFile=0x381d80, lpFindFileData=0x31e314 | out: lpFindFileData=0x31e314*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x4ed70f70, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x2bc84b10, ftLastAccessTime.dwHighDateTime=0x1d35d06, ftLastWriteTime.dwLowDateTime=0x2bc84b10, ftLastWriteTime.dwHighDateTime=0x1d35d06, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 0 [0067.359] FindClose (in: hFindFile=0x381d80 | out: hFindFile=0x381d80) returned 1 [0067.359] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e59c) returned 1 [0067.359] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e5a8) returned 1 [0067.359] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e5dc) returned 1 [0067.359] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Internet Explorer\\Recovery\\Active", nBufferLength=0x105, lpBuffer=0x31e0e4, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Internet Explorer\\Recovery\\Active", lpFilePart=0x0) returned 0x57 [0067.359] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Internet Explorer\\Recovery\\Active\\", nBufferLength=0x105, lpBuffer=0x31e0b8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Internet Explorer\\Recovery\\Active\\", lpFilePart=0x0) returned 0x58 [0067.360] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Internet Explorer\\Recovery\\Active\\*", lpFindFileData=0x31e304 | out: lpFindFileData=0x31e304*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x4ed70f70, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x2bc84b10, ftLastAccessTime.dwHighDateTime=0x1d35d06, ftLastWriteTime.dwLowDateTime=0x2bc84b10, ftLastWriteTime.dwHighDateTime=0x1d35d06, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x381d80 [0067.360] FindNextFileW (in: hFindFile=0x381d80, lpFindFileData=0x31e314 | out: lpFindFileData=0x31e314*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x4ed70f70, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x2bc84b10, ftLastAccessTime.dwHighDateTime=0x1d35d06, ftLastWriteTime.dwLowDateTime=0x2bc84b10, ftLastWriteTime.dwHighDateTime=0x1d35d06, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0067.360] FindNextFileW (in: hFindFile=0x381d80, lpFindFileData=0x31e314 | out: lpFindFileData=0x31e314*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x4ed70f70, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x2bc84b10, ftLastAccessTime.dwHighDateTime=0x1d35d06, ftLastWriteTime.dwLowDateTime=0x2bc84b10, ftLastWriteTime.dwHighDateTime=0x1d35d06, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 0 [0067.360] FindClose (in: hFindFile=0x381d80 | out: hFindFile=0x381d80) returned 1 [0067.360] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e59c) returned 1 [0067.360] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e5a8) returned 1 [0067.360] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e5dc) returned 1 [0067.360] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Internet Explorer\\Recovery\\Last Active", nBufferLength=0x105, lpBuffer=0x31e0e4, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Internet Explorer\\Recovery\\Last Active", lpFilePart=0x0) returned 0x5c [0067.360] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Internet Explorer\\Recovery\\Last Active\\", nBufferLength=0x105, lpBuffer=0x31e0b8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Internet Explorer\\Recovery\\Last Active\\", lpFilePart=0x0) returned 0x5d [0067.360] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Internet Explorer\\Recovery\\Last Active\\*", lpFindFileData=0x31e304 | out: lpFindFileData=0x31e304*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x6db5fbe0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x30603250, ftLastAccessTime.dwHighDateTime=0x1d35d06, ftLastWriteTime.dwLowDateTime=0x30603250, ftLastWriteTime.dwHighDateTime=0x1d35d06, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x381d80 [0067.363] FindNextFileW (in: hFindFile=0x381d80, lpFindFileData=0x31e314 | out: lpFindFileData=0x31e314*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x6db5fbe0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x30603250, ftLastAccessTime.dwHighDateTime=0x1d35d06, ftLastWriteTime.dwLowDateTime=0x30603250, ftLastWriteTime.dwHighDateTime=0x1d35d06, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0067.363] FindNextFileW (in: hFindFile=0x381d80, lpFindFileData=0x31e314 | out: lpFindFileData=0x31e314*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xe35acf0, ftCreationTime.dwHighDateTime=0x1d35d06, ftLastAccessTime.dwLowDateTime=0xe35acf0, ftLastAccessTime.dwHighDateTime=0x1d35d06, ftLastWriteTime.dwLowDateTime=0x306293b0, ftLastWriteTime.dwHighDateTime=0x1d35d06, nFileSizeHigh=0x0, nFileSizeLow=0xe00, dwReserved0=0x0, dwReserved1=0x0, cFileName="RecoveryStore.{4BD650F1-C8F9-11E7-B5BF-C43DC7584A00}.dat", cAlternateFileName="RECOVE~2.DAT")) returned 1 [0067.363] FindNextFileW (in: hFindFile=0x381d80, lpFindFileData=0x31e314 | out: lpFindFileData=0x31e314*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x6dd28c60, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x6dd28c60, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0xe35acf0, ftLastWriteTime.dwHighDateTime=0x1d35d06, nFileSizeHigh=0x0, nFileSizeLow=0x1200, dwReserved0=0x0, dwReserved1=0x0, cFileName="RecoveryStore.{AAE6BF5C-4991-11E7-8E2B-C43DC7584A00}.dat", cAlternateFileName="RECOVE~1.DAT")) returned 1 [0067.363] FindNextFileW (in: hFindFile=0x381d80, lpFindFileData=0x31e314 | out: lpFindFileData=0x31e314*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xe35acf0, ftCreationTime.dwHighDateTime=0x1d35d06, ftLastAccessTime.dwLowDateTime=0xe35acf0, ftLastAccessTime.dwHighDateTime=0x1d35d06, ftLastWriteTime.dwLowDateTime=0xe35acf0, ftLastWriteTime.dwHighDateTime=0x1d35d06, nFileSizeHigh=0x0, nFileSizeLow=0x1200, dwReserved0=0x0, dwReserved1=0x0, cFileName="{4BD650F0-C8F9-11E7-B5BF-C43DC7584A00}.dat", cAlternateFileName="{4BD65~1.DAT")) returned 1 [0067.363] FindNextFileW (in: hFindFile=0x381d80, lpFindFileData=0x31e314 | out: lpFindFileData=0x31e314*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x30603250, ftCreationTime.dwHighDateTime=0x1d35d06, ftLastAccessTime.dwLowDateTime=0x30603250, ftLastAccessTime.dwHighDateTime=0x1d35d06, ftLastWriteTime.dwLowDateTime=0x306293b0, ftLastWriteTime.dwHighDateTime=0x1d35d06, nFileSizeHigh=0x0, nFileSizeLow=0x1200, dwReserved0=0x0, dwReserved1=0x0, cFileName="{69512155-C8F9-11E7-B5BF-C43DC7584A00}.dat", cAlternateFileName="{69512~1.DAT")) returned 1 [0067.363] FindNextFileW (in: hFindFile=0x381d80, lpFindFileData=0x31e314 | out: lpFindFileData=0x31e314*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0067.363] FindClose (in: hFindFile=0x381d80 | out: hFindFile=0x381d80) returned 1 [0067.364] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e59c) returned 1 [0067.364] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e5a8) returned 1 [0067.364] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e5dc) returned 1 [0067.364] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Internet Explorer\\Recovery\\Last Active", nBufferLength=0x105, lpBuffer=0x31e0e4, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Internet Explorer\\Recovery\\Last Active", lpFilePart=0x0) returned 0x5c [0067.364] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Internet Explorer\\Recovery\\Last Active\\", nBufferLength=0x105, lpBuffer=0x31e0b8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Internet Explorer\\Recovery\\Last Active\\", lpFilePart=0x0) returned 0x5d [0067.364] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Internet Explorer\\Recovery\\Last Active\\*", lpFindFileData=0x31e304 | out: lpFindFileData=0x31e304*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x6db5fbe0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x30603250, ftLastAccessTime.dwHighDateTime=0x1d35d06, ftLastWriteTime.dwLowDateTime=0x30603250, ftLastWriteTime.dwHighDateTime=0x1d35d06, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x381d80 [0067.365] FindNextFileW (in: hFindFile=0x381d80, lpFindFileData=0x31e314 | out: lpFindFileData=0x31e314*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x6db5fbe0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x30603250, ftLastAccessTime.dwHighDateTime=0x1d35d06, ftLastWriteTime.dwLowDateTime=0x30603250, ftLastWriteTime.dwHighDateTime=0x1d35d06, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0067.365] FindNextFileW (in: hFindFile=0x381d80, lpFindFileData=0x31e314 | out: lpFindFileData=0x31e314*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xe35acf0, ftCreationTime.dwHighDateTime=0x1d35d06, ftLastAccessTime.dwLowDateTime=0xe35acf0, ftLastAccessTime.dwHighDateTime=0x1d35d06, ftLastWriteTime.dwLowDateTime=0x306293b0, ftLastWriteTime.dwHighDateTime=0x1d35d06, nFileSizeHigh=0x0, nFileSizeLow=0xe00, dwReserved0=0x0, dwReserved1=0x0, cFileName="RecoveryStore.{4BD650F1-C8F9-11E7-B5BF-C43DC7584A00}.dat", cAlternateFileName="RECOVE~2.DAT")) returned 1 [0067.365] FindNextFileW (in: hFindFile=0x381d80, lpFindFileData=0x31e314 | out: lpFindFileData=0x31e314*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x6dd28c60, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x6dd28c60, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0xe35acf0, ftLastWriteTime.dwHighDateTime=0x1d35d06, nFileSizeHigh=0x0, nFileSizeLow=0x1200, dwReserved0=0x0, dwReserved1=0x0, cFileName="RecoveryStore.{AAE6BF5C-4991-11E7-8E2B-C43DC7584A00}.dat", cAlternateFileName="RECOVE~1.DAT")) returned 1 [0067.365] FindNextFileW (in: hFindFile=0x381d80, lpFindFileData=0x31e314 | out: lpFindFileData=0x31e314*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xe35acf0, ftCreationTime.dwHighDateTime=0x1d35d06, ftLastAccessTime.dwLowDateTime=0xe35acf0, ftLastAccessTime.dwHighDateTime=0x1d35d06, ftLastWriteTime.dwLowDateTime=0xe35acf0, ftLastWriteTime.dwHighDateTime=0x1d35d06, nFileSizeHigh=0x0, nFileSizeLow=0x1200, dwReserved0=0x0, dwReserved1=0x0, cFileName="{4BD650F0-C8F9-11E7-B5BF-C43DC7584A00}.dat", cAlternateFileName="{4BD65~1.DAT")) returned 1 [0067.365] FindNextFileW (in: hFindFile=0x381d80, lpFindFileData=0x31e314 | out: lpFindFileData=0x31e314*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x30603250, ftCreationTime.dwHighDateTime=0x1d35d06, ftLastAccessTime.dwLowDateTime=0x30603250, ftLastAccessTime.dwHighDateTime=0x1d35d06, ftLastWriteTime.dwLowDateTime=0x306293b0, ftLastWriteTime.dwHighDateTime=0x1d35d06, nFileSizeHigh=0x0, nFileSizeLow=0x1200, dwReserved0=0x0, dwReserved1=0x0, cFileName="{69512155-C8F9-11E7-B5BF-C43DC7584A00}.dat", cAlternateFileName="{69512~1.DAT")) returned 1 [0067.366] FindNextFileW (in: hFindFile=0x381d80, lpFindFileData=0x31e314 | out: lpFindFileData=0x31e314*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x30603250, ftCreationTime.dwHighDateTime=0x1d35d06, ftLastAccessTime.dwLowDateTime=0x30603250, ftLastAccessTime.dwHighDateTime=0x1d35d06, ftLastWriteTime.dwLowDateTime=0x306293b0, ftLastWriteTime.dwHighDateTime=0x1d35d06, nFileSizeHigh=0x0, nFileSizeLow=0x1200, dwReserved0=0x0, dwReserved1=0x0, cFileName="{69512155-C8F9-11E7-B5BF-C43DC7584A00}.dat", cAlternateFileName="{69512~1.DAT")) returned 0 [0067.366] FindClose (in: hFindFile=0x381d80 | out: hFindFile=0x381d80) returned 1 [0067.366] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e59c) returned 1 [0067.366] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e5a8) returned 1 [0067.366] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e6cc) returned 1 [0067.367] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Media Player", nBufferLength=0x105, lpBuffer=0x31e1d4, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Media Player", lpFilePart=0x0) returned 0x42 [0067.367] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Media Player\\", nBufferLength=0x105, lpBuffer=0x31e1a8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Media Player\\", lpFilePart=0x0) returned 0x43 [0067.367] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Media Player\\*", lpFindFileData=0x31e3f4 | out: lpFindFileData=0x31e3f4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x28d257a0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0xf7f22040, ftLastAccessTime.dwHighDateTime=0x1d3373f, ftLastWriteTime.dwLowDateTime=0xf7f22040, ftLastWriteTime.dwHighDateTime=0x1d3373f, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x381d80 [0067.368] FindNextFileW (in: hFindFile=0x381d80, lpFindFileData=0x31e404 | out: lpFindFileData=0x31e404*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x28d257a0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0xf7f22040, ftLastAccessTime.dwHighDateTime=0x1d3373f, ftLastWriteTime.dwLowDateTime=0xf7f22040, ftLastWriteTime.dwHighDateTime=0x1d3373f, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0067.369] FindNextFileW (in: hFindFile=0x381d80, lpFindFileData=0x31e404 | out: lpFindFileData=0x31e404*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x28eee820, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28eee820, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x2cf59b80, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x105000, dwReserved0=0x0, dwReserved1=0x0, cFileName="CurrentDatabase_372.wmdb", cAlternateFileName="CURREN~1.WMD")) returned 1 [0067.369] FindNextFileW (in: hFindFile=0x381d80, lpFindFileData=0x31e404 | out: lpFindFileData=0x31e404*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x28eee820, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x2cf33a20, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x2cf33a20, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x1106c, dwReserved0=0x0, dwReserved1=0x0, cFileName="LocalMLS_3.wmdb", cAlternateFileName="LOCALM~1.WMD")) returned 1 [0067.369] FindNextFileW (in: hFindFile=0x381d80, lpFindFileData=0x31e404 | out: lpFindFileData=0x31e404*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x28d257a0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28d257a0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xf73e9a4c, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Sync Playlists", cAlternateFileName="SYNCPL~1")) returned 1 [0067.369] FindNextFileW (in: hFindFile=0x381d80, lpFindFileData=0x31e404 | out: lpFindFileData=0x31e404*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xf7f22040, ftCreationTime.dwHighDateTime=0x1d3373f, ftLastAccessTime.dwLowDateTime=0xf7f22040, ftLastAccessTime.dwHighDateTime=0x1d3373f, ftLastWriteTime.dwLowDateTime=0xf7f22040, ftLastWriteTime.dwHighDateTime=0x1d3373f, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Transcoded Files Cache", cAlternateFileName="TRANSC~1")) returned 1 [0067.369] FindNextFileW (in: hFindFile=0x381d80, lpFindFileData=0x31e404 | out: lpFindFileData=0x31e404*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xf7f22040, ftCreationTime.dwHighDateTime=0x1d3373f, ftLastAccessTime.dwLowDateTime=0xf7f22040, ftLastAccessTime.dwHighDateTime=0x1d3373f, ftLastWriteTime.dwLowDateTime=0xf7f22040, ftLastWriteTime.dwHighDateTime=0x1d3373f, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Transcoded Files Cache", cAlternateFileName="TRANSC~1")) returned 0 [0067.369] FindClose (in: hFindFile=0x381d80 | out: hFindFile=0x381d80) returned 1 [0067.370] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e68c) returned 1 [0067.370] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e698) returned 1 [0067.370] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e6cc) returned 1 [0067.370] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Media Player", nBufferLength=0x105, lpBuffer=0x31e1d4, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Media Player", lpFilePart=0x0) returned 0x42 [0067.370] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Media Player\\", nBufferLength=0x105, lpBuffer=0x31e1a8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Media Player\\", lpFilePart=0x0) returned 0x43 [0067.370] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Media Player\\*", lpFindFileData=0x31e3f4 | out: lpFindFileData=0x31e3f4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x28d257a0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0xf7f22040, ftLastAccessTime.dwHighDateTime=0x1d3373f, ftLastWriteTime.dwLowDateTime=0xf7f22040, ftLastWriteTime.dwHighDateTime=0x1d3373f, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x381d80 [0067.371] FindNextFileW (in: hFindFile=0x381d80, lpFindFileData=0x31e404 | out: lpFindFileData=0x31e404*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x28d257a0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0xf7f22040, ftLastAccessTime.dwHighDateTime=0x1d3373f, ftLastWriteTime.dwLowDateTime=0xf7f22040, ftLastWriteTime.dwHighDateTime=0x1d3373f, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0067.371] FindNextFileW (in: hFindFile=0x381d80, lpFindFileData=0x31e404 | out: lpFindFileData=0x31e404*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x28eee820, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28eee820, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x2cf59b80, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x105000, dwReserved0=0x0, dwReserved1=0x0, cFileName="CurrentDatabase_372.wmdb", cAlternateFileName="CURREN~1.WMD")) returned 1 [0067.371] FindNextFileW (in: hFindFile=0x381d80, lpFindFileData=0x31e404 | out: lpFindFileData=0x31e404*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x28eee820, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x2cf33a20, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x2cf33a20, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x1106c, dwReserved0=0x0, dwReserved1=0x0, cFileName="LocalMLS_3.wmdb", cAlternateFileName="LOCALM~1.WMD")) returned 1 [0067.371] FindNextFileW (in: hFindFile=0x381d80, lpFindFileData=0x31e404 | out: lpFindFileData=0x31e404*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x28d257a0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28d257a0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xf73e9a4c, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Sync Playlists", cAlternateFileName="SYNCPL~1")) returned 1 [0067.372] FindNextFileW (in: hFindFile=0x381d80, lpFindFileData=0x31e404 | out: lpFindFileData=0x31e404*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xf7f22040, ftCreationTime.dwHighDateTime=0x1d3373f, ftLastAccessTime.dwLowDateTime=0xf7f22040, ftLastAccessTime.dwHighDateTime=0x1d3373f, ftLastWriteTime.dwLowDateTime=0xf7f22040, ftLastWriteTime.dwHighDateTime=0x1d3373f, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Transcoded Files Cache", cAlternateFileName="TRANSC~1")) returned 1 [0067.372] FindNextFileW (in: hFindFile=0x381d80, lpFindFileData=0x31e404 | out: lpFindFileData=0x31e404*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0067.372] FindClose (in: hFindFile=0x381d80 | out: hFindFile=0x381d80) returned 1 [0067.372] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e68c) returned 1 [0067.372] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e698) returned 1 [0067.372] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e654) returned 1 [0067.372] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Media Player\\Sync Playlists", nBufferLength=0x105, lpBuffer=0x31e15c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Media Player\\Sync Playlists", lpFilePart=0x0) returned 0x51 [0067.372] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Media Player\\Sync Playlists\\", nBufferLength=0x105, lpBuffer=0x31e130, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Media Player\\Sync Playlists\\", lpFilePart=0x0) returned 0x52 [0067.373] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Media Player\\Sync Playlists\\*", lpFindFileData=0x31e37c | out: lpFindFileData=0x31e37c*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x28d257a0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28d257a0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xf73e9a4c, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x381d80 [0067.373] FindNextFileW (in: hFindFile=0x381d80, lpFindFileData=0x31e38c | out: lpFindFileData=0x31e38c*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x28d257a0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28d257a0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xf73e9a4c, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0067.374] FindNextFileW (in: hFindFile=0x381d80, lpFindFileData=0x31e38c | out: lpFindFileData=0x31e38c*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x28d257a0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x2ca96f80, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x2ca96f80, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="en-US", cAlternateFileName="")) returned 1 [0067.374] FindNextFileW (in: hFindFile=0x381d80, lpFindFileData=0x31e38c | out: lpFindFileData=0x31e38c*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x28d257a0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x2ca96f80, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x2ca96f80, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="en-US", cAlternateFileName="")) returned 0 [0067.376] FindClose (in: hFindFile=0x381d80 | out: hFindFile=0x381d80) returned 1 [0067.376] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e614) returned 1 [0067.376] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e620) returned 1 [0067.376] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e654) returned 1 [0067.376] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Media Player\\Sync Playlists", nBufferLength=0x105, lpBuffer=0x31e15c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Media Player\\Sync Playlists", lpFilePart=0x0) returned 0x51 [0067.376] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Media Player\\Sync Playlists\\", nBufferLength=0x105, lpBuffer=0x31e130, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Media Player\\Sync Playlists\\", lpFilePart=0x0) returned 0x52 [0067.376] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Media Player\\Sync Playlists\\*", lpFindFileData=0x31e37c | out: lpFindFileData=0x31e37c*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x28d257a0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28d257a0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xf73e9a4c, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x381d80 [0067.377] FindNextFileW (in: hFindFile=0x381d80, lpFindFileData=0x31e38c | out: lpFindFileData=0x31e38c*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x28d257a0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28d257a0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xf73e9a4c, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0067.377] FindNextFileW (in: hFindFile=0x381d80, lpFindFileData=0x31e38c | out: lpFindFileData=0x31e38c*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x28d257a0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x2ca96f80, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x2ca96f80, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="en-US", cAlternateFileName="")) returned 1 [0067.377] FindNextFileW (in: hFindFile=0x381d80, lpFindFileData=0x31e38c | out: lpFindFileData=0x31e38c*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0067.377] FindClose (in: hFindFile=0x381d80 | out: hFindFile=0x381d80) returned 1 [0067.377] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e614) returned 1 [0067.377] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e620) returned 1 [0067.377] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e5dc) returned 1 [0067.377] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Media Player\\Sync Playlists\\en-US", nBufferLength=0x105, lpBuffer=0x31e0e4, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Media Player\\Sync Playlists\\en-US", lpFilePart=0x0) returned 0x57 [0067.377] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Media Player\\Sync Playlists\\en-US\\", nBufferLength=0x105, lpBuffer=0x31e0b8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Media Player\\Sync Playlists\\en-US\\", lpFilePart=0x0) returned 0x58 [0067.377] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Media Player\\Sync Playlists\\en-US\\*", lpFindFileData=0x31e304 | out: lpFindFileData=0x31e304*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x28d257a0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x2ca96f80, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x2ca96f80, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x381d80 [0067.378] FindNextFileW (in: hFindFile=0x381d80, lpFindFileData=0x31e314 | out: lpFindFileData=0x31e314*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x28d257a0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x2ca96f80, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x2ca96f80, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0067.378] FindNextFileW (in: hFindFile=0x381d80, lpFindFileData=0x31e314 | out: lpFindFileData=0x31e314*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x2ca96f80, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x2ca96f80, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x2ca96f80, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="0000E713", cAlternateFileName="")) returned 1 [0067.378] FindNextFileW (in: hFindFile=0x381d80, lpFindFileData=0x31e314 | out: lpFindFileData=0x31e314*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x28d257a0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28f14980, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xf740fbac, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="00010C6E", cAlternateFileName="")) returned 1 [0067.378] FindNextFileW (in: hFindFile=0x381d80, lpFindFileData=0x31e314 | out: lpFindFileData=0x31e314*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x28d257a0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28f14980, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xf740fbac, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="00010C6E", cAlternateFileName="")) returned 0 [0067.378] FindClose (in: hFindFile=0x381d80 | out: hFindFile=0x381d80) returned 1 [0067.378] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e59c) returned 1 [0067.378] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e5a8) returned 1 [0067.378] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e5dc) returned 1 [0067.378] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Media Player\\Sync Playlists\\en-US", nBufferLength=0x105, lpBuffer=0x31e0e4, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Media Player\\Sync Playlists\\en-US", lpFilePart=0x0) returned 0x57 [0067.378] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Media Player\\Sync Playlists\\en-US\\", nBufferLength=0x105, lpBuffer=0x31e0b8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Media Player\\Sync Playlists\\en-US\\", lpFilePart=0x0) returned 0x58 [0067.378] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Media Player\\Sync Playlists\\en-US\\*", lpFindFileData=0x31e304 | out: lpFindFileData=0x31e304*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x28d257a0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x2ca96f80, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x2ca96f80, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x381d80 [0067.379] FindNextFileW (in: hFindFile=0x381d80, lpFindFileData=0x31e314 | out: lpFindFileData=0x31e314*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x28d257a0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x2ca96f80, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x2ca96f80, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0067.379] FindNextFileW (in: hFindFile=0x381d80, lpFindFileData=0x31e314 | out: lpFindFileData=0x31e314*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x2ca96f80, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x2ca96f80, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x2ca96f80, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="0000E713", cAlternateFileName="")) returned 1 [0067.379] FindNextFileW (in: hFindFile=0x381d80, lpFindFileData=0x31e314 | out: lpFindFileData=0x31e314*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x28d257a0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28f14980, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xf740fbac, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="00010C6E", cAlternateFileName="")) returned 1 [0067.379] FindNextFileW (in: hFindFile=0x381d80, lpFindFileData=0x31e314 | out: lpFindFileData=0x31e314*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0067.379] FindClose (in: hFindFile=0x381d80 | out: hFindFile=0x381d80) returned 1 [0067.379] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e59c) returned 1 [0067.379] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e5a8) returned 1 [0067.379] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e564) returned 1 [0067.379] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Media Player\\Sync Playlists\\en-US\\0000E713", nBufferLength=0x105, lpBuffer=0x31e06c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Media Player\\Sync Playlists\\en-US\\0000E713", lpFilePart=0x0) returned 0x60 [0067.379] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Media Player\\Sync Playlists\\en-US\\0000E713\\", nBufferLength=0x105, lpBuffer=0x31e040, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Media Player\\Sync Playlists\\en-US\\0000E713\\", lpFilePart=0x0) returned 0x61 [0067.379] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Media Player\\Sync Playlists\\en-US\\0000E713\\*", lpFindFileData=0x31e28c | out: lpFindFileData=0x31e28c*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x2ca96f80, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x2ca96f80, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x2ca96f80, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x381d80 [0067.382] FindNextFileW (in: hFindFile=0x381d80, lpFindFileData=0x31e29c | out: lpFindFileData=0x31e29c*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x2ca96f80, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x2ca96f80, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x2ca96f80, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0067.382] FindNextFileW (in: hFindFile=0x381d80, lpFindFileData=0x31e29c | out: lpFindFileData=0x31e29c*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x2ca96f80, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x2ca96f80, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x2ca96f80, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x414, dwReserved0=0x0, dwReserved1=0x0, cFileName="01_Music_auto_rated_at_5_stars.wpl", cAlternateFileName="01_MUS~1.WPL")) returned 1 [0067.382] FindNextFileW (in: hFindFile=0x381d80, lpFindFileData=0x31e29c | out: lpFindFileData=0x31e29c*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x2ca96f80, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x2ca96f80, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x2ca96f80, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x4ff, dwReserved0=0x0, dwReserved1=0x0, cFileName="02_Music_added_in_the_last_month.wpl", cAlternateFileName="02_MUS~1.WPL")) returned 1 [0067.382] FindNextFileW (in: hFindFile=0x381d80, lpFindFileData=0x31e29c | out: lpFindFileData=0x31e29c*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x2ca96f80, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x2ca96f80, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x2ca96f80, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x4f3, dwReserved0=0x0, dwReserved1=0x0, cFileName="03_Music_rated_at_4_or_5_stars.wpl", cAlternateFileName="03_MUS~1.WPL")) returned 1 [0067.382] FindNextFileW (in: hFindFile=0x381d80, lpFindFileData=0x31e29c | out: lpFindFileData=0x31e29c*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x2ca96f80, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x2ca96f80, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x2ca96f80, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x504, dwReserved0=0x0, dwReserved1=0x0, cFileName="04_Music_played_in_the_last_month.wpl", cAlternateFileName="04_MUS~1.WPL")) returned 1 [0067.382] FindNextFileW (in: hFindFile=0x381d80, lpFindFileData=0x31e29c | out: lpFindFileData=0x31e29c*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x2ca96f80, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x2ca96f80, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x2ca96f80, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x31d, dwReserved0=0x0, dwReserved1=0x0, cFileName="05_Pictures_taken_in_the_last_month.wpl", cAlternateFileName="05_PIC~1.WPL")) returned 1 [0067.382] FindNextFileW (in: hFindFile=0x381d80, lpFindFileData=0x31e29c | out: lpFindFileData=0x31e29c*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x2ca96f80, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x2ca96f80, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x2ca96f80, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x311, dwReserved0=0x0, dwReserved1=0x0, cFileName="06_Pictures_rated_4_or_5_stars.wpl", cAlternateFileName="06_PIC~1.WPL")) returned 1 [0067.382] FindNextFileW (in: hFindFile=0x381d80, lpFindFileData=0x31e29c | out: lpFindFileData=0x31e29c*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x2ca96f80, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x2ca96f80, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x2ca96f80, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x410, dwReserved0=0x0, dwReserved1=0x0, cFileName="07_TV_recorded_in_the_last_week.wpl", cAlternateFileName="07_TV_~1.WPL")) returned 1 [0067.383] FindNextFileW (in: hFindFile=0x381d80, lpFindFileData=0x31e29c | out: lpFindFileData=0x31e29c*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x2ca96f80, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x2ca96f80, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x2ca96f80, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x3fc, dwReserved0=0x0, dwReserved1=0x0, cFileName="08_Video_rated_at_4_or_5_stars.wpl", cAlternateFileName="08_VID~1.WPL")) returned 1 [0067.383] FindNextFileW (in: hFindFile=0x381d80, lpFindFileData=0x31e29c | out: lpFindFileData=0x31e29c*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x2ca96f80, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x2ca96f80, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x2ca96f80, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x401, dwReserved0=0x0, dwReserved1=0x0, cFileName="09_Music_played_the_most.wpl", cAlternateFileName="09_MUS~1.WPL")) returned 1 [0067.383] FindNextFileW (in: hFindFile=0x381d80, lpFindFileData=0x31e29c | out: lpFindFileData=0x31e29c*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x2ca96f80, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x2ca96f80, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x2ca96f80, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x427, dwReserved0=0x0, dwReserved1=0x0, cFileName="10_All_Music.wpl", cAlternateFileName="10_ALL~1.WPL")) returned 1 [0067.383] FindNextFileW (in: hFindFile=0x381d80, lpFindFileData=0x31e29c | out: lpFindFileData=0x31e29c*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x2ca96f80, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x2ca96f80, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x2ca96f80, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x249, dwReserved0=0x0, dwReserved1=0x0, cFileName="11_All_Pictures.wpl", cAlternateFileName="11_ALL~1.WPL")) returned 1 [0067.383] FindNextFileW (in: hFindFile=0x381d80, lpFindFileData=0x31e29c | out: lpFindFileData=0x31e29c*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x2ca96f80, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x2ca96f80, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x2ca96f80, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x437, dwReserved0=0x0, dwReserved1=0x0, cFileName="12_All_Video.wpl", cAlternateFileName="12_ALL~1.WPL")) returned 1 [0067.383] FindNextFileW (in: hFindFile=0x381d80, lpFindFileData=0x31e29c | out: lpFindFileData=0x31e29c*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0067.383] FindClose (in: hFindFile=0x381d80 | out: hFindFile=0x381d80) returned 1 [0067.384] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e524) returned 1 [0067.384] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e530) returned 1 [0067.384] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e564) returned 1 [0067.384] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Media Player\\Sync Playlists\\en-US\\0000E713", nBufferLength=0x105, lpBuffer=0x31e06c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Media Player\\Sync Playlists\\en-US\\0000E713", lpFilePart=0x0) returned 0x60 [0067.384] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Media Player\\Sync Playlists\\en-US\\0000E713\\", nBufferLength=0x105, lpBuffer=0x31e040, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Media Player\\Sync Playlists\\en-US\\0000E713\\", lpFilePart=0x0) returned 0x61 [0067.384] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Media Player\\Sync Playlists\\en-US\\0000E713\\*", lpFindFileData=0x31e28c | out: lpFindFileData=0x31e28c*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x2ca96f80, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x2ca96f80, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x2ca96f80, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x381d80 [0067.385] FindNextFileW (in: hFindFile=0x381d80, lpFindFileData=0x31e29c | out: lpFindFileData=0x31e29c*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x2ca96f80, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x2ca96f80, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x2ca96f80, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0067.385] FindNextFileW (in: hFindFile=0x381d80, lpFindFileData=0x31e29c | out: lpFindFileData=0x31e29c*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x2ca96f80, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x2ca96f80, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x2ca96f80, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x414, dwReserved0=0x0, dwReserved1=0x0, cFileName="01_Music_auto_rated_at_5_stars.wpl", cAlternateFileName="01_MUS~1.WPL")) returned 1 [0067.385] FindNextFileW (in: hFindFile=0x381d80, lpFindFileData=0x31e29c | out: lpFindFileData=0x31e29c*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x2ca96f80, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x2ca96f80, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x2ca96f80, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x4ff, dwReserved0=0x0, dwReserved1=0x0, cFileName="02_Music_added_in_the_last_month.wpl", cAlternateFileName="02_MUS~1.WPL")) returned 1 [0067.385] FindNextFileW (in: hFindFile=0x381d80, lpFindFileData=0x31e29c | out: lpFindFileData=0x31e29c*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x2ca96f80, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x2ca96f80, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x2ca96f80, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x4f3, dwReserved0=0x0, dwReserved1=0x0, cFileName="03_Music_rated_at_4_or_5_stars.wpl", cAlternateFileName="03_MUS~1.WPL")) returned 1 [0067.385] FindNextFileW (in: hFindFile=0x381d80, lpFindFileData=0x31e29c | out: lpFindFileData=0x31e29c*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x2ca96f80, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x2ca96f80, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x2ca96f80, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x504, dwReserved0=0x0, dwReserved1=0x0, cFileName="04_Music_played_in_the_last_month.wpl", cAlternateFileName="04_MUS~1.WPL")) returned 1 [0067.386] FindNextFileW (in: hFindFile=0x381d80, lpFindFileData=0x31e29c | out: lpFindFileData=0x31e29c*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x2ca96f80, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x2ca96f80, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x2ca96f80, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x31d, dwReserved0=0x0, dwReserved1=0x0, cFileName="05_Pictures_taken_in_the_last_month.wpl", cAlternateFileName="05_PIC~1.WPL")) returned 1 [0067.386] FindNextFileW (in: hFindFile=0x381d80, lpFindFileData=0x31e29c | out: lpFindFileData=0x31e29c*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x2ca96f80, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x2ca96f80, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x2ca96f80, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x311, dwReserved0=0x0, dwReserved1=0x0, cFileName="06_Pictures_rated_4_or_5_stars.wpl", cAlternateFileName="06_PIC~1.WPL")) returned 1 [0067.386] FindNextFileW (in: hFindFile=0x381d80, lpFindFileData=0x31e29c | out: lpFindFileData=0x31e29c*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x2ca96f80, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x2ca96f80, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x2ca96f80, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x410, dwReserved0=0x0, dwReserved1=0x0, cFileName="07_TV_recorded_in_the_last_week.wpl", cAlternateFileName="07_TV_~1.WPL")) returned 1 [0067.386] FindNextFileW (in: hFindFile=0x381d80, lpFindFileData=0x31e29c | out: lpFindFileData=0x31e29c*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x2ca96f80, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x2ca96f80, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x2ca96f80, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x3fc, dwReserved0=0x0, dwReserved1=0x0, cFileName="08_Video_rated_at_4_or_5_stars.wpl", cAlternateFileName="08_VID~1.WPL")) returned 1 [0067.386] FindNextFileW (in: hFindFile=0x381d80, lpFindFileData=0x31e29c | out: lpFindFileData=0x31e29c*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x2ca96f80, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x2ca96f80, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x2ca96f80, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x401, dwReserved0=0x0, dwReserved1=0x0, cFileName="09_Music_played_the_most.wpl", cAlternateFileName="09_MUS~1.WPL")) returned 1 [0067.386] FindNextFileW (in: hFindFile=0x381d80, lpFindFileData=0x31e29c | out: lpFindFileData=0x31e29c*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x2ca96f80, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x2ca96f80, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x2ca96f80, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x427, dwReserved0=0x0, dwReserved1=0x0, cFileName="10_All_Music.wpl", cAlternateFileName="10_ALL~1.WPL")) returned 1 [0067.387] FindNextFileW (in: hFindFile=0x381d80, lpFindFileData=0x31e29c | out: lpFindFileData=0x31e29c*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x2ca96f80, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x2ca96f80, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x2ca96f80, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x249, dwReserved0=0x0, dwReserved1=0x0, cFileName="11_All_Pictures.wpl", cAlternateFileName="11_ALL~1.WPL")) returned 1 [0067.387] FindNextFileW (in: hFindFile=0x381d80, lpFindFileData=0x31e29c | out: lpFindFileData=0x31e29c*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x2ca96f80, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x2ca96f80, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x2ca96f80, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x437, dwReserved0=0x0, dwReserved1=0x0, cFileName="12_All_Video.wpl", cAlternateFileName="12_ALL~1.WPL")) returned 1 [0067.387] FindNextFileW (in: hFindFile=0x381d80, lpFindFileData=0x31e29c | out: lpFindFileData=0x31e29c*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x2ca96f80, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x2ca96f80, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x2ca96f80, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x437, dwReserved0=0x0, dwReserved1=0x0, cFileName="12_All_Video.wpl", cAlternateFileName="12_ALL~1.WPL")) returned 0 [0067.387] FindClose (in: hFindFile=0x381d80 | out: hFindFile=0x381d80) returned 1 [0067.388] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e524) returned 1 [0067.388] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e530) returned 1 [0067.388] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e564) returned 1 [0067.388] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Media Player\\Sync Playlists\\en-US\\00010C6E", nBufferLength=0x105, lpBuffer=0x31e06c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Media Player\\Sync Playlists\\en-US\\00010C6E", lpFilePart=0x0) returned 0x60 [0067.388] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Media Player\\Sync Playlists\\en-US\\00010C6E\\", nBufferLength=0x105, lpBuffer=0x31e040, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Media Player\\Sync Playlists\\en-US\\00010C6E\\", lpFilePart=0x0) returned 0x61 [0067.388] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Media Player\\Sync Playlists\\en-US\\00010C6E\\*", lpFindFileData=0x31e28c | out: lpFindFileData=0x31e28c*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x28d257a0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28f14980, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xf740fbac, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x381d80 [0067.389] FindNextFileW (in: hFindFile=0x381d80, lpFindFileData=0x31e29c | out: lpFindFileData=0x31e29c*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x28d257a0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28f14980, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xf740fbac, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0067.390] FindNextFileW (in: hFindFile=0x381d80, lpFindFileData=0x31e29c | out: lpFindFileData=0x31e29c*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x28eee820, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28eee820, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xf73e9a4c, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x414, dwReserved0=0x0, dwReserved1=0x0, cFileName="01_Music_auto_rated_at_5_stars.wpl", cAlternateFileName="01_MUS~1.WPL")) returned 1 [0067.390] FindNextFileW (in: hFindFile=0x381d80, lpFindFileData=0x31e29c | out: lpFindFileData=0x31e29c*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x28eee820, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28eee820, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xf73e9a4c, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x4ff, dwReserved0=0x0, dwReserved1=0x0, cFileName="02_Music_added_in_the_last_month.wpl", cAlternateFileName="02_MUS~1.WPL")) returned 1 [0067.390] FindNextFileW (in: hFindFile=0x381d80, lpFindFileData=0x31e29c | out: lpFindFileData=0x31e29c*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x28eee820, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28eee820, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xf73e9a4c, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x4f3, dwReserved0=0x0, dwReserved1=0x0, cFileName="03_Music_rated_at_4_or_5_stars.wpl", cAlternateFileName="03_MUS~1.WPL")) returned 1 [0067.390] FindNextFileW (in: hFindFile=0x381d80, lpFindFileData=0x31e29c | out: lpFindFileData=0x31e29c*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x28eee820, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28eee820, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xf73e9a4c, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x504, dwReserved0=0x0, dwReserved1=0x0, cFileName="04_Music_played_in_the_last_month.wpl", cAlternateFileName="04_MUS~1.WPL")) returned 1 [0067.390] FindNextFileW (in: hFindFile=0x381d80, lpFindFileData=0x31e29c | out: lpFindFileData=0x31e29c*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x28eee820, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28eee820, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xf73e9a4c, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x31d, dwReserved0=0x0, dwReserved1=0x0, cFileName="05_Pictures_taken_in_the_last_month.wpl", cAlternateFileName="05_PIC~1.WPL")) returned 1 [0067.390] FindNextFileW (in: hFindFile=0x381d80, lpFindFileData=0x31e29c | out: lpFindFileData=0x31e29c*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x28eee820, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28eee820, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xf73e9a4c, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x311, dwReserved0=0x0, dwReserved1=0x0, cFileName="06_Pictures_rated_4_or_5_stars.wpl", cAlternateFileName="06_PIC~1.WPL")) returned 1 [0067.390] FindNextFileW (in: hFindFile=0x381d80, lpFindFileData=0x31e29c | out: lpFindFileData=0x31e29c*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x28eee820, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28eee820, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xf73e9a4c, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x410, dwReserved0=0x0, dwReserved1=0x0, cFileName="07_TV_recorded_in_the_last_week.wpl", cAlternateFileName="07_TV_~1.WPL")) returned 1 [0067.390] FindNextFileW (in: hFindFile=0x381d80, lpFindFileData=0x31e29c | out: lpFindFileData=0x31e29c*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x28eee820, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28eee820, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xf740fbac, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x3fc, dwReserved0=0x0, dwReserved1=0x0, cFileName="08_Video_rated_at_4_or_5_stars.wpl", cAlternateFileName="08_VID~1.WPL")) returned 1 [0067.391] FindNextFileW (in: hFindFile=0x381d80, lpFindFileData=0x31e29c | out: lpFindFileData=0x31e29c*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x28eee820, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28eee820, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xf740fbac, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x401, dwReserved0=0x0, dwReserved1=0x0, cFileName="09_Music_played_the_most.wpl", cAlternateFileName="09_MUS~1.WPL")) returned 1 [0067.391] FindNextFileW (in: hFindFile=0x381d80, lpFindFileData=0x31e29c | out: lpFindFileData=0x31e29c*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x28ec86c0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28ec86c0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xf740fbac, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x427, dwReserved0=0x0, dwReserved1=0x0, cFileName="10_All_Music.wpl", cAlternateFileName="10_ALL~1.WPL")) returned 1 [0067.391] FindNextFileW (in: hFindFile=0x381d80, lpFindFileData=0x31e29c | out: lpFindFileData=0x31e29c*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x28ec86c0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28ec86c0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xf740fbac, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x249, dwReserved0=0x0, dwReserved1=0x0, cFileName="11_All_Pictures.wpl", cAlternateFileName="11_ALL~1.WPL")) returned 1 [0067.391] FindNextFileW (in: hFindFile=0x381d80, lpFindFileData=0x31e29c | out: lpFindFileData=0x31e29c*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x28ec86c0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28ec86c0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xf740fbac, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x437, dwReserved0=0x0, dwReserved1=0x0, cFileName="12_All_Video.wpl", cAlternateFileName="12_ALL~1.WPL")) returned 1 [0067.391] FindNextFileW (in: hFindFile=0x381d80, lpFindFileData=0x31e29c | out: lpFindFileData=0x31e29c*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0067.391] FindClose (in: hFindFile=0x381d80 | out: hFindFile=0x381d80) returned 1 [0067.392] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e524) returned 1 [0067.392] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e530) returned 1 [0067.392] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e564) returned 1 [0067.392] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Media Player\\Sync Playlists\\en-US\\00010C6E", nBufferLength=0x105, lpBuffer=0x31e06c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Media Player\\Sync Playlists\\en-US\\00010C6E", lpFilePart=0x0) returned 0x60 [0067.392] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Media Player\\Sync Playlists\\en-US\\00010C6E\\", nBufferLength=0x105, lpBuffer=0x31e040, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Media Player\\Sync Playlists\\en-US\\00010C6E\\", lpFilePart=0x0) returned 0x61 [0067.392] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Media Player\\Sync Playlists\\en-US\\00010C6E\\*", lpFindFileData=0x31e28c | out: lpFindFileData=0x31e28c*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x28d257a0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28f14980, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xf740fbac, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x381d80 [0067.393] FindNextFileW (in: hFindFile=0x381d80, lpFindFileData=0x31e29c | out: lpFindFileData=0x31e29c*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x28d257a0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28f14980, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xf740fbac, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0067.393] FindNextFileW (in: hFindFile=0x381d80, lpFindFileData=0x31e29c | out: lpFindFileData=0x31e29c*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x28eee820, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28eee820, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xf73e9a4c, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x414, dwReserved0=0x0, dwReserved1=0x0, cFileName="01_Music_auto_rated_at_5_stars.wpl", cAlternateFileName="01_MUS~1.WPL")) returned 1 [0067.393] FindNextFileW (in: hFindFile=0x381d80, lpFindFileData=0x31e29c | out: lpFindFileData=0x31e29c*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x28eee820, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28eee820, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xf73e9a4c, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x4ff, dwReserved0=0x0, dwReserved1=0x0, cFileName="02_Music_added_in_the_last_month.wpl", cAlternateFileName="02_MUS~1.WPL")) returned 1 [0067.393] FindNextFileW (in: hFindFile=0x381d80, lpFindFileData=0x31e29c | out: lpFindFileData=0x31e29c*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x28eee820, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28eee820, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xf73e9a4c, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x4f3, dwReserved0=0x0, dwReserved1=0x0, cFileName="03_Music_rated_at_4_or_5_stars.wpl", cAlternateFileName="03_MUS~1.WPL")) returned 1 [0067.394] FindNextFileW (in: hFindFile=0x381d80, lpFindFileData=0x31e29c | out: lpFindFileData=0x31e29c*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x28eee820, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28eee820, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xf73e9a4c, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x504, dwReserved0=0x0, dwReserved1=0x0, cFileName="04_Music_played_in_the_last_month.wpl", cAlternateFileName="04_MUS~1.WPL")) returned 1 [0067.394] FindNextFileW (in: hFindFile=0x381d80, lpFindFileData=0x31e29c | out: lpFindFileData=0x31e29c*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x28eee820, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28eee820, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xf73e9a4c, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x31d, dwReserved0=0x0, dwReserved1=0x0, cFileName="05_Pictures_taken_in_the_last_month.wpl", cAlternateFileName="05_PIC~1.WPL")) returned 1 [0067.394] FindNextFileW (in: hFindFile=0x381d80, lpFindFileData=0x31e29c | out: lpFindFileData=0x31e29c*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x28eee820, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28eee820, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xf73e9a4c, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x311, dwReserved0=0x0, dwReserved1=0x0, cFileName="06_Pictures_rated_4_or_5_stars.wpl", cAlternateFileName="06_PIC~1.WPL")) returned 1 [0067.394] FindNextFileW (in: hFindFile=0x381d80, lpFindFileData=0x31e29c | out: lpFindFileData=0x31e29c*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x28eee820, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28eee820, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xf73e9a4c, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x410, dwReserved0=0x0, dwReserved1=0x0, cFileName="07_TV_recorded_in_the_last_week.wpl", cAlternateFileName="07_TV_~1.WPL")) returned 1 [0067.394] FindNextFileW (in: hFindFile=0x381d80, lpFindFileData=0x31e29c | out: lpFindFileData=0x31e29c*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x28eee820, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28eee820, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xf740fbac, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x3fc, dwReserved0=0x0, dwReserved1=0x0, cFileName="08_Video_rated_at_4_or_5_stars.wpl", cAlternateFileName="08_VID~1.WPL")) returned 1 [0067.394] FindNextFileW (in: hFindFile=0x381d80, lpFindFileData=0x31e29c | out: lpFindFileData=0x31e29c*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x28eee820, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28eee820, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xf740fbac, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x401, dwReserved0=0x0, dwReserved1=0x0, cFileName="09_Music_played_the_most.wpl", cAlternateFileName="09_MUS~1.WPL")) returned 1 [0067.394] FindNextFileW (in: hFindFile=0x381d80, lpFindFileData=0x31e29c | out: lpFindFileData=0x31e29c*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x28ec86c0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28ec86c0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xf740fbac, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x427, dwReserved0=0x0, dwReserved1=0x0, cFileName="10_All_Music.wpl", cAlternateFileName="10_ALL~1.WPL")) returned 1 [0067.394] FindNextFileW (in: hFindFile=0x381d80, lpFindFileData=0x31e29c | out: lpFindFileData=0x31e29c*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x28ec86c0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28ec86c0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xf740fbac, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x249, dwReserved0=0x0, dwReserved1=0x0, cFileName="11_All_Pictures.wpl", cAlternateFileName="11_ALL~1.WPL")) returned 1 [0067.394] FindNextFileW (in: hFindFile=0x381d80, lpFindFileData=0x31e29c | out: lpFindFileData=0x31e29c*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x28ec86c0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28ec86c0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xf740fbac, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x437, dwReserved0=0x0, dwReserved1=0x0, cFileName="12_All_Video.wpl", cAlternateFileName="12_ALL~1.WPL")) returned 1 [0067.394] FindNextFileW (in: hFindFile=0x381d80, lpFindFileData=0x31e29c | out: lpFindFileData=0x31e29c*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x28ec86c0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28ec86c0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xf740fbac, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x437, dwReserved0=0x0, dwReserved1=0x0, cFileName="12_All_Video.wpl", cAlternateFileName="12_ALL~1.WPL")) returned 0 [0067.394] FindClose (in: hFindFile=0x381d80 | out: hFindFile=0x381d80) returned 1 [0067.395] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e524) returned 1 [0067.395] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e530) returned 1 [0067.395] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e654) returned 1 [0067.395] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Media Player\\Transcoded Files Cache", nBufferLength=0x105, lpBuffer=0x31e15c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Media Player\\Transcoded Files Cache", lpFilePart=0x0) returned 0x59 [0067.395] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Media Player\\Transcoded Files Cache\\", nBufferLength=0x105, lpBuffer=0x31e130, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Media Player\\Transcoded Files Cache\\", lpFilePart=0x0) returned 0x5a [0067.395] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Media Player\\Transcoded Files Cache\\*", lpFindFileData=0x31e37c | out: lpFindFileData=0x31e37c*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xf7f22040, ftCreationTime.dwHighDateTime=0x1d3373f, ftLastAccessTime.dwLowDateTime=0xf7f22040, ftLastAccessTime.dwHighDateTime=0x1d3373f, ftLastWriteTime.dwLowDateTime=0xf7f22040, ftLastWriteTime.dwHighDateTime=0x1d3373f, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x381d80 [0067.396] FindNextFileW (in: hFindFile=0x381d80, lpFindFileData=0x31e38c | out: lpFindFileData=0x31e38c*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xf7f22040, ftCreationTime.dwHighDateTime=0x1d3373f, ftLastAccessTime.dwLowDateTime=0xf7f22040, ftLastAccessTime.dwHighDateTime=0x1d3373f, ftLastWriteTime.dwLowDateTime=0xf7f22040, ftLastWriteTime.dwHighDateTime=0x1d3373f, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0067.396] FindNextFileW (in: hFindFile=0x381d80, lpFindFileData=0x31e38c | out: lpFindFileData=0x31e38c*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xf7f22040, ftCreationTime.dwHighDateTime=0x1d3373f, ftLastAccessTime.dwLowDateTime=0xf7f22040, ftLastAccessTime.dwHighDateTime=0x1d3373f, ftLastWriteTime.dwLowDateTime=0xf7f22040, ftLastWriteTime.dwHighDateTime=0x1d3373f, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 0 [0067.396] FindClose (in: hFindFile=0x381d80 | out: hFindFile=0x381d80) returned 1 [0067.396] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e614) returned 1 [0067.396] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e620) returned 1 [0067.396] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e654) returned 1 [0067.396] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Media Player\\Transcoded Files Cache", nBufferLength=0x105, lpBuffer=0x31e15c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Media Player\\Transcoded Files Cache", lpFilePart=0x0) returned 0x59 [0067.396] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Media Player\\Transcoded Files Cache\\", nBufferLength=0x105, lpBuffer=0x31e130, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Media Player\\Transcoded Files Cache\\", lpFilePart=0x0) returned 0x5a [0067.396] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Media Player\\Transcoded Files Cache\\*", lpFindFileData=0x31e37c | out: lpFindFileData=0x31e37c*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xf7f22040, ftCreationTime.dwHighDateTime=0x1d3373f, ftLastAccessTime.dwLowDateTime=0xf7f22040, ftLastAccessTime.dwHighDateTime=0x1d3373f, ftLastWriteTime.dwLowDateTime=0xf7f22040, ftLastWriteTime.dwHighDateTime=0x1d3373f, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x381d80 [0067.396] FindNextFileW (in: hFindFile=0x381d80, lpFindFileData=0x31e38c | out: lpFindFileData=0x31e38c*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xf7f22040, ftCreationTime.dwHighDateTime=0x1d3373f, ftLastAccessTime.dwLowDateTime=0xf7f22040, ftLastAccessTime.dwHighDateTime=0x1d3373f, ftLastWriteTime.dwLowDateTime=0xf7f22040, ftLastWriteTime.dwHighDateTime=0x1d3373f, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0067.396] FindNextFileW (in: hFindFile=0x381d80, lpFindFileData=0x31e38c | out: lpFindFileData=0x31e38c*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xf7f22040, ftCreationTime.dwHighDateTime=0x1d3373f, ftLastAccessTime.dwLowDateTime=0xf7f22040, ftLastAccessTime.dwHighDateTime=0x1d3373f, ftLastWriteTime.dwLowDateTime=0xf7f22040, ftLastWriteTime.dwHighDateTime=0x1d3373f, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 0 [0067.396] FindClose (in: hFindFile=0x381d80 | out: hFindFile=0x381d80) returned 1 [0067.396] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e614) returned 1 [0067.397] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e620) returned 1 [0067.397] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e6cc) returned 1 [0067.397] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Office", nBufferLength=0x105, lpBuffer=0x31e1d4, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Office", lpFilePart=0x0) returned 0x3c [0067.397] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Office\\", nBufferLength=0x105, lpBuffer=0x31e1a8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Office\\", lpFilePart=0x0) returned 0x3d [0067.397] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Office\\*", lpFindFileData=0x31e3f4 | out: lpFindFileData=0x31e3f4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x4f780d90, ftCreationTime.dwHighDateTime=0x1d2dda2, ftLastAccessTime.dwLowDateTime=0x4bb72310, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0x4bb72310, ftLastWriteTime.dwHighDateTime=0x1d2dda4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x381d80 [0067.397] FindNextFileW (in: hFindFile=0x381d80, lpFindFileData=0x31e404 | out: lpFindFileData=0x31e404*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x4f780d90, ftCreationTime.dwHighDateTime=0x1d2dda2, ftLastAccessTime.dwLowDateTime=0x4bb72310, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0x4bb72310, ftLastWriteTime.dwHighDateTime=0x1d2dda4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0067.397] FindNextFileW (in: hFindFile=0x381d80, lpFindFileData=0x31e404 | out: lpFindFileData=0x31e404*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x197ec0b0, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xf7a855a0, ftLastAccessTime.dwHighDateTime=0x1d3373f, ftLastWriteTime.dwLowDateTime=0xf7a855a0, ftLastWriteTime.dwHighDateTime=0x1d3373f, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="14.0", cAlternateFileName="")) returned 1 [0067.397] FindNextFileW (in: hFindFile=0x381d80, lpFindFileData=0x31e404 | out: lpFindFileData=0x31e404*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x4f780d90, ftCreationTime.dwHighDateTime=0x1d2dda2, ftLastAccessTime.dwLowDateTime=0x4f780d90, ftLastAccessTime.dwHighDateTime=0x1d2dda2, ftLastWriteTime.dwLowDateTime=0x4f780d90, ftLastWriteTime.dwHighDateTime=0x1d2dda2, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Groove", cAlternateFileName="")) returned 1 [0067.397] FindNextFileW (in: hFindFile=0x381d80, lpFindFileData=0x31e404 | out: lpFindFileData=0x31e404*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x4bb72310, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0x29ae1d20, ftLastAccessTime.dwHighDateTime=0x1d2e626, ftLastWriteTime.dwLowDateTime=0x29ae1d20, ftLastWriteTime.dwHighDateTime=0x1d2e626, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="ONetConfig", cAlternateFileName="ONETCO~1")) returned 1 [0067.397] FindNextFileW (in: hFindFile=0x381d80, lpFindFileData=0x31e404 | out: lpFindFileData=0x31e404*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x4bb72310, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0x29ae1d20, ftLastAccessTime.dwHighDateTime=0x1d2e626, ftLastWriteTime.dwLowDateTime=0x29ae1d20, ftLastWriteTime.dwHighDateTime=0x1d2e626, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="ONetConfig", cAlternateFileName="ONETCO~1")) returned 0 [0067.397] FindClose (in: hFindFile=0x381d80 | out: hFindFile=0x381d80) returned 1 [0067.397] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e68c) returned 1 [0067.397] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e698) returned 1 [0067.397] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e6cc) returned 1 [0067.397] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Office", nBufferLength=0x105, lpBuffer=0x31e1d4, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Office", lpFilePart=0x0) returned 0x3c [0067.398] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Office\\", nBufferLength=0x105, lpBuffer=0x31e1a8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Office\\", lpFilePart=0x0) returned 0x3d [0067.398] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Office\\*", lpFindFileData=0x31e3f4 | out: lpFindFileData=0x31e3f4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x4f780d90, ftCreationTime.dwHighDateTime=0x1d2dda2, ftLastAccessTime.dwLowDateTime=0x4bb72310, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0x4bb72310, ftLastWriteTime.dwHighDateTime=0x1d2dda4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x381d80 [0067.398] FindNextFileW (in: hFindFile=0x381d80, lpFindFileData=0x31e404 | out: lpFindFileData=0x31e404*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x4f780d90, ftCreationTime.dwHighDateTime=0x1d2dda2, ftLastAccessTime.dwLowDateTime=0x4bb72310, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0x4bb72310, ftLastWriteTime.dwHighDateTime=0x1d2dda4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0067.398] FindNextFileW (in: hFindFile=0x381d80, lpFindFileData=0x31e404 | out: lpFindFileData=0x31e404*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x197ec0b0, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xf7a855a0, ftLastAccessTime.dwHighDateTime=0x1d3373f, ftLastWriteTime.dwLowDateTime=0xf7a855a0, ftLastWriteTime.dwHighDateTime=0x1d3373f, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="14.0", cAlternateFileName="")) returned 1 [0067.398] FindNextFileW (in: hFindFile=0x381d80, lpFindFileData=0x31e404 | out: lpFindFileData=0x31e404*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x4f780d90, ftCreationTime.dwHighDateTime=0x1d2dda2, ftLastAccessTime.dwLowDateTime=0x4f780d90, ftLastAccessTime.dwHighDateTime=0x1d2dda2, ftLastWriteTime.dwLowDateTime=0x4f780d90, ftLastWriteTime.dwHighDateTime=0x1d2dda2, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Groove", cAlternateFileName="")) returned 1 [0067.398] FindNextFileW (in: hFindFile=0x381d80, lpFindFileData=0x31e404 | out: lpFindFileData=0x31e404*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x4bb72310, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0x29ae1d20, ftLastAccessTime.dwHighDateTime=0x1d2e626, ftLastWriteTime.dwLowDateTime=0x29ae1d20, ftLastWriteTime.dwHighDateTime=0x1d2e626, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="ONetConfig", cAlternateFileName="ONETCO~1")) returned 1 [0067.398] FindNextFileW (in: hFindFile=0x381d80, lpFindFileData=0x31e404 | out: lpFindFileData=0x31e404*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0067.398] FindClose (in: hFindFile=0x381d80 | out: hFindFile=0x381d80) returned 1 [0067.398] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e68c) returned 1 [0067.398] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e698) returned 1 [0067.398] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e654) returned 1 [0067.398] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Office\\14.0", nBufferLength=0x105, lpBuffer=0x31e15c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Office\\14.0", lpFilePart=0x0) returned 0x41 [0067.398] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Office\\14.0\\", nBufferLength=0x105, lpBuffer=0x31e130, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Office\\14.0\\", lpFilePart=0x0) returned 0x42 [0067.398] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Office\\14.0\\*", lpFindFileData=0x31e37c | out: lpFindFileData=0x31e37c*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x197ec0b0, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xf7a855a0, ftLastAccessTime.dwHighDateTime=0x1d3373f, ftLastWriteTime.dwLowDateTime=0xf7a855a0, ftLastWriteTime.dwHighDateTime=0x1d3373f, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x381d80 [0067.399] FindNextFileW (in: hFindFile=0x381d80, lpFindFileData=0x31e38c | out: lpFindFileData=0x31e38c*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x197ec0b0, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xf7a855a0, ftLastAccessTime.dwHighDateTime=0x1d3373f, ftLastWriteTime.dwLowDateTime=0xf7a855a0, ftLastWriteTime.dwHighDateTime=0x1d3373f, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0067.399] FindNextFileW (in: hFindFile=0x381d80, lpFindFileData=0x31e38c | out: lpFindFileData=0x31e38c*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xf7a855a0, ftCreationTime.dwHighDateTime=0x1d3373f, ftLastAccessTime.dwLowDateTime=0xf7ad1860, ftLastAccessTime.dwHighDateTime=0x1d3373f, ftLastWriteTime.dwLowDateTime=0xf7ad1860, ftLastWriteTime.dwHighDateTime=0x1d3373f, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="OfficeFileCache", cAlternateFileName="OFFICE~1")) returned 1 [0067.399] FindNextFileW (in: hFindFile=0x381d80, lpFindFileData=0x31e38c | out: lpFindFileData=0x31e38c*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xf7a855a0, ftCreationTime.dwHighDateTime=0x1d3373f, ftLastAccessTime.dwLowDateTime=0xf7ad1860, ftLastAccessTime.dwHighDateTime=0x1d3373f, ftLastWriteTime.dwLowDateTime=0xf7ad1860, ftLastWriteTime.dwHighDateTime=0x1d3373f, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="OfficeFileCache", cAlternateFileName="OFFICE~1")) returned 0 [0067.399] FindClose (in: hFindFile=0x381d80 | out: hFindFile=0x381d80) returned 1 [0067.399] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e614) returned 1 [0067.399] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e620) returned 1 [0067.399] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e654) returned 1 [0067.399] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Office\\14.0", nBufferLength=0x105, lpBuffer=0x31e15c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Office\\14.0", lpFilePart=0x0) returned 0x41 [0067.399] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Office\\14.0\\", nBufferLength=0x105, lpBuffer=0x31e130, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Office\\14.0\\", lpFilePart=0x0) returned 0x42 [0067.399] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Office\\14.0\\*", lpFindFileData=0x31e37c | out: lpFindFileData=0x31e37c*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x197ec0b0, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xf7a855a0, ftLastAccessTime.dwHighDateTime=0x1d3373f, ftLastWriteTime.dwLowDateTime=0xf7a855a0, ftLastWriteTime.dwHighDateTime=0x1d3373f, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x381d80 [0067.400] FindNextFileW (in: hFindFile=0x381d80, lpFindFileData=0x31e38c | out: lpFindFileData=0x31e38c*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x197ec0b0, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xf7a855a0, ftLastAccessTime.dwHighDateTime=0x1d3373f, ftLastWriteTime.dwLowDateTime=0xf7a855a0, ftLastWriteTime.dwHighDateTime=0x1d3373f, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0067.400] FindNextFileW (in: hFindFile=0x381d80, lpFindFileData=0x31e38c | out: lpFindFileData=0x31e38c*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xf7a855a0, ftCreationTime.dwHighDateTime=0x1d3373f, ftLastAccessTime.dwLowDateTime=0xf7ad1860, ftLastAccessTime.dwHighDateTime=0x1d3373f, ftLastWriteTime.dwLowDateTime=0xf7ad1860, ftLastWriteTime.dwHighDateTime=0x1d3373f, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="OfficeFileCache", cAlternateFileName="OFFICE~1")) returned 1 [0067.400] FindNextFileW (in: hFindFile=0x381d80, lpFindFileData=0x31e38c | out: lpFindFileData=0x31e38c*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0067.400] FindClose (in: hFindFile=0x381d80 | out: hFindFile=0x381d80) returned 1 [0067.400] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e614) returned 1 [0067.400] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e620) returned 1 [0067.400] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e5dc) returned 1 [0067.400] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Office\\14.0\\OfficeFileCache", nBufferLength=0x105, lpBuffer=0x31e0e4, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Office\\14.0\\OfficeFileCache", lpFilePart=0x0) returned 0x51 [0067.400] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Office\\14.0\\OfficeFileCache\\", nBufferLength=0x105, lpBuffer=0x31e0b8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Office\\14.0\\OfficeFileCache\\", lpFilePart=0x0) returned 0x52 [0067.400] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Office\\14.0\\OfficeFileCache\\*", lpFindFileData=0x31e304 | out: lpFindFileData=0x31e304*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xf7a855a0, ftCreationTime.dwHighDateTime=0x1d3373f, ftLastAccessTime.dwLowDateTime=0xf7ad1860, ftLastAccessTime.dwHighDateTime=0x1d3373f, ftLastWriteTime.dwLowDateTime=0xf7ad1860, ftLastWriteTime.dwHighDateTime=0x1d3373f, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x381d80 [0067.401] FindNextFileW (in: hFindFile=0x381d80, lpFindFileData=0x31e314 | out: lpFindFileData=0x31e314*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xf7a855a0, ftCreationTime.dwHighDateTime=0x1d3373f, ftLastAccessTime.dwLowDateTime=0xf7ad1860, ftLastAccessTime.dwHighDateTime=0x1d3373f, ftLastWriteTime.dwLowDateTime=0xf7ad1860, ftLastWriteTime.dwHighDateTime=0x1d3373f, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0067.401] FindNextFileW (in: hFindFile=0x381d80, lpFindFileData=0x31e314 | out: lpFindFileData=0x31e314*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xf7aab700, ftCreationTime.dwHighDateTime=0x1d3373f, ftLastAccessTime.dwLowDateTime=0xf7aab700, ftLastAccessTime.dwHighDateTime=0x1d3373f, ftLastWriteTime.dwLowDateTime=0xf7ad1860, ftLastWriteTime.dwHighDateTime=0x1d3373f, nFileSizeHigh=0x0, nFileSizeLow=0x20000, dwReserved0=0x0, dwReserved1=0x0, cFileName="FSD-CNRY.FSD", cAlternateFileName="")) returned 1 [0067.401] FindNextFileW (in: hFindFile=0x381d80, lpFindFileData=0x31e314 | out: lpFindFileData=0x31e314*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xf7ad1860, ftCreationTime.dwHighDateTime=0x1d3373f, ftLastAccessTime.dwLowDateTime=0xf7ad1860, ftLastAccessTime.dwHighDateTime=0x1d3373f, ftLastWriteTime.dwLowDateTime=0xf7af79c0, ftLastWriteTime.dwHighDateTime=0x1d3373f, nFileSizeHigh=0x0, nFileSizeLow=0x20000, dwReserved0=0x0, dwReserved1=0x0, cFileName="FSD-{48508C83-EC67-468F-AA1F-6F3CAF625658}.FSD", cAlternateFileName="FSD-{4~1.FSD")) returned 1 [0067.401] FindNextFileW (in: hFindFile=0x381d80, lpFindFileData=0x31e314 | out: lpFindFileData=0x31e314*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xf7ad1860, ftCreationTime.dwHighDateTime=0x1d3373f, ftLastAccessTime.dwLowDateTime=0xf7ad1860, ftLastAccessTime.dwHighDateTime=0x1d3373f, ftLastWriteTime.dwLowDateTime=0xf7af79c0, ftLastWriteTime.dwHighDateTime=0x1d3373f, nFileSizeHigh=0x0, nFileSizeLow=0x72, dwReserved0=0x0, dwReserved1=0x0, cFileName="FSF-CTBL.FSF", cAlternateFileName="")) returned 1 [0067.401] FindNextFileW (in: hFindFile=0x381d80, lpFindFileData=0x31e314 | out: lpFindFileData=0x31e314*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0067.401] FindClose (in: hFindFile=0x381d80 | out: hFindFile=0x381d80) returned 1 [0067.401] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e59c) returned 1 [0067.401] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e5a8) returned 1 [0067.401] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e5dc) returned 1 [0067.401] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Office\\14.0\\OfficeFileCache", nBufferLength=0x105, lpBuffer=0x31e0e4, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Office\\14.0\\OfficeFileCache", lpFilePart=0x0) returned 0x51 [0067.401] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Office\\14.0\\OfficeFileCache\\", nBufferLength=0x105, lpBuffer=0x31e0b8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Office\\14.0\\OfficeFileCache\\", lpFilePart=0x0) returned 0x52 [0067.401] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Office\\14.0\\OfficeFileCache\\*", lpFindFileData=0x31e304 | out: lpFindFileData=0x31e304*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xf7a855a0, ftCreationTime.dwHighDateTime=0x1d3373f, ftLastAccessTime.dwLowDateTime=0xf7ad1860, ftLastAccessTime.dwHighDateTime=0x1d3373f, ftLastWriteTime.dwLowDateTime=0xf7ad1860, ftLastWriteTime.dwHighDateTime=0x1d3373f, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x381d80 [0067.401] FindNextFileW (in: hFindFile=0x381d80, lpFindFileData=0x31e314 | out: lpFindFileData=0x31e314*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xf7a855a0, ftCreationTime.dwHighDateTime=0x1d3373f, ftLastAccessTime.dwLowDateTime=0xf7ad1860, ftLastAccessTime.dwHighDateTime=0x1d3373f, ftLastWriteTime.dwLowDateTime=0xf7ad1860, ftLastWriteTime.dwHighDateTime=0x1d3373f, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0067.401] FindNextFileW (in: hFindFile=0x381d80, lpFindFileData=0x31e314 | out: lpFindFileData=0x31e314*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xf7aab700, ftCreationTime.dwHighDateTime=0x1d3373f, ftLastAccessTime.dwLowDateTime=0xf7aab700, ftLastAccessTime.dwHighDateTime=0x1d3373f, ftLastWriteTime.dwLowDateTime=0xf7ad1860, ftLastWriteTime.dwHighDateTime=0x1d3373f, nFileSizeHigh=0x0, nFileSizeLow=0x20000, dwReserved0=0x0, dwReserved1=0x0, cFileName="FSD-CNRY.FSD", cAlternateFileName="")) returned 1 [0067.402] FindNextFileW (in: hFindFile=0x381d80, lpFindFileData=0x31e314 | out: lpFindFileData=0x31e314*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xf7ad1860, ftCreationTime.dwHighDateTime=0x1d3373f, ftLastAccessTime.dwLowDateTime=0xf7ad1860, ftLastAccessTime.dwHighDateTime=0x1d3373f, ftLastWriteTime.dwLowDateTime=0xf7af79c0, ftLastWriteTime.dwHighDateTime=0x1d3373f, nFileSizeHigh=0x0, nFileSizeLow=0x20000, dwReserved0=0x0, dwReserved1=0x0, cFileName="FSD-{48508C83-EC67-468F-AA1F-6F3CAF625658}.FSD", cAlternateFileName="FSD-{4~1.FSD")) returned 1 [0067.402] FindNextFileW (in: hFindFile=0x381d80, lpFindFileData=0x31e314 | out: lpFindFileData=0x31e314*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xf7ad1860, ftCreationTime.dwHighDateTime=0x1d3373f, ftLastAccessTime.dwLowDateTime=0xf7ad1860, ftLastAccessTime.dwHighDateTime=0x1d3373f, ftLastWriteTime.dwLowDateTime=0xf7af79c0, ftLastWriteTime.dwHighDateTime=0x1d3373f, nFileSizeHigh=0x0, nFileSizeLow=0x72, dwReserved0=0x0, dwReserved1=0x0, cFileName="FSF-CTBL.FSF", cAlternateFileName="")) returned 1 [0067.402] FindNextFileW (in: hFindFile=0x381d80, lpFindFileData=0x31e314 | out: lpFindFileData=0x31e314*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xf7ad1860, ftCreationTime.dwHighDateTime=0x1d3373f, ftLastAccessTime.dwLowDateTime=0xf7ad1860, ftLastAccessTime.dwHighDateTime=0x1d3373f, ftLastWriteTime.dwLowDateTime=0xf7af79c0, ftLastWriteTime.dwHighDateTime=0x1d3373f, nFileSizeHigh=0x0, nFileSizeLow=0x72, dwReserved0=0x0, dwReserved1=0x0, cFileName="FSF-CTBL.FSF", cAlternateFileName="")) returned 0 [0067.402] FindClose (in: hFindFile=0x381d80 | out: hFindFile=0x381d80) returned 1 [0067.402] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e59c) returned 1 [0067.402] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e5a8) returned 1 [0067.402] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e654) returned 1 [0067.402] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Office\\Groove", nBufferLength=0x105, lpBuffer=0x31e15c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Office\\Groove", lpFilePart=0x0) returned 0x43 [0067.402] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Office\\Groove\\", nBufferLength=0x105, lpBuffer=0x31e130, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Office\\Groove\\", lpFilePart=0x0) returned 0x44 [0067.402] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Office\\Groove\\*", lpFindFileData=0x31e37c | out: lpFindFileData=0x31e37c*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x4f780d90, ftCreationTime.dwHighDateTime=0x1d2dda2, ftLastAccessTime.dwLowDateTime=0x4f780d90, ftLastAccessTime.dwHighDateTime=0x1d2dda2, ftLastWriteTime.dwLowDateTime=0x4f780d90, ftLastWriteTime.dwHighDateTime=0x1d2dda2, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x381d80 [0067.402] FindNextFileW (in: hFindFile=0x381d80, lpFindFileData=0x31e38c | out: lpFindFileData=0x31e38c*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x4f780d90, ftCreationTime.dwHighDateTime=0x1d2dda2, ftLastAccessTime.dwLowDateTime=0x4f780d90, ftLastAccessTime.dwHighDateTime=0x1d2dda2, ftLastWriteTime.dwLowDateTime=0x4f780d90, ftLastWriteTime.dwHighDateTime=0x1d2dda2, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0067.402] FindNextFileW (in: hFindFile=0x381d80, lpFindFileData=0x31e38c | out: lpFindFileData=0x31e38c*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x4f780d90, ftCreationTime.dwHighDateTime=0x1d2dda2, ftLastAccessTime.dwLowDateTime=0x4f780d90, ftLastAccessTime.dwHighDateTime=0x1d2dda2, ftLastWriteTime.dwLowDateTime=0x4f780d90, ftLastWriteTime.dwHighDateTime=0x1d2dda2, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="System", cAlternateFileName="")) returned 1 [0067.402] FindNextFileW (in: hFindFile=0x381d80, lpFindFileData=0x31e38c | out: lpFindFileData=0x31e38c*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x4f780d90, ftCreationTime.dwHighDateTime=0x1d2dda2, ftLastAccessTime.dwLowDateTime=0x4f780d90, ftLastAccessTime.dwHighDateTime=0x1d2dda2, ftLastWriteTime.dwLowDateTime=0x4f780d90, ftLastWriteTime.dwHighDateTime=0x1d2dda2, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="User", cAlternateFileName="")) returned 1 [0067.402] FindNextFileW (in: hFindFile=0x381d80, lpFindFileData=0x31e38c | out: lpFindFileData=0x31e38c*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x4f780d90, ftCreationTime.dwHighDateTime=0x1d2dda2, ftLastAccessTime.dwLowDateTime=0x4f780d90, ftLastAccessTime.dwHighDateTime=0x1d2dda2, ftLastWriteTime.dwLowDateTime=0x4f780d90, ftLastWriteTime.dwHighDateTime=0x1d2dda2, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="User", cAlternateFileName="")) returned 0 [0067.402] FindClose (in: hFindFile=0x381d80 | out: hFindFile=0x381d80) returned 1 [0067.402] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e614) returned 1 [0067.402] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e620) returned 1 [0067.402] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e654) returned 1 [0067.403] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Office\\Groove", nBufferLength=0x105, lpBuffer=0x31e15c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Office\\Groove", lpFilePart=0x0) returned 0x43 [0067.403] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Office\\Groove\\", nBufferLength=0x105, lpBuffer=0x31e130, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Office\\Groove\\", lpFilePart=0x0) returned 0x44 [0067.403] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Office\\Groove\\*", lpFindFileData=0x31e37c | out: lpFindFileData=0x31e37c*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x4f780d90, ftCreationTime.dwHighDateTime=0x1d2dda2, ftLastAccessTime.dwLowDateTime=0x4f780d90, ftLastAccessTime.dwHighDateTime=0x1d2dda2, ftLastWriteTime.dwLowDateTime=0x4f780d90, ftLastWriteTime.dwHighDateTime=0x1d2dda2, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x381d80 [0067.403] FindNextFileW (in: hFindFile=0x381d80, lpFindFileData=0x31e38c | out: lpFindFileData=0x31e38c*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x4f780d90, ftCreationTime.dwHighDateTime=0x1d2dda2, ftLastAccessTime.dwLowDateTime=0x4f780d90, ftLastAccessTime.dwHighDateTime=0x1d2dda2, ftLastWriteTime.dwLowDateTime=0x4f780d90, ftLastWriteTime.dwHighDateTime=0x1d2dda2, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0067.403] FindNextFileW (in: hFindFile=0x381d80, lpFindFileData=0x31e38c | out: lpFindFileData=0x31e38c*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x4f780d90, ftCreationTime.dwHighDateTime=0x1d2dda2, ftLastAccessTime.dwLowDateTime=0x4f780d90, ftLastAccessTime.dwHighDateTime=0x1d2dda2, ftLastWriteTime.dwLowDateTime=0x4f780d90, ftLastWriteTime.dwHighDateTime=0x1d2dda2, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="System", cAlternateFileName="")) returned 1 [0067.403] FindNextFileW (in: hFindFile=0x381d80, lpFindFileData=0x31e38c | out: lpFindFileData=0x31e38c*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x4f780d90, ftCreationTime.dwHighDateTime=0x1d2dda2, ftLastAccessTime.dwLowDateTime=0x4f780d90, ftLastAccessTime.dwHighDateTime=0x1d2dda2, ftLastWriteTime.dwLowDateTime=0x4f780d90, ftLastWriteTime.dwHighDateTime=0x1d2dda2, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="User", cAlternateFileName="")) returned 1 [0067.403] FindNextFileW (in: hFindFile=0x381d80, lpFindFileData=0x31e38c | out: lpFindFileData=0x31e38c*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0067.403] FindClose (in: hFindFile=0x381d80 | out: hFindFile=0x381d80) returned 1 [0067.403] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e614) returned 1 [0067.403] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e620) returned 1 [0067.403] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e5dc) returned 1 [0067.403] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Office\\Groove\\System", nBufferLength=0x105, lpBuffer=0x31e0e4, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Office\\Groove\\System", lpFilePart=0x0) returned 0x4a [0067.403] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Office\\Groove\\System\\", nBufferLength=0x105, lpBuffer=0x31e0b8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Office\\Groove\\System\\", lpFilePart=0x0) returned 0x4b [0067.403] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Office\\Groove\\System\\*", lpFindFileData=0x31e304 | out: lpFindFileData=0x31e304*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x4f780d90, ftCreationTime.dwHighDateTime=0x1d2dda2, ftLastAccessTime.dwLowDateTime=0x4f780d90, ftLastAccessTime.dwHighDateTime=0x1d2dda2, ftLastWriteTime.dwLowDateTime=0x4f780d90, ftLastWriteTime.dwHighDateTime=0x1d2dda2, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x381d80 [0067.403] FindNextFileW (in: hFindFile=0x381d80, lpFindFileData=0x31e314 | out: lpFindFileData=0x31e314*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x4f780d90, ftCreationTime.dwHighDateTime=0x1d2dda2, ftLastAccessTime.dwLowDateTime=0x4f780d90, ftLastAccessTime.dwHighDateTime=0x1d2dda2, ftLastWriteTime.dwLowDateTime=0x4f780d90, ftLastWriteTime.dwHighDateTime=0x1d2dda2, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0067.403] FindNextFileW (in: hFindFile=0x381d80, lpFindFileData=0x31e314 | out: lpFindFileData=0x31e314*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x4f780d90, ftCreationTime.dwHighDateTime=0x1d2dda2, ftLastAccessTime.dwLowDateTime=0x4f780d90, ftLastAccessTime.dwHighDateTime=0x1d2dda2, ftLastWriteTime.dwLowDateTime=0x4f780d90, ftLastWriteTime.dwHighDateTime=0x1d2dda2, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 0 [0067.403] FindClose (in: hFindFile=0x381d80 | out: hFindFile=0x381d80) returned 1 [0067.403] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e59c) returned 1 [0067.403] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e5a8) returned 1 [0067.404] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e5dc) returned 1 [0067.404] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Office\\Groove\\System", nBufferLength=0x105, lpBuffer=0x31e0e4, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Office\\Groove\\System", lpFilePart=0x0) returned 0x4a [0067.404] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Office\\Groove\\System\\", nBufferLength=0x105, lpBuffer=0x31e0b8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Office\\Groove\\System\\", lpFilePart=0x0) returned 0x4b [0067.404] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Office\\Groove\\System\\*", lpFindFileData=0x31e304 | out: lpFindFileData=0x31e304*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x4f780d90, ftCreationTime.dwHighDateTime=0x1d2dda2, ftLastAccessTime.dwLowDateTime=0x4f780d90, ftLastAccessTime.dwHighDateTime=0x1d2dda2, ftLastWriteTime.dwLowDateTime=0x4f780d90, ftLastWriteTime.dwHighDateTime=0x1d2dda2, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x381d80 [0067.404] FindNextFileW (in: hFindFile=0x381d80, lpFindFileData=0x31e314 | out: lpFindFileData=0x31e314*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x4f780d90, ftCreationTime.dwHighDateTime=0x1d2dda2, ftLastAccessTime.dwLowDateTime=0x4f780d90, ftLastAccessTime.dwHighDateTime=0x1d2dda2, ftLastWriteTime.dwLowDateTime=0x4f780d90, ftLastWriteTime.dwHighDateTime=0x1d2dda2, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0067.404] FindNextFileW (in: hFindFile=0x381d80, lpFindFileData=0x31e314 | out: lpFindFileData=0x31e314*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x4f780d90, ftCreationTime.dwHighDateTime=0x1d2dda2, ftLastAccessTime.dwLowDateTime=0x4f780d90, ftLastAccessTime.dwHighDateTime=0x1d2dda2, ftLastWriteTime.dwLowDateTime=0x4f780d90, ftLastWriteTime.dwHighDateTime=0x1d2dda2, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 0 [0067.404] FindClose (in: hFindFile=0x381d80 | out: hFindFile=0x381d80) returned 1 [0067.404] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e59c) returned 1 [0067.404] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e5a8) returned 1 [0067.404] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e5dc) returned 1 [0067.404] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Office\\Groove\\User", nBufferLength=0x105, lpBuffer=0x31e0e4, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Office\\Groove\\User", lpFilePart=0x0) returned 0x48 [0067.404] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Office\\Groove\\User\\", nBufferLength=0x105, lpBuffer=0x31e0b8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Office\\Groove\\User\\", lpFilePart=0x0) returned 0x49 [0067.404] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Office\\Groove\\User\\*", lpFindFileData=0x31e304 | out: lpFindFileData=0x31e304*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x4f780d90, ftCreationTime.dwHighDateTime=0x1d2dda2, ftLastAccessTime.dwLowDateTime=0x4f780d90, ftLastAccessTime.dwHighDateTime=0x1d2dda2, ftLastWriteTime.dwLowDateTime=0x4f780d90, ftLastWriteTime.dwHighDateTime=0x1d2dda2, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x381d80 [0067.404] FindNextFileW (in: hFindFile=0x381d80, lpFindFileData=0x31e314 | out: lpFindFileData=0x31e314*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x4f780d90, ftCreationTime.dwHighDateTime=0x1d2dda2, ftLastAccessTime.dwLowDateTime=0x4f780d90, ftLastAccessTime.dwHighDateTime=0x1d2dda2, ftLastWriteTime.dwLowDateTime=0x4f780d90, ftLastWriteTime.dwHighDateTime=0x1d2dda2, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0067.404] FindNextFileW (in: hFindFile=0x381d80, lpFindFileData=0x31e314 | out: lpFindFileData=0x31e314*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x4f780d90, ftCreationTime.dwHighDateTime=0x1d2dda2, ftLastAccessTime.dwLowDateTime=0x4f780d90, ftLastAccessTime.dwHighDateTime=0x1d2dda2, ftLastWriteTime.dwLowDateTime=0x4f780d90, ftLastWriteTime.dwHighDateTime=0x1d2dda2, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 0 [0067.404] FindClose (in: hFindFile=0x381d80 | out: hFindFile=0x381d80) returned 1 [0067.404] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e59c) returned 1 [0067.404] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e5a8) returned 1 [0067.405] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e5dc) returned 1 [0067.405] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Office\\Groove\\User", nBufferLength=0x105, lpBuffer=0x31e0e4, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Office\\Groove\\User", lpFilePart=0x0) returned 0x48 [0067.405] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Office\\Groove\\User\\", nBufferLength=0x105, lpBuffer=0x31e0b8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Office\\Groove\\User\\", lpFilePart=0x0) returned 0x49 [0067.405] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Office\\Groove\\User\\*", lpFindFileData=0x31e304 | out: lpFindFileData=0x31e304*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x4f780d90, ftCreationTime.dwHighDateTime=0x1d2dda2, ftLastAccessTime.dwLowDateTime=0x4f780d90, ftLastAccessTime.dwHighDateTime=0x1d2dda2, ftLastWriteTime.dwLowDateTime=0x4f780d90, ftLastWriteTime.dwHighDateTime=0x1d2dda2, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x381d80 [0067.405] FindNextFileW (in: hFindFile=0x381d80, lpFindFileData=0x31e314 | out: lpFindFileData=0x31e314*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x4f780d90, ftCreationTime.dwHighDateTime=0x1d2dda2, ftLastAccessTime.dwLowDateTime=0x4f780d90, ftLastAccessTime.dwHighDateTime=0x1d2dda2, ftLastWriteTime.dwLowDateTime=0x4f780d90, ftLastWriteTime.dwHighDateTime=0x1d2dda2, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0067.405] FindNextFileW (in: hFindFile=0x381d80, lpFindFileData=0x31e314 | out: lpFindFileData=0x31e314*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x4f780d90, ftCreationTime.dwHighDateTime=0x1d2dda2, ftLastAccessTime.dwLowDateTime=0x4f780d90, ftLastAccessTime.dwHighDateTime=0x1d2dda2, ftLastWriteTime.dwLowDateTime=0x4f780d90, ftLastWriteTime.dwHighDateTime=0x1d2dda2, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 0 [0067.405] FindClose (in: hFindFile=0x381d80 | out: hFindFile=0x381d80) returned 1 [0067.405] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e59c) returned 1 [0067.405] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e5a8) returned 1 [0067.405] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e654) returned 1 [0067.405] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Office\\ONetConfig", nBufferLength=0x105, lpBuffer=0x31e15c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Office\\ONetConfig", lpFilePart=0x0) returned 0x47 [0067.405] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Office\\ONetConfig\\", nBufferLength=0x105, lpBuffer=0x31e130, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Office\\ONetConfig\\", lpFilePart=0x0) returned 0x48 [0067.405] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Office\\ONetConfig\\*", lpFindFileData=0x31e37c | out: lpFindFileData=0x31e37c*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x4bb72310, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0x29ae1d20, ftLastAccessTime.dwHighDateTime=0x1d2e626, ftLastWriteTime.dwLowDateTime=0x29ae1d20, ftLastWriteTime.dwHighDateTime=0x1d2e626, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x381d80 [0067.405] FindNextFileW (in: hFindFile=0x381d80, lpFindFileData=0x31e38c | out: lpFindFileData=0x31e38c*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x4bb72310, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0x29ae1d20, ftLastAccessTime.dwHighDateTime=0x1d2e626, ftLastWriteTime.dwLowDateTime=0x29ae1d20, ftLastWriteTime.dwHighDateTime=0x1d2e626, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0067.405] FindNextFileW (in: hFindFile=0x381d80, lpFindFileData=0x31e38c | out: lpFindFileData=0x31e38c*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x4bd15230, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0x29ae1d20, ftLastAccessTime.dwHighDateTime=0x1d2e626, ftLastWriteTime.dwLowDateTime=0x29ae1d20, ftLastWriteTime.dwHighDateTime=0x1d2e626, nFileSizeHigh=0x0, nFileSizeLow=0x80, dwReserved0=0x0, dwReserved1=0x0, cFileName="350db95df4cbd94b2a1c300510e12e11.sig", cAlternateFileName="350DB9~1.SIG")) returned 1 [0067.405] FindNextFileW (in: hFindFile=0x381d80, lpFindFileData=0x31e38c | out: lpFindFileData=0x31e38c*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x4bd15230, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0x29ae1d20, ftLastAccessTime.dwHighDateTime=0x1d2e626, ftLastWriteTime.dwLowDateTime=0x29ae1d20, ftLastWriteTime.dwHighDateTime=0x1d2e626, nFileSizeHigh=0x0, nFileSizeLow=0x7ef, dwReserved0=0x0, dwReserved1=0x0, cFileName="350db95df4cbd94b2a1c300510e12e11.xml", cAlternateFileName="350DB9~1.XML")) returned 1 [0067.405] FindNextFileW (in: hFindFile=0x381d80, lpFindFileData=0x31e38c | out: lpFindFileData=0x31e38c*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0067.405] FindClose (in: hFindFile=0x381d80 | out: hFindFile=0x381d80) returned 1 [0067.406] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e614) returned 1 [0067.406] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e620) returned 1 [0067.406] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e654) returned 1 [0067.406] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Office\\ONetConfig", nBufferLength=0x105, lpBuffer=0x31e15c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Office\\ONetConfig", lpFilePart=0x0) returned 0x47 [0067.406] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Office\\ONetConfig\\", nBufferLength=0x105, lpBuffer=0x31e130, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Office\\ONetConfig\\", lpFilePart=0x0) returned 0x48 [0067.406] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Office\\ONetConfig\\*", lpFindFileData=0x31e37c | out: lpFindFileData=0x31e37c*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x4bb72310, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0x29ae1d20, ftLastAccessTime.dwHighDateTime=0x1d2e626, ftLastWriteTime.dwLowDateTime=0x29ae1d20, ftLastWriteTime.dwHighDateTime=0x1d2e626, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x381d80 [0067.406] FindNextFileW (in: hFindFile=0x381d80, lpFindFileData=0x31e38c | out: lpFindFileData=0x31e38c*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x4bb72310, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0x29ae1d20, ftLastAccessTime.dwHighDateTime=0x1d2e626, ftLastWriteTime.dwLowDateTime=0x29ae1d20, ftLastWriteTime.dwHighDateTime=0x1d2e626, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0067.406] FindNextFileW (in: hFindFile=0x381d80, lpFindFileData=0x31e38c | out: lpFindFileData=0x31e38c*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x4bd15230, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0x29ae1d20, ftLastAccessTime.dwHighDateTime=0x1d2e626, ftLastWriteTime.dwLowDateTime=0x29ae1d20, ftLastWriteTime.dwHighDateTime=0x1d2e626, nFileSizeHigh=0x0, nFileSizeLow=0x80, dwReserved0=0x0, dwReserved1=0x0, cFileName="350db95df4cbd94b2a1c300510e12e11.sig", cAlternateFileName="350DB9~1.SIG")) returned 1 [0067.406] FindNextFileW (in: hFindFile=0x381d80, lpFindFileData=0x31e38c | out: lpFindFileData=0x31e38c*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x4bd15230, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0x29ae1d20, ftLastAccessTime.dwHighDateTime=0x1d2e626, ftLastWriteTime.dwLowDateTime=0x29ae1d20, ftLastWriteTime.dwHighDateTime=0x1d2e626, nFileSizeHigh=0x0, nFileSizeLow=0x7ef, dwReserved0=0x0, dwReserved1=0x0, cFileName="350db95df4cbd94b2a1c300510e12e11.xml", cAlternateFileName="350DB9~1.XML")) returned 1 [0067.406] FindNextFileW (in: hFindFile=0x381d80, lpFindFileData=0x31e38c | out: lpFindFileData=0x31e38c*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x4bd15230, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0x29ae1d20, ftLastAccessTime.dwHighDateTime=0x1d2e626, ftLastWriteTime.dwLowDateTime=0x29ae1d20, ftLastWriteTime.dwHighDateTime=0x1d2e626, nFileSizeHigh=0x0, nFileSizeLow=0x7ef, dwReserved0=0x0, dwReserved1=0x0, cFileName="350db95df4cbd94b2a1c300510e12e11.xml", cAlternateFileName="350DB9~1.XML")) returned 0 [0067.406] FindClose (in: hFindFile=0x381d80 | out: hFindFile=0x381d80) returned 1 [0067.406] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e614) returned 1 [0067.406] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e620) returned 1 [0067.406] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Office\\ONetConfig\\350db95df4cbd94b2a1c300510e12e11.xml", nBufferLength=0x105, lpBuffer=0x31e02c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Office\\ONetConfig\\350db95df4cbd94b2a1c300510e12e11.xml", lpFilePart=0x0) returned 0x6c [0067.406] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e520) returned 1 [0067.406] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Office\\ONetConfig\\350db95df4cbd94b2a1c300510e12e11.xml" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\office\\onetconfig\\350db95df4cbd94b2a1c300510e12e11.xml"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x178 [0067.408] GetFileType (hFile=0x178) returned 0x1 [0067.408] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e51c) returned 1 [0067.408] GetFileType (hFile=0x178) returned 0x1 [0067.408] GetFileSize (in: hFile=0x178, lpFileSizeHigh=0x31e628 | out: lpFileSizeHigh=0x31e628*=0x0) returned 0x7ef [0067.408] ReadFile (in: hFile=0x178, lpBuffer=0x269ec14, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x31e5d4, lpOverlapped=0x0 | out: lpBuffer=0x269ec14*, lpNumberOfBytesRead=0x31e5d4*=0x7ef, lpOverlapped=0x0) returned 1 [0067.422] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Office\\ONetConfig\\350db95df4cbd94b2a1c300510e12e11.xml", nBufferLength=0x105, lpBuffer=0x31e018, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Office\\ONetConfig\\350db95df4cbd94b2a1c300510e12e11.xml", lpFilePart=0x0) returned 0x6c [0067.422] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e50c) returned 1 [0067.422] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Office\\ONetConfig\\350db95df4cbd94b2a1c300510e12e11.xml" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\office\\onetconfig\\350db95df4cbd94b2a1c300510e12e11.xml"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x178 [0067.423] GetFileType (hFile=0x178) returned 0x1 [0067.423] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e508) returned 1 [0067.423] GetFileType (hFile=0x178) returned 0x1 [0067.424] WriteFile (in: hFile=0x178, lpBuffer=0x26ef4b0*, nNumberOfBytesToWrite=0x7f0, lpNumberOfBytesWritten=0x31e59c, lpOverlapped=0x0 | out: lpBuffer=0x26ef4b0*, lpNumberOfBytesWritten=0x31e59c*=0x7f0, lpOverlapped=0x0) returned 1 [0067.425] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Office\\ONetConfig\\350db95df4cbd94b2a1c300510e12e11.xml", nBufferLength=0x105, lpBuffer=0x31e14c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Office\\ONetConfig\\350db95df4cbd94b2a1c300510e12e11.xml", lpFilePart=0x0) returned 0x6c [0067.425] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Office\\ONetConfig\\350db95df4cbd94b2a1c300510e12e11.xml", nBufferLength=0x105, lpBuffer=0x31e14c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Office\\ONetConfig\\350db95df4cbd94b2a1c300510e12e11.xml", lpFilePart=0x0) returned 0x6c [0067.425] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e5ac) returned 1 [0067.425] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Office\\ONetConfig\\350db95df4cbd94b2a1c300510e12e11.xml" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\office\\onetconfig\\350db95df4cbd94b2a1c300510e12e11.xml"), fInfoLevelId=0x0, lpFileInformation=0x31e628 | out: lpFileInformation=0x31e628*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x4bd15230, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0x29ae1d20, ftLastAccessTime.dwHighDateTime=0x1d2e626, ftLastWriteTime.dwLowDateTime=0xba29a60, ftLastWriteTime.dwHighDateTime=0x1d6eb7f, nFileSizeHigh=0x0, nFileSizeLow=0x7f0)) returned 1 [0067.425] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e5a8) returned 1 [0067.425] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Office\\ONetConfig\\350db95df4cbd94b2a1c300510e12e11.xml" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\office\\onetconfig\\350db95df4cbd94b2a1c300510e12e11.xml"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Office\\ONetConfig\\350db95df4cbd94b2a1c300510e12e11.xml" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\office\\onetconfig\\350db95df4cbd94b2a1c300510e12e11.xml")) returned 1 [0067.425] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e6cc) returned 1 [0067.425] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Outlook", nBufferLength=0x105, lpBuffer=0x31e1d4, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Outlook", lpFilePart=0x0) returned 0x3d [0067.425] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Outlook\\", nBufferLength=0x105, lpBuffer=0x31e1a8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Outlook\\", lpFilePart=0x0) returned 0x3e [0067.426] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Outlook\\*", lpFindFileData=0x31e3f4 | out: lpFindFileData=0x31e3f4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x3dc40980, ftCreationTime.dwHighDateTime=0x1d2fad7, ftLastAccessTime.dwLowDateTime=0x8ae80e80, ftLastAccessTime.dwHighDateTime=0x1d5e82a, ftLastWriteTime.dwLowDateTime=0x8ae80e80, ftLastWriteTime.dwHighDateTime=0x1d5e82a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x381f80 [0067.427] FindNextFileW (in: hFindFile=0x381f80, lpFindFileData=0x31e404 | out: lpFindFileData=0x31e404*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x3dc40980, ftCreationTime.dwHighDateTime=0x1d2fad7, ftLastAccessTime.dwLowDateTime=0x8ae80e80, ftLastAccessTime.dwHighDateTime=0x1d5e82a, ftLastWriteTime.dwLowDateTime=0x8ae80e80, ftLastWriteTime.dwHighDateTime=0x1d5e82a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0067.427] FindNextFileW (in: hFindFile=0x381f80, lpFindFileData=0x31e404 | out: lpFindFileData=0x31e404*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x3dc8cc40, ftCreationTime.dwHighDateTime=0x1d2fad7, ftLastAccessTime.dwLowDateTime=0x3dc8cc40, ftLastAccessTime.dwHighDateTime=0x1d2fad7, ftLastWriteTime.dwLowDateTime=0x3dc8cc40, ftLastWriteTime.dwHighDateTime=0x1d2fad7, nFileSizeHigh=0x0, nFileSizeLow=0x462, dwReserved0=0x0, dwReserved1=0x0, cFileName="mapisvc.inf", cAlternateFileName="")) returned 1 [0067.427] FindNextFileW (in: hFindFile=0x381f80, lpFindFileData=0x31e404 | out: lpFindFileData=0x31e404*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x5c4d2d00, ftCreationTime.dwHighDateTime=0x1d2fad7, ftLastAccessTime.dwLowDateTime=0x8ae80e80, ftLastAccessTime.dwHighDateTime=0x1d5e82a, ftLastWriteTime.dwLowDateTime=0x8ae80e80, ftLastWriteTime.dwHighDateTime=0x1d5e82a, nFileSizeHigh=0x0, nFileSizeLow=0xb9, dwReserved0=0x0, dwReserved1=0x0, cFileName="Outlook.sharing.xml.obi", cAlternateFileName="OUTLOO~1.OBI")) returned 1 [0067.427] FindNextFileW (in: hFindFile=0x381f80, lpFindFileData=0x31e404 | out: lpFindFileData=0x31e404*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x609dab00, ftCreationTime.dwHighDateTime=0x1d2fad7, ftLastAccessTime.dwLowDateTime=0x609dab00, ftLastAccessTime.dwHighDateTime=0x1d2fad7, ftLastWriteTime.dwLowDateTime=0x609dab00, ftLastWriteTime.dwHighDateTime=0x1d2fad7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="RoamCache", cAlternateFileName="ROAMCA~1")) returned 1 [0067.427] FindNextFileW (in: hFindFile=0x381f80, lpFindFileData=0x31e404 | out: lpFindFileData=0x31e404*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x8ae80e80, ftCreationTime.dwHighDateTime=0x1d5e82a, ftLastAccessTime.dwLowDateTime=0x8ae80e80, ftLastAccessTime.dwHighDateTime=0x1d5e82a, ftLastWriteTime.dwLowDateTime=0x5c4d2d00, ftLastWriteTime.dwHighDateTime=0x1d2fad7, nFileSizeHigh=0x0, nFileSizeLow=0xb9, dwReserved0=0x0, dwReserved1=0x0, cFileName="~last~.sharing.xml.obi", cAlternateFileName="~LAST~~1.OBI")) returned 1 [0067.427] FindNextFileW (in: hFindFile=0x381f80, lpFindFileData=0x31e404 | out: lpFindFileData=0x31e404*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0067.428] FindClose (in: hFindFile=0x381f80 | out: hFindFile=0x381f80) returned 1 [0067.428] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Outlook", nBufferLength=0x105, lpBuffer=0x31e1d4, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Outlook", lpFilePart=0x0) returned 0x3d [0067.428] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Outlook\\", nBufferLength=0x105, lpBuffer=0x31e1a8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Outlook\\", lpFilePart=0x0) returned 0x3e [0067.428] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Outlook\\*", lpFindFileData=0x31e3f4 | out: lpFindFileData=0x31e3f4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x3dc40980, ftCreationTime.dwHighDateTime=0x1d2fad7, ftLastAccessTime.dwLowDateTime=0x8ae80e80, ftLastAccessTime.dwHighDateTime=0x1d5e82a, ftLastWriteTime.dwLowDateTime=0x8ae80e80, ftLastWriteTime.dwHighDateTime=0x1d5e82a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x381f80 [0067.429] FindNextFileW (in: hFindFile=0x381f80, lpFindFileData=0x31e404 | out: lpFindFileData=0x31e404*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x3dc40980, ftCreationTime.dwHighDateTime=0x1d2fad7, ftLastAccessTime.dwLowDateTime=0x8ae80e80, ftLastAccessTime.dwHighDateTime=0x1d5e82a, ftLastWriteTime.dwLowDateTime=0x8ae80e80, ftLastWriteTime.dwHighDateTime=0x1d5e82a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0067.429] FindNextFileW (in: hFindFile=0x381f80, lpFindFileData=0x31e404 | out: lpFindFileData=0x31e404*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x3dc8cc40, ftCreationTime.dwHighDateTime=0x1d2fad7, ftLastAccessTime.dwLowDateTime=0x3dc8cc40, ftLastAccessTime.dwHighDateTime=0x1d2fad7, ftLastWriteTime.dwLowDateTime=0x3dc8cc40, ftLastWriteTime.dwHighDateTime=0x1d2fad7, nFileSizeHigh=0x0, nFileSizeLow=0x462, dwReserved0=0x0, dwReserved1=0x0, cFileName="mapisvc.inf", cAlternateFileName="")) returned 1 [0067.429] FindNextFileW (in: hFindFile=0x381f80, lpFindFileData=0x31e404 | out: lpFindFileData=0x31e404*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x5c4d2d00, ftCreationTime.dwHighDateTime=0x1d2fad7, ftLastAccessTime.dwLowDateTime=0x8ae80e80, ftLastAccessTime.dwHighDateTime=0x1d5e82a, ftLastWriteTime.dwLowDateTime=0x8ae80e80, ftLastWriteTime.dwHighDateTime=0x1d5e82a, nFileSizeHigh=0x0, nFileSizeLow=0xb9, dwReserved0=0x0, dwReserved1=0x0, cFileName="Outlook.sharing.xml.obi", cAlternateFileName="OUTLOO~1.OBI")) returned 1 [0067.429] FindNextFileW (in: hFindFile=0x381f80, lpFindFileData=0x31e404 | out: lpFindFileData=0x31e404*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x609dab00, ftCreationTime.dwHighDateTime=0x1d2fad7, ftLastAccessTime.dwLowDateTime=0x609dab00, ftLastAccessTime.dwHighDateTime=0x1d2fad7, ftLastWriteTime.dwLowDateTime=0x609dab00, ftLastWriteTime.dwHighDateTime=0x1d2fad7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="RoamCache", cAlternateFileName="ROAMCA~1")) returned 1 [0067.429] FindNextFileW (in: hFindFile=0x381f80, lpFindFileData=0x31e404 | out: lpFindFileData=0x31e404*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x8ae80e80, ftCreationTime.dwHighDateTime=0x1d5e82a, ftLastAccessTime.dwLowDateTime=0x8ae80e80, ftLastAccessTime.dwHighDateTime=0x1d5e82a, ftLastWriteTime.dwLowDateTime=0x5c4d2d00, ftLastWriteTime.dwHighDateTime=0x1d2fad7, nFileSizeHigh=0x0, nFileSizeLow=0xb9, dwReserved0=0x0, dwReserved1=0x0, cFileName="~last~.sharing.xml.obi", cAlternateFileName="~LAST~~1.OBI")) returned 1 [0067.429] FindNextFileW (in: hFindFile=0x381f80, lpFindFileData=0x31e404 | out: lpFindFileData=0x31e404*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x8ae80e80, ftCreationTime.dwHighDateTime=0x1d5e82a, ftLastAccessTime.dwLowDateTime=0x8ae80e80, ftLastAccessTime.dwHighDateTime=0x1d5e82a, ftLastWriteTime.dwLowDateTime=0x5c4d2d00, ftLastWriteTime.dwHighDateTime=0x1d2fad7, nFileSizeHigh=0x0, nFileSizeLow=0xb9, dwReserved0=0x0, dwReserved1=0x0, cFileName="~last~.sharing.xml.obi", cAlternateFileName="~LAST~~1.OBI")) returned 0 [0067.429] FindClose (in: hFindFile=0x381f80 | out: hFindFile=0x381f80) returned 1 [0067.430] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Outlook\\RoamCache", nBufferLength=0x105, lpBuffer=0x31e15c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Outlook\\RoamCache", lpFilePart=0x0) returned 0x47 [0067.430] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Outlook\\RoamCache\\", nBufferLength=0x105, lpBuffer=0x31e130, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Outlook\\RoamCache\\", lpFilePart=0x0) returned 0x48 [0067.430] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Outlook\\RoamCache\\*", lpFindFileData=0x31e37c | out: lpFindFileData=0x31e37c*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x609dab00, ftCreationTime.dwHighDateTime=0x1d2fad7, ftLastAccessTime.dwLowDateTime=0x609dab00, ftLastAccessTime.dwHighDateTime=0x1d2fad7, ftLastWriteTime.dwLowDateTime=0x609dab00, ftLastWriteTime.dwHighDateTime=0x1d2fad7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x381f80 [0067.431] FindNextFileW (in: hFindFile=0x381f80, lpFindFileData=0x31e38c | out: lpFindFileData=0x31e38c*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x609dab00, ftCreationTime.dwHighDateTime=0x1d2fad7, ftLastAccessTime.dwLowDateTime=0x609dab00, ftLastAccessTime.dwHighDateTime=0x1d2fad7, ftLastWriteTime.dwLowDateTime=0x609dab00, ftLastWriteTime.dwHighDateTime=0x1d2fad7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0067.431] FindNextFileW (in: hFindFile=0x381f80, lpFindFileData=0x31e38c | out: lpFindFileData=0x31e38c*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x609dab00, ftCreationTime.dwHighDateTime=0x1d2fad7, ftLastAccessTime.dwLowDateTime=0x609dab00, ftLastAccessTime.dwHighDateTime=0x1d2fad7, ftLastWriteTime.dwLowDateTime=0x60a26dc0, ftLastWriteTime.dwHighDateTime=0x1d2fad7, nFileSizeHigh=0x0, nFileSizeLow=0x104, dwReserved0=0x0, dwReserved1=0x0, cFileName="Stream_ContactPrefs_2_F230E11936B7D740A008FFC660E83C71.dat", cAlternateFileName="STREAM~1.DAT")) returned 1 [0067.431] FindNextFileW (in: hFindFile=0x381f80, lpFindFileData=0x31e38c | out: lpFindFileData=0x31e38c*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0067.431] FindClose (in: hFindFile=0x381f80 | out: hFindFile=0x381f80) returned 1 [0067.431] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Outlook\\RoamCache", nBufferLength=0x105, lpBuffer=0x31e15c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Outlook\\RoamCache", lpFilePart=0x0) returned 0x47 [0067.431] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Outlook\\RoamCache\\", nBufferLength=0x105, lpBuffer=0x31e130, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Outlook\\RoamCache\\", lpFilePart=0x0) returned 0x48 [0067.431] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Outlook\\RoamCache\\*", lpFindFileData=0x31e37c | out: lpFindFileData=0x31e37c*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x609dab00, ftCreationTime.dwHighDateTime=0x1d2fad7, ftLastAccessTime.dwLowDateTime=0x609dab00, ftLastAccessTime.dwHighDateTime=0x1d2fad7, ftLastWriteTime.dwLowDateTime=0x609dab00, ftLastWriteTime.dwHighDateTime=0x1d2fad7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x381f80 [0067.431] FindNextFileW (in: hFindFile=0x381f80, lpFindFileData=0x31e38c | out: lpFindFileData=0x31e38c*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x609dab00, ftCreationTime.dwHighDateTime=0x1d2fad7, ftLastAccessTime.dwLowDateTime=0x609dab00, ftLastAccessTime.dwHighDateTime=0x1d2fad7, ftLastWriteTime.dwLowDateTime=0x609dab00, ftLastWriteTime.dwHighDateTime=0x1d2fad7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0067.431] FindNextFileW (in: hFindFile=0x381f80, lpFindFileData=0x31e38c | out: lpFindFileData=0x31e38c*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x609dab00, ftCreationTime.dwHighDateTime=0x1d2fad7, ftLastAccessTime.dwLowDateTime=0x609dab00, ftLastAccessTime.dwHighDateTime=0x1d2fad7, ftLastWriteTime.dwLowDateTime=0x60a26dc0, ftLastWriteTime.dwHighDateTime=0x1d2fad7, nFileSizeHigh=0x0, nFileSizeLow=0x104, dwReserved0=0x0, dwReserved1=0x0, cFileName="Stream_ContactPrefs_2_F230E11936B7D740A008FFC660E83C71.dat", cAlternateFileName="STREAM~1.DAT")) returned 1 [0067.431] FindNextFileW (in: hFindFile=0x381f80, lpFindFileData=0x31e38c | out: lpFindFileData=0x31e38c*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x609dab00, ftCreationTime.dwHighDateTime=0x1d2fad7, ftLastAccessTime.dwLowDateTime=0x609dab00, ftLastAccessTime.dwHighDateTime=0x1d2fad7, ftLastWriteTime.dwLowDateTime=0x60a26dc0, ftLastWriteTime.dwHighDateTime=0x1d2fad7, nFileSizeHigh=0x0, nFileSizeLow=0x104, dwReserved0=0x0, dwReserved1=0x0, cFileName="Stream_ContactPrefs_2_F230E11936B7D740A008FFC660E83C71.dat", cAlternateFileName="STREAM~1.DAT")) returned 0 [0067.431] FindClose (in: hFindFile=0x381f80 | out: hFindFile=0x381f80) returned 1 [0067.431] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Publisher", nBufferLength=0x105, lpBuffer=0x31e1d4, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Publisher", lpFilePart=0x0) returned 0x3f [0067.431] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Publisher\\", nBufferLength=0x105, lpBuffer=0x31e1a8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Publisher\\", lpFilePart=0x0) returned 0x40 [0067.432] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Publisher\\*", lpFindFileData=0x31e3f4 | out: lpFindFileData=0x31e3f4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x4bb4c1b0, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0x4bb4c1b0, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0x4bb4c1b0, ftLastWriteTime.dwHighDateTime=0x1d2dda4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x381f80 [0067.433] FindNextFileW (in: hFindFile=0x381f80, lpFindFileData=0x31e404 | out: lpFindFileData=0x31e404*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x4bb4c1b0, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0x4bb4c1b0, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0x4bb4c1b0, ftLastWriteTime.dwHighDateTime=0x1d2dda4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0067.433] FindNextFileW (in: hFindFile=0x381f80, lpFindFileData=0x31e404 | out: lpFindFileData=0x31e404*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x4bb4c1b0, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0x4bb4c1b0, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0x4bb4c1b0, ftLastWriteTime.dwHighDateTime=0x1d2dda4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 0 [0067.433] FindClose (in: hFindFile=0x381f80 | out: hFindFile=0x381f80) returned 1 [0067.433] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Publisher", nBufferLength=0x105, lpBuffer=0x31e1d4, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Publisher", lpFilePart=0x0) returned 0x3f [0067.433] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Publisher\\", nBufferLength=0x105, lpBuffer=0x31e1a8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Publisher\\", lpFilePart=0x0) returned 0x40 [0067.433] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Publisher\\*", lpFindFileData=0x31e3f4 | out: lpFindFileData=0x31e3f4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x4bb4c1b0, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0x4bb4c1b0, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0x4bb4c1b0, ftLastWriteTime.dwHighDateTime=0x1d2dda4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x381f80 [0067.434] FindNextFileW (in: hFindFile=0x381f80, lpFindFileData=0x31e404 | out: lpFindFileData=0x31e404*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x4bb4c1b0, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0x4bb4c1b0, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0x4bb4c1b0, ftLastWriteTime.dwHighDateTime=0x1d2dda4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0067.434] FindNextFileW (in: hFindFile=0x381f80, lpFindFileData=0x31e404 | out: lpFindFileData=0x31e404*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x4bb4c1b0, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0x4bb4c1b0, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0x4bb4c1b0, ftLastWriteTime.dwHighDateTime=0x1d2dda4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 0 [0067.434] FindClose (in: hFindFile=0x381f80 | out: hFindFile=0x381f80) returned 1 [0067.434] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\TaskSchedulerConfig", nBufferLength=0x105, lpBuffer=0x31e1d4, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\TaskSchedulerConfig", lpFilePart=0x0) returned 0x49 [0067.434] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\TaskSchedulerConfig\\", nBufferLength=0x105, lpBuffer=0x31e1a8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\TaskSchedulerConfig\\", lpFilePart=0x0) returned 0x4a [0067.434] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\TaskSchedulerConfig\\*", lpFindFileData=0x31e3f4 | out: lpFindFileData=0x31e3f4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x3abef650, ftCreationTime.dwHighDateTime=0x1d2fa9b, ftLastAccessTime.dwLowDateTime=0x3abef650, ftLastAccessTime.dwHighDateTime=0x1d2fa9b, ftLastWriteTime.dwLowDateTime=0x3abef650, ftLastWriteTime.dwHighDateTime=0x1d2fa9b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x381f80 [0067.434] FindNextFileW (in: hFindFile=0x381f80, lpFindFileData=0x31e404 | out: lpFindFileData=0x31e404*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x3abef650, ftCreationTime.dwHighDateTime=0x1d2fa9b, ftLastAccessTime.dwLowDateTime=0x3abef650, ftLastAccessTime.dwHighDateTime=0x1d2fa9b, ftLastWriteTime.dwLowDateTime=0x3abef650, ftLastWriteTime.dwHighDateTime=0x1d2fa9b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0067.434] FindNextFileW (in: hFindFile=0x381f80, lpFindFileData=0x31e404 | out: lpFindFileData=0x31e404*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x3abef650, ftCreationTime.dwHighDateTime=0x1d2fa9b, ftLastAccessTime.dwLowDateTime=0x3abef650, ftLastAccessTime.dwHighDateTime=0x1d2fa9b, ftLastWriteTime.dwLowDateTime=0x3abef650, ftLastWriteTime.dwHighDateTime=0x1d2fa9b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 0 [0067.434] FindClose (in: hFindFile=0x381f80 | out: hFindFile=0x381f80) returned 1 [0067.434] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\TaskSchedulerConfig", nBufferLength=0x105, lpBuffer=0x31e1d4, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\TaskSchedulerConfig", lpFilePart=0x0) returned 0x49 [0067.434] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\TaskSchedulerConfig\\", nBufferLength=0x105, lpBuffer=0x31e1a8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\TaskSchedulerConfig\\", lpFilePart=0x0) returned 0x4a [0067.435] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\TaskSchedulerConfig\\*", lpFindFileData=0x31e3f4 | out: lpFindFileData=0x31e3f4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x3abef650, ftCreationTime.dwHighDateTime=0x1d2fa9b, ftLastAccessTime.dwLowDateTime=0x3abef650, ftLastAccessTime.dwHighDateTime=0x1d2fa9b, ftLastWriteTime.dwLowDateTime=0x3abef650, ftLastWriteTime.dwHighDateTime=0x1d2fa9b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x381f80 [0067.435] FindNextFileW (in: hFindFile=0x381f80, lpFindFileData=0x31e404 | out: lpFindFileData=0x31e404*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x3abef650, ftCreationTime.dwHighDateTime=0x1d2fa9b, ftLastAccessTime.dwLowDateTime=0x3abef650, ftLastAccessTime.dwHighDateTime=0x1d2fa9b, ftLastWriteTime.dwLowDateTime=0x3abef650, ftLastWriteTime.dwHighDateTime=0x1d2fa9b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0067.435] FindNextFileW (in: hFindFile=0x381f80, lpFindFileData=0x31e404 | out: lpFindFileData=0x31e404*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x3abef650, ftCreationTime.dwHighDateTime=0x1d2fa9b, ftLastAccessTime.dwLowDateTime=0x3abef650, ftLastAccessTime.dwHighDateTime=0x1d2fa9b, ftLastWriteTime.dwLowDateTime=0x3abef650, ftLastWriteTime.dwHighDateTime=0x1d2fa9b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 0 [0067.435] FindClose (in: hFindFile=0x381f80 | out: hFindFile=0x381f80) returned 1 [0067.435] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Visio", nBufferLength=0x105, lpBuffer=0x31e1d4, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Visio", lpFilePart=0x0) returned 0x3b [0067.435] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Visio\\", nBufferLength=0x105, lpBuffer=0x31e1a8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Visio\\", lpFilePart=0x0) returned 0x3c [0067.435] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Visio\\*", lpFindFileData=0x31e3f4 | out: lpFindFileData=0x31e3f4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x962f4540, ftCreationTime.dwHighDateTime=0x1d305ee, ftLastAccessTime.dwLowDateTime=0x5ef99320, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0x5ef99320, ftLastWriteTime.dwHighDateTime=0x1d305f1, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x381f80 [0067.435] FindNextFileW (in: hFindFile=0x381f80, lpFindFileData=0x31e404 | out: lpFindFileData=0x31e404*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x962f4540, ftCreationTime.dwHighDateTime=0x1d305ee, ftLastAccessTime.dwLowDateTime=0x5ef99320, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0x5ef99320, ftLastWriteTime.dwHighDateTime=0x1d305f1, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0067.435] FindNextFileW (in: hFindFile=0x381f80, lpFindFileData=0x31e404 | out: lpFindFileData=0x31e404*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x5ef99320, ftCreationTime.dwHighDateTime=0x1d305f1, ftLastAccessTime.dwLowDateTime=0x5ef99320, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0x5efe55e0, ftLastWriteTime.dwHighDateTime=0x1d305f1, nFileSizeHigh=0x0, nFileSizeLow=0x18ce0, dwReserved0=0x0, dwReserved1=0x0, cFileName="content14.dat", cAlternateFileName="CONTEN~1.DAT")) returned 1 [0067.435] FindNextFileW (in: hFindFile=0x381f80, lpFindFileData=0x31e404 | out: lpFindFileData=0x31e404*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x976e3d80, ftCreationTime.dwHighDateTime=0x1d305ee, ftLastAccessTime.dwLowDateTime=0x976e3d80, ftLastAccessTime.dwHighDateTime=0x1d305ee, ftLastWriteTime.dwLowDateTime=0x5f055ac0, ftLastWriteTime.dwHighDateTime=0x1d305f1, nFileSizeHigh=0x0, nFileSizeLow=0x1f400, dwReserved0=0x0, dwReserved1=0x0, cFileName="thumbs.dat", cAlternateFileName="")) returned 1 [0067.435] FindNextFileW (in: hFindFile=0x381f80, lpFindFileData=0x31e404 | out: lpFindFileData=0x31e404*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0067.436] FindClose (in: hFindFile=0x381f80 | out: hFindFile=0x381f80) returned 1 [0067.436] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Visio", nBufferLength=0x105, lpBuffer=0x31e1d4, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Visio", lpFilePart=0x0) returned 0x3b [0067.436] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Visio\\", nBufferLength=0x105, lpBuffer=0x31e1a8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Visio\\", lpFilePart=0x0) returned 0x3c [0067.436] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Visio\\*", lpFindFileData=0x31e3f4 | out: lpFindFileData=0x31e3f4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x962f4540, ftCreationTime.dwHighDateTime=0x1d305ee, ftLastAccessTime.dwLowDateTime=0x5ef99320, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0x5ef99320, ftLastWriteTime.dwHighDateTime=0x1d305f1, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x381f80 [0067.436] FindNextFileW (in: hFindFile=0x381f80, lpFindFileData=0x31e404 | out: lpFindFileData=0x31e404*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x962f4540, ftCreationTime.dwHighDateTime=0x1d305ee, ftLastAccessTime.dwLowDateTime=0x5ef99320, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0x5ef99320, ftLastWriteTime.dwHighDateTime=0x1d305f1, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0067.436] FindNextFileW (in: hFindFile=0x381f80, lpFindFileData=0x31e404 | out: lpFindFileData=0x31e404*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x5ef99320, ftCreationTime.dwHighDateTime=0x1d305f1, ftLastAccessTime.dwLowDateTime=0x5ef99320, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0x5efe55e0, ftLastWriteTime.dwHighDateTime=0x1d305f1, nFileSizeHigh=0x0, nFileSizeLow=0x18ce0, dwReserved0=0x0, dwReserved1=0x0, cFileName="content14.dat", cAlternateFileName="CONTEN~1.DAT")) returned 1 [0067.436] FindNextFileW (in: hFindFile=0x381f80, lpFindFileData=0x31e404 | out: lpFindFileData=0x31e404*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x976e3d80, ftCreationTime.dwHighDateTime=0x1d305ee, ftLastAccessTime.dwLowDateTime=0x976e3d80, ftLastAccessTime.dwHighDateTime=0x1d305ee, ftLastWriteTime.dwLowDateTime=0x5f055ac0, ftLastWriteTime.dwHighDateTime=0x1d305f1, nFileSizeHigh=0x0, nFileSizeLow=0x1f400, dwReserved0=0x0, dwReserved1=0x0, cFileName="thumbs.dat", cAlternateFileName="")) returned 1 [0067.436] FindNextFileW (in: hFindFile=0x381f80, lpFindFileData=0x31e404 | out: lpFindFileData=0x31e404*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x976e3d80, ftCreationTime.dwHighDateTime=0x1d305ee, ftLastAccessTime.dwLowDateTime=0x976e3d80, ftLastAccessTime.dwHighDateTime=0x1d305ee, ftLastWriteTime.dwLowDateTime=0x5f055ac0, ftLastWriteTime.dwHighDateTime=0x1d305f1, nFileSizeHigh=0x0, nFileSizeLow=0x1f400, dwReserved0=0x0, dwReserved1=0x0, cFileName="thumbs.dat", cAlternateFileName="")) returned 0 [0067.436] FindClose (in: hFindFile=0x381f80 | out: hFindFile=0x381f80) returned 1 [0067.436] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows", nBufferLength=0x105, lpBuffer=0x31e1d4, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows", lpFilePart=0x0) returned 0x3d [0067.436] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\", nBufferLength=0x105, lpBuffer=0x31e1a8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\", lpFilePart=0x0) returned 0x3e [0067.436] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\*", lpFindFileData=0x31e3f4 | out: lpFindFileData=0x31e3f4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x28d257a0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0xd8d1fc80, ftLastAccessTime.dwHighDateTime=0x1d3373f, ftLastWriteTime.dwLowDateTime=0xd8d1fc80, ftLastWriteTime.dwHighDateTime=0x1d3373f, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x381f80 [0067.436] FindNextFileW (in: hFindFile=0x381f80, lpFindFileData=0x31e404 | out: lpFindFileData=0x31e404*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x28d257a0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0xd8d1fc80, ftLastAccessTime.dwHighDateTime=0x1d3373f, ftLastWriteTime.dwLowDateTime=0xd8d1fc80, ftLastWriteTime.dwHighDateTime=0x1d3373f, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0067.436] FindNextFileW (in: hFindFile=0x381f80, lpFindFileData=0x31e404 | out: lpFindFileData=0x31e404*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x666948e0, ftCreationTime.dwHighDateTime=0x1d2dda5, ftLastAccessTime.dwLowDateTime=0x666948e0, ftLastAccessTime.dwHighDateTime=0x1d2dda5, ftLastWriteTime.dwLowDateTime=0x666948e0, ftLastWriteTime.dwHighDateTime=0x1d2dda5, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="1024", cAlternateFileName="")) returned 1 [0067.436] FindNextFileW (in: hFindFile=0x381f80, lpFindFileData=0x31e404 | out: lpFindFileData=0x31e404*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x34d50a50, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x34ef3970, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x34ef3970, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="1033", cAlternateFileName="")) returned 1 [0067.436] FindNextFileW (in: hFindFile=0x381f80, lpFindFileData=0x31e404 | out: lpFindFileData=0x31e404*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x28d257a0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x926116d0, ftLastAccessTime.dwHighDateTime=0x1d30596, ftLastWriteTime.dwLowDateTime=0x926116d0, ftLastWriteTime.dwHighDateTime=0x1d30596, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Burn", cAlternateFileName="")) returned 1 [0067.437] FindNextFileW (in: hFindFile=0x381f80, lpFindFileData=0x31e404 | out: lpFindFileData=0x31e404*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x28d257a0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x8deb4c00, ftLastAccessTime.dwHighDateTime=0x1d5e82a, ftLastWriteTime.dwLowDateTime=0x8deb4c00, ftLastWriteTime.dwHighDateTime=0x1d5e82a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Caches", cAlternateFileName="")) returned 1 [0067.437] FindNextFileW (in: hFindFile=0x381f80, lpFindFileData=0x31e404 | out: lpFindFileData=0x31e404*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x28d257a0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x33af74c0, ftLastAccessTime.dwHighDateTime=0x1d4d57d, ftLastWriteTime.dwLowDateTime=0x33af74c0, ftLastWriteTime.dwHighDateTime=0x1d4d57d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Explorer", cAlternateFileName="")) returned 1 [0067.437] FindNextFileW (in: hFindFile=0x381f80, lpFindFileData=0x31e404 | out: lpFindFileData=0x31e404*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x28d257a0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28d257a0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xaef3b9d6, ftLastWriteTime.dwHighDateTime=0x1ca042b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="GameExplorer", cAlternateFileName="GAMEEX~1")) returned 1 [0067.437] FindNextFileW (in: hFindFile=0x381f80, lpFindFileData=0x31e404 | out: lpFindFileData=0x31e404*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0x28d257a0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28ea2560, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xfe75c620, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="History", cAlternateFileName="")) returned 1 [0067.437] FindNextFileW (in: hFindFile=0x381f80, lpFindFileData=0x31e404 | out: lpFindFileData=0x31e404*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x28d257a0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28d257a0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xf96dfdac, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Ringtones", cAlternateFileName="RINGTO~1")) returned 1 [0067.437] FindNextFileW (in: hFindFile=0x381f80, lpFindFileData=0x31e404 | out: lpFindFileData=0x31e404*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0x28d257a0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0xe7138400, ftLastAccessTime.dwHighDateTime=0x1d2e625, ftLastWriteTime.dwLowDateTime=0xe7138400, ftLastWriteTime.dwHighDateTime=0x1d2e625, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Temporary Internet Files", cAlternateFileName="TEMPOR~1")) returned 1 [0067.437] FindNextFileW (in: hFindFile=0x381f80, lpFindFileData=0x31e404 | out: lpFindFileData=0x31e404*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xd8d1fc80, ftCreationTime.dwHighDateTime=0x1d3373f, ftLastAccessTime.dwLowDateTime=0xd8d1fc80, ftLastAccessTime.dwHighDateTime=0x1d3373f, ftLastWriteTime.dwLowDateTime=0xd8d1fc80, ftLastWriteTime.dwHighDateTime=0x1d3373f, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Themes", cAlternateFileName="")) returned 1 [0067.437] FindNextFileW (in: hFindFile=0x381f80, lpFindFileData=0x31e404 | out: lpFindFileData=0x31e404*(dwFileAttributes=0x22, ftCreationTime.dwLowDateTime=0x28ea2560, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x8f3fc040, ftLastAccessTime.dwHighDateTime=0x1d5e82a, ftLastWriteTime.dwLowDateTime=0x8f3fc040, ftLastWriteTime.dwHighDateTime=0x1d5e82a, nFileSizeHigh=0x0, nFileSizeLow=0x100000, dwReserved0=0x0, dwReserved1=0x0, cFileName="UsrClass.dat", cAlternateFileName="")) returned 1 [0067.437] FindNextFileW (in: hFindFile=0x381f80, lpFindFileData=0x31e404 | out: lpFindFileData=0x31e404*(dwFileAttributes=0x2026, ftCreationTime.dwLowDateTime=0x28ea2560, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28ea2560, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x8f3d5ee0, ftLastWriteTime.dwHighDateTime=0x1d5e82a, nFileSizeHigh=0x0, nFileSizeLow=0x40000, dwReserved0=0x0, dwReserved1=0x0, cFileName="UsrClass.dat.LOG1", cAlternateFileName="USRCLA~2.LOG")) returned 1 [0067.437] FindNextFileW (in: hFindFile=0x381f80, lpFindFileData=0x31e404 | out: lpFindFileData=0x31e404*(dwFileAttributes=0x2026, ftCreationTime.dwLowDateTime=0x28ea2560, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28ea2560, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xe9c5705f, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="UsrClass.dat.LOG2", cAlternateFileName="USRCLA~1.LOG")) returned 1 [0067.437] FindNextFileW (in: hFindFile=0x381f80, lpFindFileData=0x31e404 | out: lpFindFileData=0x31e404*(dwFileAttributes=0x2026, ftCreationTime.dwLowDateTime=0x28ea2560, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28ea2560, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x962222ec, ftLastWriteTime.dwHighDateTime=0x1cb8927, nFileSizeHigh=0x0, nFileSizeLow=0x10000, dwReserved0=0x0, dwReserved1=0x0, cFileName="UsrClass.dat{0f6d7aa7-f51a-11df-ae0e-001d09f21116}.TM.blf", cAlternateFileName="USRCLA~1.BLF")) returned 1 [0067.437] FindNextFileW (in: hFindFile=0x381f80, lpFindFileData=0x31e404 | out: lpFindFileData=0x31e404*(dwFileAttributes=0x2026, ftCreationTime.dwLowDateTime=0x28e7c400, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28e7c400, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x961fc18b, ftLastWriteTime.dwHighDateTime=0x1cb8927, nFileSizeHigh=0x0, nFileSizeLow=0x80000, dwReserved0=0x0, dwReserved1=0x0, cFileName="UsrClass.dat{0f6d7aa7-f51a-11df-ae0e-001d09f21116}.TMContainer00000000000000000001.regtrans-ms", cAlternateFileName="USRCLA~2.REG")) returned 1 [0067.437] FindNextFileW (in: hFindFile=0x381f80, lpFindFileData=0x31e404 | out: lpFindFileData=0x31e404*(dwFileAttributes=0x2026, ftCreationTime.dwLowDateTime=0x28e7c400, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28e7c400, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x961fc18b, ftLastWriteTime.dwHighDateTime=0x1cb8927, nFileSizeHigh=0x0, nFileSizeLow=0x80000, dwReserved0=0x0, dwReserved1=0x0, cFileName="UsrClass.dat{0f6d7aa7-f51a-11df-ae0e-001d09f21116}.TMContainer00000000000000000002.regtrans-ms", cAlternateFileName="USRCLA~1.REG")) returned 1 [0067.437] FindNextFileW (in: hFindFile=0x381f80, lpFindFileData=0x31e404 | out: lpFindFileData=0x31e404*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x28d257a0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28d257a0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x4d26e3cf, ftLastWriteTime.dwHighDateTime=0x1cb8927, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="WER", cAlternateFileName="")) returned 1 [0067.437] FindNextFileW (in: hFindFile=0x381f80, lpFindFileData=0x31e404 | out: lpFindFileData=0x31e404*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xa734ff0, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xa734ff0, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0xa734ff0, ftLastWriteTime.dwHighDateTime=0x1d2dda4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="WindowsUpdate.log", cAlternateFileName="WINDOW~1.LOG")) returned 1 [0067.437] FindNextFileW (in: hFindFile=0x381f80, lpFindFileData=0x31e404 | out: lpFindFileData=0x31e404*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0067.437] FindClose (in: hFindFile=0x381f80 | out: hFindFile=0x381f80) returned 1 [0067.437] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows", nBufferLength=0x105, lpBuffer=0x31e1d4, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows", lpFilePart=0x0) returned 0x3d [0067.437] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\", nBufferLength=0x105, lpBuffer=0x31e1a8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\", lpFilePart=0x0) returned 0x3e [0067.437] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\*", lpFindFileData=0x31e3f4 | out: lpFindFileData=0x31e3f4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x28d257a0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0xd8d1fc80, ftLastAccessTime.dwHighDateTime=0x1d3373f, ftLastWriteTime.dwLowDateTime=0xd8d1fc80, ftLastWriteTime.dwHighDateTime=0x1d3373f, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x381f80 [0067.438] FindNextFileW (in: hFindFile=0x381f80, lpFindFileData=0x31e404 | out: lpFindFileData=0x31e404*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x28d257a0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0xd8d1fc80, ftLastAccessTime.dwHighDateTime=0x1d3373f, ftLastWriteTime.dwLowDateTime=0xd8d1fc80, ftLastWriteTime.dwHighDateTime=0x1d3373f, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0067.438] FindNextFileW (in: hFindFile=0x381f80, lpFindFileData=0x31e404 | out: lpFindFileData=0x31e404*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x666948e0, ftCreationTime.dwHighDateTime=0x1d2dda5, ftLastAccessTime.dwLowDateTime=0x666948e0, ftLastAccessTime.dwHighDateTime=0x1d2dda5, ftLastWriteTime.dwLowDateTime=0x666948e0, ftLastWriteTime.dwHighDateTime=0x1d2dda5, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="1024", cAlternateFileName="")) returned 1 [0067.438] FindNextFileW (in: hFindFile=0x381f80, lpFindFileData=0x31e404 | out: lpFindFileData=0x31e404*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x34d50a50, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x34ef3970, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x34ef3970, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="1033", cAlternateFileName="")) returned 1 [0067.438] FindNextFileW (in: hFindFile=0x381f80, lpFindFileData=0x31e404 | out: lpFindFileData=0x31e404*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x28d257a0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x926116d0, ftLastAccessTime.dwHighDateTime=0x1d30596, ftLastWriteTime.dwLowDateTime=0x926116d0, ftLastWriteTime.dwHighDateTime=0x1d30596, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Burn", cAlternateFileName="")) returned 1 [0067.438] FindNextFileW (in: hFindFile=0x381f80, lpFindFileData=0x31e404 | out: lpFindFileData=0x31e404*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x28d257a0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x8deb4c00, ftLastAccessTime.dwHighDateTime=0x1d5e82a, ftLastWriteTime.dwLowDateTime=0x8deb4c00, ftLastWriteTime.dwHighDateTime=0x1d5e82a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Caches", cAlternateFileName="")) returned 1 [0067.438] FindNextFileW (in: hFindFile=0x381f80, lpFindFileData=0x31e404 | out: lpFindFileData=0x31e404*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x28d257a0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x33af74c0, ftLastAccessTime.dwHighDateTime=0x1d4d57d, ftLastWriteTime.dwLowDateTime=0x33af74c0, ftLastWriteTime.dwHighDateTime=0x1d4d57d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Explorer", cAlternateFileName="")) returned 1 [0067.438] FindNextFileW (in: hFindFile=0x381f80, lpFindFileData=0x31e404 | out: lpFindFileData=0x31e404*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x28d257a0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28d257a0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xaef3b9d6, ftLastWriteTime.dwHighDateTime=0x1ca042b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="GameExplorer", cAlternateFileName="GAMEEX~1")) returned 1 [0067.438] FindNextFileW (in: hFindFile=0x381f80, lpFindFileData=0x31e404 | out: lpFindFileData=0x31e404*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0x28d257a0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28ea2560, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xfe75c620, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="History", cAlternateFileName="")) returned 1 [0067.438] FindNextFileW (in: hFindFile=0x381f80, lpFindFileData=0x31e404 | out: lpFindFileData=0x31e404*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x28d257a0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28d257a0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xf96dfdac, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Ringtones", cAlternateFileName="RINGTO~1")) returned 1 [0067.438] FindNextFileW (in: hFindFile=0x381f80, lpFindFileData=0x31e404 | out: lpFindFileData=0x31e404*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0x28d257a0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0xe7138400, ftLastAccessTime.dwHighDateTime=0x1d2e625, ftLastWriteTime.dwLowDateTime=0xe7138400, ftLastWriteTime.dwHighDateTime=0x1d2e625, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Temporary Internet Files", cAlternateFileName="TEMPOR~1")) returned 1 [0067.438] FindNextFileW (in: hFindFile=0x381f80, lpFindFileData=0x31e404 | out: lpFindFileData=0x31e404*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xd8d1fc80, ftCreationTime.dwHighDateTime=0x1d3373f, ftLastAccessTime.dwLowDateTime=0xd8d1fc80, ftLastAccessTime.dwHighDateTime=0x1d3373f, ftLastWriteTime.dwLowDateTime=0xd8d1fc80, ftLastWriteTime.dwHighDateTime=0x1d3373f, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Themes", cAlternateFileName="")) returned 1 [0067.438] FindNextFileW (in: hFindFile=0x381f80, lpFindFileData=0x31e404 | out: lpFindFileData=0x31e404*(dwFileAttributes=0x22, ftCreationTime.dwLowDateTime=0x28ea2560, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x8f3fc040, ftLastAccessTime.dwHighDateTime=0x1d5e82a, ftLastWriteTime.dwLowDateTime=0x8f3fc040, ftLastWriteTime.dwHighDateTime=0x1d5e82a, nFileSizeHigh=0x0, nFileSizeLow=0x100000, dwReserved0=0x0, dwReserved1=0x0, cFileName="UsrClass.dat", cAlternateFileName="")) returned 1 [0067.438] FindNextFileW (in: hFindFile=0x381f80, lpFindFileData=0x31e404 | out: lpFindFileData=0x31e404*(dwFileAttributes=0x2026, ftCreationTime.dwLowDateTime=0x28ea2560, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28ea2560, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x8f3d5ee0, ftLastWriteTime.dwHighDateTime=0x1d5e82a, nFileSizeHigh=0x0, nFileSizeLow=0x40000, dwReserved0=0x0, dwReserved1=0x0, cFileName="UsrClass.dat.LOG1", cAlternateFileName="USRCLA~2.LOG")) returned 1 [0067.438] FindNextFileW (in: hFindFile=0x381f80, lpFindFileData=0x31e404 | out: lpFindFileData=0x31e404*(dwFileAttributes=0x2026, ftCreationTime.dwLowDateTime=0x28ea2560, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28ea2560, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xe9c5705f, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="UsrClass.dat.LOG2", cAlternateFileName="USRCLA~1.LOG")) returned 1 [0067.438] FindNextFileW (in: hFindFile=0x381f80, lpFindFileData=0x31e404 | out: lpFindFileData=0x31e404*(dwFileAttributes=0x2026, ftCreationTime.dwLowDateTime=0x28ea2560, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28ea2560, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x962222ec, ftLastWriteTime.dwHighDateTime=0x1cb8927, nFileSizeHigh=0x0, nFileSizeLow=0x10000, dwReserved0=0x0, dwReserved1=0x0, cFileName="UsrClass.dat{0f6d7aa7-f51a-11df-ae0e-001d09f21116}.TM.blf", cAlternateFileName="USRCLA~1.BLF")) returned 1 [0067.438] FindNextFileW (in: hFindFile=0x381f80, lpFindFileData=0x31e404 | out: lpFindFileData=0x31e404*(dwFileAttributes=0x2026, ftCreationTime.dwLowDateTime=0x28e7c400, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28e7c400, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x961fc18b, ftLastWriteTime.dwHighDateTime=0x1cb8927, nFileSizeHigh=0x0, nFileSizeLow=0x80000, dwReserved0=0x0, dwReserved1=0x0, cFileName="UsrClass.dat{0f6d7aa7-f51a-11df-ae0e-001d09f21116}.TMContainer00000000000000000001.regtrans-ms", cAlternateFileName="USRCLA~2.REG")) returned 1 [0067.438] FindNextFileW (in: hFindFile=0x381f80, lpFindFileData=0x31e404 | out: lpFindFileData=0x31e404*(dwFileAttributes=0x2026, ftCreationTime.dwLowDateTime=0x28e7c400, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28e7c400, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x961fc18b, ftLastWriteTime.dwHighDateTime=0x1cb8927, nFileSizeHigh=0x0, nFileSizeLow=0x80000, dwReserved0=0x0, dwReserved1=0x0, cFileName="UsrClass.dat{0f6d7aa7-f51a-11df-ae0e-001d09f21116}.TMContainer00000000000000000002.regtrans-ms", cAlternateFileName="USRCLA~1.REG")) returned 1 [0067.438] FindNextFileW (in: hFindFile=0x381f80, lpFindFileData=0x31e404 | out: lpFindFileData=0x31e404*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x28d257a0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28d257a0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x4d26e3cf, ftLastWriteTime.dwHighDateTime=0x1cb8927, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="WER", cAlternateFileName="")) returned 1 [0067.438] FindNextFileW (in: hFindFile=0x381f80, lpFindFileData=0x31e404 | out: lpFindFileData=0x31e404*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xa734ff0, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xa734ff0, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0xa734ff0, ftLastWriteTime.dwHighDateTime=0x1d2dda4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="WindowsUpdate.log", cAlternateFileName="WINDOW~1.LOG")) returned 1 [0067.438] FindNextFileW (in: hFindFile=0x381f80, lpFindFileData=0x31e404 | out: lpFindFileData=0x31e404*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xa734ff0, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xa734ff0, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0xa734ff0, ftLastWriteTime.dwHighDateTime=0x1d2dda4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="WindowsUpdate.log", cAlternateFileName="WINDOW~1.LOG")) returned 0 [0067.438] FindClose (in: hFindFile=0x381f80 | out: hFindFile=0x381f80) returned 1 [0067.439] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\1024", nBufferLength=0x105, lpBuffer=0x31e15c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\1024", lpFilePart=0x0) returned 0x42 [0067.439] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\1024\\", nBufferLength=0x105, lpBuffer=0x31e130, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\1024\\", lpFilePart=0x0) returned 0x43 [0067.439] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\1024\\*", lpFindFileData=0x31e37c | out: lpFindFileData=0x31e37c*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x666948e0, ftCreationTime.dwHighDateTime=0x1d2dda5, ftLastAccessTime.dwLowDateTime=0x666948e0, ftLastAccessTime.dwHighDateTime=0x1d2dda5, ftLastWriteTime.dwLowDateTime=0x666948e0, ftLastWriteTime.dwHighDateTime=0x1d2dda5, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x381f80 [0067.442] FindNextFileW (in: hFindFile=0x381f80, lpFindFileData=0x31e38c | out: lpFindFileData=0x31e38c*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x666948e0, ftCreationTime.dwHighDateTime=0x1d2dda5, ftLastAccessTime.dwLowDateTime=0x666948e0, ftLastAccessTime.dwHighDateTime=0x1d2dda5, ftLastWriteTime.dwLowDateTime=0x666948e0, ftLastWriteTime.dwHighDateTime=0x1d2dda5, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0067.442] FindNextFileW (in: hFindFile=0x381f80, lpFindFileData=0x31e38c | out: lpFindFileData=0x31e38c*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x666948e0, ftCreationTime.dwHighDateTime=0x1d2dda5, ftLastAccessTime.dwLowDateTime=0x666948e0, ftLastAccessTime.dwHighDateTime=0x1d2dda5, ftLastWriteTime.dwLowDateTime=0x666948e0, ftLastWriteTime.dwHighDateTime=0x1d2dda5, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 0 [0067.442] FindClose (in: hFindFile=0x381f80 | out: hFindFile=0x381f80) returned 1 [0067.442] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\1024", nBufferLength=0x105, lpBuffer=0x31e15c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\1024", lpFilePart=0x0) returned 0x42 [0067.442] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\1024\\", nBufferLength=0x105, lpBuffer=0x31e130, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\1024\\", lpFilePart=0x0) returned 0x43 [0067.442] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\1024\\*", lpFindFileData=0x31e37c | out: lpFindFileData=0x31e37c*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x666948e0, ftCreationTime.dwHighDateTime=0x1d2dda5, ftLastAccessTime.dwLowDateTime=0x666948e0, ftLastAccessTime.dwHighDateTime=0x1d2dda5, ftLastWriteTime.dwLowDateTime=0x666948e0, ftLastWriteTime.dwHighDateTime=0x1d2dda5, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x381f80 [0067.443] FindNextFileW (in: hFindFile=0x381f80, lpFindFileData=0x31e38c | out: lpFindFileData=0x31e38c*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x666948e0, ftCreationTime.dwHighDateTime=0x1d2dda5, ftLastAccessTime.dwLowDateTime=0x666948e0, ftLastAccessTime.dwHighDateTime=0x1d2dda5, ftLastWriteTime.dwLowDateTime=0x666948e0, ftLastWriteTime.dwHighDateTime=0x1d2dda5, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0067.443] FindNextFileW (in: hFindFile=0x381f80, lpFindFileData=0x31e38c | out: lpFindFileData=0x31e38c*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x666948e0, ftCreationTime.dwHighDateTime=0x1d2dda5, ftLastAccessTime.dwLowDateTime=0x666948e0, ftLastAccessTime.dwHighDateTime=0x1d2dda5, ftLastWriteTime.dwLowDateTime=0x666948e0, ftLastWriteTime.dwHighDateTime=0x1d2dda5, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 0 [0067.443] FindClose (in: hFindFile=0x381f80 | out: hFindFile=0x381f80) returned 1 [0067.443] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\1033", nBufferLength=0x105, lpBuffer=0x31e15c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\1033", lpFilePart=0x0) returned 0x42 [0067.443] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\1033\\", nBufferLength=0x105, lpBuffer=0x31e130, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\1033\\", lpFilePart=0x0) returned 0x43 [0067.443] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\1033\\*", lpFindFileData=0x31e37c | out: lpFindFileData=0x31e37c*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x34d50a50, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x34ef3970, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x34ef3970, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x381f80 [0067.443] FindNextFileW (in: hFindFile=0x381f80, lpFindFileData=0x31e38c | out: lpFindFileData=0x31e38c*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x34d50a50, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x34ef3970, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x34ef3970, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0067.443] FindNextFileW (in: hFindFile=0x381f80, lpFindFileData=0x31e38c | out: lpFindFileData=0x31e38c*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x34ef3970, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x34ef3970, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x8ecd4180, ftLastWriteTime.dwHighDateTime=0x1d305ee, nFileSizeHigh=0x0, nFileSizeLow=0x49098, dwReserved0=0x0, dwReserved1=0x0, cFileName="StructuredQuerySchema.bin", cAlternateFileName="STRUCT~1.BIN")) returned 1 [0067.443] FindNextFileW (in: hFindFile=0x381f80, lpFindFileData=0x31e38c | out: lpFindFileData=0x31e38c*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0067.443] FindClose (in: hFindFile=0x381f80 | out: hFindFile=0x381f80) returned 1 [0067.443] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\1033", nBufferLength=0x105, lpBuffer=0x31e15c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\1033", lpFilePart=0x0) returned 0x42 [0067.444] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\1033\\", nBufferLength=0x105, lpBuffer=0x31e130, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\1033\\", lpFilePart=0x0) returned 0x43 [0067.444] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\1033\\*", lpFindFileData=0x31e37c | out: lpFindFileData=0x31e37c*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x34d50a50, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x34ef3970, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x34ef3970, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x381f80 [0067.444] FindClose (in: hFindFile=0x381f80 | out: hFindFile=0x381f80) returned 1 [0067.444] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Burn", nBufferLength=0x105, lpBuffer=0x31e15c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Burn", lpFilePart=0x0) returned 0x42 [0067.444] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Burn\\", nBufferLength=0x105, lpBuffer=0x31e130, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Burn\\", lpFilePart=0x0) returned 0x43 [0067.444] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Burn\\*", lpFindFileData=0x31e37c | out: lpFindFileData=0x31e37c*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x28d257a0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x926116d0, ftLastAccessTime.dwHighDateTime=0x1d30596, ftLastWriteTime.dwLowDateTime=0x926116d0, ftLastWriteTime.dwHighDateTime=0x1d30596, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x381f80 [0067.444] FindClose (in: hFindFile=0x381f80 | out: hFindFile=0x381f80) returned 1 [0067.444] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Burn", nBufferLength=0x105, lpBuffer=0x31e15c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Burn", lpFilePart=0x0) returned 0x42 [0067.444] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Burn\\", nBufferLength=0x105, lpBuffer=0x31e130, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Burn\\", lpFilePart=0x0) returned 0x43 [0067.444] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Burn\\*", lpFindFileData=0x31e37c | out: lpFindFileData=0x31e37c*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x28d257a0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x926116d0, ftLastAccessTime.dwHighDateTime=0x1d30596, ftLastWriteTime.dwLowDateTime=0x926116d0, ftLastWriteTime.dwHighDateTime=0x1d30596, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x381f80 [0067.444] FindClose (in: hFindFile=0x381f80 | out: hFindFile=0x381f80) returned 1 [0067.445] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Burn\\Burn", nBufferLength=0x105, lpBuffer=0x31e0e4, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Burn\\Burn", lpFilePart=0x0) returned 0x47 [0067.445] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Burn\\Burn\\", nBufferLength=0x105, lpBuffer=0x31e0b8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Burn\\Burn\\", lpFilePart=0x0) returned 0x48 [0067.445] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Burn\\Burn\\*", lpFindFileData=0x31e304 | out: lpFindFileData=0x31e304*(dwFileAttributes=0x13, ftCreationTime.dwLowDateTime=0x28d257a0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28ec86c0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x165f8f7, ftLastWriteTime.dwHighDateTime=0x1cb8927, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x381f80 [0067.445] FindClose (in: hFindFile=0x381f80 | out: hFindFile=0x381f80) returned 1 [0067.445] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Burn\\Burn", nBufferLength=0x105, lpBuffer=0x31e0e4, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Burn\\Burn", lpFilePart=0x0) returned 0x47 [0067.445] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Burn\\Burn\\", nBufferLength=0x105, lpBuffer=0x31e0b8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Burn\\Burn\\", lpFilePart=0x0) returned 0x48 [0067.445] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Burn\\Burn\\*", lpFindFileData=0x31e304 | out: lpFindFileData=0x31e304*(dwFileAttributes=0x13, ftCreationTime.dwLowDateTime=0x28d257a0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28ec86c0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x165f8f7, ftLastWriteTime.dwHighDateTime=0x1cb8927, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x381f80 [0067.445] FindClose (in: hFindFile=0x381f80 | out: hFindFile=0x381f80) returned 1 [0067.445] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Burn\\Burn1", nBufferLength=0x105, lpBuffer=0x31e0e4, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Burn\\Burn1", lpFilePart=0x0) returned 0x48 [0067.445] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Burn\\Burn1\\", nBufferLength=0x105, lpBuffer=0x31e0b8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Burn\\Burn1\\", lpFilePart=0x0) returned 0x49 [0067.445] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Burn\\Burn1\\*", lpFindFileData=0x31e304 | out: lpFindFileData=0x31e304*(dwFileAttributes=0x13, ftCreationTime.dwLowDateTime=0x3b9ee2a0, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x3b9f09b0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x3b9f30c0, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x381f80 [0067.445] FindClose (in: hFindFile=0x381f80 | out: hFindFile=0x381f80) returned 1 [0067.445] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Burn\\Burn1", nBufferLength=0x105, lpBuffer=0x31e0e4, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Burn\\Burn1", lpFilePart=0x0) returned 0x48 [0067.445] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Burn\\Burn1\\", nBufferLength=0x105, lpBuffer=0x31e0b8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Burn\\Burn1\\", lpFilePart=0x0) returned 0x49 [0067.446] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Burn\\Burn1\\*", lpFindFileData=0x31e304 | out: lpFindFileData=0x31e304*(dwFileAttributes=0x13, ftCreationTime.dwLowDateTime=0x3b9ee2a0, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x3b9f09b0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x3b9f30c0, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x381f80 [0067.446] FindClose (in: hFindFile=0x381f80 | out: hFindFile=0x381f80) returned 1 [0067.446] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Burn\\Burn2", nBufferLength=0x105, lpBuffer=0x31e0e4, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Burn\\Burn2", lpFilePart=0x0) returned 0x48 [0067.446] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Burn\\Burn2\\", nBufferLength=0x105, lpBuffer=0x31e0b8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Burn\\Burn2\\", lpFilePart=0x0) returned 0x49 [0067.446] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Burn\\Burn2\\*", lpFindFileData=0x31e304 | out: lpFindFileData=0x31e304*(dwFileAttributes=0x13, ftCreationTime.dwLowDateTime=0x926116d0, ftCreationTime.dwHighDateTime=0x1d30596, ftLastAccessTime.dwLowDateTime=0x92637830, ftLastAccessTime.dwHighDateTime=0x1d30596, ftLastWriteTime.dwLowDateTime=0x92637830, ftLastWriteTime.dwHighDateTime=0x1d30596, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x381f80 [0067.447] FindClose (in: hFindFile=0x381f80 | out: hFindFile=0x381f80) returned 1 [0067.447] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Burn\\Burn2", nBufferLength=0x105, lpBuffer=0x31e0e4, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Burn\\Burn2", lpFilePart=0x0) returned 0x48 [0067.447] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Burn\\Burn2\\", nBufferLength=0x105, lpBuffer=0x31e0b8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Burn\\Burn2\\", lpFilePart=0x0) returned 0x49 [0067.447] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Burn\\Burn2\\*", lpFindFileData=0x31e304 | out: lpFindFileData=0x31e304*(dwFileAttributes=0x13, ftCreationTime.dwLowDateTime=0x926116d0, ftCreationTime.dwHighDateTime=0x1d30596, ftLastAccessTime.dwLowDateTime=0x92637830, ftLastAccessTime.dwHighDateTime=0x1d30596, ftLastWriteTime.dwLowDateTime=0x92637830, ftLastWriteTime.dwHighDateTime=0x1d30596, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x381f80 [0067.447] FindClose (in: hFindFile=0x381f80 | out: hFindFile=0x381f80) returned 1 [0067.447] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Caches", nBufferLength=0x105, lpBuffer=0x31e15c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Caches", lpFilePart=0x0) returned 0x44 [0067.447] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Caches\\", nBufferLength=0x105, lpBuffer=0x31e130, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Caches\\", lpFilePart=0x0) returned 0x45 [0067.447] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Caches\\*", lpFindFileData=0x31e37c | out: lpFindFileData=0x31e37c*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x28d257a0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x8deb4c00, ftLastAccessTime.dwHighDateTime=0x1d5e82a, ftLastWriteTime.dwLowDateTime=0x8deb4c00, ftLastWriteTime.dwHighDateTime=0x1d5e82a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x381f80 [0067.447] FindClose (in: hFindFile=0x381f80 | out: hFindFile=0x381f80) returned 1 [0067.447] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Caches", nBufferLength=0x105, lpBuffer=0x31e15c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Caches", lpFilePart=0x0) returned 0x44 [0067.448] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Caches\\", nBufferLength=0x105, lpBuffer=0x31e130, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Caches\\", lpFilePart=0x0) returned 0x45 [0067.448] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Caches\\*", lpFindFileData=0x31e37c | out: lpFindFileData=0x31e37c*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x28d257a0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x8deb4c00, ftLastAccessTime.dwHighDateTime=0x1d5e82a, ftLastWriteTime.dwLowDateTime=0x8deb4c00, ftLastWriteTime.dwHighDateTime=0x1d5e82a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x381f80 [0067.448] FindClose (in: hFindFile=0x381f80 | out: hFindFile=0x381f80) returned 1 [0067.448] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Explorer", nBufferLength=0x105, lpBuffer=0x31e15c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Explorer", lpFilePart=0x0) returned 0x46 [0067.448] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Explorer\\", nBufferLength=0x105, lpBuffer=0x31e130, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Explorer\\", lpFilePart=0x0) returned 0x47 [0067.448] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Explorer\\*", lpFindFileData=0x31e37c | out: lpFindFileData=0x31e37c*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x28d257a0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x33af74c0, ftLastAccessTime.dwHighDateTime=0x1d4d57d, ftLastWriteTime.dwLowDateTime=0x33af74c0, ftLastWriteTime.dwHighDateTime=0x1d4d57d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x381f80 [0067.448] FindClose (in: hFindFile=0x381f80 | out: hFindFile=0x381f80) returned 1 [0067.448] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Explorer", nBufferLength=0x105, lpBuffer=0x31e15c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Explorer", lpFilePart=0x0) returned 0x46 [0067.448] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Explorer\\", nBufferLength=0x105, lpBuffer=0x31e130, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Explorer\\", lpFilePart=0x0) returned 0x47 [0067.448] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Explorer\\*", lpFindFileData=0x31e37c | out: lpFindFileData=0x31e37c*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x28d257a0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x33af74c0, ftLastAccessTime.dwHighDateTime=0x1d4d57d, ftLastWriteTime.dwLowDateTime=0x33af74c0, ftLastWriteTime.dwHighDateTime=0x1d4d57d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x381f80 [0067.448] FindClose (in: hFindFile=0x381f80 | out: hFindFile=0x381f80) returned 1 [0067.448] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\GameExplorer", nBufferLength=0x105, lpBuffer=0x31e15c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\GameExplorer", lpFilePart=0x0) returned 0x4a [0067.448] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\GameExplorer\\", nBufferLength=0x105, lpBuffer=0x31e130, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\GameExplorer\\", lpFilePart=0x0) returned 0x4b [0067.448] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\GameExplorer\\*", lpFindFileData=0x31e37c | out: lpFindFileData=0x31e37c*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x28d257a0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28d257a0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xaef3b9d6, ftLastWriteTime.dwHighDateTime=0x1ca042b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x381f80 [0067.449] FindClose (in: hFindFile=0x381f80 | out: hFindFile=0x381f80) returned 1 [0067.449] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\GameExplorer", nBufferLength=0x105, lpBuffer=0x31e15c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\GameExplorer", lpFilePart=0x0) returned 0x4a [0067.449] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\GameExplorer\\", nBufferLength=0x105, lpBuffer=0x31e130, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\GameExplorer\\", lpFilePart=0x0) returned 0x4b [0067.449] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\GameExplorer\\*", lpFindFileData=0x31e37c | out: lpFindFileData=0x31e37c*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x28d257a0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28d257a0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xaef3b9d6, ftLastWriteTime.dwHighDateTime=0x1ca042b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x381f80 [0067.449] FindClose (in: hFindFile=0x381f80 | out: hFindFile=0x381f80) returned 1 [0067.449] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\History", nBufferLength=0x105, lpBuffer=0x31e15c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\History", lpFilePart=0x0) returned 0x45 [0067.449] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\History\\", nBufferLength=0x105, lpBuffer=0x31e130, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\History\\", lpFilePart=0x0) returned 0x46 [0067.449] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\History\\*", lpFindFileData=0x31e37c | out: lpFindFileData=0x31e37c*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0x28d257a0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28ea2560, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xfe75c620, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x381f80 [0067.450] FindClose (in: hFindFile=0x381f80 | out: hFindFile=0x381f80) returned 1 [0067.450] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\History", nBufferLength=0x105, lpBuffer=0x31e15c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\History", lpFilePart=0x0) returned 0x45 [0067.450] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\History\\", nBufferLength=0x105, lpBuffer=0x31e130, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\History\\", lpFilePart=0x0) returned 0x46 [0067.450] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\History\\*", lpFindFileData=0x31e37c | out: lpFindFileData=0x31e37c*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0x28d257a0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28ea2560, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xfe75c620, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x381f80 [0067.450] FindClose (in: hFindFile=0x381f80 | out: hFindFile=0x381f80) returned 1 [0067.450] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\History\\History.IE5", nBufferLength=0x105, lpBuffer=0x31e0e4, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\History\\History.IE5", lpFilePart=0x0) returned 0x51 [0067.450] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\History\\History.IE5\\", nBufferLength=0x105, lpBuffer=0x31e0b8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\History\\History.IE5\\", lpFilePart=0x0) returned 0x52 [0067.450] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\History\\History.IE5\\*", lpFindFileData=0x31e304 | out: lpFindFileData=0x31e304*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0x28d257a0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0xdae1c020, ftLastAccessTime.dwHighDateTime=0x1d5e82a, ftLastWriteTime.dwLowDateTime=0xdae1c020, ftLastWriteTime.dwHighDateTime=0x1d5e82a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x381f80 [0067.450] FindClose (in: hFindFile=0x381f80 | out: hFindFile=0x381f80) returned 1 [0067.450] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\History\\History.IE5", nBufferLength=0x105, lpBuffer=0x31e0e4, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\History\\History.IE5", lpFilePart=0x0) returned 0x51 [0067.450] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\History\\History.IE5\\", nBufferLength=0x105, lpBuffer=0x31e0b8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\History\\History.IE5\\", lpFilePart=0x0) returned 0x52 [0067.450] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\History\\History.IE5\\*", lpFindFileData=0x31e304 | out: lpFindFileData=0x31e304*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0x28d257a0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0xdae1c020, ftLastAccessTime.dwHighDateTime=0x1d5e82a, ftLastWriteTime.dwLowDateTime=0xdae1c020, ftLastWriteTime.dwHighDateTime=0x1d5e82a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x381f80 [0067.450] FindClose (in: hFindFile=0x381f80 | out: hFindFile=0x381f80) returned 1 [0067.451] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\History\\History.IE5\\MSHist012020022120200222", nBufferLength=0x105, lpBuffer=0x31e06c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\History\\History.IE5\\MSHist012020022120200222", lpFilePart=0x0) returned 0x6a [0067.451] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\History\\History.IE5\\MSHist012020022120200222\\", nBufferLength=0x105, lpBuffer=0x31e040, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\History\\History.IE5\\MSHist012020022120200222\\", lpFilePart=0x0) returned 0x6b [0067.451] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\History\\History.IE5\\MSHist012020022120200222\\*", lpFindFileData=0x31e28c | out: lpFindFileData=0x31e28c*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0xdae1c020, ftCreationTime.dwHighDateTime=0x1d5e82a, ftLastAccessTime.dwLowDateTime=0xdae42180, ftLastAccessTime.dwHighDateTime=0x1d5e82a, ftLastWriteTime.dwLowDateTime=0xdae42180, ftLastWriteTime.dwHighDateTime=0x1d5e82a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x381f80 [0067.451] FindClose (in: hFindFile=0x381f80 | out: hFindFile=0x381f80) returned 1 [0067.451] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\History\\History.IE5\\MSHist012020022120200222", nBufferLength=0x105, lpBuffer=0x31e06c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\History\\History.IE5\\MSHist012020022120200222", lpFilePart=0x0) returned 0x6a [0067.451] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\History\\History.IE5\\MSHist012020022120200222\\", nBufferLength=0x105, lpBuffer=0x31e040, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\History\\History.IE5\\MSHist012020022120200222\\", lpFilePart=0x0) returned 0x6b [0067.451] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\History\\History.IE5\\MSHist012020022120200222\\*", lpFindFileData=0x31e28c | out: lpFindFileData=0x31e28c*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0xdae1c020, ftCreationTime.dwHighDateTime=0x1d5e82a, ftLastAccessTime.dwLowDateTime=0xdae42180, ftLastAccessTime.dwHighDateTime=0x1d5e82a, ftLastWriteTime.dwLowDateTime=0xdae42180, ftLastWriteTime.dwHighDateTime=0x1d5e82a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x381f80 [0067.451] FindClose (in: hFindFile=0x381f80 | out: hFindFile=0x381f80) returned 1 [0067.451] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\History\\Low", nBufferLength=0x105, lpBuffer=0x31e0e4, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\History\\Low", lpFilePart=0x0) returned 0x49 [0067.451] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\History\\Low\\", nBufferLength=0x105, lpBuffer=0x31e0b8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\History\\Low\\", lpFilePart=0x0) returned 0x4a [0067.451] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\History\\Low\\*", lpFindFileData=0x31e304 | out: lpFindFileData=0x31e304*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x28d257a0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x4f090c50, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x4f090c50, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x381f80 [0067.451] FindClose (in: hFindFile=0x381f80 | out: hFindFile=0x381f80) returned 1 [0067.451] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\History\\Low", nBufferLength=0x105, lpBuffer=0x31e0e4, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\History\\Low", lpFilePart=0x0) returned 0x49 [0067.452] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\History\\Low\\", nBufferLength=0x105, lpBuffer=0x31e0b8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\History\\Low\\", lpFilePart=0x0) returned 0x4a [0067.452] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\History\\Low\\*", lpFindFileData=0x31e304 | out: lpFindFileData=0x31e304*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x28d257a0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x4f090c50, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x4f090c50, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x381f80 [0067.452] FindClose (in: hFindFile=0x381f80 | out: hFindFile=0x381f80) returned 1 [0067.452] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\History\\Low\\History.IE5", nBufferLength=0x105, lpBuffer=0x31e06c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\History\\Low\\History.IE5", lpFilePart=0x0) returned 0x55 [0067.452] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\History\\Low\\History.IE5\\", nBufferLength=0x105, lpBuffer=0x31e040, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\History\\Low\\History.IE5\\", lpFilePart=0x0) returned 0x56 [0067.452] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\History\\Low\\History.IE5\\*", lpFindFileData=0x31e28c | out: lpFindFileData=0x31e28c*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0x4f090c50, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x45c34df0, ftLastAccessTime.dwHighDateTime=0x1d2faf3, ftLastWriteTime.dwLowDateTime=0x45c34df0, ftLastWriteTime.dwHighDateTime=0x1d2faf3, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x381f80 [0067.453] FindClose (in: hFindFile=0x381f80 | out: hFindFile=0x381f80) returned 1 [0067.453] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\History\\Low\\History.IE5", nBufferLength=0x105, lpBuffer=0x31e06c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\History\\Low\\History.IE5", lpFilePart=0x0) returned 0x55 [0067.453] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\History\\Low\\History.IE5\\", nBufferLength=0x105, lpBuffer=0x31e040, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\History\\Low\\History.IE5\\", lpFilePart=0x0) returned 0x56 [0067.453] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\History\\Low\\History.IE5\\*", lpFindFileData=0x31e28c | out: lpFindFileData=0x31e28c*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0x4f090c50, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x45c34df0, ftLastAccessTime.dwHighDateTime=0x1d2faf3, ftLastWriteTime.dwLowDateTime=0x45c34df0, ftLastWriteTime.dwHighDateTime=0x1d2faf3, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x381f80 [0067.453] FindClose (in: hFindFile=0x381f80 | out: hFindFile=0x381f80) returned 1 [0067.453] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\History\\Low\\History.IE5\\MSHist012017071220170713", nBufferLength=0x105, lpBuffer=0x31dff4, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\History\\Low\\History.IE5\\MSHist012017071220170713", lpFilePart=0x0) returned 0x6e [0067.453] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\History\\Low\\History.IE5\\MSHist012017071220170713\\", nBufferLength=0x105, lpBuffer=0x31dfc8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\History\\Low\\History.IE5\\MSHist012017071220170713\\", lpFilePart=0x0) returned 0x6f [0067.453] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\History\\Low\\History.IE5\\MSHist012017071220170713\\*", lpFindFileData=0x31e214 | out: lpFindFileData=0x31e214*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0x45c34df0, ftCreationTime.dwHighDateTime=0x1d2faf3, ftLastAccessTime.dwLowDateTime=0x45c34df0, ftLastAccessTime.dwHighDateTime=0x1d2faf3, ftLastWriteTime.dwLowDateTime=0x45c34df0, ftLastWriteTime.dwHighDateTime=0x1d2faf3, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x381f80 [0067.453] FindClose (in: hFindFile=0x381f80 | out: hFindFile=0x381f80) returned 1 [0067.454] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\History\\Low\\History.IE5\\MSHist012017071220170713", nBufferLength=0x105, lpBuffer=0x31dff4, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\History\\Low\\History.IE5\\MSHist012017071220170713", lpFilePart=0x0) returned 0x6e [0067.454] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\History\\Low\\History.IE5\\MSHist012017071220170713\\", nBufferLength=0x105, lpBuffer=0x31dfc8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\History\\Low\\History.IE5\\MSHist012017071220170713\\", lpFilePart=0x0) returned 0x6f [0067.454] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\History\\Low\\History.IE5\\MSHist012017071220170713\\*", lpFindFileData=0x31e214 | out: lpFindFileData=0x31e214*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0x45c34df0, ftCreationTime.dwHighDateTime=0x1d2faf3, ftLastAccessTime.dwLowDateTime=0x45c34df0, ftLastAccessTime.dwHighDateTime=0x1d2faf3, ftLastWriteTime.dwLowDateTime=0x45c34df0, ftLastWriteTime.dwHighDateTime=0x1d2faf3, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x381f80 [0067.454] FindClose (in: hFindFile=0x381f80 | out: hFindFile=0x381f80) returned 1 [0067.454] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Ringtones", nBufferLength=0x105, lpBuffer=0x31e15c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Ringtones", lpFilePart=0x0) returned 0x47 [0067.484] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\9QH4S0GZ\\AA3e3XC[2].png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\9qh4s0gz\\aa3e3xc[2].png"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x178 [0067.486] GetFileType (hFile=0x178) returned 0x1 [0067.486] GetFileType (hFile=0x178) returned 0x1 [0067.486] GetFileSize (in: hFile=0x178, lpFileSizeHigh=0x31e4c0 | out: lpFileSizeHigh=0x31e4c0*=0x0) returned 0x135 [0067.486] ReadFile (in: hFile=0x178, lpBuffer=0x275e240, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x31e46c, lpOverlapped=0x0 | out: lpBuffer=0x275e240*, lpNumberOfBytesRead=0x31e46c*=0x135, lpOverlapped=0x0) returned 1 [0067.500] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\9QH4S0GZ\\AA3e3XC[2].png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\9qh4s0gz\\aa3e3xc[2].png"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x178 [0067.501] GetFileType (hFile=0x178) returned 0x1 [0067.501] GetFileType (hFile=0x178) returned 0x1 [0067.501] WriteFile (in: hFile=0x178, lpBuffer=0x27ac810*, nNumberOfBytesToWrite=0x140, lpNumberOfBytesWritten=0x31e434, lpOverlapped=0x0 | out: lpBuffer=0x27ac810*, lpNumberOfBytesWritten=0x31e434*=0x140, lpOverlapped=0x0) returned 1 [0067.504] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\9QH4S0GZ\\AA3e3XC[2].png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\9qh4s0gz\\aa3e3xc[2].png"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\9QH4S0GZ\\AA3e3XC[2].png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\9qh4s0gz\\aa3e3xc[2].png")) returned 1 [0067.505] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\9QH4S0GZ\\AA3vOVA[1].png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\9qh4s0gz\\aa3vova[1].png"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x178 [0067.507] GetFileType (hFile=0x178) returned 0x1 [0067.507] GetFileType (hFile=0x178) returned 0x1 [0067.507] GetFileSize (in: hFile=0x178, lpFileSizeHigh=0x31e4c0 | out: lpFileSizeHigh=0x31e4c0*=0x0) returned 0x28e [0067.507] ReadFile (in: hFile=0x178, lpBuffer=0x27ade7c, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x31e46c, lpOverlapped=0x0 | out: lpBuffer=0x27ade7c*, lpNumberOfBytesRead=0x31e46c*=0x28e, lpOverlapped=0x0) returned 1 [0067.522] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\9QH4S0GZ\\AA3vOVA[1].png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\9qh4s0gz\\aa3vova[1].png"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x178 [0067.523] GetFileType (hFile=0x178) returned 0x1 [0067.523] GetFileType (hFile=0x178) returned 0x1 [0067.523] WriteFile (in: hFile=0x178, lpBuffer=0x27fcad4*, nNumberOfBytesToWrite=0x290, lpNumberOfBytesWritten=0x31e434, lpOverlapped=0x0 | out: lpBuffer=0x27fcad4*, lpNumberOfBytesWritten=0x31e434*=0x290, lpOverlapped=0x0) returned 1 [0067.524] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\9QH4S0GZ\\AA3vOVA[1].png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\9qh4s0gz\\aa3vova[1].png"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\9QH4S0GZ\\AA3vOVA[1].png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\9qh4s0gz\\aa3vova[1].png")) returned 1 [0067.524] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\9QH4S0GZ\\AA42EP9[1].png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\9qh4s0gz\\aa42ep9[1].png"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x178 [0067.524] GetFileType (hFile=0x178) returned 0x1 [0067.524] GetFileType (hFile=0x178) returned 0x1 [0067.524] GetFileSize (in: hFile=0x178, lpFileSizeHigh=0x31e4c0 | out: lpFileSizeHigh=0x31e4c0*=0x0) returned 0x1cd [0067.524] ReadFile (in: hFile=0x178, lpBuffer=0x27fe080, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x31e46c, lpOverlapped=0x0 | out: lpBuffer=0x27fe080*, lpNumberOfBytesRead=0x31e46c*=0x1cd, lpOverlapped=0x0) returned 1 [0067.567] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e3a4) returned 1 [0067.567] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\9QH4S0GZ\\AA42EP9[1].png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\9qh4s0gz\\aa42ep9[1].png"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x178 [0067.568] GetFileType (hFile=0x178) returned 0x1 [0067.568] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e3a0) returned 1 [0067.568] GetFileType (hFile=0x178) returned 0x1 [0067.568] WriteFile (in: hFile=0x178, lpBuffer=0x2656320*, nNumberOfBytesToWrite=0x1d0, lpNumberOfBytesWritten=0x31e434, lpOverlapped=0x0 | out: lpBuffer=0x2656320*, lpNumberOfBytesWritten=0x31e434*=0x1d0, lpOverlapped=0x0) returned 1 [0067.569] CloseHandle (hObject=0x178) returned 1 [0067.569] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\9QH4S0GZ\\AA42EP9[1].png", nBufferLength=0x105, lpBuffer=0x31dfe4, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\9QH4S0GZ\\AA42EP9[1].png", lpFilePart=0x0) returned 0x7e [0067.569] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\9QH4S0GZ\\AA42EP9[1].png", nBufferLength=0x105, lpBuffer=0x31dfe4, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\9QH4S0GZ\\AA42EP9[1].png", lpFilePart=0x0) returned 0x7e [0067.569] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e444) returned 1 [0067.569] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\9QH4S0GZ\\AA42EP9[1].png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\9qh4s0gz\\aa42ep9[1].png"), fInfoLevelId=0x0, lpFileInformation=0x31e4c0 | out: lpFileInformation=0x31e4c0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x539049f0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x539049f0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0xbb806c0, ftLastWriteTime.dwHighDateTime=0x1d6eb7f, nFileSizeHigh=0x0, nFileSizeLow=0x1d0)) returned 1 [0067.569] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e440) returned 1 [0067.569] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\9QH4S0GZ\\AA42EP9[1].png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\9qh4s0gz\\aa42ep9[1].png"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\9QH4S0GZ\\AA42EP9[1].png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\9qh4s0gz\\aa42ep9[1].png")) returned 1 [0067.570] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\9QH4S0GZ\\AA54rQj[1].png", nBufferLength=0x105, lpBuffer=0x31dec4, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\9QH4S0GZ\\AA54rQj[1].png", lpFilePart=0x0) returned 0x7e [0067.570] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e3b8) returned 1 [0067.570] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\9QH4S0GZ\\AA54rQj[1].png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\9qh4s0gz\\aa54rqj[1].png"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x178 [0067.570] GetFileType (hFile=0x178) returned 0x1 [0067.570] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e3b4) returned 1 [0067.570] GetFileType (hFile=0x178) returned 0x1 [0067.570] GetFileSize (in: hFile=0x178, lpFileSizeHigh=0x31e4c0 | out: lpFileSizeHigh=0x31e4c0*=0x0) returned 0x191 [0067.570] ReadFile (in: hFile=0x178, lpBuffer=0x2657890, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x31e46c, lpOverlapped=0x0 | out: lpBuffer=0x2657890*, lpNumberOfBytesRead=0x31e46c*=0x191, lpOverlapped=0x0) returned 1 [0067.572] CloseHandle (hObject=0x178) returned 1 [0067.585] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\9QH4S0GZ\\AA54rQj[1].png", nBufferLength=0x105, lpBuffer=0x31deb0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\9QH4S0GZ\\AA54rQj[1].png", lpFilePart=0x0) returned 0x7e [0067.585] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e3a4) returned 1 [0067.585] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\9QH4S0GZ\\AA54rQj[1].png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\9qh4s0gz\\aa54rqj[1].png"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x178 [0067.586] GetFileType (hFile=0x178) returned 0x1 [0067.586] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e3a0) returned 1 [0067.586] GetFileType (hFile=0x178) returned 0x1 [0067.586] WriteFile (in: hFile=0x178, lpBuffer=0x26a61a0*, nNumberOfBytesToWrite=0x1a0, lpNumberOfBytesWritten=0x31e434, lpOverlapped=0x0 | out: lpBuffer=0x26a61a0*, lpNumberOfBytesWritten=0x31e434*=0x1a0, lpOverlapped=0x0) returned 1 [0067.587] CloseHandle (hObject=0x178) returned 1 [0067.587] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\9QH4S0GZ\\AA54rQj[1].png", nBufferLength=0x105, lpBuffer=0x31dfe4, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\9QH4S0GZ\\AA54rQj[1].png", lpFilePart=0x0) returned 0x7e [0067.587] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\9QH4S0GZ\\AA54rQj[1].png", nBufferLength=0x105, lpBuffer=0x31dfe4, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\9QH4S0GZ\\AA54rQj[1].png", lpFilePart=0x0) returned 0x7e [0067.587] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e444) returned 1 [0067.587] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\9QH4S0GZ\\AA54rQj[1].png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\9qh4s0gz\\aa54rqj[1].png"), fInfoLevelId=0x0, lpFileInformation=0x31e4c0 | out: lpFileInformation=0x31e4c0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x514ddbd0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x514ddbd0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0xbba6820, ftLastWriteTime.dwHighDateTime=0x1d6eb7f, nFileSizeHigh=0x0, nFileSizeLow=0x1a0)) returned 1 [0067.587] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e440) returned 1 [0067.587] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\9QH4S0GZ\\AA54rQj[1].png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\9qh4s0gz\\aa54rqj[1].png"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\9QH4S0GZ\\AA54rQj[1].png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\9qh4s0gz\\aa54rqj[1].png")) returned 1 [0067.587] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\9QH4S0GZ\\AA61yi9[1].png", nBufferLength=0x105, lpBuffer=0x31dec4, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\9QH4S0GZ\\AA61yi9[1].png", lpFilePart=0x0) returned 0x7e [0067.588] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e3b8) returned 1 [0067.588] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\9QH4S0GZ\\AA61yi9[1].png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\9qh4s0gz\\aa61yi9[1].png"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x178 [0067.588] GetFileType (hFile=0x178) returned 0x1 [0067.588] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e3b4) returned 1 [0067.588] GetFileType (hFile=0x178) returned 0x1 [0067.588] GetFileSize (in: hFile=0x178, lpFileSizeHigh=0x31e4c0 | out: lpFileSizeHigh=0x31e4c0*=0x0) returned 0x19d [0067.589] ReadFile (in: hFile=0x178, lpBuffer=0x26a771c, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x31e46c, lpOverlapped=0x0 | out: lpBuffer=0x26a771c*, lpNumberOfBytesRead=0x31e46c*=0x19d, lpOverlapped=0x0) returned 1 [0067.590] CloseHandle (hObject=0x178) returned 1 [0067.602] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\9QH4S0GZ\\AA61yi9[1].png", nBufferLength=0x105, lpBuffer=0x31deb0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\9QH4S0GZ\\AA61yi9[1].png", lpFilePart=0x0) returned 0x7e [0067.602] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e3a4) returned 1 [0067.603] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\9QH4S0GZ\\AA61yi9[1].png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\9qh4s0gz\\aa61yi9[1].png"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x178 [0067.603] GetFileType (hFile=0x178) returned 0x1 [0067.603] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e3a0) returned 1 [0067.603] GetFileType (hFile=0x178) returned 0x1 [0067.603] WriteFile (in: hFile=0x178, lpBuffer=0x26f5ec4*, nNumberOfBytesToWrite=0x1a0, lpNumberOfBytesWritten=0x31e434, lpOverlapped=0x0 | out: lpBuffer=0x26f5ec4*, lpNumberOfBytesWritten=0x31e434*=0x1a0, lpOverlapped=0x0) returned 1 [0067.604] CloseHandle (hObject=0x178) returned 1 [0067.604] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\9QH4S0GZ\\AA61yi9[1].png", nBufferLength=0x105, lpBuffer=0x31dfe4, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\9QH4S0GZ\\AA61yi9[1].png", lpFilePart=0x0) returned 0x7e [0067.604] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\9QH4S0GZ\\AA61yi9[1].png", nBufferLength=0x105, lpBuffer=0x31dfe4, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\9QH4S0GZ\\AA61yi9[1].png", lpFilePart=0x0) returned 0x7e [0067.604] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e444) returned 1 [0067.604] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\9QH4S0GZ\\AA61yi9[1].png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\9qh4s0gz\\aa61yi9[1].png"), fInfoLevelId=0x0, lpFileInformation=0x31e4c0 | out: lpFileInformation=0x31e4c0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x45b042f0, ftCreationTime.dwHighDateTime=0x1d2faf3, ftLastAccessTime.dwLowDateTime=0x45b042f0, ftLastAccessTime.dwHighDateTime=0x1d2faf3, ftLastWriteTime.dwLowDateTime=0xbbcc980, ftLastWriteTime.dwHighDateTime=0x1d6eb7f, nFileSizeHigh=0x0, nFileSizeLow=0x1a0)) returned 1 [0067.604] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e440) returned 1 [0067.605] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\9QH4S0GZ\\AA61yi9[1].png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\9qh4s0gz\\aa61yi9[1].png"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\9QH4S0GZ\\AA61yi9[1].png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\9qh4s0gz\\aa61yi9[1].png")) returned 1 [0067.605] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\9QH4S0GZ\\AA8uCo4[1].png", nBufferLength=0x105, lpBuffer=0x31dec4, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\9QH4S0GZ\\AA8uCo4[1].png", lpFilePart=0x0) returned 0x7e [0067.605] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e3b8) returned 1 [0067.605] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\9QH4S0GZ\\AA8uCo4[1].png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\9qh4s0gz\\aa8uco4[1].png"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x178 [0067.606] GetFileType (hFile=0x178) returned 0x1 [0067.606] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e3b4) returned 1 [0067.606] GetFileType (hFile=0x178) returned 0x1 [0067.606] GetFileSize (in: hFile=0x178, lpFileSizeHigh=0x31e4c0 | out: lpFileSizeHigh=0x31e4c0*=0x0) returned 0x2c8 [0067.606] ReadFile (in: hFile=0x178, lpBuffer=0x26f7568, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x31e46c, lpOverlapped=0x0 | out: lpBuffer=0x26f7568*, lpNumberOfBytesRead=0x31e46c*=0x2c8, lpOverlapped=0x0) returned 1 [0067.607] CloseHandle (hObject=0x178) returned 1 [0067.620] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\9QH4S0GZ\\AA8uCo4[1].png", nBufferLength=0x105, lpBuffer=0x31deb0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\9QH4S0GZ\\AA8uCo4[1].png", lpFilePart=0x0) returned 0x7e [0067.620] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e3a4) returned 1 [0067.620] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\9QH4S0GZ\\AA8uCo4[1].png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\9qh4s0gz\\aa8uco4[1].png"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x178 [0067.621] GetFileType (hFile=0x178) returned 0x1 [0067.621] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e3a0) returned 1 [0067.621] GetFileType (hFile=0x178) returned 0x1 [0067.621] WriteFile (in: hFile=0x178, lpBuffer=0x2746304*, nNumberOfBytesToWrite=0x2d0, lpNumberOfBytesWritten=0x31e434, lpOverlapped=0x0 | out: lpBuffer=0x2746304*, lpNumberOfBytesWritten=0x31e434*=0x2d0, lpOverlapped=0x0) returned 1 [0067.622] CloseHandle (hObject=0x178) returned 1 [0067.622] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\9QH4S0GZ\\AA8uCo4[1].png", nBufferLength=0x105, lpBuffer=0x31dfe4, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\9QH4S0GZ\\AA8uCo4[1].png", lpFilePart=0x0) returned 0x7e [0067.622] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\9QH4S0GZ\\AA8uCo4[1].png", nBufferLength=0x105, lpBuffer=0x31dfe4, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\9QH4S0GZ\\AA8uCo4[1].png", lpFilePart=0x0) returned 0x7e [0067.622] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e444) returned 1 [0067.622] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\9QH4S0GZ\\AA8uCo4[1].png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\9qh4s0gz\\aa8uco4[1].png"), fInfoLevelId=0x0, lpFileInformation=0x31e4c0 | out: lpFileInformation=0x31e4c0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x52fa5350, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x52fa5350, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0xbbf2ae0, ftLastWriteTime.dwHighDateTime=0x1d6eb7f, nFileSizeHigh=0x0, nFileSizeLow=0x2d0)) returned 1 [0067.622] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e440) returned 1 [0067.622] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\9QH4S0GZ\\AA8uCo4[1].png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\9qh4s0gz\\aa8uco4[1].png"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\9QH4S0GZ\\AA8uCo4[1].png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\9qh4s0gz\\aa8uco4[1].png")) returned 1 [0067.622] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\9QH4S0GZ\\AAdAVrM[1].png", nBufferLength=0x105, lpBuffer=0x31dec4, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\9QH4S0GZ\\AAdAVrM[1].png", lpFilePart=0x0) returned 0x7e [0067.623] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e3b8) returned 1 [0067.623] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\9QH4S0GZ\\AAdAVrM[1].png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\9qh4s0gz\\aadavrm[1].png"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x178 [0067.623] GetFileType (hFile=0x178) returned 0x1 [0067.623] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e3b4) returned 1 [0067.623] GetFileType (hFile=0x178) returned 0x1 [0067.623] GetFileSize (in: hFile=0x178, lpFileSizeHigh=0x31e4c0 | out: lpFileSizeHigh=0x31e4c0*=0x0) returned 0x342 [0067.623] ReadFile (in: hFile=0x178, lpBuffer=0x2747a24, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x31e46c, lpOverlapped=0x0 | out: lpBuffer=0x2747a24*, lpNumberOfBytesRead=0x31e46c*=0x342, lpOverlapped=0x0) returned 1 [0067.625] CloseHandle (hObject=0x178) returned 1 [0067.638] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\9QH4S0GZ\\AAdAVrM[1].png", nBufferLength=0x105, lpBuffer=0x31deb0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\9QH4S0GZ\\AAdAVrM[1].png", lpFilePart=0x0) returned 0x7e [0067.638] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e3a4) returned 1 [0067.638] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\9QH4S0GZ\\AAdAVrM[1].png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\9qh4s0gz\\aadavrm[1].png"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x178 [0067.639] GetFileType (hFile=0x178) returned 0x1 [0067.639] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e3a0) returned 1 [0067.639] GetFileType (hFile=0x178) returned 0x1 [0067.639] WriteFile (in: hFile=0x178, lpBuffer=0x2796a48*, nNumberOfBytesToWrite=0x350, lpNumberOfBytesWritten=0x31e434, lpOverlapped=0x0 | out: lpBuffer=0x2796a48*, lpNumberOfBytesWritten=0x31e434*=0x350, lpOverlapped=0x0) returned 1 [0067.640] CloseHandle (hObject=0x178) returned 1 [0067.640] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\9QH4S0GZ\\AAdAVrM[1].png", nBufferLength=0x105, lpBuffer=0x31dfe4, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\9QH4S0GZ\\AAdAVrM[1].png", lpFilePart=0x0) returned 0x7e [0067.640] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\9QH4S0GZ\\AAdAVrM[1].png", nBufferLength=0x105, lpBuffer=0x31dfe4, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\9QH4S0GZ\\AAdAVrM[1].png", lpFilePart=0x0) returned 0x7e [0067.640] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e444) returned 1 [0067.640] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\9QH4S0GZ\\AAdAVrM[1].png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\9qh4s0gz\\aadavrm[1].png"), fInfoLevelId=0x0, lpFileInformation=0x31e4c0 | out: lpFileInformation=0x31e4c0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x4593b270, ftCreationTime.dwHighDateTime=0x1d2faf3, ftLastAccessTime.dwLowDateTime=0x4593b270, ftLastAccessTime.dwHighDateTime=0x1d2faf3, ftLastWriteTime.dwLowDateTime=0xbc18c40, ftLastWriteTime.dwHighDateTime=0x1d6eb7f, nFileSizeHigh=0x0, nFileSizeLow=0x350)) returned 1 [0067.640] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e440) returned 1 [0067.640] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\9QH4S0GZ\\AAdAVrM[1].png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\9qh4s0gz\\aadavrm[1].png"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\9QH4S0GZ\\AAdAVrM[1].png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\9qh4s0gz\\aadavrm[1].png")) returned 1 [0067.640] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\9QH4S0GZ\\BB1CcOi[1].png", nBufferLength=0x105, lpBuffer=0x31dec4, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\9QH4S0GZ\\BB1CcOi[1].png", lpFilePart=0x0) returned 0x7e [0067.640] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e3b8) returned 1 [0067.640] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\9QH4S0GZ\\BB1CcOi[1].png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\9qh4s0gz\\bb1ccoi[1].png"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x178 [0067.641] GetFileType (hFile=0x178) returned 0x1 [0067.641] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e3b4) returned 1 [0067.641] GetFileType (hFile=0x178) returned 0x1 [0067.641] GetFileSize (in: hFile=0x178, lpFileSizeHigh=0x31e4c0 | out: lpFileSizeHigh=0x31e4c0*=0x0) returned 0x1d0 [0067.641] ReadFile (in: hFile=0x178, lpBuffer=0x2798020, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x31e46c, lpOverlapped=0x0 | out: lpBuffer=0x2798020*, lpNumberOfBytesRead=0x31e46c*=0x1d0, lpOverlapped=0x0) returned 1 [0067.642] CloseHandle (hObject=0x178) returned 1 [0067.656] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\9QH4S0GZ\\BB1CcOi[1].png", nBufferLength=0x105, lpBuffer=0x31deb0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\9QH4S0GZ\\BB1CcOi[1].png", lpFilePart=0x0) returned 0x7e [0067.656] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e3a4) returned 1 [0067.656] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\9QH4S0GZ\\BB1CcOi[1].png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\9qh4s0gz\\bb1ccoi[1].png"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x178 [0067.657] GetFileType (hFile=0x178) returned 0x1 [0067.657] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e3a0) returned 1 [0067.657] GetFileType (hFile=0x178) returned 0x1 [0067.657] WriteFile (in: hFile=0x178, lpBuffer=0x27e6914*, nNumberOfBytesToWrite=0x1e0, lpNumberOfBytesWritten=0x31e434, lpOverlapped=0x0 | out: lpBuffer=0x27e6914*, lpNumberOfBytesWritten=0x31e434*=0x1e0, lpOverlapped=0x0) returned 1 [0067.658] CloseHandle (hObject=0x178) returned 1 [0067.658] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\9QH4S0GZ\\BB1CcOi[1].png", nBufferLength=0x105, lpBuffer=0x31dfe4, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\9QH4S0GZ\\BB1CcOi[1].png", lpFilePart=0x0) returned 0x7e [0067.658] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\9QH4S0GZ\\BB1CcOi[1].png", nBufferLength=0x105, lpBuffer=0x31dfe4, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\9QH4S0GZ\\BB1CcOi[1].png", lpFilePart=0x0) returned 0x7e [0067.658] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e444) returned 1 [0067.658] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\9QH4S0GZ\\BB1CcOi[1].png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\9qh4s0gz\\bb1ccoi[1].png"), fInfoLevelId=0x0, lpFileInformation=0x31e4c0 | out: lpFileInformation=0x31e4c0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x454c4930, ftCreationTime.dwHighDateTime=0x1d2faf3, ftLastAccessTime.dwLowDateTime=0x454c4930, ftLastAccessTime.dwHighDateTime=0x1d2faf3, ftLastWriteTime.dwLowDateTime=0xbc64f00, ftLastWriteTime.dwHighDateTime=0x1d6eb7f, nFileSizeHigh=0x0, nFileSizeLow=0x1e0)) returned 1 [0067.658] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e440) returned 1 [0067.658] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\9QH4S0GZ\\BB1CcOi[1].png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\9qh4s0gz\\bb1ccoi[1].png"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\9QH4S0GZ\\BB1CcOi[1].png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\9qh4s0gz\\bb1ccoi[1].png")) returned 1 [0067.659] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\9QH4S0GZ\\BB46JmN[1].png", nBufferLength=0x105, lpBuffer=0x31dec4, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\9QH4S0GZ\\BB46JmN[1].png", lpFilePart=0x0) returned 0x7e [0067.659] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e3b8) returned 1 [0067.659] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\9QH4S0GZ\\BB46JmN[1].png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\9qh4s0gz\\bb46jmn[1].png"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x178 [0067.660] GetFileType (hFile=0x178) returned 0x1 [0067.660] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e3b4) returned 1 [0067.660] GetFileType (hFile=0x178) returned 0x1 [0067.660] GetFileSize (in: hFile=0x178, lpFileSizeHigh=0x31e4c0 | out: lpFileSizeHigh=0x31e4c0*=0x0) returned 0x310 [0067.660] ReadFile (in: hFile=0x178, lpBuffer=0x27e8000, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x31e46c, lpOverlapped=0x0 | out: lpBuffer=0x27e8000*, lpNumberOfBytesRead=0x31e46c*=0x310, lpOverlapped=0x0) returned 1 [0067.662] CloseHandle (hObject=0x178) returned 1 [0067.675] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\9QH4S0GZ\\BB46JmN[1].png", nBufferLength=0x105, lpBuffer=0x31deb0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\9QH4S0GZ\\BB46JmN[1].png", lpFilePart=0x0) returned 0x7e [0067.675] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e3a4) returned 1 [0067.675] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\9QH4S0GZ\\BB46JmN[1].png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\9qh4s0gz\\bb46jmn[1].png"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x178 [0067.676] GetFileType (hFile=0x178) returned 0x1 [0067.676] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e3a0) returned 1 [0067.676] GetFileType (hFile=0x178) returned 0x1 [0067.676] WriteFile (in: hFile=0x178, lpBuffer=0x2836f34*, nNumberOfBytesToWrite=0x320, lpNumberOfBytesWritten=0x31e434, lpOverlapped=0x0 | out: lpBuffer=0x2836f34*, lpNumberOfBytesWritten=0x31e434*=0x320, lpOverlapped=0x0) returned 1 [0067.677] CloseHandle (hObject=0x178) returned 1 [0067.677] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\9QH4S0GZ\\BB46JmN[1].png", nBufferLength=0x105, lpBuffer=0x31dfe4, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\9QH4S0GZ\\BB46JmN[1].png", lpFilePart=0x0) returned 0x7e [0067.677] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\9QH4S0GZ\\BB46JmN[1].png", nBufferLength=0x105, lpBuffer=0x31dfe4, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\9QH4S0GZ\\BB46JmN[1].png", lpFilePart=0x0) returned 0x7e [0067.677] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e444) returned 1 [0067.677] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\9QH4S0GZ\\BB46JmN[1].png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\9qh4s0gz\\bb46jmn[1].png"), fInfoLevelId=0x0, lpFileInformation=0x31e4c0 | out: lpFileInformation=0x31e4c0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x45725f30, ftCreationTime.dwHighDateTime=0x1d2faf3, ftLastAccessTime.dwLowDateTime=0x45725f30, ftLastAccessTime.dwHighDateTime=0x1d2faf3, ftLastWriteTime.dwLowDateTime=0xbc8b060, ftLastWriteTime.dwHighDateTime=0x1d6eb7f, nFileSizeHigh=0x0, nFileSizeLow=0x320)) returned 1 [0067.677] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e440) returned 1 [0067.677] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\9QH4S0GZ\\BB46JmN[1].png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\9qh4s0gz\\bb46jmn[1].png"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\9QH4S0GZ\\BB46JmN[1].png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\9qh4s0gz\\bb46jmn[1].png")) returned 1 [0067.677] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\9QH4S0GZ\\BB5kJAC[1].png", nBufferLength=0x105, lpBuffer=0x31dec4, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\9QH4S0GZ\\BB5kJAC[1].png", lpFilePart=0x0) returned 0x7e [0067.677] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e3b8) returned 1 [0067.677] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\9QH4S0GZ\\BB5kJAC[1].png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\9qh4s0gz\\bb5kjac[1].png"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x178 [0067.678] GetFileType (hFile=0x178) returned 0x1 [0067.678] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e3b4) returned 1 [0067.678] GetFileType (hFile=0x178) returned 0x1 [0067.678] GetFileSize (in: hFile=0x178, lpFileSizeHigh=0x31e4c0 | out: lpFileSizeHigh=0x31e4c0*=0x0) returned 0x120 [0067.678] ReadFile (in: hFile=0x178, lpBuffer=0x2838430, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x31e46c, lpOverlapped=0x0 | out: lpBuffer=0x2838430*, lpNumberOfBytesRead=0x31e46c*=0x120, lpOverlapped=0x0) returned 1 [0067.680] CloseHandle (hObject=0x178) returned 1 [0067.722] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\9QH4S0GZ\\BB5kJAC[1].png", nBufferLength=0x105, lpBuffer=0x31deb0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\9QH4S0GZ\\BB5kJAC[1].png", lpFilePart=0x0) returned 0x7e [0067.722] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e3a4) returned 1 [0067.722] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\9QH4S0GZ\\BB5kJAC[1].png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\9qh4s0gz\\bb5kjac[1].png"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x178 [0067.723] GetFileType (hFile=0x178) returned 0x1 [0067.723] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e3a0) returned 1 [0067.723] GetFileType (hFile=0x178) returned 0x1 [0067.723] WriteFile (in: hFile=0x178, lpBuffer=0x2687338*, nNumberOfBytesToWrite=0x130, lpNumberOfBytesWritten=0x31e434, lpOverlapped=0x0 | out: lpBuffer=0x2687338*, lpNumberOfBytesWritten=0x31e434*=0x130, lpOverlapped=0x0) returned 1 [0067.724] CloseHandle (hObject=0x178) returned 1 [0067.724] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\9QH4S0GZ\\BB5kJAC[1].png", nBufferLength=0x105, lpBuffer=0x31dfe4, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\9QH4S0GZ\\BB5kJAC[1].png", lpFilePart=0x0) returned 0x7e [0067.724] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\9QH4S0GZ\\BB5kJAC[1].png", nBufferLength=0x105, lpBuffer=0x31dfe4, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\9QH4S0GZ\\BB5kJAC[1].png", lpFilePart=0x0) returned 0x7e [0067.724] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e444) returned 1 [0067.724] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\9QH4S0GZ\\BB5kJAC[1].png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\9qh4s0gz\\bb5kjac[1].png"), fInfoLevelId=0x0, lpFileInformation=0x31e4c0 | out: lpFileInformation=0x31e4c0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x45987530, ftCreationTime.dwHighDateTime=0x1d2faf3, ftLastAccessTime.dwLowDateTime=0x45987530, ftLastAccessTime.dwHighDateTime=0x1d2faf3, ftLastWriteTime.dwLowDateTime=0xbcfd480, ftLastWriteTime.dwHighDateTime=0x1d6eb7f, nFileSizeHigh=0x0, nFileSizeLow=0x130)) returned 1 [0067.724] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e440) returned 1 [0067.724] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\9QH4S0GZ\\BB5kJAC[1].png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\9qh4s0gz\\bb5kjac[1].png"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\9QH4S0GZ\\BB5kJAC[1].png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\9qh4s0gz\\bb5kjac[1].png")) returned 1 [0067.725] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\9QH4S0GZ\\BB5kTiV[1].png", nBufferLength=0x105, lpBuffer=0x31dec4, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\9QH4S0GZ\\BB5kTiV[1].png", lpFilePart=0x0) returned 0x7e [0067.725] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e3b8) returned 1 [0067.725] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\9QH4S0GZ\\BB5kTiV[1].png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\9qh4s0gz\\bb5ktiv[1].png"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x178 [0067.726] GetFileType (hFile=0x178) returned 0x1 [0067.726] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e3b4) returned 1 [0067.726] GetFileType (hFile=0x178) returned 0x1 [0067.726] GetFileSize (in: hFile=0x178, lpFileSizeHigh=0x31e4c0 | out: lpFileSizeHigh=0x31e4c0*=0x0) returned 0x121 [0067.726] ReadFile (in: hFile=0x178, lpBuffer=0x2688838, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x31e46c, lpOverlapped=0x0 | out: lpBuffer=0x2688838*, lpNumberOfBytesRead=0x31e46c*=0x121, lpOverlapped=0x0) returned 1 [0067.727] CloseHandle (hObject=0x178) returned 1 [0067.740] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\9QH4S0GZ\\BB5kTiV[1].png", nBufferLength=0x105, lpBuffer=0x31deb0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\9QH4S0GZ\\BB5kTiV[1].png", lpFilePart=0x0) returned 0x7e [0067.740] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e3a4) returned 1 [0067.740] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\9QH4S0GZ\\BB5kTiV[1].png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\9qh4s0gz\\bb5ktiv[1].png"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x178 [0067.741] GetFileType (hFile=0x178) returned 0x1 [0067.741] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e3a0) returned 1 [0067.741] GetFileType (hFile=0x178) returned 0x1 [0067.741] WriteFile (in: hFile=0x178, lpBuffer=0x26d6f18*, nNumberOfBytesToWrite=0x130, lpNumberOfBytesWritten=0x31e434, lpOverlapped=0x0 | out: lpBuffer=0x26d6f18*, lpNumberOfBytesWritten=0x31e434*=0x130, lpOverlapped=0x0) returned 1 [0067.742] CloseHandle (hObject=0x178) returned 1 [0067.742] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\9QH4S0GZ\\BB5kTiV[1].png", nBufferLength=0x105, lpBuffer=0x31dfe4, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\9QH4S0GZ\\BB5kTiV[1].png", lpFilePart=0x0) returned 0x7e [0067.742] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\9QH4S0GZ\\BB5kTiV[1].png", nBufferLength=0x105, lpBuffer=0x31dfe4, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\9QH4S0GZ\\BB5kTiV[1].png", lpFilePart=0x0) returned 0x7e [0067.742] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e444) returned 1 [0067.742] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\9QH4S0GZ\\BB5kTiV[1].png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\9qh4s0gz\\bb5ktiv[1].png"), fInfoLevelId=0x0, lpFileInformation=0x31e4c0 | out: lpFileInformation=0x31e4c0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x53337450, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x53337450, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0xbd235e0, ftLastWriteTime.dwHighDateTime=0x1d6eb7f, nFileSizeHigh=0x0, nFileSizeLow=0x130)) returned 1 [0067.742] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e440) returned 1 [0067.742] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\9QH4S0GZ\\BB5kTiV[1].png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\9qh4s0gz\\bb5ktiv[1].png"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\9QH4S0GZ\\BB5kTiV[1].png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\9qh4s0gz\\bb5ktiv[1].png")) returned 1 [0067.742] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\9QH4S0GZ\\BB6Ma4a[1].png", nBufferLength=0x105, lpBuffer=0x31dec4, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\9QH4S0GZ\\BB6Ma4a[1].png", lpFilePart=0x0) returned 0x7e [0067.742] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e3b8) returned 1 [0067.742] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\9QH4S0GZ\\BB6Ma4a[1].png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\9qh4s0gz\\bb6ma4a[1].png"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x178 [0067.743] GetFileType (hFile=0x178) returned 0x1 [0067.743] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e3b4) returned 1 [0067.743] GetFileType (hFile=0x178) returned 0x1 [0067.743] GetFileSize (in: hFile=0x178, lpFileSizeHigh=0x31e4c0 | out: lpFileSizeHigh=0x31e4c0*=0x0) returned 0x18c [0067.743] ReadFile (in: hFile=0x178, lpBuffer=0x26d8480, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x31e46c, lpOverlapped=0x0 | out: lpBuffer=0x26d8480*, lpNumberOfBytesRead=0x31e46c*=0x18c, lpOverlapped=0x0) returned 1 [0067.744] CloseHandle (hObject=0x178) returned 1 [0067.757] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\9QH4S0GZ\\BB6Ma4a[1].png", nBufferLength=0x105, lpBuffer=0x31deb0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\9QH4S0GZ\\BB6Ma4a[1].png", lpFilePart=0x0) returned 0x7e [0067.757] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e3a4) returned 1 [0067.757] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\9QH4S0GZ\\BB6Ma4a[1].png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\9qh4s0gz\\bb6ma4a[1].png"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x178 [0067.758] GetFileType (hFile=0x178) returned 0x1 [0067.758] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e3a0) returned 1 [0067.758] GetFileType (hFile=0x178) returned 0x1 [0067.758] WriteFile (in: hFile=0x178, lpBuffer=0x2726bd8*, nNumberOfBytesToWrite=0x190, lpNumberOfBytesWritten=0x31e434, lpOverlapped=0x0 | out: lpBuffer=0x2726bd8*, lpNumberOfBytesWritten=0x31e434*=0x190, lpOverlapped=0x0) returned 1 [0067.759] CloseHandle (hObject=0x178) returned 1 [0067.759] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\9QH4S0GZ\\BB6Ma4a[1].png", nBufferLength=0x105, lpBuffer=0x31dfe4, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\9QH4S0GZ\\BB6Ma4a[1].png", lpFilePart=0x0) returned 0x7e [0067.759] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\9QH4S0GZ\\BB6Ma4a[1].png", nBufferLength=0x105, lpBuffer=0x31dfe4, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\9QH4S0GZ\\BB6Ma4a[1].png", lpFilePart=0x0) returned 0x7e [0067.759] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e444) returned 1 [0067.759] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\9QH4S0GZ\\BB6Ma4a[1].png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\9qh4s0gz\\bb6ma4a[1].png"), fInfoLevelId=0x0, lpFileInformation=0x31e4c0 | out: lpFileInformation=0x31e4c0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x456d9c70, ftCreationTime.dwHighDateTime=0x1d2faf3, ftLastAccessTime.dwLowDateTime=0x456d9c70, ftLastAccessTime.dwHighDateTime=0x1d2faf3, ftLastWriteTime.dwLowDateTime=0xbd49740, ftLastWriteTime.dwHighDateTime=0x1d6eb7f, nFileSizeHigh=0x0, nFileSizeLow=0x190)) returned 1 [0067.759] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e440) returned 1 [0067.759] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\9QH4S0GZ\\BB6Ma4a[1].png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\9qh4s0gz\\bb6ma4a[1].png"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\9QH4S0GZ\\BB6Ma4a[1].png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\9qh4s0gz\\bb6ma4a[1].png")) returned 1 [0067.759] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\9QH4S0GZ\\BB74fLs[1].png", nBufferLength=0x105, lpBuffer=0x31dec4, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\9QH4S0GZ\\BB74fLs[1].png", lpFilePart=0x0) returned 0x7e [0067.759] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e3b8) returned 1 [0067.760] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\9QH4S0GZ\\BB74fLs[1].png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\9qh4s0gz\\bb74fls[1].png"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x178 [0067.760] GetFileType (hFile=0x178) returned 0x1 [0067.760] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e3b4) returned 1 [0067.760] GetFileType (hFile=0x178) returned 0x1 [0067.760] GetFileSize (in: hFile=0x178, lpFileSizeHigh=0x31e4c0 | out: lpFileSizeHigh=0x31e4c0*=0x0) returned 0x168 [0067.760] ReadFile (in: hFile=0x178, lpBuffer=0x272811c, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x31e46c, lpOverlapped=0x0 | out: lpBuffer=0x272811c*, lpNumberOfBytesRead=0x31e46c*=0x168, lpOverlapped=0x0) returned 1 [0067.761] CloseHandle (hObject=0x178) returned 1 [0067.775] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\9QH4S0GZ\\BB74fLs[1].png", nBufferLength=0x105, lpBuffer=0x31deb0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\9QH4S0GZ\\BB74fLs[1].png", lpFilePart=0x0) returned 0x7e [0067.775] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e3a4) returned 1 [0067.775] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\9QH4S0GZ\\BB74fLs[1].png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\9qh4s0gz\\bb74fls[1].png"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x178 [0067.776] GetFileType (hFile=0x178) returned 0x1 [0067.776] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e3a0) returned 1 [0067.776] GetFileType (hFile=0x178) returned 0x1 [0067.776] WriteFile (in: hFile=0x178, lpBuffer=0x27767d8*, nNumberOfBytesToWrite=0x170, lpNumberOfBytesWritten=0x31e434, lpOverlapped=0x0 | out: lpBuffer=0x27767d8*, lpNumberOfBytesWritten=0x31e434*=0x170, lpOverlapped=0x0) returned 1 [0067.778] CloseHandle (hObject=0x178) returned 1 [0067.778] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\9QH4S0GZ\\BB74fLs[1].png", nBufferLength=0x105, lpBuffer=0x31dfe4, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\9QH4S0GZ\\BB74fLs[1].png", lpFilePart=0x0) returned 0x7e [0067.778] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\9QH4S0GZ\\BB74fLs[1].png", nBufferLength=0x105, lpBuffer=0x31dfe4, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\9QH4S0GZ\\BB74fLs[1].png", lpFilePart=0x0) returned 0x7e [0067.778] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e444) returned 1 [0067.778] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\9QH4S0GZ\\BB74fLs[1].png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\9qh4s0gz\\bb74fls[1].png"), fInfoLevelId=0x0, lpFileInformation=0x31e4c0 | out: lpFileInformation=0x31e4c0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xbe399c90, ftCreationTime.dwHighDateTime=0x1d2faf2, ftLastAccessTime.dwLowDateTime=0xbe399c90, ftLastAccessTime.dwHighDateTime=0x1d2faf2, ftLastWriteTime.dwLowDateTime=0xbd6f8a0, ftLastWriteTime.dwHighDateTime=0x1d6eb7f, nFileSizeHigh=0x0, nFileSizeLow=0x170)) returned 1 [0067.778] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e440) returned 1 [0067.778] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\9QH4S0GZ\\BB74fLs[1].png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\9qh4s0gz\\bb74fls[1].png"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\9QH4S0GZ\\BB74fLs[1].png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\9qh4s0gz\\bb74fls[1].png")) returned 1 [0067.778] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\9QH4S0GZ\\BBBIqq8[1].jpg", nBufferLength=0x105, lpBuffer=0x31dec4, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\9QH4S0GZ\\BBBIqq8[1].jpg", lpFilePart=0x0) returned 0x7e [0067.778] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e3b8) returned 1 [0067.778] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\9QH4S0GZ\\BBBIqq8[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\9qh4s0gz\\bbbiqq8[1].jpg"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x178 [0067.779] GetFileType (hFile=0x178) returned 0x1 [0067.779] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e3b4) returned 1 [0067.779] GetFileType (hFile=0x178) returned 0x1 [0067.780] GetFileSize (in: hFile=0x178, lpFileSizeHigh=0x31e4c0 | out: lpFileSizeHigh=0x31e4c0*=0x0) returned 0x333f [0067.780] ReadFile (in: hFile=0x178, lpBuffer=0x2777ba8, nNumberOfBytesToRead=0x333f, lpNumberOfBytesRead=0x31e46c, lpOverlapped=0x0 | out: lpBuffer=0x2777ba8*, lpNumberOfBytesRead=0x31e46c*=0x333f, lpOverlapped=0x0) returned 1 [0067.781] CloseHandle (hObject=0x178) returned 1 [0067.794] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\9QH4S0GZ\\BBBIqq8[1].jpg", nBufferLength=0x105, lpBuffer=0x31deb0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\9QH4S0GZ\\BBBIqq8[1].jpg", lpFilePart=0x0) returned 0x7e [0067.794] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e3a4) returned 1 [0067.794] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\9QH4S0GZ\\BBBIqq8[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\9qh4s0gz\\bbbiqq8[1].jpg"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x178 [0067.795] GetFileType (hFile=0x178) returned 0x1 [0067.795] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e3a0) returned 1 [0067.795] GetFileType (hFile=0x178) returned 0x1 [0067.795] WriteFile (in: hFile=0x178, lpBuffer=0x27d49d0*, nNumberOfBytesToWrite=0x3340, lpNumberOfBytesWritten=0x31e460, lpOverlapped=0x0 | out: lpBuffer=0x27d49d0*, lpNumberOfBytesWritten=0x31e460*=0x3340, lpOverlapped=0x0) returned 1 [0067.796] CloseHandle (hObject=0x178) returned 1 [0067.796] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\9QH4S0GZ\\BBBIqq8[1].jpg", nBufferLength=0x105, lpBuffer=0x31dfe4, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\9QH4S0GZ\\BBBIqq8[1].jpg", lpFilePart=0x0) returned 0x7e [0067.796] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\9QH4S0GZ\\BBBIqq8[1].jpg", nBufferLength=0x105, lpBuffer=0x31dfe4, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\9QH4S0GZ\\BBBIqq8[1].jpg", lpFilePart=0x0) returned 0x7e [0067.796] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e444) returned 1 [0067.797] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\9QH4S0GZ\\BBBIqq8[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\9qh4s0gz\\bbbiqq8[1].jpg"), fInfoLevelId=0x0, lpFileInformation=0x31e4c0 | out: lpFileInformation=0x31e4c0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x6421e580, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x6421e580, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0xbd95a00, ftLastWriteTime.dwHighDateTime=0x1d6eb7f, nFileSizeHigh=0x0, nFileSizeLow=0x3340)) returned 1 [0067.797] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e440) returned 1 [0067.797] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\9QH4S0GZ\\BBBIqq8[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\9qh4s0gz\\bbbiqq8[1].jpg"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\9QH4S0GZ\\BBBIqq8[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\9qh4s0gz\\bbbiqq8[1].jpg")) returned 1 [0067.797] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\9QH4S0GZ\\BBBL0ij[1].jpg", nBufferLength=0x105, lpBuffer=0x31dec4, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\9QH4S0GZ\\BBBL0ij[1].jpg", lpFilePart=0x0) returned 0x7e [0067.797] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e3b8) returned 1 [0067.797] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\9QH4S0GZ\\BBBL0ij[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\9qh4s0gz\\bbbl0ij[1].jpg"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x178 [0067.798] GetFileType (hFile=0x178) returned 0x1 [0067.798] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e3b4) returned 1 [0067.798] GetFileType (hFile=0x178) returned 0x1 [0067.798] GetFileSize (in: hFile=0x178, lpFileSizeHigh=0x31e4c0 | out: lpFileSizeHigh=0x31e4c0*=0x0) returned 0x90b [0067.798] ReadFile (in: hFile=0x178, lpBuffer=0x27d8b8c, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x31e46c, lpOverlapped=0x0 | out: lpBuffer=0x27d8b8c*, lpNumberOfBytesRead=0x31e46c*=0x90b, lpOverlapped=0x0) returned 1 [0067.800] CloseHandle (hObject=0x178) returned 1 [0067.812] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\9QH4S0GZ\\BBBL0ij[1].jpg", nBufferLength=0x105, lpBuffer=0x31deb0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\9QH4S0GZ\\BBBL0ij[1].jpg", lpFilePart=0x0) returned 0x7e [0067.813] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e3a4) returned 1 [0067.813] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\9QH4S0GZ\\BBBL0ij[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\9qh4s0gz\\bbbl0ij[1].jpg"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x178 [0067.814] GetFileType (hFile=0x178) returned 0x1 [0067.814] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e3a0) returned 1 [0067.814] GetFileType (hFile=0x178) returned 0x1 [0067.814] WriteFile (in: hFile=0x178, lpBuffer=0x2829868*, nNumberOfBytesToWrite=0x910, lpNumberOfBytesWritten=0x31e434, lpOverlapped=0x0 | out: lpBuffer=0x2829868*, lpNumberOfBytesWritten=0x31e434*=0x910, lpOverlapped=0x0) returned 1 [0067.815] CloseHandle (hObject=0x178) returned 1 [0067.815] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\9QH4S0GZ\\BBBL0ij[1].jpg", nBufferLength=0x105, lpBuffer=0x31dfe4, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\9QH4S0GZ\\BBBL0ij[1].jpg", lpFilePart=0x0) returned 0x7e [0067.815] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\9QH4S0GZ\\BBBL0ij[1].jpg", nBufferLength=0x105, lpBuffer=0x31dfe4, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\9QH4S0GZ\\BBBL0ij[1].jpg", lpFilePart=0x0) returned 0x7e [0067.815] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e444) returned 1 [0067.815] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\9QH4S0GZ\\BBBL0ij[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\9qh4s0gz\\bbbl0ij[1].jpg"), fInfoLevelId=0x0, lpFileInformation=0x31e4c0 | out: lpFileInformation=0x31e4c0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x532eb190, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x532eb190, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0xbde1cc0, ftLastWriteTime.dwHighDateTime=0x1d6eb7f, nFileSizeHigh=0x0, nFileSizeLow=0x910)) returned 1 [0067.815] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e440) returned 1 [0067.815] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\9QH4S0GZ\\BBBL0ij[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\9qh4s0gz\\bbbl0ij[1].jpg"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\9QH4S0GZ\\BBBL0ij[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\9qh4s0gz\\bbbl0ij[1].jpg")) returned 1 [0067.815] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\9QH4S0GZ\\BBBLhZX[1].jpg", nBufferLength=0x105, lpBuffer=0x31dec4, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\9QH4S0GZ\\BBBLhZX[1].jpg", lpFilePart=0x0) returned 0x7e [0067.815] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e3b8) returned 1 [0067.815] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\9QH4S0GZ\\BBBLhZX[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\9qh4s0gz\\bbblhzx[1].jpg"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x178 [0067.816] GetFileType (hFile=0x178) returned 0x1 [0067.816] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e3b4) returned 1 [0067.816] GetFileType (hFile=0x178) returned 0x1 [0067.816] GetFileSize (in: hFile=0x178, lpFileSizeHigh=0x31e4c0 | out: lpFileSizeHigh=0x31e4c0*=0x0) returned 0x994 [0067.816] ReadFile (in: hFile=0x178, lpBuffer=0x282b5d8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x31e46c, lpOverlapped=0x0 | out: lpBuffer=0x282b5d8*, lpNumberOfBytesRead=0x31e46c*=0x994, lpOverlapped=0x0) returned 1 [0067.818] CloseHandle (hObject=0x178) returned 1 [0067.833] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\9QH4S0GZ\\BBBLhZX[1].jpg", nBufferLength=0x105, lpBuffer=0x31deb0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\9QH4S0GZ\\BBBLhZX[1].jpg", lpFilePart=0x0) returned 0x7e [0067.833] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e3a4) returned 1 [0067.833] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\9QH4S0GZ\\BBBLhZX[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\9qh4s0gz\\bbblhzx[1].jpg"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x178 [0067.834] GetFileType (hFile=0x178) returned 0x1 [0067.834] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e3a0) returned 1 [0067.834] GetFileType (hFile=0x178) returned 0x1 [0067.834] WriteFile (in: hFile=0x178, lpBuffer=0x267d604*, nNumberOfBytesToWrite=0x9a0, lpNumberOfBytesWritten=0x31e434, lpOverlapped=0x0 | out: lpBuffer=0x267d604*, lpNumberOfBytesWritten=0x31e434*=0x9a0, lpOverlapped=0x0) returned 1 [0067.836] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\9QH4S0GZ\\BBBLhZX[1].jpg", nBufferLength=0x105, lpBuffer=0x31dfe4, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\9QH4S0GZ\\BBBLhZX[1].jpg", lpFilePart=0x0) returned 0x7e [0067.836] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\9QH4S0GZ\\BBBLhZX[1].jpg", nBufferLength=0x105, lpBuffer=0x31dfe4, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\9QH4S0GZ\\BBBLhZX[1].jpg", lpFilePart=0x0) returned 0x7e [0067.836] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e444) returned 1 [0067.836] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\9QH4S0GZ\\BBBLhZX[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\9qh4s0gz\\bbblhzx[1].jpg"), fInfoLevelId=0x0, lpFileInformation=0x31e4c0 | out: lpFileInformation=0x31e4c0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x53630fd0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x53630fd0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0xbe07e20, ftLastWriteTime.dwHighDateTime=0x1d6eb7f, nFileSizeHigh=0x0, nFileSizeLow=0x9a0)) returned 1 [0067.836] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e440) returned 1 [0067.836] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\9QH4S0GZ\\BBBLhZX[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\9qh4s0gz\\bbblhzx[1].jpg"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\9QH4S0GZ\\BBBLhZX[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\9qh4s0gz\\bbblhzx[1].jpg")) returned 1 [0067.836] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\9QH4S0GZ\\BBBNiEo[1].jpg", nBufferLength=0x105, lpBuffer=0x31dec4, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\9QH4S0GZ\\BBBNiEo[1].jpg", lpFilePart=0x0) returned 0x7e [0067.836] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e3b8) returned 1 [0067.837] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\9QH4S0GZ\\BBBNiEo[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\9qh4s0gz\\bbbnieo[1].jpg"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x178 [0067.837] GetFileType (hFile=0x178) returned 0x1 [0067.837] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e3b4) returned 1 [0067.837] GetFileType (hFile=0x178) returned 0x1 [0067.837] GetFileSize (in: hFile=0x178, lpFileSizeHigh=0x31e4c0 | out: lpFileSizeHigh=0x31e4c0*=0x0) returned 0x28b9 [0067.837] ReadFile (in: hFile=0x178, lpBuffer=0x267e9d4, nNumberOfBytesToRead=0x28b9, lpNumberOfBytesRead=0x31e46c, lpOverlapped=0x0 | out: lpBuffer=0x267e9d4*, lpNumberOfBytesRead=0x31e46c*=0x28b9, lpOverlapped=0x0) returned 1 [0067.851] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\9QH4S0GZ\\BBBNiEo[1].jpg", nBufferLength=0x105, lpBuffer=0x31deb0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\9QH4S0GZ\\BBBNiEo[1].jpg", lpFilePart=0x0) returned 0x7e [0067.851] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e3a4) returned 1 [0067.851] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\9QH4S0GZ\\BBBNiEo[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\9qh4s0gz\\bbbnieo[1].jpg"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x178 [0067.852] GetFileType (hFile=0x178) returned 0x1 [0067.852] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e3a0) returned 1 [0067.852] GetFileType (hFile=0x178) returned 0x1 [0067.852] WriteFile (in: hFile=0x178, lpBuffer=0x26d84d8*, nNumberOfBytesToWrite=0x28c0, lpNumberOfBytesWritten=0x31e460, lpOverlapped=0x0 | out: lpBuffer=0x26d84d8*, lpNumberOfBytesWritten=0x31e460*=0x28c0, lpOverlapped=0x0) returned 1 [0067.853] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\9QH4S0GZ\\BBBNiEo[1].jpg", nBufferLength=0x105, lpBuffer=0x31dfe4, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\9QH4S0GZ\\BBBNiEo[1].jpg", lpFilePart=0x0) returned 0x7e [0067.853] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\9QH4S0GZ\\BBBNiEo[1].jpg", nBufferLength=0x105, lpBuffer=0x31dfe4, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\9QH4S0GZ\\BBBNiEo[1].jpg", lpFilePart=0x0) returned 0x7e [0067.853] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e444) returned 1 [0067.853] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\9QH4S0GZ\\BBBNiEo[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\9qh4s0gz\\bbbnieo[1].jpg"), fInfoLevelId=0x0, lpFileInformation=0x31e4c0 | out: lpFileInformation=0x31e4c0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x53467f50, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x53467f50, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0xbe2df80, ftLastWriteTime.dwHighDateTime=0x1d6eb7f, nFileSizeHigh=0x0, nFileSizeLow=0x28c0)) returned 1 [0067.853] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e440) returned 1 [0067.853] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\9QH4S0GZ\\BBBNiEo[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\9qh4s0gz\\bbbnieo[1].jpg"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\9QH4S0GZ\\BBBNiEo[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\9qh4s0gz\\bbbnieo[1].jpg")) returned 1 [0067.854] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\9QH4S0GZ\\BBBO1mQ[1].jpg", nBufferLength=0x105, lpBuffer=0x31dec4, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\9QH4S0GZ\\BBBO1mQ[1].jpg", lpFilePart=0x0) returned 0x7e [0067.854] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e3b8) returned 1 [0067.854] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\9QH4S0GZ\\BBBO1mQ[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\9qh4s0gz\\bbbo1mq[1].jpg"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x178 [0067.862] GetFileType (hFile=0x178) returned 0x1 [0067.862] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e3b4) returned 1 [0067.862] GetFileType (hFile=0x178) returned 0x1 [0067.862] GetFileSize (in: hFile=0x178, lpFileSizeHigh=0x31e4c0 | out: lpFileSizeHigh=0x31e4c0*=0x0) returned 0x176d [0067.862] ReadFile (in: hFile=0x178, lpBuffer=0x26db2fc, nNumberOfBytesToRead=0x176d, lpNumberOfBytesRead=0x31e46c, lpOverlapped=0x0 | out: lpBuffer=0x26db2fc*, lpNumberOfBytesRead=0x31e46c*=0x176d, lpOverlapped=0x0) returned 1 [0067.877] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\9QH4S0GZ\\BBBO1mQ[1].jpg", nBufferLength=0x105, lpBuffer=0x31deb0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\9QH4S0GZ\\BBBO1mQ[1].jpg", lpFilePart=0x0) returned 0x7e [0067.877] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e3a4) returned 1 [0067.877] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\9QH4S0GZ\\BBBO1mQ[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\9qh4s0gz\\bbbo1mq[1].jpg"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x178 [0067.878] GetFileType (hFile=0x178) returned 0x1 [0067.878] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e3a0) returned 1 [0067.878] GetFileType (hFile=0x178) returned 0x1 [0067.879] WriteFile (in: hFile=0x178, lpBuffer=0x272f614*, nNumberOfBytesToWrite=0x1770, lpNumberOfBytesWritten=0x31e460, lpOverlapped=0x0 | out: lpBuffer=0x272f614*, lpNumberOfBytesWritten=0x31e460*=0x1770, lpOverlapped=0x0) returned 1 [0067.880] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\9QH4S0GZ\\BBBO1mQ[1].jpg", nBufferLength=0x105, lpBuffer=0x31dfe4, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\9QH4S0GZ\\BBBO1mQ[1].jpg", lpFilePart=0x0) returned 0x7e [0067.880] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\9QH4S0GZ\\BBBO1mQ[1].jpg", nBufferLength=0x105, lpBuffer=0x31dfe4, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\9QH4S0GZ\\BBBO1mQ[1].jpg", lpFilePart=0x0) returned 0x7e [0067.880] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e444) returned 1 [0067.880] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\9QH4S0GZ\\BBBO1mQ[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\9qh4s0gz\\bbbo1mq[1].jpg"), fInfoLevelId=0x0, lpFileInformation=0x31e4c0 | out: lpFileInformation=0x31e4c0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x53b65ff0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x53b65ff0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0xbe7a240, ftLastWriteTime.dwHighDateTime=0x1d6eb7f, nFileSizeHigh=0x0, nFileSizeLow=0x1770)) returned 1 [0067.880] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e440) returned 1 [0067.880] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\9QH4S0GZ\\BBBO1mQ[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\9qh4s0gz\\bbbo1mq[1].jpg"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\9QH4S0GZ\\BBBO1mQ[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\9qh4s0gz\\bbbo1mq[1].jpg")) returned 1 [0067.880] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\9QH4S0GZ\\BBBO3tl[1].jpg", nBufferLength=0x105, lpBuffer=0x31dec4, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\9QH4S0GZ\\BBBO3tl[1].jpg", lpFilePart=0x0) returned 0x7e [0067.880] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e3b8) returned 1 [0067.880] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\9QH4S0GZ\\BBBO3tl[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\9qh4s0gz\\bbbo3tl[1].jpg"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x178 [0067.881] GetFileType (hFile=0x178) returned 0x1 [0067.881] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e3b4) returned 1 [0067.881] GetFileType (hFile=0x178) returned 0x1 [0067.881] GetFileSize (in: hFile=0x178, lpFileSizeHigh=0x31e4c0 | out: lpFileSizeHigh=0x31e4c0*=0x0) returned 0x6218 [0067.881] ReadFile (in: hFile=0x178, lpBuffer=0x27312e8, nNumberOfBytesToRead=0x6218, lpNumberOfBytesRead=0x31e46c, lpOverlapped=0x0 | out: lpBuffer=0x27312e8*, lpNumberOfBytesRead=0x31e46c*=0x6218, lpOverlapped=0x0) returned 1 [0067.896] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\9QH4S0GZ\\BBBO3tl[1].jpg", nBufferLength=0x105, lpBuffer=0x31deb0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\9QH4S0GZ\\BBBO3tl[1].jpg", lpFilePart=0x0) returned 0x7e [0067.896] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e3a4) returned 1 [0067.896] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\9QH4S0GZ\\BBBO3tl[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\9qh4s0gz\\bbbo3tl[1].jpg"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x178 [0067.897] GetFileType (hFile=0x178) returned 0x1 [0067.897] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e3a0) returned 1 [0067.897] GetFileType (hFile=0x178) returned 0x1 [0067.897] WriteFile (in: hFile=0x178, lpBuffer=0x279cb6c*, nNumberOfBytesToWrite=0x6220, lpNumberOfBytesWritten=0x31e460, lpOverlapped=0x0 | out: lpBuffer=0x279cb6c*, lpNumberOfBytesWritten=0x31e460*=0x6220, lpOverlapped=0x0) returned 1 [0067.898] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\9QH4S0GZ\\BBBO3tl[1].jpg", nBufferLength=0x105, lpBuffer=0x31dfe4, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\9QH4S0GZ\\BBBO3tl[1].jpg", lpFilePart=0x0) returned 0x7e [0067.898] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\9QH4S0GZ\\BBBO3tl[1].jpg", nBufferLength=0x105, lpBuffer=0x31dfe4, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\9QH4S0GZ\\BBBO3tl[1].jpg", lpFilePart=0x0) returned 0x7e [0067.898] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e444) returned 1 [0067.898] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\9QH4S0GZ\\BBBO3tl[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\9qh4s0gz\\bbbo3tl[1].jpg"), fInfoLevelId=0x0, lpFileInformation=0x31e4c0 | out: lpFileInformation=0x31e4c0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x6d18e120, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x6d18e120, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0xbea03a0, ftLastWriteTime.dwHighDateTime=0x1d6eb7f, nFileSizeHigh=0x0, nFileSizeLow=0x6220)) returned 1 [0067.899] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e440) returned 1 [0067.899] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\9QH4S0GZ\\BBBO3tl[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\9qh4s0gz\\bbbo3tl[1].jpg"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\9QH4S0GZ\\BBBO3tl[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\9qh4s0gz\\bbbo3tl[1].jpg")) returned 1 [0067.899] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\9QH4S0GZ\\BBBO8dQ[1].jpg", nBufferLength=0x105, lpBuffer=0x31dec4, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\9QH4S0GZ\\BBBO8dQ[1].jpg", lpFilePart=0x0) returned 0x7e [0067.899] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e3b8) returned 1 [0067.899] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\9QH4S0GZ\\BBBO8dQ[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\9qh4s0gz\\bbbo8dq[1].jpg"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x178 [0067.900] GetFileType (hFile=0x178) returned 0x1 [0067.900] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e3b4) returned 1 [0067.900] GetFileType (hFile=0x178) returned 0x1 [0067.900] GetFileSize (in: hFile=0x178, lpFileSizeHigh=0x31e4c0 | out: lpFileSizeHigh=0x31e4c0*=0x0) returned 0x75a [0067.900] ReadFile (in: hFile=0x178, lpBuffer=0x27a3a58, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x31e46c, lpOverlapped=0x0 | out: lpBuffer=0x27a3a58*, lpNumberOfBytesRead=0x31e46c*=0x75a, lpOverlapped=0x0) returned 1 [0067.914] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\9QH4S0GZ\\BBBO8dQ[1].jpg", nBufferLength=0x105, lpBuffer=0x31deb0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\9QH4S0GZ\\BBBO8dQ[1].jpg", lpFilePart=0x0) returned 0x7e [0067.914] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e3a4) returned 1 [0067.914] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\9QH4S0GZ\\BBBO8dQ[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\9qh4s0gz\\bbbo8dq[1].jpg"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x178 [0067.915] GetFileType (hFile=0x178) returned 0x1 [0067.915] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e3a0) returned 1 [0067.915] GetFileType (hFile=0x178) returned 0x1 [0067.915] WriteFile (in: hFile=0x178, lpBuffer=0x27f3ec4*, nNumberOfBytesToWrite=0x760, lpNumberOfBytesWritten=0x31e434, lpOverlapped=0x0 | out: lpBuffer=0x27f3ec4*, lpNumberOfBytesWritten=0x31e434*=0x760, lpOverlapped=0x0) returned 1 [0067.916] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\9QH4S0GZ\\BBBO8dQ[1].jpg", nBufferLength=0x105, lpBuffer=0x31dfe4, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\9QH4S0GZ\\BBBO8dQ[1].jpg", lpFilePart=0x0) returned 0x7e [0067.916] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\9QH4S0GZ\\BBBO8dQ[1].jpg", nBufferLength=0x105, lpBuffer=0x31dfe4, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\9QH4S0GZ\\BBBO8dQ[1].jpg", lpFilePart=0x0) returned 0x7e [0067.916] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e444) returned 1 [0067.916] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\9QH4S0GZ\\BBBO8dQ[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\9qh4s0gz\\bbbo8dq[1].jpg"), fInfoLevelId=0x0, lpFileInformation=0x31e4c0 | out: lpFileInformation=0x31e4c0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x532eb190, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x532eb190, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0xbec6500, ftLastWriteTime.dwHighDateTime=0x1d6eb7f, nFileSizeHigh=0x0, nFileSizeLow=0x760)) returned 1 [0067.916] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e440) returned 1 [0067.916] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\9QH4S0GZ\\BBBO8dQ[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\9qh4s0gz\\bbbo8dq[1].jpg"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\9QH4S0GZ\\BBBO8dQ[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\9qh4s0gz\\bbbo8dq[1].jpg")) returned 1 [0067.917] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\9QH4S0GZ\\BBBOe7C[1].jpg", nBufferLength=0x105, lpBuffer=0x31dec4, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\9QH4S0GZ\\BBBOe7C[1].jpg", lpFilePart=0x0) returned 0x7e [0067.917] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e3b8) returned 1 [0067.917] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\9QH4S0GZ\\BBBOe7C[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\9qh4s0gz\\bbboe7c[1].jpg"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x178 [0067.917] GetFileType (hFile=0x178) returned 0x1 [0067.917] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e3b4) returned 1 [0067.917] GetFileType (hFile=0x178) returned 0x1 [0067.917] GetFileSize (in: hFile=0x178, lpFileSizeHigh=0x31e4c0 | out: lpFileSizeHigh=0x31e4c0*=0x0) returned 0x2d89 [0067.917] ReadFile (in: hFile=0x178, lpBuffer=0x27f5294, nNumberOfBytesToRead=0x2d89, lpNumberOfBytesRead=0x31e46c, lpOverlapped=0x0 | out: lpBuffer=0x27f5294*, lpNumberOfBytesRead=0x31e46c*=0x2d89, lpOverlapped=0x0) returned 1 [0067.934] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\9QH4S0GZ\\BBBOe7C[1].jpg", nBufferLength=0x105, lpBuffer=0x31deb0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\9QH4S0GZ\\BBBOe7C[1].jpg", lpFilePart=0x0) returned 0x7e [0067.934] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e3a4) returned 1 [0067.935] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\9QH4S0GZ\\BBBOe7C[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\9qh4s0gz\\bbboe7c[1].jpg"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x178 [0067.935] GetFileType (hFile=0x178) returned 0x1 [0067.935] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e3a0) returned 1 [0067.935] GetFileType (hFile=0x178) returned 0x1 [0067.935] WriteFile (in: hFile=0x178, lpBuffer=0x26549bc*, nNumberOfBytesToWrite=0x2d90, lpNumberOfBytesWritten=0x31e460, lpOverlapped=0x0 | out: lpBuffer=0x26549bc*, lpNumberOfBytesWritten=0x31e460*=0x2d90, lpOverlapped=0x0) returned 1 [0067.936] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\9QH4S0GZ\\BBBOe7C[1].jpg", nBufferLength=0x105, lpBuffer=0x31dfe4, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\9QH4S0GZ\\BBBOe7C[1].jpg", lpFilePart=0x0) returned 0x7e [0067.936] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\9QH4S0GZ\\BBBOe7C[1].jpg", nBufferLength=0x105, lpBuffer=0x31dfe4, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\9QH4S0GZ\\BBBOe7C[1].jpg", lpFilePart=0x0) returned 0x7e [0067.936] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e444) returned 1 [0067.936] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\9QH4S0GZ\\BBBOe7C[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\9qh4s0gz\\bbboe7c[1].jpg"), fInfoLevelId=0x0, lpFileInformation=0x31e4c0 | out: lpFileInformation=0x31e4c0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x537add90, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x537add90, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0xbeec660, ftLastWriteTime.dwHighDateTime=0x1d6eb7f, nFileSizeHigh=0x0, nFileSizeLow=0x2d90)) returned 1 [0067.937] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e440) returned 1 [0067.937] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\9QH4S0GZ\\BBBOe7C[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\9qh4s0gz\\bbboe7c[1].jpg"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\9QH4S0GZ\\BBBOe7C[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\9qh4s0gz\\bbboe7c[1].jpg")) returned 1 [0067.937] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\9QH4S0GZ\\BBBPThN[1].jpg", nBufferLength=0x105, lpBuffer=0x31dec4, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\9QH4S0GZ\\BBBPThN[1].jpg", lpFilePart=0x0) returned 0x7e [0067.937] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e3b8) returned 1 [0067.937] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\9QH4S0GZ\\BBBPThN[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\9qh4s0gz\\bbbpthn[1].jpg"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x178 [0067.938] GetFileType (hFile=0x178) returned 0x1 [0067.938] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e3b4) returned 1 [0067.938] GetFileType (hFile=0x178) returned 0x1 [0067.938] GetFileSize (in: hFile=0x178, lpFileSizeHigh=0x31e4c0 | out: lpFileSizeHigh=0x31e4c0*=0x0) returned 0x1e36 [0067.938] ReadFile (in: hFile=0x178, lpBuffer=0x2657cb0, nNumberOfBytesToRead=0x1e36, lpNumberOfBytesRead=0x31e46c, lpOverlapped=0x0 | out: lpBuffer=0x2657cb0*, lpNumberOfBytesRead=0x31e46c*=0x1e36, lpOverlapped=0x0) returned 1 [0067.952] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\9QH4S0GZ\\BBBPThN[1].jpg", nBufferLength=0x105, lpBuffer=0x31deb0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\9QH4S0GZ\\BBBPThN[1].jpg", lpFilePart=0x0) returned 0x7e [0067.952] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e3a4) returned 1 [0067.952] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\9QH4S0GZ\\BBBPThN[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\9qh4s0gz\\bbbpthn[1].jpg"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x178 [0067.953] GetFileType (hFile=0x178) returned 0x1 [0067.953] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e3a0) returned 1 [0067.953] GetFileType (hFile=0x178) returned 0x1 [0067.953] WriteFile (in: hFile=0x178, lpBuffer=0x26ae334*, nNumberOfBytesToWrite=0x1e40, lpNumberOfBytesWritten=0x31e460, lpOverlapped=0x0 | out: lpBuffer=0x26ae334*, lpNumberOfBytesWritten=0x31e460*=0x1e40, lpOverlapped=0x0) returned 1 [0067.954] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\9QH4S0GZ\\BBBPThN[1].jpg", nBufferLength=0x105, lpBuffer=0x31dfe4, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\9QH4S0GZ\\BBBPThN[1].jpg", lpFilePart=0x0) returned 0x7e [0067.954] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\9QH4S0GZ\\BBBPThN[1].jpg", nBufferLength=0x105, lpBuffer=0x31dfe4, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\9QH4S0GZ\\BBBPThN[1].jpg", lpFilePart=0x0) returned 0x7e [0067.954] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e444) returned 1 [0067.954] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\9QH4S0GZ\\BBBPThN[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\9qh4s0gz\\bbbpthn[1].jpg"), fInfoLevelId=0x0, lpFileInformation=0x31e4c0 | out: lpFileInformation=0x31e4c0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x5303d8d0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x5303d8d0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0xbf38920, ftLastWriteTime.dwHighDateTime=0x1d6eb7f, nFileSizeHigh=0x0, nFileSizeLow=0x1e40)) returned 1 [0067.954] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e440) returned 1 [0067.954] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\9QH4S0GZ\\BBBPThN[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\9qh4s0gz\\bbbpthn[1].jpg"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\9QH4S0GZ\\BBBPThN[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\9qh4s0gz\\bbbpthn[1].jpg")) returned 1 [0067.954] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\9QH4S0GZ\\BBBPUFJ[1].jpg", nBufferLength=0x105, lpBuffer=0x31dec4, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\9QH4S0GZ\\BBBPUFJ[1].jpg", lpFilePart=0x0) returned 0x7e [0067.955] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e3b8) returned 1 [0067.955] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\9QH4S0GZ\\BBBPUFJ[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\9qh4s0gz\\bbbpufj[1].jpg"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x178 [0067.955] GetFileType (hFile=0x178) returned 0x1 [0067.955] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e3b4) returned 1 [0067.955] GetFileType (hFile=0x178) returned 0x1 [0067.955] GetFileSize (in: hFile=0x178, lpFileSizeHigh=0x31e4c0 | out: lpFileSizeHigh=0x31e4c0*=0x0) returned 0x1ee7 [0067.955] ReadFile (in: hFile=0x178, lpBuffer=0x26b06d8, nNumberOfBytesToRead=0x1ee7, lpNumberOfBytesRead=0x31e46c, lpOverlapped=0x0 | out: lpBuffer=0x26b06d8*, lpNumberOfBytesRead=0x31e46c*=0x1ee7, lpOverlapped=0x0) returned 1 [0067.969] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\9QH4S0GZ\\BBBPUFJ[1].jpg", nBufferLength=0x105, lpBuffer=0x31deb0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\9QH4S0GZ\\BBBPUFJ[1].jpg", lpFilePart=0x0) returned 0x7e [0067.969] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e3a4) returned 1 [0067.969] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\9QH4S0GZ\\BBBPUFJ[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\9qh4s0gz\\bbbpufj[1].jpg"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x178 [0067.970] GetFileType (hFile=0x178) returned 0x1 [0067.970] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e3a0) returned 1 [0067.970] GetFileType (hFile=0x178) returned 0x1 [0067.970] WriteFile (in: hFile=0x178, lpBuffer=0x2706f70*, nNumberOfBytesToWrite=0x1ef0, lpNumberOfBytesWritten=0x31e460, lpOverlapped=0x0 | out: lpBuffer=0x2706f70*, lpNumberOfBytesWritten=0x31e460*=0x1ef0, lpOverlapped=0x0) returned 1 [0067.971] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\9QH4S0GZ\\BBBPUFJ[1].jpg", nBufferLength=0x105, lpBuffer=0x31dfe4, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\9QH4S0GZ\\BBBPUFJ[1].jpg", lpFilePart=0x0) returned 0x7e [0067.971] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\9QH4S0GZ\\BBBPUFJ[1].jpg", nBufferLength=0x105, lpBuffer=0x31dfe4, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\9QH4S0GZ\\BBBPUFJ[1].jpg", lpFilePart=0x0) returned 0x7e [0067.971] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e444) returned 1 [0067.971] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\9QH4S0GZ\\BBBPUFJ[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\9qh4s0gz\\bbbpufj[1].jpg"), fInfoLevelId=0x0, lpFileInformation=0x31e4c0 | out: lpFileInformation=0x31e4c0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x53063a30, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x53063a30, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0xbf5ea80, ftLastWriteTime.dwHighDateTime=0x1d6eb7f, nFileSizeHigh=0x0, nFileSizeLow=0x1ef0)) returned 1 [0067.971] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e440) returned 1 [0067.972] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\9QH4S0GZ\\BBBPUFJ[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\9qh4s0gz\\bbbpufj[1].jpg"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\9QH4S0GZ\\BBBPUFJ[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\9qh4s0gz\\bbbpufj[1].jpg")) returned 1 [0067.972] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\9QH4S0GZ\\BBBQxzx[1].jpg", nBufferLength=0x105, lpBuffer=0x31dec4, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\9QH4S0GZ\\BBBQxzx[1].jpg", lpFilePart=0x0) returned 0x7e [0067.972] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e3b8) returned 1 [0067.972] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\9QH4S0GZ\\BBBQxzx[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\9qh4s0gz\\bbbqxzx[1].jpg"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x178 [0067.972] GetFileType (hFile=0x178) returned 0x1 [0067.972] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e3b4) returned 1 [0067.972] GetFileType (hFile=0x178) returned 0x1 [0067.972] GetFileSize (in: hFile=0x178, lpFileSizeHigh=0x31e4c0 | out: lpFileSizeHigh=0x31e4c0*=0x0) returned 0x924 [0067.972] ReadFile (in: hFile=0x178, lpBuffer=0x2709cf4, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x31e46c, lpOverlapped=0x0 | out: lpBuffer=0x2709cf4*, lpNumberOfBytesRead=0x31e46c*=0x924, lpOverlapped=0x0) returned 1 [0067.986] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\9QH4S0GZ\\BBBQxzx[1].jpg", nBufferLength=0x105, lpBuffer=0x31deb0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\9QH4S0GZ\\BBBQxzx[1].jpg", lpFilePart=0x0) returned 0x7e [0067.986] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e3a4) returned 1 [0067.986] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\9QH4S0GZ\\BBBQxzx[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\9qh4s0gz\\bbbqxzx[1].jpg"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x178 [0067.987] GetFileType (hFile=0x178) returned 0x1 [0067.987] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e3a0) returned 1 [0067.987] GetFileType (hFile=0x178) returned 0x1 [0067.988] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\9QH4S0GZ\\BBBQxzx[1].jpg", nBufferLength=0x105, lpBuffer=0x31dfe4, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\9QH4S0GZ\\BBBQxzx[1].jpg", lpFilePart=0x0) returned 0x7e [0067.988] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\9QH4S0GZ\\BBBQxzx[1].jpg", nBufferLength=0x105, lpBuffer=0x31dfe4, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\9QH4S0GZ\\BBBQxzx[1].jpg", lpFilePart=0x0) returned 0x7e [0067.988] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e444) returned 1 [0067.988] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\9QH4S0GZ\\BBBQxzx[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\9qh4s0gz\\bbbqxzx[1].jpg"), fInfoLevelId=0x0, lpFileInformation=0x31e4c0 | out: lpFileInformation=0x31e4c0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x533a9870, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x533a9870, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0xbf84be0, ftLastWriteTime.dwHighDateTime=0x1d6eb7f, nFileSizeHigh=0x0, nFileSizeLow=0x930)) returned 1 [0067.988] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e440) returned 1 [0067.989] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\9QH4S0GZ\\BBBQxzx[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\9qh4s0gz\\bbbqxzx[1].jpg"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\9QH4S0GZ\\BBBQxzx[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\9qh4s0gz\\bbbqxzx[1].jpg")) returned 1 [0067.989] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\9QH4S0GZ\\BBBseMP[1].jpg", nBufferLength=0x105, lpBuffer=0x31dec4, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\9QH4S0GZ\\BBBseMP[1].jpg", lpFilePart=0x0) returned 0x7e [0067.989] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e3b8) returned 1 [0067.989] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\9QH4S0GZ\\BBBseMP[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\9qh4s0gz\\bbbsemp[1].jpg"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x178 [0067.990] GetFileType (hFile=0x178) returned 0x1 [0067.990] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e3b4) returned 1 [0067.990] GetFileType (hFile=0x178) returned 0x1 [0067.990] GetFileSize (in: hFile=0x178, lpFileSizeHigh=0x31e4c0 | out: lpFileSizeHigh=0x31e4c0*=0x0) returned 0x1963 [0067.990] ReadFile (in: hFile=0x178, lpBuffer=0x275be44, nNumberOfBytesToRead=0x1963, lpNumberOfBytesRead=0x31e46c, lpOverlapped=0x0 | out: lpBuffer=0x275be44*, lpNumberOfBytesRead=0x31e46c*=0x1963, lpOverlapped=0x0) returned 1 [0068.005] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\9QH4S0GZ\\BBBseMP[1].jpg", nBufferLength=0x105, lpBuffer=0x31deb0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\9QH4S0GZ\\BBBseMP[1].jpg", lpFilePart=0x0) returned 0x7e [0068.005] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e3a4) returned 1 [0068.005] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\9QH4S0GZ\\BBBseMP[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\9qh4s0gz\\bbbsemp[1].jpg"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x178 [0068.006] GetFileType (hFile=0x178) returned 0x1 [0068.006] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e3a0) returned 1 [0068.006] GetFileType (hFile=0x178) returned 0x1 [0068.006] WriteFile (in: hFile=0x178, lpBuffer=0x27b0b5c*, nNumberOfBytesToWrite=0x1970, lpNumberOfBytesWritten=0x31e460, lpOverlapped=0x0 | out: lpBuffer=0x27b0b5c*, lpNumberOfBytesWritten=0x31e460*=0x1970, lpOverlapped=0x0) returned 1 [0068.007] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\9QH4S0GZ\\BBBseMP[1].jpg", nBufferLength=0x105, lpBuffer=0x31dfe4, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\9QH4S0GZ\\BBBseMP[1].jpg", lpFilePart=0x0) returned 0x7e [0068.007] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\9QH4S0GZ\\BBBseMP[1].jpg", nBufferLength=0x105, lpBuffer=0x31dfe4, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\9QH4S0GZ\\BBBseMP[1].jpg", lpFilePart=0x0) returned 0x7e [0068.007] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e444) returned 1 [0068.007] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\9QH4S0GZ\\BBBseMP[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\9qh4s0gz\\bbbsemp[1].jpg"), fInfoLevelId=0x0, lpFileInformation=0x31e4c0 | out: lpFileInformation=0x31e4c0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x45ab8030, ftCreationTime.dwHighDateTime=0x1d2faf3, ftLastAccessTime.dwLowDateTime=0x45ab8030, ftLastAccessTime.dwHighDateTime=0x1d2faf3, ftLastWriteTime.dwLowDateTime=0xbfaad40, ftLastWriteTime.dwHighDateTime=0x1d6eb7f, nFileSizeHigh=0x0, nFileSizeLow=0x1970)) returned 1 [0068.007] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e440) returned 1 [0068.007] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\9QH4S0GZ\\BBBseMP[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\9qh4s0gz\\bbbsemp[1].jpg"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\9QH4S0GZ\\BBBseMP[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\9qh4s0gz\\bbbsemp[1].jpg")) returned 1 [0068.008] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\9QH4S0GZ\\BBBsqNL[1].jpg", nBufferLength=0x105, lpBuffer=0x31dec4, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\9QH4S0GZ\\BBBsqNL[1].jpg", lpFilePart=0x0) returned 0x7e [0068.008] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e3b8) returned 1 [0068.008] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\9QH4S0GZ\\BBBsqNL[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\9qh4s0gz\\bbbsqnl[1].jpg"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x178 [0068.008] GetFileType (hFile=0x178) returned 0x1 [0068.008] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e3b4) returned 1 [0068.008] GetFileType (hFile=0x178) returned 0x1 [0068.008] GetFileSize (in: hFile=0x178, lpFileSizeHigh=0x31e4c0 | out: lpFileSizeHigh=0x31e4c0*=0x0) returned 0x16d6 [0068.008] ReadFile (in: hFile=0x178, lpBuffer=0x27b2a30, nNumberOfBytesToRead=0x16d6, lpNumberOfBytesRead=0x31e46c, lpOverlapped=0x0 | out: lpBuffer=0x27b2a30*, lpNumberOfBytesRead=0x31e46c*=0x16d6, lpOverlapped=0x0) returned 1 [0068.023] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\9QH4S0GZ\\BBBsqNL[1].jpg", nBufferLength=0x105, lpBuffer=0x31deb0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\9QH4S0GZ\\BBBsqNL[1].jpg", lpFilePart=0x0) returned 0x7e [0068.023] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e3a4) returned 1 [0068.023] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\9QH4S0GZ\\BBBsqNL[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\9qh4s0gz\\bbbsqnl[1].jpg"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x178 [0068.024] GetFileType (hFile=0x178) returned 0x1 [0068.024] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e3a0) returned 1 [0068.024] GetFileType (hFile=0x178) returned 0x1 [0068.024] WriteFile (in: hFile=0x178, lpBuffer=0x2806a78*, nNumberOfBytesToWrite=0x16e0, lpNumberOfBytesWritten=0x31e460, lpOverlapped=0x0 | out: lpBuffer=0x2806a78*, lpNumberOfBytesWritten=0x31e460*=0x16e0, lpOverlapped=0x0) returned 1 [0068.025] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\9QH4S0GZ\\BBBsqNL[1].jpg", nBufferLength=0x105, lpBuffer=0x31dfe4, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\9QH4S0GZ\\BBBsqNL[1].jpg", lpFilePart=0x0) returned 0x7e [0068.025] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\9QH4S0GZ\\BBBsqNL[1].jpg", nBufferLength=0x105, lpBuffer=0x31dfe4, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\9QH4S0GZ\\BBBsqNL[1].jpg", lpFilePart=0x0) returned 0x7e [0068.025] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e444) returned 1 [0068.025] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\9QH4S0GZ\\BBBsqNL[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\9qh4s0gz\\bbbsqnl[1].jpg"), fInfoLevelId=0x0, lpFileInformation=0x31e4c0 | out: lpFileInformation=0x31e4c0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x53af3bd0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x53af3bd0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0xbfd0ea0, ftLastWriteTime.dwHighDateTime=0x1d6eb7f, nFileSizeHigh=0x0, nFileSizeLow=0x16e0)) returned 1 [0068.025] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e440) returned 1 [0068.025] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\9QH4S0GZ\\BBBsqNL[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\9qh4s0gz\\bbbsqnl[1].jpg"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\9QH4S0GZ\\BBBsqNL[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\9qh4s0gz\\bbbsqnl[1].jpg")) returned 1 [0068.025] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\9QH4S0GZ\\BBBTpvW[1].jpg", nBufferLength=0x105, lpBuffer=0x31dec4, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\9QH4S0GZ\\BBBTpvW[1].jpg", lpFilePart=0x0) returned 0x7e [0068.025] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e3b8) returned 1 [0068.025] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\9QH4S0GZ\\BBBTpvW[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\9qh4s0gz\\bbbtpvw[1].jpg"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x178 [0068.026] GetFileType (hFile=0x178) returned 0x1 [0068.026] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e3b4) returned 1 [0068.026] GetFileType (hFile=0x178) returned 0x1 [0068.026] GetFileSize (in: hFile=0x178, lpFileSizeHigh=0x31e4c0 | out: lpFileSizeHigh=0x31e4c0*=0x0) returned 0x7ae [0068.026] ReadFile (in: hFile=0x178, lpBuffer=0x2808e78, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x31e46c, lpOverlapped=0x0 | out: lpBuffer=0x2808e78*, lpNumberOfBytesRead=0x31e46c*=0x7ae, lpOverlapped=0x0) returned 1 [0068.047] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\9QH4S0GZ\\BBBTpvW[1].jpg", nBufferLength=0x105, lpBuffer=0x31deb0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\9QH4S0GZ\\BBBTpvW[1].jpg", lpFilePart=0x0) returned 0x7e [0068.047] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e3a4) returned 1 [0068.047] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\9QH4S0GZ\\BBBTpvW[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\9qh4s0gz\\bbbtpvw[1].jpg"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x178 [0068.048] GetFileType (hFile=0x178) returned 0x1 [0068.048] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e3a0) returned 1 [0068.048] GetFileType (hFile=0x178) returned 0x1 [0068.048] WriteFile (in: hFile=0x178, lpBuffer=0x265fc0c*, nNumberOfBytesToWrite=0x7b0, lpNumberOfBytesWritten=0x31e434, lpOverlapped=0x0 | out: lpBuffer=0x265fc0c*, lpNumberOfBytesWritten=0x31e434*=0x7b0, lpOverlapped=0x0) returned 1 [0068.049] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\9QH4S0GZ\\BBBTpvW[1].jpg", nBufferLength=0x105, lpBuffer=0x31dfe4, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\9QH4S0GZ\\BBBTpvW[1].jpg", lpFilePart=0x0) returned 0x7e [0068.049] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\9QH4S0GZ\\BBBTpvW[1].jpg", nBufferLength=0x105, lpBuffer=0x31dfe4, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\9QH4S0GZ\\BBBTpvW[1].jpg", lpFilePart=0x0) returned 0x7e [0068.049] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e444) returned 1 [0068.049] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\9QH4S0GZ\\BBBTpvW[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\9qh4s0gz\\bbbtpvw[1].jpg"), fInfoLevelId=0x0, lpFileInformation=0x31e4c0 | out: lpFileInformation=0x31e4c0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x515e8570, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x515e8570, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0xc01d160, ftLastWriteTime.dwHighDateTime=0x1d6eb7f, nFileSizeHigh=0x0, nFileSizeLow=0x7b0)) returned 1 [0068.049] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e440) returned 1 [0068.049] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\9QH4S0GZ\\BBBTpvW[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\9qh4s0gz\\bbbtpvw[1].jpg"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\9QH4S0GZ\\BBBTpvW[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\9qh4s0gz\\bbbtpvw[1].jpg")) returned 1 [0068.049] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\9QH4S0GZ\\BBBVEOW[1].jpg", nBufferLength=0x105, lpBuffer=0x31dec4, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\9QH4S0GZ\\BBBVEOW[1].jpg", lpFilePart=0x0) returned 0x7e [0068.049] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e3b8) returned 1 [0068.049] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\9QH4S0GZ\\BBBVEOW[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\9qh4s0gz\\bbbveow[1].jpg"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x178 [0068.050] GetFileType (hFile=0x178) returned 0x1 [0068.050] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e3b4) returned 1 [0068.050] GetFileType (hFile=0x178) returned 0x1 [0068.050] GetFileSize (in: hFile=0x178, lpFileSizeHigh=0x31e4c0 | out: lpFileSizeHigh=0x31e4c0*=0x0) returned 0x974 [0068.050] ReadFile (in: hFile=0x178, lpBuffer=0x266195c, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x31e46c, lpOverlapped=0x0 | out: lpBuffer=0x266195c*, lpNumberOfBytesRead=0x31e46c*=0x974, lpOverlapped=0x0) returned 1 [0068.064] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\9QH4S0GZ\\BBBVEOW[1].jpg", nBufferLength=0x105, lpBuffer=0x31deb0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\9QH4S0GZ\\BBBVEOW[1].jpg", lpFilePart=0x0) returned 0x7e [0068.064] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e3a4) returned 1 [0068.064] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\9QH4S0GZ\\BBBVEOW[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\9qh4s0gz\\bbbveow[1].jpg"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x178 [0068.065] GetFileType (hFile=0x178) returned 0x1 [0068.065] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e3a0) returned 1 [0068.065] GetFileType (hFile=0x178) returned 0x1 [0068.065] WriteFile (in: hFile=0x178, lpBuffer=0x26b29c8*, nNumberOfBytesToWrite=0x980, lpNumberOfBytesWritten=0x31e434, lpOverlapped=0x0 | out: lpBuffer=0x26b29c8*, lpNumberOfBytesWritten=0x31e434*=0x980, lpOverlapped=0x0) returned 1 [0068.067] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\9QH4S0GZ\\BBBVEOW[1].jpg", nBufferLength=0x105, lpBuffer=0x31dfe4, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\9QH4S0GZ\\BBBVEOW[1].jpg", lpFilePart=0x0) returned 0x7e [0068.067] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\9QH4S0GZ\\BBBVEOW[1].jpg", nBufferLength=0x105, lpBuffer=0x31dfe4, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\9QH4S0GZ\\BBBVEOW[1].jpg", lpFilePart=0x0) returned 0x7e [0068.067] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e444) returned 1 [0068.067] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\9QH4S0GZ\\BBBVEOW[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\9qh4s0gz\\bbbveow[1].jpg"), fInfoLevelId=0x0, lpFileInformation=0x31e4c0 | out: lpFileInformation=0x31e4c0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x53194530, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x53194530, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0xc0432c0, ftLastWriteTime.dwHighDateTime=0x1d6eb7f, nFileSizeHigh=0x0, nFileSizeLow=0x980)) returned 1 [0068.067] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e440) returned 1 [0068.067] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\9QH4S0GZ\\BBBVEOW[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\9qh4s0gz\\bbbveow[1].jpg"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\9QH4S0GZ\\BBBVEOW[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\9qh4s0gz\\bbbveow[1].jpg")) returned 1 [0068.067] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\9QH4S0GZ\\BBBVGsM[1].jpg", nBufferLength=0x105, lpBuffer=0x31dec4, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\9QH4S0GZ\\BBBVGsM[1].jpg", lpFilePart=0x0) returned 0x7e [0068.067] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e3b8) returned 1 [0068.067] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\9QH4S0GZ\\BBBVGsM[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\9qh4s0gz\\bbbvgsm[1].jpg"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x178 [0068.068] GetFileType (hFile=0x178) returned 0x1 [0068.068] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e3b4) returned 1 [0068.068] GetFileType (hFile=0x178) returned 0x1 [0068.068] GetFileSize (in: hFile=0x178, lpFileSizeHigh=0x31e4c0 | out: lpFileSizeHigh=0x31e4c0*=0x0) returned 0x1e67 [0068.068] ReadFile (in: hFile=0x178, lpBuffer=0x26b3d98, nNumberOfBytesToRead=0x1e67, lpNumberOfBytesRead=0x31e46c, lpOverlapped=0x0 | out: lpBuffer=0x26b3d98*, lpNumberOfBytesRead=0x31e46c*=0x1e67, lpOverlapped=0x0) returned 1 [0068.082] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\9QH4S0GZ\\BBBVGsM[1].jpg", nBufferLength=0x105, lpBuffer=0x31deb0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\9QH4S0GZ\\BBBVGsM[1].jpg", lpFilePart=0x0) returned 0x7e [0068.083] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e3a4) returned 1 [0068.083] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\9QH4S0GZ\\BBBVGsM[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\9qh4s0gz\\bbbvgsm[1].jpg"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x178 [0068.083] GetFileType (hFile=0x178) returned 0x1 [0068.083] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e3a0) returned 1 [0068.083] GetFileType (hFile=0x178) returned 0x1 [0068.083] WriteFile (in: hFile=0x178, lpBuffer=0x270a3b0*, nNumberOfBytesToWrite=0x1e70, lpNumberOfBytesWritten=0x31e460, lpOverlapped=0x0 | out: lpBuffer=0x270a3b0*, lpNumberOfBytesWritten=0x31e460*=0x1e70, lpOverlapped=0x0) returned 1 [0068.084] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\9QH4S0GZ\\BBBVGsM[1].jpg", nBufferLength=0x105, lpBuffer=0x31dfe4, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\9QH4S0GZ\\BBBVGsM[1].jpg", lpFilePart=0x0) returned 0x7e [0068.084] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\9QH4S0GZ\\BBBVGsM[1].jpg", nBufferLength=0x105, lpBuffer=0x31dfe4, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\9QH4S0GZ\\BBBVGsM[1].jpg", lpFilePart=0x0) returned 0x7e [0068.084] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e444) returned 1 [0068.085] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\9QH4S0GZ\\BBBVGsM[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\9qh4s0gz\\bbbvgsm[1].jpg"), fInfoLevelId=0x0, lpFileInformation=0x31e4c0 | out: lpFileInformation=0x31e4c0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x52e74850, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x52e74850, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0xc069420, ftLastWriteTime.dwHighDateTime=0x1d6eb7f, nFileSizeHigh=0x0, nFileSizeLow=0x1e70)) returned 1 [0068.085] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e440) returned 1 [0068.085] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\9QH4S0GZ\\BBBVGsM[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\9qh4s0gz\\bbbvgsm[1].jpg"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\9QH4S0GZ\\BBBVGsM[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\9qh4s0gz\\bbbvgsm[1].jpg")) returned 1 [0068.085] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\9QH4S0GZ\\BBBVIzI[1].jpg", nBufferLength=0x105, lpBuffer=0x31dec4, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\9QH4S0GZ\\BBBVIzI[1].jpg", lpFilePart=0x0) returned 0x7e [0068.085] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e3b8) returned 1 [0068.085] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\9QH4S0GZ\\BBBVIzI[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\9qh4s0gz\\bbbvizi[1].jpg"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x178 [0068.086] GetFileType (hFile=0x178) returned 0x1 [0068.086] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e3b4) returned 1 [0068.086] GetFileType (hFile=0x178) returned 0x1 [0068.086] GetFileSize (in: hFile=0x178, lpFileSizeHigh=0x31e4c0 | out: lpFileSizeHigh=0x31e4c0*=0x0) returned 0xaa8 [0068.086] ReadFile (in: hFile=0x178, lpBuffer=0x270d238, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x31e46c, lpOverlapped=0x0 | out: lpBuffer=0x270d238*, lpNumberOfBytesRead=0x31e46c*=0xaa8, lpOverlapped=0x0) returned 1 [0068.102] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\9QH4S0GZ\\BBBVIzI[1].jpg", nBufferLength=0x105, lpBuffer=0x31deb0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\9QH4S0GZ\\BBBVIzI[1].jpg", lpFilePart=0x0) returned 0x7e [0068.102] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e3a4) returned 1 [0068.102] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\9QH4S0GZ\\BBBVIzI[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\9qh4s0gz\\bbbvizi[1].jpg"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x178 [0068.103] GetFileType (hFile=0x178) returned 0x1 [0068.103] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e3a0) returned 1 [0068.103] GetFileType (hFile=0x178) returned 0x1 [0068.104] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\9QH4S0GZ\\BBBVIzI[1].jpg", nBufferLength=0x105, lpBuffer=0x31dfe4, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\9QH4S0GZ\\BBBVIzI[1].jpg", lpFilePart=0x0) returned 0x7e [0068.104] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\9QH4S0GZ\\BBBVIzI[1].jpg", nBufferLength=0x105, lpBuffer=0x31dfe4, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\9QH4S0GZ\\BBBVIzI[1].jpg", lpFilePart=0x0) returned 0x7e [0068.104] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e444) returned 1 [0068.104] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\9QH4S0GZ\\BBBVIzI[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\9qh4s0gz\\bbbvizi[1].jpg"), fInfoLevelId=0x0, lpFileInformation=0x31e4c0 | out: lpFileInformation=0x31e4c0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x530afcf0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x530afcf0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0xc08f580, ftLastWriteTime.dwHighDateTime=0x1d6eb7f, nFileSizeHigh=0x0, nFileSizeLow=0xab0)) returned 1 [0068.104] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e440) returned 1 [0068.104] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\9QH4S0GZ\\BBBVIzI[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\9qh4s0gz\\bbbvizi[1].jpg"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\9QH4S0GZ\\BBBVIzI[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\9qh4s0gz\\bbbvizi[1].jpg")) returned 1 [0068.104] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\9QH4S0GZ\\BBBVJ4r[1].jpg", nBufferLength=0x105, lpBuffer=0x31dec4, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\9QH4S0GZ\\BBBVJ4r[1].jpg", lpFilePart=0x0) returned 0x7e [0068.104] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e3b8) returned 1 [0068.104] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\9QH4S0GZ\\BBBVJ4r[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\9qh4s0gz\\bbbvj4r[1].jpg"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x178 [0068.105] GetFileType (hFile=0x178) returned 0x1 [0068.105] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e3b4) returned 1 [0068.105] GetFileType (hFile=0x178) returned 0x1 [0068.105] GetFileSize (in: hFile=0x178, lpFileSizeHigh=0x31e4c0 | out: lpFileSizeHigh=0x31e4c0*=0x0) returned 0x97a [0068.105] ReadFile (in: hFile=0x178, lpBuffer=0x276048c, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x31e46c, lpOverlapped=0x0 | out: lpBuffer=0x276048c*, lpNumberOfBytesRead=0x31e46c*=0x97a, lpOverlapped=0x0) returned 1 [0068.317] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\9QH4S0GZ\\BBBVJ4r[1].jpg", nBufferLength=0x105, lpBuffer=0x31deb0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\9QH4S0GZ\\BBBVJ4r[1].jpg", lpFilePart=0x0) returned 0x7e [0068.317] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e3a4) returned 1 [0068.317] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\9QH4S0GZ\\BBBVJ4r[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\9qh4s0gz\\bbbvj4r[1].jpg"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x178 [0068.318] GetFileType (hFile=0x178) returned 0x1 [0068.318] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e3a0) returned 1 [0068.318] GetFileType (hFile=0x178) returned 0x1 [0068.319] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\9QH4S0GZ\\BBBVJ4r[1].jpg", nBufferLength=0x105, lpBuffer=0x31dfe4, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\9QH4S0GZ\\BBBVJ4r[1].jpg", lpFilePart=0x0) returned 0x7e [0068.319] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\9QH4S0GZ\\BBBVJ4r[1].jpg", nBufferLength=0x105, lpBuffer=0x31dfe4, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\9QH4S0GZ\\BBBVJ4r[1].jpg", lpFilePart=0x0) returned 0x7e [0068.319] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e444) returned 1 [0068.319] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\9QH4S0GZ\\BBBVJ4r[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\9qh4s0gz\\bbbvj4r[1].jpg"), fInfoLevelId=0x0, lpFileInformation=0x31e4c0 | out: lpFileInformation=0x31e4c0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x52f59090, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x52f59090, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0xc2a48c0, ftLastWriteTime.dwHighDateTime=0x1d6eb7f, nFileSizeHigh=0x0, nFileSizeLow=0x980)) returned 1 [0068.319] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e440) returned 1 [0068.320] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\9QH4S0GZ\\BBBVJ4r[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\9qh4s0gz\\bbbvj4r[1].jpg"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\9QH4S0GZ\\BBBVJ4r[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\9qh4s0gz\\bbbvj4r[1].jpg")) returned 1 [0068.320] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\9QH4S0GZ\\BBBVxM8[1].jpg", nBufferLength=0x105, lpBuffer=0x31dec4, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\9QH4S0GZ\\BBBVxM8[1].jpg", lpFilePart=0x0) returned 0x7e [0068.320] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e3b8) returned 1 [0068.320] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\9QH4S0GZ\\BBBVxM8[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\9qh4s0gz\\bbbvxm8[1].jpg"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x178 [0068.320] GetFileType (hFile=0x178) returned 0x1 [0068.320] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e3b4) returned 1 [0068.320] GetFileType (hFile=0x178) returned 0x1 [0068.320] GetFileSize (in: hFile=0x178, lpFileSizeHigh=0x31e4c0 | out: lpFileSizeHigh=0x31e4c0*=0x0) returned 0x7d8 [0068.320] ReadFile (in: hFile=0x178, lpBuffer=0x27b2f4c, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x31e46c, lpOverlapped=0x0 | out: lpBuffer=0x27b2f4c*, lpNumberOfBytesRead=0x31e46c*=0x7d8, lpOverlapped=0x0) returned 1 [0068.335] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\9QH4S0GZ\\BBBVxM8[1].jpg", nBufferLength=0x105, lpBuffer=0x31deb0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\9QH4S0GZ\\BBBVxM8[1].jpg", lpFilePart=0x0) returned 0x7e [0068.335] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e3a4) returned 1 [0068.335] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\9QH4S0GZ\\BBBVxM8[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\9qh4s0gz\\bbbvxm8[1].jpg"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x178 [0068.336] GetFileType (hFile=0x178) returned 0x1 [0068.336] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e3a0) returned 1 [0068.336] GetFileType (hFile=0x178) returned 0x1 [0068.337] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\9QH4S0GZ\\BBBVxM8[1].jpg", nBufferLength=0x105, lpBuffer=0x31dfe4, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\9QH4S0GZ\\BBBVxM8[1].jpg", lpFilePart=0x0) returned 0x7e [0068.337] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\9QH4S0GZ\\BBBVxM8[1].jpg", nBufferLength=0x105, lpBuffer=0x31dfe4, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\9QH4S0GZ\\BBBVxM8[1].jpg", lpFilePart=0x0) returned 0x7e [0068.337] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e444) returned 1 [0068.337] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\9QH4S0GZ\\BBBVxM8[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\9qh4s0gz\\bbbvxm8[1].jpg"), fInfoLevelId=0x0, lpFileInformation=0x31e4c0 | out: lpFileInformation=0x31e4c0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x5160e6d0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x5160e6d0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0xc2caa20, ftLastWriteTime.dwHighDateTime=0x1d6eb7f, nFileSizeHigh=0x0, nFileSizeLow=0x7e0)) returned 1 [0068.337] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e440) returned 1 [0068.337] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\9QH4S0GZ\\BBBVxM8[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\9qh4s0gz\\bbbvxm8[1].jpg"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\9QH4S0GZ\\BBBVxM8[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\9qh4s0gz\\bbbvxm8[1].jpg")) returned 1 [0068.338] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\9QH4S0GZ\\BBBz9wz[1].jpg", nBufferLength=0x105, lpBuffer=0x31dec4, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\9QH4S0GZ\\BBBz9wz[1].jpg", lpFilePart=0x0) returned 0x7e [0068.338] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e3b8) returned 1 [0068.338] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\9QH4S0GZ\\BBBz9wz[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\9qh4s0gz\\bbbz9wz[1].jpg"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x178 [0068.338] GetFileType (hFile=0x178) returned 0x1 [0068.338] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e3b4) returned 1 [0068.338] GetFileType (hFile=0x178) returned 0x1 [0068.338] GetFileSize (in: hFile=0x178, lpFileSizeHigh=0x31e4c0 | out: lpFileSizeHigh=0x31e4c0*=0x0) returned 0x8d7 [0068.338] ReadFile (in: hFile=0x178, lpBuffer=0x28052ec, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x31e46c, lpOverlapped=0x0 | out: lpBuffer=0x28052ec*, lpNumberOfBytesRead=0x31e46c*=0x8d7, lpOverlapped=0x0) returned 1 [0068.356] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\9QH4S0GZ\\BBBz9wz[1].jpg", nBufferLength=0x105, lpBuffer=0x31deb0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\9QH4S0GZ\\BBBz9wz[1].jpg", lpFilePart=0x0) returned 0x7e [0068.356] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e3a4) returned 1 [0068.356] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\9QH4S0GZ\\BBBz9wz[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\9qh4s0gz\\bbbz9wz[1].jpg"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x178 [0068.357] GetFileType (hFile=0x178) returned 0x1 [0068.357] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e3a0) returned 1 [0068.357] GetFileType (hFile=0x178) returned 0x1 [0068.357] WriteFile (in: hFile=0x178, lpBuffer=0x2657bec*, nNumberOfBytesToWrite=0x8e0, lpNumberOfBytesWritten=0x31e434, lpOverlapped=0x0 | out: lpBuffer=0x2657bec*, lpNumberOfBytesWritten=0x31e434*=0x8e0, lpOverlapped=0x0) returned 1 [0068.358] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\9QH4S0GZ\\BBBz9wz[1].jpg", nBufferLength=0x105, lpBuffer=0x31dfe4, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\9QH4S0GZ\\BBBz9wz[1].jpg", lpFilePart=0x0) returned 0x7e [0068.358] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\9QH4S0GZ\\BBBz9wz[1].jpg", nBufferLength=0x105, lpBuffer=0x31dfe4, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\9QH4S0GZ\\BBBz9wz[1].jpg", lpFilePart=0x0) returned 0x7e [0068.358] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e444) returned 1 [0068.358] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\9QH4S0GZ\\BBBz9wz[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\9qh4s0gz\\bbbz9wz[1].jpg"), fInfoLevelId=0x0, lpFileInformation=0x31e4c0 | out: lpFileInformation=0x31e4c0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x538de890, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x538de890, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0xc2f0b80, ftLastWriteTime.dwHighDateTime=0x1d6eb7f, nFileSizeHigh=0x0, nFileSizeLow=0x8e0)) returned 1 [0068.358] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e440) returned 1 [0068.358] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\9QH4S0GZ\\BBBz9wz[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\9qh4s0gz\\bbbz9wz[1].jpg"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\9QH4S0GZ\\BBBz9wz[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\9qh4s0gz\\bbbz9wz[1].jpg")) returned 1 [0068.359] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\9QH4S0GZ\\BBBzxW1[1].jpg", nBufferLength=0x105, lpBuffer=0x31dec4, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\9QH4S0GZ\\BBBzxW1[1].jpg", lpFilePart=0x0) returned 0x7e [0068.359] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e3b8) returned 1 [0068.359] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\9QH4S0GZ\\BBBzxW1[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\9qh4s0gz\\bbbzxw1[1].jpg"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x178 [0068.359] GetFileType (hFile=0x178) returned 0x1 [0068.359] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e3b4) returned 1 [0068.359] GetFileType (hFile=0x178) returned 0x1 [0068.359] GetFileSize (in: hFile=0x178, lpFileSizeHigh=0x31e4c0 | out: lpFileSizeHigh=0x31e4c0*=0x0) returned 0x24be [0068.360] ReadFile (in: hFile=0x178, lpBuffer=0x2658fbc, nNumberOfBytesToRead=0x24be, lpNumberOfBytesRead=0x31e46c, lpOverlapped=0x0 | out: lpBuffer=0x2658fbc*, lpNumberOfBytesRead=0x31e46c*=0x24be, lpOverlapped=0x0) returned 1 [0068.405] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\9QH4S0GZ\\BBBzxW1[1].jpg", nBufferLength=0x105, lpBuffer=0x31deb0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\9QH4S0GZ\\BBBzxW1[1].jpg", lpFilePart=0x0) returned 0x7e [0068.405] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e3a4) returned 1 [0068.405] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\9QH4S0GZ\\BBBzxW1[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\9qh4s0gz\\bbbzxw1[1].jpg"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x178 [0068.406] GetFileType (hFile=0x178) returned 0x1 [0068.406] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e3a0) returned 1 [0068.406] GetFileType (hFile=0x178) returned 0x1 [0068.406] WriteFile (in: hFile=0x178, lpBuffer=0x26b16c0*, nNumberOfBytesToWrite=0x24c0, lpNumberOfBytesWritten=0x31e460, lpOverlapped=0x0 | out: lpBuffer=0x26b16c0*, lpNumberOfBytesWritten=0x31e460*=0x24c0, lpOverlapped=0x0) returned 1 [0068.407] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\9QH4S0GZ\\BBBzxW1[1].jpg", nBufferLength=0x105, lpBuffer=0x31dfe4, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\9QH4S0GZ\\BBBzxW1[1].jpg", lpFilePart=0x0) returned 0x7e [0068.407] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\9QH4S0GZ\\BBBzxW1[1].jpg", nBufferLength=0x105, lpBuffer=0x31dfe4, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\9QH4S0GZ\\BBBzxW1[1].jpg", lpFilePart=0x0) returned 0x7e [0068.407] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e444) returned 1 [0068.407] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\9QH4S0GZ\\BBBzxW1[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\9qh4s0gz\\bbbzxw1[1].jpg"), fInfoLevelId=0x0, lpFileInformation=0x31e4c0 | out: lpFileInformation=0x31e4c0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x6421e580, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x6421e580, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0xc389100, ftLastWriteTime.dwHighDateTime=0x1d6eb7f, nFileSizeHigh=0x0, nFileSizeLow=0x24c0)) returned 1 [0068.407] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e440) returned 1 [0068.407] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\9QH4S0GZ\\BBBzxW1[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\9qh4s0gz\\bbbzxw1[1].jpg"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\9QH4S0GZ\\BBBzxW1[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\9qh4s0gz\\bbbzxw1[1].jpg")) returned 1 [0068.408] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\9QH4S0GZ\\BBC06Ub[1].jpg", nBufferLength=0x105, lpBuffer=0x31dec4, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\9QH4S0GZ\\BBC06Ub[1].jpg", lpFilePart=0x0) returned 0x7e [0068.408] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e3b8) returned 1 [0068.408] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\9QH4S0GZ\\BBC06Ub[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\9qh4s0gz\\bbc06ub[1].jpg"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x178 [0068.409] GetFileType (hFile=0x178) returned 0x1 [0068.409] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e3b4) returned 1 [0068.409] GetFileType (hFile=0x178) returned 0x1 [0068.409] GetFileSize (in: hFile=0x178, lpFileSizeHigh=0x31e4c0 | out: lpFileSizeHigh=0x31e4c0*=0x0) returned 0x33a8 [0068.409] ReadFile (in: hFile=0x178, lpBuffer=0x26b40e4, nNumberOfBytesToRead=0x33a8, lpNumberOfBytesRead=0x31e46c, lpOverlapped=0x0 | out: lpBuffer=0x26b40e4*, lpNumberOfBytesRead=0x31e46c*=0x33a8, lpOverlapped=0x0) returned 1 [0068.433] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\9QH4S0GZ\\BBC06Ub[1].jpg", nBufferLength=0x105, lpBuffer=0x31deb0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\9QH4S0GZ\\BBC06Ub[1].jpg", lpFilePart=0x0) returned 0x7e [0068.433] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e3a4) returned 1 [0068.434] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\9QH4S0GZ\\BBC06Ub[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\9qh4s0gz\\bbc06ub[1].jpg"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x178 [0068.434] GetFileType (hFile=0x178) returned 0x1 [0068.434] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e3a0) returned 1 [0068.434] GetFileType (hFile=0x178) returned 0x1 [0068.434] WriteFile (in: hFile=0x178, lpBuffer=0x2711138*, nNumberOfBytesToWrite=0x33b0, lpNumberOfBytesWritten=0x31e460, lpOverlapped=0x0 | out: lpBuffer=0x2711138*, lpNumberOfBytesWritten=0x31e460*=0x33b0, lpOverlapped=0x0) returned 1 [0068.436] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\9QH4S0GZ\\BBC06Ub[1].jpg", nBufferLength=0x105, lpBuffer=0x31dfe4, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\9QH4S0GZ\\BBC06Ub[1].jpg", lpFilePart=0x0) returned 0x7e [0068.436] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\9QH4S0GZ\\BBC06Ub[1].jpg", nBufferLength=0x105, lpBuffer=0x31dfe4, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\9QH4S0GZ\\BBC06Ub[1].jpg", lpFilePart=0x0) returned 0x7e [0068.436] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e444) returned 1 [0068.436] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\9QH4S0GZ\\BBC06Ub[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\9qh4s0gz\\bbc06ub[1].jpg"), fInfoLevelId=0x0, lpFileInformation=0x31e4c0 | out: lpFileInformation=0x31e4c0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x6125cc20, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x6125cc20, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0xc3af260, ftLastWriteTime.dwHighDateTime=0x1d6eb7f, nFileSizeHigh=0x0, nFileSizeLow=0x33b0)) returned 1 [0068.436] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e440) returned 1 [0068.436] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\9QH4S0GZ\\BBC06Ub[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\9qh4s0gz\\bbc06ub[1].jpg"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\9QH4S0GZ\\BBC06Ub[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\9qh4s0gz\\bbc06ub[1].jpg")) returned 1 [0068.436] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\9QH4S0GZ\\BBC095c[1].jpg", nBufferLength=0x105, lpBuffer=0x31dec4, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\9QH4S0GZ\\BBC095c[1].jpg", lpFilePart=0x0) returned 0x7e [0068.436] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e3b8) returned 1 [0068.436] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\9QH4S0GZ\\BBC095c[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\9qh4s0gz\\bbc095c[1].jpg"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x178 [0068.437] GetFileType (hFile=0x178) returned 0x1 [0068.437] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e3b4) returned 1 [0068.437] GetFileType (hFile=0x178) returned 0x1 [0068.437] GetFileSize (in: hFile=0x178, lpFileSizeHigh=0x31e4c0 | out: lpFileSizeHigh=0x31e4c0*=0x0) returned 0x738 [0068.437] ReadFile (in: hFile=0x178, lpBuffer=0x2715190, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x31e46c, lpOverlapped=0x0 | out: lpBuffer=0x2715190*, lpNumberOfBytesRead=0x31e46c*=0x738, lpOverlapped=0x0) returned 1 [0068.452] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\9QH4S0GZ\\BBC095c[1].jpg", nBufferLength=0x105, lpBuffer=0x31deb0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\9QH4S0GZ\\BBC095c[1].jpg", lpFilePart=0x0) returned 0x7e [0068.452] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e3a4) returned 1 [0068.452] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\9QH4S0GZ\\BBC095c[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\9qh4s0gz\\bbc095c[1].jpg"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x178 [0068.453] GetFileType (hFile=0x178) returned 0x1 [0068.453] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e3a0) returned 1 [0068.453] GetFileType (hFile=0x178) returned 0x1 [0068.453] WriteFile (in: hFile=0x178, lpBuffer=0x276555c*, nNumberOfBytesToWrite=0x740, lpNumberOfBytesWritten=0x31e434, lpOverlapped=0x0 | out: lpBuffer=0x276555c*, lpNumberOfBytesWritten=0x31e434*=0x740, lpOverlapped=0x0) returned 1 [0068.454] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\9QH4S0GZ\\BBC095c[1].jpg", nBufferLength=0x105, lpBuffer=0x31dfe4, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\9QH4S0GZ\\BBC095c[1].jpg", lpFilePart=0x0) returned 0x7e [0068.454] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\9QH4S0GZ\\BBC095c[1].jpg", nBufferLength=0x105, lpBuffer=0x31dfe4, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\9QH4S0GZ\\BBC095c[1].jpg", lpFilePart=0x0) returned 0x7e [0068.454] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e444) returned 1 [0068.454] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\9QH4S0GZ\\BBC095c[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\9qh4s0gz\\bbc095c[1].jpg"), fInfoLevelId=0x0, lpFileInformation=0x31e4c0 | out: lpFileInformation=0x31e4c0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x53017770, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x53017770, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0xc3fb520, ftLastWriteTime.dwHighDateTime=0x1d6eb7f, nFileSizeHigh=0x0, nFileSizeLow=0x740)) returned 1 [0068.454] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e440) returned 1 [0068.454] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\9QH4S0GZ\\BBC095c[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\9qh4s0gz\\bbc095c[1].jpg"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\9QH4S0GZ\\BBC095c[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\9qh4s0gz\\bbc095c[1].jpg")) returned 1 [0068.454] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\9QH4S0GZ\\BBC0ALC[1].jpg", nBufferLength=0x105, lpBuffer=0x31dec4, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\9QH4S0GZ\\BBC0ALC[1].jpg", lpFilePart=0x0) returned 0x7e [0068.454] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e3b8) returned 1 [0068.455] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\9QH4S0GZ\\BBC0ALC[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\9qh4s0gz\\bbc0alc[1].jpg"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x178 [0068.455] GetFileType (hFile=0x178) returned 0x1 [0068.455] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e3b4) returned 1 [0068.455] GetFileType (hFile=0x178) returned 0x1 [0068.455] GetFileSize (in: hFile=0x178, lpFileSizeHigh=0x31e4c0 | out: lpFileSizeHigh=0x31e4c0*=0x0) returned 0x17a5 [0068.455] ReadFile (in: hFile=0x178, lpBuffer=0x276692c, nNumberOfBytesToRead=0x17a5, lpNumberOfBytesRead=0x31e46c, lpOverlapped=0x0 | out: lpBuffer=0x276692c*, lpNumberOfBytesRead=0x31e46c*=0x17a5, lpOverlapped=0x0) returned 1 [0068.470] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\9QH4S0GZ\\BBC0ALC[1].jpg", nBufferLength=0x105, lpBuffer=0x31deb0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\9QH4S0GZ\\BBC0ALC[1].jpg", lpFilePart=0x0) returned 0x7e [0068.470] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e3a4) returned 1 [0068.470] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\9QH4S0GZ\\BBC0ALC[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\9qh4s0gz\\bbc0alc[1].jpg"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x178 [0068.471] GetFileType (hFile=0x178) returned 0x1 [0068.471] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e3a0) returned 1 [0068.471] GetFileType (hFile=0x178) returned 0x1 [0068.471] WriteFile (in: hFile=0x178, lpBuffer=0x27bad84*, nNumberOfBytesToWrite=0x17b0, lpNumberOfBytesWritten=0x31e460, lpOverlapped=0x0 | out: lpBuffer=0x27bad84*, lpNumberOfBytesWritten=0x31e460*=0x17b0, lpOverlapped=0x0) returned 1 [0068.472] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\9QH4S0GZ\\BBC0ALC[1].jpg", nBufferLength=0x105, lpBuffer=0x31dfe4, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\9QH4S0GZ\\BBC0ALC[1].jpg", lpFilePart=0x0) returned 0x7e [0068.472] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\9QH4S0GZ\\BBC0ALC[1].jpg", nBufferLength=0x105, lpBuffer=0x31dfe4, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\9QH4S0GZ\\BBC0ALC[1].jpg", lpFilePart=0x0) returned 0x7e [0068.472] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e444) returned 1 [0068.472] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\9QH4S0GZ\\BBC0ALC[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\9qh4s0gz\\bbc0alc[1].jpg"), fInfoLevelId=0x0, lpFileInformation=0x31e4c0 | out: lpFileInformation=0x31e4c0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x52ff1610, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x52ff1610, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0xc421680, ftLastWriteTime.dwHighDateTime=0x1d6eb7f, nFileSizeHigh=0x0, nFileSizeLow=0x17b0)) returned 1 [0068.472] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e440) returned 1 [0068.472] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\9QH4S0GZ\\BBC0ALC[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\9qh4s0gz\\bbc0alc[1].jpg"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\9QH4S0GZ\\BBC0ALC[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\9qh4s0gz\\bbc0alc[1].jpg")) returned 1 [0068.472] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\9QH4S0GZ\\BBC0lYn[1].jpg", nBufferLength=0x105, lpBuffer=0x31dec4, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\9QH4S0GZ\\BBC0lYn[1].jpg", lpFilePart=0x0) returned 0x7e [0068.472] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e3b8) returned 1 [0068.472] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\9QH4S0GZ\\BBC0lYn[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\9qh4s0gz\\bbc0lyn[1].jpg"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x178 [0068.473] GetFileType (hFile=0x178) returned 0x1 [0068.473] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e3b4) returned 1 [0068.473] GetFileType (hFile=0x178) returned 0x1 [0068.473] GetFileSize (in: hFile=0x178, lpFileSizeHigh=0x31e4c0 | out: lpFileSizeHigh=0x31e4c0*=0x0) returned 0x2720 [0068.473] ReadFile (in: hFile=0x178, lpBuffer=0x27bca98, nNumberOfBytesToRead=0x2720, lpNumberOfBytesRead=0x31e46c, lpOverlapped=0x0 | out: lpBuffer=0x27bca98*, lpNumberOfBytesRead=0x31e46c*=0x2720, lpOverlapped=0x0) returned 1 [0068.488] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\9QH4S0GZ\\BBC0lYn[1].jpg", nBufferLength=0x105, lpBuffer=0x31deb0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\9QH4S0GZ\\BBC0lYn[1].jpg", lpFilePart=0x0) returned 0x7e [0068.488] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e3a4) returned 1 [0068.488] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\9QH4S0GZ\\BBC0lYn[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\9qh4s0gz\\bbc0lyn[1].jpg"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x178 [0068.489] GetFileType (hFile=0x178) returned 0x1 [0068.489] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e3a0) returned 1 [0068.489] GetFileType (hFile=0x178) returned 0x1 [0068.489] WriteFile (in: hFile=0x178, lpBuffer=0x2815c6c*, nNumberOfBytesToWrite=0x2730, lpNumberOfBytesWritten=0x31e460, lpOverlapped=0x0 | out: lpBuffer=0x2815c6c*, lpNumberOfBytesWritten=0x31e460*=0x2730, lpOverlapped=0x0) returned 1 [0068.490] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\9QH4S0GZ\\BBC0lYn[1].jpg", nBufferLength=0x105, lpBuffer=0x31dfe4, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\9QH4S0GZ\\BBC0lYn[1].jpg", lpFilePart=0x0) returned 0x7e [0068.490] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\9QH4S0GZ\\BBC0lYn[1].jpg", nBufferLength=0x105, lpBuffer=0x31dfe4, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\9QH4S0GZ\\BBC0lYn[1].jpg", lpFilePart=0x0) returned 0x7e [0068.490] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e444) returned 1 [0068.490] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\9QH4S0GZ\\BBC0lYn[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\9qh4s0gz\\bbc0lyn[1].jpg"), fInfoLevelId=0x0, lpFileInformation=0x31e4c0 | out: lpFileInformation=0x31e4c0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x53089b90, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x53089b90, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0xc4477e0, ftLastWriteTime.dwHighDateTime=0x1d6eb7f, nFileSizeHigh=0x0, nFileSizeLow=0x2730)) returned 1 [0068.490] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e440) returned 1 [0068.490] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\9QH4S0GZ\\BBC0lYn[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\9qh4s0gz\\bbc0lyn[1].jpg"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\9QH4S0GZ\\BBC0lYn[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\9qh4s0gz\\bbc0lyn[1].jpg")) returned 1 [0068.490] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\9QH4S0GZ\\BBC0mlu[1].jpg", nBufferLength=0x105, lpBuffer=0x31dec4, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\9QH4S0GZ\\BBC0mlu[1].jpg", lpFilePart=0x0) returned 0x7e [0068.490] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e3b8) returned 1 [0068.491] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\9QH4S0GZ\\BBC0mlu[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\9qh4s0gz\\bbc0mlu[1].jpg"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x178 [0068.491] GetFileType (hFile=0x178) returned 0x1 [0068.491] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e3b4) returned 1 [0068.491] GetFileType (hFile=0x178) returned 0x1 [0068.491] GetFileSize (in: hFile=0x178, lpFileSizeHigh=0x31e4c0 | out: lpFileSizeHigh=0x31e4c0*=0x0) returned 0x522 [0068.491] ReadFile (in: hFile=0x178, lpBuffer=0x2818e30, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x31e46c, lpOverlapped=0x0 | out: lpBuffer=0x2818e30*, lpNumberOfBytesRead=0x31e46c*=0x522, lpOverlapped=0x0) returned 1 [0068.508] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\9QH4S0GZ\\BBC0mlu[1].jpg", nBufferLength=0x105, lpBuffer=0x31deb0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\9QH4S0GZ\\BBC0mlu[1].jpg", lpFilePart=0x0) returned 0x7e [0068.508] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e3a4) returned 1 [0068.508] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\9QH4S0GZ\\BBC0mlu[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\9qh4s0gz\\bbc0mlu[1].jpg"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x178 [0068.508] GetFileType (hFile=0x178) returned 0x1 [0068.509] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e3a0) returned 1 [0068.509] GetFileType (hFile=0x178) returned 0x1 [0068.509] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\9QH4S0GZ\\BBC0mlu[1].jpg", nBufferLength=0x105, lpBuffer=0x31dfe4, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\9QH4S0GZ\\BBC0mlu[1].jpg", lpFilePart=0x0) returned 0x7e [0068.509] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\9QH4S0GZ\\BBC0mlu[1].jpg", nBufferLength=0x105, lpBuffer=0x31dfe4, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\9QH4S0GZ\\BBC0mlu[1].jpg", lpFilePart=0x0) returned 0x7e [0068.509] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e444) returned 1 [0068.509] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\9QH4S0GZ\\BBC0mlu[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\9qh4s0gz\\bbc0mlu[1].jpg"), fInfoLevelId=0x0, lpFileInformation=0x31e4c0 | out: lpFileInformation=0x31e4c0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x52f0cdd0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x52f0cdd0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0xc46d940, ftLastWriteTime.dwHighDateTime=0x1d6eb7f, nFileSizeHigh=0x0, nFileSizeLow=0x530)) returned 1 [0068.510] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e440) returned 1 [0068.510] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\9QH4S0GZ\\BBC0mlu[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\9qh4s0gz\\bbc0mlu[1].jpg"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\9QH4S0GZ\\BBC0mlu[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\9qh4s0gz\\bbc0mlu[1].jpg")) returned 1 [0068.510] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\9QH4S0GZ\\BBC0rDa[1].jpg", nBufferLength=0x105, lpBuffer=0x31dec4, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\9QH4S0GZ\\BBC0rDa[1].jpg", lpFilePart=0x0) returned 0x7e [0068.510] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e3b8) returned 1 [0068.510] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\9QH4S0GZ\\BBC0rDa[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\9qh4s0gz\\bbc0rda[1].jpg"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x178 [0068.510] GetFileType (hFile=0x178) returned 0x1 [0068.510] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e3b4) returned 1 [0068.510] GetFileType (hFile=0x178) returned 0x1 [0068.510] GetFileSize (in: hFile=0x178, lpFileSizeHigh=0x31e4c0 | out: lpFileSizeHigh=0x31e4c0*=0x0) returned 0x188f [0068.510] ReadFile (in: hFile=0x178, lpBuffer=0x266b6ec, nNumberOfBytesToRead=0x188f, lpNumberOfBytesRead=0x31e46c, lpOverlapped=0x0 | out: lpBuffer=0x266b6ec*, lpNumberOfBytesRead=0x31e46c*=0x188f, lpOverlapped=0x0) returned 1 [0068.525] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\9QH4S0GZ\\BBC0rDa[1].jpg", nBufferLength=0x105, lpBuffer=0x31deb0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\9QH4S0GZ\\BBC0rDa[1].jpg", lpFilePart=0x0) returned 0x7e [0068.525] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e3a4) returned 1 [0068.525] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\9QH4S0GZ\\BBC0rDa[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\9qh4s0gz\\bbc0rda[1].jpg"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x178 [0068.526] GetFileType (hFile=0x178) returned 0x1 [0068.526] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e3a0) returned 1 [0068.526] GetFileType (hFile=0x178) returned 0x1 [0068.526] WriteFile (in: hFile=0x178, lpBuffer=0x26c0100*, nNumberOfBytesToWrite=0x1890, lpNumberOfBytesWritten=0x31e460, lpOverlapped=0x0 | out: lpBuffer=0x26c0100*, lpNumberOfBytesWritten=0x31e460*=0x1890, lpOverlapped=0x0) returned 1 [0068.527] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\9QH4S0GZ\\BBC0rDa[1].jpg", nBufferLength=0x105, lpBuffer=0x31dfe4, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\9QH4S0GZ\\BBC0rDa[1].jpg", lpFilePart=0x0) returned 0x7e [0068.527] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\9QH4S0GZ\\BBC0rDa[1].jpg", nBufferLength=0x105, lpBuffer=0x31dfe4, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\9QH4S0GZ\\BBC0rDa[1].jpg", lpFilePart=0x0) returned 0x7e [0068.527] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e444) returned 1 [0068.528] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\9QH4S0GZ\\BBC0rDa[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\9qh4s0gz\\bbc0rda[1].jpg"), fInfoLevelId=0x0, lpFileInformation=0x31e4c0 | out: lpFileInformation=0x31e4c0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x52e28590, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x52e28590, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0xc493aa0, ftLastWriteTime.dwHighDateTime=0x1d6eb7f, nFileSizeHigh=0x0, nFileSizeLow=0x1890)) returned 1 [0068.528] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e440) returned 1 [0068.528] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\9QH4S0GZ\\BBC0rDa[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\9qh4s0gz\\bbc0rda[1].jpg"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\9QH4S0GZ\\BBC0rDa[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\9qh4s0gz\\bbc0rda[1].jpg")) returned 1 [0068.528] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\9QH4S0GZ\\BBC0rDa[2].jpg", nBufferLength=0x105, lpBuffer=0x31dec4, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\9QH4S0GZ\\BBC0rDa[2].jpg", lpFilePart=0x0) returned 0x7e [0068.528] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e3b8) returned 1 [0068.528] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\9QH4S0GZ\\BBC0rDa[2].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\9qh4s0gz\\bbc0rda[2].jpg"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x178 [0068.528] GetFileType (hFile=0x178) returned 0x1 [0068.528] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e3b4) returned 1 [0068.528] GetFileType (hFile=0x178) returned 0x1 [0068.528] GetFileSize (in: hFile=0x178, lpFileSizeHigh=0x31e4c0 | out: lpFileSizeHigh=0x31e4c0*=0x0) returned 0x7fe [0068.528] ReadFile (in: hFile=0x178, lpBuffer=0x26c2700, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x31e46c, lpOverlapped=0x0 | out: lpBuffer=0x26c2700*, lpNumberOfBytesRead=0x31e46c*=0x7fe, lpOverlapped=0x0) returned 1 [0068.543] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\9QH4S0GZ\\BBC0rDa[2].jpg", nBufferLength=0x105, lpBuffer=0x31deb0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\9QH4S0GZ\\BBC0rDa[2].jpg", lpFilePart=0x0) returned 0x7e [0068.543] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e3a4) returned 1 [0068.543] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\9QH4S0GZ\\BBC0rDa[2].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\9qh4s0gz\\bbc0rda[2].jpg"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x178 [0068.544] GetFileType (hFile=0x178) returned 0x1 [0068.544] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e3a0) returned 1 [0068.544] GetFileType (hFile=0x178) returned 0x1 [0068.544] WriteFile (in: hFile=0x178, lpBuffer=0x2712e88*, nNumberOfBytesToWrite=0x800, lpNumberOfBytesWritten=0x31e434, lpOverlapped=0x0 | out: lpBuffer=0x2712e88*, lpNumberOfBytesWritten=0x31e434*=0x800, lpOverlapped=0x0) returned 1 [0068.545] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\9QH4S0GZ\\BBC0rDa[2].jpg", nBufferLength=0x105, lpBuffer=0x31dfe4, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\9QH4S0GZ\\BBC0rDa[2].jpg", lpFilePart=0x0) returned 0x7e [0068.545] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\9QH4S0GZ\\BBC0rDa[2].jpg", nBufferLength=0x105, lpBuffer=0x31dfe4, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\9QH4S0GZ\\BBC0rDa[2].jpg", lpFilePart=0x0) returned 0x7e [0068.545] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e444) returned 1 [0068.545] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\9QH4S0GZ\\BBC0rDa[2].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\9qh4s0gz\\bbc0rda[2].jpg"), fInfoLevelId=0x0, lpFileInformation=0x31e4c0 | out: lpFileInformation=0x31e4c0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x52e9a9b0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x52e9a9b0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0xc4b9c00, ftLastWriteTime.dwHighDateTime=0x1d6eb7f, nFileSizeHigh=0x0, nFileSizeLow=0x800)) returned 1 [0068.545] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e440) returned 1 [0068.545] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\9QH4S0GZ\\BBC0rDa[2].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\9qh4s0gz\\bbc0rda[2].jpg"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\9QH4S0GZ\\BBC0rDa[2].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\9qh4s0gz\\bbc0rda[2].jpg")) returned 1 [0068.546] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\9QH4S0GZ\\BBC0tCi[1].jpg", nBufferLength=0x105, lpBuffer=0x31dec4, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\9QH4S0GZ\\BBC0tCi[1].jpg", lpFilePart=0x0) returned 0x7e [0068.546] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e3b8) returned 1 [0068.546] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\9QH4S0GZ\\BBC0tCi[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\9qh4s0gz\\bbc0tci[1].jpg"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x178 [0068.547] GetFileType (hFile=0x178) returned 0x1 [0068.547] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e3b4) returned 1 [0068.547] GetFileType (hFile=0x178) returned 0x1 [0068.547] GetFileSize (in: hFile=0x178, lpFileSizeHigh=0x31e4c0 | out: lpFileSizeHigh=0x31e4c0*=0x0) returned 0x320d [0068.547] ReadFile (in: hFile=0x178, lpBuffer=0x2714258, nNumberOfBytesToRead=0x320d, lpNumberOfBytesRead=0x31e46c, lpOverlapped=0x0 | out: lpBuffer=0x2714258*, lpNumberOfBytesRead=0x31e46c*=0x320d, lpOverlapped=0x0) returned 1 [0068.564] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\9QH4S0GZ\\BBC0tCi[1].jpg", nBufferLength=0x105, lpBuffer=0x31deb0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\9QH4S0GZ\\BBC0tCi[1].jpg", lpFilePart=0x0) returned 0x7e [0068.564] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e3a4) returned 1 [0068.564] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\9QH4S0GZ\\BBC0tCi[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\9qh4s0gz\\bbc0tci[1].jpg"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x178 [0068.565] GetFileType (hFile=0x178) returned 0x1 [0068.565] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e3a0) returned 1 [0068.565] GetFileType (hFile=0x178) returned 0x1 [0068.565] WriteFile (in: hFile=0x178, lpBuffer=0x2770a90*, nNumberOfBytesToWrite=0x3210, lpNumberOfBytesWritten=0x31e460, lpOverlapped=0x0 | out: lpBuffer=0x2770a90*, lpNumberOfBytesWritten=0x31e460*=0x3210, lpOverlapped=0x0) returned 1 [0068.566] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\9QH4S0GZ\\BBC0tCi[1].jpg", nBufferLength=0x105, lpBuffer=0x31dfe4, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\9QH4S0GZ\\BBC0tCi[1].jpg", lpFilePart=0x0) returned 0x7e [0068.566] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\9QH4S0GZ\\BBC0tCi[1].jpg", nBufferLength=0x105, lpBuffer=0x31dfe4, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\9QH4S0GZ\\BBC0tCi[1].jpg", lpFilePart=0x0) returned 0x7e [0068.566] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e444) returned 1 [0068.566] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\9QH4S0GZ\\BBC0tCi[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\9qh4s0gz\\bbc0tci[1].jpg"), fInfoLevelId=0x0, lpFileInformation=0x31e4c0 | out: lpFileInformation=0x31e4c0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x5e275160, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x5e275160, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0xc505ec0, ftLastWriteTime.dwHighDateTime=0x1d6eb7f, nFileSizeHigh=0x0, nFileSizeLow=0x3210)) returned 1 [0068.566] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e440) returned 1 [0068.566] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\9QH4S0GZ\\BBC0tCi[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\9qh4s0gz\\bbc0tci[1].jpg"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\9QH4S0GZ\\BBC0tCi[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\9qh4s0gz\\bbc0tci[1].jpg")) returned 1 [0068.567] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\9QH4S0GZ\\BBDK7Yy[1].jpg", nBufferLength=0x105, lpBuffer=0x31dec4, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\9QH4S0GZ\\BBDK7Yy[1].jpg", lpFilePart=0x0) returned 0x7e [0068.567] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e3b8) returned 1 [0068.567] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\9QH4S0GZ\\BBDK7Yy[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\9qh4s0gz\\bbdk7yy[1].jpg"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x178 [0068.568] GetFileType (hFile=0x178) returned 0x1 [0068.568] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e3b4) returned 1 [0068.568] GetFileType (hFile=0x178) returned 0x1 [0068.568] GetFileSize (in: hFile=0x178, lpFileSizeHigh=0x31e4c0 | out: lpFileSizeHigh=0x31e4c0*=0x0) returned 0x28f2 [0068.568] ReadFile (in: hFile=0x178, lpBuffer=0x2774204, nNumberOfBytesToRead=0x28f2, lpNumberOfBytesRead=0x31e46c, lpOverlapped=0x0 | out: lpBuffer=0x2774204*, lpNumberOfBytesRead=0x31e46c*=0x28f2, lpOverlapped=0x0) returned 1 [0068.582] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\9QH4S0GZ\\BBDK7Yy[1].jpg", nBufferLength=0x105, lpBuffer=0x31deb0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\9QH4S0GZ\\BBDK7Yy[1].jpg", lpFilePart=0x0) returned 0x7e [0068.583] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e3a4) returned 1 [0068.583] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\9QH4S0GZ\\BBDK7Yy[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\9qh4s0gz\\bbdk7yy[1].jpg"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x178 [0068.583] GetFileType (hFile=0x178) returned 0x1 [0068.583] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e3a0) returned 1 [0068.583] GetFileType (hFile=0x178) returned 0x1 [0068.584] WriteFile (in: hFile=0x178, lpBuffer=0x27cdcec*, nNumberOfBytesToWrite=0x2900, lpNumberOfBytesWritten=0x31e460, lpOverlapped=0x0 | out: lpBuffer=0x27cdcec*, lpNumberOfBytesWritten=0x31e460*=0x2900, lpOverlapped=0x0) returned 1 [0068.584] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\9QH4S0GZ\\BBDK7Yy[1].jpg", nBufferLength=0x105, lpBuffer=0x31dfe4, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\9QH4S0GZ\\BBDK7Yy[1].jpg", lpFilePart=0x0) returned 0x7e [0068.585] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\9QH4S0GZ\\BBDK7Yy[1].jpg", nBufferLength=0x105, lpBuffer=0x31dfe4, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\9QH4S0GZ\\BBDK7Yy[1].jpg", lpFilePart=0x0) returned 0x7e [0068.585] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e444) returned 1 [0068.585] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\9QH4S0GZ\\BBDK7Yy[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\9qh4s0gz\\bbdk7yy[1].jpg"), fInfoLevelId=0x0, lpFileInformation=0x31e4c0 | out: lpFileInformation=0x31e4c0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x459d37f0, ftCreationTime.dwHighDateTime=0x1d2faf3, ftLastAccessTime.dwLowDateTime=0x459d37f0, ftLastAccessTime.dwHighDateTime=0x1d2faf3, ftLastWriteTime.dwLowDateTime=0xc52c020, ftLastWriteTime.dwHighDateTime=0x1d6eb7f, nFileSizeHigh=0x0, nFileSizeLow=0x2900)) returned 1 [0068.585] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e440) returned 1 [0068.585] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\9QH4S0GZ\\BBDK7Yy[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\9qh4s0gz\\bbdk7yy[1].jpg"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\9QH4S0GZ\\BBDK7Yy[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\9qh4s0gz\\bbdk7yy[1].jpg")) returned 1 [0068.585] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\9QH4S0GZ\\BBDRbsH[1].jpg", nBufferLength=0x105, lpBuffer=0x31dec4, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\9QH4S0GZ\\BBDRbsH[1].jpg", lpFilePart=0x0) returned 0x7e [0068.585] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e3b8) returned 1 [0068.585] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\9QH4S0GZ\\BBDRbsH[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\9qh4s0gz\\bbdrbsh[1].jpg"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x178 [0068.586] GetFileType (hFile=0x178) returned 0x1 [0068.586] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e3b4) returned 1 [0068.586] GetFileType (hFile=0x178) returned 0x1 [0068.586] GetFileSize (in: hFile=0x178, lpFileSizeHigh=0x31e4c0 | out: lpFileSizeHigh=0x31e4c0*=0x0) returned 0x83c [0068.586] ReadFile (in: hFile=0x178, lpBuffer=0x27d1398, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x31e46c, lpOverlapped=0x0 | out: lpBuffer=0x27d1398*, lpNumberOfBytesRead=0x31e46c*=0x83c, lpOverlapped=0x0) returned 1 [0068.601] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\9QH4S0GZ\\BBDRbsH[1].jpg", nBufferLength=0x105, lpBuffer=0x31deb0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\9QH4S0GZ\\BBDRbsH[1].jpg", lpFilePart=0x0) returned 0x7e [0068.601] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e3a4) returned 1 [0068.601] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\9QH4S0GZ\\BBDRbsH[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\9qh4s0gz\\bbdrbsh[1].jpg"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x178 [0068.602] GetFileType (hFile=0x178) returned 0x1 [0068.602] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e3a0) returned 1 [0068.602] GetFileType (hFile=0x178) returned 0x1 [0068.602] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\9QH4S0GZ\\BBDRbsH[1].jpg", nBufferLength=0x105, lpBuffer=0x31dfe4, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\9QH4S0GZ\\BBDRbsH[1].jpg", lpFilePart=0x0) returned 0x7e [0068.602] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\9QH4S0GZ\\BBDRbsH[1].jpg", nBufferLength=0x105, lpBuffer=0x31dfe4, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\9QH4S0GZ\\BBDRbsH[1].jpg", lpFilePart=0x0) returned 0x7e [0068.603] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e444) returned 1 [0068.603] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\9QH4S0GZ\\BBDRbsH[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\9qh4s0gz\\bbdrbsh[1].jpg"), fInfoLevelId=0x0, lpFileInformation=0x31e4c0 | out: lpFileInformation=0x31e4c0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x458eefb0, ftCreationTime.dwHighDateTime=0x1d2faf3, ftLastAccessTime.dwLowDateTime=0x458eefb0, ftLastAccessTime.dwHighDateTime=0x1d2faf3, ftLastWriteTime.dwLowDateTime=0xc552180, ftLastWriteTime.dwHighDateTime=0x1d6eb7f, nFileSizeHigh=0x0, nFileSizeLow=0x840)) returned 1 [0068.603] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e440) returned 1 [0068.603] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\9QH4S0GZ\\BBDRbsH[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\9qh4s0gz\\bbdrbsh[1].jpg"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\9QH4S0GZ\\BBDRbsH[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\9qh4s0gz\\bbdrbsh[1].jpg")) returned 1 [0068.603] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\9QH4S0GZ\\BBDZoZR[1].jpg", nBufferLength=0x105, lpBuffer=0x31dec4, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\9QH4S0GZ\\BBDZoZR[1].jpg", lpFilePart=0x0) returned 0x7e [0068.603] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e3b8) returned 1 [0068.603] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\9QH4S0GZ\\BBDZoZR[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\9qh4s0gz\\bbdzozr[1].jpg"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x178 [0068.603] GetFileType (hFile=0x178) returned 0x1 [0068.603] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e3b4) returned 1 [0068.603] GetFileType (hFile=0x178) returned 0x1 [0068.603] GetFileSize (in: hFile=0x178, lpFileSizeHigh=0x31e4c0 | out: lpFileSizeHigh=0x31e4c0*=0x0) returned 0x968 [0068.604] ReadFile (in: hFile=0x178, lpBuffer=0x28239a4, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x31e46c, lpOverlapped=0x0 | out: lpBuffer=0x28239a4*, lpNumberOfBytesRead=0x31e46c*=0x968, lpOverlapped=0x0) returned 1 [0068.622] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\9QH4S0GZ\\BBDZoZR[1].jpg", nBufferLength=0x105, lpBuffer=0x31deb0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\9QH4S0GZ\\BBDZoZR[1].jpg", lpFilePart=0x0) returned 0x7e [0068.622] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e3a4) returned 1 [0068.622] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\9QH4S0GZ\\BBDZoZR[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\9qh4s0gz\\bbdzozr[1].jpg"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x178 [0068.623] GetFileType (hFile=0x178) returned 0x1 [0068.623] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e3a0) returned 1 [0068.623] GetFileType (hFile=0x178) returned 0x1 [0068.624] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\9QH4S0GZ\\BBDZoZR[1].jpg", nBufferLength=0x105, lpBuffer=0x31dfe4, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\9QH4S0GZ\\BBDZoZR[1].jpg", lpFilePart=0x0) returned 0x7e [0068.624] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\9QH4S0GZ\\BBDZoZR[1].jpg", nBufferLength=0x105, lpBuffer=0x31dfe4, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\9QH4S0GZ\\BBDZoZR[1].jpg", lpFilePart=0x0) returned 0x7e [0068.624] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e444) returned 1 [0068.624] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\9QH4S0GZ\\BBDZoZR[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\9qh4s0gz\\bbdzozr[1].jpg"), fInfoLevelId=0x0, lpFileInformation=0x31e4c0 | out: lpFileInformation=0x31e4c0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x45b9c870, ftCreationTime.dwHighDateTime=0x1d2faf3, ftLastAccessTime.dwLowDateTime=0x45b9c870, ftLastAccessTime.dwHighDateTime=0x1d2faf3, ftLastWriteTime.dwLowDateTime=0xc5782e0, ftLastWriteTime.dwHighDateTime=0x1d6eb7f, nFileSizeHigh=0x0, nFileSizeLow=0x970)) returned 1 [0068.624] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e440) returned 1 [0068.624] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\9QH4S0GZ\\BBDZoZR[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\9qh4s0gz\\bbdzozr[1].jpg"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\9QH4S0GZ\\BBDZoZR[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\9qh4s0gz\\bbdzozr[1].jpg")) returned 1 [0068.625] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\9QH4S0GZ\\BBE97O8[1].jpg", nBufferLength=0x105, lpBuffer=0x31dec4, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\9QH4S0GZ\\BBE97O8[1].jpg", lpFilePart=0x0) returned 0x7e [0068.625] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e3b8) returned 1 [0068.625] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\9QH4S0GZ\\BBE97O8[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\9qh4s0gz\\bbe97o8[1].jpg"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x178 [0068.625] GetFileType (hFile=0x178) returned 0x1 [0068.625] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e3b4) returned 1 [0068.626] GetFileType (hFile=0x178) returned 0x1 [0068.626] GetFileSize (in: hFile=0x178, lpFileSizeHigh=0x31e4c0 | out: lpFileSizeHigh=0x31e4c0*=0x0) returned 0x8d4 [0068.626] ReadFile (in: hFile=0x178, lpBuffer=0x2677d80, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x31e46c, lpOverlapped=0x0 | out: lpBuffer=0x2677d80*, lpNumberOfBytesRead=0x31e46c*=0x8d4, lpOverlapped=0x0) returned 1 [0068.640] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\9QH4S0GZ\\BBE97O8[1].jpg", nBufferLength=0x105, lpBuffer=0x31deb0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\9QH4S0GZ\\BBE97O8[1].jpg", lpFilePart=0x0) returned 0x7e [0068.640] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e3a4) returned 1 [0068.640] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\9QH4S0GZ\\BBE97O8[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\9qh4s0gz\\bbe97o8[1].jpg"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x178 [0068.641] GetFileType (hFile=0x178) returned 0x1 [0068.641] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e3a0) returned 1 [0068.641] GetFileType (hFile=0x178) returned 0x1 [0068.642] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\9QH4S0GZ\\BBE97O8[1].jpg", nBufferLength=0x105, lpBuffer=0x31dfe4, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\9QH4S0GZ\\BBE97O8[1].jpg", lpFilePart=0x0) returned 0x7e [0068.642] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\9QH4S0GZ\\BBE97O8[1].jpg", nBufferLength=0x105, lpBuffer=0x31dfe4, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\9QH4S0GZ\\BBE97O8[1].jpg", lpFilePart=0x0) returned 0x7e [0068.642] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e444) returned 1 [0068.642] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\9QH4S0GZ\\BBE97O8[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\9qh4s0gz\\bbe97o8[1].jpg"), fInfoLevelId=0x0, lpFileInformation=0x31e4c0 | out: lpFileInformation=0x31e4c0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x458c8e50, ftCreationTime.dwHighDateTime=0x1d2faf3, ftLastAccessTime.dwLowDateTime=0x458c8e50, ftLastAccessTime.dwHighDateTime=0x1d2faf3, ftLastWriteTime.dwLowDateTime=0xc5c45a0, ftLastWriteTime.dwHighDateTime=0x1d6eb7f, nFileSizeHigh=0x0, nFileSizeLow=0x8e0)) returned 1 [0068.642] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e440) returned 1 [0068.642] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\9QH4S0GZ\\BBE97O8[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\9qh4s0gz\\bbe97o8[1].jpg"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\9QH4S0GZ\\BBE97O8[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\9qh4s0gz\\bbe97o8[1].jpg")) returned 1 [0068.643] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\9QH4S0GZ\\BBE9wSt[1].jpg", nBufferLength=0x105, lpBuffer=0x31dec4, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\9QH4S0GZ\\BBE9wSt[1].jpg", lpFilePart=0x0) returned 0x7e [0068.643] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e3b8) returned 1 [0068.643] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\9QH4S0GZ\\BBE9wSt[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\9qh4s0gz\\bbe9wst[1].jpg"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x178 [0068.643] GetFileType (hFile=0x178) returned 0x1 [0068.643] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e3b4) returned 1 [0068.643] GetFileType (hFile=0x178) returned 0x1 [0068.644] GetFileSize (in: hFile=0x178, lpFileSizeHigh=0x31e4c0 | out: lpFileSizeHigh=0x31e4c0*=0x0) returned 0x6e0 [0068.644] ReadFile (in: hFile=0x178, lpBuffer=0x26ca588, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x31e46c, lpOverlapped=0x0 | out: lpBuffer=0x26ca588*, lpNumberOfBytesRead=0x31e46c*=0x6e0, lpOverlapped=0x0) returned 1 [0068.659] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\9QH4S0GZ\\BBE9wSt[1].jpg", nBufferLength=0x105, lpBuffer=0x31deb0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\9QH4S0GZ\\BBE9wSt[1].jpg", lpFilePart=0x0) returned 0x7e [0068.659] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e3a4) returned 1 [0068.660] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\9QH4S0GZ\\BBE9wSt[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\9qh4s0gz\\bbe9wst[1].jpg"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x178 [0068.660] GetFileType (hFile=0x178) returned 0x1 [0068.660] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e3a0) returned 1 [0068.660] GetFileType (hFile=0x178) returned 0x1 [0068.661] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\9QH4S0GZ\\BBE9wSt[1].jpg", nBufferLength=0x105, lpBuffer=0x31dfe4, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\9QH4S0GZ\\BBE9wSt[1].jpg", lpFilePart=0x0) returned 0x7e [0068.661] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\9QH4S0GZ\\BBE9wSt[1].jpg", nBufferLength=0x105, lpBuffer=0x31dfe4, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\9QH4S0GZ\\BBE9wSt[1].jpg", lpFilePart=0x0) returned 0x7e [0068.661] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e444) returned 1 [0068.661] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\9QH4S0GZ\\BBE9wSt[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\9qh4s0gz\\bbe9wst[1].jpg"), fInfoLevelId=0x0, lpFileInformation=0x31e4c0 | out: lpFileInformation=0x31e4c0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x459d37f0, ftCreationTime.dwHighDateTime=0x1d2faf3, ftLastAccessTime.dwLowDateTime=0x459d37f0, ftLastAccessTime.dwHighDateTime=0x1d2faf3, ftLastWriteTime.dwLowDateTime=0xc5ea700, ftLastWriteTime.dwHighDateTime=0x1d6eb7f, nFileSizeHigh=0x0, nFileSizeLow=0x6f0)) returned 1 [0068.661] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e440) returned 1 [0068.662] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\9QH4S0GZ\\BBE9wSt[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\9qh4s0gz\\bbe9wst[1].jpg"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\9QH4S0GZ\\BBE9wSt[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\9qh4s0gz\\bbe9wst[1].jpg")) returned 1 [0068.662] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\9QH4S0GZ\\BBEcHle[1].jpg", nBufferLength=0x105, lpBuffer=0x31dec4, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\9QH4S0GZ\\BBEcHle[1].jpg", lpFilePart=0x0) returned 0x7e [0068.662] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e3b8) returned 1 [0068.662] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\9QH4S0GZ\\BBEcHle[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\9qh4s0gz\\bbechle[1].jpg"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x178 [0068.670] GetFileType (hFile=0x178) returned 0x1 [0068.670] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e3b4) returned 1 [0068.670] GetFileType (hFile=0x178) returned 0x1 [0068.670] GetFileSize (in: hFile=0x178, lpFileSizeHigh=0x31e4c0 | out: lpFileSizeHigh=0x31e4c0*=0x0) returned 0x8b9 [0068.671] ReadFile (in: hFile=0x178, lpBuffer=0x271c464, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x31e46c, lpOverlapped=0x0 | out: lpBuffer=0x271c464*, lpNumberOfBytesRead=0x31e46c*=0x8b9, lpOverlapped=0x0) returned 1 [0068.685] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\9QH4S0GZ\\BBEcHle[1].jpg", nBufferLength=0x105, lpBuffer=0x31deb0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\9QH4S0GZ\\BBEcHle[1].jpg", lpFilePart=0x0) returned 0x7e [0068.686] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e3a4) returned 1 [0068.686] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\9QH4S0GZ\\BBEcHle[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\9qh4s0gz\\bbechle[1].jpg"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x178 [0068.687] GetFileType (hFile=0x178) returned 0x1 [0068.687] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e3a0) returned 1 [0068.687] GetFileType (hFile=0x178) returned 0x1 [0068.687] WriteFile (in: hFile=0x178, lpBuffer=0x276cfb0*, nNumberOfBytesToWrite=0x8c0, lpNumberOfBytesWritten=0x31e434, lpOverlapped=0x0 | out: lpBuffer=0x276cfb0*, lpNumberOfBytesWritten=0x31e434*=0x8c0, lpOverlapped=0x0) returned 1 [0068.688] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\9QH4S0GZ\\BBEcHle[1].jpg", nBufferLength=0x105, lpBuffer=0x31dfe4, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\9QH4S0GZ\\BBEcHle[1].jpg", lpFilePart=0x0) returned 0x7e [0068.688] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\9QH4S0GZ\\BBEcHle[1].jpg", nBufferLength=0x105, lpBuffer=0x31dfe4, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\9QH4S0GZ\\BBEcHle[1].jpg", lpFilePart=0x0) returned 0x7e [0068.688] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e444) returned 1 [0068.688] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\9QH4S0GZ\\BBEcHle[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\9qh4s0gz\\bbechle[1].jpg"), fInfoLevelId=0x0, lpFileInformation=0x31e4c0 | out: lpFileInformation=0x31e4c0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x45a6bd70, ftCreationTime.dwHighDateTime=0x1d2faf3, ftLastAccessTime.dwLowDateTime=0x45a6bd70, ftLastAccessTime.dwHighDateTime=0x1d2faf3, ftLastWriteTime.dwLowDateTime=0xc6369c0, ftLastWriteTime.dwHighDateTime=0x1d6eb7f, nFileSizeHigh=0x0, nFileSizeLow=0x8c0)) returned 1 [0068.688] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e440) returned 1 [0068.688] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\9QH4S0GZ\\BBEcHle[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\9qh4s0gz\\bbechle[1].jpg"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\9QH4S0GZ\\BBEcHle[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\9qh4s0gz\\bbechle[1].jpg")) returned 1 [0068.689] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\9QH4S0GZ\\BBEdE0f[1].jpg", nBufferLength=0x105, lpBuffer=0x31dec4, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\9QH4S0GZ\\BBEdE0f[1].jpg", lpFilePart=0x0) returned 0x7e [0068.689] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e3b8) returned 1 [0068.689] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\9QH4S0GZ\\BBEdE0f[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\9qh4s0gz\\bbede0f[1].jpg"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x178 [0068.689] GetFileType (hFile=0x178) returned 0x1 [0068.689] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e3b4) returned 1 [0068.690] GetFileType (hFile=0x178) returned 0x1 [0068.690] GetFileSize (in: hFile=0x178, lpFileSizeHigh=0x31e4c0 | out: lpFileSizeHigh=0x31e4c0*=0x0) returned 0x2086 [0068.690] ReadFile (in: hFile=0x178, lpBuffer=0x276e380, nNumberOfBytesToRead=0x2086, lpNumberOfBytesRead=0x31e46c, lpOverlapped=0x0 | out: lpBuffer=0x276e380*, lpNumberOfBytesRead=0x31e46c*=0x2086, lpOverlapped=0x0) returned 1 [0068.704] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\9QH4S0GZ\\BBEdE0f[1].jpg", nBufferLength=0x105, lpBuffer=0x31deb0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\9QH4S0GZ\\BBEdE0f[1].jpg", lpFilePart=0x0) returned 0x7e [0068.704] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e3a4) returned 1 [0068.704] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\9QH4S0GZ\\BBEdE0f[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\9qh4s0gz\\bbede0f[1].jpg"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x178 [0068.705] GetFileType (hFile=0x178) returned 0x1 [0068.705] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e3a0) returned 1 [0068.705] GetFileType (hFile=0x178) returned 0x1 [0068.705] WriteFile (in: hFile=0x178, lpBuffer=0x27c5438*, nNumberOfBytesToWrite=0x2090, lpNumberOfBytesWritten=0x31e460, lpOverlapped=0x0 | out: lpBuffer=0x27c5438*, lpNumberOfBytesWritten=0x31e460*=0x2090, lpOverlapped=0x0) returned 1 [0068.706] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\9QH4S0GZ\\BBEdE0f[1].jpg", nBufferLength=0x105, lpBuffer=0x31dfe4, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\9QH4S0GZ\\BBEdE0f[1].jpg", lpFilePart=0x0) returned 0x7e [0068.706] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\9QH4S0GZ\\BBEdE0f[1].jpg", nBufferLength=0x105, lpBuffer=0x31dfe4, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\9QH4S0GZ\\BBEdE0f[1].jpg", lpFilePart=0x0) returned 0x7e [0068.706] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e444) returned 1 [0068.706] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\9QH4S0GZ\\BBEdE0f[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\9qh4s0gz\\bbede0f[1].jpg"), fInfoLevelId=0x0, lpFileInformation=0x31e4c0 | out: lpFileInformation=0x31e4c0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x458eefb0, ftCreationTime.dwHighDateTime=0x1d2faf3, ftLastAccessTime.dwLowDateTime=0x458eefb0, ftLastAccessTime.dwHighDateTime=0x1d2faf3, ftLastWriteTime.dwLowDateTime=0xc65cb20, ftLastWriteTime.dwHighDateTime=0x1d6eb7f, nFileSizeHigh=0x0, nFileSizeLow=0x2090)) returned 1 [0068.707] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e440) returned 1 [0068.707] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\9QH4S0GZ\\BBEdE0f[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\9qh4s0gz\\bbede0f[1].jpg"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\9QH4S0GZ\\BBEdE0f[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\9qh4s0gz\\bbede0f[1].jpg")) returned 1 [0068.707] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\9QH4S0GZ\\BBEdoQv[1].jpg", nBufferLength=0x105, lpBuffer=0x31dec4, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\9QH4S0GZ\\BBEdoQv[1].jpg", lpFilePart=0x0) returned 0x7e [0068.707] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e3b8) returned 1 [0068.707] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\9QH4S0GZ\\BBEdoQv[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\9qh4s0gz\\bbedoqv[1].jpg"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x178 [0068.708] GetFileType (hFile=0x178) returned 0x1 [0068.708] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e3b4) returned 1 [0068.708] GetFileType (hFile=0x178) returned 0x1 [0068.708] GetFileSize (in: hFile=0x178, lpFileSizeHigh=0x31e4c0 | out: lpFileSizeHigh=0x31e4c0*=0x0) returned 0x97b [0068.708] ReadFile (in: hFile=0x178, lpBuffer=0x27c83b4, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x31e46c, lpOverlapped=0x0 | out: lpBuffer=0x27c83b4*, lpNumberOfBytesRead=0x31e46c*=0x97b, lpOverlapped=0x0) returned 1 [0068.723] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\9QH4S0GZ\\BBEdoQv[1].jpg", nBufferLength=0x105, lpBuffer=0x31deb0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\9QH4S0GZ\\BBEdoQv[1].jpg", lpFilePart=0x0) returned 0x7e [0068.723] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e3a4) returned 1 [0068.723] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\9QH4S0GZ\\BBEdoQv[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\9qh4s0gz\\bbedoqv[1].jpg"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x178 [0068.724] GetFileType (hFile=0x178) returned 0x1 [0068.724] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e3a0) returned 1 [0068.724] GetFileType (hFile=0x178) returned 0x1 [0068.724] WriteFile (in: hFile=0x178, lpBuffer=0x28192c0*, nNumberOfBytesToWrite=0x980, lpNumberOfBytesWritten=0x31e434, lpOverlapped=0x0 | out: lpBuffer=0x28192c0*, lpNumberOfBytesWritten=0x31e434*=0x980, lpOverlapped=0x0) returned 1 [0068.725] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\9QH4S0GZ\\BBEdoQv[1].jpg", nBufferLength=0x105, lpBuffer=0x31dfe4, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\9QH4S0GZ\\BBEdoQv[1].jpg", lpFilePart=0x0) returned 0x7e [0068.725] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\9QH4S0GZ\\BBEdoQv[1].jpg", nBufferLength=0x105, lpBuffer=0x31dfe4, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\9QH4S0GZ\\BBEdoQv[1].jpg", lpFilePart=0x0) returned 0x7e [0068.725] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e444) returned 1 [0068.725] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\9QH4S0GZ\\BBEdoQv[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\9qh4s0gz\\bbedoqv[1].jpg"), fInfoLevelId=0x0, lpFileInformation=0x31e4c0 | out: lpFileInformation=0x31e4c0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xbe399c90, ftCreationTime.dwHighDateTime=0x1d2faf2, ftLastAccessTime.dwLowDateTime=0xbe399c90, ftLastAccessTime.dwHighDateTime=0x1d2faf2, ftLastWriteTime.dwLowDateTime=0xc682c80, ftLastWriteTime.dwHighDateTime=0x1d6eb7f, nFileSizeHigh=0x0, nFileSizeLow=0x980)) returned 1 [0068.725] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e440) returned 1 [0068.725] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\9QH4S0GZ\\BBEdoQv[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\9qh4s0gz\\bbedoqv[1].jpg"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\9QH4S0GZ\\BBEdoQv[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\9qh4s0gz\\bbedoqv[1].jpg")) returned 1 [0068.726] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\9QH4S0GZ\\BBEdqEy[1].jpg", nBufferLength=0x105, lpBuffer=0x31dec4, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\9QH4S0GZ\\BBEdqEy[1].jpg", lpFilePart=0x0) returned 0x7e [0068.726] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e3b8) returned 1 [0068.726] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\9QH4S0GZ\\BBEdqEy[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\9qh4s0gz\\bbedqey[1].jpg"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x178 [0068.727] GetFileType (hFile=0x178) returned 0x1 [0068.727] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e3b4) returned 1 [0068.727] GetFileType (hFile=0x178) returned 0x1 [0068.727] GetFileSize (in: hFile=0x178, lpFileSizeHigh=0x31e4c0 | out: lpFileSizeHigh=0x31e4c0*=0x0) returned 0x69a [0068.727] ReadFile (in: hFile=0x178, lpBuffer=0x281ad38, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x31e46c, lpOverlapped=0x0 | out: lpBuffer=0x281ad38*, lpNumberOfBytesRead=0x31e46c*=0x69a, lpOverlapped=0x0) returned 1 [0068.744] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\9QH4S0GZ\\BBEdqEy[1].jpg", nBufferLength=0x105, lpBuffer=0x31deb0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\9QH4S0GZ\\BBEdqEy[1].jpg", lpFilePart=0x0) returned 0x7e [0068.744] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e3a4) returned 1 [0068.744] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\9QH4S0GZ\\BBEdqEy[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\9qh4s0gz\\bbedqey[1].jpg"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x178 [0068.745] GetFileType (hFile=0x178) returned 0x1 [0068.745] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e3a0) returned 1 [0068.745] GetFileType (hFile=0x178) returned 0x1 [0068.745] WriteFile (in: hFile=0x178, lpBuffer=0x266cbe4*, nNumberOfBytesToWrite=0x6a0, lpNumberOfBytesWritten=0x31e434, lpOverlapped=0x0 | out: lpBuffer=0x266cbe4*, lpNumberOfBytesWritten=0x31e434*=0x6a0, lpOverlapped=0x0) returned 1 [0068.746] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\9QH4S0GZ\\BBEdqEy[1].jpg", nBufferLength=0x105, lpBuffer=0x31dfe4, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\9QH4S0GZ\\BBEdqEy[1].jpg", lpFilePart=0x0) returned 0x7e [0068.746] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\9QH4S0GZ\\BBEdqEy[1].jpg", nBufferLength=0x105, lpBuffer=0x31dfe4, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\9QH4S0GZ\\BBEdqEy[1].jpg", lpFilePart=0x0) returned 0x7e [0068.746] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e444) returned 1 [0068.746] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\9QH4S0GZ\\BBEdqEy[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\9qh4s0gz\\bbedqey[1].jpg"), fInfoLevelId=0x0, lpFileInformation=0x31e4c0 | out: lpFileInformation=0x31e4c0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x458a2cf0, ftCreationTime.dwHighDateTime=0x1d2faf3, ftLastAccessTime.dwLowDateTime=0x458a2cf0, ftLastAccessTime.dwHighDateTime=0x1d2faf3, ftLastWriteTime.dwLowDateTime=0xc6a8de0, ftLastWriteTime.dwHighDateTime=0x1d6eb7f, nFileSizeHigh=0x0, nFileSizeLow=0x6a0)) returned 1 [0068.746] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e440) returned 1 [0068.746] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\9QH4S0GZ\\BBEdqEy[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\9qh4s0gz\\bbedqey[1].jpg"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\9QH4S0GZ\\BBEdqEy[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\9qh4s0gz\\bbedqey[1].jpg")) returned 1 [0068.747] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\9QH4S0GZ\\BBEdtWw[1].jpg", nBufferLength=0x105, lpBuffer=0x31dec4, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\9QH4S0GZ\\BBEdtWw[1].jpg", lpFilePart=0x0) returned 0x7e [0068.747] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e3b8) returned 1 [0068.747] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\9QH4S0GZ\\BBEdtWw[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\9qh4s0gz\\bbedtww[1].jpg"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x178 [0068.747] GetFileType (hFile=0x178) returned 0x1 [0068.747] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e3b4) returned 1 [0068.748] GetFileType (hFile=0x178) returned 0x1 [0068.748] GetFileSize (in: hFile=0x178, lpFileSizeHigh=0x31e4c0 | out: lpFileSizeHigh=0x31e4c0*=0x0) returned 0x6d0 [0068.748] ReadFile (in: hFile=0x178, lpBuffer=0x266e690, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x31e46c, lpOverlapped=0x0 | out: lpBuffer=0x266e690*, lpNumberOfBytesRead=0x31e46c*=0x6d0, lpOverlapped=0x0) returned 1 [0068.762] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\9QH4S0GZ\\BBEdtWw[1].jpg", nBufferLength=0x105, lpBuffer=0x31deb0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\9QH4S0GZ\\BBEdtWw[1].jpg", lpFilePart=0x0) returned 0x7e [0068.762] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e3a4) returned 1 [0068.762] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\9QH4S0GZ\\BBEdtWw[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\9qh4s0gz\\bbedtww[1].jpg"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x178 [0068.763] GetFileType (hFile=0x178) returned 0x1 [0068.763] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e3a0) returned 1 [0068.763] GetFileType (hFile=0x178) returned 0x1 [0068.763] WriteFile (in: hFile=0x178, lpBuffer=0x26be9e0*, nNumberOfBytesToWrite=0x6e0, lpNumberOfBytesWritten=0x31e434, lpOverlapped=0x0 | out: lpBuffer=0x26be9e0*, lpNumberOfBytesWritten=0x31e434*=0x6e0, lpOverlapped=0x0) returned 1 [0068.764] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\9QH4S0GZ\\BBEdtWw[1].jpg", nBufferLength=0x105, lpBuffer=0x31dfe4, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\9QH4S0GZ\\BBEdtWw[1].jpg", lpFilePart=0x0) returned 0x7e [0068.764] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\9QH4S0GZ\\BBEdtWw[1].jpg", nBufferLength=0x105, lpBuffer=0x31dfe4, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\9QH4S0GZ\\BBEdtWw[1].jpg", lpFilePart=0x0) returned 0x7e [0068.764] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e444) returned 1 [0068.764] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\9QH4S0GZ\\BBEdtWw[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\9qh4s0gz\\bbedtww[1].jpg"), fInfoLevelId=0x0, lpFileInformation=0x31e4c0 | out: lpFileInformation=0x31e4c0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x45915110, ftCreationTime.dwHighDateTime=0x1d2faf3, ftLastAccessTime.dwLowDateTime=0x45915110, ftLastAccessTime.dwHighDateTime=0x1d2faf3, ftLastWriteTime.dwLowDateTime=0xc6cef40, ftLastWriteTime.dwHighDateTime=0x1d6eb7f, nFileSizeHigh=0x0, nFileSizeLow=0x6e0)) returned 1 [0068.764] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e440) returned 1 [0068.764] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\9QH4S0GZ\\BBEdtWw[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\9qh4s0gz\\bbedtww[1].jpg"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\9QH4S0GZ\\BBEdtWw[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\9qh4s0gz\\bbedtww[1].jpg")) returned 1 [0068.765] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\9QH4S0GZ\\BBEdXJj[1].jpg", nBufferLength=0x105, lpBuffer=0x31dec4, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\9QH4S0GZ\\BBEdXJj[1].jpg", lpFilePart=0x0) returned 0x7e [0068.765] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e3b8) returned 1 [0068.765] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\9QH4S0GZ\\BBEdXJj[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\9qh4s0gz\\bbedxjj[1].jpg"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x178 [0068.766] GetFileType (hFile=0x178) returned 0x1 [0068.766] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e3b4) returned 1 [0068.766] GetFileType (hFile=0x178) returned 0x1 [0068.766] GetFileSize (in: hFile=0x178, lpFileSizeHigh=0x31e4c0 | out: lpFileSizeHigh=0x31e4c0*=0x0) returned 0x687 [0068.766] ReadFile (in: hFile=0x178, lpBuffer=0x26c0444, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x31e46c, lpOverlapped=0x0 | out: lpBuffer=0x26c0444*, lpNumberOfBytesRead=0x31e46c*=0x687, lpOverlapped=0x0) returned 1 [0068.780] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\9QH4S0GZ\\BBEdXJj[1].jpg", nBufferLength=0x105, lpBuffer=0x31deb0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\9QH4S0GZ\\BBEdXJj[1].jpg", lpFilePart=0x0) returned 0x7e [0068.780] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e3a4) returned 1 [0068.781] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\9QH4S0GZ\\BBEdXJj[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\9qh4s0gz\\bbedxjj[1].jpg"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x178 [0068.782] GetFileType (hFile=0x178) returned 0x1 [0068.782] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e3a0) returned 1 [0068.782] GetFileType (hFile=0x178) returned 0x1 [0068.783] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\9QH4S0GZ\\BBEdXJj[1].jpg", nBufferLength=0x105, lpBuffer=0x31dfe4, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\9QH4S0GZ\\BBEdXJj[1].jpg", lpFilePart=0x0) returned 0x7e [0068.783] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\9QH4S0GZ\\BBEdXJj[1].jpg", nBufferLength=0x105, lpBuffer=0x31dfe4, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\9QH4S0GZ\\BBEdXJj[1].jpg", lpFilePart=0x0) returned 0x7e [0068.783] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e444) returned 1 [0068.783] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\9QH4S0GZ\\BBEdXJj[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\9qh4s0gz\\bbedxjj[1].jpg"), fInfoLevelId=0x0, lpFileInformation=0x31e4c0 | out: lpFileInformation=0x31e4c0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x45a1fab0, ftCreationTime.dwHighDateTime=0x1d2faf3, ftLastAccessTime.dwLowDateTime=0x45a1fab0, ftLastAccessTime.dwHighDateTime=0x1d2faf3, ftLastWriteTime.dwLowDateTime=0xc71b200, ftLastWriteTime.dwHighDateTime=0x1d6eb7f, nFileSizeHigh=0x0, nFileSizeLow=0x690)) returned 1 [0068.783] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e440) returned 1 [0068.783] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\9QH4S0GZ\\BBEdXJj[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\9qh4s0gz\\bbedxjj[1].jpg"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\9QH4S0GZ\\BBEdXJj[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\9qh4s0gz\\bbedxjj[1].jpg")) returned 1 [0068.783] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\9QH4S0GZ\\BBEeP0k[1].jpg", nBufferLength=0x105, lpBuffer=0x31dec4, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\9QH4S0GZ\\BBEeP0k[1].jpg", lpFilePart=0x0) returned 0x7e [0068.783] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e3b8) returned 1 [0068.783] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\9QH4S0GZ\\BBEeP0k[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\9qh4s0gz\\bbeep0k[1].jpg"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x178 [0068.784] GetFileType (hFile=0x178) returned 0x1 [0068.784] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e3b4) returned 1 [0068.784] GetFileType (hFile=0x178) returned 0x1 [0068.784] GetFileSize (in: hFile=0x178, lpFileSizeHigh=0x31e4c0 | out: lpFileSizeHigh=0x31e4c0*=0x0) returned 0x24c8 [0068.784] ReadFile (in: hFile=0x178, lpBuffer=0x2711874, nNumberOfBytesToRead=0x24c8, lpNumberOfBytesRead=0x31e46c, lpOverlapped=0x0 | out: lpBuffer=0x2711874*, lpNumberOfBytesRead=0x31e46c*=0x24c8, lpOverlapped=0x0) returned 1 [0068.799] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\9QH4S0GZ\\BBEeP0k[1].jpg", nBufferLength=0x105, lpBuffer=0x31deb0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\9QH4S0GZ\\BBEeP0k[1].jpg", lpFilePart=0x0) returned 0x7e [0068.799] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e3a4) returned 1 [0068.799] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\9QH4S0GZ\\BBEeP0k[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\9qh4s0gz\\bbeep0k[1].jpg"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x178 [0068.800] GetFileType (hFile=0x178) returned 0x1 [0068.800] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e3a0) returned 1 [0068.800] GetFileType (hFile=0x178) returned 0x1 [0068.800] WriteFile (in: hFile=0x178, lpBuffer=0x2769e68*, nNumberOfBytesToWrite=0x24d0, lpNumberOfBytesWritten=0x31e460, lpOverlapped=0x0 | out: lpBuffer=0x2769e68*, lpNumberOfBytesWritten=0x31e460*=0x24d0, lpOverlapped=0x0) returned 1 [0068.802] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\9QH4S0GZ\\BBEeP0k[1].jpg", nBufferLength=0x105, lpBuffer=0x31dfe4, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\9QH4S0GZ\\BBEeP0k[1].jpg", lpFilePart=0x0) returned 0x7e [0068.802] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\9QH4S0GZ\\BBEeP0k[1].jpg", nBufferLength=0x105, lpBuffer=0x31dfe4, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\9QH4S0GZ\\BBEeP0k[1].jpg", lpFilePart=0x0) returned 0x7e [0068.802] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e444) returned 1 [0068.802] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\9QH4S0GZ\\BBEeP0k[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\9qh4s0gz\\bbeep0k[1].jpg"), fInfoLevelId=0x0, lpFileInformation=0x31e4c0 | out: lpFileInformation=0x31e4c0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x457be4b0, ftCreationTime.dwHighDateTime=0x1d2faf3, ftLastAccessTime.dwLowDateTime=0x457be4b0, ftLastAccessTime.dwHighDateTime=0x1d2faf3, ftLastWriteTime.dwLowDateTime=0xc741360, ftLastWriteTime.dwHighDateTime=0x1d6eb7f, nFileSizeHigh=0x0, nFileSizeLow=0x24d0)) returned 1 [0068.802] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e440) returned 1 [0068.802] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\9QH4S0GZ\\BBEeP0k[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\9qh4s0gz\\bbeep0k[1].jpg"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\9QH4S0GZ\\BBEeP0k[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\9qh4s0gz\\bbeep0k[1].jpg")) returned 1 [0068.802] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\9QH4S0GZ\\BBEeTuf[1].jpg", nBufferLength=0x105, lpBuffer=0x31dec4, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\9QH4S0GZ\\BBEeTuf[1].jpg", lpFilePart=0x0) returned 0x7e [0068.802] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e3b8) returned 1 [0068.802] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\9QH4S0GZ\\BBEeTuf[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\9qh4s0gz\\bbeetuf[1].jpg"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x178 [0068.803] GetFileType (hFile=0x178) returned 0x1 [0068.803] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e3b4) returned 1 [0068.803] GetFileType (hFile=0x178) returned 0x1 [0068.803] GetFileSize (in: hFile=0x178, lpFileSizeHigh=0x31e4c0 | out: lpFileSizeHigh=0x31e4c0*=0x0) returned 0x3417 [0068.803] ReadFile (in: hFile=0x178, lpBuffer=0x276c89c, nNumberOfBytesToRead=0x3417, lpNumberOfBytesRead=0x31e46c, lpOverlapped=0x0 | out: lpBuffer=0x276c89c*, lpNumberOfBytesRead=0x31e46c*=0x3417, lpOverlapped=0x0) returned 1 [0068.818] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\9QH4S0GZ\\BBEeTuf[1].jpg", nBufferLength=0x105, lpBuffer=0x31deb0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\9QH4S0GZ\\BBEeTuf[1].jpg", lpFilePart=0x0) returned 0x7e [0068.818] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e3a4) returned 1 [0068.818] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\9QH4S0GZ\\BBEeTuf[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\9qh4s0gz\\bbeetuf[1].jpg"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x178 [0068.819] GetFileType (hFile=0x178) returned 0x1 [0068.819] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e3a0) returned 1 [0068.819] GetFileType (hFile=0x178) returned 0x1 [0068.819] WriteFile (in: hFile=0x178, lpBuffer=0x27c9b24*, nNumberOfBytesToWrite=0x3420, lpNumberOfBytesWritten=0x31e460, lpOverlapped=0x0 | out: lpBuffer=0x27c9b24*, lpNumberOfBytesWritten=0x31e460*=0x3420, lpOverlapped=0x0) returned 1 [0068.821] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\9QH4S0GZ\\BBEeTuf[1].jpg", nBufferLength=0x105, lpBuffer=0x31dfe4, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\9QH4S0GZ\\BBEeTuf[1].jpg", lpFilePart=0x0) returned 0x7e [0068.821] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\9QH4S0GZ\\BBEeTuf[1].jpg", nBufferLength=0x105, lpBuffer=0x31dfe4, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\9QH4S0GZ\\BBEeTuf[1].jpg", lpFilePart=0x0) returned 0x7e [0068.821] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e444) returned 1 [0068.821] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\9QH4S0GZ\\BBEeTuf[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\9qh4s0gz\\bbeetuf[1].jpg"), fInfoLevelId=0x0, lpFileInformation=0x31e4c0 | out: lpFileInformation=0x31e4c0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x45b76710, ftCreationTime.dwHighDateTime=0x1d2faf3, ftLastAccessTime.dwLowDateTime=0x45b76710, ftLastAccessTime.dwHighDateTime=0x1d2faf3, ftLastWriteTime.dwLowDateTime=0xc7674c0, ftLastWriteTime.dwHighDateTime=0x1d6eb7f, nFileSizeHigh=0x0, nFileSizeLow=0x3420)) returned 1 [0068.821] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e440) returned 1 [0068.821] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\9QH4S0GZ\\BBEeTuf[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\9qh4s0gz\\bbeetuf[1].jpg"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\9QH4S0GZ\\BBEeTuf[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\9qh4s0gz\\bbeetuf[1].jpg")) returned 1 [0068.821] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\9QH4S0GZ\\BBEfE6e[1].jpg", nBufferLength=0x105, lpBuffer=0x31dec4, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\9QH4S0GZ\\BBEfE6e[1].jpg", lpFilePart=0x0) returned 0x7e [0068.821] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e3b8) returned 1 [0068.821] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\9QH4S0GZ\\BBEfE6e[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\9qh4s0gz\\bbefe6e[1].jpg"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x178 [0068.822] GetFileType (hFile=0x178) returned 0x1 [0068.822] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e3b4) returned 1 [0068.822] GetFileType (hFile=0x178) returned 0x1 [0068.822] GetFileSize (in: hFile=0x178, lpFileSizeHigh=0x31e4c0 | out: lpFileSizeHigh=0x31e4c0*=0x0) returned 0xc0b [0068.823] ReadFile (in: hFile=0x178, lpBuffer=0x27ce0c0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x31e46c, lpOverlapped=0x0 | out: lpBuffer=0x27ce0c0*, lpNumberOfBytesRead=0x31e46c*=0xc0b, lpOverlapped=0x0) returned 1 [0068.837] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\9QH4S0GZ\\BBEfE6e[1].jpg", nBufferLength=0x105, lpBuffer=0x31deb0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\9QH4S0GZ\\BBEfE6e[1].jpg", lpFilePart=0x0) returned 0x7e [0068.837] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e3a4) returned 1 [0068.837] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\9QH4S0GZ\\BBEfE6e[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\9qh4s0gz\\bbefe6e[1].jpg"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x178 [0068.838] GetFileType (hFile=0x178) returned 0x1 [0068.838] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e3a0) returned 1 [0068.838] GetFileType (hFile=0x178) returned 0x1 [0068.839] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\9QH4S0GZ\\BBEfE6e[1].jpg", nBufferLength=0x105, lpBuffer=0x31dfe4, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\9QH4S0GZ\\BBEfE6e[1].jpg", lpFilePart=0x0) returned 0x7e [0068.839] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\9QH4S0GZ\\BBEfE6e[1].jpg", nBufferLength=0x105, lpBuffer=0x31dfe4, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\9QH4S0GZ\\BBEfE6e[1].jpg", lpFilePart=0x0) returned 0x7e [0068.839] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e444) returned 1 [0068.839] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\9QH4S0GZ\\BBEfE6e[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\9qh4s0gz\\bbefe6e[1].jpg"), fInfoLevelId=0x0, lpFileInformation=0x31e4c0 | out: lpFileInformation=0x31e4c0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x45798350, ftCreationTime.dwHighDateTime=0x1d2faf3, ftLastAccessTime.dwLowDateTime=0x45798350, ftLastAccessTime.dwHighDateTime=0x1d2faf3, ftLastWriteTime.dwLowDateTime=0xc78d620, ftLastWriteTime.dwHighDateTime=0x1d6eb7f, nFileSizeHigh=0x0, nFileSizeLow=0xc10)) returned 1 [0068.839] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e440) returned 1 [0068.839] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\9QH4S0GZ\\BBEfE6e[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\9qh4s0gz\\bbefe6e[1].jpg"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\9QH4S0GZ\\BBEfE6e[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\9qh4s0gz\\bbefe6e[1].jpg")) returned 1 [0068.840] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\9QH4S0GZ\\BBEfjuT[1].jpg", nBufferLength=0x105, lpBuffer=0x31dec4, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\9QH4S0GZ\\BBEfjuT[1].jpg", lpFilePart=0x0) returned 0x7e [0068.840] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e3b8) returned 1 [0068.840] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\9QH4S0GZ\\BBEfjuT[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\9qh4s0gz\\bbefjut[1].jpg"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x178 [0068.841] GetFileType (hFile=0x178) returned 0x1 [0068.841] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e3b4) returned 1 [0068.841] GetFileType (hFile=0x178) returned 0x1 [0068.841] GetFileSize (in: hFile=0x178, lpFileSizeHigh=0x31e4c0 | out: lpFileSizeHigh=0x31e4c0*=0x0) returned 0x3c4c [0068.841] ReadFile (in: hFile=0x178, lpBuffer=0x282106c, nNumberOfBytesToRead=0x3c4c, lpNumberOfBytesRead=0x31e46c, lpOverlapped=0x0 | out: lpBuffer=0x282106c*, lpNumberOfBytesRead=0x31e46c*=0x3c4c, lpOverlapped=0x0) returned 1 [0068.858] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\9QH4S0GZ\\BBEfjuT[1].jpg", nBufferLength=0x105, lpBuffer=0x31deb0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\9QH4S0GZ\\BBEfjuT[1].jpg", lpFilePart=0x0) returned 0x7e [0068.858] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e3a4) returned 1 [0068.858] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\9QH4S0GZ\\BBEfjuT[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\9qh4s0gz\\bbefjut[1].jpg"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x178 [0068.913] GetFileType (hFile=0x178) returned 0x1 [0068.913] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e3a0) returned 1 [0068.913] GetFileType (hFile=0x178) returned 0x1 [0068.913] WriteFile (in: hFile=0x178, lpBuffer=0x26841a4*, nNumberOfBytesToWrite=0x3c50, lpNumberOfBytesWritten=0x31e460, lpOverlapped=0x0 | out: lpBuffer=0x26841a4*, lpNumberOfBytesWritten=0x31e460*=0x3c50, lpOverlapped=0x0) returned 1 [0068.914] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\9QH4S0GZ\\BBEfjuT[1].jpg", nBufferLength=0x105, lpBuffer=0x31dfe4, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\9QH4S0GZ\\BBEfjuT[1].jpg", lpFilePart=0x0) returned 0x7e [0068.914] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\9QH4S0GZ\\BBEfjuT[1].jpg", nBufferLength=0x105, lpBuffer=0x31dfe4, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\9QH4S0GZ\\BBEfjuT[1].jpg", lpFilePart=0x0) returned 0x7e [0068.914] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e444) returned 1 [0068.915] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\9QH4S0GZ\\BBEfjuT[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\9qh4s0gz\\bbefjut[1].jpg"), fInfoLevelId=0x0, lpFileInformation=0x31e4c0 | out: lpFileInformation=0x31e4c0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x45510bf0, ftCreationTime.dwHighDateTime=0x1d2faf3, ftLastAccessTime.dwLowDateTime=0x45510bf0, ftLastAccessTime.dwHighDateTime=0x1d2faf3, ftLastWriteTime.dwLowDateTime=0xc84bd00, ftLastWriteTime.dwHighDateTime=0x1d6eb7f, nFileSizeHigh=0x0, nFileSizeLow=0x3c50)) returned 1 [0068.915] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e440) returned 1 [0068.915] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\9QH4S0GZ\\BBEfjuT[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\9qh4s0gz\\bbefjut[1].jpg"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\9QH4S0GZ\\BBEfjuT[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\9qh4s0gz\\bbefjut[1].jpg")) returned 1 [0068.915] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\9QH4S0GZ\\BBEg9QV[1].jpg", nBufferLength=0x105, lpBuffer=0x31dec4, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\9QH4S0GZ\\BBEg9QV[1].jpg", lpFilePart=0x0) returned 0x7e [0068.915] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e3b8) returned 1 [0068.915] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\9QH4S0GZ\\BBEg9QV[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\9qh4s0gz\\bbeg9qv[1].jpg"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x178 [0068.916] GetFileType (hFile=0x178) returned 0x1 [0068.916] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e3b4) returned 1 [0068.916] GetFileType (hFile=0x178) returned 0x1 [0068.916] GetFileSize (in: hFile=0x178, lpFileSizeHigh=0x31e4c0 | out: lpFileSizeHigh=0x31e4c0*=0x0) returned 0x1f0e [0068.916] ReadFile (in: hFile=0x178, lpBuffer=0x2688358, nNumberOfBytesToRead=0x1f0e, lpNumberOfBytesRead=0x31e46c, lpOverlapped=0x0 | out: lpBuffer=0x2688358*, lpNumberOfBytesRead=0x31e46c*=0x1f0e, lpOverlapped=0x0) returned 1 [0068.931] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\9QH4S0GZ\\BBEg9QV[1].jpg", nBufferLength=0x105, lpBuffer=0x31deb0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\9QH4S0GZ\\BBEg9QV[1].jpg", lpFilePart=0x0) returned 0x7e [0068.931] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e3a4) returned 1 [0068.931] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\9QH4S0GZ\\BBEg9QV[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\9qh4s0gz\\bbeg9qv[1].jpg"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x178 [0068.932] GetFileType (hFile=0x178) returned 0x1 [0068.932] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e3a0) returned 1 [0068.933] GetFileType (hFile=0x178) returned 0x1 [0068.933] WriteFile (in: hFile=0x178, lpBuffer=0x26dedec*, nNumberOfBytesToWrite=0x1f10, lpNumberOfBytesWritten=0x31e460, lpOverlapped=0x0 | out: lpBuffer=0x26dedec*, lpNumberOfBytesWritten=0x31e460*=0x1f10, lpOverlapped=0x0) returned 1 [0068.934] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\9QH4S0GZ\\BBEg9QV[1].jpg", nBufferLength=0x105, lpBuffer=0x31dfe4, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\9QH4S0GZ\\BBEg9QV[1].jpg", lpFilePart=0x0) returned 0x7e [0068.934] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\9QH4S0GZ\\BBEg9QV[1].jpg", nBufferLength=0x105, lpBuffer=0x31dfe4, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\9QH4S0GZ\\BBEg9QV[1].jpg", lpFilePart=0x0) returned 0x7e [0068.934] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e444) returned 1 [0068.934] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\9QH4S0GZ\\BBEg9QV[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\9qh4s0gz\\bbeg9qv[1].jpg"), fInfoLevelId=0x0, lpFileInformation=0x31e4c0 | out: lpFileInformation=0x31e4c0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x459f9950, ftCreationTime.dwHighDateTime=0x1d2faf3, ftLastAccessTime.dwLowDateTime=0x459f9950, ftLastAccessTime.dwHighDateTime=0x1d2faf3, ftLastWriteTime.dwLowDateTime=0xc871e60, ftLastWriteTime.dwHighDateTime=0x1d6eb7f, nFileSizeHigh=0x0, nFileSizeLow=0x1f10)) returned 1 [0068.934] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e440) returned 1 [0068.934] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\9QH4S0GZ\\BBEg9QV[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\9qh4s0gz\\bbeg9qv[1].jpg"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\9QH4S0GZ\\BBEg9QV[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\9qh4s0gz\\bbeg9qv[1].jpg")) returned 1 [0068.934] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\9QH4S0GZ\\BBEgGSl[1].jpg", nBufferLength=0x105, lpBuffer=0x31dec4, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\9QH4S0GZ\\BBEgGSl[1].jpg", lpFilePart=0x0) returned 0x7e [0068.934] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e3b8) returned 1 [0068.934] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\9QH4S0GZ\\BBEgGSl[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\9qh4s0gz\\bbeggsl[1].jpg"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x178 [0068.935] GetFileType (hFile=0x178) returned 0x1 [0068.935] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e3b4) returned 1 [0068.935] GetFileType (hFile=0x178) returned 0x1 [0068.936] GetFileSize (in: hFile=0x178, lpFileSizeHigh=0x31e4c0 | out: lpFileSizeHigh=0x31e4c0*=0x0) returned 0x980 [0068.936] ReadFile (in: hFile=0x178, lpBuffer=0x26e1bec, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x31e46c, lpOverlapped=0x0 | out: lpBuffer=0x26e1bec*, lpNumberOfBytesRead=0x31e46c*=0x980, lpOverlapped=0x0) returned 1 [0068.950] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\9QH4S0GZ\\BBEgGSl[1].jpg", nBufferLength=0x105, lpBuffer=0x31deb0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\9QH4S0GZ\\BBEgGSl[1].jpg", lpFilePart=0x0) returned 0x7e [0068.950] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e3a4) returned 1 [0068.950] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\9QH4S0GZ\\BBEgGSl[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\9qh4s0gz\\bbeggsl[1].jpg"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x178 [0068.951] GetFileType (hFile=0x178) returned 0x1 [0068.951] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e3a0) returned 1 [0068.951] GetFileType (hFile=0x178) returned 0x1 [0068.951] WriteFile (in: hFile=0x178, lpBuffer=0x2732b50*, nNumberOfBytesToWrite=0x990, lpNumberOfBytesWritten=0x31e434, lpOverlapped=0x0 | out: lpBuffer=0x2732b50*, lpNumberOfBytesWritten=0x31e434*=0x990, lpOverlapped=0x0) returned 1 [0068.953] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\9QH4S0GZ\\BBEgGSl[1].jpg", nBufferLength=0x105, lpBuffer=0x31dfe4, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\9QH4S0GZ\\BBEgGSl[1].jpg", lpFilePart=0x0) returned 0x7e [0068.953] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\9QH4S0GZ\\BBEgGSl[1].jpg", nBufferLength=0x105, lpBuffer=0x31dfe4, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\9QH4S0GZ\\BBEgGSl[1].jpg", lpFilePart=0x0) returned 0x7e [0068.953] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e444) returned 1 [0068.953] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\9QH4S0GZ\\BBEgGSl[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\9qh4s0gz\\bbeggsl[1].jpg"), fInfoLevelId=0x0, lpFileInformation=0x31e4c0 | out: lpFileInformation=0x31e4c0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x4587cb90, ftCreationTime.dwHighDateTime=0x1d2faf3, ftLastAccessTime.dwLowDateTime=0x4587cb90, ftLastAccessTime.dwHighDateTime=0x1d2faf3, ftLastWriteTime.dwLowDateTime=0xc8be120, ftLastWriteTime.dwHighDateTime=0x1d6eb7f, nFileSizeHigh=0x0, nFileSizeLow=0x990)) returned 1 [0068.953] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e440) returned 1 [0068.953] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\9QH4S0GZ\\BBEgGSl[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\9qh4s0gz\\bbeggsl[1].jpg"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\9QH4S0GZ\\BBEgGSl[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\9qh4s0gz\\bbeggsl[1].jpg")) returned 1 [0068.953] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\9QH4S0GZ\\BBEgiYw[1].jpg", nBufferLength=0x105, lpBuffer=0x31dec4, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\9QH4S0GZ\\BBEgiYw[1].jpg", lpFilePart=0x0) returned 0x7e [0068.953] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e3b8) returned 1 [0068.953] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\9QH4S0GZ\\BBEgiYw[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\9qh4s0gz\\bbegiyw[1].jpg"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x178 [0068.954] GetFileType (hFile=0x178) returned 0x1 [0068.954] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e3b4) returned 1 [0068.954] GetFileType (hFile=0x178) returned 0x1 [0068.954] GetFileSize (in: hFile=0x178, lpFileSizeHigh=0x31e4c0 | out: lpFileSizeHigh=0x31e4c0*=0x0) returned 0x23fd [0068.954] ReadFile (in: hFile=0x178, lpBuffer=0x2733f20, nNumberOfBytesToRead=0x23fd, lpNumberOfBytesRead=0x31e46c, lpOverlapped=0x0 | out: lpBuffer=0x2733f20*, lpNumberOfBytesRead=0x31e46c*=0x23fd, lpOverlapped=0x0) returned 1 [0068.969] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\9QH4S0GZ\\BBEgiYw[1].jpg", nBufferLength=0x105, lpBuffer=0x31deb0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\9QH4S0GZ\\BBEgiYw[1].jpg", lpFilePart=0x0) returned 0x7e [0068.969] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e3a4) returned 1 [0068.969] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\9QH4S0GZ\\BBEgiYw[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\9qh4s0gz\\bbegiyw[1].jpg"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x178 [0068.970] GetFileType (hFile=0x178) returned 0x1 [0068.970] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e3a0) returned 1 [0068.970] GetFileType (hFile=0x178) returned 0x1 [0068.970] WriteFile (in: hFile=0x178, lpBuffer=0x278c108*, nNumberOfBytesToWrite=0x2400, lpNumberOfBytesWritten=0x31e460, lpOverlapped=0x0 | out: lpBuffer=0x278c108*, lpNumberOfBytesWritten=0x31e460*=0x2400, lpOverlapped=0x0) returned 1 [0068.971] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\9QH4S0GZ\\BBEgiYw[1].jpg", nBufferLength=0x105, lpBuffer=0x31dfe4, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\9QH4S0GZ\\BBEgiYw[1].jpg", lpFilePart=0x0) returned 0x7e [0068.971] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\9QH4S0GZ\\BBEgiYw[1].jpg", nBufferLength=0x105, lpBuffer=0x31dfe4, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\9QH4S0GZ\\BBEgiYw[1].jpg", lpFilePart=0x0) returned 0x7e [0068.971] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e444) returned 1 [0068.971] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\9QH4S0GZ\\BBEgiYw[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\9qh4s0gz\\bbegiyw[1].jpg"), fInfoLevelId=0x0, lpFileInformation=0x31e4c0 | out: lpFileInformation=0x31e4c0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x458308d0, ftCreationTime.dwHighDateTime=0x1d2faf3, ftLastAccessTime.dwLowDateTime=0x458308d0, ftLastAccessTime.dwHighDateTime=0x1d2faf3, ftLastWriteTime.dwLowDateTime=0xc8e4280, ftLastWriteTime.dwHighDateTime=0x1d6eb7f, nFileSizeHigh=0x0, nFileSizeLow=0x2400)) returned 1 [0068.972] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e440) returned 1 [0068.972] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\9QH4S0GZ\\BBEgiYw[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\9qh4s0gz\\bbegiyw[1].jpg"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\9QH4S0GZ\\BBEgiYw[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\9qh4s0gz\\bbegiyw[1].jpg")) returned 1 [0068.972] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\9QH4S0GZ\\BBEgJfz[1].jpg", nBufferLength=0x105, lpBuffer=0x31dec4, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\9QH4S0GZ\\BBEgJfz[1].jpg", lpFilePart=0x0) returned 0x7e [0068.972] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e3b8) returned 1 [0068.972] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\9QH4S0GZ\\BBEgJfz[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\9qh4s0gz\\bbegjfz[1].jpg"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x178 [0068.973] GetFileType (hFile=0x178) returned 0x1 [0068.973] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e3b4) returned 1 [0068.973] GetFileType (hFile=0x178) returned 0x1 [0068.973] GetFileSize (in: hFile=0x178, lpFileSizeHigh=0x31e4c0 | out: lpFileSizeHigh=0x31e4c0*=0x0) returned 0x1a59 [0068.973] ReadFile (in: hFile=0x178, lpBuffer=0x278ea6c, nNumberOfBytesToRead=0x1a59, lpNumberOfBytesRead=0x31e46c, lpOverlapped=0x0 | out: lpBuffer=0x278ea6c*, lpNumberOfBytesRead=0x31e46c*=0x1a59, lpOverlapped=0x0) returned 1 [0068.988] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\9QH4S0GZ\\BBEgJfz[1].jpg", nBufferLength=0x105, lpBuffer=0x31deb0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\9QH4S0GZ\\BBEgJfz[1].jpg", lpFilePart=0x0) returned 0x7e [0068.988] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e3a4) returned 1 [0068.988] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\9QH4S0GZ\\BBEgJfz[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\9qh4s0gz\\bbegjfz[1].jpg"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x178 [0068.989] GetFileType (hFile=0x178) returned 0x1 [0068.989] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e3a0) returned 1 [0068.989] GetFileType (hFile=0x178) returned 0x1 [0068.989] WriteFile (in: hFile=0x178, lpBuffer=0x27e3c34*, nNumberOfBytesToWrite=0x1a60, lpNumberOfBytesWritten=0x31e460, lpOverlapped=0x0 | out: lpBuffer=0x27e3c34*, lpNumberOfBytesWritten=0x31e460*=0x1a60, lpOverlapped=0x0) returned 1 [0068.990] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\9QH4S0GZ\\BBEgJfz[1].jpg", nBufferLength=0x105, lpBuffer=0x31dfe4, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\9QH4S0GZ\\BBEgJfz[1].jpg", lpFilePart=0x0) returned 0x7e [0068.990] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\9QH4S0GZ\\BBEgJfz[1].jpg", nBufferLength=0x105, lpBuffer=0x31dfe4, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\9QH4S0GZ\\BBEgJfz[1].jpg", lpFilePart=0x0) returned 0x7e [0068.990] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e444) returned 1 [0068.990] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\9QH4S0GZ\\BBEgJfz[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\9qh4s0gz\\bbegjfz[1].jpg"), fInfoLevelId=0x0, lpFileInformation=0x31e4c0 | out: lpFileInformation=0x31e4c0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x467cf930, ftCreationTime.dwHighDateTime=0x1d2faf3, ftLastAccessTime.dwLowDateTime=0x467cf930, ftLastAccessTime.dwHighDateTime=0x1d2faf3, ftLastWriteTime.dwLowDateTime=0xc90a3e0, ftLastWriteTime.dwHighDateTime=0x1d6eb7f, nFileSizeHigh=0x0, nFileSizeLow=0x1a60)) returned 1 [0068.990] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e440) returned 1 [0068.990] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\9QH4S0GZ\\BBEgJfz[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\9qh4s0gz\\bbegjfz[1].jpg"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\9QH4S0GZ\\BBEgJfz[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\9qh4s0gz\\bbegjfz[1].jpg")) returned 1 [0068.990] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\9QH4S0GZ\\BBEgqtY[1].jpg", nBufferLength=0x105, lpBuffer=0x31dec4, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\9QH4S0GZ\\BBEgqtY[1].jpg", lpFilePart=0x0) returned 0x7e [0068.990] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e3b8) returned 1 [0068.991] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\9QH4S0GZ\\BBEgqtY[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\9qh4s0gz\\bbegqty[1].jpg"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x178 [0068.991] GetFileType (hFile=0x178) returned 0x1 [0068.991] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e3b4) returned 1 [0068.991] GetFileType (hFile=0x178) returned 0x1 [0068.991] GetFileSize (in: hFile=0x178, lpFileSizeHigh=0x31e4c0 | out: lpFileSizeHigh=0x31e4c0*=0x0) returned 0x7b0 [0068.991] ReadFile (in: hFile=0x178, lpBuffer=0x27e63b4, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x31e46c, lpOverlapped=0x0 | out: lpBuffer=0x27e63b4*, lpNumberOfBytesRead=0x31e46c*=0x7b0, lpOverlapped=0x0) returned 1 [0069.006] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\9QH4S0GZ\\BBEgqtY[1].jpg", nBufferLength=0x105, lpBuffer=0x31deb0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\9QH4S0GZ\\BBEgqtY[1].jpg", lpFilePart=0x0) returned 0x7e [0069.006] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e3a4) returned 1 [0069.006] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\9QH4S0GZ\\BBEgqtY[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\9qh4s0gz\\bbegqty[1].jpg"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x178 [0069.007] GetFileType (hFile=0x178) returned 0x1 [0069.007] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e3a0) returned 1 [0069.007] GetFileType (hFile=0x178) returned 0x1 [0069.008] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\9QH4S0GZ\\BBEgqtY[1].jpg", nBufferLength=0x105, lpBuffer=0x31dfe4, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\9QH4S0GZ\\BBEgqtY[1].jpg", lpFilePart=0x0) returned 0x7e [0069.008] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\9QH4S0GZ\\BBEgqtY[1].jpg", nBufferLength=0x105, lpBuffer=0x31dfe4, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\9QH4S0GZ\\BBEgqtY[1].jpg", lpFilePart=0x0) returned 0x7e [0069.008] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e444) returned 1 [0069.008] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\9QH4S0GZ\\BBEgqtY[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\9qh4s0gz\\bbegqty[1].jpg"), fInfoLevelId=0x0, lpFileInformation=0x31e4c0 | out: lpFileInformation=0x31e4c0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x45725f30, ftCreationTime.dwHighDateTime=0x1d2faf3, ftLastAccessTime.dwLowDateTime=0x45725f30, ftLastAccessTime.dwHighDateTime=0x1d2faf3, ftLastWriteTime.dwLowDateTime=0xc930540, ftLastWriteTime.dwHighDateTime=0x1d6eb7f, nFileSizeHigh=0x0, nFileSizeLow=0x7c0)) returned 1 [0069.008] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e440) returned 1 [0069.008] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\9QH4S0GZ\\BBEgqtY[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\9qh4s0gz\\bbegqty[1].jpg"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\9QH4S0GZ\\BBEgqtY[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\9qh4s0gz\\bbegqty[1].jpg")) returned 1 [0069.009] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\9QH4S0GZ\\BBEgsz3[1].jpg", nBufferLength=0x105, lpBuffer=0x31dec4, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\9QH4S0GZ\\BBEgsz3[1].jpg", lpFilePart=0x0) returned 0x7e [0069.009] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e3b8) returned 1 [0069.009] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\9QH4S0GZ\\BBEgsz3[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\9qh4s0gz\\bbegsz3[1].jpg"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x178 [0069.009] GetFileType (hFile=0x178) returned 0x1 [0069.009] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e3b4) returned 1 [0069.009] GetFileType (hFile=0x178) returned 0x1 [0069.010] GetFileSize (in: hFile=0x178, lpFileSizeHigh=0x31e4c0 | out: lpFileSizeHigh=0x31e4c0*=0x0) returned 0x44ec [0069.010] ReadFile (in: hFile=0x178, lpBuffer=0x2837dd8, nNumberOfBytesToRead=0x44ec, lpNumberOfBytesRead=0x31e46c, lpOverlapped=0x0 | out: lpBuffer=0x2837dd8*, lpNumberOfBytesRead=0x31e46c*=0x44ec, lpOverlapped=0x0) returned 1 [0069.027] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\9QH4S0GZ\\BBEgsz3[1].jpg", nBufferLength=0x105, lpBuffer=0x31deb0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\9QH4S0GZ\\BBEgsz3[1].jpg", lpFilePart=0x0) returned 0x7e [0069.027] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e3a4) returned 1 [0069.027] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\9QH4S0GZ\\BBEgsz3[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\9qh4s0gz\\bbegsz3[1].jpg"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x178 [0069.028] GetFileType (hFile=0x178) returned 0x1 [0069.028] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e3a0) returned 1 [0069.028] GetFileType (hFile=0x178) returned 0x1 [0069.028] WriteFile (in: hFile=0x178, lpBuffer=0x269acf4*, nNumberOfBytesToWrite=0x44f0, lpNumberOfBytesWritten=0x31e460, lpOverlapped=0x0 | out: lpBuffer=0x269acf4*, lpNumberOfBytesWritten=0x31e460*=0x44f0, lpOverlapped=0x0) returned 1 [0069.029] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\9QH4S0GZ\\BBEgsz3[1].jpg", nBufferLength=0x105, lpBuffer=0x31dfe4, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\9QH4S0GZ\\BBEgsz3[1].jpg", lpFilePart=0x0) returned 0x7e [0069.029] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\9QH4S0GZ\\BBEgsz3[1].jpg", nBufferLength=0x105, lpBuffer=0x31dfe4, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\9QH4S0GZ\\BBEgsz3[1].jpg", lpFilePart=0x0) returned 0x7e [0069.029] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e444) returned 1 [0069.029] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\9QH4S0GZ\\BBEgsz3[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\9qh4s0gz\\bbegsz3[1].jpg"), fInfoLevelId=0x0, lpFileInformation=0x31e4c0 | out: lpFileInformation=0x31e4c0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x467cf930, ftCreationTime.dwHighDateTime=0x1d2faf3, ftLastAccessTime.dwLowDateTime=0x467cf930, ftLastAccessTime.dwHighDateTime=0x1d2faf3, ftLastWriteTime.dwLowDateTime=0xc9566a0, ftLastWriteTime.dwHighDateTime=0x1d6eb7f, nFileSizeHigh=0x0, nFileSizeLow=0x44f0)) returned 1 [0069.029] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e440) returned 1 [0069.030] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\9QH4S0GZ\\BBEgsz3[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\9qh4s0gz\\bbegsz3[1].jpg"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\9QH4S0GZ\\BBEgsz3[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\9qh4s0gz\\bbegsz3[1].jpg")) returned 1 [0069.030] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\9QH4S0GZ\\BBEgtcS[1].jpg", nBufferLength=0x105, lpBuffer=0x31dec4, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\9QH4S0GZ\\BBEgtcS[1].jpg", lpFilePart=0x0) returned 0x7e [0069.034] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e3b8) returned 1 [0069.034] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\9QH4S0GZ\\BBEgtcS[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\9qh4s0gz\\bbegtcs[1].jpg"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x178 [0069.035] GetFileType (hFile=0x178) returned 0x1 [0069.035] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e3b4) returned 1 [0069.035] GetFileType (hFile=0x178) returned 0x1 [0069.035] GetFileSize (in: hFile=0x178, lpFileSizeHigh=0x31e4c0 | out: lpFileSizeHigh=0x31e4c0*=0x0) returned 0x171b [0069.036] ReadFile (in: hFile=0x178, lpBuffer=0x269f748, nNumberOfBytesToRead=0x171b, lpNumberOfBytesRead=0x31e46c, lpOverlapped=0x0 | out: lpBuffer=0x269f748*, lpNumberOfBytesRead=0x31e46c*=0x171b, lpOverlapped=0x0) returned 1 [0069.050] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\9QH4S0GZ\\BBEgtcS[1].jpg", nBufferLength=0x105, lpBuffer=0x31deb0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\9QH4S0GZ\\BBEgtcS[1].jpg", lpFilePart=0x0) returned 0x7e [0069.050] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e3a4) returned 1 [0069.050] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\9QH4S0GZ\\BBEgtcS[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\9qh4s0gz\\bbegtcs[1].jpg"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x178 [0069.054] GetFileType (hFile=0x178) returned 0x1 [0069.054] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e3a0) returned 1 [0069.054] GetFileType (hFile=0x178) returned 0x1 [0069.054] WriteFile (in: hFile=0x178, lpBuffer=0x26f3a2c*, nNumberOfBytesToWrite=0x1720, lpNumberOfBytesWritten=0x31e460, lpOverlapped=0x0 | out: lpBuffer=0x26f3a2c*, lpNumberOfBytesWritten=0x31e460*=0x1720, lpOverlapped=0x0) returned 1 [0069.055] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\9QH4S0GZ\\BBEgtcS[1].jpg", nBufferLength=0x105, lpBuffer=0x31dfe4, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\9QH4S0GZ\\BBEgtcS[1].jpg", lpFilePart=0x0) returned 0x7e [0069.055] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\9QH4S0GZ\\BBEgtcS[1].jpg", nBufferLength=0x105, lpBuffer=0x31dfe4, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\9QH4S0GZ\\BBEgtcS[1].jpg", lpFilePart=0x0) returned 0x7e [0069.055] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e444) returned 1 [0069.055] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\9QH4S0GZ\\BBEgtcS[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\9qh4s0gz\\bbegtcs[1].jpg"), fInfoLevelId=0x0, lpFileInformation=0x31e4c0 | out: lpFileInformation=0x31e4c0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xbde8add0, ftCreationTime.dwHighDateTime=0x1d2faf2, ftLastAccessTime.dwLowDateTime=0xbde8add0, ftLastAccessTime.dwHighDateTime=0x1d2faf2, ftLastWriteTime.dwLowDateTime=0xc9a2960, ftLastWriteTime.dwHighDateTime=0x1d6eb7f, nFileSizeHigh=0x0, nFileSizeLow=0x1720)) returned 1 [0069.055] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e440) returned 1 [0069.055] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\9QH4S0GZ\\BBEgtcS[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\9qh4s0gz\\bbegtcs[1].jpg"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\9QH4S0GZ\\BBEgtcS[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\9qh4s0gz\\bbegtcs[1].jpg")) returned 1 [0069.055] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\9QH4S0GZ\\BBEgtcS[2].jpg", nBufferLength=0x105, lpBuffer=0x31dec4, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\9QH4S0GZ\\BBEgtcS[2].jpg", lpFilePart=0x0) returned 0x7e [0069.055] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e3b8) returned 1 [0069.055] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\9QH4S0GZ\\BBEgtcS[2].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\9qh4s0gz\\bbegtcs[2].jpg"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x178 [0069.056] GetFileType (hFile=0x178) returned 0x1 [0069.056] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e3b4) returned 1 [0069.056] GetFileType (hFile=0x178) returned 0x1 [0069.056] GetFileSize (in: hFile=0x178, lpFileSizeHigh=0x31e4c0 | out: lpFileSizeHigh=0x31e4c0*=0x0) returned 0x1826 [0069.056] ReadFile (in: hFile=0x178, lpBuffer=0x26f56b0, nNumberOfBytesToRead=0x1826, lpNumberOfBytesRead=0x31e46c, lpOverlapped=0x0 | out: lpBuffer=0x26f56b0*, lpNumberOfBytesRead=0x31e46c*=0x1826, lpOverlapped=0x0) returned 1 [0069.071] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\9QH4S0GZ\\BBEgtcS[2].jpg", nBufferLength=0x105, lpBuffer=0x31deb0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\9QH4S0GZ\\BBEgtcS[2].jpg", lpFilePart=0x0) returned 0x7e [0069.071] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e3a4) returned 1 [0069.071] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\9QH4S0GZ\\BBEgtcS[2].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\9qh4s0gz\\bbegtcs[2].jpg"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x178 [0069.072] GetFileType (hFile=0x178) returned 0x1 [0069.072] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e3a0) returned 1 [0069.072] GetFileType (hFile=0x178) returned 0x1 [0069.072] WriteFile (in: hFile=0x178, lpBuffer=0x2749d88*, nNumberOfBytesToWrite=0x1830, lpNumberOfBytesWritten=0x31e460, lpOverlapped=0x0 | out: lpBuffer=0x2749d88*, lpNumberOfBytesWritten=0x31e460*=0x1830, lpOverlapped=0x0) returned 1 [0069.073] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\9QH4S0GZ\\BBEgtcS[2].jpg", nBufferLength=0x105, lpBuffer=0x31dfe4, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\9QH4S0GZ\\BBEgtcS[2].jpg", lpFilePart=0x0) returned 0x7e [0069.073] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\9QH4S0GZ\\BBEgtcS[2].jpg", nBufferLength=0x105, lpBuffer=0x31dfe4, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\9QH4S0GZ\\BBEgtcS[2].jpg", lpFilePart=0x0) returned 0x7e [0069.073] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e444) returned 1 [0069.073] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\9QH4S0GZ\\BBEgtcS[2].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\9qh4s0gz\\bbegtcs[2].jpg"), fInfoLevelId=0x0, lpFileInformation=0x31e4c0 | out: lpFileInformation=0x31e4c0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x457721f0, ftCreationTime.dwHighDateTime=0x1d2faf3, ftLastAccessTime.dwLowDateTime=0x457721f0, ftLastAccessTime.dwHighDateTime=0x1d2faf3, ftLastWriteTime.dwLowDateTime=0xc9c8ac0, ftLastWriteTime.dwHighDateTime=0x1d6eb7f, nFileSizeHigh=0x0, nFileSizeLow=0x1830)) returned 1 [0069.073] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e440) returned 1 [0069.074] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\9QH4S0GZ\\BBEgtcS[2].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\9qh4s0gz\\bbegtcs[2].jpg"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\9QH4S0GZ\\BBEgtcS[2].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\9qh4s0gz\\bbegtcs[2].jpg")) returned 1 [0069.074] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\9QH4S0GZ\\BBEgx5f[1].jpg", nBufferLength=0x105, lpBuffer=0x31dec4, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\9QH4S0GZ\\BBEgx5f[1].jpg", lpFilePart=0x0) returned 0x7e [0069.074] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e3b8) returned 1 [0069.074] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\9QH4S0GZ\\BBEgx5f[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\9qh4s0gz\\bbegx5f[1].jpg"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x178 [0069.075] GetFileType (hFile=0x178) returned 0x1 [0069.075] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e3b4) returned 1 [0069.075] GetFileType (hFile=0x178) returned 0x1 [0069.075] GetFileSize (in: hFile=0x178, lpFileSizeHigh=0x31e4c0 | out: lpFileSizeHigh=0x31e4c0*=0x0) returned 0x5e5 [0069.075] ReadFile (in: hFile=0x178, lpBuffer=0x274c110, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x31e46c, lpOverlapped=0x0 | out: lpBuffer=0x274c110*, lpNumberOfBytesRead=0x31e46c*=0x5e5, lpOverlapped=0x0) returned 1 [0069.089] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\9QH4S0GZ\\BBEgx5f[1].jpg", nBufferLength=0x105, lpBuffer=0x31deb0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\9QH4S0GZ\\BBEgx5f[1].jpg", lpFilePart=0x0) returned 0x7e [0069.089] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e3a4) returned 1 [0069.090] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\9QH4S0GZ\\BBEgx5f[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\9qh4s0gz\\bbegx5f[1].jpg"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x178 [0069.090] GetFileType (hFile=0x178) returned 0x1 [0069.090] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e3a0) returned 1 [0069.090] GetFileType (hFile=0x178) returned 0x1 [0069.091] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\9QH4S0GZ\\BBEgx5f[1].jpg", nBufferLength=0x105, lpBuffer=0x31dfe4, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\9QH4S0GZ\\BBEgx5f[1].jpg", lpFilePart=0x0) returned 0x7e [0069.091] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\9QH4S0GZ\\BBEgx5f[1].jpg", nBufferLength=0x105, lpBuffer=0x31dfe4, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\9QH4S0GZ\\BBEgx5f[1].jpg", lpFilePart=0x0) returned 0x7e [0069.091] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e444) returned 1 [0069.091] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\9QH4S0GZ\\BBEgx5f[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\9qh4s0gz\\bbegx5f[1].jpg"), fInfoLevelId=0x0, lpFileInformation=0x31e4c0 | out: lpFileInformation=0x31e4c0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xbe4ca790, ftCreationTime.dwHighDateTime=0x1d2faf2, ftLastAccessTime.dwLowDateTime=0xbe4ca790, ftLastAccessTime.dwHighDateTime=0x1d2faf2, ftLastWriteTime.dwLowDateTime=0xc9eec20, ftLastWriteTime.dwHighDateTime=0x1d6eb7f, nFileSizeHigh=0x0, nFileSizeLow=0x5f0)) returned 1 [0069.092] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e440) returned 1 [0069.092] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\9QH4S0GZ\\BBEgx5f[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\9qh4s0gz\\bbegx5f[1].jpg"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\9QH4S0GZ\\BBEgx5f[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\9qh4s0gz\\bbegx5f[1].jpg")) returned 1 [0069.092] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\9QH4S0GZ\\BBEgx5f[2].jpg", nBufferLength=0x105, lpBuffer=0x31dec4, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\9QH4S0GZ\\BBEgx5f[2].jpg", lpFilePart=0x0) returned 0x7e [0069.092] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e3b8) returned 1 [0069.092] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\9QH4S0GZ\\BBEgx5f[2].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\9qh4s0gz\\bbegx5f[2].jpg"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x178 [0069.093] GetFileType (hFile=0x178) returned 0x1 [0069.093] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e3b4) returned 1 [0069.093] GetFileType (hFile=0x178) returned 0x1 [0069.093] GetFileSize (in: hFile=0x178, lpFileSizeHigh=0x31e4c0 | out: lpFileSizeHigh=0x31e4c0*=0x0) returned 0x5e5 [0069.093] ReadFile (in: hFile=0x178, lpBuffer=0x279d814, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x31e46c, lpOverlapped=0x0 | out: lpBuffer=0x279d814*, lpNumberOfBytesRead=0x31e46c*=0x5e5, lpOverlapped=0x0) returned 1 [0069.108] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\9QH4S0GZ\\BBEgx5f[2].jpg", nBufferLength=0x105, lpBuffer=0x31deb0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\9QH4S0GZ\\BBEgx5f[2].jpg", lpFilePart=0x0) returned 0x7e [0069.108] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e3a4) returned 1 [0069.108] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\9QH4S0GZ\\BBEgx5f[2].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\9qh4s0gz\\bbegx5f[2].jpg"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x178 [0069.109] GetFileType (hFile=0x178) returned 0x1 [0069.109] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e3a0) returned 1 [0069.109] GetFileType (hFile=0x178) returned 0x1 [0069.110] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\9QH4S0GZ\\BBEgx5f[2].jpg", nBufferLength=0x105, lpBuffer=0x31dfe4, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\9QH4S0GZ\\BBEgx5f[2].jpg", lpFilePart=0x0) returned 0x7e [0069.110] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\9QH4S0GZ\\BBEgx5f[2].jpg", nBufferLength=0x105, lpBuffer=0x31dfe4, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\9QH4S0GZ\\BBEgx5f[2].jpg", lpFilePart=0x0) returned 0x7e [0069.110] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e444) returned 1 [0069.110] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\9QH4S0GZ\\BBEgx5f[2].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\9qh4s0gz\\bbegx5f[2].jpg"), fInfoLevelId=0x0, lpFileInformation=0x31e4c0 | out: lpFileInformation=0x31e4c0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x45b505b0, ftCreationTime.dwHighDateTime=0x1d2faf3, ftLastAccessTime.dwLowDateTime=0x45b505b0, ftLastAccessTime.dwHighDateTime=0x1d2faf3, ftLastWriteTime.dwLowDateTime=0xca3aee0, ftLastWriteTime.dwHighDateTime=0x1d6eb7f, nFileSizeHigh=0x0, nFileSizeLow=0x5f0)) returned 1 [0069.110] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e440) returned 1 [0069.110] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\9QH4S0GZ\\BBEgx5f[2].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\9qh4s0gz\\bbegx5f[2].jpg"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\9QH4S0GZ\\BBEgx5f[2].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\9qh4s0gz\\bbegx5f[2].jpg")) returned 1 [0069.110] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\9QH4S0GZ\\BBEgyIm[1].jpg", nBufferLength=0x105, lpBuffer=0x31dec4, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\9QH4S0GZ\\BBEgyIm[1].jpg", lpFilePart=0x0) returned 0x7e [0069.110] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e3b8) returned 1 [0069.110] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\9QH4S0GZ\\BBEgyIm[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\9qh4s0gz\\bbegyim[1].jpg"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x178 [0069.111] GetFileType (hFile=0x178) returned 0x1 [0069.111] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e3b4) returned 1 [0069.111] GetFileType (hFile=0x178) returned 0x1 [0069.111] GetFileSize (in: hFile=0x178, lpFileSizeHigh=0x31e4c0 | out: lpFileSizeHigh=0x31e4c0*=0x0) returned 0x3565 [0069.111] ReadFile (in: hFile=0x178, lpBuffer=0x27ee924, nNumberOfBytesToRead=0x3565, lpNumberOfBytesRead=0x31e46c, lpOverlapped=0x0 | out: lpBuffer=0x27ee924*, lpNumberOfBytesRead=0x31e46c*=0x3565, lpOverlapped=0x0) returned 1 [0069.126] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\9QH4S0GZ\\BBEgyIm[1].jpg", nBufferLength=0x105, lpBuffer=0x31deb0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\9QH4S0GZ\\BBEgyIm[1].jpg", lpFilePart=0x0) returned 0x7e [0069.126] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e3a4) returned 1 [0069.126] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\9QH4S0GZ\\BBEgyIm[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\9qh4s0gz\\bbegyim[1].jpg"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x178 [0069.127] GetFileType (hFile=0x178) returned 0x1 [0069.127] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e3a0) returned 1 [0069.127] GetFileType (hFile=0x178) returned 0x1 [0069.127] WriteFile (in: hFile=0x178, lpBuffer=0x284c23c*, nNumberOfBytesToWrite=0x3570, lpNumberOfBytesWritten=0x31e460, lpOverlapped=0x0 | out: lpBuffer=0x284c23c*, lpNumberOfBytesWritten=0x31e460*=0x3570, lpOverlapped=0x0) returned 1 [0069.128] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\9QH4S0GZ\\BBEgyIm[1].jpg", nBufferLength=0x105, lpBuffer=0x31dfe4, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\9QH4S0GZ\\BBEgyIm[1].jpg", lpFilePart=0x0) returned 0x7e [0069.128] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\9QH4S0GZ\\BBEgyIm[1].jpg", nBufferLength=0x105, lpBuffer=0x31dfe4, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\9QH4S0GZ\\BBEgyIm[1].jpg", lpFilePart=0x0) returned 0x7e [0069.128] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e444) returned 1 [0069.128] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\9QH4S0GZ\\BBEgyIm[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\9qh4s0gz\\bbegyim[1].jpg"), fInfoLevelId=0x0, lpFileInformation=0x31e4c0 | out: lpFileInformation=0x31e4c0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x467cf930, ftCreationTime.dwHighDateTime=0x1d2faf3, ftLastAccessTime.dwLowDateTime=0x467cf930, ftLastAccessTime.dwHighDateTime=0x1d2faf3, ftLastWriteTime.dwLowDateTime=0xca61040, ftLastWriteTime.dwHighDateTime=0x1d6eb7f, nFileSizeHigh=0x0, nFileSizeLow=0x3570)) returned 1 [0069.128] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e440) returned 1 [0069.128] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\9QH4S0GZ\\BBEgyIm[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\9qh4s0gz\\bbegyim[1].jpg"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\9QH4S0GZ\\BBEgyIm[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\9qh4s0gz\\bbegyim[1].jpg")) returned 1 [0069.129] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\9QH4S0GZ\\BBg3ODX[2].png", nBufferLength=0x105, lpBuffer=0x31dec4, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\9QH4S0GZ\\BBg3ODX[2].png", lpFilePart=0x0) returned 0x7e [0069.129] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e3b8) returned 1 [0069.129] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\9QH4S0GZ\\BBg3ODX[2].png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\9qh4s0gz\\bbg3odx[2].png"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x178 [0069.130] GetFileType (hFile=0x178) returned 0x1 [0069.130] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e3b4) returned 1 [0069.130] GetFileType (hFile=0x178) returned 0x1 [0069.130] GetFileSize (in: hFile=0x178, lpFileSizeHigh=0x31e4c0 | out: lpFileSizeHigh=0x31e4c0*=0x0) returned 0xf3 [0069.130] ReadFile (in: hFile=0x178, lpBuffer=0x284fe10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x31e46c, lpOverlapped=0x0 | out: lpBuffer=0x284fe10*, lpNumberOfBytesRead=0x31e46c*=0xf3, lpOverlapped=0x0) returned 1 [0069.149] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\9QH4S0GZ\\BBg3ODX[2].png", nBufferLength=0x105, lpBuffer=0x31deb0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\9QH4S0GZ\\BBg3ODX[2].png", lpFilePart=0x0) returned 0x7e [0069.149] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e3a4) returned 1 [0069.149] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\9QH4S0GZ\\BBg3ODX[2].png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\9qh4s0gz\\bbg3odx[2].png"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x178 [0069.150] GetFileType (hFile=0x178) returned 0x1 [0069.150] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e3a0) returned 1 [0069.150] GetFileType (hFile=0x178) returned 0x1 [0069.151] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\9QH4S0GZ\\BBg3ODX[2].png", nBufferLength=0x105, lpBuffer=0x31dfe4, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\9QH4S0GZ\\BBg3ODX[2].png", lpFilePart=0x0) returned 0x7e [0069.151] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\9QH4S0GZ\\BBg3ODX[2].png", nBufferLength=0x105, lpBuffer=0x31dfe4, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\9QH4S0GZ\\BBg3ODX[2].png", lpFilePart=0x0) returned 0x7e [0069.151] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e444) returned 1 [0069.151] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\9QH4S0GZ\\BBg3ODX[2].png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\9qh4s0gz\\bbg3odx[2].png"), fInfoLevelId=0x0, lpFileInformation=0x31e4c0 | out: lpFileInformation=0x31e4c0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xbe399c90, ftCreationTime.dwHighDateTime=0x1d2faf2, ftLastAccessTime.dwLowDateTime=0xbe399c90, ftLastAccessTime.dwHighDateTime=0x1d2faf2, ftLastWriteTime.dwLowDateTime=0xca871a0, ftLastWriteTime.dwHighDateTime=0x1d6eb7f, nFileSizeHigh=0x0, nFileSizeLow=0x100)) returned 1 [0069.151] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e440) returned 1 [0069.151] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\9QH4S0GZ\\BBg3ODX[2].png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\9qh4s0gz\\bbg3odx[2].png"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\9QH4S0GZ\\BBg3ODX[2].png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\9qh4s0gz\\bbg3odx[2].png")) returned 1 [0069.152] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\9QH4S0GZ\\BBiyCq[1].png", nBufferLength=0x105, lpBuffer=0x31dec4, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\9QH4S0GZ\\BBiyCq[1].png", lpFilePart=0x0) returned 0x7d [0069.152] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e3b8) returned 1 [0069.152] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\9QH4S0GZ\\BBiyCq[1].png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\9qh4s0gz\\bbiycq[1].png"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x178 [0069.152] GetFileType (hFile=0x178) returned 0x1 [0069.152] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e3b4) returned 1 [0069.152] GetFileType (hFile=0x178) returned 0x1 [0069.152] GetFileSize (in: hFile=0x178, lpFileSizeHigh=0x31e4c0 | out: lpFileSizeHigh=0x31e4c0*=0x0) returned 0x3b9 [0069.152] ReadFile (in: hFile=0x178, lpBuffer=0x269b440, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x31e46c, lpOverlapped=0x0 | out: lpBuffer=0x269b440*, lpNumberOfBytesRead=0x31e46c*=0x3b9, lpOverlapped=0x0) returned 1 [0069.168] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\9QH4S0GZ\\BBiyCq[1].png", nBufferLength=0x105, lpBuffer=0x31deb0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\9QH4S0GZ\\BBiyCq[1].png", lpFilePart=0x0) returned 0x7d [0069.168] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e3a4) returned 1 [0069.168] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\9QH4S0GZ\\BBiyCq[1].png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\9qh4s0gz\\bbiycq[1].png"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x178 [0069.168] GetFileType (hFile=0x178) returned 0x1 [0069.169] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e3a0) returned 1 [0069.169] GetFileType (hFile=0x178) returned 0x1 [0069.169] WriteFile (in: hFile=0x178, lpBuffer=0x26ea7e0*, nNumberOfBytesToWrite=0x3c0, lpNumberOfBytesWritten=0x31e434, lpOverlapped=0x0 | out: lpBuffer=0x26ea7e0*, lpNumberOfBytesWritten=0x31e434*=0x3c0, lpOverlapped=0x0) returned 1 [0069.169] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\9QH4S0GZ\\BBiyCq[1].png", nBufferLength=0x105, lpBuffer=0x31dfe4, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\9QH4S0GZ\\BBiyCq[1].png", lpFilePart=0x0) returned 0x7d [0069.170] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\9QH4S0GZ\\BBiyCq[1].png", nBufferLength=0x105, lpBuffer=0x31dfe4, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\9QH4S0GZ\\BBiyCq[1].png", lpFilePart=0x0) returned 0x7d [0069.170] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e444) returned 1 [0069.170] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\9QH4S0GZ\\BBiyCq[1].png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\9qh4s0gz\\bbiycq[1].png"), fInfoLevelId=0x0, lpFileInformation=0x31e4c0 | out: lpFileInformation=0x31e4c0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xbde8add0, ftCreationTime.dwHighDateTime=0x1d2faf2, ftLastAccessTime.dwLowDateTime=0xbde8add0, ftLastAccessTime.dwHighDateTime=0x1d2faf2, ftLastWriteTime.dwLowDateTime=0xcaad300, ftLastWriteTime.dwHighDateTime=0x1d6eb7f, nFileSizeHigh=0x0, nFileSizeLow=0x3c0)) returned 1 [0069.170] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e440) returned 1 [0069.170] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\9QH4S0GZ\\BBiyCq[1].png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\9qh4s0gz\\bbiycq[1].png"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\9QH4S0GZ\\BBiyCq[1].png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\9qh4s0gz\\bbiycq[1].png")) returned 1 [0069.170] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\9QH4S0GZ\\BBn4lUU[1].png", nBufferLength=0x105, lpBuffer=0x31dec4, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\9QH4S0GZ\\BBn4lUU[1].png", lpFilePart=0x0) returned 0x7e [0069.170] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e3b8) returned 1 [0069.170] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\9QH4S0GZ\\BBn4lUU[1].png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\9qh4s0gz\\bbn4luu[1].png"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x178 [0069.171] GetFileType (hFile=0x178) returned 0x1 [0069.171] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e3b4) returned 1 [0069.171] GetFileType (hFile=0x178) returned 0x1 [0069.171] GetFileSize (in: hFile=0x178, lpFileSizeHigh=0x31e4c0 | out: lpFileSizeHigh=0x31e4c0*=0x0) returned 0x14d [0069.171] ReadFile (in: hFile=0x178, lpBuffer=0x26ebd04, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x31e46c, lpOverlapped=0x0 | out: lpBuffer=0x26ebd04*, lpNumberOfBytesRead=0x31e46c*=0x14d, lpOverlapped=0x0) returned 1 [0069.185] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\9QH4S0GZ\\BBn4lUU[1].png", nBufferLength=0x105, lpBuffer=0x31deb0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\9QH4S0GZ\\BBn4lUU[1].png", lpFilePart=0x0) returned 0x7e [0069.185] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e3a4) returned 1 [0069.185] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\9QH4S0GZ\\BBn4lUU[1].png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\9qh4s0gz\\bbn4luu[1].png"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x178 [0069.186] GetFileType (hFile=0x178) returned 0x1 [0069.186] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e3a0) returned 1 [0069.186] GetFileType (hFile=0x178) returned 0x1 [0069.187] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\9QH4S0GZ\\BBn4lUU[1].png", nBufferLength=0x105, lpBuffer=0x31dfe4, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\9QH4S0GZ\\BBn4lUU[1].png", lpFilePart=0x0) returned 0x7e [0069.187] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\9QH4S0GZ\\BBn4lUU[1].png", nBufferLength=0x105, lpBuffer=0x31dfe4, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\9QH4S0GZ\\BBn4lUU[1].png", lpFilePart=0x0) returned 0x7e [0069.187] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e444) returned 1 [0069.187] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\9QH4S0GZ\\BBn4lUU[1].png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\9qh4s0gz\\bbn4luu[1].png"), fInfoLevelId=0x0, lpFileInformation=0x31e4c0 | out: lpFileInformation=0x31e4c0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x52f7f1f0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x52f7f1f0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0xcaf95c0, ftLastWriteTime.dwHighDateTime=0x1d6eb7f, nFileSizeHigh=0x0, nFileSizeLow=0x150)) returned 1 [0069.187] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e440) returned 1 [0069.187] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\9QH4S0GZ\\BBn4lUU[1].png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\9qh4s0gz\\bbn4luu[1].png"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\9QH4S0GZ\\BBn4lUU[1].png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\9qh4s0gz\\bbn4luu[1].png")) returned 1 [0069.188] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\9QH4S0GZ\\BBnMKeN[1].png", nBufferLength=0x105, lpBuffer=0x31dec4, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\9QH4S0GZ\\BBnMKeN[1].png", lpFilePart=0x0) returned 0x7e [0069.188] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e3b8) returned 1 [0069.188] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\9QH4S0GZ\\BBnMKeN[1].png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\9qh4s0gz\\bbnmken[1].png"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x178 [0069.188] GetFileType (hFile=0x178) returned 0x1 [0069.188] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e3b4) returned 1 [0069.188] GetFileType (hFile=0x178) returned 0x1 [0069.188] GetFileSize (in: hFile=0x178, lpFileSizeHigh=0x31e4c0 | out: lpFileSizeHigh=0x31e4c0*=0x0) returned 0x24b [0069.188] ReadFile (in: hFile=0x178, lpBuffer=0x273b944, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x31e46c, lpOverlapped=0x0 | out: lpBuffer=0x273b944*, lpNumberOfBytesRead=0x31e46c*=0x24b, lpOverlapped=0x0) returned 1 [0069.203] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\9QH4S0GZ\\BBnMKeN[1].png", nBufferLength=0x105, lpBuffer=0x31deb0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\9QH4S0GZ\\BBnMKeN[1].png", lpFilePart=0x0) returned 0x7e [0069.203] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e3a4) returned 1 [0069.203] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\9QH4S0GZ\\BBnMKeN[1].png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\9qh4s0gz\\bbnmken[1].png"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x178 [0069.204] GetFileType (hFile=0x178) returned 0x1 [0069.204] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e3a0) returned 1 [0069.204] GetFileType (hFile=0x178) returned 0x1 [0069.204] WriteFile (in: hFile=0x178, lpBuffer=0x278a460*, nNumberOfBytesToWrite=0x250, lpNumberOfBytesWritten=0x31e434, lpOverlapped=0x0 | out: lpBuffer=0x278a460*, lpNumberOfBytesWritten=0x31e434*=0x250, lpOverlapped=0x0) returned 1 [0069.205] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\9QH4S0GZ\\BBnMKeN[1].png", nBufferLength=0x105, lpBuffer=0x31dfe4, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\9QH4S0GZ\\BBnMKeN[1].png", lpFilePart=0x0) returned 0x7e [0069.205] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\9QH4S0GZ\\BBnMKeN[1].png", nBufferLength=0x105, lpBuffer=0x31dfe4, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\9QH4S0GZ\\BBnMKeN[1].png", lpFilePart=0x0) returned 0x7e [0069.205] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e444) returned 1 [0069.205] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\9QH4S0GZ\\BBnMKeN[1].png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\9qh4s0gz\\bbnmken[1].png"), fInfoLevelId=0x0, lpFileInformation=0x31e4c0 | out: lpFileInformation=0x31e4c0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x457e4610, ftCreationTime.dwHighDateTime=0x1d2faf3, ftLastAccessTime.dwLowDateTime=0x457e4610, ftLastAccessTime.dwHighDateTime=0x1d2faf3, ftLastWriteTime.dwLowDateTime=0xcb1f720, ftLastWriteTime.dwHighDateTime=0x1d6eb7f, nFileSizeHigh=0x0, nFileSizeLow=0x250)) returned 1 [0069.205] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e440) returned 1 [0069.205] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\9QH4S0GZ\\BBnMKeN[1].png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\9qh4s0gz\\bbnmken[1].png"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\9QH4S0GZ\\BBnMKeN[1].png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\9qh4s0gz\\bbnmken[1].png")) returned 1 [0069.206] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\9QH4S0GZ\\BBwGan9[1].jpg", nBufferLength=0x105, lpBuffer=0x31dec4, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\9QH4S0GZ\\BBwGan9[1].jpg", lpFilePart=0x0) returned 0x7e [0069.206] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e3b8) returned 1 [0069.206] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\9QH4S0GZ\\BBwGan9[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\9qh4s0gz\\bbwgan9[1].jpg"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x178 [0069.207] GetFileType (hFile=0x178) returned 0x1 [0069.207] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e3b4) returned 1 [0069.207] GetFileType (hFile=0x178) returned 0x1 [0069.207] GetFileSize (in: hFile=0x178, lpFileSizeHigh=0x31e4c0 | out: lpFileSizeHigh=0x31e4c0*=0x0) returned 0x38b7 [0069.207] ReadFile (in: hFile=0x178, lpBuffer=0x278b830, nNumberOfBytesToRead=0x38b7, lpNumberOfBytesRead=0x31e46c, lpOverlapped=0x0 | out: lpBuffer=0x278b830*, lpNumberOfBytesRead=0x31e46c*=0x38b7, lpOverlapped=0x0) returned 1 [0069.222] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\9QH4S0GZ\\BBwGan9[1].jpg", nBufferLength=0x105, lpBuffer=0x31deb0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\9QH4S0GZ\\BBwGan9[1].jpg", lpFilePart=0x0) returned 0x7e [0069.222] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e3a4) returned 1 [0069.222] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\9QH4S0GZ\\BBwGan9[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\9qh4s0gz\\bbwgan9[1].jpg"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x178 [0069.223] GetFileType (hFile=0x178) returned 0x1 [0069.223] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e3a0) returned 1 [0069.223] GetFileType (hFile=0x178) returned 0x1 [0069.223] WriteFile (in: hFile=0x178, lpBuffer=0x27ea1d8*, nNumberOfBytesToWrite=0x38c0, lpNumberOfBytesWritten=0x31e460, lpOverlapped=0x0 | out: lpBuffer=0x27ea1d8*, lpNumberOfBytesWritten=0x31e460*=0x38c0, lpOverlapped=0x0) returned 1 [0069.224] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\9QH4S0GZ\\BBwGan9[1].jpg", nBufferLength=0x105, lpBuffer=0x31dfe4, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\9QH4S0GZ\\BBwGan9[1].jpg", lpFilePart=0x0) returned 0x7e [0069.224] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\9QH4S0GZ\\BBwGan9[1].jpg", nBufferLength=0x105, lpBuffer=0x31dfe4, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\9QH4S0GZ\\BBwGan9[1].jpg", lpFilePart=0x0) returned 0x7e [0069.224] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e444) returned 1 [0069.224] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\9QH4S0GZ\\BBwGan9[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\9qh4s0gz\\bbwgan9[1].jpg"), fInfoLevelId=0x0, lpFileInformation=0x31e4c0 | out: lpFileInformation=0x31e4c0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x459ad690, ftCreationTime.dwHighDateTime=0x1d2faf3, ftLastAccessTime.dwLowDateTime=0x459ad690, ftLastAccessTime.dwHighDateTime=0x1d2faf3, ftLastWriteTime.dwLowDateTime=0xcb45880, ftLastWriteTime.dwHighDateTime=0x1d6eb7f, nFileSizeHigh=0x0, nFileSizeLow=0x38c0)) returned 1 [0069.225] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e440) returned 1 [0069.225] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\9QH4S0GZ\\BBwGan9[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\9qh4s0gz\\bbwgan9[1].jpg"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\9QH4S0GZ\\BBwGan9[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\9qh4s0gz\\bbwgan9[1].jpg")) returned 1 [0069.225] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\9QH4S0GZ\\BBz3ebk[1].png", nBufferLength=0x105, lpBuffer=0x31dec4, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\9QH4S0GZ\\BBz3ebk[1].png", lpFilePart=0x0) returned 0x7e [0069.225] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e3b8) returned 1 [0069.225] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\9QH4S0GZ\\BBz3ebk[1].png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\9qh4s0gz\\bbz3ebk[1].png"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x178 [0069.225] GetFileType (hFile=0x178) returned 0x1 [0069.225] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e3b4) returned 1 [0069.225] GetFileType (hFile=0x178) returned 0x1 [0069.225] GetFileSize (in: hFile=0x178, lpFileSizeHigh=0x31e4c0 | out: lpFileSizeHigh=0x31e4c0*=0x0) returned 0x36c [0069.226] ReadFile (in: hFile=0x178, lpBuffer=0x27ee374, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x31e46c, lpOverlapped=0x0 | out: lpBuffer=0x27ee374*, lpNumberOfBytesRead=0x31e46c*=0x36c, lpOverlapped=0x0) returned 1 [0069.240] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\9QH4S0GZ\\BBz3ebk[1].png", nBufferLength=0x105, lpBuffer=0x31deb0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\9QH4S0GZ\\BBz3ebk[1].png", lpFilePart=0x0) returned 0x7e [0069.240] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e3a4) returned 1 [0069.240] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\9QH4S0GZ\\BBz3ebk[1].png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\9qh4s0gz\\bbz3ebk[1].png"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x178 [0069.241] GetFileType (hFile=0x178) returned 0x1 [0069.241] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e3a0) returned 1 [0069.241] GetFileType (hFile=0x178) returned 0x1 [0069.242] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\9QH4S0GZ\\BBz3ebk[1].png", nBufferLength=0x105, lpBuffer=0x31dfe4, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\9QH4S0GZ\\BBz3ebk[1].png", lpFilePart=0x0) returned 0x7e [0069.243] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\9QH4S0GZ\\BBz3ebk[1].png", nBufferLength=0x105, lpBuffer=0x31dfe4, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\9QH4S0GZ\\BBz3ebk[1].png", lpFilePart=0x0) returned 0x7e [0069.243] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e444) returned 1 [0069.243] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\9QH4S0GZ\\BBz3ebk[1].png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\9qh4s0gz\\bbz3ebk[1].png"), fInfoLevelId=0x0, lpFileInformation=0x31e4c0 | out: lpFileInformation=0x31e4c0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x538b8730, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x538b8730, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0xcb6b9e0, ftLastWriteTime.dwHighDateTime=0x1d6eb7f, nFileSizeHigh=0x0, nFileSizeLow=0x370)) returned 1 [0069.243] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e440) returned 1 [0069.243] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\9QH4S0GZ\\BBz3ebk[1].png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\9qh4s0gz\\bbz3ebk[1].png"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\9QH4S0GZ\\BBz3ebk[1].png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\9qh4s0gz\\bbz3ebk[1].png")) returned 1 [0069.243] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\9QH4S0GZ\\benefits-5-mobile[1].png", nBufferLength=0x105, lpBuffer=0x31dec4, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\9QH4S0GZ\\benefits-5-mobile[1].png", lpFilePart=0x0) returned 0x88 [0069.243] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e3b8) returned 1 [0069.243] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\9QH4S0GZ\\benefits-5-mobile[1].png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\9qh4s0gz\\benefits-5-mobile[1].png"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x178 [0069.244] GetFileType (hFile=0x178) returned 0x1 [0069.244] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e3b4) returned 1 [0069.244] GetFileType (hFile=0x178) returned 0x1 [0069.244] GetFileSize (in: hFile=0x178, lpFileSizeHigh=0x31e4c0 | out: lpFileSizeHigh=0x31e4c0*=0x0) returned 0x29ed [0069.245] ReadFile (in: hFile=0x178, lpBuffer=0x283e824, nNumberOfBytesToRead=0x29ed, lpNumberOfBytesRead=0x31e46c, lpOverlapped=0x0 | out: lpBuffer=0x283e824*, lpNumberOfBytesRead=0x31e46c*=0x29ed, lpOverlapped=0x0) returned 1 [0069.270] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\9QH4S0GZ\\benefits-5-mobile[1].png", nBufferLength=0x105, lpBuffer=0x31deb0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\9QH4S0GZ\\benefits-5-mobile[1].png", lpFilePart=0x0) returned 0x88 [0069.270] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e3a4) returned 1 [0069.270] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\9QH4S0GZ\\benefits-5-mobile[1].png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\9qh4s0gz\\benefits-5-mobile[1].png"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x178 [0069.271] GetFileType (hFile=0x178) returned 0x1 [0069.271] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e3a0) returned 1 [0069.271] GetFileType (hFile=0x178) returned 0x1 [0069.271] WriteFile (in: hFile=0x178, lpBuffer=0x269b0b4*, nNumberOfBytesToWrite=0x29f0, lpNumberOfBytesWritten=0x31e460, lpOverlapped=0x0 | out: lpBuffer=0x269b0b4*, lpNumberOfBytesWritten=0x31e460*=0x29f0, lpOverlapped=0x0) returned 1 [0069.272] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\9QH4S0GZ\\benefits-5-mobile[1].png", nBufferLength=0x105, lpBuffer=0x31dfe4, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\9QH4S0GZ\\benefits-5-mobile[1].png", lpFilePart=0x0) returned 0x88 [0069.272] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\9QH4S0GZ\\benefits-5-mobile[1].png", nBufferLength=0x105, lpBuffer=0x31dfe4, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\9QH4S0GZ\\benefits-5-mobile[1].png", lpFilePart=0x0) returned 0x88 [0069.272] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e444) returned 1 [0069.273] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\9QH4S0GZ\\benefits-5-mobile[1].png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\9qh4s0gz\\benefits-5-mobile[1].png"), fInfoLevelId=0x0, lpFileInformation=0x31e4c0 | out: lpFileInformation=0x31e4c0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x60d4dd60, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x60d4dd60, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0xcbb7ca0, ftLastWriteTime.dwHighDateTime=0x1d6eb7f, nFileSizeHigh=0x0, nFileSizeLow=0x29f0)) returned 1 [0069.273] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e440) returned 1 [0069.273] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\9QH4S0GZ\\benefits-5-mobile[1].png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\9qh4s0gz\\benefits-5-mobile[1].png"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\9QH4S0GZ\\benefits-5-mobile[1].png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\9qh4s0gz\\benefits-5-mobile[1].png")) returned 1 [0069.273] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\9QH4S0GZ\\chrome-new[1].jpg", nBufferLength=0x105, lpBuffer=0x31dec4, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\9QH4S0GZ\\chrome-new[1].jpg", lpFilePart=0x0) returned 0x81 [0069.273] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e3b8) returned 1 [0069.273] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\9QH4S0GZ\\chrome-new[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\9qh4s0gz\\chrome-new[1].jpg"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x178 [0069.274] GetFileType (hFile=0x178) returned 0x1 [0069.274] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e3b4) returned 1 [0069.274] GetFileType (hFile=0x178) returned 0x1 [0069.274] GetFileSize (in: hFile=0x178, lpFileSizeHigh=0x31e4c0 | out: lpFileSizeHigh=0x31e4c0*=0x0) returned 0x10c6c [0069.274] ReadFile (in: hFile=0x178, lpBuffer=0x269e080, nNumberOfBytesToRead=0x10c6c, lpNumberOfBytesRead=0x31e46c, lpOverlapped=0x0 | out: lpBuffer=0x269e080*, lpNumberOfBytesRead=0x31e46c*=0x10c6c, lpOverlapped=0x0) returned 1 [0069.292] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\9QH4S0GZ\\chrome-new[1].jpg", nBufferLength=0x105, lpBuffer=0x31deb0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\9QH4S0GZ\\chrome-new[1].jpg", lpFilePart=0x0) returned 0x81 [0069.292] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e3a4) returned 1 [0069.292] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\9QH4S0GZ\\chrome-new[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\9qh4s0gz\\chrome-new[1].jpg"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x178 [0069.293] GetFileType (hFile=0x178) returned 0x1 [0069.293] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e3a0) returned 1 [0069.293] GetFileType (hFile=0x178) returned 0x1 [0069.293] WriteFile (in: hFile=0x178, lpBuffer=0x271d524*, nNumberOfBytesToWrite=0x10c70, lpNumberOfBytesWritten=0x31e460, lpOverlapped=0x0 | out: lpBuffer=0x271d524*, lpNumberOfBytesWritten=0x31e460*=0x10c70, lpOverlapped=0x0) returned 1 [0069.295] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\9QH4S0GZ\\chrome-new[1].jpg", nBufferLength=0x105, lpBuffer=0x31dfe4, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\9QH4S0GZ\\chrome-new[1].jpg", lpFilePart=0x0) returned 0x81 [0069.295] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\9QH4S0GZ\\chrome-new[1].jpg", nBufferLength=0x105, lpBuffer=0x31dfe4, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\9QH4S0GZ\\chrome-new[1].jpg", lpFilePart=0x0) returned 0x81 [0069.295] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e444) returned 1 [0069.295] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\9QH4S0GZ\\chrome-new[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\9qh4s0gz\\chrome-new[1].jpg"), fInfoLevelId=0x0, lpFileInformation=0x31e4c0 | out: lpFileInformation=0x31e4c0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x60ea49c0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x60ea49c0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0xcc03f60, ftLastWriteTime.dwHighDateTime=0x1d6eb7f, nFileSizeHigh=0x0, nFileSizeLow=0x10c70)) returned 1 [0069.296] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e440) returned 1 [0069.296] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\9QH4S0GZ\\chrome-new[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\9qh4s0gz\\chrome-new[1].jpg"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\9QH4S0GZ\\chrome-new[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\9qh4s0gz\\chrome-new[1].jpg")) returned 1 [0069.296] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\9QH4S0GZ\\css[2].txt", nBufferLength=0x105, lpBuffer=0x31dec4, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\9QH4S0GZ\\css[2].txt", lpFilePart=0x0) returned 0x7a [0069.296] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e3b8) returned 1 [0069.296] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\9QH4S0GZ\\css[2].txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\9qh4s0gz\\css[2].txt"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x178 [0069.297] GetFileType (hFile=0x178) returned 0x1 [0069.297] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e3b4) returned 1 [0069.297] GetFileType (hFile=0x178) returned 0x1 [0069.297] GetFileSize (in: hFile=0x178, lpFileSizeHigh=0x31e4c0 | out: lpFileSizeHigh=0x31e4c0*=0x0) returned 0xbb [0069.297] ReadFile (in: hFile=0x178, lpBuffer=0x272e800, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x31e46c, lpOverlapped=0x0 | out: lpBuffer=0x272e800*, lpNumberOfBytesRead=0x31e46c*=0xbb, lpOverlapped=0x0) returned 1 [0069.311] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\9QH4S0GZ\\css[2].txt", nBufferLength=0x105, lpBuffer=0x31deb0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\9QH4S0GZ\\css[2].txt", lpFilePart=0x0) returned 0x7a [0069.311] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e3a4) returned 1 [0069.311] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\9QH4S0GZ\\css[2].txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\9qh4s0gz\\css[2].txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x178 [0069.312] GetFileType (hFile=0x178) returned 0x1 [0069.312] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e3a0) returned 1 [0069.312] GetFileType (hFile=0x178) returned 0x1 [0069.313] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\9QH4S0GZ\\css[2].txt", nBufferLength=0x105, lpBuffer=0x31dfe4, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\9QH4S0GZ\\css[2].txt", lpFilePart=0x0) returned 0x7a [0069.313] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\9QH4S0GZ\\css[2].txt", nBufferLength=0x105, lpBuffer=0x31dfe4, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\9QH4S0GZ\\css[2].txt", lpFilePart=0x0) returned 0x7a [0069.313] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e444) returned 1 [0069.313] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\9QH4S0GZ\\css[2].txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\9qh4s0gz\\css[2].txt"), fInfoLevelId=0x0, lpFileInformation=0x31e4c0 | out: lpFileInformation=0x31e4c0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x5ddbc1a0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x5ddbc1a0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0xcc2a0c0, ftLastWriteTime.dwHighDateTime=0x1d6eb7f, nFileSizeHigh=0x0, nFileSizeLow=0xc0)) returned 1 [0069.313] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e440) returned 1 [0069.313] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\9QH4S0GZ\\css[2].txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\9qh4s0gz\\css[2].txt"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\9QH4S0GZ\\css[2].txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\9qh4s0gz\\css[2].txt")) returned 1 [0069.313] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\9QH4S0GZ\\fallback_728x90[1].jpg", nBufferLength=0x105, lpBuffer=0x31dec4, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\9QH4S0GZ\\fallback_728x90[1].jpg", lpFilePart=0x0) returned 0x86 [0069.314] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e3b8) returned 1 [0069.314] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\9QH4S0GZ\\fallback_728x90[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\9qh4s0gz\\fallback_728x90[1].jpg"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x178 [0069.314] GetFileType (hFile=0x178) returned 0x1 [0069.314] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e3b4) returned 1 [0069.315] GetFileType (hFile=0x178) returned 0x1 [0069.315] GetFileSize (in: hFile=0x178, lpFileSizeHigh=0x31e4c0 | out: lpFileSizeHigh=0x31e4c0*=0x0) returned 0x7f78 [0069.315] ReadFile (in: hFile=0x178, lpBuffer=0x277de18, nNumberOfBytesToRead=0x7f78, lpNumberOfBytesRead=0x31e46c, lpOverlapped=0x0 | out: lpBuffer=0x277de18*, lpNumberOfBytesRead=0x31e46c*=0x7f78, lpOverlapped=0x0) returned 1 [0069.330] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\9QH4S0GZ\\fallback_728x90[1].jpg", nBufferLength=0x105, lpBuffer=0x31deb0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\9QH4S0GZ\\fallback_728x90[1].jpg", lpFilePart=0x0) returned 0x86 [0069.330] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e3a4) returned 1 [0069.330] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\9QH4S0GZ\\fallback_728x90[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\9qh4s0gz\\fallback_728x90[1].jpg"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x178 [0069.331] GetFileType (hFile=0x178) returned 0x1 [0069.332] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e3a0) returned 1 [0069.332] GetFileType (hFile=0x178) returned 0x1 [0069.332] WriteFile (in: hFile=0x178, lpBuffer=0x27f297c*, nNumberOfBytesToWrite=0x7f80, lpNumberOfBytesWritten=0x31e460, lpOverlapped=0x0 | out: lpBuffer=0x27f297c*, lpNumberOfBytesWritten=0x31e460*=0x7f80, lpOverlapped=0x0) returned 1 [0069.333] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\9QH4S0GZ\\fallback_728x90[1].jpg", nBufferLength=0x105, lpBuffer=0x31dfe4, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\9QH4S0GZ\\fallback_728x90[1].jpg", lpFilePart=0x0) returned 0x86 [0069.333] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\9QH4S0GZ\\fallback_728x90[1].jpg", nBufferLength=0x105, lpBuffer=0x31dfe4, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\9QH4S0GZ\\fallback_728x90[1].jpg", lpFilePart=0x0) returned 0x86 [0069.333] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e444) returned 1 [0069.333] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\9QH4S0GZ\\fallback_728x90[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\9qh4s0gz\\fallback_728x90[1].jpg"), fInfoLevelId=0x0, lpFileInformation=0x31e4c0 | out: lpFileInformation=0x31e4c0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xbf893e70, ftCreationTime.dwHighDateTime=0x1d2faf2, ftLastAccessTime.dwLowDateTime=0xbf893e70, ftLastAccessTime.dwHighDateTime=0x1d2faf2, ftLastWriteTime.dwLowDateTime=0xcc50220, ftLastWriteTime.dwHighDateTime=0x1d6eb7f, nFileSizeHigh=0x0, nFileSizeLow=0x7f80)) returned 1 [0069.333] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e440) returned 1 [0069.333] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\9QH4S0GZ\\fallback_728x90[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\9qh4s0gz\\fallback_728x90[1].jpg"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\9QH4S0GZ\\fallback_728x90[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\9qh4s0gz\\fallback_728x90[1].jpg")) returned 1 [0069.334] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\9QH4S0GZ\\ie8[1].txt", nBufferLength=0x105, lpBuffer=0x31dec4, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\9QH4S0GZ\\ie8[1].txt", lpFilePart=0x0) returned 0x7a [0069.334] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e3b8) returned 1 [0069.334] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\9QH4S0GZ\\ie8[1].txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\9qh4s0gz\\ie8[1].txt"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x178 [0069.335] GetFileType (hFile=0x178) returned 0x1 [0069.335] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e3b4) returned 1 [0069.335] GetFileType (hFile=0x178) returned 0x1 [0069.335] GetFileSize (in: hFile=0x178, lpFileSizeHigh=0x31e4c0 | out: lpFileSizeHigh=0x31e4c0*=0x0) returned 0x66 [0069.335] ReadFile (in: hFile=0x178, lpBuffer=0x27faf04, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x31e46c, lpOverlapped=0x0 | out: lpBuffer=0x27faf04*, lpNumberOfBytesRead=0x31e46c*=0x66, lpOverlapped=0x0) returned 1 [0069.349] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\9QH4S0GZ\\ie8[1].txt", nBufferLength=0x105, lpBuffer=0x31deb0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\9QH4S0GZ\\ie8[1].txt", lpFilePart=0x0) returned 0x7a [0069.349] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e3a4) returned 1 [0069.349] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\9QH4S0GZ\\ie8[1].txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\9qh4s0gz\\ie8[1].txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x178 [0069.350] GetFileType (hFile=0x178) returned 0x1 [0069.350] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e3a0) returned 1 [0069.350] GetFileType (hFile=0x178) returned 0x1 [0069.350] WriteFile (in: hFile=0x178, lpBuffer=0x2849088*, nNumberOfBytesToWrite=0x70, lpNumberOfBytesWritten=0x31e434, lpOverlapped=0x0 | out: lpBuffer=0x2849088*, lpNumberOfBytesWritten=0x31e434*=0x70, lpOverlapped=0x0) returned 1 [0069.351] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\9QH4S0GZ\\ie8[1].txt", nBufferLength=0x105, lpBuffer=0x31dfe4, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\9QH4S0GZ\\ie8[1].txt", lpFilePart=0x0) returned 0x7a [0069.351] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\9QH4S0GZ\\ie8[1].txt", nBufferLength=0x105, lpBuffer=0x31dfe4, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\9QH4S0GZ\\ie8[1].txt", lpFilePart=0x0) returned 0x7a [0069.351] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e444) returned 1 [0069.351] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\9QH4S0GZ\\ie8[1].txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\9qh4s0gz\\ie8[1].txt"), fInfoLevelId=0x0, lpFileInformation=0x31e4c0 | out: lpFileInformation=0x31e4c0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x551dcf90, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x551dcf90, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0xcc76380, ftLastWriteTime.dwHighDateTime=0x1d6eb7f, nFileSizeHigh=0x0, nFileSizeLow=0x70)) returned 1 [0069.351] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e440) returned 1 [0069.351] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\9QH4S0GZ\\ie8[1].txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\9qh4s0gz\\ie8[1].txt"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\9QH4S0GZ\\ie8[1].txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\9qh4s0gz\\ie8[1].txt")) returned 1 [0069.352] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\9QH4S0GZ\\uhf-west-european-default.min[1].css", nBufferLength=0x105, lpBuffer=0x31dec4, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\9QH4S0GZ\\uhf-west-european-default.min[1].css", lpFilePart=0x0) returned 0x94 [0069.352] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e3b8) returned 1 [0069.352] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\9QH4S0GZ\\uhf-west-european-default.min[1].css" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\9qh4s0gz\\uhf-west-european-default.min[1].css"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x178 [0069.352] GetFileType (hFile=0x178) returned 0x1 [0069.352] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e3b4) returned 1 [0069.352] GetFileType (hFile=0x178) returned 0x1 [0069.352] GetFileSize (in: hFile=0x178, lpFileSizeHigh=0x31e4c0 | out: lpFileSizeHigh=0x31e4c0*=0x0) returned 0x1c85b [0069.352] ReadFile (in: hFile=0x178, lpBuffer=0x37def68, nNumberOfBytesToRead=0x1c85b, lpNumberOfBytesRead=0x31e46c, lpOverlapped=0x0 | out: lpBuffer=0x37def68*, lpNumberOfBytesRead=0x31e46c*=0x1c85b, lpOverlapped=0x0) returned 1 [0069.378] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\9QH4S0GZ\\uhf-west-european-default.min[1].css", nBufferLength=0x105, lpBuffer=0x31deb0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\9QH4S0GZ\\uhf-west-european-default.min[1].css", lpFilePart=0x0) returned 0x94 [0069.378] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e3a4) returned 1 [0069.378] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\9QH4S0GZ\\uhf-west-european-default.min[1].css" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\9qh4s0gz\\uhf-west-european-default.min[1].css"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x178 [0069.379] GetFileType (hFile=0x178) returned 0x1 [0069.379] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e3a0) returned 1 [0069.379] GetFileType (hFile=0x178) returned 0x1 [0069.379] WriteFile (in: hFile=0x178, lpBuffer=0x386d980*, nNumberOfBytesToWrite=0x1c860, lpNumberOfBytesWritten=0x31e460, lpOverlapped=0x0 | out: lpBuffer=0x386d980*, lpNumberOfBytesWritten=0x31e460*=0x1c860, lpOverlapped=0x0) returned 1 [0069.382] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\9QH4S0GZ\\uhf-west-european-default.min[1].css", nBufferLength=0x105, lpBuffer=0x31dfe4, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\9QH4S0GZ\\uhf-west-european-default.min[1].css", lpFilePart=0x0) returned 0x94 [0069.382] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\9QH4S0GZ\\uhf-west-european-default.min[1].css", nBufferLength=0x105, lpBuffer=0x31dfe4, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\9QH4S0GZ\\uhf-west-european-default.min[1].css", lpFilePart=0x0) returned 0x94 [0069.382] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e444) returned 1 [0069.382] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\9QH4S0GZ\\uhf-west-european-default.min[1].css" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\9qh4s0gz\\uhf-west-european-default.min[1].css"), fInfoLevelId=0x0, lpFileInformation=0x31e4c0 | out: lpFileInformation=0x31e4c0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x54772f50, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x54772f50, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0xccc2640, ftLastWriteTime.dwHighDateTime=0x1d6eb7f, nFileSizeHigh=0x0, nFileSizeLow=0x1c860)) returned 1 [0069.382] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e440) returned 1 [0069.382] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\9QH4S0GZ\\uhf-west-european-default.min[1].css" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\9qh4s0gz\\uhf-west-european-default.min[1].css"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\9QH4S0GZ\\uhf-west-european-default.min[1].css" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\9qh4s0gz\\uhf-west-european-default.min[1].css")) returned 1 [0069.382] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\9QH4S0GZ\\WebCore.4.19.0.ltr.light.min[1].css", nBufferLength=0x105, lpBuffer=0x31dec4, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\9QH4S0GZ\\WebCore.4.19.0.ltr.light.min[1].css", lpFilePart=0x0) returned 0x93 [0069.382] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e3b8) returned 1 [0069.382] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\9QH4S0GZ\\WebCore.4.19.0.ltr.light.min[1].css" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\9qh4s0gz\\webcore.4.19.0.ltr.light.min[1].css"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x178 [0069.383] GetFileType (hFile=0x178) returned 0x1 [0069.383] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e3b4) returned 1 [0069.383] GetFileType (hFile=0x178) returned 0x1 [0069.383] GetFileSize (in: hFile=0x178, lpFileSizeHigh=0x31e4c0 | out: lpFileSizeHigh=0x31e4c0*=0x0) returned 0x1687 [0069.383] ReadFile (in: hFile=0x178, lpBuffer=0x2694f44, nNumberOfBytesToRead=0x1687, lpNumberOfBytesRead=0x31e46c, lpOverlapped=0x0 | out: lpBuffer=0x2694f44*, lpNumberOfBytesRead=0x31e46c*=0x1687, lpOverlapped=0x0) returned 1 [0069.400] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\9QH4S0GZ\\WebCore.4.19.0.ltr.light.min[1].css", nBufferLength=0x105, lpBuffer=0x31deb0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\9QH4S0GZ\\WebCore.4.19.0.ltr.light.min[1].css", lpFilePart=0x0) returned 0x93 [0069.400] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e3a4) returned 1 [0069.400] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\9QH4S0GZ\\WebCore.4.19.0.ltr.light.min[1].css" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\9qh4s0gz\\webcore.4.19.0.ltr.light.min[1].css"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x178 [0069.401] GetFileType (hFile=0x178) returned 0x1 [0069.401] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e3a0) returned 1 [0069.401] GetFileType (hFile=0x178) returned 0x1 [0069.401] WriteFile (in: hFile=0x178, lpBuffer=0x26e8f58*, nNumberOfBytesToWrite=0x1690, lpNumberOfBytesWritten=0x31e460, lpOverlapped=0x0 | out: lpBuffer=0x26e8f58*, lpNumberOfBytesWritten=0x31e460*=0x1690, lpOverlapped=0x0) returned 1 [0069.402] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\9QH4S0GZ\\WebCore.4.19.0.ltr.light.min[1].css", nBufferLength=0x105, lpBuffer=0x31dfe4, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\9QH4S0GZ\\WebCore.4.19.0.ltr.light.min[1].css", lpFilePart=0x0) returned 0x93 [0069.402] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\9QH4S0GZ\\WebCore.4.19.0.ltr.light.min[1].css", nBufferLength=0x105, lpBuffer=0x31dfe4, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\9QH4S0GZ\\WebCore.4.19.0.ltr.light.min[1].css", lpFilePart=0x0) returned 0x93 [0069.402] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e444) returned 1 [0069.402] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\9QH4S0GZ\\WebCore.4.19.0.ltr.light.min[1].css" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\9qh4s0gz\\webcore.4.19.0.ltr.light.min[1].css"), fInfoLevelId=0x0, lpFileInformation=0x31e4c0 | out: lpFileInformation=0x31e4c0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x54726c90, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x54726c90, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0xcce87a0, ftLastWriteTime.dwHighDateTime=0x1d6eb7f, nFileSizeHigh=0x0, nFileSizeLow=0x1690)) returned 1 [0069.402] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e440) returned 1 [0069.402] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\9QH4S0GZ\\WebCore.4.19.0.ltr.light.min[1].css" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\9qh4s0gz\\webcore.4.19.0.ltr.light.min[1].css"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\9QH4S0GZ\\WebCore.4.19.0.ltr.light.min[1].css" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\9qh4s0gz\\webcore.4.19.0.ltr.light.min[1].css")) returned 1 [0069.402] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e4ec) returned 1 [0069.402] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\ABV8L7MY", nBufferLength=0x105, lpBuffer=0x31dff4, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\ABV8L7MY", lpFilePart=0x0) returned 0x6f [0069.402] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\ABV8L7MY\\", nBufferLength=0x105, lpBuffer=0x31dfc8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\ABV8L7MY\\", lpFilePart=0x0) returned 0x70 [0069.402] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\ABV8L7MY\\*", lpFindFileData=0x31e214 | out: lpFindFileData=0x31e214*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0x4f090c50, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x467cf930, ftLastAccessTime.dwHighDateTime=0x1d2faf3, ftLastWriteTime.dwLowDateTime=0x467cf930, ftLastWriteTime.dwHighDateTime=0x1d2faf3, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5107c20 [0069.405] FindNextFileW (in: hFindFile=0x5107c20, lpFindFileData=0x31e224 | out: lpFindFileData=0x31e224*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0x4f090c50, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x467cf930, ftLastAccessTime.dwHighDateTime=0x1d2faf3, ftLastWriteTime.dwLowDateTime=0x467cf930, ftLastWriteTime.dwHighDateTime=0x1d2faf3, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0069.407] FindNextFileW (in: hFindFile=0x5107c20, lpFindFileData=0x31e224 | out: lpFindFileData=0x31e224*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xbfa36d90, ftCreationTime.dwHighDateTime=0x1d2faf2, ftLastAccessTime.dwLowDateTime=0xbfa36d90, ftLastAccessTime.dwHighDateTime=0x1d2faf2, ftLastWriteTime.dwLowDateTime=0xbfa83050, ftLastWriteTime.dwHighDateTime=0x1d2faf2, nFileSizeHigh=0x0, nFileSizeLow=0xe455, dwReserved0=0x0, dwReserved1=0x0, cFileName="000000929096[1].gif", cAlternateFileName="000000~1.GIF")) returned 1 [0069.407] FindNextFileW (in: hFindFile=0x5107c20, lpFindFileData=0x31e224 | out: lpFindFileData=0x31e224*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x6384cac0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x6384cac0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x6384cac0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x2929, dwReserved0=0x0, dwReserved1=0x0, cFileName="1223855322-postmessagerelay[1].js", cAlternateFileName="122385~1.JS")) returned 1 [0069.407] FindNextFileW (in: hFindFile=0x5107c20, lpFindFileData=0x31e224 | out: lpFindFileData=0x31e224*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x458a2cf0, ftCreationTime.dwHighDateTime=0x1d2faf3, ftLastAccessTime.dwLowDateTime=0x458a2cf0, ftLastAccessTime.dwHighDateTime=0x1d2faf3, ftLastWriteTime.dwLowDateTime=0x458a2cf0, ftLastWriteTime.dwHighDateTime=0x1d2faf3, nFileSizeHigh=0x0, nFileSizeLow=0x29b, dwReserved0=0x0, dwReserved1=0x0, cFileName="AA3e1oO[1].png", cAlternateFileName="AA3E1O~1.PNG")) returned 1 [0069.407] FindNextFileW (in: hFindFile=0x5107c20, lpFindFileData=0x31e224 | out: lpFindFileData=0x31e224*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x459d37f0, ftCreationTime.dwHighDateTime=0x1d2faf3, ftLastAccessTime.dwLowDateTime=0x459d37f0, ftLastAccessTime.dwHighDateTime=0x1d2faf3, ftLastWriteTime.dwLowDateTime=0x459d37f0, ftLastWriteTime.dwHighDateTime=0x1d2faf3, nFileSizeHigh=0x0, nFileSizeLow=0x265, dwReserved0=0x0, dwReserved1=0x0, cFileName="AA429NP[1].png", cAlternateFileName="AA429N~1.PNG")) returned 1 [0069.407] FindNextFileW (in: hFindFile=0x5107c20, lpFindFileData=0x31e224 | out: lpFindFileData=0x31e224*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x530d5e50, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x530d5e50, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x530fbfb0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x252, dwReserved0=0x0, dwReserved1=0x0, cFileName="AA42pjY[1].png", cAlternateFileName="AA42PJ~1.PNG")) returned 1 [0069.407] FindNextFileW (in: hFindFile=0x5107c20, lpFindFileData=0x31e224 | out: lpFindFileData=0x31e224*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xbe327870, ftCreationTime.dwHighDateTime=0x1d2faf2, ftLastAccessTime.dwLowDateTime=0xbe327870, ftLastAccessTime.dwHighDateTime=0x1d2faf2, ftLastWriteTime.dwLowDateTime=0xbe327870, ftLastWriteTime.dwHighDateTime=0x1d2faf2, nFileSizeHigh=0x0, nFileSizeLow=0x248, dwReserved0=0x0, dwReserved1=0x0, cFileName="AA61AKN[2].png", cAlternateFileName="AA61AK~2.PNG")) returned 1 [0069.407] FindNextFileW (in: hFindFile=0x5107c20, lpFindFileData=0x31e224 | out: lpFindFileData=0x31e224*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x45b042f0, ftCreationTime.dwHighDateTime=0x1d2faf3, ftLastAccessTime.dwLowDateTime=0x45b042f0, ftLastAccessTime.dwHighDateTime=0x1d2faf3, ftLastWriteTime.dwLowDateTime=0x45b042f0, ftLastWriteTime.dwHighDateTime=0x1d2faf3, nFileSizeHigh=0x0, nFileSizeLow=0x21b, dwReserved0=0x0, dwReserved1=0x0, cFileName="AA6KizP[2].png", cAlternateFileName="AA6KIZ~2.PNG")) returned 1 [0069.407] FindNextFileW (in: hFindFile=0x5107c20, lpFindFileData=0x31e224 | out: lpFindFileData=0x31e224*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x457e4610, ftCreationTime.dwHighDateTime=0x1d2faf3, ftLastAccessTime.dwLowDateTime=0x457e4610, ftLastAccessTime.dwHighDateTime=0x1d2faf3, ftLastWriteTime.dwLowDateTime=0x457e4610, ftLastWriteTime.dwHighDateTime=0x1d2faf3, nFileSizeHigh=0x0, nFileSizeLow=0x27b, dwReserved0=0x0, dwReserved1=0x0, cFileName="AA7XCQ3[1].png", cAlternateFileName="AA7XCQ~1.PNG")) returned 1 [0069.408] FindNextFileW (in: hFindFile=0x5107c20, lpFindFileData=0x31e224 | out: lpFindFileData=0x31e224*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x45510bf0, ftCreationTime.dwHighDateTime=0x1d2faf3, ftLastAccessTime.dwLowDateTime=0x45510bf0, ftLastAccessTime.dwHighDateTime=0x1d2faf3, ftLastWriteTime.dwLowDateTime=0x456d9c70, ftLastWriteTime.dwHighDateTime=0x1d2faf3, nFileSizeHigh=0x0, nFileSizeLow=0x268, dwReserved0=0x0, dwReserved1=0x0, cFileName="AA8Tave[1].png", cAlternateFileName="AA8TAV~1.PNG")) returned 1 [0069.408] FindNextFileW (in: hFindFile=0x5107c20, lpFindFileData=0x31e224 | out: lpFindFileData=0x31e224*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xbe399c90, ftCreationTime.dwHighDateTime=0x1d2faf2, ftLastAccessTime.dwLowDateTime=0xbe399c90, ftLastAccessTime.dwHighDateTime=0x1d2faf2, ftLastWriteTime.dwLowDateTime=0xbe399c90, ftLastWriteTime.dwHighDateTime=0x1d2faf2, nFileSizeHigh=0x0, nFileSizeLow=0x21e, dwReserved0=0x0, dwReserved1=0x0, cFileName="AAfOIDq[1].png", cAlternateFileName="AAFOID~1.PNG")) returned 1 [0069.408] FindNextFileW (in: hFindFile=0x5107c20, lpFindFileData=0x31e224 | out: lpFindFileData=0x31e224*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x45b042f0, ftCreationTime.dwHighDateTime=0x1d2faf3, ftLastAccessTime.dwLowDateTime=0x45b042f0, ftLastAccessTime.dwHighDateTime=0x1d2faf3, ftLastWriteTime.dwLowDateTime=0x45b042f0, ftLastWriteTime.dwHighDateTime=0x1d2faf3, nFileSizeHigh=0x0, nFileSizeLow=0x2e3, dwReserved0=0x0, dwReserved1=0x0, cFileName="AAkhMz9[2].png", cAlternateFileName="AAKHMZ~2.PNG")) returned 1 [0069.408] FindNextFileW (in: hFindFile=0x5107c20, lpFindFileData=0x31e224 | out: lpFindFileData=0x31e224*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x53194530, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x53194530, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x53194530, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x12c, dwReserved0=0x0, dwReserved1=0x0, cFileName="AAmRY2Q[1].png", cAlternateFileName="AAMRY2~1.PNG")) returned 1 [0069.408] FindNextFileW (in: hFindFile=0x5107c20, lpFindFileData=0x31e224 | out: lpFindFileData=0x31e224*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x45915110, ftCreationTime.dwHighDateTime=0x1d2faf3, ftLastAccessTime.dwLowDateTime=0x45915110, ftLastAccessTime.dwHighDateTime=0x1d2faf3, ftLastWriteTime.dwLowDateTime=0x45915110, ftLastWriteTime.dwHighDateTime=0x1d2faf3, nFileSizeHigh=0x0, nFileSizeLow=0x391, dwReserved0=0x0, dwReserved1=0x0, cFileName="AAni8qk[1].png", cAlternateFileName="AANI8Q~1.PNG")) returned 1 [0069.408] FindNextFileW (in: hFindFile=0x5107c20, lpFindFileData=0x31e224 | out: lpFindFileData=0x31e224*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xbf1239b0, ftCreationTime.dwHighDateTime=0x1d2faf2, ftLastAccessTime.dwLowDateTime=0xbf1239b0, ftLastAccessTime.dwHighDateTime=0x1d2faf2, ftLastWriteTime.dwLowDateTime=0xbf1239b0, ftLastWriteTime.dwHighDateTime=0x1d2faf2, nFileSizeHigh=0x0, nFileSizeLow=0x7a52, dwReserved0=0x0, dwReserved1=0x0, cFileName="adition[1].js", cAlternateFileName="ADITIO~1.JS")) returned 1 [0069.408] FindNextFileW (in: hFindFile=0x5107c20, lpFindFileData=0x31e224 | out: lpFindFileData=0x31e224*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x53bfe570, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x53bfe570, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x53c4a830, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x3e3, dwReserved0=0x0, dwReserved1=0x0, cFileName="async_usersync[1].htm", cAlternateFileName="ASYNC_~1.HTM")) returned 1 [0069.408] FindNextFileW (in: hFindFile=0x5107c20, lpFindFileData=0x31e224 | out: lpFindFileData=0x31e224*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x53bb22b0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x53bb22b0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x53bfe570, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x5feb, dwReserved0=0x0, dwReserved1=0x0, cFileName="b367c075-d98a-457d-b37d-3d9e8ab53e8b[1].jpg", cAlternateFileName="B367C0~1.JPG")) returned 1 [0069.408] FindNextFileW (in: hFindFile=0x5107c20, lpFindFileData=0x31e224 | out: lpFindFileData=0x31e224*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x459613d0, ftCreationTime.dwHighDateTime=0x1d2faf3, ftLastAccessTime.dwLowDateTime=0x459613d0, ftLastAccessTime.dwHighDateTime=0x1d2faf3, ftLastWriteTime.dwLowDateTime=0x459613d0, ftLastWriteTime.dwHighDateTime=0x1d2faf3, nFileSizeHigh=0x0, nFileSizeLow=0x1aa, dwReserved0=0x0, dwReserved1=0x0, cFileName="BB8jcOr[2].png", cAlternateFileName="BB8JCO~2.PNG")) returned 1 [0069.409] FindNextFileW (in: hFindFile=0x5107c20, lpFindFileData=0x31e224 | out: lpFindFileData=0x31e224*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x45ab8030, ftCreationTime.dwHighDateTime=0x1d2faf3, ftLastAccessTime.dwLowDateTime=0x45ab8030, ftLastAccessTime.dwHighDateTime=0x1d2faf3, ftLastWriteTime.dwLowDateTime=0x45ab8030, ftLastWriteTime.dwHighDateTime=0x1d2faf3, nFileSizeHigh=0x0, nFileSizeLow=0x1c22, dwReserved0=0x0, dwReserved1=0x0, cFileName="BBB8ZbM[1].jpg", cAlternateFileName="BBB8ZB~1.JPG")) returned 1 [0069.409] FindNextFileW (in: hFindFile=0x5107c20, lpFindFileData=0x31e224 | out: lpFindFileData=0x31e224*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x45a1fab0, ftCreationTime.dwHighDateTime=0x1d2faf3, ftLastAccessTime.dwLowDateTime=0x45a1fab0, ftLastAccessTime.dwHighDateTime=0x1d2faf3, ftLastWriteTime.dwLowDateTime=0x45a1fab0, ftLastWriteTime.dwHighDateTime=0x1d2faf3, nFileSizeHigh=0x0, nFileSizeLow=0x234, dwReserved0=0x0, dwReserved1=0x0, cFileName="BBB9wH0[1].png", cAlternateFileName="BBB9WH~1.PNG")) returned 1 [0069.409] FindNextFileW (in: hFindFile=0x5107c20, lpFindFileData=0x31e224 | out: lpFindFileData=0x31e224*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x642446e0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x642446e0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x642446e0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x2ac7, dwReserved0=0x0, dwReserved1=0x0, cFileName="BBBCFjo[1].jpg", cAlternateFileName="BBBCFJ~1.JPG")) returned 1 [0069.409] FindNextFileW (in: hFindFile=0x5107c20, lpFindFileData=0x31e224 | out: lpFindFileData=0x31e224*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x533cf9d0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x533cf9d0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x533cf9d0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x7c9, dwReserved0=0x0, dwReserved1=0x0, cFileName="BBBDtcM[1].jpg", cAlternateFileName="BBBDTC~1.JPG")) returned 1 [0069.409] FindNextFileW (in: hFindFile=0x5107c20, lpFindFileData=0x31e224 | out: lpFindFileData=0x31e224*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x53b8c150, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x53b8c150, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x53b8c150, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x1f19, dwReserved0=0x0, dwReserved1=0x0, cFileName="BBBIeNJ[1].jpg", cAlternateFileName="BBBIEN~1.JPG")) returned 1 [0069.409] FindNextFileW (in: hFindFile=0x5107c20, lpFindFileData=0x31e224 | out: lpFindFileData=0x31e224*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x53598a50, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x53598a50, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x53598a50, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x711, dwReserved0=0x0, dwReserved1=0x0, cFileName="BBBImKX[1].jpg", cAlternateFileName="BBBIMK~1.JPG")) returned 1 [0069.409] FindNextFileW (in: hFindFile=0x5107c20, lpFindFileData=0x31e224 | out: lpFindFileData=0x31e224*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x45b9c870, ftCreationTime.dwHighDateTime=0x1d2faf3, ftLastAccessTime.dwLowDateTime=0x45b9c870, ftLastAccessTime.dwHighDateTime=0x1d2faf3, ftLastWriteTime.dwLowDateTime=0x45b9c870, ftLastWriteTime.dwHighDateTime=0x1d2faf3, nFileSizeHigh=0x0, nFileSizeLow=0x2569, dwReserved0=0x0, dwReserved1=0x0, cFileName="BBBL4R9[1].jpg", cAlternateFileName="BBBL4R~1.JPG")) returned 1 [0069.409] FindNextFileW (in: hFindFile=0x5107c20, lpFindFileData=0x31e224 | out: lpFindFileData=0x31e224*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x539049f0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x539049f0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x539049f0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x30d2, dwReserved0=0x0, dwReserved1=0x0, cFileName="BBBLhTZ[1].jpg", cAlternateFileName="BBBLHT~1.JPG")) returned 1 [0069.410] FindNextFileW (in: hFindFile=0x5107c20, lpFindFileData=0x31e224 | out: lpFindFileData=0x31e224*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x53337450, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x53337450, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x533a9870, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x9b9, dwReserved0=0x0, dwReserved1=0x0, cFileName="BBBnhZY[1].jpg", cAlternateFileName="BBBNHZ~1.JPG")) returned 1 [0069.410] FindNextFileW (in: hFindFile=0x5107c20, lpFindFileData=0x31e224 | out: lpFindFileData=0x31e224*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x671dfee0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x671dfee0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x67206040, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x48f4, dwReserved0=0x0, dwReserved1=0x0, cFileName="BBBPhAr[1].jpg", cAlternateFileName="BBBPHA~1.JPG")) returned 1 [0069.410] FindNextFileW (in: hFindFile=0x5107c20, lpFindFileData=0x31e224 | out: lpFindFileData=0x31e224*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x52e28590, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x52e28590, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x52e28590, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x1c21, dwReserved0=0x0, dwReserved1=0x0, cFileName="BBBPiby[1].jpg", cAlternateFileName="BBBPIB~1.JPG")) returned 1 [0069.410] FindNextFileW (in: hFindFile=0x5107c20, lpFindFileData=0x31e224 | out: lpFindFileData=0x31e224*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x53063a30, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x53063a30, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x53063a30, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x16bf, dwReserved0=0x0, dwReserved1=0x0, cFileName="BBBPmXJ[1].jpg", cAlternateFileName="BBBPMX~1.JPG")) returned 1 [0069.410] FindNextFileW (in: hFindFile=0x5107c20, lpFindFileData=0x31e224 | out: lpFindFileData=0x31e224*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x530d5e50, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x530d5e50, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x53194530, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x21feb, dwReserved0=0x0, dwReserved1=0x0, cFileName="BBBPS37[1].png", cAlternateFileName="BBBPS3~1.PNG")) returned 1 [0069.410] FindNextFileW (in: hFindFile=0x5107c20, lpFindFileData=0x31e224 | out: lpFindFileData=0x31e224*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x52e74850, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x52e74850, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x52e74850, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x12f9, dwReserved0=0x0, dwReserved1=0x0, cFileName="BBBQiBF[1].jpg", cAlternateFileName="BBBQIB~1.JPG")) returned 1 [0069.412] FindNextFileW (in: hFindFile=0x5107c20, lpFindFileData=0x31e224 | out: lpFindFileData=0x31e224*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x533cf9d0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x533cf9d0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x533cf9d0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x9a9, dwReserved0=0x0, dwReserved1=0x0, cFileName="BBBty8h[1].jpg", cAlternateFileName="BBBTY8~1.JPG")) returned 1 [0069.412] FindNextFileW (in: hFindFile=0x5107c20, lpFindFileData=0x31e224 | out: lpFindFileData=0x31e224*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x5303d8d0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x5303d8d0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x5303d8d0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x1b08, dwReserved0=0x0, dwReserved1=0x0, cFileName="BBBVACL[1].jpg", cAlternateFileName="BBBVAC~1.JPG")) returned 1 [0069.412] FindNextFileW (in: hFindFile=0x5107c20, lpFindFileData=0x31e224 | out: lpFindFileData=0x31e224*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x5e29b2c0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x5e29b2c0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x5e29b2c0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x1c41, dwReserved0=0x0, dwReserved1=0x0, cFileName="BBBVGyR[1].jpg", cAlternateFileName="BBBVGY~1.JPG")) returned 1 [0069.412] FindNextFileW (in: hFindFile=0x5107c20, lpFindFileData=0x31e224 | out: lpFindFileData=0x31e224*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x515e8570, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x515e8570, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x515e8570, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x950, dwReserved0=0x0, dwReserved1=0x0, cFileName="BBBVMtX[1].jpg", cAlternateFileName="BBBVMT~1.JPG")) returned 1 [0069.412] FindNextFileW (in: hFindFile=0x5107c20, lpFindFileData=0x31e224 | out: lpFindFileData=0x31e224*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x5530da90, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x5530da90, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x5530da90, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x1bba, dwReserved0=0x0, dwReserved1=0x0, cFileName="BBBVYsu[1].jpg", cAlternateFileName="BBBVYS~1.JPG")) returned 1 [0069.412] FindNextFileW (in: hFindFile=0x5107c20, lpFindFileData=0x31e224 | out: lpFindFileData=0x31e224*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x5154fff0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x5154fff0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x51576150, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x76a, dwReserved0=0x0, dwReserved1=0x0, cFileName="BBBWLtW[1].jpg", cAlternateFileName="BBBWLT~1.JPG")) returned 1 [0069.412] FindNextFileW (in: hFindFile=0x5107c20, lpFindFileData=0x31e224 | out: lpFindFileData=0x31e224*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x52f32f30, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x52f32f30, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x52f32f30, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x95f, dwReserved0=0x0, dwReserved1=0x0, cFileName="BBBX3xB[1].jpg", cAlternateFileName="BBBX3X~1.JPG")) returned 1 [0069.413] FindNextFileW (in: hFindFile=0x5107c20, lpFindFileData=0x31e224 | out: lpFindFileData=0x31e224*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x533112f0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x533112f0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x533112f0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x241e, dwReserved0=0x0, dwReserved1=0x0, cFileName="BBBY98e[1].jpg", cAlternateFileName="BBBY98~1.JPG")) returned 1 [0069.413] FindNextFileW (in: hFindFile=0x5107c20, lpFindFileData=0x31e224 | out: lpFindFileData=0x31e224*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x52fcb4b0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x52fcb4b0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x52fcb4b0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x938, dwReserved0=0x0, dwReserved1=0x0, cFileName="BBBZYVP[1].jpg", cAlternateFileName="BBBZYV~1.JPG")) returned 1 [0069.413] FindNextFileW (in: hFindFile=0x5107c20, lpFindFileData=0x31e224 | out: lpFindFileData=0x31e224*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x52e74850, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x52e74850, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x52e74850, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x192a, dwReserved0=0x0, dwReserved1=0x0, cFileName="BBC04o2[1].jpg", cAlternateFileName="BBC04O~1.JPG")) returned 1 [0069.413] FindNextFileW (in: hFindFile=0x5107c20, lpFindFileData=0x31e224 | out: lpFindFileData=0x31e224*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x538b8730, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x538b8730, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x538b8730, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x23fb, dwReserved0=0x0, dwReserved1=0x0, cFileName="BBC04ok[1].jpg", cAlternateFileName="BBC04O~2.JPG")) returned 1 [0069.413] FindNextFileW (in: hFindFile=0x5107c20, lpFindFileData=0x31e224 | out: lpFindFileData=0x31e224*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x539e9230, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x539e9230, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x539e9230, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x2a99, dwReserved0=0x0, dwReserved1=0x0, cFileName="BBC04we[1].jpg", cAlternateFileName="BBC04W~1.JPG")) returned 1 [0069.413] FindNextFileW (in: hFindFile=0x5107c20, lpFindFileData=0x31e224 | out: lpFindFileData=0x31e224*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x52e02430, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x52e02430, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x52e28590, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x3200, dwReserved0=0x0, dwReserved1=0x0, cFileName="BBC05rl[1].jpg", cAlternateFileName="BBC05R~1.JPG")) returned 1 [0069.413] FindNextFileW (in: hFindFile=0x5107c20, lpFindFileData=0x31e224 | out: lpFindFileData=0x31e224*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x52ec0b10, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x52ec0b10, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x52ec0b10, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x7e1, dwReserved0=0x0, dwReserved1=0x0, cFileName="BBC05rl[2].jpg", cAlternateFileName="BBC05R~2.JPG")) returned 1 [0069.413] FindNextFileW (in: hFindFile=0x5107c20, lpFindFileData=0x31e224 | out: lpFindFileData=0x31e224*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x52ff1610, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x52ff1610, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x52ff1610, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x1b4e, dwReserved0=0x0, dwReserved1=0x0, cFileName="BBC0ATj[1].jpg", cAlternateFileName="BBC0AT~1.JPG")) returned 1 [0069.413] FindNextFileW (in: hFindFile=0x5107c20, lpFindFileData=0x31e224 | out: lpFindFileData=0x31e224*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x5392ab50, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x5392ab50, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x5392ab50, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x751, dwReserved0=0x0, dwReserved1=0x0, cFileName="BBC0D8i[1].jpg", cAlternateFileName="BBC0D8~1.JPG")) returned 1 [0069.414] FindNextFileW (in: hFindFile=0x5107c20, lpFindFileData=0x31e224 | out: lpFindFileData=0x31e224*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x51256470, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x51256470, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x51256470, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x200e, dwReserved0=0x0, dwReserved1=0x0, cFileName="BBC0g7a[1].jpg", cAlternateFileName="BBC0G7~1.JPG")) returned 1 [0069.414] FindNextFileW (in: hFindFile=0x5107c20, lpFindFileData=0x31e224 | out: lpFindFileData=0x31e224*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x52f7f1f0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x52f7f1f0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x52f7f1f0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x1dcb, dwReserved0=0x0, dwReserved1=0x0, cFileName="BBC0w1b[1].jpg", cAlternateFileName="BBC0W1~1.JPG")) returned 1 [0069.414] FindNextFileW (in: hFindFile=0x5107c20, lpFindFileData=0x31e224 | out: lpFindFileData=0x31e224*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x5530da90, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x5530da90, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x55333bf0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x23ba, dwReserved0=0x0, dwReserved1=0x0, cFileName="BBC0xLt[1].jpg", cAlternateFileName="BBC0XL~1.JPG")) returned 1 [0069.414] FindNextFileW (in: hFindFile=0x5107c20, lpFindFileData=0x31e224 | out: lpFindFileData=0x31e224*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x45798350, ftCreationTime.dwHighDateTime=0x1d2faf3, ftLastAccessTime.dwLowDateTime=0x45798350, ftLastAccessTime.dwHighDateTime=0x1d2faf3, ftLastWriteTime.dwLowDateTime=0x45798350, ftLastWriteTime.dwHighDateTime=0x1d2faf3, nFileSizeHigh=0x0, nFileSizeLow=0xb58, dwReserved0=0x0, dwReserved1=0x0, cFileName="BBDWA22[1].jpg", cAlternateFileName="BBDWA2~1.JPG")) returned 1 [0069.414] FindNextFileW (in: hFindFile=0x5107c20, lpFindFileData=0x31e224 | out: lpFindFileData=0x31e224*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x45a45c10, ftCreationTime.dwHighDateTime=0x1d2faf3, ftLastAccessTime.dwLowDateTime=0x45a45c10, ftLastAccessTime.dwHighDateTime=0x1d2faf3, ftLastWriteTime.dwLowDateTime=0x45a45c10, ftLastWriteTime.dwHighDateTime=0x1d2faf3, nFileSizeHigh=0x0, nFileSizeLow=0x91d, dwReserved0=0x0, dwReserved1=0x0, cFileName="BBE7d3b[1].jpg", cAlternateFileName="BBE7D3~1.JPG")) returned 1 [0069.414] FindNextFileW (in: hFindFile=0x5107c20, lpFindFileData=0x31e224 | out: lpFindFileData=0x31e224*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x45583010, ftCreationTime.dwHighDateTime=0x1d2faf3, ftLastAccessTime.dwLowDateTime=0x45583010, ftLastAccessTime.dwHighDateTime=0x1d2faf3, ftLastWriteTime.dwLowDateTime=0x455a9170, ftLastWriteTime.dwHighDateTime=0x1d2faf3, nFileSizeHigh=0x0, nFileSizeLow=0x2850, dwReserved0=0x0, dwReserved1=0x0, cFileName="BBE85ld[1].jpg", cAlternateFileName="BBE85L~1.JPG")) returned 1 [0069.414] FindNextFileW (in: hFindFile=0x5107c20, lpFindFileData=0x31e224 | out: lpFindFileData=0x31e224*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x459613d0, ftCreationTime.dwHighDateTime=0x1d2faf3, ftLastAccessTime.dwLowDateTime=0x459613d0, ftLastAccessTime.dwHighDateTime=0x1d2faf3, ftLastWriteTime.dwLowDateTime=0x459613d0, ftLastWriteTime.dwHighDateTime=0x1d2faf3, nFileSizeHigh=0x0, nFileSizeLow=0x16ca, dwReserved0=0x0, dwReserved1=0x0, cFileName="BBEdckp[1].jpg", cAlternateFileName="BBEDCK~1.JPG")) returned 1 [0069.414] FindNextFileW (in: hFindFile=0x5107c20, lpFindFileData=0x31e224 | out: lpFindFileData=0x31e224*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x45987530, ftCreationTime.dwHighDateTime=0x1d2faf3, ftLastAccessTime.dwLowDateTime=0x45987530, ftLastAccessTime.dwHighDateTime=0x1d2faf3, ftLastWriteTime.dwLowDateTime=0x45987530, ftLastWriteTime.dwHighDateTime=0x1d2faf3, nFileSizeHigh=0x0, nFileSizeLow=0xafe, dwReserved0=0x0, dwReserved1=0x0, cFileName="BBEdMci[1].jpg", cAlternateFileName="BBEDMC~1.JPG")) returned 1 [0069.415] FindNextFileW (in: hFindFile=0x5107c20, lpFindFileData=0x31e224 | out: lpFindFileData=0x31e224*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x4580a770, ftCreationTime.dwHighDateTime=0x1d2faf3, ftLastAccessTime.dwLowDateTime=0x4580a770, ftLastAccessTime.dwHighDateTime=0x1d2faf3, ftLastWriteTime.dwLowDateTime=0x4580a770, ftLastWriteTime.dwHighDateTime=0x1d2faf3, nFileSizeHigh=0x0, nFileSizeLow=0x2a48, dwReserved0=0x0, dwReserved1=0x0, cFileName="BBEdSLV[1].jpg", cAlternateFileName="BBEDSL~1.JPG")) returned 1 [0069.415] FindNextFileW (in: hFindFile=0x5107c20, lpFindFileData=0x31e224 | out: lpFindFileData=0x31e224*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x458c8e50, ftCreationTime.dwHighDateTime=0x1d2faf3, ftLastAccessTime.dwLowDateTime=0x458c8e50, ftLastAccessTime.dwHighDateTime=0x1d2faf3, ftLastWriteTime.dwLowDateTime=0x458c8e50, ftLastWriteTime.dwHighDateTime=0x1d2faf3, nFileSizeHigh=0x0, nFileSizeLow=0x87f, dwReserved0=0x0, dwReserved1=0x0, cFileName="BBEe2Pd[1].jpg", cAlternateFileName="BBEE2P~1.JPG")) returned 1 [0069.415] FindNextFileW (in: hFindFile=0x5107c20, lpFindFileData=0x31e224 | out: lpFindFileData=0x31e224*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x4587cb90, ftCreationTime.dwHighDateTime=0x1d2faf3, ftLastAccessTime.dwLowDateTime=0x4587cb90, ftLastAccessTime.dwHighDateTime=0x1d2faf3, ftLastWriteTime.dwLowDateTime=0x4587cb90, ftLastWriteTime.dwHighDateTime=0x1d2faf3, nFileSizeHigh=0x0, nFileSizeLow=0x3faf, dwReserved0=0x0, dwReserved1=0x0, cFileName="BBEe4Oo[1].png", cAlternateFileName="BBEE4O~1.PNG")) returned 1 [0069.415] FindNextFileW (in: hFindFile=0x5107c20, lpFindFileData=0x31e224 | out: lpFindFileData=0x31e224*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x45b505b0, ftCreationTime.dwHighDateTime=0x1d2faf3, ftLastAccessTime.dwLowDateTime=0x45b505b0, ftLastAccessTime.dwHighDateTime=0x1d2faf3, ftLastWriteTime.dwLowDateTime=0x45b505b0, ftLastWriteTime.dwHighDateTime=0x1d2faf3, nFileSizeHigh=0x0, nFileSizeLow=0xaa9, dwReserved0=0x0, dwReserved1=0x0, cFileName="BBEe6Ew[1].jpg", cAlternateFileName="BBEE6E~1.JPG")) returned 1 [0069.415] FindNextFileW (in: hFindFile=0x5107c20, lpFindFileData=0x31e224 | out: lpFindFileData=0x31e224*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x454c4930, ftCreationTime.dwHighDateTime=0x1d2faf3, ftLastAccessTime.dwLowDateTime=0x454c4930, ftLastAccessTime.dwHighDateTime=0x1d2faf3, ftLastWriteTime.dwLowDateTime=0x454c4930, ftLastWriteTime.dwHighDateTime=0x1d2faf3, nFileSizeHigh=0x0, nFileSizeLow=0x1d26, dwReserved0=0x0, dwReserved1=0x0, cFileName="BBEeFp3[1].jpg", cAlternateFileName="BBEEFP~1.JPG")) returned 1 [0069.415] FindNextFileW (in: hFindFile=0x5107c20, lpFindFileData=0x31e224 | out: lpFindFileData=0x31e224*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xbe3bfdf0, ftCreationTime.dwHighDateTime=0x1d2faf2, ftLastAccessTime.dwLowDateTime=0xbe3bfdf0, ftLastAccessTime.dwHighDateTime=0x1d2faf2, ftLastWriteTime.dwLowDateTime=0xbe3bfdf0, ftLastWriteTime.dwHighDateTime=0x1d2faf2, nFileSizeHigh=0x0, nFileSizeLow=0x780, dwReserved0=0x0, dwReserved1=0x0, cFileName="BBEeGwU[1].jpg", cAlternateFileName="BBEEGW~1.JPG")) returned 1 [0069.415] FindNextFileW (in: hFindFile=0x5107c20, lpFindFileData=0x31e224 | out: lpFindFileData=0x31e224*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x45b505b0, ftCreationTime.dwHighDateTime=0x1d2faf3, ftLastAccessTime.dwLowDateTime=0x45b505b0, ftLastAccessTime.dwHighDateTime=0x1d2faf3, ftLastWriteTime.dwLowDateTime=0x45b505b0, ftLastWriteTime.dwHighDateTime=0x1d2faf3, nFileSizeHigh=0x0, nFileSizeLow=0x7be, dwReserved0=0x0, dwReserved1=0x0, cFileName="BBEeUg0[1].jpg", cAlternateFileName="BBEEUG~1.JPG")) returned 1 [0069.415] FindNextFileW (in: hFindFile=0x5107c20, lpFindFileData=0x31e224 | out: lpFindFileData=0x31e224*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x459ad690, ftCreationTime.dwHighDateTime=0x1d2faf3, ftLastAccessTime.dwLowDateTime=0x459ad690, ftLastAccessTime.dwHighDateTime=0x1d2faf3, ftLastWriteTime.dwLowDateTime=0x459ad690, ftLastWriteTime.dwHighDateTime=0x1d2faf3, nFileSizeHigh=0x0, nFileSizeLow=0x3a2a, dwReserved0=0x0, dwReserved1=0x0, cFileName="BBEeZnr[1].jpg", cAlternateFileName="BBEEZN~1.JPG")) returned 1 [0069.418] FindNextFileW (in: hFindFile=0x5107c20, lpFindFileData=0x31e224 | out: lpFindFileData=0x31e224*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x457e4610, ftCreationTime.dwHighDateTime=0x1d2faf3, ftLastAccessTime.dwLowDateTime=0x457e4610, ftLastAccessTime.dwHighDateTime=0x1d2faf3, ftLastWriteTime.dwLowDateTime=0x457e4610, ftLastWriteTime.dwHighDateTime=0x1d2faf3, nFileSizeHigh=0x0, nFileSizeLow=0x2f76, dwReserved0=0x0, dwReserved1=0x0, cFileName="BBEf5Lq[1].jpg", cAlternateFileName="BBEF5L~1.JPG")) returned 1 [0069.418] FindNextFileW (in: hFindFile=0x5107c20, lpFindFileData=0x31e224 | out: lpFindFileData=0x31e224*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x4574c090, ftCreationTime.dwHighDateTime=0x1d2faf3, ftLastAccessTime.dwLowDateTime=0x4574c090, ftLastAccessTime.dwHighDateTime=0x1d2faf3, ftLastWriteTime.dwLowDateTime=0x4574c090, ftLastWriteTime.dwHighDateTime=0x1d2faf3, nFileSizeHigh=0x0, nFileSizeLow=0x786, dwReserved0=0x0, dwReserved1=0x0, cFileName="BBEfwtU[1].jpg", cAlternateFileName="BBEFWT~1.JPG")) returned 1 [0069.418] FindNextFileW (in: hFindFile=0x5107c20, lpFindFileData=0x31e224 | out: lpFindFileData=0x31e224*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x45798350, ftCreationTime.dwHighDateTime=0x1d2faf3, ftLastAccessTime.dwLowDateTime=0x45798350, ftLastAccessTime.dwHighDateTime=0x1d2faf3, ftLastWriteTime.dwLowDateTime=0x45798350, ftLastWriteTime.dwHighDateTime=0x1d2faf3, nFileSizeHigh=0x0, nFileSizeLow=0xa07, dwReserved0=0x0, dwReserved1=0x0, cFileName="BBEfzSd[1].jpg", cAlternateFileName="BBEFZS~1.JPG")) returned 1 [0069.418] FindNextFileW (in: hFindFile=0x5107c20, lpFindFileData=0x31e224 | out: lpFindFileData=0x31e224*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x454eaa90, ftCreationTime.dwHighDateTime=0x1d2faf3, ftLastAccessTime.dwLowDateTime=0x454eaa90, ftLastAccessTime.dwHighDateTime=0x1d2faf3, ftLastWriteTime.dwLowDateTime=0x454eaa90, ftLastWriteTime.dwHighDateTime=0x1d2faf3, nFileSizeHigh=0x0, nFileSizeLow=0x1998, dwReserved0=0x0, dwReserved1=0x0, cFileName="BBEgCuQ[1].jpg", cAlternateFileName="BBEGCU~1.JPG")) returned 1 [0069.418] FindNextFileW (in: hFindFile=0x5107c20, lpFindFileData=0x31e224 | out: lpFindFileData=0x31e224*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x454c4930, ftCreationTime.dwHighDateTime=0x1d2faf3, ftLastAccessTime.dwLowDateTime=0x454c4930, ftLastAccessTime.dwHighDateTime=0x1d2faf3, ftLastWriteTime.dwLowDateTime=0x454eaa90, ftLastWriteTime.dwHighDateTime=0x1d2faf3, nFileSizeHigh=0x0, nFileSizeLow=0x1a65, dwReserved0=0x0, dwReserved1=0x0, cFileName="BBEgHzB[1].jpg", cAlternateFileName="BBEGHZ~1.JPG")) returned 1 [0069.418] FindNextFileW (in: hFindFile=0x5107c20, lpFindFileData=0x31e224 | out: lpFindFileData=0x31e224*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xbde8add0, ftCreationTime.dwHighDateTime=0x1d2faf2, ftLastAccessTime.dwLowDateTime=0xbde8add0, ftLastAccessTime.dwHighDateTime=0x1d2faf2, ftLastWriteTime.dwLowDateTime=0xbdeb0f30, ftLastWriteTime.dwHighDateTime=0x1d2faf2, nFileSizeHigh=0x0, nFileSizeLow=0x5a45, dwReserved0=0x0, dwReserved1=0x0, cFileName="BBEgIl2[1].jpg", cAlternateFileName="BBEGIL~1.JPG")) returned 1 [0069.419] FindNextFileW (in: hFindFile=0x5107c20, lpFindFileData=0x31e224 | out: lpFindFileData=0x31e224*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x45b2a450, ftCreationTime.dwHighDateTime=0x1d2faf3, ftLastAccessTime.dwLowDateTime=0x45b2a450, ftLastAccessTime.dwHighDateTime=0x1d2faf3, ftLastWriteTime.dwLowDateTime=0x45b2a450, ftLastWriteTime.dwHighDateTime=0x1d2faf3, nFileSizeHigh=0x0, nFileSizeLow=0x388f, dwReserved0=0x0, dwReserved1=0x0, cFileName="BBEgIl2[2].jpg", cAlternateFileName="BBEGIL~2.JPG")) returned 1 [0069.419] FindNextFileW (in: hFindFile=0x5107c20, lpFindFileData=0x31e224 | out: lpFindFileData=0x31e224*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x45856a30, ftCreationTime.dwHighDateTime=0x1d2faf3, ftLastAccessTime.dwLowDateTime=0x45856a30, ftLastAccessTime.dwHighDateTime=0x1d2faf3, ftLastWriteTime.dwLowDateTime=0x45856a30, ftLastWriteTime.dwHighDateTime=0x1d2faf3, nFileSizeHigh=0x0, nFileSizeLow=0x1e97, dwReserved0=0x0, dwReserved1=0x0, cFileName="BBEgIyL[1].jpg", cAlternateFileName="BBEGIY~1.JPG")) returned 1 [0069.419] FindNextFileW (in: hFindFile=0x5107c20, lpFindFileData=0x31e224 | out: lpFindFileData=0x31e224*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x45856a30, ftCreationTime.dwHighDateTime=0x1d2faf3, ftLastAccessTime.dwLowDateTime=0x45856a30, ftLastAccessTime.dwHighDateTime=0x1d2faf3, ftLastWriteTime.dwLowDateTime=0x45856a30, ftLastWriteTime.dwHighDateTime=0x1d2faf3, nFileSizeHigh=0x0, nFileSizeLow=0x23bf, dwReserved0=0x0, dwReserved1=0x0, cFileName="BBEgkY6[1].jpg", cAlternateFileName="BBEGKY~1.JPG")) returned 1 [0069.419] FindNextFileW (in: hFindFile=0x5107c20, lpFindFileData=0x31e224 | out: lpFindFileData=0x31e224*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x4574c090, ftCreationTime.dwHighDateTime=0x1d2faf3, ftLastAccessTime.dwLowDateTime=0x4574c090, ftLastAccessTime.dwHighDateTime=0x1d2faf3, ftLastWriteTime.dwLowDateTime=0x4574c090, ftLastWriteTime.dwHighDateTime=0x1d2faf3, nFileSizeHigh=0x0, nFileSizeLow=0x8df, dwReserved0=0x0, dwReserved1=0x0, cFileName="BBEgLzV[1].jpg", cAlternateFileName="BBEGLZ~1.JPG")) returned 1 [0069.419] FindNextFileW (in: hFindFile=0x5107c20, lpFindFileData=0x31e224 | out: lpFindFileData=0x31e224*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x45a45c10, ftCreationTime.dwHighDateTime=0x1d2faf3, ftLastAccessTime.dwLowDateTime=0x45a45c10, ftLastAccessTime.dwHighDateTime=0x1d2faf3, ftLastWriteTime.dwLowDateTime=0x45a45c10, ftLastWriteTime.dwHighDateTime=0x1d2faf3, nFileSizeHigh=0x0, nFileSizeLow=0x2b8d, dwReserved0=0x0, dwReserved1=0x0, cFileName="BBEgUri[1].jpg", cAlternateFileName="BBEGUR~1.JPG")) returned 1 [0069.419] FindNextFileW (in: hFindFile=0x5107c20, lpFindFileData=0x31e224 | out: lpFindFileData=0x31e224*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x457721f0, ftCreationTime.dwHighDateTime=0x1d2faf3, ftLastAccessTime.dwLowDateTime=0x457721f0, ftLastAccessTime.dwHighDateTime=0x1d2faf3, ftLastWriteTime.dwLowDateTime=0x457721f0, ftLastWriteTime.dwHighDateTime=0x1d2faf3, nFileSizeHigh=0x0, nFileSizeLow=0x201f, dwReserved0=0x0, dwReserved1=0x0, cFileName="BBEgXBv[1].jpg", cAlternateFileName="BBEGXB~1.JPG")) returned 1 [0069.419] FindNextFileW (in: hFindFile=0x5107c20, lpFindFileData=0x31e224 | out: lpFindFileData=0x31e224*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xbe327870, ftCreationTime.dwHighDateTime=0x1d2faf2, ftLastAccessTime.dwLowDateTime=0xbe327870, ftLastAccessTime.dwHighDateTime=0x1d2faf2, ftLastWriteTime.dwLowDateTime=0xbe34d9d0, ftLastWriteTime.dwHighDateTime=0x1d2faf2, nFileSizeHigh=0x0, nFileSizeLow=0x6e9, dwReserved0=0x0, dwReserved1=0x0, cFileName="BBEgZME[1].jpg", cAlternateFileName="BBEGZM~1.JPG")) returned 1 [0069.419] FindNextFileW (in: hFindFile=0x5107c20, lpFindFileData=0x31e224 | out: lpFindFileData=0x31e224*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xbe4ca790, ftCreationTime.dwHighDateTime=0x1d2faf2, ftLastAccessTime.dwLowDateTime=0xbe4ca790, ftLastAccessTime.dwHighDateTime=0x1d2faf2, ftLastWriteTime.dwLowDateTime=0xbe4ca790, ftLastWriteTime.dwHighDateTime=0x1d2faf2, nFileSizeHigh=0x0, nFileSizeLow=0x1dc, dwReserved0=0x0, dwReserved1=0x0, cFileName="BBghfVy[1].png", cAlternateFileName="BBGHFV~1.PNG")) returned 1 [0069.420] FindNextFileW (in: hFindFile=0x5107c20, lpFindFileData=0x31e224 | out: lpFindFileData=0x31e224*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x45725f30, ftCreationTime.dwHighDateTime=0x1d2faf3, ftLastAccessTime.dwLowDateTime=0x45725f30, ftLastAccessTime.dwHighDateTime=0x1d2faf3, ftLastWriteTime.dwLowDateTime=0x45725f30, ftLastWriteTime.dwHighDateTime=0x1d2faf3, nFileSizeHigh=0x0, nFileSizeLow=0x1af, dwReserved0=0x0, dwReserved1=0x0, cFileName="BBkwUr[1].png", cAlternateFileName="BBKWUR~1.PNG")) returned 1 [0069.420] FindNextFileW (in: hFindFile=0x5107c20, lpFindFileData=0x31e224 | out: lpFindFileData=0x31e224*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x45a45c10, ftCreationTime.dwHighDateTime=0x1d2faf3, ftLastAccessTime.dwLowDateTime=0x45a45c10, ftLastAccessTime.dwHighDateTime=0x1d2faf3, ftLastWriteTime.dwLowDateTime=0x45a45c10, ftLastWriteTime.dwHighDateTime=0x1d2faf3, nFileSizeHigh=0x0, nFileSizeLow=0x23b, dwReserved0=0x0, dwReserved1=0x0, cFileName="BBlBV0U[1].png", cAlternateFileName="BBLBV0~1.PNG")) returned 1 [0069.420] FindNextFileW (in: hFindFile=0x5107c20, lpFindFileData=0x31e224 | out: lpFindFileData=0x31e224*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x5159c2b0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x5159c2b0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x5159c2b0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x3376, dwReserved0=0x0, dwReserved1=0x0, cFileName="BBzhWWE[1].jpg", cAlternateFileName="BBZHWW~1.JPG")) returned 1 [0069.420] FindNextFileW (in: hFindFile=0x5107c20, lpFindFileData=0x31e224 | out: lpFindFileData=0x31e224*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x60baae40, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x60baae40, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x60c433c0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x13c06, dwReserved0=0x0, dwReserved1=0x0, cFileName="benefits-2[1].jpg", cAlternateFileName="BENEFI~2.JPG")) returned 1 [0069.420] FindNextFileW (in: hFindFile=0x5107c20, lpFindFileData=0x31e224 | out: lpFindFileData=0x31e224*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x60b84ce0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x60b84ce0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x60c1d260, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x144cd, dwReserved0=0x0, dwReserved1=0x0, cFileName="benefits-4[1].jpg", cAlternateFileName="BENEFI~1.JPG")) returned 1 [0069.420] FindNextFileW (in: hFindFile=0x5107c20, lpFindFileData=0x31e224 | out: lpFindFileData=0x31e224*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xbf4dbc10, ftCreationTime.dwHighDateTime=0x1d2faf2, ftLastAccessTime.dwLowDateTime=0xbf4dbc10, ftLastAccessTime.dwHighDateTime=0x1d2faf2, ftLastWriteTime.dwLowDateTime=0xbf4dbc10, ftLastWriteTime.dwHighDateTime=0x1d2faf2, nFileSizeHigh=0x0, nFileSizeLow=0x6f15, dwReserved0=0x0, dwReserved1=0x0, cFileName="bootstrap[1].js", cAlternateFileName="BOOTST~1.JS")) returned 1 [0069.420] FindNextFileW (in: hFindFile=0x5107c20, lpFindFileData=0x31e224 | out: lpFindFileData=0x31e224*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x583e0320, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x583e0320, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x583e0320, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0xaf6, dwReserved0=0x0, dwReserved1=0x0, cFileName="browser[1].htm", cAlternateFileName="BROWSE~1.HTM")) returned 1 [0069.421] FindNextFileW (in: hFindFile=0x5107c20, lpFindFileData=0x31e224 | out: lpFindFileData=0x31e224*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x54b2b1b0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x54b2b1b0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x54b2b1b0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x4dd8, dwReserved0=0x0, dwReserved1=0x0, cFileName="bs-jsdep[1].css", cAlternateFileName="BS-JSD~1.CSS")) returned 1 [0069.421] FindNextFileW (in: hFindFile=0x5107c20, lpFindFileData=0x31e224 | out: lpFindFileData=0x31e224*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x61341460, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x61341460, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x613675c0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x1c9f6, dwReserved0=0x0, dwReserved1=0x0, cFileName="cb=gapi[1].loaded_0", cAlternateFileName="CB_GAP~1.LOA")) returned 1 [0069.421] FindNextFileW (in: hFindFile=0x5107c20, lpFindFileData=0x31e224 | out: lpFindFileData=0x31e224*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x467cf930, ftCreationTime.dwHighDateTime=0x1d2faf3, ftLastAccessTime.dwLowDateTime=0x467cf930, ftLastAccessTime.dwHighDateTime=0x1d2faf3, ftLastWriteTime.dwLowDateTime=0x467cf930, ftLastWriteTime.dwHighDateTime=0x1d2faf3, nFileSizeHigh=0x0, nFileSizeLow=0x2b, dwReserved0=0x0, dwReserved1=0x0, cFileName="collect[1].gif", cAlternateFileName="COLLEC~1.GIF")) returned 1 [0069.421] FindNextFileW (in: hFindFile=0x5107c20, lpFindFileData=0x31e224 | out: lpFindFileData=0x31e224*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x54b51310, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x54b51310, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x54b51310, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x29349, dwReserved0=0x0, dwReserved1=0x0, cFileName="core[1].css", cAlternateFileName="CORE_1~1.CSS")) returned 1 [0069.421] FindNextFileW (in: hFindFile=0x5107c20, lpFindFileData=0x31e224 | out: lpFindFileData=0x31e224*(dwFileAttributes=0x2006, ftCreationTime.dwLowDateTime=0x4f090c50, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x4f090c50, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x4f090c50, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x43, dwReserved0=0x0, dwReserved1=0x0, cFileName="desktop.ini", cAlternateFileName="")) returned 1 [0069.421] FindNextFileW (in: hFindFile=0x5107c20, lpFindFileData=0x31e224 | out: lpFindFileData=0x31e224*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x54ca7f70, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x54ca7f70, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x54ca7f70, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x2a3c, dwReserved0=0x0, dwReserved1=0x0, cFileName="DevCMDL2.2.18[1].eot", cAlternateFileName="DEVCMD~1.EOT")) returned 1 [0069.421] FindNextFileW (in: hFindFile=0x5107c20, lpFindFileData=0x31e224 | out: lpFindFileData=0x31e224*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x5120a1b0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x5120a1b0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x5120a1b0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x2b, dwReserved0=0x0, dwReserved1=0x0, cFileName="e151e5[1].gif", cAlternateFileName="E151E5~1.GIF")) returned 1 [0069.421] FindNextFileW (in: hFindFile=0x5107c20, lpFindFileData=0x31e224 | out: lpFindFileData=0x31e224*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x5101afd0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x5101afd0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x5101afd0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x24e29, dwReserved0=0x0, dwReserved1=0x0, cFileName="e4-190963-91cdfbc1[1].txt", cAlternateFileName="E4-190~1.TXT")) returned 1 [0069.421] FindNextFileW (in: hFindFile=0x5107c20, lpFindFileData=0x31e224 | out: lpFindFileData=0x31e224*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x60b5eb80, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x60b5eb80, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x60f89200, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0xf8f5, dwReserved0=0x0, dwReserved1=0x0, cFileName="eula_text[1].htm", cAlternateFileName="EULA_T~1.HTM")) returned 1 [0069.422] FindNextFileW (in: hFindFile=0x5107c20, lpFindFileData=0x31e224 | out: lpFindFileData=0x31e224*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x62410fc0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x62410fc0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x62410fc0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x34ce, dwReserved0=0x0, dwReserved1=0x0, cFileName="f[1].txt", cAlternateFileName="F_1_~1.TXT")) returned 1 [0069.422] FindNextFileW (in: hFindFile=0x5107c20, lpFindFileData=0x31e224 | out: lpFindFileData=0x31e224*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x53089b90, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x53089b90, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x53089b90, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x1254, dwReserved0=0x0, dwReserved1=0x0, cFileName="getype=homepage;kvpg=msn%2Fde-de;kvugc=0;kvmn=MSNDEDE1B;kvgrp=627518548;kvismob=2;extmirroring=0;kvtile=3;target=_blank;aduho=600;grp=627518548[1]", cAlternateFileName="GETYPE~1")) returned 1 [0069.422] FindNextFileW (in: hFindFile=0x5107c20, lpFindFileData=0x31e224 | out: lpFindFileData=0x31e224*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x60ef0c80, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x60ef0c80, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x60f16de0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x6a6, dwReserved0=0x0, dwReserved1=0x0, cFileName="google_plus_16dp[1].png", cAlternateFileName="GOOGLE~1.PNG")) returned 1 [0069.422] FindNextFileW (in: hFindFile=0x5107c20, lpFindFileData=0x31e224 | out: lpFindFileData=0x31e224*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x5de2e5c0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x5de2e5c0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x5de54720, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0xb6c8, dwReserved0=0x0, dwReserved1=0x0, cFileName="index[1].htm", cAlternateFileName="INDEX_~1.HTM")) returned 1 [0069.422] FindNextFileW (in: hFindFile=0x5107c20, lpFindFileData=0x31e224 | out: lpFindFileData=0x31e224*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x54fa1af0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x54fa1af0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x54fa1af0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0xa2, dwReserved0=0x0, dwReserved1=0x0, cFileName="print[1].txt", cAlternateFileName="PRINT_~1.TXT")) returned 1 [0069.422] FindNextFileW (in: hFindFile=0x5107c20, lpFindFileData=0x31e224 | out: lpFindFileData=0x31e224*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x44f697b0, ftCreationTime.dwHighDateTime=0x1d2faf3, ftLastAccessTime.dwLowDateTime=0x44f697b0, ftLastAccessTime.dwHighDateTime=0x1d2faf3, ftLastWriteTime.dwLowDateTime=0x44f8f910, ftLastWriteTime.dwHighDateTime=0x1d2faf3, nFileSizeHigh=0x0, nFileSizeLow=0x15429, dwReserved0=0x0, dwReserved1=0x0, cFileName="Standard[1]", cAlternateFileName="STANDA~1")) returned 1 [0069.422] FindNextFileW (in: hFindFile=0x5107c20, lpFindFileData=0x31e224 | out: lpFindFileData=0x31e224*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xbfbb3b50, ftCreationTime.dwHighDateTime=0x1d2faf2, ftLastAccessTime.dwLowDateTime=0xbfbb3b50, ftLastAccessTime.dwHighDateTime=0x1d2faf2, ftLastWriteTime.dwLowDateTime=0xbfbb3b50, ftLastWriteTime.dwHighDateTime=0x1d2faf2, nFileSizeHigh=0x0, nFileSizeLow=0x67, dwReserved0=0x0, dwReserved1=0x0, cFileName="tecjslog[1].png", cAlternateFileName="TECJSL~1.PNG")) returned 1 [0069.422] FindNextFileW (in: hFindFile=0x5107c20, lpFindFileData=0x31e224 | out: lpFindFileData=0x31e224*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x548efd10, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x548efd10, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x548efd10, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x102ea, dwReserved0=0x0, dwReserved1=0x0, cFileName="uhf-main.var.min[1].js", cAlternateFileName="UHF-MA~1.JS")) returned 1 [0069.423] FindNextFileW (in: hFindFile=0x5107c20, lpFindFileData=0x31e224 | out: lpFindFileData=0x31e224*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x5386c470, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x5386c470, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x5386c470, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x2dd5, dwReserved0=0x0, dwReserved1=0x0, cFileName="v2[1]", cAlternateFileName="V2_1_~1")) returned 1 [0069.423] FindNextFileW (in: hFindFile=0x5107c20, lpFindFileData=0x31e224 | out: lpFindFileData=0x31e224*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x5386c470, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x5386c470, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x5386c470, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x2d29, dwReserved0=0x0, dwReserved1=0x0, cFileName="v2[2]", cAlternateFileName="V2_2_~1")) returned 1 [0069.423] FindNextFileW (in: hFindFile=0x5107c20, lpFindFileData=0x31e224 | out: lpFindFileData=0x31e224*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xbe751ef0, ftCreationTime.dwHighDateTime=0x1d2faf2, ftLastAccessTime.dwLowDateTime=0xbe751ef0, ftLastAccessTime.dwHighDateTime=0x1d2faf2, ftLastWriteTime.dwLowDateTime=0xbe751ef0, ftLastWriteTime.dwHighDateTime=0x1d2faf2, nFileSizeHigh=0x0, nFileSizeLow=0x2fa8, dwReserved0=0x0, dwReserved1=0x0, cFileName="v2[3]", cAlternateFileName="V2_3_~1")) returned 1 [0069.423] FindNextFileW (in: hFindFile=0x5107c20, lpFindFileData=0x31e224 | out: lpFindFileData=0x31e224*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xbe8829f0, ftCreationTime.dwHighDateTime=0x1d2faf2, ftLastAccessTime.dwLowDateTime=0xbe8829f0, ftLastAccessTime.dwHighDateTime=0x1d2faf2, ftLastWriteTime.dwLowDateTime=0xbe8829f0, ftLastWriteTime.dwHighDateTime=0x1d2faf2, nFileSizeHigh=0x0, nFileSizeLow=0x2da9, dwReserved0=0x0, dwReserved1=0x0, cFileName="v2[4]", cAlternateFileName="V2_4_~1")) returned 1 [0069.423] FindNextFileW (in: hFindFile=0x5107c20, lpFindFileData=0x31e224 | out: lpFindFileData=0x31e224*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0069.423] FindClose (in: hFindFile=0x5107c20 | out: hFindFile=0x5107c20) returned 1 [0069.424] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e4ac) returned 1 [0069.424] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e4b8) returned 1 [0069.424] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e4ec) returned 1 [0069.424] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\ABV8L7MY", nBufferLength=0x105, lpBuffer=0x31dff4, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\ABV8L7MY", lpFilePart=0x0) returned 0x6f [0069.424] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\ABV8L7MY\\", nBufferLength=0x105, lpBuffer=0x31dfc8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\ABV8L7MY\\", lpFilePart=0x0) returned 0x70 [0069.424] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\ABV8L7MY\\*", lpFindFileData=0x31e214 | out: lpFindFileData=0x31e214*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0x4f090c50, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x467cf930, ftLastAccessTime.dwHighDateTime=0x1d2faf3, ftLastWriteTime.dwLowDateTime=0x467cf930, ftLastWriteTime.dwHighDateTime=0x1d2faf3, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5107c20 [0069.425] FindNextFileW (in: hFindFile=0x5107c20, lpFindFileData=0x31e224 | out: lpFindFileData=0x31e224*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0x4f090c50, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x467cf930, ftLastAccessTime.dwHighDateTime=0x1d2faf3, ftLastWriteTime.dwLowDateTime=0x467cf930, ftLastWriteTime.dwHighDateTime=0x1d2faf3, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0069.425] FindNextFileW (in: hFindFile=0x5107c20, lpFindFileData=0x31e224 | out: lpFindFileData=0x31e224*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xbfa36d90, ftCreationTime.dwHighDateTime=0x1d2faf2, ftLastAccessTime.dwLowDateTime=0xbfa36d90, ftLastAccessTime.dwHighDateTime=0x1d2faf2, ftLastWriteTime.dwLowDateTime=0xbfa83050, ftLastWriteTime.dwHighDateTime=0x1d2faf2, nFileSizeHigh=0x0, nFileSizeLow=0xe455, dwReserved0=0x0, dwReserved1=0x0, cFileName="000000929096[1].gif", cAlternateFileName="000000~1.GIF")) returned 1 [0069.425] FindNextFileW (in: hFindFile=0x5107c20, lpFindFileData=0x31e224 | out: lpFindFileData=0x31e224*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x6384cac0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x6384cac0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x6384cac0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x2929, dwReserved0=0x0, dwReserved1=0x0, cFileName="1223855322-postmessagerelay[1].js", cAlternateFileName="122385~1.JS")) returned 1 [0069.425] FindNextFileW (in: hFindFile=0x5107c20, lpFindFileData=0x31e224 | out: lpFindFileData=0x31e224*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x458a2cf0, ftCreationTime.dwHighDateTime=0x1d2faf3, ftLastAccessTime.dwLowDateTime=0x458a2cf0, ftLastAccessTime.dwHighDateTime=0x1d2faf3, ftLastWriteTime.dwLowDateTime=0x458a2cf0, ftLastWriteTime.dwHighDateTime=0x1d2faf3, nFileSizeHigh=0x0, nFileSizeLow=0x29b, dwReserved0=0x0, dwReserved1=0x0, cFileName="AA3e1oO[1].png", cAlternateFileName="AA3E1O~1.PNG")) returned 1 [0069.426] FindNextFileW (in: hFindFile=0x5107c20, lpFindFileData=0x31e224 | out: lpFindFileData=0x31e224*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x459d37f0, ftCreationTime.dwHighDateTime=0x1d2faf3, ftLastAccessTime.dwLowDateTime=0x459d37f0, ftLastAccessTime.dwHighDateTime=0x1d2faf3, ftLastWriteTime.dwLowDateTime=0x459d37f0, ftLastWriteTime.dwHighDateTime=0x1d2faf3, nFileSizeHigh=0x0, nFileSizeLow=0x265, dwReserved0=0x0, dwReserved1=0x0, cFileName="AA429NP[1].png", cAlternateFileName="AA429N~1.PNG")) returned 1 [0069.426] FindNextFileW (in: hFindFile=0x5107c20, lpFindFileData=0x31e224 | out: lpFindFileData=0x31e224*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x530d5e50, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x530d5e50, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x530fbfb0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x252, dwReserved0=0x0, dwReserved1=0x0, cFileName="AA42pjY[1].png", cAlternateFileName="AA42PJ~1.PNG")) returned 1 [0069.426] FindNextFileW (in: hFindFile=0x5107c20, lpFindFileData=0x31e224 | out: lpFindFileData=0x31e224*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xbe327870, ftCreationTime.dwHighDateTime=0x1d2faf2, ftLastAccessTime.dwLowDateTime=0xbe327870, ftLastAccessTime.dwHighDateTime=0x1d2faf2, ftLastWriteTime.dwLowDateTime=0xbe327870, ftLastWriteTime.dwHighDateTime=0x1d2faf2, nFileSizeHigh=0x0, nFileSizeLow=0x248, dwReserved0=0x0, dwReserved1=0x0, cFileName="AA61AKN[2].png", cAlternateFileName="AA61AK~2.PNG")) returned 1 [0069.426] FindNextFileW (in: hFindFile=0x5107c20, lpFindFileData=0x31e224 | out: lpFindFileData=0x31e224*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x45b042f0, ftCreationTime.dwHighDateTime=0x1d2faf3, ftLastAccessTime.dwLowDateTime=0x45b042f0, ftLastAccessTime.dwHighDateTime=0x1d2faf3, ftLastWriteTime.dwLowDateTime=0x45b042f0, ftLastWriteTime.dwHighDateTime=0x1d2faf3, nFileSizeHigh=0x0, nFileSizeLow=0x21b, dwReserved0=0x0, dwReserved1=0x0, cFileName="AA6KizP[2].png", cAlternateFileName="AA6KIZ~2.PNG")) returned 1 [0069.426] FindNextFileW (in: hFindFile=0x5107c20, lpFindFileData=0x31e224 | out: lpFindFileData=0x31e224*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x457e4610, ftCreationTime.dwHighDateTime=0x1d2faf3, ftLastAccessTime.dwLowDateTime=0x457e4610, ftLastAccessTime.dwHighDateTime=0x1d2faf3, ftLastWriteTime.dwLowDateTime=0x457e4610, ftLastWriteTime.dwHighDateTime=0x1d2faf3, nFileSizeHigh=0x0, nFileSizeLow=0x27b, dwReserved0=0x0, dwReserved1=0x0, cFileName="AA7XCQ3[1].png", cAlternateFileName="AA7XCQ~1.PNG")) returned 1 [0069.426] FindNextFileW (in: hFindFile=0x5107c20, lpFindFileData=0x31e224 | out: lpFindFileData=0x31e224*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x45510bf0, ftCreationTime.dwHighDateTime=0x1d2faf3, ftLastAccessTime.dwLowDateTime=0x45510bf0, ftLastAccessTime.dwHighDateTime=0x1d2faf3, ftLastWriteTime.dwLowDateTime=0x456d9c70, ftLastWriteTime.dwHighDateTime=0x1d2faf3, nFileSizeHigh=0x0, nFileSizeLow=0x268, dwReserved0=0x0, dwReserved1=0x0, cFileName="AA8Tave[1].png", cAlternateFileName="AA8TAV~1.PNG")) returned 1 [0069.426] FindNextFileW (in: hFindFile=0x5107c20, lpFindFileData=0x31e224 | out: lpFindFileData=0x31e224*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xbe399c90, ftCreationTime.dwHighDateTime=0x1d2faf2, ftLastAccessTime.dwLowDateTime=0xbe399c90, ftLastAccessTime.dwHighDateTime=0x1d2faf2, ftLastWriteTime.dwLowDateTime=0xbe399c90, ftLastWriteTime.dwHighDateTime=0x1d2faf2, nFileSizeHigh=0x0, nFileSizeLow=0x21e, dwReserved0=0x0, dwReserved1=0x0, cFileName="AAfOIDq[1].png", cAlternateFileName="AAFOID~1.PNG")) returned 1 [0069.426] FindNextFileW (in: hFindFile=0x5107c20, lpFindFileData=0x31e224 | out: lpFindFileData=0x31e224*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x45b042f0, ftCreationTime.dwHighDateTime=0x1d2faf3, ftLastAccessTime.dwLowDateTime=0x45b042f0, ftLastAccessTime.dwHighDateTime=0x1d2faf3, ftLastWriteTime.dwLowDateTime=0x45b042f0, ftLastWriteTime.dwHighDateTime=0x1d2faf3, nFileSizeHigh=0x0, nFileSizeLow=0x2e3, dwReserved0=0x0, dwReserved1=0x0, cFileName="AAkhMz9[2].png", cAlternateFileName="AAKHMZ~2.PNG")) returned 1 [0069.427] FindNextFileW (in: hFindFile=0x5107c20, lpFindFileData=0x31e224 | out: lpFindFileData=0x31e224*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x53194530, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x53194530, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x53194530, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x12c, dwReserved0=0x0, dwReserved1=0x0, cFileName="AAmRY2Q[1].png", cAlternateFileName="AAMRY2~1.PNG")) returned 1 [0069.427] FindNextFileW (in: hFindFile=0x5107c20, lpFindFileData=0x31e224 | out: lpFindFileData=0x31e224*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x45915110, ftCreationTime.dwHighDateTime=0x1d2faf3, ftLastAccessTime.dwLowDateTime=0x45915110, ftLastAccessTime.dwHighDateTime=0x1d2faf3, ftLastWriteTime.dwLowDateTime=0x45915110, ftLastWriteTime.dwHighDateTime=0x1d2faf3, nFileSizeHigh=0x0, nFileSizeLow=0x391, dwReserved0=0x0, dwReserved1=0x0, cFileName="AAni8qk[1].png", cAlternateFileName="AANI8Q~1.PNG")) returned 1 [0069.427] FindNextFileW (in: hFindFile=0x5107c20, lpFindFileData=0x31e224 | out: lpFindFileData=0x31e224*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xbf1239b0, ftCreationTime.dwHighDateTime=0x1d2faf2, ftLastAccessTime.dwLowDateTime=0xbf1239b0, ftLastAccessTime.dwHighDateTime=0x1d2faf2, ftLastWriteTime.dwLowDateTime=0xbf1239b0, ftLastWriteTime.dwHighDateTime=0x1d2faf2, nFileSizeHigh=0x0, nFileSizeLow=0x7a52, dwReserved0=0x0, dwReserved1=0x0, cFileName="adition[1].js", cAlternateFileName="ADITIO~1.JS")) returned 1 [0069.427] FindNextFileW (in: hFindFile=0x5107c20, lpFindFileData=0x31e224 | out: lpFindFileData=0x31e224*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x53bfe570, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x53bfe570, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x53c4a830, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x3e3, dwReserved0=0x0, dwReserved1=0x0, cFileName="async_usersync[1].htm", cAlternateFileName="ASYNC_~1.HTM")) returned 1 [0069.427] FindNextFileW (in: hFindFile=0x5107c20, lpFindFileData=0x31e224 | out: lpFindFileData=0x31e224*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x53bb22b0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x53bb22b0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x53bfe570, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x5feb, dwReserved0=0x0, dwReserved1=0x0, cFileName="b367c075-d98a-457d-b37d-3d9e8ab53e8b[1].jpg", cAlternateFileName="B367C0~1.JPG")) returned 1 [0069.427] FindNextFileW (in: hFindFile=0x5107c20, lpFindFileData=0x31e224 | out: lpFindFileData=0x31e224*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x459613d0, ftCreationTime.dwHighDateTime=0x1d2faf3, ftLastAccessTime.dwLowDateTime=0x459613d0, ftLastAccessTime.dwHighDateTime=0x1d2faf3, ftLastWriteTime.dwLowDateTime=0x459613d0, ftLastWriteTime.dwHighDateTime=0x1d2faf3, nFileSizeHigh=0x0, nFileSizeLow=0x1aa, dwReserved0=0x0, dwReserved1=0x0, cFileName="BB8jcOr[2].png", cAlternateFileName="BB8JCO~2.PNG")) returned 1 [0069.427] FindNextFileW (in: hFindFile=0x5107c20, lpFindFileData=0x31e224 | out: lpFindFileData=0x31e224*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x45ab8030, ftCreationTime.dwHighDateTime=0x1d2faf3, ftLastAccessTime.dwLowDateTime=0x45ab8030, ftLastAccessTime.dwHighDateTime=0x1d2faf3, ftLastWriteTime.dwLowDateTime=0x45ab8030, ftLastWriteTime.dwHighDateTime=0x1d2faf3, nFileSizeHigh=0x0, nFileSizeLow=0x1c22, dwReserved0=0x0, dwReserved1=0x0, cFileName="BBB8ZbM[1].jpg", cAlternateFileName="BBB8ZB~1.JPG")) returned 1 [0069.427] FindNextFileW (in: hFindFile=0x5107c20, lpFindFileData=0x31e224 | out: lpFindFileData=0x31e224*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x45a1fab0, ftCreationTime.dwHighDateTime=0x1d2faf3, ftLastAccessTime.dwLowDateTime=0x45a1fab0, ftLastAccessTime.dwHighDateTime=0x1d2faf3, ftLastWriteTime.dwLowDateTime=0x45a1fab0, ftLastWriteTime.dwHighDateTime=0x1d2faf3, nFileSizeHigh=0x0, nFileSizeLow=0x234, dwReserved0=0x0, dwReserved1=0x0, cFileName="BBB9wH0[1].png", cAlternateFileName="BBB9WH~1.PNG")) returned 1 [0069.427] FindNextFileW (in: hFindFile=0x5107c20, lpFindFileData=0x31e224 | out: lpFindFileData=0x31e224*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x642446e0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x642446e0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x642446e0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x2ac7, dwReserved0=0x0, dwReserved1=0x0, cFileName="BBBCFjo[1].jpg", cAlternateFileName="BBBCFJ~1.JPG")) returned 1 [0069.427] FindNextFileW (in: hFindFile=0x5107c20, lpFindFileData=0x31e224 | out: lpFindFileData=0x31e224*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x533cf9d0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x533cf9d0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x533cf9d0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x7c9, dwReserved0=0x0, dwReserved1=0x0, cFileName="BBBDtcM[1].jpg", cAlternateFileName="BBBDTC~1.JPG")) returned 1 [0069.427] FindNextFileW (in: hFindFile=0x5107c20, lpFindFileData=0x31e224 | out: lpFindFileData=0x31e224*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x53b8c150, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x53b8c150, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x53b8c150, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x1f19, dwReserved0=0x0, dwReserved1=0x0, cFileName="BBBIeNJ[1].jpg", cAlternateFileName="BBBIEN~1.JPG")) returned 1 [0069.427] FindNextFileW (in: hFindFile=0x5107c20, lpFindFileData=0x31e224 | out: lpFindFileData=0x31e224*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x53598a50, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x53598a50, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x53598a50, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x711, dwReserved0=0x0, dwReserved1=0x0, cFileName="BBBImKX[1].jpg", cAlternateFileName="BBBIMK~1.JPG")) returned 1 [0069.427] FindNextFileW (in: hFindFile=0x5107c20, lpFindFileData=0x31e224 | out: lpFindFileData=0x31e224*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x45b9c870, ftCreationTime.dwHighDateTime=0x1d2faf3, ftLastAccessTime.dwLowDateTime=0x45b9c870, ftLastAccessTime.dwHighDateTime=0x1d2faf3, ftLastWriteTime.dwLowDateTime=0x45b9c870, ftLastWriteTime.dwHighDateTime=0x1d2faf3, nFileSizeHigh=0x0, nFileSizeLow=0x2569, dwReserved0=0x0, dwReserved1=0x0, cFileName="BBBL4R9[1].jpg", cAlternateFileName="BBBL4R~1.JPG")) returned 1 [0069.427] FindNextFileW (in: hFindFile=0x5107c20, lpFindFileData=0x31e224 | out: lpFindFileData=0x31e224*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x539049f0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x539049f0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x539049f0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x30d2, dwReserved0=0x0, dwReserved1=0x0, cFileName="BBBLhTZ[1].jpg", cAlternateFileName="BBBLHT~1.JPG")) returned 1 [0069.428] FindNextFileW (in: hFindFile=0x5107c20, lpFindFileData=0x31e224 | out: lpFindFileData=0x31e224*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x53337450, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x53337450, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x533a9870, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x9b9, dwReserved0=0x0, dwReserved1=0x0, cFileName="BBBnhZY[1].jpg", cAlternateFileName="BBBNHZ~1.JPG")) returned 1 [0069.428] FindNextFileW (in: hFindFile=0x5107c20, lpFindFileData=0x31e224 | out: lpFindFileData=0x31e224*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x671dfee0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x671dfee0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x67206040, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x48f4, dwReserved0=0x0, dwReserved1=0x0, cFileName="BBBPhAr[1].jpg", cAlternateFileName="BBBPHA~1.JPG")) returned 1 [0069.428] FindNextFileW (in: hFindFile=0x5107c20, lpFindFileData=0x31e224 | out: lpFindFileData=0x31e224*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x52e28590, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x52e28590, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x52e28590, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x1c21, dwReserved0=0x0, dwReserved1=0x0, cFileName="BBBPiby[1].jpg", cAlternateFileName="BBBPIB~1.JPG")) returned 1 [0069.428] FindNextFileW (in: hFindFile=0x5107c20, lpFindFileData=0x31e224 | out: lpFindFileData=0x31e224*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x53063a30, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x53063a30, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x53063a30, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x16bf, dwReserved0=0x0, dwReserved1=0x0, cFileName="BBBPmXJ[1].jpg", cAlternateFileName="BBBPMX~1.JPG")) returned 1 [0069.428] FindNextFileW (in: hFindFile=0x5107c20, lpFindFileData=0x31e224 | out: lpFindFileData=0x31e224*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x530d5e50, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x530d5e50, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x53194530, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x21feb, dwReserved0=0x0, dwReserved1=0x0, cFileName="BBBPS37[1].png", cAlternateFileName="BBBPS3~1.PNG")) returned 1 [0069.428] FindNextFileW (in: hFindFile=0x5107c20, lpFindFileData=0x31e224 | out: lpFindFileData=0x31e224*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x52e74850, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x52e74850, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x52e74850, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x12f9, dwReserved0=0x0, dwReserved1=0x0, cFileName="BBBQiBF[1].jpg", cAlternateFileName="BBBQIB~1.JPG")) returned 1 [0069.428] FindNextFileW (in: hFindFile=0x5107c20, lpFindFileData=0x31e224 | out: lpFindFileData=0x31e224*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x533cf9d0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x533cf9d0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x533cf9d0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x9a9, dwReserved0=0x0, dwReserved1=0x0, cFileName="BBBty8h[1].jpg", cAlternateFileName="BBBTY8~1.JPG")) returned 1 [0069.428] FindNextFileW (in: hFindFile=0x5107c20, lpFindFileData=0x31e224 | out: lpFindFileData=0x31e224*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x5303d8d0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x5303d8d0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x5303d8d0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x1b08, dwReserved0=0x0, dwReserved1=0x0, cFileName="BBBVACL[1].jpg", cAlternateFileName="BBBVAC~1.JPG")) returned 1 [0069.428] FindNextFileW (in: hFindFile=0x5107c20, lpFindFileData=0x31e224 | out: lpFindFileData=0x31e224*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x5e29b2c0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x5e29b2c0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x5e29b2c0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x1c41, dwReserved0=0x0, dwReserved1=0x0, cFileName="BBBVGyR[1].jpg", cAlternateFileName="BBBVGY~1.JPG")) returned 1 [0069.428] FindNextFileW (in: hFindFile=0x5107c20, lpFindFileData=0x31e224 | out: lpFindFileData=0x31e224*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x515e8570, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x515e8570, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x515e8570, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x950, dwReserved0=0x0, dwReserved1=0x0, cFileName="BBBVMtX[1].jpg", cAlternateFileName="BBBVMT~1.JPG")) returned 1 [0069.428] FindNextFileW (in: hFindFile=0x5107c20, lpFindFileData=0x31e224 | out: lpFindFileData=0x31e224*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x5530da90, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x5530da90, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x5530da90, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x1bba, dwReserved0=0x0, dwReserved1=0x0, cFileName="BBBVYsu[1].jpg", cAlternateFileName="BBBVYS~1.JPG")) returned 1 [0069.428] FindNextFileW (in: hFindFile=0x5107c20, lpFindFileData=0x31e224 | out: lpFindFileData=0x31e224*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x5154fff0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x5154fff0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x51576150, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x76a, dwReserved0=0x0, dwReserved1=0x0, cFileName="BBBWLtW[1].jpg", cAlternateFileName="BBBWLT~1.JPG")) returned 1 [0069.428] FindNextFileW (in: hFindFile=0x5107c20, lpFindFileData=0x31e224 | out: lpFindFileData=0x31e224*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x52f32f30, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x52f32f30, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x52f32f30, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x95f, dwReserved0=0x0, dwReserved1=0x0, cFileName="BBBX3xB[1].jpg", cAlternateFileName="BBBX3X~1.JPG")) returned 1 [0069.428] FindNextFileW (in: hFindFile=0x5107c20, lpFindFileData=0x31e224 | out: lpFindFileData=0x31e224*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x533112f0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x533112f0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x533112f0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x241e, dwReserved0=0x0, dwReserved1=0x0, cFileName="BBBY98e[1].jpg", cAlternateFileName="BBBY98~1.JPG")) returned 1 [0069.428] FindNextFileW (in: hFindFile=0x5107c20, lpFindFileData=0x31e224 | out: lpFindFileData=0x31e224*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x52fcb4b0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x52fcb4b0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x52fcb4b0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x938, dwReserved0=0x0, dwReserved1=0x0, cFileName="BBBZYVP[1].jpg", cAlternateFileName="BBBZYV~1.JPG")) returned 1 [0069.428] FindNextFileW (in: hFindFile=0x5107c20, lpFindFileData=0x31e224 | out: lpFindFileData=0x31e224*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x52e74850, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x52e74850, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x52e74850, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x192a, dwReserved0=0x0, dwReserved1=0x0, cFileName="BBC04o2[1].jpg", cAlternateFileName="BBC04O~1.JPG")) returned 1 [0069.428] FindNextFileW (in: hFindFile=0x5107c20, lpFindFileData=0x31e224 | out: lpFindFileData=0x31e224*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x538b8730, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x538b8730, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x538b8730, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x23fb, dwReserved0=0x0, dwReserved1=0x0, cFileName="BBC04ok[1].jpg", cAlternateFileName="BBC04O~2.JPG")) returned 1 [0069.428] FindNextFileW (in: hFindFile=0x5107c20, lpFindFileData=0x31e224 | out: lpFindFileData=0x31e224*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x539e9230, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x539e9230, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x539e9230, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x2a99, dwReserved0=0x0, dwReserved1=0x0, cFileName="BBC04we[1].jpg", cAlternateFileName="BBC04W~1.JPG")) returned 1 [0069.428] FindNextFileW (in: hFindFile=0x5107c20, lpFindFileData=0x31e224 | out: lpFindFileData=0x31e224*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x52e02430, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x52e02430, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x52e28590, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x3200, dwReserved0=0x0, dwReserved1=0x0, cFileName="BBC05rl[1].jpg", cAlternateFileName="BBC05R~1.JPG")) returned 1 [0069.428] FindNextFileW (in: hFindFile=0x5107c20, lpFindFileData=0x31e224 | out: lpFindFileData=0x31e224*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x52ec0b10, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x52ec0b10, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x52ec0b10, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x7e1, dwReserved0=0x0, dwReserved1=0x0, cFileName="BBC05rl[2].jpg", cAlternateFileName="BBC05R~2.JPG")) returned 1 [0069.429] FindNextFileW (in: hFindFile=0x5107c20, lpFindFileData=0x31e224 | out: lpFindFileData=0x31e224*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x52ff1610, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x52ff1610, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x52ff1610, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x1b4e, dwReserved0=0x0, dwReserved1=0x0, cFileName="BBC0ATj[1].jpg", cAlternateFileName="BBC0AT~1.JPG")) returned 1 [0069.429] FindNextFileW (in: hFindFile=0x5107c20, lpFindFileData=0x31e224 | out: lpFindFileData=0x31e224*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x5392ab50, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x5392ab50, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x5392ab50, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x751, dwReserved0=0x0, dwReserved1=0x0, cFileName="BBC0D8i[1].jpg", cAlternateFileName="BBC0D8~1.JPG")) returned 1 [0069.429] FindNextFileW (in: hFindFile=0x5107c20, lpFindFileData=0x31e224 | out: lpFindFileData=0x31e224*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x51256470, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x51256470, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x51256470, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x200e, dwReserved0=0x0, dwReserved1=0x0, cFileName="BBC0g7a[1].jpg", cAlternateFileName="BBC0G7~1.JPG")) returned 1 [0069.429] FindNextFileW (in: hFindFile=0x5107c20, lpFindFileData=0x31e224 | out: lpFindFileData=0x31e224*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x52f7f1f0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x52f7f1f0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x52f7f1f0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x1dcb, dwReserved0=0x0, dwReserved1=0x0, cFileName="BBC0w1b[1].jpg", cAlternateFileName="BBC0W1~1.JPG")) returned 1 [0069.429] FindNextFileW (in: hFindFile=0x5107c20, lpFindFileData=0x31e224 | out: lpFindFileData=0x31e224*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x5530da90, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x5530da90, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x55333bf0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x23ba, dwReserved0=0x0, dwReserved1=0x0, cFileName="BBC0xLt[1].jpg", cAlternateFileName="BBC0XL~1.JPG")) returned 1 [0069.429] FindNextFileW (in: hFindFile=0x5107c20, lpFindFileData=0x31e224 | out: lpFindFileData=0x31e224*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x45798350, ftCreationTime.dwHighDateTime=0x1d2faf3, ftLastAccessTime.dwLowDateTime=0x45798350, ftLastAccessTime.dwHighDateTime=0x1d2faf3, ftLastWriteTime.dwLowDateTime=0x45798350, ftLastWriteTime.dwHighDateTime=0x1d2faf3, nFileSizeHigh=0x0, nFileSizeLow=0xb58, dwReserved0=0x0, dwReserved1=0x0, cFileName="BBDWA22[1].jpg", cAlternateFileName="BBDWA2~1.JPG")) returned 1 [0069.429] FindNextFileW (in: hFindFile=0x5107c20, lpFindFileData=0x31e224 | out: lpFindFileData=0x31e224*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x45a45c10, ftCreationTime.dwHighDateTime=0x1d2faf3, ftLastAccessTime.dwLowDateTime=0x45a45c10, ftLastAccessTime.dwHighDateTime=0x1d2faf3, ftLastWriteTime.dwLowDateTime=0x45a45c10, ftLastWriteTime.dwHighDateTime=0x1d2faf3, nFileSizeHigh=0x0, nFileSizeLow=0x91d, dwReserved0=0x0, dwReserved1=0x0, cFileName="BBE7d3b[1].jpg", cAlternateFileName="BBE7D3~1.JPG")) returned 1 [0069.429] FindNextFileW (in: hFindFile=0x5107c20, lpFindFileData=0x31e224 | out: lpFindFileData=0x31e224*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x45583010, ftCreationTime.dwHighDateTime=0x1d2faf3, ftLastAccessTime.dwLowDateTime=0x45583010, ftLastAccessTime.dwHighDateTime=0x1d2faf3, ftLastWriteTime.dwLowDateTime=0x455a9170, ftLastWriteTime.dwHighDateTime=0x1d2faf3, nFileSizeHigh=0x0, nFileSizeLow=0x2850, dwReserved0=0x0, dwReserved1=0x0, cFileName="BBE85ld[1].jpg", cAlternateFileName="BBE85L~1.JPG")) returned 1 [0069.429] FindNextFileW (in: hFindFile=0x5107c20, lpFindFileData=0x31e224 | out: lpFindFileData=0x31e224*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x459613d0, ftCreationTime.dwHighDateTime=0x1d2faf3, ftLastAccessTime.dwLowDateTime=0x459613d0, ftLastAccessTime.dwHighDateTime=0x1d2faf3, ftLastWriteTime.dwLowDateTime=0x459613d0, ftLastWriteTime.dwHighDateTime=0x1d2faf3, nFileSizeHigh=0x0, nFileSizeLow=0x16ca, dwReserved0=0x0, dwReserved1=0x0, cFileName="BBEdckp[1].jpg", cAlternateFileName="BBEDCK~1.JPG")) returned 1 [0069.429] FindNextFileW (in: hFindFile=0x5107c20, lpFindFileData=0x31e224 | out: lpFindFileData=0x31e224*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x45987530, ftCreationTime.dwHighDateTime=0x1d2faf3, ftLastAccessTime.dwLowDateTime=0x45987530, ftLastAccessTime.dwHighDateTime=0x1d2faf3, ftLastWriteTime.dwLowDateTime=0x45987530, ftLastWriteTime.dwHighDateTime=0x1d2faf3, nFileSizeHigh=0x0, nFileSizeLow=0xafe, dwReserved0=0x0, dwReserved1=0x0, cFileName="BBEdMci[1].jpg", cAlternateFileName="BBEDMC~1.JPG")) returned 1 [0069.429] FindNextFileW (in: hFindFile=0x5107c20, lpFindFileData=0x31e224 | out: lpFindFileData=0x31e224*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x4580a770, ftCreationTime.dwHighDateTime=0x1d2faf3, ftLastAccessTime.dwLowDateTime=0x4580a770, ftLastAccessTime.dwHighDateTime=0x1d2faf3, ftLastWriteTime.dwLowDateTime=0x4580a770, ftLastWriteTime.dwHighDateTime=0x1d2faf3, nFileSizeHigh=0x0, nFileSizeLow=0x2a48, dwReserved0=0x0, dwReserved1=0x0, cFileName="BBEdSLV[1].jpg", cAlternateFileName="BBEDSL~1.JPG")) returned 1 [0069.429] FindNextFileW (in: hFindFile=0x5107c20, lpFindFileData=0x31e224 | out: lpFindFileData=0x31e224*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x458c8e50, ftCreationTime.dwHighDateTime=0x1d2faf3, ftLastAccessTime.dwLowDateTime=0x458c8e50, ftLastAccessTime.dwHighDateTime=0x1d2faf3, ftLastWriteTime.dwLowDateTime=0x458c8e50, ftLastWriteTime.dwHighDateTime=0x1d2faf3, nFileSizeHigh=0x0, nFileSizeLow=0x87f, dwReserved0=0x0, dwReserved1=0x0, cFileName="BBEe2Pd[1].jpg", cAlternateFileName="BBEE2P~1.JPG")) returned 1 [0069.429] FindNextFileW (in: hFindFile=0x5107c20, lpFindFileData=0x31e224 | out: lpFindFileData=0x31e224*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x4587cb90, ftCreationTime.dwHighDateTime=0x1d2faf3, ftLastAccessTime.dwLowDateTime=0x4587cb90, ftLastAccessTime.dwHighDateTime=0x1d2faf3, ftLastWriteTime.dwLowDateTime=0x4587cb90, ftLastWriteTime.dwHighDateTime=0x1d2faf3, nFileSizeHigh=0x0, nFileSizeLow=0x3faf, dwReserved0=0x0, dwReserved1=0x0, cFileName="BBEe4Oo[1].png", cAlternateFileName="BBEE4O~1.PNG")) returned 1 [0069.429] FindNextFileW (in: hFindFile=0x5107c20, lpFindFileData=0x31e224 | out: lpFindFileData=0x31e224*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x45b505b0, ftCreationTime.dwHighDateTime=0x1d2faf3, ftLastAccessTime.dwLowDateTime=0x45b505b0, ftLastAccessTime.dwHighDateTime=0x1d2faf3, ftLastWriteTime.dwLowDateTime=0x45b505b0, ftLastWriteTime.dwHighDateTime=0x1d2faf3, nFileSizeHigh=0x0, nFileSizeLow=0xaa9, dwReserved0=0x0, dwReserved1=0x0, cFileName="BBEe6Ew[1].jpg", cAlternateFileName="BBEE6E~1.JPG")) returned 1 [0069.429] FindNextFileW (in: hFindFile=0x5107c20, lpFindFileData=0x31e224 | out: lpFindFileData=0x31e224*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x454c4930, ftCreationTime.dwHighDateTime=0x1d2faf3, ftLastAccessTime.dwLowDateTime=0x454c4930, ftLastAccessTime.dwHighDateTime=0x1d2faf3, ftLastWriteTime.dwLowDateTime=0x454c4930, ftLastWriteTime.dwHighDateTime=0x1d2faf3, nFileSizeHigh=0x0, nFileSizeLow=0x1d26, dwReserved0=0x0, dwReserved1=0x0, cFileName="BBEeFp3[1].jpg", cAlternateFileName="BBEEFP~1.JPG")) returned 1 [0069.429] FindNextFileW (in: hFindFile=0x5107c20, lpFindFileData=0x31e224 | out: lpFindFileData=0x31e224*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xbe3bfdf0, ftCreationTime.dwHighDateTime=0x1d2faf2, ftLastAccessTime.dwLowDateTime=0xbe3bfdf0, ftLastAccessTime.dwHighDateTime=0x1d2faf2, ftLastWriteTime.dwLowDateTime=0xbe3bfdf0, ftLastWriteTime.dwHighDateTime=0x1d2faf2, nFileSizeHigh=0x0, nFileSizeLow=0x780, dwReserved0=0x0, dwReserved1=0x0, cFileName="BBEeGwU[1].jpg", cAlternateFileName="BBEEGW~1.JPG")) returned 1 [0069.429] FindNextFileW (in: hFindFile=0x5107c20, lpFindFileData=0x31e224 | out: lpFindFileData=0x31e224*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x45b505b0, ftCreationTime.dwHighDateTime=0x1d2faf3, ftLastAccessTime.dwLowDateTime=0x45b505b0, ftLastAccessTime.dwHighDateTime=0x1d2faf3, ftLastWriteTime.dwLowDateTime=0x45b505b0, ftLastWriteTime.dwHighDateTime=0x1d2faf3, nFileSizeHigh=0x0, nFileSizeLow=0x7be, dwReserved0=0x0, dwReserved1=0x0, cFileName="BBEeUg0[1].jpg", cAlternateFileName="BBEEUG~1.JPG")) returned 1 [0069.429] FindNextFileW (in: hFindFile=0x5107c20, lpFindFileData=0x31e224 | out: lpFindFileData=0x31e224*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x459ad690, ftCreationTime.dwHighDateTime=0x1d2faf3, ftLastAccessTime.dwLowDateTime=0x459ad690, ftLastAccessTime.dwHighDateTime=0x1d2faf3, ftLastWriteTime.dwLowDateTime=0x459ad690, ftLastWriteTime.dwHighDateTime=0x1d2faf3, nFileSizeHigh=0x0, nFileSizeLow=0x3a2a, dwReserved0=0x0, dwReserved1=0x0, cFileName="BBEeZnr[1].jpg", cAlternateFileName="BBEEZN~1.JPG")) returned 1 [0069.429] FindNextFileW (in: hFindFile=0x5107c20, lpFindFileData=0x31e224 | out: lpFindFileData=0x31e224*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x457e4610, ftCreationTime.dwHighDateTime=0x1d2faf3, ftLastAccessTime.dwLowDateTime=0x457e4610, ftLastAccessTime.dwHighDateTime=0x1d2faf3, ftLastWriteTime.dwLowDateTime=0x457e4610, ftLastWriteTime.dwHighDateTime=0x1d2faf3, nFileSizeHigh=0x0, nFileSizeLow=0x2f76, dwReserved0=0x0, dwReserved1=0x0, cFileName="BBEf5Lq[1].jpg", cAlternateFileName="BBEF5L~1.JPG")) returned 1 [0069.430] FindNextFileW (in: hFindFile=0x5107c20, lpFindFileData=0x31e224 | out: lpFindFileData=0x31e224*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x4574c090, ftCreationTime.dwHighDateTime=0x1d2faf3, ftLastAccessTime.dwLowDateTime=0x4574c090, ftLastAccessTime.dwHighDateTime=0x1d2faf3, ftLastWriteTime.dwLowDateTime=0x4574c090, ftLastWriteTime.dwHighDateTime=0x1d2faf3, nFileSizeHigh=0x0, nFileSizeLow=0x786, dwReserved0=0x0, dwReserved1=0x0, cFileName="BBEfwtU[1].jpg", cAlternateFileName="BBEFWT~1.JPG")) returned 1 [0069.430] FindNextFileW (in: hFindFile=0x5107c20, lpFindFileData=0x31e224 | out: lpFindFileData=0x31e224*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x45798350, ftCreationTime.dwHighDateTime=0x1d2faf3, ftLastAccessTime.dwLowDateTime=0x45798350, ftLastAccessTime.dwHighDateTime=0x1d2faf3, ftLastWriteTime.dwLowDateTime=0x45798350, ftLastWriteTime.dwHighDateTime=0x1d2faf3, nFileSizeHigh=0x0, nFileSizeLow=0xa07, dwReserved0=0x0, dwReserved1=0x0, cFileName="BBEfzSd[1].jpg", cAlternateFileName="BBEFZS~1.JPG")) returned 1 [0069.430] FindNextFileW (in: hFindFile=0x5107c20, lpFindFileData=0x31e224 | out: lpFindFileData=0x31e224*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x454eaa90, ftCreationTime.dwHighDateTime=0x1d2faf3, ftLastAccessTime.dwLowDateTime=0x454eaa90, ftLastAccessTime.dwHighDateTime=0x1d2faf3, ftLastWriteTime.dwLowDateTime=0x454eaa90, ftLastWriteTime.dwHighDateTime=0x1d2faf3, nFileSizeHigh=0x0, nFileSizeLow=0x1998, dwReserved0=0x0, dwReserved1=0x0, cFileName="BBEgCuQ[1].jpg", cAlternateFileName="BBEGCU~1.JPG")) returned 1 [0069.430] FindNextFileW (in: hFindFile=0x5107c20, lpFindFileData=0x31e224 | out: lpFindFileData=0x31e224*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x454c4930, ftCreationTime.dwHighDateTime=0x1d2faf3, ftLastAccessTime.dwLowDateTime=0x454c4930, ftLastAccessTime.dwHighDateTime=0x1d2faf3, ftLastWriteTime.dwLowDateTime=0x454eaa90, ftLastWriteTime.dwHighDateTime=0x1d2faf3, nFileSizeHigh=0x0, nFileSizeLow=0x1a65, dwReserved0=0x0, dwReserved1=0x0, cFileName="BBEgHzB[1].jpg", cAlternateFileName="BBEGHZ~1.JPG")) returned 1 [0069.430] FindNextFileW (in: hFindFile=0x5107c20, lpFindFileData=0x31e224 | out: lpFindFileData=0x31e224*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xbde8add0, ftCreationTime.dwHighDateTime=0x1d2faf2, ftLastAccessTime.dwLowDateTime=0xbde8add0, ftLastAccessTime.dwHighDateTime=0x1d2faf2, ftLastWriteTime.dwLowDateTime=0xbdeb0f30, ftLastWriteTime.dwHighDateTime=0x1d2faf2, nFileSizeHigh=0x0, nFileSizeLow=0x5a45, dwReserved0=0x0, dwReserved1=0x0, cFileName="BBEgIl2[1].jpg", cAlternateFileName="BBEGIL~1.JPG")) returned 1 [0069.430] FindNextFileW (in: hFindFile=0x5107c20, lpFindFileData=0x31e224 | out: lpFindFileData=0x31e224*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x45b2a450, ftCreationTime.dwHighDateTime=0x1d2faf3, ftLastAccessTime.dwLowDateTime=0x45b2a450, ftLastAccessTime.dwHighDateTime=0x1d2faf3, ftLastWriteTime.dwLowDateTime=0x45b2a450, ftLastWriteTime.dwHighDateTime=0x1d2faf3, nFileSizeHigh=0x0, nFileSizeLow=0x388f, dwReserved0=0x0, dwReserved1=0x0, cFileName="BBEgIl2[2].jpg", cAlternateFileName="BBEGIL~2.JPG")) returned 1 [0069.430] FindNextFileW (in: hFindFile=0x5107c20, lpFindFileData=0x31e224 | out: lpFindFileData=0x31e224*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x45856a30, ftCreationTime.dwHighDateTime=0x1d2faf3, ftLastAccessTime.dwLowDateTime=0x45856a30, ftLastAccessTime.dwHighDateTime=0x1d2faf3, ftLastWriteTime.dwLowDateTime=0x45856a30, ftLastWriteTime.dwHighDateTime=0x1d2faf3, nFileSizeHigh=0x0, nFileSizeLow=0x1e97, dwReserved0=0x0, dwReserved1=0x0, cFileName="BBEgIyL[1].jpg", cAlternateFileName="BBEGIY~1.JPG")) returned 1 [0069.430] FindNextFileW (in: hFindFile=0x5107c20, lpFindFileData=0x31e224 | out: lpFindFileData=0x31e224*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x45856a30, ftCreationTime.dwHighDateTime=0x1d2faf3, ftLastAccessTime.dwLowDateTime=0x45856a30, ftLastAccessTime.dwHighDateTime=0x1d2faf3, ftLastWriteTime.dwLowDateTime=0x45856a30, ftLastWriteTime.dwHighDateTime=0x1d2faf3, nFileSizeHigh=0x0, nFileSizeLow=0x23bf, dwReserved0=0x0, dwReserved1=0x0, cFileName="BBEgkY6[1].jpg", cAlternateFileName="BBEGKY~1.JPG")) returned 1 [0069.430] FindNextFileW (in: hFindFile=0x5107c20, lpFindFileData=0x31e224 | out: lpFindFileData=0x31e224*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x4574c090, ftCreationTime.dwHighDateTime=0x1d2faf3, ftLastAccessTime.dwLowDateTime=0x4574c090, ftLastAccessTime.dwHighDateTime=0x1d2faf3, ftLastWriteTime.dwLowDateTime=0x4574c090, ftLastWriteTime.dwHighDateTime=0x1d2faf3, nFileSizeHigh=0x0, nFileSizeLow=0x8df, dwReserved0=0x0, dwReserved1=0x0, cFileName="BBEgLzV[1].jpg", cAlternateFileName="BBEGLZ~1.JPG")) returned 1 [0069.430] FindNextFileW (in: hFindFile=0x5107c20, lpFindFileData=0x31e224 | out: lpFindFileData=0x31e224*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x45a45c10, ftCreationTime.dwHighDateTime=0x1d2faf3, ftLastAccessTime.dwLowDateTime=0x45a45c10, ftLastAccessTime.dwHighDateTime=0x1d2faf3, ftLastWriteTime.dwLowDateTime=0x45a45c10, ftLastWriteTime.dwHighDateTime=0x1d2faf3, nFileSizeHigh=0x0, nFileSizeLow=0x2b8d, dwReserved0=0x0, dwReserved1=0x0, cFileName="BBEgUri[1].jpg", cAlternateFileName="BBEGUR~1.JPG")) returned 1 [0069.430] FindNextFileW (in: hFindFile=0x5107c20, lpFindFileData=0x31e224 | out: lpFindFileData=0x31e224*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x457721f0, ftCreationTime.dwHighDateTime=0x1d2faf3, ftLastAccessTime.dwLowDateTime=0x457721f0, ftLastAccessTime.dwHighDateTime=0x1d2faf3, ftLastWriteTime.dwLowDateTime=0x457721f0, ftLastWriteTime.dwHighDateTime=0x1d2faf3, nFileSizeHigh=0x0, nFileSizeLow=0x201f, dwReserved0=0x0, dwReserved1=0x0, cFileName="BBEgXBv[1].jpg", cAlternateFileName="BBEGXB~1.JPG")) returned 1 [0069.430] FindNextFileW (in: hFindFile=0x5107c20, lpFindFileData=0x31e224 | out: lpFindFileData=0x31e224*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xbe327870, ftCreationTime.dwHighDateTime=0x1d2faf2, ftLastAccessTime.dwLowDateTime=0xbe327870, ftLastAccessTime.dwHighDateTime=0x1d2faf2, ftLastWriteTime.dwLowDateTime=0xbe34d9d0, ftLastWriteTime.dwHighDateTime=0x1d2faf2, nFileSizeHigh=0x0, nFileSizeLow=0x6e9, dwReserved0=0x0, dwReserved1=0x0, cFileName="BBEgZME[1].jpg", cAlternateFileName="BBEGZM~1.JPG")) returned 1 [0069.430] FindNextFileW (in: hFindFile=0x5107c20, lpFindFileData=0x31e224 | out: lpFindFileData=0x31e224*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xbe4ca790, ftCreationTime.dwHighDateTime=0x1d2faf2, ftLastAccessTime.dwLowDateTime=0xbe4ca790, ftLastAccessTime.dwHighDateTime=0x1d2faf2, ftLastWriteTime.dwLowDateTime=0xbe4ca790, ftLastWriteTime.dwHighDateTime=0x1d2faf2, nFileSizeHigh=0x0, nFileSizeLow=0x1dc, dwReserved0=0x0, dwReserved1=0x0, cFileName="BBghfVy[1].png", cAlternateFileName="BBGHFV~1.PNG")) returned 1 [0069.430] FindNextFileW (in: hFindFile=0x5107c20, lpFindFileData=0x31e224 | out: lpFindFileData=0x31e224*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x45725f30, ftCreationTime.dwHighDateTime=0x1d2faf3, ftLastAccessTime.dwLowDateTime=0x45725f30, ftLastAccessTime.dwHighDateTime=0x1d2faf3, ftLastWriteTime.dwLowDateTime=0x45725f30, ftLastWriteTime.dwHighDateTime=0x1d2faf3, nFileSizeHigh=0x0, nFileSizeLow=0x1af, dwReserved0=0x0, dwReserved1=0x0, cFileName="BBkwUr[1].png", cAlternateFileName="BBKWUR~1.PNG")) returned 1 [0069.430] FindNextFileW (in: hFindFile=0x5107c20, lpFindFileData=0x31e224 | out: lpFindFileData=0x31e224*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x45a45c10, ftCreationTime.dwHighDateTime=0x1d2faf3, ftLastAccessTime.dwLowDateTime=0x45a45c10, ftLastAccessTime.dwHighDateTime=0x1d2faf3, ftLastWriteTime.dwLowDateTime=0x45a45c10, ftLastWriteTime.dwHighDateTime=0x1d2faf3, nFileSizeHigh=0x0, nFileSizeLow=0x23b, dwReserved0=0x0, dwReserved1=0x0, cFileName="BBlBV0U[1].png", cAlternateFileName="BBLBV0~1.PNG")) returned 1 [0069.430] FindNextFileW (in: hFindFile=0x5107c20, lpFindFileData=0x31e224 | out: lpFindFileData=0x31e224*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x5159c2b0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x5159c2b0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x5159c2b0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x3376, dwReserved0=0x0, dwReserved1=0x0, cFileName="BBzhWWE[1].jpg", cAlternateFileName="BBZHWW~1.JPG")) returned 1 [0069.430] FindNextFileW (in: hFindFile=0x5107c20, lpFindFileData=0x31e224 | out: lpFindFileData=0x31e224*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x60baae40, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x60baae40, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x60c433c0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x13c06, dwReserved0=0x0, dwReserved1=0x0, cFileName="benefits-2[1].jpg", cAlternateFileName="BENEFI~2.JPG")) returned 1 [0069.430] FindNextFileW (in: hFindFile=0x5107c20, lpFindFileData=0x31e224 | out: lpFindFileData=0x31e224*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x60b84ce0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x60b84ce0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x60c1d260, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x144cd, dwReserved0=0x0, dwReserved1=0x0, cFileName="benefits-4[1].jpg", cAlternateFileName="BENEFI~1.JPG")) returned 1 [0069.430] FindNextFileW (in: hFindFile=0x5107c20, lpFindFileData=0x31e224 | out: lpFindFileData=0x31e224*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xbf4dbc10, ftCreationTime.dwHighDateTime=0x1d2faf2, ftLastAccessTime.dwLowDateTime=0xbf4dbc10, ftLastAccessTime.dwHighDateTime=0x1d2faf2, ftLastWriteTime.dwLowDateTime=0xbf4dbc10, ftLastWriteTime.dwHighDateTime=0x1d2faf2, nFileSizeHigh=0x0, nFileSizeLow=0x6f15, dwReserved0=0x0, dwReserved1=0x0, cFileName="bootstrap[1].js", cAlternateFileName="BOOTST~1.JS")) returned 1 [0069.430] FindNextFileW (in: hFindFile=0x5107c20, lpFindFileData=0x31e224 | out: lpFindFileData=0x31e224*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x583e0320, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x583e0320, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x583e0320, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0xaf6, dwReserved0=0x0, dwReserved1=0x0, cFileName="browser[1].htm", cAlternateFileName="BROWSE~1.HTM")) returned 1 [0069.430] FindNextFileW (in: hFindFile=0x5107c20, lpFindFileData=0x31e224 | out: lpFindFileData=0x31e224*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x54b2b1b0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x54b2b1b0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x54b2b1b0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x4dd8, dwReserved0=0x0, dwReserved1=0x0, cFileName="bs-jsdep[1].css", cAlternateFileName="BS-JSD~1.CSS")) returned 1 [0069.431] FindNextFileW (in: hFindFile=0x5107c20, lpFindFileData=0x31e224 | out: lpFindFileData=0x31e224*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x61341460, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x61341460, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x613675c0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x1c9f6, dwReserved0=0x0, dwReserved1=0x0, cFileName="cb=gapi[1].loaded_0", cAlternateFileName="CB_GAP~1.LOA")) returned 1 [0069.431] FindNextFileW (in: hFindFile=0x5107c20, lpFindFileData=0x31e224 | out: lpFindFileData=0x31e224*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x467cf930, ftCreationTime.dwHighDateTime=0x1d2faf3, ftLastAccessTime.dwLowDateTime=0x467cf930, ftLastAccessTime.dwHighDateTime=0x1d2faf3, ftLastWriteTime.dwLowDateTime=0x467cf930, ftLastWriteTime.dwHighDateTime=0x1d2faf3, nFileSizeHigh=0x0, nFileSizeLow=0x2b, dwReserved0=0x0, dwReserved1=0x0, cFileName="collect[1].gif", cAlternateFileName="COLLEC~1.GIF")) returned 1 [0069.431] FindNextFileW (in: hFindFile=0x5107c20, lpFindFileData=0x31e224 | out: lpFindFileData=0x31e224*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x54b51310, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x54b51310, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x54b51310, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x29349, dwReserved0=0x0, dwReserved1=0x0, cFileName="core[1].css", cAlternateFileName="CORE_1~1.CSS")) returned 1 [0069.431] FindNextFileW (in: hFindFile=0x5107c20, lpFindFileData=0x31e224 | out: lpFindFileData=0x31e224*(dwFileAttributes=0x2006, ftCreationTime.dwLowDateTime=0x4f090c50, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x4f090c50, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x4f090c50, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x43, dwReserved0=0x0, dwReserved1=0x0, cFileName="desktop.ini", cAlternateFileName="")) returned 1 [0069.431] FindNextFileW (in: hFindFile=0x5107c20, lpFindFileData=0x31e224 | out: lpFindFileData=0x31e224*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x54ca7f70, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x54ca7f70, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x54ca7f70, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x2a3c, dwReserved0=0x0, dwReserved1=0x0, cFileName="DevCMDL2.2.18[1].eot", cAlternateFileName="DEVCMD~1.EOT")) returned 1 [0069.431] FindNextFileW (in: hFindFile=0x5107c20, lpFindFileData=0x31e224 | out: lpFindFileData=0x31e224*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x5120a1b0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x5120a1b0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x5120a1b0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x2b, dwReserved0=0x0, dwReserved1=0x0, cFileName="e151e5[1].gif", cAlternateFileName="E151E5~1.GIF")) returned 1 [0069.431] FindNextFileW (in: hFindFile=0x5107c20, lpFindFileData=0x31e224 | out: lpFindFileData=0x31e224*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x5101afd0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x5101afd0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x5101afd0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x24e29, dwReserved0=0x0, dwReserved1=0x0, cFileName="e4-190963-91cdfbc1[1].txt", cAlternateFileName="E4-190~1.TXT")) returned 1 [0069.431] FindNextFileW (in: hFindFile=0x5107c20, lpFindFileData=0x31e224 | out: lpFindFileData=0x31e224*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x60b5eb80, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x60b5eb80, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x60f89200, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0xf8f5, dwReserved0=0x0, dwReserved1=0x0, cFileName="eula_text[1].htm", cAlternateFileName="EULA_T~1.HTM")) returned 1 [0069.431] FindNextFileW (in: hFindFile=0x5107c20, lpFindFileData=0x31e224 | out: lpFindFileData=0x31e224*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x62410fc0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x62410fc0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x62410fc0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x34ce, dwReserved0=0x0, dwReserved1=0x0, cFileName="f[1].txt", cAlternateFileName="F_1_~1.TXT")) returned 1 [0069.431] FindNextFileW (in: hFindFile=0x5107c20, lpFindFileData=0x31e224 | out: lpFindFileData=0x31e224*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x53089b90, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x53089b90, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x53089b90, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x1254, dwReserved0=0x0, dwReserved1=0x0, cFileName="getype=homepage;kvpg=msn%2Fde-de;kvugc=0;kvmn=MSNDEDE1B;kvgrp=627518548;kvismob=2;extmirroring=0;kvtile=3;target=_blank;aduho=600;grp=627518548[1]", cAlternateFileName="GETYPE~1")) returned 1 [0069.431] FindNextFileW (in: hFindFile=0x5107c20, lpFindFileData=0x31e224 | out: lpFindFileData=0x31e224*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x60ef0c80, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x60ef0c80, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x60f16de0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x6a6, dwReserved0=0x0, dwReserved1=0x0, cFileName="google_plus_16dp[1].png", cAlternateFileName="GOOGLE~1.PNG")) returned 1 [0069.431] FindNextFileW (in: hFindFile=0x5107c20, lpFindFileData=0x31e224 | out: lpFindFileData=0x31e224*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x5de2e5c0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x5de2e5c0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x5de54720, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0xb6c8, dwReserved0=0x0, dwReserved1=0x0, cFileName="index[1].htm", cAlternateFileName="INDEX_~1.HTM")) returned 1 [0069.431] FindNextFileW (in: hFindFile=0x5107c20, lpFindFileData=0x31e224 | out: lpFindFileData=0x31e224*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x54fa1af0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x54fa1af0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x54fa1af0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0xa2, dwReserved0=0x0, dwReserved1=0x0, cFileName="print[1].txt", cAlternateFileName="PRINT_~1.TXT")) returned 1 [0069.431] FindNextFileW (in: hFindFile=0x5107c20, lpFindFileData=0x31e224 | out: lpFindFileData=0x31e224*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x44f697b0, ftCreationTime.dwHighDateTime=0x1d2faf3, ftLastAccessTime.dwLowDateTime=0x44f697b0, ftLastAccessTime.dwHighDateTime=0x1d2faf3, ftLastWriteTime.dwLowDateTime=0x44f8f910, ftLastWriteTime.dwHighDateTime=0x1d2faf3, nFileSizeHigh=0x0, nFileSizeLow=0x15429, dwReserved0=0x0, dwReserved1=0x0, cFileName="Standard[1]", cAlternateFileName="STANDA~1")) returned 1 [0069.431] FindNextFileW (in: hFindFile=0x5107c20, lpFindFileData=0x31e224 | out: lpFindFileData=0x31e224*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xbfbb3b50, ftCreationTime.dwHighDateTime=0x1d2faf2, ftLastAccessTime.dwLowDateTime=0xbfbb3b50, ftLastAccessTime.dwHighDateTime=0x1d2faf2, ftLastWriteTime.dwLowDateTime=0xbfbb3b50, ftLastWriteTime.dwHighDateTime=0x1d2faf2, nFileSizeHigh=0x0, nFileSizeLow=0x67, dwReserved0=0x0, dwReserved1=0x0, cFileName="tecjslog[1].png", cAlternateFileName="TECJSL~1.PNG")) returned 1 [0069.431] FindNextFileW (in: hFindFile=0x5107c20, lpFindFileData=0x31e224 | out: lpFindFileData=0x31e224*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x548efd10, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x548efd10, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x548efd10, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x102ea, dwReserved0=0x0, dwReserved1=0x0, cFileName="uhf-main.var.min[1].js", cAlternateFileName="UHF-MA~1.JS")) returned 1 [0069.431] FindNextFileW (in: hFindFile=0x5107c20, lpFindFileData=0x31e224 | out: lpFindFileData=0x31e224*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x5386c470, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x5386c470, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x5386c470, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x2dd5, dwReserved0=0x0, dwReserved1=0x0, cFileName="v2[1]", cAlternateFileName="V2_1_~1")) returned 1 [0069.431] FindNextFileW (in: hFindFile=0x5107c20, lpFindFileData=0x31e224 | out: lpFindFileData=0x31e224*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x5386c470, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x5386c470, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x5386c470, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x2d29, dwReserved0=0x0, dwReserved1=0x0, cFileName="v2[2]", cAlternateFileName="V2_2_~1")) returned 1 [0069.431] FindNextFileW (in: hFindFile=0x5107c20, lpFindFileData=0x31e224 | out: lpFindFileData=0x31e224*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xbe751ef0, ftCreationTime.dwHighDateTime=0x1d2faf2, ftLastAccessTime.dwLowDateTime=0xbe751ef0, ftLastAccessTime.dwHighDateTime=0x1d2faf2, ftLastWriteTime.dwLowDateTime=0xbe751ef0, ftLastWriteTime.dwHighDateTime=0x1d2faf2, nFileSizeHigh=0x0, nFileSizeLow=0x2fa8, dwReserved0=0x0, dwReserved1=0x0, cFileName="v2[3]", cAlternateFileName="V2_3_~1")) returned 1 [0069.431] FindNextFileW (in: hFindFile=0x5107c20, lpFindFileData=0x31e224 | out: lpFindFileData=0x31e224*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xbe8829f0, ftCreationTime.dwHighDateTime=0x1d2faf2, ftLastAccessTime.dwLowDateTime=0xbe8829f0, ftLastAccessTime.dwHighDateTime=0x1d2faf2, ftLastWriteTime.dwLowDateTime=0xbe8829f0, ftLastWriteTime.dwHighDateTime=0x1d2faf2, nFileSizeHigh=0x0, nFileSizeLow=0x2da9, dwReserved0=0x0, dwReserved1=0x0, cFileName="v2[4]", cAlternateFileName="V2_4_~1")) returned 1 [0069.431] FindNextFileW (in: hFindFile=0x5107c20, lpFindFileData=0x31e224 | out: lpFindFileData=0x31e224*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xbe8829f0, ftCreationTime.dwHighDateTime=0x1d2faf2, ftLastAccessTime.dwLowDateTime=0xbe8829f0, ftLastAccessTime.dwHighDateTime=0x1d2faf2, ftLastWriteTime.dwLowDateTime=0xbe8829f0, ftLastWriteTime.dwHighDateTime=0x1d2faf2, nFileSizeHigh=0x0, nFileSizeLow=0x2da9, dwReserved0=0x0, dwReserved1=0x0, cFileName="v2[4]", cAlternateFileName="V2_4_~1")) returned 0 [0069.432] FindClose (in: hFindFile=0x5107c20 | out: hFindFile=0x5107c20) returned 1 [0069.432] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e4ac) returned 1 [0069.432] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e4b8) returned 1 [0069.432] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\ABV8L7MY\\AA3e1oO[1].png", nBufferLength=0x105, lpBuffer=0x31dec4, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\ABV8L7MY\\AA3e1oO[1].png", lpFilePart=0x0) returned 0x7e [0069.432] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e3b8) returned 1 [0069.433] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\ABV8L7MY\\AA3e1oO[1].png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\abv8l7my\\aa3e1oo[1].png"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x178 [0069.433] GetFileType (hFile=0x178) returned 0x1 [0069.433] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e3b4) returned 1 [0069.433] GetFileType (hFile=0x178) returned 0x1 [0069.433] GetFileSize (in: hFile=0x178, lpFileSizeHigh=0x31e4c0 | out: lpFileSizeHigh=0x31e4c0*=0x0) returned 0x29b [0069.434] ReadFile (in: hFile=0x178, lpBuffer=0x270ff14, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x31e46c, lpOverlapped=0x0 | out: lpBuffer=0x270ff14*, lpNumberOfBytesRead=0x31e46c*=0x29b, lpOverlapped=0x0) returned 1 [0069.478] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\ABV8L7MY\\AA3e1oO[1].png", nBufferLength=0x105, lpBuffer=0x31deb0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\ABV8L7MY\\AA3e1oO[1].png", lpFilePart=0x0) returned 0x7e [0069.478] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e3a4) returned 1 [0069.478] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\ABV8L7MY\\AA3e1oO[1].png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\abv8l7my\\aa3e1oo[1].png"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x178 [0069.479] GetFileType (hFile=0x178) returned 0x1 [0069.479] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e3a0) returned 1 [0069.479] GetFileType (hFile=0x178) returned 0x1 [0069.479] WriteFile (in: hFile=0x178, lpBuffer=0x275ebc0*, nNumberOfBytesToWrite=0x2a0, lpNumberOfBytesWritten=0x31e434, lpOverlapped=0x0 | out: lpBuffer=0x275ebc0*, lpNumberOfBytesWritten=0x31e434*=0x2a0, lpOverlapped=0x0) returned 1 [0069.480] CloseHandle (hObject=0x178) returned 1 [0069.480] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\ABV8L7MY\\AA3e1oO[1].png", nBufferLength=0x105, lpBuffer=0x31dfe4, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\ABV8L7MY\\AA3e1oO[1].png", lpFilePart=0x0) returned 0x7e [0069.480] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\ABV8L7MY\\AA3e1oO[1].png", nBufferLength=0x105, lpBuffer=0x31dfe4, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\ABV8L7MY\\AA3e1oO[1].png", lpFilePart=0x0) returned 0x7e [0069.480] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e444) returned 1 [0069.480] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\ABV8L7MY\\AA3e1oO[1].png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\abv8l7my\\aa3e1oo[1].png"), fInfoLevelId=0x0, lpFileInformation=0x31e4c0 | out: lpFileInformation=0x31e4c0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x458a2cf0, ftCreationTime.dwHighDateTime=0x1d2faf3, ftLastAccessTime.dwLowDateTime=0x458a2cf0, ftLastAccessTime.dwHighDateTime=0x1d2faf3, ftLastWriteTime.dwLowDateTime=0xcda6e80, ftLastWriteTime.dwHighDateTime=0x1d6eb7f, nFileSizeHigh=0x0, nFileSizeLow=0x2a0)) returned 1 [0069.481] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e440) returned 1 [0069.481] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\ABV8L7MY\\AA3e1oO[1].png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\abv8l7my\\aa3e1oo[1].png"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\ABV8L7MY\\AA3e1oO[1].png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\abv8l7my\\aa3e1oo[1].png")) returned 1 [0069.481] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\ABV8L7MY\\AA429NP[1].png", nBufferLength=0x105, lpBuffer=0x31dec4, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\ABV8L7MY\\AA429NP[1].png", lpFilePart=0x0) returned 0x7e [0069.481] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e3b8) returned 1 [0069.481] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\ABV8L7MY\\AA429NP[1].png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\abv8l7my\\aa429np[1].png"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x178 [0069.481] GetFileType (hFile=0x178) returned 0x1 [0069.481] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e3b4) returned 1 [0069.481] GetFileType (hFile=0x178) returned 0x1 [0069.481] GetFileSize (in: hFile=0x178, lpFileSizeHigh=0x31e4c0 | out: lpFileSizeHigh=0x31e4c0*=0x0) returned 0x265 [0069.481] ReadFile (in: hFile=0x178, lpBuffer=0x2760204, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x31e46c, lpOverlapped=0x0 | out: lpBuffer=0x2760204*, lpNumberOfBytesRead=0x31e46c*=0x265, lpOverlapped=0x0) returned 1 [0069.483] CloseHandle (hObject=0x178) returned 1 [0069.496] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\ABV8L7MY\\AA429NP[1].png", nBufferLength=0x105, lpBuffer=0x31deb0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\ABV8L7MY\\AA429NP[1].png", lpFilePart=0x0) returned 0x7e [0069.496] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e3a4) returned 1 [0069.496] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\ABV8L7MY\\AA429NP[1].png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\abv8l7my\\aa429np[1].png"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x178 [0069.497] GetFileType (hFile=0x178) returned 0x1 [0069.497] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e3a0) returned 1 [0069.497] GetFileType (hFile=0x178) returned 0x1 [0069.497] WriteFile (in: hFile=0x178, lpBuffer=0x27aedc4*, nNumberOfBytesToWrite=0x270, lpNumberOfBytesWritten=0x31e434, lpOverlapped=0x0 | out: lpBuffer=0x27aedc4*, lpNumberOfBytesWritten=0x31e434*=0x270, lpOverlapped=0x0) returned 1 [0069.498] CloseHandle (hObject=0x178) returned 1 [0069.498] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\ABV8L7MY\\AA429NP[1].png", nBufferLength=0x105, lpBuffer=0x31dfe4, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\ABV8L7MY\\AA429NP[1].png", lpFilePart=0x0) returned 0x7e [0069.498] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\ABV8L7MY\\AA429NP[1].png", nBufferLength=0x105, lpBuffer=0x31dfe4, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\ABV8L7MY\\AA429NP[1].png", lpFilePart=0x0) returned 0x7e [0069.498] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\ABV8L7MY\\AA429NP[1].png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\abv8l7my\\aa429np[1].png"), fInfoLevelId=0x0, lpFileInformation=0x31e4c0 | out: lpFileInformation=0x31e4c0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x459d37f0, ftCreationTime.dwHighDateTime=0x1d2faf3, ftLastAccessTime.dwLowDateTime=0x459d37f0, ftLastAccessTime.dwHighDateTime=0x1d2faf3, ftLastWriteTime.dwLowDateTime=0xcdf3140, ftLastWriteTime.dwHighDateTime=0x1d6eb7f, nFileSizeHigh=0x0, nFileSizeLow=0x270)) returned 1 [0069.498] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\ABV8L7MY\\AA429NP[1].png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\abv8l7my\\aa429np[1].png"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\ABV8L7MY\\AA429NP[1].png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\abv8l7my\\aa429np[1].png")) returned 1 [0069.499] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\ABV8L7MY\\AA42pjY[1].png", nBufferLength=0x105, lpBuffer=0x31dec4, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\ABV8L7MY\\AA42pjY[1].png", lpFilePart=0x0) returned 0x7e [0069.499] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\ABV8L7MY\\AA42pjY[1].png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\abv8l7my\\aa42pjy[1].png"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x178 [0069.499] GetFileType (hFile=0x178) returned 0x1 [0069.499] GetFileType (hFile=0x178) returned 0x1 [0069.499] GetFileSize (in: hFile=0x178, lpFileSizeHigh=0x31e4c0 | out: lpFileSizeHigh=0x31e4c0*=0x0) returned 0x252 [0069.499] ReadFile (in: hFile=0x178, lpBuffer=0x27b03f4, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x31e46c, lpOverlapped=0x0 | out: lpBuffer=0x27b03f4*, lpNumberOfBytesRead=0x31e46c*=0x252, lpOverlapped=0x0) returned 1 [0069.501] CloseHandle (hObject=0x178) returned 1 [0069.514] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\ABV8L7MY\\AA42pjY[1].png", nBufferLength=0x105, lpBuffer=0x31deb0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\ABV8L7MY\\AA42pjY[1].png", lpFilePart=0x0) returned 0x7e [0069.514] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\ABV8L7MY\\AA42pjY[1].png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\abv8l7my\\aa42pjy[1].png"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x178 [0069.515] GetFileType (hFile=0x178) returned 0x1 [0069.515] GetFileType (hFile=0x178) returned 0x1 [0069.515] WriteFile (in: hFile=0x178, lpBuffer=0x27fef68*, nNumberOfBytesToWrite=0x260, lpNumberOfBytesWritten=0x31e434, lpOverlapped=0x0 | out: lpBuffer=0x27fef68*, lpNumberOfBytesWritten=0x31e434*=0x260, lpOverlapped=0x0) returned 1 [0069.516] CloseHandle (hObject=0x178) returned 1 [0069.516] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\ABV8L7MY\\AA42pjY[1].png", nBufferLength=0x105, lpBuffer=0x31dfe4, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\ABV8L7MY\\AA42pjY[1].png", lpFilePart=0x0) returned 0x7e [0069.516] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\ABV8L7MY\\AA42pjY[1].png", nBufferLength=0x105, lpBuffer=0x31dfe4, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\ABV8L7MY\\AA42pjY[1].png", lpFilePart=0x0) returned 0x7e [0069.516] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\ABV8L7MY\\AA42pjY[1].png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\abv8l7my\\aa42pjy[1].png"), fInfoLevelId=0x0, lpFileInformation=0x31e4c0 | out: lpFileInformation=0x31e4c0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x530d5e50, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x530d5e50, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0xce192a0, ftLastWriteTime.dwHighDateTime=0x1d6eb7f, nFileSizeHigh=0x0, nFileSizeLow=0x260)) returned 1 [0069.516] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\ABV8L7MY\\AA42pjY[1].png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\abv8l7my\\aa42pjy[1].png"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\ABV8L7MY\\AA42pjY[1].png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\abv8l7my\\aa42pjy[1].png")) returned 1 [0069.516] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\ABV8L7MY\\AA61AKN[2].png", nBufferLength=0x105, lpBuffer=0x31dec4, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\ABV8L7MY\\AA61AKN[2].png", lpFilePart=0x0) returned 0x7e [0069.516] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\ABV8L7MY\\AA61AKN[2].png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\abv8l7my\\aa61akn[2].png"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x178 [0069.517] GetFileType (hFile=0x178) returned 0x1 [0069.517] GetFileType (hFile=0x178) returned 0x1 [0069.517] GetFileSize (in: hFile=0x178, lpFileSizeHigh=0x31e4c0 | out: lpFileSizeHigh=0x31e4c0*=0x0) returned 0x248 [0069.517] ReadFile (in: hFile=0x178, lpBuffer=0x280058c, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x31e46c, lpOverlapped=0x0 | out: lpBuffer=0x280058c*, lpNumberOfBytesRead=0x31e46c*=0x248, lpOverlapped=0x0) returned 1 [0069.519] CloseHandle (hObject=0x178) returned 1 [0069.532] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\ABV8L7MY\\AA61AKN[2].png", nBufferLength=0x105, lpBuffer=0x31deb0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\ABV8L7MY\\AA61AKN[2].png", lpFilePart=0x0) returned 0x7e [0069.532] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\ABV8L7MY\\AA61AKN[2].png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\abv8l7my\\aa61akn[2].png"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x178 [0069.533] GetFileType (hFile=0x178) returned 0x1 [0069.533] GetFileType (hFile=0x178) returned 0x1 [0069.533] WriteFile (in: hFile=0x178, lpBuffer=0x284f0a8*, nNumberOfBytesToWrite=0x250, lpNumberOfBytesWritten=0x31e434, lpOverlapped=0x0 | out: lpBuffer=0x284f0a8*, lpNumberOfBytesWritten=0x31e434*=0x250, lpOverlapped=0x0) returned 1 [0069.534] CloseHandle (hObject=0x178) returned 1 [0069.534] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\ABV8L7MY\\AA61AKN[2].png", nBufferLength=0x105, lpBuffer=0x31dfe4, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\ABV8L7MY\\AA61AKN[2].png", lpFilePart=0x0) returned 0x7e [0069.534] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\ABV8L7MY\\AA61AKN[2].png", nBufferLength=0x105, lpBuffer=0x31dfe4, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\ABV8L7MY\\AA61AKN[2].png", lpFilePart=0x0) returned 0x7e [0069.534] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\ABV8L7MY\\AA61AKN[2].png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\abv8l7my\\aa61akn[2].png"), fInfoLevelId=0x0, lpFileInformation=0x31e4c0 | out: lpFileInformation=0x31e4c0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xbe327870, ftCreationTime.dwHighDateTime=0x1d2faf2, ftLastAccessTime.dwLowDateTime=0xbe327870, ftLastAccessTime.dwHighDateTime=0x1d2faf2, ftLastWriteTime.dwLowDateTime=0xce3f400, ftLastWriteTime.dwHighDateTime=0x1d6eb7f, nFileSizeHigh=0x0, nFileSizeLow=0x250)) returned 1 [0069.534] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\ABV8L7MY\\AA61AKN[2].png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\abv8l7my\\aa61akn[2].png"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\ABV8L7MY\\AA61AKN[2].png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\abv8l7my\\aa61akn[2].png")) returned 1 [0069.535] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\ABV8L7MY\\AA6KizP[2].png", nBufferLength=0x105, lpBuffer=0x31dec4, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\ABV8L7MY\\AA6KizP[2].png", lpFilePart=0x0) returned 0x7e [0069.538] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e3b8) returned 1 [0069.538] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\ABV8L7MY\\AA6KizP[2].png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\abv8l7my\\aa6kizp[2].png"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x178 [0069.539] GetFileType (hFile=0x178) returned 0x1 [0069.539] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e3b4) returned 1 [0069.539] GetFileType (hFile=0x178) returned 0x1 [0069.539] GetFileSize (in: hFile=0x178, lpFileSizeHigh=0x31e4c0 | out: lpFileSizeHigh=0x31e4c0*=0x0) returned 0x21b [0069.539] ReadFile (in: hFile=0x178, lpBuffer=0x26575e0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x31e46c, lpOverlapped=0x0 | out: lpBuffer=0x26575e0*, lpNumberOfBytesRead=0x31e46c*=0x21b, lpOverlapped=0x0) returned 1 [0069.540] CloseHandle (hObject=0x178) returned 1 [0069.582] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\ABV8L7MY\\AA6KizP[2].png", nBufferLength=0x105, lpBuffer=0x31deb0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\ABV8L7MY\\AA6KizP[2].png", lpFilePart=0x0) returned 0x7e [0069.582] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e3a4) returned 1 [0069.582] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\ABV8L7MY\\AA6KizP[2].png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\abv8l7my\\aa6kizp[2].png"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x178 [0069.583] GetFileType (hFile=0x178) returned 0x1 [0069.583] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e3a0) returned 1 [0069.583] GetFileType (hFile=0x178) returned 0x1 [0069.583] WriteFile (in: hFile=0x178, lpBuffer=0x26a6168*, nNumberOfBytesToWrite=0x220, lpNumberOfBytesWritten=0x31e434, lpOverlapped=0x0 | out: lpBuffer=0x26a6168*, lpNumberOfBytesWritten=0x31e434*=0x220, lpOverlapped=0x0) returned 1 [0069.584] CloseHandle (hObject=0x178) returned 1 [0069.584] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\ABV8L7MY\\AA6KizP[2].png", nBufferLength=0x105, lpBuffer=0x31dfe4, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\ABV8L7MY\\AA6KizP[2].png", lpFilePart=0x0) returned 0x7e [0069.584] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\ABV8L7MY\\AA6KizP[2].png", nBufferLength=0x105, lpBuffer=0x31dfe4, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\ABV8L7MY\\AA6KizP[2].png", lpFilePart=0x0) returned 0x7e [0069.584] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e444) returned 1 [0069.584] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\ABV8L7MY\\AA6KizP[2].png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\abv8l7my\\aa6kizp[2].png"), fInfoLevelId=0x0, lpFileInformation=0x31e4c0 | out: lpFileInformation=0x31e4c0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x45b042f0, ftCreationTime.dwHighDateTime=0x1d2faf3, ftLastAccessTime.dwLowDateTime=0x45b042f0, ftLastAccessTime.dwHighDateTime=0x1d2faf3, ftLastWriteTime.dwLowDateTime=0xceb1820, ftLastWriteTime.dwHighDateTime=0x1d6eb7f, nFileSizeHigh=0x0, nFileSizeLow=0x220)) returned 1 [0069.584] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e440) returned 1 [0069.584] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\ABV8L7MY\\AA6KizP[2].png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\abv8l7my\\aa6kizp[2].png"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\ABV8L7MY\\AA6KizP[2].png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\abv8l7my\\aa6kizp[2].png")) returned 1 [0069.585] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\ABV8L7MY\\AA7XCQ3[1].png", nBufferLength=0x105, lpBuffer=0x31dec4, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\ABV8L7MY\\AA7XCQ3[1].png", lpFilePart=0x0) returned 0x7e [0069.585] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e3b8) returned 1 [0069.585] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\ABV8L7MY\\AA7XCQ3[1].png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\abv8l7my\\aa7xcq3[1].png"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x178 [0069.586] GetFileType (hFile=0x178) returned 0x1 [0069.586] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e3b4) returned 1 [0069.586] GetFileType (hFile=0x178) returned 0x1 [0069.586] GetFileSize (in: hFile=0x178, lpFileSizeHigh=0x31e4c0 | out: lpFileSizeHigh=0x31e4c0*=0x0) returned 0x27b [0069.586] ReadFile (in: hFile=0x178, lpBuffer=0x26a77c0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x31e46c, lpOverlapped=0x0 | out: lpBuffer=0x26a77c0*, lpNumberOfBytesRead=0x31e46c*=0x27b, lpOverlapped=0x0) returned 1 [0069.588] CloseHandle (hObject=0x178) returned 1 [0069.601] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\ABV8L7MY\\AA7XCQ3[1].png", nBufferLength=0x105, lpBuffer=0x31deb0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\ABV8L7MY\\AA7XCQ3[1].png", lpFilePart=0x0) returned 0x7e [0069.601] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e3a4) returned 1 [0069.601] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\ABV8L7MY\\AA7XCQ3[1].png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\abv8l7my\\aa7xcq3[1].png"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x178 [0069.602] GetFileType (hFile=0x178) returned 0x1 [0069.602] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e3a0) returned 1 [0069.602] GetFileType (hFile=0x178) returned 0x1 [0069.602] WriteFile (in: hFile=0x178, lpBuffer=0x26f63cc*, nNumberOfBytesToWrite=0x280, lpNumberOfBytesWritten=0x31e434, lpOverlapped=0x0 | out: lpBuffer=0x26f63cc*, lpNumberOfBytesWritten=0x31e434*=0x280, lpOverlapped=0x0) returned 1 [0069.604] CloseHandle (hObject=0x178) returned 1 [0069.604] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\ABV8L7MY\\AA7XCQ3[1].png", nBufferLength=0x105, lpBuffer=0x31dfe4, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\ABV8L7MY\\AA7XCQ3[1].png", lpFilePart=0x0) returned 0x7e [0069.604] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\ABV8L7MY\\AA7XCQ3[1].png", nBufferLength=0x105, lpBuffer=0x31dfe4, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\ABV8L7MY\\AA7XCQ3[1].png", lpFilePart=0x0) returned 0x7e [0069.604] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e444) returned 1 [0069.604] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\ABV8L7MY\\AA7XCQ3[1].png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\abv8l7my\\aa7xcq3[1].png"), fInfoLevelId=0x0, lpFileInformation=0x31e4c0 | out: lpFileInformation=0x31e4c0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x457e4610, ftCreationTime.dwHighDateTime=0x1d2faf3, ftLastAccessTime.dwLowDateTime=0x457e4610, ftLastAccessTime.dwHighDateTime=0x1d2faf3, ftLastWriteTime.dwLowDateTime=0xced7980, ftLastWriteTime.dwHighDateTime=0x1d6eb7f, nFileSizeHigh=0x0, nFileSizeLow=0x280)) returned 1 [0069.604] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e440) returned 1 [0069.604] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\ABV8L7MY\\AA7XCQ3[1].png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\abv8l7my\\aa7xcq3[1].png"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\ABV8L7MY\\AA7XCQ3[1].png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\abv8l7my\\aa7xcq3[1].png")) returned 1 [0069.605] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\ABV8L7MY\\AA8Tave[1].png", nBufferLength=0x105, lpBuffer=0x31dec4, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\ABV8L7MY\\AA8Tave[1].png", lpFilePart=0x0) returned 0x7e [0069.605] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e3b8) returned 1 [0069.605] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\ABV8L7MY\\AA8Tave[1].png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\abv8l7my\\aa8tave[1].png"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x178 [0069.605] GetFileType (hFile=0x178) returned 0x1 [0069.605] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e3b4) returned 1 [0069.605] GetFileType (hFile=0x178) returned 0x1 [0069.605] GetFileSize (in: hFile=0x178, lpFileSizeHigh=0x31e4c0 | out: lpFileSizeHigh=0x31e4c0*=0x0) returned 0x268 [0069.605] ReadFile (in: hFile=0x178, lpBuffer=0x26f7a10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x31e46c, lpOverlapped=0x0 | out: lpBuffer=0x26f7a10*, lpNumberOfBytesRead=0x31e46c*=0x268, lpOverlapped=0x0) returned 1 [0069.607] CloseHandle (hObject=0x178) returned 1 [0069.620] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\ABV8L7MY\\AA8Tave[1].png", nBufferLength=0x105, lpBuffer=0x31deb0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\ABV8L7MY\\AA8Tave[1].png", lpFilePart=0x0) returned 0x7e [0069.620] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e3a4) returned 1 [0069.620] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\ABV8L7MY\\AA8Tave[1].png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\abv8l7my\\aa8tave[1].png"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x178 [0069.621] GetFileType (hFile=0x178) returned 0x1 [0069.621] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e3a0) returned 1 [0069.621] GetFileType (hFile=0x178) returned 0x1 [0069.621] WriteFile (in: hFile=0x178, lpBuffer=0x27465cc*, nNumberOfBytesToWrite=0x270, lpNumberOfBytesWritten=0x31e434, lpOverlapped=0x0 | out: lpBuffer=0x27465cc*, lpNumberOfBytesWritten=0x31e434*=0x270, lpOverlapped=0x0) returned 1 [0069.622] CloseHandle (hObject=0x178) returned 1 [0069.622] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\ABV8L7MY\\AA8Tave[1].png", nBufferLength=0x105, lpBuffer=0x31dfe4, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\ABV8L7MY\\AA8Tave[1].png", lpFilePart=0x0) returned 0x7e [0069.622] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\ABV8L7MY\\AA8Tave[1].png", nBufferLength=0x105, lpBuffer=0x31dfe4, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\ABV8L7MY\\AA8Tave[1].png", lpFilePart=0x0) returned 0x7e [0069.622] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e444) returned 1 [0069.622] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\ABV8L7MY\\AA8Tave[1].png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\abv8l7my\\aa8tave[1].png"), fInfoLevelId=0x0, lpFileInformation=0x31e4c0 | out: lpFileInformation=0x31e4c0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x45510bf0, ftCreationTime.dwHighDateTime=0x1d2faf3, ftLastAccessTime.dwLowDateTime=0x45510bf0, ftLastAccessTime.dwHighDateTime=0x1d2faf3, ftLastWriteTime.dwLowDateTime=0xcefdae0, ftLastWriteTime.dwHighDateTime=0x1d6eb7f, nFileSizeHigh=0x0, nFileSizeLow=0x270)) returned 1 [0069.622] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e440) returned 1 [0069.622] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\ABV8L7MY\\AA8Tave[1].png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\abv8l7my\\aa8tave[1].png"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\ABV8L7MY\\AA8Tave[1].png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\abv8l7my\\aa8tave[1].png")) returned 1 [0069.623] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\ABV8L7MY\\AAfOIDq[1].png", nBufferLength=0x105, lpBuffer=0x31dec4, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\ABV8L7MY\\AAfOIDq[1].png", lpFilePart=0x0) returned 0x7e [0069.623] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e3b8) returned 1 [0069.623] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\ABV8L7MY\\AAfOIDq[1].png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\abv8l7my\\aafoidq[1].png"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x178 [0069.623] GetFileType (hFile=0x178) returned 0x1 [0069.623] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e3b4) returned 1 [0069.623] GetFileType (hFile=0x178) returned 0x1 [0069.623] GetFileSize (in: hFile=0x178, lpFileSizeHigh=0x31e4c0 | out: lpFileSizeHigh=0x31e4c0*=0x0) returned 0x21e [0069.623] ReadFile (in: hFile=0x178, lpBuffer=0x2747bc8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x31e46c, lpOverlapped=0x0 | out: lpBuffer=0x2747bc8*, lpNumberOfBytesRead=0x31e46c*=0x21e, lpOverlapped=0x0) returned 1 [0069.624] CloseHandle (hObject=0x178) returned 1 [0069.637] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\ABV8L7MY\\AAfOIDq[1].png", nBufferLength=0x105, lpBuffer=0x31deb0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\ABV8L7MY\\AAfOIDq[1].png", lpFilePart=0x0) returned 0x7e [0069.637] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e3a4) returned 1 [0069.638] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\ABV8L7MY\\AAfOIDq[1].png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\abv8l7my\\aafoidq[1].png"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x178 [0069.639] GetFileType (hFile=0x178) returned 0x1 [0069.639] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e3a0) returned 1 [0069.639] GetFileType (hFile=0x178) returned 0x1 [0069.639] WriteFile (in: hFile=0x178, lpBuffer=0x27965f0*, nNumberOfBytesToWrite=0x220, lpNumberOfBytesWritten=0x31e434, lpOverlapped=0x0 | out: lpBuffer=0x27965f0*, lpNumberOfBytesWritten=0x31e434*=0x220, lpOverlapped=0x0) returned 1 [0069.639] CloseHandle (hObject=0x178) returned 1 [0069.640] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\ABV8L7MY\\AAfOIDq[1].png", nBufferLength=0x105, lpBuffer=0x31dfe4, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\ABV8L7MY\\AAfOIDq[1].png", lpFilePart=0x0) returned 0x7e [0069.640] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\ABV8L7MY\\AAfOIDq[1].png", nBufferLength=0x105, lpBuffer=0x31dfe4, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\ABV8L7MY\\AAfOIDq[1].png", lpFilePart=0x0) returned 0x7e [0069.640] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e444) returned 1 [0069.640] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\ABV8L7MY\\AAfOIDq[1].png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\abv8l7my\\aafoidq[1].png"), fInfoLevelId=0x0, lpFileInformation=0x31e4c0 | out: lpFileInformation=0x31e4c0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xbe399c90, ftCreationTime.dwHighDateTime=0x1d2faf2, ftLastAccessTime.dwLowDateTime=0xbe399c90, ftLastAccessTime.dwHighDateTime=0x1d2faf2, ftLastWriteTime.dwLowDateTime=0xcf49da0, ftLastWriteTime.dwHighDateTime=0x1d6eb7f, nFileSizeHigh=0x0, nFileSizeLow=0x220)) returned 1 [0069.640] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e440) returned 1 [0069.640] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\ABV8L7MY\\AAfOIDq[1].png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\abv8l7my\\aafoidq[1].png"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\ABV8L7MY\\AAfOIDq[1].png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\abv8l7my\\aafoidq[1].png")) returned 1 [0069.640] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\ABV8L7MY\\AAkhMz9[2].png", nBufferLength=0x105, lpBuffer=0x31dec4, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\ABV8L7MY\\AAkhMz9[2].png", lpFilePart=0x0) returned 0x7e [0069.640] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e3b8) returned 1 [0069.640] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\ABV8L7MY\\AAkhMz9[2].png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\abv8l7my\\aakhmz9[2].png"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x178 [0069.640] GetFileType (hFile=0x178) returned 0x1 [0069.641] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e3b4) returned 1 [0069.641] GetFileType (hFile=0x178) returned 0x1 [0069.641] GetFileSize (in: hFile=0x178, lpFileSizeHigh=0x31e4c0 | out: lpFileSizeHigh=0x31e4c0*=0x0) returned 0x2e3 [0069.641] ReadFile (in: hFile=0x178, lpBuffer=0x2797cb0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x31e46c, lpOverlapped=0x0 | out: lpBuffer=0x2797cb0*, lpNumberOfBytesRead=0x31e46c*=0x2e3, lpOverlapped=0x0) returned 1 [0069.642] CloseHandle (hObject=0x178) returned 1 [0069.656] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\ABV8L7MY\\AAkhMz9[2].png", nBufferLength=0x105, lpBuffer=0x31deb0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\ABV8L7MY\\AAkhMz9[2].png", lpFilePart=0x0) returned 0x7e [0069.657] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e3a4) returned 1 [0069.657] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\ABV8L7MY\\AAkhMz9[2].png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\abv8l7my\\aakhmz9[2].png"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x178 [0069.657] GetFileType (hFile=0x178) returned 0x1 [0069.657] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e3a0) returned 1 [0069.658] GetFileType (hFile=0x178) returned 0x1 [0069.658] WriteFile (in: hFile=0x178, lpBuffer=0x27e6af4*, nNumberOfBytesToWrite=0x2f0, lpNumberOfBytesWritten=0x31e434, lpOverlapped=0x0 | out: lpBuffer=0x27e6af4*, lpNumberOfBytesWritten=0x31e434*=0x2f0, lpOverlapped=0x0) returned 1 [0069.658] CloseHandle (hObject=0x178) returned 1 [0069.659] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\ABV8L7MY\\AAkhMz9[2].png", nBufferLength=0x105, lpBuffer=0x31dfe4, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\ABV8L7MY\\AAkhMz9[2].png", lpFilePart=0x0) returned 0x7e [0069.659] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\ABV8L7MY\\AAkhMz9[2].png", nBufferLength=0x105, lpBuffer=0x31dfe4, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\ABV8L7MY\\AAkhMz9[2].png", lpFilePart=0x0) returned 0x7e [0069.659] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e444) returned 1 [0069.659] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\ABV8L7MY\\AAkhMz9[2].png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\abv8l7my\\aakhmz9[2].png"), fInfoLevelId=0x0, lpFileInformation=0x31e4c0 | out: lpFileInformation=0x31e4c0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x45b042f0, ftCreationTime.dwHighDateTime=0x1d2faf3, ftLastAccessTime.dwLowDateTime=0x45b042f0, ftLastAccessTime.dwHighDateTime=0x1d2faf3, ftLastWriteTime.dwLowDateTime=0xcf6ff00, ftLastWriteTime.dwHighDateTime=0x1d6eb7f, nFileSizeHigh=0x0, nFileSizeLow=0x2f0)) returned 1 [0069.659] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e440) returned 1 [0069.659] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\ABV8L7MY\\AAkhMz9[2].png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\abv8l7my\\aakhmz9[2].png"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\ABV8L7MY\\AAkhMz9[2].png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\abv8l7my\\aakhmz9[2].png")) returned 1 [0069.659] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\ABV8L7MY\\AAmRY2Q[1].png", nBufferLength=0x105, lpBuffer=0x31dec4, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\ABV8L7MY\\AAmRY2Q[1].png", lpFilePart=0x0) returned 0x7e [0069.659] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e3b8) returned 1 [0069.659] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\ABV8L7MY\\AAmRY2Q[1].png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\abv8l7my\\aamry2q[1].png"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x178 [0069.660] GetFileType (hFile=0x178) returned 0x1 [0069.660] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e3b4) returned 1 [0069.660] GetFileType (hFile=0x178) returned 0x1 [0069.660] GetFileSize (in: hFile=0x178, lpFileSizeHigh=0x31e4c0 | out: lpFileSizeHigh=0x31e4c0*=0x0) returned 0x12c [0069.660] ReadFile (in: hFile=0x178, lpBuffer=0x27e7ffc, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x31e46c, lpOverlapped=0x0 | out: lpBuffer=0x27e7ffc*, lpNumberOfBytesRead=0x31e46c*=0x12c, lpOverlapped=0x0) returned 1 [0069.661] CloseHandle (hObject=0x178) returned 1 [0069.675] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\ABV8L7MY\\AAmRY2Q[1].png", nBufferLength=0x105, lpBuffer=0x31deb0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\ABV8L7MY\\AAmRY2Q[1].png", lpFilePart=0x0) returned 0x7e [0069.675] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e3a4) returned 1 [0069.676] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\ABV8L7MY\\AAmRY2Q[1].png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\abv8l7my\\aamry2q[1].png"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x178 [0069.676] GetFileType (hFile=0x178) returned 0x1 [0069.676] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e3a0) returned 1 [0069.676] GetFileType (hFile=0x178) returned 0x1 [0069.676] WriteFile (in: hFile=0x178, lpBuffer=0x2836574*, nNumberOfBytesToWrite=0x130, lpNumberOfBytesWritten=0x31e434, lpOverlapped=0x0 | out: lpBuffer=0x2836574*, lpNumberOfBytesWritten=0x31e434*=0x130, lpOverlapped=0x0) returned 1 [0069.677] CloseHandle (hObject=0x178) returned 1 [0069.677] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\ABV8L7MY\\AAmRY2Q[1].png", nBufferLength=0x105, lpBuffer=0x31dfe4, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\ABV8L7MY\\AAmRY2Q[1].png", lpFilePart=0x0) returned 0x7e [0069.677] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\ABV8L7MY\\AAmRY2Q[1].png", nBufferLength=0x105, lpBuffer=0x31dfe4, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\ABV8L7MY\\AAmRY2Q[1].png", lpFilePart=0x0) returned 0x7e [0069.677] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e444) returned 1 [0069.678] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\ABV8L7MY\\AAmRY2Q[1].png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\abv8l7my\\aamry2q[1].png"), fInfoLevelId=0x0, lpFileInformation=0x31e4c0 | out: lpFileInformation=0x31e4c0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x53194530, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x53194530, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0xcf96060, ftLastWriteTime.dwHighDateTime=0x1d6eb7f, nFileSizeHigh=0x0, nFileSizeLow=0x130)) returned 1 [0069.678] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e440) returned 1 [0069.678] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\ABV8L7MY\\AAmRY2Q[1].png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\abv8l7my\\aamry2q[1].png"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\ABV8L7MY\\AAmRY2Q[1].png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\abv8l7my\\aamry2q[1].png")) returned 1 [0069.678] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\ABV8L7MY\\AAni8qk[1].png", nBufferLength=0x105, lpBuffer=0x31dec4, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\ABV8L7MY\\AAni8qk[1].png", lpFilePart=0x0) returned 0x7e [0069.678] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e3b8) returned 1 [0069.678] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\ABV8L7MY\\AAni8qk[1].png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\abv8l7my\\aani8qk[1].png"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x178 [0069.678] GetFileType (hFile=0x178) returned 0x1 [0069.678] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e3b4) returned 1 [0069.678] GetFileType (hFile=0x178) returned 0x1 [0069.679] GetFileSize (in: hFile=0x178, lpFileSizeHigh=0x31e4c0 | out: lpFileSizeHigh=0x31e4c0*=0x0) returned 0x391 [0069.679] ReadFile (in: hFile=0x178, lpBuffer=0x2837ce4, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x31e46c, lpOverlapped=0x0 | out: lpBuffer=0x2837ce4*, lpNumberOfBytesRead=0x31e46c*=0x391, lpOverlapped=0x0) returned 1 [0069.680] CloseHandle (hObject=0x178) returned 1 [0069.723] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\ABV8L7MY\\AAni8qk[1].png", nBufferLength=0x105, lpBuffer=0x31deb0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\ABV8L7MY\\AAni8qk[1].png", lpFilePart=0x0) returned 0x7e [0069.723] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e3a4) returned 1 [0069.723] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\ABV8L7MY\\AAni8qk[1].png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\abv8l7my\\aani8qk[1].png"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x178 [0069.724] GetFileType (hFile=0x178) returned 0x1 [0069.724] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e3a0) returned 1 [0069.724] GetFileType (hFile=0x178) returned 0x1 [0069.724] WriteFile (in: hFile=0x178, lpBuffer=0x268750c*, nNumberOfBytesToWrite=0x3a0, lpNumberOfBytesWritten=0x31e434, lpOverlapped=0x0 | out: lpBuffer=0x268750c*, lpNumberOfBytesWritten=0x31e434*=0x3a0, lpOverlapped=0x0) returned 1 [0069.725] CloseHandle (hObject=0x178) returned 1 [0069.725] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\ABV8L7MY\\AAni8qk[1].png", nBufferLength=0x105, lpBuffer=0x31dfe4, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\ABV8L7MY\\AAni8qk[1].png", lpFilePart=0x0) returned 0x7e [0069.725] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\ABV8L7MY\\AAni8qk[1].png", nBufferLength=0x105, lpBuffer=0x31dfe4, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\ABV8L7MY\\AAni8qk[1].png", lpFilePart=0x0) returned 0x7e [0069.725] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e444) returned 1 [0069.725] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\ABV8L7MY\\AAni8qk[1].png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\abv8l7my\\aani8qk[1].png"), fInfoLevelId=0x0, lpFileInformation=0x31e4c0 | out: lpFileInformation=0x31e4c0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x45915110, ftCreationTime.dwHighDateTime=0x1d2faf3, ftLastAccessTime.dwLowDateTime=0x45915110, ftLastAccessTime.dwHighDateTime=0x1d2faf3, ftLastWriteTime.dwLowDateTime=0xd008480, ftLastWriteTime.dwHighDateTime=0x1d6eb7f, nFileSizeHigh=0x0, nFileSizeLow=0x3a0)) returned 1 [0069.725] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e440) returned 1 [0069.725] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\ABV8L7MY\\AAni8qk[1].png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\abv8l7my\\aani8qk[1].png"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\ABV8L7MY\\AAni8qk[1].png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\abv8l7my\\aani8qk[1].png")) returned 1 [0069.725] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\ABV8L7MY\\b367c075-d98a-457d-b37d-3d9e8ab53e8b[1].jpg", nBufferLength=0x105, lpBuffer=0x31dec4, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\ABV8L7MY\\b367c075-d98a-457d-b37d-3d9e8ab53e8b[1].jpg", lpFilePart=0x0) returned 0x9b [0069.725] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e3b8) returned 1 [0069.725] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\ABV8L7MY\\b367c075-d98a-457d-b37d-3d9e8ab53e8b[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\abv8l7my\\b367c075-d98a-457d-b37d-3d9e8ab53e8b[1].jpg"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x178 [0069.726] GetFileType (hFile=0x178) returned 0x1 [0069.726] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e3b4) returned 1 [0069.726] GetFileType (hFile=0x178) returned 0x1 [0069.726] GetFileSize (in: hFile=0x178, lpFileSizeHigh=0x31e4c0 | out: lpFileSizeHigh=0x31e4c0*=0x0) returned 0x5feb [0069.726] ReadFile (in: hFile=0x178, lpBuffer=0x2688978, nNumberOfBytesToRead=0x5feb, lpNumberOfBytesRead=0x31e46c, lpOverlapped=0x0 | out: lpBuffer=0x2688978*, lpNumberOfBytesRead=0x31e46c*=0x5feb, lpOverlapped=0x0) returned 1 [0069.728] CloseHandle (hObject=0x178) returned 1 [0069.742] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\ABV8L7MY\\b367c075-d98a-457d-b37d-3d9e8ab53e8b[1].jpg", nBufferLength=0x105, lpBuffer=0x31deb0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\ABV8L7MY\\b367c075-d98a-457d-b37d-3d9e8ab53e8b[1].jpg", lpFilePart=0x0) returned 0x9b [0069.742] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e3a4) returned 1 [0069.742] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\ABV8L7MY\\b367c075-d98a-457d-b37d-3d9e8ab53e8b[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\abv8l7my\\b367c075-d98a-457d-b37d-3d9e8ab53e8b[1].jpg"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x178 [0069.743] GetFileType (hFile=0x178) returned 0x1 [0069.743] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e3a0) returned 1 [0069.743] GetFileType (hFile=0x178) returned 0x1 [0069.743] WriteFile (in: hFile=0x178, lpBuffer=0x26f386c*, nNumberOfBytesToWrite=0x5ff0, lpNumberOfBytesWritten=0x31e460, lpOverlapped=0x0 | out: lpBuffer=0x26f386c*, lpNumberOfBytesWritten=0x31e460*=0x5ff0, lpOverlapped=0x0) returned 1 [0069.745] CloseHandle (hObject=0x178) returned 1 [0069.745] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\ABV8L7MY\\b367c075-d98a-457d-b37d-3d9e8ab53e8b[1].jpg", nBufferLength=0x105, lpBuffer=0x31dfe4, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\ABV8L7MY\\b367c075-d98a-457d-b37d-3d9e8ab53e8b[1].jpg", lpFilePart=0x0) returned 0x9b [0069.745] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\ABV8L7MY\\b367c075-d98a-457d-b37d-3d9e8ab53e8b[1].jpg", nBufferLength=0x105, lpBuffer=0x31dfe4, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\ABV8L7MY\\b367c075-d98a-457d-b37d-3d9e8ab53e8b[1].jpg", lpFilePart=0x0) returned 0x9b [0069.745] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e444) returned 1 [0069.745] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\ABV8L7MY\\b367c075-d98a-457d-b37d-3d9e8ab53e8b[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\abv8l7my\\b367c075-d98a-457d-b37d-3d9e8ab53e8b[1].jpg"), fInfoLevelId=0x0, lpFileInformation=0x31e4c0 | out: lpFileInformation=0x31e4c0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x53bb22b0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x53bb22b0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0xd02e5e0, ftLastWriteTime.dwHighDateTime=0x1d6eb7f, nFileSizeHigh=0x0, nFileSizeLow=0x5ff0)) returned 1 [0069.745] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e440) returned 1 [0069.745] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\ABV8L7MY\\b367c075-d98a-457d-b37d-3d9e8ab53e8b[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\abv8l7my\\b367c075-d98a-457d-b37d-3d9e8ab53e8b[1].jpg"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\ABV8L7MY\\b367c075-d98a-457d-b37d-3d9e8ab53e8b[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\abv8l7my\\b367c075-d98a-457d-b37d-3d9e8ab53e8b[1].jpg")) returned 1 [0069.745] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\ABV8L7MY\\BB8jcOr[2].png", nBufferLength=0x105, lpBuffer=0x31dec4, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\ABV8L7MY\\BB8jcOr[2].png", lpFilePart=0x0) returned 0x7e [0069.745] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e3b8) returned 1 [0069.745] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\ABV8L7MY\\BB8jcOr[2].png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\abv8l7my\\bb8jcor[2].png"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x178 [0069.746] GetFileType (hFile=0x178) returned 0x1 [0069.746] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e3b4) returned 1 [0069.746] GetFileType (hFile=0x178) returned 0x1 [0069.746] GetFileSize (in: hFile=0x178, lpFileSizeHigh=0x31e4c0 | out: lpFileSizeHigh=0x31e4c0*=0x0) returned 0x1aa [0069.746] ReadFile (in: hFile=0x178, lpBuffer=0x26fa058, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x31e46c, lpOverlapped=0x0 | out: lpBuffer=0x26fa058*, lpNumberOfBytesRead=0x31e46c*=0x1aa, lpOverlapped=0x0) returned 1 [0069.747] CloseHandle (hObject=0x178) returned 1 [0069.760] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\ABV8L7MY\\BB8jcOr[2].png", nBufferLength=0x105, lpBuffer=0x31deb0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\ABV8L7MY\\BB8jcOr[2].png", lpFilePart=0x0) returned 0x7e [0069.760] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e3a4) returned 1 [0069.760] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\ABV8L7MY\\BB8jcOr[2].png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\abv8l7my\\bb8jcor[2].png"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x178 [0069.761] GetFileType (hFile=0x178) returned 0x1 [0069.761] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e3a0) returned 1 [0069.761] GetFileType (hFile=0x178) returned 0x1 [0069.761] WriteFile (in: hFile=0x178, lpBuffer=0x2748854*, nNumberOfBytesToWrite=0x1b0, lpNumberOfBytesWritten=0x31e434, lpOverlapped=0x0 | out: lpBuffer=0x2748854*, lpNumberOfBytesWritten=0x31e434*=0x1b0, lpOverlapped=0x0) returned 1 [0069.762] CloseHandle (hObject=0x178) returned 1 [0069.762] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\ABV8L7MY\\BB8jcOr[2].png", nBufferLength=0x105, lpBuffer=0x31dfe4, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\ABV8L7MY\\BB8jcOr[2].png", lpFilePart=0x0) returned 0x7e [0069.762] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\ABV8L7MY\\BB8jcOr[2].png", nBufferLength=0x105, lpBuffer=0x31dfe4, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\ABV8L7MY\\BB8jcOr[2].png", lpFilePart=0x0) returned 0x7e [0069.762] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e444) returned 1 [0069.762] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\ABV8L7MY\\BB8jcOr[2].png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\abv8l7my\\bb8jcor[2].png"), fInfoLevelId=0x0, lpFileInformation=0x31e4c0 | out: lpFileInformation=0x31e4c0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x459613d0, ftCreationTime.dwHighDateTime=0x1d2faf3, ftLastAccessTime.dwLowDateTime=0x459613d0, ftLastAccessTime.dwHighDateTime=0x1d2faf3, ftLastWriteTime.dwLowDateTime=0xd054740, ftLastWriteTime.dwHighDateTime=0x1d6eb7f, nFileSizeHigh=0x0, nFileSizeLow=0x1b0)) returned 1 [0069.763] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e440) returned 1 [0069.763] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\ABV8L7MY\\BB8jcOr[2].png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\abv8l7my\\bb8jcor[2].png"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\ABV8L7MY\\BB8jcOr[2].png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\abv8l7my\\bb8jcor[2].png")) returned 1 [0069.763] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\ABV8L7MY\\BBB8ZbM[1].jpg", nBufferLength=0x105, lpBuffer=0x31dec4, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\ABV8L7MY\\BBB8ZbM[1].jpg", lpFilePart=0x0) returned 0x7e [0069.763] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e3b8) returned 1 [0069.763] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\ABV8L7MY\\BBB8ZbM[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\abv8l7my\\bbb8zbm[1].jpg"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x178 [0069.763] GetFileType (hFile=0x178) returned 0x1 [0069.764] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e3b4) returned 1 [0069.764] GetFileType (hFile=0x178) returned 0x1 [0069.764] GetFileSize (in: hFile=0x178, lpFileSizeHigh=0x31e4c0 | out: lpFileSizeHigh=0x31e4c0*=0x0) returned 0x1c22 [0069.764] ReadFile (in: hFile=0x178, lpBuffer=0x2749c24, nNumberOfBytesToRead=0x1c22, lpNumberOfBytesRead=0x31e46c, lpOverlapped=0x0 | out: lpBuffer=0x2749c24*, lpNumberOfBytesRead=0x31e46c*=0x1c22, lpOverlapped=0x0) returned 1 [0069.765] CloseHandle (hObject=0x178) returned 1 [0069.779] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\ABV8L7MY\\BBB8ZbM[1].jpg", nBufferLength=0x105, lpBuffer=0x31deb0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\ABV8L7MY\\BBB8ZbM[1].jpg", lpFilePart=0x0) returned 0x7e [0069.779] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e3a4) returned 1 [0069.779] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\ABV8L7MY\\BBB8ZbM[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\abv8l7my\\bbb8zbm[1].jpg"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x178 [0069.780] GetFileType (hFile=0x178) returned 0x1 [0069.780] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e3a0) returned 1 [0069.780] GetFileType (hFile=0x178) returned 0x1 [0069.780] WriteFile (in: hFile=0x178, lpBuffer=0x279f6fc*, nNumberOfBytesToWrite=0x1c30, lpNumberOfBytesWritten=0x31e460, lpOverlapped=0x0 | out: lpBuffer=0x279f6fc*, lpNumberOfBytesWritten=0x31e460*=0x1c30, lpOverlapped=0x0) returned 1 [0069.781] CloseHandle (hObject=0x178) returned 1 [0069.781] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\ABV8L7MY\\BBB8ZbM[1].jpg", nBufferLength=0x105, lpBuffer=0x31dfe4, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\ABV8L7MY\\BBB8ZbM[1].jpg", lpFilePart=0x0) returned 0x7e [0069.781] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\ABV8L7MY\\BBB8ZbM[1].jpg", nBufferLength=0x105, lpBuffer=0x31dfe4, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\ABV8L7MY\\BBB8ZbM[1].jpg", lpFilePart=0x0) returned 0x7e [0069.781] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e444) returned 1 [0069.781] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\ABV8L7MY\\BBB8ZbM[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\abv8l7my\\bbb8zbm[1].jpg"), fInfoLevelId=0x0, lpFileInformation=0x31e4c0 | out: lpFileInformation=0x31e4c0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x45ab8030, ftCreationTime.dwHighDateTime=0x1d2faf3, ftLastAccessTime.dwLowDateTime=0x45ab8030, ftLastAccessTime.dwHighDateTime=0x1d2faf3, ftLastWriteTime.dwLowDateTime=0xd0a0a00, ftLastWriteTime.dwHighDateTime=0x1d6eb7f, nFileSizeHigh=0x0, nFileSizeLow=0x1c30)) returned 1 [0069.781] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e440) returned 1 [0069.781] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\ABV8L7MY\\BBB8ZbM[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\abv8l7my\\bbb8zbm[1].jpg"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\ABV8L7MY\\BBB8ZbM[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\abv8l7my\\bbb8zbm[1].jpg")) returned 1 [0069.782] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\ABV8L7MY\\BBB9wH0[1].png", nBufferLength=0x105, lpBuffer=0x31dec4, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\ABV8L7MY\\BBB9wH0[1].png", lpFilePart=0x0) returned 0x7e [0069.782] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e3b8) returned 1 [0069.782] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\ABV8L7MY\\BBB9wH0[1].png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\abv8l7my\\bbb9wh0[1].png"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x178 [0069.782] GetFileType (hFile=0x178) returned 0x1 [0069.782] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e3b4) returned 1 [0069.782] GetFileType (hFile=0x178) returned 0x1 [0069.782] GetFileSize (in: hFile=0x178, lpFileSizeHigh=0x31e4c0 | out: lpFileSizeHigh=0x31e4c0*=0x0) returned 0x234 [0069.782] ReadFile (in: hFile=0x178, lpBuffer=0x27a1ad0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x31e46c, lpOverlapped=0x0 | out: lpBuffer=0x27a1ad0*, lpNumberOfBytesRead=0x31e46c*=0x234, lpOverlapped=0x0) returned 1 [0069.798] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\ABV8L7MY\\BBB9wH0[1].png", nBufferLength=0x105, lpBuffer=0x31deb0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\ABV8L7MY\\BBB9wH0[1].png", lpFilePart=0x0) returned 0x7e [0069.798] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e3a4) returned 1 [0069.798] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\ABV8L7MY\\BBB9wH0[1].png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\abv8l7my\\bbb9wh0[1].png"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x178 [0069.799] GetFileType (hFile=0x178) returned 0x1 [0069.799] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e3a0) returned 1 [0069.799] GetFileType (hFile=0x178) returned 0x1 [0069.799] WriteFile (in: hFile=0x178, lpBuffer=0x27f05a0*, nNumberOfBytesToWrite=0x240, lpNumberOfBytesWritten=0x31e434, lpOverlapped=0x0 | out: lpBuffer=0x27f05a0*, lpNumberOfBytesWritten=0x31e434*=0x240, lpOverlapped=0x0) returned 1 [0069.800] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\ABV8L7MY\\BBB9wH0[1].png", nBufferLength=0x105, lpBuffer=0x31dfe4, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\ABV8L7MY\\BBB9wH0[1].png", lpFilePart=0x0) returned 0x7e [0069.800] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\ABV8L7MY\\BBB9wH0[1].png", nBufferLength=0x105, lpBuffer=0x31dfe4, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\ABV8L7MY\\BBB9wH0[1].png", lpFilePart=0x0) returned 0x7e [0069.800] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e444) returned 1 [0069.800] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\ABV8L7MY\\BBB9wH0[1].png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\abv8l7my\\bbb9wh0[1].png"), fInfoLevelId=0x0, lpFileInformation=0x31e4c0 | out: lpFileInformation=0x31e4c0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x45a1fab0, ftCreationTime.dwHighDateTime=0x1d2faf3, ftLastAccessTime.dwLowDateTime=0x45a1fab0, ftLastAccessTime.dwHighDateTime=0x1d2faf3, ftLastWriteTime.dwLowDateTime=0xd0c6b60, ftLastWriteTime.dwHighDateTime=0x1d6eb7f, nFileSizeHigh=0x0, nFileSizeLow=0x240)) returned 1 [0069.800] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e440) returned 1 [0069.800] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\ABV8L7MY\\BBB9wH0[1].png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\abv8l7my\\bbb9wh0[1].png"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\ABV8L7MY\\BBB9wH0[1].png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\abv8l7my\\bbb9wh0[1].png")) returned 1 [0069.801] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\ABV8L7MY\\BBBCFjo[1].jpg", nBufferLength=0x105, lpBuffer=0x31dec4, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\ABV8L7MY\\BBBCFjo[1].jpg", lpFilePart=0x0) returned 0x7e [0069.801] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e3b8) returned 1 [0069.801] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\ABV8L7MY\\BBBCFjo[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\abv8l7my\\bbbcfjo[1].jpg"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x178 [0069.801] GetFileType (hFile=0x178) returned 0x1 [0069.801] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e3b4) returned 1 [0069.801] GetFileType (hFile=0x178) returned 0x1 [0069.801] GetFileSize (in: hFile=0x178, lpFileSizeHigh=0x31e4c0 | out: lpFileSizeHigh=0x31e4c0*=0x0) returned 0x2ac7 [0069.801] ReadFile (in: hFile=0x178, lpBuffer=0x27f1970, nNumberOfBytesToRead=0x2ac7, lpNumberOfBytesRead=0x31e46c, lpOverlapped=0x0 | out: lpBuffer=0x27f1970*, lpNumberOfBytesRead=0x31e46c*=0x2ac7, lpOverlapped=0x0) returned 1 [0069.816] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\ABV8L7MY\\BBBCFjo[1].jpg", nBufferLength=0x105, lpBuffer=0x31deb0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\ABV8L7MY\\BBBCFjo[1].jpg", lpFilePart=0x0) returned 0x7e [0069.816] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e3a4) returned 1 [0069.816] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\ABV8L7MY\\BBBCFjo[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\abv8l7my\\bbbcfjo[1].jpg"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x178 [0069.817] GetFileType (hFile=0x178) returned 0x1 [0069.817] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e3a0) returned 1 [0069.817] GetFileType (hFile=0x178) returned 0x1 [0069.817] WriteFile (in: hFile=0x178, lpBuffer=0x284bd68*, nNumberOfBytesToWrite=0x2ad0, lpNumberOfBytesWritten=0x31e460, lpOverlapped=0x0 | out: lpBuffer=0x284bd68*, lpNumberOfBytesWritten=0x31e460*=0x2ad0, lpOverlapped=0x0) returned 1 [0069.818] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\ABV8L7MY\\BBBCFjo[1].jpg", nBufferLength=0x105, lpBuffer=0x31dfe4, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\ABV8L7MY\\BBBCFjo[1].jpg", lpFilePart=0x0) returned 0x7e [0069.818] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\ABV8L7MY\\BBBCFjo[1].jpg", nBufferLength=0x105, lpBuffer=0x31dfe4, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\ABV8L7MY\\BBBCFjo[1].jpg", lpFilePart=0x0) returned 0x7e [0069.818] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e444) returned 1 [0069.818] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\ABV8L7MY\\BBBCFjo[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\abv8l7my\\bbbcfjo[1].jpg"), fInfoLevelId=0x0, lpFileInformation=0x31e4c0 | out: lpFileInformation=0x31e4c0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x642446e0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x642446e0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0xd0eccc0, ftLastWriteTime.dwHighDateTime=0x1d6eb7f, nFileSizeHigh=0x0, nFileSizeLow=0x2ad0)) returned 1 [0069.818] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e440) returned 1 [0069.818] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\ABV8L7MY\\BBBCFjo[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\abv8l7my\\bbbcfjo[1].jpg"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\ABV8L7MY\\BBBCFjo[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\abv8l7my\\bbbcfjo[1].jpg")) returned 1 [0069.819] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\ABV8L7MY\\BBBDtcM[1].jpg", nBufferLength=0x105, lpBuffer=0x31dec4, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\ABV8L7MY\\BBBDtcM[1].jpg", lpFilePart=0x0) returned 0x7e [0069.819] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e3b8) returned 1 [0069.819] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\ABV8L7MY\\BBBDtcM[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\abv8l7my\\bbbdtcm[1].jpg"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x178 [0069.820] GetFileType (hFile=0x178) returned 0x1 [0069.820] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e3b4) returned 1 [0069.820] GetFileType (hFile=0x178) returned 0x1 [0069.820] GetFileSize (in: hFile=0x178, lpFileSizeHigh=0x31e4c0 | out: lpFileSizeHigh=0x31e4c0*=0x0) returned 0x7c9 [0069.820] ReadFile (in: hFile=0x178, lpBuffer=0x284f574, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x31e46c, lpOverlapped=0x0 | out: lpBuffer=0x284f574*, lpNumberOfBytesRead=0x31e46c*=0x7c9, lpOverlapped=0x0) returned 1 [0069.865] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\ABV8L7MY\\BBBDtcM[1].jpg", nBufferLength=0x105, lpBuffer=0x31deb0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\ABV8L7MY\\BBBDtcM[1].jpg", lpFilePart=0x0) returned 0x7e [0069.865] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e3a4) returned 1 [0069.865] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\ABV8L7MY\\BBBDtcM[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\abv8l7my\\bbbdtcm[1].jpg"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x178 [0069.866] GetFileType (hFile=0x178) returned 0x1 [0069.866] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e3a0) returned 1 [0069.866] GetFileType (hFile=0x178) returned 0x1 [0069.867] WriteFile (in: hFile=0x178, lpBuffer=0x26a0034*, nNumberOfBytesToWrite=0x7d0, lpNumberOfBytesWritten=0x31e434, lpOverlapped=0x0 | out: lpBuffer=0x26a0034*, lpNumberOfBytesWritten=0x31e434*=0x7d0, lpOverlapped=0x0) returned 1 [0069.867] CloseHandle (hObject=0x178) returned 1 [0069.867] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\ABV8L7MY\\BBBDtcM[1].jpg", nBufferLength=0x105, lpBuffer=0x31dfe4, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\ABV8L7MY\\BBBDtcM[1].jpg", lpFilePart=0x0) returned 0x7e [0069.868] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\ABV8L7MY\\BBBDtcM[1].jpg", nBufferLength=0x105, lpBuffer=0x31dfe4, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\ABV8L7MY\\BBBDtcM[1].jpg", lpFilePart=0x0) returned 0x7e [0069.868] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e444) returned 1 [0069.868] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\ABV8L7MY\\BBBDtcM[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\abv8l7my\\bbbdtcm[1].jpg"), fInfoLevelId=0x0, lpFileInformation=0x31e4c0 | out: lpFileInformation=0x31e4c0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x533cf9d0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x533cf9d0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0xd15f0e0, ftLastWriteTime.dwHighDateTime=0x1d6eb7f, nFileSizeHigh=0x0, nFileSizeLow=0x7d0)) returned 1 [0069.868] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e440) returned 1 [0069.868] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\ABV8L7MY\\BBBDtcM[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\abv8l7my\\bbbdtcm[1].jpg"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\ABV8L7MY\\BBBDtcM[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\abv8l7my\\bbbdtcm[1].jpg")) returned 1 [0069.868] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\ABV8L7MY\\BBBIeNJ[1].jpg", nBufferLength=0x105, lpBuffer=0x31dec4, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\ABV8L7MY\\BBBIeNJ[1].jpg", lpFilePart=0x0) returned 0x7e [0069.868] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e3b8) returned 1 [0069.868] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\ABV8L7MY\\BBBIeNJ[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\abv8l7my\\bbbienj[1].jpg"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x178 [0069.877] GetFileType (hFile=0x178) returned 0x1 [0069.877] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e3b4) returned 1 [0069.877] GetFileType (hFile=0x178) returned 0x1 [0069.877] GetFileSize (in: hFile=0x178, lpFileSizeHigh=0x31e4c0 | out: lpFileSizeHigh=0x31e4c0*=0x0) returned 0x1f19 [0069.877] ReadFile (in: hFile=0x178, lpBuffer=0x26a1404, nNumberOfBytesToRead=0x1f19, lpNumberOfBytesRead=0x31e46c, lpOverlapped=0x0 | out: lpBuffer=0x26a1404*, lpNumberOfBytesRead=0x31e46c*=0x1f19, lpOverlapped=0x0) returned 1 [0069.884] CloseHandle (hObject=0x178) returned 1 [0069.898] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\ABV8L7MY\\BBBIeNJ[1].jpg", nBufferLength=0x105, lpBuffer=0x31deb0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\ABV8L7MY\\BBBIeNJ[1].jpg", lpFilePart=0x0) returned 0x7e [0069.898] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e3a4) returned 1 [0069.898] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\ABV8L7MY\\BBBIeNJ[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\abv8l7my\\bbbienj[1].jpg"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x178 [0069.899] GetFileType (hFile=0x178) returned 0x1 [0069.899] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e3a0) returned 1 [0069.899] GetFileType (hFile=0x178) returned 0x1 [0069.899] WriteFile (in: hFile=0x178, lpBuffer=0x26f7ee8*, nNumberOfBytesToWrite=0x1f20, lpNumberOfBytesWritten=0x31e460, lpOverlapped=0x0 | out: lpBuffer=0x26f7ee8*, lpNumberOfBytesWritten=0x31e460*=0x1f20, lpOverlapped=0x0) returned 1 [0069.901] CloseHandle (hObject=0x178) returned 1 [0069.901] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\ABV8L7MY\\BBBIeNJ[1].jpg", nBufferLength=0x105, lpBuffer=0x31dfe4, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\ABV8L7MY\\BBBIeNJ[1].jpg", lpFilePart=0x0) returned 0x7e [0069.901] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\ABV8L7MY\\BBBIeNJ[1].jpg", nBufferLength=0x105, lpBuffer=0x31dfe4, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\ABV8L7MY\\BBBIeNJ[1].jpg", lpFilePart=0x0) returned 0x7e [0069.901] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e444) returned 1 [0069.901] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\ABV8L7MY\\BBBIeNJ[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\abv8l7my\\bbbienj[1].jpg"), fInfoLevelId=0x0, lpFileInformation=0x31e4c0 | out: lpFileInformation=0x31e4c0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x53b8c150, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x53b8c150, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0xd1ab3a0, ftLastWriteTime.dwHighDateTime=0x1d6eb7f, nFileSizeHigh=0x0, nFileSizeLow=0x1f20)) returned 1 [0069.901] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e440) returned 1 [0069.901] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\ABV8L7MY\\BBBIeNJ[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\abv8l7my\\bbbienj[1].jpg"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\ABV8L7MY\\BBBIeNJ[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\abv8l7my\\bbbienj[1].jpg")) returned 1 [0069.901] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\ABV8L7MY\\BBBImKX[1].jpg", nBufferLength=0x105, lpBuffer=0x31dec4, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\ABV8L7MY\\BBBImKX[1].jpg", lpFilePart=0x0) returned 0x7e [0069.901] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e3b8) returned 1 [0069.901] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\ABV8L7MY\\BBBImKX[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\abv8l7my\\bbbimkx[1].jpg"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x178 [0069.902] GetFileType (hFile=0x178) returned 0x1 [0069.902] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e3b4) returned 1 [0069.902] GetFileType (hFile=0x178) returned 0x1 [0069.902] GetFileSize (in: hFile=0x178, lpFileSizeHigh=0x31e4c0 | out: lpFileSizeHigh=0x31e4c0*=0x0) returned 0x711 [0069.902] ReadFile (in: hFile=0x178, lpBuffer=0x26faa8c, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x31e46c, lpOverlapped=0x0 | out: lpBuffer=0x26faa8c*, lpNumberOfBytesRead=0x31e46c*=0x711, lpOverlapped=0x0) returned 1 [0069.904] CloseHandle (hObject=0x178) returned 1 [0069.917] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\ABV8L7MY\\BBBImKX[1].jpg", nBufferLength=0x105, lpBuffer=0x31deb0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\ABV8L7MY\\BBBImKX[1].jpg", lpFilePart=0x0) returned 0x7e [0069.917] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e3a4) returned 1 [0069.918] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\ABV8L7MY\\BBBImKX[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\abv8l7my\\bbbimkx[1].jpg"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x178 [0069.918] GetFileType (hFile=0x178) returned 0x1 [0069.918] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e3a0) returned 1 [0069.918] GetFileType (hFile=0x178) returned 0x1 [0069.919] WriteFile (in: hFile=0x178, lpBuffer=0x274adc0*, nNumberOfBytesToWrite=0x720, lpNumberOfBytesWritten=0x31e434, lpOverlapped=0x0 | out: lpBuffer=0x274adc0*, lpNumberOfBytesWritten=0x31e434*=0x720, lpOverlapped=0x0) returned 1 [0069.920] CloseHandle (hObject=0x178) returned 1 [0069.920] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\ABV8L7MY\\BBBImKX[1].jpg", nBufferLength=0x105, lpBuffer=0x31dfe4, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\ABV8L7MY\\BBBImKX[1].jpg", lpFilePart=0x0) returned 0x7e [0069.920] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\ABV8L7MY\\BBBImKX[1].jpg", nBufferLength=0x105, lpBuffer=0x31dfe4, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\ABV8L7MY\\BBBImKX[1].jpg", lpFilePart=0x0) returned 0x7e [0069.920] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e444) returned 1 [0069.920] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\ABV8L7MY\\BBBImKX[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\abv8l7my\\bbbimkx[1].jpg"), fInfoLevelId=0x0, lpFileInformation=0x31e4c0 | out: lpFileInformation=0x31e4c0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x53598a50, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x53598a50, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0xd1f7660, ftLastWriteTime.dwHighDateTime=0x1d6eb7f, nFileSizeHigh=0x0, nFileSizeLow=0x720)) returned 1 [0069.920] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e440) returned 1 [0069.920] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\ABV8L7MY\\BBBImKX[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\abv8l7my\\bbbimkx[1].jpg"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\ABV8L7MY\\BBBImKX[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\abv8l7my\\bbbimkx[1].jpg")) returned 1 [0069.920] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\ABV8L7MY\\BBBL4R9[1].jpg", nBufferLength=0x105, lpBuffer=0x31dec4, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\ABV8L7MY\\BBBL4R9[1].jpg", lpFilePart=0x0) returned 0x7e [0069.920] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e3b8) returned 1 [0069.920] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\ABV8L7MY\\BBBL4R9[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\abv8l7my\\bbbl4r9[1].jpg"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x178 [0069.921] GetFileType (hFile=0x178) returned 0x1 [0069.921] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e3b4) returned 1 [0069.921] GetFileType (hFile=0x178) returned 0x1 [0069.921] GetFileSize (in: hFile=0x178, lpFileSizeHigh=0x31e4c0 | out: lpFileSizeHigh=0x31e4c0*=0x0) returned 0x2569 [0069.921] ReadFile (in: hFile=0x178, lpBuffer=0x274c190, nNumberOfBytesToRead=0x2569, lpNumberOfBytesRead=0x31e46c, lpOverlapped=0x0 | out: lpBuffer=0x274c190*, lpNumberOfBytesRead=0x31e46c*=0x2569, lpOverlapped=0x0) returned 1 [0069.922] CloseHandle (hObject=0x178) returned 1 [0069.936] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\ABV8L7MY\\BBBL4R9[1].jpg", nBufferLength=0x105, lpBuffer=0x31deb0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\ABV8L7MY\\BBBL4R9[1].jpg", lpFilePart=0x0) returned 0x7e [0069.936] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e3a4) returned 1 [0069.936] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\ABV8L7MY\\BBBL4R9[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\abv8l7my\\bbbl4r9[1].jpg"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x178 [0069.937] GetFileType (hFile=0x178) returned 0x1 [0069.937] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e3a0) returned 1 [0069.937] GetFileType (hFile=0x178) returned 0x1 [0069.937] WriteFile (in: hFile=0x178, lpBuffer=0x27a4aa8*, nNumberOfBytesToWrite=0x2570, lpNumberOfBytesWritten=0x31e460, lpOverlapped=0x0 | out: lpBuffer=0x27a4aa8*, lpNumberOfBytesWritten=0x31e460*=0x2570, lpOverlapped=0x0) returned 1 [0069.938] CloseHandle (hObject=0x178) returned 1 [0069.938] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\ABV8L7MY\\BBBL4R9[1].jpg", nBufferLength=0x105, lpBuffer=0x31dfe4, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\ABV8L7MY\\BBBL4R9[1].jpg", lpFilePart=0x0) returned 0x7e [0069.938] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\ABV8L7MY\\BBBL4R9[1].jpg", nBufferLength=0x105, lpBuffer=0x31dfe4, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\ABV8L7MY\\BBBL4R9[1].jpg", lpFilePart=0x0) returned 0x7e [0069.938] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e444) returned 1 [0069.938] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\ABV8L7MY\\BBBL4R9[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\abv8l7my\\bbbl4r9[1].jpg"), fInfoLevelId=0x0, lpFileInformation=0x31e4c0 | out: lpFileInformation=0x31e4c0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x45b9c870, ftCreationTime.dwHighDateTime=0x1d2faf3, ftLastAccessTime.dwLowDateTime=0x45b9c870, ftLastAccessTime.dwHighDateTime=0x1d2faf3, ftLastWriteTime.dwLowDateTime=0xd21d7c0, ftLastWriteTime.dwHighDateTime=0x1d6eb7f, nFileSizeHigh=0x0, nFileSizeLow=0x2570)) returned 1 [0069.939] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e440) returned 1 [0069.939] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\ABV8L7MY\\BBBL4R9[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\abv8l7my\\bbbl4r9[1].jpg"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\ABV8L7MY\\BBBL4R9[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\abv8l7my\\bbbl4r9[1].jpg")) returned 1 [0069.939] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\ABV8L7MY\\BBBLhTZ[1].jpg", nBufferLength=0x105, lpBuffer=0x31dec4, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\ABV8L7MY\\BBBLhTZ[1].jpg", lpFilePart=0x0) returned 0x7e [0069.939] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e3b8) returned 1 [0069.939] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\ABV8L7MY\\BBBLhTZ[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\abv8l7my\\bbblhtz[1].jpg"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x178 [0069.940] GetFileType (hFile=0x178) returned 0x1 [0069.940] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e3b4) returned 1 [0069.940] GetFileType (hFile=0x178) returned 0x1 [0069.940] GetFileSize (in: hFile=0x178, lpFileSizeHigh=0x31e4c0 | out: lpFileSizeHigh=0x31e4c0*=0x0) returned 0x30d2 [0069.940] ReadFile (in: hFile=0x178, lpBuffer=0x27a757c, nNumberOfBytesToRead=0x30d2, lpNumberOfBytesRead=0x31e46c, lpOverlapped=0x0 | out: lpBuffer=0x27a757c*, lpNumberOfBytesRead=0x31e46c*=0x30d2, lpOverlapped=0x0) returned 1 [0069.942] CloseHandle (hObject=0x178) returned 1 [0069.955] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\ABV8L7MY\\BBBLhTZ[1].jpg", nBufferLength=0x105, lpBuffer=0x31deb0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\ABV8L7MY\\BBBLhTZ[1].jpg", lpFilePart=0x0) returned 0x7e [0069.956] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e3a4) returned 1 [0069.956] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\ABV8L7MY\\BBBLhTZ[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\abv8l7my\\bbblhtz[1].jpg"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x178 [0069.957] GetFileType (hFile=0x178) returned 0x1 [0069.957] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e3a0) returned 1 [0069.957] GetFileType (hFile=0x178) returned 0x1 [0069.957] WriteFile (in: hFile=0x178, lpBuffer=0x28037c4*, nNumberOfBytesToWrite=0x30e0, lpNumberOfBytesWritten=0x31e460, lpOverlapped=0x0 | out: lpBuffer=0x28037c4*, lpNumberOfBytesWritten=0x31e460*=0x30e0, lpOverlapped=0x0) returned 1 [0069.958] CloseHandle (hObject=0x178) returned 1 [0069.958] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\ABV8L7MY\\BBBLhTZ[1].jpg", nBufferLength=0x105, lpBuffer=0x31dfe4, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\ABV8L7MY\\BBBLhTZ[1].jpg", lpFilePart=0x0) returned 0x7e [0069.958] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\ABV8L7MY\\BBBLhTZ[1].jpg", nBufferLength=0x105, lpBuffer=0x31dfe4, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\ABV8L7MY\\BBBLhTZ[1].jpg", lpFilePart=0x0) returned 0x7e [0069.958] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e444) returned 1 [0069.958] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\ABV8L7MY\\BBBLhTZ[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\abv8l7my\\bbblhtz[1].jpg"), fInfoLevelId=0x0, lpFileInformation=0x31e4c0 | out: lpFileInformation=0x31e4c0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x539049f0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x539049f0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0xd243920, ftLastWriteTime.dwHighDateTime=0x1d6eb7f, nFileSizeHigh=0x0, nFileSizeLow=0x30e0)) returned 1 [0069.958] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e440) returned 1 [0069.958] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\ABV8L7MY\\BBBLhTZ[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\abv8l7my\\bbblhtz[1].jpg"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\ABV8L7MY\\BBBLhTZ[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\abv8l7my\\bbblhtz[1].jpg")) returned 1 [0069.958] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\ABV8L7MY\\BBBnhZY[1].jpg", nBufferLength=0x105, lpBuffer=0x31dec4, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\ABV8L7MY\\BBBnhZY[1].jpg", lpFilePart=0x0) returned 0x7e [0069.959] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e3b8) returned 1 [0069.959] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\ABV8L7MY\\BBBnhZY[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\abv8l7my\\bbbnhzy[1].jpg"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x178 [0069.959] GetFileType (hFile=0x178) returned 0x1 [0069.959] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e3b4) returned 1 [0069.959] GetFileType (hFile=0x178) returned 0x1 [0069.959] GetFileSize (in: hFile=0x178, lpFileSizeHigh=0x31e4c0 | out: lpFileSizeHigh=0x31e4c0*=0x0) returned 0x9b9 [0069.959] ReadFile (in: hFile=0x178, lpBuffer=0x28077d0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x31e46c, lpOverlapped=0x0 | out: lpBuffer=0x28077d0*, lpNumberOfBytesRead=0x31e46c*=0x9b9, lpOverlapped=0x0) returned 1 [0069.961] CloseHandle (hObject=0x178) returned 1 [0069.974] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\ABV8L7MY\\BBBnhZY[1].jpg", nBufferLength=0x105, lpBuffer=0x31deb0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\ABV8L7MY\\BBBnhZY[1].jpg", lpFilePart=0x0) returned 0x7e [0069.977] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e3a4) returned 1 [0069.977] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\ABV8L7MY\\BBBnhZY[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\abv8l7my\\bbbnhzy[1].jpg"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x178 [0069.978] GetFileType (hFile=0x178) returned 0x1 [0069.978] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e3a0) returned 1 [0069.978] GetFileType (hFile=0x178) returned 0x1 [0069.978] WriteFile (in: hFile=0x178, lpBuffer=0x2658784*, nNumberOfBytesToWrite=0x9c0, lpNumberOfBytesWritten=0x31e434, lpOverlapped=0x0 | out: lpBuffer=0x2658784*, lpNumberOfBytesWritten=0x31e434*=0x9c0, lpOverlapped=0x0) returned 1 [0069.979] CloseHandle (hObject=0x178) returned 1 [0069.980] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\ABV8L7MY\\BBBnhZY[1].jpg", nBufferLength=0x105, lpBuffer=0x31dfe4, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\ABV8L7MY\\BBBnhZY[1].jpg", lpFilePart=0x0) returned 0x7e [0069.980] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\ABV8L7MY\\BBBnhZY[1].jpg", nBufferLength=0x105, lpBuffer=0x31dfe4, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\ABV8L7MY\\BBBnhZY[1].jpg", lpFilePart=0x0) returned 0x7e [0069.980] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e444) returned 1 [0069.980] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\ABV8L7MY\\BBBnhZY[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\abv8l7my\\bbbnhzy[1].jpg"), fInfoLevelId=0x0, lpFileInformation=0x31e4c0 | out: lpFileInformation=0x31e4c0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x53337450, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x53337450, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0xd269a80, ftLastWriteTime.dwHighDateTime=0x1d6eb7f, nFileSizeHigh=0x0, nFileSizeLow=0x9c0)) returned 1 [0069.980] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e440) returned 1 [0069.980] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\ABV8L7MY\\BBBnhZY[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\abv8l7my\\bbbnhzy[1].jpg"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\ABV8L7MY\\BBBnhZY[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\abv8l7my\\bbbnhzy[1].jpg")) returned 1 [0069.980] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\ABV8L7MY\\BBBPhAr[1].jpg", nBufferLength=0x105, lpBuffer=0x31dec4, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\ABV8L7MY\\BBBPhAr[1].jpg", lpFilePart=0x0) returned 0x7e [0069.980] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e3b8) returned 1 [0069.980] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\ABV8L7MY\\BBBPhAr[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\abv8l7my\\bbbphar[1].jpg"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x178 [0069.980] GetFileType (hFile=0x178) returned 0x1 [0069.981] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e3b4) returned 1 [0069.981] GetFileType (hFile=0x178) returned 0x1 [0069.981] GetFileSize (in: hFile=0x178, lpFileSizeHigh=0x31e4c0 | out: lpFileSizeHigh=0x31e4c0*=0x0) returned 0x48f4 [0069.981] ReadFile (in: hFile=0x178, lpBuffer=0x2659b54, nNumberOfBytesToRead=0x48f4, lpNumberOfBytesRead=0x31e46c, lpOverlapped=0x0 | out: lpBuffer=0x2659b54*, lpNumberOfBytesRead=0x31e46c*=0x48f4, lpOverlapped=0x0) returned 1 [0069.984] CloseHandle (hObject=0x178) returned 1 [0070.147] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\ABV8L7MY\\BBBPhAr[1].jpg", nBufferLength=0x105, lpBuffer=0x31deb0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\ABV8L7MY\\BBBPhAr[1].jpg", lpFilePart=0x0) returned 0x7e [0070.151] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e3a4) returned 1 [0070.151] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\ABV8L7MY\\BBBPhAr[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\abv8l7my\\bbbphar[1].jpg"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x178 [0070.154] GetFileType (hFile=0x178) returned 0x1 [0070.154] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e3a0) returned 1 [0070.154] GetFileType (hFile=0x178) returned 0x1 [0070.154] WriteFile (in: hFile=0x178, lpBuffer=0x26bd794*, nNumberOfBytesToWrite=0x4900, lpNumberOfBytesWritten=0x31e460, lpOverlapped=0x0 | out: lpBuffer=0x26bd794*, lpNumberOfBytesWritten=0x31e460*=0x4900, lpOverlapped=0x0) returned 1 [0070.155] CloseHandle (hObject=0x178) returned 1 [0070.155] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\ABV8L7MY\\BBBPhAr[1].jpg", nBufferLength=0x105, lpBuffer=0x31dfe4, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\ABV8L7MY\\BBBPhAr[1].jpg", lpFilePart=0x0) returned 0x7e [0070.155] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\ABV8L7MY\\BBBPhAr[1].jpg", nBufferLength=0x105, lpBuffer=0x31dfe4, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\ABV8L7MY\\BBBPhAr[1].jpg", lpFilePart=0x0) returned 0x7e [0070.155] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e444) returned 1 [0070.155] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\ABV8L7MY\\BBBPhAr[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\abv8l7my\\bbbphar[1].jpg"), fInfoLevelId=0x0, lpFileInformation=0x31e4c0 | out: lpFileInformation=0x31e4c0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x671dfee0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x671dfee0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0xd432b00, ftLastWriteTime.dwHighDateTime=0x1d6eb7f, nFileSizeHigh=0x0, nFileSizeLow=0x4900)) returned 1 [0070.156] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e440) returned 1 [0070.156] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\ABV8L7MY\\BBBPhAr[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\abv8l7my\\bbbphar[1].jpg"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\ABV8L7MY\\BBBPhAr[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\abv8l7my\\bbbphar[1].jpg")) returned 1 [0070.156] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\ABV8L7MY\\BBBPiby[1].jpg", nBufferLength=0x105, lpBuffer=0x31dec4, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\ABV8L7MY\\BBBPiby[1].jpg", lpFilePart=0x0) returned 0x7e [0070.156] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e3b8) returned 1 [0070.156] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\ABV8L7MY\\BBBPiby[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\abv8l7my\\bbbpiby[1].jpg"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x178 [0070.156] GetFileType (hFile=0x178) returned 0x1 [0070.156] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e3b4) returned 1 [0070.156] GetFileType (hFile=0x178) returned 0x1 [0070.156] GetFileSize (in: hFile=0x178, lpFileSizeHigh=0x31e4c0 | out: lpFileSizeHigh=0x31e4c0*=0x0) returned 0x1c21 [0070.157] ReadFile (in: hFile=0x178, lpBuffer=0x26c25f8, nNumberOfBytesToRead=0x1c21, lpNumberOfBytesRead=0x31e46c, lpOverlapped=0x0 | out: lpBuffer=0x26c25f8*, lpNumberOfBytesRead=0x31e46c*=0x1c21, lpOverlapped=0x0) returned 1 [0070.158] CloseHandle (hObject=0x178) returned 1 [0070.172] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\ABV8L7MY\\BBBPiby[1].jpg", nBufferLength=0x105, lpBuffer=0x31deb0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\ABV8L7MY\\BBBPiby[1].jpg", lpFilePart=0x0) returned 0x7e [0070.172] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e3a4) returned 1 [0070.172] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\ABV8L7MY\\BBBPiby[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\abv8l7my\\bbbpiby[1].jpg"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x178 [0070.173] GetFileType (hFile=0x178) returned 0x1 [0070.173] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e3a0) returned 1 [0070.173] GetFileType (hFile=0x178) returned 0x1 [0070.173] WriteFile (in: hFile=0x178, lpBuffer=0x27180d0*, nNumberOfBytesToWrite=0x1c30, lpNumberOfBytesWritten=0x31e460, lpOverlapped=0x0 | out: lpBuffer=0x27180d0*, lpNumberOfBytesWritten=0x31e460*=0x1c30, lpOverlapped=0x0) returned 1 [0070.174] CloseHandle (hObject=0x178) returned 1 [0070.174] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\ABV8L7MY\\BBBPiby[1].jpg", nBufferLength=0x105, lpBuffer=0x31dfe4, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\ABV8L7MY\\BBBPiby[1].jpg", lpFilePart=0x0) returned 0x7e [0070.174] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\ABV8L7MY\\BBBPiby[1].jpg", nBufferLength=0x105, lpBuffer=0x31dfe4, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\ABV8L7MY\\BBBPiby[1].jpg", lpFilePart=0x0) returned 0x7e [0070.174] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e444) returned 1 [0070.174] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\ABV8L7MY\\BBBPiby[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\abv8l7my\\bbbpiby[1].jpg"), fInfoLevelId=0x0, lpFileInformation=0x31e4c0 | out: lpFileInformation=0x31e4c0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x52e28590, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x52e28590, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0xd458c60, ftLastWriteTime.dwHighDateTime=0x1d6eb7f, nFileSizeHigh=0x0, nFileSizeLow=0x1c30)) returned 1 [0070.174] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e440) returned 1 [0070.174] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\ABV8L7MY\\BBBPiby[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\abv8l7my\\bbbpiby[1].jpg"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\ABV8L7MY\\BBBPiby[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\abv8l7my\\bbbpiby[1].jpg")) returned 1 [0070.175] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\ABV8L7MY\\BBBPmXJ[1].jpg", nBufferLength=0x105, lpBuffer=0x31dec4, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\ABV8L7MY\\BBBPmXJ[1].jpg", lpFilePart=0x0) returned 0x7e [0070.175] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e3b8) returned 1 [0070.175] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\ABV8L7MY\\BBBPmXJ[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\abv8l7my\\bbbpmxj[1].jpg"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x178 [0070.175] GetFileType (hFile=0x178) returned 0x1 [0070.175] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e3b4) returned 1 [0070.175] GetFileType (hFile=0x178) returned 0x1 [0070.175] GetFileSize (in: hFile=0x178, lpFileSizeHigh=0x31e4c0 | out: lpFileSizeHigh=0x31e4c0*=0x0) returned 0x16bf [0070.175] ReadFile (in: hFile=0x178, lpBuffer=0x271a264, nNumberOfBytesToRead=0x16bf, lpNumberOfBytesRead=0x31e46c, lpOverlapped=0x0 | out: lpBuffer=0x271a264*, lpNumberOfBytesRead=0x31e46c*=0x16bf, lpOverlapped=0x0) returned 1 [0070.299] CloseHandle (hObject=0x178) returned 1 [0070.375] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\ABV8L7MY\\BBBPmXJ[1].jpg", nBufferLength=0x105, lpBuffer=0x31deb0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\ABV8L7MY\\BBBPmXJ[1].jpg", lpFilePart=0x0) returned 0x7e [0070.375] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e3a4) returned 1 [0070.375] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\ABV8L7MY\\BBBPmXJ[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\abv8l7my\\bbbpmxj[1].jpg"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x178 [0070.376] GetFileType (hFile=0x178) returned 0x1 [0070.376] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e3a0) returned 1 [0070.376] GetFileType (hFile=0x178) returned 0x1 [0070.376] WriteFile (in: hFile=0x178, lpBuffer=0x276e20c*, nNumberOfBytesToWrite=0x16c0, lpNumberOfBytesWritten=0x31e460, lpOverlapped=0x0 | out: lpBuffer=0x276e20c*, lpNumberOfBytesWritten=0x31e460*=0x16c0, lpOverlapped=0x0) returned 1 [0070.377] CloseHandle (hObject=0x178) returned 1 [0070.377] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\ABV8L7MY\\BBBPmXJ[1].jpg", nBufferLength=0x105, lpBuffer=0x31dfe4, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\ABV8L7MY\\BBBPmXJ[1].jpg", lpFilePart=0x0) returned 0x7e [0070.377] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\ABV8L7MY\\BBBPmXJ[1].jpg", nBufferLength=0x105, lpBuffer=0x31dfe4, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\ABV8L7MY\\BBBPmXJ[1].jpg", lpFilePart=0x0) returned 0x7e [0070.377] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e444) returned 1 [0070.377] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\ABV8L7MY\\BBBPmXJ[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\abv8l7my\\bbbpmxj[1].jpg"), fInfoLevelId=0x0, lpFileInformation=0x31e4c0 | out: lpFileInformation=0x31e4c0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x53063a30, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x53063a30, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0xd647e40, ftLastWriteTime.dwHighDateTime=0x1d6eb7f, nFileSizeHigh=0x0, nFileSizeLow=0x16c0)) returned 1 [0070.377] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e440) returned 1 [0070.377] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\ABV8L7MY\\BBBPmXJ[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\abv8l7my\\bbbpmxj[1].jpg"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\ABV8L7MY\\BBBPmXJ[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\abv8l7my\\bbbpmxj[1].jpg")) returned 1 [0070.378] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\ABV8L7MY\\BBBPS37[1].png", nBufferLength=0x105, lpBuffer=0x31dec4, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\ABV8L7MY\\BBBPS37[1].png", lpFilePart=0x0) returned 0x7e [0070.378] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e3b8) returned 1 [0070.378] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\ABV8L7MY\\BBBPS37[1].png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\abv8l7my\\bbbps37[1].png"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x178 [0070.378] GetFileType (hFile=0x178) returned 0x1 [0070.378] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e3b4) returned 1 [0070.378] GetFileType (hFile=0x178) returned 0x1 [0070.378] GetFileSize (in: hFile=0x178, lpFileSizeHigh=0x31e4c0 | out: lpFileSizeHigh=0x31e4c0*=0x0) returned 0x21feb [0070.379] ReadFile (in: hFile=0x178, lpBuffer=0x388a200, nNumberOfBytesToRead=0x21feb, lpNumberOfBytesRead=0x31e46c, lpOverlapped=0x0 | out: lpBuffer=0x388a200*, lpNumberOfBytesRead=0x31e46c*=0x21feb, lpOverlapped=0x0) returned 1 [0070.382] CloseHandle (hObject=0x178) returned 1 [0070.407] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\ABV8L7MY\\BBBPS37[1].png", nBufferLength=0x105, lpBuffer=0x31deb0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\ABV8L7MY\\BBBPS37[1].png", lpFilePart=0x0) returned 0x7e [0070.407] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e3a4) returned 1 [0070.407] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\ABV8L7MY\\BBBPS37[1].png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\abv8l7my\\bbbps37[1].png"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x178 [0070.409] GetFileType (hFile=0x178) returned 0x1 [0070.409] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e3a0) returned 1 [0070.409] GetFileType (hFile=0x178) returned 0x1 [0070.409] WriteFile (in: hFile=0x178, lpBuffer=0x38ac208*, nNumberOfBytesToWrite=0x21ff0, lpNumberOfBytesWritten=0x31e460, lpOverlapped=0x0 | out: lpBuffer=0x38ac208*, lpNumberOfBytesWritten=0x31e460*=0x21ff0, lpOverlapped=0x0) returned 1 [0070.412] CloseHandle (hObject=0x178) returned 1 [0070.412] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\ABV8L7MY\\BBBPS37[1].png", nBufferLength=0x105, lpBuffer=0x31dfe4, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\ABV8L7MY\\BBBPS37[1].png", lpFilePart=0x0) returned 0x7e [0070.412] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\ABV8L7MY\\BBBPS37[1].png", nBufferLength=0x105, lpBuffer=0x31dfe4, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\ABV8L7MY\\BBBPS37[1].png", lpFilePart=0x0) returned 0x7e [0070.412] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e444) returned 1 [0070.412] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\ABV8L7MY\\BBBPS37[1].png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\abv8l7my\\bbbps37[1].png"), fInfoLevelId=0x0, lpFileInformation=0x31e4c0 | out: lpFileInformation=0x31e4c0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x530d5e50, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x530d5e50, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0xd694100, ftLastWriteTime.dwHighDateTime=0x1d6eb7f, nFileSizeHigh=0x0, nFileSizeLow=0x21ff0)) returned 1 [0070.412] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e440) returned 1 [0070.412] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\ABV8L7MY\\BBBPS37[1].png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\abv8l7my\\bbbps37[1].png"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\ABV8L7MY\\BBBPS37[1].png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\abv8l7my\\bbbps37[1].png")) returned 1 [0070.413] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\ABV8L7MY\\BBBQiBF[1].jpg", nBufferLength=0x105, lpBuffer=0x31dec4, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\ABV8L7MY\\BBBQiBF[1].jpg", lpFilePart=0x0) returned 0x7e [0070.413] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e3b8) returned 1 [0070.413] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\ABV8L7MY\\BBBQiBF[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\abv8l7my\\bbbqibf[1].jpg"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x178 [0070.413] GetFileType (hFile=0x178) returned 0x1 [0070.413] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e3b4) returned 1 [0070.413] GetFileType (hFile=0x178) returned 0x1 [0070.413] GetFileSize (in: hFile=0x178, lpFileSizeHigh=0x31e4c0 | out: lpFileSizeHigh=0x31e4c0*=0x0) returned 0x12f9 [0070.413] ReadFile (in: hFile=0x178, lpBuffer=0x2635a5c, nNumberOfBytesToRead=0x12f9, lpNumberOfBytesRead=0x31e46c, lpOverlapped=0x0 | out: lpBuffer=0x2635a5c*, lpNumberOfBytesRead=0x31e46c*=0x12f9, lpOverlapped=0x0) returned 1 [0070.415] CloseHandle (hObject=0x178) returned 1 [0070.458] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\ABV8L7MY\\BBBQiBF[1].jpg", nBufferLength=0x105, lpBuffer=0x31deb0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\ABV8L7MY\\BBBQiBF[1].jpg", lpFilePart=0x0) returned 0x7e [0070.458] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e3a4) returned 1 [0070.458] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\ABV8L7MY\\BBBQiBF[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\abv8l7my\\bbbqibf[1].jpg"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x178 [0070.459] GetFileType (hFile=0x178) returned 0x1 [0070.459] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e3a0) returned 1 [0070.459] GetFileType (hFile=0x178) returned 0x1 [0070.459] WriteFile (in: hFile=0x178, lpBuffer=0x26888a0*, nNumberOfBytesToWrite=0x1300, lpNumberOfBytesWritten=0x31e460, lpOverlapped=0x0 | out: lpBuffer=0x26888a0*, lpNumberOfBytesWritten=0x31e460*=0x1300, lpOverlapped=0x0) returned 1 [0070.460] CloseHandle (hObject=0x178) returned 1 [0070.460] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\ABV8L7MY\\BBBQiBF[1].jpg", nBufferLength=0x105, lpBuffer=0x31dfe4, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\ABV8L7MY\\BBBQiBF[1].jpg", lpFilePart=0x0) returned 0x7e [0070.460] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\ABV8L7MY\\BBBQiBF[1].jpg", nBufferLength=0x105, lpBuffer=0x31dfe4, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\ABV8L7MY\\BBBQiBF[1].jpg", lpFilePart=0x0) returned 0x7e [0070.460] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e444) returned 1 [0070.461] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\ABV8L7MY\\BBBQiBF[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\abv8l7my\\bbbqibf[1].jpg"), fInfoLevelId=0x0, lpFileInformation=0x31e4c0 | out: lpFileInformation=0x31e4c0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x52e74850, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x52e74850, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0xd706520, ftLastWriteTime.dwHighDateTime=0x1d6eb7f, nFileSizeHigh=0x0, nFileSizeLow=0x1300)) returned 1 [0070.461] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e440) returned 1 [0070.461] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\ABV8L7MY\\BBBQiBF[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\abv8l7my\\bbbqibf[1].jpg"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\ABV8L7MY\\BBBQiBF[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\abv8l7my\\bbbqibf[1].jpg")) returned 1 [0070.461] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\ABV8L7MY\\BBBty8h[1].jpg", nBufferLength=0x105, lpBuffer=0x31dec4, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\ABV8L7MY\\BBBty8h[1].jpg", lpFilePart=0x0) returned 0x7e [0070.461] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e3b8) returned 1 [0070.461] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\ABV8L7MY\\BBBty8h[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\abv8l7my\\bbbty8h[1].jpg"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x178 [0070.461] GetFileType (hFile=0x178) returned 0x1 [0070.461] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e3b4) returned 1 [0070.461] GetFileType (hFile=0x178) returned 0x1 [0070.461] GetFileSize (in: hFile=0x178, lpFileSizeHigh=0x31e4c0 | out: lpFileSizeHigh=0x31e4c0*=0x0) returned 0x9a9 [0070.462] ReadFile (in: hFile=0x178, lpBuffer=0x268aabc, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x31e46c, lpOverlapped=0x0 | out: lpBuffer=0x268aabc*, lpNumberOfBytesRead=0x31e46c*=0x9a9, lpOverlapped=0x0) returned 1 [0070.463] CloseHandle (hObject=0x178) returned 1 [0070.477] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\ABV8L7MY\\BBBty8h[1].jpg", nBufferLength=0x105, lpBuffer=0x31deb0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\ABV8L7MY\\BBBty8h[1].jpg", lpFilePart=0x0) returned 0x7e [0070.477] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e3a4) returned 1 [0070.477] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\ABV8L7MY\\BBBty8h[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\abv8l7my\\bbbty8h[1].jpg"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x178 [0070.478] GetFileType (hFile=0x178) returned 0x1 [0070.478] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e3a0) returned 1 [0070.478] GetFileType (hFile=0x178) returned 0x1 [0070.478] WriteFile (in: hFile=0x178, lpBuffer=0x26dbab8*, nNumberOfBytesToWrite=0x9b0, lpNumberOfBytesWritten=0x31e434, lpOverlapped=0x0 | out: lpBuffer=0x26dbab8*, lpNumberOfBytesWritten=0x31e434*=0x9b0, lpOverlapped=0x0) returned 1 [0070.479] CloseHandle (hObject=0x178) returned 1 [0070.479] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\ABV8L7MY\\BBBty8h[1].jpg", nBufferLength=0x105, lpBuffer=0x31dfe4, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\ABV8L7MY\\BBBty8h[1].jpg", lpFilePart=0x0) returned 0x7e [0070.479] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\ABV8L7MY\\BBBty8h[1].jpg", nBufferLength=0x105, lpBuffer=0x31dfe4, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\ABV8L7MY\\BBBty8h[1].jpg", lpFilePart=0x0) returned 0x7e [0070.479] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e444) returned 1 [0070.479] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\ABV8L7MY\\BBBty8h[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\abv8l7my\\bbbty8h[1].jpg"), fInfoLevelId=0x0, lpFileInformation=0x31e4c0 | out: lpFileInformation=0x31e4c0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x533cf9d0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x533cf9d0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0xd72c680, ftLastWriteTime.dwHighDateTime=0x1d6eb7f, nFileSizeHigh=0x0, nFileSizeLow=0x9b0)) returned 1 [0070.479] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e440) returned 1 [0070.479] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\ABV8L7MY\\BBBty8h[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\abv8l7my\\bbbty8h[1].jpg"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\ABV8L7MY\\BBBty8h[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\abv8l7my\\bbbty8h[1].jpg")) returned 1 [0070.480] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\ABV8L7MY\\BBBVACL[1].jpg", nBufferLength=0x105, lpBuffer=0x31dec4, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\ABV8L7MY\\BBBVACL[1].jpg", lpFilePart=0x0) returned 0x7e [0070.480] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e3b8) returned 1 [0070.480] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\ABV8L7MY\\BBBVACL[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\abv8l7my\\bbbvacl[1].jpg"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x178 [0070.481] GetFileType (hFile=0x178) returned 0x1 [0070.481] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e3b4) returned 1 [0070.481] GetFileType (hFile=0x178) returned 0x1 [0070.481] GetFileSize (in: hFile=0x178, lpFileSizeHigh=0x31e4c0 | out: lpFileSizeHigh=0x31e4c0*=0x0) returned 0x1b08 [0070.481] ReadFile (in: hFile=0x178, lpBuffer=0x26dce88, nNumberOfBytesToRead=0x1b08, lpNumberOfBytesRead=0x31e46c, lpOverlapped=0x0 | out: lpBuffer=0x26dce88*, lpNumberOfBytesRead=0x31e46c*=0x1b08, lpOverlapped=0x0) returned 1 [0070.483] CloseHandle (hObject=0x178) returned 1 [0070.496] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\ABV8L7MY\\BBBVACL[1].jpg", nBufferLength=0x105, lpBuffer=0x31deb0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\ABV8L7MY\\BBBVACL[1].jpg", lpFilePart=0x0) returned 0x7e [0070.496] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e3a4) returned 1 [0070.496] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\ABV8L7MY\\BBBVACL[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\abv8l7my\\bbbvacl[1].jpg"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x178 [0070.497] GetFileType (hFile=0x178) returned 0x1 [0070.497] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e3a0) returned 1 [0070.497] GetFileType (hFile=0x178) returned 0x1 [0070.497] WriteFile (in: hFile=0x178, lpBuffer=0x27323bc*, nNumberOfBytesToWrite=0x1b10, lpNumberOfBytesWritten=0x31e460, lpOverlapped=0x0 | out: lpBuffer=0x27323bc*, lpNumberOfBytesWritten=0x31e460*=0x1b10, lpOverlapped=0x0) returned 1 [0070.498] CloseHandle (hObject=0x178) returned 1 [0070.498] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\ABV8L7MY\\BBBVACL[1].jpg", nBufferLength=0x105, lpBuffer=0x31dfe4, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\ABV8L7MY\\BBBVACL[1].jpg", lpFilePart=0x0) returned 0x7e [0070.498] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\ABV8L7MY\\BBBVACL[1].jpg", nBufferLength=0x105, lpBuffer=0x31dfe4, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\ABV8L7MY\\BBBVACL[1].jpg", lpFilePart=0x0) returned 0x7e [0070.498] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e444) returned 1 [0070.498] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\ABV8L7MY\\BBBVACL[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\abv8l7my\\bbbvacl[1].jpg"), fInfoLevelId=0x0, lpFileInformation=0x31e4c0 | out: lpFileInformation=0x31e4c0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x5303d8d0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x5303d8d0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0xd778940, ftLastWriteTime.dwHighDateTime=0x1d6eb7f, nFileSizeHigh=0x0, nFileSizeLow=0x1b10)) returned 1 [0070.498] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e440) returned 1 [0070.498] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\ABV8L7MY\\BBBVACL[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\abv8l7my\\bbbvacl[1].jpg"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\ABV8L7MY\\BBBVACL[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\abv8l7my\\bbbvacl[1].jpg")) returned 1 [0070.499] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\ABV8L7MY\\BBBVGyR[1].jpg", nBufferLength=0x105, lpBuffer=0x31dec4, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\ABV8L7MY\\BBBVGyR[1].jpg", lpFilePart=0x0) returned 0x7e [0070.499] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e3b8) returned 1 [0070.499] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\ABV8L7MY\\BBBVGyR[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\abv8l7my\\bbbvgyr[1].jpg"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x178 [0070.499] GetFileType (hFile=0x178) returned 0x1 [0070.499] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e3b4) returned 1 [0070.499] GetFileType (hFile=0x178) returned 0x1 [0070.499] GetFileSize (in: hFile=0x178, lpFileSizeHigh=0x31e4c0 | out: lpFileSizeHigh=0x31e4c0*=0x0) returned 0x1c41 [0070.499] ReadFile (in: hFile=0x178, lpBuffer=0x2734430, nNumberOfBytesToRead=0x1c41, lpNumberOfBytesRead=0x31e46c, lpOverlapped=0x0 | out: lpBuffer=0x2734430*, lpNumberOfBytesRead=0x31e46c*=0x1c41, lpOverlapped=0x0) returned 1 [0070.502] CloseHandle (hObject=0x178) returned 1 [0070.515] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\ABV8L7MY\\BBBVGyR[1].jpg", nBufferLength=0x105, lpBuffer=0x31deb0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\ABV8L7MY\\BBBVGyR[1].jpg", lpFilePart=0x0) returned 0x7e [0070.515] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e3a4) returned 1 [0070.515] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\ABV8L7MY\\BBBVGyR[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\abv8l7my\\bbbvgyr[1].jpg"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x178 [0070.516] GetFileType (hFile=0x178) returned 0x1 [0070.516] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e3a0) returned 1 [0070.516] GetFileType (hFile=0x178) returned 0x1 [0070.516] WriteFile (in: hFile=0x178, lpBuffer=0x2789fa8*, nNumberOfBytesToWrite=0x1c50, lpNumberOfBytesWritten=0x31e460, lpOverlapped=0x0 | out: lpBuffer=0x2789fa8*, lpNumberOfBytesWritten=0x31e460*=0x1c50, lpOverlapped=0x0) returned 1 [0070.517] CloseHandle (hObject=0x178) returned 1 [0070.517] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\ABV8L7MY\\BBBVGyR[1].jpg", nBufferLength=0x105, lpBuffer=0x31dfe4, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\ABV8L7MY\\BBBVGyR[1].jpg", lpFilePart=0x0) returned 0x7e [0070.518] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\ABV8L7MY\\BBBVGyR[1].jpg", nBufferLength=0x105, lpBuffer=0x31dfe4, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\ABV8L7MY\\BBBVGyR[1].jpg", lpFilePart=0x0) returned 0x7e [0070.518] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e444) returned 1 [0070.518] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\ABV8L7MY\\BBBVGyR[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\abv8l7my\\bbbvgyr[1].jpg"), fInfoLevelId=0x0, lpFileInformation=0x31e4c0 | out: lpFileInformation=0x31e4c0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x5e29b2c0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x5e29b2c0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0xd79eaa0, ftLastWriteTime.dwHighDateTime=0x1d6eb7f, nFileSizeHigh=0x0, nFileSizeLow=0x1c50)) returned 1 [0070.518] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e440) returned 1 [0070.518] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\ABV8L7MY\\BBBVGyR[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\abv8l7my\\bbbvgyr[1].jpg"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\ABV8L7MY\\BBBVGyR[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\abv8l7my\\bbbvgyr[1].jpg")) returned 1 [0070.518] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\ABV8L7MY\\BBBVMtX[1].jpg", nBufferLength=0x105, lpBuffer=0x31dec4, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\ABV8L7MY\\BBBVMtX[1].jpg", lpFilePart=0x0) returned 0x7e [0070.518] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e3b8) returned 1 [0070.518] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\ABV8L7MY\\BBBVMtX[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\abv8l7my\\bbbvmtx[1].jpg"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x178 [0070.519] GetFileType (hFile=0x178) returned 0x1 [0070.519] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e3b4) returned 1 [0070.519] GetFileType (hFile=0x178) returned 0x1 [0070.519] GetFileSize (in: hFile=0x178, lpFileSizeHigh=0x31e4c0 | out: lpFileSizeHigh=0x31e4c0*=0x0) returned 0x950 [0070.519] ReadFile (in: hFile=0x178, lpBuffer=0x278cab8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x31e46c, lpOverlapped=0x0 | out: lpBuffer=0x278cab8*, lpNumberOfBytesRead=0x31e46c*=0x950, lpOverlapped=0x0) returned 1 [0070.521] CloseHandle (hObject=0x178) returned 1 [0070.534] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\ABV8L7MY\\BBBVMtX[1].jpg", nBufferLength=0x105, lpBuffer=0x31deb0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\ABV8L7MY\\BBBVMtX[1].jpg", lpFilePart=0x0) returned 0x7e [0070.534] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e3a4) returned 1 [0070.535] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\ABV8L7MY\\BBBVMtX[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\abv8l7my\\bbbvmtx[1].jpg"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x178 [0070.535] GetFileType (hFile=0x178) returned 0x1 [0070.536] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e3a0) returned 1 [0070.536] GetFileType (hFile=0x178) returned 0x1 [0070.536] WriteFile (in: hFile=0x178, lpBuffer=0x27dd92c*, nNumberOfBytesToWrite=0x960, lpNumberOfBytesWritten=0x31e434, lpOverlapped=0x0 | out: lpBuffer=0x27dd92c*, lpNumberOfBytesWritten=0x31e434*=0x960, lpOverlapped=0x0) returned 1 [0070.536] CloseHandle (hObject=0x178) returned 1 [0070.537] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\ABV8L7MY\\BBBVMtX[1].jpg", nBufferLength=0x105, lpBuffer=0x31dfe4, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\ABV8L7MY\\BBBVMtX[1].jpg", lpFilePart=0x0) returned 0x7e [0070.537] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\ABV8L7MY\\BBBVMtX[1].jpg", nBufferLength=0x105, lpBuffer=0x31dfe4, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\ABV8L7MY\\BBBVMtX[1].jpg", lpFilePart=0x0) returned 0x7e [0070.537] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e444) returned 1 [0070.537] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\ABV8L7MY\\BBBVMtX[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\abv8l7my\\bbbvmtx[1].jpg"), fInfoLevelId=0x0, lpFileInformation=0x31e4c0 | out: lpFileInformation=0x31e4c0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x515e8570, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x515e8570, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0xd7c4c00, ftLastWriteTime.dwHighDateTime=0x1d6eb7f, nFileSizeHigh=0x0, nFileSizeLow=0x960)) returned 1 [0070.537] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e440) returned 1 [0070.537] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\ABV8L7MY\\BBBVMtX[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\abv8l7my\\bbbvmtx[1].jpg"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\ABV8L7MY\\BBBVMtX[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\abv8l7my\\bbbvmtx[1].jpg")) returned 1 [0070.537] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\ABV8L7MY\\BBBVYsu[1].jpg", nBufferLength=0x105, lpBuffer=0x31dec4, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\ABV8L7MY\\BBBVYsu[1].jpg", lpFilePart=0x0) returned 0x7e [0070.537] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e3b8) returned 1 [0070.537] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\ABV8L7MY\\BBBVYsu[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\abv8l7my\\bbbvysu[1].jpg"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x178 [0070.538] GetFileType (hFile=0x178) returned 0x1 [0070.538] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e3b4) returned 1 [0070.538] GetFileType (hFile=0x178) returned 0x1 [0070.538] GetFileSize (in: hFile=0x178, lpFileSizeHigh=0x31e4c0 | out: lpFileSizeHigh=0x31e4c0*=0x0) returned 0x1bba [0070.539] ReadFile (in: hFile=0x178, lpBuffer=0x27decfc, nNumberOfBytesToRead=0x1bba, lpNumberOfBytesRead=0x31e46c, lpOverlapped=0x0 | out: lpBuffer=0x27decfc*, lpNumberOfBytesRead=0x31e46c*=0x1bba, lpOverlapped=0x0) returned 1 [0070.540] CloseHandle (hObject=0x178) returned 1 [0070.557] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\ABV8L7MY\\BBBVYsu[1].jpg", nBufferLength=0x105, lpBuffer=0x31deb0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\ABV8L7MY\\BBBVYsu[1].jpg", lpFilePart=0x0) returned 0x7e [0070.557] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e3a4) returned 1 [0070.557] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\ABV8L7MY\\BBBVYsu[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\abv8l7my\\bbbvysu[1].jpg"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x178 [0070.558] GetFileType (hFile=0x178) returned 0x1 [0070.558] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e3a0) returned 1 [0070.558] GetFileType (hFile=0x178) returned 0x1 [0070.558] WriteFile (in: hFile=0x178, lpBuffer=0x263afe8*, nNumberOfBytesToWrite=0x1bc0, lpNumberOfBytesWritten=0x31e460, lpOverlapped=0x0 | out: lpBuffer=0x263afe8*, lpNumberOfBytesWritten=0x31e460*=0x1bc0, lpOverlapped=0x0) returned 1 [0070.559] CloseHandle (hObject=0x178) returned 1 [0070.559] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\ABV8L7MY\\BBBVYsu[1].jpg", nBufferLength=0x105, lpBuffer=0x31dfe4, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\ABV8L7MY\\BBBVYsu[1].jpg", lpFilePart=0x0) returned 0x7e [0070.559] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\ABV8L7MY\\BBBVYsu[1].jpg", nBufferLength=0x105, lpBuffer=0x31dfe4, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\ABV8L7MY\\BBBVYsu[1].jpg", lpFilePart=0x0) returned 0x7e [0070.559] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e444) returned 1 [0070.560] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\ABV8L7MY\\BBBVYsu[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\abv8l7my\\bbbvysu[1].jpg"), fInfoLevelId=0x0, lpFileInformation=0x31e4c0 | out: lpFileInformation=0x31e4c0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x5530da90, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x5530da90, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0xd810ec0, ftLastWriteTime.dwHighDateTime=0x1d6eb7f, nFileSizeHigh=0x0, nFileSizeLow=0x1bc0)) returned 1 [0070.560] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e440) returned 1 [0070.560] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\ABV8L7MY\\BBBVYsu[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\abv8l7my\\bbbvysu[1].jpg"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\ABV8L7MY\\BBBVYsu[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\abv8l7my\\bbbvysu[1].jpg")) returned 1 [0070.560] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\ABV8L7MY\\BBBWLtW[1].jpg", nBufferLength=0x105, lpBuffer=0x31dec4, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\ABV8L7MY\\BBBWLtW[1].jpg", lpFilePart=0x0) returned 0x7e [0070.560] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e3b8) returned 1 [0070.560] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\ABV8L7MY\\BBBWLtW[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\abv8l7my\\bbbwltw[1].jpg"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x178 [0070.560] GetFileType (hFile=0x178) returned 0x1 [0070.560] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e3b4) returned 1 [0070.560] GetFileType (hFile=0x178) returned 0x1 [0070.560] GetFileSize (in: hFile=0x178, lpFileSizeHigh=0x31e4c0 | out: lpFileSizeHigh=0x31e4c0*=0x0) returned 0x76a [0070.561] ReadFile (in: hFile=0x178, lpBuffer=0x263d884, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x31e46c, lpOverlapped=0x0 | out: lpBuffer=0x263d884*, lpNumberOfBytesRead=0x31e46c*=0x76a, lpOverlapped=0x0) returned 1 [0070.562] CloseHandle (hObject=0x178) returned 1 [0070.602] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\ABV8L7MY\\BBBWLtW[1].jpg", nBufferLength=0x105, lpBuffer=0x31deb0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\ABV8L7MY\\BBBWLtW[1].jpg", lpFilePart=0x0) returned 0x7e [0070.602] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e3a4) returned 1 [0070.602] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\ABV8L7MY\\BBBWLtW[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\abv8l7my\\bbbwltw[1].jpg"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x178 [0070.604] GetFileType (hFile=0x178) returned 0x1 [0070.604] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e3a0) returned 1 [0070.604] GetFileType (hFile=0x178) returned 0x1 [0070.604] WriteFile (in: hFile=0x178, lpBuffer=0x268de9c*, nNumberOfBytesToWrite=0x770, lpNumberOfBytesWritten=0x31e434, lpOverlapped=0x0 | out: lpBuffer=0x268de9c*, lpNumberOfBytesWritten=0x31e434*=0x770, lpOverlapped=0x0) returned 1 [0070.605] CloseHandle (hObject=0x178) returned 1 [0070.605] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\ABV8L7MY\\BBBWLtW[1].jpg", nBufferLength=0x105, lpBuffer=0x31dfe4, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\ABV8L7MY\\BBBWLtW[1].jpg", lpFilePart=0x0) returned 0x7e [0070.605] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\ABV8L7MY\\BBBWLtW[1].jpg", nBufferLength=0x105, lpBuffer=0x31dfe4, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\ABV8L7MY\\BBBWLtW[1].jpg", lpFilePart=0x0) returned 0x7e [0070.605] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e444) returned 1 [0070.605] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\ABV8L7MY\\BBBWLtW[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\abv8l7my\\bbbwltw[1].jpg"), fInfoLevelId=0x0, lpFileInformation=0x31e4c0 | out: lpFileInformation=0x31e4c0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x5154fff0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x5154fff0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0xd85d180, ftLastWriteTime.dwHighDateTime=0x1d6eb7f, nFileSizeHigh=0x0, nFileSizeLow=0x770)) returned 1 [0070.605] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e440) returned 1 [0070.605] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\ABV8L7MY\\BBBWLtW[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\abv8l7my\\bbbwltw[1].jpg"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\ABV8L7MY\\BBBWLtW[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\abv8l7my\\bbbwltw[1].jpg")) returned 1 [0070.605] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\ABV8L7MY\\BBBX3xB[1].jpg", nBufferLength=0x105, lpBuffer=0x31dec4, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\ABV8L7MY\\BBBX3xB[1].jpg", lpFilePart=0x0) returned 0x7e [0070.606] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e3b8) returned 1 [0070.606] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\ABV8L7MY\\BBBX3xB[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\abv8l7my\\bbbx3xb[1].jpg"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x178 [0070.607] GetFileType (hFile=0x178) returned 0x1 [0070.607] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e3b4) returned 1 [0070.607] GetFileType (hFile=0x178) returned 0x1 [0070.607] GetFileSize (in: hFile=0x178, lpFileSizeHigh=0x31e4c0 | out: lpFileSizeHigh=0x31e4c0*=0x0) returned 0x95f [0070.607] ReadFile (in: hFile=0x178, lpBuffer=0x268fbd8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x31e46c, lpOverlapped=0x0 | out: lpBuffer=0x268fbd8*, lpNumberOfBytesRead=0x31e46c*=0x95f, lpOverlapped=0x0) returned 1 [0070.608] CloseHandle (hObject=0x178) returned 1 [0070.622] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\ABV8L7MY\\BBBX3xB[1].jpg", nBufferLength=0x105, lpBuffer=0x31deb0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\ABV8L7MY\\BBBX3xB[1].jpg", lpFilePart=0x0) returned 0x7e [0070.622] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e3a4) returned 1 [0070.622] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\ABV8L7MY\\BBBX3xB[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\abv8l7my\\bbbx3xb[1].jpg"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x178 [0070.623] GetFileType (hFile=0x178) returned 0x1 [0070.623] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e3a0) returned 1 [0070.623] GetFileType (hFile=0x178) returned 0x1 [0070.623] WriteFile (in: hFile=0x178, lpBuffer=0x26e0a40*, nNumberOfBytesToWrite=0x960, lpNumberOfBytesWritten=0x31e434, lpOverlapped=0x0 | out: lpBuffer=0x26e0a40*, lpNumberOfBytesWritten=0x31e434*=0x960, lpOverlapped=0x0) returned 1 [0070.624] CloseHandle (hObject=0x178) returned 1 [0070.624] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\ABV8L7MY\\BBBX3xB[1].jpg", nBufferLength=0x105, lpBuffer=0x31dfe4, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\ABV8L7MY\\BBBX3xB[1].jpg", lpFilePart=0x0) returned 0x7e [0070.624] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\ABV8L7MY\\BBBX3xB[1].jpg", nBufferLength=0x105, lpBuffer=0x31dfe4, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\ABV8L7MY\\BBBX3xB[1].jpg", lpFilePart=0x0) returned 0x7e [0070.624] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e444) returned 1 [0070.624] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\ABV8L7MY\\BBBX3xB[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\abv8l7my\\bbbx3xb[1].jpg"), fInfoLevelId=0x0, lpFileInformation=0x31e4c0 | out: lpFileInformation=0x31e4c0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x52f32f30, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x52f32f30, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0xd8a9440, ftLastWriteTime.dwHighDateTime=0x1d6eb7f, nFileSizeHigh=0x0, nFileSizeLow=0x960)) returned 1 [0070.624] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e440) returned 1 [0070.624] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\ABV8L7MY\\BBBX3xB[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\abv8l7my\\bbbx3xb[1].jpg"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\ABV8L7MY\\BBBX3xB[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\abv8l7my\\bbbx3xb[1].jpg")) returned 1 [0070.624] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\ABV8L7MY\\BBBY98e[1].jpg", nBufferLength=0x105, lpBuffer=0x31dec4, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\ABV8L7MY\\BBBY98e[1].jpg", lpFilePart=0x0) returned 0x7e [0070.625] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e3b8) returned 1 [0070.625] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\ABV8L7MY\\BBBY98e[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\abv8l7my\\bbby98e[1].jpg"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x178 [0070.626] GetFileType (hFile=0x178) returned 0x1 [0070.626] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e3b4) returned 1 [0070.626] GetFileType (hFile=0x178) returned 0x1 [0070.626] GetFileSize (in: hFile=0x178, lpFileSizeHigh=0x31e4c0 | out: lpFileSizeHigh=0x31e4c0*=0x0) returned 0x241e [0070.626] ReadFile (in: hFile=0x178, lpBuffer=0x26e1e10, nNumberOfBytesToRead=0x241e, lpNumberOfBytesRead=0x31e46c, lpOverlapped=0x0 | out: lpBuffer=0x26e1e10*, lpNumberOfBytesRead=0x31e46c*=0x241e, lpOverlapped=0x0) returned 1 [0070.628] CloseHandle (hObject=0x178) returned 1 [0070.641] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\ABV8L7MY\\BBBY98e[1].jpg", nBufferLength=0x105, lpBuffer=0x31deb0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\ABV8L7MY\\BBBY98e[1].jpg", lpFilePart=0x0) returned 0x7e [0070.641] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e3a4) returned 1 [0070.641] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\ABV8L7MY\\BBBY98e[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\abv8l7my\\bbby98e[1].jpg"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x178 [0070.642] GetFileType (hFile=0x178) returned 0x1 [0070.642] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e3a0) returned 1 [0070.642] GetFileType (hFile=0x178) returned 0x1 [0070.642] WriteFile (in: hFile=0x178, lpBuffer=0x273a098*, nNumberOfBytesToWrite=0x2420, lpNumberOfBytesWritten=0x31e460, lpOverlapped=0x0 | out: lpBuffer=0x273a098*, lpNumberOfBytesWritten=0x31e460*=0x2420, lpOverlapped=0x0) returned 1 [0070.643] CloseHandle (hObject=0x178) returned 1 [0070.644] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\ABV8L7MY\\BBBY98e[1].jpg", nBufferLength=0x105, lpBuffer=0x31dfe4, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\ABV8L7MY\\BBBY98e[1].jpg", lpFilePart=0x0) returned 0x7e [0070.644] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\ABV8L7MY\\BBBY98e[1].jpg", nBufferLength=0x105, lpBuffer=0x31dfe4, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\ABV8L7MY\\BBBY98e[1].jpg", lpFilePart=0x0) returned 0x7e [0070.644] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e444) returned 1 [0070.644] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\ABV8L7MY\\BBBY98e[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\abv8l7my\\bbby98e[1].jpg"), fInfoLevelId=0x0, lpFileInformation=0x31e4c0 | out: lpFileInformation=0x31e4c0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x533112f0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x533112f0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0xd8cf5a0, ftLastWriteTime.dwHighDateTime=0x1d6eb7f, nFileSizeHigh=0x0, nFileSizeLow=0x2420)) returned 1 [0070.644] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e440) returned 1 [0070.644] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\ABV8L7MY\\BBBY98e[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\abv8l7my\\bbby98e[1].jpg"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\ABV8L7MY\\BBBY98e[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\abv8l7my\\bbby98e[1].jpg")) returned 1 [0070.644] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\ABV8L7MY\\BBBZYVP[1].jpg", nBufferLength=0x105, lpBuffer=0x31dec4, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\ABV8L7MY\\BBBZYVP[1].jpg", lpFilePart=0x0) returned 0x7e [0070.644] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e3b8) returned 1 [0070.644] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\ABV8L7MY\\BBBZYVP[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\abv8l7my\\bbbzyvp[1].jpg"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x178 [0070.645] GetFileType (hFile=0x178) returned 0x1 [0070.645] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e3b4) returned 1 [0070.645] GetFileType (hFile=0x178) returned 0x1 [0070.645] GetFileSize (in: hFile=0x178, lpFileSizeHigh=0x31e4c0 | out: lpFileSizeHigh=0x31e4c0*=0x0) returned 0x938 [0070.645] ReadFile (in: hFile=0x178, lpBuffer=0x273d360, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x31e46c, lpOverlapped=0x0 | out: lpBuffer=0x273d360*, lpNumberOfBytesRead=0x31e46c*=0x938, lpOverlapped=0x0) returned 1 [0070.646] CloseHandle (hObject=0x178) returned 1 [0070.661] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\ABV8L7MY\\BBBZYVP[1].jpg", nBufferLength=0x105, lpBuffer=0x31deb0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\ABV8L7MY\\BBBZYVP[1].jpg", lpFilePart=0x0) returned 0x7e [0070.661] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e3a4) returned 1 [0070.661] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\ABV8L7MY\\BBBZYVP[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\abv8l7my\\bbbzyvp[1].jpg"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x178 [0070.662] GetFileType (hFile=0x178) returned 0x1 [0070.662] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e3a0) returned 1 [0070.662] GetFileType (hFile=0x178) returned 0x1 [0070.662] WriteFile (in: hFile=0x178, lpBuffer=0x278e12c*, nNumberOfBytesToWrite=0x940, lpNumberOfBytesWritten=0x31e434, lpOverlapped=0x0 | out: lpBuffer=0x278e12c*, lpNumberOfBytesWritten=0x31e434*=0x940, lpOverlapped=0x0) returned 1 [0070.663] CloseHandle (hObject=0x178) returned 1 [0070.663] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\ABV8L7MY\\BBBZYVP[1].jpg", nBufferLength=0x105, lpBuffer=0x31dfe4, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\ABV8L7MY\\BBBZYVP[1].jpg", lpFilePart=0x0) returned 0x7e [0070.663] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\ABV8L7MY\\BBBZYVP[1].jpg", nBufferLength=0x105, lpBuffer=0x31dfe4, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\ABV8L7MY\\BBBZYVP[1].jpg", lpFilePart=0x0) returned 0x7e [0070.663] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e444) returned 1 [0070.663] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\ABV8L7MY\\BBBZYVP[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\abv8l7my\\bbbzyvp[1].jpg"), fInfoLevelId=0x0, lpFileInformation=0x31e4c0 | out: lpFileInformation=0x31e4c0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x52fcb4b0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x52fcb4b0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0xd8f5700, ftLastWriteTime.dwHighDateTime=0x1d6eb7f, nFileSizeHigh=0x0, nFileSizeLow=0x940)) returned 1 [0070.663] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e440) returned 1 [0070.663] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\ABV8L7MY\\BBBZYVP[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\abv8l7my\\bbbzyvp[1].jpg"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\ABV8L7MY\\BBBZYVP[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\abv8l7my\\bbbzyvp[1].jpg")) returned 1 [0070.664] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\ABV8L7MY\\BBC04o2[1].jpg", nBufferLength=0x105, lpBuffer=0x31dec4, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\ABV8L7MY\\BBC04o2[1].jpg", lpFilePart=0x0) returned 0x7e [0070.664] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e3b8) returned 1 [0070.664] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\ABV8L7MY\\BBC04o2[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\abv8l7my\\bbc04o2[1].jpg"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x178 [0070.664] GetFileType (hFile=0x178) returned 0x1 [0070.664] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e3b4) returned 1 [0070.664] GetFileType (hFile=0x178) returned 0x1 [0070.664] GetFileSize (in: hFile=0x178, lpFileSizeHigh=0x31e4c0 | out: lpFileSizeHigh=0x31e4c0*=0x0) returned 0x192a [0070.664] ReadFile (in: hFile=0x178, lpBuffer=0x278f4fc, nNumberOfBytesToRead=0x192a, lpNumberOfBytesRead=0x31e46c, lpOverlapped=0x0 | out: lpBuffer=0x278f4fc*, lpNumberOfBytesRead=0x31e46c*=0x192a, lpOverlapped=0x0) returned 1 [0070.666] CloseHandle (hObject=0x178) returned 1 [0070.679] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\ABV8L7MY\\BBC04o2[1].jpg", nBufferLength=0x105, lpBuffer=0x31deb0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\ABV8L7MY\\BBC04o2[1].jpg", lpFilePart=0x0) returned 0x7e [0070.679] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e3a4) returned 1 [0070.679] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\ABV8L7MY\\BBC04o2[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\abv8l7my\\bbc04o2[1].jpg"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x178 [0070.680] GetFileType (hFile=0x178) returned 0x1 [0070.680] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e3a0) returned 1 [0070.680] GetFileType (hFile=0x178) returned 0x1 [0070.680] WriteFile (in: hFile=0x178, lpBuffer=0x27e40d4*, nNumberOfBytesToWrite=0x1930, lpNumberOfBytesWritten=0x31e460, lpOverlapped=0x0 | out: lpBuffer=0x27e40d4*, lpNumberOfBytesWritten=0x31e460*=0x1930, lpOverlapped=0x0) returned 1 [0070.681] CloseHandle (hObject=0x178) returned 1 [0070.682] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\ABV8L7MY\\BBC04o2[1].jpg", nBufferLength=0x105, lpBuffer=0x31dfe4, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\ABV8L7MY\\BBC04o2[1].jpg", lpFilePart=0x0) returned 0x7e [0070.682] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\ABV8L7MY\\BBC04o2[1].jpg", nBufferLength=0x105, lpBuffer=0x31dfe4, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\ABV8L7MY\\BBC04o2[1].jpg", lpFilePart=0x0) returned 0x7e [0070.682] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e444) returned 1 [0070.682] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\ABV8L7MY\\BBC04o2[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\abv8l7my\\bbc04o2[1].jpg"), fInfoLevelId=0x0, lpFileInformation=0x31e4c0 | out: lpFileInformation=0x31e4c0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x52e74850, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x52e74850, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0xd91b860, ftLastWriteTime.dwHighDateTime=0x1d6eb7f, nFileSizeHigh=0x0, nFileSizeLow=0x1930)) returned 1 [0070.682] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e440) returned 1 [0070.682] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\ABV8L7MY\\BBC04o2[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\abv8l7my\\bbc04o2[1].jpg"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\ABV8L7MY\\BBC04o2[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\abv8l7my\\bbc04o2[1].jpg")) returned 1 [0070.682] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\ABV8L7MY\\BBC04ok[1].jpg", nBufferLength=0x105, lpBuffer=0x31dec4, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\ABV8L7MY\\BBC04ok[1].jpg", lpFilePart=0x0) returned 0x7e [0070.682] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e3b8) returned 1 [0070.682] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\ABV8L7MY\\BBC04ok[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\abv8l7my\\bbc04ok[1].jpg"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x178 [0070.683] GetFileType (hFile=0x178) returned 0x1 [0070.683] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e3b4) returned 1 [0070.683] GetFileType (hFile=0x178) returned 0x1 [0070.683] GetFileSize (in: hFile=0x178, lpFileSizeHigh=0x31e4c0 | out: lpFileSizeHigh=0x31e4c0*=0x0) returned 0x23fb [0070.683] ReadFile (in: hFile=0x178, lpBuffer=0x27e5f68, nNumberOfBytesToRead=0x23fb, lpNumberOfBytesRead=0x31e46c, lpOverlapped=0x0 | out: lpBuffer=0x27e5f68*, lpNumberOfBytesRead=0x31e46c*=0x23fb, lpOverlapped=0x0) returned 1 [0070.685] CloseHandle (hObject=0x178) returned 1 [0070.702] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\ABV8L7MY\\BBC04ok[1].jpg", nBufferLength=0x105, lpBuffer=0x31deb0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\ABV8L7MY\\BBC04ok[1].jpg", lpFilePart=0x0) returned 0x7e [0070.702] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e3a4) returned 1 [0070.702] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\ABV8L7MY\\BBC04ok[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\abv8l7my\\bbc04ok[1].jpg"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x178 [0070.703] GetFileType (hFile=0x178) returned 0x1 [0070.703] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e3a0) returned 1 [0070.703] GetFileType (hFile=0x178) returned 0x1 [0070.703] WriteFile (in: hFile=0x178, lpBuffer=0x264238c*, nNumberOfBytesToWrite=0x2400, lpNumberOfBytesWritten=0x31e460, lpOverlapped=0x0 | out: lpBuffer=0x264238c*, lpNumberOfBytesWritten=0x31e460*=0x2400, lpOverlapped=0x0) returned 1 [0070.704] CloseHandle (hObject=0x178) returned 1 [0070.704] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\ABV8L7MY\\BBC04ok[1].jpg", nBufferLength=0x105, lpBuffer=0x31dfe4, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\ABV8L7MY\\BBC04ok[1].jpg", lpFilePart=0x0) returned 0x7e [0070.704] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\ABV8L7MY\\BBC04ok[1].jpg", nBufferLength=0x105, lpBuffer=0x31dfe4, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\ABV8L7MY\\BBC04ok[1].jpg", lpFilePart=0x0) returned 0x7e [0070.704] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e444) returned 1 [0070.704] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\ABV8L7MY\\BBC04ok[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\abv8l7my\\bbc04ok[1].jpg"), fInfoLevelId=0x0, lpFileInformation=0x31e4c0 | out: lpFileInformation=0x31e4c0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x538b8730, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x538b8730, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0xd967b20, ftLastWriteTime.dwHighDateTime=0x1d6eb7f, nFileSizeHigh=0x0, nFileSizeLow=0x2400)) returned 1 [0070.705] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e440) returned 1 [0070.705] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\ABV8L7MY\\BBC04ok[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\abv8l7my\\bbc04ok[1].jpg"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\ABV8L7MY\\BBC04ok[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\abv8l7my\\bbc04ok[1].jpg")) returned 1 [0070.705] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\ABV8L7MY\\BBC04we[1].jpg", nBufferLength=0x105, lpBuffer=0x31dec4, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\ABV8L7MY\\BBC04we[1].jpg", lpFilePart=0x0) returned 0x7e [0070.705] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e3b8) returned 1 [0070.705] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\ABV8L7MY\\BBC04we[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\abv8l7my\\bbc04we[1].jpg"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x178 [0070.705] GetFileType (hFile=0x178) returned 0x1 [0070.705] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e3b4) returned 1 [0070.705] GetFileType (hFile=0x178) returned 0x1 [0070.705] GetFileSize (in: hFile=0x178, lpFileSizeHigh=0x31e4c0 | out: lpFileSizeHigh=0x31e4c0*=0x0) returned 0x2a99 [0070.706] ReadFile (in: hFile=0x178, lpBuffer=0x2644cf0, nNumberOfBytesToRead=0x2a99, lpNumberOfBytesRead=0x31e46c, lpOverlapped=0x0 | out: lpBuffer=0x2644cf0*, lpNumberOfBytesRead=0x31e46c*=0x2a99, lpOverlapped=0x0) returned 1 [0070.707] CloseHandle (hObject=0x178) returned 1 [0070.749] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\ABV8L7MY\\BBC04we[1].jpg", nBufferLength=0x105, lpBuffer=0x31deb0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\ABV8L7MY\\BBC04we[1].jpg", lpFilePart=0x0) returned 0x7e [0070.749] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e3a4) returned 1 [0070.749] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\ABV8L7MY\\BBC04we[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\abv8l7my\\bbc04we[1].jpg"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x178 [0070.750] GetFileType (hFile=0x178) returned 0x1 [0070.750] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e3a0) returned 1 [0070.750] GetFileType (hFile=0x178) returned 0x1 [0070.750] WriteFile (in: hFile=0x178, lpBuffer=0x269f154*, nNumberOfBytesToWrite=0x2aa0, lpNumberOfBytesWritten=0x31e460, lpOverlapped=0x0 | out: lpBuffer=0x269f154*, lpNumberOfBytesWritten=0x31e460*=0x2aa0, lpOverlapped=0x0) returned 1 [0070.752] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\ABV8L7MY\\BBC04we[1].jpg", nBufferLength=0x105, lpBuffer=0x31dfe4, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\ABV8L7MY\\BBC04we[1].jpg", lpFilePart=0x0) returned 0x7e [0070.752] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\ABV8L7MY\\BBC04we[1].jpg", nBufferLength=0x105, lpBuffer=0x31dfe4, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\ABV8L7MY\\BBC04we[1].jpg", lpFilePart=0x0) returned 0x7e [0070.752] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e444) returned 1 [0070.752] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\ABV8L7MY\\BBC04we[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\abv8l7my\\bbc04we[1].jpg"), fInfoLevelId=0x0, lpFileInformation=0x31e4c0 | out: lpFileInformation=0x31e4c0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x539e9230, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x539e9230, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0xd9d9f40, ftLastWriteTime.dwHighDateTime=0x1d6eb7f, nFileSizeHigh=0x0, nFileSizeLow=0x2aa0)) returned 1 [0070.752] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e440) returned 1 [0070.752] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\ABV8L7MY\\BBC04we[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\abv8l7my\\bbc04we[1].jpg"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\ABV8L7MY\\BBC04we[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\abv8l7my\\bbc04we[1].jpg")) returned 1 [0070.753] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\ABV8L7MY\\BBC05rl[1].jpg", nBufferLength=0x105, lpBuffer=0x31dec4, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\ABV8L7MY\\BBC05rl[1].jpg", lpFilePart=0x0) returned 0x7e [0070.753] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e3b8) returned 1 [0070.753] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\ABV8L7MY\\BBC05rl[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\abv8l7my\\bbc05rl[1].jpg"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x178 [0070.754] GetFileType (hFile=0x178) returned 0x1 [0070.754] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e3b4) returned 1 [0070.754] GetFileType (hFile=0x178) returned 0x1 [0070.754] GetFileSize (in: hFile=0x178, lpFileSizeHigh=0x31e4c0 | out: lpFileSizeHigh=0x31e4c0*=0x0) returned 0x3200 [0070.754] ReadFile (in: hFile=0x178, lpBuffer=0x26a2158, nNumberOfBytesToRead=0x3200, lpNumberOfBytesRead=0x31e46c, lpOverlapped=0x0 | out: lpBuffer=0x26a2158*, lpNumberOfBytesRead=0x31e46c*=0x3200, lpOverlapped=0x0) returned 1 [0070.769] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\ABV8L7MY\\BBC05rl[1].jpg", nBufferLength=0x105, lpBuffer=0x31deb0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\ABV8L7MY\\BBC05rl[1].jpg", lpFilePart=0x0) returned 0x7e [0070.769] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e3a4) returned 1 [0070.769] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\ABV8L7MY\\BBC05rl[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\abv8l7my\\bbc05rl[1].jpg"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x178 [0070.770] GetFileType (hFile=0x178) returned 0x1 [0070.770] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e3a0) returned 1 [0070.770] GetFileType (hFile=0x178) returned 0x1 [0070.770] WriteFile (in: hFile=0x178, lpBuffer=0x26fe98c*, nNumberOfBytesToWrite=0x3210, lpNumberOfBytesWritten=0x31e460, lpOverlapped=0x0 | out: lpBuffer=0x26fe98c*, lpNumberOfBytesWritten=0x31e460*=0x3210, lpOverlapped=0x0) returned 1 [0070.772] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\ABV8L7MY\\BBC05rl[1].jpg", nBufferLength=0x105, lpBuffer=0x31dfe4, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\ABV8L7MY\\BBC05rl[1].jpg", lpFilePart=0x0) returned 0x7e [0070.772] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\ABV8L7MY\\BBC05rl[1].jpg", nBufferLength=0x105, lpBuffer=0x31dfe4, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\ABV8L7MY\\BBC05rl[1].jpg", lpFilePart=0x0) returned 0x7e [0070.772] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e444) returned 1 [0070.772] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\ABV8L7MY\\BBC05rl[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\abv8l7my\\bbc05rl[1].jpg"), fInfoLevelId=0x0, lpFileInformation=0x31e4c0 | out: lpFileInformation=0x31e4c0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x52e02430, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x52e02430, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0xda000a0, ftLastWriteTime.dwHighDateTime=0x1d6eb7f, nFileSizeHigh=0x0, nFileSizeLow=0x3210)) returned 1 [0070.772] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e440) returned 1 [0070.772] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\ABV8L7MY\\BBC05rl[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\abv8l7my\\bbc05rl[1].jpg"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\ABV8L7MY\\BBC05rl[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\abv8l7my\\bbc05rl[1].jpg")) returned 1 [0070.772] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\ABV8L7MY\\BBC05rl[2].jpg", nBufferLength=0x105, lpBuffer=0x31dec4, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\ABV8L7MY\\BBC05rl[2].jpg", lpFilePart=0x0) returned 0x7e [0070.772] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e3b8) returned 1 [0070.772] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\ABV8L7MY\\BBC05rl[2].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\abv8l7my\\bbc05rl[2].jpg"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x178 [0070.773] GetFileType (hFile=0x178) returned 0x1 [0070.773] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e3b4) returned 1 [0070.773] GetFileType (hFile=0x178) returned 0x1 [0070.773] GetFileSize (in: hFile=0x178, lpFileSizeHigh=0x31e4c0 | out: lpFileSizeHigh=0x31e4c0*=0x0) returned 0x7e1 [0070.773] ReadFile (in: hFile=0x178, lpBuffer=0x27028f0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x31e46c, lpOverlapped=0x0 | out: lpBuffer=0x27028f0*, lpNumberOfBytesRead=0x31e46c*=0x7e1, lpOverlapped=0x0) returned 1 [0070.788] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\ABV8L7MY\\BBC05rl[2].jpg", nBufferLength=0x105, lpBuffer=0x31deb0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\ABV8L7MY\\BBC05rl[2].jpg", lpFilePart=0x0) returned 0x7e [0070.788] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e3a4) returned 1 [0070.788] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\ABV8L7MY\\BBC05rl[2].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\abv8l7my\\bbc05rl[2].jpg"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x178 [0070.789] GetFileType (hFile=0x178) returned 0x1 [0070.789] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e3a0) returned 1 [0070.789] GetFileType (hFile=0x178) returned 0x1 [0070.789] WriteFile (in: hFile=0x178, lpBuffer=0x2753034*, nNumberOfBytesToWrite=0x7f0, lpNumberOfBytesWritten=0x31e434, lpOverlapped=0x0 | out: lpBuffer=0x2753034*, lpNumberOfBytesWritten=0x31e434*=0x7f0, lpOverlapped=0x0) returned 1 [0070.790] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\ABV8L7MY\\BBC05rl[2].jpg", nBufferLength=0x105, lpBuffer=0x31dfe4, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\ABV8L7MY\\BBC05rl[2].jpg", lpFilePart=0x0) returned 0x7e [0070.790] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\ABV8L7MY\\BBC05rl[2].jpg", nBufferLength=0x105, lpBuffer=0x31dfe4, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\ABV8L7MY\\BBC05rl[2].jpg", lpFilePart=0x0) returned 0x7e [0070.790] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e444) returned 1 [0070.790] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\ABV8L7MY\\BBC05rl[2].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\abv8l7my\\bbc05rl[2].jpg"), fInfoLevelId=0x0, lpFileInformation=0x31e4c0 | out: lpFileInformation=0x31e4c0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x52ec0b10, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x52ec0b10, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0xda26200, ftLastWriteTime.dwHighDateTime=0x1d6eb7f, nFileSizeHigh=0x0, nFileSizeLow=0x7f0)) returned 1 [0070.790] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e440) returned 1 [0070.790] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\ABV8L7MY\\BBC05rl[2].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\abv8l7my\\bbc05rl[2].jpg"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\ABV8L7MY\\BBC05rl[2].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\abv8l7my\\bbc05rl[2].jpg")) returned 1 [0070.790] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\ABV8L7MY\\BBC0ATj[1].jpg", nBufferLength=0x105, lpBuffer=0x31dec4, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\ABV8L7MY\\BBC0ATj[1].jpg", lpFilePart=0x0) returned 0x7e [0070.791] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e3b8) returned 1 [0070.791] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\ABV8L7MY\\BBC0ATj[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\abv8l7my\\bbc0atj[1].jpg"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x178 [0070.791] GetFileType (hFile=0x178) returned 0x1 [0070.791] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e3b4) returned 1 [0070.791] GetFileType (hFile=0x178) returned 0x1 [0070.791] GetFileSize (in: hFile=0x178, lpFileSizeHigh=0x31e4c0 | out: lpFileSizeHigh=0x31e4c0*=0x0) returned 0x1b4e [0070.791] ReadFile (in: hFile=0x178, lpBuffer=0x2754404, nNumberOfBytesToRead=0x1b4e, lpNumberOfBytesRead=0x31e46c, lpOverlapped=0x0 | out: lpBuffer=0x2754404*, lpNumberOfBytesRead=0x31e46c*=0x1b4e, lpOverlapped=0x0) returned 1 [0070.806] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\ABV8L7MY\\BBC0ATj[1].jpg", nBufferLength=0x105, lpBuffer=0x31deb0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\ABV8L7MY\\BBC0ATj[1].jpg", lpFilePart=0x0) returned 0x7e [0070.806] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e3a4) returned 1 [0070.806] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\ABV8L7MY\\BBC0ATj[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\abv8l7my\\bbc0atj[1].jpg"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x178 [0070.807] GetFileType (hFile=0x178) returned 0x1 [0070.807] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e3a0) returned 1 [0070.807] GetFileType (hFile=0x178) returned 0x1 [0070.807] WriteFile (in: hFile=0x178, lpBuffer=0x27a9a7c*, nNumberOfBytesToWrite=0x1b50, lpNumberOfBytesWritten=0x31e460, lpOverlapped=0x0 | out: lpBuffer=0x27a9a7c*, lpNumberOfBytesWritten=0x31e460*=0x1b50, lpOverlapped=0x0) returned 1 [0070.808] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\ABV8L7MY\\BBC0ATj[1].jpg", nBufferLength=0x105, lpBuffer=0x31dfe4, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\ABV8L7MY\\BBC0ATj[1].jpg", lpFilePart=0x0) returned 0x7e [0070.808] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\ABV8L7MY\\BBC0ATj[1].jpg", nBufferLength=0x105, lpBuffer=0x31dfe4, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\ABV8L7MY\\BBC0ATj[1].jpg", lpFilePart=0x0) returned 0x7e [0070.808] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e444) returned 1 [0070.808] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\ABV8L7MY\\BBC0ATj[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\abv8l7my\\bbc0atj[1].jpg"), fInfoLevelId=0x0, lpFileInformation=0x31e4c0 | out: lpFileInformation=0x31e4c0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x52ff1610, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x52ff1610, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0xda4c360, ftLastWriteTime.dwHighDateTime=0x1d6eb7f, nFileSizeHigh=0x0, nFileSizeLow=0x1b50)) returned 1 [0070.808] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e440) returned 1 [0070.808] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\ABV8L7MY\\BBC0ATj[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\abv8l7my\\bbc0atj[1].jpg"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\ABV8L7MY\\BBC0ATj[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\abv8l7my\\bbc0atj[1].jpg")) returned 1 [0070.809] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\ABV8L7MY\\BBC0D8i[1].jpg", nBufferLength=0x105, lpBuffer=0x31dec4, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\ABV8L7MY\\BBC0D8i[1].jpg", lpFilePart=0x0) returned 0x7e [0070.809] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e3b8) returned 1 [0070.809] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\ABV8L7MY\\BBC0D8i[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\abv8l7my\\bbc0d8i[1].jpg"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x178 [0070.809] GetFileType (hFile=0x178) returned 0x1 [0070.809] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e3b4) returned 1 [0070.809] GetFileType (hFile=0x178) returned 0x1 [0070.809] GetFileSize (in: hFile=0x178, lpFileSizeHigh=0x31e4c0 | out: lpFileSizeHigh=0x31e4c0*=0x0) returned 0x751 [0070.809] ReadFile (in: hFile=0x178, lpBuffer=0x27ac290, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x31e46c, lpOverlapped=0x0 | out: lpBuffer=0x27ac290*, lpNumberOfBytesRead=0x31e46c*=0x751, lpOverlapped=0x0) returned 1 [0070.824] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\ABV8L7MY\\BBC0D8i[1].jpg", nBufferLength=0x105, lpBuffer=0x31deb0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\ABV8L7MY\\BBC0D8i[1].jpg", lpFilePart=0x0) returned 0x7e [0070.824] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e3a4) returned 1 [0070.824] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\ABV8L7MY\\BBC0D8i[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\abv8l7my\\bbc0d8i[1].jpg"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x178 [0070.825] GetFileType (hFile=0x178) returned 0x1 [0070.825] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e3a0) returned 1 [0070.825] GetFileType (hFile=0x178) returned 0x1 [0070.825] WriteFile (in: hFile=0x178, lpBuffer=0x27fc704*, nNumberOfBytesToWrite=0x760, lpNumberOfBytesWritten=0x31e434, lpOverlapped=0x0 | out: lpBuffer=0x27fc704*, lpNumberOfBytesWritten=0x31e434*=0x760, lpOverlapped=0x0) returned 1 [0070.826] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\ABV8L7MY\\BBC0D8i[1].jpg", nBufferLength=0x105, lpBuffer=0x31dfe4, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\ABV8L7MY\\BBC0D8i[1].jpg", lpFilePart=0x0) returned 0x7e [0070.826] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\ABV8L7MY\\BBC0D8i[1].jpg", nBufferLength=0x105, lpBuffer=0x31dfe4, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\ABV8L7MY\\BBC0D8i[1].jpg", lpFilePart=0x0) returned 0x7e [0070.826] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e444) returned 1 [0070.826] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\ABV8L7MY\\BBC0D8i[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\abv8l7my\\bbc0d8i[1].jpg"), fInfoLevelId=0x0, lpFileInformation=0x31e4c0 | out: lpFileInformation=0x31e4c0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x5392ab50, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x5392ab50, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0xda98620, ftLastWriteTime.dwHighDateTime=0x1d6eb7f, nFileSizeHigh=0x0, nFileSizeLow=0x760)) returned 1 [0070.826] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e440) returned 1 [0070.826] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\ABV8L7MY\\BBC0D8i[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\abv8l7my\\bbc0d8i[1].jpg"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\ABV8L7MY\\BBC0D8i[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\abv8l7my\\bbc0d8i[1].jpg")) returned 1 [0070.826] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\ABV8L7MY\\BBC0g7a[1].jpg", nBufferLength=0x105, lpBuffer=0x31dec4, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\ABV8L7MY\\BBC0g7a[1].jpg", lpFilePart=0x0) returned 0x7e [0070.826] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e3b8) returned 1 [0070.827] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\ABV8L7MY\\BBC0g7a[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\abv8l7my\\bbc0g7a[1].jpg"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x178 [0070.827] GetFileType (hFile=0x178) returned 0x1 [0070.827] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e3b4) returned 1 [0070.827] GetFileType (hFile=0x178) returned 0x1 [0070.827] GetFileSize (in: hFile=0x178, lpFileSizeHigh=0x31e4c0 | out: lpFileSizeHigh=0x31e4c0*=0x0) returned 0x200e [0070.827] ReadFile (in: hFile=0x178, lpBuffer=0x27fdad4, nNumberOfBytesToRead=0x200e, lpNumberOfBytesRead=0x31e46c, lpOverlapped=0x0 | out: lpBuffer=0x27fdad4*, lpNumberOfBytesRead=0x31e46c*=0x200e, lpOverlapped=0x0) returned 1 [0070.880] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\ABV8L7MY\\BBC0g7a[1].jpg", nBufferLength=0x105, lpBuffer=0x31deb0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\ABV8L7MY\\BBC0g7a[1].jpg", lpFilePart=0x0) returned 0x7e [0070.881] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e3a4) returned 1 [0070.881] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\ABV8L7MY\\BBC0g7a[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\abv8l7my\\bbc0g7a[1].jpg"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x178 [0070.882] GetFileType (hFile=0x178) returned 0x1 [0070.882] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e3a0) returned 1 [0070.882] GetFileType (hFile=0x178) returned 0x1 [0070.882] WriteFile (in: hFile=0x178, lpBuffer=0x2656d90*, nNumberOfBytesToWrite=0x2010, lpNumberOfBytesWritten=0x31e460, lpOverlapped=0x0 | out: lpBuffer=0x2656d90*, lpNumberOfBytesWritten=0x31e460*=0x2010, lpOverlapped=0x0) returned 1 [0070.883] CloseHandle (hObject=0x178) returned 1 [0070.883] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\ABV8L7MY\\BBC0g7a[1].jpg", nBufferLength=0x105, lpBuffer=0x31dfe4, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\ABV8L7MY\\BBC0g7a[1].jpg", lpFilePart=0x0) returned 0x7e [0070.883] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\ABV8L7MY\\BBC0g7a[1].jpg", nBufferLength=0x105, lpBuffer=0x31dfe4, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\ABV8L7MY\\BBC0g7a[1].jpg", lpFilePart=0x0) returned 0x7e [0070.883] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e444) returned 1 [0070.883] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\ABV8L7MY\\BBC0g7a[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\abv8l7my\\bbc0g7a[1].jpg"), fInfoLevelId=0x0, lpFileInformation=0x31e4c0 | out: lpFileInformation=0x31e4c0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x51256470, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x51256470, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0xdb0aa40, ftLastWriteTime.dwHighDateTime=0x1d6eb7f, nFileSizeHigh=0x0, nFileSizeLow=0x2010)) returned 1 [0070.883] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e440) returned 1 [0070.883] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\ABV8L7MY\\BBC0g7a[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\abv8l7my\\bbc0g7a[1].jpg"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\ABV8L7MY\\BBC0g7a[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\abv8l7my\\bbc0g7a[1].jpg")) returned 1 [0070.884] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\ABV8L7MY\\BBC0w1b[1].jpg", nBufferLength=0x105, lpBuffer=0x31dec4, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\ABV8L7MY\\BBC0w1b[1].jpg", lpFilePart=0x0) returned 0x7e [0070.884] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e3b8) returned 1 [0070.884] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\ABV8L7MY\\BBC0w1b[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\abv8l7my\\bbc0w1b[1].jpg"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x178 [0070.970] GetFileType (hFile=0x178) returned 0x1 [0070.973] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e3b4) returned 1 [0070.974] GetFileType (hFile=0x178) returned 0x1 [0070.974] GetFileSize (in: hFile=0x178, lpFileSizeHigh=0x31e4c0 | out: lpFileSizeHigh=0x31e4c0*=0x0) returned 0x1dcb [0070.974] ReadFile (in: hFile=0x178, lpBuffer=0x2659304, nNumberOfBytesToRead=0x1dcb, lpNumberOfBytesRead=0x31e46c, lpOverlapped=0x0 | out: lpBuffer=0x2659304*, lpNumberOfBytesRead=0x31e46c*=0x1dcb, lpOverlapped=0x0) returned 1 [0070.976] CloseHandle (hObject=0x178) returned 1 [0070.989] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\ABV8L7MY\\BBC0w1b[1].jpg", nBufferLength=0x105, lpBuffer=0x31deb0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\ABV8L7MY\\BBC0w1b[1].jpg", lpFilePart=0x0) returned 0x7e [0070.990] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e3a4) returned 1 [0070.990] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\ABV8L7MY\\BBC0w1b[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\abv8l7my\\bbc0w1b[1].jpg"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x178 [0070.991] GetFileType (hFile=0x178) returned 0x1 [0070.991] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e3a0) returned 1 [0070.991] GetFileType (hFile=0x178) returned 0x1 [0070.991] WriteFile (in: hFile=0x178, lpBuffer=0x26af758*, nNumberOfBytesToWrite=0x1dd0, lpNumberOfBytesWritten=0x31e460, lpOverlapped=0x0 | out: lpBuffer=0x26af758*, lpNumberOfBytesWritten=0x31e460*=0x1dd0, lpOverlapped=0x0) returned 1 [0070.992] CloseHandle (hObject=0x178) returned 1 [0070.992] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\ABV8L7MY\\BBC0w1b[1].jpg", nBufferLength=0x105, lpBuffer=0x31dfe4, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\ABV8L7MY\\BBC0w1b[1].jpg", lpFilePart=0x0) returned 0x7e [0070.992] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\ABV8L7MY\\BBC0w1b[1].jpg", nBufferLength=0x105, lpBuffer=0x31dfe4, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\ABV8L7MY\\BBC0w1b[1].jpg", lpFilePart=0x0) returned 0x7e [0070.992] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e444) returned 1 [0070.992] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\ABV8L7MY\\BBC0w1b[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\abv8l7my\\bbc0w1b[1].jpg"), fInfoLevelId=0x0, lpFileInformation=0x31e4c0 | out: lpFileInformation=0x31e4c0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x52f7f1f0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x52f7f1f0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0xdc153e0, ftLastWriteTime.dwHighDateTime=0x1d6eb7f, nFileSizeHigh=0x0, nFileSizeLow=0x1dd0)) returned 1 [0070.992] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e440) returned 1 [0070.992] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\ABV8L7MY\\BBC0w1b[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\abv8l7my\\bbc0w1b[1].jpg"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\ABV8L7MY\\BBC0w1b[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\abv8l7my\\bbc0w1b[1].jpg")) returned 1 [0070.993] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\ABV8L7MY\\BBC0xLt[1].jpg", nBufferLength=0x105, lpBuffer=0x31dec4, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\ABV8L7MY\\BBC0xLt[1].jpg", lpFilePart=0x0) returned 0x7e [0070.993] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e3b8) returned 1 [0070.993] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\ABV8L7MY\\BBC0xLt[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\abv8l7my\\bbc0xlt[1].jpg"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x178 [0070.993] GetFileType (hFile=0x178) returned 0x1 [0070.993] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e3b4) returned 1 [0070.993] GetFileType (hFile=0x178) returned 0x1 [0070.993] GetFileSize (in: hFile=0x178, lpFileSizeHigh=0x31e4c0 | out: lpFileSizeHigh=0x31e4c0*=0x0) returned 0x23ba [0070.993] ReadFile (in: hFile=0x178, lpBuffer=0x26b1a8c, nNumberOfBytesToRead=0x23ba, lpNumberOfBytesRead=0x31e46c, lpOverlapped=0x0 | out: lpBuffer=0x26b1a8c*, lpNumberOfBytesRead=0x31e46c*=0x23ba, lpOverlapped=0x0) returned 1 [0070.995] CloseHandle (hObject=0x178) returned 1 [0071.008] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\ABV8L7MY\\BBC0xLt[1].jpg", nBufferLength=0x105, lpBuffer=0x31deb0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\ABV8L7MY\\BBC0xLt[1].jpg", lpFilePart=0x0) returned 0x7e [0071.008] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e3a4) returned 1 [0071.008] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\ABV8L7MY\\BBC0xLt[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\abv8l7my\\bbc0xlt[1].jpg"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x178 [0071.009] GetFileType (hFile=0x178) returned 0x1 [0071.009] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e3a0) returned 1 [0071.009] GetFileType (hFile=0x178) returned 0x1 [0071.009] WriteFile (in: hFile=0x178, lpBuffer=0x2709b34*, nNumberOfBytesToWrite=0x23c0, lpNumberOfBytesWritten=0x31e460, lpOverlapped=0x0 | out: lpBuffer=0x2709b34*, lpNumberOfBytesWritten=0x31e460*=0x23c0, lpOverlapped=0x0) returned 1 [0071.010] CloseHandle (hObject=0x178) returned 1 [0071.010] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\ABV8L7MY\\BBC0xLt[1].jpg", nBufferLength=0x105, lpBuffer=0x31dfe4, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\ABV8L7MY\\BBC0xLt[1].jpg", lpFilePart=0x0) returned 0x7e [0071.010] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\ABV8L7MY\\BBC0xLt[1].jpg", nBufferLength=0x105, lpBuffer=0x31dfe4, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\ABV8L7MY\\BBC0xLt[1].jpg", lpFilePart=0x0) returned 0x7e [0071.010] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e444) returned 1 [0071.010] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\ABV8L7MY\\BBC0xLt[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\abv8l7my\\bbc0xlt[1].jpg"), fInfoLevelId=0x0, lpFileInformation=0x31e4c0 | out: lpFileInformation=0x31e4c0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x5530da90, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x5530da90, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0xdc3b540, ftLastWriteTime.dwHighDateTime=0x1d6eb7f, nFileSizeHigh=0x0, nFileSizeLow=0x23c0)) returned 1 [0071.011] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e440) returned 1 [0071.011] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\ABV8L7MY\\BBC0xLt[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\abv8l7my\\bbc0xlt[1].jpg"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\ABV8L7MY\\BBC0xLt[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\abv8l7my\\bbc0xlt[1].jpg")) returned 1 [0071.011] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\ABV8L7MY\\BBDWA22[1].jpg", nBufferLength=0x105, lpBuffer=0x31dec4, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\ABV8L7MY\\BBDWA22[1].jpg", lpFilePart=0x0) returned 0x7e [0071.011] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e3b8) returned 1 [0071.011] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\ABV8L7MY\\BBDWA22[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\abv8l7my\\bbdwa22[1].jpg"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x178 [0071.011] GetFileType (hFile=0x178) returned 0x1 [0071.012] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e3b4) returned 1 [0071.012] GetFileType (hFile=0x178) returned 0x1 [0071.012] GetFileSize (in: hFile=0x178, lpFileSizeHigh=0x31e4c0 | out: lpFileSizeHigh=0x31e4c0*=0x0) returned 0xb58 [0071.012] ReadFile (in: hFile=0x178, lpBuffer=0x270cfbc, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x31e46c, lpOverlapped=0x0 | out: lpBuffer=0x270cfbc*, lpNumberOfBytesRead=0x31e46c*=0xb58, lpOverlapped=0x0) returned 1 [0071.013] CloseHandle (hObject=0x178) returned 1 [0071.026] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\ABV8L7MY\\BBDWA22[1].jpg", nBufferLength=0x105, lpBuffer=0x31deb0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\ABV8L7MY\\BBDWA22[1].jpg", lpFilePart=0x0) returned 0x7e [0071.026] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e3a4) returned 1 [0071.027] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\ABV8L7MY\\BBDWA22[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\abv8l7my\\bbdwa22[1].jpg"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x178 [0071.028] GetFileType (hFile=0x178) returned 0x1 [0071.028] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e3a0) returned 1 [0071.028] GetFileType (hFile=0x178) returned 0x1 [0071.028] WriteFile (in: hFile=0x178, lpBuffer=0x275e828*, nNumberOfBytesToWrite=0xb60, lpNumberOfBytesWritten=0x31e434, lpOverlapped=0x0 | out: lpBuffer=0x275e828*, lpNumberOfBytesWritten=0x31e434*=0xb60, lpOverlapped=0x0) returned 1 [0071.029] CloseHandle (hObject=0x178) returned 1 [0071.029] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\ABV8L7MY\\BBDWA22[1].jpg", nBufferLength=0x105, lpBuffer=0x31dfe4, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\ABV8L7MY\\BBDWA22[1].jpg", lpFilePart=0x0) returned 0x7e [0071.029] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\ABV8L7MY\\BBDWA22[1].jpg", nBufferLength=0x105, lpBuffer=0x31dfe4, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\ABV8L7MY\\BBDWA22[1].jpg", lpFilePart=0x0) returned 0x7e [0071.029] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e444) returned 1 [0071.029] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\ABV8L7MY\\BBDWA22[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\abv8l7my\\bbdwa22[1].jpg"), fInfoLevelId=0x0, lpFileInformation=0x31e4c0 | out: lpFileInformation=0x31e4c0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x45798350, ftCreationTime.dwHighDateTime=0x1d2faf3, ftLastAccessTime.dwLowDateTime=0x45798350, ftLastAccessTime.dwHighDateTime=0x1d2faf3, ftLastWriteTime.dwLowDateTime=0xdc87800, ftLastWriteTime.dwHighDateTime=0x1d6eb7f, nFileSizeHigh=0x0, nFileSizeLow=0xb60)) returned 1 [0071.029] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e440) returned 1 [0071.029] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\ABV8L7MY\\BBDWA22[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\abv8l7my\\bbdwa22[1].jpg"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\ABV8L7MY\\BBDWA22[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\abv8l7my\\bbdwa22[1].jpg")) returned 1 [0071.029] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\ABV8L7MY\\BBE7d3b[1].jpg", nBufferLength=0x105, lpBuffer=0x31dec4, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\ABV8L7MY\\BBE7d3b[1].jpg", lpFilePart=0x0) returned 0x7e [0071.029] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e3b8) returned 1 [0071.029] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\ABV8L7MY\\BBE7d3b[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\abv8l7my\\bbe7d3b[1].jpg"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x178 [0071.030] GetFileType (hFile=0x178) returned 0x1 [0071.030] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e3b4) returned 1 [0071.030] GetFileType (hFile=0x178) returned 0x1 [0071.030] GetFileSize (in: hFile=0x178, lpFileSizeHigh=0x31e4c0 | out: lpFileSizeHigh=0x31e4c0*=0x0) returned 0x91d [0071.030] ReadFile (in: hFile=0x178, lpBuffer=0x2760524, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x31e46c, lpOverlapped=0x0 | out: lpBuffer=0x2760524*, lpNumberOfBytesRead=0x31e46c*=0x91d, lpOverlapped=0x0) returned 1 [0071.032] CloseHandle (hObject=0x178) returned 1 [0071.045] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\ABV8L7MY\\BBE7d3b[1].jpg", nBufferLength=0x105, lpBuffer=0x31deb0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\ABV8L7MY\\BBE7d3b[1].jpg", lpFilePart=0x0) returned 0x7e [0071.045] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e3a4) returned 1 [0071.045] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\ABV8L7MY\\BBE7d3b[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\abv8l7my\\bbe7d3b[1].jpg"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x178 [0071.046] GetFileType (hFile=0x178) returned 0x1 [0071.046] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e3a0) returned 1 [0071.046] GetFileType (hFile=0x178) returned 0x1 [0071.046] WriteFile (in: hFile=0x178, lpBuffer=0x27b124c*, nNumberOfBytesToWrite=0x920, lpNumberOfBytesWritten=0x31e434, lpOverlapped=0x0 | out: lpBuffer=0x27b124c*, lpNumberOfBytesWritten=0x31e434*=0x920, lpOverlapped=0x0) returned 1 [0071.047] CloseHandle (hObject=0x178) returned 1 [0071.047] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\ABV8L7MY\\BBE7d3b[1].jpg", nBufferLength=0x105, lpBuffer=0x31dfe4, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\ABV8L7MY\\BBE7d3b[1].jpg", lpFilePart=0x0) returned 0x7e [0071.047] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\ABV8L7MY\\BBE7d3b[1].jpg", nBufferLength=0x105, lpBuffer=0x31dfe4, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\ABV8L7MY\\BBE7d3b[1].jpg", lpFilePart=0x0) returned 0x7e [0071.047] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e444) returned 1 [0071.047] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\ABV8L7MY\\BBE7d3b[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\abv8l7my\\bbe7d3b[1].jpg"), fInfoLevelId=0x0, lpFileInformation=0x31e4c0 | out: lpFileInformation=0x31e4c0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x45a45c10, ftCreationTime.dwHighDateTime=0x1d2faf3, ftLastAccessTime.dwLowDateTime=0x45a45c10, ftLastAccessTime.dwHighDateTime=0x1d2faf3, ftLastWriteTime.dwLowDateTime=0xdcad960, ftLastWriteTime.dwHighDateTime=0x1d6eb7f, nFileSizeHigh=0x0, nFileSizeLow=0x920)) returned 1 [0071.047] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e440) returned 1 [0071.048] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\ABV8L7MY\\BBE7d3b[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\abv8l7my\\bbe7d3b[1].jpg"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\ABV8L7MY\\BBE7d3b[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\abv8l7my\\bbe7d3b[1].jpg")) returned 1 [0071.048] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\ABV8L7MY\\BBE85ld[1].jpg", nBufferLength=0x105, lpBuffer=0x31dec4, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\ABV8L7MY\\BBE85ld[1].jpg", lpFilePart=0x0) returned 0x7e [0071.048] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e3b8) returned 1 [0071.048] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\ABV8L7MY\\BBE85ld[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\abv8l7my\\bbe85ld[1].jpg"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x178 [0071.048] GetFileType (hFile=0x178) returned 0x1 [0071.048] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e3b4) returned 1 [0071.048] GetFileType (hFile=0x178) returned 0x1 [0071.048] GetFileSize (in: hFile=0x178, lpFileSizeHigh=0x31e4c0 | out: lpFileSizeHigh=0x31e4c0*=0x0) returned 0x2850 [0071.048] ReadFile (in: hFile=0x178, lpBuffer=0x27b261c, nNumberOfBytesToRead=0x2850, lpNumberOfBytesRead=0x31e46c, lpOverlapped=0x0 | out: lpBuffer=0x27b261c*, lpNumberOfBytesRead=0x31e46c*=0x2850, lpOverlapped=0x0) returned 1 [0071.050] CloseHandle (hObject=0x178) returned 1 [0071.063] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\ABV8L7MY\\BBE85ld[1].jpg", nBufferLength=0x105, lpBuffer=0x31deb0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\ABV8L7MY\\BBE85ld[1].jpg", lpFilePart=0x0) returned 0x7e [0071.063] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e3a4) returned 1 [0071.063] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\ABV8L7MY\\BBE85ld[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\abv8l7my\\bbe85ld[1].jpg"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x178 [0071.064] GetFileType (hFile=0x178) returned 0x1 [0071.064] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e3a0) returned 1 [0071.064] GetFileType (hFile=0x178) returned 0x1 [0071.064] WriteFile (in: hFile=0x178, lpBuffer=0x280bde0*, nNumberOfBytesToWrite=0x2860, lpNumberOfBytesWritten=0x31e460, lpOverlapped=0x0 | out: lpBuffer=0x280bde0*, lpNumberOfBytesWritten=0x31e460*=0x2860, lpOverlapped=0x0) returned 1 [0071.065] CloseHandle (hObject=0x178) returned 1 [0071.065] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\ABV8L7MY\\BBE85ld[1].jpg", nBufferLength=0x105, lpBuffer=0x31dfe4, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\ABV8L7MY\\BBE85ld[1].jpg", lpFilePart=0x0) returned 0x7e [0071.065] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\ABV8L7MY\\BBE85ld[1].jpg", nBufferLength=0x105, lpBuffer=0x31dfe4, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\ABV8L7MY\\BBE85ld[1].jpg", lpFilePart=0x0) returned 0x7e [0071.066] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e444) returned 1 [0071.066] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\ABV8L7MY\\BBE85ld[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\abv8l7my\\bbe85ld[1].jpg"), fInfoLevelId=0x0, lpFileInformation=0x31e4c0 | out: lpFileInformation=0x31e4c0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x45583010, ftCreationTime.dwHighDateTime=0x1d2faf3, ftLastAccessTime.dwLowDateTime=0x45583010, ftLastAccessTime.dwHighDateTime=0x1d2faf3, ftLastWriteTime.dwLowDateTime=0xdcd3ac0, ftLastWriteTime.dwHighDateTime=0x1d6eb7f, nFileSizeHigh=0x0, nFileSizeLow=0x2860)) returned 1 [0071.066] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e440) returned 1 [0071.066] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\ABV8L7MY\\BBE85ld[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\abv8l7my\\bbe85ld[1].jpg"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\ABV8L7MY\\BBE85ld[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\abv8l7my\\bbe85ld[1].jpg")) returned 1 [0071.066] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\ABV8L7MY\\BBEdckp[1].jpg", nBufferLength=0x105, lpBuffer=0x31dec4, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\ABV8L7MY\\BBEdckp[1].jpg", lpFilePart=0x0) returned 0x7e [0071.066] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e3b8) returned 1 [0071.066] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\ABV8L7MY\\BBEdckp[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\abv8l7my\\bbedckp[1].jpg"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x178 [0071.066] GetFileType (hFile=0x178) returned 0x1 [0071.066] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e3b4) returned 1 [0071.066] GetFileType (hFile=0x178) returned 0x1 [0071.067] GetFileSize (in: hFile=0x178, lpFileSizeHigh=0x31e4c0 | out: lpFileSizeHigh=0x31e4c0*=0x0) returned 0x16ca [0071.067] ReadFile (in: hFile=0x178, lpBuffer=0x280eba4, nNumberOfBytesToRead=0x16ca, lpNumberOfBytesRead=0x31e46c, lpOverlapped=0x0 | out: lpBuffer=0x280eba4*, lpNumberOfBytesRead=0x31e46c*=0x16ca, lpOverlapped=0x0) returned 1 [0071.068] CloseHandle (hObject=0x178) returned 1 [0071.110] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\ABV8L7MY\\BBEdckp[1].jpg", nBufferLength=0x105, lpBuffer=0x31deb0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\ABV8L7MY\\BBEdckp[1].jpg", lpFilePart=0x0) returned 0x7e [0071.110] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e3a4) returned 1 [0071.110] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\ABV8L7MY\\BBEdckp[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\abv8l7my\\bbedckp[1].jpg"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x178 [0071.111] GetFileType (hFile=0x178) returned 0x1 [0071.111] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e3a0) returned 1 [0071.111] GetFileType (hFile=0x178) returned 0x1 [0071.111] WriteFile (in: hFile=0x178, lpBuffer=0x2668770*, nNumberOfBytesToWrite=0x16d0, lpNumberOfBytesWritten=0x31e460, lpOverlapped=0x0 | out: lpBuffer=0x2668770*, lpNumberOfBytesWritten=0x31e460*=0x16d0, lpOverlapped=0x0) returned 1 [0071.112] CloseHandle (hObject=0x178) returned 1 [0071.112] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\ABV8L7MY\\BBEdckp[1].jpg", nBufferLength=0x105, lpBuffer=0x31dfe4, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\ABV8L7MY\\BBEdckp[1].jpg", lpFilePart=0x0) returned 0x7e [0071.112] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\ABV8L7MY\\BBEdckp[1].jpg", nBufferLength=0x105, lpBuffer=0x31dfe4, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\ABV8L7MY\\BBEdckp[1].jpg", lpFilePart=0x0) returned 0x7e [0071.112] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e444) returned 1 [0071.112] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\ABV8L7MY\\BBEdckp[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\abv8l7my\\bbedckp[1].jpg"), fInfoLevelId=0x0, lpFileInformation=0x31e4c0 | out: lpFileInformation=0x31e4c0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x459613d0, ftCreationTime.dwHighDateTime=0x1d2faf3, ftLastAccessTime.dwLowDateTime=0x459613d0, ftLastAccessTime.dwHighDateTime=0x1d2faf3, ftLastWriteTime.dwLowDateTime=0xdd45ee0, ftLastWriteTime.dwHighDateTime=0x1d6eb7f, nFileSizeHigh=0x0, nFileSizeLow=0x16d0)) returned 1 [0071.112] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e440) returned 1 [0071.112] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\ABV8L7MY\\BBEdckp[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\abv8l7my\\bbedckp[1].jpg"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\ABV8L7MY\\BBEdckp[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\abv8l7my\\bbedckp[1].jpg")) returned 1 [0071.112] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\ABV8L7MY\\BBEdMci[1].jpg", nBufferLength=0x105, lpBuffer=0x31dec4, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\ABV8L7MY\\BBEdMci[1].jpg", lpFilePart=0x0) returned 0x7e [0071.113] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e3b8) returned 1 [0071.113] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\ABV8L7MY\\BBEdMci[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\abv8l7my\\bbedmci[1].jpg"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x178 [0071.113] GetFileType (hFile=0x178) returned 0x1 [0071.113] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e3b4) returned 1 [0071.113] GetFileType (hFile=0x178) returned 0x1 [0071.113] GetFileSize (in: hFile=0x178, lpFileSizeHigh=0x31e4c0 | out: lpFileSizeHigh=0x31e4c0*=0x0) returned 0xafe [0071.113] ReadFile (in: hFile=0x178, lpBuffer=0x266aeb0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x31e46c, lpOverlapped=0x0 | out: lpBuffer=0x266aeb0*, lpNumberOfBytesRead=0x31e46c*=0xafe, lpOverlapped=0x0) returned 1 [0071.114] CloseHandle (hObject=0x178) returned 1 [0071.128] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\ABV8L7MY\\BBEdMci[1].jpg", nBufferLength=0x105, lpBuffer=0x31deb0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\ABV8L7MY\\BBEdMci[1].jpg", lpFilePart=0x0) returned 0x7e [0071.128] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e3a4) returned 1 [0071.128] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\ABV8L7MY\\BBEdMci[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\abv8l7my\\bbedmci[1].jpg"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x178 [0071.129] GetFileType (hFile=0x178) returned 0x1 [0071.129] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e3a0) returned 1 [0071.129] GetFileType (hFile=0x178) returned 0x1 [0071.129] WriteFile (in: hFile=0x178, lpBuffer=0x26bc694*, nNumberOfBytesToWrite=0xb00, lpNumberOfBytesWritten=0x31e434, lpOverlapped=0x0 | out: lpBuffer=0x26bc694*, lpNumberOfBytesWritten=0x31e434*=0xb00, lpOverlapped=0x0) returned 1 [0071.130] CloseHandle (hObject=0x178) returned 1 [0071.130] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\ABV8L7MY\\BBEdMci[1].jpg", nBufferLength=0x105, lpBuffer=0x31dfe4, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\ABV8L7MY\\BBEdMci[1].jpg", lpFilePart=0x0) returned 0x7e [0071.130] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\ABV8L7MY\\BBEdMci[1].jpg", nBufferLength=0x105, lpBuffer=0x31dfe4, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\ABV8L7MY\\BBEdMci[1].jpg", lpFilePart=0x0) returned 0x7e [0071.130] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e444) returned 1 [0071.130] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\ABV8L7MY\\BBEdMci[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\abv8l7my\\bbedmci[1].jpg"), fInfoLevelId=0x0, lpFileInformation=0x31e4c0 | out: lpFileInformation=0x31e4c0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x45987530, ftCreationTime.dwHighDateTime=0x1d2faf3, ftLastAccessTime.dwLowDateTime=0x45987530, ftLastAccessTime.dwHighDateTime=0x1d2faf3, ftLastWriteTime.dwLowDateTime=0xdd6c040, ftLastWriteTime.dwHighDateTime=0x1d6eb7f, nFileSizeHigh=0x0, nFileSizeLow=0xb00)) returned 1 [0071.130] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e440) returned 1 [0071.130] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\ABV8L7MY\\BBEdMci[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\abv8l7my\\bbedmci[1].jpg"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\ABV8L7MY\\BBEdMci[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\abv8l7my\\bbedmci[1].jpg")) returned 1 [0071.130] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\ABV8L7MY\\BBEdSLV[1].jpg", nBufferLength=0x105, lpBuffer=0x31dec4, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\ABV8L7MY\\BBEdSLV[1].jpg", lpFilePart=0x0) returned 0x7e [0071.130] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e3b8) returned 1 [0071.130] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\ABV8L7MY\\BBEdSLV[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\abv8l7my\\bbedslv[1].jpg"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x178 [0071.131] GetFileType (hFile=0x178) returned 0x1 [0071.131] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e3b4) returned 1 [0071.131] GetFileType (hFile=0x178) returned 0x1 [0071.131] GetFileSize (in: hFile=0x178, lpFileSizeHigh=0x31e4c0 | out: lpFileSizeHigh=0x31e4c0*=0x0) returned 0x2a48 [0071.131] ReadFile (in: hFile=0x178, lpBuffer=0x26bda64, nNumberOfBytesToRead=0x2a48, lpNumberOfBytesRead=0x31e46c, lpOverlapped=0x0 | out: lpBuffer=0x26bda64*, lpNumberOfBytesRead=0x31e46c*=0x2a48, lpOverlapped=0x0) returned 1 [0071.132] CloseHandle (hObject=0x178) returned 1 [0071.146] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\ABV8L7MY\\BBEdSLV[1].jpg", nBufferLength=0x105, lpBuffer=0x31deb0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\ABV8L7MY\\BBEdSLV[1].jpg", lpFilePart=0x0) returned 0x7e [0071.146] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e3a4) returned 1 [0071.146] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\ABV8L7MY\\BBEdSLV[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\abv8l7my\\bbedslv[1].jpg"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x178 [0071.147] GetFileType (hFile=0x178) returned 0x1 [0071.147] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e3a0) returned 1 [0071.147] GetFileType (hFile=0x178) returned 0x1 [0071.147] WriteFile (in: hFile=0x178, lpBuffer=0x2717bd8*, nNumberOfBytesToWrite=0x2a50, lpNumberOfBytesWritten=0x31e460, lpOverlapped=0x0 | out: lpBuffer=0x2717bd8*, lpNumberOfBytesWritten=0x31e460*=0x2a50, lpOverlapped=0x0) returned 1 [0071.148] CloseHandle (hObject=0x178) returned 1 [0071.148] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\ABV8L7MY\\BBEdSLV[1].jpg", nBufferLength=0x105, lpBuffer=0x31dfe4, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\ABV8L7MY\\BBEdSLV[1].jpg", lpFilePart=0x0) returned 0x7e [0071.148] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\ABV8L7MY\\BBEdSLV[1].jpg", nBufferLength=0x105, lpBuffer=0x31dfe4, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\ABV8L7MY\\BBEdSLV[1].jpg", lpFilePart=0x0) returned 0x7e [0071.148] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e444) returned 1 [0071.149] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\ABV8L7MY\\BBEdSLV[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\abv8l7my\\bbedslv[1].jpg"), fInfoLevelId=0x0, lpFileInformation=0x31e4c0 | out: lpFileInformation=0x31e4c0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x4580a770, ftCreationTime.dwHighDateTime=0x1d2faf3, ftLastAccessTime.dwLowDateTime=0x4580a770, ftLastAccessTime.dwHighDateTime=0x1d2faf3, ftLastWriteTime.dwLowDateTime=0xdd921a0, ftLastWriteTime.dwHighDateTime=0x1d6eb7f, nFileSizeHigh=0x0, nFileSizeLow=0x2a50)) returned 1 [0071.149] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e440) returned 1 [0071.149] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\ABV8L7MY\\BBEdSLV[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\abv8l7my\\bbedslv[1].jpg"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\ABV8L7MY\\BBEdSLV[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\abv8l7my\\bbedslv[1].jpg")) returned 1 [0071.149] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\ABV8L7MY\\BBEe2Pd[1].jpg", nBufferLength=0x105, lpBuffer=0x31dec4, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\ABV8L7MY\\BBEe2Pd[1].jpg", lpFilePart=0x0) returned 0x7e [0071.149] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e3b8) returned 1 [0071.149] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\ABV8L7MY\\BBEe2Pd[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\abv8l7my\\bbee2pd[1].jpg"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x178 [0071.150] GetFileType (hFile=0x178) returned 0x1 [0071.150] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e3b4) returned 1 [0071.150] GetFileType (hFile=0x178) returned 0x1 [0071.150] GetFileSize (in: hFile=0x178, lpFileSizeHigh=0x31e4c0 | out: lpFileSizeHigh=0x31e4c0*=0x0) returned 0x87f [0071.150] ReadFile (in: hFile=0x178, lpBuffer=0x271b418, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x31e46c, lpOverlapped=0x0 | out: lpBuffer=0x271b418*, lpNumberOfBytesRead=0x31e46c*=0x87f, lpOverlapped=0x0) returned 1 [0071.152] CloseHandle (hObject=0x178) returned 1 [0071.165] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\ABV8L7MY\\BBEe2Pd[1].jpg", nBufferLength=0x105, lpBuffer=0x31deb0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\ABV8L7MY\\BBEe2Pd[1].jpg", lpFilePart=0x0) returned 0x7e [0071.165] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e3a4) returned 1 [0071.165] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\ABV8L7MY\\BBEe2Pd[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\abv8l7my\\bbee2pd[1].jpg"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x178 [0071.166] GetFileType (hFile=0x178) returned 0x1 [0071.166] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e3a0) returned 1 [0071.166] GetFileType (hFile=0x178) returned 0x1 [0071.166] WriteFile (in: hFile=0x178, lpBuffer=0x276be20*, nNumberOfBytesToWrite=0x880, lpNumberOfBytesWritten=0x31e434, lpOverlapped=0x0 | out: lpBuffer=0x276be20*, lpNumberOfBytesWritten=0x31e434*=0x880, lpOverlapped=0x0) returned 1 [0071.167] CloseHandle (hObject=0x178) returned 1 [0071.167] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\ABV8L7MY\\BBEe2Pd[1].jpg", nBufferLength=0x105, lpBuffer=0x31dfe4, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\ABV8L7MY\\BBEe2Pd[1].jpg", lpFilePart=0x0) returned 0x7e [0071.167] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\ABV8L7MY\\BBEe2Pd[1].jpg", nBufferLength=0x105, lpBuffer=0x31dfe4, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\ABV8L7MY\\BBEe2Pd[1].jpg", lpFilePart=0x0) returned 0x7e [0071.168] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e444) returned 1 [0071.168] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\ABV8L7MY\\BBEe2Pd[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\abv8l7my\\bbee2pd[1].jpg"), fInfoLevelId=0x0, lpFileInformation=0x31e4c0 | out: lpFileInformation=0x31e4c0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x458c8e50, ftCreationTime.dwHighDateTime=0x1d2faf3, ftLastAccessTime.dwLowDateTime=0x458c8e50, ftLastAccessTime.dwHighDateTime=0x1d2faf3, ftLastWriteTime.dwLowDateTime=0xddde460, ftLastWriteTime.dwHighDateTime=0x1d6eb7f, nFileSizeHigh=0x0, nFileSizeLow=0x880)) returned 1 [0071.168] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e440) returned 1 [0071.168] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\ABV8L7MY\\BBEe2Pd[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\abv8l7my\\bbee2pd[1].jpg"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\ABV8L7MY\\BBEe2Pd[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\abv8l7my\\bbee2pd[1].jpg")) returned 1 [0071.168] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\ABV8L7MY\\BBEe4Oo[1].png", nBufferLength=0x105, lpBuffer=0x31dec4, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\ABV8L7MY\\BBEe4Oo[1].png", lpFilePart=0x0) returned 0x7e [0071.168] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e3b8) returned 1 [0071.168] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\ABV8L7MY\\BBEe4Oo[1].png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\abv8l7my\\bbee4oo[1].png"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x178 [0071.169] GetFileType (hFile=0x178) returned 0x1 [0071.169] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e3b4) returned 1 [0071.169] GetFileType (hFile=0x178) returned 0x1 [0071.169] GetFileSize (in: hFile=0x178, lpFileSizeHigh=0x31e4c0 | out: lpFileSizeHigh=0x31e4c0*=0x0) returned 0x3faf [0071.169] ReadFile (in: hFile=0x178, lpBuffer=0x276d1f0, nNumberOfBytesToRead=0x3faf, lpNumberOfBytesRead=0x31e46c, lpOverlapped=0x0 | out: lpBuffer=0x276d1f0*, lpNumberOfBytesRead=0x31e46c*=0x3faf, lpOverlapped=0x0) returned 1 [0071.171] CloseHandle (hObject=0x178) returned 1 [0071.184] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\ABV8L7MY\\BBEe4Oo[1].png", nBufferLength=0x105, lpBuffer=0x31deb0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\ABV8L7MY\\BBEe4Oo[1].png", lpFilePart=0x0) returned 0x7e [0071.184] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e3a4) returned 1 [0071.184] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\ABV8L7MY\\BBEe4Oo[1].png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\abv8l7my\\bbee4oo[1].png"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x178 [0071.185] GetFileType (hFile=0x178) returned 0x1 [0071.185] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e3a0) returned 1 [0071.185] GetFileType (hFile=0x178) returned 0x1 [0071.185] WriteFile (in: hFile=0x178, lpBuffer=0x27cde48*, nNumberOfBytesToWrite=0x3fb0, lpNumberOfBytesWritten=0x31e460, lpOverlapped=0x0 | out: lpBuffer=0x27cde48*, lpNumberOfBytesWritten=0x31e460*=0x3fb0, lpOverlapped=0x0) returned 1 [0071.186] CloseHandle (hObject=0x178) returned 1 [0071.186] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\ABV8L7MY\\BBEe4Oo[1].png", nBufferLength=0x105, lpBuffer=0x31dfe4, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\ABV8L7MY\\BBEe4Oo[1].png", lpFilePart=0x0) returned 0x7e [0071.186] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\ABV8L7MY\\BBEe4Oo[1].png", nBufferLength=0x105, lpBuffer=0x31dfe4, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\ABV8L7MY\\BBEe4Oo[1].png", lpFilePart=0x0) returned 0x7e [0071.186] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e444) returned 1 [0071.187] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\ABV8L7MY\\BBEe4Oo[1].png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\abv8l7my\\bbee4oo[1].png"), fInfoLevelId=0x0, lpFileInformation=0x31e4c0 | out: lpFileInformation=0x31e4c0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x4587cb90, ftCreationTime.dwHighDateTime=0x1d2faf3, ftLastAccessTime.dwLowDateTime=0x4587cb90, ftLastAccessTime.dwHighDateTime=0x1d2faf3, ftLastWriteTime.dwLowDateTime=0xde045c0, ftLastWriteTime.dwHighDateTime=0x1d6eb7f, nFileSizeHigh=0x0, nFileSizeLow=0x3fb0)) returned 1 [0071.187] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e440) returned 1 [0071.187] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\ABV8L7MY\\BBEe4Oo[1].png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\abv8l7my\\bbee4oo[1].png"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\ABV8L7MY\\BBEe4Oo[1].png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\abv8l7my\\bbee4oo[1].png")) returned 1 [0071.187] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\ABV8L7MY\\BBEe6Ew[1].jpg", nBufferLength=0x105, lpBuffer=0x31dec4, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\ABV8L7MY\\BBEe6Ew[1].jpg", lpFilePart=0x0) returned 0x7e [0071.187] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e3b8) returned 1 [0071.187] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\ABV8L7MY\\BBEe6Ew[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\abv8l7my\\bbee6ew[1].jpg"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x178 [0071.188] GetFileType (hFile=0x178) returned 0x1 [0071.188] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e3b4) returned 1 [0071.188] GetFileType (hFile=0x178) returned 0x1 [0071.188] GetFileSize (in: hFile=0x178, lpFileSizeHigh=0x31e4c0 | out: lpFileSizeHigh=0x31e4c0*=0x0) returned 0xaa9 [0071.188] ReadFile (in: hFile=0x178, lpBuffer=0x27d2e14, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x31e46c, lpOverlapped=0x0 | out: lpBuffer=0x27d2e14*, lpNumberOfBytesRead=0x31e46c*=0xaa9, lpOverlapped=0x0) returned 1 [0071.235] CloseHandle (hObject=0x178) returned 1 [0071.248] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\ABV8L7MY\\BBEe6Ew[1].jpg", nBufferLength=0x105, lpBuffer=0x31deb0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\ABV8L7MY\\BBEe6Ew[1].jpg", lpFilePart=0x0) returned 0x7e [0071.248] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e3a4) returned 1 [0071.248] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\ABV8L7MY\\BBEe6Ew[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\abv8l7my\\bbee6ew[1].jpg"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x178 [0071.249] GetFileType (hFile=0x178) returned 0x1 [0071.249] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e3a0) returned 1 [0071.249] GetFileType (hFile=0x178) returned 0x1 [0071.249] WriteFile (in: hFile=0x178, lpBuffer=0x2824310*, nNumberOfBytesToWrite=0xab0, lpNumberOfBytesWritten=0x31e434, lpOverlapped=0x0 | out: lpBuffer=0x2824310*, lpNumberOfBytesWritten=0x31e434*=0xab0, lpOverlapped=0x0) returned 1 [0071.250] CloseHandle (hObject=0x178) returned 1 [0071.250] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\ABV8L7MY\\BBEe6Ew[1].jpg", nBufferLength=0x105, lpBuffer=0x31dfe4, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\ABV8L7MY\\BBEe6Ew[1].jpg", lpFilePart=0x0) returned 0x7e [0071.250] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\ABV8L7MY\\BBEe6Ew[1].jpg", nBufferLength=0x105, lpBuffer=0x31dfe4, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\ABV8L7MY\\BBEe6Ew[1].jpg", lpFilePart=0x0) returned 0x7e [0071.250] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e444) returned 1 [0071.251] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\ABV8L7MY\\BBEe6Ew[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\abv8l7my\\bbee6ew[1].jpg"), fInfoLevelId=0x0, lpFileInformation=0x31e4c0 | out: lpFileInformation=0x31e4c0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x45b505b0, ftCreationTime.dwHighDateTime=0x1d2faf3, ftLastAccessTime.dwLowDateTime=0x45b505b0, ftLastAccessTime.dwHighDateTime=0x1d2faf3, ftLastWriteTime.dwLowDateTime=0xde9cb40, ftLastWriteTime.dwHighDateTime=0x1d6eb7f, nFileSizeHigh=0x0, nFileSizeLow=0xab0)) returned 1 [0071.251] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e440) returned 1 [0071.251] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\ABV8L7MY\\BBEe6Ew[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\abv8l7my\\bbee6ew[1].jpg"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\ABV8L7MY\\BBEe6Ew[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\abv8l7my\\bbee6ew[1].jpg")) returned 1 [0071.251] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\ABV8L7MY\\BBEeFp3[1].jpg", nBufferLength=0x105, lpBuffer=0x31dec4, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\ABV8L7MY\\BBEeFp3[1].jpg", lpFilePart=0x0) returned 0x7e [0071.251] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e3b8) returned 1 [0071.251] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\ABV8L7MY\\BBEeFp3[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\abv8l7my\\bbeefp3[1].jpg"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x178 [0071.251] GetFileType (hFile=0x178) returned 0x1 [0071.251] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e3b4) returned 1 [0071.251] GetFileType (hFile=0x178) returned 0x1 [0071.251] GetFileSize (in: hFile=0x178, lpFileSizeHigh=0x31e4c0 | out: lpFileSizeHigh=0x31e4c0*=0x0) returned 0x1d26 [0071.252] ReadFile (in: hFile=0x178, lpBuffer=0x28256e0, nNumberOfBytesToRead=0x1d26, lpNumberOfBytesRead=0x31e46c, lpOverlapped=0x0 | out: lpBuffer=0x28256e0*, lpNumberOfBytesRead=0x31e46c*=0x1d26, lpOverlapped=0x0) returned 1 [0071.253] CloseHandle (hObject=0x178) returned 1 [0071.304] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\ABV8L7MY\\BBEeFp3[1].jpg", nBufferLength=0x105, lpBuffer=0x31deb0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\ABV8L7MY\\BBEeFp3[1].jpg", lpFilePart=0x0) returned 0x7e [0071.304] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e3a4) returned 1 [0071.304] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\ABV8L7MY\\BBEeFp3[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\abv8l7my\\bbeefp3[1].jpg"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x178 [0071.305] GetFileType (hFile=0x178) returned 0x1 [0071.305] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e3a0) returned 1 [0071.305] GetFileType (hFile=0x178) returned 0x1 [0071.305] WriteFile (in: hFile=0x178, lpBuffer=0x268062c*, nNumberOfBytesToWrite=0x1d30, lpNumberOfBytesWritten=0x31e460, lpOverlapped=0x0 | out: lpBuffer=0x268062c*, lpNumberOfBytesWritten=0x31e460*=0x1d30, lpOverlapped=0x0) returned 1 [0071.306] CloseHandle (hObject=0x178) returned 1 [0071.306] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\ABV8L7MY\\BBEeFp3[1].jpg", nBufferLength=0x105, lpBuffer=0x31dfe4, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\ABV8L7MY\\BBEeFp3[1].jpg", lpFilePart=0x0) returned 0x7e [0071.307] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\ABV8L7MY\\BBEeFp3[1].jpg", nBufferLength=0x105, lpBuffer=0x31dfe4, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\ABV8L7MY\\BBEeFp3[1].jpg", lpFilePart=0x0) returned 0x7e [0071.307] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e444) returned 1 [0071.307] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\ABV8L7MY\\BBEeFp3[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\abv8l7my\\bbeefp3[1].jpg"), fInfoLevelId=0x0, lpFileInformation=0x31e4c0 | out: lpFileInformation=0x31e4c0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x454c4930, ftCreationTime.dwHighDateTime=0x1d2faf3, ftLastAccessTime.dwLowDateTime=0x454c4930, ftLastAccessTime.dwHighDateTime=0x1d2faf3, ftLastWriteTime.dwLowDateTime=0xdf0ef60, ftLastWriteTime.dwHighDateTime=0x1d6eb7f, nFileSizeHigh=0x0, nFileSizeLow=0x1d30)) returned 1 [0071.307] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e440) returned 1 [0071.307] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\ABV8L7MY\\BBEeFp3[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\abv8l7my\\bbeefp3[1].jpg"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\ABV8L7MY\\BBEeFp3[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\abv8l7my\\bbeefp3[1].jpg")) returned 1 [0071.307] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\ABV8L7MY\\BBEeGwU[1].jpg", nBufferLength=0x105, lpBuffer=0x31dec4, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\ABV8L7MY\\BBEeGwU[1].jpg", lpFilePart=0x0) returned 0x7e [0071.307] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e3b8) returned 1 [0071.307] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\ABV8L7MY\\BBEeGwU[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\abv8l7my\\bbeegwu[1].jpg"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x178 [0071.307] GetFileType (hFile=0x178) returned 0x1 [0071.307] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e3b4) returned 1 [0071.308] GetFileType (hFile=0x178) returned 0x1 [0071.308] GetFileSize (in: hFile=0x178, lpFileSizeHigh=0x31e4c0 | out: lpFileSizeHigh=0x31e4c0*=0x0) returned 0x780 [0071.308] ReadFile (in: hFile=0x178, lpBuffer=0x268304c, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x31e46c, lpOverlapped=0x0 | out: lpBuffer=0x268304c*, lpNumberOfBytesRead=0x31e46c*=0x780, lpOverlapped=0x0) returned 1 [0071.309] CloseHandle (hObject=0x178) returned 1 [0071.323] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\ABV8L7MY\\BBEeGwU[1].jpg", nBufferLength=0x105, lpBuffer=0x31deb0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\ABV8L7MY\\BBEeGwU[1].jpg", lpFilePart=0x0) returned 0x7e [0071.323] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e3a4) returned 1 [0071.323] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\ABV8L7MY\\BBEeGwU[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\abv8l7my\\bbeegwu[1].jpg"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x178 [0071.324] GetFileType (hFile=0x178) returned 0x1 [0071.324] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e3a0) returned 1 [0071.324] GetFileType (hFile=0x178) returned 0x1 [0071.324] WriteFile (in: hFile=0x178, lpBuffer=0x26d370c*, nNumberOfBytesToWrite=0x790, lpNumberOfBytesWritten=0x31e434, lpOverlapped=0x0 | out: lpBuffer=0x26d370c*, lpNumberOfBytesWritten=0x31e434*=0x790, lpOverlapped=0x0) returned 1 [0071.326] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\ABV8L7MY\\BBEeGwU[1].jpg", nBufferLength=0x105, lpBuffer=0x31dfe4, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\ABV8L7MY\\BBEeGwU[1].jpg", lpFilePart=0x0) returned 0x7e [0071.326] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\ABV8L7MY\\BBEeGwU[1].jpg", nBufferLength=0x105, lpBuffer=0x31dfe4, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\ABV8L7MY\\BBEeGwU[1].jpg", lpFilePart=0x0) returned 0x7e [0071.326] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e444) returned 1 [0071.326] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\ABV8L7MY\\BBEeGwU[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\abv8l7my\\bbeegwu[1].jpg"), fInfoLevelId=0x0, lpFileInformation=0x31e4c0 | out: lpFileInformation=0x31e4c0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xbe3bfdf0, ftCreationTime.dwHighDateTime=0x1d2faf2, ftLastAccessTime.dwLowDateTime=0xbe3bfdf0, ftLastAccessTime.dwHighDateTime=0x1d2faf2, ftLastWriteTime.dwLowDateTime=0xdf5b220, ftLastWriteTime.dwHighDateTime=0x1d6eb7f, nFileSizeHigh=0x0, nFileSizeLow=0x790)) returned 1 [0071.326] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e440) returned 1 [0071.326] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\ABV8L7MY\\BBEeGwU[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\abv8l7my\\bbeegwu[1].jpg"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\ABV8L7MY\\BBEeGwU[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\abv8l7my\\bbeegwu[1].jpg")) returned 1 [0071.327] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\ABV8L7MY\\BBEeUg0[1].jpg", nBufferLength=0x105, lpBuffer=0x31dec4, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\ABV8L7MY\\BBEeUg0[1].jpg", lpFilePart=0x0) returned 0x7e [0071.327] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e3b8) returned 1 [0071.327] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\ABV8L7MY\\BBEeUg0[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\abv8l7my\\bbeeug0[1].jpg"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x178 [0071.327] GetFileType (hFile=0x178) returned 0x1 [0071.327] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e3b4) returned 1 [0071.327] GetFileType (hFile=0x178) returned 0x1 [0071.327] GetFileSize (in: hFile=0x178, lpFileSizeHigh=0x31e4c0 | out: lpFileSizeHigh=0x31e4c0*=0x0) returned 0x7be [0071.327] ReadFile (in: hFile=0x178, lpBuffer=0x26d52a8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x31e46c, lpOverlapped=0x0 | out: lpBuffer=0x26d52a8*, lpNumberOfBytesRead=0x31e46c*=0x7be, lpOverlapped=0x0) returned 1 [0071.342] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\ABV8L7MY\\BBEeUg0[1].jpg", nBufferLength=0x105, lpBuffer=0x31deb0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\ABV8L7MY\\BBEeUg0[1].jpg", lpFilePart=0x0) returned 0x7e [0071.342] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e3a4) returned 1 [0071.342] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\ABV8L7MY\\BBEeUg0[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\abv8l7my\\bbeeug0[1].jpg"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x178 [0071.343] GetFileType (hFile=0x178) returned 0x1 [0071.343] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e3a0) returned 1 [0071.343] GetFileType (hFile=0x178) returned 0x1 [0071.343] WriteFile (in: hFile=0x178, lpBuffer=0x27258f0*, nNumberOfBytesToWrite=0x7c0, lpNumberOfBytesWritten=0x31e434, lpOverlapped=0x0 | out: lpBuffer=0x27258f0*, lpNumberOfBytesWritten=0x31e434*=0x7c0, lpOverlapped=0x0) returned 1 [0071.344] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\ABV8L7MY\\BBEeUg0[1].jpg", nBufferLength=0x105, lpBuffer=0x31dfe4, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\ABV8L7MY\\BBEeUg0[1].jpg", lpFilePart=0x0) returned 0x7e [0071.344] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\ABV8L7MY\\BBEeUg0[1].jpg", nBufferLength=0x105, lpBuffer=0x31dfe4, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\ABV8L7MY\\BBEeUg0[1].jpg", lpFilePart=0x0) returned 0x7e [0071.344] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e444) returned 1 [0071.344] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\ABV8L7MY\\BBEeUg0[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\abv8l7my\\bbeeug0[1].jpg"), fInfoLevelId=0x0, lpFileInformation=0x31e4c0 | out: lpFileInformation=0x31e4c0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x45b505b0, ftCreationTime.dwHighDateTime=0x1d2faf3, ftLastAccessTime.dwLowDateTime=0x45b505b0, ftLastAccessTime.dwHighDateTime=0x1d2faf3, ftLastWriteTime.dwLowDateTime=0xdf81380, ftLastWriteTime.dwHighDateTime=0x1d6eb7f, nFileSizeHigh=0x0, nFileSizeLow=0x7c0)) returned 1 [0071.344] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e440) returned 1 [0071.344] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\ABV8L7MY\\BBEeUg0[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\abv8l7my\\bbeeug0[1].jpg"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\ABV8L7MY\\BBEeUg0[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\abv8l7my\\bbeeug0[1].jpg")) returned 1 [0071.344] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\ABV8L7MY\\BBEeZnr[1].jpg", nBufferLength=0x105, lpBuffer=0x31dec4, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\ABV8L7MY\\BBEeZnr[1].jpg", lpFilePart=0x0) returned 0x7e [0071.345] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e3b8) returned 1 [0071.345] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\ABV8L7MY\\BBEeZnr[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\abv8l7my\\bbeeznr[1].jpg"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x178 [0071.345] GetFileType (hFile=0x178) returned 0x1 [0071.345] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e3b4) returned 1 [0071.345] GetFileType (hFile=0x178) returned 0x1 [0071.345] GetFileSize (in: hFile=0x178, lpFileSizeHigh=0x31e4c0 | out: lpFileSizeHigh=0x31e4c0*=0x0) returned 0x3a2a [0071.345] ReadFile (in: hFile=0x178, lpBuffer=0x2726cc0, nNumberOfBytesToRead=0x3a2a, lpNumberOfBytesRead=0x31e46c, lpOverlapped=0x0 | out: lpBuffer=0x2726cc0*, lpNumberOfBytesRead=0x31e46c*=0x3a2a, lpOverlapped=0x0) returned 1 [0071.360] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\ABV8L7MY\\BBEeZnr[1].jpg", nBufferLength=0x105, lpBuffer=0x31deb0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\ABV8L7MY\\BBEeZnr[1].jpg", lpFilePart=0x0) returned 0x7e [0071.360] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e3a4) returned 1 [0071.360] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\ABV8L7MY\\BBEeZnr[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\abv8l7my\\bbeeznr[1].jpg"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x178 [0071.361] GetFileType (hFile=0x178) returned 0x1 [0071.361] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e3a0) returned 1 [0071.361] GetFileType (hFile=0x178) returned 0x1 [0071.361] WriteFile (in: hFile=0x178, lpBuffer=0x2785d98*, nNumberOfBytesToWrite=0x3a30, lpNumberOfBytesWritten=0x31e460, lpOverlapped=0x0 | out: lpBuffer=0x2785d98*, lpNumberOfBytesWritten=0x31e460*=0x3a30, lpOverlapped=0x0) returned 1 [0071.362] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\ABV8L7MY\\BBEeZnr[1].jpg", nBufferLength=0x105, lpBuffer=0x31dfe4, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\ABV8L7MY\\BBEeZnr[1].jpg", lpFilePart=0x0) returned 0x7e [0071.362] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\ABV8L7MY\\BBEeZnr[1].jpg", nBufferLength=0x105, lpBuffer=0x31dfe4, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\ABV8L7MY\\BBEeZnr[1].jpg", lpFilePart=0x0) returned 0x7e [0071.362] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e444) returned 1 [0071.362] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\ABV8L7MY\\BBEeZnr[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\abv8l7my\\bbeeznr[1].jpg"), fInfoLevelId=0x0, lpFileInformation=0x31e4c0 | out: lpFileInformation=0x31e4c0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x459ad690, ftCreationTime.dwHighDateTime=0x1d2faf3, ftLastAccessTime.dwLowDateTime=0x459ad690, ftLastAccessTime.dwHighDateTime=0x1d2faf3, ftLastWriteTime.dwLowDateTime=0xdfa74e0, ftLastWriteTime.dwHighDateTime=0x1d6eb7f, nFileSizeHigh=0x0, nFileSizeLow=0x3a30)) returned 1 [0071.363] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e440) returned 1 [0071.363] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\ABV8L7MY\\BBEeZnr[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\abv8l7my\\bbeeznr[1].jpg"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\ABV8L7MY\\BBEeZnr[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\abv8l7my\\bbeeznr[1].jpg")) returned 1 [0071.363] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\ABV8L7MY\\BBEf5Lq[1].jpg", nBufferLength=0x105, lpBuffer=0x31dec4, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\ABV8L7MY\\BBEf5Lq[1].jpg", lpFilePart=0x0) returned 0x7e [0071.363] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e3b8) returned 1 [0071.363] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\ABV8L7MY\\BBEf5Lq[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\abv8l7my\\bbef5lq[1].jpg"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x178 [0071.363] GetFileType (hFile=0x178) returned 0x1 [0071.363] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e3b4) returned 1 [0071.363] GetFileType (hFile=0x178) returned 0x1 [0071.363] GetFileSize (in: hFile=0x178, lpFileSizeHigh=0x31e4c0 | out: lpFileSizeHigh=0x31e4c0*=0x0) returned 0x2f76 [0071.363] ReadFile (in: hFile=0x178, lpBuffer=0x2789d2c, nNumberOfBytesToRead=0x2f76, lpNumberOfBytesRead=0x31e46c, lpOverlapped=0x0 | out: lpBuffer=0x2789d2c*, lpNumberOfBytesRead=0x31e46c*=0x2f76, lpOverlapped=0x0) returned 1 [0071.378] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\ABV8L7MY\\BBEf5Lq[1].jpg", nBufferLength=0x105, lpBuffer=0x31deb0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\ABV8L7MY\\BBEf5Lq[1].jpg", lpFilePart=0x0) returned 0x7e [0071.378] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e3a4) returned 1 [0071.378] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\ABV8L7MY\\BBEf5Lq[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\abv8l7my\\bbef5lq[1].jpg"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x178 [0071.379] GetFileType (hFile=0x178) returned 0x1 [0071.379] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e3a0) returned 1 [0071.379] GetFileType (hFile=0x178) returned 0x1 [0071.379] WriteFile (in: hFile=0x178, lpBuffer=0x27e5894*, nNumberOfBytesToWrite=0x2f80, lpNumberOfBytesWritten=0x31e460, lpOverlapped=0x0 | out: lpBuffer=0x27e5894*, lpNumberOfBytesWritten=0x31e460*=0x2f80, lpOverlapped=0x0) returned 1 [0071.380] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\ABV8L7MY\\BBEf5Lq[1].jpg", nBufferLength=0x105, lpBuffer=0x31dfe4, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\ABV8L7MY\\BBEf5Lq[1].jpg", lpFilePart=0x0) returned 0x7e [0071.380] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\ABV8L7MY\\BBEf5Lq[1].jpg", nBufferLength=0x105, lpBuffer=0x31dfe4, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\ABV8L7MY\\BBEf5Lq[1].jpg", lpFilePart=0x0) returned 0x7e [0071.380] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e444) returned 1 [0071.380] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\ABV8L7MY\\BBEf5Lq[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\abv8l7my\\bbef5lq[1].jpg"), fInfoLevelId=0x0, lpFileInformation=0x31e4c0 | out: lpFileInformation=0x31e4c0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x457e4610, ftCreationTime.dwHighDateTime=0x1d2faf3, ftLastAccessTime.dwLowDateTime=0x457e4610, ftLastAccessTime.dwHighDateTime=0x1d2faf3, ftLastWriteTime.dwLowDateTime=0xdfcd640, ftLastWriteTime.dwHighDateTime=0x1d6eb7f, nFileSizeHigh=0x0, nFileSizeLow=0x2f80)) returned 1 [0071.380] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e440) returned 1 [0071.380] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\ABV8L7MY\\BBEf5Lq[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\abv8l7my\\bbef5lq[1].jpg"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\ABV8L7MY\\BBEf5Lq[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\abv8l7my\\bbef5lq[1].jpg")) returned 1 [0071.381] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\ABV8L7MY\\BBEfwtU[1].jpg", nBufferLength=0x105, lpBuffer=0x31dec4, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\ABV8L7MY\\BBEfwtU[1].jpg", lpFilePart=0x0) returned 0x7e [0071.381] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e3b8) returned 1 [0071.381] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\ABV8L7MY\\BBEfwtU[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\abv8l7my\\bbefwtu[1].jpg"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x178 [0071.382] GetFileType (hFile=0x178) returned 0x1 [0071.382] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e3b4) returned 1 [0071.382] GetFileType (hFile=0x178) returned 0x1 [0071.382] GetFileSize (in: hFile=0x178, lpFileSizeHigh=0x31e4c0 | out: lpFileSizeHigh=0x31e4c0*=0x0) returned 0x786 [0071.382] ReadFile (in: hFile=0x178, lpBuffer=0x27e950c, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x31e46c, lpOverlapped=0x0 | out: lpBuffer=0x27e950c*, lpNumberOfBytesRead=0x31e46c*=0x786, lpOverlapped=0x0) returned 1 [0071.396] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\ABV8L7MY\\BBEfwtU[1].jpg", nBufferLength=0x105, lpBuffer=0x31deb0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\ABV8L7MY\\BBEfwtU[1].jpg", lpFilePart=0x0) returned 0x7e [0071.397] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e3a4) returned 1 [0071.397] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\ABV8L7MY\\BBEfwtU[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\abv8l7my\\bbefwtu[1].jpg"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x178 [0071.397] GetFileType (hFile=0x178) returned 0x1 [0071.397] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e3a0) returned 1 [0071.398] GetFileType (hFile=0x178) returned 0x1 [0071.398] WriteFile (in: hFile=0x178, lpBuffer=0x2839a6c*, nNumberOfBytesToWrite=0x790, lpNumberOfBytesWritten=0x31e434, lpOverlapped=0x0 | out: lpBuffer=0x2839a6c*, lpNumberOfBytesWritten=0x31e434*=0x790, lpOverlapped=0x0) returned 1 [0071.398] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\ABV8L7MY\\BBEfwtU[1].jpg", nBufferLength=0x105, lpBuffer=0x31dfe4, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\ABV8L7MY\\BBEfwtU[1].jpg", lpFilePart=0x0) returned 0x7e [0071.399] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\ABV8L7MY\\BBEfwtU[1].jpg", nBufferLength=0x105, lpBuffer=0x31dfe4, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\ABV8L7MY\\BBEfwtU[1].jpg", lpFilePart=0x0) returned 0x7e [0071.399] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e444) returned 1 [0071.399] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\ABV8L7MY\\BBEfwtU[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\abv8l7my\\bbefwtu[1].jpg"), fInfoLevelId=0x0, lpFileInformation=0x31e4c0 | out: lpFileInformation=0x31e4c0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x4574c090, ftCreationTime.dwHighDateTime=0x1d2faf3, ftLastAccessTime.dwLowDateTime=0x4574c090, ftLastAccessTime.dwHighDateTime=0x1d2faf3, ftLastWriteTime.dwLowDateTime=0xdff37a0, ftLastWriteTime.dwHighDateTime=0x1d6eb7f, nFileSizeHigh=0x0, nFileSizeLow=0x790)) returned 1 [0071.399] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e440) returned 1 [0071.399] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\ABV8L7MY\\BBEfwtU[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\abv8l7my\\bbefwtu[1].jpg"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\ABV8L7MY\\BBEfwtU[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\abv8l7my\\bbefwtu[1].jpg")) returned 1 [0071.399] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\ABV8L7MY\\BBEfzSd[1].jpg", nBufferLength=0x105, lpBuffer=0x31dec4, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\ABV8L7MY\\BBEfzSd[1].jpg", lpFilePart=0x0) returned 0x7e [0071.399] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e3b8) returned 1 [0071.399] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\ABV8L7MY\\BBEfzSd[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\abv8l7my\\bbefzsd[1].jpg"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x178 [0071.400] GetFileType (hFile=0x178) returned 0x1 [0071.400] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e3b4) returned 1 [0071.400] GetFileType (hFile=0x178) returned 0x1 [0071.400] GetFileSize (in: hFile=0x178, lpFileSizeHigh=0x31e4c0 | out: lpFileSizeHigh=0x31e4c0*=0x0) returned 0xa07 [0071.400] ReadFile (in: hFile=0x178, lpBuffer=0x283b850, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x31e46c, lpOverlapped=0x0 | out: lpBuffer=0x283b850*, lpNumberOfBytesRead=0x31e46c*=0xa07, lpOverlapped=0x0) returned 1 [0071.444] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\ABV8L7MY\\BBEfzSd[1].jpg", nBufferLength=0x105, lpBuffer=0x31deb0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\ABV8L7MY\\BBEfzSd[1].jpg", lpFilePart=0x0) returned 0x7e [0071.444] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e3a4) returned 1 [0071.444] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\ABV8L7MY\\BBEfzSd[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\abv8l7my\\bbefzsd[1].jpg"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x178 [0071.445] GetFileType (hFile=0x178) returned 0x1 [0071.445] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e3a0) returned 1 [0071.445] GetFileType (hFile=0x178) returned 0x1 [0071.445] WriteFile (in: hFile=0x178, lpBuffer=0x269131c*, nNumberOfBytesToWrite=0xa10, lpNumberOfBytesWritten=0x31e434, lpOverlapped=0x0 | out: lpBuffer=0x269131c*, lpNumberOfBytesWritten=0x31e434*=0xa10, lpOverlapped=0x0) returned 1 [0071.446] CloseHandle (hObject=0x178) returned 1 [0071.446] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\ABV8L7MY\\BBEfzSd[1].jpg", nBufferLength=0x105, lpBuffer=0x31dfe4, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\ABV8L7MY\\BBEfzSd[1].jpg", lpFilePart=0x0) returned 0x7e [0071.446] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\ABV8L7MY\\BBEfzSd[1].jpg", nBufferLength=0x105, lpBuffer=0x31dfe4, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\ABV8L7MY\\BBEfzSd[1].jpg", lpFilePart=0x0) returned 0x7e [0071.446] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e444) returned 1 [0071.446] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\ABV8L7MY\\BBEfzSd[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\abv8l7my\\bbefzsd[1].jpg"), fInfoLevelId=0x0, lpFileInformation=0x31e4c0 | out: lpFileInformation=0x31e4c0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x45798350, ftCreationTime.dwHighDateTime=0x1d2faf3, ftLastAccessTime.dwLowDateTime=0x45798350, ftLastAccessTime.dwHighDateTime=0x1d2faf3, ftLastWriteTime.dwLowDateTime=0xe065bc0, ftLastWriteTime.dwHighDateTime=0x1d6eb7f, nFileSizeHigh=0x0, nFileSizeLow=0xa10)) returned 1 [0071.446] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e440) returned 1 [0071.446] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\ABV8L7MY\\BBEfzSd[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\abv8l7my\\bbefzsd[1].jpg"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\ABV8L7MY\\BBEfzSd[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\abv8l7my\\bbefzsd[1].jpg")) returned 1 [0071.447] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\ABV8L7MY\\BBEgCuQ[1].jpg", nBufferLength=0x105, lpBuffer=0x31dec4, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\ABV8L7MY\\BBEgCuQ[1].jpg", lpFilePart=0x0) returned 0x7e [0071.447] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e3b8) returned 1 [0071.447] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\ABV8L7MY\\BBEgCuQ[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\abv8l7my\\bbegcuq[1].jpg"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x178 [0071.448] GetFileType (hFile=0x178) returned 0x1 [0071.448] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e3b4) returned 1 [0071.448] GetFileType (hFile=0x178) returned 0x1 [0071.448] GetFileSize (in: hFile=0x178, lpFileSizeHigh=0x31e4c0 | out: lpFileSizeHigh=0x31e4c0*=0x0) returned 0x1998 [0071.448] ReadFile (in: hFile=0x178, lpBuffer=0x26926ec, nNumberOfBytesToRead=0x1998, lpNumberOfBytesRead=0x31e46c, lpOverlapped=0x0 | out: lpBuffer=0x26926ec*, lpNumberOfBytesRead=0x31e46c*=0x1998, lpOverlapped=0x0) returned 1 [0071.449] CloseHandle (hObject=0x178) returned 1 [0071.463] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\ABV8L7MY\\BBEgCuQ[1].jpg", nBufferLength=0x105, lpBuffer=0x31deb0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\ABV8L7MY\\BBEgCuQ[1].jpg", lpFilePart=0x0) returned 0x7e [0071.463] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e3a4) returned 1 [0071.463] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\ABV8L7MY\\BBEgCuQ[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\abv8l7my\\bbegcuq[1].jpg"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x178 [0071.463] GetFileType (hFile=0x178) returned 0x1 [0071.464] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e3a0) returned 1 [0071.464] GetFileType (hFile=0x178) returned 0x1 [0071.464] WriteFile (in: hFile=0x178, lpBuffer=0x26e764c*, nNumberOfBytesToWrite=0x19a0, lpNumberOfBytesWritten=0x31e460, lpOverlapped=0x0 | out: lpBuffer=0x26e764c*, lpNumberOfBytesWritten=0x31e460*=0x19a0, lpOverlapped=0x0) returned 1 [0071.465] CloseHandle (hObject=0x178) returned 1 [0071.465] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\ABV8L7MY\\BBEgCuQ[1].jpg", nBufferLength=0x105, lpBuffer=0x31dfe4, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\ABV8L7MY\\BBEgCuQ[1].jpg", lpFilePart=0x0) returned 0x7e [0071.465] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\ABV8L7MY\\BBEgCuQ[1].jpg", nBufferLength=0x105, lpBuffer=0x31dfe4, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\ABV8L7MY\\BBEgCuQ[1].jpg", lpFilePart=0x0) returned 0x7e [0071.465] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e444) returned 1 [0071.465] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\ABV8L7MY\\BBEgCuQ[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\abv8l7my\\bbegcuq[1].jpg"), fInfoLevelId=0x0, lpFileInformation=0x31e4c0 | out: lpFileInformation=0x31e4c0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x454eaa90, ftCreationTime.dwHighDateTime=0x1d2faf3, ftLastAccessTime.dwLowDateTime=0x454eaa90, ftLastAccessTime.dwHighDateTime=0x1d2faf3, ftLastWriteTime.dwLowDateTime=0xe0b1e80, ftLastWriteTime.dwHighDateTime=0x1d6eb7f, nFileSizeHigh=0x0, nFileSizeLow=0x19a0)) returned 1 [0071.465] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e440) returned 1 [0071.465] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\ABV8L7MY\\BBEgCuQ[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\abv8l7my\\bbegcuq[1].jpg"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\ABV8L7MY\\BBEgCuQ[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\abv8l7my\\bbegcuq[1].jpg")) returned 1 [0071.466] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\ABV8L7MY\\BBEgHzB[1].jpg", nBufferLength=0x105, lpBuffer=0x31dec4, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\ABV8L7MY\\BBEgHzB[1].jpg", lpFilePart=0x0) returned 0x7e [0071.466] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e3b8) returned 1 [0071.466] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\ABV8L7MY\\BBEgHzB[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\abv8l7my\\bbeghzb[1].jpg"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x178 [0071.466] GetFileType (hFile=0x178) returned 0x1 [0071.466] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e3b4) returned 1 [0071.466] GetFileType (hFile=0x178) returned 0x1 [0071.466] GetFileSize (in: hFile=0x178, lpFileSizeHigh=0x31e4c0 | out: lpFileSizeHigh=0x31e4c0*=0x0) returned 0x1a65 [0071.466] ReadFile (in: hFile=0x178, lpBuffer=0x26e9550, nNumberOfBytesToRead=0x1a65, lpNumberOfBytesRead=0x31e46c, lpOverlapped=0x0 | out: lpBuffer=0x26e9550*, lpNumberOfBytesRead=0x31e46c*=0x1a65, lpOverlapped=0x0) returned 1 [0071.468] CloseHandle (hObject=0x178) returned 1 [0071.484] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\ABV8L7MY\\BBEgHzB[1].jpg", nBufferLength=0x105, lpBuffer=0x31deb0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\ABV8L7MY\\BBEgHzB[1].jpg", lpFilePart=0x0) returned 0x7e [0071.484] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e3a4) returned 1 [0071.484] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\ABV8L7MY\\BBEgHzB[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\abv8l7my\\bbeghzb[1].jpg"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x178 [0071.485] GetFileType (hFile=0x178) returned 0x1 [0071.485] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e3a0) returned 1 [0071.485] GetFileType (hFile=0x178) returned 0x1 [0071.485] WriteFile (in: hFile=0x178, lpBuffer=0x273e768*, nNumberOfBytesToWrite=0x1a70, lpNumberOfBytesWritten=0x31e460, lpOverlapped=0x0 | out: lpBuffer=0x273e768*, lpNumberOfBytesWritten=0x31e460*=0x1a70, lpOverlapped=0x0) returned 1 [0071.486] CloseHandle (hObject=0x178) returned 1 [0071.486] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\ABV8L7MY\\BBEgHzB[1].jpg", nBufferLength=0x105, lpBuffer=0x31dfe4, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\ABV8L7MY\\BBEgHzB[1].jpg", lpFilePart=0x0) returned 0x7e [0071.486] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\ABV8L7MY\\BBEgHzB[1].jpg", nBufferLength=0x105, lpBuffer=0x31dfe4, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\ABV8L7MY\\BBEgHzB[1].jpg", lpFilePart=0x0) returned 0x7e [0071.486] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e444) returned 1 [0071.486] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\ABV8L7MY\\BBEgHzB[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\abv8l7my\\bbeghzb[1].jpg"), fInfoLevelId=0x0, lpFileInformation=0x31e4c0 | out: lpFileInformation=0x31e4c0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x454c4930, ftCreationTime.dwHighDateTime=0x1d2faf3, ftLastAccessTime.dwLowDateTime=0x454c4930, ftLastAccessTime.dwHighDateTime=0x1d2faf3, ftLastWriteTime.dwLowDateTime=0xe0d7fe0, ftLastWriteTime.dwHighDateTime=0x1d6eb7f, nFileSizeHigh=0x0, nFileSizeLow=0x1a70)) returned 1 [0071.486] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e440) returned 1 [0071.486] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\ABV8L7MY\\BBEgHzB[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\abv8l7my\\bbeghzb[1].jpg"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\ABV8L7MY\\BBEgHzB[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\abv8l7my\\bbeghzb[1].jpg")) returned 1 [0071.487] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\ABV8L7MY\\BBEgIl2[1].jpg", nBufferLength=0x105, lpBuffer=0x31dec4, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\ABV8L7MY\\BBEgIl2[1].jpg", lpFilePart=0x0) returned 0x7e [0071.487] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e3b8) returned 1 [0071.487] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\ABV8L7MY\\BBEgIl2[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\abv8l7my\\bbegil2[1].jpg"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x178 [0071.487] GetFileType (hFile=0x178) returned 0x1 [0071.487] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e3b4) returned 1 [0071.487] GetFileType (hFile=0x178) returned 0x1 [0071.487] GetFileSize (in: hFile=0x178, lpFileSizeHigh=0x31e4c0 | out: lpFileSizeHigh=0x31e4c0*=0x0) returned 0x5a45 [0071.487] ReadFile (in: hFile=0x178, lpBuffer=0x274073c, nNumberOfBytesToRead=0x5a45, lpNumberOfBytesRead=0x31e46c, lpOverlapped=0x0 | out: lpBuffer=0x274073c*, lpNumberOfBytesRead=0x31e46c*=0x5a45, lpOverlapped=0x0) returned 1 [0071.492] CloseHandle (hObject=0x178) returned 1 [0071.505] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\ABV8L7MY\\BBEgIl2[1].jpg", nBufferLength=0x105, lpBuffer=0x31deb0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\ABV8L7MY\\BBEgIl2[1].jpg", lpFilePart=0x0) returned 0x7e [0071.506] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e3a4) returned 1 [0071.506] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\ABV8L7MY\\BBEgIl2[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\abv8l7my\\bbegil2[1].jpg"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x178 [0071.508] GetFileType (hFile=0x178) returned 0x1 [0071.508] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e3a0) returned 1 [0071.508] GetFileType (hFile=0x178) returned 0x1 [0071.508] WriteFile (in: hFile=0x178, lpBuffer=0x27a98b4*, nNumberOfBytesToWrite=0x5a50, lpNumberOfBytesWritten=0x31e460, lpOverlapped=0x0 | out: lpBuffer=0x27a98b4*, lpNumberOfBytesWritten=0x31e460*=0x5a50, lpOverlapped=0x0) returned 1 [0071.509] CloseHandle (hObject=0x178) returned 1 [0071.509] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\ABV8L7MY\\BBEgIl2[1].jpg", nBufferLength=0x105, lpBuffer=0x31dfe4, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\ABV8L7MY\\BBEgIl2[1].jpg", lpFilePart=0x0) returned 0x7e [0071.509] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\ABV8L7MY\\BBEgIl2[1].jpg", nBufferLength=0x105, lpBuffer=0x31dfe4, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\ABV8L7MY\\BBEgIl2[1].jpg", lpFilePart=0x0) returned 0x7e [0071.509] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e444) returned 1 [0071.509] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\ABV8L7MY\\BBEgIl2[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\abv8l7my\\bbegil2[1].jpg"), fInfoLevelId=0x0, lpFileInformation=0x31e4c0 | out: lpFileInformation=0x31e4c0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xbde8add0, ftCreationTime.dwHighDateTime=0x1d2faf2, ftLastAccessTime.dwLowDateTime=0xbde8add0, ftLastAccessTime.dwHighDateTime=0x1d2faf2, ftLastWriteTime.dwLowDateTime=0xe0fe140, ftLastWriteTime.dwHighDateTime=0x1d6eb7f, nFileSizeHigh=0x0, nFileSizeLow=0x5a50)) returned 1 [0071.509] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e440) returned 1 [0071.509] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\ABV8L7MY\\BBEgIl2[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\abv8l7my\\bbegil2[1].jpg"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\ABV8L7MY\\BBEgIl2[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\abv8l7my\\bbegil2[1].jpg")) returned 1 [0071.510] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\ABV8L7MY\\BBEgIl2[2].jpg", nBufferLength=0x105, lpBuffer=0x31dec4, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\ABV8L7MY\\BBEgIl2[2].jpg", lpFilePart=0x0) returned 0x7e [0071.510] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e3b8) returned 1 [0071.510] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\ABV8L7MY\\BBEgIl2[2].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\abv8l7my\\bbegil2[2].jpg"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x178 [0071.510] GetFileType (hFile=0x178) returned 0x1 [0071.511] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e3b4) returned 1 [0071.511] GetFileType (hFile=0x178) returned 0x1 [0071.511] GetFileSize (in: hFile=0x178, lpFileSizeHigh=0x31e4c0 | out: lpFileSizeHigh=0x31e4c0*=0x0) returned 0x388f [0071.511] ReadFile (in: hFile=0x178, lpBuffer=0x27af868, nNumberOfBytesToRead=0x388f, lpNumberOfBytesRead=0x31e46c, lpOverlapped=0x0 | out: lpBuffer=0x27af868*, lpNumberOfBytesRead=0x31e46c*=0x388f, lpOverlapped=0x0) returned 1 [0071.513] CloseHandle (hObject=0x178) returned 1 [0071.527] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\ABV8L7MY\\BBEgIl2[2].jpg", nBufferLength=0x105, lpBuffer=0x31deb0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\ABV8L7MY\\BBEgIl2[2].jpg", lpFilePart=0x0) returned 0x7e [0071.527] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e3a4) returned 1 [0071.527] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\ABV8L7MY\\BBEgIl2[2].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\abv8l7my\\bbegil2[2].jpg"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x178 [0071.528] GetFileType (hFile=0x178) returned 0x1 [0071.528] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e3a0) returned 1 [0071.528] GetFileType (hFile=0x178) returned 0x1 [0071.528] WriteFile (in: hFile=0x178, lpBuffer=0x280e120*, nNumberOfBytesToWrite=0x3890, lpNumberOfBytesWritten=0x31e460, lpOverlapped=0x0 | out: lpBuffer=0x280e120*, lpNumberOfBytesWritten=0x31e460*=0x3890, lpOverlapped=0x0) returned 1 [0071.529] CloseHandle (hObject=0x178) returned 1 [0071.529] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\ABV8L7MY\\BBEgIl2[2].jpg", nBufferLength=0x105, lpBuffer=0x31dfe4, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\ABV8L7MY\\BBEgIl2[2].jpg", lpFilePart=0x0) returned 0x7e [0071.529] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\ABV8L7MY\\BBEgIl2[2].jpg", nBufferLength=0x105, lpBuffer=0x31dfe4, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\ABV8L7MY\\BBEgIl2[2].jpg", lpFilePart=0x0) returned 0x7e [0071.529] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e444) returned 1 [0071.529] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\ABV8L7MY\\BBEgIl2[2].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\abv8l7my\\bbegil2[2].jpg"), fInfoLevelId=0x0, lpFileInformation=0x31e4c0 | out: lpFileInformation=0x31e4c0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x45b2a450, ftCreationTime.dwHighDateTime=0x1d2faf3, ftLastAccessTime.dwLowDateTime=0x45b2a450, ftLastAccessTime.dwHighDateTime=0x1d2faf3, ftLastWriteTime.dwLowDateTime=0xe14a400, ftLastWriteTime.dwHighDateTime=0x1d6eb7f, nFileSizeHigh=0x0, nFileSizeLow=0x3890)) returned 1 [0071.529] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e440) returned 1 [0071.530] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\ABV8L7MY\\BBEgIl2[2].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\abv8l7my\\bbegil2[2].jpg"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\ABV8L7MY\\BBEgIl2[2].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\abv8l7my\\bbegil2[2].jpg")) returned 1 [0071.530] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\ABV8L7MY\\BBEgIyL[1].jpg", nBufferLength=0x105, lpBuffer=0x31dec4, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\ABV8L7MY\\BBEgIyL[1].jpg", lpFilePart=0x0) returned 0x7e [0071.530] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e3b8) returned 1 [0071.530] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\ABV8L7MY\\BBEgIyL[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\abv8l7my\\bbegiyl[1].jpg"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x178 [0071.530] GetFileType (hFile=0x178) returned 0x1 [0071.530] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e3b4) returned 1 [0071.530] GetFileType (hFile=0x178) returned 0x1 [0071.530] GetFileSize (in: hFile=0x178, lpFileSizeHigh=0x31e4c0 | out: lpFileSizeHigh=0x31e4c0*=0x0) returned 0x1e97 [0071.530] ReadFile (in: hFile=0x178, lpBuffer=0x2811f14, nNumberOfBytesToRead=0x1e97, lpNumberOfBytesRead=0x31e46c, lpOverlapped=0x0 | out: lpBuffer=0x2811f14*, lpNumberOfBytesRead=0x31e46c*=0x1e97, lpOverlapped=0x0) returned 1 [0071.532] CloseHandle (hObject=0x178) returned 1 [0071.578] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\ABV8L7MY\\BBEgIyL[1].jpg", nBufferLength=0x105, lpBuffer=0x31deb0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\ABV8L7MY\\BBEgIyL[1].jpg", lpFilePart=0x0) returned 0x7e [0071.578] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e3a4) returned 1 [0071.578] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\ABV8L7MY\\BBEgIyL[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\abv8l7my\\bbegiyl[1].jpg"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x178 [0071.579] GetFileType (hFile=0x178) returned 0x1 [0071.579] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e3a0) returned 1 [0071.579] GetFileType (hFile=0x178) returned 0x1 [0071.579] WriteFile (in: hFile=0x178, lpBuffer=0x2669aec*, nNumberOfBytesToWrite=0x1ea0, lpNumberOfBytesWritten=0x31e460, lpOverlapped=0x0 | out: lpBuffer=0x2669aec*, lpNumberOfBytesWritten=0x31e460*=0x1ea0, lpOverlapped=0x0) returned 1 [0071.580] CloseHandle (hObject=0x178) returned 1 [0071.580] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\ABV8L7MY\\BBEgIyL[1].jpg", nBufferLength=0x105, lpBuffer=0x31dfe4, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\ABV8L7MY\\BBEgIyL[1].jpg", lpFilePart=0x0) returned 0x7e [0071.580] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\ABV8L7MY\\BBEgIyL[1].jpg", nBufferLength=0x105, lpBuffer=0x31dfe4, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\ABV8L7MY\\BBEgIyL[1].jpg", lpFilePart=0x0) returned 0x7e [0071.580] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e444) returned 1 [0071.580] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\ABV8L7MY\\BBEgIyL[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\abv8l7my\\bbegiyl[1].jpg"), fInfoLevelId=0x0, lpFileInformation=0x31e4c0 | out: lpFileInformation=0x31e4c0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x45856a30, ftCreationTime.dwHighDateTime=0x1d2faf3, ftLastAccessTime.dwLowDateTime=0x45856a30, ftLastAccessTime.dwHighDateTime=0x1d2faf3, ftLastWriteTime.dwLowDateTime=0xe1bc820, ftLastWriteTime.dwHighDateTime=0x1d6eb7f, nFileSizeHigh=0x0, nFileSizeLow=0x1ea0)) returned 1 [0071.580] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e440) returned 1 [0071.580] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\ABV8L7MY\\BBEgIyL[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\abv8l7my\\bbegiyl[1].jpg"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\ABV8L7MY\\BBEgIyL[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\abv8l7my\\bbegiyl[1].jpg")) returned 1 [0071.581] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\ABV8L7MY\\BBEgkY6[1].jpg", nBufferLength=0x105, lpBuffer=0x31dec4, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\ABV8L7MY\\BBEgkY6[1].jpg", lpFilePart=0x0) returned 0x7e [0071.581] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e3b8) returned 1 [0071.581] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\ABV8L7MY\\BBEgkY6[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\abv8l7my\\bbegky6[1].jpg"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x178 [0071.581] GetFileType (hFile=0x178) returned 0x1 [0071.581] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e3b4) returned 1 [0071.581] GetFileType (hFile=0x178) returned 0x1 [0071.581] GetFileSize (in: hFile=0x178, lpFileSizeHigh=0x31e4c0 | out: lpFileSizeHigh=0x31e4c0*=0x0) returned 0x23bf [0071.581] ReadFile (in: hFile=0x178, lpBuffer=0x266bef0, nNumberOfBytesToRead=0x23bf, lpNumberOfBytesRead=0x31e46c, lpOverlapped=0x0 | out: lpBuffer=0x266bef0*, lpNumberOfBytesRead=0x31e46c*=0x23bf, lpOverlapped=0x0) returned 1 [0071.583] CloseHandle (hObject=0x178) returned 1 [0071.596] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\ABV8L7MY\\BBEgkY6[1].jpg", nBufferLength=0x105, lpBuffer=0x31deb0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\ABV8L7MY\\BBEgkY6[1].jpg", lpFilePart=0x0) returned 0x7e [0071.596] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e3a4) returned 1 [0071.596] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\ABV8L7MY\\BBEgkY6[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\abv8l7my\\bbegky6[1].jpg"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x178 [0071.597] GetFileType (hFile=0x178) returned 0x1 [0071.597] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e3a0) returned 1 [0071.597] GetFileType (hFile=0x178) returned 0x1 [0071.597] WriteFile (in: hFile=0x178, lpBuffer=0x26c40f4*, nNumberOfBytesToWrite=0x23c0, lpNumberOfBytesWritten=0x31e460, lpOverlapped=0x0 | out: lpBuffer=0x26c40f4*, lpNumberOfBytesWritten=0x31e460*=0x23c0, lpOverlapped=0x0) returned 1 [0071.598] CloseHandle (hObject=0x178) returned 1 [0071.598] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\ABV8L7MY\\BBEgkY6[1].jpg", nBufferLength=0x105, lpBuffer=0x31dfe4, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\ABV8L7MY\\BBEgkY6[1].jpg", lpFilePart=0x0) returned 0x7e [0071.598] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\ABV8L7MY\\BBEgkY6[1].jpg", nBufferLength=0x105, lpBuffer=0x31dfe4, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\ABV8L7MY\\BBEgkY6[1].jpg", lpFilePart=0x0) returned 0x7e [0071.598] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e444) returned 1 [0071.598] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\ABV8L7MY\\BBEgkY6[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\abv8l7my\\bbegky6[1].jpg"), fInfoLevelId=0x0, lpFileInformation=0x31e4c0 | out: lpFileInformation=0x31e4c0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x45856a30, ftCreationTime.dwHighDateTime=0x1d2faf3, ftLastAccessTime.dwLowDateTime=0x45856a30, ftLastAccessTime.dwHighDateTime=0x1d2faf3, ftLastWriteTime.dwLowDateTime=0xe1e2980, ftLastWriteTime.dwHighDateTime=0x1d6eb7f, nFileSizeHigh=0x0, nFileSizeLow=0x23c0)) returned 1 [0071.599] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e440) returned 1 [0071.599] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\ABV8L7MY\\BBEgkY6[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\abv8l7my\\bbegky6[1].jpg"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\ABV8L7MY\\BBEgkY6[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\abv8l7my\\bbegky6[1].jpg")) returned 1 [0071.599] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\ABV8L7MY\\BBEgLzV[1].jpg", nBufferLength=0x105, lpBuffer=0x31dec4, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\ABV8L7MY\\BBEgLzV[1].jpg", lpFilePart=0x0) returned 0x7e [0071.599] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e3b8) returned 1 [0071.599] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\ABV8L7MY\\BBEgLzV[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\abv8l7my\\bbeglzv[1].jpg"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x178 [0071.599] GetFileType (hFile=0x178) returned 0x1 [0071.599] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e3b4) returned 1 [0071.599] GetFileType (hFile=0x178) returned 0x1 [0071.599] GetFileSize (in: hFile=0x178, lpFileSizeHigh=0x31e4c0 | out: lpFileSizeHigh=0x31e4c0*=0x0) returned 0x8df [0071.599] ReadFile (in: hFile=0x178, lpBuffer=0x26c7304, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x31e46c, lpOverlapped=0x0 | out: lpBuffer=0x26c7304*, lpNumberOfBytesRead=0x31e46c*=0x8df, lpOverlapped=0x0) returned 1 [0071.601] CloseHandle (hObject=0x178) returned 1 [0071.626] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\ABV8L7MY\\BBEgLzV[1].jpg", nBufferLength=0x105, lpBuffer=0x31deb0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\ABV8L7MY\\BBEgLzV[1].jpg", lpFilePart=0x0) returned 0x7e [0071.626] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e3a4) returned 1 [0071.626] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\ABV8L7MY\\BBEgLzV[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\abv8l7my\\bbeglzv[1].jpg"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x178 [0071.627] GetFileType (hFile=0x178) returned 0x1 [0071.627] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e3a0) returned 1 [0071.627] GetFileType (hFile=0x178) returned 0x1 [0071.627] WriteFile (in: hFile=0x178, lpBuffer=0x2717eec*, nNumberOfBytesToWrite=0x8e0, lpNumberOfBytesWritten=0x31e434, lpOverlapped=0x0 | out: lpBuffer=0x2717eec*, lpNumberOfBytesWritten=0x31e434*=0x8e0, lpOverlapped=0x0) returned 1 [0071.628] CloseHandle (hObject=0x178) returned 1 [0071.628] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\ABV8L7MY\\BBEgLzV[1].jpg", nBufferLength=0x105, lpBuffer=0x31dfe4, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\ABV8L7MY\\BBEgLzV[1].jpg", lpFilePart=0x0) returned 0x7e [0071.628] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\ABV8L7MY\\BBEgLzV[1].jpg", nBufferLength=0x105, lpBuffer=0x31dfe4, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\ABV8L7MY\\BBEgLzV[1].jpg", lpFilePart=0x0) returned 0x7e [0071.628] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e444) returned 1 [0071.628] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\ABV8L7MY\\BBEgLzV[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\abv8l7my\\bbeglzv[1].jpg"), fInfoLevelId=0x0, lpFileInformation=0x31e4c0 | out: lpFileInformation=0x31e4c0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x4574c090, ftCreationTime.dwHighDateTime=0x1d2faf3, ftLastAccessTime.dwLowDateTime=0x4574c090, ftLastAccessTime.dwHighDateTime=0x1d2faf3, ftLastWriteTime.dwLowDateTime=0xe22ec40, ftLastWriteTime.dwHighDateTime=0x1d6eb7f, nFileSizeHigh=0x0, nFileSizeLow=0x8e0)) returned 1 [0071.628] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e440) returned 1 [0071.628] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\ABV8L7MY\\BBEgLzV[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\abv8l7my\\bbeglzv[1].jpg"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\ABV8L7MY\\BBEgLzV[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\abv8l7my\\bbeglzv[1].jpg")) returned 1 [0071.629] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\ABV8L7MY\\BBEgUri[1].jpg", nBufferLength=0x105, lpBuffer=0x31dec4, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\ABV8L7MY\\BBEgUri[1].jpg", lpFilePart=0x0) returned 0x7e [0071.629] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e3b8) returned 1 [0071.629] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\ABV8L7MY\\BBEgUri[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\abv8l7my\\bbeguri[1].jpg"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x178 [0071.630] GetFileType (hFile=0x178) returned 0x1 [0071.630] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e3b4) returned 1 [0071.630] GetFileType (hFile=0x178) returned 0x1 [0071.630] GetFileSize (in: hFile=0x178, lpFileSizeHigh=0x31e4c0 | out: lpFileSizeHigh=0x31e4c0*=0x0) returned 0x2b8d [0071.630] ReadFile (in: hFile=0x178, lpBuffer=0x27192bc, nNumberOfBytesToRead=0x2b8d, lpNumberOfBytesRead=0x31e46c, lpOverlapped=0x0 | out: lpBuffer=0x27192bc*, lpNumberOfBytesRead=0x31e46c*=0x2b8d, lpOverlapped=0x0) returned 1 [0071.631] CloseHandle (hObject=0x178) returned 1 [0071.645] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\ABV8L7MY\\BBEgUri[1].jpg", nBufferLength=0x105, lpBuffer=0x31deb0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\ABV8L7MY\\BBEgUri[1].jpg", lpFilePart=0x0) returned 0x7e [0071.645] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e3a4) returned 1 [0071.645] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\ABV8L7MY\\BBEgUri[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\abv8l7my\\bbeguri[1].jpg"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x178 [0071.646] GetFileType (hFile=0x178) returned 0x1 [0071.646] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e3a0) returned 1 [0071.646] GetFileType (hFile=0x178) returned 0x1 [0071.646] WriteFile (in: hFile=0x178, lpBuffer=0x2773a74*, nNumberOfBytesToWrite=0x2b90, lpNumberOfBytesWritten=0x31e460, lpOverlapped=0x0 | out: lpBuffer=0x2773a74*, lpNumberOfBytesWritten=0x31e460*=0x2b90, lpOverlapped=0x0) returned 1 [0071.647] CloseHandle (hObject=0x178) returned 1 [0071.647] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\ABV8L7MY\\BBEgUri[1].jpg", nBufferLength=0x105, lpBuffer=0x31dfe4, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\ABV8L7MY\\BBEgUri[1].jpg", lpFilePart=0x0) returned 0x7e [0071.647] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\ABV8L7MY\\BBEgUri[1].jpg", nBufferLength=0x105, lpBuffer=0x31dfe4, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\ABV8L7MY\\BBEgUri[1].jpg", lpFilePart=0x0) returned 0x7e [0071.647] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e444) returned 1 [0071.647] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\ABV8L7MY\\BBEgUri[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\abv8l7my\\bbeguri[1].jpg"), fInfoLevelId=0x0, lpFileInformation=0x31e4c0 | out: lpFileInformation=0x31e4c0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x45a45c10, ftCreationTime.dwHighDateTime=0x1d2faf3, ftLastAccessTime.dwLowDateTime=0x45a45c10, ftLastAccessTime.dwHighDateTime=0x1d2faf3, ftLastWriteTime.dwLowDateTime=0xe254da0, ftLastWriteTime.dwHighDateTime=0x1d6eb7f, nFileSizeHigh=0x0, nFileSizeLow=0x2b90)) returned 1 [0071.647] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e440) returned 1 [0071.647] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\ABV8L7MY\\BBEgUri[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\abv8l7my\\bbeguri[1].jpg"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\ABV8L7MY\\BBEgUri[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\abv8l7my\\bbeguri[1].jpg")) returned 1 [0071.648] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\ABV8L7MY\\BBEgXBv[1].jpg", nBufferLength=0x105, lpBuffer=0x31dec4, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\ABV8L7MY\\BBEgXBv[1].jpg", lpFilePart=0x0) returned 0x7e [0071.648] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e3b8) returned 1 [0071.648] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\ABV8L7MY\\BBEgXBv[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\abv8l7my\\bbegxbv[1].jpg"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x178 [0071.648] GetFileType (hFile=0x178) returned 0x1 [0071.648] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e3b4) returned 1 [0071.648] GetFileType (hFile=0x178) returned 0x1 [0071.648] GetFileSize (in: hFile=0x178, lpFileSizeHigh=0x31e4c0 | out: lpFileSizeHigh=0x31e4c0*=0x0) returned 0x201f [0071.648] ReadFile (in: hFile=0x178, lpBuffer=0x2776b68, nNumberOfBytesToRead=0x201f, lpNumberOfBytesRead=0x31e46c, lpOverlapped=0x0 | out: lpBuffer=0x2776b68*, lpNumberOfBytesRead=0x31e46c*=0x201f, lpOverlapped=0x0) returned 1 [0071.650] CloseHandle (hObject=0x178) returned 1 [0071.665] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\ABV8L7MY\\BBEgXBv[1].jpg", nBufferLength=0x105, lpBuffer=0x31deb0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\ABV8L7MY\\BBEgXBv[1].jpg", lpFilePart=0x0) returned 0x7e [0071.665] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e3a4) returned 1 [0071.665] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\ABV8L7MY\\BBEgXBv[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\abv8l7my\\bbegxbv[1].jpg"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x178 [0071.666] GetFileType (hFile=0x178) returned 0x1 [0071.667] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e3a0) returned 1 [0071.667] GetFileType (hFile=0x178) returned 0x1 [0071.667] WriteFile (in: hFile=0x178, lpBuffer=0x27cd9f0*, nNumberOfBytesToWrite=0x2020, lpNumberOfBytesWritten=0x31e460, lpOverlapped=0x0 | out: lpBuffer=0x27cd9f0*, lpNumberOfBytesWritten=0x31e460*=0x2020, lpOverlapped=0x0) returned 1 [0071.668] CloseHandle (hObject=0x178) returned 1 [0071.668] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\ABV8L7MY\\BBEgXBv[1].jpg", nBufferLength=0x105, lpBuffer=0x31dfe4, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\ABV8L7MY\\BBEgXBv[1].jpg", lpFilePart=0x0) returned 0x7e [0071.668] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\ABV8L7MY\\BBEgXBv[1].jpg", nBufferLength=0x105, lpBuffer=0x31dfe4, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\ABV8L7MY\\BBEgXBv[1].jpg", lpFilePart=0x0) returned 0x7e [0071.668] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e444) returned 1 [0071.668] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\ABV8L7MY\\BBEgXBv[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\abv8l7my\\bbegxbv[1].jpg"), fInfoLevelId=0x0, lpFileInformation=0x31e4c0 | out: lpFileInformation=0x31e4c0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x457721f0, ftCreationTime.dwHighDateTime=0x1d2faf3, ftLastAccessTime.dwLowDateTime=0x457721f0, ftLastAccessTime.dwHighDateTime=0x1d2faf3, ftLastWriteTime.dwLowDateTime=0xe2a1060, ftLastWriteTime.dwHighDateTime=0x1d6eb7f, nFileSizeHigh=0x0, nFileSizeLow=0x2020)) returned 1 [0071.668] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e440) returned 1 [0071.668] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\ABV8L7MY\\BBEgXBv[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\abv8l7my\\bbegxbv[1].jpg"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\ABV8L7MY\\BBEgXBv[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\abv8l7my\\bbegxbv[1].jpg")) returned 1 [0071.669] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\ABV8L7MY\\BBEgZME[1].jpg", nBufferLength=0x105, lpBuffer=0x31dec4, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\ABV8L7MY\\BBEgZME[1].jpg", lpFilePart=0x0) returned 0x7e [0071.669] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e3b8) returned 1 [0071.669] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\ABV8L7MY\\BBEgZME[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\abv8l7my\\bbegzme[1].jpg"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x178 [0071.670] GetFileType (hFile=0x178) returned 0x1 [0071.670] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e3b4) returned 1 [0071.670] GetFileType (hFile=0x178) returned 0x1 [0071.670] GetFileSize (in: hFile=0x178, lpFileSizeHigh=0x31e4c0 | out: lpFileSizeHigh=0x31e4c0*=0x0) returned 0x6e9 [0071.670] ReadFile (in: hFile=0x178, lpBuffer=0x27d066c, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x31e46c, lpOverlapped=0x0 | out: lpBuffer=0x27d066c*, lpNumberOfBytesRead=0x31e46c*=0x6e9, lpOverlapped=0x0) returned 1 [0071.672] CloseHandle (hObject=0x178) returned 1 [0071.685] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\ABV8L7MY\\BBEgZME[1].jpg", nBufferLength=0x105, lpBuffer=0x31deb0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\ABV8L7MY\\BBEgZME[1].jpg", lpFilePart=0x0) returned 0x7e [0071.685] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e3a4) returned 1 [0071.685] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\ABV8L7MY\\BBEgZME[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\abv8l7my\\bbegzme[1].jpg"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x178 [0071.686] GetFileType (hFile=0x178) returned 0x1 [0071.686] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e3a0) returned 1 [0071.686] GetFileType (hFile=0x178) returned 0x1 [0071.686] WriteFile (in: hFile=0x178, lpBuffer=0x28208a8*, nNumberOfBytesToWrite=0x6f0, lpNumberOfBytesWritten=0x31e434, lpOverlapped=0x0 | out: lpBuffer=0x28208a8*, lpNumberOfBytesWritten=0x31e434*=0x6f0, lpOverlapped=0x0) returned 1 [0071.687] CloseHandle (hObject=0x178) returned 1 [0071.687] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\ABV8L7MY\\BBEgZME[1].jpg", nBufferLength=0x105, lpBuffer=0x31dfe4, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\ABV8L7MY\\BBEgZME[1].jpg", lpFilePart=0x0) returned 0x7e [0071.687] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\ABV8L7MY\\BBEgZME[1].jpg", nBufferLength=0x105, lpBuffer=0x31dfe4, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\ABV8L7MY\\BBEgZME[1].jpg", lpFilePart=0x0) returned 0x7e [0071.687] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e444) returned 1 [0071.687] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\ABV8L7MY\\BBEgZME[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\abv8l7my\\bbegzme[1].jpg"), fInfoLevelId=0x0, lpFileInformation=0x31e4c0 | out: lpFileInformation=0x31e4c0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xbe327870, ftCreationTime.dwHighDateTime=0x1d2faf2, ftLastAccessTime.dwLowDateTime=0xbe327870, ftLastAccessTime.dwHighDateTime=0x1d2faf2, ftLastWriteTime.dwLowDateTime=0xe2c71c0, ftLastWriteTime.dwHighDateTime=0x1d6eb7f, nFileSizeHigh=0x0, nFileSizeLow=0x6f0)) returned 1 [0071.688] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e440) returned 1 [0071.688] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\ABV8L7MY\\BBEgZME[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\abv8l7my\\bbegzme[1].jpg"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\ABV8L7MY\\BBEgZME[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\abv8l7my\\bbegzme[1].jpg")) returned 1 [0071.688] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\ABV8L7MY\\BBghfVy[1].png", nBufferLength=0x105, lpBuffer=0x31dec4, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\ABV8L7MY\\BBghfVy[1].png", lpFilePart=0x0) returned 0x7e [0071.688] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e3b8) returned 1 [0071.688] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\ABV8L7MY\\BBghfVy[1].png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\abv8l7my\\bbghfvy[1].png"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x178 [0071.688] GetFileType (hFile=0x178) returned 0x1 [0071.688] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e3b4) returned 1 [0071.688] GetFileType (hFile=0x178) returned 0x1 [0071.688] GetFileSize (in: hFile=0x178, lpFileSizeHigh=0x31e4c0 | out: lpFileSizeHigh=0x31e4c0*=0x0) returned 0x1dc [0071.688] ReadFile (in: hFile=0x178, lpBuffer=0x2821e60, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x31e46c, lpOverlapped=0x0 | out: lpBuffer=0x2821e60*, lpNumberOfBytesRead=0x31e46c*=0x1dc, lpOverlapped=0x0) returned 1 [0071.690] CloseHandle (hObject=0x178) returned 1 [0071.735] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\ABV8L7MY\\BBghfVy[1].png", nBufferLength=0x105, lpBuffer=0x31deb0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\ABV8L7MY\\BBghfVy[1].png", lpFilePart=0x0) returned 0x7e [0071.735] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e3a4) returned 1 [0071.735] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\ABV8L7MY\\BBghfVy[1].png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\abv8l7my\\bbghfvy[1].png"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x178 [0071.736] GetFileType (hFile=0x178) returned 0x1 [0071.736] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e3a0) returned 1 [0071.736] GetFileType (hFile=0x178) returned 0x1 [0071.736] WriteFile (in: hFile=0x178, lpBuffer=0x266ea70*, nNumberOfBytesToWrite=0x1e0, lpNumberOfBytesWritten=0x31e434, lpOverlapped=0x0 | out: lpBuffer=0x266ea70*, lpNumberOfBytesWritten=0x31e434*=0x1e0, lpOverlapped=0x0) returned 1 [0071.737] CloseHandle (hObject=0x178) returned 1 [0071.737] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\ABV8L7MY\\BBghfVy[1].png", nBufferLength=0x105, lpBuffer=0x31dfe4, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\ABV8L7MY\\BBghfVy[1].png", lpFilePart=0x0) returned 0x7e [0071.737] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\ABV8L7MY\\BBghfVy[1].png", nBufferLength=0x105, lpBuffer=0x31dfe4, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\ABV8L7MY\\BBghfVy[1].png", lpFilePart=0x0) returned 0x7e [0071.737] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e444) returned 1 [0071.737] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\ABV8L7MY\\BBghfVy[1].png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\abv8l7my\\bbghfvy[1].png"), fInfoLevelId=0x0, lpFileInformation=0x31e4c0 | out: lpFileInformation=0x31e4c0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xbe4ca790, ftCreationTime.dwHighDateTime=0x1d2faf2, ftLastAccessTime.dwLowDateTime=0xbe4ca790, ftLastAccessTime.dwHighDateTime=0x1d2faf2, ftLastWriteTime.dwLowDateTime=0xe3395e0, ftLastWriteTime.dwHighDateTime=0x1d6eb7f, nFileSizeHigh=0x0, nFileSizeLow=0x1e0)) returned 1 [0071.737] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e440) returned 1 [0071.737] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\ABV8L7MY\\BBghfVy[1].png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\abv8l7my\\bbghfvy[1].png"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\ABV8L7MY\\BBghfVy[1].png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\abv8l7my\\bbghfvy[1].png")) returned 1 [0071.738] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\ABV8L7MY\\BBkwUr[1].png", nBufferLength=0x105, lpBuffer=0x31dec4, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\ABV8L7MY\\BBkwUr[1].png", lpFilePart=0x0) returned 0x7d [0071.738] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e3b8) returned 1 [0071.738] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\ABV8L7MY\\BBkwUr[1].png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\abv8l7my\\bbkwur[1].png"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x178 [0071.738] GetFileType (hFile=0x178) returned 0x1 [0071.738] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e3b4) returned 1 [0071.738] GetFileType (hFile=0x178) returned 0x1 [0071.738] GetFileSize (in: hFile=0x178, lpFileSizeHigh=0x31e4c0 | out: lpFileSizeHigh=0x31e4c0*=0x0) returned 0x1af [0071.738] ReadFile (in: hFile=0x178, lpBuffer=0x266fff4, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x31e46c, lpOverlapped=0x0 | out: lpBuffer=0x266fff4*, lpNumberOfBytesRead=0x31e46c*=0x1af, lpOverlapped=0x0) returned 1 [0071.742] CloseHandle (hObject=0x178) returned 1 [0071.755] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\ABV8L7MY\\BBkwUr[1].png", nBufferLength=0x105, lpBuffer=0x31deb0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\ABV8L7MY\\BBkwUr[1].png", lpFilePart=0x0) returned 0x7d [0071.755] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e3a4) returned 1 [0071.755] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\ABV8L7MY\\BBkwUr[1].png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\abv8l7my\\bbkwur[1].png"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x178 [0071.756] GetFileType (hFile=0x178) returned 0x1 [0071.756] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e3a0) returned 1 [0071.756] GetFileType (hFile=0x178) returned 0x1 [0071.756] WriteFile (in: hFile=0x178, lpBuffer=0x26be940*, nNumberOfBytesToWrite=0x1b0, lpNumberOfBytesWritten=0x31e434, lpOverlapped=0x0 | out: lpBuffer=0x26be940*, lpNumberOfBytesWritten=0x31e434*=0x1b0, lpOverlapped=0x0) returned 1 [0071.757] CloseHandle (hObject=0x178) returned 1 [0071.757] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\ABV8L7MY\\BBkwUr[1].png", nBufferLength=0x105, lpBuffer=0x31dfe4, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\ABV8L7MY\\BBkwUr[1].png", lpFilePart=0x0) returned 0x7d [0071.757] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\ABV8L7MY\\BBkwUr[1].png", nBufferLength=0x105, lpBuffer=0x31dfe4, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\ABV8L7MY\\BBkwUr[1].png", lpFilePart=0x0) returned 0x7d [0071.757] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e444) returned 1 [0071.757] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\ABV8L7MY\\BBkwUr[1].png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\abv8l7my\\bbkwur[1].png"), fInfoLevelId=0x0, lpFileInformation=0x31e4c0 | out: lpFileInformation=0x31e4c0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x45725f30, ftCreationTime.dwHighDateTime=0x1d2faf3, ftLastAccessTime.dwLowDateTime=0x45725f30, ftLastAccessTime.dwHighDateTime=0x1d2faf3, ftLastWriteTime.dwLowDateTime=0xe35f740, ftLastWriteTime.dwHighDateTime=0x1d6eb7f, nFileSizeHigh=0x0, nFileSizeLow=0x1b0)) returned 1 [0071.758] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e440) returned 1 [0071.758] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\ABV8L7MY\\BBkwUr[1].png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\abv8l7my\\bbkwur[1].png"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\ABV8L7MY\\BBkwUr[1].png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\abv8l7my\\bbkwur[1].png")) returned 1 [0071.758] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\ABV8L7MY\\BBlBV0U[1].png", nBufferLength=0x105, lpBuffer=0x31dec4, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\ABV8L7MY\\BBlBV0U[1].png", lpFilePart=0x0) returned 0x7e [0071.758] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e3b8) returned 1 [0071.758] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\ABV8L7MY\\BBlBV0U[1].png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\abv8l7my\\bblbv0u[1].png"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x178 [0071.758] GetFileType (hFile=0x178) returned 0x1 [0071.758] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e3b4) returned 1 [0071.758] GetFileType (hFile=0x178) returned 0x1 [0071.758] GetFileSize (in: hFile=0x178, lpFileSizeHigh=0x31e4c0 | out: lpFileSizeHigh=0x31e4c0*=0x0) returned 0x23b [0071.758] ReadFile (in: hFile=0x178, lpBuffer=0x26bff50, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x31e46c, lpOverlapped=0x0 | out: lpBuffer=0x26bff50*, lpNumberOfBytesRead=0x31e46c*=0x23b, lpOverlapped=0x0) returned 1 [0071.760] CloseHandle (hObject=0x178) returned 1 [0071.774] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\ABV8L7MY\\BBlBV0U[1].png", nBufferLength=0x105, lpBuffer=0x31deb0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\ABV8L7MY\\BBlBV0U[1].png", lpFilePart=0x0) returned 0x7e [0071.774] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e3a4) returned 1 [0071.774] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\ABV8L7MY\\BBlBV0U[1].png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\abv8l7my\\bblbv0u[1].png"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x178 [0071.775] GetFileType (hFile=0x178) returned 0x1 [0071.775] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e3a0) returned 1 [0071.775] GetFileType (hFile=0x178) returned 0x1 [0071.775] WriteFile (in: hFile=0x178, lpBuffer=0x270ea1c*, nNumberOfBytesToWrite=0x240, lpNumberOfBytesWritten=0x31e434, lpOverlapped=0x0 | out: lpBuffer=0x270ea1c*, lpNumberOfBytesWritten=0x31e434*=0x240, lpOverlapped=0x0) returned 1 [0071.777] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\ABV8L7MY\\BBlBV0U[1].png", nBufferLength=0x105, lpBuffer=0x31dfe4, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\ABV8L7MY\\BBlBV0U[1].png", lpFilePart=0x0) returned 0x7e [0071.777] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\ABV8L7MY\\BBlBV0U[1].png", nBufferLength=0x105, lpBuffer=0x31dfe4, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\ABV8L7MY\\BBlBV0U[1].png", lpFilePart=0x0) returned 0x7e [0071.777] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e444) returned 1 [0071.777] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\ABV8L7MY\\BBlBV0U[1].png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\abv8l7my\\bblbv0u[1].png"), fInfoLevelId=0x0, lpFileInformation=0x31e4c0 | out: lpFileInformation=0x31e4c0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x45a45c10, ftCreationTime.dwHighDateTime=0x1d2faf3, ftLastAccessTime.dwLowDateTime=0x45a45c10, ftLastAccessTime.dwHighDateTime=0x1d2faf3, ftLastWriteTime.dwLowDateTime=0xe3aba00, ftLastWriteTime.dwHighDateTime=0x1d6eb7f, nFileSizeHigh=0x0, nFileSizeLow=0x240)) returned 1 [0071.777] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e440) returned 1 [0071.777] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\ABV8L7MY\\BBlBV0U[1].png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\abv8l7my\\bblbv0u[1].png"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\ABV8L7MY\\BBlBV0U[1].png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\abv8l7my\\bblbv0u[1].png")) returned 1 [0071.778] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\ABV8L7MY\\BBzhWWE[1].jpg", nBufferLength=0x105, lpBuffer=0x31dec4, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\ABV8L7MY\\BBzhWWE[1].jpg", lpFilePart=0x0) returned 0x7e [0071.778] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e3b8) returned 1 [0071.778] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\ABV8L7MY\\BBzhWWE[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\abv8l7my\\bbzhwwe[1].jpg"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x178 [0071.778] GetFileType (hFile=0x178) returned 0x1 [0071.778] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e3b4) returned 1 [0071.778] GetFileType (hFile=0x178) returned 0x1 [0071.778] GetFileSize (in: hFile=0x178, lpFileSizeHigh=0x31e4c0 | out: lpFileSizeHigh=0x31e4c0*=0x0) returned 0x3376 [0071.778] ReadFile (in: hFile=0x178, lpBuffer=0x270fdec, nNumberOfBytesToRead=0x3376, lpNumberOfBytesRead=0x31e46c, lpOverlapped=0x0 | out: lpBuffer=0x270fdec*, lpNumberOfBytesRead=0x31e46c*=0x3376, lpOverlapped=0x0) returned 1 [0071.794] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\ABV8L7MY\\BBzhWWE[1].jpg", nBufferLength=0x105, lpBuffer=0x31deb0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\ABV8L7MY\\BBzhWWE[1].jpg", lpFilePart=0x0) returned 0x7e [0071.794] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e3a4) returned 1 [0071.794] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\ABV8L7MY\\BBzhWWE[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\abv8l7my\\bbzhwwe[1].jpg"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x178 [0071.796] GetFileType (hFile=0x178) returned 0x1 [0071.796] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e3a0) returned 1 [0071.796] GetFileType (hFile=0x178) returned 0x1 [0071.796] WriteFile (in: hFile=0x178, lpBuffer=0x276cd54*, nNumberOfBytesToWrite=0x3380, lpNumberOfBytesWritten=0x31e460, lpOverlapped=0x0 | out: lpBuffer=0x276cd54*, lpNumberOfBytesWritten=0x31e460*=0x3380, lpOverlapped=0x0) returned 1 [0071.798] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\ABV8L7MY\\BBzhWWE[1].jpg", nBufferLength=0x105, lpBuffer=0x31dfe4, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\ABV8L7MY\\BBzhWWE[1].jpg", lpFilePart=0x0) returned 0x7e [0071.798] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\ABV8L7MY\\BBzhWWE[1].jpg", nBufferLength=0x105, lpBuffer=0x31dfe4, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\ABV8L7MY\\BBzhWWE[1].jpg", lpFilePart=0x0) returned 0x7e [0071.798] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e444) returned 1 [0071.798] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\ABV8L7MY\\BBzhWWE[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\abv8l7my\\bbzhwwe[1].jpg"), fInfoLevelId=0x0, lpFileInformation=0x31e4c0 | out: lpFileInformation=0x31e4c0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x5159c2b0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x5159c2b0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0xe3d1b60, ftLastWriteTime.dwHighDateTime=0x1d6eb7f, nFileSizeHigh=0x0, nFileSizeLow=0x3380)) returned 1 [0071.799] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e440) returned 1 [0071.799] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\ABV8L7MY\\BBzhWWE[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\abv8l7my\\bbzhwwe[1].jpg"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\ABV8L7MY\\BBzhWWE[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\abv8l7my\\bbzhwwe[1].jpg")) returned 1 [0071.799] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\ABV8L7MY\\benefits-2[1].jpg", nBufferLength=0x105, lpBuffer=0x31dec4, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\ABV8L7MY\\benefits-2[1].jpg", lpFilePart=0x0) returned 0x81 [0071.799] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e3b8) returned 1 [0071.799] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\ABV8L7MY\\benefits-2[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\abv8l7my\\benefits-2[1].jpg"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x178 [0071.800] GetFileType (hFile=0x178) returned 0x1 [0071.800] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e3b4) returned 1 [0071.800] GetFileType (hFile=0x178) returned 0x1 [0071.800] GetFileSize (in: hFile=0x178, lpFileSizeHigh=0x31e4c0 | out: lpFileSizeHigh=0x31e4c0*=0x0) returned 0x13c06 [0071.800] ReadFile (in: hFile=0x178, lpBuffer=0x2770640, nNumberOfBytesToRead=0x13c06, lpNumberOfBytesRead=0x31e46c, lpOverlapped=0x0 | out: lpBuffer=0x2770640*, lpNumberOfBytesRead=0x31e46c*=0x13c06, lpOverlapped=0x0) returned 1 [0071.818] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\ABV8L7MY\\benefits-2[1].jpg", nBufferLength=0x105, lpBuffer=0x31deb0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\ABV8L7MY\\benefits-2[1].jpg", lpFilePart=0x0) returned 0x81 [0071.818] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e3a4) returned 1 [0071.818] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\ABV8L7MY\\benefits-2[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\abv8l7my\\benefits-2[1].jpg"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x178 [0071.819] GetFileType (hFile=0x178) returned 0x1 [0071.819] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e3a0) returned 1 [0071.819] GetFileType (hFile=0x178) returned 0x1 [0071.819] WriteFile (in: hFile=0x178, lpBuffer=0x27f886c*, nNumberOfBytesToWrite=0x13c10, lpNumberOfBytesWritten=0x31e460, lpOverlapped=0x0 | out: lpBuffer=0x27f886c*, lpNumberOfBytesWritten=0x31e460*=0x13c10, lpOverlapped=0x0) returned 1 [0071.821] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\ABV8L7MY\\benefits-2[1].jpg", nBufferLength=0x105, lpBuffer=0x31dfe4, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\ABV8L7MY\\benefits-2[1].jpg", lpFilePart=0x0) returned 0x81 [0071.821] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\ABV8L7MY\\benefits-2[1].jpg", nBufferLength=0x105, lpBuffer=0x31dfe4, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\ABV8L7MY\\benefits-2[1].jpg", lpFilePart=0x0) returned 0x81 [0071.821] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e444) returned 1 [0071.821] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\ABV8L7MY\\benefits-2[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\abv8l7my\\benefits-2[1].jpg"), fInfoLevelId=0x0, lpFileInformation=0x31e4c0 | out: lpFileInformation=0x31e4c0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x60baae40, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x60baae40, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0xe3f7cc0, ftLastWriteTime.dwHighDateTime=0x1d6eb7f, nFileSizeHigh=0x0, nFileSizeLow=0x13c10)) returned 1 [0071.822] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e440) returned 1 [0071.822] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\ABV8L7MY\\benefits-2[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\abv8l7my\\benefits-2[1].jpg"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\ABV8L7MY\\benefits-2[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\abv8l7my\\benefits-2[1].jpg")) returned 1 [0071.822] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\ABV8L7MY\\benefits-4[1].jpg", nBufferLength=0x105, lpBuffer=0x31dec4, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\ABV8L7MY\\benefits-4[1].jpg", lpFilePart=0x0) returned 0x81 [0071.822] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e3b8) returned 1 [0071.822] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\ABV8L7MY\\benefits-4[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\abv8l7my\\benefits-4[1].jpg"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x178 [0071.823] GetFileType (hFile=0x178) returned 0x1 [0071.823] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e3b4) returned 1 [0071.823] GetFileType (hFile=0x178) returned 0x1 [0071.823] GetFileSize (in: hFile=0x178, lpFileSizeHigh=0x31e4c0 | out: lpFileSizeHigh=0x31e4c0*=0x0) returned 0x144cd [0071.823] ReadFile (in: hFile=0x178, lpBuffer=0x280c9f8, nNumberOfBytesToRead=0x144cd, lpNumberOfBytesRead=0x31e46c, lpOverlapped=0x0 | out: lpBuffer=0x280c9f8*, lpNumberOfBytesRead=0x31e46c*=0x144cd, lpOverlapped=0x0) returned 1 [0071.884] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\ABV8L7MY\\benefits-4[1].jpg", nBufferLength=0x105, lpBuffer=0x31deb0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\ABV8L7MY\\benefits-4[1].jpg", lpFilePart=0x0) returned 0x81 [0071.884] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e3a4) returned 1 [0071.884] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\ABV8L7MY\\benefits-4[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\abv8l7my\\benefits-4[1].jpg"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x178 [0071.886] GetFileType (hFile=0x178) returned 0x1 [0071.886] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e3a0) returned 1 [0071.886] GetFileType (hFile=0x178) returned 0x1 [0071.886] WriteFile (in: hFile=0x178, lpBuffer=0x26aa92c*, nNumberOfBytesToWrite=0x144d0, lpNumberOfBytesWritten=0x31e460, lpOverlapped=0x0 | out: lpBuffer=0x26aa92c*, lpNumberOfBytesWritten=0x31e460*=0x144d0, lpOverlapped=0x0) returned 1 [0071.888] CloseHandle (hObject=0x178) returned 1 [0071.888] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\ABV8L7MY\\benefits-4[1].jpg", nBufferLength=0x105, lpBuffer=0x31dfe4, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\ABV8L7MY\\benefits-4[1].jpg", lpFilePart=0x0) returned 0x81 [0071.888] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\ABV8L7MY\\benefits-4[1].jpg", nBufferLength=0x105, lpBuffer=0x31dfe4, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\ABV8L7MY\\benefits-4[1].jpg", lpFilePart=0x0) returned 0x81 [0071.888] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e444) returned 1 [0071.888] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\ABV8L7MY\\benefits-4[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\abv8l7my\\benefits-4[1].jpg"), fInfoLevelId=0x0, lpFileInformation=0x31e4c0 | out: lpFileInformation=0x31e4c0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x60b84ce0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x60b84ce0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0xe4b63a0, ftLastWriteTime.dwHighDateTime=0x1d6eb7f, nFileSizeHigh=0x0, nFileSizeLow=0x144d0)) returned 1 [0071.888] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e440) returned 1 [0071.888] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\ABV8L7MY\\benefits-4[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\abv8l7my\\benefits-4[1].jpg"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\ABV8L7MY\\benefits-4[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\abv8l7my\\benefits-4[1].jpg")) returned 1 [0071.889] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\ABV8L7MY\\bs-jsdep[1].css", nBufferLength=0x105, lpBuffer=0x31dec4, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\ABV8L7MY\\bs-jsdep[1].css", lpFilePart=0x0) returned 0x7f [0071.889] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e3b8) returned 1 [0071.889] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\ABV8L7MY\\bs-jsdep[1].css" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\abv8l7my\\bs-jsdep[1].css"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x178 [0071.891] GetFileType (hFile=0x178) returned 0x1 [0071.891] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e3b4) returned 1 [0071.891] GetFileType (hFile=0x178) returned 0x1 [0071.891] GetFileSize (in: hFile=0x178, lpFileSizeHigh=0x31e4c0 | out: lpFileSizeHigh=0x31e4c0*=0x0) returned 0x4dd8 [0071.892] ReadFile (in: hFile=0x178, lpBuffer=0x26bf39c, nNumberOfBytesToRead=0x4dd8, lpNumberOfBytesRead=0x31e46c, lpOverlapped=0x0 | out: lpBuffer=0x26bf39c*, lpNumberOfBytesRead=0x31e46c*=0x4dd8, lpOverlapped=0x0) returned 1 [0071.893] CloseHandle (hObject=0x178) returned 1 [0071.907] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\ABV8L7MY\\bs-jsdep[1].css", nBufferLength=0x105, lpBuffer=0x31deb0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\ABV8L7MY\\bs-jsdep[1].css", lpFilePart=0x0) returned 0x7f [0071.907] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e3a4) returned 1 [0071.908] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\ABV8L7MY\\bs-jsdep[1].css" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\abv8l7my\\bs-jsdep[1].css"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x178 [0071.909] GetFileType (hFile=0x178) returned 0x1 [0071.909] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e3a0) returned 1 [0071.909] GetFileType (hFile=0x178) returned 0x1 [0071.909] WriteFile (in: hFile=0x178, lpBuffer=0x272483c*, nNumberOfBytesToWrite=0x4de0, lpNumberOfBytesWritten=0x31e460, lpOverlapped=0x0 | out: lpBuffer=0x272483c*, lpNumberOfBytesWritten=0x31e460*=0x4de0, lpOverlapped=0x0) returned 1 [0071.910] CloseHandle (hObject=0x178) returned 1 [0071.910] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\ABV8L7MY\\bs-jsdep[1].css", nBufferLength=0x105, lpBuffer=0x31dfe4, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\ABV8L7MY\\bs-jsdep[1].css", lpFilePart=0x0) returned 0x7f [0071.910] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\ABV8L7MY\\bs-jsdep[1].css", nBufferLength=0x105, lpBuffer=0x31dfe4, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\ABV8L7MY\\bs-jsdep[1].css", lpFilePart=0x0) returned 0x7f [0071.910] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e444) returned 1 [0071.910] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\ABV8L7MY\\bs-jsdep[1].css" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\abv8l7my\\bs-jsdep[1].css"), fInfoLevelId=0x0, lpFileInformation=0x31e4c0 | out: lpFileInformation=0x31e4c0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x54b2b1b0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x54b2b1b0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0xe4dc500, ftLastWriteTime.dwHighDateTime=0x1d6eb7f, nFileSizeHigh=0x0, nFileSizeLow=0x4de0)) returned 1 [0071.910] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e440) returned 1 [0071.910] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\ABV8L7MY\\bs-jsdep[1].css" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\abv8l7my\\bs-jsdep[1].css"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\ABV8L7MY\\bs-jsdep[1].css" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\abv8l7my\\bs-jsdep[1].css")) returned 1 [0071.911] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\ABV8L7MY\\core[1].css", nBufferLength=0x105, lpBuffer=0x31dec4, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\ABV8L7MY\\core[1].css", lpFilePart=0x0) returned 0x7b [0071.911] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e3b8) returned 1 [0071.911] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\ABV8L7MY\\core[1].css" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\abv8l7my\\core[1].css"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x178 [0071.912] GetFileType (hFile=0x178) returned 0x1 [0071.912] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e3b4) returned 1 [0071.912] GetFileType (hFile=0x178) returned 0x1 [0071.912] GetFileSize (in: hFile=0x178, lpFileSizeHigh=0x31e4c0 | out: lpFileSizeHigh=0x31e4c0*=0x0) returned 0x29349 [0071.912] ReadFile (in: hFile=0x178, lpBuffer=0x3669670, nNumberOfBytesToRead=0x29349, lpNumberOfBytesRead=0x31e46c, lpOverlapped=0x0 | out: lpBuffer=0x3669670*, lpNumberOfBytesRead=0x31e46c*=0x29349, lpOverlapped=0x0) returned 1 [0071.915] CloseHandle (hObject=0x178) returned 1 [0071.933] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\ABV8L7MY\\core[1].css", nBufferLength=0x105, lpBuffer=0x31deb0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\ABV8L7MY\\core[1].css", lpFilePart=0x0) returned 0x7b [0071.933] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e3a4) returned 1 [0071.933] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\ABV8L7MY\\core[1].css" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\abv8l7my\\core[1].css"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x178 [0071.935] GetFileType (hFile=0x178) returned 0x1 [0071.935] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e3a0) returned 1 [0071.935] GetFileType (hFile=0x178) returned 0x1 [0071.935] WriteFile (in: hFile=0x178, lpBuffer=0x3737738*, nNumberOfBytesToWrite=0x29350, lpNumberOfBytesWritten=0x31e460, lpOverlapped=0x0 | out: lpBuffer=0x3737738*, lpNumberOfBytesWritten=0x31e460*=0x29350, lpOverlapped=0x0) returned 1 [0071.939] CloseHandle (hObject=0x178) returned 1 [0071.939] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\ABV8L7MY\\core[1].css", nBufferLength=0x105, lpBuffer=0x31dfe4, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\ABV8L7MY\\core[1].css", lpFilePart=0x0) returned 0x7b [0071.939] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\ABV8L7MY\\core[1].css", nBufferLength=0x105, lpBuffer=0x31dfe4, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\ABV8L7MY\\core[1].css", lpFilePart=0x0) returned 0x7b [0071.939] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e444) returned 1 [0071.939] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\ABV8L7MY\\core[1].css" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\abv8l7my\\core[1].css"), fInfoLevelId=0x0, lpFileInformation=0x31e4c0 | out: lpFileInformation=0x31e4c0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x54b51310, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x54b51310, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0xe5287c0, ftLastWriteTime.dwHighDateTime=0x1d6eb7f, nFileSizeHigh=0x0, nFileSizeLow=0x29350)) returned 1 [0071.939] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e440) returned 1 [0071.939] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\ABV8L7MY\\core[1].css" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\abv8l7my\\core[1].css"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\ABV8L7MY\\core[1].css" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\abv8l7my\\core[1].css")) returned 1 [0071.940] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\ABV8L7MY\\e4-190963-91cdfbc1[1].txt", nBufferLength=0x105, lpBuffer=0x31dec4, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\ABV8L7MY\\e4-190963-91cdfbc1[1].txt", lpFilePart=0x0) returned 0x89 [0071.940] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e3b8) returned 1 [0071.940] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\ABV8L7MY\\e4-190963-91cdfbc1[1].txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\abv8l7my\\e4-190963-91cdfbc1[1].txt"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x178 [0071.940] GetFileType (hFile=0x178) returned 0x1 [0071.940] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e3b4) returned 1 [0071.940] GetFileType (hFile=0x178) returned 0x1 [0071.940] GetFileSize (in: hFile=0x178, lpFileSizeHigh=0x31e4c0 | out: lpFileSizeHigh=0x31e4c0*=0x0) returned 0x24e29 [0071.941] ReadFile (in: hFile=0x178, lpBuffer=0x3760aa8, nNumberOfBytesToRead=0x24e29, lpNumberOfBytesRead=0x31e46c, lpOverlapped=0x0 | out: lpBuffer=0x3760aa8*, lpNumberOfBytesRead=0x31e46c*=0x24e29, lpOverlapped=0x0) returned 1 [0071.943] CloseHandle (hObject=0x178) returned 1 [0071.960] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\ABV8L7MY\\e4-190963-91cdfbc1[1].txt", nBufferLength=0x105, lpBuffer=0x31deb0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\ABV8L7MY\\e4-190963-91cdfbc1[1].txt", lpFilePart=0x0) returned 0x89 [0071.960] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e3a4) returned 1 [0071.960] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\ABV8L7MY\\e4-190963-91cdfbc1[1].txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\abv8l7my\\e4-190963-91cdfbc1[1].txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x178 [0071.962] GetFileType (hFile=0x178) returned 0x1 [0071.962] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e3a0) returned 1 [0071.962] GetFileType (hFile=0x178) returned 0x1 [0071.962] WriteFile (in: hFile=0x178, lpBuffer=0x38191d0*, nNumberOfBytesToWrite=0x24e30, lpNumberOfBytesWritten=0x31e460, lpOverlapped=0x0 | out: lpBuffer=0x38191d0*, lpNumberOfBytesWritten=0x31e460*=0x24e30, lpOverlapped=0x0) returned 1 [0071.965] CloseHandle (hObject=0x178) returned 1 [0071.965] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\ABV8L7MY\\e4-190963-91cdfbc1[1].txt", nBufferLength=0x105, lpBuffer=0x31dfe4, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\ABV8L7MY\\e4-190963-91cdfbc1[1].txt", lpFilePart=0x0) returned 0x89 [0071.965] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\ABV8L7MY\\e4-190963-91cdfbc1[1].txt", nBufferLength=0x105, lpBuffer=0x31dfe4, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\ABV8L7MY\\e4-190963-91cdfbc1[1].txt", lpFilePart=0x0) returned 0x89 [0071.965] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e444) returned 1 [0071.965] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\ABV8L7MY\\e4-190963-91cdfbc1[1].txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\abv8l7my\\e4-190963-91cdfbc1[1].txt"), fInfoLevelId=0x0, lpFileInformation=0x31e4c0 | out: lpFileInformation=0x31e4c0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x5101afd0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x5101afd0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0xe574a80, ftLastWriteTime.dwHighDateTime=0x1d6eb7f, nFileSizeHigh=0x0, nFileSizeLow=0x24e30)) returned 1 [0071.966] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e440) returned 1 [0071.966] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\ABV8L7MY\\e4-190963-91cdfbc1[1].txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\abv8l7my\\e4-190963-91cdfbc1[1].txt"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\ABV8L7MY\\e4-190963-91cdfbc1[1].txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\abv8l7my\\e4-190963-91cdfbc1[1].txt")) returned 1 [0071.966] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\ABV8L7MY\\f[1].txt", nBufferLength=0x105, lpBuffer=0x31dec4, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\ABV8L7MY\\f[1].txt", lpFilePart=0x0) returned 0x78 [0071.966] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e3b8) returned 1 [0071.966] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\ABV8L7MY\\f[1].txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\abv8l7my\\f[1].txt"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x178 [0071.967] GetFileType (hFile=0x178) returned 0x1 [0071.967] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e3b4) returned 1 [0071.967] GetFileType (hFile=0x178) returned 0x1 [0071.967] GetFileSize (in: hFile=0x178, lpFileSizeHigh=0x31e4c0 | out: lpFileSizeHigh=0x31e4c0*=0x0) returned 0x34ce [0071.967] ReadFile (in: hFile=0x178, lpBuffer=0x27c42f0, nNumberOfBytesToRead=0x34ce, lpNumberOfBytesRead=0x31e46c, lpOverlapped=0x0 | out: lpBuffer=0x27c42f0*, lpNumberOfBytesRead=0x31e46c*=0x34ce, lpOverlapped=0x0) returned 1 [0071.969] CloseHandle (hObject=0x178) returned 1 [0071.982] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\ABV8L7MY\\f[1].txt", nBufferLength=0x105, lpBuffer=0x31deb0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\ABV8L7MY\\f[1].txt", lpFilePart=0x0) returned 0x78 [0071.982] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e3a4) returned 1 [0071.982] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\ABV8L7MY\\f[1].txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\abv8l7my\\f[1].txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x178 [0071.983] GetFileType (hFile=0x178) returned 0x1 [0071.983] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e3a0) returned 1 [0071.983] GetFileType (hFile=0x178) returned 0x1 [0071.983] WriteFile (in: hFile=0x178, lpBuffer=0x28218e8*, nNumberOfBytesToWrite=0x34d0, lpNumberOfBytesWritten=0x31e460, lpOverlapped=0x0 | out: lpBuffer=0x28218e8*, lpNumberOfBytesWritten=0x31e460*=0x34d0, lpOverlapped=0x0) returned 1 [0071.984] CloseHandle (hObject=0x178) returned 1 [0071.984] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\ABV8L7MY\\f[1].txt", nBufferLength=0x105, lpBuffer=0x31dfe4, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\ABV8L7MY\\f[1].txt", lpFilePart=0x0) returned 0x78 [0071.985] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\ABV8L7MY\\f[1].txt", nBufferLength=0x105, lpBuffer=0x31dfe4, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\ABV8L7MY\\f[1].txt", lpFilePart=0x0) returned 0x78 [0071.985] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e444) returned 1 [0071.985] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\ABV8L7MY\\f[1].txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\abv8l7my\\f[1].txt"), fInfoLevelId=0x0, lpFileInformation=0x31e4c0 | out: lpFileInformation=0x31e4c0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x62410fc0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x62410fc0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0xe59abe0, ftLastWriteTime.dwHighDateTime=0x1d6eb7f, nFileSizeHigh=0x0, nFileSizeLow=0x34d0)) returned 1 [0071.985] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e440) returned 1 [0071.985] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\ABV8L7MY\\f[1].txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\abv8l7my\\f[1].txt"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\ABV8L7MY\\f[1].txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\abv8l7my\\f[1].txt")) returned 1 [0071.985] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\ABV8L7MY\\google_plus_16dp[1].png", nBufferLength=0x105, lpBuffer=0x31dec4, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\ABV8L7MY\\google_plus_16dp[1].png", lpFilePart=0x0) returned 0x87 [0071.985] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e3b8) returned 1 [0071.985] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\ABV8L7MY\\google_plus_16dp[1].png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\abv8l7my\\google_plus_16dp[1].png"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x178 [0071.985] GetFileType (hFile=0x178) returned 0x1 [0071.985] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e3b4) returned 1 [0071.986] GetFileType (hFile=0x178) returned 0x1 [0071.986] GetFileSize (in: hFile=0x178, lpFileSizeHigh=0x31e4c0 | out: lpFileSizeHigh=0x31e4c0*=0x0) returned 0x6a6 [0071.986] ReadFile (in: hFile=0x178, lpBuffer=0x28259c0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x31e46c, lpOverlapped=0x0 | out: lpBuffer=0x28259c0*, lpNumberOfBytesRead=0x31e46c*=0x6a6, lpOverlapped=0x0) returned 1 [0071.987] CloseHandle (hObject=0x178) returned 1 [0072.033] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\ABV8L7MY\\google_plus_16dp[1].png", nBufferLength=0x105, lpBuffer=0x31deb0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\ABV8L7MY\\google_plus_16dp[1].png", lpFilePart=0x0) returned 0x87 [0072.033] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e3a4) returned 1 [0072.033] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\ABV8L7MY\\google_plus_16dp[1].png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\abv8l7my\\google_plus_16dp[1].png"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x178 [0072.034] GetFileType (hFile=0x178) returned 0x1 [0072.034] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e3a0) returned 1 [0072.034] GetFileType (hFile=0x178) returned 0x1 [0072.034] WriteFile (in: hFile=0x178, lpBuffer=0x2661cec*, nNumberOfBytesToWrite=0x6b0, lpNumberOfBytesWritten=0x31e434, lpOverlapped=0x0 | out: lpBuffer=0x2661cec*, lpNumberOfBytesWritten=0x31e434*=0x6b0, lpOverlapped=0x0) returned 1 [0072.035] CloseHandle (hObject=0x178) returned 1 [0072.035] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\ABV8L7MY\\google_plus_16dp[1].png", nBufferLength=0x105, lpBuffer=0x31dfe4, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\ABV8L7MY\\google_plus_16dp[1].png", lpFilePart=0x0) returned 0x87 [0072.035] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\ABV8L7MY\\google_plus_16dp[1].png", nBufferLength=0x105, lpBuffer=0x31dfe4, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\ABV8L7MY\\google_plus_16dp[1].png", lpFilePart=0x0) returned 0x87 [0072.035] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e444) returned 1 [0072.035] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\ABV8L7MY\\google_plus_16dp[1].png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\abv8l7my\\google_plus_16dp[1].png"), fInfoLevelId=0x0, lpFileInformation=0x31e4c0 | out: lpFileInformation=0x31e4c0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x60ef0c80, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x60ef0c80, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0xe60d000, ftLastWriteTime.dwHighDateTime=0x1d6eb7f, nFileSizeHigh=0x0, nFileSizeLow=0x6b0)) returned 1 [0072.035] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e440) returned 1 [0072.035] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\ABV8L7MY\\google_plus_16dp[1].png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\abv8l7my\\google_plus_16dp[1].png"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\ABV8L7MY\\google_plus_16dp[1].png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\abv8l7my\\google_plus_16dp[1].png")) returned 1 [0072.036] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\ABV8L7MY\\print[1].txt", nBufferLength=0x105, lpBuffer=0x31dec4, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\ABV8L7MY\\print[1].txt", lpFilePart=0x0) returned 0x7c [0072.036] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e3b8) returned 1 [0072.036] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\ABV8L7MY\\print[1].txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\abv8l7my\\print[1].txt"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x178 [0072.036] GetFileType (hFile=0x178) returned 0x1 [0072.036] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e3b4) returned 1 [0072.036] GetFileType (hFile=0x178) returned 0x1 [0072.036] GetFileSize (in: hFile=0x178, lpFileSizeHigh=0x31e4c0 | out: lpFileSizeHigh=0x31e4c0*=0x0) returned 0xa2 [0072.036] ReadFile (in: hFile=0x178, lpBuffer=0x266319c, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x31e46c, lpOverlapped=0x0 | out: lpBuffer=0x266319c*, lpNumberOfBytesRead=0x31e46c*=0xa2, lpOverlapped=0x0) returned 1 [0072.038] CloseHandle (hObject=0x178) returned 1 [0072.052] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\ABV8L7MY\\print[1].txt", nBufferLength=0x105, lpBuffer=0x31deb0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\ABV8L7MY\\print[1].txt", lpFilePart=0x0) returned 0x7c [0072.052] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e3a4) returned 1 [0072.052] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\ABV8L7MY\\print[1].txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\abv8l7my\\print[1].txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x178 [0072.053] GetFileType (hFile=0x178) returned 0x1 [0072.053] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e3a0) returned 1 [0072.053] GetFileType (hFile=0x178) returned 0x1 [0072.053] WriteFile (in: hFile=0x178, lpBuffer=0x26b1508*, nNumberOfBytesToWrite=0xb0, lpNumberOfBytesWritten=0x31e434, lpOverlapped=0x0 | out: lpBuffer=0x26b1508*, lpNumberOfBytesWritten=0x31e434*=0xb0, lpOverlapped=0x0) returned 1 [0072.054] CloseHandle (hObject=0x178) returned 1 [0072.054] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\ABV8L7MY\\print[1].txt", nBufferLength=0x105, lpBuffer=0x31dfe4, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\ABV8L7MY\\print[1].txt", lpFilePart=0x0) returned 0x7c [0072.054] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\ABV8L7MY\\print[1].txt", nBufferLength=0x105, lpBuffer=0x31dfe4, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\ABV8L7MY\\print[1].txt", lpFilePart=0x0) returned 0x7c [0072.054] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e444) returned 1 [0072.054] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\ABV8L7MY\\print[1].txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\abv8l7my\\print[1].txt"), fInfoLevelId=0x0, lpFileInformation=0x31e4c0 | out: lpFileInformation=0x31e4c0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x54fa1af0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x54fa1af0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0xe633160, ftLastWriteTime.dwHighDateTime=0x1d6eb7f, nFileSizeHigh=0x0, nFileSizeLow=0xb0)) returned 1 [0072.054] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e440) returned 1 [0072.054] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\ABV8L7MY\\print[1].txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\abv8l7my\\print[1].txt"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\ABV8L7MY\\print[1].txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\abv8l7my\\print[1].txt")) returned 1 [0072.055] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\ABV8L7MY\\tecjslog[1].png", nBufferLength=0x105, lpBuffer=0x31dec4, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\ABV8L7MY\\tecjslog[1].png", lpFilePart=0x0) returned 0x7f [0072.055] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e3b8) returned 1 [0072.055] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\ABV8L7MY\\tecjslog[1].png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\abv8l7my\\tecjslog[1].png"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x178 [0072.055] GetFileType (hFile=0x178) returned 0x1 [0072.055] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e3b4) returned 1 [0072.055] GetFileType (hFile=0x178) returned 0x1 [0072.055] GetFileSize (in: hFile=0x178, lpFileSizeHigh=0x31e4c0 | out: lpFileSizeHigh=0x31e4c0*=0x0) returned 0x67 [0072.055] ReadFile (in: hFile=0x178, lpBuffer=0x26b2944, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x31e46c, lpOverlapped=0x0 | out: lpBuffer=0x26b2944*, lpNumberOfBytesRead=0x31e46c*=0x67, lpOverlapped=0x0) returned 1 [0072.057] CloseHandle (hObject=0x178) returned 1 [0072.070] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\ABV8L7MY\\tecjslog[1].png", nBufferLength=0x105, lpBuffer=0x31deb0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\ABV8L7MY\\tecjslog[1].png", lpFilePart=0x0) returned 0x7f [0072.071] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e3a4) returned 1 [0072.071] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\ABV8L7MY\\tecjslog[1].png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\abv8l7my\\tecjslog[1].png"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x178 [0072.071] GetFileType (hFile=0x178) returned 0x1 [0072.072] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e3a0) returned 1 [0072.072] GetFileType (hFile=0x178) returned 0x1 [0072.072] WriteFile (in: hFile=0x178, lpBuffer=0x2700ad8*, nNumberOfBytesToWrite=0x70, lpNumberOfBytesWritten=0x31e434, lpOverlapped=0x0 | out: lpBuffer=0x2700ad8*, lpNumberOfBytesWritten=0x31e434*=0x70, lpOverlapped=0x0) returned 1 [0072.073] CloseHandle (hObject=0x178) returned 1 [0072.073] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\ABV8L7MY\\tecjslog[1].png", nBufferLength=0x105, lpBuffer=0x31dfe4, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\ABV8L7MY\\tecjslog[1].png", lpFilePart=0x0) returned 0x7f [0072.073] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\ABV8L7MY\\tecjslog[1].png", nBufferLength=0x105, lpBuffer=0x31dfe4, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\ABV8L7MY\\tecjslog[1].png", lpFilePart=0x0) returned 0x7f [0072.073] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e444) returned 1 [0072.073] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\ABV8L7MY\\tecjslog[1].png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\abv8l7my\\tecjslog[1].png"), fInfoLevelId=0x0, lpFileInformation=0x31e4c0 | out: lpFileInformation=0x31e4c0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xbfbb3b50, ftCreationTime.dwHighDateTime=0x1d2faf2, ftLastAccessTime.dwLowDateTime=0xbfbb3b50, ftLastAccessTime.dwHighDateTime=0x1d2faf2, ftLastWriteTime.dwLowDateTime=0xe67f420, ftLastWriteTime.dwHighDateTime=0x1d6eb7f, nFileSizeHigh=0x0, nFileSizeLow=0x70)) returned 1 [0072.073] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e440) returned 1 [0072.073] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\ABV8L7MY\\tecjslog[1].png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\abv8l7my\\tecjslog[1].png"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\ABV8L7MY\\tecjslog[1].png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\abv8l7my\\tecjslog[1].png")) returned 1 [0072.074] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e4ec) returned 1 [0072.074] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\IKQEEPZR", nBufferLength=0x105, lpBuffer=0x31dff4, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\IKQEEPZR", lpFilePart=0x0) returned 0x6f [0072.074] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\IKQEEPZR\\", nBufferLength=0x105, lpBuffer=0x31dfc8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\IKQEEPZR\\", lpFilePart=0x0) returned 0x70 [0072.074] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\IKQEEPZR\\*", lpFindFileData=0x31e214 | out: lpFindFileData=0x31e214*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0x4f090c50, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x527ba6f0, ftLastAccessTime.dwHighDateTime=0x1d2faf3, ftLastWriteTime.dwLowDateTime=0x527ba6f0, ftLastWriteTime.dwHighDateTime=0x1d2faf3, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5107b20 [0072.077] FindNextFileW (in: hFindFile=0x5107b20, lpFindFileData=0x31e224 | out: lpFindFileData=0x31e224*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0x4f090c50, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x527ba6f0, ftLastAccessTime.dwHighDateTime=0x1d2faf3, ftLastWriteTime.dwLowDateTime=0x527ba6f0, ftLastWriteTime.dwHighDateTime=0x1d2faf3, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0072.078] FindNextFileW (in: hFindFile=0x5107b20, lpFindFileData=0x31e224 | out: lpFindFileData=0x31e224*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x45027e90, ftCreationTime.dwHighDateTime=0x1d2faf3, ftLastAccessTime.dwLowDateTime=0x45027e90, ftLastAccessTime.dwHighDateTime=0x1d2faf3, ftLastWriteTime.dwLowDateTime=0x45027e90, ftLastWriteTime.dwHighDateTime=0x1d2faf3, nFileSizeHigh=0x0, nFileSizeLow=0xa756, dwReserved0=0x0, dwReserved1=0x0, cFileName="19619569[1].gif", cAlternateFileName="196195~1.GIF")) returned 1 [0072.078] FindNextFileW (in: hFindFile=0x5107b20, lpFindFileData=0x31e224 | out: lpFindFileData=0x31e224*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x54962130, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x54962130, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x549ae3f0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x461fe, dwReserved0=0x0, dwReserved1=0x0, cFileName="7962161087[1].js", cAlternateFileName="796216~1.JS")) returned 1 [0072.078] FindNextFileW (in: hFindFile=0x5107b20, lpFindFileData=0x31e224 | out: lpFindFileData=0x31e224*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x53017770, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x53017770, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x53017770, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x14d, dwReserved0=0x0, dwReserved1=0x0, cFileName="AA3DGHW[1].png", cAlternateFileName="AA3DGH~1.PNG")) returned 1 [0072.078] FindNextFileW (in: hFindFile=0x5107b20, lpFindFileData=0x31e224 | out: lpFindFileData=0x31e224*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x456d9c70, ftCreationTime.dwHighDateTime=0x1d2faf3, ftLastAccessTime.dwLowDateTime=0x456d9c70, ftLastAccessTime.dwHighDateTime=0x1d2faf3, ftLastWriteTime.dwLowDateTime=0x456d9c70, ftLastWriteTime.dwHighDateTime=0x1d2faf3, nFileSizeHigh=0x0, nFileSizeLow=0x197, dwReserved0=0x0, dwReserved1=0x0, cFileName="AA3e1pt[2].png", cAlternateFileName="AA3E1P~2.PNG")) returned 1 [0072.079] FindNextFileW (in: hFindFile=0x5107b20, lpFindFileData=0x31e224 | out: lpFindFileData=0x31e224*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x45856a30, ftCreationTime.dwHighDateTime=0x1d2faf3, ftLastAccessTime.dwLowDateTime=0x45856a30, ftLastAccessTime.dwHighDateTime=0x1d2faf3, ftLastWriteTime.dwLowDateTime=0x45856a30, ftLastWriteTime.dwHighDateTime=0x1d2faf3, nFileSizeHigh=0x0, nFileSizeLow=0x2c2, dwReserved0=0x0, dwReserved1=0x0, cFileName="AA42ckd[1].png", cAlternateFileName="AA42CK~1.PNG")) returned 1 [0072.079] FindNextFileW (in: hFindFile=0x5107b20, lpFindFileData=0x31e224 | out: lpFindFileData=0x31e224*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x45a1fab0, ftCreationTime.dwHighDateTime=0x1d2faf3, ftLastAccessTime.dwLowDateTime=0x45a1fab0, ftLastAccessTime.dwHighDateTime=0x1d2faf3, ftLastWriteTime.dwLowDateTime=0x45a1fab0, ftLastWriteTime.dwHighDateTime=0x1d2faf3, nFileSizeHigh=0x0, nFileSizeLow=0x2c2, dwReserved0=0x0, dwReserved1=0x0, cFileName="AA42eYr[1].png", cAlternateFileName="AA42EY~1.PNG")) returned 1 [0072.079] FindNextFileW (in: hFindFile=0x5107b20, lpFindFileData=0x31e224 | out: lpFindFileData=0x31e224*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x45bc29d0, ftCreationTime.dwHighDateTime=0x1d2faf3, ftLastAccessTime.dwLowDateTime=0x45bc29d0, ftLastAccessTime.dwHighDateTime=0x1d2faf3, ftLastWriteTime.dwLowDateTime=0x45bc29d0, ftLastWriteTime.dwHighDateTime=0x1d2faf3, nFileSizeHigh=0x0, nFileSizeLow=0x204, dwReserved0=0x0, dwReserved1=0x0, cFileName="AA61ILp[2].png", cAlternateFileName="AA61IL~2.PNG")) returned 1 [0072.079] FindNextFileW (in: hFindFile=0x5107b20, lpFindFileData=0x31e224 | out: lpFindFileData=0x31e224*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x50ebbff0, ftCreationTime.dwHighDateTime=0x1d2faf3, ftLastAccessTime.dwLowDateTime=0x50ebbff0, ftLastAccessTime.dwHighDateTime=0x1d2faf3, ftLastWriteTime.dwLowDateTime=0x50ebbff0, ftLastWriteTime.dwHighDateTime=0x1d2faf3, nFileSizeHigh=0x0, nFileSizeLow=0x2ed, dwReserved0=0x0, dwReserved1=0x0, cFileName="AA6SNZ6[1].png", cAlternateFileName="AA6SNZ~1.PNG")) returned 1 [0072.079] FindNextFileW (in: hFindFile=0x5107b20, lpFindFileData=0x31e224 | out: lpFindFileData=0x31e224*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x454eaa90, ftCreationTime.dwHighDateTime=0x1d2faf3, ftLastAccessTime.dwLowDateTime=0x454eaa90, ftLastAccessTime.dwHighDateTime=0x1d2faf3, ftLastWriteTime.dwLowDateTime=0x454eaa90, ftLastWriteTime.dwHighDateTime=0x1d2faf3, nFileSizeHigh=0x0, nFileSizeLow=0x2fc, dwReserved0=0x0, dwReserved1=0x0, cFileName="AAbyinC[1].png", cAlternateFileName="AABYIN~1.PNG")) returned 1 [0072.079] FindNextFileW (in: hFindFile=0x5107b20, lpFindFileData=0x31e224 | out: lpFindFileData=0x31e224*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x45ab8030, ftCreationTime.dwHighDateTime=0x1d2faf3, ftLastAccessTime.dwLowDateTime=0x45ab8030, ftLastAccessTime.dwHighDateTime=0x1d2faf3, ftLastWriteTime.dwLowDateTime=0x45ab8030, ftLastWriteTime.dwHighDateTime=0x1d2faf3, nFileSizeHigh=0x0, nFileSizeLow=0x340b, dwReserved0=0x0, dwReserved1=0x0, cFileName="AAicW5W[1].jpg", cAlternateFileName="AAICW5~1.JPG")) returned 1 [0072.079] FindNextFileW (in: hFindFile=0x5107b20, lpFindFileData=0x31e224 | out: lpFindFileData=0x31e224*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x538925d0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x538925d0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x538b8730, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x19a4, dwReserved0=0x0, dwReserved1=0x0, cFileName="AAj0doQ[1].jpg", cAlternateFileName="AAJ0DO~1.JPG")) returned 1 [0072.079] FindNextFileW (in: hFindFile=0x5107b20, lpFindFileData=0x31e224 | out: lpFindFileData=0x31e224*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x5159c2b0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x5159c2b0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x5159c2b0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x35c, dwReserved0=0x0, dwReserved1=0x0, cFileName="AAkqhIf[1].png", cAlternateFileName="AAKQHI~1.PNG")) returned 1 [0072.080] FindNextFileW (in: hFindFile=0x5107b20, lpFindFileData=0x31e224 | out: lpFindFileData=0x31e224*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x458308d0, ftCreationTime.dwHighDateTime=0x1d2faf3, ftLastAccessTime.dwLowDateTime=0x458308d0, ftLastAccessTime.dwHighDateTime=0x1d2faf3, ftLastWriteTime.dwLowDateTime=0x458308d0, ftLastWriteTime.dwHighDateTime=0x1d2faf3, nFileSizeHigh=0x0, nFileSizeLow=0x278e, dwReserved0=0x0, dwReserved1=0x0, cFileName="AAmo09p[1].jpg", cAlternateFileName="AAMO09~1.JPG")) returned 1 [0072.080] FindNextFileW (in: hFindFile=0x5107b20, lpFindFileData=0x31e224 | out: lpFindFileData=0x31e224*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x45bc29d0, ftCreationTime.dwHighDateTime=0x1d2faf3, ftLastAccessTime.dwLowDateTime=0x45bc29d0, ftLastAccessTime.dwHighDateTime=0x1d2faf3, ftLastWriteTime.dwLowDateTime=0x45bc29d0, ftLastWriteTime.dwHighDateTime=0x1d2faf3, nFileSizeHigh=0x0, nFileSizeLow=0x19a, dwReserved0=0x0, dwReserved1=0x0, cFileName="AAmUyV2[1].png", cAlternateFileName="AAMUYV~1.PNG")) returned 1 [0072.080] FindNextFileW (in: hFindFile=0x5107b20, lpFindFileData=0x31e224 | out: lpFindFileData=0x31e224*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x45798350, ftCreationTime.dwHighDateTime=0x1d2faf3, ftLastAccessTime.dwLowDateTime=0x45798350, ftLastAccessTime.dwHighDateTime=0x1d2faf3, ftLastWriteTime.dwLowDateTime=0x45798350, ftLastWriteTime.dwHighDateTime=0x1d2faf3, nFileSizeHigh=0x0, nFileSizeLow=0xfe, dwReserved0=0x0, dwReserved1=0x0, cFileName="AAn7gKR[1].png", cAlternateFileName="AAN7GK~1.PNG")) returned 1 [0072.080] FindNextFileW (in: hFindFile=0x5107b20, lpFindFileData=0x31e224 | out: lpFindFileData=0x31e224*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x61be2420, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x61be2420, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x61be2420, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x650, dwReserved0=0x0, dwReserved1=0x0, cFileName="activityi;src=2542116;type=clien612;cat=chrom0;ord=1;num=7814394060213[1].htm", cAlternateFileName="ACTIVI~1.HTM")) returned 1 [0072.080] FindNextFileW (in: hFindFile=0x5107b20, lpFindFileData=0x31e224 | out: lpFindFileData=0x31e224*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xbf2a0770, ftCreationTime.dwHighDateTime=0x1d2faf2, ftLastAccessTime.dwLowDateTime=0xbf2a0770, ftLastAccessTime.dwHighDateTime=0x1d2faf2, ftLastWriteTime.dwLowDateTime=0xbf2a0770, ftLastWriteTime.dwHighDateTime=0x1d2faf2, nFileSizeHigh=0x0, nFileSizeLow=0x2870, dwReserved0=0x0, dwReserved1=0x0, cFileName="adfscript[1]", cAlternateFileName="ADFSCR~1")) returned 1 [0072.080] FindNextFileW (in: hFindFile=0x5107b20, lpFindFileData=0x31e224 | out: lpFindFileData=0x31e224*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xbf54e030, ftCreationTime.dwHighDateTime=0x1d2faf2, ftLastAccessTime.dwLowDateTime=0xbf54e030, ftLastAccessTime.dwHighDateTime=0x1d2faf2, ftLastWriteTime.dwLowDateTime=0xbf54e030, ftLastWriteTime.dwHighDateTime=0x1d2faf2, nFileSizeHigh=0x0, nFileSizeLow=0xf1f, dwReserved0=0x0, dwReserved1=0x0, cFileName="adfserve[1]", cAlternateFileName="ADFSER~1")) returned 1 [0072.080] FindNextFileW (in: hFindFile=0x5107b20, lpFindFileData=0x31e224 | out: lpFindFileData=0x31e224*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x533a9870, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x533a9870, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x533a9870, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x11835, dwReserved0=0x0, dwReserved1=0x0, cFileName="ast[2].js", cAlternateFileName="AST_2_~1.JS")) returned 1 [0072.081] FindNextFileW (in: hFindFile=0x5107b20, lpFindFileData=0x31e224 | out: lpFindFileData=0x31e224*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x53d7b330, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x53d7b330, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x53d7b330, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x543, dwReserved0=0x0, dwReserved1=0x0, cFileName="async_usersync[1]", cAlternateFileName="ASYNC_~1")) returned 1 [0072.081] FindNextFileW (in: hFindFile=0x5107b20, lpFindFileData=0x31e224 | out: lpFindFileData=0x31e224*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x5108d3f0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x5108d3f0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x510b3550, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x86e6, dwReserved0=0x0, dwReserved1=0x0, cFileName="b2fd15[1].eot", cAlternateFileName="B2FD15~1.EOT")) returned 1 [0072.081] FindNextFileW (in: hFindFile=0x5107b20, lpFindFileData=0x31e224 | out: lpFindFileData=0x31e224*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x45915110, ftCreationTime.dwHighDateTime=0x1d2faf3, ftLastAccessTime.dwLowDateTime=0x45915110, ftLastAccessTime.dwHighDateTime=0x1d2faf3, ftLastWriteTime.dwLowDateTime=0x45915110, ftLastWriteTime.dwHighDateTime=0x1d2faf3, nFileSizeHigh=0x0, nFileSizeLow=0x2c0, dwReserved0=0x0, dwReserved1=0x0, cFileName="BB5zDwX[1].png", cAlternateFileName="BB5ZDW~1.PNG")) returned 1 [0072.081] FindNextFileW (in: hFindFile=0x5107b20, lpFindFileData=0x31e224 | out: lpFindFileData=0x31e224*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x45b042f0, ftCreationTime.dwHighDateTime=0x1d2faf3, ftLastAccessTime.dwLowDateTime=0x45b042f0, ftLastAccessTime.dwHighDateTime=0x1d2faf3, ftLastWriteTime.dwLowDateTime=0x45b042f0, ftLastWriteTime.dwHighDateTime=0x1d2faf3, nFileSizeHigh=0x0, nFileSizeLow=0x227, dwReserved0=0x0, dwReserved1=0x0, cFileName="BBaK3Nm[1].png", cAlternateFileName="BBAK3N~1.PNG")) returned 1 [0072.081] FindNextFileW (in: hFindFile=0x5107b20, lpFindFileData=0x31e224 | out: lpFindFileData=0x31e224*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x53337450, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x53337450, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x53337450, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x2143, dwReserved0=0x0, dwReserved1=0x0, cFileName="BBBLcCz[1].jpg", cAlternateFileName="BBBLCC~1.JPG")) returned 1 [0072.081] FindNextFileW (in: hFindFile=0x5107b20, lpFindFileData=0x31e224 | out: lpFindFileData=0x31e224*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x5348e0b0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x5348e0b0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x5348e0b0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x912, dwReserved0=0x0, dwReserved1=0x0, cFileName="BBBLdzQ[1].jpg", cAlternateFileName="BBBLDZ~1.JPG")) returned 1 [0072.081] FindNextFileW (in: hFindFile=0x5107b20, lpFindFileData=0x31e224 | out: lpFindFileData=0x31e224*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x532eb190, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x532eb190, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x532eb190, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x6e8, dwReserved0=0x0, dwReserved1=0x0, cFileName="BBBO1mQ[1].jpg", cAlternateFileName="BBBO1M~1.JPG")) returned 1 [0072.081] FindNextFileW (in: hFindFile=0x5107b20, lpFindFileData=0x31e224 | out: lpFindFileData=0x31e224*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x537add90, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x537add90, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x537add90, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x36d2, dwReserved0=0x0, dwReserved1=0x0, cFileName="BBBO1qB[1].jpg", cAlternateFileName="BBBO1Q~1.JPG")) returned 1 [0072.082] FindNextFileW (in: hFindFile=0x5107b20, lpFindFileData=0x31e224 | out: lpFindFileData=0x31e224*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x53194530, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x53194530, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x53194530, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x75e, dwReserved0=0x0, dwReserved1=0x0, cFileName="BBBOIAt[1].jpg", cAlternateFileName="BBBOIA~1.JPG")) returned 1 [0072.082] FindNextFileW (in: hFindFile=0x5107b20, lpFindFileData=0x31e224 | out: lpFindFileData=0x31e224*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x539049f0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x539049f0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x539049f0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x6dc, dwReserved0=0x0, dwReserved1=0x0, cFileName="BBBOmuh[1].jpg", cAlternateFileName="BBBOMU~1.JPG")) returned 1 [0072.082] FindNextFileW (in: hFindFile=0x5107b20, lpFindFileData=0x31e224 | out: lpFindFileData=0x31e224*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x53467f50, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x53467f50, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x5348e0b0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x9be, dwReserved0=0x0, dwReserved1=0x0, cFileName="BBBPK5J[1].jpg", cAlternateFileName="BBBPK5~1.JPG")) returned 1 [0072.082] FindNextFileW (in: hFindFile=0x5107b20, lpFindFileData=0x31e224 | out: lpFindFileData=0x31e224*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x53194530, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x53194530, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x53194530, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x1694, dwReserved0=0x0, dwReserved1=0x0, cFileName="BBBPMvJ[1].jpg", cAlternateFileName="BBBPMV~1.JPG")) returned 1 [0072.083] FindNextFileW (in: hFindFile=0x5107b20, lpFindFileData=0x31e224 | out: lpFindFileData=0x31e224*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x539e9230, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x539e9230, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x53a0f390, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x85d, dwReserved0=0x0, dwReserved1=0x0, cFileName="BBBUL3E[1].jpg", cAlternateFileName="BBBUL3~1.JPG")) returned 1 [0072.083] FindNextFileW (in: hFindFile=0x5107b20, lpFindFileData=0x31e224 | out: lpFindFileData=0x31e224*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x515e8570, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x515e8570, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x515e8570, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x878, dwReserved0=0x0, dwReserved1=0x0, cFileName="BBBUqkT[1].jpg", cAlternateFileName="BBBUQK~1.JPG")) returned 1 [0072.083] FindNextFileW (in: hFindFile=0x5107b20, lpFindFileData=0x31e224 | out: lpFindFileData=0x31e224*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x52f59090, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x52f59090, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x52f59090, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x878, dwReserved0=0x0, dwReserved1=0x0, cFileName="BBBUqkT[2].jpg", cAlternateFileName="BBBUQK~2.JPG")) returned 1 [0072.084] FindNextFileW (in: hFindFile=0x5107b20, lpFindFileData=0x31e224 | out: lpFindFileData=0x31e224*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x530afcf0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x530afcf0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x530afcf0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x77f, dwReserved0=0x0, dwReserved1=0x0, cFileName="BBBX3z0[1].jpg", cAlternateFileName="BBBX3Z~1.JPG")) returned 1 [0072.084] FindNextFileW (in: hFindFile=0x5107b20, lpFindFileData=0x31e224 | out: lpFindFileData=0x31e224*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x538b8730, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x538b8730, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x538b8730, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x22b3, dwReserved0=0x0, dwReserved1=0x0, cFileName="BBBYEW1[1].jpg", cAlternateFileName="BBBYEW~1.JPG")) returned 1 [0072.084] FindNextFileW (in: hFindFile=0x5107b20, lpFindFileData=0x31e224 | out: lpFindFileData=0x31e224*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x52ec0b10, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x52ec0b10, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x52ec0b10, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x19cf, dwReserved0=0x0, dwReserved1=0x0, cFileName="BBBYfEH[1].jpg", cAlternateFileName="BBBYFE~1.JPG")) returned 1 [0072.084] FindNextFileW (in: hFindFile=0x5107b20, lpFindFileData=0x31e224 | out: lpFindFileData=0x31e224*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x5b2bd440, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x5b2bd440, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x5b2bd440, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x2ca1, dwReserved0=0x0, dwReserved1=0x0, cFileName="BBBZ20W[1].jpg", cAlternateFileName="BBBZ20~1.JPG")) returned 1 [0072.084] FindNextFileW (in: hFindFile=0x5107b20, lpFindFileData=0x31e224 | out: lpFindFileData=0x31e224*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x53950cb0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x53950cb0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x539c30d0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x1f37, dwReserved0=0x0, dwReserved1=0x0, cFileName="BBBzaxY[1].jpg", cAlternateFileName="BBBZAX~1.JPG")) returned 1 [0072.084] FindNextFileW (in: hFindFile=0x5107b20, lpFindFileData=0x31e224 | out: lpFindFileData=0x31e224*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x53063a30, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x53063a30, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x53089b90, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x2131, dwReserved0=0x0, dwReserved1=0x0, cFileName="BBBZzuz[1].jpg", cAlternateFileName="BBBZZU~1.JPG")) returned 1 [0072.084] FindNextFileW (in: hFindFile=0x5107b20, lpFindFileData=0x31e224 | out: lpFindFileData=0x31e224*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x5530da90, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x5530da90, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x5530da90, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x370a, dwReserved0=0x0, dwReserved1=0x0, cFileName="BBC03B1[1].jpg", cAlternateFileName="BBC03B~1.JPG")) returned 1 [0072.085] FindNextFileW (in: hFindFile=0x5107b20, lpFindFileData=0x31e224 | out: lpFindFileData=0x31e224*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x51256470, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x51256470, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x51256470, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x22a0, dwReserved0=0x0, dwReserved1=0x0, cFileName="BBC04o2[1].jpg", cAlternateFileName="BBC04O~1.JPG")) returned 1 [0072.085] FindNextFileW (in: hFindFile=0x5107b20, lpFindFileData=0x31e224 | out: lpFindFileData=0x31e224*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x53657130, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x53657130, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x53657130, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x2036, dwReserved0=0x0, dwReserved1=0x0, cFileName="BBC06ZQ[1].jpg", cAlternateFileName="BBC06Z~1.JPG")) returned 1 [0072.085] FindNextFileW (in: hFindFile=0x5107b20, lpFindFileData=0x31e224 | out: lpFindFileData=0x31e224*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x5b2bd440, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x5b2bd440, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x5b2bd440, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x13fd, dwReserved0=0x0, dwReserved1=0x0, cFileName="BBC0ALC[1].jpg", cAlternateFileName="BBC0AL~1.JPG")) returned 1 [0072.085] FindNextFileW (in: hFindFile=0x5107b20, lpFindFileData=0x31e224 | out: lpFindFileData=0x31e224*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x52e74850, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x52e74850, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x52e74850, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x884, dwReserved0=0x0, dwReserved1=0x0, cFileName="BBC0BiZ[1].jpg", cAlternateFileName="BBC0BI~1.JPG")) returned 1 [0072.085] FindNextFileW (in: hFindFile=0x5107b20, lpFindFileData=0x31e224 | out: lpFindFileData=0x31e224*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x52f0cdd0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x52f0cdd0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x52f0cdd0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x34d8, dwReserved0=0x0, dwReserved1=0x0, cFileName="BBC0FXU[1].jpg", cAlternateFileName="BBC0FX~1.JPG")) returned 1 [0072.085] FindNextFileW (in: hFindFile=0x5107b20, lpFindFileData=0x31e224 | out: lpFindFileData=0x31e224*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x61282d80, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x61282d80, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x61282d80, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x2fd1, dwReserved0=0x0, dwReserved1=0x0, cFileName="BBC0FXU[2].jpg", cAlternateFileName="BBC0FX~2.JPG")) returned 1 [0072.085] FindNextFileW (in: hFindFile=0x5107b20, lpFindFileData=0x31e224 | out: lpFindFileData=0x31e224*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x52e28590, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x52e28590, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x52e28590, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x29c3, dwReserved0=0x0, dwReserved1=0x0, cFileName="BBC0mkg[1].jpg", cAlternateFileName="BBC0MK~1.JPG")) returned 1 [0072.085] FindNextFileW (in: hFindFile=0x5107b20, lpFindFileData=0x31e224 | out: lpFindFileData=0x31e224*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x52e9a9b0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x52e9a9b0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x52e9a9b0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0xa7b, dwReserved0=0x0, dwReserved1=0x0, cFileName="BBC0mkg[2].jpg", cAlternateFileName="BBC0MK~2.JPG")) returned 1 [0072.086] FindNextFileW (in: hFindFile=0x5107b20, lpFindFileData=0x31e224 | out: lpFindFileData=0x31e224*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x5127c5d0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x5127c5d0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x5127c5d0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x17af, dwReserved0=0x0, dwReserved1=0x0, cFileName="BBC0oQi[1].jpg", cAlternateFileName="BBC0OQ~1.JPG")) returned 1 [0072.086] FindNextFileW (in: hFindFile=0x5107b20, lpFindFileData=0x31e224 | out: lpFindFileData=0x31e224*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x52fa5350, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x52fa5350, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x52fa5350, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0xaf3, dwReserved0=0x0, dwReserved1=0x0, cFileName="BBC0tCi[1].jpg", cAlternateFileName="BBC0TC~1.JPG")) returned 1 [0072.086] FindNextFileW (in: hFindFile=0x5107b20, lpFindFileData=0x31e224 | out: lpFindFileData=0x31e224*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x459f9950, ftCreationTime.dwHighDateTime=0x1d2faf3, ftLastAccessTime.dwLowDateTime=0x459f9950, ftLastAccessTime.dwHighDateTime=0x1d2faf3, ftLastWriteTime.dwLowDateTime=0x459f9950, ftLastWriteTime.dwHighDateTime=0x1d2faf3, nFileSizeHigh=0x0, nFileSizeLow=0x350a, dwReserved0=0x0, dwReserved1=0x0, cFileName="BBCM2U2[1].jpg", cAlternateFileName="BBCM2U~1.JPG")) returned 1 [0072.086] FindNextFileW (in: hFindFile=0x5107b20, lpFindFileData=0x31e224 | out: lpFindFileData=0x31e224*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x4593b270, ftCreationTime.dwHighDateTime=0x1d2faf3, ftLastAccessTime.dwLowDateTime=0x4593b270, ftLastAccessTime.dwHighDateTime=0x1d2faf3, ftLastWriteTime.dwLowDateTime=0x4593b270, ftLastWriteTime.dwHighDateTime=0x1d2faf3, nFileSizeHigh=0x0, nFileSizeLow=0x68c, dwReserved0=0x0, dwReserved1=0x0, cFileName="BBDGTbx[1].jpg", cAlternateFileName="BBDGTB~1.JPG")) returned 1 [0072.086] FindNextFileW (in: hFindFile=0x5107b20, lpFindFileData=0x31e224 | out: lpFindFileData=0x31e224*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xbe399c90, ftCreationTime.dwHighDateTime=0x1d2faf2, ftLastAccessTime.dwLowDateTime=0xbe399c90, ftLastAccessTime.dwHighDateTime=0x1d2faf2, ftLastWriteTime.dwLowDateTime=0xbe399c90, ftLastWriteTime.dwHighDateTime=0x1d2faf2, nFileSizeHigh=0x0, nFileSizeLow=0x284, dwReserved0=0x0, dwReserved1=0x0, cFileName="BBDk44m[1].png", cAlternateFileName="BBDK44~1.PNG")) returned 1 [0072.086] FindNextFileW (in: hFindFile=0x5107b20, lpFindFileData=0x31e224 | out: lpFindFileData=0x31e224*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x45a6bd70, ftCreationTime.dwHighDateTime=0x1d2faf3, ftLastAccessTime.dwLowDateTime=0x45a6bd70, ftLastAccessTime.dwHighDateTime=0x1d2faf3, ftLastWriteTime.dwLowDateTime=0x45a6bd70, ftLastWriteTime.dwHighDateTime=0x1d2faf3, nFileSizeHigh=0x0, nFileSizeLow=0x2d04, dwReserved0=0x0, dwReserved1=0x0, cFileName="BBDWXoC[1].jpg", cAlternateFileName="BBDWXO~1.JPG")) returned 1 [0072.086] FindNextFileW (in: hFindFile=0x5107b20, lpFindFileData=0x31e224 | out: lpFindFileData=0x31e224*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x458c8e50, ftCreationTime.dwHighDateTime=0x1d2faf3, ftLastAccessTime.dwLowDateTime=0x458c8e50, ftLastAccessTime.dwHighDateTime=0x1d2faf3, ftLastWriteTime.dwLowDateTime=0x458c8e50, ftLastWriteTime.dwHighDateTime=0x1d2faf3, nFileSizeHigh=0x0, nFileSizeLow=0x863, dwReserved0=0x0, dwReserved1=0x0, cFileName="BBE3NcH[1].jpg", cAlternateFileName="BBE3NC~1.JPG")) returned 1 [0072.087] FindNextFileW (in: hFindFile=0x5107b20, lpFindFileData=0x31e224 | out: lpFindFileData=0x31e224*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x459ad690, ftCreationTime.dwHighDateTime=0x1d2faf3, ftLastAccessTime.dwLowDateTime=0x459ad690, ftLastAccessTime.dwHighDateTime=0x1d2faf3, ftLastWriteTime.dwLowDateTime=0x459ad690, ftLastWriteTime.dwHighDateTime=0x1d2faf3, nFileSizeHigh=0x0, nFileSizeLow=0x2b5, dwReserved0=0x0, dwReserved1=0x0, cFileName="BBE7GLE[1].png", cAlternateFileName="BBE7GL~1.PNG")) returned 1 [0072.087] FindNextFileW (in: hFindFile=0x5107b20, lpFindFileData=0x31e224 | out: lpFindFileData=0x31e224*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x45ade190, ftCreationTime.dwHighDateTime=0x1d2faf3, ftLastAccessTime.dwLowDateTime=0x45ade190, ftLastAccessTime.dwHighDateTime=0x1d2faf3, ftLastWriteTime.dwLowDateTime=0x45b042f0, ftLastWriteTime.dwHighDateTime=0x1d2faf3, nFileSizeHigh=0x0, nFileSizeLow=0x1c9b, dwReserved0=0x0, dwReserved1=0x0, cFileName="BBE8aLO[1].jpg", cAlternateFileName="BBE8AL~1.JPG")) returned 1 [0072.087] FindNextFileW (in: hFindFile=0x5107b20, lpFindFileData=0x31e224 | out: lpFindFileData=0x31e224*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x45a45c10, ftCreationTime.dwHighDateTime=0x1d2faf3, ftLastAccessTime.dwLowDateTime=0x45a45c10, ftLastAccessTime.dwHighDateTime=0x1d2faf3, ftLastWriteTime.dwLowDateTime=0x45a45c10, ftLastWriteTime.dwHighDateTime=0x1d2faf3, nFileSizeHigh=0x0, nFileSizeLow=0x702, dwReserved0=0x0, dwReserved1=0x0, cFileName="BBEd5bF[1].jpg", cAlternateFileName="BBED5B~1.JPG")) returned 1 [0072.087] FindNextFileW (in: hFindFile=0x5107b20, lpFindFileData=0x31e224 | out: lpFindFileData=0x31e224*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x50ebbff0, ftCreationTime.dwHighDateTime=0x1d2faf3, ftLastAccessTime.dwLowDateTime=0x50ebbff0, ftLastAccessTime.dwHighDateTime=0x1d2faf3, ftLastWriteTime.dwLowDateTime=0x50ebbff0, ftLastWriteTime.dwHighDateTime=0x1d2faf3, nFileSizeHigh=0x0, nFileSizeLow=0xaca8, dwReserved0=0x0, dwReserved1=0x0, cFileName="BBEdDNm[1].jpg", cAlternateFileName="BBEDDN~1.JPG")) returned 1 [0072.087] FindNextFileW (in: hFindFile=0x5107b20, lpFindFileData=0x31e224 | out: lpFindFileData=0x31e224*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x458a2cf0, ftCreationTime.dwHighDateTime=0x1d2faf3, ftLastAccessTime.dwLowDateTime=0x458a2cf0, ftLastAccessTime.dwHighDateTime=0x1d2faf3, ftLastWriteTime.dwLowDateTime=0x458a2cf0, ftLastWriteTime.dwHighDateTime=0x1d2faf3, nFileSizeHigh=0x0, nFileSizeLow=0x755, dwReserved0=0x0, dwReserved1=0x0, cFileName="BBEdpyr[1].jpg", cAlternateFileName="BBEDPY~1.JPG")) returned 1 [0072.087] FindNextFileW (in: hFindFile=0x5107b20, lpFindFileData=0x31e224 | out: lpFindFileData=0x31e224*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x457e4610, ftCreationTime.dwHighDateTime=0x1d2faf3, ftLastAccessTime.dwLowDateTime=0x457e4610, ftLastAccessTime.dwHighDateTime=0x1d2faf3, ftLastWriteTime.dwLowDateTime=0x457e4610, ftLastWriteTime.dwHighDateTime=0x1d2faf3, nFileSizeHigh=0x0, nFileSizeLow=0x1c72, dwReserved0=0x0, dwReserved1=0x0, cFileName="BBEdQdv[1].jpg", cAlternateFileName="BBEDQD~1.JPG")) returned 1 [0072.087] FindNextFileW (in: hFindFile=0x5107b20, lpFindFileData=0x31e224 | out: lpFindFileData=0x31e224*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xbe399c90, ftCreationTime.dwHighDateTime=0x1d2faf2, ftLastAccessTime.dwLowDateTime=0xbe399c90, ftLastAccessTime.dwHighDateTime=0x1d2faf2, ftLastWriteTime.dwLowDateTime=0xbe399c90, ftLastWriteTime.dwHighDateTime=0x1d2faf2, nFileSizeHigh=0x0, nFileSizeLow=0xa23, dwReserved0=0x0, dwReserved1=0x0, cFileName="BBEe62t[1].jpg", cAlternateFileName="BBEE62~1.JPG")) returned 1 [0072.089] FindNextFileW (in: hFindFile=0x5107b20, lpFindFileData=0x31e224 | out: lpFindFileData=0x31e224*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xbe4ca790, ftCreationTime.dwHighDateTime=0x1d2faf2, ftLastAccessTime.dwLowDateTime=0xbe4ca790, ftLastAccessTime.dwHighDateTime=0x1d2faf2, ftLastWriteTime.dwLowDateTime=0xbe4ca790, ftLastWriteTime.dwHighDateTime=0x1d2faf2, nFileSizeHigh=0x0, nFileSizeLow=0x1ca7, dwReserved0=0x0, dwReserved1=0x0, cFileName="BBEedPR[1].jpg", cAlternateFileName="BBEEDP~1.JPG")) returned 1 [0072.089] FindNextFileW (in: hFindFile=0x5107b20, lpFindFileData=0x31e224 | out: lpFindFileData=0x31e224*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xbe34d9d0, ftCreationTime.dwHighDateTime=0x1d2faf2, ftLastAccessTime.dwLowDateTime=0xbe34d9d0, ftLastAccessTime.dwHighDateTime=0x1d2faf2, ftLastWriteTime.dwLowDateTime=0xbe34d9d0, ftLastWriteTime.dwHighDateTime=0x1d2faf2, nFileSizeHigh=0x0, nFileSizeLow=0x9ef, dwReserved0=0x0, dwReserved1=0x0, cFileName="BBEeTpB[1].jpg", cAlternateFileName="BBEETP~1.JPG")) returned 1 [0072.089] FindNextFileW (in: hFindFile=0x5107b20, lpFindFileData=0x31e224 | out: lpFindFileData=0x31e224*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xbe4ca790, ftCreationTime.dwHighDateTime=0x1d2faf2, ftLastAccessTime.dwLowDateTime=0xbe4ca790, ftLastAccessTime.dwHighDateTime=0x1d2faf2, ftLastWriteTime.dwLowDateTime=0xbe4ca790, ftLastWriteTime.dwHighDateTime=0x1d2faf2, nFileSizeHigh=0x0, nFileSizeLow=0x952, dwReserved0=0x0, dwReserved1=0x0, cFileName="BBEeTuf[1].jpg", cAlternateFileName="BBEETU~1.JPG")) returned 1 [0072.090] FindNextFileW (in: hFindFile=0x5107b20, lpFindFileData=0x31e224 | out: lpFindFileData=0x31e224*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x45b76710, ftCreationTime.dwHighDateTime=0x1d2faf3, ftLastAccessTime.dwLowDateTime=0x45b76710, ftLastAccessTime.dwHighDateTime=0x1d2faf3, ftLastWriteTime.dwLowDateTime=0x45b76710, ftLastWriteTime.dwHighDateTime=0x1d2faf3, nFileSizeHigh=0x0, nFileSizeLow=0x7a9, dwReserved0=0x0, dwReserved1=0x0, cFileName="BBEeU5U[1].jpg", cAlternateFileName="BBEEU5~1.JPG")) returned 1 [0072.090] FindNextFileW (in: hFindFile=0x5107b20, lpFindFileData=0x31e224 | out: lpFindFileData=0x31e224*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x456d9c70, ftCreationTime.dwHighDateTime=0x1d2faf3, ftLastAccessTime.dwLowDateTime=0x456d9c70, ftLastAccessTime.dwHighDateTime=0x1d2faf3, ftLastWriteTime.dwLowDateTime=0x456d9c70, ftLastWriteTime.dwHighDateTime=0x1d2faf3, nFileSizeHigh=0x0, nFileSizeLow=0x86f, dwReserved0=0x0, dwReserved1=0x0, cFileName="BBEf306[1].jpg", cAlternateFileName="BBEF30~1.JPG")) returned 1 [0072.090] FindNextFileW (in: hFindFile=0x5107b20, lpFindFileData=0x31e224 | out: lpFindFileData=0x31e224*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x459613d0, ftCreationTime.dwHighDateTime=0x1d2faf3, ftLastAccessTime.dwLowDateTime=0x459613d0, ftLastAccessTime.dwHighDateTime=0x1d2faf3, ftLastWriteTime.dwLowDateTime=0x459613d0, ftLastWriteTime.dwHighDateTime=0x1d2faf3, nFileSizeHigh=0x0, nFileSizeLow=0x828, dwReserved0=0x0, dwReserved1=0x0, cFileName="BBEf54R[1].jpg", cAlternateFileName="BBEF54~1.JPG")) returned 1 [0072.090] FindNextFileW (in: hFindFile=0x5107b20, lpFindFileData=0x31e224 | out: lpFindFileData=0x31e224*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x4587cb90, ftCreationTime.dwHighDateTime=0x1d2faf3, ftLastAccessTime.dwLowDateTime=0x4587cb90, ftLastAccessTime.dwHighDateTime=0x1d2faf3, ftLastWriteTime.dwLowDateTime=0x4587cb90, ftLastWriteTime.dwHighDateTime=0x1d2faf3, nFileSizeHigh=0x0, nFileSizeLow=0x3860, dwReserved0=0x0, dwReserved1=0x0, cFileName="BBEfBbH[1].jpg", cAlternateFileName="BBEFBB~1.JPG")) returned 1 [0072.090] FindNextFileW (in: hFindFile=0x5107b20, lpFindFileData=0x31e224 | out: lpFindFileData=0x31e224*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x457be4b0, ftCreationTime.dwHighDateTime=0x1d2faf3, ftLastAccessTime.dwLowDateTime=0x457be4b0, ftLastAccessTime.dwHighDateTime=0x1d2faf3, ftLastWriteTime.dwLowDateTime=0x457be4b0, ftLastWriteTime.dwHighDateTime=0x1d2faf3, nFileSizeHigh=0x0, nFileSizeLow=0x19a5, dwReserved0=0x0, dwReserved1=0x0, cFileName="BBEfBq0[1].jpg", cAlternateFileName="BBEFBQ~1.JPG")) returned 1 [0072.090] FindNextFileW (in: hFindFile=0x5107b20, lpFindFileData=0x31e224 | out: lpFindFileData=0x31e224*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x45bc29d0, ftCreationTime.dwHighDateTime=0x1d2faf3, ftLastAccessTime.dwLowDateTime=0x45bc29d0, ftLastAccessTime.dwHighDateTime=0x1d2faf3, ftLastWriteTime.dwLowDateTime=0x45bc29d0, ftLastWriteTime.dwHighDateTime=0x1d2faf3, nFileSizeHigh=0x0, nFileSizeLow=0x2619, dwReserved0=0x0, dwReserved1=0x0, cFileName="BBEfBrz[1].jpg", cAlternateFileName="BBEFBR~1.JPG")) returned 1 [0072.090] FindNextFileW (in: hFindFile=0x5107b20, lpFindFileData=0x31e224 | out: lpFindFileData=0x31e224*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x45b76710, ftCreationTime.dwHighDateTime=0x1d2faf3, ftLastAccessTime.dwLowDateTime=0x45b76710, ftLastAccessTime.dwHighDateTime=0x1d2faf3, ftLastWriteTime.dwLowDateTime=0x45b76710, ftLastWriteTime.dwHighDateTime=0x1d2faf3, nFileSizeHigh=0x0, nFileSizeLow=0x1f84, dwReserved0=0x0, dwReserved1=0x0, cFileName="BBEfXl6[1].jpg", cAlternateFileName="BBEFXL~1.JPG")) returned 1 [0072.091] FindNextFileW (in: hFindFile=0x5107b20, lpFindFileData=0x31e224 | out: lpFindFileData=0x31e224*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xbded7090, ftCreationTime.dwHighDateTime=0x1d2faf2, ftLastAccessTime.dwLowDateTime=0xbded7090, ftLastAccessTime.dwHighDateTime=0x1d2faf2, ftLastWriteTime.dwLowDateTime=0xbded7090, ftLastWriteTime.dwHighDateTime=0x1d2faf2, nFileSizeHigh=0x0, nFileSizeLow=0x1c7e, dwReserved0=0x0, dwReserved1=0x0, cFileName="BBEgEH3[1].jpg", cAlternateFileName="BBEGEH~1.JPG")) returned 1 [0072.091] FindNextFileW (in: hFindFile=0x5107b20, lpFindFileData=0x31e224 | out: lpFindFileData=0x31e224*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x45725f30, ftCreationTime.dwHighDateTime=0x1d2faf3, ftLastAccessTime.dwLowDateTime=0x45725f30, ftLastAccessTime.dwHighDateTime=0x1d2faf3, ftLastWriteTime.dwLowDateTime=0x45725f30, ftLastWriteTime.dwHighDateTime=0x1d2faf3, nFileSizeHigh=0x0, nFileSizeLow=0x8f9, dwReserved0=0x0, dwReserved1=0x0, cFileName="BBEgsz3[1].jpg", cAlternateFileName="BBEGSZ~1.JPG")) returned 1 [0072.091] FindNextFileW (in: hFindFile=0x5107b20, lpFindFileData=0x31e224 | out: lpFindFileData=0x31e224*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x4574c090, ftCreationTime.dwHighDateTime=0x1d2faf3, ftLastAccessTime.dwLowDateTime=0x4574c090, ftLastAccessTime.dwHighDateTime=0x1d2faf3, ftLastWriteTime.dwLowDateTime=0x4574c090, ftLastWriteTime.dwHighDateTime=0x1d2faf3, nFileSizeHigh=0x0, nFileSizeLow=0x9b7, dwReserved0=0x0, dwReserved1=0x0, cFileName="BBEgTxB[1].jpg", cAlternateFileName="BBEGTX~1.JPG")) returned 1 [0072.091] FindNextFileW (in: hFindFile=0x5107b20, lpFindFileData=0x31e224 | out: lpFindFileData=0x31e224*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x45bc29d0, ftCreationTime.dwHighDateTime=0x1d2faf3, ftLastAccessTime.dwLowDateTime=0x45bc29d0, ftLastAccessTime.dwHighDateTime=0x1d2faf3, ftLastWriteTime.dwLowDateTime=0x45bc29d0, ftLastWriteTime.dwHighDateTime=0x1d2faf3, nFileSizeHigh=0x0, nFileSizeLow=0x36e, dwReserved0=0x0, dwReserved1=0x0, cFileName="BBo1lFJ[2].png", cAlternateFileName="BBO1LF~2.PNG")) returned 1 [0072.091] FindNextFileW (in: hFindFile=0x5107b20, lpFindFileData=0x31e224 | out: lpFindFileData=0x31e224*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x455f5430, ftCreationTime.dwHighDateTime=0x1d2faf3, ftLastAccessTime.dwLowDateTime=0x455f5430, ftLastAccessTime.dwHighDateTime=0x1d2faf3, ftLastWriteTime.dwLowDateTime=0x455f5430, ftLastWriteTime.dwHighDateTime=0x1d2faf3, nFileSizeHigh=0x0, nFileSizeLow=0x23f, dwReserved0=0x0, dwReserved1=0x0, cFileName="BBs47TE[1].png", cAlternateFileName="BBS47T~1.PNG")) returned 1 [0072.091] FindNextFileW (in: hFindFile=0x5107b20, lpFindFileData=0x31e224 | out: lpFindFileData=0x31e224*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x45987530, ftCreationTime.dwHighDateTime=0x1d2faf3, ftLastAccessTime.dwLowDateTime=0x45987530, ftLastAccessTime.dwHighDateTime=0x1d2faf3, ftLastWriteTime.dwLowDateTime=0x45987530, ftLastWriteTime.dwHighDateTime=0x1d2faf3, nFileSizeHigh=0x0, nFileSizeLow=0x2cb0, dwReserved0=0x0, dwReserved1=0x0, cFileName="BBu9sWQ[1].jpg", cAlternateFileName="BBU9SW~1.JPG")) returned 1 [0072.091] FindNextFileW (in: hFindFile=0x5107b20, lpFindFileData=0x31e224 | out: lpFindFileData=0x31e224*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x45bc29d0, ftCreationTime.dwHighDateTime=0x1d2faf3, ftLastAccessTime.dwLowDateTime=0x45bc29d0, ftLastAccessTime.dwHighDateTime=0x1d2faf3, ftLastWriteTime.dwLowDateTime=0x45bc29d0, ftLastWriteTime.dwHighDateTime=0x1d2faf3, nFileSizeHigh=0x0, nFileSizeLow=0x228c, dwReserved0=0x0, dwReserved1=0x0, cFileName="BByazif[2].jpg", cAlternateFileName="BBYAZI~2.JPG")) returned 1 [0072.092] FindNextFileW (in: hFindFile=0x5107b20, lpFindFileData=0x31e224 | out: lpFindFileData=0x31e224*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x54b51310, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x54b51310, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x54b51310, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0xaf13, dwReserved0=0x0, dwReserved1=0x0, cFileName="bs-components[1].css", cAlternateFileName="BS-COM~1.CSS")) returned 1 [0072.092] FindNextFileW (in: hFindFile=0x5107b20, lpFindFileData=0x31e224 | out: lpFindFileData=0x31e224*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x54b9d5d0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x54b9d5d0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x54b9d5d0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x30be, dwReserved0=0x0, dwReserved1=0x0, cFileName="bs-util[1].css", cAlternateFileName="BS-UTI~1.CSS")) returned 1 [0072.092] FindNextFileW (in: hFindFile=0x5107b20, lpFindFileData=0x31e224 | out: lpFindFileData=0x31e224*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xbd97bf10, ftCreationTime.dwHighDateTime=0x1d2faf2, ftLastAccessTime.dwLowDateTime=0xbd97bf10, ftLastAccessTime.dwHighDateTime=0x1d2faf2, ftLastWriteTime.dwLowDateTime=0xbd9a2070, ftLastWriteTime.dwHighDateTime=0x1d2faf2, nFileSizeHigh=0x0, nFileSizeLow=0x254f1, dwReserved0=0x0, dwReserved1=0x0, cFileName="c7-bdbd0d-91cdfbc1[1].txt", cAlternateFileName="C7-BDB~1.TXT")) returned 1 [0072.092] FindNextFileW (in: hFindFile=0x5107b20, lpFindFileData=0x31e224 | out: lpFindFileData=0x31e224*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x614e4380, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x614e4380, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x614e4380, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x211dd, dwReserved0=0x0, dwReserved1=0x0, cFileName="cb=gapi[1].loaded_0", cAlternateFileName="CB_GAP~1.LOA")) returned 1 [0072.092] FindNextFileW (in: hFindFile=0x5107b20, lpFindFileData=0x31e224 | out: lpFindFileData=0x31e224*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x63c04d20, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x63c04d20, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x63c04d20, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x653e, dwReserved0=0x0, dwReserved1=0x0, cFileName="cb=gapi[2].loaded_0", cAlternateFileName="CB_GAP~2.LOA")) returned 1 [0072.092] FindNextFileW (in: hFindFile=0x5107b20, lpFindFileData=0x31e224 | out: lpFindFileData=0x31e224*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x584c4b60, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x584c4b60, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x58510e20, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x2a03f, dwReserved0=0x0, dwReserved1=0x0, cFileName="chrome.min[1].css", cAlternateFileName="CHROME~1.CSS")) returned 1 [0072.092] FindNextFileW (in: hFindFile=0x5107b20, lpFindFileData=0x31e224 | out: lpFindFileData=0x31e224*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x60c69520, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x60c69520, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x60c69520, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x60c, dwReserved0=0x0, dwReserved1=0x0, cFileName="chrome_throbber_fast_16[1].gif", cAlternateFileName="CHROME~1.GIF")) returned 1 [0072.092] FindNextFileW (in: hFindFile=0x5107b20, lpFindFileData=0x31e224 | out: lpFindFileData=0x31e224*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x55333bf0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x55333bf0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x55333bf0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x2b, dwReserved0=0x0, dwReserved1=0x0, cFileName="collect[1].gif", cAlternateFileName="COLLEC~1.GIF")) returned 1 [0072.093] FindNextFileW (in: hFindFile=0x5107b20, lpFindFileData=0x31e224 | out: lpFindFileData=0x31e224*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xbe8f4e10, ftCreationTime.dwHighDateTime=0x1d2faf2, ftLastAccessTime.dwLowDateTime=0xbe8f4e10, ftLastAccessTime.dwHighDateTime=0x1d2faf2, ftLastWriteTime.dwLowDateTime=0xbe8f4e10, ftLastWriteTime.dwHighDateTime=0x1d2faf2, nFileSizeHigh=0x0, nFileSizeLow=0x7b1, dwReserved0=0x0, dwReserved1=0x0, cFileName="ContainerTag[1].js", cAlternateFileName="CONTAI~1.JS")) returned 1 [0072.093] FindNextFileW (in: hFindFile=0x5107b20, lpFindFileData=0x31e224 | out: lpFindFileData=0x31e224*(dwFileAttributes=0x2006, ftCreationTime.dwLowDateTime=0x4f090c50, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x4f090c50, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x4f090c50, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x43, dwReserved0=0x0, dwReserved1=0x0, cFileName="desktop.ini", cAlternateFileName="")) returned 1 [0072.093] FindNextFileW (in: hFindFile=0x5107b20, lpFindFileData=0x31e224 | out: lpFindFileData=0x31e224*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x60d9a020, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x60d9a020, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x60de62e0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x48ba, dwReserved0=0x0, dwReserved1=0x0, cFileName="eula-mac[1].jpg", cAlternateFileName="EULA-M~1.JPG")) returned 1 [0072.093] FindNextFileW (in: hFindFile=0x5107b20, lpFindFileData=0x31e224 | out: lpFindFileData=0x31e224*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x61093ba0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x61093ba0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x61093ba0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0xa84a, dwReserved0=0x0, dwReserved1=0x0, cFileName="ga[1].js", cAlternateFileName="GA_1_~1.JS")) returned 1 [0072.093] FindNextFileW (in: hFindFile=0x5107b20, lpFindFileData=0x31e224 | out: lpFindFileData=0x31e224*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xbe15e7f0, ftCreationTime.dwHighDateTime=0x1d2faf2, ftLastAccessTime.dwLowDateTime=0xbe15e7f0, ftLastAccessTime.dwHighDateTime=0x1d2faf2, ftLastWriteTime.dwLowDateTime=0xbe1f6d70, ftLastWriteTime.dwHighDateTime=0x1d2faf2, nFileSizeHigh=0x0, nFileSizeLow=0x1305, dwReserved0=0x0, dwReserved1=0x0, cFileName="getype=homepage;kvpg=msn%2Fde-de;kvugc=0;kvmn=MSNDEDE1D;kvgrp=852361999;kvismob=2;extmirroring=0;kvtile=5;target=_blank;aduho=600;grp=852361999[1]", cAlternateFileName="GETYPE~1")) returned 1 [0072.094] FindNextFileW (in: hFindFile=0x5107b20, lpFindFileData=0x31e224 | out: lpFindFileData=0x31e224*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x659c6020, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x659c6020, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x65c99a40, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0xe6c, dwReserved0=0x0, dwReserved1=0x0, cFileName="GoogleInstaller_de[1].application", cAlternateFileName="GOOGLE~1.APP")) returned 1 [0072.094] FindNextFileW (in: hFindFile=0x5107b20, lpFindFileData=0x31e224 | out: lpFindFileData=0x31e224*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xbf03f170, ftCreationTime.dwHighDateTime=0x1d2faf2, ftLastAccessTime.dwLowDateTime=0xbf03f170, ftLastAccessTime.dwHighDateTime=0x1d2faf2, ftLastWriteTime.dwLowDateTime=0xbf0652d0, ftLastWriteTime.dwHighDateTime=0x1d2faf2, nFileSizeHigh=0x0, nFileSizeLow=0x4c9, dwReserved0=0x0, dwReserved1=0x0, cFileName="js[1]", cAlternateFileName="JS_1_~1")) returned 1 [0072.094] FindNextFileW (in: hFindFile=0x5107b20, lpFindFileData=0x31e224 | out: lpFindFileData=0x31e224*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xbf2544b0, ftCreationTime.dwHighDateTime=0x1d2faf2, ftLastAccessTime.dwLowDateTime=0xbf2544b0, ftLastAccessTime.dwHighDateTime=0x1d2faf2, ftLastWriteTime.dwLowDateTime=0xbf2544b0, ftLastWriteTime.dwHighDateTime=0x1d2faf2, nFileSizeHigh=0x0, nFileSizeLow=0x562, dwReserved0=0x0, dwReserved1=0x0, cFileName="js[2]", cAlternateFileName="JS_2_~1")) returned 1 [0072.094] FindNextFileW (in: hFindFile=0x5107b20, lpFindFileData=0x31e224 | out: lpFindFileData=0x31e224*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x54feddb0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x54feddb0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x550601d0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x7a43, dwReserved0=0x0, dwReserved1=0x0, cFileName="latest[1].eot", cAlternateFileName="LATEST~1.EOT")) returned 1 [0072.094] FindNextFileW (in: hFindFile=0x5107b20, lpFindFileData=0x31e224 | out: lpFindFileData=0x31e224*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x54cce0d0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x54cce0d0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x54d1a390, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x1a114, dwReserved0=0x0, dwReserved1=0x0, cFileName="MemMDL2.2.17[1].eot", cAlternateFileName="MEMMDL~1.EOT")) returned 1 [0072.095] FindNextFileW (in: hFindFile=0x5107b20, lpFindFileData=0x31e224 | out: lpFindFileData=0x31e224*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x605b7740, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x605b7740, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x605b7740, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x46c9, dwReserved0=0x0, dwReserved1=0x0, cFileName="modernizr[1].js", cAlternateFileName="MODERN~1.JS")) returned 1 [0072.095] FindNextFileW (in: hFindFile=0x5107b20, lpFindFileData=0x31e224 | out: lpFindFileData=0x31e224*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x457e4610, ftCreationTime.dwHighDateTime=0x1d2faf3, ftLastAccessTime.dwLowDateTime=0x457e4610, ftLastAccessTime.dwHighDateTime=0x1d2faf3, ftLastWriteTime.dwLowDateTime=0x457e4610, ftLastWriteTime.dwHighDateTime=0x1d2faf3, nFileSizeHigh=0x0, nFileSizeLow=0xec5, dwReserved0=0x0, dwReserved1=0x0, cFileName="MSNIdSync[1].js", cAlternateFileName="MSNIDS~1.JS")) returned 1 [0072.095] FindNextFileW (in: hFindFile=0x5107b20, lpFindFileData=0x31e224 | out: lpFindFileData=0x31e224*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xbfbb3b50, ftCreationTime.dwHighDateTime=0x1d2faf2, ftLastAccessTime.dwLowDateTime=0xbfbb3b50, ftLastAccessTime.dwHighDateTime=0x1d2faf2, ftLastWriteTime.dwLowDateTime=0xbfbb3b50, ftLastWriteTime.dwHighDateTime=0x1d2faf2, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="only[1].htm", cAlternateFileName="ONLY_1~1.HTM")) returned 1 [0072.095] FindNextFileW (in: hFindFile=0x5107b20, lpFindFileData=0x31e224 | out: lpFindFileData=0x31e224*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x456d9c70, ftCreationTime.dwHighDateTime=0x1d2faf3, ftLastAccessTime.dwLowDateTime=0x456d9c70, ftLastAccessTime.dwHighDateTime=0x1d2faf3, ftLastWriteTime.dwLowDateTime=0x456d9c70, ftLastWriteTime.dwHighDateTime=0x1d2faf3, nFileSizeHigh=0x0, nFileSizeLow=0x6b6d, dwReserved0=0x0, dwReserved1=0x0, cFileName="player[1].js", cAlternateFileName="PLAYER~1.JS")) returned 1 [0072.095] FindNextFileW (in: hFindFile=0x5107b20, lpFindFileData=0x31e224 | out: lpFindFileData=0x31e224*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x456d9c70, ftCreationTime.dwHighDateTime=0x1d2faf3, ftLastAccessTime.dwLowDateTime=0x456d9c70, ftLastAccessTime.dwHighDateTime=0x1d2faf3, ftLastWriteTime.dwLowDateTime=0x45856a30, ftLastWriteTime.dwHighDateTime=0x1d2faf3, nFileSizeHigh=0x0, nFileSizeLow=0x5f44, dwReserved0=0x0, dwReserved1=0x0, cFileName="player[2].js", cAlternateFileName="PLAYER~2.JS")) returned 1 [0072.095] FindNextFileW (in: hFindFile=0x5107b20, lpFindFileData=0x31e224 | out: lpFindFileData=0x31e224*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xbfb41730, ftCreationTime.dwHighDateTime=0x1d2faf2, ftLastAccessTime.dwLowDateTime=0xbfb41730, ftLastAccessTime.dwHighDateTime=0x1d2faf2, ftLastWriteTime.dwLowDateTime=0xbfb41730, ftLastWriteTime.dwHighDateTime=0x1d2faf2, nFileSizeHigh=0x0, nFileSizeLow=0x67, dwReserved0=0x0, dwReserved1=0x0, cFileName="tecjslog[1].png", cAlternateFileName="TECJSL~1.PNG")) returned 1 [0072.095] FindNextFileW (in: hFindFile=0x5107b20, lpFindFileData=0x31e224 | out: lpFindFileData=0x31e224*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x692027e0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x692027e0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x69232580, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x805a, dwReserved0=0x0, dwReserved1=0x0, cFileName="thankyou[1].htm", cAlternateFileName="THANKY~1.HTM")) returned 1 [0072.095] FindNextFileW (in: hFindFile=0x5107b20, lpFindFileData=0x31e224 | out: lpFindFileData=0x31e224*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x55c14b20, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x55c14b20, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x55c14b20, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x911, dwReserved0=0x0, dwReserved1=0x0, cFileName="th[1].jpg", cAlternateFileName="TH_1_~1.JPG")) returned 1 [0072.096] FindNextFileW (in: hFindFile=0x5107b20, lpFindFileData=0x31e224 | out: lpFindFileData=0x31e224*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0072.096] FindClose (in: hFindFile=0x5107b20 | out: hFindFile=0x5107b20) returned 1 [0072.097] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e4ac) returned 1 [0072.097] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e4b8) returned 1 [0072.097] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e4ec) returned 1 [0072.097] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\IKQEEPZR", nBufferLength=0x105, lpBuffer=0x31dff4, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\IKQEEPZR", lpFilePart=0x0) returned 0x6f [0072.097] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\IKQEEPZR\\", nBufferLength=0x105, lpBuffer=0x31dfc8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\IKQEEPZR\\", lpFilePart=0x0) returned 0x70 [0072.097] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\IKQEEPZR\\*", lpFindFileData=0x31e214 | out: lpFindFileData=0x31e214*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0x4f090c50, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x527ba6f0, ftLastAccessTime.dwHighDateTime=0x1d2faf3, ftLastWriteTime.dwLowDateTime=0x527ba6f0, ftLastWriteTime.dwHighDateTime=0x1d2faf3, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5107b20 [0072.098] FindNextFileW (in: hFindFile=0x5107b20, lpFindFileData=0x31e224 | out: lpFindFileData=0x31e224*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0x4f090c50, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x527ba6f0, ftLastAccessTime.dwHighDateTime=0x1d2faf3, ftLastWriteTime.dwLowDateTime=0x527ba6f0, ftLastWriteTime.dwHighDateTime=0x1d2faf3, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0072.098] FindNextFileW (in: hFindFile=0x5107b20, lpFindFileData=0x31e224 | out: lpFindFileData=0x31e224*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x45027e90, ftCreationTime.dwHighDateTime=0x1d2faf3, ftLastAccessTime.dwLowDateTime=0x45027e90, ftLastAccessTime.dwHighDateTime=0x1d2faf3, ftLastWriteTime.dwLowDateTime=0x45027e90, ftLastWriteTime.dwHighDateTime=0x1d2faf3, nFileSizeHigh=0x0, nFileSizeLow=0xa756, dwReserved0=0x0, dwReserved1=0x0, cFileName="19619569[1].gif", cAlternateFileName="196195~1.GIF")) returned 1 [0072.098] FindNextFileW (in: hFindFile=0x5107b20, lpFindFileData=0x31e224 | out: lpFindFileData=0x31e224*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x54962130, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x54962130, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x549ae3f0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x461fe, dwReserved0=0x0, dwReserved1=0x0, cFileName="7962161087[1].js", cAlternateFileName="796216~1.JS")) returned 1 [0072.098] FindNextFileW (in: hFindFile=0x5107b20, lpFindFileData=0x31e224 | out: lpFindFileData=0x31e224*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x53017770, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x53017770, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x53017770, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x14d, dwReserved0=0x0, dwReserved1=0x0, cFileName="AA3DGHW[1].png", cAlternateFileName="AA3DGH~1.PNG")) returned 1 [0072.098] FindNextFileW (in: hFindFile=0x5107b20, lpFindFileData=0x31e224 | out: lpFindFileData=0x31e224*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x456d9c70, ftCreationTime.dwHighDateTime=0x1d2faf3, ftLastAccessTime.dwLowDateTime=0x456d9c70, ftLastAccessTime.dwHighDateTime=0x1d2faf3, ftLastWriteTime.dwLowDateTime=0x456d9c70, ftLastWriteTime.dwHighDateTime=0x1d2faf3, nFileSizeHigh=0x0, nFileSizeLow=0x197, dwReserved0=0x0, dwReserved1=0x0, cFileName="AA3e1pt[2].png", cAlternateFileName="AA3E1P~2.PNG")) returned 1 [0072.098] FindNextFileW (in: hFindFile=0x5107b20, lpFindFileData=0x31e224 | out: lpFindFileData=0x31e224*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x45856a30, ftCreationTime.dwHighDateTime=0x1d2faf3, ftLastAccessTime.dwLowDateTime=0x45856a30, ftLastAccessTime.dwHighDateTime=0x1d2faf3, ftLastWriteTime.dwLowDateTime=0x45856a30, ftLastWriteTime.dwHighDateTime=0x1d2faf3, nFileSizeHigh=0x0, nFileSizeLow=0x2c2, dwReserved0=0x0, dwReserved1=0x0, cFileName="AA42ckd[1].png", cAlternateFileName="AA42CK~1.PNG")) returned 1 [0072.098] FindNextFileW (in: hFindFile=0x5107b20, lpFindFileData=0x31e224 | out: lpFindFileData=0x31e224*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x45a1fab0, ftCreationTime.dwHighDateTime=0x1d2faf3, ftLastAccessTime.dwLowDateTime=0x45a1fab0, ftLastAccessTime.dwHighDateTime=0x1d2faf3, ftLastWriteTime.dwLowDateTime=0x45a1fab0, ftLastWriteTime.dwHighDateTime=0x1d2faf3, nFileSizeHigh=0x0, nFileSizeLow=0x2c2, dwReserved0=0x0, dwReserved1=0x0, cFileName="AA42eYr[1].png", cAlternateFileName="AA42EY~1.PNG")) returned 1 [0072.098] FindNextFileW (in: hFindFile=0x5107b20, lpFindFileData=0x31e224 | out: lpFindFileData=0x31e224*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x45bc29d0, ftCreationTime.dwHighDateTime=0x1d2faf3, ftLastAccessTime.dwLowDateTime=0x45bc29d0, ftLastAccessTime.dwHighDateTime=0x1d2faf3, ftLastWriteTime.dwLowDateTime=0x45bc29d0, ftLastWriteTime.dwHighDateTime=0x1d2faf3, nFileSizeHigh=0x0, nFileSizeLow=0x204, dwReserved0=0x0, dwReserved1=0x0, cFileName="AA61ILp[2].png", cAlternateFileName="AA61IL~2.PNG")) returned 1 [0072.099] FindNextFileW (in: hFindFile=0x5107b20, lpFindFileData=0x31e224 | out: lpFindFileData=0x31e224*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x50ebbff0, ftCreationTime.dwHighDateTime=0x1d2faf3, ftLastAccessTime.dwLowDateTime=0x50ebbff0, ftLastAccessTime.dwHighDateTime=0x1d2faf3, ftLastWriteTime.dwLowDateTime=0x50ebbff0, ftLastWriteTime.dwHighDateTime=0x1d2faf3, nFileSizeHigh=0x0, nFileSizeLow=0x2ed, dwReserved0=0x0, dwReserved1=0x0, cFileName="AA6SNZ6[1].png", cAlternateFileName="AA6SNZ~1.PNG")) returned 1 [0072.099] FindNextFileW (in: hFindFile=0x5107b20, lpFindFileData=0x31e224 | out: lpFindFileData=0x31e224*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x454eaa90, ftCreationTime.dwHighDateTime=0x1d2faf3, ftLastAccessTime.dwLowDateTime=0x454eaa90, ftLastAccessTime.dwHighDateTime=0x1d2faf3, ftLastWriteTime.dwLowDateTime=0x454eaa90, ftLastWriteTime.dwHighDateTime=0x1d2faf3, nFileSizeHigh=0x0, nFileSizeLow=0x2fc, dwReserved0=0x0, dwReserved1=0x0, cFileName="AAbyinC[1].png", cAlternateFileName="AABYIN~1.PNG")) returned 1 [0072.099] FindNextFileW (in: hFindFile=0x5107b20, lpFindFileData=0x31e224 | out: lpFindFileData=0x31e224*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x45ab8030, ftCreationTime.dwHighDateTime=0x1d2faf3, ftLastAccessTime.dwLowDateTime=0x45ab8030, ftLastAccessTime.dwHighDateTime=0x1d2faf3, ftLastWriteTime.dwLowDateTime=0x45ab8030, ftLastWriteTime.dwHighDateTime=0x1d2faf3, nFileSizeHigh=0x0, nFileSizeLow=0x340b, dwReserved0=0x0, dwReserved1=0x0, cFileName="AAicW5W[1].jpg", cAlternateFileName="AAICW5~1.JPG")) returned 1 [0072.099] FindNextFileW (in: hFindFile=0x5107b20, lpFindFileData=0x31e224 | out: lpFindFileData=0x31e224*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x538925d0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x538925d0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x538b8730, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x19a4, dwReserved0=0x0, dwReserved1=0x0, cFileName="AAj0doQ[1].jpg", cAlternateFileName="AAJ0DO~1.JPG")) returned 1 [0072.099] FindNextFileW (in: hFindFile=0x5107b20, lpFindFileData=0x31e224 | out: lpFindFileData=0x31e224*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x5159c2b0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x5159c2b0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x5159c2b0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x35c, dwReserved0=0x0, dwReserved1=0x0, cFileName="AAkqhIf[1].png", cAlternateFileName="AAKQHI~1.PNG")) returned 1 [0072.099] FindNextFileW (in: hFindFile=0x5107b20, lpFindFileData=0x31e224 | out: lpFindFileData=0x31e224*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x458308d0, ftCreationTime.dwHighDateTime=0x1d2faf3, ftLastAccessTime.dwLowDateTime=0x458308d0, ftLastAccessTime.dwHighDateTime=0x1d2faf3, ftLastWriteTime.dwLowDateTime=0x458308d0, ftLastWriteTime.dwHighDateTime=0x1d2faf3, nFileSizeHigh=0x0, nFileSizeLow=0x278e, dwReserved0=0x0, dwReserved1=0x0, cFileName="AAmo09p[1].jpg", cAlternateFileName="AAMO09~1.JPG")) returned 1 [0072.099] FindNextFileW (in: hFindFile=0x5107b20, lpFindFileData=0x31e224 | out: lpFindFileData=0x31e224*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x45bc29d0, ftCreationTime.dwHighDateTime=0x1d2faf3, ftLastAccessTime.dwLowDateTime=0x45bc29d0, ftLastAccessTime.dwHighDateTime=0x1d2faf3, ftLastWriteTime.dwLowDateTime=0x45bc29d0, ftLastWriteTime.dwHighDateTime=0x1d2faf3, nFileSizeHigh=0x0, nFileSizeLow=0x19a, dwReserved0=0x0, dwReserved1=0x0, cFileName="AAmUyV2[1].png", cAlternateFileName="AAMUYV~1.PNG")) returned 1 [0072.099] FindNextFileW (in: hFindFile=0x5107b20, lpFindFileData=0x31e224 | out: lpFindFileData=0x31e224*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x45798350, ftCreationTime.dwHighDateTime=0x1d2faf3, ftLastAccessTime.dwLowDateTime=0x45798350, ftLastAccessTime.dwHighDateTime=0x1d2faf3, ftLastWriteTime.dwLowDateTime=0x45798350, ftLastWriteTime.dwHighDateTime=0x1d2faf3, nFileSizeHigh=0x0, nFileSizeLow=0xfe, dwReserved0=0x0, dwReserved1=0x0, cFileName="AAn7gKR[1].png", cAlternateFileName="AAN7GK~1.PNG")) returned 1 [0072.099] FindNextFileW (in: hFindFile=0x5107b20, lpFindFileData=0x31e224 | out: lpFindFileData=0x31e224*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x61be2420, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x61be2420, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x61be2420, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x650, dwReserved0=0x0, dwReserved1=0x0, cFileName="activityi;src=2542116;type=clien612;cat=chrom0;ord=1;num=7814394060213[1].htm", cAlternateFileName="ACTIVI~1.HTM")) returned 1 [0072.099] FindNextFileW (in: hFindFile=0x5107b20, lpFindFileData=0x31e224 | out: lpFindFileData=0x31e224*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xbf2a0770, ftCreationTime.dwHighDateTime=0x1d2faf2, ftLastAccessTime.dwLowDateTime=0xbf2a0770, ftLastAccessTime.dwHighDateTime=0x1d2faf2, ftLastWriteTime.dwLowDateTime=0xbf2a0770, ftLastWriteTime.dwHighDateTime=0x1d2faf2, nFileSizeHigh=0x0, nFileSizeLow=0x2870, dwReserved0=0x0, dwReserved1=0x0, cFileName="adfscript[1]", cAlternateFileName="ADFSCR~1")) returned 1 [0072.100] FindNextFileW (in: hFindFile=0x5107b20, lpFindFileData=0x31e224 | out: lpFindFileData=0x31e224*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xbf54e030, ftCreationTime.dwHighDateTime=0x1d2faf2, ftLastAccessTime.dwLowDateTime=0xbf54e030, ftLastAccessTime.dwHighDateTime=0x1d2faf2, ftLastWriteTime.dwLowDateTime=0xbf54e030, ftLastWriteTime.dwHighDateTime=0x1d2faf2, nFileSizeHigh=0x0, nFileSizeLow=0xf1f, dwReserved0=0x0, dwReserved1=0x0, cFileName="adfserve[1]", cAlternateFileName="ADFSER~1")) returned 1 [0072.100] FindNextFileW (in: hFindFile=0x5107b20, lpFindFileData=0x31e224 | out: lpFindFileData=0x31e224*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x533a9870, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x533a9870, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x533a9870, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x11835, dwReserved0=0x0, dwReserved1=0x0, cFileName="ast[2].js", cAlternateFileName="AST_2_~1.JS")) returned 1 [0072.100] FindNextFileW (in: hFindFile=0x5107b20, lpFindFileData=0x31e224 | out: lpFindFileData=0x31e224*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x53d7b330, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x53d7b330, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x53d7b330, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x543, dwReserved0=0x0, dwReserved1=0x0, cFileName="async_usersync[1]", cAlternateFileName="ASYNC_~1")) returned 1 [0072.100] FindNextFileW (in: hFindFile=0x5107b20, lpFindFileData=0x31e224 | out: lpFindFileData=0x31e224*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x5108d3f0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x5108d3f0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x510b3550, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x86e6, dwReserved0=0x0, dwReserved1=0x0, cFileName="b2fd15[1].eot", cAlternateFileName="B2FD15~1.EOT")) returned 1 [0072.100] FindNextFileW (in: hFindFile=0x5107b20, lpFindFileData=0x31e224 | out: lpFindFileData=0x31e224*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x45915110, ftCreationTime.dwHighDateTime=0x1d2faf3, ftLastAccessTime.dwLowDateTime=0x45915110, ftLastAccessTime.dwHighDateTime=0x1d2faf3, ftLastWriteTime.dwLowDateTime=0x45915110, ftLastWriteTime.dwHighDateTime=0x1d2faf3, nFileSizeHigh=0x0, nFileSizeLow=0x2c0, dwReserved0=0x0, dwReserved1=0x0, cFileName="BB5zDwX[1].png", cAlternateFileName="BB5ZDW~1.PNG")) returned 1 [0072.100] FindNextFileW (in: hFindFile=0x5107b20, lpFindFileData=0x31e224 | out: lpFindFileData=0x31e224*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x45b042f0, ftCreationTime.dwHighDateTime=0x1d2faf3, ftLastAccessTime.dwLowDateTime=0x45b042f0, ftLastAccessTime.dwHighDateTime=0x1d2faf3, ftLastWriteTime.dwLowDateTime=0x45b042f0, ftLastWriteTime.dwHighDateTime=0x1d2faf3, nFileSizeHigh=0x0, nFileSizeLow=0x227, dwReserved0=0x0, dwReserved1=0x0, cFileName="BBaK3Nm[1].png", cAlternateFileName="BBAK3N~1.PNG")) returned 1 [0072.100] FindNextFileW (in: hFindFile=0x5107b20, lpFindFileData=0x31e224 | out: lpFindFileData=0x31e224*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x53337450, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x53337450, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x53337450, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x2143, dwReserved0=0x0, dwReserved1=0x0, cFileName="BBBLcCz[1].jpg", cAlternateFileName="BBBLCC~1.JPG")) returned 1 [0072.100] FindNextFileW (in: hFindFile=0x5107b20, lpFindFileData=0x31e224 | out: lpFindFileData=0x31e224*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x5348e0b0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x5348e0b0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x5348e0b0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x912, dwReserved0=0x0, dwReserved1=0x0, cFileName="BBBLdzQ[1].jpg", cAlternateFileName="BBBLDZ~1.JPG")) returned 1 [0072.100] FindNextFileW (in: hFindFile=0x5107b20, lpFindFileData=0x31e224 | out: lpFindFileData=0x31e224*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x532eb190, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x532eb190, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x532eb190, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x6e8, dwReserved0=0x0, dwReserved1=0x0, cFileName="BBBO1mQ[1].jpg", cAlternateFileName="BBBO1M~1.JPG")) returned 1 [0072.100] FindNextFileW (in: hFindFile=0x5107b20, lpFindFileData=0x31e224 | out: lpFindFileData=0x31e224*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x537add90, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x537add90, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x537add90, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x36d2, dwReserved0=0x0, dwReserved1=0x0, cFileName="BBBO1qB[1].jpg", cAlternateFileName="BBBO1Q~1.JPG")) returned 1 [0072.100] FindNextFileW (in: hFindFile=0x5107b20, lpFindFileData=0x31e224 | out: lpFindFileData=0x31e224*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x53194530, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x53194530, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x53194530, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x75e, dwReserved0=0x0, dwReserved1=0x0, cFileName="BBBOIAt[1].jpg", cAlternateFileName="BBBOIA~1.JPG")) returned 1 [0072.100] FindNextFileW (in: hFindFile=0x5107b20, lpFindFileData=0x31e224 | out: lpFindFileData=0x31e224*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x539049f0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x539049f0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x539049f0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x6dc, dwReserved0=0x0, dwReserved1=0x0, cFileName="BBBOmuh[1].jpg", cAlternateFileName="BBBOMU~1.JPG")) returned 1 [0072.100] FindNextFileW (in: hFindFile=0x5107b20, lpFindFileData=0x31e224 | out: lpFindFileData=0x31e224*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x53467f50, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x53467f50, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x5348e0b0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x9be, dwReserved0=0x0, dwReserved1=0x0, cFileName="BBBPK5J[1].jpg", cAlternateFileName="BBBPK5~1.JPG")) returned 1 [0072.100] FindNextFileW (in: hFindFile=0x5107b20, lpFindFileData=0x31e224 | out: lpFindFileData=0x31e224*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x53194530, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x53194530, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x53194530, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x1694, dwReserved0=0x0, dwReserved1=0x0, cFileName="BBBPMvJ[1].jpg", cAlternateFileName="BBBPMV~1.JPG")) returned 1 [0072.100] FindNextFileW (in: hFindFile=0x5107b20, lpFindFileData=0x31e224 | out: lpFindFileData=0x31e224*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x539e9230, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x539e9230, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x53a0f390, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x85d, dwReserved0=0x0, dwReserved1=0x0, cFileName="BBBUL3E[1].jpg", cAlternateFileName="BBBUL3~1.JPG")) returned 1 [0072.100] FindNextFileW (in: hFindFile=0x5107b20, lpFindFileData=0x31e224 | out: lpFindFileData=0x31e224*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x515e8570, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x515e8570, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x515e8570, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x878, dwReserved0=0x0, dwReserved1=0x0, cFileName="BBBUqkT[1].jpg", cAlternateFileName="BBBUQK~1.JPG")) returned 1 [0072.100] FindNextFileW (in: hFindFile=0x5107b20, lpFindFileData=0x31e224 | out: lpFindFileData=0x31e224*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x52f59090, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x52f59090, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x52f59090, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x878, dwReserved0=0x0, dwReserved1=0x0, cFileName="BBBUqkT[2].jpg", cAlternateFileName="BBBUQK~2.JPG")) returned 1 [0072.100] FindNextFileW (in: hFindFile=0x5107b20, lpFindFileData=0x31e224 | out: lpFindFileData=0x31e224*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x530afcf0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x530afcf0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x530afcf0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x77f, dwReserved0=0x0, dwReserved1=0x0, cFileName="BBBX3z0[1].jpg", cAlternateFileName="BBBX3Z~1.JPG")) returned 1 [0072.100] FindNextFileW (in: hFindFile=0x5107b20, lpFindFileData=0x31e224 | out: lpFindFileData=0x31e224*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x538b8730, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x538b8730, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x538b8730, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x22b3, dwReserved0=0x0, dwReserved1=0x0, cFileName="BBBYEW1[1].jpg", cAlternateFileName="BBBYEW~1.JPG")) returned 1 [0072.100] FindNextFileW (in: hFindFile=0x5107b20, lpFindFileData=0x31e224 | out: lpFindFileData=0x31e224*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x52ec0b10, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x52ec0b10, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x52ec0b10, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x19cf, dwReserved0=0x0, dwReserved1=0x0, cFileName="BBBYfEH[1].jpg", cAlternateFileName="BBBYFE~1.JPG")) returned 1 [0072.100] FindNextFileW (in: hFindFile=0x5107b20, lpFindFileData=0x31e224 | out: lpFindFileData=0x31e224*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x5b2bd440, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x5b2bd440, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x5b2bd440, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x2ca1, dwReserved0=0x0, dwReserved1=0x0, cFileName="BBBZ20W[1].jpg", cAlternateFileName="BBBZ20~1.JPG")) returned 1 [0072.100] FindNextFileW (in: hFindFile=0x5107b20, lpFindFileData=0x31e224 | out: lpFindFileData=0x31e224*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x53950cb0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x53950cb0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x539c30d0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x1f37, dwReserved0=0x0, dwReserved1=0x0, cFileName="BBBzaxY[1].jpg", cAlternateFileName="BBBZAX~1.JPG")) returned 1 [0072.101] FindNextFileW (in: hFindFile=0x5107b20, lpFindFileData=0x31e224 | out: lpFindFileData=0x31e224*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x53063a30, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x53063a30, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x53089b90, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x2131, dwReserved0=0x0, dwReserved1=0x0, cFileName="BBBZzuz[1].jpg", cAlternateFileName="BBBZZU~1.JPG")) returned 1 [0072.101] FindNextFileW (in: hFindFile=0x5107b20, lpFindFileData=0x31e224 | out: lpFindFileData=0x31e224*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x5530da90, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x5530da90, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x5530da90, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x370a, dwReserved0=0x0, dwReserved1=0x0, cFileName="BBC03B1[1].jpg", cAlternateFileName="BBC03B~1.JPG")) returned 1 [0072.101] FindNextFileW (in: hFindFile=0x5107b20, lpFindFileData=0x31e224 | out: lpFindFileData=0x31e224*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x51256470, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x51256470, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x51256470, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x22a0, dwReserved0=0x0, dwReserved1=0x0, cFileName="BBC04o2[1].jpg", cAlternateFileName="BBC04O~1.JPG")) returned 1 [0072.101] FindNextFileW (in: hFindFile=0x5107b20, lpFindFileData=0x31e224 | out: lpFindFileData=0x31e224*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x53657130, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x53657130, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x53657130, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x2036, dwReserved0=0x0, dwReserved1=0x0, cFileName="BBC06ZQ[1].jpg", cAlternateFileName="BBC06Z~1.JPG")) returned 1 [0072.101] FindNextFileW (in: hFindFile=0x5107b20, lpFindFileData=0x31e224 | out: lpFindFileData=0x31e224*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x5b2bd440, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x5b2bd440, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x5b2bd440, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x13fd, dwReserved0=0x0, dwReserved1=0x0, cFileName="BBC0ALC[1].jpg", cAlternateFileName="BBC0AL~1.JPG")) returned 1 [0072.101] FindNextFileW (in: hFindFile=0x5107b20, lpFindFileData=0x31e224 | out: lpFindFileData=0x31e224*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x52e74850, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x52e74850, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x52e74850, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x884, dwReserved0=0x0, dwReserved1=0x0, cFileName="BBC0BiZ[1].jpg", cAlternateFileName="BBC0BI~1.JPG")) returned 1 [0072.101] FindNextFileW (in: hFindFile=0x5107b20, lpFindFileData=0x31e224 | out: lpFindFileData=0x31e224*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x52f0cdd0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x52f0cdd0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x52f0cdd0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x34d8, dwReserved0=0x0, dwReserved1=0x0, cFileName="BBC0FXU[1].jpg", cAlternateFileName="BBC0FX~1.JPG")) returned 1 [0072.101] FindNextFileW (in: hFindFile=0x5107b20, lpFindFileData=0x31e224 | out: lpFindFileData=0x31e224*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x61282d80, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x61282d80, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x61282d80, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x2fd1, dwReserved0=0x0, dwReserved1=0x0, cFileName="BBC0FXU[2].jpg", cAlternateFileName="BBC0FX~2.JPG")) returned 1 [0072.101] FindNextFileW (in: hFindFile=0x5107b20, lpFindFileData=0x31e224 | out: lpFindFileData=0x31e224*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x52e28590, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x52e28590, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x52e28590, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x29c3, dwReserved0=0x0, dwReserved1=0x0, cFileName="BBC0mkg[1].jpg", cAlternateFileName="BBC0MK~1.JPG")) returned 1 [0072.101] FindNextFileW (in: hFindFile=0x5107b20, lpFindFileData=0x31e224 | out: lpFindFileData=0x31e224*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x52e9a9b0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x52e9a9b0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x52e9a9b0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0xa7b, dwReserved0=0x0, dwReserved1=0x0, cFileName="BBC0mkg[2].jpg", cAlternateFileName="BBC0MK~2.JPG")) returned 1 [0072.101] FindNextFileW (in: hFindFile=0x5107b20, lpFindFileData=0x31e224 | out: lpFindFileData=0x31e224*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x5127c5d0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x5127c5d0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x5127c5d0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x17af, dwReserved0=0x0, dwReserved1=0x0, cFileName="BBC0oQi[1].jpg", cAlternateFileName="BBC0OQ~1.JPG")) returned 1 [0072.101] FindNextFileW (in: hFindFile=0x5107b20, lpFindFileData=0x31e224 | out: lpFindFileData=0x31e224*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x52fa5350, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x52fa5350, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x52fa5350, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0xaf3, dwReserved0=0x0, dwReserved1=0x0, cFileName="BBC0tCi[1].jpg", cAlternateFileName="BBC0TC~1.JPG")) returned 1 [0072.101] FindNextFileW (in: hFindFile=0x5107b20, lpFindFileData=0x31e224 | out: lpFindFileData=0x31e224*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x459f9950, ftCreationTime.dwHighDateTime=0x1d2faf3, ftLastAccessTime.dwLowDateTime=0x459f9950, ftLastAccessTime.dwHighDateTime=0x1d2faf3, ftLastWriteTime.dwLowDateTime=0x459f9950, ftLastWriteTime.dwHighDateTime=0x1d2faf3, nFileSizeHigh=0x0, nFileSizeLow=0x350a, dwReserved0=0x0, dwReserved1=0x0, cFileName="BBCM2U2[1].jpg", cAlternateFileName="BBCM2U~1.JPG")) returned 1 [0072.101] FindNextFileW (in: hFindFile=0x5107b20, lpFindFileData=0x31e224 | out: lpFindFileData=0x31e224*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x4593b270, ftCreationTime.dwHighDateTime=0x1d2faf3, ftLastAccessTime.dwLowDateTime=0x4593b270, ftLastAccessTime.dwHighDateTime=0x1d2faf3, ftLastWriteTime.dwLowDateTime=0x4593b270, ftLastWriteTime.dwHighDateTime=0x1d2faf3, nFileSizeHigh=0x0, nFileSizeLow=0x68c, dwReserved0=0x0, dwReserved1=0x0, cFileName="BBDGTbx[1].jpg", cAlternateFileName="BBDGTB~1.JPG")) returned 1 [0072.101] FindNextFileW (in: hFindFile=0x5107b20, lpFindFileData=0x31e224 | out: lpFindFileData=0x31e224*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xbe399c90, ftCreationTime.dwHighDateTime=0x1d2faf2, ftLastAccessTime.dwLowDateTime=0xbe399c90, ftLastAccessTime.dwHighDateTime=0x1d2faf2, ftLastWriteTime.dwLowDateTime=0xbe399c90, ftLastWriteTime.dwHighDateTime=0x1d2faf2, nFileSizeHigh=0x0, nFileSizeLow=0x284, dwReserved0=0x0, dwReserved1=0x0, cFileName="BBDk44m[1].png", cAlternateFileName="BBDK44~1.PNG")) returned 1 [0072.101] FindNextFileW (in: hFindFile=0x5107b20, lpFindFileData=0x31e224 | out: lpFindFileData=0x31e224*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x45a6bd70, ftCreationTime.dwHighDateTime=0x1d2faf3, ftLastAccessTime.dwLowDateTime=0x45a6bd70, ftLastAccessTime.dwHighDateTime=0x1d2faf3, ftLastWriteTime.dwLowDateTime=0x45a6bd70, ftLastWriteTime.dwHighDateTime=0x1d2faf3, nFileSizeHigh=0x0, nFileSizeLow=0x2d04, dwReserved0=0x0, dwReserved1=0x0, cFileName="BBDWXoC[1].jpg", cAlternateFileName="BBDWXO~1.JPG")) returned 1 [0072.101] FindNextFileW (in: hFindFile=0x5107b20, lpFindFileData=0x31e224 | out: lpFindFileData=0x31e224*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x458c8e50, ftCreationTime.dwHighDateTime=0x1d2faf3, ftLastAccessTime.dwLowDateTime=0x458c8e50, ftLastAccessTime.dwHighDateTime=0x1d2faf3, ftLastWriteTime.dwLowDateTime=0x458c8e50, ftLastWriteTime.dwHighDateTime=0x1d2faf3, nFileSizeHigh=0x0, nFileSizeLow=0x863, dwReserved0=0x0, dwReserved1=0x0, cFileName="BBE3NcH[1].jpg", cAlternateFileName="BBE3NC~1.JPG")) returned 1 [0072.101] FindNextFileW (in: hFindFile=0x5107b20, lpFindFileData=0x31e224 | out: lpFindFileData=0x31e224*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x459ad690, ftCreationTime.dwHighDateTime=0x1d2faf3, ftLastAccessTime.dwLowDateTime=0x459ad690, ftLastAccessTime.dwHighDateTime=0x1d2faf3, ftLastWriteTime.dwLowDateTime=0x459ad690, ftLastWriteTime.dwHighDateTime=0x1d2faf3, nFileSizeHigh=0x0, nFileSizeLow=0x2b5, dwReserved0=0x0, dwReserved1=0x0, cFileName="BBE7GLE[1].png", cAlternateFileName="BBE7GL~1.PNG")) returned 1 [0072.101] FindNextFileW (in: hFindFile=0x5107b20, lpFindFileData=0x31e224 | out: lpFindFileData=0x31e224*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x45ade190, ftCreationTime.dwHighDateTime=0x1d2faf3, ftLastAccessTime.dwLowDateTime=0x45ade190, ftLastAccessTime.dwHighDateTime=0x1d2faf3, ftLastWriteTime.dwLowDateTime=0x45b042f0, ftLastWriteTime.dwHighDateTime=0x1d2faf3, nFileSizeHigh=0x0, nFileSizeLow=0x1c9b, dwReserved0=0x0, dwReserved1=0x0, cFileName="BBE8aLO[1].jpg", cAlternateFileName="BBE8AL~1.JPG")) returned 1 [0072.101] FindNextFileW (in: hFindFile=0x5107b20, lpFindFileData=0x31e224 | out: lpFindFileData=0x31e224*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x45a45c10, ftCreationTime.dwHighDateTime=0x1d2faf3, ftLastAccessTime.dwLowDateTime=0x45a45c10, ftLastAccessTime.dwHighDateTime=0x1d2faf3, ftLastWriteTime.dwLowDateTime=0x45a45c10, ftLastWriteTime.dwHighDateTime=0x1d2faf3, nFileSizeHigh=0x0, nFileSizeLow=0x702, dwReserved0=0x0, dwReserved1=0x0, cFileName="BBEd5bF[1].jpg", cAlternateFileName="BBED5B~1.JPG")) returned 1 [0072.101] FindNextFileW (in: hFindFile=0x5107b20, lpFindFileData=0x31e224 | out: lpFindFileData=0x31e224*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x50ebbff0, ftCreationTime.dwHighDateTime=0x1d2faf3, ftLastAccessTime.dwLowDateTime=0x50ebbff0, ftLastAccessTime.dwHighDateTime=0x1d2faf3, ftLastWriteTime.dwLowDateTime=0x50ebbff0, ftLastWriteTime.dwHighDateTime=0x1d2faf3, nFileSizeHigh=0x0, nFileSizeLow=0xaca8, dwReserved0=0x0, dwReserved1=0x0, cFileName="BBEdDNm[1].jpg", cAlternateFileName="BBEDDN~1.JPG")) returned 1 [0072.101] FindNextFileW (in: hFindFile=0x5107b20, lpFindFileData=0x31e224 | out: lpFindFileData=0x31e224*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x458a2cf0, ftCreationTime.dwHighDateTime=0x1d2faf3, ftLastAccessTime.dwLowDateTime=0x458a2cf0, ftLastAccessTime.dwHighDateTime=0x1d2faf3, ftLastWriteTime.dwLowDateTime=0x458a2cf0, ftLastWriteTime.dwHighDateTime=0x1d2faf3, nFileSizeHigh=0x0, nFileSizeLow=0x755, dwReserved0=0x0, dwReserved1=0x0, cFileName="BBEdpyr[1].jpg", cAlternateFileName="BBEDPY~1.JPG")) returned 1 [0072.101] FindNextFileW (in: hFindFile=0x5107b20, lpFindFileData=0x31e224 | out: lpFindFileData=0x31e224*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x457e4610, ftCreationTime.dwHighDateTime=0x1d2faf3, ftLastAccessTime.dwLowDateTime=0x457e4610, ftLastAccessTime.dwHighDateTime=0x1d2faf3, ftLastWriteTime.dwLowDateTime=0x457e4610, ftLastWriteTime.dwHighDateTime=0x1d2faf3, nFileSizeHigh=0x0, nFileSizeLow=0x1c72, dwReserved0=0x0, dwReserved1=0x0, cFileName="BBEdQdv[1].jpg", cAlternateFileName="BBEDQD~1.JPG")) returned 1 [0072.102] FindNextFileW (in: hFindFile=0x5107b20, lpFindFileData=0x31e224 | out: lpFindFileData=0x31e224*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xbe399c90, ftCreationTime.dwHighDateTime=0x1d2faf2, ftLastAccessTime.dwLowDateTime=0xbe399c90, ftLastAccessTime.dwHighDateTime=0x1d2faf2, ftLastWriteTime.dwLowDateTime=0xbe399c90, ftLastWriteTime.dwHighDateTime=0x1d2faf2, nFileSizeHigh=0x0, nFileSizeLow=0xa23, dwReserved0=0x0, dwReserved1=0x0, cFileName="BBEe62t[1].jpg", cAlternateFileName="BBEE62~1.JPG")) returned 1 [0072.102] FindNextFileW (in: hFindFile=0x5107b20, lpFindFileData=0x31e224 | out: lpFindFileData=0x31e224*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xbe4ca790, ftCreationTime.dwHighDateTime=0x1d2faf2, ftLastAccessTime.dwLowDateTime=0xbe4ca790, ftLastAccessTime.dwHighDateTime=0x1d2faf2, ftLastWriteTime.dwLowDateTime=0xbe4ca790, ftLastWriteTime.dwHighDateTime=0x1d2faf2, nFileSizeHigh=0x0, nFileSizeLow=0x1ca7, dwReserved0=0x0, dwReserved1=0x0, cFileName="BBEedPR[1].jpg", cAlternateFileName="BBEEDP~1.JPG")) returned 1 [0072.102] FindNextFileW (in: hFindFile=0x5107b20, lpFindFileData=0x31e224 | out: lpFindFileData=0x31e224*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xbe34d9d0, ftCreationTime.dwHighDateTime=0x1d2faf2, ftLastAccessTime.dwLowDateTime=0xbe34d9d0, ftLastAccessTime.dwHighDateTime=0x1d2faf2, ftLastWriteTime.dwLowDateTime=0xbe34d9d0, ftLastWriteTime.dwHighDateTime=0x1d2faf2, nFileSizeHigh=0x0, nFileSizeLow=0x9ef, dwReserved0=0x0, dwReserved1=0x0, cFileName="BBEeTpB[1].jpg", cAlternateFileName="BBEETP~1.JPG")) returned 1 [0072.102] FindNextFileW (in: hFindFile=0x5107b20, lpFindFileData=0x31e224 | out: lpFindFileData=0x31e224*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xbe4ca790, ftCreationTime.dwHighDateTime=0x1d2faf2, ftLastAccessTime.dwLowDateTime=0xbe4ca790, ftLastAccessTime.dwHighDateTime=0x1d2faf2, ftLastWriteTime.dwLowDateTime=0xbe4ca790, ftLastWriteTime.dwHighDateTime=0x1d2faf2, nFileSizeHigh=0x0, nFileSizeLow=0x952, dwReserved0=0x0, dwReserved1=0x0, cFileName="BBEeTuf[1].jpg", cAlternateFileName="BBEETU~1.JPG")) returned 1 [0072.102] FindNextFileW (in: hFindFile=0x5107b20, lpFindFileData=0x31e224 | out: lpFindFileData=0x31e224*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x45b76710, ftCreationTime.dwHighDateTime=0x1d2faf3, ftLastAccessTime.dwLowDateTime=0x45b76710, ftLastAccessTime.dwHighDateTime=0x1d2faf3, ftLastWriteTime.dwLowDateTime=0x45b76710, ftLastWriteTime.dwHighDateTime=0x1d2faf3, nFileSizeHigh=0x0, nFileSizeLow=0x7a9, dwReserved0=0x0, dwReserved1=0x0, cFileName="BBEeU5U[1].jpg", cAlternateFileName="BBEEU5~1.JPG")) returned 1 [0072.102] FindNextFileW (in: hFindFile=0x5107b20, lpFindFileData=0x31e224 | out: lpFindFileData=0x31e224*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x456d9c70, ftCreationTime.dwHighDateTime=0x1d2faf3, ftLastAccessTime.dwLowDateTime=0x456d9c70, ftLastAccessTime.dwHighDateTime=0x1d2faf3, ftLastWriteTime.dwLowDateTime=0x456d9c70, ftLastWriteTime.dwHighDateTime=0x1d2faf3, nFileSizeHigh=0x0, nFileSizeLow=0x86f, dwReserved0=0x0, dwReserved1=0x0, cFileName="BBEf306[1].jpg", cAlternateFileName="BBEF30~1.JPG")) returned 1 [0072.102] FindNextFileW (in: hFindFile=0x5107b20, lpFindFileData=0x31e224 | out: lpFindFileData=0x31e224*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x459613d0, ftCreationTime.dwHighDateTime=0x1d2faf3, ftLastAccessTime.dwLowDateTime=0x459613d0, ftLastAccessTime.dwHighDateTime=0x1d2faf3, ftLastWriteTime.dwLowDateTime=0x459613d0, ftLastWriteTime.dwHighDateTime=0x1d2faf3, nFileSizeHigh=0x0, nFileSizeLow=0x828, dwReserved0=0x0, dwReserved1=0x0, cFileName="BBEf54R[1].jpg", cAlternateFileName="BBEF54~1.JPG")) returned 1 [0072.102] FindNextFileW (in: hFindFile=0x5107b20, lpFindFileData=0x31e224 | out: lpFindFileData=0x31e224*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x4587cb90, ftCreationTime.dwHighDateTime=0x1d2faf3, ftLastAccessTime.dwLowDateTime=0x4587cb90, ftLastAccessTime.dwHighDateTime=0x1d2faf3, ftLastWriteTime.dwLowDateTime=0x4587cb90, ftLastWriteTime.dwHighDateTime=0x1d2faf3, nFileSizeHigh=0x0, nFileSizeLow=0x3860, dwReserved0=0x0, dwReserved1=0x0, cFileName="BBEfBbH[1].jpg", cAlternateFileName="BBEFBB~1.JPG")) returned 1 [0072.102] FindNextFileW (in: hFindFile=0x5107b20, lpFindFileData=0x31e224 | out: lpFindFileData=0x31e224*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x457be4b0, ftCreationTime.dwHighDateTime=0x1d2faf3, ftLastAccessTime.dwLowDateTime=0x457be4b0, ftLastAccessTime.dwHighDateTime=0x1d2faf3, ftLastWriteTime.dwLowDateTime=0x457be4b0, ftLastWriteTime.dwHighDateTime=0x1d2faf3, nFileSizeHigh=0x0, nFileSizeLow=0x19a5, dwReserved0=0x0, dwReserved1=0x0, cFileName="BBEfBq0[1].jpg", cAlternateFileName="BBEFBQ~1.JPG")) returned 1 [0072.102] FindNextFileW (in: hFindFile=0x5107b20, lpFindFileData=0x31e224 | out: lpFindFileData=0x31e224*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x45bc29d0, ftCreationTime.dwHighDateTime=0x1d2faf3, ftLastAccessTime.dwLowDateTime=0x45bc29d0, ftLastAccessTime.dwHighDateTime=0x1d2faf3, ftLastWriteTime.dwLowDateTime=0x45bc29d0, ftLastWriteTime.dwHighDateTime=0x1d2faf3, nFileSizeHigh=0x0, nFileSizeLow=0x2619, dwReserved0=0x0, dwReserved1=0x0, cFileName="BBEfBrz[1].jpg", cAlternateFileName="BBEFBR~1.JPG")) returned 1 [0072.102] FindNextFileW (in: hFindFile=0x5107b20, lpFindFileData=0x31e224 | out: lpFindFileData=0x31e224*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x45b76710, ftCreationTime.dwHighDateTime=0x1d2faf3, ftLastAccessTime.dwLowDateTime=0x45b76710, ftLastAccessTime.dwHighDateTime=0x1d2faf3, ftLastWriteTime.dwLowDateTime=0x45b76710, ftLastWriteTime.dwHighDateTime=0x1d2faf3, nFileSizeHigh=0x0, nFileSizeLow=0x1f84, dwReserved0=0x0, dwReserved1=0x0, cFileName="BBEfXl6[1].jpg", cAlternateFileName="BBEFXL~1.JPG")) returned 1 [0072.102] FindNextFileW (in: hFindFile=0x5107b20, lpFindFileData=0x31e224 | out: lpFindFileData=0x31e224*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xbded7090, ftCreationTime.dwHighDateTime=0x1d2faf2, ftLastAccessTime.dwLowDateTime=0xbded7090, ftLastAccessTime.dwHighDateTime=0x1d2faf2, ftLastWriteTime.dwLowDateTime=0xbded7090, ftLastWriteTime.dwHighDateTime=0x1d2faf2, nFileSizeHigh=0x0, nFileSizeLow=0x1c7e, dwReserved0=0x0, dwReserved1=0x0, cFileName="BBEgEH3[1].jpg", cAlternateFileName="BBEGEH~1.JPG")) returned 1 [0072.102] FindNextFileW (in: hFindFile=0x5107b20, lpFindFileData=0x31e224 | out: lpFindFileData=0x31e224*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x45725f30, ftCreationTime.dwHighDateTime=0x1d2faf3, ftLastAccessTime.dwLowDateTime=0x45725f30, ftLastAccessTime.dwHighDateTime=0x1d2faf3, ftLastWriteTime.dwLowDateTime=0x45725f30, ftLastWriteTime.dwHighDateTime=0x1d2faf3, nFileSizeHigh=0x0, nFileSizeLow=0x8f9, dwReserved0=0x0, dwReserved1=0x0, cFileName="BBEgsz3[1].jpg", cAlternateFileName="BBEGSZ~1.JPG")) returned 1 [0072.102] FindNextFileW (in: hFindFile=0x5107b20, lpFindFileData=0x31e224 | out: lpFindFileData=0x31e224*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x4574c090, ftCreationTime.dwHighDateTime=0x1d2faf3, ftLastAccessTime.dwLowDateTime=0x4574c090, ftLastAccessTime.dwHighDateTime=0x1d2faf3, ftLastWriteTime.dwLowDateTime=0x4574c090, ftLastWriteTime.dwHighDateTime=0x1d2faf3, nFileSizeHigh=0x0, nFileSizeLow=0x9b7, dwReserved0=0x0, dwReserved1=0x0, cFileName="BBEgTxB[1].jpg", cAlternateFileName="BBEGTX~1.JPG")) returned 1 [0072.102] FindNextFileW (in: hFindFile=0x5107b20, lpFindFileData=0x31e224 | out: lpFindFileData=0x31e224*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x45bc29d0, ftCreationTime.dwHighDateTime=0x1d2faf3, ftLastAccessTime.dwLowDateTime=0x45bc29d0, ftLastAccessTime.dwHighDateTime=0x1d2faf3, ftLastWriteTime.dwLowDateTime=0x45bc29d0, ftLastWriteTime.dwHighDateTime=0x1d2faf3, nFileSizeHigh=0x0, nFileSizeLow=0x36e, dwReserved0=0x0, dwReserved1=0x0, cFileName="BBo1lFJ[2].png", cAlternateFileName="BBO1LF~2.PNG")) returned 1 [0072.102] FindNextFileW (in: hFindFile=0x5107b20, lpFindFileData=0x31e224 | out: lpFindFileData=0x31e224*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x455f5430, ftCreationTime.dwHighDateTime=0x1d2faf3, ftLastAccessTime.dwLowDateTime=0x455f5430, ftLastAccessTime.dwHighDateTime=0x1d2faf3, ftLastWriteTime.dwLowDateTime=0x455f5430, ftLastWriteTime.dwHighDateTime=0x1d2faf3, nFileSizeHigh=0x0, nFileSizeLow=0x23f, dwReserved0=0x0, dwReserved1=0x0, cFileName="BBs47TE[1].png", cAlternateFileName="BBS47T~1.PNG")) returned 1 [0072.102] FindNextFileW (in: hFindFile=0x5107b20, lpFindFileData=0x31e224 | out: lpFindFileData=0x31e224*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x45987530, ftCreationTime.dwHighDateTime=0x1d2faf3, ftLastAccessTime.dwLowDateTime=0x45987530, ftLastAccessTime.dwHighDateTime=0x1d2faf3, ftLastWriteTime.dwLowDateTime=0x45987530, ftLastWriteTime.dwHighDateTime=0x1d2faf3, nFileSizeHigh=0x0, nFileSizeLow=0x2cb0, dwReserved0=0x0, dwReserved1=0x0, cFileName="BBu9sWQ[1].jpg", cAlternateFileName="BBU9SW~1.JPG")) returned 1 [0072.102] FindNextFileW (in: hFindFile=0x5107b20, lpFindFileData=0x31e224 | out: lpFindFileData=0x31e224*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x45bc29d0, ftCreationTime.dwHighDateTime=0x1d2faf3, ftLastAccessTime.dwLowDateTime=0x45bc29d0, ftLastAccessTime.dwHighDateTime=0x1d2faf3, ftLastWriteTime.dwLowDateTime=0x45bc29d0, ftLastWriteTime.dwHighDateTime=0x1d2faf3, nFileSizeHigh=0x0, nFileSizeLow=0x228c, dwReserved0=0x0, dwReserved1=0x0, cFileName="BByazif[2].jpg", cAlternateFileName="BBYAZI~2.JPG")) returned 1 [0072.102] FindNextFileW (in: hFindFile=0x5107b20, lpFindFileData=0x31e224 | out: lpFindFileData=0x31e224*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x54b51310, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x54b51310, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x54b51310, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0xaf13, dwReserved0=0x0, dwReserved1=0x0, cFileName="bs-components[1].css", cAlternateFileName="BS-COM~1.CSS")) returned 1 [0072.102] FindNextFileW (in: hFindFile=0x5107b20, lpFindFileData=0x31e224 | out: lpFindFileData=0x31e224*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x54b9d5d0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x54b9d5d0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x54b9d5d0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x30be, dwReserved0=0x0, dwReserved1=0x0, cFileName="bs-util[1].css", cAlternateFileName="BS-UTI~1.CSS")) returned 1 [0072.103] FindNextFileW (in: hFindFile=0x5107b20, lpFindFileData=0x31e224 | out: lpFindFileData=0x31e224*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xbd97bf10, ftCreationTime.dwHighDateTime=0x1d2faf2, ftLastAccessTime.dwLowDateTime=0xbd97bf10, ftLastAccessTime.dwHighDateTime=0x1d2faf2, ftLastWriteTime.dwLowDateTime=0xbd9a2070, ftLastWriteTime.dwHighDateTime=0x1d2faf2, nFileSizeHigh=0x0, nFileSizeLow=0x254f1, dwReserved0=0x0, dwReserved1=0x0, cFileName="c7-bdbd0d-91cdfbc1[1].txt", cAlternateFileName="C7-BDB~1.TXT")) returned 1 [0072.103] FindNextFileW (in: hFindFile=0x5107b20, lpFindFileData=0x31e224 | out: lpFindFileData=0x31e224*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x614e4380, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x614e4380, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x614e4380, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x211dd, dwReserved0=0x0, dwReserved1=0x0, cFileName="cb=gapi[1].loaded_0", cAlternateFileName="CB_GAP~1.LOA")) returned 1 [0072.103] FindNextFileW (in: hFindFile=0x5107b20, lpFindFileData=0x31e224 | out: lpFindFileData=0x31e224*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x63c04d20, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x63c04d20, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x63c04d20, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x653e, dwReserved0=0x0, dwReserved1=0x0, cFileName="cb=gapi[2].loaded_0", cAlternateFileName="CB_GAP~2.LOA")) returned 1 [0072.103] FindNextFileW (in: hFindFile=0x5107b20, lpFindFileData=0x31e224 | out: lpFindFileData=0x31e224*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x584c4b60, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x584c4b60, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x58510e20, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x2a03f, dwReserved0=0x0, dwReserved1=0x0, cFileName="chrome.min[1].css", cAlternateFileName="CHROME~1.CSS")) returned 1 [0072.103] FindNextFileW (in: hFindFile=0x5107b20, lpFindFileData=0x31e224 | out: lpFindFileData=0x31e224*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x60c69520, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x60c69520, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x60c69520, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x60c, dwReserved0=0x0, dwReserved1=0x0, cFileName="chrome_throbber_fast_16[1].gif", cAlternateFileName="CHROME~1.GIF")) returned 1 [0072.103] FindNextFileW (in: hFindFile=0x5107b20, lpFindFileData=0x31e224 | out: lpFindFileData=0x31e224*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x55333bf0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x55333bf0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x55333bf0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x2b, dwReserved0=0x0, dwReserved1=0x0, cFileName="collect[1].gif", cAlternateFileName="COLLEC~1.GIF")) returned 1 [0072.103] FindNextFileW (in: hFindFile=0x5107b20, lpFindFileData=0x31e224 | out: lpFindFileData=0x31e224*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xbe8f4e10, ftCreationTime.dwHighDateTime=0x1d2faf2, ftLastAccessTime.dwLowDateTime=0xbe8f4e10, ftLastAccessTime.dwHighDateTime=0x1d2faf2, ftLastWriteTime.dwLowDateTime=0xbe8f4e10, ftLastWriteTime.dwHighDateTime=0x1d2faf2, nFileSizeHigh=0x0, nFileSizeLow=0x7b1, dwReserved0=0x0, dwReserved1=0x0, cFileName="ContainerTag[1].js", cAlternateFileName="CONTAI~1.JS")) returned 1 [0072.103] FindNextFileW (in: hFindFile=0x5107b20, lpFindFileData=0x31e224 | out: lpFindFileData=0x31e224*(dwFileAttributes=0x2006, ftCreationTime.dwLowDateTime=0x4f090c50, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x4f090c50, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x4f090c50, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x43, dwReserved0=0x0, dwReserved1=0x0, cFileName="desktop.ini", cAlternateFileName="")) returned 1 [0072.103] FindNextFileW (in: hFindFile=0x5107b20, lpFindFileData=0x31e224 | out: lpFindFileData=0x31e224*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x60d9a020, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x60d9a020, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x60de62e0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x48ba, dwReserved0=0x0, dwReserved1=0x0, cFileName="eula-mac[1].jpg", cAlternateFileName="EULA-M~1.JPG")) returned 1 [0072.103] FindNextFileW (in: hFindFile=0x5107b20, lpFindFileData=0x31e224 | out: lpFindFileData=0x31e224*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x61093ba0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x61093ba0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x61093ba0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0xa84a, dwReserved0=0x0, dwReserved1=0x0, cFileName="ga[1].js", cAlternateFileName="GA_1_~1.JS")) returned 1 [0072.103] FindNextFileW (in: hFindFile=0x5107b20, lpFindFileData=0x31e224 | out: lpFindFileData=0x31e224*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xbe15e7f0, ftCreationTime.dwHighDateTime=0x1d2faf2, ftLastAccessTime.dwLowDateTime=0xbe15e7f0, ftLastAccessTime.dwHighDateTime=0x1d2faf2, ftLastWriteTime.dwLowDateTime=0xbe1f6d70, ftLastWriteTime.dwHighDateTime=0x1d2faf2, nFileSizeHigh=0x0, nFileSizeLow=0x1305, dwReserved0=0x0, dwReserved1=0x0, cFileName="getype=homepage;kvpg=msn%2Fde-de;kvugc=0;kvmn=MSNDEDE1D;kvgrp=852361999;kvismob=2;extmirroring=0;kvtile=5;target=_blank;aduho=600;grp=852361999[1]", cAlternateFileName="GETYPE~1")) returned 1 [0072.103] FindNextFileW (in: hFindFile=0x5107b20, lpFindFileData=0x31e224 | out: lpFindFileData=0x31e224*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x659c6020, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x659c6020, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x65c99a40, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0xe6c, dwReserved0=0x0, dwReserved1=0x0, cFileName="GoogleInstaller_de[1].application", cAlternateFileName="GOOGLE~1.APP")) returned 1 [0072.103] FindNextFileW (in: hFindFile=0x5107b20, lpFindFileData=0x31e224 | out: lpFindFileData=0x31e224*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xbf03f170, ftCreationTime.dwHighDateTime=0x1d2faf2, ftLastAccessTime.dwLowDateTime=0xbf03f170, ftLastAccessTime.dwHighDateTime=0x1d2faf2, ftLastWriteTime.dwLowDateTime=0xbf0652d0, ftLastWriteTime.dwHighDateTime=0x1d2faf2, nFileSizeHigh=0x0, nFileSizeLow=0x4c9, dwReserved0=0x0, dwReserved1=0x0, cFileName="js[1]", cAlternateFileName="JS_1_~1")) returned 1 [0072.104] FindNextFileW (in: hFindFile=0x5107b20, lpFindFileData=0x31e224 | out: lpFindFileData=0x31e224*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xbf2544b0, ftCreationTime.dwHighDateTime=0x1d2faf2, ftLastAccessTime.dwLowDateTime=0xbf2544b0, ftLastAccessTime.dwHighDateTime=0x1d2faf2, ftLastWriteTime.dwLowDateTime=0xbf2544b0, ftLastWriteTime.dwHighDateTime=0x1d2faf2, nFileSizeHigh=0x0, nFileSizeLow=0x562, dwReserved0=0x0, dwReserved1=0x0, cFileName="js[2]", cAlternateFileName="JS_2_~1")) returned 1 [0072.104] FindNextFileW (in: hFindFile=0x5107b20, lpFindFileData=0x31e224 | out: lpFindFileData=0x31e224*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x54feddb0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x54feddb0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x550601d0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x7a43, dwReserved0=0x0, dwReserved1=0x0, cFileName="latest[1].eot", cAlternateFileName="LATEST~1.EOT")) returned 1 [0072.104] FindNextFileW (in: hFindFile=0x5107b20, lpFindFileData=0x31e224 | out: lpFindFileData=0x31e224*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x54cce0d0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x54cce0d0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x54d1a390, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x1a114, dwReserved0=0x0, dwReserved1=0x0, cFileName="MemMDL2.2.17[1].eot", cAlternateFileName="MEMMDL~1.EOT")) returned 1 [0072.104] FindNextFileW (in: hFindFile=0x5107b20, lpFindFileData=0x31e224 | out: lpFindFileData=0x31e224*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x605b7740, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x605b7740, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x605b7740, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x46c9, dwReserved0=0x0, dwReserved1=0x0, cFileName="modernizr[1].js", cAlternateFileName="MODERN~1.JS")) returned 1 [0072.104] FindNextFileW (in: hFindFile=0x5107b20, lpFindFileData=0x31e224 | out: lpFindFileData=0x31e224*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x457e4610, ftCreationTime.dwHighDateTime=0x1d2faf3, ftLastAccessTime.dwLowDateTime=0x457e4610, ftLastAccessTime.dwHighDateTime=0x1d2faf3, ftLastWriteTime.dwLowDateTime=0x457e4610, ftLastWriteTime.dwHighDateTime=0x1d2faf3, nFileSizeHigh=0x0, nFileSizeLow=0xec5, dwReserved0=0x0, dwReserved1=0x0, cFileName="MSNIdSync[1].js", cAlternateFileName="MSNIDS~1.JS")) returned 1 [0072.104] FindNextFileW (in: hFindFile=0x5107b20, lpFindFileData=0x31e224 | out: lpFindFileData=0x31e224*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xbfbb3b50, ftCreationTime.dwHighDateTime=0x1d2faf2, ftLastAccessTime.dwLowDateTime=0xbfbb3b50, ftLastAccessTime.dwHighDateTime=0x1d2faf2, ftLastWriteTime.dwLowDateTime=0xbfbb3b50, ftLastWriteTime.dwHighDateTime=0x1d2faf2, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="only[1].htm", cAlternateFileName="ONLY_1~1.HTM")) returned 1 [0072.104] FindNextFileW (in: hFindFile=0x5107b20, lpFindFileData=0x31e224 | out: lpFindFileData=0x31e224*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x456d9c70, ftCreationTime.dwHighDateTime=0x1d2faf3, ftLastAccessTime.dwLowDateTime=0x456d9c70, ftLastAccessTime.dwHighDateTime=0x1d2faf3, ftLastWriteTime.dwLowDateTime=0x456d9c70, ftLastWriteTime.dwHighDateTime=0x1d2faf3, nFileSizeHigh=0x0, nFileSizeLow=0x6b6d, dwReserved0=0x0, dwReserved1=0x0, cFileName="player[1].js", cAlternateFileName="PLAYER~1.JS")) returned 1 [0072.104] FindNextFileW (in: hFindFile=0x5107b20, lpFindFileData=0x31e224 | out: lpFindFileData=0x31e224*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x456d9c70, ftCreationTime.dwHighDateTime=0x1d2faf3, ftLastAccessTime.dwLowDateTime=0x456d9c70, ftLastAccessTime.dwHighDateTime=0x1d2faf3, ftLastWriteTime.dwLowDateTime=0x45856a30, ftLastWriteTime.dwHighDateTime=0x1d2faf3, nFileSizeHigh=0x0, nFileSizeLow=0x5f44, dwReserved0=0x0, dwReserved1=0x0, cFileName="player[2].js", cAlternateFileName="PLAYER~2.JS")) returned 1 [0072.104] FindNextFileW (in: hFindFile=0x5107b20, lpFindFileData=0x31e224 | out: lpFindFileData=0x31e224*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xbfb41730, ftCreationTime.dwHighDateTime=0x1d2faf2, ftLastAccessTime.dwLowDateTime=0xbfb41730, ftLastAccessTime.dwHighDateTime=0x1d2faf2, ftLastWriteTime.dwLowDateTime=0xbfb41730, ftLastWriteTime.dwHighDateTime=0x1d2faf2, nFileSizeHigh=0x0, nFileSizeLow=0x67, dwReserved0=0x0, dwReserved1=0x0, cFileName="tecjslog[1].png", cAlternateFileName="TECJSL~1.PNG")) returned 1 [0072.104] FindNextFileW (in: hFindFile=0x5107b20, lpFindFileData=0x31e224 | out: lpFindFileData=0x31e224*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x692027e0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x692027e0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x69232580, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x805a, dwReserved0=0x0, dwReserved1=0x0, cFileName="thankyou[1].htm", cAlternateFileName="THANKY~1.HTM")) returned 1 [0072.104] FindNextFileW (in: hFindFile=0x5107b20, lpFindFileData=0x31e224 | out: lpFindFileData=0x31e224*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x55c14b20, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x55c14b20, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x55c14b20, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x911, dwReserved0=0x0, dwReserved1=0x0, cFileName="th[1].jpg", cAlternateFileName="TH_1_~1.JPG")) returned 1 [0072.104] FindNextFileW (in: hFindFile=0x5107b20, lpFindFileData=0x31e224 | out: lpFindFileData=0x31e224*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x55c14b20, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x55c14b20, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x55c14b20, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x911, dwReserved0=0x0, dwReserved1=0x0, cFileName="th[1].jpg", cAlternateFileName="TH_1_~1.JPG")) returned 0 [0072.104] FindClose (in: hFindFile=0x5107b20 | out: hFindFile=0x5107b20) returned 1 [0072.105] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e4ac) returned 1 [0072.105] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e4b8) returned 1 [0072.105] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\IKQEEPZR\\AA3DGHW[1].png", nBufferLength=0x105, lpBuffer=0x31dec4, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\IKQEEPZR\\AA3DGHW[1].png", lpFilePart=0x0) returned 0x7e [0072.105] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e3b8) returned 1 [0072.105] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\IKQEEPZR\\AA3DGHW[1].png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\ikqeepzr\\aa3dghw[1].png"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x178 [0072.106] GetFileType (hFile=0x178) returned 0x1 [0072.106] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e3b4) returned 1 [0072.106] GetFileType (hFile=0x178) returned 0x1 [0072.106] GetFileSize (in: hFile=0x178, lpFileSizeHigh=0x31e4c0 | out: lpFileSizeHigh=0x31e4c0*=0x0) returned 0x14d [0072.106] ReadFile (in: hFile=0x178, lpBuffer=0x27277e8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x31e46c, lpOverlapped=0x0 | out: lpBuffer=0x27277e8*, lpNumberOfBytesRead=0x31e46c*=0x14d, lpOverlapped=0x0) returned 1 [0072.121] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\IKQEEPZR\\AA3DGHW[1].png", nBufferLength=0x105, lpBuffer=0x31deb0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\IKQEEPZR\\AA3DGHW[1].png", lpFilePart=0x0) returned 0x7e [0072.121] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e3a4) returned 1 [0072.121] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\IKQEEPZR\\AA3DGHW[1].png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\ikqeepzr\\aa3dghw[1].png"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x178 [0072.122] GetFileType (hFile=0x178) returned 0x1 [0072.122] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e3a0) returned 1 [0072.122] GetFileType (hFile=0x178) returned 0x1 [0072.122] WriteFile (in: hFile=0x178, lpBuffer=0x2775e00*, nNumberOfBytesToWrite=0x150, lpNumberOfBytesWritten=0x31e434, lpOverlapped=0x0 | out: lpBuffer=0x2775e00*, lpNumberOfBytesWritten=0x31e434*=0x150, lpOverlapped=0x0) returned 1 [0072.123] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\IKQEEPZR\\AA3DGHW[1].png", nBufferLength=0x105, lpBuffer=0x31dfe4, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\IKQEEPZR\\AA3DGHW[1].png", lpFilePart=0x0) returned 0x7e [0072.124] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\IKQEEPZR\\AA3DGHW[1].png", nBufferLength=0x105, lpBuffer=0x31dfe4, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\IKQEEPZR\\AA3DGHW[1].png", lpFilePart=0x0) returned 0x7e [0072.124] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e444) returned 1 [0072.124] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\IKQEEPZR\\AA3DGHW[1].png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\ikqeepzr\\aa3dghw[1].png"), fInfoLevelId=0x0, lpFileInformation=0x31e4c0 | out: lpFileInformation=0x31e4c0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x53017770, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x53017770, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0xe6f1840, ftLastWriteTime.dwHighDateTime=0x1d6eb7f, nFileSizeHigh=0x0, nFileSizeLow=0x150)) returned 1 [0072.124] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e440) returned 1 [0072.124] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\IKQEEPZR\\AA3DGHW[1].png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\ikqeepzr\\aa3dghw[1].png"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\IKQEEPZR\\AA3DGHW[1].png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\ikqeepzr\\aa3dghw[1].png")) returned 1 [0072.124] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\IKQEEPZR\\AA3e1pt[2].png", nBufferLength=0x105, lpBuffer=0x31dec4, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\IKQEEPZR\\AA3e1pt[2].png", lpFilePart=0x0) returned 0x7e [0072.124] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e3b8) returned 1 [0072.124] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\IKQEEPZR\\AA3e1pt[2].png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\ikqeepzr\\aa3e1pt[2].png"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x178 [0072.125] GetFileType (hFile=0x178) returned 0x1 [0072.125] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e3b4) returned 1 [0072.125] GetFileType (hFile=0x178) returned 0x1 [0072.125] GetFileSize (in: hFile=0x178, lpFileSizeHigh=0x31e4c0 | out: lpFileSizeHigh=0x31e4c0*=0x0) returned 0x197 [0072.125] ReadFile (in: hFile=0x178, lpBuffer=0x2777374, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x31e46c, lpOverlapped=0x0 | out: lpBuffer=0x2777374*, lpNumberOfBytesRead=0x31e46c*=0x197, lpOverlapped=0x0) returned 1 [0072.140] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\IKQEEPZR\\AA3e1pt[2].png", nBufferLength=0x105, lpBuffer=0x31deb0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\IKQEEPZR\\AA3e1pt[2].png", lpFilePart=0x0) returned 0x7e [0072.140] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e3a4) returned 1 [0072.140] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\IKQEEPZR\\AA3e1pt[2].png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\ikqeepzr\\aa3e1pt[2].png"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x178 [0072.141] GetFileType (hFile=0x178) returned 0x1 [0072.141] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e3a0) returned 1 [0072.141] GetFileType (hFile=0x178) returned 0x1 [0072.141] WriteFile (in: hFile=0x178, lpBuffer=0x27c5b24*, nNumberOfBytesToWrite=0x1a0, lpNumberOfBytesWritten=0x31e434, lpOverlapped=0x0 | out: lpBuffer=0x27c5b24*, lpNumberOfBytesWritten=0x31e434*=0x1a0, lpOverlapped=0x0) returned 1 [0072.142] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\IKQEEPZR\\AA3e1pt[2].png", nBufferLength=0x105, lpBuffer=0x31dfe4, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\IKQEEPZR\\AA3e1pt[2].png", lpFilePart=0x0) returned 0x7e [0072.142] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\IKQEEPZR\\AA3e1pt[2].png", nBufferLength=0x105, lpBuffer=0x31dfe4, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\IKQEEPZR\\AA3e1pt[2].png", lpFilePart=0x0) returned 0x7e [0072.142] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e444) returned 1 [0072.142] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\IKQEEPZR\\AA3e1pt[2].png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\ikqeepzr\\aa3e1pt[2].png"), fInfoLevelId=0x0, lpFileInformation=0x31e4c0 | out: lpFileInformation=0x31e4c0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x456d9c70, ftCreationTime.dwHighDateTime=0x1d2faf3, ftLastAccessTime.dwLowDateTime=0x456d9c70, ftLastAccessTime.dwHighDateTime=0x1d2faf3, ftLastWriteTime.dwLowDateTime=0xe7179a0, ftLastWriteTime.dwHighDateTime=0x1d6eb7f, nFileSizeHigh=0x0, nFileSizeLow=0x1a0)) returned 1 [0072.142] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e440) returned 1 [0072.142] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\IKQEEPZR\\AA3e1pt[2].png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\ikqeepzr\\aa3e1pt[2].png"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\IKQEEPZR\\AA3e1pt[2].png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\ikqeepzr\\aa3e1pt[2].png")) returned 1 [0072.142] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\IKQEEPZR\\AA42ckd[1].png", nBufferLength=0x105, lpBuffer=0x31dec4, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\IKQEEPZR\\AA42ckd[1].png", lpFilePart=0x0) returned 0x7e [0072.142] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e3b8) returned 1 [0072.142] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\IKQEEPZR\\AA42ckd[1].png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\ikqeepzr\\aa42ckd[1].png"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x178 [0072.142] GetFileType (hFile=0x178) returned 0x1 [0072.142] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e3b4) returned 1 [0072.143] GetFileType (hFile=0x178) returned 0x1 [0072.143] GetFileSize (in: hFile=0x178, lpFileSizeHigh=0x31e4c0 | out: lpFileSizeHigh=0x31e4c0*=0x0) returned 0x2c2 [0072.143] ReadFile (in: hFile=0x178, lpBuffer=0x27c71c4, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x31e46c, lpOverlapped=0x0 | out: lpBuffer=0x27c71c4*, lpNumberOfBytesRead=0x31e46c*=0x2c2, lpOverlapped=0x0) returned 1 [0072.157] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\IKQEEPZR\\AA42ckd[1].png", nBufferLength=0x105, lpBuffer=0x31deb0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\IKQEEPZR\\AA42ckd[1].png", lpFilePart=0x0) returned 0x7e [0072.157] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e3a4) returned 1 [0072.157] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\IKQEEPZR\\AA42ckd[1].png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\ikqeepzr\\aa42ckd[1].png"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x178 [0072.158] GetFileType (hFile=0x178) returned 0x1 [0072.158] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e3a0) returned 1 [0072.158] GetFileType (hFile=0x178) returned 0x1 [0072.158] WriteFile (in: hFile=0x178, lpBuffer=0x2815f68*, nNumberOfBytesToWrite=0x2d0, lpNumberOfBytesWritten=0x31e434, lpOverlapped=0x0 | out: lpBuffer=0x2815f68*, lpNumberOfBytesWritten=0x31e434*=0x2d0, lpOverlapped=0x0) returned 1 [0072.159] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\IKQEEPZR\\AA42ckd[1].png", nBufferLength=0x105, lpBuffer=0x31dfe4, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\IKQEEPZR\\AA42ckd[1].png", lpFilePart=0x0) returned 0x7e [0072.159] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\IKQEEPZR\\AA42ckd[1].png", nBufferLength=0x105, lpBuffer=0x31dfe4, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\IKQEEPZR\\AA42ckd[1].png", lpFilePart=0x0) returned 0x7e [0072.159] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e444) returned 1 [0072.159] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\IKQEEPZR\\AA42ckd[1].png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\ikqeepzr\\aa42ckd[1].png"), fInfoLevelId=0x0, lpFileInformation=0x31e4c0 | out: lpFileInformation=0x31e4c0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x45856a30, ftCreationTime.dwHighDateTime=0x1d2faf3, ftLastAccessTime.dwLowDateTime=0x45856a30, ftLastAccessTime.dwHighDateTime=0x1d2faf3, ftLastWriteTime.dwLowDateTime=0xe73db00, ftLastWriteTime.dwHighDateTime=0x1d6eb7f, nFileSizeHigh=0x0, nFileSizeLow=0x2d0)) returned 1 [0072.160] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e440) returned 1 [0072.160] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\IKQEEPZR\\AA42ckd[1].png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\ikqeepzr\\aa42ckd[1].png"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\IKQEEPZR\\AA42ckd[1].png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\ikqeepzr\\aa42ckd[1].png")) returned 1 [0072.160] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\IKQEEPZR\\AA42eYr[1].png", nBufferLength=0x105, lpBuffer=0x31dec4, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\IKQEEPZR\\AA42eYr[1].png", lpFilePart=0x0) returned 0x7e [0072.160] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e3b8) returned 1 [0072.160] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\IKQEEPZR\\AA42eYr[1].png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\ikqeepzr\\aa42eyr[1].png"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x178 [0072.160] GetFileType (hFile=0x178) returned 0x1 [0072.160] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e3b4) returned 1 [0072.160] GetFileType (hFile=0x178) returned 0x1 [0072.160] GetFileSize (in: hFile=0x178, lpFileSizeHigh=0x31e4c0 | out: lpFileSizeHigh=0x31e4c0*=0x0) returned 0x2c2 [0072.160] ReadFile (in: hFile=0x178, lpBuffer=0x2817608, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x31e46c, lpOverlapped=0x0 | out: lpBuffer=0x2817608*, lpNumberOfBytesRead=0x31e46c*=0x2c2, lpOverlapped=0x0) returned 1 [0072.205] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\IKQEEPZR\\AA42eYr[1].png", nBufferLength=0x105, lpBuffer=0x31deb0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\IKQEEPZR\\AA42eYr[1].png", lpFilePart=0x0) returned 0x7e [0072.205] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e3a4) returned 1 [0072.205] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\IKQEEPZR\\AA42eYr[1].png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\ikqeepzr\\aa42eyr[1].png"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x178 [0072.206] GetFileType (hFile=0x178) returned 0x1 [0072.206] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e3a0) returned 1 [0072.206] GetFileType (hFile=0x178) returned 0x1 [0072.206] WriteFile (in: hFile=0x178, lpBuffer=0x266d418*, nNumberOfBytesToWrite=0x2d0, lpNumberOfBytesWritten=0x31e434, lpOverlapped=0x0 | out: lpBuffer=0x266d418*, lpNumberOfBytesWritten=0x31e434*=0x2d0, lpOverlapped=0x0) returned 1 [0072.208] CloseHandle (hObject=0x178) returned 1 [0072.209] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\IKQEEPZR\\AA42eYr[1].png", nBufferLength=0x105, lpBuffer=0x31dfe4, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\IKQEEPZR\\AA42eYr[1].png", lpFilePart=0x0) returned 0x7e [0072.209] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\IKQEEPZR\\AA42eYr[1].png", nBufferLength=0x105, lpBuffer=0x31dfe4, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\IKQEEPZR\\AA42eYr[1].png", lpFilePart=0x0) returned 0x7e [0072.209] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e444) returned 1 [0072.209] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\IKQEEPZR\\AA42eYr[1].png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\ikqeepzr\\aa42eyr[1].png"), fInfoLevelId=0x0, lpFileInformation=0x31e4c0 | out: lpFileInformation=0x31e4c0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x45a1fab0, ftCreationTime.dwHighDateTime=0x1d2faf3, ftLastAccessTime.dwLowDateTime=0x45a1fab0, ftLastAccessTime.dwHighDateTime=0x1d2faf3, ftLastWriteTime.dwLowDateTime=0xe7aff20, ftLastWriteTime.dwHighDateTime=0x1d6eb7f, nFileSizeHigh=0x0, nFileSizeLow=0x2d0)) returned 1 [0072.209] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e440) returned 1 [0072.209] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\IKQEEPZR\\AA42eYr[1].png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\ikqeepzr\\aa42eyr[1].png"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\IKQEEPZR\\AA42eYr[1].png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\ikqeepzr\\aa42eyr[1].png")) returned 1 [0072.209] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\IKQEEPZR\\AA61ILp[2].png", nBufferLength=0x105, lpBuffer=0x31dec4, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\IKQEEPZR\\AA61ILp[2].png", lpFilePart=0x0) returned 0x7e [0072.209] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e3b8) returned 1 [0072.209] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\IKQEEPZR\\AA61ILp[2].png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\ikqeepzr\\aa61ilp[2].png"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x178 [0072.210] GetFileType (hFile=0x178) returned 0x1 [0072.210] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e3b4) returned 1 [0072.210] GetFileType (hFile=0x178) returned 0x1 [0072.211] GetFileSize (in: hFile=0x178, lpFileSizeHigh=0x31e4c0 | out: lpFileSizeHigh=0x31e4c0*=0x0) returned 0x204 [0072.211] ReadFile (in: hFile=0x178, lpBuffer=0x266e9f8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x31e46c, lpOverlapped=0x0 | out: lpBuffer=0x266e9f8*, lpNumberOfBytesRead=0x31e46c*=0x204, lpOverlapped=0x0) returned 1 [0072.212] CloseHandle (hObject=0x178) returned 1 [0072.226] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\IKQEEPZR\\AA61ILp[2].png", nBufferLength=0x105, lpBuffer=0x31deb0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\IKQEEPZR\\AA61ILp[2].png", lpFilePart=0x0) returned 0x7e [0072.226] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e3a4) returned 1 [0072.226] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\IKQEEPZR\\AA61ILp[2].png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\ikqeepzr\\aa61ilp[2].png"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x178 [0072.227] GetFileType (hFile=0x178) returned 0x1 [0072.227] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e3a0) returned 1 [0072.227] GetFileType (hFile=0x178) returned 0x1 [0072.227] WriteFile (in: hFile=0x178, lpBuffer=0x26bd534*, nNumberOfBytesToWrite=0x210, lpNumberOfBytesWritten=0x31e434, lpOverlapped=0x0 | out: lpBuffer=0x26bd534*, lpNumberOfBytesWritten=0x31e434*=0x210, lpOverlapped=0x0) returned 1 [0072.228] CloseHandle (hObject=0x178) returned 1 [0072.228] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\IKQEEPZR\\AA61ILp[2].png", nBufferLength=0x105, lpBuffer=0x31dfe4, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\IKQEEPZR\\AA61ILp[2].png", lpFilePart=0x0) returned 0x7e [0072.228] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\IKQEEPZR\\AA61ILp[2].png", nBufferLength=0x105, lpBuffer=0x31dfe4, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\IKQEEPZR\\AA61ILp[2].png", lpFilePart=0x0) returned 0x7e [0072.228] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e444) returned 1 [0072.228] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\IKQEEPZR\\AA61ILp[2].png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\ikqeepzr\\aa61ilp[2].png"), fInfoLevelId=0x0, lpFileInformation=0x31e4c0 | out: lpFileInformation=0x31e4c0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x45bc29d0, ftCreationTime.dwHighDateTime=0x1d2faf3, ftLastAccessTime.dwLowDateTime=0x45bc29d0, ftLastAccessTime.dwHighDateTime=0x1d2faf3, ftLastWriteTime.dwLowDateTime=0xe7d6080, ftLastWriteTime.dwHighDateTime=0x1d6eb7f, nFileSizeHigh=0x0, nFileSizeLow=0x210)) returned 1 [0072.228] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e440) returned 1 [0072.228] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\IKQEEPZR\\AA61ILp[2].png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\ikqeepzr\\aa61ilp[2].png"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\IKQEEPZR\\AA61ILp[2].png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\ikqeepzr\\aa61ilp[2].png")) returned 1 [0072.229] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\IKQEEPZR\\AA6SNZ6[1].png", nBufferLength=0x105, lpBuffer=0x31dec4, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\IKQEEPZR\\AA6SNZ6[1].png", lpFilePart=0x0) returned 0x7e [0072.229] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e3b8) returned 1 [0072.229] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\IKQEEPZR\\AA6SNZ6[1].png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\ikqeepzr\\aa6snz6[1].png"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x178 [0072.229] GetFileType (hFile=0x178) returned 0x1 [0072.229] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e3b4) returned 1 [0072.229] GetFileType (hFile=0x178) returned 0x1 [0072.229] GetFileSize (in: hFile=0x178, lpFileSizeHigh=0x31e4c0 | out: lpFileSizeHigh=0x31e4c0*=0x0) returned 0x2ed [0072.229] ReadFile (in: hFile=0x178, lpBuffer=0x26bec00, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x31e46c, lpOverlapped=0x0 | out: lpBuffer=0x26bec00*, lpNumberOfBytesRead=0x31e46c*=0x2ed, lpOverlapped=0x0) returned 1 [0072.231] CloseHandle (hObject=0x178) returned 1 [0072.244] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\IKQEEPZR\\AA6SNZ6[1].png", nBufferLength=0x105, lpBuffer=0x31deb0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\IKQEEPZR\\AA6SNZ6[1].png", lpFilePart=0x0) returned 0x7e [0072.244] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e3a4) returned 1 [0072.244] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\IKQEEPZR\\AA6SNZ6[1].png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\ikqeepzr\\aa6snz6[1].png"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x178 [0072.245] GetFileType (hFile=0x178) returned 0x1 [0072.245] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e3a0) returned 1 [0072.245] GetFileType (hFile=0x178) returned 0x1 [0072.245] WriteFile (in: hFile=0x178, lpBuffer=0x270da38*, nNumberOfBytesToWrite=0x2f0, lpNumberOfBytesWritten=0x31e434, lpOverlapped=0x0 | out: lpBuffer=0x270da38*, lpNumberOfBytesWritten=0x31e434*=0x2f0, lpOverlapped=0x0) returned 1 [0072.246] CloseHandle (hObject=0x178) returned 1 [0072.246] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\IKQEEPZR\\AA6SNZ6[1].png", nBufferLength=0x105, lpBuffer=0x31dfe4, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\IKQEEPZR\\AA6SNZ6[1].png", lpFilePart=0x0) returned 0x7e [0072.246] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\IKQEEPZR\\AA6SNZ6[1].png", nBufferLength=0x105, lpBuffer=0x31dfe4, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\IKQEEPZR\\AA6SNZ6[1].png", lpFilePart=0x0) returned 0x7e [0072.246] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e444) returned 1 [0072.246] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\IKQEEPZR\\AA6SNZ6[1].png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\ikqeepzr\\aa6snz6[1].png"), fInfoLevelId=0x0, lpFileInformation=0x31e4c0 | out: lpFileInformation=0x31e4c0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x50ebbff0, ftCreationTime.dwHighDateTime=0x1d2faf3, ftLastAccessTime.dwLowDateTime=0x50ebbff0, ftLastAccessTime.dwHighDateTime=0x1d2faf3, ftLastWriteTime.dwLowDateTime=0xe822340, ftLastWriteTime.dwHighDateTime=0x1d6eb7f, nFileSizeHigh=0x0, nFileSizeLow=0x2f0)) returned 1 [0072.246] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e440) returned 1 [0072.246] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\IKQEEPZR\\AA6SNZ6[1].png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\ikqeepzr\\aa6snz6[1].png"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\IKQEEPZR\\AA6SNZ6[1].png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\ikqeepzr\\aa6snz6[1].png")) returned 1 [0072.247] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\IKQEEPZR\\AAbyinC[1].png", nBufferLength=0x105, lpBuffer=0x31dec4, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\IKQEEPZR\\AAbyinC[1].png", lpFilePart=0x0) returned 0x7e [0072.247] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e3b8) returned 1 [0072.247] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\IKQEEPZR\\AAbyinC[1].png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\ikqeepzr\\aabyinc[1].png"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x178 [0072.247] GetFileType (hFile=0x178) returned 0x1 [0072.247] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e3b4) returned 1 [0072.247] GetFileType (hFile=0x178) returned 0x1 [0072.247] GetFileSize (in: hFile=0x178, lpFileSizeHigh=0x31e4c0 | out: lpFileSizeHigh=0x31e4c0*=0x0) returned 0x2fc [0072.247] ReadFile (in: hFile=0x178, lpBuffer=0x270f110, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x31e46c, lpOverlapped=0x0 | out: lpBuffer=0x270f110*, lpNumberOfBytesRead=0x31e46c*=0x2fc, lpOverlapped=0x0) returned 1 [0072.249] CloseHandle (hObject=0x178) returned 1 [0072.271] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\IKQEEPZR\\AAbyinC[1].png", nBufferLength=0x105, lpBuffer=0x31deb0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\IKQEEPZR\\AAbyinC[1].png", lpFilePart=0x0) returned 0x7e [0072.271] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e3a4) returned 1 [0072.271] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\IKQEEPZR\\AAbyinC[1].png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\ikqeepzr\\aabyinc[1].png"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x178 [0072.272] GetFileType (hFile=0x178) returned 0x1 [0072.272] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e3a0) returned 1 [0072.272] GetFileType (hFile=0x178) returned 0x1 [0072.272] WriteFile (in: hFile=0x178, lpBuffer=0x275df98*, nNumberOfBytesToWrite=0x300, lpNumberOfBytesWritten=0x31e434, lpOverlapped=0x0 | out: lpBuffer=0x275df98*, lpNumberOfBytesWritten=0x31e434*=0x300, lpOverlapped=0x0) returned 1 [0072.273] CloseHandle (hObject=0x178) returned 1 [0072.273] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\IKQEEPZR\\AAbyinC[1].png", nBufferLength=0x105, lpBuffer=0x31dfe4, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\IKQEEPZR\\AAbyinC[1].png", lpFilePart=0x0) returned 0x7e [0072.273] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\IKQEEPZR\\AAbyinC[1].png", nBufferLength=0x105, lpBuffer=0x31dfe4, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\IKQEEPZR\\AAbyinC[1].png", lpFilePart=0x0) returned 0x7e [0072.273] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e444) returned 1 [0072.274] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\IKQEEPZR\\AAbyinC[1].png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\ikqeepzr\\aabyinc[1].png"), fInfoLevelId=0x0, lpFileInformation=0x31e4c0 | out: lpFileInformation=0x31e4c0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x454eaa90, ftCreationTime.dwHighDateTime=0x1d2faf3, ftLastAccessTime.dwLowDateTime=0x454eaa90, ftLastAccessTime.dwHighDateTime=0x1d2faf3, ftLastWriteTime.dwLowDateTime=0xe8484a0, ftLastWriteTime.dwHighDateTime=0x1d6eb7f, nFileSizeHigh=0x0, nFileSizeLow=0x300)) returned 1 [0072.274] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e440) returned 1 [0072.274] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\IKQEEPZR\\AAbyinC[1].png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\ikqeepzr\\aabyinc[1].png"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\IKQEEPZR\\AAbyinC[1].png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\ikqeepzr\\aabyinc[1].png")) returned 1 [0072.274] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\IKQEEPZR\\AAicW5W[1].jpg", nBufferLength=0x105, lpBuffer=0x31dec4, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\IKQEEPZR\\AAicW5W[1].jpg", lpFilePart=0x0) returned 0x7e [0072.274] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e3b8) returned 1 [0072.274] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\IKQEEPZR\\AAicW5W[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\ikqeepzr\\aaicw5w[1].jpg"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x178 [0072.274] GetFileType (hFile=0x178) returned 0x1 [0072.274] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e3b4) returned 1 [0072.274] GetFileType (hFile=0x178) returned 0x1 [0072.275] GetFileSize (in: hFile=0x178, lpFileSizeHigh=0x31e4c0 | out: lpFileSizeHigh=0x31e4c0*=0x0) returned 0x340b [0072.275] ReadFile (in: hFile=0x178, lpBuffer=0x275f368, nNumberOfBytesToRead=0x340b, lpNumberOfBytesRead=0x31e46c, lpOverlapped=0x0 | out: lpBuffer=0x275f368*, lpNumberOfBytesRead=0x31e46c*=0x340b, lpOverlapped=0x0) returned 1 [0072.277] CloseHandle (hObject=0x178) returned 1 [0072.290] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\IKQEEPZR\\AAicW5W[1].jpg", nBufferLength=0x105, lpBuffer=0x31deb0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\IKQEEPZR\\AAicW5W[1].jpg", lpFilePart=0x0) returned 0x7e [0072.291] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e3a4) returned 1 [0072.291] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\IKQEEPZR\\AAicW5W[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\ikqeepzr\\aaicw5w[1].jpg"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x178 [0072.292] GetFileType (hFile=0x178) returned 0x1 [0072.292] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e3a0) returned 1 [0072.292] GetFileType (hFile=0x178) returned 0x1 [0072.292] WriteFile (in: hFile=0x178, lpBuffer=0x27bc5a0*, nNumberOfBytesToWrite=0x3410, lpNumberOfBytesWritten=0x31e460, lpOverlapped=0x0 | out: lpBuffer=0x27bc5a0*, lpNumberOfBytesWritten=0x31e460*=0x3410, lpOverlapped=0x0) returned 1 [0072.293] CloseHandle (hObject=0x178) returned 1 [0072.293] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\IKQEEPZR\\AAicW5W[1].jpg", nBufferLength=0x105, lpBuffer=0x31dfe4, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\IKQEEPZR\\AAicW5W[1].jpg", lpFilePart=0x0) returned 0x7e [0072.293] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\IKQEEPZR\\AAicW5W[1].jpg", nBufferLength=0x105, lpBuffer=0x31dfe4, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\IKQEEPZR\\AAicW5W[1].jpg", lpFilePart=0x0) returned 0x7e [0072.293] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e444) returned 1 [0072.293] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\IKQEEPZR\\AAicW5W[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\ikqeepzr\\aaicw5w[1].jpg"), fInfoLevelId=0x0, lpFileInformation=0x31e4c0 | out: lpFileInformation=0x31e4c0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x45ab8030, ftCreationTime.dwHighDateTime=0x1d2faf3, ftLastAccessTime.dwLowDateTime=0x45ab8030, ftLastAccessTime.dwHighDateTime=0x1d2faf3, ftLastWriteTime.dwLowDateTime=0xe894760, ftLastWriteTime.dwHighDateTime=0x1d6eb7f, nFileSizeHigh=0x0, nFileSizeLow=0x3410)) returned 1 [0072.293] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e440) returned 1 [0072.293] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\IKQEEPZR\\AAicW5W[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\ikqeepzr\\aaicw5w[1].jpg"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\IKQEEPZR\\AAicW5W[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\ikqeepzr\\aaicw5w[1].jpg")) returned 1 [0072.294] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\IKQEEPZR\\AAj0doQ[1].jpg", nBufferLength=0x105, lpBuffer=0x31dec4, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\IKQEEPZR\\AAj0doQ[1].jpg", lpFilePart=0x0) returned 0x7e [0072.294] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e3b8) returned 1 [0072.294] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\IKQEEPZR\\AAj0doQ[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\ikqeepzr\\aaj0doq[1].jpg"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x178 [0072.294] GetFileType (hFile=0x178) returned 0x1 [0072.294] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e3b4) returned 1 [0072.294] GetFileType (hFile=0x178) returned 0x1 [0072.294] GetFileSize (in: hFile=0x178, lpFileSizeHigh=0x31e4c0 | out: lpFileSizeHigh=0x31e4c0*=0x0) returned 0x19a4 [0072.294] ReadFile (in: hFile=0x178, lpBuffer=0x27bff14, nNumberOfBytesToRead=0x19a4, lpNumberOfBytesRead=0x31e46c, lpOverlapped=0x0 | out: lpBuffer=0x27bff14*, lpNumberOfBytesRead=0x31e46c*=0x19a4, lpOverlapped=0x0) returned 1 [0072.296] CloseHandle (hObject=0x178) returned 1 [0072.309] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\IKQEEPZR\\AAj0doQ[1].jpg", nBufferLength=0x105, lpBuffer=0x31deb0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\IKQEEPZR\\AAj0doQ[1].jpg", lpFilePart=0x0) returned 0x7e [0072.309] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e3a4) returned 1 [0072.309] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\IKQEEPZR\\AAj0doQ[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\ikqeepzr\\aaj0doq[1].jpg"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x178 [0072.310] GetFileType (hFile=0x178) returned 0x1 [0072.310] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e3a0) returned 1 [0072.310] GetFileType (hFile=0x178) returned 0x1 [0072.310] WriteFile (in: hFile=0x178, lpBuffer=0x2814d68*, nNumberOfBytesToWrite=0x19b0, lpNumberOfBytesWritten=0x31e460, lpOverlapped=0x0 | out: lpBuffer=0x2814d68*, lpNumberOfBytesWritten=0x31e460*=0x19b0, lpOverlapped=0x0) returned 1 [0072.311] CloseHandle (hObject=0x178) returned 1 [0072.311] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\IKQEEPZR\\AAj0doQ[1].jpg", nBufferLength=0x105, lpBuffer=0x31dfe4, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\IKQEEPZR\\AAj0doQ[1].jpg", lpFilePart=0x0) returned 0x7e [0072.312] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\IKQEEPZR\\AAj0doQ[1].jpg", nBufferLength=0x105, lpBuffer=0x31dfe4, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\IKQEEPZR\\AAj0doQ[1].jpg", lpFilePart=0x0) returned 0x7e [0072.312] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e444) returned 1 [0072.312] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\IKQEEPZR\\AAj0doQ[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\ikqeepzr\\aaj0doq[1].jpg"), fInfoLevelId=0x0, lpFileInformation=0x31e4c0 | out: lpFileInformation=0x31e4c0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x538925d0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x538925d0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0xe8ba8c0, ftLastWriteTime.dwHighDateTime=0x1d6eb7f, nFileSizeHigh=0x0, nFileSizeLow=0x19b0)) returned 1 [0072.312] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e440) returned 1 [0072.312] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\IKQEEPZR\\AAj0doQ[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\ikqeepzr\\aaj0doq[1].jpg"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\IKQEEPZR\\AAj0doQ[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\ikqeepzr\\aaj0doq[1].jpg")) returned 1 [0072.312] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\IKQEEPZR\\AAkqhIf[1].png", nBufferLength=0x105, lpBuffer=0x31dec4, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\IKQEEPZR\\AAkqhIf[1].png", lpFilePart=0x0) returned 0x7e [0072.312] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e3b8) returned 1 [0072.312] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\IKQEEPZR\\AAkqhIf[1].png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\ikqeepzr\\aakqhif[1].png"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x178 [0072.312] GetFileType (hFile=0x178) returned 0x1 [0072.312] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e3b4) returned 1 [0072.313] GetFileType (hFile=0x178) returned 0x1 [0072.313] GetFileSize (in: hFile=0x178, lpFileSizeHigh=0x31e4c0 | out: lpFileSizeHigh=0x31e4c0*=0x0) returned 0x35c [0072.313] ReadFile (in: hFile=0x178, lpBuffer=0x2816fe4, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x31e46c, lpOverlapped=0x0 | out: lpBuffer=0x2816fe4*, lpNumberOfBytesRead=0x31e46c*=0x35c, lpOverlapped=0x0) returned 1 [0072.314] CloseHandle (hObject=0x178) returned 1 [0072.361] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\IKQEEPZR\\AAkqhIf[1].png", nBufferLength=0x105, lpBuffer=0x31deb0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\IKQEEPZR\\AAkqhIf[1].png", lpFilePart=0x0) returned 0x7e [0072.361] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e3a4) returned 1 [0072.361] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\IKQEEPZR\\AAkqhIf[1].png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\ikqeepzr\\aakqhif[1].png"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x178 [0072.362] GetFileType (hFile=0x178) returned 0x1 [0072.362] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e3a0) returned 1 [0072.362] GetFileType (hFile=0x178) returned 0x1 [0072.362] WriteFile (in: hFile=0x178, lpBuffer=0x26660c8*, nNumberOfBytesToWrite=0x360, lpNumberOfBytesWritten=0x31e434, lpOverlapped=0x0 | out: lpBuffer=0x26660c8*, lpNumberOfBytesWritten=0x31e434*=0x360, lpOverlapped=0x0) returned 1 [0072.363] CloseHandle (hObject=0x178) returned 1 [0072.363] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\IKQEEPZR\\AAkqhIf[1].png", nBufferLength=0x105, lpBuffer=0x31dfe4, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\IKQEEPZR\\AAkqhIf[1].png", lpFilePart=0x0) returned 0x7e [0072.363] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\IKQEEPZR\\AAkqhIf[1].png", nBufferLength=0x105, lpBuffer=0x31dfe4, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\IKQEEPZR\\AAkqhIf[1].png", lpFilePart=0x0) returned 0x7e [0072.363] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e444) returned 1 [0072.363] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\IKQEEPZR\\AAkqhIf[1].png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\ikqeepzr\\aakqhif[1].png"), fInfoLevelId=0x0, lpFileInformation=0x31e4c0 | out: lpFileInformation=0x31e4c0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x5159c2b0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x5159c2b0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0xe92cce0, ftLastWriteTime.dwHighDateTime=0x1d6eb7f, nFileSizeHigh=0x0, nFileSizeLow=0x360)) returned 1 [0072.364] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e440) returned 1 [0072.364] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\IKQEEPZR\\AAkqhIf[1].png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\ikqeepzr\\aakqhif[1].png"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\IKQEEPZR\\AAkqhIf[1].png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\ikqeepzr\\aakqhif[1].png")) returned 1 [0072.364] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\IKQEEPZR\\AAmo09p[1].jpg", nBufferLength=0x105, lpBuffer=0x31dec4, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\IKQEEPZR\\AAmo09p[1].jpg", lpFilePart=0x0) returned 0x7e [0072.364] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e3b8) returned 1 [0072.364] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\IKQEEPZR\\AAmo09p[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\ikqeepzr\\aamo09p[1].jpg"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x178 [0072.364] GetFileType (hFile=0x178) returned 0x1 [0072.364] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e3b4) returned 1 [0072.364] GetFileType (hFile=0x178) returned 0x1 [0072.364] GetFileSize (in: hFile=0x178, lpFileSizeHigh=0x31e4c0 | out: lpFileSizeHigh=0x31e4c0*=0x0) returned 0x278e [0072.364] ReadFile (in: hFile=0x178, lpBuffer=0x2667498, nNumberOfBytesToRead=0x278e, lpNumberOfBytesRead=0x31e46c, lpOverlapped=0x0 | out: lpBuffer=0x2667498*, lpNumberOfBytesRead=0x31e46c*=0x278e, lpOverlapped=0x0) returned 1 [0072.366] CloseHandle (hObject=0x178) returned 1 [0072.380] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\IKQEEPZR\\AAmo09p[1].jpg", nBufferLength=0x105, lpBuffer=0x31deb0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\IKQEEPZR\\AAmo09p[1].jpg", lpFilePart=0x0) returned 0x7e [0072.380] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e3a4) returned 1 [0072.380] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\IKQEEPZR\\AAmo09p[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\ikqeepzr\\aamo09p[1].jpg"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x178 [0072.381] GetFileType (hFile=0x178) returned 0x1 [0072.381] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e3a0) returned 1 [0072.381] GetFileType (hFile=0x178) returned 0x1 [0072.381] WriteFile (in: hFile=0x178, lpBuffer=0x26c09ac*, nNumberOfBytesToWrite=0x2790, lpNumberOfBytesWritten=0x31e460, lpOverlapped=0x0 | out: lpBuffer=0x26c09ac*, lpNumberOfBytesWritten=0x31e460*=0x2790, lpOverlapped=0x0) returned 1 [0072.382] CloseHandle (hObject=0x178) returned 1 [0072.382] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\IKQEEPZR\\AAmo09p[1].jpg", nBufferLength=0x105, lpBuffer=0x31dfe4, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\IKQEEPZR\\AAmo09p[1].jpg", lpFilePart=0x0) returned 0x7e [0072.382] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\IKQEEPZR\\AAmo09p[1].jpg", nBufferLength=0x105, lpBuffer=0x31dfe4, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\IKQEEPZR\\AAmo09p[1].jpg", lpFilePart=0x0) returned 0x7e [0072.382] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e444) returned 1 [0072.382] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\IKQEEPZR\\AAmo09p[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\ikqeepzr\\aamo09p[1].jpg"), fInfoLevelId=0x0, lpFileInformation=0x31e4c0 | out: lpFileInformation=0x31e4c0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x458308d0, ftCreationTime.dwHighDateTime=0x1d2faf3, ftLastAccessTime.dwLowDateTime=0x458308d0, ftLastAccessTime.dwHighDateTime=0x1d2faf3, ftLastWriteTime.dwLowDateTime=0xe952e40, ftLastWriteTime.dwHighDateTime=0x1d6eb7f, nFileSizeHigh=0x0, nFileSizeLow=0x2790)) returned 1 [0072.382] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e440) returned 1 [0072.382] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\IKQEEPZR\\AAmo09p[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\ikqeepzr\\aamo09p[1].jpg"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\IKQEEPZR\\AAmo09p[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\ikqeepzr\\aamo09p[1].jpg")) returned 1 [0072.383] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\IKQEEPZR\\AAmUyV2[1].png", nBufferLength=0x105, lpBuffer=0x31dec4, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\IKQEEPZR\\AAmUyV2[1].png", lpFilePart=0x0) returned 0x7e [0072.383] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e3b8) returned 1 [0072.383] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\IKQEEPZR\\AAmUyV2[1].png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\ikqeepzr\\aamuyv2[1].png"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x178 [0072.383] GetFileType (hFile=0x178) returned 0x1 [0072.383] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e3b4) returned 1 [0072.383] GetFileType (hFile=0x178) returned 0x1 [0072.383] GetFileSize (in: hFile=0x178, lpFileSizeHigh=0x31e4c0 | out: lpFileSizeHigh=0x31e4c0*=0x0) returned 0x19a [0072.383] ReadFile (in: hFile=0x178, lpBuffer=0x26c3848, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x31e46c, lpOverlapped=0x0 | out: lpBuffer=0x26c3848*, lpNumberOfBytesRead=0x31e46c*=0x19a, lpOverlapped=0x0) returned 1 [0072.385] CloseHandle (hObject=0x178) returned 1 [0072.398] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\IKQEEPZR\\AAmUyV2[1].png", nBufferLength=0x105, lpBuffer=0x31deb0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\IKQEEPZR\\AAmUyV2[1].png", lpFilePart=0x0) returned 0x7e [0072.398] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e3a4) returned 1 [0072.398] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\IKQEEPZR\\AAmUyV2[1].png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\ikqeepzr\\aamuyv2[1].png"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x178 [0072.399] GetFileType (hFile=0x178) returned 0x1 [0072.399] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e3a0) returned 1 [0072.399] GetFileType (hFile=0x178) returned 0x1 [0072.399] WriteFile (in: hFile=0x178, lpBuffer=0x2711ff4*, nNumberOfBytesToWrite=0x1a0, lpNumberOfBytesWritten=0x31e434, lpOverlapped=0x0 | out: lpBuffer=0x2711ff4*, lpNumberOfBytesWritten=0x31e434*=0x1a0, lpOverlapped=0x0) returned 1 [0072.400] CloseHandle (hObject=0x178) returned 1 [0072.400] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\IKQEEPZR\\AAmUyV2[1].png", nBufferLength=0x105, lpBuffer=0x31dfe4, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\IKQEEPZR\\AAmUyV2[1].png", lpFilePart=0x0) returned 0x7e [0072.400] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\IKQEEPZR\\AAmUyV2[1].png", nBufferLength=0x105, lpBuffer=0x31dfe4, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\IKQEEPZR\\AAmUyV2[1].png", lpFilePart=0x0) returned 0x7e [0072.400] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e444) returned 1 [0072.400] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\IKQEEPZR\\AAmUyV2[1].png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\ikqeepzr\\aamuyv2[1].png"), fInfoLevelId=0x0, lpFileInformation=0x31e4c0 | out: lpFileInformation=0x31e4c0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x45bc29d0, ftCreationTime.dwHighDateTime=0x1d2faf3, ftLastAccessTime.dwLowDateTime=0x45bc29d0, ftLastAccessTime.dwHighDateTime=0x1d2faf3, ftLastWriteTime.dwLowDateTime=0xe99f100, ftLastWriteTime.dwHighDateTime=0x1d6eb7f, nFileSizeHigh=0x0, nFileSizeLow=0x1a0)) returned 1 [0072.400] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e440) returned 1 [0072.400] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\IKQEEPZR\\AAmUyV2[1].png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\ikqeepzr\\aamuyv2[1].png"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\IKQEEPZR\\AAmUyV2[1].png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\ikqeepzr\\aamuyv2[1].png")) returned 1 [0072.401] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\IKQEEPZR\\AAn7gKR[1].png", nBufferLength=0x105, lpBuffer=0x31dec4, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\IKQEEPZR\\AAn7gKR[1].png", lpFilePart=0x0) returned 0x7e [0072.401] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e3b8) returned 1 [0072.401] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\IKQEEPZR\\AAn7gKR[1].png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\ikqeepzr\\aan7gkr[1].png"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x178 [0072.401] GetFileType (hFile=0x178) returned 0x1 [0072.401] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e3b4) returned 1 [0072.401] GetFileType (hFile=0x178) returned 0x1 [0072.401] GetFileSize (in: hFile=0x178, lpFileSizeHigh=0x31e4c0 | out: lpFileSizeHigh=0x31e4c0*=0x0) returned 0xfe [0072.401] ReadFile (in: hFile=0x178, lpBuffer=0x27134d0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x31e46c, lpOverlapped=0x0 | out: lpBuffer=0x27134d0*, lpNumberOfBytesRead=0x31e46c*=0xfe, lpOverlapped=0x0) returned 1 [0072.403] CloseHandle (hObject=0x178) returned 1 [0072.416] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\IKQEEPZR\\AAn7gKR[1].png", nBufferLength=0x105, lpBuffer=0x31deb0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\IKQEEPZR\\AAn7gKR[1].png", lpFilePart=0x0) returned 0x7e [0072.416] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e3a4) returned 1 [0072.417] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\IKQEEPZR\\AAn7gKR[1].png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\ikqeepzr\\aan7gkr[1].png"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x178 [0072.417] GetFileType (hFile=0x178) returned 0x1 [0072.417] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e3a0) returned 1 [0072.417] GetFileType (hFile=0x178) returned 0x1 [0072.418] WriteFile (in: hFile=0x178, lpBuffer=0x276177c*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x31e434, lpOverlapped=0x0 | out: lpBuffer=0x276177c*, lpNumberOfBytesWritten=0x31e434*=0x100, lpOverlapped=0x0) returned 1 [0072.418] CloseHandle (hObject=0x178) returned 1 [0072.418] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\IKQEEPZR\\AAn7gKR[1].png", nBufferLength=0x105, lpBuffer=0x31dfe4, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\IKQEEPZR\\AAn7gKR[1].png", lpFilePart=0x0) returned 0x7e [0072.419] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\IKQEEPZR\\AAn7gKR[1].png", nBufferLength=0x105, lpBuffer=0x31dfe4, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\IKQEEPZR\\AAn7gKR[1].png", lpFilePart=0x0) returned 0x7e [0072.419] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e444) returned 1 [0072.419] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\IKQEEPZR\\AAn7gKR[1].png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\ikqeepzr\\aan7gkr[1].png"), fInfoLevelId=0x0, lpFileInformation=0x31e4c0 | out: lpFileInformation=0x31e4c0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x45798350, ftCreationTime.dwHighDateTime=0x1d2faf3, ftLastAccessTime.dwLowDateTime=0x45798350, ftLastAccessTime.dwHighDateTime=0x1d2faf3, ftLastWriteTime.dwLowDateTime=0xe9c5260, ftLastWriteTime.dwHighDateTime=0x1d6eb7f, nFileSizeHigh=0x0, nFileSizeLow=0x100)) returned 1 [0072.419] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e440) returned 1 [0072.419] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\IKQEEPZR\\AAn7gKR[1].png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\ikqeepzr\\aan7gkr[1].png"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\IKQEEPZR\\AAn7gKR[1].png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\ikqeepzr\\aan7gkr[1].png")) returned 1 [0072.419] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\IKQEEPZR\\BB5zDwX[1].png", nBufferLength=0x105, lpBuffer=0x31dec4, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\IKQEEPZR\\BB5zDwX[1].png", lpFilePart=0x0) returned 0x7e [0072.419] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e3b8) returned 1 [0072.419] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\IKQEEPZR\\BB5zDwX[1].png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\ikqeepzr\\bb5zdwx[1].png"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x178 [0072.419] GetFileType (hFile=0x178) returned 0x1 [0072.419] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e3b4) returned 1 [0072.419] GetFileType (hFile=0x178) returned 0x1 [0072.420] GetFileSize (in: hFile=0x178, lpFileSizeHigh=0x31e4c0 | out: lpFileSizeHigh=0x31e4c0*=0x0) returned 0x2c0 [0072.420] ReadFile (in: hFile=0x178, lpBuffer=0x2762e5c, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x31e46c, lpOverlapped=0x0 | out: lpBuffer=0x2762e5c*, lpNumberOfBytesRead=0x31e46c*=0x2c0, lpOverlapped=0x0) returned 1 [0072.421] CloseHandle (hObject=0x178) returned 1 [0072.434] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\IKQEEPZR\\BB5zDwX[1].png", nBufferLength=0x105, lpBuffer=0x31deb0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\IKQEEPZR\\BB5zDwX[1].png", lpFilePart=0x0) returned 0x7e [0072.434] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e3a4) returned 1 [0072.435] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\IKQEEPZR\\BB5zDwX[1].png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\ikqeepzr\\bb5zdwx[1].png"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x178 [0072.435] GetFileType (hFile=0x178) returned 0x1 [0072.435] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e3a0) returned 1 [0072.435] GetFileType (hFile=0x178) returned 0x1 [0072.435] WriteFile (in: hFile=0x178, lpBuffer=0x27b1c00*, nNumberOfBytesToWrite=0x2d0, lpNumberOfBytesWritten=0x31e434, lpOverlapped=0x0 | out: lpBuffer=0x27b1c00*, lpNumberOfBytesWritten=0x31e434*=0x2d0, lpOverlapped=0x0) returned 1 [0072.436] CloseHandle (hObject=0x178) returned 1 [0072.436] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\IKQEEPZR\\BB5zDwX[1].png", nBufferLength=0x105, lpBuffer=0x31dfe4, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\IKQEEPZR\\BB5zDwX[1].png", lpFilePart=0x0) returned 0x7e [0072.436] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\IKQEEPZR\\BB5zDwX[1].png", nBufferLength=0x105, lpBuffer=0x31dfe4, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\IKQEEPZR\\BB5zDwX[1].png", lpFilePart=0x0) returned 0x7e [0072.436] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e444) returned 1 [0072.437] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\IKQEEPZR\\BB5zDwX[1].png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\ikqeepzr\\bb5zdwx[1].png"), fInfoLevelId=0x0, lpFileInformation=0x31e4c0 | out: lpFileInformation=0x31e4c0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x45915110, ftCreationTime.dwHighDateTime=0x1d2faf3, ftLastAccessTime.dwLowDateTime=0x45915110, ftLastAccessTime.dwHighDateTime=0x1d2faf3, ftLastWriteTime.dwLowDateTime=0xe9eb3c0, ftLastWriteTime.dwHighDateTime=0x1d6eb7f, nFileSizeHigh=0x0, nFileSizeLow=0x2d0)) returned 1 [0072.437] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e440) returned 1 [0072.437] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\IKQEEPZR\\BB5zDwX[1].png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\ikqeepzr\\bb5zdwx[1].png"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\IKQEEPZR\\BB5zDwX[1].png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\ikqeepzr\\bb5zdwx[1].png")) returned 1 [0072.437] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\IKQEEPZR\\BBaK3Nm[1].png", nBufferLength=0x105, lpBuffer=0x31dec4, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\IKQEEPZR\\BBaK3Nm[1].png", lpFilePart=0x0) returned 0x7e [0072.437] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e3b8) returned 1 [0072.437] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\IKQEEPZR\\BBaK3Nm[1].png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\ikqeepzr\\bbak3nm[1].png"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x178 [0072.437] GetFileType (hFile=0x178) returned 0x1 [0072.437] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e3b4) returned 1 [0072.437] GetFileType (hFile=0x178) returned 0x1 [0072.437] GetFileSize (in: hFile=0x178, lpFileSizeHigh=0x31e4c0 | out: lpFileSizeHigh=0x31e4c0*=0x0) returned 0x227 [0072.438] ReadFile (in: hFile=0x178, lpBuffer=0x27b3204, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x31e46c, lpOverlapped=0x0 | out: lpBuffer=0x27b3204*, lpNumberOfBytesRead=0x31e46c*=0x227, lpOverlapped=0x0) returned 1 [0072.449] CloseHandle (hObject=0x178) returned 1 [0072.463] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\IKQEEPZR\\BBaK3Nm[1].png", nBufferLength=0x105, lpBuffer=0x31deb0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\IKQEEPZR\\BBaK3Nm[1].png", lpFilePart=0x0) returned 0x7e [0072.463] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e3a4) returned 1 [0072.463] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\IKQEEPZR\\BBaK3Nm[1].png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\ikqeepzr\\bbak3nm[1].png"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x178 [0072.464] GetFileType (hFile=0x178) returned 0x1 [0072.464] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e3a0) returned 1 [0072.464] GetFileType (hFile=0x178) returned 0x1 [0072.464] WriteFile (in: hFile=0x178, lpBuffer=0x2801c84*, nNumberOfBytesToWrite=0x230, lpNumberOfBytesWritten=0x31e434, lpOverlapped=0x0 | out: lpBuffer=0x2801c84*, lpNumberOfBytesWritten=0x31e434*=0x230, lpOverlapped=0x0) returned 1 [0072.465] CloseHandle (hObject=0x178) returned 1 [0072.465] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\IKQEEPZR\\BBaK3Nm[1].png", nBufferLength=0x105, lpBuffer=0x31dfe4, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\IKQEEPZR\\BBaK3Nm[1].png", lpFilePart=0x0) returned 0x7e [0072.465] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\IKQEEPZR\\BBaK3Nm[1].png", nBufferLength=0x105, lpBuffer=0x31dfe4, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\IKQEEPZR\\BBaK3Nm[1].png", lpFilePart=0x0) returned 0x7e [0072.465] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e444) returned 1 [0072.465] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\IKQEEPZR\\BBaK3Nm[1].png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\ikqeepzr\\bbak3nm[1].png"), fInfoLevelId=0x0, lpFileInformation=0x31e4c0 | out: lpFileInformation=0x31e4c0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x45b042f0, ftCreationTime.dwHighDateTime=0x1d2faf3, ftLastAccessTime.dwLowDateTime=0x45b042f0, ftLastAccessTime.dwHighDateTime=0x1d2faf3, ftLastWriteTime.dwLowDateTime=0xea37680, ftLastWriteTime.dwHighDateTime=0x1d6eb7f, nFileSizeHigh=0x0, nFileSizeLow=0x230)) returned 1 [0072.466] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e440) returned 1 [0072.466] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\IKQEEPZR\\BBaK3Nm[1].png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\ikqeepzr\\bbak3nm[1].png"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\IKQEEPZR\\BBaK3Nm[1].png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\ikqeepzr\\bbak3nm[1].png")) returned 1 [0072.466] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\IKQEEPZR\\BBBLcCz[1].jpg", nBufferLength=0x105, lpBuffer=0x31dec4, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\IKQEEPZR\\BBBLcCz[1].jpg", lpFilePart=0x0) returned 0x7e [0072.466] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e3b8) returned 1 [0072.466] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\IKQEEPZR\\BBBLcCz[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\ikqeepzr\\bbblccz[1].jpg"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x178 [0072.466] GetFileType (hFile=0x178) returned 0x1 [0072.466] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e3b4) returned 1 [0072.466] GetFileType (hFile=0x178) returned 0x1 [0072.466] GetFileSize (in: hFile=0x178, lpFileSizeHigh=0x31e4c0 | out: lpFileSizeHigh=0x31e4c0*=0x0) returned 0x2143 [0072.466] ReadFile (in: hFile=0x178, lpBuffer=0x2803054, nNumberOfBytesToRead=0x2143, lpNumberOfBytesRead=0x31e46c, lpOverlapped=0x0 | out: lpBuffer=0x2803054*, lpNumberOfBytesRead=0x31e46c*=0x2143, lpOverlapped=0x0) returned 1 [0072.468] CloseHandle (hObject=0x178) returned 1 [0072.484] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\IKQEEPZR\\BBBLcCz[1].jpg", nBufferLength=0x105, lpBuffer=0x31deb0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\IKQEEPZR\\BBBLcCz[1].jpg", lpFilePart=0x0) returned 0x7e [0072.484] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e3a4) returned 1 [0072.485] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\IKQEEPZR\\BBBLcCz[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\ikqeepzr\\bbblccz[1].jpg"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x178 [0072.485] GetFileType (hFile=0x178) returned 0x1 [0072.485] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e3a0) returned 1 [0072.486] GetFileType (hFile=0x178) returned 0x1 [0072.486] WriteFile (in: hFile=0x178, lpBuffer=0x2660e10*, nNumberOfBytesToWrite=0x2150, lpNumberOfBytesWritten=0x31e460, lpOverlapped=0x0 | out: lpBuffer=0x2660e10*, lpNumberOfBytesWritten=0x31e460*=0x2150, lpOverlapped=0x0) returned 1 [0072.487] CloseHandle (hObject=0x178) returned 1 [0072.487] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\IKQEEPZR\\BBBLcCz[1].jpg", nBufferLength=0x105, lpBuffer=0x31dfe4, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\IKQEEPZR\\BBBLcCz[1].jpg", lpFilePart=0x0) returned 0x7e [0072.487] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\IKQEEPZR\\BBBLcCz[1].jpg", nBufferLength=0x105, lpBuffer=0x31dfe4, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\IKQEEPZR\\BBBLcCz[1].jpg", lpFilePart=0x0) returned 0x7e [0072.487] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e444) returned 1 [0072.487] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\IKQEEPZR\\BBBLcCz[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\ikqeepzr\\bbblccz[1].jpg"), fInfoLevelId=0x0, lpFileInformation=0x31e4c0 | out: lpFileInformation=0x31e4c0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x53337450, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x53337450, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0xea5d7e0, ftLastWriteTime.dwHighDateTime=0x1d6eb7f, nFileSizeHigh=0x0, nFileSizeLow=0x2150)) returned 1 [0072.487] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e440) returned 1 [0072.487] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\IKQEEPZR\\BBBLcCz[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\ikqeepzr\\bbblccz[1].jpg"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\IKQEEPZR\\BBBLcCz[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\ikqeepzr\\bbblccz[1].jpg")) returned 1 [0072.487] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\IKQEEPZR\\BBBLdzQ[1].jpg", nBufferLength=0x105, lpBuffer=0x31dec4, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\IKQEEPZR\\BBBLdzQ[1].jpg", lpFilePart=0x0) returned 0x7e [0072.487] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e3b8) returned 1 [0072.488] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\IKQEEPZR\\BBBLdzQ[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\ikqeepzr\\bbbldzq[1].jpg"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x178 [0072.488] GetFileType (hFile=0x178) returned 0x1 [0072.488] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e3b4) returned 1 [0072.488] GetFileType (hFile=0x178) returned 0x1 [0072.488] GetFileSize (in: hFile=0x178, lpFileSizeHigh=0x31e4c0 | out: lpFileSizeHigh=0x31e4c0*=0x0) returned 0x912 [0072.488] ReadFile (in: hFile=0x178, lpBuffer=0x2663de4, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x31e46c, lpOverlapped=0x0 | out: lpBuffer=0x2663de4*, lpNumberOfBytesRead=0x31e46c*=0x912, lpOverlapped=0x0) returned 1 [0072.489] CloseHandle (hObject=0x178) returned 1 [0072.529] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\IKQEEPZR\\BBBLdzQ[1].jpg", nBufferLength=0x105, lpBuffer=0x31deb0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\IKQEEPZR\\BBBLdzQ[1].jpg", lpFilePart=0x0) returned 0x7e [0072.529] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e3a4) returned 1 [0072.529] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\IKQEEPZR\\BBBLdzQ[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\ikqeepzr\\bbbldzq[1].jpg"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x178 [0072.530] GetFileType (hFile=0x178) returned 0x1 [0072.530] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e3a0) returned 1 [0072.530] GetFileType (hFile=0x178) returned 0x1 [0072.530] WriteFile (in: hFile=0x178, lpBuffer=0x26b4c74*, nNumberOfBytesToWrite=0x920, lpNumberOfBytesWritten=0x31e434, lpOverlapped=0x0 | out: lpBuffer=0x26b4c74*, lpNumberOfBytesWritten=0x31e434*=0x920, lpOverlapped=0x0) returned 1 [0072.532] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\IKQEEPZR\\BBBLdzQ[1].jpg", nBufferLength=0x105, lpBuffer=0x31dfe4, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\IKQEEPZR\\BBBLdzQ[1].jpg", lpFilePart=0x0) returned 0x7e [0072.532] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\IKQEEPZR\\BBBLdzQ[1].jpg", nBufferLength=0x105, lpBuffer=0x31dfe4, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\IKQEEPZR\\BBBLdzQ[1].jpg", lpFilePart=0x0) returned 0x7e [0072.532] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e444) returned 1 [0072.532] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\IKQEEPZR\\BBBLdzQ[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\ikqeepzr\\bbbldzq[1].jpg"), fInfoLevelId=0x0, lpFileInformation=0x31e4c0 | out: lpFileInformation=0x31e4c0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x5348e0b0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x5348e0b0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0xeacfc00, ftLastWriteTime.dwHighDateTime=0x1d6eb7f, nFileSizeHigh=0x0, nFileSizeLow=0x920)) returned 1 [0072.532] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e440) returned 1 [0072.532] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\IKQEEPZR\\BBBLdzQ[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\ikqeepzr\\bbbldzq[1].jpg"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\IKQEEPZR\\BBBLdzQ[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\ikqeepzr\\bbbldzq[1].jpg")) returned 1 [0072.533] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\IKQEEPZR\\BBBO1mQ[1].jpg", nBufferLength=0x105, lpBuffer=0x31dec4, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\IKQEEPZR\\BBBO1mQ[1].jpg", lpFilePart=0x0) returned 0x7e [0072.533] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e3b8) returned 1 [0072.533] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\IKQEEPZR\\BBBO1mQ[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\ikqeepzr\\bbbo1mq[1].jpg"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x178 [0072.533] GetFileType (hFile=0x178) returned 0x1 [0072.533] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e3b4) returned 1 [0072.533] GetFileType (hFile=0x178) returned 0x1 [0072.533] GetFileSize (in: hFile=0x178, lpFileSizeHigh=0x31e4c0 | out: lpFileSizeHigh=0x31e4c0*=0x0) returned 0x6e8 [0072.533] ReadFile (in: hFile=0x178, lpBuffer=0x26b6738, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x31e46c, lpOverlapped=0x0 | out: lpBuffer=0x26b6738*, lpNumberOfBytesRead=0x31e46c*=0x6e8, lpOverlapped=0x0) returned 1 [0072.548] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\IKQEEPZR\\BBBO1mQ[1].jpg", nBufferLength=0x105, lpBuffer=0x31deb0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\IKQEEPZR\\BBBO1mQ[1].jpg", lpFilePart=0x0) returned 0x7e [0072.549] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e3a4) returned 1 [0072.549] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\IKQEEPZR\\BBBO1mQ[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\ikqeepzr\\bbbo1mq[1].jpg"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x178 [0072.549] GetFileType (hFile=0x178) returned 0x1 [0072.549] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e3a0) returned 1 [0072.549] GetFileType (hFile=0x178) returned 0x1 [0072.550] WriteFile (in: hFile=0x178, lpBuffer=0x2706974*, nNumberOfBytesToWrite=0x6f0, lpNumberOfBytesWritten=0x31e434, lpOverlapped=0x0 | out: lpBuffer=0x2706974*, lpNumberOfBytesWritten=0x31e434*=0x6f0, lpOverlapped=0x0) returned 1 [0072.550] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\IKQEEPZR\\BBBO1mQ[1].jpg", nBufferLength=0x105, lpBuffer=0x31dfe4, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\IKQEEPZR\\BBBO1mQ[1].jpg", lpFilePart=0x0) returned 0x7e [0072.551] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\IKQEEPZR\\BBBO1mQ[1].jpg", nBufferLength=0x105, lpBuffer=0x31dfe4, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\IKQEEPZR\\BBBO1mQ[1].jpg", lpFilePart=0x0) returned 0x7e [0072.551] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e444) returned 1 [0072.551] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\IKQEEPZR\\BBBO1mQ[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\ikqeepzr\\bbbo1mq[1].jpg"), fInfoLevelId=0x0, lpFileInformation=0x31e4c0 | out: lpFileInformation=0x31e4c0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x532eb190, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x532eb190, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0xeaf5d60, ftLastWriteTime.dwHighDateTime=0x1d6eb7f, nFileSizeHigh=0x0, nFileSizeLow=0x6f0)) returned 1 [0072.551] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e440) returned 1 [0072.551] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\IKQEEPZR\\BBBO1mQ[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\ikqeepzr\\bbbo1mq[1].jpg"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\IKQEEPZR\\BBBO1mQ[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\ikqeepzr\\bbbo1mq[1].jpg")) returned 1 [0072.551] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\IKQEEPZR\\BBBO1qB[1].jpg", nBufferLength=0x105, lpBuffer=0x31dec4, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\IKQEEPZR\\BBBO1qB[1].jpg", lpFilePart=0x0) returned 0x7e [0072.551] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e3b8) returned 1 [0072.551] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\IKQEEPZR\\BBBO1qB[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\ikqeepzr\\bbbo1qb[1].jpg"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x178 [0072.551] GetFileType (hFile=0x178) returned 0x1 [0072.551] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e3b4) returned 1 [0072.551] GetFileType (hFile=0x178) returned 0x1 [0072.552] GetFileSize (in: hFile=0x178, lpFileSizeHigh=0x31e4c0 | out: lpFileSizeHigh=0x31e4c0*=0x0) returned 0x36d2 [0072.552] ReadFile (in: hFile=0x178, lpBuffer=0x2707d44, nNumberOfBytesToRead=0x36d2, lpNumberOfBytesRead=0x31e46c, lpOverlapped=0x0 | out: lpBuffer=0x2707d44*, lpNumberOfBytesRead=0x31e46c*=0x36d2, lpOverlapped=0x0) returned 1 [0072.567] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\IKQEEPZR\\BBBO1qB[1].jpg", nBufferLength=0x105, lpBuffer=0x31deb0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\IKQEEPZR\\BBBO1qB[1].jpg", lpFilePart=0x0) returned 0x7e [0072.567] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e3a4) returned 1 [0072.567] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\IKQEEPZR\\BBBO1qB[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\ikqeepzr\\bbbo1qb[1].jpg"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x178 [0072.568] GetFileType (hFile=0x178) returned 0x1 [0072.568] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e3a0) returned 1 [0072.568] GetFileType (hFile=0x178) returned 0x1 [0072.568] WriteFile (in: hFile=0x178, lpBuffer=0x2765d8c*, nNumberOfBytesToWrite=0x36e0, lpNumberOfBytesWritten=0x31e460, lpOverlapped=0x0 | out: lpBuffer=0x2765d8c*, lpNumberOfBytesWritten=0x31e460*=0x36e0, lpOverlapped=0x0) returned 1 [0072.569] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\IKQEEPZR\\BBBO1qB[1].jpg", nBufferLength=0x105, lpBuffer=0x31dfe4, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\IKQEEPZR\\BBBO1qB[1].jpg", lpFilePart=0x0) returned 0x7e [0072.569] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\IKQEEPZR\\BBBO1qB[1].jpg", nBufferLength=0x105, lpBuffer=0x31dfe4, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\IKQEEPZR\\BBBO1qB[1].jpg", lpFilePart=0x0) returned 0x7e [0072.569] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e444) returned 1 [0072.569] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\IKQEEPZR\\BBBO1qB[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\ikqeepzr\\bbbo1qb[1].jpg"), fInfoLevelId=0x0, lpFileInformation=0x31e4c0 | out: lpFileInformation=0x31e4c0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x537add90, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x537add90, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0xeb1bec0, ftLastWriteTime.dwHighDateTime=0x1d6eb7f, nFileSizeHigh=0x0, nFileSizeLow=0x36e0)) returned 1 [0072.569] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e440) returned 1 [0072.569] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\IKQEEPZR\\BBBO1qB[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\ikqeepzr\\bbbo1qb[1].jpg"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\IKQEEPZR\\BBBO1qB[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\ikqeepzr\\bbbo1qb[1].jpg")) returned 1 [0072.569] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\IKQEEPZR\\BBBOIAt[1].jpg", nBufferLength=0x105, lpBuffer=0x31dec4, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\IKQEEPZR\\BBBOIAt[1].jpg", lpFilePart=0x0) returned 0x7e [0072.569] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e3b8) returned 1 [0072.569] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\IKQEEPZR\\BBBOIAt[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\ikqeepzr\\bbboiat[1].jpg"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x178 [0072.570] GetFileType (hFile=0x178) returned 0x1 [0072.570] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e3b4) returned 1 [0072.570] GetFileType (hFile=0x178) returned 0x1 [0072.570] GetFileSize (in: hFile=0x178, lpFileSizeHigh=0x31e4c0 | out: lpFileSizeHigh=0x31e4c0*=0x0) returned 0x75e [0072.570] ReadFile (in: hFile=0x178, lpBuffer=0x276a13c, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x31e46c, lpOverlapped=0x0 | out: lpBuffer=0x276a13c*, lpNumberOfBytesRead=0x31e46c*=0x75e, lpOverlapped=0x0) returned 1 [0072.584] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\IKQEEPZR\\BBBOIAt[1].jpg", nBufferLength=0x105, lpBuffer=0x31deb0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\IKQEEPZR\\BBBOIAt[1].jpg", lpFilePart=0x0) returned 0x7e [0072.584] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e3a4) returned 1 [0072.584] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\IKQEEPZR\\BBBOIAt[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\ikqeepzr\\bbboiat[1].jpg"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x178 [0072.585] GetFileType (hFile=0x178) returned 0x1 [0072.585] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e3a0) returned 1 [0072.585] GetFileType (hFile=0x178) returned 0x1 [0072.585] WriteFile (in: hFile=0x178, lpBuffer=0x27ba5a4*, nNumberOfBytesToWrite=0x760, lpNumberOfBytesWritten=0x31e434, lpOverlapped=0x0 | out: lpBuffer=0x27ba5a4*, lpNumberOfBytesWritten=0x31e434*=0x760, lpOverlapped=0x0) returned 1 [0072.586] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\IKQEEPZR\\BBBOIAt[1].jpg", nBufferLength=0x105, lpBuffer=0x31dfe4, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\IKQEEPZR\\BBBOIAt[1].jpg", lpFilePart=0x0) returned 0x7e [0072.586] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\IKQEEPZR\\BBBOIAt[1].jpg", nBufferLength=0x105, lpBuffer=0x31dfe4, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\IKQEEPZR\\BBBOIAt[1].jpg", lpFilePart=0x0) returned 0x7e [0072.586] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e444) returned 1 [0072.586] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\IKQEEPZR\\BBBOIAt[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\ikqeepzr\\bbboiat[1].jpg"), fInfoLevelId=0x0, lpFileInformation=0x31e4c0 | out: lpFileInformation=0x31e4c0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x53194530, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x53194530, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0xeb42020, ftLastWriteTime.dwHighDateTime=0x1d6eb7f, nFileSizeHigh=0x0, nFileSizeLow=0x760)) returned 1 [0072.586] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e440) returned 1 [0072.586] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\IKQEEPZR\\BBBOIAt[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\ikqeepzr\\bbboiat[1].jpg"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\IKQEEPZR\\BBBOIAt[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\ikqeepzr\\bbboiat[1].jpg")) returned 1 [0072.587] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\IKQEEPZR\\BBBOmuh[1].jpg", nBufferLength=0x105, lpBuffer=0x31dec4, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\IKQEEPZR\\BBBOmuh[1].jpg", lpFilePart=0x0) returned 0x7e [0072.587] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e3b8) returned 1 [0072.587] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\IKQEEPZR\\BBBOmuh[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\ikqeepzr\\bbbomuh[1].jpg"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x178 [0072.587] GetFileType (hFile=0x178) returned 0x1 [0072.587] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e3b4) returned 1 [0072.587] GetFileType (hFile=0x178) returned 0x1 [0072.587] GetFileSize (in: hFile=0x178, lpFileSizeHigh=0x31e4c0 | out: lpFileSizeHigh=0x31e4c0*=0x0) returned 0x6dc [0072.587] ReadFile (in: hFile=0x178, lpBuffer=0x27bc05c, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x31e46c, lpOverlapped=0x0 | out: lpBuffer=0x27bc05c*, lpNumberOfBytesRead=0x31e46c*=0x6dc, lpOverlapped=0x0) returned 1 [0072.602] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\IKQEEPZR\\BBBOmuh[1].jpg", nBufferLength=0x105, lpBuffer=0x31deb0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\IKQEEPZR\\BBBOmuh[1].jpg", lpFilePart=0x0) returned 0x7e [0072.602] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e3a4) returned 1 [0072.602] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\IKQEEPZR\\BBBOmuh[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\ikqeepzr\\bbbomuh[1].jpg"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x178 [0072.603] GetFileType (hFile=0x178) returned 0x1 [0072.603] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e3a0) returned 1 [0072.603] GetFileType (hFile=0x178) returned 0x1 [0072.603] WriteFile (in: hFile=0x178, lpBuffer=0x280c244*, nNumberOfBytesToWrite=0x6e0, lpNumberOfBytesWritten=0x31e434, lpOverlapped=0x0 | out: lpBuffer=0x280c244*, lpNumberOfBytesWritten=0x31e434*=0x6e0, lpOverlapped=0x0) returned 1 [0072.604] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\IKQEEPZR\\BBBOmuh[1].jpg", nBufferLength=0x105, lpBuffer=0x31dfe4, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\IKQEEPZR\\BBBOmuh[1].jpg", lpFilePart=0x0) returned 0x7e [0072.604] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\IKQEEPZR\\BBBOmuh[1].jpg", nBufferLength=0x105, lpBuffer=0x31dfe4, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\IKQEEPZR\\BBBOmuh[1].jpg", lpFilePart=0x0) returned 0x7e [0072.604] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e444) returned 1 [0072.604] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\IKQEEPZR\\BBBOmuh[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\ikqeepzr\\bbbomuh[1].jpg"), fInfoLevelId=0x0, lpFileInformation=0x31e4c0 | out: lpFileInformation=0x31e4c0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x539049f0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x539049f0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0xeb8e2e0, ftLastWriteTime.dwHighDateTime=0x1d6eb7f, nFileSizeHigh=0x0, nFileSizeLow=0x6e0)) returned 1 [0072.605] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e440) returned 1 [0072.605] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\IKQEEPZR\\BBBOmuh[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\ikqeepzr\\bbbomuh[1].jpg"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\IKQEEPZR\\BBBOmuh[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\ikqeepzr\\bbbomuh[1].jpg")) returned 1 [0072.605] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\IKQEEPZR\\BBBPK5J[1].jpg", nBufferLength=0x105, lpBuffer=0x31dec4, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\IKQEEPZR\\BBBPK5J[1].jpg", lpFilePart=0x0) returned 0x7e [0072.605] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e3b8) returned 1 [0072.605] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\IKQEEPZR\\BBBPK5J[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\ikqeepzr\\bbbpk5j[1].jpg"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x178 [0072.605] GetFileType (hFile=0x178) returned 0x1 [0072.605] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e3b4) returned 1 [0072.605] GetFileType (hFile=0x178) returned 0x1 [0072.605] GetFileSize (in: hFile=0x178, lpFileSizeHigh=0x31e4c0 | out: lpFileSizeHigh=0x31e4c0*=0x0) returned 0x9be [0072.605] ReadFile (in: hFile=0x178, lpBuffer=0x280dfe0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x31e46c, lpOverlapped=0x0 | out: lpBuffer=0x280dfe0*, lpNumberOfBytesRead=0x31e46c*=0x9be, lpOverlapped=0x0) returned 1 [0072.620] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\IKQEEPZR\\BBBPK5J[1].jpg", nBufferLength=0x105, lpBuffer=0x31deb0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\IKQEEPZR\\BBBPK5J[1].jpg", lpFilePart=0x0) returned 0x7e [0072.620] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e3a4) returned 1 [0072.620] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\IKQEEPZR\\BBBPK5J[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\ikqeepzr\\bbbpk5j[1].jpg"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x178 [0072.620] GetFileType (hFile=0x178) returned 0x1 [0072.620] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e3a0) returned 1 [0072.621] GetFileType (hFile=0x178) returned 0x1 [0072.621] WriteFile (in: hFile=0x178, lpBuffer=0x285f028*, nNumberOfBytesToWrite=0x9c0, lpNumberOfBytesWritten=0x31e434, lpOverlapped=0x0 | out: lpBuffer=0x285f028*, lpNumberOfBytesWritten=0x31e434*=0x9c0, lpOverlapped=0x0) returned 1 [0072.621] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\IKQEEPZR\\BBBPK5J[1].jpg", nBufferLength=0x105, lpBuffer=0x31dfe4, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\IKQEEPZR\\BBBPK5J[1].jpg", lpFilePart=0x0) returned 0x7e [0072.621] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\IKQEEPZR\\BBBPK5J[1].jpg", nBufferLength=0x105, lpBuffer=0x31dfe4, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\IKQEEPZR\\BBBPK5J[1].jpg", lpFilePart=0x0) returned 0x7e [0072.622] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e444) returned 1 [0072.622] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\IKQEEPZR\\BBBPK5J[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\ikqeepzr\\bbbpk5j[1].jpg"), fInfoLevelId=0x0, lpFileInformation=0x31e4c0 | out: lpFileInformation=0x31e4c0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x53467f50, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x53467f50, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0xebb4440, ftLastWriteTime.dwHighDateTime=0x1d6eb7f, nFileSizeHigh=0x0, nFileSizeLow=0x9c0)) returned 1 [0072.622] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e440) returned 1 [0072.622] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\IKQEEPZR\\BBBPK5J[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\ikqeepzr\\bbbpk5j[1].jpg"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\IKQEEPZR\\BBBPK5J[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\ikqeepzr\\bbbpk5j[1].jpg")) returned 1 [0072.622] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\IKQEEPZR\\BBBPMvJ[1].jpg", nBufferLength=0x105, lpBuffer=0x31dec4, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\IKQEEPZR\\BBBPMvJ[1].jpg", lpFilePart=0x0) returned 0x7e [0072.622] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e3b8) returned 1 [0072.622] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\IKQEEPZR\\BBBPMvJ[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\ikqeepzr\\bbbpmvj[1].jpg"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x178 [0072.623] GetFileType (hFile=0x178) returned 0x1 [0072.623] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e3b4) returned 1 [0072.623] GetFileType (hFile=0x178) returned 0x1 [0072.623] GetFileSize (in: hFile=0x178, lpFileSizeHigh=0x31e4c0 | out: lpFileSizeHigh=0x31e4c0*=0x0) returned 0x1694 [0072.623] ReadFile (in: hFile=0x178, lpBuffer=0x28603f8, nNumberOfBytesToRead=0x1694, lpNumberOfBytesRead=0x31e46c, lpOverlapped=0x0 | out: lpBuffer=0x28603f8*, lpNumberOfBytesRead=0x31e46c*=0x1694, lpOverlapped=0x0) returned 1 [0072.641] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\IKQEEPZR\\BBBPMvJ[1].jpg", nBufferLength=0x105, lpBuffer=0x31deb0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\IKQEEPZR\\BBBPMvJ[1].jpg", lpFilePart=0x0) returned 0x7e [0072.641] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e3a4) returned 1 [0072.641] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\IKQEEPZR\\BBBPMvJ[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\ikqeepzr\\bbbpmvj[1].jpg"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x178 [0072.642] GetFileType (hFile=0x178) returned 0x1 [0072.642] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e3a0) returned 1 [0072.642] GetFileType (hFile=0x178) returned 0x1 [0072.642] WriteFile (in: hFile=0x178, lpBuffer=0x26adbd0*, nNumberOfBytesToWrite=0x16a0, lpNumberOfBytesWritten=0x31e460, lpOverlapped=0x0 | out: lpBuffer=0x26adbd0*, lpNumberOfBytesWritten=0x31e460*=0x16a0, lpOverlapped=0x0) returned 1 [0072.643] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\IKQEEPZR\\BBBPMvJ[1].jpg", nBufferLength=0x105, lpBuffer=0x31dfe4, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\IKQEEPZR\\BBBPMvJ[1].jpg", lpFilePart=0x0) returned 0x7e [0072.643] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\IKQEEPZR\\BBBPMvJ[1].jpg", nBufferLength=0x105, lpBuffer=0x31dfe4, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\IKQEEPZR\\BBBPMvJ[1].jpg", lpFilePart=0x0) returned 0x7e [0072.643] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e444) returned 1 [0072.643] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\IKQEEPZR\\BBBPMvJ[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\ikqeepzr\\bbbpmvj[1].jpg"), fInfoLevelId=0x0, lpFileInformation=0x31e4c0 | out: lpFileInformation=0x31e4c0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x53194530, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x53194530, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0xebda5a0, ftLastWriteTime.dwHighDateTime=0x1d6eb7f, nFileSizeHigh=0x0, nFileSizeLow=0x16a0)) returned 1 [0072.643] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e440) returned 1 [0072.643] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\IKQEEPZR\\BBBPMvJ[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\ikqeepzr\\bbbpmvj[1].jpg"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\IKQEEPZR\\BBBPMvJ[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\ikqeepzr\\bbbpmvj[1].jpg")) returned 1 [0072.644] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\IKQEEPZR\\BBBUL3E[1].jpg", nBufferLength=0x105, lpBuffer=0x31dec4, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\IKQEEPZR\\BBBUL3E[1].jpg", lpFilePart=0x0) returned 0x7e [0072.644] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e3b8) returned 1 [0072.644] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\IKQEEPZR\\BBBUL3E[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\ikqeepzr\\bbbul3e[1].jpg"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x178 [0072.644] GetFileType (hFile=0x178) returned 0x1 [0072.644] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e3b4) returned 1 [0072.644] GetFileType (hFile=0x178) returned 0x1 [0072.644] GetFileSize (in: hFile=0x178, lpFileSizeHigh=0x31e4c0 | out: lpFileSizeHigh=0x31e4c0*=0x0) returned 0x85d [0072.644] ReadFile (in: hFile=0x178, lpBuffer=0x26b0040, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x31e46c, lpOverlapped=0x0 | out: lpBuffer=0x26b0040*, lpNumberOfBytesRead=0x31e46c*=0x85d, lpOverlapped=0x0) returned 1 [0072.660] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\IKQEEPZR\\BBBUL3E[1].jpg", nBufferLength=0x105, lpBuffer=0x31deb0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\IKQEEPZR\\BBBUL3E[1].jpg", lpFilePart=0x0) returned 0x7e [0072.660] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e3a4) returned 1 [0072.660] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\IKQEEPZR\\BBBUL3E[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\ikqeepzr\\bbbul3e[1].jpg"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x178 [0072.663] GetFileType (hFile=0x178) returned 0x1 [0072.663] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e3a0) returned 1 [0072.664] GetFileType (hFile=0x178) returned 0x1 [0072.664] WriteFile (in: hFile=0x178, lpBuffer=0x2700b04*, nNumberOfBytesToWrite=0x860, lpNumberOfBytesWritten=0x31e434, lpOverlapped=0x0 | out: lpBuffer=0x2700b04*, lpNumberOfBytesWritten=0x31e434*=0x860, lpOverlapped=0x0) returned 1 [0072.664] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\IKQEEPZR\\BBBUL3E[1].jpg", nBufferLength=0x105, lpBuffer=0x31dfe4, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\IKQEEPZR\\BBBUL3E[1].jpg", lpFilePart=0x0) returned 0x7e [0072.665] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\IKQEEPZR\\BBBUL3E[1].jpg", nBufferLength=0x105, lpBuffer=0x31dfe4, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\IKQEEPZR\\BBBUL3E[1].jpg", lpFilePart=0x0) returned 0x7e [0072.665] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e444) returned 1 [0072.665] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\IKQEEPZR\\BBBUL3E[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\ikqeepzr\\bbbul3e[1].jpg"), fInfoLevelId=0x0, lpFileInformation=0x31e4c0 | out: lpFileInformation=0x31e4c0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x539e9230, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x539e9230, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0xec00700, ftLastWriteTime.dwHighDateTime=0x1d6eb7f, nFileSizeHigh=0x0, nFileSizeLow=0x860)) returned 1 [0072.665] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e440) returned 1 [0072.665] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\IKQEEPZR\\BBBUL3E[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\ikqeepzr\\bbbul3e[1].jpg"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\IKQEEPZR\\BBBUL3E[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\ikqeepzr\\bbbul3e[1].jpg")) returned 1 [0072.665] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\IKQEEPZR\\BBBUqkT[1].jpg", nBufferLength=0x105, lpBuffer=0x31dec4, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\IKQEEPZR\\BBBUqkT[1].jpg", lpFilePart=0x0) returned 0x7e [0072.665] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e3b8) returned 1 [0072.665] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\IKQEEPZR\\BBBUqkT[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\ikqeepzr\\bbbuqkt[1].jpg"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x178 [0072.666] GetFileType (hFile=0x178) returned 0x1 [0072.666] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e3b4) returned 1 [0072.666] GetFileType (hFile=0x178) returned 0x1 [0072.666] GetFileSize (in: hFile=0x178, lpFileSizeHigh=0x31e4c0 | out: lpFileSizeHigh=0x31e4c0*=0x0) returned 0x878 [0072.666] ReadFile (in: hFile=0x178, lpBuffer=0x2702758, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x31e46c, lpOverlapped=0x0 | out: lpBuffer=0x2702758*, lpNumberOfBytesRead=0x31e46c*=0x878, lpOverlapped=0x0) returned 1 [0072.680] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\IKQEEPZR\\BBBUqkT[1].jpg", nBufferLength=0x105, lpBuffer=0x31deb0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\IKQEEPZR\\BBBUqkT[1].jpg", lpFilePart=0x0) returned 0x7e [0072.680] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e3a4) returned 1 [0072.680] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\IKQEEPZR\\BBBUqkT[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\ikqeepzr\\bbbuqkt[1].jpg"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x264 [0072.683] GetFileType (hFile=0x264) returned 0x1 [0072.683] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e3a0) returned 1 [0072.683] GetFileType (hFile=0x264) returned 0x1 [0072.683] WriteFile (in: hFile=0x264, lpBuffer=0x2753164*, nNumberOfBytesToWrite=0x880, lpNumberOfBytesWritten=0x31e434, lpOverlapped=0x0 | out: lpBuffer=0x2753164*, lpNumberOfBytesWritten=0x31e434*=0x880, lpOverlapped=0x0) returned 1 [0072.684] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\IKQEEPZR\\BBBUqkT[1].jpg", nBufferLength=0x105, lpBuffer=0x31dfe4, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\IKQEEPZR\\BBBUqkT[1].jpg", lpFilePart=0x0) returned 0x7e [0072.684] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\IKQEEPZR\\BBBUqkT[1].jpg", nBufferLength=0x105, lpBuffer=0x31dfe4, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\IKQEEPZR\\BBBUqkT[1].jpg", lpFilePart=0x0) returned 0x7e [0072.684] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e444) returned 1 [0072.684] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\IKQEEPZR\\BBBUqkT[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\ikqeepzr\\bbbuqkt[1].jpg"), fInfoLevelId=0x0, lpFileInformation=0x31e4c0 | out: lpFileInformation=0x31e4c0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x515e8570, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x515e8570, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0xec4c9c0, ftLastWriteTime.dwHighDateTime=0x1d6eb7f, nFileSizeHigh=0x0, nFileSizeLow=0x880)) returned 1 [0072.684] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e440) returned 1 [0072.684] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\IKQEEPZR\\BBBUqkT[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\ikqeepzr\\bbbuqkt[1].jpg"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\IKQEEPZR\\BBBUqkT[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\ikqeepzr\\bbbuqkt[1].jpg")) returned 1 [0072.685] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\IKQEEPZR\\BBBUqkT[2].jpg", nBufferLength=0x105, lpBuffer=0x31dec4, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\IKQEEPZR\\BBBUqkT[2].jpg", lpFilePart=0x0) returned 0x7e [0072.685] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e3b8) returned 1 [0072.685] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\IKQEEPZR\\BBBUqkT[2].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\ikqeepzr\\bbbuqkt[2].jpg"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x264 [0072.685] GetFileType (hFile=0x264) returned 0x1 [0072.685] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e3b4) returned 1 [0072.685] GetFileType (hFile=0x264) returned 0x1 [0072.685] GetFileSize (in: hFile=0x264, lpFileSizeHigh=0x31e4c0 | out: lpFileSizeHigh=0x31e4c0*=0x0) returned 0x878 [0072.685] ReadFile (in: hFile=0x264, lpBuffer=0x2754db8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x31e46c, lpOverlapped=0x0 | out: lpBuffer=0x2754db8*, lpNumberOfBytesRead=0x31e46c*=0x878, lpOverlapped=0x0) returned 1 [0072.700] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\IKQEEPZR\\BBBUqkT[2].jpg", nBufferLength=0x105, lpBuffer=0x31deb0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\IKQEEPZR\\BBBUqkT[2].jpg", lpFilePart=0x0) returned 0x7e [0072.700] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e3a4) returned 1 [0072.700] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\IKQEEPZR\\BBBUqkT[2].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\ikqeepzr\\bbbuqkt[2].jpg"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x264 [0072.701] GetFileType (hFile=0x264) returned 0x1 [0072.701] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e3a0) returned 1 [0072.701] GetFileType (hFile=0x264) returned 0x1 [0072.701] WriteFile (in: hFile=0x264, lpBuffer=0x27a57c4*, nNumberOfBytesToWrite=0x880, lpNumberOfBytesWritten=0x31e434, lpOverlapped=0x0 | out: lpBuffer=0x27a57c4*, lpNumberOfBytesWritten=0x31e434*=0x880, lpOverlapped=0x0) returned 1 [0072.702] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\IKQEEPZR\\BBBUqkT[2].jpg", nBufferLength=0x105, lpBuffer=0x31dfe4, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\IKQEEPZR\\BBBUqkT[2].jpg", lpFilePart=0x0) returned 0x7e [0072.702] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\IKQEEPZR\\BBBUqkT[2].jpg", nBufferLength=0x105, lpBuffer=0x31dfe4, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\IKQEEPZR\\BBBUqkT[2].jpg", lpFilePart=0x0) returned 0x7e [0072.702] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e444) returned 1 [0072.702] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\IKQEEPZR\\BBBUqkT[2].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\ikqeepzr\\bbbuqkt[2].jpg"), fInfoLevelId=0x0, lpFileInformation=0x31e4c0 | out: lpFileInformation=0x31e4c0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x52f59090, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x52f59090, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0xec72b20, ftLastWriteTime.dwHighDateTime=0x1d6eb7f, nFileSizeHigh=0x0, nFileSizeLow=0x880)) returned 1 [0072.702] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e440) returned 1 [0072.702] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\IKQEEPZR\\BBBUqkT[2].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\ikqeepzr\\bbbuqkt[2].jpg"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\IKQEEPZR\\BBBUqkT[2].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\ikqeepzr\\bbbuqkt[2].jpg")) returned 1 [0072.703] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\IKQEEPZR\\BBBX3z0[1].jpg", nBufferLength=0x105, lpBuffer=0x31dec4, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\IKQEEPZR\\BBBX3z0[1].jpg", lpFilePart=0x0) returned 0x7e [0072.703] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e3b8) returned 1 [0072.703] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\IKQEEPZR\\BBBX3z0[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\ikqeepzr\\bbbx3z0[1].jpg"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x264 [0072.704] GetFileType (hFile=0x264) returned 0x1 [0072.704] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e3b4) returned 1 [0072.704] GetFileType (hFile=0x264) returned 0x1 [0072.704] GetFileSize (in: hFile=0x264, lpFileSizeHigh=0x31e4c0 | out: lpFileSizeHigh=0x31e4c0*=0x0) returned 0x77f [0072.704] ReadFile (in: hFile=0x264, lpBuffer=0x27a7320, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x31e46c, lpOverlapped=0x0 | out: lpBuffer=0x27a7320*, lpNumberOfBytesRead=0x31e46c*=0x77f, lpOverlapped=0x0) returned 1 [0072.718] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\IKQEEPZR\\BBBX3z0[1].jpg", nBufferLength=0x105, lpBuffer=0x31deb0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\IKQEEPZR\\BBBX3z0[1].jpg", lpFilePart=0x0) returned 0x7e [0072.718] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e3a4) returned 1 [0072.718] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\IKQEEPZR\\BBBX3z0[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\ikqeepzr\\bbbx3z0[1].jpg"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x264 [0072.719] GetFileType (hFile=0x264) returned 0x1 [0072.719] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e3a0) returned 1 [0072.719] GetFileType (hFile=0x264) returned 0x1 [0072.719] WriteFile (in: hFile=0x264, lpBuffer=0x27f7828*, nNumberOfBytesToWrite=0x780, lpNumberOfBytesWritten=0x31e434, lpOverlapped=0x0 | out: lpBuffer=0x27f7828*, lpNumberOfBytesWritten=0x31e434*=0x780, lpOverlapped=0x0) returned 1 [0072.720] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\IKQEEPZR\\BBBX3z0[1].jpg", nBufferLength=0x105, lpBuffer=0x31dfe4, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\IKQEEPZR\\BBBX3z0[1].jpg", lpFilePart=0x0) returned 0x7e [0072.720] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\IKQEEPZR\\BBBX3z0[1].jpg", nBufferLength=0x105, lpBuffer=0x31dfe4, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\IKQEEPZR\\BBBX3z0[1].jpg", lpFilePart=0x0) returned 0x7e [0072.720] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e444) returned 1 [0072.720] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\IKQEEPZR\\BBBX3z0[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\ikqeepzr\\bbbx3z0[1].jpg"), fInfoLevelId=0x0, lpFileInformation=0x31e4c0 | out: lpFileInformation=0x31e4c0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x530afcf0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x530afcf0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0xec98c80, ftLastWriteTime.dwHighDateTime=0x1d6eb7f, nFileSizeHigh=0x0, nFileSizeLow=0x780)) returned 1 [0072.720] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e440) returned 1 [0072.721] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\IKQEEPZR\\BBBX3z0[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\ikqeepzr\\bbbx3z0[1].jpg"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\IKQEEPZR\\BBBX3z0[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\ikqeepzr\\bbbx3z0[1].jpg")) returned 1 [0072.721] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\IKQEEPZR\\BBBYEW1[1].jpg", nBufferLength=0x105, lpBuffer=0x31dec4, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\IKQEEPZR\\BBBYEW1[1].jpg", lpFilePart=0x0) returned 0x7e [0072.721] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e3b8) returned 1 [0072.721] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\IKQEEPZR\\BBBYEW1[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\ikqeepzr\\bbbyew1[1].jpg"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x264 [0072.721] GetFileType (hFile=0x264) returned 0x1 [0072.721] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e3b4) returned 1 [0072.721] GetFileType (hFile=0x264) returned 0x1 [0072.721] GetFileSize (in: hFile=0x264, lpFileSizeHigh=0x31e4c0 | out: lpFileSizeHigh=0x31e4c0*=0x0) returned 0x22b3 [0072.721] ReadFile (in: hFile=0x264, lpBuffer=0x27f8bf8, nNumberOfBytesToRead=0x22b3, lpNumberOfBytesRead=0x31e46c, lpOverlapped=0x0 | out: lpBuffer=0x27f8bf8*, lpNumberOfBytesRead=0x31e46c*=0x22b3, lpOverlapped=0x0) returned 1 [0072.738] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\IKQEEPZR\\BBBYEW1[1].jpg", nBufferLength=0x105, lpBuffer=0x31deb0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\IKQEEPZR\\BBBYEW1[1].jpg", lpFilePart=0x0) returned 0x7e [0072.738] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e3a4) returned 1 [0072.738] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\IKQEEPZR\\BBBYEW1[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\ikqeepzr\\bbbyew1[1].jpg"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x264 [0072.739] GetFileType (hFile=0x264) returned 0x1 [0072.739] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e3a0) returned 1 [0072.739] GetFileType (hFile=0x264) returned 0x1 [0072.739] WriteFile (in: hFile=0x264, lpBuffer=0x28507a0*, nNumberOfBytesToWrite=0x22c0, lpNumberOfBytesWritten=0x31e460, lpOverlapped=0x0 | out: lpBuffer=0x28507a0*, lpNumberOfBytesWritten=0x31e460*=0x22c0, lpOverlapped=0x0) returned 1 [0072.740] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\IKQEEPZR\\BBBYEW1[1].jpg", nBufferLength=0x105, lpBuffer=0x31dfe4, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\IKQEEPZR\\BBBYEW1[1].jpg", lpFilePart=0x0) returned 0x7e [0072.740] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\IKQEEPZR\\BBBYEW1[1].jpg", nBufferLength=0x105, lpBuffer=0x31dfe4, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\IKQEEPZR\\BBBYEW1[1].jpg", lpFilePart=0x0) returned 0x7e [0072.740] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e444) returned 1 [0072.740] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\IKQEEPZR\\BBBYEW1[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\ikqeepzr\\bbbyew1[1].jpg"), fInfoLevelId=0x0, lpFileInformation=0x31e4c0 | out: lpFileInformation=0x31e4c0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x538b8730, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x538b8730, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0xecbede0, ftLastWriteTime.dwHighDateTime=0x1d6eb7f, nFileSizeHigh=0x0, nFileSizeLow=0x22c0)) returned 1 [0072.741] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e440) returned 1 [0072.741] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\IKQEEPZR\\BBBYEW1[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\ikqeepzr\\bbbyew1[1].jpg"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\IKQEEPZR\\BBBYEW1[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\ikqeepzr\\bbbyew1[1].jpg")) returned 1 [0072.741] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\IKQEEPZR\\BBBYfEH[1].jpg", nBufferLength=0x105, lpBuffer=0x31dec4, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\IKQEEPZR\\BBBYfEH[1].jpg", lpFilePart=0x0) returned 0x7e [0072.741] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e3b8) returned 1 [0072.741] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\IKQEEPZR\\BBBYfEH[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\ikqeepzr\\bbbyfeh[1].jpg"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x264 [0072.741] GetFileType (hFile=0x264) returned 0x1 [0072.741] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e3b4) returned 1 [0072.741] GetFileType (hFile=0x264) returned 0x1 [0072.741] GetFileSize (in: hFile=0x264, lpFileSizeHigh=0x31e4c0 | out: lpFileSizeHigh=0x31e4c0*=0x0) returned 0x19cf [0072.741] ReadFile (in: hFile=0x264, lpBuffer=0x2852fc4, nNumberOfBytesToRead=0x19cf, lpNumberOfBytesRead=0x31e46c, lpOverlapped=0x0 | out: lpBuffer=0x2852fc4*, lpNumberOfBytesRead=0x31e46c*=0x19cf, lpOverlapped=0x0) returned 1 [0072.759] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\IKQEEPZR\\BBBYfEH[1].jpg", nBufferLength=0x105, lpBuffer=0x31deb0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\IKQEEPZR\\BBBYfEH[1].jpg", lpFilePart=0x0) returned 0x7e [0072.759] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e3a4) returned 1 [0072.759] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\IKQEEPZR\\BBBYfEH[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\ikqeepzr\\bbbyfeh[1].jpg"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x264 [0072.760] GetFileType (hFile=0x264) returned 0x1 [0072.760] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e3a0) returned 1 [0072.760] GetFileType (hFile=0x264) returned 0x1 [0072.760] WriteFile (in: hFile=0x264, lpBuffer=0x26a81c8*, nNumberOfBytesToWrite=0x19d0, lpNumberOfBytesWritten=0x31e460, lpOverlapped=0x0 | out: lpBuffer=0x26a81c8*, lpNumberOfBytesWritten=0x31e460*=0x19d0, lpOverlapped=0x0) returned 1 [0072.761] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\IKQEEPZR\\BBBYfEH[1].jpg", nBufferLength=0x105, lpBuffer=0x31dfe4, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\IKQEEPZR\\BBBYfEH[1].jpg", lpFilePart=0x0) returned 0x7e [0072.761] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\IKQEEPZR\\BBBYfEH[1].jpg", nBufferLength=0x105, lpBuffer=0x31dfe4, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\IKQEEPZR\\BBBYfEH[1].jpg", lpFilePart=0x0) returned 0x7e [0072.761] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e444) returned 1 [0072.761] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\IKQEEPZR\\BBBYfEH[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\ikqeepzr\\bbbyfeh[1].jpg"), fInfoLevelId=0x0, lpFileInformation=0x31e4c0 | out: lpFileInformation=0x31e4c0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x52ec0b10, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x52ec0b10, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0xed0b0a0, ftLastWriteTime.dwHighDateTime=0x1d6eb7f, nFileSizeHigh=0x0, nFileSizeLow=0x19d0)) returned 1 [0072.761] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e440) returned 1 [0072.761] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\IKQEEPZR\\BBBYfEH[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\ikqeepzr\\bbbyfeh[1].jpg"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\IKQEEPZR\\BBBYfEH[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\ikqeepzr\\bbbyfeh[1].jpg")) returned 1 [0072.762] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\IKQEEPZR\\BBBZ20W[1].jpg", nBufferLength=0x105, lpBuffer=0x31dec4, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\IKQEEPZR\\BBBZ20W[1].jpg", lpFilePart=0x0) returned 0x7e [0072.762] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e3b8) returned 1 [0072.762] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\IKQEEPZR\\BBBZ20W[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\ikqeepzr\\bbbz20w[1].jpg"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x264 [0072.763] GetFileType (hFile=0x264) returned 0x1 [0072.763] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e3b4) returned 1 [0072.763] GetFileType (hFile=0x264) returned 0x1 [0072.763] GetFileSize (in: hFile=0x264, lpFileSizeHigh=0x31e4c0 | out: lpFileSizeHigh=0x31e4c0*=0x0) returned 0x2ca1 [0072.763] ReadFile (in: hFile=0x264, lpBuffer=0x26aa0fc, nNumberOfBytesToRead=0x2ca1, lpNumberOfBytesRead=0x31e46c, lpOverlapped=0x0 | out: lpBuffer=0x26aa0fc*, lpNumberOfBytesRead=0x31e46c*=0x2ca1, lpOverlapped=0x0) returned 1 [0072.777] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\IKQEEPZR\\BBBZ20W[1].jpg", nBufferLength=0x105, lpBuffer=0x31deb0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\IKQEEPZR\\BBBZ20W[1].jpg", lpFilePart=0x0) returned 0x7e [0072.777] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e3a4) returned 1 [0072.778] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\IKQEEPZR\\BBBZ20W[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\ikqeepzr\\bbbz20w[1].jpg"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x264 [0072.778] GetFileType (hFile=0x264) returned 0x1 [0072.778] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e3a0) returned 1 [0072.778] GetFileType (hFile=0x264) returned 0x1 [0072.778] WriteFile (in: hFile=0x264, lpBuffer=0x2704fb0*, nNumberOfBytesToWrite=0x2cb0, lpNumberOfBytesWritten=0x31e460, lpOverlapped=0x0 | out: lpBuffer=0x2704fb0*, lpNumberOfBytesWritten=0x31e460*=0x2cb0, lpOverlapped=0x0) returned 1 [0072.779] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\IKQEEPZR\\BBBZ20W[1].jpg", nBufferLength=0x105, lpBuffer=0x31dfe4, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\IKQEEPZR\\BBBZ20W[1].jpg", lpFilePart=0x0) returned 0x7e [0072.779] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\IKQEEPZR\\BBBZ20W[1].jpg", nBufferLength=0x105, lpBuffer=0x31dfe4, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\IKQEEPZR\\BBBZ20W[1].jpg", lpFilePart=0x0) returned 0x7e [0072.780] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e444) returned 1 [0072.780] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\IKQEEPZR\\BBBZ20W[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\ikqeepzr\\bbbz20w[1].jpg"), fInfoLevelId=0x0, lpFileInformation=0x31e4c0 | out: lpFileInformation=0x31e4c0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x5b2bd440, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x5b2bd440, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0xed31200, ftLastWriteTime.dwHighDateTime=0x1d6eb7f, nFileSizeHigh=0x0, nFileSizeLow=0x2cb0)) returned 1 [0072.780] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e440) returned 1 [0072.780] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\IKQEEPZR\\BBBZ20W[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\ikqeepzr\\bbbz20w[1].jpg"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\IKQEEPZR\\BBBZ20W[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\ikqeepzr\\bbbz20w[1].jpg")) returned 1 [0072.780] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\IKQEEPZR\\BBBzaxY[1].jpg", nBufferLength=0x105, lpBuffer=0x31dec4, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\IKQEEPZR\\BBBzaxY[1].jpg", lpFilePart=0x0) returned 0x7e [0072.780] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e3b8) returned 1 [0072.780] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\IKQEEPZR\\BBBzaxY[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\ikqeepzr\\bbbzaxy[1].jpg"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x264 [0072.780] GetFileType (hFile=0x264) returned 0x1 [0072.780] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e3b4) returned 1 [0072.780] GetFileType (hFile=0x264) returned 0x1 [0072.780] GetFileSize (in: hFile=0x264, lpFileSizeHigh=0x31e4c0 | out: lpFileSizeHigh=0x31e4c0*=0x0) returned 0x1f37 [0072.780] ReadFile (in: hFile=0x264, lpBuffer=0x27081c4, nNumberOfBytesToRead=0x1f37, lpNumberOfBytesRead=0x31e46c, lpOverlapped=0x0 | out: lpBuffer=0x27081c4*, lpNumberOfBytesRead=0x31e46c*=0x1f37, lpOverlapped=0x0) returned 1 [0072.798] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\IKQEEPZR\\BBBzaxY[1].jpg", nBufferLength=0x105, lpBuffer=0x31deb0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\IKQEEPZR\\BBBzaxY[1].jpg", lpFilePart=0x0) returned 0x7e [0072.798] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e3a4) returned 1 [0072.798] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\IKQEEPZR\\BBBzaxY[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\ikqeepzr\\bbbzaxy[1].jpg"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x264 [0072.799] GetFileType (hFile=0x264) returned 0x1 [0072.799] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e3a0) returned 1 [0072.799] GetFileType (hFile=0x264) returned 0x1 [0072.799] WriteFile (in: hFile=0x264, lpBuffer=0x275ebec*, nNumberOfBytesToWrite=0x1f40, lpNumberOfBytesWritten=0x31e460, lpOverlapped=0x0 | out: lpBuffer=0x275ebec*, lpNumberOfBytesWritten=0x31e460*=0x1f40, lpOverlapped=0x0) returned 1 [0072.800] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\IKQEEPZR\\BBBzaxY[1].jpg", nBufferLength=0x105, lpBuffer=0x31dfe4, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\IKQEEPZR\\BBBzaxY[1].jpg", lpFilePart=0x0) returned 0x7e [0072.800] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\IKQEEPZR\\BBBzaxY[1].jpg", nBufferLength=0x105, lpBuffer=0x31dfe4, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\IKQEEPZR\\BBBzaxY[1].jpg", lpFilePart=0x0) returned 0x7e [0072.800] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e444) returned 1 [0072.800] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\IKQEEPZR\\BBBzaxY[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\ikqeepzr\\bbbzaxy[1].jpg"), fInfoLevelId=0x0, lpFileInformation=0x31e4c0 | out: lpFileInformation=0x31e4c0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x53950cb0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x53950cb0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0xed57360, ftLastWriteTime.dwHighDateTime=0x1d6eb7f, nFileSizeHigh=0x0, nFileSizeLow=0x1f40)) returned 1 [0072.800] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e440) returned 1 [0072.800] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\IKQEEPZR\\BBBzaxY[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\ikqeepzr\\bbbzaxy[1].jpg"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\IKQEEPZR\\BBBzaxY[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\ikqeepzr\\bbbzaxy[1].jpg")) returned 1 [0072.801] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\IKQEEPZR\\BBBZzuz[1].jpg", nBufferLength=0x105, lpBuffer=0x31dec4, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\IKQEEPZR\\BBBZzuz[1].jpg", lpFilePart=0x0) returned 0x7e [0072.801] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e3b8) returned 1 [0072.801] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\IKQEEPZR\\BBBZzuz[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\ikqeepzr\\bbbzzuz[1].jpg"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x264 [0072.801] GetFileType (hFile=0x264) returned 0x1 [0072.801] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e3b4) returned 1 [0072.801] GetFileType (hFile=0x264) returned 0x1 [0072.801] GetFileSize (in: hFile=0x264, lpFileSizeHigh=0x31e4c0 | out: lpFileSizeHigh=0x31e4c0*=0x0) returned 0x2131 [0072.801] ReadFile (in: hFile=0x264, lpBuffer=0x2761090, nNumberOfBytesToRead=0x2131, lpNumberOfBytesRead=0x31e46c, lpOverlapped=0x0 | out: lpBuffer=0x2761090*, lpNumberOfBytesRead=0x31e46c*=0x2131, lpOverlapped=0x0) returned 1 [0072.816] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\IKQEEPZR\\BBBZzuz[1].jpg", nBufferLength=0x105, lpBuffer=0x31deb0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\IKQEEPZR\\BBBZzuz[1].jpg", lpFilePart=0x0) returned 0x7e [0072.816] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e3a4) returned 1 [0072.816] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\IKQEEPZR\\BBBZzuz[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\ikqeepzr\\bbbzzuz[1].jpg"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x264 [0072.817] GetFileType (hFile=0x264) returned 0x1 [0072.817] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e3a0) returned 1 [0072.817] GetFileType (hFile=0x264) returned 0x1 [0072.817] WriteFile (in: hFile=0x264, lpBuffer=0x27b84b8*, nNumberOfBytesToWrite=0x2140, lpNumberOfBytesWritten=0x31e460, lpOverlapped=0x0 | out: lpBuffer=0x27b84b8*, lpNumberOfBytesWritten=0x31e460*=0x2140, lpOverlapped=0x0) returned 1 [0072.818] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\IKQEEPZR\\BBBZzuz[1].jpg", nBufferLength=0x105, lpBuffer=0x31dfe4, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\IKQEEPZR\\BBBZzuz[1].jpg", lpFilePart=0x0) returned 0x7e [0072.818] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\IKQEEPZR\\BBBZzuz[1].jpg", nBufferLength=0x105, lpBuffer=0x31dfe4, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\IKQEEPZR\\BBBZzuz[1].jpg", lpFilePart=0x0) returned 0x7e [0072.818] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e444) returned 1 [0072.818] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\IKQEEPZR\\BBBZzuz[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\ikqeepzr\\bbbzzuz[1].jpg"), fInfoLevelId=0x0, lpFileInformation=0x31e4c0 | out: lpFileInformation=0x31e4c0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x53063a30, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x53063a30, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0xed7d4c0, ftLastWriteTime.dwHighDateTime=0x1d6eb7f, nFileSizeHigh=0x0, nFileSizeLow=0x2140)) returned 1 [0072.818] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e440) returned 1 [0072.818] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\IKQEEPZR\\BBBZzuz[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\ikqeepzr\\bbbzzuz[1].jpg"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\IKQEEPZR\\BBBZzuz[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\ikqeepzr\\bbbzzuz[1].jpg")) returned 1 [0072.818] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\IKQEEPZR\\BBC03B1[1].jpg", nBufferLength=0x105, lpBuffer=0x31dec4, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\IKQEEPZR\\BBC03B1[1].jpg", lpFilePart=0x0) returned 0x7e [0072.818] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e3b8) returned 1 [0072.818] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\IKQEEPZR\\BBC03B1[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\ikqeepzr\\bbc03b1[1].jpg"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x264 [0072.819] GetFileType (hFile=0x264) returned 0x1 [0072.819] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e3b4) returned 1 [0072.819] GetFileType (hFile=0x264) returned 0x1 [0072.819] GetFileSize (in: hFile=0x264, lpFileSizeHigh=0x31e4c0 | out: lpFileSizeHigh=0x31e4c0*=0x0) returned 0x370a [0072.819] ReadFile (in: hFile=0x264, lpBuffer=0x27bab5c, nNumberOfBytesToRead=0x370a, lpNumberOfBytesRead=0x31e46c, lpOverlapped=0x0 | out: lpBuffer=0x27bab5c*, lpNumberOfBytesRead=0x31e46c*=0x370a, lpOverlapped=0x0) returned 1 [0072.833] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\IKQEEPZR\\BBC03B1[1].jpg", nBufferLength=0x105, lpBuffer=0x31deb0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\IKQEEPZR\\BBC03B1[1].jpg", lpFilePart=0x0) returned 0x7e [0072.834] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e3a4) returned 1 [0072.834] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\IKQEEPZR\\BBC03B1[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\ikqeepzr\\bbc03b1[1].jpg"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x264 [0072.834] GetFileType (hFile=0x264) returned 0x1 [0072.835] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e3a0) returned 1 [0072.835] GetFileType (hFile=0x264) returned 0x1 [0072.835] WriteFile (in: hFile=0x264, lpBuffer=0x2818c94*, nNumberOfBytesToWrite=0x3710, lpNumberOfBytesWritten=0x31e460, lpOverlapped=0x0 | out: lpBuffer=0x2818c94*, lpNumberOfBytesWritten=0x31e460*=0x3710, lpOverlapped=0x0) returned 1 [0072.836] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\IKQEEPZR\\BBC03B1[1].jpg", nBufferLength=0x105, lpBuffer=0x31dfe4, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\IKQEEPZR\\BBC03B1[1].jpg", lpFilePart=0x0) returned 0x7e [0072.836] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\IKQEEPZR\\BBC03B1[1].jpg", nBufferLength=0x105, lpBuffer=0x31dfe4, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\IKQEEPZR\\BBC03B1[1].jpg", lpFilePart=0x0) returned 0x7e [0072.836] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e444) returned 1 [0072.836] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\IKQEEPZR\\BBC03B1[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\ikqeepzr\\bbc03b1[1].jpg"), fInfoLevelId=0x0, lpFileInformation=0x31e4c0 | out: lpFileInformation=0x31e4c0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x5530da90, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x5530da90, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0xeda3620, ftLastWriteTime.dwHighDateTime=0x1d6eb7f, nFileSizeHigh=0x0, nFileSizeLow=0x3710)) returned 1 [0072.836] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e440) returned 1 [0072.836] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\IKQEEPZR\\BBC03B1[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\ikqeepzr\\bbc03b1[1].jpg"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\IKQEEPZR\\BBC03B1[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\ikqeepzr\\bbc03b1[1].jpg")) returned 1 [0072.836] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\IKQEEPZR\\BBC04o2[1].jpg", nBufferLength=0x105, lpBuffer=0x31dec4, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\IKQEEPZR\\BBC04o2[1].jpg", lpFilePart=0x0) returned 0x7e [0072.836] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e3b8) returned 1 [0072.836] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\IKQEEPZR\\BBC04o2[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\ikqeepzr\\bbc04o2[1].jpg"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x264 [0072.837] GetFileType (hFile=0x264) returned 0x1 [0072.837] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e3b4) returned 1 [0072.837] GetFileType (hFile=0x264) returned 0x1 [0072.837] GetFileSize (in: hFile=0x264, lpFileSizeHigh=0x31e4c0 | out: lpFileSizeHigh=0x31e4c0*=0x0) returned 0x22a0 [0072.837] ReadFile (in: hFile=0x264, lpBuffer=0x281c908, nNumberOfBytesToRead=0x22a0, lpNumberOfBytesRead=0x31e46c, lpOverlapped=0x0 | out: lpBuffer=0x281c908*, lpNumberOfBytesRead=0x31e46c*=0x22a0, lpOverlapped=0x0) returned 1 [0072.855] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\IKQEEPZR\\BBC04o2[1].jpg", nBufferLength=0x105, lpBuffer=0x31deb0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\IKQEEPZR\\BBC04o2[1].jpg", lpFilePart=0x0) returned 0x7e [0072.855] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e3a4) returned 1 [0072.855] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\IKQEEPZR\\BBC04o2[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\ikqeepzr\\bbc04o2[1].jpg"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x264 [0072.856] GetFileType (hFile=0x264) returned 0x1 [0072.856] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e3a0) returned 1 [0072.856] GetFileType (hFile=0x264) returned 0x1 [0072.856] WriteFile (in: hFile=0x264, lpBuffer=0x2674d2c*, nNumberOfBytesToWrite=0x22b0, lpNumberOfBytesWritten=0x31e460, lpOverlapped=0x0 | out: lpBuffer=0x2674d2c*, lpNumberOfBytesWritten=0x31e460*=0x22b0, lpOverlapped=0x0) returned 1 [0072.857] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\IKQEEPZR\\BBC04o2[1].jpg", nBufferLength=0x105, lpBuffer=0x31dfe4, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\IKQEEPZR\\BBC04o2[1].jpg", lpFilePart=0x0) returned 0x7e [0072.857] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\IKQEEPZR\\BBC04o2[1].jpg", nBufferLength=0x105, lpBuffer=0x31dfe4, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\IKQEEPZR\\BBC04o2[1].jpg", lpFilePart=0x0) returned 0x7e [0072.857] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e444) returned 1 [0072.858] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\IKQEEPZR\\BBC04o2[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\ikqeepzr\\bbc04o2[1].jpg"), fInfoLevelId=0x0, lpFileInformation=0x31e4c0 | out: lpFileInformation=0x31e4c0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x51256470, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x51256470, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0xedef8e0, ftLastWriteTime.dwHighDateTime=0x1d6eb7f, nFileSizeHigh=0x0, nFileSizeLow=0x22b0)) returned 1 [0072.858] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e440) returned 1 [0072.858] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\IKQEEPZR\\BBC04o2[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\ikqeepzr\\bbc04o2[1].jpg"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\IKQEEPZR\\BBC04o2[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\ikqeepzr\\bbc04o2[1].jpg")) returned 1 [0072.858] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\IKQEEPZR\\BBC06ZQ[1].jpg", nBufferLength=0x105, lpBuffer=0x31dec4, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\IKQEEPZR\\BBC06ZQ[1].jpg", lpFilePart=0x0) returned 0x7e [0072.858] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e3b8) returned 1 [0072.858] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\IKQEEPZR\\BBC06ZQ[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\ikqeepzr\\bbc06zq[1].jpg"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x264 [0072.858] GetFileType (hFile=0x264) returned 0x1 [0072.858] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e3b4) returned 1 [0072.858] GetFileType (hFile=0x264) returned 0x1 [0072.858] GetFileSize (in: hFile=0x264, lpFileSizeHigh=0x31e4c0 | out: lpFileSizeHigh=0x31e4c0*=0x0) returned 0x2036 [0072.858] ReadFile (in: hFile=0x264, lpBuffer=0x2677540, nNumberOfBytesToRead=0x2036, lpNumberOfBytesRead=0x31e46c, lpOverlapped=0x0 | out: lpBuffer=0x2677540*, lpNumberOfBytesRead=0x31e46c*=0x2036, lpOverlapped=0x0) returned 1 [0072.873] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\IKQEEPZR\\BBC06ZQ[1].jpg", nBufferLength=0x105, lpBuffer=0x31deb0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\IKQEEPZR\\BBC06ZQ[1].jpg", lpFilePart=0x0) returned 0x7e [0072.873] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e3a4) returned 1 [0072.873] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\IKQEEPZR\\BBC06ZQ[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\ikqeepzr\\bbc06zq[1].jpg"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x264 [0072.874] GetFileType (hFile=0x264) returned 0x1 [0072.874] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e3a0) returned 1 [0072.874] GetFileType (hFile=0x264) returned 0x1 [0072.874] WriteFile (in: hFile=0x264, lpBuffer=0x26ce5c4*, nNumberOfBytesToWrite=0x2040, lpNumberOfBytesWritten=0x31e460, lpOverlapped=0x0 | out: lpBuffer=0x26ce5c4*, lpNumberOfBytesWritten=0x31e460*=0x2040, lpOverlapped=0x0) returned 1 [0072.875] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\IKQEEPZR\\BBC06ZQ[1].jpg", nBufferLength=0x105, lpBuffer=0x31dfe4, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\IKQEEPZR\\BBC06ZQ[1].jpg", lpFilePart=0x0) returned 0x7e [0072.875] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\IKQEEPZR\\BBC06ZQ[1].jpg", nBufferLength=0x105, lpBuffer=0x31dfe4, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\IKQEEPZR\\BBC06ZQ[1].jpg", lpFilePart=0x0) returned 0x7e [0072.875] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e444) returned 1 [0072.875] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\IKQEEPZR\\BBC06ZQ[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\ikqeepzr\\bbc06zq[1].jpg"), fInfoLevelId=0x0, lpFileInformation=0x31e4c0 | out: lpFileInformation=0x31e4c0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x53657130, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x53657130, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0xee15a40, ftLastWriteTime.dwHighDateTime=0x1d6eb7f, nFileSizeHigh=0x0, nFileSizeLow=0x2040)) returned 1 [0072.875] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e440) returned 1 [0072.875] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\IKQEEPZR\\BBC06ZQ[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\ikqeepzr\\bbc06zq[1].jpg"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\IKQEEPZR\\BBC06ZQ[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\ikqeepzr\\bbc06zq[1].jpg")) returned 1 [0072.876] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\IKQEEPZR\\BBC0ALC[1].jpg", nBufferLength=0x105, lpBuffer=0x31dec4, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\IKQEEPZR\\BBC0ALC[1].jpg", lpFilePart=0x0) returned 0x7e [0072.876] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e3b8) returned 1 [0072.876] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\IKQEEPZR\\BBC0ALC[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\ikqeepzr\\bbc0alc[1].jpg"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x264 [0072.876] GetFileType (hFile=0x264) returned 0x1 [0072.876] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e3b4) returned 1 [0072.876] GetFileType (hFile=0x264) returned 0x1 [0072.876] GetFileSize (in: hFile=0x264, lpFileSizeHigh=0x31e4c0 | out: lpFileSizeHigh=0x31e4c0*=0x0) returned 0x13fd [0072.876] ReadFile (in: hFile=0x264, lpBuffer=0x26d0b68, nNumberOfBytesToRead=0x13fd, lpNumberOfBytesRead=0x31e46c, lpOverlapped=0x0 | out: lpBuffer=0x26d0b68*, lpNumberOfBytesRead=0x31e46c*=0x13fd, lpOverlapped=0x0) returned 1 [0072.944] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\IKQEEPZR\\BBC0ALC[1].jpg", nBufferLength=0x105, lpBuffer=0x31deb0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\IKQEEPZR\\BBC0ALC[1].jpg", lpFilePart=0x0) returned 0x7e [0072.944] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e3a4) returned 1 [0072.944] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\IKQEEPZR\\BBC0ALC[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\ikqeepzr\\bbc0alc[1].jpg"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x264 [0072.945] GetFileType (hFile=0x264) returned 0x1 [0072.945] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e3a0) returned 1 [0072.945] GetFileType (hFile=0x264) returned 0x1 [0072.945] WriteFile (in: hFile=0x264, lpBuffer=0x2723d50*, nNumberOfBytesToWrite=0x1400, lpNumberOfBytesWritten=0x31e460, lpOverlapped=0x0 | out: lpBuffer=0x2723d50*, lpNumberOfBytesWritten=0x31e460*=0x1400, lpOverlapped=0x0) returned 1 [0072.947] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\IKQEEPZR\\BBC0ALC[1].jpg", nBufferLength=0x105, lpBuffer=0x31dfe4, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\IKQEEPZR\\BBC0ALC[1].jpg", lpFilePart=0x0) returned 0x7e [0072.947] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\IKQEEPZR\\BBC0ALC[1].jpg", nBufferLength=0x105, lpBuffer=0x31dfe4, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\IKQEEPZR\\BBC0ALC[1].jpg", lpFilePart=0x0) returned 0x7e [0072.947] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e444) returned 1 [0072.947] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\IKQEEPZR\\BBC0ALC[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\ikqeepzr\\bbc0alc[1].jpg"), fInfoLevelId=0x0, lpFileInformation=0x31e4c0 | out: lpFileInformation=0x31e4c0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x5b2bd440, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x5b2bd440, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0xeed4120, ftLastWriteTime.dwHighDateTime=0x1d6eb7f, nFileSizeHigh=0x0, nFileSizeLow=0x1400)) returned 1 [0072.947] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e440) returned 1 [0072.947] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\IKQEEPZR\\BBC0ALC[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\ikqeepzr\\bbc0alc[1].jpg"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\IKQEEPZR\\BBC0ALC[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\ikqeepzr\\bbc0alc[1].jpg")) returned 1 [0072.947] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\IKQEEPZR\\BBC0BiZ[1].jpg", nBufferLength=0x105, lpBuffer=0x31dec4, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\IKQEEPZR\\BBC0BiZ[1].jpg", lpFilePart=0x0) returned 0x7e [0072.947] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e3b8) returned 1 [0072.947] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\IKQEEPZR\\BBC0BiZ[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\ikqeepzr\\bbc0biz[1].jpg"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x264 [0072.948] GetFileType (hFile=0x264) returned 0x1 [0072.948] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e3b4) returned 1 [0072.948] GetFileType (hFile=0x264) returned 0x1 [0072.948] GetFileSize (in: hFile=0x264, lpFileSizeHigh=0x31e4c0 | out: lpFileSizeHigh=0x31e4c0*=0x0) returned 0x884 [0072.948] ReadFile (in: hFile=0x264, lpBuffer=0x2725f44, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x31e46c, lpOverlapped=0x0 | out: lpBuffer=0x2725f44*, lpNumberOfBytesRead=0x31e46c*=0x884, lpOverlapped=0x0) returned 1 [0072.963] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\IKQEEPZR\\BBC0BiZ[1].jpg", nBufferLength=0x105, lpBuffer=0x31deb0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\IKQEEPZR\\BBC0BiZ[1].jpg", lpFilePart=0x0) returned 0x7e [0072.963] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e3a4) returned 1 [0072.963] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\IKQEEPZR\\BBC0BiZ[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\ikqeepzr\\bbc0biz[1].jpg"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x264 [0072.964] GetFileType (hFile=0x264) returned 0x1 [0072.964] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e3a0) returned 1 [0072.964] GetFileType (hFile=0x264) returned 0x1 [0072.964] WriteFile (in: hFile=0x264, lpBuffer=0x27769a4*, nNumberOfBytesToWrite=0x890, lpNumberOfBytesWritten=0x31e434, lpOverlapped=0x0 | out: lpBuffer=0x27769a4*, lpNumberOfBytesWritten=0x31e434*=0x890, lpOverlapped=0x0) returned 1 [0072.965] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\IKQEEPZR\\BBC0BiZ[1].jpg", nBufferLength=0x105, lpBuffer=0x31dfe4, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\IKQEEPZR\\BBC0BiZ[1].jpg", lpFilePart=0x0) returned 0x7e [0072.965] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\IKQEEPZR\\BBC0BiZ[1].jpg", nBufferLength=0x105, lpBuffer=0x31dfe4, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\IKQEEPZR\\BBC0BiZ[1].jpg", lpFilePart=0x0) returned 0x7e [0072.965] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e444) returned 1 [0072.965] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\IKQEEPZR\\BBC0BiZ[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\ikqeepzr\\bbc0biz[1].jpg"), fInfoLevelId=0x0, lpFileInformation=0x31e4c0 | out: lpFileInformation=0x31e4c0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x52e74850, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x52e74850, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0xeefa280, ftLastWriteTime.dwHighDateTime=0x1d6eb7f, nFileSizeHigh=0x0, nFileSizeLow=0x890)) returned 1 [0072.965] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e440) returned 1 [0072.965] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\IKQEEPZR\\BBC0BiZ[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\ikqeepzr\\bbc0biz[1].jpg"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\IKQEEPZR\\BBC0BiZ[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\ikqeepzr\\bbc0biz[1].jpg")) returned 1 [0072.965] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\IKQEEPZR\\BBC0FXU[1].jpg", nBufferLength=0x105, lpBuffer=0x31dec4, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\IKQEEPZR\\BBC0FXU[1].jpg", lpFilePart=0x0) returned 0x7e [0072.966] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e3b8) returned 1 [0072.966] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\IKQEEPZR\\BBC0FXU[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\ikqeepzr\\bbc0fxu[1].jpg"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x264 [0072.966] GetFileType (hFile=0x264) returned 0x1 [0072.966] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e3b4) returned 1 [0072.966] GetFileType (hFile=0x264) returned 0x1 [0072.966] GetFileSize (in: hFile=0x264, lpFileSizeHigh=0x31e4c0 | out: lpFileSizeHigh=0x31e4c0*=0x0) returned 0x34d8 [0072.966] ReadFile (in: hFile=0x264, lpBuffer=0x2777d74, nNumberOfBytesToRead=0x34d8, lpNumberOfBytesRead=0x31e46c, lpOverlapped=0x0 | out: lpBuffer=0x2777d74*, lpNumberOfBytesRead=0x31e46c*=0x34d8, lpOverlapped=0x0) returned 1 [0072.981] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\IKQEEPZR\\BBC0FXU[1].jpg", nBufferLength=0x105, lpBuffer=0x31deb0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\IKQEEPZR\\BBC0FXU[1].jpg", lpFilePart=0x0) returned 0x7e [0072.981] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e3a4) returned 1 [0072.981] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\IKQEEPZR\\BBC0FXU[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\ikqeepzr\\bbc0fxu[1].jpg"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x264 [0072.982] GetFileType (hFile=0x264) returned 0x1 [0072.982] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e3a0) returned 1 [0072.982] GetFileType (hFile=0x264) returned 0x1 [0072.982] WriteFile (in: hFile=0x264, lpBuffer=0x27d53b8*, nNumberOfBytesToWrite=0x34e0, lpNumberOfBytesWritten=0x31e460, lpOverlapped=0x0 | out: lpBuffer=0x27d53b8*, lpNumberOfBytesWritten=0x31e460*=0x34e0, lpOverlapped=0x0) returned 1 [0072.983] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\IKQEEPZR\\BBC0FXU[1].jpg", nBufferLength=0x105, lpBuffer=0x31dfe4, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\IKQEEPZR\\BBC0FXU[1].jpg", lpFilePart=0x0) returned 0x7e [0072.983] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\IKQEEPZR\\BBC0FXU[1].jpg", nBufferLength=0x105, lpBuffer=0x31dfe4, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\IKQEEPZR\\BBC0FXU[1].jpg", lpFilePart=0x0) returned 0x7e [0072.984] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e444) returned 1 [0072.984] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\IKQEEPZR\\BBC0FXU[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\ikqeepzr\\bbc0fxu[1].jpg"), fInfoLevelId=0x0, lpFileInformation=0x31e4c0 | out: lpFileInformation=0x31e4c0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x52f0cdd0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x52f0cdd0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0xef203e0, ftLastWriteTime.dwHighDateTime=0x1d6eb7f, nFileSizeHigh=0x0, nFileSizeLow=0x34e0)) returned 1 [0072.984] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e440) returned 1 [0072.984] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\IKQEEPZR\\BBC0FXU[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\ikqeepzr\\bbc0fxu[1].jpg"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\IKQEEPZR\\BBC0FXU[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\ikqeepzr\\bbc0fxu[1].jpg")) returned 1 [0072.984] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\IKQEEPZR\\BBC0FXU[2].jpg", nBufferLength=0x105, lpBuffer=0x31dec4, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\IKQEEPZR\\BBC0FXU[2].jpg", lpFilePart=0x0) returned 0x7e [0072.984] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e3b8) returned 1 [0072.984] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\IKQEEPZR\\BBC0FXU[2].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\ikqeepzr\\bbc0fxu[2].jpg"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x264 [0072.985] GetFileType (hFile=0x264) returned 0x1 [0072.985] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e3b4) returned 1 [0072.985] GetFileType (hFile=0x264) returned 0x1 [0072.985] GetFileSize (in: hFile=0x264, lpFileSizeHigh=0x31e4c0 | out: lpFileSizeHigh=0x31e4c0*=0x0) returned 0x2fd1 [0072.985] ReadFile (in: hFile=0x264, lpBuffer=0x27d8dfc, nNumberOfBytesToRead=0x2fd1, lpNumberOfBytesRead=0x31e46c, lpOverlapped=0x0 | out: lpBuffer=0x27d8dfc*, lpNumberOfBytesRead=0x31e46c*=0x2fd1, lpOverlapped=0x0) returned 1 [0073.000] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\IKQEEPZR\\BBC0FXU[2].jpg", nBufferLength=0x105, lpBuffer=0x31deb0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\IKQEEPZR\\BBC0FXU[2].jpg", lpFilePart=0x0) returned 0x7e [0073.000] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e3a4) returned 1 [0073.000] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\IKQEEPZR\\BBC0FXU[2].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\ikqeepzr\\bbc0fxu[2].jpg"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x264 [0073.001] GetFileType (hFile=0x264) returned 0x1 [0073.001] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e3a0) returned 1 [0073.001] GetFileType (hFile=0x264) returned 0x1 [0073.001] WriteFile (in: hFile=0x264, lpBuffer=0x2834b44*, nNumberOfBytesToWrite=0x2fe0, lpNumberOfBytesWritten=0x31e460, lpOverlapped=0x0 | out: lpBuffer=0x2834b44*, lpNumberOfBytesWritten=0x31e460*=0x2fe0, lpOverlapped=0x0) returned 1 [0073.002] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\IKQEEPZR\\BBC0FXU[2].jpg", nBufferLength=0x105, lpBuffer=0x31dfe4, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\IKQEEPZR\\BBC0FXU[2].jpg", lpFilePart=0x0) returned 0x7e [0073.002] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\IKQEEPZR\\BBC0FXU[2].jpg", nBufferLength=0x105, lpBuffer=0x31dfe4, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\IKQEEPZR\\BBC0FXU[2].jpg", lpFilePart=0x0) returned 0x7e [0073.002] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e444) returned 1 [0073.002] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\IKQEEPZR\\BBC0FXU[2].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\ikqeepzr\\bbc0fxu[2].jpg"), fInfoLevelId=0x0, lpFileInformation=0x31e4c0 | out: lpFileInformation=0x31e4c0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x61282d80, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x61282d80, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0xef46540, ftLastWriteTime.dwHighDateTime=0x1d6eb7f, nFileSizeHigh=0x0, nFileSizeLow=0x2fe0)) returned 1 [0073.002] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e440) returned 1 [0073.003] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\IKQEEPZR\\BBC0FXU[2].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\ikqeepzr\\bbc0fxu[2].jpg"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\IKQEEPZR\\BBC0FXU[2].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\ikqeepzr\\bbc0fxu[2].jpg")) returned 1 [0073.003] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\IKQEEPZR\\BBC0mkg[1].jpg", nBufferLength=0x105, lpBuffer=0x31dec4, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\IKQEEPZR\\BBC0mkg[1].jpg", lpFilePart=0x0) returned 0x7e [0073.003] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e3b8) returned 1 [0073.003] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\IKQEEPZR\\BBC0mkg[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\ikqeepzr\\bbc0mkg[1].jpg"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x264 [0073.003] GetFileType (hFile=0x264) returned 0x1 [0073.003] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e3b4) returned 1 [0073.003] GetFileType (hFile=0x264) returned 0x1 [0073.003] GetFileSize (in: hFile=0x264, lpFileSizeHigh=0x31e4c0 | out: lpFileSizeHigh=0x31e4c0*=0x0) returned 0x29c3 [0073.003] ReadFile (in: hFile=0x264, lpBuffer=0x2838088, nNumberOfBytesToRead=0x29c3, lpNumberOfBytesRead=0x31e46c, lpOverlapped=0x0 | out: lpBuffer=0x2838088*, lpNumberOfBytesRead=0x31e46c*=0x29c3, lpOverlapped=0x0) returned 1 [0073.021] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\IKQEEPZR\\BBC0mkg[1].jpg", nBufferLength=0x105, lpBuffer=0x31deb0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\IKQEEPZR\\BBC0mkg[1].jpg", lpFilePart=0x0) returned 0x7e [0073.021] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e3a4) returned 1 [0073.021] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\IKQEEPZR\\BBC0mkg[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\ikqeepzr\\bbc0mkg[1].jpg"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x264 [0073.022] GetFileType (hFile=0x264) returned 0x1 [0073.022] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e3a0) returned 1 [0073.022] GetFileType (hFile=0x264) returned 0x1 [0073.022] WriteFile (in: hFile=0x264, lpBuffer=0x2692678*, nNumberOfBytesToWrite=0x29d0, lpNumberOfBytesWritten=0x31e460, lpOverlapped=0x0 | out: lpBuffer=0x2692678*, lpNumberOfBytesWritten=0x31e460*=0x29d0, lpOverlapped=0x0) returned 1 [0073.023] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\IKQEEPZR\\BBC0mkg[1].jpg", nBufferLength=0x105, lpBuffer=0x31dfe4, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\IKQEEPZR\\BBC0mkg[1].jpg", lpFilePart=0x0) returned 0x7e [0073.024] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\IKQEEPZR\\BBC0mkg[1].jpg", nBufferLength=0x105, lpBuffer=0x31dfe4, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\IKQEEPZR\\BBC0mkg[1].jpg", lpFilePart=0x0) returned 0x7e [0073.024] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e444) returned 1 [0073.024] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\IKQEEPZR\\BBC0mkg[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\ikqeepzr\\bbc0mkg[1].jpg"), fInfoLevelId=0x0, lpFileInformation=0x31e4c0 | out: lpFileInformation=0x31e4c0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x52e28590, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x52e28590, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0xef6c6a0, ftLastWriteTime.dwHighDateTime=0x1d6eb7f, nFileSizeHigh=0x0, nFileSizeLow=0x29d0)) returned 1 [0073.024] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e440) returned 1 [0073.024] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\IKQEEPZR\\BBC0mkg[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\ikqeepzr\\bbc0mkg[1].jpg"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\IKQEEPZR\\BBC0mkg[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\ikqeepzr\\bbc0mkg[1].jpg")) returned 1 [0073.024] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\IKQEEPZR\\BBC0mkg[2].jpg", nBufferLength=0x105, lpBuffer=0x31dec4, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\IKQEEPZR\\BBC0mkg[2].jpg", lpFilePart=0x0) returned 0x7e [0073.024] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e3b8) returned 1 [0073.024] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\IKQEEPZR\\BBC0mkg[2].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\ikqeepzr\\bbc0mkg[2].jpg"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x264 [0073.025] GetFileType (hFile=0x264) returned 0x1 [0073.025] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e3b4) returned 1 [0073.025] GetFileType (hFile=0x264) returned 0x1 [0073.025] GetFileSize (in: hFile=0x264, lpFileSizeHigh=0x31e4c0 | out: lpFileSizeHigh=0x31e4c0*=0x0) returned 0xa7b [0073.025] ReadFile (in: hFile=0x264, lpBuffer=0x2696034, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x31e46c, lpOverlapped=0x0 | out: lpBuffer=0x2696034*, lpNumberOfBytesRead=0x31e46c*=0xa7b, lpOverlapped=0x0) returned 1 [0073.039] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\IKQEEPZR\\BBC0mkg[2].jpg", nBufferLength=0x105, lpBuffer=0x31deb0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\IKQEEPZR\\BBC0mkg[2].jpg", lpFilePart=0x0) returned 0x7e [0073.039] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e3a4) returned 1 [0073.039] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\IKQEEPZR\\BBC0mkg[2].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\ikqeepzr\\bbc0mkg[2].jpg"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x264 [0073.040] GetFileType (hFile=0x264) returned 0x1 [0073.040] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e3a0) returned 1 [0073.040] GetFileType (hFile=0x264) returned 0x1 [0073.040] WriteFile (in: hFile=0x264, lpBuffer=0x26e759c*, nNumberOfBytesToWrite=0xa80, lpNumberOfBytesWritten=0x31e434, lpOverlapped=0x0 | out: lpBuffer=0x26e759c*, lpNumberOfBytesWritten=0x31e434*=0xa80, lpOverlapped=0x0) returned 1 [0073.041] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\IKQEEPZR\\BBC0mkg[2].jpg", nBufferLength=0x105, lpBuffer=0x31dfe4, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\IKQEEPZR\\BBC0mkg[2].jpg", lpFilePart=0x0) returned 0x7e [0073.041] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\IKQEEPZR\\BBC0mkg[2].jpg", nBufferLength=0x105, lpBuffer=0x31dfe4, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\IKQEEPZR\\BBC0mkg[2].jpg", lpFilePart=0x0) returned 0x7e [0073.041] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e444) returned 1 [0073.041] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\IKQEEPZR\\BBC0mkg[2].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\ikqeepzr\\bbc0mkg[2].jpg"), fInfoLevelId=0x0, lpFileInformation=0x31e4c0 | out: lpFileInformation=0x31e4c0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x52e9a9b0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x52e9a9b0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0xefb8960, ftLastWriteTime.dwHighDateTime=0x1d6eb7f, nFileSizeHigh=0x0, nFileSizeLow=0xa80)) returned 1 [0073.042] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e440) returned 1 [0073.042] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\IKQEEPZR\\BBC0mkg[2].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\ikqeepzr\\bbc0mkg[2].jpg"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\IKQEEPZR\\BBC0mkg[2].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\ikqeepzr\\bbc0mkg[2].jpg")) returned 1 [0073.042] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\IKQEEPZR\\BBC0oQi[1].jpg", nBufferLength=0x105, lpBuffer=0x31dec4, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\IKQEEPZR\\BBC0oQi[1].jpg", lpFilePart=0x0) returned 0x7e [0073.042] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e3b8) returned 1 [0073.042] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\IKQEEPZR\\BBC0oQi[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\ikqeepzr\\bbc0oqi[1].jpg"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x264 [0073.042] GetFileType (hFile=0x264) returned 0x1 [0073.042] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e3b4) returned 1 [0073.042] GetFileType (hFile=0x264) returned 0x1 [0073.042] GetFileSize (in: hFile=0x264, lpFileSizeHigh=0x31e4c0 | out: lpFileSizeHigh=0x31e4c0*=0x0) returned 0x17af [0073.043] ReadFile (in: hFile=0x264, lpBuffer=0x26e896c, nNumberOfBytesToRead=0x17af, lpNumberOfBytesRead=0x31e46c, lpOverlapped=0x0 | out: lpBuffer=0x26e896c*, lpNumberOfBytesRead=0x31e46c*=0x17af, lpOverlapped=0x0) returned 1 [0073.058] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\IKQEEPZR\\BBC0oQi[1].jpg", nBufferLength=0x105, lpBuffer=0x31deb0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\IKQEEPZR\\BBC0oQi[1].jpg", lpFilePart=0x0) returned 0x7e [0073.058] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e3a4) returned 1 [0073.058] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\IKQEEPZR\\BBC0oQi[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\ikqeepzr\\bbc0oqi[1].jpg"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x264 [0073.059] GetFileType (hFile=0x264) returned 0x1 [0073.059] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e3a0) returned 1 [0073.059] GetFileType (hFile=0x264) returned 0x1 [0073.059] WriteFile (in: hFile=0x264, lpBuffer=0x273cdc4*, nNumberOfBytesToWrite=0x17b0, lpNumberOfBytesWritten=0x31e460, lpOverlapped=0x0 | out: lpBuffer=0x273cdc4*, lpNumberOfBytesWritten=0x31e460*=0x17b0, lpOverlapped=0x0) returned 1 [0073.060] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\IKQEEPZR\\BBC0oQi[1].jpg", nBufferLength=0x105, lpBuffer=0x31dfe4, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\IKQEEPZR\\BBC0oQi[1].jpg", lpFilePart=0x0) returned 0x7e [0073.060] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\IKQEEPZR\\BBC0oQi[1].jpg", nBufferLength=0x105, lpBuffer=0x31dfe4, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\IKQEEPZR\\BBC0oQi[1].jpg", lpFilePart=0x0) returned 0x7e [0073.060] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e444) returned 1 [0073.060] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\IKQEEPZR\\BBC0oQi[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\ikqeepzr\\bbc0oqi[1].jpg"), fInfoLevelId=0x0, lpFileInformation=0x31e4c0 | out: lpFileInformation=0x31e4c0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x5127c5d0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x5127c5d0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0xefdeac0, ftLastWriteTime.dwHighDateTime=0x1d6eb7f, nFileSizeHigh=0x0, nFileSizeLow=0x17b0)) returned 1 [0073.060] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e440) returned 1 [0073.060] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\IKQEEPZR\\BBC0oQi[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\ikqeepzr\\bbc0oqi[1].jpg"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\IKQEEPZR\\BBC0oQi[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\ikqeepzr\\bbc0oqi[1].jpg")) returned 1 [0073.061] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\IKQEEPZR\\BBC0tCi[1].jpg", nBufferLength=0x105, lpBuffer=0x31dec4, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\IKQEEPZR\\BBC0tCi[1].jpg", lpFilePart=0x0) returned 0x7e [0073.061] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e3b8) returned 1 [0073.061] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\IKQEEPZR\\BBC0tCi[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\ikqeepzr\\bbc0tci[1].jpg"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x264 [0073.061] GetFileType (hFile=0x264) returned 0x1 [0073.061] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e3b4) returned 1 [0073.061] GetFileType (hFile=0x264) returned 0x1 [0073.061] GetFileSize (in: hFile=0x264, lpFileSizeHigh=0x31e4c0 | out: lpFileSizeHigh=0x31e4c0*=0x0) returned 0xaf3 [0073.061] ReadFile (in: hFile=0x264, lpBuffer=0x273f5d8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x31e46c, lpOverlapped=0x0 | out: lpBuffer=0x273f5d8*, lpNumberOfBytesRead=0x31e46c*=0xaf3, lpOverlapped=0x0) returned 1 [0073.080] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\IKQEEPZR\\BBC0tCi[1].jpg", nBufferLength=0x105, lpBuffer=0x31deb0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\IKQEEPZR\\BBC0tCi[1].jpg", lpFilePart=0x0) returned 0x7e [0073.080] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e3a4) returned 1 [0073.080] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\IKQEEPZR\\BBC0tCi[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\ikqeepzr\\bbc0tci[1].jpg"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x264 [0073.081] GetFileType (hFile=0x264) returned 0x1 [0073.081] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e3a0) returned 1 [0073.081] GetFileType (hFile=0x264) returned 0x1 [0073.081] WriteFile (in: hFile=0x264, lpBuffer=0x2790c6c*, nNumberOfBytesToWrite=0xb00, lpNumberOfBytesWritten=0x31e434, lpOverlapped=0x0 | out: lpBuffer=0x2790c6c*, lpNumberOfBytesWritten=0x31e434*=0xb00, lpOverlapped=0x0) returned 1 [0073.082] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\IKQEEPZR\\BBC0tCi[1].jpg", nBufferLength=0x105, lpBuffer=0x31dfe4, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\IKQEEPZR\\BBC0tCi[1].jpg", lpFilePart=0x0) returned 0x7e [0073.082] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\IKQEEPZR\\BBC0tCi[1].jpg", nBufferLength=0x105, lpBuffer=0x31dfe4, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\IKQEEPZR\\BBC0tCi[1].jpg", lpFilePart=0x0) returned 0x7e [0073.082] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e444) returned 1 [0073.082] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\IKQEEPZR\\BBC0tCi[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\ikqeepzr\\bbc0tci[1].jpg"), fInfoLevelId=0x0, lpFileInformation=0x31e4c0 | out: lpFileInformation=0x31e4c0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x52fa5350, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x52fa5350, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0xf004c20, ftLastWriteTime.dwHighDateTime=0x1d6eb7f, nFileSizeHigh=0x0, nFileSizeLow=0xb00)) returned 1 [0073.082] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e440) returned 1 [0073.083] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\IKQEEPZR\\BBC0tCi[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\ikqeepzr\\bbc0tci[1].jpg"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\IKQEEPZR\\BBC0tCi[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\ikqeepzr\\bbc0tci[1].jpg")) returned 1 [0073.083] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\IKQEEPZR\\BBCM2U2[1].jpg", nBufferLength=0x105, lpBuffer=0x31dec4, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\IKQEEPZR\\BBCM2U2[1].jpg", lpFilePart=0x0) returned 0x7e [0073.083] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e3b8) returned 1 [0073.083] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\IKQEEPZR\\BBCM2U2[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\ikqeepzr\\bbcm2u2[1].jpg"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x264 [0073.083] GetFileType (hFile=0x264) returned 0x1 [0073.083] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e3b4) returned 1 [0073.083] GetFileType (hFile=0x264) returned 0x1 [0073.083] GetFileSize (in: hFile=0x264, lpFileSizeHigh=0x31e4c0 | out: lpFileSizeHigh=0x31e4c0*=0x0) returned 0x350a [0073.083] ReadFile (in: hFile=0x264, lpBuffer=0x279203c, nNumberOfBytesToRead=0x350a, lpNumberOfBytesRead=0x31e46c, lpOverlapped=0x0 | out: lpBuffer=0x279203c*, lpNumberOfBytesRead=0x31e46c*=0x350a, lpOverlapped=0x0) returned 1 [0073.099] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\IKQEEPZR\\BBCM2U2[1].jpg", nBufferLength=0x105, lpBuffer=0x31deb0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\IKQEEPZR\\BBCM2U2[1].jpg", lpFilePart=0x0) returned 0x7e [0073.099] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e3a4) returned 1 [0073.099] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\IKQEEPZR\\BBCM2U2[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\ikqeepzr\\bbcm2u2[1].jpg"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x264 [0073.100] GetFileType (hFile=0x264) returned 0x1 [0073.100] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e3a0) returned 1 [0073.100] GetFileType (hFile=0x264) returned 0x1 [0073.100] WriteFile (in: hFile=0x264, lpBuffer=0x27ef774*, nNumberOfBytesToWrite=0x3510, lpNumberOfBytesWritten=0x31e460, lpOverlapped=0x0 | out: lpBuffer=0x27ef774*, lpNumberOfBytesWritten=0x31e460*=0x3510, lpOverlapped=0x0) returned 1 [0073.101] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\IKQEEPZR\\BBCM2U2[1].jpg", nBufferLength=0x105, lpBuffer=0x31dfe4, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\IKQEEPZR\\BBCM2U2[1].jpg", lpFilePart=0x0) returned 0x7e [0073.101] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\IKQEEPZR\\BBCM2U2[1].jpg", nBufferLength=0x105, lpBuffer=0x31dfe4, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\IKQEEPZR\\BBCM2U2[1].jpg", lpFilePart=0x0) returned 0x7e [0073.101] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e444) returned 1 [0073.101] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\IKQEEPZR\\BBCM2U2[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\ikqeepzr\\bbcm2u2[1].jpg"), fInfoLevelId=0x0, lpFileInformation=0x31e4c0 | out: lpFileInformation=0x31e4c0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x459f9950, ftCreationTime.dwHighDateTime=0x1d2faf3, ftLastAccessTime.dwLowDateTime=0x459f9950, ftLastAccessTime.dwHighDateTime=0x1d2faf3, ftLastWriteTime.dwLowDateTime=0xf02ad80, ftLastWriteTime.dwHighDateTime=0x1d6eb7f, nFileSizeHigh=0x0, nFileSizeLow=0x3510)) returned 1 [0073.101] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e440) returned 1 [0073.101] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\IKQEEPZR\\BBCM2U2[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\ikqeepzr\\bbcm2u2[1].jpg"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\IKQEEPZR\\BBCM2U2[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\ikqeepzr\\bbcm2u2[1].jpg")) returned 1 [0073.102] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\IKQEEPZR\\BBDGTbx[1].jpg", nBufferLength=0x105, lpBuffer=0x31dec4, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\IKQEEPZR\\BBDGTbx[1].jpg", lpFilePart=0x0) returned 0x7e [0073.102] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e3b8) returned 1 [0073.102] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\IKQEEPZR\\BBDGTbx[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\ikqeepzr\\bbdgtbx[1].jpg"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x264 [0073.102] GetFileType (hFile=0x264) returned 0x1 [0073.102] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e3b4) returned 1 [0073.102] GetFileType (hFile=0x264) returned 0x1 [0073.102] GetFileSize (in: hFile=0x264, lpFileSizeHigh=0x31e4c0 | out: lpFileSizeHigh=0x31e4c0*=0x0) returned 0x68c [0073.102] ReadFile (in: hFile=0x264, lpBuffer=0x27f3880, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x31e46c, lpOverlapped=0x0 | out: lpBuffer=0x27f3880*, lpNumberOfBytesRead=0x31e46c*=0x68c, lpOverlapped=0x0) returned 1 [0073.117] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\IKQEEPZR\\BBDGTbx[1].jpg", nBufferLength=0x105, lpBuffer=0x31deb0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\IKQEEPZR\\BBDGTbx[1].jpg", lpFilePart=0x0) returned 0x7e [0073.117] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e3a4) returned 1 [0073.117] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\IKQEEPZR\\BBDGTbx[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\ikqeepzr\\bbdgtbx[1].jpg"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x264 [0073.118] GetFileType (hFile=0x264) returned 0x1 [0073.118] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e3a0) returned 1 [0073.118] GetFileType (hFile=0x264) returned 0x1 [0073.118] WriteFile (in: hFile=0x264, lpBuffer=0x28438d8*, nNumberOfBytesToWrite=0x690, lpNumberOfBytesWritten=0x31e434, lpOverlapped=0x0 | out: lpBuffer=0x28438d8*, lpNumberOfBytesWritten=0x31e434*=0x690, lpOverlapped=0x0) returned 1 [0073.119] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\IKQEEPZR\\BBDGTbx[1].jpg", nBufferLength=0x105, lpBuffer=0x31dfe4, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\IKQEEPZR\\BBDGTbx[1].jpg", lpFilePart=0x0) returned 0x7e [0073.119] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\IKQEEPZR\\BBDGTbx[1].jpg", nBufferLength=0x105, lpBuffer=0x31dfe4, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\IKQEEPZR\\BBDGTbx[1].jpg", lpFilePart=0x0) returned 0x7e [0073.119] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e444) returned 1 [0073.119] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\IKQEEPZR\\BBDGTbx[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\ikqeepzr\\bbdgtbx[1].jpg"), fInfoLevelId=0x0, lpFileInformation=0x31e4c0 | out: lpFileInformation=0x31e4c0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x4593b270, ftCreationTime.dwHighDateTime=0x1d2faf3, ftLastAccessTime.dwLowDateTime=0x4593b270, ftLastAccessTime.dwHighDateTime=0x1d2faf3, ftLastWriteTime.dwLowDateTime=0xf077040, ftLastWriteTime.dwHighDateTime=0x1d6eb7f, nFileSizeHigh=0x0, nFileSizeLow=0x690)) returned 1 [0073.119] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e440) returned 1 [0073.119] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\IKQEEPZR\\BBDGTbx[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\ikqeepzr\\bbdgtbx[1].jpg"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\IKQEEPZR\\BBDGTbx[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\ikqeepzr\\bbdgtbx[1].jpg")) returned 1 [0073.120] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\IKQEEPZR\\BBDk44m[1].png", nBufferLength=0x105, lpBuffer=0x31dec4, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\IKQEEPZR\\BBDk44m[1].png", lpFilePart=0x0) returned 0x7e [0073.120] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e3b8) returned 1 [0073.120] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\IKQEEPZR\\BBDk44m[1].png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\ikqeepzr\\bbdk44m[1].png"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x264 [0073.120] GetFileType (hFile=0x264) returned 0x1 [0073.120] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e3b4) returned 1 [0073.120] GetFileType (hFile=0x264) returned 0x1 [0073.120] GetFileSize (in: hFile=0x264, lpFileSizeHigh=0x31e4c0 | out: lpFileSizeHigh=0x31e4c0*=0x0) returned 0x284 [0073.120] ReadFile (in: hFile=0x264, lpBuffer=0x2844f38, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x31e46c, lpOverlapped=0x0 | out: lpBuffer=0x2844f38*, lpNumberOfBytesRead=0x31e46c*=0x284, lpOverlapped=0x0) returned 1 [0073.137] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\IKQEEPZR\\BBDk44m[1].png", nBufferLength=0x105, lpBuffer=0x31deb0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\IKQEEPZR\\BBDk44m[1].png", lpFilePart=0x0) returned 0x7e [0073.137] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e3a4) returned 1 [0073.138] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\IKQEEPZR\\BBDk44m[1].png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\ikqeepzr\\bbdk44m[1].png"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x264 [0073.138] GetFileType (hFile=0x264) returned 0x1 [0073.138] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e3a0) returned 1 [0073.138] GetFileType (hFile=0x264) returned 0x1 [0073.139] WriteFile (in: hFile=0x264, lpBuffer=0x2691454*, nNumberOfBytesToWrite=0x290, lpNumberOfBytesWritten=0x31e434, lpOverlapped=0x0 | out: lpBuffer=0x2691454*, lpNumberOfBytesWritten=0x31e434*=0x290, lpOverlapped=0x0) returned 1 [0073.139] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\IKQEEPZR\\BBDk44m[1].png", nBufferLength=0x105, lpBuffer=0x31dfe4, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\IKQEEPZR\\BBDk44m[1].png", lpFilePart=0x0) returned 0x7e [0073.139] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\IKQEEPZR\\BBDk44m[1].png", nBufferLength=0x105, lpBuffer=0x31dfe4, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\IKQEEPZR\\BBDk44m[1].png", lpFilePart=0x0) returned 0x7e [0073.139] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e444) returned 1 [0073.140] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\IKQEEPZR\\BBDk44m[1].png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\ikqeepzr\\bbdk44m[1].png"), fInfoLevelId=0x0, lpFileInformation=0x31e4c0 | out: lpFileInformation=0x31e4c0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xbe399c90, ftCreationTime.dwHighDateTime=0x1d2faf2, ftLastAccessTime.dwLowDateTime=0xbe399c90, ftLastAccessTime.dwHighDateTime=0x1d2faf2, ftLastWriteTime.dwLowDateTime=0xf09d1a0, ftLastWriteTime.dwHighDateTime=0x1d6eb7f, nFileSizeHigh=0x0, nFileSizeLow=0x290)) returned 1 [0073.140] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e440) returned 1 [0073.140] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\IKQEEPZR\\BBDk44m[1].png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\ikqeepzr\\bbdk44m[1].png"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\IKQEEPZR\\BBDk44m[1].png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\ikqeepzr\\bbdk44m[1].png")) returned 1 [0073.140] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\IKQEEPZR\\BBDWXoC[1].jpg", nBufferLength=0x105, lpBuffer=0x31dec4, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\IKQEEPZR\\BBDWXoC[1].jpg", lpFilePart=0x0) returned 0x7e [0073.140] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e3b8) returned 1 [0073.140] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\IKQEEPZR\\BBDWXoC[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\ikqeepzr\\bbdwxoc[1].jpg"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x264 [0073.140] GetFileType (hFile=0x264) returned 0x1 [0073.140] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e3b4) returned 1 [0073.140] GetFileType (hFile=0x264) returned 0x1 [0073.140] GetFileSize (in: hFile=0x264, lpFileSizeHigh=0x31e4c0 | out: lpFileSizeHigh=0x31e4c0*=0x0) returned 0x2d04 [0073.140] ReadFile (in: hFile=0x264, lpBuffer=0x2692824, nNumberOfBytesToRead=0x2d04, lpNumberOfBytesRead=0x31e46c, lpOverlapped=0x0 | out: lpBuffer=0x2692824*, lpNumberOfBytesRead=0x31e46c*=0x2d04, lpOverlapped=0x0) returned 1 [0073.156] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\IKQEEPZR\\BBDWXoC[1].jpg", nBufferLength=0x105, lpBuffer=0x31deb0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\IKQEEPZR\\BBDWXoC[1].jpg", lpFilePart=0x0) returned 0x7e [0073.156] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e3a4) returned 1 [0073.156] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\IKQEEPZR\\BBDWXoC[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\ikqeepzr\\bbdwxoc[1].jpg"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x264 [0073.157] GetFileType (hFile=0x264) returned 0x1 [0073.157] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e3a0) returned 1 [0073.157] GetFileType (hFile=0x264) returned 0x1 [0073.157] WriteFile (in: hFile=0x264, lpBuffer=0x26ed8b4*, nNumberOfBytesToWrite=0x2d10, lpNumberOfBytesWritten=0x31e460, lpOverlapped=0x0 | out: lpBuffer=0x26ed8b4*, lpNumberOfBytesWritten=0x31e460*=0x2d10, lpOverlapped=0x0) returned 1 [0073.158] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\IKQEEPZR\\BBDWXoC[1].jpg", nBufferLength=0x105, lpBuffer=0x31dfe4, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\IKQEEPZR\\BBDWXoC[1].jpg", lpFilePart=0x0) returned 0x7e [0073.158] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\IKQEEPZR\\BBDWXoC[1].jpg", nBufferLength=0x105, lpBuffer=0x31dfe4, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\IKQEEPZR\\BBDWXoC[1].jpg", lpFilePart=0x0) returned 0x7e [0073.158] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e444) returned 1 [0073.158] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\IKQEEPZR\\BBDWXoC[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\ikqeepzr\\bbdwxoc[1].jpg"), fInfoLevelId=0x0, lpFileInformation=0x31e4c0 | out: lpFileInformation=0x31e4c0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x45a6bd70, ftCreationTime.dwHighDateTime=0x1d2faf3, ftLastAccessTime.dwLowDateTime=0x45a6bd70, ftLastAccessTime.dwHighDateTime=0x1d2faf3, ftLastWriteTime.dwLowDateTime=0xf0c3300, ftLastWriteTime.dwHighDateTime=0x1d6eb7f, nFileSizeHigh=0x0, nFileSizeLow=0x2d10)) returned 1 [0073.158] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e440) returned 1 [0073.158] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\IKQEEPZR\\BBDWXoC[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\ikqeepzr\\bbdwxoc[1].jpg"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\IKQEEPZR\\BBDWXoC[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\ikqeepzr\\bbdwxoc[1].jpg")) returned 1 [0073.159] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\IKQEEPZR\\BBE3NcH[1].jpg", nBufferLength=0x105, lpBuffer=0x31dec4, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\IKQEEPZR\\BBE3NcH[1].jpg", lpFilePart=0x0) returned 0x7e [0073.159] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e3b8) returned 1 [0073.159] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\IKQEEPZR\\BBE3NcH[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\ikqeepzr\\bbe3nch[1].jpg"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x264 [0073.159] GetFileType (hFile=0x264) returned 0x1 [0073.159] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e3b4) returned 1 [0073.159] GetFileType (hFile=0x264) returned 0x1 [0073.159] GetFileSize (in: hFile=0x264, lpFileSizeHigh=0x31e4c0 | out: lpFileSizeHigh=0x31e4c0*=0x0) returned 0x863 [0073.159] ReadFile (in: hFile=0x264, lpBuffer=0x26f1398, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x31e46c, lpOverlapped=0x0 | out: lpBuffer=0x26f1398*, lpNumberOfBytesRead=0x31e46c*=0x863, lpOverlapped=0x0) returned 1 [0073.175] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\IKQEEPZR\\BBE3NcH[1].jpg", nBufferLength=0x105, lpBuffer=0x31deb0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\IKQEEPZR\\BBE3NcH[1].jpg", lpFilePart=0x0) returned 0x7e [0073.175] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e3a4) returned 1 [0073.175] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\IKQEEPZR\\BBE3NcH[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\ikqeepzr\\bbe3nch[1].jpg"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x264 [0073.176] GetFileType (hFile=0x264) returned 0x1 [0073.176] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e3a0) returned 1 [0073.176] GetFileType (hFile=0x264) returned 0x1 [0073.176] WriteFile (in: hFile=0x264, lpBuffer=0x2741d5c*, nNumberOfBytesToWrite=0x870, lpNumberOfBytesWritten=0x31e434, lpOverlapped=0x0 | out: lpBuffer=0x2741d5c*, lpNumberOfBytesWritten=0x31e434*=0x870, lpOverlapped=0x0) returned 1 [0073.177] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\IKQEEPZR\\BBE3NcH[1].jpg", nBufferLength=0x105, lpBuffer=0x31dfe4, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\IKQEEPZR\\BBE3NcH[1].jpg", lpFilePart=0x0) returned 0x7e [0073.177] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\IKQEEPZR\\BBE3NcH[1].jpg", nBufferLength=0x105, lpBuffer=0x31dfe4, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\IKQEEPZR\\BBE3NcH[1].jpg", lpFilePart=0x0) returned 0x7e [0073.177] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e444) returned 1 [0073.177] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\IKQEEPZR\\BBE3NcH[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\ikqeepzr\\bbe3nch[1].jpg"), fInfoLevelId=0x0, lpFileInformation=0x31e4c0 | out: lpFileInformation=0x31e4c0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x458c8e50, ftCreationTime.dwHighDateTime=0x1d2faf3, ftLastAccessTime.dwLowDateTime=0x458c8e50, ftLastAccessTime.dwHighDateTime=0x1d2faf3, ftLastWriteTime.dwLowDateTime=0xf0e9460, ftLastWriteTime.dwHighDateTime=0x1d6eb7f, nFileSizeHigh=0x0, nFileSizeLow=0x870)) returned 1 [0073.177] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e440) returned 1 [0073.178] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\IKQEEPZR\\BBE3NcH[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\ikqeepzr\\bbe3nch[1].jpg"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\IKQEEPZR\\BBE3NcH[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\ikqeepzr\\bbe3nch[1].jpg")) returned 1 [0073.178] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\IKQEEPZR\\BBE7GLE[1].png", nBufferLength=0x105, lpBuffer=0x31dec4, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\IKQEEPZR\\BBE7GLE[1].png", lpFilePart=0x0) returned 0x7e [0073.178] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e3b8) returned 1 [0073.178] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\IKQEEPZR\\BBE7GLE[1].png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\ikqeepzr\\bbe7gle[1].png"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x264 [0073.178] GetFileType (hFile=0x264) returned 0x1 [0073.178] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e3b4) returned 1 [0073.178] GetFileType (hFile=0x264) returned 0x1 [0073.178] GetFileSize (in: hFile=0x264, lpFileSizeHigh=0x31e4c0 | out: lpFileSizeHigh=0x31e4c0*=0x0) returned 0x2b5 [0073.178] ReadFile (in: hFile=0x264, lpBuffer=0x27433f0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x31e46c, lpOverlapped=0x0 | out: lpBuffer=0x27433f0*, lpNumberOfBytesRead=0x31e46c*=0x2b5, lpOverlapped=0x0) returned 1 [0073.193] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\IKQEEPZR\\BBE7GLE[1].png", nBufferLength=0x105, lpBuffer=0x31deb0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\IKQEEPZR\\BBE7GLE[1].png", lpFilePart=0x0) returned 0x7e [0073.193] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e3a4) returned 1 [0073.193] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\IKQEEPZR\\BBE7GLE[1].png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\ikqeepzr\\bbe7gle[1].png"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x264 [0073.194] GetFileType (hFile=0x264) returned 0x1 [0073.194] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e3a0) returned 1 [0073.194] GetFileType (hFile=0x264) returned 0x1 [0073.194] WriteFile (in: hFile=0x264, lpBuffer=0x2792140*, nNumberOfBytesToWrite=0x2c0, lpNumberOfBytesWritten=0x31e434, lpOverlapped=0x0 | out: lpBuffer=0x2792140*, lpNumberOfBytesWritten=0x31e434*=0x2c0, lpOverlapped=0x0) returned 1 [0073.195] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\IKQEEPZR\\BBE7GLE[1].png", nBufferLength=0x105, lpBuffer=0x31dfe4, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\IKQEEPZR\\BBE7GLE[1].png", lpFilePart=0x0) returned 0x7e [0073.195] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\IKQEEPZR\\BBE7GLE[1].png", nBufferLength=0x105, lpBuffer=0x31dfe4, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\IKQEEPZR\\BBE7GLE[1].png", lpFilePart=0x0) returned 0x7e [0073.195] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e444) returned 1 [0073.195] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\IKQEEPZR\\BBE7GLE[1].png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\ikqeepzr\\bbe7gle[1].png"), fInfoLevelId=0x0, lpFileInformation=0x31e4c0 | out: lpFileInformation=0x31e4c0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x459ad690, ftCreationTime.dwHighDateTime=0x1d2faf3, ftLastAccessTime.dwLowDateTime=0x459ad690, ftLastAccessTime.dwHighDateTime=0x1d2faf3, ftLastWriteTime.dwLowDateTime=0xf10f5c0, ftLastWriteTime.dwHighDateTime=0x1d6eb7f, nFileSizeHigh=0x0, nFileSizeLow=0x2c0)) returned 1 [0073.196] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e440) returned 1 [0073.196] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\IKQEEPZR\\BBE7GLE[1].png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\ikqeepzr\\bbe7gle[1].png"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\IKQEEPZR\\BBE7GLE[1].png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\ikqeepzr\\bbe7gle[1].png")) returned 1 [0073.196] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\IKQEEPZR\\BBE8aLO[1].jpg", nBufferLength=0x105, lpBuffer=0x31dec4, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\IKQEEPZR\\BBE8aLO[1].jpg", lpFilePart=0x0) returned 0x7e [0073.196] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e3b8) returned 1 [0073.196] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\IKQEEPZR\\BBE8aLO[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\ikqeepzr\\bbe8alo[1].jpg"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x264 [0073.196] GetFileType (hFile=0x264) returned 0x1 [0073.196] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e3b4) returned 1 [0073.196] GetFileType (hFile=0x264) returned 0x1 [0073.196] GetFileSize (in: hFile=0x264, lpFileSizeHigh=0x31e4c0 | out: lpFileSizeHigh=0x31e4c0*=0x0) returned 0x1c9b [0073.196] ReadFile (in: hFile=0x264, lpBuffer=0x2793510, nNumberOfBytesToRead=0x1c9b, lpNumberOfBytesRead=0x31e46c, lpOverlapped=0x0 | out: lpBuffer=0x2793510*, lpNumberOfBytesRead=0x31e46c*=0x1c9b, lpOverlapped=0x0) returned 1 [0073.212] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\IKQEEPZR\\BBE8aLO[1].jpg", nBufferLength=0x105, lpBuffer=0x31deb0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\IKQEEPZR\\BBE8aLO[1].jpg", lpFilePart=0x0) returned 0x7e [0073.212] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e3a4) returned 1 [0073.212] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\IKQEEPZR\\BBE8aLO[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\ikqeepzr\\bbe8alo[1].jpg"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x264 [0073.213] GetFileType (hFile=0x264) returned 0x1 [0073.213] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e3a0) returned 1 [0073.213] GetFileType (hFile=0x264) returned 0x1 [0073.213] WriteFile (in: hFile=0x264, lpBuffer=0x27e9218*, nNumberOfBytesToWrite=0x1ca0, lpNumberOfBytesWritten=0x31e460, lpOverlapped=0x0 | out: lpBuffer=0x27e9218*, lpNumberOfBytesWritten=0x31e460*=0x1ca0, lpOverlapped=0x0) returned 1 [0073.214] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\IKQEEPZR\\BBE8aLO[1].jpg", nBufferLength=0x105, lpBuffer=0x31dfe4, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\IKQEEPZR\\BBE8aLO[1].jpg", lpFilePart=0x0) returned 0x7e [0073.214] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\IKQEEPZR\\BBE8aLO[1].jpg", nBufferLength=0x105, lpBuffer=0x31dfe4, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\IKQEEPZR\\BBE8aLO[1].jpg", lpFilePart=0x0) returned 0x7e [0073.214] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e444) returned 1 [0073.214] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\IKQEEPZR\\BBE8aLO[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\ikqeepzr\\bbe8alo[1].jpg"), fInfoLevelId=0x0, lpFileInformation=0x31e4c0 | out: lpFileInformation=0x31e4c0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x45ade190, ftCreationTime.dwHighDateTime=0x1d2faf3, ftLastAccessTime.dwLowDateTime=0x45ade190, ftLastAccessTime.dwHighDateTime=0x1d2faf3, ftLastWriteTime.dwLowDateTime=0xf15b880, ftLastWriteTime.dwHighDateTime=0x1d6eb7f, nFileSizeHigh=0x0, nFileSizeLow=0x1ca0)) returned 1 [0073.214] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e440) returned 1 [0073.214] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\IKQEEPZR\\BBE8aLO[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\ikqeepzr\\bbe8alo[1].jpg"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\IKQEEPZR\\BBE8aLO[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\ikqeepzr\\bbe8alo[1].jpg")) returned 1 [0073.214] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\IKQEEPZR\\BBEd5bF[1].jpg", nBufferLength=0x105, lpBuffer=0x31dec4, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\IKQEEPZR\\BBEd5bF[1].jpg", lpFilePart=0x0) returned 0x7e [0073.214] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e3b8) returned 1 [0073.214] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\IKQEEPZR\\BBEd5bF[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\ikqeepzr\\bbed5bf[1].jpg"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x264 [0073.214] GetFileType (hFile=0x264) returned 0x1 [0073.215] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e3b4) returned 1 [0073.215] GetFileType (hFile=0x264) returned 0x1 [0073.215] GetFileSize (in: hFile=0x264, lpFileSizeHigh=0x31e4c0 | out: lpFileSizeHigh=0x31e4c0*=0x0) returned 0x702 [0073.215] ReadFile (in: hFile=0x264, lpBuffer=0x27ebb2c, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x31e46c, lpOverlapped=0x0 | out: lpBuffer=0x27ebb2c*, lpNumberOfBytesRead=0x31e46c*=0x702, lpOverlapped=0x0) returned 1 [0073.229] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\IKQEEPZR\\BBEd5bF[1].jpg", nBufferLength=0x105, lpBuffer=0x31deb0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\IKQEEPZR\\BBEd5bF[1].jpg", lpFilePart=0x0) returned 0x7e [0073.229] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e3a4) returned 1 [0073.229] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\IKQEEPZR\\BBEd5bF[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\ikqeepzr\\bbed5bf[1].jpg"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x264 [0073.230] GetFileType (hFile=0x264) returned 0x1 [0073.230] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e3a0) returned 1 [0073.230] GetFileType (hFile=0x264) returned 0x1 [0073.230] WriteFile (in: hFile=0x264, lpBuffer=0x283be10*, nNumberOfBytesToWrite=0x710, lpNumberOfBytesWritten=0x31e434, lpOverlapped=0x0 | out: lpBuffer=0x283be10*, lpNumberOfBytesWritten=0x31e434*=0x710, lpOverlapped=0x0) returned 1 [0073.231] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\IKQEEPZR\\BBEd5bF[1].jpg", nBufferLength=0x105, lpBuffer=0x31dfe4, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\IKQEEPZR\\BBEd5bF[1].jpg", lpFilePart=0x0) returned 0x7e [0073.231] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\IKQEEPZR\\BBEd5bF[1].jpg", nBufferLength=0x105, lpBuffer=0x31dfe4, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\IKQEEPZR\\BBEd5bF[1].jpg", lpFilePart=0x0) returned 0x7e [0073.231] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e444) returned 1 [0073.231] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\IKQEEPZR\\BBEd5bF[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\ikqeepzr\\bbed5bf[1].jpg"), fInfoLevelId=0x0, lpFileInformation=0x31e4c0 | out: lpFileInformation=0x31e4c0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x45a45c10, ftCreationTime.dwHighDateTime=0x1d2faf3, ftLastAccessTime.dwLowDateTime=0x45a45c10, ftLastAccessTime.dwHighDateTime=0x1d2faf3, ftLastWriteTime.dwLowDateTime=0xf1819e0, ftLastWriteTime.dwHighDateTime=0x1d6eb7f, nFileSizeHigh=0x0, nFileSizeLow=0x710)) returned 1 [0073.231] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\IKQEEPZR\\BBEd5bF[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\ikqeepzr\\bbed5bf[1].jpg"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\IKQEEPZR\\BBEd5bF[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\ikqeepzr\\bbed5bf[1].jpg")) returned 1 [0073.232] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\IKQEEPZR\\BBEdDNm[1].jpg", nBufferLength=0x105, lpBuffer=0x31dec4, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\IKQEEPZR\\BBEdDNm[1].jpg", lpFilePart=0x0) returned 0x7e [0073.232] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\IKQEEPZR\\BBEdDNm[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\ikqeepzr\\bbeddnm[1].jpg"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x264 [0073.233] GetFileType (hFile=0x264) returned 0x1 [0073.233] GetFileType (hFile=0x264) returned 0x1 [0073.233] GetFileSize (in: hFile=0x264, lpFileSizeHigh=0x31e4c0 | out: lpFileSizeHigh=0x31e4c0*=0x0) returned 0xaca8 [0073.233] ReadFile (in: hFile=0x264, lpBuffer=0x283d1e0, nNumberOfBytesToRead=0xaca8, lpNumberOfBytesRead=0x31e46c, lpOverlapped=0x0 | out: lpBuffer=0x283d1e0*, lpNumberOfBytesRead=0x31e46c*=0xaca8, lpOverlapped=0x0) returned 1 [0073.251] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\IKQEEPZR\\BBEdDNm[1].jpg", nBufferLength=0x105, lpBuffer=0x31deb0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\IKQEEPZR\\BBEdDNm[1].jpg", lpFilePart=0x0) returned 0x7e [0073.251] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\IKQEEPZR\\BBEdDNm[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\ikqeepzr\\bbeddnm[1].jpg"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x264 [0073.252] GetFileType (hFile=0x264) returned 0x1 [0073.252] GetFileType (hFile=0x264) returned 0x1 [0073.252] WriteFile (in: hFile=0x264, lpBuffer=0x26b5008*, nNumberOfBytesToWrite=0xacb0, lpNumberOfBytesWritten=0x31e460, lpOverlapped=0x0 | out: lpBuffer=0x26b5008*, lpNumberOfBytesWritten=0x31e460*=0xacb0, lpOverlapped=0x0) returned 1 [0073.253] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\IKQEEPZR\\BBEdDNm[1].jpg", nBufferLength=0x105, lpBuffer=0x31dfe4, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\IKQEEPZR\\BBEdDNm[1].jpg", lpFilePart=0x0) returned 0x7e [0073.253] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\IKQEEPZR\\BBEdDNm[1].jpg", nBufferLength=0x105, lpBuffer=0x31dfe4, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\IKQEEPZR\\BBEdDNm[1].jpg", lpFilePart=0x0) returned 0x7e [0073.254] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\IKQEEPZR\\BBEdDNm[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\ikqeepzr\\bbeddnm[1].jpg"), fInfoLevelId=0x0, lpFileInformation=0x31e4c0 | out: lpFileInformation=0x31e4c0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x50ebbff0, ftCreationTime.dwHighDateTime=0x1d2faf3, ftLastAccessTime.dwLowDateTime=0x50ebbff0, ftLastAccessTime.dwHighDateTime=0x1d2faf3, ftLastWriteTime.dwLowDateTime=0xf1a7b40, ftLastWriteTime.dwHighDateTime=0x1d6eb7f, nFileSizeHigh=0x0, nFileSizeLow=0xacb0)) returned 1 [0073.254] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\IKQEEPZR\\BBEdDNm[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\ikqeepzr\\bbeddnm[1].jpg"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\IKQEEPZR\\BBEdDNm[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\ikqeepzr\\bbeddnm[1].jpg")) returned 1 [0073.254] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\IKQEEPZR\\BBEdpyr[1].jpg", nBufferLength=0x105, lpBuffer=0x31dec4, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\IKQEEPZR\\BBEdpyr[1].jpg", lpFilePart=0x0) returned 0x7e [0073.254] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\IKQEEPZR\\BBEdpyr[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\ikqeepzr\\bbedpyr[1].jpg"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x264 [0073.254] GetFileType (hFile=0x264) returned 0x1 [0073.254] GetFileType (hFile=0x264) returned 0x1 [0073.254] GetFileSize (in: hFile=0x264, lpFileSizeHigh=0x31e4c0 | out: lpFileSizeHigh=0x31e4c0*=0x0) returned 0x755 [0073.254] ReadFile (in: hFile=0x264, lpBuffer=0x26c0980, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x31e46c, lpOverlapped=0x0 | out: lpBuffer=0x26c0980*, lpNumberOfBytesRead=0x31e46c*=0x755, lpOverlapped=0x0) returned 1 [0073.276] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\IKQEEPZR\\BBEdpyr[1].jpg", nBufferLength=0x105, lpBuffer=0x31deb0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\IKQEEPZR\\BBEdpyr[1].jpg", lpFilePart=0x0) returned 0x7e [0073.276] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\IKQEEPZR\\BBEdpyr[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\ikqeepzr\\bbedpyr[1].jpg"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x264 [0073.276] GetFileType (hFile=0x264) returned 0x1 [0073.277] GetFileType (hFile=0x264) returned 0x1 [0073.277] WriteFile (in: hFile=0x264, lpBuffer=0x2710f4c*, nNumberOfBytesToWrite=0x760, lpNumberOfBytesWritten=0x31e434, lpOverlapped=0x0 | out: lpBuffer=0x2710f4c*, lpNumberOfBytesWritten=0x31e434*=0x760, lpOverlapped=0x0) returned 1 [0073.277] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\IKQEEPZR\\BBEdpyr[1].jpg", nBufferLength=0x105, lpBuffer=0x31dfe4, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\IKQEEPZR\\BBEdpyr[1].jpg", lpFilePart=0x0) returned 0x7e [0073.277] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\IKQEEPZR\\BBEdpyr[1].jpg", nBufferLength=0x105, lpBuffer=0x31dfe4, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\IKQEEPZR\\BBEdpyr[1].jpg", lpFilePart=0x0) returned 0x7e [0073.278] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\IKQEEPZR\\BBEdpyr[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\ikqeepzr\\bbedpyr[1].jpg"), fInfoLevelId=0x0, lpFileInformation=0x31e4c0 | out: lpFileInformation=0x31e4c0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x458a2cf0, ftCreationTime.dwHighDateTime=0x1d2faf3, ftLastAccessTime.dwLowDateTime=0x458a2cf0, ftLastAccessTime.dwHighDateTime=0x1d2faf3, ftLastWriteTime.dwLowDateTime=0xf1f3e00, ftLastWriteTime.dwHighDateTime=0x1d6eb7f, nFileSizeHigh=0x0, nFileSizeLow=0x760)) returned 1 [0073.278] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\IKQEEPZR\\BBEdpyr[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\ikqeepzr\\bbedpyr[1].jpg"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\IKQEEPZR\\BBEdpyr[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\ikqeepzr\\bbedpyr[1].jpg")) returned 1 [0073.278] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\IKQEEPZR\\BBEdQdv[1].jpg", nBufferLength=0x105, lpBuffer=0x31dec4, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\IKQEEPZR\\BBEdQdv[1].jpg", lpFilePart=0x0) returned 0x7e [0073.278] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\IKQEEPZR\\BBEdQdv[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\ikqeepzr\\bbedqdv[1].jpg"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x264 [0073.278] GetFileType (hFile=0x264) returned 0x1 [0073.278] GetFileType (hFile=0x264) returned 0x1 [0073.278] GetFileSize (in: hFile=0x264, lpFileSizeHigh=0x31e4c0 | out: lpFileSizeHigh=0x31e4c0*=0x0) returned 0x1c72 [0073.278] ReadFile (in: hFile=0x264, lpBuffer=0x271231c, nNumberOfBytesToRead=0x1c72, lpNumberOfBytesRead=0x31e46c, lpOverlapped=0x0 | out: lpBuffer=0x271231c*, lpNumberOfBytesRead=0x31e46c*=0x1c72, lpOverlapped=0x0) returned 1 [0073.293] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\IKQEEPZR\\BBEdQdv[1].jpg", nBufferLength=0x105, lpBuffer=0x31deb0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\IKQEEPZR\\BBEdQdv[1].jpg", lpFilePart=0x0) returned 0x7e [0073.293] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\IKQEEPZR\\BBEdQdv[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\ikqeepzr\\bbedqdv[1].jpg"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x264 [0073.293] GetFileType (hFile=0x264) returned 0x1 [0073.294] GetFileType (hFile=0x264) returned 0x1 [0073.294] WriteFile (in: hFile=0x264, lpBuffer=0x2767f84*, nNumberOfBytesToWrite=0x1c80, lpNumberOfBytesWritten=0x31e460, lpOverlapped=0x0 | out: lpBuffer=0x2767f84*, lpNumberOfBytesWritten=0x31e460*=0x1c80, lpOverlapped=0x0) returned 1 [0073.294] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\IKQEEPZR\\BBEdQdv[1].jpg", nBufferLength=0x105, lpBuffer=0x31dfe4, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\IKQEEPZR\\BBEdQdv[1].jpg", lpFilePart=0x0) returned 0x7e [0073.295] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\IKQEEPZR\\BBEdQdv[1].jpg", nBufferLength=0x105, lpBuffer=0x31dfe4, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\IKQEEPZR\\BBEdQdv[1].jpg", lpFilePart=0x0) returned 0x7e [0073.295] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\IKQEEPZR\\BBEdQdv[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\ikqeepzr\\bbedqdv[1].jpg"), fInfoLevelId=0x0, lpFileInformation=0x31e4c0 | out: lpFileInformation=0x31e4c0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x457e4610, ftCreationTime.dwHighDateTime=0x1d2faf3, ftLastAccessTime.dwLowDateTime=0x457e4610, ftLastAccessTime.dwHighDateTime=0x1d2faf3, ftLastWriteTime.dwLowDateTime=0xf219f60, ftLastWriteTime.dwHighDateTime=0x1d6eb7f, nFileSizeHigh=0x0, nFileSizeLow=0x1c80)) returned 1 [0073.295] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\IKQEEPZR\\BBEdQdv[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\ikqeepzr\\bbedqdv[1].jpg"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\IKQEEPZR\\BBEdQdv[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\ikqeepzr\\bbedqdv[1].jpg")) returned 1 [0073.295] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\IKQEEPZR\\BBEe62t[1].jpg", nBufferLength=0x105, lpBuffer=0x31dec4, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\IKQEEPZR\\BBEe62t[1].jpg", lpFilePart=0x0) returned 0x7e [0073.295] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\IKQEEPZR\\BBEe62t[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\ikqeepzr\\bbee62t[1].jpg"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x264 [0073.295] GetFileType (hFile=0x264) returned 0x1 [0073.295] GetFileType (hFile=0x264) returned 0x1 [0073.295] GetFileSize (in: hFile=0x264, lpFileSizeHigh=0x31e4c0 | out: lpFileSizeHigh=0x31e4c0*=0x0) returned 0xa23 [0073.295] ReadFile (in: hFile=0x264, lpBuffer=0x276ab98, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x31e46c, lpOverlapped=0x0 | out: lpBuffer=0x276ab98*, lpNumberOfBytesRead=0x31e46c*=0xa23, lpOverlapped=0x0) returned 1 [0073.310] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\IKQEEPZR\\BBEe62t[1].jpg", nBufferLength=0x105, lpBuffer=0x31deb0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\IKQEEPZR\\BBEe62t[1].jpg", lpFilePart=0x0) returned 0x7e [0073.310] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\IKQEEPZR\\BBEe62t[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\ikqeepzr\\bbee62t[1].jpg"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x264 [0073.310] GetFileType (hFile=0x264) returned 0x1 [0073.310] GetFileType (hFile=0x264) returned 0x1 [0073.311] WriteFile (in: hFile=0x264, lpBuffer=0x27bbe1c*, nNumberOfBytesToWrite=0xa30, lpNumberOfBytesWritten=0x31e434, lpOverlapped=0x0 | out: lpBuffer=0x27bbe1c*, lpNumberOfBytesWritten=0x31e434*=0xa30, lpOverlapped=0x0) returned 1 [0073.311] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\IKQEEPZR\\BBEe62t[1].jpg", nBufferLength=0x105, lpBuffer=0x31dfe4, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\IKQEEPZR\\BBEe62t[1].jpg", lpFilePart=0x0) returned 0x7e [0073.311] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\IKQEEPZR\\BBEe62t[1].jpg", nBufferLength=0x105, lpBuffer=0x31dfe4, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\IKQEEPZR\\BBEe62t[1].jpg", lpFilePart=0x0) returned 0x7e [0073.311] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\IKQEEPZR\\BBEe62t[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\ikqeepzr\\bbee62t[1].jpg"), fInfoLevelId=0x0, lpFileInformation=0x31e4c0 | out: lpFileInformation=0x31e4c0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xbe399c90, ftCreationTime.dwHighDateTime=0x1d2faf2, ftLastAccessTime.dwLowDateTime=0xbe399c90, ftLastAccessTime.dwHighDateTime=0x1d2faf2, ftLastWriteTime.dwLowDateTime=0xf2400c0, ftLastWriteTime.dwHighDateTime=0x1d6eb7f, nFileSizeHigh=0x0, nFileSizeLow=0xa30)) returned 1 [0073.312] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\IKQEEPZR\\BBEe62t[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\ikqeepzr\\bbee62t[1].jpg"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\IKQEEPZR\\BBEe62t[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\ikqeepzr\\bbee62t[1].jpg")) returned 1 [0073.312] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\IKQEEPZR\\BBEedPR[1].jpg", nBufferLength=0x105, lpBuffer=0x31dec4, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\IKQEEPZR\\BBEedPR[1].jpg", lpFilePart=0x0) returned 0x7e [0073.312] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\IKQEEPZR\\BBEedPR[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\ikqeepzr\\bbeedpr[1].jpg"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x264 [0073.312] GetFileType (hFile=0x264) returned 0x1 [0073.312] GetFileType (hFile=0x264) returned 0x1 [0073.312] GetFileSize (in: hFile=0x264, lpFileSizeHigh=0x31e4c0 | out: lpFileSizeHigh=0x31e4c0*=0x0) returned 0x1ca7 [0073.312] ReadFile (in: hFile=0x264, lpBuffer=0x27bd1ec, nNumberOfBytesToRead=0x1ca7, lpNumberOfBytesRead=0x31e46c, lpOverlapped=0x0 | out: lpBuffer=0x27bd1ec*, lpNumberOfBytesRead=0x31e46c*=0x1ca7, lpOverlapped=0x0) returned 1 [0073.327] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\IKQEEPZR\\BBEedPR[1].jpg", nBufferLength=0x105, lpBuffer=0x31deb0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\IKQEEPZR\\BBEedPR[1].jpg", lpFilePart=0x0) returned 0x7e [0073.327] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\IKQEEPZR\\BBEedPR[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\ikqeepzr\\bbeedpr[1].jpg"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x264 [0073.328] GetFileType (hFile=0x264) returned 0x1 [0073.328] GetFileType (hFile=0x264) returned 0x1 [0073.328] WriteFile (in: hFile=0x264, lpBuffer=0x2812f44*, nNumberOfBytesToWrite=0x1cb0, lpNumberOfBytesWritten=0x31e460, lpOverlapped=0x0 | out: lpBuffer=0x2812f44*, lpNumberOfBytesWritten=0x31e460*=0x1cb0, lpOverlapped=0x0) returned 1 [0073.329] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\IKQEEPZR\\BBEedPR[1].jpg", nBufferLength=0x105, lpBuffer=0x31dfe4, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\IKQEEPZR\\BBEedPR[1].jpg", lpFilePart=0x0) returned 0x7e [0073.329] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\IKQEEPZR\\BBEedPR[1].jpg", nBufferLength=0x105, lpBuffer=0x31dfe4, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\IKQEEPZR\\BBEedPR[1].jpg", lpFilePart=0x0) returned 0x7e [0073.329] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\IKQEEPZR\\BBEedPR[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\ikqeepzr\\bbeedpr[1].jpg"), fInfoLevelId=0x0, lpFileInformation=0x31e4c0 | out: lpFileInformation=0x31e4c0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xbe4ca790, ftCreationTime.dwHighDateTime=0x1d2faf2, ftLastAccessTime.dwLowDateTime=0xbe4ca790, ftLastAccessTime.dwHighDateTime=0x1d2faf2, ftLastWriteTime.dwLowDateTime=0xf266220, ftLastWriteTime.dwHighDateTime=0x1d6eb7f, nFileSizeHigh=0x0, nFileSizeLow=0x1cb0)) returned 1 [0073.329] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\IKQEEPZR\\BBEedPR[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\ikqeepzr\\bbeedpr[1].jpg"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\IKQEEPZR\\BBEedPR[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\ikqeepzr\\bbeedpr[1].jpg")) returned 1 [0073.329] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\IKQEEPZR\\BBEeTpB[1].jpg", nBufferLength=0x105, lpBuffer=0x31dec4, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\IKQEEPZR\\BBEeTpB[1].jpg", lpFilePart=0x0) returned 0x7e [0073.329] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\IKQEEPZR\\BBEeTpB[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\ikqeepzr\\bbeetpb[1].jpg"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x264 [0073.329] GetFileType (hFile=0x264) returned 0x1 [0073.329] GetFileType (hFile=0x264) returned 0x1 [0073.329] GetFileSize (in: hFile=0x264, lpFileSizeHigh=0x31e4c0 | out: lpFileSizeHigh=0x31e4c0*=0x0) returned 0x9ef [0073.330] ReadFile (in: hFile=0x264, lpBuffer=0x2815b54, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x31e46c, lpOverlapped=0x0 | out: lpBuffer=0x2815b54*, lpNumberOfBytesRead=0x31e46c*=0x9ef, lpOverlapped=0x0) returned 1 [0073.346] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\IKQEEPZR\\BBEeTpB[1].jpg", nBufferLength=0x105, lpBuffer=0x31deb0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\IKQEEPZR\\BBEeTpB[1].jpg", lpFilePart=0x0) returned 0x7e [0073.346] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\IKQEEPZR\\BBEeTpB[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\ikqeepzr\\bbeetpb[1].jpg"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x264 [0073.347] GetFileType (hFile=0x264) returned 0x1 [0073.347] GetFileType (hFile=0x264) returned 0x1 [0073.347] WriteFile (in: hFile=0x264, lpBuffer=0x265ddb0*, nNumberOfBytesToWrite=0x9f0, lpNumberOfBytesWritten=0x31e434, lpOverlapped=0x0 | out: lpBuffer=0x265ddb0*, lpNumberOfBytesWritten=0x31e434*=0x9f0, lpOverlapped=0x0) returned 1 [0073.348] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\IKQEEPZR\\BBEeTpB[1].jpg", nBufferLength=0x105, lpBuffer=0x31dfe4, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\IKQEEPZR\\BBEeTpB[1].jpg", lpFilePart=0x0) returned 0x7e [0073.348] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\IKQEEPZR\\BBEeTpB[1].jpg", nBufferLength=0x105, lpBuffer=0x31dfe4, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\IKQEEPZR\\BBEeTpB[1].jpg", lpFilePart=0x0) returned 0x7e [0073.348] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\IKQEEPZR\\BBEeTpB[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\ikqeepzr\\bbeetpb[1].jpg"), fInfoLevelId=0x0, lpFileInformation=0x31e4c0 | out: lpFileInformation=0x31e4c0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xbe34d9d0, ftCreationTime.dwHighDateTime=0x1d2faf2, ftLastAccessTime.dwLowDateTime=0xbe34d9d0, ftLastAccessTime.dwHighDateTime=0x1d2faf2, ftLastWriteTime.dwLowDateTime=0xf28c380, ftLastWriteTime.dwHighDateTime=0x1d6eb7f, nFileSizeHigh=0x0, nFileSizeLow=0x9f0)) returned 1 [0073.348] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\IKQEEPZR\\BBEeTpB[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\ikqeepzr\\bbeetpb[1].jpg"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\IKQEEPZR\\BBEeTpB[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\ikqeepzr\\bbeetpb[1].jpg")) returned 1 [0073.348] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\IKQEEPZR\\BBEeTuf[1].jpg", nBufferLength=0x105, lpBuffer=0x31dec4, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\IKQEEPZR\\BBEeTuf[1].jpg", lpFilePart=0x0) returned 0x7e [0073.348] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\IKQEEPZR\\BBEeTuf[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\ikqeepzr\\bbeetuf[1].jpg"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x264 [0073.349] GetFileType (hFile=0x264) returned 0x1 [0073.349] GetFileType (hFile=0x264) returned 0x1 [0073.349] GetFileSize (in: hFile=0x264, lpFileSizeHigh=0x31e4c0 | out: lpFileSizeHigh=0x31e4c0*=0x0) returned 0x952 [0073.349] ReadFile (in: hFile=0x264, lpBuffer=0x265fae0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x31e46c, lpOverlapped=0x0 | out: lpBuffer=0x265fae0*, lpNumberOfBytesRead=0x31e46c*=0x952, lpOverlapped=0x0) returned 1 [0073.364] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\IKQEEPZR\\BBEeTuf[1].jpg", nBufferLength=0x105, lpBuffer=0x31deb0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\IKQEEPZR\\BBEeTuf[1].jpg", lpFilePart=0x0) returned 0x7e [0073.364] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\IKQEEPZR\\BBEeTuf[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\ikqeepzr\\bbeetuf[1].jpg"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x264 [0073.365] GetFileType (hFile=0x264) returned 0x1 [0073.365] GetFileType (hFile=0x264) returned 0x1 [0073.365] WriteFile (in: hFile=0x264, lpBuffer=0x26b0ab0*, nNumberOfBytesToWrite=0x960, lpNumberOfBytesWritten=0x31e434, lpOverlapped=0x0 | out: lpBuffer=0x26b0ab0*, lpNumberOfBytesWritten=0x31e434*=0x960, lpOverlapped=0x0) returned 1 [0073.366] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\IKQEEPZR\\BBEeTuf[1].jpg", nBufferLength=0x105, lpBuffer=0x31dfe4, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\IKQEEPZR\\BBEeTuf[1].jpg", lpFilePart=0x0) returned 0x7e [0073.366] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\IKQEEPZR\\BBEeTuf[1].jpg", nBufferLength=0x105, lpBuffer=0x31dfe4, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\IKQEEPZR\\BBEeTuf[1].jpg", lpFilePart=0x0) returned 0x7e [0073.366] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\IKQEEPZR\\BBEeTuf[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\ikqeepzr\\bbeetuf[1].jpg"), fInfoLevelId=0x0, lpFileInformation=0x31e4c0 | out: lpFileInformation=0x31e4c0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xbe4ca790, ftCreationTime.dwHighDateTime=0x1d2faf2, ftLastAccessTime.dwLowDateTime=0xbe4ca790, ftLastAccessTime.dwHighDateTime=0x1d2faf2, ftLastWriteTime.dwLowDateTime=0xf2b24e0, ftLastWriteTime.dwHighDateTime=0x1d6eb7f, nFileSizeHigh=0x0, nFileSizeLow=0x960)) returned 1 [0073.366] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\IKQEEPZR\\BBEeTuf[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\ikqeepzr\\bbeetuf[1].jpg"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\IKQEEPZR\\BBEeTuf[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\ikqeepzr\\bbeetuf[1].jpg")) returned 1 [0073.366] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\IKQEEPZR\\BBEeU5U[1].jpg", nBufferLength=0x105, lpBuffer=0x31dec4, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\IKQEEPZR\\BBEeU5U[1].jpg", lpFilePart=0x0) returned 0x7e [0073.366] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\IKQEEPZR\\BBEeU5U[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\ikqeepzr\\bbeeu5u[1].jpg"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x264 [0073.367] GetFileType (hFile=0x264) returned 0x1 [0073.367] GetFileType (hFile=0x264) returned 0x1 [0073.367] GetFileSize (in: hFile=0x264, lpFileSizeHigh=0x31e4c0 | out: lpFileSizeHigh=0x31e4c0*=0x0) returned 0x7a9 [0073.367] ReadFile (in: hFile=0x264, lpBuffer=0x26b2638, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x31e46c, lpOverlapped=0x0 | out: lpBuffer=0x26b2638*, lpNumberOfBytesRead=0x31e46c*=0x7a9, lpOverlapped=0x0) returned 1 [0073.381] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\IKQEEPZR\\BBEeU5U[1].jpg", nBufferLength=0x105, lpBuffer=0x31deb0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\IKQEEPZR\\BBEeU5U[1].jpg", lpFilePart=0x0) returned 0x7e [0073.381] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\IKQEEPZR\\BBEeU5U[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\ikqeepzr\\bbeeu5u[1].jpg"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x264 [0073.382] GetFileType (hFile=0x264) returned 0x1 [0073.382] GetFileType (hFile=0x264) returned 0x1 [0073.383] WriteFile (in: hFile=0x264, lpBuffer=0x2702c34*, nNumberOfBytesToWrite=0x7b0, lpNumberOfBytesWritten=0x31e434, lpOverlapped=0x0 | out: lpBuffer=0x2702c34*, lpNumberOfBytesWritten=0x31e434*=0x7b0, lpOverlapped=0x0) returned 1 [0073.383] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\IKQEEPZR\\BBEeU5U[1].jpg", nBufferLength=0x105, lpBuffer=0x31dfe4, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\IKQEEPZR\\BBEeU5U[1].jpg", lpFilePart=0x0) returned 0x7e [0073.383] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\IKQEEPZR\\BBEeU5U[1].jpg", nBufferLength=0x105, lpBuffer=0x31dfe4, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\IKQEEPZR\\BBEeU5U[1].jpg", lpFilePart=0x0) returned 0x7e [0073.384] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\IKQEEPZR\\BBEeU5U[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\ikqeepzr\\bbeeu5u[1].jpg"), fInfoLevelId=0x0, lpFileInformation=0x31e4c0 | out: lpFileInformation=0x31e4c0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x45b76710, ftCreationTime.dwHighDateTime=0x1d2faf3, ftLastAccessTime.dwLowDateTime=0x45b76710, ftLastAccessTime.dwHighDateTime=0x1d2faf3, ftLastWriteTime.dwLowDateTime=0xf2fe7a0, ftLastWriteTime.dwHighDateTime=0x1d6eb7f, nFileSizeHigh=0x0, nFileSizeLow=0x7b0)) returned 1 [0073.384] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\IKQEEPZR\\BBEeU5U[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\ikqeepzr\\bbeeu5u[1].jpg"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\IKQEEPZR\\BBEeU5U[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\ikqeepzr\\bbeeu5u[1].jpg")) returned 1 [0073.384] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\IKQEEPZR\\BBEf306[1].jpg", nBufferLength=0x105, lpBuffer=0x31dec4, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\IKQEEPZR\\BBEf306[1].jpg", lpFilePart=0x0) returned 0x7e [0073.384] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\IKQEEPZR\\BBEf306[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\ikqeepzr\\bbef306[1].jpg"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x264 [0073.384] GetFileType (hFile=0x264) returned 0x1 [0073.384] GetFileType (hFile=0x264) returned 0x1 [0073.384] GetFileSize (in: hFile=0x264, lpFileSizeHigh=0x31e4c0 | out: lpFileSizeHigh=0x31e4c0*=0x0) returned 0x86f [0073.384] ReadFile (in: hFile=0x264, lpBuffer=0x2704880, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x31e46c, lpOverlapped=0x0 | out: lpBuffer=0x2704880*, lpNumberOfBytesRead=0x31e46c*=0x86f, lpOverlapped=0x0) returned 1 [0073.399] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\IKQEEPZR\\BBEf306[1].jpg", nBufferLength=0x105, lpBuffer=0x31deb0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\IKQEEPZR\\BBEf306[1].jpg", lpFilePart=0x0) returned 0x7e [0073.399] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\IKQEEPZR\\BBEf306[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\ikqeepzr\\bbef306[1].jpg"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x264 [0073.399] GetFileType (hFile=0x264) returned 0x1 [0073.400] GetFileType (hFile=0x264) returned 0x1 [0073.400] WriteFile (in: hFile=0x264, lpBuffer=0x2755238*, nNumberOfBytesToWrite=0x870, lpNumberOfBytesWritten=0x31e434, lpOverlapped=0x0 | out: lpBuffer=0x2755238*, lpNumberOfBytesWritten=0x31e434*=0x870, lpOverlapped=0x0) returned 1 [0073.400] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\IKQEEPZR\\BBEf306[1].jpg", nBufferLength=0x105, lpBuffer=0x31dfe4, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\IKQEEPZR\\BBEf306[1].jpg", lpFilePart=0x0) returned 0x7e [0073.400] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\IKQEEPZR\\BBEf306[1].jpg", nBufferLength=0x105, lpBuffer=0x31dfe4, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\IKQEEPZR\\BBEf306[1].jpg", lpFilePart=0x0) returned 0x7e [0073.401] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\IKQEEPZR\\BBEf306[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\ikqeepzr\\bbef306[1].jpg"), fInfoLevelId=0x0, lpFileInformation=0x31e4c0 | out: lpFileInformation=0x31e4c0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x456d9c70, ftCreationTime.dwHighDateTime=0x1d2faf3, ftLastAccessTime.dwLowDateTime=0x456d9c70, ftLastAccessTime.dwHighDateTime=0x1d2faf3, ftLastWriteTime.dwLowDateTime=0xf324900, ftLastWriteTime.dwHighDateTime=0x1d6eb7f, nFileSizeHigh=0x0, nFileSizeLow=0x870)) returned 1 [0073.401] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\IKQEEPZR\\BBEf306[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\ikqeepzr\\bbef306[1].jpg"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\IKQEEPZR\\BBEf306[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\ikqeepzr\\bbef306[1].jpg")) returned 1 [0073.401] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\IKQEEPZR\\BBEf54R[1].jpg", nBufferLength=0x105, lpBuffer=0x31dec4, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\IKQEEPZR\\BBEf54R[1].jpg", lpFilePart=0x0) returned 0x7e [0073.401] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\IKQEEPZR\\BBEf54R[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\ikqeepzr\\bbef54r[1].jpg"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x264 [0073.401] GetFileType (hFile=0x264) returned 0x1 [0073.401] GetFileType (hFile=0x264) returned 0x1 [0073.401] GetFileSize (in: hFile=0x264, lpFileSizeHigh=0x31e4c0 | out: lpFileSizeHigh=0x31e4c0*=0x0) returned 0x828 [0073.401] ReadFile (in: hFile=0x264, lpBuffer=0x2756e3c, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x31e46c, lpOverlapped=0x0 | out: lpBuffer=0x2756e3c*, lpNumberOfBytesRead=0x31e46c*=0x828, lpOverlapped=0x0) returned 1 [0073.415] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\IKQEEPZR\\BBEf54R[1].jpg", nBufferLength=0x105, lpBuffer=0x31deb0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\IKQEEPZR\\BBEf54R[1].jpg", lpFilePart=0x0) returned 0x7e [0073.415] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\IKQEEPZR\\BBEf54R[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\ikqeepzr\\bbef54r[1].jpg"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x264 [0073.416] GetFileType (hFile=0x264) returned 0x1 [0073.416] GetFileType (hFile=0x264) returned 0x1 [0073.416] WriteFile (in: hFile=0x264, lpBuffer=0x27a76b8*, nNumberOfBytesToWrite=0x830, lpNumberOfBytesWritten=0x31e434, lpOverlapped=0x0 | out: lpBuffer=0x27a76b8*, lpNumberOfBytesWritten=0x31e434*=0x830, lpOverlapped=0x0) returned 1 [0073.417] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\IKQEEPZR\\BBEf54R[1].jpg", nBufferLength=0x105, lpBuffer=0x31dfe4, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\IKQEEPZR\\BBEf54R[1].jpg", lpFilePart=0x0) returned 0x7e [0073.417] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\IKQEEPZR\\BBEf54R[1].jpg", nBufferLength=0x105, lpBuffer=0x31dfe4, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\IKQEEPZR\\BBEf54R[1].jpg", lpFilePart=0x0) returned 0x7e [0073.417] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\IKQEEPZR\\BBEf54R[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\ikqeepzr\\bbef54r[1].jpg"), fInfoLevelId=0x0, lpFileInformation=0x31e4c0 | out: lpFileInformation=0x31e4c0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x459613d0, ftCreationTime.dwHighDateTime=0x1d2faf3, ftLastAccessTime.dwLowDateTime=0x459613d0, ftLastAccessTime.dwHighDateTime=0x1d2faf3, ftLastWriteTime.dwLowDateTime=0xf34aa60, ftLastWriteTime.dwHighDateTime=0x1d6eb7f, nFileSizeHigh=0x0, nFileSizeLow=0x830)) returned 1 [0073.417] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\IKQEEPZR\\BBEf54R[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\ikqeepzr\\bbef54r[1].jpg"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\IKQEEPZR\\BBEf54R[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\ikqeepzr\\bbef54r[1].jpg")) returned 1 [0073.418] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\IKQEEPZR\\BBEfBbH[1].jpg", nBufferLength=0x105, lpBuffer=0x31dec4, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\IKQEEPZR\\BBEfBbH[1].jpg", lpFilePart=0x0) returned 0x7e [0073.418] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\IKQEEPZR\\BBEfBbH[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\ikqeepzr\\bbefbbh[1].jpg"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x264 [0073.418] GetFileType (hFile=0x264) returned 0x1 [0073.418] GetFileType (hFile=0x264) returned 0x1 [0073.418] GetFileSize (in: hFile=0x264, lpFileSizeHigh=0x31e4c0 | out: lpFileSizeHigh=0x31e4c0*=0x0) returned 0x3860 [0073.418] ReadFile (in: hFile=0x264, lpBuffer=0x27a8a88, nNumberOfBytesToRead=0x3860, lpNumberOfBytesRead=0x31e46c, lpOverlapped=0x0 | out: lpBuffer=0x27a8a88*, lpNumberOfBytesRead=0x31e46c*=0x3860, lpOverlapped=0x0) returned 1 [0073.432] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\IKQEEPZR\\BBEfBbH[1].jpg", nBufferLength=0x105, lpBuffer=0x31deb0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\IKQEEPZR\\BBEfBbH[1].jpg", lpFilePart=0x0) returned 0x7e [0073.432] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\IKQEEPZR\\BBEfBbH[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\ikqeepzr\\bbefbbh[1].jpg"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x264 [0073.433] GetFileType (hFile=0x264) returned 0x1 [0073.433] GetFileType (hFile=0x264) returned 0x1 [0073.433] WriteFile (in: hFile=0x264, lpBuffer=0x280729c*, nNumberOfBytesToWrite=0x3870, lpNumberOfBytesWritten=0x31e460, lpOverlapped=0x0 | out: lpBuffer=0x280729c*, lpNumberOfBytesWritten=0x31e460*=0x3870, lpOverlapped=0x0) returned 1 [0073.434] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\IKQEEPZR\\BBEfBbH[1].jpg", nBufferLength=0x105, lpBuffer=0x31dfe4, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\IKQEEPZR\\BBEfBbH[1].jpg", lpFilePart=0x0) returned 0x7e [0073.434] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\IKQEEPZR\\BBEfBbH[1].jpg", nBufferLength=0x105, lpBuffer=0x31dfe4, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\IKQEEPZR\\BBEfBbH[1].jpg", lpFilePart=0x0) returned 0x7e [0073.434] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\IKQEEPZR\\BBEfBbH[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\ikqeepzr\\bbefbbh[1].jpg"), fInfoLevelId=0x0, lpFileInformation=0x31e4c0 | out: lpFileInformation=0x31e4c0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x4587cb90, ftCreationTime.dwHighDateTime=0x1d2faf3, ftLastAccessTime.dwLowDateTime=0x4587cb90, ftLastAccessTime.dwHighDateTime=0x1d2faf3, ftLastWriteTime.dwLowDateTime=0xf370bc0, ftLastWriteTime.dwHighDateTime=0x1d6eb7f, nFileSizeHigh=0x0, nFileSizeLow=0x3870)) returned 1 [0073.435] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\IKQEEPZR\\BBEfBbH[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\ikqeepzr\\bbefbbh[1].jpg"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\IKQEEPZR\\BBEfBbH[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\ikqeepzr\\bbefbbh[1].jpg")) returned 1 [0073.435] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\IKQEEPZR\\BBEfBq0[1].jpg", nBufferLength=0x105, lpBuffer=0x31dec4, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\IKQEEPZR\\BBEfBq0[1].jpg", lpFilePart=0x0) returned 0x7e [0073.435] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\IKQEEPZR\\BBEfBq0[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\ikqeepzr\\bbefbq0[1].jpg"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x264 [0073.435] GetFileType (hFile=0x264) returned 0x1 [0073.435] GetFileType (hFile=0x264) returned 0x1 [0073.435] GetFileSize (in: hFile=0x264, lpFileSizeHigh=0x31e4c0 | out: lpFileSizeHigh=0x31e4c0*=0x0) returned 0x19a5 [0073.435] ReadFile (in: hFile=0x264, lpBuffer=0x280b070, nNumberOfBytesToRead=0x19a5, lpNumberOfBytesRead=0x31e46c, lpOverlapped=0x0 | out: lpBuffer=0x280b070*, lpNumberOfBytesRead=0x31e46c*=0x19a5, lpOverlapped=0x0) returned 1 [0073.452] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\IKQEEPZR\\BBEfBq0[1].jpg", nBufferLength=0x105, lpBuffer=0x31deb0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\IKQEEPZR\\BBEfBq0[1].jpg", lpFilePart=0x0) returned 0x7e [0073.452] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\IKQEEPZR\\BBEfBq0[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\ikqeepzr\\bbefbq0[1].jpg"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x264 [0073.453] GetFileType (hFile=0x264) returned 0x1 [0073.453] GetFileType (hFile=0x264) returned 0x1 [0073.453] WriteFile (in: hFile=0x264, lpBuffer=0x2662af8*, nNumberOfBytesToWrite=0x19b0, lpNumberOfBytesWritten=0x31e460, lpOverlapped=0x0 | out: lpBuffer=0x2662af8*, lpNumberOfBytesWritten=0x31e460*=0x19b0, lpOverlapped=0x0) returned 1 [0073.454] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\IKQEEPZR\\BBEfBq0[1].jpg", nBufferLength=0x105, lpBuffer=0x31dfe4, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\IKQEEPZR\\BBEfBq0[1].jpg", lpFilePart=0x0) returned 0x7e [0073.454] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\IKQEEPZR\\BBEfBq0[1].jpg", nBufferLength=0x105, lpBuffer=0x31dfe4, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\IKQEEPZR\\BBEfBq0[1].jpg", lpFilePart=0x0) returned 0x7e [0073.454] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\IKQEEPZR\\BBEfBq0[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\ikqeepzr\\bbefbq0[1].jpg"), fInfoLevelId=0x0, lpFileInformation=0x31e4c0 | out: lpFileInformation=0x31e4c0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x457be4b0, ftCreationTime.dwHighDateTime=0x1d2faf3, ftLastAccessTime.dwLowDateTime=0x457be4b0, ftLastAccessTime.dwHighDateTime=0x1d2faf3, ftLastWriteTime.dwLowDateTime=0xf396d20, ftLastWriteTime.dwHighDateTime=0x1d6eb7f, nFileSizeHigh=0x0, nFileSizeLow=0x19b0)) returned 1 [0073.454] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\IKQEEPZR\\BBEfBq0[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\ikqeepzr\\bbefbq0[1].jpg"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\IKQEEPZR\\BBEfBq0[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\ikqeepzr\\bbefbq0[1].jpg")) returned 1 [0073.454] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\IKQEEPZR\\BBEfBrz[1].jpg", nBufferLength=0x105, lpBuffer=0x31dec4, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\IKQEEPZR\\BBEfBrz[1].jpg", lpFilePart=0x0) returned 0x7e [0073.454] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\IKQEEPZR\\BBEfBrz[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\ikqeepzr\\bbefbrz[1].jpg"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x264 [0073.454] GetFileType (hFile=0x264) returned 0x1 [0073.454] GetFileType (hFile=0x264) returned 0x1 [0073.455] GetFileSize (in: hFile=0x264, lpFileSizeHigh=0x31e4c0 | out: lpFileSizeHigh=0x31e4c0*=0x0) returned 0x2619 [0073.455] ReadFile (in: hFile=0x264, lpBuffer=0x2664a0c, nNumberOfBytesToRead=0x2619, lpNumberOfBytesRead=0x31e46c, lpOverlapped=0x0 | out: lpBuffer=0x2664a0c*, lpNumberOfBytesRead=0x31e46c*=0x2619, lpOverlapped=0x0) returned 1 [0073.469] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\IKQEEPZR\\BBEfBrz[1].jpg", nBufferLength=0x105, lpBuffer=0x31deb0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\IKQEEPZR\\BBEfBrz[1].jpg", lpFilePart=0x0) returned 0x7e [0073.469] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\IKQEEPZR\\BBEfBrz[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\ikqeepzr\\bbefbrz[1].jpg"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x264 [0073.470] GetFileType (hFile=0x264) returned 0x1 [0073.470] GetFileType (hFile=0x264) returned 0x1 [0073.470] WriteFile (in: hFile=0x264, lpBuffer=0x26bd7f0*, nNumberOfBytesToWrite=0x2620, lpNumberOfBytesWritten=0x31e460, lpOverlapped=0x0 | out: lpBuffer=0x26bd7f0*, lpNumberOfBytesWritten=0x31e460*=0x2620, lpOverlapped=0x0) returned 1 [0073.471] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\IKQEEPZR\\BBEfBrz[1].jpg", nBufferLength=0x105, lpBuffer=0x31dfe4, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\IKQEEPZR\\BBEfBrz[1].jpg", lpFilePart=0x0) returned 0x7e [0073.471] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\IKQEEPZR\\BBEfBrz[1].jpg", nBufferLength=0x105, lpBuffer=0x31dfe4, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\IKQEEPZR\\BBEfBrz[1].jpg", lpFilePart=0x0) returned 0x7e [0073.471] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\IKQEEPZR\\BBEfBrz[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\ikqeepzr\\bbefbrz[1].jpg"), fInfoLevelId=0x0, lpFileInformation=0x31e4c0 | out: lpFileInformation=0x31e4c0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x45bc29d0, ftCreationTime.dwHighDateTime=0x1d2faf3, ftLastAccessTime.dwLowDateTime=0x45bc29d0, ftLastAccessTime.dwHighDateTime=0x1d2faf3, ftLastWriteTime.dwLowDateTime=0xf3bce80, ftLastWriteTime.dwHighDateTime=0x1d6eb7f, nFileSizeHigh=0x0, nFileSizeLow=0x2620)) returned 1 [0073.471] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\IKQEEPZR\\BBEfBrz[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\ikqeepzr\\bbefbrz[1].jpg"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\IKQEEPZR\\BBEfBrz[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\ikqeepzr\\bbefbrz[1].jpg")) returned 1 [0073.471] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\IKQEEPZR\\BBEfXl6[1].jpg", nBufferLength=0x105, lpBuffer=0x31dec4, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\IKQEEPZR\\BBEfXl6[1].jpg", lpFilePart=0x0) returned 0x7e [0073.471] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\IKQEEPZR\\BBEfXl6[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\ikqeepzr\\bbefxl6[1].jpg"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x264 [0073.472] GetFileType (hFile=0x264) returned 0x1 [0073.472] GetFileType (hFile=0x264) returned 0x1 [0073.472] GetFileSize (in: hFile=0x264, lpFileSizeHigh=0x31e4c0 | out: lpFileSizeHigh=0x31e4c0*=0x0) returned 0x1f84 [0073.472] ReadFile (in: hFile=0x264, lpBuffer=0x26c0374, nNumberOfBytesToRead=0x1f84, lpNumberOfBytesRead=0x31e46c, lpOverlapped=0x0 | out: lpBuffer=0x26c0374*, lpNumberOfBytesRead=0x31e46c*=0x1f84, lpOverlapped=0x0) returned 1 [0073.489] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\IKQEEPZR\\BBEfXl6[1].jpg", nBufferLength=0x105, lpBuffer=0x31deb0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\IKQEEPZR\\BBEfXl6[1].jpg", lpFilePart=0x0) returned 0x7e [0073.490] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\IKQEEPZR\\BBEfXl6[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\ikqeepzr\\bbefxl6[1].jpg"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x264 [0073.490] GetFileType (hFile=0x264) returned 0x1 [0073.490] GetFileType (hFile=0x264) returned 0x1 [0073.490] WriteFile (in: hFile=0x264, lpBuffer=0x2716f28*, nNumberOfBytesToWrite=0x1f90, lpNumberOfBytesWritten=0x31e460, lpOverlapped=0x0 | out: lpBuffer=0x2716f28*, lpNumberOfBytesWritten=0x31e460*=0x1f90, lpOverlapped=0x0) returned 1 [0073.491] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\IKQEEPZR\\BBEfXl6[1].jpg", nBufferLength=0x105, lpBuffer=0x31dfe4, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\IKQEEPZR\\BBEfXl6[1].jpg", lpFilePart=0x0) returned 0x7e [0073.491] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\IKQEEPZR\\BBEfXl6[1].jpg", nBufferLength=0x105, lpBuffer=0x31dfe4, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\IKQEEPZR\\BBEfXl6[1].jpg", lpFilePart=0x0) returned 0x7e [0073.491] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\IKQEEPZR\\BBEfXl6[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\ikqeepzr\\bbefxl6[1].jpg"), fInfoLevelId=0x0, lpFileInformation=0x31e4c0 | out: lpFileInformation=0x31e4c0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x45b76710, ftCreationTime.dwHighDateTime=0x1d2faf3, ftLastAccessTime.dwLowDateTime=0x45b76710, ftLastAccessTime.dwHighDateTime=0x1d2faf3, ftLastWriteTime.dwLowDateTime=0xf3e2fe0, ftLastWriteTime.dwHighDateTime=0x1d6eb7f, nFileSizeHigh=0x0, nFileSizeLow=0x1f90)) returned 1 [0073.492] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\IKQEEPZR\\BBEfXl6[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\ikqeepzr\\bbefxl6[1].jpg"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\IKQEEPZR\\BBEfXl6[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\ikqeepzr\\bbefxl6[1].jpg")) returned 1 [0073.492] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\IKQEEPZR\\BBEgEH3[1].jpg", nBufferLength=0x105, lpBuffer=0x31dec4, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\IKQEEPZR\\BBEgEH3[1].jpg", lpFilePart=0x0) returned 0x7e [0073.492] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\IKQEEPZR\\BBEgEH3[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\ikqeepzr\\bbegeh3[1].jpg"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x264 [0073.492] GetFileType (hFile=0x264) returned 0x1 [0073.492] GetFileType (hFile=0x264) returned 0x1 [0073.493] GetFileSize (in: hFile=0x264, lpFileSizeHigh=0x31e4c0 | out: lpFileSizeHigh=0x31e4c0*=0x0) returned 0x1c7e [0073.493] ReadFile (in: hFile=0x264, lpBuffer=0x271941c, nNumberOfBytesToRead=0x1c7e, lpNumberOfBytesRead=0x31e46c, lpOverlapped=0x0 | out: lpBuffer=0x271941c*, lpNumberOfBytesRead=0x31e46c*=0x1c7e, lpOverlapped=0x0) returned 1 [0073.508] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\IKQEEPZR\\BBEgEH3[1].jpg", nBufferLength=0x105, lpBuffer=0x31deb0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\IKQEEPZR\\BBEgEH3[1].jpg", lpFilePart=0x0) returned 0x7e [0073.508] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\IKQEEPZR\\BBEgEH3[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\ikqeepzr\\bbegeh3[1].jpg"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x264 [0073.509] GetFileType (hFile=0x264) returned 0x1 [0073.509] GetFileType (hFile=0x264) returned 0x1 [0073.509] WriteFile (in: hFile=0x264, lpBuffer=0x276f084*, nNumberOfBytesToWrite=0x1c80, lpNumberOfBytesWritten=0x31e460, lpOverlapped=0x0 | out: lpBuffer=0x276f084*, lpNumberOfBytesWritten=0x31e460*=0x1c80, lpOverlapped=0x0) returned 1 [0073.510] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\IKQEEPZR\\BBEgEH3[1].jpg", nBufferLength=0x105, lpBuffer=0x31dfe4, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\IKQEEPZR\\BBEgEH3[1].jpg", lpFilePart=0x0) returned 0x7e [0073.510] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\IKQEEPZR\\BBEgEH3[1].jpg", nBufferLength=0x105, lpBuffer=0x31dfe4, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\IKQEEPZR\\BBEgEH3[1].jpg", lpFilePart=0x0) returned 0x7e [0073.510] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\IKQEEPZR\\BBEgEH3[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\ikqeepzr\\bbegeh3[1].jpg"), fInfoLevelId=0x0, lpFileInformation=0x31e4c0 | out: lpFileInformation=0x31e4c0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xbded7090, ftCreationTime.dwHighDateTime=0x1d2faf2, ftLastAccessTime.dwLowDateTime=0xbded7090, ftLastAccessTime.dwHighDateTime=0x1d2faf2, ftLastWriteTime.dwLowDateTime=0xf42f2a0, ftLastWriteTime.dwHighDateTime=0x1d6eb7f, nFileSizeHigh=0x0, nFileSizeLow=0x1c80)) returned 1 [0073.510] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\IKQEEPZR\\BBEgEH3[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\ikqeepzr\\bbegeh3[1].jpg"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\IKQEEPZR\\BBEgEH3[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\ikqeepzr\\bbegeh3[1].jpg")) returned 1 [0073.511] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\IKQEEPZR\\BBEgsz3[1].jpg", nBufferLength=0x105, lpBuffer=0x31dec4, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\IKQEEPZR\\BBEgsz3[1].jpg", lpFilePart=0x0) returned 0x7e [0073.511] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\IKQEEPZR\\BBEgsz3[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\ikqeepzr\\bbegsz3[1].jpg"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x264 [0073.511] GetFileType (hFile=0x264) returned 0x1 [0073.511] GetFileType (hFile=0x264) returned 0x1 [0073.511] GetFileSize (in: hFile=0x264, lpFileSizeHigh=0x31e4c0 | out: lpFileSizeHigh=0x31e4c0*=0x0) returned 0x8f9 [0073.511] ReadFile (in: hFile=0x264, lpBuffer=0x2771b70, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x31e46c, lpOverlapped=0x0 | out: lpBuffer=0x2771b70*, lpNumberOfBytesRead=0x31e46c*=0x8f9, lpOverlapped=0x0) returned 1 [0073.610] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\IKQEEPZR\\BBEgsz3[1].jpg", nBufferLength=0x105, lpBuffer=0x31deb0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\IKQEEPZR\\BBEgsz3[1].jpg", lpFilePart=0x0) returned 0x7e [0073.610] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\IKQEEPZR\\BBEgsz3[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\ikqeepzr\\bbegsz3[1].jpg"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x264 [0073.611] GetFileType (hFile=0x264) returned 0x1 [0073.611] GetFileType (hFile=0x264) returned 0x1 [0073.611] WriteFile (in: hFile=0x264, lpBuffer=0x27c27fc*, nNumberOfBytesToWrite=0x900, lpNumberOfBytesWritten=0x31e434, lpOverlapped=0x0 | out: lpBuffer=0x27c27fc*, lpNumberOfBytesWritten=0x31e434*=0x900, lpOverlapped=0x0) returned 1 [0073.612] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\IKQEEPZR\\BBEgsz3[1].jpg", nBufferLength=0x105, lpBuffer=0x31dfe4, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\IKQEEPZR\\BBEgsz3[1].jpg", lpFilePart=0x0) returned 0x7e [0073.612] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\IKQEEPZR\\BBEgsz3[1].jpg", nBufferLength=0x105, lpBuffer=0x31dfe4, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\IKQEEPZR\\BBEgsz3[1].jpg", lpFilePart=0x0) returned 0x7e [0073.612] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\IKQEEPZR\\BBEgsz3[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\ikqeepzr\\bbegsz3[1].jpg"), fInfoLevelId=0x0, lpFileInformation=0x31e4c0 | out: lpFileInformation=0x31e4c0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x45725f30, ftCreationTime.dwHighDateTime=0x1d2faf3, ftLastAccessTime.dwLowDateTime=0x45725f30, ftLastAccessTime.dwHighDateTime=0x1d2faf3, ftLastWriteTime.dwLowDateTime=0xf513ae0, ftLastWriteTime.dwHighDateTime=0x1d6eb7f, nFileSizeHigh=0x0, nFileSizeLow=0x900)) returned 1 [0073.612] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\IKQEEPZR\\BBEgsz3[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\ikqeepzr\\bbegsz3[1].jpg"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\IKQEEPZR\\BBEgsz3[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\ikqeepzr\\bbegsz3[1].jpg")) returned 1 [0073.612] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\IKQEEPZR\\BBEgTxB[1].jpg", nBufferLength=0x105, lpBuffer=0x31dec4, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\IKQEEPZR\\BBEgTxB[1].jpg", lpFilePart=0x0) returned 0x7e [0073.612] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\IKQEEPZR\\BBEgTxB[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\ikqeepzr\\bbegtxb[1].jpg"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x264 [0073.612] GetFileType (hFile=0x264) returned 0x1 [0073.612] GetFileType (hFile=0x264) returned 0x1 [0073.612] GetFileSize (in: hFile=0x264, lpFileSizeHigh=0x31e4c0 | out: lpFileSizeHigh=0x31e4c0*=0x0) returned 0x9b7 [0073.613] ReadFile (in: hFile=0x264, lpBuffer=0x27c4590, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x31e46c, lpOverlapped=0x0 | out: lpBuffer=0x27c4590*, lpNumberOfBytesRead=0x31e46c*=0x9b7, lpOverlapped=0x0) returned 1 [0073.710] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\IKQEEPZR\\BBEgTxB[1].jpg", nBufferLength=0x105, lpBuffer=0x31deb0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\IKQEEPZR\\BBEgTxB[1].jpg", lpFilePart=0x0) returned 0x7e [0073.710] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\IKQEEPZR\\BBEgTxB[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\ikqeepzr\\bbegtxb[1].jpg"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x264 [0073.711] GetFileType (hFile=0x264) returned 0x1 [0073.711] GetFileType (hFile=0x264) returned 0x1 [0073.711] WriteFile (in: hFile=0x264, lpBuffer=0x28155e0*, nNumberOfBytesToWrite=0x9c0, lpNumberOfBytesWritten=0x31e434, lpOverlapped=0x0 | out: lpBuffer=0x28155e0*, lpNumberOfBytesWritten=0x31e434*=0x9c0, lpOverlapped=0x0) returned 1 [0073.712] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\IKQEEPZR\\BBEgTxB[1].jpg", nBufferLength=0x105, lpBuffer=0x31dfe4, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\IKQEEPZR\\BBEgTxB[1].jpg", lpFilePart=0x0) returned 0x7e [0073.712] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\IKQEEPZR\\BBEgTxB[1].jpg", nBufferLength=0x105, lpBuffer=0x31dfe4, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\IKQEEPZR\\BBEgTxB[1].jpg", lpFilePart=0x0) returned 0x7e [0073.712] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\IKQEEPZR\\BBEgTxB[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\ikqeepzr\\bbegtxb[1].jpg"), fInfoLevelId=0x0, lpFileInformation=0x31e4c0 | out: lpFileInformation=0x31e4c0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x4574c090, ftCreationTime.dwHighDateTime=0x1d2faf3, ftLastAccessTime.dwLowDateTime=0x4574c090, ftLastAccessTime.dwHighDateTime=0x1d2faf3, ftLastWriteTime.dwLowDateTime=0xf61e480, ftLastWriteTime.dwHighDateTime=0x1d6eb7f, nFileSizeHigh=0x0, nFileSizeLow=0x9c0)) returned 1 [0073.712] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\IKQEEPZR\\BBEgTxB[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\ikqeepzr\\bbegtxb[1].jpg"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\IKQEEPZR\\BBEgTxB[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\ikqeepzr\\bbegtxb[1].jpg")) returned 1 [0073.713] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\IKQEEPZR\\BBo1lFJ[2].png", nBufferLength=0x105, lpBuffer=0x31dec4, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\IKQEEPZR\\BBo1lFJ[2].png", lpFilePart=0x0) returned 0x7e [0073.713] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\IKQEEPZR\\BBo1lFJ[2].png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\ikqeepzr\\bbo1lfj[2].png"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x264 [0073.713] GetFileType (hFile=0x264) returned 0x1 [0073.713] GetFileType (hFile=0x264) returned 0x1 [0073.713] GetFileSize (in: hFile=0x264, lpFileSizeHigh=0x31e4c0 | out: lpFileSizeHigh=0x31e4c0*=0x0) returned 0x36e [0073.713] ReadFile (in: hFile=0x264, lpBuffer=0x2816d2c, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x31e46c, lpOverlapped=0x0 | out: lpBuffer=0x2816d2c*, lpNumberOfBytesRead=0x31e46c*=0x36e, lpOverlapped=0x0) returned 1 [0073.806] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\IKQEEPZR\\BBo1lFJ[2].png", nBufferLength=0x105, lpBuffer=0x31deb0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\IKQEEPZR\\BBo1lFJ[2].png", lpFilePart=0x0) returned 0x7e [0073.806] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\IKQEEPZR\\BBo1lFJ[2].png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\ikqeepzr\\bbo1lfj[2].png"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x264 [0073.807] GetFileType (hFile=0x264) returned 0x1 [0073.807] GetFileType (hFile=0x264) returned 0x1 [0073.807] WriteFile (in: hFile=0x264, lpBuffer=0x2662a88*, nNumberOfBytesToWrite=0x370, lpNumberOfBytesWritten=0x31e434, lpOverlapped=0x0 | out: lpBuffer=0x2662a88*, lpNumberOfBytesWritten=0x31e434*=0x370, lpOverlapped=0x0) returned 1 [0073.808] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\IKQEEPZR\\BBo1lFJ[2].png", nBufferLength=0x105, lpBuffer=0x31dfe4, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\IKQEEPZR\\BBo1lFJ[2].png", lpFilePart=0x0) returned 0x7e [0073.808] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\IKQEEPZR\\BBo1lFJ[2].png", nBufferLength=0x105, lpBuffer=0x31dfe4, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\IKQEEPZR\\BBo1lFJ[2].png", lpFilePart=0x0) returned 0x7e [0073.808] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\IKQEEPZR\\BBo1lFJ[2].png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\ikqeepzr\\bbo1lfj[2].png"), fInfoLevelId=0x0, lpFileInformation=0x31e4c0 | out: lpFileInformation=0x31e4c0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x45bc29d0, ftCreationTime.dwHighDateTime=0x1d2faf3, ftLastAccessTime.dwLowDateTime=0x45bc29d0, ftLastAccessTime.dwHighDateTime=0x1d2faf3, ftLastWriteTime.dwLowDateTime=0xf702cc0, ftLastWriteTime.dwHighDateTime=0x1d6eb7f, nFileSizeHigh=0x0, nFileSizeLow=0x370)) returned 1 [0073.808] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\IKQEEPZR\\BBo1lFJ[2].png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\ikqeepzr\\bbo1lfj[2].png"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\IKQEEPZR\\BBo1lFJ[2].png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\ikqeepzr\\bbo1lfj[2].png")) returned 1 [0073.809] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\IKQEEPZR\\BBs47TE[1].png", nBufferLength=0x105, lpBuffer=0x31dec4, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\IKQEEPZR\\BBs47TE[1].png", lpFilePart=0x0) returned 0x7e [0073.809] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\IKQEEPZR\\BBs47TE[1].png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\ikqeepzr\\bbs47te[1].png"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x264 [0073.809] GetFileType (hFile=0x264) returned 0x1 [0073.809] GetFileType (hFile=0x264) returned 0x1 [0073.809] GetFileSize (in: hFile=0x264, lpFileSizeHigh=0x31e4c0 | out: lpFileSizeHigh=0x31e4c0*=0x0) returned 0x23f [0073.809] ReadFile (in: hFile=0x264, lpBuffer=0x26640a4, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x31e46c, lpOverlapped=0x0 | out: lpBuffer=0x26640a4*, lpNumberOfBytesRead=0x31e46c*=0x23f, lpOverlapped=0x0) returned 1 [0073.859] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\IKQEEPZR\\BBs47TE[1].png", nBufferLength=0x105, lpBuffer=0x31deb0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\IKQEEPZR\\BBs47TE[1].png", lpFilePart=0x0) returned 0x7e [0073.859] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\IKQEEPZR\\BBs47TE[1].png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\ikqeepzr\\bbs47te[1].png"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x264 [0073.860] GetFileType (hFile=0x264) returned 0x1 [0073.860] GetFileType (hFile=0x264) returned 0x1 [0073.860] WriteFile (in: hFile=0x264, lpBuffer=0x26b2cc8*, nNumberOfBytesToWrite=0x240, lpNumberOfBytesWritten=0x31e434, lpOverlapped=0x0 | out: lpBuffer=0x26b2cc8*, lpNumberOfBytesWritten=0x31e434*=0x240, lpOverlapped=0x0) returned 1 [0073.861] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\IKQEEPZR\\BBs47TE[1].png", nBufferLength=0x105, lpBuffer=0x31dfe4, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\IKQEEPZR\\BBs47TE[1].png", lpFilePart=0x0) returned 0x7e [0073.861] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\IKQEEPZR\\BBs47TE[1].png", nBufferLength=0x105, lpBuffer=0x31dfe4, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\IKQEEPZR\\BBs47TE[1].png", lpFilePart=0x0) returned 0x7e [0073.861] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\IKQEEPZR\\BBs47TE[1].png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\ikqeepzr\\bbs47te[1].png"), fInfoLevelId=0x0, lpFileInformation=0x31e4c0 | out: lpFileInformation=0x31e4c0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x455f5430, ftCreationTime.dwHighDateTime=0x1d2faf3, ftLastAccessTime.dwLowDateTime=0x455f5430, ftLastAccessTime.dwHighDateTime=0x1d2faf3, ftLastWriteTime.dwLowDateTime=0xf7750e0, ftLastWriteTime.dwHighDateTime=0x1d6eb7f, nFileSizeHigh=0x0, nFileSizeLow=0x240)) returned 1 [0073.861] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\IKQEEPZR\\BBs47TE[1].png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\ikqeepzr\\bbs47te[1].png"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\IKQEEPZR\\BBs47TE[1].png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\ikqeepzr\\bbs47te[1].png")) returned 1 [0073.861] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\IKQEEPZR\\BBu9sWQ[1].jpg", nBufferLength=0x105, lpBuffer=0x31dec4, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\IKQEEPZR\\BBu9sWQ[1].jpg", lpFilePart=0x0) returned 0x7e [0073.862] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\IKQEEPZR\\BBu9sWQ[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\ikqeepzr\\bbu9swq[1].jpg"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x264 [0073.862] GetFileType (hFile=0x264) returned 0x1 [0073.862] GetFileType (hFile=0x264) returned 0x1 [0073.862] GetFileSize (in: hFile=0x264, lpFileSizeHigh=0x31e4c0 | out: lpFileSizeHigh=0x31e4c0*=0x0) returned 0x2cb0 [0073.862] ReadFile (in: hFile=0x264, lpBuffer=0x26b4098, nNumberOfBytesToRead=0x2cb0, lpNumberOfBytesRead=0x31e46c, lpOverlapped=0x0 | out: lpBuffer=0x26b4098*, lpNumberOfBytesRead=0x31e46c*=0x2cb0, lpOverlapped=0x0) returned 1 [0073.884] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\IKQEEPZR\\BBu9sWQ[1].jpg", nBufferLength=0x105, lpBuffer=0x31deb0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\IKQEEPZR\\BBu9sWQ[1].jpg", lpFilePart=0x0) returned 0x7e [0073.884] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\IKQEEPZR\\BBu9sWQ[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\ikqeepzr\\bbu9swq[1].jpg"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x264 [0073.885] GetFileType (hFile=0x264) returned 0x1 [0073.885] GetFileType (hFile=0x264) returned 0x1 [0073.885] WriteFile (in: hFile=0x264, lpBuffer=0x270ee3c*, nNumberOfBytesToWrite=0x2cc0, lpNumberOfBytesWritten=0x31e460, lpOverlapped=0x0 | out: lpBuffer=0x270ee3c*, lpNumberOfBytesWritten=0x31e460*=0x2cc0, lpOverlapped=0x0) returned 1 [0073.886] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\IKQEEPZR\\BBu9sWQ[1].jpg", nBufferLength=0x105, lpBuffer=0x31dfe4, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\IKQEEPZR\\BBu9sWQ[1].jpg", lpFilePart=0x0) returned 0x7e [0073.886] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\IKQEEPZR\\BBu9sWQ[1].jpg", nBufferLength=0x105, lpBuffer=0x31dfe4, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\IKQEEPZR\\BBu9sWQ[1].jpg", lpFilePart=0x0) returned 0x7e [0073.886] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\IKQEEPZR\\BBu9sWQ[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\ikqeepzr\\bbu9swq[1].jpg"), fInfoLevelId=0x0, lpFileInformation=0x31e4c0 | out: lpFileInformation=0x31e4c0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x45987530, ftCreationTime.dwHighDateTime=0x1d2faf3, ftLastAccessTime.dwLowDateTime=0x45987530, ftLastAccessTime.dwHighDateTime=0x1d2faf3, ftLastWriteTime.dwLowDateTime=0xf7c13a0, ftLastWriteTime.dwHighDateTime=0x1d6eb7f, nFileSizeHigh=0x0, nFileSizeLow=0x2cc0)) returned 1 [0073.886] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\IKQEEPZR\\BBu9sWQ[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\ikqeepzr\\bbu9swq[1].jpg"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\IKQEEPZR\\BBu9sWQ[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\ikqeepzr\\bbu9swq[1].jpg")) returned 1 [0073.887] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\IKQEEPZR\\BByazif[2].jpg", nBufferLength=0x105, lpBuffer=0x31dec4, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\IKQEEPZR\\BByazif[2].jpg", lpFilePart=0x0) returned 0x7e [0073.887] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\IKQEEPZR\\BByazif[2].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\ikqeepzr\\bbyazif[2].jpg"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x264 [0073.887] GetFileType (hFile=0x264) returned 0x1 [0073.887] GetFileType (hFile=0x264) returned 0x1 [0073.887] GetFileSize (in: hFile=0x264, lpFileSizeHigh=0x31e4c0 | out: lpFileSizeHigh=0x31e4c0*=0x0) returned 0x228c [0073.887] ReadFile (in: hFile=0x264, lpBuffer=0x2712060, nNumberOfBytesToRead=0x228c, lpNumberOfBytesRead=0x31e46c, lpOverlapped=0x0 | out: lpBuffer=0x2712060*, lpNumberOfBytesRead=0x31e46c*=0x228c, lpOverlapped=0x0) returned 1 [0073.916] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\IKQEEPZR\\BByazif[2].jpg", nBufferLength=0x105, lpBuffer=0x31deb0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\IKQEEPZR\\BByazif[2].jpg", lpFilePart=0x0) returned 0x7e [0073.916] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\IKQEEPZR\\BByazif[2].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\ikqeepzr\\bbyazif[2].jpg"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x264 [0073.917] GetFileType (hFile=0x264) returned 0x1 [0073.917] GetFileType (hFile=0x264) returned 0x1 [0073.917] WriteFile (in: hFile=0x264, lpBuffer=0x2769b14*, nNumberOfBytesToWrite=0x2290, lpNumberOfBytesWritten=0x31e460, lpOverlapped=0x0 | out: lpBuffer=0x2769b14*, lpNumberOfBytesWritten=0x31e460*=0x2290, lpOverlapped=0x0) returned 1 [0073.918] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\IKQEEPZR\\BByazif[2].jpg", nBufferLength=0x105, lpBuffer=0x31dfe4, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\IKQEEPZR\\BByazif[2].jpg", lpFilePart=0x0) returned 0x7e [0073.918] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\IKQEEPZR\\BByazif[2].jpg", nBufferLength=0x105, lpBuffer=0x31dfe4, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\IKQEEPZR\\BByazif[2].jpg", lpFilePart=0x0) returned 0x7e [0073.918] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\IKQEEPZR\\BByazif[2].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\ikqeepzr\\bbyazif[2].jpg"), fInfoLevelId=0x0, lpFileInformation=0x31e4c0 | out: lpFileInformation=0x31e4c0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x45bc29d0, ftCreationTime.dwHighDateTime=0x1d2faf3, ftLastAccessTime.dwLowDateTime=0x45bc29d0, ftLastAccessTime.dwHighDateTime=0x1d2faf3, ftLastWriteTime.dwLowDateTime=0xf80d660, ftLastWriteTime.dwHighDateTime=0x1d6eb7f, nFileSizeHigh=0x0, nFileSizeLow=0x2290)) returned 1 [0073.918] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\IKQEEPZR\\BByazif[2].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\ikqeepzr\\bbyazif[2].jpg"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\IKQEEPZR\\BByazif[2].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\ikqeepzr\\bbyazif[2].jpg")) returned 1 [0073.919] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\IKQEEPZR\\bs-components[1].css", nBufferLength=0x105, lpBuffer=0x31dec4, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\IKQEEPZR\\bs-components[1].css", lpFilePart=0x0) returned 0x84 [0073.919] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\IKQEEPZR\\bs-components[1].css" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\ikqeepzr\\bs-components[1].css"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x264 [0073.919] GetFileType (hFile=0x264) returned 0x1 [0073.919] GetFileType (hFile=0x264) returned 0x1 [0073.919] GetFileSize (in: hFile=0x264, lpFileSizeHigh=0x31e4c0 | out: lpFileSizeHigh=0x31e4c0*=0x0) returned 0xaf13 [0073.919] ReadFile (in: hFile=0x264, lpBuffer=0x276c320, nNumberOfBytesToRead=0xaf13, lpNumberOfBytesRead=0x31e46c, lpOverlapped=0x0 | out: lpBuffer=0x276c320*, lpNumberOfBytesRead=0x31e46c*=0xaf13, lpOverlapped=0x0) returned 1 [0073.942] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\IKQEEPZR\\bs-components[1].css", nBufferLength=0x105, lpBuffer=0x31deb0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\IKQEEPZR\\bs-components[1].css", lpFilePart=0x0) returned 0x84 [0073.942] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\IKQEEPZR\\bs-components[1].css" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\ikqeepzr\\bs-components[1].css"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x264 [0073.943] GetFileType (hFile=0x264) returned 0x1 [0073.943] GetFileType (hFile=0x264) returned 0x1 [0073.943] WriteFile (in: hFile=0x264, lpBuffer=0x27d9e7c*, nNumberOfBytesToWrite=0xaf20, lpNumberOfBytesWritten=0x31e460, lpOverlapped=0x0 | out: lpBuffer=0x27d9e7c*, lpNumberOfBytesWritten=0x31e460*=0xaf20, lpOverlapped=0x0) returned 1 [0073.945] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\IKQEEPZR\\bs-components[1].css", nBufferLength=0x105, lpBuffer=0x31dfe4, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\IKQEEPZR\\bs-components[1].css", lpFilePart=0x0) returned 0x84 [0073.945] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\IKQEEPZR\\bs-components[1].css", nBufferLength=0x105, lpBuffer=0x31dfe4, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\IKQEEPZR\\bs-components[1].css", lpFilePart=0x0) returned 0x84 [0073.945] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\IKQEEPZR\\bs-components[1].css" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\ikqeepzr\\bs-components[1].css"), fInfoLevelId=0x0, lpFileInformation=0x31e4c0 | out: lpFileInformation=0x31e4c0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x54b51310, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x54b51310, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0xf859920, ftLastWriteTime.dwHighDateTime=0x1d6eb7f, nFileSizeHigh=0x0, nFileSizeLow=0xaf20)) returned 1 [0073.945] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\IKQEEPZR\\bs-components[1].css" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\ikqeepzr\\bs-components[1].css"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\IKQEEPZR\\bs-components[1].css" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\ikqeepzr\\bs-components[1].css")) returned 1 [0073.945] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\IKQEEPZR\\bs-util[1].css", nBufferLength=0x105, lpBuffer=0x31dec4, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\IKQEEPZR\\bs-util[1].css", lpFilePart=0x0) returned 0x7e [0073.945] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\IKQEEPZR\\bs-util[1].css" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\ikqeepzr\\bs-util[1].css"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x264 [0073.946] GetFileType (hFile=0x264) returned 0x1 [0073.946] GetFileType (hFile=0x264) returned 0x1 [0073.946] GetFileSize (in: hFile=0x264, lpFileSizeHigh=0x31e4c0 | out: lpFileSizeHigh=0x31e4c0*=0x0) returned 0x30be [0073.946] ReadFile (in: hFile=0x264, lpBuffer=0x27e5330, nNumberOfBytesToRead=0x30be, lpNumberOfBytesRead=0x31e46c, lpOverlapped=0x0 | out: lpBuffer=0x27e5330*, lpNumberOfBytesRead=0x31e46c*=0x30be, lpOverlapped=0x0) returned 1 [0073.961] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\IKQEEPZR\\bs-util[1].css", nBufferLength=0x105, lpBuffer=0x31deb0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\IKQEEPZR\\bs-util[1].css", lpFilePart=0x0) returned 0x7e [0073.961] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\IKQEEPZR\\bs-util[1].css" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\ikqeepzr\\bs-util[1].css"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x264 [0073.962] GetFileType (hFile=0x264) returned 0x1 [0073.962] GetFileType (hFile=0x264) returned 0x1 [0073.962] WriteFile (in: hFile=0x264, lpBuffer=0x28414d8*, nNumberOfBytesToWrite=0x30c0, lpNumberOfBytesWritten=0x31e460, lpOverlapped=0x0 | out: lpBuffer=0x28414d8*, lpNumberOfBytesWritten=0x31e460*=0x30c0, lpOverlapped=0x0) returned 1 [0073.963] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\IKQEEPZR\\bs-util[1].css", nBufferLength=0x105, lpBuffer=0x31dfe4, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\IKQEEPZR\\bs-util[1].css", lpFilePart=0x0) returned 0x7e [0073.963] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\IKQEEPZR\\bs-util[1].css", nBufferLength=0x105, lpBuffer=0x31dfe4, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\IKQEEPZR\\bs-util[1].css", lpFilePart=0x0) returned 0x7e [0073.963] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\IKQEEPZR\\bs-util[1].css" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\ikqeepzr\\bs-util[1].css"), fInfoLevelId=0x0, lpFileInformation=0x31e4c0 | out: lpFileInformation=0x31e4c0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x54b9d5d0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x54b9d5d0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0xf87fa80, ftLastWriteTime.dwHighDateTime=0x1d6eb7f, nFileSizeHigh=0x0, nFileSizeLow=0x30c0)) returned 1 [0073.963] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\IKQEEPZR\\bs-util[1].css" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\ikqeepzr\\bs-util[1].css"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\IKQEEPZR\\bs-util[1].css" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\ikqeepzr\\bs-util[1].css")) returned 1 [0073.964] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\IKQEEPZR\\c7-bdbd0d-91cdfbc1[1].txt", nBufferLength=0x105, lpBuffer=0x31dec4, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\IKQEEPZR\\c7-bdbd0d-91cdfbc1[1].txt", lpFilePart=0x0) returned 0x89 [0073.964] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\IKQEEPZR\\c7-bdbd0d-91cdfbc1[1].txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\ikqeepzr\\c7-bdbd0d-91cdfbc1[1].txt"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x264 [0073.964] GetFileType (hFile=0x264) returned 0x1 [0073.964] GetFileType (hFile=0x264) returned 0x1 [0073.964] GetFileSize (in: hFile=0x264, lpFileSizeHigh=0x31e4c0 | out: lpFileSizeHigh=0x31e4c0*=0x0) returned 0x254f1 [0073.965] ReadFile (in: hFile=0x264, lpBuffer=0x3853e60, nNumberOfBytesToRead=0x254f1, lpNumberOfBytesRead=0x31e46c, lpOverlapped=0x0 | out: lpBuffer=0x3853e60*, lpNumberOfBytesRead=0x31e46c*=0x254f1, lpOverlapped=0x0) returned 1 [0073.992] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\IKQEEPZR\\c7-bdbd0d-91cdfbc1[1].txt", nBufferLength=0x105, lpBuffer=0x31deb0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\IKQEEPZR\\c7-bdbd0d-91cdfbc1[1].txt", lpFilePart=0x0) returned 0x89 [0073.992] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e3a4) returned 1 [0073.992] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\IKQEEPZR\\c7-bdbd0d-91cdfbc1[1].txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\ikqeepzr\\c7-bdbd0d-91cdfbc1[1].txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x264 [0073.994] GetFileType (hFile=0x264) returned 0x1 [0073.994] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e3a0) returned 1 [0073.994] GetFileType (hFile=0x264) returned 0x1 [0073.994] WriteFile (in: hFile=0x264, lpBuffer=0x3879370*, nNumberOfBytesToWrite=0x25500, lpNumberOfBytesWritten=0x31e460, lpOverlapped=0x0 | out: lpBuffer=0x3879370*, lpNumberOfBytesWritten=0x31e460*=0x25500, lpOverlapped=0x0) returned 1 [0073.997] CloseHandle (hObject=0x264) returned 1 [0073.997] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\IKQEEPZR\\c7-bdbd0d-91cdfbc1[1].txt", nBufferLength=0x105, lpBuffer=0x31dfe4, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\IKQEEPZR\\c7-bdbd0d-91cdfbc1[1].txt", lpFilePart=0x0) returned 0x89 [0073.997] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\IKQEEPZR\\c7-bdbd0d-91cdfbc1[1].txt", nBufferLength=0x105, lpBuffer=0x31dfe4, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\IKQEEPZR\\c7-bdbd0d-91cdfbc1[1].txt", lpFilePart=0x0) returned 0x89 [0073.998] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e444) returned 1 [0073.998] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\IKQEEPZR\\c7-bdbd0d-91cdfbc1[1].txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\ikqeepzr\\c7-bdbd0d-91cdfbc1[1].txt"), fInfoLevelId=0x0, lpFileInformation=0x31e4c0 | out: lpFileInformation=0x31e4c0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xbd97bf10, ftCreationTime.dwHighDateTime=0x1d2faf2, ftLastAccessTime.dwLowDateTime=0xbd97bf10, ftLastAccessTime.dwHighDateTime=0x1d2faf2, ftLastWriteTime.dwLowDateTime=0xf8cbd40, ftLastWriteTime.dwHighDateTime=0x1d6eb7f, nFileSizeHigh=0x0, nFileSizeLow=0x25500)) returned 1 [0073.998] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e440) returned 1 [0073.998] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\IKQEEPZR\\c7-bdbd0d-91cdfbc1[1].txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\ikqeepzr\\c7-bdbd0d-91cdfbc1[1].txt"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\IKQEEPZR\\c7-bdbd0d-91cdfbc1[1].txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\ikqeepzr\\c7-bdbd0d-91cdfbc1[1].txt")) returned 1 [0073.998] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\IKQEEPZR\\chrome.min[1].css", nBufferLength=0x105, lpBuffer=0x31dec4, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\IKQEEPZR\\chrome.min[1].css", lpFilePart=0x0) returned 0x81 [0073.998] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e3b8) returned 1 [0073.998] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\IKQEEPZR\\chrome.min[1].css" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\ikqeepzr\\chrome.min[1].css"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x264 [0073.999] GetFileType (hFile=0x264) returned 0x1 [0073.999] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e3b4) returned 1 [0073.999] GetFileType (hFile=0x264) returned 0x1 [0073.999] GetFileSize (in: hFile=0x264, lpFileSizeHigh=0x31e4c0 | out: lpFileSizeHigh=0x31e4c0*=0x0) returned 0x2a03f [0073.999] ReadFile (in: hFile=0x264, lpBuffer=0x389e890, nNumberOfBytesToRead=0x2a03f, lpNumberOfBytesRead=0x31e46c, lpOverlapped=0x0 | out: lpBuffer=0x389e890*, lpNumberOfBytesRead=0x31e46c*=0x2a03f, lpOverlapped=0x0) returned 1 [0074.025] CloseHandle (hObject=0x264) returned 1 [0074.069] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\IKQEEPZR\\chrome.min[1].css", nBufferLength=0x105, lpBuffer=0x31deb0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\IKQEEPZR\\chrome.min[1].css", lpFilePart=0x0) returned 0x81 [0074.069] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e3a4) returned 1 [0074.069] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\IKQEEPZR\\chrome.min[1].css" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\ikqeepzr\\chrome.min[1].css"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x264 [0074.071] GetFileType (hFile=0x264) returned 0x1 [0074.071] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e3a0) returned 1 [0074.071] GetFileType (hFile=0x264) returned 0x1 [0074.071] WriteFile (in: hFile=0x264, lpBuffer=0x36194b0*, nNumberOfBytesToWrite=0x2a040, lpNumberOfBytesWritten=0x31e460, lpOverlapped=0x0 | out: lpBuffer=0x36194b0*, lpNumberOfBytesWritten=0x31e460*=0x2a040, lpOverlapped=0x0) returned 1 [0074.074] CloseHandle (hObject=0x264) returned 1 [0074.074] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\IKQEEPZR\\chrome.min[1].css", nBufferLength=0x105, lpBuffer=0x31dfe4, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\IKQEEPZR\\chrome.min[1].css", lpFilePart=0x0) returned 0x81 [0074.074] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\IKQEEPZR\\chrome.min[1].css", nBufferLength=0x105, lpBuffer=0x31dfe4, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\IKQEEPZR\\chrome.min[1].css", lpFilePart=0x0) returned 0x81 [0074.074] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e444) returned 1 [0074.074] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\IKQEEPZR\\chrome.min[1].css" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\ikqeepzr\\chrome.min[1].css"), fInfoLevelId=0x0, lpFileInformation=0x31e4c0 | out: lpFileInformation=0x31e4c0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x584c4b60, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x584c4b60, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0xf98a420, ftLastWriteTime.dwHighDateTime=0x1d6eb7f, nFileSizeHigh=0x0, nFileSizeLow=0x2a040)) returned 1 [0074.075] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e440) returned 1 [0074.075] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\IKQEEPZR\\chrome.min[1].css" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\ikqeepzr\\chrome.min[1].css"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\IKQEEPZR\\chrome.min[1].css" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\ikqeepzr\\chrome.min[1].css")) returned 1 [0074.075] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\IKQEEPZR\\eula-mac[1].jpg", nBufferLength=0x105, lpBuffer=0x31dec4, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\IKQEEPZR\\eula-mac[1].jpg", lpFilePart=0x0) returned 0x7f [0074.075] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e3b8) returned 1 [0074.075] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\IKQEEPZR\\eula-mac[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\ikqeepzr\\eula-mac[1].jpg"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x264 [0074.075] GetFileType (hFile=0x264) returned 0x1 [0074.075] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e3b4) returned 1 [0074.075] GetFileType (hFile=0x264) returned 0x1 [0074.075] GetFileSize (in: hFile=0x264, lpFileSizeHigh=0x31e4c0 | out: lpFileSizeHigh=0x31e4c0*=0x0) returned 0x48ba [0074.075] ReadFile (in: hFile=0x264, lpBuffer=0x2683050, nNumberOfBytesToRead=0x48ba, lpNumberOfBytesRead=0x31e46c, lpOverlapped=0x0 | out: lpBuffer=0x2683050*, lpNumberOfBytesRead=0x31e46c*=0x48ba, lpOverlapped=0x0) returned 1 [0074.096] CloseHandle (hObject=0x264) returned 1 [0074.109] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\IKQEEPZR\\eula-mac[1].jpg", nBufferLength=0x105, lpBuffer=0x31deb0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\IKQEEPZR\\eula-mac[1].jpg", lpFilePart=0x0) returned 0x7f [0074.109] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e3a4) returned 1 [0074.109] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\IKQEEPZR\\eula-mac[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\ikqeepzr\\eula-mac[1].jpg"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x264 [0074.110] GetFileType (hFile=0x264) returned 0x1 [0074.110] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e3a0) returned 1 [0074.110] GetFileType (hFile=0x264) returned 0x1 [0074.110] WriteFile (in: hFile=0x264, lpBuffer=0x26e69f8*, nNumberOfBytesToWrite=0x48c0, lpNumberOfBytesWritten=0x31e460, lpOverlapped=0x0 | out: lpBuffer=0x26e69f8*, lpNumberOfBytesWritten=0x31e460*=0x48c0, lpOverlapped=0x0) returned 1 [0074.111] CloseHandle (hObject=0x264) returned 1 [0074.111] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\IKQEEPZR\\eula-mac[1].jpg", nBufferLength=0x105, lpBuffer=0x31dfe4, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\IKQEEPZR\\eula-mac[1].jpg", lpFilePart=0x0) returned 0x7f [0074.111] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\IKQEEPZR\\eula-mac[1].jpg", nBufferLength=0x105, lpBuffer=0x31dfe4, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\IKQEEPZR\\eula-mac[1].jpg", lpFilePart=0x0) returned 0x7f [0074.111] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e444) returned 1 [0074.111] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\IKQEEPZR\\eula-mac[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\ikqeepzr\\eula-mac[1].jpg"), fInfoLevelId=0x0, lpFileInformation=0x31e4c0 | out: lpFileInformation=0x31e4c0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x60d9a020, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x60d9a020, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0xf9d66e0, ftLastWriteTime.dwHighDateTime=0x1d6eb7f, nFileSizeHigh=0x0, nFileSizeLow=0x48c0)) returned 1 [0074.111] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e440) returned 1 [0074.111] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\IKQEEPZR\\eula-mac[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\ikqeepzr\\eula-mac[1].jpg"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\IKQEEPZR\\eula-mac[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\ikqeepzr\\eula-mac[1].jpg")) returned 1 [0074.112] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\IKQEEPZR\\tecjslog[1].png", nBufferLength=0x105, lpBuffer=0x31dec4, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\IKQEEPZR\\tecjslog[1].png", lpFilePart=0x0) returned 0x7f [0074.112] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e3b8) returned 1 [0074.112] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\IKQEEPZR\\tecjslog[1].png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\ikqeepzr\\tecjslog[1].png"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x264 [0074.113] GetFileType (hFile=0x264) returned 0x1 [0074.113] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e3b4) returned 1 [0074.113] GetFileType (hFile=0x264) returned 0x1 [0074.113] GetFileSize (in: hFile=0x264, lpFileSizeHigh=0x31e4c0 | out: lpFileSizeHigh=0x31e4c0*=0x0) returned 0x67 [0074.113] ReadFile (in: hFile=0x264, lpBuffer=0x26eb964, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x31e46c, lpOverlapped=0x0 | out: lpBuffer=0x26eb964*, lpNumberOfBytesRead=0x31e46c*=0x67, lpOverlapped=0x0) returned 1 [0074.115] CloseHandle (hObject=0x264) returned 1 [0074.128] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\IKQEEPZR\\tecjslog[1].png", nBufferLength=0x105, lpBuffer=0x31deb0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\IKQEEPZR\\tecjslog[1].png", lpFilePart=0x0) returned 0x7f [0074.128] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e3a4) returned 1 [0074.128] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\IKQEEPZR\\tecjslog[1].png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\ikqeepzr\\tecjslog[1].png"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x264 [0074.129] GetFileType (hFile=0x264) returned 0x1 [0074.129] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e3a0) returned 1 [0074.129] GetFileType (hFile=0x264) returned 0x1 [0074.129] WriteFile (in: hFile=0x264, lpBuffer=0x2739af8*, nNumberOfBytesToWrite=0x70, lpNumberOfBytesWritten=0x31e434, lpOverlapped=0x0 | out: lpBuffer=0x2739af8*, lpNumberOfBytesWritten=0x31e434*=0x70, lpOverlapped=0x0) returned 1 [0074.130] CloseHandle (hObject=0x264) returned 1 [0074.130] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\IKQEEPZR\\tecjslog[1].png", nBufferLength=0x105, lpBuffer=0x31dfe4, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\IKQEEPZR\\tecjslog[1].png", lpFilePart=0x0) returned 0x7f [0074.130] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\IKQEEPZR\\tecjslog[1].png", nBufferLength=0x105, lpBuffer=0x31dfe4, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\IKQEEPZR\\tecjslog[1].png", lpFilePart=0x0) returned 0x7f [0074.130] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e444) returned 1 [0074.130] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\IKQEEPZR\\tecjslog[1].png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\ikqeepzr\\tecjslog[1].png"), fInfoLevelId=0x0, lpFileInformation=0x31e4c0 | out: lpFileInformation=0x31e4c0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xbfb41730, ftCreationTime.dwHighDateTime=0x1d2faf2, ftLastAccessTime.dwLowDateTime=0xbfb41730, ftLastAccessTime.dwHighDateTime=0x1d2faf2, ftLastWriteTime.dwLowDateTime=0xf9fc840, ftLastWriteTime.dwHighDateTime=0x1d6eb7f, nFileSizeHigh=0x0, nFileSizeLow=0x70)) returned 1 [0074.131] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e440) returned 1 [0074.131] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\IKQEEPZR\\tecjslog[1].png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\ikqeepzr\\tecjslog[1].png"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\IKQEEPZR\\tecjslog[1].png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\ikqeepzr\\tecjslog[1].png")) returned 1 [0074.131] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\IKQEEPZR\\th[1].jpg", nBufferLength=0x105, lpBuffer=0x31dec4, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\IKQEEPZR\\th[1].jpg", lpFilePart=0x0) returned 0x79 [0074.131] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e3b8) returned 1 [0074.131] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\IKQEEPZR\\th[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\ikqeepzr\\th[1].jpg"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x264 [0074.132] GetFileType (hFile=0x264) returned 0x1 [0074.132] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e3b4) returned 1 [0074.132] GetFileType (hFile=0x264) returned 0x1 [0074.132] GetFileSize (in: hFile=0x264, lpFileSizeHigh=0x31e4c0 | out: lpFileSizeHigh=0x31e4c0*=0x0) returned 0x911 [0074.132] ReadFile (in: hFile=0x264, lpBuffer=0x273b7e8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x31e46c, lpOverlapped=0x0 | out: lpBuffer=0x273b7e8*, lpNumberOfBytesRead=0x31e46c*=0x911, lpOverlapped=0x0) returned 1 [0074.134] CloseHandle (hObject=0x264) returned 1 [0074.147] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\IKQEEPZR\\th[1].jpg", nBufferLength=0x105, lpBuffer=0x31deb0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\IKQEEPZR\\th[1].jpg", lpFilePart=0x0) returned 0x79 [0074.147] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e3a4) returned 1 [0074.147] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\IKQEEPZR\\th[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\ikqeepzr\\th[1].jpg"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x264 [0074.148] GetFileType (hFile=0x264) returned 0x1 [0074.148] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e3a0) returned 1 [0074.148] GetFileType (hFile=0x264) returned 0x1 [0074.148] WriteFile (in: hFile=0x264, lpBuffer=0x278c504*, nNumberOfBytesToWrite=0x920, lpNumberOfBytesWritten=0x31e434, lpOverlapped=0x0 | out: lpBuffer=0x278c504*, lpNumberOfBytesWritten=0x31e434*=0x920, lpOverlapped=0x0) returned 1 [0074.149] CloseHandle (hObject=0x264) returned 1 [0074.149] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\IKQEEPZR\\th[1].jpg", nBufferLength=0x105, lpBuffer=0x31dfe4, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\IKQEEPZR\\th[1].jpg", lpFilePart=0x0) returned 0x79 [0074.149] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\IKQEEPZR\\th[1].jpg", nBufferLength=0x105, lpBuffer=0x31dfe4, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\IKQEEPZR\\th[1].jpg", lpFilePart=0x0) returned 0x79 [0074.149] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e444) returned 1 [0074.149] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\IKQEEPZR\\th[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\ikqeepzr\\th[1].jpg"), fInfoLevelId=0x0, lpFileInformation=0x31e4c0 | out: lpFileInformation=0x31e4c0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x55c14b20, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x55c14b20, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0xfa48b00, ftLastWriteTime.dwHighDateTime=0x1d6eb7f, nFileSizeHigh=0x0, nFileSizeLow=0x920)) returned 1 [0074.149] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e440) returned 1 [0074.149] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\IKQEEPZR\\th[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\ikqeepzr\\th[1].jpg"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\IKQEEPZR\\th[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\ikqeepzr\\th[1].jpg")) returned 1 [0074.150] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e4ec) returned 1 [0074.150] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\YG1R61Z8", nBufferLength=0x105, lpBuffer=0x31dff4, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\YG1R61Z8", lpFilePart=0x0) returned 0x6f [0074.150] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\YG1R61Z8\\", nBufferLength=0x105, lpBuffer=0x31dfc8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\YG1R61Z8\\", lpFilePart=0x0) returned 0x70 [0074.150] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\YG1R61Z8\\*", lpFindFileData=0x31e214 | out: lpFindFileData=0x31e214*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0x4f090c50, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x50fa0830, ftLastAccessTime.dwHighDateTime=0x1d2faf3, ftLastWriteTime.dwLowDateTime=0x50fa0830, ftLastWriteTime.dwHighDateTime=0x1d2faf3, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x382080 [0074.185] FindNextFileW (in: hFindFile=0x382080, lpFindFileData=0x31e224 | out: lpFindFileData=0x31e224*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0x4f090c50, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x50fa0830, ftLastAccessTime.dwHighDateTime=0x1d2faf3, ftLastWriteTime.dwLowDateTime=0x50fa0830, ftLastWriteTime.dwHighDateTime=0x1d2faf3, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0074.421] FindNextFileW (in: hFindFile=0x382080, lpFindFileData=0x31e224 | out: lpFindFileData=0x31e224*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xbe967230, ftCreationTime.dwHighDateTime=0x1d2faf2, ftLastAccessTime.dwLowDateTime=0xbe967230, ftLastAccessTime.dwHighDateTime=0x1d2faf2, ftLastWriteTime.dwLowDateTime=0xbe9b34f0, ftLastWriteTime.dwHighDateTime=0x1d2faf2, nFileSizeHigh=0x0, nFileSizeLow=0x7f7e, dwReserved0=0x0, dwReserved1=0x0, cFileName="0ff92924-f857-491e-a2ee-c0fe20f0d064[1].jpg", cAlternateFileName="0FF929~1.JPG")) returned 1 [0074.422] FindNextFileW (in: hFindFile=0x382080, lpFindFileData=0x31e224 | out: lpFindFileData=0x31e224*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x54a20810, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x54a20810, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x54a46970, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0xc05f, dwReserved0=0x0, dwReserved1=0x0, cFileName="26158[1].png", cAlternateFileName="26158_~1.PNG")) returned 1 [0074.422] FindNextFileW (in: hFindFile=0x382080, lpFindFileData=0x31e224 | out: lpFindFileData=0x31e224*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x458eefb0, ftCreationTime.dwHighDateTime=0x1d2faf3, ftLastAccessTime.dwLowDateTime=0x458eefb0, ftLastAccessTime.dwHighDateTime=0x1d2faf3, ftLastWriteTime.dwLowDateTime=0x458eefb0, ftLastWriteTime.dwHighDateTime=0x1d2faf3, nFileSizeHigh=0x0, nFileSizeLow=0x3e3, dwReserved0=0x0, dwReserved1=0x0, cFileName="AA42x3V[1].png", cAlternateFileName="AA42X3~1.PNG")) returned 1 [0074.422] FindNextFileW (in: hFindFile=0x382080, lpFindFileData=0x31e224 | out: lpFindFileData=0x31e224*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x5341bc90, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x5341bc90, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x5341bc90, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x1d0, dwReserved0=0x0, dwReserved1=0x0, cFileName="AA58NQj[1].png", cAlternateFileName="AA58NQ~1.PNG")) returned 1 [0074.422] FindNextFileW (in: hFindFile=0x382080, lpFindFileData=0x31e224 | out: lpFindFileData=0x31e224*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x515e8570, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x515e8570, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x515e8570, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x1c4, dwReserved0=0x0, dwReserved1=0x0, cFileName="AA61Ofl[1].png", cAlternateFileName="AA61OF~1.PNG")) returned 1 [0074.422] FindNextFileW (in: hFindFile=0x382080, lpFindFileData=0x31e224 | out: lpFindFileData=0x31e224*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x45915110, ftCreationTime.dwHighDateTime=0x1d2faf3, ftLastAccessTime.dwLowDateTime=0x45915110, ftLastAccessTime.dwHighDateTime=0x1d2faf3, ftLastWriteTime.dwLowDateTime=0x45915110, ftLastWriteTime.dwHighDateTime=0x1d2faf3, nFileSizeHigh=0x0, nFileSizeLow=0x2ed, dwReserved0=0x0, dwReserved1=0x0, cFileName="AA6SFRQ[2].png", cAlternateFileName="AA6SFR~2.PNG")) returned 1 [0074.422] FindNextFileW (in: hFindFile=0x382080, lpFindFileData=0x31e224 | out: lpFindFileData=0x31e224*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x4580a770, ftCreationTime.dwHighDateTime=0x1d2faf3, ftLastAccessTime.dwLowDateTime=0x4580a770, ftLastAccessTime.dwHighDateTime=0x1d2faf3, ftLastWriteTime.dwLowDateTime=0x4580a770, ftLastWriteTime.dwHighDateTime=0x1d2faf3, nFileSizeHigh=0x0, nFileSizeLow=0x19e, dwReserved0=0x0, dwReserved1=0x0, cFileName="AAa1vhm[1].png", cAlternateFileName="AAA1VH~1.PNG")) returned 1 [0074.422] FindNextFileW (in: hFindFile=0x382080, lpFindFileData=0x31e224 | out: lpFindFileData=0x31e224*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x53846310, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x53846310, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x53846310, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x2c1, dwReserved0=0x0, dwReserved1=0x0, cFileName="AAa1xJF[1].png", cAlternateFileName="AAA1XJ~1.PNG")) returned 1 [0074.423] FindNextFileW (in: hFindFile=0x382080, lpFindFileData=0x31e224 | out: lpFindFileData=0x31e224*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x5159c2b0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x5159c2b0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x5159c2b0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x7b8, dwReserved0=0x0, dwReserved1=0x0, cFileName="AAlG41q[1].jpg", cAlternateFileName="AALG41~1.JPG")) returned 1 [0074.423] FindNextFileW (in: hFindFile=0x382080, lpFindFileData=0x31e224 | out: lpFindFileData=0x31e224*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x45798350, ftCreationTime.dwHighDateTime=0x1d2faf3, ftLastAccessTime.dwLowDateTime=0x45798350, ftLastAccessTime.dwHighDateTime=0x1d2faf3, ftLastWriteTime.dwLowDateTime=0x45798350, ftLastWriteTime.dwHighDateTime=0x1d2faf3, nFileSizeHigh=0x0, nFileSizeLow=0x157, dwReserved0=0x0, dwReserved1=0x0, cFileName="AAmin0Z[1].png", cAlternateFileName="AAMIN0~1.PNG")) returned 1 [0074.423] FindNextFileW (in: hFindFile=0x382080, lpFindFileData=0x31e224 | out: lpFindFileData=0x31e224*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x533f5b30, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x533f5b30, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x5341bc90, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x36b1, dwReserved0=0x0, dwReserved1=0x0, cFileName="AAnhRyj[1].jpg", cAlternateFileName="AANHRY~1.JPG")) returned 1 [0074.423] FindNextFileW (in: hFindFile=0x382080, lpFindFileData=0x31e224 | out: lpFindFileData=0x31e224*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x64c161a0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x64c161a0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x64e9d900, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x39f, dwReserved0=0x0, dwReserved1=0x0, cFileName="activityi;src=2542116;cat=Chrom00;type=clien612;ord=2366422437621[1].htm", cAlternateFileName="ACTIVI~1.HTM")) returned 1 [0074.423] FindNextFileW (in: hFindFile=0x382080, lpFindFileData=0x31e224 | out: lpFindFileData=0x31e224*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xbf2eca30, ftCreationTime.dwHighDateTime=0x1d2faf2, ftLastAccessTime.dwLowDateTime=0xbf2eca30, ftLastAccessTime.dwHighDateTime=0x1d2faf2, ftLastWriteTime.dwLowDateTime=0xbf312b90, ftLastWriteTime.dwHighDateTime=0x1d2faf2, nFileSizeHigh=0x0, nFileSizeLow=0x91dd, dwReserved0=0x0, dwReserved1=0x0, cFileName="adex[1].js", cAlternateFileName="ADEX_1~1.JS")) returned 1 [0074.423] FindNextFileW (in: hFindFile=0x382080, lpFindFileData=0x31e224 | out: lpFindFileData=0x31e224*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x540e72d0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x540e72d0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x540e72d0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x2874, dwReserved0=0x0, dwReserved1=0x0, cFileName="adfscript[1]", cAlternateFileName="ADFSCR~1")) returned 1 [0074.423] FindNextFileW (in: hFindFile=0x382080, lpFindFileData=0x31e224 | out: lpFindFileData=0x31e224*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xbdb6b0f0, ftCreationTime.dwHighDateTime=0x1d2faf2, ftLastAccessTime.dwLowDateTime=0xbdb6b0f0, ftLastAccessTime.dwHighDateTime=0x1d2faf2, ftLastWriteTime.dwLowDateTime=0xbdb6b0f0, ftLastWriteTime.dwHighDateTime=0x1d2faf2, nFileSizeHigh=0x0, nFileSizeLow=0x525b, dwReserved0=0x0, dwReserved1=0x0, cFileName="adsWrapperMSNI[1].js", cAlternateFileName="ADSWRA~1.JS")) returned 1 [0074.423] FindNextFileW (in: hFindFile=0x382080, lpFindFileData=0x31e224 | out: lpFindFileData=0x31e224*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xbe967230, ftCreationTime.dwHighDateTime=0x1d2faf2, ftLastAccessTime.dwLowDateTime=0xbe967230, ftLastAccessTime.dwHighDateTime=0x1d2faf2, ftLastWriteTime.dwLowDateTime=0xbe9b34f0, ftLastWriteTime.dwHighDateTime=0x1d2faf2, nFileSizeHigh=0x0, nFileSizeLow=0x8217, dwReserved0=0x0, dwReserved1=0x0, cFileName="ae8e984b-1820-4a8d-93dc-392ed6563fb6[1].jpg", cAlternateFileName="AE8E98~1.JPG")) returned 1 [0074.424] FindNextFileW (in: hFindFile=0x382080, lpFindFileData=0x31e224 | out: lpFindFileData=0x31e224*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xbe112530, ftCreationTime.dwHighDateTime=0x1d2faf2, ftLastAccessTime.dwLowDateTime=0xbe112530, ftLastAccessTime.dwHighDateTime=0x1d2faf2, ftLastWriteTime.dwLowDateTime=0xbe15e7f0, ftLastWriteTime.dwHighDateTime=0x1d2faf2, nFileSizeHigh=0x0, nFileSizeLow=0x1183b, dwReserved0=0x0, dwReserved1=0x0, cFileName="ast[1].js", cAlternateFileName="AST_1_~1.JS")) returned 1 [0074.424] FindNextFileW (in: hFindFile=0x382080, lpFindFileData=0x31e224 | out: lpFindFileData=0x31e224*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x58798580, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x58798580, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x58798580, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x13a9, dwReserved0=0x0, dwReserved1=0x0, cFileName="autotrack[1].js", cAlternateFileName="AUTOTR~1.JS")) returned 1 [0074.424] FindNextFileW (in: hFindFile=0x382080, lpFindFileData=0x31e224 | out: lpFindFileData=0x31e224*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x45987530, ftCreationTime.dwHighDateTime=0x1d2faf3, ftLastAccessTime.dwLowDateTime=0x45987530, ftLastAccessTime.dwHighDateTime=0x1d2faf3, ftLastWriteTime.dwLowDateTime=0x45987530, ftLastWriteTime.dwHighDateTime=0x1d2faf3, nFileSizeHigh=0x0, nFileSizeLow=0x145, dwReserved0=0x0, dwReserved1=0x0, cFileName="BB56XTo[1].png", cAlternateFileName="BB56XT~1.PNG")) returned 1 [0074.424] FindNextFileW (in: hFindFile=0x382080, lpFindFileData=0x31e224 | out: lpFindFileData=0x31e224*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x52e28590, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x52e28590, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x52e28590, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x1b6, dwReserved0=0x0, dwReserved1=0x0, cFileName="BB5vO0g[1].png", cAlternateFileName="BB5VO0~1.PNG")) returned 1 [0074.424] FindNextFileW (in: hFindFile=0x382080, lpFindFileData=0x31e224 | out: lpFindFileData=0x31e224*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x456d9c70, ftCreationTime.dwHighDateTime=0x1d2faf3, ftLastAccessTime.dwLowDateTime=0x456d9c70, ftLastAccessTime.dwHighDateTime=0x1d2faf3, ftLastWriteTime.dwLowDateTime=0x456d9c70, ftLastWriteTime.dwHighDateTime=0x1d2faf3, nFileSizeHigh=0x0, nFileSizeLow=0x156, dwReserved0=0x0, dwReserved1=0x0, cFileName="BB8AdqN[1].png", cAlternateFileName="BB8ADQ~1.PNG")) returned 1 [0074.424] FindNextFileW (in: hFindFile=0x382080, lpFindFileData=0x31e224 | out: lpFindFileData=0x31e224*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x45be8b30, ftCreationTime.dwHighDateTime=0x1d2faf3, ftLastAccessTime.dwLowDateTime=0x45be8b30, ftLastAccessTime.dwHighDateTime=0x1d2faf3, ftLastWriteTime.dwLowDateTime=0x45ca7210, ftLastWriteTime.dwHighDateTime=0x1d2faf3, nFileSizeHigh=0x0, nFileSizeLow=0x152c, dwReserved0=0x0, dwReserved1=0x0, cFileName="BBALZyp[1].jpg", cAlternateFileName="BBALZY~1.JPG")) returned 1 [0074.424] FindNextFileW (in: hFindFile=0x382080, lpFindFileData=0x31e224 | out: lpFindFileData=0x31e224*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x5360ae70, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x5360ae70, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x5360ae70, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x97c, dwReserved0=0x0, dwReserved1=0x0, cFileName="BBBImKp[1].jpg", cAlternateFileName="BBBIMK~1.JPG")) returned 1 [0074.424] FindNextFileW (in: hFindFile=0x382080, lpFindFileData=0x31e224 | out: lpFindFileData=0x31e224*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x53598a50, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x53598a50, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x53630fd0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x29ca, dwReserved0=0x0, dwReserved1=0x0, cFileName="BBBMGJo[1].jpg", cAlternateFileName="BBBMGJ~1.JPG")) returned 1 [0074.425] FindNextFileW (in: hFindFile=0x382080, lpFindFileData=0x31e224 | out: lpFindFileData=0x31e224*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x539049f0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x539049f0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x539049f0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x862, dwReserved0=0x0, dwReserved1=0x0, cFileName="BBBMKDF[1].jpg", cAlternateFileName="BBBMKD~1.JPG")) returned 1 [0074.425] FindNextFileW (in: hFindFile=0x382080, lpFindFileData=0x31e224 | out: lpFindFileData=0x31e224*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x53846310, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x53846310, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x53846310, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x142e, dwReserved0=0x0, dwReserved1=0x0, cFileName="BBBMQch[1].jpg", cAlternateFileName="BBBMQC~1.JPG")) returned 1 [0074.425] FindNextFileW (in: hFindFile=0x382080, lpFindFileData=0x31e224 | out: lpFindFileData=0x31e224*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x58321c40, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x58321c40, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x58321c40, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x3e6b, dwReserved0=0x0, dwReserved1=0x0, cFileName="BBBMyVh[1].jpg", cAlternateFileName="BBBMYV~1.JPG")) returned 1 [0074.425] FindNextFileW (in: hFindFile=0x382080, lpFindFileData=0x31e224 | out: lpFindFileData=0x31e224*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x53337450, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x53337450, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x53337450, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x812, dwReserved0=0x0, dwReserved1=0x0, cFileName="BBBNAf7[1].jpg", cAlternateFileName="BBBNAF~1.JPG")) returned 1 [0074.425] FindNextFileW (in: hFindFile=0x382080, lpFindFileData=0x31e224 | out: lpFindFileData=0x31e224*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x533a9870, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x533a9870, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x533a9870, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0xb22, dwReserved0=0x0, dwReserved1=0x0, cFileName="BBBNnTF[1].jpg", cAlternateFileName="BBBNNT~1.JPG")) returned 1 [0074.425] FindNextFileW (in: hFindFile=0x382080, lpFindFileData=0x31e224 | out: lpFindFileData=0x31e224*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x539c30d0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x539c30d0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x539c30d0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x1529, dwReserved0=0x0, dwReserved1=0x0, cFileName="BBBO4dZ[1].jpg", cAlternateFileName="BBBO4D~1.JPG")) returned 1 [0074.427] FindNextFileW (in: hFindFile=0x382080, lpFindFileData=0x31e224 | out: lpFindFileData=0x31e224*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x538b8730, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x538b8730, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x538b8730, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x1e61, dwReserved0=0x0, dwReserved1=0x0, cFileName="BBBO8ow[1].jpg", cAlternateFileName="BBBO8O~1.JPG")) returned 1 [0074.427] FindNextFileW (in: hFindFile=0x382080, lpFindFileData=0x31e224 | out: lpFindFileData=0x31e224*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x532eb190, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x532eb190, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x532eb190, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x636, dwReserved0=0x0, dwReserved1=0x0, cFileName="BBBOaeS[1].jpg", cAlternateFileName="BBBOAE~1.JPG")) returned 1 [0074.427] FindNextFileW (in: hFindFile=0x382080, lpFindFileData=0x31e224 | out: lpFindFileData=0x31e224*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x53278d70, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x53278d70, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x53278d70, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x82a, dwReserved0=0x0, dwReserved1=0x0, cFileName="BBBOcIb[1].jpg", cAlternateFileName="BBBOCI~1.JPG")) returned 1 [0074.427] FindNextFileW (in: hFindFile=0x382080, lpFindFileData=0x31e224 | out: lpFindFileData=0x31e224*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x53b8c150, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x53b8c150, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x53b8c150, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x161e, dwReserved0=0x0, dwReserved1=0x0, cFileName="BBBOddp[1].jpg", cAlternateFileName="BBBODD~1.JPG")) returned 1 [0074.427] FindNextFileW (in: hFindFile=0x382080, lpFindFileData=0x31e224 | out: lpFindFileData=0x31e224*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x6a1fd500, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x6a1fd500, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x6a223660, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x5685, dwReserved0=0x0, dwReserved1=0x0, cFileName="BBBOmar[1].jpg", cAlternateFileName="BBBOMA~1.JPG")) returned 1 [0074.428] FindNextFileW (in: hFindFile=0x382080, lpFindFileData=0x31e224 | out: lpFindFileData=0x31e224*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x52f7f1f0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x52f7f1f0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x52f7f1f0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x2f6b, dwReserved0=0x0, dwReserved1=0x0, cFileName="BBBR4yQ[1].jpg", cAlternateFileName="BBBR4Y~1.JPG")) returned 1 [0074.428] FindNextFileW (in: hFindFile=0x382080, lpFindFileData=0x31e224 | out: lpFindFileData=0x31e224*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x52e4e6f0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x52e4e6f0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x52e4e6f0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x264b, dwReserved0=0x0, dwReserved1=0x0, cFileName="BBBUPaj[1].jpg", cAlternateFileName="BBBUPA~1.JPG")) returned 1 [0074.428] FindNextFileW (in: hFindFile=0x382080, lpFindFileData=0x31e224 | out: lpFindFileData=0x31e224*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x5e275160, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x5e275160, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x5e275160, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x3e08, dwReserved0=0x0, dwReserved1=0x0, cFileName="BBBVEOW[1].jpg", cAlternateFileName="BBBVEO~1.JPG")) returned 1 [0074.428] FindNextFileW (in: hFindFile=0x382080, lpFindFileData=0x31e224 | out: lpFindFileData=0x31e224*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x52f32f30, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x52f32f30, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x52f32f30, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0xa1f, dwReserved0=0x0, dwReserved1=0x0, cFileName="BBBVLcG[1].jpg", cAlternateFileName="BBBVLC~1.JPG")) returned 1 [0074.428] FindNextFileW (in: hFindFile=0x382080, lpFindFileData=0x31e224 | out: lpFindFileData=0x31e224*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x530afcf0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x530afcf0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x530afcf0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x82d, dwReserved0=0x0, dwReserved1=0x0, cFileName="BBBVSkP[1].jpg", cAlternateFileName="BBBVSK~1.JPG")) returned 1 [0074.428] FindNextFileW (in: hFindFile=0x382080, lpFindFileData=0x31e224 | out: lpFindFileData=0x31e224*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x612a8ee0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x612a8ee0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x612a8ee0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x16f5, dwReserved0=0x0, dwReserved1=0x0, cFileName="BBBYfEH[1].jpg", cAlternateFileName="BBBYFE~1.JPG")) returned 1 [0074.428] FindNextFileW (in: hFindFile=0x382080, lpFindFileData=0x31e224 | out: lpFindFileData=0x31e224*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x53017770, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x53017770, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x53017770, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0xc20, dwReserved0=0x0, dwReserved1=0x0, cFileName="BBBZ5vT[1].jpg", cAlternateFileName="BBBZ5V~1.JPG")) returned 1 [0074.428] FindNextFileW (in: hFindFile=0x382080, lpFindFileData=0x31e224 | out: lpFindFileData=0x31e224*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x514ddbd0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x514ddbd0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x514ddbd0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x86e, dwReserved0=0x0, dwReserved1=0x0, cFileName="BBC02Gr[1].jpg", cAlternateFileName="BBC02G~1.JPG")) returned 1 [0074.429] FindNextFileW (in: hFindFile=0x382080, lpFindFileData=0x31e224 | out: lpFindFileData=0x31e224*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x5392ab50, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x5392ab50, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x5392ab50, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x86e, dwReserved0=0x0, dwReserved1=0x0, cFileName="BBC02Gr[2].jpg", cAlternateFileName="BBC02G~2.JPG")) returned 1 [0074.429] FindNextFileW (in: hFindFile=0x382080, lpFindFileData=0x31e224 | out: lpFindFileData=0x31e224*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x52fa5350, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x52fa5350, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x52fa5350, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x89a, dwReserved0=0x0, dwReserved1=0x0, cFileName="BBC03B1[1].jpg", cAlternateFileName="BBC03B~1.JPG")) returned 1 [0074.429] FindNextFileW (in: hFindFile=0x382080, lpFindFileData=0x31e224 | out: lpFindFileData=0x31e224*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x52f0cdd0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x52f0cdd0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x52f0cdd0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x7bb, dwReserved0=0x0, dwReserved1=0x0, cFileName="BBC06Ub[1].jpg", cAlternateFileName="BBC06U~1.JPG")) returned 1 [0074.429] FindNextFileW (in: hFindFile=0x382080, lpFindFileData=0x31e224 | out: lpFindFileData=0x31e224*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x52e74850, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x52e74850, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x52e74850, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x9ab, dwReserved0=0x0, dwReserved1=0x0, cFileName="BBC0Djg[1].jpg", cAlternateFileName="BBC0DJ~1.JPG")) returned 1 [0074.429] FindNextFileW (in: hFindFile=0x382080, lpFindFileData=0x31e224 | out: lpFindFileData=0x31e224*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x52ec0b10, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x52ec0b10, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x52ec0b10, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x7fd, dwReserved0=0x0, dwReserved1=0x0, cFileName="BBC0g7a[1].jpg", cAlternateFileName="BBC0G7~1.JPG")) returned 1 [0074.429] FindNextFileW (in: hFindFile=0x382080, lpFindFileData=0x31e224 | out: lpFindFileData=0x31e224*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x52fcb4b0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x52fcb4b0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x52fcb4b0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x82f, dwReserved0=0x0, dwReserved1=0x0, cFileName="BBC0lf2[1].jpg", cAlternateFileName="BBC0LF~1.JPG")) returned 1 [0074.429] FindNextFileW (in: hFindFile=0x382080, lpFindFileData=0x31e224 | out: lpFindFileData=0x31e224*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x5b2e35a0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x5b2e35a0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x5b2e35a0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x1afe, dwReserved0=0x0, dwReserved1=0x0, cFileName="BBC0mK1[1].jpg", cAlternateFileName="BBC0MK~1.JPG")) returned 1 [0074.429] FindNextFileW (in: hFindFile=0x382080, lpFindFileData=0x31e224 | out: lpFindFileData=0x31e224*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x53089b90, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x53089b90, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x53089b90, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x1fc3, dwReserved0=0x0, dwReserved1=0x0, cFileName="BBC0qlB[1].jpg", cAlternateFileName="BBC0QL~1.JPG")) returned 1 [0074.430] FindNextFileW (in: hFindFile=0x382080, lpFindFileData=0x31e224 | out: lpFindFileData=0x31e224*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x458308d0, ftCreationTime.dwHighDateTime=0x1d2faf3, ftLastAccessTime.dwLowDateTime=0x458308d0, ftLastAccessTime.dwHighDateTime=0x1d2faf3, ftLastWriteTime.dwLowDateTime=0x458308d0, ftLastWriteTime.dwHighDateTime=0x1d2faf3, nFileSizeHigh=0x0, nFileSizeLow=0x2ecb, dwReserved0=0x0, dwReserved1=0x0, cFileName="BBE7KPZ[1].jpg", cAlternateFileName="BBE7KP~1.JPG")) returned 1 [0074.430] FindNextFileW (in: hFindFile=0x382080, lpFindFileData=0x31e224 | out: lpFindFileData=0x31e224*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x45a6bd70, ftCreationTime.dwHighDateTime=0x1d2faf3, ftLastAccessTime.dwLowDateTime=0x45a6bd70, ftLastAccessTime.dwHighDateTime=0x1d2faf3, ftLastWriteTime.dwLowDateTime=0x45a6bd70, ftLastWriteTime.dwHighDateTime=0x1d2faf3, nFileSizeHigh=0x0, nFileSizeLow=0x9c5, dwReserved0=0x0, dwReserved1=0x0, cFileName="BBE8IlA[1].jpg", cAlternateFileName="BBE8IL~1.JPG")) returned 1 [0074.430] FindNextFileW (in: hFindFile=0x382080, lpFindFileData=0x31e224 | out: lpFindFileData=0x31e224*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x45b9c870, ftCreationTime.dwHighDateTime=0x1d2faf3, ftLastAccessTime.dwLowDateTime=0x45b9c870, ftLastAccessTime.dwHighDateTime=0x1d2faf3, ftLastWriteTime.dwLowDateTime=0x45b9c870, ftLastWriteTime.dwHighDateTime=0x1d2faf3, nFileSizeHigh=0x0, nFileSizeLow=0x2669, dwReserved0=0x0, dwReserved1=0x0, cFileName="BBE972F[1].jpg", cAlternateFileName="BBE972~1.JPG")) returned 1 [0074.430] FindNextFileW (in: hFindFile=0x382080, lpFindFileData=0x31e224 | out: lpFindFileData=0x31e224*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x458308d0, ftCreationTime.dwHighDateTime=0x1d2faf3, ftLastAccessTime.dwLowDateTime=0x458308d0, ftLastAccessTime.dwHighDateTime=0x1d2faf3, ftLastWriteTime.dwLowDateTime=0x458308d0, ftLastWriteTime.dwHighDateTime=0x1d2faf3, nFileSizeHigh=0x0, nFileSizeLow=0x2a77, dwReserved0=0x0, dwReserved1=0x0, cFileName="BBE9tdx[1].jpg", cAlternateFileName="BBE9TD~1.JPG")) returned 1 [0074.430] FindNextFileW (in: hFindFile=0x382080, lpFindFileData=0x31e224 | out: lpFindFileData=0x31e224*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x458a2cf0, ftCreationTime.dwHighDateTime=0x1d2faf3, ftLastAccessTime.dwLowDateTime=0x458a2cf0, ftLastAccessTime.dwHighDateTime=0x1d2faf3, ftLastWriteTime.dwLowDateTime=0x458a2cf0, ftLastWriteTime.dwHighDateTime=0x1d2faf3, nFileSizeHigh=0x0, nFileSizeLow=0x2fe3, dwReserved0=0x0, dwReserved1=0x0, cFileName="BBEdrqt[1].jpg", cAlternateFileName="BBEDRQ~1.JPG")) returned 1 [0074.430] FindNextFileW (in: hFindFile=0x382080, lpFindFileData=0x31e224 | out: lpFindFileData=0x31e224*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x459ad690, ftCreationTime.dwHighDateTime=0x1d2faf3, ftLastAccessTime.dwLowDateTime=0x459ad690, ftLastAccessTime.dwHighDateTime=0x1d2faf3, ftLastWriteTime.dwLowDateTime=0x459ad690, ftLastWriteTime.dwHighDateTime=0x1d2faf3, nFileSizeHigh=0x0, nFileSizeLow=0x857, dwReserved0=0x0, dwReserved1=0x0, cFileName="BBEeEwt[1].jpg", cAlternateFileName="BBEEEW~1.JPG")) returned 1 [0074.430] FindNextFileW (in: hFindFile=0x382080, lpFindFileData=0x31e224 | out: lpFindFileData=0x31e224*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x4593b270, ftCreationTime.dwHighDateTime=0x1d2faf3, ftLastAccessTime.dwLowDateTime=0x4593b270, ftLastAccessTime.dwHighDateTime=0x1d2faf3, ftLastWriteTime.dwLowDateTime=0x4593b270, ftLastWriteTime.dwHighDateTime=0x1d2faf3, nFileSizeHigh=0x0, nFileSizeLow=0x7d9, dwReserved0=0x0, dwReserved1=0x0, cFileName="BBEeis3[1].jpg", cAlternateFileName="BBEEIS~1.JPG")) returned 1 [0074.430] FindNextFileW (in: hFindFile=0x382080, lpFindFileData=0x31e224 | out: lpFindFileData=0x31e224*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x45a1fab0, ftCreationTime.dwHighDateTime=0x1d2faf3, ftLastAccessTime.dwLowDateTime=0x45a1fab0, ftLastAccessTime.dwHighDateTime=0x1d2faf3, ftLastWriteTime.dwLowDateTime=0x45a1fab0, ftLastWriteTime.dwHighDateTime=0x1d2faf3, nFileSizeHigh=0x0, nFileSizeLow=0x8c5, dwReserved0=0x0, dwReserved1=0x0, cFileName="BBEeKvV[1].jpg", cAlternateFileName="BBEEKV~1.JPG")) returned 1 [0074.431] FindNextFileW (in: hFindFile=0x382080, lpFindFileData=0x31e224 | out: lpFindFileData=0x31e224*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x45a91ed0, ftCreationTime.dwHighDateTime=0x1d2faf3, ftLastAccessTime.dwLowDateTime=0x45a91ed0, ftLastAccessTime.dwHighDateTime=0x1d2faf3, ftLastWriteTime.dwLowDateTime=0x45ab8030, ftLastWriteTime.dwHighDateTime=0x1d2faf3, nFileSizeHigh=0x0, nFileSizeLow=0xef00, dwReserved0=0x0, dwReserved1=0x0, cFileName="BBEeNd8[1].png", cAlternateFileName="BBEEND~1.PNG")) returned 1 [0074.431] FindNextFileW (in: hFindFile=0x382080, lpFindFileData=0x31e224 | out: lpFindFileData=0x31e224*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x45ab8030, ftCreationTime.dwHighDateTime=0x1d2faf3, ftLastAccessTime.dwLowDateTime=0x45ab8030, ftLastAccessTime.dwHighDateTime=0x1d2faf3, ftLastWriteTime.dwLowDateTime=0x45ab8030, ftLastWriteTime.dwHighDateTime=0x1d2faf3, nFileSizeHigh=0x0, nFileSizeLow=0x3323, dwReserved0=0x0, dwReserved1=0x0, cFileName="BBEewZB[1].jpg", cAlternateFileName="BBEEWZ~1.JPG")) returned 1 [0074.431] FindNextFileW (in: hFindFile=0x382080, lpFindFileData=0x31e224 | out: lpFindFileData=0x31e224*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x459613d0, ftCreationTime.dwHighDateTime=0x1d2faf3, ftLastAccessTime.dwLowDateTime=0x459613d0, ftLastAccessTime.dwHighDateTime=0x1d2faf3, ftLastWriteTime.dwLowDateTime=0x45987530, ftLastWriteTime.dwHighDateTime=0x1d2faf3, nFileSizeHigh=0x0, nFileSizeLow=0x9d7, dwReserved0=0x0, dwReserved1=0x0, cFileName="BBEeZ0k[1].jpg", cAlternateFileName="BBEEZ0~1.JPG")) returned 1 [0074.462] FindNextFileW (in: hFindFile=0x382080, lpFindFileData=0x31e224 | out: lpFindFileData=0x31e224*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x45b042f0, ftCreationTime.dwHighDateTime=0x1d2faf3, ftLastAccessTime.dwLowDateTime=0x45b042f0, ftLastAccessTime.dwHighDateTime=0x1d2faf3, ftLastWriteTime.dwLowDateTime=0x45b042f0, ftLastWriteTime.dwHighDateTime=0x1d2faf3, nFileSizeHigh=0x0, nFileSizeLow=0x2d32, dwReserved0=0x0, dwReserved1=0x0, cFileName="BBEf6s4[1].jpg", cAlternateFileName="BBEF6S~1.JPG")) returned 1 [0074.462] FindNextFileW (in: hFindFile=0x382080, lpFindFileData=0x31e224 | out: lpFindFileData=0x31e224*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x45b2a450, ftCreationTime.dwHighDateTime=0x1d2faf3, ftLastAccessTime.dwLowDateTime=0x45b2a450, ftLastAccessTime.dwHighDateTime=0x1d2faf3, ftLastWriteTime.dwLowDateTime=0x45b2a450, ftLastWriteTime.dwHighDateTime=0x1d2faf3, nFileSizeHigh=0x0, nFileSizeLow=0x85d, dwReserved0=0x0, dwReserved1=0x0, cFileName="BBEfAc5[1].jpg", cAlternateFileName="BBEFAC~1.JPG")) returned 1 [0074.462] FindNextFileW (in: hFindFile=0x382080, lpFindFileData=0x31e224 | out: lpFindFileData=0x31e224*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x45510bf0, ftCreationTime.dwHighDateTime=0x1d2faf3, ftLastAccessTime.dwLowDateTime=0x45510bf0, ftLastAccessTime.dwHighDateTime=0x1d2faf3, ftLastWriteTime.dwLowDateTime=0x45510bf0, ftLastWriteTime.dwHighDateTime=0x1d2faf3, nFileSizeHigh=0x0, nFileSizeLow=0x197c, dwReserved0=0x0, dwReserved1=0x0, cFileName="BBEfgDi[1].jpg", cAlternateFileName="BBEFGD~1.JPG")) returned 1 [0074.462] FindNextFileW (in: hFindFile=0x382080, lpFindFileData=0x31e224 | out: lpFindFileData=0x31e224*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x456d9c70, ftCreationTime.dwHighDateTime=0x1d2faf3, ftLastAccessTime.dwLowDateTime=0x456d9c70, ftLastAccessTime.dwHighDateTime=0x1d2faf3, ftLastWriteTime.dwLowDateTime=0x456d9c70, ftLastWriteTime.dwHighDateTime=0x1d2faf3, nFileSizeHigh=0x0, nFileSizeLow=0xb7e, dwReserved0=0x0, dwReserved1=0x0, cFileName="BBEfjuT[1].jpg", cAlternateFileName="BBEFJU~1.JPG")) returned 1 [0074.462] FindNextFileW (in: hFindFile=0x382080, lpFindFileData=0x31e224 | out: lpFindFileData=0x31e224*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x457be4b0, ftCreationTime.dwHighDateTime=0x1d2faf3, ftLastAccessTime.dwLowDateTime=0x457be4b0, ftLastAccessTime.dwHighDateTime=0x1d2faf3, ftLastWriteTime.dwLowDateTime=0x457be4b0, ftLastWriteTime.dwHighDateTime=0x1d2faf3, nFileSizeHigh=0x0, nFileSizeLow=0x1b14, dwReserved0=0x0, dwReserved1=0x0, cFileName="BBEfkgi[1].jpg", cAlternateFileName="BBEFKG~1.JPG")) returned 1 [0074.462] FindNextFileW (in: hFindFile=0x382080, lpFindFileData=0x31e224 | out: lpFindFileData=0x31e224*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x45915110, ftCreationTime.dwHighDateTime=0x1d2faf3, ftLastAccessTime.dwLowDateTime=0x45915110, ftLastAccessTime.dwHighDateTime=0x1d2faf3, ftLastWriteTime.dwLowDateTime=0x45915110, ftLastWriteTime.dwHighDateTime=0x1d2faf3, nFileSizeHigh=0x0, nFileSizeLow=0x2978, dwReserved0=0x0, dwReserved1=0x0, cFileName="BBEfRKA[1].jpg", cAlternateFileName="BBEFRK~1.JPG")) returned 1 [0074.463] FindNextFileW (in: hFindFile=0x382080, lpFindFileData=0x31e224 | out: lpFindFileData=0x31e224*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x4574c090, ftCreationTime.dwHighDateTime=0x1d2faf3, ftLastAccessTime.dwLowDateTime=0x4574c090, ftLastAccessTime.dwHighDateTime=0x1d2faf3, ftLastWriteTime.dwLowDateTime=0x457721f0, ftLastWriteTime.dwHighDateTime=0x1d2faf3, nFileSizeHigh=0x0, nFileSizeLow=0x2b6c, dwReserved0=0x0, dwReserved1=0x0, cFileName="BBEfRwv[1].jpg", cAlternateFileName="BBEFRW~1.JPG")) returned 1 [0074.463] FindNextFileW (in: hFindFile=0x382080, lpFindFileData=0x31e224 | out: lpFindFileData=0x31e224*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x45478670, ftCreationTime.dwHighDateTime=0x1d2faf3, ftLastAccessTime.dwLowDateTime=0x45478670, ftLastAccessTime.dwHighDateTime=0x1d2faf3, ftLastWriteTime.dwLowDateTime=0x45478670, ftLastWriteTime.dwHighDateTime=0x1d2faf3, nFileSizeHigh=0x0, nFileSizeLow=0x2676, dwReserved0=0x0, dwReserved1=0x0, cFileName="BBEfwtU[1].jpg", cAlternateFileName="BBEFWT~1.JPG")) returned 1 [0074.463] FindNextFileW (in: hFindFile=0x382080, lpFindFileData=0x31e224 | out: lpFindFileData=0x31e224*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x45856a30, ftCreationTime.dwHighDateTime=0x1d2faf3, ftLastAccessTime.dwLowDateTime=0x45856a30, ftLastAccessTime.dwHighDateTime=0x1d2faf3, ftLastWriteTime.dwLowDateTime=0x45856a30, ftLastWriteTime.dwHighDateTime=0x1d2faf3, nFileSizeHigh=0x0, nFileSizeLow=0xb41, dwReserved0=0x0, dwReserved1=0x0, cFileName="BBEfY4X[1].jpg", cAlternateFileName="BBEFY4~1.JPG")) returned 1 [0074.463] FindNextFileW (in: hFindFile=0x382080, lpFindFileData=0x31e224 | out: lpFindFileData=0x31e224*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x45725f30, ftCreationTime.dwHighDateTime=0x1d2faf3, ftLastAccessTime.dwLowDateTime=0x45725f30, ftLastAccessTime.dwHighDateTime=0x1d2faf3, ftLastWriteTime.dwLowDateTime=0x45725f30, ftLastWriteTime.dwHighDateTime=0x1d2faf3, nFileSizeHigh=0x0, nFileSizeLow=0x25f6, dwReserved0=0x0, dwReserved1=0x0, cFileName="BBEgD9f[1].jpg", cAlternateFileName="BBEGD9~1.JPG")) returned 1 [0074.463] FindNextFileW (in: hFindFile=0x382080, lpFindFileData=0x31e224 | out: lpFindFileData=0x31e224*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x45ab8030, ftCreationTime.dwHighDateTime=0x1d2faf3, ftLastAccessTime.dwLowDateTime=0x45ab8030, ftLastAccessTime.dwHighDateTime=0x1d2faf3, ftLastWriteTime.dwLowDateTime=0x45ab8030, ftLastWriteTime.dwHighDateTime=0x1d2faf3, nFileSizeHigh=0x0, nFileSizeLow=0x819, dwReserved0=0x0, dwReserved1=0x0, cFileName="BBEgJfz[1].jpg", cAlternateFileName="BBEGJF~1.JPG")) returned 1 [0074.463] FindNextFileW (in: hFindFile=0x382080, lpFindFileData=0x31e224 | out: lpFindFileData=0x31e224*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x45b2a450, ftCreationTime.dwHighDateTime=0x1d2faf3, ftLastAccessTime.dwLowDateTime=0x45b2a450, ftLastAccessTime.dwHighDateTime=0x1d2faf3, ftLastWriteTime.dwLowDateTime=0x45b2a450, ftLastWriteTime.dwHighDateTime=0x1d2faf3, nFileSizeHigh=0x0, nFileSizeLow=0x916, dwReserved0=0x0, dwReserved1=0x0, cFileName="BBEgsWA[1].jpg", cAlternateFileName="BBEGSW~1.JPG")) returned 1 [0074.463] FindNextFileW (in: hFindFile=0x382080, lpFindFileData=0x31e224 | out: lpFindFileData=0x31e224*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x45725f30, ftCreationTime.dwHighDateTime=0x1d2faf3, ftLastAccessTime.dwLowDateTime=0x45725f30, ftLastAccessTime.dwHighDateTime=0x1d2faf3, ftLastWriteTime.dwLowDateTime=0x45725f30, ftLastWriteTime.dwHighDateTime=0x1d2faf3, nFileSizeHigh=0x0, nFileSizeLow=0x918, dwReserved0=0x0, dwReserved1=0x0, cFileName="BBEgX5G[1].jpg", cAlternateFileName="BBEGX5~1.JPG")) returned 1 [0074.464] FindNextFileW (in: hFindFile=0x382080, lpFindFileData=0x31e224 | out: lpFindFileData=0x31e224*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x51256470, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x51256470, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x51256470, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x3a2, dwReserved0=0x0, dwReserved1=0x0, cFileName="BBih5H[1].png", cAlternateFileName="BBIH5H~1.PNG")) returned 1 [0074.464] FindNextFileW (in: hFindFile=0x382080, lpFindFileData=0x31e224 | out: lpFindFileData=0x31e224*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xbe4ca790, ftCreationTime.dwHighDateTime=0x1d2faf2, ftLastAccessTime.dwLowDateTime=0xbe4ca790, ftLastAccessTime.dwHighDateTime=0x1d2faf2, ftLastWriteTime.dwLowDateTime=0xbe4ca790, ftLastWriteTime.dwHighDateTime=0x1d2faf2, nFileSizeHigh=0x0, nFileSizeLow=0x24c, dwReserved0=0x0, dwReserved1=0x0, cFileName="BBmUxRK[1].png", cAlternateFileName="BBMUXR~1.PNG")) returned 1 [0074.464] FindNextFileW (in: hFindFile=0x382080, lpFindFileData=0x31e224 | out: lpFindFileData=0x31e224*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x459f9950, ftCreationTime.dwHighDateTime=0x1d2faf3, ftLastAccessTime.dwLowDateTime=0x459f9950, ftLastAccessTime.dwHighDateTime=0x1d2faf3, ftLastWriteTime.dwLowDateTime=0x459f9950, ftLastWriteTime.dwHighDateTime=0x1d2faf3, nFileSizeHigh=0x0, nFileSizeLow=0x398, dwReserved0=0x0, dwReserved1=0x0, cFileName="BBndhJA[1].png", cAlternateFileName="BBNDHJ~1.PNG")) returned 1 [0074.464] FindNextFileW (in: hFindFile=0x382080, lpFindFileData=0x31e224 | out: lpFindFileData=0x31e224*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x458c8e50, ftCreationTime.dwHighDateTime=0x1d2faf3, ftLastAccessTime.dwLowDateTime=0x458c8e50, ftLastAccessTime.dwHighDateTime=0x1d2faf3, ftLastWriteTime.dwLowDateTime=0x458c8e50, ftLastWriteTime.dwHighDateTime=0x1d2faf3, nFileSizeHigh=0x0, nFileSizeLow=0x230, dwReserved0=0x0, dwReserved1=0x0, cFileName="BBoqF0J[1].png", cAlternateFileName="BBOQF0~1.PNG")) returned 1 [0074.464] FindNextFileW (in: hFindFile=0x382080, lpFindFileData=0x31e224 | out: lpFindFileData=0x31e224*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x53063a30, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x53063a30, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x53063a30, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x116, dwReserved0=0x0, dwReserved1=0x0, cFileName="BBzjV9E[1].png", cAlternateFileName="BBZJV9~1.PNG")) returned 1 [0074.464] FindNextFileW (in: hFindFile=0x382080, lpFindFileData=0x31e224 | out: lpFindFileData=0x31e224*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x60cdb940, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x60cdb940, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x60d4dd60, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x1fdaf, dwReserved0=0x0, dwReserved1=0x0, cFileName="benefits-1[1].jpg", cAlternateFileName="BENEFI~1.JPG")) returned 1 [0074.464] FindNextFileW (in: hFindFile=0x382080, lpFindFileData=0x31e224 | out: lpFindFileData=0x31e224*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x6157c900, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x6157c900, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x615c8bc0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x12282, dwReserved0=0x0, dwReserved1=0x0, cFileName="cb=gapi[1].loaded_1", cAlternateFileName="CB_GAP~1.LOA")) returned 1 [0074.464] FindNextFileW (in: hFindFile=0x382080, lpFindFileData=0x31e224 | out: lpFindFileData=0x31e224*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x50fa0830, ftCreationTime.dwHighDateTime=0x1d2faf3, ftLastAccessTime.dwLowDateTime=0x50fa0830, ftLastAccessTime.dwHighDateTime=0x1d2faf3, ftLastWriteTime.dwLowDateTime=0x50fa0830, ftLastWriteTime.dwHighDateTime=0x1d2faf3, nFileSizeHigh=0x0, nFileSizeLow=0x82d8, dwReserved0=0x0, dwReserved1=0x0, cFileName="chartbeat[1].js", cAlternateFileName="CHARTB~1.JS")) returned 1 [0074.465] FindNextFileW (in: hFindFile=0x382080, lpFindFileData=0x31e224 | out: lpFindFileData=0x31e224*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x60c8f680, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x60c8f680, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x60d01aa0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x3bf20, dwReserved0=0x0, dwReserved1=0x0, cFileName="chrome-installer.min[1].js", cAlternateFileName="CHROME~1.JS")) returned 1 [0074.465] FindNextFileW (in: hFindFile=0x382080, lpFindFileData=0x31e224 | out: lpFindFileData=0x31e224*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x60aec760, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x60aec760, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x60aec760, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x1622, dwReserved0=0x0, dwReserved1=0x0, cFileName="chrome_logo_2x[1].png", cAlternateFileName="CHROME~1.PNG")) returned 1 [0074.465] FindNextFileW (in: hFindFile=0x382080, lpFindFileData=0x31e224 | out: lpFindFileData=0x31e224*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x610b9d00, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x610b9d00, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x610b9d00, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x13d, dwReserved0=0x0, dwReserved1=0x0, cFileName="close-icon[1].png", cAlternateFileName="CLOSE-~1.PNG")) returned 1 [0074.465] FindNextFileW (in: hFindFile=0x382080, lpFindFileData=0x31e224 | out: lpFindFileData=0x31e224*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x54e4ae90, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x54e4ae90, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x54e4ae90, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x269b2, dwReserved0=0x0, dwReserved1=0x0, cFileName="css[1].txt", cAlternateFileName="CSS_1_~1.TXT")) returned 1 [0074.465] FindNextFileW (in: hFindFile=0x382080, lpFindFileData=0x31e224 | out: lpFindFileData=0x31e224*(dwFileAttributes=0x2006, ftCreationTime.dwLowDateTime=0x4f090c50, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x4f090c50, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x4f090c50, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x43, dwReserved0=0x0, dwReserved1=0x0, cFileName="desktop.ini", cAlternateFileName="")) returned 1 [0074.465] FindNextFileW (in: hFindFile=0x382080, lpFindFileData=0x31e224 | out: lpFindFileData=0x31e224*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xbf7af630, ftCreationTime.dwHighDateTime=0x1d2faf2, ftLastAccessTime.dwLowDateTime=0xbf7af630, ftLastAccessTime.dwHighDateTime=0x1d2faf2, ftLastWriteTime.dwLowDateTime=0xbf821a50, ftLastWriteTime.dwHighDateTime=0x1d2faf2, nFileSizeHigh=0x0, nFileSizeLow=0x4d5b9, dwReserved0=0x0, dwReserved1=0x0, cFileName="ebHtml5Banner[1].js", cAlternateFileName="EBHTML~1.JS")) returned 1 [0074.465] FindNextFileW (in: hFindFile=0x382080, lpFindFileData=0x31e224 | out: lpFindFileData=0x31e224*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x64009240, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x64009240, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x6402f3a0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x5244, dwReserved0=0x0, dwReserved1=0x0, cFileName="eula-win[1].jpg", cAlternateFileName="EULA-W~1.JPG")) returned 1 [0074.465] FindNextFileW (in: hFindFile=0x382080, lpFindFileData=0x31e224 | out: lpFindFileData=0x31e224*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xbe15e7f0, ftCreationTime.dwHighDateTime=0x1d2faf2, ftLastAccessTime.dwLowDateTime=0xbe15e7f0, ftLastAccessTime.dwHighDateTime=0x1d2faf2, ftLastWriteTime.dwLowDateTime=0xbe15e7f0, ftLastWriteTime.dwHighDateTime=0x1d2faf2, nFileSizeHigh=0x0, nFileSizeLow=0x1303, dwReserved0=0x0, dwReserved1=0x0, cFileName="getype=homepage;kvpg=msn%2Fde-de;kvugc=0;kvmn=MSNDEDE1B;kvgrp=852361999;kvismob=2;extmirroring=0;kvtile=3;target=_blank;aduho=600;grp=852361999[1]", cAlternateFileName="GETYPE~3")) returned 1 [0074.466] FindNextFileW (in: hFindFile=0x382080, lpFindFileData=0x31e224 | out: lpFindFileData=0x31e224*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x530afcf0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x530afcf0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x530afcf0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x8c3, dwReserved0=0x0, dwReserved1=0x0, cFileName="getype=homepage;kvpg=msn%2Fde-de;kvugc=0;kvmn=MSNDEDE1C;kvgrp=627518548;kvismob=2;extmirroring=0;kvtile=4;target=_blank;aduho=600;grp=627518548[1]", cAlternateFileName="GETYPE~1")) returned 1 [0074.466] FindNextFileW (in: hFindFile=0x382080, lpFindFileData=0x31e224 | out: lpFindFileData=0x31e224*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xbe138690, ftCreationTime.dwHighDateTime=0x1d2faf2, ftLastAccessTime.dwLowDateTime=0xbe138690, ftLastAccessTime.dwHighDateTime=0x1d2faf2, ftLastWriteTime.dwLowDateTime=0xbe138690, ftLastWriteTime.dwHighDateTime=0x1d2faf2, nFileSizeHigh=0x0, nFileSizeLow=0x972, dwReserved0=0x0, dwReserved1=0x0, cFileName="getype=homepage;kvpg=msn%2Fde-de;kvugc=0;kvmn=MSNDEDE1C;kvgrp=852361999;kvismob=2;extmirroring=0;kvtile=4;target=_blank;aduho=600;grp=852361999[1]", cAlternateFileName="GETYPE~2")) returned 1 [0074.467] FindNextFileW (in: hFindFile=0x382080, lpFindFileData=0x31e224 | out: lpFindFileData=0x31e224*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x510ff810, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x510ff810, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x51125970, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x1762e, dwReserved0=0x0, dwReserved1=0x0, cFileName="jquery-1.11.1.min[1].js", cAlternateFileName="JQUERY~1.JS")) returned 1 [0074.467] FindNextFileW (in: hFindFile=0x382080, lpFindFileData=0x31e224 | out: lpFindFileData=0x31e224*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x5442d110, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x5442d110, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x5442d110, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x4b8, dwReserved0=0x0, dwReserved1=0x0, cFileName="js[1]", cAlternateFileName="JS_1_~1")) returned 1 [0074.467] FindNextFileW (in: hFindFile=0x382080, lpFindFileData=0x31e224 | out: lpFindFileData=0x31e224*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x44bd95f0, ftCreationTime.dwHighDateTime=0x1d2faf3, ftLastAccessTime.dwLowDateTime=0x44bd95f0, ftLastAccessTime.dwHighDateTime=0x1d2faf3, ftLastWriteTime.dwLowDateTime=0x44bd95f0, ftLastWriteTime.dwHighDateTime=0x1d2faf3, nFileSizeHigh=0x0, nFileSizeLow=0x3c1, dwReserved0=0x0, dwReserved1=0x0, cFileName="js[2]", cAlternateFileName="JS_2_~1")) returned 1 [0074.467] FindNextFileW (in: hFindFile=0x382080, lpFindFileData=0x31e224 | out: lpFindFileData=0x31e224*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x54d66650, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x54d66650, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x54e70ff0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x7154, dwReserved0=0x0, dwReserved1=0x0, cFileName="latest[1].eot", cAlternateFileName="LATEST~1.EOT")) returned 1 [0074.467] FindNextFileW (in: hFindFile=0x382080, lpFindFileData=0x31e224 | out: lpFindFileData=0x31e224*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x54d8c7b0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x54d8c7b0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x54e97150, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x6e9b, dwReserved0=0x0, dwReserved1=0x0, cFileName="latest[2].eot", cAlternateFileName="LATEST~2.EOT")) returned 1 [0074.467] FindNextFileW (in: hFindFile=0x382080, lpFindFileData=0x31e224 | out: lpFindFileData=0x31e224*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x54d8c7b0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x54d8c7b0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x54e97150, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x77b3, dwReserved0=0x0, dwReserved1=0x0, cFileName="latest[3].eot", cAlternateFileName="LATEST~3.EOT")) returned 1 [0074.467] FindNextFileW (in: hFindFile=0x382080, lpFindFileData=0x31e224 | out: lpFindFileData=0x31e224*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x52e4e6f0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x52e4e6f0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x53122110, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x922, dwReserved0=0x0, dwReserved1=0x0, cFileName="msn[1].htm", cAlternateFileName="MSN_1_~1.HTM")) returned 1 [0074.467] FindNextFileW (in: hFindFile=0x382080, lpFindFileData=0x31e224 | out: lpFindFileData=0x31e224*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x6378e3e0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x6378e3e0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x637b4540, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x3112, dwReserved0=0x0, dwReserved1=0x0, cFileName="rpc_shindig_random[1].js", cAlternateFileName="RPC_SH~1.JS")) returned 1 [0074.468] FindNextFileW (in: hFindFile=0x382080, lpFindFileData=0x31e224 | out: lpFindFileData=0x31e224*(dwFileAttributes=0x2000, ftCreationTime.dwLowDateTime=0xbf7d5790, ftCreationTime.dwHighDateTime=0x1d2faf2, ftLastAccessTime.dwLowDateTime=0xbf7d5790, ftLastAccessTime.dwHighDateTime=0x1d2faf2, ftLastWriteTime.dwLowDateTime=0xbf7d5790, ftLastWriteTime.dwHighDateTime=0x1d2faf2, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="thirdparty[1]", cAlternateFileName="THIRDP~1")) returned 1 [0074.468] FindNextFileW (in: hFindFile=0x382080, lpFindFileData=0x31e224 | out: lpFindFileData=0x31e224*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x54a20810, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x54a20810, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x54adeef0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0xa33, dwReserved0=0x0, dwReserved1=0x0, cFileName="uid[1].htm", cAlternateFileName="UID_1_~1.HTM")) returned 1 [0074.468] FindNextFileW (in: hFindFile=0x382080, lpFindFileData=0x31e224 | out: lpFindFileData=0x31e224*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xbe5d5130, ftCreationTime.dwHighDateTime=0x1d2faf2, ftLastAccessTime.dwLowDateTime=0xbe5d5130, ftLastAccessTime.dwHighDateTime=0x1d2faf2, ftLastWriteTime.dwLowDateTime=0xbe5d5130, ftLastWriteTime.dwHighDateTime=0x1d2faf2, nFileSizeHigh=0x0, nFileSizeLow=0x3325, dwReserved0=0x0, dwReserved1=0x0, cFileName="v2[1]", cAlternateFileName="V2_1_~1")) returned 1 [0074.468] FindNextFileW (in: hFindFile=0x382080, lpFindFileData=0x31e224 | out: lpFindFileData=0x31e224*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x54c35b50, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x54c35b50, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x54c5bcb0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x24fea, dwReserved0=0x0, dwReserved1=0x0, cFileName="wc-addons[1].css", cAlternateFileName="WC-ADD~1.CSS")) returned 1 [0074.468] FindNextFileW (in: hFindFile=0x382080, lpFindFileData=0x31e224 | out: lpFindFileData=0x31e224*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0074.468] FindClose (in: hFindFile=0x382080 | out: hFindFile=0x382080) returned 1 [0074.469] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e4ac) returned 1 [0074.469] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e4b8) returned 1 [0074.469] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e4ec) returned 1 [0074.469] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\YG1R61Z8", nBufferLength=0x105, lpBuffer=0x31dff4, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\YG1R61Z8", lpFilePart=0x0) returned 0x6f [0074.469] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\YG1R61Z8\\", nBufferLength=0x105, lpBuffer=0x31dfc8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\YG1R61Z8\\", lpFilePart=0x0) returned 0x70 [0074.469] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\YG1R61Z8\\*", lpFindFileData=0x31e214 | out: lpFindFileData=0x31e214*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0x4f090c50, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x50fa0830, ftLastAccessTime.dwHighDateTime=0x1d2faf3, ftLastWriteTime.dwLowDateTime=0x50fa0830, ftLastWriteTime.dwHighDateTime=0x1d2faf3, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x382080 [0074.470] FindNextFileW (in: hFindFile=0x382080, lpFindFileData=0x31e224 | out: lpFindFileData=0x31e224*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0x4f090c50, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x50fa0830, ftLastAccessTime.dwHighDateTime=0x1d2faf3, ftLastWriteTime.dwLowDateTime=0x50fa0830, ftLastWriteTime.dwHighDateTime=0x1d2faf3, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0074.470] FindNextFileW (in: hFindFile=0x382080, lpFindFileData=0x31e224 | out: lpFindFileData=0x31e224*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xbe967230, ftCreationTime.dwHighDateTime=0x1d2faf2, ftLastAccessTime.dwLowDateTime=0xbe967230, ftLastAccessTime.dwHighDateTime=0x1d2faf2, ftLastWriteTime.dwLowDateTime=0xbe9b34f0, ftLastWriteTime.dwHighDateTime=0x1d2faf2, nFileSizeHigh=0x0, nFileSizeLow=0x7f7e, dwReserved0=0x0, dwReserved1=0x0, cFileName="0ff92924-f857-491e-a2ee-c0fe20f0d064[1].jpg", cAlternateFileName="0FF929~1.JPG")) returned 1 [0074.470] FindNextFileW (in: hFindFile=0x382080, lpFindFileData=0x31e224 | out: lpFindFileData=0x31e224*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x54a20810, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x54a20810, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x54a46970, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0xc05f, dwReserved0=0x0, dwReserved1=0x0, cFileName="26158[1].png", cAlternateFileName="26158_~1.PNG")) returned 1 [0074.471] FindNextFileW (in: hFindFile=0x382080, lpFindFileData=0x31e224 | out: lpFindFileData=0x31e224*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x458eefb0, ftCreationTime.dwHighDateTime=0x1d2faf3, ftLastAccessTime.dwLowDateTime=0x458eefb0, ftLastAccessTime.dwHighDateTime=0x1d2faf3, ftLastWriteTime.dwLowDateTime=0x458eefb0, ftLastWriteTime.dwHighDateTime=0x1d2faf3, nFileSizeHigh=0x0, nFileSizeLow=0x3e3, dwReserved0=0x0, dwReserved1=0x0, cFileName="AA42x3V[1].png", cAlternateFileName="AA42X3~1.PNG")) returned 1 [0074.471] FindNextFileW (in: hFindFile=0x382080, lpFindFileData=0x31e224 | out: lpFindFileData=0x31e224*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x5341bc90, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x5341bc90, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x5341bc90, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x1d0, dwReserved0=0x0, dwReserved1=0x0, cFileName="AA58NQj[1].png", cAlternateFileName="AA58NQ~1.PNG")) returned 1 [0074.471] FindNextFileW (in: hFindFile=0x382080, lpFindFileData=0x31e224 | out: lpFindFileData=0x31e224*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x515e8570, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x515e8570, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x515e8570, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x1c4, dwReserved0=0x0, dwReserved1=0x0, cFileName="AA61Ofl[1].png", cAlternateFileName="AA61OF~1.PNG")) returned 1 [0074.471] FindNextFileW (in: hFindFile=0x382080, lpFindFileData=0x31e224 | out: lpFindFileData=0x31e224*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x45915110, ftCreationTime.dwHighDateTime=0x1d2faf3, ftLastAccessTime.dwLowDateTime=0x45915110, ftLastAccessTime.dwHighDateTime=0x1d2faf3, ftLastWriteTime.dwLowDateTime=0x45915110, ftLastWriteTime.dwHighDateTime=0x1d2faf3, nFileSizeHigh=0x0, nFileSizeLow=0x2ed, dwReserved0=0x0, dwReserved1=0x0, cFileName="AA6SFRQ[2].png", cAlternateFileName="AA6SFR~2.PNG")) returned 1 [0074.471] FindNextFileW (in: hFindFile=0x382080, lpFindFileData=0x31e224 | out: lpFindFileData=0x31e224*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x4580a770, ftCreationTime.dwHighDateTime=0x1d2faf3, ftLastAccessTime.dwLowDateTime=0x4580a770, ftLastAccessTime.dwHighDateTime=0x1d2faf3, ftLastWriteTime.dwLowDateTime=0x4580a770, ftLastWriteTime.dwHighDateTime=0x1d2faf3, nFileSizeHigh=0x0, nFileSizeLow=0x19e, dwReserved0=0x0, dwReserved1=0x0, cFileName="AAa1vhm[1].png", cAlternateFileName="AAA1VH~1.PNG")) returned 1 [0074.471] FindNextFileW (in: hFindFile=0x382080, lpFindFileData=0x31e224 | out: lpFindFileData=0x31e224*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x53846310, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x53846310, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x53846310, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x2c1, dwReserved0=0x0, dwReserved1=0x0, cFileName="AAa1xJF[1].png", cAlternateFileName="AAA1XJ~1.PNG")) returned 1 [0074.472] FindNextFileW (in: hFindFile=0x382080, lpFindFileData=0x31e224 | out: lpFindFileData=0x31e224*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x5159c2b0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x5159c2b0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x5159c2b0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x7b8, dwReserved0=0x0, dwReserved1=0x0, cFileName="AAlG41q[1].jpg", cAlternateFileName="AALG41~1.JPG")) returned 1 [0074.472] FindNextFileW (in: hFindFile=0x382080, lpFindFileData=0x31e224 | out: lpFindFileData=0x31e224*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x45798350, ftCreationTime.dwHighDateTime=0x1d2faf3, ftLastAccessTime.dwLowDateTime=0x45798350, ftLastAccessTime.dwHighDateTime=0x1d2faf3, ftLastWriteTime.dwLowDateTime=0x45798350, ftLastWriteTime.dwHighDateTime=0x1d2faf3, nFileSizeHigh=0x0, nFileSizeLow=0x157, dwReserved0=0x0, dwReserved1=0x0, cFileName="AAmin0Z[1].png", cAlternateFileName="AAMIN0~1.PNG")) returned 1 [0074.472] FindNextFileW (in: hFindFile=0x382080, lpFindFileData=0x31e224 | out: lpFindFileData=0x31e224*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x533f5b30, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x533f5b30, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x5341bc90, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x36b1, dwReserved0=0x0, dwReserved1=0x0, cFileName="AAnhRyj[1].jpg", cAlternateFileName="AANHRY~1.JPG")) returned 1 [0074.472] FindNextFileW (in: hFindFile=0x382080, lpFindFileData=0x31e224 | out: lpFindFileData=0x31e224*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x64c161a0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x64c161a0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x64e9d900, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x39f, dwReserved0=0x0, dwReserved1=0x0, cFileName="activityi;src=2542116;cat=Chrom00;type=clien612;ord=2366422437621[1].htm", cAlternateFileName="ACTIVI~1.HTM")) returned 1 [0074.472] FindNextFileW (in: hFindFile=0x382080, lpFindFileData=0x31e224 | out: lpFindFileData=0x31e224*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xbf2eca30, ftCreationTime.dwHighDateTime=0x1d2faf2, ftLastAccessTime.dwLowDateTime=0xbf2eca30, ftLastAccessTime.dwHighDateTime=0x1d2faf2, ftLastWriteTime.dwLowDateTime=0xbf312b90, ftLastWriteTime.dwHighDateTime=0x1d2faf2, nFileSizeHigh=0x0, nFileSizeLow=0x91dd, dwReserved0=0x0, dwReserved1=0x0, cFileName="adex[1].js", cAlternateFileName="ADEX_1~1.JS")) returned 1 [0074.472] FindNextFileW (in: hFindFile=0x382080, lpFindFileData=0x31e224 | out: lpFindFileData=0x31e224*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x540e72d0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x540e72d0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x540e72d0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x2874, dwReserved0=0x0, dwReserved1=0x0, cFileName="adfscript[1]", cAlternateFileName="ADFSCR~1")) returned 1 [0074.473] FindNextFileW (in: hFindFile=0x382080, lpFindFileData=0x31e224 | out: lpFindFileData=0x31e224*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xbdb6b0f0, ftCreationTime.dwHighDateTime=0x1d2faf2, ftLastAccessTime.dwLowDateTime=0xbdb6b0f0, ftLastAccessTime.dwHighDateTime=0x1d2faf2, ftLastWriteTime.dwLowDateTime=0xbdb6b0f0, ftLastWriteTime.dwHighDateTime=0x1d2faf2, nFileSizeHigh=0x0, nFileSizeLow=0x525b, dwReserved0=0x0, dwReserved1=0x0, cFileName="adsWrapperMSNI[1].js", cAlternateFileName="ADSWRA~1.JS")) returned 1 [0074.473] FindNextFileW (in: hFindFile=0x382080, lpFindFileData=0x31e224 | out: lpFindFileData=0x31e224*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xbe967230, ftCreationTime.dwHighDateTime=0x1d2faf2, ftLastAccessTime.dwLowDateTime=0xbe967230, ftLastAccessTime.dwHighDateTime=0x1d2faf2, ftLastWriteTime.dwLowDateTime=0xbe9b34f0, ftLastWriteTime.dwHighDateTime=0x1d2faf2, nFileSizeHigh=0x0, nFileSizeLow=0x8217, dwReserved0=0x0, dwReserved1=0x0, cFileName="ae8e984b-1820-4a8d-93dc-392ed6563fb6[1].jpg", cAlternateFileName="AE8E98~1.JPG")) returned 1 [0074.473] FindNextFileW (in: hFindFile=0x382080, lpFindFileData=0x31e224 | out: lpFindFileData=0x31e224*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xbe112530, ftCreationTime.dwHighDateTime=0x1d2faf2, ftLastAccessTime.dwLowDateTime=0xbe112530, ftLastAccessTime.dwHighDateTime=0x1d2faf2, ftLastWriteTime.dwLowDateTime=0xbe15e7f0, ftLastWriteTime.dwHighDateTime=0x1d2faf2, nFileSizeHigh=0x0, nFileSizeLow=0x1183b, dwReserved0=0x0, dwReserved1=0x0, cFileName="ast[1].js", cAlternateFileName="AST_1_~1.JS")) returned 1 [0074.473] FindNextFileW (in: hFindFile=0x382080, lpFindFileData=0x31e224 | out: lpFindFileData=0x31e224*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x58798580, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x58798580, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x58798580, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x13a9, dwReserved0=0x0, dwReserved1=0x0, cFileName="autotrack[1].js", cAlternateFileName="AUTOTR~1.JS")) returned 1 [0074.473] FindNextFileW (in: hFindFile=0x382080, lpFindFileData=0x31e224 | out: lpFindFileData=0x31e224*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x45987530, ftCreationTime.dwHighDateTime=0x1d2faf3, ftLastAccessTime.dwLowDateTime=0x45987530, ftLastAccessTime.dwHighDateTime=0x1d2faf3, ftLastWriteTime.dwLowDateTime=0x45987530, ftLastWriteTime.dwHighDateTime=0x1d2faf3, nFileSizeHigh=0x0, nFileSizeLow=0x145, dwReserved0=0x0, dwReserved1=0x0, cFileName="BB56XTo[1].png", cAlternateFileName="BB56XT~1.PNG")) returned 1 [0074.473] FindNextFileW (in: hFindFile=0x382080, lpFindFileData=0x31e224 | out: lpFindFileData=0x31e224*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x52e28590, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x52e28590, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x52e28590, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x1b6, dwReserved0=0x0, dwReserved1=0x0, cFileName="BB5vO0g[1].png", cAlternateFileName="BB5VO0~1.PNG")) returned 1 [0074.473] FindNextFileW (in: hFindFile=0x382080, lpFindFileData=0x31e224 | out: lpFindFileData=0x31e224*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x456d9c70, ftCreationTime.dwHighDateTime=0x1d2faf3, ftLastAccessTime.dwLowDateTime=0x456d9c70, ftLastAccessTime.dwHighDateTime=0x1d2faf3, ftLastWriteTime.dwLowDateTime=0x456d9c70, ftLastWriteTime.dwHighDateTime=0x1d2faf3, nFileSizeHigh=0x0, nFileSizeLow=0x156, dwReserved0=0x0, dwReserved1=0x0, cFileName="BB8AdqN[1].png", cAlternateFileName="BB8ADQ~1.PNG")) returned 1 [0074.473] FindNextFileW (in: hFindFile=0x382080, lpFindFileData=0x31e224 | out: lpFindFileData=0x31e224*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x45be8b30, ftCreationTime.dwHighDateTime=0x1d2faf3, ftLastAccessTime.dwLowDateTime=0x45be8b30, ftLastAccessTime.dwHighDateTime=0x1d2faf3, ftLastWriteTime.dwLowDateTime=0x45ca7210, ftLastWriteTime.dwHighDateTime=0x1d2faf3, nFileSizeHigh=0x0, nFileSizeLow=0x152c, dwReserved0=0x0, dwReserved1=0x0, cFileName="BBALZyp[1].jpg", cAlternateFileName="BBALZY~1.JPG")) returned 1 [0074.473] FindNextFileW (in: hFindFile=0x382080, lpFindFileData=0x31e224 | out: lpFindFileData=0x31e224*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x5360ae70, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x5360ae70, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x5360ae70, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x97c, dwReserved0=0x0, dwReserved1=0x0, cFileName="BBBImKp[1].jpg", cAlternateFileName="BBBIMK~1.JPG")) returned 1 [0074.473] FindNextFileW (in: hFindFile=0x382080, lpFindFileData=0x31e224 | out: lpFindFileData=0x31e224*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x53598a50, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x53598a50, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x53630fd0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x29ca, dwReserved0=0x0, dwReserved1=0x0, cFileName="BBBMGJo[1].jpg", cAlternateFileName="BBBMGJ~1.JPG")) returned 1 [0074.473] FindNextFileW (in: hFindFile=0x382080, lpFindFileData=0x31e224 | out: lpFindFileData=0x31e224*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x539049f0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x539049f0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x539049f0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x862, dwReserved0=0x0, dwReserved1=0x0, cFileName="BBBMKDF[1].jpg", cAlternateFileName="BBBMKD~1.JPG")) returned 1 [0074.473] FindNextFileW (in: hFindFile=0x382080, lpFindFileData=0x31e224 | out: lpFindFileData=0x31e224*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x53846310, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x53846310, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x53846310, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x142e, dwReserved0=0x0, dwReserved1=0x0, cFileName="BBBMQch[1].jpg", cAlternateFileName="BBBMQC~1.JPG")) returned 1 [0074.473] FindNextFileW (in: hFindFile=0x382080, lpFindFileData=0x31e224 | out: lpFindFileData=0x31e224*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x58321c40, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x58321c40, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x58321c40, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x3e6b, dwReserved0=0x0, dwReserved1=0x0, cFileName="BBBMyVh[1].jpg", cAlternateFileName="BBBMYV~1.JPG")) returned 1 [0074.473] FindNextFileW (in: hFindFile=0x382080, lpFindFileData=0x31e224 | out: lpFindFileData=0x31e224*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x53337450, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x53337450, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x53337450, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x812, dwReserved0=0x0, dwReserved1=0x0, cFileName="BBBNAf7[1].jpg", cAlternateFileName="BBBNAF~1.JPG")) returned 1 [0074.473] FindNextFileW (in: hFindFile=0x382080, lpFindFileData=0x31e224 | out: lpFindFileData=0x31e224*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x533a9870, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x533a9870, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x533a9870, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0xb22, dwReserved0=0x0, dwReserved1=0x0, cFileName="BBBNnTF[1].jpg", cAlternateFileName="BBBNNT~1.JPG")) returned 1 [0074.473] FindNextFileW (in: hFindFile=0x382080, lpFindFileData=0x31e224 | out: lpFindFileData=0x31e224*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x539c30d0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x539c30d0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x539c30d0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x1529, dwReserved0=0x0, dwReserved1=0x0, cFileName="BBBO4dZ[1].jpg", cAlternateFileName="BBBO4D~1.JPG")) returned 1 [0074.474] FindNextFileW (in: hFindFile=0x382080, lpFindFileData=0x31e224 | out: lpFindFileData=0x31e224*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x538b8730, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x538b8730, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x538b8730, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x1e61, dwReserved0=0x0, dwReserved1=0x0, cFileName="BBBO8ow[1].jpg", cAlternateFileName="BBBO8O~1.JPG")) returned 1 [0074.474] FindNextFileW (in: hFindFile=0x382080, lpFindFileData=0x31e224 | out: lpFindFileData=0x31e224*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x532eb190, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x532eb190, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x532eb190, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x636, dwReserved0=0x0, dwReserved1=0x0, cFileName="BBBOaeS[1].jpg", cAlternateFileName="BBBOAE~1.JPG")) returned 1 [0074.474] FindNextFileW (in: hFindFile=0x382080, lpFindFileData=0x31e224 | out: lpFindFileData=0x31e224*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x53278d70, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x53278d70, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x53278d70, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x82a, dwReserved0=0x0, dwReserved1=0x0, cFileName="BBBOcIb[1].jpg", cAlternateFileName="BBBOCI~1.JPG")) returned 1 [0074.474] FindNextFileW (in: hFindFile=0x382080, lpFindFileData=0x31e224 | out: lpFindFileData=0x31e224*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x53b8c150, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x53b8c150, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x53b8c150, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x161e, dwReserved0=0x0, dwReserved1=0x0, cFileName="BBBOddp[1].jpg", cAlternateFileName="BBBODD~1.JPG")) returned 1 [0074.474] FindNextFileW (in: hFindFile=0x382080, lpFindFileData=0x31e224 | out: lpFindFileData=0x31e224*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x6a1fd500, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x6a1fd500, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x6a223660, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x5685, dwReserved0=0x0, dwReserved1=0x0, cFileName="BBBOmar[1].jpg", cAlternateFileName="BBBOMA~1.JPG")) returned 1 [0074.474] FindNextFileW (in: hFindFile=0x382080, lpFindFileData=0x31e224 | out: lpFindFileData=0x31e224*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x52f7f1f0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x52f7f1f0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x52f7f1f0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x2f6b, dwReserved0=0x0, dwReserved1=0x0, cFileName="BBBR4yQ[1].jpg", cAlternateFileName="BBBR4Y~1.JPG")) returned 1 [0074.474] FindNextFileW (in: hFindFile=0x382080, lpFindFileData=0x31e224 | out: lpFindFileData=0x31e224*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x52e4e6f0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x52e4e6f0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x52e4e6f0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x264b, dwReserved0=0x0, dwReserved1=0x0, cFileName="BBBUPaj[1].jpg", cAlternateFileName="BBBUPA~1.JPG")) returned 1 [0074.474] FindNextFileW (in: hFindFile=0x382080, lpFindFileData=0x31e224 | out: lpFindFileData=0x31e224*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x5e275160, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x5e275160, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x5e275160, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x3e08, dwReserved0=0x0, dwReserved1=0x0, cFileName="BBBVEOW[1].jpg", cAlternateFileName="BBBVEO~1.JPG")) returned 1 [0074.474] FindNextFileW (in: hFindFile=0x382080, lpFindFileData=0x31e224 | out: lpFindFileData=0x31e224*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x52f32f30, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x52f32f30, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x52f32f30, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0xa1f, dwReserved0=0x0, dwReserved1=0x0, cFileName="BBBVLcG[1].jpg", cAlternateFileName="BBBVLC~1.JPG")) returned 1 [0074.474] FindNextFileW (in: hFindFile=0x382080, lpFindFileData=0x31e224 | out: lpFindFileData=0x31e224*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x530afcf0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x530afcf0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x530afcf0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x82d, dwReserved0=0x0, dwReserved1=0x0, cFileName="BBBVSkP[1].jpg", cAlternateFileName="BBBVSK~1.JPG")) returned 1 [0074.474] FindNextFileW (in: hFindFile=0x382080, lpFindFileData=0x31e224 | out: lpFindFileData=0x31e224*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x612a8ee0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x612a8ee0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x612a8ee0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x16f5, dwReserved0=0x0, dwReserved1=0x0, cFileName="BBBYfEH[1].jpg", cAlternateFileName="BBBYFE~1.JPG")) returned 1 [0074.474] FindNextFileW (in: hFindFile=0x382080, lpFindFileData=0x31e224 | out: lpFindFileData=0x31e224*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x53017770, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x53017770, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x53017770, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0xc20, dwReserved0=0x0, dwReserved1=0x0, cFileName="BBBZ5vT[1].jpg", cAlternateFileName="BBBZ5V~1.JPG")) returned 1 [0074.475] FindNextFileW (in: hFindFile=0x382080, lpFindFileData=0x31e224 | out: lpFindFileData=0x31e224*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x514ddbd0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x514ddbd0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x514ddbd0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x86e, dwReserved0=0x0, dwReserved1=0x0, cFileName="BBC02Gr[1].jpg", cAlternateFileName="BBC02G~1.JPG")) returned 1 [0074.475] FindNextFileW (in: hFindFile=0x382080, lpFindFileData=0x31e224 | out: lpFindFileData=0x31e224*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x5392ab50, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x5392ab50, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x5392ab50, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x86e, dwReserved0=0x0, dwReserved1=0x0, cFileName="BBC02Gr[2].jpg", cAlternateFileName="BBC02G~2.JPG")) returned 1 [0074.475] FindNextFileW (in: hFindFile=0x382080, lpFindFileData=0x31e224 | out: lpFindFileData=0x31e224*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x52fa5350, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x52fa5350, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x52fa5350, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x89a, dwReserved0=0x0, dwReserved1=0x0, cFileName="BBC03B1[1].jpg", cAlternateFileName="BBC03B~1.JPG")) returned 1 [0074.475] FindNextFileW (in: hFindFile=0x382080, lpFindFileData=0x31e224 | out: lpFindFileData=0x31e224*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x52f0cdd0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x52f0cdd0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x52f0cdd0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x7bb, dwReserved0=0x0, dwReserved1=0x0, cFileName="BBC06Ub[1].jpg", cAlternateFileName="BBC06U~1.JPG")) returned 1 [0074.475] FindNextFileW (in: hFindFile=0x382080, lpFindFileData=0x31e224 | out: lpFindFileData=0x31e224*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x52e74850, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x52e74850, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x52e74850, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x9ab, dwReserved0=0x0, dwReserved1=0x0, cFileName="BBC0Djg[1].jpg", cAlternateFileName="BBC0DJ~1.JPG")) returned 1 [0074.475] FindNextFileW (in: hFindFile=0x382080, lpFindFileData=0x31e224 | out: lpFindFileData=0x31e224*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x52ec0b10, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x52ec0b10, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x52ec0b10, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x7fd, dwReserved0=0x0, dwReserved1=0x0, cFileName="BBC0g7a[1].jpg", cAlternateFileName="BBC0G7~1.JPG")) returned 1 [0074.475] FindNextFileW (in: hFindFile=0x382080, lpFindFileData=0x31e224 | out: lpFindFileData=0x31e224*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x52fcb4b0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x52fcb4b0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x52fcb4b0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x82f, dwReserved0=0x0, dwReserved1=0x0, cFileName="BBC0lf2[1].jpg", cAlternateFileName="BBC0LF~1.JPG")) returned 1 [0074.475] FindNextFileW (in: hFindFile=0x382080, lpFindFileData=0x31e224 | out: lpFindFileData=0x31e224*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x5b2e35a0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x5b2e35a0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x5b2e35a0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x1afe, dwReserved0=0x0, dwReserved1=0x0, cFileName="BBC0mK1[1].jpg", cAlternateFileName="BBC0MK~1.JPG")) returned 1 [0074.475] FindNextFileW (in: hFindFile=0x382080, lpFindFileData=0x31e224 | out: lpFindFileData=0x31e224*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x53089b90, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x53089b90, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x53089b90, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x1fc3, dwReserved0=0x0, dwReserved1=0x0, cFileName="BBC0qlB[1].jpg", cAlternateFileName="BBC0QL~1.JPG")) returned 1 [0074.475] FindNextFileW (in: hFindFile=0x382080, lpFindFileData=0x31e224 | out: lpFindFileData=0x31e224*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x458308d0, ftCreationTime.dwHighDateTime=0x1d2faf3, ftLastAccessTime.dwLowDateTime=0x458308d0, ftLastAccessTime.dwHighDateTime=0x1d2faf3, ftLastWriteTime.dwLowDateTime=0x458308d0, ftLastWriteTime.dwHighDateTime=0x1d2faf3, nFileSizeHigh=0x0, nFileSizeLow=0x2ecb, dwReserved0=0x0, dwReserved1=0x0, cFileName="BBE7KPZ[1].jpg", cAlternateFileName="BBE7KP~1.JPG")) returned 1 [0074.475] FindNextFileW (in: hFindFile=0x382080, lpFindFileData=0x31e224 | out: lpFindFileData=0x31e224*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x45a6bd70, ftCreationTime.dwHighDateTime=0x1d2faf3, ftLastAccessTime.dwLowDateTime=0x45a6bd70, ftLastAccessTime.dwHighDateTime=0x1d2faf3, ftLastWriteTime.dwLowDateTime=0x45a6bd70, ftLastWriteTime.dwHighDateTime=0x1d2faf3, nFileSizeHigh=0x0, nFileSizeLow=0x9c5, dwReserved0=0x0, dwReserved1=0x0, cFileName="BBE8IlA[1].jpg", cAlternateFileName="BBE8IL~1.JPG")) returned 1 [0074.475] FindNextFileW (in: hFindFile=0x382080, lpFindFileData=0x31e224 | out: lpFindFileData=0x31e224*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x45b9c870, ftCreationTime.dwHighDateTime=0x1d2faf3, ftLastAccessTime.dwLowDateTime=0x45b9c870, ftLastAccessTime.dwHighDateTime=0x1d2faf3, ftLastWriteTime.dwLowDateTime=0x45b9c870, ftLastWriteTime.dwHighDateTime=0x1d2faf3, nFileSizeHigh=0x0, nFileSizeLow=0x2669, dwReserved0=0x0, dwReserved1=0x0, cFileName="BBE972F[1].jpg", cAlternateFileName="BBE972~1.JPG")) returned 1 [0074.475] FindNextFileW (in: hFindFile=0x382080, lpFindFileData=0x31e224 | out: lpFindFileData=0x31e224*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x458308d0, ftCreationTime.dwHighDateTime=0x1d2faf3, ftLastAccessTime.dwLowDateTime=0x458308d0, ftLastAccessTime.dwHighDateTime=0x1d2faf3, ftLastWriteTime.dwLowDateTime=0x458308d0, ftLastWriteTime.dwHighDateTime=0x1d2faf3, nFileSizeHigh=0x0, nFileSizeLow=0x2a77, dwReserved0=0x0, dwReserved1=0x0, cFileName="BBE9tdx[1].jpg", cAlternateFileName="BBE9TD~1.JPG")) returned 1 [0074.475] FindNextFileW (in: hFindFile=0x382080, lpFindFileData=0x31e224 | out: lpFindFileData=0x31e224*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x458a2cf0, ftCreationTime.dwHighDateTime=0x1d2faf3, ftLastAccessTime.dwLowDateTime=0x458a2cf0, ftLastAccessTime.dwHighDateTime=0x1d2faf3, ftLastWriteTime.dwLowDateTime=0x458a2cf0, ftLastWriteTime.dwHighDateTime=0x1d2faf3, nFileSizeHigh=0x0, nFileSizeLow=0x2fe3, dwReserved0=0x0, dwReserved1=0x0, cFileName="BBEdrqt[1].jpg", cAlternateFileName="BBEDRQ~1.JPG")) returned 1 [0074.475] FindNextFileW (in: hFindFile=0x382080, lpFindFileData=0x31e224 | out: lpFindFileData=0x31e224*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x459ad690, ftCreationTime.dwHighDateTime=0x1d2faf3, ftLastAccessTime.dwLowDateTime=0x459ad690, ftLastAccessTime.dwHighDateTime=0x1d2faf3, ftLastWriteTime.dwLowDateTime=0x459ad690, ftLastWriteTime.dwHighDateTime=0x1d2faf3, nFileSizeHigh=0x0, nFileSizeLow=0x857, dwReserved0=0x0, dwReserved1=0x0, cFileName="BBEeEwt[1].jpg", cAlternateFileName="BBEEEW~1.JPG")) returned 1 [0074.475] FindNextFileW (in: hFindFile=0x382080, lpFindFileData=0x31e224 | out: lpFindFileData=0x31e224*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x4593b270, ftCreationTime.dwHighDateTime=0x1d2faf3, ftLastAccessTime.dwLowDateTime=0x4593b270, ftLastAccessTime.dwHighDateTime=0x1d2faf3, ftLastWriteTime.dwLowDateTime=0x4593b270, ftLastWriteTime.dwHighDateTime=0x1d2faf3, nFileSizeHigh=0x0, nFileSizeLow=0x7d9, dwReserved0=0x0, dwReserved1=0x0, cFileName="BBEeis3[1].jpg", cAlternateFileName="BBEEIS~1.JPG")) returned 1 [0074.475] FindNextFileW (in: hFindFile=0x382080, lpFindFileData=0x31e224 | out: lpFindFileData=0x31e224*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x45a1fab0, ftCreationTime.dwHighDateTime=0x1d2faf3, ftLastAccessTime.dwLowDateTime=0x45a1fab0, ftLastAccessTime.dwHighDateTime=0x1d2faf3, ftLastWriteTime.dwLowDateTime=0x45a1fab0, ftLastWriteTime.dwHighDateTime=0x1d2faf3, nFileSizeHigh=0x0, nFileSizeLow=0x8c5, dwReserved0=0x0, dwReserved1=0x0, cFileName="BBEeKvV[1].jpg", cAlternateFileName="BBEEKV~1.JPG")) returned 1 [0074.475] FindNextFileW (in: hFindFile=0x382080, lpFindFileData=0x31e224 | out: lpFindFileData=0x31e224*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x45a91ed0, ftCreationTime.dwHighDateTime=0x1d2faf3, ftLastAccessTime.dwLowDateTime=0x45a91ed0, ftLastAccessTime.dwHighDateTime=0x1d2faf3, ftLastWriteTime.dwLowDateTime=0x45ab8030, ftLastWriteTime.dwHighDateTime=0x1d2faf3, nFileSizeHigh=0x0, nFileSizeLow=0xef00, dwReserved0=0x0, dwReserved1=0x0, cFileName="BBEeNd8[1].png", cAlternateFileName="BBEEND~1.PNG")) returned 1 [0074.475] FindNextFileW (in: hFindFile=0x382080, lpFindFileData=0x31e224 | out: lpFindFileData=0x31e224*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x45ab8030, ftCreationTime.dwHighDateTime=0x1d2faf3, ftLastAccessTime.dwLowDateTime=0x45ab8030, ftLastAccessTime.dwHighDateTime=0x1d2faf3, ftLastWriteTime.dwLowDateTime=0x45ab8030, ftLastWriteTime.dwHighDateTime=0x1d2faf3, nFileSizeHigh=0x0, nFileSizeLow=0x3323, dwReserved0=0x0, dwReserved1=0x0, cFileName="BBEewZB[1].jpg", cAlternateFileName="BBEEWZ~1.JPG")) returned 1 [0074.475] FindNextFileW (in: hFindFile=0x382080, lpFindFileData=0x31e224 | out: lpFindFileData=0x31e224*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x459613d0, ftCreationTime.dwHighDateTime=0x1d2faf3, ftLastAccessTime.dwLowDateTime=0x459613d0, ftLastAccessTime.dwHighDateTime=0x1d2faf3, ftLastWriteTime.dwLowDateTime=0x45987530, ftLastWriteTime.dwHighDateTime=0x1d2faf3, nFileSizeHigh=0x0, nFileSizeLow=0x9d7, dwReserved0=0x0, dwReserved1=0x0, cFileName="BBEeZ0k[1].jpg", cAlternateFileName="BBEEZ0~1.JPG")) returned 1 [0074.476] FindNextFileW (in: hFindFile=0x382080, lpFindFileData=0x31e224 | out: lpFindFileData=0x31e224*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x45b042f0, ftCreationTime.dwHighDateTime=0x1d2faf3, ftLastAccessTime.dwLowDateTime=0x45b042f0, ftLastAccessTime.dwHighDateTime=0x1d2faf3, ftLastWriteTime.dwLowDateTime=0x45b042f0, ftLastWriteTime.dwHighDateTime=0x1d2faf3, nFileSizeHigh=0x0, nFileSizeLow=0x2d32, dwReserved0=0x0, dwReserved1=0x0, cFileName="BBEf6s4[1].jpg", cAlternateFileName="BBEF6S~1.JPG")) returned 1 [0074.476] FindNextFileW (in: hFindFile=0x382080, lpFindFileData=0x31e224 | out: lpFindFileData=0x31e224*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x45b2a450, ftCreationTime.dwHighDateTime=0x1d2faf3, ftLastAccessTime.dwLowDateTime=0x45b2a450, ftLastAccessTime.dwHighDateTime=0x1d2faf3, ftLastWriteTime.dwLowDateTime=0x45b2a450, ftLastWriteTime.dwHighDateTime=0x1d2faf3, nFileSizeHigh=0x0, nFileSizeLow=0x85d, dwReserved0=0x0, dwReserved1=0x0, cFileName="BBEfAc5[1].jpg", cAlternateFileName="BBEFAC~1.JPG")) returned 1 [0074.476] FindNextFileW (in: hFindFile=0x382080, lpFindFileData=0x31e224 | out: lpFindFileData=0x31e224*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x45510bf0, ftCreationTime.dwHighDateTime=0x1d2faf3, ftLastAccessTime.dwLowDateTime=0x45510bf0, ftLastAccessTime.dwHighDateTime=0x1d2faf3, ftLastWriteTime.dwLowDateTime=0x45510bf0, ftLastWriteTime.dwHighDateTime=0x1d2faf3, nFileSizeHigh=0x0, nFileSizeLow=0x197c, dwReserved0=0x0, dwReserved1=0x0, cFileName="BBEfgDi[1].jpg", cAlternateFileName="BBEFGD~1.JPG")) returned 1 [0074.476] FindNextFileW (in: hFindFile=0x382080, lpFindFileData=0x31e224 | out: lpFindFileData=0x31e224*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x456d9c70, ftCreationTime.dwHighDateTime=0x1d2faf3, ftLastAccessTime.dwLowDateTime=0x456d9c70, ftLastAccessTime.dwHighDateTime=0x1d2faf3, ftLastWriteTime.dwLowDateTime=0x456d9c70, ftLastWriteTime.dwHighDateTime=0x1d2faf3, nFileSizeHigh=0x0, nFileSizeLow=0xb7e, dwReserved0=0x0, dwReserved1=0x0, cFileName="BBEfjuT[1].jpg", cAlternateFileName="BBEFJU~1.JPG")) returned 1 [0074.476] FindNextFileW (in: hFindFile=0x382080, lpFindFileData=0x31e224 | out: lpFindFileData=0x31e224*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x457be4b0, ftCreationTime.dwHighDateTime=0x1d2faf3, ftLastAccessTime.dwLowDateTime=0x457be4b0, ftLastAccessTime.dwHighDateTime=0x1d2faf3, ftLastWriteTime.dwLowDateTime=0x457be4b0, ftLastWriteTime.dwHighDateTime=0x1d2faf3, nFileSizeHigh=0x0, nFileSizeLow=0x1b14, dwReserved0=0x0, dwReserved1=0x0, cFileName="BBEfkgi[1].jpg", cAlternateFileName="BBEFKG~1.JPG")) returned 1 [0074.476] FindNextFileW (in: hFindFile=0x382080, lpFindFileData=0x31e224 | out: lpFindFileData=0x31e224*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x45915110, ftCreationTime.dwHighDateTime=0x1d2faf3, ftLastAccessTime.dwLowDateTime=0x45915110, ftLastAccessTime.dwHighDateTime=0x1d2faf3, ftLastWriteTime.dwLowDateTime=0x45915110, ftLastWriteTime.dwHighDateTime=0x1d2faf3, nFileSizeHigh=0x0, nFileSizeLow=0x2978, dwReserved0=0x0, dwReserved1=0x0, cFileName="BBEfRKA[1].jpg", cAlternateFileName="BBEFRK~1.JPG")) returned 1 [0074.476] FindNextFileW (in: hFindFile=0x382080, lpFindFileData=0x31e224 | out: lpFindFileData=0x31e224*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x4574c090, ftCreationTime.dwHighDateTime=0x1d2faf3, ftLastAccessTime.dwLowDateTime=0x4574c090, ftLastAccessTime.dwHighDateTime=0x1d2faf3, ftLastWriteTime.dwLowDateTime=0x457721f0, ftLastWriteTime.dwHighDateTime=0x1d2faf3, nFileSizeHigh=0x0, nFileSizeLow=0x2b6c, dwReserved0=0x0, dwReserved1=0x0, cFileName="BBEfRwv[1].jpg", cAlternateFileName="BBEFRW~1.JPG")) returned 1 [0074.476] FindNextFileW (in: hFindFile=0x382080, lpFindFileData=0x31e224 | out: lpFindFileData=0x31e224*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x45478670, ftCreationTime.dwHighDateTime=0x1d2faf3, ftLastAccessTime.dwLowDateTime=0x45478670, ftLastAccessTime.dwHighDateTime=0x1d2faf3, ftLastWriteTime.dwLowDateTime=0x45478670, ftLastWriteTime.dwHighDateTime=0x1d2faf3, nFileSizeHigh=0x0, nFileSizeLow=0x2676, dwReserved0=0x0, dwReserved1=0x0, cFileName="BBEfwtU[1].jpg", cAlternateFileName="BBEFWT~1.JPG")) returned 1 [0074.476] FindNextFileW (in: hFindFile=0x382080, lpFindFileData=0x31e224 | out: lpFindFileData=0x31e224*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x45856a30, ftCreationTime.dwHighDateTime=0x1d2faf3, ftLastAccessTime.dwLowDateTime=0x45856a30, ftLastAccessTime.dwHighDateTime=0x1d2faf3, ftLastWriteTime.dwLowDateTime=0x45856a30, ftLastWriteTime.dwHighDateTime=0x1d2faf3, nFileSizeHigh=0x0, nFileSizeLow=0xb41, dwReserved0=0x0, dwReserved1=0x0, cFileName="BBEfY4X[1].jpg", cAlternateFileName="BBEFY4~1.JPG")) returned 1 [0074.476] FindNextFileW (in: hFindFile=0x382080, lpFindFileData=0x31e224 | out: lpFindFileData=0x31e224*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x45725f30, ftCreationTime.dwHighDateTime=0x1d2faf3, ftLastAccessTime.dwLowDateTime=0x45725f30, ftLastAccessTime.dwHighDateTime=0x1d2faf3, ftLastWriteTime.dwLowDateTime=0x45725f30, ftLastWriteTime.dwHighDateTime=0x1d2faf3, nFileSizeHigh=0x0, nFileSizeLow=0x25f6, dwReserved0=0x0, dwReserved1=0x0, cFileName="BBEgD9f[1].jpg", cAlternateFileName="BBEGD9~1.JPG")) returned 1 [0074.476] FindNextFileW (in: hFindFile=0x382080, lpFindFileData=0x31e224 | out: lpFindFileData=0x31e224*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x45ab8030, ftCreationTime.dwHighDateTime=0x1d2faf3, ftLastAccessTime.dwLowDateTime=0x45ab8030, ftLastAccessTime.dwHighDateTime=0x1d2faf3, ftLastWriteTime.dwLowDateTime=0x45ab8030, ftLastWriteTime.dwHighDateTime=0x1d2faf3, nFileSizeHigh=0x0, nFileSizeLow=0x819, dwReserved0=0x0, dwReserved1=0x0, cFileName="BBEgJfz[1].jpg", cAlternateFileName="BBEGJF~1.JPG")) returned 1 [0074.476] FindNextFileW (in: hFindFile=0x382080, lpFindFileData=0x31e224 | out: lpFindFileData=0x31e224*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x45b2a450, ftCreationTime.dwHighDateTime=0x1d2faf3, ftLastAccessTime.dwLowDateTime=0x45b2a450, ftLastAccessTime.dwHighDateTime=0x1d2faf3, ftLastWriteTime.dwLowDateTime=0x45b2a450, ftLastWriteTime.dwHighDateTime=0x1d2faf3, nFileSizeHigh=0x0, nFileSizeLow=0x916, dwReserved0=0x0, dwReserved1=0x0, cFileName="BBEgsWA[1].jpg", cAlternateFileName="BBEGSW~1.JPG")) returned 1 [0074.476] FindNextFileW (in: hFindFile=0x382080, lpFindFileData=0x31e224 | out: lpFindFileData=0x31e224*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x45725f30, ftCreationTime.dwHighDateTime=0x1d2faf3, ftLastAccessTime.dwLowDateTime=0x45725f30, ftLastAccessTime.dwHighDateTime=0x1d2faf3, ftLastWriteTime.dwLowDateTime=0x45725f30, ftLastWriteTime.dwHighDateTime=0x1d2faf3, nFileSizeHigh=0x0, nFileSizeLow=0x918, dwReserved0=0x0, dwReserved1=0x0, cFileName="BBEgX5G[1].jpg", cAlternateFileName="BBEGX5~1.JPG")) returned 1 [0074.476] FindNextFileW (in: hFindFile=0x382080, lpFindFileData=0x31e224 | out: lpFindFileData=0x31e224*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x51256470, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x51256470, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x51256470, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x3a2, dwReserved0=0x0, dwReserved1=0x0, cFileName="BBih5H[1].png", cAlternateFileName="BBIH5H~1.PNG")) returned 1 [0074.476] FindNextFileW (in: hFindFile=0x382080, lpFindFileData=0x31e224 | out: lpFindFileData=0x31e224*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xbe4ca790, ftCreationTime.dwHighDateTime=0x1d2faf2, ftLastAccessTime.dwLowDateTime=0xbe4ca790, ftLastAccessTime.dwHighDateTime=0x1d2faf2, ftLastWriteTime.dwLowDateTime=0xbe4ca790, ftLastWriteTime.dwHighDateTime=0x1d2faf2, nFileSizeHigh=0x0, nFileSizeLow=0x24c, dwReserved0=0x0, dwReserved1=0x0, cFileName="BBmUxRK[1].png", cAlternateFileName="BBMUXR~1.PNG")) returned 1 [0074.476] FindNextFileW (in: hFindFile=0x382080, lpFindFileData=0x31e224 | out: lpFindFileData=0x31e224*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x459f9950, ftCreationTime.dwHighDateTime=0x1d2faf3, ftLastAccessTime.dwLowDateTime=0x459f9950, ftLastAccessTime.dwHighDateTime=0x1d2faf3, ftLastWriteTime.dwLowDateTime=0x459f9950, ftLastWriteTime.dwHighDateTime=0x1d2faf3, nFileSizeHigh=0x0, nFileSizeLow=0x398, dwReserved0=0x0, dwReserved1=0x0, cFileName="BBndhJA[1].png", cAlternateFileName="BBNDHJ~1.PNG")) returned 1 [0074.476] FindNextFileW (in: hFindFile=0x382080, lpFindFileData=0x31e224 | out: lpFindFileData=0x31e224*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x458c8e50, ftCreationTime.dwHighDateTime=0x1d2faf3, ftLastAccessTime.dwLowDateTime=0x458c8e50, ftLastAccessTime.dwHighDateTime=0x1d2faf3, ftLastWriteTime.dwLowDateTime=0x458c8e50, ftLastWriteTime.dwHighDateTime=0x1d2faf3, nFileSizeHigh=0x0, nFileSizeLow=0x230, dwReserved0=0x0, dwReserved1=0x0, cFileName="BBoqF0J[1].png", cAlternateFileName="BBOQF0~1.PNG")) returned 1 [0074.476] FindNextFileW (in: hFindFile=0x382080, lpFindFileData=0x31e224 | out: lpFindFileData=0x31e224*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x53063a30, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x53063a30, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x53063a30, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x116, dwReserved0=0x0, dwReserved1=0x0, cFileName="BBzjV9E[1].png", cAlternateFileName="BBZJV9~1.PNG")) returned 1 [0074.476] FindNextFileW (in: hFindFile=0x382080, lpFindFileData=0x31e224 | out: lpFindFileData=0x31e224*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x60cdb940, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x60cdb940, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x60d4dd60, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x1fdaf, dwReserved0=0x0, dwReserved1=0x0, cFileName="benefits-1[1].jpg", cAlternateFileName="BENEFI~1.JPG")) returned 1 [0074.476] FindNextFileW (in: hFindFile=0x382080, lpFindFileData=0x31e224 | out: lpFindFileData=0x31e224*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x6157c900, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x6157c900, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x615c8bc0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x12282, dwReserved0=0x0, dwReserved1=0x0, cFileName="cb=gapi[1].loaded_1", cAlternateFileName="CB_GAP~1.LOA")) returned 1 [0074.476] FindNextFileW (in: hFindFile=0x382080, lpFindFileData=0x31e224 | out: lpFindFileData=0x31e224*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x50fa0830, ftCreationTime.dwHighDateTime=0x1d2faf3, ftLastAccessTime.dwLowDateTime=0x50fa0830, ftLastAccessTime.dwHighDateTime=0x1d2faf3, ftLastWriteTime.dwLowDateTime=0x50fa0830, ftLastWriteTime.dwHighDateTime=0x1d2faf3, nFileSizeHigh=0x0, nFileSizeLow=0x82d8, dwReserved0=0x0, dwReserved1=0x0, cFileName="chartbeat[1].js", cAlternateFileName="CHARTB~1.JS")) returned 1 [0074.476] FindNextFileW (in: hFindFile=0x382080, lpFindFileData=0x31e224 | out: lpFindFileData=0x31e224*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x60c8f680, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x60c8f680, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x60d01aa0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x3bf20, dwReserved0=0x0, dwReserved1=0x0, cFileName="chrome-installer.min[1].js", cAlternateFileName="CHROME~1.JS")) returned 1 [0074.476] FindNextFileW (in: hFindFile=0x382080, lpFindFileData=0x31e224 | out: lpFindFileData=0x31e224*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x60aec760, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x60aec760, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x60aec760, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x1622, dwReserved0=0x0, dwReserved1=0x0, cFileName="chrome_logo_2x[1].png", cAlternateFileName="CHROME~1.PNG")) returned 1 [0074.476] FindNextFileW (in: hFindFile=0x382080, lpFindFileData=0x31e224 | out: lpFindFileData=0x31e224*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x610b9d00, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x610b9d00, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x610b9d00, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x13d, dwReserved0=0x0, dwReserved1=0x0, cFileName="close-icon[1].png", cAlternateFileName="CLOSE-~1.PNG")) returned 1 [0074.476] FindNextFileW (in: hFindFile=0x382080, lpFindFileData=0x31e224 | out: lpFindFileData=0x31e224*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x54e4ae90, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x54e4ae90, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x54e4ae90, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x269b2, dwReserved0=0x0, dwReserved1=0x0, cFileName="css[1].txt", cAlternateFileName="CSS_1_~1.TXT")) returned 1 [0074.477] FindNextFileW (in: hFindFile=0x382080, lpFindFileData=0x31e224 | out: lpFindFileData=0x31e224*(dwFileAttributes=0x2006, ftCreationTime.dwLowDateTime=0x4f090c50, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x4f090c50, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x4f090c50, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x43, dwReserved0=0x0, dwReserved1=0x0, cFileName="desktop.ini", cAlternateFileName="")) returned 1 [0074.477] FindNextFileW (in: hFindFile=0x382080, lpFindFileData=0x31e224 | out: lpFindFileData=0x31e224*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xbf7af630, ftCreationTime.dwHighDateTime=0x1d2faf2, ftLastAccessTime.dwLowDateTime=0xbf7af630, ftLastAccessTime.dwHighDateTime=0x1d2faf2, ftLastWriteTime.dwLowDateTime=0xbf821a50, ftLastWriteTime.dwHighDateTime=0x1d2faf2, nFileSizeHigh=0x0, nFileSizeLow=0x4d5b9, dwReserved0=0x0, dwReserved1=0x0, cFileName="ebHtml5Banner[1].js", cAlternateFileName="EBHTML~1.JS")) returned 1 [0074.477] FindNextFileW (in: hFindFile=0x382080, lpFindFileData=0x31e224 | out: lpFindFileData=0x31e224*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x64009240, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x64009240, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x6402f3a0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x5244, dwReserved0=0x0, dwReserved1=0x0, cFileName="eula-win[1].jpg", cAlternateFileName="EULA-W~1.JPG")) returned 1 [0074.477] FindNextFileW (in: hFindFile=0x382080, lpFindFileData=0x31e224 | out: lpFindFileData=0x31e224*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xbe15e7f0, ftCreationTime.dwHighDateTime=0x1d2faf2, ftLastAccessTime.dwLowDateTime=0xbe15e7f0, ftLastAccessTime.dwHighDateTime=0x1d2faf2, ftLastWriteTime.dwLowDateTime=0xbe15e7f0, ftLastWriteTime.dwHighDateTime=0x1d2faf2, nFileSizeHigh=0x0, nFileSizeLow=0x1303, dwReserved0=0x0, dwReserved1=0x0, cFileName="getype=homepage;kvpg=msn%2Fde-de;kvugc=0;kvmn=MSNDEDE1B;kvgrp=852361999;kvismob=2;extmirroring=0;kvtile=3;target=_blank;aduho=600;grp=852361999[1]", cAlternateFileName="GETYPE~3")) returned 1 [0074.477] FindNextFileW (in: hFindFile=0x382080, lpFindFileData=0x31e224 | out: lpFindFileData=0x31e224*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x530afcf0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x530afcf0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x530afcf0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x8c3, dwReserved0=0x0, dwReserved1=0x0, cFileName="getype=homepage;kvpg=msn%2Fde-de;kvugc=0;kvmn=MSNDEDE1C;kvgrp=627518548;kvismob=2;extmirroring=0;kvtile=4;target=_blank;aduho=600;grp=627518548[1]", cAlternateFileName="GETYPE~1")) returned 1 [0074.477] FindNextFileW (in: hFindFile=0x382080, lpFindFileData=0x31e224 | out: lpFindFileData=0x31e224*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xbe138690, ftCreationTime.dwHighDateTime=0x1d2faf2, ftLastAccessTime.dwLowDateTime=0xbe138690, ftLastAccessTime.dwHighDateTime=0x1d2faf2, ftLastWriteTime.dwLowDateTime=0xbe138690, ftLastWriteTime.dwHighDateTime=0x1d2faf2, nFileSizeHigh=0x0, nFileSizeLow=0x972, dwReserved0=0x0, dwReserved1=0x0, cFileName="getype=homepage;kvpg=msn%2Fde-de;kvugc=0;kvmn=MSNDEDE1C;kvgrp=852361999;kvismob=2;extmirroring=0;kvtile=4;target=_blank;aduho=600;grp=852361999[1]", cAlternateFileName="GETYPE~2")) returned 1 [0074.477] FindNextFileW (in: hFindFile=0x382080, lpFindFileData=0x31e224 | out: lpFindFileData=0x31e224*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x510ff810, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x510ff810, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x51125970, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x1762e, dwReserved0=0x0, dwReserved1=0x0, cFileName="jquery-1.11.1.min[1].js", cAlternateFileName="JQUERY~1.JS")) returned 1 [0074.477] FindNextFileW (in: hFindFile=0x382080, lpFindFileData=0x31e224 | out: lpFindFileData=0x31e224*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x5442d110, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x5442d110, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x5442d110, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x4b8, dwReserved0=0x0, dwReserved1=0x0, cFileName="js[1]", cAlternateFileName="JS_1_~1")) returned 1 [0074.477] FindNextFileW (in: hFindFile=0x382080, lpFindFileData=0x31e224 | out: lpFindFileData=0x31e224*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x44bd95f0, ftCreationTime.dwHighDateTime=0x1d2faf3, ftLastAccessTime.dwLowDateTime=0x44bd95f0, ftLastAccessTime.dwHighDateTime=0x1d2faf3, ftLastWriteTime.dwLowDateTime=0x44bd95f0, ftLastWriteTime.dwHighDateTime=0x1d2faf3, nFileSizeHigh=0x0, nFileSizeLow=0x3c1, dwReserved0=0x0, dwReserved1=0x0, cFileName="js[2]", cAlternateFileName="JS_2_~1")) returned 1 [0074.477] FindNextFileW (in: hFindFile=0x382080, lpFindFileData=0x31e224 | out: lpFindFileData=0x31e224*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x54d66650, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x54d66650, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x54e70ff0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x7154, dwReserved0=0x0, dwReserved1=0x0, cFileName="latest[1].eot", cAlternateFileName="LATEST~1.EOT")) returned 1 [0074.477] FindNextFileW (in: hFindFile=0x382080, lpFindFileData=0x31e224 | out: lpFindFileData=0x31e224*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x54d8c7b0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x54d8c7b0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x54e97150, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x6e9b, dwReserved0=0x0, dwReserved1=0x0, cFileName="latest[2].eot", cAlternateFileName="LATEST~2.EOT")) returned 1 [0074.477] FindNextFileW (in: hFindFile=0x382080, lpFindFileData=0x31e224 | out: lpFindFileData=0x31e224*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x54d8c7b0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x54d8c7b0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x54e97150, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x77b3, dwReserved0=0x0, dwReserved1=0x0, cFileName="latest[3].eot", cAlternateFileName="LATEST~3.EOT")) returned 1 [0074.477] FindNextFileW (in: hFindFile=0x382080, lpFindFileData=0x31e224 | out: lpFindFileData=0x31e224*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x52e4e6f0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x52e4e6f0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x53122110, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x922, dwReserved0=0x0, dwReserved1=0x0, cFileName="msn[1].htm", cAlternateFileName="MSN_1_~1.HTM")) returned 1 [0074.477] FindNextFileW (in: hFindFile=0x382080, lpFindFileData=0x31e224 | out: lpFindFileData=0x31e224*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x6378e3e0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x6378e3e0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x637b4540, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x3112, dwReserved0=0x0, dwReserved1=0x0, cFileName="rpc_shindig_random[1].js", cAlternateFileName="RPC_SH~1.JS")) returned 1 [0074.477] FindNextFileW (in: hFindFile=0x382080, lpFindFileData=0x31e224 | out: lpFindFileData=0x31e224*(dwFileAttributes=0x2000, ftCreationTime.dwLowDateTime=0xbf7d5790, ftCreationTime.dwHighDateTime=0x1d2faf2, ftLastAccessTime.dwLowDateTime=0xbf7d5790, ftLastAccessTime.dwHighDateTime=0x1d2faf2, ftLastWriteTime.dwLowDateTime=0xbf7d5790, ftLastWriteTime.dwHighDateTime=0x1d2faf2, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="thirdparty[1]", cAlternateFileName="THIRDP~1")) returned 1 [0074.477] FindNextFileW (in: hFindFile=0x382080, lpFindFileData=0x31e224 | out: lpFindFileData=0x31e224*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x54a20810, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x54a20810, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x54adeef0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0xa33, dwReserved0=0x0, dwReserved1=0x0, cFileName="uid[1].htm", cAlternateFileName="UID_1_~1.HTM")) returned 1 [0074.477] FindNextFileW (in: hFindFile=0x382080, lpFindFileData=0x31e224 | out: lpFindFileData=0x31e224*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xbe5d5130, ftCreationTime.dwHighDateTime=0x1d2faf2, ftLastAccessTime.dwLowDateTime=0xbe5d5130, ftLastAccessTime.dwHighDateTime=0x1d2faf2, ftLastWriteTime.dwLowDateTime=0xbe5d5130, ftLastWriteTime.dwHighDateTime=0x1d2faf2, nFileSizeHigh=0x0, nFileSizeLow=0x3325, dwReserved0=0x0, dwReserved1=0x0, cFileName="v2[1]", cAlternateFileName="V2_1_~1")) returned 1 [0074.477] FindNextFileW (in: hFindFile=0x382080, lpFindFileData=0x31e224 | out: lpFindFileData=0x31e224*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x54c35b50, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x54c35b50, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x54c5bcb0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x24fea, dwReserved0=0x0, dwReserved1=0x0, cFileName="wc-addons[1].css", cAlternateFileName="WC-ADD~1.CSS")) returned 1 [0074.477] FindNextFileW (in: hFindFile=0x382080, lpFindFileData=0x31e224 | out: lpFindFileData=0x31e224*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x54c35b50, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x54c35b50, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x54c5bcb0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x24fea, dwReserved0=0x0, dwReserved1=0x0, cFileName="wc-addons[1].css", cAlternateFileName="WC-ADD~1.CSS")) returned 0 [0074.477] FindClose (in: hFindFile=0x382080 | out: hFindFile=0x382080) returned 1 [0074.478] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e4ac) returned 1 [0074.478] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e4b8) returned 1 [0074.478] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\YG1R61Z8\\0ff92924-f857-491e-a2ee-c0fe20f0d064[1].jpg", nBufferLength=0x105, lpBuffer=0x31dec4, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\YG1R61Z8\\0ff92924-f857-491e-a2ee-c0fe20f0d064[1].jpg", lpFilePart=0x0) returned 0x9b [0074.478] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e3b8) returned 1 [0074.478] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\YG1R61Z8\\0ff92924-f857-491e-a2ee-c0fe20f0d064[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\yg1r61z8\\0ff92924-f857-491e-a2ee-c0fe20f0d064[1].jpg"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x264 [0074.480] GetFileType (hFile=0x264) returned 0x1 [0074.480] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e3b4) returned 1 [0074.480] GetFileType (hFile=0x264) returned 0x1 [0074.480] GetFileSize (in: hFile=0x264, lpFileSizeHigh=0x31e4c0 | out: lpFileSizeHigh=0x31e4c0*=0x0) returned 0x7f7e [0074.480] ReadFile (in: hFile=0x264, lpBuffer=0x27b3914, nNumberOfBytesToRead=0x7f7e, lpNumberOfBytesRead=0x31e46c, lpOverlapped=0x0 | out: lpBuffer=0x27b3914*, lpNumberOfBytesRead=0x31e46c*=0x7f7e, lpOverlapped=0x0) returned 1 [0074.514] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\YG1R61Z8\\0ff92924-f857-491e-a2ee-c0fe20f0d064[1].jpg", nBufferLength=0x105, lpBuffer=0x31deb0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\YG1R61Z8\\0ff92924-f857-491e-a2ee-c0fe20f0d064[1].jpg", lpFilePart=0x0) returned 0x9b [0074.514] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e3a4) returned 1 [0074.514] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\YG1R61Z8\\0ff92924-f857-491e-a2ee-c0fe20f0d064[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\yg1r61z8\\0ff92924-f857-491e-a2ee-c0fe20f0d064[1].jpg"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x264 [0074.516] GetFileType (hFile=0x264) returned 0x1 [0074.516] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e3a0) returned 1 [0074.516] GetFileType (hFile=0x264) returned 0x1 [0074.516] WriteFile (in: hFile=0x264, lpBuffer=0x282847c*, nNumberOfBytesToWrite=0x7f80, lpNumberOfBytesWritten=0x31e460, lpOverlapped=0x0 | out: lpBuffer=0x282847c*, lpNumberOfBytesWritten=0x31e460*=0x7f80, lpOverlapped=0x0) returned 1 [0074.517] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\YG1R61Z8\\0ff92924-f857-491e-a2ee-c0fe20f0d064[1].jpg", nBufferLength=0x105, lpBuffer=0x31dfe4, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\YG1R61Z8\\0ff92924-f857-491e-a2ee-c0fe20f0d064[1].jpg", lpFilePart=0x0) returned 0x9b [0074.517] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\YG1R61Z8\\0ff92924-f857-491e-a2ee-c0fe20f0d064[1].jpg", nBufferLength=0x105, lpBuffer=0x31dfe4, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\YG1R61Z8\\0ff92924-f857-491e-a2ee-c0fe20f0d064[1].jpg", lpFilePart=0x0) returned 0x9b [0074.517] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e444) returned 1 [0074.517] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\YG1R61Z8\\0ff92924-f857-491e-a2ee-c0fe20f0d064[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\yg1r61z8\\0ff92924-f857-491e-a2ee-c0fe20f0d064[1].jpg"), fInfoLevelId=0x0, lpFileInformation=0x31e4c0 | out: lpFileInformation=0x31e4c0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xbe967230, ftCreationTime.dwHighDateTime=0x1d2faf2, ftLastAccessTime.dwLowDateTime=0xbe967230, ftLastAccessTime.dwHighDateTime=0x1d2faf2, ftLastWriteTime.dwLowDateTime=0xfdb4aa0, ftLastWriteTime.dwHighDateTime=0x1d6eb7f, nFileSizeHigh=0x0, nFileSizeLow=0x7f80)) returned 1 [0074.517] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e440) returned 1 [0074.518] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\YG1R61Z8\\0ff92924-f857-491e-a2ee-c0fe20f0d064[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\yg1r61z8\\0ff92924-f857-491e-a2ee-c0fe20f0d064[1].jpg"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\YG1R61Z8\\0ff92924-f857-491e-a2ee-c0fe20f0d064[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\yg1r61z8\\0ff92924-f857-491e-a2ee-c0fe20f0d064[1].jpg")) returned 1 [0074.518] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\YG1R61Z8\\26158[1].png", nBufferLength=0x105, lpBuffer=0x31dec4, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\YG1R61Z8\\26158[1].png", lpFilePart=0x0) returned 0x7c [0074.518] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e3b8) returned 1 [0074.518] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\YG1R61Z8\\26158[1].png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\yg1r61z8\\26158[1].png"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x264 [0074.519] GetFileType (hFile=0x264) returned 0x1 [0074.519] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e3b4) returned 1 [0074.519] GetFileType (hFile=0x264) returned 0x1 [0074.519] GetFileSize (in: hFile=0x264, lpFileSizeHigh=0x31e4c0 | out: lpFileSizeHigh=0x31e4c0*=0x0) returned 0xc05f [0074.519] ReadFile (in: hFile=0x264, lpBuffer=0x2830a38, nNumberOfBytesToRead=0xc05f, lpNumberOfBytesRead=0x31e46c, lpOverlapped=0x0 | out: lpBuffer=0x2830a38*, lpNumberOfBytesRead=0x31e46c*=0xc05f, lpOverlapped=0x0) returned 1 [0074.601] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\YG1R61Z8\\26158[1].png", nBufferLength=0x105, lpBuffer=0x31deb0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\YG1R61Z8\\26158[1].png", lpFilePart=0x0) returned 0x7c [0074.601] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e3a4) returned 1 [0074.601] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\YG1R61Z8\\26158[1].png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\yg1r61z8\\26158[1].png"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x264 [0074.602] GetFileType (hFile=0x264) returned 0x1 [0074.602] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e3a0) returned 1 [0074.602] GetFileType (hFile=0x264) returned 0x1 [0074.602] WriteFile (in: hFile=0x264, lpBuffer=0x26ac11c*, nNumberOfBytesToWrite=0xc060, lpNumberOfBytesWritten=0x31e460, lpOverlapped=0x0 | out: lpBuffer=0x26ac11c*, lpNumberOfBytesWritten=0x31e460*=0xc060, lpOverlapped=0x0) returned 1 [0074.604] CloseHandle (hObject=0x264) returned 1 [0074.604] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\YG1R61Z8\\26158[1].png", nBufferLength=0x105, lpBuffer=0x31dfe4, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\YG1R61Z8\\26158[1].png", lpFilePart=0x0) returned 0x7c [0074.604] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\YG1R61Z8\\26158[1].png", nBufferLength=0x105, lpBuffer=0x31dfe4, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\YG1R61Z8\\26158[1].png", lpFilePart=0x0) returned 0x7c [0074.604] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e444) returned 1 [0074.604] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\YG1R61Z8\\26158[1].png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\yg1r61z8\\26158[1].png"), fInfoLevelId=0x0, lpFileInformation=0x31e4c0 | out: lpFileInformation=0x31e4c0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x54a20810, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x54a20810, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0xfe992e0, ftLastWriteTime.dwHighDateTime=0x1d6eb7f, nFileSizeHigh=0x0, nFileSizeLow=0xc060)) returned 1 [0074.604] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e440) returned 1 [0074.604] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\YG1R61Z8\\26158[1].png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\yg1r61z8\\26158[1].png"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\YG1R61Z8\\26158[1].png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\yg1r61z8\\26158[1].png")) returned 1 [0074.605] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\YG1R61Z8\\AA42x3V[1].png", nBufferLength=0x105, lpBuffer=0x31dec4, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\YG1R61Z8\\AA42x3V[1].png", lpFilePart=0x0) returned 0x7e [0074.605] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e3b8) returned 1 [0074.605] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\YG1R61Z8\\AA42x3V[1].png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\yg1r61z8\\aa42x3v[1].png"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x264 [0074.605] GetFileType (hFile=0x264) returned 0x1 [0074.605] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e3b4) returned 1 [0074.605] GetFileType (hFile=0x264) returned 0x1 [0074.605] GetFileSize (in: hFile=0x264, lpFileSizeHigh=0x31e4c0 | out: lpFileSizeHigh=0x31e4c0*=0x0) returned 0x3e3 [0074.605] ReadFile (in: hFile=0x264, lpBuffer=0x26b8ac0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x31e46c, lpOverlapped=0x0 | out: lpBuffer=0x26b8ac0*, lpNumberOfBytesRead=0x31e46c*=0x3e3, lpOverlapped=0x0) returned 1 [0074.630] CloseHandle (hObject=0x264) returned 1 [0074.643] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\YG1R61Z8\\AA42x3V[1].png", nBufferLength=0x105, lpBuffer=0x31deb0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\YG1R61Z8\\AA42x3V[1].png", lpFilePart=0x0) returned 0x7e [0074.643] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e3a4) returned 1 [0074.643] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\YG1R61Z8\\AA42x3V[1].png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\yg1r61z8\\aa42x3v[1].png"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x264 [0074.644] GetFileType (hFile=0x264) returned 0x1 [0074.644] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e3a0) returned 1 [0074.644] GetFileType (hFile=0x264) returned 0x1 [0074.644] WriteFile (in: hFile=0x264, lpBuffer=0x2707f60*, nNumberOfBytesToWrite=0x3f0, lpNumberOfBytesWritten=0x31e434, lpOverlapped=0x0 | out: lpBuffer=0x2707f60*, lpNumberOfBytesWritten=0x31e434*=0x3f0, lpOverlapped=0x0) returned 1 [0074.646] CloseHandle (hObject=0x264) returned 1 [0074.646] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\YG1R61Z8\\AA42x3V[1].png", nBufferLength=0x105, lpBuffer=0x31dfe4, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\YG1R61Z8\\AA42x3V[1].png", lpFilePart=0x0) returned 0x7e [0074.646] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\YG1R61Z8\\AA42x3V[1].png", nBufferLength=0x105, lpBuffer=0x31dfe4, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\YG1R61Z8\\AA42x3V[1].png", lpFilePart=0x0) returned 0x7e [0074.646] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e444) returned 1 [0074.646] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\YG1R61Z8\\AA42x3V[1].png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\yg1r61z8\\aa42x3v[1].png"), fInfoLevelId=0x0, lpFileInformation=0x31e4c0 | out: lpFileInformation=0x31e4c0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x458eefb0, ftCreationTime.dwHighDateTime=0x1d2faf3, ftLastAccessTime.dwLowDateTime=0x458eefb0, ftLastAccessTime.dwHighDateTime=0x1d2faf3, ftLastWriteTime.dwLowDateTime=0xfee55a0, ftLastWriteTime.dwHighDateTime=0x1d6eb7f, nFileSizeHigh=0x0, nFileSizeLow=0x3f0)) returned 1 [0074.646] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e440) returned 1 [0074.646] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\YG1R61Z8\\AA42x3V[1].png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\yg1r61z8\\aa42x3v[1].png"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\YG1R61Z8\\AA42x3V[1].png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\yg1r61z8\\aa42x3v[1].png")) returned 1 [0074.646] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\YG1R61Z8\\AA58NQj[1].png", nBufferLength=0x105, lpBuffer=0x31dec4, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\YG1R61Z8\\AA58NQj[1].png", lpFilePart=0x0) returned 0x7e [0074.647] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e3b8) returned 1 [0074.647] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\YG1R61Z8\\AA58NQj[1].png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\yg1r61z8\\aa58nqj[1].png"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x264 [0074.647] GetFileType (hFile=0x264) returned 0x1 [0074.647] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e3b4) returned 1 [0074.647] GetFileType (hFile=0x264) returned 0x1 [0074.647] GetFileSize (in: hFile=0x264, lpFileSizeHigh=0x31e4c0 | out: lpFileSizeHigh=0x31e4c0*=0x0) returned 0x1d0 [0074.647] ReadFile (in: hFile=0x264, lpBuffer=0x270950c, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x31e46c, lpOverlapped=0x0 | out: lpBuffer=0x270950c*, lpNumberOfBytesRead=0x31e46c*=0x1d0, lpOverlapped=0x0) returned 1 [0074.648] CloseHandle (hObject=0x264) returned 1 [0074.663] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\YG1R61Z8\\AA58NQj[1].png", nBufferLength=0x105, lpBuffer=0x31deb0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\YG1R61Z8\\AA58NQj[1].png", lpFilePart=0x0) returned 0x7e [0074.663] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e3a4) returned 1 [0074.663] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\YG1R61Z8\\AA58NQj[1].png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\yg1r61z8\\aa58nqj[1].png"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x264 [0074.664] GetFileType (hFile=0x264) returned 0x1 [0074.664] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e3a0) returned 1 [0074.664] GetFileType (hFile=0x264) returned 0x1 [0074.664] WriteFile (in: hFile=0x264, lpBuffer=0x2757e00*, nNumberOfBytesToWrite=0x1e0, lpNumberOfBytesWritten=0x31e434, lpOverlapped=0x0 | out: lpBuffer=0x2757e00*, lpNumberOfBytesWritten=0x31e434*=0x1e0, lpOverlapped=0x0) returned 1 [0074.665] CloseHandle (hObject=0x264) returned 1 [0074.665] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\YG1R61Z8\\AA58NQj[1].png", nBufferLength=0x105, lpBuffer=0x31dfe4, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\YG1R61Z8\\AA58NQj[1].png", lpFilePart=0x0) returned 0x7e [0074.665] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\YG1R61Z8\\AA58NQj[1].png", nBufferLength=0x105, lpBuffer=0x31dfe4, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\YG1R61Z8\\AA58NQj[1].png", lpFilePart=0x0) returned 0x7e [0074.665] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e444) returned 1 [0074.665] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\YG1R61Z8\\AA58NQj[1].png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\yg1r61z8\\aa58nqj[1].png"), fInfoLevelId=0x0, lpFileInformation=0x31e4c0 | out: lpFileInformation=0x31e4c0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x5341bc90, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x5341bc90, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0xff31860, ftLastWriteTime.dwHighDateTime=0x1d6eb7f, nFileSizeHigh=0x0, nFileSizeLow=0x1e0)) returned 1 [0074.666] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e440) returned 1 [0074.666] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\YG1R61Z8\\AA58NQj[1].png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\yg1r61z8\\aa58nqj[1].png"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\YG1R61Z8\\AA58NQj[1].png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\yg1r61z8\\aa58nqj[1].png")) returned 1 [0074.666] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\YG1R61Z8\\AA61Ofl[1].png", nBufferLength=0x105, lpBuffer=0x31dec4, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\YG1R61Z8\\AA61Ofl[1].png", lpFilePart=0x0) returned 0x7e [0074.666] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e3b8) returned 1 [0074.666] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\YG1R61Z8\\AA61Ofl[1].png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\yg1r61z8\\aa61ofl[1].png"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x264 [0074.666] GetFileType (hFile=0x264) returned 0x1 [0074.666] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e3b4) returned 1 [0074.666] GetFileType (hFile=0x264) returned 0x1 [0074.666] GetFileSize (in: hFile=0x264, lpFileSizeHigh=0x31e4c0 | out: lpFileSizeHigh=0x31e4c0*=0x0) returned 0x1c4 [0074.666] ReadFile (in: hFile=0x264, lpBuffer=0x27593a0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x31e46c, lpOverlapped=0x0 | out: lpBuffer=0x27593a0*, lpNumberOfBytesRead=0x31e46c*=0x1c4, lpOverlapped=0x0) returned 1 [0074.739] CloseHandle (hObject=0x264) returned 1 [0074.752] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\YG1R61Z8\\AA61Ofl[1].png", nBufferLength=0x105, lpBuffer=0x31deb0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\YG1R61Z8\\AA61Ofl[1].png", lpFilePart=0x0) returned 0x7e [0074.752] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e3a4) returned 1 [0074.752] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\YG1R61Z8\\AA61Ofl[1].png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\yg1r61z8\\aa61ofl[1].png"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x264 [0074.753] GetFileType (hFile=0x264) returned 0x1 [0074.753] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e3a0) returned 1 [0074.753] GetFileType (hFile=0x264) returned 0x1 [0074.753] WriteFile (in: hFile=0x264, lpBuffer=0x27a7c40*, nNumberOfBytesToWrite=0x1d0, lpNumberOfBytesWritten=0x31e434, lpOverlapped=0x0 | out: lpBuffer=0x27a7c40*, lpNumberOfBytesWritten=0x31e434*=0x1d0, lpOverlapped=0x0) returned 1 [0074.754] CloseHandle (hObject=0x264) returned 1 [0074.754] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\YG1R61Z8\\AA61Ofl[1].png", nBufferLength=0x105, lpBuffer=0x31dfe4, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\YG1R61Z8\\AA61Ofl[1].png", lpFilePart=0x0) returned 0x7e [0074.754] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\YG1R61Z8\\AA61Ofl[1].png", nBufferLength=0x105, lpBuffer=0x31dfe4, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\YG1R61Z8\\AA61Ofl[1].png", lpFilePart=0x0) returned 0x7e [0074.754] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e444) returned 1 [0074.754] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\YG1R61Z8\\AA61Ofl[1].png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\yg1r61z8\\aa61ofl[1].png"), fInfoLevelId=0x0, lpFileInformation=0x31e4c0 | out: lpFileInformation=0x31e4c0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x515e8570, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x515e8570, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0xffeff40, ftLastWriteTime.dwHighDateTime=0x1d6eb7f, nFileSizeHigh=0x0, nFileSizeLow=0x1d0)) returned 1 [0074.754] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e440) returned 1 [0074.755] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\YG1R61Z8\\AA61Ofl[1].png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\yg1r61z8\\aa61ofl[1].png"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\YG1R61Z8\\AA61Ofl[1].png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\yg1r61z8\\aa61ofl[1].png")) returned 1 [0074.755] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\YG1R61Z8\\AA6SFRQ[2].png", nBufferLength=0x105, lpBuffer=0x31dec4, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\YG1R61Z8\\AA6SFRQ[2].png", lpFilePart=0x0) returned 0x7e [0074.755] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e3b8) returned 1 [0074.755] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\YG1R61Z8\\AA6SFRQ[2].png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\yg1r61z8\\aa6sfrq[2].png"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x264 [0074.755] GetFileType (hFile=0x264) returned 0x1 [0074.756] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e3b4) returned 1 [0074.756] GetFileType (hFile=0x264) returned 0x1 [0074.756] GetFileSize (in: hFile=0x264, lpFileSizeHigh=0x31e4c0 | out: lpFileSizeHigh=0x31e4c0*=0x0) returned 0x2ed [0074.756] ReadFile (in: hFile=0x264, lpBuffer=0x27a930c, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x31e46c, lpOverlapped=0x0 | out: lpBuffer=0x27a930c*, lpNumberOfBytesRead=0x31e46c*=0x2ed, lpOverlapped=0x0) returned 1 [0074.771] CloseHandle (hObject=0x264) returned 1 [0074.784] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\YG1R61Z8\\AA6SFRQ[2].png", nBufferLength=0x105, lpBuffer=0x31deb0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\YG1R61Z8\\AA6SFRQ[2].png", lpFilePart=0x0) returned 0x7e [0074.784] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e3a4) returned 1 [0074.784] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\YG1R61Z8\\AA6SFRQ[2].png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\yg1r61z8\\aa6sfrq[2].png"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x264 [0074.785] GetFileType (hFile=0x264) returned 0x1 [0074.785] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e3a0) returned 1 [0074.785] GetFileType (hFile=0x264) returned 0x1 [0074.785] WriteFile (in: hFile=0x264, lpBuffer=0x27f8144*, nNumberOfBytesToWrite=0x2f0, lpNumberOfBytesWritten=0x31e434, lpOverlapped=0x0 | out: lpBuffer=0x27f8144*, lpNumberOfBytesWritten=0x31e434*=0x2f0, lpOverlapped=0x0) returned 1 [0074.786] CloseHandle (hObject=0x264) returned 1 [0074.787] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\YG1R61Z8\\AA6SFRQ[2].png", nBufferLength=0x105, lpBuffer=0x31dfe4, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\YG1R61Z8\\AA6SFRQ[2].png", lpFilePart=0x0) returned 0x7e [0074.787] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\YG1R61Z8\\AA6SFRQ[2].png", nBufferLength=0x105, lpBuffer=0x31dfe4, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\YG1R61Z8\\AA6SFRQ[2].png", lpFilePart=0x0) returned 0x7e [0074.787] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e444) returned 1 [0074.787] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\YG1R61Z8\\AA6SFRQ[2].png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\yg1r61z8\\aa6sfrq[2].png"), fInfoLevelId=0x0, lpFileInformation=0x31e4c0 | out: lpFileInformation=0x31e4c0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x45915110, ftCreationTime.dwHighDateTime=0x1d2faf3, ftLastAccessTime.dwLowDateTime=0x45915110, ftLastAccessTime.dwHighDateTime=0x1d2faf3, ftLastWriteTime.dwLowDateTime=0x10062360, ftLastWriteTime.dwHighDateTime=0x1d6eb7f, nFileSizeHigh=0x0, nFileSizeLow=0x2f0)) returned 1 [0074.787] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e440) returned 1 [0074.787] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\YG1R61Z8\\AA6SFRQ[2].png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\yg1r61z8\\aa6sfrq[2].png"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\YG1R61Z8\\AA6SFRQ[2].png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\yg1r61z8\\aa6sfrq[2].png")) returned 1 [0074.787] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\YG1R61Z8\\AAa1vhm[1].png", nBufferLength=0x105, lpBuffer=0x31dec4, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\YG1R61Z8\\AAa1vhm[1].png", lpFilePart=0x0) returned 0x7e [0074.787] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e3b8) returned 1 [0074.787] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\YG1R61Z8\\AAa1vhm[1].png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\yg1r61z8\\aaa1vhm[1].png"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x264 [0074.788] GetFileType (hFile=0x264) returned 0x1 [0074.788] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e3b4) returned 1 [0074.788] GetFileType (hFile=0x264) returned 0x1 [0074.788] GetFileSize (in: hFile=0x264, lpFileSizeHigh=0x31e4c0 | out: lpFileSizeHigh=0x31e4c0*=0x0) returned 0x19e [0074.788] ReadFile (in: hFile=0x264, lpBuffer=0x27f96c0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x31e46c, lpOverlapped=0x0 | out: lpBuffer=0x27f96c0*, lpNumberOfBytesRead=0x31e46c*=0x19e, lpOverlapped=0x0) returned 1 [0074.791] CloseHandle (hObject=0x264) returned 1 [0074.804] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\YG1R61Z8\\AAa1vhm[1].png", nBufferLength=0x105, lpBuffer=0x31deb0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\YG1R61Z8\\AAa1vhm[1].png", lpFilePart=0x0) returned 0x7e [0074.804] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e3a4) returned 1 [0074.804] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\YG1R61Z8\\AAa1vhm[1].png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\yg1r61z8\\aaa1vhm[1].png"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x264 [0074.805] GetFileType (hFile=0x264) returned 0x1 [0074.805] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e3a0) returned 1 [0074.805] GetFileType (hFile=0x264) returned 0x1 [0074.805] WriteFile (in: hFile=0x264, lpBuffer=0x2847e68*, nNumberOfBytesToWrite=0x1a0, lpNumberOfBytesWritten=0x31e434, lpOverlapped=0x0 | out: lpBuffer=0x2847e68*, lpNumberOfBytesWritten=0x31e434*=0x1a0, lpOverlapped=0x0) returned 1 [0074.806] CloseHandle (hObject=0x264) returned 1 [0074.808] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\YG1R61Z8\\AAa1vhm[1].png", nBufferLength=0x105, lpBuffer=0x31dfe4, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\YG1R61Z8\\AAa1vhm[1].png", lpFilePart=0x0) returned 0x7e [0074.808] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\YG1R61Z8\\AAa1vhm[1].png", nBufferLength=0x105, lpBuffer=0x31dfe4, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\YG1R61Z8\\AAa1vhm[1].png", lpFilePart=0x0) returned 0x7e [0074.811] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e444) returned 1 [0074.811] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\YG1R61Z8\\AAa1vhm[1].png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\yg1r61z8\\aaa1vhm[1].png"), fInfoLevelId=0x0, lpFileInformation=0x31e4c0 | out: lpFileInformation=0x31e4c0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x4580a770, ftCreationTime.dwHighDateTime=0x1d2faf3, ftLastAccessTime.dwLowDateTime=0x4580a770, ftLastAccessTime.dwHighDateTime=0x1d2faf3, ftLastWriteTime.dwLowDateTime=0x100884c0, ftLastWriteTime.dwHighDateTime=0x1d6eb7f, nFileSizeHigh=0x0, nFileSizeLow=0x1a0)) returned 1 [0074.812] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e440) returned 1 [0074.812] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\YG1R61Z8\\AAa1vhm[1].png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\yg1r61z8\\aaa1vhm[1].png"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\YG1R61Z8\\AAa1vhm[1].png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\yg1r61z8\\aaa1vhm[1].png")) returned 1 [0074.812] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\YG1R61Z8\\AAa1xJF[1].png", nBufferLength=0x105, lpBuffer=0x31dec4, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\YG1R61Z8\\AAa1xJF[1].png", lpFilePart=0x0) returned 0x7e [0074.812] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e3b8) returned 1 [0074.812] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\YG1R61Z8\\AAa1xJF[1].png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\yg1r61z8\\aaa1xjf[1].png"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x264 [0074.812] GetFileType (hFile=0x264) returned 0x1 [0074.812] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e3b4) returned 1 [0074.812] GetFileType (hFile=0x264) returned 0x1 [0074.812] GetFileSize (in: hFile=0x264, lpFileSizeHigh=0x31e4c0 | out: lpFileSizeHigh=0x31e4c0*=0x0) returned 0x2c1 [0074.812] ReadFile (in: hFile=0x264, lpBuffer=0x26499c8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x31e46c, lpOverlapped=0x0 | out: lpBuffer=0x26499c8*, lpNumberOfBytesRead=0x31e46c*=0x2c1, lpOverlapped=0x0) returned 1 [0074.814] CloseHandle (hObject=0x264) returned 1 [0074.854] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\YG1R61Z8\\AAa1xJF[1].png", nBufferLength=0x105, lpBuffer=0x31deb0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\YG1R61Z8\\AAa1xJF[1].png", lpFilePart=0x0) returned 0x7e [0074.854] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e3a4) returned 1 [0074.854] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\YG1R61Z8\\AAa1xJF[1].png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\yg1r61z8\\aaa1xjf[1].png"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x264 [0074.855] GetFileType (hFile=0x264) returned 0x1 [0074.855] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e3a0) returned 1 [0074.855] GetFileType (hFile=0x264) returned 0x1 [0074.855] WriteFile (in: hFile=0x264, lpBuffer=0x26988c8*, nNumberOfBytesToWrite=0x2d0, lpNumberOfBytesWritten=0x31e434, lpOverlapped=0x0 | out: lpBuffer=0x26988c8*, lpNumberOfBytesWritten=0x31e434*=0x2d0, lpOverlapped=0x0) returned 1 [0074.856] CloseHandle (hObject=0x264) returned 1 [0074.856] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\YG1R61Z8\\AAa1xJF[1].png", nBufferLength=0x105, lpBuffer=0x31dfe4, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\YG1R61Z8\\AAa1xJF[1].png", lpFilePart=0x0) returned 0x7e [0074.856] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\YG1R61Z8\\AAa1xJF[1].png", nBufferLength=0x105, lpBuffer=0x31dfe4, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\YG1R61Z8\\AAa1xJF[1].png", lpFilePart=0x0) returned 0x7e [0074.856] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e444) returned 1 [0074.856] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\YG1R61Z8\\AAa1xJF[1].png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\yg1r61z8\\aaa1xjf[1].png"), fInfoLevelId=0x0, lpFileInformation=0x31e4c0 | out: lpFileInformation=0x31e4c0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x53846310, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x53846310, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x100fa8e0, ftLastWriteTime.dwHighDateTime=0x1d6eb7f, nFileSizeHigh=0x0, nFileSizeLow=0x2d0)) returned 1 [0074.856] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e440) returned 1 [0074.856] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\YG1R61Z8\\AAa1xJF[1].png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\yg1r61z8\\aaa1xjf[1].png"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\YG1R61Z8\\AAa1xJF[1].png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\yg1r61z8\\aaa1xjf[1].png")) returned 1 [0074.857] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\YG1R61Z8\\AAlG41q[1].jpg", nBufferLength=0x105, lpBuffer=0x31dec4, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\YG1R61Z8\\AAlG41q[1].jpg", lpFilePart=0x0) returned 0x7e [0074.857] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e3b8) returned 1 [0074.857] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\YG1R61Z8\\AAlG41q[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\yg1r61z8\\aalg41q[1].jpg"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x264 [0074.857] GetFileType (hFile=0x264) returned 0x1 [0074.857] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e3b4) returned 1 [0074.857] GetFileType (hFile=0x264) returned 0x1 [0074.857] GetFileSize (in: hFile=0x264, lpFileSizeHigh=0x31e4c0 | out: lpFileSizeHigh=0x31e4c0*=0x0) returned 0x7b8 [0074.857] ReadFile (in: hFile=0x264, lpBuffer=0x269a45c, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x31e46c, lpOverlapped=0x0 | out: lpBuffer=0x269a45c*, lpNumberOfBytesRead=0x31e46c*=0x7b8, lpOverlapped=0x0) returned 1 [0075.159] CloseHandle (hObject=0x264) returned 1 [0075.173] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\YG1R61Z8\\AAlG41q[1].jpg", nBufferLength=0x105, lpBuffer=0x31deb0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\YG1R61Z8\\AAlG41q[1].jpg", lpFilePart=0x0) returned 0x7e [0075.173] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e3a4) returned 1 [0075.173] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\YG1R61Z8\\AAlG41q[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\yg1r61z8\\aalg41q[1].jpg"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x264 [0075.174] GetFileType (hFile=0x264) returned 0x1 [0075.174] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e3a0) returned 1 [0075.174] GetFileType (hFile=0x264) returned 0x1 [0075.174] WriteFile (in: hFile=0x264, lpBuffer=0x26eaaa8*, nNumberOfBytesToWrite=0x7c0, lpNumberOfBytesWritten=0x31e434, lpOverlapped=0x0 | out: lpBuffer=0x26eaaa8*, lpNumberOfBytesWritten=0x31e434*=0x7c0, lpOverlapped=0x0) returned 1 [0075.175] CloseHandle (hObject=0x264) returned 1 [0075.175] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\YG1R61Z8\\AAlG41q[1].jpg", nBufferLength=0x105, lpBuffer=0x31dfe4, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\YG1R61Z8\\AAlG41q[1].jpg", lpFilePart=0x0) returned 0x7e [0075.176] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\YG1R61Z8\\AAlG41q[1].jpg", nBufferLength=0x105, lpBuffer=0x31dfe4, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\YG1R61Z8\\AAlG41q[1].jpg", lpFilePart=0x0) returned 0x7e [0075.176] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e444) returned 1 [0075.176] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\YG1R61Z8\\AAlG41q[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\yg1r61z8\\aalg41q[1].jpg"), fInfoLevelId=0x0, lpFileInformation=0x31e4c0 | out: lpFileInformation=0x31e4c0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x5159c2b0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x5159c2b0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x103f4460, ftLastWriteTime.dwHighDateTime=0x1d6eb7f, nFileSizeHigh=0x0, nFileSizeLow=0x7c0)) returned 1 [0075.176] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e440) returned 1 [0075.176] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\YG1R61Z8\\AAlG41q[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\yg1r61z8\\aalg41q[1].jpg"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\YG1R61Z8\\AAlG41q[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\yg1r61z8\\aalg41q[1].jpg")) returned 1 [0075.176] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\YG1R61Z8\\AAmin0Z[1].png", nBufferLength=0x105, lpBuffer=0x31dec4, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\YG1R61Z8\\AAmin0Z[1].png", lpFilePart=0x0) returned 0x7e [0075.176] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e3b8) returned 1 [0075.176] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\YG1R61Z8\\AAmin0Z[1].png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\yg1r61z8\\aamin0z[1].png"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x264 [0075.177] GetFileType (hFile=0x264) returned 0x1 [0075.177] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e3b4) returned 1 [0075.177] GetFileType (hFile=0x264) returned 0x1 [0075.177] GetFileSize (in: hFile=0x264, lpFileSizeHigh=0x31e4c0 | out: lpFileSizeHigh=0x31e4c0*=0x0) returned 0x157 [0075.177] ReadFile (in: hFile=0x264, lpBuffer=0x26ebfdc, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x31e46c, lpOverlapped=0x0 | out: lpBuffer=0x26ebfdc*, lpNumberOfBytesRead=0x31e46c*=0x157, lpOverlapped=0x0) returned 1 [0075.180] CloseHandle (hObject=0x264) returned 1 [0075.195] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\YG1R61Z8\\AAmin0Z[1].png", nBufferLength=0x105, lpBuffer=0x31deb0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\YG1R61Z8\\AAmin0Z[1].png", lpFilePart=0x0) returned 0x7e [0075.195] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e3a4) returned 1 [0075.195] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\YG1R61Z8\\AAmin0Z[1].png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\yg1r61z8\\aamin0z[1].png"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x264 [0075.196] GetFileType (hFile=0x264) returned 0x1 [0075.196] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e3a0) returned 1 [0075.196] GetFileType (hFile=0x264) returned 0x1 [0075.196] WriteFile (in: hFile=0x264, lpBuffer=0x273a64c*, nNumberOfBytesToWrite=0x160, lpNumberOfBytesWritten=0x31e434, lpOverlapped=0x0 | out: lpBuffer=0x273a64c*, lpNumberOfBytesWritten=0x31e434*=0x160, lpOverlapped=0x0) returned 1 [0075.197] CloseHandle (hObject=0x264) returned 1 [0075.197] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\YG1R61Z8\\AAmin0Z[1].png", nBufferLength=0x105, lpBuffer=0x31dfe4, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\YG1R61Z8\\AAmin0Z[1].png", lpFilePart=0x0) returned 0x7e [0075.197] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\YG1R61Z8\\AAmin0Z[1].png", nBufferLength=0x105, lpBuffer=0x31dfe4, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\YG1R61Z8\\AAmin0Z[1].png", lpFilePart=0x0) returned 0x7e [0075.197] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e444) returned 1 [0075.197] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\YG1R61Z8\\AAmin0Z[1].png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\yg1r61z8\\aamin0z[1].png"), fInfoLevelId=0x0, lpFileInformation=0x31e4c0 | out: lpFileInformation=0x31e4c0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x45798350, ftCreationTime.dwHighDateTime=0x1d2faf3, ftLastAccessTime.dwLowDateTime=0x45798350, ftLastAccessTime.dwHighDateTime=0x1d2faf3, ftLastWriteTime.dwLowDateTime=0x10440720, ftLastWriteTime.dwHighDateTime=0x1d6eb7f, nFileSizeHigh=0x0, nFileSizeLow=0x160)) returned 1 [0075.197] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e440) returned 1 [0075.197] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\YG1R61Z8\\AAmin0Z[1].png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\yg1r61z8\\aamin0z[1].png"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\YG1R61Z8\\AAmin0Z[1].png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\yg1r61z8\\aamin0z[1].png")) returned 1 [0075.197] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\YG1R61Z8\\AAnhRyj[1].jpg", nBufferLength=0x105, lpBuffer=0x31dec4, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\YG1R61Z8\\AAnhRyj[1].jpg", lpFilePart=0x0) returned 0x7e [0075.197] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e3b8) returned 1 [0075.198] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\YG1R61Z8\\AAnhRyj[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\yg1r61z8\\aanhryj[1].jpg"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x264 [0075.198] GetFileType (hFile=0x264) returned 0x1 [0075.198] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e3b4) returned 1 [0075.198] GetFileType (hFile=0x264) returned 0x1 [0075.198] GetFileSize (in: hFile=0x264, lpFileSizeHigh=0x31e4c0 | out: lpFileSizeHigh=0x31e4c0*=0x0) returned 0x36b1 [0075.198] ReadFile (in: hFile=0x264, lpBuffer=0x273ba1c, nNumberOfBytesToRead=0x36b1, lpNumberOfBytesRead=0x31e46c, lpOverlapped=0x0 | out: lpBuffer=0x273ba1c*, lpNumberOfBytesRead=0x31e46c*=0x36b1, lpOverlapped=0x0) returned 1 [0075.199] CloseHandle (hObject=0x264) returned 1 [0075.215] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\YG1R61Z8\\AAnhRyj[1].jpg", nBufferLength=0x105, lpBuffer=0x31deb0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\YG1R61Z8\\AAnhRyj[1].jpg", lpFilePart=0x0) returned 0x7e [0075.215] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e3a4) returned 1 [0075.215] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\YG1R61Z8\\AAnhRyj[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\yg1r61z8\\aanhryj[1].jpg"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x264 [0075.216] GetFileType (hFile=0x264) returned 0x1 [0075.216] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e3a0) returned 1 [0075.216] GetFileType (hFile=0x264) returned 0x1 [0075.216] WriteFile (in: hFile=0x264, lpBuffer=0x27999c4*, nNumberOfBytesToWrite=0x36c0, lpNumberOfBytesWritten=0x31e460, lpOverlapped=0x0 | out: lpBuffer=0x27999c4*, lpNumberOfBytesWritten=0x31e460*=0x36c0, lpOverlapped=0x0) returned 1 [0075.217] CloseHandle (hObject=0x264) returned 1 [0075.217] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\YG1R61Z8\\AAnhRyj[1].jpg", nBufferLength=0x105, lpBuffer=0x31dfe4, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\YG1R61Z8\\AAnhRyj[1].jpg", lpFilePart=0x0) returned 0x7e [0075.217] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\YG1R61Z8\\AAnhRyj[1].jpg", nBufferLength=0x105, lpBuffer=0x31dfe4, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\YG1R61Z8\\AAnhRyj[1].jpg", lpFilePart=0x0) returned 0x7e [0075.217] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e444) returned 1 [0075.217] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\YG1R61Z8\\AAnhRyj[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\yg1r61z8\\aanhryj[1].jpg"), fInfoLevelId=0x0, lpFileInformation=0x31e4c0 | out: lpFileInformation=0x31e4c0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x533f5b30, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x533f5b30, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x10466880, ftLastWriteTime.dwHighDateTime=0x1d6eb7f, nFileSizeHigh=0x0, nFileSizeLow=0x36c0)) returned 1 [0075.217] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e440) returned 1 [0075.217] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\YG1R61Z8\\AAnhRyj[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\yg1r61z8\\aanhryj[1].jpg"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\YG1R61Z8\\AAnhRyj[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\yg1r61z8\\aanhryj[1].jpg")) returned 1 [0075.218] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\YG1R61Z8\\ae8e984b-1820-4a8d-93dc-392ed6563fb6[1].jpg", nBufferLength=0x105, lpBuffer=0x31dec4, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\YG1R61Z8\\ae8e984b-1820-4a8d-93dc-392ed6563fb6[1].jpg", lpFilePart=0x0) returned 0x9b [0075.218] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e3b8) returned 1 [0075.218] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\YG1R61Z8\\ae8e984b-1820-4a8d-93dc-392ed6563fb6[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\yg1r61z8\\ae8e984b-1820-4a8d-93dc-392ed6563fb6[1].jpg"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x264 [0075.219] GetFileType (hFile=0x264) returned 0x1 [0075.219] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e3b4) returned 1 [0075.219] GetFileType (hFile=0x264) returned 0x1 [0075.219] GetFileSize (in: hFile=0x264, lpFileSizeHigh=0x31e4c0 | out: lpFileSizeHigh=0x31e4c0*=0x0) returned 0x8217 [0075.219] ReadFile (in: hFile=0x264, lpBuffer=0x279d698, nNumberOfBytesToRead=0x8217, lpNumberOfBytesRead=0x31e46c, lpOverlapped=0x0 | out: lpBuffer=0x279d698*, lpNumberOfBytesRead=0x31e46c*=0x8217, lpOverlapped=0x0) returned 1 [0075.222] CloseHandle (hObject=0x264) returned 1 [0075.236] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\YG1R61Z8\\ae8e984b-1820-4a8d-93dc-392ed6563fb6[1].jpg", nBufferLength=0x105, lpBuffer=0x31deb0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\YG1R61Z8\\ae8e984b-1820-4a8d-93dc-392ed6563fb6[1].jpg", lpFilePart=0x0) returned 0x9b [0075.236] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e3a4) returned 1 [0075.236] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\YG1R61Z8\\ae8e984b-1820-4a8d-93dc-392ed6563fb6[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\yg1r61z8\\ae8e984b-1820-4a8d-93dc-392ed6563fb6[1].jpg"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x264 [0075.237] GetFileType (hFile=0x264) returned 0x1 [0075.237] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e3a0) returned 1 [0075.237] GetFileType (hFile=0x264) returned 0x1 [0075.237] WriteFile (in: hFile=0x264, lpBuffer=0x2812f20*, nNumberOfBytesToWrite=0x8220, lpNumberOfBytesWritten=0x31e460, lpOverlapped=0x0 | out: lpBuffer=0x2812f20*, lpNumberOfBytesWritten=0x31e460*=0x8220, lpOverlapped=0x0) returned 1 [0075.239] CloseHandle (hObject=0x264) returned 1 [0075.239] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\YG1R61Z8\\ae8e984b-1820-4a8d-93dc-392ed6563fb6[1].jpg", nBufferLength=0x105, lpBuffer=0x31dfe4, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\YG1R61Z8\\ae8e984b-1820-4a8d-93dc-392ed6563fb6[1].jpg", lpFilePart=0x0) returned 0x9b [0075.239] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\YG1R61Z8\\ae8e984b-1820-4a8d-93dc-392ed6563fb6[1].jpg", nBufferLength=0x105, lpBuffer=0x31dfe4, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\YG1R61Z8\\ae8e984b-1820-4a8d-93dc-392ed6563fb6[1].jpg", lpFilePart=0x0) returned 0x9b [0075.239] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e444) returned 1 [0075.239] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\YG1R61Z8\\ae8e984b-1820-4a8d-93dc-392ed6563fb6[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\yg1r61z8\\ae8e984b-1820-4a8d-93dc-392ed6563fb6[1].jpg"), fInfoLevelId=0x0, lpFileInformation=0x31e4c0 | out: lpFileInformation=0x31e4c0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xbe967230, ftCreationTime.dwHighDateTime=0x1d2faf2, ftLastAccessTime.dwLowDateTime=0xbe967230, ftLastAccessTime.dwHighDateTime=0x1d2faf2, ftLastWriteTime.dwLowDateTime=0x104b2b40, ftLastWriteTime.dwHighDateTime=0x1d6eb7f, nFileSizeHigh=0x0, nFileSizeLow=0x8220)) returned 1 [0075.239] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e440) returned 1 [0075.239] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\YG1R61Z8\\ae8e984b-1820-4a8d-93dc-392ed6563fb6[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\yg1r61z8\\ae8e984b-1820-4a8d-93dc-392ed6563fb6[1].jpg"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\YG1R61Z8\\ae8e984b-1820-4a8d-93dc-392ed6563fb6[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\yg1r61z8\\ae8e984b-1820-4a8d-93dc-392ed6563fb6[1].jpg")) returned 1 [0075.240] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\YG1R61Z8\\BB56XTo[1].png", nBufferLength=0x105, lpBuffer=0x31dec4, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\YG1R61Z8\\BB56XTo[1].png", lpFilePart=0x0) returned 0x7e [0075.240] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e3b8) returned 1 [0075.240] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\YG1R61Z8\\BB56XTo[1].png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\yg1r61z8\\bb56xto[1].png"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x264 [0075.240] GetFileType (hFile=0x264) returned 0x1 [0075.240] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e3b4) returned 1 [0075.240] GetFileType (hFile=0x264) returned 0x1 [0075.240] GetFileSize (in: hFile=0x264, lpFileSizeHigh=0x31e4c0 | out: lpFileSizeHigh=0x31e4c0*=0x0) returned 0x145 [0075.240] ReadFile (in: hFile=0x264, lpBuffer=0x281b900, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x31e46c, lpOverlapped=0x0 | out: lpBuffer=0x281b900*, lpNumberOfBytesRead=0x31e46c*=0x145, lpOverlapped=0x0) returned 1 [0075.247] CloseHandle (hObject=0x264) returned 1 [0075.298] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\YG1R61Z8\\BB56XTo[1].png", nBufferLength=0x105, lpBuffer=0x31deb0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\YG1R61Z8\\BB56XTo[1].png", lpFilePart=0x0) returned 0x7e [0075.298] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e3a4) returned 1 [0075.298] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\YG1R61Z8\\BB56XTo[1].png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\yg1r61z8\\bb56xto[1].png"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x264 [0075.299] GetFileType (hFile=0x264) returned 0x1 [0075.299] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e3a0) returned 1 [0075.299] GetFileType (hFile=0x264) returned 0x1 [0075.299] WriteFile (in: hFile=0x264, lpBuffer=0x266a48c*, nNumberOfBytesToWrite=0x150, lpNumberOfBytesWritten=0x31e434, lpOverlapped=0x0 | out: lpBuffer=0x266a48c*, lpNumberOfBytesWritten=0x31e434*=0x150, lpOverlapped=0x0) returned 1 [0075.300] CloseHandle (hObject=0x264) returned 1 [0075.300] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\YG1R61Z8\\BB56XTo[1].png", nBufferLength=0x105, lpBuffer=0x31dfe4, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\YG1R61Z8\\BB56XTo[1].png", lpFilePart=0x0) returned 0x7e [0075.300] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\YG1R61Z8\\BB56XTo[1].png", nBufferLength=0x105, lpBuffer=0x31dfe4, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\YG1R61Z8\\BB56XTo[1].png", lpFilePart=0x0) returned 0x7e [0075.300] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e444) returned 1 [0075.300] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\YG1R61Z8\\BB56XTo[1].png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\yg1r61z8\\bb56xto[1].png"), fInfoLevelId=0x0, lpFileInformation=0x31e4c0 | out: lpFileInformation=0x31e4c0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x45987530, ftCreationTime.dwHighDateTime=0x1d2faf3, ftLastAccessTime.dwLowDateTime=0x45987530, ftLastAccessTime.dwHighDateTime=0x1d2faf3, ftLastWriteTime.dwLowDateTime=0x10524f60, ftLastWriteTime.dwHighDateTime=0x1d6eb7f, nFileSizeHigh=0x0, nFileSizeLow=0x150)) returned 1 [0075.300] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e440) returned 1 [0075.300] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\YG1R61Z8\\BB56XTo[1].png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\yg1r61z8\\bb56xto[1].png"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\YG1R61Z8\\BB56XTo[1].png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\yg1r61z8\\bb56xto[1].png")) returned 1 [0075.301] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\YG1R61Z8\\BB5vO0g[1].png", nBufferLength=0x105, lpBuffer=0x31dec4, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\YG1R61Z8\\BB5vO0g[1].png", lpFilePart=0x0) returned 0x7e [0075.301] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e3b8) returned 1 [0075.301] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\YG1R61Z8\\BB5vO0g[1].png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\yg1r61z8\\bb5vo0g[1].png"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x264 [0075.301] GetFileType (hFile=0x264) returned 0x1 [0075.301] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e3b4) returned 1 [0075.301] GetFileType (hFile=0x264) returned 0x1 [0075.301] GetFileSize (in: hFile=0x264, lpFileSizeHigh=0x31e4c0 | out: lpFileSizeHigh=0x31e4c0*=0x0) returned 0x1b6 [0075.301] ReadFile (in: hFile=0x264, lpBuffer=0x266ba20, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x31e46c, lpOverlapped=0x0 | out: lpBuffer=0x266ba20*, lpNumberOfBytesRead=0x31e46c*=0x1b6, lpOverlapped=0x0) returned 1 [0075.307] CloseHandle (hObject=0x264) returned 1 [0075.320] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\YG1R61Z8\\BB5vO0g[1].png", nBufferLength=0x105, lpBuffer=0x31deb0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\YG1R61Z8\\BB5vO0g[1].png", lpFilePart=0x0) returned 0x7e [0075.320] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e3a4) returned 1 [0075.320] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\YG1R61Z8\\BB5vO0g[1].png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\yg1r61z8\\bb5vo0g[1].png"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x264 [0075.321] GetFileType (hFile=0x264) returned 0x1 [0075.321] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e3a0) returned 1 [0075.322] GetFileType (hFile=0x264) returned 0x1 [0075.322] WriteFile (in: hFile=0x264, lpBuffer=0x26ba3cc*, nNumberOfBytesToWrite=0x1c0, lpNumberOfBytesWritten=0x31e434, lpOverlapped=0x0 | out: lpBuffer=0x26ba3cc*, lpNumberOfBytesWritten=0x31e434*=0x1c0, lpOverlapped=0x0) returned 1 [0075.322] CloseHandle (hObject=0x264) returned 1 [0075.323] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\YG1R61Z8\\BB5vO0g[1].png", nBufferLength=0x105, lpBuffer=0x31dfe4, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\YG1R61Z8\\BB5vO0g[1].png", lpFilePart=0x0) returned 0x7e [0075.323] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\YG1R61Z8\\BB5vO0g[1].png", nBufferLength=0x105, lpBuffer=0x31dfe4, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\YG1R61Z8\\BB5vO0g[1].png", lpFilePart=0x0) returned 0x7e [0075.323] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e444) returned 1 [0075.323] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\YG1R61Z8\\BB5vO0g[1].png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\yg1r61z8\\bb5vo0g[1].png"), fInfoLevelId=0x0, lpFileInformation=0x31e4c0 | out: lpFileInformation=0x31e4c0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x52e28590, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x52e28590, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x10571220, ftLastWriteTime.dwHighDateTime=0x1d6eb7f, nFileSizeHigh=0x0, nFileSizeLow=0x1c0)) returned 1 [0075.323] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e440) returned 1 [0075.323] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\YG1R61Z8\\BB5vO0g[1].png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\yg1r61z8\\bb5vo0g[1].png"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\YG1R61Z8\\BB5vO0g[1].png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\yg1r61z8\\bb5vo0g[1].png")) returned 1 [0075.323] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\YG1R61Z8\\BB8AdqN[1].png", nBufferLength=0x105, lpBuffer=0x31dec4, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\YG1R61Z8\\BB8AdqN[1].png", lpFilePart=0x0) returned 0x7e [0075.323] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e3b8) returned 1 [0075.323] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\YG1R61Z8\\BB8AdqN[1].png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\yg1r61z8\\bb8adqn[1].png"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x264 [0075.324] GetFileType (hFile=0x264) returned 0x1 [0075.324] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e3b4) returned 1 [0075.324] GetFileType (hFile=0x264) returned 0x1 [0075.324] GetFileSize (in: hFile=0x264, lpFileSizeHigh=0x31e4c0 | out: lpFileSizeHigh=0x31e4c0*=0x0) returned 0x156 [0075.324] ReadFile (in: hFile=0x264, lpBuffer=0x26bb900, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x31e46c, lpOverlapped=0x0 | out: lpBuffer=0x26bb900*, lpNumberOfBytesRead=0x31e46c*=0x156, lpOverlapped=0x0) returned 1 [0075.326] CloseHandle (hObject=0x264) returned 1 [0075.340] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\YG1R61Z8\\BB8AdqN[1].png", nBufferLength=0x105, lpBuffer=0x31deb0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\YG1R61Z8\\BB8AdqN[1].png", lpFilePart=0x0) returned 0x7e [0075.340] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e3a4) returned 1 [0075.340] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\YG1R61Z8\\BB8AdqN[1].png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\yg1r61z8\\bb8adqn[1].png"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x264 [0075.341] GetFileType (hFile=0x264) returned 0x1 [0075.341] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e3a0) returned 1 [0075.341] GetFileType (hFile=0x264) returned 0x1 [0075.341] WriteFile (in: hFile=0x264, lpBuffer=0x2709f70*, nNumberOfBytesToWrite=0x160, lpNumberOfBytesWritten=0x31e434, lpOverlapped=0x0 | out: lpBuffer=0x2709f70*, lpNumberOfBytesWritten=0x31e434*=0x160, lpOverlapped=0x0) returned 1 [0075.343] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\YG1R61Z8\\BB8AdqN[1].png", nBufferLength=0x105, lpBuffer=0x31dfe4, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\YG1R61Z8\\BB8AdqN[1].png", lpFilePart=0x0) returned 0x7e [0075.343] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\YG1R61Z8\\BB8AdqN[1].png", nBufferLength=0x105, lpBuffer=0x31dfe4, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\YG1R61Z8\\BB8AdqN[1].png", lpFilePart=0x0) returned 0x7e [0075.343] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e444) returned 1 [0075.343] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\YG1R61Z8\\BB8AdqN[1].png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\yg1r61z8\\bb8adqn[1].png"), fInfoLevelId=0x0, lpFileInformation=0x31e4c0 | out: lpFileInformation=0x31e4c0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x456d9c70, ftCreationTime.dwHighDateTime=0x1d2faf3, ftLastAccessTime.dwLowDateTime=0x456d9c70, ftLastAccessTime.dwHighDateTime=0x1d2faf3, ftLastWriteTime.dwLowDateTime=0x10597380, ftLastWriteTime.dwHighDateTime=0x1d6eb7f, nFileSizeHigh=0x0, nFileSizeLow=0x160)) returned 1 [0075.343] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e440) returned 1 [0075.343] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\YG1R61Z8\\BB8AdqN[1].png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\yg1r61z8\\bb8adqn[1].png"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\YG1R61Z8\\BB8AdqN[1].png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\yg1r61z8\\bb8adqn[1].png")) returned 1 [0075.343] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\YG1R61Z8\\BBALZyp[1].jpg", nBufferLength=0x105, lpBuffer=0x31dec4, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\YG1R61Z8\\BBALZyp[1].jpg", lpFilePart=0x0) returned 0x7e [0075.343] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e3b8) returned 1 [0075.344] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\YG1R61Z8\\BBALZyp[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\yg1r61z8\\bbalzyp[1].jpg"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x264 [0075.344] GetFileType (hFile=0x264) returned 0x1 [0075.344] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e3b4) returned 1 [0075.344] GetFileType (hFile=0x264) returned 0x1 [0075.344] GetFileSize (in: hFile=0x264, lpFileSizeHigh=0x31e4c0 | out: lpFileSizeHigh=0x31e4c0*=0x0) returned 0x152c [0075.344] ReadFile (in: hFile=0x264, lpBuffer=0x270b340, nNumberOfBytesToRead=0x152c, lpNumberOfBytesRead=0x31e46c, lpOverlapped=0x0 | out: lpBuffer=0x270b340*, lpNumberOfBytesRead=0x31e46c*=0x152c, lpOverlapped=0x0) returned 1 [0075.359] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\YG1R61Z8\\BBALZyp[1].jpg", nBufferLength=0x105, lpBuffer=0x31deb0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\YG1R61Z8\\BBALZyp[1].jpg", lpFilePart=0x0) returned 0x7e [0075.359] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e3a4) returned 1 [0075.359] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\YG1R61Z8\\BBALZyp[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\yg1r61z8\\bbalzyp[1].jpg"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x264 [0075.360] GetFileType (hFile=0x264) returned 0x1 [0075.360] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e3a0) returned 1 [0075.360] GetFileType (hFile=0x264) returned 0x1 [0075.360] WriteFile (in: hFile=0x264, lpBuffer=0x275eb14*, nNumberOfBytesToWrite=0x1530, lpNumberOfBytesWritten=0x31e460, lpOverlapped=0x0 | out: lpBuffer=0x275eb14*, lpNumberOfBytesWritten=0x31e460*=0x1530, lpOverlapped=0x0) returned 1 [0075.361] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\YG1R61Z8\\BBALZyp[1].jpg", nBufferLength=0x105, lpBuffer=0x31dfe4, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\YG1R61Z8\\BBALZyp[1].jpg", lpFilePart=0x0) returned 0x7e [0075.361] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\YG1R61Z8\\BBALZyp[1].jpg", nBufferLength=0x105, lpBuffer=0x31dfe4, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\YG1R61Z8\\BBALZyp[1].jpg", lpFilePart=0x0) returned 0x7e [0075.361] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e444) returned 1 [0075.361] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\YG1R61Z8\\BBALZyp[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\yg1r61z8\\bbalzyp[1].jpg"), fInfoLevelId=0x0, lpFileInformation=0x31e4c0 | out: lpFileInformation=0x31e4c0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x45be8b30, ftCreationTime.dwHighDateTime=0x1d2faf3, ftLastAccessTime.dwLowDateTime=0x45be8b30, ftLastAccessTime.dwHighDateTime=0x1d2faf3, ftLastWriteTime.dwLowDateTime=0x105bd4e0, ftLastWriteTime.dwHighDateTime=0x1d6eb7f, nFileSizeHigh=0x0, nFileSizeLow=0x1530)) returned 1 [0075.361] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e440) returned 1 [0075.361] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\YG1R61Z8\\BBALZyp[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\yg1r61z8\\bbalzyp[1].jpg"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\YG1R61Z8\\BBALZyp[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\yg1r61z8\\bbalzyp[1].jpg")) returned 1 [0075.361] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\YG1R61Z8\\BBBImKp[1].jpg", nBufferLength=0x105, lpBuffer=0x31dec4, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\YG1R61Z8\\BBBImKp[1].jpg", lpFilePart=0x0) returned 0x7e [0075.361] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e3b8) returned 1 [0075.361] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\YG1R61Z8\\BBBImKp[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\yg1r61z8\\bbbimkp[1].jpg"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x264 [0075.361] GetFileType (hFile=0x264) returned 0x1 [0075.362] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e3b4) returned 1 [0075.362] GetFileType (hFile=0x264) returned 0x1 [0075.362] GetFileSize (in: hFile=0x264, lpFileSizeHigh=0x31e4c0 | out: lpFileSizeHigh=0x31e4c0*=0x0) returned 0x97c [0075.362] ReadFile (in: hFile=0x264, lpBuffer=0x2760f30, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x31e46c, lpOverlapped=0x0 | out: lpBuffer=0x2760f30*, lpNumberOfBytesRead=0x31e46c*=0x97c, lpOverlapped=0x0) returned 1 [0075.378] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\YG1R61Z8\\BBBImKp[1].jpg", nBufferLength=0x105, lpBuffer=0x31deb0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\YG1R61Z8\\BBBImKp[1].jpg", lpFilePart=0x0) returned 0x7e [0075.378] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e3a4) returned 1 [0075.378] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\YG1R61Z8\\BBBImKp[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\yg1r61z8\\bbbimkp[1].jpg"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x264 [0075.379] GetFileType (hFile=0x264) returned 0x1 [0075.379] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e3a0) returned 1 [0075.379] GetFileType (hFile=0x264) returned 0x1 [0075.379] WriteFile (in: hFile=0x264, lpBuffer=0x27b1e38*, nNumberOfBytesToWrite=0x980, lpNumberOfBytesWritten=0x31e434, lpOverlapped=0x0 | out: lpBuffer=0x27b1e38*, lpNumberOfBytesWritten=0x31e434*=0x980, lpOverlapped=0x0) returned 1 [0075.380] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\YG1R61Z8\\BBBImKp[1].jpg", nBufferLength=0x105, lpBuffer=0x31dfe4, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\YG1R61Z8\\BBBImKp[1].jpg", lpFilePart=0x0) returned 0x7e [0075.380] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\YG1R61Z8\\BBBImKp[1].jpg", nBufferLength=0x105, lpBuffer=0x31dfe4, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\YG1R61Z8\\BBBImKp[1].jpg", lpFilePart=0x0) returned 0x7e [0075.380] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e444) returned 1 [0075.380] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\YG1R61Z8\\BBBImKp[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\yg1r61z8\\bbbimkp[1].jpg"), fInfoLevelId=0x0, lpFileInformation=0x31e4c0 | out: lpFileInformation=0x31e4c0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x5360ae70, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x5360ae70, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x106097a0, ftLastWriteTime.dwHighDateTime=0x1d6eb7f, nFileSizeHigh=0x0, nFileSizeLow=0x980)) returned 1 [0075.380] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e440) returned 1 [0075.380] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\YG1R61Z8\\BBBImKp[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\yg1r61z8\\bbbimkp[1].jpg"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\YG1R61Z8\\BBBImKp[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\yg1r61z8\\bbbimkp[1].jpg")) returned 1 [0075.381] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\YG1R61Z8\\BBBMGJo[1].jpg", nBufferLength=0x105, lpBuffer=0x31dec4, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\YG1R61Z8\\BBBMGJo[1].jpg", lpFilePart=0x0) returned 0x7e [0075.381] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e3b8) returned 1 [0075.381] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\YG1R61Z8\\BBBMGJo[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\yg1r61z8\\bbbmgjo[1].jpg"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x264 [0075.381] GetFileType (hFile=0x264) returned 0x1 [0075.381] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e3b4) returned 1 [0075.381] GetFileType (hFile=0x264) returned 0x1 [0075.381] GetFileSize (in: hFile=0x264, lpFileSizeHigh=0x31e4c0 | out: lpFileSizeHigh=0x31e4c0*=0x0) returned 0x29ca [0075.381] ReadFile (in: hFile=0x264, lpBuffer=0x27b3208, nNumberOfBytesToRead=0x29ca, lpNumberOfBytesRead=0x31e46c, lpOverlapped=0x0 | out: lpBuffer=0x27b3208*, lpNumberOfBytesRead=0x31e46c*=0x29ca, lpOverlapped=0x0) returned 1 [0075.396] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\YG1R61Z8\\BBBMGJo[1].jpg", nBufferLength=0x105, lpBuffer=0x31deb0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\YG1R61Z8\\BBBMGJo[1].jpg", lpFilePart=0x0) returned 0x7e [0075.396] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e3a4) returned 1 [0075.396] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\YG1R61Z8\\BBBMGJo[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\yg1r61z8\\bbbmgjo[1].jpg"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x264 [0075.396] GetFileType (hFile=0x264) returned 0x1 [0075.397] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e3a0) returned 1 [0075.397] GetFileType (hFile=0x264) returned 0x1 [0075.397] WriteFile (in: hFile=0x264, lpBuffer=0x280d100*, nNumberOfBytesToWrite=0x29d0, lpNumberOfBytesWritten=0x31e460, lpOverlapped=0x0 | out: lpBuffer=0x280d100*, lpNumberOfBytesWritten=0x31e460*=0x29d0, lpOverlapped=0x0) returned 1 [0075.398] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\YG1R61Z8\\BBBMGJo[1].jpg", nBufferLength=0x105, lpBuffer=0x31dfe4, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\YG1R61Z8\\BBBMGJo[1].jpg", lpFilePart=0x0) returned 0x7e [0075.398] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\YG1R61Z8\\BBBMGJo[1].jpg", nBufferLength=0x105, lpBuffer=0x31dfe4, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\YG1R61Z8\\BBBMGJo[1].jpg", lpFilePart=0x0) returned 0x7e [0075.398] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e444) returned 1 [0075.398] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\YG1R61Z8\\BBBMGJo[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\yg1r61z8\\bbbmgjo[1].jpg"), fInfoLevelId=0x0, lpFileInformation=0x31e4c0 | out: lpFileInformation=0x31e4c0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x53598a50, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x53598a50, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x1062f900, ftLastWriteTime.dwHighDateTime=0x1d6eb7f, nFileSizeHigh=0x0, nFileSizeLow=0x29d0)) returned 1 [0075.398] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e440) returned 1 [0075.398] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\YG1R61Z8\\BBBMGJo[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\yg1r61z8\\bbbmgjo[1].jpg"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\YG1R61Z8\\BBBMGJo[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\yg1r61z8\\bbbmgjo[1].jpg")) returned 1 [0075.398] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\YG1R61Z8\\BBBMKDF[1].jpg", nBufferLength=0x105, lpBuffer=0x31dec4, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\YG1R61Z8\\BBBMKDF[1].jpg", lpFilePart=0x0) returned 0x7e [0075.398] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e3b8) returned 1 [0075.398] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\YG1R61Z8\\BBBMKDF[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\yg1r61z8\\bbbmkdf[1].jpg"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x264 [0075.399] GetFileType (hFile=0x264) returned 0x1 [0075.399] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e3b4) returned 1 [0075.399] GetFileType (hFile=0x264) returned 0x1 [0075.399] GetFileSize (in: hFile=0x264, lpFileSizeHigh=0x31e4c0 | out: lpFileSizeHigh=0x31e4c0*=0x0) returned 0x862 [0075.399] ReadFile (in: hFile=0x264, lpBuffer=0x28108a4, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x31e46c, lpOverlapped=0x0 | out: lpBuffer=0x28108a4*, lpNumberOfBytesRead=0x31e46c*=0x862, lpOverlapped=0x0) returned 1 [0075.444] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\YG1R61Z8\\BBBMKDF[1].jpg", nBufferLength=0x105, lpBuffer=0x31deb0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\YG1R61Z8\\BBBMKDF[1].jpg", lpFilePart=0x0) returned 0x7e [0075.444] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e3a4) returned 1 [0075.444] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\YG1R61Z8\\BBBMKDF[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\yg1r61z8\\bbbmkdf[1].jpg"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x264 [0075.445] GetFileType (hFile=0x264) returned 0x1 [0075.445] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e3a0) returned 1 [0075.445] GetFileType (hFile=0x264) returned 0x1 [0075.445] WriteFile (in: hFile=0x264, lpBuffer=0x2662254*, nNumberOfBytesToWrite=0x870, lpNumberOfBytesWritten=0x31e434, lpOverlapped=0x0 | out: lpBuffer=0x2662254*, lpNumberOfBytesWritten=0x31e434*=0x870, lpOverlapped=0x0) returned 1 [0075.446] CloseHandle (hObject=0x264) returned 1 [0075.446] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\YG1R61Z8\\BBBMKDF[1].jpg", nBufferLength=0x105, lpBuffer=0x31dfe4, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\YG1R61Z8\\BBBMKDF[1].jpg", lpFilePart=0x0) returned 0x7e [0075.446] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\YG1R61Z8\\BBBMKDF[1].jpg", nBufferLength=0x105, lpBuffer=0x31dfe4, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\YG1R61Z8\\BBBMKDF[1].jpg", lpFilePart=0x0) returned 0x7e [0075.446] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e444) returned 1 [0075.446] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\YG1R61Z8\\BBBMKDF[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\yg1r61z8\\bbbmkdf[1].jpg"), fInfoLevelId=0x0, lpFileInformation=0x31e4c0 | out: lpFileInformation=0x31e4c0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x539049f0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x539049f0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x106a1d20, ftLastWriteTime.dwHighDateTime=0x1d6eb7f, nFileSizeHigh=0x0, nFileSizeLow=0x870)) returned 1 [0075.446] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e440) returned 1 [0075.446] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\YG1R61Z8\\BBBMKDF[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\yg1r61z8\\bbbmkdf[1].jpg"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\YG1R61Z8\\BBBMKDF[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\yg1r61z8\\bbbmkdf[1].jpg")) returned 1 [0075.447] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\YG1R61Z8\\BBBMQch[1].jpg", nBufferLength=0x105, lpBuffer=0x31dec4, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\YG1R61Z8\\BBBMQch[1].jpg", lpFilePart=0x0) returned 0x7e [0075.447] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e3b8) returned 1 [0075.447] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\YG1R61Z8\\BBBMQch[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\yg1r61z8\\bbbmqch[1].jpg"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x264 [0075.447] GetFileType (hFile=0x264) returned 0x1 [0075.447] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e3b4) returned 1 [0075.447] GetFileType (hFile=0x264) returned 0x1 [0075.447] GetFileSize (in: hFile=0x264, lpFileSizeHigh=0x31e4c0 | out: lpFileSizeHigh=0x31e4c0*=0x0) returned 0x142e [0075.447] ReadFile (in: hFile=0x264, lpBuffer=0x2663624, nNumberOfBytesToRead=0x142e, lpNumberOfBytesRead=0x31e46c, lpOverlapped=0x0 | out: lpBuffer=0x2663624*, lpNumberOfBytesRead=0x31e46c*=0x142e, lpOverlapped=0x0) returned 1 [0075.449] CloseHandle (hObject=0x264) returned 1 [0075.463] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\YG1R61Z8\\BBBMQch[1].jpg", nBufferLength=0x105, lpBuffer=0x31deb0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\YG1R61Z8\\BBBMQch[1].jpg", lpFilePart=0x0) returned 0x7e [0075.463] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e3a4) returned 1 [0075.463] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\YG1R61Z8\\BBBMQch[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\yg1r61z8\\bbbmqch[1].jpg"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x264 [0075.464] GetFileType (hFile=0x264) returned 0x1 [0075.464] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e3a0) returned 1 [0075.464] GetFileType (hFile=0x264) returned 0x1 [0075.464] WriteFile (in: hFile=0x264, lpBuffer=0x26b6a58*, nNumberOfBytesToWrite=0x1430, lpNumberOfBytesWritten=0x31e460, lpOverlapped=0x0 | out: lpBuffer=0x26b6a58*, lpNumberOfBytesWritten=0x31e460*=0x1430, lpOverlapped=0x0) returned 1 [0075.465] CloseHandle (hObject=0x264) returned 1 [0075.465] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\YG1R61Z8\\BBBMQch[1].jpg", nBufferLength=0x105, lpBuffer=0x31dfe4, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\YG1R61Z8\\BBBMQch[1].jpg", lpFilePart=0x0) returned 0x7e [0075.465] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\YG1R61Z8\\BBBMQch[1].jpg", nBufferLength=0x105, lpBuffer=0x31dfe4, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\YG1R61Z8\\BBBMQch[1].jpg", lpFilePart=0x0) returned 0x7e [0075.465] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e444) returned 1 [0075.465] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\YG1R61Z8\\BBBMQch[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\yg1r61z8\\bbbmqch[1].jpg"), fInfoLevelId=0x0, lpFileInformation=0x31e4c0 | out: lpFileInformation=0x31e4c0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x53846310, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x53846310, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x106c7e80, ftLastWriteTime.dwHighDateTime=0x1d6eb7f, nFileSizeHigh=0x0, nFileSizeLow=0x1430)) returned 1 [0075.465] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e440) returned 1 [0075.465] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\YG1R61Z8\\BBBMQch[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\yg1r61z8\\bbbmqch[1].jpg"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\YG1R61Z8\\BBBMQch[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\yg1r61z8\\bbbmqch[1].jpg")) returned 1 [0075.465] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\YG1R61Z8\\BBBMyVh[1].jpg", nBufferLength=0x105, lpBuffer=0x31dec4, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\YG1R61Z8\\BBBMyVh[1].jpg", lpFilePart=0x0) returned 0x7e [0075.466] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e3b8) returned 1 [0075.466] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\YG1R61Z8\\BBBMyVh[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\yg1r61z8\\bbbmyvh[1].jpg"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x264 [0075.466] GetFileType (hFile=0x264) returned 0x1 [0075.466] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e3b4) returned 1 [0075.466] GetFileType (hFile=0x264) returned 0x1 [0075.467] GetFileSize (in: hFile=0x264, lpFileSizeHigh=0x31e4c0 | out: lpFileSizeHigh=0x31e4c0*=0x0) returned 0x3e6b [0075.467] ReadFile (in: hFile=0x264, lpBuffer=0x26b83ec, nNumberOfBytesToRead=0x3e6b, lpNumberOfBytesRead=0x31e46c, lpOverlapped=0x0 | out: lpBuffer=0x26b83ec*, lpNumberOfBytesRead=0x31e46c*=0x3e6b, lpOverlapped=0x0) returned 1 [0075.468] CloseHandle (hObject=0x264) returned 1 [0075.482] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\YG1R61Z8\\BBBMyVh[1].jpg", nBufferLength=0x105, lpBuffer=0x31deb0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\YG1R61Z8\\BBBMyVh[1].jpg", lpFilePart=0x0) returned 0x7e [0075.482] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e3a4) returned 1 [0075.482] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\YG1R61Z8\\BBBMyVh[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\yg1r61z8\\bbbmyvh[1].jpg"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x264 [0075.483] GetFileType (hFile=0x264) returned 0x1 [0075.483] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e3a0) returned 1 [0075.483] GetFileType (hFile=0x264) returned 0x1 [0075.483] WriteFile (in: hFile=0x264, lpBuffer=0x2718a04*, nNumberOfBytesToWrite=0x3e70, lpNumberOfBytesWritten=0x31e460, lpOverlapped=0x0 | out: lpBuffer=0x2718a04*, lpNumberOfBytesWritten=0x31e460*=0x3e70, lpOverlapped=0x0) returned 1 [0075.484] CloseHandle (hObject=0x264) returned 1 [0075.484] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\YG1R61Z8\\BBBMyVh[1].jpg", nBufferLength=0x105, lpBuffer=0x31dfe4, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\YG1R61Z8\\BBBMyVh[1].jpg", lpFilePart=0x0) returned 0x7e [0075.484] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\YG1R61Z8\\BBBMyVh[1].jpg", nBufferLength=0x105, lpBuffer=0x31dfe4, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\YG1R61Z8\\BBBMyVh[1].jpg", lpFilePart=0x0) returned 0x7e [0075.485] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e444) returned 1 [0075.485] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\YG1R61Z8\\BBBMyVh[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\yg1r61z8\\bbbmyvh[1].jpg"), fInfoLevelId=0x0, lpFileInformation=0x31e4c0 | out: lpFileInformation=0x31e4c0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x58321c40, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x58321c40, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x106edfe0, ftLastWriteTime.dwHighDateTime=0x1d6eb7f, nFileSizeHigh=0x0, nFileSizeLow=0x3e70)) returned 1 [0075.485] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e440) returned 1 [0075.485] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\YG1R61Z8\\BBBMyVh[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\yg1r61z8\\bbbmyvh[1].jpg"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\YG1R61Z8\\BBBMyVh[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\yg1r61z8\\bbbmyvh[1].jpg")) returned 1 [0075.485] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\YG1R61Z8\\BBBNAf7[1].jpg", nBufferLength=0x105, lpBuffer=0x31dec4, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\YG1R61Z8\\BBBNAf7[1].jpg", lpFilePart=0x0) returned 0x7e [0075.485] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e3b8) returned 1 [0075.485] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\YG1R61Z8\\BBBNAf7[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\yg1r61z8\\bbbnaf7[1].jpg"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x264 [0075.485] GetFileType (hFile=0x264) returned 0x1 [0075.485] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e3b4) returned 1 [0075.486] GetFileType (hFile=0x264) returned 0x1 [0075.486] GetFileSize (in: hFile=0x264, lpFileSizeHigh=0x31e4c0 | out: lpFileSizeHigh=0x31e4c0*=0x0) returned 0x812 [0075.486] ReadFile (in: hFile=0x264, lpBuffer=0x271d5f8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x31e46c, lpOverlapped=0x0 | out: lpBuffer=0x271d5f8*, lpNumberOfBytesRead=0x31e46c*=0x812, lpOverlapped=0x0) returned 1 [0075.487] CloseHandle (hObject=0x264) returned 1 [0075.500] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\YG1R61Z8\\BBBNAf7[1].jpg", nBufferLength=0x105, lpBuffer=0x31deb0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\YG1R61Z8\\BBBNAf7[1].jpg", lpFilePart=0x0) returned 0x7e [0075.500] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e3a4) returned 1 [0075.500] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\YG1R61Z8\\BBBNAf7[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\yg1r61z8\\bbbnaf7[1].jpg"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x264 [0075.501] GetFileType (hFile=0x264) returned 0x1 [0075.501] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e3a0) returned 1 [0075.501] GetFileType (hFile=0x264) returned 0x1 [0075.501] WriteFile (in: hFile=0x264, lpBuffer=0x276de2c*, nNumberOfBytesToWrite=0x820, lpNumberOfBytesWritten=0x31e434, lpOverlapped=0x0 | out: lpBuffer=0x276de2c*, lpNumberOfBytesWritten=0x31e434*=0x820, lpOverlapped=0x0) returned 1 [0075.502] CloseHandle (hObject=0x264) returned 1 [0075.502] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\YG1R61Z8\\BBBNAf7[1].jpg", nBufferLength=0x105, lpBuffer=0x31dfe4, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\YG1R61Z8\\BBBNAf7[1].jpg", lpFilePart=0x0) returned 0x7e [0075.503] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\YG1R61Z8\\BBBNAf7[1].jpg", nBufferLength=0x105, lpBuffer=0x31dfe4, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\YG1R61Z8\\BBBNAf7[1].jpg", lpFilePart=0x0) returned 0x7e [0075.503] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e444) returned 1 [0075.503] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\YG1R61Z8\\BBBNAf7[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\yg1r61z8\\bbbnaf7[1].jpg"), fInfoLevelId=0x0, lpFileInformation=0x31e4c0 | out: lpFileInformation=0x31e4c0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x53337450, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x53337450, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x10714140, ftLastWriteTime.dwHighDateTime=0x1d6eb7f, nFileSizeHigh=0x0, nFileSizeLow=0x820)) returned 1 [0075.503] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e440) returned 1 [0075.503] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\YG1R61Z8\\BBBNAf7[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\yg1r61z8\\bbbnaf7[1].jpg"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\YG1R61Z8\\BBBNAf7[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\yg1r61z8\\bbbnaf7[1].jpg")) returned 1 [0075.503] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\YG1R61Z8\\BBBNnTF[1].jpg", nBufferLength=0x105, lpBuffer=0x31dec4, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\YG1R61Z8\\BBBNnTF[1].jpg", lpFilePart=0x0) returned 0x7e [0075.503] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e3b8) returned 1 [0075.503] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\YG1R61Z8\\BBBNnTF[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\yg1r61z8\\bbbnntf[1].jpg"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x264 [0075.504] GetFileType (hFile=0x264) returned 0x1 [0075.504] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e3b4) returned 1 [0075.504] GetFileType (hFile=0x264) returned 0x1 [0075.504] GetFileSize (in: hFile=0x264, lpFileSizeHigh=0x31e4c0 | out: lpFileSizeHigh=0x31e4c0*=0x0) returned 0xb22 [0075.504] ReadFile (in: hFile=0x264, lpBuffer=0x276fd2c, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x31e46c, lpOverlapped=0x0 | out: lpBuffer=0x276fd2c*, lpNumberOfBytesRead=0x31e46c*=0xb22, lpOverlapped=0x0) returned 1 [0075.506] CloseHandle (hObject=0x264) returned 1 [0075.519] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\YG1R61Z8\\BBBNnTF[1].jpg", nBufferLength=0x105, lpBuffer=0x31deb0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\YG1R61Z8\\BBBNnTF[1].jpg", lpFilePart=0x0) returned 0x7e [0075.519] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e3a4) returned 1 [0075.519] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\YG1R61Z8\\BBBNnTF[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\yg1r61z8\\bbbnntf[1].jpg"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x264 [0075.552] GetFileType (hFile=0x264) returned 0x1 [0075.552] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e3a0) returned 1 [0075.552] GetFileType (hFile=0x264) returned 0x1 [0075.552] WriteFile (in: hFile=0x264, lpBuffer=0x27c14b0*, nNumberOfBytesToWrite=0xb30, lpNumberOfBytesWritten=0x31e434, lpOverlapped=0x0 | out: lpBuffer=0x27c14b0*, lpNumberOfBytesWritten=0x31e434*=0xb30, lpOverlapped=0x0) returned 1 [0075.552] CloseHandle (hObject=0x264) returned 1 [0075.553] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\YG1R61Z8\\BBBNnTF[1].jpg", nBufferLength=0x105, lpBuffer=0x31dfe4, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\YG1R61Z8\\BBBNnTF[1].jpg", lpFilePart=0x0) returned 0x7e [0075.553] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\YG1R61Z8\\BBBNnTF[1].jpg", nBufferLength=0x105, lpBuffer=0x31dfe4, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\YG1R61Z8\\BBBNnTF[1].jpg", lpFilePart=0x0) returned 0x7e [0075.553] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e444) returned 1 [0075.553] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\YG1R61Z8\\BBBNnTF[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\yg1r61z8\\bbbnntf[1].jpg"), fInfoLevelId=0x0, lpFileInformation=0x31e4c0 | out: lpFileInformation=0x31e4c0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x533a9870, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x533a9870, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x107ac6c0, ftLastWriteTime.dwHighDateTime=0x1d6eb7f, nFileSizeHigh=0x0, nFileSizeLow=0xb30)) returned 1 [0075.553] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e440) returned 1 [0075.553] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\YG1R61Z8\\BBBNnTF[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\yg1r61z8\\bbbnntf[1].jpg"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\YG1R61Z8\\BBBNnTF[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\yg1r61z8\\bbbnntf[1].jpg")) returned 1 [0075.553] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\YG1R61Z8\\BBBO4dZ[1].jpg", nBufferLength=0x105, lpBuffer=0x31dec4, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\YG1R61Z8\\BBBO4dZ[1].jpg", lpFilePart=0x0) returned 0x7e [0075.553] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e3b8) returned 1 [0075.553] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\YG1R61Z8\\BBBO4dZ[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\yg1r61z8\\bbbo4dz[1].jpg"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x264 [0075.554] GetFileType (hFile=0x264) returned 0x1 [0075.554] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e3b4) returned 1 [0075.554] GetFileType (hFile=0x264) returned 0x1 [0075.554] GetFileSize (in: hFile=0x264, lpFileSizeHigh=0x31e4c0 | out: lpFileSizeHigh=0x31e4c0*=0x0) returned 0x1529 [0075.554] ReadFile (in: hFile=0x264, lpBuffer=0x27c2880, nNumberOfBytesToRead=0x1529, lpNumberOfBytesRead=0x31e46c, lpOverlapped=0x0 | out: lpBuffer=0x27c2880*, lpNumberOfBytesRead=0x31e46c*=0x1529, lpOverlapped=0x0) returned 1 [0075.555] CloseHandle (hObject=0x264) returned 1 [0075.571] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\YG1R61Z8\\BBBO4dZ[1].jpg", nBufferLength=0x105, lpBuffer=0x31deb0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\YG1R61Z8\\BBBO4dZ[1].jpg", lpFilePart=0x0) returned 0x7e [0075.571] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e3a4) returned 1 [0075.571] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\YG1R61Z8\\BBBO4dZ[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\yg1r61z8\\bbbo4dz[1].jpg"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x264 [0075.572] GetFileType (hFile=0x264) returned 0x1 [0075.572] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e3a0) returned 1 [0075.572] GetFileType (hFile=0x264) returned 0x1 [0075.572] WriteFile (in: hFile=0x264, lpBuffer=0x2816058*, nNumberOfBytesToWrite=0x1530, lpNumberOfBytesWritten=0x31e460, lpOverlapped=0x0 | out: lpBuffer=0x2816058*, lpNumberOfBytesWritten=0x31e460*=0x1530, lpOverlapped=0x0) returned 1 [0075.573] CloseHandle (hObject=0x264) returned 1 [0075.573] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\YG1R61Z8\\BBBO4dZ[1].jpg", nBufferLength=0x105, lpBuffer=0x31dfe4, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\YG1R61Z8\\BBBO4dZ[1].jpg", lpFilePart=0x0) returned 0x7e [0075.573] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\YG1R61Z8\\BBBO4dZ[1].jpg", nBufferLength=0x105, lpBuffer=0x31dfe4, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\YG1R61Z8\\BBBO4dZ[1].jpg", lpFilePart=0x0) returned 0x7e [0075.573] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e444) returned 1 [0075.573] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\YG1R61Z8\\BBBO4dZ[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\yg1r61z8\\bbbo4dz[1].jpg"), fInfoLevelId=0x0, lpFileInformation=0x31e4c0 | out: lpFileInformation=0x31e4c0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x539c30d0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x539c30d0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x107d2820, ftLastWriteTime.dwHighDateTime=0x1d6eb7f, nFileSizeHigh=0x0, nFileSizeLow=0x1530)) returned 1 [0075.573] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e440) returned 1 [0075.573] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\YG1R61Z8\\BBBO4dZ[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\yg1r61z8\\bbbo4dz[1].jpg"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\YG1R61Z8\\BBBO4dZ[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\yg1r61z8\\bbbo4dz[1].jpg")) returned 1 [0075.574] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\YG1R61Z8\\BBBO8ow[1].jpg", nBufferLength=0x105, lpBuffer=0x31dec4, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\YG1R61Z8\\BBBO8ow[1].jpg", lpFilePart=0x0) returned 0x7e [0075.574] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e3b8) returned 1 [0075.574] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\YG1R61Z8\\BBBO8ow[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\yg1r61z8\\bbbo8ow[1].jpg"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x264 [0075.574] GetFileType (hFile=0x264) returned 0x1 [0075.574] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e3b4) returned 1 [0075.574] GetFileType (hFile=0x264) returned 0x1 [0075.574] GetFileSize (in: hFile=0x264, lpFileSizeHigh=0x31e4c0 | out: lpFileSizeHigh=0x31e4c0*=0x0) returned 0x1e61 [0075.574] ReadFile (in: hFile=0x264, lpBuffer=0x2817aec, nNumberOfBytesToRead=0x1e61, lpNumberOfBytesRead=0x31e46c, lpOverlapped=0x0 | out: lpBuffer=0x2817aec*, lpNumberOfBytesRead=0x31e46c*=0x1e61, lpOverlapped=0x0) returned 1 [0075.576] CloseHandle (hObject=0x264) returned 1 [0075.618] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\YG1R61Z8\\BBBO8ow[1].jpg", nBufferLength=0x105, lpBuffer=0x31deb0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\YG1R61Z8\\BBBO8ow[1].jpg", lpFilePart=0x0) returned 0x7e [0075.618] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e3a4) returned 1 [0075.618] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\YG1R61Z8\\BBBO8ow[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\yg1r61z8\\bbbo8ow[1].jpg"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x264 [0075.619] GetFileType (hFile=0x264) returned 0x1 [0075.619] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e3a0) returned 1 [0075.619] GetFileType (hFile=0x264) returned 0x1 [0075.619] WriteFile (in: hFile=0x264, lpBuffer=0x26714dc*, nNumberOfBytesToWrite=0x1e70, lpNumberOfBytesWritten=0x31e460, lpOverlapped=0x0 | out: lpBuffer=0x26714dc*, lpNumberOfBytesWritten=0x31e460*=0x1e70, lpOverlapped=0x0) returned 1 [0075.620] CloseHandle (hObject=0x264) returned 1 [0075.620] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\YG1R61Z8\\BBBO8ow[1].jpg", nBufferLength=0x105, lpBuffer=0x31dfe4, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\YG1R61Z8\\BBBO8ow[1].jpg", lpFilePart=0x0) returned 0x7e [0075.620] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\YG1R61Z8\\BBBO8ow[1].jpg", nBufferLength=0x105, lpBuffer=0x31dfe4, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\YG1R61Z8\\BBBO8ow[1].jpg", lpFilePart=0x0) returned 0x7e [0075.620] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e444) returned 1 [0075.620] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\YG1R61Z8\\BBBO8ow[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\yg1r61z8\\bbbo8ow[1].jpg"), fInfoLevelId=0x0, lpFileInformation=0x31e4c0 | out: lpFileInformation=0x31e4c0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x538b8730, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x538b8730, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x10844c40, ftLastWriteTime.dwHighDateTime=0x1d6eb7f, nFileSizeHigh=0x0, nFileSizeLow=0x1e70)) returned 1 [0075.620] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e440) returned 1 [0075.620] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\YG1R61Z8\\BBBO8ow[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\yg1r61z8\\bbbo8ow[1].jpg"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\YG1R61Z8\\BBBO8ow[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\yg1r61z8\\bbbo8ow[1].jpg")) returned 1 [0075.620] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\YG1R61Z8\\BBBOaeS[1].jpg", nBufferLength=0x105, lpBuffer=0x31dec4, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\YG1R61Z8\\BBBOaeS[1].jpg", lpFilePart=0x0) returned 0x7e [0075.621] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e3b8) returned 1 [0075.621] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\YG1R61Z8\\BBBOaeS[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\yg1r61z8\\bbboaes[1].jpg"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x264 [0075.621] GetFileType (hFile=0x264) returned 0x1 [0075.621] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e3b4) returned 1 [0075.621] GetFileType (hFile=0x264) returned 0x1 [0075.621] GetFileSize (in: hFile=0x264, lpFileSizeHigh=0x31e4c0 | out: lpFileSizeHigh=0x31e4c0*=0x0) returned 0x636 [0075.621] ReadFile (in: hFile=0x264, lpBuffer=0x2673ef4, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x31e46c, lpOverlapped=0x0 | out: lpBuffer=0x2673ef4*, lpNumberOfBytesRead=0x31e46c*=0x636, lpOverlapped=0x0) returned 1 [0075.639] CloseHandle (hObject=0x264) returned 1 [0075.652] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\YG1R61Z8\\BBBOaeS[1].jpg", nBufferLength=0x105, lpBuffer=0x31deb0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\YG1R61Z8\\BBBOaeS[1].jpg", lpFilePart=0x0) returned 0x7e [0075.652] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e3a4) returned 1 [0075.652] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\YG1R61Z8\\BBBOaeS[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\yg1r61z8\\bbboaes[1].jpg"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x264 [0075.653] GetFileType (hFile=0x264) returned 0x1 [0075.653] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e3a0) returned 1 [0075.653] GetFileType (hFile=0x264) returned 0x1 [0075.653] WriteFile (in: hFile=0x264, lpBuffer=0x26c3f20*, nNumberOfBytesToWrite=0x640, lpNumberOfBytesWritten=0x31e434, lpOverlapped=0x0 | out: lpBuffer=0x26c3f20*, lpNumberOfBytesWritten=0x31e434*=0x640, lpOverlapped=0x0) returned 1 [0075.654] CloseHandle (hObject=0x264) returned 1 [0075.654] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\YG1R61Z8\\BBBOaeS[1].jpg", nBufferLength=0x105, lpBuffer=0x31dfe4, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\YG1R61Z8\\BBBOaeS[1].jpg", lpFilePart=0x0) returned 0x7e [0075.654] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\YG1R61Z8\\BBBOaeS[1].jpg", nBufferLength=0x105, lpBuffer=0x31dfe4, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\YG1R61Z8\\BBBOaeS[1].jpg", lpFilePart=0x0) returned 0x7e [0075.654] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e444) returned 1 [0075.654] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\YG1R61Z8\\BBBOaeS[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\yg1r61z8\\bbboaes[1].jpg"), fInfoLevelId=0x0, lpFileInformation=0x31e4c0 | out: lpFileInformation=0x31e4c0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x532eb190, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x532eb190, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x10890f00, ftLastWriteTime.dwHighDateTime=0x1d6eb7f, nFileSizeHigh=0x0, nFileSizeLow=0x640)) returned 1 [0075.654] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e440) returned 1 [0075.654] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\YG1R61Z8\\BBBOaeS[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\yg1r61z8\\bbboaes[1].jpg"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\YG1R61Z8\\BBBOaeS[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\yg1r61z8\\bbboaes[1].jpg")) returned 1 [0075.655] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\YG1R61Z8\\BBBOcIb[1].jpg", nBufferLength=0x105, lpBuffer=0x31dec4, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\YG1R61Z8\\BBBOcIb[1].jpg", lpFilePart=0x0) returned 0x7e [0075.655] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e3b8) returned 1 [0075.655] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\YG1R61Z8\\BBBOcIb[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\yg1r61z8\\bbbocib[1].jpg"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x264 [0075.656] GetFileType (hFile=0x264) returned 0x1 [0075.656] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e3b4) returned 1 [0075.656] GetFileType (hFile=0x264) returned 0x1 [0075.656] GetFileSize (in: hFile=0x264, lpFileSizeHigh=0x31e4c0 | out: lpFileSizeHigh=0x31e4c0*=0x0) returned 0x82a [0075.656] ReadFile (in: hFile=0x264, lpBuffer=0x26c5b28, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x31e46c, lpOverlapped=0x0 | out: lpBuffer=0x26c5b28*, lpNumberOfBytesRead=0x31e46c*=0x82a, lpOverlapped=0x0) returned 1 [0075.658] CloseHandle (hObject=0x264) returned 1 [0075.671] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\YG1R61Z8\\BBBOcIb[1].jpg", nBufferLength=0x105, lpBuffer=0x31deb0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\YG1R61Z8\\BBBOcIb[1].jpg", lpFilePart=0x0) returned 0x7e [0075.671] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e3a4) returned 1 [0075.671] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\YG1R61Z8\\BBBOcIb[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\yg1r61z8\\bbbocib[1].jpg"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x264 [0075.672] GetFileType (hFile=0x264) returned 0x1 [0075.672] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e3a0) returned 1 [0075.672] GetFileType (hFile=0x264) returned 0x1 [0075.672] WriteFile (in: hFile=0x264, lpBuffer=0x27163a4*, nNumberOfBytesToWrite=0x830, lpNumberOfBytesWritten=0x31e434, lpOverlapped=0x0 | out: lpBuffer=0x27163a4*, lpNumberOfBytesWritten=0x31e434*=0x830, lpOverlapped=0x0) returned 1 [0075.673] CloseHandle (hObject=0x264) returned 1 [0075.673] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\YG1R61Z8\\BBBOcIb[1].jpg", nBufferLength=0x105, lpBuffer=0x31dfe4, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\YG1R61Z8\\BBBOcIb[1].jpg", lpFilePart=0x0) returned 0x7e [0075.673] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\YG1R61Z8\\BBBOcIb[1].jpg", nBufferLength=0x105, lpBuffer=0x31dfe4, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\YG1R61Z8\\BBBOcIb[1].jpg", lpFilePart=0x0) returned 0x7e [0075.673] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e444) returned 1 [0075.673] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\YG1R61Z8\\BBBOcIb[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\yg1r61z8\\bbbocib[1].jpg"), fInfoLevelId=0x0, lpFileInformation=0x31e4c0 | out: lpFileInformation=0x31e4c0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x53278d70, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x53278d70, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x108b7060, ftLastWriteTime.dwHighDateTime=0x1d6eb7f, nFileSizeHigh=0x0, nFileSizeLow=0x830)) returned 1 [0075.674] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e440) returned 1 [0075.674] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\YG1R61Z8\\BBBOcIb[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\yg1r61z8\\bbbocib[1].jpg"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\YG1R61Z8\\BBBOcIb[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\yg1r61z8\\bbbocib[1].jpg")) returned 1 [0075.674] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\YG1R61Z8\\BBBOddp[1].jpg", nBufferLength=0x105, lpBuffer=0x31dec4, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\YG1R61Z8\\BBBOddp[1].jpg", lpFilePart=0x0) returned 0x7e [0075.674] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e3b8) returned 1 [0075.674] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\YG1R61Z8\\BBBOddp[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\yg1r61z8\\bbboddp[1].jpg"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x264 [0075.674] GetFileType (hFile=0x264) returned 0x1 [0075.674] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e3b4) returned 1 [0075.674] GetFileType (hFile=0x264) returned 0x1 [0075.674] GetFileSize (in: hFile=0x264, lpFileSizeHigh=0x31e4c0 | out: lpFileSizeHigh=0x31e4c0*=0x0) returned 0x161e [0075.674] ReadFile (in: hFile=0x264, lpBuffer=0x2717774, nNumberOfBytesToRead=0x161e, lpNumberOfBytesRead=0x31e46c, lpOverlapped=0x0 | out: lpBuffer=0x2717774*, lpNumberOfBytesRead=0x31e46c*=0x161e, lpOverlapped=0x0) returned 1 [0075.676] CloseHandle (hObject=0x264) returned 1 [0075.689] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\YG1R61Z8\\BBBOddp[1].jpg", nBufferLength=0x105, lpBuffer=0x31deb0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\YG1R61Z8\\BBBOddp[1].jpg", lpFilePart=0x0) returned 0x7e [0075.689] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e3a4) returned 1 [0075.689] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\YG1R61Z8\\BBBOddp[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\yg1r61z8\\bbboddp[1].jpg"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x264 [0075.690] GetFileType (hFile=0x264) returned 0x1 [0075.690] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e3a0) returned 1 [0075.690] GetFileType (hFile=0x264) returned 0x1 [0075.690] WriteFile (in: hFile=0x264, lpBuffer=0x276b3fc*, nNumberOfBytesToWrite=0x1620, lpNumberOfBytesWritten=0x31e460, lpOverlapped=0x0 | out: lpBuffer=0x276b3fc*, lpNumberOfBytesWritten=0x31e460*=0x1620, lpOverlapped=0x0) returned 1 [0075.691] CloseHandle (hObject=0x264) returned 1 [0075.692] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\YG1R61Z8\\BBBOddp[1].jpg", nBufferLength=0x105, lpBuffer=0x31dfe4, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\YG1R61Z8\\BBBOddp[1].jpg", lpFilePart=0x0) returned 0x7e [0075.692] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\YG1R61Z8\\BBBOddp[1].jpg", nBufferLength=0x105, lpBuffer=0x31dfe4, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\YG1R61Z8\\BBBOddp[1].jpg", lpFilePart=0x0) returned 0x7e [0075.692] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e444) returned 1 [0075.692] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\YG1R61Z8\\BBBOddp[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\yg1r61z8\\bbboddp[1].jpg"), fInfoLevelId=0x0, lpFileInformation=0x31e4c0 | out: lpFileInformation=0x31e4c0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x53b8c150, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x53b8c150, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x10903320, ftLastWriteTime.dwHighDateTime=0x1d6eb7f, nFileSizeHigh=0x0, nFileSizeLow=0x1620)) returned 1 [0075.692] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e440) returned 1 [0075.692] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\YG1R61Z8\\BBBOddp[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\yg1r61z8\\bbboddp[1].jpg"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\YG1R61Z8\\BBBOddp[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\yg1r61z8\\bbboddp[1].jpg")) returned 1 [0075.692] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\YG1R61Z8\\BBBOmar[1].jpg", nBufferLength=0x105, lpBuffer=0x31dec4, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\YG1R61Z8\\BBBOmar[1].jpg", lpFilePart=0x0) returned 0x7e [0075.692] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e3b8) returned 1 [0075.692] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\YG1R61Z8\\BBBOmar[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\yg1r61z8\\bbbomar[1].jpg"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x264 [0075.693] GetFileType (hFile=0x264) returned 0x1 [0075.693] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e3b4) returned 1 [0075.693] GetFileType (hFile=0x264) returned 0x1 [0075.693] GetFileSize (in: hFile=0x264, lpFileSizeHigh=0x31e4c0 | out: lpFileSizeHigh=0x31e4c0*=0x0) returned 0x5685 [0075.693] ReadFile (in: hFile=0x264, lpBuffer=0x276cf80, nNumberOfBytesToRead=0x5685, lpNumberOfBytesRead=0x31e46c, lpOverlapped=0x0 | out: lpBuffer=0x276cf80*, lpNumberOfBytesRead=0x31e46c*=0x5685, lpOverlapped=0x0) returned 1 [0075.695] CloseHandle (hObject=0x264) returned 1 [0075.709] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\YG1R61Z8\\BBBOmar[1].jpg", nBufferLength=0x105, lpBuffer=0x31deb0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\YG1R61Z8\\BBBOmar[1].jpg", lpFilePart=0x0) returned 0x7e [0075.709] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e3a4) returned 1 [0075.709] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\YG1R61Z8\\BBBOmar[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\yg1r61z8\\bbbomar[1].jpg"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x264 [0075.710] GetFileType (hFile=0x264) returned 0x1 [0075.710] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e3a0) returned 1 [0075.710] GetFileType (hFile=0x264) returned 0x1 [0075.710] WriteFile (in: hFile=0x264, lpBuffer=0x27d4e38*, nNumberOfBytesToWrite=0x5690, lpNumberOfBytesWritten=0x31e460, lpOverlapped=0x0 | out: lpBuffer=0x27d4e38*, lpNumberOfBytesWritten=0x31e460*=0x5690, lpOverlapped=0x0) returned 1 [0075.711] CloseHandle (hObject=0x264) returned 1 [0075.711] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\YG1R61Z8\\BBBOmar[1].jpg", nBufferLength=0x105, lpBuffer=0x31dfe4, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\YG1R61Z8\\BBBOmar[1].jpg", lpFilePart=0x0) returned 0x7e [0075.712] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\YG1R61Z8\\BBBOmar[1].jpg", nBufferLength=0x105, lpBuffer=0x31dfe4, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\YG1R61Z8\\BBBOmar[1].jpg", lpFilePart=0x0) returned 0x7e [0075.712] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e444) returned 1 [0075.712] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\YG1R61Z8\\BBBOmar[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\yg1r61z8\\bbbomar[1].jpg"), fInfoLevelId=0x0, lpFileInformation=0x31e4c0 | out: lpFileInformation=0x31e4c0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x6a1fd500, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x6a1fd500, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x10929480, ftLastWriteTime.dwHighDateTime=0x1d6eb7f, nFileSizeHigh=0x0, nFileSizeLow=0x5690)) returned 1 [0075.712] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e440) returned 1 [0075.712] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\YG1R61Z8\\BBBOmar[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\yg1r61z8\\bbbomar[1].jpg"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\YG1R61Z8\\BBBOmar[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\yg1r61z8\\bbbomar[1].jpg")) returned 1 [0075.712] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\YG1R61Z8\\BBBR4yQ[1].jpg", nBufferLength=0x105, lpBuffer=0x31dec4, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\YG1R61Z8\\BBBR4yQ[1].jpg", lpFilePart=0x0) returned 0x7e [0075.712] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e3b8) returned 1 [0075.712] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\YG1R61Z8\\BBBR4yQ[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\yg1r61z8\\bbbr4yq[1].jpg"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x264 [0075.713] GetFileType (hFile=0x264) returned 0x1 [0075.713] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e3b4) returned 1 [0075.713] GetFileType (hFile=0x264) returned 0x1 [0075.713] GetFileSize (in: hFile=0x264, lpFileSizeHigh=0x31e4c0 | out: lpFileSizeHigh=0x31e4c0*=0x0) returned 0x2f6b [0075.713] ReadFile (in: hFile=0x264, lpBuffer=0x27daa2c, nNumberOfBytesToRead=0x2f6b, lpNumberOfBytesRead=0x31e46c, lpOverlapped=0x0 | out: lpBuffer=0x27daa2c*, lpNumberOfBytesRead=0x31e46c*=0x2f6b, lpOverlapped=0x0) returned 1 [0075.715] CloseHandle (hObject=0x264) returned 1 [0075.728] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\YG1R61Z8\\BBBR4yQ[1].jpg", nBufferLength=0x105, lpBuffer=0x31deb0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\YG1R61Z8\\BBBR4yQ[1].jpg", lpFilePart=0x0) returned 0x7e [0075.728] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e3a4) returned 1 [0075.728] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\YG1R61Z8\\BBBR4yQ[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\yg1r61z8\\bbbr4yq[1].jpg"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x264 [0075.729] GetFileType (hFile=0x264) returned 0x1 [0075.729] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e3a0) returned 1 [0075.729] GetFileType (hFile=0x264) returned 0x1 [0075.729] WriteFile (in: hFile=0x264, lpBuffer=0x2836544*, nNumberOfBytesToWrite=0x2f70, lpNumberOfBytesWritten=0x31e460, lpOverlapped=0x0 | out: lpBuffer=0x2836544*, lpNumberOfBytesWritten=0x31e460*=0x2f70, lpOverlapped=0x0) returned 1 [0075.730] CloseHandle (hObject=0x264) returned 1 [0075.730] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\YG1R61Z8\\BBBR4yQ[1].jpg", nBufferLength=0x105, lpBuffer=0x31dfe4, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\YG1R61Z8\\BBBR4yQ[1].jpg", lpFilePart=0x0) returned 0x7e [0075.730] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\YG1R61Z8\\BBBR4yQ[1].jpg", nBufferLength=0x105, lpBuffer=0x31dfe4, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\YG1R61Z8\\BBBR4yQ[1].jpg", lpFilePart=0x0) returned 0x7e [0075.730] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e444) returned 1 [0075.730] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\YG1R61Z8\\BBBR4yQ[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\yg1r61z8\\bbbr4yq[1].jpg"), fInfoLevelId=0x0, lpFileInformation=0x31e4c0 | out: lpFileInformation=0x31e4c0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x52f7f1f0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x52f7f1f0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x1094f5e0, ftLastWriteTime.dwHighDateTime=0x1d6eb7f, nFileSizeHigh=0x0, nFileSizeLow=0x2f70)) returned 1 [0075.731] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e440) returned 1 [0075.731] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\YG1R61Z8\\BBBR4yQ[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\yg1r61z8\\bbbr4yq[1].jpg"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\YG1R61Z8\\BBBR4yQ[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\yg1r61z8\\bbbr4yq[1].jpg")) returned 1 [0075.731] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\YG1R61Z8\\BBBUPaj[1].jpg", nBufferLength=0x105, lpBuffer=0x31dec4, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\YG1R61Z8\\BBBUPaj[1].jpg", lpFilePart=0x0) returned 0x7e [0075.731] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e3b8) returned 1 [0075.731] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\YG1R61Z8\\BBBUPaj[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\yg1r61z8\\bbbupaj[1].jpg"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x264 [0075.731] GetFileType (hFile=0x264) returned 0x1 [0075.731] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e3b4) returned 1 [0075.731] GetFileType (hFile=0x264) returned 0x1 [0075.731] GetFileSize (in: hFile=0x264, lpFileSizeHigh=0x31e4c0 | out: lpFileSizeHigh=0x31e4c0*=0x0) returned 0x264b [0075.731] ReadFile (in: hFile=0x264, lpBuffer=0x2839a18, nNumberOfBytesToRead=0x264b, lpNumberOfBytesRead=0x31e46c, lpOverlapped=0x0 | out: lpBuffer=0x2839a18*, lpNumberOfBytesRead=0x31e46c*=0x264b, lpOverlapped=0x0) returned 1 [0075.733] CloseHandle (hObject=0x264) returned 1 [0075.749] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\YG1R61Z8\\BBBUPaj[1].jpg", nBufferLength=0x105, lpBuffer=0x31deb0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\YG1R61Z8\\BBBUPaj[1].jpg", lpFilePart=0x0) returned 0x7e [0075.749] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e3a4) returned 1 [0075.749] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\YG1R61Z8\\BBBUPaj[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\yg1r61z8\\bbbupaj[1].jpg"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x264 [0075.750] GetFileType (hFile=0x264) returned 0x1 [0075.750] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e3a0) returned 1 [0075.750] GetFileType (hFile=0x264) returned 0x1 [0075.750] WriteFile (in: hFile=0x264, lpBuffer=0x2698f48*, nNumberOfBytesToWrite=0x2650, lpNumberOfBytesWritten=0x31e460, lpOverlapped=0x0 | out: lpBuffer=0x2698f48*, lpNumberOfBytesWritten=0x31e460*=0x2650, lpOverlapped=0x0) returned 1 [0075.751] CloseHandle (hObject=0x264) returned 1 [0075.751] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\YG1R61Z8\\BBBUPaj[1].jpg", nBufferLength=0x105, lpBuffer=0x31dfe4, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\YG1R61Z8\\BBBUPaj[1].jpg", lpFilePart=0x0) returned 0x7e [0075.751] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\YG1R61Z8\\BBBUPaj[1].jpg", nBufferLength=0x105, lpBuffer=0x31dfe4, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\YG1R61Z8\\BBBUPaj[1].jpg", lpFilePart=0x0) returned 0x7e [0075.751] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e444) returned 1 [0075.751] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\YG1R61Z8\\BBBUPaj[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\yg1r61z8\\bbbupaj[1].jpg"), fInfoLevelId=0x0, lpFileInformation=0x31e4c0 | out: lpFileInformation=0x31e4c0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x52e4e6f0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x52e4e6f0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x10975740, ftLastWriteTime.dwHighDateTime=0x1d6eb7f, nFileSizeHigh=0x0, nFileSizeLow=0x2650)) returned 1 [0075.751] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e440) returned 1 [0075.751] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\YG1R61Z8\\BBBUPaj[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\yg1r61z8\\bbbupaj[1].jpg"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\YG1R61Z8\\BBBUPaj[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\yg1r61z8\\bbbupaj[1].jpg")) returned 1 [0075.752] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\YG1R61Z8\\BBBVEOW[1].jpg", nBufferLength=0x105, lpBuffer=0x31dec4, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\YG1R61Z8\\BBBVEOW[1].jpg", lpFilePart=0x0) returned 0x7e [0075.752] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e3b8) returned 1 [0075.752] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\YG1R61Z8\\BBBVEOW[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\yg1r61z8\\bbbveow[1].jpg"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x264 [0075.752] GetFileType (hFile=0x264) returned 0x1 [0075.752] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e3b4) returned 1 [0075.752] GetFileType (hFile=0x264) returned 0x1 [0075.752] GetFileSize (in: hFile=0x264, lpFileSizeHigh=0x31e4c0 | out: lpFileSizeHigh=0x31e4c0*=0x0) returned 0x3e08 [0075.752] ReadFile (in: hFile=0x264, lpBuffer=0x269bafc, nNumberOfBytesToRead=0x3e08, lpNumberOfBytesRead=0x31e46c, lpOverlapped=0x0 | out: lpBuffer=0x269bafc*, lpNumberOfBytesRead=0x31e46c*=0x3e08, lpOverlapped=0x0) returned 1 [0075.754] CloseHandle (hObject=0x264) returned 1 [0075.768] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\YG1R61Z8\\BBBVEOW[1].jpg", nBufferLength=0x105, lpBuffer=0x31deb0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\YG1R61Z8\\BBBVEOW[1].jpg", lpFilePart=0x0) returned 0x7e [0075.768] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e3a4) returned 1 [0075.768] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\YG1R61Z8\\BBBVEOW[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\yg1r61z8\\bbbveow[1].jpg"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x264 [0075.769] GetFileType (hFile=0x264) returned 0x1 [0075.769] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e3a0) returned 1 [0075.769] GetFileType (hFile=0x264) returned 0x1 [0075.769] WriteFile (in: hFile=0x264, lpBuffer=0x26fc08c*, nNumberOfBytesToWrite=0x3e10, lpNumberOfBytesWritten=0x31e460, lpOverlapped=0x0 | out: lpBuffer=0x26fc08c*, lpNumberOfBytesWritten=0x31e460*=0x3e10, lpOverlapped=0x0) returned 1 [0075.772] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\YG1R61Z8\\BBBVEOW[1].jpg", nBufferLength=0x105, lpBuffer=0x31dfe4, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\YG1R61Z8\\BBBVEOW[1].jpg", lpFilePart=0x0) returned 0x7e [0075.772] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\YG1R61Z8\\BBBVEOW[1].jpg", nBufferLength=0x105, lpBuffer=0x31dfe4, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\YG1R61Z8\\BBBVEOW[1].jpg", lpFilePart=0x0) returned 0x7e [0075.772] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e444) returned 1 [0075.772] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\YG1R61Z8\\BBBVEOW[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\yg1r61z8\\bbbveow[1].jpg"), fInfoLevelId=0x0, lpFileInformation=0x31e4c0 | out: lpFileInformation=0x31e4c0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x5e275160, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x5e275160, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x109c1a00, ftLastWriteTime.dwHighDateTime=0x1d6eb7f, nFileSizeHigh=0x0, nFileSizeLow=0x3e10)) returned 1 [0075.772] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e440) returned 1 [0075.772] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\YG1R61Z8\\BBBVEOW[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\yg1r61z8\\bbbveow[1].jpg"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\YG1R61Z8\\BBBVEOW[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\yg1r61z8\\bbbveow[1].jpg")) returned 1 [0075.772] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\YG1R61Z8\\BBBVLcG[1].jpg", nBufferLength=0x105, lpBuffer=0x31dec4, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\YG1R61Z8\\BBBVLcG[1].jpg", lpFilePart=0x0) returned 0x7e [0075.772] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e3b8) returned 1 [0075.772] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\YG1R61Z8\\BBBVLcG[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\yg1r61z8\\bbbvlcg[1].jpg"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x264 [0075.773] GetFileType (hFile=0x264) returned 0x1 [0075.773] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e3b4) returned 1 [0075.773] GetFileType (hFile=0x264) returned 0x1 [0075.773] GetFileSize (in: hFile=0x264, lpFileSizeHigh=0x31e4c0 | out: lpFileSizeHigh=0x31e4c0*=0x0) returned 0xa1f [0075.773] ReadFile (in: hFile=0x264, lpBuffer=0x2700e2c, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x31e46c, lpOverlapped=0x0 | out: lpBuffer=0x2700e2c*, lpNumberOfBytesRead=0x31e46c*=0xa1f, lpOverlapped=0x0) returned 1 [0075.787] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\YG1R61Z8\\BBBVLcG[1].jpg", nBufferLength=0x105, lpBuffer=0x31deb0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\YG1R61Z8\\BBBVLcG[1].jpg", lpFilePart=0x0) returned 0x7e [0075.787] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e3a4) returned 1 [0075.787] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\YG1R61Z8\\BBBVLcG[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\yg1r61z8\\bbbvlcg[1].jpg"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x264 [0075.788] GetFileType (hFile=0x264) returned 0x1 [0075.788] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e3a0) returned 1 [0075.788] GetFileType (hFile=0x264) returned 0x1 [0075.788] WriteFile (in: hFile=0x264, lpBuffer=0x2752054*, nNumberOfBytesToWrite=0xa20, lpNumberOfBytesWritten=0x31e434, lpOverlapped=0x0 | out: lpBuffer=0x2752054*, lpNumberOfBytesWritten=0x31e434*=0xa20, lpOverlapped=0x0) returned 1 [0075.789] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\YG1R61Z8\\BBBVLcG[1].jpg", nBufferLength=0x105, lpBuffer=0x31dfe4, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\YG1R61Z8\\BBBVLcG[1].jpg", lpFilePart=0x0) returned 0x7e [0075.789] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\YG1R61Z8\\BBBVLcG[1].jpg", nBufferLength=0x105, lpBuffer=0x31dfe4, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\YG1R61Z8\\BBBVLcG[1].jpg", lpFilePart=0x0) returned 0x7e [0075.789] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e444) returned 1 [0075.789] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\YG1R61Z8\\BBBVLcG[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\yg1r61z8\\bbbvlcg[1].jpg"), fInfoLevelId=0x0, lpFileInformation=0x31e4c0 | out: lpFileInformation=0x31e4c0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x52f32f30, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x52f32f30, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x109e7b60, ftLastWriteTime.dwHighDateTime=0x1d6eb7f, nFileSizeHigh=0x0, nFileSizeLow=0xa20)) returned 1 [0075.789] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e440) returned 1 [0075.789] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\YG1R61Z8\\BBBVLcG[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\yg1r61z8\\bbbvlcg[1].jpg"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\YG1R61Z8\\BBBVLcG[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\yg1r61z8\\bbbvlcg[1].jpg")) returned 1 [0075.790] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\YG1R61Z8\\BBBVSkP[1].jpg", nBufferLength=0x105, lpBuffer=0x31dec4, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\YG1R61Z8\\BBBVSkP[1].jpg", lpFilePart=0x0) returned 0x7e [0075.790] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e3b8) returned 1 [0075.790] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\YG1R61Z8\\BBBVSkP[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\yg1r61z8\\bbbvskp[1].jpg"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x264 [0075.790] GetFileType (hFile=0x264) returned 0x1 [0075.790] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e3b4) returned 1 [0075.790] GetFileType (hFile=0x264) returned 0x1 [0075.790] GetFileSize (in: hFile=0x264, lpFileSizeHigh=0x31e4c0 | out: lpFileSizeHigh=0x31e4c0*=0x0) returned 0x82d [0075.790] ReadFile (in: hFile=0x264, lpBuffer=0x2753c60, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x31e46c, lpOverlapped=0x0 | out: lpBuffer=0x2753c60*, lpNumberOfBytesRead=0x31e46c*=0x82d, lpOverlapped=0x0) returned 1 [0075.806] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\YG1R61Z8\\BBBVSkP[1].jpg", nBufferLength=0x105, lpBuffer=0x31deb0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\YG1R61Z8\\BBBVSkP[1].jpg", lpFilePart=0x0) returned 0x7e [0075.806] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e3a4) returned 1 [0075.806] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\YG1R61Z8\\BBBVSkP[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\yg1r61z8\\bbbvskp[1].jpg"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x264 [0075.807] GetFileType (hFile=0x264) returned 0x1 [0075.807] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e3a0) returned 1 [0075.807] GetFileType (hFile=0x264) returned 0x1 [0075.807] WriteFile (in: hFile=0x264, lpBuffer=0x27a44d8*, nNumberOfBytesToWrite=0x830, lpNumberOfBytesWritten=0x31e434, lpOverlapped=0x0 | out: lpBuffer=0x27a44d8*, lpNumberOfBytesWritten=0x31e434*=0x830, lpOverlapped=0x0) returned 1 [0075.808] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\YG1R61Z8\\BBBVSkP[1].jpg", nBufferLength=0x105, lpBuffer=0x31dfe4, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\YG1R61Z8\\BBBVSkP[1].jpg", lpFilePart=0x0) returned 0x7e [0075.808] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\YG1R61Z8\\BBBVSkP[1].jpg", nBufferLength=0x105, lpBuffer=0x31dfe4, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\YG1R61Z8\\BBBVSkP[1].jpg", lpFilePart=0x0) returned 0x7e [0075.808] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e444) returned 1 [0075.808] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\YG1R61Z8\\BBBVSkP[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\yg1r61z8\\bbbvskp[1].jpg"), fInfoLevelId=0x0, lpFileInformation=0x31e4c0 | out: lpFileInformation=0x31e4c0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x530afcf0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x530afcf0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x10a0dcc0, ftLastWriteTime.dwHighDateTime=0x1d6eb7f, nFileSizeHigh=0x0, nFileSizeLow=0x830)) returned 1 [0075.808] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e440) returned 1 [0075.808] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\YG1R61Z8\\BBBVSkP[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\yg1r61z8\\bbbvskp[1].jpg"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\YG1R61Z8\\BBBVSkP[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\yg1r61z8\\bbbvskp[1].jpg")) returned 1 [0075.808] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\YG1R61Z8\\BBBYfEH[1].jpg", nBufferLength=0x105, lpBuffer=0x31dec4, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\YG1R61Z8\\BBBYfEH[1].jpg", lpFilePart=0x0) returned 0x7e [0075.809] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e3b8) returned 1 [0075.809] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\YG1R61Z8\\BBBYfEH[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\yg1r61z8\\bbbyfeh[1].jpg"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x264 [0075.809] GetFileType (hFile=0x264) returned 0x1 [0075.809] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e3b4) returned 1 [0075.809] GetFileType (hFile=0x264) returned 0x1 [0075.809] GetFileSize (in: hFile=0x264, lpFileSizeHigh=0x31e4c0 | out: lpFileSizeHigh=0x31e4c0*=0x0) returned 0x16f5 [0075.809] ReadFile (in: hFile=0x264, lpBuffer=0x27a58a8, nNumberOfBytesToRead=0x16f5, lpNumberOfBytesRead=0x31e46c, lpOverlapped=0x0 | out: lpBuffer=0x27a58a8*, lpNumberOfBytesRead=0x31e46c*=0x16f5, lpOverlapped=0x0) returned 1 [0075.823] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\YG1R61Z8\\BBBYfEH[1].jpg", nBufferLength=0x105, lpBuffer=0x31deb0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\YG1R61Z8\\BBBYfEH[1].jpg", lpFilePart=0x0) returned 0x7e [0075.823] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e3a4) returned 1 [0075.824] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\YG1R61Z8\\BBBYfEH[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\yg1r61z8\\bbbyfeh[1].jpg"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x264 [0075.824] GetFileType (hFile=0x264) returned 0x1 [0075.824] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e3a0) returned 1 [0075.824] GetFileType (hFile=0x264) returned 0x1 [0075.824] WriteFile (in: hFile=0x264, lpBuffer=0x27f9990*, nNumberOfBytesToWrite=0x1700, lpNumberOfBytesWritten=0x31e460, lpOverlapped=0x0 | out: lpBuffer=0x27f9990*, lpNumberOfBytesWritten=0x31e460*=0x1700, lpOverlapped=0x0) returned 1 [0075.825] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\YG1R61Z8\\BBBYfEH[1].jpg", nBufferLength=0x105, lpBuffer=0x31dfe4, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\YG1R61Z8\\BBBYfEH[1].jpg", lpFilePart=0x0) returned 0x7e [0075.825] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\YG1R61Z8\\BBBYfEH[1].jpg", nBufferLength=0x105, lpBuffer=0x31dfe4, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\YG1R61Z8\\BBBYfEH[1].jpg", lpFilePart=0x0) returned 0x7e [0075.825] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e444) returned 1 [0075.826] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\YG1R61Z8\\BBBYfEH[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\yg1r61z8\\bbbyfeh[1].jpg"), fInfoLevelId=0x0, lpFileInformation=0x31e4c0 | out: lpFileInformation=0x31e4c0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x612a8ee0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x612a8ee0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x10a33e20, ftLastWriteTime.dwHighDateTime=0x1d6eb7f, nFileSizeHigh=0x0, nFileSizeLow=0x1700)) returned 1 [0075.826] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e440) returned 1 [0075.826] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\YG1R61Z8\\BBBYfEH[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\yg1r61z8\\bbbyfeh[1].jpg"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\YG1R61Z8\\BBBYfEH[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\yg1r61z8\\bbbyfeh[1].jpg")) returned 1 [0075.826] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\YG1R61Z8\\BBBZ5vT[1].jpg", nBufferLength=0x105, lpBuffer=0x31dec4, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\YG1R61Z8\\BBBZ5vT[1].jpg", lpFilePart=0x0) returned 0x7e [0075.826] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e3b8) returned 1 [0075.826] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\YG1R61Z8\\BBBZ5vT[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\yg1r61z8\\bbbz5vt[1].jpg"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x264 [0075.830] GetFileType (hFile=0x264) returned 0x1 [0075.830] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e3b4) returned 1 [0075.830] GetFileType (hFile=0x264) returned 0x1 [0075.830] GetFileSize (in: hFile=0x264, lpFileSizeHigh=0x31e4c0 | out: lpFileSizeHigh=0x31e4c0*=0x0) returned 0xc20 [0075.830] ReadFile (in: hFile=0x264, lpBuffer=0x27fc220, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x31e46c, lpOverlapped=0x0 | out: lpBuffer=0x27fc220*, lpNumberOfBytesRead=0x31e46c*=0xc20, lpOverlapped=0x0) returned 1 [0075.844] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\YG1R61Z8\\BBBZ5vT[1].jpg", nBufferLength=0x105, lpBuffer=0x31deb0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\YG1R61Z8\\BBBZ5vT[1].jpg", lpFilePart=0x0) returned 0x7e [0075.844] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e3a4) returned 1 [0075.845] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\YG1R61Z8\\BBBZ5vT[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\yg1r61z8\\bbbz5vt[1].jpg"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x264 [0075.845] GetFileType (hFile=0x264) returned 0x1 [0075.845] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e3a0) returned 1 [0075.845] GetFileType (hFile=0x264) returned 0x1 [0075.846] WriteFile (in: hFile=0x264, lpBuffer=0x284dea4*, nNumberOfBytesToWrite=0xc30, lpNumberOfBytesWritten=0x31e434, lpOverlapped=0x0 | out: lpBuffer=0x284dea4*, lpNumberOfBytesWritten=0x31e434*=0xc30, lpOverlapped=0x0) returned 1 [0075.846] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\YG1R61Z8\\BBBZ5vT[1].jpg", nBufferLength=0x105, lpBuffer=0x31dfe4, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\YG1R61Z8\\BBBZ5vT[1].jpg", lpFilePart=0x0) returned 0x7e [0075.846] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\YG1R61Z8\\BBBZ5vT[1].jpg", nBufferLength=0x105, lpBuffer=0x31dfe4, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\YG1R61Z8\\BBBZ5vT[1].jpg", lpFilePart=0x0) returned 0x7e [0075.846] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e444) returned 1 [0075.847] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\YG1R61Z8\\BBBZ5vT[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\yg1r61z8\\bbbz5vt[1].jpg"), fInfoLevelId=0x0, lpFileInformation=0x31e4c0 | out: lpFileInformation=0x31e4c0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x53017770, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x53017770, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x10a59f80, ftLastWriteTime.dwHighDateTime=0x1d6eb7f, nFileSizeHigh=0x0, nFileSizeLow=0xc30)) returned 1 [0075.847] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e440) returned 1 [0075.847] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\YG1R61Z8\\BBBZ5vT[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\yg1r61z8\\bbbz5vt[1].jpg"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\YG1R61Z8\\BBBZ5vT[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\yg1r61z8\\bbbz5vt[1].jpg")) returned 1 [0075.847] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\YG1R61Z8\\BBC02Gr[1].jpg", nBufferLength=0x105, lpBuffer=0x31dec4, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\YG1R61Z8\\BBC02Gr[1].jpg", lpFilePart=0x0) returned 0x7e [0075.847] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e3b8) returned 1 [0075.847] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\YG1R61Z8\\BBC02Gr[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\yg1r61z8\\bbc02gr[1].jpg"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x264 [0075.847] GetFileType (hFile=0x264) returned 0x1 [0075.847] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e3b4) returned 1 [0075.848] GetFileType (hFile=0x264) returned 0x1 [0075.848] GetFileSize (in: hFile=0x264, lpFileSizeHigh=0x31e4c0 | out: lpFileSizeHigh=0x31e4c0*=0x0) returned 0x86e [0075.848] ReadFile (in: hFile=0x264, lpBuffer=0x284faf0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x31e46c, lpOverlapped=0x0 | out: lpBuffer=0x284faf0*, lpNumberOfBytesRead=0x31e46c*=0x86e, lpOverlapped=0x0) returned 1 [0075.897] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\YG1R61Z8\\BBC02Gr[1].jpg", nBufferLength=0x105, lpBuffer=0x31deb0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\YG1R61Z8\\BBC02Gr[1].jpg", lpFilePart=0x0) returned 0x7e [0075.897] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e3a4) returned 1 [0075.897] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\YG1R61Z8\\BBC02Gr[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\yg1r61z8\\bbc02gr[1].jpg"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x264 [0075.898] GetFileType (hFile=0x264) returned 0x1 [0075.898] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e3a0) returned 1 [0075.898] GetFileType (hFile=0x264) returned 0x1 [0075.898] WriteFile (in: hFile=0x264, lpBuffer=0x269e6e4*, nNumberOfBytesToWrite=0x870, lpNumberOfBytesWritten=0x31e434, lpOverlapped=0x0 | out: lpBuffer=0x269e6e4*, lpNumberOfBytesWritten=0x31e434*=0x870, lpOverlapped=0x0) returned 1 [0075.899] CloseHandle (hObject=0x264) returned 1 [0075.899] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\YG1R61Z8\\BBC02Gr[1].jpg", nBufferLength=0x105, lpBuffer=0x31dfe4, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\YG1R61Z8\\BBC02Gr[1].jpg", lpFilePart=0x0) returned 0x7e [0075.899] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\YG1R61Z8\\BBC02Gr[1].jpg", nBufferLength=0x105, lpBuffer=0x31dfe4, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\YG1R61Z8\\BBC02Gr[1].jpg", lpFilePart=0x0) returned 0x7e [0075.899] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e444) returned 1 [0075.899] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\YG1R61Z8\\BBC02Gr[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\yg1r61z8\\bbc02gr[1].jpg"), fInfoLevelId=0x0, lpFileInformation=0x31e4c0 | out: lpFileInformation=0x31e4c0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x514ddbd0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x514ddbd0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x10af2500, ftLastWriteTime.dwHighDateTime=0x1d6eb7f, nFileSizeHigh=0x0, nFileSizeLow=0x870)) returned 1 [0075.899] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e440) returned 1 [0075.899] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\YG1R61Z8\\BBC02Gr[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\yg1r61z8\\bbc02gr[1].jpg"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\YG1R61Z8\\BBC02Gr[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\yg1r61z8\\bbc02gr[1].jpg")) returned 1 [0075.900] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\YG1R61Z8\\BBC02Gr[2].jpg", nBufferLength=0x105, lpBuffer=0x31dec4, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\YG1R61Z8\\BBC02Gr[2].jpg", lpFilePart=0x0) returned 0x7e [0075.900] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e3b8) returned 1 [0075.900] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\YG1R61Z8\\BBC02Gr[2].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\yg1r61z8\\bbc02gr[2].jpg"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x264 [0075.900] GetFileType (hFile=0x264) returned 0x1 [0075.900] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e3b4) returned 1 [0075.900] GetFileType (hFile=0x264) returned 0x1 [0075.900] GetFileSize (in: hFile=0x264, lpFileSizeHigh=0x31e4c0 | out: lpFileSizeHigh=0x31e4c0*=0x0) returned 0x86e [0075.900] ReadFile (in: hFile=0x264, lpBuffer=0x26a0330, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x31e46c, lpOverlapped=0x0 | out: lpBuffer=0x26a0330*, lpNumberOfBytesRead=0x31e46c*=0x86e, lpOverlapped=0x0) returned 1 [0075.909] CloseHandle (hObject=0x264) returned 1 [0075.922] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\YG1R61Z8\\BBC02Gr[2].jpg", nBufferLength=0x105, lpBuffer=0x31deb0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\YG1R61Z8\\BBC02Gr[2].jpg", lpFilePart=0x0) returned 0x7e [0075.922] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e3a4) returned 1 [0075.922] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\YG1R61Z8\\BBC02Gr[2].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\yg1r61z8\\bbc02gr[2].jpg"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x264 [0075.923] GetFileType (hFile=0x264) returned 0x1 [0075.923] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e3a0) returned 1 [0075.923] GetFileType (hFile=0x264) returned 0x1 [0075.923] WriteFile (in: hFile=0x264, lpBuffer=0x26f0e44*, nNumberOfBytesToWrite=0x870, lpNumberOfBytesWritten=0x31e434, lpOverlapped=0x0 | out: lpBuffer=0x26f0e44*, lpNumberOfBytesWritten=0x31e434*=0x870, lpOverlapped=0x0) returned 1 [0075.924] CloseHandle (hObject=0x264) returned 1 [0075.924] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\YG1R61Z8\\BBC02Gr[2].jpg", nBufferLength=0x105, lpBuffer=0x31dfe4, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\YG1R61Z8\\BBC02Gr[2].jpg", lpFilePart=0x0) returned 0x7e [0075.924] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\YG1R61Z8\\BBC02Gr[2].jpg", nBufferLength=0x105, lpBuffer=0x31dfe4, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\YG1R61Z8\\BBC02Gr[2].jpg", lpFilePart=0x0) returned 0x7e [0075.924] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e444) returned 1 [0075.924] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\YG1R61Z8\\BBC02Gr[2].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\yg1r61z8\\bbc02gr[2].jpg"), fInfoLevelId=0x0, lpFileInformation=0x31e4c0 | out: lpFileInformation=0x31e4c0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x5392ab50, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x5392ab50, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x10b18660, ftLastWriteTime.dwHighDateTime=0x1d6eb7f, nFileSizeHigh=0x0, nFileSizeLow=0x870)) returned 1 [0075.924] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e440) returned 1 [0075.924] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\YG1R61Z8\\BBC02Gr[2].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\yg1r61z8\\bbc02gr[2].jpg"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\YG1R61Z8\\BBC02Gr[2].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\yg1r61z8\\bbc02gr[2].jpg")) returned 1 [0075.925] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\YG1R61Z8\\BBC03B1[1].jpg", nBufferLength=0x105, lpBuffer=0x31dec4, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\YG1R61Z8\\BBC03B1[1].jpg", lpFilePart=0x0) returned 0x7e [0075.925] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e3b8) returned 1 [0075.925] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\YG1R61Z8\\BBC03B1[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\yg1r61z8\\bbc03b1[1].jpg"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x264 [0075.926] GetFileType (hFile=0x264) returned 0x1 [0075.926] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e3b4) returned 1 [0075.926] GetFileType (hFile=0x264) returned 0x1 [0075.926] GetFileSize (in: hFile=0x264, lpFileSizeHigh=0x31e4c0 | out: lpFileSizeHigh=0x31e4c0*=0x0) returned 0x89a [0075.926] ReadFile (in: hFile=0x264, lpBuffer=0x26f2abc, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x31e46c, lpOverlapped=0x0 | out: lpBuffer=0x26f2abc*, lpNumberOfBytesRead=0x31e46c*=0x89a, lpOverlapped=0x0) returned 1 [0075.928] CloseHandle (hObject=0x264) returned 1 [0075.940] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\YG1R61Z8\\BBC03B1[1].jpg", nBufferLength=0x105, lpBuffer=0x31deb0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\YG1R61Z8\\BBC03B1[1].jpg", lpFilePart=0x0) returned 0x7e [0075.940] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e3a4) returned 1 [0075.940] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\YG1R61Z8\\BBC03B1[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\yg1r61z8\\bbc03b1[1].jpg"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x264 [0075.941] GetFileType (hFile=0x264) returned 0x1 [0075.941] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e3a0) returned 1 [0075.942] GetFileType (hFile=0x264) returned 0x1 [0075.942] WriteFile (in: hFile=0x264, lpBuffer=0x2743568*, nNumberOfBytesToWrite=0x8a0, lpNumberOfBytesWritten=0x31e434, lpOverlapped=0x0 | out: lpBuffer=0x2743568*, lpNumberOfBytesWritten=0x31e434*=0x8a0, lpOverlapped=0x0) returned 1 [0075.942] CloseHandle (hObject=0x264) returned 1 [0075.943] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\YG1R61Z8\\BBC03B1[1].jpg", nBufferLength=0x105, lpBuffer=0x31dfe4, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\YG1R61Z8\\BBC03B1[1].jpg", lpFilePart=0x0) returned 0x7e [0075.943] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\YG1R61Z8\\BBC03B1[1].jpg", nBufferLength=0x105, lpBuffer=0x31dfe4, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\YG1R61Z8\\BBC03B1[1].jpg", lpFilePart=0x0) returned 0x7e [0075.943] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e444) returned 1 [0075.943] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\YG1R61Z8\\BBC03B1[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\yg1r61z8\\bbc03b1[1].jpg"), fInfoLevelId=0x0, lpFileInformation=0x31e4c0 | out: lpFileInformation=0x31e4c0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x52fa5350, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x52fa5350, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x10b64920, ftLastWriteTime.dwHighDateTime=0x1d6eb7f, nFileSizeHigh=0x0, nFileSizeLow=0x8a0)) returned 1 [0075.943] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e440) returned 1 [0075.943] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\YG1R61Z8\\BBC03B1[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\yg1r61z8\\bbc03b1[1].jpg"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\YG1R61Z8\\BBC03B1[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\yg1r61z8\\bbc03b1[1].jpg")) returned 1 [0075.943] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\YG1R61Z8\\BBC06Ub[1].jpg", nBufferLength=0x105, lpBuffer=0x31dec4, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\YG1R61Z8\\BBC06Ub[1].jpg", lpFilePart=0x0) returned 0x7e [0075.943] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e3b8) returned 1 [0075.943] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\YG1R61Z8\\BBC06Ub[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\yg1r61z8\\bbc06ub[1].jpg"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x264 [0075.944] GetFileType (hFile=0x264) returned 0x1 [0075.944] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e3b4) returned 1 [0075.944] GetFileType (hFile=0x264) returned 0x1 [0075.944] GetFileSize (in: hFile=0x264, lpFileSizeHigh=0x31e4c0 | out: lpFileSizeHigh=0x31e4c0*=0x0) returned 0x7bb [0075.944] ReadFile (in: hFile=0x264, lpBuffer=0x2745100, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x31e46c, lpOverlapped=0x0 | out: lpBuffer=0x2745100*, lpNumberOfBytesRead=0x31e46c*=0x7bb, lpOverlapped=0x0) returned 1 [0075.945] CloseHandle (hObject=0x264) returned 1 [0075.958] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\YG1R61Z8\\BBC06Ub[1].jpg", nBufferLength=0x105, lpBuffer=0x31deb0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\YG1R61Z8\\BBC06Ub[1].jpg", lpFilePart=0x0) returned 0x7e [0075.958] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e3a4) returned 1 [0075.958] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\YG1R61Z8\\BBC06Ub[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\yg1r61z8\\bbc06ub[1].jpg"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x264 [0075.959] GetFileType (hFile=0x264) returned 0x1 [0075.959] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e3a0) returned 1 [0075.959] GetFileType (hFile=0x264) returned 0x1 [0075.959] WriteFile (in: hFile=0x264, lpBuffer=0x279574c*, nNumberOfBytesToWrite=0x7c0, lpNumberOfBytesWritten=0x31e434, lpOverlapped=0x0 | out: lpBuffer=0x279574c*, lpNumberOfBytesWritten=0x31e434*=0x7c0, lpOverlapped=0x0) returned 1 [0075.960] CloseHandle (hObject=0x264) returned 1 [0075.960] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\YG1R61Z8\\BBC06Ub[1].jpg", nBufferLength=0x105, lpBuffer=0x31dfe4, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\YG1R61Z8\\BBC06Ub[1].jpg", lpFilePart=0x0) returned 0x7e [0075.960] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\YG1R61Z8\\BBC06Ub[1].jpg", nBufferLength=0x105, lpBuffer=0x31dfe4, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\YG1R61Z8\\BBC06Ub[1].jpg", lpFilePart=0x0) returned 0x7e [0075.960] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e444) returned 1 [0075.960] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\YG1R61Z8\\BBC06Ub[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\yg1r61z8\\bbc06ub[1].jpg"), fInfoLevelId=0x0, lpFileInformation=0x31e4c0 | out: lpFileInformation=0x31e4c0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x52f0cdd0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x52f0cdd0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x10b8aa80, ftLastWriteTime.dwHighDateTime=0x1d6eb7f, nFileSizeHigh=0x0, nFileSizeLow=0x7c0)) returned 1 [0075.960] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e440) returned 1 [0075.960] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\YG1R61Z8\\BBC06Ub[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\yg1r61z8\\bbc06ub[1].jpg"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\YG1R61Z8\\BBC06Ub[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\yg1r61z8\\bbc06ub[1].jpg")) returned 1 [0075.961] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\YG1R61Z8\\BBC0Djg[1].jpg", nBufferLength=0x105, lpBuffer=0x31dec4, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\YG1R61Z8\\BBC0Djg[1].jpg", lpFilePart=0x0) returned 0x7e [0075.961] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e3b8) returned 1 [0075.961] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\YG1R61Z8\\BBC0Djg[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\yg1r61z8\\bbc0djg[1].jpg"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x264 [0075.961] GetFileType (hFile=0x264) returned 0x1 [0075.961] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e3b4) returned 1 [0075.961] GetFileType (hFile=0x264) returned 0x1 [0075.961] GetFileSize (in: hFile=0x264, lpFileSizeHigh=0x31e4c0 | out: lpFileSizeHigh=0x31e4c0*=0x0) returned 0x9ab [0075.961] ReadFile (in: hFile=0x264, lpBuffer=0x27974d4, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x31e46c, lpOverlapped=0x0 | out: lpBuffer=0x27974d4*, lpNumberOfBytesRead=0x31e46c*=0x9ab, lpOverlapped=0x0) returned 1 [0075.974] CloseHandle (hObject=0x264) returned 1 [0076.005] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\YG1R61Z8\\BBC0Djg[1].jpg", nBufferLength=0x105, lpBuffer=0x31deb0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\YG1R61Z8\\BBC0Djg[1].jpg", lpFilePart=0x0) returned 0x7e [0076.005] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e3a4) returned 1 [0076.005] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\YG1R61Z8\\BBC0Djg[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\yg1r61z8\\bbc0djg[1].jpg"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x264 [0076.006] GetFileType (hFile=0x264) returned 0x1 [0076.006] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e3a0) returned 1 [0076.006] GetFileType (hFile=0x264) returned 0x1 [0076.006] WriteFile (in: hFile=0x264, lpBuffer=0x27e84d0*, nNumberOfBytesToWrite=0x9b0, lpNumberOfBytesWritten=0x31e434, lpOverlapped=0x0 | out: lpBuffer=0x27e84d0*, lpNumberOfBytesWritten=0x31e434*=0x9b0, lpOverlapped=0x0) returned 1 [0076.007] CloseHandle (hObject=0x264) returned 1 [0076.007] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\YG1R61Z8\\BBC0Djg[1].jpg", nBufferLength=0x105, lpBuffer=0x31dfe4, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\YG1R61Z8\\BBC0Djg[1].jpg", lpFilePart=0x0) returned 0x7e [0076.007] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\YG1R61Z8\\BBC0Djg[1].jpg", nBufferLength=0x105, lpBuffer=0x31dfe4, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\YG1R61Z8\\BBC0Djg[1].jpg", lpFilePart=0x0) returned 0x7e [0076.007] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e444) returned 1 [0076.007] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\YG1R61Z8\\BBC0Djg[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\yg1r61z8\\bbc0djg[1].jpg"), fInfoLevelId=0x0, lpFileInformation=0x31e4c0 | out: lpFileInformation=0x31e4c0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x52e74850, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x52e74850, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x10bfcea0, ftLastWriteTime.dwHighDateTime=0x1d6eb7f, nFileSizeHigh=0x0, nFileSizeLow=0x9b0)) returned 1 [0076.007] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e440) returned 1 [0076.007] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\YG1R61Z8\\BBC0Djg[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\yg1r61z8\\bbc0djg[1].jpg"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\YG1R61Z8\\BBC0Djg[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\yg1r61z8\\bbc0djg[1].jpg")) returned 1 [0076.008] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\YG1R61Z8\\BBC0g7a[1].jpg", nBufferLength=0x105, lpBuffer=0x31dec4, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\YG1R61Z8\\BBC0g7a[1].jpg", lpFilePart=0x0) returned 0x7e [0076.008] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e3b8) returned 1 [0076.008] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\YG1R61Z8\\BBC0g7a[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\yg1r61z8\\bbc0g7a[1].jpg"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x264 [0076.027] GetFileType (hFile=0x264) returned 0x1 [0076.027] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e3b4) returned 1 [0076.027] GetFileType (hFile=0x264) returned 0x1 [0076.050] GetFileSize (in: hFile=0x264, lpFileSizeHigh=0x31e4c0 | out: lpFileSizeHigh=0x31e4c0*=0x0) returned 0x7fd [0076.050] ReadFile (in: hFile=0x264, lpBuffer=0x27ea0ac, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x31e46c, lpOverlapped=0x0 | out: lpBuffer=0x27ea0ac*, lpNumberOfBytesRead=0x31e46c*=0x7fd, lpOverlapped=0x0) returned 1 [0076.052] CloseHandle (hObject=0x264) returned 1 [0076.065] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\YG1R61Z8\\BBC0g7a[1].jpg", nBufferLength=0x105, lpBuffer=0x31deb0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\YG1R61Z8\\BBC0g7a[1].jpg", lpFilePart=0x0) returned 0x7e [0076.065] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e3a4) returned 1 [0076.065] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\YG1R61Z8\\BBC0g7a[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\yg1r61z8\\bbc0g7a[1].jpg"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x264 [0076.072] GetFileType (hFile=0x264) returned 0x1 [0076.072] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e3a0) returned 1 [0076.072] GetFileType (hFile=0x264) returned 0x1 [0076.072] WriteFile (in: hFile=0x264, lpBuffer=0x283a834*, nNumberOfBytesToWrite=0x800, lpNumberOfBytesWritten=0x31e434, lpOverlapped=0x0 | out: lpBuffer=0x283a834*, lpNumberOfBytesWritten=0x31e434*=0x800, lpOverlapped=0x0) returned 1 [0076.073] CloseHandle (hObject=0x264) returned 1 [0076.073] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\YG1R61Z8\\BBC0g7a[1].jpg", nBufferLength=0x105, lpBuffer=0x31dfe4, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\YG1R61Z8\\BBC0g7a[1].jpg", lpFilePart=0x0) returned 0x7e [0076.073] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\YG1R61Z8\\BBC0g7a[1].jpg", nBufferLength=0x105, lpBuffer=0x31dfe4, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\YG1R61Z8\\BBC0g7a[1].jpg", lpFilePart=0x0) returned 0x7e [0076.073] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e444) returned 1 [0076.073] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\YG1R61Z8\\BBC0g7a[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\yg1r61z8\\bbc0g7a[1].jpg"), fInfoLevelId=0x0, lpFileInformation=0x31e4c0 | out: lpFileInformation=0x31e4c0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x52ec0b10, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x52ec0b10, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x10c95420, ftLastWriteTime.dwHighDateTime=0x1d6eb7f, nFileSizeHigh=0x0, nFileSizeLow=0x800)) returned 1 [0076.073] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e440) returned 1 [0076.073] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\YG1R61Z8\\BBC0g7a[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\yg1r61z8\\bbc0g7a[1].jpg"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\YG1R61Z8\\BBC0g7a[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\yg1r61z8\\bbc0g7a[1].jpg")) returned 1 [0076.073] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\YG1R61Z8\\BBC0lf2[1].jpg", nBufferLength=0x105, lpBuffer=0x31dec4, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\YG1R61Z8\\BBC0lf2[1].jpg", lpFilePart=0x0) returned 0x7e [0076.073] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e3b8) returned 1 [0076.074] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\YG1R61Z8\\BBC0lf2[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\yg1r61z8\\bbc0lf2[1].jpg"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x264 [0076.075] GetFileType (hFile=0x264) returned 0x1 [0076.075] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e3b4) returned 1 [0076.075] GetFileType (hFile=0x264) returned 0x1 [0076.075] GetFileSize (in: hFile=0x264, lpFileSizeHigh=0x31e4c0 | out: lpFileSizeHigh=0x31e4c0*=0x0) returned 0x82f [0076.075] ReadFile (in: hFile=0x264, lpBuffer=0x283c440, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x31e46c, lpOverlapped=0x0 | out: lpBuffer=0x283c440*, lpNumberOfBytesRead=0x31e46c*=0x82f, lpOverlapped=0x0) returned 1 [0076.076] CloseHandle (hObject=0x264) returned 1 [0076.120] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\YG1R61Z8\\BBC0lf2[1].jpg", nBufferLength=0x105, lpBuffer=0x31deb0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\YG1R61Z8\\BBC0lf2[1].jpg", lpFilePart=0x0) returned 0x7e [0076.120] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e3a4) returned 1 [0076.120] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\YG1R61Z8\\BBC0lf2[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\yg1r61z8\\bbc0lf2[1].jpg"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x264 [0076.121] GetFileType (hFile=0x264) returned 0x1 [0076.121] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e3a0) returned 1 [0076.121] GetFileType (hFile=0x264) returned 0x1 [0076.122] WriteFile (in: hFile=0x264, lpBuffer=0x268cc58*, nNumberOfBytesToWrite=0x830, lpNumberOfBytesWritten=0x31e434, lpOverlapped=0x0 | out: lpBuffer=0x268cc58*, lpNumberOfBytesWritten=0x31e434*=0x830, lpOverlapped=0x0) returned 1 [0076.122] CloseHandle (hObject=0x264) returned 1 [0076.122] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\YG1R61Z8\\BBC0lf2[1].jpg", nBufferLength=0x105, lpBuffer=0x31dfe4, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\YG1R61Z8\\BBC0lf2[1].jpg", lpFilePart=0x0) returned 0x7e [0076.123] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\YG1R61Z8\\BBC0lf2[1].jpg", nBufferLength=0x105, lpBuffer=0x31dfe4, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\YG1R61Z8\\BBC0lf2[1].jpg", lpFilePart=0x0) returned 0x7e [0076.123] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e444) returned 1 [0076.123] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\YG1R61Z8\\BBC0lf2[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\yg1r61z8\\bbc0lf2[1].jpg"), fInfoLevelId=0x0, lpFileInformation=0x31e4c0 | out: lpFileInformation=0x31e4c0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x52fcb4b0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x52fcb4b0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x10d07840, ftLastWriteTime.dwHighDateTime=0x1d6eb7f, nFileSizeHigh=0x0, nFileSizeLow=0x830)) returned 1 [0076.123] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e440) returned 1 [0076.123] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\YG1R61Z8\\BBC0lf2[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\yg1r61z8\\bbc0lf2[1].jpg"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\YG1R61Z8\\BBC0lf2[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\yg1r61z8\\bbc0lf2[1].jpg")) returned 1 [0076.123] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\YG1R61Z8\\BBC0mK1[1].jpg", nBufferLength=0x105, lpBuffer=0x31dec4, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\YG1R61Z8\\BBC0mK1[1].jpg", lpFilePart=0x0) returned 0x7e [0076.123] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e3b8) returned 1 [0076.123] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\YG1R61Z8\\BBC0mK1[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\yg1r61z8\\bbc0mk1[1].jpg"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x264 [0076.123] GetFileType (hFile=0x264) returned 0x1 [0076.123] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e3b4) returned 1 [0076.123] GetFileType (hFile=0x264) returned 0x1 [0076.124] GetFileSize (in: hFile=0x264, lpFileSizeHigh=0x31e4c0 | out: lpFileSizeHigh=0x31e4c0*=0x0) returned 0x1afe [0076.124] ReadFile (in: hFile=0x264, lpBuffer=0x268e028, nNumberOfBytesToRead=0x1afe, lpNumberOfBytesRead=0x31e46c, lpOverlapped=0x0 | out: lpBuffer=0x268e028*, lpNumberOfBytesRead=0x31e46c*=0x1afe, lpOverlapped=0x0) returned 1 [0076.125] CloseHandle (hObject=0x264) returned 1 [0076.138] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\YG1R61Z8\\BBC0mK1[1].jpg", nBufferLength=0x105, lpBuffer=0x31deb0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\YG1R61Z8\\BBC0mK1[1].jpg", lpFilePart=0x0) returned 0x7e [0076.138] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e3a4) returned 1 [0076.138] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\YG1R61Z8\\BBC0mK1[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\yg1r61z8\\bbc0mk1[1].jpg"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x264 [0076.139] GetFileType (hFile=0x264) returned 0x1 [0076.139] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e3a0) returned 1 [0076.139] GetFileType (hFile=0x264) returned 0x1 [0076.139] WriteFile (in: hFile=0x264, lpBuffer=0x26e366c*, nNumberOfBytesToWrite=0x1b00, lpNumberOfBytesWritten=0x31e460, lpOverlapped=0x0 | out: lpBuffer=0x26e366c*, lpNumberOfBytesWritten=0x31e460*=0x1b00, lpOverlapped=0x0) returned 1 [0076.140] CloseHandle (hObject=0x264) returned 1 [0076.141] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\YG1R61Z8\\BBC0mK1[1].jpg", nBufferLength=0x105, lpBuffer=0x31dfe4, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\YG1R61Z8\\BBC0mK1[1].jpg", lpFilePart=0x0) returned 0x7e [0076.141] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\YG1R61Z8\\BBC0mK1[1].jpg", nBufferLength=0x105, lpBuffer=0x31dfe4, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\YG1R61Z8\\BBC0mK1[1].jpg", lpFilePart=0x0) returned 0x7e [0076.141] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e444) returned 1 [0076.141] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\YG1R61Z8\\BBC0mK1[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\yg1r61z8\\bbc0mk1[1].jpg"), fInfoLevelId=0x0, lpFileInformation=0x31e4c0 | out: lpFileInformation=0x31e4c0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x5b2e35a0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x5b2e35a0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x10d2d9a0, ftLastWriteTime.dwHighDateTime=0x1d6eb7f, nFileSizeHigh=0x0, nFileSizeLow=0x1b00)) returned 1 [0076.141] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e440) returned 1 [0076.141] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\YG1R61Z8\\BBC0mK1[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\yg1r61z8\\bbc0mk1[1].jpg"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\YG1R61Z8\\BBC0mK1[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\yg1r61z8\\bbc0mk1[1].jpg")) returned 1 [0076.141] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\YG1R61Z8\\BBC0qlB[1].jpg", nBufferLength=0x105, lpBuffer=0x31dec4, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\YG1R61Z8\\BBC0qlB[1].jpg", lpFilePart=0x0) returned 0x7e [0076.141] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e3b8) returned 1 [0076.141] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\YG1R61Z8\\BBC0qlB[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\yg1r61z8\\bbc0qlb[1].jpg"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x264 [0076.141] GetFileType (hFile=0x264) returned 0x1 [0076.141] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e3b4) returned 1 [0076.141] GetFileType (hFile=0x264) returned 0x1 [0076.142] GetFileSize (in: hFile=0x264, lpFileSizeHigh=0x31e4c0 | out: lpFileSizeHigh=0x31e4c0*=0x0) returned 0x1fc3 [0076.142] ReadFile (in: hFile=0x264, lpBuffer=0x26e56d0, nNumberOfBytesToRead=0x1fc3, lpNumberOfBytesRead=0x31e46c, lpOverlapped=0x0 | out: lpBuffer=0x26e56d0*, lpNumberOfBytesRead=0x31e46c*=0x1fc3, lpOverlapped=0x0) returned 1 [0076.143] CloseHandle (hObject=0x264) returned 1 [0076.157] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\YG1R61Z8\\BBC0qlB[1].jpg", nBufferLength=0x105, lpBuffer=0x31deb0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\YG1R61Z8\\BBC0qlB[1].jpg", lpFilePart=0x0) returned 0x7e [0076.157] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e3a4) returned 1 [0076.157] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\YG1R61Z8\\BBC0qlB[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\yg1r61z8\\bbc0qlb[1].jpg"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x264 [0076.158] GetFileType (hFile=0x264) returned 0x1 [0076.158] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e3a0) returned 1 [0076.158] GetFileType (hFile=0x264) returned 0x1 [0076.158] WriteFile (in: hFile=0x264, lpBuffer=0x273c3c8*, nNumberOfBytesToWrite=0x1fd0, lpNumberOfBytesWritten=0x31e460, lpOverlapped=0x0 | out: lpBuffer=0x273c3c8*, lpNumberOfBytesWritten=0x31e460*=0x1fd0, lpOverlapped=0x0) returned 1 [0076.159] CloseHandle (hObject=0x264) returned 1 [0076.159] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\YG1R61Z8\\BBC0qlB[1].jpg", nBufferLength=0x105, lpBuffer=0x31dfe4, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\YG1R61Z8\\BBC0qlB[1].jpg", lpFilePart=0x0) returned 0x7e [0076.159] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\YG1R61Z8\\BBC0qlB[1].jpg", nBufferLength=0x105, lpBuffer=0x31dfe4, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\YG1R61Z8\\BBC0qlB[1].jpg", lpFilePart=0x0) returned 0x7e [0076.159] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e444) returned 1 [0076.159] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\YG1R61Z8\\BBC0qlB[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\yg1r61z8\\bbc0qlb[1].jpg"), fInfoLevelId=0x0, lpFileInformation=0x31e4c0 | out: lpFileInformation=0x31e4c0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x53089b90, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x53089b90, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x10d53b00, ftLastWriteTime.dwHighDateTime=0x1d6eb7f, nFileSizeHigh=0x0, nFileSizeLow=0x1fd0)) returned 1 [0076.159] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e440) returned 1 [0076.160] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\YG1R61Z8\\BBC0qlB[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\yg1r61z8\\bbc0qlb[1].jpg"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\YG1R61Z8\\BBC0qlB[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\yg1r61z8\\bbc0qlb[1].jpg")) returned 1 [0076.160] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\YG1R61Z8\\BBE7KPZ[1].jpg", nBufferLength=0x105, lpBuffer=0x31dec4, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\YG1R61Z8\\BBE7KPZ[1].jpg", lpFilePart=0x0) returned 0x7e [0076.160] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e3b8) returned 1 [0076.160] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\YG1R61Z8\\BBE7KPZ[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\yg1r61z8\\bbe7kpz[1].jpg"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x264 [0076.161] GetFileType (hFile=0x264) returned 0x1 [0076.161] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e3b4) returned 1 [0076.161] GetFileType (hFile=0x264) returned 0x1 [0076.161] GetFileSize (in: hFile=0x264, lpFileSizeHigh=0x31e4c0 | out: lpFileSizeHigh=0x31e4c0*=0x0) returned 0x2ecb [0076.161] ReadFile (in: hFile=0x264, lpBuffer=0x273e8fc, nNumberOfBytesToRead=0x2ecb, lpNumberOfBytesRead=0x31e46c, lpOverlapped=0x0 | out: lpBuffer=0x273e8fc*, lpNumberOfBytesRead=0x31e46c*=0x2ecb, lpOverlapped=0x0) returned 1 [0076.163] CloseHandle (hObject=0x264) returned 1 [0076.176] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\YG1R61Z8\\BBE7KPZ[1].jpg", nBufferLength=0x105, lpBuffer=0x31deb0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\YG1R61Z8\\BBE7KPZ[1].jpg", lpFilePart=0x0) returned 0x7e [0076.176] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e3a4) returned 1 [0076.176] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\YG1R61Z8\\BBE7KPZ[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\yg1r61z8\\bbe7kpz[1].jpg"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x264 [0076.177] GetFileType (hFile=0x264) returned 0x1 [0076.177] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e3a0) returned 1 [0076.177] GetFileType (hFile=0x264) returned 0x1 [0076.177] WriteFile (in: hFile=0x264, lpBuffer=0x279a0f4*, nNumberOfBytesToWrite=0x2ed0, lpNumberOfBytesWritten=0x31e460, lpOverlapped=0x0 | out: lpBuffer=0x279a0f4*, lpNumberOfBytesWritten=0x31e460*=0x2ed0, lpOverlapped=0x0) returned 1 [0076.179] CloseHandle (hObject=0x264) returned 1 [0076.179] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\YG1R61Z8\\BBE7KPZ[1].jpg", nBufferLength=0x105, lpBuffer=0x31dfe4, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\YG1R61Z8\\BBE7KPZ[1].jpg", lpFilePart=0x0) returned 0x7e [0076.179] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\YG1R61Z8\\BBE7KPZ[1].jpg", nBufferLength=0x105, lpBuffer=0x31dfe4, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\YG1R61Z8\\BBE7KPZ[1].jpg", lpFilePart=0x0) returned 0x7e [0076.179] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e444) returned 1 [0076.179] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\YG1R61Z8\\BBE7KPZ[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\yg1r61z8\\bbe7kpz[1].jpg"), fInfoLevelId=0x0, lpFileInformation=0x31e4c0 | out: lpFileInformation=0x31e4c0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x458308d0, ftCreationTime.dwHighDateTime=0x1d2faf3, ftLastAccessTime.dwLowDateTime=0x458308d0, ftLastAccessTime.dwHighDateTime=0x1d2faf3, ftLastWriteTime.dwLowDateTime=0x10d9fdc0, ftLastWriteTime.dwHighDateTime=0x1d6eb7f, nFileSizeHigh=0x0, nFileSizeLow=0x2ed0)) returned 1 [0076.179] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e440) returned 1 [0076.179] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\YG1R61Z8\\BBE7KPZ[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\yg1r61z8\\bbe7kpz[1].jpg"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\YG1R61Z8\\BBE7KPZ[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\yg1r61z8\\bbe7kpz[1].jpg")) returned 1 [0076.180] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\YG1R61Z8\\BBE8IlA[1].jpg", nBufferLength=0x105, lpBuffer=0x31dec4, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\YG1R61Z8\\BBE8IlA[1].jpg", lpFilePart=0x0) returned 0x7e [0076.180] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e3b8) returned 1 [0076.180] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\YG1R61Z8\\BBE8IlA[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\yg1r61z8\\bbe8ila[1].jpg"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x264 [0076.180] GetFileType (hFile=0x264) returned 0x1 [0076.180] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e3b4) returned 1 [0076.180] GetFileType (hFile=0x264) returned 0x1 [0076.180] GetFileSize (in: hFile=0x264, lpFileSizeHigh=0x31e4c0 | out: lpFileSizeHigh=0x31e4c0*=0x0) returned 0x9c5 [0076.180] ReadFile (in: hFile=0x264, lpBuffer=0x279defc, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x31e46c, lpOverlapped=0x0 | out: lpBuffer=0x279defc*, lpNumberOfBytesRead=0x31e46c*=0x9c5, lpOverlapped=0x0) returned 1 [0076.184] CloseHandle (hObject=0x264) returned 1 [0076.198] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\YG1R61Z8\\BBE8IlA[1].jpg", nBufferLength=0x105, lpBuffer=0x31deb0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\YG1R61Z8\\BBE8IlA[1].jpg", lpFilePart=0x0) returned 0x7e [0076.198] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e3a4) returned 1 [0076.198] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\YG1R61Z8\\BBE8IlA[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\yg1r61z8\\bbe8ila[1].jpg"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x264 [0076.199] GetFileType (hFile=0x264) returned 0x1 [0076.199] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e3a0) returned 1 [0076.199] GetFileType (hFile=0x264) returned 0x1 [0076.199] WriteFile (in: hFile=0x264, lpBuffer=0x27eef9c*, nNumberOfBytesToWrite=0x9d0, lpNumberOfBytesWritten=0x31e434, lpOverlapped=0x0 | out: lpBuffer=0x27eef9c*, lpNumberOfBytesWritten=0x31e434*=0x9d0, lpOverlapped=0x0) returned 1 [0076.200] CloseHandle (hObject=0x264) returned 1 [0076.200] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\YG1R61Z8\\BBE8IlA[1].jpg", nBufferLength=0x105, lpBuffer=0x31dfe4, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\YG1R61Z8\\BBE8IlA[1].jpg", lpFilePart=0x0) returned 0x7e [0076.200] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\YG1R61Z8\\BBE8IlA[1].jpg", nBufferLength=0x105, lpBuffer=0x31dfe4, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\YG1R61Z8\\BBE8IlA[1].jpg", lpFilePart=0x0) returned 0x7e [0076.200] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e444) returned 1 [0076.200] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\YG1R61Z8\\BBE8IlA[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\yg1r61z8\\bbe8ila[1].jpg"), fInfoLevelId=0x0, lpFileInformation=0x31e4c0 | out: lpFileInformation=0x31e4c0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x45a6bd70, ftCreationTime.dwHighDateTime=0x1d2faf3, ftLastAccessTime.dwLowDateTime=0x45a6bd70, ftLastAccessTime.dwHighDateTime=0x1d2faf3, ftLastWriteTime.dwLowDateTime=0x10dc5f20, ftLastWriteTime.dwHighDateTime=0x1d6eb7f, nFileSizeHigh=0x0, nFileSizeLow=0x9d0)) returned 1 [0076.200] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e440) returned 1 [0076.200] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\YG1R61Z8\\BBE8IlA[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\yg1r61z8\\bbe8ila[1].jpg"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\YG1R61Z8\\BBE8IlA[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\yg1r61z8\\bbe8ila[1].jpg")) returned 1 [0076.201] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\YG1R61Z8\\BBE972F[1].jpg", nBufferLength=0x105, lpBuffer=0x31dec4, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\YG1R61Z8\\BBE972F[1].jpg", lpFilePart=0x0) returned 0x7e [0076.201] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e3b8) returned 1 [0076.201] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\YG1R61Z8\\BBE972F[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\yg1r61z8\\bbe972f[1].jpg"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x264 [0076.201] GetFileType (hFile=0x264) returned 0x1 [0076.201] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e3b4) returned 1 [0076.201] GetFileType (hFile=0x264) returned 0x1 [0076.201] GetFileSize (in: hFile=0x264, lpFileSizeHigh=0x31e4c0 | out: lpFileSizeHigh=0x31e4c0*=0x0) returned 0x2669 [0076.201] ReadFile (in: hFile=0x264, lpBuffer=0x27f036c, nNumberOfBytesToRead=0x2669, lpNumberOfBytesRead=0x31e46c, lpOverlapped=0x0 | out: lpBuffer=0x27f036c*, lpNumberOfBytesRead=0x31e46c*=0x2669, lpOverlapped=0x0) returned 1 [0076.203] CloseHandle (hObject=0x264) returned 1 [0076.217] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\YG1R61Z8\\BBE972F[1].jpg", nBufferLength=0x105, lpBuffer=0x31deb0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\YG1R61Z8\\BBE972F[1].jpg", lpFilePart=0x0) returned 0x7e [0076.217] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e3a4) returned 1 [0076.217] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\YG1R61Z8\\BBE972F[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\yg1r61z8\\bbe972f[1].jpg"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x264 [0076.218] GetFileType (hFile=0x264) returned 0x1 [0076.218] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e3a0) returned 1 [0076.218] GetFileType (hFile=0x264) returned 0x1 [0076.218] WriteFile (in: hFile=0x264, lpBuffer=0x2849184*, nNumberOfBytesToWrite=0x2670, lpNumberOfBytesWritten=0x31e460, lpOverlapped=0x0 | out: lpBuffer=0x2849184*, lpNumberOfBytesWritten=0x31e460*=0x2670, lpOverlapped=0x0) returned 1 [0076.219] CloseHandle (hObject=0x264) returned 1 [0076.219] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\YG1R61Z8\\BBE972F[1].jpg", nBufferLength=0x105, lpBuffer=0x31dfe4, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\YG1R61Z8\\BBE972F[1].jpg", lpFilePart=0x0) returned 0x7e [0076.219] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\YG1R61Z8\\BBE972F[1].jpg", nBufferLength=0x105, lpBuffer=0x31dfe4, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\YG1R61Z8\\BBE972F[1].jpg", lpFilePart=0x0) returned 0x7e [0076.219] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e444) returned 1 [0076.219] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\YG1R61Z8\\BBE972F[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\yg1r61z8\\bbe972f[1].jpg"), fInfoLevelId=0x0, lpFileInformation=0x31e4c0 | out: lpFileInformation=0x31e4c0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x45b9c870, ftCreationTime.dwHighDateTime=0x1d2faf3, ftLastAccessTime.dwLowDateTime=0x45b9c870, ftLastAccessTime.dwHighDateTime=0x1d2faf3, ftLastWriteTime.dwLowDateTime=0x10dec080, ftLastWriteTime.dwHighDateTime=0x1d6eb7f, nFileSizeHigh=0x0, nFileSizeLow=0x2670)) returned 1 [0076.219] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e440) returned 1 [0076.219] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\YG1R61Z8\\BBE972F[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\yg1r61z8\\bbe972f[1].jpg"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\YG1R61Z8\\BBE972F[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\yg1r61z8\\bbe972f[1].jpg")) returned 1 [0076.220] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\YG1R61Z8\\BBE9tdx[1].jpg", nBufferLength=0x105, lpBuffer=0x31dec4, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\YG1R61Z8\\BBE9tdx[1].jpg", lpFilePart=0x0) returned 0x7e [0076.220] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e3b8) returned 1 [0076.220] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\YG1R61Z8\\BBE9tdx[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\yg1r61z8\\bbe9tdx[1].jpg"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x264 [0076.220] GetFileType (hFile=0x264) returned 0x1 [0076.220] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e3b4) returned 1 [0076.220] GetFileType (hFile=0x264) returned 0x1 [0076.220] GetFileSize (in: hFile=0x264, lpFileSizeHigh=0x31e4c0 | out: lpFileSizeHigh=0x31e4c0*=0x0) returned 0x2a77 [0076.220] ReadFile (in: hFile=0x264, lpBuffer=0x284bd58, nNumberOfBytesToRead=0x2a77, lpNumberOfBytesRead=0x31e46c, lpOverlapped=0x0 | out: lpBuffer=0x284bd58*, lpNumberOfBytesRead=0x31e46c*=0x2a77, lpOverlapped=0x0) returned 1 [0076.222] CloseHandle (hObject=0x264) returned 1 [0076.273] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\YG1R61Z8\\BBE9tdx[1].jpg", nBufferLength=0x105, lpBuffer=0x31deb0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\YG1R61Z8\\BBE9tdx[1].jpg", lpFilePart=0x0) returned 0x7e [0076.273] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e3a4) returned 1 [0076.273] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\YG1R61Z8\\BBE9tdx[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\yg1r61z8\\bbe9tdx[1].jpg"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x264 [0076.274] GetFileType (hFile=0x264) returned 0x1 [0076.274] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e3a0) returned 1 [0076.274] GetFileType (hFile=0x264) returned 0x1 [0076.274] WriteFile (in: hFile=0x264, lpBuffer=0x26a81f0*, nNumberOfBytesToWrite=0x2a80, lpNumberOfBytesWritten=0x31e460, lpOverlapped=0x0 | out: lpBuffer=0x26a81f0*, lpNumberOfBytesWritten=0x31e460*=0x2a80, lpOverlapped=0x0) returned 1 [0076.275] CloseHandle (hObject=0x264) returned 1 [0076.275] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\YG1R61Z8\\BBE9tdx[1].jpg", nBufferLength=0x105, lpBuffer=0x31dfe4, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\YG1R61Z8\\BBE9tdx[1].jpg", lpFilePart=0x0) returned 0x7e [0076.275] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\YG1R61Z8\\BBE9tdx[1].jpg", nBufferLength=0x105, lpBuffer=0x31dfe4, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\YG1R61Z8\\BBE9tdx[1].jpg", lpFilePart=0x0) returned 0x7e [0076.275] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e444) returned 1 [0076.275] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\YG1R61Z8\\BBE9tdx[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\yg1r61z8\\bbe9tdx[1].jpg"), fInfoLevelId=0x0, lpFileInformation=0x31e4c0 | out: lpFileInformation=0x31e4c0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x458308d0, ftCreationTime.dwHighDateTime=0x1d2faf3, ftLastAccessTime.dwLowDateTime=0x458308d0, ftLastAccessTime.dwHighDateTime=0x1d2faf3, ftLastWriteTime.dwLowDateTime=0x10e84600, ftLastWriteTime.dwHighDateTime=0x1d6eb7f, nFileSizeHigh=0x0, nFileSizeLow=0x2a80)) returned 1 [0076.275] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e440) returned 1 [0076.275] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\YG1R61Z8\\BBE9tdx[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\yg1r61z8\\bbe9tdx[1].jpg"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\YG1R61Z8\\BBE9tdx[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\yg1r61z8\\bbe9tdx[1].jpg")) returned 1 [0076.276] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\YG1R61Z8\\BBEdrqt[1].jpg", nBufferLength=0x105, lpBuffer=0x31dec4, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\YG1R61Z8\\BBEdrqt[1].jpg", lpFilePart=0x0) returned 0x7e [0076.276] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e3b8) returned 1 [0076.276] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\YG1R61Z8\\BBEdrqt[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\yg1r61z8\\bbedrqt[1].jpg"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x264 [0076.276] GetFileType (hFile=0x264) returned 0x1 [0076.276] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e3b4) returned 1 [0076.276] GetFileType (hFile=0x264) returned 0x1 [0076.276] GetFileSize (in: hFile=0x264, lpFileSizeHigh=0x31e4c0 | out: lpFileSizeHigh=0x31e4c0*=0x0) returned 0x2fe3 [0076.276] ReadFile (in: hFile=0x264, lpBuffer=0x26ab1d4, nNumberOfBytesToRead=0x2fe3, lpNumberOfBytesRead=0x31e46c, lpOverlapped=0x0 | out: lpBuffer=0x26ab1d4*, lpNumberOfBytesRead=0x31e46c*=0x2fe3, lpOverlapped=0x0) returned 1 [0076.278] CloseHandle (hObject=0x264) returned 1 [0076.292] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\YG1R61Z8\\BBEdrqt[1].jpg", nBufferLength=0x105, lpBuffer=0x31deb0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\YG1R61Z8\\BBEdrqt[1].jpg", lpFilePart=0x0) returned 0x7e [0076.292] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e3a4) returned 1 [0076.292] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\YG1R61Z8\\BBEdrqt[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\yg1r61z8\\bbedrqt[1].jpg"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x264 [0076.293] GetFileType (hFile=0x264) returned 0x1 [0076.293] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e3a0) returned 1 [0076.293] GetFileType (hFile=0x264) returned 0x1 [0076.293] WriteFile (in: hFile=0x264, lpBuffer=0x27070c8*, nNumberOfBytesToWrite=0x2ff0, lpNumberOfBytesWritten=0x31e460, lpOverlapped=0x0 | out: lpBuffer=0x27070c8*, lpNumberOfBytesWritten=0x31e460*=0x2ff0, lpOverlapped=0x0) returned 1 [0076.295] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\YG1R61Z8\\BBEdrqt[1].jpg", nBufferLength=0x105, lpBuffer=0x31dfe4, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\YG1R61Z8\\BBEdrqt[1].jpg", lpFilePart=0x0) returned 0x7e [0076.295] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\YG1R61Z8\\BBEdrqt[1].jpg", nBufferLength=0x105, lpBuffer=0x31dfe4, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\YG1R61Z8\\BBEdrqt[1].jpg", lpFilePart=0x0) returned 0x7e [0076.295] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e444) returned 1 [0076.295] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\YG1R61Z8\\BBEdrqt[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\yg1r61z8\\bbedrqt[1].jpg"), fInfoLevelId=0x0, lpFileInformation=0x31e4c0 | out: lpFileInformation=0x31e4c0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x458a2cf0, ftCreationTime.dwHighDateTime=0x1d2faf3, ftLastAccessTime.dwLowDateTime=0x458a2cf0, ftLastAccessTime.dwHighDateTime=0x1d2faf3, ftLastWriteTime.dwLowDateTime=0x10eaa760, ftLastWriteTime.dwHighDateTime=0x1d6eb7f, nFileSizeHigh=0x0, nFileSizeLow=0x2ff0)) returned 1 [0076.295] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e440) returned 1 [0076.295] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\YG1R61Z8\\BBEdrqt[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\yg1r61z8\\bbedrqt[1].jpg"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\YG1R61Z8\\BBEdrqt[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\yg1r61z8\\bbedrqt[1].jpg")) returned 1 [0076.295] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\YG1R61Z8\\BBEeEwt[1].jpg", nBufferLength=0x105, lpBuffer=0x31dec4, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\YG1R61Z8\\BBEeEwt[1].jpg", lpFilePart=0x0) returned 0x7e [0076.295] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e3b8) returned 1 [0076.296] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\YG1R61Z8\\BBEeEwt[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\yg1r61z8\\bbeeewt[1].jpg"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x264 [0076.296] GetFileType (hFile=0x264) returned 0x1 [0076.296] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e3b4) returned 1 [0076.296] GetFileType (hFile=0x264) returned 0x1 [0076.296] GetFileSize (in: hFile=0x264, lpFileSizeHigh=0x31e4c0 | out: lpFileSizeHigh=0x31e4c0*=0x0) returned 0x857 [0076.296] ReadFile (in: hFile=0x264, lpBuffer=0x270ae80, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x31e46c, lpOverlapped=0x0 | out: lpBuffer=0x270ae80*, lpNumberOfBytesRead=0x31e46c*=0x857, lpOverlapped=0x0) returned 1 [0076.310] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\YG1R61Z8\\BBEeEwt[1].jpg", nBufferLength=0x105, lpBuffer=0x31deb0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\YG1R61Z8\\BBEeEwt[1].jpg", lpFilePart=0x0) returned 0x7e [0076.310] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e3a4) returned 1 [0076.310] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\YG1R61Z8\\BBEeEwt[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\yg1r61z8\\bbeeewt[1].jpg"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x264 [0076.311] GetFileType (hFile=0x264) returned 0x1 [0076.311] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e3a0) returned 1 [0076.311] GetFileType (hFile=0x264) returned 0x1 [0076.311] WriteFile (in: hFile=0x264, lpBuffer=0x275b7f0*, nNumberOfBytesToWrite=0x860, lpNumberOfBytesWritten=0x31e434, lpOverlapped=0x0 | out: lpBuffer=0x275b7f0*, lpNumberOfBytesWritten=0x31e434*=0x860, lpOverlapped=0x0) returned 1 [0076.312] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\YG1R61Z8\\BBEeEwt[1].jpg", nBufferLength=0x105, lpBuffer=0x31dfe4, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\YG1R61Z8\\BBEeEwt[1].jpg", lpFilePart=0x0) returned 0x7e [0076.312] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\YG1R61Z8\\BBEeEwt[1].jpg", nBufferLength=0x105, lpBuffer=0x31dfe4, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\YG1R61Z8\\BBEeEwt[1].jpg", lpFilePart=0x0) returned 0x7e [0076.312] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e444) returned 1 [0076.312] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\YG1R61Z8\\BBEeEwt[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\yg1r61z8\\bbeeewt[1].jpg"), fInfoLevelId=0x0, lpFileInformation=0x31e4c0 | out: lpFileInformation=0x31e4c0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x459ad690, ftCreationTime.dwHighDateTime=0x1d2faf3, ftLastAccessTime.dwLowDateTime=0x459ad690, ftLastAccessTime.dwHighDateTime=0x1d2faf3, ftLastWriteTime.dwLowDateTime=0x10ed08c0, ftLastWriteTime.dwHighDateTime=0x1d6eb7f, nFileSizeHigh=0x0, nFileSizeLow=0x860)) returned 1 [0076.312] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e440) returned 1 [0076.313] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\YG1R61Z8\\BBEeEwt[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\yg1r61z8\\bbeeewt[1].jpg"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\YG1R61Z8\\BBEeEwt[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\yg1r61z8\\bbeeewt[1].jpg")) returned 1 [0076.313] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\YG1R61Z8\\BBEeis3[1].jpg", nBufferLength=0x105, lpBuffer=0x31dec4, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\YG1R61Z8\\BBEeis3[1].jpg", lpFilePart=0x0) returned 0x7e [0076.313] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e3b8) returned 1 [0076.313] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\YG1R61Z8\\BBEeis3[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\yg1r61z8\\bbeeis3[1].jpg"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x264 [0076.313] GetFileType (hFile=0x264) returned 0x1 [0076.313] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e3b4) returned 1 [0076.313] GetFileType (hFile=0x264) returned 0x1 [0076.313] GetFileSize (in: hFile=0x264, lpFileSizeHigh=0x31e4c0 | out: lpFileSizeHigh=0x31e4c0*=0x0) returned 0x7d9 [0076.313] ReadFile (in: hFile=0x264, lpBuffer=0x275d3a8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x31e46c, lpOverlapped=0x0 | out: lpBuffer=0x275d3a8*, lpNumberOfBytesRead=0x31e46c*=0x7d9, lpOverlapped=0x0) returned 1 [0076.328] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\YG1R61Z8\\BBEeis3[1].jpg", nBufferLength=0x105, lpBuffer=0x31deb0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\YG1R61Z8\\BBEeis3[1].jpg", lpFilePart=0x0) returned 0x7e [0076.328] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e3a4) returned 1 [0076.328] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\YG1R61Z8\\BBEeis3[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\yg1r61z8\\bbeeis3[1].jpg"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x264 [0076.329] GetFileType (hFile=0x264) returned 0x1 [0076.329] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e3a0) returned 1 [0076.329] GetFileType (hFile=0x264) returned 0x1 [0076.329] WriteFile (in: hFile=0x264, lpBuffer=0x27ada94*, nNumberOfBytesToWrite=0x7e0, lpNumberOfBytesWritten=0x31e434, lpOverlapped=0x0 | out: lpBuffer=0x27ada94*, lpNumberOfBytesWritten=0x31e434*=0x7e0, lpOverlapped=0x0) returned 1 [0076.330] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\YG1R61Z8\\BBEeis3[1].jpg", nBufferLength=0x105, lpBuffer=0x31dfe4, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\YG1R61Z8\\BBEeis3[1].jpg", lpFilePart=0x0) returned 0x7e [0076.330] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\YG1R61Z8\\BBEeis3[1].jpg", nBufferLength=0x105, lpBuffer=0x31dfe4, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\YG1R61Z8\\BBEeis3[1].jpg", lpFilePart=0x0) returned 0x7e [0076.330] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e444) returned 1 [0076.330] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\YG1R61Z8\\BBEeis3[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\yg1r61z8\\bbeeis3[1].jpg"), fInfoLevelId=0x0, lpFileInformation=0x31e4c0 | out: lpFileInformation=0x31e4c0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x4593b270, ftCreationTime.dwHighDateTime=0x1d2faf3, ftLastAccessTime.dwLowDateTime=0x4593b270, ftLastAccessTime.dwHighDateTime=0x1d2faf3, ftLastWriteTime.dwLowDateTime=0x10ef6a20, ftLastWriteTime.dwHighDateTime=0x1d6eb7f, nFileSizeHigh=0x0, nFileSizeLow=0x7e0)) returned 1 [0076.330] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e440) returned 1 [0076.330] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\YG1R61Z8\\BBEeis3[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\yg1r61z8\\bbeeis3[1].jpg"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\YG1R61Z8\\BBEeis3[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\yg1r61z8\\bbeeis3[1].jpg")) returned 1 [0076.331] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\YG1R61Z8\\BBEeKvV[1].jpg", nBufferLength=0x105, lpBuffer=0x31dec4, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\YG1R61Z8\\BBEeKvV[1].jpg", lpFilePart=0x0) returned 0x7e [0076.331] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e3b8) returned 1 [0076.331] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\YG1R61Z8\\BBEeKvV[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\yg1r61z8\\bbeekvv[1].jpg"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x264 [0076.331] GetFileType (hFile=0x264) returned 0x1 [0076.331] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e3b4) returned 1 [0076.331] GetFileType (hFile=0x264) returned 0x1 [0076.331] GetFileSize (in: hFile=0x264, lpFileSizeHigh=0x31e4c0 | out: lpFileSizeHigh=0x31e4c0*=0x0) returned 0x8c5 [0076.331] ReadFile (in: hFile=0x264, lpBuffer=0x27af738, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x31e46c, lpOverlapped=0x0 | out: lpBuffer=0x27af738*, lpNumberOfBytesRead=0x31e46c*=0x8c5, lpOverlapped=0x0) returned 1 [0076.346] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\YG1R61Z8\\BBEeKvV[1].jpg", nBufferLength=0x105, lpBuffer=0x31deb0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\YG1R61Z8\\BBEeKvV[1].jpg", lpFilePart=0x0) returned 0x7e [0076.346] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e3a4) returned 1 [0076.346] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\YG1R61Z8\\BBEeKvV[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\yg1r61z8\\bbeekvv[1].jpg"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x264 [0076.347] GetFileType (hFile=0x264) returned 0x1 [0076.347] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e3a0) returned 1 [0076.347] GetFileType (hFile=0x264) returned 0x1 [0076.347] WriteFile (in: hFile=0x264, lpBuffer=0x28002d8*, nNumberOfBytesToWrite=0x8d0, lpNumberOfBytesWritten=0x31e434, lpOverlapped=0x0 | out: lpBuffer=0x28002d8*, lpNumberOfBytesWritten=0x31e434*=0x8d0, lpOverlapped=0x0) returned 1 [0076.348] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\YG1R61Z8\\BBEeKvV[1].jpg", nBufferLength=0x105, lpBuffer=0x31dfe4, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\YG1R61Z8\\BBEeKvV[1].jpg", lpFilePart=0x0) returned 0x7e [0076.348] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\YG1R61Z8\\BBEeKvV[1].jpg", nBufferLength=0x105, lpBuffer=0x31dfe4, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\YG1R61Z8\\BBEeKvV[1].jpg", lpFilePart=0x0) returned 0x7e [0076.348] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e444) returned 1 [0076.348] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\YG1R61Z8\\BBEeKvV[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\yg1r61z8\\bbeekvv[1].jpg"), fInfoLevelId=0x0, lpFileInformation=0x31e4c0 | out: lpFileInformation=0x31e4c0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x45a1fab0, ftCreationTime.dwHighDateTime=0x1d2faf3, ftLastAccessTime.dwLowDateTime=0x45a1fab0, ftLastAccessTime.dwHighDateTime=0x1d2faf3, ftLastWriteTime.dwLowDateTime=0x10f42ce0, ftLastWriteTime.dwHighDateTime=0x1d6eb7f, nFileSizeHigh=0x0, nFileSizeLow=0x8d0)) returned 1 [0076.348] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e440) returned 1 [0076.348] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\YG1R61Z8\\BBEeKvV[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\yg1r61z8\\bbeekvv[1].jpg"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\YG1R61Z8\\BBEeKvV[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\yg1r61z8\\bbeekvv[1].jpg")) returned 1 [0076.349] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\YG1R61Z8\\BBEeNd8[1].png", nBufferLength=0x105, lpBuffer=0x31dec4, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\YG1R61Z8\\BBEeNd8[1].png", lpFilePart=0x0) returned 0x7e [0076.349] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e3b8) returned 1 [0076.349] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\YG1R61Z8\\BBEeNd8[1].png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\yg1r61z8\\bbeend8[1].png"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x264 [0076.349] GetFileType (hFile=0x264) returned 0x1 [0076.349] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e3b4) returned 1 [0076.349] GetFileType (hFile=0x264) returned 0x1 [0076.349] GetFileSize (in: hFile=0x264, lpFileSizeHigh=0x31e4c0 | out: lpFileSizeHigh=0x31e4c0*=0x0) returned 0xef00 [0076.349] ReadFile (in: hFile=0x264, lpBuffer=0x28016a8, nNumberOfBytesToRead=0xef00, lpNumberOfBytesRead=0x31e46c, lpOverlapped=0x0 | out: lpBuffer=0x28016a8*, lpNumberOfBytesRead=0x31e46c*=0xef00, lpOverlapped=0x0) returned 1 [0076.396] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\YG1R61Z8\\BBEeNd8[1].png", nBufferLength=0x105, lpBuffer=0x31deb0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\YG1R61Z8\\BBEeNd8[1].png", lpFilePart=0x0) returned 0x7e [0076.396] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e3a4) returned 1 [0076.396] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\YG1R61Z8\\BBEeNd8[1].png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\yg1r61z8\\bbeend8[1].png"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x264 [0076.397] GetFileType (hFile=0x264) returned 0x1 [0076.397] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e3a0) returned 1 [0076.397] GetFileType (hFile=0x264) returned 0x1 [0076.397] WriteFile (in: hFile=0x264, lpBuffer=0x2687674*, nNumberOfBytesToWrite=0xef10, lpNumberOfBytesWritten=0x31e460, lpOverlapped=0x0 | out: lpBuffer=0x2687674*, lpNumberOfBytesWritten=0x31e460*=0xef10, lpOverlapped=0x0) returned 1 [0076.399] CloseHandle (hObject=0x264) returned 1 [0076.399] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\YG1R61Z8\\BBEeNd8[1].png", nBufferLength=0x105, lpBuffer=0x31dfe4, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\YG1R61Z8\\BBEeNd8[1].png", lpFilePart=0x0) returned 0x7e [0076.399] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\YG1R61Z8\\BBEeNd8[1].png", nBufferLength=0x105, lpBuffer=0x31dfe4, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\YG1R61Z8\\BBEeNd8[1].png", lpFilePart=0x0) returned 0x7e [0076.399] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e444) returned 1 [0076.400] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\YG1R61Z8\\BBEeNd8[1].png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\yg1r61z8\\bbeend8[1].png"), fInfoLevelId=0x0, lpFileInformation=0x31e4c0 | out: lpFileInformation=0x31e4c0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x45a91ed0, ftCreationTime.dwHighDateTime=0x1d2faf3, ftLastAccessTime.dwLowDateTime=0x45a91ed0, ftLastAccessTime.dwHighDateTime=0x1d2faf3, ftLastWriteTime.dwLowDateTime=0x10fb5100, ftLastWriteTime.dwHighDateTime=0x1d6eb7f, nFileSizeHigh=0x0, nFileSizeLow=0xef10)) returned 1 [0076.400] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e440) returned 1 [0076.400] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\YG1R61Z8\\BBEeNd8[1].png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\yg1r61z8\\bbeend8[1].png"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\YG1R61Z8\\BBEeNd8[1].png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\yg1r61z8\\bbeend8[1].png")) returned 1 [0076.400] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\YG1R61Z8\\BBEewZB[1].jpg", nBufferLength=0x105, lpBuffer=0x31dec4, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\YG1R61Z8\\BBEewZB[1].jpg", lpFilePart=0x0) returned 0x7e [0076.400] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e3b8) returned 1 [0076.400] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\YG1R61Z8\\BBEewZB[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\yg1r61z8\\bbeewzb[1].jpg"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x264 [0076.400] GetFileType (hFile=0x264) returned 0x1 [0076.400] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e3b4) returned 1 [0076.400] GetFileType (hFile=0x264) returned 0x1 [0076.400] GetFileSize (in: hFile=0x264, lpFileSizeHigh=0x31e4c0 | out: lpFileSizeHigh=0x31e4c0*=0x0) returned 0x3323 [0076.401] ReadFile (in: hFile=0x264, lpBuffer=0x2696ae8, nNumberOfBytesToRead=0x3323, lpNumberOfBytesRead=0x31e46c, lpOverlapped=0x0 | out: lpBuffer=0x2696ae8*, lpNumberOfBytesRead=0x31e46c*=0x3323, lpOverlapped=0x0) returned 1 [0076.402] CloseHandle (hObject=0x264) returned 1 [0076.416] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\YG1R61Z8\\BBEewZB[1].jpg", nBufferLength=0x105, lpBuffer=0x31deb0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\YG1R61Z8\\BBEewZB[1].jpg", lpFilePart=0x0) returned 0x7e [0076.416] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e3a4) returned 1 [0076.416] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\YG1R61Z8\\BBEewZB[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\yg1r61z8\\bbeewzb[1].jpg"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x264 [0076.417] GetFileType (hFile=0x264) returned 0x1 [0076.417] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e3a0) returned 1 [0076.417] GetFileType (hFile=0x264) returned 0x1 [0076.417] WriteFile (in: hFile=0x264, lpBuffer=0x26f3a1c*, nNumberOfBytesToWrite=0x3330, lpNumberOfBytesWritten=0x31e460, lpOverlapped=0x0 | out: lpBuffer=0x26f3a1c*, lpNumberOfBytesWritten=0x31e460*=0x3330, lpOverlapped=0x0) returned 1 [0076.419] CloseHandle (hObject=0x264) returned 1 [0076.419] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\YG1R61Z8\\BBEewZB[1].jpg", nBufferLength=0x105, lpBuffer=0x31dfe4, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\YG1R61Z8\\BBEewZB[1].jpg", lpFilePart=0x0) returned 0x7e [0076.419] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\YG1R61Z8\\BBEewZB[1].jpg", nBufferLength=0x105, lpBuffer=0x31dfe4, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\YG1R61Z8\\BBEewZB[1].jpg", lpFilePart=0x0) returned 0x7e [0076.419] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e444) returned 1 [0076.419] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\YG1R61Z8\\BBEewZB[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\yg1r61z8\\bbeewzb[1].jpg"), fInfoLevelId=0x0, lpFileInformation=0x31e4c0 | out: lpFileInformation=0x31e4c0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x45ab8030, ftCreationTime.dwHighDateTime=0x1d2faf3, ftLastAccessTime.dwLowDateTime=0x45ab8030, ftLastAccessTime.dwHighDateTime=0x1d2faf3, ftLastWriteTime.dwLowDateTime=0x10fdb260, ftLastWriteTime.dwHighDateTime=0x1d6eb7f, nFileSizeHigh=0x0, nFileSizeLow=0x3330)) returned 1 [0076.419] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e440) returned 1 [0076.419] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\YG1R61Z8\\BBEewZB[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\yg1r61z8\\bbeewzb[1].jpg"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\YG1R61Z8\\BBEewZB[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\yg1r61z8\\bbeewzb[1].jpg")) returned 1 [0076.419] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\YG1R61Z8\\BBEeZ0k[1].jpg", nBufferLength=0x105, lpBuffer=0x31dec4, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\YG1R61Z8\\BBEeZ0k[1].jpg", lpFilePart=0x0) returned 0x7e [0076.420] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e3b8) returned 1 [0076.420] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\YG1R61Z8\\BBEeZ0k[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\yg1r61z8\\bbeez0k[1].jpg"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x264 [0076.420] GetFileType (hFile=0x264) returned 0x1 [0076.420] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e3b4) returned 1 [0076.420] GetFileType (hFile=0x264) returned 0x1 [0076.420] GetFileSize (in: hFile=0x264, lpFileSizeHigh=0x31e4c0 | out: lpFileSizeHigh=0x31e4c0*=0x0) returned 0x9d7 [0076.420] ReadFile (in: hFile=0x264, lpBuffer=0x26f7c94, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x31e46c, lpOverlapped=0x0 | out: lpBuffer=0x26f7c94*, lpNumberOfBytesRead=0x31e46c*=0x9d7, lpOverlapped=0x0) returned 1 [0076.422] CloseHandle (hObject=0x264) returned 1 [0076.434] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\YG1R61Z8\\BBEeZ0k[1].jpg", nBufferLength=0x105, lpBuffer=0x31deb0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\YG1R61Z8\\BBEeZ0k[1].jpg", lpFilePart=0x0) returned 0x7e [0076.434] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e3a4) returned 1 [0076.435] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\YG1R61Z8\\BBEeZ0k[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\yg1r61z8\\bbeez0k[1].jpg"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x264 [0076.435] GetFileType (hFile=0x264) returned 0x1 [0076.435] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e3a0) returned 1 [0076.435] GetFileType (hFile=0x264) returned 0x1 [0076.435] WriteFile (in: hFile=0x264, lpBuffer=0x2748d84*, nNumberOfBytesToWrite=0x9e0, lpNumberOfBytesWritten=0x31e434, lpOverlapped=0x0 | out: lpBuffer=0x2748d84*, lpNumberOfBytesWritten=0x31e434*=0x9e0, lpOverlapped=0x0) returned 1 [0076.436] CloseHandle (hObject=0x264) returned 1 [0076.436] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\YG1R61Z8\\BBEeZ0k[1].jpg", nBufferLength=0x105, lpBuffer=0x31dfe4, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\YG1R61Z8\\BBEeZ0k[1].jpg", lpFilePart=0x0) returned 0x7e [0076.436] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\YG1R61Z8\\BBEeZ0k[1].jpg", nBufferLength=0x105, lpBuffer=0x31dfe4, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\YG1R61Z8\\BBEeZ0k[1].jpg", lpFilePart=0x0) returned 0x7e [0076.436] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e444) returned 1 [0076.436] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\YG1R61Z8\\BBEeZ0k[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\yg1r61z8\\bbeez0k[1].jpg"), fInfoLevelId=0x0, lpFileInformation=0x31e4c0 | out: lpFileInformation=0x31e4c0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x459613d0, ftCreationTime.dwHighDateTime=0x1d2faf3, ftLastAccessTime.dwLowDateTime=0x459613d0, ftLastAccessTime.dwHighDateTime=0x1d2faf3, ftLastWriteTime.dwLowDateTime=0x110013c0, ftLastWriteTime.dwHighDateTime=0x1d6eb7f, nFileSizeHigh=0x0, nFileSizeLow=0x9e0)) returned 1 [0076.437] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e440) returned 1 [0076.437] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\YG1R61Z8\\BBEeZ0k[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\yg1r61z8\\bbeez0k[1].jpg"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\YG1R61Z8\\BBEeZ0k[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\yg1r61z8\\bbeez0k[1].jpg")) returned 1 [0076.437] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\YG1R61Z8\\BBEf6s4[1].jpg", nBufferLength=0x105, lpBuffer=0x31dec4, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\YG1R61Z8\\BBEf6s4[1].jpg", lpFilePart=0x0) returned 0x7e [0076.437] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e3b8) returned 1 [0076.437] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\YG1R61Z8\\BBEf6s4[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\yg1r61z8\\bbef6s4[1].jpg"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x264 [0076.437] GetFileType (hFile=0x264) returned 0x1 [0076.437] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e3b4) returned 1 [0076.437] GetFileType (hFile=0x264) returned 0x1 [0076.437] GetFileSize (in: hFile=0x264, lpFileSizeHigh=0x31e4c0 | out: lpFileSizeHigh=0x31e4c0*=0x0) returned 0x2d32 [0076.437] ReadFile (in: hFile=0x264, lpBuffer=0x274a154, nNumberOfBytesToRead=0x2d32, lpNumberOfBytesRead=0x31e46c, lpOverlapped=0x0 | out: lpBuffer=0x274a154*, lpNumberOfBytesRead=0x31e46c*=0x2d32, lpOverlapped=0x0) returned 1 [0076.439] CloseHandle (hObject=0x264) returned 1 [0076.453] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\YG1R61Z8\\BBEf6s4[1].jpg", nBufferLength=0x105, lpBuffer=0x31deb0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\YG1R61Z8\\BBEf6s4[1].jpg", lpFilePart=0x0) returned 0x7e [0076.453] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e3a4) returned 1 [0076.453] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\YG1R61Z8\\BBEf6s4[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\yg1r61z8\\bbef6s4[1].jpg"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x264 [0076.454] GetFileType (hFile=0x264) returned 0x1 [0076.454] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e3a0) returned 1 [0076.454] GetFileType (hFile=0x264) returned 0x1 [0076.454] WriteFile (in: hFile=0x264, lpBuffer=0x27a517c*, nNumberOfBytesToWrite=0x2d40, lpNumberOfBytesWritten=0x31e460, lpOverlapped=0x0 | out: lpBuffer=0x27a517c*, lpNumberOfBytesWritten=0x31e460*=0x2d40, lpOverlapped=0x0) returned 1 [0076.455] CloseHandle (hObject=0x264) returned 1 [0076.455] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\YG1R61Z8\\BBEf6s4[1].jpg", nBufferLength=0x105, lpBuffer=0x31dfe4, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\YG1R61Z8\\BBEf6s4[1].jpg", lpFilePart=0x0) returned 0x7e [0076.455] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\YG1R61Z8\\BBEf6s4[1].jpg", nBufferLength=0x105, lpBuffer=0x31dfe4, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\YG1R61Z8\\BBEf6s4[1].jpg", lpFilePart=0x0) returned 0x7e [0076.455] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e444) returned 1 [0076.455] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\YG1R61Z8\\BBEf6s4[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\yg1r61z8\\bbef6s4[1].jpg"), fInfoLevelId=0x0, lpFileInformation=0x31e4c0 | out: lpFileInformation=0x31e4c0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x45b042f0, ftCreationTime.dwHighDateTime=0x1d2faf3, ftLastAccessTime.dwLowDateTime=0x45b042f0, ftLastAccessTime.dwHighDateTime=0x1d2faf3, ftLastWriteTime.dwLowDateTime=0x11027520, ftLastWriteTime.dwHighDateTime=0x1d6eb7f, nFileSizeHigh=0x0, nFileSizeLow=0x2d40)) returned 1 [0076.455] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e440) returned 1 [0076.455] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\YG1R61Z8\\BBEf6s4[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\yg1r61z8\\bbef6s4[1].jpg"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\YG1R61Z8\\BBEf6s4[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\yg1r61z8\\bbef6s4[1].jpg")) returned 1 [0076.456] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\YG1R61Z8\\BBEfAc5[1].jpg", nBufferLength=0x105, lpBuffer=0x31dec4, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\YG1R61Z8\\BBEfAc5[1].jpg", lpFilePart=0x0) returned 0x7e [0076.456] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e3b8) returned 1 [0076.456] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\YG1R61Z8\\BBEfAc5[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\yg1r61z8\\bbefac5[1].jpg"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x264 [0076.456] GetFileType (hFile=0x264) returned 0x1 [0076.456] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e3b4) returned 1 [0076.456] GetFileType (hFile=0x264) returned 0x1 [0076.456] GetFileSize (in: hFile=0x264, lpFileSizeHigh=0x31e4c0 | out: lpFileSizeHigh=0x31e4c0*=0x0) returned 0x85d [0076.456] ReadFile (in: hFile=0x264, lpBuffer=0x27a8c8c, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x31e46c, lpOverlapped=0x0 | out: lpBuffer=0x27a8c8c*, lpNumberOfBytesRead=0x31e46c*=0x85d, lpOverlapped=0x0) returned 1 [0076.458] CloseHandle (hObject=0x264) returned 1 [0076.471] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\YG1R61Z8\\BBEfAc5[1].jpg", nBufferLength=0x105, lpBuffer=0x31deb0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\YG1R61Z8\\BBEfAc5[1].jpg", lpFilePart=0x0) returned 0x7e [0076.471] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e3a4) returned 1 [0076.471] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\YG1R61Z8\\BBEfAc5[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\yg1r61z8\\bbefac5[1].jpg"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x264 [0076.472] GetFileType (hFile=0x264) returned 0x1 [0076.472] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e3a0) returned 1 [0076.472] GetFileType (hFile=0x264) returned 0x1 [0076.472] WriteFile (in: hFile=0x264, lpBuffer=0x27f95f4*, nNumberOfBytesToWrite=0x860, lpNumberOfBytesWritten=0x31e434, lpOverlapped=0x0 | out: lpBuffer=0x27f95f4*, lpNumberOfBytesWritten=0x31e434*=0x860, lpOverlapped=0x0) returned 1 [0076.473] CloseHandle (hObject=0x264) returned 1 [0076.473] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\YG1R61Z8\\BBEfAc5[1].jpg", nBufferLength=0x105, lpBuffer=0x31dfe4, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\YG1R61Z8\\BBEfAc5[1].jpg", lpFilePart=0x0) returned 0x7e [0076.473] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\YG1R61Z8\\BBEfAc5[1].jpg", nBufferLength=0x105, lpBuffer=0x31dfe4, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\YG1R61Z8\\BBEfAc5[1].jpg", lpFilePart=0x0) returned 0x7e [0076.473] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e444) returned 1 [0076.473] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\YG1R61Z8\\BBEfAc5[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\yg1r61z8\\bbefac5[1].jpg"), fInfoLevelId=0x0, lpFileInformation=0x31e4c0 | out: lpFileInformation=0x31e4c0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x45b2a450, ftCreationTime.dwHighDateTime=0x1d2faf3, ftLastAccessTime.dwLowDateTime=0x45b2a450, ftLastAccessTime.dwHighDateTime=0x1d2faf3, ftLastWriteTime.dwLowDateTime=0x110737e0, ftLastWriteTime.dwHighDateTime=0x1d6eb7f, nFileSizeHigh=0x0, nFileSizeLow=0x860)) returned 1 [0076.473] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e440) returned 1 [0076.473] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\YG1R61Z8\\BBEfAc5[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\yg1r61z8\\bbefac5[1].jpg"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\YG1R61Z8\\BBEfAc5[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\yg1r61z8\\bbefac5[1].jpg")) returned 1 [0076.474] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\YG1R61Z8\\BBEfgDi[1].jpg", nBufferLength=0x105, lpBuffer=0x31dec4, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\YG1R61Z8\\BBEfgDi[1].jpg", lpFilePart=0x0) returned 0x7e [0076.474] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e3b8) returned 1 [0076.474] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\YG1R61Z8\\BBEfgDi[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\yg1r61z8\\bbefgdi[1].jpg"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x264 [0076.474] GetFileType (hFile=0x264) returned 0x1 [0076.474] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e3b4) returned 1 [0076.474] GetFileType (hFile=0x264) returned 0x1 [0076.474] GetFileSize (in: hFile=0x264, lpFileSizeHigh=0x31e4c0 | out: lpFileSizeHigh=0x31e4c0*=0x0) returned 0x197c [0076.474] ReadFile (in: hFile=0x264, lpBuffer=0x27fa9c4, nNumberOfBytesToRead=0x197c, lpNumberOfBytesRead=0x31e46c, lpOverlapped=0x0 | out: lpBuffer=0x27fa9c4*, lpNumberOfBytesRead=0x31e46c*=0x197c, lpOverlapped=0x0) returned 1 [0076.478] CloseHandle (hObject=0x264) returned 1 [0076.491] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\YG1R61Z8\\BBEfgDi[1].jpg", nBufferLength=0x105, lpBuffer=0x31deb0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\YG1R61Z8\\BBEfgDi[1].jpg", lpFilePart=0x0) returned 0x7e [0076.491] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e3a4) returned 1 [0076.491] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\YG1R61Z8\\BBEfgDi[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\yg1r61z8\\bbefgdi[1].jpg"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x264 [0076.492] GetFileType (hFile=0x264) returned 0x1 [0076.492] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e3a0) returned 1 [0076.492] GetFileType (hFile=0x264) returned 0x1 [0076.492] WriteFile (in: hFile=0x264, lpBuffer=0x284f728*, nNumberOfBytesToWrite=0x1980, lpNumberOfBytesWritten=0x31e460, lpOverlapped=0x0 | out: lpBuffer=0x284f728*, lpNumberOfBytesWritten=0x31e460*=0x1980, lpOverlapped=0x0) returned 1 [0076.493] CloseHandle (hObject=0x264) returned 1 [0076.493] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\YG1R61Z8\\BBEfgDi[1].jpg", nBufferLength=0x105, lpBuffer=0x31dfe4, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\YG1R61Z8\\BBEfgDi[1].jpg", lpFilePart=0x0) returned 0x7e [0076.493] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\YG1R61Z8\\BBEfgDi[1].jpg", nBufferLength=0x105, lpBuffer=0x31dfe4, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\YG1R61Z8\\BBEfgDi[1].jpg", lpFilePart=0x0) returned 0x7e [0076.493] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e444) returned 1 [0076.493] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\YG1R61Z8\\BBEfgDi[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\yg1r61z8\\bbefgdi[1].jpg"), fInfoLevelId=0x0, lpFileInformation=0x31e4c0 | out: lpFileInformation=0x31e4c0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x45510bf0, ftCreationTime.dwHighDateTime=0x1d2faf3, ftLastAccessTime.dwLowDateTime=0x45510bf0, ftLastAccessTime.dwHighDateTime=0x1d2faf3, ftLastWriteTime.dwLowDateTime=0x11099940, ftLastWriteTime.dwHighDateTime=0x1d6eb7f, nFileSizeHigh=0x0, nFileSizeLow=0x1980)) returned 1 [0076.493] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e440) returned 1 [0076.493] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\YG1R61Z8\\BBEfgDi[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\yg1r61z8\\bbefgdi[1].jpg"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\YG1R61Z8\\BBEfgDi[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\yg1r61z8\\bbefgdi[1].jpg")) returned 1 [0076.493] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\YG1R61Z8\\BBEfjuT[1].jpg", nBufferLength=0x105, lpBuffer=0x31dec4, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\YG1R61Z8\\BBEfjuT[1].jpg", lpFilePart=0x0) returned 0x7e [0076.494] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e3b8) returned 1 [0076.494] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\YG1R61Z8\\BBEfjuT[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\yg1r61z8\\bbefjut[1].jpg"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x264 [0076.494] GetFileType (hFile=0x264) returned 0x1 [0076.494] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e3b4) returned 1 [0076.494] GetFileType (hFile=0x264) returned 0x1 [0076.494] GetFileSize (in: hFile=0x264, lpFileSizeHigh=0x31e4c0 | out: lpFileSizeHigh=0x31e4c0*=0x0) returned 0xb7e [0076.494] ReadFile (in: hFile=0x264, lpBuffer=0x2852198, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x31e46c, lpOverlapped=0x0 | out: lpBuffer=0x2852198*, lpNumberOfBytesRead=0x31e46c*=0xb7e, lpOverlapped=0x0) returned 1 [0076.495] CloseHandle (hObject=0x264) returned 1 [0076.537] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\YG1R61Z8\\BBEfjuT[1].jpg", nBufferLength=0x105, lpBuffer=0x31deb0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\YG1R61Z8\\BBEfjuT[1].jpg", lpFilePart=0x0) returned 0x7e [0076.537] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e3a4) returned 1 [0076.537] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\YG1R61Z8\\BBEfjuT[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\yg1r61z8\\bbefjut[1].jpg"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x264 [0076.537] GetFileType (hFile=0x264) returned 0x1 [0076.537] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e3a0) returned 1 [0076.538] GetFileType (hFile=0x264) returned 0x1 [0076.538] WriteFile (in: hFile=0x264, lpBuffer=0x26956f8*, nNumberOfBytesToWrite=0xb80, lpNumberOfBytesWritten=0x31e434, lpOverlapped=0x0 | out: lpBuffer=0x26956f8*, lpNumberOfBytesWritten=0x31e434*=0xb80, lpOverlapped=0x0) returned 1 [0076.538] CloseHandle (hObject=0x264) returned 1 [0076.539] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\YG1R61Z8\\BBEfjuT[1].jpg", nBufferLength=0x105, lpBuffer=0x31dfe4, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\YG1R61Z8\\BBEfjuT[1].jpg", lpFilePart=0x0) returned 0x7e [0076.539] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\YG1R61Z8\\BBEfjuT[1].jpg", nBufferLength=0x105, lpBuffer=0x31dfe4, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\YG1R61Z8\\BBEfjuT[1].jpg", lpFilePart=0x0) returned 0x7e [0076.539] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e444) returned 1 [0076.539] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\YG1R61Z8\\BBEfjuT[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\yg1r61z8\\bbefjut[1].jpg"), fInfoLevelId=0x0, lpFileInformation=0x31e4c0 | out: lpFileInformation=0x31e4c0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x456d9c70, ftCreationTime.dwHighDateTime=0x1d2faf3, ftLastAccessTime.dwLowDateTime=0x456d9c70, ftLastAccessTime.dwHighDateTime=0x1d2faf3, ftLastWriteTime.dwLowDateTime=0x1110bd60, ftLastWriteTime.dwHighDateTime=0x1d6eb7f, nFileSizeHigh=0x0, nFileSizeLow=0xb80)) returned 1 [0076.539] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e440) returned 1 [0076.539] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\YG1R61Z8\\BBEfjuT[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\yg1r61z8\\bbefjut[1].jpg"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\YG1R61Z8\\BBEfjuT[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\yg1r61z8\\bbefjut[1].jpg")) returned 1 [0076.539] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\YG1R61Z8\\BBEfkgi[1].jpg", nBufferLength=0x105, lpBuffer=0x31dec4, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\YG1R61Z8\\BBEfkgi[1].jpg", lpFilePart=0x0) returned 0x7e [0076.539] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e3b8) returned 1 [0076.539] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\YG1R61Z8\\BBEfkgi[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\yg1r61z8\\bbefkgi[1].jpg"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x264 [0076.539] GetFileType (hFile=0x264) returned 0x1 [0076.540] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e3b4) returned 1 [0076.540] GetFileType (hFile=0x264) returned 0x1 [0076.540] GetFileSize (in: hFile=0x264, lpFileSizeHigh=0x31e4c0 | out: lpFileSizeHigh=0x31e4c0*=0x0) returned 0x1b14 [0076.540] ReadFile (in: hFile=0x264, lpBuffer=0x2696ac8, nNumberOfBytesToRead=0x1b14, lpNumberOfBytesRead=0x31e46c, lpOverlapped=0x0 | out: lpBuffer=0x2696ac8*, lpNumberOfBytesRead=0x31e46c*=0x1b14, lpOverlapped=0x0) returned 1 [0076.544] CloseHandle (hObject=0x264) returned 1 [0076.556] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\YG1R61Z8\\BBEfkgi[1].jpg", nBufferLength=0x105, lpBuffer=0x31deb0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\YG1R61Z8\\BBEfkgi[1].jpg", lpFilePart=0x0) returned 0x7e [0076.556] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e3a4) returned 1 [0076.556] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\YG1R61Z8\\BBEfkgi[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\yg1r61z8\\bbefkgi[1].jpg"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x264 [0076.557] GetFileType (hFile=0x264) returned 0x1 [0076.557] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e3a0) returned 1 [0076.557] GetFileType (hFile=0x264) returned 0x1 [0076.557] WriteFile (in: hFile=0x264, lpBuffer=0x26ec1a8*, nNumberOfBytesToWrite=0x1b20, lpNumberOfBytesWritten=0x31e460, lpOverlapped=0x0 | out: lpBuffer=0x26ec1a8*, lpNumberOfBytesWritten=0x31e460*=0x1b20, lpOverlapped=0x0) returned 1 [0076.558] CloseHandle (hObject=0x264) returned 1 [0076.558] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\YG1R61Z8\\BBEfkgi[1].jpg", nBufferLength=0x105, lpBuffer=0x31dfe4, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\YG1R61Z8\\BBEfkgi[1].jpg", lpFilePart=0x0) returned 0x7e [0076.558] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\YG1R61Z8\\BBEfkgi[1].jpg", nBufferLength=0x105, lpBuffer=0x31dfe4, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\YG1R61Z8\\BBEfkgi[1].jpg", lpFilePart=0x0) returned 0x7e [0076.558] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e444) returned 1 [0076.558] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\YG1R61Z8\\BBEfkgi[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\yg1r61z8\\bbefkgi[1].jpg"), fInfoLevelId=0x0, lpFileInformation=0x31e4c0 | out: lpFileInformation=0x31e4c0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x457be4b0, ftCreationTime.dwHighDateTime=0x1d2faf3, ftLastAccessTime.dwLowDateTime=0x457be4b0, ftLastAccessTime.dwHighDateTime=0x1d2faf3, ftLastWriteTime.dwLowDateTime=0x11131ec0, ftLastWriteTime.dwHighDateTime=0x1d6eb7f, nFileSizeHigh=0x0, nFileSizeLow=0x1b20)) returned 1 [0076.559] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e440) returned 1 [0076.559] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\YG1R61Z8\\BBEfkgi[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\yg1r61z8\\bbefkgi[1].jpg"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\YG1R61Z8\\BBEfkgi[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\yg1r61z8\\bbefkgi[1].jpg")) returned 1 [0076.559] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\YG1R61Z8\\BBEfRKA[1].jpg", nBufferLength=0x105, lpBuffer=0x31dec4, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\YG1R61Z8\\BBEfRKA[1].jpg", lpFilePart=0x0) returned 0x7e [0076.559] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e3b8) returned 1 [0076.559] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\YG1R61Z8\\BBEfRKA[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\yg1r61z8\\bbefrka[1].jpg"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x264 [0076.559] GetFileType (hFile=0x264) returned 0x1 [0076.559] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e3b4) returned 1 [0076.559] GetFileType (hFile=0x264) returned 0x1 [0076.559] GetFileSize (in: hFile=0x264, lpFileSizeHigh=0x31e4c0 | out: lpFileSizeHigh=0x31e4c0*=0x0) returned 0x2978 [0076.559] ReadFile (in: hFile=0x264, lpBuffer=0x26ee22c, nNumberOfBytesToRead=0x2978, lpNumberOfBytesRead=0x31e46c, lpOverlapped=0x0 | out: lpBuffer=0x26ee22c*, lpNumberOfBytesRead=0x31e46c*=0x2978, lpOverlapped=0x0) returned 1 [0076.561] CloseHandle (hObject=0x264) returned 1 [0076.574] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\YG1R61Z8\\BBEfRKA[1].jpg", nBufferLength=0x105, lpBuffer=0x31deb0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\YG1R61Z8\\BBEfRKA[1].jpg", lpFilePart=0x0) returned 0x7e [0076.574] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e3a4) returned 1 [0076.574] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\YG1R61Z8\\BBEfRKA[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\yg1r61z8\\bbefrka[1].jpg"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x264 [0076.575] GetFileType (hFile=0x264) returned 0x1 [0076.575] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e3a0) returned 1 [0076.575] GetFileType (hFile=0x264) returned 0x1 [0076.575] WriteFile (in: hFile=0x264, lpBuffer=0x2747f90*, nNumberOfBytesToWrite=0x2980, lpNumberOfBytesWritten=0x31e460, lpOverlapped=0x0 | out: lpBuffer=0x2747f90*, lpNumberOfBytesWritten=0x31e460*=0x2980, lpOverlapped=0x0) returned 1 [0076.576] CloseHandle (hObject=0x264) returned 1 [0076.576] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\YG1R61Z8\\BBEfRKA[1].jpg", nBufferLength=0x105, lpBuffer=0x31dfe4, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\YG1R61Z8\\BBEfRKA[1].jpg", lpFilePart=0x0) returned 0x7e [0076.576] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\YG1R61Z8\\BBEfRKA[1].jpg", nBufferLength=0x105, lpBuffer=0x31dfe4, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\YG1R61Z8\\BBEfRKA[1].jpg", lpFilePart=0x0) returned 0x7e [0076.576] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e444) returned 1 [0076.576] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\YG1R61Z8\\BBEfRKA[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\yg1r61z8\\bbefrka[1].jpg"), fInfoLevelId=0x0, lpFileInformation=0x31e4c0 | out: lpFileInformation=0x31e4c0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x45915110, ftCreationTime.dwHighDateTime=0x1d2faf3, ftLastAccessTime.dwLowDateTime=0x45915110, ftLastAccessTime.dwHighDateTime=0x1d2faf3, ftLastWriteTime.dwLowDateTime=0x11158020, ftLastWriteTime.dwHighDateTime=0x1d6eb7f, nFileSizeHigh=0x0, nFileSizeLow=0x2980)) returned 1 [0076.576] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e440) returned 1 [0076.576] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\YG1R61Z8\\BBEfRKA[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\yg1r61z8\\bbefrka[1].jpg"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\YG1R61Z8\\BBEfRKA[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\yg1r61z8\\bbefrka[1].jpg")) returned 1 [0076.577] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\YG1R61Z8\\BBEfRwv[1].jpg", nBufferLength=0x105, lpBuffer=0x31dec4, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\YG1R61Z8\\BBEfRwv[1].jpg", lpFilePart=0x0) returned 0x7e [0076.577] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e3b8) returned 1 [0076.577] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\YG1R61Z8\\BBEfRwv[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\yg1r61z8\\bbefrwv[1].jpg"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x264 [0076.577] GetFileType (hFile=0x264) returned 0x1 [0076.577] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e3b4) returned 1 [0076.577] GetFileType (hFile=0x264) returned 0x1 [0076.577] GetFileSize (in: hFile=0x264, lpFileSizeHigh=0x31e4c0 | out: lpFileSizeHigh=0x31e4c0*=0x0) returned 0x2b6c [0076.577] ReadFile (in: hFile=0x264, lpBuffer=0x274ae74, nNumberOfBytesToRead=0x2b6c, lpNumberOfBytesRead=0x31e46c, lpOverlapped=0x0 | out: lpBuffer=0x274ae74*, lpNumberOfBytesRead=0x31e46c*=0x2b6c, lpOverlapped=0x0) returned 1 [0076.579] CloseHandle (hObject=0x264) returned 1 [0076.591] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\YG1R61Z8\\BBEfRwv[1].jpg", nBufferLength=0x105, lpBuffer=0x31deb0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\YG1R61Z8\\BBEfRwv[1].jpg", lpFilePart=0x0) returned 0x7e [0076.591] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e3a4) returned 1 [0076.592] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\YG1R61Z8\\BBEfRwv[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\yg1r61z8\\bbefrwv[1].jpg"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x264 [0076.592] GetFileType (hFile=0x264) returned 0x1 [0076.592] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e3a0) returned 1 [0076.592] GetFileType (hFile=0x264) returned 0x1 [0076.593] WriteFile (in: hFile=0x264, lpBuffer=0x27a5588*, nNumberOfBytesToWrite=0x2b70, lpNumberOfBytesWritten=0x31e460, lpOverlapped=0x0 | out: lpBuffer=0x27a5588*, lpNumberOfBytesWritten=0x31e460*=0x2b70, lpOverlapped=0x0) returned 1 [0076.594] CloseHandle (hObject=0x264) returned 1 [0076.594] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\YG1R61Z8\\BBEfRwv[1].jpg", nBufferLength=0x105, lpBuffer=0x31dfe4, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\YG1R61Z8\\BBEfRwv[1].jpg", lpFilePart=0x0) returned 0x7e [0076.594] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\YG1R61Z8\\BBEfRwv[1].jpg", nBufferLength=0x105, lpBuffer=0x31dfe4, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\YG1R61Z8\\BBEfRwv[1].jpg", lpFilePart=0x0) returned 0x7e [0076.594] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e444) returned 1 [0076.594] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\YG1R61Z8\\BBEfRwv[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\yg1r61z8\\bbefrwv[1].jpg"), fInfoLevelId=0x0, lpFileInformation=0x31e4c0 | out: lpFileInformation=0x31e4c0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x4574c090, ftCreationTime.dwHighDateTime=0x1d2faf3, ftLastAccessTime.dwLowDateTime=0x4574c090, ftLastAccessTime.dwHighDateTime=0x1d2faf3, ftLastWriteTime.dwLowDateTime=0x1117e180, ftLastWriteTime.dwHighDateTime=0x1d6eb7f, nFileSizeHigh=0x0, nFileSizeLow=0x2b70)) returned 1 [0076.594] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e440) returned 1 [0076.594] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\YG1R61Z8\\BBEfRwv[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\yg1r61z8\\bbefrwv[1].jpg"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\YG1R61Z8\\BBEfRwv[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\yg1r61z8\\bbefrwv[1].jpg")) returned 1 [0076.594] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\YG1R61Z8\\BBEfwtU[1].jpg", nBufferLength=0x105, lpBuffer=0x31dec4, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\YG1R61Z8\\BBEfwtU[1].jpg", lpFilePart=0x0) returned 0x7e [0076.594] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e3b8) returned 1 [0076.594] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\YG1R61Z8\\BBEfwtU[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\yg1r61z8\\bbefwtu[1].jpg"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x264 [0076.595] GetFileType (hFile=0x264) returned 0x1 [0076.595] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e3b4) returned 1 [0076.595] GetFileType (hFile=0x264) returned 0x1 [0076.595] GetFileSize (in: hFile=0x264, lpFileSizeHigh=0x31e4c0 | out: lpFileSizeHigh=0x31e4c0*=0x0) returned 0x2676 [0076.595] ReadFile (in: hFile=0x264, lpBuffer=0x27a865c, nNumberOfBytesToRead=0x2676, lpNumberOfBytesRead=0x31e46c, lpOverlapped=0x0 | out: lpBuffer=0x27a865c*, lpNumberOfBytesRead=0x31e46c*=0x2676, lpOverlapped=0x0) returned 1 [0076.597] CloseHandle (hObject=0x264) returned 1 [0076.610] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\YG1R61Z8\\BBEfwtU[1].jpg", nBufferLength=0x105, lpBuffer=0x31deb0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\YG1R61Z8\\BBEfwtU[1].jpg", lpFilePart=0x0) returned 0x7e [0076.610] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e3a4) returned 1 [0076.610] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\YG1R61Z8\\BBEfwtU[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\yg1r61z8\\bbefwtu[1].jpg"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x264 [0076.611] GetFileType (hFile=0x264) returned 0x1 [0076.611] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e3a0) returned 1 [0076.611] GetFileType (hFile=0x264) returned 0x1 [0076.611] WriteFile (in: hFile=0x264, lpBuffer=0x28014c4*, nNumberOfBytesToWrite=0x2680, lpNumberOfBytesWritten=0x31e460, lpOverlapped=0x0 | out: lpBuffer=0x28014c4*, lpNumberOfBytesWritten=0x31e460*=0x2680, lpOverlapped=0x0) returned 1 [0076.612] CloseHandle (hObject=0x264) returned 1 [0076.612] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\YG1R61Z8\\BBEfwtU[1].jpg", nBufferLength=0x105, lpBuffer=0x31dfe4, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\YG1R61Z8\\BBEfwtU[1].jpg", lpFilePart=0x0) returned 0x7e [0076.612] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\YG1R61Z8\\BBEfwtU[1].jpg", nBufferLength=0x105, lpBuffer=0x31dfe4, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\YG1R61Z8\\BBEfwtU[1].jpg", lpFilePart=0x0) returned 0x7e [0076.612] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e444) returned 1 [0076.612] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\YG1R61Z8\\BBEfwtU[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\yg1r61z8\\bbefwtu[1].jpg"), fInfoLevelId=0x0, lpFileInformation=0x31e4c0 | out: lpFileInformation=0x31e4c0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x45478670, ftCreationTime.dwHighDateTime=0x1d2faf3, ftLastAccessTime.dwLowDateTime=0x45478670, ftLastAccessTime.dwHighDateTime=0x1d2faf3, ftLastWriteTime.dwLowDateTime=0x111ca440, ftLastWriteTime.dwHighDateTime=0x1d6eb7f, nFileSizeHigh=0x0, nFileSizeLow=0x2680)) returned 1 [0076.612] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e440) returned 1 [0076.612] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\YG1R61Z8\\BBEfwtU[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\yg1r61z8\\bbefwtu[1].jpg"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\YG1R61Z8\\BBEfwtU[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\yg1r61z8\\bbefwtu[1].jpg")) returned 1 [0076.613] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\YG1R61Z8\\BBEfY4X[1].jpg", nBufferLength=0x105, lpBuffer=0x31dec4, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\YG1R61Z8\\BBEfY4X[1].jpg", lpFilePart=0x0) returned 0x7e [0076.613] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e3b8) returned 1 [0076.613] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\YG1R61Z8\\BBEfY4X[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\yg1r61z8\\bbefy4x[1].jpg"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x264 [0076.613] GetFileType (hFile=0x264) returned 0x1 [0076.613] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e3b4) returned 1 [0076.613] GetFileType (hFile=0x264) returned 0x1 [0076.613] GetFileSize (in: hFile=0x264, lpFileSizeHigh=0x31e4c0 | out: lpFileSizeHigh=0x31e4c0*=0x0) returned 0xb41 [0076.613] ReadFile (in: hFile=0x264, lpBuffer=0x2804bf8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x31e46c, lpOverlapped=0x0 | out: lpBuffer=0x2804bf8*, lpNumberOfBytesRead=0x31e46c*=0xb41, lpOverlapped=0x0) returned 1 [0076.615] CloseHandle (hObject=0x264) returned 1 [0076.630] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\YG1R61Z8\\BBEfY4X[1].jpg", nBufferLength=0x105, lpBuffer=0x31deb0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\YG1R61Z8\\BBEfY4X[1].jpg", lpFilePart=0x0) returned 0x7e [0076.630] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e3a4) returned 1 [0076.630] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\YG1R61Z8\\BBEfY4X[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\yg1r61z8\\bbefy4x[1].jpg"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x264 [0076.631] GetFileType (hFile=0x264) returned 0x1 [0076.631] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e3a0) returned 1 [0076.631] GetFileType (hFile=0x264) returned 0x1 [0076.631] WriteFile (in: hFile=0x264, lpBuffer=0x2656850*, nNumberOfBytesToWrite=0xb50, lpNumberOfBytesWritten=0x31e434, lpOverlapped=0x0 | out: lpBuffer=0x2656850*, lpNumberOfBytesWritten=0x31e434*=0xb50, lpOverlapped=0x0) returned 1 [0076.632] CloseHandle (hObject=0x264) returned 1 [0076.632] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\YG1R61Z8\\BBEfY4X[1].jpg", nBufferLength=0x105, lpBuffer=0x31dfe4, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\YG1R61Z8\\BBEfY4X[1].jpg", lpFilePart=0x0) returned 0x7e [0076.632] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\YG1R61Z8\\BBEfY4X[1].jpg", nBufferLength=0x105, lpBuffer=0x31dfe4, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\YG1R61Z8\\BBEfY4X[1].jpg", lpFilePart=0x0) returned 0x7e [0076.632] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e444) returned 1 [0076.632] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\YG1R61Z8\\BBEfY4X[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\yg1r61z8\\bbefy4x[1].jpg"), fInfoLevelId=0x0, lpFileInformation=0x31e4c0 | out: lpFileInformation=0x31e4c0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x45856a30, ftCreationTime.dwHighDateTime=0x1d2faf3, ftLastAccessTime.dwLowDateTime=0x45856a30, ftLastAccessTime.dwHighDateTime=0x1d2faf3, ftLastWriteTime.dwLowDateTime=0x111f05a0, ftLastWriteTime.dwHighDateTime=0x1d6eb7f, nFileSizeHigh=0x0, nFileSizeLow=0xb50)) returned 1 [0076.632] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e440) returned 1 [0076.632] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\YG1R61Z8\\BBEfY4X[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\yg1r61z8\\bbefy4x[1].jpg"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\YG1R61Z8\\BBEfY4X[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\yg1r61z8\\bbefy4x[1].jpg")) returned 1 [0076.632] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\YG1R61Z8\\BBEgD9f[1].jpg", nBufferLength=0x105, lpBuffer=0x31dec4, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\YG1R61Z8\\BBEgD9f[1].jpg", lpFilePart=0x0) returned 0x7e [0076.632] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e3b8) returned 1 [0076.632] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\YG1R61Z8\\BBEgD9f[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\yg1r61z8\\bbegd9f[1].jpg"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x264 [0076.633] GetFileType (hFile=0x264) returned 0x1 [0076.633] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e3b4) returned 1 [0076.633] GetFileType (hFile=0x264) returned 0x1 [0076.633] GetFileSize (in: hFile=0x264, lpFileSizeHigh=0x31e4c0 | out: lpFileSizeHigh=0x31e4c0*=0x0) returned 0x25f6 [0076.633] ReadFile (in: hFile=0x264, lpBuffer=0x2657c20, nNumberOfBytesToRead=0x25f6, lpNumberOfBytesRead=0x31e46c, lpOverlapped=0x0 | out: lpBuffer=0x2657c20*, lpNumberOfBytesRead=0x31e46c*=0x25f6, lpOverlapped=0x0) returned 1 [0076.634] CloseHandle (hObject=0x264) returned 1 [0076.680] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\YG1R61Z8\\BBEgD9f[1].jpg", nBufferLength=0x105, lpBuffer=0x31deb0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\YG1R61Z8\\BBEgD9f[1].jpg", lpFilePart=0x0) returned 0x7e [0076.680] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e3a4) returned 1 [0076.680] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\YG1R61Z8\\BBEgD9f[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\yg1r61z8\\bbegd9f[1].jpg"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x264 [0076.681] GetFileType (hFile=0x264) returned 0x1 [0076.681] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e3a0) returned 1 [0076.681] GetFileType (hFile=0x264) returned 0x1 [0076.681] WriteFile (in: hFile=0x264, lpBuffer=0x26b0964*, nNumberOfBytesToWrite=0x2600, lpNumberOfBytesWritten=0x31e460, lpOverlapped=0x0 | out: lpBuffer=0x26b0964*, lpNumberOfBytesWritten=0x31e460*=0x2600, lpOverlapped=0x0) returned 1 [0076.682] CloseHandle (hObject=0x264) returned 1 [0076.682] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\YG1R61Z8\\BBEgD9f[1].jpg", nBufferLength=0x105, lpBuffer=0x31dfe4, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\YG1R61Z8\\BBEgD9f[1].jpg", lpFilePart=0x0) returned 0x7e [0076.683] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\YG1R61Z8\\BBEgD9f[1].jpg", nBufferLength=0x105, lpBuffer=0x31dfe4, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\YG1R61Z8\\BBEgD9f[1].jpg", lpFilePart=0x0) returned 0x7e [0076.683] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e444) returned 1 [0076.683] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\YG1R61Z8\\BBEgD9f[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\yg1r61z8\\bbegd9f[1].jpg"), fInfoLevelId=0x0, lpFileInformation=0x31e4c0 | out: lpFileInformation=0x31e4c0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x45725f30, ftCreationTime.dwHighDateTime=0x1d2faf3, ftLastAccessTime.dwLowDateTime=0x45725f30, ftLastAccessTime.dwHighDateTime=0x1d2faf3, ftLastWriteTime.dwLowDateTime=0x112629c0, ftLastWriteTime.dwHighDateTime=0x1d6eb7f, nFileSizeHigh=0x0, nFileSizeLow=0x2600)) returned 1 [0076.683] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e440) returned 1 [0076.683] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\YG1R61Z8\\BBEgD9f[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\yg1r61z8\\bbegd9f[1].jpg"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\YG1R61Z8\\BBEgD9f[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\yg1r61z8\\bbegd9f[1].jpg")) returned 1 [0076.683] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\YG1R61Z8\\BBEgJfz[1].jpg", nBufferLength=0x105, lpBuffer=0x31dec4, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\YG1R61Z8\\BBEgJfz[1].jpg", lpFilePart=0x0) returned 0x7e [0076.683] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e3b8) returned 1 [0076.683] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\YG1R61Z8\\BBEgJfz[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\yg1r61z8\\bbegjfz[1].jpg"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x264 [0076.683] GetFileType (hFile=0x264) returned 0x1 [0076.683] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e3b4) returned 1 [0076.683] GetFileType (hFile=0x264) returned 0x1 [0076.683] GetFileSize (in: hFile=0x264, lpFileSizeHigh=0x31e4c0 | out: lpFileSizeHigh=0x31e4c0*=0x0) returned 0x819 [0076.684] ReadFile (in: hFile=0x264, lpBuffer=0x26b3cf0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x31e46c, lpOverlapped=0x0 | out: lpBuffer=0x26b3cf0*, lpNumberOfBytesRead=0x31e46c*=0x819, lpOverlapped=0x0) returned 1 [0076.685] CloseHandle (hObject=0x264) returned 1 [0076.698] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\YG1R61Z8\\BBEgJfz[1].jpg", nBufferLength=0x105, lpBuffer=0x31deb0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\YG1R61Z8\\BBEgJfz[1].jpg", lpFilePart=0x0) returned 0x7e [0076.698] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e3a4) returned 1 [0076.698] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\YG1R61Z8\\BBEgJfz[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\yg1r61z8\\bbegjfz[1].jpg"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x264 [0076.699] GetFileType (hFile=0x264) returned 0x1 [0076.699] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e3a0) returned 1 [0076.699] GetFileType (hFile=0x264) returned 0x1 [0076.699] WriteFile (in: hFile=0x264, lpBuffer=0x270451c*, nNumberOfBytesToWrite=0x820, lpNumberOfBytesWritten=0x31e434, lpOverlapped=0x0 | out: lpBuffer=0x270451c*, lpNumberOfBytesWritten=0x31e434*=0x820, lpOverlapped=0x0) returned 1 [0076.701] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\YG1R61Z8\\BBEgJfz[1].jpg", nBufferLength=0x105, lpBuffer=0x31dfe4, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\YG1R61Z8\\BBEgJfz[1].jpg", lpFilePart=0x0) returned 0x7e [0076.701] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\YG1R61Z8\\BBEgJfz[1].jpg", nBufferLength=0x105, lpBuffer=0x31dfe4, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\YG1R61Z8\\BBEgJfz[1].jpg", lpFilePart=0x0) returned 0x7e [0076.701] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e444) returned 1 [0076.701] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\YG1R61Z8\\BBEgJfz[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\yg1r61z8\\bbegjfz[1].jpg"), fInfoLevelId=0x0, lpFileInformation=0x31e4c0 | out: lpFileInformation=0x31e4c0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x45ab8030, ftCreationTime.dwHighDateTime=0x1d2faf3, ftLastAccessTime.dwLowDateTime=0x45ab8030, ftLastAccessTime.dwHighDateTime=0x1d2faf3, ftLastWriteTime.dwLowDateTime=0x11288b20, ftLastWriteTime.dwHighDateTime=0x1d6eb7f, nFileSizeHigh=0x0, nFileSizeLow=0x820)) returned 1 [0076.701] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e440) returned 1 [0076.701] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\YG1R61Z8\\BBEgJfz[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\yg1r61z8\\bbegjfz[1].jpg"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\YG1R61Z8\\BBEgJfz[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\yg1r61z8\\bbegjfz[1].jpg")) returned 1 [0076.701] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\YG1R61Z8\\BBEgsWA[1].jpg", nBufferLength=0x105, lpBuffer=0x31dec4, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\YG1R61Z8\\BBEgsWA[1].jpg", lpFilePart=0x0) returned 0x7e [0076.701] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e3b8) returned 1 [0076.702] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\YG1R61Z8\\BBEgsWA[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\yg1r61z8\\bbegswa[1].jpg"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x264 [0076.702] GetFileType (hFile=0x264) returned 0x1 [0076.702] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e3b4) returned 1 [0076.702] GetFileType (hFile=0x264) returned 0x1 [0076.702] GetFileSize (in: hFile=0x264, lpFileSizeHigh=0x31e4c0 | out: lpFileSizeHigh=0x31e4c0*=0x0) returned 0x916 [0076.702] ReadFile (in: hFile=0x264, lpBuffer=0x2706210, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x31e46c, lpOverlapped=0x0 | out: lpBuffer=0x2706210*, lpNumberOfBytesRead=0x31e46c*=0x916, lpOverlapped=0x0) returned 1 [0076.716] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\YG1R61Z8\\BBEgsWA[1].jpg", nBufferLength=0x105, lpBuffer=0x31deb0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\YG1R61Z8\\BBEgsWA[1].jpg", lpFilePart=0x0) returned 0x7e [0076.716] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e3a4) returned 1 [0076.716] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\YG1R61Z8\\BBEgsWA[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\yg1r61z8\\bbegswa[1].jpg"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x264 [0076.717] GetFileType (hFile=0x264) returned 0x1 [0076.717] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e3a0) returned 1 [0076.717] GetFileType (hFile=0x264) returned 0x1 [0076.717] WriteFile (in: hFile=0x264, lpBuffer=0x2756f40*, nNumberOfBytesToWrite=0x920, lpNumberOfBytesWritten=0x31e434, lpOverlapped=0x0 | out: lpBuffer=0x2756f40*, lpNumberOfBytesWritten=0x31e434*=0x920, lpOverlapped=0x0) returned 1 [0076.718] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\YG1R61Z8\\BBEgsWA[1].jpg", nBufferLength=0x105, lpBuffer=0x31dfe4, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\YG1R61Z8\\BBEgsWA[1].jpg", lpFilePart=0x0) returned 0x7e [0076.718] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\YG1R61Z8\\BBEgsWA[1].jpg", nBufferLength=0x105, lpBuffer=0x31dfe4, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\YG1R61Z8\\BBEgsWA[1].jpg", lpFilePart=0x0) returned 0x7e [0076.718] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e444) returned 1 [0076.718] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\YG1R61Z8\\BBEgsWA[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\yg1r61z8\\bbegswa[1].jpg"), fInfoLevelId=0x0, lpFileInformation=0x31e4c0 | out: lpFileInformation=0x31e4c0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x45b2a450, ftCreationTime.dwHighDateTime=0x1d2faf3, ftLastAccessTime.dwLowDateTime=0x45b2a450, ftLastAccessTime.dwHighDateTime=0x1d2faf3, ftLastWriteTime.dwLowDateTime=0x112aec80, ftLastWriteTime.dwHighDateTime=0x1d6eb7f, nFileSizeHigh=0x0, nFileSizeLow=0x920)) returned 1 [0076.718] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e440) returned 1 [0076.718] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\YG1R61Z8\\BBEgsWA[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\yg1r61z8\\bbegswa[1].jpg"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\YG1R61Z8\\BBEgsWA[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\yg1r61z8\\bbegswa[1].jpg")) returned 1 [0076.718] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\YG1R61Z8\\BBEgX5G[1].jpg", nBufferLength=0x105, lpBuffer=0x31dec4, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\YG1R61Z8\\BBEgX5G[1].jpg", lpFilePart=0x0) returned 0x7e [0076.718] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e3b8) returned 1 [0076.719] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\YG1R61Z8\\BBEgX5G[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\yg1r61z8\\bbegx5g[1].jpg"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x264 [0076.719] GetFileType (hFile=0x264) returned 0x1 [0076.719] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e3b4) returned 1 [0076.719] GetFileType (hFile=0x264) returned 0x1 [0076.719] GetFileSize (in: hFile=0x264, lpFileSizeHigh=0x31e4c0 | out: lpFileSizeHigh=0x31e4c0*=0x0) returned 0x918 [0076.719] ReadFile (in: hFile=0x264, lpBuffer=0x2758c34, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x31e46c, lpOverlapped=0x0 | out: lpBuffer=0x2758c34*, lpNumberOfBytesRead=0x31e46c*=0x918, lpOverlapped=0x0) returned 1 [0076.734] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\YG1R61Z8\\BBEgX5G[1].jpg", nBufferLength=0x105, lpBuffer=0x31deb0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\YG1R61Z8\\BBEgX5G[1].jpg", lpFilePart=0x0) returned 0x7e [0076.734] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e3a4) returned 1 [0076.734] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\YG1R61Z8\\BBEgX5G[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\yg1r61z8\\bbegx5g[1].jpg"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x264 [0076.735] GetFileType (hFile=0x264) returned 0x1 [0076.735] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e3a0) returned 1 [0076.735] GetFileType (hFile=0x264) returned 0x1 [0076.735] WriteFile (in: hFile=0x264, lpBuffer=0x27a9960*, nNumberOfBytesToWrite=0x920, lpNumberOfBytesWritten=0x31e434, lpOverlapped=0x0 | out: lpBuffer=0x27a9960*, lpNumberOfBytesWritten=0x31e434*=0x920, lpOverlapped=0x0) returned 1 [0076.736] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\YG1R61Z8\\BBEgX5G[1].jpg", nBufferLength=0x105, lpBuffer=0x31dfe4, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\YG1R61Z8\\BBEgX5G[1].jpg", lpFilePart=0x0) returned 0x7e [0076.736] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\YG1R61Z8\\BBEgX5G[1].jpg", nBufferLength=0x105, lpBuffer=0x31dfe4, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\YG1R61Z8\\BBEgX5G[1].jpg", lpFilePart=0x0) returned 0x7e [0076.736] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e444) returned 1 [0076.736] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\YG1R61Z8\\BBEgX5G[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\yg1r61z8\\bbegx5g[1].jpg"), fInfoLevelId=0x0, lpFileInformation=0x31e4c0 | out: lpFileInformation=0x31e4c0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x45725f30, ftCreationTime.dwHighDateTime=0x1d2faf3, ftLastAccessTime.dwLowDateTime=0x45725f30, ftLastAccessTime.dwHighDateTime=0x1d2faf3, ftLastWriteTime.dwLowDateTime=0x112d4de0, ftLastWriteTime.dwHighDateTime=0x1d6eb7f, nFileSizeHigh=0x0, nFileSizeLow=0x920)) returned 1 [0076.736] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e440) returned 1 [0076.736] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\YG1R61Z8\\BBEgX5G[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\yg1r61z8\\bbegx5g[1].jpg"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\YG1R61Z8\\BBEgX5G[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\yg1r61z8\\bbegx5g[1].jpg")) returned 1 [0076.736] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\YG1R61Z8\\BBih5H[1].png", nBufferLength=0x105, lpBuffer=0x31dec4, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\YG1R61Z8\\BBih5H[1].png", lpFilePart=0x0) returned 0x7d [0076.736] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e3b8) returned 1 [0076.737] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\YG1R61Z8\\BBih5H[1].png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\yg1r61z8\\bbih5h[1].png"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x264 [0076.737] GetFileType (hFile=0x264) returned 0x1 [0076.737] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e3b4) returned 1 [0076.737] GetFileType (hFile=0x264) returned 0x1 [0076.737] GetFileSize (in: hFile=0x264, lpFileSizeHigh=0x31e4c0 | out: lpFileSizeHigh=0x31e4c0*=0x0) returned 0x3a2 [0076.737] ReadFile (in: hFile=0x264, lpBuffer=0x27ab0d8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x31e46c, lpOverlapped=0x0 | out: lpBuffer=0x27ab0d8*, lpNumberOfBytesRead=0x31e46c*=0x3a2, lpOverlapped=0x0) returned 1 [0076.751] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\YG1R61Z8\\BBih5H[1].png", nBufferLength=0x105, lpBuffer=0x31deb0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\YG1R61Z8\\BBih5H[1].png", lpFilePart=0x0) returned 0x7d [0076.752] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e3a4) returned 1 [0076.752] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\YG1R61Z8\\BBih5H[1].png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\yg1r61z8\\bbih5h[1].png"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x264 [0076.761] GetFileType (hFile=0x264) returned 0x1 [0076.761] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e3a0) returned 1 [0076.761] GetFileType (hFile=0x264) returned 0x1 [0076.761] WriteFile (in: hFile=0x264, lpBuffer=0x27fa2d4*, nNumberOfBytesToWrite=0x3b0, lpNumberOfBytesWritten=0x31e434, lpOverlapped=0x0 | out: lpBuffer=0x27fa2d4*, lpNumberOfBytesWritten=0x31e434*=0x3b0, lpOverlapped=0x0) returned 1 [0076.762] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\YG1R61Z8\\BBih5H[1].png", nBufferLength=0x105, lpBuffer=0x31dfe4, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\YG1R61Z8\\BBih5H[1].png", lpFilePart=0x0) returned 0x7d [0076.762] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\YG1R61Z8\\BBih5H[1].png", nBufferLength=0x105, lpBuffer=0x31dfe4, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\YG1R61Z8\\BBih5H[1].png", lpFilePart=0x0) returned 0x7d [0076.762] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e444) returned 1 [0076.762] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\YG1R61Z8\\BBih5H[1].png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\yg1r61z8\\bbih5h[1].png"), fInfoLevelId=0x0, lpFileInformation=0x31e4c0 | out: lpFileInformation=0x31e4c0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x51256470, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x51256470, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x113210a0, ftLastWriteTime.dwHighDateTime=0x1d6eb7f, nFileSizeHigh=0x0, nFileSizeLow=0x3b0)) returned 1 [0076.762] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e440) returned 1 [0076.762] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\YG1R61Z8\\BBih5H[1].png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\yg1r61z8\\bbih5h[1].png"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\YG1R61Z8\\BBih5H[1].png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\yg1r61z8\\bbih5h[1].png")) returned 1 [0076.763] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\YG1R61Z8\\BBmUxRK[1].png", nBufferLength=0x105, lpBuffer=0x31dec4, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\YG1R61Z8\\BBmUxRK[1].png", lpFilePart=0x0) returned 0x7e [0076.763] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e3b8) returned 1 [0076.763] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\YG1R61Z8\\BBmUxRK[1].png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\yg1r61z8\\bbmuxrk[1].png"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x264 [0076.763] GetFileType (hFile=0x264) returned 0x1 [0076.763] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e3b4) returned 1 [0076.763] GetFileType (hFile=0x264) returned 0x1 [0076.763] GetFileSize (in: hFile=0x264, lpFileSizeHigh=0x31e4c0 | out: lpFileSizeHigh=0x31e4c0*=0x0) returned 0x24c [0076.763] ReadFile (in: hFile=0x264, lpBuffer=0x27fb8f4, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x31e46c, lpOverlapped=0x0 | out: lpBuffer=0x27fb8f4*, lpNumberOfBytesRead=0x31e46c*=0x24c, lpOverlapped=0x0) returned 1 [0076.777] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\YG1R61Z8\\BBmUxRK[1].png", nBufferLength=0x105, lpBuffer=0x31deb0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\YG1R61Z8\\BBmUxRK[1].png", lpFilePart=0x0) returned 0x7e [0076.777] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e3a4) returned 1 [0076.777] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\YG1R61Z8\\BBmUxRK[1].png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\yg1r61z8\\bbmuxrk[1].png"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x264 [0076.778] GetFileType (hFile=0x264) returned 0x1 [0076.778] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e3a0) returned 1 [0076.778] GetFileType (hFile=0x264) returned 0x1 [0076.778] WriteFile (in: hFile=0x264, lpBuffer=0x284a40c*, nNumberOfBytesToWrite=0x250, lpNumberOfBytesWritten=0x31e434, lpOverlapped=0x0 | out: lpBuffer=0x284a40c*, lpNumberOfBytesWritten=0x31e434*=0x250, lpOverlapped=0x0) returned 1 [0076.779] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\YG1R61Z8\\BBmUxRK[1].png", nBufferLength=0x105, lpBuffer=0x31dfe4, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\YG1R61Z8\\BBmUxRK[1].png", lpFilePart=0x0) returned 0x7e [0076.779] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\YG1R61Z8\\BBmUxRK[1].png", nBufferLength=0x105, lpBuffer=0x31dfe4, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\YG1R61Z8\\BBmUxRK[1].png", lpFilePart=0x0) returned 0x7e [0076.779] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e444) returned 1 [0076.779] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\YG1R61Z8\\BBmUxRK[1].png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\yg1r61z8\\bbmuxrk[1].png"), fInfoLevelId=0x0, lpFileInformation=0x31e4c0 | out: lpFileInformation=0x31e4c0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xbe4ca790, ftCreationTime.dwHighDateTime=0x1d2faf2, ftLastAccessTime.dwLowDateTime=0xbe4ca790, ftLastAccessTime.dwHighDateTime=0x1d2faf2, ftLastWriteTime.dwLowDateTime=0x11347200, ftLastWriteTime.dwHighDateTime=0x1d6eb7f, nFileSizeHigh=0x0, nFileSizeLow=0x250)) returned 1 [0076.780] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e440) returned 1 [0076.780] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\YG1R61Z8\\BBmUxRK[1].png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\yg1r61z8\\bbmuxrk[1].png"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\YG1R61Z8\\BBmUxRK[1].png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\yg1r61z8\\bbmuxrk[1].png")) returned 1 [0076.780] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\YG1R61Z8\\BBndhJA[1].png", nBufferLength=0x105, lpBuffer=0x31dec4, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\YG1R61Z8\\BBndhJA[1].png", lpFilePart=0x0) returned 0x7e [0076.780] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e3b8) returned 1 [0076.780] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\YG1R61Z8\\BBndhJA[1].png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\yg1r61z8\\bbndhja[1].png"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x264 [0076.780] GetFileType (hFile=0x264) returned 0x1 [0076.780] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e3b4) returned 1 [0076.780] GetFileType (hFile=0x264) returned 0x1 [0076.780] GetFileSize (in: hFile=0x264, lpFileSizeHigh=0x31e4c0 | out: lpFileSizeHigh=0x31e4c0*=0x0) returned 0x398 [0076.780] ReadFile (in: hFile=0x264, lpBuffer=0x284bb80, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x31e46c, lpOverlapped=0x0 | out: lpBuffer=0x284bb80*, lpNumberOfBytesRead=0x31e46c*=0x398, lpOverlapped=0x0) returned 1 [0076.823] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\YG1R61Z8\\BBndhJA[1].png", nBufferLength=0x105, lpBuffer=0x31deb0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\YG1R61Z8\\BBndhJA[1].png", lpFilePart=0x0) returned 0x7e [0076.823] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e3a4) returned 1 [0076.824] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\YG1R61Z8\\BBndhJA[1].png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\yg1r61z8\\bbndhja[1].png"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x264 [0076.824] GetFileType (hFile=0x264) returned 0x1 [0076.824] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e3a0) returned 1 [0076.824] GetFileType (hFile=0x264) returned 0x1 [0076.824] WriteFile (in: hFile=0x264, lpBuffer=0x26996c4*, nNumberOfBytesToWrite=0x3a0, lpNumberOfBytesWritten=0x31e434, lpOverlapped=0x0 | out: lpBuffer=0x26996c4*, lpNumberOfBytesWritten=0x31e434*=0x3a0, lpOverlapped=0x0) returned 1 [0076.825] CloseHandle (hObject=0x264) returned 1 [0076.825] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\YG1R61Z8\\BBndhJA[1].png", nBufferLength=0x105, lpBuffer=0x31dfe4, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\YG1R61Z8\\BBndhJA[1].png", lpFilePart=0x0) returned 0x7e [0076.825] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\YG1R61Z8\\BBndhJA[1].png", nBufferLength=0x105, lpBuffer=0x31dfe4, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\YG1R61Z8\\BBndhJA[1].png", lpFilePart=0x0) returned 0x7e [0076.826] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e444) returned 1 [0076.826] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\YG1R61Z8\\BBndhJA[1].png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\yg1r61z8\\bbndhja[1].png"), fInfoLevelId=0x0, lpFileInformation=0x31e4c0 | out: lpFileInformation=0x31e4c0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x459f9950, ftCreationTime.dwHighDateTime=0x1d2faf3, ftLastAccessTime.dwLowDateTime=0x459f9950, ftLastAccessTime.dwHighDateTime=0x1d2faf3, ftLastWriteTime.dwLowDateTime=0x113b9620, ftLastWriteTime.dwHighDateTime=0x1d6eb7f, nFileSizeHigh=0x0, nFileSizeLow=0x3a0)) returned 1 [0076.826] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e440) returned 1 [0076.826] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\YG1R61Z8\\BBndhJA[1].png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\yg1r61z8\\bbndhja[1].png"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\YG1R61Z8\\BBndhJA[1].png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\yg1r61z8\\bbndhja[1].png")) returned 1 [0076.826] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\YG1R61Z8\\BBoqF0J[1].png", nBufferLength=0x105, lpBuffer=0x31dec4, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\YG1R61Z8\\BBoqF0J[1].png", lpFilePart=0x0) returned 0x7e [0076.826] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e3b8) returned 1 [0076.826] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\YG1R61Z8\\BBoqF0J[1].png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\yg1r61z8\\bboqf0j[1].png"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x264 [0076.826] GetFileType (hFile=0x264) returned 0x1 [0076.826] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e3b4) returned 1 [0076.826] GetFileType (hFile=0x264) returned 0x1 [0076.826] GetFileSize (in: hFile=0x264, lpFileSizeHigh=0x31e4c0 | out: lpFileSizeHigh=0x31e4c0*=0x0) returned 0x230 [0076.827] ReadFile (in: hFile=0x264, lpBuffer=0x269acd0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x31e46c, lpOverlapped=0x0 | out: lpBuffer=0x269acd0*, lpNumberOfBytesRead=0x31e46c*=0x230, lpOverlapped=0x0) returned 1 [0076.831] CloseHandle (hObject=0x264) returned 1 [0076.844] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\YG1R61Z8\\BBoqF0J[1].png", nBufferLength=0x105, lpBuffer=0x31deb0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\YG1R61Z8\\BBoqF0J[1].png", lpFilePart=0x0) returned 0x7e [0076.844] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e3a4) returned 1 [0076.844] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\YG1R61Z8\\BBoqF0J[1].png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\yg1r61z8\\bboqf0j[1].png"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x264 [0076.845] GetFileType (hFile=0x264) returned 0x1 [0076.845] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e3a0) returned 1 [0076.845] GetFileType (hFile=0x264) returned 0x1 [0076.845] WriteFile (in: hFile=0x264, lpBuffer=0x26e9900*, nNumberOfBytesToWrite=0x240, lpNumberOfBytesWritten=0x31e434, lpOverlapped=0x0 | out: lpBuffer=0x26e9900*, lpNumberOfBytesWritten=0x31e434*=0x240, lpOverlapped=0x0) returned 1 [0076.851] CloseHandle (hObject=0x264) returned 1 [0076.851] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\YG1R61Z8\\BBoqF0J[1].png", nBufferLength=0x105, lpBuffer=0x31dfe4, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\YG1R61Z8\\BBoqF0J[1].png", lpFilePart=0x0) returned 0x7e [0076.863] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\YG1R61Z8\\BBoqF0J[1].png", nBufferLength=0x105, lpBuffer=0x31dfe4, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\YG1R61Z8\\BBoqF0J[1].png", lpFilePart=0x0) returned 0x7e [0076.876] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e444) returned 1 [0076.876] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\YG1R61Z8\\BBoqF0J[1].png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\yg1r61z8\\bboqf0j[1].png"), fInfoLevelId=0x0, lpFileInformation=0x31e4c0 | out: lpFileInformation=0x31e4c0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x458c8e50, ftCreationTime.dwHighDateTime=0x1d2faf3, ftLastAccessTime.dwLowDateTime=0x458c8e50, ftLastAccessTime.dwHighDateTime=0x1d2faf3, ftLastWriteTime.dwLowDateTime=0x114058e0, ftLastWriteTime.dwHighDateTime=0x1d6eb7f, nFileSizeHigh=0x0, nFileSizeLow=0x240)) returned 1 [0076.876] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e440) returned 1 [0076.876] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\YG1R61Z8\\BBoqF0J[1].png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\yg1r61z8\\bboqf0j[1].png"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\YG1R61Z8\\BBoqF0J[1].png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\yg1r61z8\\bboqf0j[1].png")) returned 1 [0076.876] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\YG1R61Z8\\BBzjV9E[1].png", nBufferLength=0x105, lpBuffer=0x31dec4, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\YG1R61Z8\\BBzjV9E[1].png", lpFilePart=0x0) returned 0x7e [0076.876] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e3b8) returned 1 [0076.876] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\YG1R61Z8\\BBzjV9E[1].png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\yg1r61z8\\bbzjv9e[1].png"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x264 [0076.876] GetFileType (hFile=0x264) returned 0x1 [0076.876] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e3b4) returned 1 [0076.876] GetFileType (hFile=0x264) returned 0x1 [0076.877] GetFileSize (in: hFile=0x264, lpFileSizeHigh=0x31e4c0 | out: lpFileSizeHigh=0x31e4c0*=0x0) returned 0x116 [0076.877] ReadFile (in: hFile=0x264, lpBuffer=0x26eadf4, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x31e46c, lpOverlapped=0x0 | out: lpBuffer=0x26eadf4*, lpNumberOfBytesRead=0x31e46c*=0x116, lpOverlapped=0x0) returned 1 [0076.899] CloseHandle (hObject=0x264) returned 1 [0076.912] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\YG1R61Z8\\BBzjV9E[1].png", nBufferLength=0x105, lpBuffer=0x31deb0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\YG1R61Z8\\BBzjV9E[1].png", lpFilePart=0x0) returned 0x7e [0076.912] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e3a4) returned 1 [0076.912] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\YG1R61Z8\\BBzjV9E[1].png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\yg1r61z8\\bbzjv9e[1].png"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x264 [0076.913] GetFileType (hFile=0x264) returned 0x1 [0076.913] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e3a0) returned 1 [0076.913] GetFileType (hFile=0x264) returned 0x1 [0076.913] WriteFile (in: hFile=0x264, lpBuffer=0x2739324*, nNumberOfBytesToWrite=0x120, lpNumberOfBytesWritten=0x31e434, lpOverlapped=0x0 | out: lpBuffer=0x2739324*, lpNumberOfBytesWritten=0x31e434*=0x120, lpOverlapped=0x0) returned 1 [0076.914] CloseHandle (hObject=0x264) returned 1 [0076.914] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\YG1R61Z8\\BBzjV9E[1].png", nBufferLength=0x105, lpBuffer=0x31dfe4, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\YG1R61Z8\\BBzjV9E[1].png", lpFilePart=0x0) returned 0x7e [0076.914] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\YG1R61Z8\\BBzjV9E[1].png", nBufferLength=0x105, lpBuffer=0x31dfe4, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\YG1R61Z8\\BBzjV9E[1].png", lpFilePart=0x0) returned 0x7e [0076.914] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e444) returned 1 [0076.914] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\YG1R61Z8\\BBzjV9E[1].png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\yg1r61z8\\bbzjv9e[1].png"), fInfoLevelId=0x0, lpFileInformation=0x31e4c0 | out: lpFileInformation=0x31e4c0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x53063a30, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x53063a30, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x1149de60, ftLastWriteTime.dwHighDateTime=0x1d6eb7f, nFileSizeHigh=0x0, nFileSizeLow=0x120)) returned 1 [0076.915] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e440) returned 1 [0076.915] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\YG1R61Z8\\BBzjV9E[1].png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\yg1r61z8\\bbzjv9e[1].png"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\YG1R61Z8\\BBzjV9E[1].png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\yg1r61z8\\bbzjv9e[1].png")) returned 1 [0076.915] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\YG1R61Z8\\benefits-1[1].jpg", nBufferLength=0x105, lpBuffer=0x31dec4, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\YG1R61Z8\\benefits-1[1].jpg", lpFilePart=0x0) returned 0x81 [0076.915] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e3b8) returned 1 [0076.915] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\YG1R61Z8\\benefits-1[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\yg1r61z8\\benefits-1[1].jpg"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x264 [0076.915] GetFileType (hFile=0x264) returned 0x1 [0076.915] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e3b4) returned 1 [0076.915] GetFileType (hFile=0x264) returned 0x1 [0076.915] GetFileSize (in: hFile=0x264, lpFileSizeHigh=0x31e4c0 | out: lpFileSizeHigh=0x31e4c0*=0x0) returned 0x1fdaf [0076.915] ReadFile (in: hFile=0x264, lpBuffer=0x36793f0, nNumberOfBytesToRead=0x1fdaf, lpNumberOfBytesRead=0x31e46c, lpOverlapped=0x0 | out: lpBuffer=0x36793f0*, lpNumberOfBytesRead=0x31e46c*=0x1fdaf, lpOverlapped=0x0) returned 1 [0076.925] CloseHandle (hObject=0x264) returned 1 [0076.943] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\YG1R61Z8\\benefits-1[1].jpg", nBufferLength=0x105, lpBuffer=0x31deb0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\YG1R61Z8\\benefits-1[1].jpg", lpFilePart=0x0) returned 0x81 [0076.943] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e3a4) returned 1 [0076.943] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\YG1R61Z8\\benefits-1[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\yg1r61z8\\benefits-1[1].jpg"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x264 [0076.945] GetFileType (hFile=0x264) returned 0x1 [0076.945] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e3a0) returned 1 [0076.945] GetFileType (hFile=0x264) returned 0x1 [0076.945] WriteFile (in: hFile=0x264, lpBuffer=0x37188a0*, nNumberOfBytesToWrite=0x1fdb0, lpNumberOfBytesWritten=0x31e460, lpOverlapped=0x0 | out: lpBuffer=0x37188a0*, lpNumberOfBytesWritten=0x31e460*=0x1fdb0, lpOverlapped=0x0) returned 1 [0076.948] CloseHandle (hObject=0x264) returned 1 [0076.948] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\YG1R61Z8\\benefits-1[1].jpg", nBufferLength=0x105, lpBuffer=0x31dfe4, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\YG1R61Z8\\benefits-1[1].jpg", lpFilePart=0x0) returned 0x81 [0076.948] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\YG1R61Z8\\benefits-1[1].jpg", nBufferLength=0x105, lpBuffer=0x31dfe4, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\YG1R61Z8\\benefits-1[1].jpg", lpFilePart=0x0) returned 0x81 [0076.948] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e444) returned 1 [0076.948] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\YG1R61Z8\\benefits-1[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\yg1r61z8\\benefits-1[1].jpg"), fInfoLevelId=0x0, lpFileInformation=0x31e4c0 | out: lpFileInformation=0x31e4c0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x60cdb940, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x60cdb940, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x114ea120, ftLastWriteTime.dwHighDateTime=0x1d6eb7f, nFileSizeHigh=0x0, nFileSizeLow=0x1fdb0)) returned 1 [0076.948] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e440) returned 1 [0076.948] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\YG1R61Z8\\benefits-1[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\yg1r61z8\\benefits-1[1].jpg"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\YG1R61Z8\\benefits-1[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\yg1r61z8\\benefits-1[1].jpg")) returned 1 [0076.949] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\YG1R61Z8\\chrome_logo_2x[1].png", nBufferLength=0x105, lpBuffer=0x31dec4, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\YG1R61Z8\\chrome_logo_2x[1].png", lpFilePart=0x0) returned 0x85 [0076.949] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e3b8) returned 1 [0076.949] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\YG1R61Z8\\chrome_logo_2x[1].png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\yg1r61z8\\chrome_logo_2x[1].png"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x264 [0076.949] GetFileType (hFile=0x264) returned 0x1 [0076.949] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e3b4) returned 1 [0076.949] GetFileType (hFile=0x264) returned 0x1 [0076.949] GetFileSize (in: hFile=0x264, lpFileSizeHigh=0x31e4c0 | out: lpFileSizeHigh=0x31e4c0*=0x0) returned 0x1622 [0076.949] ReadFile (in: hFile=0x264, lpBuffer=0x2787abc, nNumberOfBytesToRead=0x1622, lpNumberOfBytesRead=0x31e46c, lpOverlapped=0x0 | out: lpBuffer=0x2787abc*, lpNumberOfBytesRead=0x31e46c*=0x1622, lpOverlapped=0x0) returned 1 [0076.951] CloseHandle (hObject=0x264) returned 1 [0076.964] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\YG1R61Z8\\chrome_logo_2x[1].png", nBufferLength=0x105, lpBuffer=0x31deb0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\YG1R61Z8\\chrome_logo_2x[1].png", lpFilePart=0x0) returned 0x85 [0076.964] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e3a4) returned 1 [0076.964] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\YG1R61Z8\\chrome_logo_2x[1].png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\yg1r61z8\\chrome_logo_2x[1].png"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x264 [0076.965] GetFileType (hFile=0x264) returned 0x1 [0076.965] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e3a0) returned 1 [0076.965] GetFileType (hFile=0x264) returned 0x1 [0076.965] WriteFile (in: hFile=0x264, lpBuffer=0x27db794*, nNumberOfBytesToWrite=0x1630, lpNumberOfBytesWritten=0x31e460, lpOverlapped=0x0 | out: lpBuffer=0x27db794*, lpNumberOfBytesWritten=0x31e460*=0x1630, lpOverlapped=0x0) returned 1 [0076.966] CloseHandle (hObject=0x264) returned 1 [0076.966] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\YG1R61Z8\\chrome_logo_2x[1].png", nBufferLength=0x105, lpBuffer=0x31dfe4, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\YG1R61Z8\\chrome_logo_2x[1].png", lpFilePart=0x0) returned 0x85 [0076.967] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\YG1R61Z8\\chrome_logo_2x[1].png", nBufferLength=0x105, lpBuffer=0x31dfe4, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\YG1R61Z8\\chrome_logo_2x[1].png", lpFilePart=0x0) returned 0x85 [0076.967] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e444) returned 1 [0076.967] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\YG1R61Z8\\chrome_logo_2x[1].png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\yg1r61z8\\chrome_logo_2x[1].png"), fInfoLevelId=0x0, lpFileInformation=0x31e4c0 | out: lpFileInformation=0x31e4c0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x60aec760, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x60aec760, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x11510280, ftLastWriteTime.dwHighDateTime=0x1d6eb7f, nFileSizeHigh=0x0, nFileSizeLow=0x1630)) returned 1 [0076.967] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e440) returned 1 [0076.967] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\YG1R61Z8\\chrome_logo_2x[1].png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\yg1r61z8\\chrome_logo_2x[1].png"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\YG1R61Z8\\chrome_logo_2x[1].png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\yg1r61z8\\chrome_logo_2x[1].png")) returned 1 [0076.967] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\YG1R61Z8\\close-icon[1].png", nBufferLength=0x105, lpBuffer=0x31dec4, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\YG1R61Z8\\close-icon[1].png", lpFilePart=0x0) returned 0x81 [0076.967] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e3b8) returned 1 [0076.967] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\YG1R61Z8\\close-icon[1].png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\yg1r61z8\\close-icon[1].png"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x264 [0076.968] GetFileType (hFile=0x264) returned 0x1 [0076.968] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e3b4) returned 1 [0076.968] GetFileType (hFile=0x264) returned 0x1 [0076.968] GetFileSize (in: hFile=0x264, lpFileSizeHigh=0x31e4c0 | out: lpFileSizeHigh=0x31e4c0*=0x0) returned 0x13d [0076.968] ReadFile (in: hFile=0x264, lpBuffer=0x27dd4ac, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x31e46c, lpOverlapped=0x0 | out: lpBuffer=0x27dd4ac*, lpNumberOfBytesRead=0x31e46c*=0x13d, lpOverlapped=0x0) returned 1 [0076.970] CloseHandle (hObject=0x264) returned 1 [0076.983] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\YG1R61Z8\\close-icon[1].png", nBufferLength=0x105, lpBuffer=0x31deb0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\YG1R61Z8\\close-icon[1].png", lpFilePart=0x0) returned 0x81 [0076.983] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e3a4) returned 1 [0076.984] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\YG1R61Z8\\close-icon[1].png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\yg1r61z8\\close-icon[1].png"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x264 [0076.984] GetFileType (hFile=0x264) returned 0x1 [0076.984] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e3a0) returned 1 [0076.985] GetFileType (hFile=0x264) returned 0x1 [0076.985] WriteFile (in: hFile=0x264, lpBuffer=0x282ba7c*, nNumberOfBytesToWrite=0x140, lpNumberOfBytesWritten=0x31e434, lpOverlapped=0x0 | out: lpBuffer=0x282ba7c*, lpNumberOfBytesWritten=0x31e434*=0x140, lpOverlapped=0x0) returned 1 [0076.985] CloseHandle (hObject=0x264) returned 1 [0076.985] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\YG1R61Z8\\close-icon[1].png", nBufferLength=0x105, lpBuffer=0x31dfe4, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\YG1R61Z8\\close-icon[1].png", lpFilePart=0x0) returned 0x81 [0076.986] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\YG1R61Z8\\close-icon[1].png", nBufferLength=0x105, lpBuffer=0x31dfe4, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\YG1R61Z8\\close-icon[1].png", lpFilePart=0x0) returned 0x81 [0076.986] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e444) returned 1 [0076.986] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\YG1R61Z8\\close-icon[1].png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\yg1r61z8\\close-icon[1].png"), fInfoLevelId=0x0, lpFileInformation=0x31e4c0 | out: lpFileInformation=0x31e4c0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x610b9d00, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x610b9d00, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x115363e0, ftLastWriteTime.dwHighDateTime=0x1d6eb7f, nFileSizeHigh=0x0, nFileSizeLow=0x140)) returned 1 [0076.986] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e440) returned 1 [0076.986] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\YG1R61Z8\\close-icon[1].png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\yg1r61z8\\close-icon[1].png"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\YG1R61Z8\\close-icon[1].png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\yg1r61z8\\close-icon[1].png")) returned 1 [0076.989] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\YG1R61Z8\\css[1].txt", nBufferLength=0x105, lpBuffer=0x31dec4, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\YG1R61Z8\\css[1].txt", lpFilePart=0x0) returned 0x7a [0076.989] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e3b8) returned 1 [0076.989] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\YG1R61Z8\\css[1].txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\yg1r61z8\\css[1].txt"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x264 [0076.989] GetFileType (hFile=0x264) returned 0x1 [0076.989] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e3b4) returned 1 [0076.990] GetFileType (hFile=0x264) returned 0x1 [0076.990] GetFileSize (in: hFile=0x264, lpFileSizeHigh=0x31e4c0 | out: lpFileSizeHigh=0x31e4c0*=0x0) returned 0x269b2 [0076.990] ReadFile (in: hFile=0x264, lpBuffer=0x3738670, nNumberOfBytesToRead=0x269b2, lpNumberOfBytesRead=0x31e46c, lpOverlapped=0x0 | out: lpBuffer=0x3738670*, lpNumberOfBytesRead=0x31e46c*=0x269b2, lpOverlapped=0x0) returned 1 [0076.993] CloseHandle (hObject=0x264) returned 1 [0077.040] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\YG1R61Z8\\css[1].txt", nBufferLength=0x105, lpBuffer=0x31deb0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\YG1R61Z8\\css[1].txt", lpFilePart=0x0) returned 0x7a [0077.040] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e3a4) returned 1 [0077.040] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\YG1R61Z8\\css[1].txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\yg1r61z8\\css[1].txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x264 [0077.042] GetFileType (hFile=0x264) returned 0x1 [0077.042] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e3a0) returned 1 [0077.042] GetFileType (hFile=0x264) returned 0x1 [0077.042] WriteFile (in: hFile=0x264, lpBuffer=0x37f9760*, nNumberOfBytesToWrite=0x269c0, lpNumberOfBytesWritten=0x31e460, lpOverlapped=0x0 | out: lpBuffer=0x37f9760*, lpNumberOfBytesWritten=0x31e460*=0x269c0, lpOverlapped=0x0) returned 1 [0077.045] CloseHandle (hObject=0x264) returned 1 [0077.046] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\YG1R61Z8\\css[1].txt", nBufferLength=0x105, lpBuffer=0x31dfe4, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\YG1R61Z8\\css[1].txt", lpFilePart=0x0) returned 0x7a [0077.046] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\YG1R61Z8\\css[1].txt", nBufferLength=0x105, lpBuffer=0x31dfe4, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\YG1R61Z8\\css[1].txt", lpFilePart=0x0) returned 0x7a [0077.046] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e444) returned 1 [0077.046] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\YG1R61Z8\\css[1].txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\yg1r61z8\\css[1].txt"), fInfoLevelId=0x0, lpFileInformation=0x31e4c0 | out: lpFileInformation=0x31e4c0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x54e4ae90, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x54e4ae90, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x115ce960, ftLastWriteTime.dwHighDateTime=0x1d6eb7f, nFileSizeHigh=0x0, nFileSizeLow=0x269c0)) returned 1 [0077.046] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e440) returned 1 [0077.046] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\YG1R61Z8\\css[1].txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\yg1r61z8\\css[1].txt"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\YG1R61Z8\\css[1].txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\yg1r61z8\\css[1].txt")) returned 1 [0077.046] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\YG1R61Z8\\eula-win[1].jpg", nBufferLength=0x105, lpBuffer=0x31dec4, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\YG1R61Z8\\eula-win[1].jpg", lpFilePart=0x0) returned 0x7f [0077.046] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e3b8) returned 1 [0077.046] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\YG1R61Z8\\eula-win[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\yg1r61z8\\eula-win[1].jpg"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x264 [0077.046] GetFileType (hFile=0x264) returned 0x1 [0077.046] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e3b4) returned 1 [0077.047] GetFileType (hFile=0x264) returned 0x1 [0077.047] GetFileSize (in: hFile=0x264, lpFileSizeHigh=0x31e4c0 | out: lpFileSizeHigh=0x31e4c0*=0x0) returned 0x5244 [0077.047] ReadFile (in: hFile=0x264, lpBuffer=0x2679dcc, nNumberOfBytesToRead=0x5244, lpNumberOfBytesRead=0x31e46c, lpOverlapped=0x0 | out: lpBuffer=0x2679dcc*, lpNumberOfBytesRead=0x31e46c*=0x5244, lpOverlapped=0x0) returned 1 [0077.051] CloseHandle (hObject=0x264) returned 1 [0077.065] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\YG1R61Z8\\eula-win[1].jpg", nBufferLength=0x105, lpBuffer=0x31deb0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\YG1R61Z8\\eula-win[1].jpg", lpFilePart=0x0) returned 0x7f [0077.065] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e3a4) returned 1 [0077.065] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\YG1R61Z8\\eula-win[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\yg1r61z8\\eula-win[1].jpg"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x264 [0077.066] GetFileType (hFile=0x264) returned 0x1 [0077.066] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e3a0) returned 1 [0077.066] GetFileType (hFile=0x264) returned 0x1 [0077.066] WriteFile (in: hFile=0x264, lpBuffer=0x26e089c*, nNumberOfBytesToWrite=0x5250, lpNumberOfBytesWritten=0x31e460, lpOverlapped=0x0 | out: lpBuffer=0x26e089c*, lpNumberOfBytesWritten=0x31e460*=0x5250, lpOverlapped=0x0) returned 1 [0077.067] CloseHandle (hObject=0x264) returned 1 [0077.067] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\YG1R61Z8\\eula-win[1].jpg", nBufferLength=0x105, lpBuffer=0x31dfe4, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\YG1R61Z8\\eula-win[1].jpg", lpFilePart=0x0) returned 0x7f [0077.067] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\YG1R61Z8\\eula-win[1].jpg", nBufferLength=0x105, lpBuffer=0x31dfe4, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\YG1R61Z8\\eula-win[1].jpg", lpFilePart=0x0) returned 0x7f [0077.067] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e444) returned 1 [0077.067] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\YG1R61Z8\\eula-win[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\yg1r61z8\\eula-win[1].jpg"), fInfoLevelId=0x0, lpFileInformation=0x31e4c0 | out: lpFileInformation=0x31e4c0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x64009240, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x64009240, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x1161ac20, ftLastWriteTime.dwHighDateTime=0x1d6eb7f, nFileSizeHigh=0x0, nFileSizeLow=0x5250)) returned 1 [0077.068] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e440) returned 1 [0077.068] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\YG1R61Z8\\eula-win[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\yg1r61z8\\eula-win[1].jpg"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\YG1R61Z8\\eula-win[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\yg1r61z8\\eula-win[1].jpg")) returned 1 [0077.068] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\YG1R61Z8\\wc-addons[1].css", nBufferLength=0x105, lpBuffer=0x31dec4, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\YG1R61Z8\\wc-addons[1].css", lpFilePart=0x0) returned 0x80 [0077.068] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e3b8) returned 1 [0077.068] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\YG1R61Z8\\wc-addons[1].css" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\yg1r61z8\\wc-addons[1].css"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x264 [0077.069] GetFileType (hFile=0x264) returned 0x1 [0077.069] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e3b4) returned 1 [0077.069] GetFileType (hFile=0x264) returned 0x1 [0077.069] GetFileSize (in: hFile=0x264, lpFileSizeHigh=0x31e4c0 | out: lpFileSizeHigh=0x31e4c0*=0x0) returned 0x24fea [0077.069] ReadFile (in: hFile=0x264, lpBuffer=0x3820140, nNumberOfBytesToRead=0x24fea, lpNumberOfBytesRead=0x31e46c, lpOverlapped=0x0 | out: lpBuffer=0x3820140*, lpNumberOfBytesRead=0x31e46c*=0x24fea, lpOverlapped=0x0) returned 1 [0077.072] CloseHandle (hObject=0x264) returned 1 [0077.092] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\YG1R61Z8\\wc-addons[1].css", nBufferLength=0x105, lpBuffer=0x31deb0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\YG1R61Z8\\wc-addons[1].css", lpFilePart=0x0) returned 0x80 [0077.092] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e3a4) returned 1 [0077.092] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\YG1R61Z8\\wc-addons[1].css" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\yg1r61z8\\wc-addons[1].css"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x264 [0077.094] GetFileType (hFile=0x264) returned 0x1 [0077.094] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e3a0) returned 1 [0077.094] GetFileType (hFile=0x264) returned 0x1 [0077.094] WriteFile (in: hFile=0x264, lpBuffer=0x36ad490*, nNumberOfBytesToWrite=0x24ff0, lpNumberOfBytesWritten=0x31e460, lpOverlapped=0x0 | out: lpBuffer=0x36ad490*, lpNumberOfBytesWritten=0x31e460*=0x24ff0, lpOverlapped=0x0) returned 1 [0077.097] CloseHandle (hObject=0x264) returned 1 [0077.097] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\YG1R61Z8\\wc-addons[1].css", nBufferLength=0x105, lpBuffer=0x31dfe4, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\YG1R61Z8\\wc-addons[1].css", lpFilePart=0x0) returned 0x80 [0077.097] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\YG1R61Z8\\wc-addons[1].css", nBufferLength=0x105, lpBuffer=0x31dfe4, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\YG1R61Z8\\wc-addons[1].css", lpFilePart=0x0) returned 0x80 [0077.097] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e444) returned 1 [0077.097] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\YG1R61Z8\\wc-addons[1].css" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\yg1r61z8\\wc-addons[1].css"), fInfoLevelId=0x0, lpFileInformation=0x31e4c0 | out: lpFileInformation=0x31e4c0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x54c35b50, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x54c35b50, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x11666ee0, ftLastWriteTime.dwHighDateTime=0x1d6eb7f, nFileSizeHigh=0x0, nFileSizeLow=0x24ff0)) returned 1 [0077.097] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e440) returned 1 [0077.098] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\YG1R61Z8\\wc-addons[1].css" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\yg1r61z8\\wc-addons[1].css"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\YG1R61Z8\\wc-addons[1].css" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\yg1r61z8\\wc-addons[1].css")) returned 1 [0077.098] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e5dc) returned 1 [0077.098] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Virtualized", nBufferLength=0x105, lpBuffer=0x31e0e4, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Virtualized", lpFilePart=0x0) returned 0x62 [0077.098] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Virtualized\\", nBufferLength=0x105, lpBuffer=0x31e0b8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Virtualized\\", lpFilePart=0x0) returned 0x63 [0077.098] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Virtualized\\*", lpFindFileData=0x31e304 | out: lpFindFileData=0x31e304*(dwFileAttributes=0x2012, ftCreationTime.dwLowDateTime=0x28d257a0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x50f82a50, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x50f82a50, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x382000 [0077.099] FindNextFileW (in: hFindFile=0x382000, lpFindFileData=0x31e314 | out: lpFindFileData=0x31e314*(dwFileAttributes=0x2012, ftCreationTime.dwLowDateTime=0x28d257a0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x50f82a50, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x50f82a50, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0077.099] FindNextFileW (in: hFindFile=0x382000, lpFindFileData=0x31e314 | out: lpFindFileData=0x31e314*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x50f82a50, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x50f82a50, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x50f82a50, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="C", cAlternateFileName="")) returned 1 [0077.099] FindNextFileW (in: hFindFile=0x382000, lpFindFileData=0x31e314 | out: lpFindFileData=0x31e314*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x50f82a50, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x50f82a50, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x50f82a50, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="C", cAlternateFileName="")) returned 0 [0077.099] FindClose (in: hFindFile=0x382000 | out: hFindFile=0x382000) returned 1 [0077.099] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e59c) returned 1 [0077.099] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e5a8) returned 1 [0077.099] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e5dc) returned 1 [0077.099] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Virtualized", nBufferLength=0x105, lpBuffer=0x31e0e4, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Virtualized", lpFilePart=0x0) returned 0x62 [0077.099] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Virtualized\\", nBufferLength=0x105, lpBuffer=0x31e0b8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Virtualized\\", lpFilePart=0x0) returned 0x63 [0077.100] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Virtualized\\*", lpFindFileData=0x31e304 | out: lpFindFileData=0x31e304*(dwFileAttributes=0x2012, ftCreationTime.dwLowDateTime=0x28d257a0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x50f82a50, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x50f82a50, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x382000 [0077.100] FindNextFileW (in: hFindFile=0x382000, lpFindFileData=0x31e314 | out: lpFindFileData=0x31e314*(dwFileAttributes=0x2012, ftCreationTime.dwLowDateTime=0x28d257a0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x50f82a50, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x50f82a50, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0077.100] FindNextFileW (in: hFindFile=0x382000, lpFindFileData=0x31e314 | out: lpFindFileData=0x31e314*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x50f82a50, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x50f82a50, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x50f82a50, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="C", cAlternateFileName="")) returned 1 [0077.100] FindNextFileW (in: hFindFile=0x382000, lpFindFileData=0x31e314 | out: lpFindFileData=0x31e314*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0077.100] FindClose (in: hFindFile=0x382000 | out: hFindFile=0x382000) returned 1 [0077.100] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e59c) returned 1 [0077.100] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e5a8) returned 1 [0077.100] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e564) returned 1 [0077.100] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Virtualized\\C", nBufferLength=0x105, lpBuffer=0x31e06c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Virtualized\\C", lpFilePart=0x0) returned 0x64 [0077.100] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Virtualized\\C\\", nBufferLength=0x105, lpBuffer=0x31e040, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Virtualized\\C\\", lpFilePart=0x0) returned 0x65 [0077.100] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Virtualized\\C\\*", lpFindFileData=0x31e28c | out: lpFindFileData=0x31e28c*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x50f82a50, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x50f82a50, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x50f82a50, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x382000 [0077.101] FindNextFileW (in: hFindFile=0x382000, lpFindFileData=0x31e29c | out: lpFindFileData=0x31e29c*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x50f82a50, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x50f82a50, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x50f82a50, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0077.102] FindNextFileW (in: hFindFile=0x382000, lpFindFileData=0x31e29c | out: lpFindFileData=0x31e29c*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x50f82a50, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x50f82a50, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x50f82a50, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Users", cAlternateFileName="")) returned 1 [0077.102] FindNextFileW (in: hFindFile=0x382000, lpFindFileData=0x31e29c | out: lpFindFileData=0x31e29c*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x50f82a50, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x50f82a50, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x50f82a50, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Users", cAlternateFileName="")) returned 0 [0077.102] FindClose (in: hFindFile=0x382000 | out: hFindFile=0x382000) returned 1 [0077.102] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e524) returned 1 [0077.102] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e530) returned 1 [0077.102] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e564) returned 1 [0077.102] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Virtualized\\C", nBufferLength=0x105, lpBuffer=0x31e06c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Virtualized\\C", lpFilePart=0x0) returned 0x64 [0077.102] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Virtualized\\C\\", nBufferLength=0x105, lpBuffer=0x31e040, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Virtualized\\C\\", lpFilePart=0x0) returned 0x65 [0077.102] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Virtualized\\C\\*", lpFindFileData=0x31e28c | out: lpFindFileData=0x31e28c*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x50f82a50, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x50f82a50, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x50f82a50, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x382000 [0077.102] FindNextFileW (in: hFindFile=0x382000, lpFindFileData=0x31e29c | out: lpFindFileData=0x31e29c*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x50f82a50, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x50f82a50, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x50f82a50, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0077.103] FindNextFileW (in: hFindFile=0x382000, lpFindFileData=0x31e29c | out: lpFindFileData=0x31e29c*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x50f82a50, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x50f82a50, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x50f82a50, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Users", cAlternateFileName="")) returned 1 [0077.103] FindNextFileW (in: hFindFile=0x382000, lpFindFileData=0x31e29c | out: lpFindFileData=0x31e29c*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0077.103] FindClose (in: hFindFile=0x382000 | out: hFindFile=0x382000) returned 1 [0077.103] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e524) returned 1 [0077.103] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e530) returned 1 [0077.103] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e4ec) returned 1 [0077.103] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Virtualized\\C\\Users", nBufferLength=0x105, lpBuffer=0x31dff4, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Virtualized\\C\\Users", lpFilePart=0x0) returned 0x6a [0077.103] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Virtualized\\C\\Users\\", nBufferLength=0x105, lpBuffer=0x31dfc8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Virtualized\\C\\Users\\", lpFilePart=0x0) returned 0x6b [0077.103] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Virtualized\\C\\Users\\*", lpFindFileData=0x31e214 | out: lpFindFileData=0x31e214*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x50f82a50, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x50f82a50, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x50f82a50, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x382000 [0077.103] FindNextFileW (in: hFindFile=0x382000, lpFindFileData=0x31e224 | out: lpFindFileData=0x31e224*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x50f82a50, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x50f82a50, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x50f82a50, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0077.104] FindNextFileW (in: hFindFile=0x382000, lpFindFileData=0x31e224 | out: lpFindFileData=0x31e224*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x50f82a50, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x50f82a50, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x50f82a50, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="5p5NrGJn0jS HALPmcxz", cAlternateFileName="5P5NRG~1")) returned 1 [0077.104] FindNextFileW (in: hFindFile=0x382000, lpFindFileData=0x31e224 | out: lpFindFileData=0x31e224*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x50f82a50, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x50f82a50, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x50f82a50, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="5p5NrGJn0jS HALPmcxz", cAlternateFileName="5P5NRG~1")) returned 0 [0077.104] FindClose (in: hFindFile=0x382000 | out: hFindFile=0x382000) returned 1 [0077.104] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e4ac) returned 1 [0077.104] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e4b8) returned 1 [0077.104] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e4ec) returned 1 [0077.104] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Virtualized\\C\\Users", nBufferLength=0x105, lpBuffer=0x31dff4, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Virtualized\\C\\Users", lpFilePart=0x0) returned 0x6a [0077.104] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Virtualized\\C\\Users\\", nBufferLength=0x105, lpBuffer=0x31dfc8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Virtualized\\C\\Users\\", lpFilePart=0x0) returned 0x6b [0077.104] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Virtualized\\C\\Users\\*", lpFindFileData=0x31e214 | out: lpFindFileData=0x31e214*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x50f82a50, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x50f82a50, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x50f82a50, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x382000 [0077.104] FindNextFileW (in: hFindFile=0x382000, lpFindFileData=0x31e224 | out: lpFindFileData=0x31e224*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x50f82a50, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x50f82a50, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x50f82a50, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0077.105] FindNextFileW (in: hFindFile=0x382000, lpFindFileData=0x31e224 | out: lpFindFileData=0x31e224*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x50f82a50, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x50f82a50, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x50f82a50, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="5p5NrGJn0jS HALPmcxz", cAlternateFileName="5P5NRG~1")) returned 1 [0077.105] FindNextFileW (in: hFindFile=0x382000, lpFindFileData=0x31e224 | out: lpFindFileData=0x31e224*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0077.105] FindClose (in: hFindFile=0x382000 | out: hFindFile=0x382000) returned 1 [0077.105] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e4ac) returned 1 [0077.105] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e4b8) returned 1 [0077.105] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e474) returned 1 [0077.105] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Virtualized\\C\\Users\\5p5NrGJn0jS HALPmcxz", nBufferLength=0x105, lpBuffer=0x31df7c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Virtualized\\C\\Users\\5p5NrGJn0jS HALPmcxz", lpFilePart=0x0) returned 0x7f [0077.105] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Virtualized\\C\\Users\\5p5NrGJn0jS HALPmcxz\\", nBufferLength=0x105, lpBuffer=0x31df50, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Virtualized\\C\\Users\\5p5NrGJn0jS HALPmcxz\\", lpFilePart=0x0) returned 0x80 [0077.105] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Virtualized\\C\\Users\\5p5NrGJn0jS HALPmcxz\\*", lpFindFileData=0x31e19c | out: lpFindFileData=0x31e19c*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x50f82a50, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x50f82a50, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x50f82a50, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x382000 [0077.105] FindNextFileW (in: hFindFile=0x382000, lpFindFileData=0x31e1ac | out: lpFindFileData=0x31e1ac*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x50f82a50, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x50f82a50, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x50f82a50, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0077.106] FindNextFileW (in: hFindFile=0x382000, lpFindFileData=0x31e1ac | out: lpFindFileData=0x31e1ac*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x50f82a50, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x50f82a50, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x50f82a50, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="AppData", cAlternateFileName="")) returned 1 [0077.106] FindNextFileW (in: hFindFile=0x382000, lpFindFileData=0x31e1ac | out: lpFindFileData=0x31e1ac*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x50f82a50, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x50f82a50, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x50f82a50, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="AppData", cAlternateFileName="")) returned 0 [0077.106] FindClose (in: hFindFile=0x382000 | out: hFindFile=0x382000) returned 1 [0077.106] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e434) returned 1 [0077.106] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e440) returned 1 [0077.106] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e474) returned 1 [0077.106] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Virtualized\\C\\Users\\5p5NrGJn0jS HALPmcxz", nBufferLength=0x105, lpBuffer=0x31df7c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Virtualized\\C\\Users\\5p5NrGJn0jS HALPmcxz", lpFilePart=0x0) returned 0x7f [0077.106] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Virtualized\\C\\Users\\5p5NrGJn0jS HALPmcxz\\", nBufferLength=0x105, lpBuffer=0x31df50, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Virtualized\\C\\Users\\5p5NrGJn0jS HALPmcxz\\", lpFilePart=0x0) returned 0x80 [0077.106] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Virtualized\\C\\Users\\5p5NrGJn0jS HALPmcxz\\*", lpFindFileData=0x31e19c | out: lpFindFileData=0x31e19c*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x50f82a50, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x50f82a50, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x50f82a50, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x382000 [0077.106] FindNextFileW (in: hFindFile=0x382000, lpFindFileData=0x31e1ac | out: lpFindFileData=0x31e1ac*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x50f82a50, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x50f82a50, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x50f82a50, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0077.106] FindNextFileW (in: hFindFile=0x382000, lpFindFileData=0x31e1ac | out: lpFindFileData=0x31e1ac*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x50f82a50, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x50f82a50, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x50f82a50, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="AppData", cAlternateFileName="")) returned 1 [0077.107] FindNextFileW (in: hFindFile=0x382000, lpFindFileData=0x31e1ac | out: lpFindFileData=0x31e1ac*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0077.107] FindClose (in: hFindFile=0x382000 | out: hFindFile=0x382000) returned 1 [0077.107] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e434) returned 1 [0077.107] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e440) returned 1 [0077.107] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e3fc) returned 1 [0077.107] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Virtualized\\C\\Users\\5p5NrGJn0jS HALPmcxz\\AppData", nBufferLength=0x105, lpBuffer=0x31df04, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Virtualized\\C\\Users\\5p5NrGJn0jS HALPmcxz\\AppData", lpFilePart=0x0) returned 0x87 [0077.107] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Virtualized\\C\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\", nBufferLength=0x105, lpBuffer=0x31ded8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Virtualized\\C\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\", lpFilePart=0x0) returned 0x88 [0077.107] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Virtualized\\C\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\*", lpFindFileData=0x31e124 | out: lpFindFileData=0x31e124*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x50f82a50, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x50f82a50, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x50f82a50, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x382000 [0077.108] FindNextFileW (in: hFindFile=0x382000, lpFindFileData=0x31e134 | out: lpFindFileData=0x31e134*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x50f82a50, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x50f82a50, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x50f82a50, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0077.108] FindNextFileW (in: hFindFile=0x382000, lpFindFileData=0x31e134 | out: lpFindFileData=0x31e134*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x50f82a50, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x50f82a50, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x50f82a50, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Roaming", cAlternateFileName="")) returned 1 [0077.108] FindNextFileW (in: hFindFile=0x382000, lpFindFileData=0x31e134 | out: lpFindFileData=0x31e134*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x50f82a50, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x50f82a50, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x50f82a50, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Roaming", cAlternateFileName="")) returned 0 [0077.108] FindClose (in: hFindFile=0x382000 | out: hFindFile=0x382000) returned 1 [0077.108] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e3bc) returned 1 [0077.108] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e3c8) returned 1 [0077.108] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e3fc) returned 1 [0077.108] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Virtualized\\C\\Users\\5p5NrGJn0jS HALPmcxz\\AppData", nBufferLength=0x105, lpBuffer=0x31df04, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Virtualized\\C\\Users\\5p5NrGJn0jS HALPmcxz\\AppData", lpFilePart=0x0) returned 0x87 [0077.109] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Virtualized\\C\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\", nBufferLength=0x105, lpBuffer=0x31ded8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Virtualized\\C\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\", lpFilePart=0x0) returned 0x88 [0077.109] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Virtualized\\C\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\*", lpFindFileData=0x31e124 | out: lpFindFileData=0x31e124*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x50f82a50, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x50f82a50, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x50f82a50, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x382000 [0077.109] FindNextFileW (in: hFindFile=0x382000, lpFindFileData=0x31e134 | out: lpFindFileData=0x31e134*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x50f82a50, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x50f82a50, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x50f82a50, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0077.109] FindNextFileW (in: hFindFile=0x382000, lpFindFileData=0x31e134 | out: lpFindFileData=0x31e134*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x50f82a50, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x50f82a50, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x50f82a50, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Roaming", cAlternateFileName="")) returned 1 [0077.109] FindNextFileW (in: hFindFile=0x382000, lpFindFileData=0x31e134 | out: lpFindFileData=0x31e134*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0077.109] FindClose (in: hFindFile=0x382000 | out: hFindFile=0x382000) returned 1 [0077.109] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e3bc) returned 1 [0077.109] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e3c8) returned 1 [0077.109] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e384) returned 1 [0077.109] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Virtualized\\C\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming", nBufferLength=0x105, lpBuffer=0x31de8c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Virtualized\\C\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming", lpFilePart=0x0) returned 0x8f [0077.109] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Virtualized\\C\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\", nBufferLength=0x105, lpBuffer=0x31de60, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Virtualized\\C\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\", lpFilePart=0x0) returned 0x90 [0077.109] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Virtualized\\C\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\*", lpFindFileData=0x31e0ac | out: lpFindFileData=0x31e0ac*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x50f82a50, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x50f82a50, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x50f82a50, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x382000 [0077.110] FindNextFileW (in: hFindFile=0x382000, lpFindFileData=0x31e0bc | out: lpFindFileData=0x31e0bc*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x50f82a50, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x50f82a50, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x50f82a50, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0077.110] FindNextFileW (in: hFindFile=0x382000, lpFindFileData=0x31e0bc | out: lpFindFileData=0x31e0bc*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x50f82a50, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x50f82a50, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x50f82a50, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft", cAlternateFileName="MICROS~1")) returned 1 [0077.110] FindNextFileW (in: hFindFile=0x382000, lpFindFileData=0x31e0bc | out: lpFindFileData=0x31e0bc*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x50f82a50, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x50f82a50, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x50f82a50, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft", cAlternateFileName="MICROS~1")) returned 0 [0077.110] FindClose (in: hFindFile=0x382000 | out: hFindFile=0x382000) returned 1 [0077.110] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e344) returned 1 [0077.110] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e350) returned 1 [0077.110] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e384) returned 1 [0077.110] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Virtualized\\C\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming", nBufferLength=0x105, lpBuffer=0x31de8c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Virtualized\\C\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming", lpFilePart=0x0) returned 0x8f [0077.110] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Virtualized\\C\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\", nBufferLength=0x105, lpBuffer=0x31de60, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Virtualized\\C\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\", lpFilePart=0x0) returned 0x90 [0077.110] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Virtualized\\C\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\*", lpFindFileData=0x31e0ac | out: lpFindFileData=0x31e0ac*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x50f82a50, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x50f82a50, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x50f82a50, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x382000 [0077.111] FindNextFileW (in: hFindFile=0x382000, lpFindFileData=0x31e0bc | out: lpFindFileData=0x31e0bc*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x50f82a50, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x50f82a50, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x50f82a50, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0077.111] FindNextFileW (in: hFindFile=0x382000, lpFindFileData=0x31e0bc | out: lpFindFileData=0x31e0bc*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x50f82a50, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x50f82a50, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x50f82a50, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft", cAlternateFileName="MICROS~1")) returned 1 [0077.111] FindNextFileW (in: hFindFile=0x382000, lpFindFileData=0x31e0bc | out: lpFindFileData=0x31e0bc*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0077.111] FindClose (in: hFindFile=0x382000 | out: hFindFile=0x382000) returned 1 [0077.111] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e344) returned 1 [0077.111] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e350) returned 1 [0077.111] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e30c) returned 1 [0077.111] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Virtualized\\C\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft", nBufferLength=0x105, lpBuffer=0x31de14, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Virtualized\\C\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft", lpFilePart=0x0) returned 0x99 [0077.111] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Virtualized\\C\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\", nBufferLength=0x105, lpBuffer=0x31dde8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Virtualized\\C\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\", lpFilePart=0x0) returned 0x9a [0077.111] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Virtualized\\C\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\*", lpFindFileData=0x31e034 | out: lpFindFileData=0x31e034*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x50f82a50, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x50f82a50, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x50f82a50, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x382000 [0077.112] FindNextFileW (in: hFindFile=0x382000, lpFindFileData=0x31e044 | out: lpFindFileData=0x31e044*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x50f82a50, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x50f82a50, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x50f82a50, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0077.112] FindNextFileW (in: hFindFile=0x382000, lpFindFileData=0x31e044 | out: lpFindFileData=0x31e044*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x50f82a50, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x50f82a50, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x50f82a50, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Windows", cAlternateFileName="")) returned 1 [0077.112] FindNextFileW (in: hFindFile=0x382000, lpFindFileData=0x31e044 | out: lpFindFileData=0x31e044*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x50f82a50, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x50f82a50, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x50f82a50, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Windows", cAlternateFileName="")) returned 0 [0077.112] FindClose (in: hFindFile=0x382000 | out: hFindFile=0x382000) returned 1 [0077.112] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e2cc) returned 1 [0077.112] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e2d8) returned 1 [0077.112] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e30c) returned 1 [0077.112] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Virtualized\\C\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft", nBufferLength=0x105, lpBuffer=0x31de14, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Virtualized\\C\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft", lpFilePart=0x0) returned 0x99 [0077.112] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Virtualized\\C\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\", nBufferLength=0x105, lpBuffer=0x31dde8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Virtualized\\C\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\", lpFilePart=0x0) returned 0x9a [0077.112] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Virtualized\\C\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\*", lpFindFileData=0x31e034 | out: lpFindFileData=0x31e034*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x50f82a50, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x50f82a50, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x50f82a50, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x382000 [0077.112] FindNextFileW (in: hFindFile=0x382000, lpFindFileData=0x31e044 | out: lpFindFileData=0x31e044*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x50f82a50, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x50f82a50, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x50f82a50, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0077.113] FindNextFileW (in: hFindFile=0x382000, lpFindFileData=0x31e044 | out: lpFindFileData=0x31e044*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x50f82a50, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x50f82a50, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x50f82a50, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Windows", cAlternateFileName="")) returned 1 [0077.113] FindNextFileW (in: hFindFile=0x382000, lpFindFileData=0x31e044 | out: lpFindFileData=0x31e044*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0077.113] FindClose (in: hFindFile=0x382000 | out: hFindFile=0x382000) returned 1 [0077.113] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e2cc) returned 1 [0077.113] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e2d8) returned 1 [0077.113] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e294) returned 1 [0077.113] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Virtualized\\C\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows", nBufferLength=0x105, lpBuffer=0x31dd9c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Virtualized\\C\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows", lpFilePart=0x0) returned 0xa1 [0077.113] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Virtualized\\C\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\", nBufferLength=0x105, lpBuffer=0x31dd70, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Virtualized\\C\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\", lpFilePart=0x0) returned 0xa2 [0077.113] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Virtualized\\C\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\*", lpFindFileData=0x31dfbc | out: lpFindFileData=0x31dfbc*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x50f82a50, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x50f82a50, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x50f82a50, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x382000 [0077.113] FindNextFileW (in: hFindFile=0x382000, lpFindFileData=0x31dfcc | out: lpFindFileData=0x31dfcc*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x50f82a50, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x50f82a50, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x50f82a50, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0077.113] FindNextFileW (in: hFindFile=0x382000, lpFindFileData=0x31dfcc | out: lpFindFileData=0x31dfcc*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x50f82a50, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x50f82a50, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x50f82a50, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="PrivacIE", cAlternateFileName="")) returned 1 [0077.114] FindNextFileW (in: hFindFile=0x382000, lpFindFileData=0x31dfcc | out: lpFindFileData=0x31dfcc*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x50f82a50, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x50f82a50, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x50f82a50, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="PrivacIE", cAlternateFileName="")) returned 0 [0077.114] FindClose (in: hFindFile=0x382000 | out: hFindFile=0x382000) returned 1 [0077.114] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e254) returned 1 [0077.114] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e260) returned 1 [0077.114] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e294) returned 1 [0077.114] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Virtualized\\C\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows", nBufferLength=0x105, lpBuffer=0x31dd9c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Virtualized\\C\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows", lpFilePart=0x0) returned 0xa1 [0077.114] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Virtualized\\C\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\", nBufferLength=0x105, lpBuffer=0x31dd70, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Virtualized\\C\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\", lpFilePart=0x0) returned 0xa2 [0077.114] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Virtualized\\C\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\*", lpFindFileData=0x31dfbc | out: lpFindFileData=0x31dfbc*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x50f82a50, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x50f82a50, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x50f82a50, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x382000 [0077.114] FindNextFileW (in: hFindFile=0x382000, lpFindFileData=0x31dfcc | out: lpFindFileData=0x31dfcc*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x50f82a50, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x50f82a50, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x50f82a50, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0077.114] FindNextFileW (in: hFindFile=0x382000, lpFindFileData=0x31dfcc | out: lpFindFileData=0x31dfcc*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x50f82a50, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x50f82a50, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x50f82a50, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="PrivacIE", cAlternateFileName="")) returned 1 [0077.114] FindNextFileW (in: hFindFile=0x382000, lpFindFileData=0x31dfcc | out: lpFindFileData=0x31dfcc*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0077.115] FindClose (in: hFindFile=0x382000 | out: hFindFile=0x382000) returned 1 [0077.115] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e254) returned 1 [0077.115] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e260) returned 1 [0077.115] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e21c) returned 1 [0077.115] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Virtualized\\C\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\PrivacIE", nBufferLength=0x105, lpBuffer=0x31dd24, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Virtualized\\C\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\PrivacIE", lpFilePart=0x0) returned 0xaa [0077.115] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Virtualized\\C\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\PrivacIE\\", nBufferLength=0x105, lpBuffer=0x31dcf8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Virtualized\\C\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\PrivacIE\\", lpFilePart=0x0) returned 0xab [0077.115] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Virtualized\\C\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\PrivacIE\\*", lpFindFileData=0x31df44 | out: lpFindFileData=0x31df44*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x50f82a50, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x50f82a50, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x50f82a50, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x382000 [0077.115] FindNextFileW (in: hFindFile=0x382000, lpFindFileData=0x31df54 | out: lpFindFileData=0x31df54*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x50f82a50, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x50f82a50, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x50f82a50, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0077.115] FindNextFileW (in: hFindFile=0x382000, lpFindFileData=0x31df54 | out: lpFindFileData=0x31df54*(dwFileAttributes=0x2012, ftCreationTime.dwLowDateTime=0x50f82a50, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x50f82a50, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x50f82a50, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Low", cAlternateFileName="")) returned 1 [0077.115] FindNextFileW (in: hFindFile=0x382000, lpFindFileData=0x31df54 | out: lpFindFileData=0x31df54*(dwFileAttributes=0x2012, ftCreationTime.dwLowDateTime=0x50f82a50, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x50f82a50, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x50f82a50, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Low", cAlternateFileName="")) returned 0 [0077.116] FindClose (in: hFindFile=0x382000 | out: hFindFile=0x382000) returned 1 [0077.116] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e1dc) returned 1 [0077.116] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e1e8) returned 1 [0077.116] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e21c) returned 1 [0077.116] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Virtualized\\C\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\PrivacIE", nBufferLength=0x105, lpBuffer=0x31dd24, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Virtualized\\C\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\PrivacIE", lpFilePart=0x0) returned 0xaa [0077.116] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Virtualized\\C\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\PrivacIE\\", nBufferLength=0x105, lpBuffer=0x31dcf8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Virtualized\\C\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\PrivacIE\\", lpFilePart=0x0) returned 0xab [0077.116] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Virtualized\\C\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\PrivacIE\\*", lpFindFileData=0x31df44 | out: lpFindFileData=0x31df44*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x50f82a50, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x50f82a50, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x50f82a50, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x382000 [0077.116] FindNextFileW (in: hFindFile=0x382000, lpFindFileData=0x31df54 | out: lpFindFileData=0x31df54*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x50f82a50, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x50f82a50, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x50f82a50, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0077.116] FindNextFileW (in: hFindFile=0x382000, lpFindFileData=0x31df54 | out: lpFindFileData=0x31df54*(dwFileAttributes=0x2012, ftCreationTime.dwLowDateTime=0x50f82a50, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x50f82a50, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x50f82a50, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Low", cAlternateFileName="")) returned 1 [0077.116] FindNextFileW (in: hFindFile=0x382000, lpFindFileData=0x31df54 | out: lpFindFileData=0x31df54*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0077.116] FindClose (in: hFindFile=0x382000 | out: hFindFile=0x382000) returned 1 [0077.116] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e1dc) returned 1 [0077.116] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e1e8) returned 1 [0077.116] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e1a4) returned 1 [0077.117] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Virtualized\\C\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\PrivacIE\\Low", nBufferLength=0x105, lpBuffer=0x31dcac, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Virtualized\\C\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\PrivacIE\\Low", lpFilePart=0x0) returned 0xae [0077.117] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Virtualized\\C\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\PrivacIE\\Low\\", nBufferLength=0x105, lpBuffer=0x31dc80, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Virtualized\\C\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\PrivacIE\\Low\\", lpFilePart=0x0) returned 0xaf [0077.117] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Virtualized\\C\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\PrivacIE\\Low\\*", lpFindFileData=0x31decc | out: lpFindFileData=0x31decc*(dwFileAttributes=0x2012, ftCreationTime.dwLowDateTime=0x50f82a50, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x50f82a50, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x50f82a50, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x382000 [0077.117] FindNextFileW (in: hFindFile=0x382000, lpFindFileData=0x31dedc | out: lpFindFileData=0x31dedc*(dwFileAttributes=0x2012, ftCreationTime.dwLowDateTime=0x50f82a50, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x50f82a50, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x50f82a50, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0077.117] FindNextFileW (in: hFindFile=0x382000, lpFindFileData=0x31dedc | out: lpFindFileData=0x31dedc*(dwFileAttributes=0x2012, ftCreationTime.dwLowDateTime=0x50f82a50, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x50f82a50, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x50f82a50, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 0 [0077.117] FindClose (in: hFindFile=0x382000 | out: hFindFile=0x382000) returned 1 [0077.117] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e164) returned 1 [0077.117] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e170) returned 1 [0077.117] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e1a4) returned 1 [0077.117] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Virtualized\\C\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\PrivacIE\\Low", nBufferLength=0x105, lpBuffer=0x31dcac, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Virtualized\\C\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\PrivacIE\\Low", lpFilePart=0x0) returned 0xae [0077.117] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Virtualized\\C\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\PrivacIE\\Low\\", nBufferLength=0x105, lpBuffer=0x31dc80, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Virtualized\\C\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\PrivacIE\\Low\\", lpFilePart=0x0) returned 0xaf [0077.117] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Virtualized\\C\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\PrivacIE\\Low\\*", lpFindFileData=0x31decc | out: lpFindFileData=0x31decc*(dwFileAttributes=0x2012, ftCreationTime.dwLowDateTime=0x50f82a50, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x50f82a50, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x50f82a50, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x382000 [0077.118] FindNextFileW (in: hFindFile=0x382000, lpFindFileData=0x31dedc | out: lpFindFileData=0x31dedc*(dwFileAttributes=0x2012, ftCreationTime.dwLowDateTime=0x50f82a50, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x50f82a50, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x50f82a50, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0077.118] FindNextFileW (in: hFindFile=0x382000, lpFindFileData=0x31dedc | out: lpFindFileData=0x31dedc*(dwFileAttributes=0x2012, ftCreationTime.dwLowDateTime=0x50f82a50, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x50f82a50, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x50f82a50, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 0 [0077.118] FindClose (in: hFindFile=0x382000 | out: hFindFile=0x382000) returned 1 [0077.118] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e164) returned 1 [0077.118] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e170) returned 1 [0077.118] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e654) returned 1 [0077.118] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Themes", nBufferLength=0x105, lpBuffer=0x31e15c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Themes", lpFilePart=0x0) returned 0x44 [0077.118] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Themes\\", nBufferLength=0x105, lpBuffer=0x31e130, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Themes\\", lpFilePart=0x0) returned 0x45 [0077.118] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Themes\\*", lpFindFileData=0x31e37c | out: lpFindFileData=0x31e37c*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xd8d1fc80, ftCreationTime.dwHighDateTime=0x1d3373f, ftLastAccessTime.dwLowDateTime=0xd8d1fc80, ftLastAccessTime.dwHighDateTime=0x1d3373f, ftLastWriteTime.dwLowDateTime=0xd8d1fc80, ftLastWriteTime.dwHighDateTime=0x1d3373f, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x382000 [0077.119] FindNextFileW (in: hFindFile=0x382000, lpFindFileData=0x31e38c | out: lpFindFileData=0x31e38c*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xd8d1fc80, ftCreationTime.dwHighDateTime=0x1d3373f, ftLastAccessTime.dwLowDateTime=0xd8d1fc80, ftLastAccessTime.dwHighDateTime=0x1d3373f, ftLastWriteTime.dwLowDateTime=0xd8d1fc80, ftLastWriteTime.dwHighDateTime=0x1d3373f, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0077.119] FindNextFileW (in: hFindFile=0x382000, lpFindFileData=0x31e38c | out: lpFindFileData=0x31e38c*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xd8d1fc80, ftCreationTime.dwHighDateTime=0x1d3373f, ftLastAccessTime.dwLowDateTime=0xd8d1fc80, ftLastAccessTime.dwHighDateTime=0x1d3373f, ftLastWriteTime.dwLowDateTime=0xd8d6bf40, ftLastWriteTime.dwHighDateTime=0x1d3373f, nFileSizeHigh=0x0, nFileSizeLow=0x70a, dwReserved0=0x0, dwReserved1=0x0, cFileName="Custom.theme", cAlternateFileName="CUSTOM~1.THE")) returned 1 [0077.119] FindNextFileW (in: hFindFile=0x382000, lpFindFileData=0x31e38c | out: lpFindFileData=0x31e38c*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0077.119] FindClose (in: hFindFile=0x382000 | out: hFindFile=0x382000) returned 1 [0077.119] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e614) returned 1 [0077.119] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e620) returned 1 [0077.119] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e654) returned 1 [0077.119] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Themes", nBufferLength=0x105, lpBuffer=0x31e15c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Themes", lpFilePart=0x0) returned 0x44 [0077.119] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Themes\\", nBufferLength=0x105, lpBuffer=0x31e130, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Themes\\", lpFilePart=0x0) returned 0x45 [0077.119] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Themes\\*", lpFindFileData=0x31e37c | out: lpFindFileData=0x31e37c*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xd8d1fc80, ftCreationTime.dwHighDateTime=0x1d3373f, ftLastAccessTime.dwLowDateTime=0xd8d1fc80, ftLastAccessTime.dwHighDateTime=0x1d3373f, ftLastWriteTime.dwLowDateTime=0xd8d1fc80, ftLastWriteTime.dwHighDateTime=0x1d3373f, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x382000 [0077.120] FindNextFileW (in: hFindFile=0x382000, lpFindFileData=0x31e38c | out: lpFindFileData=0x31e38c*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xd8d1fc80, ftCreationTime.dwHighDateTime=0x1d3373f, ftLastAccessTime.dwLowDateTime=0xd8d1fc80, ftLastAccessTime.dwHighDateTime=0x1d3373f, ftLastWriteTime.dwLowDateTime=0xd8d1fc80, ftLastWriteTime.dwHighDateTime=0x1d3373f, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0077.120] FindNextFileW (in: hFindFile=0x382000, lpFindFileData=0x31e38c | out: lpFindFileData=0x31e38c*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xd8d1fc80, ftCreationTime.dwHighDateTime=0x1d3373f, ftLastAccessTime.dwLowDateTime=0xd8d1fc80, ftLastAccessTime.dwHighDateTime=0x1d3373f, ftLastWriteTime.dwLowDateTime=0xd8d6bf40, ftLastWriteTime.dwHighDateTime=0x1d3373f, nFileSizeHigh=0x0, nFileSizeLow=0x70a, dwReserved0=0x0, dwReserved1=0x0, cFileName="Custom.theme", cAlternateFileName="CUSTOM~1.THE")) returned 1 [0077.120] FindNextFileW (in: hFindFile=0x382000, lpFindFileData=0x31e38c | out: lpFindFileData=0x31e38c*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xd8d1fc80, ftCreationTime.dwHighDateTime=0x1d3373f, ftLastAccessTime.dwLowDateTime=0xd8d1fc80, ftLastAccessTime.dwHighDateTime=0x1d3373f, ftLastWriteTime.dwLowDateTime=0xd8d6bf40, ftLastWriteTime.dwHighDateTime=0x1d3373f, nFileSizeHigh=0x0, nFileSizeLow=0x70a, dwReserved0=0x0, dwReserved1=0x0, cFileName="Custom.theme", cAlternateFileName="CUSTOM~1.THE")) returned 0 [0077.120] FindClose (in: hFindFile=0x382000 | out: hFindFile=0x382000) returned 1 [0077.120] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e614) returned 1 [0077.120] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e620) returned 1 [0077.120] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e654) returned 1 [0077.120] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\WER", nBufferLength=0x105, lpBuffer=0x31e15c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\WER", lpFilePart=0x0) returned 0x41 [0077.120] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\WER\\", nBufferLength=0x105, lpBuffer=0x31e130, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\WER\\", lpFilePart=0x0) returned 0x42 [0077.120] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\WER\\*", lpFindFileData=0x31e37c | out: lpFindFileData=0x31e37c*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x28d257a0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28d257a0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x4d26e3cf, ftLastWriteTime.dwHighDateTime=0x1cb8927, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x382000 [0077.121] FindNextFileW (in: hFindFile=0x382000, lpFindFileData=0x31e38c | out: lpFindFileData=0x31e38c*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x28d257a0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28d257a0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x4d26e3cf, ftLastWriteTime.dwHighDateTime=0x1cb8927, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0077.121] FindNextFileW (in: hFindFile=0x382000, lpFindFileData=0x31e38c | out: lpFindFileData=0x31e38c*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x28d257a0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28d257a0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x1b9b8e9c, ftLastWriteTime.dwHighDateTime=0x1cb892f, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="ERC", cAlternateFileName="")) returned 1 [0077.121] FindNextFileW (in: hFindFile=0x382000, lpFindFileData=0x31e38c | out: lpFindFileData=0x31e38c*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x28d257a0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28d257a0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x4d26e3cf, ftLastWriteTime.dwHighDateTime=0x1cb8927, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="ReportArchive", cAlternateFileName="REPORT~1")) returned 1 [0077.121] FindNextFileW (in: hFindFile=0x382000, lpFindFileData=0x31e38c | out: lpFindFileData=0x31e38c*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x28d257a0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28d257a0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x4d26e3cf, ftLastWriteTime.dwHighDateTime=0x1cb8927, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="ReportArchive", cAlternateFileName="REPORT~1")) returned 0 [0077.121] FindClose (in: hFindFile=0x382000 | out: hFindFile=0x382000) returned 1 [0077.121] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e614) returned 1 [0077.121] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e620) returned 1 [0077.121] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e654) returned 1 [0077.121] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\WER", nBufferLength=0x105, lpBuffer=0x31e15c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\WER", lpFilePart=0x0) returned 0x41 [0077.121] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\WER\\", nBufferLength=0x105, lpBuffer=0x31e130, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\WER\\", lpFilePart=0x0) returned 0x42 [0077.121] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\WER\\*", lpFindFileData=0x31e37c | out: lpFindFileData=0x31e37c*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x28d257a0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28d257a0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x4d26e3cf, ftLastWriteTime.dwHighDateTime=0x1cb8927, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x382000 [0077.122] FindNextFileW (in: hFindFile=0x382000, lpFindFileData=0x31e38c | out: lpFindFileData=0x31e38c*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x28d257a0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28d257a0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x4d26e3cf, ftLastWriteTime.dwHighDateTime=0x1cb8927, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0077.122] FindNextFileW (in: hFindFile=0x382000, lpFindFileData=0x31e38c | out: lpFindFileData=0x31e38c*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x28d257a0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28d257a0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x1b9b8e9c, ftLastWriteTime.dwHighDateTime=0x1cb892f, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="ERC", cAlternateFileName="")) returned 1 [0077.122] FindNextFileW (in: hFindFile=0x382000, lpFindFileData=0x31e38c | out: lpFindFileData=0x31e38c*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x28d257a0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28d257a0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x4d26e3cf, ftLastWriteTime.dwHighDateTime=0x1cb8927, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="ReportArchive", cAlternateFileName="REPORT~1")) returned 1 [0077.122] FindNextFileW (in: hFindFile=0x382000, lpFindFileData=0x31e38c | out: lpFindFileData=0x31e38c*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0077.122] FindClose (in: hFindFile=0x382000 | out: hFindFile=0x382000) returned 1 [0077.122] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e614) returned 1 [0077.122] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e620) returned 1 [0077.122] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e5dc) returned 1 [0077.122] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\WER\\ERC", nBufferLength=0x105, lpBuffer=0x31e0e4, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\WER\\ERC", lpFilePart=0x0) returned 0x45 [0077.122] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\WER\\ERC\\", nBufferLength=0x105, lpBuffer=0x31e0b8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\WER\\ERC\\", lpFilePart=0x0) returned 0x46 [0077.122] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\WER\\ERC\\*", lpFindFileData=0x31e304 | out: lpFindFileData=0x31e304*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x28d257a0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28d257a0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x1b9b8e9c, ftLastWriteTime.dwHighDateTime=0x1cb892f, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x382000 [0077.123] FindNextFileW (in: hFindFile=0x382000, lpFindFileData=0x31e314 | out: lpFindFileData=0x31e314*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x28d257a0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28d257a0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x1b9b8e9c, ftLastWriteTime.dwHighDateTime=0x1cb892f, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0077.123] FindNextFileW (in: hFindFile=0x382000, lpFindFileData=0x31e314 | out: lpFindFileData=0x31e314*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x28d257a0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28d257a0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x1b9b8e9c, ftLastWriteTime.dwHighDateTime=0x1cb892f, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 0 [0077.123] FindClose (in: hFindFile=0x382000 | out: hFindFile=0x382000) returned 1 [0077.123] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e59c) returned 1 [0077.123] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e5a8) returned 1 [0077.123] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e5dc) returned 1 [0077.123] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\WER\\ERC", nBufferLength=0x105, lpBuffer=0x31e0e4, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\WER\\ERC", lpFilePart=0x0) returned 0x45 [0077.123] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\WER\\ERC\\", nBufferLength=0x105, lpBuffer=0x31e0b8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\WER\\ERC\\", lpFilePart=0x0) returned 0x46 [0077.123] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\WER\\ERC\\*", lpFindFileData=0x31e304 | out: lpFindFileData=0x31e304*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x28d257a0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28d257a0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x1b9b8e9c, ftLastWriteTime.dwHighDateTime=0x1cb892f, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x382000 [0077.123] FindNextFileW (in: hFindFile=0x382000, lpFindFileData=0x31e314 | out: lpFindFileData=0x31e314*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x28d257a0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28d257a0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x1b9b8e9c, ftLastWriteTime.dwHighDateTime=0x1cb892f, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0077.123] FindNextFileW (in: hFindFile=0x382000, lpFindFileData=0x31e314 | out: lpFindFileData=0x31e314*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x28d257a0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28d257a0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x1b9b8e9c, ftLastWriteTime.dwHighDateTime=0x1cb892f, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 0 [0077.124] FindClose (in: hFindFile=0x382000 | out: hFindFile=0x382000) returned 1 [0077.124] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e59c) returned 1 [0077.124] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e5a8) returned 1 [0077.124] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e5dc) returned 1 [0077.124] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\WER\\ReportArchive", nBufferLength=0x105, lpBuffer=0x31e0e4, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\WER\\ReportArchive", lpFilePart=0x0) returned 0x4f [0077.124] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\WER\\ReportArchive\\", nBufferLength=0x105, lpBuffer=0x31e0b8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\WER\\ReportArchive\\", lpFilePart=0x0) returned 0x50 [0077.124] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\WER\\ReportArchive\\*", lpFindFileData=0x31e304 | out: lpFindFileData=0x31e304*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x28d257a0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28d257a0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x4d26e3cf, ftLastWriteTime.dwHighDateTime=0x1cb8927, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x382000 [0077.124] FindNextFileW (in: hFindFile=0x382000, lpFindFileData=0x31e314 | out: lpFindFileData=0x31e314*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x28d257a0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28d257a0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x4d26e3cf, ftLastWriteTime.dwHighDateTime=0x1cb8927, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0077.124] FindNextFileW (in: hFindFile=0x382000, lpFindFileData=0x31e314 | out: lpFindFileData=0x31e314*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x28d257a0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28d257a0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x4d26e3cf, ftLastWriteTime.dwHighDateTime=0x1cb8927, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 0 [0077.124] FindClose (in: hFindFile=0x382000 | out: hFindFile=0x382000) returned 1 [0077.124] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e59c) returned 1 [0077.124] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e5a8) returned 1 [0077.124] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e5dc) returned 1 [0077.124] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\WER\\ReportArchive", nBufferLength=0x105, lpBuffer=0x31e0e4, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\WER\\ReportArchive", lpFilePart=0x0) returned 0x4f [0077.124] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\WER\\ReportArchive\\", nBufferLength=0x105, lpBuffer=0x31e0b8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\WER\\ReportArchive\\", lpFilePart=0x0) returned 0x50 [0077.125] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\WER\\ReportArchive\\*", lpFindFileData=0x31e304 | out: lpFindFileData=0x31e304*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x28d257a0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28d257a0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x4d26e3cf, ftLastWriteTime.dwHighDateTime=0x1cb8927, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x382000 [0077.125] FindNextFileW (in: hFindFile=0x382000, lpFindFileData=0x31e314 | out: lpFindFileData=0x31e314*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x28d257a0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28d257a0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x4d26e3cf, ftLastWriteTime.dwHighDateTime=0x1cb8927, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0077.125] FindNextFileW (in: hFindFile=0x382000, lpFindFileData=0x31e314 | out: lpFindFileData=0x31e314*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x28d257a0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28d257a0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x4d26e3cf, ftLastWriteTime.dwHighDateTime=0x1cb8927, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 0 [0077.125] FindClose (in: hFindFile=0x382000 | out: hFindFile=0x382000) returned 1 [0077.125] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e59c) returned 1 [0077.125] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e5a8) returned 1 [0077.125] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e6cc) returned 1 [0077.125] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows Mail", nBufferLength=0x105, lpBuffer=0x31e1d4, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows Mail", lpFilePart=0x0) returned 0x42 [0077.125] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows Mail\\", nBufferLength=0x105, lpBuffer=0x31e1a8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows Mail\\", lpFilePart=0x0) returned 0x43 [0077.125] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows Mail\\*", lpFindFileData=0x31e3f4 | out: lpFindFileData=0x31e3f4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x28d257a0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x2c881c40, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x2c881c40, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x382000 [0077.127] FindNextFileW (in: hFindFile=0x382000, lpFindFileData=0x31e404 | out: lpFindFileData=0x31e404*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x28d257a0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x2c881c40, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x2c881c40, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0077.128] FindNextFileW (in: hFindFile=0x382000, lpFindFileData=0x31e404 | out: lpFindFileData=0x31e404*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x28e7c400, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28e7c400, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xf67dcad6, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x5e4, dwReserved0=0x0, dwReserved1=0x0, cFileName="account{047EF9CE-9C1F-4250-9CA7-D206DB8B643C}.oeaccount", cAlternateFileName="ACCOUN~3.OEA")) returned 1 [0077.128] FindNextFileW (in: hFindFile=0x382000, lpFindFileData=0x31e404 | out: lpFindFileData=0x31e404*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x28e7c400, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28e7c400, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xf657b4d1, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x2a0, dwReserved0=0x0, dwReserved1=0x0, cFileName="account{1CD43F3B-668B-4CA8-B816-34F74122EC0F}.oeaccount", cAlternateFileName="ACCOUN~2.OEA")) returned 1 [0077.128] FindNextFileW (in: hFindFile=0x382000, lpFindFileData=0x31e404 | out: lpFindFileData=0x31e404*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x28e7c400, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28e7c400, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xf67b6975, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x6c8, dwReserved0=0x0, dwReserved1=0x0, cFileName="account{AF0DB737-2EF9-4633-BF5E-1A6761ED1577}.oeaccount", cAlternateFileName="ACCOUN~1.OEA")) returned 1 [0077.128] FindNextFileW (in: hFindFile=0x382000, lpFindFileData=0x31e404 | out: lpFindFileData=0x31e404*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x28d257a0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x2b9ed580, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x2b9ed580, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Backup", cAlternateFileName="")) returned 1 [0077.128] FindNextFileW (in: hFindFile=0x382000, lpFindFileData=0x31e404 | out: lpFindFileData=0x31e404*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x28e562a0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28e562a0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x2c881c40, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x2000, dwReserved0=0x0, dwReserved1=0x0, cFileName="edb.chk", cAlternateFileName="")) returned 1 [0077.128] FindNextFileW (in: hFindFile=0x382000, lpFindFileData=0x31e404 | out: lpFindFileData=0x31e404*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x28e30140, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28e30140, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x2c881c40, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x200000, dwReserved0=0x0, dwReserved1=0x0, cFileName="edb.log", cAlternateFileName="")) returned 1 [0077.128] FindNextFileW (in: hFindFile=0x382000, lpFindFileData=0x31e404 | out: lpFindFileData=0x31e404*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x28e30140, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28e30140, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xf2b29966, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x200000, dwReserved0=0x0, dwReserved1=0x0, cFileName="edb00001.log", cAlternateFileName="")) returned 1 [0077.128] FindNextFileW (in: hFindFile=0x382000, lpFindFileData=0x31e404 | out: lpFindFileData=0x31e404*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x28e30140, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28e30140, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xf2027392, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x200000, dwReserved0=0x0, dwReserved1=0x0, cFileName="edbres00001.jrs", cAlternateFileName="EDBRES~2.JRS")) returned 1 [0077.128] FindNextFileW (in: hFindFile=0x382000, lpFindFileData=0x31e404 | out: lpFindFileData=0x31e404*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x28e09fe0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28e09fe0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xf2216575, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x200000, dwReserved0=0x0, dwReserved1=0x0, cFileName="edbres00002.jrs", cAlternateFileName="EDBRES~1.JRS")) returned 1 [0077.129] FindNextFileW (in: hFindFile=0x382000, lpFindFileData=0x31e404 | out: lpFindFileData=0x31e404*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x28e09fe0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28e09fe0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xf67dcad6, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x104, dwReserved0=0x0, dwReserved1=0x0, cFileName="oeold.xml", cAlternateFileName="")) returned 1 [0077.129] FindNextFileW (in: hFindFile=0x382000, lpFindFileData=0x31e404 | out: lpFindFileData=0x31e404*(dwFileAttributes=0x2014, ftCreationTime.dwLowDateTime=0x28d257a0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28f3aae0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xf690d5d8, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Stationery", cAlternateFileName="STATIO~1")) returned 1 [0077.129] FindNextFileW (in: hFindFile=0x382000, lpFindFileData=0x31e404 | out: lpFindFileData=0x31e404*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x28de3e80, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28de3e80, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x2c881c40, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x204000, dwReserved0=0x0, dwReserved1=0x0, cFileName="WindowsMail.MSMessageStore", cAlternateFileName="WINDOW~1.MSM")) returned 1 [0077.129] FindNextFileW (in: hFindFile=0x382000, lpFindFileData=0x31e404 | out: lpFindFileData=0x31e404*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x28de3e80, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28de3e80, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x2b9a12c0, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="WindowsMail.pat", cAlternateFileName="WINDOW~1.PAT")) returned 1 [0077.129] FindNextFileW (in: hFindFile=0x382000, lpFindFileData=0x31e404 | out: lpFindFileData=0x31e404*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0077.129] FindClose (in: hFindFile=0x382000 | out: hFindFile=0x382000) returned 1 [0077.130] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e68c) returned 1 [0077.130] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e698) returned 1 [0077.130] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e6cc) returned 1 [0077.130] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows Mail", nBufferLength=0x105, lpBuffer=0x31e1d4, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows Mail", lpFilePart=0x0) returned 0x42 [0077.130] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows Mail\\", nBufferLength=0x105, lpBuffer=0x31e1a8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows Mail\\", lpFilePart=0x0) returned 0x43 [0077.130] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows Mail\\*", lpFindFileData=0x31e3f4 | out: lpFindFileData=0x31e3f4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x28d257a0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x2c881c40, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x2c881c40, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x382000 [0077.131] FindNextFileW (in: hFindFile=0x382000, lpFindFileData=0x31e404 | out: lpFindFileData=0x31e404*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x28d257a0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x2c881c40, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x2c881c40, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0077.131] FindNextFileW (in: hFindFile=0x382000, lpFindFileData=0x31e404 | out: lpFindFileData=0x31e404*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x28e7c400, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28e7c400, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xf67dcad6, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x5e4, dwReserved0=0x0, dwReserved1=0x0, cFileName="account{047EF9CE-9C1F-4250-9CA7-D206DB8B643C}.oeaccount", cAlternateFileName="ACCOUN~3.OEA")) returned 1 [0077.131] FindNextFileW (in: hFindFile=0x382000, lpFindFileData=0x31e404 | out: lpFindFileData=0x31e404*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x28e7c400, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28e7c400, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xf657b4d1, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x2a0, dwReserved0=0x0, dwReserved1=0x0, cFileName="account{1CD43F3B-668B-4CA8-B816-34F74122EC0F}.oeaccount", cAlternateFileName="ACCOUN~2.OEA")) returned 1 [0077.131] FindNextFileW (in: hFindFile=0x382000, lpFindFileData=0x31e404 | out: lpFindFileData=0x31e404*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x28e7c400, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28e7c400, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xf67b6975, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x6c8, dwReserved0=0x0, dwReserved1=0x0, cFileName="account{AF0DB737-2EF9-4633-BF5E-1A6761ED1577}.oeaccount", cAlternateFileName="ACCOUN~1.OEA")) returned 1 [0077.131] FindNextFileW (in: hFindFile=0x382000, lpFindFileData=0x31e404 | out: lpFindFileData=0x31e404*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x28d257a0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x2b9ed580, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x2b9ed580, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Backup", cAlternateFileName="")) returned 1 [0077.131] FindNextFileW (in: hFindFile=0x382000, lpFindFileData=0x31e404 | out: lpFindFileData=0x31e404*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x28e562a0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28e562a0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x2c881c40, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x2000, dwReserved0=0x0, dwReserved1=0x0, cFileName="edb.chk", cAlternateFileName="")) returned 1 [0077.131] FindNextFileW (in: hFindFile=0x382000, lpFindFileData=0x31e404 | out: lpFindFileData=0x31e404*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x28e30140, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28e30140, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x2c881c40, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x200000, dwReserved0=0x0, dwReserved1=0x0, cFileName="edb.log", cAlternateFileName="")) returned 1 [0077.131] FindNextFileW (in: hFindFile=0x382000, lpFindFileData=0x31e404 | out: lpFindFileData=0x31e404*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x28e30140, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28e30140, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xf2b29966, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x200000, dwReserved0=0x0, dwReserved1=0x0, cFileName="edb00001.log", cAlternateFileName="")) returned 1 [0077.132] FindNextFileW (in: hFindFile=0x382000, lpFindFileData=0x31e404 | out: lpFindFileData=0x31e404*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x28e30140, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28e30140, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xf2027392, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x200000, dwReserved0=0x0, dwReserved1=0x0, cFileName="edbres00001.jrs", cAlternateFileName="EDBRES~2.JRS")) returned 1 [0077.132] FindNextFileW (in: hFindFile=0x382000, lpFindFileData=0x31e404 | out: lpFindFileData=0x31e404*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x28e09fe0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28e09fe0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xf2216575, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x200000, dwReserved0=0x0, dwReserved1=0x0, cFileName="edbres00002.jrs", cAlternateFileName="EDBRES~1.JRS")) returned 1 [0077.132] FindNextFileW (in: hFindFile=0x382000, lpFindFileData=0x31e404 | out: lpFindFileData=0x31e404*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x28e09fe0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28e09fe0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xf67dcad6, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x104, dwReserved0=0x0, dwReserved1=0x0, cFileName="oeold.xml", cAlternateFileName="")) returned 1 [0077.132] FindNextFileW (in: hFindFile=0x382000, lpFindFileData=0x31e404 | out: lpFindFileData=0x31e404*(dwFileAttributes=0x2014, ftCreationTime.dwLowDateTime=0x28d257a0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28f3aae0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xf690d5d8, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Stationery", cAlternateFileName="STATIO~1")) returned 1 [0077.132] FindNextFileW (in: hFindFile=0x382000, lpFindFileData=0x31e404 | out: lpFindFileData=0x31e404*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x28de3e80, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28de3e80, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x2c881c40, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x204000, dwReserved0=0x0, dwReserved1=0x0, cFileName="WindowsMail.MSMessageStore", cAlternateFileName="WINDOW~1.MSM")) returned 1 [0077.132] FindNextFileW (in: hFindFile=0x382000, lpFindFileData=0x31e404 | out: lpFindFileData=0x31e404*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x28de3e80, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28de3e80, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x2b9a12c0, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="WindowsMail.pat", cAlternateFileName="WINDOW~1.PAT")) returned 1 [0077.132] FindNextFileW (in: hFindFile=0x382000, lpFindFileData=0x31e404 | out: lpFindFileData=0x31e404*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x28de3e80, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28de3e80, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x2b9a12c0, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="WindowsMail.pat", cAlternateFileName="WINDOW~1.PAT")) returned 0 [0077.132] FindClose (in: hFindFile=0x382000 | out: hFindFile=0x382000) returned 1 [0077.133] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e68c) returned 1 [0077.133] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e698) returned 1 [0077.133] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows Mail\\oeold.xml", nBufferLength=0x105, lpBuffer=0x31e0a4, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows Mail\\oeold.xml", lpFilePart=0x0) returned 0x4c [0077.133] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e598) returned 1 [0077.133] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows Mail\\oeold.xml" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows mail\\oeold.xml"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x264 [0077.134] GetFileType (hFile=0x264) returned 0x1 [0077.134] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e594) returned 1 [0077.134] GetFileType (hFile=0x264) returned 0x1 [0077.134] GetFileSize (in: hFile=0x264, lpFileSizeHigh=0x31e6a0 | out: lpFileSizeHigh=0x31e6a0*=0x0) returned 0x104 [0077.135] ReadFile (in: hFile=0x264, lpBuffer=0x2659f0c, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x31e64c, lpOverlapped=0x0 | out: lpBuffer=0x2659f0c*, lpNumberOfBytesRead=0x31e64c*=0x104, lpOverlapped=0x0) returned 1 [0077.135] CloseHandle (hObject=0x264) returned 1 [0077.174] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows Mail\\oeold.xml", nBufferLength=0x105, lpBuffer=0x31e090, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows Mail\\oeold.xml", lpFilePart=0x0) returned 0x4c [0077.174] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e584) returned 1 [0077.174] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows Mail\\oeold.xml" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows mail\\oeold.xml"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x264 [0077.175] GetFileType (hFile=0x264) returned 0x1 [0077.175] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e580) returned 1 [0077.175] GetFileType (hFile=0x264) returned 0x1 [0077.175] WriteFile (in: hFile=0x264, lpBuffer=0x26a84d8*, nNumberOfBytesToWrite=0x110, lpNumberOfBytesWritten=0x31e614, lpOverlapped=0x0 | out: lpBuffer=0x26a84d8*, lpNumberOfBytesWritten=0x31e614*=0x110, lpOverlapped=0x0) returned 1 [0077.177] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows Mail\\oeold.xml", nBufferLength=0x105, lpBuffer=0x31e1c4, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows Mail\\oeold.xml", lpFilePart=0x0) returned 0x4c [0077.177] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows Mail\\oeold.xml", nBufferLength=0x105, lpBuffer=0x31e1c4, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows Mail\\oeold.xml", lpFilePart=0x0) returned 0x4c [0077.177] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e624) returned 1 [0077.177] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows Mail\\oeold.xml" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows mail\\oeold.xml"), fInfoLevelId=0x0, lpFileInformation=0x31e6a0 | out: lpFileInformation=0x31e6a0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x28e09fe0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28e09fe0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x117255c0, ftLastWriteTime.dwHighDateTime=0x1d6eb7f, nFileSizeHigh=0x0, nFileSizeLow=0x110)) returned 1 [0077.177] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e620) returned 1 [0077.177] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows Mail\\oeold.xml" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows mail\\oeold.xml"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows Mail\\oeold.xml" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows mail\\oeold.xml")) returned 1 [0077.178] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e654) returned 1 [0077.178] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows Mail\\Backup", nBufferLength=0x105, lpBuffer=0x31e15c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows Mail\\Backup", lpFilePart=0x0) returned 0x49 [0077.178] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows Mail\\Backup\\", nBufferLength=0x105, lpBuffer=0x31e130, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows Mail\\Backup\\", lpFilePart=0x0) returned 0x4a [0077.178] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows Mail\\Backup\\*", lpFindFileData=0x31e37c | out: lpFindFileData=0x31e37c*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x28d257a0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x2b9ed580, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x2b9ed580, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x381c80 [0077.178] FindNextFileW (in: hFindFile=0x381c80, lpFindFileData=0x31e38c | out: lpFindFileData=0x31e38c*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x28d257a0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x2b9ed580, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x2b9ed580, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0077.178] FindNextFileW (in: hFindFile=0x381c80, lpFindFileData=0x31e38c | out: lpFindFileData=0x31e38c*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x28d257a0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28f3aae0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xf2f7a14e, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="old", cAlternateFileName="")) returned 1 [0077.178] FindNextFileW (in: hFindFile=0x381c80, lpFindFileData=0x31e38c | out: lpFindFileData=0x31e38c*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x28d257a0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28f3aae0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xf2f7a14e, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="old", cAlternateFileName="")) returned 0 [0077.178] FindClose (in: hFindFile=0x381c80 | out: hFindFile=0x381c80) returned 1 [0077.178] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e614) returned 1 [0077.178] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e620) returned 1 [0077.178] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e654) returned 1 [0077.178] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows Mail\\Backup", nBufferLength=0x105, lpBuffer=0x31e15c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows Mail\\Backup", lpFilePart=0x0) returned 0x49 [0077.178] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows Mail\\Backup\\", nBufferLength=0x105, lpBuffer=0x31e130, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows Mail\\Backup\\", lpFilePart=0x0) returned 0x4a [0077.178] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows Mail\\Backup\\*", lpFindFileData=0x31e37c | out: lpFindFileData=0x31e37c*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x28d257a0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x2b9ed580, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x2b9ed580, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x381c80 [0077.179] FindNextFileW (in: hFindFile=0x381c80, lpFindFileData=0x31e38c | out: lpFindFileData=0x31e38c*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x28d257a0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x2b9ed580, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x2b9ed580, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0077.179] FindNextFileW (in: hFindFile=0x381c80, lpFindFileData=0x31e38c | out: lpFindFileData=0x31e38c*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x28d257a0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28f3aae0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xf2f7a14e, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="old", cAlternateFileName="")) returned 1 [0077.179] FindNextFileW (in: hFindFile=0x381c80, lpFindFileData=0x31e38c | out: lpFindFileData=0x31e38c*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0077.179] FindClose (in: hFindFile=0x381c80 | out: hFindFile=0x381c80) returned 1 [0077.179] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e614) returned 1 [0077.179] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e620) returned 1 [0077.179] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e5dc) returned 1 [0077.179] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows Mail\\Backup\\old", nBufferLength=0x105, lpBuffer=0x31e0e4, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows Mail\\Backup\\old", lpFilePart=0x0) returned 0x4d [0077.179] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows Mail\\Backup\\old\\", nBufferLength=0x105, lpBuffer=0x31e0b8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows Mail\\Backup\\old\\", lpFilePart=0x0) returned 0x4e [0077.179] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows Mail\\Backup\\old\\*", lpFindFileData=0x31e304 | out: lpFindFileData=0x31e304*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x28d257a0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28f3aae0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xf2f7a14e, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x381c80 [0077.180] FindNextFileW (in: hFindFile=0x381c80, lpFindFileData=0x31e314 | out: lpFindFileData=0x31e314*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x28d257a0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28f3aae0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xf2f7a14e, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0077.180] FindNextFileW (in: hFindFile=0x381c80, lpFindFileData=0x31e314 | out: lpFindFileData=0x31e314*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x28e562a0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28e562a0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xf2f2de8d, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x200000, dwReserved0=0x0, dwReserved1=0x0, cFileName="edb00001.log", cAlternateFileName="")) returned 1 [0077.181] FindNextFileW (in: hFindFile=0x381c80, lpFindFileData=0x31e314 | out: lpFindFileData=0x31e314*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x28e562a0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28e562a0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xf2ab7545, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x206000, dwReserved0=0x0, dwReserved1=0x0, cFileName="WindowsMail.MSMessageStore", cAlternateFileName="WINDOW~1.MSM")) returned 1 [0077.181] FindNextFileW (in: hFindFile=0x381c80, lpFindFileData=0x31e314 | out: lpFindFileData=0x31e314*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x28e562a0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28e562a0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xf2fec56f, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x4000, dwReserved0=0x0, dwReserved1=0x0, cFileName="WindowsMail.pat", cAlternateFileName="WINDOW~1.PAT")) returned 1 [0077.181] FindNextFileW (in: hFindFile=0x381c80, lpFindFileData=0x31e314 | out: lpFindFileData=0x31e314*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0077.181] FindClose (in: hFindFile=0x381c80 | out: hFindFile=0x381c80) returned 1 [0077.181] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e59c) returned 1 [0077.181] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e5a8) returned 1 [0077.181] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e5dc) returned 1 [0077.181] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows Mail\\Backup\\old", nBufferLength=0x105, lpBuffer=0x31e0e4, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows Mail\\Backup\\old", lpFilePart=0x0) returned 0x4d [0077.181] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows Mail\\Backup\\old\\", nBufferLength=0x105, lpBuffer=0x31e0b8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows Mail\\Backup\\old\\", lpFilePart=0x0) returned 0x4e [0077.182] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows Mail\\Backup\\old\\*", lpFindFileData=0x31e304 | out: lpFindFileData=0x31e304*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x28d257a0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28f3aae0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xf2f7a14e, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x381c80 [0077.182] FindNextFileW (in: hFindFile=0x381c80, lpFindFileData=0x31e314 | out: lpFindFileData=0x31e314*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x28d257a0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28f3aae0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xf2f7a14e, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0077.182] FindNextFileW (in: hFindFile=0x381c80, lpFindFileData=0x31e314 | out: lpFindFileData=0x31e314*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x28e562a0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28e562a0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xf2f2de8d, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x200000, dwReserved0=0x0, dwReserved1=0x0, cFileName="edb00001.log", cAlternateFileName="")) returned 1 [0077.182] FindNextFileW (in: hFindFile=0x381c80, lpFindFileData=0x31e314 | out: lpFindFileData=0x31e314*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x28e562a0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28e562a0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xf2ab7545, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x206000, dwReserved0=0x0, dwReserved1=0x0, cFileName="WindowsMail.MSMessageStore", cAlternateFileName="WINDOW~1.MSM")) returned 1 [0077.182] FindNextFileW (in: hFindFile=0x381c80, lpFindFileData=0x31e314 | out: lpFindFileData=0x31e314*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x28e562a0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28e562a0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xf2fec56f, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x4000, dwReserved0=0x0, dwReserved1=0x0, cFileName="WindowsMail.pat", cAlternateFileName="WINDOW~1.PAT")) returned 1 [0077.182] FindNextFileW (in: hFindFile=0x381c80, lpFindFileData=0x31e314 | out: lpFindFileData=0x31e314*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x28e562a0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28e562a0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xf2fec56f, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x4000, dwReserved0=0x0, dwReserved1=0x0, cFileName="WindowsMail.pat", cAlternateFileName="WINDOW~1.PAT")) returned 0 [0077.183] FindClose (in: hFindFile=0x381c80 | out: hFindFile=0x381c80) returned 1 [0077.183] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e59c) returned 1 [0077.183] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e5a8) returned 1 [0077.183] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e654) returned 1 [0077.183] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows Mail\\Stationery", nBufferLength=0x105, lpBuffer=0x31e15c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows Mail\\Stationery", lpFilePart=0x0) returned 0x4d [0077.183] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows Mail\\Stationery\\", nBufferLength=0x105, lpBuffer=0x31e130, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows Mail\\Stationery\\", lpFilePart=0x0) returned 0x4e [0077.183] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows Mail\\Stationery\\*", lpFindFileData=0x31e37c | out: lpFindFileData=0x31e37c*(dwFileAttributes=0x2014, ftCreationTime.dwLowDateTime=0x28d257a0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28f3aae0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xf690d5d8, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x381c80 [0077.185] FindNextFileW (in: hFindFile=0x381c80, lpFindFileData=0x31e38c | out: lpFindFileData=0x31e38c*(dwFileAttributes=0x2014, ftCreationTime.dwLowDateTime=0x28d257a0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28f3aae0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xf690d5d8, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0077.185] FindNextFileW (in: hFindFile=0x381c80, lpFindFileData=0x31e38c | out: lpFindFileData=0x31e38c*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x28e09fe0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28e09fe0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xcdfff30e, ftLastWriteTime.dwHighDateTime=0x1ca040d, nFileSizeHigh=0x0, nFileSizeLow=0xff, dwReserved0=0x0, dwReserved1=0x0, cFileName="Bears.htm", cAlternateFileName="")) returned 1 [0077.185] FindNextFileW (in: hFindFile=0x381c80, lpFindFileData=0x31e38c | out: lpFindFileData=0x31e38c*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x28e09fe0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28e09fe0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xaa352261, ftLastWriteTime.dwHighDateTime=0x1c9ea0c, nFileSizeHigh=0x0, nFileSizeLow=0x432, dwReserved0=0x0, dwReserved1=0x0, cFileName="Bears.jpg", cAlternateFileName="")) returned 1 [0077.185] FindNextFileW (in: hFindFile=0x381c80, lpFindFileData=0x31e38c | out: lpFindFileData=0x31e38c*(dwFileAttributes=0x2026, ftCreationTime.dwLowDateTime=0x28e09fe0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28e09fe0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x7bf1d2d9, ftLastWriteTime.dwHighDateTime=0x1ca0444, nFileSizeHigh=0x0, nFileSizeLow=0x285, dwReserved0=0x0, dwReserved1=0x0, cFileName="Desktop.ini", cAlternateFileName="")) returned 1 [0077.185] FindNextFileW (in: hFindFile=0x381c80, lpFindFileData=0x31e38c | out: lpFindFileData=0x31e38c*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x28e09fe0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28e09fe0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xce04b5c8, ftLastWriteTime.dwHighDateTime=0x1ca040d, nFileSizeHigh=0x0, nFileSizeLow=0xe7, dwReserved0=0x0, dwReserved1=0x0, cFileName="Garden.htm", cAlternateFileName="")) returned 1 [0077.185] FindNextFileW (in: hFindFile=0x381c80, lpFindFileData=0x31e38c | out: lpFindFileData=0x31e38c*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x28e09fe0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28e09fe0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xaa410937, ftLastWriteTime.dwHighDateTime=0x1c9ea0c, nFileSizeHigh=0x0, nFileSizeLow=0x5d3f, dwReserved0=0x0, dwReserved1=0x0, cFileName="Garden.jpg", cAlternateFileName="")) returned 1 [0077.185] FindNextFileW (in: hFindFile=0x381c80, lpFindFileData=0x31e38c | out: lpFindFileData=0x31e38c*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x28e09fe0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28e09fe0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xce071725, ftLastWriteTime.dwHighDateTime=0x1ca040d, nFileSizeHigh=0x0, nFileSizeLow=0xed, dwReserved0=0x0, dwReserved1=0x0, cFileName="Green Bubbles.htm", cAlternateFileName="GREENB~1.HTM")) returned 1 [0077.185] FindNextFileW (in: hFindFile=0x381c80, lpFindFileData=0x31e38c | out: lpFindFileData=0x31e38c*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x28e09fe0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28e09fe0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xaa436a95, ftLastWriteTime.dwHighDateTime=0x1c9ea0c, nFileSizeHigh=0x0, nFileSizeLow=0x1906, dwReserved0=0x0, dwReserved1=0x0, cFileName="GreenBubbles.jpg", cAlternateFileName="GREENB~1.JPG")) returned 1 [0077.185] FindNextFileW (in: hFindFile=0x381c80, lpFindFileData=0x31e38c | out: lpFindFileData=0x31e38c*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x28e09fe0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28e09fe0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xce0bd9df, ftLastWriteTime.dwHighDateTime=0x1ca040d, nFileSizeHigh=0x0, nFileSizeLow=0xeb, dwReserved0=0x0, dwReserved1=0x0, cFileName="Hand Prints.htm", cAlternateFileName="HANDPR~1.HTM")) returned 1 [0077.185] FindNextFileW (in: hFindFile=0x381c80, lpFindFileData=0x31e38c | out: lpFindFileData=0x31e38c*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x28e09fe0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28e09fe0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xaa45cbf3, ftLastWriteTime.dwHighDateTime=0x1c9ea0c, nFileSizeHigh=0x0, nFileSizeLow=0x107e, dwReserved0=0x0, dwReserved1=0x0, cFileName="HandPrints.jpg", cAlternateFileName="HANDPR~1.JPG")) returned 1 [0077.185] FindNextFileW (in: hFindFile=0x381c80, lpFindFileData=0x31e38c | out: lpFindFileData=0x31e38c*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x28e09fe0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28e09fe0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xce0e3b3c, ftLastWriteTime.dwHighDateTime=0x1ca040d, nFileSizeHigh=0x0, nFileSizeLow=0xed, dwReserved0=0x0, dwReserved1=0x0, cFileName="Orange Circles.htm", cAlternateFileName="ORANGE~1.HTM")) returned 1 [0077.185] FindNextFileW (in: hFindFile=0x381c80, lpFindFileData=0x31e38c | out: lpFindFileData=0x31e38c*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x28e09fe0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28e09fe0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xaa4cf00d, ftLastWriteTime.dwHighDateTime=0x1c9ea0c, nFileSizeHigh=0x0, nFileSizeLow=0x18ed, dwReserved0=0x0, dwReserved1=0x0, cFileName="OrangeCircles.jpg", cAlternateFileName="ORANGE~1.JPG")) returned 1 [0077.185] FindNextFileW (in: hFindFile=0x381c80, lpFindFileData=0x31e38c | out: lpFindFileData=0x31e38c*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x28e09fe0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28e09fe0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xce109c99, ftLastWriteTime.dwHighDateTime=0x1ca040d, nFileSizeHigh=0x0, nFileSizeLow=0xe8, dwReserved0=0x0, dwReserved1=0x0, cFileName="Peacock.htm", cAlternateFileName="")) returned 1 [0077.185] FindNextFileW (in: hFindFile=0x381c80, lpFindFileData=0x31e38c | out: lpFindFileData=0x31e38c*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x28e09fe0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28e09fe0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xaa51b2c9, ftLastWriteTime.dwHighDateTime=0x1c9ea0c, nFileSizeHigh=0x0, nFileSizeLow=0x13fb, dwReserved0=0x0, dwReserved1=0x0, cFileName="Peacock.jpg", cAlternateFileName="")) returned 1 [0077.185] FindNextFileW (in: hFindFile=0x381c80, lpFindFileData=0x31e38c | out: lpFindFileData=0x31e38c*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x28f3aae0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28f3aae0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xce12fdf6, ftLastWriteTime.dwHighDateTime=0x1ca040d, nFileSizeHigh=0x0, nFileSizeLow=0xe9, dwReserved0=0x0, dwReserved1=0x0, cFileName="Roses.htm", cAlternateFileName="")) returned 1 [0077.185] FindNextFileW (in: hFindFile=0x381c80, lpFindFileData=0x31e38c | out: lpFindFileData=0x31e38c*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x28f3aae0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28f3aae0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xaa567585, ftLastWriteTime.dwHighDateTime=0x1c9ea0c, nFileSizeHigh=0x0, nFileSizeLow=0x780, dwReserved0=0x0, dwReserved1=0x0, cFileName="Roses.jpg", cAlternateFileName="")) returned 1 [0077.185] FindNextFileW (in: hFindFile=0x381c80, lpFindFileData=0x31e38c | out: lpFindFileData=0x31e38c*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x28f3aae0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28f3aae0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xce17c0b0, ftLastWriteTime.dwHighDateTime=0x1ca040d, nFileSizeHigh=0x0, nFileSizeLow=0xed, dwReserved0=0x0, dwReserved1=0x0, cFileName="Shades of Blue.htm", cAlternateFileName="SHADES~1.HTM")) returned 1 [0077.185] FindNextFileW (in: hFindFile=0x381c80, lpFindFileData=0x31e38c | out: lpFindFileData=0x31e38c*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x28f3aae0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28f3aae0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xaa58d6e3, ftLastWriteTime.dwHighDateTime=0x1c9ea0c, nFileSizeHigh=0x0, nFileSizeLow=0x127e, dwReserved0=0x0, dwReserved1=0x0, cFileName="ShadesOfBlue.jpg", cAlternateFileName="SHADES~1.JPG")) returned 1 [0077.185] FindNextFileW (in: hFindFile=0x381c80, lpFindFileData=0x31e38c | out: lpFindFileData=0x31e38c*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x28de3e80, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28de3e80, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xce1a220d, ftLastWriteTime.dwHighDateTime=0x1ca040d, nFileSizeHigh=0x0, nFileSizeLow=0xe8, dwReserved0=0x0, dwReserved1=0x0, cFileName="Soft Blue.htm", cAlternateFileName="SOFTBL~1.HTM")) returned 1 [0077.185] FindNextFileW (in: hFindFile=0x381c80, lpFindFileData=0x31e38c | out: lpFindFileData=0x31e38c*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x28de3e80, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28de3e80, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xaa5b3841, ftLastWriteTime.dwHighDateTime=0x1c9ea0c, nFileSizeHigh=0x0, nFileSizeLow=0x2949, dwReserved0=0x0, dwReserved1=0x0, cFileName="SoftBlue.jpg", cAlternateFileName="")) returned 1 [0077.186] FindNextFileW (in: hFindFile=0x381c80, lpFindFileData=0x31e38c | out: lpFindFileData=0x31e38c*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x28de3e80, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28de3e80, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xce1c836a, ftLastWriteTime.dwHighDateTime=0x1ca040d, nFileSizeHigh=0x0, nFileSizeLow=0xe6, dwReserved0=0x0, dwReserved1=0x0, cFileName="Stars.htm", cAlternateFileName="")) returned 1 [0077.186] FindNextFileW (in: hFindFile=0x381c80, lpFindFileData=0x31e38c | out: lpFindFileData=0x31e38c*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x28de3e80, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28de3e80, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xaa5ffafd, ftLastWriteTime.dwHighDateTime=0x1c9ea0c, nFileSizeHigh=0x0, nFileSizeLow=0x1d51, dwReserved0=0x0, dwReserved1=0x0, cFileName="Stars.jpg", cAlternateFileName="")) returned 1 [0077.186] FindNextFileW (in: hFindFile=0x381c80, lpFindFileData=0x31e38c | out: lpFindFileData=0x31e38c*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0077.186] FindClose (in: hFindFile=0x381c80 | out: hFindFile=0x381c80) returned 1 [0077.186] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e614) returned 1 [0077.186] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e620) returned 1 [0077.186] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e654) returned 1 [0077.186] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows Mail\\Stationery", nBufferLength=0x105, lpBuffer=0x31e15c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows Mail\\Stationery", lpFilePart=0x0) returned 0x4d [0077.186] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows Mail\\Stationery\\", nBufferLength=0x105, lpBuffer=0x31e130, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows Mail\\Stationery\\", lpFilePart=0x0) returned 0x4e [0077.186] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows Mail\\Stationery\\*", lpFindFileData=0x31e37c | out: lpFindFileData=0x31e37c*(dwFileAttributes=0x2014, ftCreationTime.dwLowDateTime=0x28d257a0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28f3aae0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xf690d5d8, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x381c80 [0077.187] FindNextFileW (in: hFindFile=0x381c80, lpFindFileData=0x31e38c | out: lpFindFileData=0x31e38c*(dwFileAttributes=0x2014, ftCreationTime.dwLowDateTime=0x28d257a0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28f3aae0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xf690d5d8, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0077.187] FindNextFileW (in: hFindFile=0x381c80, lpFindFileData=0x31e38c | out: lpFindFileData=0x31e38c*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x28e09fe0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28e09fe0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xcdfff30e, ftLastWriteTime.dwHighDateTime=0x1ca040d, nFileSizeHigh=0x0, nFileSizeLow=0xff, dwReserved0=0x0, dwReserved1=0x0, cFileName="Bears.htm", cAlternateFileName="")) returned 1 [0077.187] FindNextFileW (in: hFindFile=0x381c80, lpFindFileData=0x31e38c | out: lpFindFileData=0x31e38c*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x28e09fe0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28e09fe0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xaa352261, ftLastWriteTime.dwHighDateTime=0x1c9ea0c, nFileSizeHigh=0x0, nFileSizeLow=0x432, dwReserved0=0x0, dwReserved1=0x0, cFileName="Bears.jpg", cAlternateFileName="")) returned 1 [0077.187] FindNextFileW (in: hFindFile=0x381c80, lpFindFileData=0x31e38c | out: lpFindFileData=0x31e38c*(dwFileAttributes=0x2026, ftCreationTime.dwLowDateTime=0x28e09fe0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28e09fe0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x7bf1d2d9, ftLastWriteTime.dwHighDateTime=0x1ca0444, nFileSizeHigh=0x0, nFileSizeLow=0x285, dwReserved0=0x0, dwReserved1=0x0, cFileName="Desktop.ini", cAlternateFileName="")) returned 1 [0077.187] FindNextFileW (in: hFindFile=0x381c80, lpFindFileData=0x31e38c | out: lpFindFileData=0x31e38c*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x28e09fe0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28e09fe0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xce04b5c8, ftLastWriteTime.dwHighDateTime=0x1ca040d, nFileSizeHigh=0x0, nFileSizeLow=0xe7, dwReserved0=0x0, dwReserved1=0x0, cFileName="Garden.htm", cAlternateFileName="")) returned 1 [0077.187] FindNextFileW (in: hFindFile=0x381c80, lpFindFileData=0x31e38c | out: lpFindFileData=0x31e38c*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x28e09fe0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28e09fe0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xaa410937, ftLastWriteTime.dwHighDateTime=0x1c9ea0c, nFileSizeHigh=0x0, nFileSizeLow=0x5d3f, dwReserved0=0x0, dwReserved1=0x0, cFileName="Garden.jpg", cAlternateFileName="")) returned 1 [0077.187] FindNextFileW (in: hFindFile=0x381c80, lpFindFileData=0x31e38c | out: lpFindFileData=0x31e38c*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x28e09fe0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28e09fe0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xce071725, ftLastWriteTime.dwHighDateTime=0x1ca040d, nFileSizeHigh=0x0, nFileSizeLow=0xed, dwReserved0=0x0, dwReserved1=0x0, cFileName="Green Bubbles.htm", cAlternateFileName="GREENB~1.HTM")) returned 1 [0077.187] FindNextFileW (in: hFindFile=0x381c80, lpFindFileData=0x31e38c | out: lpFindFileData=0x31e38c*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x28e09fe0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28e09fe0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xaa436a95, ftLastWriteTime.dwHighDateTime=0x1c9ea0c, nFileSizeHigh=0x0, nFileSizeLow=0x1906, dwReserved0=0x0, dwReserved1=0x0, cFileName="GreenBubbles.jpg", cAlternateFileName="GREENB~1.JPG")) returned 1 [0077.188] FindNextFileW (in: hFindFile=0x381c80, lpFindFileData=0x31e38c | out: lpFindFileData=0x31e38c*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x28e09fe0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28e09fe0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xce0bd9df, ftLastWriteTime.dwHighDateTime=0x1ca040d, nFileSizeHigh=0x0, nFileSizeLow=0xeb, dwReserved0=0x0, dwReserved1=0x0, cFileName="Hand Prints.htm", cAlternateFileName="HANDPR~1.HTM")) returned 1 [0077.188] FindNextFileW (in: hFindFile=0x381c80, lpFindFileData=0x31e38c | out: lpFindFileData=0x31e38c*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x28e09fe0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28e09fe0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xaa45cbf3, ftLastWriteTime.dwHighDateTime=0x1c9ea0c, nFileSizeHigh=0x0, nFileSizeLow=0x107e, dwReserved0=0x0, dwReserved1=0x0, cFileName="HandPrints.jpg", cAlternateFileName="HANDPR~1.JPG")) returned 1 [0077.188] FindNextFileW (in: hFindFile=0x381c80, lpFindFileData=0x31e38c | out: lpFindFileData=0x31e38c*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x28e09fe0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28e09fe0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xce0e3b3c, ftLastWriteTime.dwHighDateTime=0x1ca040d, nFileSizeHigh=0x0, nFileSizeLow=0xed, dwReserved0=0x0, dwReserved1=0x0, cFileName="Orange Circles.htm", cAlternateFileName="ORANGE~1.HTM")) returned 1 [0077.188] FindNextFileW (in: hFindFile=0x381c80, lpFindFileData=0x31e38c | out: lpFindFileData=0x31e38c*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x28e09fe0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28e09fe0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xaa4cf00d, ftLastWriteTime.dwHighDateTime=0x1c9ea0c, nFileSizeHigh=0x0, nFileSizeLow=0x18ed, dwReserved0=0x0, dwReserved1=0x0, cFileName="OrangeCircles.jpg", cAlternateFileName="ORANGE~1.JPG")) returned 1 [0077.188] FindNextFileW (in: hFindFile=0x381c80, lpFindFileData=0x31e38c | out: lpFindFileData=0x31e38c*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x28e09fe0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28e09fe0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xce109c99, ftLastWriteTime.dwHighDateTime=0x1ca040d, nFileSizeHigh=0x0, nFileSizeLow=0xe8, dwReserved0=0x0, dwReserved1=0x0, cFileName="Peacock.htm", cAlternateFileName="")) returned 1 [0077.188] FindNextFileW (in: hFindFile=0x381c80, lpFindFileData=0x31e38c | out: lpFindFileData=0x31e38c*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x28e09fe0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28e09fe0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xaa51b2c9, ftLastWriteTime.dwHighDateTime=0x1c9ea0c, nFileSizeHigh=0x0, nFileSizeLow=0x13fb, dwReserved0=0x0, dwReserved1=0x0, cFileName="Peacock.jpg", cAlternateFileName="")) returned 1 [0077.188] FindNextFileW (in: hFindFile=0x381c80, lpFindFileData=0x31e38c | out: lpFindFileData=0x31e38c*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x28f3aae0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28f3aae0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xce12fdf6, ftLastWriteTime.dwHighDateTime=0x1ca040d, nFileSizeHigh=0x0, nFileSizeLow=0xe9, dwReserved0=0x0, dwReserved1=0x0, cFileName="Roses.htm", cAlternateFileName="")) returned 1 [0077.188] FindNextFileW (in: hFindFile=0x381c80, lpFindFileData=0x31e38c | out: lpFindFileData=0x31e38c*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x28f3aae0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28f3aae0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xaa567585, ftLastWriteTime.dwHighDateTime=0x1c9ea0c, nFileSizeHigh=0x0, nFileSizeLow=0x780, dwReserved0=0x0, dwReserved1=0x0, cFileName="Roses.jpg", cAlternateFileName="")) returned 1 [0077.188] FindNextFileW (in: hFindFile=0x381c80, lpFindFileData=0x31e38c | out: lpFindFileData=0x31e38c*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x28f3aae0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28f3aae0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xce17c0b0, ftLastWriteTime.dwHighDateTime=0x1ca040d, nFileSizeHigh=0x0, nFileSizeLow=0xed, dwReserved0=0x0, dwReserved1=0x0, cFileName="Shades of Blue.htm", cAlternateFileName="SHADES~1.HTM")) returned 1 [0077.188] FindNextFileW (in: hFindFile=0x381c80, lpFindFileData=0x31e38c | out: lpFindFileData=0x31e38c*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x28f3aae0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28f3aae0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xaa58d6e3, ftLastWriteTime.dwHighDateTime=0x1c9ea0c, nFileSizeHigh=0x0, nFileSizeLow=0x127e, dwReserved0=0x0, dwReserved1=0x0, cFileName="ShadesOfBlue.jpg", cAlternateFileName="SHADES~1.JPG")) returned 1 [0077.188] FindNextFileW (in: hFindFile=0x381c80, lpFindFileData=0x31e38c | out: lpFindFileData=0x31e38c*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x28de3e80, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28de3e80, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xce1a220d, ftLastWriteTime.dwHighDateTime=0x1ca040d, nFileSizeHigh=0x0, nFileSizeLow=0xe8, dwReserved0=0x0, dwReserved1=0x0, cFileName="Soft Blue.htm", cAlternateFileName="SOFTBL~1.HTM")) returned 1 [0077.188] FindNextFileW (in: hFindFile=0x381c80, lpFindFileData=0x31e38c | out: lpFindFileData=0x31e38c*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x28de3e80, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28de3e80, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xaa5b3841, ftLastWriteTime.dwHighDateTime=0x1c9ea0c, nFileSizeHigh=0x0, nFileSizeLow=0x2949, dwReserved0=0x0, dwReserved1=0x0, cFileName="SoftBlue.jpg", cAlternateFileName="")) returned 1 [0077.188] FindNextFileW (in: hFindFile=0x381c80, lpFindFileData=0x31e38c | out: lpFindFileData=0x31e38c*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x28de3e80, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28de3e80, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xce1c836a, ftLastWriteTime.dwHighDateTime=0x1ca040d, nFileSizeHigh=0x0, nFileSizeLow=0xe6, dwReserved0=0x0, dwReserved1=0x0, cFileName="Stars.htm", cAlternateFileName="")) returned 1 [0077.188] FindNextFileW (in: hFindFile=0x381c80, lpFindFileData=0x31e38c | out: lpFindFileData=0x31e38c*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x28de3e80, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28de3e80, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xaa5ffafd, ftLastWriteTime.dwHighDateTime=0x1c9ea0c, nFileSizeHigh=0x0, nFileSizeLow=0x1d51, dwReserved0=0x0, dwReserved1=0x0, cFileName="Stars.jpg", cAlternateFileName="")) returned 1 [0077.188] FindNextFileW (in: hFindFile=0x381c80, lpFindFileData=0x31e38c | out: lpFindFileData=0x31e38c*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x28de3e80, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28de3e80, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xaa5ffafd, ftLastWriteTime.dwHighDateTime=0x1c9ea0c, nFileSizeHigh=0x0, nFileSizeLow=0x1d51, dwReserved0=0x0, dwReserved1=0x0, cFileName="Stars.jpg", cAlternateFileName="")) returned 0 [0077.188] FindClose (in: hFindFile=0x381c80 | out: hFindFile=0x381c80) returned 1 [0077.189] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e614) returned 1 [0077.189] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e620) returned 1 [0077.189] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows Mail\\Stationery\\Bears.jpg", nBufferLength=0x105, lpBuffer=0x31e02c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows Mail\\Stationery\\Bears.jpg", lpFilePart=0x0) returned 0x57 [0077.189] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e520) returned 1 [0077.189] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows Mail\\Stationery\\Bears.jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows mail\\stationery\\bears.jpg"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x264 [0077.190] GetFileType (hFile=0x264) returned 0x1 [0077.191] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e51c) returned 1 [0077.191] GetFileType (hFile=0x264) returned 0x1 [0077.191] GetFileSize (in: hFile=0x264, lpFileSizeHigh=0x31e628 | out: lpFileSizeHigh=0x31e628*=0x0) returned 0x432 [0077.191] ReadFile (in: hFile=0x264, lpBuffer=0x26b44f4, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x31e5d4, lpOverlapped=0x0 | out: lpBuffer=0x26b44f4*, lpNumberOfBytesRead=0x31e5d4*=0x432, lpOverlapped=0x0) returned 1 [0077.204] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows Mail\\Stationery\\Bears.jpg", nBufferLength=0x105, lpBuffer=0x31e018, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows Mail\\Stationery\\Bears.jpg", lpFilePart=0x0) returned 0x57 [0077.204] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e50c) returned 1 [0077.204] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows Mail\\Stationery\\Bears.jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows mail\\stationery\\bears.jpg"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x264 [0077.205] GetFileType (hFile=0x264) returned 0x1 [0077.205] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e508) returned 1 [0077.205] GetFileType (hFile=0x264) returned 0x1 [0077.205] WriteFile (in: hFile=0x264, lpBuffer=0x270396c*, nNumberOfBytesToWrite=0x440, lpNumberOfBytesWritten=0x31e59c, lpOverlapped=0x0 | out: lpBuffer=0x270396c*, lpNumberOfBytesWritten=0x31e59c*=0x440, lpOverlapped=0x0) returned 1 [0077.206] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows Mail\\Stationery\\Bears.jpg", nBufferLength=0x105, lpBuffer=0x31e14c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows Mail\\Stationery\\Bears.jpg", lpFilePart=0x0) returned 0x57 [0077.206] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows Mail\\Stationery\\Bears.jpg", nBufferLength=0x105, lpBuffer=0x31e14c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows Mail\\Stationery\\Bears.jpg", lpFilePart=0x0) returned 0x57 [0077.206] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e5ac) returned 1 [0077.206] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows Mail\\Stationery\\Bears.jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows mail\\stationery\\bears.jpg"), fInfoLevelId=0x0, lpFileInformation=0x31e628 | out: lpFileInformation=0x31e628*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x28e09fe0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28e09fe0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x11771880, ftLastWriteTime.dwHighDateTime=0x1d6eb7f, nFileSizeHigh=0x0, nFileSizeLow=0x440)) returned 1 [0077.207] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e5a8) returned 1 [0077.207] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows Mail\\Stationery\\Bears.jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows mail\\stationery\\bears.jpg"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows Mail\\Stationery\\Bears.jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows mail\\stationery\\bears.jpg")) returned 1 [0077.207] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows Mail\\Stationery\\Garden.jpg", nBufferLength=0x105, lpBuffer=0x31e02c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows Mail\\Stationery\\Garden.jpg", lpFilePart=0x0) returned 0x58 [0077.207] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e520) returned 1 [0077.207] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows Mail\\Stationery\\Garden.jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows mail\\stationery\\garden.jpg"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x264 [0077.207] GetFileType (hFile=0x264) returned 0x1 [0077.207] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e51c) returned 1 [0077.207] GetFileType (hFile=0x264) returned 0x1 [0077.207] GetFileSize (in: hFile=0x264, lpFileSizeHigh=0x31e628 | out: lpFileSizeHigh=0x31e628*=0x0) returned 0x5d3f [0077.207] ReadFile (in: hFile=0x264, lpBuffer=0x2704c78, nNumberOfBytesToRead=0x5d3f, lpNumberOfBytesRead=0x31e5d4, lpOverlapped=0x0 | out: lpBuffer=0x2704c78*, lpNumberOfBytesRead=0x31e5d4*=0x5d3f, lpOverlapped=0x0) returned 1 [0077.222] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows Mail\\Stationery\\Garden.jpg", nBufferLength=0x105, lpBuffer=0x31e018, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows Mail\\Stationery\\Garden.jpg", lpFilePart=0x0) returned 0x58 [0077.222] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e50c) returned 1 [0077.222] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows Mail\\Stationery\\Garden.jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows mail\\stationery\\garden.jpg"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x264 [0077.223] GetFileType (hFile=0x264) returned 0x1 [0077.223] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e508) returned 1 [0077.223] GetFileType (hFile=0x264) returned 0x1 [0077.223] WriteFile (in: hFile=0x264, lpBuffer=0x276eca0*, nNumberOfBytesToWrite=0x5d40, lpNumberOfBytesWritten=0x31e5c8, lpOverlapped=0x0 | out: lpBuffer=0x276eca0*, lpNumberOfBytesWritten=0x31e5c8*=0x5d40, lpOverlapped=0x0) returned 1 [0077.224] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows Mail\\Stationery\\Garden.jpg", nBufferLength=0x105, lpBuffer=0x31e14c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows Mail\\Stationery\\Garden.jpg", lpFilePart=0x0) returned 0x58 [0077.224] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows Mail\\Stationery\\Garden.jpg", nBufferLength=0x105, lpBuffer=0x31e14c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows Mail\\Stationery\\Garden.jpg", lpFilePart=0x0) returned 0x58 [0077.224] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e5ac) returned 1 [0077.224] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows Mail\\Stationery\\Garden.jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows mail\\stationery\\garden.jpg"), fInfoLevelId=0x0, lpFileInformation=0x31e628 | out: lpFileInformation=0x31e628*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x28e09fe0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28e09fe0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x117979e0, ftLastWriteTime.dwHighDateTime=0x1d6eb7f, nFileSizeHigh=0x0, nFileSizeLow=0x5d40)) returned 1 [0077.224] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e5a8) returned 1 [0077.224] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows Mail\\Stationery\\Garden.jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows mail\\stationery\\garden.jpg"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows Mail\\Stationery\\Garden.jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows mail\\stationery\\garden.jpg")) returned 1 [0077.225] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows Mail\\Stationery\\GreenBubbles.jpg", nBufferLength=0x105, lpBuffer=0x31e02c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows Mail\\Stationery\\GreenBubbles.jpg", lpFilePart=0x0) returned 0x5e [0077.225] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e520) returned 1 [0077.225] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows Mail\\Stationery\\GreenBubbles.jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows mail\\stationery\\greenbubbles.jpg"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x264 [0077.225] GetFileType (hFile=0x264) returned 0x1 [0077.225] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e51c) returned 1 [0077.225] GetFileType (hFile=0x264) returned 0x1 [0077.225] GetFileSize (in: hFile=0x264, lpFileSizeHigh=0x31e628 | out: lpFileSizeHigh=0x31e628*=0x0) returned 0x1906 [0077.225] ReadFile (in: hFile=0x264, lpBuffer=0x2774e34, nNumberOfBytesToRead=0x1906, lpNumberOfBytesRead=0x31e5d4, lpOverlapped=0x0 | out: lpBuffer=0x2774e34*, lpNumberOfBytesRead=0x31e5d4*=0x1906, lpOverlapped=0x0) returned 1 [0077.240] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows Mail\\Stationery\\GreenBubbles.jpg", nBufferLength=0x105, lpBuffer=0x31e018, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows Mail\\Stationery\\GreenBubbles.jpg", lpFilePart=0x0) returned 0x5e [0077.240] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e50c) returned 1 [0077.240] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows Mail\\Stationery\\GreenBubbles.jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows mail\\stationery\\greenbubbles.jpg"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x264 [0077.241] GetFileType (hFile=0x264) returned 0x1 [0077.241] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e508) returned 1 [0077.241] GetFileType (hFile=0x264) returned 0x1 [0077.241] WriteFile (in: hFile=0x264, lpBuffer=0x27c996c*, nNumberOfBytesToWrite=0x1910, lpNumberOfBytesWritten=0x31e5c8, lpOverlapped=0x0 | out: lpBuffer=0x27c996c*, lpNumberOfBytesWritten=0x31e5c8*=0x1910, lpOverlapped=0x0) returned 1 [0077.242] CloseHandle (hObject=0x264) returned 1 [0077.242] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows Mail\\Stationery\\GreenBubbles.jpg", nBufferLength=0x105, lpBuffer=0x31e14c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows Mail\\Stationery\\GreenBubbles.jpg", lpFilePart=0x0) returned 0x5e [0077.242] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows Mail\\Stationery\\GreenBubbles.jpg", nBufferLength=0x105, lpBuffer=0x31e14c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows Mail\\Stationery\\GreenBubbles.jpg", lpFilePart=0x0) returned 0x5e [0077.242] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e5ac) returned 1 [0077.242] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows Mail\\Stationery\\GreenBubbles.jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows mail\\stationery\\greenbubbles.jpg"), fInfoLevelId=0x0, lpFileInformation=0x31e628 | out: lpFileInformation=0x31e628*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x28e09fe0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28e09fe0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x117bdb40, ftLastWriteTime.dwHighDateTime=0x1d6eb7f, nFileSizeHigh=0x0, nFileSizeLow=0x1910)) returned 1 [0077.242] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e5a8) returned 1 [0077.242] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows Mail\\Stationery\\GreenBubbles.jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows mail\\stationery\\greenbubbles.jpg"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows Mail\\Stationery\\GreenBubbles.jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows mail\\stationery\\greenbubbles.jpg")) returned 1 [0077.243] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows Mail\\Stationery\\HandPrints.jpg", nBufferLength=0x105, lpBuffer=0x31e02c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows Mail\\Stationery\\HandPrints.jpg", lpFilePart=0x0) returned 0x5c [0077.243] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e520) returned 1 [0077.243] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows Mail\\Stationery\\HandPrints.jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows mail\\stationery\\handprints.jpg"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x264 [0077.243] GetFileType (hFile=0x264) returned 0x1 [0077.243] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e51c) returned 1 [0077.243] GetFileType (hFile=0x264) returned 0x1 [0077.243] GetFileSize (in: hFile=0x264, lpFileSizeHigh=0x31e628 | out: lpFileSizeHigh=0x31e628*=0x0) returned 0x107e [0077.243] ReadFile (in: hFile=0x264, lpBuffer=0x27cb6f8, nNumberOfBytesToRead=0x107e, lpNumberOfBytesRead=0x31e5d4, lpOverlapped=0x0 | out: lpBuffer=0x27cb6f8*, lpNumberOfBytesRead=0x31e5d4*=0x107e, lpOverlapped=0x0) returned 1 [0077.245] CloseHandle (hObject=0x264) returned 1 [0077.266] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows Mail\\Stationery\\HandPrints.jpg", nBufferLength=0x105, lpBuffer=0x31e018, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows Mail\\Stationery\\HandPrints.jpg", lpFilePart=0x0) returned 0x5c [0077.266] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e50c) returned 1 [0077.266] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows Mail\\Stationery\\HandPrints.jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows mail\\stationery\\handprints.jpg"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x264 [0077.267] GetFileType (hFile=0x264) returned 0x1 [0077.268] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e508) returned 1 [0077.268] GetFileType (hFile=0x264) returned 0x1 [0077.268] WriteFile (in: hFile=0x264, lpBuffer=0x281d760*, nNumberOfBytesToWrite=0x1080, lpNumberOfBytesWritten=0x31e5c8, lpOverlapped=0x0 | out: lpBuffer=0x281d760*, lpNumberOfBytesWritten=0x31e5c8*=0x1080, lpOverlapped=0x0) returned 1 [0077.268] CloseHandle (hObject=0x264) returned 1 [0077.269] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows Mail\\Stationery\\HandPrints.jpg", nBufferLength=0x105, lpBuffer=0x31e14c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows Mail\\Stationery\\HandPrints.jpg", lpFilePart=0x0) returned 0x5c [0077.269] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows Mail\\Stationery\\HandPrints.jpg", nBufferLength=0x105, lpBuffer=0x31e14c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows Mail\\Stationery\\HandPrints.jpg", lpFilePart=0x0) returned 0x5c [0077.269] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e5ac) returned 1 [0077.269] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows Mail\\Stationery\\HandPrints.jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows mail\\stationery\\handprints.jpg"), fInfoLevelId=0x0, lpFileInformation=0x31e628 | out: lpFileInformation=0x31e628*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x28e09fe0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28e09fe0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x11809e00, ftLastWriteTime.dwHighDateTime=0x1d6eb7f, nFileSizeHigh=0x0, nFileSizeLow=0x1080)) returned 1 [0077.269] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e5a8) returned 1 [0077.269] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows Mail\\Stationery\\HandPrints.jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows mail\\stationery\\handprints.jpg"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows Mail\\Stationery\\HandPrints.jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows mail\\stationery\\handprints.jpg")) returned 1 [0077.269] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows Mail\\Stationery\\OrangeCircles.jpg", nBufferLength=0x105, lpBuffer=0x31e02c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows Mail\\Stationery\\OrangeCircles.jpg", lpFilePart=0x0) returned 0x5f [0077.269] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e520) returned 1 [0077.269] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows Mail\\Stationery\\OrangeCircles.jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows mail\\stationery\\orangecircles.jpg"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x264 [0077.270] GetFileType (hFile=0x264) returned 0x1 [0077.270] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e51c) returned 1 [0077.270] GetFileType (hFile=0x264) returned 0x1 [0077.270] GetFileSize (in: hFile=0x264, lpFileSizeHigh=0x31e628 | out: lpFileSizeHigh=0x31e628*=0x0) returned 0x18ed [0077.270] ReadFile (in: hFile=0x264, lpBuffer=0x281ec54, nNumberOfBytesToRead=0x18ed, lpNumberOfBytesRead=0x31e5d4, lpOverlapped=0x0 | out: lpBuffer=0x281ec54*, lpNumberOfBytesRead=0x31e5d4*=0x18ed, lpOverlapped=0x0) returned 1 [0077.272] CloseHandle (hObject=0x264) returned 1 [0077.324] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows Mail\\Stationery\\OrangeCircles.jpg", nBufferLength=0x105, lpBuffer=0x31e018, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows Mail\\Stationery\\OrangeCircles.jpg", lpFilePart=0x0) returned 0x5f [0077.325] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e50c) returned 1 [0077.325] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows Mail\\Stationery\\OrangeCircles.jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows mail\\stationery\\orangecircles.jpg"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x264 [0077.326] GetFileType (hFile=0x264) returned 0x1 [0077.326] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e508) returned 1 [0077.326] GetFileType (hFile=0x264) returned 0x1 [0077.326] WriteFile (in: hFile=0x264, lpBuffer=0x2677084*, nNumberOfBytesToWrite=0x18f0, lpNumberOfBytesWritten=0x31e5c8, lpOverlapped=0x0 | out: lpBuffer=0x2677084*, lpNumberOfBytesWritten=0x31e5c8*=0x18f0, lpOverlapped=0x0) returned 1 [0077.328] CloseHandle (hObject=0x264) returned 1 [0077.328] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows Mail\\Stationery\\OrangeCircles.jpg", nBufferLength=0x105, lpBuffer=0x31e14c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows Mail\\Stationery\\OrangeCircles.jpg", lpFilePart=0x0) returned 0x5f [0077.328] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows Mail\\Stationery\\OrangeCircles.jpg", nBufferLength=0x105, lpBuffer=0x31e14c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows Mail\\Stationery\\OrangeCircles.jpg", lpFilePart=0x0) returned 0x5f [0077.328] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e5ac) returned 1 [0077.328] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows Mail\\Stationery\\OrangeCircles.jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows mail\\stationery\\orangecircles.jpg"), fInfoLevelId=0x0, lpFileInformation=0x31e628 | out: lpFileInformation=0x31e628*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x28e09fe0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28e09fe0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x1187c220, ftLastWriteTime.dwHighDateTime=0x1d6eb7f, nFileSizeHigh=0x0, nFileSizeLow=0x18f0)) returned 1 [0077.328] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e5a8) returned 1 [0077.328] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows Mail\\Stationery\\OrangeCircles.jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows mail\\stationery\\orangecircles.jpg"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows Mail\\Stationery\\OrangeCircles.jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows mail\\stationery\\orangecircles.jpg")) returned 1 [0077.329] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows Mail\\Stationery\\Peacock.jpg", nBufferLength=0x105, lpBuffer=0x31e02c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows Mail\\Stationery\\Peacock.jpg", lpFilePart=0x0) returned 0x59 [0077.329] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e520) returned 1 [0077.329] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows Mail\\Stationery\\Peacock.jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows mail\\stationery\\peacock.jpg"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x264 [0077.329] GetFileType (hFile=0x264) returned 0x1 [0077.329] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e51c) returned 1 [0077.329] GetFileType (hFile=0x264) returned 0x1 [0077.330] GetFileSize (in: hFile=0x264, lpFileSizeHigh=0x31e628 | out: lpFileSizeHigh=0x31e628*=0x0) returned 0x13fb [0077.330] ReadFile (in: hFile=0x264, lpBuffer=0x2678de0, nNumberOfBytesToRead=0x13fb, lpNumberOfBytesRead=0x31e5d4, lpOverlapped=0x0 | out: lpBuffer=0x2678de0*, lpNumberOfBytesRead=0x31e5d4*=0x13fb, lpOverlapped=0x0) returned 1 [0077.333] CloseHandle (hObject=0x264) returned 1 [0077.356] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows Mail\\Stationery\\Peacock.jpg", nBufferLength=0x105, lpBuffer=0x31e018, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows Mail\\Stationery\\Peacock.jpg", lpFilePart=0x0) returned 0x59 [0077.356] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e50c) returned 1 [0077.356] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows Mail\\Stationery\\Peacock.jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows mail\\stationery\\peacock.jpg"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x264 [0077.358] GetFileType (hFile=0x264) returned 0x1 [0077.358] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e508) returned 1 [0077.358] GetFileType (hFile=0x264) returned 0x1 [0077.358] WriteFile (in: hFile=0x264, lpBuffer=0x26cc124*, nNumberOfBytesToWrite=0x1400, lpNumberOfBytesWritten=0x31e5c8, lpOverlapped=0x0 | out: lpBuffer=0x26cc124*, lpNumberOfBytesWritten=0x31e5c8*=0x1400, lpOverlapped=0x0) returned 1 [0077.359] CloseHandle (hObject=0x264) returned 1 [0077.360] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows Mail\\Stationery\\Peacock.jpg", nBufferLength=0x105, lpBuffer=0x31e14c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows Mail\\Stationery\\Peacock.jpg", lpFilePart=0x0) returned 0x59 [0077.360] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows Mail\\Stationery\\Peacock.jpg", nBufferLength=0x105, lpBuffer=0x31e14c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows Mail\\Stationery\\Peacock.jpg", lpFilePart=0x0) returned 0x59 [0077.360] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e5ac) returned 1 [0077.360] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows Mail\\Stationery\\Peacock.jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows mail\\stationery\\peacock.jpg"), fInfoLevelId=0x0, lpFileInformation=0x31e628 | out: lpFileInformation=0x31e628*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x28e09fe0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28e09fe0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x118c84e0, ftLastWriteTime.dwHighDateTime=0x1d6eb7f, nFileSizeHigh=0x0, nFileSizeLow=0x1400)) returned 1 [0077.360] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e5a8) returned 1 [0077.360] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows Mail\\Stationery\\Peacock.jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows mail\\stationery\\peacock.jpg"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows Mail\\Stationery\\Peacock.jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows mail\\stationery\\peacock.jpg")) returned 1 [0077.361] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows Mail\\Stationery\\Roses.jpg", nBufferLength=0x105, lpBuffer=0x31e02c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows Mail\\Stationery\\Roses.jpg", lpFilePart=0x0) returned 0x57 [0077.361] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e520) returned 1 [0077.361] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows Mail\\Stationery\\Roses.jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows mail\\stationery\\roses.jpg"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x264 [0077.362] GetFileType (hFile=0x264) returned 0x1 [0077.362] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e51c) returned 1 [0077.362] GetFileType (hFile=0x264) returned 0x1 [0077.363] GetFileSize (in: hFile=0x264, lpFileSizeHigh=0x31e628 | out: lpFileSizeHigh=0x31e628*=0x0) returned 0x780 [0077.363] ReadFile (in: hFile=0x264, lpBuffer=0x26ce0e4, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x31e5d4, lpOverlapped=0x0 | out: lpBuffer=0x26ce0e4*, lpNumberOfBytesRead=0x31e5d4*=0x780, lpOverlapped=0x0) returned 1 [0077.365] CloseHandle (hObject=0x264) returned 1 [0077.420] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows Mail\\Stationery\\Roses.jpg", nBufferLength=0x105, lpBuffer=0x31e018, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows Mail\\Stationery\\Roses.jpg", lpFilePart=0x0) returned 0x57 [0077.421] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e50c) returned 1 [0077.421] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows Mail\\Stationery\\Roses.jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows mail\\stationery\\roses.jpg"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x264 [0077.422] GetFileType (hFile=0x264) returned 0x1 [0077.422] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e508) returned 1 [0077.422] GetFileType (hFile=0x264) returned 0x1 [0077.422] WriteFile (in: hFile=0x264, lpBuffer=0x271e5ec*, nNumberOfBytesToWrite=0x790, lpNumberOfBytesWritten=0x31e59c, lpOverlapped=0x0 | out: lpBuffer=0x271e5ec*, lpNumberOfBytesWritten=0x31e59c*=0x790, lpOverlapped=0x0) returned 1 [0077.423] CloseHandle (hObject=0x264) returned 1 [0077.423] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows Mail\\Stationery\\Roses.jpg", nBufferLength=0x105, lpBuffer=0x31e14c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows Mail\\Stationery\\Roses.jpg", lpFilePart=0x0) returned 0x57 [0077.423] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows Mail\\Stationery\\Roses.jpg", nBufferLength=0x105, lpBuffer=0x31e14c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows Mail\\Stationery\\Roses.jpg", lpFilePart=0x0) returned 0x57 [0077.423] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e5ac) returned 1 [0077.424] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows Mail\\Stationery\\Roses.jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows mail\\stationery\\roses.jpg"), fInfoLevelId=0x0, lpFileInformation=0x31e628 | out: lpFileInformation=0x31e628*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x28f3aae0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28f3aae0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x11986bc0, ftLastWriteTime.dwHighDateTime=0x1d6eb7f, nFileSizeHigh=0x0, nFileSizeLow=0x790)) returned 1 [0077.424] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e5a8) returned 1 [0077.424] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows Mail\\Stationery\\Roses.jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows mail\\stationery\\roses.jpg"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows Mail\\Stationery\\Roses.jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows mail\\stationery\\roses.jpg")) returned 1 [0077.424] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows Mail\\Stationery\\ShadesOfBlue.jpg", nBufferLength=0x105, lpBuffer=0x31e02c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows Mail\\Stationery\\ShadesOfBlue.jpg", lpFilePart=0x0) returned 0x5e [0077.424] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e520) returned 1 [0077.424] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows Mail\\Stationery\\ShadesOfBlue.jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows mail\\stationery\\shadesofblue.jpg"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x264 [0077.425] GetFileType (hFile=0x264) returned 0x1 [0077.425] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e51c) returned 1 [0077.425] GetFileType (hFile=0x264) returned 0x1 [0077.425] GetFileSize (in: hFile=0x264, lpFileSizeHigh=0x31e628 | out: lpFileSizeHigh=0x31e628*=0x0) returned 0x127e [0077.425] ReadFile (in: hFile=0x264, lpBuffer=0x271f8f8, nNumberOfBytesToRead=0x127e, lpNumberOfBytesRead=0x31e5d4, lpOverlapped=0x0 | out: lpBuffer=0x271f8f8*, lpNumberOfBytesRead=0x31e5d4*=0x127e, lpOverlapped=0x0) returned 1 [0077.427] CloseHandle (hObject=0x264) returned 1 [0077.446] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows Mail\\Stationery\\ShadesOfBlue.jpg", nBufferLength=0x105, lpBuffer=0x31e018, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows Mail\\Stationery\\ShadesOfBlue.jpg", lpFilePart=0x0) returned 0x5e [0077.446] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e50c) returned 1 [0077.446] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows Mail\\Stationery\\ShadesOfBlue.jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows mail\\stationery\\shadesofblue.jpg"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x264 [0077.447] GetFileType (hFile=0x264) returned 0x1 [0077.447] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e508) returned 1 [0077.448] GetFileType (hFile=0x264) returned 0x1 [0077.448] WriteFile (in: hFile=0x264, lpBuffer=0x2772360*, nNumberOfBytesToWrite=0x1280, lpNumberOfBytesWritten=0x31e5c8, lpOverlapped=0x0 | out: lpBuffer=0x2772360*, lpNumberOfBytesWritten=0x31e5c8*=0x1280, lpOverlapped=0x0) returned 1 [0077.449] CloseHandle (hObject=0x264) returned 1 [0077.449] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows Mail\\Stationery\\ShadesOfBlue.jpg", nBufferLength=0x105, lpBuffer=0x31e14c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows Mail\\Stationery\\ShadesOfBlue.jpg", lpFilePart=0x0) returned 0x5e [0077.449] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows Mail\\Stationery\\ShadesOfBlue.jpg", nBufferLength=0x105, lpBuffer=0x31e14c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows Mail\\Stationery\\ShadesOfBlue.jpg", lpFilePart=0x0) returned 0x5e [0077.449] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e5ac) returned 1 [0077.449] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows Mail\\Stationery\\ShadesOfBlue.jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows mail\\stationery\\shadesofblue.jpg"), fInfoLevelId=0x0, lpFileInformation=0x31e628 | out: lpFileInformation=0x31e628*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x28f3aae0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28f3aae0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x119acd20, ftLastWriteTime.dwHighDateTime=0x1d6eb7f, nFileSizeHigh=0x0, nFileSizeLow=0x1280)) returned 1 [0077.449] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e5a8) returned 1 [0077.449] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows Mail\\Stationery\\ShadesOfBlue.jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows mail\\stationery\\shadesofblue.jpg"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows Mail\\Stationery\\ShadesOfBlue.jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows mail\\stationery\\shadesofblue.jpg")) returned 1 [0077.450] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows Mail\\Stationery\\SoftBlue.jpg", nBufferLength=0x105, lpBuffer=0x31e02c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows Mail\\Stationery\\SoftBlue.jpg", lpFilePart=0x0) returned 0x5a [0077.450] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e520) returned 1 [0077.450] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows Mail\\Stationery\\SoftBlue.jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows mail\\stationery\\softblue.jpg"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x264 [0077.451] GetFileType (hFile=0x264) returned 0x1 [0077.451] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e51c) returned 1 [0077.451] GetFileType (hFile=0x264) returned 0x1 [0077.451] GetFileSize (in: hFile=0x264, lpFileSizeHigh=0x31e628 | out: lpFileSizeHigh=0x31e628*=0x0) returned 0x2949 [0077.451] ReadFile (in: hFile=0x264, lpBuffer=0x2773a54, nNumberOfBytesToRead=0x2949, lpNumberOfBytesRead=0x31e5d4, lpOverlapped=0x0 | out: lpBuffer=0x2773a54*, lpNumberOfBytesRead=0x31e5d4*=0x2949, lpOverlapped=0x0) returned 1 [0077.487] CloseHandle (hObject=0x264) returned 1 [0077.509] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows Mail\\Stationery\\SoftBlue.jpg", nBufferLength=0x105, lpBuffer=0x31e018, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows Mail\\Stationery\\SoftBlue.jpg", lpFilePart=0x0) returned 0x5a [0077.509] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e50c) returned 1 [0077.510] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows Mail\\Stationery\\SoftBlue.jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows mail\\stationery\\softblue.jpg"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x264 [0077.511] GetFileType (hFile=0x264) returned 0x1 [0077.511] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e508) returned 1 [0077.511] GetFileType (hFile=0x264) returned 0x1 [0077.511] WriteFile (in: hFile=0x264, lpBuffer=0x27cd6cc*, nNumberOfBytesToWrite=0x2950, lpNumberOfBytesWritten=0x31e5c8, lpOverlapped=0x0 | out: lpBuffer=0x27cd6cc*, lpNumberOfBytesWritten=0x31e5c8*=0x2950, lpOverlapped=0x0) returned 1 [0077.513] CloseHandle (hObject=0x264) returned 1 [0077.513] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows Mail\\Stationery\\SoftBlue.jpg", nBufferLength=0x105, lpBuffer=0x31e14c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows Mail\\Stationery\\SoftBlue.jpg", lpFilePart=0x0) returned 0x5a [0077.513] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows Mail\\Stationery\\SoftBlue.jpg", nBufferLength=0x105, lpBuffer=0x31e14c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows Mail\\Stationery\\SoftBlue.jpg", lpFilePart=0x0) returned 0x5a [0077.513] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e5ac) returned 1 [0077.513] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows Mail\\Stationery\\SoftBlue.jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows mail\\stationery\\softblue.jpg"), fInfoLevelId=0x0, lpFileInformation=0x31e628 | out: lpFileInformation=0x31e628*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x28de3e80, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28de3e80, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x11a452a0, ftLastWriteTime.dwHighDateTime=0x1d6eb7f, nFileSizeHigh=0x0, nFileSizeLow=0x2950)) returned 1 [0077.513] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e5a8) returned 1 [0077.513] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows Mail\\Stationery\\SoftBlue.jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows mail\\stationery\\softblue.jpg"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows Mail\\Stationery\\SoftBlue.jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows mail\\stationery\\softblue.jpg")) returned 1 [0077.514] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows Mail\\Stationery\\Stars.jpg", nBufferLength=0x105, lpBuffer=0x31e02c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows Mail\\Stationery\\Stars.jpg", lpFilePart=0x0) returned 0x57 [0077.514] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e520) returned 1 [0077.514] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows Mail\\Stationery\\Stars.jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows mail\\stationery\\stars.jpg"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x264 [0077.514] GetFileType (hFile=0x264) returned 0x1 [0077.514] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e51c) returned 1 [0077.514] GetFileType (hFile=0x264) returned 0x1 [0077.514] GetFileSize (in: hFile=0x264, lpFileSizeHigh=0x31e628 | out: lpFileSizeHigh=0x31e628*=0x0) returned 0x1d51 [0077.514] ReadFile (in: hFile=0x264, lpBuffer=0x27d0460, nNumberOfBytesToRead=0x1d51, lpNumberOfBytesRead=0x31e5d4, lpOverlapped=0x0 | out: lpBuffer=0x27d0460*, lpNumberOfBytesRead=0x31e5d4*=0x1d51, lpOverlapped=0x0) returned 1 [0077.523] CloseHandle (hObject=0x264) returned 1 [0077.544] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows Mail\\Stationery\\Stars.jpg", nBufferLength=0x105, lpBuffer=0x31e018, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows Mail\\Stationery\\Stars.jpg", lpFilePart=0x0) returned 0x57 [0077.544] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e50c) returned 1 [0077.544] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows Mail\\Stationery\\Stars.jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows mail\\stationery\\stars.jpg"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x264 [0077.546] GetFileType (hFile=0x264) returned 0x1 [0077.546] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e508) returned 1 [0077.546] GetFileType (hFile=0x264) returned 0x1 [0077.546] WriteFile (in: hFile=0x264, lpBuffer=0x2826528*, nNumberOfBytesToWrite=0x1d60, lpNumberOfBytesWritten=0x31e5c8, lpOverlapped=0x0 | out: lpBuffer=0x2826528*, lpNumberOfBytesWritten=0x31e5c8*=0x1d60, lpOverlapped=0x0) returned 1 [0077.547] CloseHandle (hObject=0x264) returned 1 [0077.547] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows Mail\\Stationery\\Stars.jpg", nBufferLength=0x105, lpBuffer=0x31e14c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows Mail\\Stationery\\Stars.jpg", lpFilePart=0x0) returned 0x57 [0077.547] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows Mail\\Stationery\\Stars.jpg", nBufferLength=0x105, lpBuffer=0x31e14c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows Mail\\Stationery\\Stars.jpg", lpFilePart=0x0) returned 0x57 [0077.547] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e5ac) returned 1 [0077.548] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows Mail\\Stationery\\Stars.jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows mail\\stationery\\stars.jpg"), fInfoLevelId=0x0, lpFileInformation=0x31e628 | out: lpFileInformation=0x31e628*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x28de3e80, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28de3e80, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x11a91560, ftLastWriteTime.dwHighDateTime=0x1d6eb7f, nFileSizeHigh=0x0, nFileSizeLow=0x1d60)) returned 1 [0077.548] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e5a8) returned 1 [0077.548] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows Mail\\Stationery\\Stars.jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows mail\\stationery\\stars.jpg"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows Mail\\Stationery\\Stars.jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows mail\\stationery\\stars.jpg")) returned 1 [0077.548] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e6cc) returned 1 [0077.548] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows Media", nBufferLength=0x105, lpBuffer=0x31e1d4, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows Media", lpFilePart=0x0) returned 0x43 [0077.548] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows Media\\", nBufferLength=0x105, lpBuffer=0x31e1a8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows Media\\", lpFilePart=0x0) returned 0x44 [0077.549] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows Media\\*", lpFindFileData=0x31e3f4 | out: lpFindFileData=0x31e3f4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x28d257a0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28d257a0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xf7de167e, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x381c40 [0077.549] FindNextFileW (in: hFindFile=0x381c40, lpFindFileData=0x31e404 | out: lpFindFileData=0x31e404*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x28d257a0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28d257a0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xf7de167e, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0077.549] FindNextFileW (in: hFindFile=0x381c40, lpFindFileData=0x31e404 | out: lpFindFileData=0x31e404*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x28d257a0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28de3e80, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xf928f5c4, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="12.0", cAlternateFileName="")) returned 1 [0077.550] FindNextFileW (in: hFindFile=0x381c40, lpFindFileData=0x31e404 | out: lpFindFileData=0x31e404*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x28d257a0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28de3e80, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xf928f5c4, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="12.0", cAlternateFileName="")) returned 0 [0077.550] FindClose (in: hFindFile=0x381c40 | out: hFindFile=0x381c40) returned 1 [0077.550] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e68c) returned 1 [0077.550] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e698) returned 1 [0077.550] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e6cc) returned 1 [0077.550] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows Media", nBufferLength=0x105, lpBuffer=0x31e1d4, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows Media", lpFilePart=0x0) returned 0x43 [0077.550] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows Media\\", nBufferLength=0x105, lpBuffer=0x31e1a8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows Media\\", lpFilePart=0x0) returned 0x44 [0077.550] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows Media\\*", lpFindFileData=0x31e3f4 | out: lpFindFileData=0x31e3f4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x28d257a0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28d257a0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xf7de167e, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x381c40 [0077.550] FindNextFileW (in: hFindFile=0x381c40, lpFindFileData=0x31e404 | out: lpFindFileData=0x31e404*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x28d257a0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28d257a0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xf7de167e, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0077.551] FindNextFileW (in: hFindFile=0x381c40, lpFindFileData=0x31e404 | out: lpFindFileData=0x31e404*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x28d257a0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28de3e80, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xf928f5c4, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="12.0", cAlternateFileName="")) returned 1 [0077.551] FindNextFileW (in: hFindFile=0x381c40, lpFindFileData=0x31e404 | out: lpFindFileData=0x31e404*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0077.551] FindClose (in: hFindFile=0x381c40 | out: hFindFile=0x381c40) returned 1 [0077.551] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e68c) returned 1 [0077.551] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e698) returned 1 [0077.551] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e654) returned 1 [0077.551] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows Media\\12.0", nBufferLength=0x105, lpBuffer=0x31e15c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows Media\\12.0", lpFilePart=0x0) returned 0x48 [0077.551] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows Media\\12.0\\", nBufferLength=0x105, lpBuffer=0x31e130, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows Media\\12.0\\", lpFilePart=0x0) returned 0x49 [0077.551] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows Media\\12.0\\*", lpFindFileData=0x31e37c | out: lpFindFileData=0x31e37c*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x28d257a0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28de3e80, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xf928f5c4, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x381c40 [0077.552] FindNextFileW (in: hFindFile=0x381c40, lpFindFileData=0x31e38c | out: lpFindFileData=0x31e38c*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x28d257a0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28de3e80, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xf928f5c4, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0077.552] FindNextFileW (in: hFindFile=0x381c40, lpFindFileData=0x31e38c | out: lpFindFileData=0x31e38c*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x28de3e80, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28de3e80, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xf7de167e, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x1f2, dwReserved0=0x0, dwReserved1=0x0, cFileName="WMSDKNS.DTD", cAlternateFileName="")) returned 1 [0077.552] FindNextFileW (in: hFindFile=0x381c40, lpFindFileData=0x31e38c | out: lpFindFileData=0x31e38c*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x28de3e80, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28de3e80, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xf9269464, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x27cf, dwReserved0=0x0, dwReserved1=0x0, cFileName="WMSDKNS.XML", cAlternateFileName="")) returned 1 [0077.552] FindNextFileW (in: hFindFile=0x381c40, lpFindFileData=0x31e38c | out: lpFindFileData=0x31e38c*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0077.552] FindClose (in: hFindFile=0x381c40 | out: hFindFile=0x381c40) returned 1 [0077.552] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e614) returned 1 [0077.553] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e620) returned 1 [0077.553] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e654) returned 1 [0077.553] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows Media\\12.0", nBufferLength=0x105, lpBuffer=0x31e15c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows Media\\12.0", lpFilePart=0x0) returned 0x48 [0077.553] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows Media\\12.0\\", nBufferLength=0x105, lpBuffer=0x31e130, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows Media\\12.0\\", lpFilePart=0x0) returned 0x49 [0077.553] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows Media\\12.0\\*", lpFindFileData=0x31e37c | out: lpFindFileData=0x31e37c*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x28d257a0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28de3e80, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xf928f5c4, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x381c40 [0077.553] FindNextFileW (in: hFindFile=0x381c40, lpFindFileData=0x31e38c | out: lpFindFileData=0x31e38c*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x28d257a0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28de3e80, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xf928f5c4, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0077.553] FindNextFileW (in: hFindFile=0x381c40, lpFindFileData=0x31e38c | out: lpFindFileData=0x31e38c*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x28de3e80, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28de3e80, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xf7de167e, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x1f2, dwReserved0=0x0, dwReserved1=0x0, cFileName="WMSDKNS.DTD", cAlternateFileName="")) returned 1 [0077.553] FindNextFileW (in: hFindFile=0x381c40, lpFindFileData=0x31e38c | out: lpFindFileData=0x31e38c*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x28de3e80, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28de3e80, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xf9269464, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x27cf, dwReserved0=0x0, dwReserved1=0x0, cFileName="WMSDKNS.XML", cAlternateFileName="")) returned 1 [0077.554] FindNextFileW (in: hFindFile=0x381c40, lpFindFileData=0x31e38c | out: lpFindFileData=0x31e38c*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x28de3e80, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28de3e80, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xf9269464, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x27cf, dwReserved0=0x0, dwReserved1=0x0, cFileName="WMSDKNS.XML", cAlternateFileName="")) returned 0 [0077.554] FindClose (in: hFindFile=0x381c40 | out: hFindFile=0x381c40) returned 1 [0077.554] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e614) returned 1 [0077.554] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e620) returned 1 [0077.554] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e6cc) returned 1 [0077.554] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows Sidebar", nBufferLength=0x105, lpBuffer=0x31e1d4, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows Sidebar", lpFilePart=0x0) returned 0x45 [0077.554] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows Sidebar\\", nBufferLength=0x105, lpBuffer=0x31e1a8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows Sidebar\\", lpFilePart=0x0) returned 0x46 [0077.554] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows Sidebar\\*", lpFindFileData=0x31e3f4 | out: lpFindFileData=0x31e3f4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x28d257a0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28de3e80, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x184eadb, ftLastWriteTime.dwHighDateTime=0x1cb8927, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x381c40 [0077.555] FindNextFileW (in: hFindFile=0x381c40, lpFindFileData=0x31e404 | out: lpFindFileData=0x31e404*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x28d257a0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28de3e80, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x184eadb, ftLastWriteTime.dwHighDateTime=0x1cb8927, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0077.555] FindNextFileW (in: hFindFile=0x381c40, lpFindFileData=0x31e404 | out: lpFindFileData=0x31e404*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x28d257a0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28d257a0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x184eadb, ftLastWriteTime.dwHighDateTime=0x1cb8927, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Gadgets", cAlternateFileName="")) returned 1 [0077.555] FindNextFileW (in: hFindFile=0x381c40, lpFindFileData=0x31e404 | out: lpFindFileData=0x31e404*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x28de3e80, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28de3e80, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x184eadb, ftLastWriteTime.dwHighDateTime=0x1cb8927, nFileSizeHigh=0x0, nFileSizeLow=0x54, dwReserved0=0x0, dwReserved1=0x0, cFileName="Settings.ini", cAlternateFileName="")) returned 1 [0077.556] FindNextFileW (in: hFindFile=0x381c40, lpFindFileData=0x31e404 | out: lpFindFileData=0x31e404*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0077.556] FindClose (in: hFindFile=0x381c40 | out: hFindFile=0x381c40) returned 1 [0077.556] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e68c) returned 1 [0077.556] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e698) returned 1 [0077.556] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e6cc) returned 1 [0077.556] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows Sidebar", nBufferLength=0x105, lpBuffer=0x31e1d4, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows Sidebar", lpFilePart=0x0) returned 0x45 [0077.556] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows Sidebar\\", nBufferLength=0x105, lpBuffer=0x31e1a8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows Sidebar\\", lpFilePart=0x0) returned 0x46 [0077.556] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows Sidebar\\*", lpFindFileData=0x31e3f4 | out: lpFindFileData=0x31e3f4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x28d257a0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28de3e80, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x184eadb, ftLastWriteTime.dwHighDateTime=0x1cb8927, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x381c40 [0077.556] FindNextFileW (in: hFindFile=0x381c40, lpFindFileData=0x31e404 | out: lpFindFileData=0x31e404*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x28d257a0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28de3e80, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x184eadb, ftLastWriteTime.dwHighDateTime=0x1cb8927, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0077.557] FindNextFileW (in: hFindFile=0x381c40, lpFindFileData=0x31e404 | out: lpFindFileData=0x31e404*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x28d257a0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28d257a0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x184eadb, ftLastWriteTime.dwHighDateTime=0x1cb8927, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Gadgets", cAlternateFileName="")) returned 1 [0077.557] FindNextFileW (in: hFindFile=0x381c40, lpFindFileData=0x31e404 | out: lpFindFileData=0x31e404*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x28de3e80, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28de3e80, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x184eadb, ftLastWriteTime.dwHighDateTime=0x1cb8927, nFileSizeHigh=0x0, nFileSizeLow=0x54, dwReserved0=0x0, dwReserved1=0x0, cFileName="Settings.ini", cAlternateFileName="")) returned 1 [0077.557] FindNextFileW (in: hFindFile=0x381c40, lpFindFileData=0x31e404 | out: lpFindFileData=0x31e404*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x28de3e80, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28de3e80, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x184eadb, ftLastWriteTime.dwHighDateTime=0x1cb8927, nFileSizeHigh=0x0, nFileSizeLow=0x54, dwReserved0=0x0, dwReserved1=0x0, cFileName="Settings.ini", cAlternateFileName="")) returned 0 [0077.557] FindClose (in: hFindFile=0x381c40 | out: hFindFile=0x381c40) returned 1 [0077.557] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e68c) returned 1 [0077.557] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e698) returned 1 [0077.557] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e654) returned 1 [0077.557] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows Sidebar\\Gadgets", nBufferLength=0x105, lpBuffer=0x31e15c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows Sidebar\\Gadgets", lpFilePart=0x0) returned 0x4d [0077.557] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows Sidebar\\Gadgets\\", nBufferLength=0x105, lpBuffer=0x31e130, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows Sidebar\\Gadgets\\", lpFilePart=0x0) returned 0x4e [0077.557] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows Sidebar\\Gadgets\\*", lpFindFileData=0x31e37c | out: lpFindFileData=0x31e37c*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x28d257a0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28d257a0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x184eadb, ftLastWriteTime.dwHighDateTime=0x1cb8927, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x381c40 [0077.558] FindNextFileW (in: hFindFile=0x381c40, lpFindFileData=0x31e38c | out: lpFindFileData=0x31e38c*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x28d257a0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28d257a0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x184eadb, ftLastWriteTime.dwHighDateTime=0x1cb8927, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0077.558] FindNextFileW (in: hFindFile=0x381c40, lpFindFileData=0x31e38c | out: lpFindFileData=0x31e38c*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x28d257a0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28d257a0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x184eadb, ftLastWriteTime.dwHighDateTime=0x1cb8927, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 0 [0077.558] FindClose (in: hFindFile=0x381c40 | out: hFindFile=0x381c40) returned 1 [0077.558] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e614) returned 1 [0077.558] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e620) returned 1 [0077.558] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e654) returned 1 [0077.558] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows Sidebar\\Gadgets", nBufferLength=0x105, lpBuffer=0x31e15c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows Sidebar\\Gadgets", lpFilePart=0x0) returned 0x4d [0077.559] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows Sidebar\\Gadgets\\", nBufferLength=0x105, lpBuffer=0x31e130, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows Sidebar\\Gadgets\\", lpFilePart=0x0) returned 0x4e [0077.559] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows Sidebar\\Gadgets\\*", lpFindFileData=0x31e37c | out: lpFindFileData=0x31e37c*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x28d257a0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28d257a0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x184eadb, ftLastWriteTime.dwHighDateTime=0x1cb8927, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x381c40 [0077.559] FindNextFileW (in: hFindFile=0x381c40, lpFindFileData=0x31e38c | out: lpFindFileData=0x31e38c*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x28d257a0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28d257a0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x184eadb, ftLastWriteTime.dwHighDateTime=0x1cb8927, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0077.559] FindNextFileW (in: hFindFile=0x381c40, lpFindFileData=0x31e38c | out: lpFindFileData=0x31e38c*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x28d257a0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28d257a0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x184eadb, ftLastWriteTime.dwHighDateTime=0x1cb8927, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 0 [0077.559] FindClose (in: hFindFile=0x381c40 | out: hFindFile=0x381c40) returned 1 [0077.559] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e614) returned 1 [0077.559] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e620) returned 1 [0077.559] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e744) returned 1 [0077.559] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft Help", nBufferLength=0x105, lpBuffer=0x31e24c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft Help", lpFilePart=0x0) returned 0x3a [0077.560] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft Help\\", nBufferLength=0x105, lpBuffer=0x31e220, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft Help\\", lpFilePart=0x0) returned 0x3b [0077.560] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft Help\\*", lpFindFileData=0x31e46c | out: lpFindFileData=0x31e46c*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe80ff230, ftCreationTime.dwHighDateTime=0x1d2dda1, ftLastAccessTime.dwLowDateTime=0xe80ff230, ftLastAccessTime.dwHighDateTime=0x1d2dda1, ftLastWriteTime.dwLowDateTime=0xe80ff230, ftLastWriteTime.dwHighDateTime=0x1d2dda1, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x381c40 [0077.560] FindNextFileW (in: hFindFile=0x381c40, lpFindFileData=0x31e47c | out: lpFindFileData=0x31e47c*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe80ff230, ftCreationTime.dwHighDateTime=0x1d2dda1, ftLastAccessTime.dwLowDateTime=0xe80ff230, ftLastAccessTime.dwHighDateTime=0x1d2dda1, ftLastWriteTime.dwLowDateTime=0xe80ff230, ftLastWriteTime.dwHighDateTime=0x1d2dda1, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0077.561] FindNextFileW (in: hFindFile=0x381c40, lpFindFileData=0x31e47c | out: lpFindFileData=0x31e47c*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe80ff230, ftCreationTime.dwHighDateTime=0x1d2dda1, ftLastAccessTime.dwLowDateTime=0xe80ff230, ftLastAccessTime.dwHighDateTime=0x1d2dda1, ftLastWriteTime.dwLowDateTime=0xe80ff230, ftLastWriteTime.dwHighDateTime=0x1d2dda1, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 0 [0077.561] FindClose (in: hFindFile=0x381c40 | out: hFindFile=0x381c40) returned 1 [0077.561] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e704) returned 1 [0077.561] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e710) returned 1 [0077.561] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e744) returned 1 [0077.561] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft Help", nBufferLength=0x105, lpBuffer=0x31e24c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft Help", lpFilePart=0x0) returned 0x3a [0077.561] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft Help\\", nBufferLength=0x105, lpBuffer=0x31e220, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft Help\\", lpFilePart=0x0) returned 0x3b [0077.561] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft Help\\*", lpFindFileData=0x31e46c | out: lpFindFileData=0x31e46c*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe80ff230, ftCreationTime.dwHighDateTime=0x1d2dda1, ftLastAccessTime.dwLowDateTime=0xe80ff230, ftLastAccessTime.dwHighDateTime=0x1d2dda1, ftLastWriteTime.dwLowDateTime=0xe80ff230, ftLastWriteTime.dwHighDateTime=0x1d2dda1, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x381c40 [0077.561] FindNextFileW (in: hFindFile=0x381c40, lpFindFileData=0x31e47c | out: lpFindFileData=0x31e47c*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe80ff230, ftCreationTime.dwHighDateTime=0x1d2dda1, ftLastAccessTime.dwLowDateTime=0xe80ff230, ftLastAccessTime.dwHighDateTime=0x1d2dda1, ftLastWriteTime.dwLowDateTime=0xe80ff230, ftLastWriteTime.dwHighDateTime=0x1d2dda1, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0077.562] FindNextFileW (in: hFindFile=0x381c40, lpFindFileData=0x31e47c | out: lpFindFileData=0x31e47c*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe80ff230, ftCreationTime.dwHighDateTime=0x1d2dda1, ftLastAccessTime.dwLowDateTime=0xe80ff230, ftLastAccessTime.dwHighDateTime=0x1d2dda1, ftLastWriteTime.dwLowDateTime=0xe80ff230, ftLastWriteTime.dwHighDateTime=0x1d2dda1, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 0 [0077.562] FindClose (in: hFindFile=0x381c40 | out: hFindFile=0x381c40) returned 1 [0077.562] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e704) returned 1 [0077.562] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e710) returned 1 [0077.562] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e744) returned 1 [0077.562] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla", nBufferLength=0x105, lpBuffer=0x31e24c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla", lpFilePart=0x0) returned 0x33 [0077.562] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\", nBufferLength=0x105, lpBuffer=0x31e220, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\", lpFilePart=0x0) returned 0x34 [0077.562] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\*", lpFindFileData=0x31e46c | out: lpFindFileData=0x31e46c*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xb264df80, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xb7314c10, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0xb7314c10, ftLastWriteTime.dwHighDateTime=0x1d2dda4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x381c40 [0077.563] FindNextFileW (in: hFindFile=0x381c40, lpFindFileData=0x31e47c | out: lpFindFileData=0x31e47c*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xb264df80, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xb7314c10, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0xb7314c10, ftLastWriteTime.dwHighDateTime=0x1d2dda4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0077.563] FindNextFileW (in: hFindFile=0x381c40, lpFindFileData=0x31e47c | out: lpFindFileData=0x31e47c*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xb264df80, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xb264df80, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0xb264df80, ftLastWriteTime.dwHighDateTime=0x1d2dda4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Firefox", cAlternateFileName="")) returned 1 [0077.564] FindNextFileW (in: hFindFile=0x381c40, lpFindFileData=0x31e47c | out: lpFindFileData=0x31e47c*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xb7314c10, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xb7314c10, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0xb7314c10, ftLastWriteTime.dwHighDateTime=0x1d2dda4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="updates", cAlternateFileName="")) returned 1 [0077.564] FindNextFileW (in: hFindFile=0x381c40, lpFindFileData=0x31e47c | out: lpFindFileData=0x31e47c*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xb7314c10, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xb7314c10, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0xb7314c10, ftLastWriteTime.dwHighDateTime=0x1d2dda4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="updates", cAlternateFileName="")) returned 0 [0077.564] FindClose (in: hFindFile=0x381c40 | out: hFindFile=0x381c40) returned 1 [0077.564] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e704) returned 1 [0077.564] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e710) returned 1 [0077.564] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e744) returned 1 [0077.564] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla", nBufferLength=0x105, lpBuffer=0x31e24c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla", lpFilePart=0x0) returned 0x33 [0077.564] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\", nBufferLength=0x105, lpBuffer=0x31e220, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\", lpFilePart=0x0) returned 0x34 [0077.564] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\*", lpFindFileData=0x31e46c | out: lpFindFileData=0x31e46c*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xb264df80, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xb7314c10, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0xb7314c10, ftLastWriteTime.dwHighDateTime=0x1d2dda4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x381c40 [0077.565] FindNextFileW (in: hFindFile=0x381c40, lpFindFileData=0x31e47c | out: lpFindFileData=0x31e47c*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xb264df80, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xb7314c10, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0xb7314c10, ftLastWriteTime.dwHighDateTime=0x1d2dda4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0077.565] FindNextFileW (in: hFindFile=0x381c40, lpFindFileData=0x31e47c | out: lpFindFileData=0x31e47c*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xb264df80, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xb264df80, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0xb264df80, ftLastWriteTime.dwHighDateTime=0x1d2dda4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Firefox", cAlternateFileName="")) returned 1 [0077.565] FindNextFileW (in: hFindFile=0x381c40, lpFindFileData=0x31e47c | out: lpFindFileData=0x31e47c*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xb7314c10, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xb7314c10, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0xb7314c10, ftLastWriteTime.dwHighDateTime=0x1d2dda4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="updates", cAlternateFileName="")) returned 1 [0077.565] FindNextFileW (in: hFindFile=0x381c40, lpFindFileData=0x31e47c | out: lpFindFileData=0x31e47c*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0077.565] FindClose (in: hFindFile=0x381c40 | out: hFindFile=0x381c40) returned 1 [0077.565] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e704) returned 1 [0077.565] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e710) returned 1 [0077.565] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e6cc) returned 1 [0077.565] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox", nBufferLength=0x105, lpBuffer=0x31e1d4, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox", lpFilePart=0x0) returned 0x3b [0077.566] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\", nBufferLength=0x105, lpBuffer=0x31e1a8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\", lpFilePart=0x0) returned 0x3c [0077.566] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\*", lpFindFileData=0x31e3f4 | out: lpFindFileData=0x31e3f4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xb264df80, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xb264df80, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0xb264df80, ftLastWriteTime.dwHighDateTime=0x1d2dda4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x381c40 [0077.567] FindNextFileW (in: hFindFile=0x381c40, lpFindFileData=0x31e404 | out: lpFindFileData=0x31e404*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xb264df80, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xb264df80, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0xb264df80, ftLastWriteTime.dwHighDateTime=0x1d2dda4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0077.567] FindNextFileW (in: hFindFile=0x381c40, lpFindFileData=0x31e404 | out: lpFindFileData=0x31e404*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xb264df80, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xb264df80, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0xb264df80, ftLastWriteTime.dwHighDateTime=0x1d2dda4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Profiles", cAlternateFileName="")) returned 1 [0077.567] FindNextFileW (in: hFindFile=0x381c40, lpFindFileData=0x31e404 | out: lpFindFileData=0x31e404*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xb264df80, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xb264df80, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0xb264df80, ftLastWriteTime.dwHighDateTime=0x1d2dda4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Profiles", cAlternateFileName="")) returned 0 [0077.567] FindClose (in: hFindFile=0x381c40 | out: hFindFile=0x381c40) returned 1 [0077.567] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e68c) returned 1 [0077.567] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e698) returned 1 [0077.567] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e6cc) returned 1 [0077.567] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox", nBufferLength=0x105, lpBuffer=0x31e1d4, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox", lpFilePart=0x0) returned 0x3b [0077.568] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\", nBufferLength=0x105, lpBuffer=0x31e1a8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\", lpFilePart=0x0) returned 0x3c [0077.568] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\*", lpFindFileData=0x31e3f4 | out: lpFindFileData=0x31e3f4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xb264df80, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xb264df80, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0xb264df80, ftLastWriteTime.dwHighDateTime=0x1d2dda4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x381c40 [0077.568] FindNextFileW (in: hFindFile=0x381c40, lpFindFileData=0x31e404 | out: lpFindFileData=0x31e404*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xb264df80, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xb264df80, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0xb264df80, ftLastWriteTime.dwHighDateTime=0x1d2dda4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0077.568] FindNextFileW (in: hFindFile=0x381c40, lpFindFileData=0x31e404 | out: lpFindFileData=0x31e404*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xb264df80, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xb264df80, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0xb264df80, ftLastWriteTime.dwHighDateTime=0x1d2dda4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Profiles", cAlternateFileName="")) returned 1 [0077.568] FindNextFileW (in: hFindFile=0x381c40, lpFindFileData=0x31e404 | out: lpFindFileData=0x31e404*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0077.568] FindClose (in: hFindFile=0x381c40 | out: hFindFile=0x381c40) returned 1 [0077.568] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e68c) returned 1 [0077.568] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e698) returned 1 [0077.568] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e654) returned 1 [0077.569] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles", nBufferLength=0x105, lpBuffer=0x31e15c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles", lpFilePart=0x0) returned 0x44 [0077.569] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\", nBufferLength=0x105, lpBuffer=0x31e130, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\", lpFilePart=0x0) returned 0x45 [0077.569] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\*", lpFindFileData=0x31e37c | out: lpFindFileData=0x31e37c*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xb264df80, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xb264df80, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0xb264df80, ftLastWriteTime.dwHighDateTime=0x1d2dda4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x381c40 [0077.569] FindNextFileW (in: hFindFile=0x381c40, lpFindFileData=0x31e38c | out: lpFindFileData=0x31e38c*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xb264df80, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xb264df80, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0xb264df80, ftLastWriteTime.dwHighDateTime=0x1d2dda4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0077.569] FindNextFileW (in: hFindFile=0x381c40, lpFindFileData=0x31e38c | out: lpFindFileData=0x31e38c*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xb264df80, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0x826e2030, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x826e2030, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="silmbjec.default", cAlternateFileName="SILMBJ~1.DEF")) returned 1 [0077.569] FindNextFileW (in: hFindFile=0x381c40, lpFindFileData=0x31e38c | out: lpFindFileData=0x31e38c*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xb264df80, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0x826e2030, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x826e2030, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="silmbjec.default", cAlternateFileName="SILMBJ~1.DEF")) returned 0 [0077.570] FindClose (in: hFindFile=0x381c40 | out: hFindFile=0x381c40) returned 1 [0077.570] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e614) returned 1 [0077.570] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e620) returned 1 [0077.570] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e654) returned 1 [0077.570] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles", nBufferLength=0x105, lpBuffer=0x31e15c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles", lpFilePart=0x0) returned 0x44 [0077.570] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\", nBufferLength=0x105, lpBuffer=0x31e130, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\", lpFilePart=0x0) returned 0x45 [0077.570] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\*", lpFindFileData=0x31e37c | out: lpFindFileData=0x31e37c*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xb264df80, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xb264df80, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0xb264df80, ftLastWriteTime.dwHighDateTime=0x1d2dda4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x381c40 [0077.570] FindNextFileW (in: hFindFile=0x381c40, lpFindFileData=0x31e38c | out: lpFindFileData=0x31e38c*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xb264df80, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xb264df80, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0xb264df80, ftLastWriteTime.dwHighDateTime=0x1d2dda4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0077.570] FindNextFileW (in: hFindFile=0x381c40, lpFindFileData=0x31e38c | out: lpFindFileData=0x31e38c*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xb264df80, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0x826e2030, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x826e2030, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="silmbjec.default", cAlternateFileName="SILMBJ~1.DEF")) returned 1 [0077.571] FindNextFileW (in: hFindFile=0x381c40, lpFindFileData=0x31e38c | out: lpFindFileData=0x31e38c*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0077.571] FindClose (in: hFindFile=0x381c40 | out: hFindFile=0x381c40) returned 1 [0077.571] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e614) returned 1 [0077.571] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e620) returned 1 [0077.571] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e5dc) returned 1 [0077.571] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default", nBufferLength=0x105, lpBuffer=0x31e0e4, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default", lpFilePart=0x0) returned 0x55 [0077.571] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\", nBufferLength=0x105, lpBuffer=0x31e0b8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\", lpFilePart=0x0) returned 0x56 [0077.571] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\*", lpFindFileData=0x31e304 | out: lpFindFileData=0x31e304*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xb264df80, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0x826e2030, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x826e2030, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x381c40 [0077.574] FindNextFileW (in: hFindFile=0x381c40, lpFindFileData=0x31e314 | out: lpFindFileData=0x31e314*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xb264df80, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0x826e2030, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x826e2030, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0077.574] FindNextFileW (in: hFindFile=0x381c40, lpFindFileData=0x31e314 | out: lpFindFileData=0x31e314*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xb64f2970, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xb6518ad0, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0xb6518ad0, ftLastWriteTime.dwHighDateTime=0x1d2dda4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Cache", cAlternateFileName="")) returned 1 [0077.574] FindNextFileW (in: hFindFile=0x381c40, lpFindFileData=0x31e314 | out: lpFindFileData=0x31e314*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xbece2650, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xbecfd400, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0xbecfd400, ftLastWriteTime.dwHighDateTime=0x1d2dda4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="OfflineCache", cAlternateFileName="OFFLIN~1")) returned 1 [0077.575] FindNextFileW (in: hFindFile=0x381c40, lpFindFileData=0x31e314 | out: lpFindFileData=0x31e314*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x8234ff30, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x826bbed0, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x826bbed0, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="safebrowsing", cAlternateFileName="SAFEBR~2")) returned 1 [0077.575] FindNextFileW (in: hFindFile=0x381c40, lpFindFileData=0x31e314 | out: lpFindFileData=0x31e314*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x807f0230, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x854b47b0, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x854b47b0, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="startupCache", cAlternateFileName="STARTU~1")) returned 1 [0077.575] FindNextFileW (in: hFindFile=0x381c40, lpFindFileData=0x31e314 | out: lpFindFileData=0x31e314*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xb653ec30, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0x83ce6bb0, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x83ce6bb0, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="thumbnails", cAlternateFileName="THUMBN~1")) returned 1 [0077.575] FindNextFileW (in: hFindFile=0x381c40, lpFindFileData=0x31e314 | out: lpFindFileData=0x31e314*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xb64f2970, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xb64f2970, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0x853a9e10, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x1, dwReserved0=0x0, dwReserved1=0x0, cFileName="_CACHE_CLEAN_", cAlternateFileName="_CACHE~1")) returned 1 [0077.575] FindNextFileW (in: hFindFile=0x381c40, lpFindFileData=0x31e314 | out: lpFindFileData=0x31e314*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0077.576] FindClose (in: hFindFile=0x381c40 | out: hFindFile=0x381c40) returned 1 [0077.576] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e59c) returned 1 [0077.576] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e5a8) returned 1 [0077.577] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e5dc) returned 1 [0077.577] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default", nBufferLength=0x105, lpBuffer=0x31e0e4, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default", lpFilePart=0x0) returned 0x55 [0077.577] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\", nBufferLength=0x105, lpBuffer=0x31e0b8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\", lpFilePart=0x0) returned 0x56 [0077.577] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\*", lpFindFileData=0x31e304 | out: lpFindFileData=0x31e304*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xb264df80, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0x826e2030, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x826e2030, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x381c40 [0077.578] FindNextFileW (in: hFindFile=0x381c40, lpFindFileData=0x31e314 | out: lpFindFileData=0x31e314*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xb264df80, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0x826e2030, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x826e2030, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0077.578] FindNextFileW (in: hFindFile=0x381c40, lpFindFileData=0x31e314 | out: lpFindFileData=0x31e314*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xb64f2970, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xb6518ad0, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0xb6518ad0, ftLastWriteTime.dwHighDateTime=0x1d2dda4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Cache", cAlternateFileName="")) returned 1 [0077.578] FindNextFileW (in: hFindFile=0x381c40, lpFindFileData=0x31e314 | out: lpFindFileData=0x31e314*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xbece2650, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xbecfd400, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0xbecfd400, ftLastWriteTime.dwHighDateTime=0x1d2dda4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="OfflineCache", cAlternateFileName="OFFLIN~1")) returned 1 [0077.578] FindNextFileW (in: hFindFile=0x381c40, lpFindFileData=0x31e314 | out: lpFindFileData=0x31e314*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x8234ff30, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x826bbed0, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x826bbed0, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="safebrowsing", cAlternateFileName="SAFEBR~2")) returned 1 [0077.579] FindNextFileW (in: hFindFile=0x381c40, lpFindFileData=0x31e314 | out: lpFindFileData=0x31e314*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x807f0230, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x854b47b0, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x854b47b0, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="startupCache", cAlternateFileName="STARTU~1")) returned 1 [0077.579] FindNextFileW (in: hFindFile=0x381c40, lpFindFileData=0x31e314 | out: lpFindFileData=0x31e314*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xb653ec30, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0x83ce6bb0, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x83ce6bb0, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="thumbnails", cAlternateFileName="THUMBN~1")) returned 1 [0077.579] FindNextFileW (in: hFindFile=0x381c40, lpFindFileData=0x31e314 | out: lpFindFileData=0x31e314*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xb64f2970, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xb64f2970, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0x853a9e10, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x1, dwReserved0=0x0, dwReserved1=0x0, cFileName="_CACHE_CLEAN_", cAlternateFileName="_CACHE~1")) returned 1 [0077.579] FindNextFileW (in: hFindFile=0x381c40, lpFindFileData=0x31e314 | out: lpFindFileData=0x31e314*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xb64f2970, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xb64f2970, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0x853a9e10, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x1, dwReserved0=0x0, dwReserved1=0x0, cFileName="_CACHE_CLEAN_", cAlternateFileName="_CACHE~1")) returned 0 [0077.580] FindClose (in: hFindFile=0x381c40 | out: hFindFile=0x381c40) returned 1 [0077.580] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e59c) returned 1 [0077.580] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e5a8) returned 1 [0077.581] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e564) returned 1 [0077.581] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\Cache", nBufferLength=0x105, lpBuffer=0x31e06c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\Cache", lpFilePart=0x0) returned 0x5b [0077.581] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\Cache\\", nBufferLength=0x105, lpBuffer=0x31e040, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\Cache\\", lpFilePart=0x0) returned 0x5c [0077.581] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\Cache\\*", lpFindFileData=0x31e28c | out: lpFindFileData=0x31e28c*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xb64f2970, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xb6518ad0, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0xb6518ad0, ftLastWriteTime.dwHighDateTime=0x1d2dda4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x381c40 [0077.589] FindNextFileW (in: hFindFile=0x381c40, lpFindFileData=0x31e29c | out: lpFindFileData=0x31e29c*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xb64f2970, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xb6518ad0, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0xb6518ad0, ftLastWriteTime.dwHighDateTime=0x1d2dda4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0077.589] FindNextFileW (in: hFindFile=0x381c40, lpFindFileData=0x31e29c | out: lpFindFileData=0x31e29c*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xb64f2970, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0x81eff750, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x81eff750, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="0", cAlternateFileName="")) returned 1 [0077.589] FindNextFileW (in: hFindFile=0x381c40, lpFindFileData=0x31e29c | out: lpFindFileData=0x31e29c*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xb64f2970, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0x826bbed0, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x826bbed0, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="1", cAlternateFileName="")) returned 1 [0077.589] FindNextFileW (in: hFindFile=0x381c40, lpFindFileData=0x31e29c | out: lpFindFileData=0x31e29c*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xb64f2970, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xb64f2970, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0xb64f2970, ftLastWriteTime.dwHighDateTime=0x1d2dda4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="2", cAlternateFileName="")) returned 1 [0077.590] FindNextFileW (in: hFindFile=0x381c40, lpFindFileData=0x31e29c | out: lpFindFileData=0x31e29c*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xb64f2970, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xb727c690, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0xb727c690, ftLastWriteTime.dwHighDateTime=0x1d2dda4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="3", cAlternateFileName="")) returned 1 [0077.594] FindNextFileW (in: hFindFile=0x381c40, lpFindFileData=0x31e29c | out: lpFindFileData=0x31e29c*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xb64f2970, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xb64f2970, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0xb64f2970, ftLastWriteTime.dwHighDateTime=0x1d2dda4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="4", cAlternateFileName="")) returned 1 [0077.594] FindNextFileW (in: hFindFile=0x381c40, lpFindFileData=0x31e29c | out: lpFindFileData=0x31e29c*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xb64f2970, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xb64f2970, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0xb64f2970, ftLastWriteTime.dwHighDateTime=0x1d2dda4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="5", cAlternateFileName="")) returned 1 [0077.594] FindNextFileW (in: hFindFile=0x381c40, lpFindFileData=0x31e29c | out: lpFindFileData=0x31e29c*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xb6518ad0, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xb6518ad0, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0xb6518ad0, ftLastWriteTime.dwHighDateTime=0x1d2dda4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="6", cAlternateFileName="")) returned 1 [0077.595] FindNextFileW (in: hFindFile=0x381c40, lpFindFileData=0x31e29c | out: lpFindFileData=0x31e29c*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xb6518ad0, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xb6518ad0, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0xb6518ad0, ftLastWriteTime.dwHighDateTime=0x1d2dda4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="7", cAlternateFileName="")) returned 1 [0077.595] FindNextFileW (in: hFindFile=0x381c40, lpFindFileData=0x31e29c | out: lpFindFileData=0x31e29c*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xb6518ad0, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xb6518ad0, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0xb6518ad0, ftLastWriteTime.dwHighDateTime=0x1d2dda4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="8", cAlternateFileName="")) returned 1 [0077.595] FindNextFileW (in: hFindFile=0x381c40, lpFindFileData=0x31e29c | out: lpFindFileData=0x31e29c*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xb6518ad0, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0x81e8d330, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x81e8d330, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="9", cAlternateFileName="")) returned 1 [0077.595] FindNextFileW (in: hFindFile=0x381c40, lpFindFileData=0x31e29c | out: lpFindFileData=0x31e29c*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xb6518ad0, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xb6518ad0, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0xb6518ad0, ftLastWriteTime.dwHighDateTime=0x1d2dda4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="A", cAlternateFileName="")) returned 1 [0077.595] FindNextFileW (in: hFindFile=0x381c40, lpFindFileData=0x31e29c | out: lpFindFileData=0x31e29c*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xb6518ad0, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xb6518ad0, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0xb6518ad0, ftLastWriteTime.dwHighDateTime=0x1d2dda4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="B", cAlternateFileName="")) returned 1 [0077.596] FindNextFileW (in: hFindFile=0x381c40, lpFindFileData=0x31e29c | out: lpFindFileData=0x31e29c*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xb6518ad0, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xb7eaf750, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0xb7eaf750, ftLastWriteTime.dwHighDateTime=0x1d2dda4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="C", cAlternateFileName="")) returned 1 [0077.596] FindNextFileW (in: hFindFile=0x381c40, lpFindFileData=0x31e29c | out: lpFindFileData=0x31e29c*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xb6518ad0, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0x81e671d0, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x81e671d0, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="D", cAlternateFileName="")) returned 1 [0077.596] FindNextFileW (in: hFindFile=0x381c40, lpFindFileData=0x31e29c | out: lpFindFileData=0x31e29c*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xb6518ad0, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xb7f6de30, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0xb7f6de30, ftLastWriteTime.dwHighDateTime=0x1d2dda4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="E", cAlternateFileName="")) returned 1 [0077.596] FindNextFileW (in: hFindFile=0x381c40, lpFindFileData=0x31e29c | out: lpFindFileData=0x31e29c*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xb6518ad0, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0x82329dd0, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x82329dd0, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="F", cAlternateFileName="")) returned 1 [0077.596] FindNextFileW (in: hFindFile=0x381c40, lpFindFileData=0x31e29c | out: lpFindFileData=0x31e29c*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xb6518ad0, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xb6518ad0, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0x851226b0, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x400000, dwReserved0=0x0, dwReserved1=0x0, cFileName="_CACHE_001_", cAlternateFileName="_CACHE~2")) returned 1 [0077.596] FindNextFileW (in: hFindFile=0x381c40, lpFindFileData=0x31e29c | out: lpFindFileData=0x31e29c*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xb6518ad0, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xb6518ad0, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0x851e0d90, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x400000, dwReserved0=0x0, dwReserved1=0x0, cFileName="_CACHE_002_", cAlternateFileName="_CACHE~3")) returned 1 [0077.597] FindNextFileW (in: hFindFile=0x381c40, lpFindFileData=0x31e29c | out: lpFindFileData=0x31e29c*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xb6518ad0, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xb6518ad0, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0x8529f470, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x400000, dwReserved0=0x0, dwReserved1=0x0, cFileName="_CACHE_003_", cAlternateFileName="_CACHE~4")) returned 1 [0077.597] FindNextFileW (in: hFindFile=0x381c40, lpFindFileData=0x31e29c | out: lpFindFileData=0x31e29c*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xb64f2970, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xb64f2970, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0x8535db50, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x2114, dwReserved0=0x0, dwReserved1=0x0, cFileName="_CACHE_MAP_", cAlternateFileName="_CACHE~1")) returned 1 [0077.597] FindNextFileW (in: hFindFile=0x381c40, lpFindFileData=0x31e29c | out: lpFindFileData=0x31e29c*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0077.597] FindClose (in: hFindFile=0x381c40 | out: hFindFile=0x381c40) returned 1 [0077.598] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e524) returned 1 [0077.598] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e530) returned 1 [0077.598] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e564) returned 1 [0077.598] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\Cache", nBufferLength=0x105, lpBuffer=0x31e06c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\Cache", lpFilePart=0x0) returned 0x5b [0077.598] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\Cache\\", nBufferLength=0x105, lpBuffer=0x31e040, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\Cache\\", lpFilePart=0x0) returned 0x5c [0077.598] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\Cache\\*", lpFindFileData=0x31e28c | out: lpFindFileData=0x31e28c*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xb64f2970, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xb6518ad0, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0xb6518ad0, ftLastWriteTime.dwHighDateTime=0x1d2dda4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x381c40 [0077.599] FindNextFileW (in: hFindFile=0x381c40, lpFindFileData=0x31e29c | out: lpFindFileData=0x31e29c*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xb64f2970, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xb6518ad0, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0xb6518ad0, ftLastWriteTime.dwHighDateTime=0x1d2dda4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0077.600] FindNextFileW (in: hFindFile=0x381c40, lpFindFileData=0x31e29c | out: lpFindFileData=0x31e29c*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xb64f2970, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0x81eff750, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x81eff750, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="0", cAlternateFileName="")) returned 1 [0077.600] FindNextFileW (in: hFindFile=0x381c40, lpFindFileData=0x31e29c | out: lpFindFileData=0x31e29c*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xb64f2970, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0x826bbed0, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x826bbed0, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="1", cAlternateFileName="")) returned 1 [0077.600] FindNextFileW (in: hFindFile=0x381c40, lpFindFileData=0x31e29c | out: lpFindFileData=0x31e29c*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xb64f2970, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xb64f2970, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0xb64f2970, ftLastWriteTime.dwHighDateTime=0x1d2dda4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="2", cAlternateFileName="")) returned 1 [0077.600] FindNextFileW (in: hFindFile=0x381c40, lpFindFileData=0x31e29c | out: lpFindFileData=0x31e29c*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xb64f2970, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xb727c690, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0xb727c690, ftLastWriteTime.dwHighDateTime=0x1d2dda4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="3", cAlternateFileName="")) returned 1 [0077.600] FindNextFileW (in: hFindFile=0x381c40, lpFindFileData=0x31e29c | out: lpFindFileData=0x31e29c*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xb64f2970, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xb64f2970, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0xb64f2970, ftLastWriteTime.dwHighDateTime=0x1d2dda4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="4", cAlternateFileName="")) returned 1 [0077.600] FindNextFileW (in: hFindFile=0x381c40, lpFindFileData=0x31e29c | out: lpFindFileData=0x31e29c*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xb64f2970, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xb64f2970, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0xb64f2970, ftLastWriteTime.dwHighDateTime=0x1d2dda4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="5", cAlternateFileName="")) returned 1 [0077.600] FindNextFileW (in: hFindFile=0x381c40, lpFindFileData=0x31e29c | out: lpFindFileData=0x31e29c*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xb6518ad0, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xb6518ad0, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0xb6518ad0, ftLastWriteTime.dwHighDateTime=0x1d2dda4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="6", cAlternateFileName="")) returned 1 [0077.601] FindNextFileW (in: hFindFile=0x381c40, lpFindFileData=0x31e29c | out: lpFindFileData=0x31e29c*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xb6518ad0, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xb6518ad0, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0xb6518ad0, ftLastWriteTime.dwHighDateTime=0x1d2dda4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="7", cAlternateFileName="")) returned 1 [0077.601] FindNextFileW (in: hFindFile=0x381c40, lpFindFileData=0x31e29c | out: lpFindFileData=0x31e29c*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xb6518ad0, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xb6518ad0, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0xb6518ad0, ftLastWriteTime.dwHighDateTime=0x1d2dda4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="8", cAlternateFileName="")) returned 1 [0077.601] FindNextFileW (in: hFindFile=0x381c40, lpFindFileData=0x31e29c | out: lpFindFileData=0x31e29c*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xb6518ad0, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0x81e8d330, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x81e8d330, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="9", cAlternateFileName="")) returned 1 [0077.601] FindNextFileW (in: hFindFile=0x381c40, lpFindFileData=0x31e29c | out: lpFindFileData=0x31e29c*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xb6518ad0, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xb6518ad0, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0xb6518ad0, ftLastWriteTime.dwHighDateTime=0x1d2dda4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="A", cAlternateFileName="")) returned 1 [0077.601] FindNextFileW (in: hFindFile=0x381c40, lpFindFileData=0x31e29c | out: lpFindFileData=0x31e29c*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xb6518ad0, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xb6518ad0, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0xb6518ad0, ftLastWriteTime.dwHighDateTime=0x1d2dda4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="B", cAlternateFileName="")) returned 1 [0077.601] FindNextFileW (in: hFindFile=0x381c40, lpFindFileData=0x31e29c | out: lpFindFileData=0x31e29c*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xb6518ad0, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xb7eaf750, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0xb7eaf750, ftLastWriteTime.dwHighDateTime=0x1d2dda4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="C", cAlternateFileName="")) returned 1 [0077.601] FindNextFileW (in: hFindFile=0x381c40, lpFindFileData=0x31e29c | out: lpFindFileData=0x31e29c*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xb6518ad0, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0x81e671d0, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x81e671d0, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="D", cAlternateFileName="")) returned 1 [0077.602] FindNextFileW (in: hFindFile=0x381c40, lpFindFileData=0x31e29c | out: lpFindFileData=0x31e29c*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xb6518ad0, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xb7f6de30, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0xb7f6de30, ftLastWriteTime.dwHighDateTime=0x1d2dda4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="E", cAlternateFileName="")) returned 1 [0077.602] FindNextFileW (in: hFindFile=0x381c40, lpFindFileData=0x31e29c | out: lpFindFileData=0x31e29c*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xb6518ad0, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0x82329dd0, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x82329dd0, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="F", cAlternateFileName="")) returned 1 [0077.602] FindNextFileW (in: hFindFile=0x381c40, lpFindFileData=0x31e29c | out: lpFindFileData=0x31e29c*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xb6518ad0, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xb6518ad0, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0x851226b0, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x400000, dwReserved0=0x0, dwReserved1=0x0, cFileName="_CACHE_001_", cAlternateFileName="_CACHE~2")) returned 1 [0077.602] FindNextFileW (in: hFindFile=0x381c40, lpFindFileData=0x31e29c | out: lpFindFileData=0x31e29c*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xb6518ad0, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xb6518ad0, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0x851e0d90, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x400000, dwReserved0=0x0, dwReserved1=0x0, cFileName="_CACHE_002_", cAlternateFileName="_CACHE~3")) returned 1 [0077.602] FindNextFileW (in: hFindFile=0x381c40, lpFindFileData=0x31e29c | out: lpFindFileData=0x31e29c*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xb6518ad0, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xb6518ad0, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0x8529f470, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x400000, dwReserved0=0x0, dwReserved1=0x0, cFileName="_CACHE_003_", cAlternateFileName="_CACHE~4")) returned 1 [0077.602] FindNextFileW (in: hFindFile=0x381c40, lpFindFileData=0x31e29c | out: lpFindFileData=0x31e29c*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xb64f2970, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xb64f2970, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0x8535db50, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x2114, dwReserved0=0x0, dwReserved1=0x0, cFileName="_CACHE_MAP_", cAlternateFileName="_CACHE~1")) returned 1 [0077.602] FindNextFileW (in: hFindFile=0x381c40, lpFindFileData=0x31e29c | out: lpFindFileData=0x31e29c*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xb64f2970, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xb64f2970, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0x8535db50, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x2114, dwReserved0=0x0, dwReserved1=0x0, cFileName="_CACHE_MAP_", cAlternateFileName="_CACHE~1")) returned 0 [0077.603] FindClose (in: hFindFile=0x381c40 | out: hFindFile=0x381c40) returned 1 [0077.604] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e524) returned 1 [0077.604] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e530) returned 1 [0077.604] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e4ec) returned 1 [0077.604] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\Cache\\0", nBufferLength=0x105, lpBuffer=0x31dff4, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\Cache\\0", lpFilePart=0x0) returned 0x5d [0077.604] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\Cache\\0\\", nBufferLength=0x105, lpBuffer=0x31dfc8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\Cache\\0\\", lpFilePart=0x0) returned 0x5e [0077.604] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\Cache\\0\\*", lpFindFileData=0x31e214 | out: lpFindFileData=0x31e214*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xb64f2970, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0x81eff750, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x81eff750, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x381c40 [0077.606] FindNextFileW (in: hFindFile=0x381c40, lpFindFileData=0x31e224 | out: lpFindFileData=0x31e224*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xb64f2970, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0x81eff750, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x81eff750, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0077.606] FindNextFileW (in: hFindFile=0x381c40, lpFindFileData=0x31e224 | out: lpFindFileData=0x31e224*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xb8c39470, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xb8c39470, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0xb8c39470, ftLastWriteTime.dwHighDateTime=0x1d2dda4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="98", cAlternateFileName="")) returned 1 [0077.606] FindNextFileW (in: hFindFile=0x381c40, lpFindFileData=0x31e224 | out: lpFindFileData=0x31e224*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x81eff750, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x81eff750, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x81eff750, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="A8", cAlternateFileName="")) returned 1 [0077.606] FindNextFileW (in: hFindFile=0x381c40, lpFindFileData=0x31e224 | out: lpFindFileData=0x31e224*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x81eff750, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x81eff750, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x81eff750, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="A8", cAlternateFileName="")) returned 0 [0077.606] FindClose (in: hFindFile=0x381c40 | out: hFindFile=0x381c40) returned 1 [0077.606] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e4ac) returned 1 [0077.606] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e4b8) returned 1 [0077.606] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e4ec) returned 1 [0077.607] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\Cache\\0", nBufferLength=0x105, lpBuffer=0x31dff4, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\Cache\\0", lpFilePart=0x0) returned 0x5d [0077.607] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\Cache\\0\\", nBufferLength=0x105, lpBuffer=0x31dfc8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\Cache\\0\\", lpFilePart=0x0) returned 0x5e [0077.607] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\Cache\\0\\*", lpFindFileData=0x31e214 | out: lpFindFileData=0x31e214*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xb64f2970, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0x81eff750, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x81eff750, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x381c40 [0077.607] FindNextFileW (in: hFindFile=0x381c40, lpFindFileData=0x31e224 | out: lpFindFileData=0x31e224*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xb64f2970, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0x81eff750, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x81eff750, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0077.607] FindNextFileW (in: hFindFile=0x381c40, lpFindFileData=0x31e224 | out: lpFindFileData=0x31e224*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xb8c39470, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xb8c39470, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0xb8c39470, ftLastWriteTime.dwHighDateTime=0x1d2dda4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="98", cAlternateFileName="")) returned 1 [0077.607] FindNextFileW (in: hFindFile=0x381c40, lpFindFileData=0x31e224 | out: lpFindFileData=0x31e224*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x81eff750, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x81eff750, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x81eff750, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="A8", cAlternateFileName="")) returned 1 [0077.607] FindNextFileW (in: hFindFile=0x381c40, lpFindFileData=0x31e224 | out: lpFindFileData=0x31e224*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0077.607] FindClose (in: hFindFile=0x381c40 | out: hFindFile=0x381c40) returned 1 [0077.607] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e4ac) returned 1 [0077.607] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e4b8) returned 1 [0077.607] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e474) returned 1 [0077.608] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\Cache\\0\\98", nBufferLength=0x105, lpBuffer=0x31df7c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\Cache\\0\\98", lpFilePart=0x0) returned 0x60 [0077.608] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\Cache\\0\\98\\", nBufferLength=0x105, lpBuffer=0x31df50, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\Cache\\0\\98\\", lpFilePart=0x0) returned 0x61 [0077.608] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\Cache\\0\\98\\*", lpFindFileData=0x31e19c | out: lpFindFileData=0x31e19c*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xb8c39470, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xb8c39470, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0xb8c39470, ftLastWriteTime.dwHighDateTime=0x1d2dda4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x381c40 [0077.608] FindNextFileW (in: hFindFile=0x381c40, lpFindFileData=0x31e1ac | out: lpFindFileData=0x31e1ac*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xb8c39470, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xb8c39470, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0xb8c39470, ftLastWriteTime.dwHighDateTime=0x1d2dda4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0077.608] FindNextFileW (in: hFindFile=0x381c40, lpFindFileData=0x31e1ac | out: lpFindFileData=0x31e1ac*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xb8c39470, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xb8c39470, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0xb8cd19f0, ftLastWriteTime.dwHighDateTime=0x1d2dda4, nFileSizeHigh=0x0, nFileSizeLow=0xb67e, dwReserved0=0x0, dwReserved1=0x0, cFileName="B60F3d01", cAlternateFileName="")) returned 1 [0077.608] FindNextFileW (in: hFindFile=0x381c40, lpFindFileData=0x31e1ac | out: lpFindFileData=0x31e1ac*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0077.608] FindClose (in: hFindFile=0x381c40 | out: hFindFile=0x381c40) returned 1 [0077.608] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e434) returned 1 [0077.608] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e440) returned 1 [0077.609] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e474) returned 1 [0077.609] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\Cache\\0\\98", nBufferLength=0x105, lpBuffer=0x31df7c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\Cache\\0\\98", lpFilePart=0x0) returned 0x60 [0077.609] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\Cache\\0\\98\\", nBufferLength=0x105, lpBuffer=0x31df50, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\Cache\\0\\98\\", lpFilePart=0x0) returned 0x61 [0077.609] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\Cache\\0\\98\\*", lpFindFileData=0x31e19c | out: lpFindFileData=0x31e19c*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xb8c39470, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xb8c39470, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0xb8c39470, ftLastWriteTime.dwHighDateTime=0x1d2dda4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x381c40 [0077.609] FindNextFileW (in: hFindFile=0x381c40, lpFindFileData=0x31e1ac | out: lpFindFileData=0x31e1ac*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xb8c39470, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xb8c39470, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0xb8c39470, ftLastWriteTime.dwHighDateTime=0x1d2dda4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0077.609] FindNextFileW (in: hFindFile=0x381c40, lpFindFileData=0x31e1ac | out: lpFindFileData=0x31e1ac*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xb8c39470, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xb8c39470, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0xb8cd19f0, ftLastWriteTime.dwHighDateTime=0x1d2dda4, nFileSizeHigh=0x0, nFileSizeLow=0xb67e, dwReserved0=0x0, dwReserved1=0x0, cFileName="B60F3d01", cAlternateFileName="")) returned 1 [0077.609] FindNextFileW (in: hFindFile=0x381c40, lpFindFileData=0x31e1ac | out: lpFindFileData=0x31e1ac*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xb8c39470, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xb8c39470, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0xb8cd19f0, ftLastWriteTime.dwHighDateTime=0x1d2dda4, nFileSizeHigh=0x0, nFileSizeLow=0xb67e, dwReserved0=0x0, dwReserved1=0x0, cFileName="B60F3d01", cAlternateFileName="")) returned 0 [0077.609] FindClose (in: hFindFile=0x381c40 | out: hFindFile=0x381c40) returned 1 [0077.610] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e434) returned 1 [0077.610] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e440) returned 1 [0077.610] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e474) returned 1 [0077.610] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\Cache\\0\\A8", nBufferLength=0x105, lpBuffer=0x31df7c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\Cache\\0\\A8", lpFilePart=0x0) returned 0x60 [0077.610] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\Cache\\0\\A8\\", nBufferLength=0x105, lpBuffer=0x31df50, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\Cache\\0\\A8\\", lpFilePart=0x0) returned 0x61 [0077.610] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\Cache\\0\\A8\\*", lpFindFileData=0x31e19c | out: lpFindFileData=0x31e19c*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x81eff750, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x81eff750, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x81eff750, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x381c40 [0077.611] FindNextFileW (in: hFindFile=0x381c40, lpFindFileData=0x31e1ac | out: lpFindFileData=0x31e1ac*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x81eff750, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x81eff750, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x81eff750, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0077.611] FindNextFileW (in: hFindFile=0x381c40, lpFindFileData=0x31e1ac | out: lpFindFileData=0x31e1ac*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x81eff750, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x81eff750, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x81eff750, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x4898, dwReserved0=0x0, dwReserved1=0x0, cFileName="C3B7Bd01", cAlternateFileName="")) returned 1 [0077.611] FindNextFileW (in: hFindFile=0x381c40, lpFindFileData=0x31e1ac | out: lpFindFileData=0x31e1ac*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0077.611] FindClose (in: hFindFile=0x381c40 | out: hFindFile=0x381c40) returned 1 [0077.611] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e434) returned 1 [0077.611] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e440) returned 1 [0077.611] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e474) returned 1 [0077.611] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\Cache\\0\\A8", nBufferLength=0x105, lpBuffer=0x31df7c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\Cache\\0\\A8", lpFilePart=0x0) returned 0x60 [0077.612] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\Cache\\0\\A8\\", nBufferLength=0x105, lpBuffer=0x31df50, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\Cache\\0\\A8\\", lpFilePart=0x0) returned 0x61 [0077.612] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\Cache\\0\\A8\\*", lpFindFileData=0x31e19c | out: lpFindFileData=0x31e19c*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x81eff750, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x81eff750, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x81eff750, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x381c40 [0077.612] FindNextFileW (in: hFindFile=0x381c40, lpFindFileData=0x31e1ac | out: lpFindFileData=0x31e1ac*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x81eff750, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x81eff750, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x81eff750, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0077.612] FindNextFileW (in: hFindFile=0x381c40, lpFindFileData=0x31e1ac | out: lpFindFileData=0x31e1ac*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x81eff750, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x81eff750, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x81eff750, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x4898, dwReserved0=0x0, dwReserved1=0x0, cFileName="C3B7Bd01", cAlternateFileName="")) returned 1 [0077.612] FindNextFileW (in: hFindFile=0x381c40, lpFindFileData=0x31e1ac | out: lpFindFileData=0x31e1ac*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x81eff750, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x81eff750, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x81eff750, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x4898, dwReserved0=0x0, dwReserved1=0x0, cFileName="C3B7Bd01", cAlternateFileName="")) returned 0 [0077.612] FindClose (in: hFindFile=0x381c40 | out: hFindFile=0x381c40) returned 1 [0077.612] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e434) returned 1 [0077.612] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e440) returned 1 [0077.612] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e4ec) returned 1 [0077.612] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\Cache\\1", nBufferLength=0x105, lpBuffer=0x31dff4, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\Cache\\1", lpFilePart=0x0) returned 0x5d [0077.613] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\Cache\\1\\", nBufferLength=0x105, lpBuffer=0x31dfc8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\Cache\\1\\", lpFilePart=0x0) returned 0x5e [0077.613] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\Cache\\1\\*", lpFindFileData=0x31e214 | out: lpFindFileData=0x31e214*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xb64f2970, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0x826bbed0, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x826bbed0, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x381c40 [0077.613] FindNextFileW (in: hFindFile=0x381c40, lpFindFileData=0x31e224 | out: lpFindFileData=0x31e224*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xb64f2970, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0x826bbed0, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x826bbed0, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0077.613] FindNextFileW (in: hFindFile=0x381c40, lpFindFileData=0x31e224 | out: lpFindFileData=0x31e224*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xb7680bb0, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xb7680bb0, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0xb7680bb0, ftLastWriteTime.dwHighDateTime=0x1d2dda4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="0B", cAlternateFileName="")) returned 1 [0077.613] FindNextFileW (in: hFindFile=0x381c40, lpFindFileData=0x31e224 | out: lpFindFileData=0x31e224*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x826bbed0, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x826bbed0, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x826bbed0, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="C2", cAlternateFileName="")) returned 1 [0077.613] FindNextFileW (in: hFindFile=0x381c40, lpFindFileData=0x31e224 | out: lpFindFileData=0x31e224*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xb7d7ec50, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xb7d7ec50, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0xb7d7ec50, ftLastWriteTime.dwHighDateTime=0x1d2dda4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="F6", cAlternateFileName="")) returned 1 [0077.614] FindNextFileW (in: hFindFile=0x381c40, lpFindFileData=0x31e224 | out: lpFindFileData=0x31e224*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xb7d7ec50, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xb7d7ec50, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0xb7d7ec50, ftLastWriteTime.dwHighDateTime=0x1d2dda4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="F6", cAlternateFileName="")) returned 0 [0077.614] FindClose (in: hFindFile=0x381c40 | out: hFindFile=0x381c40) returned 1 [0077.614] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e4ac) returned 1 [0077.614] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e4b8) returned 1 [0077.614] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e4ec) returned 1 [0077.614] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\Cache\\1", nBufferLength=0x105, lpBuffer=0x31dff4, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\Cache\\1", lpFilePart=0x0) returned 0x5d [0077.614] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\Cache\\1\\", nBufferLength=0x105, lpBuffer=0x31dfc8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\Cache\\1\\", lpFilePart=0x0) returned 0x5e [0077.614] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\Cache\\1\\*", lpFindFileData=0x31e214 | out: lpFindFileData=0x31e214*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xb64f2970, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0x826bbed0, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x826bbed0, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x381c40 [0077.614] FindNextFileW (in: hFindFile=0x381c40, lpFindFileData=0x31e224 | out: lpFindFileData=0x31e224*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xb64f2970, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0x826bbed0, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x826bbed0, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0077.614] FindNextFileW (in: hFindFile=0x381c40, lpFindFileData=0x31e224 | out: lpFindFileData=0x31e224*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xb7680bb0, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xb7680bb0, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0xb7680bb0, ftLastWriteTime.dwHighDateTime=0x1d2dda4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="0B", cAlternateFileName="")) returned 1 [0077.615] FindNextFileW (in: hFindFile=0x381c40, lpFindFileData=0x31e224 | out: lpFindFileData=0x31e224*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x826bbed0, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x826bbed0, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x826bbed0, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="C2", cAlternateFileName="")) returned 1 [0077.615] FindNextFileW (in: hFindFile=0x381c40, lpFindFileData=0x31e224 | out: lpFindFileData=0x31e224*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xb7d7ec50, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xb7d7ec50, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0xb7d7ec50, ftLastWriteTime.dwHighDateTime=0x1d2dda4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="F6", cAlternateFileName="")) returned 1 [0077.615] FindNextFileW (in: hFindFile=0x381c40, lpFindFileData=0x31e224 | out: lpFindFileData=0x31e224*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0077.615] FindClose (in: hFindFile=0x381c40 | out: hFindFile=0x381c40) returned 1 [0077.615] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e4ac) returned 1 [0077.615] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e4b8) returned 1 [0077.615] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e474) returned 1 [0077.615] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\Cache\\1\\0B", nBufferLength=0x105, lpBuffer=0x31df7c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\Cache\\1\\0B", lpFilePart=0x0) returned 0x60 [0077.615] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\Cache\\1\\0B\\", nBufferLength=0x105, lpBuffer=0x31df50, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\Cache\\1\\0B\\", lpFilePart=0x0) returned 0x61 [0077.615] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\Cache\\1\\0B\\*", lpFindFileData=0x31e19c | out: lpFindFileData=0x31e19c*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xb7680bb0, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xb7680bb0, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0xb7680bb0, ftLastWriteTime.dwHighDateTime=0x1d2dda4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x381c40 [0077.615] FindNextFileW (in: hFindFile=0x381c40, lpFindFileData=0x31e1ac | out: lpFindFileData=0x31e1ac*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xb7680bb0, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xb7680bb0, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0xb7680bb0, ftLastWriteTime.dwHighDateTime=0x1d2dda4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0077.616] FindNextFileW (in: hFindFile=0x381c40, lpFindFileData=0x31e1ac | out: lpFindFileData=0x31e1ac*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xb7680bb0, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xb7680bb0, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0xb7680bb0, ftLastWriteTime.dwHighDateTime=0x1d2dda4, nFileSizeHigh=0x0, nFileSizeLow=0x204fd, dwReserved0=0x0, dwReserved1=0x0, cFileName="FCBF5d01", cAlternateFileName="")) returned 1 [0077.616] FindNextFileW (in: hFindFile=0x381c40, lpFindFileData=0x31e1ac | out: lpFindFileData=0x31e1ac*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0077.616] FindClose (in: hFindFile=0x381c40 | out: hFindFile=0x381c40) returned 1 [0077.616] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e434) returned 1 [0077.616] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e440) returned 1 [0077.616] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e474) returned 1 [0077.616] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\Cache\\1\\0B", nBufferLength=0x105, lpBuffer=0x31df7c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\Cache\\1\\0B", lpFilePart=0x0) returned 0x60 [0077.616] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\Cache\\1\\0B\\", nBufferLength=0x105, lpBuffer=0x31df50, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\Cache\\1\\0B\\", lpFilePart=0x0) returned 0x61 [0077.616] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\Cache\\1\\0B\\*", lpFindFileData=0x31e19c | out: lpFindFileData=0x31e19c*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xb7680bb0, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xb7680bb0, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0xb7680bb0, ftLastWriteTime.dwHighDateTime=0x1d2dda4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x381c40 [0077.616] FindNextFileW (in: hFindFile=0x381c40, lpFindFileData=0x31e1ac | out: lpFindFileData=0x31e1ac*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xb7680bb0, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xb7680bb0, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0xb7680bb0, ftLastWriteTime.dwHighDateTime=0x1d2dda4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0077.617] FindNextFileW (in: hFindFile=0x381c40, lpFindFileData=0x31e1ac | out: lpFindFileData=0x31e1ac*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xb7680bb0, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xb7680bb0, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0xb7680bb0, ftLastWriteTime.dwHighDateTime=0x1d2dda4, nFileSizeHigh=0x0, nFileSizeLow=0x204fd, dwReserved0=0x0, dwReserved1=0x0, cFileName="FCBF5d01", cAlternateFileName="")) returned 1 [0077.617] FindNextFileW (in: hFindFile=0x381c40, lpFindFileData=0x31e1ac | out: lpFindFileData=0x31e1ac*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xb7680bb0, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xb7680bb0, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0xb7680bb0, ftLastWriteTime.dwHighDateTime=0x1d2dda4, nFileSizeHigh=0x0, nFileSizeLow=0x204fd, dwReserved0=0x0, dwReserved1=0x0, cFileName="FCBF5d01", cAlternateFileName="")) returned 0 [0077.617] FindClose (in: hFindFile=0x381c40 | out: hFindFile=0x381c40) returned 1 [0077.617] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e434) returned 1 [0077.617] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e440) returned 1 [0077.617] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e474) returned 1 [0077.617] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\Cache\\1\\C2", nBufferLength=0x105, lpBuffer=0x31df7c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\Cache\\1\\C2", lpFilePart=0x0) returned 0x60 [0077.617] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\Cache\\1\\C2\\", nBufferLength=0x105, lpBuffer=0x31df50, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\Cache\\1\\C2\\", lpFilePart=0x0) returned 0x61 [0077.617] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\Cache\\1\\C2\\*", lpFindFileData=0x31e19c | out: lpFindFileData=0x31e19c*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x826bbed0, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x826bbed0, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x826bbed0, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x381c40 [0077.618] FindNextFileW (in: hFindFile=0x381c40, lpFindFileData=0x31e1ac | out: lpFindFileData=0x31e1ac*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x826bbed0, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x826bbed0, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x826bbed0, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0077.618] FindNextFileW (in: hFindFile=0x381c40, lpFindFileData=0x31e1ac | out: lpFindFileData=0x31e1ac*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x826bbed0, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x826bbed0, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x8272e2f0, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0xaa05, dwReserved0=0x0, dwReserved1=0x0, cFileName="0B619d01", cAlternateFileName="")) returned 1 [0077.619] FindNextFileW (in: hFindFile=0x381c40, lpFindFileData=0x31e1ac | out: lpFindFileData=0x31e1ac*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0077.619] FindClose (in: hFindFile=0x381c40 | out: hFindFile=0x381c40) returned 1 [0077.619] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e434) returned 1 [0077.619] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e440) returned 1 [0077.619] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e474) returned 1 [0077.619] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\Cache\\1\\C2", nBufferLength=0x105, lpBuffer=0x31df7c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\Cache\\1\\C2", lpFilePart=0x0) returned 0x60 [0077.619] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\Cache\\1\\C2\\", nBufferLength=0x105, lpBuffer=0x31df50, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\Cache\\1\\C2\\", lpFilePart=0x0) returned 0x61 [0077.619] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\Cache\\1\\C2\\*", lpFindFileData=0x31e19c | out: lpFindFileData=0x31e19c*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x826bbed0, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x826bbed0, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x826bbed0, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x381c40 [0077.619] FindNextFileW (in: hFindFile=0x381c40, lpFindFileData=0x31e1ac | out: lpFindFileData=0x31e1ac*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x826bbed0, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x826bbed0, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x826bbed0, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0077.619] FindNextFileW (in: hFindFile=0x381c40, lpFindFileData=0x31e1ac | out: lpFindFileData=0x31e1ac*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x826bbed0, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x826bbed0, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x8272e2f0, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0xaa05, dwReserved0=0x0, dwReserved1=0x0, cFileName="0B619d01", cAlternateFileName="")) returned 1 [0077.620] FindNextFileW (in: hFindFile=0x381c40, lpFindFileData=0x31e1ac | out: lpFindFileData=0x31e1ac*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x826bbed0, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x826bbed0, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x8272e2f0, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0xaa05, dwReserved0=0x0, dwReserved1=0x0, cFileName="0B619d01", cAlternateFileName="")) returned 0 [0077.620] FindClose (in: hFindFile=0x381c40 | out: hFindFile=0x381c40) returned 1 [0077.620] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e434) returned 1 [0077.620] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e440) returned 1 [0077.620] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e474) returned 1 [0077.620] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\Cache\\1\\F6", nBufferLength=0x105, lpBuffer=0x31df7c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\Cache\\1\\F6", lpFilePart=0x0) returned 0x60 [0077.620] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\Cache\\1\\F6\\", nBufferLength=0x105, lpBuffer=0x31df50, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\Cache\\1\\F6\\", lpFilePart=0x0) returned 0x61 [0077.620] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\Cache\\1\\F6\\*", lpFindFileData=0x31e19c | out: lpFindFileData=0x31e19c*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xb7d7ec50, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xb7d7ec50, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0xb7d7ec50, ftLastWriteTime.dwHighDateTime=0x1d2dda4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x381c40 [0077.620] FindNextFileW (in: hFindFile=0x381c40, lpFindFileData=0x31e1ac | out: lpFindFileData=0x31e1ac*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xb7d7ec50, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xb7d7ec50, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0xb7d7ec50, ftLastWriteTime.dwHighDateTime=0x1d2dda4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0077.621] FindNextFileW (in: hFindFile=0x381c40, lpFindFileData=0x31e1ac | out: lpFindFileData=0x31e1ac*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xb7d7ec50, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xb7d7ec50, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0xb7eaf750, ftLastWriteTime.dwHighDateTime=0x1d2dda4, nFileSizeHigh=0x0, nFileSizeLow=0xa60b, dwReserved0=0x0, dwReserved1=0x0, cFileName="CBD4Dd01", cAlternateFileName="")) returned 1 [0077.621] FindNextFileW (in: hFindFile=0x381c40, lpFindFileData=0x31e1ac | out: lpFindFileData=0x31e1ac*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0077.621] FindClose (in: hFindFile=0x381c40 | out: hFindFile=0x381c40) returned 1 [0077.623] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e434) returned 1 [0077.623] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e440) returned 1 [0077.623] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e474) returned 1 [0077.623] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\Cache\\1\\F6", nBufferLength=0x105, lpBuffer=0x31df7c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\Cache\\1\\F6", lpFilePart=0x0) returned 0x60 [0077.623] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\Cache\\1\\F6\\", nBufferLength=0x105, lpBuffer=0x31df50, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\Cache\\1\\F6\\", lpFilePart=0x0) returned 0x61 [0077.624] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\Cache\\1\\F6\\*", lpFindFileData=0x31e19c | out: lpFindFileData=0x31e19c*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xb7d7ec50, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xb7d7ec50, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0xb7d7ec50, ftLastWriteTime.dwHighDateTime=0x1d2dda4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x381c40 [0077.624] FindNextFileW (in: hFindFile=0x381c40, lpFindFileData=0x31e1ac | out: lpFindFileData=0x31e1ac*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xb7d7ec50, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xb7d7ec50, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0xb7d7ec50, ftLastWriteTime.dwHighDateTime=0x1d2dda4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0077.624] FindNextFileW (in: hFindFile=0x381c40, lpFindFileData=0x31e1ac | out: lpFindFileData=0x31e1ac*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xb7d7ec50, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xb7d7ec50, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0xb7eaf750, ftLastWriteTime.dwHighDateTime=0x1d2dda4, nFileSizeHigh=0x0, nFileSizeLow=0xa60b, dwReserved0=0x0, dwReserved1=0x0, cFileName="CBD4Dd01", cAlternateFileName="")) returned 1 [0077.624] FindNextFileW (in: hFindFile=0x381c40, lpFindFileData=0x31e1ac | out: lpFindFileData=0x31e1ac*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xb7d7ec50, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xb7d7ec50, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0xb7eaf750, ftLastWriteTime.dwHighDateTime=0x1d2dda4, nFileSizeHigh=0x0, nFileSizeLow=0xa60b, dwReserved0=0x0, dwReserved1=0x0, cFileName="CBD4Dd01", cAlternateFileName="")) returned 0 [0077.624] FindClose (in: hFindFile=0x381c40 | out: hFindFile=0x381c40) returned 1 [0077.624] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e434) returned 1 [0077.624] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e440) returned 1 [0077.624] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e4ec) returned 1 [0077.624] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\Cache\\2", nBufferLength=0x105, lpBuffer=0x31dff4, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\Cache\\2", lpFilePart=0x0) returned 0x5d [0077.624] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\Cache\\2\\", nBufferLength=0x105, lpBuffer=0x31dfc8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\Cache\\2\\", lpFilePart=0x0) returned 0x5e [0077.625] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\Cache\\2\\*", lpFindFileData=0x31e214 | out: lpFindFileData=0x31e214*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xb64f2970, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xb64f2970, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0xb64f2970, ftLastWriteTime.dwHighDateTime=0x1d2dda4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x381c40 [0077.626] FindNextFileW (in: hFindFile=0x381c40, lpFindFileData=0x31e224 | out: lpFindFileData=0x31e224*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xb64f2970, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xb64f2970, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0xb64f2970, ftLastWriteTime.dwHighDateTime=0x1d2dda4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0077.626] FindNextFileW (in: hFindFile=0x381c40, lpFindFileData=0x31e224 | out: lpFindFileData=0x31e224*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xb64f2970, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xb64f2970, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0xb64f2970, ftLastWriteTime.dwHighDateTime=0x1d2dda4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 0 [0077.626] FindClose (in: hFindFile=0x381c40 | out: hFindFile=0x381c40) returned 1 [0077.626] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e4ac) returned 1 [0077.626] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e4b8) returned 1 [0077.626] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e4ec) returned 1 [0077.626] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\Cache\\2", nBufferLength=0x105, lpBuffer=0x31dff4, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\Cache\\2", lpFilePart=0x0) returned 0x5d [0077.626] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\Cache\\2\\", nBufferLength=0x105, lpBuffer=0x31dfc8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\Cache\\2\\", lpFilePart=0x0) returned 0x5e [0077.626] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\Cache\\2\\*", lpFindFileData=0x31e214 | out: lpFindFileData=0x31e214*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xb64f2970, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xb64f2970, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0xb64f2970, ftLastWriteTime.dwHighDateTime=0x1d2dda4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x381c40 [0077.626] FindNextFileW (in: hFindFile=0x381c40, lpFindFileData=0x31e224 | out: lpFindFileData=0x31e224*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xb64f2970, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xb64f2970, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0xb64f2970, ftLastWriteTime.dwHighDateTime=0x1d2dda4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0077.627] FindNextFileW (in: hFindFile=0x381c40, lpFindFileData=0x31e224 | out: lpFindFileData=0x31e224*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xb64f2970, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xb64f2970, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0xb64f2970, ftLastWriteTime.dwHighDateTime=0x1d2dda4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 0 [0077.627] FindClose (in: hFindFile=0x381c40 | out: hFindFile=0x381c40) returned 1 [0077.627] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e4ac) returned 1 [0077.627] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e4b8) returned 1 [0077.627] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e4ec) returned 1 [0077.627] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\Cache\\3", nBufferLength=0x105, lpBuffer=0x31dff4, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\Cache\\3", lpFilePart=0x0) returned 0x5d [0077.627] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\Cache\\3\\", nBufferLength=0x105, lpBuffer=0x31dfc8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\Cache\\3\\", lpFilePart=0x0) returned 0x5e [0077.627] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\Cache\\3\\*", lpFindFileData=0x31e214 | out: lpFindFileData=0x31e214*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xb64f2970, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xb727c690, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0xb727c690, ftLastWriteTime.dwHighDateTime=0x1d2dda4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x381c40 [0077.628] FindNextFileW (in: hFindFile=0x381c40, lpFindFileData=0x31e224 | out: lpFindFileData=0x31e224*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xb64f2970, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xb727c690, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0xb727c690, ftLastWriteTime.dwHighDateTime=0x1d2dda4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0077.628] FindNextFileW (in: hFindFile=0x381c40, lpFindFileData=0x31e224 | out: lpFindFileData=0x31e224*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xb727c690, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xb727c690, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0xb727c690, ftLastWriteTime.dwHighDateTime=0x1d2dda4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="4B", cAlternateFileName="")) returned 1 [0077.628] FindNextFileW (in: hFindFile=0x381c40, lpFindFileData=0x31e224 | out: lpFindFileData=0x31e224*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xb727c690, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xb727c690, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0xb727c690, ftLastWriteTime.dwHighDateTime=0x1d2dda4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="4B", cAlternateFileName="")) returned 0 [0077.628] FindClose (in: hFindFile=0x381c40 | out: hFindFile=0x381c40) returned 1 [0077.629] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e4ac) returned 1 [0077.629] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e4b8) returned 1 [0077.629] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e4ec) returned 1 [0077.629] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\Cache\\3", nBufferLength=0x105, lpBuffer=0x31dff4, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\Cache\\3", lpFilePart=0x0) returned 0x5d [0077.629] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\Cache\\3\\", nBufferLength=0x105, lpBuffer=0x31dfc8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\Cache\\3\\", lpFilePart=0x0) returned 0x5e [0077.629] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\Cache\\3\\*", lpFindFileData=0x31e214 | out: lpFindFileData=0x31e214*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xb64f2970, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xb727c690, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0xb727c690, ftLastWriteTime.dwHighDateTime=0x1d2dda4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x381c40 [0077.629] FindNextFileW (in: hFindFile=0x381c40, lpFindFileData=0x31e224 | out: lpFindFileData=0x31e224*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xb64f2970, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xb727c690, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0xb727c690, ftLastWriteTime.dwHighDateTime=0x1d2dda4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0077.629] FindNextFileW (in: hFindFile=0x381c40, lpFindFileData=0x31e224 | out: lpFindFileData=0x31e224*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xb727c690, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xb727c690, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0xb727c690, ftLastWriteTime.dwHighDateTime=0x1d2dda4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="4B", cAlternateFileName="")) returned 1 [0077.629] FindNextFileW (in: hFindFile=0x381c40, lpFindFileData=0x31e224 | out: lpFindFileData=0x31e224*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0077.629] FindClose (in: hFindFile=0x381c40 | out: hFindFile=0x381c40) returned 1 [0077.629] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e4ac) returned 1 [0077.629] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e4b8) returned 1 [0077.629] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e474) returned 1 [0077.629] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\Cache\\3\\4B", nBufferLength=0x105, lpBuffer=0x31df7c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\Cache\\3\\4B", lpFilePart=0x0) returned 0x60 [0077.630] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\Cache\\3\\4B\\", nBufferLength=0x105, lpBuffer=0x31df50, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\Cache\\3\\4B\\", lpFilePart=0x0) returned 0x61 [0077.630] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\Cache\\3\\4B\\*", lpFindFileData=0x31e19c | out: lpFindFileData=0x31e19c*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xb727c690, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xb727c690, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0xb727c690, ftLastWriteTime.dwHighDateTime=0x1d2dda4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x381c40 [0077.631] FindNextFileW (in: hFindFile=0x381c40, lpFindFileData=0x31e1ac | out: lpFindFileData=0x31e1ac*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xb727c690, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xb727c690, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0xb727c690, ftLastWriteTime.dwHighDateTime=0x1d2dda4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0077.631] FindNextFileW (in: hFindFile=0x381c40, lpFindFileData=0x31e1ac | out: lpFindFileData=0x31e1ac*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xb727c690, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xb727c690, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0xb72eeab0, ftLastWriteTime.dwHighDateTime=0x1d2dda4, nFileSizeHigh=0x0, nFileSizeLow=0x20543, dwReserved0=0x0, dwReserved1=0x0, cFileName="1D8FDd01", cAlternateFileName="")) returned 1 [0077.631] FindNextFileW (in: hFindFile=0x381c40, lpFindFileData=0x31e1ac | out: lpFindFileData=0x31e1ac*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0077.631] FindClose (in: hFindFile=0x381c40 | out: hFindFile=0x381c40) returned 1 [0077.631] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e434) returned 1 [0077.631] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e440) returned 1 [0077.631] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e474) returned 1 [0077.631] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\Cache\\3\\4B", nBufferLength=0x105, lpBuffer=0x31df7c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\Cache\\3\\4B", lpFilePart=0x0) returned 0x60 [0077.631] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\Cache\\3\\4B\\", nBufferLength=0x105, lpBuffer=0x31df50, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\Cache\\3\\4B\\", lpFilePart=0x0) returned 0x61 [0077.631] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\Cache\\3\\4B\\*", lpFindFileData=0x31e19c | out: lpFindFileData=0x31e19c*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xb727c690, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xb727c690, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0xb727c690, ftLastWriteTime.dwHighDateTime=0x1d2dda4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x381c40 [0077.631] FindNextFileW (in: hFindFile=0x381c40, lpFindFileData=0x31e1ac | out: lpFindFileData=0x31e1ac*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xb727c690, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xb727c690, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0xb727c690, ftLastWriteTime.dwHighDateTime=0x1d2dda4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0077.632] FindNextFileW (in: hFindFile=0x381c40, lpFindFileData=0x31e1ac | out: lpFindFileData=0x31e1ac*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xb727c690, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xb727c690, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0xb72eeab0, ftLastWriteTime.dwHighDateTime=0x1d2dda4, nFileSizeHigh=0x0, nFileSizeLow=0x20543, dwReserved0=0x0, dwReserved1=0x0, cFileName="1D8FDd01", cAlternateFileName="")) returned 1 [0077.632] FindNextFileW (in: hFindFile=0x381c40, lpFindFileData=0x31e1ac | out: lpFindFileData=0x31e1ac*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xb727c690, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xb727c690, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0xb72eeab0, ftLastWriteTime.dwHighDateTime=0x1d2dda4, nFileSizeHigh=0x0, nFileSizeLow=0x20543, dwReserved0=0x0, dwReserved1=0x0, cFileName="1D8FDd01", cAlternateFileName="")) returned 0 [0077.632] FindClose (in: hFindFile=0x381c40 | out: hFindFile=0x381c40) returned 1 [0077.632] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e434) returned 1 [0077.632] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e440) returned 1 [0077.632] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e4ec) returned 1 [0077.632] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\Cache\\4", nBufferLength=0x105, lpBuffer=0x31dff4, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\Cache\\4", lpFilePart=0x0) returned 0x5d [0077.632] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\Cache\\4\\", nBufferLength=0x105, lpBuffer=0x31dfc8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\Cache\\4\\", lpFilePart=0x0) returned 0x5e [0077.632] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\Cache\\4\\*", lpFindFileData=0x31e214 | out: lpFindFileData=0x31e214*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xb64f2970, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xb64f2970, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0xb64f2970, ftLastWriteTime.dwHighDateTime=0x1d2dda4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x381c40 [0077.632] FindNextFileW (in: hFindFile=0x381c40, lpFindFileData=0x31e224 | out: lpFindFileData=0x31e224*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xb64f2970, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xb64f2970, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0xb64f2970, ftLastWriteTime.dwHighDateTime=0x1d2dda4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0077.633] FindNextFileW (in: hFindFile=0x381c40, lpFindFileData=0x31e224 | out: lpFindFileData=0x31e224*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xb64f2970, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xb64f2970, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0xb64f2970, ftLastWriteTime.dwHighDateTime=0x1d2dda4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 0 [0077.633] FindClose (in: hFindFile=0x381c40 | out: hFindFile=0x381c40) returned 1 [0077.633] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e4ac) returned 1 [0077.633] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e4b8) returned 1 [0077.633] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e4ec) returned 1 [0077.633] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\Cache\\4", nBufferLength=0x105, lpBuffer=0x31dff4, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\Cache\\4", lpFilePart=0x0) returned 0x5d [0077.633] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\Cache\\4\\", nBufferLength=0x105, lpBuffer=0x31dfc8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\Cache\\4\\", lpFilePart=0x0) returned 0x5e [0077.633] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\Cache\\4\\*", lpFindFileData=0x31e214 | out: lpFindFileData=0x31e214*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xb64f2970, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xb64f2970, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0xb64f2970, ftLastWriteTime.dwHighDateTime=0x1d2dda4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x381c40 [0077.633] FindNextFileW (in: hFindFile=0x381c40, lpFindFileData=0x31e224 | out: lpFindFileData=0x31e224*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xb64f2970, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xb64f2970, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0xb64f2970, ftLastWriteTime.dwHighDateTime=0x1d2dda4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0077.633] FindNextFileW (in: hFindFile=0x381c40, lpFindFileData=0x31e224 | out: lpFindFileData=0x31e224*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xb64f2970, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xb64f2970, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0xb64f2970, ftLastWriteTime.dwHighDateTime=0x1d2dda4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 0 [0077.633] FindClose (in: hFindFile=0x381c40 | out: hFindFile=0x381c40) returned 1 [0077.634] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e4ac) returned 1 [0077.634] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e4b8) returned 1 [0077.634] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e4ec) returned 1 [0077.634] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\Cache\\5", nBufferLength=0x105, lpBuffer=0x31dff4, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\Cache\\5", lpFilePart=0x0) returned 0x5d [0077.634] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\Cache\\5\\", nBufferLength=0x105, lpBuffer=0x31dfc8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\Cache\\5\\", lpFilePart=0x0) returned 0x5e [0077.634] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\Cache\\5\\*", lpFindFileData=0x31e214 | out: lpFindFileData=0x31e214*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xb64f2970, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xb64f2970, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0xb64f2970, ftLastWriteTime.dwHighDateTime=0x1d2dda4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x381c40 [0077.635] FindNextFileW (in: hFindFile=0x381c40, lpFindFileData=0x31e224 | out: lpFindFileData=0x31e224*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xb64f2970, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xb64f2970, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0xb64f2970, ftLastWriteTime.dwHighDateTime=0x1d2dda4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0077.635] FindNextFileW (in: hFindFile=0x381c40, lpFindFileData=0x31e224 | out: lpFindFileData=0x31e224*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xb64f2970, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xb64f2970, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0xb64f2970, ftLastWriteTime.dwHighDateTime=0x1d2dda4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 0 [0077.635] FindClose (in: hFindFile=0x381c40 | out: hFindFile=0x381c40) returned 1 [0077.635] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e4ac) returned 1 [0077.635] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e4b8) returned 1 [0077.635] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e4ec) returned 1 [0077.635] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\Cache\\5", nBufferLength=0x105, lpBuffer=0x31dff4, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\Cache\\5", lpFilePart=0x0) returned 0x5d [0077.635] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\Cache\\5\\", nBufferLength=0x105, lpBuffer=0x31dfc8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\Cache\\5\\", lpFilePart=0x0) returned 0x5e [0077.635] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\Cache\\5\\*", lpFindFileData=0x31e214 | out: lpFindFileData=0x31e214*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xb64f2970, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xb64f2970, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0xb64f2970, ftLastWriteTime.dwHighDateTime=0x1d2dda4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x381c40 [0077.636] FindNextFileW (in: hFindFile=0x381c40, lpFindFileData=0x31e224 | out: lpFindFileData=0x31e224*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xb64f2970, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xb64f2970, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0xb64f2970, ftLastWriteTime.dwHighDateTime=0x1d2dda4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0077.636] FindNextFileW (in: hFindFile=0x381c40, lpFindFileData=0x31e224 | out: lpFindFileData=0x31e224*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xb64f2970, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xb64f2970, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0xb64f2970, ftLastWriteTime.dwHighDateTime=0x1d2dda4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 0 [0077.636] FindClose (in: hFindFile=0x381c40 | out: hFindFile=0x381c40) returned 1 [0077.636] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e4ac) returned 1 [0077.636] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e4b8) returned 1 [0077.636] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e4ec) returned 1 [0077.636] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\Cache\\6", nBufferLength=0x105, lpBuffer=0x31dff4, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\Cache\\6", lpFilePart=0x0) returned 0x5d [0077.636] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\Cache\\6\\", nBufferLength=0x105, lpBuffer=0x31dfc8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\Cache\\6\\", lpFilePart=0x0) returned 0x5e [0077.636] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\Cache\\6\\*", lpFindFileData=0x31e214 | out: lpFindFileData=0x31e214*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xb6518ad0, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xb6518ad0, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0xb6518ad0, ftLastWriteTime.dwHighDateTime=0x1d2dda4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x381c40 [0077.636] FindNextFileW (in: hFindFile=0x381c40, lpFindFileData=0x31e224 | out: lpFindFileData=0x31e224*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xb6518ad0, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xb6518ad0, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0xb6518ad0, ftLastWriteTime.dwHighDateTime=0x1d2dda4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0077.637] FindNextFileW (in: hFindFile=0x381c40, lpFindFileData=0x31e224 | out: lpFindFileData=0x31e224*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xb6518ad0, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xb6518ad0, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0xb6518ad0, ftLastWriteTime.dwHighDateTime=0x1d2dda4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 0 [0077.637] FindClose (in: hFindFile=0x381c40 | out: hFindFile=0x381c40) returned 1 [0077.637] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e4ac) returned 1 [0077.637] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e4b8) returned 1 [0077.637] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e4ec) returned 1 [0077.637] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\Cache\\6", nBufferLength=0x105, lpBuffer=0x31dff4, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\Cache\\6", lpFilePart=0x0) returned 0x5d [0077.637] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\Cache\\6\\", nBufferLength=0x105, lpBuffer=0x31dfc8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\Cache\\6\\", lpFilePart=0x0) returned 0x5e [0077.637] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\Cache\\6\\*", lpFindFileData=0x31e214 | out: lpFindFileData=0x31e214*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xb6518ad0, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xb6518ad0, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0xb6518ad0, ftLastWriteTime.dwHighDateTime=0x1d2dda4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x381c40 [0077.637] FindNextFileW (in: hFindFile=0x381c40, lpFindFileData=0x31e224 | out: lpFindFileData=0x31e224*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xb6518ad0, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xb6518ad0, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0xb6518ad0, ftLastWriteTime.dwHighDateTime=0x1d2dda4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0077.637] FindNextFileW (in: hFindFile=0x381c40, lpFindFileData=0x31e224 | out: lpFindFileData=0x31e224*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xb6518ad0, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xb6518ad0, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0xb6518ad0, ftLastWriteTime.dwHighDateTime=0x1d2dda4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 0 [0077.637] FindClose (in: hFindFile=0x381c40 | out: hFindFile=0x381c40) returned 1 [0077.637] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e4ac) returned 1 [0077.638] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e4b8) returned 1 [0077.638] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e4ec) returned 1 [0077.638] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\Cache\\7", nBufferLength=0x105, lpBuffer=0x31dff4, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\Cache\\7", lpFilePart=0x0) returned 0x5d [0077.638] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\Cache\\7\\", nBufferLength=0x105, lpBuffer=0x31dfc8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\Cache\\7\\", lpFilePart=0x0) returned 0x5e [0077.638] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\Cache\\7\\*", lpFindFileData=0x31e214 | out: lpFindFileData=0x31e214*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xb6518ad0, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xb6518ad0, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0xb6518ad0, ftLastWriteTime.dwHighDateTime=0x1d2dda4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x381c40 [0077.639] FindNextFileW (in: hFindFile=0x381c40, lpFindFileData=0x31e224 | out: lpFindFileData=0x31e224*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xb6518ad0, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xb6518ad0, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0xb6518ad0, ftLastWriteTime.dwHighDateTime=0x1d2dda4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0077.639] FindNextFileW (in: hFindFile=0x381c40, lpFindFileData=0x31e224 | out: lpFindFileData=0x31e224*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xb6518ad0, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xb6518ad0, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0xb6518ad0, ftLastWriteTime.dwHighDateTime=0x1d2dda4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 0 [0077.639] FindClose (in: hFindFile=0x381c40 | out: hFindFile=0x381c40) returned 1 [0077.639] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e4ac) returned 1 [0077.639] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e4b8) returned 1 [0077.639] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e4ec) returned 1 [0077.639] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\Cache\\7", nBufferLength=0x105, lpBuffer=0x31dff4, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\Cache\\7", lpFilePart=0x0) returned 0x5d [0077.639] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\Cache\\7\\", nBufferLength=0x105, lpBuffer=0x31dfc8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\Cache\\7\\", lpFilePart=0x0) returned 0x5e [0077.639] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\Cache\\7\\*", lpFindFileData=0x31e214 | out: lpFindFileData=0x31e214*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xb6518ad0, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xb6518ad0, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0xb6518ad0, ftLastWriteTime.dwHighDateTime=0x1d2dda4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x381c40 [0077.639] FindNextFileW (in: hFindFile=0x381c40, lpFindFileData=0x31e224 | out: lpFindFileData=0x31e224*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xb6518ad0, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xb6518ad0, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0xb6518ad0, ftLastWriteTime.dwHighDateTime=0x1d2dda4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0077.640] FindNextFileW (in: hFindFile=0x381c40, lpFindFileData=0x31e224 | out: lpFindFileData=0x31e224*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xb6518ad0, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xb6518ad0, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0xb6518ad0, ftLastWriteTime.dwHighDateTime=0x1d2dda4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 0 [0077.640] FindClose (in: hFindFile=0x381c40 | out: hFindFile=0x381c40) returned 1 [0077.640] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e4ac) returned 1 [0077.640] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e4b8) returned 1 [0077.640] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e4ec) returned 1 [0077.640] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\Cache\\8", nBufferLength=0x105, lpBuffer=0x31dff4, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\Cache\\8", lpFilePart=0x0) returned 0x5d [0077.640] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\Cache\\8\\", nBufferLength=0x105, lpBuffer=0x31dfc8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\Cache\\8\\", lpFilePart=0x0) returned 0x5e [0077.640] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\Cache\\8\\*", lpFindFileData=0x31e214 | out: lpFindFileData=0x31e214*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xb6518ad0, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xb6518ad0, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0xb6518ad0, ftLastWriteTime.dwHighDateTime=0x1d2dda4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x381c40 [0077.640] FindNextFileW (in: hFindFile=0x381c40, lpFindFileData=0x31e224 | out: lpFindFileData=0x31e224*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xb6518ad0, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xb6518ad0, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0xb6518ad0, ftLastWriteTime.dwHighDateTime=0x1d2dda4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0077.640] FindNextFileW (in: hFindFile=0x381c40, lpFindFileData=0x31e224 | out: lpFindFileData=0x31e224*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xb6518ad0, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xb6518ad0, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0xb6518ad0, ftLastWriteTime.dwHighDateTime=0x1d2dda4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 0 [0077.641] FindClose (in: hFindFile=0x381c40 | out: hFindFile=0x381c40) returned 1 [0077.641] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e4ac) returned 1 [0077.641] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e4b8) returned 1 [0077.641] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e4ec) returned 1 [0077.641] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\Cache\\8", nBufferLength=0x105, lpBuffer=0x31dff4, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\Cache\\8", lpFilePart=0x0) returned 0x5d [0077.641] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\Cache\\8\\", nBufferLength=0x105, lpBuffer=0x31dfc8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\Cache\\8\\", lpFilePart=0x0) returned 0x5e [0077.641] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\Cache\\8\\*", lpFindFileData=0x31e214 | out: lpFindFileData=0x31e214*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xb6518ad0, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xb6518ad0, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0xb6518ad0, ftLastWriteTime.dwHighDateTime=0x1d2dda4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x381c40 [0077.641] FindNextFileW (in: hFindFile=0x381c40, lpFindFileData=0x31e224 | out: lpFindFileData=0x31e224*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xb6518ad0, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xb6518ad0, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0xb6518ad0, ftLastWriteTime.dwHighDateTime=0x1d2dda4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0077.641] FindNextFileW (in: hFindFile=0x381c40, lpFindFileData=0x31e224 | out: lpFindFileData=0x31e224*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xb6518ad0, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xb6518ad0, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0xb6518ad0, ftLastWriteTime.dwHighDateTime=0x1d2dda4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 0 [0077.642] FindClose (in: hFindFile=0x381c40 | out: hFindFile=0x381c40) returned 1 [0077.642] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e4ac) returned 1 [0077.642] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e4b8) returned 1 [0077.642] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e4ec) returned 1 [0077.642] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\Cache\\9", nBufferLength=0x105, lpBuffer=0x31dff4, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\Cache\\9", lpFilePart=0x0) returned 0x5d [0077.642] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\Cache\\9\\", nBufferLength=0x105, lpBuffer=0x31dfc8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\Cache\\9\\", lpFilePart=0x0) returned 0x5e [0077.642] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\Cache\\9\\*", lpFindFileData=0x31e214 | out: lpFindFileData=0x31e214*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xb6518ad0, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0x81e8d330, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x81e8d330, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x381c40 [0077.643] FindNextFileW (in: hFindFile=0x381c40, lpFindFileData=0x31e224 | out: lpFindFileData=0x31e224*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xb6518ad0, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0x81e8d330, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x81e8d330, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0077.643] FindNextFileW (in: hFindFile=0x381c40, lpFindFileData=0x31e224 | out: lpFindFileData=0x31e224*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xb7f47cd0, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xb7f47cd0, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0xb7f47cd0, ftLastWriteTime.dwHighDateTime=0x1d2dda4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="10", cAlternateFileName="")) returned 1 [0077.643] FindNextFileW (in: hFindFile=0x381c40, lpFindFileData=0x31e224 | out: lpFindFileData=0x31e224*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xb7d58af0, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xb7d58af0, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0xb7d58af0, ftLastWriteTime.dwHighDateTime=0x1d2dda4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="2C", cAlternateFileName="")) returned 1 [0077.643] FindNextFileW (in: hFindFile=0x381c40, lpFindFileData=0x31e224 | out: lpFindFileData=0x31e224*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xb7f47cd0, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xb7f47cd0, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0xb7f47cd0, ftLastWriteTime.dwHighDateTime=0x1d2dda4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="61", cAlternateFileName="")) returned 1 [0077.643] FindNextFileW (in: hFindFile=0x381c40, lpFindFileData=0x31e224 | out: lpFindFileData=0x31e224*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x81e8d330, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x81e8d330, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x81e8d330, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="E0", cAlternateFileName="")) returned 1 [0077.643] FindNextFileW (in: hFindFile=0x381c40, lpFindFileData=0x31e224 | out: lpFindFileData=0x31e224*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x81e8d330, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x81e8d330, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x81e8d330, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="E0", cAlternateFileName="")) returned 0 [0077.643] FindClose (in: hFindFile=0x381c40 | out: hFindFile=0x381c40) returned 1 [0077.643] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e4ac) returned 1 [0077.643] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e4b8) returned 1 [0077.643] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e4ec) returned 1 [0077.643] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\Cache\\9", nBufferLength=0x105, lpBuffer=0x31dff4, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\Cache\\9", lpFilePart=0x0) returned 0x5d [0077.643] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\Cache\\9\\", nBufferLength=0x105, lpBuffer=0x31dfc8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\Cache\\9\\", lpFilePart=0x0) returned 0x5e [0077.644] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\Cache\\9\\*", lpFindFileData=0x31e214 | out: lpFindFileData=0x31e214*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xb6518ad0, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0x81e8d330, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x81e8d330, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x381c40 [0077.644] FindNextFileW (in: hFindFile=0x381c40, lpFindFileData=0x31e224 | out: lpFindFileData=0x31e224*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xb6518ad0, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0x81e8d330, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x81e8d330, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0077.644] FindNextFileW (in: hFindFile=0x381c40, lpFindFileData=0x31e224 | out: lpFindFileData=0x31e224*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xb7f47cd0, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xb7f47cd0, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0xb7f47cd0, ftLastWriteTime.dwHighDateTime=0x1d2dda4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="10", cAlternateFileName="")) returned 1 [0077.644] FindNextFileW (in: hFindFile=0x381c40, lpFindFileData=0x31e224 | out: lpFindFileData=0x31e224*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xb7d58af0, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xb7d58af0, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0xb7d58af0, ftLastWriteTime.dwHighDateTime=0x1d2dda4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="2C", cAlternateFileName="")) returned 1 [0077.644] FindNextFileW (in: hFindFile=0x381c40, lpFindFileData=0x31e224 | out: lpFindFileData=0x31e224*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xb7f47cd0, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xb7f47cd0, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0xb7f47cd0, ftLastWriteTime.dwHighDateTime=0x1d2dda4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="61", cAlternateFileName="")) returned 1 [0077.644] FindNextFileW (in: hFindFile=0x381c40, lpFindFileData=0x31e224 | out: lpFindFileData=0x31e224*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x81e8d330, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x81e8d330, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x81e8d330, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="E0", cAlternateFileName="")) returned 1 [0077.644] FindNextFileW (in: hFindFile=0x381c40, lpFindFileData=0x31e224 | out: lpFindFileData=0x31e224*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0077.644] FindClose (in: hFindFile=0x381c40 | out: hFindFile=0x381c40) returned 1 [0077.644] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e4ac) returned 1 [0077.644] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e4b8) returned 1 [0077.644] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e474) returned 1 [0077.644] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\Cache\\9\\10", nBufferLength=0x105, lpBuffer=0x31df7c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\Cache\\9\\10", lpFilePart=0x0) returned 0x60 [0077.644] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\Cache\\9\\10\\", nBufferLength=0x105, lpBuffer=0x31df50, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\Cache\\9\\10\\", lpFilePart=0x0) returned 0x61 [0077.644] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\Cache\\9\\10\\*", lpFindFileData=0x31e19c | out: lpFindFileData=0x31e19c*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xb7f47cd0, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xb7f47cd0, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0xb7f47cd0, ftLastWriteTime.dwHighDateTime=0x1d2dda4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x381c40 [0077.645] FindNextFileW (in: hFindFile=0x381c40, lpFindFileData=0x31e1ac | out: lpFindFileData=0x31e1ac*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xb7f47cd0, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xb7f47cd0, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0xb7f47cd0, ftLastWriteTime.dwHighDateTime=0x1d2dda4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0077.645] FindNextFileW (in: hFindFile=0x381c40, lpFindFileData=0x31e1ac | out: lpFindFileData=0x31e1ac*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xb7f47cd0, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xb7f47cd0, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0xb7f47cd0, ftLastWriteTime.dwHighDateTime=0x1d2dda4, nFileSizeHigh=0x0, nFileSizeLow=0x534f, dwReserved0=0x0, dwReserved1=0x0, cFileName="16A09d01", cAlternateFileName="")) returned 1 [0077.645] FindNextFileW (in: hFindFile=0x381c40, lpFindFileData=0x31e1ac | out: lpFindFileData=0x31e1ac*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0077.645] FindClose (in: hFindFile=0x381c40 | out: hFindFile=0x381c40) returned 1 [0077.645] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e434) returned 1 [0077.645] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e440) returned 1 [0077.645] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e474) returned 1 [0077.645] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\Cache\\9\\10", nBufferLength=0x105, lpBuffer=0x31df7c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\Cache\\9\\10", lpFilePart=0x0) returned 0x60 [0077.645] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\Cache\\9\\10\\", nBufferLength=0x105, lpBuffer=0x31df50, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\Cache\\9\\10\\", lpFilePart=0x0) returned 0x61 [0077.645] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\Cache\\9\\10\\*", lpFindFileData=0x31e19c | out: lpFindFileData=0x31e19c*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xb7f47cd0, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xb7f47cd0, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0xb7f47cd0, ftLastWriteTime.dwHighDateTime=0x1d2dda4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x381c40 [0077.645] FindNextFileW (in: hFindFile=0x381c40, lpFindFileData=0x31e1ac | out: lpFindFileData=0x31e1ac*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xb7f47cd0, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xb7f47cd0, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0xb7f47cd0, ftLastWriteTime.dwHighDateTime=0x1d2dda4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0077.645] FindNextFileW (in: hFindFile=0x381c40, lpFindFileData=0x31e1ac | out: lpFindFileData=0x31e1ac*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xb7f47cd0, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xb7f47cd0, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0xb7f47cd0, ftLastWriteTime.dwHighDateTime=0x1d2dda4, nFileSizeHigh=0x0, nFileSizeLow=0x534f, dwReserved0=0x0, dwReserved1=0x0, cFileName="16A09d01", cAlternateFileName="")) returned 1 [0077.645] FindNextFileW (in: hFindFile=0x381c40, lpFindFileData=0x31e1ac | out: lpFindFileData=0x31e1ac*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xb7f47cd0, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xb7f47cd0, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0xb7f47cd0, ftLastWriteTime.dwHighDateTime=0x1d2dda4, nFileSizeHigh=0x0, nFileSizeLow=0x534f, dwReserved0=0x0, dwReserved1=0x0, cFileName="16A09d01", cAlternateFileName="")) returned 0 [0077.646] FindClose (in: hFindFile=0x381c40 | out: hFindFile=0x381c40) returned 1 [0077.646] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e434) returned 1 [0077.646] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e440) returned 1 [0077.646] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e474) returned 1 [0077.646] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\Cache\\9\\2C", nBufferLength=0x105, lpBuffer=0x31df7c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\Cache\\9\\2C", lpFilePart=0x0) returned 0x60 [0077.646] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\Cache\\9\\2C\\", nBufferLength=0x105, lpBuffer=0x31df50, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\Cache\\9\\2C\\", lpFilePart=0x0) returned 0x61 [0077.646] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\Cache\\9\\2C\\*", lpFindFileData=0x31e19c | out: lpFindFileData=0x31e19c*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xb7d58af0, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xb7d58af0, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0xb7d58af0, ftLastWriteTime.dwHighDateTime=0x1d2dda4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x381c40 [0077.646] FindNextFileW (in: hFindFile=0x381c40, lpFindFileData=0x31e1ac | out: lpFindFileData=0x31e1ac*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xb7d58af0, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xb7d58af0, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0xb7d58af0, ftLastWriteTime.dwHighDateTime=0x1d2dda4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0077.646] FindNextFileW (in: hFindFile=0x381c40, lpFindFileData=0x31e1ac | out: lpFindFileData=0x31e1ac*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xb7d58af0, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xb7d58af0, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0xb7dcaf10, ftLastWriteTime.dwHighDateTime=0x1d2dda4, nFileSizeHigh=0x0, nFileSizeLow=0x133d5, dwReserved0=0x0, dwReserved1=0x0, cFileName="24B53d01", cAlternateFileName="")) returned 1 [0077.646] FindNextFileW (in: hFindFile=0x381c40, lpFindFileData=0x31e1ac | out: lpFindFileData=0x31e1ac*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0077.646] FindClose (in: hFindFile=0x381c40 | out: hFindFile=0x381c40) returned 1 [0077.646] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e434) returned 1 [0077.646] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e440) returned 1 [0077.646] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e474) returned 1 [0077.646] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\Cache\\9\\2C", nBufferLength=0x105, lpBuffer=0x31df7c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\Cache\\9\\2C", lpFilePart=0x0) returned 0x60 [0077.647] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\Cache\\9\\2C\\", nBufferLength=0x105, lpBuffer=0x31df50, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\Cache\\9\\2C\\", lpFilePart=0x0) returned 0x61 [0077.647] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\Cache\\9\\2C\\*", lpFindFileData=0x31e19c | out: lpFindFileData=0x31e19c*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xb7d58af0, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xb7d58af0, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0xb7d58af0, ftLastWriteTime.dwHighDateTime=0x1d2dda4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x381c40 [0077.647] FindNextFileW (in: hFindFile=0x381c40, lpFindFileData=0x31e1ac | out: lpFindFileData=0x31e1ac*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xb7d58af0, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xb7d58af0, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0xb7d58af0, ftLastWriteTime.dwHighDateTime=0x1d2dda4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0077.647] FindNextFileW (in: hFindFile=0x381c40, lpFindFileData=0x31e1ac | out: lpFindFileData=0x31e1ac*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xb7d58af0, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xb7d58af0, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0xb7dcaf10, ftLastWriteTime.dwHighDateTime=0x1d2dda4, nFileSizeHigh=0x0, nFileSizeLow=0x133d5, dwReserved0=0x0, dwReserved1=0x0, cFileName="24B53d01", cAlternateFileName="")) returned 1 [0077.647] FindNextFileW (in: hFindFile=0x381c40, lpFindFileData=0x31e1ac | out: lpFindFileData=0x31e1ac*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xb7d58af0, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xb7d58af0, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0xb7dcaf10, ftLastWriteTime.dwHighDateTime=0x1d2dda4, nFileSizeHigh=0x0, nFileSizeLow=0x133d5, dwReserved0=0x0, dwReserved1=0x0, cFileName="24B53d01", cAlternateFileName="")) returned 0 [0077.647] FindClose (in: hFindFile=0x381c40 | out: hFindFile=0x381c40) returned 1 [0077.647] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e434) returned 1 [0077.647] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e440) returned 1 [0077.647] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e474) returned 1 [0077.647] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\Cache\\9\\61", nBufferLength=0x105, lpBuffer=0x31df7c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\Cache\\9\\61", lpFilePart=0x0) returned 0x60 [0077.647] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\Cache\\9\\61\\", nBufferLength=0x105, lpBuffer=0x31df50, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\Cache\\9\\61\\", lpFilePart=0x0) returned 0x61 [0077.647] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\Cache\\9\\61\\*", lpFindFileData=0x31e19c | out: lpFindFileData=0x31e19c*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xb7f47cd0, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xb7f47cd0, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0xb7f47cd0, ftLastWriteTime.dwHighDateTime=0x1d2dda4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x381c40 [0077.648] FindNextFileW (in: hFindFile=0x381c40, lpFindFileData=0x31e1ac | out: lpFindFileData=0x31e1ac*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xb7f47cd0, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xb7f47cd0, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0xb7f47cd0, ftLastWriteTime.dwHighDateTime=0x1d2dda4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0077.648] FindNextFileW (in: hFindFile=0x381c40, lpFindFileData=0x31e1ac | out: lpFindFileData=0x31e1ac*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xb7f47cd0, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xb7f47cd0, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0xb7fba0f0, ftLastWriteTime.dwHighDateTime=0x1d2dda4, nFileSizeHigh=0x0, nFileSizeLow=0xa949, dwReserved0=0x0, dwReserved1=0x0, cFileName="28E95d01", cAlternateFileName="")) returned 1 [0077.648] FindNextFileW (in: hFindFile=0x381c40, lpFindFileData=0x31e1ac | out: lpFindFileData=0x31e1ac*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0077.648] FindClose (in: hFindFile=0x381c40 | out: hFindFile=0x381c40) returned 1 [0077.648] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e434) returned 1 [0077.648] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e440) returned 1 [0077.648] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e474) returned 1 [0077.648] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\Cache\\9\\61", nBufferLength=0x105, lpBuffer=0x31df7c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\Cache\\9\\61", lpFilePart=0x0) returned 0x60 [0077.648] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\Cache\\9\\61\\", nBufferLength=0x105, lpBuffer=0x31df50, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\Cache\\9\\61\\", lpFilePart=0x0) returned 0x61 [0077.648] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\Cache\\9\\61\\*", lpFindFileData=0x31e19c | out: lpFindFileData=0x31e19c*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xb7f47cd0, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xb7f47cd0, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0xb7f47cd0, ftLastWriteTime.dwHighDateTime=0x1d2dda4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x381c40 [0077.648] FindNextFileW (in: hFindFile=0x381c40, lpFindFileData=0x31e1ac | out: lpFindFileData=0x31e1ac*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xb7f47cd0, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xb7f47cd0, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0xb7f47cd0, ftLastWriteTime.dwHighDateTime=0x1d2dda4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0077.648] FindNextFileW (in: hFindFile=0x381c40, lpFindFileData=0x31e1ac | out: lpFindFileData=0x31e1ac*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xb7f47cd0, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xb7f47cd0, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0xb7fba0f0, ftLastWriteTime.dwHighDateTime=0x1d2dda4, nFileSizeHigh=0x0, nFileSizeLow=0xa949, dwReserved0=0x0, dwReserved1=0x0, cFileName="28E95d01", cAlternateFileName="")) returned 1 [0077.648] FindNextFileW (in: hFindFile=0x381c40, lpFindFileData=0x31e1ac | out: lpFindFileData=0x31e1ac*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xb7f47cd0, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xb7f47cd0, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0xb7fba0f0, ftLastWriteTime.dwHighDateTime=0x1d2dda4, nFileSizeHigh=0x0, nFileSizeLow=0xa949, dwReserved0=0x0, dwReserved1=0x0, cFileName="28E95d01", cAlternateFileName="")) returned 0 [0077.649] FindClose (in: hFindFile=0x381c40 | out: hFindFile=0x381c40) returned 1 [0077.649] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e434) returned 1 [0077.649] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e440) returned 1 [0077.649] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e474) returned 1 [0077.649] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\Cache\\9\\E0", nBufferLength=0x105, lpBuffer=0x31df7c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\Cache\\9\\E0", lpFilePart=0x0) returned 0x60 [0077.649] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\Cache\\9\\E0\\", nBufferLength=0x105, lpBuffer=0x31df50, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\Cache\\9\\E0\\", lpFilePart=0x0) returned 0x61 [0077.649] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\Cache\\9\\E0\\*", lpFindFileData=0x31e19c | out: lpFindFileData=0x31e19c*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x81e8d330, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x81e8d330, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x81e8d330, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x381c40 [0077.650] FindNextFileW (in: hFindFile=0x381c40, lpFindFileData=0x31e1ac | out: lpFindFileData=0x31e1ac*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x81e8d330, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x81e8d330, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x81e8d330, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0077.650] FindNextFileW (in: hFindFile=0x381c40, lpFindFileData=0x31e1ac | out: lpFindFileData=0x31e1ac*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x81e8d330, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x81e8d330, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x81e8d330, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x404f, dwReserved0=0x0, dwReserved1=0x0, cFileName="F17B2d01", cAlternateFileName="")) returned 1 [0077.650] FindNextFileW (in: hFindFile=0x381c40, lpFindFileData=0x31e1ac | out: lpFindFileData=0x31e1ac*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0077.650] FindClose (in: hFindFile=0x381c40 | out: hFindFile=0x381c40) returned 1 [0077.650] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e434) returned 1 [0077.650] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e440) returned 1 [0077.650] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e474) returned 1 [0077.650] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\Cache\\9\\E0", nBufferLength=0x105, lpBuffer=0x31df7c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\Cache\\9\\E0", lpFilePart=0x0) returned 0x60 [0077.650] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\Cache\\9\\E0\\", nBufferLength=0x105, lpBuffer=0x31df50, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\Cache\\9\\E0\\", lpFilePart=0x0) returned 0x61 [0077.651] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\Cache\\9\\E0\\*", lpFindFileData=0x31e19c | out: lpFindFileData=0x31e19c*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x81e8d330, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x81e8d330, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x81e8d330, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x381c40 [0077.651] FindNextFileW (in: hFindFile=0x381c40, lpFindFileData=0x31e1ac | out: lpFindFileData=0x31e1ac*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x81e8d330, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x81e8d330, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x81e8d330, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0077.651] FindNextFileW (in: hFindFile=0x381c40, lpFindFileData=0x31e1ac | out: lpFindFileData=0x31e1ac*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x81e8d330, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x81e8d330, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x81e8d330, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x404f, dwReserved0=0x0, dwReserved1=0x0, cFileName="F17B2d01", cAlternateFileName="")) returned 1 [0077.651] FindNextFileW (in: hFindFile=0x381c40, lpFindFileData=0x31e1ac | out: lpFindFileData=0x31e1ac*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x81e8d330, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x81e8d330, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x81e8d330, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x404f, dwReserved0=0x0, dwReserved1=0x0, cFileName="F17B2d01", cAlternateFileName="")) returned 0 [0077.651] FindClose (in: hFindFile=0x381c40 | out: hFindFile=0x381c40) returned 1 [0077.651] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e434) returned 1 [0077.651] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e440) returned 1 [0077.651] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e4ec) returned 1 [0077.651] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\Cache\\A", nBufferLength=0x105, lpBuffer=0x31dff4, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\Cache\\A", lpFilePart=0x0) returned 0x5d [0077.651] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\Cache\\A\\", nBufferLength=0x105, lpBuffer=0x31dfc8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\Cache\\A\\", lpFilePart=0x0) returned 0x5e [0077.651] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\Cache\\A\\*", lpFindFileData=0x31e214 | out: lpFindFileData=0x31e214*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xb6518ad0, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xb6518ad0, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0xb6518ad0, ftLastWriteTime.dwHighDateTime=0x1d2dda4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x381c40 [0077.652] FindNextFileW (in: hFindFile=0x381c40, lpFindFileData=0x31e224 | out: lpFindFileData=0x31e224*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xb6518ad0, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xb6518ad0, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0xb6518ad0, ftLastWriteTime.dwHighDateTime=0x1d2dda4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0077.652] FindNextFileW (in: hFindFile=0x381c40, lpFindFileData=0x31e224 | out: lpFindFileData=0x31e224*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xb6518ad0, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xb6518ad0, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0xb6518ad0, ftLastWriteTime.dwHighDateTime=0x1d2dda4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 0 [0077.652] FindClose (in: hFindFile=0x381c40 | out: hFindFile=0x381c40) returned 1 [0077.652] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e4ac) returned 1 [0077.656] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e4b8) returned 1 [0077.656] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e4ec) returned 1 [0077.656] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\Cache\\A", nBufferLength=0x105, lpBuffer=0x31dff4, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\Cache\\A", lpFilePart=0x0) returned 0x5d [0077.656] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\Cache\\A\\", nBufferLength=0x105, lpBuffer=0x31dfc8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\Cache\\A\\", lpFilePart=0x0) returned 0x5e [0077.656] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\Cache\\A\\*", lpFindFileData=0x31e214 | out: lpFindFileData=0x31e214*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xb6518ad0, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xb6518ad0, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0xb6518ad0, ftLastWriteTime.dwHighDateTime=0x1d2dda4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x381c40 [0077.657] FindNextFileW (in: hFindFile=0x381c40, lpFindFileData=0x31e224 | out: lpFindFileData=0x31e224*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xb6518ad0, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xb6518ad0, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0xb6518ad0, ftLastWriteTime.dwHighDateTime=0x1d2dda4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0077.657] FindNextFileW (in: hFindFile=0x381c40, lpFindFileData=0x31e224 | out: lpFindFileData=0x31e224*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xb6518ad0, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xb6518ad0, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0xb6518ad0, ftLastWriteTime.dwHighDateTime=0x1d2dda4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 0 [0077.657] FindClose (in: hFindFile=0x381c40 | out: hFindFile=0x381c40) returned 1 [0077.657] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e4ac) returned 1 [0077.657] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e4b8) returned 1 [0077.657] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e4ec) returned 1 [0077.657] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\Cache\\B", nBufferLength=0x105, lpBuffer=0x31dff4, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\Cache\\B", lpFilePart=0x0) returned 0x5d [0077.657] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\Cache\\B\\", nBufferLength=0x105, lpBuffer=0x31dfc8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\Cache\\B\\", lpFilePart=0x0) returned 0x5e [0077.657] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\Cache\\B\\*", lpFindFileData=0x31e214 | out: lpFindFileData=0x31e214*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xb6518ad0, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xb6518ad0, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0xb6518ad0, ftLastWriteTime.dwHighDateTime=0x1d2dda4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x381c40 [0077.658] FindNextFileW (in: hFindFile=0x381c40, lpFindFileData=0x31e224 | out: lpFindFileData=0x31e224*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xb6518ad0, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xb6518ad0, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0xb6518ad0, ftLastWriteTime.dwHighDateTime=0x1d2dda4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0077.659] FindNextFileW (in: hFindFile=0x381c40, lpFindFileData=0x31e224 | out: lpFindFileData=0x31e224*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xb6518ad0, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xb6518ad0, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0xb6518ad0, ftLastWriteTime.dwHighDateTime=0x1d2dda4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 0 [0077.659] FindClose (in: hFindFile=0x381c40 | out: hFindFile=0x381c40) returned 1 [0077.659] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e4ac) returned 1 [0077.659] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e4b8) returned 1 [0077.659] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e4ec) returned 1 [0077.659] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\Cache\\B", nBufferLength=0x105, lpBuffer=0x31dff4, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\Cache\\B", lpFilePart=0x0) returned 0x5d [0077.659] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\Cache\\B\\", nBufferLength=0x105, lpBuffer=0x31dfc8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\Cache\\B\\", lpFilePart=0x0) returned 0x5e [0077.659] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\Cache\\B\\*", lpFindFileData=0x31e214 | out: lpFindFileData=0x31e214*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xb6518ad0, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xb6518ad0, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0xb6518ad0, ftLastWriteTime.dwHighDateTime=0x1d2dda4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x381c40 [0077.659] FindNextFileW (in: hFindFile=0x381c40, lpFindFileData=0x31e224 | out: lpFindFileData=0x31e224*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xb6518ad0, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xb6518ad0, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0xb6518ad0, ftLastWriteTime.dwHighDateTime=0x1d2dda4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0077.659] FindNextFileW (in: hFindFile=0x381c40, lpFindFileData=0x31e224 | out: lpFindFileData=0x31e224*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xb6518ad0, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xb6518ad0, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0xb6518ad0, ftLastWriteTime.dwHighDateTime=0x1d2dda4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 0 [0077.659] FindClose (in: hFindFile=0x381c40 | out: hFindFile=0x381c40) returned 1 [0077.660] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e4ac) returned 1 [0077.660] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e4b8) returned 1 [0077.660] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e4ec) returned 1 [0077.660] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\Cache\\C", nBufferLength=0x105, lpBuffer=0x31dff4, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\Cache\\C", lpFilePart=0x0) returned 0x5d [0077.660] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\Cache\\C\\", nBufferLength=0x105, lpBuffer=0x31dfc8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\Cache\\C\\", lpFilePart=0x0) returned 0x5e [0077.660] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\Cache\\C\\*", lpFindFileData=0x31e214 | out: lpFindFileData=0x31e214*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xb6518ad0, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xb7eaf750, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0xb7eaf750, ftLastWriteTime.dwHighDateTime=0x1d2dda4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x381c40 [0077.660] FindNextFileW (in: hFindFile=0x381c40, lpFindFileData=0x31e224 | out: lpFindFileData=0x31e224*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xb6518ad0, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xb7eaf750, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0xb7eaf750, ftLastWriteTime.dwHighDateTime=0x1d2dda4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0077.660] FindNextFileW (in: hFindFile=0x381c40, lpFindFileData=0x31e224 | out: lpFindFileData=0x31e224*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xb7eaf750, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xb7eaf750, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0xb7eaf750, ftLastWriteTime.dwHighDateTime=0x1d2dda4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="E6", cAlternateFileName="")) returned 1 [0077.660] FindNextFileW (in: hFindFile=0x381c40, lpFindFileData=0x31e224 | out: lpFindFileData=0x31e224*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xb7eaf750, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xb7eaf750, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0xb7eaf750, ftLastWriteTime.dwHighDateTime=0x1d2dda4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="E6", cAlternateFileName="")) returned 0 [0077.660] FindClose (in: hFindFile=0x381c40 | out: hFindFile=0x381c40) returned 1 [0077.661] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e4ac) returned 1 [0077.661] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e4b8) returned 1 [0077.661] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e4ec) returned 1 [0077.661] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\Cache\\C", nBufferLength=0x105, lpBuffer=0x31dff4, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\Cache\\C", lpFilePart=0x0) returned 0x5d [0077.661] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\Cache\\C\\", nBufferLength=0x105, lpBuffer=0x31dfc8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\Cache\\C\\", lpFilePart=0x0) returned 0x5e [0077.661] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\Cache\\C\\*", lpFindFileData=0x31e214 | out: lpFindFileData=0x31e214*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xb6518ad0, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xb7eaf750, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0xb7eaf750, ftLastWriteTime.dwHighDateTime=0x1d2dda4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x381c40 [0077.661] FindNextFileW (in: hFindFile=0x381c40, lpFindFileData=0x31e224 | out: lpFindFileData=0x31e224*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xb6518ad0, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xb7eaf750, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0xb7eaf750, ftLastWriteTime.dwHighDateTime=0x1d2dda4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0077.661] FindNextFileW (in: hFindFile=0x381c40, lpFindFileData=0x31e224 | out: lpFindFileData=0x31e224*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xb7eaf750, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xb7eaf750, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0xb7eaf750, ftLastWriteTime.dwHighDateTime=0x1d2dda4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="E6", cAlternateFileName="")) returned 1 [0077.661] FindNextFileW (in: hFindFile=0x381c40, lpFindFileData=0x31e224 | out: lpFindFileData=0x31e224*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0077.661] FindClose (in: hFindFile=0x381c40 | out: hFindFile=0x381c40) returned 1 [0077.662] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e4ac) returned 1 [0077.662] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e4b8) returned 1 [0077.662] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e474) returned 1 [0077.662] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\Cache\\C\\E6", nBufferLength=0x105, lpBuffer=0x31df7c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\Cache\\C\\E6", lpFilePart=0x0) returned 0x60 [0077.662] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\Cache\\C\\E6\\", nBufferLength=0x105, lpBuffer=0x31df50, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\Cache\\C\\E6\\", lpFilePart=0x0) returned 0x61 [0077.662] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\Cache\\C\\E6\\*", lpFindFileData=0x31e19c | out: lpFindFileData=0x31e19c*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xb7eaf750, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xb7eaf750, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0xb7eaf750, ftLastWriteTime.dwHighDateTime=0x1d2dda4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x381c40 [0077.662] FindNextFileW (in: hFindFile=0x381c40, lpFindFileData=0x31e1ac | out: lpFindFileData=0x31e1ac*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xb7eaf750, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xb7eaf750, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0xb7eaf750, ftLastWriteTime.dwHighDateTime=0x1d2dda4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0077.662] FindNextFileW (in: hFindFile=0x381c40, lpFindFileData=0x31e1ac | out: lpFindFileData=0x31e1ac*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xb7eaf750, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xb7eaf750, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0xb7f21b70, ftLastWriteTime.dwHighDateTime=0x1d2dda4, nFileSizeHigh=0x0, nFileSizeLow=0x21839, dwReserved0=0x0, dwReserved1=0x0, cFileName="9DCB7d01", cAlternateFileName="")) returned 1 [0077.662] FindNextFileW (in: hFindFile=0x381c40, lpFindFileData=0x31e1ac | out: lpFindFileData=0x31e1ac*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0077.663] FindClose (in: hFindFile=0x381c40 | out: hFindFile=0x381c40) returned 1 [0077.663] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e434) returned 1 [0077.663] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e440) returned 1 [0077.663] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e474) returned 1 [0077.663] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\Cache\\C\\E6", nBufferLength=0x105, lpBuffer=0x31df7c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\Cache\\C\\E6", lpFilePart=0x0) returned 0x60 [0077.663] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\Cache\\C\\E6\\", nBufferLength=0x105, lpBuffer=0x31df50, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\Cache\\C\\E6\\", lpFilePart=0x0) returned 0x61 [0077.663] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\Cache\\C\\E6\\*", lpFindFileData=0x31e19c | out: lpFindFileData=0x31e19c*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xb7eaf750, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xb7eaf750, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0xb7eaf750, ftLastWriteTime.dwHighDateTime=0x1d2dda4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x381c40 [0077.663] FindNextFileW (in: hFindFile=0x381c40, lpFindFileData=0x31e1ac | out: lpFindFileData=0x31e1ac*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xb7eaf750, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xb7eaf750, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0xb7eaf750, ftLastWriteTime.dwHighDateTime=0x1d2dda4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0077.663] FindNextFileW (in: hFindFile=0x381c40, lpFindFileData=0x31e1ac | out: lpFindFileData=0x31e1ac*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xb7eaf750, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xb7eaf750, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0xb7f21b70, ftLastWriteTime.dwHighDateTime=0x1d2dda4, nFileSizeHigh=0x0, nFileSizeLow=0x21839, dwReserved0=0x0, dwReserved1=0x0, cFileName="9DCB7d01", cAlternateFileName="")) returned 1 [0077.664] FindClose (in: hFindFile=0x381c40 | out: hFindFile=0x381c40) returned 1 [0077.664] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e434) returned 1 [0077.664] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e440) returned 1 [0077.664] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e4ec) returned 1 [0077.664] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\Cache\\D", nBufferLength=0x105, lpBuffer=0x31dff4, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\Cache\\D", lpFilePart=0x0) returned 0x5d [0077.665] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\Cache\\D\\", nBufferLength=0x105, lpBuffer=0x31dfc8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\Cache\\D\\", lpFilePart=0x0) returned 0x5e [0077.665] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\Cache\\D\\*", lpFindFileData=0x31e214 | out: lpFindFileData=0x31e214*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xb6518ad0, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0x81e671d0, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x81e671d0, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x381c40 [0077.666] FindClose (in: hFindFile=0x381c40 | out: hFindFile=0x381c40) returned 1 [0077.666] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e4ac) returned 1 [0077.666] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e4b8) returned 1 [0077.666] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e4ec) returned 1 [0077.666] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\Cache\\D", nBufferLength=0x105, lpBuffer=0x31dff4, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\Cache\\D", lpFilePart=0x0) returned 0x5d [0077.666] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\Cache\\D\\", nBufferLength=0x105, lpBuffer=0x31dfc8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\Cache\\D\\", lpFilePart=0x0) returned 0x5e [0077.666] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\Cache\\D\\*", lpFindFileData=0x31e214 | out: lpFindFileData=0x31e214*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xb6518ad0, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0x81e671d0, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x81e671d0, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x381c40 [0077.666] FindClose (in: hFindFile=0x381c40 | out: hFindFile=0x381c40) returned 1 [0077.666] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e4ac) returned 1 [0077.667] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e4b8) returned 1 [0077.667] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e474) returned 1 [0077.667] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\Cache\\D\\08", nBufferLength=0x105, lpBuffer=0x31df7c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\Cache\\D\\08", lpFilePart=0x0) returned 0x60 [0077.667] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\Cache\\D\\08\\", nBufferLength=0x105, lpBuffer=0x31df50, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\Cache\\D\\08\\", lpFilePart=0x0) returned 0x61 [0077.667] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\Cache\\D\\08\\*", lpFindFileData=0x31e19c | out: lpFindFileData=0x31e19c*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x81e671d0, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x81e671d0, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x81e671d0, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x381c40 [0077.668] FindClose (in: hFindFile=0x381c40 | out: hFindFile=0x381c40) returned 1 [0077.668] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e434) returned 1 [0077.668] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e440) returned 1 [0077.668] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e474) returned 1 [0077.668] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\Cache\\D\\08", nBufferLength=0x105, lpBuffer=0x31df7c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\Cache\\D\\08", lpFilePart=0x0) returned 0x60 [0077.668] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\Cache\\D\\08\\", nBufferLength=0x105, lpBuffer=0x31df50, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\Cache\\D\\08\\", lpFilePart=0x0) returned 0x61 [0077.668] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\Cache\\D\\08\\*", lpFindFileData=0x31e19c | out: lpFindFileData=0x31e19c*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x81e671d0, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x81e671d0, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x81e671d0, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x381c40 [0077.668] FindClose (in: hFindFile=0x381c40 | out: hFindFile=0x381c40) returned 1 [0077.668] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e434) returned 1 [0077.668] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\Cache\\E", nBufferLength=0x105, lpBuffer=0x31dff4, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\Cache\\E", lpFilePart=0x0) returned 0x5d [0077.668] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\Cache\\E\\", nBufferLength=0x105, lpBuffer=0x31dfc8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\Cache\\E\\", lpFilePart=0x0) returned 0x5e [0077.669] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\Cache\\E\\*", lpFindFileData=0x31e214 | out: lpFindFileData=0x31e214*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xb6518ad0, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xb7f6de30, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0xb7f6de30, ftLastWriteTime.dwHighDateTime=0x1d2dda4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x381c40 [0077.669] FindClose (in: hFindFile=0x381c40 | out: hFindFile=0x381c40) returned 1 [0077.669] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\Cache\\E", nBufferLength=0x105, lpBuffer=0x31dff4, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\Cache\\E", lpFilePart=0x0) returned 0x5d [0077.669] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\Cache\\E\\", nBufferLength=0x105, lpBuffer=0x31dfc8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\Cache\\E\\", lpFilePart=0x0) returned 0x5e [0077.669] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\Cache\\E\\*", lpFindFileData=0x31e214 | out: lpFindFileData=0x31e214*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xb6518ad0, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xb7f6de30, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0xb7f6de30, ftLastWriteTime.dwHighDateTime=0x1d2dda4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x381c40 [0077.669] FindClose (in: hFindFile=0x381c40 | out: hFindFile=0x381c40) returned 1 [0077.669] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\Cache\\E\\69", nBufferLength=0x105, lpBuffer=0x31df7c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\Cache\\E\\69", lpFilePart=0x0) returned 0x60 [0077.669] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\Cache\\E\\69\\", nBufferLength=0x105, lpBuffer=0x31df50, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\Cache\\E\\69\\", lpFilePart=0x0) returned 0x61 [0077.669] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\Cache\\E\\69\\*", lpFindFileData=0x31e19c | out: lpFindFileData=0x31e19c*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xb7f6de30, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xb7f6de30, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0xb7f6de30, ftLastWriteTime.dwHighDateTime=0x1d2dda4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x381c40 [0077.670] FindClose (in: hFindFile=0x381c40 | out: hFindFile=0x381c40) returned 1 [0077.670] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\Cache\\E\\69", nBufferLength=0x105, lpBuffer=0x31df7c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\Cache\\E\\69", lpFilePart=0x0) returned 0x60 [0077.670] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\Cache\\E\\69\\", nBufferLength=0x105, lpBuffer=0x31df50, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\Cache\\E\\69\\", lpFilePart=0x0) returned 0x61 [0077.670] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\Cache\\E\\69\\*", lpFindFileData=0x31e19c | out: lpFindFileData=0x31e19c*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xb7f6de30, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xb7f6de30, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0xb7f6de30, ftLastWriteTime.dwHighDateTime=0x1d2dda4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x381c40 [0077.670] FindClose (in: hFindFile=0x381c40 | out: hFindFile=0x381c40) returned 1 [0077.670] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\Cache\\F", nBufferLength=0x105, lpBuffer=0x31dff4, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\Cache\\F", lpFilePart=0x0) returned 0x5d [0077.670] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\Cache\\F\\", nBufferLength=0x105, lpBuffer=0x31dfc8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\Cache\\F\\", lpFilePart=0x0) returned 0x5e [0077.671] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\Cache\\F\\*", lpFindFileData=0x31e214 | out: lpFindFileData=0x31e214*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xb6518ad0, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0x82329dd0, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x82329dd0, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x381c40 [0077.672] FindClose (in: hFindFile=0x381c40 | out: hFindFile=0x381c40) returned 1 [0077.672] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\Cache\\F", nBufferLength=0x105, lpBuffer=0x31dff4, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\Cache\\F", lpFilePart=0x0) returned 0x5d [0077.672] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\Cache\\F\\", nBufferLength=0x105, lpBuffer=0x31dfc8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\Cache\\F\\", lpFilePart=0x0) returned 0x5e [0077.672] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\Cache\\F\\*", lpFindFileData=0x31e214 | out: lpFindFileData=0x31e214*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xb6518ad0, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0x82329dd0, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x82329dd0, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x381c40 [0077.672] FindClose (in: hFindFile=0x381c40 | out: hFindFile=0x381c40) returned 1 [0077.672] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\Cache\\F\\23", nBufferLength=0x105, lpBuffer=0x31df7c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\Cache\\F\\23", lpFilePart=0x0) returned 0x60 [0077.672] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\Cache\\F\\23\\", nBufferLength=0x105, lpBuffer=0x31df50, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\Cache\\F\\23\\", lpFilePart=0x0) returned 0x61 [0077.672] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\Cache\\F\\23\\*", lpFindFileData=0x31e19c | out: lpFindFileData=0x31e19c*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xb7f6de30, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xb7f6de30, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0xb7f6de30, ftLastWriteTime.dwHighDateTime=0x1d2dda4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x381c40 [0077.673] FindClose (in: hFindFile=0x381c40 | out: hFindFile=0x381c40) returned 1 [0077.673] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\Cache\\F\\23", nBufferLength=0x105, lpBuffer=0x31df7c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\Cache\\F\\23", lpFilePart=0x0) returned 0x60 [0077.673] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\Cache\\F\\23\\", nBufferLength=0x105, lpBuffer=0x31df50, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\Cache\\F\\23\\", lpFilePart=0x0) returned 0x61 [0077.673] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\Cache\\F\\23\\*", lpFindFileData=0x31e19c | out: lpFindFileData=0x31e19c*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xb7f6de30, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xb7f6de30, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0xb7f6de30, ftLastWriteTime.dwHighDateTime=0x1d2dda4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x381c40 [0077.673] FindClose (in: hFindFile=0x381c40 | out: hFindFile=0x381c40) returned 1 [0077.673] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\Cache\\F\\F0", nBufferLength=0x105, lpBuffer=0x31df7c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\Cache\\F\\F0", lpFilePart=0x0) returned 0x60 [0077.673] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\Cache\\F\\F0\\", nBufferLength=0x105, lpBuffer=0x31df50, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\Cache\\F\\F0\\", lpFilePart=0x0) returned 0x61 [0077.673] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\Cache\\F\\F0\\*", lpFindFileData=0x31e19c | out: lpFindFileData=0x31e19c*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x82329dd0, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x82329dd0, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x82329dd0, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x381c40 [0077.675] FindClose (in: hFindFile=0x381c40 | out: hFindFile=0x381c40) returned 1 [0077.675] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\Cache\\F\\F0", nBufferLength=0x105, lpBuffer=0x31df7c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\Cache\\F\\F0", lpFilePart=0x0) returned 0x60 [0077.675] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\Cache\\F\\F0\\", nBufferLength=0x105, lpBuffer=0x31df50, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\Cache\\F\\F0\\", lpFilePart=0x0) returned 0x61 [0077.675] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\Cache\\F\\F0\\*", lpFindFileData=0x31e19c | out: lpFindFileData=0x31e19c*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x82329dd0, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x82329dd0, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x82329dd0, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x381c40 [0077.676] FindClose (in: hFindFile=0x381c40 | out: hFindFile=0x381c40) returned 1 [0077.676] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\OfflineCache", nBufferLength=0x105, lpBuffer=0x31e06c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\OfflineCache", lpFilePart=0x0) returned 0x62 [0077.676] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\OfflineCache\\", nBufferLength=0x105, lpBuffer=0x31e040, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\OfflineCache\\", lpFilePart=0x0) returned 0x63 [0077.676] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\OfflineCache\\*", lpFindFileData=0x31e28c | out: lpFindFileData=0x31e28c*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xbece2650, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xbecfd400, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0xbecfd400, ftLastWriteTime.dwHighDateTime=0x1d2dda4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x381c40 [0077.677] FindClose (in: hFindFile=0x381c40 | out: hFindFile=0x381c40) returned 1 [0077.677] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\OfflineCache", nBufferLength=0x105, lpBuffer=0x31e06c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\OfflineCache", lpFilePart=0x0) returned 0x62 [0077.677] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\OfflineCache\\", nBufferLength=0x105, lpBuffer=0x31e040, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\OfflineCache\\", lpFilePart=0x0) returned 0x63 [0077.677] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\OfflineCache\\*", lpFindFileData=0x31e28c | out: lpFindFileData=0x31e28c*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xbece2650, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xbecfd400, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0xbecfd400, ftLastWriteTime.dwHighDateTime=0x1d2dda4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x381c40 [0077.677] FindClose (in: hFindFile=0x381c40 | out: hFindFile=0x381c40) returned 1 [0077.677] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\safebrowsing", nBufferLength=0x105, lpBuffer=0x31e06c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\safebrowsing", lpFilePart=0x0) returned 0x62 [0077.678] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\safebrowsing\\", nBufferLength=0x105, lpBuffer=0x31e040, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\safebrowsing\\", lpFilePart=0x0) returned 0x63 [0077.678] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\safebrowsing\\*", lpFindFileData=0x31e28c | out: lpFindFileData=0x31e28c*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x8234ff30, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x826bbed0, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x826bbed0, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x381c40 [0077.680] FindClose (in: hFindFile=0x381c40 | out: hFindFile=0x381c40) returned 1 [0077.681] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\safebrowsing", nBufferLength=0x105, lpBuffer=0x31e06c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\safebrowsing", lpFilePart=0x0) returned 0x62 [0077.681] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\safebrowsing\\", nBufferLength=0x105, lpBuffer=0x31e040, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\safebrowsing\\", lpFilePart=0x0) returned 0x63 [0077.682] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\safebrowsing\\*", lpFindFileData=0x31e28c | out: lpFindFileData=0x31e28c*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x8234ff30, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x826bbed0, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x826bbed0, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x381c40 [0077.683] FindClose (in: hFindFile=0x381c40 | out: hFindFile=0x381c40) returned 1 [0077.683] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\startupCache", nBufferLength=0x105, lpBuffer=0x31e06c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\startupCache", lpFilePart=0x0) returned 0x62 [0077.684] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\startupCache\\", nBufferLength=0x105, lpBuffer=0x31e040, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\startupCache\\", lpFilePart=0x0) returned 0x63 [0077.684] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\startupCache\\*", lpFindFileData=0x31e28c | out: lpFindFileData=0x31e28c*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x807f0230, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x854b47b0, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x854b47b0, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x381c40 [0077.685] FindClose (in: hFindFile=0x381c40 | out: hFindFile=0x381c40) returned 1 [0077.685] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\startupCache", nBufferLength=0x105, lpBuffer=0x31e06c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\startupCache", lpFilePart=0x0) returned 0x62 [0077.685] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\startupCache\\", nBufferLength=0x105, lpBuffer=0x31e040, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\startupCache\\", lpFilePart=0x0) returned 0x63 [0077.685] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\startupCache\\*", lpFindFileData=0x31e28c | out: lpFindFileData=0x31e28c*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x807f0230, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x854b47b0, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x854b47b0, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x381c40 [0077.685] FindClose (in: hFindFile=0x381c40 | out: hFindFile=0x381c40) returned 1 [0077.685] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\thumbnails", nBufferLength=0x105, lpBuffer=0x31e06c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\thumbnails", lpFilePart=0x0) returned 0x60 [0077.685] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\thumbnails\\", nBufferLength=0x105, lpBuffer=0x31e040, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\thumbnails\\", lpFilePart=0x0) returned 0x61 [0077.685] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\thumbnails\\*", lpFindFileData=0x31e28c | out: lpFindFileData=0x31e28c*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xb653ec30, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0x83ce6bb0, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x83ce6bb0, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x381c40 [0077.688] FindClose (in: hFindFile=0x381c40 | out: hFindFile=0x381c40) returned 1 [0077.689] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\thumbnails", nBufferLength=0x105, lpBuffer=0x31e06c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\thumbnails", lpFilePart=0x0) returned 0x60 [0077.689] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\thumbnails\\", nBufferLength=0x105, lpBuffer=0x31e040, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\thumbnails\\", lpFilePart=0x0) returned 0x61 [0077.689] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\thumbnails\\*", lpFindFileData=0x31e28c | out: lpFindFileData=0x31e28c*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xb653ec30, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0x83ce6bb0, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x83ce6bb0, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x381c40 [0077.690] FindClose (in: hFindFile=0x381c40 | out: hFindFile=0x381c40) returned 1 [0077.691] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\thumbnails\\4cc87c1409819bf06f42b782d4902b2f.png", nBufferLength=0x105, lpBuffer=0x31df3c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\thumbnails\\4cc87c1409819bf06f42b782d4902b2f.png", lpFilePart=0x0) returned 0x85 [0077.691] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\thumbnails\\4cc87c1409819bf06f42b782d4902b2f.png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\mozilla\\firefox\\profiles\\silmbjec.default\\thumbnails\\4cc87c1409819bf06f42b782d4902b2f.png"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x264 [0077.693] GetFileType (hFile=0x264) returned 0x1 [0077.693] GetFileType (hFile=0x264) returned 0x1 [0077.693] GetFileSize (in: hFile=0x264, lpFileSizeHigh=0x31e538 | out: lpFileSizeHigh=0x31e538*=0x0) returned 0x40b0 [0077.693] ReadFile (in: hFile=0x264, lpBuffer=0x2688c5c, nNumberOfBytesToRead=0x40b0, lpNumberOfBytesRead=0x31e4e4, lpOverlapped=0x0 | out: lpBuffer=0x2688c5c*, lpNumberOfBytesRead=0x31e4e4*=0x40b0, lpOverlapped=0x0) returned 1 [0077.733] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\thumbnails\\4cc87c1409819bf06f42b782d4902b2f.png", nBufferLength=0x105, lpBuffer=0x31df28, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\thumbnails\\4cc87c1409819bf06f42b782d4902b2f.png", lpFilePart=0x0) returned 0x85 [0077.733] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\thumbnails\\4cc87c1409819bf06f42b782d4902b2f.png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\mozilla\\firefox\\profiles\\silmbjec.default\\thumbnails\\4cc87c1409819bf06f42b782d4902b2f.png"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x264 [0077.735] GetFileType (hFile=0x264) returned 0x1 [0077.735] GetFileType (hFile=0x264) returned 0x1 [0077.735] WriteFile (in: hFile=0x264, lpBuffer=0x26e9f5c*, nNumberOfBytesToWrite=0x40c0, lpNumberOfBytesWritten=0x31e4d8, lpOverlapped=0x0 | out: lpBuffer=0x26e9f5c*, lpNumberOfBytesWritten=0x31e4d8*=0x40c0, lpOverlapped=0x0) returned 1 [0077.736] CloseHandle (hObject=0x264) returned 1 [0077.736] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\thumbnails\\4cc87c1409819bf06f42b782d4902b2f.png", nBufferLength=0x105, lpBuffer=0x31e05c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\thumbnails\\4cc87c1409819bf06f42b782d4902b2f.png", lpFilePart=0x0) returned 0x85 [0077.736] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\thumbnails\\4cc87c1409819bf06f42b782d4902b2f.png", nBufferLength=0x105, lpBuffer=0x31e05c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\thumbnails\\4cc87c1409819bf06f42b782d4902b2f.png", lpFilePart=0x0) returned 0x85 [0077.736] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\thumbnails\\4cc87c1409819bf06f42b782d4902b2f.png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\mozilla\\firefox\\profiles\\silmbjec.default\\thumbnails\\4cc87c1409819bf06f42b782d4902b2f.png"), fInfoLevelId=0x0, lpFileInformation=0x31e538 | out: lpFileInformation=0x31e538*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x83cc0a50, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x83cc0a50, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x11c80740, ftLastWriteTime.dwHighDateTime=0x1d6eb7f, nFileSizeHigh=0x0, nFileSizeLow=0x40c0)) returned 1 [0077.736] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\thumbnails\\4cc87c1409819bf06f42b782d4902b2f.png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\mozilla\\firefox\\profiles\\silmbjec.default\\thumbnails\\4cc87c1409819bf06f42b782d4902b2f.png"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\thumbnails\\4cc87c1409819bf06f42b782d4902b2f.png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\mozilla\\firefox\\profiles\\silmbjec.default\\thumbnails\\4cc87c1409819bf06f42b782d4902b2f.png")) returned 1 [0077.737] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\thumbnails\\ba182bcd131f1f3c6b6fbbb1ba078341.png", nBufferLength=0x105, lpBuffer=0x31df3c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\thumbnails\\ba182bcd131f1f3c6b6fbbb1ba078341.png", lpFilePart=0x0) returned 0x85 [0077.737] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\thumbnails\\ba182bcd131f1f3c6b6fbbb1ba078341.png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\mozilla\\firefox\\profiles\\silmbjec.default\\thumbnails\\ba182bcd131f1f3c6b6fbbb1ba078341.png"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x264 [0077.737] GetFileType (hFile=0x264) returned 0x1 [0077.737] GetFileType (hFile=0x264) returned 0x1 [0077.737] GetFileSize (in: hFile=0x264, lpFileSizeHigh=0x31e538 | out: lpFileSizeHigh=0x31e538*=0x0) returned 0x40b0 [0077.737] ReadFile (in: hFile=0x264, lpBuffer=0x26ee608, nNumberOfBytesToRead=0x40b0, lpNumberOfBytesRead=0x31e4e4, lpOverlapped=0x0 | out: lpBuffer=0x26ee608*, lpNumberOfBytesRead=0x31e4e4*=0x40b0, lpOverlapped=0x0) returned 1 [0077.739] CloseHandle (hObject=0x264) returned 1 [0077.753] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\thumbnails\\ba182bcd131f1f3c6b6fbbb1ba078341.png", nBufferLength=0x105, lpBuffer=0x31df28, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\thumbnails\\ba182bcd131f1f3c6b6fbbb1ba078341.png", lpFilePart=0x0) returned 0x85 [0077.753] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\thumbnails\\ba182bcd131f1f3c6b6fbbb1ba078341.png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\mozilla\\firefox\\profiles\\silmbjec.default\\thumbnails\\ba182bcd131f1f3c6b6fbbb1ba078341.png"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x264 [0077.754] GetFileType (hFile=0x264) returned 0x1 [0077.754] GetFileType (hFile=0x264) returned 0x1 [0077.755] WriteFile (in: hFile=0x264, lpBuffer=0x274f7ac*, nNumberOfBytesToWrite=0x40c0, lpNumberOfBytesWritten=0x31e4d8, lpOverlapped=0x0 | out: lpBuffer=0x274f7ac*, lpNumberOfBytesWritten=0x31e4d8*=0x40c0, lpOverlapped=0x0) returned 1 [0077.756] CloseHandle (hObject=0x264) returned 1 [0077.756] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\thumbnails\\ba182bcd131f1f3c6b6fbbb1ba078341.png", nBufferLength=0x105, lpBuffer=0x31e05c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\thumbnails\\ba182bcd131f1f3c6b6fbbb1ba078341.png", lpFilePart=0x0) returned 0x85 [0077.756] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\thumbnails\\ba182bcd131f1f3c6b6fbbb1ba078341.png", nBufferLength=0x105, lpBuffer=0x31e05c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\thumbnails\\ba182bcd131f1f3c6b6fbbb1ba078341.png", lpFilePart=0x0) returned 0x85 [0077.756] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\thumbnails\\ba182bcd131f1f3c6b6fbbb1ba078341.png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\mozilla\\firefox\\profiles\\silmbjec.default\\thumbnails\\ba182bcd131f1f3c6b6fbbb1ba078341.png"), fInfoLevelId=0x0, lpFileInformation=0x31e538 | out: lpFileInformation=0x31e538*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x83ce6bb0, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x83ce6bb0, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x11ca68a0, ftLastWriteTime.dwHighDateTime=0x1d6eb7f, nFileSizeHigh=0x0, nFileSizeLow=0x40c0)) returned 1 [0077.756] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\thumbnails\\ba182bcd131f1f3c6b6fbbb1ba078341.png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\mozilla\\firefox\\profiles\\silmbjec.default\\thumbnails\\ba182bcd131f1f3c6b6fbbb1ba078341.png"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\thumbnails\\ba182bcd131f1f3c6b6fbbb1ba078341.png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\mozilla\\firefox\\profiles\\silmbjec.default\\thumbnails\\ba182bcd131f1f3c6b6fbbb1ba078341.png")) returned 1 [0077.757] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\thumbnails\\ce8c0453589216a67cddb50284fbfe8d.png", nBufferLength=0x105, lpBuffer=0x31df3c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\thumbnails\\ce8c0453589216a67cddb50284fbfe8d.png", lpFilePart=0x0) returned 0x85 [0077.757] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\thumbnails\\ce8c0453589216a67cddb50284fbfe8d.png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\mozilla\\firefox\\profiles\\silmbjec.default\\thumbnails\\ce8c0453589216a67cddb50284fbfe8d.png"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x264 [0077.761] GetFileType (hFile=0x264) returned 0x1 [0077.761] GetFileType (hFile=0x264) returned 0x1 [0077.761] GetFileSize (in: hFile=0x264, lpFileSizeHigh=0x31e538 | out: lpFileSizeHigh=0x31e538*=0x0) returned 0x1c362 [0077.761] ReadFile (in: hFile=0x264, lpBuffer=0x36d24a0, nNumberOfBytesToRead=0x1c362, lpNumberOfBytesRead=0x31e4e4, lpOverlapped=0x0 | out: lpBuffer=0x36d24a0*, lpNumberOfBytesRead=0x31e4e4*=0x1c362, lpOverlapped=0x0) returned 1 [0077.765] CloseHandle (hObject=0x264) returned 1 [0077.793] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\thumbnails\\ce8c0453589216a67cddb50284fbfe8d.png", nBufferLength=0x105, lpBuffer=0x31df28, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\thumbnails\\ce8c0453589216a67cddb50284fbfe8d.png", lpFilePart=0x0) returned 0x85 [0077.793] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\thumbnails\\ce8c0453589216a67cddb50284fbfe8d.png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\mozilla\\firefox\\profiles\\silmbjec.default\\thumbnails\\ce8c0453589216a67cddb50284fbfe8d.png"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x264 [0077.795] GetFileType (hFile=0x264) returned 0x1 [0077.795] GetFileType (hFile=0x264) returned 0x1 [0077.795] WriteFile (in: hFile=0x264, lpBuffer=0x375f600*, nNumberOfBytesToWrite=0x1c370, lpNumberOfBytesWritten=0x31e4d8, lpOverlapped=0x0 | out: lpBuffer=0x375f600*, lpNumberOfBytesWritten=0x31e4d8*=0x1c370, lpOverlapped=0x0) returned 1 [0077.799] CloseHandle (hObject=0x264) returned 1 [0077.799] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\thumbnails\\ce8c0453589216a67cddb50284fbfe8d.png", nBufferLength=0x105, lpBuffer=0x31e05c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\thumbnails\\ce8c0453589216a67cddb50284fbfe8d.png", lpFilePart=0x0) returned 0x85 [0077.799] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\thumbnails\\ce8c0453589216a67cddb50284fbfe8d.png", nBufferLength=0x105, lpBuffer=0x31e05c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\thumbnails\\ce8c0453589216a67cddb50284fbfe8d.png", lpFilePart=0x0) returned 0x85 [0077.799] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\thumbnails\\ce8c0453589216a67cddb50284fbfe8d.png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\mozilla\\firefox\\profiles\\silmbjec.default\\thumbnails\\ce8c0453589216a67cddb50284fbfe8d.png"), fInfoLevelId=0x0, lpFileInformation=0x31e538 | out: lpFileInformation=0x31e538*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xb97ade50, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xb97ade50, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0x11d18cc0, ftLastWriteTime.dwHighDateTime=0x1d6eb7f, nFileSizeHigh=0x0, nFileSizeLow=0x1c370)) returned 1 [0077.799] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\thumbnails\\ce8c0453589216a67cddb50284fbfe8d.png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\mozilla\\firefox\\profiles\\silmbjec.default\\thumbnails\\ce8c0453589216a67cddb50284fbfe8d.png"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\thumbnails\\ce8c0453589216a67cddb50284fbfe8d.png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\mozilla\\firefox\\profiles\\silmbjec.default\\thumbnails\\ce8c0453589216a67cddb50284fbfe8d.png")) returned 1 [0077.800] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\updates", nBufferLength=0x105, lpBuffer=0x31e1d4, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\updates", lpFilePart=0x0) returned 0x3b [0077.800] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\updates\\", nBufferLength=0x105, lpBuffer=0x31e1a8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\updates\\", lpFilePart=0x0) returned 0x3c [0077.800] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\updates\\*", lpFindFileData=0x31e3f4 | out: lpFindFileData=0x31e3f4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xb7314c10, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xb7314c10, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0xb7314c10, ftLastWriteTime.dwHighDateTime=0x1d2dda4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x381f80 [0077.800] FindClose (in: hFindFile=0x381f80 | out: hFindFile=0x381f80) returned 1 [0077.800] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\updates", nBufferLength=0x105, lpBuffer=0x31e1d4, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\updates", lpFilePart=0x0) returned 0x3b [0077.800] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\updates\\", nBufferLength=0x105, lpBuffer=0x31e1a8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\updates\\", lpFilePart=0x0) returned 0x3c [0077.801] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\updates\\*", lpFindFileData=0x31e3f4 | out: lpFindFileData=0x31e3f4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xb7314c10, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xb7314c10, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0xb7314c10, ftLastWriteTime.dwHighDateTime=0x1d2dda4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x381f80 [0077.801] FindClose (in: hFindFile=0x381f80 | out: hFindFile=0x381f80) returned 1 [0077.801] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\updates\\E7CF176E110C211B", nBufferLength=0x105, lpBuffer=0x31e15c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\updates\\E7CF176E110C211B", lpFilePart=0x0) returned 0x4c [0077.801] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\updates\\E7CF176E110C211B\\", nBufferLength=0x105, lpBuffer=0x31e130, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\updates\\E7CF176E110C211B\\", lpFilePart=0x0) returned 0x4d [0077.801] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\updates\\E7CF176E110C211B\\*", lpFindFileData=0x31e37c | out: lpFindFileData=0x31e37c*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xb7314c10, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0x854b47b0, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x854b47b0, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x381f80 [0077.804] FindClose (in: hFindFile=0x381f80 | out: hFindFile=0x381f80) returned 1 [0077.804] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\updates\\E7CF176E110C211B", nBufferLength=0x105, lpBuffer=0x31e15c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\updates\\E7CF176E110C211B", lpFilePart=0x0) returned 0x4c [0077.804] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\updates\\E7CF176E110C211B\\", nBufferLength=0x105, lpBuffer=0x31e130, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\updates\\E7CF176E110C211B\\", lpFilePart=0x0) returned 0x4d [0077.804] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\updates\\E7CF176E110C211B\\*", lpFindFileData=0x31e37c | out: lpFindFileData=0x31e37c*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xb7314c10, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0x854b47b0, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x854b47b0, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x381f80 [0077.806] FindClose (in: hFindFile=0x381f80 | out: hFindFile=0x381f80) returned 1 [0077.806] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\updates\\E7CF176E110C211B\\active-update.xml", nBufferLength=0x105, lpBuffer=0x31e02c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\updates\\E7CF176E110C211B\\active-update.xml", lpFilePart=0x0) returned 0x5e [0077.807] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\updates\\E7CF176E110C211B\\active-update.xml" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\mozilla\\updates\\e7cf176e110c211b\\active-update.xml"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x264 [0077.809] GetFileType (hFile=0x264) returned 0x1 [0077.809] GetFileType (hFile=0x264) returned 0x1 [0077.809] GetFileSize (in: hFile=0x264, lpFileSizeHigh=0x31e628 | out: lpFileSizeHigh=0x31e628*=0x0) returned 0x464 [0077.809] ReadFile (in: hFile=0x264, lpBuffer=0x27a5098, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x31e5d4, lpOverlapped=0x0 | out: lpBuffer=0x27a5098*, lpNumberOfBytesRead=0x31e5d4*=0x464, lpOverlapped=0x0) returned 1 [0077.811] CloseHandle (hObject=0x264) returned 1 [0077.834] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\updates\\E7CF176E110C211B\\active-update.xml", nBufferLength=0x105, lpBuffer=0x31e018, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\updates\\E7CF176E110C211B\\active-update.xml", lpFilePart=0x0) returned 0x5e [0077.834] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\updates\\E7CF176E110C211B\\active-update.xml" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\mozilla\\updates\\e7cf176e110c211b\\active-update.xml"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x264 [0077.835] GetFileType (hFile=0x264) returned 0x1 [0077.835] GetFileType (hFile=0x264) returned 0x1 [0077.835] WriteFile (in: hFile=0x264, lpBuffer=0x27f461c*, nNumberOfBytesToWrite=0x470, lpNumberOfBytesWritten=0x31e59c, lpOverlapped=0x0 | out: lpBuffer=0x27f461c*, lpNumberOfBytesWritten=0x31e59c*=0x470, lpOverlapped=0x0) returned 1 [0077.837] CloseHandle (hObject=0x264) returned 1 [0077.837] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\updates\\E7CF176E110C211B\\active-update.xml", nBufferLength=0x105, lpBuffer=0x31e14c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\updates\\E7CF176E110C211B\\active-update.xml", lpFilePart=0x0) returned 0x5e [0077.837] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\updates\\E7CF176E110C211B\\active-update.xml", nBufferLength=0x105, lpBuffer=0x31e14c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\updates\\E7CF176E110C211B\\active-update.xml", lpFilePart=0x0) returned 0x5e [0077.837] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\updates\\E7CF176E110C211B\\active-update.xml" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\mozilla\\updates\\e7cf176e110c211b\\active-update.xml"), fInfoLevelId=0x0, lpFileInformation=0x31e628 | out: lpFileInformation=0x31e628*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x80a2b6d0, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x85442390, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x11d64f80, ftLastWriteTime.dwHighDateTime=0x1d6eb7f, nFileSizeHigh=0x0, nFileSizeLow=0x470)) returned 1 [0077.837] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\updates\\E7CF176E110C211B\\active-update.xml" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\mozilla\\updates\\e7cf176e110c211b\\active-update.xml"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\updates\\E7CF176E110C211B\\active-update.xml" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\mozilla\\updates\\e7cf176e110c211b\\active-update.xml")) returned 1 [0077.838] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\updates\\E7CF176E110C211B\\updates.xml", nBufferLength=0x105, lpBuffer=0x31e02c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\updates\\E7CF176E110C211B\\updates.xml", lpFilePart=0x0) returned 0x58 [0077.838] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\updates\\E7CF176E110C211B\\updates.xml" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\mozilla\\updates\\e7cf176e110c211b\\updates.xml"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x264 [0077.838] GetFileType (hFile=0x264) returned 0x1 [0077.838] GetFileType (hFile=0x264) returned 0x1 [0077.838] GetFileSize (in: hFile=0x264, lpFileSizeHigh=0x31e628 | out: lpFileSizeHigh=0x31e628*=0x0) returned 0x39 [0077.838] ReadFile (in: hFile=0x264, lpBuffer=0x27f5960, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x31e5d4, lpOverlapped=0x0 | out: lpBuffer=0x27f5960*, lpNumberOfBytesRead=0x31e5d4*=0x39, lpOverlapped=0x0) returned 1 [0077.840] CloseHandle (hObject=0x264) returned 1 [0077.887] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\updates\\E7CF176E110C211B\\updates.xml", nBufferLength=0x105, lpBuffer=0x31e018, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\updates\\E7CF176E110C211B\\updates.xml", lpFilePart=0x0) returned 0x58 [0077.887] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e50c) returned 1 [0077.887] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\updates\\E7CF176E110C211B\\updates.xml" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\mozilla\\updates\\e7cf176e110c211b\\updates.xml"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x264 [0077.889] GetFileType (hFile=0x264) returned 0x1 [0077.889] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e508) returned 1 [0077.889] GetFileType (hFile=0x264) returned 0x1 [0077.889] WriteFile (in: hFile=0x264, lpBuffer=0x2644814*, nNumberOfBytesToWrite=0x40, lpNumberOfBytesWritten=0x31e59c, lpOverlapped=0x0 | out: lpBuffer=0x2644814*, lpNumberOfBytesWritten=0x31e59c*=0x40, lpOverlapped=0x0) returned 1 [0077.890] CloseHandle (hObject=0x264) returned 1 [0077.890] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\updates\\E7CF176E110C211B\\updates.xml", nBufferLength=0x105, lpBuffer=0x31e14c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\updates\\E7CF176E110C211B\\updates.xml", lpFilePart=0x0) returned 0x58 [0077.890] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\updates\\E7CF176E110C211B\\updates.xml", nBufferLength=0x105, lpBuffer=0x31e14c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\updates\\E7CF176E110C211B\\updates.xml", lpFilePart=0x0) returned 0x58 [0077.890] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e5ac) returned 1 [0077.890] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\updates\\E7CF176E110C211B\\updates.xml" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\mozilla\\updates\\e7cf176e110c211b\\updates.xml"), fInfoLevelId=0x0, lpFileInformation=0x31e628 | out: lpFileInformation=0x31e628*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x80a9daf0, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x8548e650, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x11dd73a0, ftLastWriteTime.dwHighDateTime=0x1d6eb7f, nFileSizeHigh=0x0, nFileSizeLow=0x40)) returned 1 [0077.890] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e5a8) returned 1 [0077.890] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\updates\\E7CF176E110C211B\\updates.xml" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\mozilla\\updates\\e7cf176e110c211b\\updates.xml"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\updates\\E7CF176E110C211B\\updates.xml" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\mozilla\\updates\\e7cf176e110c211b\\updates.xml")) returned 1 [0077.890] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e5dc) returned 1 [0077.890] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\updates\\E7CF176E110C211B\\updates", nBufferLength=0x105, lpBuffer=0x31e0e4, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\updates\\E7CF176E110C211B\\updates", lpFilePart=0x0) returned 0x54 [0077.890] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\updates\\E7CF176E110C211B\\updates\\", nBufferLength=0x105, lpBuffer=0x31e0b8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\updates\\E7CF176E110C211B\\updates\\", lpFilePart=0x0) returned 0x55 [0077.891] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\updates\\E7CF176E110C211B\\updates\\*", lpFindFileData=0x31e304 | out: lpFindFileData=0x31e304*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xb74b7b30, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xb74b7b30, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0xb74b7b30, ftLastWriteTime.dwHighDateTime=0x1d2dda4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x381c40 [0077.892] FindNextFileW (in: hFindFile=0x381c40, lpFindFileData=0x31e314 | out: lpFindFileData=0x31e314*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xb74b7b30, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xb74b7b30, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0xb74b7b30, ftLastWriteTime.dwHighDateTime=0x1d2dda4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0077.892] FindNextFileW (in: hFindFile=0x381c40, lpFindFileData=0x31e314 | out: lpFindFileData=0x31e314*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xb74b7b30, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0x80a2b6d0, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x80a2b6d0, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="0", cAlternateFileName="")) returned 1 [0077.892] FindNextFileW (in: hFindFile=0x381c40, lpFindFileData=0x31e314 | out: lpFindFileData=0x31e314*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xb74b7b30, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0x80a2b6d0, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x80a2b6d0, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="0", cAlternateFileName="")) returned 0 [0077.892] FindClose (in: hFindFile=0x381c40 | out: hFindFile=0x381c40) returned 1 [0077.892] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e59c) returned 1 [0077.893] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e5a8) returned 1 [0077.893] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e5dc) returned 1 [0077.893] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\updates\\E7CF176E110C211B\\updates", nBufferLength=0x105, lpBuffer=0x31e0e4, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\updates\\E7CF176E110C211B\\updates", lpFilePart=0x0) returned 0x54 [0077.893] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\updates\\E7CF176E110C211B\\updates\\", nBufferLength=0x105, lpBuffer=0x31e0b8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\updates\\E7CF176E110C211B\\updates\\", lpFilePart=0x0) returned 0x55 [0077.893] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\updates\\E7CF176E110C211B\\updates\\*", lpFindFileData=0x31e304 | out: lpFindFileData=0x31e304*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xb74b7b30, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xb74b7b30, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0xb74b7b30, ftLastWriteTime.dwHighDateTime=0x1d2dda4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x381c40 [0077.893] FindNextFileW (in: hFindFile=0x381c40, lpFindFileData=0x31e314 | out: lpFindFileData=0x31e314*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xb74b7b30, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xb74b7b30, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0xb74b7b30, ftLastWriteTime.dwHighDateTime=0x1d2dda4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0077.893] FindNextFileW (in: hFindFile=0x381c40, lpFindFileData=0x31e314 | out: lpFindFileData=0x31e314*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xb74b7b30, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0x80a2b6d0, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x80a2b6d0, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="0", cAlternateFileName="")) returned 1 [0077.893] FindNextFileW (in: hFindFile=0x381c40, lpFindFileData=0x31e314 | out: lpFindFileData=0x31e314*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0077.893] FindClose (in: hFindFile=0x381c40 | out: hFindFile=0x381c40) returned 1 [0077.893] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e59c) returned 1 [0077.893] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e5a8) returned 1 [0077.893] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e564) returned 1 [0077.894] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\updates\\E7CF176E110C211B\\updates\\0", nBufferLength=0x105, lpBuffer=0x31e06c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\updates\\E7CF176E110C211B\\updates\\0", lpFilePart=0x0) returned 0x56 [0077.894] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\updates\\E7CF176E110C211B\\updates\\0\\", nBufferLength=0x105, lpBuffer=0x31e040, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\updates\\E7CF176E110C211B\\updates\\0\\", lpFilePart=0x0) returned 0x57 [0077.894] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\updates\\E7CF176E110C211B\\updates\\0\\*", lpFindFileData=0x31e28c | out: lpFindFileData=0x31e28c*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xb74b7b30, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0x80a2b6d0, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x80a2b6d0, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x381c40 [0077.894] FindNextFileW (in: hFindFile=0x381c40, lpFindFileData=0x31e29c | out: lpFindFileData=0x31e29c*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xb74b7b30, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0x80a2b6d0, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x80a2b6d0, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0077.894] FindNextFileW (in: hFindFile=0x381c40, lpFindFileData=0x31e29c | out: lpFindFileData=0x31e29c*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xb7d7ec50, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xb7d7ec50, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0x818016b0, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x927c0, dwReserved0=0x0, dwReserved1=0x0, cFileName="update.mar", cAlternateFileName="")) returned 1 [0077.894] FindNextFileW (in: hFindFile=0x381c40, lpFindFileData=0x31e29c | out: lpFindFileData=0x31e29c*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x80993150, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x80993150, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x80993150, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0xc, dwReserved0=0x0, dwReserved1=0x0, cFileName="update.status", cAlternateFileName="UPDATE~1.STA")) returned 1 [0077.894] FindNextFileW (in: hFindFile=0x381c40, lpFindFileData=0x31e29c | out: lpFindFileData=0x31e29c*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0077.894] FindClose (in: hFindFile=0x381c40 | out: hFindFile=0x381c40) returned 1 [0077.895] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e524) returned 1 [0077.895] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e530) returned 1 [0077.895] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e564) returned 1 [0077.895] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\updates\\E7CF176E110C211B\\updates\\0", nBufferLength=0x105, lpBuffer=0x31e06c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\updates\\E7CF176E110C211B\\updates\\0", lpFilePart=0x0) returned 0x56 [0077.895] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\updates\\E7CF176E110C211B\\updates\\0\\", nBufferLength=0x105, lpBuffer=0x31e040, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\updates\\E7CF176E110C211B\\updates\\0\\", lpFilePart=0x0) returned 0x57 [0077.895] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\updates\\E7CF176E110C211B\\updates\\0\\*", lpFindFileData=0x31e28c | out: lpFindFileData=0x31e28c*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xb74b7b30, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0x80a2b6d0, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x80a2b6d0, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x381c40 [0077.895] FindNextFileW (in: hFindFile=0x381c40, lpFindFileData=0x31e29c | out: lpFindFileData=0x31e29c*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xb74b7b30, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0x80a2b6d0, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x80a2b6d0, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0077.895] FindNextFileW (in: hFindFile=0x381c40, lpFindFileData=0x31e29c | out: lpFindFileData=0x31e29c*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xb7d7ec50, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xb7d7ec50, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0x818016b0, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x927c0, dwReserved0=0x0, dwReserved1=0x0, cFileName="update.mar", cAlternateFileName="")) returned 1 [0077.895] FindNextFileW (in: hFindFile=0x381c40, lpFindFileData=0x31e29c | out: lpFindFileData=0x31e29c*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x80993150, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x80993150, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x80993150, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0xc, dwReserved0=0x0, dwReserved1=0x0, cFileName="update.status", cAlternateFileName="UPDATE~1.STA")) returned 1 [0077.895] FindNextFileW (in: hFindFile=0x381c40, lpFindFileData=0x31e29c | out: lpFindFileData=0x31e29c*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x80993150, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x80993150, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x80993150, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0xc, dwReserved0=0x0, dwReserved1=0x0, cFileName="update.status", cAlternateFileName="UPDATE~1.STA")) returned 0 [0077.896] FindClose (in: hFindFile=0x381c40 | out: hFindFile=0x381c40) returned 1 [0077.896] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e524) returned 1 [0077.896] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e530) returned 1 [0077.896] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e744) returned 1 [0077.896] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Temp", nBufferLength=0x105, lpBuffer=0x31e24c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Temp", lpFilePart=0x0) returned 0x30 [0077.896] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Temp\\", nBufferLength=0x105, lpBuffer=0x31e220, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Temp\\", lpFilePart=0x0) returned 0x31 [0077.896] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Temp\\*", lpFindFileData=0x31e46c | out: lpFindFileData=0x31e46c*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x28cff640, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0xf2ba8120, ftLastAccessTime.dwHighDateTime=0x1d6eb7e, ftLastWriteTime.dwLowDateTime=0xf2ba8120, ftLastWriteTime.dwHighDateTime=0x1d6eb7e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x381c40 [0077.896] FindNextFileW (in: hFindFile=0x381c40, lpFindFileData=0x31e47c | out: lpFindFileData=0x31e47c*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x28cff640, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0xf2ba8120, ftLastAccessTime.dwHighDateTime=0x1d6eb7e, ftLastWriteTime.dwLowDateTime=0xf2ba8120, ftLastWriteTime.dwHighDateTime=0x1d6eb7e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0077.896] FindNextFileW (in: hFindFile=0x381c40, lpFindFileData=0x31e47c | out: lpFindFileData=0x31e47c*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xf16710a0, ftCreationTime.dwHighDateTime=0x1d5e4fd, ftLastAccessTime.dwLowDateTime=0x47b9b8e0, ftLastAccessTime.dwHighDateTime=0x1d5e517, ftLastWriteTime.dwLowDateTime=0x47b9b8e0, ftLastWriteTime.dwHighDateTime=0x1d5e517, nFileSizeHigh=0x0, nFileSizeLow=0xe5f, dwReserved0=0x0, dwReserved1=0x0, cFileName="-ZDtinHKov_f7AHw P0f.gif", cAlternateFileName="-ZDTIN~1.GIF")) returned 1 [0077.896] FindNextFileW (in: hFindFile=0x381c40, lpFindFileData=0x31e47c | out: lpFindFileData=0x31e47c*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x8249d200, ftCreationTime.dwHighDateTime=0x1d5e027, ftLastAccessTime.dwLowDateTime=0x162e2a30, ftLastAccessTime.dwHighDateTime=0x1d5dc7b, ftLastWriteTime.dwLowDateTime=0x162e2a30, ftLastWriteTime.dwHighDateTime=0x1d5dc7b, nFileSizeHigh=0x0, nFileSizeLow=0x168eb, dwReserved0=0x0, dwReserved1=0x0, cFileName="09CbYQ7VG.swf", cAlternateFileName="09CBYQ~1.SWF")) returned 1 [0077.897] FindNextFileW (in: hFindFile=0x381c40, lpFindFileData=0x31e47c | out: lpFindFileData=0x31e47c*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xff4242b0, ftCreationTime.dwHighDateTime=0x1d5d9dd, ftLastAccessTime.dwLowDateTime=0x7ba92750, ftLastAccessTime.dwHighDateTime=0x1d5e001, ftLastWriteTime.dwLowDateTime=0x7ba92750, ftLastWriteTime.dwHighDateTime=0x1d5e001, nFileSizeHigh=0x0, nFileSizeLow=0x13781, dwReserved0=0x0, dwReserved1=0x0, cFileName="09CLG0a.flv", cAlternateFileName="")) returned 1 [0077.897] FindNextFileW (in: hFindFile=0x381c40, lpFindFileData=0x31e47c | out: lpFindFileData=0x31e47c*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x32baa810, ftCreationTime.dwHighDateTime=0x1d5db39, ftLastAccessTime.dwLowDateTime=0x8f2ce3c0, ftLastAccessTime.dwHighDateTime=0x1d5e763, ftLastWriteTime.dwLowDateTime=0x8f2ce3c0, ftLastWriteTime.dwHighDateTime=0x1d5e763, nFileSizeHigh=0x0, nFileSizeLow=0x6d3c, dwReserved0=0x0, dwReserved1=0x0, cFileName="0glQt3J-nqfaaH.wav", cAlternateFileName="0GLQT3~1.WAV")) returned 1 [0077.897] FindNextFileW (in: hFindFile=0x381c40, lpFindFileData=0x31e47c | out: lpFindFileData=0x31e47c*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x219559c0, ftCreationTime.dwHighDateTime=0x1d5e509, ftLastAccessTime.dwLowDateTime=0x4e27cc40, ftLastAccessTime.dwHighDateTime=0x1d5d7d3, ftLastWriteTime.dwLowDateTime=0x4e27cc40, ftLastWriteTime.dwHighDateTime=0x1d5d7d3, nFileSizeHigh=0x0, nFileSizeLow=0x1cdb, dwReserved0=0x0, dwReserved1=0x0, cFileName="1LXIpFxaqLfxME09f.ots", cAlternateFileName="1LXIPF~1.OTS")) returned 1 [0077.897] FindNextFileW (in: hFindFile=0x381c40, lpFindFileData=0x31e47c | out: lpFindFileData=0x31e47c*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xe2190750, ftCreationTime.dwHighDateTime=0x1d5df4b, ftLastAccessTime.dwLowDateTime=0x2eb50d90, ftLastAccessTime.dwHighDateTime=0x1d5e62a, ftLastWriteTime.dwLowDateTime=0x2eb50d90, ftLastWriteTime.dwHighDateTime=0x1d5e62a, nFileSizeHigh=0x0, nFileSizeLow=0xae3c, dwReserved0=0x0, dwReserved1=0x0, cFileName="1SzAFaI_6MhwTCJk.wav", cAlternateFileName="1SZAFA~1.WAV")) returned 1 [0077.897] FindNextFileW (in: hFindFile=0x381c40, lpFindFileData=0x31e47c | out: lpFindFileData=0x31e47c*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x93df990, ftCreationTime.dwHighDateTime=0x1d5e036, ftLastAccessTime.dwLowDateTime=0x92b556a0, ftLastAccessTime.dwHighDateTime=0x1d5e3d3, ftLastWriteTime.dwLowDateTime=0x92b556a0, ftLastWriteTime.dwHighDateTime=0x1d5e3d3, nFileSizeHigh=0x0, nFileSizeLow=0xd5db, dwReserved0=0x0, dwReserved1=0x0, cFileName="4nWTqQQeN.gif", cAlternateFileName="4NWTQQ~1.GIF")) returned 1 [0077.897] FindNextFileW (in: hFindFile=0x381c40, lpFindFileData=0x31e47c | out: lpFindFileData=0x31e47c*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xb42485b0, ftCreationTime.dwHighDateTime=0x1d5e26e, ftLastAccessTime.dwLowDateTime=0x31dca6e0, ftLastAccessTime.dwHighDateTime=0x1d5e57b, ftLastWriteTime.dwLowDateTime=0x31dca6e0, ftLastWriteTime.dwHighDateTime=0x1d5e57b, nFileSizeHigh=0x0, nFileSizeLow=0xb775, dwReserved0=0x0, dwReserved1=0x0, cFileName="6IPEDb6UQ0J_0pTwAU.ods", cAlternateFileName="6IPEDB~1.ODS")) returned 1 [0077.897] FindNextFileW (in: hFindFile=0x381c40, lpFindFileData=0x31e47c | out: lpFindFileData=0x31e47c*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xf245ef0, ftCreationTime.dwHighDateTime=0x1d5e741, ftLastAccessTime.dwLowDateTime=0xef441360, ftLastAccessTime.dwHighDateTime=0x1d5e6db, ftLastWriteTime.dwLowDateTime=0xef441360, ftLastWriteTime.dwHighDateTime=0x1d5e6db, nFileSizeHigh=0x0, nFileSizeLow=0xcfcc, dwReserved0=0x0, dwReserved1=0x0, cFileName="6yABq137PGtv8c9C.m4a", cAlternateFileName="6YABQ1~1.M4A")) returned 1 [0077.897] FindNextFileW (in: hFindFile=0x381c40, lpFindFileData=0x31e47c | out: lpFindFileData=0x31e47c*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xb8bfb0b0, ftCreationTime.dwHighDateTime=0x1d5e537, ftLastAccessTime.dwLowDateTime=0x5788be80, ftLastAccessTime.dwHighDateTime=0x1d5df43, ftLastWriteTime.dwLowDateTime=0x5788be80, ftLastWriteTime.dwHighDateTime=0x1d5df43, nFileSizeHigh=0x0, nFileSizeLow=0x18540, dwReserved0=0x0, dwReserved1=0x0, cFileName="7bImiLz8j_.doc", cAlternateFileName="7BIMIL~1.DOC")) returned 1 [0077.898] FindNextFileW (in: hFindFile=0x381c40, lpFindFileData=0x31e47c | out: lpFindFileData=0x31e47c*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xf0065200, ftCreationTime.dwHighDateTime=0x1d5e617, ftLastAccessTime.dwLowDateTime=0x112d1d20, ftLastAccessTime.dwHighDateTime=0x1d5dd02, ftLastWriteTime.dwLowDateTime=0x112d1d20, ftLastWriteTime.dwHighDateTime=0x1d5dd02, nFileSizeHigh=0x0, nFileSizeLow=0xb8a0, dwReserved0=0x0, dwReserved1=0x0, cFileName="8cpGFmlxd7k-KSL6RQQR.wav", cAlternateFileName="8CPGFM~1.WAV")) returned 1 [0077.898] FindNextFileW (in: hFindFile=0x381c40, lpFindFileData=0x31e47c | out: lpFindFileData=0x31e47c*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x6a0318e0, ftCreationTime.dwHighDateTime=0x1d5e82a, ftLastAccessTime.dwLowDateTime=0x6a0318e0, ftLastAccessTime.dwHighDateTime=0x1d5e82a, ftLastWriteTime.dwLowDateTime=0xb20126a0, ftLastWriteTime.dwHighDateTime=0x1d5e82a, nFileSizeHigh=0x0, nFileSizeLow=0x5fe, dwReserved0=0x0, dwReserved1=0x0, cFileName="AdobeARM.log", cAlternateFileName="")) returned 1 [0077.898] FindNextFileW (in: hFindFile=0x381c40, lpFindFileData=0x31e47c | out: lpFindFileData=0x31e47c*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x6be9bb00, ftCreationTime.dwHighDateTime=0x1d5e82a, ftLastAccessTime.dwLowDateTime=0x6be9bb00, ftLastAccessTime.dwHighDateTime=0x1d5e82a, ftLastWriteTime.dwLowDateTime=0x6be9bb00, ftLastWriteTime.dwHighDateTime=0x1d5e82a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="bst449D.tmp", cAlternateFileName="")) returned 1 [0077.898] FindNextFileW (in: hFindFile=0x381c40, lpFindFileData=0x31e47c | out: lpFindFileData=0x31e47c*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0xd97d7f40, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0xd97d7f40, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0xd97d7f40, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Cookies", cAlternateFileName="")) returned 1 [0077.898] FindNextFileW (in: hFindFile=0x381c40, lpFindFileData=0x31e47c | out: lpFindFileData=0x31e47c*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x28dbdd20, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x33d9ad10, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x33d9ad10, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="FXSAPIDebugLogFile.txt", cAlternateFileName="FXSAPI~1.TXT")) returned 1 [0077.898] FindNextFileW (in: hFindFile=0x381c40, lpFindFileData=0x31e47c | out: lpFindFileData=0x31e47c*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x4cc95150, ftCreationTime.dwHighDateTime=0x1d5e121, ftLastAccessTime.dwLowDateTime=0xa0cbfe0, ftLastAccessTime.dwHighDateTime=0x1d5e708, ftLastWriteTime.dwLowDateTime=0xa0cbfe0, ftLastWriteTime.dwHighDateTime=0x1d5e708, nFileSizeHigh=0x0, nFileSizeLow=0x2128, dwReserved0=0x0, dwReserved1=0x0, cFileName="GVePyAY.swf", cAlternateFileName="")) returned 1 [0077.898] FindNextFileW (in: hFindFile=0x381c40, lpFindFileData=0x31e47c | out: lpFindFileData=0x31e47c*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xcdc75fc0, ftCreationTime.dwHighDateTime=0x1d5e790, ftLastAccessTime.dwLowDateTime=0x38854870, ftLastAccessTime.dwHighDateTime=0x1d5e01d, ftLastWriteTime.dwLowDateTime=0x38854870, ftLastWriteTime.dwHighDateTime=0x1d5e01d, nFileSizeHigh=0x0, nFileSizeLow=0x188b7, dwReserved0=0x0, dwReserved1=0x0, cFileName="gYCjp2np.gif", cAlternateFileName="")) returned 1 [0077.898] FindNextFileW (in: hFindFile=0x381c40, lpFindFileData=0x31e47c | out: lpFindFileData=0x31e47c*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0xd97fe0a0, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0xd97fe0a0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0xd97fe0a0, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="History", cAlternateFileName="")) returned 1 [0077.899] FindNextFileW (in: hFindFile=0x381c40, lpFindFileData=0x31e47c | out: lpFindFileData=0x31e47c*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x49c83770, ftCreationTime.dwHighDateTime=0x1d5d8eb, ftLastAccessTime.dwLowDateTime=0x21996b40, ftLastAccessTime.dwHighDateTime=0x1d5e091, ftLastWriteTime.dwLowDateTime=0x21996b40, ftLastWriteTime.dwHighDateTime=0x1d5e091, nFileSizeHigh=0x0, nFileSizeLow=0x1615b, dwReserved0=0x0, dwReserved1=0x0, cFileName="i 6HNSXMj-Hh.jpg", cAlternateFileName="I6HNSX~1.JPG")) returned 1 [0077.899] FindNextFileW (in: hFindFile=0x381c40, lpFindFileData=0x31e47c | out: lpFindFileData=0x31e47c*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xd1c0f070, ftCreationTime.dwHighDateTime=0x1d5dd5c, ftLastAccessTime.dwLowDateTime=0x5395fbd0, ftLastAccessTime.dwHighDateTime=0x1d5e2f9, ftLastWriteTime.dwLowDateTime=0x5395fbd0, ftLastWriteTime.dwHighDateTime=0x1d5e2f9, nFileSizeHigh=0x0, nFileSizeLow=0x6d3c, dwReserved0=0x0, dwReserved1=0x0, cFileName="kMXMkFgN55QNJBy.mp3", cAlternateFileName="KMXMKF~1.MP3")) returned 1 [0077.899] FindNextFileW (in: hFindFile=0x381c40, lpFindFileData=0x31e47c | out: lpFindFileData=0x31e47c*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x1cdca070, ftCreationTime.dwHighDateTime=0x1d5dcb5, ftLastAccessTime.dwLowDateTime=0x7324130, ftLastAccessTime.dwHighDateTime=0x1d5da3a, ftLastWriteTime.dwLowDateTime=0x7324130, ftLastWriteTime.dwHighDateTime=0x1d5da3a, nFileSizeHigh=0x0, nFileSizeLow=0x6333, dwReserved0=0x0, dwReserved1=0x0, cFileName="l3sD.bmp", cAlternateFileName="")) returned 1 [0077.899] FindNextFileW (in: hFindFile=0x381c40, lpFindFileData=0x31e47c | out: lpFindFileData=0x31e47c*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x4ba078c0, ftCreationTime.dwHighDateTime=0x1d5e442, ftLastAccessTime.dwLowDateTime=0x749e0bd0, ftLastAccessTime.dwHighDateTime=0x1d5e16c, ftLastWriteTime.dwLowDateTime=0x749e0bd0, ftLastWriteTime.dwHighDateTime=0x1d5e16c, nFileSizeHigh=0x0, nFileSizeLow=0x1cac, dwReserved0=0x0, dwReserved1=0x0, cFileName="o2vVIkNR_K315Avju.wav", cAlternateFileName="O2VVIK~1.WAV")) returned 1 [0077.899] FindNextFileW (in: hFindFile=0x381c40, lpFindFileData=0x31e47c | out: lpFindFileData=0x31e47c*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x1a51cb60, ftCreationTime.dwHighDateTime=0x1d5e34e, ftLastAccessTime.dwLowDateTime=0x213a7e10, ftLastAccessTime.dwHighDateTime=0x1d5e491, ftLastWriteTime.dwLowDateTime=0x213a7e10, ftLastWriteTime.dwHighDateTime=0x1d5e491, nFileSizeHigh=0x0, nFileSizeLow=0x98a2, dwReserved0=0x0, dwReserved1=0x0, cFileName="O82jWSK.odt", cAlternateFileName="")) returned 1 [0077.899] FindNextFileW (in: hFindFile=0x381c40, lpFindFileData=0x31e47c | out: lpFindFileData=0x31e47c*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xe7974610, ftCreationTime.dwHighDateTime=0x1d5d8a2, ftLastAccessTime.dwLowDateTime=0xec1f95e0, ftLastAccessTime.dwHighDateTime=0x1d5d8b9, ftLastWriteTime.dwLowDateTime=0xec1f95e0, ftLastWriteTime.dwHighDateTime=0x1d5d8b9, nFileSizeHigh=0x0, nFileSizeLow=0x5a23, dwReserved0=0x0, dwReserved1=0x0, cFileName="pIeR5hxi-L0fvJq-f.png", cAlternateFileName="PIER5H~1.PNG")) returned 1 [0077.899] FindNextFileW (in: hFindFile=0x381c40, lpFindFileData=0x31e47c | out: lpFindFileData=0x31e47c*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x3be8ddd0, ftCreationTime.dwHighDateTime=0x1d5e2e6, ftLastAccessTime.dwLowDateTime=0x6d53bdd0, ftLastAccessTime.dwHighDateTime=0x1d5e0fd, ftLastWriteTime.dwLowDateTime=0x6d53bdd0, ftLastWriteTime.dwHighDateTime=0x1d5e0fd, nFileSizeHigh=0x0, nFileSizeLow=0x10ea6, dwReserved0=0x0, dwReserved1=0x0, cFileName="qEOG41HiIhNKqg5GtU.swf", cAlternateFileName="QEOG41~1.SWF")) returned 1 [0077.900] FindNextFileW (in: hFindFile=0x381c40, lpFindFileData=0x31e47c | out: lpFindFileData=0x31e47c*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x9de71ec0, ftCreationTime.dwHighDateTime=0x1d5dad0, ftLastAccessTime.dwLowDateTime=0x8e851830, ftLastAccessTime.dwHighDateTime=0x1d5dac4, ftLastWriteTime.dwLowDateTime=0x8e851830, ftLastWriteTime.dwHighDateTime=0x1d5dac4, nFileSizeHigh=0x0, nFileSizeLow=0x4187, dwReserved0=0x0, dwReserved1=0x0, cFileName="Sk-A0b.mp4", cAlternateFileName="")) returned 1 [0077.900] FindNextFileW (in: hFindFile=0x381c40, lpFindFileData=0x31e47c | out: lpFindFileData=0x31e47c*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xcf12f1a0, ftCreationTime.dwHighDateTime=0x1d5e6d7, ftLastAccessTime.dwLowDateTime=0xf8ee6370, ftLastAccessTime.dwHighDateTime=0x1d5e7e4, ftLastWriteTime.dwLowDateTime=0xf8ee6370, ftLastWriteTime.dwHighDateTime=0x1d5e7e4, nFileSizeHigh=0x0, nFileSizeLow=0xa99a, dwReserved0=0x0, dwReserved1=0x0, cFileName="SMvMFj-R.m4a", cAlternateFileName="")) returned 1 [0077.900] FindNextFileW (in: hFindFile=0x381c40, lpFindFileData=0x31e47c | out: lpFindFileData=0x31e47c*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xc8c20a90, ftCreationTime.dwHighDateTime=0x1d5dbae, ftLastAccessTime.dwLowDateTime=0x587bd2c0, ftLastAccessTime.dwHighDateTime=0x1d5e301, ftLastWriteTime.dwLowDateTime=0x587bd2c0, ftLastWriteTime.dwHighDateTime=0x1d5e301, nFileSizeHigh=0x0, nFileSizeLow=0x11a35, dwReserved0=0x0, dwReserved1=0x0, cFileName="T2UbHpRlI.m4a", cAlternateFileName="T2UBHP~1.M4A")) returned 1 [0077.900] FindNextFileW (in: hFindFile=0x381c40, lpFindFileData=0x31e47c | out: lpFindFileData=0x31e47c*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0xd978bc80, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0xd978bc80, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0xd978bc80, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Temporary Internet Files", cAlternateFileName="TEMPOR~1")) returned 1 [0077.900] FindNextFileW (in: hFindFile=0x381c40, lpFindFileData=0x31e47c | out: lpFindFileData=0x31e47c*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xa150b160, ftCreationTime.dwHighDateTime=0x1d5e1e8, ftLastAccessTime.dwLowDateTime=0x227adb0, ftLastAccessTime.dwHighDateTime=0x1d5d891, ftLastWriteTime.dwLowDateTime=0x227adb0, ftLastWriteTime.dwHighDateTime=0x1d5d891, nFileSizeHigh=0x0, nFileSizeLow=0x11bea, dwReserved0=0x0, dwReserved1=0x0, cFileName="U2rQh72Ed.wav", cAlternateFileName="U2RQH7~1.WAV")) returned 1 [0077.900] FindNextFileW (in: hFindFile=0x381c40, lpFindFileData=0x31e47c | out: lpFindFileData=0x31e47c*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xcce89180, ftCreationTime.dwHighDateTime=0x1d5e2fb, ftLastAccessTime.dwLowDateTime=0x656916f0, ftLastAccessTime.dwHighDateTime=0x1d5db45, ftLastWriteTime.dwLowDateTime=0x656916f0, ftLastWriteTime.dwHighDateTime=0x1d5db45, nFileSizeHigh=0x0, nFileSizeLow=0xe0cc, dwReserved0=0x0, dwReserved1=0x0, cFileName="U_5u8egPYWdSB.mp4", cAlternateFileName="U_5U8E~1.MP4")) returned 1 [0077.900] FindNextFileW (in: hFindFile=0x381c40, lpFindFileData=0x31e47c | out: lpFindFileData=0x31e47c*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x76c70440, ftCreationTime.dwHighDateTime=0x1d5dd64, ftLastAccessTime.dwLowDateTime=0xab183e30, ftLastAccessTime.dwHighDateTime=0x1d5d800, ftLastWriteTime.dwLowDateTime=0xab183e30, ftLastWriteTime.dwHighDateTime=0x1d5d800, nFileSizeHigh=0x0, nFileSizeLow=0x1780c, dwReserved0=0x0, dwReserved1=0x0, cFileName="vJ_EmW84sB_-2.xls", cAlternateFileName="VJ_EMW~1.XLS")) returned 1 [0077.900] FindNextFileW (in: hFindFile=0x381c40, lpFindFileData=0x31e47c | out: lpFindFileData=0x31e47c*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xceedf8b0, ftCreationTime.dwHighDateTime=0x1d5e780, ftLastAccessTime.dwLowDateTime=0x4cc2fe30, ftLastAccessTime.dwHighDateTime=0x1d5defc, ftLastWriteTime.dwLowDateTime=0x4cc2fe30, ftLastWriteTime.dwHighDateTime=0x1d5defc, nFileSizeHigh=0x0, nFileSizeLow=0x16961, dwReserved0=0x0, dwReserved1=0x0, cFileName="wHIwIlTNCfjiYQSlR8RJ.gif", cAlternateFileName="WHIWIL~1.GIF")) returned 1 [0077.901] FindNextFileW (in: hFindFile=0x381c40, lpFindFileData=0x31e47c | out: lpFindFileData=0x31e47c*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xb51728d0, ftCreationTime.dwHighDateTime=0x1d5e82a, ftLastAccessTime.dwLowDateTime=0xb51728d0, ftLastAccessTime.dwHighDateTime=0x1d5e82a, ftLastWriteTime.dwLowDateTime=0xb51728d0, ftLastWriteTime.dwHighDateTime=0x1d5e82a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="WPDNSE", cAlternateFileName="")) returned 1 [0077.901] FindNextFileW (in: hFindFile=0x381c40, lpFindFileData=0x31e47c | out: lpFindFileData=0x31e47c*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xe71106b0, ftCreationTime.dwHighDateTime=0x1d5e1c4, ftLastAccessTime.dwLowDateTime=0x2035b130, ftLastAccessTime.dwHighDateTime=0x1d5e0c0, ftLastWriteTime.dwLowDateTime=0x2035b130, ftLastWriteTime.dwHighDateTime=0x1d5e0c0, nFileSizeHigh=0x0, nFileSizeLow=0x75a3, dwReserved0=0x0, dwReserved1=0x0, cFileName="XqQHplV.odp", cAlternateFileName="")) returned 1 [0077.901] FindNextFileW (in: hFindFile=0x381c40, lpFindFileData=0x31e47c | out: lpFindFileData=0x31e47c*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0077.901] FindClose (in: hFindFile=0x381c40 | out: hFindFile=0x381c40) returned 1 [0077.901] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e704) returned 1 [0077.901] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e710) returned 1 [0077.901] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e744) returned 1 [0077.901] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Temp", nBufferLength=0x105, lpBuffer=0x31e24c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Temp", lpFilePart=0x0) returned 0x30 [0077.901] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Temp\\", nBufferLength=0x105, lpBuffer=0x31e220, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Temp\\", lpFilePart=0x0) returned 0x31 [0077.901] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Temp\\*", lpFindFileData=0x31e46c | out: lpFindFileData=0x31e46c*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x28cff640, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0xf2ba8120, ftLastAccessTime.dwHighDateTime=0x1d6eb7e, ftLastWriteTime.dwLowDateTime=0xf2ba8120, ftLastWriteTime.dwHighDateTime=0x1d6eb7e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x381c40 [0077.901] FindNextFileW (in: hFindFile=0x381c40, lpFindFileData=0x31e47c | out: lpFindFileData=0x31e47c*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x28cff640, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0xf2ba8120, ftLastAccessTime.dwHighDateTime=0x1d6eb7e, ftLastWriteTime.dwLowDateTime=0xf2ba8120, ftLastWriteTime.dwHighDateTime=0x1d6eb7e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0077.902] FindNextFileW (in: hFindFile=0x381c40, lpFindFileData=0x31e47c | out: lpFindFileData=0x31e47c*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xf16710a0, ftCreationTime.dwHighDateTime=0x1d5e4fd, ftLastAccessTime.dwLowDateTime=0x47b9b8e0, ftLastAccessTime.dwHighDateTime=0x1d5e517, ftLastWriteTime.dwLowDateTime=0x47b9b8e0, ftLastWriteTime.dwHighDateTime=0x1d5e517, nFileSizeHigh=0x0, nFileSizeLow=0xe5f, dwReserved0=0x0, dwReserved1=0x0, cFileName="-ZDtinHKov_f7AHw P0f.gif", cAlternateFileName="-ZDTIN~1.GIF")) returned 1 [0077.902] FindNextFileW (in: hFindFile=0x381c40, lpFindFileData=0x31e47c | out: lpFindFileData=0x31e47c*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x8249d200, ftCreationTime.dwHighDateTime=0x1d5e027, ftLastAccessTime.dwLowDateTime=0x162e2a30, ftLastAccessTime.dwHighDateTime=0x1d5dc7b, ftLastWriteTime.dwLowDateTime=0x162e2a30, ftLastWriteTime.dwHighDateTime=0x1d5dc7b, nFileSizeHigh=0x0, nFileSizeLow=0x168eb, dwReserved0=0x0, dwReserved1=0x0, cFileName="09CbYQ7VG.swf", cAlternateFileName="09CBYQ~1.SWF")) returned 1 [0077.902] FindNextFileW (in: hFindFile=0x381c40, lpFindFileData=0x31e47c | out: lpFindFileData=0x31e47c*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xff4242b0, ftCreationTime.dwHighDateTime=0x1d5d9dd, ftLastAccessTime.dwLowDateTime=0x7ba92750, ftLastAccessTime.dwHighDateTime=0x1d5e001, ftLastWriteTime.dwLowDateTime=0x7ba92750, ftLastWriteTime.dwHighDateTime=0x1d5e001, nFileSizeHigh=0x0, nFileSizeLow=0x13781, dwReserved0=0x0, dwReserved1=0x0, cFileName="09CLG0a.flv", cAlternateFileName="")) returned 1 [0077.902] FindNextFileW (in: hFindFile=0x381c40, lpFindFileData=0x31e47c | out: lpFindFileData=0x31e47c*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x32baa810, ftCreationTime.dwHighDateTime=0x1d5db39, ftLastAccessTime.dwLowDateTime=0x8f2ce3c0, ftLastAccessTime.dwHighDateTime=0x1d5e763, ftLastWriteTime.dwLowDateTime=0x8f2ce3c0, ftLastWriteTime.dwHighDateTime=0x1d5e763, nFileSizeHigh=0x0, nFileSizeLow=0x6d3c, dwReserved0=0x0, dwReserved1=0x0, cFileName="0glQt3J-nqfaaH.wav", cAlternateFileName="0GLQT3~1.WAV")) returned 1 [0077.902] FindNextFileW (in: hFindFile=0x381c40, lpFindFileData=0x31e47c | out: lpFindFileData=0x31e47c*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x219559c0, ftCreationTime.dwHighDateTime=0x1d5e509, ftLastAccessTime.dwLowDateTime=0x4e27cc40, ftLastAccessTime.dwHighDateTime=0x1d5d7d3, ftLastWriteTime.dwLowDateTime=0x4e27cc40, ftLastWriteTime.dwHighDateTime=0x1d5d7d3, nFileSizeHigh=0x0, nFileSizeLow=0x1cdb, dwReserved0=0x0, dwReserved1=0x0, cFileName="1LXIpFxaqLfxME09f.ots", cAlternateFileName="1LXIPF~1.OTS")) returned 1 [0077.902] FindNextFileW (in: hFindFile=0x381c40, lpFindFileData=0x31e47c | out: lpFindFileData=0x31e47c*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xe2190750, ftCreationTime.dwHighDateTime=0x1d5df4b, ftLastAccessTime.dwLowDateTime=0x2eb50d90, ftLastAccessTime.dwHighDateTime=0x1d5e62a, ftLastWriteTime.dwLowDateTime=0x2eb50d90, ftLastWriteTime.dwHighDateTime=0x1d5e62a, nFileSizeHigh=0x0, nFileSizeLow=0xae3c, dwReserved0=0x0, dwReserved1=0x0, cFileName="1SzAFaI_6MhwTCJk.wav", cAlternateFileName="1SZAFA~1.WAV")) returned 1 [0077.903] FindNextFileW (in: hFindFile=0x381c40, lpFindFileData=0x31e47c | out: lpFindFileData=0x31e47c*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x93df990, ftCreationTime.dwHighDateTime=0x1d5e036, ftLastAccessTime.dwLowDateTime=0x92b556a0, ftLastAccessTime.dwHighDateTime=0x1d5e3d3, ftLastWriteTime.dwLowDateTime=0x92b556a0, ftLastWriteTime.dwHighDateTime=0x1d5e3d3, nFileSizeHigh=0x0, nFileSizeLow=0xd5db, dwReserved0=0x0, dwReserved1=0x0, cFileName="4nWTqQQeN.gif", cAlternateFileName="4NWTQQ~1.GIF")) returned 1 [0077.903] FindNextFileW (in: hFindFile=0x381c40, lpFindFileData=0x31e47c | out: lpFindFileData=0x31e47c*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xb42485b0, ftCreationTime.dwHighDateTime=0x1d5e26e, ftLastAccessTime.dwLowDateTime=0x31dca6e0, ftLastAccessTime.dwHighDateTime=0x1d5e57b, ftLastWriteTime.dwLowDateTime=0x31dca6e0, ftLastWriteTime.dwHighDateTime=0x1d5e57b, nFileSizeHigh=0x0, nFileSizeLow=0xb775, dwReserved0=0x0, dwReserved1=0x0, cFileName="6IPEDb6UQ0J_0pTwAU.ods", cAlternateFileName="6IPEDB~1.ODS")) returned 1 [0077.903] FindNextFileW (in: hFindFile=0x381c40, lpFindFileData=0x31e47c | out: lpFindFileData=0x31e47c*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xf245ef0, ftCreationTime.dwHighDateTime=0x1d5e741, ftLastAccessTime.dwLowDateTime=0xef441360, ftLastAccessTime.dwHighDateTime=0x1d5e6db, ftLastWriteTime.dwLowDateTime=0xef441360, ftLastWriteTime.dwHighDateTime=0x1d5e6db, nFileSizeHigh=0x0, nFileSizeLow=0xcfcc, dwReserved0=0x0, dwReserved1=0x0, cFileName="6yABq137PGtv8c9C.m4a", cAlternateFileName="6YABQ1~1.M4A")) returned 1 [0077.903] FindNextFileW (in: hFindFile=0x381c40, lpFindFileData=0x31e47c | out: lpFindFileData=0x31e47c*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xb8bfb0b0, ftCreationTime.dwHighDateTime=0x1d5e537, ftLastAccessTime.dwLowDateTime=0x5788be80, ftLastAccessTime.dwHighDateTime=0x1d5df43, ftLastWriteTime.dwLowDateTime=0x5788be80, ftLastWriteTime.dwHighDateTime=0x1d5df43, nFileSizeHigh=0x0, nFileSizeLow=0x18540, dwReserved0=0x0, dwReserved1=0x0, cFileName="7bImiLz8j_.doc", cAlternateFileName="7BIMIL~1.DOC")) returned 1 [0077.903] FindNextFileW (in: hFindFile=0x381c40, lpFindFileData=0x31e47c | out: lpFindFileData=0x31e47c*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xf0065200, ftCreationTime.dwHighDateTime=0x1d5e617, ftLastAccessTime.dwLowDateTime=0x112d1d20, ftLastAccessTime.dwHighDateTime=0x1d5dd02, ftLastWriteTime.dwLowDateTime=0x112d1d20, ftLastWriteTime.dwHighDateTime=0x1d5dd02, nFileSizeHigh=0x0, nFileSizeLow=0xb8a0, dwReserved0=0x0, dwReserved1=0x0, cFileName="8cpGFmlxd7k-KSL6RQQR.wav", cAlternateFileName="8CPGFM~1.WAV")) returned 1 [0077.903] FindNextFileW (in: hFindFile=0x381c40, lpFindFileData=0x31e47c | out: lpFindFileData=0x31e47c*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x6a0318e0, ftCreationTime.dwHighDateTime=0x1d5e82a, ftLastAccessTime.dwLowDateTime=0x6a0318e0, ftLastAccessTime.dwHighDateTime=0x1d5e82a, ftLastWriteTime.dwLowDateTime=0xb20126a0, ftLastWriteTime.dwHighDateTime=0x1d5e82a, nFileSizeHigh=0x0, nFileSizeLow=0x5fe, dwReserved0=0x0, dwReserved1=0x0, cFileName="AdobeARM.log", cAlternateFileName="")) returned 1 [0077.904] FindNextFileW (in: hFindFile=0x381c40, lpFindFileData=0x31e47c | out: lpFindFileData=0x31e47c*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x6be9bb00, ftCreationTime.dwHighDateTime=0x1d5e82a, ftLastAccessTime.dwLowDateTime=0x6be9bb00, ftLastAccessTime.dwHighDateTime=0x1d5e82a, ftLastWriteTime.dwLowDateTime=0x6be9bb00, ftLastWriteTime.dwHighDateTime=0x1d5e82a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="bst449D.tmp", cAlternateFileName="")) returned 1 [0077.904] FindNextFileW (in: hFindFile=0x381c40, lpFindFileData=0x31e47c | out: lpFindFileData=0x31e47c*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0xd97d7f40, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0xd97d7f40, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0xd97d7f40, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Cookies", cAlternateFileName="")) returned 1 [0077.904] FindNextFileW (in: hFindFile=0x381c40, lpFindFileData=0x31e47c | out: lpFindFileData=0x31e47c*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x28dbdd20, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x33d9ad10, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x33d9ad10, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="FXSAPIDebugLogFile.txt", cAlternateFileName="FXSAPI~1.TXT")) returned 1 [0077.904] FindNextFileW (in: hFindFile=0x381c40, lpFindFileData=0x31e47c | out: lpFindFileData=0x31e47c*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x4cc95150, ftCreationTime.dwHighDateTime=0x1d5e121, ftLastAccessTime.dwLowDateTime=0xa0cbfe0, ftLastAccessTime.dwHighDateTime=0x1d5e708, ftLastWriteTime.dwLowDateTime=0xa0cbfe0, ftLastWriteTime.dwHighDateTime=0x1d5e708, nFileSizeHigh=0x0, nFileSizeLow=0x2128, dwReserved0=0x0, dwReserved1=0x0, cFileName="GVePyAY.swf", cAlternateFileName="")) returned 1 [0077.904] FindNextFileW (in: hFindFile=0x381c40, lpFindFileData=0x31e47c | out: lpFindFileData=0x31e47c*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xcdc75fc0, ftCreationTime.dwHighDateTime=0x1d5e790, ftLastAccessTime.dwLowDateTime=0x38854870, ftLastAccessTime.dwHighDateTime=0x1d5e01d, ftLastWriteTime.dwLowDateTime=0x38854870, ftLastWriteTime.dwHighDateTime=0x1d5e01d, nFileSizeHigh=0x0, nFileSizeLow=0x188b7, dwReserved0=0x0, dwReserved1=0x0, cFileName="gYCjp2np.gif", cAlternateFileName="")) returned 1 [0077.904] FindNextFileW (in: hFindFile=0x381c40, lpFindFileData=0x31e47c | out: lpFindFileData=0x31e47c*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0xd97fe0a0, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0xd97fe0a0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0xd97fe0a0, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="History", cAlternateFileName="")) returned 1 [0077.904] FindNextFileW (in: hFindFile=0x381c40, lpFindFileData=0x31e47c | out: lpFindFileData=0x31e47c*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x49c83770, ftCreationTime.dwHighDateTime=0x1d5d8eb, ftLastAccessTime.dwLowDateTime=0x21996b40, ftLastAccessTime.dwHighDateTime=0x1d5e091, ftLastWriteTime.dwLowDateTime=0x21996b40, ftLastWriteTime.dwHighDateTime=0x1d5e091, nFileSizeHigh=0x0, nFileSizeLow=0x1615b, dwReserved0=0x0, dwReserved1=0x0, cFileName="i 6HNSXMj-Hh.jpg", cAlternateFileName="I6HNSX~1.JPG")) returned 1 [0077.905] FindNextFileW (in: hFindFile=0x381c40, lpFindFileData=0x31e47c | out: lpFindFileData=0x31e47c*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xd1c0f070, ftCreationTime.dwHighDateTime=0x1d5dd5c, ftLastAccessTime.dwLowDateTime=0x5395fbd0, ftLastAccessTime.dwHighDateTime=0x1d5e2f9, ftLastWriteTime.dwLowDateTime=0x5395fbd0, ftLastWriteTime.dwHighDateTime=0x1d5e2f9, nFileSizeHigh=0x0, nFileSizeLow=0x6d3c, dwReserved0=0x0, dwReserved1=0x0, cFileName="kMXMkFgN55QNJBy.mp3", cAlternateFileName="KMXMKF~1.MP3")) returned 1 [0077.905] FindNextFileW (in: hFindFile=0x381c40, lpFindFileData=0x31e47c | out: lpFindFileData=0x31e47c*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x1cdca070, ftCreationTime.dwHighDateTime=0x1d5dcb5, ftLastAccessTime.dwLowDateTime=0x7324130, ftLastAccessTime.dwHighDateTime=0x1d5da3a, ftLastWriteTime.dwLowDateTime=0x7324130, ftLastWriteTime.dwHighDateTime=0x1d5da3a, nFileSizeHigh=0x0, nFileSizeLow=0x6333, dwReserved0=0x0, dwReserved1=0x0, cFileName="l3sD.bmp", cAlternateFileName="")) returned 1 [0077.905] FindNextFileW (in: hFindFile=0x381c40, lpFindFileData=0x31e47c | out: lpFindFileData=0x31e47c*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x4ba078c0, ftCreationTime.dwHighDateTime=0x1d5e442, ftLastAccessTime.dwLowDateTime=0x749e0bd0, ftLastAccessTime.dwHighDateTime=0x1d5e16c, ftLastWriteTime.dwLowDateTime=0x749e0bd0, ftLastWriteTime.dwHighDateTime=0x1d5e16c, nFileSizeHigh=0x0, nFileSizeLow=0x1cac, dwReserved0=0x0, dwReserved1=0x0, cFileName="o2vVIkNR_K315Avju.wav", cAlternateFileName="O2VVIK~1.WAV")) returned 1 [0077.905] FindNextFileW (in: hFindFile=0x381c40, lpFindFileData=0x31e47c | out: lpFindFileData=0x31e47c*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x1a51cb60, ftCreationTime.dwHighDateTime=0x1d5e34e, ftLastAccessTime.dwLowDateTime=0x213a7e10, ftLastAccessTime.dwHighDateTime=0x1d5e491, ftLastWriteTime.dwLowDateTime=0x213a7e10, ftLastWriteTime.dwHighDateTime=0x1d5e491, nFileSizeHigh=0x0, nFileSizeLow=0x98a2, dwReserved0=0x0, dwReserved1=0x0, cFileName="O82jWSK.odt", cAlternateFileName="")) returned 1 [0077.905] FindNextFileW (in: hFindFile=0x381c40, lpFindFileData=0x31e47c | out: lpFindFileData=0x31e47c*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xe7974610, ftCreationTime.dwHighDateTime=0x1d5d8a2, ftLastAccessTime.dwLowDateTime=0xec1f95e0, ftLastAccessTime.dwHighDateTime=0x1d5d8b9, ftLastWriteTime.dwLowDateTime=0xec1f95e0, ftLastWriteTime.dwHighDateTime=0x1d5d8b9, nFileSizeHigh=0x0, nFileSizeLow=0x5a23, dwReserved0=0x0, dwReserved1=0x0, cFileName="pIeR5hxi-L0fvJq-f.png", cAlternateFileName="PIER5H~1.PNG")) returned 1 [0077.905] FindNextFileW (in: hFindFile=0x381c40, lpFindFileData=0x31e47c | out: lpFindFileData=0x31e47c*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x3be8ddd0, ftCreationTime.dwHighDateTime=0x1d5e2e6, ftLastAccessTime.dwLowDateTime=0x6d53bdd0, ftLastAccessTime.dwHighDateTime=0x1d5e0fd, ftLastWriteTime.dwLowDateTime=0x6d53bdd0, ftLastWriteTime.dwHighDateTime=0x1d5e0fd, nFileSizeHigh=0x0, nFileSizeLow=0x10ea6, dwReserved0=0x0, dwReserved1=0x0, cFileName="qEOG41HiIhNKqg5GtU.swf", cAlternateFileName="QEOG41~1.SWF")) returned 1 [0077.906] FindNextFileW (in: hFindFile=0x381c40, lpFindFileData=0x31e47c | out: lpFindFileData=0x31e47c*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x9de71ec0, ftCreationTime.dwHighDateTime=0x1d5dad0, ftLastAccessTime.dwLowDateTime=0x8e851830, ftLastAccessTime.dwHighDateTime=0x1d5dac4, ftLastWriteTime.dwLowDateTime=0x8e851830, ftLastWriteTime.dwHighDateTime=0x1d5dac4, nFileSizeHigh=0x0, nFileSizeLow=0x4187, dwReserved0=0x0, dwReserved1=0x0, cFileName="Sk-A0b.mp4", cAlternateFileName="")) returned 1 [0077.906] FindNextFileW (in: hFindFile=0x381c40, lpFindFileData=0x31e47c | out: lpFindFileData=0x31e47c*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xcf12f1a0, ftCreationTime.dwHighDateTime=0x1d5e6d7, ftLastAccessTime.dwLowDateTime=0xf8ee6370, ftLastAccessTime.dwHighDateTime=0x1d5e7e4, ftLastWriteTime.dwLowDateTime=0xf8ee6370, ftLastWriteTime.dwHighDateTime=0x1d5e7e4, nFileSizeHigh=0x0, nFileSizeLow=0xa99a, dwReserved0=0x0, dwReserved1=0x0, cFileName="SMvMFj-R.m4a", cAlternateFileName="")) returned 1 [0077.906] FindNextFileW (in: hFindFile=0x381c40, lpFindFileData=0x31e47c | out: lpFindFileData=0x31e47c*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xc8c20a90, ftCreationTime.dwHighDateTime=0x1d5dbae, ftLastAccessTime.dwLowDateTime=0x587bd2c0, ftLastAccessTime.dwHighDateTime=0x1d5e301, ftLastWriteTime.dwLowDateTime=0x587bd2c0, ftLastWriteTime.dwHighDateTime=0x1d5e301, nFileSizeHigh=0x0, nFileSizeLow=0x11a35, dwReserved0=0x0, dwReserved1=0x0, cFileName="T2UbHpRlI.m4a", cAlternateFileName="T2UBHP~1.M4A")) returned 1 [0077.906] FindNextFileW (in: hFindFile=0x381c40, lpFindFileData=0x31e47c | out: lpFindFileData=0x31e47c*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0xd978bc80, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0xd978bc80, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0xd978bc80, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Temporary Internet Files", cAlternateFileName="TEMPOR~1")) returned 1 [0077.906] FindNextFileW (in: hFindFile=0x381c40, lpFindFileData=0x31e47c | out: lpFindFileData=0x31e47c*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xa150b160, ftCreationTime.dwHighDateTime=0x1d5e1e8, ftLastAccessTime.dwLowDateTime=0x227adb0, ftLastAccessTime.dwHighDateTime=0x1d5d891, ftLastWriteTime.dwLowDateTime=0x227adb0, ftLastWriteTime.dwHighDateTime=0x1d5d891, nFileSizeHigh=0x0, nFileSizeLow=0x11bea, dwReserved0=0x0, dwReserved1=0x0, cFileName="U2rQh72Ed.wav", cAlternateFileName="U2RQH7~1.WAV")) returned 1 [0077.907] FindNextFileW (in: hFindFile=0x381c40, lpFindFileData=0x31e47c | out: lpFindFileData=0x31e47c*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xcce89180, ftCreationTime.dwHighDateTime=0x1d5e2fb, ftLastAccessTime.dwLowDateTime=0x656916f0, ftLastAccessTime.dwHighDateTime=0x1d5db45, ftLastWriteTime.dwLowDateTime=0x656916f0, ftLastWriteTime.dwHighDateTime=0x1d5db45, nFileSizeHigh=0x0, nFileSizeLow=0xe0cc, dwReserved0=0x0, dwReserved1=0x0, cFileName="U_5u8egPYWdSB.mp4", cAlternateFileName="U_5U8E~1.MP4")) returned 1 [0077.907] FindNextFileW (in: hFindFile=0x381c40, lpFindFileData=0x31e47c | out: lpFindFileData=0x31e47c*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x76c70440, ftCreationTime.dwHighDateTime=0x1d5dd64, ftLastAccessTime.dwLowDateTime=0xab183e30, ftLastAccessTime.dwHighDateTime=0x1d5d800, ftLastWriteTime.dwLowDateTime=0xab183e30, ftLastWriteTime.dwHighDateTime=0x1d5d800, nFileSizeHigh=0x0, nFileSizeLow=0x1780c, dwReserved0=0x0, dwReserved1=0x0, cFileName="vJ_EmW84sB_-2.xls", cAlternateFileName="VJ_EMW~1.XLS")) returned 1 [0077.907] FindNextFileW (in: hFindFile=0x381c40, lpFindFileData=0x31e47c | out: lpFindFileData=0x31e47c*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xceedf8b0, ftCreationTime.dwHighDateTime=0x1d5e780, ftLastAccessTime.dwLowDateTime=0x4cc2fe30, ftLastAccessTime.dwHighDateTime=0x1d5defc, ftLastWriteTime.dwLowDateTime=0x4cc2fe30, ftLastWriteTime.dwHighDateTime=0x1d5defc, nFileSizeHigh=0x0, nFileSizeLow=0x16961, dwReserved0=0x0, dwReserved1=0x0, cFileName="wHIwIlTNCfjiYQSlR8RJ.gif", cAlternateFileName="WHIWIL~1.GIF")) returned 1 [0077.907] FindNextFileW (in: hFindFile=0x381c40, lpFindFileData=0x31e47c | out: lpFindFileData=0x31e47c*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xb51728d0, ftCreationTime.dwHighDateTime=0x1d5e82a, ftLastAccessTime.dwLowDateTime=0xb51728d0, ftLastAccessTime.dwHighDateTime=0x1d5e82a, ftLastWriteTime.dwLowDateTime=0xb51728d0, ftLastWriteTime.dwHighDateTime=0x1d5e82a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="WPDNSE", cAlternateFileName="")) returned 1 [0077.907] FindNextFileW (in: hFindFile=0x381c40, lpFindFileData=0x31e47c | out: lpFindFileData=0x31e47c*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xe71106b0, ftCreationTime.dwHighDateTime=0x1d5e1c4, ftLastAccessTime.dwLowDateTime=0x2035b130, ftLastAccessTime.dwHighDateTime=0x1d5e0c0, ftLastWriteTime.dwLowDateTime=0x2035b130, ftLastWriteTime.dwHighDateTime=0x1d5e0c0, nFileSizeHigh=0x0, nFileSizeLow=0x75a3, dwReserved0=0x0, dwReserved1=0x0, cFileName="XqQHplV.odp", cAlternateFileName="")) returned 1 [0077.908] FindNextFileW (in: hFindFile=0x381c40, lpFindFileData=0x31e47c | out: lpFindFileData=0x31e47c*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xe71106b0, ftCreationTime.dwHighDateTime=0x1d5e1c4, ftLastAccessTime.dwLowDateTime=0x2035b130, ftLastAccessTime.dwHighDateTime=0x1d5e0c0, ftLastWriteTime.dwLowDateTime=0x2035b130, ftLastWriteTime.dwHighDateTime=0x1d5e0c0, nFileSizeHigh=0x0, nFileSizeLow=0x75a3, dwReserved0=0x0, dwReserved1=0x0, cFileName="XqQHplV.odp", cAlternateFileName="")) returned 0 [0077.908] FindClose (in: hFindFile=0x381c40 | out: hFindFile=0x381c40) returned 1 [0077.908] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e704) returned 1 [0077.908] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e710) returned 1 [0077.908] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Temp\\0glQt3J-nqfaaH.wav", nBufferLength=0x105, lpBuffer=0x31e11c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Temp\\0glQt3J-nqfaaH.wav", lpFilePart=0x0) returned 0x43 [0077.908] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e610) returned 1 [0077.908] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Temp\\0glQt3J-nqfaaH.wav" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\temp\\0glqt3j-nqfaah.wav"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x264 [0077.908] GetFileType (hFile=0x264) returned 0x1 [0077.908] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e60c) returned 1 [0077.908] GetFileType (hFile=0x264) returned 0x1 [0077.908] GetFileSize (in: hFile=0x264, lpFileSizeHigh=0x31e718 | out: lpFileSizeHigh=0x31e718*=0x0) returned 0x6d3c [0077.908] ReadFile (in: hFile=0x264, lpBuffer=0x2651ca8, nNumberOfBytesToRead=0x6d3c, lpNumberOfBytesRead=0x31e6c4, lpOverlapped=0x0 | out: lpBuffer=0x2651ca8*, lpNumberOfBytesRead=0x31e6c4*=0x6d3c, lpOverlapped=0x0) returned 1 [0077.909] CloseHandle (hObject=0x264) returned 1 [0077.924] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Temp\\0glQt3J-nqfaaH.wav", nBufferLength=0x105, lpBuffer=0x31e108, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Temp\\0glQt3J-nqfaaH.wav", lpFilePart=0x0) returned 0x43 [0077.924] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e5fc) returned 1 [0077.924] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Temp\\0glQt3J-nqfaaH.wav" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\temp\\0glqt3j-nqfaah.wav"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x264 [0077.925] GetFileType (hFile=0x264) returned 0x1 [0077.925] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e5f8) returned 1 [0077.925] GetFileType (hFile=0x264) returned 0x1 [0077.926] WriteFile (in: hFile=0x264, lpBuffer=0x26c0e28*, nNumberOfBytesToWrite=0x6d40, lpNumberOfBytesWritten=0x31e6b8, lpOverlapped=0x0 | out: lpBuffer=0x26c0e28*, lpNumberOfBytesWritten=0x31e6b8*=0x6d40, lpOverlapped=0x0) returned 1 [0077.927] CloseHandle (hObject=0x264) returned 1 [0077.927] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Temp\\0glQt3J-nqfaaH.wav", nBufferLength=0x105, lpBuffer=0x31e23c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Temp\\0glQt3J-nqfaaH.wav", lpFilePart=0x0) returned 0x43 [0077.927] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Temp\\0glQt3J-nqfaaH.wav", nBufferLength=0x105, lpBuffer=0x31e23c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Temp\\0glQt3J-nqfaaH.wav", lpFilePart=0x0) returned 0x43 [0077.927] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e69c) returned 1 [0077.927] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Temp\\0glQt3J-nqfaaH.wav" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\temp\\0glqt3j-nqfaah.wav"), fInfoLevelId=0x0, lpFileInformation=0x31e718 | out: lpFileInformation=0x31e718*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x32baa810, ftCreationTime.dwHighDateTime=0x1d5db39, ftLastAccessTime.dwLowDateTime=0x8f2ce3c0, ftLastAccessTime.dwHighDateTime=0x1d5e763, ftLastWriteTime.dwLowDateTime=0x11e497c0, ftLastWriteTime.dwHighDateTime=0x1d6eb7f, nFileSizeHigh=0x0, nFileSizeLow=0x6d40)) returned 1 [0077.928] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e698) returned 1 [0077.928] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Temp\\0glQt3J-nqfaaH.wav" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\temp\\0glqt3j-nqfaah.wav"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Temp\\0glQt3J-nqfaaH.wav" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\temp\\0glqt3j-nqfaah.wav")) returned 1 [0077.928] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Temp\\1SzAFaI_6MhwTCJk.wav", nBufferLength=0x105, lpBuffer=0x31e11c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Temp\\1SzAFaI_6MhwTCJk.wav", lpFilePart=0x0) returned 0x45 [0077.928] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e610) returned 1 [0077.928] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Temp\\1SzAFaI_6MhwTCJk.wav" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\temp\\1szafai_6mhwtcjk.wav"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x264 [0077.928] GetFileType (hFile=0x264) returned 0x1 [0077.928] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e60c) returned 1 [0077.928] GetFileType (hFile=0x264) returned 0x1 [0077.928] GetFileSize (in: hFile=0x264, lpFileSizeHigh=0x31e718 | out: lpFileSizeHigh=0x31e718*=0x0) returned 0xae3c [0077.929] ReadFile (in: hFile=0x264, lpBuffer=0x26c7f1c, nNumberOfBytesToRead=0xae3c, lpNumberOfBytesRead=0x31e6c4, lpOverlapped=0x0 | out: lpBuffer=0x26c7f1c*, lpNumberOfBytesRead=0x31e6c4*=0xae3c, lpOverlapped=0x0) returned 1 [0077.930] CloseHandle (hObject=0x264) returned 1 [0077.945] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Temp\\1SzAFaI_6MhwTCJk.wav", nBufferLength=0x105, lpBuffer=0x31e108, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Temp\\1SzAFaI_6MhwTCJk.wav", lpFilePart=0x0) returned 0x45 [0077.945] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e5fc) returned 1 [0077.945] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Temp\\1SzAFaI_6MhwTCJk.wav" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\temp\\1szafai_6mhwtcjk.wav"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x264 [0077.946] GetFileType (hFile=0x264) returned 0x1 [0077.946] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e5f8) returned 1 [0077.946] GetFileType (hFile=0x264) returned 0x1 [0077.946] WriteFile (in: hFile=0x264, lpBuffer=0x27357d4*, nNumberOfBytesToWrite=0xae40, lpNumberOfBytesWritten=0x31e6b8, lpOverlapped=0x0 | out: lpBuffer=0x27357d4*, lpNumberOfBytesWritten=0x31e6b8*=0xae40, lpOverlapped=0x0) returned 1 [0077.947] CloseHandle (hObject=0x264) returned 1 [0077.947] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Temp\\1SzAFaI_6MhwTCJk.wav", nBufferLength=0x105, lpBuffer=0x31e23c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Temp\\1SzAFaI_6MhwTCJk.wav", lpFilePart=0x0) returned 0x45 [0077.948] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Temp\\1SzAFaI_6MhwTCJk.wav", nBufferLength=0x105, lpBuffer=0x31e23c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Temp\\1SzAFaI_6MhwTCJk.wav", lpFilePart=0x0) returned 0x45 [0077.948] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e69c) returned 1 [0077.948] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Temp\\1SzAFaI_6MhwTCJk.wav" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\temp\\1szafai_6mhwtcjk.wav"), fInfoLevelId=0x0, lpFileInformation=0x31e718 | out: lpFileInformation=0x31e718*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xe2190750, ftCreationTime.dwHighDateTime=0x1d5df4b, ftLastAccessTime.dwLowDateTime=0x2eb50d90, ftLastAccessTime.dwHighDateTime=0x1d5e62a, ftLastWriteTime.dwLowDateTime=0x11e6f920, ftLastWriteTime.dwHighDateTime=0x1d6eb7f, nFileSizeHigh=0x0, nFileSizeLow=0xae40)) returned 1 [0077.948] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e698) returned 1 [0077.948] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Temp\\1SzAFaI_6MhwTCJk.wav" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\temp\\1szafai_6mhwtcjk.wav"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Temp\\1SzAFaI_6MhwTCJk.wav" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\temp\\1szafai_6mhwtcjk.wav")) returned 1 [0077.948] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Temp\\7bImiLz8j_.doc", nBufferLength=0x105, lpBuffer=0x31e11c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Temp\\7bImiLz8j_.doc", lpFilePart=0x0) returned 0x3f [0077.948] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e610) returned 1 [0077.948] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Temp\\7bImiLz8j_.doc" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\temp\\7bimilz8j_.doc"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x264 [0077.948] GetFileType (hFile=0x264) returned 0x1 [0077.949] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e60c) returned 1 [0077.949] GetFileType (hFile=0x264) returned 0x1 [0077.949] GetFileSize (in: hFile=0x264, lpFileSizeHigh=0x31e718 | out: lpFileSizeHigh=0x31e718*=0x0) returned 0x18540 [0077.949] ReadFile (in: hFile=0x264, lpBuffer=0x3791610, nNumberOfBytesToRead=0x18540, lpNumberOfBytesRead=0x31e6c4, lpOverlapped=0x0 | out: lpBuffer=0x3791610*, lpNumberOfBytesRead=0x31e6c4*=0x18540, lpOverlapped=0x0) returned 1 [0077.950] CloseHandle (hObject=0x264) returned 1 [0077.966] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Temp\\7bImiLz8j_.doc", nBufferLength=0x105, lpBuffer=0x31e108, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Temp\\7bImiLz8j_.doc", lpFilePart=0x0) returned 0x3f [0077.966] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e5fc) returned 1 [0077.966] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Temp\\7bImiLz8j_.doc" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\temp\\7bimilz8j_.doc"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x264 [0077.968] GetFileType (hFile=0x264) returned 0x1 [0077.968] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e5f8) returned 1 [0077.968] GetFileType (hFile=0x264) returned 0x1 [0077.968] WriteFile (in: hFile=0x264, lpBuffer=0x3845148*, nNumberOfBytesToWrite=0x18550, lpNumberOfBytesWritten=0x31e6b8, lpOverlapped=0x0 | out: lpBuffer=0x3845148*, lpNumberOfBytesWritten=0x31e6b8*=0x18550, lpOverlapped=0x0) returned 1 [0077.979] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Temp\\7bImiLz8j_.doc", nBufferLength=0x105, lpBuffer=0x31e23c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Temp\\7bImiLz8j_.doc", lpFilePart=0x0) returned 0x3f [0077.979] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Temp\\7bImiLz8j_.doc", nBufferLength=0x105, lpBuffer=0x31e23c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Temp\\7bImiLz8j_.doc", lpFilePart=0x0) returned 0x3f [0077.979] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e69c) returned 1 [0077.979] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Temp\\7bImiLz8j_.doc" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\temp\\7bimilz8j_.doc"), fInfoLevelId=0x0, lpFileInformation=0x31e718 | out: lpFileInformation=0x31e718*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xb8bfb0b0, ftCreationTime.dwHighDateTime=0x1d5e537, ftLastAccessTime.dwLowDateTime=0x5788be80, ftLastAccessTime.dwHighDateTime=0x1d5df43, ftLastWriteTime.dwLowDateTime=0x11ebbbe0, ftLastWriteTime.dwHighDateTime=0x1d6eb7f, nFileSizeHigh=0x0, nFileSizeLow=0x18550)) returned 1 [0077.979] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e698) returned 1 [0077.979] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Temp\\7bImiLz8j_.doc" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\temp\\7bimilz8j_.doc"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Temp\\7bImiLz8j_.doc" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\temp\\7bimilz8j_.doc")) returned 1 [0077.980] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Temp\\8cpGFmlxd7k-KSL6RQQR.wav", nBufferLength=0x105, lpBuffer=0x31e11c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Temp\\8cpGFmlxd7k-KSL6RQQR.wav", lpFilePart=0x0) returned 0x49 [0077.980] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e610) returned 1 [0077.980] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Temp\\8cpGFmlxd7k-KSL6RQQR.wav" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\temp\\8cpgfmlxd7k-ksl6rqqr.wav"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x264 [0077.980] GetFileType (hFile=0x264) returned 0x1 [0077.980] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e60c) returned 1 [0077.980] GetFileType (hFile=0x264) returned 0x1 [0077.980] GetFileSize (in: hFile=0x264, lpFileSizeHigh=0x31e718 | out: lpFileSizeHigh=0x31e718*=0x0) returned 0xb8a0 [0077.980] ReadFile (in: hFile=0x264, lpBuffer=0x278db74, nNumberOfBytesToRead=0xb8a0, lpNumberOfBytesRead=0x31e6c4, lpOverlapped=0x0 | out: lpBuffer=0x278db74*, lpNumberOfBytesRead=0x31e6c4*=0xb8a0, lpOverlapped=0x0) returned 1 [0077.996] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Temp\\8cpGFmlxd7k-KSL6RQQR.wav", nBufferLength=0x105, lpBuffer=0x31e108, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Temp\\8cpGFmlxd7k-KSL6RQQR.wav", lpFilePart=0x0) returned 0x49 [0077.996] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e5fc) returned 1 [0077.996] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Temp\\8cpGFmlxd7k-KSL6RQQR.wav" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\temp\\8cpgfmlxd7k-ksl6rqqr.wav"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x264 [0077.997] GetFileType (hFile=0x264) returned 0x1 [0077.997] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e5f8) returned 1 [0077.998] GetFileType (hFile=0x264) returned 0x1 [0077.998] WriteFile (in: hFile=0x264, lpBuffer=0x27fd37c*, nNumberOfBytesToWrite=0xb8b0, lpNumberOfBytesWritten=0x31e6b8, lpOverlapped=0x0 | out: lpBuffer=0x27fd37c*, lpNumberOfBytesWritten=0x31e6b8*=0xb8b0, lpOverlapped=0x0) returned 1 [0077.999] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Temp\\8cpGFmlxd7k-KSL6RQQR.wav", nBufferLength=0x105, lpBuffer=0x31e23c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Temp\\8cpGFmlxd7k-KSL6RQQR.wav", lpFilePart=0x0) returned 0x49 [0077.999] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Temp\\8cpGFmlxd7k-KSL6RQQR.wav", nBufferLength=0x105, lpBuffer=0x31e23c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Temp\\8cpGFmlxd7k-KSL6RQQR.wav", lpFilePart=0x0) returned 0x49 [0077.999] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e69c) returned 1 [0077.999] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Temp\\8cpGFmlxd7k-KSL6RQQR.wav" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\temp\\8cpgfmlxd7k-ksl6rqqr.wav"), fInfoLevelId=0x0, lpFileInformation=0x31e718 | out: lpFileInformation=0x31e718*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xf0065200, ftCreationTime.dwHighDateTime=0x1d5e617, ftLastAccessTime.dwLowDateTime=0x112d1d20, ftLastAccessTime.dwHighDateTime=0x1d5dd02, ftLastWriteTime.dwLowDateTime=0x11ee1d40, ftLastWriteTime.dwHighDateTime=0x1d6eb7f, nFileSizeHigh=0x0, nFileSizeLow=0xb8b0)) returned 1 [0077.999] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e698) returned 1 [0077.999] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Temp\\8cpGFmlxd7k-KSL6RQQR.wav" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\temp\\8cpgfmlxd7k-ksl6rqqr.wav"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Temp\\8cpGFmlxd7k-KSL6RQQR.wav" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\temp\\8cpgfmlxd7k-ksl6rqqr.wav")) returned 1 [0078.000] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Temp\\FXSAPIDebugLogFile.txt", nBufferLength=0x105, lpBuffer=0x31e11c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Temp\\FXSAPIDebugLogFile.txt", lpFilePart=0x0) returned 0x47 [0078.000] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e610) returned 1 [0078.000] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Temp\\FXSAPIDebugLogFile.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\temp\\fxsapidebuglogfile.txt"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0xffffffff [0078.004] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31d448) returned 1 [0078.004] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e744) returned 1 [0078.004] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Temporary Internet Files", nBufferLength=0x105, lpBuffer=0x31e24c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Temporary Internet Files", lpFilePart=0x0) returned 0x44 [0078.004] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Temporary Internet Files\\", nBufferLength=0x105, lpBuffer=0x31e220, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Temporary Internet Files\\", lpFilePart=0x0) returned 0x45 [0078.004] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Temporary Internet Files\\*", lpFindFileData=0x31e46c | out: lpFindFileData=0x31e46c*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0078.004] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e708) returned 1 [0078.006] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e744) returned 1 [0078.006] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\VirtualStore", nBufferLength=0x105, lpBuffer=0x31e24c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\VirtualStore", lpFilePart=0x0) returned 0x38 [0078.006] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\VirtualStore\\", nBufferLength=0x105, lpBuffer=0x31e220, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\VirtualStore\\", lpFilePart=0x0) returned 0x39 [0078.006] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\VirtualStore\\*", lpFindFileData=0x31e46c | out: lpFindFileData=0x31e46c*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x2ab32d60, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x2ab32d60, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x2ab32d60, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x381e80 [0078.006] FindNextFileW (in: hFindFile=0x381e80, lpFindFileData=0x31e47c | out: lpFindFileData=0x31e47c*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x2ab32d60, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x2ab32d60, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x2ab32d60, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0078.006] FindNextFileW (in: hFindFile=0x381e80, lpFindFileData=0x31e47c | out: lpFindFileData=0x31e47c*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x2ab32d60, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x2ab32d60, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x2ab32d60, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 0 [0078.006] FindClose (in: hFindFile=0x381e80 | out: hFindFile=0x381e80) returned 1 [0078.007] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e704) returned 1 [0078.007] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e710) returned 1 [0078.007] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e744) returned 1 [0078.007] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\VirtualStore", nBufferLength=0x105, lpBuffer=0x31e24c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\VirtualStore", lpFilePart=0x0) returned 0x38 [0078.007] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\VirtualStore\\", nBufferLength=0x105, lpBuffer=0x31e220, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\VirtualStore\\", lpFilePart=0x0) returned 0x39 [0078.007] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\VirtualStore\\*", lpFindFileData=0x31e46c | out: lpFindFileData=0x31e46c*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x2ab32d60, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x2ab32d60, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x2ab32d60, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x381e80 [0078.007] FindNextFileW (in: hFindFile=0x381e80, lpFindFileData=0x31e47c | out: lpFindFileData=0x31e47c*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x2ab32d60, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x2ab32d60, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x2ab32d60, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0078.007] FindNextFileW (in: hFindFile=0x381e80, lpFindFileData=0x31e47c | out: lpFindFileData=0x31e47c*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x2ab32d60, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x2ab32d60, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x2ab32d60, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 0 [0078.007] FindClose (in: hFindFile=0x381e80 | out: hFindFile=0x381e80) returned 1 [0078.007] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e704) returned 1 [0078.007] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e710) returned 1 [0078.007] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e7bc) returned 1 [0078.007] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow", nBufferLength=0x105, lpBuffer=0x31e2c4, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow", lpFilePart=0x0) returned 0x2e [0078.007] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\", nBufferLength=0x105, lpBuffer=0x31e298, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\", lpFilePart=0x0) returned 0x2f [0078.008] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\*", lpFindFileData=0x31e4e4 | out: lpFindFileData=0x31e4e4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x28cff640, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x68cb4a40, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x68cb4a40, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x381e80 [0078.008] FindNextFileW (in: hFindFile=0x381e80, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x28cff640, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x68cb4a40, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x68cb4a40, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0078.008] FindNextFileW (in: hFindFile=0x381e80, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xcd6e27e0, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0xcd708940, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0xcd708940, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Adobe", cAlternateFileName="")) returned 1 [0078.008] FindNextFileW (in: hFindFile=0x381e80, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x2014, ftCreationTime.dwLowDateTime=0x28cff640, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0xcd708940, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0xcd708940, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft", cAlternateFileName="MICROS~1")) returned 1 [0078.008] FindNextFileW (in: hFindFile=0x381e80, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x68cb4a40, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x68cb4a40, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x68cb4a40, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Sun", cAlternateFileName="")) returned 1 [0078.008] FindNextFileW (in: hFindFile=0x381e80, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x68cb4a40, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x68cb4a40, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x68cb4a40, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Sun", cAlternateFileName="")) returned 0 [0078.008] FindClose (in: hFindFile=0x381e80 | out: hFindFile=0x381e80) returned 1 [0078.009] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e77c) returned 1 [0078.009] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e788) returned 1 [0078.009] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e7bc) returned 1 [0078.009] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow", nBufferLength=0x105, lpBuffer=0x31e2c4, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow", lpFilePart=0x0) returned 0x2e [0078.009] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\", nBufferLength=0x105, lpBuffer=0x31e298, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\", lpFilePart=0x0) returned 0x2f [0078.009] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\*", lpFindFileData=0x31e4e4 | out: lpFindFileData=0x31e4e4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x28cff640, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x68cb4a40, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x68cb4a40, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x381e80 [0078.009] FindNextFileW (in: hFindFile=0x381e80, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x28cff640, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x68cb4a40, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x68cb4a40, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0078.009] FindNextFileW (in: hFindFile=0x381e80, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xcd6e27e0, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0xcd708940, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0xcd708940, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Adobe", cAlternateFileName="")) returned 1 [0078.009] FindNextFileW (in: hFindFile=0x381e80, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x2014, ftCreationTime.dwLowDateTime=0x28cff640, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0xcd708940, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0xcd708940, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft", cAlternateFileName="MICROS~1")) returned 1 [0078.009] FindNextFileW (in: hFindFile=0x381e80, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x68cb4a40, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x68cb4a40, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x68cb4a40, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Sun", cAlternateFileName="")) returned 1 [0078.009] FindNextFileW (in: hFindFile=0x381e80, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0078.010] FindClose (in: hFindFile=0x381e80 | out: hFindFile=0x381e80) returned 1 [0078.010] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e77c) returned 1 [0078.010] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e788) returned 1 [0078.010] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e744) returned 1 [0078.010] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Adobe", nBufferLength=0x105, lpBuffer=0x31e24c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Adobe", lpFilePart=0x0) returned 0x34 [0078.010] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Adobe\\", nBufferLength=0x105, lpBuffer=0x31e220, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Adobe\\", lpFilePart=0x0) returned 0x35 [0078.010] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Adobe\\*", lpFindFileData=0x31e46c | out: lpFindFileData=0x31e46c*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xcd6e27e0, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0xcd708940, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0xcd708940, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x381e80 [0078.011] FindNextFileW (in: hFindFile=0x381e80, lpFindFileData=0x31e47c | out: lpFindFileData=0x31e47c*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xcd6e27e0, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0xcd708940, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0xcd708940, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0078.011] FindNextFileW (in: hFindFile=0x381e80, lpFindFileData=0x31e47c | out: lpFindFileData=0x31e47c*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xcd6e27e0, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0xcd6e27e0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0xcd6e27e0, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Acrobat", cAlternateFileName="")) returned 1 [0078.011] FindNextFileW (in: hFindFile=0x381e80, lpFindFileData=0x31e47c | out: lpFindFileData=0x31e47c*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xcd708940, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0xcd708940, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0xcd708940, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Linguistics", cAlternateFileName="LINGUI~1")) returned 1 [0078.011] FindNextFileW (in: hFindFile=0x381e80, lpFindFileData=0x31e47c | out: lpFindFileData=0x31e47c*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xcd708940, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0xcd708940, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0xcd708940, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Linguistics", cAlternateFileName="LINGUI~1")) returned 0 [0078.011] FindClose (in: hFindFile=0x381e80 | out: hFindFile=0x381e80) returned 1 [0078.011] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e704) returned 1 [0078.011] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e710) returned 1 [0078.012] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e744) returned 1 [0078.012] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Adobe", nBufferLength=0x105, lpBuffer=0x31e24c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Adobe", lpFilePart=0x0) returned 0x34 [0078.012] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Adobe\\", nBufferLength=0x105, lpBuffer=0x31e220, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Adobe\\", lpFilePart=0x0) returned 0x35 [0078.012] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Adobe\\*", lpFindFileData=0x31e46c | out: lpFindFileData=0x31e46c*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xcd6e27e0, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0xcd708940, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0xcd708940, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x381e80 [0078.012] FindNextFileW (in: hFindFile=0x381e80, lpFindFileData=0x31e47c | out: lpFindFileData=0x31e47c*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xcd6e27e0, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0xcd708940, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0xcd708940, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0078.012] FindNextFileW (in: hFindFile=0x381e80, lpFindFileData=0x31e47c | out: lpFindFileData=0x31e47c*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xcd6e27e0, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0xcd6e27e0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0xcd6e27e0, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Acrobat", cAlternateFileName="")) returned 1 [0078.012] FindNextFileW (in: hFindFile=0x381e80, lpFindFileData=0x31e47c | out: lpFindFileData=0x31e47c*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xcd708940, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0xcd708940, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0xcd708940, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Linguistics", cAlternateFileName="LINGUI~1")) returned 1 [0078.012] FindNextFileW (in: hFindFile=0x381e80, lpFindFileData=0x31e47c | out: lpFindFileData=0x31e47c*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0078.012] FindClose (in: hFindFile=0x381e80 | out: hFindFile=0x381e80) returned 1 [0078.012] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e704) returned 1 [0078.012] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e710) returned 1 [0078.013] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e6cc) returned 1 [0078.013] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Adobe\\Acrobat", nBufferLength=0x105, lpBuffer=0x31e1d4, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Adobe\\Acrobat", lpFilePart=0x0) returned 0x3c [0078.013] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Adobe\\Acrobat\\", nBufferLength=0x105, lpBuffer=0x31e1a8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Adobe\\Acrobat\\", lpFilePart=0x0) returned 0x3d [0078.013] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Adobe\\Acrobat\\*", lpFindFileData=0x31e3f4 | out: lpFindFileData=0x31e3f4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xcd6e27e0, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0xcd6e27e0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0xcd6e27e0, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x381e80 [0078.013] FindNextFileW (in: hFindFile=0x381e80, lpFindFileData=0x31e404 | out: lpFindFileData=0x31e404*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xcd6e27e0, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0xcd6e27e0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0xcd6e27e0, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0078.013] FindNextFileW (in: hFindFile=0x381e80, lpFindFileData=0x31e404 | out: lpFindFileData=0x31e404*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xcd6e27e0, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0xe5b04330, ftLastAccessTime.dwHighDateTime=0x1d35d05, ftLastWriteTime.dwLowDateTime=0xe5b04330, ftLastWriteTime.dwHighDateTime=0x1d35d05, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="10.0", cAlternateFileName="")) returned 1 [0078.013] FindNextFileW (in: hFindFile=0x381e80, lpFindFileData=0x31e404 | out: lpFindFileData=0x31e404*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xcd6e27e0, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0xe5b04330, ftLastAccessTime.dwHighDateTime=0x1d35d05, ftLastWriteTime.dwLowDateTime=0xe5b04330, ftLastWriteTime.dwHighDateTime=0x1d35d05, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="10.0", cAlternateFileName="")) returned 0 [0078.013] FindClose (in: hFindFile=0x381e80 | out: hFindFile=0x381e80) returned 1 [0078.013] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e68c) returned 1 [0078.013] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e698) returned 1 [0078.014] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e6cc) returned 1 [0078.014] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Adobe\\Acrobat", nBufferLength=0x105, lpBuffer=0x31e1d4, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Adobe\\Acrobat", lpFilePart=0x0) returned 0x3c [0078.014] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Adobe\\Acrobat\\", nBufferLength=0x105, lpBuffer=0x31e1a8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Adobe\\Acrobat\\", lpFilePart=0x0) returned 0x3d [0078.014] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Adobe\\Acrobat\\*", lpFindFileData=0x31e3f4 | out: lpFindFileData=0x31e3f4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xcd6e27e0, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0xcd6e27e0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0xcd6e27e0, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x381e80 [0078.014] FindNextFileW (in: hFindFile=0x381e80, lpFindFileData=0x31e404 | out: lpFindFileData=0x31e404*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xcd6e27e0, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0xcd6e27e0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0xcd6e27e0, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0078.014] FindNextFileW (in: hFindFile=0x381e80, lpFindFileData=0x31e404 | out: lpFindFileData=0x31e404*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xcd6e27e0, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0xe5b04330, ftLastAccessTime.dwHighDateTime=0x1d35d05, ftLastWriteTime.dwLowDateTime=0xe5b04330, ftLastWriteTime.dwHighDateTime=0x1d35d05, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="10.0", cAlternateFileName="")) returned 1 [0078.014] FindNextFileW (in: hFindFile=0x381e80, lpFindFileData=0x31e404 | out: lpFindFileData=0x31e404*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0078.014] FindClose (in: hFindFile=0x381e80 | out: hFindFile=0x381e80) returned 1 [0078.014] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e68c) returned 1 [0078.014] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e698) returned 1 [0078.014] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e654) returned 1 [0078.015] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Adobe\\Acrobat\\10.0", nBufferLength=0x105, lpBuffer=0x31e15c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Adobe\\Acrobat\\10.0", lpFilePart=0x0) returned 0x41 [0078.015] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Adobe\\Acrobat\\10.0\\", nBufferLength=0x105, lpBuffer=0x31e130, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Adobe\\Acrobat\\10.0\\", lpFilePart=0x0) returned 0x42 [0078.015] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Adobe\\Acrobat\\10.0\\*", lpFindFileData=0x31e37c | out: lpFindFileData=0x31e37c*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xcd6e27e0, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0xe5b04330, ftLastAccessTime.dwHighDateTime=0x1d35d05, ftLastWriteTime.dwLowDateTime=0xe5b04330, ftLastWriteTime.dwHighDateTime=0x1d35d05, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x381e80 [0078.016] FindNextFileW (in: hFindFile=0x381e80, lpFindFileData=0x31e38c | out: lpFindFileData=0x31e38c*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xcd6e27e0, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0xe5b04330, ftLastAccessTime.dwHighDateTime=0x1d35d05, ftLastWriteTime.dwLowDateTime=0xe5b04330, ftLastWriteTime.dwHighDateTime=0x1d35d05, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0078.017] FindNextFileW (in: hFindFile=0x381e80, lpFindFileData=0x31e38c | out: lpFindFileData=0x31e38c*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xd9b6a040, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0xd9b6a040, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0xde963ca0, ftLastWriteTime.dwHighDateTime=0x1d2e625, nFileSizeHigh=0x0, nFileSizeLow=0xa5ff, dwReserved0=0x0, dwReserved1=0x0, cFileName="rdrmessage.zip", cAlternateFileName="RDRMES~1.ZIP")) returned 1 [0078.017] FindNextFileW (in: hFindFile=0x381e80, lpFindFileData=0x31e38c | out: lpFindFileData=0x31e38c*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xce824760, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0xce824760, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0xe5ab8070, ftLastWriteTime.dwHighDateTime=0x1d35d05, nFileSizeHigh=0x0, nFileSizeLow=0x2000, dwReserved0=0x0, dwReserved1=0x0, cFileName="ReaderMessages", cAlternateFileName="READER~1")) returned 1 [0078.017] FindNextFileW (in: hFindFile=0x381e80, lpFindFileData=0x31e38c | out: lpFindFileData=0x31e38c*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe8287550, ftCreationTime.dwHighDateTime=0x1d2ddf4, ftLastAccessTime.dwLowDateTime=0xe8287550, ftLastAccessTime.dwHighDateTime=0x1d2ddf4, ftLastWriteTime.dwLowDateTime=0xe8287550, ftLastWriteTime.dwHighDateTime=0x1d2ddf4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Search", cAlternateFileName="")) returned 1 [0078.017] FindNextFileW (in: hFindFile=0x381e80, lpFindFileData=0x31e38c | out: lpFindFileData=0x31e38c*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe8287550, ftCreationTime.dwHighDateTime=0x1d2ddf4, ftLastAccessTime.dwLowDateTime=0xe8287550, ftLastAccessTime.dwHighDateTime=0x1d2ddf4, ftLastWriteTime.dwLowDateTime=0xe8287550, ftLastWriteTime.dwHighDateTime=0x1d2ddf4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Search", cAlternateFileName="")) returned 0 [0078.017] FindClose (in: hFindFile=0x381e80 | out: hFindFile=0x381e80) returned 1 [0078.018] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e614) returned 1 [0078.018] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e620) returned 1 [0078.018] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e654) returned 1 [0078.018] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Adobe\\Acrobat\\10.0", nBufferLength=0x105, lpBuffer=0x31e15c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Adobe\\Acrobat\\10.0", lpFilePart=0x0) returned 0x41 [0078.018] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Adobe\\Acrobat\\10.0\\", nBufferLength=0x105, lpBuffer=0x31e130, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Adobe\\Acrobat\\10.0\\", lpFilePart=0x0) returned 0x42 [0078.018] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Adobe\\Acrobat\\10.0\\*", lpFindFileData=0x31e37c | out: lpFindFileData=0x31e37c*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xcd6e27e0, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0xe5b04330, ftLastAccessTime.dwHighDateTime=0x1d35d05, ftLastWriteTime.dwLowDateTime=0xe5b04330, ftLastWriteTime.dwHighDateTime=0x1d35d05, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x381e80 [0078.019] FindNextFileW (in: hFindFile=0x381e80, lpFindFileData=0x31e38c | out: lpFindFileData=0x31e38c*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xcd6e27e0, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0xe5b04330, ftLastAccessTime.dwHighDateTime=0x1d35d05, ftLastWriteTime.dwLowDateTime=0xe5b04330, ftLastWriteTime.dwHighDateTime=0x1d35d05, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0078.019] FindNextFileW (in: hFindFile=0x381e80, lpFindFileData=0x31e38c | out: lpFindFileData=0x31e38c*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xd9b6a040, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0xd9b6a040, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0xde963ca0, ftLastWriteTime.dwHighDateTime=0x1d2e625, nFileSizeHigh=0x0, nFileSizeLow=0xa5ff, dwReserved0=0x0, dwReserved1=0x0, cFileName="rdrmessage.zip", cAlternateFileName="RDRMES~1.ZIP")) returned 1 [0078.019] FindNextFileW (in: hFindFile=0x381e80, lpFindFileData=0x31e38c | out: lpFindFileData=0x31e38c*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xce824760, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0xce824760, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0xe5ab8070, ftLastWriteTime.dwHighDateTime=0x1d35d05, nFileSizeHigh=0x0, nFileSizeLow=0x2000, dwReserved0=0x0, dwReserved1=0x0, cFileName="ReaderMessages", cAlternateFileName="READER~1")) returned 1 [0078.019] FindNextFileW (in: hFindFile=0x381e80, lpFindFileData=0x31e38c | out: lpFindFileData=0x31e38c*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe8287550, ftCreationTime.dwHighDateTime=0x1d2ddf4, ftLastAccessTime.dwLowDateTime=0xe8287550, ftLastAccessTime.dwHighDateTime=0x1d2ddf4, ftLastWriteTime.dwLowDateTime=0xe8287550, ftLastWriteTime.dwHighDateTime=0x1d2ddf4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Search", cAlternateFileName="")) returned 1 [0078.020] FindNextFileW (in: hFindFile=0x381e80, lpFindFileData=0x31e38c | out: lpFindFileData=0x31e38c*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0078.020] FindClose (in: hFindFile=0x381e80 | out: hFindFile=0x381e80) returned 1 [0078.020] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e614) returned 1 [0078.020] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e620) returned 1 [0078.020] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Adobe\\Acrobat\\10.0\\rdrmessage.zip", nBufferLength=0x105, lpBuffer=0x31e02c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Adobe\\Acrobat\\10.0\\rdrmessage.zip", lpFilePart=0x0) returned 0x50 [0078.020] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e520) returned 1 [0078.020] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Adobe\\Acrobat\\10.0\\rdrmessage.zip" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\locallow\\adobe\\acrobat\\10.0\\rdrmessage.zip"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x264 [0078.022] GetFileType (hFile=0x264) returned 0x1 [0078.022] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e51c) returned 1 [0078.022] GetFileType (hFile=0x264) returned 0x1 [0078.022] GetFileSize (in: hFile=0x264, lpFileSizeHigh=0x31e628 | out: lpFileSizeHigh=0x31e628*=0x0) returned 0xa5ff [0078.022] ReadFile (in: hFile=0x264, lpBuffer=0x2811e08, nNumberOfBytesToRead=0xa5ff, lpNumberOfBytesRead=0x31e5d4, lpOverlapped=0x0 | out: lpBuffer=0x2811e08*, lpNumberOfBytesRead=0x31e5d4*=0xa5ff, lpOverlapped=0x0) returned 1 [0078.026] CloseHandle (hObject=0x264) returned 1 [0078.071] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Adobe\\Acrobat\\10.0\\rdrmessage.zip", nBufferLength=0x105, lpBuffer=0x31e018, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Adobe\\Acrobat\\10.0\\rdrmessage.zip", lpFilePart=0x0) returned 0x50 [0078.071] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e50c) returned 1 [0078.071] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Adobe\\Acrobat\\10.0\\rdrmessage.zip" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\locallow\\adobe\\acrobat\\10.0\\rdrmessage.zip"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x264 [0078.072] GetFileType (hFile=0x264) returned 0x1 [0078.072] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e508) returned 1 [0078.072] GetFileType (hFile=0x264) returned 0x1 [0078.072] WriteFile (in: hFile=0x264, lpBuffer=0x269dfdc*, nNumberOfBytesToWrite=0xa600, lpNumberOfBytesWritten=0x31e5c8, lpOverlapped=0x0 | out: lpBuffer=0x269dfdc*, lpNumberOfBytesWritten=0x31e5c8*=0xa600, lpOverlapped=0x0) returned 1 [0078.073] CloseHandle (hObject=0x264) returned 1 [0078.073] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Adobe\\Acrobat\\10.0\\rdrmessage.zip", nBufferLength=0x105, lpBuffer=0x31e14c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Adobe\\Acrobat\\10.0\\rdrmessage.zip", lpFilePart=0x0) returned 0x50 [0078.074] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Adobe\\Acrobat\\10.0\\rdrmessage.zip", nBufferLength=0x105, lpBuffer=0x31e14c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Adobe\\Acrobat\\10.0\\rdrmessage.zip", lpFilePart=0x0) returned 0x50 [0078.074] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e5ac) returned 1 [0078.074] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Adobe\\Acrobat\\10.0\\rdrmessage.zip" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\locallow\\adobe\\acrobat\\10.0\\rdrmessage.zip"), fInfoLevelId=0x0, lpFileInformation=0x31e628 | out: lpFileInformation=0x31e628*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xd9b6a040, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0xd9b6a040, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x11fa0420, ftLastWriteTime.dwHighDateTime=0x1d6eb7f, nFileSizeHigh=0x0, nFileSizeLow=0xa600)) returned 1 [0078.074] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e5a8) returned 1 [0078.074] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Adobe\\Acrobat\\10.0\\rdrmessage.zip" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\locallow\\adobe\\acrobat\\10.0\\rdrmessage.zip"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Adobe\\Acrobat\\10.0\\rdrmessage.zip" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\locallow\\adobe\\acrobat\\10.0\\rdrmessage.zip")) returned 1 [0078.074] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e5dc) returned 1 [0078.074] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Adobe\\Acrobat\\10.0\\Search", nBufferLength=0x105, lpBuffer=0x31e0e4, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Adobe\\Acrobat\\10.0\\Search", lpFilePart=0x0) returned 0x48 [0078.074] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Adobe\\Acrobat\\10.0\\Search\\", nBufferLength=0x105, lpBuffer=0x31e0b8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Adobe\\Acrobat\\10.0\\Search\\", lpFilePart=0x0) returned 0x49 [0078.074] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Adobe\\Acrobat\\10.0\\Search\\*", lpFindFileData=0x31e304 | out: lpFindFileData=0x31e304*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe8287550, ftCreationTime.dwHighDateTime=0x1d2ddf4, ftLastAccessTime.dwLowDateTime=0xe8287550, ftLastAccessTime.dwHighDateTime=0x1d2ddf4, ftLastWriteTime.dwLowDateTime=0xe8287550, ftLastWriteTime.dwHighDateTime=0x1d2ddf4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x382040 [0078.075] FindNextFileW (in: hFindFile=0x382040, lpFindFileData=0x31e314 | out: lpFindFileData=0x31e314*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe8287550, ftCreationTime.dwHighDateTime=0x1d2ddf4, ftLastAccessTime.dwLowDateTime=0xe8287550, ftLastAccessTime.dwHighDateTime=0x1d2ddf4, ftLastWriteTime.dwLowDateTime=0xe8287550, ftLastWriteTime.dwHighDateTime=0x1d2ddf4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0078.075] FindNextFileW (in: hFindFile=0x382040, lpFindFileData=0x31e314 | out: lpFindFileData=0x31e314*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe8287550, ftCreationTime.dwHighDateTime=0x1d2ddf4, ftLastAccessTime.dwLowDateTime=0xe8287550, ftLastAccessTime.dwHighDateTime=0x1d2ddf4, ftLastWriteTime.dwLowDateTime=0xe8287550, ftLastWriteTime.dwHighDateTime=0x1d2ddf4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 0 [0078.075] FindClose (in: hFindFile=0x382040 | out: hFindFile=0x382040) returned 1 [0078.076] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e59c) returned 1 [0078.076] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e5a8) returned 1 [0078.076] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e5dc) returned 1 [0078.076] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Adobe\\Acrobat\\10.0\\Search", nBufferLength=0x105, lpBuffer=0x31e0e4, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Adobe\\Acrobat\\10.0\\Search", lpFilePart=0x0) returned 0x48 [0078.076] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Adobe\\Acrobat\\10.0\\Search\\", nBufferLength=0x105, lpBuffer=0x31e0b8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Adobe\\Acrobat\\10.0\\Search\\", lpFilePart=0x0) returned 0x49 [0078.076] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Adobe\\Acrobat\\10.0\\Search\\*", lpFindFileData=0x31e304 | out: lpFindFileData=0x31e304*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe8287550, ftCreationTime.dwHighDateTime=0x1d2ddf4, ftLastAccessTime.dwLowDateTime=0xe8287550, ftLastAccessTime.dwHighDateTime=0x1d2ddf4, ftLastWriteTime.dwLowDateTime=0xe8287550, ftLastWriteTime.dwHighDateTime=0x1d2ddf4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x382040 [0078.076] FindNextFileW (in: hFindFile=0x382040, lpFindFileData=0x31e314 | out: lpFindFileData=0x31e314*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe8287550, ftCreationTime.dwHighDateTime=0x1d2ddf4, ftLastAccessTime.dwLowDateTime=0xe8287550, ftLastAccessTime.dwHighDateTime=0x1d2ddf4, ftLastWriteTime.dwLowDateTime=0xe8287550, ftLastWriteTime.dwHighDateTime=0x1d2ddf4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0078.076] FindNextFileW (in: hFindFile=0x382040, lpFindFileData=0x31e314 | out: lpFindFileData=0x31e314*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe8287550, ftCreationTime.dwHighDateTime=0x1d2ddf4, ftLastAccessTime.dwLowDateTime=0xe8287550, ftLastAccessTime.dwHighDateTime=0x1d2ddf4, ftLastWriteTime.dwLowDateTime=0xe8287550, ftLastWriteTime.dwHighDateTime=0x1d2ddf4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 0 [0078.076] FindClose (in: hFindFile=0x382040 | out: hFindFile=0x382040) returned 1 [0078.076] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e59c) returned 1 [0078.076] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e5a8) returned 1 [0078.076] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e6cc) returned 1 [0078.076] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Adobe\\Linguistics", nBufferLength=0x105, lpBuffer=0x31e1d4, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Adobe\\Linguistics", lpFilePart=0x0) returned 0x40 [0078.076] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Adobe\\Linguistics\\", nBufferLength=0x105, lpBuffer=0x31e1a8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Adobe\\Linguistics\\", lpFilePart=0x0) returned 0x41 [0078.076] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Adobe\\Linguistics\\*", lpFindFileData=0x31e3f4 | out: lpFindFileData=0x31e3f4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xcd708940, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0xcd708940, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0xcd708940, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x382040 [0078.077] FindNextFileW (in: hFindFile=0x382040, lpFindFileData=0x31e404 | out: lpFindFileData=0x31e404*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xcd708940, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0xcd708940, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0xcd708940, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0078.077] FindNextFileW (in: hFindFile=0x382040, lpFindFileData=0x31e404 | out: lpFindFileData=0x31e404*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xcd708940, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0xe82613f0, ftLastAccessTime.dwHighDateTime=0x1d2ddf4, ftLastWriteTime.dwLowDateTime=0xe82613f0, ftLastWriteTime.dwHighDateTime=0x1d2ddf4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Dictionaries", cAlternateFileName="DICTIO~1")) returned 1 [0078.077] FindNextFileW (in: hFindFile=0x382040, lpFindFileData=0x31e404 | out: lpFindFileData=0x31e404*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xcd708940, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0xe82613f0, ftLastAccessTime.dwHighDateTime=0x1d2ddf4, ftLastWriteTime.dwLowDateTime=0xe82613f0, ftLastWriteTime.dwHighDateTime=0x1d2ddf4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Dictionaries", cAlternateFileName="DICTIO~1")) returned 0 [0078.077] FindClose (in: hFindFile=0x382040 | out: hFindFile=0x382040) returned 1 [0078.077] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e68c) returned 1 [0078.077] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e698) returned 1 [0078.077] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e6cc) returned 1 [0078.077] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Adobe\\Linguistics", nBufferLength=0x105, lpBuffer=0x31e1d4, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Adobe\\Linguistics", lpFilePart=0x0) returned 0x40 [0078.077] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Adobe\\Linguistics\\", nBufferLength=0x105, lpBuffer=0x31e1a8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Adobe\\Linguistics\\", lpFilePart=0x0) returned 0x41 [0078.077] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Adobe\\Linguistics\\*", lpFindFileData=0x31e3f4 | out: lpFindFileData=0x31e3f4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xcd708940, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0xcd708940, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0xcd708940, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x382040 [0078.078] FindNextFileW (in: hFindFile=0x382040, lpFindFileData=0x31e404 | out: lpFindFileData=0x31e404*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xcd708940, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0xcd708940, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0xcd708940, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0078.078] FindNextFileW (in: hFindFile=0x382040, lpFindFileData=0x31e404 | out: lpFindFileData=0x31e404*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xcd708940, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0xe82613f0, ftLastAccessTime.dwHighDateTime=0x1d2ddf4, ftLastWriteTime.dwLowDateTime=0xe82613f0, ftLastWriteTime.dwHighDateTime=0x1d2ddf4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Dictionaries", cAlternateFileName="DICTIO~1")) returned 1 [0078.078] FindNextFileW (in: hFindFile=0x382040, lpFindFileData=0x31e404 | out: lpFindFileData=0x31e404*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0078.078] FindClose (in: hFindFile=0x382040 | out: hFindFile=0x382040) returned 1 [0078.078] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e68c) returned 1 [0078.078] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e698) returned 1 [0078.078] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e654) returned 1 [0078.079] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Adobe\\Linguistics\\Dictionaries", nBufferLength=0x105, lpBuffer=0x31e15c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Adobe\\Linguistics\\Dictionaries", lpFilePart=0x0) returned 0x4d [0078.079] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Adobe\\Linguistics\\Dictionaries\\", nBufferLength=0x105, lpBuffer=0x31e130, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Adobe\\Linguistics\\Dictionaries\\", lpFilePart=0x0) returned 0x4e [0078.079] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Adobe\\Linguistics\\Dictionaries\\*", lpFindFileData=0x31e37c | out: lpFindFileData=0x31e37c*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xcd708940, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0xe82613f0, ftLastAccessTime.dwHighDateTime=0x1d2ddf4, ftLastWriteTime.dwLowDateTime=0xe82613f0, ftLastWriteTime.dwHighDateTime=0x1d2ddf4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x382040 [0078.080] FindNextFileW (in: hFindFile=0x382040, lpFindFileData=0x31e38c | out: lpFindFileData=0x31e38c*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xcd708940, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0xe82613f0, ftLastAccessTime.dwHighDateTime=0x1d2ddf4, ftLastWriteTime.dwLowDateTime=0xe82613f0, ftLastWriteTime.dwHighDateTime=0x1d2ddf4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0078.080] FindNextFileW (in: hFindFile=0x382040, lpFindFileData=0x31e38c | out: lpFindFileData=0x31e38c*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe82613f0, ftCreationTime.dwHighDateTime=0x1d2ddf4, ftLastAccessTime.dwLowDateTime=0xec6bf330, ftLastAccessTime.dwHighDateTime=0x1d2ddf4, ftLastWriteTime.dwLowDateTime=0xec6bf330, ftLastWriteTime.dwHighDateTime=0x1d2ddf4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Adobe Custom Dictionary", cAlternateFileName="ADOBEC~1")) returned 1 [0078.080] FindNextFileW (in: hFindFile=0x382040, lpFindFileData=0x31e38c | out: lpFindFileData=0x31e38c*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe82613f0, ftCreationTime.dwHighDateTime=0x1d2ddf4, ftLastAccessTime.dwLowDateTime=0xec6bf330, ftLastAccessTime.dwHighDateTime=0x1d2ddf4, ftLastWriteTime.dwLowDateTime=0xec6bf330, ftLastWriteTime.dwHighDateTime=0x1d2ddf4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Adobe Custom Dictionary", cAlternateFileName="ADOBEC~1")) returned 0 [0078.080] FindClose (in: hFindFile=0x382040 | out: hFindFile=0x382040) returned 1 [0078.081] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e614) returned 1 [0078.081] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e620) returned 1 [0078.081] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e654) returned 1 [0078.081] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Adobe\\Linguistics\\Dictionaries", nBufferLength=0x105, lpBuffer=0x31e15c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Adobe\\Linguistics\\Dictionaries", lpFilePart=0x0) returned 0x4d [0078.081] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Adobe\\Linguistics\\Dictionaries\\", nBufferLength=0x105, lpBuffer=0x31e130, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Adobe\\Linguistics\\Dictionaries\\", lpFilePart=0x0) returned 0x4e [0078.081] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Adobe\\Linguistics\\Dictionaries\\*", lpFindFileData=0x31e37c | out: lpFindFileData=0x31e37c*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xcd708940, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0xe82613f0, ftLastAccessTime.dwHighDateTime=0x1d2ddf4, ftLastWriteTime.dwLowDateTime=0xe82613f0, ftLastWriteTime.dwHighDateTime=0x1d2ddf4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x382040 [0078.081] FindNextFileW (in: hFindFile=0x382040, lpFindFileData=0x31e38c | out: lpFindFileData=0x31e38c*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xcd708940, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0xe82613f0, ftLastAccessTime.dwHighDateTime=0x1d2ddf4, ftLastWriteTime.dwLowDateTime=0xe82613f0, ftLastWriteTime.dwHighDateTime=0x1d2ddf4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0078.081] FindNextFileW (in: hFindFile=0x382040, lpFindFileData=0x31e38c | out: lpFindFileData=0x31e38c*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe82613f0, ftCreationTime.dwHighDateTime=0x1d2ddf4, ftLastAccessTime.dwLowDateTime=0xec6bf330, ftLastAccessTime.dwHighDateTime=0x1d2ddf4, ftLastWriteTime.dwLowDateTime=0xec6bf330, ftLastWriteTime.dwHighDateTime=0x1d2ddf4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Adobe Custom Dictionary", cAlternateFileName="ADOBEC~1")) returned 1 [0078.081] FindNextFileW (in: hFindFile=0x382040, lpFindFileData=0x31e38c | out: lpFindFileData=0x31e38c*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0078.081] FindClose (in: hFindFile=0x382040 | out: hFindFile=0x382040) returned 1 [0078.081] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e614) returned 1 [0078.081] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e620) returned 1 [0078.081] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e5dc) returned 1 [0078.081] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Adobe\\Linguistics\\Dictionaries\\Adobe Custom Dictionary", nBufferLength=0x105, lpBuffer=0x31e0e4, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Adobe\\Linguistics\\Dictionaries\\Adobe Custom Dictionary", lpFilePart=0x0) returned 0x65 [0078.082] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Adobe\\Linguistics\\Dictionaries\\Adobe Custom Dictionary\\", nBufferLength=0x105, lpBuffer=0x31e0b8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Adobe\\Linguistics\\Dictionaries\\Adobe Custom Dictionary\\", lpFilePart=0x0) returned 0x66 [0078.082] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Adobe\\Linguistics\\Dictionaries\\Adobe Custom Dictionary\\*", lpFindFileData=0x31e304 | out: lpFindFileData=0x31e304*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe82613f0, ftCreationTime.dwHighDateTime=0x1d2ddf4, ftLastAccessTime.dwLowDateTime=0xec6bf330, ftLastAccessTime.dwHighDateTime=0x1d2ddf4, ftLastWriteTime.dwLowDateTime=0xec6bf330, ftLastWriteTime.dwHighDateTime=0x1d2ddf4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x382040 [0078.083] FindNextFileW (in: hFindFile=0x382040, lpFindFileData=0x31e314 | out: lpFindFileData=0x31e314*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe82613f0, ftCreationTime.dwHighDateTime=0x1d2ddf4, ftLastAccessTime.dwLowDateTime=0xec6bf330, ftLastAccessTime.dwHighDateTime=0x1d2ddf4, ftLastWriteTime.dwLowDateTime=0xec6bf330, ftLastWriteTime.dwHighDateTime=0x1d2ddf4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0078.083] FindNextFileW (in: hFindFile=0x382040, lpFindFileData=0x31e314 | out: lpFindFileData=0x31e314*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe82613f0, ftCreationTime.dwHighDateTime=0x1d2ddf4, ftLastAccessTime.dwLowDateTime=0xe82613f0, ftLastAccessTime.dwHighDateTime=0x1d2ddf4, ftLastWriteTime.dwLowDateTime=0xe82613f0, ftLastWriteTime.dwHighDateTime=0x1d2ddf4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="all", cAlternateFileName="")) returned 1 [0078.084] FindNextFileW (in: hFindFile=0x382040, lpFindFileData=0x31e314 | out: lpFindFileData=0x31e314*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xeab70f70, ftCreationTime.dwHighDateTime=0x1d2ddf4, ftLastAccessTime.dwLowDateTime=0xeab70f70, ftLastAccessTime.dwHighDateTime=0x1d2ddf4, ftLastWriteTime.dwLowDateTime=0xeab70f70, ftLastWriteTime.dwHighDateTime=0x1d2ddf4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="brt", cAlternateFileName="")) returned 1 [0078.084] FindNextFileW (in: hFindFile=0x382040, lpFindFileData=0x31e314 | out: lpFindFileData=0x31e314*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xec6bf330, ftCreationTime.dwHighDateTime=0x1d2ddf4, ftLastAccessTime.dwLowDateTime=0xec6bf330, ftLastAccessTime.dwHighDateTime=0x1d2ddf4, ftLastWriteTime.dwLowDateTime=0xec6bf330, ftLastWriteTime.dwHighDateTime=0x1d2ddf4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="brz", cAlternateFileName="")) returned 1 [0078.084] FindNextFileW (in: hFindFile=0x382040, lpFindFileData=0x31e314 | out: lpFindFileData=0x31e314*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xeb4758f0, ftCreationTime.dwHighDateTime=0x1d2ddf4, ftLastAccessTime.dwLowDateTime=0xeb4758f0, ftLastAccessTime.dwHighDateTime=0x1d2ddf4, ftLastWriteTime.dwLowDateTime=0xeb4758f0, ftLastWriteTime.dwHighDateTime=0x1d2ddf4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="dan", cAlternateFileName="")) returned 1 [0078.084] FindNextFileW (in: hFindFile=0x382040, lpFindFileData=0x31e314 | out: lpFindFileData=0x31e314*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xebdabf50, ftCreationTime.dwHighDateTime=0x1d2ddf4, ftLastAccessTime.dwLowDateTime=0xebdabf50, ftLastAccessTime.dwHighDateTime=0x1d2ddf4, ftLastWriteTime.dwLowDateTime=0xebdabf50, ftLastWriteTime.dwHighDateTime=0x1d2ddf4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="dut", cAlternateFileName="")) returned 1 [0078.084] FindNextFileW (in: hFindFile=0x382040, lpFindFileData=0x31e314 | out: lpFindFileData=0x31e314*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe9487bb0, ftCreationTime.dwHighDateTime=0x1d2ddf4, ftLastAccessTime.dwLowDateTime=0xe9487bb0, ftLastAccessTime.dwHighDateTime=0x1d2ddf4, ftLastWriteTime.dwLowDateTime=0xe9487bb0, ftLastWriteTime.dwHighDateTime=0x1d2ddf4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="eng", cAlternateFileName="")) returned 1 [0078.084] FindNextFileW (in: hFindFile=0x382040, lpFindFileData=0x31e314 | out: lpFindFileData=0x31e314*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe9d9af90, ftCreationTime.dwHighDateTime=0x1d2ddf4, ftLastAccessTime.dwLowDateTime=0xe9d9af90, ftLastAccessTime.dwHighDateTime=0x1d2ddf4, ftLastWriteTime.dwLowDateTime=0xe9d9af90, ftLastWriteTime.dwHighDateTime=0x1d2ddf4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="frn", cAlternateFileName="")) returned 1 [0078.084] FindNextFileW (in: hFindFile=0x382040, lpFindFileData=0x31e314 | out: lpFindFileData=0x31e314*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe9924650, ftCreationTime.dwHighDateTime=0x1d2ddf4, ftLastAccessTime.dwLowDateTime=0xe9924650, ftLastAccessTime.dwHighDateTime=0x1d2ddf4, ftLastWriteTime.dwLowDateTime=0xe9924650, ftLastWriteTime.dwHighDateTime=0x1d2ddf4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="grm", cAlternateFileName="")) returned 1 [0078.084] FindNextFileW (in: hFindFile=0x382040, lpFindFileData=0x31e314 | out: lpFindFileData=0x31e314*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xea6d44d0, ftCreationTime.dwHighDateTime=0x1d2ddf4, ftLastAccessTime.dwLowDateTime=0xea6d44d0, ftLastAccessTime.dwHighDateTime=0x1d2ddf4, ftLastWriteTime.dwLowDateTime=0xea6d44d0, ftLastWriteTime.dwHighDateTime=0x1d2ddf4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="itl", cAlternateFileName="")) returned 1 [0078.085] FindNextFileW (in: hFindFile=0x382040, lpFindFileData=0x31e314 | out: lpFindFileData=0x31e314*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xeb90f4b0, ftCreationTime.dwHighDateTime=0x1d2ddf4, ftLastAccessTime.dwLowDateTime=0xeb90f4b0, ftLastAccessTime.dwHighDateTime=0x1d2ddf4, ftLastWriteTime.dwLowDateTime=0xeb90f4b0, ftLastWriteTime.dwHighDateTime=0x1d2ddf4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="nrw", cAlternateFileName="")) returned 1 [0078.085] FindNextFileW (in: hFindFile=0x382040, lpFindFileData=0x31e314 | out: lpFindFileData=0x31e314*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xec2489f0, ftCreationTime.dwHighDateTime=0x1d2ddf4, ftLastAccessTime.dwLowDateTime=0xec2489f0, ftLastAccessTime.dwHighDateTime=0x1d2ddf4, ftLastWriteTime.dwLowDateTime=0xec2489f0, ftLastWriteTime.dwHighDateTime=0x1d2ddf4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="prt", cAlternateFileName="")) returned 1 [0078.085] FindNextFileW (in: hFindFile=0x382040, lpFindFileData=0x31e314 | out: lpFindFileData=0x31e314*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xea237a30, ftCreationTime.dwHighDateTime=0x1d2ddf4, ftLastAccessTime.dwLowDateTime=0xea237a30, ftLastAccessTime.dwHighDateTime=0x1d2ddf4, ftLastWriteTime.dwLowDateTime=0xea237a30, ftLastWriteTime.dwHighDateTime=0x1d2ddf4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="spn", cAlternateFileName="")) returned 1 [0078.085] FindNextFileW (in: hFindFile=0x382040, lpFindFileData=0x31e314 | out: lpFindFileData=0x31e314*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xeaffa190, ftCreationTime.dwHighDateTime=0x1d2ddf4, ftLastAccessTime.dwLowDateTime=0xeaffa190, ftLastAccessTime.dwHighDateTime=0x1d2ddf4, ftLastWriteTime.dwLowDateTime=0xeaffa190, ftLastWriteTime.dwHighDateTime=0x1d2ddf4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="swd", cAlternateFileName="")) returned 1 [0078.085] FindNextFileW (in: hFindFile=0x382040, lpFindFileData=0x31e314 | out: lpFindFileData=0x31e314*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xeaffa190, ftCreationTime.dwHighDateTime=0x1d2ddf4, ftLastAccessTime.dwLowDateTime=0xeaffa190, ftLastAccessTime.dwHighDateTime=0x1d2ddf4, ftLastWriteTime.dwLowDateTime=0xeaffa190, ftLastWriteTime.dwHighDateTime=0x1d2ddf4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="swd", cAlternateFileName="")) returned 0 [0078.085] FindClose (in: hFindFile=0x382040 | out: hFindFile=0x382040) returned 1 [0078.086] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e59c) returned 1 [0078.086] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e5a8) returned 1 [0078.086] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e5dc) returned 1 [0078.086] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Adobe\\Linguistics\\Dictionaries\\Adobe Custom Dictionary", nBufferLength=0x105, lpBuffer=0x31e0e4, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Adobe\\Linguistics\\Dictionaries\\Adobe Custom Dictionary", lpFilePart=0x0) returned 0x65 [0078.086] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Adobe\\Linguistics\\Dictionaries\\Adobe Custom Dictionary\\", nBufferLength=0x105, lpBuffer=0x31e0b8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Adobe\\Linguistics\\Dictionaries\\Adobe Custom Dictionary\\", lpFilePart=0x0) returned 0x66 [0078.086] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Adobe\\Linguistics\\Dictionaries\\Adobe Custom Dictionary\\*", lpFindFileData=0x31e304 | out: lpFindFileData=0x31e304*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe82613f0, ftCreationTime.dwHighDateTime=0x1d2ddf4, ftLastAccessTime.dwLowDateTime=0xec6bf330, ftLastAccessTime.dwHighDateTime=0x1d2ddf4, ftLastWriteTime.dwLowDateTime=0xec6bf330, ftLastWriteTime.dwHighDateTime=0x1d2ddf4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x382040 [0078.087] FindNextFileW (in: hFindFile=0x382040, lpFindFileData=0x31e314 | out: lpFindFileData=0x31e314*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe82613f0, ftCreationTime.dwHighDateTime=0x1d2ddf4, ftLastAccessTime.dwLowDateTime=0xec6bf330, ftLastAccessTime.dwHighDateTime=0x1d2ddf4, ftLastWriteTime.dwLowDateTime=0xec6bf330, ftLastWriteTime.dwHighDateTime=0x1d2ddf4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0078.087] FindNextFileW (in: hFindFile=0x382040, lpFindFileData=0x31e314 | out: lpFindFileData=0x31e314*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe82613f0, ftCreationTime.dwHighDateTime=0x1d2ddf4, ftLastAccessTime.dwLowDateTime=0xe82613f0, ftLastAccessTime.dwHighDateTime=0x1d2ddf4, ftLastWriteTime.dwLowDateTime=0xe82613f0, ftLastWriteTime.dwHighDateTime=0x1d2ddf4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="all", cAlternateFileName="")) returned 1 [0078.087] FindNextFileW (in: hFindFile=0x382040, lpFindFileData=0x31e314 | out: lpFindFileData=0x31e314*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xeab70f70, ftCreationTime.dwHighDateTime=0x1d2ddf4, ftLastAccessTime.dwLowDateTime=0xeab70f70, ftLastAccessTime.dwHighDateTime=0x1d2ddf4, ftLastWriteTime.dwLowDateTime=0xeab70f70, ftLastWriteTime.dwHighDateTime=0x1d2ddf4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="brt", cAlternateFileName="")) returned 1 [0078.087] FindNextFileW (in: hFindFile=0x382040, lpFindFileData=0x31e314 | out: lpFindFileData=0x31e314*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xec6bf330, ftCreationTime.dwHighDateTime=0x1d2ddf4, ftLastAccessTime.dwLowDateTime=0xec6bf330, ftLastAccessTime.dwHighDateTime=0x1d2ddf4, ftLastWriteTime.dwLowDateTime=0xec6bf330, ftLastWriteTime.dwHighDateTime=0x1d2ddf4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="brz", cAlternateFileName="")) returned 1 [0078.088] FindNextFileW (in: hFindFile=0x382040, lpFindFileData=0x31e314 | out: lpFindFileData=0x31e314*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xeb4758f0, ftCreationTime.dwHighDateTime=0x1d2ddf4, ftLastAccessTime.dwLowDateTime=0xeb4758f0, ftLastAccessTime.dwHighDateTime=0x1d2ddf4, ftLastWriteTime.dwLowDateTime=0xeb4758f0, ftLastWriteTime.dwHighDateTime=0x1d2ddf4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="dan", cAlternateFileName="")) returned 1 [0078.088] FindNextFileW (in: hFindFile=0x382040, lpFindFileData=0x31e314 | out: lpFindFileData=0x31e314*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xebdabf50, ftCreationTime.dwHighDateTime=0x1d2ddf4, ftLastAccessTime.dwLowDateTime=0xebdabf50, ftLastAccessTime.dwHighDateTime=0x1d2ddf4, ftLastWriteTime.dwLowDateTime=0xebdabf50, ftLastWriteTime.dwHighDateTime=0x1d2ddf4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="dut", cAlternateFileName="")) returned 1 [0078.088] FindNextFileW (in: hFindFile=0x382040, lpFindFileData=0x31e314 | out: lpFindFileData=0x31e314*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe9487bb0, ftCreationTime.dwHighDateTime=0x1d2ddf4, ftLastAccessTime.dwLowDateTime=0xe9487bb0, ftLastAccessTime.dwHighDateTime=0x1d2ddf4, ftLastWriteTime.dwLowDateTime=0xe9487bb0, ftLastWriteTime.dwHighDateTime=0x1d2ddf4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="eng", cAlternateFileName="")) returned 1 [0078.088] FindNextFileW (in: hFindFile=0x382040, lpFindFileData=0x31e314 | out: lpFindFileData=0x31e314*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe9d9af90, ftCreationTime.dwHighDateTime=0x1d2ddf4, ftLastAccessTime.dwLowDateTime=0xe9d9af90, ftLastAccessTime.dwHighDateTime=0x1d2ddf4, ftLastWriteTime.dwLowDateTime=0xe9d9af90, ftLastWriteTime.dwHighDateTime=0x1d2ddf4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="frn", cAlternateFileName="")) returned 1 [0078.088] FindNextFileW (in: hFindFile=0x382040, lpFindFileData=0x31e314 | out: lpFindFileData=0x31e314*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe9924650, ftCreationTime.dwHighDateTime=0x1d2ddf4, ftLastAccessTime.dwLowDateTime=0xe9924650, ftLastAccessTime.dwHighDateTime=0x1d2ddf4, ftLastWriteTime.dwLowDateTime=0xe9924650, ftLastWriteTime.dwHighDateTime=0x1d2ddf4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="grm", cAlternateFileName="")) returned 1 [0078.088] FindNextFileW (in: hFindFile=0x382040, lpFindFileData=0x31e314 | out: lpFindFileData=0x31e314*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xea6d44d0, ftCreationTime.dwHighDateTime=0x1d2ddf4, ftLastAccessTime.dwLowDateTime=0xea6d44d0, ftLastAccessTime.dwHighDateTime=0x1d2ddf4, ftLastWriteTime.dwLowDateTime=0xea6d44d0, ftLastWriteTime.dwHighDateTime=0x1d2ddf4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="itl", cAlternateFileName="")) returned 1 [0078.088] FindNextFileW (in: hFindFile=0x382040, lpFindFileData=0x31e314 | out: lpFindFileData=0x31e314*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xeb90f4b0, ftCreationTime.dwHighDateTime=0x1d2ddf4, ftLastAccessTime.dwLowDateTime=0xeb90f4b0, ftLastAccessTime.dwHighDateTime=0x1d2ddf4, ftLastWriteTime.dwLowDateTime=0xeb90f4b0, ftLastWriteTime.dwHighDateTime=0x1d2ddf4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="nrw", cAlternateFileName="")) returned 1 [0078.088] FindNextFileW (in: hFindFile=0x382040, lpFindFileData=0x31e314 | out: lpFindFileData=0x31e314*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xec2489f0, ftCreationTime.dwHighDateTime=0x1d2ddf4, ftLastAccessTime.dwLowDateTime=0xec2489f0, ftLastAccessTime.dwHighDateTime=0x1d2ddf4, ftLastWriteTime.dwLowDateTime=0xec2489f0, ftLastWriteTime.dwHighDateTime=0x1d2ddf4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="prt", cAlternateFileName="")) returned 1 [0078.088] FindNextFileW (in: hFindFile=0x382040, lpFindFileData=0x31e314 | out: lpFindFileData=0x31e314*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xea237a30, ftCreationTime.dwHighDateTime=0x1d2ddf4, ftLastAccessTime.dwLowDateTime=0xea237a30, ftLastAccessTime.dwHighDateTime=0x1d2ddf4, ftLastWriteTime.dwLowDateTime=0xea237a30, ftLastWriteTime.dwHighDateTime=0x1d2ddf4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="spn", cAlternateFileName="")) returned 1 [0078.089] FindNextFileW (in: hFindFile=0x382040, lpFindFileData=0x31e314 | out: lpFindFileData=0x31e314*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xeaffa190, ftCreationTime.dwHighDateTime=0x1d2ddf4, ftLastAccessTime.dwLowDateTime=0xeaffa190, ftLastAccessTime.dwHighDateTime=0x1d2ddf4, ftLastWriteTime.dwLowDateTime=0xeaffa190, ftLastWriteTime.dwHighDateTime=0x1d2ddf4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="swd", cAlternateFileName="")) returned 1 [0078.089] FindNextFileW (in: hFindFile=0x382040, lpFindFileData=0x31e314 | out: lpFindFileData=0x31e314*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0078.089] FindClose (in: hFindFile=0x382040 | out: hFindFile=0x382040) returned 1 [0078.089] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e59c) returned 1 [0078.089] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e5a8) returned 1 [0078.089] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e564) returned 1 [0078.089] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Adobe\\Linguistics\\Dictionaries\\Adobe Custom Dictionary\\all", nBufferLength=0x105, lpBuffer=0x31e06c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Adobe\\Linguistics\\Dictionaries\\Adobe Custom Dictionary\\all", lpFilePart=0x0) returned 0x69 [0078.090] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Adobe\\Linguistics\\Dictionaries\\Adobe Custom Dictionary\\all\\", nBufferLength=0x105, lpBuffer=0x31e040, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Adobe\\Linguistics\\Dictionaries\\Adobe Custom Dictionary\\all\\", lpFilePart=0x0) returned 0x6a [0078.090] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Adobe\\Linguistics\\Dictionaries\\Adobe Custom Dictionary\\all\\*", lpFindFileData=0x31e28c | out: lpFindFileData=0x31e28c*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe82613f0, ftCreationTime.dwHighDateTime=0x1d2ddf4, ftLastAccessTime.dwLowDateTime=0xe82613f0, ftLastAccessTime.dwHighDateTime=0x1d2ddf4, ftLastWriteTime.dwLowDateTime=0xe82613f0, ftLastWriteTime.dwHighDateTime=0x1d2ddf4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x382040 [0078.091] FindNextFileW (in: hFindFile=0x382040, lpFindFileData=0x31e29c | out: lpFindFileData=0x31e29c*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe82613f0, ftCreationTime.dwHighDateTime=0x1d2ddf4, ftLastAccessTime.dwLowDateTime=0xe82613f0, ftLastAccessTime.dwHighDateTime=0x1d2ddf4, ftLastWriteTime.dwLowDateTime=0xe82613f0, ftLastWriteTime.dwHighDateTime=0x1d2ddf4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0078.091] FindNextFileW (in: hFindFile=0x382040, lpFindFileData=0x31e29c | out: lpFindFileData=0x31e29c*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe82613f0, ftCreationTime.dwHighDateTime=0x1d2ddf4, ftLastAccessTime.dwLowDateTime=0xe82613f0, ftLastAccessTime.dwHighDateTime=0x1d2ddf4, ftLastWriteTime.dwLowDateTime=0xe82613f0, ftLastWriteTime.dwHighDateTime=0x1d2ddf4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 0 [0078.091] FindClose (in: hFindFile=0x382040 | out: hFindFile=0x382040) returned 1 [0078.091] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e524) returned 1 [0078.091] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e530) returned 1 [0078.091] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e564) returned 1 [0078.091] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Adobe\\Linguistics\\Dictionaries\\Adobe Custom Dictionary\\all", nBufferLength=0x105, lpBuffer=0x31e06c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Adobe\\Linguistics\\Dictionaries\\Adobe Custom Dictionary\\all", lpFilePart=0x0) returned 0x69 [0078.091] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Adobe\\Linguistics\\Dictionaries\\Adobe Custom Dictionary\\all\\", nBufferLength=0x105, lpBuffer=0x31e040, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Adobe\\Linguistics\\Dictionaries\\Adobe Custom Dictionary\\all\\", lpFilePart=0x0) returned 0x6a [0078.091] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Adobe\\Linguistics\\Dictionaries\\Adobe Custom Dictionary\\all\\*", lpFindFileData=0x31e28c | out: lpFindFileData=0x31e28c*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe82613f0, ftCreationTime.dwHighDateTime=0x1d2ddf4, ftLastAccessTime.dwLowDateTime=0xe82613f0, ftLastAccessTime.dwHighDateTime=0x1d2ddf4, ftLastWriteTime.dwLowDateTime=0xe82613f0, ftLastWriteTime.dwHighDateTime=0x1d2ddf4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x382040 [0078.091] FindNextFileW (in: hFindFile=0x382040, lpFindFileData=0x31e29c | out: lpFindFileData=0x31e29c*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe82613f0, ftCreationTime.dwHighDateTime=0x1d2ddf4, ftLastAccessTime.dwLowDateTime=0xe82613f0, ftLastAccessTime.dwHighDateTime=0x1d2ddf4, ftLastWriteTime.dwLowDateTime=0xe82613f0, ftLastWriteTime.dwHighDateTime=0x1d2ddf4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0078.091] FindNextFileW (in: hFindFile=0x382040, lpFindFileData=0x31e29c | out: lpFindFileData=0x31e29c*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe82613f0, ftCreationTime.dwHighDateTime=0x1d2ddf4, ftLastAccessTime.dwLowDateTime=0xe82613f0, ftLastAccessTime.dwHighDateTime=0x1d2ddf4, ftLastWriteTime.dwLowDateTime=0xe82613f0, ftLastWriteTime.dwHighDateTime=0x1d2ddf4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 0 [0078.092] FindClose (in: hFindFile=0x382040 | out: hFindFile=0x382040) returned 1 [0078.092] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e524) returned 1 [0078.092] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e530) returned 1 [0078.092] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e564) returned 1 [0078.092] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Adobe\\Linguistics\\Dictionaries\\Adobe Custom Dictionary\\brt", nBufferLength=0x105, lpBuffer=0x31e06c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Adobe\\Linguistics\\Dictionaries\\Adobe Custom Dictionary\\brt", lpFilePart=0x0) returned 0x69 [0078.092] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Adobe\\Linguistics\\Dictionaries\\Adobe Custom Dictionary\\brt\\", nBufferLength=0x105, lpBuffer=0x31e040, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Adobe\\Linguistics\\Dictionaries\\Adobe Custom Dictionary\\brt\\", lpFilePart=0x0) returned 0x6a [0078.092] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Adobe\\Linguistics\\Dictionaries\\Adobe Custom Dictionary\\brt\\*", lpFindFileData=0x31e28c | out: lpFindFileData=0x31e28c*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xeab70f70, ftCreationTime.dwHighDateTime=0x1d2ddf4, ftLastAccessTime.dwLowDateTime=0xeab70f70, ftLastAccessTime.dwHighDateTime=0x1d2ddf4, ftLastWriteTime.dwLowDateTime=0xeab70f70, ftLastWriteTime.dwHighDateTime=0x1d2ddf4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x382040 [0078.093] FindNextFileW (in: hFindFile=0x382040, lpFindFileData=0x31e29c | out: lpFindFileData=0x31e29c*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xeab70f70, ftCreationTime.dwHighDateTime=0x1d2ddf4, ftLastAccessTime.dwLowDateTime=0xeab70f70, ftLastAccessTime.dwHighDateTime=0x1d2ddf4, ftLastWriteTime.dwLowDateTime=0xeab70f70, ftLastWriteTime.dwHighDateTime=0x1d2ddf4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0078.093] FindNextFileW (in: hFindFile=0x382040, lpFindFileData=0x31e29c | out: lpFindFileData=0x31e29c*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xeab70f70, ftCreationTime.dwHighDateTime=0x1d2ddf4, ftLastAccessTime.dwLowDateTime=0xeab70f70, ftLastAccessTime.dwHighDateTime=0x1d2ddf4, ftLastWriteTime.dwLowDateTime=0xeab70f70, ftLastWriteTime.dwHighDateTime=0x1d2ddf4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 0 [0078.094] FindClose (in: hFindFile=0x382040 | out: hFindFile=0x382040) returned 1 [0078.094] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e524) returned 1 [0078.094] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e530) returned 1 [0078.094] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e564) returned 1 [0078.094] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Adobe\\Linguistics\\Dictionaries\\Adobe Custom Dictionary\\brt", nBufferLength=0x105, lpBuffer=0x31e06c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Adobe\\Linguistics\\Dictionaries\\Adobe Custom Dictionary\\brt", lpFilePart=0x0) returned 0x69 [0078.094] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Adobe\\Linguistics\\Dictionaries\\Adobe Custom Dictionary\\brt\\", nBufferLength=0x105, lpBuffer=0x31e040, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Adobe\\Linguistics\\Dictionaries\\Adobe Custom Dictionary\\brt\\", lpFilePart=0x0) returned 0x6a [0078.094] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Adobe\\Linguistics\\Dictionaries\\Adobe Custom Dictionary\\brt\\*", lpFindFileData=0x31e28c | out: lpFindFileData=0x31e28c*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xeab70f70, ftCreationTime.dwHighDateTime=0x1d2ddf4, ftLastAccessTime.dwLowDateTime=0xeab70f70, ftLastAccessTime.dwHighDateTime=0x1d2ddf4, ftLastWriteTime.dwLowDateTime=0xeab70f70, ftLastWriteTime.dwHighDateTime=0x1d2ddf4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x382040 [0078.094] FindNextFileW (in: hFindFile=0x382040, lpFindFileData=0x31e29c | out: lpFindFileData=0x31e29c*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xeab70f70, ftCreationTime.dwHighDateTime=0x1d2ddf4, ftLastAccessTime.dwLowDateTime=0xeab70f70, ftLastAccessTime.dwHighDateTime=0x1d2ddf4, ftLastWriteTime.dwLowDateTime=0xeab70f70, ftLastWriteTime.dwHighDateTime=0x1d2ddf4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0078.094] FindNextFileW (in: hFindFile=0x382040, lpFindFileData=0x31e29c | out: lpFindFileData=0x31e29c*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xeab70f70, ftCreationTime.dwHighDateTime=0x1d2ddf4, ftLastAccessTime.dwLowDateTime=0xeab70f70, ftLastAccessTime.dwHighDateTime=0x1d2ddf4, ftLastWriteTime.dwLowDateTime=0xeab70f70, ftLastWriteTime.dwHighDateTime=0x1d2ddf4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 0 [0078.094] FindClose (in: hFindFile=0x382040 | out: hFindFile=0x382040) returned 1 [0078.095] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e524) returned 1 [0078.095] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e530) returned 1 [0078.095] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e564) returned 1 [0078.095] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Adobe\\Linguistics\\Dictionaries\\Adobe Custom Dictionary\\brz", nBufferLength=0x105, lpBuffer=0x31e06c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Adobe\\Linguistics\\Dictionaries\\Adobe Custom Dictionary\\brz", lpFilePart=0x0) returned 0x69 [0078.095] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Adobe\\Linguistics\\Dictionaries\\Adobe Custom Dictionary\\brz\\", nBufferLength=0x105, lpBuffer=0x31e040, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Adobe\\Linguistics\\Dictionaries\\Adobe Custom Dictionary\\brz\\", lpFilePart=0x0) returned 0x6a [0078.095] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Adobe\\Linguistics\\Dictionaries\\Adobe Custom Dictionary\\brz\\*", lpFindFileData=0x31e28c | out: lpFindFileData=0x31e28c*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xec6bf330, ftCreationTime.dwHighDateTime=0x1d2ddf4, ftLastAccessTime.dwLowDateTime=0xec6bf330, ftLastAccessTime.dwHighDateTime=0x1d2ddf4, ftLastWriteTime.dwLowDateTime=0xec6bf330, ftLastWriteTime.dwHighDateTime=0x1d2ddf4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x382040 [0078.096] FindNextFileW (in: hFindFile=0x382040, lpFindFileData=0x31e29c | out: lpFindFileData=0x31e29c*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xec6bf330, ftCreationTime.dwHighDateTime=0x1d2ddf4, ftLastAccessTime.dwLowDateTime=0xec6bf330, ftLastAccessTime.dwHighDateTime=0x1d2ddf4, ftLastWriteTime.dwLowDateTime=0xec6bf330, ftLastWriteTime.dwHighDateTime=0x1d2ddf4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0078.096] FindNextFileW (in: hFindFile=0x382040, lpFindFileData=0x31e29c | out: lpFindFileData=0x31e29c*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xec6bf330, ftCreationTime.dwHighDateTime=0x1d2ddf4, ftLastAccessTime.dwLowDateTime=0xec6bf330, ftLastAccessTime.dwHighDateTime=0x1d2ddf4, ftLastWriteTime.dwLowDateTime=0xec6bf330, ftLastWriteTime.dwHighDateTime=0x1d2ddf4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 0 [0078.096] FindClose (in: hFindFile=0x382040 | out: hFindFile=0x382040) returned 1 [0078.096] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e524) returned 1 [0078.096] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e530) returned 1 [0078.096] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e564) returned 1 [0078.096] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Adobe\\Linguistics\\Dictionaries\\Adobe Custom Dictionary\\brz", nBufferLength=0x105, lpBuffer=0x31e06c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Adobe\\Linguistics\\Dictionaries\\Adobe Custom Dictionary\\brz", lpFilePart=0x0) returned 0x69 [0078.096] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Adobe\\Linguistics\\Dictionaries\\Adobe Custom Dictionary\\brz\\", nBufferLength=0x105, lpBuffer=0x31e040, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Adobe\\Linguistics\\Dictionaries\\Adobe Custom Dictionary\\brz\\", lpFilePart=0x0) returned 0x6a [0078.096] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Adobe\\Linguistics\\Dictionaries\\Adobe Custom Dictionary\\brz\\*", lpFindFileData=0x31e28c | out: lpFindFileData=0x31e28c*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xec6bf330, ftCreationTime.dwHighDateTime=0x1d2ddf4, ftLastAccessTime.dwLowDateTime=0xec6bf330, ftLastAccessTime.dwHighDateTime=0x1d2ddf4, ftLastWriteTime.dwLowDateTime=0xec6bf330, ftLastWriteTime.dwHighDateTime=0x1d2ddf4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x382040 [0078.096] FindNextFileW (in: hFindFile=0x382040, lpFindFileData=0x31e29c | out: lpFindFileData=0x31e29c*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xec6bf330, ftCreationTime.dwHighDateTime=0x1d2ddf4, ftLastAccessTime.dwLowDateTime=0xec6bf330, ftLastAccessTime.dwHighDateTime=0x1d2ddf4, ftLastWriteTime.dwLowDateTime=0xec6bf330, ftLastWriteTime.dwHighDateTime=0x1d2ddf4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0078.096] FindNextFileW (in: hFindFile=0x382040, lpFindFileData=0x31e29c | out: lpFindFileData=0x31e29c*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xec6bf330, ftCreationTime.dwHighDateTime=0x1d2ddf4, ftLastAccessTime.dwLowDateTime=0xec6bf330, ftLastAccessTime.dwHighDateTime=0x1d2ddf4, ftLastWriteTime.dwLowDateTime=0xec6bf330, ftLastWriteTime.dwHighDateTime=0x1d2ddf4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 0 [0078.097] FindClose (in: hFindFile=0x382040 | out: hFindFile=0x382040) returned 1 [0078.097] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e524) returned 1 [0078.097] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e530) returned 1 [0078.097] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e564) returned 1 [0078.097] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Adobe\\Linguistics\\Dictionaries\\Adobe Custom Dictionary\\dan", nBufferLength=0x105, lpBuffer=0x31e06c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Adobe\\Linguistics\\Dictionaries\\Adobe Custom Dictionary\\dan", lpFilePart=0x0) returned 0x69 [0078.097] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Adobe\\Linguistics\\Dictionaries\\Adobe Custom Dictionary\\dan\\", nBufferLength=0x105, lpBuffer=0x31e040, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Adobe\\Linguistics\\Dictionaries\\Adobe Custom Dictionary\\dan\\", lpFilePart=0x0) returned 0x6a [0078.097] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Adobe\\Linguistics\\Dictionaries\\Adobe Custom Dictionary\\dan\\*", lpFindFileData=0x31e28c | out: lpFindFileData=0x31e28c*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xeb4758f0, ftCreationTime.dwHighDateTime=0x1d2ddf4, ftLastAccessTime.dwLowDateTime=0xeb4758f0, ftLastAccessTime.dwHighDateTime=0x1d2ddf4, ftLastWriteTime.dwLowDateTime=0xeb4758f0, ftLastWriteTime.dwHighDateTime=0x1d2ddf4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x382040 [0078.097] FindNextFileW (in: hFindFile=0x382040, lpFindFileData=0x31e29c | out: lpFindFileData=0x31e29c*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xeb4758f0, ftCreationTime.dwHighDateTime=0x1d2ddf4, ftLastAccessTime.dwLowDateTime=0xeb4758f0, ftLastAccessTime.dwHighDateTime=0x1d2ddf4, ftLastWriteTime.dwLowDateTime=0xeb4758f0, ftLastWriteTime.dwHighDateTime=0x1d2ddf4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0078.097] FindNextFileW (in: hFindFile=0x382040, lpFindFileData=0x31e29c | out: lpFindFileData=0x31e29c*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xeb4758f0, ftCreationTime.dwHighDateTime=0x1d2ddf4, ftLastAccessTime.dwLowDateTime=0xeb4758f0, ftLastAccessTime.dwHighDateTime=0x1d2ddf4, ftLastWriteTime.dwLowDateTime=0xeb4758f0, ftLastWriteTime.dwHighDateTime=0x1d2ddf4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 0 [0078.097] FindClose (in: hFindFile=0x382040 | out: hFindFile=0x382040) returned 1 [0078.097] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e524) returned 1 [0078.097] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e530) returned 1 [0078.097] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e564) returned 1 [0078.097] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Adobe\\Linguistics\\Dictionaries\\Adobe Custom Dictionary\\dan", nBufferLength=0x105, lpBuffer=0x31e06c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Adobe\\Linguistics\\Dictionaries\\Adobe Custom Dictionary\\dan", lpFilePart=0x0) returned 0x69 [0078.098] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Adobe\\Linguistics\\Dictionaries\\Adobe Custom Dictionary\\dan\\", nBufferLength=0x105, lpBuffer=0x31e040, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Adobe\\Linguistics\\Dictionaries\\Adobe Custom Dictionary\\dan\\", lpFilePart=0x0) returned 0x6a [0078.098] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Adobe\\Linguistics\\Dictionaries\\Adobe Custom Dictionary\\dan\\*", lpFindFileData=0x31e28c | out: lpFindFileData=0x31e28c*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xeb4758f0, ftCreationTime.dwHighDateTime=0x1d2ddf4, ftLastAccessTime.dwLowDateTime=0xeb4758f0, ftLastAccessTime.dwHighDateTime=0x1d2ddf4, ftLastWriteTime.dwLowDateTime=0xeb4758f0, ftLastWriteTime.dwHighDateTime=0x1d2ddf4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x382040 [0078.098] FindNextFileW (in: hFindFile=0x382040, lpFindFileData=0x31e29c | out: lpFindFileData=0x31e29c*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xeb4758f0, ftCreationTime.dwHighDateTime=0x1d2ddf4, ftLastAccessTime.dwLowDateTime=0xeb4758f0, ftLastAccessTime.dwHighDateTime=0x1d2ddf4, ftLastWriteTime.dwLowDateTime=0xeb4758f0, ftLastWriteTime.dwHighDateTime=0x1d2ddf4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0078.098] FindNextFileW (in: hFindFile=0x382040, lpFindFileData=0x31e29c | out: lpFindFileData=0x31e29c*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xeb4758f0, ftCreationTime.dwHighDateTime=0x1d2ddf4, ftLastAccessTime.dwLowDateTime=0xeb4758f0, ftLastAccessTime.dwHighDateTime=0x1d2ddf4, ftLastWriteTime.dwLowDateTime=0xeb4758f0, ftLastWriteTime.dwHighDateTime=0x1d2ddf4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 0 [0078.098] FindClose (in: hFindFile=0x382040 | out: hFindFile=0x382040) returned 1 [0078.098] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e524) returned 1 [0078.098] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e530) returned 1 [0078.098] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e564) returned 1 [0078.098] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Adobe\\Linguistics\\Dictionaries\\Adobe Custom Dictionary\\dut", nBufferLength=0x105, lpBuffer=0x31e06c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Adobe\\Linguistics\\Dictionaries\\Adobe Custom Dictionary\\dut", lpFilePart=0x0) returned 0x69 [0078.098] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Adobe\\Linguistics\\Dictionaries\\Adobe Custom Dictionary\\dut\\", nBufferLength=0x105, lpBuffer=0x31e040, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Adobe\\Linguistics\\Dictionaries\\Adobe Custom Dictionary\\dut\\", lpFilePart=0x0) returned 0x6a [0078.098] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Adobe\\Linguistics\\Dictionaries\\Adobe Custom Dictionary\\dut\\*", lpFindFileData=0x31e28c | out: lpFindFileData=0x31e28c*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xebdabf50, ftCreationTime.dwHighDateTime=0x1d2ddf4, ftLastAccessTime.dwLowDateTime=0xebdabf50, ftLastAccessTime.dwHighDateTime=0x1d2ddf4, ftLastWriteTime.dwLowDateTime=0xebdabf50, ftLastWriteTime.dwHighDateTime=0x1d2ddf4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x382040 [0078.099] FindNextFileW (in: hFindFile=0x382040, lpFindFileData=0x31e29c | out: lpFindFileData=0x31e29c*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xebdabf50, ftCreationTime.dwHighDateTime=0x1d2ddf4, ftLastAccessTime.dwLowDateTime=0xebdabf50, ftLastAccessTime.dwHighDateTime=0x1d2ddf4, ftLastWriteTime.dwLowDateTime=0xebdabf50, ftLastWriteTime.dwHighDateTime=0x1d2ddf4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0078.099] FindNextFileW (in: hFindFile=0x382040, lpFindFileData=0x31e29c | out: lpFindFileData=0x31e29c*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xebdabf50, ftCreationTime.dwHighDateTime=0x1d2ddf4, ftLastAccessTime.dwLowDateTime=0xebdabf50, ftLastAccessTime.dwHighDateTime=0x1d2ddf4, ftLastWriteTime.dwLowDateTime=0xebdabf50, ftLastWriteTime.dwHighDateTime=0x1d2ddf4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 0 [0078.099] FindClose (in: hFindFile=0x382040 | out: hFindFile=0x382040) returned 1 [0078.099] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e524) returned 1 [0078.099] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e530) returned 1 [0078.099] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e564) returned 1 [0078.099] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Adobe\\Linguistics\\Dictionaries\\Adobe Custom Dictionary\\dut", nBufferLength=0x105, lpBuffer=0x31e06c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Adobe\\Linguistics\\Dictionaries\\Adobe Custom Dictionary\\dut", lpFilePart=0x0) returned 0x69 [0078.099] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Adobe\\Linguistics\\Dictionaries\\Adobe Custom Dictionary\\dut\\", nBufferLength=0x105, lpBuffer=0x31e040, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Adobe\\Linguistics\\Dictionaries\\Adobe Custom Dictionary\\dut\\", lpFilePart=0x0) returned 0x6a [0078.099] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Adobe\\Linguistics\\Dictionaries\\Adobe Custom Dictionary\\dut\\*", lpFindFileData=0x31e28c | out: lpFindFileData=0x31e28c*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xebdabf50, ftCreationTime.dwHighDateTime=0x1d2ddf4, ftLastAccessTime.dwLowDateTime=0xebdabf50, ftLastAccessTime.dwHighDateTime=0x1d2ddf4, ftLastWriteTime.dwLowDateTime=0xebdabf50, ftLastWriteTime.dwHighDateTime=0x1d2ddf4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x382040 [0078.099] FindNextFileW (in: hFindFile=0x382040, lpFindFileData=0x31e29c | out: lpFindFileData=0x31e29c*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xebdabf50, ftCreationTime.dwHighDateTime=0x1d2ddf4, ftLastAccessTime.dwLowDateTime=0xebdabf50, ftLastAccessTime.dwHighDateTime=0x1d2ddf4, ftLastWriteTime.dwLowDateTime=0xebdabf50, ftLastWriteTime.dwHighDateTime=0x1d2ddf4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0078.099] FindNextFileW (in: hFindFile=0x382040, lpFindFileData=0x31e29c | out: lpFindFileData=0x31e29c*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xebdabf50, ftCreationTime.dwHighDateTime=0x1d2ddf4, ftLastAccessTime.dwLowDateTime=0xebdabf50, ftLastAccessTime.dwHighDateTime=0x1d2ddf4, ftLastWriteTime.dwLowDateTime=0xebdabf50, ftLastWriteTime.dwHighDateTime=0x1d2ddf4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 0 [0078.100] FindClose (in: hFindFile=0x382040 | out: hFindFile=0x382040) returned 1 [0078.100] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e524) returned 1 [0078.100] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e530) returned 1 [0078.100] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e564) returned 1 [0078.100] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Adobe\\Linguistics\\Dictionaries\\Adobe Custom Dictionary\\eng", nBufferLength=0x105, lpBuffer=0x31e06c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Adobe\\Linguistics\\Dictionaries\\Adobe Custom Dictionary\\eng", lpFilePart=0x0) returned 0x69 [0078.100] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Adobe\\Linguistics\\Dictionaries\\Adobe Custom Dictionary\\eng\\", nBufferLength=0x105, lpBuffer=0x31e040, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Adobe\\Linguistics\\Dictionaries\\Adobe Custom Dictionary\\eng\\", lpFilePart=0x0) returned 0x6a [0078.100] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Adobe\\Linguistics\\Dictionaries\\Adobe Custom Dictionary\\eng\\*", lpFindFileData=0x31e28c | out: lpFindFileData=0x31e28c*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe9487bb0, ftCreationTime.dwHighDateTime=0x1d2ddf4, ftLastAccessTime.dwLowDateTime=0xe9487bb0, ftLastAccessTime.dwHighDateTime=0x1d2ddf4, ftLastWriteTime.dwLowDateTime=0xe9487bb0, ftLastWriteTime.dwHighDateTime=0x1d2ddf4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x382040 [0078.100] FindNextFileW (in: hFindFile=0x382040, lpFindFileData=0x31e29c | out: lpFindFileData=0x31e29c*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe9487bb0, ftCreationTime.dwHighDateTime=0x1d2ddf4, ftLastAccessTime.dwLowDateTime=0xe9487bb0, ftLastAccessTime.dwHighDateTime=0x1d2ddf4, ftLastWriteTime.dwLowDateTime=0xe9487bb0, ftLastWriteTime.dwHighDateTime=0x1d2ddf4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0078.100] FindNextFileW (in: hFindFile=0x382040, lpFindFileData=0x31e29c | out: lpFindFileData=0x31e29c*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe9487bb0, ftCreationTime.dwHighDateTime=0x1d2ddf4, ftLastAccessTime.dwLowDateTime=0xe9487bb0, ftLastAccessTime.dwHighDateTime=0x1d2ddf4, ftLastWriteTime.dwLowDateTime=0xe9487bb0, ftLastWriteTime.dwHighDateTime=0x1d2ddf4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 0 [0078.100] FindClose (in: hFindFile=0x382040 | out: hFindFile=0x382040) returned 1 [0078.100] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e524) returned 1 [0078.100] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e530) returned 1 [0078.100] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e564) returned 1 [0078.100] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Adobe\\Linguistics\\Dictionaries\\Adobe Custom Dictionary\\eng", nBufferLength=0x105, lpBuffer=0x31e06c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Adobe\\Linguistics\\Dictionaries\\Adobe Custom Dictionary\\eng", lpFilePart=0x0) returned 0x69 [0078.100] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Adobe\\Linguistics\\Dictionaries\\Adobe Custom Dictionary\\eng\\", nBufferLength=0x105, lpBuffer=0x31e040, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Adobe\\Linguistics\\Dictionaries\\Adobe Custom Dictionary\\eng\\", lpFilePart=0x0) returned 0x6a [0078.100] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Adobe\\Linguistics\\Dictionaries\\Adobe Custom Dictionary\\eng\\*", lpFindFileData=0x31e28c | out: lpFindFileData=0x31e28c*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe9487bb0, ftCreationTime.dwHighDateTime=0x1d2ddf4, ftLastAccessTime.dwLowDateTime=0xe9487bb0, ftLastAccessTime.dwHighDateTime=0x1d2ddf4, ftLastWriteTime.dwLowDateTime=0xe9487bb0, ftLastWriteTime.dwHighDateTime=0x1d2ddf4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x382040 [0078.101] FindNextFileW (in: hFindFile=0x382040, lpFindFileData=0x31e29c | out: lpFindFileData=0x31e29c*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe9487bb0, ftCreationTime.dwHighDateTime=0x1d2ddf4, ftLastAccessTime.dwLowDateTime=0xe9487bb0, ftLastAccessTime.dwHighDateTime=0x1d2ddf4, ftLastWriteTime.dwLowDateTime=0xe9487bb0, ftLastWriteTime.dwHighDateTime=0x1d2ddf4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0078.101] FindNextFileW (in: hFindFile=0x382040, lpFindFileData=0x31e29c | out: lpFindFileData=0x31e29c*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe9487bb0, ftCreationTime.dwHighDateTime=0x1d2ddf4, ftLastAccessTime.dwLowDateTime=0xe9487bb0, ftLastAccessTime.dwHighDateTime=0x1d2ddf4, ftLastWriteTime.dwLowDateTime=0xe9487bb0, ftLastWriteTime.dwHighDateTime=0x1d2ddf4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 0 [0078.101] FindClose (in: hFindFile=0x382040 | out: hFindFile=0x382040) returned 1 [0078.101] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e524) returned 1 [0078.101] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e530) returned 1 [0078.101] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e564) returned 1 [0078.101] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Adobe\\Linguistics\\Dictionaries\\Adobe Custom Dictionary\\frn", nBufferLength=0x105, lpBuffer=0x31e06c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Adobe\\Linguistics\\Dictionaries\\Adobe Custom Dictionary\\frn", lpFilePart=0x0) returned 0x69 [0078.101] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Adobe\\Linguistics\\Dictionaries\\Adobe Custom Dictionary\\frn\\", nBufferLength=0x105, lpBuffer=0x31e040, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Adobe\\Linguistics\\Dictionaries\\Adobe Custom Dictionary\\frn\\", lpFilePart=0x0) returned 0x6a [0078.101] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Adobe\\Linguistics\\Dictionaries\\Adobe Custom Dictionary\\frn\\*", lpFindFileData=0x31e28c | out: lpFindFileData=0x31e28c*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe9d9af90, ftCreationTime.dwHighDateTime=0x1d2ddf4, ftLastAccessTime.dwLowDateTime=0xe9d9af90, ftLastAccessTime.dwHighDateTime=0x1d2ddf4, ftLastWriteTime.dwLowDateTime=0xe9d9af90, ftLastWriteTime.dwHighDateTime=0x1d2ddf4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x382040 [0078.101] FindNextFileW (in: hFindFile=0x382040, lpFindFileData=0x31e29c | out: lpFindFileData=0x31e29c*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe9d9af90, ftCreationTime.dwHighDateTime=0x1d2ddf4, ftLastAccessTime.dwLowDateTime=0xe9d9af90, ftLastAccessTime.dwHighDateTime=0x1d2ddf4, ftLastWriteTime.dwLowDateTime=0xe9d9af90, ftLastWriteTime.dwHighDateTime=0x1d2ddf4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0078.102] FindNextFileW (in: hFindFile=0x382040, lpFindFileData=0x31e29c | out: lpFindFileData=0x31e29c*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe9d9af90, ftCreationTime.dwHighDateTime=0x1d2ddf4, ftLastAccessTime.dwLowDateTime=0xe9d9af90, ftLastAccessTime.dwHighDateTime=0x1d2ddf4, ftLastWriteTime.dwLowDateTime=0xe9d9af90, ftLastWriteTime.dwHighDateTime=0x1d2ddf4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 0 [0078.102] FindClose (in: hFindFile=0x382040 | out: hFindFile=0x382040) returned 1 [0078.102] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e524) returned 1 [0078.102] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e530) returned 1 [0078.102] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e564) returned 1 [0078.102] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Adobe\\Linguistics\\Dictionaries\\Adobe Custom Dictionary\\frn", nBufferLength=0x105, lpBuffer=0x31e06c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Adobe\\Linguistics\\Dictionaries\\Adobe Custom Dictionary\\frn", lpFilePart=0x0) returned 0x69 [0078.102] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Adobe\\Linguistics\\Dictionaries\\Adobe Custom Dictionary\\frn\\", nBufferLength=0x105, lpBuffer=0x31e040, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Adobe\\Linguistics\\Dictionaries\\Adobe Custom Dictionary\\frn\\", lpFilePart=0x0) returned 0x6a [0078.102] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Adobe\\Linguistics\\Dictionaries\\Adobe Custom Dictionary\\frn\\*", lpFindFileData=0x31e28c | out: lpFindFileData=0x31e28c*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe9d9af90, ftCreationTime.dwHighDateTime=0x1d2ddf4, ftLastAccessTime.dwLowDateTime=0xe9d9af90, ftLastAccessTime.dwHighDateTime=0x1d2ddf4, ftLastWriteTime.dwLowDateTime=0xe9d9af90, ftLastWriteTime.dwHighDateTime=0x1d2ddf4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x382040 [0078.102] FindNextFileW (in: hFindFile=0x382040, lpFindFileData=0x31e29c | out: lpFindFileData=0x31e29c*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe9d9af90, ftCreationTime.dwHighDateTime=0x1d2ddf4, ftLastAccessTime.dwLowDateTime=0xe9d9af90, ftLastAccessTime.dwHighDateTime=0x1d2ddf4, ftLastWriteTime.dwLowDateTime=0xe9d9af90, ftLastWriteTime.dwHighDateTime=0x1d2ddf4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0078.102] FindNextFileW (in: hFindFile=0x382040, lpFindFileData=0x31e29c | out: lpFindFileData=0x31e29c*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe9d9af90, ftCreationTime.dwHighDateTime=0x1d2ddf4, ftLastAccessTime.dwLowDateTime=0xe9d9af90, ftLastAccessTime.dwHighDateTime=0x1d2ddf4, ftLastWriteTime.dwLowDateTime=0xe9d9af90, ftLastWriteTime.dwHighDateTime=0x1d2ddf4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 0 [0078.102] FindClose (in: hFindFile=0x382040 | out: hFindFile=0x382040) returned 1 [0078.102] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e524) returned 1 [0078.102] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e530) returned 1 [0078.103] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e564) returned 1 [0078.103] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Adobe\\Linguistics\\Dictionaries\\Adobe Custom Dictionary\\grm", nBufferLength=0x105, lpBuffer=0x31e06c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Adobe\\Linguistics\\Dictionaries\\Adobe Custom Dictionary\\grm", lpFilePart=0x0) returned 0x69 [0078.103] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Adobe\\Linguistics\\Dictionaries\\Adobe Custom Dictionary\\grm\\", nBufferLength=0x105, lpBuffer=0x31e040, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Adobe\\Linguistics\\Dictionaries\\Adobe Custom Dictionary\\grm\\", lpFilePart=0x0) returned 0x6a [0078.103] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Adobe\\Linguistics\\Dictionaries\\Adobe Custom Dictionary\\grm\\*", lpFindFileData=0x31e28c | out: lpFindFileData=0x31e28c*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe9924650, ftCreationTime.dwHighDateTime=0x1d2ddf4, ftLastAccessTime.dwLowDateTime=0xe9924650, ftLastAccessTime.dwHighDateTime=0x1d2ddf4, ftLastWriteTime.dwLowDateTime=0xe9924650, ftLastWriteTime.dwHighDateTime=0x1d2ddf4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x382040 [0078.103] FindNextFileW (in: hFindFile=0x382040, lpFindFileData=0x31e29c | out: lpFindFileData=0x31e29c*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe9924650, ftCreationTime.dwHighDateTime=0x1d2ddf4, ftLastAccessTime.dwLowDateTime=0xe9924650, ftLastAccessTime.dwHighDateTime=0x1d2ddf4, ftLastWriteTime.dwLowDateTime=0xe9924650, ftLastWriteTime.dwHighDateTime=0x1d2ddf4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0078.103] FindNextFileW (in: hFindFile=0x382040, lpFindFileData=0x31e29c | out: lpFindFileData=0x31e29c*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe9924650, ftCreationTime.dwHighDateTime=0x1d2ddf4, ftLastAccessTime.dwLowDateTime=0xe9924650, ftLastAccessTime.dwHighDateTime=0x1d2ddf4, ftLastWriteTime.dwLowDateTime=0xe9924650, ftLastWriteTime.dwHighDateTime=0x1d2ddf4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 0 [0078.103] FindClose (in: hFindFile=0x382040 | out: hFindFile=0x382040) returned 1 [0078.103] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e524) returned 1 [0078.103] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e530) returned 1 [0078.103] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e564) returned 1 [0078.103] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Adobe\\Linguistics\\Dictionaries\\Adobe Custom Dictionary\\grm", nBufferLength=0x105, lpBuffer=0x31e06c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Adobe\\Linguistics\\Dictionaries\\Adobe Custom Dictionary\\grm", lpFilePart=0x0) returned 0x69 [0078.103] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Adobe\\Linguistics\\Dictionaries\\Adobe Custom Dictionary\\grm\\", nBufferLength=0x105, lpBuffer=0x31e040, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Adobe\\Linguistics\\Dictionaries\\Adobe Custom Dictionary\\grm\\", lpFilePart=0x0) returned 0x6a [0078.103] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Adobe\\Linguistics\\Dictionaries\\Adobe Custom Dictionary\\grm\\*", lpFindFileData=0x31e28c | out: lpFindFileData=0x31e28c*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe9924650, ftCreationTime.dwHighDateTime=0x1d2ddf4, ftLastAccessTime.dwLowDateTime=0xe9924650, ftLastAccessTime.dwHighDateTime=0x1d2ddf4, ftLastWriteTime.dwLowDateTime=0xe9924650, ftLastWriteTime.dwHighDateTime=0x1d2ddf4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x382040 [0078.104] FindNextFileW (in: hFindFile=0x382040, lpFindFileData=0x31e29c | out: lpFindFileData=0x31e29c*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe9924650, ftCreationTime.dwHighDateTime=0x1d2ddf4, ftLastAccessTime.dwLowDateTime=0xe9924650, ftLastAccessTime.dwHighDateTime=0x1d2ddf4, ftLastWriteTime.dwLowDateTime=0xe9924650, ftLastWriteTime.dwHighDateTime=0x1d2ddf4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0078.104] FindNextFileW (in: hFindFile=0x382040, lpFindFileData=0x31e29c | out: lpFindFileData=0x31e29c*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe9924650, ftCreationTime.dwHighDateTime=0x1d2ddf4, ftLastAccessTime.dwLowDateTime=0xe9924650, ftLastAccessTime.dwHighDateTime=0x1d2ddf4, ftLastWriteTime.dwLowDateTime=0xe9924650, ftLastWriteTime.dwHighDateTime=0x1d2ddf4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 0 [0078.104] FindClose (in: hFindFile=0x382040 | out: hFindFile=0x382040) returned 1 [0078.104] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e524) returned 1 [0078.104] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e530) returned 1 [0078.104] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e564) returned 1 [0078.104] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Adobe\\Linguistics\\Dictionaries\\Adobe Custom Dictionary\\itl", nBufferLength=0x105, lpBuffer=0x31e06c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Adobe\\Linguistics\\Dictionaries\\Adobe Custom Dictionary\\itl", lpFilePart=0x0) returned 0x69 [0078.104] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Adobe\\Linguistics\\Dictionaries\\Adobe Custom Dictionary\\itl\\", nBufferLength=0x105, lpBuffer=0x31e040, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Adobe\\Linguistics\\Dictionaries\\Adobe Custom Dictionary\\itl\\", lpFilePart=0x0) returned 0x6a [0078.104] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Adobe\\Linguistics\\Dictionaries\\Adobe Custom Dictionary\\itl\\*", lpFindFileData=0x31e28c | out: lpFindFileData=0x31e28c*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xea6d44d0, ftCreationTime.dwHighDateTime=0x1d2ddf4, ftLastAccessTime.dwLowDateTime=0xea6d44d0, ftLastAccessTime.dwHighDateTime=0x1d2ddf4, ftLastWriteTime.dwLowDateTime=0xea6d44d0, ftLastWriteTime.dwHighDateTime=0x1d2ddf4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x382040 [0078.104] FindNextFileW (in: hFindFile=0x382040, lpFindFileData=0x31e29c | out: lpFindFileData=0x31e29c*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xea6d44d0, ftCreationTime.dwHighDateTime=0x1d2ddf4, ftLastAccessTime.dwLowDateTime=0xea6d44d0, ftLastAccessTime.dwHighDateTime=0x1d2ddf4, ftLastWriteTime.dwLowDateTime=0xea6d44d0, ftLastWriteTime.dwHighDateTime=0x1d2ddf4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0078.105] FindNextFileW (in: hFindFile=0x382040, lpFindFileData=0x31e29c | out: lpFindFileData=0x31e29c*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xea6d44d0, ftCreationTime.dwHighDateTime=0x1d2ddf4, ftLastAccessTime.dwLowDateTime=0xea6d44d0, ftLastAccessTime.dwHighDateTime=0x1d2ddf4, ftLastWriteTime.dwLowDateTime=0xea6d44d0, ftLastWriteTime.dwHighDateTime=0x1d2ddf4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 0 [0078.105] FindClose (in: hFindFile=0x382040 | out: hFindFile=0x382040) returned 1 [0078.105] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e524) returned 1 [0078.105] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e530) returned 1 [0078.105] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e564) returned 1 [0078.105] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Adobe\\Linguistics\\Dictionaries\\Adobe Custom Dictionary\\itl", nBufferLength=0x105, lpBuffer=0x31e06c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Adobe\\Linguistics\\Dictionaries\\Adobe Custom Dictionary\\itl", lpFilePart=0x0) returned 0x69 [0078.105] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Adobe\\Linguistics\\Dictionaries\\Adobe Custom Dictionary\\itl\\", nBufferLength=0x105, lpBuffer=0x31e040, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Adobe\\Linguistics\\Dictionaries\\Adobe Custom Dictionary\\itl\\", lpFilePart=0x0) returned 0x6a [0078.105] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Adobe\\Linguistics\\Dictionaries\\Adobe Custom Dictionary\\itl\\*", lpFindFileData=0x31e28c | out: lpFindFileData=0x31e28c*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xea6d44d0, ftCreationTime.dwHighDateTime=0x1d2ddf4, ftLastAccessTime.dwLowDateTime=0xea6d44d0, ftLastAccessTime.dwHighDateTime=0x1d2ddf4, ftLastWriteTime.dwLowDateTime=0xea6d44d0, ftLastWriteTime.dwHighDateTime=0x1d2ddf4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x382040 [0078.105] FindNextFileW (in: hFindFile=0x382040, lpFindFileData=0x31e29c | out: lpFindFileData=0x31e29c*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xea6d44d0, ftCreationTime.dwHighDateTime=0x1d2ddf4, ftLastAccessTime.dwLowDateTime=0xea6d44d0, ftLastAccessTime.dwHighDateTime=0x1d2ddf4, ftLastWriteTime.dwLowDateTime=0xea6d44d0, ftLastWriteTime.dwHighDateTime=0x1d2ddf4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0078.105] FindNextFileW (in: hFindFile=0x382040, lpFindFileData=0x31e29c | out: lpFindFileData=0x31e29c*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xea6d44d0, ftCreationTime.dwHighDateTime=0x1d2ddf4, ftLastAccessTime.dwLowDateTime=0xea6d44d0, ftLastAccessTime.dwHighDateTime=0x1d2ddf4, ftLastWriteTime.dwLowDateTime=0xea6d44d0, ftLastWriteTime.dwHighDateTime=0x1d2ddf4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 0 [0078.105] FindClose (in: hFindFile=0x382040 | out: hFindFile=0x382040) returned 1 [0078.105] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e524) returned 1 [0078.105] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e530) returned 1 [0078.105] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e564) returned 1 [0078.105] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Adobe\\Linguistics\\Dictionaries\\Adobe Custom Dictionary\\nrw", nBufferLength=0x105, lpBuffer=0x31e06c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Adobe\\Linguistics\\Dictionaries\\Adobe Custom Dictionary\\nrw", lpFilePart=0x0) returned 0x69 [0078.105] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Adobe\\Linguistics\\Dictionaries\\Adobe Custom Dictionary\\nrw\\", nBufferLength=0x105, lpBuffer=0x31e040, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Adobe\\Linguistics\\Dictionaries\\Adobe Custom Dictionary\\nrw\\", lpFilePart=0x0) returned 0x6a [0078.106] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Adobe\\Linguistics\\Dictionaries\\Adobe Custom Dictionary\\nrw\\*", lpFindFileData=0x31e28c | out: lpFindFileData=0x31e28c*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xeb90f4b0, ftCreationTime.dwHighDateTime=0x1d2ddf4, ftLastAccessTime.dwLowDateTime=0xeb90f4b0, ftLastAccessTime.dwHighDateTime=0x1d2ddf4, ftLastWriteTime.dwLowDateTime=0xeb90f4b0, ftLastWriteTime.dwHighDateTime=0x1d2ddf4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x382040 [0078.106] FindNextFileW (in: hFindFile=0x382040, lpFindFileData=0x31e29c | out: lpFindFileData=0x31e29c*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xeb90f4b0, ftCreationTime.dwHighDateTime=0x1d2ddf4, ftLastAccessTime.dwLowDateTime=0xeb90f4b0, ftLastAccessTime.dwHighDateTime=0x1d2ddf4, ftLastWriteTime.dwLowDateTime=0xeb90f4b0, ftLastWriteTime.dwHighDateTime=0x1d2ddf4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0078.106] FindNextFileW (in: hFindFile=0x382040, lpFindFileData=0x31e29c | out: lpFindFileData=0x31e29c*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xeb90f4b0, ftCreationTime.dwHighDateTime=0x1d2ddf4, ftLastAccessTime.dwLowDateTime=0xeb90f4b0, ftLastAccessTime.dwHighDateTime=0x1d2ddf4, ftLastWriteTime.dwLowDateTime=0xeb90f4b0, ftLastWriteTime.dwHighDateTime=0x1d2ddf4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 0 [0078.106] FindClose (in: hFindFile=0x382040 | out: hFindFile=0x382040) returned 1 [0078.106] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e524) returned 1 [0078.106] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e530) returned 1 [0078.106] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e564) returned 1 [0078.106] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Adobe\\Linguistics\\Dictionaries\\Adobe Custom Dictionary\\nrw", nBufferLength=0x105, lpBuffer=0x31e06c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Adobe\\Linguistics\\Dictionaries\\Adobe Custom Dictionary\\nrw", lpFilePart=0x0) returned 0x69 [0078.106] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Adobe\\Linguistics\\Dictionaries\\Adobe Custom Dictionary\\nrw\\", nBufferLength=0x105, lpBuffer=0x31e040, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Adobe\\Linguistics\\Dictionaries\\Adobe Custom Dictionary\\nrw\\", lpFilePart=0x0) returned 0x6a [0078.106] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Adobe\\Linguistics\\Dictionaries\\Adobe Custom Dictionary\\nrw\\*", lpFindFileData=0x31e28c | out: lpFindFileData=0x31e28c*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xeb90f4b0, ftCreationTime.dwHighDateTime=0x1d2ddf4, ftLastAccessTime.dwLowDateTime=0xeb90f4b0, ftLastAccessTime.dwHighDateTime=0x1d2ddf4, ftLastWriteTime.dwLowDateTime=0xeb90f4b0, ftLastWriteTime.dwHighDateTime=0x1d2ddf4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x382040 [0078.107] FindNextFileW (in: hFindFile=0x382040, lpFindFileData=0x31e29c | out: lpFindFileData=0x31e29c*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xeb90f4b0, ftCreationTime.dwHighDateTime=0x1d2ddf4, ftLastAccessTime.dwLowDateTime=0xeb90f4b0, ftLastAccessTime.dwHighDateTime=0x1d2ddf4, ftLastWriteTime.dwLowDateTime=0xeb90f4b0, ftLastWriteTime.dwHighDateTime=0x1d2ddf4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0078.107] FindNextFileW (in: hFindFile=0x382040, lpFindFileData=0x31e29c | out: lpFindFileData=0x31e29c*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xeb90f4b0, ftCreationTime.dwHighDateTime=0x1d2ddf4, ftLastAccessTime.dwLowDateTime=0xeb90f4b0, ftLastAccessTime.dwHighDateTime=0x1d2ddf4, ftLastWriteTime.dwLowDateTime=0xeb90f4b0, ftLastWriteTime.dwHighDateTime=0x1d2ddf4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 0 [0078.107] FindClose (in: hFindFile=0x382040 | out: hFindFile=0x382040) returned 1 [0078.107] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e524) returned 1 [0078.107] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e530) returned 1 [0078.107] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e564) returned 1 [0078.107] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Adobe\\Linguistics\\Dictionaries\\Adobe Custom Dictionary\\prt", nBufferLength=0x105, lpBuffer=0x31e06c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Adobe\\Linguistics\\Dictionaries\\Adobe Custom Dictionary\\prt", lpFilePart=0x0) returned 0x69 [0078.107] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Adobe\\Linguistics\\Dictionaries\\Adobe Custom Dictionary\\prt\\", nBufferLength=0x105, lpBuffer=0x31e040, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Adobe\\Linguistics\\Dictionaries\\Adobe Custom Dictionary\\prt\\", lpFilePart=0x0) returned 0x6a [0078.107] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Adobe\\Linguistics\\Dictionaries\\Adobe Custom Dictionary\\prt\\*", lpFindFileData=0x31e28c | out: lpFindFileData=0x31e28c*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xec2489f0, ftCreationTime.dwHighDateTime=0x1d2ddf4, ftLastAccessTime.dwLowDateTime=0xec2489f0, ftLastAccessTime.dwHighDateTime=0x1d2ddf4, ftLastWriteTime.dwLowDateTime=0xec2489f0, ftLastWriteTime.dwHighDateTime=0x1d2ddf4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x382040 [0078.107] FindNextFileW (in: hFindFile=0x382040, lpFindFileData=0x31e29c | out: lpFindFileData=0x31e29c*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xec2489f0, ftCreationTime.dwHighDateTime=0x1d2ddf4, ftLastAccessTime.dwLowDateTime=0xec2489f0, ftLastAccessTime.dwHighDateTime=0x1d2ddf4, ftLastWriteTime.dwLowDateTime=0xec2489f0, ftLastWriteTime.dwHighDateTime=0x1d2ddf4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0078.107] FindNextFileW (in: hFindFile=0x382040, lpFindFileData=0x31e29c | out: lpFindFileData=0x31e29c*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xec2489f0, ftCreationTime.dwHighDateTime=0x1d2ddf4, ftLastAccessTime.dwLowDateTime=0xec2489f0, ftLastAccessTime.dwHighDateTime=0x1d2ddf4, ftLastWriteTime.dwLowDateTime=0xec2489f0, ftLastWriteTime.dwHighDateTime=0x1d2ddf4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 0 [0078.108] FindClose (in: hFindFile=0x382040 | out: hFindFile=0x382040) returned 1 [0078.108] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e524) returned 1 [0078.108] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e530) returned 1 [0078.108] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e564) returned 1 [0078.108] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Adobe\\Linguistics\\Dictionaries\\Adobe Custom Dictionary\\prt", nBufferLength=0x105, lpBuffer=0x31e06c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Adobe\\Linguistics\\Dictionaries\\Adobe Custom Dictionary\\prt", lpFilePart=0x0) returned 0x69 [0078.108] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Adobe\\Linguistics\\Dictionaries\\Adobe Custom Dictionary\\prt\\", nBufferLength=0x105, lpBuffer=0x31e040, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Adobe\\Linguistics\\Dictionaries\\Adobe Custom Dictionary\\prt\\", lpFilePart=0x0) returned 0x6a [0078.108] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Adobe\\Linguistics\\Dictionaries\\Adobe Custom Dictionary\\prt\\*", lpFindFileData=0x31e28c | out: lpFindFileData=0x31e28c*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xec2489f0, ftCreationTime.dwHighDateTime=0x1d2ddf4, ftLastAccessTime.dwLowDateTime=0xec2489f0, ftLastAccessTime.dwHighDateTime=0x1d2ddf4, ftLastWriteTime.dwLowDateTime=0xec2489f0, ftLastWriteTime.dwHighDateTime=0x1d2ddf4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x382040 [0078.108] FindNextFileW (in: hFindFile=0x382040, lpFindFileData=0x31e29c | out: lpFindFileData=0x31e29c*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xec2489f0, ftCreationTime.dwHighDateTime=0x1d2ddf4, ftLastAccessTime.dwLowDateTime=0xec2489f0, ftLastAccessTime.dwHighDateTime=0x1d2ddf4, ftLastWriteTime.dwLowDateTime=0xec2489f0, ftLastWriteTime.dwHighDateTime=0x1d2ddf4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0078.108] FindNextFileW (in: hFindFile=0x382040, lpFindFileData=0x31e29c | out: lpFindFileData=0x31e29c*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xec2489f0, ftCreationTime.dwHighDateTime=0x1d2ddf4, ftLastAccessTime.dwLowDateTime=0xec2489f0, ftLastAccessTime.dwHighDateTime=0x1d2ddf4, ftLastWriteTime.dwLowDateTime=0xec2489f0, ftLastWriteTime.dwHighDateTime=0x1d2ddf4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 0 [0078.108] FindClose (in: hFindFile=0x382040 | out: hFindFile=0x382040) returned 1 [0078.108] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e524) returned 1 [0078.108] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e530) returned 1 [0078.108] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e564) returned 1 [0078.108] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Adobe\\Linguistics\\Dictionaries\\Adobe Custom Dictionary\\spn", nBufferLength=0x105, lpBuffer=0x31e06c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Adobe\\Linguistics\\Dictionaries\\Adobe Custom Dictionary\\spn", lpFilePart=0x0) returned 0x69 [0078.108] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Adobe\\Linguistics\\Dictionaries\\Adobe Custom Dictionary\\spn\\", nBufferLength=0x105, lpBuffer=0x31e040, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Adobe\\Linguistics\\Dictionaries\\Adobe Custom Dictionary\\spn\\", lpFilePart=0x0) returned 0x6a [0078.109] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Adobe\\Linguistics\\Dictionaries\\Adobe Custom Dictionary\\spn\\*", lpFindFileData=0x31e28c | out: lpFindFileData=0x31e28c*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xea237a30, ftCreationTime.dwHighDateTime=0x1d2ddf4, ftLastAccessTime.dwLowDateTime=0xea237a30, ftLastAccessTime.dwHighDateTime=0x1d2ddf4, ftLastWriteTime.dwLowDateTime=0xea237a30, ftLastWriteTime.dwHighDateTime=0x1d2ddf4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x382040 [0078.109] FindNextFileW (in: hFindFile=0x382040, lpFindFileData=0x31e29c | out: lpFindFileData=0x31e29c*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xea237a30, ftCreationTime.dwHighDateTime=0x1d2ddf4, ftLastAccessTime.dwLowDateTime=0xea237a30, ftLastAccessTime.dwHighDateTime=0x1d2ddf4, ftLastWriteTime.dwLowDateTime=0xea237a30, ftLastWriteTime.dwHighDateTime=0x1d2ddf4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0078.109] FindNextFileW (in: hFindFile=0x382040, lpFindFileData=0x31e29c | out: lpFindFileData=0x31e29c*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xea237a30, ftCreationTime.dwHighDateTime=0x1d2ddf4, ftLastAccessTime.dwLowDateTime=0xea237a30, ftLastAccessTime.dwHighDateTime=0x1d2ddf4, ftLastWriteTime.dwLowDateTime=0xea237a30, ftLastWriteTime.dwHighDateTime=0x1d2ddf4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 0 [0078.109] FindClose (in: hFindFile=0x382040 | out: hFindFile=0x382040) returned 1 [0078.109] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e524) returned 1 [0078.109] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e530) returned 1 [0078.109] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e564) returned 1 [0078.109] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Adobe\\Linguistics\\Dictionaries\\Adobe Custom Dictionary\\spn", nBufferLength=0x105, lpBuffer=0x31e06c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Adobe\\Linguistics\\Dictionaries\\Adobe Custom Dictionary\\spn", lpFilePart=0x0) returned 0x69 [0078.109] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Adobe\\Linguistics\\Dictionaries\\Adobe Custom Dictionary\\spn\\", nBufferLength=0x105, lpBuffer=0x31e040, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Adobe\\Linguistics\\Dictionaries\\Adobe Custom Dictionary\\spn\\", lpFilePart=0x0) returned 0x6a [0078.109] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Adobe\\Linguistics\\Dictionaries\\Adobe Custom Dictionary\\spn\\*", lpFindFileData=0x31e28c | out: lpFindFileData=0x31e28c*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xea237a30, ftCreationTime.dwHighDateTime=0x1d2ddf4, ftLastAccessTime.dwLowDateTime=0xea237a30, ftLastAccessTime.dwHighDateTime=0x1d2ddf4, ftLastWriteTime.dwLowDateTime=0xea237a30, ftLastWriteTime.dwHighDateTime=0x1d2ddf4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x382040 [0078.109] FindNextFileW (in: hFindFile=0x382040, lpFindFileData=0x31e29c | out: lpFindFileData=0x31e29c*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xea237a30, ftCreationTime.dwHighDateTime=0x1d2ddf4, ftLastAccessTime.dwLowDateTime=0xea237a30, ftLastAccessTime.dwHighDateTime=0x1d2ddf4, ftLastWriteTime.dwLowDateTime=0xea237a30, ftLastWriteTime.dwHighDateTime=0x1d2ddf4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0078.110] FindNextFileW (in: hFindFile=0x382040, lpFindFileData=0x31e29c | out: lpFindFileData=0x31e29c*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xea237a30, ftCreationTime.dwHighDateTime=0x1d2ddf4, ftLastAccessTime.dwLowDateTime=0xea237a30, ftLastAccessTime.dwHighDateTime=0x1d2ddf4, ftLastWriteTime.dwLowDateTime=0xea237a30, ftLastWriteTime.dwHighDateTime=0x1d2ddf4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 0 [0078.110] FindClose (in: hFindFile=0x382040 | out: hFindFile=0x382040) returned 1 [0078.110] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e524) returned 1 [0078.110] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e530) returned 1 [0078.110] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e564) returned 1 [0078.110] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Adobe\\Linguistics\\Dictionaries\\Adobe Custom Dictionary\\swd", nBufferLength=0x105, lpBuffer=0x31e06c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Adobe\\Linguistics\\Dictionaries\\Adobe Custom Dictionary\\swd", lpFilePart=0x0) returned 0x69 [0078.110] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Adobe\\Linguistics\\Dictionaries\\Adobe Custom Dictionary\\swd\\", nBufferLength=0x105, lpBuffer=0x31e040, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Adobe\\Linguistics\\Dictionaries\\Adobe Custom Dictionary\\swd\\", lpFilePart=0x0) returned 0x6a [0078.110] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Adobe\\Linguistics\\Dictionaries\\Adobe Custom Dictionary\\swd\\*", lpFindFileData=0x31e28c | out: lpFindFileData=0x31e28c*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xeaffa190, ftCreationTime.dwHighDateTime=0x1d2ddf4, ftLastAccessTime.dwLowDateTime=0xeaffa190, ftLastAccessTime.dwHighDateTime=0x1d2ddf4, ftLastWriteTime.dwLowDateTime=0xeaffa190, ftLastWriteTime.dwHighDateTime=0x1d2ddf4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x382040 [0078.110] FindNextFileW (in: hFindFile=0x382040, lpFindFileData=0x31e29c | out: lpFindFileData=0x31e29c*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xeaffa190, ftCreationTime.dwHighDateTime=0x1d2ddf4, ftLastAccessTime.dwLowDateTime=0xeaffa190, ftLastAccessTime.dwHighDateTime=0x1d2ddf4, ftLastWriteTime.dwLowDateTime=0xeaffa190, ftLastWriteTime.dwHighDateTime=0x1d2ddf4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0078.110] FindNextFileW (in: hFindFile=0x382040, lpFindFileData=0x31e29c | out: lpFindFileData=0x31e29c*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xeaffa190, ftCreationTime.dwHighDateTime=0x1d2ddf4, ftLastAccessTime.dwLowDateTime=0xeaffa190, ftLastAccessTime.dwHighDateTime=0x1d2ddf4, ftLastWriteTime.dwLowDateTime=0xeaffa190, ftLastWriteTime.dwHighDateTime=0x1d2ddf4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 0 [0078.110] FindClose (in: hFindFile=0x382040 | out: hFindFile=0x382040) returned 1 [0078.111] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e524) returned 1 [0078.111] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e530) returned 1 [0078.111] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e564) returned 1 [0078.111] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Adobe\\Linguistics\\Dictionaries\\Adobe Custom Dictionary\\swd", nBufferLength=0x105, lpBuffer=0x31e06c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Adobe\\Linguistics\\Dictionaries\\Adobe Custom Dictionary\\swd", lpFilePart=0x0) returned 0x69 [0078.111] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Adobe\\Linguistics\\Dictionaries\\Adobe Custom Dictionary\\swd\\", nBufferLength=0x105, lpBuffer=0x31e040, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Adobe\\Linguistics\\Dictionaries\\Adobe Custom Dictionary\\swd\\", lpFilePart=0x0) returned 0x6a [0078.111] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Adobe\\Linguistics\\Dictionaries\\Adobe Custom Dictionary\\swd\\*", lpFindFileData=0x31e28c | out: lpFindFileData=0x31e28c*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xeaffa190, ftCreationTime.dwHighDateTime=0x1d2ddf4, ftLastAccessTime.dwLowDateTime=0xeaffa190, ftLastAccessTime.dwHighDateTime=0x1d2ddf4, ftLastWriteTime.dwLowDateTime=0xeaffa190, ftLastWriteTime.dwHighDateTime=0x1d2ddf4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x382040 [0078.111] FindNextFileW (in: hFindFile=0x382040, lpFindFileData=0x31e29c | out: lpFindFileData=0x31e29c*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xeaffa190, ftCreationTime.dwHighDateTime=0x1d2ddf4, ftLastAccessTime.dwLowDateTime=0xeaffa190, ftLastAccessTime.dwHighDateTime=0x1d2ddf4, ftLastWriteTime.dwLowDateTime=0xeaffa190, ftLastWriteTime.dwHighDateTime=0x1d2ddf4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0078.111] FindNextFileW (in: hFindFile=0x382040, lpFindFileData=0x31e29c | out: lpFindFileData=0x31e29c*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xeaffa190, ftCreationTime.dwHighDateTime=0x1d2ddf4, ftLastAccessTime.dwLowDateTime=0xeaffa190, ftLastAccessTime.dwHighDateTime=0x1d2ddf4, ftLastWriteTime.dwLowDateTime=0xeaffa190, ftLastWriteTime.dwHighDateTime=0x1d2ddf4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 0 [0078.111] FindClose (in: hFindFile=0x382040 | out: hFindFile=0x382040) returned 1 [0078.111] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e524) returned 1 [0078.111] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e530) returned 1 [0078.111] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e744) returned 1 [0078.111] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Microsoft", nBufferLength=0x105, lpBuffer=0x31e24c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Microsoft", lpFilePart=0x0) returned 0x38 [0078.111] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Microsoft\\", nBufferLength=0x105, lpBuffer=0x31e220, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Microsoft\\", lpFilePart=0x0) returned 0x39 [0078.111] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Microsoft\\*", lpFindFileData=0x31e46c | out: lpFindFileData=0x31e46c*(dwFileAttributes=0x2014, ftCreationTime.dwLowDateTime=0x28cff640, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0xcd708940, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0xcd708940, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x382040 [0078.112] FindNextFileW (in: hFindFile=0x382040, lpFindFileData=0x31e47c | out: lpFindFileData=0x31e47c*(dwFileAttributes=0x2014, ftCreationTime.dwLowDateTime=0x28cff640, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0xcd708940, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0xcd708940, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0078.112] FindNextFileW (in: hFindFile=0x382040, lpFindFileData=0x31e47c | out: lpFindFileData=0x31e47c*(dwFileAttributes=0x2014, ftCreationTime.dwLowDateTime=0x28cff640, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28cff640, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x23a43389, ftLastWriteTime.dwHighDateTime=0x1cb892f, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="CryptnetUrlCache", cAlternateFileName="CRYPTN~1")) returned 1 [0078.112] FindNextFileW (in: hFindFile=0x382040, lpFindFileData=0x31e47c | out: lpFindFileData=0x31e47c*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xcd708940, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0xcd708940, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0xcd708940, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="IME12", cAlternateFileName="")) returned 1 [0078.112] FindNextFileW (in: hFindFile=0x382040, lpFindFileData=0x31e47c | out: lpFindFileData=0x31e47c*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xcd708940, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0xcd708940, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0xcd708940, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="IMJP12", cAlternateFileName="")) returned 1 [0078.112] FindNextFileW (in: hFindFile=0x382040, lpFindFileData=0x31e47c | out: lpFindFileData=0x31e47c*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xcd708940, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0xcd708940, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0xcd708940, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="IMJP8_1", cAlternateFileName="")) returned 1 [0078.112] FindNextFileW (in: hFindFile=0x382040, lpFindFileData=0x31e47c | out: lpFindFileData=0x31e47c*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xcd708940, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0xcd708940, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0xcd708940, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="IMJP9_0", cAlternateFileName="")) returned 1 [0078.112] FindNextFileW (in: hFindFile=0x382040, lpFindFileData=0x31e47c | out: lpFindFileData=0x31e47c*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0x510b3550, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x5616fca0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x5616fca0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Internet Explorer", cAlternateFileName="INTERN~1")) returned 1 [0078.112] FindNextFileW (in: hFindFile=0x382040, lpFindFileData=0x31e47c | out: lpFindFileData=0x31e47c*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0x510b3550, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x5616fca0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x5616fca0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Internet Explorer", cAlternateFileName="INTERN~1")) returned 0 [0078.112] FindClose (in: hFindFile=0x382040 | out: hFindFile=0x382040) returned 1 [0078.113] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e704) returned 1 [0078.113] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e710) returned 1 [0078.113] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e744) returned 1 [0078.113] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Microsoft", nBufferLength=0x105, lpBuffer=0x31e24c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Microsoft", lpFilePart=0x0) returned 0x38 [0078.113] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Microsoft\\", nBufferLength=0x105, lpBuffer=0x31e220, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Microsoft\\", lpFilePart=0x0) returned 0x39 [0078.113] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Microsoft\\*", lpFindFileData=0x31e46c | out: lpFindFileData=0x31e46c*(dwFileAttributes=0x2014, ftCreationTime.dwLowDateTime=0x28cff640, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0xcd708940, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0xcd708940, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x382040 [0078.113] FindNextFileW (in: hFindFile=0x382040, lpFindFileData=0x31e47c | out: lpFindFileData=0x31e47c*(dwFileAttributes=0x2014, ftCreationTime.dwLowDateTime=0x28cff640, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0xcd708940, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0xcd708940, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0078.113] FindNextFileW (in: hFindFile=0x382040, lpFindFileData=0x31e47c | out: lpFindFileData=0x31e47c*(dwFileAttributes=0x2014, ftCreationTime.dwLowDateTime=0x28cff640, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28cff640, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x23a43389, ftLastWriteTime.dwHighDateTime=0x1cb892f, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="CryptnetUrlCache", cAlternateFileName="CRYPTN~1")) returned 1 [0078.113] FindNextFileW (in: hFindFile=0x382040, lpFindFileData=0x31e47c | out: lpFindFileData=0x31e47c*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xcd708940, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0xcd708940, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0xcd708940, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="IME12", cAlternateFileName="")) returned 1 [0078.113] FindNextFileW (in: hFindFile=0x382040, lpFindFileData=0x31e47c | out: lpFindFileData=0x31e47c*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xcd708940, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0xcd708940, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0xcd708940, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="IMJP12", cAlternateFileName="")) returned 1 [0078.113] FindNextFileW (in: hFindFile=0x382040, lpFindFileData=0x31e47c | out: lpFindFileData=0x31e47c*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xcd708940, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0xcd708940, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0xcd708940, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="IMJP8_1", cAlternateFileName="")) returned 1 [0078.113] FindNextFileW (in: hFindFile=0x382040, lpFindFileData=0x31e47c | out: lpFindFileData=0x31e47c*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xcd708940, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0xcd708940, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0xcd708940, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="IMJP9_0", cAlternateFileName="")) returned 1 [0078.113] FindNextFileW (in: hFindFile=0x382040, lpFindFileData=0x31e47c | out: lpFindFileData=0x31e47c*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0x510b3550, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x5616fca0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x5616fca0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Internet Explorer", cAlternateFileName="INTERN~1")) returned 1 [0078.113] FindNextFileW (in: hFindFile=0x382040, lpFindFileData=0x31e47c | out: lpFindFileData=0x31e47c*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0078.114] FindClose (in: hFindFile=0x382040 | out: hFindFile=0x382040) returned 1 [0078.114] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e704) returned 1 [0078.114] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e710) returned 1 [0078.114] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e6cc) returned 1 [0078.114] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Microsoft\\CryptnetUrlCache", nBufferLength=0x105, lpBuffer=0x31e1d4, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Microsoft\\CryptnetUrlCache", lpFilePart=0x0) returned 0x49 [0078.114] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Microsoft\\CryptnetUrlCache\\", nBufferLength=0x105, lpBuffer=0x31e1a8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Microsoft\\CryptnetUrlCache\\", lpFilePart=0x0) returned 0x4a [0078.114] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Microsoft\\CryptnetUrlCache\\*", lpFindFileData=0x31e3f4 | out: lpFindFileData=0x31e3f4*(dwFileAttributes=0x2014, ftCreationTime.dwLowDateTime=0x28cff640, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28cff640, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x23a43389, ftLastWriteTime.dwHighDateTime=0x1cb892f, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x382040 [0078.114] FindNextFileW (in: hFindFile=0x382040, lpFindFileData=0x31e404 | out: lpFindFileData=0x31e404*(dwFileAttributes=0x2014, ftCreationTime.dwLowDateTime=0x28cff640, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28cff640, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x23a43389, ftLastWriteTime.dwHighDateTime=0x1cb892f, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0078.114] FindNextFileW (in: hFindFile=0x382040, lpFindFileData=0x31e404 | out: lpFindFileData=0x31e404*(dwFileAttributes=0x2014, ftCreationTime.dwLowDateTime=0x28cff640, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0xd0de60b0, ftLastAccessTime.dwHighDateTime=0x1d2faf2, ftLastWriteTime.dwLowDateTime=0xd0de60b0, ftLastWriteTime.dwHighDateTime=0x1d2faf2, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Content", cAlternateFileName="")) returned 1 [0078.114] FindNextFileW (in: hFindFile=0x382040, lpFindFileData=0x31e404 | out: lpFindFileData=0x31e404*(dwFileAttributes=0x2014, ftCreationTime.dwLowDateTime=0x28cff640, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0xd0de60b0, ftLastAccessTime.dwHighDateTime=0x1d2faf2, ftLastWriteTime.dwLowDateTime=0xd0de60b0, ftLastWriteTime.dwHighDateTime=0x1d2faf2, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="MetaData", cAlternateFileName="")) returned 1 [0078.114] FindNextFileW (in: hFindFile=0x382040, lpFindFileData=0x31e404 | out: lpFindFileData=0x31e404*(dwFileAttributes=0x2014, ftCreationTime.dwLowDateTime=0x28cff640, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0xd0de60b0, ftLastAccessTime.dwHighDateTime=0x1d2faf2, ftLastWriteTime.dwLowDateTime=0xd0de60b0, ftLastWriteTime.dwHighDateTime=0x1d2faf2, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="MetaData", cAlternateFileName="")) returned 0 [0078.114] FindClose (in: hFindFile=0x382040 | out: hFindFile=0x382040) returned 1 [0078.114] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e68c) returned 1 [0078.114] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e698) returned 1 [0078.114] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e6cc) returned 1 [0078.115] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Microsoft\\CryptnetUrlCache", nBufferLength=0x105, lpBuffer=0x31e1d4, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Microsoft\\CryptnetUrlCache", lpFilePart=0x0) returned 0x49 [0078.115] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Microsoft\\CryptnetUrlCache\\", nBufferLength=0x105, lpBuffer=0x31e1a8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Microsoft\\CryptnetUrlCache\\", lpFilePart=0x0) returned 0x4a [0078.115] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Microsoft\\CryptnetUrlCache\\*", lpFindFileData=0x31e3f4 | out: lpFindFileData=0x31e3f4*(dwFileAttributes=0x2014, ftCreationTime.dwLowDateTime=0x28cff640, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28cff640, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x23a43389, ftLastWriteTime.dwHighDateTime=0x1cb892f, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x382040 [0078.115] FindNextFileW (in: hFindFile=0x382040, lpFindFileData=0x31e404 | out: lpFindFileData=0x31e404*(dwFileAttributes=0x2014, ftCreationTime.dwLowDateTime=0x28cff640, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28cff640, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x23a43389, ftLastWriteTime.dwHighDateTime=0x1cb892f, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0078.115] FindNextFileW (in: hFindFile=0x382040, lpFindFileData=0x31e404 | out: lpFindFileData=0x31e404*(dwFileAttributes=0x2014, ftCreationTime.dwLowDateTime=0x28cff640, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0xd0de60b0, ftLastAccessTime.dwHighDateTime=0x1d2faf2, ftLastWriteTime.dwLowDateTime=0xd0de60b0, ftLastWriteTime.dwHighDateTime=0x1d2faf2, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Content", cAlternateFileName="")) returned 1 [0078.115] FindNextFileW (in: hFindFile=0x382040, lpFindFileData=0x31e404 | out: lpFindFileData=0x31e404*(dwFileAttributes=0x2014, ftCreationTime.dwLowDateTime=0x28cff640, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0xd0de60b0, ftLastAccessTime.dwHighDateTime=0x1d2faf2, ftLastWriteTime.dwLowDateTime=0xd0de60b0, ftLastWriteTime.dwHighDateTime=0x1d2faf2, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="MetaData", cAlternateFileName="")) returned 1 [0078.115] FindNextFileW (in: hFindFile=0x382040, lpFindFileData=0x31e404 | out: lpFindFileData=0x31e404*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0078.115] FindClose (in: hFindFile=0x382040 | out: hFindFile=0x382040) returned 1 [0078.115] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e68c) returned 1 [0078.115] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e698) returned 1 [0078.115] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e654) returned 1 [0078.115] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Microsoft\\CryptnetUrlCache\\Content", nBufferLength=0x105, lpBuffer=0x31e15c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Microsoft\\CryptnetUrlCache\\Content", lpFilePart=0x0) returned 0x51 [0078.115] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Microsoft\\CryptnetUrlCache\\Content\\", nBufferLength=0x105, lpBuffer=0x31e130, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Microsoft\\CryptnetUrlCache\\Content\\", lpFilePart=0x0) returned 0x52 [0078.115] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Microsoft\\CryptnetUrlCache\\Content\\*", lpFindFileData=0x31e37c | out: lpFindFileData=0x31e37c*(dwFileAttributes=0x2014, ftCreationTime.dwLowDateTime=0x28cff640, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0xd0de60b0, ftLastAccessTime.dwHighDateTime=0x1d2faf2, ftLastWriteTime.dwLowDateTime=0xd0de60b0, ftLastWriteTime.dwHighDateTime=0x1d2faf2, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x382040 [0078.115] FindNextFileW (in: hFindFile=0x382040, lpFindFileData=0x31e38c | out: lpFindFileData=0x31e38c*(dwFileAttributes=0x2014, ftCreationTime.dwLowDateTime=0x28cff640, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0xd0de60b0, ftLastAccessTime.dwHighDateTime=0x1d2faf2, ftLastWriteTime.dwLowDateTime=0xd0de60b0, ftLastWriteTime.dwHighDateTime=0x1d2faf2, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0078.116] FindNextFileW (in: hFindFile=0x382040, lpFindFileData=0x31e38c | out: lpFindFileData=0x31e38c*(dwFileAttributes=0x2024, ftCreationTime.dwLowDateTime=0xbf9eaad0, ftCreationTime.dwHighDateTime=0x1d2faf2, ftLastAccessTime.dwLowDateTime=0xbf9eaad0, ftLastAccessTime.dwHighDateTime=0x1d2faf2, ftLastWriteTime.dwLowDateTime=0xbf9eaad0, ftLastWriteTime.dwHighDateTime=0x1d2faf2, nFileSizeHigh=0x0, nFileSizeLow=0x1d7, dwReserved0=0x0, dwReserved1=0x0, cFileName="024823B39FBEACCDB5C06426A8168E99_6D5CAB161A1C65362A913D29BE09D91B", cAlternateFileName="024823~1")) returned 1 [0078.116] FindNextFileW (in: hFindFile=0x382040, lpFindFileData=0x31e38c | out: lpFindFileData=0x31e38c*(dwFileAttributes=0x2024, ftCreationTime.dwLowDateTime=0x53bd8410, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x53bd8410, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0xbe98d390, ftLastWriteTime.dwHighDateTime=0x1d2faf2, nFileSizeHigh=0x0, nFileSizeLow=0x561, dwReserved0=0x0, dwReserved1=0x0, cFileName="0F1583FFF42FFF476A09801ACB69213F_E3F4A8C96454D7D3441D2C1BCE81F875", cAlternateFileName="0F1583~1")) returned 1 [0078.116] FindNextFileW (in: hFindFile=0x382040, lpFindFileData=0x31e38c | out: lpFindFileData=0x31e38c*(dwFileAttributes=0x2024, ftCreationTime.dwLowDateTime=0xbf952550, ftCreationTime.dwHighDateTime=0x1d2faf2, ftLastAccessTime.dwLowDateTime=0xbf952550, ftLastAccessTime.dwHighDateTime=0x1d2faf2, ftLastWriteTime.dwLowDateTime=0xbf952550, ftLastWriteTime.dwHighDateTime=0x1d2faf2, nFileSizeHigh=0x0, nFileSizeLow=0x1d8, dwReserved0=0x0, dwReserved1=0x0, cFileName="1BB09BEEC155258835C193A7AA85AA5B_A7B2B53AF2A12E2CB0A41B96D21D7973", cAlternateFileName="1BB09B~1")) returned 1 [0078.116] FindNextFileW (in: hFindFile=0x382040, lpFindFileData=0x31e38c | out: lpFindFileData=0x31e38c*(dwFileAttributes=0x2024, ftCreationTime.dwLowDateTime=0x4c00edb0, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0x4c00edb0, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0x4c00edb0, ftLastWriteTime.dwHighDateTime=0x1d2dda4, nFileSizeHigh=0x0, nFileSizeLow=0xf1d, dwReserved0=0x0, dwReserved1=0x0, cFileName="1DAF2884EC4DFA96BA4A58D4DBC9C406", cAlternateFileName="1DAF28~1")) returned 1 [0078.116] FindNextFileW (in: hFindFile=0x382040, lpFindFileData=0x31e38c | out: lpFindFileData=0x31e38c*(dwFileAttributes=0x2024, ftCreationTime.dwLowDateTime=0x580eb5c0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x580eb5c0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0xaedd4300, ftLastWriteTime.dwHighDateTime=0x1d2e675, nFileSizeHigh=0x0, nFileSizeLow=0x145, dwReserved0=0x0, dwReserved1=0x0, cFileName="23B523C9E7746F715D33C6527C18EB9D", cAlternateFileName="23B523~1")) returned 1 [0078.116] FindNextFileW (in: hFindFile=0x382040, lpFindFileData=0x31e38c | out: lpFindFileData=0x31e38c*(dwFileAttributes=0x2024, ftCreationTime.dwLowDateTime=0xc3791460, ftCreationTime.dwHighDateTime=0x1d2e675, ftLastAccessTime.dwLowDateTime=0xc3791460, ftLastAccessTime.dwHighDateTime=0x1d2e675, ftLastWriteTime.dwLowDateTime=0xc3791460, ftLastWriteTime.dwHighDateTime=0x1d2e675, nFileSizeHigh=0x0, nFileSizeLow=0x209, dwReserved0=0x0, dwReserved1=0x0, cFileName="3130B1871A126520A8C47861EFE3ED4D", cAlternateFileName="3130B1~1")) returned 1 [0078.116] FindNextFileW (in: hFindFile=0x382040, lpFindFileData=0x31e38c | out: lpFindFileData=0x31e38c*(dwFileAttributes=0x2024, ftCreationTime.dwLowDateTime=0x53fdc930, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x53fdc930, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0xbf16fc70, ftLastWriteTime.dwHighDateTime=0x1d2faf2, nFileSizeHigh=0x0, nFileSizeLow=0x58b, dwReserved0=0x0, dwReserved1=0x0, cFileName="3388ECC3F7BC4A9271C10ED8621E5A65_F55C512047947B70F94DE5DEC6D6838D", cAlternateFileName="3388EC~1")) returned 1 [0078.116] FindNextFileW (in: hFindFile=0x382040, lpFindFileData=0x31e38c | out: lpFindFileData=0x31e38c*(dwFileAttributes=0x2024, ftCreationTime.dwLowDateTime=0x53b19d30, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x53b19d30, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x54583d70, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0xb68, dwReserved0=0x0, dwReserved1=0x0, cFileName="40E450F7CE13419A2CCC2A5445035A0A_06F02B1F13AB4B11B8FC669BDE565AF1", cAlternateFileName="40E450~1")) returned 1 [0078.116] FindNextFileW (in: hFindFile=0x382040, lpFindFileData=0x31e38c | out: lpFindFileData=0x31e38c*(dwFileAttributes=0x2024, ftCreationTime.dwLowDateTime=0x54537ab0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x54537ab0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0xae76e7e0, ftLastWriteTime.dwHighDateTime=0x1d2e675, nFileSizeHigh=0x0, nFileSizeLow=0x1d7, dwReserved0=0x0, dwReserved1=0x0, cFileName="4C8F841FB02DEC8C10108028DB86A08D_8DAFFFD2D43BDC7A1717F5B61C303398", cAlternateFileName="4C8F84~1")) returned 1 [0078.116] FindNextFileW (in: hFindFile=0x382040, lpFindFileData=0x31e38c | out: lpFindFileData=0x31e38c*(dwFileAttributes=0x2024, ftCreationTime.dwLowDateTime=0x7295ee20, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x7295ee20, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0xadfb2060, ftLastWriteTime.dwHighDateTime=0x1d2e675, nFileSizeHigh=0x0, nFileSizeLow=0x680, dwReserved0=0x0, dwReserved1=0x0, cFileName="4DD39726D4B55AC3B4119B35A893323C_46CCCFB940A93F39A734F69EFCDD76E9", cAlternateFileName="4DD397~1")) returned 1 [0078.117] FindNextFileW (in: hFindFile=0x382040, lpFindFileData=0x31e38c | out: lpFindFileData=0x31e38c*(dwFileAttributes=0x2024, ftCreationTime.dwLowDateTime=0xbf8b9fd0, ftCreationTime.dwHighDateTime=0x1d2faf2, ftLastAccessTime.dwLowDateTime=0xbf8b9fd0, ftLastAccessTime.dwHighDateTime=0x1d2faf2, ftLastWriteTime.dwLowDateTime=0xbf8b9fd0, ftLastWriteTime.dwHighDateTime=0x1d2faf2, nFileSizeHigh=0x0, nFileSizeLow=0x2d7, dwReserved0=0x0, dwReserved1=0x0, cFileName="5080DC7A65DB6A5960ECD874088F3328_2908F682DFC81A793BD240CF29711C77", cAlternateFileName="5080DC~2")) returned 1 [0078.117] FindNextFileW (in: hFindFile=0x382040, lpFindFileData=0x31e38c | out: lpFindFileData=0x31e38c*(dwFileAttributes=0x2024, ftCreationTime.dwLowDateTime=0xbf86dd10, ftCreationTime.dwHighDateTime=0x1d2faf2, ftLastAccessTime.dwLowDateTime=0xbf86dd10, ftLastAccessTime.dwHighDateTime=0x1d2faf2, ftLastWriteTime.dwLowDateTime=0xbf86dd10, ftLastWriteTime.dwHighDateTime=0x1d2faf2, nFileSizeHigh=0x0, nFileSizeLow=0x2d7, dwReserved0=0x0, dwReserved1=0x0, cFileName="5080DC7A65DB6A5960ECD874088F3328_6CBA2C06D5985DD95AE59AF8FC7C6220", cAlternateFileName="5080DC~1")) returned 1 [0078.117] FindNextFileW (in: hFindFile=0x382040, lpFindFileData=0x31e38c | out: lpFindFileData=0x31e38c*(dwFileAttributes=0x2024, ftCreationTime.dwLowDateTime=0xbf763370, ftCreationTime.dwHighDateTime=0x1d2faf2, ftLastAccessTime.dwLowDateTime=0xbf763370, ftLastAccessTime.dwHighDateTime=0x1d2faf2, ftLastWriteTime.dwLowDateTime=0xbf7af630, ftLastWriteTime.dwHighDateTime=0x1d2faf2, nFileSizeHigh=0x0, nFileSizeLow=0x1d7, dwReserved0=0x0, dwReserved1=0x0, cFileName="5457A8CE4B2A7499F8299A013B6E1C7C_CE50F893881D43DC0C815E4D80FAF2B4", cAlternateFileName="5457A8~1")) returned 1 [0078.117] FindNextFileW (in: hFindFile=0x382040, lpFindFileData=0x31e38c | out: lpFindFileData=0x31e38c*(dwFileAttributes=0x2024, ftCreationTime.dwLowDateTime=0xed9b0820, ftCreationTime.dwHighDateTime=0x1d2e620, ftLastAccessTime.dwLowDateTime=0xed9b0820, ftLastAccessTime.dwHighDateTime=0x1d2e620, ftLastWriteTime.dwLowDateTime=0xed9b0820, ftLastWriteTime.dwHighDateTime=0x1d2e620, nFileSizeHigh=0x0, nFileSizeLow=0x32d, dwReserved0=0x0, dwReserved1=0x0, cFileName="696F3DE637E6DE85B458996D49D759AD", cAlternateFileName="696F3D~1")) returned 1 [0078.117] FindNextFileW (in: hFindFile=0x382040, lpFindFileData=0x31e38c | out: lpFindFileData=0x31e38c*(dwFileAttributes=0x2024, ftCreationTime.dwLowDateTime=0xbf763370, ftCreationTime.dwHighDateTime=0x1d2faf2, ftLastAccessTime.dwLowDateTime=0xbf763370, ftLastAccessTime.dwHighDateTime=0x1d2faf2, ftLastWriteTime.dwLowDateTime=0xbf763370, ftLastWriteTime.dwHighDateTime=0x1d2faf2, nFileSizeHigh=0x0, nFileSizeLow=0x648, dwReserved0=0x0, dwReserved1=0x0, cFileName="705A76DE71EA2CAEBB8F0907449CE086_9752C5B2D53EE7A19F7764B52968EC21", cAlternateFileName="705A76~1")) returned 1 [0078.117] FindNextFileW (in: hFindFile=0x382040, lpFindFileData=0x31e38c | out: lpFindFileData=0x31e38c*(dwFileAttributes=0x2024, ftCreationTime.dwLowDateTime=0xedb2d5e0, ftCreationTime.dwHighDateTime=0x1d2e620, ftLastAccessTime.dwLowDateTime=0xedb2d5e0, ftLastAccessTime.dwHighDateTime=0x1d2e620, ftLastWriteTime.dwLowDateTime=0xedb2d5e0, ftLastWriteTime.dwHighDateTime=0x1d2e620, nFileSizeHigh=0x0, nFileSizeLow=0x22a, dwReserved0=0x0, dwReserved1=0x0, cFileName="7396C420A8E1BC1DA97F1AF0D10BAD21", cAlternateFileName="7396C4~1")) returned 1 [0078.117] FindNextFileW (in: hFindFile=0x382040, lpFindFileData=0x31e38c | out: lpFindFileData=0x31e38c*(dwFileAttributes=0x2024, ftCreationTime.dwLowDateTime=0x540c1170, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x540c1170, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x312640, ftLastWriteTime.dwHighDateTime=0x1d2e621, nFileSizeHigh=0x0, nFileSizeLow=0x1d7, dwReserved0=0x0, dwReserved1=0x0, cFileName="7423F88C7F265F0DEFC08EA88C3BDE45_D975BBA8033175C8D112023D8A7A8AD6", cAlternateFileName="7423F8~1")) returned 1 [0078.117] FindNextFileW (in: hFindFile=0x382040, lpFindFileData=0x31e38c | out: lpFindFileData=0x31e38c*(dwFileAttributes=0x2024, ftCreationTime.dwLowDateTime=0x28dbdd20, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28dbdd20, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xd0e4c510, ftLastWriteTime.dwHighDateTime=0x1d2ddf4, nFileSizeHigh=0x0, nFileSizeLow=0x1fa, dwReserved0=0x0, dwReserved1=0x0, cFileName="7B2238AACCEDC3F1FFE8E7EB5F575EC9", cAlternateFileName="7B2238~1")) returned 1 [0078.117] FindNextFileW (in: hFindFile=0x382040, lpFindFileData=0x31e38c | out: lpFindFileData=0x31e38c*(dwFileAttributes=0x2024, ftCreationTime.dwLowDateTime=0x6b2324c0, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x6b2324c0, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x6b2324c0, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x67c, dwReserved0=0x0, dwReserved1=0x0, cFileName="7B8944BA8AD0EFDF0E01A43EF62BECD0_B2DB1CC4B5F2D2A802D56AAED525802D", cAlternateFileName="7B8944~1")) returned 1 [0078.117] FindNextFileW (in: hFindFile=0x382040, lpFindFileData=0x31e38c | out: lpFindFileData=0x31e38c*(dwFileAttributes=0x2024, ftCreationTime.dwLowDateTime=0x6b199f40, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x6b199f40, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x6b199f40, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x6e3, dwReserved0=0x0, dwReserved1=0x0, cFileName="7D266D9E1E69FA1EEFB9699B009B34C8_0A9BFDD75B598C2110CBF610C078E6E6", cAlternateFileName="7D266D~2")) returned 1 [0078.117] FindNextFileW (in: hFindFile=0x382040, lpFindFileData=0x31e38c | out: lpFindFileData=0x31e38c*(dwFileAttributes=0x2024, ftCreationTime.dwLowDateTime=0xefaf7160, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0xefaf7160, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0xaec313e0, ftLastWriteTime.dwHighDateTime=0x1d2e675, nFileSizeHigh=0x0, nFileSizeLow=0x6e3, dwReserved0=0x0, dwReserved1=0x0, cFileName="7D266D9E1E69FA1EEFB9699B009B34C8_1D5A876A9113EC07224C45E5A870E3BD", cAlternateFileName="7D266D~1")) returned 1 [0078.118] FindNextFileW (in: hFindFile=0x382040, lpFindFileData=0x31e38c | out: lpFindFileData=0x31e38c*(dwFileAttributes=0x2024, ftCreationTime.dwLowDateTime=0x6056b480, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x6056b480, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x1ef687a0, ftLastWriteTime.dwHighDateTime=0x1d2e621, nFileSizeHigh=0x0, nFileSizeLow=0x1cf, dwReserved0=0x0, dwReserved1=0x0, cFileName="8059E9A0D314877E40FE93D8CCFB3C69_234CB5D64705D4DBB4DA839716359AF0", cAlternateFileName="8059E9~3")) returned 1 [0078.118] FindNextFileW (in: hFindFile=0x382040, lpFindFileData=0x31e38c | out: lpFindFileData=0x31e38c*(dwFileAttributes=0x2024, ftCreationTime.dwLowDateTime=0x61210960, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x61210960, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0xaecc9960, ftLastWriteTime.dwHighDateTime=0x1d2e675, nFileSizeHigh=0x0, nFileSizeLow=0x1cf, dwReserved0=0x0, dwReserved1=0x0, cFileName="8059E9A0D314877E40FE93D8CCFB3C69_294110D6990EE392327F8A606D55BC1E", cAlternateFileName="80273C~1")) returned 1 [0078.118] FindNextFileW (in: hFindFile=0x382040, lpFindFileData=0x31e38c | out: lpFindFileData=0x31e38c*(dwFileAttributes=0x2024, ftCreationTime.dwLowDateTime=0x58e24200, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x58e24200, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0xae9f5f40, ftLastWriteTime.dwHighDateTime=0x1d2e675, nFileSizeHigh=0x0, nFileSizeLow=0x1cf, dwReserved0=0x0, dwReserved1=0x0, cFileName="8059E9A0D314877E40FE93D8CCFB3C69_50167909FCFE0C66153F1901439CBBA1", cAlternateFileName="8059E9~2")) returned 1 [0078.118] FindNextFileW (in: hFindFile=0x382040, lpFindFileData=0x31e38c | out: lpFindFileData=0x31e38c*(dwFileAttributes=0x2024, ftCreationTime.dwLowDateTime=0x61236ac0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x61236ac0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x3b0b01a0, ftLastWriteTime.dwHighDateTime=0x1d2e621, nFileSizeHigh=0x0, nFileSizeLow=0x1cf, dwReserved0=0x0, dwReserved1=0x0, cFileName="8059E9A0D314877E40FE93D8CCFB3C69_581C904DB5924E46A6C1A8637614A40E", cAlternateFileName="809279~1")) returned 1 [0078.118] FindNextFileW (in: hFindFile=0x382040, lpFindFileData=0x31e38c | out: lpFindFileData=0x31e38c*(dwFileAttributes=0x2024, ftCreationTime.dwLowDateTime=0x58394060, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x58394060, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0xb0f739c0, ftLastWriteTime.dwHighDateTime=0x1d2e675, nFileSizeHigh=0x0, nFileSizeLow=0x1cf, dwReserved0=0x0, dwReserved1=0x0, cFileName="8059E9A0D314877E40FE93D8CCFB3C69_5EA65844B9EF5670A9C002CBD85B10A4", cAlternateFileName="8059E9~1")) returned 1 [0078.118] FindNextFileW (in: hFindFile=0x382040, lpFindFileData=0x31e38c | out: lpFindFileData=0x31e38c*(dwFileAttributes=0x2024, ftCreationTime.dwLowDateTime=0x62378a40, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x62378a40, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0xae9a9c80, ftLastWriteTime.dwHighDateTime=0x1d2e675, nFileSizeHigh=0x0, nFileSizeLow=0x1cf, dwReserved0=0x0, dwReserved1=0x0, cFileName="8059E9A0D314877E40FE93D8CCFB3C69_74E943F7DAB6D19E37E4854057155778", cAlternateFileName="80E4BE~1")) returned 1 [0078.118] FindNextFileW (in: hFindFile=0x382040, lpFindFileData=0x31e38c | out: lpFindFileData=0x31e38c*(dwFileAttributes=0x2024, ftCreationTime.dwLowDateTime=0x613675c0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x613675c0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x69bba4a0, ftLastWriteTime.dwHighDateTime=0x1d2e621, nFileSizeHigh=0x0, nFileSizeLow=0x1cf, dwReserved0=0x0, dwReserved1=0x0, cFileName="8059E9A0D314877E40FE93D8CCFB3C69_C080DA2AE431C1A7F3B0C147EEB043ED", cAlternateFileName="803B9E~1")) returned 1 [0078.118] FindNextFileW (in: hFindFile=0x382040, lpFindFileData=0x31e38c | out: lpFindFileData=0x31e38c*(dwFileAttributes=0x2024, ftCreationTime.dwLowDateTime=0x63c50fe0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x63c50fe0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0xb100bf40, ftLastWriteTime.dwHighDateTime=0x1d2e675, nFileSizeHigh=0x0, nFileSizeLow=0x1cf, dwReserved0=0x0, dwReserved1=0x0, cFileName="8059E9A0D314877E40FE93D8CCFB3C69_E907D7A04657714B5B06D18BC920971E", cAlternateFileName="803D37~1")) returned 1 [0078.118] FindNextFileW (in: hFindFile=0x382040, lpFindFileData=0x31e38c | out: lpFindFileData=0x31e38c*(dwFileAttributes=0x2024, ftCreationTime.dwLowDateTime=0x61021780, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x61021780, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0xb1058200, ftLastWriteTime.dwHighDateTime=0x1d2e675, nFileSizeHigh=0x0, nFileSizeLow=0x1cf, dwReserved0=0x0, dwReserved1=0x0, cFileName="8059E9A0D314877E40FE93D8CCFB3C69_F2318F7AB33980A131A265454C39CA30", cAlternateFileName="8059E9~4")) returned 1 [0078.118] FindNextFileW (in: hFindFile=0x382040, lpFindFileData=0x31e38c | out: lpFindFileData=0x31e38c*(dwFileAttributes=0x2024, ftCreationTime.dwLowDateTime=0x636a9ba0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x636a9ba0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0xb139e040, ftLastWriteTime.dwHighDateTime=0x1d2e675, nFileSizeHigh=0x0, nFileSizeLow=0x1cf, dwReserved0=0x0, dwReserved1=0x0, cFileName="8059E9A0D314877E40FE93D8CCFB3C69_F6E15778DC8E326895C606FBFA0392EB", cAlternateFileName="800D31~1")) returned 1 [0078.119] FindNextFileW (in: hFindFile=0x382040, lpFindFileData=0x31e38c | out: lpFindFileData=0x31e38c*(dwFileAttributes=0x2024, ftCreationTime.dwLowDateTime=0x581f7ea0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x581f7ea0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0xb0f4d860, ftLastWriteTime.dwHighDateTime=0x1d2e675, nFileSizeHigh=0x0, nFileSizeLow=0x56e, dwReserved0=0x0, dwReserved1=0x0, cFileName="828298824EA5549947C17DDABF6871F5_0206EFBC540300C3BF0163CDBC3D7D56", cAlternateFileName="828298~1")) returned 1 [0078.119] FindNextFileW (in: hFindFile=0x382040, lpFindFileData=0x31e38c | out: lpFindFileData=0x31e38c*(dwFileAttributes=0x2024, ftCreationTime.dwLowDateTime=0xec3c5340, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0xec3c5340, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0xb16257a0, ftLastWriteTime.dwHighDateTime=0x1d2e675, nFileSizeHigh=0x0, nFileSizeLow=0x6e3, dwReserved0=0x0, dwReserved1=0x0, cFileName="8828F39C7C0CE9A14B25C7EB321181BA_3DF94EB797096674F7793A562A778C5F", cAlternateFileName="8828F3~1")) returned 1 [0078.119] FindNextFileW (in: hFindFile=0x382040, lpFindFileData=0x31e38c | out: lpFindFileData=0x31e38c*(dwFileAttributes=0x2024, ftCreationTime.dwLowDateTime=0x8064ac00, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x8064ac00, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x80670d60, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x6e3, dwReserved0=0x0, dwReserved1=0x0, cFileName="8828F39C7C0CE9A14B25C7EB321181BA_C6EF73E4482B2588B1252D1A64B99416", cAlternateFileName="8828F3~2")) returned 1 [0078.119] FindNextFileW (in: hFindFile=0x382040, lpFindFileData=0x31e38c | out: lpFindFileData=0x31e38c*(dwFileAttributes=0x2024, ftCreationTime.dwLowDateTime=0x6aa2c0a0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x6aa2c0a0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0xadf19ae0, ftLastWriteTime.dwHighDateTime=0x1d2e675, nFileSizeHigh=0x0, nFileSizeLow=0x59d, dwReserved0=0x0, dwReserved1=0x0, cFileName="8E4E510F44A56B8C8ECFEC352907C373_411140098D71F028134E9B8A21255C61", cAlternateFileName="8E4E51~1")) returned 1 [0078.119] FindNextFileW (in: hFindFile=0x382040, lpFindFileData=0x31e38c | out: lpFindFileData=0x31e38c*(dwFileAttributes=0x2024, ftCreationTime.dwLowDateTime=0x28dbdd20, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28dbdd20, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xbddd270, ftLastWriteTime.dwHighDateTime=0x1d35d06, nFileSizeHigh=0x0, nFileSizeLow=0xd2da, dwReserved0=0x0, dwReserved1=0x0, cFileName="94308059B57B3142E455B38A6EB92015", cAlternateFileName="943080~1")) returned 1 [0078.119] FindNextFileW (in: hFindFile=0x382040, lpFindFileData=0x31e38c | out: lpFindFileData=0x31e38c*(dwFileAttributes=0x2024, ftCreationTime.dwLowDateTime=0x6a83cec0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x6a83cec0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0xaebe5120, ftLastWriteTime.dwHighDateTime=0x1d2e675, nFileSizeHigh=0x0, nFileSizeLow=0x5e0, dwReserved0=0x0, dwReserved1=0x0, cFileName="955CAB6FF6A24D5820D50B5BA1CF79C7_AD9E7615297A3A83320AACE5801A04F9", cAlternateFileName="955CAB~1")) returned 1 [0078.119] FindNextFileW (in: hFindFile=0x382040, lpFindFileData=0x31e38c | out: lpFindFileData=0x31e38c*(dwFileAttributes=0x2024, ftCreationTime.dwLowDateTime=0xbf3f73d0, ftCreationTime.dwHighDateTime=0x1d2faf2, ftLastAccessTime.dwLowDateTime=0xbf3f73d0, ftLastAccessTime.dwHighDateTime=0x1d2faf2, ftLastWriteTime.dwLowDateTime=0xbf3f73d0, ftLastWriteTime.dwHighDateTime=0x1d2faf2, nFileSizeHigh=0x0, nFileSizeLow=0x5ab, dwReserved0=0x0, dwReserved1=0x0, cFileName="9BC2FFC5D9591E1BD3545230E9B7CC36_CF30943571F9BEE96C487B2D9F0436E6", cAlternateFileName="9BC2FF~1")) returned 1 [0078.119] FindNextFileW (in: hFindFile=0x382040, lpFindFileData=0x31e38c | out: lpFindFileData=0x31e38c*(dwFileAttributes=0x2024, ftCreationTime.dwLowDateTime=0xe06277d0, ftCreationTime.dwHighDateTime=0x1d2ddf4, ftLastAccessTime.dwLowDateTime=0xe06277d0, ftLastAccessTime.dwHighDateTime=0x1d2ddf4, ftLastWriteTime.dwLowDateTime=0xb15d94e0, ftLastWriteTime.dwHighDateTime=0x1d2e675, nFileSizeHigh=0x0, nFileSizeLow=0x652, dwReserved0=0x0, dwReserved1=0x0, cFileName="9C888BEABCCBC2A97B0D6D9214C3BA37_1213DC6F71E4C3B05E7BCEEBC203A31E", cAlternateFileName="9C888B~1")) returned 1 [0078.119] FindNextFileW (in: hFindFile=0x382040, lpFindFileData=0x31e38c | out: lpFindFileData=0x31e38c*(dwFileAttributes=0x2024, ftCreationTime.dwLowDateTime=0xe07ca6f0, ftCreationTime.dwHighDateTime=0x1d2ddf4, ftLastAccessTime.dwLowDateTime=0xe07ca6f0, ftLastAccessTime.dwHighDateTime=0x1d2ddf4, ftLastWriteTime.dwLowDateTime=0x965accc0, ftLastWriteTime.dwHighDateTime=0x1d2e621, nFileSizeHigh=0x0, nFileSizeLow=0x652, dwReserved0=0x0, dwReserved1=0x0, cFileName="9C888BEABCCBC2A97B0D6D9214C3BA37_EBC75728C6119A77E4DA8559DD10F061", cAlternateFileName="9C888B~2")) returned 1 [0078.119] FindNextFileW (in: hFindFile=0x382040, lpFindFileData=0x31e38c | out: lpFindFileData=0x31e38c*(dwFileAttributes=0x2024, ftCreationTime.dwLowDateTime=0x54bc3730, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x54bc3730, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0xb11d4fc0, ftLastWriteTime.dwHighDateTime=0x1d2e675, nFileSizeHigh=0x0, nFileSizeLow=0x1d7, dwReserved0=0x0, dwReserved1=0x0, cFileName="A9E4F776657345B52012CE8E279D314C_183A5BE0B233CC1D513955FABECF9450", cAlternateFileName="A9E4F7~1")) returned 1 [0078.119] FindNextFileW (in: hFindFile=0x382040, lpFindFileData=0x31e38c | out: lpFindFileData=0x31e38c*(dwFileAttributes=0x2024, ftCreationTime.dwLowDateTime=0x53bfe570, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x53bfe570, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0xbe9b34f0, ftLastWriteTime.dwHighDateTime=0x1d2faf2, nFileSizeHigh=0x0, nFileSizeLow=0x5ee, dwReserved0=0x0, dwReserved1=0x0, cFileName="ACF244F1A10D4DBED0D88EBA0C43A9B5_BA1AB6C2BDFDF57799E8116E4002D001", cAlternateFileName="ACF244~1")) returned 1 [0078.120] FindNextFileW (in: hFindFile=0x382040, lpFindFileData=0x31e38c | out: lpFindFileData=0x31e38c*(dwFileAttributes=0x2024, ftCreationTime.dwLowDateTime=0xe04aaa10, ftCreationTime.dwHighDateTime=0x1d2ddf4, ftLastAccessTime.dwLowDateTime=0xe04aaa10, ftLastAccessTime.dwHighDateTime=0x1d2ddf4, ftLastWriteTime.dwLowDateTime=0xae4e7080, ftLastWriteTime.dwHighDateTime=0x1d2e675, nFileSizeHigh=0x0, nFileSizeLow=0x652, dwReserved0=0x0, dwReserved1=0x0, cFileName="B3BB9C1BA2D19E090AE305B2683903A0_6F0A84CE2BA99BD19D42C92610275852", cAlternateFileName="B3BB9C~2")) returned 1 [0078.120] FindNextFileW (in: hFindFile=0x382040, lpFindFileData=0x31e38c | out: lpFindFileData=0x31e38c*(dwFileAttributes=0x2024, ftCreationTime.dwLowDateTime=0xefc01b00, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0xefc01b00, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0xaa4ee1e0, ftLastWriteTime.dwHighDateTime=0x1d2e620, nFileSizeHigh=0x0, nFileSizeLow=0x652, dwReserved0=0x0, dwReserved1=0x0, cFileName="B3BB9C1BA2D19E090AE305B2683903A0_B89A63AC6877BD1ED812438CE82C3EB8", cAlternateFileName="B3BB9C~1")) returned 1 [0078.120] FindNextFileW (in: hFindFile=0x382040, lpFindFileData=0x31e38c | out: lpFindFileData=0x31e38c*(dwFileAttributes=0x2024, ftCreationTime.dwLowDateTime=0x54322770, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x54322770, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0xbf019010, ftLastWriteTime.dwHighDateTime=0x1d2faf2, nFileSizeHigh=0x0, nFileSizeLow=0x5ed, dwReserved0=0x0, dwReserved1=0x0, cFileName="BC570EC0DE58335AFAF92FDC8E3AA330_6CE6E578B5C8485B4BE3C4D58E12F150", cAlternateFileName="BC570E~2")) returned 1 [0078.120] FindNextFileW (in: hFindFile=0x382040, lpFindFileData=0x31e38c | out: lpFindFileData=0x31e38c*(dwFileAttributes=0x2024, ftCreationTime.dwLowDateTime=0x540c1170, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x540c1170, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0xbf019010, ftLastWriteTime.dwHighDateTime=0x1d2faf2, nFileSizeHigh=0x0, nFileSizeLow=0x5ed, dwReserved0=0x0, dwReserved1=0x0, cFileName="BC570EC0DE58335AFAF92FDC8E3AA330_F4D449CA9E0EACCFE15946F8FCD349FC", cAlternateFileName="BC570E~1")) returned 1 [0078.120] FindNextFileW (in: hFindFile=0x382040, lpFindFileData=0x31e38c | out: lpFindFileData=0x31e38c*(dwFileAttributes=0x2024, ftCreationTime.dwLowDateTime=0x56bb3b80, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x56bb3b80, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0xaeca3800, ftLastWriteTime.dwHighDateTime=0x1d2e675, nFileSizeHigh=0x0, nFileSizeLow=0x6e3, dwReserved0=0x0, dwReserved1=0x0, cFileName="C46E7B0F942663A1EDC8D9D6D7869173_42820CDFEA41DC84AAB89A6B63561873", cAlternateFileName="C46E7B~2")) returned 1 [0078.120] FindNextFileW (in: hFindFile=0x382040, lpFindFileData=0x31e38c | out: lpFindFileData=0x31e38c*(dwFileAttributes=0x2024, ftCreationTime.dwLowDateTime=0x682fbd00, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x682fbd00, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0xae0bca00, ftLastWriteTime.dwHighDateTime=0x1d2e675, nFileSizeHigh=0x0, nFileSizeLow=0x6e3, dwReserved0=0x0, dwReserved1=0x0, cFileName="C46E7B0F942663A1EDC8D9D6D7869173_6043FC604A395E1485AF7AC16D16B7CE", cAlternateFileName="C46E7B~3")) returned 1 [0078.120] FindNextFileW (in: hFindFile=0x382040, lpFindFileData=0x31e38c | out: lpFindFileData=0x31e38c*(dwFileAttributes=0x2024, ftCreationTime.dwLowDateTime=0x5461c2f0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x5461c2f0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0xbf67eb30, ftLastWriteTime.dwHighDateTime=0x1d2faf2, nFileSizeHigh=0x0, nFileSizeLow=0x6e3, dwReserved0=0x0, dwReserved1=0x0, cFileName="C46E7B0F942663A1EDC8D9D6D7869173_D9B9F37ECE595B0B7B6AA12451D392CF", cAlternateFileName="C46E7B~1")) returned 1 [0078.120] FindNextFileW (in: hFindFile=0x382040, lpFindFileData=0x31e38c | out: lpFindFileData=0x31e38c*(dwFileAttributes=0x2024, ftCreationTime.dwLowDateTime=0x728c68a0, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x728c68a0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0xae63dce0, ftLastWriteTime.dwHighDateTime=0x1d2e675, nFileSizeHigh=0x0, nFileSizeLow=0x5ae, dwReserved0=0x0, dwReserved1=0x0, cFileName="D47DBD2F9E3365FBBE008D71FB06716F_4DD1053BCC726DA41115FFF4C7D6E9CC", cAlternateFileName="D47DBD~2")) returned 1 [0078.120] FindNextFileW (in: hFindFile=0x382040, lpFindFileData=0x31e38c | out: lpFindFileData=0x31e38c*(dwFileAttributes=0x2024, ftCreationTime.dwLowDateTime=0x545f6190, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x545f6190, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x69b6e1e0, ftLastWriteTime.dwHighDateTime=0x1d2e621, nFileSizeHigh=0x0, nFileSizeLow=0x5ae, dwReserved0=0x0, dwReserved1=0x0, cFileName="D47DBD2F9E3365FBBE008D71FB06716F_D33192D58AA9CA2B9097E848E9FE86DE", cAlternateFileName="D47DBD~1")) returned 1 [0078.120] FindNextFileW (in: hFindFile=0x382040, lpFindFileData=0x31e38c | out: lpFindFileData=0x31e38c*(dwFileAttributes=0x2024, ftCreationTime.dwLowDateTime=0x808d4a70, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x808d4a70, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x808d4a70, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x663, dwReserved0=0x0, dwReserved1=0x0, cFileName="D52C56D8F24BEC96604372AFBAF264E1_E76A2B627DD019EB51D9335F24B14C2C", cAlternateFileName="D52C56~1")) returned 1 [0078.120] FindNextFileW (in: hFindFile=0x382040, lpFindFileData=0x31e38c | out: lpFindFileData=0x31e38c*(dwFileAttributes=0x2024, ftCreationTime.dwLowDateTime=0x683e0540, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x683e0540, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0xb0f015a0, ftLastWriteTime.dwHighDateTime=0x1d2e675, nFileSizeHigh=0x0, nFileSizeLow=0x64b, dwReserved0=0x0, dwReserved1=0x0, cFileName="EA618097E393409AFA316F0F87E2C202_827C1B837652B048C4C84237D0838585", cAlternateFileName="EA6180~1")) returned 1 [0078.120] FindNextFileW (in: hFindFile=0x382040, lpFindFileData=0x31e38c | out: lpFindFileData=0x31e38c*(dwFileAttributes=0x2024, ftCreationTime.dwLowDateTime=0xbf312b90, ftCreationTime.dwHighDateTime=0x1d2faf2, ftLastAccessTime.dwLowDateTime=0xbf312b90, ftLastAccessTime.dwHighDateTime=0x1d2faf2, ftLastWriteTime.dwLowDateTime=0xbf312b90, ftLastWriteTime.dwHighDateTime=0x1d2faf2, nFileSizeHigh=0x0, nFileSizeLow=0x64c, dwReserved0=0x0, dwReserved1=0x0, cFileName="F293AEAD5E84FACFB686C4A620718928_C8424A0B24A72939B13720D0C000C9C1", cAlternateFileName="F293AE~1")) returned 1 [0078.120] FindNextFileW (in: hFindFile=0x382040, lpFindFileData=0x31e38c | out: lpFindFileData=0x31e38c*(dwFileAttributes=0x2024, ftCreationTime.dwLowDateTime=0xedbebcc0, ftCreationTime.dwHighDateTime=0x1d2e620, ftLastAccessTime.dwLowDateTime=0xedbebcc0, ftLastAccessTime.dwHighDateTime=0x1d2e620, ftLastWriteTime.dwLowDateTime=0xa989d730, ftLastWriteTime.dwHighDateTime=0x1d2fab4, nFileSizeHigh=0x0, nFileSizeLow=0x226, dwReserved0=0x0, dwReserved1=0x0, cFileName="F90F18257CBB4D84216AC1E1F3BB2C76", cAlternateFileName="F90F18~1")) returned 1 [0078.120] FindNextFileW (in: hFindFile=0x382040, lpFindFileData=0x31e38c | out: lpFindFileData=0x31e38c*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0078.120] FindClose (in: hFindFile=0x382040 | out: hFindFile=0x382040) returned 1 [0078.120] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e614) returned 1 [0078.120] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e620) returned 1 [0078.120] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e654) returned 1 [0078.120] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Microsoft\\CryptnetUrlCache\\Content", nBufferLength=0x105, lpBuffer=0x31e15c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Microsoft\\CryptnetUrlCache\\Content", lpFilePart=0x0) returned 0x51 [0078.120] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Microsoft\\CryptnetUrlCache\\Content\\", nBufferLength=0x105, lpBuffer=0x31e130, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Microsoft\\CryptnetUrlCache\\Content\\", lpFilePart=0x0) returned 0x52 [0078.120] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Microsoft\\CryptnetUrlCache\\Content\\*", lpFindFileData=0x31e37c | out: lpFindFileData=0x31e37c*(dwFileAttributes=0x2014, ftCreationTime.dwLowDateTime=0x28cff640, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0xd0de60b0, ftLastAccessTime.dwHighDateTime=0x1d2faf2, ftLastWriteTime.dwLowDateTime=0xd0de60b0, ftLastWriteTime.dwHighDateTime=0x1d2faf2, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x382040 [0078.120] FindNextFileW (in: hFindFile=0x382040, lpFindFileData=0x31e38c | out: lpFindFileData=0x31e38c*(dwFileAttributes=0x2014, ftCreationTime.dwLowDateTime=0x28cff640, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0xd0de60b0, ftLastAccessTime.dwHighDateTime=0x1d2faf2, ftLastWriteTime.dwLowDateTime=0xd0de60b0, ftLastWriteTime.dwHighDateTime=0x1d2faf2, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0078.121] FindNextFileW (in: hFindFile=0x382040, lpFindFileData=0x31e38c | out: lpFindFileData=0x31e38c*(dwFileAttributes=0x2024, ftCreationTime.dwLowDateTime=0xbf9eaad0, ftCreationTime.dwHighDateTime=0x1d2faf2, ftLastAccessTime.dwLowDateTime=0xbf9eaad0, ftLastAccessTime.dwHighDateTime=0x1d2faf2, ftLastWriteTime.dwLowDateTime=0xbf9eaad0, ftLastWriteTime.dwHighDateTime=0x1d2faf2, nFileSizeHigh=0x0, nFileSizeLow=0x1d7, dwReserved0=0x0, dwReserved1=0x0, cFileName="024823B39FBEACCDB5C06426A8168E99_6D5CAB161A1C65362A913D29BE09D91B", cAlternateFileName="024823~1")) returned 1 [0078.121] FindNextFileW (in: hFindFile=0x382040, lpFindFileData=0x31e38c | out: lpFindFileData=0x31e38c*(dwFileAttributes=0x2024, ftCreationTime.dwLowDateTime=0x53bd8410, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x53bd8410, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0xbe98d390, ftLastWriteTime.dwHighDateTime=0x1d2faf2, nFileSizeHigh=0x0, nFileSizeLow=0x561, dwReserved0=0x0, dwReserved1=0x0, cFileName="0F1583FFF42FFF476A09801ACB69213F_E3F4A8C96454D7D3441D2C1BCE81F875", cAlternateFileName="0F1583~1")) returned 1 [0078.121] FindNextFileW (in: hFindFile=0x382040, lpFindFileData=0x31e38c | out: lpFindFileData=0x31e38c*(dwFileAttributes=0x2024, ftCreationTime.dwLowDateTime=0xbf952550, ftCreationTime.dwHighDateTime=0x1d2faf2, ftLastAccessTime.dwLowDateTime=0xbf952550, ftLastAccessTime.dwHighDateTime=0x1d2faf2, ftLastWriteTime.dwLowDateTime=0xbf952550, ftLastWriteTime.dwHighDateTime=0x1d2faf2, nFileSizeHigh=0x0, nFileSizeLow=0x1d8, dwReserved0=0x0, dwReserved1=0x0, cFileName="1BB09BEEC155258835C193A7AA85AA5B_A7B2B53AF2A12E2CB0A41B96D21D7973", cAlternateFileName="1BB09B~1")) returned 1 [0078.121] FindNextFileW (in: hFindFile=0x382040, lpFindFileData=0x31e38c | out: lpFindFileData=0x31e38c*(dwFileAttributes=0x2024, ftCreationTime.dwLowDateTime=0x4c00edb0, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0x4c00edb0, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0x4c00edb0, ftLastWriteTime.dwHighDateTime=0x1d2dda4, nFileSizeHigh=0x0, nFileSizeLow=0xf1d, dwReserved0=0x0, dwReserved1=0x0, cFileName="1DAF2884EC4DFA96BA4A58D4DBC9C406", cAlternateFileName="1DAF28~1")) returned 1 [0078.121] FindNextFileW (in: hFindFile=0x382040, lpFindFileData=0x31e38c | out: lpFindFileData=0x31e38c*(dwFileAttributes=0x2024, ftCreationTime.dwLowDateTime=0x580eb5c0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x580eb5c0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0xaedd4300, ftLastWriteTime.dwHighDateTime=0x1d2e675, nFileSizeHigh=0x0, nFileSizeLow=0x145, dwReserved0=0x0, dwReserved1=0x0, cFileName="23B523C9E7746F715D33C6527C18EB9D", cAlternateFileName="23B523~1")) returned 1 [0078.121] FindNextFileW (in: hFindFile=0x382040, lpFindFileData=0x31e38c | out: lpFindFileData=0x31e38c*(dwFileAttributes=0x2024, ftCreationTime.dwLowDateTime=0xc3791460, ftCreationTime.dwHighDateTime=0x1d2e675, ftLastAccessTime.dwLowDateTime=0xc3791460, ftLastAccessTime.dwHighDateTime=0x1d2e675, ftLastWriteTime.dwLowDateTime=0xc3791460, ftLastWriteTime.dwHighDateTime=0x1d2e675, nFileSizeHigh=0x0, nFileSizeLow=0x209, dwReserved0=0x0, dwReserved1=0x0, cFileName="3130B1871A126520A8C47861EFE3ED4D", cAlternateFileName="3130B1~1")) returned 1 [0078.121] FindNextFileW (in: hFindFile=0x382040, lpFindFileData=0x31e38c | out: lpFindFileData=0x31e38c*(dwFileAttributes=0x2024, ftCreationTime.dwLowDateTime=0x53fdc930, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x53fdc930, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0xbf16fc70, ftLastWriteTime.dwHighDateTime=0x1d2faf2, nFileSizeHigh=0x0, nFileSizeLow=0x58b, dwReserved0=0x0, dwReserved1=0x0, cFileName="3388ECC3F7BC4A9271C10ED8621E5A65_F55C512047947B70F94DE5DEC6D6838D", cAlternateFileName="3388EC~1")) returned 1 [0078.121] FindNextFileW (in: hFindFile=0x382040, lpFindFileData=0x31e38c | out: lpFindFileData=0x31e38c*(dwFileAttributes=0x2024, ftCreationTime.dwLowDateTime=0x53b19d30, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x53b19d30, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x54583d70, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0xb68, dwReserved0=0x0, dwReserved1=0x0, cFileName="40E450F7CE13419A2CCC2A5445035A0A_06F02B1F13AB4B11B8FC669BDE565AF1", cAlternateFileName="40E450~1")) returned 1 [0078.121] FindNextFileW (in: hFindFile=0x382040, lpFindFileData=0x31e38c | out: lpFindFileData=0x31e38c*(dwFileAttributes=0x2024, ftCreationTime.dwLowDateTime=0x54537ab0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x54537ab0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0xae76e7e0, ftLastWriteTime.dwHighDateTime=0x1d2e675, nFileSizeHigh=0x0, nFileSizeLow=0x1d7, dwReserved0=0x0, dwReserved1=0x0, cFileName="4C8F841FB02DEC8C10108028DB86A08D_8DAFFFD2D43BDC7A1717F5B61C303398", cAlternateFileName="4C8F84~1")) returned 1 [0078.121] FindNextFileW (in: hFindFile=0x382040, lpFindFileData=0x31e38c | out: lpFindFileData=0x31e38c*(dwFileAttributes=0x2024, ftCreationTime.dwLowDateTime=0x7295ee20, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x7295ee20, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0xadfb2060, ftLastWriteTime.dwHighDateTime=0x1d2e675, nFileSizeHigh=0x0, nFileSizeLow=0x680, dwReserved0=0x0, dwReserved1=0x0, cFileName="4DD39726D4B55AC3B4119B35A893323C_46CCCFB940A93F39A734F69EFCDD76E9", cAlternateFileName="4DD397~1")) returned 1 [0078.121] FindNextFileW (in: hFindFile=0x382040, lpFindFileData=0x31e38c | out: lpFindFileData=0x31e38c*(dwFileAttributes=0x2024, ftCreationTime.dwLowDateTime=0xbf8b9fd0, ftCreationTime.dwHighDateTime=0x1d2faf2, ftLastAccessTime.dwLowDateTime=0xbf8b9fd0, ftLastAccessTime.dwHighDateTime=0x1d2faf2, ftLastWriteTime.dwLowDateTime=0xbf8b9fd0, ftLastWriteTime.dwHighDateTime=0x1d2faf2, nFileSizeHigh=0x0, nFileSizeLow=0x2d7, dwReserved0=0x0, dwReserved1=0x0, cFileName="5080DC7A65DB6A5960ECD874088F3328_2908F682DFC81A793BD240CF29711C77", cAlternateFileName="5080DC~2")) returned 1 [0078.121] FindNextFileW (in: hFindFile=0x382040, lpFindFileData=0x31e38c | out: lpFindFileData=0x31e38c*(dwFileAttributes=0x2024, ftCreationTime.dwLowDateTime=0xbf86dd10, ftCreationTime.dwHighDateTime=0x1d2faf2, ftLastAccessTime.dwLowDateTime=0xbf86dd10, ftLastAccessTime.dwHighDateTime=0x1d2faf2, ftLastWriteTime.dwLowDateTime=0xbf86dd10, ftLastWriteTime.dwHighDateTime=0x1d2faf2, nFileSizeHigh=0x0, nFileSizeLow=0x2d7, dwReserved0=0x0, dwReserved1=0x0, cFileName="5080DC7A65DB6A5960ECD874088F3328_6CBA2C06D5985DD95AE59AF8FC7C6220", cAlternateFileName="5080DC~1")) returned 1 [0078.121] FindNextFileW (in: hFindFile=0x382040, lpFindFileData=0x31e38c | out: lpFindFileData=0x31e38c*(dwFileAttributes=0x2024, ftCreationTime.dwLowDateTime=0xbf763370, ftCreationTime.dwHighDateTime=0x1d2faf2, ftLastAccessTime.dwLowDateTime=0xbf763370, ftLastAccessTime.dwHighDateTime=0x1d2faf2, ftLastWriteTime.dwLowDateTime=0xbf7af630, ftLastWriteTime.dwHighDateTime=0x1d2faf2, nFileSizeHigh=0x0, nFileSizeLow=0x1d7, dwReserved0=0x0, dwReserved1=0x0, cFileName="5457A8CE4B2A7499F8299A013B6E1C7C_CE50F893881D43DC0C815E4D80FAF2B4", cAlternateFileName="5457A8~1")) returned 1 [0078.121] FindNextFileW (in: hFindFile=0x382040, lpFindFileData=0x31e38c | out: lpFindFileData=0x31e38c*(dwFileAttributes=0x2024, ftCreationTime.dwLowDateTime=0xed9b0820, ftCreationTime.dwHighDateTime=0x1d2e620, ftLastAccessTime.dwLowDateTime=0xed9b0820, ftLastAccessTime.dwHighDateTime=0x1d2e620, ftLastWriteTime.dwLowDateTime=0xed9b0820, ftLastWriteTime.dwHighDateTime=0x1d2e620, nFileSizeHigh=0x0, nFileSizeLow=0x32d, dwReserved0=0x0, dwReserved1=0x0, cFileName="696F3DE637E6DE85B458996D49D759AD", cAlternateFileName="696F3D~1")) returned 1 [0078.121] FindNextFileW (in: hFindFile=0x382040, lpFindFileData=0x31e38c | out: lpFindFileData=0x31e38c*(dwFileAttributes=0x2024, ftCreationTime.dwLowDateTime=0xbf763370, ftCreationTime.dwHighDateTime=0x1d2faf2, ftLastAccessTime.dwLowDateTime=0xbf763370, ftLastAccessTime.dwHighDateTime=0x1d2faf2, ftLastWriteTime.dwLowDateTime=0xbf763370, ftLastWriteTime.dwHighDateTime=0x1d2faf2, nFileSizeHigh=0x0, nFileSizeLow=0x648, dwReserved0=0x0, dwReserved1=0x0, cFileName="705A76DE71EA2CAEBB8F0907449CE086_9752C5B2D53EE7A19F7764B52968EC21", cAlternateFileName="705A76~1")) returned 1 [0078.121] FindNextFileW (in: hFindFile=0x382040, lpFindFileData=0x31e38c | out: lpFindFileData=0x31e38c*(dwFileAttributes=0x2024, ftCreationTime.dwLowDateTime=0xedb2d5e0, ftCreationTime.dwHighDateTime=0x1d2e620, ftLastAccessTime.dwLowDateTime=0xedb2d5e0, ftLastAccessTime.dwHighDateTime=0x1d2e620, ftLastWriteTime.dwLowDateTime=0xedb2d5e0, ftLastWriteTime.dwHighDateTime=0x1d2e620, nFileSizeHigh=0x0, nFileSizeLow=0x22a, dwReserved0=0x0, dwReserved1=0x0, cFileName="7396C420A8E1BC1DA97F1AF0D10BAD21", cAlternateFileName="7396C4~1")) returned 1 [0078.121] FindNextFileW (in: hFindFile=0x382040, lpFindFileData=0x31e38c | out: lpFindFileData=0x31e38c*(dwFileAttributes=0x2024, ftCreationTime.dwLowDateTime=0x540c1170, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x540c1170, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x312640, ftLastWriteTime.dwHighDateTime=0x1d2e621, nFileSizeHigh=0x0, nFileSizeLow=0x1d7, dwReserved0=0x0, dwReserved1=0x0, cFileName="7423F88C7F265F0DEFC08EA88C3BDE45_D975BBA8033175C8D112023D8A7A8AD6", cAlternateFileName="7423F8~1")) returned 1 [0078.121] FindNextFileW (in: hFindFile=0x382040, lpFindFileData=0x31e38c | out: lpFindFileData=0x31e38c*(dwFileAttributes=0x2024, ftCreationTime.dwLowDateTime=0x28dbdd20, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28dbdd20, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xd0e4c510, ftLastWriteTime.dwHighDateTime=0x1d2ddf4, nFileSizeHigh=0x0, nFileSizeLow=0x1fa, dwReserved0=0x0, dwReserved1=0x0, cFileName="7B2238AACCEDC3F1FFE8E7EB5F575EC9", cAlternateFileName="7B2238~1")) returned 1 [0078.121] FindNextFileW (in: hFindFile=0x382040, lpFindFileData=0x31e38c | out: lpFindFileData=0x31e38c*(dwFileAttributes=0x2024, ftCreationTime.dwLowDateTime=0x6b2324c0, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x6b2324c0, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x6b2324c0, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x67c, dwReserved0=0x0, dwReserved1=0x0, cFileName="7B8944BA8AD0EFDF0E01A43EF62BECD0_B2DB1CC4B5F2D2A802D56AAED525802D", cAlternateFileName="7B8944~1")) returned 1 [0078.121] FindNextFileW (in: hFindFile=0x382040, lpFindFileData=0x31e38c | out: lpFindFileData=0x31e38c*(dwFileAttributes=0x2024, ftCreationTime.dwLowDateTime=0x6b199f40, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x6b199f40, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x6b199f40, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x6e3, dwReserved0=0x0, dwReserved1=0x0, cFileName="7D266D9E1E69FA1EEFB9699B009B34C8_0A9BFDD75B598C2110CBF610C078E6E6", cAlternateFileName="7D266D~2")) returned 1 [0078.121] FindNextFileW (in: hFindFile=0x382040, lpFindFileData=0x31e38c | out: lpFindFileData=0x31e38c*(dwFileAttributes=0x2024, ftCreationTime.dwLowDateTime=0xefaf7160, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0xefaf7160, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0xaec313e0, ftLastWriteTime.dwHighDateTime=0x1d2e675, nFileSizeHigh=0x0, nFileSizeLow=0x6e3, dwReserved0=0x0, dwReserved1=0x0, cFileName="7D266D9E1E69FA1EEFB9699B009B34C8_1D5A876A9113EC07224C45E5A870E3BD", cAlternateFileName="7D266D~1")) returned 1 [0078.121] FindNextFileW (in: hFindFile=0x382040, lpFindFileData=0x31e38c | out: lpFindFileData=0x31e38c*(dwFileAttributes=0x2024, ftCreationTime.dwLowDateTime=0x6056b480, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x6056b480, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x1ef687a0, ftLastWriteTime.dwHighDateTime=0x1d2e621, nFileSizeHigh=0x0, nFileSizeLow=0x1cf, dwReserved0=0x0, dwReserved1=0x0, cFileName="8059E9A0D314877E40FE93D8CCFB3C69_234CB5D64705D4DBB4DA839716359AF0", cAlternateFileName="8059E9~3")) returned 1 [0078.122] FindNextFileW (in: hFindFile=0x382040, lpFindFileData=0x31e38c | out: lpFindFileData=0x31e38c*(dwFileAttributes=0x2024, ftCreationTime.dwLowDateTime=0x61210960, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x61210960, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0xaecc9960, ftLastWriteTime.dwHighDateTime=0x1d2e675, nFileSizeHigh=0x0, nFileSizeLow=0x1cf, dwReserved0=0x0, dwReserved1=0x0, cFileName="8059E9A0D314877E40FE93D8CCFB3C69_294110D6990EE392327F8A606D55BC1E", cAlternateFileName="80273C~1")) returned 1 [0078.122] FindNextFileW (in: hFindFile=0x382040, lpFindFileData=0x31e38c | out: lpFindFileData=0x31e38c*(dwFileAttributes=0x2024, ftCreationTime.dwLowDateTime=0x58e24200, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x58e24200, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0xae9f5f40, ftLastWriteTime.dwHighDateTime=0x1d2e675, nFileSizeHigh=0x0, nFileSizeLow=0x1cf, dwReserved0=0x0, dwReserved1=0x0, cFileName="8059E9A0D314877E40FE93D8CCFB3C69_50167909FCFE0C66153F1901439CBBA1", cAlternateFileName="8059E9~2")) returned 1 [0078.122] FindNextFileW (in: hFindFile=0x382040, lpFindFileData=0x31e38c | out: lpFindFileData=0x31e38c*(dwFileAttributes=0x2024, ftCreationTime.dwLowDateTime=0x61236ac0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x61236ac0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x3b0b01a0, ftLastWriteTime.dwHighDateTime=0x1d2e621, nFileSizeHigh=0x0, nFileSizeLow=0x1cf, dwReserved0=0x0, dwReserved1=0x0, cFileName="8059E9A0D314877E40FE93D8CCFB3C69_581C904DB5924E46A6C1A8637614A40E", cAlternateFileName="809279~1")) returned 1 [0078.122] FindNextFileW (in: hFindFile=0x382040, lpFindFileData=0x31e38c | out: lpFindFileData=0x31e38c*(dwFileAttributes=0x2024, ftCreationTime.dwLowDateTime=0x58394060, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x58394060, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0xb0f739c0, ftLastWriteTime.dwHighDateTime=0x1d2e675, nFileSizeHigh=0x0, nFileSizeLow=0x1cf, dwReserved0=0x0, dwReserved1=0x0, cFileName="8059E9A0D314877E40FE93D8CCFB3C69_5EA65844B9EF5670A9C002CBD85B10A4", cAlternateFileName="8059E9~1")) returned 1 [0078.122] FindNextFileW (in: hFindFile=0x382040, lpFindFileData=0x31e38c | out: lpFindFileData=0x31e38c*(dwFileAttributes=0x2024, ftCreationTime.dwLowDateTime=0x62378a40, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x62378a40, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0xae9a9c80, ftLastWriteTime.dwHighDateTime=0x1d2e675, nFileSizeHigh=0x0, nFileSizeLow=0x1cf, dwReserved0=0x0, dwReserved1=0x0, cFileName="8059E9A0D314877E40FE93D8CCFB3C69_74E943F7DAB6D19E37E4854057155778", cAlternateFileName="80E4BE~1")) returned 1 [0078.122] FindNextFileW (in: hFindFile=0x382040, lpFindFileData=0x31e38c | out: lpFindFileData=0x31e38c*(dwFileAttributes=0x2024, ftCreationTime.dwLowDateTime=0x613675c0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x613675c0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x69bba4a0, ftLastWriteTime.dwHighDateTime=0x1d2e621, nFileSizeHigh=0x0, nFileSizeLow=0x1cf, dwReserved0=0x0, dwReserved1=0x0, cFileName="8059E9A0D314877E40FE93D8CCFB3C69_C080DA2AE431C1A7F3B0C147EEB043ED", cAlternateFileName="803B9E~1")) returned 1 [0078.122] FindNextFileW (in: hFindFile=0x382040, lpFindFileData=0x31e38c | out: lpFindFileData=0x31e38c*(dwFileAttributes=0x2024, ftCreationTime.dwLowDateTime=0x63c50fe0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x63c50fe0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0xb100bf40, ftLastWriteTime.dwHighDateTime=0x1d2e675, nFileSizeHigh=0x0, nFileSizeLow=0x1cf, dwReserved0=0x0, dwReserved1=0x0, cFileName="8059E9A0D314877E40FE93D8CCFB3C69_E907D7A04657714B5B06D18BC920971E", cAlternateFileName="803D37~1")) returned 1 [0078.122] FindNextFileW (in: hFindFile=0x382040, lpFindFileData=0x31e38c | out: lpFindFileData=0x31e38c*(dwFileAttributes=0x2024, ftCreationTime.dwLowDateTime=0x61021780, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x61021780, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0xb1058200, ftLastWriteTime.dwHighDateTime=0x1d2e675, nFileSizeHigh=0x0, nFileSizeLow=0x1cf, dwReserved0=0x0, dwReserved1=0x0, cFileName="8059E9A0D314877E40FE93D8CCFB3C69_F2318F7AB33980A131A265454C39CA30", cAlternateFileName="8059E9~4")) returned 1 [0078.122] FindNextFileW (in: hFindFile=0x382040, lpFindFileData=0x31e38c | out: lpFindFileData=0x31e38c*(dwFileAttributes=0x2024, ftCreationTime.dwLowDateTime=0x636a9ba0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x636a9ba0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0xb139e040, ftLastWriteTime.dwHighDateTime=0x1d2e675, nFileSizeHigh=0x0, nFileSizeLow=0x1cf, dwReserved0=0x0, dwReserved1=0x0, cFileName="8059E9A0D314877E40FE93D8CCFB3C69_F6E15778DC8E326895C606FBFA0392EB", cAlternateFileName="800D31~1")) returned 1 [0078.122] FindNextFileW (in: hFindFile=0x382040, lpFindFileData=0x31e38c | out: lpFindFileData=0x31e38c*(dwFileAttributes=0x2024, ftCreationTime.dwLowDateTime=0x581f7ea0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x581f7ea0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0xb0f4d860, ftLastWriteTime.dwHighDateTime=0x1d2e675, nFileSizeHigh=0x0, nFileSizeLow=0x56e, dwReserved0=0x0, dwReserved1=0x0, cFileName="828298824EA5549947C17DDABF6871F5_0206EFBC540300C3BF0163CDBC3D7D56", cAlternateFileName="828298~1")) returned 1 [0078.122] FindNextFileW (in: hFindFile=0x382040, lpFindFileData=0x31e38c | out: lpFindFileData=0x31e38c*(dwFileAttributes=0x2024, ftCreationTime.dwLowDateTime=0xec3c5340, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0xec3c5340, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0xb16257a0, ftLastWriteTime.dwHighDateTime=0x1d2e675, nFileSizeHigh=0x0, nFileSizeLow=0x6e3, dwReserved0=0x0, dwReserved1=0x0, cFileName="8828F39C7C0CE9A14B25C7EB321181BA_3DF94EB797096674F7793A562A778C5F", cAlternateFileName="8828F3~1")) returned 1 [0078.122] FindNextFileW (in: hFindFile=0x382040, lpFindFileData=0x31e38c | out: lpFindFileData=0x31e38c*(dwFileAttributes=0x2024, ftCreationTime.dwLowDateTime=0x8064ac00, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x8064ac00, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x80670d60, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x6e3, dwReserved0=0x0, dwReserved1=0x0, cFileName="8828F39C7C0CE9A14B25C7EB321181BA_C6EF73E4482B2588B1252D1A64B99416", cAlternateFileName="8828F3~2")) returned 1 [0078.122] FindNextFileW (in: hFindFile=0x382040, lpFindFileData=0x31e38c | out: lpFindFileData=0x31e38c*(dwFileAttributes=0x2024, ftCreationTime.dwLowDateTime=0x6aa2c0a0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x6aa2c0a0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0xadf19ae0, ftLastWriteTime.dwHighDateTime=0x1d2e675, nFileSizeHigh=0x0, nFileSizeLow=0x59d, dwReserved0=0x0, dwReserved1=0x0, cFileName="8E4E510F44A56B8C8ECFEC352907C373_411140098D71F028134E9B8A21255C61", cAlternateFileName="8E4E51~1")) returned 1 [0078.122] FindNextFileW (in: hFindFile=0x382040, lpFindFileData=0x31e38c | out: lpFindFileData=0x31e38c*(dwFileAttributes=0x2024, ftCreationTime.dwLowDateTime=0x28dbdd20, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28dbdd20, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xbddd270, ftLastWriteTime.dwHighDateTime=0x1d35d06, nFileSizeHigh=0x0, nFileSizeLow=0xd2da, dwReserved0=0x0, dwReserved1=0x0, cFileName="94308059B57B3142E455B38A6EB92015", cAlternateFileName="943080~1")) returned 1 [0078.122] FindNextFileW (in: hFindFile=0x382040, lpFindFileData=0x31e38c | out: lpFindFileData=0x31e38c*(dwFileAttributes=0x2024, ftCreationTime.dwLowDateTime=0x6a83cec0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x6a83cec0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0xaebe5120, ftLastWriteTime.dwHighDateTime=0x1d2e675, nFileSizeHigh=0x0, nFileSizeLow=0x5e0, dwReserved0=0x0, dwReserved1=0x0, cFileName="955CAB6FF6A24D5820D50B5BA1CF79C7_AD9E7615297A3A83320AACE5801A04F9", cAlternateFileName="955CAB~1")) returned 1 [0078.122] FindNextFileW (in: hFindFile=0x382040, lpFindFileData=0x31e38c | out: lpFindFileData=0x31e38c*(dwFileAttributes=0x2024, ftCreationTime.dwLowDateTime=0xbf3f73d0, ftCreationTime.dwHighDateTime=0x1d2faf2, ftLastAccessTime.dwLowDateTime=0xbf3f73d0, ftLastAccessTime.dwHighDateTime=0x1d2faf2, ftLastWriteTime.dwLowDateTime=0xbf3f73d0, ftLastWriteTime.dwHighDateTime=0x1d2faf2, nFileSizeHigh=0x0, nFileSizeLow=0x5ab, dwReserved0=0x0, dwReserved1=0x0, cFileName="9BC2FFC5D9591E1BD3545230E9B7CC36_CF30943571F9BEE96C487B2D9F0436E6", cAlternateFileName="9BC2FF~1")) returned 1 [0078.122] FindNextFileW (in: hFindFile=0x382040, lpFindFileData=0x31e38c | out: lpFindFileData=0x31e38c*(dwFileAttributes=0x2024, ftCreationTime.dwLowDateTime=0xe06277d0, ftCreationTime.dwHighDateTime=0x1d2ddf4, ftLastAccessTime.dwLowDateTime=0xe06277d0, ftLastAccessTime.dwHighDateTime=0x1d2ddf4, ftLastWriteTime.dwLowDateTime=0xb15d94e0, ftLastWriteTime.dwHighDateTime=0x1d2e675, nFileSizeHigh=0x0, nFileSizeLow=0x652, dwReserved0=0x0, dwReserved1=0x0, cFileName="9C888BEABCCBC2A97B0D6D9214C3BA37_1213DC6F71E4C3B05E7BCEEBC203A31E", cAlternateFileName="9C888B~1")) returned 1 [0078.122] FindNextFileW (in: hFindFile=0x382040, lpFindFileData=0x31e38c | out: lpFindFileData=0x31e38c*(dwFileAttributes=0x2024, ftCreationTime.dwLowDateTime=0xe07ca6f0, ftCreationTime.dwHighDateTime=0x1d2ddf4, ftLastAccessTime.dwLowDateTime=0xe07ca6f0, ftLastAccessTime.dwHighDateTime=0x1d2ddf4, ftLastWriteTime.dwLowDateTime=0x965accc0, ftLastWriteTime.dwHighDateTime=0x1d2e621, nFileSizeHigh=0x0, nFileSizeLow=0x652, dwReserved0=0x0, dwReserved1=0x0, cFileName="9C888BEABCCBC2A97B0D6D9214C3BA37_EBC75728C6119A77E4DA8559DD10F061", cAlternateFileName="9C888B~2")) returned 1 [0078.122] FindNextFileW (in: hFindFile=0x382040, lpFindFileData=0x31e38c | out: lpFindFileData=0x31e38c*(dwFileAttributes=0x2024, ftCreationTime.dwLowDateTime=0x54bc3730, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x54bc3730, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0xb11d4fc0, ftLastWriteTime.dwHighDateTime=0x1d2e675, nFileSizeHigh=0x0, nFileSizeLow=0x1d7, dwReserved0=0x0, dwReserved1=0x0, cFileName="A9E4F776657345B52012CE8E279D314C_183A5BE0B233CC1D513955FABECF9450", cAlternateFileName="A9E4F7~1")) returned 1 [0078.122] FindNextFileW (in: hFindFile=0x382040, lpFindFileData=0x31e38c | out: lpFindFileData=0x31e38c*(dwFileAttributes=0x2024, ftCreationTime.dwLowDateTime=0x53bfe570, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x53bfe570, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0xbe9b34f0, ftLastWriteTime.dwHighDateTime=0x1d2faf2, nFileSizeHigh=0x0, nFileSizeLow=0x5ee, dwReserved0=0x0, dwReserved1=0x0, cFileName="ACF244F1A10D4DBED0D88EBA0C43A9B5_BA1AB6C2BDFDF57799E8116E4002D001", cAlternateFileName="ACF244~1")) returned 1 [0078.122] FindNextFileW (in: hFindFile=0x382040, lpFindFileData=0x31e38c | out: lpFindFileData=0x31e38c*(dwFileAttributes=0x2024, ftCreationTime.dwLowDateTime=0xe04aaa10, ftCreationTime.dwHighDateTime=0x1d2ddf4, ftLastAccessTime.dwLowDateTime=0xe04aaa10, ftLastAccessTime.dwHighDateTime=0x1d2ddf4, ftLastWriteTime.dwLowDateTime=0xae4e7080, ftLastWriteTime.dwHighDateTime=0x1d2e675, nFileSizeHigh=0x0, nFileSizeLow=0x652, dwReserved0=0x0, dwReserved1=0x0, cFileName="B3BB9C1BA2D19E090AE305B2683903A0_6F0A84CE2BA99BD19D42C92610275852", cAlternateFileName="B3BB9C~2")) returned 1 [0078.123] FindNextFileW (in: hFindFile=0x382040, lpFindFileData=0x31e38c | out: lpFindFileData=0x31e38c*(dwFileAttributes=0x2024, ftCreationTime.dwLowDateTime=0xefc01b00, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0xefc01b00, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0xaa4ee1e0, ftLastWriteTime.dwHighDateTime=0x1d2e620, nFileSizeHigh=0x0, nFileSizeLow=0x652, dwReserved0=0x0, dwReserved1=0x0, cFileName="B3BB9C1BA2D19E090AE305B2683903A0_B89A63AC6877BD1ED812438CE82C3EB8", cAlternateFileName="B3BB9C~1")) returned 1 [0078.123] FindNextFileW (in: hFindFile=0x382040, lpFindFileData=0x31e38c | out: lpFindFileData=0x31e38c*(dwFileAttributes=0x2024, ftCreationTime.dwLowDateTime=0x54322770, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x54322770, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0xbf019010, ftLastWriteTime.dwHighDateTime=0x1d2faf2, nFileSizeHigh=0x0, nFileSizeLow=0x5ed, dwReserved0=0x0, dwReserved1=0x0, cFileName="BC570EC0DE58335AFAF92FDC8E3AA330_6CE6E578B5C8485B4BE3C4D58E12F150", cAlternateFileName="BC570E~2")) returned 1 [0078.123] FindNextFileW (in: hFindFile=0x382040, lpFindFileData=0x31e38c | out: lpFindFileData=0x31e38c*(dwFileAttributes=0x2024, ftCreationTime.dwLowDateTime=0x540c1170, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x540c1170, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0xbf019010, ftLastWriteTime.dwHighDateTime=0x1d2faf2, nFileSizeHigh=0x0, nFileSizeLow=0x5ed, dwReserved0=0x0, dwReserved1=0x0, cFileName="BC570EC0DE58335AFAF92FDC8E3AA330_F4D449CA9E0EACCFE15946F8FCD349FC", cAlternateFileName="BC570E~1")) returned 1 [0078.123] FindNextFileW (in: hFindFile=0x382040, lpFindFileData=0x31e38c | out: lpFindFileData=0x31e38c*(dwFileAttributes=0x2024, ftCreationTime.dwLowDateTime=0x56bb3b80, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x56bb3b80, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0xaeca3800, ftLastWriteTime.dwHighDateTime=0x1d2e675, nFileSizeHigh=0x0, nFileSizeLow=0x6e3, dwReserved0=0x0, dwReserved1=0x0, cFileName="C46E7B0F942663A1EDC8D9D6D7869173_42820CDFEA41DC84AAB89A6B63561873", cAlternateFileName="C46E7B~2")) returned 1 [0078.123] FindNextFileW (in: hFindFile=0x382040, lpFindFileData=0x31e38c | out: lpFindFileData=0x31e38c*(dwFileAttributes=0x2024, ftCreationTime.dwLowDateTime=0x682fbd00, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x682fbd00, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0xae0bca00, ftLastWriteTime.dwHighDateTime=0x1d2e675, nFileSizeHigh=0x0, nFileSizeLow=0x6e3, dwReserved0=0x0, dwReserved1=0x0, cFileName="C46E7B0F942663A1EDC8D9D6D7869173_6043FC604A395E1485AF7AC16D16B7CE", cAlternateFileName="C46E7B~3")) returned 1 [0078.123] FindNextFileW (in: hFindFile=0x382040, lpFindFileData=0x31e38c | out: lpFindFileData=0x31e38c*(dwFileAttributes=0x2024, ftCreationTime.dwLowDateTime=0x5461c2f0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x5461c2f0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0xbf67eb30, ftLastWriteTime.dwHighDateTime=0x1d2faf2, nFileSizeHigh=0x0, nFileSizeLow=0x6e3, dwReserved0=0x0, dwReserved1=0x0, cFileName="C46E7B0F942663A1EDC8D9D6D7869173_D9B9F37ECE595B0B7B6AA12451D392CF", cAlternateFileName="C46E7B~1")) returned 1 [0078.123] FindNextFileW (in: hFindFile=0x382040, lpFindFileData=0x31e38c | out: lpFindFileData=0x31e38c*(dwFileAttributes=0x2024, ftCreationTime.dwLowDateTime=0x728c68a0, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x728c68a0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0xae63dce0, ftLastWriteTime.dwHighDateTime=0x1d2e675, nFileSizeHigh=0x0, nFileSizeLow=0x5ae, dwReserved0=0x0, dwReserved1=0x0, cFileName="D47DBD2F9E3365FBBE008D71FB06716F_4DD1053BCC726DA41115FFF4C7D6E9CC", cAlternateFileName="D47DBD~2")) returned 1 [0078.123] FindNextFileW (in: hFindFile=0x382040, lpFindFileData=0x31e38c | out: lpFindFileData=0x31e38c*(dwFileAttributes=0x2024, ftCreationTime.dwLowDateTime=0x545f6190, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x545f6190, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x69b6e1e0, ftLastWriteTime.dwHighDateTime=0x1d2e621, nFileSizeHigh=0x0, nFileSizeLow=0x5ae, dwReserved0=0x0, dwReserved1=0x0, cFileName="D47DBD2F9E3365FBBE008D71FB06716F_D33192D58AA9CA2B9097E848E9FE86DE", cAlternateFileName="D47DBD~1")) returned 1 [0078.123] FindNextFileW (in: hFindFile=0x382040, lpFindFileData=0x31e38c | out: lpFindFileData=0x31e38c*(dwFileAttributes=0x2024, ftCreationTime.dwLowDateTime=0x808d4a70, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x808d4a70, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x808d4a70, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x663, dwReserved0=0x0, dwReserved1=0x0, cFileName="D52C56D8F24BEC96604372AFBAF264E1_E76A2B627DD019EB51D9335F24B14C2C", cAlternateFileName="D52C56~1")) returned 1 [0078.123] FindNextFileW (in: hFindFile=0x382040, lpFindFileData=0x31e38c | out: lpFindFileData=0x31e38c*(dwFileAttributes=0x2024, ftCreationTime.dwLowDateTime=0x683e0540, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x683e0540, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0xb0f015a0, ftLastWriteTime.dwHighDateTime=0x1d2e675, nFileSizeHigh=0x0, nFileSizeLow=0x64b, dwReserved0=0x0, dwReserved1=0x0, cFileName="EA618097E393409AFA316F0F87E2C202_827C1B837652B048C4C84237D0838585", cAlternateFileName="EA6180~1")) returned 1 [0078.123] FindNextFileW (in: hFindFile=0x382040, lpFindFileData=0x31e38c | out: lpFindFileData=0x31e38c*(dwFileAttributes=0x2024, ftCreationTime.dwLowDateTime=0xbf312b90, ftCreationTime.dwHighDateTime=0x1d2faf2, ftLastAccessTime.dwLowDateTime=0xbf312b90, ftLastAccessTime.dwHighDateTime=0x1d2faf2, ftLastWriteTime.dwLowDateTime=0xbf312b90, ftLastWriteTime.dwHighDateTime=0x1d2faf2, nFileSizeHigh=0x0, nFileSizeLow=0x64c, dwReserved0=0x0, dwReserved1=0x0, cFileName="F293AEAD5E84FACFB686C4A620718928_C8424A0B24A72939B13720D0C000C9C1", cAlternateFileName="F293AE~1")) returned 1 [0078.123] FindNextFileW (in: hFindFile=0x382040, lpFindFileData=0x31e38c | out: lpFindFileData=0x31e38c*(dwFileAttributes=0x2024, ftCreationTime.dwLowDateTime=0xedbebcc0, ftCreationTime.dwHighDateTime=0x1d2e620, ftLastAccessTime.dwLowDateTime=0xedbebcc0, ftLastAccessTime.dwHighDateTime=0x1d2e620, ftLastWriteTime.dwLowDateTime=0xa989d730, ftLastWriteTime.dwHighDateTime=0x1d2fab4, nFileSizeHigh=0x0, nFileSizeLow=0x226, dwReserved0=0x0, dwReserved1=0x0, cFileName="F90F18257CBB4D84216AC1E1F3BB2C76", cAlternateFileName="F90F18~1")) returned 1 [0078.123] FindNextFileW (in: hFindFile=0x382040, lpFindFileData=0x31e38c | out: lpFindFileData=0x31e38c*(dwFileAttributes=0x2024, ftCreationTime.dwLowDateTime=0xedbebcc0, ftCreationTime.dwHighDateTime=0x1d2e620, ftLastAccessTime.dwLowDateTime=0xedbebcc0, ftLastAccessTime.dwHighDateTime=0x1d2e620, ftLastWriteTime.dwLowDateTime=0xa989d730, ftLastWriteTime.dwHighDateTime=0x1d2fab4, nFileSizeHigh=0x0, nFileSizeLow=0x226, dwReserved0=0x0, dwReserved1=0x0, cFileName="F90F18257CBB4D84216AC1E1F3BB2C76", cAlternateFileName="F90F18~1")) returned 0 [0078.123] FindClose (in: hFindFile=0x382040 | out: hFindFile=0x382040) returned 1 [0078.123] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e614) returned 1 [0078.123] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e620) returned 1 [0078.123] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e654) returned 1 [0078.123] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Microsoft\\CryptnetUrlCache\\MetaData", nBufferLength=0x105, lpBuffer=0x31e15c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Microsoft\\CryptnetUrlCache\\MetaData", lpFilePart=0x0) returned 0x52 [0078.123] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Microsoft\\CryptnetUrlCache\\MetaData\\", nBufferLength=0x105, lpBuffer=0x31e130, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Microsoft\\CryptnetUrlCache\\MetaData\\", lpFilePart=0x0) returned 0x53 [0078.123] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Microsoft\\CryptnetUrlCache\\MetaData\\*", lpFindFileData=0x31e37c | out: lpFindFileData=0x31e37c*(dwFileAttributes=0x2014, ftCreationTime.dwLowDateTime=0x28cff640, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0xd0de60b0, ftLastAccessTime.dwHighDateTime=0x1d2faf2, ftLastWriteTime.dwLowDateTime=0xd0de60b0, ftLastWriteTime.dwHighDateTime=0x1d2faf2, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x382040 [0078.124] FindNextFileW (in: hFindFile=0x382040, lpFindFileData=0x31e38c | out: lpFindFileData=0x31e38c*(dwFileAttributes=0x2014, ftCreationTime.dwLowDateTime=0x28cff640, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0xd0de60b0, ftLastAccessTime.dwHighDateTime=0x1d2faf2, ftLastWriteTime.dwLowDateTime=0xd0de60b0, ftLastWriteTime.dwHighDateTime=0x1d2faf2, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0078.124] FindNextFileW (in: hFindFile=0x382040, lpFindFileData=0x31e38c | out: lpFindFileData=0x31e38c*(dwFileAttributes=0x2024, ftCreationTime.dwLowDateTime=0xbf9eaad0, ftCreationTime.dwHighDateTime=0x1d2faf2, ftLastAccessTime.dwLowDateTime=0xbf9eaad0, ftLastAccessTime.dwHighDateTime=0x1d2faf2, ftLastWriteTime.dwLowDateTime=0xbf9eaad0, ftLastWriteTime.dwHighDateTime=0x1d2faf2, nFileSizeHigh=0x0, nFileSizeLow=0x190, dwReserved0=0x0, dwReserved1=0x0, cFileName="024823B39FBEACCDB5C06426A8168E99_6D5CAB161A1C65362A913D29BE09D91B", cAlternateFileName="024823~1")) returned 1 [0078.124] FindNextFileW (in: hFindFile=0x382040, lpFindFileData=0x31e38c | out: lpFindFileData=0x31e38c*(dwFileAttributes=0x2024, ftCreationTime.dwLowDateTime=0x53bd8410, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x53bd8410, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0xbe98d390, ftLastWriteTime.dwHighDateTime=0x1d2faf2, nFileSizeHigh=0x0, nFileSizeLow=0x166, dwReserved0=0x0, dwReserved1=0x0, cFileName="0F1583FFF42FFF476A09801ACB69213F_E3F4A8C96454D7D3441D2C1BCE81F875", cAlternateFileName="0F1583~1")) returned 1 [0078.124] FindNextFileW (in: hFindFile=0x382040, lpFindFileData=0x31e38c | out: lpFindFileData=0x31e38c*(dwFileAttributes=0x2024, ftCreationTime.dwLowDateTime=0xbf952550, ftCreationTime.dwHighDateTime=0x1d2faf2, ftLastAccessTime.dwLowDateTime=0xbf952550, ftLastAccessTime.dwHighDateTime=0x1d2faf2, ftLastWriteTime.dwLowDateTime=0xbf952550, ftLastWriteTime.dwHighDateTime=0x1d2faf2, nFileSizeHigh=0x0, nFileSizeLow=0x194, dwReserved0=0x0, dwReserved1=0x0, cFileName="1BB09BEEC155258835C193A7AA85AA5B_A7B2B53AF2A12E2CB0A41B96D21D7973", cAlternateFileName="1BB09B~1")) returned 1 [0078.124] FindNextFileW (in: hFindFile=0x382040, lpFindFileData=0x31e38c | out: lpFindFileData=0x31e38c*(dwFileAttributes=0x2024, ftCreationTime.dwLowDateTime=0x4c00edb0, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0x4c00edb0, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0x4c00edb0, ftLastWriteTime.dwHighDateTime=0x1d2dda4, nFileSizeHigh=0x0, nFileSizeLow=0x10c, dwReserved0=0x0, dwReserved1=0x0, cFileName="1DAF2884EC4DFA96BA4A58D4DBC9C406", cAlternateFileName="1DAF28~1")) returned 1 [0078.124] FindNextFileW (in: hFindFile=0x382040, lpFindFileData=0x31e38c | out: lpFindFileData=0x31e38c*(dwFileAttributes=0x2024, ftCreationTime.dwLowDateTime=0x580eb5c0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x580eb5c0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0xaedd4300, ftLastWriteTime.dwHighDateTime=0x1d2e675, nFileSizeHigh=0x0, nFileSizeLow=0x124, dwReserved0=0x0, dwReserved1=0x0, cFileName="23B523C9E7746F715D33C6527C18EB9D", cAlternateFileName="23B523~1")) returned 1 [0078.124] FindNextFileW (in: hFindFile=0x382040, lpFindFileData=0x31e38c | out: lpFindFileData=0x31e38c*(dwFileAttributes=0x2024, ftCreationTime.dwLowDateTime=0xc3791460, ftCreationTime.dwHighDateTime=0x1d2e675, ftLastAccessTime.dwLowDateTime=0xc3791460, ftLastAccessTime.dwHighDateTime=0x1d2e675, ftLastWriteTime.dwLowDateTime=0xc3791460, ftLastWriteTime.dwHighDateTime=0x1d2e675, nFileSizeHigh=0x0, nFileSizeLow=0xdc, dwReserved0=0x0, dwReserved1=0x0, cFileName="3130B1871A126520A8C47861EFE3ED4D", cAlternateFileName="3130B1~1")) returned 1 [0078.124] FindNextFileW (in: hFindFile=0x382040, lpFindFileData=0x31e38c | out: lpFindFileData=0x31e38c*(dwFileAttributes=0x2024, ftCreationTime.dwLowDateTime=0x53fdc930, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x53fdc930, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0xbf16fc70, ftLastWriteTime.dwHighDateTime=0x1d2faf2, nFileSizeHigh=0x0, nFileSizeLow=0x18a, dwReserved0=0x0, dwReserved1=0x0, cFileName="3388ECC3F7BC4A9271C10ED8621E5A65_F55C512047947B70F94DE5DEC6D6838D", cAlternateFileName="3388EC~1")) returned 1 [0078.124] FindNextFileW (in: hFindFile=0x382040, lpFindFileData=0x31e38c | out: lpFindFileData=0x31e38c*(dwFileAttributes=0x2024, ftCreationTime.dwLowDateTime=0x53b19d30, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x53b19d30, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x54583d70, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x190, dwReserved0=0x0, dwReserved1=0x0, cFileName="40E450F7CE13419A2CCC2A5445035A0A_06F02B1F13AB4B11B8FC669BDE565AF1", cAlternateFileName="40E450~1")) returned 1 [0078.124] FindNextFileW (in: hFindFile=0x382040, lpFindFileData=0x31e38c | out: lpFindFileData=0x31e38c*(dwFileAttributes=0x2024, ftCreationTime.dwLowDateTime=0x54537ab0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x54537ab0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0xae76e7e0, ftLastWriteTime.dwHighDateTime=0x1d2e675, nFileSizeHigh=0x0, nFileSizeLow=0x1ae, dwReserved0=0x0, dwReserved1=0x0, cFileName="4C8F841FB02DEC8C10108028DB86A08D_8DAFFFD2D43BDC7A1717F5B61C303398", cAlternateFileName="4C8F84~1")) returned 1 [0078.124] FindNextFileW (in: hFindFile=0x382040, lpFindFileData=0x31e38c | out: lpFindFileData=0x31e38c*(dwFileAttributes=0x2024, ftCreationTime.dwLowDateTime=0x7295ee20, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x7295ee20, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0xadfb2060, ftLastWriteTime.dwHighDateTime=0x1d2e675, nFileSizeHigh=0x0, nFileSizeLow=0x194, dwReserved0=0x0, dwReserved1=0x0, cFileName="4DD39726D4B55AC3B4119B35A893323C_46CCCFB940A93F39A734F69EFCDD76E9", cAlternateFileName="4DD397~1")) returned 1 [0078.124] FindNextFileW (in: hFindFile=0x382040, lpFindFileData=0x31e38c | out: lpFindFileData=0x31e38c*(dwFileAttributes=0x2024, ftCreationTime.dwLowDateTime=0xbf8b9fd0, ftCreationTime.dwHighDateTime=0x1d2faf2, ftLastAccessTime.dwLowDateTime=0xbf8b9fd0, ftLastAccessTime.dwHighDateTime=0x1d2faf2, ftLastWriteTime.dwLowDateTime=0xbf8b9fd0, ftLastWriteTime.dwHighDateTime=0x1d2faf2, nFileSizeHigh=0x0, nFileSizeLow=0x194, dwReserved0=0x0, dwReserved1=0x0, cFileName="5080DC7A65DB6A5960ECD874088F3328_2908F682DFC81A793BD240CF29711C77", cAlternateFileName="5080DC~2")) returned 1 [0078.124] FindNextFileW (in: hFindFile=0x382040, lpFindFileData=0x31e38c | out: lpFindFileData=0x31e38c*(dwFileAttributes=0x2024, ftCreationTime.dwLowDateTime=0xbf86dd10, ftCreationTime.dwHighDateTime=0x1d2faf2, ftLastAccessTime.dwLowDateTime=0xbf86dd10, ftLastAccessTime.dwHighDateTime=0x1d2faf2, ftLastWriteTime.dwLowDateTime=0xbf86dd10, ftLastWriteTime.dwHighDateTime=0x1d2faf2, nFileSizeHigh=0x0, nFileSizeLow=0x190, dwReserved0=0x0, dwReserved1=0x0, cFileName="5080DC7A65DB6A5960ECD874088F3328_6CBA2C06D5985DD95AE59AF8FC7C6220", cAlternateFileName="5080DC~1")) returned 1 [0078.126] FindClose (in: hFindFile=0x382040 | out: hFindFile=0x382040) returned 1 [0078.126] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e614) returned 1 [0078.126] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e620) returned 1 [0078.126] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e654) returned 1 [0078.126] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Microsoft\\CryptnetUrlCache\\MetaData", nBufferLength=0x105, lpBuffer=0x31e15c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Microsoft\\CryptnetUrlCache\\MetaData", lpFilePart=0x0) returned 0x52 [0078.126] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Microsoft\\CryptnetUrlCache\\MetaData\\", nBufferLength=0x105, lpBuffer=0x31e130, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Microsoft\\CryptnetUrlCache\\MetaData\\", lpFilePart=0x0) returned 0x53 [0078.126] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Microsoft\\CryptnetUrlCache\\MetaData\\*", lpFindFileData=0x31e37c | out: lpFindFileData=0x31e37c*(dwFileAttributes=0x2014, ftCreationTime.dwLowDateTime=0x28cff640, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0xd0de60b0, ftLastAccessTime.dwHighDateTime=0x1d2faf2, ftLastWriteTime.dwLowDateTime=0xd0de60b0, ftLastWriteTime.dwHighDateTime=0x1d2faf2, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x382040 [0078.127] FindClose (in: hFindFile=0x382040 | out: hFindFile=0x382040) returned 1 [0078.127] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e614) returned 1 [0078.127] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e620) returned 1 [0078.127] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e6cc) returned 1 [0078.127] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Microsoft\\IME12", nBufferLength=0x105, lpBuffer=0x31e1d4, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Microsoft\\IME12", lpFilePart=0x0) returned 0x3e [0078.127] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Microsoft\\IME12\\", nBufferLength=0x105, lpBuffer=0x31e1a8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Microsoft\\IME12\\", lpFilePart=0x0) returned 0x3f [0078.127] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Microsoft\\IME12\\*", lpFindFileData=0x31e3f4 | out: lpFindFileData=0x31e3f4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xcd708940, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0xcd708940, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0xcd708940, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x382040 [0078.128] FindClose (in: hFindFile=0x382040 | out: hFindFile=0x382040) returned 1 [0078.128] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e68c) returned 1 [0078.128] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e698) returned 1 [0078.128] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e6cc) returned 1 [0078.128] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Microsoft\\IME12", nBufferLength=0x105, lpBuffer=0x31e1d4, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Microsoft\\IME12", lpFilePart=0x0) returned 0x3e [0078.128] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Microsoft\\IME12\\", nBufferLength=0x105, lpBuffer=0x31e1a8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Microsoft\\IME12\\", lpFilePart=0x0) returned 0x3f [0078.128] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Microsoft\\IME12\\*", lpFindFileData=0x31e3f4 | out: lpFindFileData=0x31e3f4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xcd708940, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0xcd708940, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0xcd708940, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x382040 [0078.128] FindClose (in: hFindFile=0x382040 | out: hFindFile=0x382040) returned 1 [0078.128] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e68c) returned 1 [0078.128] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e698) returned 1 [0078.128] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e6cc) returned 1 [0078.128] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Microsoft\\IMJP12", nBufferLength=0x105, lpBuffer=0x31e1d4, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Microsoft\\IMJP12", lpFilePart=0x0) returned 0x3f [0078.128] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Microsoft\\IMJP12\\", nBufferLength=0x105, lpBuffer=0x31e1a8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Microsoft\\IMJP12\\", lpFilePart=0x0) returned 0x40 [0078.128] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Microsoft\\IMJP12\\*", lpFindFileData=0x31e3f4 | out: lpFindFileData=0x31e3f4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xcd708940, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0xcd708940, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0xcd708940, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x382040 [0078.128] FindClose (in: hFindFile=0x382040 | out: hFindFile=0x382040) returned 1 [0078.129] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e68c) returned 1 [0078.129] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e698) returned 1 [0078.129] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e6cc) returned 1 [0078.129] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Microsoft\\IMJP12", nBufferLength=0x105, lpBuffer=0x31e1d4, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Microsoft\\IMJP12", lpFilePart=0x0) returned 0x3f [0078.129] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Microsoft\\IMJP12\\", nBufferLength=0x105, lpBuffer=0x31e1a8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Microsoft\\IMJP12\\", lpFilePart=0x0) returned 0x40 [0078.129] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Microsoft\\IMJP12\\*", lpFindFileData=0x31e3f4 | out: lpFindFileData=0x31e3f4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xcd708940, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0xcd708940, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0xcd708940, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x382040 [0078.129] FindClose (in: hFindFile=0x382040 | out: hFindFile=0x382040) returned 1 [0078.129] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e68c) returned 1 [0078.129] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e698) returned 1 [0078.129] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e6cc) returned 1 [0078.129] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Microsoft\\IMJP8_1", nBufferLength=0x105, lpBuffer=0x31e1d4, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Microsoft\\IMJP8_1", lpFilePart=0x0) returned 0x40 [0078.129] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Microsoft\\IMJP8_1\\", nBufferLength=0x105, lpBuffer=0x31e1a8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Microsoft\\IMJP8_1\\", lpFilePart=0x0) returned 0x41 [0078.129] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Microsoft\\IMJP8_1\\*", lpFindFileData=0x31e3f4 | out: lpFindFileData=0x31e3f4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xcd708940, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0xcd708940, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0xcd708940, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x382040 [0078.129] FindClose (in: hFindFile=0x382040 | out: hFindFile=0x382040) returned 1 [0078.131] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e68c) returned 1 [0078.131] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e698) returned 1 [0078.131] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e6cc) returned 1 [0078.131] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Microsoft\\IMJP8_1", nBufferLength=0x105, lpBuffer=0x31e1d4, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Microsoft\\IMJP8_1", lpFilePart=0x0) returned 0x40 [0078.131] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Microsoft\\IMJP8_1\\", nBufferLength=0x105, lpBuffer=0x31e1a8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Microsoft\\IMJP8_1\\", lpFilePart=0x0) returned 0x41 [0078.131] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Microsoft\\IMJP8_1\\*", lpFindFileData=0x31e3f4 | out: lpFindFileData=0x31e3f4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xcd708940, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0xcd708940, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0xcd708940, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x382040 [0078.131] FindClose (in: hFindFile=0x382040 | out: hFindFile=0x382040) returned 1 [0078.131] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e68c) returned 1 [0078.131] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e698) returned 1 [0078.131] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e6cc) returned 1 [0078.131] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Microsoft\\IMJP9_0", nBufferLength=0x105, lpBuffer=0x31e1d4, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Microsoft\\IMJP9_0", lpFilePart=0x0) returned 0x40 [0078.131] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Microsoft\\IMJP9_0\\", nBufferLength=0x105, lpBuffer=0x31e1a8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Microsoft\\IMJP9_0\\", lpFilePart=0x0) returned 0x41 [0078.131] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Microsoft\\IMJP9_0\\*", lpFindFileData=0x31e3f4 | out: lpFindFileData=0x31e3f4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xcd708940, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0xcd708940, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0xcd708940, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x382040 [0078.131] FindClose (in: hFindFile=0x382040 | out: hFindFile=0x382040) returned 1 [0078.131] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e68c) returned 1 [0078.131] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e698) returned 1 [0078.132] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e6cc) returned 1 [0078.132] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Microsoft\\IMJP9_0", nBufferLength=0x105, lpBuffer=0x31e1d4, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Microsoft\\IMJP9_0", lpFilePart=0x0) returned 0x40 [0078.132] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Microsoft\\IMJP9_0\\", nBufferLength=0x105, lpBuffer=0x31e1a8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Microsoft\\IMJP9_0\\", lpFilePart=0x0) returned 0x41 [0078.132] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Microsoft\\IMJP9_0\\*", lpFindFileData=0x31e3f4 | out: lpFindFileData=0x31e3f4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xcd708940, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0xcd708940, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0xcd708940, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x382040 [0078.132] FindClose (in: hFindFile=0x382040 | out: hFindFile=0x382040) returned 1 [0078.132] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e68c) returned 1 [0078.132] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e698) returned 1 [0078.132] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e6cc) returned 1 [0078.132] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Microsoft\\Internet Explorer", nBufferLength=0x105, lpBuffer=0x31e1d4, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Microsoft\\Internet Explorer", lpFilePart=0x0) returned 0x4a [0078.132] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Microsoft\\Internet Explorer\\", nBufferLength=0x105, lpBuffer=0x31e1a8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Microsoft\\Internet Explorer\\", lpFilePart=0x0) returned 0x4b [0078.132] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Microsoft\\Internet Explorer\\*", lpFindFileData=0x31e3f4 | out: lpFindFileData=0x31e3f4*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0x510b3550, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x5616fca0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x5616fca0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x382040 [0078.133] FindClose (in: hFindFile=0x382040 | out: hFindFile=0x382040) returned 1 [0078.133] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e68c) returned 1 [0078.133] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e698) returned 1 [0078.133] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e6cc) returned 1 [0078.133] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Microsoft\\Internet Explorer", nBufferLength=0x105, lpBuffer=0x31e1d4, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Microsoft\\Internet Explorer", lpFilePart=0x0) returned 0x4a [0078.133] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Microsoft\\Internet Explorer\\", nBufferLength=0x105, lpBuffer=0x31e1a8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Microsoft\\Internet Explorer\\", lpFilePart=0x0) returned 0x4b [0078.133] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Microsoft\\Internet Explorer\\*", lpFindFileData=0x31e3f4 | out: lpFindFileData=0x31e3f4*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0x510b3550, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x5616fca0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x5616fca0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x382040 [0078.133] FindClose (in: hFindFile=0x382040 | out: hFindFile=0x382040) returned 1 [0078.133] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e68c) returned 1 [0078.133] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e698) returned 1 [0078.133] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e654) returned 1 [0078.133] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Microsoft\\Internet Explorer\\DOMStore", nBufferLength=0x105, lpBuffer=0x31e15c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Microsoft\\Internet Explorer\\DOMStore", lpFilePart=0x0) returned 0x53 [0078.133] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Microsoft\\Internet Explorer\\DOMStore\\", nBufferLength=0x105, lpBuffer=0x31e130, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Microsoft\\Internet Explorer\\DOMStore\\", lpFilePart=0x0) returned 0x54 [0078.133] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Microsoft\\Internet Explorer\\DOMStore\\*", lpFindFileData=0x31e37c | out: lpFindFileData=0x31e37c*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0x510b3550, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x510b3550, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x510b3550, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x382040 [0078.134] FindClose (in: hFindFile=0x382040 | out: hFindFile=0x382040) returned 1 [0078.134] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e614) returned 1 [0078.134] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e620) returned 1 [0078.134] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e654) returned 1 [0078.134] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Microsoft\\Internet Explorer\\DOMStore", nBufferLength=0x105, lpBuffer=0x31e15c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Microsoft\\Internet Explorer\\DOMStore", lpFilePart=0x0) returned 0x53 [0078.134] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Microsoft\\Internet Explorer\\DOMStore\\", nBufferLength=0x105, lpBuffer=0x31e130, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Microsoft\\Internet Explorer\\DOMStore\\", lpFilePart=0x0) returned 0x54 [0078.134] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Microsoft\\Internet Explorer\\DOMStore\\*", lpFindFileData=0x31e37c | out: lpFindFileData=0x31e37c*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0x510b3550, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x510b3550, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x510b3550, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x382040 [0078.134] FindClose (in: hFindFile=0x382040 | out: hFindFile=0x382040) returned 1 [0078.134] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e614) returned 1 [0078.134] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e620) returned 1 [0078.134] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e5dc) returned 1 [0078.134] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Microsoft\\Internet Explorer\\DOMStore\\36USA68T", nBufferLength=0x105, lpBuffer=0x31e0e4, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Microsoft\\Internet Explorer\\DOMStore\\36USA68T", lpFilePart=0x0) returned 0x5c [0078.134] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Microsoft\\Internet Explorer\\DOMStore\\36USA68T\\", nBufferLength=0x105, lpBuffer=0x31e0b8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Microsoft\\Internet Explorer\\DOMStore\\36USA68T\\", lpFilePart=0x0) returned 0x5d [0078.134] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Microsoft\\Internet Explorer\\DOMStore\\36USA68T\\*", lpFindFileData=0x31e304 | out: lpFindFileData=0x31e304*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0x510b3550, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x54b05050, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x54b05050, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x382040 [0078.135] FindClose (in: hFindFile=0x382040 | out: hFindFile=0x382040) returned 1 [0078.135] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e59c) returned 1 [0078.135] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e5a8) returned 1 [0078.135] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e5dc) returned 1 [0078.135] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Microsoft\\Internet Explorer\\DOMStore\\36USA68T", nBufferLength=0x105, lpBuffer=0x31e0e4, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Microsoft\\Internet Explorer\\DOMStore\\36USA68T", lpFilePart=0x0) returned 0x5c [0078.135] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Microsoft\\Internet Explorer\\DOMStore\\36USA68T\\", nBufferLength=0x105, lpBuffer=0x31e0b8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Microsoft\\Internet Explorer\\DOMStore\\36USA68T\\", lpFilePart=0x0) returned 0x5d [0078.135] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Microsoft\\Internet Explorer\\DOMStore\\36USA68T\\*", lpFindFileData=0x31e304 | out: lpFindFileData=0x31e304*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0x510b3550, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x54b05050, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x54b05050, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x382040 [0078.135] FindClose (in: hFindFile=0x382040 | out: hFindFile=0x382040) returned 1 [0078.135] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e59c) returned 1 [0078.135] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e5a8) returned 1 [0078.135] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Microsoft\\Internet Explorer\\DOMStore\\36USA68T\\imagesrv.adition[1].xml", nBufferLength=0x105, lpBuffer=0x31dfb4, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Microsoft\\Internet Explorer\\DOMStore\\36USA68T\\imagesrv.adition[1].xml", lpFilePart=0x0) returned 0x74 [0078.135] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e4a8) returned 1 [0078.135] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Microsoft\\Internet Explorer\\DOMStore\\36USA68T\\imagesrv.adition[1].xml" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\locallow\\microsoft\\internet explorer\\domstore\\36usa68t\\imagesrv.adition[1].xml"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x264 [0078.135] GetFileType (hFile=0x264) returned 0x1 [0078.135] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e4a4) returned 1 [0078.135] GetFileType (hFile=0x264) returned 0x1 [0078.135] GetFileSize (in: hFile=0x264, lpFileSizeHigh=0x31e5b0 | out: lpFileSizeHigh=0x31e5b0*=0x0) returned 0xd [0078.136] ReadFile (in: hFile=0x264, lpBuffer=0x27093c8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x31e55c, lpOverlapped=0x0 | out: lpBuffer=0x27093c8*, lpNumberOfBytesRead=0x31e55c*=0xd, lpOverlapped=0x0) returned 1 [0078.166] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Microsoft\\Internet Explorer\\DOMStore\\36USA68T\\imagesrv.adition[1].xml", nBufferLength=0x105, lpBuffer=0x31dfa0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Microsoft\\Internet Explorer\\DOMStore\\36USA68T\\imagesrv.adition[1].xml", lpFilePart=0x0) returned 0x74 [0078.166] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e494) returned 1 [0078.166] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Microsoft\\Internet Explorer\\DOMStore\\36USA68T\\imagesrv.adition[1].xml" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\locallow\\microsoft\\internet explorer\\domstore\\36usa68t\\imagesrv.adition[1].xml"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x264 [0078.167] GetFileType (hFile=0x264) returned 0x1 [0078.167] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e490) returned 1 [0078.167] GetFileType (hFile=0x264) returned 0x1 [0078.167] WriteFile (in: hFile=0x264, lpBuffer=0x27575e0*, nNumberOfBytesToWrite=0x10, lpNumberOfBytesWritten=0x31e524, lpOverlapped=0x0 | out: lpBuffer=0x27575e0*, lpNumberOfBytesWritten=0x31e524*=0x10, lpOverlapped=0x0) returned 1 [0078.168] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Microsoft\\Internet Explorer\\DOMStore\\36USA68T\\imagesrv.adition[1].xml", nBufferLength=0x105, lpBuffer=0x31e0d4, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Microsoft\\Internet Explorer\\DOMStore\\36USA68T\\imagesrv.adition[1].xml", lpFilePart=0x0) returned 0x74 [0078.168] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Microsoft\\Internet Explorer\\DOMStore\\36USA68T\\imagesrv.adition[1].xml", nBufferLength=0x105, lpBuffer=0x31e0d4, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Microsoft\\Internet Explorer\\DOMStore\\36USA68T\\imagesrv.adition[1].xml", lpFilePart=0x0) returned 0x74 [0078.168] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e534) returned 1 [0078.168] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Microsoft\\Internet Explorer\\DOMStore\\36USA68T\\imagesrv.adition[1].xml" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\locallow\\microsoft\\internet explorer\\domstore\\36usa68t\\imagesrv.adition[1].xml"), fInfoLevelId=0x0, lpFileInformation=0x31e5b0 | out: lpFileInformation=0x31e5b0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x54b05050, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x54b05050, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x12084c60, ftLastWriteTime.dwHighDateTime=0x1d6eb7f, nFileSizeHigh=0x0, nFileSizeLow=0x10)) returned 1 [0078.168] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e530) returned 1 [0078.169] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Microsoft\\Internet Explorer\\DOMStore\\36USA68T\\imagesrv.adition[1].xml" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\locallow\\microsoft\\internet explorer\\domstore\\36usa68t\\imagesrv.adition[1].xml"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Microsoft\\Internet Explorer\\DOMStore\\36USA68T\\imagesrv.adition[1].xml" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\locallow\\microsoft\\internet explorer\\domstore\\36usa68t\\imagesrv.adition[1].xml")) returned 1 [0078.169] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e5dc) returned 1 [0078.169] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Microsoft\\Internet Explorer\\DOMStore\\3O75JDME", nBufferLength=0x105, lpBuffer=0x31e0e4, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Microsoft\\Internet Explorer\\DOMStore\\3O75JDME", lpFilePart=0x0) returned 0x5c [0078.169] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Microsoft\\Internet Explorer\\DOMStore\\3O75JDME\\", nBufferLength=0x105, lpBuffer=0x31e0b8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Microsoft\\Internet Explorer\\DOMStore\\3O75JDME\\", lpFilePart=0x0) returned 0x5d [0078.169] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Microsoft\\Internet Explorer\\DOMStore\\3O75JDME\\*", lpFindFileData=0x31e304 | out: lpFindFileData=0x31e304*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0x510b3550, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x605dd8a0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x605dd8a0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x381f80 [0078.170] FindClose (in: hFindFile=0x381f80 | out: hFindFile=0x381f80) returned 1 [0078.170] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e59c) returned 1 [0078.170] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e5a8) returned 1 [0078.170] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e5dc) returned 1 [0078.170] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Microsoft\\Internet Explorer\\DOMStore\\3O75JDME", nBufferLength=0x105, lpBuffer=0x31e0e4, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Microsoft\\Internet Explorer\\DOMStore\\3O75JDME", lpFilePart=0x0) returned 0x5c [0078.170] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Microsoft\\Internet Explorer\\DOMStore\\3O75JDME\\", nBufferLength=0x105, lpBuffer=0x31e0b8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Microsoft\\Internet Explorer\\DOMStore\\3O75JDME\\", lpFilePart=0x0) returned 0x5d [0078.170] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Microsoft\\Internet Explorer\\DOMStore\\3O75JDME\\*", lpFindFileData=0x31e304 | out: lpFindFileData=0x31e304*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0x510b3550, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x605dd8a0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x605dd8a0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x381f80 [0078.170] FindClose (in: hFindFile=0x381f80 | out: hFindFile=0x381f80) returned 1 [0078.170] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e59c) returned 1 [0078.170] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e5a8) returned 1 [0078.170] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Microsoft\\Internet Explorer\\DOMStore\\3O75JDME\\www.google[1].xml", nBufferLength=0x105, lpBuffer=0x31dfb4, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Microsoft\\Internet Explorer\\DOMStore\\3O75JDME\\www.google[1].xml", lpFilePart=0x0) returned 0x6e [0078.170] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e4a8) returned 1 [0078.170] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Microsoft\\Internet Explorer\\DOMStore\\3O75JDME\\www.google[1].xml" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\locallow\\microsoft\\internet explorer\\domstore\\3o75jdme\\www.google[1].xml"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x264 [0078.171] GetFileType (hFile=0x264) returned 0x1 [0078.171] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e4a4) returned 1 [0078.171] GetFileType (hFile=0x264) returned 0x1 [0078.171] GetFileSize (in: hFile=0x264, lpFileSizeHigh=0x31e5b0 | out: lpFileSizeHigh=0x31e5b0*=0x0) returned 0xd [0078.171] ReadFile (in: hFile=0x264, lpBuffer=0x275a904, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x31e55c, lpOverlapped=0x0 | out: lpBuffer=0x275a904*, lpNumberOfBytesRead=0x31e55c*=0xd, lpOverlapped=0x0) returned 1 [0078.186] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Microsoft\\Internet Explorer\\DOMStore\\3O75JDME\\www.google[1].xml", nBufferLength=0x105, lpBuffer=0x31dfa0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Microsoft\\Internet Explorer\\DOMStore\\3O75JDME\\www.google[1].xml", lpFilePart=0x0) returned 0x6e [0078.186] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e494) returned 1 [0078.186] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Microsoft\\Internet Explorer\\DOMStore\\3O75JDME\\www.google[1].xml" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\locallow\\microsoft\\internet explorer\\domstore\\3o75jdme\\www.google[1].xml"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x264 [0078.187] GetFileType (hFile=0x264) returned 0x1 [0078.187] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e490) returned 1 [0078.187] GetFileType (hFile=0x264) returned 0x1 [0078.189] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Microsoft\\Internet Explorer\\DOMStore\\3O75JDME\\www.google[1].xml", nBufferLength=0x105, lpBuffer=0x31e0d4, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Microsoft\\Internet Explorer\\DOMStore\\3O75JDME\\www.google[1].xml", lpFilePart=0x0) returned 0x6e [0078.189] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Microsoft\\Internet Explorer\\DOMStore\\3O75JDME\\www.google[1].xml", nBufferLength=0x105, lpBuffer=0x31e0d4, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Microsoft\\Internet Explorer\\DOMStore\\3O75JDME\\www.google[1].xml", lpFilePart=0x0) returned 0x6e [0078.189] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e534) returned 1 [0078.189] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Microsoft\\Internet Explorer\\DOMStore\\3O75JDME\\www.google[1].xml" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\locallow\\microsoft\\internet explorer\\domstore\\3o75jdme\\www.google[1].xml"), fInfoLevelId=0x0, lpFileInformation=0x31e5b0 | out: lpFileInformation=0x31e5b0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x605dd8a0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x605dd8a0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x120d0f20, ftLastWriteTime.dwHighDateTime=0x1d6eb7f, nFileSizeHigh=0x0, nFileSizeLow=0x10)) returned 1 [0078.189] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e530) returned 1 [0078.189] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Microsoft\\Internet Explorer\\DOMStore\\3O75JDME\\www.google[1].xml" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\locallow\\microsoft\\internet explorer\\domstore\\3o75jdme\\www.google[1].xml"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Microsoft\\Internet Explorer\\DOMStore\\3O75JDME\\www.google[1].xml" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\locallow\\microsoft\\internet explorer\\domstore\\3o75jdme\\www.google[1].xml")) returned 1 [0078.189] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e5dc) returned 1 [0078.189] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Microsoft\\Internet Explorer\\DOMStore\\UV0DUWVB", nBufferLength=0x105, lpBuffer=0x31e0e4, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Microsoft\\Internet Explorer\\DOMStore\\UV0DUWVB", lpFilePart=0x0) returned 0x5c [0078.189] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Microsoft\\Internet Explorer\\DOMStore\\UV0DUWVB\\", nBufferLength=0x105, lpBuffer=0x31e0b8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Microsoft\\Internet Explorer\\DOMStore\\UV0DUWVB\\", lpFilePart=0x0) returned 0x5d [0078.190] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Microsoft\\Internet Explorer\\DOMStore\\UV0DUWVB\\*", lpFindFileData=0x31e304 | out: lpFindFileData=0x31e304*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0x510b3550, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x510b3550, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x510b3550, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x382000 [0078.190] FindClose (in: hFindFile=0x382000 | out: hFindFile=0x382000) returned 1 [0078.190] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e59c) returned 1 [0078.190] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e5a8) returned 1 [0078.190] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e5dc) returned 1 [0078.190] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Microsoft\\Internet Explorer\\DOMStore\\UV0DUWVB", nBufferLength=0x105, lpBuffer=0x31e0e4, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Microsoft\\Internet Explorer\\DOMStore\\UV0DUWVB", lpFilePart=0x0) returned 0x5c [0078.190] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Microsoft\\Internet Explorer\\DOMStore\\UV0DUWVB\\", nBufferLength=0x105, lpBuffer=0x31e0b8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Microsoft\\Internet Explorer\\DOMStore\\UV0DUWVB\\", lpFilePart=0x0) returned 0x5d [0078.190] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Microsoft\\Internet Explorer\\DOMStore\\UV0DUWVB\\*", lpFindFileData=0x31e304 | out: lpFindFileData=0x31e304*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0x510b3550, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x510b3550, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x510b3550, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x382000 [0078.190] FindClose (in: hFindFile=0x382000 | out: hFindFile=0x382000) returned 1 [0078.190] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e59c) returned 1 [0078.190] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e5a8) returned 1 [0078.190] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e5dc) returned 1 [0078.190] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Microsoft\\Internet Explorer\\DOMStore\\VGMTOI09", nBufferLength=0x105, lpBuffer=0x31e0e4, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Microsoft\\Internet Explorer\\DOMStore\\VGMTOI09", lpFilePart=0x0) returned 0x5c [0078.190] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Microsoft\\Internet Explorer\\DOMStore\\VGMTOI09\\", nBufferLength=0x105, lpBuffer=0x31e0b8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Microsoft\\Internet Explorer\\DOMStore\\VGMTOI09\\", lpFilePart=0x0) returned 0x5d [0078.190] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Microsoft\\Internet Explorer\\DOMStore\\VGMTOI09\\*", lpFindFileData=0x31e304 | out: lpFindFileData=0x31e304*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0x510b3550, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x510b3550, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x510b3550, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x382000 [0078.191] FindClose (in: hFindFile=0x382000 | out: hFindFile=0x382000) returned 1 [0078.191] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e59c) returned 1 [0078.191] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e5a8) returned 1 [0078.191] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e5dc) returned 1 [0078.191] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Microsoft\\Internet Explorer\\DOMStore\\VGMTOI09", nBufferLength=0x105, lpBuffer=0x31e0e4, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Microsoft\\Internet Explorer\\DOMStore\\VGMTOI09", lpFilePart=0x0) returned 0x5c [0078.191] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Microsoft\\Internet Explorer\\DOMStore\\VGMTOI09\\", nBufferLength=0x105, lpBuffer=0x31e0b8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Microsoft\\Internet Explorer\\DOMStore\\VGMTOI09\\", lpFilePart=0x0) returned 0x5d [0078.191] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Microsoft\\Internet Explorer\\DOMStore\\VGMTOI09\\*", lpFindFileData=0x31e304 | out: lpFindFileData=0x31e304*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0x510b3550, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x510b3550, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x510b3550, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x382000 [0078.191] FindClose (in: hFindFile=0x382000 | out: hFindFile=0x382000) returned 1 [0078.191] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e59c) returned 1 [0078.191] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e5a8) returned 1 [0078.191] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Microsoft\\Internet Explorer\\DOMStore\\VGMTOI09\\www.msn[1].xml", nBufferLength=0x105, lpBuffer=0x31dfb4, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Microsoft\\Internet Explorer\\DOMStore\\VGMTOI09\\www.msn[1].xml", lpFilePart=0x0) returned 0x6b [0078.191] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e4a8) returned 1 [0078.191] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Microsoft\\Internet Explorer\\DOMStore\\VGMTOI09\\www.msn[1].xml" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\locallow\\microsoft\\internet explorer\\domstore\\vgmtoi09\\www.msn[1].xml"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x264 [0078.192] GetFileType (hFile=0x264) returned 0x1 [0078.192] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e4a4) returned 1 [0078.192] GetFileType (hFile=0x264) returned 0x1 [0078.192] GetFileSize (in: hFile=0x264, lpFileSizeHigh=0x31e5b0 | out: lpFileSizeHigh=0x31e5b0*=0x0) returned 0x344 [0078.192] ReadFile (in: hFile=0x264, lpBuffer=0x27ada18, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x31e55c, lpOverlapped=0x0 | out: lpBuffer=0x27ada18*, lpNumberOfBytesRead=0x31e55c*=0x344, lpOverlapped=0x0) returned 1 [0078.207] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Microsoft\\Internet Explorer\\DOMStore\\VGMTOI09\\www.msn[1].xml", nBufferLength=0x105, lpBuffer=0x31dfa0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Microsoft\\Internet Explorer\\DOMStore\\VGMTOI09\\www.msn[1].xml", lpFilePart=0x0) returned 0x6b [0078.207] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e494) returned 1 [0078.207] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Microsoft\\Internet Explorer\\DOMStore\\VGMTOI09\\www.msn[1].xml" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\locallow\\microsoft\\internet explorer\\domstore\\vgmtoi09\\www.msn[1].xml"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x264 [0078.208] GetFileType (hFile=0x264) returned 0x1 [0078.208] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e490) returned 1 [0078.208] GetFileType (hFile=0x264) returned 0x1 [0078.209] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Microsoft\\Internet Explorer\\DOMStore\\VGMTOI09\\www.msn[1].xml", nBufferLength=0x105, lpBuffer=0x31e0d4, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Microsoft\\Internet Explorer\\DOMStore\\VGMTOI09\\www.msn[1].xml", lpFilePart=0x0) returned 0x6b [0078.209] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Microsoft\\Internet Explorer\\DOMStore\\VGMTOI09\\www.msn[1].xml", nBufferLength=0x105, lpBuffer=0x31e0d4, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Microsoft\\Internet Explorer\\DOMStore\\VGMTOI09\\www.msn[1].xml", lpFilePart=0x0) returned 0x6b [0078.209] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e534) returned 1 [0078.209] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Microsoft\\Internet Explorer\\DOMStore\\VGMTOI09\\www.msn[1].xml" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\locallow\\microsoft\\internet explorer\\domstore\\vgmtoi09\\www.msn[1].xml"), fInfoLevelId=0x0, lpFileInformation=0x31e5b0 | out: lpFileInformation=0x31e5b0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x510b3550, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x510b3550, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x120f7080, ftLastWriteTime.dwHighDateTime=0x1d6eb7f, nFileSizeHigh=0x0, nFileSizeLow=0x350)) returned 1 [0078.209] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e530) returned 1 [0078.209] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Microsoft\\Internet Explorer\\DOMStore\\VGMTOI09\\www.msn[1].xml" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\locallow\\microsoft\\internet explorer\\domstore\\vgmtoi09\\www.msn[1].xml"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Microsoft\\Internet Explorer\\DOMStore\\VGMTOI09\\www.msn[1].xml" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\locallow\\microsoft\\internet explorer\\domstore\\vgmtoi09\\www.msn[1].xml")) returned 1 [0078.210] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e654) returned 1 [0078.210] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Microsoft\\Internet Explorer\\Services", nBufferLength=0x105, lpBuffer=0x31e15c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Microsoft\\Internet Explorer\\Services", lpFilePart=0x0) returned 0x53 [0078.210] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Microsoft\\Internet Explorer\\Services\\", nBufferLength=0x105, lpBuffer=0x31e130, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Microsoft\\Internet Explorer\\Services\\", lpFilePart=0x0) returned 0x54 [0078.210] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Microsoft\\Internet Explorer\\Services\\*", lpFindFileData=0x31e37c | out: lpFindFileData=0x31e37c*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x5616fca0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x2bf7e690, ftLastAccessTime.dwHighDateTime=0x1d35d06, ftLastWriteTime.dwLowDateTime=0x2bf7e690, ftLastWriteTime.dwHighDateTime=0x1d35d06, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x381dc0 [0078.210] FindClose (in: hFindFile=0x381dc0 | out: hFindFile=0x381dc0) returned 1 [0078.210] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e614) returned 1 [0078.210] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e620) returned 1 [0078.210] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e654) returned 1 [0078.210] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Microsoft\\Internet Explorer\\Services", nBufferLength=0x105, lpBuffer=0x31e15c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Microsoft\\Internet Explorer\\Services", lpFilePart=0x0) returned 0x53 [0078.210] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Microsoft\\Internet Explorer\\Services\\", nBufferLength=0x105, lpBuffer=0x31e130, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Microsoft\\Internet Explorer\\Services\\", lpFilePart=0x0) returned 0x54 [0078.210] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Microsoft\\Internet Explorer\\Services\\*", lpFindFileData=0x31e37c | out: lpFindFileData=0x31e37c*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x5616fca0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x2bf7e690, ftLastAccessTime.dwHighDateTime=0x1d35d06, ftLastWriteTime.dwLowDateTime=0x2bf7e690, ftLastWriteTime.dwHighDateTime=0x1d35d06, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x381dc0 [0078.210] FindClose (in: hFindFile=0x381dc0 | out: hFindFile=0x381dc0) returned 1 [0078.210] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e614) returned 1 [0078.210] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e620) returned 1 [0078.210] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e744) returned 1 [0078.210] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Sun", nBufferLength=0x105, lpBuffer=0x31e24c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Sun", lpFilePart=0x0) returned 0x32 [0078.211] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Sun\\", nBufferLength=0x105, lpBuffer=0x31e220, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Sun\\", lpFilePart=0x0) returned 0x33 [0078.211] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Sun\\*", lpFindFileData=0x31e46c | out: lpFindFileData=0x31e46c*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x68cb4a40, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x68cb4a40, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x68cb4a40, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x381dc0 [0078.211] FindClose (in: hFindFile=0x381dc0 | out: hFindFile=0x381dc0) returned 1 [0078.211] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e704) returned 1 [0078.212] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e710) returned 1 [0078.212] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e744) returned 1 [0078.212] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Sun", nBufferLength=0x105, lpBuffer=0x31e24c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Sun", lpFilePart=0x0) returned 0x32 [0078.212] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Sun\\", nBufferLength=0x105, lpBuffer=0x31e220, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Sun\\", lpFilePart=0x0) returned 0x33 [0078.212] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Sun\\*", lpFindFileData=0x31e46c | out: lpFindFileData=0x31e46c*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x68cb4a40, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x68cb4a40, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x68cb4a40, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x381dc0 [0078.212] FindClose (in: hFindFile=0x381dc0 | out: hFindFile=0x381dc0) returned 1 [0078.212] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e704) returned 1 [0078.212] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e710) returned 1 [0078.212] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e6cc) returned 1 [0078.212] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Sun\\Java", nBufferLength=0x105, lpBuffer=0x31e1d4, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Sun\\Java", lpFilePart=0x0) returned 0x37 [0078.212] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Sun\\Java\\", nBufferLength=0x105, lpBuffer=0x31e1a8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Sun\\Java\\", lpFilePart=0x0) returned 0x38 [0078.212] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Sun\\Java\\*", lpFindFileData=0x31e3f4 | out: lpFindFileData=0x31e3f4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x68cb4a40, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0xa1dc2570, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0xa1dc2570, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x381dc0 [0078.213] FindClose (in: hFindFile=0x381dc0 | out: hFindFile=0x381dc0) returned 1 [0078.213] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e68c) returned 1 [0078.213] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e698) returned 1 [0078.213] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e6cc) returned 1 [0078.213] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Sun\\Java", nBufferLength=0x105, lpBuffer=0x31e1d4, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Sun\\Java", lpFilePart=0x0) returned 0x37 [0078.213] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Sun\\Java\\", nBufferLength=0x105, lpBuffer=0x31e1a8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Sun\\Java\\", lpFilePart=0x0) returned 0x38 [0078.213] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Sun\\Java\\*", lpFindFileData=0x31e3f4 | out: lpFindFileData=0x31e3f4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x68cb4a40, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0xa1dc2570, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0xa1dc2570, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x381dc0 [0078.213] FindClose (in: hFindFile=0x381dc0 | out: hFindFile=0x381dc0) returned 1 [0078.213] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e68c) returned 1 [0078.213] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e698) returned 1 [0078.213] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e654) returned 1 [0078.213] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Sun\\Java\\AU", nBufferLength=0x105, lpBuffer=0x31e15c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Sun\\Java\\AU", lpFilePart=0x0) returned 0x3a [0078.213] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Sun\\Java\\AU\\", nBufferLength=0x105, lpBuffer=0x31e130, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Sun\\Java\\AU\\", lpFilePart=0x0) returned 0x3b [0078.213] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Sun\\Java\\AU\\*", lpFindFileData=0x31e37c | out: lpFindFileData=0x31e37c*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x7eea3160, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x7eec92c0, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x7eec92c0, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x381dc0 [0078.214] FindClose (in: hFindFile=0x381dc0 | out: hFindFile=0x381dc0) returned 1 [0078.214] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e614) returned 1 [0078.214] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e620) returned 1 [0078.214] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e654) returned 1 [0078.214] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Sun\\Java\\AU", nBufferLength=0x105, lpBuffer=0x31e15c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Sun\\Java\\AU", lpFilePart=0x0) returned 0x3a [0078.214] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Sun\\Java\\AU\\", nBufferLength=0x105, lpBuffer=0x31e130, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Sun\\Java\\AU\\", lpFilePart=0x0) returned 0x3b [0078.214] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Sun\\Java\\AU\\*", lpFindFileData=0x31e37c | out: lpFindFileData=0x31e37c*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x7eea3160, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x7eec92c0, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x7eec92c0, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x381dc0 [0078.214] FindClose (in: hFindFile=0x381dc0 | out: hFindFile=0x381dc0) returned 1 [0078.214] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e614) returned 1 [0078.214] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e620) returned 1 [0078.214] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e654) returned 1 [0078.214] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Sun\\Java\\Deployment", nBufferLength=0x105, lpBuffer=0x31e15c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Sun\\Java\\Deployment", lpFilePart=0x0) returned 0x42 [0078.214] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Sun\\Java\\Deployment\\", nBufferLength=0x105, lpBuffer=0x31e130, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Sun\\Java\\Deployment\\", lpFilePart=0x0) returned 0x43 [0078.214] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Sun\\Java\\Deployment\\*", lpFindFileData=0x31e37c | out: lpFindFileData=0x31e37c*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xa1dc2570, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0xa1ea6db0, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0xa1ea6db0, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x381dc0 [0078.215] FindClose (in: hFindFile=0x381dc0 | out: hFindFile=0x381dc0) returned 1 [0078.215] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e614) returned 1 [0078.215] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e620) returned 1 [0078.215] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e654) returned 1 [0078.215] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Sun\\Java\\Deployment", nBufferLength=0x105, lpBuffer=0x31e15c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Sun\\Java\\Deployment", lpFilePart=0x0) returned 0x42 [0078.215] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Sun\\Java\\Deployment\\", nBufferLength=0x105, lpBuffer=0x31e130, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Sun\\Java\\Deployment\\", lpFilePart=0x0) returned 0x43 [0078.215] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Sun\\Java\\Deployment\\*", lpFindFileData=0x31e37c | out: lpFindFileData=0x31e37c*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xa1dc2570, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0xa1ea6db0, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0xa1ea6db0, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x381dc0 [0078.215] FindClose (in: hFindFile=0x381dc0 | out: hFindFile=0x381dc0) returned 1 [0078.216] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e614) returned 1 [0078.216] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e620) returned 1 [0078.216] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e5dc) returned 1 [0078.216] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Sun\\Java\\Deployment\\security", nBufferLength=0x105, lpBuffer=0x31e0e4, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Sun\\Java\\Deployment\\security", lpFilePart=0x0) returned 0x4b [0078.216] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Sun\\Java\\Deployment\\security\\", nBufferLength=0x105, lpBuffer=0x31e0b8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Sun\\Java\\Deployment\\security\\", lpFilePart=0x0) returned 0x4c [0078.216] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Sun\\Java\\Deployment\\security\\*", lpFindFileData=0x31e304 | out: lpFindFileData=0x31e304*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xa1e5aaf0, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0xa1e5aaf0, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0xa1e5aaf0, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x381dc0 [0078.216] FindClose (in: hFindFile=0x381dc0 | out: hFindFile=0x381dc0) returned 1 [0078.217] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e59c) returned 1 [0078.217] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e5a8) returned 1 [0078.217] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e5dc) returned 1 [0078.217] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Sun\\Java\\Deployment\\security", nBufferLength=0x105, lpBuffer=0x31e0e4, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Sun\\Java\\Deployment\\security", lpFilePart=0x0) returned 0x4b [0078.217] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Sun\\Java\\Deployment\\security\\", nBufferLength=0x105, lpBuffer=0x31e0b8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Sun\\Java\\Deployment\\security\\", lpFilePart=0x0) returned 0x4c [0078.217] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Sun\\Java\\Deployment\\security\\*", lpFindFileData=0x31e304 | out: lpFindFileData=0x31e304*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xa1e5aaf0, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0xa1e5aaf0, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0xa1e5aaf0, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x381dc0 [0078.217] FindClose (in: hFindFile=0x381dc0 | out: hFindFile=0x381dc0) returned 1 [0078.217] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e59c) returned 1 [0078.217] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e5a8) returned 1 [0078.217] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e5dc) returned 1 [0078.217] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Sun\\Java\\Deployment\\tmp", nBufferLength=0x105, lpBuffer=0x31e0e4, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Sun\\Java\\Deployment\\tmp", lpFilePart=0x0) returned 0x46 [0078.217] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Sun\\Java\\Deployment\\tmp\\", nBufferLength=0x105, lpBuffer=0x31e0b8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Sun\\Java\\Deployment\\tmp\\", lpFilePart=0x0) returned 0x47 [0078.217] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Sun\\Java\\Deployment\\tmp\\*", lpFindFileData=0x31e304 | out: lpFindFileData=0x31e304*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xa1dc2570, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0xa1dc2570, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0xa1dc2570, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x381dc0 [0078.217] FindClose (in: hFindFile=0x381dc0 | out: hFindFile=0x381dc0) returned 1 [0078.217] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e59c) returned 1 [0078.217] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e5a8) returned 1 [0078.217] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e5dc) returned 1 [0078.217] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Sun\\Java\\Deployment\\tmp", nBufferLength=0x105, lpBuffer=0x31e0e4, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Sun\\Java\\Deployment\\tmp", lpFilePart=0x0) returned 0x46 [0078.217] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Sun\\Java\\Deployment\\tmp\\", nBufferLength=0x105, lpBuffer=0x31e0b8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Sun\\Java\\Deployment\\tmp\\", lpFilePart=0x0) returned 0x47 [0078.218] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Sun\\Java\\Deployment\\tmp\\*", lpFindFileData=0x31e304 | out: lpFindFileData=0x31e304*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xa1dc2570, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0xa1dc2570, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0xa1dc2570, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x381dc0 [0078.218] FindClose (in: hFindFile=0x381dc0 | out: hFindFile=0x381dc0) returned 1 [0078.218] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e59c) returned 1 [0078.218] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Sun\\Java\\Deployment\\tmp\\si", nBufferLength=0x105, lpBuffer=0x31e06c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Sun\\Java\\Deployment\\tmp\\si", lpFilePart=0x0) returned 0x49 [0078.218] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Sun\\Java\\Deployment\\tmp\\si\\", nBufferLength=0x105, lpBuffer=0x31e040, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Sun\\Java\\Deployment\\tmp\\si\\", lpFilePart=0x0) returned 0x4a [0078.218] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Sun\\Java\\Deployment\\tmp\\si\\*", lpFindFileData=0x31e28c | out: lpFindFileData=0x31e28c*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xa1dc2570, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0xfaeead90, ftLastAccessTime.dwHighDateTime=0x1d35d05, ftLastWriteTime.dwLowDateTime=0xfeca8830, ftLastWriteTime.dwHighDateTime=0x1d35d05, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x381dc0 [0078.218] FindClose (in: hFindFile=0x381dc0 | out: hFindFile=0x381dc0) returned 1 [0078.218] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Sun\\Java\\Deployment\\tmp\\si", nBufferLength=0x105, lpBuffer=0x31e06c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Sun\\Java\\Deployment\\tmp\\si", lpFilePart=0x0) returned 0x49 [0078.218] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Sun\\Java\\Deployment\\tmp\\si\\", nBufferLength=0x105, lpBuffer=0x31e040, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Sun\\Java\\Deployment\\tmp\\si\\", lpFilePart=0x0) returned 0x4a [0078.218] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Sun\\Java\\Deployment\\tmp\\si\\*", lpFindFileData=0x31e28c | out: lpFindFileData=0x31e28c*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xa1dc2570, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0xfaeead90, ftLastAccessTime.dwHighDateTime=0x1d35d05, ftLastWriteTime.dwLowDateTime=0xfeca8830, ftLastWriteTime.dwHighDateTime=0x1d35d05, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x381dc0 [0078.219] FindClose (in: hFindFile=0x381dc0 | out: hFindFile=0x381dc0) returned 1 [0078.219] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Sun\\Java\\jre1.7.0_45", nBufferLength=0x105, lpBuffer=0x31e15c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Sun\\Java\\jre1.7.0_45", lpFilePart=0x0) returned 0x43 [0078.219] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Sun\\Java\\jre1.7.0_45\\", nBufferLength=0x105, lpBuffer=0x31e130, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Sun\\Java\\jre1.7.0_45\\", lpFilePart=0x0) returned 0x44 [0078.219] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Sun\\Java\\jre1.7.0_45\\*", lpFindFileData=0x31e37c | out: lpFindFileData=0x31e37c*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x68cb4a40, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x68d26e60, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x68d26e60, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x381dc0 [0078.219] FindClose (in: hFindFile=0x381dc0 | out: hFindFile=0x381dc0) returned 1 [0078.219] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Sun\\Java\\jre1.7.0_45", nBufferLength=0x105, lpBuffer=0x31e15c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Sun\\Java\\jre1.7.0_45", lpFilePart=0x0) returned 0x43 [0078.219] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Sun\\Java\\jre1.7.0_45\\", nBufferLength=0x105, lpBuffer=0x31e130, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Sun\\Java\\jre1.7.0_45\\", lpFilePart=0x0) returned 0x44 [0078.219] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Sun\\Java\\jre1.7.0_45\\*", lpFindFileData=0x31e37c | out: lpFindFileData=0x31e37c*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x68cb4a40, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x68d26e60, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x68d26e60, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x381dc0 [0078.219] FindClose (in: hFindFile=0x381dc0 | out: hFindFile=0x381dc0) returned 1 [0078.219] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming", nBufferLength=0x105, lpBuffer=0x31e2c4, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming", lpFilePart=0x0) returned 0x2d [0078.219] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\", nBufferLength=0x105, lpBuffer=0x31e298, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\", lpFilePart=0x0) returned 0x2e [0078.219] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\*", lpFindFileData=0x31e4e4 | out: lpFindFileData=0x31e4e4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x28cff640, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0xd900ea60, ftLastAccessTime.dwHighDateTime=0x1d5e82a, ftLastWriteTime.dwLowDateTime=0xd900ea60, ftLastWriteTime.dwHighDateTime=0x1d5e82a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x381dc0 [0078.220] FindClose (in: hFindFile=0x381dc0 | out: hFindFile=0x381dc0) returned 1 [0078.220] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming", nBufferLength=0x105, lpBuffer=0x31e2c4, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming", lpFilePart=0x0) returned 0x2d [0078.220] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\", nBufferLength=0x105, lpBuffer=0x31e298, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\", lpFilePart=0x0) returned 0x2e [0078.220] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\*", lpFindFileData=0x31e4e4 | out: lpFindFileData=0x31e4e4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x28cff640, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0xd900ea60, ftLastAccessTime.dwHighDateTime=0x1d5e82a, ftLastWriteTime.dwLowDateTime=0xd900ea60, ftLastWriteTime.dwHighDateTime=0x1d5e82a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x381dc0 [0078.220] FindClose (in: hFindFile=0x381dc0 | out: hFindFile=0x381dc0) returned 1 [0078.220] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\9YRyg0lQ.mp3", nBufferLength=0x105, lpBuffer=0x31e194, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\9YRyg0lQ.mp3", lpFilePart=0x0) returned 0x3a [0078.220] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\9YRyg0lQ.mp3" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\9yryg0lq.mp3"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x264 [0078.220] GetFileType (hFile=0x264) returned 0x1 [0078.220] GetFileType (hFile=0x264) returned 0x1 [0078.220] GetFileSize (in: hFile=0x264, lpFileSizeHigh=0x31e790 | out: lpFileSizeHigh=0x31e790*=0x0) returned 0xc53d [0078.220] ReadFile (in: hFile=0x264, lpBuffer=0x28134c8, nNumberOfBytesToRead=0xc53d, lpNumberOfBytesRead=0x31e73c, lpOverlapped=0x0 | out: lpBuffer=0x28134c8*, lpNumberOfBytesRead=0x31e73c*=0xc53d, lpOverlapped=0x0) returned 1 [0078.267] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\9YRyg0lQ.mp3", nBufferLength=0x105, lpBuffer=0x31e180, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\9YRyg0lQ.mp3", lpFilePart=0x0) returned 0x3a [0078.267] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e674) returned 1 [0078.267] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\9YRyg0lQ.mp3" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\9yryg0lq.mp3"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x264 [0078.268] GetFileType (hFile=0x264) returned 0x1 [0078.268] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e670) returned 1 [0078.268] GetFileType (hFile=0x264) returned 0x1 [0078.268] WriteFile (in: hFile=0x264, lpBuffer=0x26a7a30*, nNumberOfBytesToWrite=0xc540, lpNumberOfBytesWritten=0x31e730, lpOverlapped=0x0 | out: lpBuffer=0x26a7a30*, lpNumberOfBytesWritten=0x31e730*=0xc540, lpOverlapped=0x0) returned 1 [0078.270] CloseHandle (hObject=0x264) returned 1 [0078.270] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\9YRyg0lQ.mp3", nBufferLength=0x105, lpBuffer=0x31e2b4, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\9YRyg0lQ.mp3", lpFilePart=0x0) returned 0x3a [0078.270] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\9YRyg0lQ.mp3", nBufferLength=0x105, lpBuffer=0x31e2b4, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\9YRyg0lQ.mp3", lpFilePart=0x0) returned 0x3a [0078.270] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e714) returned 1 [0078.270] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\9YRyg0lQ.mp3" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\9yryg0lq.mp3"), fInfoLevelId=0x0, lpFileInformation=0x31e790 | out: lpFileInformation=0x31e790*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x45d1f110, ftCreationTime.dwHighDateTime=0x1d5d869, ftLastAccessTime.dwLowDateTime=0xbbbed910, ftLastAccessTime.dwHighDateTime=0x1d5e449, ftLastWriteTime.dwLowDateTime=0x1218f600, ftLastWriteTime.dwHighDateTime=0x1d6eb7f, nFileSizeHigh=0x0, nFileSizeLow=0xc540)) returned 1 [0078.270] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e710) returned 1 [0078.270] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\9YRyg0lQ.mp3" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\9yryg0lq.mp3"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\9YRyg0lQ.mp3" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\9yryg0lq.mp3")) returned 1 [0078.271] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\C3gHw-4vc.png", nBufferLength=0x105, lpBuffer=0x31e194, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\C3gHw-4vc.png", lpFilePart=0x0) returned 0x3b [0078.271] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e688) returned 1 [0078.271] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\C3gHw-4vc.png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\c3ghw-4vc.png"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x264 [0078.271] GetFileType (hFile=0x264) returned 0x1 [0078.271] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e684) returned 1 [0078.271] GetFileType (hFile=0x264) returned 0x1 [0078.271] GetFileSize (in: hFile=0x264, lpFileSizeHigh=0x31e790 | out: lpFileSizeHigh=0x31e790*=0x0) returned 0x7831 [0078.271] ReadFile (in: hFile=0x264, lpBuffer=0x26b42ac, nNumberOfBytesToRead=0x7831, lpNumberOfBytesRead=0x31e73c, lpOverlapped=0x0 | out: lpBuffer=0x26b42ac*, lpNumberOfBytesRead=0x31e73c*=0x7831, lpOverlapped=0x0) returned 1 [0078.272] CloseHandle (hObject=0x264) returned 1 [0078.287] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\C3gHw-4vc.png", nBufferLength=0x105, lpBuffer=0x31e180, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\C3gHw-4vc.png", lpFilePart=0x0) returned 0x3b [0078.287] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e674) returned 1 [0078.287] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\C3gHw-4vc.png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\c3ghw-4vc.png"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x264 [0078.288] GetFileType (hFile=0x264) returned 0x1 [0078.288] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e670) returned 1 [0078.288] GetFileType (hFile=0x264) returned 0x1 [0078.288] WriteFile (in: hFile=0x264, lpBuffer=0x2726b30*, nNumberOfBytesToWrite=0x7840, lpNumberOfBytesWritten=0x31e730, lpOverlapped=0x0 | out: lpBuffer=0x2726b30*, lpNumberOfBytesWritten=0x31e730*=0x7840, lpOverlapped=0x0) returned 1 [0078.289] CloseHandle (hObject=0x264) returned 1 [0078.290] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\C3gHw-4vc.png", nBufferLength=0x105, lpBuffer=0x31e2b4, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\C3gHw-4vc.png", lpFilePart=0x0) returned 0x3b [0078.290] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\C3gHw-4vc.png", nBufferLength=0x105, lpBuffer=0x31e2b4, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\C3gHw-4vc.png", lpFilePart=0x0) returned 0x3b [0078.290] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e714) returned 1 [0078.290] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\C3gHw-4vc.png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\c3ghw-4vc.png"), fInfoLevelId=0x0, lpFileInformation=0x31e790 | out: lpFileInformation=0x31e790*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xcd266f10, ftCreationTime.dwHighDateTime=0x1d5e412, ftLastAccessTime.dwLowDateTime=0xc81be9b0, ftLastAccessTime.dwHighDateTime=0x1d5db65, ftLastWriteTime.dwLowDateTime=0x121b5760, ftLastWriteTime.dwHighDateTime=0x1d6eb7f, nFileSizeHigh=0x0, nFileSizeLow=0x7840)) returned 1 [0078.290] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e710) returned 1 [0078.290] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\C3gHw-4vc.png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\c3ghw-4vc.png"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\C3gHw-4vc.png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\c3ghw-4vc.png")) returned 1 [0078.290] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\eAjIaLktjKk9CG.avi", nBufferLength=0x105, lpBuffer=0x31e194, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\eAjIaLktjKk9CG.avi", lpFilePart=0x0) returned 0x40 [0078.290] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e688) returned 1 [0078.290] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\eAjIaLktjKk9CG.avi" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\eajialktjkk9cg.avi"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x264 [0078.291] GetFileType (hFile=0x264) returned 0x1 [0078.291] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e684) returned 1 [0078.291] GetFileType (hFile=0x264) returned 0x1 [0078.291] GetFileSize (in: hFile=0x264, lpFileSizeHigh=0x31e790 | out: lpFileSizeHigh=0x31e790*=0x0) returned 0x2583 [0078.291] ReadFile (in: hFile=0x264, lpBuffer=0x272e6c4, nNumberOfBytesToRead=0x2583, lpNumberOfBytesRead=0x31e73c, lpOverlapped=0x0 | out: lpBuffer=0x272e6c4*, lpNumberOfBytesRead=0x31e73c*=0x2583, lpOverlapped=0x0) returned 1 [0078.292] CloseHandle (hObject=0x264) returned 1 [0078.305] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\eAjIaLktjKk9CG.avi", nBufferLength=0x105, lpBuffer=0x31e180, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\eAjIaLktjKk9CG.avi", lpFilePart=0x0) returned 0x40 [0078.305] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e674) returned 1 [0078.305] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\eAjIaLktjKk9CG.avi" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\eajialktjkk9cg.avi"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x264 [0078.306] GetFileType (hFile=0x264) returned 0x1 [0078.306] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e670) returned 1 [0078.307] GetFileType (hFile=0x264) returned 0x1 [0078.307] WriteFile (in: hFile=0x264, lpBuffer=0x278707c*, nNumberOfBytesToWrite=0x2590, lpNumberOfBytesWritten=0x31e730, lpOverlapped=0x0 | out: lpBuffer=0x278707c*, lpNumberOfBytesWritten=0x31e730*=0x2590, lpOverlapped=0x0) returned 1 [0078.307] CloseHandle (hObject=0x264) returned 1 [0078.308] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\eAjIaLktjKk9CG.avi", nBufferLength=0x105, lpBuffer=0x31e2b4, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\eAjIaLktjKk9CG.avi", lpFilePart=0x0) returned 0x40 [0078.308] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\eAjIaLktjKk9CG.avi", nBufferLength=0x105, lpBuffer=0x31e2b4, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\eAjIaLktjKk9CG.avi", lpFilePart=0x0) returned 0x40 [0078.308] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e714) returned 1 [0078.308] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\eAjIaLktjKk9CG.avi" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\eajialktjkk9cg.avi"), fInfoLevelId=0x0, lpFileInformation=0x31e790 | out: lpFileInformation=0x31e790*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x7dac4c40, ftCreationTime.dwHighDateTime=0x1d5d95c, ftLastAccessTime.dwLowDateTime=0x142504f0, ftLastAccessTime.dwHighDateTime=0x1d5e709, ftLastWriteTime.dwLowDateTime=0x121db8c0, ftLastWriteTime.dwHighDateTime=0x1d6eb7f, nFileSizeHigh=0x0, nFileSizeLow=0x2590)) returned 1 [0078.308] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e710) returned 1 [0078.308] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\eAjIaLktjKk9CG.avi" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\eajialktjkk9cg.avi"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\eAjIaLktjKk9CG.avi" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\eajialktjkk9cg.avi")) returned 1 [0078.308] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\fXOvruHfa48CytY.png", nBufferLength=0x105, lpBuffer=0x31e194, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\fXOvruHfa48CytY.png", lpFilePart=0x0) returned 0x41 [0078.308] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e688) returned 1 [0078.308] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\fXOvruHfa48CytY.png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\fxovruhfa48cyty.png"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x264 [0078.309] GetFileType (hFile=0x264) returned 0x1 [0078.309] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e684) returned 1 [0078.309] GetFileType (hFile=0x264) returned 0x1 [0078.309] GetFileSize (in: hFile=0x264, lpFileSizeHigh=0x31e790 | out: lpFileSizeHigh=0x31e790*=0x0) returned 0xda60 [0078.309] ReadFile (in: hFile=0x264, lpBuffer=0x27899a8, nNumberOfBytesToRead=0xda60, lpNumberOfBytesRead=0x31e73c, lpOverlapped=0x0 | out: lpBuffer=0x27899a8*, lpNumberOfBytesRead=0x31e73c*=0xda60, lpOverlapped=0x0) returned 1 [0078.310] CloseHandle (hObject=0x264) returned 1 [0078.326] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\fXOvruHfa48CytY.png", nBufferLength=0x105, lpBuffer=0x31e180, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\fXOvruHfa48CytY.png", lpFilePart=0x0) returned 0x41 [0078.326] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e674) returned 1 [0078.326] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\fXOvruHfa48CytY.png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\fxovruhfa48cyty.png"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x264 [0078.327] GetFileType (hFile=0x264) returned 0x1 [0078.327] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e670) returned 1 [0078.327] GetFileType (hFile=0x264) returned 0x1 [0078.327] WriteFile (in: hFile=0x264, lpBuffer=0x27ff6f0*, nNumberOfBytesToWrite=0xda70, lpNumberOfBytesWritten=0x31e730, lpOverlapped=0x0 | out: lpBuffer=0x27ff6f0*, lpNumberOfBytesWritten=0x31e730*=0xda70, lpOverlapped=0x0) returned 1 [0078.329] CloseHandle (hObject=0x264) returned 1 [0078.329] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\fXOvruHfa48CytY.png", nBufferLength=0x105, lpBuffer=0x31e2b4, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\fXOvruHfa48CytY.png", lpFilePart=0x0) returned 0x41 [0078.329] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\fXOvruHfa48CytY.png", nBufferLength=0x105, lpBuffer=0x31e2b4, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\fXOvruHfa48CytY.png", lpFilePart=0x0) returned 0x41 [0078.329] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e714) returned 1 [0078.329] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\fXOvruHfa48CytY.png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\fxovruhfa48cyty.png"), fInfoLevelId=0x0, lpFileInformation=0x31e790 | out: lpFileInformation=0x31e790*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x79d42050, ftCreationTime.dwHighDateTime=0x1d5dbbb, ftLastAccessTime.dwLowDateTime=0x55bb34e0, ftLastAccessTime.dwHighDateTime=0x1d5e5ae, ftLastWriteTime.dwLowDateTime=0x12227b80, ftLastWriteTime.dwHighDateTime=0x1d6eb7f, nFileSizeHigh=0x0, nFileSizeLow=0xda70)) returned 1 [0078.329] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e710) returned 1 [0078.329] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\fXOvruHfa48CytY.png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\fxovruhfa48cyty.png"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\fXOvruHfa48CytY.png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\fxovruhfa48cyty.png")) returned 1 [0078.329] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\hpjuUpDN.mp4", nBufferLength=0x105, lpBuffer=0x31e194, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\hpjuUpDN.mp4", lpFilePart=0x0) returned 0x3a [0078.329] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e688) returned 1 [0078.330] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\hpjuUpDN.mp4" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\hpjuupdn.mp4"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x264 [0078.330] GetFileType (hFile=0x264) returned 0x1 [0078.330] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e684) returned 1 [0078.330] GetFileType (hFile=0x264) returned 0x1 [0078.330] GetFileSize (in: hFile=0x264, lpFileSizeHigh=0x31e790 | out: lpFileSizeHigh=0x31e790*=0x0) returned 0x18eeb [0078.330] ReadFile (in: hFile=0x264, lpBuffer=0x38a8778, nNumberOfBytesToRead=0x18eeb, lpNumberOfBytesRead=0x31e73c, lpOverlapped=0x0 | out: lpBuffer=0x38a8778*, lpNumberOfBytesRead=0x31e73c*=0x18eeb, lpOverlapped=0x0) returned 1 [0078.332] CloseHandle (hObject=0x264) returned 1 [0078.352] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\hpjuUpDN.mp4", nBufferLength=0x105, lpBuffer=0x31e180, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\hpjuUpDN.mp4", lpFilePart=0x0) returned 0x3a [0078.352] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e674) returned 1 [0078.352] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\hpjuUpDN.mp4" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\hpjuupdn.mp4"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x264 [0078.353] GetFileType (hFile=0x264) returned 0x1 [0078.353] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e670) returned 1 [0078.353] GetFileType (hFile=0x264) returned 0x1 [0078.353] WriteFile (in: hFile=0x264, lpBuffer=0x3925260*, nNumberOfBytesToWrite=0x18ef0, lpNumberOfBytesWritten=0x31e730, lpOverlapped=0x0 | out: lpBuffer=0x3925260*, lpNumberOfBytesWritten=0x31e730*=0x18ef0, lpOverlapped=0x0) returned 1 [0078.356] CloseHandle (hObject=0x264) returned 1 [0078.356] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\hpjuUpDN.mp4", nBufferLength=0x105, lpBuffer=0x31e2b4, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\hpjuUpDN.mp4", lpFilePart=0x0) returned 0x3a [0078.356] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\hpjuUpDN.mp4", nBufferLength=0x105, lpBuffer=0x31e2b4, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\hpjuUpDN.mp4", lpFilePart=0x0) returned 0x3a [0078.356] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e714) returned 1 [0078.356] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\hpjuUpDN.mp4" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\hpjuupdn.mp4"), fInfoLevelId=0x0, lpFileInformation=0x31e790 | out: lpFileInformation=0x31e790*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x210bfed0, ftCreationTime.dwHighDateTime=0x1d5df11, ftLastAccessTime.dwLowDateTime=0xe4cde710, ftLastAccessTime.dwHighDateTime=0x1d5e05c, ftLastWriteTime.dwLowDateTime=0x1224dce0, ftLastWriteTime.dwHighDateTime=0x1d6eb7f, nFileSizeHigh=0x0, nFileSizeLow=0x18ef0)) returned 1 [0078.356] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e710) returned 1 [0078.356] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\hpjuUpDN.mp4" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\hpjuupdn.mp4"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\hpjuUpDN.mp4" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\hpjuupdn.mp4")) returned 1 [0078.356] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\hWh63kLsYx1.mp3", nBufferLength=0x105, lpBuffer=0x31e194, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\hWh63kLsYx1.mp3", lpFilePart=0x0) returned 0x3d [0078.357] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e688) returned 1 [0078.357] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\hWh63kLsYx1.mp3" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\hwh63klsyx1.mp3"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x264 [0078.357] GetFileType (hFile=0x264) returned 0x1 [0078.357] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e684) returned 1 [0078.357] GetFileType (hFile=0x264) returned 0x1 [0078.357] GetFileSize (in: hFile=0x264, lpFileSizeHigh=0x31e790 | out: lpFileSizeHigh=0x31e790*=0x0) returned 0x6361 [0078.357] ReadFile (in: hFile=0x264, lpBuffer=0x285a600, nNumberOfBytesToRead=0x6361, lpNumberOfBytesRead=0x31e73c, lpOverlapped=0x0 | out: lpBuffer=0x285a600*, lpNumberOfBytesRead=0x31e73c*=0x6361, lpOverlapped=0x0) returned 1 [0078.358] CloseHandle (hObject=0x264) returned 1 [0078.373] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\hWh63kLsYx1.mp3", nBufferLength=0x105, lpBuffer=0x31e180, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\hWh63kLsYx1.mp3", lpFilePart=0x0) returned 0x3d [0078.373] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e674) returned 1 [0078.373] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\hWh63kLsYx1.mp3" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\hwh63klsyx1.mp3"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x264 [0078.375] GetFileType (hFile=0x264) returned 0x1 [0078.375] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e670) returned 1 [0078.375] GetFileType (hFile=0x264) returned 0x1 [0078.375] WriteFile (in: hFile=0x264, lpBuffer=0x28c6518*, nNumberOfBytesToWrite=0x6370, lpNumberOfBytesWritten=0x31e730, lpOverlapped=0x0 | out: lpBuffer=0x28c6518*, lpNumberOfBytesWritten=0x31e730*=0x6370, lpOverlapped=0x0) returned 1 [0078.377] CloseHandle (hObject=0x264) returned 1 [0078.377] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\hWh63kLsYx1.mp3", nBufferLength=0x105, lpBuffer=0x31e2b4, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\hWh63kLsYx1.mp3", lpFilePart=0x0) returned 0x3d [0078.377] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\hWh63kLsYx1.mp3", nBufferLength=0x105, lpBuffer=0x31e2b4, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\hWh63kLsYx1.mp3", lpFilePart=0x0) returned 0x3d [0078.377] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e714) returned 1 [0078.377] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\hWh63kLsYx1.mp3" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\hwh63klsyx1.mp3"), fInfoLevelId=0x0, lpFileInformation=0x31e790 | out: lpFileInformation=0x31e790*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x6ffdd290, ftCreationTime.dwHighDateTime=0x1d5deb5, ftLastAccessTime.dwLowDateTime=0xd55639b0, ftLastAccessTime.dwHighDateTime=0x1d5e6b3, ftLastWriteTime.dwLowDateTime=0x12299fa0, ftLastWriteTime.dwHighDateTime=0x1d6eb7f, nFileSizeHigh=0x0, nFileSizeLow=0x6370)) returned 1 [0078.377] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e710) returned 1 [0078.377] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\hWh63kLsYx1.mp3" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\hwh63klsyx1.mp3"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\hWh63kLsYx1.mp3" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\hwh63klsyx1.mp3")) returned 1 [0078.377] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\ndCB1X58M9HM9H.mp4", nBufferLength=0x105, lpBuffer=0x31e194, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\ndCB1X58M9HM9H.mp4", lpFilePart=0x0) returned 0x40 [0078.377] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e688) returned 1 [0078.378] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\ndCB1X58M9HM9H.mp4" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\ndcb1x58m9hm9h.mp4"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x264 [0078.378] GetFileType (hFile=0x264) returned 0x1 [0078.378] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e684) returned 1 [0078.378] GetFileType (hFile=0x264) returned 0x1 [0078.378] GetFileSize (in: hFile=0x264, lpFileSizeHigh=0x31e790 | out: lpFileSizeHigh=0x31e790*=0x0) returned 0x13298 [0078.378] ReadFile (in: hFile=0x264, lpBuffer=0x28ccc4c, nNumberOfBytesToRead=0x13298, lpNumberOfBytesRead=0x31e73c, lpOverlapped=0x0 | out: lpBuffer=0x28ccc4c*, lpNumberOfBytesRead=0x31e73c*=0x13298, lpOverlapped=0x0) returned 1 [0078.380] CloseHandle (hObject=0x264) returned 1 [0078.425] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\ndCB1X58M9HM9H.mp4", nBufferLength=0x105, lpBuffer=0x31e180, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\ndCB1X58M9HM9H.mp4", lpFilePart=0x0) returned 0x40 [0078.425] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e674) returned 1 [0078.425] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\ndCB1X58M9HM9H.mp4" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\ndcb1x58m9hm9h.mp4"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x264 [0078.427] GetFileType (hFile=0x264) returned 0x1 [0078.427] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e670) returned 1 [0078.427] GetFileType (hFile=0x264) returned 0x1 [0078.427] WriteFile (in: hFile=0x264, lpBuffer=0x26b5d98*, nNumberOfBytesToWrite=0x132a0, lpNumberOfBytesWritten=0x31e730, lpOverlapped=0x0 | out: lpBuffer=0x26b5d98*, lpNumberOfBytesWritten=0x31e730*=0x132a0, lpOverlapped=0x0) returned 1 [0078.429] CloseHandle (hObject=0x264) returned 1 [0078.429] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\ndCB1X58M9HM9H.mp4", nBufferLength=0x105, lpBuffer=0x31e2b4, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\ndCB1X58M9HM9H.mp4", lpFilePart=0x0) returned 0x40 [0078.429] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\ndCB1X58M9HM9H.mp4", nBufferLength=0x105, lpBuffer=0x31e2b4, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\ndCB1X58M9HM9H.mp4", lpFilePart=0x0) returned 0x40 [0078.429] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e714) returned 1 [0078.429] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\ndCB1X58M9HM9H.mp4" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\ndcb1x58m9hm9h.mp4"), fInfoLevelId=0x0, lpFileInformation=0x31e790 | out: lpFileInformation=0x31e790*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x43badbd0, ftCreationTime.dwHighDateTime=0x1d5e4e9, ftLastAccessTime.dwLowDateTime=0x24d40170, ftLastAccessTime.dwHighDateTime=0x1d5e4f2, ftLastWriteTime.dwLowDateTime=0x1230c3c0, ftLastWriteTime.dwHighDateTime=0x1d6eb7f, nFileSizeHigh=0x0, nFileSizeLow=0x132a0)) returned 1 [0078.429] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e710) returned 1 [0078.430] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\ndCB1X58M9HM9H.mp4" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\ndcb1x58m9hm9h.mp4"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\ndCB1X58M9HM9H.mp4" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\ndcb1x58m9hm9h.mp4")) returned 1 [0078.430] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\qVjfxVr.mkv", nBufferLength=0x105, lpBuffer=0x31e194, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\qVjfxVr.mkv", lpFilePart=0x0) returned 0x39 [0078.430] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e688) returned 1 [0078.430] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\qVjfxVr.mkv" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\qvjfxvr.mkv"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x264 [0078.430] GetFileType (hFile=0x264) returned 0x1 [0078.430] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e684) returned 1 [0078.430] GetFileType (hFile=0x264) returned 0x1 [0078.430] GetFileSize (in: hFile=0x264, lpFileSizeHigh=0x31e790 | out: lpFileSizeHigh=0x31e790*=0x0) returned 0xd5b [0078.430] ReadFile (in: hFile=0x264, lpBuffer=0x26ca11c, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x31e73c, lpOverlapped=0x0 | out: lpBuffer=0x26ca11c*, lpNumberOfBytesRead=0x31e73c*=0xd5b, lpOverlapped=0x0) returned 1 [0078.431] CloseHandle (hObject=0x264) returned 1 [0078.445] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\qVjfxVr.mkv", nBufferLength=0x105, lpBuffer=0x31e180, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\qVjfxVr.mkv", lpFilePart=0x0) returned 0x39 [0078.445] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e674) returned 1 [0078.445] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\qVjfxVr.mkv" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\qvjfxvr.mkv"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x264 [0078.446] GetFileType (hFile=0x264) returned 0x1 [0078.446] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e670) returned 1 [0078.446] GetFileType (hFile=0x264) returned 0x1 [0078.446] WriteFile (in: hFile=0x264, lpBuffer=0x271c450*, nNumberOfBytesToWrite=0xd60, lpNumberOfBytesWritten=0x31e704, lpOverlapped=0x0 | out: lpBuffer=0x271c450*, lpNumberOfBytesWritten=0x31e704*=0xd60, lpOverlapped=0x0) returned 1 [0078.447] CloseHandle (hObject=0x264) returned 1 [0078.447] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\qVjfxVr.mkv", nBufferLength=0x105, lpBuffer=0x31e2b4, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\qVjfxVr.mkv", lpFilePart=0x0) returned 0x39 [0078.447] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\qVjfxVr.mkv", nBufferLength=0x105, lpBuffer=0x31e2b4, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\qVjfxVr.mkv", lpFilePart=0x0) returned 0x39 [0078.447] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e714) returned 1 [0078.447] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\qVjfxVr.mkv" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\qvjfxvr.mkv"), fInfoLevelId=0x0, lpFileInformation=0x31e790 | out: lpFileInformation=0x31e790*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xd171b1c0, ftCreationTime.dwHighDateTime=0x1d5e0fb, ftLastAccessTime.dwLowDateTime=0xa139ac10, ftLastAccessTime.dwHighDateTime=0x1d5db47, ftLastWriteTime.dwLowDateTime=0x12332520, ftLastWriteTime.dwHighDateTime=0x1d6eb7f, nFileSizeHigh=0x0, nFileSizeLow=0xd60)) returned 1 [0078.447] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e710) returned 1 [0078.447] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\qVjfxVr.mkv" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\qvjfxvr.mkv"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\qVjfxVr.mkv" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\qvjfxvr.mkv")) returned 1 [0078.448] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\UjUJtBCLIKM-5dz9N.mkv", nBufferLength=0x105, lpBuffer=0x31e194, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\UjUJtBCLIKM-5dz9N.mkv", lpFilePart=0x0) returned 0x43 [0078.448] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e688) returned 1 [0078.448] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\UjUJtBCLIKM-5dz9N.mkv" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\ujujtbclikm-5dz9n.mkv"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x264 [0078.448] GetFileType (hFile=0x264) returned 0x1 [0078.448] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e684) returned 1 [0078.448] GetFileType (hFile=0x264) returned 0x1 [0078.448] GetFileSize (in: hFile=0x264, lpFileSizeHigh=0x31e790 | out: lpFileSizeHigh=0x31e790*=0x0) returned 0x15ea [0078.448] ReadFile (in: hFile=0x264, lpBuffer=0x271d69c, nNumberOfBytesToRead=0x15ea, lpNumberOfBytesRead=0x31e73c, lpOverlapped=0x0 | out: lpBuffer=0x271d69c*, lpNumberOfBytesRead=0x31e73c*=0x15ea, lpOverlapped=0x0) returned 1 [0078.449] CloseHandle (hObject=0x264) returned 1 [0078.463] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\UjUJtBCLIKM-5dz9N.mkv", nBufferLength=0x105, lpBuffer=0x31e180, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\UjUJtBCLIKM-5dz9N.mkv", lpFilePart=0x0) returned 0x43 [0078.463] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e674) returned 1 [0078.463] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\UjUJtBCLIKM-5dz9N.mkv" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\ujujtbclikm-5dz9n.mkv"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x264 [0078.464] GetFileType (hFile=0x264) returned 0x1 [0078.464] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e670) returned 1 [0078.464] GetFileType (hFile=0x264) returned 0x1 [0078.464] WriteFile (in: hFile=0x264, lpBuffer=0x2771234*, nNumberOfBytesToWrite=0x15f0, lpNumberOfBytesWritten=0x31e730, lpOverlapped=0x0 | out: lpBuffer=0x2771234*, lpNumberOfBytesWritten=0x31e730*=0x15f0, lpOverlapped=0x0) returned 1 [0078.465] CloseHandle (hObject=0x264) returned 1 [0078.465] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\UjUJtBCLIKM-5dz9N.mkv", nBufferLength=0x105, lpBuffer=0x31e2b4, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\UjUJtBCLIKM-5dz9N.mkv", lpFilePart=0x0) returned 0x43 [0078.465] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\UjUJtBCLIKM-5dz9N.mkv", nBufferLength=0x105, lpBuffer=0x31e2b4, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\UjUJtBCLIKM-5dz9N.mkv", lpFilePart=0x0) returned 0x43 [0078.465] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e714) returned 1 [0078.465] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\UjUJtBCLIKM-5dz9N.mkv" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\ujujtbclikm-5dz9n.mkv"), fInfoLevelId=0x0, lpFileInformation=0x31e790 | out: lpFileInformation=0x31e790*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x5977ce50, ftCreationTime.dwHighDateTime=0x1d5e035, ftLastAccessTime.dwLowDateTime=0xb2843f40, ftLastAccessTime.dwHighDateTime=0x1d5e1d6, ftLastWriteTime.dwLowDateTime=0x12358680, ftLastWriteTime.dwHighDateTime=0x1d6eb7f, nFileSizeHigh=0x0, nFileSizeLow=0x15f0)) returned 1 [0078.466] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e710) returned 1 [0078.466] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\UjUJtBCLIKM-5dz9N.mkv" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\ujujtbclikm-5dz9n.mkv"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\UjUJtBCLIKM-5dz9N.mkv" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\ujujtbclikm-5dz9n.mkv")) returned 1 [0078.466] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\uZhRJalfyk_WN.jpg", nBufferLength=0x105, lpBuffer=0x31e194, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\uZhRJalfyk_WN.jpg", lpFilePart=0x0) returned 0x3f [0078.466] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e688) returned 1 [0078.466] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\uZhRJalfyk_WN.jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\uzhrjalfyk_wn.jpg"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x264 [0078.466] GetFileType (hFile=0x264) returned 0x1 [0078.466] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e684) returned 1 [0078.466] GetFileType (hFile=0x264) returned 0x1 [0078.466] GetFileSize (in: hFile=0x264, lpFileSizeHigh=0x31e790 | out: lpFileSizeHigh=0x31e790*=0x0) returned 0xc413 [0078.466] ReadFile (in: hFile=0x264, lpBuffer=0x2772bc8, nNumberOfBytesToRead=0xc413, lpNumberOfBytesRead=0x31e73c, lpOverlapped=0x0 | out: lpBuffer=0x2772bc8*, lpNumberOfBytesRead=0x31e73c*=0xc413, lpOverlapped=0x0) returned 1 [0078.467] CloseHandle (hObject=0x264) returned 1 [0078.486] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\uZhRJalfyk_WN.jpg", nBufferLength=0x105, lpBuffer=0x31e180, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\uZhRJalfyk_WN.jpg", lpFilePart=0x0) returned 0x3f [0078.486] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e674) returned 1 [0078.486] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\uZhRJalfyk_WN.jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\uzhrjalfyk_wn.jpg"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x264 [0078.487] GetFileType (hFile=0x264) returned 0x1 [0078.487] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e670) returned 1 [0078.487] GetFileType (hFile=0x264) returned 0x1 [0078.487] WriteFile (in: hFile=0x264, lpBuffer=0x26449d4*, nNumberOfBytesToWrite=0xc420, lpNumberOfBytesWritten=0x31e730, lpOverlapped=0x0 | out: lpBuffer=0x26449d4*, lpNumberOfBytesWritten=0x31e730*=0xc420, lpOverlapped=0x0) returned 1 [0078.489] CloseHandle (hObject=0x264) returned 1 [0078.489] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\uZhRJalfyk_WN.jpg", nBufferLength=0x105, lpBuffer=0x31e2b4, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\uZhRJalfyk_WN.jpg", lpFilePart=0x0) returned 0x3f [0078.489] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\uZhRJalfyk_WN.jpg", nBufferLength=0x105, lpBuffer=0x31e2b4, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\uZhRJalfyk_WN.jpg", lpFilePart=0x0) returned 0x3f [0078.489] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e714) returned 1 [0078.489] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\uZhRJalfyk_WN.jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\uzhrjalfyk_wn.jpg"), fInfoLevelId=0x0, lpFileInformation=0x31e790 | out: lpFileInformation=0x31e790*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x4f210290, ftCreationTime.dwHighDateTime=0x1d5dbb3, ftLastAccessTime.dwLowDateTime=0x1ed9eef0, ftLastAccessTime.dwHighDateTime=0x1d5de95, ftLastWriteTime.dwLowDateTime=0x123a4940, ftLastWriteTime.dwHighDateTime=0x1d6eb7f, nFileSizeHigh=0x0, nFileSizeLow=0xc420)) returned 1 [0078.489] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e710) returned 1 [0078.489] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\uZhRJalfyk_WN.jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\uzhrjalfyk_wn.jpg"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\uZhRJalfyk_WN.jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\uzhrjalfyk_wn.jpg")) returned 1 [0078.490] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\V7vkSt.bmp", nBufferLength=0x105, lpBuffer=0x31e194, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\V7vkSt.bmp", lpFilePart=0x0) returned 0x38 [0078.490] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e688) returned 1 [0078.490] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\V7vkSt.bmp" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\v7vkst.bmp"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x264 [0078.490] GetFileType (hFile=0x264) returned 0x1 [0078.490] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e684) returned 1 [0078.490] GetFileType (hFile=0x264) returned 0x1 [0078.490] GetFileSize (in: hFile=0x264, lpFileSizeHigh=0x31e790 | out: lpFileSizeHigh=0x31e790*=0x0) returned 0x11f2b [0078.490] ReadFile (in: hFile=0x264, lpBuffer=0x2651148, nNumberOfBytesToRead=0x11f2b, lpNumberOfBytesRead=0x31e73c, lpOverlapped=0x0 | out: lpBuffer=0x2651148*, lpNumberOfBytesRead=0x31e73c*=0x11f2b, lpOverlapped=0x0) returned 1 [0078.491] CloseHandle (hObject=0x264) returned 1 [0078.534] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\V7vkSt.bmp", nBufferLength=0x105, lpBuffer=0x31e180, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\V7vkSt.bmp", lpFilePart=0x0) returned 0x38 [0078.534] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e674) returned 1 [0078.534] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\V7vkSt.bmp" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\v7vkst.bmp"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x264 [0078.535] GetFileType (hFile=0x264) returned 0x1 [0078.535] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e670) returned 1 [0078.535] GetFileType (hFile=0x264) returned 0x1 [0078.536] WriteFile (in: hFile=0x264, lpBuffer=0x26d3e30*, nNumberOfBytesToWrite=0x11f30, lpNumberOfBytesWritten=0x31e730, lpOverlapped=0x0 | out: lpBuffer=0x26d3e30*, lpNumberOfBytesWritten=0x31e730*=0x11f30, lpOverlapped=0x0) returned 1 [0078.538] CloseHandle (hObject=0x264) returned 1 [0078.538] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\V7vkSt.bmp", nBufferLength=0x105, lpBuffer=0x31e2b4, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\V7vkSt.bmp", lpFilePart=0x0) returned 0x38 [0078.538] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\V7vkSt.bmp", nBufferLength=0x105, lpBuffer=0x31e2b4, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\V7vkSt.bmp", lpFilePart=0x0) returned 0x38 [0078.538] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e714) returned 1 [0078.538] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\V7vkSt.bmp" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\v7vkst.bmp"), fInfoLevelId=0x0, lpFileInformation=0x31e790 | out: lpFileInformation=0x31e790*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xebb1c1e0, ftCreationTime.dwHighDateTime=0x1d5dfa9, ftLastAccessTime.dwLowDateTime=0x30e549d0, ftLastAccessTime.dwHighDateTime=0x1d5e784, ftLastWriteTime.dwLowDateTime=0x12416d60, ftLastWriteTime.dwHighDateTime=0x1d6eb7f, nFileSizeHigh=0x0, nFileSizeLow=0x11f30)) returned 1 [0078.538] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e710) returned 1 [0078.538] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\V7vkSt.bmp" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\v7vkst.bmp"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\V7vkSt.bmp" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\v7vkst.bmp")) returned 1 [0078.538] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\WpAlC1uR.xls", nBufferLength=0x105, lpBuffer=0x31e194, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\WpAlC1uR.xls", lpFilePart=0x0) returned 0x3a [0078.539] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e688) returned 1 [0078.539] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\WpAlC1uR.xls" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\wpalc1ur.xls"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x264 [0078.539] GetFileType (hFile=0x264) returned 0x1 [0078.539] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e684) returned 1 [0078.539] GetFileType (hFile=0x264) returned 0x1 [0078.539] GetFileSize (in: hFile=0x264, lpFileSizeHigh=0x31e790 | out: lpFileSizeHigh=0x31e790*=0x0) returned 0x10d45 [0078.539] ReadFile (in: hFile=0x264, lpBuffer=0x26e608c, nNumberOfBytesToRead=0x10d45, lpNumberOfBytesRead=0x31e73c, lpOverlapped=0x0 | out: lpBuffer=0x26e608c*, lpNumberOfBytesRead=0x31e73c*=0x10d45, lpOverlapped=0x0) returned 1 [0078.540] CloseHandle (hObject=0x264) returned 1 [0078.555] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\WpAlC1uR.xls", nBufferLength=0x105, lpBuffer=0x31e180, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\WpAlC1uR.xls", lpFilePart=0x0) returned 0x3a [0078.555] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e674) returned 1 [0078.555] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\WpAlC1uR.xls" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\wpalc1ur.xls"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x264 [0078.557] GetFileType (hFile=0x264) returned 0x1 [0078.557] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e670) returned 1 [0078.557] GetFileType (hFile=0x264) returned 0x1 [0078.557] WriteFile (in: hFile=0x264, lpBuffer=0x2765678*, nNumberOfBytesToWrite=0x10d50, lpNumberOfBytesWritten=0x31e730, lpOverlapped=0x0 | out: lpBuffer=0x2765678*, lpNumberOfBytesWritten=0x31e730*=0x10d50, lpOverlapped=0x0) returned 1 [0078.558] CloseHandle (hObject=0x264) returned 1 [0078.559] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\WpAlC1uR.xls", nBufferLength=0x105, lpBuffer=0x31e2b4, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\WpAlC1uR.xls", lpFilePart=0x0) returned 0x3a [0078.559] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\WpAlC1uR.xls", nBufferLength=0x105, lpBuffer=0x31e2b4, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\WpAlC1uR.xls", lpFilePart=0x0) returned 0x3a [0078.559] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e714) returned 1 [0078.559] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\WpAlC1uR.xls" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\wpalc1ur.xls"), fInfoLevelId=0x0, lpFileInformation=0x31e790 | out: lpFileInformation=0x31e790*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x7ff8d7d0, ftCreationTime.dwHighDateTime=0x1d5dcdf, ftLastAccessTime.dwLowDateTime=0x582e87c0, ftLastAccessTime.dwHighDateTime=0x1d5e12d, ftLastWriteTime.dwLowDateTime=0x1243cec0, ftLastWriteTime.dwHighDateTime=0x1d6eb7f, nFileSizeHigh=0x0, nFileSizeLow=0x10d50)) returned 1 [0078.559] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e710) returned 1 [0078.559] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\WpAlC1uR.xls" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\wpalc1ur.xls"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\WpAlC1uR.xls" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\wpalc1ur.xls")) returned 1 [0078.559] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Xjiv7PmC.pdf", nBufferLength=0x105, lpBuffer=0x31e194, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Xjiv7PmC.pdf", lpFilePart=0x0) returned 0x3a [0078.559] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e688) returned 1 [0078.559] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Xjiv7PmC.pdf" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\xjiv7pmc.pdf"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x264 [0078.559] GetFileType (hFile=0x264) returned 0x1 [0078.559] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e684) returned 1 [0078.560] GetFileType (hFile=0x264) returned 0x1 [0078.560] GetFileSize (in: hFile=0x264, lpFileSizeHigh=0x31e790 | out: lpFileSizeHigh=0x31e790*=0x0) returned 0x12661 [0078.560] ReadFile (in: hFile=0x264, lpBuffer=0x277671c, nNumberOfBytesToRead=0x12661, lpNumberOfBytesRead=0x31e73c, lpOverlapped=0x0 | out: lpBuffer=0x277671c*, lpNumberOfBytesRead=0x31e73c*=0x12661, lpOverlapped=0x0) returned 1 [0078.561] CloseHandle (hObject=0x264) returned 1 [0078.577] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Xjiv7PmC.pdf", nBufferLength=0x105, lpBuffer=0x31e180, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Xjiv7PmC.pdf", lpFilePart=0x0) returned 0x3a [0078.577] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e674) returned 1 [0078.577] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Xjiv7PmC.pdf" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\xjiv7pmc.pdf"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x264 [0078.578] GetFileType (hFile=0x264) returned 0x1 [0078.578] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e670) returned 1 [0078.579] GetFileType (hFile=0x264) returned 0x1 [0078.579] WriteFile (in: hFile=0x264, lpBuffer=0x27fa868*, nNumberOfBytesToWrite=0x12670, lpNumberOfBytesWritten=0x31e730, lpOverlapped=0x0 | out: lpBuffer=0x27fa868*, lpNumberOfBytesWritten=0x31e730*=0x12670, lpOverlapped=0x0) returned 1 [0078.580] CloseHandle (hObject=0x264) returned 1 [0078.580] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Xjiv7PmC.pdf", nBufferLength=0x105, lpBuffer=0x31e2b4, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Xjiv7PmC.pdf", lpFilePart=0x0) returned 0x3a [0078.580] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Xjiv7PmC.pdf", nBufferLength=0x105, lpBuffer=0x31e2b4, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Xjiv7PmC.pdf", lpFilePart=0x0) returned 0x3a [0078.580] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e714) returned 1 [0078.581] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Xjiv7PmC.pdf" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\xjiv7pmc.pdf"), fInfoLevelId=0x0, lpFileInformation=0x31e790 | out: lpFileInformation=0x31e790*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x18610370, ftCreationTime.dwHighDateTime=0x1d5e826, ftLastAccessTime.dwLowDateTime=0xc6658da0, ftLastAccessTime.dwHighDateTime=0x1d5dec7, ftLastWriteTime.dwLowDateTime=0x12489180, ftLastWriteTime.dwHighDateTime=0x1d6eb7f, nFileSizeHigh=0x0, nFileSizeLow=0x12670)) returned 1 [0078.581] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e710) returned 1 [0078.581] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Xjiv7PmC.pdf" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\xjiv7pmc.pdf"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Xjiv7PmC.pdf" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\xjiv7pmc.pdf")) returned 1 [0078.581] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\yis5j.mkv", nBufferLength=0x105, lpBuffer=0x31e194, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\yis5j.mkv", lpFilePart=0x0) returned 0x37 [0078.581] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e688) returned 1 [0078.581] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\yis5j.mkv" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\yis5j.mkv"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x264 [0078.581] GetFileType (hFile=0x264) returned 0x1 [0078.581] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e684) returned 1 [0078.581] GetFileType (hFile=0x264) returned 0x1 [0078.581] GetFileSize (in: hFile=0x264, lpFileSizeHigh=0x31e790 | out: lpFileSizeHigh=0x31e790*=0x0) returned 0xa8d0 [0078.581] ReadFile (in: hFile=0x264, lpBuffer=0x280d204, nNumberOfBytesToRead=0xa8d0, lpNumberOfBytesRead=0x31e73c, lpOverlapped=0x0 | out: lpBuffer=0x280d204*, lpNumberOfBytesRead=0x31e73c*=0xa8d0, lpOverlapped=0x0) returned 1 [0078.582] CloseHandle (hObject=0x264) returned 1 [0078.625] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\yis5j.mkv", nBufferLength=0x105, lpBuffer=0x31e180, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\yis5j.mkv", lpFilePart=0x0) returned 0x37 [0078.625] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e674) returned 1 [0078.625] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\yis5j.mkv" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\yis5j.mkv"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x264 [0078.626] GetFileType (hFile=0x264) returned 0x1 [0078.626] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e670) returned 1 [0078.626] GetFileType (hFile=0x264) returned 0x1 [0078.626] WriteFile (in: hFile=0x264, lpBuffer=0x2684744*, nNumberOfBytesToWrite=0xa8e0, lpNumberOfBytesWritten=0x31e730, lpOverlapped=0x0 | out: lpBuffer=0x2684744*, lpNumberOfBytesWritten=0x31e730*=0xa8e0, lpOverlapped=0x0) returned 1 [0078.631] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\yis5j.mkv", nBufferLength=0x105, lpBuffer=0x31e2b4, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\yis5j.mkv", lpFilePart=0x0) returned 0x37 [0078.631] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\yis5j.mkv", nBufferLength=0x105, lpBuffer=0x31e2b4, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\yis5j.mkv", lpFilePart=0x0) returned 0x37 [0078.631] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e714) returned 1 [0078.631] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\yis5j.mkv" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\yis5j.mkv"), fInfoLevelId=0x0, lpFileInformation=0x31e790 | out: lpFileInformation=0x31e790*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x182a95a0, ftCreationTime.dwHighDateTime=0x1d5e3fe, ftLastAccessTime.dwLowDateTime=0xb0bbe060, ftLastAccessTime.dwHighDateTime=0x1d5e0db, ftLastWriteTime.dwLowDateTime=0x124fb5a0, ftLastWriteTime.dwHighDateTime=0x1d6eb7f, nFileSizeHigh=0x0, nFileSizeLow=0xa8e0)) returned 1 [0078.631] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e710) returned 1 [0078.631] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\yis5j.mkv" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\yis5j.mkv"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\yis5j.mkv" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\yis5j.mkv")) returned 1 [0078.632] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\YZ7eP Q.png", nBufferLength=0x105, lpBuffer=0x31e194, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\YZ7eP Q.png", lpFilePart=0x0) returned 0x39 [0078.632] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e688) returned 1 [0078.632] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\YZ7eP Q.png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\yz7ep q.png"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x264 [0078.632] GetFileType (hFile=0x264) returned 0x1 [0078.632] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e684) returned 1 [0078.632] GetFileType (hFile=0x264) returned 0x1 [0078.632] GetFileSize (in: hFile=0x264, lpFileSizeHigh=0x31e790 | out: lpFileSizeHigh=0x31e790*=0x0) returned 0x123e4 [0078.632] ReadFile (in: hFile=0x264, lpBuffer=0x268f338, nNumberOfBytesToRead=0x123e4, lpNumberOfBytesRead=0x31e73c, lpOverlapped=0x0 | out: lpBuffer=0x268f338*, lpNumberOfBytesRead=0x31e73c*=0x123e4, lpOverlapped=0x0) returned 1 [0078.650] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\YZ7eP Q.png", nBufferLength=0x105, lpBuffer=0x31e180, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\YZ7eP Q.png", lpFilePart=0x0) returned 0x39 [0078.650] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e674) returned 1 [0078.650] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\YZ7eP Q.png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\yz7ep q.png"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x264 [0078.651] GetFileType (hFile=0x264) returned 0x1 [0078.651] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e670) returned 1 [0078.651] GetFileType (hFile=0x264) returned 0x1 [0078.651] WriteFile (in: hFile=0x264, lpBuffer=0x2712e5c*, nNumberOfBytesToWrite=0x123f0, lpNumberOfBytesWritten=0x31e730, lpOverlapped=0x0 | out: lpBuffer=0x2712e5c*, lpNumberOfBytesWritten=0x31e730*=0x123f0, lpOverlapped=0x0) returned 1 [0078.653] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\YZ7eP Q.png", nBufferLength=0x105, lpBuffer=0x31e2b4, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\YZ7eP Q.png", lpFilePart=0x0) returned 0x39 [0078.653] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\YZ7eP Q.png", nBufferLength=0x105, lpBuffer=0x31e2b4, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\YZ7eP Q.png", lpFilePart=0x0) returned 0x39 [0078.653] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e714) returned 1 [0078.653] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\YZ7eP Q.png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\yz7ep q.png"), fInfoLevelId=0x0, lpFileInformation=0x31e790 | out: lpFileInformation=0x31e790*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x14efe220, ftCreationTime.dwHighDateTime=0x1d5d87b, ftLastAccessTime.dwLowDateTime=0x7172870, ftLastAccessTime.dwHighDateTime=0x1d5e127, ftLastWriteTime.dwLowDateTime=0x12521700, ftLastWriteTime.dwHighDateTime=0x1d6eb7f, nFileSizeHigh=0x0, nFileSizeLow=0x123f0)) returned 1 [0078.653] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e710) returned 1 [0078.653] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\YZ7eP Q.png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\yz7ep q.png"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\YZ7eP Q.png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\yz7ep q.png")) returned 1 [0078.654] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e744) returned 1 [0078.654] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Adobe", nBufferLength=0x105, lpBuffer=0x31e24c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Adobe", lpFilePart=0x0) returned 0x33 [0078.654] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Adobe\\", nBufferLength=0x105, lpBuffer=0x31e220, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Adobe\\", lpFilePart=0x0) returned 0x34 [0078.654] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Adobe\\*", lpFindFileData=0x31e46c | out: lpFindFileData=0x31e46c*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xcd708940, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0xcd72eaa0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0xcd72eaa0, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x381c80 [0078.659] FindNextFileW (in: hFindFile=0x381c80, lpFindFileData=0x31e47c | out: lpFindFileData=0x31e47c*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xcd708940, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0xcd72eaa0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0xcd72eaa0, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0078.659] FindNextFileW (in: hFindFile=0x381c80, lpFindFileData=0x31e47c | out: lpFindFileData=0x31e47c*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xcd708940, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0xcd708940, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0xcd708940, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Acrobat", cAlternateFileName="")) returned 1 [0078.659] FindNextFileW (in: hFindFile=0x381c80, lpFindFileData=0x31e47c | out: lpFindFileData=0x31e47c*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xcd72eaa0, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0xcd72eaa0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0xcd72eaa0, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Flash Player", cAlternateFileName="FLASHP~1")) returned 1 [0078.659] FindNextFileW (in: hFindFile=0x381c80, lpFindFileData=0x31e47c | out: lpFindFileData=0x31e47c*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xcd72eaa0, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0xcd72eaa0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0xcd72eaa0, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Headlights", cAlternateFileName="HEADLI~1")) returned 1 [0078.659] FindNextFileW (in: hFindFile=0x381c80, lpFindFileData=0x31e47c | out: lpFindFileData=0x31e47c*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xcd72eaa0, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0xcd72eaa0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0xcd72eaa0, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Linguistics", cAlternateFileName="LINGUI~1")) returned 1 [0078.659] FindNextFileW (in: hFindFile=0x381c80, lpFindFileData=0x31e47c | out: lpFindFileData=0x31e47c*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xcd72eaa0, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0xcd72eaa0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0xcd72eaa0, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="LogTransport2", cAlternateFileName="LOGTRA~1")) returned 1 [0078.660] FindNextFileW (in: hFindFile=0x381c80, lpFindFileData=0x31e47c | out: lpFindFileData=0x31e47c*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xcd72eaa0, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0xcd72eaa0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0xcd72eaa0, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="LogTransport2", cAlternateFileName="LOGTRA~1")) returned 0 [0078.660] FindClose (in: hFindFile=0x381c80 | out: hFindFile=0x381c80) returned 1 [0078.660] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e704) returned 1 [0078.660] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e710) returned 1 [0078.660] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e744) returned 1 [0078.660] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Adobe", nBufferLength=0x105, lpBuffer=0x31e24c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Adobe", lpFilePart=0x0) returned 0x33 [0078.661] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Adobe\\", nBufferLength=0x105, lpBuffer=0x31e220, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Adobe\\", lpFilePart=0x0) returned 0x34 [0078.661] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Adobe\\*", lpFindFileData=0x31e46c | out: lpFindFileData=0x31e46c*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xcd708940, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0xcd72eaa0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0xcd72eaa0, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x381c80 [0078.661] FindNextFileW (in: hFindFile=0x381c80, lpFindFileData=0x31e47c | out: lpFindFileData=0x31e47c*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xcd708940, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0xcd72eaa0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0xcd72eaa0, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0078.662] FindNextFileW (in: hFindFile=0x381c80, lpFindFileData=0x31e47c | out: lpFindFileData=0x31e47c*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xcd708940, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0xcd708940, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0xcd708940, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Acrobat", cAlternateFileName="")) returned 1 [0078.662] FindNextFileW (in: hFindFile=0x381c80, lpFindFileData=0x31e47c | out: lpFindFileData=0x31e47c*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xcd72eaa0, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0xcd72eaa0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0xcd72eaa0, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Flash Player", cAlternateFileName="FLASHP~1")) returned 1 [0078.662] FindNextFileW (in: hFindFile=0x381c80, lpFindFileData=0x31e47c | out: lpFindFileData=0x31e47c*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xcd72eaa0, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0xcd72eaa0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0xcd72eaa0, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Headlights", cAlternateFileName="HEADLI~1")) returned 1 [0078.662] FindNextFileW (in: hFindFile=0x381c80, lpFindFileData=0x31e47c | out: lpFindFileData=0x31e47c*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xcd72eaa0, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0xcd72eaa0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0xcd72eaa0, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Linguistics", cAlternateFileName="LINGUI~1")) returned 1 [0078.662] FindNextFileW (in: hFindFile=0x381c80, lpFindFileData=0x31e47c | out: lpFindFileData=0x31e47c*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xcd72eaa0, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0xcd72eaa0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0xcd72eaa0, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="LogTransport2", cAlternateFileName="LOGTRA~1")) returned 1 [0078.662] FindNextFileW (in: hFindFile=0x381c80, lpFindFileData=0x31e47c | out: lpFindFileData=0x31e47c*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0078.662] FindClose (in: hFindFile=0x381c80 | out: hFindFile=0x381c80) returned 1 [0078.663] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e704) returned 1 [0078.663] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e710) returned 1 [0078.663] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e6cc) returned 1 [0078.663] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Adobe\\Acrobat", nBufferLength=0x105, lpBuffer=0x31e1d4, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Adobe\\Acrobat", lpFilePart=0x0) returned 0x3b [0078.663] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Adobe\\Acrobat\\", nBufferLength=0x105, lpBuffer=0x31e1a8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Adobe\\Acrobat\\", lpFilePart=0x0) returned 0x3c [0078.663] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Adobe\\Acrobat\\*", lpFindFileData=0x31e3f4 | out: lpFindFileData=0x31e3f4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xcd708940, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0xcd708940, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0xcd708940, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x381c80 [0078.664] FindNextFileW (in: hFindFile=0x381c80, lpFindFileData=0x31e404 | out: lpFindFileData=0x31e404*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xcd708940, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0xcd708940, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0xcd708940, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0078.664] FindNextFileW (in: hFindFile=0x381c80, lpFindFileData=0x31e404 | out: lpFindFileData=0x31e404*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xcd708940, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0xec7c9cd0, ftLastAccessTime.dwHighDateTime=0x1d2ddf4, ftLastWriteTime.dwLowDateTime=0xec7c9cd0, ftLastWriteTime.dwHighDateTime=0x1d2ddf4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="10.0", cAlternateFileName="")) returned 1 [0078.664] FindNextFileW (in: hFindFile=0x381c80, lpFindFileData=0x31e404 | out: lpFindFileData=0x31e404*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xcd708940, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0xec7c9cd0, ftLastAccessTime.dwHighDateTime=0x1d2ddf4, ftLastWriteTime.dwLowDateTime=0xec7c9cd0, ftLastWriteTime.dwHighDateTime=0x1d2ddf4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="10.0", cAlternateFileName="")) returned 0 [0078.664] FindClose (in: hFindFile=0x381c80 | out: hFindFile=0x381c80) returned 1 [0078.664] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e68c) returned 1 [0078.664] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e698) returned 1 [0078.664] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e6cc) returned 1 [0078.665] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Adobe\\Acrobat", nBufferLength=0x105, lpBuffer=0x31e1d4, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Adobe\\Acrobat", lpFilePart=0x0) returned 0x3b [0078.665] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Adobe\\Acrobat\\", nBufferLength=0x105, lpBuffer=0x31e1a8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Adobe\\Acrobat\\", lpFilePart=0x0) returned 0x3c [0078.665] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Adobe\\Acrobat\\*", lpFindFileData=0x31e3f4 | out: lpFindFileData=0x31e3f4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xcd708940, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0xcd708940, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0xcd708940, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x381c80 [0078.665] FindNextFileW (in: hFindFile=0x381c80, lpFindFileData=0x31e404 | out: lpFindFileData=0x31e404*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xcd708940, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0xcd708940, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0xcd708940, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0078.665] FindNextFileW (in: hFindFile=0x381c80, lpFindFileData=0x31e404 | out: lpFindFileData=0x31e404*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xcd708940, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0xec7c9cd0, ftLastAccessTime.dwHighDateTime=0x1d2ddf4, ftLastWriteTime.dwLowDateTime=0xec7c9cd0, ftLastWriteTime.dwHighDateTime=0x1d2ddf4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="10.0", cAlternateFileName="")) returned 1 [0078.665] FindNextFileW (in: hFindFile=0x381c80, lpFindFileData=0x31e404 | out: lpFindFileData=0x31e404*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0078.665] FindClose (in: hFindFile=0x381c80 | out: hFindFile=0x381c80) returned 1 [0078.665] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e68c) returned 1 [0078.665] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e698) returned 1 [0078.665] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e654) returned 1 [0078.665] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Adobe\\Acrobat\\10.0", nBufferLength=0x105, lpBuffer=0x31e15c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Adobe\\Acrobat\\10.0", lpFilePart=0x0) returned 0x40 [0078.665] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Adobe\\Acrobat\\10.0\\", nBufferLength=0x105, lpBuffer=0x31e130, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Adobe\\Acrobat\\10.0\\", lpFilePart=0x0) returned 0x41 [0078.665] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Adobe\\Acrobat\\10.0\\*", lpFindFileData=0x31e37c | out: lpFindFileData=0x31e37c*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xcd708940, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0xec7c9cd0, ftLastAccessTime.dwHighDateTime=0x1d2ddf4, ftLastWriteTime.dwLowDateTime=0xec7c9cd0, ftLastWriteTime.dwHighDateTime=0x1d2ddf4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x381c80 [0078.666] FindNextFileW (in: hFindFile=0x381c80, lpFindFileData=0x31e38c | out: lpFindFileData=0x31e38c*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xcd708940, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0xec7c9cd0, ftLastAccessTime.dwHighDateTime=0x1d2ddf4, ftLastWriteTime.dwLowDateTime=0xec7c9cd0, ftLastWriteTime.dwHighDateTime=0x1d2ddf4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0078.666] FindNextFileW (in: hFindFile=0x381c80, lpFindFileData=0x31e38c | out: lpFindFileData=0x31e38c*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xd9f48400, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0xd9f48400, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0xd9f48400, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Collab", cAlternateFileName="")) returned 1 [0078.666] FindNextFileW (in: hFindFile=0x381c80, lpFindFileData=0x31e38c | out: lpFindFileData=0x31e38c*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xd9df17a0, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0xd9df17a0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0xd9df17a0, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Forms", cAlternateFileName="")) returned 1 [0078.666] FindNextFileW (in: hFindFile=0x381c80, lpFindFileData=0x31e38c | out: lpFindFileData=0x31e38c*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xec7c9cd0, ftCreationTime.dwHighDateTime=0x1d2ddf4, ftLastAccessTime.dwLowDateTime=0xec7c9cd0, ftLastAccessTime.dwHighDateTime=0x1d2ddf4, ftLastWriteTime.dwLowDateTime=0xec7c9cd0, ftLastWriteTime.dwHighDateTime=0x1d2ddf4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="JavaScripts", cAlternateFileName="JAVASC~1")) returned 1 [0078.666] FindNextFileW (in: hFindFile=0x381c80, lpFindFileData=0x31e38c | out: lpFindFileData=0x31e38c*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xda28e240, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0xda8cdc00, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0xda8cdc00, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Security", cAlternateFileName="")) returned 1 [0078.666] FindNextFileW (in: hFindFile=0x381c80, lpFindFileData=0x31e38c | out: lpFindFileData=0x31e38c*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xda28e240, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0xda8cdc00, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0xda8cdc00, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Security", cAlternateFileName="")) returned 0 [0078.667] FindClose (in: hFindFile=0x381c80 | out: hFindFile=0x381c80) returned 1 [0078.667] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e614) returned 1 [0078.667] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e620) returned 1 [0078.667] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e654) returned 1 [0078.667] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Adobe\\Acrobat\\10.0", nBufferLength=0x105, lpBuffer=0x31e15c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Adobe\\Acrobat\\10.0", lpFilePart=0x0) returned 0x40 [0078.667] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Adobe\\Acrobat\\10.0\\", nBufferLength=0x105, lpBuffer=0x31e130, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Adobe\\Acrobat\\10.0\\", lpFilePart=0x0) returned 0x41 [0078.667] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Adobe\\Acrobat\\10.0\\*", lpFindFileData=0x31e37c | out: lpFindFileData=0x31e37c*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xcd708940, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0xec7c9cd0, ftLastAccessTime.dwHighDateTime=0x1d2ddf4, ftLastWriteTime.dwLowDateTime=0xec7c9cd0, ftLastWriteTime.dwHighDateTime=0x1d2ddf4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x381c80 [0078.667] FindNextFileW (in: hFindFile=0x381c80, lpFindFileData=0x31e38c | out: lpFindFileData=0x31e38c*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xcd708940, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0xec7c9cd0, ftLastAccessTime.dwHighDateTime=0x1d2ddf4, ftLastWriteTime.dwLowDateTime=0xec7c9cd0, ftLastWriteTime.dwHighDateTime=0x1d2ddf4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0078.667] FindNextFileW (in: hFindFile=0x381c80, lpFindFileData=0x31e38c | out: lpFindFileData=0x31e38c*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xd9f48400, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0xd9f48400, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0xd9f48400, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Collab", cAlternateFileName="")) returned 1 [0078.667] FindNextFileW (in: hFindFile=0x381c80, lpFindFileData=0x31e38c | out: lpFindFileData=0x31e38c*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xd9df17a0, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0xd9df17a0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0xd9df17a0, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Forms", cAlternateFileName="")) returned 1 [0078.667] FindNextFileW (in: hFindFile=0x381c80, lpFindFileData=0x31e38c | out: lpFindFileData=0x31e38c*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xec7c9cd0, ftCreationTime.dwHighDateTime=0x1d2ddf4, ftLastAccessTime.dwLowDateTime=0xec7c9cd0, ftLastAccessTime.dwHighDateTime=0x1d2ddf4, ftLastWriteTime.dwLowDateTime=0xec7c9cd0, ftLastWriteTime.dwHighDateTime=0x1d2ddf4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="JavaScripts", cAlternateFileName="JAVASC~1")) returned 1 [0078.667] FindNextFileW (in: hFindFile=0x381c80, lpFindFileData=0x31e38c | out: lpFindFileData=0x31e38c*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xda28e240, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0xda8cdc00, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0xda8cdc00, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Security", cAlternateFileName="")) returned 1 [0078.668] FindNextFileW (in: hFindFile=0x381c80, lpFindFileData=0x31e38c | out: lpFindFileData=0x31e38c*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0078.668] FindClose (in: hFindFile=0x381c80 | out: hFindFile=0x381c80) returned 1 [0078.668] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e614) returned 1 [0078.668] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e620) returned 1 [0078.668] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e5dc) returned 1 [0078.668] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Adobe\\Acrobat\\10.0\\Collab", nBufferLength=0x105, lpBuffer=0x31e0e4, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Adobe\\Acrobat\\10.0\\Collab", lpFilePart=0x0) returned 0x47 [0078.668] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Adobe\\Acrobat\\10.0\\Collab\\", nBufferLength=0x105, lpBuffer=0x31e0b8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Adobe\\Acrobat\\10.0\\Collab\\", lpFilePart=0x0) returned 0x48 [0078.668] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Adobe\\Acrobat\\10.0\\Collab\\*", lpFindFileData=0x31e304 | out: lpFindFileData=0x31e304*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xd9f48400, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0xd9f48400, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0xd9f48400, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x381c80 [0078.668] FindNextFileW (in: hFindFile=0x381c80, lpFindFileData=0x31e314 | out: lpFindFileData=0x31e314*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xd9f48400, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0xd9f48400, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0xd9f48400, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0078.668] FindNextFileW (in: hFindFile=0x381c80, lpFindFileData=0x31e314 | out: lpFindFileData=0x31e314*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xd9f48400, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0xd9f48400, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0xd9f48400, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 0 [0078.668] FindClose (in: hFindFile=0x381c80 | out: hFindFile=0x381c80) returned 1 [0078.668] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e59c) returned 1 [0078.668] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e5a8) returned 1 [0078.669] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e5dc) returned 1 [0078.669] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Adobe\\Acrobat\\10.0\\Collab", nBufferLength=0x105, lpBuffer=0x31e0e4, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Adobe\\Acrobat\\10.0\\Collab", lpFilePart=0x0) returned 0x47 [0078.669] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Adobe\\Acrobat\\10.0\\Collab\\", nBufferLength=0x105, lpBuffer=0x31e0b8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Adobe\\Acrobat\\10.0\\Collab\\", lpFilePart=0x0) returned 0x48 [0078.669] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Adobe\\Acrobat\\10.0\\Collab\\*", lpFindFileData=0x31e304 | out: lpFindFileData=0x31e304*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xd9f48400, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0xd9f48400, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0xd9f48400, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x381c80 [0078.669] FindNextFileW (in: hFindFile=0x381c80, lpFindFileData=0x31e314 | out: lpFindFileData=0x31e314*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xd9f48400, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0xd9f48400, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0xd9f48400, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0078.669] FindNextFileW (in: hFindFile=0x381c80, lpFindFileData=0x31e314 | out: lpFindFileData=0x31e314*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xd9f48400, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0xd9f48400, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0xd9f48400, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 0 [0078.669] FindClose (in: hFindFile=0x381c80 | out: hFindFile=0x381c80) returned 1 [0078.669] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e59c) returned 1 [0078.669] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e5a8) returned 1 [0078.669] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e5dc) returned 1 [0078.669] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Adobe\\Acrobat\\10.0\\Forms", nBufferLength=0x105, lpBuffer=0x31e0e4, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Adobe\\Acrobat\\10.0\\Forms", lpFilePart=0x0) returned 0x46 [0078.669] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Adobe\\Acrobat\\10.0\\Forms\\", nBufferLength=0x105, lpBuffer=0x31e0b8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Adobe\\Acrobat\\10.0\\Forms\\", lpFilePart=0x0) returned 0x47 [0078.669] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Adobe\\Acrobat\\10.0\\Forms\\*", lpFindFileData=0x31e304 | out: lpFindFileData=0x31e304*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xd9df17a0, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0xd9df17a0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0xd9df17a0, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x381c80 [0078.670] FindNextFileW (in: hFindFile=0x381c80, lpFindFileData=0x31e314 | out: lpFindFileData=0x31e314*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xd9df17a0, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0xd9df17a0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0xd9df17a0, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0078.670] FindNextFileW (in: hFindFile=0x381c80, lpFindFileData=0x31e314 | out: lpFindFileData=0x31e314*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xd9df17a0, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0xd9df17a0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0xd9df17a0, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 0 [0078.670] FindClose (in: hFindFile=0x381c80 | out: hFindFile=0x381c80) returned 1 [0078.670] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e59c) returned 1 [0078.670] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e5a8) returned 1 [0078.670] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e5dc) returned 1 [0078.670] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Adobe\\Acrobat\\10.0\\Forms", nBufferLength=0x105, lpBuffer=0x31e0e4, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Adobe\\Acrobat\\10.0\\Forms", lpFilePart=0x0) returned 0x46 [0078.670] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Adobe\\Acrobat\\10.0\\Forms\\", nBufferLength=0x105, lpBuffer=0x31e0b8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Adobe\\Acrobat\\10.0\\Forms\\", lpFilePart=0x0) returned 0x47 [0078.670] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Adobe\\Acrobat\\10.0\\Forms\\*", lpFindFileData=0x31e304 | out: lpFindFileData=0x31e304*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xd9df17a0, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0xd9df17a0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0xd9df17a0, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x381c80 [0078.670] FindNextFileW (in: hFindFile=0x381c80, lpFindFileData=0x31e314 | out: lpFindFileData=0x31e314*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xd9df17a0, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0xd9df17a0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0xd9df17a0, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0078.670] FindNextFileW (in: hFindFile=0x381c80, lpFindFileData=0x31e314 | out: lpFindFileData=0x31e314*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xd9df17a0, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0xd9df17a0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0xd9df17a0, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 0 [0078.671] FindClose (in: hFindFile=0x381c80 | out: hFindFile=0x381c80) returned 1 [0078.671] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e59c) returned 1 [0078.671] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e5a8) returned 1 [0078.671] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e5dc) returned 1 [0078.671] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Adobe\\Acrobat\\10.0\\JavaScripts", nBufferLength=0x105, lpBuffer=0x31e0e4, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Adobe\\Acrobat\\10.0\\JavaScripts", lpFilePart=0x0) returned 0x4c [0078.671] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Adobe\\Acrobat\\10.0\\JavaScripts\\", nBufferLength=0x105, lpBuffer=0x31e0b8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Adobe\\Acrobat\\10.0\\JavaScripts\\", lpFilePart=0x0) returned 0x4d [0078.671] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Adobe\\Acrobat\\10.0\\JavaScripts\\*", lpFindFileData=0x31e304 | out: lpFindFileData=0x31e304*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xec7c9cd0, ftCreationTime.dwHighDateTime=0x1d2ddf4, ftLastAccessTime.dwLowDateTime=0xec7c9cd0, ftLastAccessTime.dwHighDateTime=0x1d2ddf4, ftLastWriteTime.dwLowDateTime=0xec7c9cd0, ftLastWriteTime.dwHighDateTime=0x1d2ddf4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x381c80 [0078.671] FindNextFileW (in: hFindFile=0x381c80, lpFindFileData=0x31e314 | out: lpFindFileData=0x31e314*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xec7c9cd0, ftCreationTime.dwHighDateTime=0x1d2ddf4, ftLastAccessTime.dwLowDateTime=0xec7c9cd0, ftLastAccessTime.dwHighDateTime=0x1d2ddf4, ftLastWriteTime.dwLowDateTime=0xec7c9cd0, ftLastWriteTime.dwHighDateTime=0x1d2ddf4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0078.671] FindNextFileW (in: hFindFile=0x381c80, lpFindFileData=0x31e314 | out: lpFindFileData=0x31e314*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xec7c9cd0, ftCreationTime.dwHighDateTime=0x1d2ddf4, ftLastAccessTime.dwLowDateTime=0xec7c9cd0, ftLastAccessTime.dwHighDateTime=0x1d2ddf4, ftLastWriteTime.dwLowDateTime=0xedc00b50, ftLastWriteTime.dwHighDateTime=0x1d35d05, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="glob.js", cAlternateFileName="")) returned 1 [0078.671] FindNextFileW (in: hFindFile=0x381c80, lpFindFileData=0x31e314 | out: lpFindFileData=0x31e314*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xec7c9cd0, ftCreationTime.dwHighDateTime=0x1d2ddf4, ftLastAccessTime.dwLowDateTime=0xec7c9cd0, ftLastAccessTime.dwHighDateTime=0x1d2ddf4, ftLastWriteTime.dwLowDateTime=0xedc00b50, ftLastWriteTime.dwHighDateTime=0x1d35d05, nFileSizeHigh=0x0, nFileSizeLow=0xa, dwReserved0=0x0, dwReserved1=0x0, cFileName="glob.settings.js", cAlternateFileName="GLOBSE~1.JS")) returned 1 [0078.672] FindNextFileW (in: hFindFile=0x381c80, lpFindFileData=0x31e314 | out: lpFindFileData=0x31e314*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0078.672] FindClose (in: hFindFile=0x381c80 | out: hFindFile=0x381c80) returned 1 [0078.672] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e59c) returned 1 [0078.672] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e5a8) returned 1 [0078.672] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e5dc) returned 1 [0078.672] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Adobe\\Acrobat\\10.0\\JavaScripts", nBufferLength=0x105, lpBuffer=0x31e0e4, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Adobe\\Acrobat\\10.0\\JavaScripts", lpFilePart=0x0) returned 0x4c [0078.672] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Adobe\\Acrobat\\10.0\\JavaScripts\\", nBufferLength=0x105, lpBuffer=0x31e0b8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Adobe\\Acrobat\\10.0\\JavaScripts\\", lpFilePart=0x0) returned 0x4d [0078.672] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Adobe\\Acrobat\\10.0\\JavaScripts\\*", lpFindFileData=0x31e304 | out: lpFindFileData=0x31e304*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xec7c9cd0, ftCreationTime.dwHighDateTime=0x1d2ddf4, ftLastAccessTime.dwLowDateTime=0xec7c9cd0, ftLastAccessTime.dwHighDateTime=0x1d2ddf4, ftLastWriteTime.dwLowDateTime=0xec7c9cd0, ftLastWriteTime.dwHighDateTime=0x1d2ddf4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x381c80 [0078.672] FindNextFileW (in: hFindFile=0x381c80, lpFindFileData=0x31e314 | out: lpFindFileData=0x31e314*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xec7c9cd0, ftCreationTime.dwHighDateTime=0x1d2ddf4, ftLastAccessTime.dwLowDateTime=0xec7c9cd0, ftLastAccessTime.dwHighDateTime=0x1d2ddf4, ftLastWriteTime.dwLowDateTime=0xec7c9cd0, ftLastWriteTime.dwHighDateTime=0x1d2ddf4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0078.672] FindNextFileW (in: hFindFile=0x381c80, lpFindFileData=0x31e314 | out: lpFindFileData=0x31e314*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xec7c9cd0, ftCreationTime.dwHighDateTime=0x1d2ddf4, ftLastAccessTime.dwLowDateTime=0xec7c9cd0, ftLastAccessTime.dwHighDateTime=0x1d2ddf4, ftLastWriteTime.dwLowDateTime=0xedc00b50, ftLastWriteTime.dwHighDateTime=0x1d35d05, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="glob.js", cAlternateFileName="")) returned 1 [0078.672] FindNextFileW (in: hFindFile=0x381c80, lpFindFileData=0x31e314 | out: lpFindFileData=0x31e314*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xec7c9cd0, ftCreationTime.dwHighDateTime=0x1d2ddf4, ftLastAccessTime.dwLowDateTime=0xec7c9cd0, ftLastAccessTime.dwHighDateTime=0x1d2ddf4, ftLastWriteTime.dwLowDateTime=0xedc00b50, ftLastWriteTime.dwHighDateTime=0x1d35d05, nFileSizeHigh=0x0, nFileSizeLow=0xa, dwReserved0=0x0, dwReserved1=0x0, cFileName="glob.settings.js", cAlternateFileName="GLOBSE~1.JS")) returned 1 [0078.672] FindNextFileW (in: hFindFile=0x381c80, lpFindFileData=0x31e314 | out: lpFindFileData=0x31e314*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xec7c9cd0, ftCreationTime.dwHighDateTime=0x1d2ddf4, ftLastAccessTime.dwLowDateTime=0xec7c9cd0, ftLastAccessTime.dwHighDateTime=0x1d2ddf4, ftLastWriteTime.dwLowDateTime=0xedc00b50, ftLastWriteTime.dwHighDateTime=0x1d35d05, nFileSizeHigh=0x0, nFileSizeLow=0xa, dwReserved0=0x0, dwReserved1=0x0, cFileName="glob.settings.js", cAlternateFileName="GLOBSE~1.JS")) returned 0 [0078.673] FindClose (in: hFindFile=0x381c80 | out: hFindFile=0x381c80) returned 1 [0078.673] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e59c) returned 1 [0078.673] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e5a8) returned 1 [0078.673] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e5dc) returned 1 [0078.673] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Adobe\\Acrobat\\10.0\\Security", nBufferLength=0x105, lpBuffer=0x31e0e4, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Adobe\\Acrobat\\10.0\\Security", lpFilePart=0x0) returned 0x49 [0078.673] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Adobe\\Acrobat\\10.0\\Security\\", nBufferLength=0x105, lpBuffer=0x31e0b8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Adobe\\Acrobat\\10.0\\Security\\", lpFilePart=0x0) returned 0x4a [0078.673] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Adobe\\Acrobat\\10.0\\Security\\*", lpFindFileData=0x31e304 | out: lpFindFileData=0x31e304*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xda28e240, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0xda8cdc00, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0xda8cdc00, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x381c80 [0078.673] FindNextFileW (in: hFindFile=0x381c80, lpFindFileData=0x31e314 | out: lpFindFileData=0x31e314*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xda28e240, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0xda8cdc00, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0xda8cdc00, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0078.673] FindNextFileW (in: hFindFile=0x381c80, lpFindFileData=0x31e314 | out: lpFindFileData=0x31e314*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xda8cdc00, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0xda8cdc00, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0xda8f3d60, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x1517, dwReserved0=0x0, dwReserved1=0x0, cFileName="addressbook.acrodata", cAlternateFileName="ADDRES~1.ACR")) returned 1 [0078.673] FindNextFileW (in: hFindFile=0x381c80, lpFindFileData=0x31e314 | out: lpFindFileData=0x31e314*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xda2b43a0, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0xda5adf20, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0xda5adf20, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="CRLCache", cAlternateFileName="")) returned 1 [0078.673] FindNextFileW (in: hFindFile=0x381c80, lpFindFileData=0x31e314 | out: lpFindFileData=0x31e314*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xda2b43a0, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0xda5adf20, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0xda5adf20, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="CRLCache", cAlternateFileName="")) returned 0 [0078.674] FindClose (in: hFindFile=0x381c80 | out: hFindFile=0x381c80) returned 1 [0078.674] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e59c) returned 1 [0078.674] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e5a8) returned 1 [0078.674] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e5dc) returned 1 [0078.674] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Adobe\\Acrobat\\10.0\\Security", nBufferLength=0x105, lpBuffer=0x31e0e4, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Adobe\\Acrobat\\10.0\\Security", lpFilePart=0x0) returned 0x49 [0078.674] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Adobe\\Acrobat\\10.0\\Security\\", nBufferLength=0x105, lpBuffer=0x31e0b8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Adobe\\Acrobat\\10.0\\Security\\", lpFilePart=0x0) returned 0x4a [0078.674] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Adobe\\Acrobat\\10.0\\Security\\*", lpFindFileData=0x31e304 | out: lpFindFileData=0x31e304*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xda28e240, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0xda8cdc00, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0xda8cdc00, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x381c80 [0078.674] FindNextFileW (in: hFindFile=0x381c80, lpFindFileData=0x31e314 | out: lpFindFileData=0x31e314*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xda28e240, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0xda8cdc00, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0xda8cdc00, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0078.674] FindNextFileW (in: hFindFile=0x381c80, lpFindFileData=0x31e314 | out: lpFindFileData=0x31e314*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xda8cdc00, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0xda8cdc00, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0xda8f3d60, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x1517, dwReserved0=0x0, dwReserved1=0x0, cFileName="addressbook.acrodata", cAlternateFileName="ADDRES~1.ACR")) returned 1 [0078.674] FindNextFileW (in: hFindFile=0x381c80, lpFindFileData=0x31e314 | out: lpFindFileData=0x31e314*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xda2b43a0, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0xda5adf20, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0xda5adf20, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="CRLCache", cAlternateFileName="")) returned 1 [0078.674] FindNextFileW (in: hFindFile=0x381c80, lpFindFileData=0x31e314 | out: lpFindFileData=0x31e314*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0078.675] FindClose (in: hFindFile=0x381c80 | out: hFindFile=0x381c80) returned 1 [0078.675] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e59c) returned 1 [0078.675] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e5a8) returned 1 [0078.675] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e564) returned 1 [0078.675] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Adobe\\Acrobat\\10.0\\Security\\CRLCache", nBufferLength=0x105, lpBuffer=0x31e06c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Adobe\\Acrobat\\10.0\\Security\\CRLCache", lpFilePart=0x0) returned 0x52 [0078.675] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Adobe\\Acrobat\\10.0\\Security\\CRLCache\\", nBufferLength=0x105, lpBuffer=0x31e040, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Adobe\\Acrobat\\10.0\\Security\\CRLCache\\", lpFilePart=0x0) returned 0x53 [0078.675] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Adobe\\Acrobat\\10.0\\Security\\CRLCache\\*", lpFindFileData=0x31e28c | out: lpFindFileData=0x31e28c*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xda2b43a0, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0xda5adf20, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0xda5adf20, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x381c80 [0078.676] FindNextFileW (in: hFindFile=0x381c80, lpFindFileData=0x31e29c | out: lpFindFileData=0x31e29c*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xda2b43a0, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0xda5adf20, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0xda5adf20, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0078.676] FindNextFileW (in: hFindFile=0x381c80, lpFindFileData=0x31e29c | out: lpFindFileData=0x31e29c*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xda5adf20, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0xda5adf20, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0xdefc97c0, ftLastWriteTime.dwHighDateTime=0x1d2e625, nFileSizeHigh=0x0, nFileSizeLow=0x3a5, dwReserved0=0x0, dwReserved1=0x0, cFileName="48B76449F3D5FEFA1133AA805E420F0FCA643651.crl", cAlternateFileName="48B764~1.CRL")) returned 1 [0078.676] FindNextFileW (in: hFindFile=0x381c80, lpFindFileData=0x31e29c | out: lpFindFileData=0x31e29c*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xda3e4ea0, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0xda3e4ea0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0xdefa3660, ftLastWriteTime.dwHighDateTime=0x1d2e625, nFileSizeHigh=0x0, nFileSizeLow=0x9347, dwReserved0=0x0, dwReserved1=0x0, cFileName="A9B8213768ADC68AF64FCC6409E8BE414726687F.crl", cAlternateFileName="A9B821~1.CRL")) returned 1 [0078.676] FindNextFileW (in: hFindFile=0x381c80, lpFindFileData=0x31e29c | out: lpFindFileData=0x31e29c*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0078.676] FindClose (in: hFindFile=0x381c80 | out: hFindFile=0x381c80) returned 1 [0078.677] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e524) returned 1 [0078.677] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e530) returned 1 [0078.677] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e564) returned 1 [0078.677] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Adobe\\Acrobat\\10.0\\Security\\CRLCache", nBufferLength=0x105, lpBuffer=0x31e06c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Adobe\\Acrobat\\10.0\\Security\\CRLCache", lpFilePart=0x0) returned 0x52 [0078.677] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Adobe\\Acrobat\\10.0\\Security\\CRLCache\\", nBufferLength=0x105, lpBuffer=0x31e040, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Adobe\\Acrobat\\10.0\\Security\\CRLCache\\", lpFilePart=0x0) returned 0x53 [0078.677] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Adobe\\Acrobat\\10.0\\Security\\CRLCache\\*", lpFindFileData=0x31e28c | out: lpFindFileData=0x31e28c*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xda2b43a0, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0xda5adf20, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0xda5adf20, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x381c80 [0078.677] FindNextFileW (in: hFindFile=0x381c80, lpFindFileData=0x31e29c | out: lpFindFileData=0x31e29c*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xda2b43a0, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0xda5adf20, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0xda5adf20, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0078.677] FindNextFileW (in: hFindFile=0x381c80, lpFindFileData=0x31e29c | out: lpFindFileData=0x31e29c*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xda5adf20, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0xda5adf20, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0xdefc97c0, ftLastWriteTime.dwHighDateTime=0x1d2e625, nFileSizeHigh=0x0, nFileSizeLow=0x3a5, dwReserved0=0x0, dwReserved1=0x0, cFileName="48B76449F3D5FEFA1133AA805E420F0FCA643651.crl", cAlternateFileName="48B764~1.CRL")) returned 1 [0078.677] FindNextFileW (in: hFindFile=0x381c80, lpFindFileData=0x31e29c | out: lpFindFileData=0x31e29c*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xda3e4ea0, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0xda3e4ea0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0xdefa3660, ftLastWriteTime.dwHighDateTime=0x1d2e625, nFileSizeHigh=0x0, nFileSizeLow=0x9347, dwReserved0=0x0, dwReserved1=0x0, cFileName="A9B8213768ADC68AF64FCC6409E8BE414726687F.crl", cAlternateFileName="A9B821~1.CRL")) returned 1 [0078.677] FindNextFileW (in: hFindFile=0x381c80, lpFindFileData=0x31e29c | out: lpFindFileData=0x31e29c*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xda3e4ea0, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0xda3e4ea0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0xdefa3660, ftLastWriteTime.dwHighDateTime=0x1d2e625, nFileSizeHigh=0x0, nFileSizeLow=0x9347, dwReserved0=0x0, dwReserved1=0x0, cFileName="A9B8213768ADC68AF64FCC6409E8BE414726687F.crl", cAlternateFileName="A9B821~1.CRL")) returned 0 [0078.677] FindClose (in: hFindFile=0x381c80 | out: hFindFile=0x381c80) returned 1 [0078.678] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e524) returned 1 [0078.678] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e530) returned 1 [0078.678] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e6cc) returned 1 [0078.678] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Adobe\\Flash Player", nBufferLength=0x105, lpBuffer=0x31e1d4, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Adobe\\Flash Player", lpFilePart=0x0) returned 0x40 [0078.678] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Adobe\\Flash Player\\", nBufferLength=0x105, lpBuffer=0x31e1a8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Adobe\\Flash Player\\", lpFilePart=0x0) returned 0x41 [0078.678] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Adobe\\Flash Player\\*", lpFindFileData=0x31e3f4 | out: lpFindFileData=0x31e3f4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xcd72eaa0, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0xcd72eaa0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0xcd72eaa0, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x381c80 [0078.679] FindNextFileW (in: hFindFile=0x381c80, lpFindFileData=0x31e404 | out: lpFindFileData=0x31e404*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xcd72eaa0, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0xcd72eaa0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0xcd72eaa0, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0078.679] FindNextFileW (in: hFindFile=0x381c80, lpFindFileData=0x31e404 | out: lpFindFileData=0x31e404*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xcd72eaa0, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x1d40bff0, ftLastAccessTime.dwHighDateTime=0x1d35d06, ftLastWriteTime.dwLowDateTime=0x1d40bff0, ftLastWriteTime.dwHighDateTime=0x1d35d06, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="AssetCache", cAlternateFileName="ASSETC~1")) returned 1 [0078.679] FindNextFileW (in: hFindFile=0x381c80, lpFindFileData=0x31e404 | out: lpFindFileData=0x31e404*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xcd72eaa0, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x1d40bff0, ftLastAccessTime.dwHighDateTime=0x1d35d06, ftLastWriteTime.dwLowDateTime=0x1d40bff0, ftLastWriteTime.dwHighDateTime=0x1d35d06, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="AssetCache", cAlternateFileName="ASSETC~1")) returned 0 [0078.679] FindClose (in: hFindFile=0x381c80 | out: hFindFile=0x381c80) returned 1 [0078.679] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e68c) returned 1 [0078.679] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e698) returned 1 [0078.679] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e6cc) returned 1 [0078.679] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Adobe\\Flash Player", nBufferLength=0x105, lpBuffer=0x31e1d4, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Adobe\\Flash Player", lpFilePart=0x0) returned 0x40 [0078.679] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Adobe\\Flash Player\\", nBufferLength=0x105, lpBuffer=0x31e1a8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Adobe\\Flash Player\\", lpFilePart=0x0) returned 0x41 [0078.679] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Adobe\\Flash Player\\*", lpFindFileData=0x31e3f4 | out: lpFindFileData=0x31e3f4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xcd72eaa0, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0xcd72eaa0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0xcd72eaa0, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x381c80 [0078.680] FindNextFileW (in: hFindFile=0x381c80, lpFindFileData=0x31e404 | out: lpFindFileData=0x31e404*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xcd72eaa0, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0xcd72eaa0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0xcd72eaa0, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0078.680] FindNextFileW (in: hFindFile=0x381c80, lpFindFileData=0x31e404 | out: lpFindFileData=0x31e404*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xcd72eaa0, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x1d40bff0, ftLastAccessTime.dwHighDateTime=0x1d35d06, ftLastWriteTime.dwLowDateTime=0x1d40bff0, ftLastWriteTime.dwHighDateTime=0x1d35d06, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="AssetCache", cAlternateFileName="ASSETC~1")) returned 1 [0078.680] FindNextFileW (in: hFindFile=0x381c80, lpFindFileData=0x31e404 | out: lpFindFileData=0x31e404*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0078.680] FindClose (in: hFindFile=0x381c80 | out: hFindFile=0x381c80) returned 1 [0078.680] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e68c) returned 1 [0078.680] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e698) returned 1 [0078.680] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e654) returned 1 [0078.680] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Adobe\\Flash Player\\AssetCache", nBufferLength=0x105, lpBuffer=0x31e15c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Adobe\\Flash Player\\AssetCache", lpFilePart=0x0) returned 0x4b [0078.680] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Adobe\\Flash Player\\AssetCache\\", nBufferLength=0x105, lpBuffer=0x31e130, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Adobe\\Flash Player\\AssetCache\\", lpFilePart=0x0) returned 0x4c [0078.680] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Adobe\\Flash Player\\AssetCache\\*", lpFindFileData=0x31e37c | out: lpFindFileData=0x31e37c*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xcd72eaa0, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x1d40bff0, ftLastAccessTime.dwHighDateTime=0x1d35d06, ftLastWriteTime.dwLowDateTime=0x1d40bff0, ftLastWriteTime.dwHighDateTime=0x1d35d06, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x381c80 [0078.680] FindNextFileW (in: hFindFile=0x381c80, lpFindFileData=0x31e38c | out: lpFindFileData=0x31e38c*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xcd72eaa0, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x1d40bff0, ftLastAccessTime.dwHighDateTime=0x1d35d06, ftLastWriteTime.dwLowDateTime=0x1d40bff0, ftLastWriteTime.dwHighDateTime=0x1d35d06, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0078.681] FindNextFileW (in: hFindFile=0x381c80, lpFindFileData=0x31e38c | out: lpFindFileData=0x31e38c*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x1d40bff0, ftCreationTime.dwHighDateTime=0x1d35d06, ftLastAccessTime.dwLowDateTime=0x1d40bff0, ftLastAccessTime.dwHighDateTime=0x1d35d06, ftLastWriteTime.dwLowDateTime=0x1d40bff0, ftLastWriteTime.dwHighDateTime=0x1d35d06, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="D5NTRC6R", cAlternateFileName="")) returned 1 [0078.681] FindNextFileW (in: hFindFile=0x381c80, lpFindFileData=0x31e38c | out: lpFindFileData=0x31e38c*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x1d40bff0, ftCreationTime.dwHighDateTime=0x1d35d06, ftLastAccessTime.dwLowDateTime=0x1d40bff0, ftLastAccessTime.dwHighDateTime=0x1d35d06, ftLastWriteTime.dwLowDateTime=0x1d40bff0, ftLastWriteTime.dwHighDateTime=0x1d35d06, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="D5NTRC6R", cAlternateFileName="")) returned 0 [0078.681] FindClose (in: hFindFile=0x381c80 | out: hFindFile=0x381c80) returned 1 [0078.681] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e614) returned 1 [0078.681] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e620) returned 1 [0078.681] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e654) returned 1 [0078.681] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Adobe\\Flash Player\\AssetCache", nBufferLength=0x105, lpBuffer=0x31e15c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Adobe\\Flash Player\\AssetCache", lpFilePart=0x0) returned 0x4b [0078.681] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Adobe\\Flash Player\\AssetCache\\", nBufferLength=0x105, lpBuffer=0x31e130, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Adobe\\Flash Player\\AssetCache\\", lpFilePart=0x0) returned 0x4c [0078.681] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Adobe\\Flash Player\\AssetCache\\*", lpFindFileData=0x31e37c | out: lpFindFileData=0x31e37c*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xcd72eaa0, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x1d40bff0, ftLastAccessTime.dwHighDateTime=0x1d35d06, ftLastWriteTime.dwLowDateTime=0x1d40bff0, ftLastWriteTime.dwHighDateTime=0x1d35d06, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x381c80 [0078.681] FindNextFileW (in: hFindFile=0x381c80, lpFindFileData=0x31e38c | out: lpFindFileData=0x31e38c*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xcd72eaa0, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x1d40bff0, ftLastAccessTime.dwHighDateTime=0x1d35d06, ftLastWriteTime.dwLowDateTime=0x1d40bff0, ftLastWriteTime.dwHighDateTime=0x1d35d06, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0078.681] FindNextFileW (in: hFindFile=0x381c80, lpFindFileData=0x31e38c | out: lpFindFileData=0x31e38c*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x1d40bff0, ftCreationTime.dwHighDateTime=0x1d35d06, ftLastAccessTime.dwLowDateTime=0x1d40bff0, ftLastAccessTime.dwHighDateTime=0x1d35d06, ftLastWriteTime.dwLowDateTime=0x1d40bff0, ftLastWriteTime.dwHighDateTime=0x1d35d06, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="D5NTRC6R", cAlternateFileName="")) returned 1 [0078.681] FindNextFileW (in: hFindFile=0x381c80, lpFindFileData=0x31e38c | out: lpFindFileData=0x31e38c*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0078.682] FindClose (in: hFindFile=0x381c80 | out: hFindFile=0x381c80) returned 1 [0078.682] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e614) returned 1 [0078.682] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e620) returned 1 [0078.682] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e5dc) returned 1 [0078.682] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Adobe\\Flash Player\\AssetCache\\D5NTRC6R", nBufferLength=0x105, lpBuffer=0x31e0e4, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Adobe\\Flash Player\\AssetCache\\D5NTRC6R", lpFilePart=0x0) returned 0x54 [0078.682] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Adobe\\Flash Player\\AssetCache\\D5NTRC6R\\", nBufferLength=0x105, lpBuffer=0x31e0b8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Adobe\\Flash Player\\AssetCache\\D5NTRC6R\\", lpFilePart=0x0) returned 0x55 [0078.682] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Adobe\\Flash Player\\AssetCache\\D5NTRC6R\\*", lpFindFileData=0x31e304 | out: lpFindFileData=0x31e304*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x1d40bff0, ftCreationTime.dwHighDateTime=0x1d35d06, ftLastAccessTime.dwLowDateTime=0x1d40bff0, ftLastAccessTime.dwHighDateTime=0x1d35d06, ftLastWriteTime.dwLowDateTime=0x1d40bff0, ftLastWriteTime.dwHighDateTime=0x1d35d06, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x381c80 [0078.683] FindNextFileW (in: hFindFile=0x381c80, lpFindFileData=0x31e314 | out: lpFindFileData=0x31e314*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x1d40bff0, ftCreationTime.dwHighDateTime=0x1d35d06, ftLastAccessTime.dwLowDateTime=0x1d40bff0, ftLastAccessTime.dwHighDateTime=0x1d35d06, ftLastWriteTime.dwLowDateTime=0x1d40bff0, ftLastWriteTime.dwHighDateTime=0x1d35d06, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0078.683] FindNextFileW (in: hFindFile=0x381c80, lpFindFileData=0x31e314 | out: lpFindFileData=0x31e314*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x1d40bff0, ftCreationTime.dwHighDateTime=0x1d35d06, ftLastAccessTime.dwLowDateTime=0x1d40bff0, ftLastAccessTime.dwHighDateTime=0x1d35d06, ftLastWriteTime.dwLowDateTime=0x1d40bff0, ftLastWriteTime.dwHighDateTime=0x1d35d06, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 0 [0078.683] FindClose (in: hFindFile=0x381c80 | out: hFindFile=0x381c80) returned 1 [0078.683] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e59c) returned 1 [0078.683] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e5a8) returned 1 [0078.683] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e5dc) returned 1 [0078.683] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Adobe\\Flash Player\\AssetCache\\D5NTRC6R", nBufferLength=0x105, lpBuffer=0x31e0e4, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Adobe\\Flash Player\\AssetCache\\D5NTRC6R", lpFilePart=0x0) returned 0x54 [0078.683] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Adobe\\Flash Player\\AssetCache\\D5NTRC6R\\", nBufferLength=0x105, lpBuffer=0x31e0b8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Adobe\\Flash Player\\AssetCache\\D5NTRC6R\\", lpFilePart=0x0) returned 0x55 [0078.683] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Adobe\\Flash Player\\AssetCache\\D5NTRC6R\\*", lpFindFileData=0x31e304 | out: lpFindFileData=0x31e304*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x1d40bff0, ftCreationTime.dwHighDateTime=0x1d35d06, ftLastAccessTime.dwLowDateTime=0x1d40bff0, ftLastAccessTime.dwHighDateTime=0x1d35d06, ftLastWriteTime.dwLowDateTime=0x1d40bff0, ftLastWriteTime.dwHighDateTime=0x1d35d06, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x381c80 [0078.683] FindNextFileW (in: hFindFile=0x381c80, lpFindFileData=0x31e314 | out: lpFindFileData=0x31e314*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x1d40bff0, ftCreationTime.dwHighDateTime=0x1d35d06, ftLastAccessTime.dwLowDateTime=0x1d40bff0, ftLastAccessTime.dwHighDateTime=0x1d35d06, ftLastWriteTime.dwLowDateTime=0x1d40bff0, ftLastWriteTime.dwHighDateTime=0x1d35d06, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0078.684] FindNextFileW (in: hFindFile=0x381c80, lpFindFileData=0x31e314 | out: lpFindFileData=0x31e314*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x1d40bff0, ftCreationTime.dwHighDateTime=0x1d35d06, ftLastAccessTime.dwLowDateTime=0x1d40bff0, ftLastAccessTime.dwHighDateTime=0x1d35d06, ftLastWriteTime.dwLowDateTime=0x1d40bff0, ftLastWriteTime.dwHighDateTime=0x1d35d06, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 0 [0078.684] FindClose (in: hFindFile=0x381c80 | out: hFindFile=0x381c80) returned 1 [0078.684] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e59c) returned 1 [0078.684] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e5a8) returned 1 [0078.684] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e6cc) returned 1 [0078.684] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Adobe\\Headlights", nBufferLength=0x105, lpBuffer=0x31e1d4, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Adobe\\Headlights", lpFilePart=0x0) returned 0x3e [0078.684] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Adobe\\Headlights\\", nBufferLength=0x105, lpBuffer=0x31e1a8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Adobe\\Headlights\\", lpFilePart=0x0) returned 0x3f [0078.684] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Adobe\\Headlights\\*", lpFindFileData=0x31e3f4 | out: lpFindFileData=0x31e3f4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xcd72eaa0, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0xcd72eaa0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0xcd72eaa0, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x381c80 [0078.684] FindNextFileW (in: hFindFile=0x381c80, lpFindFileData=0x31e404 | out: lpFindFileData=0x31e404*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xcd72eaa0, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0xcd72eaa0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0xcd72eaa0, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0078.684] FindNextFileW (in: hFindFile=0x381c80, lpFindFileData=0x31e404 | out: lpFindFileData=0x31e404*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xcd72eaa0, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0xcd72eaa0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0xcd72eaa0, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 0 [0078.684] FindClose (in: hFindFile=0x381c80 | out: hFindFile=0x381c80) returned 1 [0078.684] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e68c) returned 1 [0078.685] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e698) returned 1 [0078.685] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e6cc) returned 1 [0078.685] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Adobe\\Headlights", nBufferLength=0x105, lpBuffer=0x31e1d4, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Adobe\\Headlights", lpFilePart=0x0) returned 0x3e [0078.685] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Adobe\\Headlights\\", nBufferLength=0x105, lpBuffer=0x31e1a8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Adobe\\Headlights\\", lpFilePart=0x0) returned 0x3f [0078.685] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Adobe\\Headlights\\*", lpFindFileData=0x31e3f4 | out: lpFindFileData=0x31e3f4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xcd72eaa0, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0xcd72eaa0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0xcd72eaa0, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x381c80 [0078.685] FindNextFileW (in: hFindFile=0x381c80, lpFindFileData=0x31e404 | out: lpFindFileData=0x31e404*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xcd72eaa0, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0xcd72eaa0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0xcd72eaa0, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0078.685] FindNextFileW (in: hFindFile=0x381c80, lpFindFileData=0x31e404 | out: lpFindFileData=0x31e404*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xcd72eaa0, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0xcd72eaa0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0xcd72eaa0, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 0 [0078.685] FindClose (in: hFindFile=0x381c80 | out: hFindFile=0x381c80) returned 1 [0078.685] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e68c) returned 1 [0078.685] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e698) returned 1 [0078.685] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e6cc) returned 1 [0078.685] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Adobe\\Linguistics", nBufferLength=0x105, lpBuffer=0x31e1d4, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Adobe\\Linguistics", lpFilePart=0x0) returned 0x3f [0078.685] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Adobe\\Linguistics\\", nBufferLength=0x105, lpBuffer=0x31e1a8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Adobe\\Linguistics\\", lpFilePart=0x0) returned 0x40 [0078.685] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Adobe\\Linguistics\\*", lpFindFileData=0x31e3f4 | out: lpFindFileData=0x31e3f4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xcd72eaa0, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0xcd72eaa0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0xcd72eaa0, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x381c80 [0078.686] FindNextFileW (in: hFindFile=0x381c80, lpFindFileData=0x31e404 | out: lpFindFileData=0x31e404*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xcd72eaa0, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0xcd72eaa0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0xcd72eaa0, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0078.686] FindNextFileW (in: hFindFile=0x381c80, lpFindFileData=0x31e404 | out: lpFindFileData=0x31e404*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xcd72eaa0, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0xcd72eaa0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0xcd72eaa0, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Dictionaries", cAlternateFileName="DICTIO~1")) returned 1 [0078.686] FindNextFileW (in: hFindFile=0x381c80, lpFindFileData=0x31e404 | out: lpFindFileData=0x31e404*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xcd72eaa0, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0xcd72eaa0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0xcd72eaa0, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Dictionaries", cAlternateFileName="DICTIO~1")) returned 0 [0078.686] FindClose (in: hFindFile=0x381c80 | out: hFindFile=0x381c80) returned 1 [0078.686] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e68c) returned 1 [0078.686] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e698) returned 1 [0078.686] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e6cc) returned 1 [0078.686] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Adobe\\Linguistics", nBufferLength=0x105, lpBuffer=0x31e1d4, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Adobe\\Linguistics", lpFilePart=0x0) returned 0x3f [0078.686] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Adobe\\Linguistics\\", nBufferLength=0x105, lpBuffer=0x31e1a8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Adobe\\Linguistics\\", lpFilePart=0x0) returned 0x40 [0078.686] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Adobe\\Linguistics\\*", lpFindFileData=0x31e3f4 | out: lpFindFileData=0x31e3f4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xcd72eaa0, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0xcd72eaa0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0xcd72eaa0, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x381c80 [0078.687] FindNextFileW (in: hFindFile=0x381c80, lpFindFileData=0x31e404 | out: lpFindFileData=0x31e404*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xcd72eaa0, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0xcd72eaa0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0xcd72eaa0, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0078.687] FindNextFileW (in: hFindFile=0x381c80, lpFindFileData=0x31e404 | out: lpFindFileData=0x31e404*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xcd72eaa0, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0xcd72eaa0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0xcd72eaa0, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Dictionaries", cAlternateFileName="DICTIO~1")) returned 1 [0078.687] FindNextFileW (in: hFindFile=0x381c80, lpFindFileData=0x31e404 | out: lpFindFileData=0x31e404*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0078.687] FindClose (in: hFindFile=0x381c80 | out: hFindFile=0x381c80) returned 1 [0078.687] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e68c) returned 1 [0078.687] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e698) returned 1 [0078.687] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e654) returned 1 [0078.687] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Adobe\\Linguistics\\Dictionaries", nBufferLength=0x105, lpBuffer=0x31e15c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Adobe\\Linguistics\\Dictionaries", lpFilePart=0x0) returned 0x4c [0078.687] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Adobe\\Linguistics\\Dictionaries\\", nBufferLength=0x105, lpBuffer=0x31e130, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Adobe\\Linguistics\\Dictionaries\\", lpFilePart=0x0) returned 0x4d [0078.687] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Adobe\\Linguistics\\Dictionaries\\*", lpFindFileData=0x31e37c | out: lpFindFileData=0x31e37c*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xcd72eaa0, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0xcd72eaa0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0xcd72eaa0, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x381c80 [0078.688] FindNextFileW (in: hFindFile=0x381c80, lpFindFileData=0x31e38c | out: lpFindFileData=0x31e38c*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xcd72eaa0, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0xcd72eaa0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0xcd72eaa0, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0078.688] FindNextFileW (in: hFindFile=0x381c80, lpFindFileData=0x31e38c | out: lpFindFileData=0x31e38c*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xcd72eaa0, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0xcd72eaa0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0xcd72eaa0, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 0 [0078.688] FindClose (in: hFindFile=0x381c80 | out: hFindFile=0x381c80) returned 1 [0078.688] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e614) returned 1 [0078.688] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e620) returned 1 [0078.688] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e654) returned 1 [0078.688] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Adobe\\Linguistics\\Dictionaries", nBufferLength=0x105, lpBuffer=0x31e15c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Adobe\\Linguistics\\Dictionaries", lpFilePart=0x0) returned 0x4c [0078.688] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Adobe\\Linguistics\\Dictionaries\\", nBufferLength=0x105, lpBuffer=0x31e130, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Adobe\\Linguistics\\Dictionaries\\", lpFilePart=0x0) returned 0x4d [0078.688] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Adobe\\Linguistics\\Dictionaries\\*", lpFindFileData=0x31e37c | out: lpFindFileData=0x31e37c*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xcd72eaa0, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0xcd72eaa0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0xcd72eaa0, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x381c80 [0078.688] FindNextFileW (in: hFindFile=0x381c80, lpFindFileData=0x31e38c | out: lpFindFileData=0x31e38c*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xcd72eaa0, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0xcd72eaa0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0xcd72eaa0, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0078.688] FindNextFileW (in: hFindFile=0x381c80, lpFindFileData=0x31e38c | out: lpFindFileData=0x31e38c*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xcd72eaa0, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0xcd72eaa0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0xcd72eaa0, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 0 [0078.688] FindClose (in: hFindFile=0x381c80 | out: hFindFile=0x381c80) returned 1 [0078.689] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e614) returned 1 [0078.689] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e620) returned 1 [0078.689] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e6cc) returned 1 [0078.689] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Adobe\\LogTransport2", nBufferLength=0x105, lpBuffer=0x31e1d4, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Adobe\\LogTransport2", lpFilePart=0x0) returned 0x41 [0078.689] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Adobe\\LogTransport2\\", nBufferLength=0x105, lpBuffer=0x31e1a8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Adobe\\LogTransport2\\", lpFilePart=0x0) returned 0x42 [0078.689] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Adobe\\LogTransport2\\*", lpFindFileData=0x31e3f4 | out: lpFindFileData=0x31e3f4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xcd72eaa0, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0xcd72eaa0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0xcd72eaa0, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x381c80 [0078.689] FindNextFileW (in: hFindFile=0x381c80, lpFindFileData=0x31e404 | out: lpFindFileData=0x31e404*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xcd72eaa0, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0xcd72eaa0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0xcd72eaa0, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0078.689] FindNextFileW (in: hFindFile=0x381c80, lpFindFileData=0x31e404 | out: lpFindFileData=0x31e404*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xcd72eaa0, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0xcd72eaa0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0xcd72eaa0, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 0 [0078.689] FindClose (in: hFindFile=0x381c80 | out: hFindFile=0x381c80) returned 1 [0078.689] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e68c) returned 1 [0078.689] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e698) returned 1 [0078.689] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e6cc) returned 1 [0078.689] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Adobe\\LogTransport2", nBufferLength=0x105, lpBuffer=0x31e1d4, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Adobe\\LogTransport2", lpFilePart=0x0) returned 0x41 [0078.689] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Adobe\\LogTransport2\\", nBufferLength=0x105, lpBuffer=0x31e1a8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Adobe\\LogTransport2\\", lpFilePart=0x0) returned 0x42 [0078.689] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Adobe\\LogTransport2\\*", lpFindFileData=0x31e3f4 | out: lpFindFileData=0x31e3f4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xcd72eaa0, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0xcd72eaa0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0xcd72eaa0, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x381c80 [0078.690] FindNextFileW (in: hFindFile=0x381c80, lpFindFileData=0x31e404 | out: lpFindFileData=0x31e404*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xcd72eaa0, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0xcd72eaa0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0xcd72eaa0, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0078.690] FindNextFileW (in: hFindFile=0x381c80, lpFindFileData=0x31e404 | out: lpFindFileData=0x31e404*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xcd72eaa0, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0xcd72eaa0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0xcd72eaa0, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 0 [0078.690] FindClose (in: hFindFile=0x381c80 | out: hFindFile=0x381c80) returned 1 [0078.690] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e68c) returned 1 [0078.690] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e698) returned 1 [0078.690] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e744) returned 1 [0078.690] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Identities", nBufferLength=0x105, lpBuffer=0x31e24c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Identities", lpFilePart=0x0) returned 0x38 [0078.690] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Identities\\", nBufferLength=0x105, lpBuffer=0x31e220, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Identities\\", lpFilePart=0x0) returned 0x39 [0078.690] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Identities\\*", lpFindFileData=0x31e46c | out: lpFindFileData=0x31e46c*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x28cff640, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28cff640, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xf2c805c8, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x381c80 [0078.690] FindNextFileW (in: hFindFile=0x381c80, lpFindFileData=0x31e47c | out: lpFindFileData=0x31e47c*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x28cff640, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28cff640, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xf2c805c8, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0078.690] FindNextFileW (in: hFindFile=0x381c80, lpFindFileData=0x31e47c | out: lpFindFileData=0x31e47c*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x28cff640, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28cff640, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xf2c805c8, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="{31810C36-5D23-4CCE-A3B4-316DED195C38}", cAlternateFileName="{31810~1")) returned 1 [0078.690] FindNextFileW (in: hFindFile=0x381c80, lpFindFileData=0x31e47c | out: lpFindFileData=0x31e47c*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x28cff640, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28cff640, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xf2c805c8, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="{31810C36-5D23-4CCE-A3B4-316DED195C38}", cAlternateFileName="{31810~1")) returned 0 [0078.691] FindClose (in: hFindFile=0x381c80 | out: hFindFile=0x381c80) returned 1 [0078.691] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e704) returned 1 [0078.691] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e710) returned 1 [0078.691] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e744) returned 1 [0078.691] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Identities", nBufferLength=0x105, lpBuffer=0x31e24c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Identities", lpFilePart=0x0) returned 0x38 [0078.691] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Identities\\", nBufferLength=0x105, lpBuffer=0x31e220, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Identities\\", lpFilePart=0x0) returned 0x39 [0078.691] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Identities\\*", lpFindFileData=0x31e46c | out: lpFindFileData=0x31e46c*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x28cff640, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28cff640, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xf2c805c8, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x381c80 [0078.691] FindNextFileW (in: hFindFile=0x381c80, lpFindFileData=0x31e47c | out: lpFindFileData=0x31e47c*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x28cff640, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28cff640, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xf2c805c8, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0078.691] FindNextFileW (in: hFindFile=0x381c80, lpFindFileData=0x31e47c | out: lpFindFileData=0x31e47c*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x28cff640, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28cff640, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xf2c805c8, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="{31810C36-5D23-4CCE-A3B4-316DED195C38}", cAlternateFileName="{31810~1")) returned 1 [0078.691] FindNextFileW (in: hFindFile=0x381c80, lpFindFileData=0x31e47c | out: lpFindFileData=0x31e47c*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0078.691] FindClose (in: hFindFile=0x381c80 | out: hFindFile=0x381c80) returned 1 [0078.691] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e704) returned 1 [0078.691] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e710) returned 1 [0078.691] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e6cc) returned 1 [0078.691] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Identities\\{31810C36-5D23-4CCE-A3B4-316DED195C38}", nBufferLength=0x105, lpBuffer=0x31e1d4, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Identities\\{31810C36-5D23-4CCE-A3B4-316DED195C38}", lpFilePart=0x0) returned 0x5f [0078.691] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Identities\\{31810C36-5D23-4CCE-A3B4-316DED195C38}\\", nBufferLength=0x105, lpBuffer=0x31e1a8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Identities\\{31810C36-5D23-4CCE-A3B4-316DED195C38}\\", lpFilePart=0x0) returned 0x60 [0078.691] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Identities\\{31810C36-5D23-4CCE-A3B4-316DED195C38}\\*", lpFindFileData=0x31e3f4 | out: lpFindFileData=0x31e3f4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x28cff640, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28cff640, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xf2c805c8, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x381c80 [0078.691] FindNextFileW (in: hFindFile=0x381c80, lpFindFileData=0x31e404 | out: lpFindFileData=0x31e404*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x28cff640, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28cff640, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xf2c805c8, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0078.692] FindNextFileW (in: hFindFile=0x381c80, lpFindFileData=0x31e404 | out: lpFindFileData=0x31e404*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x28cff640, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28cff640, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xf2c805c8, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 0 [0078.692] FindClose (in: hFindFile=0x381c80 | out: hFindFile=0x381c80) returned 1 [0078.692] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e68c) returned 1 [0078.692] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e698) returned 1 [0078.692] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e6cc) returned 1 [0078.692] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Identities\\{31810C36-5D23-4CCE-A3B4-316DED195C38}", nBufferLength=0x105, lpBuffer=0x31e1d4, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Identities\\{31810C36-5D23-4CCE-A3B4-316DED195C38}", lpFilePart=0x0) returned 0x5f [0078.692] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Identities\\{31810C36-5D23-4CCE-A3B4-316DED195C38}\\", nBufferLength=0x105, lpBuffer=0x31e1a8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Identities\\{31810C36-5D23-4CCE-A3B4-316DED195C38}\\", lpFilePart=0x0) returned 0x60 [0078.692] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Identities\\{31810C36-5D23-4CCE-A3B4-316DED195C38}\\*", lpFindFileData=0x31e3f4 | out: lpFindFileData=0x31e3f4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x28cff640, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28cff640, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xf2c805c8, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x381c80 [0078.692] FindNextFileW (in: hFindFile=0x381c80, lpFindFileData=0x31e404 | out: lpFindFileData=0x31e404*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x28cff640, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28cff640, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xf2c805c8, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0078.692] FindNextFileW (in: hFindFile=0x381c80, lpFindFileData=0x31e404 | out: lpFindFileData=0x31e404*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x28cff640, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28cff640, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xf2c805c8, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 0 [0078.692] FindClose (in: hFindFile=0x381c80 | out: hFindFile=0x381c80) returned 1 [0078.692] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e68c) returned 1 [0078.692] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e698) returned 1 [0078.692] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e744) returned 1 [0078.692] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Macromedia", nBufferLength=0x105, lpBuffer=0x31e24c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Macromedia", lpFilePart=0x0) returned 0x38 [0078.692] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Macromedia\\", nBufferLength=0x105, lpBuffer=0x31e220, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Macromedia\\", lpFilePart=0x0) returned 0x39 [0078.692] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Macromedia\\*", lpFindFileData=0x31e46c | out: lpFindFileData=0x31e46c*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x6b695060, ftCreationTime.dwHighDateTime=0x1d2dda5, ftLastAccessTime.dwLowDateTime=0x6b695060, ftLastAccessTime.dwHighDateTime=0x1d2dda5, ftLastWriteTime.dwLowDateTime=0x6b695060, ftLastWriteTime.dwHighDateTime=0x1d2dda5, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x381c80 [0078.693] FindNextFileW (in: hFindFile=0x381c80, lpFindFileData=0x31e47c | out: lpFindFileData=0x31e47c*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x6b695060, ftCreationTime.dwHighDateTime=0x1d2dda5, ftLastAccessTime.dwLowDateTime=0x6b695060, ftLastAccessTime.dwHighDateTime=0x1d2dda5, ftLastWriteTime.dwLowDateTime=0x6b695060, ftLastWriteTime.dwHighDateTime=0x1d2dda5, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0078.693] FindNextFileW (in: hFindFile=0x381c80, lpFindFileData=0x31e47c | out: lpFindFileData=0x31e47c*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x6b695060, ftCreationTime.dwHighDateTime=0x1d2dda5, ftLastAccessTime.dwLowDateTime=0x1d4582b0, ftLastAccessTime.dwHighDateTime=0x1d35d06, ftLastWriteTime.dwLowDateTime=0x1d4582b0, ftLastWriteTime.dwHighDateTime=0x1d35d06, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Flash Player", cAlternateFileName="FLASHP~1")) returned 1 [0078.693] FindNextFileW (in: hFindFile=0x381c80, lpFindFileData=0x31e47c | out: lpFindFileData=0x31e47c*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x6b695060, ftCreationTime.dwHighDateTime=0x1d2dda5, ftLastAccessTime.dwLowDateTime=0x1d4582b0, ftLastAccessTime.dwHighDateTime=0x1d35d06, ftLastWriteTime.dwLowDateTime=0x1d4582b0, ftLastWriteTime.dwHighDateTime=0x1d35d06, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Flash Player", cAlternateFileName="FLASHP~1")) returned 0 [0078.693] FindClose (in: hFindFile=0x381c80 | out: hFindFile=0x381c80) returned 1 [0078.693] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e704) returned 1 [0078.693] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e710) returned 1 [0078.693] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e744) returned 1 [0078.693] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Macromedia", nBufferLength=0x105, lpBuffer=0x31e24c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Macromedia", lpFilePart=0x0) returned 0x38 [0078.693] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Macromedia\\", nBufferLength=0x105, lpBuffer=0x31e220, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Macromedia\\", lpFilePart=0x0) returned 0x39 [0078.693] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Macromedia\\*", lpFindFileData=0x31e46c | out: lpFindFileData=0x31e46c*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x6b695060, ftCreationTime.dwHighDateTime=0x1d2dda5, ftLastAccessTime.dwLowDateTime=0x6b695060, ftLastAccessTime.dwHighDateTime=0x1d2dda5, ftLastWriteTime.dwLowDateTime=0x6b695060, ftLastWriteTime.dwHighDateTime=0x1d2dda5, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x381c80 [0078.693] FindNextFileW (in: hFindFile=0x381c80, lpFindFileData=0x31e47c | out: lpFindFileData=0x31e47c*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x6b695060, ftCreationTime.dwHighDateTime=0x1d2dda5, ftLastAccessTime.dwLowDateTime=0x6b695060, ftLastAccessTime.dwHighDateTime=0x1d2dda5, ftLastWriteTime.dwLowDateTime=0x6b695060, ftLastWriteTime.dwHighDateTime=0x1d2dda5, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0078.693] FindNextFileW (in: hFindFile=0x381c80, lpFindFileData=0x31e47c | out: lpFindFileData=0x31e47c*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x6b695060, ftCreationTime.dwHighDateTime=0x1d2dda5, ftLastAccessTime.dwLowDateTime=0x1d4582b0, ftLastAccessTime.dwHighDateTime=0x1d35d06, ftLastWriteTime.dwLowDateTime=0x1d4582b0, ftLastWriteTime.dwHighDateTime=0x1d35d06, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Flash Player", cAlternateFileName="FLASHP~1")) returned 1 [0078.693] FindNextFileW (in: hFindFile=0x381c80, lpFindFileData=0x31e47c | out: lpFindFileData=0x31e47c*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0078.693] FindClose (in: hFindFile=0x381c80 | out: hFindFile=0x381c80) returned 1 [0078.693] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e704) returned 1 [0078.693] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e710) returned 1 [0078.693] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e6cc) returned 1 [0078.693] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Macromedia\\Flash Player", nBufferLength=0x105, lpBuffer=0x31e1d4, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Macromedia\\Flash Player", lpFilePart=0x0) returned 0x45 [0078.694] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Macromedia\\Flash Player\\", nBufferLength=0x105, lpBuffer=0x31e1a8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Macromedia\\Flash Player\\", lpFilePart=0x0) returned 0x46 [0078.694] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Macromedia\\Flash Player\\*", lpFindFileData=0x31e3f4 | out: lpFindFileData=0x31e3f4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x6b695060, ftCreationTime.dwHighDateTime=0x1d2dda5, ftLastAccessTime.dwLowDateTime=0x1d4582b0, ftLastAccessTime.dwHighDateTime=0x1d35d06, ftLastWriteTime.dwLowDateTime=0x1d4582b0, ftLastWriteTime.dwHighDateTime=0x1d35d06, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x381c80 [0078.694] FindNextFileW (in: hFindFile=0x381c80, lpFindFileData=0x31e404 | out: lpFindFileData=0x31e404*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x6b695060, ftCreationTime.dwHighDateTime=0x1d2dda5, ftLastAccessTime.dwLowDateTime=0x1d4582b0, ftLastAccessTime.dwHighDateTime=0x1d35d06, ftLastWriteTime.dwLowDateTime=0x1d4582b0, ftLastWriteTime.dwHighDateTime=0x1d35d06, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0078.694] FindNextFileW (in: hFindFile=0x381c80, lpFindFileData=0x31e404 | out: lpFindFileData=0x31e404*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x1d4582b0, ftCreationTime.dwHighDateTime=0x1d35d06, ftLastAccessTime.dwLowDateTime=0x1d4582b0, ftLastAccessTime.dwHighDateTime=0x1d35d06, ftLastWriteTime.dwLowDateTime=0x1d4582b0, ftLastWriteTime.dwHighDateTime=0x1d35d06, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="#SharedObjects", cAlternateFileName="#SHARE~1")) returned 1 [0078.694] FindNextFileW (in: hFindFile=0x381c80, lpFindFileData=0x31e404 | out: lpFindFileData=0x31e404*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x6b695060, ftCreationTime.dwHighDateTime=0x1d2dda5, ftLastAccessTime.dwLowDateTime=0x6d241020, ftLastAccessTime.dwHighDateTime=0x1d2dda5, ftLastWriteTime.dwLowDateTime=0x6d241020, ftLastWriteTime.dwHighDateTime=0x1d2dda5, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="macromedia.com", cAlternateFileName="MACROM~1.COM")) returned 1 [0078.694] FindNextFileW (in: hFindFile=0x381c80, lpFindFileData=0x31e404 | out: lpFindFileData=0x31e404*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x6b695060, ftCreationTime.dwHighDateTime=0x1d2dda5, ftLastAccessTime.dwLowDateTime=0x6d241020, ftLastAccessTime.dwHighDateTime=0x1d2dda5, ftLastWriteTime.dwLowDateTime=0x6d241020, ftLastWriteTime.dwHighDateTime=0x1d2dda5, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="macromedia.com", cAlternateFileName="MACROM~1.COM")) returned 0 [0078.694] FindClose (in: hFindFile=0x381c80 | out: hFindFile=0x381c80) returned 1 [0078.694] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e68c) returned 1 [0078.694] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e698) returned 1 [0078.694] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e6cc) returned 1 [0078.694] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Macromedia\\Flash Player", nBufferLength=0x105, lpBuffer=0x31e1d4, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Macromedia\\Flash Player", lpFilePart=0x0) returned 0x45 [0078.694] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Macromedia\\Flash Player\\", nBufferLength=0x105, lpBuffer=0x31e1a8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Macromedia\\Flash Player\\", lpFilePart=0x0) returned 0x46 [0078.694] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Macromedia\\Flash Player\\*", lpFindFileData=0x31e3f4 | out: lpFindFileData=0x31e3f4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x6b695060, ftCreationTime.dwHighDateTime=0x1d2dda5, ftLastAccessTime.dwLowDateTime=0x1d4582b0, ftLastAccessTime.dwHighDateTime=0x1d35d06, ftLastWriteTime.dwLowDateTime=0x1d4582b0, ftLastWriteTime.dwHighDateTime=0x1d35d06, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x381c80 [0078.694] FindNextFileW (in: hFindFile=0x381c80, lpFindFileData=0x31e404 | out: lpFindFileData=0x31e404*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x6b695060, ftCreationTime.dwHighDateTime=0x1d2dda5, ftLastAccessTime.dwLowDateTime=0x1d4582b0, ftLastAccessTime.dwHighDateTime=0x1d35d06, ftLastWriteTime.dwLowDateTime=0x1d4582b0, ftLastWriteTime.dwHighDateTime=0x1d35d06, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0078.694] FindNextFileW (in: hFindFile=0x381c80, lpFindFileData=0x31e404 | out: lpFindFileData=0x31e404*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x1d4582b0, ftCreationTime.dwHighDateTime=0x1d35d06, ftLastAccessTime.dwLowDateTime=0x1d4582b0, ftLastAccessTime.dwHighDateTime=0x1d35d06, ftLastWriteTime.dwLowDateTime=0x1d4582b0, ftLastWriteTime.dwHighDateTime=0x1d35d06, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="#SharedObjects", cAlternateFileName="#SHARE~1")) returned 1 [0078.694] FindNextFileW (in: hFindFile=0x381c80, lpFindFileData=0x31e404 | out: lpFindFileData=0x31e404*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x6b695060, ftCreationTime.dwHighDateTime=0x1d2dda5, ftLastAccessTime.dwLowDateTime=0x6d241020, ftLastAccessTime.dwHighDateTime=0x1d2dda5, ftLastWriteTime.dwLowDateTime=0x6d241020, ftLastWriteTime.dwHighDateTime=0x1d2dda5, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="macromedia.com", cAlternateFileName="MACROM~1.COM")) returned 1 [0078.695] FindNextFileW (in: hFindFile=0x381c80, lpFindFileData=0x31e404 | out: lpFindFileData=0x31e404*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0078.695] FindClose (in: hFindFile=0x381c80 | out: hFindFile=0x381c80) returned 1 [0078.695] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e68c) returned 1 [0078.695] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e698) returned 1 [0078.695] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e654) returned 1 [0078.695] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Macromedia\\Flash Player\\#SharedObjects", nBufferLength=0x105, lpBuffer=0x31e15c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Macromedia\\Flash Player\\#SharedObjects", lpFilePart=0x0) returned 0x54 [0078.695] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Macromedia\\Flash Player\\#SharedObjects\\", nBufferLength=0x105, lpBuffer=0x31e130, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Macromedia\\Flash Player\\#SharedObjects\\", lpFilePart=0x0) returned 0x55 [0078.695] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Macromedia\\Flash Player\\#SharedObjects\\*", lpFindFileData=0x31e37c | out: lpFindFileData=0x31e37c*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x1d4582b0, ftCreationTime.dwHighDateTime=0x1d35d06, ftLastAccessTime.dwLowDateTime=0x1d4582b0, ftLastAccessTime.dwHighDateTime=0x1d35d06, ftLastWriteTime.dwLowDateTime=0x1d4582b0, ftLastWriteTime.dwHighDateTime=0x1d35d06, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x381c80 [0078.695] FindNextFileW (in: hFindFile=0x381c80, lpFindFileData=0x31e38c | out: lpFindFileData=0x31e38c*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x1d4582b0, ftCreationTime.dwHighDateTime=0x1d35d06, ftLastAccessTime.dwLowDateTime=0x1d4582b0, ftLastAccessTime.dwHighDateTime=0x1d35d06, ftLastWriteTime.dwLowDateTime=0x1d4582b0, ftLastWriteTime.dwHighDateTime=0x1d35d06, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0078.695] FindNextFileW (in: hFindFile=0x381c80, lpFindFileData=0x31e38c | out: lpFindFileData=0x31e38c*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x1d4582b0, ftCreationTime.dwHighDateTime=0x1d35d06, ftLastAccessTime.dwLowDateTime=0x1d4582b0, ftLastAccessTime.dwHighDateTime=0x1d35d06, ftLastWriteTime.dwLowDateTime=0x1d4582b0, ftLastWriteTime.dwHighDateTime=0x1d35d06, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="P7Y3F7QB", cAlternateFileName="")) returned 1 [0078.695] FindNextFileW (in: hFindFile=0x381c80, lpFindFileData=0x31e38c | out: lpFindFileData=0x31e38c*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x1d4582b0, ftCreationTime.dwHighDateTime=0x1d35d06, ftLastAccessTime.dwLowDateTime=0x1d4582b0, ftLastAccessTime.dwHighDateTime=0x1d35d06, ftLastWriteTime.dwLowDateTime=0x1d4582b0, ftLastWriteTime.dwHighDateTime=0x1d35d06, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="P7Y3F7QB", cAlternateFileName="")) returned 0 [0078.695] FindClose (in: hFindFile=0x381c80 | out: hFindFile=0x381c80) returned 1 [0078.695] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e614) returned 1 [0078.695] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e620) returned 1 [0078.695] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e654) returned 1 [0078.695] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Macromedia\\Flash Player\\#SharedObjects", nBufferLength=0x105, lpBuffer=0x31e15c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Macromedia\\Flash Player\\#SharedObjects", lpFilePart=0x0) returned 0x54 [0078.695] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Macromedia\\Flash Player\\#SharedObjects\\", nBufferLength=0x105, lpBuffer=0x31e130, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Macromedia\\Flash Player\\#SharedObjects\\", lpFilePart=0x0) returned 0x55 [0078.695] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Macromedia\\Flash Player\\#SharedObjects\\*", lpFindFileData=0x31e37c | out: lpFindFileData=0x31e37c*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x1d4582b0, ftCreationTime.dwHighDateTime=0x1d35d06, ftLastAccessTime.dwLowDateTime=0x1d4582b0, ftLastAccessTime.dwHighDateTime=0x1d35d06, ftLastWriteTime.dwLowDateTime=0x1d4582b0, ftLastWriteTime.dwHighDateTime=0x1d35d06, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x381c80 [0078.696] FindNextFileW (in: hFindFile=0x381c80, lpFindFileData=0x31e38c | out: lpFindFileData=0x31e38c*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x1d4582b0, ftCreationTime.dwHighDateTime=0x1d35d06, ftLastAccessTime.dwLowDateTime=0x1d4582b0, ftLastAccessTime.dwHighDateTime=0x1d35d06, ftLastWriteTime.dwLowDateTime=0x1d4582b0, ftLastWriteTime.dwHighDateTime=0x1d35d06, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0078.696] FindNextFileW (in: hFindFile=0x381c80, lpFindFileData=0x31e38c | out: lpFindFileData=0x31e38c*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x1d4582b0, ftCreationTime.dwHighDateTime=0x1d35d06, ftLastAccessTime.dwLowDateTime=0x1d4582b0, ftLastAccessTime.dwHighDateTime=0x1d35d06, ftLastWriteTime.dwLowDateTime=0x1d4582b0, ftLastWriteTime.dwHighDateTime=0x1d35d06, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="P7Y3F7QB", cAlternateFileName="")) returned 1 [0078.696] FindNextFileW (in: hFindFile=0x381c80, lpFindFileData=0x31e38c | out: lpFindFileData=0x31e38c*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0078.696] FindClose (in: hFindFile=0x381c80 | out: hFindFile=0x381c80) returned 1 [0078.696] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e614) returned 1 [0078.696] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e620) returned 1 [0078.696] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e5dc) returned 1 [0078.696] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Macromedia\\Flash Player\\#SharedObjects\\P7Y3F7QB", nBufferLength=0x105, lpBuffer=0x31e0e4, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Macromedia\\Flash Player\\#SharedObjects\\P7Y3F7QB", lpFilePart=0x0) returned 0x5d [0078.696] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Macromedia\\Flash Player\\#SharedObjects\\P7Y3F7QB\\", nBufferLength=0x105, lpBuffer=0x31e0b8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Macromedia\\Flash Player\\#SharedObjects\\P7Y3F7QB\\", lpFilePart=0x0) returned 0x5e [0078.696] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Macromedia\\Flash Player\\#SharedObjects\\P7Y3F7QB\\*", lpFindFileData=0x31e304 | out: lpFindFileData=0x31e304*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x1d4582b0, ftCreationTime.dwHighDateTime=0x1d35d06, ftLastAccessTime.dwLowDateTime=0x1d4582b0, ftLastAccessTime.dwHighDateTime=0x1d35d06, ftLastWriteTime.dwLowDateTime=0x1d4582b0, ftLastWriteTime.dwHighDateTime=0x1d35d06, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x381c80 [0078.697] FindNextFileW (in: hFindFile=0x381c80, lpFindFileData=0x31e314 | out: lpFindFileData=0x31e314*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x1d4582b0, ftCreationTime.dwHighDateTime=0x1d35d06, ftLastAccessTime.dwLowDateTime=0x1d4582b0, ftLastAccessTime.dwHighDateTime=0x1d35d06, ftLastWriteTime.dwLowDateTime=0x1d4582b0, ftLastWriteTime.dwHighDateTime=0x1d35d06, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0078.697] FindNextFileW (in: hFindFile=0x381c80, lpFindFileData=0x31e314 | out: lpFindFileData=0x31e314*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x1d4582b0, ftCreationTime.dwHighDateTime=0x1d35d06, ftLastAccessTime.dwLowDateTime=0x1d4582b0, ftLastAccessTime.dwHighDateTime=0x1d35d06, ftLastWriteTime.dwLowDateTime=0x1d4582b0, ftLastWriteTime.dwHighDateTime=0x1d35d06, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 0 [0078.697] FindClose (in: hFindFile=0x381c80 | out: hFindFile=0x381c80) returned 1 [0078.697] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e59c) returned 1 [0078.697] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e5a8) returned 1 [0078.697] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e5dc) returned 1 [0078.697] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Macromedia\\Flash Player\\#SharedObjects\\P7Y3F7QB", nBufferLength=0x105, lpBuffer=0x31e0e4, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Macromedia\\Flash Player\\#SharedObjects\\P7Y3F7QB", lpFilePart=0x0) returned 0x5d [0078.697] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Macromedia\\Flash Player\\#SharedObjects\\P7Y3F7QB\\", nBufferLength=0x105, lpBuffer=0x31e0b8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Macromedia\\Flash Player\\#SharedObjects\\P7Y3F7QB\\", lpFilePart=0x0) returned 0x5e [0078.697] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Macromedia\\Flash Player\\#SharedObjects\\P7Y3F7QB\\*", lpFindFileData=0x31e304 | out: lpFindFileData=0x31e304*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x1d4582b0, ftCreationTime.dwHighDateTime=0x1d35d06, ftLastAccessTime.dwLowDateTime=0x1d4582b0, ftLastAccessTime.dwHighDateTime=0x1d35d06, ftLastWriteTime.dwLowDateTime=0x1d4582b0, ftLastWriteTime.dwHighDateTime=0x1d35d06, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x381c80 [0078.697] FindNextFileW (in: hFindFile=0x381c80, lpFindFileData=0x31e314 | out: lpFindFileData=0x31e314*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x1d4582b0, ftCreationTime.dwHighDateTime=0x1d35d06, ftLastAccessTime.dwLowDateTime=0x1d4582b0, ftLastAccessTime.dwHighDateTime=0x1d35d06, ftLastWriteTime.dwLowDateTime=0x1d4582b0, ftLastWriteTime.dwHighDateTime=0x1d35d06, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0078.698] FindNextFileW (in: hFindFile=0x381c80, lpFindFileData=0x31e314 | out: lpFindFileData=0x31e314*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x1d4582b0, ftCreationTime.dwHighDateTime=0x1d35d06, ftLastAccessTime.dwLowDateTime=0x1d4582b0, ftLastAccessTime.dwHighDateTime=0x1d35d06, ftLastWriteTime.dwLowDateTime=0x1d4582b0, ftLastWriteTime.dwHighDateTime=0x1d35d06, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 0 [0078.698] FindClose (in: hFindFile=0x381c80 | out: hFindFile=0x381c80) returned 1 [0078.698] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e59c) returned 1 [0078.698] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e5a8) returned 1 [0078.698] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e654) returned 1 [0078.698] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Macromedia\\Flash Player\\macromedia.com", nBufferLength=0x105, lpBuffer=0x31e15c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Macromedia\\Flash Player\\macromedia.com", lpFilePart=0x0) returned 0x54 [0078.698] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Macromedia\\Flash Player\\macromedia.com\\", nBufferLength=0x105, lpBuffer=0x31e130, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Macromedia\\Flash Player\\macromedia.com\\", lpFilePart=0x0) returned 0x55 [0078.698] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Macromedia\\Flash Player\\macromedia.com\\*", lpFindFileData=0x31e37c | out: lpFindFileData=0x31e37c*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x6b695060, ftCreationTime.dwHighDateTime=0x1d2dda5, ftLastAccessTime.dwLowDateTime=0x6d241020, ftLastAccessTime.dwHighDateTime=0x1d2dda5, ftLastWriteTime.dwLowDateTime=0x6d241020, ftLastWriteTime.dwHighDateTime=0x1d2dda5, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x381c80 [0078.698] FindNextFileW (in: hFindFile=0x381c80, lpFindFileData=0x31e38c | out: lpFindFileData=0x31e38c*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x6b695060, ftCreationTime.dwHighDateTime=0x1d2dda5, ftLastAccessTime.dwLowDateTime=0x6d241020, ftLastAccessTime.dwHighDateTime=0x1d2dda5, ftLastWriteTime.dwLowDateTime=0x6d241020, ftLastWriteTime.dwHighDateTime=0x1d2dda5, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0078.698] FindNextFileW (in: hFindFile=0x381c80, lpFindFileData=0x31e38c | out: lpFindFileData=0x31e38c*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x6d241020, ftCreationTime.dwHighDateTime=0x1d2dda5, ftLastAccessTime.dwLowDateTime=0x6d9d7640, ftLastAccessTime.dwHighDateTime=0x1d2dda5, ftLastWriteTime.dwLowDateTime=0x6d9d7640, ftLastWriteTime.dwHighDateTime=0x1d2dda5, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="support", cAlternateFileName="")) returned 1 [0078.698] FindNextFileW (in: hFindFile=0x381c80, lpFindFileData=0x31e38c | out: lpFindFileData=0x31e38c*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x6d241020, ftCreationTime.dwHighDateTime=0x1d2dda5, ftLastAccessTime.dwLowDateTime=0x6d9d7640, ftLastAccessTime.dwHighDateTime=0x1d2dda5, ftLastWriteTime.dwLowDateTime=0x6d9d7640, ftLastWriteTime.dwHighDateTime=0x1d2dda5, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="support", cAlternateFileName="")) returned 0 [0078.698] FindClose (in: hFindFile=0x381c80 | out: hFindFile=0x381c80) returned 1 [0078.698] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e614) returned 1 [0078.698] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e620) returned 1 [0078.698] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e654) returned 1 [0078.698] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Macromedia\\Flash Player\\macromedia.com", nBufferLength=0x105, lpBuffer=0x31e15c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Macromedia\\Flash Player\\macromedia.com", lpFilePart=0x0) returned 0x54 [0078.698] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Macromedia\\Flash Player\\macromedia.com\\", nBufferLength=0x105, lpBuffer=0x31e130, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Macromedia\\Flash Player\\macromedia.com\\", lpFilePart=0x0) returned 0x55 [0078.698] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Macromedia\\Flash Player\\macromedia.com\\*", lpFindFileData=0x31e37c | out: lpFindFileData=0x31e37c*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x6b695060, ftCreationTime.dwHighDateTime=0x1d2dda5, ftLastAccessTime.dwLowDateTime=0x6d241020, ftLastAccessTime.dwHighDateTime=0x1d2dda5, ftLastWriteTime.dwLowDateTime=0x6d241020, ftLastWriteTime.dwHighDateTime=0x1d2dda5, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x381c80 [0078.699] FindNextFileW (in: hFindFile=0x381c80, lpFindFileData=0x31e38c | out: lpFindFileData=0x31e38c*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x6b695060, ftCreationTime.dwHighDateTime=0x1d2dda5, ftLastAccessTime.dwLowDateTime=0x6d241020, ftLastAccessTime.dwHighDateTime=0x1d2dda5, ftLastWriteTime.dwLowDateTime=0x6d241020, ftLastWriteTime.dwHighDateTime=0x1d2dda5, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0078.699] FindNextFileW (in: hFindFile=0x381c80, lpFindFileData=0x31e38c | out: lpFindFileData=0x31e38c*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x6d241020, ftCreationTime.dwHighDateTime=0x1d2dda5, ftLastAccessTime.dwLowDateTime=0x6d9d7640, ftLastAccessTime.dwHighDateTime=0x1d2dda5, ftLastWriteTime.dwLowDateTime=0x6d9d7640, ftLastWriteTime.dwHighDateTime=0x1d2dda5, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="support", cAlternateFileName="")) returned 1 [0078.699] FindNextFileW (in: hFindFile=0x381c80, lpFindFileData=0x31e38c | out: lpFindFileData=0x31e38c*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0078.699] FindClose (in: hFindFile=0x381c80 | out: hFindFile=0x381c80) returned 1 [0078.699] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e614) returned 1 [0078.699] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e620) returned 1 [0078.699] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e5dc) returned 1 [0078.699] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Macromedia\\Flash Player\\macromedia.com\\support", nBufferLength=0x105, lpBuffer=0x31e0e4, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Macromedia\\Flash Player\\macromedia.com\\support", lpFilePart=0x0) returned 0x5c [0078.699] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Macromedia\\Flash Player\\macromedia.com\\support\\", nBufferLength=0x105, lpBuffer=0x31e0b8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Macromedia\\Flash Player\\macromedia.com\\support\\", lpFilePart=0x0) returned 0x5d [0078.699] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Macromedia\\Flash Player\\macromedia.com\\support\\*", lpFindFileData=0x31e304 | out: lpFindFileData=0x31e304*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x6d241020, ftCreationTime.dwHighDateTime=0x1d2dda5, ftLastAccessTime.dwLowDateTime=0x6d9d7640, ftLastAccessTime.dwHighDateTime=0x1d2dda5, ftLastWriteTime.dwLowDateTime=0x6d9d7640, ftLastWriteTime.dwHighDateTime=0x1d2dda5, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x381c80 [0078.699] FindNextFileW (in: hFindFile=0x381c80, lpFindFileData=0x31e314 | out: lpFindFileData=0x31e314*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x6d241020, ftCreationTime.dwHighDateTime=0x1d2dda5, ftLastAccessTime.dwLowDateTime=0x6d9d7640, ftLastAccessTime.dwHighDateTime=0x1d2dda5, ftLastWriteTime.dwLowDateTime=0x6d9d7640, ftLastWriteTime.dwHighDateTime=0x1d2dda5, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0078.699] FindNextFileW (in: hFindFile=0x381c80, lpFindFileData=0x31e314 | out: lpFindFileData=0x31e314*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x6d9d7640, ftCreationTime.dwHighDateTime=0x1d2dda5, ftLastAccessTime.dwLowDateTime=0x6d9d7640, ftLastAccessTime.dwHighDateTime=0x1d2dda5, ftLastWriteTime.dwLowDateTime=0x6d9d7640, ftLastWriteTime.dwHighDateTime=0x1d2dda5, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="flashplayer", cAlternateFileName="FLASHP~1")) returned 1 [0078.699] FindNextFileW (in: hFindFile=0x381c80, lpFindFileData=0x31e314 | out: lpFindFileData=0x31e314*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x6d9d7640, ftCreationTime.dwHighDateTime=0x1d2dda5, ftLastAccessTime.dwLowDateTime=0x6d9d7640, ftLastAccessTime.dwHighDateTime=0x1d2dda5, ftLastWriteTime.dwLowDateTime=0x6d9d7640, ftLastWriteTime.dwHighDateTime=0x1d2dda5, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="flashplayer", cAlternateFileName="FLASHP~1")) returned 0 [0078.699] FindClose (in: hFindFile=0x381c80 | out: hFindFile=0x381c80) returned 1 [0078.699] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e59c) returned 1 [0078.699] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e5a8) returned 1 [0078.699] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e5dc) returned 1 [0078.700] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Macromedia\\Flash Player\\macromedia.com\\support", nBufferLength=0x105, lpBuffer=0x31e0e4, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Macromedia\\Flash Player\\macromedia.com\\support", lpFilePart=0x0) returned 0x5c [0078.700] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Macromedia\\Flash Player\\macromedia.com\\support\\", nBufferLength=0x105, lpBuffer=0x31e0b8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Macromedia\\Flash Player\\macromedia.com\\support\\", lpFilePart=0x0) returned 0x5d [0078.700] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Macromedia\\Flash Player\\macromedia.com\\support\\*", lpFindFileData=0x31e304 | out: lpFindFileData=0x31e304*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x6d241020, ftCreationTime.dwHighDateTime=0x1d2dda5, ftLastAccessTime.dwLowDateTime=0x6d9d7640, ftLastAccessTime.dwHighDateTime=0x1d2dda5, ftLastWriteTime.dwLowDateTime=0x6d9d7640, ftLastWriteTime.dwHighDateTime=0x1d2dda5, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x381c80 [0078.700] FindNextFileW (in: hFindFile=0x381c80, lpFindFileData=0x31e314 | out: lpFindFileData=0x31e314*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x6d241020, ftCreationTime.dwHighDateTime=0x1d2dda5, ftLastAccessTime.dwLowDateTime=0x6d9d7640, ftLastAccessTime.dwHighDateTime=0x1d2dda5, ftLastWriteTime.dwLowDateTime=0x6d9d7640, ftLastWriteTime.dwHighDateTime=0x1d2dda5, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0078.700] FindNextFileW (in: hFindFile=0x381c80, lpFindFileData=0x31e314 | out: lpFindFileData=0x31e314*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x6d9d7640, ftCreationTime.dwHighDateTime=0x1d2dda5, ftLastAccessTime.dwLowDateTime=0x6d9d7640, ftLastAccessTime.dwHighDateTime=0x1d2dda5, ftLastWriteTime.dwLowDateTime=0x6d9d7640, ftLastWriteTime.dwHighDateTime=0x1d2dda5, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="flashplayer", cAlternateFileName="FLASHP~1")) returned 1 [0078.700] FindNextFileW (in: hFindFile=0x381c80, lpFindFileData=0x31e314 | out: lpFindFileData=0x31e314*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0078.700] FindClose (in: hFindFile=0x381c80 | out: hFindFile=0x381c80) returned 1 [0078.700] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e59c) returned 1 [0078.700] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e5a8) returned 1 [0078.700] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e564) returned 1 [0078.700] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Macromedia\\Flash Player\\macromedia.com\\support\\flashplayer", nBufferLength=0x105, lpBuffer=0x31e06c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Macromedia\\Flash Player\\macromedia.com\\support\\flashplayer", lpFilePart=0x0) returned 0x68 [0078.700] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Macromedia\\Flash Player\\macromedia.com\\support\\flashplayer\\", nBufferLength=0x105, lpBuffer=0x31e040, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Macromedia\\Flash Player\\macromedia.com\\support\\flashplayer\\", lpFilePart=0x0) returned 0x69 [0078.700] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Macromedia\\Flash Player\\macromedia.com\\support\\flashplayer\\*", lpFindFileData=0x31e28c | out: lpFindFileData=0x31e28c*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x6d9d7640, ftCreationTime.dwHighDateTime=0x1d2dda5, ftLastAccessTime.dwLowDateTime=0x6d9d7640, ftLastAccessTime.dwHighDateTime=0x1d2dda5, ftLastWriteTime.dwLowDateTime=0x6d9d7640, ftLastWriteTime.dwHighDateTime=0x1d2dda5, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x381c80 [0078.701] FindNextFileW (in: hFindFile=0x381c80, lpFindFileData=0x31e29c | out: lpFindFileData=0x31e29c*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x6d9d7640, ftCreationTime.dwHighDateTime=0x1d2dda5, ftLastAccessTime.dwLowDateTime=0x6d9d7640, ftLastAccessTime.dwHighDateTime=0x1d2dda5, ftLastWriteTime.dwLowDateTime=0x6d9d7640, ftLastWriteTime.dwHighDateTime=0x1d2dda5, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0078.701] FindNextFileW (in: hFindFile=0x381c80, lpFindFileData=0x31e29c | out: lpFindFileData=0x31e29c*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x6d9d7640, ftCreationTime.dwHighDateTime=0x1d2dda5, ftLastAccessTime.dwLowDateTime=0x1d4582b0, ftLastAccessTime.dwHighDateTime=0x1d35d06, ftLastWriteTime.dwLowDateTime=0x1d4582b0, ftLastWriteTime.dwHighDateTime=0x1d35d06, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="sys", cAlternateFileName="")) returned 1 [0078.701] FindNextFileW (in: hFindFile=0x381c80, lpFindFileData=0x31e29c | out: lpFindFileData=0x31e29c*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x6d9d7640, ftCreationTime.dwHighDateTime=0x1d2dda5, ftLastAccessTime.dwLowDateTime=0x1d4582b0, ftLastAccessTime.dwHighDateTime=0x1d35d06, ftLastWriteTime.dwLowDateTime=0x1d4582b0, ftLastWriteTime.dwHighDateTime=0x1d35d06, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="sys", cAlternateFileName="")) returned 0 [0078.701] FindClose (in: hFindFile=0x381c80 | out: hFindFile=0x381c80) returned 1 [0078.701] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e524) returned 1 [0078.701] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e530) returned 1 [0078.701] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e564) returned 1 [0078.701] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Macromedia\\Flash Player\\macromedia.com\\support\\flashplayer", nBufferLength=0x105, lpBuffer=0x31e06c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Macromedia\\Flash Player\\macromedia.com\\support\\flashplayer", lpFilePart=0x0) returned 0x68 [0078.701] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Macromedia\\Flash Player\\macromedia.com\\support\\flashplayer\\", nBufferLength=0x105, lpBuffer=0x31e040, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Macromedia\\Flash Player\\macromedia.com\\support\\flashplayer\\", lpFilePart=0x0) returned 0x69 [0078.701] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Macromedia\\Flash Player\\macromedia.com\\support\\flashplayer\\*", lpFindFileData=0x31e28c | out: lpFindFileData=0x31e28c*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x6d9d7640, ftCreationTime.dwHighDateTime=0x1d2dda5, ftLastAccessTime.dwLowDateTime=0x6d9d7640, ftLastAccessTime.dwHighDateTime=0x1d2dda5, ftLastWriteTime.dwLowDateTime=0x6d9d7640, ftLastWriteTime.dwHighDateTime=0x1d2dda5, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x381c80 [0078.701] FindNextFileW (in: hFindFile=0x381c80, lpFindFileData=0x31e29c | out: lpFindFileData=0x31e29c*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x6d9d7640, ftCreationTime.dwHighDateTime=0x1d2dda5, ftLastAccessTime.dwLowDateTime=0x6d9d7640, ftLastAccessTime.dwHighDateTime=0x1d2dda5, ftLastWriteTime.dwLowDateTime=0x6d9d7640, ftLastWriteTime.dwHighDateTime=0x1d2dda5, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0078.701] FindNextFileW (in: hFindFile=0x381c80, lpFindFileData=0x31e29c | out: lpFindFileData=0x31e29c*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x6d9d7640, ftCreationTime.dwHighDateTime=0x1d2dda5, ftLastAccessTime.dwLowDateTime=0x1d4582b0, ftLastAccessTime.dwHighDateTime=0x1d35d06, ftLastWriteTime.dwLowDateTime=0x1d4582b0, ftLastWriteTime.dwHighDateTime=0x1d35d06, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="sys", cAlternateFileName="")) returned 1 [0078.701] FindNextFileW (in: hFindFile=0x381c80, lpFindFileData=0x31e29c | out: lpFindFileData=0x31e29c*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0078.702] FindClose (in: hFindFile=0x381c80 | out: hFindFile=0x381c80) returned 1 [0078.702] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e524) returned 1 [0078.702] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e530) returned 1 [0078.702] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e4ec) returned 1 [0078.702] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Macromedia\\Flash Player\\macromedia.com\\support\\flashplayer\\sys", nBufferLength=0x105, lpBuffer=0x31dff4, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Macromedia\\Flash Player\\macromedia.com\\support\\flashplayer\\sys", lpFilePart=0x0) returned 0x6c [0078.702] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Macromedia\\Flash Player\\macromedia.com\\support\\flashplayer\\sys\\", nBufferLength=0x105, lpBuffer=0x31dfc8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Macromedia\\Flash Player\\macromedia.com\\support\\flashplayer\\sys\\", lpFilePart=0x0) returned 0x6d [0078.702] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Macromedia\\Flash Player\\macromedia.com\\support\\flashplayer\\sys\\*", lpFindFileData=0x31e214 | out: lpFindFileData=0x31e214*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x6d9d7640, ftCreationTime.dwHighDateTime=0x1d2dda5, ftLastAccessTime.dwLowDateTime=0x1d4582b0, ftLastAccessTime.dwHighDateTime=0x1d35d06, ftLastWriteTime.dwLowDateTime=0x1d4582b0, ftLastWriteTime.dwHighDateTime=0x1d35d06, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x381c80 [0078.702] FindNextFileW (in: hFindFile=0x381c80, lpFindFileData=0x31e224 | out: lpFindFileData=0x31e224*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x6d9d7640, ftCreationTime.dwHighDateTime=0x1d2dda5, ftLastAccessTime.dwLowDateTime=0x1d4582b0, ftLastAccessTime.dwHighDateTime=0x1d35d06, ftLastWriteTime.dwLowDateTime=0x1d4582b0, ftLastWriteTime.dwHighDateTime=0x1d35d06, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0078.702] FindNextFileW (in: hFindFile=0x381c80, lpFindFileData=0x31e224 | out: lpFindFileData=0x31e224*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x6d9d7640, ftCreationTime.dwHighDateTime=0x1d2dda5, ftLastAccessTime.dwLowDateTime=0x1d4582b0, ftLastAccessTime.dwHighDateTime=0x1d35d06, ftLastWriteTime.dwLowDateTime=0x1d4582b0, ftLastWriteTime.dwHighDateTime=0x1d35d06, nFileSizeHigh=0x0, nFileSizeLow=0x1d6, dwReserved0=0x0, dwReserved1=0x0, cFileName="settings.sol", cAlternateFileName="")) returned 1 [0078.702] FindNextFileW (in: hFindFile=0x381c80, lpFindFileData=0x31e224 | out: lpFindFileData=0x31e224*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0078.702] FindClose (in: hFindFile=0x381c80 | out: hFindFile=0x381c80) returned 1 [0078.702] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e4ac) returned 1 [0078.703] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e4b8) returned 1 [0078.703] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e4ec) returned 1 [0078.703] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Macromedia\\Flash Player\\macromedia.com\\support\\flashplayer\\sys", nBufferLength=0x105, lpBuffer=0x31dff4, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Macromedia\\Flash Player\\macromedia.com\\support\\flashplayer\\sys", lpFilePart=0x0) returned 0x6c [0078.703] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Macromedia\\Flash Player\\macromedia.com\\support\\flashplayer\\sys\\", nBufferLength=0x105, lpBuffer=0x31dfc8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Macromedia\\Flash Player\\macromedia.com\\support\\flashplayer\\sys\\", lpFilePart=0x0) returned 0x6d [0078.703] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Macromedia\\Flash Player\\macromedia.com\\support\\flashplayer\\sys\\*", lpFindFileData=0x31e214 | out: lpFindFileData=0x31e214*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x6d9d7640, ftCreationTime.dwHighDateTime=0x1d2dda5, ftLastAccessTime.dwLowDateTime=0x1d4582b0, ftLastAccessTime.dwHighDateTime=0x1d35d06, ftLastWriteTime.dwLowDateTime=0x1d4582b0, ftLastWriteTime.dwHighDateTime=0x1d35d06, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x381c80 [0078.703] FindNextFileW (in: hFindFile=0x381c80, lpFindFileData=0x31e224 | out: lpFindFileData=0x31e224*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x6d9d7640, ftCreationTime.dwHighDateTime=0x1d2dda5, ftLastAccessTime.dwLowDateTime=0x1d4582b0, ftLastAccessTime.dwHighDateTime=0x1d35d06, ftLastWriteTime.dwLowDateTime=0x1d4582b0, ftLastWriteTime.dwHighDateTime=0x1d35d06, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0078.703] FindNextFileW (in: hFindFile=0x381c80, lpFindFileData=0x31e224 | out: lpFindFileData=0x31e224*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x6d9d7640, ftCreationTime.dwHighDateTime=0x1d2dda5, ftLastAccessTime.dwLowDateTime=0x1d4582b0, ftLastAccessTime.dwHighDateTime=0x1d35d06, ftLastWriteTime.dwLowDateTime=0x1d4582b0, ftLastWriteTime.dwHighDateTime=0x1d35d06, nFileSizeHigh=0x0, nFileSizeLow=0x1d6, dwReserved0=0x0, dwReserved1=0x0, cFileName="settings.sol", cAlternateFileName="")) returned 1 [0078.703] FindNextFileW (in: hFindFile=0x381c80, lpFindFileData=0x31e224 | out: lpFindFileData=0x31e224*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x6d9d7640, ftCreationTime.dwHighDateTime=0x1d2dda5, ftLastAccessTime.dwLowDateTime=0x1d4582b0, ftLastAccessTime.dwHighDateTime=0x1d35d06, ftLastWriteTime.dwLowDateTime=0x1d4582b0, ftLastWriteTime.dwHighDateTime=0x1d35d06, nFileSizeHigh=0x0, nFileSizeLow=0x1d6, dwReserved0=0x0, dwReserved1=0x0, cFileName="settings.sol", cAlternateFileName="")) returned 0 [0078.703] FindClose (in: hFindFile=0x381c80 | out: hFindFile=0x381c80) returned 1 [0078.703] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e4ac) returned 1 [0078.703] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e4b8) returned 1 [0078.703] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e744) returned 1 [0078.703] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft", nBufferLength=0x105, lpBuffer=0x31e24c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft", lpFilePart=0x0) returned 0x37 [0078.703] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\", nBufferLength=0x105, lpBuffer=0x31e220, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\", lpFilePart=0x0) returned 0x38 [0078.703] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\*", lpFindFileData=0x31e46c | out: lpFindFileData=0x31e46c*(dwFileAttributes=0x2014, ftCreationTime.dwLowDateTime=0x28cff640, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x8d940a0, ftLastAccessTime.dwHighDateTime=0x1d305fe, ftLastWriteTime.dwLowDateTime=0x8d940a0, ftLastWriteTime.dwHighDateTime=0x1d305fe, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x381c80 [0078.703] FindNextFileW (in: hFindFile=0x381c80, lpFindFileData=0x31e47c | out: lpFindFileData=0x31e47c*(dwFileAttributes=0x2014, ftCreationTime.dwLowDateTime=0x28cff640, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x8d940a0, ftLastAccessTime.dwHighDateTime=0x1d305fe, ftLastWriteTime.dwLowDateTime=0x8d940a0, ftLastWriteTime.dwHighDateTime=0x1d305fe, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0078.703] FindNextFileW (in: hFindFile=0x381c80, lpFindFileData=0x31e47c | out: lpFindFileData=0x31e47c*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x7c36290, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0x7c36290, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0x7c36290, ftLastWriteTime.dwHighDateTime=0x1d2dda4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="AddIns", cAlternateFileName="")) returned 1 [0078.703] FindNextFileW (in: hFindFile=0x381c80, lpFindFileData=0x31e47c | out: lpFindFileData=0x31e47c*(dwFileAttributes=0x2014, ftCreationTime.dwLowDateTime=0x28cff640, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28cff640, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xea43994d, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Credentials", cAlternateFileName="CREDEN~1")) returned 1 [0078.703] FindNextFileW (in: hFindFile=0x381c80, lpFindFileData=0x31e47c | out: lpFindFileData=0x31e47c*(dwFileAttributes=0x2014, ftCreationTime.dwLowDateTime=0x28cff640, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28cff640, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x160a67d7, ftLastWriteTime.dwHighDateTime=0x1cb8927, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Crypto", cAlternateFileName="")) returned 1 [0078.704] FindNextFileW (in: hFindFile=0x381c80, lpFindFileData=0x31e47c | out: lpFindFileData=0x31e47c*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x4f766d30, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0x4f766d30, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0x4f766d30, ftLastWriteTime.dwHighDateTime=0x1d2dda4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Document Building Blocks", cAlternateFileName="DOCUME~1")) returned 1 [0078.704] FindNextFileW (in: hFindFile=0x381c80, lpFindFileData=0x31e47c | out: lpFindFileData=0x31e47c*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x1c1e0470, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xd01394e0, ftLastAccessTime.dwHighDateTime=0x1d301bc, ftLastWriteTime.dwLowDateTime=0xd01394e0, ftLastWriteTime.dwHighDateTime=0x1d301bc, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Excel", cAlternateFileName="")) returned 1 [0078.704] FindNextFileW (in: hFindFile=0x381c80, lpFindFileData=0x31e47c | out: lpFindFileData=0x31e47c*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xcd72eaa0, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0xcd72eaa0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0xcd72eaa0, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="IME12", cAlternateFileName="")) returned 1 [0078.704] FindNextFileW (in: hFindFile=0x381c80, lpFindFileData=0x31e47c | out: lpFindFileData=0x31e47c*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xcd72eaa0, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0xcd72eaa0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0xcd72eaa0, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="IMJP12", cAlternateFileName="")) returned 1 [0078.704] FindNextFileW (in: hFindFile=0x381c80, lpFindFileData=0x31e47c | out: lpFindFileData=0x31e47c*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xcd72eaa0, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0xcd72eaa0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0xcd72eaa0, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="IMJP8_1", cAlternateFileName="")) returned 1 [0078.704] FindNextFileW (in: hFindFile=0x381c80, lpFindFileData=0x31e47c | out: lpFindFileData=0x31e47c*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xcd72eaa0, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0xcd72eaa0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0xcd72eaa0, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="IMJP9_0", cAlternateFileName="")) returned 1 [0078.704] FindNextFileW (in: hFindFile=0x381c80, lpFindFileData=0x31e47c | out: lpFindFileData=0x31e47c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x28cff640, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x54b77470, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x54b77470, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Internet Explorer", cAlternateFileName="INTERN~1")) returned 1 [0078.704] FindNextFileW (in: hFindFile=0x381c80, lpFindFileData=0x31e47c | out: lpFindFileData=0x31e47c*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x2f5d6350, ftCreationTime.dwHighDateTime=0x1d2fa9b, ftLastAccessTime.dwLowDateTime=0x2f5d6350, ftLastAccessTime.dwHighDateTime=0x1d2fa9b, ftLastWriteTime.dwLowDateTime=0x2f5d6350, ftLastWriteTime.dwHighDateTime=0x1d2fa9b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="MMC", cAlternateFileName="")) returned 1 [0078.704] FindNextFileW (in: hFindFile=0x381c80, lpFindFileData=0x31e47c | out: lpFindFileData=0x31e47c*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x8d940a0, ftCreationTime.dwHighDateTime=0x1d305fe, ftLastAccessTime.dwLowDateTime=0x8d940a0, ftLastAccessTime.dwHighDateTime=0x1d305fe, ftLastWriteTime.dwLowDateTime=0x8d940a0, ftLastWriteTime.dwHighDateTime=0x1d305fe, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="MS Project", cAlternateFileName="MSPROJ~1")) returned 1 [0078.704] FindNextFileW (in: hFindFile=0x381c80, lpFindFileData=0x31e47c | out: lpFindFileData=0x31e47c*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x31a325d0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x31a325d0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x31a325d0, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Network", cAlternateFileName="")) returned 1 [0078.704] FindNextFileW (in: hFindFile=0x381c80, lpFindFileData=0x31e47c | out: lpFindFileData=0x31e47c*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x43c8ae30, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0x5dae0390, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0x5dae0390, ftLastWriteTime.dwHighDateTime=0x1d2dda4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Office", cAlternateFileName="")) returned 1 [0078.704] FindNextFileW (in: hFindFile=0x381c80, lpFindFileData=0x31e47c | out: lpFindFileData=0x31e47c*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x5c734300, ftCreationTime.dwHighDateTime=0x1d2fad7, ftLastAccessTime.dwLowDateTime=0x6215c440, ftLastAccessTime.dwHighDateTime=0x1d2fad7, ftLastWriteTime.dwLowDateTime=0x6215c440, ftLastWriteTime.dwHighDateTime=0x1d2fad7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Outlook", cAlternateFileName="")) returned 1 [0078.704] FindNextFileW (in: hFindFile=0x381c80, lpFindFileData=0x31e47c | out: lpFindFileData=0x31e47c*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x33c0ebb0, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0x33c0ebb0, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0x33c0ebb0, ftLastWriteTime.dwHighDateTime=0x1d2dda4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="PowerPoint", cAlternateFileName="POWERP~1")) returned 1 [0078.704] FindNextFileW (in: hFindFile=0x381c80, lpFindFileData=0x31e47c | out: lpFindFileData=0x31e47c*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x510b16f0, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0x510b16f0, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0x510b16f0, ftLastWriteTime.dwHighDateTime=0x1d2dda4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Proof", cAlternateFileName="")) returned 1 [0078.704] FindNextFileW (in: hFindFile=0x381c80, lpFindFileData=0x31e47c | out: lpFindFileData=0x31e47c*(dwFileAttributes=0x2014, ftCreationTime.dwLowDateTime=0x28cff640, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x541f1c70, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x541f1c70, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Protect", cAlternateFileName="")) returned 1 [0078.704] FindNextFileW (in: hFindFile=0x381c80, lpFindFileData=0x31e47c | out: lpFindFileData=0x31e47c*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x43bcc750, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0x43bcc750, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0x43bcc750, ftLastWriteTime.dwHighDateTime=0x1d2dda4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Publisher", cAlternateFileName="PUBLIS~1")) returned 1 [0078.704] FindNextFileW (in: hFindFile=0x381c80, lpFindFileData=0x31e47c | out: lpFindFileData=0x31e47c*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x4bb4c1b0, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xbec39d0, ftLastAccessTime.dwHighDateTime=0x1d3aaba, ftLastWriteTime.dwLowDateTime=0xbec39d0, ftLastWriteTime.dwHighDateTime=0x1d3aaba, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Publisher Building Blocks", cAlternateFileName="PUBLIS~2")) returned 1 [0078.704] FindNextFileW (in: hFindFile=0x381c80, lpFindFileData=0x31e47c | out: lpFindFileData=0x31e47c*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xcd72eaa0, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0xcd72eaa0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0xcd72eaa0, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Speech", cAlternateFileName="")) returned 1 [0078.704] FindNextFileW (in: hFindFile=0x381c80, lpFindFileData=0x31e47c | out: lpFindFileData=0x31e47c*(dwFileAttributes=0x2014, ftCreationTime.dwLowDateTime=0x28cff640, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28cff640, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x96779c3, ftLastWriteTime.dwHighDateTime=0x1cb8927, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="SystemCertificates", cAlternateFileName="SYSTEM~1")) returned 1 [0078.704] FindNextFileW (in: hFindFile=0x381c80, lpFindFileData=0x31e47c | out: lpFindFileData=0x31e47c*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x31d42f10, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0x2795d470, ftLastAccessTime.dwHighDateTime=0x1d3aaba, ftLastWriteTime.dwLowDateTime=0x2795d470, ftLastWriteTime.dwHighDateTime=0x1d3aaba, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Templates", cAlternateFileName="TEMPLA~1")) returned 1 [0078.704] FindNextFileW (in: hFindFile=0x381c80, lpFindFileData=0x31e47c | out: lpFindFileData=0x31e47c*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xbab2410, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xbab2410, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0xbab2410, ftLastWriteTime.dwHighDateTime=0x1d2dda4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="UProof", cAlternateFileName="")) returned 1 [0078.704] FindNextFileW (in: hFindFile=0x381c80, lpFindFileData=0x31e47c | out: lpFindFileData=0x31e47c*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x28cff640, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28cff640, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xf96b9c4c, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Windows", cAlternateFileName="")) returned 1 [0078.704] FindNextFileW (in: hFindFile=0x381c80, lpFindFileData=0x31e47c | out: lpFindFileData=0x31e47c*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x4f71aa70, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0x27c7d150, ftLastAccessTime.dwHighDateTime=0x1d3aaba, ftLastWriteTime.dwLowDateTime=0x27c7d150, ftLastWriteTime.dwHighDateTime=0x1d3aaba, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Word", cAlternateFileName="")) returned 1 [0078.704] FindNextFileW (in: hFindFile=0x381c80, lpFindFileData=0x31e47c | out: lpFindFileData=0x31e47c*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x4f71aa70, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0x27c7d150, ftLastAccessTime.dwHighDateTime=0x1d3aaba, ftLastWriteTime.dwLowDateTime=0x27c7d150, ftLastWriteTime.dwHighDateTime=0x1d3aaba, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Word", cAlternateFileName="")) returned 0 [0078.705] FindClose (in: hFindFile=0x381c80 | out: hFindFile=0x381c80) returned 1 [0078.705] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e704) returned 1 [0078.705] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e710) returned 1 [0078.705] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e744) returned 1 [0078.705] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft", nBufferLength=0x105, lpBuffer=0x31e24c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft", lpFilePart=0x0) returned 0x37 [0078.705] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\", nBufferLength=0x105, lpBuffer=0x31e220, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\", lpFilePart=0x0) returned 0x38 [0078.705] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\*", lpFindFileData=0x31e46c | out: lpFindFileData=0x31e46c*(dwFileAttributes=0x2014, ftCreationTime.dwLowDateTime=0x28cff640, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x8d940a0, ftLastAccessTime.dwHighDateTime=0x1d305fe, ftLastWriteTime.dwLowDateTime=0x8d940a0, ftLastWriteTime.dwHighDateTime=0x1d305fe, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x381c80 [0078.705] FindNextFileW (in: hFindFile=0x381c80, lpFindFileData=0x31e47c | out: lpFindFileData=0x31e47c*(dwFileAttributes=0x2014, ftCreationTime.dwLowDateTime=0x28cff640, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x8d940a0, ftLastAccessTime.dwHighDateTime=0x1d305fe, ftLastWriteTime.dwLowDateTime=0x8d940a0, ftLastWriteTime.dwHighDateTime=0x1d305fe, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0078.705] FindNextFileW (in: hFindFile=0x381c80, lpFindFileData=0x31e47c | out: lpFindFileData=0x31e47c*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x7c36290, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0x7c36290, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0x7c36290, ftLastWriteTime.dwHighDateTime=0x1d2dda4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="AddIns", cAlternateFileName="")) returned 1 [0078.705] FindNextFileW (in: hFindFile=0x381c80, lpFindFileData=0x31e47c | out: lpFindFileData=0x31e47c*(dwFileAttributes=0x2014, ftCreationTime.dwLowDateTime=0x28cff640, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28cff640, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xea43994d, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Credentials", cAlternateFileName="CREDEN~1")) returned 1 [0078.705] FindNextFileW (in: hFindFile=0x381c80, lpFindFileData=0x31e47c | out: lpFindFileData=0x31e47c*(dwFileAttributes=0x2014, ftCreationTime.dwLowDateTime=0x28cff640, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28cff640, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x160a67d7, ftLastWriteTime.dwHighDateTime=0x1cb8927, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Crypto", cAlternateFileName="")) returned 1 [0078.705] FindNextFileW (in: hFindFile=0x381c80, lpFindFileData=0x31e47c | out: lpFindFileData=0x31e47c*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x4f766d30, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0x4f766d30, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0x4f766d30, ftLastWriteTime.dwHighDateTime=0x1d2dda4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Document Building Blocks", cAlternateFileName="DOCUME~1")) returned 1 [0078.705] FindNextFileW (in: hFindFile=0x381c80, lpFindFileData=0x31e47c | out: lpFindFileData=0x31e47c*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x1c1e0470, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xd01394e0, ftLastAccessTime.dwHighDateTime=0x1d301bc, ftLastWriteTime.dwLowDateTime=0xd01394e0, ftLastWriteTime.dwHighDateTime=0x1d301bc, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Excel", cAlternateFileName="")) returned 1 [0078.705] FindNextFileW (in: hFindFile=0x381c80, lpFindFileData=0x31e47c | out: lpFindFileData=0x31e47c*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xcd72eaa0, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0xcd72eaa0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0xcd72eaa0, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="IME12", cAlternateFileName="")) returned 1 [0078.705] FindNextFileW (in: hFindFile=0x381c80, lpFindFileData=0x31e47c | out: lpFindFileData=0x31e47c*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xcd72eaa0, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0xcd72eaa0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0xcd72eaa0, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="IMJP12", cAlternateFileName="")) returned 1 [0078.705] FindNextFileW (in: hFindFile=0x381c80, lpFindFileData=0x31e47c | out: lpFindFileData=0x31e47c*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xcd72eaa0, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0xcd72eaa0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0xcd72eaa0, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="IMJP8_1", cAlternateFileName="")) returned 1 [0078.705] FindNextFileW (in: hFindFile=0x381c80, lpFindFileData=0x31e47c | out: lpFindFileData=0x31e47c*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xcd72eaa0, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0xcd72eaa0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0xcd72eaa0, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="IMJP9_0", cAlternateFileName="")) returned 1 [0078.705] FindNextFileW (in: hFindFile=0x381c80, lpFindFileData=0x31e47c | out: lpFindFileData=0x31e47c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x28cff640, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x54b77470, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x54b77470, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Internet Explorer", cAlternateFileName="INTERN~1")) returned 1 [0078.705] FindNextFileW (in: hFindFile=0x381c80, lpFindFileData=0x31e47c | out: lpFindFileData=0x31e47c*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x2f5d6350, ftCreationTime.dwHighDateTime=0x1d2fa9b, ftLastAccessTime.dwLowDateTime=0x2f5d6350, ftLastAccessTime.dwHighDateTime=0x1d2fa9b, ftLastWriteTime.dwLowDateTime=0x2f5d6350, ftLastWriteTime.dwHighDateTime=0x1d2fa9b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="MMC", cAlternateFileName="")) returned 1 [0078.705] FindNextFileW (in: hFindFile=0x381c80, lpFindFileData=0x31e47c | out: lpFindFileData=0x31e47c*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x8d940a0, ftCreationTime.dwHighDateTime=0x1d305fe, ftLastAccessTime.dwLowDateTime=0x8d940a0, ftLastAccessTime.dwHighDateTime=0x1d305fe, ftLastWriteTime.dwLowDateTime=0x8d940a0, ftLastWriteTime.dwHighDateTime=0x1d305fe, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="MS Project", cAlternateFileName="MSPROJ~1")) returned 1 [0078.705] FindNextFileW (in: hFindFile=0x381c80, lpFindFileData=0x31e47c | out: lpFindFileData=0x31e47c*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x31a325d0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x31a325d0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x31a325d0, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Network", cAlternateFileName="")) returned 1 [0078.706] FindNextFileW (in: hFindFile=0x381c80, lpFindFileData=0x31e47c | out: lpFindFileData=0x31e47c*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x43c8ae30, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0x5dae0390, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0x5dae0390, ftLastWriteTime.dwHighDateTime=0x1d2dda4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Office", cAlternateFileName="")) returned 1 [0078.706] FindNextFileW (in: hFindFile=0x381c80, lpFindFileData=0x31e47c | out: lpFindFileData=0x31e47c*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x5c734300, ftCreationTime.dwHighDateTime=0x1d2fad7, ftLastAccessTime.dwLowDateTime=0x6215c440, ftLastAccessTime.dwHighDateTime=0x1d2fad7, ftLastWriteTime.dwLowDateTime=0x6215c440, ftLastWriteTime.dwHighDateTime=0x1d2fad7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Outlook", cAlternateFileName="")) returned 1 [0078.706] FindNextFileW (in: hFindFile=0x381c80, lpFindFileData=0x31e47c | out: lpFindFileData=0x31e47c*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x33c0ebb0, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0x33c0ebb0, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0x33c0ebb0, ftLastWriteTime.dwHighDateTime=0x1d2dda4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="PowerPoint", cAlternateFileName="POWERP~1")) returned 1 [0078.706] FindNextFileW (in: hFindFile=0x381c80, lpFindFileData=0x31e47c | out: lpFindFileData=0x31e47c*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x510b16f0, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0x510b16f0, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0x510b16f0, ftLastWriteTime.dwHighDateTime=0x1d2dda4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Proof", cAlternateFileName="")) returned 1 [0078.706] FindNextFileW (in: hFindFile=0x381c80, lpFindFileData=0x31e47c | out: lpFindFileData=0x31e47c*(dwFileAttributes=0x2014, ftCreationTime.dwLowDateTime=0x28cff640, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x541f1c70, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x541f1c70, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Protect", cAlternateFileName="")) returned 1 [0078.706] FindNextFileW (in: hFindFile=0x381c80, lpFindFileData=0x31e47c | out: lpFindFileData=0x31e47c*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x43bcc750, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0x43bcc750, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0x43bcc750, ftLastWriteTime.dwHighDateTime=0x1d2dda4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Publisher", cAlternateFileName="PUBLIS~1")) returned 1 [0078.706] FindNextFileW (in: hFindFile=0x381c80, lpFindFileData=0x31e47c | out: lpFindFileData=0x31e47c*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x4bb4c1b0, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xbec39d0, ftLastAccessTime.dwHighDateTime=0x1d3aaba, ftLastWriteTime.dwLowDateTime=0xbec39d0, ftLastWriteTime.dwHighDateTime=0x1d3aaba, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Publisher Building Blocks", cAlternateFileName="PUBLIS~2")) returned 1 [0078.706] FindNextFileW (in: hFindFile=0x381c80, lpFindFileData=0x31e47c | out: lpFindFileData=0x31e47c*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xcd72eaa0, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0xcd72eaa0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0xcd72eaa0, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Speech", cAlternateFileName="")) returned 1 [0078.706] FindNextFileW (in: hFindFile=0x381c80, lpFindFileData=0x31e47c | out: lpFindFileData=0x31e47c*(dwFileAttributes=0x2014, ftCreationTime.dwLowDateTime=0x28cff640, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28cff640, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x96779c3, ftLastWriteTime.dwHighDateTime=0x1cb8927, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="SystemCertificates", cAlternateFileName="SYSTEM~1")) returned 1 [0078.706] FindNextFileW (in: hFindFile=0x381c80, lpFindFileData=0x31e47c | out: lpFindFileData=0x31e47c*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x31d42f10, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0x2795d470, ftLastAccessTime.dwHighDateTime=0x1d3aaba, ftLastWriteTime.dwLowDateTime=0x2795d470, ftLastWriteTime.dwHighDateTime=0x1d3aaba, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Templates", cAlternateFileName="TEMPLA~1")) returned 1 [0078.706] FindNextFileW (in: hFindFile=0x381c80, lpFindFileData=0x31e47c | out: lpFindFileData=0x31e47c*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xbab2410, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xbab2410, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0xbab2410, ftLastWriteTime.dwHighDateTime=0x1d2dda4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="UProof", cAlternateFileName="")) returned 1 [0078.706] FindNextFileW (in: hFindFile=0x381c80, lpFindFileData=0x31e47c | out: lpFindFileData=0x31e47c*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x28cff640, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28cff640, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xf96b9c4c, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Windows", cAlternateFileName="")) returned 1 [0078.706] FindNextFileW (in: hFindFile=0x381c80, lpFindFileData=0x31e47c | out: lpFindFileData=0x31e47c*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x4f71aa70, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0x27c7d150, ftLastAccessTime.dwHighDateTime=0x1d3aaba, ftLastWriteTime.dwLowDateTime=0x27c7d150, ftLastWriteTime.dwHighDateTime=0x1d3aaba, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Word", cAlternateFileName="")) returned 1 [0078.706] FindNextFileW (in: hFindFile=0x381c80, lpFindFileData=0x31e47c | out: lpFindFileData=0x31e47c*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0078.706] FindClose (in: hFindFile=0x381c80 | out: hFindFile=0x381c80) returned 1 [0078.706] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e704) returned 1 [0078.706] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e710) returned 1 [0078.706] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e6cc) returned 1 [0078.706] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\AddIns", nBufferLength=0x105, lpBuffer=0x31e1d4, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\AddIns", lpFilePart=0x0) returned 0x3e [0078.706] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\AddIns\\", nBufferLength=0x105, lpBuffer=0x31e1a8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\AddIns\\", lpFilePart=0x0) returned 0x3f [0078.706] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\AddIns\\*", lpFindFileData=0x31e3f4 | out: lpFindFileData=0x31e3f4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x7c36290, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0x7c36290, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0x7c36290, ftLastWriteTime.dwHighDateTime=0x1d2dda4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x381c80 [0078.707] FindNextFileW (in: hFindFile=0x381c80, lpFindFileData=0x31e404 | out: lpFindFileData=0x31e404*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x7c36290, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0x7c36290, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0x7c36290, ftLastWriteTime.dwHighDateTime=0x1d2dda4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0078.707] FindNextFileW (in: hFindFile=0x381c80, lpFindFileData=0x31e404 | out: lpFindFileData=0x31e404*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x7c36290, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0x7c36290, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0x7c36290, ftLastWriteTime.dwHighDateTime=0x1d2dda4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 0 [0078.708] FindClose (in: hFindFile=0x381c80 | out: hFindFile=0x381c80) returned 1 [0078.708] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e68c) returned 1 [0078.708] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e698) returned 1 [0078.708] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e6cc) returned 1 [0078.708] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\AddIns", nBufferLength=0x105, lpBuffer=0x31e1d4, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\AddIns", lpFilePart=0x0) returned 0x3e [0078.708] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\AddIns\\", nBufferLength=0x105, lpBuffer=0x31e1a8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\AddIns\\", lpFilePart=0x0) returned 0x3f [0078.708] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\AddIns\\*", lpFindFileData=0x31e3f4 | out: lpFindFileData=0x31e3f4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x7c36290, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0x7c36290, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0x7c36290, ftLastWriteTime.dwHighDateTime=0x1d2dda4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x381c80 [0078.708] FindNextFileW (in: hFindFile=0x381c80, lpFindFileData=0x31e404 | out: lpFindFileData=0x31e404*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x7c36290, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0x7c36290, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0x7c36290, ftLastWriteTime.dwHighDateTime=0x1d2dda4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0078.708] FindNextFileW (in: hFindFile=0x381c80, lpFindFileData=0x31e404 | out: lpFindFileData=0x31e404*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x7c36290, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0x7c36290, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0x7c36290, ftLastWriteTime.dwHighDateTime=0x1d2dda4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 0 [0078.708] FindClose (in: hFindFile=0x381c80 | out: hFindFile=0x381c80) returned 1 [0078.708] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e68c) returned 1 [0078.708] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e698) returned 1 [0078.708] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e6cc) returned 1 [0078.708] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Credentials", nBufferLength=0x105, lpBuffer=0x31e1d4, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Credentials", lpFilePart=0x0) returned 0x43 [0078.708] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Credentials\\", nBufferLength=0x105, lpBuffer=0x31e1a8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Credentials\\", lpFilePart=0x0) returned 0x44 [0078.708] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Credentials\\*", lpFindFileData=0x31e3f4 | out: lpFindFileData=0x31e3f4*(dwFileAttributes=0x2014, ftCreationTime.dwLowDateTime=0x28cff640, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28cff640, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xea43994d, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x381c80 [0078.708] FindNextFileW (in: hFindFile=0x381c80, lpFindFileData=0x31e404 | out: lpFindFileData=0x31e404*(dwFileAttributes=0x2014, ftCreationTime.dwLowDateTime=0x28cff640, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28cff640, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xea43994d, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0078.708] FindNextFileW (in: hFindFile=0x381c80, lpFindFileData=0x31e404 | out: lpFindFileData=0x31e404*(dwFileAttributes=0x2014, ftCreationTime.dwLowDateTime=0x28cff640, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28cff640, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xea43994d, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 0 [0078.709] FindClose (in: hFindFile=0x381c80 | out: hFindFile=0x381c80) returned 1 [0078.709] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e68c) returned 1 [0078.709] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e698) returned 1 [0078.709] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e6cc) returned 1 [0078.709] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Credentials", nBufferLength=0x105, lpBuffer=0x31e1d4, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Credentials", lpFilePart=0x0) returned 0x43 [0078.709] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Credentials\\", nBufferLength=0x105, lpBuffer=0x31e1a8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Credentials\\", lpFilePart=0x0) returned 0x44 [0078.709] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Credentials\\*", lpFindFileData=0x31e3f4 | out: lpFindFileData=0x31e3f4*(dwFileAttributes=0x2014, ftCreationTime.dwLowDateTime=0x28cff640, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28cff640, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xea43994d, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x381c80 [0078.709] FindNextFileW (in: hFindFile=0x381c80, lpFindFileData=0x31e404 | out: lpFindFileData=0x31e404*(dwFileAttributes=0x2014, ftCreationTime.dwLowDateTime=0x28cff640, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28cff640, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xea43994d, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0078.709] FindNextFileW (in: hFindFile=0x381c80, lpFindFileData=0x31e404 | out: lpFindFileData=0x31e404*(dwFileAttributes=0x2014, ftCreationTime.dwLowDateTime=0x28cff640, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28cff640, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xea43994d, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 0 [0078.709] FindClose (in: hFindFile=0x381c80 | out: hFindFile=0x381c80) returned 1 [0078.709] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e68c) returned 1 [0078.709] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e698) returned 1 [0078.709] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e6cc) returned 1 [0078.709] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Crypto", nBufferLength=0x105, lpBuffer=0x31e1d4, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Crypto", lpFilePart=0x0) returned 0x3e [0078.709] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Crypto\\", nBufferLength=0x105, lpBuffer=0x31e1a8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Crypto\\", lpFilePart=0x0) returned 0x3f [0078.709] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Crypto\\*", lpFindFileData=0x31e3f4 | out: lpFindFileData=0x31e3f4*(dwFileAttributes=0x2014, ftCreationTime.dwLowDateTime=0x28cff640, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28cff640, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x160a67d7, ftLastWriteTime.dwHighDateTime=0x1cb8927, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x381c80 [0078.710] FindNextFileW (in: hFindFile=0x381c80, lpFindFileData=0x31e404 | out: lpFindFileData=0x31e404*(dwFileAttributes=0x2014, ftCreationTime.dwLowDateTime=0x28cff640, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28cff640, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x160a67d7, ftLastWriteTime.dwHighDateTime=0x1cb8927, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0078.710] FindNextFileW (in: hFindFile=0x381c80, lpFindFileData=0x31e404 | out: lpFindFileData=0x31e404*(dwFileAttributes=0x2014, ftCreationTime.dwLowDateTime=0x28cff640, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x681f1360, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x681f1360, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="RSA", cAlternateFileName="")) returned 1 [0078.710] FindNextFileW (in: hFindFile=0x381c80, lpFindFileData=0x31e404 | out: lpFindFileData=0x31e404*(dwFileAttributes=0x2014, ftCreationTime.dwLowDateTime=0x28cff640, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x681f1360, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x681f1360, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="RSA", cAlternateFileName="")) returned 0 [0078.710] FindClose (in: hFindFile=0x381c80 | out: hFindFile=0x381c80) returned 1 [0078.710] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e68c) returned 1 [0078.710] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e698) returned 1 [0078.710] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e6cc) returned 1 [0078.710] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Crypto", nBufferLength=0x105, lpBuffer=0x31e1d4, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Crypto", lpFilePart=0x0) returned 0x3e [0078.710] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Crypto\\", nBufferLength=0x105, lpBuffer=0x31e1a8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Crypto\\", lpFilePart=0x0) returned 0x3f [0078.710] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Crypto\\*", lpFindFileData=0x31e3f4 | out: lpFindFileData=0x31e3f4*(dwFileAttributes=0x2014, ftCreationTime.dwLowDateTime=0x28cff640, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28cff640, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x160a67d7, ftLastWriteTime.dwHighDateTime=0x1cb8927, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x381c80 [0078.710] FindNextFileW (in: hFindFile=0x381c80, lpFindFileData=0x31e404 | out: lpFindFileData=0x31e404*(dwFileAttributes=0x2014, ftCreationTime.dwLowDateTime=0x28cff640, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28cff640, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x160a67d7, ftLastWriteTime.dwHighDateTime=0x1cb8927, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0078.710] FindNextFileW (in: hFindFile=0x381c80, lpFindFileData=0x31e404 | out: lpFindFileData=0x31e404*(dwFileAttributes=0x2014, ftCreationTime.dwLowDateTime=0x28cff640, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x681f1360, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x681f1360, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="RSA", cAlternateFileName="")) returned 1 [0078.710] FindNextFileW (in: hFindFile=0x381c80, lpFindFileData=0x31e404 | out: lpFindFileData=0x31e404*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0078.710] FindClose (in: hFindFile=0x381c80 | out: hFindFile=0x381c80) returned 1 [0078.710] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e68c) returned 1 [0078.710] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e698) returned 1 [0078.710] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e654) returned 1 [0078.711] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Crypto\\RSA", nBufferLength=0x105, lpBuffer=0x31e15c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Crypto\\RSA", lpFilePart=0x0) returned 0x42 [0078.711] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Crypto\\RSA\\", nBufferLength=0x105, lpBuffer=0x31e130, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Crypto\\RSA\\", lpFilePart=0x0) returned 0x43 [0078.711] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Crypto\\RSA\\*", lpFindFileData=0x31e37c | out: lpFindFileData=0x31e37c*(dwFileAttributes=0x2014, ftCreationTime.dwLowDateTime=0x28cff640, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x681f1360, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x681f1360, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x381c80 [0078.711] FindNextFileW (in: hFindFile=0x381c80, lpFindFileData=0x31e38c | out: lpFindFileData=0x31e38c*(dwFileAttributes=0x2014, ftCreationTime.dwLowDateTime=0x28cff640, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x681f1360, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x681f1360, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0078.711] FindNextFileW (in: hFindFile=0x381c80, lpFindFileData=0x31e38c | out: lpFindFileData=0x31e38c*(dwFileAttributes=0x2014, ftCreationTime.dwLowDateTime=0x681f1360, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0xa1e34990, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0xa1e34990, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="S-1-5-21-3388679973-3930757225-3770151564-1000", cAlternateFileName="S-1-5-~1")) returned 1 [0078.711] FindNextFileW (in: hFindFile=0x381c80, lpFindFileData=0x31e38c | out: lpFindFileData=0x31e38c*(dwFileAttributes=0x2014, ftCreationTime.dwLowDateTime=0x681f1360, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0xa1e34990, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0xa1e34990, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="S-1-5-21-3388679973-3930757225-3770151564-1000", cAlternateFileName="S-1-5-~1")) returned 0 [0078.711] FindClose (in: hFindFile=0x381c80 | out: hFindFile=0x381c80) returned 1 [0078.711] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e614) returned 1 [0078.711] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e620) returned 1 [0078.711] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e654) returned 1 [0078.711] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Crypto\\RSA", nBufferLength=0x105, lpBuffer=0x31e15c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Crypto\\RSA", lpFilePart=0x0) returned 0x42 [0078.711] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Crypto\\RSA\\", nBufferLength=0x105, lpBuffer=0x31e130, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Crypto\\RSA\\", lpFilePart=0x0) returned 0x43 [0078.711] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Crypto\\RSA\\*", lpFindFileData=0x31e37c | out: lpFindFileData=0x31e37c*(dwFileAttributes=0x2014, ftCreationTime.dwLowDateTime=0x28cff640, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x681f1360, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x681f1360, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x381c80 [0078.711] FindNextFileW (in: hFindFile=0x381c80, lpFindFileData=0x31e38c | out: lpFindFileData=0x31e38c*(dwFileAttributes=0x2014, ftCreationTime.dwLowDateTime=0x28cff640, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x681f1360, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x681f1360, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0078.711] FindNextFileW (in: hFindFile=0x381c80, lpFindFileData=0x31e38c | out: lpFindFileData=0x31e38c*(dwFileAttributes=0x2014, ftCreationTime.dwLowDateTime=0x681f1360, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0xa1e34990, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0xa1e34990, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="S-1-5-21-3388679973-3930757225-3770151564-1000", cAlternateFileName="S-1-5-~1")) returned 1 [0078.711] FindNextFileW (in: hFindFile=0x381c80, lpFindFileData=0x31e38c | out: lpFindFileData=0x31e38c*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0078.711] FindClose (in: hFindFile=0x381c80 | out: hFindFile=0x381c80) returned 1 [0078.712] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e614) returned 1 [0078.712] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e620) returned 1 [0078.712] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e5dc) returned 1 [0078.712] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Crypto\\RSA\\S-1-5-21-3388679973-3930757225-3770151564-1000", nBufferLength=0x105, lpBuffer=0x31e0e4, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Crypto\\RSA\\S-1-5-21-3388679973-3930757225-3770151564-1000", lpFilePart=0x0) returned 0x71 [0078.712] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Crypto\\RSA\\S-1-5-21-3388679973-3930757225-3770151564-1000\\", nBufferLength=0x105, lpBuffer=0x31e0b8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Crypto\\RSA\\S-1-5-21-3388679973-3930757225-3770151564-1000\\", lpFilePart=0x0) returned 0x72 [0078.712] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Crypto\\RSA\\S-1-5-21-3388679973-3930757225-3770151564-1000\\*", lpFindFileData=0x31e304 | out: lpFindFileData=0x31e304*(dwFileAttributes=0x2014, ftCreationTime.dwLowDateTime=0x681f1360, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0xa1e34990, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0xa1e34990, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x381c80 [0078.714] FindNextFileW (in: hFindFile=0x381c80, lpFindFileData=0x31e314 | out: lpFindFileData=0x31e314*(dwFileAttributes=0x2014, ftCreationTime.dwLowDateTime=0x681f1360, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0xa1e34990, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0xa1e34990, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0078.714] FindNextFileW (in: hFindFile=0x381c80, lpFindFileData=0x31e314 | out: lpFindFileData=0x31e314*(dwFileAttributes=0x2024, ftCreationTime.dwLowDateTime=0xa1e34990, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0xa1e34990, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0xa1e34990, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x2d, dwReserved0=0x0, dwReserved1=0x0, cFileName="83aa4cc77f591dfc2374580bbd95f6ba_0303d5b4-ffe9-470e-9dd8-7d9ec416e53f", cAlternateFileName="83AA4C~1")) returned 1 [0078.714] FindNextFileW (in: hFindFile=0x381c80, lpFindFileData=0x31e314 | out: lpFindFileData=0x31e314*(dwFileAttributes=0x2024, ftCreationTime.dwLowDateTime=0x681f1360, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x681f1360, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x681f1360, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x57, dwReserved0=0x0, dwReserved1=0x0, cFileName="932a2db58c237abd381d22df4c63a04a_0303d5b4-ffe9-470e-9dd8-7d9ec416e53f", cAlternateFileName="932A2D~1")) returned 1 [0078.714] FindNextFileW (in: hFindFile=0x381c80, lpFindFileData=0x31e314 | out: lpFindFileData=0x31e314*(dwFileAttributes=0x2024, ftCreationTime.dwLowDateTime=0xb0aa1fc0, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xb0aa1fc0, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0xb0aa1fc0, ftLastWriteTime.dwHighDateTime=0x1d2dda4, nFileSizeHigh=0x0, nFileSizeLow=0x3d, dwReserved0=0x0, dwReserved1=0x0, cFileName="fda992c8d564f97e48410a19a2e459f6_0303d5b4-ffe9-470e-9dd8-7d9ec416e53f", cAlternateFileName="FDA992~1")) returned 1 [0078.714] FindNextFileW (in: hFindFile=0x381c80, lpFindFileData=0x31e314 | out: lpFindFileData=0x31e314*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0078.714] FindClose (in: hFindFile=0x381c80 | out: hFindFile=0x381c80) returned 1 [0078.715] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e59c) returned 1 [0078.715] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e5a8) returned 1 [0078.715] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e5dc) returned 1 [0078.715] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Crypto\\RSA\\S-1-5-21-3388679973-3930757225-3770151564-1000", nBufferLength=0x105, lpBuffer=0x31e0e4, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Crypto\\RSA\\S-1-5-21-3388679973-3930757225-3770151564-1000", lpFilePart=0x0) returned 0x71 [0078.715] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Crypto\\RSA\\S-1-5-21-3388679973-3930757225-3770151564-1000\\", nBufferLength=0x105, lpBuffer=0x31e0b8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Crypto\\RSA\\S-1-5-21-3388679973-3930757225-3770151564-1000\\", lpFilePart=0x0) returned 0x72 [0078.715] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Crypto\\RSA\\S-1-5-21-3388679973-3930757225-3770151564-1000\\*", lpFindFileData=0x31e304 | out: lpFindFileData=0x31e304*(dwFileAttributes=0x2014, ftCreationTime.dwLowDateTime=0x681f1360, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0xa1e34990, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0xa1e34990, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x381c80 [0078.716] FindNextFileW (in: hFindFile=0x381c80, lpFindFileData=0x31e314 | out: lpFindFileData=0x31e314*(dwFileAttributes=0x2014, ftCreationTime.dwLowDateTime=0x681f1360, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0xa1e34990, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0xa1e34990, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0078.716] FindNextFileW (in: hFindFile=0x381c80, lpFindFileData=0x31e314 | out: lpFindFileData=0x31e314*(dwFileAttributes=0x2024, ftCreationTime.dwLowDateTime=0xa1e34990, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0xa1e34990, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0xa1e34990, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x2d, dwReserved0=0x0, dwReserved1=0x0, cFileName="83aa4cc77f591dfc2374580bbd95f6ba_0303d5b4-ffe9-470e-9dd8-7d9ec416e53f", cAlternateFileName="83AA4C~1")) returned 1 [0078.716] FindNextFileW (in: hFindFile=0x381c80, lpFindFileData=0x31e314 | out: lpFindFileData=0x31e314*(dwFileAttributes=0x2024, ftCreationTime.dwLowDateTime=0x681f1360, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x681f1360, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x681f1360, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x57, dwReserved0=0x0, dwReserved1=0x0, cFileName="932a2db58c237abd381d22df4c63a04a_0303d5b4-ffe9-470e-9dd8-7d9ec416e53f", cAlternateFileName="932A2D~1")) returned 1 [0078.716] FindNextFileW (in: hFindFile=0x381c80, lpFindFileData=0x31e314 | out: lpFindFileData=0x31e314*(dwFileAttributes=0x2024, ftCreationTime.dwLowDateTime=0xb0aa1fc0, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xb0aa1fc0, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0xb0aa1fc0, ftLastWriteTime.dwHighDateTime=0x1d2dda4, nFileSizeHigh=0x0, nFileSizeLow=0x3d, dwReserved0=0x0, dwReserved1=0x0, cFileName="fda992c8d564f97e48410a19a2e459f6_0303d5b4-ffe9-470e-9dd8-7d9ec416e53f", cAlternateFileName="FDA992~1")) returned 1 [0078.716] FindNextFileW (in: hFindFile=0x381c80, lpFindFileData=0x31e314 | out: lpFindFileData=0x31e314*(dwFileAttributes=0x2024, ftCreationTime.dwLowDateTime=0xb0aa1fc0, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xb0aa1fc0, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0xb0aa1fc0, ftLastWriteTime.dwHighDateTime=0x1d2dda4, nFileSizeHigh=0x0, nFileSizeLow=0x3d, dwReserved0=0x0, dwReserved1=0x0, cFileName="fda992c8d564f97e48410a19a2e459f6_0303d5b4-ffe9-470e-9dd8-7d9ec416e53f", cAlternateFileName="FDA992~1")) returned 0 [0078.716] FindClose (in: hFindFile=0x381c80 | out: hFindFile=0x381c80) returned 1 [0078.717] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e59c) returned 1 [0078.717] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e5a8) returned 1 [0078.717] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e6cc) returned 1 [0078.717] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Document Building Blocks", nBufferLength=0x105, lpBuffer=0x31e1d4, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Document Building Blocks", lpFilePart=0x0) returned 0x50 [0078.717] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Document Building Blocks\\", nBufferLength=0x105, lpBuffer=0x31e1a8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Document Building Blocks\\", lpFilePart=0x0) returned 0x51 [0078.717] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Document Building Blocks\\*", lpFindFileData=0x31e3f4 | out: lpFindFileData=0x31e3f4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x4f766d30, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0x4f766d30, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0x4f766d30, ftLastWriteTime.dwHighDateTime=0x1d2dda4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x381c80 [0078.717] FindNextFileW (in: hFindFile=0x381c80, lpFindFileData=0x31e404 | out: lpFindFileData=0x31e404*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x4f766d30, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0x4f766d30, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0x4f766d30, ftLastWriteTime.dwHighDateTime=0x1d2dda4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0078.717] FindNextFileW (in: hFindFile=0x381c80, lpFindFileData=0x31e404 | out: lpFindFileData=0x31e404*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x4f766d30, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0x4f766d30, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0x4f766d30, ftLastWriteTime.dwHighDateTime=0x1d2dda4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="1033", cAlternateFileName="")) returned 1 [0078.718] FindNextFileW (in: hFindFile=0x381c80, lpFindFileData=0x31e404 | out: lpFindFileData=0x31e404*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x4f766d30, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0x4f766d30, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0x4f766d30, ftLastWriteTime.dwHighDateTime=0x1d2dda4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="1033", cAlternateFileName="")) returned 0 [0078.718] FindClose (in: hFindFile=0x381c80 | out: hFindFile=0x381c80) returned 1 [0078.718] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e68c) returned 1 [0078.718] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e698) returned 1 [0078.718] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e6cc) returned 1 [0078.718] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Document Building Blocks", nBufferLength=0x105, lpBuffer=0x31e1d4, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Document Building Blocks", lpFilePart=0x0) returned 0x50 [0078.718] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Document Building Blocks\\", nBufferLength=0x105, lpBuffer=0x31e1a8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Document Building Blocks\\", lpFilePart=0x0) returned 0x51 [0078.718] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Document Building Blocks\\*", lpFindFileData=0x31e3f4 | out: lpFindFileData=0x31e3f4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x4f766d30, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0x4f766d30, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0x4f766d30, ftLastWriteTime.dwHighDateTime=0x1d2dda4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x381c80 [0078.718] FindNextFileW (in: hFindFile=0x381c80, lpFindFileData=0x31e404 | out: lpFindFileData=0x31e404*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x4f766d30, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0x4f766d30, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0x4f766d30, ftLastWriteTime.dwHighDateTime=0x1d2dda4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0078.718] FindNextFileW (in: hFindFile=0x381c80, lpFindFileData=0x31e404 | out: lpFindFileData=0x31e404*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x4f766d30, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0x4f766d30, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0x4f766d30, ftLastWriteTime.dwHighDateTime=0x1d2dda4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="1033", cAlternateFileName="")) returned 1 [0078.718] FindNextFileW (in: hFindFile=0x381c80, lpFindFileData=0x31e404 | out: lpFindFileData=0x31e404*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0078.718] FindClose (in: hFindFile=0x381c80 | out: hFindFile=0x381c80) returned 1 [0078.718] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e68c) returned 1 [0078.718] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e698) returned 1 [0078.718] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e654) returned 1 [0078.718] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Document Building Blocks\\1033", nBufferLength=0x105, lpBuffer=0x31e15c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Document Building Blocks\\1033", lpFilePart=0x0) returned 0x55 [0078.719] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Document Building Blocks\\1033\\", nBufferLength=0x105, lpBuffer=0x31e130, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Document Building Blocks\\1033\\", lpFilePart=0x0) returned 0x56 [0078.719] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Document Building Blocks\\1033\\*", lpFindFileData=0x31e37c | out: lpFindFileData=0x31e37c*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x4f766d30, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0x4f766d30, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0x4f766d30, ftLastWriteTime.dwHighDateTime=0x1d2dda4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x381c80 [0078.719] FindNextFileW (in: hFindFile=0x381c80, lpFindFileData=0x31e38c | out: lpFindFileData=0x31e38c*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x4f766d30, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0x4f766d30, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0x4f766d30, ftLastWriteTime.dwHighDateTime=0x1d2dda4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0078.719] FindClose (in: hFindFile=0x381c80 | out: hFindFile=0x381c80) returned 1 [0078.719] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e614) returned 1 [0078.719] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e620) returned 1 [0078.719] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e654) returned 1 [0078.719] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Document Building Blocks\\1033", nBufferLength=0x105, lpBuffer=0x31e15c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Document Building Blocks\\1033", lpFilePart=0x0) returned 0x55 [0078.719] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Document Building Blocks\\1033\\", nBufferLength=0x105, lpBuffer=0x31e130, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Document Building Blocks\\1033\\", lpFilePart=0x0) returned 0x56 [0078.719] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Document Building Blocks\\1033\\*", lpFindFileData=0x31e37c | out: lpFindFileData=0x31e37c*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x4f766d30, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0x4f766d30, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0x4f766d30, ftLastWriteTime.dwHighDateTime=0x1d2dda4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x381c80 [0078.719] FindClose (in: hFindFile=0x381c80 | out: hFindFile=0x381c80) returned 1 [0078.720] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e614) returned 1 [0078.720] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e620) returned 1 [0078.720] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e5dc) returned 1 [0078.720] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Document Building Blocks\\1033\\14", nBufferLength=0x105, lpBuffer=0x31e0e4, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Document Building Blocks\\1033\\14", lpFilePart=0x0) returned 0x58 [0078.720] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Document Building Blocks\\1033\\14\\", nBufferLength=0x105, lpBuffer=0x31e0b8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Document Building Blocks\\1033\\14\\", lpFilePart=0x0) returned 0x59 [0078.720] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Document Building Blocks\\1033\\14\\*", lpFindFileData=0x31e304 | out: lpFindFileData=0x31e304*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x4f766d30, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0x4f766d30, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0x4f766d30, ftLastWriteTime.dwHighDateTime=0x1d2dda4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x381c80 [0078.720] FindClose (in: hFindFile=0x381c80 | out: hFindFile=0x381c80) returned 1 [0078.720] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e59c) returned 1 [0078.721] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e5a8) returned 1 [0078.721] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e5dc) returned 1 [0078.721] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Document Building Blocks\\1033\\14", nBufferLength=0x105, lpBuffer=0x31e0e4, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Document Building Blocks\\1033\\14", lpFilePart=0x0) returned 0x58 [0078.721] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Document Building Blocks\\1033\\14\\", nBufferLength=0x105, lpBuffer=0x31e0b8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Document Building Blocks\\1033\\14\\", lpFilePart=0x0) returned 0x59 [0078.721] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Document Building Blocks\\1033\\14\\*", lpFindFileData=0x31e304 | out: lpFindFileData=0x31e304*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x4f766d30, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0x4f766d30, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0x4f766d30, ftLastWriteTime.dwHighDateTime=0x1d2dda4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x381c80 [0078.721] FindClose (in: hFindFile=0x381c80 | out: hFindFile=0x381c80) returned 1 [0078.721] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e59c) returned 1 [0078.721] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e5a8) returned 1 [0078.721] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e6cc) returned 1 [0078.721] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Excel", nBufferLength=0x105, lpBuffer=0x31e1d4, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Excel", lpFilePart=0x0) returned 0x3d [0078.721] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Excel\\", nBufferLength=0x105, lpBuffer=0x31e1a8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Excel\\", lpFilePart=0x0) returned 0x3e [0078.721] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Excel\\*", lpFindFileData=0x31e3f4 | out: lpFindFileData=0x31e3f4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x1c1e0470, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xd01394e0, ftLastAccessTime.dwHighDateTime=0x1d301bc, ftLastWriteTime.dwLowDateTime=0xd01394e0, ftLastWriteTime.dwHighDateTime=0x1d301bc, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x381c80 [0078.721] FindClose (in: hFindFile=0x381c80 | out: hFindFile=0x381c80) returned 1 [0078.722] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e68c) returned 1 [0078.722] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e698) returned 1 [0078.722] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e6cc) returned 1 [0078.722] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Excel", nBufferLength=0x105, lpBuffer=0x31e1d4, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Excel", lpFilePart=0x0) returned 0x3d [0078.722] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Excel\\", nBufferLength=0x105, lpBuffer=0x31e1a8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Excel\\", lpFilePart=0x0) returned 0x3e [0078.722] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Excel\\*", lpFindFileData=0x31e3f4 | out: lpFindFileData=0x31e3f4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x1c1e0470, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xd01394e0, ftLastAccessTime.dwHighDateTime=0x1d301bc, ftLastWriteTime.dwLowDateTime=0xd01394e0, ftLastWriteTime.dwHighDateTime=0x1d301bc, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x381c80 [0078.722] FindClose (in: hFindFile=0x381c80 | out: hFindFile=0x381c80) returned 1 [0078.722] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e68c) returned 1 [0078.722] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e698) returned 1 [0078.722] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e654) returned 1 [0078.722] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Excel\\XLSTART", nBufferLength=0x105, lpBuffer=0x31e15c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Excel\\XLSTART", lpFilePart=0x0) returned 0x45 [0078.722] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Excel\\XLSTART\\", nBufferLength=0x105, lpBuffer=0x31e130, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Excel\\XLSTART\\", lpFilePart=0x0) returned 0x46 [0078.722] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Excel\\XLSTART\\*", lpFindFileData=0x31e37c | out: lpFindFileData=0x31e37c*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xd01394e0, ftCreationTime.dwHighDateTime=0x1d301bc, ftLastAccessTime.dwLowDateTime=0xd01394e0, ftLastAccessTime.dwHighDateTime=0x1d301bc, ftLastWriteTime.dwLowDateTime=0xd01394e0, ftLastWriteTime.dwHighDateTime=0x1d301bc, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x381c80 [0078.722] FindClose (in: hFindFile=0x381c80 | out: hFindFile=0x381c80) returned 1 [0078.722] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e614) returned 1 [0078.722] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e620) returned 1 [0078.722] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e654) returned 1 [0078.723] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Excel\\XLSTART", nBufferLength=0x105, lpBuffer=0x31e15c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Excel\\XLSTART", lpFilePart=0x0) returned 0x45 [0078.723] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Excel\\XLSTART\\", nBufferLength=0x105, lpBuffer=0x31e130, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Excel\\XLSTART\\", lpFilePart=0x0) returned 0x46 [0078.723] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Excel\\XLSTART\\*", lpFindFileData=0x31e37c | out: lpFindFileData=0x31e37c*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xd01394e0, ftCreationTime.dwHighDateTime=0x1d301bc, ftLastAccessTime.dwLowDateTime=0xd01394e0, ftLastAccessTime.dwHighDateTime=0x1d301bc, ftLastWriteTime.dwLowDateTime=0xd01394e0, ftLastWriteTime.dwHighDateTime=0x1d301bc, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x381c80 [0078.723] FindClose (in: hFindFile=0x381c80 | out: hFindFile=0x381c80) returned 1 [0078.723] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e614) returned 1 [0078.723] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e620) returned 1 [0078.723] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e6cc) returned 1 [0078.723] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\IME12", nBufferLength=0x105, lpBuffer=0x31e1d4, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\IME12", lpFilePart=0x0) returned 0x3d [0078.723] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\IME12\\", nBufferLength=0x105, lpBuffer=0x31e1a8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\IME12\\", lpFilePart=0x0) returned 0x3e [0078.723] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\IME12\\*", lpFindFileData=0x31e3f4 | out: lpFindFileData=0x31e3f4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xcd72eaa0, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0xcd72eaa0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0xcd72eaa0, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x381c80 [0078.723] FindClose (in: hFindFile=0x381c80 | out: hFindFile=0x381c80) returned 1 [0078.723] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e68c) returned 1 [0078.723] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e698) returned 1 [0078.723] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e6cc) returned 1 [0078.724] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\IME12", nBufferLength=0x105, lpBuffer=0x31e1d4, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\IME12", lpFilePart=0x0) returned 0x3d [0078.724] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\IME12\\", nBufferLength=0x105, lpBuffer=0x31e1a8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\IME12\\", lpFilePart=0x0) returned 0x3e [0078.724] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\IME12\\*", lpFindFileData=0x31e3f4 | out: lpFindFileData=0x31e3f4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xcd72eaa0, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0xcd72eaa0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0xcd72eaa0, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x381c80 [0078.724] FindClose (in: hFindFile=0x381c80 | out: hFindFile=0x381c80) returned 1 [0078.724] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e68c) returned 1 [0078.724] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e698) returned 1 [0078.724] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e6cc) returned 1 [0078.724] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\IMJP12", nBufferLength=0x105, lpBuffer=0x31e1d4, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\IMJP12", lpFilePart=0x0) returned 0x3e [0078.724] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\IMJP12\\", nBufferLength=0x105, lpBuffer=0x31e1a8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\IMJP12\\", lpFilePart=0x0) returned 0x3f [0078.724] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\IMJP12\\*", lpFindFileData=0x31e3f4 | out: lpFindFileData=0x31e3f4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xcd72eaa0, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0xcd72eaa0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0xcd72eaa0, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x381c80 [0078.724] FindClose (in: hFindFile=0x381c80 | out: hFindFile=0x381c80) returned 1 [0078.724] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e68c) returned 1 [0078.724] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e698) returned 1 [0078.724] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e6cc) returned 1 [0078.724] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\IMJP12", nBufferLength=0x105, lpBuffer=0x31e1d4, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\IMJP12", lpFilePart=0x0) returned 0x3e [0078.725] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\IMJP12\\", nBufferLength=0x105, lpBuffer=0x31e1a8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\IMJP12\\", lpFilePart=0x0) returned 0x3f [0078.725] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\IMJP12\\*", lpFindFileData=0x31e3f4 | out: lpFindFileData=0x31e3f4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xcd72eaa0, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0xcd72eaa0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0xcd72eaa0, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x381c80 [0078.725] FindClose (in: hFindFile=0x381c80 | out: hFindFile=0x381c80) returned 1 [0078.725] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e68c) returned 1 [0078.725] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e698) returned 1 [0078.725] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e6cc) returned 1 [0078.725] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\IMJP8_1", nBufferLength=0x105, lpBuffer=0x31e1d4, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\IMJP8_1", lpFilePart=0x0) returned 0x3f [0078.725] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\IMJP8_1\\", nBufferLength=0x105, lpBuffer=0x31e1a8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\IMJP8_1\\", lpFilePart=0x0) returned 0x40 [0078.725] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\IMJP8_1\\*", lpFindFileData=0x31e3f4 | out: lpFindFileData=0x31e3f4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xcd72eaa0, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0xcd72eaa0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0xcd72eaa0, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x381c80 [0078.725] FindClose (in: hFindFile=0x381c80 | out: hFindFile=0x381c80) returned 1 [0078.725] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e68c) returned 1 [0078.725] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e698) returned 1 [0078.725] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e6cc) returned 1 [0078.725] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\IMJP8_1", nBufferLength=0x105, lpBuffer=0x31e1d4, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\IMJP8_1", lpFilePart=0x0) returned 0x3f [0078.726] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\IMJP8_1\\", nBufferLength=0x105, lpBuffer=0x31e1a8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\IMJP8_1\\", lpFilePart=0x0) returned 0x40 [0078.726] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\IMJP8_1\\*", lpFindFileData=0x31e3f4 | out: lpFindFileData=0x31e3f4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xcd72eaa0, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0xcd72eaa0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0xcd72eaa0, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x381c80 [0078.726] FindClose (in: hFindFile=0x381c80 | out: hFindFile=0x381c80) returned 1 [0078.726] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e68c) returned 1 [0078.726] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e698) returned 1 [0078.726] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e6cc) returned 1 [0078.726] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\IMJP9_0", nBufferLength=0x105, lpBuffer=0x31e1d4, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\IMJP9_0", lpFilePart=0x0) returned 0x3f [0078.726] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\IMJP9_0\\", nBufferLength=0x105, lpBuffer=0x31e1a8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\IMJP9_0\\", lpFilePart=0x0) returned 0x40 [0078.726] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\IMJP9_0\\*", lpFindFileData=0x31e3f4 | out: lpFindFileData=0x31e3f4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xcd72eaa0, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0xcd72eaa0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0xcd72eaa0, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x381c80 [0078.726] FindClose (in: hFindFile=0x381c80 | out: hFindFile=0x381c80) returned 1 [0078.726] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e68c) returned 1 [0078.726] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e698) returned 1 [0078.726] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e6cc) returned 1 [0078.727] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\IMJP9_0", nBufferLength=0x105, lpBuffer=0x31e1d4, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\IMJP9_0", lpFilePart=0x0) returned 0x3f [0078.727] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\IMJP9_0\\", nBufferLength=0x105, lpBuffer=0x31e1a8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\IMJP9_0\\", lpFilePart=0x0) returned 0x40 [0078.727] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\IMJP9_0\\*", lpFindFileData=0x31e3f4 | out: lpFindFileData=0x31e3f4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xcd72eaa0, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0xcd72eaa0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0xcd72eaa0, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x381c80 [0078.727] FindClose (in: hFindFile=0x381c80 | out: hFindFile=0x381c80) returned 1 [0078.727] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e68c) returned 1 [0078.727] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Internet Explorer", nBufferLength=0x105, lpBuffer=0x31e1d4, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Internet Explorer", lpFilePart=0x0) returned 0x49 [0078.727] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Internet Explorer\\", nBufferLength=0x105, lpBuffer=0x31e1a8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Internet Explorer\\", lpFilePart=0x0) returned 0x4a [0078.727] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Internet Explorer\\*", lpFindFileData=0x31e3f4 | out: lpFindFileData=0x31e3f4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x28cff640, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x54b77470, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x54b77470, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x381c80 [0078.727] FindClose (in: hFindFile=0x381c80 | out: hFindFile=0x381c80) returned 1 [0078.728] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Internet Explorer", nBufferLength=0x105, lpBuffer=0x31e1d4, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Internet Explorer", lpFilePart=0x0) returned 0x49 [0078.728] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Internet Explorer\\", nBufferLength=0x105, lpBuffer=0x31e1a8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Internet Explorer\\", lpFilePart=0x0) returned 0x4a [0078.728] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Internet Explorer\\*", lpFindFileData=0x31e3f4 | out: lpFindFileData=0x31e3f4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x28cff640, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x54b77470, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x54b77470, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x381c80 [0078.729] FindClose (in: hFindFile=0x381c80 | out: hFindFile=0x381c80) returned 1 [0078.729] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Internet Explorer\\Quick Launch", nBufferLength=0x105, lpBuffer=0x31e15c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Internet Explorer\\Quick Launch", lpFilePart=0x0) returned 0x56 [0078.729] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Internet Explorer\\Quick Launch\\", nBufferLength=0x105, lpBuffer=0x31e130, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Internet Explorer\\Quick Launch\\", lpFilePart=0x0) returned 0x57 [0078.729] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Internet Explorer\\Quick Launch\\*", lpFindFileData=0x31e37c | out: lpFindFileData=0x31e37c*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x28cff640, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0xbda554a0, ftLastAccessTime.dwHighDateTime=0x1d301bd, ftLastWriteTime.dwLowDateTime=0xbda554a0, ftLastWriteTime.dwHighDateTime=0x1d301bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x381c80 [0078.729] FindClose (in: hFindFile=0x381c80 | out: hFindFile=0x381c80) returned 1 [0078.729] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Internet Explorer\\Quick Launch", nBufferLength=0x105, lpBuffer=0x31e15c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Internet Explorer\\Quick Launch", lpFilePart=0x0) returned 0x56 [0078.729] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Internet Explorer\\Quick Launch\\", nBufferLength=0x105, lpBuffer=0x31e130, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Internet Explorer\\Quick Launch\\", lpFilePart=0x0) returned 0x57 [0078.729] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Internet Explorer\\Quick Launch\\*", lpFindFileData=0x31e37c | out: lpFindFileData=0x31e37c*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x28cff640, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0xbda554a0, ftLastAccessTime.dwHighDateTime=0x1d301bd, ftLastWriteTime.dwLowDateTime=0xbda554a0, ftLastWriteTime.dwHighDateTime=0x1d301bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x381c80 [0078.729] FindClose (in: hFindFile=0x381c80 | out: hFindFile=0x381c80) returned 1 [0078.729] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Internet Explorer\\Quick Launch\\Google Chrome.lnk", nBufferLength=0x105, lpBuffer=0x31e02c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Internet Explorer\\Quick Launch\\Google Chrome.lnk", lpFilePart=0x0) returned 0x68 [0078.729] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Internet Explorer\\Quick Launch\\Google Chrome.lnk" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\internet explorer\\quick launch\\google chrome.lnk"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x264 [0078.730] GetFileType (hFile=0x264) returned 0x1 [0078.730] GetFileType (hFile=0x264) returned 0x1 [0078.730] GetFileSize (in: hFile=0x264, lpFileSizeHigh=0x31e628 | out: lpFileSizeHigh=0x31e628*=0x0) returned 0x8e9 [0078.730] ReadFile (in: hFile=0x264, lpBuffer=0x277267c, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x31e5d4, lpOverlapped=0x0 | out: lpBuffer=0x277267c*, lpNumberOfBytesRead=0x31e5d4*=0x8e9, lpOverlapped=0x0) returned 1 [0078.745] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Internet Explorer\\Quick Launch\\Google Chrome.lnk", nBufferLength=0x105, lpBuffer=0x31e018, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Internet Explorer\\Quick Launch\\Google Chrome.lnk", lpFilePart=0x0) returned 0x68 [0078.745] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Internet Explorer\\Quick Launch\\Google Chrome.lnk" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\internet explorer\\quick launch\\google chrome.lnk"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x264 [0078.746] GetFileType (hFile=0x264) returned 0x1 [0078.746] GetFileType (hFile=0x264) returned 0x1 [0078.746] WriteFile (in: hFile=0x264, lpBuffer=0x27c3290*, nNumberOfBytesToWrite=0x8f0, lpNumberOfBytesWritten=0x31e59c, lpOverlapped=0x0 | out: lpBuffer=0x27c3290*, lpNumberOfBytesWritten=0x31e59c*=0x8f0, lpOverlapped=0x0) returned 1 [0078.747] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Internet Explorer\\Quick Launch\\Google Chrome.lnk", nBufferLength=0x105, lpBuffer=0x31e14c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Internet Explorer\\Quick Launch\\Google Chrome.lnk", lpFilePart=0x0) returned 0x68 [0078.747] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Internet Explorer\\Quick Launch\\Google Chrome.lnk", nBufferLength=0x105, lpBuffer=0x31e14c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Internet Explorer\\Quick Launch\\Google Chrome.lnk", lpFilePart=0x0) returned 0x68 [0078.747] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Internet Explorer\\Quick Launch\\Google Chrome.lnk" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\internet explorer\\quick launch\\google chrome.lnk"), fInfoLevelId=0x0, lpFileInformation=0x31e628 | out: lpFileInformation=0x31e628*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7df47e00, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x7df47e00, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x12605f40, ftLastWriteTime.dwHighDateTime=0x1d6eb7f, nFileSizeHigh=0x0, nFileSizeLow=0x8f0)) returned 1 [0078.747] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Internet Explorer\\Quick Launch\\Google Chrome.lnk" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\internet explorer\\quick launch\\google chrome.lnk"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Internet Explorer\\Quick Launch\\Google Chrome.lnk" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\internet explorer\\quick launch\\google chrome.lnk")) returned 1 [0078.748] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Internet Explorer\\Quick Launch\\Launch Internet Explorer Browser.lnk", nBufferLength=0x105, lpBuffer=0x31e02c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Internet Explorer\\Quick Launch\\Launch Internet Explorer Browser.lnk", lpFilePart=0x0) returned 0x7b [0078.748] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Internet Explorer\\Quick Launch\\Launch Internet Explorer Browser.lnk" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\internet explorer\\quick launch\\launch internet explorer browser.lnk"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x264 [0078.748] GetFileType (hFile=0x264) returned 0x1 [0078.748] GetFileType (hFile=0x264) returned 0x1 [0078.749] GetFileSize (in: hFile=0x264, lpFileSizeHigh=0x31e628 | out: lpFileSizeHigh=0x31e628*=0x0) returned 0x5a7 [0078.749] ReadFile (in: hFile=0x264, lpBuffer=0x27c4be0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x31e5d4, lpOverlapped=0x0 | out: lpBuffer=0x27c4be0*, lpNumberOfBytesRead=0x31e5d4*=0x5a7, lpOverlapped=0x0) returned 1 [0078.764] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Internet Explorer\\Quick Launch\\Launch Internet Explorer Browser.lnk", nBufferLength=0x105, lpBuffer=0x31e018, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Internet Explorer\\Quick Launch\\Launch Internet Explorer Browser.lnk", lpFilePart=0x0) returned 0x7b [0078.764] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Internet Explorer\\Quick Launch\\Launch Internet Explorer Browser.lnk" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\internet explorer\\quick launch\\launch internet explorer browser.lnk"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x264 [0078.765] GetFileType (hFile=0x264) returned 0x1 [0078.765] GetFileType (hFile=0x264) returned 0x1 [0078.765] WriteFile (in: hFile=0x264, lpBuffer=0x2814804*, nNumberOfBytesToWrite=0x5b0, lpNumberOfBytesWritten=0x31e59c, lpOverlapped=0x0 | out: lpBuffer=0x2814804*, lpNumberOfBytesWritten=0x31e59c*=0x5b0, lpOverlapped=0x0) returned 1 [0078.766] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Internet Explorer\\Quick Launch\\Launch Internet Explorer Browser.lnk", nBufferLength=0x105, lpBuffer=0x31e14c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Internet Explorer\\Quick Launch\\Launch Internet Explorer Browser.lnk", lpFilePart=0x0) returned 0x7b [0078.766] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Internet Explorer\\Quick Launch\\Launch Internet Explorer Browser.lnk", nBufferLength=0x105, lpBuffer=0x31e14c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Internet Explorer\\Quick Launch\\Launch Internet Explorer Browser.lnk", lpFilePart=0x0) returned 0x7b [0078.766] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Internet Explorer\\Quick Launch\\Launch Internet Explorer Browser.lnk" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\internet explorer\\quick launch\\launch internet explorer browser.lnk"), fInfoLevelId=0x0, lpFileInformation=0x31e628 | out: lpFileInformation=0x31e628*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4eb0f970, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x4eb0f970, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x12652200, ftLastWriteTime.dwHighDateTime=0x1d6eb7f, nFileSizeHigh=0x0, nFileSizeLow=0x5b0)) returned 1 [0078.766] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Internet Explorer\\Quick Launch\\Launch Internet Explorer Browser.lnk" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\internet explorer\\quick launch\\launch internet explorer browser.lnk"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Internet Explorer\\Quick Launch\\Launch Internet Explorer Browser.lnk" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\internet explorer\\quick launch\\launch internet explorer browser.lnk")) returned 1 [0078.767] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Internet Explorer\\Quick Launch\\Shows Desktop.lnk", nBufferLength=0x105, lpBuffer=0x31e02c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Internet Explorer\\Quick Launch\\Shows Desktop.lnk", lpFilePart=0x0) returned 0x68 [0078.767] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Internet Explorer\\Quick Launch\\Shows Desktop.lnk" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\internet explorer\\quick launch\\shows desktop.lnk"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x264 [0078.767] GetFileType (hFile=0x264) returned 0x1 [0078.767] GetFileType (hFile=0x264) returned 0x1 [0078.767] GetFileSize (in: hFile=0x264, lpFileSizeHigh=0x31e628 | out: lpFileSizeHigh=0x31e628*=0x0) returned 0x122 [0078.767] ReadFile (in: hFile=0x264, lpBuffer=0x2815ccc, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x31e5d4, lpOverlapped=0x0 | out: lpBuffer=0x2815ccc*, lpNumberOfBytesRead=0x31e5d4*=0x122, lpOverlapped=0x0) returned 1 [0078.812] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Internet Explorer\\Quick Launch\\Shows Desktop.lnk", nBufferLength=0x105, lpBuffer=0x31e018, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Internet Explorer\\Quick Launch\\Shows Desktop.lnk", lpFilePart=0x0) returned 0x68 [0078.812] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e50c) returned 1 [0078.812] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Internet Explorer\\Quick Launch\\Shows Desktop.lnk" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\internet explorer\\quick launch\\shows desktop.lnk"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x264 [0078.813] GetFileType (hFile=0x264) returned 0x1 [0078.813] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e508) returned 1 [0078.813] GetFileType (hFile=0x264) returned 0x1 [0078.813] WriteFile (in: hFile=0x264, lpBuffer=0x266607c*, nNumberOfBytesToWrite=0x130, lpNumberOfBytesWritten=0x31e59c, lpOverlapped=0x0 | out: lpBuffer=0x266607c*, lpNumberOfBytesWritten=0x31e59c*=0x130, lpOverlapped=0x0) returned 1 [0078.814] CloseHandle (hObject=0x264) returned 1 [0078.814] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Internet Explorer\\Quick Launch\\Shows Desktop.lnk", nBufferLength=0x105, lpBuffer=0x31e14c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Internet Explorer\\Quick Launch\\Shows Desktop.lnk", lpFilePart=0x0) returned 0x68 [0078.814] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Internet Explorer\\Quick Launch\\Shows Desktop.lnk", nBufferLength=0x105, lpBuffer=0x31e14c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Internet Explorer\\Quick Launch\\Shows Desktop.lnk", lpFilePart=0x0) returned 0x68 [0078.814] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e5ac) returned 1 [0078.814] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Internet Explorer\\Quick Launch\\Shows Desktop.lnk" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\internet explorer\\quick launch\\shows desktop.lnk"), fInfoLevelId=0x0, lpFileInformation=0x31e628 | out: lpFileInformation=0x31e628*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x28dbdd20, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28dbdd20, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x126c4620, ftLastWriteTime.dwHighDateTime=0x1d6eb7f, nFileSizeHigh=0x0, nFileSizeLow=0x130)) returned 1 [0078.814] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e5a8) returned 1 [0078.814] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Internet Explorer\\Quick Launch\\Shows Desktop.lnk" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\internet explorer\\quick launch\\shows desktop.lnk"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Internet Explorer\\Quick Launch\\Shows Desktop.lnk" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\internet explorer\\quick launch\\shows desktop.lnk")) returned 1 [0078.815] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Internet Explorer\\Quick Launch\\Window Switcher.lnk", nBufferLength=0x105, lpBuffer=0x31e02c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Internet Explorer\\Quick Launch\\Window Switcher.lnk", lpFilePart=0x0) returned 0x6a [0078.815] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e520) returned 1 [0078.815] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Internet Explorer\\Quick Launch\\Window Switcher.lnk" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\internet explorer\\quick launch\\window switcher.lnk"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x264 [0078.815] GetFileType (hFile=0x264) returned 0x1 [0078.815] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e51c) returned 1 [0078.815] GetFileType (hFile=0x264) returned 0x1 [0078.816] GetFileSize (in: hFile=0x264, lpFileSizeHigh=0x31e628 | out: lpFileSizeHigh=0x31e628*=0x0) returned 0x110 [0078.816] ReadFile (in: hFile=0x264, lpBuffer=0x26674f0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x31e5d4, lpOverlapped=0x0 | out: lpBuffer=0x26674f0*, lpNumberOfBytesRead=0x31e5d4*=0x110, lpOverlapped=0x0) returned 1 [0078.816] CloseHandle (hObject=0x264) returned 1 [0078.831] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Internet Explorer\\Quick Launch\\Window Switcher.lnk", nBufferLength=0x105, lpBuffer=0x31e018, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Internet Explorer\\Quick Launch\\Window Switcher.lnk", lpFilePart=0x0) returned 0x6a [0078.832] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e50c) returned 1 [0078.832] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Internet Explorer\\Quick Launch\\Window Switcher.lnk" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\internet explorer\\quick launch\\window switcher.lnk"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x264 [0078.832] GetFileType (hFile=0x264) returned 0x1 [0078.832] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e508) returned 1 [0078.832] GetFileType (hFile=0x264) returned 0x1 [0078.832] WriteFile (in: hFile=0x264, lpBuffer=0x26b5b60*, nNumberOfBytesToWrite=0x120, lpNumberOfBytesWritten=0x31e59c, lpOverlapped=0x0 | out: lpBuffer=0x26b5b60*, lpNumberOfBytesWritten=0x31e59c*=0x120, lpOverlapped=0x0) returned 1 [0078.833] CloseHandle (hObject=0x264) returned 1 [0078.833] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Internet Explorer\\Quick Launch\\Window Switcher.lnk", nBufferLength=0x105, lpBuffer=0x31e14c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Internet Explorer\\Quick Launch\\Window Switcher.lnk", lpFilePart=0x0) returned 0x6a [0078.833] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Internet Explorer\\Quick Launch\\Window Switcher.lnk", nBufferLength=0x105, lpBuffer=0x31e14c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Internet Explorer\\Quick Launch\\Window Switcher.lnk", lpFilePart=0x0) returned 0x6a [0078.833] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e5ac) returned 1 [0078.834] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Internet Explorer\\Quick Launch\\Window Switcher.lnk" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\internet explorer\\quick launch\\window switcher.lnk"), fInfoLevelId=0x0, lpFileInformation=0x31e628 | out: lpFileInformation=0x31e628*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x28dbdd20, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28dbdd20, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x126ea780, ftLastWriteTime.dwHighDateTime=0x1d6eb7f, nFileSizeHigh=0x0, nFileSizeLow=0x120)) returned 1 [0078.834] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e5a8) returned 1 [0078.834] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Internet Explorer\\Quick Launch\\Window Switcher.lnk" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\internet explorer\\quick launch\\window switcher.lnk"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Internet Explorer\\Quick Launch\\Window Switcher.lnk" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\internet explorer\\quick launch\\window switcher.lnk")) returned 1 [0078.834] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e5dc) returned 1 [0078.834] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Internet Explorer\\Quick Launch\\User Pinned", nBufferLength=0x105, lpBuffer=0x31e0e4, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Internet Explorer\\Quick Launch\\User Pinned", lpFilePart=0x0) returned 0x62 [0078.834] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Internet Explorer\\Quick Launch\\User Pinned\\", nBufferLength=0x105, lpBuffer=0x31e0b8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Internet Explorer\\Quick Launch\\User Pinned\\", lpFilePart=0x0) returned 0x63 [0078.834] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Internet Explorer\\Quick Launch\\User Pinned\\*", lpFindFileData=0x31e304 | out: lpFindFileData=0x31e304*(dwFileAttributes=0x12, ftCreationTime.dwLowDateTime=0x28cff640, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28cff640, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x119ccee, ftLastWriteTime.dwHighDateTime=0x1cb8927, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x381b40 [0078.835] FindNextFileW (in: hFindFile=0x381b40, lpFindFileData=0x31e314 | out: lpFindFileData=0x31e314*(dwFileAttributes=0x12, ftCreationTime.dwLowDateTime=0x28cff640, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28cff640, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x119ccee, ftLastWriteTime.dwHighDateTime=0x1cb8927, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0078.835] FindNextFileW (in: hFindFile=0x381b40, lpFindFileData=0x31e314 | out: lpFindFileData=0x31e314*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x28cff640, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28cff640, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xf98cef90, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="ImplicitAppShortcuts", cAlternateFileName="IMPLIC~1")) returned 1 [0078.835] FindNextFileW (in: hFindFile=0x381b40, lpFindFileData=0x31e314 | out: lpFindFileData=0x31e314*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x28cff640, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0xb65d71b0, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0xb65d71b0, ftLastWriteTime.dwHighDateTime=0x1d2dda4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="TaskBar", cAlternateFileName="")) returned 1 [0078.835] FindNextFileW (in: hFindFile=0x381b40, lpFindFileData=0x31e314 | out: lpFindFileData=0x31e314*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x28cff640, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0xb65d71b0, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0xb65d71b0, ftLastWriteTime.dwHighDateTime=0x1d2dda4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="TaskBar", cAlternateFileName="")) returned 0 [0078.835] FindClose (in: hFindFile=0x381b40 | out: hFindFile=0x381b40) returned 1 [0078.835] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e59c) returned 1 [0078.835] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e5a8) returned 1 [0078.835] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e5dc) returned 1 [0078.835] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Internet Explorer\\Quick Launch\\User Pinned", nBufferLength=0x105, lpBuffer=0x31e0e4, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Internet Explorer\\Quick Launch\\User Pinned", lpFilePart=0x0) returned 0x62 [0078.835] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Internet Explorer\\Quick Launch\\User Pinned\\", nBufferLength=0x105, lpBuffer=0x31e0b8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Internet Explorer\\Quick Launch\\User Pinned\\", lpFilePart=0x0) returned 0x63 [0078.835] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Internet Explorer\\Quick Launch\\User Pinned\\*", lpFindFileData=0x31e304 | out: lpFindFileData=0x31e304*(dwFileAttributes=0x12, ftCreationTime.dwLowDateTime=0x28cff640, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28cff640, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x119ccee, ftLastWriteTime.dwHighDateTime=0x1cb8927, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x381b40 [0078.836] FindNextFileW (in: hFindFile=0x381b40, lpFindFileData=0x31e314 | out: lpFindFileData=0x31e314*(dwFileAttributes=0x12, ftCreationTime.dwLowDateTime=0x28cff640, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28cff640, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x119ccee, ftLastWriteTime.dwHighDateTime=0x1cb8927, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0078.836] FindNextFileW (in: hFindFile=0x381b40, lpFindFileData=0x31e314 | out: lpFindFileData=0x31e314*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x28cff640, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28cff640, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xf98cef90, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="ImplicitAppShortcuts", cAlternateFileName="IMPLIC~1")) returned 1 [0078.836] FindNextFileW (in: hFindFile=0x381b40, lpFindFileData=0x31e314 | out: lpFindFileData=0x31e314*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x28cff640, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0xb65d71b0, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0xb65d71b0, ftLastWriteTime.dwHighDateTime=0x1d2dda4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="TaskBar", cAlternateFileName="")) returned 1 [0078.836] FindNextFileW (in: hFindFile=0x381b40, lpFindFileData=0x31e314 | out: lpFindFileData=0x31e314*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0078.836] FindClose (in: hFindFile=0x381b40 | out: hFindFile=0x381b40) returned 1 [0078.836] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e59c) returned 1 [0078.836] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e5a8) returned 1 [0078.836] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e564) returned 1 [0078.836] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Internet Explorer\\Quick Launch\\User Pinned\\ImplicitAppShortcuts", nBufferLength=0x105, lpBuffer=0x31e06c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Internet Explorer\\Quick Launch\\User Pinned\\ImplicitAppShortcuts", lpFilePart=0x0) returned 0x77 [0078.836] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Internet Explorer\\Quick Launch\\User Pinned\\ImplicitAppShortcuts\\", nBufferLength=0x105, lpBuffer=0x31e040, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Internet Explorer\\Quick Launch\\User Pinned\\ImplicitAppShortcuts\\", lpFilePart=0x0) returned 0x78 [0078.836] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Internet Explorer\\Quick Launch\\User Pinned\\ImplicitAppShortcuts\\*", lpFindFileData=0x31e28c | out: lpFindFileData=0x31e28c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x28cff640, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28cff640, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xf98cef90, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x381b40 [0078.837] FindNextFileW (in: hFindFile=0x381b40, lpFindFileData=0x31e29c | out: lpFindFileData=0x31e29c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x28cff640, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28cff640, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xf98cef90, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0078.837] FindNextFileW (in: hFindFile=0x381b40, lpFindFileData=0x31e29c | out: lpFindFileData=0x31e29c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x28cff640, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28cff640, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xf98cef90, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 0 [0078.837] FindClose (in: hFindFile=0x381b40 | out: hFindFile=0x381b40) returned 1 [0078.837] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e524) returned 1 [0078.837] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e530) returned 1 [0078.837] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e564) returned 1 [0078.837] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Internet Explorer\\Quick Launch\\User Pinned\\ImplicitAppShortcuts", nBufferLength=0x105, lpBuffer=0x31e06c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Internet Explorer\\Quick Launch\\User Pinned\\ImplicitAppShortcuts", lpFilePart=0x0) returned 0x77 [0078.837] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Internet Explorer\\Quick Launch\\User Pinned\\ImplicitAppShortcuts\\", nBufferLength=0x105, lpBuffer=0x31e040, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Internet Explorer\\Quick Launch\\User Pinned\\ImplicitAppShortcuts\\", lpFilePart=0x0) returned 0x78 [0078.837] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Internet Explorer\\Quick Launch\\User Pinned\\ImplicitAppShortcuts\\*", lpFindFileData=0x31e28c | out: lpFindFileData=0x31e28c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x28cff640, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28cff640, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xf98cef90, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x381b40 [0078.838] FindNextFileW (in: hFindFile=0x381b40, lpFindFileData=0x31e29c | out: lpFindFileData=0x31e29c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x28cff640, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28cff640, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xf98cef90, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0078.838] FindNextFileW (in: hFindFile=0x381b40, lpFindFileData=0x31e29c | out: lpFindFileData=0x31e29c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x28cff640, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28cff640, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xf98cef90, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 0 [0078.838] FindClose (in: hFindFile=0x381b40 | out: hFindFile=0x381b40) returned 1 [0078.838] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e524) returned 1 [0078.838] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e530) returned 1 [0078.838] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e564) returned 1 [0078.838] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Internet Explorer\\Quick Launch\\User Pinned\\TaskBar", nBufferLength=0x105, lpBuffer=0x31e06c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Internet Explorer\\Quick Launch\\User Pinned\\TaskBar", lpFilePart=0x0) returned 0x6a [0078.838] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Internet Explorer\\Quick Launch\\User Pinned\\TaskBar\\", nBufferLength=0x105, lpBuffer=0x31e040, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Internet Explorer\\Quick Launch\\User Pinned\\TaskBar\\", lpFilePart=0x0) returned 0x6b [0078.838] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Internet Explorer\\Quick Launch\\User Pinned\\TaskBar\\*", lpFindFileData=0x31e28c | out: lpFindFileData=0x31e28c*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x28cff640, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0xb65d71b0, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0xb65d71b0, ftLastWriteTime.dwHighDateTime=0x1d2dda4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x381b40 [0078.838] FindNextFileW (in: hFindFile=0x381b40, lpFindFileData=0x31e29c | out: lpFindFileData=0x31e29c*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x28cff640, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0xb65d71b0, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0xb65d71b0, ftLastWriteTime.dwHighDateTime=0x1d2dda4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0078.839] FindNextFileW (in: hFindFile=0x381b40, lpFindFileData=0x31e29c | out: lpFindFileData=0x31e29c*(dwFileAttributes=0x6, ftCreationTime.dwLowDateTime=0x28dbdd20, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28dbdd20, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x2dc4b320, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x19c, dwReserved0=0x0, dwReserved1=0x0, cFileName="desktop.ini", cAlternateFileName="")) returned 1 [0078.839] FindNextFileW (in: hFindFile=0x381b40, lpFindFileData=0x31e29c | out: lpFindFileData=0x31e29c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7e02c640, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x7e02c640, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x7df47e00, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x8dd, dwReserved0=0x0, dwReserved1=0x0, cFileName="Google Chrome.lnk", cAlternateFileName="GOOGLE~1.LNK")) returned 1 [0078.839] FindNextFileW (in: hFindFile=0x381b40, lpFindFileData=0x31e29c | out: lpFindFileData=0x31e29c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2dc251c0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x2dc251c0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x2d7ae880, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x5ad, dwReserved0=0x0, dwReserved1=0x0, cFileName="Internet Explorer (2).lnk", cAlternateFileName="INTERN~2.LNK")) returned 1 [0078.839] FindNextFileW (in: hFindFile=0x381b40, lpFindFileData=0x31e29c | out: lpFindFileData=0x31e29c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x28dbdd20, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28dbdd20, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x921e7f, ftLastWriteTime.dwHighDateTime=0x1cb8927, nFileSizeHigh=0x0, nFileSizeLow=0x5a9, dwReserved0=0x0, dwReserved1=0x0, cFileName="Internet Explorer.lnk", cAlternateFileName="INTERN~1.LNK")) returned 1 [0078.839] FindNextFileW (in: hFindFile=0x381b40, lpFindFileData=0x31e29c | out: lpFindFileData=0x31e29c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb0de7e00, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xb65d71b0, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0xb65d71b0, ftLastWriteTime.dwHighDateTime=0x1d2dda4, nFileSizeHigh=0x0, nFileSizeLow=0x491, dwReserved0=0x0, dwReserved1=0x0, cFileName="Mozilla Firefox.lnk", cAlternateFileName="MOZILL~1.LNK")) returned 1 [0078.839] FindNextFileW (in: hFindFile=0x381b40, lpFindFileData=0x31e29c | out: lpFindFileData=0x31e29c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2dc4b320, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x2dc4b320, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x7dfa026d, ftLastWriteTime.dwHighDateTime=0x1ca043e, nFileSizeHigh=0x0, nFileSizeLow=0x4cc, dwReserved0=0x0, dwReserved1=0x0, cFileName="Windows Explorer (2).lnk", cAlternateFileName="WINDOW~3.LNK")) returned 1 [0078.839] FindNextFileW (in: hFindFile=0x381b40, lpFindFileData=0x31e29c | out: lpFindFileData=0x31e29c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x28dbdd20, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28dbdd20, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x7dfa026d, ftLastWriteTime.dwHighDateTime=0x1ca043e, nFileSizeHigh=0x0, nFileSizeLow=0x4cc, dwReserved0=0x0, dwReserved1=0x0, cFileName="Windows Explorer.lnk", cAlternateFileName="WINDOW~2.LNK")) returned 1 [0078.840] FindNextFileW (in: hFindFile=0x381b40, lpFindFileData=0x31e29c | out: lpFindFileData=0x31e29c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2dc4b320, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x2dc4b320, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xd869fe87, ftLastWriteTime.dwHighDateTime=0x1cb892d, nFileSizeHigh=0x0, nFileSizeLow=0x60b, dwReserved0=0x0, dwReserved1=0x0, cFileName="Windows Media Player (2).lnk", cAlternateFileName="WINDOW~4.LNK")) returned 1 [0078.840] FindNextFileW (in: hFindFile=0x381b40, lpFindFileData=0x31e29c | out: lpFindFileData=0x31e29c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x28dbdd20, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28dbdd20, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x2e24b3, ftLastWriteTime.dwHighDateTime=0x1cb8927, nFileSizeHigh=0x0, nFileSizeLow=0x60b, dwReserved0=0x0, dwReserved1=0x0, cFileName="Windows Media Player.lnk", cAlternateFileName="WINDOW~1.LNK")) returned 1 [0078.840] FindNextFileW (in: hFindFile=0x381b40, lpFindFileData=0x31e29c | out: lpFindFileData=0x31e29c*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0078.840] FindClose (in: hFindFile=0x381b40 | out: hFindFile=0x381b40) returned 1 [0078.840] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e524) returned 1 [0078.840] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e530) returned 1 [0078.840] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e564) returned 1 [0078.840] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Internet Explorer\\Quick Launch\\User Pinned\\TaskBar", nBufferLength=0x105, lpBuffer=0x31e06c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Internet Explorer\\Quick Launch\\User Pinned\\TaskBar", lpFilePart=0x0) returned 0x6a [0078.840] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Internet Explorer\\Quick Launch\\User Pinned\\TaskBar\\", nBufferLength=0x105, lpBuffer=0x31e040, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Internet Explorer\\Quick Launch\\User Pinned\\TaskBar\\", lpFilePart=0x0) returned 0x6b [0078.840] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Internet Explorer\\Quick Launch\\User Pinned\\TaskBar\\*", lpFindFileData=0x31e28c | out: lpFindFileData=0x31e28c*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x28cff640, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0xb65d71b0, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0xb65d71b0, ftLastWriteTime.dwHighDateTime=0x1d2dda4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x381b40 [0078.841] FindNextFileW (in: hFindFile=0x381b40, lpFindFileData=0x31e29c | out: lpFindFileData=0x31e29c*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x28cff640, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0xb65d71b0, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0xb65d71b0, ftLastWriteTime.dwHighDateTime=0x1d2dda4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0078.841] FindNextFileW (in: hFindFile=0x381b40, lpFindFileData=0x31e29c | out: lpFindFileData=0x31e29c*(dwFileAttributes=0x6, ftCreationTime.dwLowDateTime=0x28dbdd20, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28dbdd20, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x2dc4b320, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x19c, dwReserved0=0x0, dwReserved1=0x0, cFileName="desktop.ini", cAlternateFileName="")) returned 1 [0078.841] FindNextFileW (in: hFindFile=0x381b40, lpFindFileData=0x31e29c | out: lpFindFileData=0x31e29c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7e02c640, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x7e02c640, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x7df47e00, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x8dd, dwReserved0=0x0, dwReserved1=0x0, cFileName="Google Chrome.lnk", cAlternateFileName="GOOGLE~1.LNK")) returned 1 [0078.841] FindNextFileW (in: hFindFile=0x381b40, lpFindFileData=0x31e29c | out: lpFindFileData=0x31e29c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2dc251c0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x2dc251c0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x2d7ae880, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x5ad, dwReserved0=0x0, dwReserved1=0x0, cFileName="Internet Explorer (2).lnk", cAlternateFileName="INTERN~2.LNK")) returned 1 [0078.841] FindNextFileW (in: hFindFile=0x381b40, lpFindFileData=0x31e29c | out: lpFindFileData=0x31e29c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x28dbdd20, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28dbdd20, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x921e7f, ftLastWriteTime.dwHighDateTime=0x1cb8927, nFileSizeHigh=0x0, nFileSizeLow=0x5a9, dwReserved0=0x0, dwReserved1=0x0, cFileName="Internet Explorer.lnk", cAlternateFileName="INTERN~1.LNK")) returned 1 [0078.841] FindNextFileW (in: hFindFile=0x381b40, lpFindFileData=0x31e29c | out: lpFindFileData=0x31e29c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb0de7e00, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xb65d71b0, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0xb65d71b0, ftLastWriteTime.dwHighDateTime=0x1d2dda4, nFileSizeHigh=0x0, nFileSizeLow=0x491, dwReserved0=0x0, dwReserved1=0x0, cFileName="Mozilla Firefox.lnk", cAlternateFileName="MOZILL~1.LNK")) returned 1 [0078.842] FindNextFileW (in: hFindFile=0x381b40, lpFindFileData=0x31e29c | out: lpFindFileData=0x31e29c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2dc4b320, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x2dc4b320, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x7dfa026d, ftLastWriteTime.dwHighDateTime=0x1ca043e, nFileSizeHigh=0x0, nFileSizeLow=0x4cc, dwReserved0=0x0, dwReserved1=0x0, cFileName="Windows Explorer (2).lnk", cAlternateFileName="WINDOW~3.LNK")) returned 1 [0078.842] FindNextFileW (in: hFindFile=0x381b40, lpFindFileData=0x31e29c | out: lpFindFileData=0x31e29c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x28dbdd20, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28dbdd20, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x7dfa026d, ftLastWriteTime.dwHighDateTime=0x1ca043e, nFileSizeHigh=0x0, nFileSizeLow=0x4cc, dwReserved0=0x0, dwReserved1=0x0, cFileName="Windows Explorer.lnk", cAlternateFileName="WINDOW~2.LNK")) returned 1 [0078.842] FindNextFileW (in: hFindFile=0x381b40, lpFindFileData=0x31e29c | out: lpFindFileData=0x31e29c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2dc4b320, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x2dc4b320, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xd869fe87, ftLastWriteTime.dwHighDateTime=0x1cb892d, nFileSizeHigh=0x0, nFileSizeLow=0x60b, dwReserved0=0x0, dwReserved1=0x0, cFileName="Windows Media Player (2).lnk", cAlternateFileName="WINDOW~4.LNK")) returned 1 [0078.842] FindNextFileW (in: hFindFile=0x381b40, lpFindFileData=0x31e29c | out: lpFindFileData=0x31e29c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x28dbdd20, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28dbdd20, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x2e24b3, ftLastWriteTime.dwHighDateTime=0x1cb8927, nFileSizeHigh=0x0, nFileSizeLow=0x60b, dwReserved0=0x0, dwReserved1=0x0, cFileName="Windows Media Player.lnk", cAlternateFileName="WINDOW~1.LNK")) returned 1 [0078.842] FindNextFileW (in: hFindFile=0x381b40, lpFindFileData=0x31e29c | out: lpFindFileData=0x31e29c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x28dbdd20, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28dbdd20, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x2e24b3, ftLastWriteTime.dwHighDateTime=0x1cb8927, nFileSizeHigh=0x0, nFileSizeLow=0x60b, dwReserved0=0x0, dwReserved1=0x0, cFileName="Windows Media Player.lnk", cAlternateFileName="WINDOW~1.LNK")) returned 0 [0078.842] FindClose (in: hFindFile=0x381b40 | out: hFindFile=0x381b40) returned 1 [0078.842] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e524) returned 1 [0078.843] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e530) returned 1 [0078.843] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Internet Explorer\\Quick Launch\\User Pinned\\TaskBar\\Google Chrome.lnk", nBufferLength=0x105, lpBuffer=0x31df3c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Internet Explorer\\Quick Launch\\User Pinned\\TaskBar\\Google Chrome.lnk", lpFilePart=0x0) returned 0x7c [0078.843] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e430) returned 1 [0078.843] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Internet Explorer\\Quick Launch\\User Pinned\\TaskBar\\Google Chrome.lnk" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\internet explorer\\quick launch\\user pinned\\taskbar\\google chrome.lnk"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x264 [0078.843] GetFileType (hFile=0x264) returned 0x1 [0078.843] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e42c) returned 1 [0078.843] GetFileType (hFile=0x264) returned 0x1 [0078.843] GetFileSize (in: hFile=0x264, lpFileSizeHigh=0x31e538 | out: lpFileSizeHigh=0x31e538*=0x0) returned 0x8dd [0078.843] ReadFile (in: hFile=0x264, lpBuffer=0x26c0af8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x31e4e4, lpOverlapped=0x0 | out: lpBuffer=0x26c0af8*, lpNumberOfBytesRead=0x31e4e4*=0x8dd, lpOverlapped=0x0) returned 1 [0078.844] CloseHandle (hObject=0x264) returned 1 [0078.857] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Internet Explorer\\Quick Launch\\User Pinned\\TaskBar\\Google Chrome.lnk", nBufferLength=0x105, lpBuffer=0x31df28, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Internet Explorer\\Quick Launch\\User Pinned\\TaskBar\\Google Chrome.lnk", lpFilePart=0x0) returned 0x7c [0078.857] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e41c) returned 1 [0078.857] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Internet Explorer\\Quick Launch\\User Pinned\\TaskBar\\Google Chrome.lnk" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\internet explorer\\quick launch\\user pinned\\taskbar\\google chrome.lnk"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x264 [0078.859] GetFileType (hFile=0x264) returned 0x1 [0078.859] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e418) returned 1 [0078.859] GetFileType (hFile=0x264) returned 0x1 [0078.859] WriteFile (in: hFile=0x264, lpBuffer=0x27116e0*, nNumberOfBytesToWrite=0x8e0, lpNumberOfBytesWritten=0x31e4ac, lpOverlapped=0x0 | out: lpBuffer=0x27116e0*, lpNumberOfBytesWritten=0x31e4ac*=0x8e0, lpOverlapped=0x0) returned 1 [0078.860] CloseHandle (hObject=0x264) returned 1 [0078.860] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Internet Explorer\\Quick Launch\\User Pinned\\TaskBar\\Google Chrome.lnk", nBufferLength=0x105, lpBuffer=0x31e05c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Internet Explorer\\Quick Launch\\User Pinned\\TaskBar\\Google Chrome.lnk", lpFilePart=0x0) returned 0x7c [0078.860] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Internet Explorer\\Quick Launch\\User Pinned\\TaskBar\\Google Chrome.lnk", nBufferLength=0x105, lpBuffer=0x31e05c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Internet Explorer\\Quick Launch\\User Pinned\\TaskBar\\Google Chrome.lnk", lpFilePart=0x0) returned 0x7c [0078.860] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e4bc) returned 1 [0078.860] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Internet Explorer\\Quick Launch\\User Pinned\\TaskBar\\Google Chrome.lnk" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\internet explorer\\quick launch\\user pinned\\taskbar\\google chrome.lnk"), fInfoLevelId=0x0, lpFileInformation=0x31e538 | out: lpFileInformation=0x31e538*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7e02c640, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x7e02c640, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x12736a40, ftLastWriteTime.dwHighDateTime=0x1d6eb7f, nFileSizeHigh=0x0, nFileSizeLow=0x8e0)) returned 1 [0078.861] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e4b8) returned 1 [0078.861] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Internet Explorer\\Quick Launch\\User Pinned\\TaskBar\\Google Chrome.lnk" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\internet explorer\\quick launch\\user pinned\\taskbar\\google chrome.lnk"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Internet Explorer\\Quick Launch\\User Pinned\\TaskBar\\Google Chrome.lnk" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\internet explorer\\quick launch\\user pinned\\taskbar\\google chrome.lnk")) returned 1 [0078.861] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Internet Explorer\\Quick Launch\\User Pinned\\TaskBar\\Internet Explorer (2).lnk", nBufferLength=0x105, lpBuffer=0x31df3c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Internet Explorer\\Quick Launch\\User Pinned\\TaskBar\\Internet Explorer (2).lnk", lpFilePart=0x0) returned 0x84 [0078.861] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e430) returned 1 [0078.861] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Internet Explorer\\Quick Launch\\User Pinned\\TaskBar\\Internet Explorer (2).lnk" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\internet explorer\\quick launch\\user pinned\\taskbar\\internet explorer (2).lnk"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x264 [0078.861] GetFileType (hFile=0x264) returned 0x1 [0078.861] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e42c) returned 1 [0078.862] GetFileType (hFile=0x264) returned 0x1 [0078.862] GetFileSize (in: hFile=0x264, lpFileSizeHigh=0x31e538 | out: lpFileSizeHigh=0x31e538*=0x0) returned 0x5ad [0078.862] ReadFile (in: hFile=0x264, lpBuffer=0x2713084, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x31e4e4, lpOverlapped=0x0 | out: lpBuffer=0x2713084*, lpNumberOfBytesRead=0x31e4e4*=0x5ad, lpOverlapped=0x0) returned 1 [0078.862] CloseHandle (hObject=0x264) returned 1 [0078.876] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Internet Explorer\\Quick Launch\\User Pinned\\TaskBar\\Internet Explorer (2).lnk", nBufferLength=0x105, lpBuffer=0x31df28, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Internet Explorer\\Quick Launch\\User Pinned\\TaskBar\\Internet Explorer (2).lnk", lpFilePart=0x0) returned 0x84 [0078.876] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e41c) returned 1 [0078.876] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Internet Explorer\\Quick Launch\\User Pinned\\TaskBar\\Internet Explorer (2).lnk" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\internet explorer\\quick launch\\user pinned\\taskbar\\internet explorer (2).lnk"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x264 [0079.075] GetFileType (hFile=0x264) returned 0x1 [0079.076] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e418) returned 1 [0079.076] GetFileType (hFile=0x264) returned 0x1 [0079.081] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Internet Explorer\\Quick Launch\\User Pinned\\TaskBar\\Internet Explorer (2).lnk", nBufferLength=0x105, lpBuffer=0x31e05c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Internet Explorer\\Quick Launch\\User Pinned\\TaskBar\\Internet Explorer (2).lnk", lpFilePart=0x0) returned 0x84 [0079.081] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Internet Explorer\\Quick Launch\\User Pinned\\TaskBar\\Internet Explorer (2).lnk", nBufferLength=0x105, lpBuffer=0x31e05c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Internet Explorer\\Quick Launch\\User Pinned\\TaskBar\\Internet Explorer (2).lnk", lpFilePart=0x0) returned 0x84 [0079.081] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e4bc) returned 1 [0079.081] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Internet Explorer\\Quick Launch\\User Pinned\\TaskBar\\Internet Explorer (2).lnk" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\internet explorer\\quick launch\\user pinned\\taskbar\\internet explorer (2).lnk"), fInfoLevelId=0x0, lpFileInformation=0x31e538 | out: lpFileInformation=0x31e538*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2dc251c0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x2dc251c0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x1294bd80, ftLastWriteTime.dwHighDateTime=0x1d6eb7f, nFileSizeHigh=0x0, nFileSizeLow=0x5b0)) returned 1 [0079.081] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e4b8) returned 1 [0079.081] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Internet Explorer\\Quick Launch\\User Pinned\\TaskBar\\Internet Explorer (2).lnk" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\internet explorer\\quick launch\\user pinned\\taskbar\\internet explorer (2).lnk"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Internet Explorer\\Quick Launch\\User Pinned\\TaskBar\\Internet Explorer (2).lnk" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\internet explorer\\quick launch\\user pinned\\taskbar\\internet explorer (2).lnk")) returned 1 [0079.082] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Internet Explorer\\Quick Launch\\User Pinned\\TaskBar\\Internet Explorer.lnk", nBufferLength=0x105, lpBuffer=0x31df3c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Internet Explorer\\Quick Launch\\User Pinned\\TaskBar\\Internet Explorer.lnk", lpFilePart=0x0) returned 0x80 [0079.082] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e430) returned 1 [0079.082] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Internet Explorer\\Quick Launch\\User Pinned\\TaskBar\\Internet Explorer.lnk" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\internet explorer\\quick launch\\user pinned\\taskbar\\internet explorer.lnk"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x264 [0079.083] GetFileType (hFile=0x264) returned 0x1 [0079.083] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e42c) returned 1 [0079.083] GetFileType (hFile=0x264) returned 0x1 [0079.083] GetFileSize (in: hFile=0x264, lpFileSizeHigh=0x31e538 | out: lpFileSizeHigh=0x31e538*=0x0) returned 0x5a9 [0079.083] ReadFile (in: hFile=0x264, lpBuffer=0x276464c, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x31e4e4, lpOverlapped=0x0 | out: lpBuffer=0x276464c*, lpNumberOfBytesRead=0x31e4e4*=0x5a9, lpOverlapped=0x0) returned 1 [0079.087] CloseHandle (hObject=0x264) returned 1 [0079.101] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Internet Explorer\\Quick Launch\\User Pinned\\TaskBar\\Internet Explorer.lnk", nBufferLength=0x105, lpBuffer=0x31df28, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Internet Explorer\\Quick Launch\\User Pinned\\TaskBar\\Internet Explorer.lnk", lpFilePart=0x0) returned 0x80 [0079.101] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e41c) returned 1 [0079.101] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Internet Explorer\\Quick Launch\\User Pinned\\TaskBar\\Internet Explorer.lnk" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\internet explorer\\quick launch\\user pinned\\taskbar\\internet explorer.lnk"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x264 [0079.102] GetFileType (hFile=0x264) returned 0x1 [0079.102] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e418) returned 1 [0079.103] GetFileType (hFile=0x264) returned 0x1 [0079.103] WriteFile (in: hFile=0x264, lpBuffer=0x27b4258*, nNumberOfBytesToWrite=0x5b0, lpNumberOfBytesWritten=0x31e4ac, lpOverlapped=0x0 | out: lpBuffer=0x27b4258*, lpNumberOfBytesWritten=0x31e4ac*=0x5b0, lpOverlapped=0x0) returned 1 [0079.103] CloseHandle (hObject=0x264) returned 1 [0079.103] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Internet Explorer\\Quick Launch\\User Pinned\\TaskBar\\Internet Explorer.lnk", nBufferLength=0x105, lpBuffer=0x31e05c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Internet Explorer\\Quick Launch\\User Pinned\\TaskBar\\Internet Explorer.lnk", lpFilePart=0x0) returned 0x80 [0079.104] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Internet Explorer\\Quick Launch\\User Pinned\\TaskBar\\Internet Explorer.lnk", nBufferLength=0x105, lpBuffer=0x31e05c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Internet Explorer\\Quick Launch\\User Pinned\\TaskBar\\Internet Explorer.lnk", lpFilePart=0x0) returned 0x80 [0079.104] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e4bc) returned 1 [0079.104] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Internet Explorer\\Quick Launch\\User Pinned\\TaskBar\\Internet Explorer.lnk" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\internet explorer\\quick launch\\user pinned\\taskbar\\internet explorer.lnk"), fInfoLevelId=0x0, lpFileInformation=0x31e538 | out: lpFileInformation=0x31e538*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x28dbdd20, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28dbdd20, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x12971ee0, ftLastWriteTime.dwHighDateTime=0x1d6eb7f, nFileSizeHigh=0x0, nFileSizeLow=0x5b0)) returned 1 [0079.104] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e4b8) returned 1 [0079.104] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Internet Explorer\\Quick Launch\\User Pinned\\TaskBar\\Internet Explorer.lnk" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\internet explorer\\quick launch\\user pinned\\taskbar\\internet explorer.lnk"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Internet Explorer\\Quick Launch\\User Pinned\\TaskBar\\Internet Explorer.lnk" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\internet explorer\\quick launch\\user pinned\\taskbar\\internet explorer.lnk")) returned 1 [0079.104] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Internet Explorer\\Quick Launch\\User Pinned\\TaskBar\\Mozilla Firefox.lnk", nBufferLength=0x105, lpBuffer=0x31df3c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Internet Explorer\\Quick Launch\\User Pinned\\TaskBar\\Mozilla Firefox.lnk", lpFilePart=0x0) returned 0x7e [0079.105] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e430) returned 1 [0079.105] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Internet Explorer\\Quick Launch\\User Pinned\\TaskBar\\Mozilla Firefox.lnk" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\internet explorer\\quick launch\\user pinned\\taskbar\\mozilla firefox.lnk"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x264 [0079.105] GetFileType (hFile=0x264) returned 0x1 [0079.105] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e42c) returned 1 [0079.105] GetFileType (hFile=0x264) returned 0x1 [0079.105] GetFileSize (in: hFile=0x264, lpFileSizeHigh=0x31e538 | out: lpFileSizeHigh=0x31e538*=0x0) returned 0x491 [0079.105] ReadFile (in: hFile=0x264, lpBuffer=0x27b5ad8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x31e4e4, lpOverlapped=0x0 | out: lpBuffer=0x27b5ad8*, lpNumberOfBytesRead=0x31e4e4*=0x491, lpOverlapped=0x0) returned 1 [0079.106] CloseHandle (hObject=0x264) returned 1 [0079.119] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Internet Explorer\\Quick Launch\\User Pinned\\TaskBar\\Mozilla Firefox.lnk", nBufferLength=0x105, lpBuffer=0x31df28, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Internet Explorer\\Quick Launch\\User Pinned\\TaskBar\\Mozilla Firefox.lnk", lpFilePart=0x0) returned 0x7e [0079.119] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e41c) returned 1 [0079.120] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Internet Explorer\\Quick Launch\\User Pinned\\TaskBar\\Mozilla Firefox.lnk" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\internet explorer\\quick launch\\user pinned\\taskbar\\mozilla firefox.lnk"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x264 [0079.120] GetFileType (hFile=0x264) returned 0x1 [0079.120] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e418) returned 1 [0079.121] GetFileType (hFile=0x264) returned 0x1 [0079.121] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Internet Explorer\\Quick Launch\\User Pinned\\TaskBar\\Mozilla Firefox.lnk", nBufferLength=0x105, lpBuffer=0x31e05c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Internet Explorer\\Quick Launch\\User Pinned\\TaskBar\\Mozilla Firefox.lnk", lpFilePart=0x0) returned 0x7e [0079.121] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Internet Explorer\\Quick Launch\\User Pinned\\TaskBar\\Mozilla Firefox.lnk", nBufferLength=0x105, lpBuffer=0x31e05c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Internet Explorer\\Quick Launch\\User Pinned\\TaskBar\\Mozilla Firefox.lnk", lpFilePart=0x0) returned 0x7e [0079.121] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e4bc) returned 1 [0079.121] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Internet Explorer\\Quick Launch\\User Pinned\\TaskBar\\Mozilla Firefox.lnk" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\internet explorer\\quick launch\\user pinned\\taskbar\\mozilla firefox.lnk"), fInfoLevelId=0x0, lpFileInformation=0x31e538 | out: lpFileInformation=0x31e538*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb0de7e00, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xb65d71b0, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0x12998040, ftLastWriteTime.dwHighDateTime=0x1d6eb7f, nFileSizeHigh=0x0, nFileSizeLow=0x4a0)) returned 1 [0079.122] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e4b8) returned 1 [0079.122] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Internet Explorer\\Quick Launch\\User Pinned\\TaskBar\\Mozilla Firefox.lnk" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\internet explorer\\quick launch\\user pinned\\taskbar\\mozilla firefox.lnk"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Internet Explorer\\Quick Launch\\User Pinned\\TaskBar\\Mozilla Firefox.lnk" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\internet explorer\\quick launch\\user pinned\\taskbar\\mozilla firefox.lnk")) returned 1 [0079.122] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Internet Explorer\\Quick Launch\\User Pinned\\TaskBar\\Windows Explorer (2).lnk", nBufferLength=0x105, lpBuffer=0x31df3c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Internet Explorer\\Quick Launch\\User Pinned\\TaskBar\\Windows Explorer (2).lnk", lpFilePart=0x0) returned 0x83 [0079.122] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e430) returned 1 [0079.122] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Internet Explorer\\Quick Launch\\User Pinned\\TaskBar\\Windows Explorer (2).lnk" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\internet explorer\\quick launch\\user pinned\\taskbar\\windows explorer (2).lnk"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x264 [0079.123] GetFileType (hFile=0x264) returned 0x1 [0079.123] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e42c) returned 1 [0079.123] GetFileType (hFile=0x264) returned 0x1 [0079.123] GetFileSize (in: hFile=0x264, lpFileSizeHigh=0x31e538 | out: lpFileSizeHigh=0x31e538*=0x0) returned 0x4cc [0079.123] ReadFile (in: hFile=0x264, lpBuffer=0x2806a58, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x31e4e4, lpOverlapped=0x0 | out: lpBuffer=0x2806a58*, lpNumberOfBytesRead=0x31e4e4*=0x4cc, lpOverlapped=0x0) returned 1 [0079.124] CloseHandle (hObject=0x264) returned 1 [0079.166] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Internet Explorer\\Quick Launch\\User Pinned\\TaskBar\\Windows Explorer (2).lnk", nBufferLength=0x105, lpBuffer=0x31df28, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Internet Explorer\\Quick Launch\\User Pinned\\TaskBar\\Windows Explorer (2).lnk", lpFilePart=0x0) returned 0x83 [0079.166] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e41c) returned 1 [0079.166] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Internet Explorer\\Quick Launch\\User Pinned\\TaskBar\\Windows Explorer (2).lnk" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\internet explorer\\quick launch\\user pinned\\taskbar\\windows explorer (2).lnk"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x264 [0079.167] GetFileType (hFile=0x264) returned 0x1 [0079.167] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e418) returned 1 [0079.167] GetFileType (hFile=0x264) returned 0x1 [0079.167] WriteFile (in: hFile=0x264, lpBuffer=0x2657394*, nNumberOfBytesToWrite=0x4d0, lpNumberOfBytesWritten=0x31e4ac, lpOverlapped=0x0 | out: lpBuffer=0x2657394*, lpNumberOfBytesWritten=0x31e4ac*=0x4d0, lpOverlapped=0x0) returned 1 [0079.168] CloseHandle (hObject=0x264) returned 1 [0079.168] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Internet Explorer\\Quick Launch\\User Pinned\\TaskBar\\Windows Explorer (2).lnk", nBufferLength=0x105, lpBuffer=0x31e05c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Internet Explorer\\Quick Launch\\User Pinned\\TaskBar\\Windows Explorer (2).lnk", lpFilePart=0x0) returned 0x83 [0079.168] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Internet Explorer\\Quick Launch\\User Pinned\\TaskBar\\Windows Explorer (2).lnk", nBufferLength=0x105, lpBuffer=0x31e05c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Internet Explorer\\Quick Launch\\User Pinned\\TaskBar\\Windows Explorer (2).lnk", lpFilePart=0x0) returned 0x83 [0079.168] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e4bc) returned 1 [0079.169] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Internet Explorer\\Quick Launch\\User Pinned\\TaskBar\\Windows Explorer (2).lnk" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\internet explorer\\quick launch\\user pinned\\taskbar\\windows explorer (2).lnk"), fInfoLevelId=0x0, lpFileInformation=0x31e538 | out: lpFileInformation=0x31e538*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2dc4b320, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x2dc4b320, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x12a0a460, ftLastWriteTime.dwHighDateTime=0x1d6eb7f, nFileSizeHigh=0x0, nFileSizeLow=0x4d0)) returned 1 [0079.169] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e4b8) returned 1 [0079.169] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Internet Explorer\\Quick Launch\\User Pinned\\TaskBar\\Windows Explorer (2).lnk" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\internet explorer\\quick launch\\user pinned\\taskbar\\windows explorer (2).lnk"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Internet Explorer\\Quick Launch\\User Pinned\\TaskBar\\Windows Explorer (2).lnk" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\internet explorer\\quick launch\\user pinned\\taskbar\\windows explorer (2).lnk")) returned 1 [0079.169] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Internet Explorer\\Quick Launch\\User Pinned\\TaskBar\\Windows Explorer.lnk", nBufferLength=0x105, lpBuffer=0x31df3c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Internet Explorer\\Quick Launch\\User Pinned\\TaskBar\\Windows Explorer.lnk", lpFilePart=0x0) returned 0x7f [0079.169] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e430) returned 1 [0079.169] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Internet Explorer\\Quick Launch\\User Pinned\\TaskBar\\Windows Explorer.lnk" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\internet explorer\\quick launch\\user pinned\\taskbar\\windows explorer.lnk"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x264 [0079.170] GetFileType (hFile=0x264) returned 0x1 [0079.170] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e42c) returned 1 [0079.170] GetFileType (hFile=0x264) returned 0x1 [0079.170] GetFileSize (in: hFile=0x264, lpFileSizeHigh=0x31e538 | out: lpFileSizeHigh=0x31e538*=0x0) returned 0x4cc [0079.170] ReadFile (in: hFile=0x264, lpBuffer=0x2658c58, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x31e4e4, lpOverlapped=0x0 | out: lpBuffer=0x2658c58*, lpNumberOfBytesRead=0x31e4e4*=0x4cc, lpOverlapped=0x0) returned 1 [0079.172] CloseHandle (hObject=0x264) returned 1 [0079.187] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Internet Explorer\\Quick Launch\\User Pinned\\TaskBar\\Windows Explorer.lnk", nBufferLength=0x105, lpBuffer=0x31df28, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Internet Explorer\\Quick Launch\\User Pinned\\TaskBar\\Windows Explorer.lnk", lpFilePart=0x0) returned 0x7f [0079.187] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e41c) returned 1 [0079.187] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Internet Explorer\\Quick Launch\\User Pinned\\TaskBar\\Windows Explorer.lnk" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\internet explorer\\quick launch\\user pinned\\taskbar\\windows explorer.lnk"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x264 [0079.188] GetFileType (hFile=0x264) returned 0x1 [0079.188] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e418) returned 1 [0079.188] GetFileType (hFile=0x264) returned 0x1 [0079.188] WriteFile (in: hFile=0x264, lpBuffer=0x26a8558*, nNumberOfBytesToWrite=0x4d0, lpNumberOfBytesWritten=0x31e4ac, lpOverlapped=0x0 | out: lpBuffer=0x26a8558*, lpNumberOfBytesWritten=0x31e4ac*=0x4d0, lpOverlapped=0x0) returned 1 [0079.189] CloseHandle (hObject=0x264) returned 1 [0079.189] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Internet Explorer\\Quick Launch\\User Pinned\\TaskBar\\Windows Explorer.lnk", nBufferLength=0x105, lpBuffer=0x31e05c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Internet Explorer\\Quick Launch\\User Pinned\\TaskBar\\Windows Explorer.lnk", lpFilePart=0x0) returned 0x7f [0079.189] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Internet Explorer\\Quick Launch\\User Pinned\\TaskBar\\Windows Explorer.lnk", nBufferLength=0x105, lpBuffer=0x31e05c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Internet Explorer\\Quick Launch\\User Pinned\\TaskBar\\Windows Explorer.lnk", lpFilePart=0x0) returned 0x7f [0079.189] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e4bc) returned 1 [0079.189] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Internet Explorer\\Quick Launch\\User Pinned\\TaskBar\\Windows Explorer.lnk" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\internet explorer\\quick launch\\user pinned\\taskbar\\windows explorer.lnk"), fInfoLevelId=0x0, lpFileInformation=0x31e538 | out: lpFileInformation=0x31e538*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x28dbdd20, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28dbdd20, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x12a56720, ftLastWriteTime.dwHighDateTime=0x1d6eb7f, nFileSizeHigh=0x0, nFileSizeLow=0x4d0)) returned 1 [0079.189] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e4b8) returned 1 [0079.189] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Internet Explorer\\Quick Launch\\User Pinned\\TaskBar\\Windows Explorer.lnk" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\internet explorer\\quick launch\\user pinned\\taskbar\\windows explorer.lnk"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Internet Explorer\\Quick Launch\\User Pinned\\TaskBar\\Windows Explorer.lnk" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\internet explorer\\quick launch\\user pinned\\taskbar\\windows explorer.lnk")) returned 1 [0079.190] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Internet Explorer\\Quick Launch\\User Pinned\\TaskBar\\Windows Media Player (2).lnk", nBufferLength=0x105, lpBuffer=0x31df3c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Internet Explorer\\Quick Launch\\User Pinned\\TaskBar\\Windows Media Player (2).lnk", lpFilePart=0x0) returned 0x87 [0079.190] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e430) returned 1 [0079.190] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Internet Explorer\\Quick Launch\\User Pinned\\TaskBar\\Windows Media Player (2).lnk" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\internet explorer\\quick launch\\user pinned\\taskbar\\windows media player (2).lnk"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x264 [0079.190] GetFileType (hFile=0x264) returned 0x1 [0079.190] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e42c) returned 1 [0079.190] GetFileType (hFile=0x264) returned 0x1 [0079.190] GetFileSize (in: hFile=0x264, lpFileSizeHigh=0x31e538 | out: lpFileSizeHigh=0x31e538*=0x0) returned 0x60b [0079.190] ReadFile (in: hFile=0x264, lpBuffer=0x26a9f6c, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x31e4e4, lpOverlapped=0x0 | out: lpBuffer=0x26a9f6c*, lpNumberOfBytesRead=0x31e4e4*=0x60b, lpOverlapped=0x0) returned 1 [0079.191] CloseHandle (hObject=0x264) returned 1 [0079.205] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Internet Explorer\\Quick Launch\\User Pinned\\TaskBar\\Windows Media Player (2).lnk", nBufferLength=0x105, lpBuffer=0x31df28, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Internet Explorer\\Quick Launch\\User Pinned\\TaskBar\\Windows Media Player (2).lnk", lpFilePart=0x0) returned 0x87 [0079.205] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e41c) returned 1 [0079.205] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Internet Explorer\\Quick Launch\\User Pinned\\TaskBar\\Windows Media Player (2).lnk" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\internet explorer\\quick launch\\user pinned\\taskbar\\windows media player (2).lnk"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x264 [0079.206] GetFileType (hFile=0x264) returned 0x1 [0079.206] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e418) returned 1 [0079.206] GetFileType (hFile=0x264) returned 0x1 [0079.206] WriteFile (in: hFile=0x264, lpBuffer=0x26f9d74*, nNumberOfBytesToWrite=0x610, lpNumberOfBytesWritten=0x31e4ac, lpOverlapped=0x0 | out: lpBuffer=0x26f9d74*, lpNumberOfBytesWritten=0x31e4ac*=0x610, lpOverlapped=0x0) returned 1 [0079.207] CloseHandle (hObject=0x264) returned 1 [0079.208] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Internet Explorer\\Quick Launch\\User Pinned\\TaskBar\\Windows Media Player (2).lnk", nBufferLength=0x105, lpBuffer=0x31e05c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Internet Explorer\\Quick Launch\\User Pinned\\TaskBar\\Windows Media Player (2).lnk", lpFilePart=0x0) returned 0x87 [0079.208] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Internet Explorer\\Quick Launch\\User Pinned\\TaskBar\\Windows Media Player (2).lnk", nBufferLength=0x105, lpBuffer=0x31e05c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Internet Explorer\\Quick Launch\\User Pinned\\TaskBar\\Windows Media Player (2).lnk", lpFilePart=0x0) returned 0x87 [0079.208] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e4bc) returned 1 [0079.208] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Internet Explorer\\Quick Launch\\User Pinned\\TaskBar\\Windows Media Player (2).lnk" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\internet explorer\\quick launch\\user pinned\\taskbar\\windows media player (2).lnk"), fInfoLevelId=0x0, lpFileInformation=0x31e538 | out: lpFileInformation=0x31e538*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2dc4b320, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x2dc4b320, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x12a7c880, ftLastWriteTime.dwHighDateTime=0x1d6eb7f, nFileSizeHigh=0x0, nFileSizeLow=0x610)) returned 1 [0079.208] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e4b8) returned 1 [0079.208] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Internet Explorer\\Quick Launch\\User Pinned\\TaskBar\\Windows Media Player (2).lnk" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\internet explorer\\quick launch\\user pinned\\taskbar\\windows media player (2).lnk"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Internet Explorer\\Quick Launch\\User Pinned\\TaskBar\\Windows Media Player (2).lnk" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\internet explorer\\quick launch\\user pinned\\taskbar\\windows media player (2).lnk")) returned 1 [0079.209] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Internet Explorer\\Quick Launch\\User Pinned\\TaskBar\\Windows Media Player.lnk", nBufferLength=0x105, lpBuffer=0x31df3c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Internet Explorer\\Quick Launch\\User Pinned\\TaskBar\\Windows Media Player.lnk", lpFilePart=0x0) returned 0x83 [0079.209] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e430) returned 1 [0079.209] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Internet Explorer\\Quick Launch\\User Pinned\\TaskBar\\Windows Media Player.lnk" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\internet explorer\\quick launch\\user pinned\\taskbar\\windows media player.lnk"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x264 [0079.209] GetFileType (hFile=0x264) returned 0x1 [0079.209] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e42c) returned 1 [0079.209] GetFileType (hFile=0x264) returned 0x1 [0079.209] GetFileSize (in: hFile=0x264, lpFileSizeHigh=0x31e538 | out: lpFileSizeHigh=0x31e538*=0x0) returned 0x60b [0079.209] ReadFile (in: hFile=0x264, lpBuffer=0x26fb798, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x31e4e4, lpOverlapped=0x0 | out: lpBuffer=0x26fb798*, lpNumberOfBytesRead=0x31e4e4*=0x60b, lpOverlapped=0x0) returned 1 [0079.211] CloseHandle (hObject=0x264) returned 1 [0079.225] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Internet Explorer\\Quick Launch\\User Pinned\\TaskBar\\Windows Media Player.lnk", nBufferLength=0x105, lpBuffer=0x31df28, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Internet Explorer\\Quick Launch\\User Pinned\\TaskBar\\Windows Media Player.lnk", lpFilePart=0x0) returned 0x83 [0079.225] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e41c) returned 1 [0079.225] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Internet Explorer\\Quick Launch\\User Pinned\\TaskBar\\Windows Media Player.lnk" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\internet explorer\\quick launch\\user pinned\\taskbar\\windows media player.lnk"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x264 [0079.226] GetFileType (hFile=0x264) returned 0x1 [0079.226] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e418) returned 1 [0079.226] GetFileType (hFile=0x264) returned 0x1 [0079.226] WriteFile (in: hFile=0x264, lpBuffer=0x274b590*, nNumberOfBytesToWrite=0x610, lpNumberOfBytesWritten=0x31e4ac, lpOverlapped=0x0 | out: lpBuffer=0x274b590*, lpNumberOfBytesWritten=0x31e4ac*=0x610, lpOverlapped=0x0) returned 1 [0079.227] CloseHandle (hObject=0x264) returned 1 [0079.227] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Internet Explorer\\Quick Launch\\User Pinned\\TaskBar\\Windows Media Player.lnk", nBufferLength=0x105, lpBuffer=0x31e05c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Internet Explorer\\Quick Launch\\User Pinned\\TaskBar\\Windows Media Player.lnk", lpFilePart=0x0) returned 0x83 [0079.227] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Internet Explorer\\Quick Launch\\User Pinned\\TaskBar\\Windows Media Player.lnk", nBufferLength=0x105, lpBuffer=0x31e05c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Internet Explorer\\Quick Launch\\User Pinned\\TaskBar\\Windows Media Player.lnk", lpFilePart=0x0) returned 0x83 [0079.227] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e4bc) returned 1 [0079.227] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Internet Explorer\\Quick Launch\\User Pinned\\TaskBar\\Windows Media Player.lnk" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\internet explorer\\quick launch\\user pinned\\taskbar\\windows media player.lnk"), fInfoLevelId=0x0, lpFileInformation=0x31e538 | out: lpFileInformation=0x31e538*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x28dbdd20, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28dbdd20, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x12aa29e0, ftLastWriteTime.dwHighDateTime=0x1d6eb7f, nFileSizeHigh=0x0, nFileSizeLow=0x610)) returned 1 [0079.227] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e4b8) returned 1 [0079.227] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Internet Explorer\\Quick Launch\\User Pinned\\TaskBar\\Windows Media Player.lnk" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\internet explorer\\quick launch\\user pinned\\taskbar\\windows media player.lnk"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Internet Explorer\\Quick Launch\\User Pinned\\TaskBar\\Windows Media Player.lnk" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\internet explorer\\quick launch\\user pinned\\taskbar\\windows media player.lnk")) returned 1 [0079.228] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e654) returned 1 [0079.228] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Internet Explorer\\UserData", nBufferLength=0x105, lpBuffer=0x31e15c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Internet Explorer\\UserData", lpFilePart=0x0) returned 0x52 [0079.228] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Internet Explorer\\UserData\\", nBufferLength=0x105, lpBuffer=0x31e130, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Internet Explorer\\UserData\\", lpFilePart=0x0) returned 0x53 [0079.228] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Internet Explorer\\UserData\\*", lpFindFileData=0x31e37c | out: lpFindFileData=0x31e37c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x54b77470, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x54b77470, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x54b77470, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x381e40 [0079.228] FindNextFileW (in: hFindFile=0x381e40, lpFindFileData=0x31e38c | out: lpFindFileData=0x31e38c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x54b77470, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x54b77470, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x54b77470, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0079.229] FindNextFileW (in: hFindFile=0x381e40, lpFindFileData=0x31e38c | out: lpFindFileData=0x31e38c*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0x54b77470, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x54b9d5d0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x54b9d5d0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Low", cAlternateFileName="")) returned 1 [0079.229] FindNextFileW (in: hFindFile=0x381e40, lpFindFileData=0x31e38c | out: lpFindFileData=0x31e38c*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0x54b77470, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x54b9d5d0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x54b9d5d0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Low", cAlternateFileName="")) returned 0 [0079.229] FindClose (in: hFindFile=0x381e40 | out: hFindFile=0x381e40) returned 1 [0079.229] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e614) returned 1 [0079.229] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e620) returned 1 [0079.229] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e654) returned 1 [0079.229] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Internet Explorer\\UserData", nBufferLength=0x105, lpBuffer=0x31e15c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Internet Explorer\\UserData", lpFilePart=0x0) returned 0x52 [0079.229] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Internet Explorer\\UserData\\", nBufferLength=0x105, lpBuffer=0x31e130, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Internet Explorer\\UserData\\", lpFilePart=0x0) returned 0x53 [0079.229] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Internet Explorer\\UserData\\*", lpFindFileData=0x31e37c | out: lpFindFileData=0x31e37c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x54b77470, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x54b77470, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x54b77470, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x381e40 [0079.229] FindNextFileW (in: hFindFile=0x381e40, lpFindFileData=0x31e38c | out: lpFindFileData=0x31e38c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x54b77470, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x54b77470, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x54b77470, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0079.229] FindNextFileW (in: hFindFile=0x381e40, lpFindFileData=0x31e38c | out: lpFindFileData=0x31e38c*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0x54b77470, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x54b9d5d0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x54b9d5d0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Low", cAlternateFileName="")) returned 1 [0079.229] FindNextFileW (in: hFindFile=0x381e40, lpFindFileData=0x31e38c | out: lpFindFileData=0x31e38c*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0079.230] FindClose (in: hFindFile=0x381e40 | out: hFindFile=0x381e40) returned 1 [0079.230] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e614) returned 1 [0079.230] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e620) returned 1 [0079.230] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e5dc) returned 1 [0079.230] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Internet Explorer\\UserData\\Low", nBufferLength=0x105, lpBuffer=0x31e0e4, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Internet Explorer\\UserData\\Low", lpFilePart=0x0) returned 0x56 [0079.230] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Internet Explorer\\UserData\\Low\\", nBufferLength=0x105, lpBuffer=0x31e0b8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Internet Explorer\\UserData\\Low\\", lpFilePart=0x0) returned 0x57 [0079.230] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Internet Explorer\\UserData\\Low\\*", lpFindFileData=0x31e304 | out: lpFindFileData=0x31e304*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0x54b77470, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x54b9d5d0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x54b9d5d0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x381e40 [0079.230] FindNextFileW (in: hFindFile=0x381e40, lpFindFileData=0x31e314 | out: lpFindFileData=0x31e314*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0x54b77470, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x54b9d5d0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x54b9d5d0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0079.230] FindNextFileW (in: hFindFile=0x381e40, lpFindFileData=0x31e314 | out: lpFindFileData=0x31e314*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0x54b9d5d0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x54b9d5d0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x54b9d5d0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="65UX3YG0", cAlternateFileName="")) returned 1 [0079.230] FindNextFileW (in: hFindFile=0x381e40, lpFindFileData=0x31e314 | out: lpFindFileData=0x31e314*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0x54b9d5d0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x54b9d5d0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x54b9d5d0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="AY721QDR", cAlternateFileName="")) returned 1 [0079.230] FindNextFileW (in: hFindFile=0x381e40, lpFindFileData=0x31e314 | out: lpFindFileData=0x31e314*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0x54b9d5d0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x54b9d5d0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x54b9d5d0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="DZBKZBIC", cAlternateFileName="")) returned 1 [0079.231] FindNextFileW (in: hFindFile=0x381e40, lpFindFileData=0x31e314 | out: lpFindFileData=0x31e314*(dwFileAttributes=0x2026, ftCreationTime.dwLowDateTime=0x54b9d5d0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x54b9d5d0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0xbaf619f0, ftLastWriteTime.dwHighDateTime=0x1d2faf2, nFileSizeHigh=0x0, nFileSizeLow=0x8000, dwReserved0=0x0, dwReserved1=0x0, cFileName="index.dat", cAlternateFileName="")) returned 1 [0079.231] FindNextFileW (in: hFindFile=0x381e40, lpFindFileData=0x31e314 | out: lpFindFileData=0x31e314*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0x54b9d5d0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x54b9d5d0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x54b9d5d0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="VRLZOZ0E", cAlternateFileName="")) returned 1 [0079.231] FindNextFileW (in: hFindFile=0x381e40, lpFindFileData=0x31e314 | out: lpFindFileData=0x31e314*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0x54b9d5d0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x54b9d5d0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x54b9d5d0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="VRLZOZ0E", cAlternateFileName="")) returned 0 [0079.231] FindClose (in: hFindFile=0x381e40 | out: hFindFile=0x381e40) returned 1 [0079.231] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e59c) returned 1 [0079.231] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e5a8) returned 1 [0079.231] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e5dc) returned 1 [0079.231] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Internet Explorer\\UserData\\Low", nBufferLength=0x105, lpBuffer=0x31e0e4, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Internet Explorer\\UserData\\Low", lpFilePart=0x0) returned 0x56 [0079.231] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Internet Explorer\\UserData\\Low\\", nBufferLength=0x105, lpBuffer=0x31e0b8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Internet Explorer\\UserData\\Low\\", lpFilePart=0x0) returned 0x57 [0079.231] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Internet Explorer\\UserData\\Low\\*", lpFindFileData=0x31e304 | out: lpFindFileData=0x31e304*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0x54b77470, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x54b9d5d0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x54b9d5d0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x381e40 [0079.232] FindNextFileW (in: hFindFile=0x381e40, lpFindFileData=0x31e314 | out: lpFindFileData=0x31e314*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0x54b77470, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x54b9d5d0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x54b9d5d0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0079.232] FindNextFileW (in: hFindFile=0x381e40, lpFindFileData=0x31e314 | out: lpFindFileData=0x31e314*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0x54b9d5d0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x54b9d5d0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x54b9d5d0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="65UX3YG0", cAlternateFileName="")) returned 1 [0079.232] FindNextFileW (in: hFindFile=0x381e40, lpFindFileData=0x31e314 | out: lpFindFileData=0x31e314*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0x54b9d5d0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x54b9d5d0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x54b9d5d0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="AY721QDR", cAlternateFileName="")) returned 1 [0079.232] FindNextFileW (in: hFindFile=0x381e40, lpFindFileData=0x31e314 | out: lpFindFileData=0x31e314*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0x54b9d5d0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x54b9d5d0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x54b9d5d0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="DZBKZBIC", cAlternateFileName="")) returned 1 [0079.232] FindNextFileW (in: hFindFile=0x381e40, lpFindFileData=0x31e314 | out: lpFindFileData=0x31e314*(dwFileAttributes=0x2026, ftCreationTime.dwLowDateTime=0x54b9d5d0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x54b9d5d0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0xbaf619f0, ftLastWriteTime.dwHighDateTime=0x1d2faf2, nFileSizeHigh=0x0, nFileSizeLow=0x8000, dwReserved0=0x0, dwReserved1=0x0, cFileName="index.dat", cAlternateFileName="")) returned 1 [0079.232] FindNextFileW (in: hFindFile=0x381e40, lpFindFileData=0x31e314 | out: lpFindFileData=0x31e314*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0x54b9d5d0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x54b9d5d0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x54b9d5d0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="VRLZOZ0E", cAlternateFileName="")) returned 1 [0079.232] FindNextFileW (in: hFindFile=0x381e40, lpFindFileData=0x31e314 | out: lpFindFileData=0x31e314*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0079.232] FindClose (in: hFindFile=0x381e40 | out: hFindFile=0x381e40) returned 1 [0079.232] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e59c) returned 1 [0079.232] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e5a8) returned 1 [0079.232] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e564) returned 1 [0079.233] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Internet Explorer\\UserData\\Low\\65UX3YG0", nBufferLength=0x105, lpBuffer=0x31e06c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Internet Explorer\\UserData\\Low\\65UX3YG0", lpFilePart=0x0) returned 0x5f [0079.233] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Internet Explorer\\UserData\\Low\\65UX3YG0\\", nBufferLength=0x105, lpBuffer=0x31e040, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Internet Explorer\\UserData\\Low\\65UX3YG0\\", lpFilePart=0x0) returned 0x60 [0079.233] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Internet Explorer\\UserData\\Low\\65UX3YG0\\*", lpFindFileData=0x31e28c | out: lpFindFileData=0x31e28c*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0x54b9d5d0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x54b9d5d0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x54b9d5d0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x381e40 [0079.234] FindNextFileW (in: hFindFile=0x381e40, lpFindFileData=0x31e29c | out: lpFindFileData=0x31e29c*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0x54b9d5d0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x54b9d5d0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x54b9d5d0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0079.234] FindNextFileW (in: hFindFile=0x381e40, lpFindFileData=0x31e29c | out: lpFindFileData=0x31e29c*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0x54b9d5d0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x54b9d5d0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x54b9d5d0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 0 [0079.234] FindClose (in: hFindFile=0x381e40 | out: hFindFile=0x381e40) returned 1 [0079.234] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e524) returned 1 [0079.234] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e530) returned 1 [0079.234] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e564) returned 1 [0079.234] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Internet Explorer\\UserData\\Low\\65UX3YG0", nBufferLength=0x105, lpBuffer=0x31e06c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Internet Explorer\\UserData\\Low\\65UX3YG0", lpFilePart=0x0) returned 0x5f [0079.234] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Internet Explorer\\UserData\\Low\\65UX3YG0\\", nBufferLength=0x105, lpBuffer=0x31e040, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Internet Explorer\\UserData\\Low\\65UX3YG0\\", lpFilePart=0x0) returned 0x60 [0079.234] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Internet Explorer\\UserData\\Low\\65UX3YG0\\*", lpFindFileData=0x31e28c | out: lpFindFileData=0x31e28c*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0x54b9d5d0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x54b9d5d0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x54b9d5d0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x381e40 [0079.234] FindNextFileW (in: hFindFile=0x381e40, lpFindFileData=0x31e29c | out: lpFindFileData=0x31e29c*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0x54b9d5d0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x54b9d5d0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x54b9d5d0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0079.235] FindNextFileW (in: hFindFile=0x381e40, lpFindFileData=0x31e29c | out: lpFindFileData=0x31e29c*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0x54b9d5d0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x54b9d5d0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x54b9d5d0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 0 [0079.235] FindClose (in: hFindFile=0x381e40 | out: hFindFile=0x381e40) returned 1 [0079.235] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e524) returned 1 [0079.235] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e530) returned 1 [0079.235] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e564) returned 1 [0079.235] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Internet Explorer\\UserData\\Low\\AY721QDR", nBufferLength=0x105, lpBuffer=0x31e06c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Internet Explorer\\UserData\\Low\\AY721QDR", lpFilePart=0x0) returned 0x5f [0079.235] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Internet Explorer\\UserData\\Low\\AY721QDR\\", nBufferLength=0x105, lpBuffer=0x31e040, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Internet Explorer\\UserData\\Low\\AY721QDR\\", lpFilePart=0x0) returned 0x60 [0079.235] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Internet Explorer\\UserData\\Low\\AY721QDR\\*", lpFindFileData=0x31e28c | out: lpFindFileData=0x31e28c*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0x54b9d5d0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x54b9d5d0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x54b9d5d0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x381e40 [0079.235] FindNextFileW (in: hFindFile=0x381e40, lpFindFileData=0x31e29c | out: lpFindFileData=0x31e29c*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0x54b9d5d0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x54b9d5d0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x54b9d5d0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0079.235] FindNextFileW (in: hFindFile=0x381e40, lpFindFileData=0x31e29c | out: lpFindFileData=0x31e29c*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0x54b9d5d0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x54b9d5d0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x54b9d5d0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 0 [0079.235] FindClose (in: hFindFile=0x381e40 | out: hFindFile=0x381e40) returned 1 [0079.236] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e524) returned 1 [0079.236] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e530) returned 1 [0079.236] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e564) returned 1 [0079.236] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Internet Explorer\\UserData\\Low\\AY721QDR", nBufferLength=0x105, lpBuffer=0x31e06c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Internet Explorer\\UserData\\Low\\AY721QDR", lpFilePart=0x0) returned 0x5f [0079.236] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Internet Explorer\\UserData\\Low\\AY721QDR\\", nBufferLength=0x105, lpBuffer=0x31e040, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Internet Explorer\\UserData\\Low\\AY721QDR\\", lpFilePart=0x0) returned 0x60 [0079.236] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Internet Explorer\\UserData\\Low\\AY721QDR\\*", lpFindFileData=0x31e28c | out: lpFindFileData=0x31e28c*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0x54b9d5d0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x54b9d5d0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x54b9d5d0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x381e40 [0079.236] FindNextFileW (in: hFindFile=0x381e40, lpFindFileData=0x31e29c | out: lpFindFileData=0x31e29c*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0x54b9d5d0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x54b9d5d0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x54b9d5d0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0079.236] FindNextFileW (in: hFindFile=0x381e40, lpFindFileData=0x31e29c | out: lpFindFileData=0x31e29c*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0x54b9d5d0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x54b9d5d0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x54b9d5d0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 0 [0079.236] FindClose (in: hFindFile=0x381e40 | out: hFindFile=0x381e40) returned 1 [0079.236] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e524) returned 1 [0079.236] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e530) returned 1 [0079.236] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e564) returned 1 [0079.236] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Internet Explorer\\UserData\\Low\\DZBKZBIC", nBufferLength=0x105, lpBuffer=0x31e06c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Internet Explorer\\UserData\\Low\\DZBKZBIC", lpFilePart=0x0) returned 0x5f [0079.236] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Internet Explorer\\UserData\\Low\\DZBKZBIC\\", nBufferLength=0x105, lpBuffer=0x31e040, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Internet Explorer\\UserData\\Low\\DZBKZBIC\\", lpFilePart=0x0) returned 0x60 [0079.236] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Internet Explorer\\UserData\\Low\\DZBKZBIC\\*", lpFindFileData=0x31e28c | out: lpFindFileData=0x31e28c*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0x54b9d5d0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x54b9d5d0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x54b9d5d0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x381e40 [0079.237] FindNextFileW (in: hFindFile=0x381e40, lpFindFileData=0x31e29c | out: lpFindFileData=0x31e29c*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0x54b9d5d0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x54b9d5d0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x54b9d5d0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0079.237] FindNextFileW (in: hFindFile=0x381e40, lpFindFileData=0x31e29c | out: lpFindFileData=0x31e29c*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0x54b9d5d0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x54b9d5d0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x54b9d5d0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 0 [0079.237] FindClose (in: hFindFile=0x381e40 | out: hFindFile=0x381e40) returned 1 [0079.237] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e524) returned 1 [0079.237] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e530) returned 1 [0079.237] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e564) returned 1 [0079.237] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Internet Explorer\\UserData\\Low\\DZBKZBIC", nBufferLength=0x105, lpBuffer=0x31e06c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Internet Explorer\\UserData\\Low\\DZBKZBIC", lpFilePart=0x0) returned 0x5f [0079.237] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Internet Explorer\\UserData\\Low\\DZBKZBIC\\", nBufferLength=0x105, lpBuffer=0x31e040, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Internet Explorer\\UserData\\Low\\DZBKZBIC\\", lpFilePart=0x0) returned 0x60 [0079.237] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Internet Explorer\\UserData\\Low\\DZBKZBIC\\*", lpFindFileData=0x31e28c | out: lpFindFileData=0x31e28c*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0x54b9d5d0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x54b9d5d0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x54b9d5d0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x381e40 [0079.237] FindNextFileW (in: hFindFile=0x381e40, lpFindFileData=0x31e29c | out: lpFindFileData=0x31e29c*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0x54b9d5d0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x54b9d5d0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x54b9d5d0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0079.237] FindNextFileW (in: hFindFile=0x381e40, lpFindFileData=0x31e29c | out: lpFindFileData=0x31e29c*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0x54b9d5d0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x54b9d5d0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x54b9d5d0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 0 [0079.238] FindClose (in: hFindFile=0x381e40 | out: hFindFile=0x381e40) returned 1 [0079.238] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e524) returned 1 [0079.238] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e530) returned 1 [0079.238] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e564) returned 1 [0079.238] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Internet Explorer\\UserData\\Low\\VRLZOZ0E", nBufferLength=0x105, lpBuffer=0x31e06c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Internet Explorer\\UserData\\Low\\VRLZOZ0E", lpFilePart=0x0) returned 0x5f [0079.238] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Internet Explorer\\UserData\\Low\\VRLZOZ0E\\", nBufferLength=0x105, lpBuffer=0x31e040, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Internet Explorer\\UserData\\Low\\VRLZOZ0E\\", lpFilePart=0x0) returned 0x60 [0079.238] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Internet Explorer\\UserData\\Low\\VRLZOZ0E\\*", lpFindFileData=0x31e28c | out: lpFindFileData=0x31e28c*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0x54b9d5d0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x54b9d5d0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x54b9d5d0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x381e40 [0079.238] FindNextFileW (in: hFindFile=0x381e40, lpFindFileData=0x31e29c | out: lpFindFileData=0x31e29c*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0x54b9d5d0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x54b9d5d0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x54b9d5d0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0079.238] FindNextFileW (in: hFindFile=0x381e40, lpFindFileData=0x31e29c | out: lpFindFileData=0x31e29c*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0x54b9d5d0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x54b9d5d0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x54b9d5d0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 0 [0079.238] FindClose (in: hFindFile=0x381e40 | out: hFindFile=0x381e40) returned 1 [0079.238] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e524) returned 1 [0079.238] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e530) returned 1 [0079.238] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e564) returned 1 [0079.238] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Internet Explorer\\UserData\\Low\\VRLZOZ0E", nBufferLength=0x105, lpBuffer=0x31e06c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Internet Explorer\\UserData\\Low\\VRLZOZ0E", lpFilePart=0x0) returned 0x5f [0079.239] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Internet Explorer\\UserData\\Low\\VRLZOZ0E\\", nBufferLength=0x105, lpBuffer=0x31e040, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Internet Explorer\\UserData\\Low\\VRLZOZ0E\\", lpFilePart=0x0) returned 0x60 [0079.239] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Internet Explorer\\UserData\\Low\\VRLZOZ0E\\*", lpFindFileData=0x31e28c | out: lpFindFileData=0x31e28c*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0x54b9d5d0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x54b9d5d0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x54b9d5d0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x381e40 [0079.239] FindNextFileW (in: hFindFile=0x381e40, lpFindFileData=0x31e29c | out: lpFindFileData=0x31e29c*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0x54b9d5d0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x54b9d5d0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x54b9d5d0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0079.239] FindNextFileW (in: hFindFile=0x381e40, lpFindFileData=0x31e29c | out: lpFindFileData=0x31e29c*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0x54b9d5d0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x54b9d5d0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x54b9d5d0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 0 [0079.239] FindClose (in: hFindFile=0x381e40 | out: hFindFile=0x381e40) returned 1 [0079.239] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e524) returned 1 [0079.239] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e530) returned 1 [0079.239] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e6cc) returned 1 [0079.239] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\MMC", nBufferLength=0x105, lpBuffer=0x31e1d4, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\MMC", lpFilePart=0x0) returned 0x3b [0079.239] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\MMC\\", nBufferLength=0x105, lpBuffer=0x31e1a8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\MMC\\", lpFilePart=0x0) returned 0x3c [0079.239] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\MMC\\*", lpFindFileData=0x31e3f4 | out: lpFindFileData=0x31e3f4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x2f5d6350, ftCreationTime.dwHighDateTime=0x1d2fa9b, ftLastAccessTime.dwLowDateTime=0x2f5d6350, ftLastAccessTime.dwHighDateTime=0x1d2fa9b, ftLastWriteTime.dwLowDateTime=0x2f5d6350, ftLastWriteTime.dwHighDateTime=0x1d2fa9b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x381e40 [0079.240] FindNextFileW (in: hFindFile=0x381e40, lpFindFileData=0x31e404 | out: lpFindFileData=0x31e404*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x2f5d6350, ftCreationTime.dwHighDateTime=0x1d2fa9b, ftLastAccessTime.dwLowDateTime=0x2f5d6350, ftLastAccessTime.dwHighDateTime=0x1d2fa9b, ftLastWriteTime.dwLowDateTime=0x2f5d6350, ftLastWriteTime.dwHighDateTime=0x1d2fa9b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0079.240] FindNextFileW (in: hFindFile=0x381e40, lpFindFileData=0x31e404 | out: lpFindFileData=0x31e404*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x2f5d6350, ftCreationTime.dwHighDateTime=0x1d2fa9b, ftLastAccessTime.dwLowDateTime=0x2f5d6350, ftLastAccessTime.dwHighDateTime=0x1d2fa9b, ftLastWriteTime.dwLowDateTime=0x2f5d6350, ftLastWriteTime.dwHighDateTime=0x1d2fa9b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 0 [0079.240] FindClose (in: hFindFile=0x381e40 | out: hFindFile=0x381e40) returned 1 [0079.240] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e68c) returned 1 [0079.240] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e698) returned 1 [0079.240] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e6cc) returned 1 [0079.240] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\MMC", nBufferLength=0x105, lpBuffer=0x31e1d4, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\MMC", lpFilePart=0x0) returned 0x3b [0079.240] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\MMC\\", nBufferLength=0x105, lpBuffer=0x31e1a8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\MMC\\", lpFilePart=0x0) returned 0x3c [0079.240] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\MMC\\*", lpFindFileData=0x31e3f4 | out: lpFindFileData=0x31e3f4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x2f5d6350, ftCreationTime.dwHighDateTime=0x1d2fa9b, ftLastAccessTime.dwLowDateTime=0x2f5d6350, ftLastAccessTime.dwHighDateTime=0x1d2fa9b, ftLastWriteTime.dwLowDateTime=0x2f5d6350, ftLastWriteTime.dwHighDateTime=0x1d2fa9b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x381e40 [0079.240] FindNextFileW (in: hFindFile=0x381e40, lpFindFileData=0x31e404 | out: lpFindFileData=0x31e404*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x2f5d6350, ftCreationTime.dwHighDateTime=0x1d2fa9b, ftLastAccessTime.dwLowDateTime=0x2f5d6350, ftLastAccessTime.dwHighDateTime=0x1d2fa9b, ftLastWriteTime.dwLowDateTime=0x2f5d6350, ftLastWriteTime.dwHighDateTime=0x1d2fa9b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0079.241] FindNextFileW (in: hFindFile=0x381e40, lpFindFileData=0x31e404 | out: lpFindFileData=0x31e404*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x2f5d6350, ftCreationTime.dwHighDateTime=0x1d2fa9b, ftLastAccessTime.dwLowDateTime=0x2f5d6350, ftLastAccessTime.dwHighDateTime=0x1d2fa9b, ftLastWriteTime.dwLowDateTime=0x2f5d6350, ftLastWriteTime.dwHighDateTime=0x1d2fa9b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 0 [0079.241] FindClose (in: hFindFile=0x381e40 | out: hFindFile=0x381e40) returned 1 [0079.241] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e68c) returned 1 [0079.241] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e698) returned 1 [0079.241] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e6cc) returned 1 [0079.241] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\MS Project", nBufferLength=0x105, lpBuffer=0x31e1d4, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\MS Project", lpFilePart=0x0) returned 0x42 [0079.241] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\MS Project\\", nBufferLength=0x105, lpBuffer=0x31e1a8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\MS Project\\", lpFilePart=0x0) returned 0x43 [0079.241] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\MS Project\\*", lpFindFileData=0x31e3f4 | out: lpFindFileData=0x31e3f4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x8d940a0, ftCreationTime.dwHighDateTime=0x1d305fe, ftLastAccessTime.dwLowDateTime=0x8d940a0, ftLastAccessTime.dwHighDateTime=0x1d305fe, ftLastWriteTime.dwLowDateTime=0x8d940a0, ftLastWriteTime.dwHighDateTime=0x1d305fe, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x381e40 [0079.242] FindNextFileW (in: hFindFile=0x381e40, lpFindFileData=0x31e404 | out: lpFindFileData=0x31e404*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x8d940a0, ftCreationTime.dwHighDateTime=0x1d305fe, ftLastAccessTime.dwLowDateTime=0x8d940a0, ftLastAccessTime.dwHighDateTime=0x1d305fe, ftLastWriteTime.dwLowDateTime=0x8d940a0, ftLastWriteTime.dwHighDateTime=0x1d305fe, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0079.242] FindNextFileW (in: hFindFile=0x381e40, lpFindFileData=0x31e404 | out: lpFindFileData=0x31e404*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x8d940a0, ftCreationTime.dwHighDateTime=0x1d305fe, ftLastAccessTime.dwLowDateTime=0x8d940a0, ftLastAccessTime.dwHighDateTime=0x1d305fe, ftLastWriteTime.dwLowDateTime=0x8d940a0, ftLastWriteTime.dwHighDateTime=0x1d305fe, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="14", cAlternateFileName="")) returned 1 [0079.242] FindNextFileW (in: hFindFile=0x381e40, lpFindFileData=0x31e404 | out: lpFindFileData=0x31e404*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x8d940a0, ftCreationTime.dwHighDateTime=0x1d305fe, ftLastAccessTime.dwLowDateTime=0x8d940a0, ftLastAccessTime.dwHighDateTime=0x1d305fe, ftLastWriteTime.dwLowDateTime=0x8d940a0, ftLastWriteTime.dwHighDateTime=0x1d305fe, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="14", cAlternateFileName="")) returned 0 [0079.242] FindClose (in: hFindFile=0x381e40 | out: hFindFile=0x381e40) returned 1 [0079.242] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e68c) returned 1 [0079.242] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e698) returned 1 [0079.242] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e6cc) returned 1 [0079.242] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\MS Project", nBufferLength=0x105, lpBuffer=0x31e1d4, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\MS Project", lpFilePart=0x0) returned 0x42 [0079.243] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\MS Project\\", nBufferLength=0x105, lpBuffer=0x31e1a8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\MS Project\\", lpFilePart=0x0) returned 0x43 [0079.243] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\MS Project\\*", lpFindFileData=0x31e3f4 | out: lpFindFileData=0x31e3f4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x8d940a0, ftCreationTime.dwHighDateTime=0x1d305fe, ftLastAccessTime.dwLowDateTime=0x8d940a0, ftLastAccessTime.dwHighDateTime=0x1d305fe, ftLastWriteTime.dwLowDateTime=0x8d940a0, ftLastWriteTime.dwHighDateTime=0x1d305fe, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x381e40 [0079.243] FindNextFileW (in: hFindFile=0x381e40, lpFindFileData=0x31e404 | out: lpFindFileData=0x31e404*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x8d940a0, ftCreationTime.dwHighDateTime=0x1d305fe, ftLastAccessTime.dwLowDateTime=0x8d940a0, ftLastAccessTime.dwHighDateTime=0x1d305fe, ftLastWriteTime.dwLowDateTime=0x8d940a0, ftLastWriteTime.dwHighDateTime=0x1d305fe, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0079.243] FindNextFileW (in: hFindFile=0x381e40, lpFindFileData=0x31e404 | out: lpFindFileData=0x31e404*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x8d940a0, ftCreationTime.dwHighDateTime=0x1d305fe, ftLastAccessTime.dwLowDateTime=0x8d940a0, ftLastAccessTime.dwHighDateTime=0x1d305fe, ftLastWriteTime.dwLowDateTime=0x8d940a0, ftLastWriteTime.dwHighDateTime=0x1d305fe, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="14", cAlternateFileName="")) returned 1 [0079.243] FindNextFileW (in: hFindFile=0x381e40, lpFindFileData=0x31e404 | out: lpFindFileData=0x31e404*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0079.243] FindClose (in: hFindFile=0x381e40 | out: hFindFile=0x381e40) returned 1 [0079.243] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e68c) returned 1 [0079.243] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e698) returned 1 [0079.243] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e654) returned 1 [0079.243] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\MS Project\\14", nBufferLength=0x105, lpBuffer=0x31e15c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\MS Project\\14", lpFilePart=0x0) returned 0x45 [0079.243] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\MS Project\\14\\", nBufferLength=0x105, lpBuffer=0x31e130, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\MS Project\\14\\", lpFilePart=0x0) returned 0x46 [0079.243] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\MS Project\\14\\*", lpFindFileData=0x31e37c | out: lpFindFileData=0x31e37c*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x8d940a0, ftCreationTime.dwHighDateTime=0x1d305fe, ftLastAccessTime.dwLowDateTime=0x8d940a0, ftLastAccessTime.dwHighDateTime=0x1d305fe, ftLastWriteTime.dwLowDateTime=0x8d940a0, ftLastWriteTime.dwHighDateTime=0x1d305fe, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x381e40 [0079.245] FindNextFileW (in: hFindFile=0x381e40, lpFindFileData=0x31e38c | out: lpFindFileData=0x31e38c*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x8d940a0, ftCreationTime.dwHighDateTime=0x1d305fe, ftLastAccessTime.dwLowDateTime=0x8d940a0, ftLastAccessTime.dwHighDateTime=0x1d305fe, ftLastWriteTime.dwLowDateTime=0x8d940a0, ftLastWriteTime.dwHighDateTime=0x1d305fe, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0079.245] FindNextFileW (in: hFindFile=0x381e40, lpFindFileData=0x31e38c | out: lpFindFileData=0x31e38c*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x8d940a0, ftCreationTime.dwHighDateTime=0x1d305fe, ftLastAccessTime.dwLowDateTime=0x8e064c0, ftLastAccessTime.dwHighDateTime=0x1d305fe, ftLastWriteTime.dwLowDateTime=0x8e064c0, ftLastWriteTime.dwHighDateTime=0x1d305fe, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="1033", cAlternateFileName="")) returned 1 [0079.245] FindNextFileW (in: hFindFile=0x381e40, lpFindFileData=0x31e38c | out: lpFindFileData=0x31e38c*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x8d940a0, ftCreationTime.dwHighDateTime=0x1d305fe, ftLastAccessTime.dwLowDateTime=0x8e064c0, ftLastAccessTime.dwHighDateTime=0x1d305fe, ftLastWriteTime.dwLowDateTime=0x8e064c0, ftLastWriteTime.dwHighDateTime=0x1d305fe, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="1033", cAlternateFileName="")) returned 0 [0079.245] FindClose (in: hFindFile=0x381e40 | out: hFindFile=0x381e40) returned 1 [0079.245] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e614) returned 1 [0079.245] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e620) returned 1 [0079.245] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e654) returned 1 [0079.245] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\MS Project\\14", nBufferLength=0x105, lpBuffer=0x31e15c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\MS Project\\14", lpFilePart=0x0) returned 0x45 [0079.245] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\MS Project\\14\\", nBufferLength=0x105, lpBuffer=0x31e130, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\MS Project\\14\\", lpFilePart=0x0) returned 0x46 [0079.245] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\MS Project\\14\\*", lpFindFileData=0x31e37c | out: lpFindFileData=0x31e37c*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x8d940a0, ftCreationTime.dwHighDateTime=0x1d305fe, ftLastAccessTime.dwLowDateTime=0x8d940a0, ftLastAccessTime.dwHighDateTime=0x1d305fe, ftLastWriteTime.dwLowDateTime=0x8d940a0, ftLastWriteTime.dwHighDateTime=0x1d305fe, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x381e40 [0079.246] FindNextFileW (in: hFindFile=0x381e40, lpFindFileData=0x31e38c | out: lpFindFileData=0x31e38c*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x8d940a0, ftCreationTime.dwHighDateTime=0x1d305fe, ftLastAccessTime.dwLowDateTime=0x8d940a0, ftLastAccessTime.dwHighDateTime=0x1d305fe, ftLastWriteTime.dwLowDateTime=0x8d940a0, ftLastWriteTime.dwHighDateTime=0x1d305fe, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0079.246] FindNextFileW (in: hFindFile=0x381e40, lpFindFileData=0x31e38c | out: lpFindFileData=0x31e38c*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x8d940a0, ftCreationTime.dwHighDateTime=0x1d305fe, ftLastAccessTime.dwLowDateTime=0x8e064c0, ftLastAccessTime.dwHighDateTime=0x1d305fe, ftLastWriteTime.dwLowDateTime=0x8e064c0, ftLastWriteTime.dwHighDateTime=0x1d305fe, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="1033", cAlternateFileName="")) returned 1 [0079.246] FindNextFileW (in: hFindFile=0x381e40, lpFindFileData=0x31e38c | out: lpFindFileData=0x31e38c*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0079.246] FindClose (in: hFindFile=0x381e40 | out: hFindFile=0x381e40) returned 1 [0079.246] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e614) returned 1 [0079.246] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e620) returned 1 [0079.246] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e5dc) returned 1 [0079.246] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\MS Project\\14\\1033", nBufferLength=0x105, lpBuffer=0x31e0e4, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\MS Project\\14\\1033", lpFilePart=0x0) returned 0x4a [0079.246] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\MS Project\\14\\1033\\", nBufferLength=0x105, lpBuffer=0x31e0b8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\MS Project\\14\\1033\\", lpFilePart=0x0) returned 0x4b [0079.246] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\MS Project\\14\\1033\\*", lpFindFileData=0x31e304 | out: lpFindFileData=0x31e304*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x8d940a0, ftCreationTime.dwHighDateTime=0x1d305fe, ftLastAccessTime.dwLowDateTime=0x8e064c0, ftLastAccessTime.dwHighDateTime=0x1d305fe, ftLastWriteTime.dwLowDateTime=0x8e064c0, ftLastWriteTime.dwHighDateTime=0x1d305fe, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x381e40 [0079.247] FindNextFileW (in: hFindFile=0x381e40, lpFindFileData=0x31e314 | out: lpFindFileData=0x31e314*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x8d940a0, ftCreationTime.dwHighDateTime=0x1d305fe, ftLastAccessTime.dwLowDateTime=0x8e064c0, ftLastAccessTime.dwHighDateTime=0x1d305fe, ftLastWriteTime.dwLowDateTime=0x8e064c0, ftLastWriteTime.dwHighDateTime=0x1d305fe, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0079.247] FindNextFileW (in: hFindFile=0x381e40, lpFindFileData=0x31e314 | out: lpFindFileData=0x31e314*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x8e064c0, ftCreationTime.dwHighDateTime=0x1d305fe, ftLastAccessTime.dwLowDateTime=0x8e064c0, ftLastAccessTime.dwHighDateTime=0x1d305fe, ftLastWriteTime.dwLowDateTime=0xfee79d60, ftLastWriteTime.dwHighDateTime=0x1d3aab9, nFileSizeHigh=0x0, nFileSizeLow=0x5f600, dwReserved0=0x0, dwReserved1=0x0, cFileName="Global.MPT", cAlternateFileName="")) returned 1 [0079.247] FindNextFileW (in: hFindFile=0x381e40, lpFindFileData=0x31e314 | out: lpFindFileData=0x31e314*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0079.247] FindClose (in: hFindFile=0x381e40 | out: hFindFile=0x381e40) returned 1 [0079.247] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e59c) returned 1 [0079.247] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e5a8) returned 1 [0079.247] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e5dc) returned 1 [0079.247] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\MS Project\\14\\1033", nBufferLength=0x105, lpBuffer=0x31e0e4, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\MS Project\\14\\1033", lpFilePart=0x0) returned 0x4a [0079.248] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\MS Project\\14\\1033\\", nBufferLength=0x105, lpBuffer=0x31e0b8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\MS Project\\14\\1033\\", lpFilePart=0x0) returned 0x4b [0079.248] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\MS Project\\14\\1033\\*", lpFindFileData=0x31e304 | out: lpFindFileData=0x31e304*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x8d940a0, ftCreationTime.dwHighDateTime=0x1d305fe, ftLastAccessTime.dwLowDateTime=0x8e064c0, ftLastAccessTime.dwHighDateTime=0x1d305fe, ftLastWriteTime.dwLowDateTime=0x8e064c0, ftLastWriteTime.dwHighDateTime=0x1d305fe, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x381e40 [0079.248] FindNextFileW (in: hFindFile=0x381e40, lpFindFileData=0x31e314 | out: lpFindFileData=0x31e314*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x8d940a0, ftCreationTime.dwHighDateTime=0x1d305fe, ftLastAccessTime.dwLowDateTime=0x8e064c0, ftLastAccessTime.dwHighDateTime=0x1d305fe, ftLastWriteTime.dwLowDateTime=0x8e064c0, ftLastWriteTime.dwHighDateTime=0x1d305fe, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0079.248] FindNextFileW (in: hFindFile=0x381e40, lpFindFileData=0x31e314 | out: lpFindFileData=0x31e314*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x8e064c0, ftCreationTime.dwHighDateTime=0x1d305fe, ftLastAccessTime.dwLowDateTime=0x8e064c0, ftLastAccessTime.dwHighDateTime=0x1d305fe, ftLastWriteTime.dwLowDateTime=0xfee79d60, ftLastWriteTime.dwHighDateTime=0x1d3aab9, nFileSizeHigh=0x0, nFileSizeLow=0x5f600, dwReserved0=0x0, dwReserved1=0x0, cFileName="Global.MPT", cAlternateFileName="")) returned 1 [0079.256] FindNextFileW (in: hFindFile=0x381e40, lpFindFileData=0x31e314 | out: lpFindFileData=0x31e314*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x8e064c0, ftCreationTime.dwHighDateTime=0x1d305fe, ftLastAccessTime.dwLowDateTime=0x8e064c0, ftLastAccessTime.dwHighDateTime=0x1d305fe, ftLastWriteTime.dwLowDateTime=0xfee79d60, ftLastWriteTime.dwHighDateTime=0x1d3aab9, nFileSizeHigh=0x0, nFileSizeLow=0x5f600, dwReserved0=0x0, dwReserved1=0x0, cFileName="Global.MPT", cAlternateFileName="")) returned 0 [0079.256] FindClose (in: hFindFile=0x381e40 | out: hFindFile=0x381e40) returned 1 [0079.256] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e59c) returned 1 [0079.256] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e5a8) returned 1 [0079.256] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e6cc) returned 1 [0079.256] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Network", nBufferLength=0x105, lpBuffer=0x31e1d4, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Network", lpFilePart=0x0) returned 0x3f [0079.256] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Network\\", nBufferLength=0x105, lpBuffer=0x31e1a8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Network\\", lpFilePart=0x0) returned 0x40 [0079.256] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Network\\*", lpFindFileData=0x31e3f4 | out: lpFindFileData=0x31e3f4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x31a325d0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x31a325d0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x31a325d0, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x381e40 [0079.256] FindNextFileW (in: hFindFile=0x381e40, lpFindFileData=0x31e404 | out: lpFindFileData=0x31e404*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x31a325d0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x31a325d0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x31a325d0, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0079.257] FindNextFileW (in: hFindFile=0x381e40, lpFindFileData=0x31e404 | out: lpFindFileData=0x31e404*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x31a325d0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x31a325d0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x31a325d0, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Connections", cAlternateFileName="CONNEC~1")) returned 1 [0079.257] FindNextFileW (in: hFindFile=0x381e40, lpFindFileData=0x31e404 | out: lpFindFileData=0x31e404*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x31a325d0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x31a325d0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x31a325d0, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Connections", cAlternateFileName="CONNEC~1")) returned 0 [0079.257] FindClose (in: hFindFile=0x381e40 | out: hFindFile=0x381e40) returned 1 [0079.257] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e68c) returned 1 [0079.257] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e698) returned 1 [0079.257] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e6cc) returned 1 [0079.257] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Network", nBufferLength=0x105, lpBuffer=0x31e1d4, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Network", lpFilePart=0x0) returned 0x3f [0079.257] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Network\\", nBufferLength=0x105, lpBuffer=0x31e1a8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Network\\", lpFilePart=0x0) returned 0x40 [0079.257] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Network\\*", lpFindFileData=0x31e3f4 | out: lpFindFileData=0x31e3f4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x31a325d0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x31a325d0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x31a325d0, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x381e40 [0079.257] FindNextFileW (in: hFindFile=0x381e40, lpFindFileData=0x31e404 | out: lpFindFileData=0x31e404*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x31a325d0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x31a325d0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x31a325d0, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0079.257] FindNextFileW (in: hFindFile=0x381e40, lpFindFileData=0x31e404 | out: lpFindFileData=0x31e404*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x31a325d0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x31a325d0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x31a325d0, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Connections", cAlternateFileName="CONNEC~1")) returned 1 [0079.258] FindNextFileW (in: hFindFile=0x381e40, lpFindFileData=0x31e404 | out: lpFindFileData=0x31e404*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0079.258] FindClose (in: hFindFile=0x381e40 | out: hFindFile=0x381e40) returned 1 [0079.258] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e68c) returned 1 [0079.258] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e698) returned 1 [0079.258] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e654) returned 1 [0079.258] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Network\\Connections", nBufferLength=0x105, lpBuffer=0x31e15c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Network\\Connections", lpFilePart=0x0) returned 0x4b [0079.258] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Network\\Connections\\", nBufferLength=0x105, lpBuffer=0x31e130, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Network\\Connections\\", lpFilePart=0x0) returned 0x4c [0079.258] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Network\\Connections\\*", lpFindFileData=0x31e37c | out: lpFindFileData=0x31e37c*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x31a325d0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x31a325d0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x31a325d0, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x381e40 [0079.258] FindNextFileW (in: hFindFile=0x381e40, lpFindFileData=0x31e38c | out: lpFindFileData=0x31e38c*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x31a325d0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x31a325d0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x31a325d0, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0079.258] FindNextFileW (in: hFindFile=0x381e40, lpFindFileData=0x31e38c | out: lpFindFileData=0x31e38c*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x31a325d0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x31a325d0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x31a325d0, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Pbk", cAlternateFileName="")) returned 1 [0079.258] FindNextFileW (in: hFindFile=0x381e40, lpFindFileData=0x31e38c | out: lpFindFileData=0x31e38c*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x31a325d0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x31a325d0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x31a325d0, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Pbk", cAlternateFileName="")) returned 0 [0079.259] FindClose (in: hFindFile=0x381e40 | out: hFindFile=0x381e40) returned 1 [0079.259] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e614) returned 1 [0079.259] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e620) returned 1 [0079.259] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e654) returned 1 [0079.259] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Network\\Connections", nBufferLength=0x105, lpBuffer=0x31e15c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Network\\Connections", lpFilePart=0x0) returned 0x4b [0079.259] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Network\\Connections\\", nBufferLength=0x105, lpBuffer=0x31e130, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Network\\Connections\\", lpFilePart=0x0) returned 0x4c [0079.259] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Network\\Connections\\*", lpFindFileData=0x31e37c | out: lpFindFileData=0x31e37c*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x31a325d0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x31a325d0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x31a325d0, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x381e40 [0079.259] FindNextFileW (in: hFindFile=0x381e40, lpFindFileData=0x31e38c | out: lpFindFileData=0x31e38c*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x31a325d0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x31a325d0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x31a325d0, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0079.259] FindNextFileW (in: hFindFile=0x381e40, lpFindFileData=0x31e38c | out: lpFindFileData=0x31e38c*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x31a325d0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x31a325d0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x31a325d0, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Pbk", cAlternateFileName="")) returned 1 [0079.259] FindNextFileW (in: hFindFile=0x381e40, lpFindFileData=0x31e38c | out: lpFindFileData=0x31e38c*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0079.259] FindClose (in: hFindFile=0x381e40 | out: hFindFile=0x381e40) returned 1 [0079.259] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e614) returned 1 [0079.259] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e620) returned 1 [0079.259] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e5dc) returned 1 [0079.259] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Network\\Connections\\Pbk", nBufferLength=0x105, lpBuffer=0x31e0e4, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Network\\Connections\\Pbk", lpFilePart=0x0) returned 0x4f [0079.259] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Network\\Connections\\Pbk\\", nBufferLength=0x105, lpBuffer=0x31e0b8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Network\\Connections\\Pbk\\", lpFilePart=0x0) returned 0x50 [0079.260] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Network\\Connections\\Pbk\\*", lpFindFileData=0x31e304 | out: lpFindFileData=0x31e304*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x31a325d0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x31a325d0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x31a325d0, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x381e40 [0079.260] FindNextFileW (in: hFindFile=0x381e40, lpFindFileData=0x31e314 | out: lpFindFileData=0x31e314*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x31a325d0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x31a325d0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x31a325d0, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0079.260] FindNextFileW (in: hFindFile=0x381e40, lpFindFileData=0x31e314 | out: lpFindFileData=0x31e314*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x31a325d0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x31a325d0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x31a325d0, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="_hiddenPbk", cAlternateFileName="_HIDDE~1")) returned 1 [0079.260] FindNextFileW (in: hFindFile=0x381e40, lpFindFileData=0x31e314 | out: lpFindFileData=0x31e314*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x31a325d0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x31a325d0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x31a325d0, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="_hiddenPbk", cAlternateFileName="_HIDDE~1")) returned 0 [0079.260] FindClose (in: hFindFile=0x381e40 | out: hFindFile=0x381e40) returned 1 [0079.260] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e59c) returned 1 [0079.260] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e5a8) returned 1 [0079.260] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e5dc) returned 1 [0079.260] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Network\\Connections\\Pbk", nBufferLength=0x105, lpBuffer=0x31e0e4, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Network\\Connections\\Pbk", lpFilePart=0x0) returned 0x4f [0079.260] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Network\\Connections\\Pbk\\", nBufferLength=0x105, lpBuffer=0x31e0b8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Network\\Connections\\Pbk\\", lpFilePart=0x0) returned 0x50 [0079.260] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Network\\Connections\\Pbk\\*", lpFindFileData=0x31e304 | out: lpFindFileData=0x31e304*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x31a325d0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x31a325d0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x31a325d0, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x381e40 [0079.261] FindNextFileW (in: hFindFile=0x381e40, lpFindFileData=0x31e314 | out: lpFindFileData=0x31e314*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x31a325d0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x31a325d0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x31a325d0, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0079.261] FindNextFileW (in: hFindFile=0x381e40, lpFindFileData=0x31e314 | out: lpFindFileData=0x31e314*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x31a325d0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x31a325d0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x31a325d0, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="_hiddenPbk", cAlternateFileName="_HIDDE~1")) returned 1 [0079.261] FindNextFileW (in: hFindFile=0x381e40, lpFindFileData=0x31e314 | out: lpFindFileData=0x31e314*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0079.261] FindClose (in: hFindFile=0x381e40 | out: hFindFile=0x381e40) returned 1 [0079.261] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e59c) returned 1 [0079.261] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e5a8) returned 1 [0079.261] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e564) returned 1 [0079.261] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Network\\Connections\\Pbk\\_hiddenPbk", nBufferLength=0x105, lpBuffer=0x31e06c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Network\\Connections\\Pbk\\_hiddenPbk", lpFilePart=0x0) returned 0x5a [0079.261] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Network\\Connections\\Pbk\\_hiddenPbk\\", nBufferLength=0x105, lpBuffer=0x31e040, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Network\\Connections\\Pbk\\_hiddenPbk\\", lpFilePart=0x0) returned 0x5b [0079.261] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Network\\Connections\\Pbk\\_hiddenPbk\\*", lpFindFileData=0x31e28c | out: lpFindFileData=0x31e28c*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x31a325d0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x31a325d0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x31a325d0, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x381e40 [0079.261] FindNextFileW (in: hFindFile=0x381e40, lpFindFileData=0x31e29c | out: lpFindFileData=0x31e29c*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x31a325d0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x31a325d0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x31a325d0, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0079.262] FindNextFileW (in: hFindFile=0x381e40, lpFindFileData=0x31e29c | out: lpFindFileData=0x31e29c*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x31a325d0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x31a325d0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x31a325d0, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="rasphone.pbk", cAlternateFileName="")) returned 1 [0079.262] FindNextFileW (in: hFindFile=0x381e40, lpFindFileData=0x31e29c | out: lpFindFileData=0x31e29c*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0079.262] FindClose (in: hFindFile=0x381e40 | out: hFindFile=0x381e40) returned 1 [0079.262] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e524) returned 1 [0079.262] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e530) returned 1 [0079.262] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e564) returned 1 [0079.262] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Network\\Connections\\Pbk\\_hiddenPbk", nBufferLength=0x105, lpBuffer=0x31e06c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Network\\Connections\\Pbk\\_hiddenPbk", lpFilePart=0x0) returned 0x5a [0079.262] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Network\\Connections\\Pbk\\_hiddenPbk\\", nBufferLength=0x105, lpBuffer=0x31e040, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Network\\Connections\\Pbk\\_hiddenPbk\\", lpFilePart=0x0) returned 0x5b [0079.262] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Network\\Connections\\Pbk\\_hiddenPbk\\*", lpFindFileData=0x31e28c | out: lpFindFileData=0x31e28c*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x31a325d0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x31a325d0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x31a325d0, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x381e40 [0079.262] FindNextFileW (in: hFindFile=0x381e40, lpFindFileData=0x31e29c | out: lpFindFileData=0x31e29c*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x31a325d0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x31a325d0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x31a325d0, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0079.262] FindNextFileW (in: hFindFile=0x381e40, lpFindFileData=0x31e29c | out: lpFindFileData=0x31e29c*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x31a325d0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x31a325d0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x31a325d0, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="rasphone.pbk", cAlternateFileName="")) returned 1 [0079.263] FindNextFileW (in: hFindFile=0x381e40, lpFindFileData=0x31e29c | out: lpFindFileData=0x31e29c*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x31a325d0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x31a325d0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x31a325d0, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="rasphone.pbk", cAlternateFileName="")) returned 0 [0079.263] FindClose (in: hFindFile=0x381e40 | out: hFindFile=0x381e40) returned 1 [0079.263] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e524) returned 1 [0079.263] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e530) returned 1 [0079.263] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e6cc) returned 1 [0079.263] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Office", nBufferLength=0x105, lpBuffer=0x31e1d4, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Office", lpFilePart=0x0) returned 0x3e [0079.263] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Office\\", nBufferLength=0x105, lpBuffer=0x31e1a8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Office\\", lpFilePart=0x0) returned 0x3f [0079.263] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Office\\*", lpFindFileData=0x31e3f4 | out: lpFindFileData=0x31e3f4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x43c8ae30, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0x5dae0390, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0x5dae0390, ftLastWriteTime.dwHighDateTime=0x1d2dda4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x381e40 [0079.266] FindNextFileW (in: hFindFile=0x381e40, lpFindFileData=0x31e404 | out: lpFindFileData=0x31e404*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x43c8ae30, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0x5dae0390, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0x5dae0390, ftLastWriteTime.dwHighDateTime=0x1d2dda4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0079.266] FindNextFileW (in: hFindFile=0x381e40, lpFindFileData=0x31e404 | out: lpFindFileData=0x31e404*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x4f6ce7b0, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0x4f6ce7b0, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0x4f6ce7b0, ftLastWriteTime.dwHighDateTime=0x1d2dda4, nFileSizeHigh=0x0, nFileSizeLow=0x9382, dwReserved0=0x0, dwReserved1=0x0, cFileName="MSO1033.acl", cAlternateFileName="")) returned 1 [0079.266] FindNextFileW (in: hFindFile=0x381e40, lpFindFileData=0x31e404 | out: lpFindFileData=0x31e404*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x5dae0390, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0x90b3d80, ftLastAccessTime.dwHighDateTime=0x1d305fe, ftLastWriteTime.dwLowDateTime=0x90b3d80, ftLastWriteTime.dwHighDateTime=0x1d305fe, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Recent", cAlternateFileName="")) returned 1 [0079.266] FindNextFileW (in: hFindFile=0x381e40, lpFindFileData=0x31e404 | out: lpFindFileData=0x31e404*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x5dae0390, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0x90b3d80, ftLastAccessTime.dwHighDateTime=0x1d305fe, ftLastWriteTime.dwLowDateTime=0x90b3d80, ftLastWriteTime.dwHighDateTime=0x1d305fe, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Recent", cAlternateFileName="")) returned 0 [0079.266] FindClose (in: hFindFile=0x381e40 | out: hFindFile=0x381e40) returned 1 [0079.266] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e68c) returned 1 [0079.266] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e698) returned 1 [0079.266] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e6cc) returned 1 [0079.266] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Office", nBufferLength=0x105, lpBuffer=0x31e1d4, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Office", lpFilePart=0x0) returned 0x3e [0079.266] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Office\\", nBufferLength=0x105, lpBuffer=0x31e1a8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Office\\", lpFilePart=0x0) returned 0x3f [0079.266] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Office\\*", lpFindFileData=0x31e3f4 | out: lpFindFileData=0x31e3f4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x43c8ae30, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0x5dae0390, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0x5dae0390, ftLastWriteTime.dwHighDateTime=0x1d2dda4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x381e40 [0079.267] FindNextFileW (in: hFindFile=0x381e40, lpFindFileData=0x31e404 | out: lpFindFileData=0x31e404*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x43c8ae30, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0x5dae0390, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0x5dae0390, ftLastWriteTime.dwHighDateTime=0x1d2dda4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0079.267] FindNextFileW (in: hFindFile=0x381e40, lpFindFileData=0x31e404 | out: lpFindFileData=0x31e404*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x4f6ce7b0, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0x4f6ce7b0, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0x4f6ce7b0, ftLastWriteTime.dwHighDateTime=0x1d2dda4, nFileSizeHigh=0x0, nFileSizeLow=0x9382, dwReserved0=0x0, dwReserved1=0x0, cFileName="MSO1033.acl", cAlternateFileName="")) returned 1 [0079.267] FindNextFileW (in: hFindFile=0x381e40, lpFindFileData=0x31e404 | out: lpFindFileData=0x31e404*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x5dae0390, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0x90b3d80, ftLastAccessTime.dwHighDateTime=0x1d305fe, ftLastWriteTime.dwLowDateTime=0x90b3d80, ftLastWriteTime.dwHighDateTime=0x1d305fe, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Recent", cAlternateFileName="")) returned 1 [0079.267] FindNextFileW (in: hFindFile=0x381e40, lpFindFileData=0x31e404 | out: lpFindFileData=0x31e404*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0079.267] FindClose (in: hFindFile=0x381e40 | out: hFindFile=0x381e40) returned 1 [0079.267] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e68c) returned 1 [0079.267] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e698) returned 1 [0079.267] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e654) returned 1 [0079.267] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Office\\Recent", nBufferLength=0x105, lpBuffer=0x31e15c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Office\\Recent", lpFilePart=0x0) returned 0x45 [0079.267] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Office\\Recent\\", nBufferLength=0x105, lpBuffer=0x31e130, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Office\\Recent\\", lpFilePart=0x0) returned 0x46 [0079.267] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Office\\Recent\\*", lpFindFileData=0x31e37c | out: lpFindFileData=0x31e37c*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x5dae0390, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0x90b3d80, ftLastAccessTime.dwHighDateTime=0x1d305fe, ftLastWriteTime.dwLowDateTime=0x90b3d80, ftLastWriteTime.dwHighDateTime=0x1d305fe, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x381e40 [0079.268] FindNextFileW (in: hFindFile=0x381e40, lpFindFileData=0x31e38c | out: lpFindFileData=0x31e38c*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x5dae0390, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0x90b3d80, ftLastAccessTime.dwHighDateTime=0x1d305fe, ftLastWriteTime.dwLowDateTime=0x90b3d80, ftLastWriteTime.dwHighDateTime=0x1d305fe, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0079.268] FindNextFileW (in: hFindFile=0x381e40, lpFindFileData=0x31e38c | out: lpFindFileData=0x31e38c*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x90b3d80, ftCreationTime.dwHighDateTime=0x1d305fe, ftLastAccessTime.dwLowDateTime=0x90b3d80, ftLastAccessTime.dwHighDateTime=0x1d305fe, ftLastWriteTime.dwLowDateTime=0x90d9ee0, ftLastWriteTime.dwHighDateTime=0x1d305fe, nFileSizeHigh=0x0, nFileSizeLow=0x59a, dwReserved0=0x0, dwReserved1=0x0, cFileName="Global.LNK", cAlternateFileName="")) returned 1 [0079.269] FindNextFileW (in: hFindFile=0x381e40, lpFindFileData=0x31e38c | out: lpFindFileData=0x31e38c*(dwFileAttributes=0x2, ftCreationTime.dwLowDateTime=0x5dc5d150, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0x5dc5d150, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0x90d9ee0, ftLastWriteTime.dwHighDateTime=0x1d305fe, nFileSizeHigh=0x0, nFileSizeLow=0x34, dwReserved0=0x0, dwReserved1=0x0, cFileName="index.dat", cAlternateFileName="")) returned 1 [0079.269] FindNextFileW (in: hFindFile=0x381e40, lpFindFileData=0x31e38c | out: lpFindFileData=0x31e38c*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x5dc5d150, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0x5dc5d150, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0x5dc5d150, ftLastWriteTime.dwHighDateTime=0x1d2dda4, nFileSizeHigh=0x0, nFileSizeLow=0x472, dwReserved0=0x0, dwReserved1=0x0, cFileName="Templates.LNK", cAlternateFileName="TEMPLA~1.LNK")) returned 1 [0079.269] FindNextFileW (in: hFindFile=0x381e40, lpFindFileData=0x31e38c | out: lpFindFileData=0x31e38c*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0079.269] FindClose (in: hFindFile=0x381e40 | out: hFindFile=0x381e40) returned 1 [0079.269] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e614) returned 1 [0079.269] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e620) returned 1 [0079.269] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e654) returned 1 [0079.269] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Office\\Recent", nBufferLength=0x105, lpBuffer=0x31e15c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Office\\Recent", lpFilePart=0x0) returned 0x45 [0079.269] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Office\\Recent\\", nBufferLength=0x105, lpBuffer=0x31e130, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Office\\Recent\\", lpFilePart=0x0) returned 0x46 [0079.269] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Office\\Recent\\*", lpFindFileData=0x31e37c | out: lpFindFileData=0x31e37c*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x5dae0390, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0x90b3d80, ftLastAccessTime.dwHighDateTime=0x1d305fe, ftLastWriteTime.dwLowDateTime=0x90b3d80, ftLastWriteTime.dwHighDateTime=0x1d305fe, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x381e40 [0079.269] FindNextFileW (in: hFindFile=0x381e40, lpFindFileData=0x31e38c | out: lpFindFileData=0x31e38c*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x5dae0390, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0x90b3d80, ftLastAccessTime.dwHighDateTime=0x1d305fe, ftLastWriteTime.dwLowDateTime=0x90b3d80, ftLastWriteTime.dwHighDateTime=0x1d305fe, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0079.269] FindNextFileW (in: hFindFile=0x381e40, lpFindFileData=0x31e38c | out: lpFindFileData=0x31e38c*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x90b3d80, ftCreationTime.dwHighDateTime=0x1d305fe, ftLastAccessTime.dwLowDateTime=0x90b3d80, ftLastAccessTime.dwHighDateTime=0x1d305fe, ftLastWriteTime.dwLowDateTime=0x90d9ee0, ftLastWriteTime.dwHighDateTime=0x1d305fe, nFileSizeHigh=0x0, nFileSizeLow=0x59a, dwReserved0=0x0, dwReserved1=0x0, cFileName="Global.LNK", cAlternateFileName="")) returned 1 [0079.269] FindNextFileW (in: hFindFile=0x381e40, lpFindFileData=0x31e38c | out: lpFindFileData=0x31e38c*(dwFileAttributes=0x2, ftCreationTime.dwLowDateTime=0x5dc5d150, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0x5dc5d150, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0x90d9ee0, ftLastWriteTime.dwHighDateTime=0x1d305fe, nFileSizeHigh=0x0, nFileSizeLow=0x34, dwReserved0=0x0, dwReserved1=0x0, cFileName="index.dat", cAlternateFileName="")) returned 1 [0079.269] FindNextFileW (in: hFindFile=0x381e40, lpFindFileData=0x31e38c | out: lpFindFileData=0x31e38c*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x5dc5d150, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0x5dc5d150, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0x5dc5d150, ftLastWriteTime.dwHighDateTime=0x1d2dda4, nFileSizeHigh=0x0, nFileSizeLow=0x472, dwReserved0=0x0, dwReserved1=0x0, cFileName="Templates.LNK", cAlternateFileName="TEMPLA~1.LNK")) returned 1 [0079.269] FindNextFileW (in: hFindFile=0x381e40, lpFindFileData=0x31e38c | out: lpFindFileData=0x31e38c*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x5dc5d150, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0x5dc5d150, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0x5dc5d150, ftLastWriteTime.dwHighDateTime=0x1d2dda4, nFileSizeHigh=0x0, nFileSizeLow=0x472, dwReserved0=0x0, dwReserved1=0x0, cFileName="Templates.LNK", cAlternateFileName="TEMPLA~1.LNK")) returned 0 [0079.269] FindClose (in: hFindFile=0x381e40 | out: hFindFile=0x381e40) returned 1 [0079.269] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e614) returned 1 [0079.269] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e620) returned 1 [0079.269] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e6cc) returned 1 [0079.270] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Outlook", nBufferLength=0x105, lpBuffer=0x31e1d4, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Outlook", lpFilePart=0x0) returned 0x3f [0079.270] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Outlook\\", nBufferLength=0x105, lpBuffer=0x31e1a8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Outlook\\", lpFilePart=0x0) returned 0x40 [0079.270] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Outlook\\*", lpFindFileData=0x31e3f4 | out: lpFindFileData=0x31e3f4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x5c734300, ftCreationTime.dwHighDateTime=0x1d2fad7, ftLastAccessTime.dwLowDateTime=0x6215c440, ftLastAccessTime.dwHighDateTime=0x1d2fad7, ftLastWriteTime.dwLowDateTime=0x6215c440, ftLastWriteTime.dwHighDateTime=0x1d2fad7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x381e40 [0079.271] FindNextFileW (in: hFindFile=0x381e40, lpFindFileData=0x31e404 | out: lpFindFileData=0x31e404*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x5c734300, ftCreationTime.dwHighDateTime=0x1d2fad7, ftLastAccessTime.dwLowDateTime=0x6215c440, ftLastAccessTime.dwHighDateTime=0x1d2fad7, ftLastWriteTime.dwLowDateTime=0x6215c440, ftLastWriteTime.dwHighDateTime=0x1d2fad7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0079.271] FindNextFileW (in: hFindFile=0x381e40, lpFindFileData=0x31e404 | out: lpFindFileData=0x31e404*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x5de69980, ftCreationTime.dwHighDateTime=0x1d2fad7, ftLastAccessTime.dwLowDateTime=0x5de69980, ftLastAccessTime.dwHighDateTime=0x1d2fad7, ftLastWriteTime.dwLowDateTime=0x5e0c9040, ftLastWriteTime.dwHighDateTime=0x1d2fad7, nFileSizeHigh=0x0, nFileSizeLow=0xa00, dwReserved0=0x0, dwReserved1=0x0, cFileName="Outlook.srs", cAlternateFileName="")) returned 1 [0079.271] FindNextFileW (in: hFindFile=0x381e40, lpFindFileData=0x31e404 | out: lpFindFileData=0x31e404*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x6215c440, ftCreationTime.dwHighDateTime=0x1d2fad7, ftLastAccessTime.dwLowDateTime=0x6215c440, ftLastAccessTime.dwHighDateTime=0x1d2fad7, ftLastWriteTime.dwLowDateTime=0x6215c440, ftLastWriteTime.dwHighDateTime=0x1d2fad7, nFileSizeHigh=0x0, nFileSizeLow=0x9a2, dwReserved0=0x0, dwReserved1=0x0, cFileName="Outlook.xml", cAlternateFileName="")) returned 1 [0079.271] FindNextFileW (in: hFindFile=0x381e40, lpFindFileData=0x31e404 | out: lpFindFileData=0x31e404*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0079.271] FindClose (in: hFindFile=0x381e40 | out: hFindFile=0x381e40) returned 1 [0079.271] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e68c) returned 1 [0079.271] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e698) returned 1 [0079.271] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e6cc) returned 1 [0079.271] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Outlook", nBufferLength=0x105, lpBuffer=0x31e1d4, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Outlook", lpFilePart=0x0) returned 0x3f [0079.271] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Outlook\\", nBufferLength=0x105, lpBuffer=0x31e1a8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Outlook\\", lpFilePart=0x0) returned 0x40 [0079.271] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Outlook\\*", lpFindFileData=0x31e3f4 | out: lpFindFileData=0x31e3f4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x5c734300, ftCreationTime.dwHighDateTime=0x1d2fad7, ftLastAccessTime.dwLowDateTime=0x6215c440, ftLastAccessTime.dwHighDateTime=0x1d2fad7, ftLastWriteTime.dwLowDateTime=0x6215c440, ftLastWriteTime.dwHighDateTime=0x1d2fad7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x381e40 [0079.271] FindNextFileW (in: hFindFile=0x381e40, lpFindFileData=0x31e404 | out: lpFindFileData=0x31e404*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x5c734300, ftCreationTime.dwHighDateTime=0x1d2fad7, ftLastAccessTime.dwLowDateTime=0x6215c440, ftLastAccessTime.dwHighDateTime=0x1d2fad7, ftLastWriteTime.dwLowDateTime=0x6215c440, ftLastWriteTime.dwHighDateTime=0x1d2fad7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0079.271] FindNextFileW (in: hFindFile=0x381e40, lpFindFileData=0x31e404 | out: lpFindFileData=0x31e404*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x5de69980, ftCreationTime.dwHighDateTime=0x1d2fad7, ftLastAccessTime.dwLowDateTime=0x5de69980, ftLastAccessTime.dwHighDateTime=0x1d2fad7, ftLastWriteTime.dwLowDateTime=0x5e0c9040, ftLastWriteTime.dwHighDateTime=0x1d2fad7, nFileSizeHigh=0x0, nFileSizeLow=0xa00, dwReserved0=0x0, dwReserved1=0x0, cFileName="Outlook.srs", cAlternateFileName="")) returned 1 [0079.271] FindNextFileW (in: hFindFile=0x381e40, lpFindFileData=0x31e404 | out: lpFindFileData=0x31e404*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x6215c440, ftCreationTime.dwHighDateTime=0x1d2fad7, ftLastAccessTime.dwLowDateTime=0x6215c440, ftLastAccessTime.dwHighDateTime=0x1d2fad7, ftLastWriteTime.dwLowDateTime=0x6215c440, ftLastWriteTime.dwHighDateTime=0x1d2fad7, nFileSizeHigh=0x0, nFileSizeLow=0x9a2, dwReserved0=0x0, dwReserved1=0x0, cFileName="Outlook.xml", cAlternateFileName="")) returned 1 [0079.271] FindNextFileW (in: hFindFile=0x381e40, lpFindFileData=0x31e404 | out: lpFindFileData=0x31e404*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x6215c440, ftCreationTime.dwHighDateTime=0x1d2fad7, ftLastAccessTime.dwLowDateTime=0x6215c440, ftLastAccessTime.dwHighDateTime=0x1d2fad7, ftLastWriteTime.dwLowDateTime=0x6215c440, ftLastWriteTime.dwHighDateTime=0x1d2fad7, nFileSizeHigh=0x0, nFileSizeLow=0x9a2, dwReserved0=0x0, dwReserved1=0x0, cFileName="Outlook.xml", cAlternateFileName="")) returned 0 [0079.271] FindClose (in: hFindFile=0x381e40 | out: hFindFile=0x381e40) returned 1 [0079.271] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e68c) returned 1 [0079.271] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e698) returned 1 [0079.271] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Outlook\\Outlook.xml", nBufferLength=0x105, lpBuffer=0x31e0a4, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Outlook\\Outlook.xml", lpFilePart=0x0) returned 0x4b [0079.271] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e598) returned 1 [0079.272] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Outlook\\Outlook.xml" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\outlook\\outlook.xml"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x264 [0079.272] GetFileType (hFile=0x264) returned 0x1 [0079.272] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e594) returned 1 [0079.272] GetFileType (hFile=0x264) returned 0x1 [0079.272] GetFileSize (in: hFile=0x264, lpFileSizeHigh=0x31e6a0 | out: lpFileSizeHigh=0x31e6a0*=0x0) returned 0x9a2 [0079.272] ReadFile (in: hFile=0x264, lpBuffer=0x276a988, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x31e64c, lpOverlapped=0x0 | out: lpBuffer=0x276a988*, lpNumberOfBytesRead=0x31e64c*=0x9a2, lpOverlapped=0x0) returned 1 [0079.287] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Outlook\\Outlook.xml", nBufferLength=0x105, lpBuffer=0x31e090, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Outlook\\Outlook.xml", lpFilePart=0x0) returned 0x4b [0079.287] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e584) returned 1 [0079.288] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Outlook\\Outlook.xml" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\outlook\\outlook.xml"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x264 [0079.288] GetFileType (hFile=0x264) returned 0x1 [0079.288] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e580) returned 1 [0079.288] GetFileType (hFile=0x264) returned 0x1 [0079.289] WriteFile (in: hFile=0x264, lpBuffer=0x27bb91c*, nNumberOfBytesToWrite=0x9b0, lpNumberOfBytesWritten=0x31e614, lpOverlapped=0x0 | out: lpBuffer=0x27bb91c*, lpNumberOfBytesWritten=0x31e614*=0x9b0, lpOverlapped=0x0) returned 1 [0079.290] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Outlook\\Outlook.xml", nBufferLength=0x105, lpBuffer=0x31e1c4, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Outlook\\Outlook.xml", lpFilePart=0x0) returned 0x4b [0079.290] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Outlook\\Outlook.xml", nBufferLength=0x105, lpBuffer=0x31e1c4, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Outlook\\Outlook.xml", lpFilePart=0x0) returned 0x4b [0079.290] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e624) returned 1 [0079.290] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Outlook\\Outlook.xml" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\outlook\\outlook.xml"), fInfoLevelId=0x0, lpFileInformation=0x31e6a0 | out: lpFileInformation=0x31e6a0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x6215c440, ftCreationTime.dwHighDateTime=0x1d2fad7, ftLastAccessTime.dwLowDateTime=0x6215c440, ftLastAccessTime.dwHighDateTime=0x1d2fad7, ftLastWriteTime.dwLowDateTime=0x12b3af60, ftLastWriteTime.dwHighDateTime=0x1d6eb7f, nFileSizeHigh=0x0, nFileSizeLow=0x9b0)) returned 1 [0079.290] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e620) returned 1 [0079.290] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Outlook\\Outlook.xml" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\outlook\\outlook.xml"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Outlook\\Outlook.xml" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\outlook\\outlook.xml")) returned 1 [0079.290] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e6cc) returned 1 [0079.291] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\PowerPoint", nBufferLength=0x105, lpBuffer=0x31e1d4, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\PowerPoint", lpFilePart=0x0) returned 0x42 [0079.291] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\PowerPoint\\", nBufferLength=0x105, lpBuffer=0x31e1a8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\PowerPoint\\", lpFilePart=0x0) returned 0x43 [0079.291] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\PowerPoint\\*", lpFindFileData=0x31e3f4 | out: lpFindFileData=0x31e3f4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x33c0ebb0, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0x33c0ebb0, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0x33c0ebb0, ftLastWriteTime.dwHighDateTime=0x1d2dda4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x381fc0 [0079.292] FindNextFileW (in: hFindFile=0x381fc0, lpFindFileData=0x31e404 | out: lpFindFileData=0x31e404*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x33c0ebb0, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0x33c0ebb0, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0x33c0ebb0, ftLastWriteTime.dwHighDateTime=0x1d2dda4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0079.292] FindNextFileW (in: hFindFile=0x381fc0, lpFindFileData=0x31e404 | out: lpFindFileData=0x31e404*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x33c0ebb0, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0x33c0ebb0, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0x33c0ebb0, ftLastWriteTime.dwHighDateTime=0x1d2dda4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 0 [0079.292] FindClose (in: hFindFile=0x381fc0 | out: hFindFile=0x381fc0) returned 1 [0079.292] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e68c) returned 1 [0079.292] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e698) returned 1 [0079.292] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e6cc) returned 1 [0079.292] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\PowerPoint", nBufferLength=0x105, lpBuffer=0x31e1d4, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\PowerPoint", lpFilePart=0x0) returned 0x42 [0079.292] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\PowerPoint\\", nBufferLength=0x105, lpBuffer=0x31e1a8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\PowerPoint\\", lpFilePart=0x0) returned 0x43 [0079.292] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\PowerPoint\\*", lpFindFileData=0x31e3f4 | out: lpFindFileData=0x31e3f4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x33c0ebb0, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0x33c0ebb0, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0x33c0ebb0, ftLastWriteTime.dwHighDateTime=0x1d2dda4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x381fc0 [0079.293] FindNextFileW (in: hFindFile=0x381fc0, lpFindFileData=0x31e404 | out: lpFindFileData=0x31e404*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x33c0ebb0, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0x33c0ebb0, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0x33c0ebb0, ftLastWriteTime.dwHighDateTime=0x1d2dda4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0079.293] FindNextFileW (in: hFindFile=0x381fc0, lpFindFileData=0x31e404 | out: lpFindFileData=0x31e404*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x33c0ebb0, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0x33c0ebb0, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0x33c0ebb0, ftLastWriteTime.dwHighDateTime=0x1d2dda4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 0 [0079.293] FindClose (in: hFindFile=0x381fc0 | out: hFindFile=0x381fc0) returned 1 [0079.293] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e68c) returned 1 [0079.293] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e698) returned 1 [0079.293] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e6cc) returned 1 [0079.293] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Proof", nBufferLength=0x105, lpBuffer=0x31e1d4, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Proof", lpFilePart=0x0) returned 0x3d [0079.293] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Proof\\", nBufferLength=0x105, lpBuffer=0x31e1a8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Proof\\", lpFilePart=0x0) returned 0x3e [0079.293] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Proof\\*", lpFindFileData=0x31e3f4 | out: lpFindFileData=0x31e3f4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x510b16f0, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0x510b16f0, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0x510b16f0, ftLastWriteTime.dwHighDateTime=0x1d2dda4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x381fc0 [0079.294] FindNextFileW (in: hFindFile=0x381fc0, lpFindFileData=0x31e404 | out: lpFindFileData=0x31e404*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x510b16f0, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0x510b16f0, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0x510b16f0, ftLastWriteTime.dwHighDateTime=0x1d2dda4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0079.294] FindNextFileW (in: hFindFile=0x381fc0, lpFindFileData=0x31e404 | out: lpFindFileData=0x31e404*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x510b16f0, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0x510b16f0, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0x510b16f0, ftLastWriteTime.dwHighDateTime=0x1d2dda4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 0 [0079.294] FindClose (in: hFindFile=0x381fc0 | out: hFindFile=0x381fc0) returned 1 [0079.294] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e68c) returned 1 [0079.294] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e698) returned 1 [0079.294] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e6cc) returned 1 [0079.294] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Proof", nBufferLength=0x105, lpBuffer=0x31e1d4, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Proof", lpFilePart=0x0) returned 0x3d [0079.295] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Proof\\", nBufferLength=0x105, lpBuffer=0x31e1a8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Proof\\", lpFilePart=0x0) returned 0x3e [0079.295] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Proof\\*", lpFindFileData=0x31e3f4 | out: lpFindFileData=0x31e3f4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x510b16f0, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0x510b16f0, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0x510b16f0, ftLastWriteTime.dwHighDateTime=0x1d2dda4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x381fc0 [0079.295] FindNextFileW (in: hFindFile=0x381fc0, lpFindFileData=0x31e404 | out: lpFindFileData=0x31e404*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x510b16f0, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0x510b16f0, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0x510b16f0, ftLastWriteTime.dwHighDateTime=0x1d2dda4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0079.295] FindNextFileW (in: hFindFile=0x381fc0, lpFindFileData=0x31e404 | out: lpFindFileData=0x31e404*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x510b16f0, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0x510b16f0, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0x510b16f0, ftLastWriteTime.dwHighDateTime=0x1d2dda4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 0 [0079.295] FindClose (in: hFindFile=0x381fc0 | out: hFindFile=0x381fc0) returned 1 [0079.295] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e68c) returned 1 [0079.295] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e698) returned 1 [0079.295] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e6cc) returned 1 [0079.295] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Protect", nBufferLength=0x105, lpBuffer=0x31e1d4, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Protect", lpFilePart=0x0) returned 0x3f [0079.295] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Protect\\", nBufferLength=0x105, lpBuffer=0x31e1a8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Protect\\", lpFilePart=0x0) returned 0x40 [0079.295] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Protect\\*", lpFindFileData=0x31e3f4 | out: lpFindFileData=0x31e3f4*(dwFileAttributes=0x2014, ftCreationTime.dwLowDateTime=0x28cff640, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x541f1c70, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x541f1c70, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x381fc0 [0079.295] FindNextFileW (in: hFindFile=0x381fc0, lpFindFileData=0x31e404 | out: lpFindFileData=0x31e404*(dwFileAttributes=0x2014, ftCreationTime.dwLowDateTime=0x28cff640, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x541f1c70, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x541f1c70, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0079.295] FindNextFileW (in: hFindFile=0x381fc0, lpFindFileData=0x31e404 | out: lpFindFileData=0x31e404*(dwFileAttributes=0x2026, ftCreationTime.dwLowDateTime=0x28dbdd20, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28dbdd20, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xf29f8e64, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x138, dwReserved0=0x0, dwReserved1=0x0, cFileName="CREDHIST", cAlternateFileName="")) returned 1 [0079.295] FindNextFileW (in: hFindFile=0x381fc0, lpFindFileData=0x31e404 | out: lpFindFileData=0x31e404*(dwFileAttributes=0x2014, ftCreationTime.dwLowDateTime=0x28cff640, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28de3e80, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xf2c805c8, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="S-1-5-21-3111613574-2524581245-2586426736-500", cAlternateFileName="S-1-5-~1")) returned 1 [0079.295] FindNextFileW (in: hFindFile=0x381fc0, lpFindFileData=0x31e404 | out: lpFindFileData=0x31e404*(dwFileAttributes=0x2014, ftCreationTime.dwLowDateTime=0x541f1c70, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0xd517340, ftLastAccessTime.dwHighDateTime=0x1d6eb7f, ftLastWriteTime.dwLowDateTime=0xd517340, ftLastWriteTime.dwHighDateTime=0x1d6eb7f, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="S-1-5-21-3388679973-3930757225-3770151564-1000", cAlternateFileName="S-1-5-~2")) returned 1 [0079.295] FindNextFileW (in: hFindFile=0x381fc0, lpFindFileData=0x31e404 | out: lpFindFileData=0x31e404*(dwFileAttributes=0x2026, ftCreationTime.dwLowDateTime=0x2b1e4b40, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x2b1e4b40, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x36031920, ftLastWriteTime.dwHighDateTime=0x1d4d57d, nFileSizeHigh=0x0, nFileSizeLow=0x4c, dwReserved0=0x0, dwReserved1=0x0, cFileName="SYNCHIST", cAlternateFileName="")) returned 1 [0079.295] FindNextFileW (in: hFindFile=0x381fc0, lpFindFileData=0x31e404 | out: lpFindFileData=0x31e404*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0079.295] FindClose (in: hFindFile=0x381fc0 | out: hFindFile=0x381fc0) returned 1 [0079.296] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e68c) returned 1 [0079.296] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e698) returned 1 [0079.296] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e6cc) returned 1 [0079.296] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Protect", nBufferLength=0x105, lpBuffer=0x31e1d4, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Protect", lpFilePart=0x0) returned 0x3f [0079.296] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Protect\\", nBufferLength=0x105, lpBuffer=0x31e1a8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Protect\\", lpFilePart=0x0) returned 0x40 [0079.296] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Protect\\*", lpFindFileData=0x31e3f4 | out: lpFindFileData=0x31e3f4*(dwFileAttributes=0x2014, ftCreationTime.dwLowDateTime=0x28cff640, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x541f1c70, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x541f1c70, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x381fc0 [0079.296] FindNextFileW (in: hFindFile=0x381fc0, lpFindFileData=0x31e404 | out: lpFindFileData=0x31e404*(dwFileAttributes=0x2014, ftCreationTime.dwLowDateTime=0x28cff640, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x541f1c70, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x541f1c70, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0079.296] FindNextFileW (in: hFindFile=0x381fc0, lpFindFileData=0x31e404 | out: lpFindFileData=0x31e404*(dwFileAttributes=0x2026, ftCreationTime.dwLowDateTime=0x28dbdd20, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28dbdd20, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xf29f8e64, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x138, dwReserved0=0x0, dwReserved1=0x0, cFileName="CREDHIST", cAlternateFileName="")) returned 1 [0079.296] FindNextFileW (in: hFindFile=0x381fc0, lpFindFileData=0x31e404 | out: lpFindFileData=0x31e404*(dwFileAttributes=0x2014, ftCreationTime.dwLowDateTime=0x28cff640, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28de3e80, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xf2c805c8, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="S-1-5-21-3111613574-2524581245-2586426736-500", cAlternateFileName="S-1-5-~1")) returned 1 [0079.296] FindNextFileW (in: hFindFile=0x381fc0, lpFindFileData=0x31e404 | out: lpFindFileData=0x31e404*(dwFileAttributes=0x2014, ftCreationTime.dwLowDateTime=0x541f1c70, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0xd517340, ftLastAccessTime.dwHighDateTime=0x1d6eb7f, ftLastWriteTime.dwLowDateTime=0xd517340, ftLastWriteTime.dwHighDateTime=0x1d6eb7f, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="S-1-5-21-3388679973-3930757225-3770151564-1000", cAlternateFileName="S-1-5-~2")) returned 1 [0079.296] FindNextFileW (in: hFindFile=0x381fc0, lpFindFileData=0x31e404 | out: lpFindFileData=0x31e404*(dwFileAttributes=0x2026, ftCreationTime.dwLowDateTime=0x2b1e4b40, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x2b1e4b40, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x36031920, ftLastWriteTime.dwHighDateTime=0x1d4d57d, nFileSizeHigh=0x0, nFileSizeLow=0x4c, dwReserved0=0x0, dwReserved1=0x0, cFileName="SYNCHIST", cAlternateFileName="")) returned 1 [0079.296] FindNextFileW (in: hFindFile=0x381fc0, lpFindFileData=0x31e404 | out: lpFindFileData=0x31e404*(dwFileAttributes=0x2026, ftCreationTime.dwLowDateTime=0x2b1e4b40, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x2b1e4b40, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x36031920, ftLastWriteTime.dwHighDateTime=0x1d4d57d, nFileSizeHigh=0x0, nFileSizeLow=0x4c, dwReserved0=0x0, dwReserved1=0x0, cFileName="SYNCHIST", cAlternateFileName="")) returned 0 [0079.296] FindClose (in: hFindFile=0x381fc0 | out: hFindFile=0x381fc0) returned 1 [0079.296] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e68c) returned 1 [0079.296] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e698) returned 1 [0079.296] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e654) returned 1 [0079.296] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Protect\\S-1-5-21-3111613574-2524581245-2586426736-500", nBufferLength=0x105, lpBuffer=0x31e15c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Protect\\S-1-5-21-3111613574-2524581245-2586426736-500", lpFilePart=0x0) returned 0x6d [0079.296] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Protect\\S-1-5-21-3111613574-2524581245-2586426736-500\\", nBufferLength=0x105, lpBuffer=0x31e130, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Protect\\S-1-5-21-3111613574-2524581245-2586426736-500\\", lpFilePart=0x0) returned 0x6e [0079.296] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Protect\\S-1-5-21-3111613574-2524581245-2586426736-500\\*", lpFindFileData=0x31e37c | out: lpFindFileData=0x31e37c*(dwFileAttributes=0x2014, ftCreationTime.dwLowDateTime=0x28cff640, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28de3e80, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xf2c805c8, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x381fc0 [0079.298] FindNextFileW (in: hFindFile=0x381fc0, lpFindFileData=0x31e38c | out: lpFindFileData=0x31e38c*(dwFileAttributes=0x2014, ftCreationTime.dwLowDateTime=0x28cff640, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28de3e80, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xf2c805c8, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0079.299] FindNextFileW (in: hFindFile=0x381fc0, lpFindFileData=0x31e38c | out: lpFindFileData=0x31e38c*(dwFileAttributes=0x2026, ftCreationTime.dwLowDateTime=0x28dbdd20, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28dbdd20, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xf2b9bd87, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x1d4, dwReserved0=0x0, dwReserved1=0x0, cFileName="be5b4fbd-cb99-45f5-9462-5f896dd3a6b9", cAlternateFileName="BE5B4F~1")) returned 1 [0079.299] FindNextFileW (in: hFindFile=0x381fc0, lpFindFileData=0x31e38c | out: lpFindFileData=0x31e38c*(dwFileAttributes=0x2026, ftCreationTime.dwLowDateTime=0x28de3e80, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28de3e80, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xf2c805c8, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x18, dwReserved0=0x0, dwReserved1=0x0, cFileName="Preferred", cAlternateFileName="PREFER~1")) returned 1 [0079.299] FindNextFileW (in: hFindFile=0x381fc0, lpFindFileData=0x31e38c | out: lpFindFileData=0x31e38c*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0079.299] FindClose (in: hFindFile=0x381fc0 | out: hFindFile=0x381fc0) returned 1 [0079.299] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e614) returned 1 [0079.299] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e620) returned 1 [0079.299] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e654) returned 1 [0079.299] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Protect\\S-1-5-21-3111613574-2524581245-2586426736-500", nBufferLength=0x105, lpBuffer=0x31e15c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Protect\\S-1-5-21-3111613574-2524581245-2586426736-500", lpFilePart=0x0) returned 0x6d [0079.299] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Protect\\S-1-5-21-3111613574-2524581245-2586426736-500\\", nBufferLength=0x105, lpBuffer=0x31e130, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Protect\\S-1-5-21-3111613574-2524581245-2586426736-500\\", lpFilePart=0x0) returned 0x6e [0079.300] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Protect\\S-1-5-21-3111613574-2524581245-2586426736-500\\*", lpFindFileData=0x31e37c | out: lpFindFileData=0x31e37c*(dwFileAttributes=0x2014, ftCreationTime.dwLowDateTime=0x28cff640, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28de3e80, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xf2c805c8, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x381fc0 [0079.300] FindNextFileW (in: hFindFile=0x381fc0, lpFindFileData=0x31e38c | out: lpFindFileData=0x31e38c*(dwFileAttributes=0x2014, ftCreationTime.dwLowDateTime=0x28cff640, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28de3e80, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xf2c805c8, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0079.300] FindNextFileW (in: hFindFile=0x381fc0, lpFindFileData=0x31e38c | out: lpFindFileData=0x31e38c*(dwFileAttributes=0x2026, ftCreationTime.dwLowDateTime=0x28dbdd20, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28dbdd20, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xf2b9bd87, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x1d4, dwReserved0=0x0, dwReserved1=0x0, cFileName="be5b4fbd-cb99-45f5-9462-5f896dd3a6b9", cAlternateFileName="BE5B4F~1")) returned 1 [0079.300] FindNextFileW (in: hFindFile=0x381fc0, lpFindFileData=0x31e38c | out: lpFindFileData=0x31e38c*(dwFileAttributes=0x2026, ftCreationTime.dwLowDateTime=0x28de3e80, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28de3e80, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xf2c805c8, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x18, dwReserved0=0x0, dwReserved1=0x0, cFileName="Preferred", cAlternateFileName="PREFER~1")) returned 1 [0079.300] FindNextFileW (in: hFindFile=0x381fc0, lpFindFileData=0x31e38c | out: lpFindFileData=0x31e38c*(dwFileAttributes=0x2026, ftCreationTime.dwLowDateTime=0x28de3e80, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28de3e80, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xf2c805c8, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x18, dwReserved0=0x0, dwReserved1=0x0, cFileName="Preferred", cAlternateFileName="PREFER~1")) returned 0 [0079.300] FindClose (in: hFindFile=0x381fc0 | out: hFindFile=0x381fc0) returned 1 [0079.301] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e614) returned 1 [0079.301] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e620) returned 1 [0079.301] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e654) returned 1 [0079.301] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Protect\\S-1-5-21-3388679973-3930757225-3770151564-1000", nBufferLength=0x105, lpBuffer=0x31e15c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Protect\\S-1-5-21-3388679973-3930757225-3770151564-1000", lpFilePart=0x0) returned 0x6e [0079.301] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Protect\\S-1-5-21-3388679973-3930757225-3770151564-1000\\", nBufferLength=0x105, lpBuffer=0x31e130, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Protect\\S-1-5-21-3388679973-3930757225-3770151564-1000\\", lpFilePart=0x0) returned 0x6f [0079.301] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Protect\\S-1-5-21-3388679973-3930757225-3770151564-1000\\*", lpFindFileData=0x31e37c | out: lpFindFileData=0x31e37c*(dwFileAttributes=0x2014, ftCreationTime.dwLowDateTime=0x541f1c70, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0xd517340, ftLastAccessTime.dwHighDateTime=0x1d6eb7f, ftLastWriteTime.dwLowDateTime=0xd517340, ftLastWriteTime.dwHighDateTime=0x1d6eb7f, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x381fc0 [0079.301] FindNextFileW (in: hFindFile=0x381fc0, lpFindFileData=0x31e38c | out: lpFindFileData=0x31e38c*(dwFileAttributes=0x2014, ftCreationTime.dwLowDateTime=0x541f1c70, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0xd517340, ftLastAccessTime.dwHighDateTime=0x1d6eb7f, ftLastWriteTime.dwLowDateTime=0xd517340, ftLastWriteTime.dwHighDateTime=0x1d6eb7f, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0079.302] FindNextFileW (in: hFindFile=0x381fc0, lpFindFileData=0x31e38c | out: lpFindFileData=0x31e38c*(dwFileAttributes=0x2026, ftCreationTime.dwLowDateTime=0xf923e050, ftCreationTime.dwHighDateTime=0x1d3aab9, ftLastAccessTime.dwLowDateTime=0xf923e050, ftLastAccessTime.dwHighDateTime=0x1d3aab9, ftLastWriteTime.dwLowDateTime=0xf923e050, ftLastWriteTime.dwHighDateTime=0x1d3aab9, nFileSizeHigh=0x0, nFileSizeLow=0x1d4, dwReserved0=0x0, dwReserved1=0x0, cFileName="02540a10-7eb7-4b20-a8c7-470f8986389c", cAlternateFileName="02540A~1")) returned 1 [0079.302] FindNextFileW (in: hFindFile=0x381fc0, lpFindFileData=0x31e38c | out: lpFindFileData=0x31e38c*(dwFileAttributes=0x2026, ftCreationTime.dwLowDateTime=0xdc5ea830, ftCreationTime.dwHighDateTime=0x1d41fce, ftLastAccessTime.dwLowDateTime=0xdc5ea830, ftLastAccessTime.dwHighDateTime=0x1d41fce, ftLastWriteTime.dwLowDateTime=0xdc5ea830, ftLastWriteTime.dwHighDateTime=0x1d41fce, nFileSizeHigh=0x0, nFileSizeLow=0x1d4, dwReserved0=0x0, dwReserved1=0x0, cFileName="0e15476d-d8fe-46ca-8099-ebdcf80f637c", cAlternateFileName="0E1547~1")) returned 1 [0079.302] FindNextFileW (in: hFindFile=0x381fc0, lpFindFileData=0x31e38c | out: lpFindFileData=0x31e38c*(dwFileAttributes=0x2026, ftCreationTime.dwLowDateTime=0xf6409280, ftCreationTime.dwHighDateTime=0x1d4ae2c, ftLastAccessTime.dwLowDateTime=0xf6409280, ftLastAccessTime.dwHighDateTime=0x1d4ae2c, ftLastWriteTime.dwLowDateTime=0xf6409280, ftLastWriteTime.dwHighDateTime=0x1d4ae2c, nFileSizeHigh=0x0, nFileSizeLow=0x1d4, dwReserved0=0x0, dwReserved1=0x0, cFileName="102a7bc8-3f85-4bb4-840a-38257d2965d2", cAlternateFileName="102A7B~1")) returned 1 [0079.302] FindNextFileW (in: hFindFile=0x381fc0, lpFindFileData=0x31e38c | out: lpFindFileData=0x31e38c*(dwFileAttributes=0x2026, ftCreationTime.dwLowDateTime=0x542b0350, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x542b0350, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x542b0350, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x1d4, dwReserved0=0x0, dwReserved1=0x0, cFileName="2be989a0-16a1-424b-9211-51aa3bb43e5d", cAlternateFileName="2BE989~1")) returned 1 [0079.302] FindNextFileW (in: hFindFile=0x381fc0, lpFindFileData=0x31e38c | out: lpFindFileData=0x31e38c*(dwFileAttributes=0x2026, ftCreationTime.dwLowDateTime=0x89f07f80, ftCreationTime.dwHighDateTime=0x1d5e82a, ftLastAccessTime.dwLowDateTime=0x89f07f80, ftLastAccessTime.dwHighDateTime=0x1d5e82a, ftLastWriteTime.dwLowDateTime=0x89f07f80, ftLastWriteTime.dwHighDateTime=0x1d5e82a, nFileSizeHigh=0x0, nFileSizeLow=0x1d4, dwReserved0=0x0, dwReserved1=0x0, cFileName="915f9e3b-485d-4f89-a291-82a5ad3b0ee7", cAlternateFileName="915F9E~1")) returned 1 [0079.302] FindNextFileW (in: hFindFile=0x381fc0, lpFindFileData=0x31e38c | out: lpFindFileData=0x31e38c*(dwFileAttributes=0x2026, ftCreationTime.dwLowDateTime=0xd517340, ftCreationTime.dwHighDateTime=0x1d6eb7f, ftLastAccessTime.dwLowDateTime=0xd517340, ftLastAccessTime.dwHighDateTime=0x1d6eb7f, ftLastWriteTime.dwLowDateTime=0xd517340, ftLastWriteTime.dwHighDateTime=0x1d6eb7f, nFileSizeHigh=0x0, nFileSizeLow=0x1d4, dwReserved0=0x0, dwReserved1=0x0, cFileName="9bed0b2b-97f4-45b0-b77a-05d45ab9c51a", cAlternateFileName="9BED0B~1")) returned 1 [0079.302] FindNextFileW (in: hFindFile=0x381fc0, lpFindFileData=0x31e38c | out: lpFindFileData=0x31e38c*(dwFileAttributes=0x2026, ftCreationTime.dwLowDateTime=0x17ffec90, ftCreationTime.dwHighDateTime=0x1d3373c, ftLastAccessTime.dwLowDateTime=0x17ffec90, ftLastAccessTime.dwHighDateTime=0x1d3373c, ftLastWriteTime.dwLowDateTime=0x18024df0, ftLastWriteTime.dwHighDateTime=0x1d3373c, nFileSizeHigh=0x0, nFileSizeLow=0x1d4, dwReserved0=0x0, dwReserved1=0x0, cFileName="fbbe72db-afd8-443b-88dd-64b20388700d", cAlternateFileName="FBBE72~1")) returned 1 [0079.302] FindNextFileW (in: hFindFile=0x381fc0, lpFindFileData=0x31e38c | out: lpFindFileData=0x31e38c*(dwFileAttributes=0x2026, ftCreationTime.dwLowDateTime=0x542fc610, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x542fc610, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0xd589760, ftLastWriteTime.dwHighDateTime=0x1d6eb7f, nFileSizeHigh=0x0, nFileSizeLow=0x18, dwReserved0=0x0, dwReserved1=0x0, cFileName="Preferred", cAlternateFileName="PREFER~1")) returned 1 [0079.302] FindNextFileW (in: hFindFile=0x381fc0, lpFindFileData=0x31e38c | out: lpFindFileData=0x31e38c*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0079.302] FindClose (in: hFindFile=0x381fc0 | out: hFindFile=0x381fc0) returned 1 [0079.302] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e614) returned 1 [0079.302] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e620) returned 1 [0079.302] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e654) returned 1 [0079.302] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Protect\\S-1-5-21-3388679973-3930757225-3770151564-1000", nBufferLength=0x105, lpBuffer=0x31e15c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Protect\\S-1-5-21-3388679973-3930757225-3770151564-1000", lpFilePart=0x0) returned 0x6e [0079.302] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Protect\\S-1-5-21-3388679973-3930757225-3770151564-1000\\", nBufferLength=0x105, lpBuffer=0x31e130, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Protect\\S-1-5-21-3388679973-3930757225-3770151564-1000\\", lpFilePart=0x0) returned 0x6f [0079.302] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Protect\\S-1-5-21-3388679973-3930757225-3770151564-1000\\*", lpFindFileData=0x31e37c | out: lpFindFileData=0x31e37c*(dwFileAttributes=0x2014, ftCreationTime.dwLowDateTime=0x541f1c70, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0xd517340, ftLastAccessTime.dwHighDateTime=0x1d6eb7f, ftLastWriteTime.dwLowDateTime=0xd517340, ftLastWriteTime.dwHighDateTime=0x1d6eb7f, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x381fc0 [0079.302] FindNextFileW (in: hFindFile=0x381fc0, lpFindFileData=0x31e38c | out: lpFindFileData=0x31e38c*(dwFileAttributes=0x2014, ftCreationTime.dwLowDateTime=0x541f1c70, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0xd517340, ftLastAccessTime.dwHighDateTime=0x1d6eb7f, ftLastWriteTime.dwLowDateTime=0xd517340, ftLastWriteTime.dwHighDateTime=0x1d6eb7f, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0079.302] FindNextFileW (in: hFindFile=0x381fc0, lpFindFileData=0x31e38c | out: lpFindFileData=0x31e38c*(dwFileAttributes=0x2026, ftCreationTime.dwLowDateTime=0xf923e050, ftCreationTime.dwHighDateTime=0x1d3aab9, ftLastAccessTime.dwLowDateTime=0xf923e050, ftLastAccessTime.dwHighDateTime=0x1d3aab9, ftLastWriteTime.dwLowDateTime=0xf923e050, ftLastWriteTime.dwHighDateTime=0x1d3aab9, nFileSizeHigh=0x0, nFileSizeLow=0x1d4, dwReserved0=0x0, dwReserved1=0x0, cFileName="02540a10-7eb7-4b20-a8c7-470f8986389c", cAlternateFileName="02540A~1")) returned 1 [0079.303] FindNextFileW (in: hFindFile=0x381fc0, lpFindFileData=0x31e38c | out: lpFindFileData=0x31e38c*(dwFileAttributes=0x2026, ftCreationTime.dwLowDateTime=0xdc5ea830, ftCreationTime.dwHighDateTime=0x1d41fce, ftLastAccessTime.dwLowDateTime=0xdc5ea830, ftLastAccessTime.dwHighDateTime=0x1d41fce, ftLastWriteTime.dwLowDateTime=0xdc5ea830, ftLastWriteTime.dwHighDateTime=0x1d41fce, nFileSizeHigh=0x0, nFileSizeLow=0x1d4, dwReserved0=0x0, dwReserved1=0x0, cFileName="0e15476d-d8fe-46ca-8099-ebdcf80f637c", cAlternateFileName="0E1547~1")) returned 1 [0079.303] FindNextFileW (in: hFindFile=0x381fc0, lpFindFileData=0x31e38c | out: lpFindFileData=0x31e38c*(dwFileAttributes=0x2026, ftCreationTime.dwLowDateTime=0xf6409280, ftCreationTime.dwHighDateTime=0x1d4ae2c, ftLastAccessTime.dwLowDateTime=0xf6409280, ftLastAccessTime.dwHighDateTime=0x1d4ae2c, ftLastWriteTime.dwLowDateTime=0xf6409280, ftLastWriteTime.dwHighDateTime=0x1d4ae2c, nFileSizeHigh=0x0, nFileSizeLow=0x1d4, dwReserved0=0x0, dwReserved1=0x0, cFileName="102a7bc8-3f85-4bb4-840a-38257d2965d2", cAlternateFileName="102A7B~1")) returned 1 [0079.303] FindNextFileW (in: hFindFile=0x381fc0, lpFindFileData=0x31e38c | out: lpFindFileData=0x31e38c*(dwFileAttributes=0x2026, ftCreationTime.dwLowDateTime=0x542b0350, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x542b0350, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x542b0350, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x1d4, dwReserved0=0x0, dwReserved1=0x0, cFileName="2be989a0-16a1-424b-9211-51aa3bb43e5d", cAlternateFileName="2BE989~1")) returned 1 [0079.303] FindNextFileW (in: hFindFile=0x381fc0, lpFindFileData=0x31e38c | out: lpFindFileData=0x31e38c*(dwFileAttributes=0x2026, ftCreationTime.dwLowDateTime=0x89f07f80, ftCreationTime.dwHighDateTime=0x1d5e82a, ftLastAccessTime.dwLowDateTime=0x89f07f80, ftLastAccessTime.dwHighDateTime=0x1d5e82a, ftLastWriteTime.dwLowDateTime=0x89f07f80, ftLastWriteTime.dwHighDateTime=0x1d5e82a, nFileSizeHigh=0x0, nFileSizeLow=0x1d4, dwReserved0=0x0, dwReserved1=0x0, cFileName="915f9e3b-485d-4f89-a291-82a5ad3b0ee7", cAlternateFileName="915F9E~1")) returned 1 [0079.303] FindNextFileW (in: hFindFile=0x381fc0, lpFindFileData=0x31e38c | out: lpFindFileData=0x31e38c*(dwFileAttributes=0x2026, ftCreationTime.dwLowDateTime=0xd517340, ftCreationTime.dwHighDateTime=0x1d6eb7f, ftLastAccessTime.dwLowDateTime=0xd517340, ftLastAccessTime.dwHighDateTime=0x1d6eb7f, ftLastWriteTime.dwLowDateTime=0xd517340, ftLastWriteTime.dwHighDateTime=0x1d6eb7f, nFileSizeHigh=0x0, nFileSizeLow=0x1d4, dwReserved0=0x0, dwReserved1=0x0, cFileName="9bed0b2b-97f4-45b0-b77a-05d45ab9c51a", cAlternateFileName="9BED0B~1")) returned 1 [0079.303] FindNextFileW (in: hFindFile=0x381fc0, lpFindFileData=0x31e38c | out: lpFindFileData=0x31e38c*(dwFileAttributes=0x2026, ftCreationTime.dwLowDateTime=0x17ffec90, ftCreationTime.dwHighDateTime=0x1d3373c, ftLastAccessTime.dwLowDateTime=0x17ffec90, ftLastAccessTime.dwHighDateTime=0x1d3373c, ftLastWriteTime.dwLowDateTime=0x18024df0, ftLastWriteTime.dwHighDateTime=0x1d3373c, nFileSizeHigh=0x0, nFileSizeLow=0x1d4, dwReserved0=0x0, dwReserved1=0x0, cFileName="fbbe72db-afd8-443b-88dd-64b20388700d", cAlternateFileName="FBBE72~1")) returned 1 [0079.303] FindNextFileW (in: hFindFile=0x381fc0, lpFindFileData=0x31e38c | out: lpFindFileData=0x31e38c*(dwFileAttributes=0x2026, ftCreationTime.dwLowDateTime=0x542fc610, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x542fc610, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0xd589760, ftLastWriteTime.dwHighDateTime=0x1d6eb7f, nFileSizeHigh=0x0, nFileSizeLow=0x18, dwReserved0=0x0, dwReserved1=0x0, cFileName="Preferred", cAlternateFileName="PREFER~1")) returned 1 [0079.303] FindNextFileW (in: hFindFile=0x381fc0, lpFindFileData=0x31e38c | out: lpFindFileData=0x31e38c*(dwFileAttributes=0x2026, ftCreationTime.dwLowDateTime=0x542fc610, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x542fc610, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0xd589760, ftLastWriteTime.dwHighDateTime=0x1d6eb7f, nFileSizeHigh=0x0, nFileSizeLow=0x18, dwReserved0=0x0, dwReserved1=0x0, cFileName="Preferred", cAlternateFileName="PREFER~1")) returned 0 [0079.303] FindClose (in: hFindFile=0x381fc0 | out: hFindFile=0x381fc0) returned 1 [0079.303] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e614) returned 1 [0079.303] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e620) returned 1 [0079.303] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e6cc) returned 1 [0079.303] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Publisher", nBufferLength=0x105, lpBuffer=0x31e1d4, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Publisher", lpFilePart=0x0) returned 0x41 [0079.303] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Publisher\\", nBufferLength=0x105, lpBuffer=0x31e1a8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Publisher\\", lpFilePart=0x0) returned 0x42 [0079.303] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Publisher\\*", lpFindFileData=0x31e3f4 | out: lpFindFileData=0x31e3f4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x43bcc750, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0x43bcc750, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0x43bcc750, ftLastWriteTime.dwHighDateTime=0x1d2dda4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x381fc0 [0079.304] FindNextFileW (in: hFindFile=0x381fc0, lpFindFileData=0x31e404 | out: lpFindFileData=0x31e404*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x43bcc750, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0x43bcc750, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0x43bcc750, ftLastWriteTime.dwHighDateTime=0x1d2dda4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0079.304] FindNextFileW (in: hFindFile=0x381fc0, lpFindFileData=0x31e404 | out: lpFindFileData=0x31e404*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x43bcc750, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0x43bcc750, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0x43bcc750, ftLastWriteTime.dwHighDateTime=0x1d2dda4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 0 [0079.304] FindClose (in: hFindFile=0x381fc0 | out: hFindFile=0x381fc0) returned 1 [0079.304] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e68c) returned 1 [0079.304] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e698) returned 1 [0079.304] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e6cc) returned 1 [0079.305] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Publisher", nBufferLength=0x105, lpBuffer=0x31e1d4, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Publisher", lpFilePart=0x0) returned 0x41 [0079.305] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Publisher\\", nBufferLength=0x105, lpBuffer=0x31e1a8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Publisher\\", lpFilePart=0x0) returned 0x42 [0079.305] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Publisher\\*", lpFindFileData=0x31e3f4 | out: lpFindFileData=0x31e3f4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x43bcc750, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0x43bcc750, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0x43bcc750, ftLastWriteTime.dwHighDateTime=0x1d2dda4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x381fc0 [0079.305] FindNextFileW (in: hFindFile=0x381fc0, lpFindFileData=0x31e404 | out: lpFindFileData=0x31e404*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x43bcc750, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0x43bcc750, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0x43bcc750, ftLastWriteTime.dwHighDateTime=0x1d2dda4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0079.305] FindNextFileW (in: hFindFile=0x381fc0, lpFindFileData=0x31e404 | out: lpFindFileData=0x31e404*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x43bcc750, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0x43bcc750, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0x43bcc750, ftLastWriteTime.dwHighDateTime=0x1d2dda4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 0 [0079.305] FindClose (in: hFindFile=0x381fc0 | out: hFindFile=0x381fc0) returned 1 [0079.305] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e68c) returned 1 [0079.305] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e698) returned 1 [0079.305] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e6cc) returned 1 [0079.305] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Publisher Building Blocks", nBufferLength=0x105, lpBuffer=0x31e1d4, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Publisher Building Blocks", lpFilePart=0x0) returned 0x51 [0079.305] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Publisher Building Blocks\\", nBufferLength=0x105, lpBuffer=0x31e1a8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Publisher Building Blocks\\", lpFilePart=0x0) returned 0x52 [0079.305] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Publisher Building Blocks\\*", lpFindFileData=0x31e3f4 | out: lpFindFileData=0x31e3f4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x4bb4c1b0, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xbec39d0, ftLastAccessTime.dwHighDateTime=0x1d3aaba, ftLastWriteTime.dwLowDateTime=0xbec39d0, ftLastWriteTime.dwHighDateTime=0x1d3aaba, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x381fc0 [0079.307] FindNextFileW (in: hFindFile=0x381fc0, lpFindFileData=0x31e404 | out: lpFindFileData=0x31e404*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x4bb4c1b0, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xbec39d0, ftLastAccessTime.dwHighDateTime=0x1d3aaba, ftLastWriteTime.dwLowDateTime=0xbec39d0, ftLastWriteTime.dwHighDateTime=0x1d3aaba, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0079.307] FindNextFileW (in: hFindFile=0x381fc0, lpFindFileData=0x31e404 | out: lpFindFileData=0x31e404*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x4bb4c1b0, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0x4bb4c1b0, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0xbec39d0, ftLastWriteTime.dwHighDateTime=0x1d3aaba, nFileSizeHigh=0x0, nFileSizeLow=0xa8, dwReserved0=0x0, dwReserved1=0x0, cFileName="ContentStore.xml", cAlternateFileName="CONTEN~1.XML")) returned 1 [0079.307] FindNextFileW (in: hFindFile=0x381fc0, lpFindFileData=0x31e404 | out: lpFindFileData=0x31e404*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0079.307] FindClose (in: hFindFile=0x381fc0 | out: hFindFile=0x381fc0) returned 1 [0079.307] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e68c) returned 1 [0079.307] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e698) returned 1 [0079.307] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e6cc) returned 1 [0079.307] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Publisher Building Blocks", nBufferLength=0x105, lpBuffer=0x31e1d4, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Publisher Building Blocks", lpFilePart=0x0) returned 0x51 [0079.307] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Publisher Building Blocks\\", nBufferLength=0x105, lpBuffer=0x31e1a8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Publisher Building Blocks\\", lpFilePart=0x0) returned 0x52 [0079.307] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Publisher Building Blocks\\*", lpFindFileData=0x31e3f4 | out: lpFindFileData=0x31e3f4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x4bb4c1b0, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xbec39d0, ftLastAccessTime.dwHighDateTime=0x1d3aaba, ftLastWriteTime.dwLowDateTime=0xbec39d0, ftLastWriteTime.dwHighDateTime=0x1d3aaba, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x381fc0 [0079.308] FindNextFileW (in: hFindFile=0x381fc0, lpFindFileData=0x31e404 | out: lpFindFileData=0x31e404*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x4bb4c1b0, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xbec39d0, ftLastAccessTime.dwHighDateTime=0x1d3aaba, ftLastWriteTime.dwLowDateTime=0xbec39d0, ftLastWriteTime.dwHighDateTime=0x1d3aaba, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0079.308] FindNextFileW (in: hFindFile=0x381fc0, lpFindFileData=0x31e404 | out: lpFindFileData=0x31e404*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x4bb4c1b0, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0x4bb4c1b0, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0xbec39d0, ftLastWriteTime.dwHighDateTime=0x1d3aaba, nFileSizeHigh=0x0, nFileSizeLow=0xa8, dwReserved0=0x0, dwReserved1=0x0, cFileName="ContentStore.xml", cAlternateFileName="CONTEN~1.XML")) returned 1 [0079.308] FindNextFileW (in: hFindFile=0x381fc0, lpFindFileData=0x31e404 | out: lpFindFileData=0x31e404*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x4bb4c1b0, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0x4bb4c1b0, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0xbec39d0, ftLastWriteTime.dwHighDateTime=0x1d3aaba, nFileSizeHigh=0x0, nFileSizeLow=0xa8, dwReserved0=0x0, dwReserved1=0x0, cFileName="ContentStore.xml", cAlternateFileName="CONTEN~1.XML")) returned 0 [0079.308] FindClose (in: hFindFile=0x381fc0 | out: hFindFile=0x381fc0) returned 1 [0079.308] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e68c) returned 1 [0079.308] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e698) returned 1 [0079.308] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Publisher Building Blocks\\ContentStore.xml", nBufferLength=0x105, lpBuffer=0x31e0a4, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Publisher Building Blocks\\ContentStore.xml", lpFilePart=0x0) returned 0x62 [0079.308] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e598) returned 1 [0079.308] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Publisher Building Blocks\\ContentStore.xml" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\publisher building blocks\\contentstore.xml"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x264 [0079.309] GetFileType (hFile=0x264) returned 0x1 [0079.309] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e594) returned 1 [0079.309] GetFileType (hFile=0x264) returned 0x1 [0079.309] GetFileSize (in: hFile=0x264, lpFileSizeHigh=0x31e6a0 | out: lpFileSizeHigh=0x31e6a0*=0x0) returned 0xa8 [0079.309] ReadFile (in: hFile=0x264, lpBuffer=0x27cc40c, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x31e64c, lpOverlapped=0x0 | out: lpBuffer=0x27cc40c*, lpNumberOfBytesRead=0x31e64c*=0xa8, lpOverlapped=0x0) returned 1 [0079.323] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Publisher Building Blocks\\ContentStore.xml", nBufferLength=0x105, lpBuffer=0x31e090, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Publisher Building Blocks\\ContentStore.xml", lpFilePart=0x0) returned 0x62 [0079.323] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e584) returned 1 [0079.323] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Publisher Building Blocks\\ContentStore.xml" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\publisher building blocks\\contentstore.xml"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x264 [0079.324] GetFileType (hFile=0x264) returned 0x1 [0079.324] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e580) returned 1 [0079.324] GetFileType (hFile=0x264) returned 0x1 [0079.324] WriteFile (in: hFile=0x264, lpBuffer=0x281a5e8*, nNumberOfBytesToWrite=0xb0, lpNumberOfBytesWritten=0x31e614, lpOverlapped=0x0 | out: lpBuffer=0x281a5e8*, lpNumberOfBytesWritten=0x31e614*=0xb0, lpOverlapped=0x0) returned 1 [0079.325] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Publisher Building Blocks\\ContentStore.xml", nBufferLength=0x105, lpBuffer=0x31e1c4, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Publisher Building Blocks\\ContentStore.xml", lpFilePart=0x0) returned 0x62 [0079.325] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Publisher Building Blocks\\ContentStore.xml", nBufferLength=0x105, lpBuffer=0x31e1c4, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Publisher Building Blocks\\ContentStore.xml", lpFilePart=0x0) returned 0x62 [0079.325] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e624) returned 1 [0079.325] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Publisher Building Blocks\\ContentStore.xml" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\publisher building blocks\\contentstore.xml"), fInfoLevelId=0x0, lpFileInformation=0x31e6a0 | out: lpFileInformation=0x31e6a0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x4bb4c1b0, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0x4bb4c1b0, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0x12b87220, ftLastWriteTime.dwHighDateTime=0x1d6eb7f, nFileSizeHigh=0x0, nFileSizeLow=0xb0)) returned 1 [0079.326] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e620) returned 1 [0079.326] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Publisher Building Blocks\\ContentStore.xml" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\publisher building blocks\\contentstore.xml"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Publisher Building Blocks\\ContentStore.xml" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\publisher building blocks\\contentstore.xml")) returned 1 [0079.326] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e6cc) returned 1 [0079.326] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Speech", nBufferLength=0x105, lpBuffer=0x31e1d4, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Speech", lpFilePart=0x0) returned 0x3e [0079.326] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Speech\\", nBufferLength=0x105, lpBuffer=0x31e1a8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Speech\\", lpFilePart=0x0) returned 0x3f [0079.326] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Speech\\*", lpFindFileData=0x31e3f4 | out: lpFindFileData=0x31e3f4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xcd72eaa0, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0xcd72eaa0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0xcd72eaa0, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x381c80 [0079.327] FindNextFileW (in: hFindFile=0x381c80, lpFindFileData=0x31e404 | out: lpFindFileData=0x31e404*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xcd72eaa0, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0xcd72eaa0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0xcd72eaa0, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0079.327] FindNextFileW (in: hFindFile=0x381c80, lpFindFileData=0x31e404 | out: lpFindFileData=0x31e404*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xcd72eaa0, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0xcd72eaa0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0xcd72eaa0, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 0 [0079.327] FindClose (in: hFindFile=0x381c80 | out: hFindFile=0x381c80) returned 1 [0079.327] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e68c) returned 1 [0079.327] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e698) returned 1 [0079.327] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e6cc) returned 1 [0079.327] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Speech", nBufferLength=0x105, lpBuffer=0x31e1d4, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Speech", lpFilePart=0x0) returned 0x3e [0079.327] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Speech\\", nBufferLength=0x105, lpBuffer=0x31e1a8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Speech\\", lpFilePart=0x0) returned 0x3f [0079.327] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Speech\\*", lpFindFileData=0x31e3f4 | out: lpFindFileData=0x31e3f4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xcd72eaa0, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0xcd72eaa0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0xcd72eaa0, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x381c80 [0079.327] FindNextFileW (in: hFindFile=0x381c80, lpFindFileData=0x31e404 | out: lpFindFileData=0x31e404*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xcd72eaa0, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0xcd72eaa0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0xcd72eaa0, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0079.327] FindNextFileW (in: hFindFile=0x381c80, lpFindFileData=0x31e404 | out: lpFindFileData=0x31e404*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xcd72eaa0, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0xcd72eaa0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0xcd72eaa0, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 0 [0079.327] FindClose (in: hFindFile=0x381c80 | out: hFindFile=0x381c80) returned 1 [0079.327] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e68c) returned 1 [0079.327] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e698) returned 1 [0079.327] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e6cc) returned 1 [0079.327] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\SystemCertificates", nBufferLength=0x105, lpBuffer=0x31e1d4, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\SystemCertificates", lpFilePart=0x0) returned 0x4a [0079.327] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\SystemCertificates\\", nBufferLength=0x105, lpBuffer=0x31e1a8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\SystemCertificates\\", lpFilePart=0x0) returned 0x4b [0079.327] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\SystemCertificates\\*", lpFindFileData=0x31e3f4 | out: lpFindFileData=0x31e3f4*(dwFileAttributes=0x2014, ftCreationTime.dwLowDateTime=0x28cff640, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28cff640, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x96779c3, ftLastWriteTime.dwHighDateTime=0x1cb8927, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x381c80 [0079.328] FindNextFileW (in: hFindFile=0x381c80, lpFindFileData=0x31e404 | out: lpFindFileData=0x31e404*(dwFileAttributes=0x2014, ftCreationTime.dwLowDateTime=0x28cff640, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28cff640, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x96779c3, ftLastWriteTime.dwHighDateTime=0x1cb8927, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0079.328] FindNextFileW (in: hFindFile=0x381c80, lpFindFileData=0x31e404 | out: lpFindFileData=0x31e404*(dwFileAttributes=0x2014, ftCreationTime.dwLowDateTime=0x28cff640, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28cff640, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x96779c3, ftLastWriteTime.dwHighDateTime=0x1cb8927, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="My", cAlternateFileName="")) returned 1 [0079.328] FindNextFileW (in: hFindFile=0x381c80, lpFindFileData=0x31e404 | out: lpFindFileData=0x31e404*(dwFileAttributes=0x2014, ftCreationTime.dwLowDateTime=0x28cff640, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28cff640, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x96779c3, ftLastWriteTime.dwHighDateTime=0x1cb8927, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="My", cAlternateFileName="")) returned 0 [0079.328] FindClose (in: hFindFile=0x381c80 | out: hFindFile=0x381c80) returned 1 [0079.328] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e68c) returned 1 [0079.328] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e698) returned 1 [0079.328] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e6cc) returned 1 [0079.328] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\SystemCertificates", nBufferLength=0x105, lpBuffer=0x31e1d4, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\SystemCertificates", lpFilePart=0x0) returned 0x4a [0079.328] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\SystemCertificates\\", nBufferLength=0x105, lpBuffer=0x31e1a8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\SystemCertificates\\", lpFilePart=0x0) returned 0x4b [0079.328] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\SystemCertificates\\*", lpFindFileData=0x31e3f4 | out: lpFindFileData=0x31e3f4*(dwFileAttributes=0x2014, ftCreationTime.dwLowDateTime=0x28cff640, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28cff640, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x96779c3, ftLastWriteTime.dwHighDateTime=0x1cb8927, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x381c80 [0079.328] FindNextFileW (in: hFindFile=0x381c80, lpFindFileData=0x31e404 | out: lpFindFileData=0x31e404*(dwFileAttributes=0x2014, ftCreationTime.dwLowDateTime=0x28cff640, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28cff640, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x96779c3, ftLastWriteTime.dwHighDateTime=0x1cb8927, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0079.328] FindNextFileW (in: hFindFile=0x381c80, lpFindFileData=0x31e404 | out: lpFindFileData=0x31e404*(dwFileAttributes=0x2014, ftCreationTime.dwLowDateTime=0x28cff640, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28cff640, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x96779c3, ftLastWriteTime.dwHighDateTime=0x1cb8927, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="My", cAlternateFileName="")) returned 1 [0079.328] FindNextFileW (in: hFindFile=0x381c80, lpFindFileData=0x31e404 | out: lpFindFileData=0x31e404*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0079.329] FindClose (in: hFindFile=0x381c80 | out: hFindFile=0x381c80) returned 1 [0079.329] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e68c) returned 1 [0079.329] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e698) returned 1 [0079.329] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e654) returned 1 [0079.329] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\SystemCertificates\\My", nBufferLength=0x105, lpBuffer=0x31e15c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\SystemCertificates\\My", lpFilePart=0x0) returned 0x4d [0079.329] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\SystemCertificates\\My\\", nBufferLength=0x105, lpBuffer=0x31e130, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\SystemCertificates\\My\\", lpFilePart=0x0) returned 0x4e [0079.329] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\SystemCertificates\\My\\*", lpFindFileData=0x31e37c | out: lpFindFileData=0x31e37c*(dwFileAttributes=0x2014, ftCreationTime.dwLowDateTime=0x28cff640, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28cff640, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x96779c3, ftLastWriteTime.dwHighDateTime=0x1cb8927, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x381c80 [0079.329] FindNextFileW (in: hFindFile=0x381c80, lpFindFileData=0x31e38c | out: lpFindFileData=0x31e38c*(dwFileAttributes=0x2014, ftCreationTime.dwLowDateTime=0x28cff640, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28cff640, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x96779c3, ftLastWriteTime.dwHighDateTime=0x1cb8927, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0079.329] FindNextFileW (in: hFindFile=0x381c80, lpFindFileData=0x31e38c | out: lpFindFileData=0x31e38c*(dwFileAttributes=0x2014, ftCreationTime.dwLowDateTime=0x28cff640, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28cff640, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x96779c3, ftLastWriteTime.dwHighDateTime=0x1cb8927, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Certificates", cAlternateFileName="CERTIF~1")) returned 1 [0079.329] FindNextFileW (in: hFindFile=0x381c80, lpFindFileData=0x31e38c | out: lpFindFileData=0x31e38c*(dwFileAttributes=0x2014, ftCreationTime.dwLowDateTime=0x28cff640, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28cff640, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x96779c3, ftLastWriteTime.dwHighDateTime=0x1cb8927, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="CRLs", cAlternateFileName="")) returned 1 [0079.329] FindNextFileW (in: hFindFile=0x381c80, lpFindFileData=0x31e38c | out: lpFindFileData=0x31e38c*(dwFileAttributes=0x2014, ftCreationTime.dwLowDateTime=0x28cff640, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28cff640, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x96779c3, ftLastWriteTime.dwHighDateTime=0x1cb8927, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="CTLs", cAlternateFileName="")) returned 1 [0079.329] FindNextFileW (in: hFindFile=0x381c80, lpFindFileData=0x31e38c | out: lpFindFileData=0x31e38c*(dwFileAttributes=0x2014, ftCreationTime.dwLowDateTime=0x28cff640, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28cff640, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x96779c3, ftLastWriteTime.dwHighDateTime=0x1cb8927, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="CTLs", cAlternateFileName="")) returned 0 [0079.329] FindClose (in: hFindFile=0x381c80 | out: hFindFile=0x381c80) returned 1 [0079.329] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e614) returned 1 [0079.329] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e620) returned 1 [0079.329] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e654) returned 1 [0079.329] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\SystemCertificates\\My", nBufferLength=0x105, lpBuffer=0x31e15c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\SystemCertificates\\My", lpFilePart=0x0) returned 0x4d [0079.329] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\SystemCertificates\\My\\", nBufferLength=0x105, lpBuffer=0x31e130, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\SystemCertificates\\My\\", lpFilePart=0x0) returned 0x4e [0079.329] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\SystemCertificates\\My\\*", lpFindFileData=0x31e37c | out: lpFindFileData=0x31e37c*(dwFileAttributes=0x2014, ftCreationTime.dwLowDateTime=0x28cff640, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28cff640, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x96779c3, ftLastWriteTime.dwHighDateTime=0x1cb8927, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x381c80 [0079.330] FindNextFileW (in: hFindFile=0x381c80, lpFindFileData=0x31e38c | out: lpFindFileData=0x31e38c*(dwFileAttributes=0x2014, ftCreationTime.dwLowDateTime=0x28cff640, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28cff640, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x96779c3, ftLastWriteTime.dwHighDateTime=0x1cb8927, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0079.330] FindNextFileW (in: hFindFile=0x381c80, lpFindFileData=0x31e38c | out: lpFindFileData=0x31e38c*(dwFileAttributes=0x2014, ftCreationTime.dwLowDateTime=0x28cff640, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28cff640, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x96779c3, ftLastWriteTime.dwHighDateTime=0x1cb8927, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Certificates", cAlternateFileName="CERTIF~1")) returned 1 [0079.330] FindNextFileW (in: hFindFile=0x381c80, lpFindFileData=0x31e38c | out: lpFindFileData=0x31e38c*(dwFileAttributes=0x2014, ftCreationTime.dwLowDateTime=0x28cff640, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28cff640, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x96779c3, ftLastWriteTime.dwHighDateTime=0x1cb8927, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="CRLs", cAlternateFileName="")) returned 1 [0079.330] FindNextFileW (in: hFindFile=0x381c80, lpFindFileData=0x31e38c | out: lpFindFileData=0x31e38c*(dwFileAttributes=0x2014, ftCreationTime.dwLowDateTime=0x28cff640, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28cff640, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x96779c3, ftLastWriteTime.dwHighDateTime=0x1cb8927, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="CTLs", cAlternateFileName="")) returned 1 [0079.330] FindNextFileW (in: hFindFile=0x381c80, lpFindFileData=0x31e38c | out: lpFindFileData=0x31e38c*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0079.330] FindClose (in: hFindFile=0x381c80 | out: hFindFile=0x381c80) returned 1 [0079.330] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e614) returned 1 [0079.330] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e620) returned 1 [0079.330] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e5dc) returned 1 [0079.330] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\SystemCertificates\\My\\Certificates", nBufferLength=0x105, lpBuffer=0x31e0e4, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\SystemCertificates\\My\\Certificates", lpFilePart=0x0) returned 0x5a [0079.330] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\SystemCertificates\\My\\Certificates\\", nBufferLength=0x105, lpBuffer=0x31e0b8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\SystemCertificates\\My\\Certificates\\", lpFilePart=0x0) returned 0x5b [0079.330] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\SystemCertificates\\My\\Certificates\\*", lpFindFileData=0x31e304 | out: lpFindFileData=0x31e304*(dwFileAttributes=0x2014, ftCreationTime.dwLowDateTime=0x28cff640, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28cff640, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x96779c3, ftLastWriteTime.dwHighDateTime=0x1cb8927, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x381c80 [0079.330] FindNextFileW (in: hFindFile=0x381c80, lpFindFileData=0x31e314 | out: lpFindFileData=0x31e314*(dwFileAttributes=0x2014, ftCreationTime.dwLowDateTime=0x28cff640, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28cff640, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x96779c3, ftLastWriteTime.dwHighDateTime=0x1cb8927, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0079.330] FindNextFileW (in: hFindFile=0x381c80, lpFindFileData=0x31e314 | out: lpFindFileData=0x31e314*(dwFileAttributes=0x2014, ftCreationTime.dwLowDateTime=0x28cff640, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28cff640, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x96779c3, ftLastWriteTime.dwHighDateTime=0x1cb8927, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 0 [0079.330] FindClose (in: hFindFile=0x381c80 | out: hFindFile=0x381c80) returned 1 [0079.331] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e59c) returned 1 [0079.331] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e5a8) returned 1 [0079.331] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e5dc) returned 1 [0079.331] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\SystemCertificates\\My\\Certificates", nBufferLength=0x105, lpBuffer=0x31e0e4, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\SystemCertificates\\My\\Certificates", lpFilePart=0x0) returned 0x5a [0079.331] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\SystemCertificates\\My\\Certificates\\", nBufferLength=0x105, lpBuffer=0x31e0b8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\SystemCertificates\\My\\Certificates\\", lpFilePart=0x0) returned 0x5b [0079.331] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\SystemCertificates\\My\\Certificates\\*", lpFindFileData=0x31e304 | out: lpFindFileData=0x31e304*(dwFileAttributes=0x2014, ftCreationTime.dwLowDateTime=0x28cff640, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28cff640, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x96779c3, ftLastWriteTime.dwHighDateTime=0x1cb8927, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x381c80 [0079.331] FindNextFileW (in: hFindFile=0x381c80, lpFindFileData=0x31e314 | out: lpFindFileData=0x31e314*(dwFileAttributes=0x2014, ftCreationTime.dwLowDateTime=0x28cff640, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28cff640, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x96779c3, ftLastWriteTime.dwHighDateTime=0x1cb8927, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0079.331] FindNextFileW (in: hFindFile=0x381c80, lpFindFileData=0x31e314 | out: lpFindFileData=0x31e314*(dwFileAttributes=0x2014, ftCreationTime.dwLowDateTime=0x28cff640, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28cff640, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x96779c3, ftLastWriteTime.dwHighDateTime=0x1cb8927, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 0 [0079.331] FindClose (in: hFindFile=0x381c80 | out: hFindFile=0x381c80) returned 1 [0079.331] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e59c) returned 1 [0079.331] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e5a8) returned 1 [0079.331] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e5dc) returned 1 [0079.331] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\SystemCertificates\\My\\CRLs", nBufferLength=0x105, lpBuffer=0x31e0e4, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\SystemCertificates\\My\\CRLs", lpFilePart=0x0) returned 0x52 [0079.331] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\SystemCertificates\\My\\CRLs\\", nBufferLength=0x105, lpBuffer=0x31e0b8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\SystemCertificates\\My\\CRLs\\", lpFilePart=0x0) returned 0x53 [0079.331] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\SystemCertificates\\My\\CRLs\\*", lpFindFileData=0x31e304 | out: lpFindFileData=0x31e304*(dwFileAttributes=0x2014, ftCreationTime.dwLowDateTime=0x28cff640, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28cff640, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x96779c3, ftLastWriteTime.dwHighDateTime=0x1cb8927, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x381c80 [0079.331] FindNextFileW (in: hFindFile=0x381c80, lpFindFileData=0x31e314 | out: lpFindFileData=0x31e314*(dwFileAttributes=0x2014, ftCreationTime.dwLowDateTime=0x28cff640, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28cff640, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x96779c3, ftLastWriteTime.dwHighDateTime=0x1cb8927, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0079.331] FindNextFileW (in: hFindFile=0x381c80, lpFindFileData=0x31e314 | out: lpFindFileData=0x31e314*(dwFileAttributes=0x2014, ftCreationTime.dwLowDateTime=0x28cff640, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28cff640, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x96779c3, ftLastWriteTime.dwHighDateTime=0x1cb8927, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 0 [0079.331] FindClose (in: hFindFile=0x381c80 | out: hFindFile=0x381c80) returned 1 [0079.332] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e59c) returned 1 [0079.332] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e5a8) returned 1 [0079.332] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e5dc) returned 1 [0079.332] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\SystemCertificates\\My\\CRLs", nBufferLength=0x105, lpBuffer=0x31e0e4, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\SystemCertificates\\My\\CRLs", lpFilePart=0x0) returned 0x52 [0079.332] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\SystemCertificates\\My\\CRLs\\", nBufferLength=0x105, lpBuffer=0x31e0b8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\SystemCertificates\\My\\CRLs\\", lpFilePart=0x0) returned 0x53 [0079.332] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\SystemCertificates\\My\\CRLs\\*", lpFindFileData=0x31e304 | out: lpFindFileData=0x31e304*(dwFileAttributes=0x2014, ftCreationTime.dwLowDateTime=0x28cff640, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28cff640, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x96779c3, ftLastWriteTime.dwHighDateTime=0x1cb8927, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x381c80 [0079.332] FindNextFileW (in: hFindFile=0x381c80, lpFindFileData=0x31e314 | out: lpFindFileData=0x31e314*(dwFileAttributes=0x2014, ftCreationTime.dwLowDateTime=0x28cff640, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28cff640, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x96779c3, ftLastWriteTime.dwHighDateTime=0x1cb8927, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0079.332] FindNextFileW (in: hFindFile=0x381c80, lpFindFileData=0x31e314 | out: lpFindFileData=0x31e314*(dwFileAttributes=0x2014, ftCreationTime.dwLowDateTime=0x28cff640, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28cff640, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x96779c3, ftLastWriteTime.dwHighDateTime=0x1cb8927, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 0 [0079.332] FindClose (in: hFindFile=0x381c80 | out: hFindFile=0x381c80) returned 1 [0079.332] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e59c) returned 1 [0079.332] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e5a8) returned 1 [0079.332] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e5dc) returned 1 [0079.332] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\SystemCertificates\\My\\CTLs", nBufferLength=0x105, lpBuffer=0x31e0e4, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\SystemCertificates\\My\\CTLs", lpFilePart=0x0) returned 0x52 [0079.332] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\SystemCertificates\\My\\CTLs\\", nBufferLength=0x105, lpBuffer=0x31e0b8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\SystemCertificates\\My\\CTLs\\", lpFilePart=0x0) returned 0x53 [0079.332] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\SystemCertificates\\My\\CTLs\\*", lpFindFileData=0x31e304 | out: lpFindFileData=0x31e304*(dwFileAttributes=0x2014, ftCreationTime.dwLowDateTime=0x28cff640, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28cff640, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x96779c3, ftLastWriteTime.dwHighDateTime=0x1cb8927, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x381c80 [0079.332] FindNextFileW (in: hFindFile=0x381c80, lpFindFileData=0x31e314 | out: lpFindFileData=0x31e314*(dwFileAttributes=0x2014, ftCreationTime.dwLowDateTime=0x28cff640, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28cff640, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x96779c3, ftLastWriteTime.dwHighDateTime=0x1cb8927, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0079.332] FindNextFileW (in: hFindFile=0x381c80, lpFindFileData=0x31e314 | out: lpFindFileData=0x31e314*(dwFileAttributes=0x2014, ftCreationTime.dwLowDateTime=0x28cff640, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28cff640, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x96779c3, ftLastWriteTime.dwHighDateTime=0x1cb8927, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 0 [0079.333] FindClose (in: hFindFile=0x381c80 | out: hFindFile=0x381c80) returned 1 [0079.333] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e59c) returned 1 [0079.333] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e5a8) returned 1 [0079.333] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e5dc) returned 1 [0079.333] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\SystemCertificates\\My\\CTLs", nBufferLength=0x105, lpBuffer=0x31e0e4, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\SystemCertificates\\My\\CTLs", lpFilePart=0x0) returned 0x52 [0079.333] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\SystemCertificates\\My\\CTLs\\", nBufferLength=0x105, lpBuffer=0x31e0b8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\SystemCertificates\\My\\CTLs\\", lpFilePart=0x0) returned 0x53 [0079.333] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\SystemCertificates\\My\\CTLs\\*", lpFindFileData=0x31e304 | out: lpFindFileData=0x31e304*(dwFileAttributes=0x2014, ftCreationTime.dwLowDateTime=0x28cff640, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28cff640, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x96779c3, ftLastWriteTime.dwHighDateTime=0x1cb8927, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x381c80 [0079.333] FindNextFileW (in: hFindFile=0x381c80, lpFindFileData=0x31e314 | out: lpFindFileData=0x31e314*(dwFileAttributes=0x2014, ftCreationTime.dwLowDateTime=0x28cff640, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28cff640, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x96779c3, ftLastWriteTime.dwHighDateTime=0x1cb8927, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0079.333] FindNextFileW (in: hFindFile=0x381c80, lpFindFileData=0x31e314 | out: lpFindFileData=0x31e314*(dwFileAttributes=0x2014, ftCreationTime.dwLowDateTime=0x28cff640, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28cff640, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x96779c3, ftLastWriteTime.dwHighDateTime=0x1cb8927, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 0 [0079.333] FindClose (in: hFindFile=0x381c80 | out: hFindFile=0x381c80) returned 1 [0079.333] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e59c) returned 1 [0079.333] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e5a8) returned 1 [0079.333] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e6cc) returned 1 [0079.333] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Templates", nBufferLength=0x105, lpBuffer=0x31e1d4, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Templates", lpFilePart=0x0) returned 0x41 [0079.333] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Templates\\", nBufferLength=0x105, lpBuffer=0x31e1a8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Templates\\", lpFilePart=0x0) returned 0x42 [0079.333] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Templates\\*", lpFindFileData=0x31e3f4 | out: lpFindFileData=0x31e3f4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x31d42f10, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0x2795d470, ftLastAccessTime.dwHighDateTime=0x1d3aaba, ftLastWriteTime.dwLowDateTime=0x2795d470, ftLastWriteTime.dwHighDateTime=0x1d3aaba, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x381c80 [0079.335] FindNextFileW (in: hFindFile=0x381c80, lpFindFileData=0x31e404 | out: lpFindFileData=0x31e404*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x31d42f10, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0x2795d470, ftLastAccessTime.dwHighDateTime=0x1d3aaba, ftLastWriteTime.dwLowDateTime=0x2795d470, ftLastWriteTime.dwHighDateTime=0x1d3aaba, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0079.335] FindNextFileW (in: hFindFile=0x381c80, lpFindFileData=0x31e404 | out: lpFindFileData=0x31e404*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x5db2c650, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0x5db2c650, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0x5db78910, ftLastWriteTime.dwHighDateTime=0x1d2dda4, nFileSizeHigh=0x0, nFileSizeLow=0x509b, dwReserved0=0x0, dwReserved1=0x0, cFileName="Normal.dotm", cAlternateFileName="NORMAL~1.DOT")) returned 1 [0079.335] FindNextFileW (in: hFindFile=0x381c80, lpFindFileData=0x31e404 | out: lpFindFileData=0x31e404*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0079.335] FindClose (in: hFindFile=0x381c80 | out: hFindFile=0x381c80) returned 1 [0079.335] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e68c) returned 1 [0079.335] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e698) returned 1 [0079.335] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e6cc) returned 1 [0079.335] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Templates", nBufferLength=0x105, lpBuffer=0x31e1d4, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Templates", lpFilePart=0x0) returned 0x41 [0079.335] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Templates\\", nBufferLength=0x105, lpBuffer=0x31e1a8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Templates\\", lpFilePart=0x0) returned 0x42 [0079.335] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Templates\\*", lpFindFileData=0x31e3f4 | out: lpFindFileData=0x31e3f4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x31d42f10, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0x2795d470, ftLastAccessTime.dwHighDateTime=0x1d3aaba, ftLastWriteTime.dwLowDateTime=0x2795d470, ftLastWriteTime.dwHighDateTime=0x1d3aaba, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x381c80 [0079.335] FindNextFileW (in: hFindFile=0x381c80, lpFindFileData=0x31e404 | out: lpFindFileData=0x31e404*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x31d42f10, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0x2795d470, ftLastAccessTime.dwHighDateTime=0x1d3aaba, ftLastWriteTime.dwLowDateTime=0x2795d470, ftLastWriteTime.dwHighDateTime=0x1d3aaba, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0079.335] FindNextFileW (in: hFindFile=0x381c80, lpFindFileData=0x31e404 | out: lpFindFileData=0x31e404*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x5db2c650, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0x5db2c650, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0x5db78910, ftLastWriteTime.dwHighDateTime=0x1d2dda4, nFileSizeHigh=0x0, nFileSizeLow=0x509b, dwReserved0=0x0, dwReserved1=0x0, cFileName="Normal.dotm", cAlternateFileName="NORMAL~1.DOT")) returned 1 [0079.335] FindNextFileW (in: hFindFile=0x381c80, lpFindFileData=0x31e404 | out: lpFindFileData=0x31e404*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x5db2c650, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0x5db2c650, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0x5db78910, ftLastWriteTime.dwHighDateTime=0x1d2dda4, nFileSizeHigh=0x0, nFileSizeLow=0x509b, dwReserved0=0x0, dwReserved1=0x0, cFileName="Normal.dotm", cAlternateFileName="NORMAL~1.DOT")) returned 0 [0079.335] FindClose (in: hFindFile=0x381c80 | out: hFindFile=0x381c80) returned 1 [0079.335] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e68c) returned 1 [0079.335] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e698) returned 1 [0079.335] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e6cc) returned 1 [0079.335] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\UProof", nBufferLength=0x105, lpBuffer=0x31e1d4, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\UProof", lpFilePart=0x0) returned 0x3e [0079.335] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\UProof\\", nBufferLength=0x105, lpBuffer=0x31e1a8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\UProof\\", lpFilePart=0x0) returned 0x3f [0079.336] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\UProof\\*", lpFindFileData=0x31e3f4 | out: lpFindFileData=0x31e3f4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xbab2410, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xbab2410, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0xbab2410, ftLastWriteTime.dwHighDateTime=0x1d2dda4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x381c80 [0079.336] FindNextFileW (in: hFindFile=0x381c80, lpFindFileData=0x31e404 | out: lpFindFileData=0x31e404*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xbab2410, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xbab2410, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0xbab2410, ftLastWriteTime.dwHighDateTime=0x1d2dda4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0079.337] FindNextFileW (in: hFindFile=0x381c80, lpFindFileData=0x31e404 | out: lpFindFileData=0x31e404*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xbab2410, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xbab2410, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0xbab2410, ftLastWriteTime.dwHighDateTime=0x1d2dda4, nFileSizeHigh=0x0, nFileSizeLow=0x2, dwReserved0=0x0, dwReserved1=0x0, cFileName="CUSTOM.DIC", cAlternateFileName="")) returned 1 [0079.337] FindNextFileW (in: hFindFile=0x381c80, lpFindFileData=0x31e404 | out: lpFindFileData=0x31e404*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0079.337] FindClose (in: hFindFile=0x381c80 | out: hFindFile=0x381c80) returned 1 [0079.337] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e68c) returned 1 [0079.337] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e698) returned 1 [0079.337] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e6cc) returned 1 [0079.337] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\UProof", nBufferLength=0x105, lpBuffer=0x31e1d4, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\UProof", lpFilePart=0x0) returned 0x3e [0079.337] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\UProof\\", nBufferLength=0x105, lpBuffer=0x31e1a8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\UProof\\", lpFilePart=0x0) returned 0x3f [0079.337] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\UProof\\*", lpFindFileData=0x31e3f4 | out: lpFindFileData=0x31e3f4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xbab2410, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xbab2410, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0xbab2410, ftLastWriteTime.dwHighDateTime=0x1d2dda4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x381c80 [0079.337] FindNextFileW (in: hFindFile=0x381c80, lpFindFileData=0x31e404 | out: lpFindFileData=0x31e404*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xbab2410, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xbab2410, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0xbab2410, ftLastWriteTime.dwHighDateTime=0x1d2dda4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0079.337] FindNextFileW (in: hFindFile=0x381c80, lpFindFileData=0x31e404 | out: lpFindFileData=0x31e404*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xbab2410, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xbab2410, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0xbab2410, ftLastWriteTime.dwHighDateTime=0x1d2dda4, nFileSizeHigh=0x0, nFileSizeLow=0x2, dwReserved0=0x0, dwReserved1=0x0, cFileName="CUSTOM.DIC", cAlternateFileName="")) returned 1 [0079.337] FindNextFileW (in: hFindFile=0x381c80, lpFindFileData=0x31e404 | out: lpFindFileData=0x31e404*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xbab2410, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xbab2410, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0xbab2410, ftLastWriteTime.dwHighDateTime=0x1d2dda4, nFileSizeHigh=0x0, nFileSizeLow=0x2, dwReserved0=0x0, dwReserved1=0x0, cFileName="CUSTOM.DIC", cAlternateFileName="")) returned 0 [0079.337] FindClose (in: hFindFile=0x381c80 | out: hFindFile=0x381c80) returned 1 [0079.337] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e68c) returned 1 [0079.337] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e698) returned 1 [0079.337] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e6cc) returned 1 [0079.337] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows", nBufferLength=0x105, lpBuffer=0x31e1d4, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows", lpFilePart=0x0) returned 0x3f [0079.337] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\", nBufferLength=0x105, lpBuffer=0x31e1a8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\", lpFilePart=0x0) returned 0x40 [0079.337] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\*", lpFindFileData=0x31e3f4 | out: lpFindFileData=0x31e3f4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x28cff640, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28cff640, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xf96b9c4c, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x381c80 [0079.338] FindNextFileW (in: hFindFile=0x381c80, lpFindFileData=0x31e404 | out: lpFindFileData=0x31e404*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x28cff640, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28cff640, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xf96b9c4c, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0079.338] FindNextFileW (in: hFindFile=0x381c80, lpFindFileData=0x31e404 | out: lpFindFileData=0x31e404*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0x28cff640, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x2c7870d0, ftLastAccessTime.dwHighDateTime=0x1d35d06, ftLastWriteTime.dwLowDateTime=0x2c7870d0, ftLastWriteTime.dwHighDateTime=0x1d35d06, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Cookies", cAlternateFileName="")) returned 1 [0079.338] FindNextFileW (in: hFindFile=0x381c80, lpFindFileData=0x31e404 | out: lpFindFileData=0x31e404*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x28cff640, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28cff640, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xedd0e6f6, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="IECompatCache", cAlternateFileName="IECOMP~1")) returned 1 [0079.338] FindNextFileW (in: hFindFile=0x381c80, lpFindFileData=0x31e404 | out: lpFindFileData=0x31e404*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0x28cff640, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28dbdd20, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xfe9256a4, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="IETldCache", cAlternateFileName="IETLDC~1")) returned 1 [0079.338] FindNextFileW (in: hFindFile=0x381c80, lpFindFileData=0x31e404 | out: lpFindFileData=0x31e404*(dwFileAttributes=0x2011, ftCreationTime.dwLowDateTime=0x28cff640, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x2d22d5a0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x2d22d5a0, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Libraries", cAlternateFileName="LIBRAR~1")) returned 1 [0079.338] FindNextFileW (in: hFindFile=0x381c80, lpFindFileData=0x31e404 | out: lpFindFileData=0x31e404*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x28cff640, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28cff640, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xaeeef71c, ftLastWriteTime.dwHighDateTime=0x1ca042b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Network Shortcuts", cAlternateFileName="NETWOR~1")) returned 1 [0079.338] FindNextFileW (in: hFindFile=0x381c80, lpFindFileData=0x31e404 | out: lpFindFileData=0x31e404*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x28cff640, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28cff640, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xb9c40b55, ftLastWriteTime.dwHighDateTime=0x1ca042b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Printer Shortcuts", cAlternateFileName="PRINTE~1")) returned 1 [0079.338] FindNextFileW (in: hFindFile=0x381c80, lpFindFileData=0x31e404 | out: lpFindFileData=0x31e404*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0x28cff640, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x94fde710, ftLastAccessTime.dwHighDateTime=0x1d2fab5, ftLastWriteTime.dwLowDateTime=0x94fde710, ftLastWriteTime.dwHighDateTime=0x1d2fab5, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="PrivacIE", cAlternateFileName="")) returned 1 [0079.338] FindNextFileW (in: hFindFile=0x381c80, lpFindFileData=0x31e404 | out: lpFindFileData=0x31e404*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x28cff640, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0xdd777e60, ftLastAccessTime.dwHighDateTime=0x1d5e82a, ftLastWriteTime.dwLowDateTime=0xdd777e60, ftLastWriteTime.dwHighDateTime=0x1d5e82a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Recent", cAlternateFileName="")) returned 1 [0079.338] FindNextFileW (in: hFindFile=0x381c80, lpFindFileData=0x31e404 | out: lpFindFileData=0x31e404*(dwFileAttributes=0x2011, ftCreationTime.dwLowDateTime=0x28cff640, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28d97bc0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xf9b7c855, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="SendTo", cAlternateFileName="")) returned 1 [0079.338] FindNextFileW (in: hFindFile=0x381c80, lpFindFileData=0x31e404 | out: lpFindFileData=0x31e404*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x28cff640, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28d97bc0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x2d1bb180, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Start Menu", cAlternateFileName="STARTM~1")) returned 1 [0079.338] FindNextFileW (in: hFindFile=0x381c80, lpFindFileData=0x31e404 | out: lpFindFileData=0x31e404*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x28cff640, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28cff640, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xaef15879, ftLastWriteTime.dwHighDateTime=0x1ca042b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Templates", cAlternateFileName="TEMPLA~1")) returned 1 [0079.338] FindNextFileW (in: hFindFile=0x381c80, lpFindFileData=0x31e404 | out: lpFindFileData=0x31e404*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x28cff640, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28d71a60, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xef632f84, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Themes", cAlternateFileName="")) returned 1 [0079.338] FindNextFileW (in: hFindFile=0x381c80, lpFindFileData=0x31e404 | out: lpFindFileData=0x31e404*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x28cff640, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28d71a60, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xef632f84, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Themes", cAlternateFileName="")) returned 0 [0079.338] FindClose (in: hFindFile=0x381c80 | out: hFindFile=0x381c80) returned 1 [0079.338] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e68c) returned 1 [0079.338] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e698) returned 1 [0079.338] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e6cc) returned 1 [0079.338] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows", nBufferLength=0x105, lpBuffer=0x31e1d4, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows", lpFilePart=0x0) returned 0x3f [0079.338] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\", nBufferLength=0x105, lpBuffer=0x31e1a8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\", lpFilePart=0x0) returned 0x40 [0079.338] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\*", lpFindFileData=0x31e3f4 | out: lpFindFileData=0x31e3f4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x28cff640, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28cff640, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xf96b9c4c, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x381c80 [0079.339] FindNextFileW (in: hFindFile=0x381c80, lpFindFileData=0x31e404 | out: lpFindFileData=0x31e404*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x28cff640, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28cff640, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xf96b9c4c, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0079.339] FindNextFileW (in: hFindFile=0x381c80, lpFindFileData=0x31e404 | out: lpFindFileData=0x31e404*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0x28cff640, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x2c7870d0, ftLastAccessTime.dwHighDateTime=0x1d35d06, ftLastWriteTime.dwLowDateTime=0x2c7870d0, ftLastWriteTime.dwHighDateTime=0x1d35d06, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Cookies", cAlternateFileName="")) returned 1 [0079.339] FindNextFileW (in: hFindFile=0x381c80, lpFindFileData=0x31e404 | out: lpFindFileData=0x31e404*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x28cff640, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28cff640, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xedd0e6f6, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="IECompatCache", cAlternateFileName="IECOMP~1")) returned 1 [0079.339] FindNextFileW (in: hFindFile=0x381c80, lpFindFileData=0x31e404 | out: lpFindFileData=0x31e404*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0x28cff640, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28dbdd20, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xfe9256a4, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="IETldCache", cAlternateFileName="IETLDC~1")) returned 1 [0079.339] FindNextFileW (in: hFindFile=0x381c80, lpFindFileData=0x31e404 | out: lpFindFileData=0x31e404*(dwFileAttributes=0x2011, ftCreationTime.dwLowDateTime=0x28cff640, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x2d22d5a0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x2d22d5a0, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Libraries", cAlternateFileName="LIBRAR~1")) returned 1 [0079.339] FindNextFileW (in: hFindFile=0x381c80, lpFindFileData=0x31e404 | out: lpFindFileData=0x31e404*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x28cff640, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28cff640, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xaeeef71c, ftLastWriteTime.dwHighDateTime=0x1ca042b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Network Shortcuts", cAlternateFileName="NETWOR~1")) returned 1 [0079.339] FindNextFileW (in: hFindFile=0x381c80, lpFindFileData=0x31e404 | out: lpFindFileData=0x31e404*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x28cff640, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28cff640, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xb9c40b55, ftLastWriteTime.dwHighDateTime=0x1ca042b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Printer Shortcuts", cAlternateFileName="PRINTE~1")) returned 1 [0079.339] FindNextFileW (in: hFindFile=0x381c80, lpFindFileData=0x31e404 | out: lpFindFileData=0x31e404*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0x28cff640, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x94fde710, ftLastAccessTime.dwHighDateTime=0x1d2fab5, ftLastWriteTime.dwLowDateTime=0x94fde710, ftLastWriteTime.dwHighDateTime=0x1d2fab5, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="PrivacIE", cAlternateFileName="")) returned 1 [0079.339] FindNextFileW (in: hFindFile=0x381c80, lpFindFileData=0x31e404 | out: lpFindFileData=0x31e404*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x28cff640, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0xdd777e60, ftLastAccessTime.dwHighDateTime=0x1d5e82a, ftLastWriteTime.dwLowDateTime=0xdd777e60, ftLastWriteTime.dwHighDateTime=0x1d5e82a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Recent", cAlternateFileName="")) returned 1 [0079.339] FindNextFileW (in: hFindFile=0x381c80, lpFindFileData=0x31e404 | out: lpFindFileData=0x31e404*(dwFileAttributes=0x2011, ftCreationTime.dwLowDateTime=0x28cff640, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28d97bc0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xf9b7c855, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="SendTo", cAlternateFileName="")) returned 1 [0079.339] FindNextFileW (in: hFindFile=0x381c80, lpFindFileData=0x31e404 | out: lpFindFileData=0x31e404*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x28cff640, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28d97bc0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x2d1bb180, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Start Menu", cAlternateFileName="STARTM~1")) returned 1 [0079.339] FindNextFileW (in: hFindFile=0x381c80, lpFindFileData=0x31e404 | out: lpFindFileData=0x31e404*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x28cff640, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28cff640, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xaef15879, ftLastWriteTime.dwHighDateTime=0x1ca042b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Templates", cAlternateFileName="TEMPLA~1")) returned 1 [0079.339] FindNextFileW (in: hFindFile=0x381c80, lpFindFileData=0x31e404 | out: lpFindFileData=0x31e404*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x28cff640, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28d71a60, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xef632f84, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Themes", cAlternateFileName="")) returned 1 [0079.339] FindNextFileW (in: hFindFile=0x381c80, lpFindFileData=0x31e404 | out: lpFindFileData=0x31e404*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0079.339] FindClose (in: hFindFile=0x381c80 | out: hFindFile=0x381c80) returned 1 [0079.339] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e68c) returned 1 [0079.339] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e698) returned 1 [0079.339] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e654) returned 1 [0079.339] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Cookies", nBufferLength=0x105, lpBuffer=0x31e15c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Cookies", lpFilePart=0x0) returned 0x47 [0079.339] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Cookies\\", nBufferLength=0x105, lpBuffer=0x31e130, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Cookies\\", lpFilePart=0x0) returned 0x48 [0079.339] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Cookies\\*", lpFindFileData=0x31e37c | out: lpFindFileData=0x31e37c*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0x28cff640, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x2c7870d0, ftLastAccessTime.dwHighDateTime=0x1d35d06, ftLastWriteTime.dwLowDateTime=0x2c7870d0, ftLastWriteTime.dwHighDateTime=0x1d35d06, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x381c80 [0079.340] FindNextFileW (in: hFindFile=0x381c80, lpFindFileData=0x31e38c | out: lpFindFileData=0x31e38c*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0x28cff640, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x2c7870d0, ftLastAccessTime.dwHighDateTime=0x1d35d06, ftLastWriteTime.dwLowDateTime=0x2c7870d0, ftLastWriteTime.dwHighDateTime=0x1d35d06, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0079.340] FindNextFileW (in: hFindFile=0x381c80, lpFindFileData=0x31e38c | out: lpFindFileData=0x31e38c*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x1c3625f0, ftCreationTime.dwHighDateTime=0x1d35d06, ftLastAccessTime.dwLowDateTime=0x1c3625f0, ftLastAccessTime.dwHighDateTime=0x1d35d06, ftLastWriteTime.dwLowDateTime=0x1c3625f0, ftLastWriteTime.dwHighDateTime=0x1d35d06, nFileSizeHigh=0x0, nFileSizeLow=0x53, dwReserved0=0x0, dwReserved1=0x0, cFileName="5p5nrgjn0js_halpmcxz@adobe[1].txt", cAlternateFileName="5P5NRG~1.TXT")) returned 1 [0079.340] FindNextFileW (in: hFindFile=0x381c80, lpFindFileData=0x31e38c | out: lpFindFileData=0x31e38c*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x1d72bcd0, ftCreationTime.dwHighDateTime=0x1d35d06, ftLastAccessTime.dwLowDateTime=0x1e6a4bd0, ftLastAccessTime.dwHighDateTime=0x1d35d06, ftLastWriteTime.dwLowDateTime=0x1e6a4bd0, ftLastWriteTime.dwHighDateTime=0x1d35d06, nFileSizeHigh=0x0, nFileSizeLow=0x227, dwReserved0=0x0, dwReserved1=0x0, cFileName="5p5nrgjn0js_halpmcxz@adobe[3].txt", cAlternateFileName="5P0100~1.TXT")) returned 1 [0079.340] FindNextFileW (in: hFindFile=0x381c80, lpFindFileData=0x31e38c | out: lpFindFileData=0x31e38c*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x1d8f4d50, ftCreationTime.dwHighDateTime=0x1d35d06, ftLastAccessTime.dwLowDateTime=0x1e658910, ftLastAccessTime.dwHighDateTime=0x1d35d06, ftLastWriteTime.dwLowDateTime=0x1e658910, ftLastWriteTime.dwHighDateTime=0x1d35d06, nFileSizeHigh=0x0, nFileSizeLow=0xf1, dwReserved0=0x0, dwReserved1=0x0, cFileName="5p5nrgjn0js_halpmcxz@demdex[1].txt", cAlternateFileName="5PFFE8~1.TXT")) returned 1 [0079.340] FindNextFileW (in: hFindFile=0x381c80, lpFindFileData=0x31e38c | out: lpFindFileData=0x31e38c*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x1e658910, ftCreationTime.dwHighDateTime=0x1d35d06, ftLastAccessTime.dwLowDateTime=0x1e658910, ftLastAccessTime.dwHighDateTime=0x1d35d06, ftLastWriteTime.dwLowDateTime=0x1e658910, ftLastWriteTime.dwHighDateTime=0x1d35d06, nFileSizeHigh=0x0, nFileSizeLow=0x6f, dwReserved0=0x0, dwReserved1=0x0, cFileName="5p5nrgjn0js_halpmcxz@dpm.demdex[2].txt", cAlternateFileName="5PB43E~1.TXT")) returned 1 [0079.340] FindNextFileW (in: hFindFile=0x381c80, lpFindFileData=0x31e38c | out: lpFindFileData=0x31e38c*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x1dcf9270, ftCreationTime.dwHighDateTime=0x1d35d06, ftLastAccessTime.dwLowDateTime=0x1dcf9270, ftLastAccessTime.dwHighDateTime=0x1d35d06, ftLastWriteTime.dwLowDateTime=0x1dcf9270, ftLastWriteTime.dwHighDateTime=0x1d35d06, nFileSizeHigh=0x0, nFileSizeLow=0x6e, dwReserved0=0x0, dwReserved1=0x0, cFileName="5p5nrgjn0js_halpmcxz@everesttech[1].txt", cAlternateFileName="5P5NRG~4.TXT")) returned 1 [0079.340] FindNextFileW (in: hFindFile=0x381c80, lpFindFileData=0x31e38c | out: lpFindFileData=0x31e38c*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x86af2d0, ftCreationTime.dwHighDateTime=0x1d35d06, ftLastAccessTime.dwLowDateTime=0x2c7870d0, ftLastAccessTime.dwHighDateTime=0x1d35d06, ftLastWriteTime.dwLowDateTime=0x2c7870d0, ftLastWriteTime.dwHighDateTime=0x1d35d06, nFileSizeHigh=0x0, nFileSizeLow=0x114, dwReserved0=0x0, dwReserved1=0x0, cFileName="5p5nrgjn0js_halpmcxz@google[2].txt", cAlternateFileName="5P5NRG~2.TXT")) returned 1 [0079.340] FindNextFileW (in: hFindFile=0x381c80, lpFindFileData=0x31e38c | out: lpFindFileData=0x31e38c*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x1dcf9270, ftCreationTime.dwHighDateTime=0x1d35d06, ftLastAccessTime.dwLowDateTime=0x1dcf9270, ftLastAccessTime.dwHighDateTime=0x1d35d06, ftLastWriteTime.dwLowDateTime=0x1dcf9270, ftLastWriteTime.dwHighDateTime=0x1d35d06, nFileSizeHigh=0x0, nFileSizeLow=0x56, dwReserved0=0x0, dwReserved1=0x0, cFileName="5p5nrgjn0js_halpmcxz@ml314[1].txt", cAlternateFileName="5P0DBF~1.TXT")) returned 1 [0079.340] FindNextFileW (in: hFindFile=0x381c80, lpFindFileData=0x31e38c | out: lpFindFileData=0x31e38c*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x1e5e64f0, ftCreationTime.dwHighDateTime=0x1d35d06, ftLastAccessTime.dwLowDateTime=0x1e5e64f0, ftLastAccessTime.dwHighDateTime=0x1d35d06, ftLastWriteTime.dwLowDateTime=0x1e5e64f0, ftLastWriteTime.dwHighDateTime=0x1d35d06, nFileSizeHigh=0x0, nFileSizeLow=0x19e, dwReserved0=0x0, dwReserved1=0x0, cFileName="5p5nrgjn0js_halpmcxz@rlcdn[2].txt", cAlternateFileName="5P94E6~1.TXT")) returned 1 [0079.340] FindNextFileW (in: hFindFile=0x381c80, lpFindFileData=0x31e38c | out: lpFindFileData=0x31e38c*(dwFileAttributes=0x2026, ftCreationTime.dwLowDateTime=0x28dbdd20, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28dbdd20, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xdc315a30, ftLastWriteTime.dwHighDateTime=0x1d5e82a, nFileSizeHigh=0x0, nFileSizeLow=0x8000, dwReserved0=0x0, dwReserved1=0x0, cFileName="index.dat", cAlternateFileName="")) returned 1 [0079.340] FindNextFileW (in: hFindFile=0x381c80, lpFindFileData=0x31e38c | out: lpFindFileData=0x31e38c*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x2bc9ae40, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x52878dd0, ftLastAccessTime.dwHighDateTime=0x1d2faf3, ftLastWriteTime.dwLowDateTime=0x52878dd0, ftLastWriteTime.dwHighDateTime=0x1d2faf3, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Low", cAlternateFileName="")) returned 1 [0079.340] FindClose (in: hFindFile=0x381c80 | out: hFindFile=0x381c80) returned 1 [0079.340] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e614) returned 1 [0079.340] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e620) returned 1 [0079.340] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e654) returned 1 [0079.340] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Cookies", nBufferLength=0x105, lpBuffer=0x31e15c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Cookies", lpFilePart=0x0) returned 0x47 [0079.340] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Cookies\\", nBufferLength=0x105, lpBuffer=0x31e130, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Cookies\\", lpFilePart=0x0) returned 0x48 [0079.341] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Cookies\\*", lpFindFileData=0x31e37c | out: lpFindFileData=0x31e37c*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0x28cff640, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x2c7870d0, ftLastAccessTime.dwHighDateTime=0x1d35d06, ftLastWriteTime.dwLowDateTime=0x2c7870d0, ftLastWriteTime.dwHighDateTime=0x1d35d06, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x381c80 [0079.341] FindClose (in: hFindFile=0x381c80 | out: hFindFile=0x381c80) returned 1 [0079.341] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e614) returned 1 [0079.341] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e620) returned 1 [0079.341] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Cookies\\5p5nrgjn0js_halpmcxz@adobe[1].txt", nBufferLength=0x105, lpBuffer=0x31e02c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Cookies\\5p5nrgjn0js_halpmcxz@adobe[1].txt", lpFilePart=0x0) returned 0x69 [0079.341] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e520) returned 1 [0079.341] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Cookies\\5p5nrgjn0js_halpmcxz@adobe[1].txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\windows\\cookies\\5p5nrgjn0js_halpmcxz@adobe[1].txt"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x264 [0079.341] GetFileType (hFile=0x264) returned 0x1 [0079.341] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e51c) returned 1 [0079.341] GetFileType (hFile=0x264) returned 0x1 [0079.342] GetFileSize (in: hFile=0x264, lpFileSizeHigh=0x31e628 | out: lpFileSizeHigh=0x31e628*=0x0) returned 0x53 [0079.342] ReadFile (in: hFile=0x264, lpBuffer=0x2830760, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x31e5d4, lpOverlapped=0x0 | out: lpBuffer=0x2830760*, lpNumberOfBytesRead=0x31e5d4*=0x53, lpOverlapped=0x0) returned 1 [0079.393] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Cookies\\5p5nrgjn0js_halpmcxz@adobe[1].txt", nBufferLength=0x105, lpBuffer=0x31e018, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Cookies\\5p5nrgjn0js_halpmcxz@adobe[1].txt", lpFilePart=0x0) returned 0x69 [0079.393] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e50c) returned 1 [0079.393] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Cookies\\5p5nrgjn0js_halpmcxz@adobe[1].txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\windows\\cookies\\5p5nrgjn0js_halpmcxz@adobe[1].txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x264 [0079.394] GetFileType (hFile=0x264) returned 0x1 [0079.394] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e508) returned 1 [0079.394] GetFileType (hFile=0x264) returned 0x1 [0079.394] WriteFile (in: hFile=0x264, lpBuffer=0x267e034*, nNumberOfBytesToWrite=0x60, lpNumberOfBytesWritten=0x31e59c, lpOverlapped=0x0 | out: lpBuffer=0x267e034*, lpNumberOfBytesWritten=0x31e59c*=0x60, lpOverlapped=0x0) returned 1 [0079.395] CloseHandle (hObject=0x264) returned 1 [0079.395] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Cookies\\5p5nrgjn0js_halpmcxz@adobe[1].txt", nBufferLength=0x105, lpBuffer=0x31e14c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Cookies\\5p5nrgjn0js_halpmcxz@adobe[1].txt", lpFilePart=0x0) returned 0x69 [0079.395] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Cookies\\5p5nrgjn0js_halpmcxz@adobe[1].txt", nBufferLength=0x105, lpBuffer=0x31e14c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Cookies\\5p5nrgjn0js_halpmcxz@adobe[1].txt", lpFilePart=0x0) returned 0x69 [0079.395] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e5ac) returned 1 [0079.395] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Cookies\\5p5nrgjn0js_halpmcxz@adobe[1].txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\windows\\cookies\\5p5nrgjn0js_halpmcxz@adobe[1].txt"), fInfoLevelId=0x0, lpFileInformation=0x31e628 | out: lpFileInformation=0x31e628*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x1c3625f0, ftCreationTime.dwHighDateTime=0x1d35d06, ftLastAccessTime.dwLowDateTime=0x1c3625f0, ftLastAccessTime.dwHighDateTime=0x1d35d06, ftLastWriteTime.dwLowDateTime=0x12c45900, ftLastWriteTime.dwHighDateTime=0x1d6eb7f, nFileSizeHigh=0x0, nFileSizeLow=0x60)) returned 1 [0079.396] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e5a8) returned 1 [0079.396] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Cookies\\5p5nrgjn0js_halpmcxz@adobe[1].txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\windows\\cookies\\5p5nrgjn0js_halpmcxz@adobe[1].txt"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Cookies\\5p5nrgjn0js_halpmcxz@adobe[1].txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\windows\\cookies\\5p5nrgjn0js_halpmcxz@adobe[1].txt")) returned 1 [0079.396] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Cookies\\5p5nrgjn0js_halpmcxz@adobe[3].txt", nBufferLength=0x105, lpBuffer=0x31e02c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Cookies\\5p5nrgjn0js_halpmcxz@adobe[3].txt", lpFilePart=0x0) returned 0x69 [0079.397] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e520) returned 1 [0079.397] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Cookies\\5p5nrgjn0js_halpmcxz@adobe[3].txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\windows\\cookies\\5p5nrgjn0js_halpmcxz@adobe[3].txt"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x264 [0079.398] GetFileType (hFile=0x264) returned 0x1 [0079.398] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e51c) returned 1 [0079.398] GetFileType (hFile=0x264) returned 0x1 [0079.398] GetFileSize (in: hFile=0x264, lpFileSizeHigh=0x31e628 | out: lpFileSizeHigh=0x31e628*=0x0) returned 0x227 [0079.398] ReadFile (in: hFile=0x264, lpBuffer=0x267f5d8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x31e5d4, lpOverlapped=0x0 | out: lpBuffer=0x267f5d8*, lpNumberOfBytesRead=0x31e5d4*=0x227, lpOverlapped=0x0) returned 1 [0079.399] CloseHandle (hObject=0x264) returned 1 [0079.417] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Cookies\\5p5nrgjn0js_halpmcxz@adobe[3].txt", nBufferLength=0x105, lpBuffer=0x31e018, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Cookies\\5p5nrgjn0js_halpmcxz@adobe[3].txt", lpFilePart=0x0) returned 0x69 [0079.417] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e50c) returned 1 [0079.417] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Cookies\\5p5nrgjn0js_halpmcxz@adobe[3].txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\windows\\cookies\\5p5nrgjn0js_halpmcxz@adobe[3].txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x264 [0079.418] GetFileType (hFile=0x264) returned 0x1 [0079.418] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e508) returned 1 [0079.418] GetFileType (hFile=0x264) returned 0x1 [0079.418] WriteFile (in: hFile=0x264, lpBuffer=0x26ce1ac*, nNumberOfBytesToWrite=0x230, lpNumberOfBytesWritten=0x31e59c, lpOverlapped=0x0 | out: lpBuffer=0x26ce1ac*, lpNumberOfBytesWritten=0x31e59c*=0x230, lpOverlapped=0x0) returned 1 [0079.419] CloseHandle (hObject=0x264) returned 1 [0079.419] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Cookies\\5p5nrgjn0js_halpmcxz@adobe[3].txt", nBufferLength=0x105, lpBuffer=0x31e14c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Cookies\\5p5nrgjn0js_halpmcxz@adobe[3].txt", lpFilePart=0x0) returned 0x69 [0079.419] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Cookies\\5p5nrgjn0js_halpmcxz@adobe[3].txt", nBufferLength=0x105, lpBuffer=0x31e14c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Cookies\\5p5nrgjn0js_halpmcxz@adobe[3].txt", lpFilePart=0x0) returned 0x69 [0079.419] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e5ac) returned 1 [0079.419] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Cookies\\5p5nrgjn0js_halpmcxz@adobe[3].txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\windows\\cookies\\5p5nrgjn0js_halpmcxz@adobe[3].txt"), fInfoLevelId=0x0, lpFileInformation=0x31e628 | out: lpFileInformation=0x31e628*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x1d72bcd0, ftCreationTime.dwHighDateTime=0x1d35d06, ftLastAccessTime.dwLowDateTime=0x1e6a4bd0, ftLastAccessTime.dwHighDateTime=0x1d35d06, ftLastWriteTime.dwLowDateTime=0x12c6ba60, ftLastWriteTime.dwHighDateTime=0x1d6eb7f, nFileSizeHigh=0x0, nFileSizeLow=0x230)) returned 1 [0079.419] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Cookies\\5p5nrgjn0js_halpmcxz@adobe[3].txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\windows\\cookies\\5p5nrgjn0js_halpmcxz@adobe[3].txt"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Cookies\\5p5nrgjn0js_halpmcxz@adobe[3].txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\windows\\cookies\\5p5nrgjn0js_halpmcxz@adobe[3].txt")) returned 1 [0079.420] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Cookies\\5p5nrgjn0js_halpmcxz@demdex[1].txt", nBufferLength=0x105, lpBuffer=0x31e02c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Cookies\\5p5nrgjn0js_halpmcxz@demdex[1].txt", lpFilePart=0x0) returned 0x6a [0079.420] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Cookies\\5p5nrgjn0js_halpmcxz@demdex[1].txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\windows\\cookies\\5p5nrgjn0js_halpmcxz@demdex[1].txt"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x264 [0079.421] GetFileType (hFile=0x264) returned 0x1 [0079.421] GetFileType (hFile=0x264) returned 0x1 [0079.421] GetFileSize (in: hFile=0x264, lpFileSizeHigh=0x31e628 | out: lpFileSizeHigh=0x31e628*=0x0) returned 0xf1 [0079.421] ReadFile (in: hFile=0x264, lpBuffer=0x26cf624, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x31e5d4, lpOverlapped=0x0 | out: lpBuffer=0x26cf624*, lpNumberOfBytesRead=0x31e5d4*=0xf1, lpOverlapped=0x0) returned 1 [0079.422] CloseHandle (hObject=0x264) returned 1 [0079.435] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Cookies\\5p5nrgjn0js_halpmcxz@demdex[1].txt", nBufferLength=0x105, lpBuffer=0x31e018, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Cookies\\5p5nrgjn0js_halpmcxz@demdex[1].txt", lpFilePart=0x0) returned 0x6a [0079.435] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Cookies\\5p5nrgjn0js_halpmcxz@demdex[1].txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\windows\\cookies\\5p5nrgjn0js_halpmcxz@demdex[1].txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x264 [0079.436] GetFileType (hFile=0x264) returned 0x1 [0079.436] GetFileType (hFile=0x264) returned 0x1 [0079.436] WriteFile (in: hFile=0x264, lpBuffer=0x271d8dc*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x31e59c, lpOverlapped=0x0 | out: lpBuffer=0x271d8dc*, lpNumberOfBytesWritten=0x31e59c*=0x100, lpOverlapped=0x0) returned 1 [0079.437] CloseHandle (hObject=0x264) returned 1 [0079.437] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Cookies\\5p5nrgjn0js_halpmcxz@demdex[1].txt", nBufferLength=0x105, lpBuffer=0x31e14c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Cookies\\5p5nrgjn0js_halpmcxz@demdex[1].txt", lpFilePart=0x0) returned 0x6a [0079.437] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Cookies\\5p5nrgjn0js_halpmcxz@demdex[1].txt", nBufferLength=0x105, lpBuffer=0x31e14c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Cookies\\5p5nrgjn0js_halpmcxz@demdex[1].txt", lpFilePart=0x0) returned 0x6a [0079.438] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Cookies\\5p5nrgjn0js_halpmcxz@demdex[1].txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\windows\\cookies\\5p5nrgjn0js_halpmcxz@demdex[1].txt"), fInfoLevelId=0x0, lpFileInformation=0x31e628 | out: lpFileInformation=0x31e628*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x1d8f4d50, ftCreationTime.dwHighDateTime=0x1d35d06, ftLastAccessTime.dwLowDateTime=0x1e658910, ftLastAccessTime.dwHighDateTime=0x1d35d06, ftLastWriteTime.dwLowDateTime=0x12cb7d20, ftLastWriteTime.dwHighDateTime=0x1d6eb7f, nFileSizeHigh=0x0, nFileSizeLow=0x100)) returned 1 [0079.438] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Cookies\\5p5nrgjn0js_halpmcxz@demdex[1].txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\windows\\cookies\\5p5nrgjn0js_halpmcxz@demdex[1].txt"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Cookies\\5p5nrgjn0js_halpmcxz@demdex[1].txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\windows\\cookies\\5p5nrgjn0js_halpmcxz@demdex[1].txt")) returned 1 [0079.438] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Cookies\\5p5nrgjn0js_halpmcxz@dpm.demdex[2].txt", nBufferLength=0x105, lpBuffer=0x31e02c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Cookies\\5p5nrgjn0js_halpmcxz@dpm.demdex[2].txt", lpFilePart=0x0) returned 0x6e [0079.438] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Cookies\\5p5nrgjn0js_halpmcxz@dpm.demdex[2].txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\windows\\cookies\\5p5nrgjn0js_halpmcxz@dpm.demdex[2].txt"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x264 [0079.439] GetFileType (hFile=0x264) returned 0x1 [0079.439] GetFileType (hFile=0x264) returned 0x1 [0079.439] GetFileSize (in: hFile=0x264, lpFileSizeHigh=0x31e628 | out: lpFileSizeHigh=0x31e628*=0x0) returned 0x6f [0079.439] ReadFile (in: hFile=0x264, lpBuffer=0x271ece8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x31e5d4, lpOverlapped=0x0 | out: lpBuffer=0x271ece8*, lpNumberOfBytesRead=0x31e5d4*=0x6f, lpOverlapped=0x0) returned 1 [0079.440] CloseHandle (hObject=0x264) returned 1 [0079.453] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Cookies\\5p5nrgjn0js_halpmcxz@dpm.demdex[2].txt", nBufferLength=0x105, lpBuffer=0x31e018, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Cookies\\5p5nrgjn0js_halpmcxz@dpm.demdex[2].txt", lpFilePart=0x0) returned 0x6e [0079.453] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Cookies\\5p5nrgjn0js_halpmcxz@dpm.demdex[2].txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\windows\\cookies\\5p5nrgjn0js_halpmcxz@dpm.demdex[2].txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x264 [0079.454] GetFileType (hFile=0x264) returned 0x1 [0079.454] GetFileType (hFile=0x264) returned 0x1 [0079.454] WriteFile (in: hFile=0x264, lpBuffer=0x276ce84*, nNumberOfBytesToWrite=0x70, lpNumberOfBytesWritten=0x31e59c, lpOverlapped=0x0 | out: lpBuffer=0x276ce84*, lpNumberOfBytesWritten=0x31e59c*=0x70, lpOverlapped=0x0) returned 1 [0079.455] CloseHandle (hObject=0x264) returned 1 [0079.455] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Cookies\\5p5nrgjn0js_halpmcxz@dpm.demdex[2].txt", nBufferLength=0x105, lpBuffer=0x31e14c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Cookies\\5p5nrgjn0js_halpmcxz@dpm.demdex[2].txt", lpFilePart=0x0) returned 0x6e [0079.455] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Cookies\\5p5nrgjn0js_halpmcxz@dpm.demdex[2].txt", nBufferLength=0x105, lpBuffer=0x31e14c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Cookies\\5p5nrgjn0js_halpmcxz@dpm.demdex[2].txt", lpFilePart=0x0) returned 0x6e [0079.455] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Cookies\\5p5nrgjn0js_halpmcxz@dpm.demdex[2].txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\windows\\cookies\\5p5nrgjn0js_halpmcxz@dpm.demdex[2].txt"), fInfoLevelId=0x0, lpFileInformation=0x31e628 | out: lpFileInformation=0x31e628*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x1e658910, ftCreationTime.dwHighDateTime=0x1d35d06, ftLastAccessTime.dwLowDateTime=0x1e658910, ftLastAccessTime.dwHighDateTime=0x1d35d06, ftLastWriteTime.dwLowDateTime=0x12cdde80, ftLastWriteTime.dwHighDateTime=0x1d6eb7f, nFileSizeHigh=0x0, nFileSizeLow=0x70)) returned 1 [0079.455] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Cookies\\5p5nrgjn0js_halpmcxz@dpm.demdex[2].txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\windows\\cookies\\5p5nrgjn0js_halpmcxz@dpm.demdex[2].txt"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Cookies\\5p5nrgjn0js_halpmcxz@dpm.demdex[2].txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\windows\\cookies\\5p5nrgjn0js_halpmcxz@dpm.demdex[2].txt")) returned 1 [0079.456] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Cookies\\5p5nrgjn0js_halpmcxz@everesttech[1].txt", nBufferLength=0x105, lpBuffer=0x31e02c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Cookies\\5p5nrgjn0js_halpmcxz@everesttech[1].txt", lpFilePart=0x0) returned 0x6f [0079.456] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Cookies\\5p5nrgjn0js_halpmcxz@everesttech[1].txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\windows\\cookies\\5p5nrgjn0js_halpmcxz@everesttech[1].txt"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x264 [0079.456] GetFileType (hFile=0x264) returned 0x1 [0079.457] GetFileType (hFile=0x264) returned 0x1 [0079.457] GetFileSize (in: hFile=0x264, lpFileSizeHigh=0x31e628 | out: lpFileSizeHigh=0x31e628*=0x0) returned 0x6e [0079.457] ReadFile (in: hFile=0x264, lpBuffer=0x276e2a0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x31e5d4, lpOverlapped=0x0 | out: lpBuffer=0x276e2a0*, lpNumberOfBytesRead=0x31e5d4*=0x6e, lpOverlapped=0x0) returned 1 [0079.457] CloseHandle (hObject=0x264) returned 1 [0079.471] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Cookies\\5p5nrgjn0js_halpmcxz@everesttech[1].txt", nBufferLength=0x105, lpBuffer=0x31e018, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Cookies\\5p5nrgjn0js_halpmcxz@everesttech[1].txt", lpFilePart=0x0) returned 0x6f [0079.471] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Cookies\\5p5nrgjn0js_halpmcxz@everesttech[1].txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\windows\\cookies\\5p5nrgjn0js_halpmcxz@everesttech[1].txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x264 [0079.472] GetFileType (hFile=0x264) returned 0x1 [0079.472] GetFileType (hFile=0x264) returned 0x1 [0079.472] WriteFile (in: hFile=0x264, lpBuffer=0x27bc43c*, nNumberOfBytesToWrite=0x70, lpNumberOfBytesWritten=0x31e59c, lpOverlapped=0x0 | out: lpBuffer=0x27bc43c*, lpNumberOfBytesWritten=0x31e59c*=0x70, lpOverlapped=0x0) returned 1 [0079.473] CloseHandle (hObject=0x264) returned 1 [0079.473] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Cookies\\5p5nrgjn0js_halpmcxz@everesttech[1].txt", nBufferLength=0x105, lpBuffer=0x31e14c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Cookies\\5p5nrgjn0js_halpmcxz@everesttech[1].txt", lpFilePart=0x0) returned 0x6f [0079.473] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Cookies\\5p5nrgjn0js_halpmcxz@everesttech[1].txt", nBufferLength=0x105, lpBuffer=0x31e14c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Cookies\\5p5nrgjn0js_halpmcxz@everesttech[1].txt", lpFilePart=0x0) returned 0x6f [0079.473] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Cookies\\5p5nrgjn0js_halpmcxz@everesttech[1].txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\windows\\cookies\\5p5nrgjn0js_halpmcxz@everesttech[1].txt"), fInfoLevelId=0x0, lpFileInformation=0x31e628 | out: lpFileInformation=0x31e628*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x1dcf9270, ftCreationTime.dwHighDateTime=0x1d35d06, ftLastAccessTime.dwLowDateTime=0x1dcf9270, ftLastAccessTime.dwHighDateTime=0x1d35d06, ftLastWriteTime.dwLowDateTime=0x12d03fe0, ftLastWriteTime.dwHighDateTime=0x1d6eb7f, nFileSizeHigh=0x0, nFileSizeLow=0x70)) returned 1 [0079.473] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Cookies\\5p5nrgjn0js_halpmcxz@everesttech[1].txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\windows\\cookies\\5p5nrgjn0js_halpmcxz@everesttech[1].txt"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Cookies\\5p5nrgjn0js_halpmcxz@everesttech[1].txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\windows\\cookies\\5p5nrgjn0js_halpmcxz@everesttech[1].txt")) returned 1 [0079.474] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Cookies\\5p5nrgjn0js_halpmcxz@google[2].txt", nBufferLength=0x105, lpBuffer=0x31e02c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Cookies\\5p5nrgjn0js_halpmcxz@google[2].txt", lpFilePart=0x0) returned 0x6a [0079.474] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Cookies\\5p5nrgjn0js_halpmcxz@google[2].txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\windows\\cookies\\5p5nrgjn0js_halpmcxz@google[2].txt"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x264 [0079.475] GetFileType (hFile=0x264) returned 0x1 [0079.475] GetFileType (hFile=0x264) returned 0x1 [0079.475] GetFileSize (in: hFile=0x264, lpFileSizeHigh=0x31e628 | out: lpFileSizeHigh=0x31e628*=0x0) returned 0x114 [0079.475] ReadFile (in: hFile=0x264, lpBuffer=0x27bd8ec, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x31e5d4, lpOverlapped=0x0 | out: lpBuffer=0x27bd8ec*, lpNumberOfBytesRead=0x31e5d4*=0x114, lpOverlapped=0x0) returned 1 [0079.476] CloseHandle (hObject=0x264) returned 1 [0079.489] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Cookies\\5p5nrgjn0js_halpmcxz@google[2].txt", nBufferLength=0x105, lpBuffer=0x31e018, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Cookies\\5p5nrgjn0js_halpmcxz@google[2].txt", lpFilePart=0x0) returned 0x6a [0079.489] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Cookies\\5p5nrgjn0js_halpmcxz@google[2].txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\windows\\cookies\\5p5nrgjn0js_halpmcxz@google[2].txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x264 [0079.490] GetFileType (hFile=0x264) returned 0x1 [0079.490] GetFileType (hFile=0x264) returned 0x1 [0079.490] WriteFile (in: hFile=0x264, lpBuffer=0x280be1c*, nNumberOfBytesToWrite=0x120, lpNumberOfBytesWritten=0x31e59c, lpOverlapped=0x0 | out: lpBuffer=0x280be1c*, lpNumberOfBytesWritten=0x31e59c*=0x120, lpOverlapped=0x0) returned 1 [0079.491] CloseHandle (hObject=0x264) returned 1 [0079.491] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Cookies\\5p5nrgjn0js_halpmcxz@google[2].txt", nBufferLength=0x105, lpBuffer=0x31e14c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Cookies\\5p5nrgjn0js_halpmcxz@google[2].txt", lpFilePart=0x0) returned 0x6a [0079.491] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Cookies\\5p5nrgjn0js_halpmcxz@google[2].txt", nBufferLength=0x105, lpBuffer=0x31e14c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Cookies\\5p5nrgjn0js_halpmcxz@google[2].txt", lpFilePart=0x0) returned 0x6a [0079.491] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Cookies\\5p5nrgjn0js_halpmcxz@google[2].txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\windows\\cookies\\5p5nrgjn0js_halpmcxz@google[2].txt"), fInfoLevelId=0x0, lpFileInformation=0x31e628 | out: lpFileInformation=0x31e628*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x86af2d0, ftCreationTime.dwHighDateTime=0x1d35d06, ftLastAccessTime.dwLowDateTime=0x2c7870d0, ftLastAccessTime.dwHighDateTime=0x1d35d06, ftLastWriteTime.dwLowDateTime=0x12d2a140, ftLastWriteTime.dwHighDateTime=0x1d6eb7f, nFileSizeHigh=0x0, nFileSizeLow=0x120)) returned 1 [0079.491] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Cookies\\5p5nrgjn0js_halpmcxz@google[2].txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\windows\\cookies\\5p5nrgjn0js_halpmcxz@google[2].txt"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Cookies\\5p5nrgjn0js_halpmcxz@google[2].txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\windows\\cookies\\5p5nrgjn0js_halpmcxz@google[2].txt")) returned 1 [0079.492] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Cookies\\5p5nrgjn0js_halpmcxz@ml314[1].txt", nBufferLength=0x105, lpBuffer=0x31e02c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Cookies\\5p5nrgjn0js_halpmcxz@ml314[1].txt", lpFilePart=0x0) returned 0x69 [0079.492] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Cookies\\5p5nrgjn0js_halpmcxz@ml314[1].txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\windows\\cookies\\5p5nrgjn0js_halpmcxz@ml314[1].txt"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x264 [0079.492] GetFileType (hFile=0x264) returned 0x1 [0079.492] GetFileType (hFile=0x264) returned 0x1 [0079.492] GetFileSize (in: hFile=0x264, lpFileSizeHigh=0x31e628 | out: lpFileSizeHigh=0x31e628*=0x0) returned 0x56 [0079.492] ReadFile (in: hFile=0x264, lpBuffer=0x280d1f8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x31e5d4, lpOverlapped=0x0 | out: lpBuffer=0x280d1f8*, lpNumberOfBytesRead=0x31e5d4*=0x56, lpOverlapped=0x0) returned 1 [0079.493] CloseHandle (hObject=0x264) returned 1 [0079.534] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Cookies\\5p5nrgjn0js_halpmcxz@ml314[1].txt", nBufferLength=0x105, lpBuffer=0x31e018, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Cookies\\5p5nrgjn0js_halpmcxz@ml314[1].txt", lpFilePart=0x0) returned 0x69 [0079.534] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e50c) returned 1 [0079.534] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Cookies\\5p5nrgjn0js_halpmcxz@ml314[1].txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\windows\\cookies\\5p5nrgjn0js_halpmcxz@ml314[1].txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x264 [0079.535] GetFileType (hFile=0x264) returned 0x1 [0079.535] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e508) returned 1 [0079.535] GetFileType (hFile=0x264) returned 0x1 [0079.535] WriteFile (in: hFile=0x264, lpBuffer=0x265b398*, nNumberOfBytesToWrite=0x60, lpNumberOfBytesWritten=0x31e59c, lpOverlapped=0x0 | out: lpBuffer=0x265b398*, lpNumberOfBytesWritten=0x31e59c*=0x60, lpOverlapped=0x0) returned 1 [0079.536] CloseHandle (hObject=0x264) returned 1 [0079.536] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Cookies\\5p5nrgjn0js_halpmcxz@ml314[1].txt", nBufferLength=0x105, lpBuffer=0x31e14c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Cookies\\5p5nrgjn0js_halpmcxz@ml314[1].txt", lpFilePart=0x0) returned 0x69 [0079.536] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Cookies\\5p5nrgjn0js_halpmcxz@ml314[1].txt", nBufferLength=0x105, lpBuffer=0x31e14c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Cookies\\5p5nrgjn0js_halpmcxz@ml314[1].txt", lpFilePart=0x0) returned 0x69 [0079.536] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e5ac) returned 1 [0079.536] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Cookies\\5p5nrgjn0js_halpmcxz@ml314[1].txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\windows\\cookies\\5p5nrgjn0js_halpmcxz@ml314[1].txt"), fInfoLevelId=0x0, lpFileInformation=0x31e628 | out: lpFileInformation=0x31e628*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x1dcf9270, ftCreationTime.dwHighDateTime=0x1d35d06, ftLastAccessTime.dwLowDateTime=0x1dcf9270, ftLastAccessTime.dwHighDateTime=0x1d35d06, ftLastWriteTime.dwLowDateTime=0x12d9c560, ftLastWriteTime.dwHighDateTime=0x1d6eb7f, nFileSizeHigh=0x0, nFileSizeLow=0x60)) returned 1 [0079.536] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e5a8) returned 1 [0079.536] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Cookies\\5p5nrgjn0js_halpmcxz@ml314[1].txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\windows\\cookies\\5p5nrgjn0js_halpmcxz@ml314[1].txt"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Cookies\\5p5nrgjn0js_halpmcxz@ml314[1].txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\windows\\cookies\\5p5nrgjn0js_halpmcxz@ml314[1].txt")) returned 1 [0079.536] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Cookies\\5p5nrgjn0js_halpmcxz@rlcdn[2].txt", nBufferLength=0x105, lpBuffer=0x31e02c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Cookies\\5p5nrgjn0js_halpmcxz@rlcdn[2].txt", lpFilePart=0x0) returned 0x69 [0079.537] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e520) returned 1 [0079.537] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Cookies\\5p5nrgjn0js_halpmcxz@rlcdn[2].txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\windows\\cookies\\5p5nrgjn0js_halpmcxz@rlcdn[2].txt"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x264 [0079.537] GetFileType (hFile=0x264) returned 0x1 [0079.537] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e51c) returned 1 [0079.537] GetFileType (hFile=0x264) returned 0x1 [0079.537] GetFileSize (in: hFile=0x264, lpFileSizeHigh=0x31e628 | out: lpFileSizeHigh=0x31e628*=0x0) returned 0x19e [0079.537] ReadFile (in: hFile=0x264, lpBuffer=0x265c8b4, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x31e5d4, lpOverlapped=0x0 | out: lpBuffer=0x265c8b4*, lpNumberOfBytesRead=0x31e5d4*=0x19e, lpOverlapped=0x0) returned 1 [0079.538] CloseHandle (hObject=0x264) returned 1 [0079.552] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Cookies\\5p5nrgjn0js_halpmcxz@rlcdn[2].txt", nBufferLength=0x105, lpBuffer=0x31e018, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Cookies\\5p5nrgjn0js_halpmcxz@rlcdn[2].txt", lpFilePart=0x0) returned 0x69 [0079.552] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e50c) returned 1 [0079.552] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Cookies\\5p5nrgjn0js_halpmcxz@rlcdn[2].txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\windows\\cookies\\5p5nrgjn0js_halpmcxz@rlcdn[2].txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x264 [0079.553] GetFileType (hFile=0x264) returned 0x1 [0079.553] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e508) returned 1 [0079.553] GetFileType (hFile=0x264) returned 0x1 [0079.553] WriteFile (in: hFile=0x264, lpBuffer=0x26ab1b0*, nNumberOfBytesToWrite=0x1a0, lpNumberOfBytesWritten=0x31e59c, lpOverlapped=0x0 | out: lpBuffer=0x26ab1b0*, lpNumberOfBytesWritten=0x31e59c*=0x1a0, lpOverlapped=0x0) returned 1 [0079.554] CloseHandle (hObject=0x264) returned 1 [0079.554] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Cookies\\5p5nrgjn0js_halpmcxz@rlcdn[2].txt", nBufferLength=0x105, lpBuffer=0x31e14c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Cookies\\5p5nrgjn0js_halpmcxz@rlcdn[2].txt", lpFilePart=0x0) returned 0x69 [0079.554] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Cookies\\5p5nrgjn0js_halpmcxz@rlcdn[2].txt", nBufferLength=0x105, lpBuffer=0x31e14c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Cookies\\5p5nrgjn0js_halpmcxz@rlcdn[2].txt", lpFilePart=0x0) returned 0x69 [0079.554] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e5ac) returned 1 [0079.554] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Cookies\\5p5nrgjn0js_halpmcxz@rlcdn[2].txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\windows\\cookies\\5p5nrgjn0js_halpmcxz@rlcdn[2].txt"), fInfoLevelId=0x0, lpFileInformation=0x31e628 | out: lpFileInformation=0x31e628*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x1e5e64f0, ftCreationTime.dwHighDateTime=0x1d35d06, ftLastAccessTime.dwLowDateTime=0x1e5e64f0, ftLastAccessTime.dwHighDateTime=0x1d35d06, ftLastWriteTime.dwLowDateTime=0x12dc26c0, ftLastWriteTime.dwHighDateTime=0x1d6eb7f, nFileSizeHigh=0x0, nFileSizeLow=0x1a0)) returned 1 [0079.554] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e5a8) returned 1 [0079.554] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Cookies\\5p5nrgjn0js_halpmcxz@rlcdn[2].txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\windows\\cookies\\5p5nrgjn0js_halpmcxz@rlcdn[2].txt"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Cookies\\5p5nrgjn0js_halpmcxz@rlcdn[2].txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\windows\\cookies\\5p5nrgjn0js_halpmcxz@rlcdn[2].txt")) returned 1 [0079.555] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e5dc) returned 1 [0079.555] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Cookies\\Low", nBufferLength=0x105, lpBuffer=0x31e0e4, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Cookies\\Low", lpFilePart=0x0) returned 0x4b [0079.555] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Cookies\\Low\\", nBufferLength=0x105, lpBuffer=0x31e0b8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Cookies\\Low\\", lpFilePart=0x0) returned 0x4c [0079.555] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Cookies\\Low\\*", lpFindFileData=0x31e304 | out: lpFindFileData=0x31e304*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x2bc9ae40, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x52878dd0, ftLastAccessTime.dwHighDateTime=0x1d2faf3, ftLastWriteTime.dwLowDateTime=0x52878dd0, ftLastWriteTime.dwHighDateTime=0x1d2faf3, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x381cc0 [0079.558] FindNextFileW (in: hFindFile=0x381cc0, lpFindFileData=0x31e314 | out: lpFindFileData=0x31e314*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x2bc9ae40, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x52878dd0, ftLastAccessTime.dwHighDateTime=0x1d2faf3, ftLastWriteTime.dwLowDateTime=0x52878dd0, ftLastWriteTime.dwHighDateTime=0x1d2faf3, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0079.559] FindNextFileW (in: hFindFile=0x381cc0, lpFindFileData=0x31e314 | out: lpFindFileData=0x31e314*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x44eb6480, ftCreationTime.dwHighDateTime=0x1d2faf3, ftLastAccessTime.dwLowDateTime=0x44eb6480, ftLastAccessTime.dwHighDateTime=0x1d2faf3, ftLastWriteTime.dwLowDateTime=0x44eb6480, ftLastWriteTime.dwHighDateTime=0x1d2faf3, nFileSizeHigh=0x0, nFileSizeLow=0x66, dwReserved0=0x0, dwReserved1=0x0, cFileName="5p5nrgjn0js_halpmcxz@ad13.adfarm1.adition[1].txt", cAlternateFileName="5P9943~1.TXT")) returned 1 [0079.559] FindNextFileW (in: hFindFile=0x381cc0, lpFindFileData=0x31e314 | out: lpFindFileData=0x31e314*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x44bd95f0, ftCreationTime.dwHighDateTime=0x1d2faf3, ftLastAccessTime.dwLowDateTime=0x44bd95f0, ftLastAccessTime.dwHighDateTime=0x1d2faf3, ftLastWriteTime.dwLowDateTime=0x44bd95f0, ftLastWriteTime.dwHighDateTime=0x1d2faf3, nFileSizeHigh=0x0, nFileSizeLow=0x66, dwReserved0=0x0, dwReserved1=0x0, cFileName="5p5nrgjn0js_halpmcxz@adfarm1.adition[2].txt", cAlternateFileName="5P37D9~1.TXT")) returned 1 [0079.560] FindNextFileW (in: hFindFile=0x381cc0, lpFindFileData=0x31e314 | out: lpFindFileData=0x31e314*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xbf73d210, ftCreationTime.dwHighDateTime=0x1d2faf2, ftLastAccessTime.dwLowDateTime=0xbf73d210, ftLastAccessTime.dwHighDateTime=0x1d2faf2, ftLastWriteTime.dwLowDateTime=0xbf73d210, ftLastWriteTime.dwHighDateTime=0x1d2faf2, nFileSizeHigh=0x0, nFileSizeLow=0x5d, dwReserved0=0x0, dwReserved1=0x0, cFileName="5p5nrgjn0js_halpmcxz@adformdsp[1].txt", cAlternateFileName="5P2CBA~1.TXT")) returned 1 [0079.560] FindNextFileW (in: hFindFile=0x381cc0, lpFindFileData=0x31e314 | out: lpFindFileData=0x31e314*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xbf2a0770, ftCreationTime.dwHighDateTime=0x1d2faf2, ftLastAccessTime.dwLowDateTime=0xbf7d5790, ftLastAccessTime.dwHighDateTime=0x1d2faf2, ftLastWriteTime.dwLowDateTime=0xbf7d5790, ftLastWriteTime.dwHighDateTime=0x1d2faf2, nFileSizeHigh=0x0, nFileSizeLow=0xea, dwReserved0=0x0, dwReserved1=0x0, cFileName="5p5nrgjn0js_halpmcxz@adform[1].txt", cAlternateFileName="5P8600~1.TXT")) returned 1 [0079.560] FindNextFileW (in: hFindFile=0x381cc0, lpFindFileData=0x31e314 | out: lpFindFileData=0x31e314*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xbe5d5130, ftCreationTime.dwHighDateTime=0x1d2faf2, ftLastAccessTime.dwLowDateTime=0x45f08810, ftLastAccessTime.dwHighDateTime=0x1d2faf3, ftLastWriteTime.dwLowDateTime=0x45f08810, ftLastWriteTime.dwHighDateTime=0x1d2faf3, nFileSizeHigh=0x0, nFileSizeLow=0x242, dwReserved0=0x0, dwReserved1=0x0, cFileName="5p5nrgjn0js_halpmcxz@adnxs[1].txt", cAlternateFileName="5P89EF~1.TXT")) returned 1 [0079.560] FindNextFileW (in: hFindFile=0x381cc0, lpFindFileData=0x31e314 | out: lpFindFileData=0x31e314*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x52fcb4b0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x52fcb4b0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x52fcb4b0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x65, dwReserved0=0x0, dwReserved1=0x0, cFileName="5p5nrgjn0js_halpmcxz@adtech[2].txt", cAlternateFileName="5PC5B2~1.TXT")) returned 1 [0079.560] FindNextFileW (in: hFindFile=0x381cc0, lpFindFileData=0x31e314 | out: lpFindFileData=0x31e314*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x53c70990, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x53c70990, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x53c70990, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x52, dwReserved0=0x0, dwReserved1=0x0, cFileName="5p5nrgjn0js_halpmcxz@adtr02[1].txt", cAlternateFileName="5P5NRG~3.TXT")) returned 1 [0079.560] FindNextFileW (in: hFindFile=0x381cc0, lpFindFileData=0x31e314 | out: lpFindFileData=0x31e314*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x517fd8b0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x51332930, ftLastAccessTime.dwHighDateTime=0x1d2faf3, ftLastWriteTime.dwLowDateTime=0x51332930, ftLastWriteTime.dwHighDateTime=0x1d2faf3, nFileSizeHigh=0x0, nFileSizeLow=0x125, dwReserved0=0x0, dwReserved1=0x0, cFileName="5p5nrgjn0js_halpmcxz@advertising[1].txt", cAlternateFileName="5P5NRG~1.TXT")) returned 1 [0079.560] FindNextFileW (in: hFindFile=0x381cc0, lpFindFileData=0x31e314 | out: lpFindFileData=0x31e314*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x54cce0d0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x54cce0d0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x54cce0d0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0xdd, dwReserved0=0x0, dwReserved1=0x0, cFileName="5p5nrgjn0js_halpmcxz@api.bing[2].txt", cAlternateFileName="5P40FC~1.TXT")) returned 1 [0079.561] FindNextFileW (in: hFindFile=0x381cc0, lpFindFileData=0x31e314 | out: lpFindFileData=0x31e314*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x4611db50, ftCreationTime.dwHighDateTime=0x1d2faf3, ftLastAccessTime.dwLowDateTime=0x4611db50, ftLastAccessTime.dwHighDateTime=0x1d2faf3, ftLastWriteTime.dwLowDateTime=0x4611db50, ftLastWriteTime.dwHighDateTime=0x1d2faf3, nFileSizeHigh=0x0, nFileSizeLow=0x201, dwReserved0=0x0, dwReserved1=0x0, cFileName="5p5nrgjn0js_halpmcxz@at.atwola[1].txt", cAlternateFileName="5P74F0~1.TXT")) returned 1 [0079.561] FindNextFileW (in: hFindFile=0x381cc0, lpFindFileData=0x31e314 | out: lpFindFileData=0x31e314*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x534b4210, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x562c6900, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x562c6900, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x1ea, dwReserved0=0x0, dwReserved1=0x0, cFileName="5p5nrgjn0js_halpmcxz@bing[1].txt", cAlternateFileName="5PBE12~1.TXT")) returned 1 [0079.561] FindNextFileW (in: hFindFile=0x381cc0, lpFindFileData=0x31e314 | out: lpFindFileData=0x31e314*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x45798350, ftCreationTime.dwHighDateTime=0x1d2faf3, ftLastAccessTime.dwLowDateTime=0x45798350, ftLastAccessTime.dwHighDateTime=0x1d2faf3, ftLastWriteTime.dwLowDateTime=0x45798350, ftLastWriteTime.dwHighDateTime=0x1d2faf3, nFileSizeHigh=0x0, nFileSizeLow=0x1c8, dwReserved0=0x0, dwReserved1=0x0, cFileName="5p5nrgjn0js_halpmcxz@c.bing[1].txt", cAlternateFileName="5P5NRG~2.TXT")) returned 1 [0079.561] FindNextFileW (in: hFindFile=0x381cc0, lpFindFileData=0x31e314 | out: lpFindFileData=0x31e314*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xbdf95770, ftCreationTime.dwHighDateTime=0x1d2faf2, ftLastAccessTime.dwLowDateTime=0xbdf95770, ftLastAccessTime.dwHighDateTime=0x1d2faf2, ftLastWriteTime.dwLowDateTime=0xbdf95770, ftLastWriteTime.dwHighDateTime=0x1d2faf2, nFileSizeHigh=0x0, nFileSizeLow=0x82, dwReserved0=0x0, dwReserved1=0x0, cFileName="5p5nrgjn0js_halpmcxz@c.msn[1].txt", cAlternateFileName="5PB89C~1.TXT")) returned 1 [0079.561] FindNextFileW (in: hFindFile=0x381cc0, lpFindFileData=0x31e314 | out: lpFindFileData=0x31e314*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x6301df20, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x63a15b40, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x63a15b40, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x110, dwReserved0=0x0, dwReserved1=0x0, cFileName="5p5nrgjn0js_halpmcxz@doubleclick[2].txt", cAlternateFileName="5P93CC~1.TXT")) returned 1 [0079.561] FindNextFileW (in: hFindFile=0x381cc0, lpFindFileData=0x31e314 | out: lpFindFileData=0x31e314*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x61093ba0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x61093ba0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x61093ba0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x256, dwReserved0=0x0, dwReserved1=0x0, cFileName="5p5nrgjn0js_halpmcxz@google[1].txt", cAlternateFileName="5P12F9~1.TXT")) returned 1 [0079.561] FindNextFileW (in: hFindFile=0x381cc0, lpFindFileData=0x31e314 | out: lpFindFileData=0x31e314*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x610b9d00, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x61282d80, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x61282d80, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0xc4, dwReserved0=0x0, dwReserved1=0x0, cFileName="5p5nrgjn0js_halpmcxz@google[3].txt", cAlternateFileName="5P692F~1.TXT")) returned 1 [0079.561] FindNextFileW (in: hFindFile=0x381cc0, lpFindFileData=0x31e314 | out: lpFindFileData=0x31e314*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x64e777a0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x64e777a0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x64e777a0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x21f, dwReserved0=0x0, dwReserved1=0x0, cFileName="5p5nrgjn0js_halpmcxz@google[4].txt", cAlternateFileName="5P3B8C~1.TXT")) returned 1 [0079.562] FindNextFileW (in: hFindFile=0x381cc0, lpFindFileData=0x31e314 | out: lpFindFileData=0x31e314*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x465ba5f0, ftCreationTime.dwHighDateTime=0x1d2faf3, ftLastAccessTime.dwLowDateTime=0x465ba5f0, ftLastAccessTime.dwHighDateTime=0x1d2faf3, ftLastWriteTime.dwLowDateTime=0x465ba5f0, ftLastWriteTime.dwHighDateTime=0x1d2faf3, nFileSizeHigh=0x0, nFileSizeLow=0x110, dwReserved0=0x0, dwReserved1=0x0, cFileName="5p5nrgjn0js_halpmcxz@linkedin[1].txt", cAlternateFileName="5P1C80~1.TXT")) returned 1 [0079.562] FindNextFileW (in: hFindFile=0x381cc0, lpFindFileData=0x31e314 | out: lpFindFileData=0x31e314*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xbfa5cef0, ftCreationTime.dwHighDateTime=0x1d2faf2, ftLastAccessTime.dwLowDateTime=0xbfa5cef0, ftLastAccessTime.dwHighDateTime=0x1d2faf2, ftLastWriteTime.dwLowDateTime=0xbfa5cef0, ftLastWriteTime.dwHighDateTime=0x1d2faf2, nFileSizeHigh=0x0, nFileSizeLow=0x76, dwReserved0=0x0, dwReserved1=0x0, cFileName="5p5nrgjn0js_halpmcxz@m.exactag[1].txt", cAlternateFileName="5PD7A3~1.TXT")) returned 1 [0079.562] FindNextFileW (in: hFindFile=0x381cc0, lpFindFileData=0x31e314 | out: lpFindFileData=0x31e314*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x50b50050, ftCreationTime.dwHighDateTime=0x1d2faf3, ftLastAccessTime.dwLowDateTime=0x50b50050, ftLastAccessTime.dwHighDateTime=0x1d2faf3, ftLastWriteTime.dwLowDateTime=0x50b50050, ftLastWriteTime.dwHighDateTime=0x1d2faf3, nFileSizeHigh=0x0, nFileSizeLow=0x337, dwReserved0=0x0, dwReserved1=0x0, cFileName="5p5nrgjn0js_halpmcxz@msn[1].txt", cAlternateFileName="5PBFF9~1.TXT")) returned 1 [0079.562] FindNextFileW (in: hFindFile=0x381cc0, lpFindFileData=0x31e314 | out: lpFindFileData=0x31e314*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x5348e0b0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x5348e0b0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x5348e0b0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0xce, dwReserved0=0x0, dwReserved1=0x0, cFileName="5p5nrgjn0js_halpmcxz@scorecardresearch[2].txt", cAlternateFileName="5P5NRG~4.TXT")) returned 1 [0079.562] FindNextFileW (in: hFindFile=0x381cc0, lpFindFileData=0x31e314 | out: lpFindFileData=0x31e314*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xbf73d210, ftCreationTime.dwHighDateTime=0x1d2faf2, ftLastAccessTime.dwLowDateTime=0xbf73d210, ftLastAccessTime.dwHighDateTime=0x1d2faf2, ftLastWriteTime.dwLowDateTime=0xbf73d210, ftLastWriteTime.dwHighDateTime=0x1d2faf2, nFileSizeHigh=0x0, nFileSizeLow=0x6c, dwReserved0=0x0, dwReserved1=0x0, cFileName="5p5nrgjn0js_halpmcxz@server.adformdsp[1].txt", cAlternateFileName="5P4910~1.TXT")) returned 1 [0079.562] FindNextFileW (in: hFindFile=0x381cc0, lpFindFileData=0x31e314 | out: lpFindFileData=0x31e314*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xbf99e810, ftCreationTime.dwHighDateTime=0x1d2faf2, ftLastAccessTime.dwLowDateTime=0xbf99e810, ftLastAccessTime.dwHighDateTime=0x1d2faf2, ftLastWriteTime.dwLowDateTime=0xbf99e810, ftLastWriteTime.dwHighDateTime=0x1d2faf2, nFileSizeHigh=0x0, nFileSizeLow=0x68, dwReserved0=0x0, dwReserved1=0x0, cFileName="5p5nrgjn0js_halpmcxz@skadtec[1].txt", cAlternateFileName="5P37A2~1.TXT")) returned 1 [0079.562] FindNextFileW (in: hFindFile=0x381cc0, lpFindFileData=0x31e314 | out: lpFindFileData=0x31e314*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xbf54e030, ftCreationTime.dwHighDateTime=0x1d2faf2, ftLastAccessTime.dwLowDateTime=0xbf54e030, ftLastAccessTime.dwHighDateTime=0x1d2faf2, ftLastWriteTime.dwLowDateTime=0xbf54e030, ftLastWriteTime.dwHighDateTime=0x1d2faf2, nFileSizeHigh=0x0, nFileSizeLow=0xb2, dwReserved0=0x0, dwReserved1=0x0, cFileName="5p5nrgjn0js_halpmcxz@track.adform[2].txt", cAlternateFileName="5PD4D3~1.TXT")) returned 1 [0079.563] FindNextFileW (in: hFindFile=0x381cc0, lpFindFileData=0x31e314 | out: lpFindFileData=0x31e314*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x555a9a10, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x555a9a10, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x555a9a10, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0xd7, dwReserved0=0x0, dwReserved1=0x0, cFileName="5p5nrgjn0js_halpmcxz@www.bing[2].txt", cAlternateFileName="5PA943~1.TXT")) returned 1 [0079.563] FindNextFileW (in: hFindFile=0x381cc0, lpFindFileData=0x31e314 | out: lpFindFileData=0x31e314*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x54d8c7b0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x54d8c7b0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x54d8c7b0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0xa9, dwReserved0=0x0, dwReserved1=0x0, cFileName="5p5nrgjn0js_halpmcxz@www.linkedin[1].txt", cAlternateFileName="5PC3D9~1.TXT")) returned 1 [0079.563] FindNextFileW (in: hFindFile=0x381cc0, lpFindFileData=0x31e314 | out: lpFindFileData=0x31e314*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x4523d1d0, ftCreationTime.dwHighDateTime=0x1d2faf3, ftLastAccessTime.dwLowDateTime=0x526fc010, ftLastAccessTime.dwHighDateTime=0x1d2faf3, ftLastWriteTime.dwLowDateTime=0x526fc010, ftLastWriteTime.dwHighDateTime=0x1d2faf3, nFileSizeHigh=0x0, nFileSizeLow=0x402, dwReserved0=0x0, dwReserved1=0x0, cFileName="5p5nrgjn0js_halpmcxz@www.msn[2].txt", cAlternateFileName="5PD551~1.TXT")) returned 1 [0079.563] FindNextFileW (in: hFindFile=0x381cc0, lpFindFileData=0x31e314 | out: lpFindFileData=0x31e314*(dwFileAttributes=0x2026, ftCreationTime.dwLowDateTime=0x4f090c50, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x4f090c50, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x432daef0, ftLastWriteTime.dwHighDateTime=0x1d2faf3, nFileSizeHigh=0x0, nFileSizeLow=0x8000, dwReserved0=0x0, dwReserved1=0x0, cFileName="index.dat", cAlternateFileName="")) returned 1 [0079.563] FindNextFileW (in: hFindFile=0x381cc0, lpFindFileData=0x31e314 | out: lpFindFileData=0x31e314*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0079.563] FindClose (in: hFindFile=0x381cc0 | out: hFindFile=0x381cc0) returned 1 [0079.564] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e59c) returned 1 [0079.564] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e5a8) returned 1 [0079.564] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e5dc) returned 1 [0079.564] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Cookies\\Low", nBufferLength=0x105, lpBuffer=0x31e0e4, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Cookies\\Low", lpFilePart=0x0) returned 0x4b [0079.564] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Cookies\\Low\\", nBufferLength=0x105, lpBuffer=0x31e0b8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Cookies\\Low\\", lpFilePart=0x0) returned 0x4c [0079.564] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Cookies\\Low\\*", lpFindFileData=0x31e304 | out: lpFindFileData=0x31e304*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x2bc9ae40, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x52878dd0, ftLastAccessTime.dwHighDateTime=0x1d2faf3, ftLastWriteTime.dwLowDateTime=0x52878dd0, ftLastWriteTime.dwHighDateTime=0x1d2faf3, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x381cc0 [0079.565] FindNextFileW (in: hFindFile=0x381cc0, lpFindFileData=0x31e314 | out: lpFindFileData=0x31e314*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x2bc9ae40, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x52878dd0, ftLastAccessTime.dwHighDateTime=0x1d2faf3, ftLastWriteTime.dwLowDateTime=0x52878dd0, ftLastWriteTime.dwHighDateTime=0x1d2faf3, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0079.565] FindNextFileW (in: hFindFile=0x381cc0, lpFindFileData=0x31e314 | out: lpFindFileData=0x31e314*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x44eb6480, ftCreationTime.dwHighDateTime=0x1d2faf3, ftLastAccessTime.dwLowDateTime=0x44eb6480, ftLastAccessTime.dwHighDateTime=0x1d2faf3, ftLastWriteTime.dwLowDateTime=0x44eb6480, ftLastWriteTime.dwHighDateTime=0x1d2faf3, nFileSizeHigh=0x0, nFileSizeLow=0x66, dwReserved0=0x0, dwReserved1=0x0, cFileName="5p5nrgjn0js_halpmcxz@ad13.adfarm1.adition[1].txt", cAlternateFileName="5P9943~1.TXT")) returned 1 [0079.565] FindNextFileW (in: hFindFile=0x381cc0, lpFindFileData=0x31e314 | out: lpFindFileData=0x31e314*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x44bd95f0, ftCreationTime.dwHighDateTime=0x1d2faf3, ftLastAccessTime.dwLowDateTime=0x44bd95f0, ftLastAccessTime.dwHighDateTime=0x1d2faf3, ftLastWriteTime.dwLowDateTime=0x44bd95f0, ftLastWriteTime.dwHighDateTime=0x1d2faf3, nFileSizeHigh=0x0, nFileSizeLow=0x66, dwReserved0=0x0, dwReserved1=0x0, cFileName="5p5nrgjn0js_halpmcxz@adfarm1.adition[2].txt", cAlternateFileName="5P37D9~1.TXT")) returned 1 [0079.566] FindNextFileW (in: hFindFile=0x381cc0, lpFindFileData=0x31e314 | out: lpFindFileData=0x31e314*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xbf73d210, ftCreationTime.dwHighDateTime=0x1d2faf2, ftLastAccessTime.dwLowDateTime=0xbf73d210, ftLastAccessTime.dwHighDateTime=0x1d2faf2, ftLastWriteTime.dwLowDateTime=0xbf73d210, ftLastWriteTime.dwHighDateTime=0x1d2faf2, nFileSizeHigh=0x0, nFileSizeLow=0x5d, dwReserved0=0x0, dwReserved1=0x0, cFileName="5p5nrgjn0js_halpmcxz@adformdsp[1].txt", cAlternateFileName="5P2CBA~1.TXT")) returned 1 [0079.566] FindNextFileW (in: hFindFile=0x381cc0, lpFindFileData=0x31e314 | out: lpFindFileData=0x31e314*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xbf2a0770, ftCreationTime.dwHighDateTime=0x1d2faf2, ftLastAccessTime.dwLowDateTime=0xbf7d5790, ftLastAccessTime.dwHighDateTime=0x1d2faf2, ftLastWriteTime.dwLowDateTime=0xbf7d5790, ftLastWriteTime.dwHighDateTime=0x1d2faf2, nFileSizeHigh=0x0, nFileSizeLow=0xea, dwReserved0=0x0, dwReserved1=0x0, cFileName="5p5nrgjn0js_halpmcxz@adform[1].txt", cAlternateFileName="5P8600~1.TXT")) returned 1 [0079.566] FindNextFileW (in: hFindFile=0x381cc0, lpFindFileData=0x31e314 | out: lpFindFileData=0x31e314*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xbe5d5130, ftCreationTime.dwHighDateTime=0x1d2faf2, ftLastAccessTime.dwLowDateTime=0x45f08810, ftLastAccessTime.dwHighDateTime=0x1d2faf3, ftLastWriteTime.dwLowDateTime=0x45f08810, ftLastWriteTime.dwHighDateTime=0x1d2faf3, nFileSizeHigh=0x0, nFileSizeLow=0x242, dwReserved0=0x0, dwReserved1=0x0, cFileName="5p5nrgjn0js_halpmcxz@adnxs[1].txt", cAlternateFileName="5P89EF~1.TXT")) returned 1 [0079.566] FindNextFileW (in: hFindFile=0x381cc0, lpFindFileData=0x31e314 | out: lpFindFileData=0x31e314*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x52fcb4b0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x52fcb4b0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x52fcb4b0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x65, dwReserved0=0x0, dwReserved1=0x0, cFileName="5p5nrgjn0js_halpmcxz@adtech[2].txt", cAlternateFileName="5PC5B2~1.TXT")) returned 1 [0079.566] FindNextFileW (in: hFindFile=0x381cc0, lpFindFileData=0x31e314 | out: lpFindFileData=0x31e314*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x53c70990, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x53c70990, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x53c70990, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x52, dwReserved0=0x0, dwReserved1=0x0, cFileName="5p5nrgjn0js_halpmcxz@adtr02[1].txt", cAlternateFileName="5P5NRG~3.TXT")) returned 1 [0079.566] FindNextFileW (in: hFindFile=0x381cc0, lpFindFileData=0x31e314 | out: lpFindFileData=0x31e314*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x517fd8b0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x51332930, ftLastAccessTime.dwHighDateTime=0x1d2faf3, ftLastWriteTime.dwLowDateTime=0x51332930, ftLastWriteTime.dwHighDateTime=0x1d2faf3, nFileSizeHigh=0x0, nFileSizeLow=0x125, dwReserved0=0x0, dwReserved1=0x0, cFileName="5p5nrgjn0js_halpmcxz@advertising[1].txt", cAlternateFileName="5P5NRG~1.TXT")) returned 1 [0079.567] FindNextFileW (in: hFindFile=0x381cc0, lpFindFileData=0x31e314 | out: lpFindFileData=0x31e314*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x54cce0d0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x54cce0d0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x54cce0d0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0xdd, dwReserved0=0x0, dwReserved1=0x0, cFileName="5p5nrgjn0js_halpmcxz@api.bing[2].txt", cAlternateFileName="5P40FC~1.TXT")) returned 1 [0079.567] FindNextFileW (in: hFindFile=0x381cc0, lpFindFileData=0x31e314 | out: lpFindFileData=0x31e314*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x4611db50, ftCreationTime.dwHighDateTime=0x1d2faf3, ftLastAccessTime.dwLowDateTime=0x4611db50, ftLastAccessTime.dwHighDateTime=0x1d2faf3, ftLastWriteTime.dwLowDateTime=0x4611db50, ftLastWriteTime.dwHighDateTime=0x1d2faf3, nFileSizeHigh=0x0, nFileSizeLow=0x201, dwReserved0=0x0, dwReserved1=0x0, cFileName="5p5nrgjn0js_halpmcxz@at.atwola[1].txt", cAlternateFileName="5P74F0~1.TXT")) returned 1 [0079.567] FindNextFileW (in: hFindFile=0x381cc0, lpFindFileData=0x31e314 | out: lpFindFileData=0x31e314*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x534b4210, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x562c6900, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x562c6900, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x1ea, dwReserved0=0x0, dwReserved1=0x0, cFileName="5p5nrgjn0js_halpmcxz@bing[1].txt", cAlternateFileName="5PBE12~1.TXT")) returned 1 [0079.567] FindNextFileW (in: hFindFile=0x381cc0, lpFindFileData=0x31e314 | out: lpFindFileData=0x31e314*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x45798350, ftCreationTime.dwHighDateTime=0x1d2faf3, ftLastAccessTime.dwLowDateTime=0x45798350, ftLastAccessTime.dwHighDateTime=0x1d2faf3, ftLastWriteTime.dwLowDateTime=0x45798350, ftLastWriteTime.dwHighDateTime=0x1d2faf3, nFileSizeHigh=0x0, nFileSizeLow=0x1c8, dwReserved0=0x0, dwReserved1=0x0, cFileName="5p5nrgjn0js_halpmcxz@c.bing[1].txt", cAlternateFileName="5P5NRG~2.TXT")) returned 1 [0079.567] FindNextFileW (in: hFindFile=0x381cc0, lpFindFileData=0x31e314 | out: lpFindFileData=0x31e314*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xbdf95770, ftCreationTime.dwHighDateTime=0x1d2faf2, ftLastAccessTime.dwLowDateTime=0xbdf95770, ftLastAccessTime.dwHighDateTime=0x1d2faf2, ftLastWriteTime.dwLowDateTime=0xbdf95770, ftLastWriteTime.dwHighDateTime=0x1d2faf2, nFileSizeHigh=0x0, nFileSizeLow=0x82, dwReserved0=0x0, dwReserved1=0x0, cFileName="5p5nrgjn0js_halpmcxz@c.msn[1].txt", cAlternateFileName="5PB89C~1.TXT")) returned 1 [0079.567] FindNextFileW (in: hFindFile=0x381cc0, lpFindFileData=0x31e314 | out: lpFindFileData=0x31e314*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x6301df20, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x63a15b40, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x63a15b40, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x110, dwReserved0=0x0, dwReserved1=0x0, cFileName="5p5nrgjn0js_halpmcxz@doubleclick[2].txt", cAlternateFileName="5P93CC~1.TXT")) returned 1 [0079.568] FindNextFileW (in: hFindFile=0x381cc0, lpFindFileData=0x31e314 | out: lpFindFileData=0x31e314*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x61093ba0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x61093ba0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x61093ba0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x256, dwReserved0=0x0, dwReserved1=0x0, cFileName="5p5nrgjn0js_halpmcxz@google[1].txt", cAlternateFileName="5P12F9~1.TXT")) returned 1 [0079.568] FindNextFileW (in: hFindFile=0x381cc0, lpFindFileData=0x31e314 | out: lpFindFileData=0x31e314*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x610b9d00, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x61282d80, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x61282d80, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0xc4, dwReserved0=0x0, dwReserved1=0x0, cFileName="5p5nrgjn0js_halpmcxz@google[3].txt", cAlternateFileName="5P692F~1.TXT")) returned 1 [0079.568] FindNextFileW (in: hFindFile=0x381cc0, lpFindFileData=0x31e314 | out: lpFindFileData=0x31e314*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x64e777a0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x64e777a0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x64e777a0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x21f, dwReserved0=0x0, dwReserved1=0x0, cFileName="5p5nrgjn0js_halpmcxz@google[4].txt", cAlternateFileName="5P3B8C~1.TXT")) returned 1 [0079.568] FindNextFileW (in: hFindFile=0x381cc0, lpFindFileData=0x31e314 | out: lpFindFileData=0x31e314*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x465ba5f0, ftCreationTime.dwHighDateTime=0x1d2faf3, ftLastAccessTime.dwLowDateTime=0x465ba5f0, ftLastAccessTime.dwHighDateTime=0x1d2faf3, ftLastWriteTime.dwLowDateTime=0x465ba5f0, ftLastWriteTime.dwHighDateTime=0x1d2faf3, nFileSizeHigh=0x0, nFileSizeLow=0x110, dwReserved0=0x0, dwReserved1=0x0, cFileName="5p5nrgjn0js_halpmcxz@linkedin[1].txt", cAlternateFileName="5P1C80~1.TXT")) returned 1 [0079.568] FindNextFileW (in: hFindFile=0x381cc0, lpFindFileData=0x31e314 | out: lpFindFileData=0x31e314*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xbfa5cef0, ftCreationTime.dwHighDateTime=0x1d2faf2, ftLastAccessTime.dwLowDateTime=0xbfa5cef0, ftLastAccessTime.dwHighDateTime=0x1d2faf2, ftLastWriteTime.dwLowDateTime=0xbfa5cef0, ftLastWriteTime.dwHighDateTime=0x1d2faf2, nFileSizeHigh=0x0, nFileSizeLow=0x76, dwReserved0=0x0, dwReserved1=0x0, cFileName="5p5nrgjn0js_halpmcxz@m.exactag[1].txt", cAlternateFileName="5PD7A3~1.TXT")) returned 1 [0079.568] FindNextFileW (in: hFindFile=0x381cc0, lpFindFileData=0x31e314 | out: lpFindFileData=0x31e314*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x50b50050, ftCreationTime.dwHighDateTime=0x1d2faf3, ftLastAccessTime.dwLowDateTime=0x50b50050, ftLastAccessTime.dwHighDateTime=0x1d2faf3, ftLastWriteTime.dwLowDateTime=0x50b50050, ftLastWriteTime.dwHighDateTime=0x1d2faf3, nFileSizeHigh=0x0, nFileSizeLow=0x337, dwReserved0=0x0, dwReserved1=0x0, cFileName="5p5nrgjn0js_halpmcxz@msn[1].txt", cAlternateFileName="5PBFF9~1.TXT")) returned 1 [0079.568] FindNextFileW (in: hFindFile=0x381cc0, lpFindFileData=0x31e314 | out: lpFindFileData=0x31e314*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x5348e0b0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x5348e0b0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x5348e0b0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0xce, dwReserved0=0x0, dwReserved1=0x0, cFileName="5p5nrgjn0js_halpmcxz@scorecardresearch[2].txt", cAlternateFileName="5P5NRG~4.TXT")) returned 1 [0079.569] FindNextFileW (in: hFindFile=0x381cc0, lpFindFileData=0x31e314 | out: lpFindFileData=0x31e314*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xbf73d210, ftCreationTime.dwHighDateTime=0x1d2faf2, ftLastAccessTime.dwLowDateTime=0xbf73d210, ftLastAccessTime.dwHighDateTime=0x1d2faf2, ftLastWriteTime.dwLowDateTime=0xbf73d210, ftLastWriteTime.dwHighDateTime=0x1d2faf2, nFileSizeHigh=0x0, nFileSizeLow=0x6c, dwReserved0=0x0, dwReserved1=0x0, cFileName="5p5nrgjn0js_halpmcxz@server.adformdsp[1].txt", cAlternateFileName="5P4910~1.TXT")) returned 1 [0079.569] FindNextFileW (in: hFindFile=0x381cc0, lpFindFileData=0x31e314 | out: lpFindFileData=0x31e314*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xbf99e810, ftCreationTime.dwHighDateTime=0x1d2faf2, ftLastAccessTime.dwLowDateTime=0xbf99e810, ftLastAccessTime.dwHighDateTime=0x1d2faf2, ftLastWriteTime.dwLowDateTime=0xbf99e810, ftLastWriteTime.dwHighDateTime=0x1d2faf2, nFileSizeHigh=0x0, nFileSizeLow=0x68, dwReserved0=0x0, dwReserved1=0x0, cFileName="5p5nrgjn0js_halpmcxz@skadtec[1].txt", cAlternateFileName="5P37A2~1.TXT")) returned 1 [0079.569] FindNextFileW (in: hFindFile=0x381cc0, lpFindFileData=0x31e314 | out: lpFindFileData=0x31e314*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xbf54e030, ftCreationTime.dwHighDateTime=0x1d2faf2, ftLastAccessTime.dwLowDateTime=0xbf54e030, ftLastAccessTime.dwHighDateTime=0x1d2faf2, ftLastWriteTime.dwLowDateTime=0xbf54e030, ftLastWriteTime.dwHighDateTime=0x1d2faf2, nFileSizeHigh=0x0, nFileSizeLow=0xb2, dwReserved0=0x0, dwReserved1=0x0, cFileName="5p5nrgjn0js_halpmcxz@track.adform[2].txt", cAlternateFileName="5PD4D3~1.TXT")) returned 1 [0079.569] FindNextFileW (in: hFindFile=0x381cc0, lpFindFileData=0x31e314 | out: lpFindFileData=0x31e314*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x555a9a10, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x555a9a10, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x555a9a10, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0xd7, dwReserved0=0x0, dwReserved1=0x0, cFileName="5p5nrgjn0js_halpmcxz@www.bing[2].txt", cAlternateFileName="5PA943~1.TXT")) returned 1 [0079.569] FindNextFileW (in: hFindFile=0x381cc0, lpFindFileData=0x31e314 | out: lpFindFileData=0x31e314*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x54d8c7b0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x54d8c7b0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x54d8c7b0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0xa9, dwReserved0=0x0, dwReserved1=0x0, cFileName="5p5nrgjn0js_halpmcxz@www.linkedin[1].txt", cAlternateFileName="5PC3D9~1.TXT")) returned 1 [0079.569] FindNextFileW (in: hFindFile=0x381cc0, lpFindFileData=0x31e314 | out: lpFindFileData=0x31e314*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x4523d1d0, ftCreationTime.dwHighDateTime=0x1d2faf3, ftLastAccessTime.dwLowDateTime=0x526fc010, ftLastAccessTime.dwHighDateTime=0x1d2faf3, ftLastWriteTime.dwLowDateTime=0x526fc010, ftLastWriteTime.dwHighDateTime=0x1d2faf3, nFileSizeHigh=0x0, nFileSizeLow=0x402, dwReserved0=0x0, dwReserved1=0x0, cFileName="5p5nrgjn0js_halpmcxz@www.msn[2].txt", cAlternateFileName="5PD551~1.TXT")) returned 1 [0079.570] FindNextFileW (in: hFindFile=0x381cc0, lpFindFileData=0x31e314 | out: lpFindFileData=0x31e314*(dwFileAttributes=0x2026, ftCreationTime.dwLowDateTime=0x4f090c50, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x4f090c50, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x432daef0, ftLastWriteTime.dwHighDateTime=0x1d2faf3, nFileSizeHigh=0x0, nFileSizeLow=0x8000, dwReserved0=0x0, dwReserved1=0x0, cFileName="index.dat", cAlternateFileName="")) returned 1 [0079.570] FindNextFileW (in: hFindFile=0x381cc0, lpFindFileData=0x31e314 | out: lpFindFileData=0x31e314*(dwFileAttributes=0x2026, ftCreationTime.dwLowDateTime=0x4f090c50, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x4f090c50, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x432daef0, ftLastWriteTime.dwHighDateTime=0x1d2faf3, nFileSizeHigh=0x0, nFileSizeLow=0x8000, dwReserved0=0x0, dwReserved1=0x0, cFileName="index.dat", cAlternateFileName="")) returned 0 [0079.570] FindClose (in: hFindFile=0x381cc0 | out: hFindFile=0x381cc0) returned 1 [0079.571] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e59c) returned 1 [0079.571] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e5a8) returned 1 [0079.571] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Cookies\\Low\\5p5nrgjn0js_halpmcxz@ad13.adfarm1.adition[1].txt", nBufferLength=0x105, lpBuffer=0x31dfb4, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Cookies\\Low\\5p5nrgjn0js_halpmcxz@ad13.adfarm1.adition[1].txt", lpFilePart=0x0) returned 0x7c [0079.571] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e4a8) returned 1 [0079.571] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Cookies\\Low\\5p5nrgjn0js_halpmcxz@ad13.adfarm1.adition[1].txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\windows\\cookies\\low\\5p5nrgjn0js_halpmcxz@ad13.adfarm1.adition[1].txt"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x264 [0079.572] GetFileType (hFile=0x264) returned 0x1 [0079.572] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e4a4) returned 1 [0079.572] GetFileType (hFile=0x264) returned 0x1 [0079.572] GetFileSize (in: hFile=0x264, lpFileSizeHigh=0x31e5b0 | out: lpFileSizeHigh=0x31e5b0*=0x0) returned 0x66 [0079.572] ReadFile (in: hFile=0x264, lpBuffer=0x26b6d24, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x31e55c, lpOverlapped=0x0 | out: lpBuffer=0x26b6d24*, lpNumberOfBytesRead=0x31e55c*=0x66, lpOverlapped=0x0) returned 1 [0079.573] CloseHandle (hObject=0x264) returned 1 [0079.587] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Cookies\\Low\\5p5nrgjn0js_halpmcxz@ad13.adfarm1.adition[1].txt", nBufferLength=0x105, lpBuffer=0x31dfa0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Cookies\\Low\\5p5nrgjn0js_halpmcxz@ad13.adfarm1.adition[1].txt", lpFilePart=0x0) returned 0x7c [0079.587] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e494) returned 1 [0079.587] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Cookies\\Low\\5p5nrgjn0js_halpmcxz@ad13.adfarm1.adition[1].txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\windows\\cookies\\low\\5p5nrgjn0js_halpmcxz@ad13.adfarm1.adition[1].txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x264 [0079.588] GetFileType (hFile=0x264) returned 0x1 [0079.588] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e490) returned 1 [0079.588] GetFileType (hFile=0x264) returned 0x1 [0079.588] WriteFile (in: hFile=0x264, lpBuffer=0x2704ef8*, nNumberOfBytesToWrite=0x70, lpNumberOfBytesWritten=0x31e524, lpOverlapped=0x0 | out: lpBuffer=0x2704ef8*, lpNumberOfBytesWritten=0x31e524*=0x70, lpOverlapped=0x0) returned 1 [0079.589] CloseHandle (hObject=0x264) returned 1 [0079.589] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Cookies\\Low\\5p5nrgjn0js_halpmcxz@ad13.adfarm1.adition[1].txt", nBufferLength=0x105, lpBuffer=0x31e0d4, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Cookies\\Low\\5p5nrgjn0js_halpmcxz@ad13.adfarm1.adition[1].txt", lpFilePart=0x0) returned 0x7c [0079.589] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Cookies\\Low\\5p5nrgjn0js_halpmcxz@ad13.adfarm1.adition[1].txt", nBufferLength=0x105, lpBuffer=0x31e0d4, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Cookies\\Low\\5p5nrgjn0js_halpmcxz@ad13.adfarm1.adition[1].txt", lpFilePart=0x0) returned 0x7c [0079.589] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e534) returned 1 [0079.589] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Cookies\\Low\\5p5nrgjn0js_halpmcxz@ad13.adfarm1.adition[1].txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\windows\\cookies\\low\\5p5nrgjn0js_halpmcxz@ad13.adfarm1.adition[1].txt"), fInfoLevelId=0x0, lpFileInformation=0x31e5b0 | out: lpFileInformation=0x31e5b0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x44eb6480, ftCreationTime.dwHighDateTime=0x1d2faf3, ftLastAccessTime.dwLowDateTime=0x44eb6480, ftLastAccessTime.dwHighDateTime=0x1d2faf3, ftLastWriteTime.dwLowDateTime=0x12e0e980, ftLastWriteTime.dwHighDateTime=0x1d6eb7f, nFileSizeHigh=0x0, nFileSizeLow=0x70)) returned 1 [0079.589] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e530) returned 1 [0079.589] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Cookies\\Low\\5p5nrgjn0js_halpmcxz@ad13.adfarm1.adition[1].txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\windows\\cookies\\low\\5p5nrgjn0js_halpmcxz@ad13.adfarm1.adition[1].txt"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Cookies\\Low\\5p5nrgjn0js_halpmcxz@ad13.adfarm1.adition[1].txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\windows\\cookies\\low\\5p5nrgjn0js_halpmcxz@ad13.adfarm1.adition[1].txt")) returned 1 [0079.590] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Cookies\\Low\\5p5nrgjn0js_halpmcxz@adfarm1.adition[2].txt", nBufferLength=0x105, lpBuffer=0x31dfb4, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Cookies\\Low\\5p5nrgjn0js_halpmcxz@adfarm1.adition[2].txt", lpFilePart=0x0) returned 0x77 [0079.590] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e4a8) returned 1 [0079.590] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Cookies\\Low\\5p5nrgjn0js_halpmcxz@adfarm1.adition[2].txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\windows\\cookies\\low\\5p5nrgjn0js_halpmcxz@adfarm1.adition[2].txt"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x264 [0079.590] GetFileType (hFile=0x264) returned 0x1 [0079.590] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e4a4) returned 1 [0079.590] GetFileType (hFile=0x264) returned 0x1 [0079.590] GetFileSize (in: hFile=0x264, lpFileSizeHigh=0x31e5b0 | out: lpFileSizeHigh=0x31e5b0*=0x0) returned 0x66 [0079.590] ReadFile (in: hFile=0x264, lpBuffer=0x270635c, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x31e55c, lpOverlapped=0x0 | out: lpBuffer=0x270635c*, lpNumberOfBytesRead=0x31e55c*=0x66, lpOverlapped=0x0) returned 1 [0079.591] CloseHandle (hObject=0x264) returned 1 [0079.604] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Cookies\\Low\\5p5nrgjn0js_halpmcxz@adfarm1.adition[2].txt", nBufferLength=0x105, lpBuffer=0x31dfa0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Cookies\\Low\\5p5nrgjn0js_halpmcxz@adfarm1.adition[2].txt", lpFilePart=0x0) returned 0x77 [0079.604] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e494) returned 1 [0079.604] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Cookies\\Low\\5p5nrgjn0js_halpmcxz@adfarm1.adition[2].txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\windows\\cookies\\low\\5p5nrgjn0js_halpmcxz@adfarm1.adition[2].txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x264 [0079.605] GetFileType (hFile=0x264) returned 0x1 [0079.605] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e490) returned 1 [0079.605] GetFileType (hFile=0x264) returned 0x1 [0079.605] WriteFile (in: hFile=0x264, lpBuffer=0x2754518*, nNumberOfBytesToWrite=0x70, lpNumberOfBytesWritten=0x31e524, lpOverlapped=0x0 | out: lpBuffer=0x2754518*, lpNumberOfBytesWritten=0x31e524*=0x70, lpOverlapped=0x0) returned 1 [0079.606] CloseHandle (hObject=0x264) returned 1 [0079.606] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Cookies\\Low\\5p5nrgjn0js_halpmcxz@adfarm1.adition[2].txt", nBufferLength=0x105, lpBuffer=0x31e0d4, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Cookies\\Low\\5p5nrgjn0js_halpmcxz@adfarm1.adition[2].txt", lpFilePart=0x0) returned 0x77 [0079.606] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Cookies\\Low\\5p5nrgjn0js_halpmcxz@adfarm1.adition[2].txt", nBufferLength=0x105, lpBuffer=0x31e0d4, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Cookies\\Low\\5p5nrgjn0js_halpmcxz@adfarm1.adition[2].txt", lpFilePart=0x0) returned 0x77 [0079.606] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e534) returned 1 [0079.606] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Cookies\\Low\\5p5nrgjn0js_halpmcxz@adfarm1.adition[2].txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\windows\\cookies\\low\\5p5nrgjn0js_halpmcxz@adfarm1.adition[2].txt"), fInfoLevelId=0x0, lpFileInformation=0x31e5b0 | out: lpFileInformation=0x31e5b0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x44bd95f0, ftCreationTime.dwHighDateTime=0x1d2faf3, ftLastAccessTime.dwLowDateTime=0x44bd95f0, ftLastAccessTime.dwHighDateTime=0x1d2faf3, ftLastWriteTime.dwLowDateTime=0x12e34ae0, ftLastWriteTime.dwHighDateTime=0x1d6eb7f, nFileSizeHigh=0x0, nFileSizeLow=0x70)) returned 1 [0079.607] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e530) returned 1 [0079.607] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Cookies\\Low\\5p5nrgjn0js_halpmcxz@adfarm1.adition[2].txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\windows\\cookies\\low\\5p5nrgjn0js_halpmcxz@adfarm1.adition[2].txt"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Cookies\\Low\\5p5nrgjn0js_halpmcxz@adfarm1.adition[2].txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\windows\\cookies\\low\\5p5nrgjn0js_halpmcxz@adfarm1.adition[2].txt")) returned 1 [0079.607] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Cookies\\Low\\5p5nrgjn0js_halpmcxz@adformdsp[1].txt", nBufferLength=0x105, lpBuffer=0x31dfb4, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Cookies\\Low\\5p5nrgjn0js_halpmcxz@adformdsp[1].txt", lpFilePart=0x0) returned 0x71 [0079.607] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e4a8) returned 1 [0079.607] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Cookies\\Low\\5p5nrgjn0js_halpmcxz@adformdsp[1].txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\windows\\cookies\\low\\5p5nrgjn0js_halpmcxz@adformdsp[1].txt"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x264 [0079.608] GetFileType (hFile=0x264) returned 0x1 [0079.608] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e4a4) returned 1 [0079.608] GetFileType (hFile=0x264) returned 0x1 [0079.608] GetFileSize (in: hFile=0x264, lpFileSizeHigh=0x31e5b0 | out: lpFileSizeHigh=0x31e5b0*=0x0) returned 0x5d [0079.608] ReadFile (in: hFile=0x264, lpBuffer=0x2755944, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x31e55c, lpOverlapped=0x0 | out: lpBuffer=0x2755944*, lpNumberOfBytesRead=0x31e55c*=0x5d, lpOverlapped=0x0) returned 1 [0079.609] CloseHandle (hObject=0x264) returned 1 [0079.622] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Cookies\\Low\\5p5nrgjn0js_halpmcxz@adformdsp[1].txt", nBufferLength=0x105, lpBuffer=0x31dfa0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Cookies\\Low\\5p5nrgjn0js_halpmcxz@adformdsp[1].txt", lpFilePart=0x0) returned 0x71 [0079.622] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e494) returned 1 [0079.622] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Cookies\\Low\\5p5nrgjn0js_halpmcxz@adformdsp[1].txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\windows\\cookies\\low\\5p5nrgjn0js_halpmcxz@adformdsp[1].txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x264 [0079.623] GetFileType (hFile=0x264) returned 0x1 [0079.623] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e490) returned 1 [0079.623] GetFileType (hFile=0x264) returned 0x1 [0079.623] WriteFile (in: hFile=0x264, lpBuffer=0x27a3ac0*, nNumberOfBytesToWrite=0x60, lpNumberOfBytesWritten=0x31e524, lpOverlapped=0x0 | out: lpBuffer=0x27a3ac0*, lpNumberOfBytesWritten=0x31e524*=0x60, lpOverlapped=0x0) returned 1 [0079.624] CloseHandle (hObject=0x264) returned 1 [0079.624] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Cookies\\Low\\5p5nrgjn0js_halpmcxz@adformdsp[1].txt", nBufferLength=0x105, lpBuffer=0x31e0d4, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Cookies\\Low\\5p5nrgjn0js_halpmcxz@adformdsp[1].txt", lpFilePart=0x0) returned 0x71 [0079.624] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Cookies\\Low\\5p5nrgjn0js_halpmcxz@adformdsp[1].txt", nBufferLength=0x105, lpBuffer=0x31e0d4, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Cookies\\Low\\5p5nrgjn0js_halpmcxz@adformdsp[1].txt", lpFilePart=0x0) returned 0x71 [0079.624] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e534) returned 1 [0079.624] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Cookies\\Low\\5p5nrgjn0js_halpmcxz@adformdsp[1].txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\windows\\cookies\\low\\5p5nrgjn0js_halpmcxz@adformdsp[1].txt"), fInfoLevelId=0x0, lpFileInformation=0x31e5b0 | out: lpFileInformation=0x31e5b0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xbf73d210, ftCreationTime.dwHighDateTime=0x1d2faf2, ftLastAccessTime.dwLowDateTime=0xbf73d210, ftLastAccessTime.dwHighDateTime=0x1d2faf2, ftLastWriteTime.dwLowDateTime=0x12e80da0, ftLastWriteTime.dwHighDateTime=0x1d6eb7f, nFileSizeHigh=0x0, nFileSizeLow=0x60)) returned 1 [0079.625] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e530) returned 1 [0079.625] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Cookies\\Low\\5p5nrgjn0js_halpmcxz@adformdsp[1].txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\windows\\cookies\\low\\5p5nrgjn0js_halpmcxz@adformdsp[1].txt"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Cookies\\Low\\5p5nrgjn0js_halpmcxz@adformdsp[1].txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\windows\\cookies\\low\\5p5nrgjn0js_halpmcxz@adformdsp[1].txt")) returned 1 [0079.625] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Cookies\\Low\\5p5nrgjn0js_halpmcxz@adform[1].txt", nBufferLength=0x105, lpBuffer=0x31dfb4, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Cookies\\Low\\5p5nrgjn0js_halpmcxz@adform[1].txt", lpFilePart=0x0) returned 0x6e [0079.625] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e4a8) returned 1 [0079.625] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Cookies\\Low\\5p5nrgjn0js_halpmcxz@adform[1].txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\windows\\cookies\\low\\5p5nrgjn0js_halpmcxz@adform[1].txt"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x264 [0079.626] GetFileType (hFile=0x264) returned 0x1 [0079.626] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e4a4) returned 1 [0079.626] GetFileType (hFile=0x264) returned 0x1 [0079.626] GetFileSize (in: hFile=0x264, lpFileSizeHigh=0x31e5b0 | out: lpFileSizeHigh=0x31e5b0*=0x0) returned 0xea [0079.626] ReadFile (in: hFile=0x264, lpBuffer=0x27a4f58, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x31e55c, lpOverlapped=0x0 | out: lpBuffer=0x27a4f58*, lpNumberOfBytesRead=0x31e55c*=0xea, lpOverlapped=0x0) returned 1 [0079.641] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Cookies\\Low\\5p5nrgjn0js_halpmcxz@adform[1].txt", nBufferLength=0x105, lpBuffer=0x31dfa0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Cookies\\Low\\5p5nrgjn0js_halpmcxz@adform[1].txt", lpFilePart=0x0) returned 0x6e [0079.641] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e494) returned 1 [0079.641] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Cookies\\Low\\5p5nrgjn0js_halpmcxz@adform[1].txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\windows\\cookies\\low\\5p5nrgjn0js_halpmcxz@adform[1].txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x264 [0079.642] GetFileType (hFile=0x264) returned 0x1 [0079.642] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e490) returned 1 [0079.642] GetFileType (hFile=0x264) returned 0x1 [0079.643] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Cookies\\Low\\5p5nrgjn0js_halpmcxz@adform[1].txt", nBufferLength=0x105, lpBuffer=0x31e0d4, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Cookies\\Low\\5p5nrgjn0js_halpmcxz@adform[1].txt", lpFilePart=0x0) returned 0x6e [0079.643] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Cookies\\Low\\5p5nrgjn0js_halpmcxz@adform[1].txt", nBufferLength=0x105, lpBuffer=0x31e0d4, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Cookies\\Low\\5p5nrgjn0js_halpmcxz@adform[1].txt", lpFilePart=0x0) returned 0x6e [0079.643] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e534) returned 1 [0079.644] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Cookies\\Low\\5p5nrgjn0js_halpmcxz@adform[1].txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\windows\\cookies\\low\\5p5nrgjn0js_halpmcxz@adform[1].txt"), fInfoLevelId=0x0, lpFileInformation=0x31e5b0 | out: lpFileInformation=0x31e5b0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xbf2a0770, ftCreationTime.dwHighDateTime=0x1d2faf2, ftLastAccessTime.dwLowDateTime=0xbf7d5790, ftLastAccessTime.dwHighDateTime=0x1d2faf2, ftLastWriteTime.dwLowDateTime=0x12ea6f00, ftLastWriteTime.dwHighDateTime=0x1d6eb7f, nFileSizeHigh=0x0, nFileSizeLow=0xf0)) returned 1 [0079.644] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e530) returned 1 [0079.644] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Cookies\\Low\\5p5nrgjn0js_halpmcxz@adform[1].txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\windows\\cookies\\low\\5p5nrgjn0js_halpmcxz@adform[1].txt"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Cookies\\Low\\5p5nrgjn0js_halpmcxz@adform[1].txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\windows\\cookies\\low\\5p5nrgjn0js_halpmcxz@adform[1].txt")) returned 1 [0079.644] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Cookies\\Low\\5p5nrgjn0js_halpmcxz@adnxs[1].txt", nBufferLength=0x105, lpBuffer=0x31dfb4, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Cookies\\Low\\5p5nrgjn0js_halpmcxz@adnxs[1].txt", lpFilePart=0x0) returned 0x6d [0079.644] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e4a8) returned 1 [0079.644] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Cookies\\Low\\5p5nrgjn0js_halpmcxz@adnxs[1].txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\windows\\cookies\\low\\5p5nrgjn0js_halpmcxz@adnxs[1].txt"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x264 [0079.645] GetFileType (hFile=0x264) returned 0x1 [0079.645] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e4a4) returned 1 [0079.645] GetFileType (hFile=0x264) returned 0x1 [0079.645] GetFileSize (in: hFile=0x264, lpFileSizeHigh=0x31e5b0 | out: lpFileSizeHigh=0x31e5b0*=0x0) returned 0x242 [0079.645] ReadFile (in: hFile=0x264, lpBuffer=0x27f47d0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x31e55c, lpOverlapped=0x0 | out: lpBuffer=0x27f47d0*, lpNumberOfBytesRead=0x31e55c*=0x242, lpOverlapped=0x0) returned 1 [0079.661] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Cookies\\Low\\5p5nrgjn0js_halpmcxz@adnxs[1].txt", nBufferLength=0x105, lpBuffer=0x31dfa0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Cookies\\Low\\5p5nrgjn0js_halpmcxz@adnxs[1].txt", lpFilePart=0x0) returned 0x6d [0079.661] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e494) returned 1 [0079.662] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Cookies\\Low\\5p5nrgjn0js_halpmcxz@adnxs[1].txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\windows\\cookies\\low\\5p5nrgjn0js_halpmcxz@adnxs[1].txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x264 [0079.662] GetFileType (hFile=0x264) returned 0x1 [0079.663] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e490) returned 1 [0079.663] GetFileType (hFile=0x264) returned 0x1 [0079.663] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Cookies\\Low\\5p5nrgjn0js_halpmcxz@adnxs[1].txt", nBufferLength=0x105, lpBuffer=0x31e0d4, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Cookies\\Low\\5p5nrgjn0js_halpmcxz@adnxs[1].txt", lpFilePart=0x0) returned 0x6d [0079.663] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Cookies\\Low\\5p5nrgjn0js_halpmcxz@adnxs[1].txt", nBufferLength=0x105, lpBuffer=0x31e0d4, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Cookies\\Low\\5p5nrgjn0js_halpmcxz@adnxs[1].txt", lpFilePart=0x0) returned 0x6d [0079.663] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e534) returned 1 [0079.664] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Cookies\\Low\\5p5nrgjn0js_halpmcxz@adnxs[1].txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\windows\\cookies\\low\\5p5nrgjn0js_halpmcxz@adnxs[1].txt"), fInfoLevelId=0x0, lpFileInformation=0x31e5b0 | out: lpFileInformation=0x31e5b0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xbe5d5130, ftCreationTime.dwHighDateTime=0x1d2faf2, ftLastAccessTime.dwLowDateTime=0x45f08810, ftLastAccessTime.dwHighDateTime=0x1d2faf3, ftLastWriteTime.dwLowDateTime=0x12ecd060, ftLastWriteTime.dwHighDateTime=0x1d6eb7f, nFileSizeHigh=0x0, nFileSizeLow=0x250)) returned 1 [0079.664] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e530) returned 1 [0079.664] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Cookies\\Low\\5p5nrgjn0js_halpmcxz@adnxs[1].txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\windows\\cookies\\low\\5p5nrgjn0js_halpmcxz@adnxs[1].txt"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Cookies\\Low\\5p5nrgjn0js_halpmcxz@adnxs[1].txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\windows\\cookies\\low\\5p5nrgjn0js_halpmcxz@adnxs[1].txt")) returned 1 [0079.664] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Cookies\\Low\\5p5nrgjn0js_halpmcxz@adtech[2].txt", nBufferLength=0x105, lpBuffer=0x31dfb4, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Cookies\\Low\\5p5nrgjn0js_halpmcxz@adtech[2].txt", lpFilePart=0x0) returned 0x6e [0079.664] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e4a8) returned 1 [0079.664] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Cookies\\Low\\5p5nrgjn0js_halpmcxz@adtech[2].txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\windows\\cookies\\low\\5p5nrgjn0js_halpmcxz@adtech[2].txt"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x264 [0079.664] GetFileType (hFile=0x264) returned 0x1 [0079.664] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e4a4) returned 1 [0079.664] GetFileType (hFile=0x264) returned 0x1 [0079.664] GetFileSize (in: hFile=0x264, lpFileSizeHigh=0x31e5b0 | out: lpFileSizeHigh=0x31e5b0*=0x0) returned 0x65 [0079.664] ReadFile (in: hFile=0x264, lpBuffer=0x28446f8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x31e55c, lpOverlapped=0x0 | out: lpBuffer=0x28446f8*, lpNumberOfBytesRead=0x31e55c*=0x65, lpOverlapped=0x0) returned 1 [0079.709] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Cookies\\Low\\5p5nrgjn0js_halpmcxz@adtech[2].txt", nBufferLength=0x105, lpBuffer=0x31dfa0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Cookies\\Low\\5p5nrgjn0js_halpmcxz@adtech[2].txt", lpFilePart=0x0) returned 0x6e [0079.709] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e494) returned 1 [0079.709] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Cookies\\Low\\5p5nrgjn0js_halpmcxz@adtech[2].txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\windows\\cookies\\low\\5p5nrgjn0js_halpmcxz@adtech[2].txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x264 [0079.710] GetFileType (hFile=0x264) returned 0x1 [0079.710] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e490) returned 1 [0079.710] GetFileType (hFile=0x264) returned 0x1 [0079.710] WriteFile (in: hFile=0x264, lpBuffer=0x2694418*, nNumberOfBytesToWrite=0x70, lpNumberOfBytesWritten=0x31e524, lpOverlapped=0x0 | out: lpBuffer=0x2694418*, lpNumberOfBytesWritten=0x31e524*=0x70, lpOverlapped=0x0) returned 1 [0079.712] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Cookies\\Low\\5p5nrgjn0js_halpmcxz@adtech[2].txt", nBufferLength=0x105, lpBuffer=0x31e0d4, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Cookies\\Low\\5p5nrgjn0js_halpmcxz@adtech[2].txt", lpFilePart=0x0) returned 0x6e [0079.712] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Cookies\\Low\\5p5nrgjn0js_halpmcxz@adtech[2].txt", nBufferLength=0x105, lpBuffer=0x31e0d4, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Cookies\\Low\\5p5nrgjn0js_halpmcxz@adtech[2].txt", lpFilePart=0x0) returned 0x6e [0079.712] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e534) returned 1 [0079.712] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Cookies\\Low\\5p5nrgjn0js_halpmcxz@adtech[2].txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\windows\\cookies\\low\\5p5nrgjn0js_halpmcxz@adtech[2].txt"), fInfoLevelId=0x0, lpFileInformation=0x31e5b0 | out: lpFileInformation=0x31e5b0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x52fcb4b0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x52fcb4b0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x12f3f480, ftLastWriteTime.dwHighDateTime=0x1d6eb7f, nFileSizeHigh=0x0, nFileSizeLow=0x70)) returned 1 [0079.712] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e530) returned 1 [0079.712] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Cookies\\Low\\5p5nrgjn0js_halpmcxz@adtech[2].txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\windows\\cookies\\low\\5p5nrgjn0js_halpmcxz@adtech[2].txt"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Cookies\\Low\\5p5nrgjn0js_halpmcxz@adtech[2].txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\windows\\cookies\\low\\5p5nrgjn0js_halpmcxz@adtech[2].txt")) returned 1 [0079.712] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Cookies\\Low\\5p5nrgjn0js_halpmcxz@adtr02[1].txt", nBufferLength=0x105, lpBuffer=0x31dfb4, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Cookies\\Low\\5p5nrgjn0js_halpmcxz@adtr02[1].txt", lpFilePart=0x0) returned 0x6e [0079.712] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e4a8) returned 1 [0079.712] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Cookies\\Low\\5p5nrgjn0js_halpmcxz@adtr02[1].txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\windows\\cookies\\low\\5p5nrgjn0js_halpmcxz@adtr02[1].txt"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x264 [0079.713] GetFileType (hFile=0x264) returned 0x1 [0079.713] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e4a4) returned 1 [0079.713] GetFileType (hFile=0x264) returned 0x1 [0079.713] GetFileSize (in: hFile=0x264, lpFileSizeHigh=0x31e5b0 | out: lpFileSizeHigh=0x31e5b0*=0x0) returned 0x52 [0079.713] ReadFile (in: hFile=0x264, lpBuffer=0x2695810, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x31e55c, lpOverlapped=0x0 | out: lpBuffer=0x2695810*, lpNumberOfBytesRead=0x31e55c*=0x52, lpOverlapped=0x0) returned 1 [0079.727] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Cookies\\Low\\5p5nrgjn0js_halpmcxz@adtr02[1].txt", nBufferLength=0x105, lpBuffer=0x31dfa0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Cookies\\Low\\5p5nrgjn0js_halpmcxz@adtr02[1].txt", lpFilePart=0x0) returned 0x6e [0079.727] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e494) returned 1 [0079.727] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Cookies\\Low\\5p5nrgjn0js_halpmcxz@adtr02[1].txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\windows\\cookies\\low\\5p5nrgjn0js_halpmcxz@adtr02[1].txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x264 [0079.728] GetFileType (hFile=0x264) returned 0x1 [0079.728] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e490) returned 1 [0079.728] GetFileType (hFile=0x264) returned 0x1 [0079.728] WriteFile (in: hFile=0x264, lpBuffer=0x26e3aec*, nNumberOfBytesToWrite=0x60, lpNumberOfBytesWritten=0x31e524, lpOverlapped=0x0 | out: lpBuffer=0x26e3aec*, lpNumberOfBytesWritten=0x31e524*=0x60, lpOverlapped=0x0) returned 1 [0079.729] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Cookies\\Low\\5p5nrgjn0js_halpmcxz@adtr02[1].txt", nBufferLength=0x105, lpBuffer=0x31e0d4, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Cookies\\Low\\5p5nrgjn0js_halpmcxz@adtr02[1].txt", lpFilePart=0x0) returned 0x6e [0079.729] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Cookies\\Low\\5p5nrgjn0js_halpmcxz@adtr02[1].txt", nBufferLength=0x105, lpBuffer=0x31e0d4, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Cookies\\Low\\5p5nrgjn0js_halpmcxz@adtr02[1].txt", lpFilePart=0x0) returned 0x6e [0079.729] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e534) returned 1 [0079.729] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Cookies\\Low\\5p5nrgjn0js_halpmcxz@adtr02[1].txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\windows\\cookies\\low\\5p5nrgjn0js_halpmcxz@adtr02[1].txt"), fInfoLevelId=0x0, lpFileInformation=0x31e5b0 | out: lpFileInformation=0x31e5b0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x53c70990, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x53c70990, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x12f655e0, ftLastWriteTime.dwHighDateTime=0x1d6eb7f, nFileSizeHigh=0x0, nFileSizeLow=0x60)) returned 1 [0079.729] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e530) returned 1 [0079.729] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Cookies\\Low\\5p5nrgjn0js_halpmcxz@adtr02[1].txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\windows\\cookies\\low\\5p5nrgjn0js_halpmcxz@adtr02[1].txt"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Cookies\\Low\\5p5nrgjn0js_halpmcxz@adtr02[1].txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\windows\\cookies\\low\\5p5nrgjn0js_halpmcxz@adtr02[1].txt")) returned 1 [0079.729] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Cookies\\Low\\5p5nrgjn0js_halpmcxz@advertising[1].txt", nBufferLength=0x105, lpBuffer=0x31dfb4, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Cookies\\Low\\5p5nrgjn0js_halpmcxz@advertising[1].txt", lpFilePart=0x0) returned 0x73 [0079.729] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e4a8) returned 1 [0079.729] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Cookies\\Low\\5p5nrgjn0js_halpmcxz@advertising[1].txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\windows\\cookies\\low\\5p5nrgjn0js_halpmcxz@advertising[1].txt"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x264 [0079.730] GetFileType (hFile=0x264) returned 0x1 [0079.730] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e4a4) returned 1 [0079.730] GetFileType (hFile=0x264) returned 0x1 [0079.730] GetFileSize (in: hFile=0x264, lpFileSizeHigh=0x31e5b0 | out: lpFileSizeHigh=0x31e5b0*=0x0) returned 0x125 [0079.730] ReadFile (in: hFile=0x264, lpBuffer=0x26e4fc8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x31e55c, lpOverlapped=0x0 | out: lpBuffer=0x26e4fc8*, lpNumberOfBytesRead=0x31e55c*=0x125, lpOverlapped=0x0) returned 1 [0079.745] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Cookies\\Low\\5p5nrgjn0js_halpmcxz@advertising[1].txt", nBufferLength=0x105, lpBuffer=0x31dfa0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Cookies\\Low\\5p5nrgjn0js_halpmcxz@advertising[1].txt", lpFilePart=0x0) returned 0x73 [0079.745] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e494) returned 1 [0079.745] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Cookies\\Low\\5p5nrgjn0js_halpmcxz@advertising[1].txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\windows\\cookies\\low\\5p5nrgjn0js_halpmcxz@advertising[1].txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x264 [0079.746] GetFileType (hFile=0x264) returned 0x1 [0079.746] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e490) returned 1 [0079.746] GetFileType (hFile=0x264) returned 0x1 [0079.747] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Cookies\\Low\\5p5nrgjn0js_halpmcxz@advertising[1].txt", nBufferLength=0x105, lpBuffer=0x31e0d4, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Cookies\\Low\\5p5nrgjn0js_halpmcxz@advertising[1].txt", lpFilePart=0x0) returned 0x73 [0079.747] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Cookies\\Low\\5p5nrgjn0js_halpmcxz@advertising[1].txt", nBufferLength=0x105, lpBuffer=0x31e0d4, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Cookies\\Low\\5p5nrgjn0js_halpmcxz@advertising[1].txt", lpFilePart=0x0) returned 0x73 [0079.747] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e534) returned 1 [0079.747] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Cookies\\Low\\5p5nrgjn0js_halpmcxz@advertising[1].txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\windows\\cookies\\low\\5p5nrgjn0js_halpmcxz@advertising[1].txt"), fInfoLevelId=0x0, lpFileInformation=0x31e5b0 | out: lpFileInformation=0x31e5b0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x517fd8b0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x51332930, ftLastAccessTime.dwHighDateTime=0x1d2faf3, ftLastWriteTime.dwLowDateTime=0x12f8b740, ftLastWriteTime.dwHighDateTime=0x1d6eb7f, nFileSizeHigh=0x0, nFileSizeLow=0x130)) returned 1 [0079.747] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e530) returned 1 [0079.747] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Cookies\\Low\\5p5nrgjn0js_halpmcxz@advertising[1].txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\windows\\cookies\\low\\5p5nrgjn0js_halpmcxz@advertising[1].txt"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Cookies\\Low\\5p5nrgjn0js_halpmcxz@advertising[1].txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\windows\\cookies\\low\\5p5nrgjn0js_halpmcxz@advertising[1].txt")) returned 1 [0079.748] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Cookies\\Low\\5p5nrgjn0js_halpmcxz@api.bing[2].txt", nBufferLength=0x105, lpBuffer=0x31dfb4, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Cookies\\Low\\5p5nrgjn0js_halpmcxz@api.bing[2].txt", lpFilePart=0x0) returned 0x70 [0079.748] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e4a8) returned 1 [0079.748] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Cookies\\Low\\5p5nrgjn0js_halpmcxz@api.bing[2].txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\windows\\cookies\\low\\5p5nrgjn0js_halpmcxz@api.bing[2].txt"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x264 [0079.749] GetFileType (hFile=0x264) returned 0x1 [0079.749] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e4a4) returned 1 [0079.749] GetFileType (hFile=0x264) returned 0x1 [0079.749] GetFileSize (in: hFile=0x264, lpFileSizeHigh=0x31e5b0 | out: lpFileSizeHigh=0x31e5b0*=0x0) returned 0xdd [0079.749] ReadFile (in: hFile=0x264, lpBuffer=0x27349fc, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x31e55c, lpOverlapped=0x0 | out: lpBuffer=0x27349fc*, lpNumberOfBytesRead=0x31e55c*=0xdd, lpOverlapped=0x0) returned 1 [0079.763] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Cookies\\Low\\5p5nrgjn0js_halpmcxz@api.bing[2].txt", nBufferLength=0x105, lpBuffer=0x31dfa0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Cookies\\Low\\5p5nrgjn0js_halpmcxz@api.bing[2].txt", lpFilePart=0x0) returned 0x70 [0079.763] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e494) returned 1 [0079.763] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Cookies\\Low\\5p5nrgjn0js_halpmcxz@api.bing[2].txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\windows\\cookies\\low\\5p5nrgjn0js_halpmcxz@api.bing[2].txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x264 [0079.764] GetFileType (hFile=0x264) returned 0x1 [0079.764] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e490) returned 1 [0079.764] GetFileType (hFile=0x264) returned 0x1 [0079.764] WriteFile (in: hFile=0x264, lpBuffer=0x2782c78*, nNumberOfBytesToWrite=0xe0, lpNumberOfBytesWritten=0x31e524, lpOverlapped=0x0 | out: lpBuffer=0x2782c78*, lpNumberOfBytesWritten=0x31e524*=0xe0, lpOverlapped=0x0) returned 1 [0079.765] CloseHandle (hObject=0x264) returned 1 [0079.765] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Cookies\\Low\\5p5nrgjn0js_halpmcxz@api.bing[2].txt", nBufferLength=0x105, lpBuffer=0x31e0d4, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Cookies\\Low\\5p5nrgjn0js_halpmcxz@api.bing[2].txt", lpFilePart=0x0) returned 0x70 [0079.765] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Cookies\\Low\\5p5nrgjn0js_halpmcxz@api.bing[2].txt", nBufferLength=0x105, lpBuffer=0x31e0d4, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Cookies\\Low\\5p5nrgjn0js_halpmcxz@api.bing[2].txt", lpFilePart=0x0) returned 0x70 [0079.765] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e534) returned 1 [0079.765] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Cookies\\Low\\5p5nrgjn0js_halpmcxz@api.bing[2].txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\windows\\cookies\\low\\5p5nrgjn0js_halpmcxz@api.bing[2].txt"), fInfoLevelId=0x0, lpFileInformation=0x31e5b0 | out: lpFileInformation=0x31e5b0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x54cce0d0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x54cce0d0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x12fd7a00, ftLastWriteTime.dwHighDateTime=0x1d6eb7f, nFileSizeHigh=0x0, nFileSizeLow=0xe0)) returned 1 [0079.765] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e530) returned 1 [0079.765] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Cookies\\Low\\5p5nrgjn0js_halpmcxz@api.bing[2].txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\windows\\cookies\\low\\5p5nrgjn0js_halpmcxz@api.bing[2].txt"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Cookies\\Low\\5p5nrgjn0js_halpmcxz@api.bing[2].txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\windows\\cookies\\low\\5p5nrgjn0js_halpmcxz@api.bing[2].txt")) returned 1 [0079.766] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Cookies\\Low\\5p5nrgjn0js_halpmcxz@at.atwola[1].txt", nBufferLength=0x105, lpBuffer=0x31dfb4, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Cookies\\Low\\5p5nrgjn0js_halpmcxz@at.atwola[1].txt", lpFilePart=0x0) returned 0x71 [0079.766] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e4a8) returned 1 [0079.766] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Cookies\\Low\\5p5nrgjn0js_halpmcxz@at.atwola[1].txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\windows\\cookies\\low\\5p5nrgjn0js_halpmcxz@at.atwola[1].txt"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x264 [0079.766] GetFileType (hFile=0x264) returned 0x1 [0079.766] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e4a4) returned 1 [0079.766] GetFileType (hFile=0x264) returned 0x1 [0079.766] GetFileSize (in: hFile=0x264, lpFileSizeHigh=0x31e5b0 | out: lpFileSizeHigh=0x31e5b0*=0x0) returned 0x201 [0079.766] ReadFile (in: hFile=0x264, lpBuffer=0x2784230, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x31e55c, lpOverlapped=0x0 | out: lpBuffer=0x2784230*, lpNumberOfBytesRead=0x31e55c*=0x201, lpOverlapped=0x0) returned 1 [0079.767] CloseHandle (hObject=0x264) returned 1 [0079.781] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Cookies\\Low\\5p5nrgjn0js_halpmcxz@at.atwola[1].txt", nBufferLength=0x105, lpBuffer=0x31dfa0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Cookies\\Low\\5p5nrgjn0js_halpmcxz@at.atwola[1].txt", lpFilePart=0x0) returned 0x71 [0079.781] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e494) returned 1 [0079.781] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Cookies\\Low\\5p5nrgjn0js_halpmcxz@at.atwola[1].txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\windows\\cookies\\low\\5p5nrgjn0js_halpmcxz@at.atwola[1].txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x264 [0079.782] GetFileType (hFile=0x264) returned 0x1 [0079.782] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e490) returned 1 [0079.782] GetFileType (hFile=0x264) returned 0x1 [0079.782] WriteFile (in: hFile=0x264, lpBuffer=0x27d2c24*, nNumberOfBytesToWrite=0x210, lpNumberOfBytesWritten=0x31e524, lpOverlapped=0x0 | out: lpBuffer=0x27d2c24*, lpNumberOfBytesWritten=0x31e524*=0x210, lpOverlapped=0x0) returned 1 [0079.783] CloseHandle (hObject=0x264) returned 1 [0079.783] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Cookies\\Low\\5p5nrgjn0js_halpmcxz@at.atwola[1].txt", nBufferLength=0x105, lpBuffer=0x31e0d4, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Cookies\\Low\\5p5nrgjn0js_halpmcxz@at.atwola[1].txt", lpFilePart=0x0) returned 0x71 [0079.783] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Cookies\\Low\\5p5nrgjn0js_halpmcxz@at.atwola[1].txt", nBufferLength=0x105, lpBuffer=0x31e0d4, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Cookies\\Low\\5p5nrgjn0js_halpmcxz@at.atwola[1].txt", lpFilePart=0x0) returned 0x71 [0079.783] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e534) returned 1 [0079.783] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Cookies\\Low\\5p5nrgjn0js_halpmcxz@at.atwola[1].txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\windows\\cookies\\low\\5p5nrgjn0js_halpmcxz@at.atwola[1].txt"), fInfoLevelId=0x0, lpFileInformation=0x31e5b0 | out: lpFileInformation=0x31e5b0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x4611db50, ftCreationTime.dwHighDateTime=0x1d2faf3, ftLastAccessTime.dwLowDateTime=0x4611db50, ftLastAccessTime.dwHighDateTime=0x1d2faf3, ftLastWriteTime.dwLowDateTime=0x12ffdb60, ftLastWriteTime.dwHighDateTime=0x1d6eb7f, nFileSizeHigh=0x0, nFileSizeLow=0x210)) returned 1 [0079.783] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e530) returned 1 [0079.783] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Cookies\\Low\\5p5nrgjn0js_halpmcxz@at.atwola[1].txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\windows\\cookies\\low\\5p5nrgjn0js_halpmcxz@at.atwola[1].txt"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Cookies\\Low\\5p5nrgjn0js_halpmcxz@at.atwola[1].txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\windows\\cookies\\low\\5p5nrgjn0js_halpmcxz@at.atwola[1].txt")) returned 1 [0079.783] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Cookies\\Low\\5p5nrgjn0js_halpmcxz@bing[1].txt", nBufferLength=0x105, lpBuffer=0x31dfb4, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Cookies\\Low\\5p5nrgjn0js_halpmcxz@bing[1].txt", lpFilePart=0x0) returned 0x6c [0079.784] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e4a8) returned 1 [0079.784] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Cookies\\Low\\5p5nrgjn0js_halpmcxz@bing[1].txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\windows\\cookies\\low\\5p5nrgjn0js_halpmcxz@bing[1].txt"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x264 [0079.784] GetFileType (hFile=0x264) returned 0x1 [0079.784] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e4a4) returned 1 [0079.784] GetFileType (hFile=0x264) returned 0x1 [0079.784] GetFileSize (in: hFile=0x264, lpFileSizeHigh=0x31e5b0 | out: lpFileSizeHigh=0x31e5b0*=0x0) returned 0x1ea [0079.784] ReadFile (in: hFile=0x264, lpBuffer=0x27d41b4, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x31e55c, lpOverlapped=0x0 | out: lpBuffer=0x27d41b4*, lpNumberOfBytesRead=0x31e55c*=0x1ea, lpOverlapped=0x0) returned 1 [0079.785] CloseHandle (hObject=0x264) returned 1 [0079.798] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Cookies\\Low\\5p5nrgjn0js_halpmcxz@bing[1].txt", nBufferLength=0x105, lpBuffer=0x31dfa0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Cookies\\Low\\5p5nrgjn0js_halpmcxz@bing[1].txt", lpFilePart=0x0) returned 0x6c [0079.798] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e494) returned 1 [0079.798] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Cookies\\Low\\5p5nrgjn0js_halpmcxz@bing[1].txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\windows\\cookies\\low\\5p5nrgjn0js_halpmcxz@bing[1].txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x264 [0079.799] GetFileType (hFile=0x264) returned 0x1 [0079.799] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e490) returned 1 [0079.799] GetFileType (hFile=0x264) returned 0x1 [0079.799] WriteFile (in: hFile=0x264, lpBuffer=0x2822af0*, nNumberOfBytesToWrite=0x1f0, lpNumberOfBytesWritten=0x31e524, lpOverlapped=0x0 | out: lpBuffer=0x2822af0*, lpNumberOfBytesWritten=0x31e524*=0x1f0, lpOverlapped=0x0) returned 1 [0079.800] CloseHandle (hObject=0x264) returned 1 [0079.800] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Cookies\\Low\\5p5nrgjn0js_halpmcxz@bing[1].txt", nBufferLength=0x105, lpBuffer=0x31e0d4, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Cookies\\Low\\5p5nrgjn0js_halpmcxz@bing[1].txt", lpFilePart=0x0) returned 0x6c [0079.800] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Cookies\\Low\\5p5nrgjn0js_halpmcxz@bing[1].txt", nBufferLength=0x105, lpBuffer=0x31e0d4, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Cookies\\Low\\5p5nrgjn0js_halpmcxz@bing[1].txt", lpFilePart=0x0) returned 0x6c [0079.800] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e534) returned 1 [0079.800] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Cookies\\Low\\5p5nrgjn0js_halpmcxz@bing[1].txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\windows\\cookies\\low\\5p5nrgjn0js_halpmcxz@bing[1].txt"), fInfoLevelId=0x0, lpFileInformation=0x31e5b0 | out: lpFileInformation=0x31e5b0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x534b4210, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x562c6900, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x13023cc0, ftLastWriteTime.dwHighDateTime=0x1d6eb7f, nFileSizeHigh=0x0, nFileSizeLow=0x1f0)) returned 1 [0079.800] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e530) returned 1 [0079.800] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Cookies\\Low\\5p5nrgjn0js_halpmcxz@bing[1].txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\windows\\cookies\\low\\5p5nrgjn0js_halpmcxz@bing[1].txt"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Cookies\\Low\\5p5nrgjn0js_halpmcxz@bing[1].txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\windows\\cookies\\low\\5p5nrgjn0js_halpmcxz@bing[1].txt")) returned 1 [0079.801] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Cookies\\Low\\5p5nrgjn0js_halpmcxz@c.bing[1].txt", nBufferLength=0x105, lpBuffer=0x31dfb4, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Cookies\\Low\\5p5nrgjn0js_halpmcxz@c.bing[1].txt", lpFilePart=0x0) returned 0x6e [0079.801] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e4a8) returned 1 [0079.801] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Cookies\\Low\\5p5nrgjn0js_halpmcxz@c.bing[1].txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\windows\\cookies\\low\\5p5nrgjn0js_halpmcxz@c.bing[1].txt"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x264 [0079.801] GetFileType (hFile=0x264) returned 0x1 [0079.801] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e4a4) returned 1 [0079.801] GetFileType (hFile=0x264) returned 0x1 [0079.801] GetFileSize (in: hFile=0x264, lpFileSizeHigh=0x31e5b0 | out: lpFileSizeHigh=0x31e5b0*=0x0) returned 0x1c8 [0079.801] ReadFile (in: hFile=0x264, lpBuffer=0x2824054, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x31e55c, lpOverlapped=0x0 | out: lpBuffer=0x2824054*, lpNumberOfBytesRead=0x31e55c*=0x1c8, lpOverlapped=0x0) returned 1 [0079.802] CloseHandle (hObject=0x264) returned 1 [0079.843] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Cookies\\Low\\5p5nrgjn0js_halpmcxz@c.bing[1].txt", nBufferLength=0x105, lpBuffer=0x31dfa0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Cookies\\Low\\5p5nrgjn0js_halpmcxz@c.bing[1].txt", lpFilePart=0x0) returned 0x6e [0079.843] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e494) returned 1 [0079.843] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Cookies\\Low\\5p5nrgjn0js_halpmcxz@c.bing[1].txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\windows\\cookies\\low\\5p5nrgjn0js_halpmcxz@c.bing[1].txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x264 [0079.844] GetFileType (hFile=0x264) returned 0x1 [0079.844] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e490) returned 1 [0079.844] GetFileType (hFile=0x264) returned 0x1 [0079.844] WriteFile (in: hFile=0x264, lpBuffer=0x2672a34*, nNumberOfBytesToWrite=0x1d0, lpNumberOfBytesWritten=0x31e524, lpOverlapped=0x0 | out: lpBuffer=0x2672a34*, lpNumberOfBytesWritten=0x31e524*=0x1d0, lpOverlapped=0x0) returned 1 [0079.845] CloseHandle (hObject=0x264) returned 1 [0079.845] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Cookies\\Low\\5p5nrgjn0js_halpmcxz@c.bing[1].txt", nBufferLength=0x105, lpBuffer=0x31e0d4, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Cookies\\Low\\5p5nrgjn0js_halpmcxz@c.bing[1].txt", lpFilePart=0x0) returned 0x6e [0079.845] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Cookies\\Low\\5p5nrgjn0js_halpmcxz@c.bing[1].txt", nBufferLength=0x105, lpBuffer=0x31e0d4, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Cookies\\Low\\5p5nrgjn0js_halpmcxz@c.bing[1].txt", lpFilePart=0x0) returned 0x6e [0079.845] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e534) returned 1 [0079.845] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Cookies\\Low\\5p5nrgjn0js_halpmcxz@c.bing[1].txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\windows\\cookies\\low\\5p5nrgjn0js_halpmcxz@c.bing[1].txt"), fInfoLevelId=0x0, lpFileInformation=0x31e5b0 | out: lpFileInformation=0x31e5b0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x45798350, ftCreationTime.dwHighDateTime=0x1d2faf3, ftLastAccessTime.dwLowDateTime=0x45798350, ftLastAccessTime.dwHighDateTime=0x1d2faf3, ftLastWriteTime.dwLowDateTime=0x130960e0, ftLastWriteTime.dwHighDateTime=0x1d6eb7f, nFileSizeHigh=0x0, nFileSizeLow=0x1d0)) returned 1 [0079.845] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e530) returned 1 [0079.845] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Cookies\\Low\\5p5nrgjn0js_halpmcxz@c.bing[1].txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\windows\\cookies\\low\\5p5nrgjn0js_halpmcxz@c.bing[1].txt"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Cookies\\Low\\5p5nrgjn0js_halpmcxz@c.bing[1].txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\windows\\cookies\\low\\5p5nrgjn0js_halpmcxz@c.bing[1].txt")) returned 1 [0079.845] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Cookies\\Low\\5p5nrgjn0js_halpmcxz@c.msn[1].txt", nBufferLength=0x105, lpBuffer=0x31dfb4, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Cookies\\Low\\5p5nrgjn0js_halpmcxz@c.msn[1].txt", lpFilePart=0x0) returned 0x6d [0079.845] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e4a8) returned 1 [0079.845] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Cookies\\Low\\5p5nrgjn0js_halpmcxz@c.msn[1].txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\windows\\cookies\\low\\5p5nrgjn0js_halpmcxz@c.msn[1].txt"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x264 [0079.846] GetFileType (hFile=0x264) returned 0x1 [0079.846] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e4a4) returned 1 [0079.846] GetFileType (hFile=0x264) returned 0x1 [0079.846] GetFileSize (in: hFile=0x264, lpFileSizeHigh=0x31e5b0 | out: lpFileSizeHigh=0x31e5b0*=0x0) returned 0x82 [0079.846] ReadFile (in: hFile=0x264, lpBuffer=0x2673e54, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x31e55c, lpOverlapped=0x0 | out: lpBuffer=0x2673e54*, lpNumberOfBytesRead=0x31e55c*=0x82, lpOverlapped=0x0) returned 1 [0079.848] CloseHandle (hObject=0x264) returned 1 [0079.861] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Cookies\\Low\\5p5nrgjn0js_halpmcxz@c.msn[1].txt", nBufferLength=0x105, lpBuffer=0x31dfa0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Cookies\\Low\\5p5nrgjn0js_halpmcxz@c.msn[1].txt", lpFilePart=0x0) returned 0x6d [0079.861] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e494) returned 1 [0079.861] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Cookies\\Low\\5p5nrgjn0js_halpmcxz@c.msn[1].txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\windows\\cookies\\low\\5p5nrgjn0js_halpmcxz@c.msn[1].txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x264 [0079.862] GetFileType (hFile=0x264) returned 0x1 [0079.862] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e490) returned 1 [0079.862] GetFileType (hFile=0x264) returned 0x1 [0079.862] WriteFile (in: hFile=0x264, lpBuffer=0x26c2188*, nNumberOfBytesToWrite=0x90, lpNumberOfBytesWritten=0x31e524, lpOverlapped=0x0 | out: lpBuffer=0x26c2188*, lpNumberOfBytesWritten=0x31e524*=0x90, lpOverlapped=0x0) returned 1 [0079.863] CloseHandle (hObject=0x264) returned 1 [0079.863] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Cookies\\Low\\5p5nrgjn0js_halpmcxz@c.msn[1].txt", nBufferLength=0x105, lpBuffer=0x31e0d4, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Cookies\\Low\\5p5nrgjn0js_halpmcxz@c.msn[1].txt", lpFilePart=0x0) returned 0x6d [0079.863] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Cookies\\Low\\5p5nrgjn0js_halpmcxz@c.msn[1].txt", nBufferLength=0x105, lpBuffer=0x31e0d4, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Cookies\\Low\\5p5nrgjn0js_halpmcxz@c.msn[1].txt", lpFilePart=0x0) returned 0x6d [0079.863] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e534) returned 1 [0079.864] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Cookies\\Low\\5p5nrgjn0js_halpmcxz@c.msn[1].txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\windows\\cookies\\low\\5p5nrgjn0js_halpmcxz@c.msn[1].txt"), fInfoLevelId=0x0, lpFileInformation=0x31e5b0 | out: lpFileInformation=0x31e5b0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xbdf95770, ftCreationTime.dwHighDateTime=0x1d2faf2, ftLastAccessTime.dwLowDateTime=0xbdf95770, ftLastAccessTime.dwHighDateTime=0x1d2faf2, ftLastWriteTime.dwLowDateTime=0x130bc240, ftLastWriteTime.dwHighDateTime=0x1d6eb7f, nFileSizeHigh=0x0, nFileSizeLow=0x90)) returned 1 [0079.864] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e530) returned 1 [0079.864] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Cookies\\Low\\5p5nrgjn0js_halpmcxz@c.msn[1].txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\windows\\cookies\\low\\5p5nrgjn0js_halpmcxz@c.msn[1].txt"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Cookies\\Low\\5p5nrgjn0js_halpmcxz@c.msn[1].txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\windows\\cookies\\low\\5p5nrgjn0js_halpmcxz@c.msn[1].txt")) returned 1 [0079.864] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Cookies\\Low\\5p5nrgjn0js_halpmcxz@doubleclick[2].txt", nBufferLength=0x105, lpBuffer=0x31dfb4, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Cookies\\Low\\5p5nrgjn0js_halpmcxz@doubleclick[2].txt", lpFilePart=0x0) returned 0x73 [0079.864] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e4a8) returned 1 [0079.864] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Cookies\\Low\\5p5nrgjn0js_halpmcxz@doubleclick[2].txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\windows\\cookies\\low\\5p5nrgjn0js_halpmcxz@doubleclick[2].txt"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x264 [0079.865] GetFileType (hFile=0x264) returned 0x1 [0079.865] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e4a4) returned 1 [0079.865] GetFileType (hFile=0x264) returned 0x1 [0079.865] GetFileSize (in: hFile=0x264, lpFileSizeHigh=0x31e5b0 | out: lpFileSizeHigh=0x31e5b0*=0x0) returned 0x110 [0079.865] ReadFile (in: hFile=0x264, lpBuffer=0x26c3644, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x31e55c, lpOverlapped=0x0 | out: lpBuffer=0x26c3644*, lpNumberOfBytesRead=0x31e55c*=0x110, lpOverlapped=0x0) returned 1 [0079.866] CloseHandle (hObject=0x264) returned 1 [0079.927] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Cookies\\Low\\5p5nrgjn0js_halpmcxz@doubleclick[2].txt", nBufferLength=0x105, lpBuffer=0x31dfa0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Cookies\\Low\\5p5nrgjn0js_halpmcxz@doubleclick[2].txt", lpFilePart=0x0) returned 0x73 [0079.928] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e494) returned 1 [0079.928] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Cookies\\Low\\5p5nrgjn0js_halpmcxz@doubleclick[2].txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\windows\\cookies\\low\\5p5nrgjn0js_halpmcxz@doubleclick[2].txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x264 [0079.928] GetFileType (hFile=0x264) returned 0x1 [0079.929] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e490) returned 1 [0079.929] GetFileType (hFile=0x264) returned 0x1 [0079.929] WriteFile (in: hFile=0x264, lpBuffer=0x2711b90*, nNumberOfBytesToWrite=0x120, lpNumberOfBytesWritten=0x31e524, lpOverlapped=0x0 | out: lpBuffer=0x2711b90*, lpNumberOfBytesWritten=0x31e524*=0x120, lpOverlapped=0x0) returned 1 [0079.929] CloseHandle (hObject=0x264) returned 1 [0079.930] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Cookies\\Low\\5p5nrgjn0js_halpmcxz@doubleclick[2].txt", nBufferLength=0x105, lpBuffer=0x31e0d4, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Cookies\\Low\\5p5nrgjn0js_halpmcxz@doubleclick[2].txt", lpFilePart=0x0) returned 0x73 [0079.930] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Cookies\\Low\\5p5nrgjn0js_halpmcxz@doubleclick[2].txt", nBufferLength=0x105, lpBuffer=0x31e0d4, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Cookies\\Low\\5p5nrgjn0js_halpmcxz@doubleclick[2].txt", lpFilePart=0x0) returned 0x73 [0079.930] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e534) returned 1 [0079.930] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Cookies\\Low\\5p5nrgjn0js_halpmcxz@doubleclick[2].txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\windows\\cookies\\low\\5p5nrgjn0js_halpmcxz@doubleclick[2].txt"), fInfoLevelId=0x0, lpFileInformation=0x31e5b0 | out: lpFileInformation=0x31e5b0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x6301df20, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x63a15b40, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x131547c0, ftLastWriteTime.dwHighDateTime=0x1d6eb7f, nFileSizeHigh=0x0, nFileSizeLow=0x120)) returned 1 [0079.930] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e530) returned 1 [0079.930] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Cookies\\Low\\5p5nrgjn0js_halpmcxz@doubleclick[2].txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\windows\\cookies\\low\\5p5nrgjn0js_halpmcxz@doubleclick[2].txt"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Cookies\\Low\\5p5nrgjn0js_halpmcxz@doubleclick[2].txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\windows\\cookies\\low\\5p5nrgjn0js_halpmcxz@doubleclick[2].txt")) returned 1 [0079.930] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Cookies\\Low\\5p5nrgjn0js_halpmcxz@google[1].txt", nBufferLength=0x105, lpBuffer=0x31dfb4, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Cookies\\Low\\5p5nrgjn0js_halpmcxz@google[1].txt", lpFilePart=0x0) returned 0x6e [0079.930] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e4a8) returned 1 [0079.930] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Cookies\\Low\\5p5nrgjn0js_halpmcxz@google[1].txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\windows\\cookies\\low\\5p5nrgjn0js_halpmcxz@google[1].txt"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x264 [0079.930] GetFileType (hFile=0x264) returned 0x1 [0079.930] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e4a4) returned 1 [0079.931] GetFileType (hFile=0x264) returned 0x1 [0079.931] GetFileSize (in: hFile=0x264, lpFileSizeHigh=0x31e5b0 | out: lpFileSizeHigh=0x31e5b0*=0x0) returned 0x256 [0079.931] ReadFile (in: hFile=0x264, lpBuffer=0x271319c, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x31e55c, lpOverlapped=0x0 | out: lpBuffer=0x271319c*, lpNumberOfBytesRead=0x31e55c*=0x256, lpOverlapped=0x0) returned 1 [0079.933] CloseHandle (hObject=0x264) returned 1 [0079.947] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Cookies\\Low\\5p5nrgjn0js_halpmcxz@google[1].txt", nBufferLength=0x105, lpBuffer=0x31dfa0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Cookies\\Low\\5p5nrgjn0js_halpmcxz@google[1].txt", lpFilePart=0x0) returned 0x6e [0079.947] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e494) returned 1 [0079.947] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Cookies\\Low\\5p5nrgjn0js_halpmcxz@google[1].txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\windows\\cookies\\low\\5p5nrgjn0js_halpmcxz@google[1].txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x264 [0079.948] GetFileType (hFile=0x264) returned 0x1 [0079.948] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e490) returned 1 [0079.948] GetFileType (hFile=0x264) returned 0x1 [0079.948] WriteFile (in: hFile=0x264, lpBuffer=0x2761d14*, nNumberOfBytesToWrite=0x260, lpNumberOfBytesWritten=0x31e524, lpOverlapped=0x0 | out: lpBuffer=0x2761d14*, lpNumberOfBytesWritten=0x31e524*=0x260, lpOverlapped=0x0) returned 1 [0079.949] CloseHandle (hObject=0x264) returned 1 [0079.949] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Cookies\\Low\\5p5nrgjn0js_halpmcxz@google[1].txt", nBufferLength=0x105, lpBuffer=0x31e0d4, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Cookies\\Low\\5p5nrgjn0js_halpmcxz@google[1].txt", lpFilePart=0x0) returned 0x6e [0079.949] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Cookies\\Low\\5p5nrgjn0js_halpmcxz@google[1].txt", nBufferLength=0x105, lpBuffer=0x31e0d4, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Cookies\\Low\\5p5nrgjn0js_halpmcxz@google[1].txt", lpFilePart=0x0) returned 0x6e [0079.949] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e534) returned 1 [0079.949] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Cookies\\Low\\5p5nrgjn0js_halpmcxz@google[1].txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\windows\\cookies\\low\\5p5nrgjn0js_halpmcxz@google[1].txt"), fInfoLevelId=0x0, lpFileInformation=0x31e5b0 | out: lpFileInformation=0x31e5b0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x61093ba0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x61093ba0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x1317a920, ftLastWriteTime.dwHighDateTime=0x1d6eb7f, nFileSizeHigh=0x0, nFileSizeLow=0x260)) returned 1 [0079.949] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e530) returned 1 [0079.949] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Cookies\\Low\\5p5nrgjn0js_halpmcxz@google[1].txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\windows\\cookies\\low\\5p5nrgjn0js_halpmcxz@google[1].txt"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Cookies\\Low\\5p5nrgjn0js_halpmcxz@google[1].txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\windows\\cookies\\low\\5p5nrgjn0js_halpmcxz@google[1].txt")) returned 1 [0079.949] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Cookies\\Low\\5p5nrgjn0js_halpmcxz@google[3].txt", nBufferLength=0x105, lpBuffer=0x31dfb4, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Cookies\\Low\\5p5nrgjn0js_halpmcxz@google[3].txt", lpFilePart=0x0) returned 0x6e [0079.949] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e4a8) returned 1 [0079.949] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Cookies\\Low\\5p5nrgjn0js_halpmcxz@google[3].txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\windows\\cookies\\low\\5p5nrgjn0js_halpmcxz@google[3].txt"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x264 [0079.950] GetFileType (hFile=0x264) returned 0x1 [0079.950] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e4a4) returned 1 [0079.950] GetFileType (hFile=0x264) returned 0x1 [0079.950] GetFileSize (in: hFile=0x264, lpFileSizeHigh=0x31e5b0 | out: lpFileSizeHigh=0x31e5b0*=0x0) returned 0xc4 [0079.950] ReadFile (in: hFile=0x264, lpBuffer=0x276317c, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x31e55c, lpOverlapped=0x0 | out: lpBuffer=0x276317c*, lpNumberOfBytesRead=0x31e55c*=0xc4, lpOverlapped=0x0) returned 1 [0079.951] CloseHandle (hObject=0x264) returned 1 [0079.964] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Cookies\\Low\\5p5nrgjn0js_halpmcxz@google[3].txt", nBufferLength=0x105, lpBuffer=0x31dfa0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Cookies\\Low\\5p5nrgjn0js_halpmcxz@google[3].txt", lpFilePart=0x0) returned 0x6e [0079.964] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e494) returned 1 [0079.964] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Cookies\\Low\\5p5nrgjn0js_halpmcxz@google[3].txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\windows\\cookies\\low\\5p5nrgjn0js_halpmcxz@google[3].txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x264 [0079.965] GetFileType (hFile=0x264) returned 0x1 [0079.965] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e490) returned 1 [0079.965] GetFileType (hFile=0x264) returned 0x1 [0079.965] WriteFile (in: hFile=0x264, lpBuffer=0x27b13d8*, nNumberOfBytesToWrite=0xd0, lpNumberOfBytesWritten=0x31e524, lpOverlapped=0x0 | out: lpBuffer=0x27b13d8*, lpNumberOfBytesWritten=0x31e524*=0xd0, lpOverlapped=0x0) returned 1 [0079.968] CloseHandle (hObject=0x264) returned 1 [0079.968] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Cookies\\Low\\5p5nrgjn0js_halpmcxz@google[3].txt", nBufferLength=0x105, lpBuffer=0x31e0d4, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Cookies\\Low\\5p5nrgjn0js_halpmcxz@google[3].txt", lpFilePart=0x0) returned 0x6e [0079.969] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Cookies\\Low\\5p5nrgjn0js_halpmcxz@google[3].txt", nBufferLength=0x105, lpBuffer=0x31e0d4, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Cookies\\Low\\5p5nrgjn0js_halpmcxz@google[3].txt", lpFilePart=0x0) returned 0x6e [0079.969] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e534) returned 1 [0079.969] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Cookies\\Low\\5p5nrgjn0js_halpmcxz@google[3].txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\windows\\cookies\\low\\5p5nrgjn0js_halpmcxz@google[3].txt"), fInfoLevelId=0x0, lpFileInformation=0x31e5b0 | out: lpFileInformation=0x31e5b0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x610b9d00, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x61282d80, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x131c6be0, ftLastWriteTime.dwHighDateTime=0x1d6eb7f, nFileSizeHigh=0x0, nFileSizeLow=0xd0)) returned 1 [0079.969] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e530) returned 1 [0079.969] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Cookies\\Low\\5p5nrgjn0js_halpmcxz@google[3].txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\windows\\cookies\\low\\5p5nrgjn0js_halpmcxz@google[3].txt"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Cookies\\Low\\5p5nrgjn0js_halpmcxz@google[3].txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\windows\\cookies\\low\\5p5nrgjn0js_halpmcxz@google[3].txt")) returned 1 [0079.969] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Cookies\\Low\\5p5nrgjn0js_halpmcxz@google[4].txt", nBufferLength=0x105, lpBuffer=0x31dfb4, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Cookies\\Low\\5p5nrgjn0js_halpmcxz@google[4].txt", lpFilePart=0x0) returned 0x6e [0079.969] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e4a8) returned 1 [0079.969] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Cookies\\Low\\5p5nrgjn0js_halpmcxz@google[4].txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\windows\\cookies\\low\\5p5nrgjn0js_halpmcxz@google[4].txt"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x264 [0079.969] GetFileType (hFile=0x264) returned 0x1 [0079.969] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e4a4) returned 1 [0079.969] GetFileType (hFile=0x264) returned 0x1 [0079.970] GetFileSize (in: hFile=0x264, lpFileSizeHigh=0x31e5b0 | out: lpFileSizeHigh=0x31e5b0*=0x0) returned 0x21f [0079.970] ReadFile (in: hFile=0x264, lpBuffer=0x27b299c, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x31e55c, lpOverlapped=0x0 | out: lpBuffer=0x27b299c*, lpNumberOfBytesRead=0x31e55c*=0x21f, lpOverlapped=0x0) returned 1 [0079.970] CloseHandle (hObject=0x264) returned 1 [0079.984] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Cookies\\Low\\5p5nrgjn0js_halpmcxz@google[4].txt", nBufferLength=0x105, lpBuffer=0x31dfa0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Cookies\\Low\\5p5nrgjn0js_halpmcxz@google[4].txt", lpFilePart=0x0) returned 0x6e [0079.984] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e494) returned 1 [0079.984] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Cookies\\Low\\5p5nrgjn0js_halpmcxz@google[4].txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\windows\\cookies\\low\\5p5nrgjn0js_halpmcxz@google[4].txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x264 [0079.985] GetFileType (hFile=0x264) returned 0x1 [0079.985] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e490) returned 1 [0079.985] GetFileType (hFile=0x264) returned 0x1 [0079.985] WriteFile (in: hFile=0x264, lpBuffer=0x28013cc*, nNumberOfBytesToWrite=0x220, lpNumberOfBytesWritten=0x31e524, lpOverlapped=0x0 | out: lpBuffer=0x28013cc*, lpNumberOfBytesWritten=0x31e524*=0x220, lpOverlapped=0x0) returned 1 [0079.986] CloseHandle (hObject=0x264) returned 1 [0079.986] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Cookies\\Low\\5p5nrgjn0js_halpmcxz@google[4].txt", nBufferLength=0x105, lpBuffer=0x31e0d4, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Cookies\\Low\\5p5nrgjn0js_halpmcxz@google[4].txt", lpFilePart=0x0) returned 0x6e [0079.986] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Cookies\\Low\\5p5nrgjn0js_halpmcxz@google[4].txt", nBufferLength=0x105, lpBuffer=0x31e0d4, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Cookies\\Low\\5p5nrgjn0js_halpmcxz@google[4].txt", lpFilePart=0x0) returned 0x6e [0079.986] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e534) returned 1 [0079.986] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Cookies\\Low\\5p5nrgjn0js_halpmcxz@google[4].txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\windows\\cookies\\low\\5p5nrgjn0js_halpmcxz@google[4].txt"), fInfoLevelId=0x0, lpFileInformation=0x31e5b0 | out: lpFileInformation=0x31e5b0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x64e777a0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x64e777a0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x131ecd40, ftLastWriteTime.dwHighDateTime=0x1d6eb7f, nFileSizeHigh=0x0, nFileSizeLow=0x220)) returned 1 [0079.986] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e530) returned 1 [0079.986] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Cookies\\Low\\5p5nrgjn0js_halpmcxz@google[4].txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\windows\\cookies\\low\\5p5nrgjn0js_halpmcxz@google[4].txt"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Cookies\\Low\\5p5nrgjn0js_halpmcxz@google[4].txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\windows\\cookies\\low\\5p5nrgjn0js_halpmcxz@google[4].txt")) returned 1 [0079.986] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Cookies\\Low\\5p5nrgjn0js_halpmcxz@linkedin[1].txt", nBufferLength=0x105, lpBuffer=0x31dfb4, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Cookies\\Low\\5p5nrgjn0js_halpmcxz@linkedin[1].txt", lpFilePart=0x0) returned 0x70 [0079.986] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e4a8) returned 1 [0079.986] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Cookies\\Low\\5p5nrgjn0js_halpmcxz@linkedin[1].txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\windows\\cookies\\low\\5p5nrgjn0js_halpmcxz@linkedin[1].txt"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x264 [0079.986] GetFileType (hFile=0x264) returned 0x1 [0079.987] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e4a4) returned 1 [0079.987] GetFileType (hFile=0x264) returned 0x1 [0079.987] GetFileSize (in: hFile=0x264, lpFileSizeHigh=0x31e5b0 | out: lpFileSizeHigh=0x31e5b0*=0x0) returned 0x110 [0079.987] ReadFile (in: hFile=0x264, lpBuffer=0x2802888, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x31e55c, lpOverlapped=0x0 | out: lpBuffer=0x2802888*, lpNumberOfBytesRead=0x31e55c*=0x110, lpOverlapped=0x0) returned 1 [0079.987] CloseHandle (hObject=0x264) returned 1 [0080.001] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Cookies\\Low\\5p5nrgjn0js_halpmcxz@linkedin[1].txt", nBufferLength=0x105, lpBuffer=0x31dfa0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Cookies\\Low\\5p5nrgjn0js_halpmcxz@linkedin[1].txt", lpFilePart=0x0) returned 0x70 [0080.001] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e494) returned 1 [0080.001] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Cookies\\Low\\5p5nrgjn0js_halpmcxz@linkedin[1].txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\windows\\cookies\\low\\5p5nrgjn0js_halpmcxz@linkedin[1].txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x264 [0080.002] GetFileType (hFile=0x264) returned 0x1 [0080.002] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e490) returned 1 [0080.002] GetFileType (hFile=0x264) returned 0x1 [0080.002] WriteFile (in: hFile=0x264, lpBuffer=0x2850dcc*, nNumberOfBytesToWrite=0x120, lpNumberOfBytesWritten=0x31e524, lpOverlapped=0x0 | out: lpBuffer=0x2850dcc*, lpNumberOfBytesWritten=0x31e524*=0x120, lpOverlapped=0x0) returned 1 [0080.003] CloseHandle (hObject=0x264) returned 1 [0080.003] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Cookies\\Low\\5p5nrgjn0js_halpmcxz@linkedin[1].txt", nBufferLength=0x105, lpBuffer=0x31e0d4, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Cookies\\Low\\5p5nrgjn0js_halpmcxz@linkedin[1].txt", lpFilePart=0x0) returned 0x70 [0080.003] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Cookies\\Low\\5p5nrgjn0js_halpmcxz@linkedin[1].txt", nBufferLength=0x105, lpBuffer=0x31e0d4, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Cookies\\Low\\5p5nrgjn0js_halpmcxz@linkedin[1].txt", lpFilePart=0x0) returned 0x70 [0080.003] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e534) returned 1 [0080.003] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Cookies\\Low\\5p5nrgjn0js_halpmcxz@linkedin[1].txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\windows\\cookies\\low\\5p5nrgjn0js_halpmcxz@linkedin[1].txt"), fInfoLevelId=0x0, lpFileInformation=0x31e5b0 | out: lpFileInformation=0x31e5b0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x465ba5f0, ftCreationTime.dwHighDateTime=0x1d2faf3, ftLastAccessTime.dwLowDateTime=0x465ba5f0, ftLastAccessTime.dwHighDateTime=0x1d2faf3, ftLastWriteTime.dwLowDateTime=0x13212ea0, ftLastWriteTime.dwHighDateTime=0x1d6eb7f, nFileSizeHigh=0x0, nFileSizeLow=0x120)) returned 1 [0080.003] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e530) returned 1 [0080.003] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Cookies\\Low\\5p5nrgjn0js_halpmcxz@linkedin[1].txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\windows\\cookies\\low\\5p5nrgjn0js_halpmcxz@linkedin[1].txt"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Cookies\\Low\\5p5nrgjn0js_halpmcxz@linkedin[1].txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\windows\\cookies\\low\\5p5nrgjn0js_halpmcxz@linkedin[1].txt")) returned 1 [0080.003] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Cookies\\Low\\5p5nrgjn0js_halpmcxz@m.exactag[1].txt", nBufferLength=0x105, lpBuffer=0x31dfb4, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Cookies\\Low\\5p5nrgjn0js_halpmcxz@m.exactag[1].txt", lpFilePart=0x0) returned 0x71 [0080.003] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e4a8) returned 1 [0080.004] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Cookies\\Low\\5p5nrgjn0js_halpmcxz@m.exactag[1].txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\windows\\cookies\\low\\5p5nrgjn0js_halpmcxz@m.exactag[1].txt"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x264 [0080.004] GetFileType (hFile=0x264) returned 0x1 [0080.004] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e4a4) returned 1 [0080.004] GetFileType (hFile=0x264) returned 0x1 [0080.004] GetFileSize (in: hFile=0x264, lpFileSizeHigh=0x31e5b0 | out: lpFileSizeHigh=0x31e5b0*=0x0) returned 0x76 [0080.004] ReadFile (in: hFile=0x264, lpBuffer=0x28521f8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x31e55c, lpOverlapped=0x0 | out: lpBuffer=0x28521f8*, lpNumberOfBytesRead=0x31e55c*=0x76, lpOverlapped=0x0) returned 1 [0080.013] CloseHandle (hObject=0x264) returned 1 [0080.055] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Cookies\\Low\\5p5nrgjn0js_halpmcxz@m.exactag[1].txt", nBufferLength=0x105, lpBuffer=0x31dfa0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Cookies\\Low\\5p5nrgjn0js_halpmcxz@m.exactag[1].txt", lpFilePart=0x0) returned 0x71 [0080.055] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e494) returned 1 [0080.055] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Cookies\\Low\\5p5nrgjn0js_halpmcxz@m.exactag[1].txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\windows\\cookies\\low\\5p5nrgjn0js_halpmcxz@m.exactag[1].txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x264 [0080.056] GetFileType (hFile=0x264) returned 0x1 [0080.056] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e490) returned 1 [0080.056] GetFileType (hFile=0x264) returned 0x1 [0080.056] WriteFile (in: hFile=0x264, lpBuffer=0x26a0284*, nNumberOfBytesToWrite=0x80, lpNumberOfBytesWritten=0x31e524, lpOverlapped=0x0 | out: lpBuffer=0x26a0284*, lpNumberOfBytesWritten=0x31e524*=0x80, lpOverlapped=0x0) returned 1 [0080.057] CloseHandle (hObject=0x264) returned 1 [0080.057] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Cookies\\Low\\5p5nrgjn0js_halpmcxz@m.exactag[1].txt", nBufferLength=0x105, lpBuffer=0x31e0d4, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Cookies\\Low\\5p5nrgjn0js_halpmcxz@m.exactag[1].txt", lpFilePart=0x0) returned 0x71 [0080.057] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Cookies\\Low\\5p5nrgjn0js_halpmcxz@m.exactag[1].txt", nBufferLength=0x105, lpBuffer=0x31e0d4, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Cookies\\Low\\5p5nrgjn0js_halpmcxz@m.exactag[1].txt", lpFilePart=0x0) returned 0x71 [0080.057] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e534) returned 1 [0080.057] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Cookies\\Low\\5p5nrgjn0js_halpmcxz@m.exactag[1].txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\windows\\cookies\\low\\5p5nrgjn0js_halpmcxz@m.exactag[1].txt"), fInfoLevelId=0x0, lpFileInformation=0x31e5b0 | out: lpFileInformation=0x31e5b0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xbfa5cef0, ftCreationTime.dwHighDateTime=0x1d2faf2, ftLastAccessTime.dwLowDateTime=0xbfa5cef0, ftLastAccessTime.dwHighDateTime=0x1d2faf2, ftLastWriteTime.dwLowDateTime=0x132852c0, ftLastWriteTime.dwHighDateTime=0x1d6eb7f, nFileSizeHigh=0x0, nFileSizeLow=0x80)) returned 1 [0080.057] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e530) returned 1 [0080.057] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Cookies\\Low\\5p5nrgjn0js_halpmcxz@m.exactag[1].txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\windows\\cookies\\low\\5p5nrgjn0js_halpmcxz@m.exactag[1].txt"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Cookies\\Low\\5p5nrgjn0js_halpmcxz@m.exactag[1].txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\windows\\cookies\\low\\5p5nrgjn0js_halpmcxz@m.exactag[1].txt")) returned 1 [0080.058] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Cookies\\Low\\5p5nrgjn0js_halpmcxz@msn[1].txt", nBufferLength=0x105, lpBuffer=0x31dfb4, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Cookies\\Low\\5p5nrgjn0js_halpmcxz@msn[1].txt", lpFilePart=0x0) returned 0x6b [0080.058] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e4a8) returned 1 [0080.058] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Cookies\\Low\\5p5nrgjn0js_halpmcxz@msn[1].txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\windows\\cookies\\low\\5p5nrgjn0js_halpmcxz@msn[1].txt"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x264 [0080.058] GetFileType (hFile=0x264) returned 0x1 [0080.058] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e4a4) returned 1 [0080.058] GetFileType (hFile=0x264) returned 0x1 [0080.058] GetFileSize (in: hFile=0x264, lpFileSizeHigh=0x31e5b0 | out: lpFileSizeHigh=0x31e5b0*=0x0) returned 0x337 [0080.058] ReadFile (in: hFile=0x264, lpBuffer=0x26a1958, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x31e55c, lpOverlapped=0x0 | out: lpBuffer=0x26a1958*, lpNumberOfBytesRead=0x31e55c*=0x337, lpOverlapped=0x0) returned 1 [0080.077] CloseHandle (hObject=0x264) returned 1 [0080.090] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Cookies\\Low\\5p5nrgjn0js_halpmcxz@msn[1].txt", nBufferLength=0x105, lpBuffer=0x31dfa0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Cookies\\Low\\5p5nrgjn0js_halpmcxz@msn[1].txt", lpFilePart=0x0) returned 0x6b [0080.090] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e494) returned 1 [0080.090] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Cookies\\Low\\5p5nrgjn0js_halpmcxz@msn[1].txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\windows\\cookies\\low\\5p5nrgjn0js_halpmcxz@msn[1].txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x264 [0080.091] GetFileType (hFile=0x264) returned 0x1 [0080.091] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e490) returned 1 [0080.091] GetFileType (hFile=0x264) returned 0x1 [0080.091] WriteFile (in: hFile=0x264, lpBuffer=0x26f0a7c*, nNumberOfBytesToWrite=0x340, lpNumberOfBytesWritten=0x31e524, lpOverlapped=0x0 | out: lpBuffer=0x26f0a7c*, lpNumberOfBytesWritten=0x31e524*=0x340, lpOverlapped=0x0) returned 1 [0080.092] CloseHandle (hObject=0x264) returned 1 [0080.092] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Cookies\\Low\\5p5nrgjn0js_halpmcxz@msn[1].txt", nBufferLength=0x105, lpBuffer=0x31e0d4, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Cookies\\Low\\5p5nrgjn0js_halpmcxz@msn[1].txt", lpFilePart=0x0) returned 0x6b [0080.092] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Cookies\\Low\\5p5nrgjn0js_halpmcxz@msn[1].txt", nBufferLength=0x105, lpBuffer=0x31e0d4, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Cookies\\Low\\5p5nrgjn0js_halpmcxz@msn[1].txt", lpFilePart=0x0) returned 0x6b [0080.092] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e534) returned 1 [0080.092] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Cookies\\Low\\5p5nrgjn0js_halpmcxz@msn[1].txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\windows\\cookies\\low\\5p5nrgjn0js_halpmcxz@msn[1].txt"), fInfoLevelId=0x0, lpFileInformation=0x31e5b0 | out: lpFileInformation=0x31e5b0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x50b50050, ftCreationTime.dwHighDateTime=0x1d2faf3, ftLastAccessTime.dwLowDateTime=0x50b50050, ftLastAccessTime.dwHighDateTime=0x1d2faf3, ftLastWriteTime.dwLowDateTime=0x132f76e0, ftLastWriteTime.dwHighDateTime=0x1d6eb7f, nFileSizeHigh=0x0, nFileSizeLow=0x340)) returned 1 [0080.093] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e530) returned 1 [0080.093] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Cookies\\Low\\5p5nrgjn0js_halpmcxz@msn[1].txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\windows\\cookies\\low\\5p5nrgjn0js_halpmcxz@msn[1].txt"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Cookies\\Low\\5p5nrgjn0js_halpmcxz@msn[1].txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\windows\\cookies\\low\\5p5nrgjn0js_halpmcxz@msn[1].txt")) returned 1 [0080.093] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Cookies\\Low\\5p5nrgjn0js_halpmcxz@scorecardresearch[2].txt", nBufferLength=0x105, lpBuffer=0x31dfb4, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Cookies\\Low\\5p5nrgjn0js_halpmcxz@scorecardresearch[2].txt", lpFilePart=0x0) returned 0x79 [0080.093] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e4a8) returned 1 [0080.093] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Cookies\\Low\\5p5nrgjn0js_halpmcxz@scorecardresearch[2].txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\windows\\cookies\\low\\5p5nrgjn0js_halpmcxz@scorecardresearch[2].txt"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x264 [0080.093] GetFileType (hFile=0x264) returned 0x1 [0080.093] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e4a4) returned 1 [0080.093] GetFileType (hFile=0x264) returned 0x1 [0080.093] GetFileSize (in: hFile=0x264, lpFileSizeHigh=0x31e5b0 | out: lpFileSizeHigh=0x31e5b0*=0x0) returned 0xce [0080.093] ReadFile (in: hFile=0x264, lpBuffer=0x26f1f08, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x31e55c, lpOverlapped=0x0 | out: lpBuffer=0x26f1f08*, lpNumberOfBytesRead=0x31e55c*=0xce, lpOverlapped=0x0) returned 1 [0080.094] CloseHandle (hObject=0x264) returned 1 [0080.108] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Cookies\\Low\\5p5nrgjn0js_halpmcxz@scorecardresearch[2].txt", nBufferLength=0x105, lpBuffer=0x31dfa0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Cookies\\Low\\5p5nrgjn0js_halpmcxz@scorecardresearch[2].txt", lpFilePart=0x0) returned 0x79 [0080.108] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e494) returned 1 [0080.108] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Cookies\\Low\\5p5nrgjn0js_halpmcxz@scorecardresearch[2].txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\windows\\cookies\\low\\5p5nrgjn0js_halpmcxz@scorecardresearch[2].txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x264 [0080.109] GetFileType (hFile=0x264) returned 0x1 [0080.109] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e490) returned 1 [0080.109] GetFileType (hFile=0x264) returned 0x1 [0080.109] WriteFile (in: hFile=0x264, lpBuffer=0x2740184*, nNumberOfBytesToWrite=0xd0, lpNumberOfBytesWritten=0x31e524, lpOverlapped=0x0 | out: lpBuffer=0x2740184*, lpNumberOfBytesWritten=0x31e524*=0xd0, lpOverlapped=0x0) returned 1 [0080.109] CloseHandle (hObject=0x264) returned 1 [0080.110] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Cookies\\Low\\5p5nrgjn0js_halpmcxz@scorecardresearch[2].txt", nBufferLength=0x105, lpBuffer=0x31e0d4, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Cookies\\Low\\5p5nrgjn0js_halpmcxz@scorecardresearch[2].txt", lpFilePart=0x0) returned 0x79 [0080.110] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Cookies\\Low\\5p5nrgjn0js_halpmcxz@scorecardresearch[2].txt", nBufferLength=0x105, lpBuffer=0x31e0d4, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Cookies\\Low\\5p5nrgjn0js_halpmcxz@scorecardresearch[2].txt", lpFilePart=0x0) returned 0x79 [0080.110] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e534) returned 1 [0080.110] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Cookies\\Low\\5p5nrgjn0js_halpmcxz@scorecardresearch[2].txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\windows\\cookies\\low\\5p5nrgjn0js_halpmcxz@scorecardresearch[2].txt"), fInfoLevelId=0x0, lpFileInformation=0x31e5b0 | out: lpFileInformation=0x31e5b0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x5348e0b0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x5348e0b0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x1331d840, ftLastWriteTime.dwHighDateTime=0x1d6eb7f, nFileSizeHigh=0x0, nFileSizeLow=0xd0)) returned 1 [0080.110] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e530) returned 1 [0080.110] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Cookies\\Low\\5p5nrgjn0js_halpmcxz@scorecardresearch[2].txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\windows\\cookies\\low\\5p5nrgjn0js_halpmcxz@scorecardresearch[2].txt"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Cookies\\Low\\5p5nrgjn0js_halpmcxz@scorecardresearch[2].txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\windows\\cookies\\low\\5p5nrgjn0js_halpmcxz@scorecardresearch[2].txt")) returned 1 [0080.110] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Cookies\\Low\\5p5nrgjn0js_halpmcxz@server.adformdsp[1].txt", nBufferLength=0x105, lpBuffer=0x31dfb4, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Cookies\\Low\\5p5nrgjn0js_halpmcxz@server.adformdsp[1].txt", lpFilePart=0x0) returned 0x78 [0080.110] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e4a8) returned 1 [0080.110] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Cookies\\Low\\5p5nrgjn0js_halpmcxz@server.adformdsp[1].txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\windows\\cookies\\low\\5p5nrgjn0js_halpmcxz@server.adformdsp[1].txt"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x264 [0080.110] GetFileType (hFile=0x264) returned 0x1 [0080.111] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e4a4) returned 1 [0080.111] GetFileType (hFile=0x264) returned 0x1 [0080.111] GetFileSize (in: hFile=0x264, lpFileSizeHigh=0x31e5b0 | out: lpFileSizeHigh=0x31e5b0*=0x0) returned 0x6c [0080.111] ReadFile (in: hFile=0x264, lpBuffer=0x27415e4, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x31e55c, lpOverlapped=0x0 | out: lpBuffer=0x27415e4*, lpNumberOfBytesRead=0x31e55c*=0x6c, lpOverlapped=0x0) returned 1 [0080.112] CloseHandle (hObject=0x264) returned 1 [0080.125] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Cookies\\Low\\5p5nrgjn0js_halpmcxz@server.adformdsp[1].txt", nBufferLength=0x105, lpBuffer=0x31dfa0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Cookies\\Low\\5p5nrgjn0js_halpmcxz@server.adformdsp[1].txt", lpFilePart=0x0) returned 0x78 [0080.125] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e494) returned 1 [0080.125] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Cookies\\Low\\5p5nrgjn0js_halpmcxz@server.adformdsp[1].txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\windows\\cookies\\low\\5p5nrgjn0js_halpmcxz@server.adformdsp[1].txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x264 [0080.126] GetFileType (hFile=0x264) returned 0x1 [0080.126] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e490) returned 1 [0080.126] GetFileType (hFile=0x264) returned 0x1 [0080.126] WriteFile (in: hFile=0x264, lpBuffer=0x278f7a0*, nNumberOfBytesToWrite=0x70, lpNumberOfBytesWritten=0x31e524, lpOverlapped=0x0 | out: lpBuffer=0x278f7a0*, lpNumberOfBytesWritten=0x31e524*=0x70, lpOverlapped=0x0) returned 1 [0080.128] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Cookies\\Low\\5p5nrgjn0js_halpmcxz@server.adformdsp[1].txt", nBufferLength=0x105, lpBuffer=0x31e0d4, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Cookies\\Low\\5p5nrgjn0js_halpmcxz@server.adformdsp[1].txt", lpFilePart=0x0) returned 0x78 [0080.128] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Cookies\\Low\\5p5nrgjn0js_halpmcxz@server.adformdsp[1].txt", nBufferLength=0x105, lpBuffer=0x31e0d4, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Cookies\\Low\\5p5nrgjn0js_halpmcxz@server.adformdsp[1].txt", lpFilePart=0x0) returned 0x78 [0080.128] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e534) returned 1 [0080.128] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Cookies\\Low\\5p5nrgjn0js_halpmcxz@server.adformdsp[1].txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\windows\\cookies\\low\\5p5nrgjn0js_halpmcxz@server.adformdsp[1].txt"), fInfoLevelId=0x0, lpFileInformation=0x31e5b0 | out: lpFileInformation=0x31e5b0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xbf73d210, ftCreationTime.dwHighDateTime=0x1d2faf2, ftLastAccessTime.dwLowDateTime=0xbf73d210, ftLastAccessTime.dwHighDateTime=0x1d2faf2, ftLastWriteTime.dwLowDateTime=0x133439a0, ftLastWriteTime.dwHighDateTime=0x1d6eb7f, nFileSizeHigh=0x0, nFileSizeLow=0x70)) returned 1 [0080.128] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e530) returned 1 [0080.128] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Cookies\\Low\\5p5nrgjn0js_halpmcxz@server.adformdsp[1].txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\windows\\cookies\\low\\5p5nrgjn0js_halpmcxz@server.adformdsp[1].txt"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Cookies\\Low\\5p5nrgjn0js_halpmcxz@server.adformdsp[1].txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\windows\\cookies\\low\\5p5nrgjn0js_halpmcxz@server.adformdsp[1].txt")) returned 1 [0080.128] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Cookies\\Low\\5p5nrgjn0js_halpmcxz@skadtec[1].txt", nBufferLength=0x105, lpBuffer=0x31dfb4, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Cookies\\Low\\5p5nrgjn0js_halpmcxz@skadtec[1].txt", lpFilePart=0x0) returned 0x6f [0080.128] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e4a8) returned 1 [0080.128] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Cookies\\Low\\5p5nrgjn0js_halpmcxz@skadtec[1].txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\windows\\cookies\\low\\5p5nrgjn0js_halpmcxz@skadtec[1].txt"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x264 [0080.129] GetFileType (hFile=0x264) returned 0x1 [0080.129] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e4a4) returned 1 [0080.129] GetFileType (hFile=0x264) returned 0x1 [0080.129] GetFileSize (in: hFile=0x264, lpFileSizeHigh=0x31e5b0 | out: lpFileSizeHigh=0x31e5b0*=0x0) returned 0x68 [0080.129] ReadFile (in: hFile=0x264, lpBuffer=0x2790bd4, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x31e55c, lpOverlapped=0x0 | out: lpBuffer=0x2790bd4*, lpNumberOfBytesRead=0x31e55c*=0x68, lpOverlapped=0x0) returned 1 [0080.143] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Cookies\\Low\\5p5nrgjn0js_halpmcxz@skadtec[1].txt", nBufferLength=0x105, lpBuffer=0x31dfa0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Cookies\\Low\\5p5nrgjn0js_halpmcxz@skadtec[1].txt", lpFilePart=0x0) returned 0x6f [0080.143] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e494) returned 1 [0080.143] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Cookies\\Low\\5p5nrgjn0js_halpmcxz@skadtec[1].txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\windows\\cookies\\low\\5p5nrgjn0js_halpmcxz@skadtec[1].txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x264 [0080.144] GetFileType (hFile=0x264) returned 0x1 [0080.144] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e490) returned 1 [0080.144] GetFileType (hFile=0x264) returned 0x1 [0080.144] WriteFile (in: hFile=0x264, lpBuffer=0x27ded6c*, nNumberOfBytesToWrite=0x70, lpNumberOfBytesWritten=0x31e524, lpOverlapped=0x0 | out: lpBuffer=0x27ded6c*, lpNumberOfBytesWritten=0x31e524*=0x70, lpOverlapped=0x0) returned 1 [0080.145] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Cookies\\Low\\5p5nrgjn0js_halpmcxz@skadtec[1].txt", nBufferLength=0x105, lpBuffer=0x31e0d4, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Cookies\\Low\\5p5nrgjn0js_halpmcxz@skadtec[1].txt", lpFilePart=0x0) returned 0x6f [0080.145] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Cookies\\Low\\5p5nrgjn0js_halpmcxz@skadtec[1].txt", nBufferLength=0x105, lpBuffer=0x31e0d4, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Cookies\\Low\\5p5nrgjn0js_halpmcxz@skadtec[1].txt", lpFilePart=0x0) returned 0x6f [0080.145] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e534) returned 1 [0080.145] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Cookies\\Low\\5p5nrgjn0js_halpmcxz@skadtec[1].txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\windows\\cookies\\low\\5p5nrgjn0js_halpmcxz@skadtec[1].txt"), fInfoLevelId=0x0, lpFileInformation=0x31e5b0 | out: lpFileInformation=0x31e5b0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xbf99e810, ftCreationTime.dwHighDateTime=0x1d2faf2, ftLastAccessTime.dwLowDateTime=0xbf99e810, ftLastAccessTime.dwHighDateTime=0x1d2faf2, ftLastWriteTime.dwLowDateTime=0x13369b00, ftLastWriteTime.dwHighDateTime=0x1d6eb7f, nFileSizeHigh=0x0, nFileSizeLow=0x70)) returned 1 [0080.145] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e530) returned 1 [0080.145] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Cookies\\Low\\5p5nrgjn0js_halpmcxz@skadtec[1].txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\windows\\cookies\\low\\5p5nrgjn0js_halpmcxz@skadtec[1].txt"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Cookies\\Low\\5p5nrgjn0js_halpmcxz@skadtec[1].txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\windows\\cookies\\low\\5p5nrgjn0js_halpmcxz@skadtec[1].txt")) returned 1 [0080.145] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Cookies\\Low\\5p5nrgjn0js_halpmcxz@track.adform[2].txt", nBufferLength=0x105, lpBuffer=0x31dfb4, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Cookies\\Low\\5p5nrgjn0js_halpmcxz@track.adform[2].txt", lpFilePart=0x0) returned 0x74 [0080.145] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e4a8) returned 1 [0080.145] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Cookies\\Low\\5p5nrgjn0js_halpmcxz@track.adform[2].txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\windows\\cookies\\low\\5p5nrgjn0js_halpmcxz@track.adform[2].txt"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x264 [0080.146] GetFileType (hFile=0x264) returned 0x1 [0080.146] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e4a4) returned 1 [0080.146] GetFileType (hFile=0x264) returned 0x1 [0080.146] GetFileSize (in: hFile=0x264, lpFileSizeHigh=0x31e5b0 | out: lpFileSizeHigh=0x31e5b0*=0x0) returned 0xb2 [0080.146] ReadFile (in: hFile=0x264, lpBuffer=0x27e01dc, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x31e55c, lpOverlapped=0x0 | out: lpBuffer=0x27e01dc*, lpNumberOfBytesRead=0x31e55c*=0xb2, lpOverlapped=0x0) returned 1 [0080.160] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Cookies\\Low\\5p5nrgjn0js_halpmcxz@track.adform[2].txt", nBufferLength=0x105, lpBuffer=0x31dfa0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Cookies\\Low\\5p5nrgjn0js_halpmcxz@track.adform[2].txt", lpFilePart=0x0) returned 0x74 [0080.160] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e494) returned 1 [0080.160] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Cookies\\Low\\5p5nrgjn0js_halpmcxz@track.adform[2].txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\windows\\cookies\\low\\5p5nrgjn0js_halpmcxz@track.adform[2].txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x264 [0080.161] GetFileType (hFile=0x264) returned 0x1 [0080.161] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e490) returned 1 [0080.161] GetFileType (hFile=0x264) returned 0x1 [0080.161] WriteFile (in: hFile=0x264, lpBuffer=0x282e434*, nNumberOfBytesToWrite=0xc0, lpNumberOfBytesWritten=0x31e524, lpOverlapped=0x0 | out: lpBuffer=0x282e434*, lpNumberOfBytesWritten=0x31e524*=0xc0, lpOverlapped=0x0) returned 1 [0080.163] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Cookies\\Low\\5p5nrgjn0js_halpmcxz@track.adform[2].txt", nBufferLength=0x105, lpBuffer=0x31e0d4, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Cookies\\Low\\5p5nrgjn0js_halpmcxz@track.adform[2].txt", lpFilePart=0x0) returned 0x74 [0080.163] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Cookies\\Low\\5p5nrgjn0js_halpmcxz@track.adform[2].txt", nBufferLength=0x105, lpBuffer=0x31e0d4, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Cookies\\Low\\5p5nrgjn0js_halpmcxz@track.adform[2].txt", lpFilePart=0x0) returned 0x74 [0080.163] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e534) returned 1 [0080.163] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Cookies\\Low\\5p5nrgjn0js_halpmcxz@track.adform[2].txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\windows\\cookies\\low\\5p5nrgjn0js_halpmcxz@track.adform[2].txt"), fInfoLevelId=0x0, lpFileInformation=0x31e5b0 | out: lpFileInformation=0x31e5b0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xbf54e030, ftCreationTime.dwHighDateTime=0x1d2faf2, ftLastAccessTime.dwLowDateTime=0xbf54e030, ftLastAccessTime.dwHighDateTime=0x1d2faf2, ftLastWriteTime.dwLowDateTime=0x1338fc60, ftLastWriteTime.dwHighDateTime=0x1d6eb7f, nFileSizeHigh=0x0, nFileSizeLow=0xc0)) returned 1 [0080.163] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e530) returned 1 [0080.163] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Cookies\\Low\\5p5nrgjn0js_halpmcxz@track.adform[2].txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\windows\\cookies\\low\\5p5nrgjn0js_halpmcxz@track.adform[2].txt"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Cookies\\Low\\5p5nrgjn0js_halpmcxz@track.adform[2].txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\windows\\cookies\\low\\5p5nrgjn0js_halpmcxz@track.adform[2].txt")) returned 1 [0080.163] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Cookies\\Low\\5p5nrgjn0js_halpmcxz@www.bing[2].txt", nBufferLength=0x105, lpBuffer=0x31dfb4, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Cookies\\Low\\5p5nrgjn0js_halpmcxz@www.bing[2].txt", lpFilePart=0x0) returned 0x70 [0080.163] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e4a8) returned 1 [0080.163] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Cookies\\Low\\5p5nrgjn0js_halpmcxz@www.bing[2].txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\windows\\cookies\\low\\5p5nrgjn0js_halpmcxz@www.bing[2].txt"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x264 [0080.163] GetFileType (hFile=0x264) returned 0x1 [0080.163] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e4a4) returned 1 [0080.164] GetFileType (hFile=0x264) returned 0x1 [0080.164] GetFileSize (in: hFile=0x264, lpFileSizeHigh=0x31e5b0 | out: lpFileSizeHigh=0x31e5b0*=0x0) returned 0xd7 [0080.164] ReadFile (in: hFile=0x264, lpBuffer=0x282f8d0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x31e55c, lpOverlapped=0x0 | out: lpBuffer=0x282f8d0*, lpNumberOfBytesRead=0x31e55c*=0xd7, lpOverlapped=0x0) returned 1 [0080.206] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Cookies\\Low\\5p5nrgjn0js_halpmcxz@www.bing[2].txt", nBufferLength=0x105, lpBuffer=0x31dfa0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Cookies\\Low\\5p5nrgjn0js_halpmcxz@www.bing[2].txt", lpFilePart=0x0) returned 0x70 [0080.207] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e494) returned 1 [0080.207] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Cookies\\Low\\5p5nrgjn0js_halpmcxz@www.bing[2].txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\windows\\cookies\\low\\5p5nrgjn0js_halpmcxz@www.bing[2].txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x264 [0080.208] GetFileType (hFile=0x264) returned 0x1 [0080.208] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e490) returned 1 [0080.208] GetFileType (hFile=0x264) returned 0x1 [0080.208] WriteFile (in: hFile=0x264, lpBuffer=0x267db94*, nNumberOfBytesToWrite=0xe0, lpNumberOfBytesWritten=0x31e524, lpOverlapped=0x0 | out: lpBuffer=0x267db94*, lpNumberOfBytesWritten=0x31e524*=0xe0, lpOverlapped=0x0) returned 1 [0080.208] CloseHandle (hObject=0x264) returned 1 [0080.209] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Cookies\\Low\\5p5nrgjn0js_halpmcxz@www.bing[2].txt", nBufferLength=0x105, lpBuffer=0x31e0d4, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Cookies\\Low\\5p5nrgjn0js_halpmcxz@www.bing[2].txt", lpFilePart=0x0) returned 0x70 [0080.209] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Cookies\\Low\\5p5nrgjn0js_halpmcxz@www.bing[2].txt", nBufferLength=0x105, lpBuffer=0x31e0d4, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Cookies\\Low\\5p5nrgjn0js_halpmcxz@www.bing[2].txt", lpFilePart=0x0) returned 0x70 [0080.209] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e534) returned 1 [0080.209] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Cookies\\Low\\5p5nrgjn0js_halpmcxz@www.bing[2].txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\windows\\cookies\\low\\5p5nrgjn0js_halpmcxz@www.bing[2].txt"), fInfoLevelId=0x0, lpFileInformation=0x31e5b0 | out: lpFileInformation=0x31e5b0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x555a9a10, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x555a9a10, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x13402080, ftLastWriteTime.dwHighDateTime=0x1d6eb7f, nFileSizeHigh=0x0, nFileSizeLow=0xe0)) returned 1 [0080.209] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e530) returned 1 [0080.209] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Cookies\\Low\\5p5nrgjn0js_halpmcxz@www.bing[2].txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\windows\\cookies\\low\\5p5nrgjn0js_halpmcxz@www.bing[2].txt"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Cookies\\Low\\5p5nrgjn0js_halpmcxz@www.bing[2].txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\windows\\cookies\\low\\5p5nrgjn0js_halpmcxz@www.bing[2].txt")) returned 1 [0080.209] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Cookies\\Low\\5p5nrgjn0js_halpmcxz@www.linkedin[1].txt", nBufferLength=0x105, lpBuffer=0x31dfb4, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Cookies\\Low\\5p5nrgjn0js_halpmcxz@www.linkedin[1].txt", lpFilePart=0x0) returned 0x74 [0080.209] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e4a8) returned 1 [0080.209] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Cookies\\Low\\5p5nrgjn0js_halpmcxz@www.linkedin[1].txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\windows\\cookies\\low\\5p5nrgjn0js_halpmcxz@www.linkedin[1].txt"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x264 [0080.209] GetFileType (hFile=0x264) returned 0x1 [0080.210] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e4a4) returned 1 [0080.210] GetFileType (hFile=0x264) returned 0x1 [0080.210] GetFileSize (in: hFile=0x264, lpFileSizeHigh=0x31e5b0 | out: lpFileSizeHigh=0x31e5b0*=0x0) returned 0xa9 [0080.210] ReadFile (in: hFile=0x264, lpBuffer=0x267f004, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x31e55c, lpOverlapped=0x0 | out: lpBuffer=0x267f004*, lpNumberOfBytesRead=0x31e55c*=0xa9, lpOverlapped=0x0) returned 1 [0080.211] CloseHandle (hObject=0x264) returned 1 [0080.224] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Cookies\\Low\\5p5nrgjn0js_halpmcxz@www.linkedin[1].txt", nBufferLength=0x105, lpBuffer=0x31dfa0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Cookies\\Low\\5p5nrgjn0js_halpmcxz@www.linkedin[1].txt", lpFilePart=0x0) returned 0x74 [0080.224] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e494) returned 1 [0080.224] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Cookies\\Low\\5p5nrgjn0js_halpmcxz@www.linkedin[1].txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\windows\\cookies\\low\\5p5nrgjn0js_halpmcxz@www.linkedin[1].txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x264 [0080.225] GetFileType (hFile=0x264) returned 0x1 [0080.225] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e490) returned 1 [0080.225] GetFileType (hFile=0x264) returned 0x1 [0080.225] WriteFile (in: hFile=0x264, lpBuffer=0x26cd390*, nNumberOfBytesToWrite=0xb0, lpNumberOfBytesWritten=0x31e524, lpOverlapped=0x0 | out: lpBuffer=0x26cd390*, lpNumberOfBytesWritten=0x31e524*=0xb0, lpOverlapped=0x0) returned 1 [0080.226] CloseHandle (hObject=0x264) returned 1 [0080.226] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Cookies\\Low\\5p5nrgjn0js_halpmcxz@www.linkedin[1].txt", nBufferLength=0x105, lpBuffer=0x31e0d4, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Cookies\\Low\\5p5nrgjn0js_halpmcxz@www.linkedin[1].txt", lpFilePart=0x0) returned 0x74 [0080.226] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Cookies\\Low\\5p5nrgjn0js_halpmcxz@www.linkedin[1].txt", nBufferLength=0x105, lpBuffer=0x31e0d4, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Cookies\\Low\\5p5nrgjn0js_halpmcxz@www.linkedin[1].txt", lpFilePart=0x0) returned 0x74 [0080.226] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e534) returned 1 [0080.226] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Cookies\\Low\\5p5nrgjn0js_halpmcxz@www.linkedin[1].txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\windows\\cookies\\low\\5p5nrgjn0js_halpmcxz@www.linkedin[1].txt"), fInfoLevelId=0x0, lpFileInformation=0x31e5b0 | out: lpFileInformation=0x31e5b0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x54d8c7b0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x54d8c7b0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x134281e0, ftLastWriteTime.dwHighDateTime=0x1d6eb7f, nFileSizeHigh=0x0, nFileSizeLow=0xb0)) returned 1 [0080.226] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e530) returned 1 [0080.227] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Cookies\\Low\\5p5nrgjn0js_halpmcxz@www.linkedin[1].txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\windows\\cookies\\low\\5p5nrgjn0js_halpmcxz@www.linkedin[1].txt"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Cookies\\Low\\5p5nrgjn0js_halpmcxz@www.linkedin[1].txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\windows\\cookies\\low\\5p5nrgjn0js_halpmcxz@www.linkedin[1].txt")) returned 1 [0080.227] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Cookies\\Low\\5p5nrgjn0js_halpmcxz@www.msn[2].txt", nBufferLength=0x105, lpBuffer=0x31dfb4, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Cookies\\Low\\5p5nrgjn0js_halpmcxz@www.msn[2].txt", lpFilePart=0x0) returned 0x6f [0080.227] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e4a8) returned 1 [0080.227] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Cookies\\Low\\5p5nrgjn0js_halpmcxz@www.msn[2].txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\windows\\cookies\\low\\5p5nrgjn0js_halpmcxz@www.msn[2].txt"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x264 [0080.227] GetFileType (hFile=0x264) returned 0x1 [0080.227] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e4a4) returned 1 [0080.227] GetFileType (hFile=0x264) returned 0x1 [0080.227] GetFileSize (in: hFile=0x264, lpFileSizeHigh=0x31e5b0 | out: lpFileSizeHigh=0x31e5b0*=0x0) returned 0x402 [0080.227] ReadFile (in: hFile=0x264, lpBuffer=0x26ceb50, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x31e55c, lpOverlapped=0x0 | out: lpBuffer=0x26ceb50*, lpNumberOfBytesRead=0x31e55c*=0x402, lpOverlapped=0x0) returned 1 [0080.229] CloseHandle (hObject=0x264) returned 1 [0080.242] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Cookies\\Low\\5p5nrgjn0js_halpmcxz@www.msn[2].txt", nBufferLength=0x105, lpBuffer=0x31dfa0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Cookies\\Low\\5p5nrgjn0js_halpmcxz@www.msn[2].txt", lpFilePart=0x0) returned 0x6f [0080.242] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e494) returned 1 [0080.243] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Cookies\\Low\\5p5nrgjn0js_halpmcxz@www.msn[2].txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\windows\\cookies\\low\\5p5nrgjn0js_halpmcxz@www.msn[2].txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x264 [0080.243] GetFileType (hFile=0x264) returned 0x1 [0080.243] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e490) returned 1 [0080.243] GetFileType (hFile=0x264) returned 0x1 [0080.244] WriteFile (in: hFile=0x264, lpBuffer=0x271df3c*, nNumberOfBytesToWrite=0x410, lpNumberOfBytesWritten=0x31e524, lpOverlapped=0x0 | out: lpBuffer=0x271df3c*, lpNumberOfBytesWritten=0x31e524*=0x410, lpOverlapped=0x0) returned 1 [0080.244] CloseHandle (hObject=0x264) returned 1 [0080.244] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Cookies\\Low\\5p5nrgjn0js_halpmcxz@www.msn[2].txt", nBufferLength=0x105, lpBuffer=0x31e0d4, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Cookies\\Low\\5p5nrgjn0js_halpmcxz@www.msn[2].txt", lpFilePart=0x0) returned 0x6f [0080.245] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Cookies\\Low\\5p5nrgjn0js_halpmcxz@www.msn[2].txt", nBufferLength=0x105, lpBuffer=0x31e0d4, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Cookies\\Low\\5p5nrgjn0js_halpmcxz@www.msn[2].txt", lpFilePart=0x0) returned 0x6f [0080.245] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e534) returned 1 [0080.245] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Cookies\\Low\\5p5nrgjn0js_halpmcxz@www.msn[2].txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\windows\\cookies\\low\\5p5nrgjn0js_halpmcxz@www.msn[2].txt"), fInfoLevelId=0x0, lpFileInformation=0x31e5b0 | out: lpFileInformation=0x31e5b0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x4523d1d0, ftCreationTime.dwHighDateTime=0x1d2faf3, ftLastAccessTime.dwLowDateTime=0x526fc010, ftLastAccessTime.dwHighDateTime=0x1d2faf3, ftLastWriteTime.dwLowDateTime=0x1344e340, ftLastWriteTime.dwHighDateTime=0x1d6eb7f, nFileSizeHigh=0x0, nFileSizeLow=0x410)) returned 1 [0080.245] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e530) returned 1 [0080.245] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Cookies\\Low\\5p5nrgjn0js_halpmcxz@www.msn[2].txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\windows\\cookies\\low\\5p5nrgjn0js_halpmcxz@www.msn[2].txt"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Cookies\\Low\\5p5nrgjn0js_halpmcxz@www.msn[2].txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\windows\\cookies\\low\\5p5nrgjn0js_halpmcxz@www.msn[2].txt")) returned 1 [0080.245] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e654) returned 1 [0080.245] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\IECompatCache", nBufferLength=0x105, lpBuffer=0x31e15c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\IECompatCache", lpFilePart=0x0) returned 0x4d [0080.245] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\IECompatCache\\", nBufferLength=0x105, lpBuffer=0x31e130, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\IECompatCache\\", lpFilePart=0x0) returned 0x4e [0080.245] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\IECompatCache\\*", lpFindFileData=0x31e37c | out: lpFindFileData=0x31e37c*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x28cff640, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28cff640, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xedd0e6f6, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x381e00 [0080.246] FindNextFileW (in: hFindFile=0x381e00, lpFindFileData=0x31e38c | out: lpFindFileData=0x31e38c*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x28cff640, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28cff640, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xedd0e6f6, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0080.246] FindNextFileW (in: hFindFile=0x381e00, lpFindFileData=0x31e38c | out: lpFindFileData=0x31e38c*(dwFileAttributes=0x2012, ftCreationTime.dwLowDateTime=0x28cff640, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28cff640, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xedd0e6f6, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Low", cAlternateFileName="")) returned 1 [0080.246] FindNextFileW (in: hFindFile=0x381e00, lpFindFileData=0x31e38c | out: lpFindFileData=0x31e38c*(dwFileAttributes=0x2012, ftCreationTime.dwLowDateTime=0x28cff640, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28cff640, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xedd0e6f6, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Low", cAlternateFileName="")) returned 0 [0080.246] FindClose (in: hFindFile=0x381e00 | out: hFindFile=0x381e00) returned 1 [0080.246] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e614) returned 1 [0080.246] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e620) returned 1 [0080.246] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e654) returned 1 [0080.247] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\IECompatCache", nBufferLength=0x105, lpBuffer=0x31e15c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\IECompatCache", lpFilePart=0x0) returned 0x4d [0080.247] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\IECompatCache\\", nBufferLength=0x105, lpBuffer=0x31e130, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\IECompatCache\\", lpFilePart=0x0) returned 0x4e [0080.247] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\IECompatCache\\*", lpFindFileData=0x31e37c | out: lpFindFileData=0x31e37c*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x28cff640, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28cff640, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xedd0e6f6, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x381e00 [0080.247] FindNextFileW (in: hFindFile=0x381e00, lpFindFileData=0x31e38c | out: lpFindFileData=0x31e38c*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x28cff640, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28cff640, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xedd0e6f6, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0080.247] FindNextFileW (in: hFindFile=0x381e00, lpFindFileData=0x31e38c | out: lpFindFileData=0x31e38c*(dwFileAttributes=0x2012, ftCreationTime.dwLowDateTime=0x28cff640, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28cff640, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xedd0e6f6, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Low", cAlternateFileName="")) returned 1 [0080.247] FindNextFileW (in: hFindFile=0x381e00, lpFindFileData=0x31e38c | out: lpFindFileData=0x31e38c*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0080.247] FindClose (in: hFindFile=0x381e00 | out: hFindFile=0x381e00) returned 1 [0080.247] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e614) returned 1 [0080.247] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e620) returned 1 [0080.247] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e5dc) returned 1 [0080.247] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\IECompatCache\\Low", nBufferLength=0x105, lpBuffer=0x31e0e4, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\IECompatCache\\Low", lpFilePart=0x0) returned 0x51 [0080.247] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\IECompatCache\\Low\\", nBufferLength=0x105, lpBuffer=0x31e0b8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\IECompatCache\\Low\\", lpFilePart=0x0) returned 0x52 [0080.247] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\IECompatCache\\Low\\*", lpFindFileData=0x31e304 | out: lpFindFileData=0x31e304*(dwFileAttributes=0x2012, ftCreationTime.dwLowDateTime=0x28cff640, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28cff640, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xedd0e6f6, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x381e00 [0080.248] FindNextFileW (in: hFindFile=0x381e00, lpFindFileData=0x31e314 | out: lpFindFileData=0x31e314*(dwFileAttributes=0x2012, ftCreationTime.dwLowDateTime=0x28cff640, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28cff640, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xedd0e6f6, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0080.248] FindNextFileW (in: hFindFile=0x381e00, lpFindFileData=0x31e314 | out: lpFindFileData=0x31e314*(dwFileAttributes=0x2012, ftCreationTime.dwLowDateTime=0x28cff640, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28cff640, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xedd0e6f6, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 0 [0080.248] FindClose (in: hFindFile=0x381e00 | out: hFindFile=0x381e00) returned 1 [0080.248] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e59c) returned 1 [0080.248] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e5a8) returned 1 [0080.248] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e5dc) returned 1 [0080.248] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\IECompatCache\\Low", nBufferLength=0x105, lpBuffer=0x31e0e4, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\IECompatCache\\Low", lpFilePart=0x0) returned 0x51 [0080.248] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\IECompatCache\\Low\\", nBufferLength=0x105, lpBuffer=0x31e0b8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\IECompatCache\\Low\\", lpFilePart=0x0) returned 0x52 [0080.248] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\IECompatCache\\Low\\*", lpFindFileData=0x31e304 | out: lpFindFileData=0x31e304*(dwFileAttributes=0x2012, ftCreationTime.dwLowDateTime=0x28cff640, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28cff640, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xedd0e6f6, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x381e00 [0080.248] FindNextFileW (in: hFindFile=0x381e00, lpFindFileData=0x31e314 | out: lpFindFileData=0x31e314*(dwFileAttributes=0x2012, ftCreationTime.dwLowDateTime=0x28cff640, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28cff640, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xedd0e6f6, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0080.249] FindNextFileW (in: hFindFile=0x381e00, lpFindFileData=0x31e314 | out: lpFindFileData=0x31e314*(dwFileAttributes=0x2012, ftCreationTime.dwLowDateTime=0x28cff640, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28cff640, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xedd0e6f6, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 0 [0080.249] FindClose (in: hFindFile=0x381e00 | out: hFindFile=0x381e00) returned 1 [0080.249] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e59c) returned 1 [0080.249] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e5a8) returned 1 [0080.249] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e654) returned 1 [0080.249] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\IETldCache", nBufferLength=0x105, lpBuffer=0x31e15c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\IETldCache", lpFilePart=0x0) returned 0x4a [0080.249] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\IETldCache\\", nBufferLength=0x105, lpBuffer=0x31e130, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\IETldCache\\", lpFilePart=0x0) returned 0x4b [0080.249] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\IETldCache\\*", lpFindFileData=0x31e37c | out: lpFindFileData=0x31e37c*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0x28cff640, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28dbdd20, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xfe9256a4, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x381e00 [0080.249] FindNextFileW (in: hFindFile=0x381e00, lpFindFileData=0x31e38c | out: lpFindFileData=0x31e38c*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0x28cff640, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28dbdd20, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xfe9256a4, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0080.249] FindNextFileW (in: hFindFile=0x381e00, lpFindFileData=0x31e38c | out: lpFindFileData=0x31e38c*(dwFileAttributes=0x2026, ftCreationTime.dwLowDateTime=0x28dbdd20, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28dbdd20, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xb1912e90, ftLastWriteTime.dwHighDateTime=0x1d5e82a, nFileSizeHigh=0x0, nFileSizeLow=0x40000, dwReserved0=0x0, dwReserved1=0x0, cFileName="index.dat", cAlternateFileName="")) returned 1 [0080.249] FindNextFileW (in: hFindFile=0x381e00, lpFindFileData=0x31e38c | out: lpFindFileData=0x31e38c*(dwFileAttributes=0x2012, ftCreationTime.dwLowDateTime=0x28cff640, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x4f0dcf10, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x4f0dcf10, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Low", cAlternateFileName="")) returned 1 [0080.250] FindNextFileW (in: hFindFile=0x381e00, lpFindFileData=0x31e38c | out: lpFindFileData=0x31e38c*(dwFileAttributes=0x2012, ftCreationTime.dwLowDateTime=0x28cff640, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x4f0dcf10, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x4f0dcf10, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Low", cAlternateFileName="")) returned 0 [0080.250] FindClose (in: hFindFile=0x381e00 | out: hFindFile=0x381e00) returned 1 [0080.250] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e614) returned 1 [0080.250] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e620) returned 1 [0080.250] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e654) returned 1 [0080.250] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\IETldCache", nBufferLength=0x105, lpBuffer=0x31e15c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\IETldCache", lpFilePart=0x0) returned 0x4a [0080.250] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\IETldCache\\", nBufferLength=0x105, lpBuffer=0x31e130, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\IETldCache\\", lpFilePart=0x0) returned 0x4b [0080.250] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\IETldCache\\*", lpFindFileData=0x31e37c | out: lpFindFileData=0x31e37c*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0x28cff640, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28dbdd20, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xfe9256a4, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x381e00 [0080.250] FindNextFileW (in: hFindFile=0x381e00, lpFindFileData=0x31e38c | out: lpFindFileData=0x31e38c*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0x28cff640, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28dbdd20, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xfe9256a4, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0080.250] FindNextFileW (in: hFindFile=0x381e00, lpFindFileData=0x31e38c | out: lpFindFileData=0x31e38c*(dwFileAttributes=0x2026, ftCreationTime.dwLowDateTime=0x28dbdd20, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28dbdd20, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xb1912e90, ftLastWriteTime.dwHighDateTime=0x1d5e82a, nFileSizeHigh=0x0, nFileSizeLow=0x40000, dwReserved0=0x0, dwReserved1=0x0, cFileName="index.dat", cAlternateFileName="")) returned 1 [0080.250] FindNextFileW (in: hFindFile=0x381e00, lpFindFileData=0x31e38c | out: lpFindFileData=0x31e38c*(dwFileAttributes=0x2012, ftCreationTime.dwLowDateTime=0x28cff640, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x4f0dcf10, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x4f0dcf10, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Low", cAlternateFileName="")) returned 1 [0080.251] FindNextFileW (in: hFindFile=0x381e00, lpFindFileData=0x31e38c | out: lpFindFileData=0x31e38c*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0080.251] FindClose (in: hFindFile=0x381e00 | out: hFindFile=0x381e00) returned 1 [0080.251] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e614) returned 1 [0080.251] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e620) returned 1 [0080.251] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e5dc) returned 1 [0080.251] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\IETldCache\\Low", nBufferLength=0x105, lpBuffer=0x31e0e4, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\IETldCache\\Low", lpFilePart=0x0) returned 0x4e [0080.251] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\IETldCache\\Low\\", nBufferLength=0x105, lpBuffer=0x31e0b8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\IETldCache\\Low\\", lpFilePart=0x0) returned 0x4f [0080.251] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\IETldCache\\Low\\*", lpFindFileData=0x31e304 | out: lpFindFileData=0x31e304*(dwFileAttributes=0x2012, ftCreationTime.dwLowDateTime=0x28cff640, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x4f0dcf10, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x4f0dcf10, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x381e00 [0080.251] FindNextFileW (in: hFindFile=0x381e00, lpFindFileData=0x31e314 | out: lpFindFileData=0x31e314*(dwFileAttributes=0x2012, ftCreationTime.dwLowDateTime=0x28cff640, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x4f0dcf10, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x4f0dcf10, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0080.251] FindNextFileW (in: hFindFile=0x381e00, lpFindFileData=0x31e314 | out: lpFindFileData=0x31e314*(dwFileAttributes=0x2026, ftCreationTime.dwLowDateTime=0x4f0dcf10, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x4f0dcf10, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x64c3a3c0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x40000, dwReserved0=0x0, dwReserved1=0x0, cFileName="index.dat", cAlternateFileName="")) returned 1 [0080.251] FindNextFileW (in: hFindFile=0x381e00, lpFindFileData=0x31e314 | out: lpFindFileData=0x31e314*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0080.252] FindClose (in: hFindFile=0x381e00 | out: hFindFile=0x381e00) returned 1 [0080.252] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e59c) returned 1 [0080.252] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e5a8) returned 1 [0080.252] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e5dc) returned 1 [0080.252] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\IETldCache\\Low", nBufferLength=0x105, lpBuffer=0x31e0e4, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\IETldCache\\Low", lpFilePart=0x0) returned 0x4e [0080.252] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\IETldCache\\Low\\", nBufferLength=0x105, lpBuffer=0x31e0b8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\IETldCache\\Low\\", lpFilePart=0x0) returned 0x4f [0080.252] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\IETldCache\\Low\\*", lpFindFileData=0x31e304 | out: lpFindFileData=0x31e304*(dwFileAttributes=0x2012, ftCreationTime.dwLowDateTime=0x28cff640, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x4f0dcf10, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x4f0dcf10, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x381e00 [0080.252] FindNextFileW (in: hFindFile=0x381e00, lpFindFileData=0x31e314 | out: lpFindFileData=0x31e314*(dwFileAttributes=0x2012, ftCreationTime.dwLowDateTime=0x28cff640, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x4f0dcf10, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x4f0dcf10, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0080.252] FindNextFileW (in: hFindFile=0x381e00, lpFindFileData=0x31e314 | out: lpFindFileData=0x31e314*(dwFileAttributes=0x2026, ftCreationTime.dwLowDateTime=0x4f0dcf10, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x4f0dcf10, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x64c3a3c0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x40000, dwReserved0=0x0, dwReserved1=0x0, cFileName="index.dat", cAlternateFileName="")) returned 1 [0080.252] FindNextFileW (in: hFindFile=0x381e00, lpFindFileData=0x31e314 | out: lpFindFileData=0x31e314*(dwFileAttributes=0x2026, ftCreationTime.dwLowDateTime=0x4f0dcf10, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x4f0dcf10, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x64c3a3c0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x40000, dwReserved0=0x0, dwReserved1=0x0, cFileName="index.dat", cAlternateFileName="")) returned 0 [0080.252] FindClose (in: hFindFile=0x381e00 | out: hFindFile=0x381e00) returned 1 [0080.252] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e59c) returned 1 [0080.253] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e5a8) returned 1 [0080.253] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e654) returned 1 [0080.253] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Libraries", nBufferLength=0x105, lpBuffer=0x31e15c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Libraries", lpFilePart=0x0) returned 0x49 [0080.253] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Libraries\\", nBufferLength=0x105, lpBuffer=0x31e130, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Libraries\\", lpFilePart=0x0) returned 0x4a [0080.253] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Libraries\\*", lpFindFileData=0x31e37c | out: lpFindFileData=0x31e37c*(dwFileAttributes=0x2011, ftCreationTime.dwLowDateTime=0x28cff640, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x2d22d5a0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x2d22d5a0, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x381e00 [0080.253] FindNextFileW (in: hFindFile=0x381e00, lpFindFileData=0x31e38c | out: lpFindFileData=0x31e38c*(dwFileAttributes=0x2011, ftCreationTime.dwLowDateTime=0x28cff640, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x2d22d5a0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x2d22d5a0, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0080.253] FindNextFileW (in: hFindFile=0x381e00, lpFindFileData=0x31e38c | out: lpFindFileData=0x31e38c*(dwFileAttributes=0x6, ftCreationTime.dwLowDateTime=0x28dbdd20, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28dbdd20, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x2d22d5a0, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x112, dwReserved0=0x0, dwReserved1=0x0, cFileName="desktop.ini", cAlternateFileName="")) returned 1 [0080.253] FindNextFileW (in: hFindFile=0x381e00, lpFindFileData=0x31e38c | out: lpFindFileData=0x31e38c*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x28d97bc0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x2d1e12e0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x2d1e12e0, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0xe2b, dwReserved0=0x0, dwReserved1=0x0, cFileName="Documents.library-ms", cAlternateFileName="DOCUME~1.LIB")) returned 1 [0080.253] FindNextFileW (in: hFindFile=0x381e00, lpFindFileData=0x31e38c | out: lpFindFileData=0x31e38c*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x28d97bc0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x2d22d5a0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x2d22d5a0, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0xe00, dwReserved0=0x0, dwReserved1=0x0, cFileName="Music.library-ms", cAlternateFileName="MUSIC~1.LIB")) returned 1 [0080.253] FindNextFileW (in: hFindFile=0x381e00, lpFindFileData=0x31e38c | out: lpFindFileData=0x31e38c*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x28d97bc0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x2d207440, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x2d207440, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0xe23, dwReserved0=0x0, dwReserved1=0x0, cFileName="Pictures.library-ms", cAlternateFileName="PICTUR~1.LIB")) returned 1 [0080.254] FindNextFileW (in: hFindFile=0x381e00, lpFindFileData=0x31e38c | out: lpFindFileData=0x31e38c*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x28d97bc0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x2d207440, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x2d207440, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0xe0e, dwReserved0=0x0, dwReserved1=0x0, cFileName="Videos.library-ms", cAlternateFileName="VIDEOS~1.LIB")) returned 1 [0080.254] FindNextFileW (in: hFindFile=0x381e00, lpFindFileData=0x31e38c | out: lpFindFileData=0x31e38c*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0080.254] FindClose (in: hFindFile=0x381e00 | out: hFindFile=0x381e00) returned 1 [0080.254] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e614) returned 1 [0080.254] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e620) returned 1 [0080.254] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e654) returned 1 [0080.254] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Libraries", nBufferLength=0x105, lpBuffer=0x31e15c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Libraries", lpFilePart=0x0) returned 0x49 [0080.254] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Libraries\\", nBufferLength=0x105, lpBuffer=0x31e130, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Libraries\\", lpFilePart=0x0) returned 0x4a [0080.254] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Libraries\\*", lpFindFileData=0x31e37c | out: lpFindFileData=0x31e37c*(dwFileAttributes=0x2011, ftCreationTime.dwLowDateTime=0x28cff640, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x2d22d5a0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x2d22d5a0, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x381e00 [0080.254] FindNextFileW (in: hFindFile=0x381e00, lpFindFileData=0x31e38c | out: lpFindFileData=0x31e38c*(dwFileAttributes=0x2011, ftCreationTime.dwLowDateTime=0x28cff640, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x2d22d5a0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x2d22d5a0, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0080.254] FindNextFileW (in: hFindFile=0x381e00, lpFindFileData=0x31e38c | out: lpFindFileData=0x31e38c*(dwFileAttributes=0x6, ftCreationTime.dwLowDateTime=0x28dbdd20, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28dbdd20, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x2d22d5a0, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x112, dwReserved0=0x0, dwReserved1=0x0, cFileName="desktop.ini", cAlternateFileName="")) returned 1 [0080.255] FindNextFileW (in: hFindFile=0x381e00, lpFindFileData=0x31e38c | out: lpFindFileData=0x31e38c*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x28d97bc0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x2d1e12e0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x2d1e12e0, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0xe2b, dwReserved0=0x0, dwReserved1=0x0, cFileName="Documents.library-ms", cAlternateFileName="DOCUME~1.LIB")) returned 1 [0080.255] FindNextFileW (in: hFindFile=0x381e00, lpFindFileData=0x31e38c | out: lpFindFileData=0x31e38c*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x28d97bc0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x2d22d5a0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x2d22d5a0, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0xe00, dwReserved0=0x0, dwReserved1=0x0, cFileName="Music.library-ms", cAlternateFileName="MUSIC~1.LIB")) returned 1 [0080.255] FindNextFileW (in: hFindFile=0x381e00, lpFindFileData=0x31e38c | out: lpFindFileData=0x31e38c*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x28d97bc0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x2d207440, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x2d207440, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0xe23, dwReserved0=0x0, dwReserved1=0x0, cFileName="Pictures.library-ms", cAlternateFileName="PICTUR~1.LIB")) returned 1 [0080.255] FindNextFileW (in: hFindFile=0x381e00, lpFindFileData=0x31e38c | out: lpFindFileData=0x31e38c*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x28d97bc0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x2d207440, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x2d207440, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0xe0e, dwReserved0=0x0, dwReserved1=0x0, cFileName="Videos.library-ms", cAlternateFileName="VIDEOS~1.LIB")) returned 1 [0080.255] FindNextFileW (in: hFindFile=0x381e00, lpFindFileData=0x31e38c | out: lpFindFileData=0x31e38c*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x28d97bc0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x2d207440, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x2d207440, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0xe0e, dwReserved0=0x0, dwReserved1=0x0, cFileName="Videos.library-ms", cAlternateFileName="VIDEOS~1.LIB")) returned 0 [0080.255] FindClose (in: hFindFile=0x381e00 | out: hFindFile=0x381e00) returned 1 [0080.255] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e614) returned 1 [0080.255] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e620) returned 1 [0080.255] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e654) returned 1 [0080.255] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Network Shortcuts", nBufferLength=0x105, lpBuffer=0x31e15c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Network Shortcuts", lpFilePart=0x0) returned 0x51 [0080.255] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Network Shortcuts\\", nBufferLength=0x105, lpBuffer=0x31e130, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Network Shortcuts\\", lpFilePart=0x0) returned 0x52 [0080.256] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Network Shortcuts\\*", lpFindFileData=0x31e37c | out: lpFindFileData=0x31e37c*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x28cff640, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28cff640, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xaeeef71c, ftLastWriteTime.dwHighDateTime=0x1ca042b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x381e00 [0080.256] FindNextFileW (in: hFindFile=0x381e00, lpFindFileData=0x31e38c | out: lpFindFileData=0x31e38c*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x28cff640, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28cff640, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xaeeef71c, ftLastWriteTime.dwHighDateTime=0x1ca042b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0080.256] FindNextFileW (in: hFindFile=0x381e00, lpFindFileData=0x31e38c | out: lpFindFileData=0x31e38c*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x28cff640, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28cff640, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xaeeef71c, ftLastWriteTime.dwHighDateTime=0x1ca042b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 0 [0080.256] FindClose (in: hFindFile=0x381e00 | out: hFindFile=0x381e00) returned 1 [0080.256] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e614) returned 1 [0080.256] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e620) returned 1 [0080.256] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e654) returned 1 [0080.256] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Network Shortcuts", nBufferLength=0x105, lpBuffer=0x31e15c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Network Shortcuts", lpFilePart=0x0) returned 0x51 [0080.257] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Network Shortcuts\\", nBufferLength=0x105, lpBuffer=0x31e130, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Network Shortcuts\\", lpFilePart=0x0) returned 0x52 [0080.257] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Network Shortcuts\\*", lpFindFileData=0x31e37c | out: lpFindFileData=0x31e37c*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x28cff640, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28cff640, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xaeeef71c, ftLastWriteTime.dwHighDateTime=0x1ca042b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x381e00 [0080.257] FindNextFileW (in: hFindFile=0x381e00, lpFindFileData=0x31e38c | out: lpFindFileData=0x31e38c*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x28cff640, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28cff640, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xaeeef71c, ftLastWriteTime.dwHighDateTime=0x1ca042b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0080.257] FindNextFileW (in: hFindFile=0x381e00, lpFindFileData=0x31e38c | out: lpFindFileData=0x31e38c*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x28cff640, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28cff640, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xaeeef71c, ftLastWriteTime.dwHighDateTime=0x1ca042b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 0 [0080.257] FindClose (in: hFindFile=0x381e00 | out: hFindFile=0x381e00) returned 1 [0080.257] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e614) returned 1 [0080.257] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e620) returned 1 [0080.257] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e654) returned 1 [0080.257] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Printer Shortcuts", nBufferLength=0x105, lpBuffer=0x31e15c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Printer Shortcuts", lpFilePart=0x0) returned 0x51 [0080.257] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Printer Shortcuts\\", nBufferLength=0x105, lpBuffer=0x31e130, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Printer Shortcuts\\", lpFilePart=0x0) returned 0x52 [0080.257] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Printer Shortcuts\\*", lpFindFileData=0x31e37c | out: lpFindFileData=0x31e37c*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x28cff640, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28cff640, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xb9c40b55, ftLastWriteTime.dwHighDateTime=0x1ca042b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x381e00 [0080.257] FindNextFileW (in: hFindFile=0x381e00, lpFindFileData=0x31e38c | out: lpFindFileData=0x31e38c*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x28cff640, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28cff640, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xb9c40b55, ftLastWriteTime.dwHighDateTime=0x1ca042b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0080.258] FindNextFileW (in: hFindFile=0x381e00, lpFindFileData=0x31e38c | out: lpFindFileData=0x31e38c*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x28cff640, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28cff640, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xb9c40b55, ftLastWriteTime.dwHighDateTime=0x1ca042b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 0 [0080.258] FindClose (in: hFindFile=0x381e00 | out: hFindFile=0x381e00) returned 1 [0080.258] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e614) returned 1 [0080.258] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e620) returned 1 [0080.258] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e654) returned 1 [0080.258] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Printer Shortcuts", nBufferLength=0x105, lpBuffer=0x31e15c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Printer Shortcuts", lpFilePart=0x0) returned 0x51 [0080.258] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Printer Shortcuts\\", nBufferLength=0x105, lpBuffer=0x31e130, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Printer Shortcuts\\", lpFilePart=0x0) returned 0x52 [0080.258] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Printer Shortcuts\\*", lpFindFileData=0x31e37c | out: lpFindFileData=0x31e37c*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x28cff640, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28cff640, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xb9c40b55, ftLastWriteTime.dwHighDateTime=0x1ca042b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x381e00 [0080.258] FindNextFileW (in: hFindFile=0x381e00, lpFindFileData=0x31e38c | out: lpFindFileData=0x31e38c*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x28cff640, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28cff640, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xb9c40b55, ftLastWriteTime.dwHighDateTime=0x1ca042b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0080.258] FindNextFileW (in: hFindFile=0x381e00, lpFindFileData=0x31e38c | out: lpFindFileData=0x31e38c*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x28cff640, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28cff640, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xb9c40b55, ftLastWriteTime.dwHighDateTime=0x1ca042b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 0 [0080.258] FindClose (in: hFindFile=0x381e00 | out: hFindFile=0x381e00) returned 1 [0080.259] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e614) returned 1 [0080.259] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e620) returned 1 [0080.259] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e654) returned 1 [0080.259] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\PrivacIE", nBufferLength=0x105, lpBuffer=0x31e15c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\PrivacIE", lpFilePart=0x0) returned 0x48 [0080.259] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\PrivacIE\\", nBufferLength=0x105, lpBuffer=0x31e130, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\PrivacIE\\", lpFilePart=0x0) returned 0x49 [0080.259] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\PrivacIE\\*", lpFindFileData=0x31e37c | out: lpFindFileData=0x31e37c*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0x28cff640, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x94fde710, ftLastAccessTime.dwHighDateTime=0x1d2fab5, ftLastWriteTime.dwLowDateTime=0x94fde710, ftLastWriteTime.dwHighDateTime=0x1d2fab5, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x381e00 [0080.259] FindNextFileW (in: hFindFile=0x381e00, lpFindFileData=0x31e38c | out: lpFindFileData=0x31e38c*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0x28cff640, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x94fde710, ftLastAccessTime.dwHighDateTime=0x1d2fab5, ftLastWriteTime.dwLowDateTime=0x94fde710, ftLastWriteTime.dwHighDateTime=0x1d2fab5, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0080.259] FindNextFileW (in: hFindFile=0x381e00, lpFindFileData=0x31e38c | out: lpFindFileData=0x31e38c*(dwFileAttributes=0x2026, ftCreationTime.dwLowDateTime=0x94fde710, ftCreationTime.dwHighDateTime=0x1d2fab5, ftLastAccessTime.dwLowDateTime=0x94fde710, ftLastAccessTime.dwHighDateTime=0x1d2fab5, ftLastWriteTime.dwLowDateTime=0x2bc126f0, ftLastWriteTime.dwHighDateTime=0x1d35d06, nFileSizeHigh=0x0, nFileSizeLow=0x8000, dwReserved0=0x0, dwReserved1=0x0, cFileName="index.dat", cAlternateFileName="")) returned 1 [0080.260] FindNextFileW (in: hFindFile=0x381e00, lpFindFileData=0x31e38c | out: lpFindFileData=0x31e38c*(dwFileAttributes=0x2012, ftCreationTime.dwLowDateTime=0x28cff640, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x50fa8bb0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x50fa8bb0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Low", cAlternateFileName="")) returned 1 [0080.260] FindNextFileW (in: hFindFile=0x381e00, lpFindFileData=0x31e38c | out: lpFindFileData=0x31e38c*(dwFileAttributes=0x2012, ftCreationTime.dwLowDateTime=0x28cff640, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x50fa8bb0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x50fa8bb0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Low", cAlternateFileName="")) returned 0 [0080.260] FindClose (in: hFindFile=0x381e00 | out: hFindFile=0x381e00) returned 1 [0080.260] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e614) returned 1 [0080.260] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e620) returned 1 [0080.260] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e654) returned 1 [0080.260] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\PrivacIE", nBufferLength=0x105, lpBuffer=0x31e15c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\PrivacIE", lpFilePart=0x0) returned 0x48 [0080.260] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\PrivacIE\\", nBufferLength=0x105, lpBuffer=0x31e130, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\PrivacIE\\", lpFilePart=0x0) returned 0x49 [0080.260] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\PrivacIE\\*", lpFindFileData=0x31e37c | out: lpFindFileData=0x31e37c*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0x28cff640, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x94fde710, ftLastAccessTime.dwHighDateTime=0x1d2fab5, ftLastWriteTime.dwLowDateTime=0x94fde710, ftLastWriteTime.dwHighDateTime=0x1d2fab5, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x381e00 [0080.260] FindNextFileW (in: hFindFile=0x381e00, lpFindFileData=0x31e38c | out: lpFindFileData=0x31e38c*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0x28cff640, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x94fde710, ftLastAccessTime.dwHighDateTime=0x1d2fab5, ftLastWriteTime.dwLowDateTime=0x94fde710, ftLastWriteTime.dwHighDateTime=0x1d2fab5, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0080.260] FindNextFileW (in: hFindFile=0x381e00, lpFindFileData=0x31e38c | out: lpFindFileData=0x31e38c*(dwFileAttributes=0x2026, ftCreationTime.dwLowDateTime=0x94fde710, ftCreationTime.dwHighDateTime=0x1d2fab5, ftLastAccessTime.dwLowDateTime=0x94fde710, ftLastAccessTime.dwHighDateTime=0x1d2fab5, ftLastWriteTime.dwLowDateTime=0x2bc126f0, ftLastWriteTime.dwHighDateTime=0x1d35d06, nFileSizeHigh=0x0, nFileSizeLow=0x8000, dwReserved0=0x0, dwReserved1=0x0, cFileName="index.dat", cAlternateFileName="")) returned 1 [0080.261] FindNextFileW (in: hFindFile=0x381e00, lpFindFileData=0x31e38c | out: lpFindFileData=0x31e38c*(dwFileAttributes=0x2012, ftCreationTime.dwLowDateTime=0x28cff640, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x50fa8bb0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x50fa8bb0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Low", cAlternateFileName="")) returned 1 [0080.261] FindNextFileW (in: hFindFile=0x381e00, lpFindFileData=0x31e38c | out: lpFindFileData=0x31e38c*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0080.261] FindClose (in: hFindFile=0x381e00 | out: hFindFile=0x381e00) returned 1 [0080.261] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e614) returned 1 [0080.261] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e620) returned 1 [0080.261] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e5dc) returned 1 [0080.261] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\PrivacIE\\Low", nBufferLength=0x105, lpBuffer=0x31e0e4, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\PrivacIE\\Low", lpFilePart=0x0) returned 0x4c [0080.261] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\PrivacIE\\Low\\", nBufferLength=0x105, lpBuffer=0x31e0b8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\PrivacIE\\Low\\", lpFilePart=0x0) returned 0x4d [0080.261] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\PrivacIE\\Low\\*", lpFindFileData=0x31e304 | out: lpFindFileData=0x31e304*(dwFileAttributes=0x2012, ftCreationTime.dwLowDateTime=0x28cff640, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x50fa8bb0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x50fa8bb0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x381e00 [0080.261] FindNextFileW (in: hFindFile=0x381e00, lpFindFileData=0x31e314 | out: lpFindFileData=0x31e314*(dwFileAttributes=0x2012, ftCreationTime.dwLowDateTime=0x28cff640, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x50fa8bb0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x50fa8bb0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0080.262] FindNextFileW (in: hFindFile=0x381e00, lpFindFileData=0x31e314 | out: lpFindFileData=0x31e314*(dwFileAttributes=0x2026, ftCreationTime.dwLowDateTime=0x50fa8bb0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x50fa8bb0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0xbaf619f0, ftLastWriteTime.dwHighDateTime=0x1d2faf2, nFileSizeHigh=0x0, nFileSizeLow=0x1c000, dwReserved0=0x0, dwReserved1=0x0, cFileName="index.dat", cAlternateFileName="")) returned 1 [0080.262] FindNextFileW (in: hFindFile=0x381e00, lpFindFileData=0x31e314 | out: lpFindFileData=0x31e314*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0080.262] FindClose (in: hFindFile=0x381e00 | out: hFindFile=0x381e00) returned 1 [0080.262] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e59c) returned 1 [0080.262] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e5a8) returned 1 [0080.262] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e5dc) returned 1 [0080.262] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\PrivacIE\\Low", nBufferLength=0x105, lpBuffer=0x31e0e4, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\PrivacIE\\Low", lpFilePart=0x0) returned 0x4c [0080.270] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\PrivacIE\\Low\\", nBufferLength=0x105, lpBuffer=0x31e0b8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\PrivacIE\\Low\\", lpFilePart=0x0) returned 0x4d [0080.270] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\PrivacIE\\Low\\*", lpFindFileData=0x31e304 | out: lpFindFileData=0x31e304*(dwFileAttributes=0x2012, ftCreationTime.dwLowDateTime=0x28cff640, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x50fa8bb0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x50fa8bb0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x381e00 [0080.270] FindNextFileW (in: hFindFile=0x381e00, lpFindFileData=0x31e314 | out: lpFindFileData=0x31e314*(dwFileAttributes=0x2012, ftCreationTime.dwLowDateTime=0x28cff640, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x50fa8bb0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x50fa8bb0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0080.270] FindNextFileW (in: hFindFile=0x381e00, lpFindFileData=0x31e314 | out: lpFindFileData=0x31e314*(dwFileAttributes=0x2026, ftCreationTime.dwLowDateTime=0x50fa8bb0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x50fa8bb0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0xbaf619f0, ftLastWriteTime.dwHighDateTime=0x1d2faf2, nFileSizeHigh=0x0, nFileSizeLow=0x1c000, dwReserved0=0x0, dwReserved1=0x0, cFileName="index.dat", cAlternateFileName="")) returned 1 [0080.270] FindNextFileW (in: hFindFile=0x381e00, lpFindFileData=0x31e314 | out: lpFindFileData=0x31e314*(dwFileAttributes=0x2026, ftCreationTime.dwLowDateTime=0x50fa8bb0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x50fa8bb0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0xbaf619f0, ftLastWriteTime.dwHighDateTime=0x1d2faf2, nFileSizeHigh=0x0, nFileSizeLow=0x1c000, dwReserved0=0x0, dwReserved1=0x0, cFileName="index.dat", cAlternateFileName="")) returned 0 [0080.270] FindClose (in: hFindFile=0x381e00 | out: hFindFile=0x381e00) returned 1 [0080.270] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e59c) returned 1 [0080.270] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e5a8) returned 1 [0080.270] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e654) returned 1 [0080.270] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Recent", nBufferLength=0x105, lpBuffer=0x31e15c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Recent", lpFilePart=0x0) returned 0x46 [0080.270] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\", nBufferLength=0x105, lpBuffer=0x31e130, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\", lpFilePart=0x0) returned 0x47 [0080.271] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\*", lpFindFileData=0x31e37c | out: lpFindFileData=0x31e37c*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x28cff640, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0xdd777e60, ftLastAccessTime.dwHighDateTime=0x1d5e82a, ftLastWriteTime.dwLowDateTime=0xdd777e60, ftLastWriteTime.dwHighDateTime=0x1d5e82a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x381e00 [0080.271] FindNextFileW (in: hFindFile=0x381e00, lpFindFileData=0x31e38c | out: lpFindFileData=0x31e38c*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x28cff640, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0xdd777e60, ftLastAccessTime.dwHighDateTime=0x1d5e82a, ftLastWriteTime.dwLowDateTime=0xdd777e60, ftLastWriteTime.dwHighDateTime=0x1d5e82a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0080.271] FindNextFileW (in: hFindFile=0x381e00, lpFindFileData=0x31e38c | out: lpFindFileData=0x31e38c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xdd4a4440, ftCreationTime.dwHighDateTime=0x1d5e82a, ftLastAccessTime.dwLowDateTime=0xdd4a4440, ftLastAccessTime.dwHighDateTime=0x1d5e82a, ftLastWriteTime.dwLowDateTime=0xdd4a4440, ftLastWriteTime.dwHighDateTime=0x1d5e82a, nFileSizeHigh=0x0, nFileSizeLow=0x1c32, dwReserved0=0x0, dwReserved1=0x0, cFileName="-5 rgXAKNVWpqoUUHt.lnk", cAlternateFileName="-5RGXA~1.LNK")) returned 1 [0080.271] FindNextFileW (in: hFindFile=0x381e00, lpFindFileData=0x31e38c | out: lpFindFileData=0x31e38c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xdd6df8e0, ftCreationTime.dwHighDateTime=0x1d5e82a, ftLastAccessTime.dwLowDateTime=0xdd6df8e0, ftLastAccessTime.dwHighDateTime=0x1d5e82a, ftLastWriteTime.dwLowDateTime=0xdd6df8e0, ftLastWriteTime.dwHighDateTime=0x1d5e82a, nFileSizeHigh=0x0, nFileSizeLow=0x15ee, dwReserved0=0x0, dwReserved1=0x0, cFileName="-C9Sja0mJwrJKSu90.lnk", cAlternateFileName="-C9SJA~1.LNK")) returned 1 [0080.271] FindNextFileW (in: hFindFile=0x381e00, lpFindFileData=0x31e38c | out: lpFindFileData=0x31e38c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xdbb33920, ftCreationTime.dwHighDateTime=0x1d5e82a, ftLastAccessTime.dwLowDateTime=0xdbb33920, ftLastAccessTime.dwHighDateTime=0x1d5e82a, ftLastWriteTime.dwLowDateTime=0xdbb33920, ftLastWriteTime.dwHighDateTime=0x1d5e82a, nFileSizeHigh=0x0, nFileSizeLow=0xa58, dwReserved0=0x0, dwReserved1=0x0, cFileName="-XBhFw3KRNIiI.lnk", cAlternateFileName="-XBHFW~1.LNK")) returned 1 [0080.271] FindNextFileW (in: hFindFile=0x381e00, lpFindFileData=0x31e38c | out: lpFindFileData=0x31e38c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xdcda63a0, ftCreationTime.dwHighDateTime=0x1d5e82a, ftLastAccessTime.dwLowDateTime=0xdcda63a0, ftLastAccessTime.dwHighDateTime=0x1d5e82a, ftLastWriteTime.dwLowDateTime=0xdcda63a0, ftLastWriteTime.dwHighDateTime=0x1d5e82a, nFileSizeHigh=0x0, nFileSizeLow=0x1c32, dwReserved0=0x0, dwReserved1=0x0, cFileName="02uI45CVA0UfWQJTSx6.lnk", cAlternateFileName="02UI45~1.LNK")) returned 1 [0080.271] FindNextFileW (in: hFindFile=0x381e00, lpFindFileData=0x31e38c | out: lpFindFileData=0x31e38c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xdd40bec0, ftCreationTime.dwHighDateTime=0x1d5e82a, ftLastAccessTime.dwLowDateTime=0xdd40bec0, ftLastAccessTime.dwHighDateTime=0x1d5e82a, ftLastWriteTime.dwLowDateTime=0xdd40bec0, ftLastWriteTime.dwHighDateTime=0x1d5e82a, nFileSizeHigh=0x0, nFileSizeLow=0x1471, dwReserved0=0x0, dwReserved1=0x0, cFileName="0fonx3QbySjHW9kekT.flv.lnk", cAlternateFileName="0FONX3~1.LNK")) returned 1 [0080.272] FindNextFileW (in: hFindFile=0x381e00, lpFindFileData=0x31e38c | out: lpFindFileData=0x31e38c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xdbb59a80, ftCreationTime.dwHighDateTime=0x1d5e82a, ftLastAccessTime.dwLowDateTime=0xdbb59a80, ftLastAccessTime.dwHighDateTime=0x1d5e82a, ftLastWriteTime.dwLowDateTime=0xdbb59a80, ftLastWriteTime.dwHighDateTime=0x1d5e82a, nFileSizeHigh=0x0, nFileSizeLow=0x1c06, dwReserved0=0x0, dwReserved1=0x0, cFileName="0QpBHVtt5vUmfNi.lnk", cAlternateFileName="0QPBHV~1.LNK")) returned 1 [0080.272] FindNextFileW (in: hFindFile=0x381e00, lpFindFileData=0x31e38c | out: lpFindFileData=0x31e38c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xdcc03480, ftCreationTime.dwHighDateTime=0x1d5e82a, ftLastAccessTime.dwLowDateTime=0xdcc03480, ftLastAccessTime.dwHighDateTime=0x1d5e82a, ftLastWriteTime.dwLowDateTime=0xdcc03480, ftLastWriteTime.dwHighDateTime=0x1d5e82a, nFileSizeHigh=0x0, nFileSizeLow=0xa16, dwReserved0=0x0, dwReserved1=0x0, cFileName="1GMPKC9.lnk", cAlternateFileName="")) returned 1 [0080.272] FindNextFileW (in: hFindFile=0x381e00, lpFindFileData=0x31e38c | out: lpFindFileData=0x31e38c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xdd1384a0, ftCreationTime.dwHighDateTime=0x1d5e82a, ftLastAccessTime.dwLowDateTime=0xdd1384a0, ftLastAccessTime.dwHighDateTime=0x1d5e82a, ftLastWriteTime.dwLowDateTime=0xdd1384a0, ftLastWriteTime.dwHighDateTime=0x1d5e82a, nFileSizeHigh=0x0, nFileSizeLow=0x328, dwReserved0=0x0, dwReserved1=0x0, cFileName="1iogfuz_21wpdknL.lnk", cAlternateFileName="1IOGFU~1.LNK")) returned 1 [0080.272] FindNextFileW (in: hFindFile=0x381e00, lpFindFileData=0x31e38c | out: lpFindFileData=0x31e38c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xdcaac820, ftCreationTime.dwHighDateTime=0x1d5e82a, ftLastAccessTime.dwLowDateTime=0xdcaac820, ftLastAccessTime.dwHighDateTime=0x1d5e82a, ftLastWriteTime.dwLowDateTime=0xdcaac820, ftLastWriteTime.dwHighDateTime=0x1d5e82a, nFileSizeHigh=0x0, nFileSizeLow=0x1ab3, dwReserved0=0x0, dwReserved1=0x0, cFileName="1MlIv-7ANr-ec.lnk", cAlternateFileName="1MLIV-~1.LNK")) returned 1 [0080.272] FindNextFileW (in: hFindFile=0x381e00, lpFindFileData=0x31e38c | out: lpFindFileData=0x31e38c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xdd4f0700, ftCreationTime.dwHighDateTime=0x1d5e82a, ftLastAccessTime.dwLowDateTime=0xdd4f0700, ftLastAccessTime.dwHighDateTime=0x1d5e82a, ftLastWriteTime.dwLowDateTime=0xdd4f0700, ftLastWriteTime.dwHighDateTime=0x1d5e82a, nFileSizeHigh=0x0, nFileSizeLow=0xa38, dwReserved0=0x0, dwReserved1=0x0, cFileName="2iM6el404FPP9.lnk", cAlternateFileName="2IM6EL~1.LNK")) returned 1 [0080.272] FindNextFileW (in: hFindFile=0x381e00, lpFindFileData=0x31e38c | out: lpFindFileData=0x31e38c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xdd647360, ftCreationTime.dwHighDateTime=0x1d5e82a, ftLastAccessTime.dwLowDateTime=0xdd647360, ftLastAccessTime.dwHighDateTime=0x1d5e82a, ftLastWriteTime.dwLowDateTime=0xdd66d4c0, ftLastWriteTime.dwHighDateTime=0x1d5e82a, nFileSizeHigh=0x0, nFileSizeLow=0x40b, dwReserved0=0x0, dwReserved1=0x0, cFileName="2LKK31mn8fmrauO.lnk", cAlternateFileName="2LKK31~1.LNK")) returned 1 [0080.272] FindNextFileW (in: hFindFile=0x381e00, lpFindFileData=0x31e38c | out: lpFindFileData=0x31e38c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xdd15e600, ftCreationTime.dwHighDateTime=0x1d5e82a, ftLastAccessTime.dwLowDateTime=0xdd15e600, ftLastAccessTime.dwHighDateTime=0x1d5e82a, ftLastWriteTime.dwLowDateTime=0xdd15e600, ftLastWriteTime.dwHighDateTime=0x1d5e82a, nFileSizeHigh=0x0, nFileSizeLow=0x221b, dwReserved0=0x0, dwReserved1=0x0, cFileName="2pGy8blaGINSTsQu.lnk", cAlternateFileName="2PGY8B~1.LNK")) returned 1 [0080.272] FindNextFileW (in: hFindFile=0x381e00, lpFindFileData=0x31e38c | out: lpFindFileData=0x31e38c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xdca3a400, ftCreationTime.dwHighDateTime=0x1d5e82a, ftLastAccessTime.dwLowDateTime=0xdca3a400, ftLastAccessTime.dwHighDateTime=0x1d5e82a, ftLastWriteTime.dwLowDateTime=0xdca3a400, ftLastWriteTime.dwHighDateTime=0x1d5e82a, nFileSizeHigh=0x0, nFileSizeLow=0x1596, dwReserved0=0x0, dwReserved1=0x0, cFileName="35bcBrdvj.lnk", cAlternateFileName="35BCBR~1.LNK")) returned 1 [0080.273] FindNextFileW (in: hFindFile=0x381e00, lpFindFileData=0x31e38c | out: lpFindFileData=0x31e38c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xdc635ee0, ftCreationTime.dwHighDateTime=0x1d5e82a, ftLastAccessTime.dwLowDateTime=0xdd588c80, ftLastAccessTime.dwHighDateTime=0x1d5e82a, ftLastWriteTime.dwLowDateTime=0xdd588c80, ftLastWriteTime.dwHighDateTime=0x1d5e82a, nFileSizeHigh=0x0, nFileSizeLow=0x9ad, dwReserved0=0x0, dwReserved1=0x0, cFileName="3fmT5WPHA39l3f9.lnk", cAlternateFileName="3FMT5W~1.LNK")) returned 1 [0080.273] FindNextFileW (in: hFindFile=0x381e00, lpFindFileData=0x31e38c | out: lpFindFileData=0x31e38c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xdb8d2320, ftCreationTime.dwHighDateTime=0x1d5e82a, ftLastAccessTime.dwLowDateTime=0xdb8d2320, ftLastAccessTime.dwHighDateTime=0x1d5e82a, ftLastWriteTime.dwLowDateTime=0xdb8d2320, ftLastWriteTime.dwHighDateTime=0x1d5e82a, nFileSizeHigh=0x0, nFileSizeLow=0xa79, dwReserved0=0x0, dwReserved1=0x0, cFileName="3g 7kD u8yPvSBKq.lnk", cAlternateFileName="3G7KDU~1.LNK")) returned 1 [0080.273] FindNextFileW (in: hFindFile=0x381e00, lpFindFileData=0x31e38c | out: lpFindFileData=0x31e38c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xdd693620, ftCreationTime.dwHighDateTime=0x1d5e82a, ftLastAccessTime.dwLowDateTime=0xdd693620, ftLastAccessTime.dwHighDateTime=0x1d5e82a, ftLastWriteTime.dwLowDateTime=0xdd693620, ftLastWriteTime.dwHighDateTime=0x1d5e82a, nFileSizeHigh=0x0, nFileSizeLow=0xa22, dwReserved0=0x0, dwReserved1=0x0, cFileName="3Sx06XnyBNN.lnk", cAlternateFileName="3SX06X~1.LNK")) returned 1 [0080.273] FindNextFileW (in: hFindFile=0x381e00, lpFindFileData=0x31e38c | out: lpFindFileData=0x31e38c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xdc6a8300, ftCreationTime.dwHighDateTime=0x1d5e82a, ftLastAccessTime.dwLowDateTime=0xdc6a8300, ftLastAccessTime.dwHighDateTime=0x1d5e82a, ftLastWriteTime.dwLowDateTime=0xdc6a8300, ftLastWriteTime.dwHighDateTime=0x1d5e82a, nFileSizeHigh=0x0, nFileSizeLow=0xaa5, dwReserved0=0x0, dwReserved1=0x0, cFileName="3YAya5eDcy-F-cb-1Rdx.lnk", cAlternateFileName="3YAYA5~1.LNK")) returned 1 [0080.273] FindNextFileW (in: hFindFile=0x381e00, lpFindFileData=0x31e38c | out: lpFindFileData=0x31e38c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xdbd22b00, ftCreationTime.dwHighDateTime=0x1d5e82a, ftLastAccessTime.dwLowDateTime=0xdd242e40, ftLastAccessTime.dwHighDateTime=0x1d5e82a, ftLastWriteTime.dwLowDateTime=0xdd268fa0, ftLastWriteTime.dwHighDateTime=0x1d5e82a, nFileSizeHigh=0x0, nFileSizeLow=0x13b0, dwReserved0=0x0, dwReserved1=0x0, cFileName="405ySziuaxMlV m5JO.lnk", cAlternateFileName="405YSZ~1.LNK")) returned 1 [0080.273] FindNextFileW (in: hFindFile=0x381e00, lpFindFileData=0x31e38c | out: lpFindFileData=0x31e38c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xdb566380, ftCreationTime.dwHighDateTime=0x1d5e82a, ftLastAccessTime.dwLowDateTime=0xdd621200, ftLastAccessTime.dwHighDateTime=0x1d5e82a, ftLastWriteTime.dwLowDateTime=0xdd621200, ftLastWriteTime.dwHighDateTime=0x1d5e82a, nFileSizeHigh=0x0, nFileSizeLow=0x13cd, dwReserved0=0x0, dwReserved1=0x0, cFileName="5mEc8mcZ9jfK.lnk", cAlternateFileName="5MEC8M~1.LNK")) returned 1 [0080.273] FindNextFileW (in: hFindFile=0x381e00, lpFindFileData=0x31e38c | out: lpFindFileData=0x31e38c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xdb8ac1c0, ftCreationTime.dwHighDateTime=0x1d5e82a, ftLastAccessTime.dwLowDateTime=0xdd516860, ftLastAccessTime.dwHighDateTime=0x1d5e82a, ftLastWriteTime.dwLowDateTime=0xdd516860, ftLastWriteTime.dwHighDateTime=0x1d5e82a, nFileSizeHigh=0x0, nFileSizeLow=0x937, dwReserved0=0x0, dwReserved1=0x0, cFileName="5QUm8R.lnk", cAlternateFileName="")) returned 1 [0080.273] FindNextFileW (in: hFindFile=0x381e00, lpFindFileData=0x31e38c | out: lpFindFileData=0x31e38c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xdc5516a0, ftCreationTime.dwHighDateTime=0x1d5e82a, ftLastAccessTime.dwLowDateTime=0xdc5516a0, ftLastAccessTime.dwHighDateTime=0x1d5e82a, ftLastWriteTime.dwLowDateTime=0xdc577800, ftLastWriteTime.dwHighDateTime=0x1d5e82a, nFileSizeHigh=0x0, nFileSizeLow=0x248, dwReserved0=0x0, dwReserved1=0x0, cFileName="6b4NNrp5 bh.lnk", cAlternateFileName="6B4NNR~1.LNK")) returned 1 [0080.274] FindNextFileW (in: hFindFile=0x381e00, lpFindFileData=0x31e38c | out: lpFindFileData=0x31e38c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xdd458180, ftCreationTime.dwHighDateTime=0x1d5e82a, ftLastAccessTime.dwLowDateTime=0xdd458180, ftLastAccessTime.dwHighDateTime=0x1d5e82a, ftLastWriteTime.dwLowDateTime=0xdd458180, ftLastWriteTime.dwHighDateTime=0x1d5e82a, nFileSizeHigh=0x0, nFileSizeLow=0x2205, dwReserved0=0x0, dwReserved1=0x0, cFileName="6PH LQIJcfFOT3.lnk", cAlternateFileName="6PHLQI~1.LNK")) returned 1 [0080.274] FindNextFileW (in: hFindFile=0x381e00, lpFindFileData=0x31e38c | out: lpFindFileData=0x31e38c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xdd66d4c0, ftCreationTime.dwHighDateTime=0x1d5e82a, ftLastAccessTime.dwLowDateTime=0xdd66d4c0, ftLastAccessTime.dwHighDateTime=0x1d5e82a, ftLastWriteTime.dwLowDateTime=0xdd66d4c0, ftLastWriteTime.dwHighDateTime=0x1d5e82a, nFileSizeHigh=0x0, nFileSizeLow=0x2df, dwReserved0=0x0, dwReserved1=0x0, cFileName="6wgIYQzJ1lqH2MW.lnk", cAlternateFileName="6WGIYQ~1.LNK")) returned 1 [0080.274] FindNextFileW (in: hFindFile=0x381e00, lpFindFileData=0x31e38c | out: lpFindFileData=0x31e38c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xdc33c360, ftCreationTime.dwHighDateTime=0x1d5e82a, ftLastAccessTime.dwLowDateTime=0xdd647360, ftLastAccessTime.dwHighDateTime=0x1d5e82a, ftLastWriteTime.dwLowDateTime=0xdd647360, ftLastWriteTime.dwHighDateTime=0x1d5e82a, nFileSizeHigh=0x0, nFileSizeLow=0x1496, dwReserved0=0x0, dwReserved1=0x0, cFileName="6ygdYcRuO9.lnk", cAlternateFileName="6YGDYC~1.LNK")) returned 1 [0080.274] FindNextFileW (in: hFindFile=0x381e00, lpFindFileData=0x31e38c | out: lpFindFileData=0x31e38c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xdce187c0, ftCreationTime.dwHighDateTime=0x1d5e82a, ftLastAccessTime.dwLowDateTime=0xdce187c0, ftLastAccessTime.dwHighDateTime=0x1d5e82a, ftLastWriteTime.dwLowDateTime=0xdce187c0, ftLastWriteTime.dwHighDateTime=0x1d5e82a, nFileSizeHigh=0x0, nFileSizeLow=0x232, dwReserved0=0x0, dwReserved1=0x0, cFileName="81Hibdy.lnk", cAlternateFileName="")) returned 1 [0080.274] FindNextFileW (in: hFindFile=0x381e00, lpFindFileData=0x31e38c | out: lpFindFileData=0x31e38c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xdcbb71c0, ftCreationTime.dwHighDateTime=0x1d5e82a, ftLastAccessTime.dwLowDateTime=0xdcbb71c0, ftLastAccessTime.dwHighDateTime=0x1d5e82a, ftLastWriteTime.dwLowDateTime=0xdcbb71c0, ftLastWriteTime.dwHighDateTime=0x1d5e82a, nFileSizeHigh=0x0, nFileSizeLow=0x1474, dwReserved0=0x0, dwReserved1=0x0, cFileName="84yfCS6st5K5-66QqbH.flv.lnk", cAlternateFileName="84YFCS~1.LNK")) returned 1 [0080.274] FindNextFileW (in: hFindFile=0x381e00, lpFindFileData=0x31e38c | out: lpFindFileData=0x31e38c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xdbe2d4a0, ftCreationTime.dwHighDateTime=0x1d5e82a, ftLastAccessTime.dwLowDateTime=0xdd34d7e0, ftLastAccessTime.dwHighDateTime=0x1d5e82a, ftLastWriteTime.dwLowDateTime=0xdd373940, ftLastWriteTime.dwHighDateTime=0x1d5e82a, nFileSizeHigh=0x0, nFileSizeLow=0x98c, dwReserved0=0x0, dwReserved1=0x0, cFileName="8mSM9XyQ3XQ6.lnk", cAlternateFileName="8MSM9X~1.LNK")) returned 1 [0080.274] FindNextFileW (in: hFindFile=0x381e00, lpFindFileData=0x31e38c | out: lpFindFileData=0x31e38c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xdc6821a0, ftCreationTime.dwHighDateTime=0x1d5e82a, ftLastAccessTime.dwLowDateTime=0xdc6821a0, ftLastAccessTime.dwHighDateTime=0x1d5e82a, ftLastWriteTime.dwLowDateTime=0xdc6821a0, ftLastWriteTime.dwHighDateTime=0x1d5e82a, nFileSizeHigh=0x0, nFileSizeLow=0xa7a, dwReserved0=0x0, dwReserved1=0x0, cFileName="8y 4TOn5NPzM-8ECXs7.lnk", cAlternateFileName="8Y4TON~1.LNK")) returned 1 [0080.274] FindNextFileW (in: hFindFile=0x381e00, lpFindFileData=0x31e38c | out: lpFindFileData=0x31e38c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xdd777e60, ftCreationTime.dwHighDateTime=0x1d5e82a, ftLastAccessTime.dwLowDateTime=0xdd777e60, ftLastAccessTime.dwHighDateTime=0x1d5e82a, ftLastWriteTime.dwLowDateTime=0xdd777e60, ftLastWriteTime.dwHighDateTime=0x1d5e82a, nFileSizeHigh=0x0, nFileSizeLow=0x2b9, dwReserved0=0x0, dwReserved1=0x0, cFileName="aAze.lnk", cAlternateFileName="")) returned 1 [0080.275] FindNextFileW (in: hFindFile=0x381e00, lpFindFileData=0x31e38c | out: lpFindFileData=0x31e38c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xdcc4f740, ftCreationTime.dwHighDateTime=0x1d5e82a, ftLastAccessTime.dwLowDateTime=0xdcc4f740, ftLastAccessTime.dwHighDateTime=0x1d5e82a, ftLastWriteTime.dwLowDateTime=0xdcc4f740, ftLastWriteTime.dwHighDateTime=0x1d5e82a, nFileSizeHigh=0x0, nFileSizeLow=0xf7e, dwReserved0=0x0, dwReserved1=0x0, cFileName="Ab6fh6TA.lnk", cAlternateFileName="")) returned 1 [0080.275] FindNextFileW (in: hFindFile=0x381e00, lpFindFileData=0x31e38c | out: lpFindFileData=0x31e38c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xdd53c9c0, ftCreationTime.dwHighDateTime=0x1d5e82a, ftLastAccessTime.dwLowDateTime=0xdd53c9c0, ftLastAccessTime.dwHighDateTime=0x1d5e82a, ftLastWriteTime.dwLowDateTime=0xdd53c9c0, ftLastWriteTime.dwHighDateTime=0x1d5e82a, nFileSizeHigh=0x0, nFileSizeLow=0x1bf1, dwReserved0=0x0, dwReserved1=0x0, cFileName="aF BVNmJ_Atzx_a.lnk", cAlternateFileName="AFBVNM~1.LNK")) returned 1 [0080.275] FindNextFileW (in: hFindFile=0x381e00, lpFindFileData=0x31e38c | out: lpFindFileData=0x31e38c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xdc6821a0, ftCreationTime.dwHighDateTime=0x1d5e82a, ftLastAccessTime.dwLowDateTime=0xdc6821a0, ftLastAccessTime.dwHighDateTime=0x1d5e82a, ftLastWriteTime.dwLowDateTime=0xdc6821a0, ftLastWriteTime.dwHighDateTime=0x1d5e82a, nFileSizeHigh=0x0, nFileSizeLow=0x309, dwReserved0=0x0, dwReserved1=0x0, cFileName="atwN3-g8oPk6T3g.lnk", cAlternateFileName="ATWN3-~1.LNK")) returned 1 [0080.275] FindNextFileW (in: hFindFile=0x381e00, lpFindFileData=0x31e38c | out: lpFindFileData=0x31e38c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x28cff640, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x4bce65c0, ftLastAccessTime.dwHighDateTime=0x1d2fad7, ftLastWriteTime.dwLowDateTime=0x4bce65c0, ftLastWriteTime.dwHighDateTime=0x1d2fad7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="AutomaticDestinations", cAlternateFileName="AUTOMA~1")) returned 1 [0080.275] FindNextFileW (in: hFindFile=0x381e00, lpFindFileData=0x31e38c | out: lpFindFileData=0x31e38c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xdc871380, ftCreationTime.dwHighDateTime=0x1d5e82a, ftLastAccessTime.dwLowDateTime=0xdc871380, ftLastAccessTime.dwHighDateTime=0x1d5e82a, ftLastWriteTime.dwLowDateTime=0xdc871380, ftLastWriteTime.dwHighDateTime=0x1d5e82a, nFileSizeHigh=0x0, nFileSizeLow=0xef2, dwReserved0=0x0, dwReserved1=0x0, cFileName="avs0VLVQy.mkv.lnk", cAlternateFileName="AVS0VL~1.LNK")) returned 1 [0080.275] FindNextFileW (in: hFindFile=0x381e00, lpFindFileData=0x31e38c | out: lpFindFileData=0x31e38c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xdd399aa0, ftCreationTime.dwHighDateTime=0x1d5e82a, ftLastAccessTime.dwLowDateTime=0xdd399aa0, ftLastAccessTime.dwHighDateTime=0x1d5e82a, ftLastWriteTime.dwLowDateTime=0xdd399aa0, ftLastWriteTime.dwHighDateTime=0x1d5e82a, nFileSizeHigh=0x0, nFileSizeLow=0x15d1, dwReserved0=0x0, dwReserved1=0x0, cFileName="awnCnvVOwwTZEf.lnk", cAlternateFileName="AWNCNV~1.LNK")) returned 1 [0080.275] FindNextFileW (in: hFindFile=0x381e00, lpFindFileData=0x31e38c | out: lpFindFileData=0x31e38c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xdd2b5260, ftCreationTime.dwHighDateTime=0x1d5e82a, ftLastAccessTime.dwLowDateTime=0xdd2b5260, ftLastAccessTime.dwHighDateTime=0x1d5e82a, ftLastWriteTime.dwLowDateTime=0xdd2b5260, ftLastWriteTime.dwHighDateTime=0x1d5e82a, nFileSizeHigh=0x0, nFileSizeLow=0xa05, dwReserved0=0x0, dwReserved1=0x0, cFileName="BbAIdQK9.lnk", cAlternateFileName="")) returned 1 [0080.275] FindNextFileW (in: hFindFile=0x381e00, lpFindFileData=0x31e38c | out: lpFindFileData=0x31e38c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xdd3bfc00, ftCreationTime.dwHighDateTime=0x1d5e82a, ftLastAccessTime.dwLowDateTime=0xdd3bfc00, ftLastAccessTime.dwHighDateTime=0x1d5e82a, ftLastWriteTime.dwLowDateTime=0xdd3bfc00, ftLastWriteTime.dwHighDateTime=0x1d5e82a, nFileSizeHigh=0x0, nFileSizeLow=0x305, dwReserved0=0x0, dwReserved1=0x0, cFileName="bErvzuwNUg.lnk", cAlternateFileName="BERVZU~1.LNK")) returned 1 [0080.276] FindNextFileW (in: hFindFile=0x381e00, lpFindFileData=0x31e38c | out: lpFindFileData=0x31e38c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xdcbdd320, ftCreationTime.dwHighDateTime=0x1d5e82a, ftLastAccessTime.dwLowDateTime=0xdcbdd320, ftLastAccessTime.dwHighDateTime=0x1d5e82a, ftLastWriteTime.dwLowDateTime=0xdcbdd320, ftLastWriteTime.dwHighDateTime=0x1d5e82a, nFileSizeHigh=0x0, nFileSizeLow=0x3ed, dwReserved0=0x0, dwReserved1=0x0, cFileName="C3gHw-4vc.lnk", cAlternateFileName="C3GHW-~1.LNK")) returned 1 [0080.276] FindNextFileW (in: hFindFile=0x381e00, lpFindFileData=0x31e38c | out: lpFindFileData=0x31e38c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xdcd33f80, ftCreationTime.dwHighDateTime=0x1d5e82a, ftLastAccessTime.dwLowDateTime=0xdcd33f80, ftLastAccessTime.dwHighDateTime=0x1d5e82a, ftLastWriteTime.dwLowDateTime=0xdcd33f80, ftLastWriteTime.dwHighDateTime=0x1d5e82a, nFileSizeHigh=0x0, nFileSizeLow=0xfec, dwReserved0=0x0, dwReserved1=0x0, cFileName="cBq3YiZO5mBKpb7HK3.lnk", cAlternateFileName="CBQ3YI~1.LNK")) returned 1 [0080.276] FindNextFileW (in: hFindFile=0x381e00, lpFindFileData=0x31e38c | out: lpFindFileData=0x31e38c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xdd6b9780, ftCreationTime.dwHighDateTime=0x1d5e82a, ftLastAccessTime.dwLowDateTime=0xdd6b9780, ftLastAccessTime.dwHighDateTime=0x1d5e82a, ftLastWriteTime.dwLowDateTime=0xdd6b9780, ftLastWriteTime.dwHighDateTime=0x1d5e82a, nFileSizeHigh=0x0, nFileSizeLow=0x1a9a, dwReserved0=0x0, dwReserved1=0x0, cFileName="CUcIWhXZcN.lnk", cAlternateFileName="CUCIWH~1.LNK")) returned 1 [0080.276] FindNextFileW (in: hFindFile=0x381e00, lpFindFileData=0x31e38c | out: lpFindFileData=0x31e38c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x28cff640, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0xce5f0760, ftLastAccessTime.dwHighDateTime=0x1d4d596, ftLastWriteTime.dwLowDateTime=0xce5f0760, ftLastWriteTime.dwHighDateTime=0x1d4d596, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="CustomDestinations", cAlternateFileName="CUSTOM~1")) returned 1 [0080.276] FindNextFileW (in: hFindFile=0x381e00, lpFindFileData=0x31e38c | out: lpFindFileData=0x31e38c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xdd516860, ftCreationTime.dwHighDateTime=0x1d5e82a, ftLastAccessTime.dwLowDateTime=0xdd516860, ftLastAccessTime.dwHighDateTime=0x1d5e82a, ftLastWriteTime.dwLowDateTime=0xdd516860, ftLastWriteTime.dwHighDateTime=0x1d5e82a, nFileSizeHigh=0x0, nFileSizeLow=0x1b5f, dwReserved0=0x0, dwReserved1=0x0, cFileName="d6 dLC jkU9.lnk", cAlternateFileName="D6DLCJ~1.LNK")) returned 1 [0080.276] FindNextFileW (in: hFindFile=0x381e00, lpFindFileData=0x31e38c | out: lpFindFileData=0x31e38c*(dwFileAttributes=0x6, ftCreationTime.dwLowDateTime=0x28d97bc0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28d97bc0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x2d1e12e0, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x1b0, dwReserved0=0x0, dwReserved1=0x0, cFileName="desktop.ini", cAlternateFileName="")) returned 1 [0080.276] FindNextFileW (in: hFindFile=0x381e00, lpFindFileData=0x31e38c | out: lpFindFileData=0x31e38c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xdd268fa0, ftCreationTime.dwHighDateTime=0x1d5e82a, ftLastAccessTime.dwLowDateTime=0xdd268fa0, ftLastAccessTime.dwHighDateTime=0x1d5e82a, ftLastWriteTime.dwLowDateTime=0xdd268fa0, ftLastWriteTime.dwHighDateTime=0x1d5e82a, nFileSizeHigh=0x0, nFileSizeLow=0x1613, dwReserved0=0x0, dwReserved1=0x0, cFileName="dF-VG_t_vGxzSuUsEnW3.lnk", cAlternateFileName="DF-VG_~1.LNK")) returned 1 [0080.276] FindNextFileW (in: hFindFile=0x381e00, lpFindFileData=0x31e38c | out: lpFindFileData=0x31e38c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xdd647360, ftCreationTime.dwHighDateTime=0x1d5e82a, ftLastAccessTime.dwLowDateTime=0xdd647360, ftLastAccessTime.dwHighDateTime=0x1d5e82a, ftLastWriteTime.dwLowDateTime=0xdd647360, ftLastWriteTime.dwHighDateTime=0x1d5e82a, nFileSizeHigh=0x0, nFileSizeLow=0x1b5f, dwReserved0=0x0, dwReserved1=0x0, cFileName="DfXgi8mluBJ.lnk", cAlternateFileName="DFXGI8~1.LNK")) returned 1 [0080.276] FindNextFileW (in: hFindFile=0x381e00, lpFindFileData=0x31e38c | out: lpFindFileData=0x31e38c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xdb40f720, ftCreationTime.dwHighDateTime=0x1d5e82a, ftLastAccessTime.dwLowDateTime=0xdd72bba0, ftLastAccessTime.dwHighDateTime=0x1d5e82a, ftLastWriteTime.dwLowDateTime=0xdd72bba0, ftLastWriteTime.dwHighDateTime=0x1d5e82a, nFileSizeHigh=0x0, nFileSizeLow=0x13fc, dwReserved0=0x0, dwReserved1=0x0, cFileName="E5yqHX_c 22spYoHS.lnk", cAlternateFileName="E5YQHX~1.LNK")) returned 1 [0080.277] FindNextFileW (in: hFindFile=0x381e00, lpFindFileData=0x31e38c | out: lpFindFileData=0x31e38c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xdcd33f80, ftCreationTime.dwHighDateTime=0x1d5e82a, ftLastAccessTime.dwLowDateTime=0xdcd33f80, ftLastAccessTime.dwHighDateTime=0x1d5e82a, ftLastWriteTime.dwLowDateTime=0xdcd5a0e0, ftLastWriteTime.dwHighDateTime=0x1d5e82a, nFileSizeHigh=0x0, nFileSizeLow=0x1ba1, dwReserved0=0x0, dwReserved1=0x0, cFileName="eEZ0I5zK3ZKi8gNeQ.lnk", cAlternateFileName="EEZ0I5~1.LNK")) returned 1 [0080.277] FindNextFileW (in: hFindFile=0x381e00, lpFindFileData=0x31e38c | out: lpFindFileData=0x31e38c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xdd588c80, ftCreationTime.dwHighDateTime=0x1d5e82a, ftLastAccessTime.dwLowDateTime=0xdd588c80, ftLastAccessTime.dwHighDateTime=0x1d5e82a, ftLastWriteTime.dwLowDateTime=0xdd588c80, ftLastWriteTime.dwHighDateTime=0x1d5e82a, nFileSizeHigh=0x0, nFileSizeLow=0xff3, dwReserved0=0x0, dwReserved1=0x0, cFileName="EfftTM9vyjFXlwqKsjF.lnk", cAlternateFileName="EFFTTM~1.LNK")) returned 1 [0080.277] FindNextFileW (in: hFindFile=0x381e00, lpFindFileData=0x31e38c | out: lpFindFileData=0x31e38c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xdd1384a0, ftCreationTime.dwHighDateTime=0x1d5e82a, ftLastAccessTime.dwLowDateTime=0xdd1384a0, ftLastAccessTime.dwHighDateTime=0x1d5e82a, ftLastWriteTime.dwLowDateTime=0xdd1384a0, ftLastWriteTime.dwHighDateTime=0x1d5e82a, nFileSizeHigh=0x0, nFileSizeLow=0x1580, dwReserved0=0x0, dwReserved1=0x0, cFileName="egNz9w_.lnk", cAlternateFileName="")) returned 1 [0080.277] FindNextFileW (in: hFindFile=0x381e00, lpFindFileData=0x31e38c | out: lpFindFileData=0x31e38c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xdb4f3f60, ftCreationTime.dwHighDateTime=0x1d5e82a, ftLastAccessTime.dwLowDateTime=0xdd751d00, ftLastAccessTime.dwHighDateTime=0x1d5e82a, ftLastWriteTime.dwLowDateTime=0xdd751d00, ftLastWriteTime.dwHighDateTime=0x1d5e82a, nFileSizeHigh=0x0, nFileSizeLow=0xe5c, dwReserved0=0x0, dwReserved1=0x0, cFileName="eStdF.lnk", cAlternateFileName="")) returned 1 [0080.277] FindNextFileW (in: hFindFile=0x381e00, lpFindFileData=0x31e38c | out: lpFindFileData=0x31e38c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xdc6ce460, ftCreationTime.dwHighDateTime=0x1d5e82a, ftLastAccessTime.dwLowDateTime=0xdc6ce460, ftLastAccessTime.dwHighDateTime=0x1d5e82a, ftLastWriteTime.dwLowDateTime=0xdc6ce460, ftLastWriteTime.dwHighDateTime=0x1d5e82a, nFileSizeHigh=0x0, nFileSizeLow=0xa8f, dwReserved0=0x0, dwReserved1=0x0, cFileName="ewcSZPE2Uke_ysh8Kk.lnk", cAlternateFileName="EWCSZP~1.LNK")) returned 1 [0080.277] FindNextFileW (in: hFindFile=0x381e00, lpFindFileData=0x31e38c | out: lpFindFileData=0x31e38c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xdcdcc500, ftCreationTime.dwHighDateTime=0x1d5e82a, ftLastAccessTime.dwLowDateTime=0xdcdcc500, ftLastAccessTime.dwHighDateTime=0x1d5e82a, ftLastWriteTime.dwLowDateTime=0xdcdcc500, ftLastWriteTime.dwHighDateTime=0x1d5e82a, nFileSizeHigh=0x0, nFileSizeLow=0x1b8d, dwReserved0=0x0, dwReserved1=0x0, cFileName="EYB4.lnk", cAlternateFileName="")) returned 1 [0080.277] FindNextFileW (in: hFindFile=0x381e00, lpFindFileData=0x31e38c | out: lpFindFileData=0x31e38c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xdcc295e0, ftCreationTime.dwHighDateTime=0x1d5e82a, ftLastAccessTime.dwLowDateTime=0xdcc295e0, ftLastAccessTime.dwHighDateTime=0x1d5e82a, ftLastWriteTime.dwLowDateTime=0xdcc295e0, ftLastWriteTime.dwHighDateTime=0x1d5e82a, nFileSizeHigh=0x0, nFileSizeLow=0xa42, dwReserved0=0x0, dwReserved1=0x0, cFileName="F3qq-TdX0v1.lnk", cAlternateFileName="F3QQ-T~1.LNK")) returned 1 [0080.277] FindNextFileW (in: hFindFile=0x381e00, lpFindFileData=0x31e38c | out: lpFindFileData=0x31e38c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xdbfaa260, ftCreationTime.dwHighDateTime=0x1d5e82a, ftLastAccessTime.dwLowDateTime=0xdbfaa260, ftLastAccessTime.dwHighDateTime=0x1d5e82a, ftLastWriteTime.dwLowDateTime=0xdbfaa260, ftLastWriteTime.dwHighDateTime=0x1d5e82a, nFileSizeHigh=0x0, nFileSizeLow=0x3dc, dwReserved0=0x0, dwReserved1=0x0, cFileName="FG2Vgd.flv.lnk", cAlternateFileName="FG2VGD~1.LNK")) returned 1 [0080.277] FindNextFileW (in: hFindFile=0x381e00, lpFindFileData=0x31e38c | out: lpFindFileData=0x31e38c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xdd562b20, ftCreationTime.dwHighDateTime=0x1d5e82a, ftLastAccessTime.dwLowDateTime=0xdd562b20, ftLastAccessTime.dwHighDateTime=0x1d5e82a, ftLastWriteTime.dwLowDateTime=0xdd562b20, ftLastWriteTime.dwHighDateTime=0x1d5e82a, nFileSizeHigh=0x0, nFileSizeLow=0x15d1, dwReserved0=0x0, dwReserved1=0x0, cFileName="FlnuIIzR61ZMgS.lnk", cAlternateFileName="FLNUII~1.LNK")) returned 1 [0080.277] FindNextFileW (in: hFindFile=0x381e00, lpFindFileData=0x31e38c | out: lpFindFileData=0x31e38c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xdbf84100, ftCreationTime.dwHighDateTime=0x1d5e82a, ftLastAccessTime.dwLowDateTime=0xdd3e5d60, ftLastAccessTime.dwHighDateTime=0x1d5e82a, ftLastWriteTime.dwLowDateTime=0xdd3e5d60, ftLastWriteTime.dwHighDateTime=0x1d5e82a, nFileSizeHigh=0x0, nFileSizeLow=0x202, dwReserved0=0x0, dwReserved1=0x0, cFileName="fo7DC8R1OiqEuI ix.lnk", cAlternateFileName="FO7DC8~1.LNK")) returned 1 [0080.277] FindNextFileW (in: hFindFile=0x381e00, lpFindFileData=0x31e38c | out: lpFindFileData=0x31e38c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xdb292960, ftCreationTime.dwHighDateTime=0x1d5e82a, ftLastAccessTime.dwLowDateTime=0xdd4a4440, ftLastAccessTime.dwHighDateTime=0x1d5e82a, ftLastWriteTime.dwLowDateTime=0xdd4a4440, ftLastWriteTime.dwHighDateTime=0x1d5e82a, nFileSizeHigh=0x0, nFileSizeLow=0x14eb, dwReserved0=0x0, dwReserved1=0x0, cFileName="fs6ZyJDVW7MWb.lnk", cAlternateFileName="FS6ZYJ~1.LNK")) returned 1 [0080.277] FindNextFileW (in: hFindFile=0x381e00, lpFindFileData=0x31e38c | out: lpFindFileData=0x31e38c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xdb58c4e0, ftCreationTime.dwHighDateTime=0x1d5e82a, ftLastAccessTime.dwLowDateTime=0xdb58c4e0, ftLastAccessTime.dwHighDateTime=0x1d5e82a, ftLastWriteTime.dwLowDateTime=0xdb58c4e0, ftLastWriteTime.dwHighDateTime=0x1d5e82a, nFileSizeHigh=0x0, nFileSizeLow=0x1af5, dwReserved0=0x0, dwReserved1=0x0, cFileName="fWvZmodXByr bYeQQ7Y.lnk", cAlternateFileName="FWVZMO~1.LNK")) returned 1 [0080.277] FindNextFileW (in: hFindFile=0x381e00, lpFindFileData=0x31e38c | out: lpFindFileData=0x31e38c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xdd47e2e0, ftCreationTime.dwHighDateTime=0x1d5e82a, ftLastAccessTime.dwLowDateTime=0xdd47e2e0, ftLastAccessTime.dwHighDateTime=0x1d5e82a, ftLastWriteTime.dwLowDateTime=0xdd47e2e0, ftLastWriteTime.dwHighDateTime=0x1d5e82a, nFileSizeHigh=0x0, nFileSizeLow=0x2f4, dwReserved0=0x0, dwReserved1=0x0, cFileName="Fz1uxg4uH8FGJTt.lnk", cAlternateFileName="FZ1UXG~1.LNK")) returned 1 [0080.277] FindNextFileW (in: hFindFile=0x381e00, lpFindFileData=0x31e38c | out: lpFindFileData=0x31e38c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xdd373940, ftCreationTime.dwHighDateTime=0x1d5e82a, ftLastAccessTime.dwLowDateTime=0xdd373940, ftLastAccessTime.dwHighDateTime=0x1d5e82a, ftLastWriteTime.dwLowDateTime=0xdd373940, ftLastWriteTime.dwHighDateTime=0x1d5e82a, nFileSizeHigh=0x0, nFileSizeLow=0x1569, dwReserved0=0x0, dwReserved1=0x0, cFileName="GibSj0Oqv_.lnk", cAlternateFileName="GIBSJ0~1.LNK")) returned 1 [0080.277] FindNextFileW (in: hFindFile=0x381e00, lpFindFileData=0x31e38c | out: lpFindFileData=0x31e38c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xdc7fef60, ftCreationTime.dwHighDateTime=0x1d5e82a, ftLastAccessTime.dwLowDateTime=0xdc7fef60, ftLastAccessTime.dwHighDateTime=0x1d5e82a, ftLastWriteTime.dwLowDateTime=0xdc7fef60, ftLastWriteTime.dwHighDateTime=0x1d5e82a, nFileSizeHigh=0x0, nFileSizeLow=0xaa5, dwReserved0=0x0, dwReserved1=0x0, cFileName="HiHn1FTQ027Hcj vP6d8.lnk", cAlternateFileName="HIHN1F~1.LNK")) returned 1 [0080.277] FindNextFileW (in: hFindFile=0x381e00, lpFindFileData=0x31e38c | out: lpFindFileData=0x31e38c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xdd3bfc00, ftCreationTime.dwHighDateTime=0x1d5e82a, ftLastAccessTime.dwLowDateTime=0xdd3bfc00, ftLastAccessTime.dwHighDateTime=0x1d5e82a, ftLastWriteTime.dwLowDateTime=0xdd3bfc00, ftLastWriteTime.dwHighDateTime=0x1d5e82a, nFileSizeHigh=0x0, nFileSizeLow=0xa79, dwReserved0=0x0, dwReserved1=0x0, cFileName="HS_jtO INeCAdLtO.lnk", cAlternateFileName="HS_JTO~1.LNK")) returned 1 [0080.277] FindNextFileW (in: hFindFile=0x381e00, lpFindFileData=0x31e38c | out: lpFindFileData=0x31e38c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xdd432020, ftCreationTime.dwHighDateTime=0x1d5e82a, ftLastAccessTime.dwLowDateTime=0xdd432020, ftLastAccessTime.dwHighDateTime=0x1d5e82a, ftLastWriteTime.dwLowDateTime=0xdd432020, ftLastWriteTime.dwHighDateTime=0x1d5e82a, nFileSizeHigh=0x0, nFileSizeLow=0x1566, dwReserved0=0x0, dwReserved1=0x0, cFileName="i8FtK.lnk", cAlternateFileName="")) returned 1 [0080.277] FindNextFileW (in: hFindFile=0x381e00, lpFindFileData=0x31e38c | out: lpFindFileData=0x31e38c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xdd184760, ftCreationTime.dwHighDateTime=0x1d5e82a, ftLastAccessTime.dwLowDateTime=0xdd184760, ftLastAccessTime.dwHighDateTime=0x1d5e82a, ftLastWriteTime.dwLowDateTime=0xdd184760, ftLastWriteTime.dwHighDateTime=0x1d5e82a, nFileSizeHigh=0x0, nFileSizeLow=0x145d, dwReserved0=0x0, dwReserved1=0x0, cFileName="IU5aJXql.lnk", cAlternateFileName="")) returned 1 [0080.277] FindNextFileW (in: hFindFile=0x381e00, lpFindFileData=0x31e38c | out: lpFindFileData=0x31e38c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xdd5fb0a0, ftCreationTime.dwHighDateTime=0x1d5e82a, ftLastAccessTime.dwLowDateTime=0xdd5fb0a0, ftLastAccessTime.dwHighDateTime=0x1d5e82a, ftLastWriteTime.dwLowDateTime=0xdd5fb0a0, ftLastWriteTime.dwHighDateTime=0x1d5e82a, nFileSizeHigh=0x0, nFileSizeLow=0x3ed, dwReserved0=0x0, dwReserved1=0x0, cFileName="iv9kxoY1h.lnk", cAlternateFileName="IV9KXO~1.LNK")) returned 1 [0080.277] FindNextFileW (in: hFindFile=0x381e00, lpFindFileData=0x31e38c | out: lpFindFileData=0x31e38c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xdca142a0, ftCreationTime.dwHighDateTime=0x1d5e82a, ftLastAccessTime.dwLowDateTime=0xdca142a0, ftLastAccessTime.dwHighDateTime=0x1d5e82a, ftLastWriteTime.dwLowDateTime=0xdca142a0, ftLastWriteTime.dwHighDateTime=0x1d5e82a, nFileSizeHigh=0x0, nFileSizeLow=0x14b2, dwReserved0=0x0, dwReserved1=0x0, cFileName="j rWKaz2b-64YTGN.lnk", cAlternateFileName="JRWKAZ~1.LNK")) returned 1 [0080.277] FindNextFileW (in: hFindFile=0x381e00, lpFindFileData=0x31e38c | out: lpFindFileData=0x31e38c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xdbd48c60, ftCreationTime.dwHighDateTime=0x1d5e82a, ftLastAccessTime.dwLowDateTime=0xdbd48c60, ftLastAccessTime.dwHighDateTime=0x1d5e82a, ftLastWriteTime.dwLowDateTime=0xdbd48c60, ftLastWriteTime.dwHighDateTime=0x1d5e82a, nFileSizeHigh=0x0, nFileSizeLow=0x275, dwReserved0=0x0, dwReserved1=0x0, cFileName="j_g3ZRLUMjKwy4 0Ihg.lnk", cAlternateFileName="J_G3ZR~1.LNK")) returned 1 [0080.277] FindNextFileW (in: hFindFile=0x381e00, lpFindFileData=0x31e38c | out: lpFindFileData=0x31e38c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xdc5516a0, ftCreationTime.dwHighDateTime=0x1d5e82a, ftLastAccessTime.dwLowDateTime=0xdc5516a0, ftLastAccessTime.dwHighDateTime=0x1d5e82a, ftLastWriteTime.dwLowDateTime=0xdc5516a0, ftLastWriteTime.dwHighDateTime=0x1d5e82a, nFileSizeHigh=0x0, nFileSizeLow=0xedc, dwReserved0=0x0, dwReserved1=0x0, cFileName="k0j at2.flv.lnk", cAlternateFileName="K0JAT2~1.LNK")) returned 1 [0080.278] FindNextFileW (in: hFindFile=0x381e00, lpFindFileData=0x31e38c | out: lpFindFileData=0x31e38c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xdd0079a0, ftCreationTime.dwHighDateTime=0x1d5e82a, ftLastAccessTime.dwLowDateTime=0xdd0079a0, ftLastAccessTime.dwHighDateTime=0x1d5e82a, ftLastWriteTime.dwLowDateTime=0xdd0079a0, ftLastWriteTime.dwHighDateTime=0x1d5e82a, nFileSizeHigh=0x0, nFileSizeLow=0x15a0, dwReserved0=0x0, dwReserved1=0x0, cFileName="KaunNs4TVi5V7PIurI.ots.lnk", cAlternateFileName="KAUNNS~1.LNK")) returned 1 [0080.278] FindNextFileW (in: hFindFile=0x381e00, lpFindFileData=0x31e38c | out: lpFindFileData=0x31e38c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xdbbf2000, ftCreationTime.dwHighDateTime=0x1d5e82a, ftLastAccessTime.dwLowDateTime=0xdbbf2000, ftLastAccessTime.dwHighDateTime=0x1d5e82a, ftLastWriteTime.dwLowDateTime=0xdbbf2000, ftLastWriteTime.dwHighDateTime=0x1d5e82a, nFileSizeHigh=0x0, nFileSizeLow=0x1bea, dwReserved0=0x0, dwReserved1=0x0, cFileName="kpbUV nhoxZNIL.lnk", cAlternateFileName="KPBUVN~1.LNK")) returned 1 [0080.278] FindNextFileW (in: hFindFile=0x381e00, lpFindFileData=0x31e38c | out: lpFindFileData=0x31e38c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xdd242e40, ftCreationTime.dwHighDateTime=0x1d5e82a, ftLastAccessTime.dwLowDateTime=0xdd242e40, ftLastAccessTime.dwHighDateTime=0x1d5e82a, ftLastWriteTime.dwLowDateTime=0xdd242e40, ftLastWriteTime.dwHighDateTime=0x1d5e82a, nFileSizeHigh=0x0, nFileSizeLow=0x275, dwReserved0=0x0, dwReserved1=0x0, cFileName="LajwuWOfmL7z35P7ILh_.lnk", cAlternateFileName="LAJWUW~1.LNK")) returned 1 [0080.278] FindNextFileW (in: hFindFile=0x381e00, lpFindFileData=0x31e38c | out: lpFindFileData=0x31e38c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xdc3624c0, ftCreationTime.dwHighDateTime=0x1d5e82a, ftLastAccessTime.dwLowDateTime=0xdd66d4c0, ftLastAccessTime.dwHighDateTime=0x1d5e82a, ftLastWriteTime.dwLowDateTime=0xdd66d4c0, ftLastWriteTime.dwHighDateTime=0x1d5e82a, nFileSizeHigh=0x0, nFileSizeLow=0x1d5, dwReserved0=0x0, dwReserved1=0x0, cFileName="lCnlTJ-G.lnk", cAlternateFileName="")) returned 1 [0080.278] FindNextFileW (in: hFindFile=0x381e00, lpFindFileData=0x31e38c | out: lpFindFileData=0x31e38c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xdc446d00, ftCreationTime.dwHighDateTime=0x1d5e82a, ftLastAccessTime.dwLowDateTime=0xdd5fb0a0, ftLastAccessTime.dwHighDateTime=0x1d5e82a, ftLastWriteTime.dwLowDateTime=0xdd5fb0a0, ftLastWriteTime.dwHighDateTime=0x1d5e82a, nFileSizeHigh=0x0, nFileSizeLow=0x9da, dwReserved0=0x0, dwReserved1=0x0, cFileName="mcdNsT5RVFSVyld.lnk", cAlternateFileName="MCDNST~1.LNK")) returned 1 [0080.278] FindNextFileW (in: hFindFile=0x381e00, lpFindFileData=0x31e38c | out: lpFindFileData=0x31e38c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xdbe2d4a0, ftCreationTime.dwHighDateTime=0x1d5e82a, ftLastAccessTime.dwLowDateTime=0xdbe2d4a0, ftLastAccessTime.dwHighDateTime=0x1d5e82a, ftLastWriteTime.dwLowDateTime=0xdbe2d4a0, ftLastWriteTime.dwHighDateTime=0x1d5e82a, nFileSizeHigh=0x0, nFileSizeLow=0x41f, dwReserved0=0x0, dwReserved1=0x0, cFileName="McRkdzYB9JBSM2hjqEG.flv.lnk", cAlternateFileName="MCRKDZ~1.LNK")) returned 1 [0080.278] FindNextFileW (in: hFindFile=0x381e00, lpFindFileData=0x31e38c | out: lpFindFileData=0x31e38c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xdb540220, ftCreationTime.dwHighDateTime=0x1d5e82a, ftLastAccessTime.dwLowDateTime=0xdd6df8e0, ftLastAccessTime.dwHighDateTime=0x1d5e82a, ftLastWriteTime.dwLowDateTime=0xdd6df8e0, ftLastWriteTime.dwHighDateTime=0x1d5e82a, nFileSizeHigh=0x0, nFileSizeLow=0xf55, dwReserved0=0x0, dwReserved1=0x0, cFileName="MqHlcYZXc1ykd8m-7zLx.lnk", cAlternateFileName="MQHLCY~1.LNK")) returned 1 [0080.278] FindNextFileW (in: hFindFile=0x381e00, lpFindFileData=0x31e38c | out: lpFindFileData=0x31e38c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xdcda63a0, ftCreationTime.dwHighDateTime=0x1d5e82a, ftLastAccessTime.dwLowDateTime=0xdcda63a0, ftLastAccessTime.dwHighDateTime=0x1d5e82a, ftLastWriteTime.dwLowDateTime=0xdcda63a0, ftLastWriteTime.dwHighDateTime=0x1d5e82a, nFileSizeHigh=0x0, nFileSizeLow=0xa4d, dwReserved0=0x0, dwReserved1=0x0, cFileName="MVUshvijtjHU.lnk", cAlternateFileName="MVUSHV~1.LNK")) returned 1 [0080.278] FindNextFileW (in: hFindFile=0x381e00, lpFindFileData=0x31e38c | out: lpFindFileData=0x31e38c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xdcd0de20, ftCreationTime.dwHighDateTime=0x1d5e82a, ftLastAccessTime.dwLowDateTime=0xdd705a40, ftLastAccessTime.dwHighDateTime=0x1d5e82a, ftLastWriteTime.dwLowDateTime=0xdd705a40, ftLastWriteTime.dwHighDateTime=0x1d5e82a, nFileSizeHigh=0x0, nFileSizeLow=0x52a, dwReserved0=0x0, dwReserved1=0x0, cFileName="My Music.lnk", cAlternateFileName="MYMUSI~1.LNK")) returned 1 [0080.278] FindNextFileW (in: hFindFile=0x381e00, lpFindFileData=0x31e38c | out: lpFindFileData=0x31e38c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xdba02e20, ftCreationTime.dwHighDateTime=0x1d5e82a, ftLastAccessTime.dwLowDateTime=0xdd693620, ftLastAccessTime.dwHighDateTime=0x1d5e82a, ftLastWriteTime.dwLowDateTime=0xdd693620, ftLastWriteTime.dwHighDateTime=0x1d5e82a, nFileSizeHigh=0x0, nFileSizeLow=0x54f, dwReserved0=0x0, dwReserved1=0x0, cFileName="My Pictures.lnk", cAlternateFileName="MYPICT~1.LNK")) returned 1 [0080.278] FindNextFileW (in: hFindFile=0x381e00, lpFindFileData=0x31e38c | out: lpFindFileData=0x31e38c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xdb0c98e0, ftCreationTime.dwHighDateTime=0x1d5e82a, ftLastAccessTime.dwLowDateTime=0xdd6b9780, ftLastAccessTime.dwHighDateTime=0x1d5e82a, ftLastWriteTime.dwLowDateTime=0xdd6b9780, ftLastWriteTime.dwHighDateTime=0x1d5e82a, nFileSizeHigh=0x0, nFileSizeLow=0x539, dwReserved0=0x0, dwReserved1=0x0, cFileName="My Videos.lnk", cAlternateFileName="MYVIDE~1.LNK")) returned 1 [0080.278] FindNextFileW (in: hFindFile=0x381e00, lpFindFileData=0x31e38c | out: lpFindFileData=0x31e38c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xdc33c360, ftCreationTime.dwHighDateTime=0x1d5e82a, ftLastAccessTime.dwLowDateTime=0xdc33c360, ftLastAccessTime.dwHighDateTime=0x1d5e82a, ftLastWriteTime.dwLowDateTime=0xdc33c360, ftLastWriteTime.dwHighDateTime=0x1d5e82a, nFileSizeHigh=0x0, nFileSizeLow=0x1b42, dwReserved0=0x0, dwReserved1=0x0, cFileName="Otujad-E.lnk", cAlternateFileName="")) returned 1 [0080.278] FindNextFileW (in: hFindFile=0x381e00, lpFindFileData=0x31e38c | out: lpFindFileData=0x31e38c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xdc6a8300, ftCreationTime.dwHighDateTime=0x1d5e82a, ftLastAccessTime.dwLowDateTime=0xdc6a8300, ftLastAccessTime.dwHighDateTime=0x1d5e82a, ftLastWriteTime.dwLowDateTime=0xdc6a8300, ftLastWriteTime.dwHighDateTime=0x1d5e82a, nFileSizeHigh=0x0, nFileSizeLow=0x1ba3, dwReserved0=0x0, dwReserved1=0x0, cFileName="Oxgbwq.lnk", cAlternateFileName="")) returned 1 [0080.278] FindNextFileW (in: hFindFile=0x381e00, lpFindFileData=0x31e38c | out: lpFindFileData=0x31e38c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xdd2db3c0, ftCreationTime.dwHighDateTime=0x1d5e82a, ftLastAccessTime.dwLowDateTime=0xdd2db3c0, ftLastAccessTime.dwHighDateTime=0x1d5e82a, ftLastWriteTime.dwLowDateTime=0xdd2db3c0, ftLastWriteTime.dwHighDateTime=0x1d5e82a, nFileSizeHigh=0x0, nFileSizeLow=0xa07, dwReserved0=0x0, dwReserved1=0x0, cFileName="phtzJp3.lnk", cAlternateFileName="")) returned 1 [0080.278] FindNextFileW (in: hFindFile=0x381e00, lpFindFileData=0x31e38c | out: lpFindFileData=0x31e38c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xdd5d4f40, ftCreationTime.dwHighDateTime=0x1d5e82a, ftLastAccessTime.dwLowDateTime=0xdd5d4f40, ftLastAccessTime.dwHighDateTime=0x1d5e82a, ftLastWriteTime.dwLowDateTime=0xdd5d4f40, ftLastWriteTime.dwHighDateTime=0x1d5e82a, nFileSizeHigh=0x0, nFileSizeLow=0x232, dwReserved0=0x0, dwReserved1=0x0, cFileName="PlzXFM1.lnk", cAlternateFileName="")) returned 1 [0080.278] FindNextFileW (in: hFindFile=0x381e00, lpFindFileData=0x31e38c | out: lpFindFileData=0x31e38c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xdbe2d4a0, ftCreationTime.dwHighDateTime=0x1d5e82a, ftLastAccessTime.dwLowDateTime=0xdbe2d4a0, ftLastAccessTime.dwHighDateTime=0x1d5e82a, ftLastWriteTime.dwLowDateTime=0xdbe2d4a0, ftLastWriteTime.dwHighDateTime=0x1d5e82a, nFileSizeHigh=0x0, nFileSizeLow=0xeab, dwReserved0=0x0, dwReserved1=0x0, cFileName="PVyCWCHH.mkv.lnk", cAlternateFileName="PVYCWC~1.LNK")) returned 1 [0080.278] FindNextFileW (in: hFindFile=0x381e00, lpFindFileData=0x31e38c | out: lpFindFileData=0x31e38c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xdce8abe0, ftCreationTime.dwHighDateTime=0x1d5e82a, ftLastAccessTime.dwLowDateTime=0xdce8abe0, ftLastAccessTime.dwHighDateTime=0x1d5e82a, ftLastWriteTime.dwLowDateTime=0xdce8abe0, ftLastWriteTime.dwHighDateTime=0x1d5e82a, nFileSizeHigh=0x0, nFileSizeLow=0x9b3, dwReserved0=0x0, dwReserved1=0x0, cFileName="q-7-UiG.flv.lnk", cAlternateFileName="Q-7-UI~1.LNK")) returned 1 [0080.278] FindNextFileW (in: hFindFile=0x381e00, lpFindFileData=0x31e38c | out: lpFindFileData=0x31e38c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xdd0ec1e0, ftCreationTime.dwHighDateTime=0x1d5e82a, ftLastAccessTime.dwLowDateTime=0xdd53c9c0, ftLastAccessTime.dwHighDateTime=0x1d5e82a, ftLastWriteTime.dwLowDateTime=0xdd53c9c0, ftLastWriteTime.dwHighDateTime=0x1d5e82a, nFileSizeHigh=0x0, nFileSizeLow=0xeba, dwReserved0=0x0, dwReserved1=0x0, cFileName="qAXggmD1LKlgDc4Js.lnk", cAlternateFileName="QAXGGM~1.LNK")) returned 1 [0080.278] FindNextFileW (in: hFindFile=0x381e00, lpFindFileData=0x31e38c | out: lpFindFileData=0x31e38c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xdd0079a0, ftCreationTime.dwHighDateTime=0x1d5e82a, ftLastAccessTime.dwLowDateTime=0xdd373940, ftLastAccessTime.dwHighDateTime=0x1d5e82a, ftLastWriteTime.dwLowDateTime=0xdd373940, ftLastWriteTime.dwHighDateTime=0x1d5e82a, nFileSizeHigh=0x0, nFileSizeLow=0xf2d, dwReserved0=0x0, dwReserved1=0x0, cFileName="QIviB1J8S42yLfp.lnk", cAlternateFileName="QIVIB1~1.LNK")) returned 1 [0080.279] FindNextFileW (in: hFindFile=0x381e00, lpFindFileData=0x31e38c | out: lpFindFileData=0x31e38c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xdc127020, ftCreationTime.dwHighDateTime=0x1d5e82a, ftLastAccessTime.dwLowDateTime=0xdc127020, ftLastAccessTime.dwHighDateTime=0x1d5e82a, ftLastWriteTime.dwLowDateTime=0xdc127020, ftLastWriteTime.dwHighDateTime=0x1d5e82a, nFileSizeHigh=0x0, nFileSizeLow=0x239, dwReserved0=0x0, dwReserved1=0x0, cFileName="QKe_6XpG.lnk", cAlternateFileName="")) returned 1 [0080.279] FindNextFileW (in: hFindFile=0x381e00, lpFindFileData=0x31e38c | out: lpFindFileData=0x31e38c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xdd3e5d60, ftCreationTime.dwHighDateTime=0x1d5e82a, ftLastAccessTime.dwLowDateTime=0xdd3e5d60, ftLastAccessTime.dwHighDateTime=0x1d5e82a, ftLastWriteTime.dwLowDateTime=0xdd3e5d60, ftLastWriteTime.dwHighDateTime=0x1d5e82a, nFileSizeHigh=0x0, nFileSizeLow=0x248, dwReserved0=0x0, dwReserved1=0x0, cFileName="Qq6wMGqMzL.lnk", cAlternateFileName="QQ6WMG~1.LNK")) returned 1 [0080.279] FindNextFileW (in: hFindFile=0x381e00, lpFindFileData=0x31e38c | out: lpFindFileData=0x31e38c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xdb7edae0, ftCreationTime.dwHighDateTime=0x1d5e82a, ftLastAccessTime.dwLowDateTime=0xdd3e5d60, ftLastAccessTime.dwHighDateTime=0x1d5e82a, ftLastWriteTime.dwLowDateTime=0xdd3e5d60, ftLastWriteTime.dwHighDateTime=0x1d5e82a, nFileSizeHigh=0x0, nFileSizeLow=0xec9, dwReserved0=0x0, dwReserved1=0x0, cFileName="qqLhydztItrIGc3q_E.lnk", cAlternateFileName="QQLHYD~1.LNK")) returned 1 [0080.279] FindNextFileW (in: hFindFile=0x381e00, lpFindFileData=0x31e38c | out: lpFindFileData=0x31e38c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xdcd5a0e0, ftCreationTime.dwHighDateTime=0x1d5e82a, ftLastAccessTime.dwLowDateTime=0xdcd5a0e0, ftLastAccessTime.dwHighDateTime=0x1d5e82a, ftLastWriteTime.dwLowDateTime=0xdcd5a0e0, ftLastWriteTime.dwHighDateTime=0x1d5e82a, nFileSizeHigh=0x0, nFileSizeLow=0x3e1, dwReserved0=0x0, dwReserved1=0x0, cFileName="qVjfxVr.mkv.lnk", cAlternateFileName="QVJFXV~1.LNK")) returned 1 [0080.279] FindNextFileW (in: hFindFile=0x381e00, lpFindFileData=0x31e38c | out: lpFindFileData=0x31e38c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xdd112340, ftCreationTime.dwHighDateTime=0x1d5e82a, ftLastAccessTime.dwLowDateTime=0xdd112340, ftLastAccessTime.dwHighDateTime=0x1d5e82a, ftLastWriteTime.dwLowDateTime=0xdd112340, ftLastWriteTime.dwHighDateTime=0x1d5e82a, nFileSizeHigh=0x0, nFileSizeLow=0xa64, dwReserved0=0x0, dwReserved1=0x0, cFileName="qXc5CfQ1VI 7A-Et3.lnk", cAlternateFileName="QXC5CF~1.LNK")) returned 1 [0080.279] FindNextFileW (in: hFindFile=0x381e00, lpFindFileData=0x31e38c | out: lpFindFileData=0x31e38c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xdca3a400, ftCreationTime.dwHighDateTime=0x1d5e82a, ftLastAccessTime.dwLowDateTime=0xdd705a40, ftLastAccessTime.dwHighDateTime=0x1d5e82a, ftLastWriteTime.dwLowDateTime=0xdd705a40, ftLastWriteTime.dwHighDateTime=0x1d5e82a, nFileSizeHigh=0x0, nFileSizeLow=0xe82, dwReserved0=0x0, dwReserved1=0x0, cFileName="qZqQJke.lnk", cAlternateFileName="")) returned 1 [0080.279] FindNextFileW (in: hFindFile=0x381e00, lpFindFileData=0x31e38c | out: lpFindFileData=0x31e38c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xdba28f80, ftCreationTime.dwHighDateTime=0x1d5e82a, ftLastAccessTime.dwLowDateTime=0xdd47e2e0, ftLastAccessTime.dwHighDateTime=0x1d5e82a, ftLastWriteTime.dwLowDateTime=0xdd47e2e0, ftLastWriteTime.dwHighDateTime=0x1d5e82a, nFileSizeHigh=0x0, nFileSizeLow=0x1a85, dwReserved0=0x0, dwReserved1=0x0, cFileName="r M9y9TQ8L-H.lnk", cAlternateFileName="RM9Y9T~1.LNK")) returned 1 [0080.279] FindNextFileW (in: hFindFile=0x381e00, lpFindFileData=0x31e38c | out: lpFindFileData=0x31e38c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xdcb91060, ftCreationTime.dwHighDateTime=0x1d5e82a, ftLastAccessTime.dwLowDateTime=0xdcb91060, ftLastAccessTime.dwHighDateTime=0x1d5e82a, ftLastWriteTime.dwLowDateTime=0xdcb91060, ftLastWriteTime.dwHighDateTime=0x1d5e82a, nFileSizeHigh=0x0, nFileSizeLow=0x2ca, dwReserved0=0x0, dwReserved1=0x0, cFileName="r7hjDl5.lnk", cAlternateFileName="")) returned 1 [0080.279] FindNextFileW (in: hFindFile=0x381e00, lpFindFileData=0x31e38c | out: lpFindFileData=0x31e38c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xdc6ce460, ftCreationTime.dwHighDateTime=0x1d5e82a, ftLastAccessTime.dwLowDateTime=0xdc6ce460, ftLastAccessTime.dwHighDateTime=0x1d5e82a, ftLastWriteTime.dwLowDateTime=0xdc6ce460, ftLastWriteTime.dwHighDateTime=0x1d5e82a, nFileSizeHigh=0x0, nFileSizeLow=0x1a0e, dwReserved0=0x0, dwReserved1=0x0, cFileName="r8aQr.lnk", cAlternateFileName="")) returned 1 [0080.279] FindNextFileW (in: hFindFile=0x381e00, lpFindFileData=0x31e38c | out: lpFindFileData=0x31e38c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xdd2b5260, ftCreationTime.dwHighDateTime=0x1d5e82a, ftLastAccessTime.dwLowDateTime=0xdd2b5260, ftLastAccessTime.dwHighDateTime=0x1d5e82a, ftLastWriteTime.dwLowDateTime=0xdd2b5260, ftLastWriteTime.dwHighDateTime=0x1d5e82a, nFileSizeHigh=0x0, nFileSizeLow=0xedc, dwReserved0=0x0, dwReserved1=0x0, cFileName="R9y47OQ.mkv.lnk", cAlternateFileName="R9Y47O~1.LNK")) returned 1 [0080.279] FindNextFileW (in: hFindFile=0x381e00, lpFindFileData=0x31e38c | out: lpFindFileData=0x31e38c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xdb64abc0, ftCreationTime.dwHighDateTime=0x1d5e82a, ftLastAccessTime.dwLowDateTime=0xdd693620, ftLastAccessTime.dwHighDateTime=0x1d5e82a, ftLastWriteTime.dwLowDateTime=0xdd693620, ftLastWriteTime.dwHighDateTime=0x1d5e82a, nFileSizeHigh=0x0, nFileSizeLow=0x303, dwReserved0=0x0, dwReserved1=0x0, cFileName="Roaming.lnk", cAlternateFileName="")) returned 1 [0080.279] FindNextFileW (in: hFindFile=0x381e00, lpFindFileData=0x31e38c | out: lpFindFileData=0x31e38c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xdd399aa0, ftCreationTime.dwHighDateTime=0x1d5e82a, ftLastAccessTime.dwLowDateTime=0xdd399aa0, ftLastAccessTime.dwHighDateTime=0x1d5e82a, ftLastWriteTime.dwLowDateTime=0xdd399aa0, ftLastWriteTime.dwHighDateTime=0x1d5e82a, nFileSizeHigh=0x0, nFileSizeLow=0xf6b, dwReserved0=0x0, dwReserved1=0x0, cFileName="rQ40SPQ.lnk", cAlternateFileName="")) returned 1 [0080.279] FindNextFileW (in: hFindFile=0x381e00, lpFindFileData=0x31e38c | out: lpFindFileData=0x31e38c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xdc871380, ftCreationTime.dwHighDateTime=0x1d5e82a, ftLastAccessTime.dwLowDateTime=0xdc871380, ftLastAccessTime.dwHighDateTime=0x1d5e82a, ftLastWriteTime.dwLowDateTime=0xdc871380, ftLastWriteTime.dwHighDateTime=0x1d5e82a, nFileSizeHigh=0x0, nFileSizeLow=0xf47, dwReserved0=0x0, dwReserved1=0x0, cFileName="RQIFP0AFaRZryGtQ.mkv.lnk", cAlternateFileName="RQIFP0~1.LNK")) returned 1 [0080.279] FindNextFileW (in: hFindFile=0x381e00, lpFindFileData=0x31e38c | out: lpFindFileData=0x31e38c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xdd1f6b80, ftCreationTime.dwHighDateTime=0x1d5e82a, ftLastAccessTime.dwLowDateTime=0xdd1f6b80, ftLastAccessTime.dwHighDateTime=0x1d5e82a, ftLastWriteTime.dwLowDateTime=0xdd1f6b80, ftLastWriteTime.dwHighDateTime=0x1d5e82a, nFileSizeHigh=0x0, nFileSizeLow=0xa2c, dwReserved0=0x0, dwReserved1=0x0, cFileName="ShYapy659.lnk", cAlternateFileName="SHYAPY~1.LNK")) returned 1 [0080.279] FindNextFileW (in: hFindFile=0x381e00, lpFindFileData=0x31e38c | out: lpFindFileData=0x31e38c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xdd72bba0, ftCreationTime.dwHighDateTime=0x1d5e82a, ftLastAccessTime.dwLowDateTime=0xdd72bba0, ftLastAccessTime.dwHighDateTime=0x1d5e82a, ftLastWriteTime.dwLowDateTime=0xdd72bba0, ftLastWriteTime.dwHighDateTime=0x1d5e82a, nFileSizeHigh=0x0, nFileSizeLow=0x1a54, dwReserved0=0x0, dwReserved1=0x0, cFileName="SRp8.lnk", cAlternateFileName="")) returned 1 [0080.279] FindNextFileW (in: hFindFile=0x381e00, lpFindFileData=0x31e38c | out: lpFindFileData=0x31e38c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xdcdf2660, ftCreationTime.dwHighDateTime=0x1d5e82a, ftLastAccessTime.dwLowDateTime=0xdcdf2660, ftLastAccessTime.dwHighDateTime=0x1d5e82a, ftLastWriteTime.dwLowDateTime=0xdcdf2660, ftLastWriteTime.dwHighDateTime=0x1d5e82a, nFileSizeHigh=0x0, nFileSizeLow=0x1b37, dwReserved0=0x0, dwReserved1=0x0, cFileName="ste8yr_-iA.ots.lnk", cAlternateFileName="STE8YR~1.LNK")) returned 1 [0080.279] FindNextFileW (in: hFindFile=0x381e00, lpFindFileData=0x31e38c | out: lpFindFileData=0x31e38c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xdd4ca5a0, ftCreationTime.dwHighDateTime=0x1d5e82a, ftLastAccessTime.dwLowDateTime=0xdd4ca5a0, ftLastAccessTime.dwHighDateTime=0x1d5e82a, ftLastWriteTime.dwLowDateTime=0xdd4ca5a0, ftLastWriteTime.dwHighDateTime=0x1d5e82a, nFileSizeHigh=0x0, nFileSizeLow=0x23e, dwReserved0=0x0, dwReserved1=0x0, cFileName="sXaTFSe1U.lnk", cAlternateFileName="SXATFS~1.LNK")) returned 1 [0080.279] FindNextFileW (in: hFindFile=0x381e00, lpFindFileData=0x31e38c | out: lpFindFileData=0x31e38c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xdc3624c0, ftCreationTime.dwHighDateTime=0x1d5e82a, ftLastAccessTime.dwLowDateTime=0xdc3624c0, ftLastAccessTime.dwHighDateTime=0x1d5e82a, ftLastWriteTime.dwLowDateTime=0xdc3624c0, ftLastWriteTime.dwHighDateTime=0x1d5e82a, nFileSizeHigh=0x0, nFileSizeLow=0x2fd, dwReserved0=0x0, dwReserved1=0x0, cFileName="sxtRyYUIDz-oVBFJk2R_.lnk", cAlternateFileName="SXTRYY~1.LNK")) returned 1 [0080.279] FindNextFileW (in: hFindFile=0x381e00, lpFindFileData=0x31e38c | out: lpFindFileData=0x31e38c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xdd21cce0, ftCreationTime.dwHighDateTime=0x1d5e82a, ftLastAccessTime.dwLowDateTime=0xdd21cce0, ftLastAccessTime.dwHighDateTime=0x1d5e82a, ftLastWriteTime.dwLowDateTime=0xdd21cce0, ftLastWriteTime.dwHighDateTime=0x1d5e82a, nFileSizeHigh=0x0, nFileSizeLow=0xa84, dwReserved0=0x0, dwReserved1=0x0, cFileName="sylRmbaPWvbAwXpKH.lnk", cAlternateFileName="SYLRMB~1.LNK")) returned 1 [0080.279] FindNextFileW (in: hFindFile=0x381e00, lpFindFileData=0x31e38c | out: lpFindFileData=0x31e38c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xdca866c0, ftCreationTime.dwHighDateTime=0x1d5e82a, ftLastAccessTime.dwLowDateTime=0xdca866c0, ftLastAccessTime.dwHighDateTime=0x1d5e82a, ftLastWriteTime.dwLowDateTime=0xdca866c0, ftLastWriteTime.dwHighDateTime=0x1d5e82a, nFileSizeHigh=0x0, nFileSizeLow=0x1575, dwReserved0=0x0, dwReserved1=0x0, cFileName="T9 LZd.lnk", cAlternateFileName="T9LZD~1.LNK")) returned 1 [0080.279] FindNextFileW (in: hFindFile=0x381e00, lpFindFileData=0x31e38c | out: lpFindFileData=0x31e38c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xdc446d00, ftCreationTime.dwHighDateTime=0x1d5e82a, ftLastAccessTime.dwLowDateTime=0xdc446d00, ftLastAccessTime.dwHighDateTime=0x1d5e82a, ftLastWriteTime.dwLowDateTime=0xdc446d00, ftLastWriteTime.dwHighDateTime=0x1d5e82a, nFileSizeHigh=0x0, nFileSizeLow=0xfac, dwReserved0=0x0, dwReserved1=0x0, cFileName="tDKPWNeB04vfmhzT6s.lnk", cAlternateFileName="TDKPWN~1.LNK")) returned 1 [0080.279] FindNextFileW (in: hFindFile=0x381e00, lpFindFileData=0x31e38c | out: lpFindFileData=0x31e38c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xdb8f8480, ftCreationTime.dwHighDateTime=0x1d5e82a, ftLastAccessTime.dwLowDateTime=0xdb8f8480, ftLastAccessTime.dwHighDateTime=0x1d5e82a, ftLastWriteTime.dwLowDateTime=0xdb8f8480, ftLastWriteTime.dwHighDateTime=0x1d5e82a, nFileSizeHigh=0x0, nFileSizeLow=0x1adf, dwReserved0=0x0, dwReserved1=0x0, cFileName="TKmol_O0z8oXNmmMF.lnk", cAlternateFileName="TKMOL_~1.LNK")) returned 1 [0080.280] FindNextFileW (in: hFindFile=0x381e00, lpFindFileData=0x31e38c | out: lpFindFileData=0x31e38c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xdc65c040, ftCreationTime.dwHighDateTime=0x1d5e82a, ftLastAccessTime.dwLowDateTime=0xdc65c040, ftLastAccessTime.dwHighDateTime=0x1d5e82a, ftLastWriteTime.dwLowDateTime=0xdc65c040, ftLastWriteTime.dwHighDateTime=0x1d5e82a, nFileSizeHigh=0x0, nFileSizeLow=0xa6e, dwReserved0=0x0, dwReserved1=0x0, cFileName="Tub7RsstsPF5bhl.lnk", cAlternateFileName="TUB7RS~1.LNK")) returned 1 [0080.280] FindNextFileW (in: hFindFile=0x381e00, lpFindFileData=0x31e38c | out: lpFindFileData=0x31e38c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xdcdcc500, ftCreationTime.dwHighDateTime=0x1d5e82a, ftLastAccessTime.dwLowDateTime=0xdcdcc500, ftLastAccessTime.dwHighDateTime=0x1d5e82a, ftLastWriteTime.dwLowDateTime=0xdcdcc500, ftLastWriteTime.dwHighDateTime=0x1d5e82a, nFileSizeHigh=0x0, nFileSizeLow=0x266, dwReserved0=0x0, dwReserved1=0x0, cFileName="TuLuB1aKsHS-_cYIE.lnk", cAlternateFileName="TULUB1~1.LNK")) returned 1 [0080.280] FindNextFileW (in: hFindFile=0x381e00, lpFindFileData=0x31e38c | out: lpFindFileData=0x31e38c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xdbb0d7c0, ftCreationTime.dwHighDateTime=0x1d5e82a, ftLastAccessTime.dwLowDateTime=0xdd5d4f40, ftLastAccessTime.dwHighDateTime=0x1d5e82a, ftLastWriteTime.dwLowDateTime=0xdd5d4f40, ftLastWriteTime.dwHighDateTime=0x1d5e82a, nFileSizeHigh=0x0, nFileSizeLow=0xa06, dwReserved0=0x0, dwReserved1=0x0, cFileName="tZ02_j2HoUAEzAXcbrvF.lnk", cAlternateFileName="TZ02_J~1.LNK")) returned 1 [0080.280] FindNextFileW (in: hFindFile=0x381e00, lpFindFileData=0x31e38c | out: lpFindFileData=0x31e38c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xdc127020, ftCreationTime.dwHighDateTime=0x1d5e82a, ftLastAccessTime.dwLowDateTime=0xdc127020, ftLastAccessTime.dwHighDateTime=0x1d5e82a, ftLastWriteTime.dwLowDateTime=0xdc127020, ftLastWriteTime.dwHighDateTime=0x1d5e82a, nFileSizeHigh=0x0, nFileSizeLow=0xf1c, dwReserved0=0x0, dwReserved1=0x0, cFileName="UI0YnTvRe3FtpToWZZU.mkv.lnk", cAlternateFileName="UI0YNT~1.LNK")) returned 1 [0080.280] FindNextFileW (in: hFindFile=0x381e00, lpFindFileData=0x31e38c | out: lpFindFileData=0x31e38c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xdce8abe0, ftCreationTime.dwHighDateTime=0x1d5e82a, ftLastAccessTime.dwLowDateTime=0xdce8abe0, ftLastAccessTime.dwHighDateTime=0x1d5e82a, ftLastWriteTime.dwLowDateTime=0xdce8abe0, ftLastWriteTime.dwHighDateTime=0x1d5e82a, nFileSizeHigh=0x0, nFileSizeLow=0x415, dwReserved0=0x0, dwReserved1=0x0, cFileName="UjUJtBCLIKM-5dz9N.mkv.lnk", cAlternateFileName="UJUJTB~1.LNK")) returned 1 [0080.280] FindNextFileW (in: hFindFile=0x381e00, lpFindFileData=0x31e38c | out: lpFindFileData=0x31e38c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xdd5fb0a0, ftCreationTime.dwHighDateTime=0x1d5e82a, ftLastAccessTime.dwLowDateTime=0xdd5fb0a0, ftLastAccessTime.dwHighDateTime=0x1d5e82a, ftLastWriteTime.dwLowDateTime=0xdd5fb0a0, ftLastWriteTime.dwHighDateTime=0x1d5e82a, nFileSizeHigh=0x0, nFileSizeLow=0xf50, dwReserved0=0x0, dwReserved1=0x0, cFileName="ur1m5T0qt.lnk", cAlternateFileName="UR1M5T~1.LNK")) returned 1 [0080.280] FindNextFileW (in: hFindFile=0x381e00, lpFindFileData=0x31e38c | out: lpFindFileData=0x31e38c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xdd5d4f40, ftCreationTime.dwHighDateTime=0x1d5e82a, ftLastAccessTime.dwLowDateTime=0xdd5d4f40, ftLastAccessTime.dwHighDateTime=0x1d5e82a, ftLastWriteTime.dwLowDateTime=0xdd5d4f40, ftLastWriteTime.dwHighDateTime=0x1d5e82a, nFileSizeHigh=0x0, nFileSizeLow=0xf55, dwReserved0=0x0, dwReserved1=0x0, cFileName="utBP6.lnk", cAlternateFileName="")) returned 1 [0080.280] FindNextFileW (in: hFindFile=0x381e00, lpFindFileData=0x31e38c | out: lpFindFileData=0x31e38c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xdc7d8e00, ftCreationTime.dwHighDateTime=0x1d5e82a, ftLastAccessTime.dwLowDateTime=0xdc7d8e00, ftLastAccessTime.dwHighDateTime=0x1d5e82a, ftLastWriteTime.dwLowDateTime=0xdc7d8e00, ftLastWriteTime.dwHighDateTime=0x1d5e82a, nFileSizeHigh=0x0, nFileSizeLow=0x410, dwReserved0=0x0, dwReserved1=0x0, cFileName="Uv _kLMMgs1_MElw.flv.lnk", cAlternateFileName="UV_KLM~1.LNK")) returned 1 [0080.280] FindNextFileW (in: hFindFile=0x381e00, lpFindFileData=0x31e38c | out: lpFindFileData=0x31e38c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xdd40bec0, ftCreationTime.dwHighDateTime=0x1d5e82a, ftLastAccessTime.dwLowDateTime=0xdd40bec0, ftLastAccessTime.dwHighDateTime=0x1d5e82a, ftLastWriteTime.dwLowDateTime=0xdd40bec0, ftLastWriteTime.dwHighDateTime=0x1d5e82a, nFileSizeHigh=0x0, nFileSizeLow=0xf94, dwReserved0=0x0, dwReserved1=0x0, cFileName="Uvon-ej5Wh.lnk", cAlternateFileName="UVON-E~1.LNK")) returned 1 [0080.280] FindNextFileW (in: hFindFile=0x381e00, lpFindFileData=0x31e38c | out: lpFindFileData=0x31e38c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xdcc295e0, ftCreationTime.dwHighDateTime=0x1d5e82a, ftLastAccessTime.dwLowDateTime=0xdcc295e0, ftLastAccessTime.dwHighDateTime=0x1d5e82a, ftLastWriteTime.dwLowDateTime=0xdcc295e0, ftLastWriteTime.dwHighDateTime=0x1d5e82a, nFileSizeHigh=0x0, nFileSizeLow=0x232, dwReserved0=0x0, dwReserved1=0x0, cFileName="UVT6TQK.lnk", cAlternateFileName="")) returned 1 [0080.280] FindNextFileW (in: hFindFile=0x381e00, lpFindFileData=0x31e38c | out: lpFindFileData=0x31e38c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xdcc295e0, ftCreationTime.dwHighDateTime=0x1d5e82a, ftLastAccessTime.dwLowDateTime=0xdcc295e0, ftLastAccessTime.dwHighDateTime=0x1d5e82a, ftLastWriteTime.dwLowDateTime=0xdcc295e0, ftLastWriteTime.dwHighDateTime=0x1d5e82a, nFileSizeHigh=0x0, nFileSizeLow=0x22d, dwReserved0=0x0, dwReserved1=0x0, cFileName="UXStKO.lnk", cAlternateFileName="")) returned 1 [0080.280] FindNextFileW (in: hFindFile=0x381e00, lpFindFileData=0x31e38c | out: lpFindFileData=0x31e38c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xdba4f0e0, ftCreationTime.dwHighDateTime=0x1d5e82a, ftLastAccessTime.dwLowDateTime=0xdba4f0e0, ftLastAccessTime.dwHighDateTime=0x1d5e82a, ftLastWriteTime.dwLowDateTime=0xdba4f0e0, ftLastWriteTime.dwHighDateTime=0x1d5e82a, nFileSizeHigh=0x0, nFileSizeLow=0x401, dwReserved0=0x0, dwReserved1=0x0, cFileName="uZhRJalfyk_WN.lnk", cAlternateFileName="UZHRJA~1.LNK")) returned 1 [0080.280] FindNextFileW (in: hFindFile=0x381e00, lpFindFileData=0x31e38c | out: lpFindFileData=0x31e38c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xdb8f8480, ftCreationTime.dwHighDateTime=0x1d5e82a, ftLastAccessTime.dwLowDateTime=0xdb8f8480, ftLastAccessTime.dwHighDateTime=0x1d5e82a, ftLastWriteTime.dwLowDateTime=0xdb8f8480, ftLastWriteTime.dwHighDateTime=0x1d5e82a, nFileSizeHigh=0x0, nFileSizeLow=0xa00, dwReserved0=0x0, dwReserved1=0x0, cFileName="v62Jp.lnk", cAlternateFileName="")) returned 1 [0080.280] FindNextFileW (in: hFindFile=0x381e00, lpFindFileData=0x31e38c | out: lpFindFileData=0x31e38c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xdce64a80, ftCreationTime.dwHighDateTime=0x1d5e82a, ftLastAccessTime.dwLowDateTime=0xdce64a80, ftLastAccessTime.dwHighDateTime=0x1d5e82a, ftLastWriteTime.dwLowDateTime=0xdce64a80, ftLastWriteTime.dwHighDateTime=0x1d5e82a, nFileSizeHigh=0x0, nFileSizeLow=0x3dc, dwReserved0=0x0, dwReserved1=0x0, cFileName="V7vkSt.lnk", cAlternateFileName="")) returned 1 [0080.280] FindNextFileW (in: hFindFile=0x381e00, lpFindFileData=0x31e38c | out: lpFindFileData=0x31e38c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xdb351040, ftCreationTime.dwHighDateTime=0x1d5e82a, ftLastAccessTime.dwLowDateTime=0xdd4f0700, ftLastAccessTime.dwHighDateTime=0x1d5e82a, ftLastWriteTime.dwLowDateTime=0xdd4f0700, ftLastWriteTime.dwHighDateTime=0x1d5e82a, nFileSizeHigh=0x0, nFileSizeLow=0x996, dwReserved0=0x0, dwReserved1=0x0, cFileName="VPUJVJbaoT0AA1L.lnk", cAlternateFileName="VPUJVJ~1.LNK")) returned 1 [0080.280] FindNextFileW (in: hFindFile=0x381e00, lpFindFileData=0x31e38c | out: lpFindFileData=0x31e38c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xdd751d00, ftCreationTime.dwHighDateTime=0x1d5e82a, ftLastAccessTime.dwLowDateTime=0xdd751d00, ftLastAccessTime.dwHighDateTime=0x1d5e82a, ftLastWriteTime.dwLowDateTime=0xdd751d00, ftLastWriteTime.dwHighDateTime=0x1d5e82a, nFileSizeHigh=0x0, nFileSizeLow=0x13f0, dwReserved0=0x0, dwReserved1=0x0, cFileName="VRQcjXR.flv.lnk", cAlternateFileName="VRQCJX~1.LNK")) returned 1 [0080.280] FindNextFileW (in: hFindFile=0x381e00, lpFindFileData=0x31e38c | out: lpFindFileData=0x31e38c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xdd242e40, ftCreationTime.dwHighDateTime=0x1d5e82a, ftLastAccessTime.dwLowDateTime=0xdd242e40, ftLastAccessTime.dwHighDateTime=0x1d5e82a, ftLastWriteTime.dwLowDateTime=0xdd242e40, ftLastWriteTime.dwHighDateTime=0x1d5e82a, nFileSizeHigh=0x0, nFileSizeLow=0x2c6, dwReserved0=0x0, dwReserved1=0x0, cFileName="vZhdjERKcp.lnk", cAlternateFileName="VZHDJE~1.LNK")) returned 1 [0080.280] FindNextFileW (in: hFindFile=0x381e00, lpFindFileData=0x31e38c | out: lpFindFileData=0x31e38c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xdc5516a0, ftCreationTime.dwHighDateTime=0x1d5e82a, ftLastAccessTime.dwLowDateTime=0xdd2b5260, ftLastAccessTime.dwHighDateTime=0x1d5e82a, ftLastWriteTime.dwLowDateTime=0xdd2b5260, ftLastWriteTime.dwHighDateTime=0x1d5e82a, nFileSizeHigh=0x0, nFileSizeLow=0x9b8, dwReserved0=0x0, dwReserved1=0x0, cFileName="vzk6K51PQW9jyiRf.lnk", cAlternateFileName="VZK6K5~1.LNK")) returned 1 [0080.280] FindNextFileW (in: hFindFile=0x381e00, lpFindFileData=0x31e38c | out: lpFindFileData=0x31e38c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xdcb91060, ftCreationTime.dwHighDateTime=0x1d5e82a, ftLastAccessTime.dwLowDateTime=0xdd777e60, ftLastAccessTime.dwHighDateTime=0x1d5e82a, ftLastWriteTime.dwLowDateTime=0xdd777e60, ftLastWriteTime.dwHighDateTime=0x1d5e82a, nFileSizeHigh=0x0, nFileSizeLow=0x1e4, dwReserved0=0x0, dwReserved1=0x0, cFileName="W2JtfG_38gA.lnk", cAlternateFileName="W2JTFG~1.LNK")) returned 1 [0080.280] FindNextFileW (in: hFindFile=0x381e00, lpFindFileData=0x31e38c | out: lpFindFileData=0x31e38c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xdbb33920, ftCreationTime.dwHighDateTime=0x1d5e82a, ftLastAccessTime.dwLowDateTime=0xdd1aa8c0, ftLastAccessTime.dwHighDateTime=0x1d5e82a, ftLastWriteTime.dwLowDateTime=0xdd1aa8c0, ftLastWriteTime.dwHighDateTime=0x1d5e82a, nFileSizeHigh=0x0, nFileSizeLow=0xe0e, dwReserved0=0x0, dwReserved1=0x0, cFileName="WAwfTxwVF7xfXscX.lnk", cAlternateFileName="WAWFTX~1.LNK")) returned 1 [0080.280] FindNextFileW (in: hFindFile=0x381e00, lpFindFileData=0x31e38c | out: lpFindFileData=0x31e38c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xdce3e920, ftCreationTime.dwHighDateTime=0x1d5e82a, ftLastAccessTime.dwLowDateTime=0xdce3e920, ftLastAccessTime.dwHighDateTime=0x1d5e82a, ftLastWriteTime.dwLowDateTime=0xdce3e920, ftLastWriteTime.dwHighDateTime=0x1d5e82a, nFileSizeHigh=0x0, nFileSizeLow=0xa9a, dwReserved0=0x0, dwReserved1=0x0, cFileName="WHE1DQO_Ps0NUHD5IUA.lnk", cAlternateFileName="WHE1DQ~1.LNK")) returned 1 [0080.280] FindNextFileW (in: hFindFile=0x381e00, lpFindFileData=0x31e38c | out: lpFindFileData=0x31e38c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xdbba5d40, ftCreationTime.dwHighDateTime=0x1d5e82a, ftLastAccessTime.dwLowDateTime=0xdbba5d40, ftLastAccessTime.dwHighDateTime=0x1d5e82a, ftLastWriteTime.dwLowDateTime=0xdbba5d40, ftLastWriteTime.dwHighDateTime=0x1d5e82a, nFileSizeHigh=0x0, nFileSizeLow=0x15bb, dwReserved0=0x0, dwReserved1=0x0, cFileName="wmGhH6LXjHSc.lnk", cAlternateFileName="WMGHH6~1.LNK")) returned 1 [0080.281] FindNextFileW (in: hFindFile=0x381e00, lpFindFileData=0x31e38c | out: lpFindFileData=0x31e38c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xdd1d0a20, ftCreationTime.dwHighDateTime=0x1d5e82a, ftLastAccessTime.dwLowDateTime=0xdd1d0a20, ftLastAccessTime.dwHighDateTime=0x1d5e82a, ftLastWriteTime.dwLowDateTime=0xdd1d0a20, ftLastWriteTime.dwHighDateTime=0x1d5e82a, nFileSizeHigh=0x0, nFileSizeLow=0x2ef, dwReserved0=0x0, dwReserved1=0x0, cFileName="woIAzWgoxq8m n.lnk", cAlternateFileName="WOIAZW~1.LNK")) returned 1 [0080.281] FindNextFileW (in: hFindFile=0x381e00, lpFindFileData=0x31e38c | out: lpFindFileData=0x31e38c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xdd5aede0, ftCreationTime.dwHighDateTime=0x1d5e82a, ftLastAccessTime.dwLowDateTime=0xdd5aede0, ftLastAccessTime.dwHighDateTime=0x1d5e82a, ftLastWriteTime.dwLowDateTime=0xdd5aede0, ftLastWriteTime.dwHighDateTime=0x1d5e82a, nFileSizeHigh=0x0, nFileSizeLow=0x3e8, dwReserved0=0x0, dwReserved1=0x0, cFileName="WpAlC1uR.lnk", cAlternateFileName="")) returned 1 [0080.281] FindNextFileW (in: hFindFile=0x381e00, lpFindFileData=0x31e38c | out: lpFindFileData=0x31e38c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xdcd80240, ftCreationTime.dwHighDateTime=0x1d5e82a, ftLastAccessTime.dwLowDateTime=0xdcd80240, ftLastAccessTime.dwHighDateTime=0x1d5e82a, ftLastWriteTime.dwLowDateTime=0xdcd80240, ftLastWriteTime.dwHighDateTime=0x1d5e82a, nFileSizeHigh=0x0, nFileSizeLow=0x158f, dwReserved0=0x0, dwReserved1=0x0, cFileName="WUwVH33W.lnk", cAlternateFileName="")) returned 1 [0080.281] FindNextFileW (in: hFindFile=0x381e00, lpFindFileData=0x31e38c | out: lpFindFileData=0x31e38c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xdcdf2660, ftCreationTime.dwHighDateTime=0x1d5e82a, ftLastAccessTime.dwLowDateTime=0xdcdf2660, ftLastAccessTime.dwHighDateTime=0x1d5e82a, ftLastWriteTime.dwLowDateTime=0xdcdf2660, ftLastWriteTime.dwHighDateTime=0x1d5e82a, nFileSizeHigh=0x0, nFileSizeLow=0x3d5, dwReserved0=0x0, dwReserved1=0x0, cFileName="x-WU9.flv.lnk", cAlternateFileName="X-WU9F~1.LNK")) returned 1 [0080.281] FindNextFileW (in: hFindFile=0x381e00, lpFindFileData=0x31e38c | out: lpFindFileData=0x31e38c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xdae42180, ftCreationTime.dwHighDateTime=0x1d5e82a, ftLastAccessTime.dwLowDateTime=0xdd3bfc00, ftLastAccessTime.dwHighDateTime=0x1d5e82a, ftLastWriteTime.dwLowDateTime=0xdd3bfc00, ftLastWriteTime.dwHighDateTime=0x1d5e82a, nFileSizeHigh=0x0, nFileSizeLow=0x1f3, dwReserved0=0x0, dwReserved1=0x0, cFileName="xhxot_kWSkhA9P.lnk", cAlternateFileName="XHXOT_~1.LNK")) returned 1 [0080.281] FindNextFileW (in: hFindFile=0x381e00, lpFindFileData=0x31e38c | out: lpFindFileData=0x31e38c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xdbb59a80, ftCreationTime.dwHighDateTime=0x1d5e82a, ftLastAccessTime.dwLowDateTime=0xdbb59a80, ftLastAccessTime.dwHighDateTime=0x1d5e82a, ftLastWriteTime.dwLowDateTime=0xdbb59a80, ftLastWriteTime.dwHighDateTime=0x1d5e82a, nFileSizeHigh=0x0, nFileSizeLow=0x25c, dwReserved0=0x0, dwReserved1=0x0, cFileName="xi26C-f e26K1XH.lnk", cAlternateFileName="XI26C-~1.LNK")) returned 1 [0080.281] FindNextFileW (in: hFindFile=0x381e00, lpFindFileData=0x31e38c | out: lpFindFileData=0x31e38c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xdca3a400, ftCreationTime.dwHighDateTime=0x1d5e82a, ftLastAccessTime.dwLowDateTime=0xdca3a400, ftLastAccessTime.dwHighDateTime=0x1d5e82a, ftLastWriteTime.dwLowDateTime=0xdca3a400, ftLastWriteTime.dwHighDateTime=0x1d5e82a, nFileSizeHigh=0x0, nFileSizeLow=0x3e8, dwReserved0=0x0, dwReserved1=0x0, cFileName="Xjiv7PmC.lnk", cAlternateFileName="")) returned 1 [0080.281] FindNextFileW (in: hFindFile=0x381e00, lpFindFileData=0x31e38c | out: lpFindFileData=0x31e38c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xdba28f80, ftCreationTime.dwHighDateTime=0x1d5e82a, ftLastAccessTime.dwLowDateTime=0xdba28f80, ftLastAccessTime.dwHighDateTime=0x1d5e82a, ftLastWriteTime.dwLowDateTime=0xdba28f80, ftLastWriteTime.dwHighDateTime=0x1d5e82a, nFileSizeHigh=0x0, nFileSizeLow=0x2217, dwReserved0=0x0, dwReserved1=0x0, cFileName="XQv9HAJ4krDS5PoLDZN.ots.lnk", cAlternateFileName="XQV9HA~1.LNK")) returned 1 [0080.281] FindNextFileW (in: hFindFile=0x381e00, lpFindFileData=0x31e38c | out: lpFindFileData=0x31e38c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xdc8bd640, ftCreationTime.dwHighDateTime=0x1d5e82a, ftLastAccessTime.dwLowDateTime=0xdc8bd640, ftLastAccessTime.dwHighDateTime=0x1d5e82a, ftLastWriteTime.dwLowDateTime=0xdc8bd640, ftLastWriteTime.dwHighDateTime=0x1d5e82a, nFileSizeHigh=0x0, nFileSizeLow=0xa84, dwReserved0=0x0, dwReserved1=0x0, cFileName="xXD95e7i 9JIiSYfn.lnk", cAlternateFileName="XXD95E~1.LNK")) returned 1 [0080.281] FindNextFileW (in: hFindFile=0x381e00, lpFindFileData=0x31e38c | out: lpFindFileData=0x31e38c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xdc7b2ca0, ftCreationTime.dwHighDateTime=0x1d5e82a, ftLastAccessTime.dwLowDateTime=0xdc7b2ca0, ftLastAccessTime.dwHighDateTime=0x1d5e82a, ftLastWriteTime.dwLowDateTime=0xdc7b2ca0, ftLastWriteTime.dwHighDateTime=0x1d5e82a, nFileSizeHigh=0x0, nFileSizeLow=0xf9e, dwReserved0=0x0, dwReserved1=0x0, cFileName="Xzz-K fFe.lnk", cAlternateFileName="XZZ-KF~1.LNK")) returned 1 [0080.281] FindNextFileW (in: hFindFile=0x381e00, lpFindFileData=0x31e38c | out: lpFindFileData=0x31e38c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xdd47e2e0, ftCreationTime.dwHighDateTime=0x1d5e82a, ftLastAccessTime.dwLowDateTime=0xdd47e2e0, ftLastAccessTime.dwHighDateTime=0x1d5e82a, ftLastWriteTime.dwLowDateTime=0xdd4a4440, ftLastWriteTime.dwHighDateTime=0x1d5e82a, nFileSizeHigh=0x0, nFileSizeLow=0x24d, dwReserved0=0x0, dwReserved1=0x0, cFileName="YCXGBLVtV61m.ots.lnk", cAlternateFileName="YCXGBL~1.LNK")) returned 1 [0080.281] FindNextFileW (in: hFindFile=0x381e00, lpFindFileData=0x31e38c | out: lpFindFileData=0x31e38c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xdd705a40, ftCreationTime.dwHighDateTime=0x1d5e82a, ftLastAccessTime.dwLowDateTime=0xdd705a40, ftLastAccessTime.dwHighDateTime=0x1d5e82a, ftLastWriteTime.dwLowDateTime=0xdd705a40, ftLastWriteTime.dwHighDateTime=0x1d5e82a, nFileSizeHigh=0x0, nFileSizeLow=0x1489, dwReserved0=0x0, dwReserved1=0x0, cFileName="YFAmrd4RrOq5.lnk", cAlternateFileName="YFAMRD~1.LNK")) returned 1 [0080.281] FindNextFileW (in: hFindFile=0x381e00, lpFindFileData=0x31e38c | out: lpFindFileData=0x31e38c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xdb91e5e0, ftCreationTime.dwHighDateTime=0x1d5e82a, ftLastAccessTime.dwLowDateTime=0xdb91e5e0, ftLastAccessTime.dwHighDateTime=0x1d5e82a, ftLastWriteTime.dwLowDateTime=0xdb91e5e0, ftLastWriteTime.dwHighDateTime=0x1d5e82a, nFileSizeHigh=0x0, nFileSizeLow=0x3d5, dwReserved0=0x0, dwReserved1=0x0, cFileName="yis5j.mkv.lnk", cAlternateFileName="YIS5JM~1.LNK")) returned 1 [0080.281] FindNextFileW (in: hFindFile=0x381e00, lpFindFileData=0x31e38c | out: lpFindFileData=0x31e38c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xdb13bd00, ftCreationTime.dwHighDateTime=0x1d5e82a, ftLastAccessTime.dwLowDateTime=0xdd53c9c0, ftLastAccessTime.dwHighDateTime=0x1d5e82a, ftLastWriteTime.dwLowDateTime=0xdd53c9c0, ftLastWriteTime.dwHighDateTime=0x1d5e82a, nFileSizeHigh=0x0, nFileSizeLow=0x14d8, dwReserved0=0x0, dwReserved1=0x0, cFileName="ylM2mu-V6E1bfaho.lnk", cAlternateFileName="YLM2MU~1.LNK")) returned 1 [0080.281] FindNextFileW (in: hFindFile=0x381e00, lpFindFileData=0x31e38c | out: lpFindFileData=0x31e38c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xdb72f400, ftCreationTime.dwHighDateTime=0x1d5e82a, ftLastAccessTime.dwLowDateTime=0xdd4ca5a0, ftLastAccessTime.dwHighDateTime=0x1d5e82a, ftLastWriteTime.dwLowDateTime=0xdd4ca5a0, ftLastWriteTime.dwHighDateTime=0x1d5e82a, nFileSizeHigh=0x0, nFileSizeLow=0xe2f, dwReserved0=0x0, dwReserved1=0x0, cFileName="ypQAwj_1Xn8LoFy0UjN.lnk", cAlternateFileName="YPQAWJ~1.LNK")) returned 1 [0080.281] FindNextFileW (in: hFindFile=0x381e00, lpFindFileData=0x31e38c | out: lpFindFileData=0x31e38c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xdba4f0e0, ftCreationTime.dwHighDateTime=0x1d5e82a, ftLastAccessTime.dwLowDateTime=0xdba4f0e0, ftLastAccessTime.dwHighDateTime=0x1d5e82a, ftLastWriteTime.dwLowDateTime=0xdba4f0e0, ftLastWriteTime.dwHighDateTime=0x1d5e82a, nFileSizeHigh=0x0, nFileSizeLow=0xa00, dwReserved0=0x0, dwReserved1=0x0, cFileName="Ytscf.lnk", cAlternateFileName="")) returned 1 [0080.281] FindNextFileW (in: hFindFile=0x381e00, lpFindFileData=0x31e38c | out: lpFindFileData=0x31e38c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xdd28f100, ftCreationTime.dwHighDateTime=0x1d5e82a, ftLastAccessTime.dwLowDateTime=0xdd28f100, ftLastAccessTime.dwHighDateTime=0x1d5e82a, ftLastWriteTime.dwLowDateTime=0xdd28f100, ftLastWriteTime.dwHighDateTime=0x1d5e82a, nFileSizeHigh=0x0, nFileSizeLow=0x3e3, dwReserved0=0x0, dwReserved1=0x0, cFileName="YZ7eP Q.lnk", cAlternateFileName="YZ7EPQ~1.LNK")) returned 1 [0080.281] FindNextFileW (in: hFindFile=0x381e00, lpFindFileData=0x31e38c | out: lpFindFileData=0x31e38c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xdd1d0a20, ftCreationTime.dwHighDateTime=0x1d5e82a, ftLastAccessTime.dwLowDateTime=0xdd1d0a20, ftLastAccessTime.dwHighDateTime=0x1d5e82a, ftLastWriteTime.dwLowDateTime=0xdd1d0a20, ftLastWriteTime.dwHighDateTime=0x1d5e82a, nFileSizeHigh=0x0, nFileSizeLow=0xf5d, dwReserved0=0x0, dwReserved1=0x0, cFileName="ZbKUnKkgcHGbWFlacj.mkv.lnk", cAlternateFileName="ZBKUNK~1.LNK")) returned 1 [0080.281] FindNextFileW (in: hFindFile=0x381e00, lpFindFileData=0x31e38c | out: lpFindFileData=0x31e38c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xdc909900, ftCreationTime.dwHighDateTime=0x1d5e82a, ftLastAccessTime.dwLowDateTime=0xdc909900, ftLastAccessTime.dwHighDateTime=0x1d5e82a, ftLastWriteTime.dwLowDateTime=0xdc909900, ftLastWriteTime.dwHighDateTime=0x1d5e82a, nFileSizeHigh=0x0, nFileSizeLow=0x1bba, dwReserved0=0x0, dwReserved1=0x0, cFileName="Ze4qx331n4oC1.ots.lnk", cAlternateFileName="ZE4QX3~1.LNK")) returned 1 [0080.281] FindNextFileW (in: hFindFile=0x381e00, lpFindFileData=0x31e38c | out: lpFindFileData=0x31e38c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xdd621200, ftCreationTime.dwHighDateTime=0x1d5e82a, ftLastAccessTime.dwLowDateTime=0xdd621200, ftLastAccessTime.dwHighDateTime=0x1d5e82a, ftLastWriteTime.dwLowDateTime=0xdd621200, ftLastWriteTime.dwHighDateTime=0x1d5e82a, nFileSizeHigh=0x0, nFileSizeLow=0x1a45, dwReserved0=0x0, dwReserved1=0x0, cFileName="ZTDDJr-2j.lnk", cAlternateFileName="ZTDDJR~1.LNK")) returned 1 [0080.281] FindNextFileW (in: hFindFile=0x381e00, lpFindFileData=0x31e38c | out: lpFindFileData=0x31e38c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xdc100ec0, ftCreationTime.dwHighDateTime=0x1d5e82a, ftLastAccessTime.dwLowDateTime=0xdc100ec0, ftLastAccessTime.dwHighDateTime=0x1d5e82a, ftLastWriteTime.dwLowDateTime=0xdc100ec0, ftLastWriteTime.dwHighDateTime=0x1d5e82a, nFileSizeHigh=0x0, nFileSizeLow=0x21da, dwReserved0=0x0, dwReserved1=0x0, cFileName="zXdq.lnk", cAlternateFileName="")) returned 1 [0080.281] FindNextFileW (in: hFindFile=0x381e00, lpFindFileData=0x31e38c | out: lpFindFileData=0x31e38c*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0080.281] FindClose (in: hFindFile=0x381e00 | out: hFindFile=0x381e00) returned 1 [0080.282] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e614) returned 1 [0080.282] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e620) returned 1 [0080.282] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e654) returned 1 [0080.282] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Recent", nBufferLength=0x105, lpBuffer=0x31e15c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Recent", lpFilePart=0x0) returned 0x46 [0080.282] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\", nBufferLength=0x105, lpBuffer=0x31e130, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\", lpFilePart=0x0) returned 0x47 [0080.282] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\*", lpFindFileData=0x31e37c | out: lpFindFileData=0x31e37c*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x28cff640, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0xdd777e60, ftLastAccessTime.dwHighDateTime=0x1d5e82a, ftLastWriteTime.dwLowDateTime=0xdd777e60, ftLastWriteTime.dwHighDateTime=0x1d5e82a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x381e00 [0080.282] FindNextFileW (in: hFindFile=0x381e00, lpFindFileData=0x31e38c | out: lpFindFileData=0x31e38c*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x28cff640, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0xdd777e60, ftLastAccessTime.dwHighDateTime=0x1d5e82a, ftLastWriteTime.dwLowDateTime=0xdd777e60, ftLastWriteTime.dwHighDateTime=0x1d5e82a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0080.282] FindNextFileW (in: hFindFile=0x381e00, lpFindFileData=0x31e38c | out: lpFindFileData=0x31e38c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xdd4a4440, ftCreationTime.dwHighDateTime=0x1d5e82a, ftLastAccessTime.dwLowDateTime=0xdd4a4440, ftLastAccessTime.dwHighDateTime=0x1d5e82a, ftLastWriteTime.dwLowDateTime=0xdd4a4440, ftLastWriteTime.dwHighDateTime=0x1d5e82a, nFileSizeHigh=0x0, nFileSizeLow=0x1c32, dwReserved0=0x0, dwReserved1=0x0, cFileName="-5 rgXAKNVWpqoUUHt.lnk", cAlternateFileName="-5RGXA~1.LNK")) returned 1 [0080.282] FindNextFileW (in: hFindFile=0x381e00, lpFindFileData=0x31e38c | out: lpFindFileData=0x31e38c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xdd6df8e0, ftCreationTime.dwHighDateTime=0x1d5e82a, ftLastAccessTime.dwLowDateTime=0xdd6df8e0, ftLastAccessTime.dwHighDateTime=0x1d5e82a, ftLastWriteTime.dwLowDateTime=0xdd6df8e0, ftLastWriteTime.dwHighDateTime=0x1d5e82a, nFileSizeHigh=0x0, nFileSizeLow=0x15ee, dwReserved0=0x0, dwReserved1=0x0, cFileName="-C9Sja0mJwrJKSu90.lnk", cAlternateFileName="-C9SJA~1.LNK")) returned 1 [0080.282] FindNextFileW (in: hFindFile=0x381e00, lpFindFileData=0x31e38c | out: lpFindFileData=0x31e38c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xdbb33920, ftCreationTime.dwHighDateTime=0x1d5e82a, ftLastAccessTime.dwLowDateTime=0xdbb33920, ftLastAccessTime.dwHighDateTime=0x1d5e82a, ftLastWriteTime.dwLowDateTime=0xdbb33920, ftLastWriteTime.dwHighDateTime=0x1d5e82a, nFileSizeHigh=0x0, nFileSizeLow=0xa58, dwReserved0=0x0, dwReserved1=0x0, cFileName="-XBhFw3KRNIiI.lnk", cAlternateFileName="-XBHFW~1.LNK")) returned 1 [0080.282] FindNextFileW (in: hFindFile=0x381e00, lpFindFileData=0x31e38c | out: lpFindFileData=0x31e38c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xdcda63a0, ftCreationTime.dwHighDateTime=0x1d5e82a, ftLastAccessTime.dwLowDateTime=0xdcda63a0, ftLastAccessTime.dwHighDateTime=0x1d5e82a, ftLastWriteTime.dwLowDateTime=0xdcda63a0, ftLastWriteTime.dwHighDateTime=0x1d5e82a, nFileSizeHigh=0x0, nFileSizeLow=0x1c32, dwReserved0=0x0, dwReserved1=0x0, cFileName="02uI45CVA0UfWQJTSx6.lnk", cAlternateFileName="02UI45~1.LNK")) returned 1 [0080.282] FindNextFileW (in: hFindFile=0x381e00, lpFindFileData=0x31e38c | out: lpFindFileData=0x31e38c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xdd40bec0, ftCreationTime.dwHighDateTime=0x1d5e82a, ftLastAccessTime.dwLowDateTime=0xdd40bec0, ftLastAccessTime.dwHighDateTime=0x1d5e82a, ftLastWriteTime.dwLowDateTime=0xdd40bec0, ftLastWriteTime.dwHighDateTime=0x1d5e82a, nFileSizeHigh=0x0, nFileSizeLow=0x1471, dwReserved0=0x0, dwReserved1=0x0, cFileName="0fonx3QbySjHW9kekT.flv.lnk", cAlternateFileName="0FONX3~1.LNK")) returned 1 [0080.282] FindNextFileW (in: hFindFile=0x381e00, lpFindFileData=0x31e38c | out: lpFindFileData=0x31e38c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xdbb59a80, ftCreationTime.dwHighDateTime=0x1d5e82a, ftLastAccessTime.dwLowDateTime=0xdbb59a80, ftLastAccessTime.dwHighDateTime=0x1d5e82a, ftLastWriteTime.dwLowDateTime=0xdbb59a80, ftLastWriteTime.dwHighDateTime=0x1d5e82a, nFileSizeHigh=0x0, nFileSizeLow=0x1c06, dwReserved0=0x0, dwReserved1=0x0, cFileName="0QpBHVtt5vUmfNi.lnk", cAlternateFileName="0QPBHV~1.LNK")) returned 1 [0080.282] FindNextFileW (in: hFindFile=0x381e00, lpFindFileData=0x31e38c | out: lpFindFileData=0x31e38c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xdcc03480, ftCreationTime.dwHighDateTime=0x1d5e82a, ftLastAccessTime.dwLowDateTime=0xdcc03480, ftLastAccessTime.dwHighDateTime=0x1d5e82a, ftLastWriteTime.dwLowDateTime=0xdcc03480, ftLastWriteTime.dwHighDateTime=0x1d5e82a, nFileSizeHigh=0x0, nFileSizeLow=0xa16, dwReserved0=0x0, dwReserved1=0x0, cFileName="1GMPKC9.lnk", cAlternateFileName="")) returned 1 [0080.282] FindNextFileW (in: hFindFile=0x381e00, lpFindFileData=0x31e38c | out: lpFindFileData=0x31e38c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xdd1384a0, ftCreationTime.dwHighDateTime=0x1d5e82a, ftLastAccessTime.dwLowDateTime=0xdd1384a0, ftLastAccessTime.dwHighDateTime=0x1d5e82a, ftLastWriteTime.dwLowDateTime=0xdd1384a0, ftLastWriteTime.dwHighDateTime=0x1d5e82a, nFileSizeHigh=0x0, nFileSizeLow=0x328, dwReserved0=0x0, dwReserved1=0x0, cFileName="1iogfuz_21wpdknL.lnk", cAlternateFileName="1IOGFU~1.LNK")) returned 1 [0080.282] FindNextFileW (in: hFindFile=0x381e00, lpFindFileData=0x31e38c | out: lpFindFileData=0x31e38c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xdcaac820, ftCreationTime.dwHighDateTime=0x1d5e82a, ftLastAccessTime.dwLowDateTime=0xdcaac820, ftLastAccessTime.dwHighDateTime=0x1d5e82a, ftLastWriteTime.dwLowDateTime=0xdcaac820, ftLastWriteTime.dwHighDateTime=0x1d5e82a, nFileSizeHigh=0x0, nFileSizeLow=0x1ab3, dwReserved0=0x0, dwReserved1=0x0, cFileName="1MlIv-7ANr-ec.lnk", cAlternateFileName="1MLIV-~1.LNK")) returned 1 [0080.282] FindNextFileW (in: hFindFile=0x381e00, lpFindFileData=0x31e38c | out: lpFindFileData=0x31e38c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xdd4f0700, ftCreationTime.dwHighDateTime=0x1d5e82a, ftLastAccessTime.dwLowDateTime=0xdd4f0700, ftLastAccessTime.dwHighDateTime=0x1d5e82a, ftLastWriteTime.dwLowDateTime=0xdd4f0700, ftLastWriteTime.dwHighDateTime=0x1d5e82a, nFileSizeHigh=0x0, nFileSizeLow=0xa38, dwReserved0=0x0, dwReserved1=0x0, cFileName="2iM6el404FPP9.lnk", cAlternateFileName="2IM6EL~1.LNK")) returned 1 [0080.282] FindNextFileW (in: hFindFile=0x381e00, lpFindFileData=0x31e38c | out: lpFindFileData=0x31e38c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xdd647360, ftCreationTime.dwHighDateTime=0x1d5e82a, ftLastAccessTime.dwLowDateTime=0xdd647360, ftLastAccessTime.dwHighDateTime=0x1d5e82a, ftLastWriteTime.dwLowDateTime=0xdd66d4c0, ftLastWriteTime.dwHighDateTime=0x1d5e82a, nFileSizeHigh=0x0, nFileSizeLow=0x40b, dwReserved0=0x0, dwReserved1=0x0, cFileName="2LKK31mn8fmrauO.lnk", cAlternateFileName="2LKK31~1.LNK")) returned 1 [0080.282] FindNextFileW (in: hFindFile=0x381e00, lpFindFileData=0x31e38c | out: lpFindFileData=0x31e38c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xdd15e600, ftCreationTime.dwHighDateTime=0x1d5e82a, ftLastAccessTime.dwLowDateTime=0xdd15e600, ftLastAccessTime.dwHighDateTime=0x1d5e82a, ftLastWriteTime.dwLowDateTime=0xdd15e600, ftLastWriteTime.dwHighDateTime=0x1d5e82a, nFileSizeHigh=0x0, nFileSizeLow=0x221b, dwReserved0=0x0, dwReserved1=0x0, cFileName="2pGy8blaGINSTsQu.lnk", cAlternateFileName="2PGY8B~1.LNK")) returned 1 [0080.282] FindNextFileW (in: hFindFile=0x381e00, lpFindFileData=0x31e38c | out: lpFindFileData=0x31e38c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xdca3a400, ftCreationTime.dwHighDateTime=0x1d5e82a, ftLastAccessTime.dwLowDateTime=0xdca3a400, ftLastAccessTime.dwHighDateTime=0x1d5e82a, ftLastWriteTime.dwLowDateTime=0xdca3a400, ftLastWriteTime.dwHighDateTime=0x1d5e82a, nFileSizeHigh=0x0, nFileSizeLow=0x1596, dwReserved0=0x0, dwReserved1=0x0, cFileName="35bcBrdvj.lnk", cAlternateFileName="35BCBR~1.LNK")) returned 1 [0080.282] FindNextFileW (in: hFindFile=0x381e00, lpFindFileData=0x31e38c | out: lpFindFileData=0x31e38c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xdc635ee0, ftCreationTime.dwHighDateTime=0x1d5e82a, ftLastAccessTime.dwLowDateTime=0xdd588c80, ftLastAccessTime.dwHighDateTime=0x1d5e82a, ftLastWriteTime.dwLowDateTime=0xdd588c80, ftLastWriteTime.dwHighDateTime=0x1d5e82a, nFileSizeHigh=0x0, nFileSizeLow=0x9ad, dwReserved0=0x0, dwReserved1=0x0, cFileName="3fmT5WPHA39l3f9.lnk", cAlternateFileName="3FMT5W~1.LNK")) returned 1 [0080.283] FindNextFileW (in: hFindFile=0x381e00, lpFindFileData=0x31e38c | out: lpFindFileData=0x31e38c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xdb8d2320, ftCreationTime.dwHighDateTime=0x1d5e82a, ftLastAccessTime.dwLowDateTime=0xdb8d2320, ftLastAccessTime.dwHighDateTime=0x1d5e82a, ftLastWriteTime.dwLowDateTime=0xdb8d2320, ftLastWriteTime.dwHighDateTime=0x1d5e82a, nFileSizeHigh=0x0, nFileSizeLow=0xa79, dwReserved0=0x0, dwReserved1=0x0, cFileName="3g 7kD u8yPvSBKq.lnk", cAlternateFileName="3G7KDU~1.LNK")) returned 1 [0080.283] FindNextFileW (in: hFindFile=0x381e00, lpFindFileData=0x31e38c | out: lpFindFileData=0x31e38c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xdd693620, ftCreationTime.dwHighDateTime=0x1d5e82a, ftLastAccessTime.dwLowDateTime=0xdd693620, ftLastAccessTime.dwHighDateTime=0x1d5e82a, ftLastWriteTime.dwLowDateTime=0xdd693620, ftLastWriteTime.dwHighDateTime=0x1d5e82a, nFileSizeHigh=0x0, nFileSizeLow=0xa22, dwReserved0=0x0, dwReserved1=0x0, cFileName="3Sx06XnyBNN.lnk", cAlternateFileName="3SX06X~1.LNK")) returned 1 [0080.283] FindNextFileW (in: hFindFile=0x381e00, lpFindFileData=0x31e38c | out: lpFindFileData=0x31e38c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xdc6a8300, ftCreationTime.dwHighDateTime=0x1d5e82a, ftLastAccessTime.dwLowDateTime=0xdc6a8300, ftLastAccessTime.dwHighDateTime=0x1d5e82a, ftLastWriteTime.dwLowDateTime=0xdc6a8300, ftLastWriteTime.dwHighDateTime=0x1d5e82a, nFileSizeHigh=0x0, nFileSizeLow=0xaa5, dwReserved0=0x0, dwReserved1=0x0, cFileName="3YAya5eDcy-F-cb-1Rdx.lnk", cAlternateFileName="3YAYA5~1.LNK")) returned 1 [0080.283] FindNextFileW (in: hFindFile=0x381e00, lpFindFileData=0x31e38c | out: lpFindFileData=0x31e38c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xdbd22b00, ftCreationTime.dwHighDateTime=0x1d5e82a, ftLastAccessTime.dwLowDateTime=0xdd242e40, ftLastAccessTime.dwHighDateTime=0x1d5e82a, ftLastWriteTime.dwLowDateTime=0xdd268fa0, ftLastWriteTime.dwHighDateTime=0x1d5e82a, nFileSizeHigh=0x0, nFileSizeLow=0x13b0, dwReserved0=0x0, dwReserved1=0x0, cFileName="405ySziuaxMlV m5JO.lnk", cAlternateFileName="405YSZ~1.LNK")) returned 1 [0080.283] FindNextFileW (in: hFindFile=0x381e00, lpFindFileData=0x31e38c | out: lpFindFileData=0x31e38c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xdb566380, ftCreationTime.dwHighDateTime=0x1d5e82a, ftLastAccessTime.dwLowDateTime=0xdd621200, ftLastAccessTime.dwHighDateTime=0x1d5e82a, ftLastWriteTime.dwLowDateTime=0xdd621200, ftLastWriteTime.dwHighDateTime=0x1d5e82a, nFileSizeHigh=0x0, nFileSizeLow=0x13cd, dwReserved0=0x0, dwReserved1=0x0, cFileName="5mEc8mcZ9jfK.lnk", cAlternateFileName="5MEC8M~1.LNK")) returned 1 [0080.283] FindNextFileW (in: hFindFile=0x381e00, lpFindFileData=0x31e38c | out: lpFindFileData=0x31e38c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xdb8ac1c0, ftCreationTime.dwHighDateTime=0x1d5e82a, ftLastAccessTime.dwLowDateTime=0xdd516860, ftLastAccessTime.dwHighDateTime=0x1d5e82a, ftLastWriteTime.dwLowDateTime=0xdd516860, ftLastWriteTime.dwHighDateTime=0x1d5e82a, nFileSizeHigh=0x0, nFileSizeLow=0x937, dwReserved0=0x0, dwReserved1=0x0, cFileName="5QUm8R.lnk", cAlternateFileName="")) returned 1 [0080.283] FindNextFileW (in: hFindFile=0x381e00, lpFindFileData=0x31e38c | out: lpFindFileData=0x31e38c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xdc5516a0, ftCreationTime.dwHighDateTime=0x1d5e82a, ftLastAccessTime.dwLowDateTime=0xdc5516a0, ftLastAccessTime.dwHighDateTime=0x1d5e82a, ftLastWriteTime.dwLowDateTime=0xdc577800, ftLastWriteTime.dwHighDateTime=0x1d5e82a, nFileSizeHigh=0x0, nFileSizeLow=0x248, dwReserved0=0x0, dwReserved1=0x0, cFileName="6b4NNrp5 bh.lnk", cAlternateFileName="6B4NNR~1.LNK")) returned 1 [0080.283] FindNextFileW (in: hFindFile=0x381e00, lpFindFileData=0x31e38c | out: lpFindFileData=0x31e38c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xdd458180, ftCreationTime.dwHighDateTime=0x1d5e82a, ftLastAccessTime.dwLowDateTime=0xdd458180, ftLastAccessTime.dwHighDateTime=0x1d5e82a, ftLastWriteTime.dwLowDateTime=0xdd458180, ftLastWriteTime.dwHighDateTime=0x1d5e82a, nFileSizeHigh=0x0, nFileSizeLow=0x2205, dwReserved0=0x0, dwReserved1=0x0, cFileName="6PH LQIJcfFOT3.lnk", cAlternateFileName="6PHLQI~1.LNK")) returned 1 [0080.283] FindNextFileW (in: hFindFile=0x381e00, lpFindFileData=0x31e38c | out: lpFindFileData=0x31e38c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xdd66d4c0, ftCreationTime.dwHighDateTime=0x1d5e82a, ftLastAccessTime.dwLowDateTime=0xdd66d4c0, ftLastAccessTime.dwHighDateTime=0x1d5e82a, ftLastWriteTime.dwLowDateTime=0xdd66d4c0, ftLastWriteTime.dwHighDateTime=0x1d5e82a, nFileSizeHigh=0x0, nFileSizeLow=0x2df, dwReserved0=0x0, dwReserved1=0x0, cFileName="6wgIYQzJ1lqH2MW.lnk", cAlternateFileName="6WGIYQ~1.LNK")) returned 1 [0080.283] FindNextFileW (in: hFindFile=0x381e00, lpFindFileData=0x31e38c | out: lpFindFileData=0x31e38c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xdc33c360, ftCreationTime.dwHighDateTime=0x1d5e82a, ftLastAccessTime.dwLowDateTime=0xdd647360, ftLastAccessTime.dwHighDateTime=0x1d5e82a, ftLastWriteTime.dwLowDateTime=0xdd647360, ftLastWriteTime.dwHighDateTime=0x1d5e82a, nFileSizeHigh=0x0, nFileSizeLow=0x1496, dwReserved0=0x0, dwReserved1=0x0, cFileName="6ygdYcRuO9.lnk", cAlternateFileName="6YGDYC~1.LNK")) returned 1 [0080.283] FindNextFileW (in: hFindFile=0x381e00, lpFindFileData=0x31e38c | out: lpFindFileData=0x31e38c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xdce187c0, ftCreationTime.dwHighDateTime=0x1d5e82a, ftLastAccessTime.dwLowDateTime=0xdce187c0, ftLastAccessTime.dwHighDateTime=0x1d5e82a, ftLastWriteTime.dwLowDateTime=0xdce187c0, ftLastWriteTime.dwHighDateTime=0x1d5e82a, nFileSizeHigh=0x0, nFileSizeLow=0x232, dwReserved0=0x0, dwReserved1=0x0, cFileName="81Hibdy.lnk", cAlternateFileName="")) returned 1 [0080.283] FindNextFileW (in: hFindFile=0x381e00, lpFindFileData=0x31e38c | out: lpFindFileData=0x31e38c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xdcbb71c0, ftCreationTime.dwHighDateTime=0x1d5e82a, ftLastAccessTime.dwLowDateTime=0xdcbb71c0, ftLastAccessTime.dwHighDateTime=0x1d5e82a, ftLastWriteTime.dwLowDateTime=0xdcbb71c0, ftLastWriteTime.dwHighDateTime=0x1d5e82a, nFileSizeHigh=0x0, nFileSizeLow=0x1474, dwReserved0=0x0, dwReserved1=0x0, cFileName="84yfCS6st5K5-66QqbH.flv.lnk", cAlternateFileName="84YFCS~1.LNK")) returned 1 [0080.283] FindNextFileW (in: hFindFile=0x381e00, lpFindFileData=0x31e38c | out: lpFindFileData=0x31e38c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xdbe2d4a0, ftCreationTime.dwHighDateTime=0x1d5e82a, ftLastAccessTime.dwLowDateTime=0xdd34d7e0, ftLastAccessTime.dwHighDateTime=0x1d5e82a, ftLastWriteTime.dwLowDateTime=0xdd373940, ftLastWriteTime.dwHighDateTime=0x1d5e82a, nFileSizeHigh=0x0, nFileSizeLow=0x98c, dwReserved0=0x0, dwReserved1=0x0, cFileName="8mSM9XyQ3XQ6.lnk", cAlternateFileName="8MSM9X~1.LNK")) returned 1 [0080.283] FindNextFileW (in: hFindFile=0x381e00, lpFindFileData=0x31e38c | out: lpFindFileData=0x31e38c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xdc6821a0, ftCreationTime.dwHighDateTime=0x1d5e82a, ftLastAccessTime.dwLowDateTime=0xdc6821a0, ftLastAccessTime.dwHighDateTime=0x1d5e82a, ftLastWriteTime.dwLowDateTime=0xdc6821a0, ftLastWriteTime.dwHighDateTime=0x1d5e82a, nFileSizeHigh=0x0, nFileSizeLow=0xa7a, dwReserved0=0x0, dwReserved1=0x0, cFileName="8y 4TOn5NPzM-8ECXs7.lnk", cAlternateFileName="8Y4TON~1.LNK")) returned 1 [0080.283] FindNextFileW (in: hFindFile=0x381e00, lpFindFileData=0x31e38c | out: lpFindFileData=0x31e38c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xdd777e60, ftCreationTime.dwHighDateTime=0x1d5e82a, ftLastAccessTime.dwLowDateTime=0xdd777e60, ftLastAccessTime.dwHighDateTime=0x1d5e82a, ftLastWriteTime.dwLowDateTime=0xdd777e60, ftLastWriteTime.dwHighDateTime=0x1d5e82a, nFileSizeHigh=0x0, nFileSizeLow=0x2b9, dwReserved0=0x0, dwReserved1=0x0, cFileName="aAze.lnk", cAlternateFileName="")) returned 1 [0080.283] FindNextFileW (in: hFindFile=0x381e00, lpFindFileData=0x31e38c | out: lpFindFileData=0x31e38c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xdcc4f740, ftCreationTime.dwHighDateTime=0x1d5e82a, ftLastAccessTime.dwLowDateTime=0xdcc4f740, ftLastAccessTime.dwHighDateTime=0x1d5e82a, ftLastWriteTime.dwLowDateTime=0xdcc4f740, ftLastWriteTime.dwHighDateTime=0x1d5e82a, nFileSizeHigh=0x0, nFileSizeLow=0xf7e, dwReserved0=0x0, dwReserved1=0x0, cFileName="Ab6fh6TA.lnk", cAlternateFileName="")) returned 1 [0080.283] FindNextFileW (in: hFindFile=0x381e00, lpFindFileData=0x31e38c | out: lpFindFileData=0x31e38c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xdd53c9c0, ftCreationTime.dwHighDateTime=0x1d5e82a, ftLastAccessTime.dwLowDateTime=0xdd53c9c0, ftLastAccessTime.dwHighDateTime=0x1d5e82a, ftLastWriteTime.dwLowDateTime=0xdd53c9c0, ftLastWriteTime.dwHighDateTime=0x1d5e82a, nFileSizeHigh=0x0, nFileSizeLow=0x1bf1, dwReserved0=0x0, dwReserved1=0x0, cFileName="aF BVNmJ_Atzx_a.lnk", cAlternateFileName="AFBVNM~1.LNK")) returned 1 [0080.283] FindNextFileW (in: hFindFile=0x381e00, lpFindFileData=0x31e38c | out: lpFindFileData=0x31e38c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xdc6821a0, ftCreationTime.dwHighDateTime=0x1d5e82a, ftLastAccessTime.dwLowDateTime=0xdc6821a0, ftLastAccessTime.dwHighDateTime=0x1d5e82a, ftLastWriteTime.dwLowDateTime=0xdc6821a0, ftLastWriteTime.dwHighDateTime=0x1d5e82a, nFileSizeHigh=0x0, nFileSizeLow=0x309, dwReserved0=0x0, dwReserved1=0x0, cFileName="atwN3-g8oPk6T3g.lnk", cAlternateFileName="ATWN3-~1.LNK")) returned 1 [0080.283] FindNextFileW (in: hFindFile=0x381e00, lpFindFileData=0x31e38c | out: lpFindFileData=0x31e38c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x28cff640, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x4bce65c0, ftLastAccessTime.dwHighDateTime=0x1d2fad7, ftLastWriteTime.dwLowDateTime=0x4bce65c0, ftLastWriteTime.dwHighDateTime=0x1d2fad7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="AutomaticDestinations", cAlternateFileName="AUTOMA~1")) returned 1 [0080.283] FindNextFileW (in: hFindFile=0x381e00, lpFindFileData=0x31e38c | out: lpFindFileData=0x31e38c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xdc871380, ftCreationTime.dwHighDateTime=0x1d5e82a, ftLastAccessTime.dwLowDateTime=0xdc871380, ftLastAccessTime.dwHighDateTime=0x1d5e82a, ftLastWriteTime.dwLowDateTime=0xdc871380, ftLastWriteTime.dwHighDateTime=0x1d5e82a, nFileSizeHigh=0x0, nFileSizeLow=0xef2, dwReserved0=0x0, dwReserved1=0x0, cFileName="avs0VLVQy.mkv.lnk", cAlternateFileName="AVS0VL~1.LNK")) returned 1 [0080.284] FindClose (in: hFindFile=0x381e00 | out: hFindFile=0x381e00) returned 1 [0080.284] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e614) returned 1 [0080.284] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e620) returned 1 [0080.284] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\-5 rgXAKNVWpqoUUHt.lnk", nBufferLength=0x105, lpBuffer=0x31e02c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\-5 rgXAKNVWpqoUUHt.lnk", lpFilePart=0x0) returned 0x5e [0080.285] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e520) returned 1 [0080.285] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\-5 rgXAKNVWpqoUUHt.lnk" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\windows\\recent\\-5 rgxaknvwpqouuht.lnk"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x264 [0080.285] GetFileType (hFile=0x264) returned 0x1 [0080.285] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e51c) returned 1 [0080.285] GetFileType (hFile=0x264) returned 0x1 [0080.285] GetFileSize (in: hFile=0x264, lpFileSizeHigh=0x31e628 | out: lpFileSizeHigh=0x31e628*=0x0) returned 0x1c32 [0080.285] ReadFile (in: hFile=0x264, lpBuffer=0x275729c, nNumberOfBytesToRead=0x1c32, lpNumberOfBytesRead=0x31e5d4, lpOverlapped=0x0 | out: lpBuffer=0x275729c*, lpNumberOfBytesRead=0x31e5d4*=0x1c32, lpOverlapped=0x0) returned 1 [0080.299] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\-5 rgXAKNVWpqoUUHt.lnk", nBufferLength=0x105, lpBuffer=0x31e018, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\-5 rgXAKNVWpqoUUHt.lnk", lpFilePart=0x0) returned 0x5e [0080.299] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e50c) returned 1 [0080.299] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\-5 rgXAKNVWpqoUUHt.lnk" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\windows\\recent\\-5 rgxaknvwpqouuht.lnk"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x264 [0080.300] GetFileType (hFile=0x264) returned 0x1 [0080.300] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e508) returned 1 [0080.300] GetFileType (hFile=0x264) returned 0x1 [0080.300] WriteFile (in: hFile=0x264, lpBuffer=0x27acdc4*, nNumberOfBytesToWrite=0x1c40, lpNumberOfBytesWritten=0x31e5c8, lpOverlapped=0x0 | out: lpBuffer=0x27acdc4*, lpNumberOfBytesWritten=0x31e5c8*=0x1c40, lpOverlapped=0x0) returned 1 [0080.301] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\-5 rgXAKNVWpqoUUHt.lnk", nBufferLength=0x105, lpBuffer=0x31e14c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\-5 rgXAKNVWpqoUUHt.lnk", lpFilePart=0x0) returned 0x5e [0080.301] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\-5 rgXAKNVWpqoUUHt.lnk", nBufferLength=0x105, lpBuffer=0x31e14c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\-5 rgXAKNVWpqoUUHt.lnk", lpFilePart=0x0) returned 0x5e [0080.301] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e5ac) returned 1 [0080.302] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\-5 rgXAKNVWpqoUUHt.lnk" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\windows\\recent\\-5 rgxaknvwpqouuht.lnk"), fInfoLevelId=0x0, lpFileInformation=0x31e628 | out: lpFileInformation=0x31e628*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xdd4a4440, ftCreationTime.dwHighDateTime=0x1d5e82a, ftLastAccessTime.dwLowDateTime=0xdd4a4440, ftLastAccessTime.dwHighDateTime=0x1d5e82a, ftLastWriteTime.dwLowDateTime=0x134e68c0, ftLastWriteTime.dwHighDateTime=0x1d6eb7f, nFileSizeHigh=0x0, nFileSizeLow=0x1c40)) returned 1 [0080.302] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e5a8) returned 1 [0080.302] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\-5 rgXAKNVWpqoUUHt.lnk" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\windows\\recent\\-5 rgxaknvwpqouuht.lnk"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\-5 rgXAKNVWpqoUUHt.lnk" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\windows\\recent\\-5 rgxaknvwpqouuht.lnk")) returned 1 [0080.302] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\-C9Sja0mJwrJKSu90.lnk", nBufferLength=0x105, lpBuffer=0x31e02c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\-C9Sja0mJwrJKSu90.lnk", lpFilePart=0x0) returned 0x5c [0080.302] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e520) returned 1 [0080.302] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\-C9Sja0mJwrJKSu90.lnk" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\windows\\recent\\-c9sja0mjwrjksu90.lnk"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x264 [0080.302] GetFileType (hFile=0x264) returned 0x1 [0080.302] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e51c) returned 1 [0080.302] GetFileType (hFile=0x264) returned 0x1 [0080.303] GetFileSize (in: hFile=0x264, lpFileSizeHigh=0x31e628 | out: lpFileSizeHigh=0x31e628*=0x0) returned 0x15ee [0080.303] ReadFile (in: hFile=0x264, lpBuffer=0x27aee80, nNumberOfBytesToRead=0x15ee, lpNumberOfBytesRead=0x31e5d4, lpOverlapped=0x0 | out: lpBuffer=0x27aee80*, lpNumberOfBytesRead=0x31e5d4*=0x15ee, lpOverlapped=0x0) returned 1 [0080.317] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\-C9Sja0mJwrJKSu90.lnk", nBufferLength=0x105, lpBuffer=0x31e018, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\-C9Sja0mJwrJKSu90.lnk", lpFilePart=0x0) returned 0x5c [0080.317] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e50c) returned 1 [0080.317] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\-C9Sja0mJwrJKSu90.lnk" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\windows\\recent\\-c9sja0mjwrjksu90.lnk"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x264 [0080.318] GetFileType (hFile=0x264) returned 0x1 [0080.318] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e508) returned 1 [0080.318] GetFileType (hFile=0x264) returned 0x1 [0080.318] WriteFile (in: hFile=0x264, lpBuffer=0x2802a18*, nNumberOfBytesToWrite=0x15f0, lpNumberOfBytesWritten=0x31e5c8, lpOverlapped=0x0 | out: lpBuffer=0x2802a18*, lpNumberOfBytesWritten=0x31e5c8*=0x15f0, lpOverlapped=0x0) returned 1 [0080.319] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\-C9Sja0mJwrJKSu90.lnk", nBufferLength=0x105, lpBuffer=0x31e14c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\-C9Sja0mJwrJKSu90.lnk", lpFilePart=0x0) returned 0x5c [0080.319] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\-C9Sja0mJwrJKSu90.lnk", nBufferLength=0x105, lpBuffer=0x31e14c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\-C9Sja0mJwrJKSu90.lnk", lpFilePart=0x0) returned 0x5c [0080.319] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e5ac) returned 1 [0080.319] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\-C9Sja0mJwrJKSu90.lnk" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\windows\\recent\\-c9sja0mjwrjksu90.lnk"), fInfoLevelId=0x0, lpFileInformation=0x31e628 | out: lpFileInformation=0x31e628*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xdd6df8e0, ftCreationTime.dwHighDateTime=0x1d5e82a, ftLastAccessTime.dwLowDateTime=0xdd6df8e0, ftLastAccessTime.dwHighDateTime=0x1d5e82a, ftLastWriteTime.dwLowDateTime=0x1350ca20, ftLastWriteTime.dwHighDateTime=0x1d6eb7f, nFileSizeHigh=0x0, nFileSizeLow=0x15f0)) returned 1 [0080.319] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e5a8) returned 1 [0080.319] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\-C9Sja0mJwrJKSu90.lnk" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\windows\\recent\\-c9sja0mjwrjksu90.lnk"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\-C9Sja0mJwrJKSu90.lnk" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\windows\\recent\\-c9sja0mjwrjksu90.lnk")) returned 1 [0080.320] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\-XBhFw3KRNIiI.lnk", nBufferLength=0x105, lpBuffer=0x31e02c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\-XBhFw3KRNIiI.lnk", lpFilePart=0x0) returned 0x58 [0080.320] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e520) returned 1 [0080.320] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\-XBhFw3KRNIiI.lnk" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\windows\\recent\\-xbhfw3krniii.lnk"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x264 [0080.320] GetFileType (hFile=0x264) returned 0x1 [0080.320] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e51c) returned 1 [0080.320] GetFileType (hFile=0x264) returned 0x1 [0080.320] GetFileSize (in: hFile=0x264, lpFileSizeHigh=0x31e628 | out: lpFileSizeHigh=0x31e628*=0x0) returned 0xa58 [0080.320] ReadFile (in: hFile=0x264, lpBuffer=0x2804ec8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x31e5d4, lpOverlapped=0x0 | out: lpBuffer=0x2804ec8*, lpNumberOfBytesRead=0x31e5d4*=0xa58, lpOverlapped=0x0) returned 1 [0080.336] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\-XBhFw3KRNIiI.lnk", nBufferLength=0x105, lpBuffer=0x31e018, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\-XBhFw3KRNIiI.lnk", lpFilePart=0x0) returned 0x58 [0080.336] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e50c) returned 1 [0080.337] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\-XBhFw3KRNIiI.lnk" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\windows\\recent\\-xbhfw3krniii.lnk"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x264 [0080.337] GetFileType (hFile=0x264) returned 0x1 [0080.337] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e508) returned 1 [0080.337] GetFileType (hFile=0x264) returned 0x1 [0080.337] WriteFile (in: hFile=0x264, lpBuffer=0x265c2a4*, nNumberOfBytesToWrite=0xa60, lpNumberOfBytesWritten=0x31e59c, lpOverlapped=0x0 | out: lpBuffer=0x265c2a4*, lpNumberOfBytesWritten=0x31e59c*=0xa60, lpOverlapped=0x0) returned 1 [0080.338] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\-XBhFw3KRNIiI.lnk", nBufferLength=0x105, lpBuffer=0x31e14c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\-XBhFw3KRNIiI.lnk", lpFilePart=0x0) returned 0x58 [0080.338] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\-XBhFw3KRNIiI.lnk", nBufferLength=0x105, lpBuffer=0x31e14c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\-XBhFw3KRNIiI.lnk", lpFilePart=0x0) returned 0x58 [0080.338] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e5ac) returned 1 [0080.338] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\-XBhFw3KRNIiI.lnk" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\windows\\recent\\-xbhfw3krniii.lnk"), fInfoLevelId=0x0, lpFileInformation=0x31e628 | out: lpFileInformation=0x31e628*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xdbb33920, ftCreationTime.dwHighDateTime=0x1d5e82a, ftLastAccessTime.dwLowDateTime=0xdbb33920, ftLastAccessTime.dwHighDateTime=0x1d5e82a, ftLastWriteTime.dwLowDateTime=0x13532b80, ftLastWriteTime.dwHighDateTime=0x1d6eb7f, nFileSizeHigh=0x0, nFileSizeLow=0xa60)) returned 1 [0080.339] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e5a8) returned 1 [0080.339] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\-XBhFw3KRNIiI.lnk" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\windows\\recent\\-xbhfw3krniii.lnk"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\-XBhFw3KRNIiI.lnk" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\windows\\recent\\-xbhfw3krniii.lnk")) returned 1 [0080.339] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\02uI45CVA0UfWQJTSx6.lnk", nBufferLength=0x105, lpBuffer=0x31e02c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\02uI45CVA0UfWQJTSx6.lnk", lpFilePart=0x0) returned 0x5e [0080.339] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e520) returned 1 [0080.339] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\02uI45CVA0UfWQJTSx6.lnk" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\windows\\recent\\02ui45cva0ufwqjtsx6.lnk"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x264 [0080.339] GetFileType (hFile=0x264) returned 0x1 [0080.339] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e51c) returned 1 [0080.339] GetFileType (hFile=0x264) returned 0x1 [0080.339] GetFileSize (in: hFile=0x264, lpFileSizeHigh=0x31e628 | out: lpFileSizeHigh=0x31e628*=0x0) returned 0x1c32 [0080.340] ReadFile (in: hFile=0x264, lpBuffer=0x265d5ac, nNumberOfBytesToRead=0x1c32, lpNumberOfBytesRead=0x31e5d4, lpOverlapped=0x0 | out: lpBuffer=0x265d5ac*, lpNumberOfBytesRead=0x31e5d4*=0x1c32, lpOverlapped=0x0) returned 1 [0080.380] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\02uI45CVA0UfWQJTSx6.lnk", nBufferLength=0x105, lpBuffer=0x31e018, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\02uI45CVA0UfWQJTSx6.lnk", lpFilePart=0x0) returned 0x5e [0080.380] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e50c) returned 1 [0080.380] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\02uI45CVA0UfWQJTSx6.lnk" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\windows\\recent\\02ui45cva0ufwqjtsx6.lnk"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x264 [0080.381] GetFileType (hFile=0x264) returned 0x1 [0080.381] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e508) returned 1 [0080.381] GetFileType (hFile=0x264) returned 0x1 [0080.381] WriteFile (in: hFile=0x264, lpBuffer=0x26b3230*, nNumberOfBytesToWrite=0x1c40, lpNumberOfBytesWritten=0x31e5c8, lpOverlapped=0x0 | out: lpBuffer=0x26b3230*, lpNumberOfBytesWritten=0x31e5c8*=0x1c40, lpOverlapped=0x0) returned 1 [0080.382] CloseHandle (hObject=0x264) returned 1 [0080.382] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\02uI45CVA0UfWQJTSx6.lnk", nBufferLength=0x105, lpBuffer=0x31e14c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\02uI45CVA0UfWQJTSx6.lnk", lpFilePart=0x0) returned 0x5e [0080.382] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\02uI45CVA0UfWQJTSx6.lnk", nBufferLength=0x105, lpBuffer=0x31e14c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\02uI45CVA0UfWQJTSx6.lnk", lpFilePart=0x0) returned 0x5e [0080.382] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e5ac) returned 1 [0080.382] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\02uI45CVA0UfWQJTSx6.lnk" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\windows\\recent\\02ui45cva0ufwqjtsx6.lnk"), fInfoLevelId=0x0, lpFileInformation=0x31e628 | out: lpFileInformation=0x31e628*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xdcda63a0, ftCreationTime.dwHighDateTime=0x1d5e82a, ftLastAccessTime.dwLowDateTime=0xdcda63a0, ftLastAccessTime.dwHighDateTime=0x1d5e82a, ftLastWriteTime.dwLowDateTime=0x135a4fa0, ftLastWriteTime.dwHighDateTime=0x1d6eb7f, nFileSizeHigh=0x0, nFileSizeLow=0x1c40)) returned 1 [0080.382] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e5a8) returned 1 [0080.382] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\02uI45CVA0UfWQJTSx6.lnk" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\windows\\recent\\02ui45cva0ufwqjtsx6.lnk"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\02uI45CVA0UfWQJTSx6.lnk" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\windows\\recent\\02ui45cva0ufwqjtsx6.lnk")) returned 1 [0080.383] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\0fonx3QbySjHW9kekT.flv.lnk", nBufferLength=0x105, lpBuffer=0x31e02c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\0fonx3QbySjHW9kekT.flv.lnk", lpFilePart=0x0) returned 0x61 [0080.383] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e520) returned 1 [0080.383] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\0fonx3QbySjHW9kekT.flv.lnk" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\windows\\recent\\0fonx3qbysjhw9kekt.flv.lnk"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x264 [0080.383] GetFileType (hFile=0x264) returned 0x1 [0080.383] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e51c) returned 1 [0080.383] GetFileType (hFile=0x264) returned 0x1 [0080.383] GetFileSize (in: hFile=0x264, lpFileSizeHigh=0x31e628 | out: lpFileSizeHigh=0x31e628*=0x0) returned 0x1471 [0080.383] ReadFile (in: hFile=0x264, lpBuffer=0x26b5300, nNumberOfBytesToRead=0x1471, lpNumberOfBytesRead=0x31e5d4, lpOverlapped=0x0 | out: lpBuffer=0x26b5300*, lpNumberOfBytesRead=0x31e5d4*=0x1471, lpOverlapped=0x0) returned 1 [0080.384] CloseHandle (hObject=0x264) returned 1 [0080.398] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\0fonx3QbySjHW9kekT.flv.lnk", nBufferLength=0x105, lpBuffer=0x31e018, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\0fonx3QbySjHW9kekT.flv.lnk", lpFilePart=0x0) returned 0x61 [0080.398] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e50c) returned 1 [0080.398] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\0fonx3QbySjHW9kekT.flv.lnk" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\windows\\recent\\0fonx3qbysjhw9kekt.flv.lnk"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x264 [0080.399] GetFileType (hFile=0x264) returned 0x1 [0080.399] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e508) returned 1 [0080.399] GetFileType (hFile=0x264) returned 0x1 [0080.399] WriteFile (in: hFile=0x264, lpBuffer=0x2708768*, nNumberOfBytesToWrite=0x1480, lpNumberOfBytesWritten=0x31e5c8, lpOverlapped=0x0 | out: lpBuffer=0x2708768*, lpNumberOfBytesWritten=0x31e5c8*=0x1480, lpOverlapped=0x0) returned 1 [0080.400] CloseHandle (hObject=0x264) returned 1 [0080.400] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\0fonx3QbySjHW9kekT.flv.lnk", nBufferLength=0x105, lpBuffer=0x31e14c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\0fonx3QbySjHW9kekT.flv.lnk", lpFilePart=0x0) returned 0x61 [0080.400] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\0fonx3QbySjHW9kekT.flv.lnk", nBufferLength=0x105, lpBuffer=0x31e14c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\0fonx3QbySjHW9kekT.flv.lnk", lpFilePart=0x0) returned 0x61 [0080.400] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e5ac) returned 1 [0080.400] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\0fonx3QbySjHW9kekT.flv.lnk" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\windows\\recent\\0fonx3qbysjhw9kekt.flv.lnk"), fInfoLevelId=0x0, lpFileInformation=0x31e628 | out: lpFileInformation=0x31e628*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xdd40bec0, ftCreationTime.dwHighDateTime=0x1d5e82a, ftLastAccessTime.dwLowDateTime=0xdd40bec0, ftLastAccessTime.dwHighDateTime=0x1d5e82a, ftLastWriteTime.dwLowDateTime=0x135cb100, ftLastWriteTime.dwHighDateTime=0x1d6eb7f, nFileSizeHigh=0x0, nFileSizeLow=0x1480)) returned 1 [0080.400] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e5a8) returned 1 [0080.400] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\0fonx3QbySjHW9kekT.flv.lnk" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\windows\\recent\\0fonx3qbysjhw9kekt.flv.lnk"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\0fonx3QbySjHW9kekT.flv.lnk" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\windows\\recent\\0fonx3qbysjhw9kekt.flv.lnk")) returned 1 [0080.401] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\0QpBHVtt5vUmfNi.lnk", nBufferLength=0x105, lpBuffer=0x31e02c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\0QpBHVtt5vUmfNi.lnk", lpFilePart=0x0) returned 0x5a [0080.401] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e520) returned 1 [0080.401] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\0QpBHVtt5vUmfNi.lnk" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\windows\\recent\\0qpbhvtt5vumfni.lnk"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x264 [0080.401] GetFileType (hFile=0x264) returned 0x1 [0080.401] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e51c) returned 1 [0080.401] GetFileType (hFile=0x264) returned 0x1 [0080.401] GetFileSize (in: hFile=0x264, lpFileSizeHigh=0x31e628 | out: lpFileSizeHigh=0x31e628*=0x0) returned 0x1c06 [0080.401] ReadFile (in: hFile=0x264, lpBuffer=0x270a070, nNumberOfBytesToRead=0x1c06, lpNumberOfBytesRead=0x31e5d4, lpOverlapped=0x0 | out: lpBuffer=0x270a070*, lpNumberOfBytesRead=0x31e5d4*=0x1c06, lpOverlapped=0x0) returned 1 [0080.402] CloseHandle (hObject=0x264) returned 1 [0080.415] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\0QpBHVtt5vUmfNi.lnk", nBufferLength=0x105, lpBuffer=0x31e018, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\0QpBHVtt5vUmfNi.lnk", lpFilePart=0x0) returned 0x5a [0080.415] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e50c) returned 1 [0080.415] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\0QpBHVtt5vUmfNi.lnk" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\windows\\recent\\0qpbhvtt5vumfni.lnk"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x264 [0080.416] GetFileType (hFile=0x264) returned 0x1 [0080.416] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e508) returned 1 [0080.416] GetFileType (hFile=0x264) returned 0x1 [0080.416] WriteFile (in: hFile=0x264, lpBuffer=0x275faa8*, nNumberOfBytesToWrite=0x1c10, lpNumberOfBytesWritten=0x31e5c8, lpOverlapped=0x0 | out: lpBuffer=0x275faa8*, lpNumberOfBytesWritten=0x31e5c8*=0x1c10, lpOverlapped=0x0) returned 1 [0080.417] CloseHandle (hObject=0x264) returned 1 [0080.417] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\0QpBHVtt5vUmfNi.lnk", nBufferLength=0x105, lpBuffer=0x31e14c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\0QpBHVtt5vUmfNi.lnk", lpFilePart=0x0) returned 0x5a [0080.417] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\0QpBHVtt5vUmfNi.lnk", nBufferLength=0x105, lpBuffer=0x31e14c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\0QpBHVtt5vUmfNi.lnk", lpFilePart=0x0) returned 0x5a [0080.417] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e5ac) returned 1 [0080.417] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\0QpBHVtt5vUmfNi.lnk" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\windows\\recent\\0qpbhvtt5vumfni.lnk"), fInfoLevelId=0x0, lpFileInformation=0x31e628 | out: lpFileInformation=0x31e628*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xdbb59a80, ftCreationTime.dwHighDateTime=0x1d5e82a, ftLastAccessTime.dwLowDateTime=0xdbb59a80, ftLastAccessTime.dwHighDateTime=0x1d5e82a, ftLastWriteTime.dwLowDateTime=0x135f1260, ftLastWriteTime.dwHighDateTime=0x1d6eb7f, nFileSizeHigh=0x0, nFileSizeLow=0x1c10)) returned 1 [0080.417] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e5a8) returned 1 [0080.418] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\0QpBHVtt5vUmfNi.lnk" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\windows\\recent\\0qpbhvtt5vumfni.lnk"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\0QpBHVtt5vUmfNi.lnk" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\windows\\recent\\0qpbhvtt5vumfni.lnk")) returned 1 [0080.418] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\1GMPKC9.lnk", nBufferLength=0x105, lpBuffer=0x31e02c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\1GMPKC9.lnk", lpFilePart=0x0) returned 0x52 [0080.418] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e520) returned 1 [0080.418] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\1GMPKC9.lnk" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\windows\\recent\\1gmpkc9.lnk"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x264 [0080.418] GetFileType (hFile=0x264) returned 0x1 [0080.418] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e51c) returned 1 [0080.418] GetFileType (hFile=0x264) returned 0x1 [0080.419] GetFileSize (in: hFile=0x264, lpFileSizeHigh=0x31e628 | out: lpFileSizeHigh=0x31e628*=0x0) returned 0xa16 [0080.419] ReadFile (in: hFile=0x264, lpBuffer=0x2762510, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x31e5d4, lpOverlapped=0x0 | out: lpBuffer=0x2762510*, lpNumberOfBytesRead=0x31e5d4*=0xa16, lpOverlapped=0x0) returned 1 [0080.419] CloseHandle (hObject=0x264) returned 1 [0080.433] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\1GMPKC9.lnk", nBufferLength=0x105, lpBuffer=0x31e018, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\1GMPKC9.lnk", lpFilePart=0x0) returned 0x52 [0080.433] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e50c) returned 1 [0080.433] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\1GMPKC9.lnk" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\windows\\recent\\1gmpkc9.lnk"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x264 [0080.434] GetFileType (hFile=0x264) returned 0x1 [0080.434] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e508) returned 1 [0080.434] GetFileType (hFile=0x264) returned 0x1 [0080.436] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\1GMPKC9.lnk", nBufferLength=0x105, lpBuffer=0x31e14c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\1GMPKC9.lnk", lpFilePart=0x0) returned 0x52 [0080.436] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\1GMPKC9.lnk", nBufferLength=0x105, lpBuffer=0x31e14c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\1GMPKC9.lnk", lpFilePart=0x0) returned 0x52 [0080.436] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e5ac) returned 1 [0080.436] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\1GMPKC9.lnk" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\windows\\recent\\1gmpkc9.lnk"), fInfoLevelId=0x0, lpFileInformation=0x31e628 | out: lpFileInformation=0x31e628*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xdcc03480, ftCreationTime.dwHighDateTime=0x1d5e82a, ftLastAccessTime.dwLowDateTime=0xdcc03480, ftLastAccessTime.dwHighDateTime=0x1d5e82a, ftLastWriteTime.dwLowDateTime=0x1363d520, ftLastWriteTime.dwHighDateTime=0x1d6eb7f, nFileSizeHigh=0x0, nFileSizeLow=0xa20)) returned 1 [0080.436] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e5a8) returned 1 [0080.436] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\1GMPKC9.lnk" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\windows\\recent\\1gmpkc9.lnk"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\1GMPKC9.lnk" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\windows\\recent\\1gmpkc9.lnk")) returned 1 [0080.437] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\1iogfuz_21wpdknL.lnk", nBufferLength=0x105, lpBuffer=0x31e02c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\1iogfuz_21wpdknL.lnk", lpFilePart=0x0) returned 0x5b [0080.437] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e520) returned 1 [0080.437] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\1iogfuz_21wpdknL.lnk" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\windows\\recent\\1iogfuz_21wpdknl.lnk"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x264 [0080.437] GetFileType (hFile=0x264) returned 0x1 [0080.437] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e51c) returned 1 [0080.437] GetFileType (hFile=0x264) returned 0x1 [0080.437] GetFileSize (in: hFile=0x264, lpFileSizeHigh=0x31e628 | out: lpFileSizeHigh=0x31e628*=0x0) returned 0x328 [0080.437] ReadFile (in: hFile=0x264, lpBuffer=0x27b4cf8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x31e5d4, lpOverlapped=0x0 | out: lpBuffer=0x27b4cf8*, lpNumberOfBytesRead=0x31e5d4*=0x328, lpOverlapped=0x0) returned 1 [0080.438] CloseHandle (hObject=0x264) returned 1 [0080.451] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\1iogfuz_21wpdknL.lnk", nBufferLength=0x105, lpBuffer=0x31e018, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\1iogfuz_21wpdknL.lnk", lpFilePart=0x0) returned 0x5b [0080.451] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e50c) returned 1 [0080.451] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\1iogfuz_21wpdknL.lnk" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\windows\\recent\\1iogfuz_21wpdknl.lnk"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x264 [0080.452] GetFileType (hFile=0x264) returned 0x1 [0080.452] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e508) returned 1 [0080.452] GetFileType (hFile=0x264) returned 0x1 [0080.452] WriteFile (in: hFile=0x264, lpBuffer=0x2803c38*, nNumberOfBytesToWrite=0x330, lpNumberOfBytesWritten=0x31e59c, lpOverlapped=0x0 | out: lpBuffer=0x2803c38*, lpNumberOfBytesWritten=0x31e59c*=0x330, lpOverlapped=0x0) returned 1 [0080.453] CloseHandle (hObject=0x264) returned 1 [0080.453] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\1iogfuz_21wpdknL.lnk", nBufferLength=0x105, lpBuffer=0x31e14c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\1iogfuz_21wpdknL.lnk", lpFilePart=0x0) returned 0x5b [0080.453] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\1iogfuz_21wpdknL.lnk", nBufferLength=0x105, lpBuffer=0x31e14c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\1iogfuz_21wpdknL.lnk", lpFilePart=0x0) returned 0x5b [0080.453] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e5ac) returned 1 [0080.453] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\1iogfuz_21wpdknL.lnk" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\windows\\recent\\1iogfuz_21wpdknl.lnk"), fInfoLevelId=0x0, lpFileInformation=0x31e628 | out: lpFileInformation=0x31e628*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xdd1384a0, ftCreationTime.dwHighDateTime=0x1d5e82a, ftLastAccessTime.dwLowDateTime=0xdd1384a0, ftLastAccessTime.dwHighDateTime=0x1d5e82a, ftLastWriteTime.dwLowDateTime=0x13663680, ftLastWriteTime.dwHighDateTime=0x1d6eb7f, nFileSizeHigh=0x0, nFileSizeLow=0x330)) returned 1 [0080.453] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e5a8) returned 1 [0080.453] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\1iogfuz_21wpdknL.lnk" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\windows\\recent\\1iogfuz_21wpdknl.lnk"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\1iogfuz_21wpdknL.lnk" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\windows\\recent\\1iogfuz_21wpdknl.lnk")) returned 1 [0080.454] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\1MlIv-7ANr-ec.lnk", nBufferLength=0x105, lpBuffer=0x31e02c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\1MlIv-7ANr-ec.lnk", lpFilePart=0x0) returned 0x58 [0080.454] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e520) returned 1 [0080.454] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\1MlIv-7ANr-ec.lnk" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\windows\\recent\\1mliv-7anr-ec.lnk"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x264 [0080.454] GetFileType (hFile=0x264) returned 0x1 [0080.454] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e51c) returned 1 [0080.454] GetFileType (hFile=0x264) returned 0x1 [0080.454] GetFileSize (in: hFile=0x264, lpFileSizeHigh=0x31e628 | out: lpFileSizeHigh=0x31e628*=0x0) returned 0x1ab3 [0080.454] ReadFile (in: hFile=0x264, lpBuffer=0x2804f30, nNumberOfBytesToRead=0x1ab3, lpNumberOfBytesRead=0x31e5d4, lpOverlapped=0x0 | out: lpBuffer=0x2804f30*, lpNumberOfBytesRead=0x31e5d4*=0x1ab3, lpOverlapped=0x0) returned 1 [0080.455] CloseHandle (hObject=0x264) returned 1 [0080.471] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\1MlIv-7ANr-ec.lnk", nBufferLength=0x105, lpBuffer=0x31e018, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\1MlIv-7ANr-ec.lnk", lpFilePart=0x0) returned 0x58 [0080.471] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e50c) returned 1 [0080.471] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\1MlIv-7ANr-ec.lnk" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\windows\\recent\\1mliv-7anr-ec.lnk"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x264 [0080.472] GetFileType (hFile=0x264) returned 0x1 [0080.472] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e508) returned 1 [0080.472] GetFileType (hFile=0x264) returned 0x1 [0080.472] WriteFile (in: hFile=0x264, lpBuffer=0x265dd68*, nNumberOfBytesToWrite=0x1ac0, lpNumberOfBytesWritten=0x31e5c8, lpOverlapped=0x0 | out: lpBuffer=0x265dd68*, lpNumberOfBytesWritten=0x31e5c8*=0x1ac0, lpOverlapped=0x0) returned 1 [0080.473] CloseHandle (hObject=0x264) returned 1 [0080.473] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\1MlIv-7ANr-ec.lnk", nBufferLength=0x105, lpBuffer=0x31e14c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\1MlIv-7ANr-ec.lnk", lpFilePart=0x0) returned 0x58 [0080.473] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\1MlIv-7ANr-ec.lnk", nBufferLength=0x105, lpBuffer=0x31e14c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\1MlIv-7ANr-ec.lnk", lpFilePart=0x0) returned 0x58 [0080.473] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e5ac) returned 1 [0080.473] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\1MlIv-7ANr-ec.lnk" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\windows\\recent\\1mliv-7anr-ec.lnk"), fInfoLevelId=0x0, lpFileInformation=0x31e628 | out: lpFileInformation=0x31e628*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xdcaac820, ftCreationTime.dwHighDateTime=0x1d5e82a, ftLastAccessTime.dwLowDateTime=0xdcaac820, ftLastAccessTime.dwHighDateTime=0x1d5e82a, ftLastWriteTime.dwLowDateTime=0x136897e0, ftLastWriteTime.dwHighDateTime=0x1d6eb7f, nFileSizeHigh=0x0, nFileSizeLow=0x1ac0)) returned 1 [0080.473] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e5a8) returned 1 [0080.474] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\1MlIv-7ANr-ec.lnk" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\windows\\recent\\1mliv-7anr-ec.lnk"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\1MlIv-7ANr-ec.lnk" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\windows\\recent\\1mliv-7anr-ec.lnk")) returned 1 [0080.474] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\2iM6el404FPP9.lnk", nBufferLength=0x105, lpBuffer=0x31e02c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\2iM6el404FPP9.lnk", lpFilePart=0x0) returned 0x58 [0080.474] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e520) returned 1 [0080.474] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\2iM6el404FPP9.lnk" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\windows\\recent\\2im6el404fpp9.lnk"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x264 [0080.474] GetFileType (hFile=0x264) returned 0x1 [0080.474] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e51c) returned 1 [0080.474] GetFileType (hFile=0x264) returned 0x1 [0080.474] GetFileSize (in: hFile=0x264, lpFileSizeHigh=0x31e628 | out: lpFileSizeHigh=0x31e628*=0x0) returned 0xa38 [0080.475] ReadFile (in: hFile=0x264, lpBuffer=0x26606a8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x31e5d4, lpOverlapped=0x0 | out: lpBuffer=0x26606a8*, lpNumberOfBytesRead=0x31e5d4*=0xa38, lpOverlapped=0x0) returned 1 [0080.475] CloseHandle (hObject=0x264) returned 1 [0080.488] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\2iM6el404FPP9.lnk", nBufferLength=0x105, lpBuffer=0x31e018, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\2iM6el404FPP9.lnk", lpFilePart=0x0) returned 0x58 [0080.489] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e50c) returned 1 [0080.489] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\2iM6el404FPP9.lnk" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\windows\\recent\\2im6el404fpp9.lnk"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x264 [0080.489] GetFileType (hFile=0x264) returned 0x1 [0080.489] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e508) returned 1 [0080.489] GetFileType (hFile=0x264) returned 0x1 [0080.490] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\2iM6el404FPP9.lnk", nBufferLength=0x105, lpBuffer=0x31e14c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\2iM6el404FPP9.lnk", lpFilePart=0x0) returned 0x58 [0080.490] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\2iM6el404FPP9.lnk", nBufferLength=0x105, lpBuffer=0x31e14c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\2iM6el404FPP9.lnk", lpFilePart=0x0) returned 0x58 [0080.490] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e5ac) returned 1 [0080.490] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\2iM6el404FPP9.lnk" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\windows\\recent\\2im6el404fpp9.lnk"), fInfoLevelId=0x0, lpFileInformation=0x31e628 | out: lpFileInformation=0x31e628*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xdd4f0700, ftCreationTime.dwHighDateTime=0x1d5e82a, ftLastAccessTime.dwLowDateTime=0xdd4f0700, ftLastAccessTime.dwHighDateTime=0x1d5e82a, ftLastWriteTime.dwLowDateTime=0x136af940, ftLastWriteTime.dwHighDateTime=0x1d6eb7f, nFileSizeHigh=0x0, nFileSizeLow=0xa40)) returned 1 [0080.491] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e5a8) returned 1 [0080.491] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\2iM6el404FPP9.lnk" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\windows\\recent\\2im6el404fpp9.lnk"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\2iM6el404FPP9.lnk" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\windows\\recent\\2im6el404fpp9.lnk")) returned 1 [0080.491] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\2LKK31mn8fmrauO.lnk", nBufferLength=0x105, lpBuffer=0x31e02c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\2LKK31mn8fmrauO.lnk", lpFilePart=0x0) returned 0x5a [0080.491] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e520) returned 1 [0080.491] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\2LKK31mn8fmrauO.lnk" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\windows\\recent\\2lkk31mn8fmrauo.lnk"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x264 [0080.491] GetFileType (hFile=0x264) returned 0x1 [0080.491] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e51c) returned 1 [0080.491] GetFileType (hFile=0x264) returned 0x1 [0080.491] GetFileSize (in: hFile=0x264, lpFileSizeHigh=0x31e628 | out: lpFileSizeHigh=0x31e628*=0x0) returned 0x40b [0080.492] ReadFile (in: hFile=0x264, lpBuffer=0x26b3198, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x31e5d4, lpOverlapped=0x0 | out: lpBuffer=0x26b3198*, lpNumberOfBytesRead=0x31e5d4*=0x40b, lpOverlapped=0x0) returned 1 [0080.492] CloseHandle (hObject=0x264) returned 1 [0080.506] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\2LKK31mn8fmrauO.lnk", nBufferLength=0x105, lpBuffer=0x31e018, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\2LKK31mn8fmrauO.lnk", lpFilePart=0x0) returned 0x5a [0080.506] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e50c) returned 1 [0080.506] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\2LKK31mn8fmrauO.lnk" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\windows\\recent\\2lkk31mn8fmrauo.lnk"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x264 [0080.507] GetFileType (hFile=0x264) returned 0x1 [0080.507] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e508) returned 1 [0080.507] GetFileType (hFile=0x264) returned 0x1 [0080.507] WriteFile (in: hFile=0x264, lpBuffer=0x2702534*, nNumberOfBytesToWrite=0x410, lpNumberOfBytesWritten=0x31e59c, lpOverlapped=0x0 | out: lpBuffer=0x2702534*, lpNumberOfBytesWritten=0x31e59c*=0x410, lpOverlapped=0x0) returned 1 [0080.508] CloseHandle (hObject=0x264) returned 1 [0080.508] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\2LKK31mn8fmrauO.lnk", nBufferLength=0x105, lpBuffer=0x31e14c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\2LKK31mn8fmrauO.lnk", lpFilePart=0x0) returned 0x5a [0080.508] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\2LKK31mn8fmrauO.lnk", nBufferLength=0x105, lpBuffer=0x31e14c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\2LKK31mn8fmrauO.lnk", lpFilePart=0x0) returned 0x5a [0080.508] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e5ac) returned 1 [0080.508] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\2LKK31mn8fmrauO.lnk" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\windows\\recent\\2lkk31mn8fmrauo.lnk"), fInfoLevelId=0x0, lpFileInformation=0x31e628 | out: lpFileInformation=0x31e628*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xdd647360, ftCreationTime.dwHighDateTime=0x1d5e82a, ftLastAccessTime.dwLowDateTime=0xdd647360, ftLastAccessTime.dwHighDateTime=0x1d5e82a, ftLastWriteTime.dwLowDateTime=0x136d5aa0, ftLastWriteTime.dwHighDateTime=0x1d6eb7f, nFileSizeHigh=0x0, nFileSizeLow=0x410)) returned 1 [0080.508] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e5a8) returned 1 [0080.508] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\2LKK31mn8fmrauO.lnk" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\windows\\recent\\2lkk31mn8fmrauo.lnk"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\2LKK31mn8fmrauO.lnk" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\windows\\recent\\2lkk31mn8fmrauo.lnk")) returned 1 [0080.509] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\2pGy8blaGINSTsQu.lnk", nBufferLength=0x105, lpBuffer=0x31e02c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\2pGy8blaGINSTsQu.lnk", lpFilePart=0x0) returned 0x5b [0080.509] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e520) returned 1 [0080.509] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\2pGy8blaGINSTsQu.lnk" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\windows\\recent\\2pgy8blaginstsqu.lnk"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x264 [0080.509] GetFileType (hFile=0x264) returned 0x1 [0080.509] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e51c) returned 1 [0080.509] GetFileType (hFile=0x264) returned 0x1 [0080.509] GetFileSize (in: hFile=0x264, lpFileSizeHigh=0x31e628 | out: lpFileSizeHigh=0x31e628*=0x0) returned 0x221b [0080.509] ReadFile (in: hFile=0x264, lpBuffer=0x2703838, nNumberOfBytesToRead=0x221b, lpNumberOfBytesRead=0x31e5d4, lpOverlapped=0x0 | out: lpBuffer=0x2703838*, lpNumberOfBytesRead=0x31e5d4*=0x221b, lpOverlapped=0x0) returned 1 [0080.510] CloseHandle (hObject=0x264) returned 1 [0080.524] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\2pGy8blaGINSTsQu.lnk", nBufferLength=0x105, lpBuffer=0x31e018, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\2pGy8blaGINSTsQu.lnk", lpFilePart=0x0) returned 0x5b [0080.524] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e50c) returned 1 [0080.524] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\2pGy8blaGINSTsQu.lnk" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\windows\\recent\\2pgy8blaginstsqu.lnk"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x264 [0080.525] GetFileType (hFile=0x264) returned 0x1 [0080.525] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e508) returned 1 [0080.525] GetFileType (hFile=0x264) returned 0x1 [0080.525] WriteFile (in: hFile=0x264, lpBuffer=0x275b0c0*, nNumberOfBytesToWrite=0x2220, lpNumberOfBytesWritten=0x31e5c8, lpOverlapped=0x0 | out: lpBuffer=0x275b0c0*, lpNumberOfBytesWritten=0x31e5c8*=0x2220, lpOverlapped=0x0) returned 1 [0080.526] CloseHandle (hObject=0x264) returned 1 [0080.526] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\2pGy8blaGINSTsQu.lnk", nBufferLength=0x105, lpBuffer=0x31e14c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\2pGy8blaGINSTsQu.lnk", lpFilePart=0x0) returned 0x5b [0080.526] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\2pGy8blaGINSTsQu.lnk", nBufferLength=0x105, lpBuffer=0x31e14c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\2pGy8blaGINSTsQu.lnk", lpFilePart=0x0) returned 0x5b [0080.526] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e5ac) returned 1 [0080.526] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\2pGy8blaGINSTsQu.lnk" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\windows\\recent\\2pgy8blaginstsqu.lnk"), fInfoLevelId=0x0, lpFileInformation=0x31e628 | out: lpFileInformation=0x31e628*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xdd15e600, ftCreationTime.dwHighDateTime=0x1d5e82a, ftLastAccessTime.dwLowDateTime=0xdd15e600, ftLastAccessTime.dwHighDateTime=0x1d5e82a, ftLastWriteTime.dwLowDateTime=0x136fbc00, ftLastWriteTime.dwHighDateTime=0x1d6eb7f, nFileSizeHigh=0x0, nFileSizeLow=0x2220)) returned 1 [0080.526] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e5a8) returned 1 [0080.526] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\2pGy8blaGINSTsQu.lnk" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\windows\\recent\\2pgy8blaginstsqu.lnk"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\2pGy8blaGINSTsQu.lnk" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\windows\\recent\\2pgy8blaginstsqu.lnk")) returned 1 [0080.527] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\35bcBrdvj.lnk", nBufferLength=0x105, lpBuffer=0x31e02c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\35bcBrdvj.lnk", lpFilePart=0x0) returned 0x54 [0080.527] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e520) returned 1 [0080.527] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\35bcBrdvj.lnk" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\windows\\recent\\35bcbrdvj.lnk"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x264 [0080.527] GetFileType (hFile=0x264) returned 0x1 [0080.527] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e51c) returned 1 [0080.527] GetFileType (hFile=0x264) returned 0x1 [0080.527] GetFileSize (in: hFile=0x264, lpFileSizeHigh=0x31e628 | out: lpFileSizeHigh=0x31e628*=0x0) returned 0x1596 [0080.527] ReadFile (in: hFile=0x264, lpBuffer=0x275d720, nNumberOfBytesToRead=0x1596, lpNumberOfBytesRead=0x31e5d4, lpOverlapped=0x0 | out: lpBuffer=0x275d720*, lpNumberOfBytesRead=0x31e5d4*=0x1596, lpOverlapped=0x0) returned 1 [0080.528] CloseHandle (hObject=0x264) returned 1 [0080.542] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\35bcBrdvj.lnk", nBufferLength=0x105, lpBuffer=0x31e018, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\35bcBrdvj.lnk", lpFilePart=0x0) returned 0x54 [0080.542] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e50c) returned 1 [0080.542] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\35bcBrdvj.lnk" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\windows\\recent\\35bcbrdvj.lnk"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x264 [0080.543] GetFileType (hFile=0x264) returned 0x1 [0080.543] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e508) returned 1 [0080.543] GetFileType (hFile=0x264) returned 0x1 [0080.543] WriteFile (in: hFile=0x264, lpBuffer=0x27b1128*, nNumberOfBytesToWrite=0x15a0, lpNumberOfBytesWritten=0x31e5c8, lpOverlapped=0x0 | out: lpBuffer=0x27b1128*, lpNumberOfBytesWritten=0x31e5c8*=0x15a0, lpOverlapped=0x0) returned 1 [0080.544] CloseHandle (hObject=0x264) returned 1 [0080.544] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\35bcBrdvj.lnk", nBufferLength=0x105, lpBuffer=0x31e14c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\35bcBrdvj.lnk", lpFilePart=0x0) returned 0x54 [0080.544] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\35bcBrdvj.lnk", nBufferLength=0x105, lpBuffer=0x31e14c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\35bcBrdvj.lnk", lpFilePart=0x0) returned 0x54 [0080.544] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e5ac) returned 1 [0080.544] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\35bcBrdvj.lnk" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\windows\\recent\\35bcbrdvj.lnk"), fInfoLevelId=0x0, lpFileInformation=0x31e628 | out: lpFileInformation=0x31e628*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xdca3a400, ftCreationTime.dwHighDateTime=0x1d5e82a, ftLastAccessTime.dwLowDateTime=0xdca3a400, ftLastAccessTime.dwHighDateTime=0x1d5e82a, ftLastWriteTime.dwLowDateTime=0x13747ec0, ftLastWriteTime.dwHighDateTime=0x1d6eb7f, nFileSizeHigh=0x0, nFileSizeLow=0x15a0)) returned 1 [0080.544] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e5a8) returned 1 [0080.544] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\35bcBrdvj.lnk" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\windows\\recent\\35bcbrdvj.lnk"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\35bcBrdvj.lnk" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\windows\\recent\\35bcbrdvj.lnk")) returned 1 [0080.545] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\3fmT5WPHA39l3f9.lnk", nBufferLength=0x105, lpBuffer=0x31e02c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\3fmT5WPHA39l3f9.lnk", lpFilePart=0x0) returned 0x5a [0080.545] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e520) returned 1 [0080.545] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\3fmT5WPHA39l3f9.lnk" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\windows\\recent\\3fmt5wpha39l3f9.lnk"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x264 [0080.545] GetFileType (hFile=0x264) returned 0x1 [0080.545] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e51c) returned 1 [0080.545] GetFileType (hFile=0x264) returned 0x1 [0080.545] GetFileSize (in: hFile=0x264, lpFileSizeHigh=0x31e628 | out: lpFileSizeHigh=0x31e628*=0x0) returned 0x9ad [0080.545] ReadFile (in: hFile=0x264, lpBuffer=0x27b34a8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x31e5d4, lpOverlapped=0x0 | out: lpBuffer=0x27b34a8*, lpNumberOfBytesRead=0x31e5d4*=0x9ad, lpOverlapped=0x0) returned 1 [0080.546] CloseHandle (hObject=0x264) returned 1 [0080.562] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\3fmT5WPHA39l3f9.lnk", nBufferLength=0x105, lpBuffer=0x31e018, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\3fmT5WPHA39l3f9.lnk", lpFilePart=0x0) returned 0x5a [0080.562] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e50c) returned 1 [0080.562] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\3fmT5WPHA39l3f9.lnk" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\windows\\recent\\3fmt5wpha39l3f9.lnk"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x264 [0080.563] GetFileType (hFile=0x264) returned 0x1 [0080.563] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e508) returned 1 [0080.563] GetFileType (hFile=0x264) returned 0x1 [0080.563] WriteFile (in: hFile=0x264, lpBuffer=0x2804460*, nNumberOfBytesToWrite=0x9b0, lpNumberOfBytesWritten=0x31e59c, lpOverlapped=0x0 | out: lpBuffer=0x2804460*, lpNumberOfBytesWritten=0x31e59c*=0x9b0, lpOverlapped=0x0) returned 1 [0080.564] CloseHandle (hObject=0x264) returned 1 [0080.564] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\3fmT5WPHA39l3f9.lnk", nBufferLength=0x105, lpBuffer=0x31e14c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\3fmT5WPHA39l3f9.lnk", lpFilePart=0x0) returned 0x5a [0080.564] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\3fmT5WPHA39l3f9.lnk", nBufferLength=0x105, lpBuffer=0x31e14c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\3fmT5WPHA39l3f9.lnk", lpFilePart=0x0) returned 0x5a [0080.564] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e5ac) returned 1 [0080.565] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\3fmT5WPHA39l3f9.lnk" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\windows\\recent\\3fmt5wpha39l3f9.lnk"), fInfoLevelId=0x0, lpFileInformation=0x31e628 | out: lpFileInformation=0x31e628*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xdc635ee0, ftCreationTime.dwHighDateTime=0x1d5e82a, ftLastAccessTime.dwLowDateTime=0xdd588c80, ftLastAccessTime.dwHighDateTime=0x1d5e82a, ftLastWriteTime.dwLowDateTime=0x1376e020, ftLastWriteTime.dwHighDateTime=0x1d6eb7f, nFileSizeHigh=0x0, nFileSizeLow=0x9b0)) returned 1 [0080.565] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e5a8) returned 1 [0080.565] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\3fmT5WPHA39l3f9.lnk" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\windows\\recent\\3fmt5wpha39l3f9.lnk"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\3fmT5WPHA39l3f9.lnk" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\windows\\recent\\3fmt5wpha39l3f9.lnk")) returned 1 [0080.565] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\3g 7kD u8yPvSBKq.lnk", nBufferLength=0x105, lpBuffer=0x31e02c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\3g 7kD u8yPvSBKq.lnk", lpFilePart=0x0) returned 0x5b [0080.565] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e520) returned 1 [0080.565] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\3g 7kD u8yPvSBKq.lnk" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\windows\\recent\\3g 7kd u8ypvsbkq.lnk"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x264 [0080.565] GetFileType (hFile=0x264) returned 0x1 [0080.565] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e51c) returned 1 [0080.566] GetFileType (hFile=0x264) returned 0x1 [0080.566] GetFileSize (in: hFile=0x264, lpFileSizeHigh=0x31e628 | out: lpFileSizeHigh=0x31e628*=0x0) returned 0xa79 [0080.566] ReadFile (in: hFile=0x264, lpBuffer=0x28061ec, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x31e5d4, lpOverlapped=0x0 | out: lpBuffer=0x28061ec*, lpNumberOfBytesRead=0x31e5d4*=0xa79, lpOverlapped=0x0) returned 1 [0080.566] CloseHandle (hObject=0x264) returned 1 [0080.580] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\3g 7kD u8yPvSBKq.lnk", nBufferLength=0x105, lpBuffer=0x31e018, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\3g 7kD u8yPvSBKq.lnk", lpFilePart=0x0) returned 0x5b [0080.580] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e50c) returned 1 [0080.580] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\3g 7kD u8yPvSBKq.lnk" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\windows\\recent\\3g 7kd u8ypvsbkq.lnk"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x264 [0080.581] GetFileType (hFile=0x264) returned 0x1 [0080.581] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e508) returned 1 [0080.581] GetFileType (hFile=0x264) returned 0x1 [0080.581] WriteFile (in: hFile=0x264, lpBuffer=0x28575bc*, nNumberOfBytesToWrite=0xa80, lpNumberOfBytesWritten=0x31e59c, lpOverlapped=0x0 | out: lpBuffer=0x28575bc*, lpNumberOfBytesWritten=0x31e59c*=0xa80, lpOverlapped=0x0) returned 1 [0080.582] CloseHandle (hObject=0x264) returned 1 [0080.582] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\3g 7kD u8yPvSBKq.lnk", nBufferLength=0x105, lpBuffer=0x31e14c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\3g 7kD u8yPvSBKq.lnk", lpFilePart=0x0) returned 0x5b [0080.582] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\3g 7kD u8yPvSBKq.lnk", nBufferLength=0x105, lpBuffer=0x31e14c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\3g 7kD u8yPvSBKq.lnk", lpFilePart=0x0) returned 0x5b [0080.582] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e5ac) returned 1 [0080.582] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\3g 7kD u8yPvSBKq.lnk" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\windows\\recent\\3g 7kd u8ypvsbkq.lnk"), fInfoLevelId=0x0, lpFileInformation=0x31e628 | out: lpFileInformation=0x31e628*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xdb8d2320, ftCreationTime.dwHighDateTime=0x1d5e82a, ftLastAccessTime.dwLowDateTime=0xdb8d2320, ftLastAccessTime.dwHighDateTime=0x1d5e82a, ftLastWriteTime.dwLowDateTime=0x13794180, ftLastWriteTime.dwHighDateTime=0x1d6eb7f, nFileSizeHigh=0x0, nFileSizeLow=0xa80)) returned 1 [0080.582] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e5a8) returned 1 [0080.582] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\3g 7kD u8yPvSBKq.lnk" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\windows\\recent\\3g 7kd u8ypvsbkq.lnk"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\3g 7kD u8yPvSBKq.lnk" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\windows\\recent\\3g 7kd u8ypvsbkq.lnk")) returned 1 [0080.583] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\3Sx06XnyBNN.lnk", nBufferLength=0x105, lpBuffer=0x31e02c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\3Sx06XnyBNN.lnk", lpFilePart=0x0) returned 0x56 [0080.583] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e520) returned 1 [0080.583] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\3Sx06XnyBNN.lnk" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\windows\\recent\\3sx06xnybnn.lnk"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x264 [0080.583] GetFileType (hFile=0x264) returned 0x1 [0080.583] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e51c) returned 1 [0080.583] GetFileType (hFile=0x264) returned 0x1 [0080.583] GetFileSize (in: hFile=0x264, lpFileSizeHigh=0x31e628 | out: lpFileSizeHigh=0x31e628*=0x0) returned 0xa22 [0080.583] ReadFile (in: hFile=0x264, lpBuffer=0x28592dc, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x31e5d4, lpOverlapped=0x0 | out: lpBuffer=0x28592dc*, lpNumberOfBytesRead=0x31e5d4*=0xa22, lpOverlapped=0x0) returned 1 [0080.584] CloseHandle (hObject=0x264) returned 1 [0080.626] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\3Sx06XnyBNN.lnk", nBufferLength=0x105, lpBuffer=0x31e018, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\3Sx06XnyBNN.lnk", lpFilePart=0x0) returned 0x56 [0080.626] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e50c) returned 1 [0080.626] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\3Sx06XnyBNN.lnk" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\windows\\recent\\3sx06xnybnn.lnk"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x264 [0080.627] GetFileType (hFile=0x264) returned 0x1 [0080.627] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e508) returned 1 [0080.627] GetFileType (hFile=0x264) returned 0x1 [0080.627] WriteFile (in: hFile=0x264, lpBuffer=0x26a5bc0*, nNumberOfBytesToWrite=0xa30, lpNumberOfBytesWritten=0x31e59c, lpOverlapped=0x0 | out: lpBuffer=0x26a5bc0*, lpNumberOfBytesWritten=0x31e59c*=0xa30, lpOverlapped=0x0) returned 1 [0080.628] CloseHandle (hObject=0x264) returned 1 [0080.628] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\3Sx06XnyBNN.lnk", nBufferLength=0x105, lpBuffer=0x31e14c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\3Sx06XnyBNN.lnk", lpFilePart=0x0) returned 0x56 [0080.628] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\3Sx06XnyBNN.lnk", nBufferLength=0x105, lpBuffer=0x31e14c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\3Sx06XnyBNN.lnk", lpFilePart=0x0) returned 0x56 [0080.628] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e5ac) returned 1 [0080.628] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\3Sx06XnyBNN.lnk" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\windows\\recent\\3sx06xnybnn.lnk"), fInfoLevelId=0x0, lpFileInformation=0x31e628 | out: lpFileInformation=0x31e628*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xdd693620, ftCreationTime.dwHighDateTime=0x1d5e82a, ftLastAccessTime.dwLowDateTime=0xdd693620, ftLastAccessTime.dwHighDateTime=0x1d5e82a, ftLastWriteTime.dwLowDateTime=0x138065a0, ftLastWriteTime.dwHighDateTime=0x1d6eb7f, nFileSizeHigh=0x0, nFileSizeLow=0xa30)) returned 1 [0080.628] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e5a8) returned 1 [0080.628] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\3Sx06XnyBNN.lnk" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\windows\\recent\\3sx06xnybnn.lnk"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\3Sx06XnyBNN.lnk" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\windows\\recent\\3sx06xnybnn.lnk")) returned 1 [0080.629] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\3YAya5eDcy-F-cb-1Rdx.lnk", nBufferLength=0x105, lpBuffer=0x31e02c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\3YAya5eDcy-F-cb-1Rdx.lnk", lpFilePart=0x0) returned 0x5f [0080.629] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e520) returned 1 [0080.629] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\3YAya5eDcy-F-cb-1Rdx.lnk" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\windows\\recent\\3yaya5edcy-f-cb-1rdx.lnk"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x264 [0080.629] GetFileType (hFile=0x264) returned 0x1 [0080.629] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e51c) returned 1 [0080.629] GetFileType (hFile=0x264) returned 0x1 [0080.629] GetFileSize (in: hFile=0x264, lpFileSizeHigh=0x31e628 | out: lpFileSizeHigh=0x31e628*=0x0) returned 0xaa5 [0080.629] ReadFile (in: hFile=0x264, lpBuffer=0x26a7978, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x31e5d4, lpOverlapped=0x0 | out: lpBuffer=0x26a7978*, lpNumberOfBytesRead=0x31e5d4*=0xaa5, lpOverlapped=0x0) returned 1 [0080.630] CloseHandle (hObject=0x264) returned 1 [0080.644] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\3YAya5eDcy-F-cb-1Rdx.lnk", nBufferLength=0x105, lpBuffer=0x31e018, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\3YAya5eDcy-F-cb-1Rdx.lnk", lpFilePart=0x0) returned 0x5f [0080.644] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e50c) returned 1 [0080.644] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\3YAya5eDcy-F-cb-1Rdx.lnk" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\windows\\recent\\3yaya5edcy-f-cb-1rdx.lnk"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x264 [0080.645] GetFileType (hFile=0x264) returned 0x1 [0080.645] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e508) returned 1 [0080.645] GetFileType (hFile=0x264) returned 0x1 [0080.645] WriteFile (in: hFile=0x264, lpBuffer=0x26f8fa8*, nNumberOfBytesToWrite=0xab0, lpNumberOfBytesWritten=0x31e59c, lpOverlapped=0x0 | out: lpBuffer=0x26f8fa8*, lpNumberOfBytesWritten=0x31e59c*=0xab0, lpOverlapped=0x0) returned 1 [0080.646] CloseHandle (hObject=0x264) returned 1 [0080.646] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\3YAya5eDcy-F-cb-1Rdx.lnk", nBufferLength=0x105, lpBuffer=0x31e14c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\3YAya5eDcy-F-cb-1Rdx.lnk", lpFilePart=0x0) returned 0x5f [0080.646] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\3YAya5eDcy-F-cb-1Rdx.lnk", nBufferLength=0x105, lpBuffer=0x31e14c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\3YAya5eDcy-F-cb-1Rdx.lnk", lpFilePart=0x0) returned 0x5f [0080.646] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e5ac) returned 1 [0080.646] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\3YAya5eDcy-F-cb-1Rdx.lnk" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\windows\\recent\\3yaya5edcy-f-cb-1rdx.lnk"), fInfoLevelId=0x0, lpFileInformation=0x31e628 | out: lpFileInformation=0x31e628*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xdc6a8300, ftCreationTime.dwHighDateTime=0x1d5e82a, ftLastAccessTime.dwLowDateTime=0xdc6a8300, ftLastAccessTime.dwHighDateTime=0x1d5e82a, ftLastWriteTime.dwLowDateTime=0x1382c700, ftLastWriteTime.dwHighDateTime=0x1d6eb7f, nFileSizeHigh=0x0, nFileSizeLow=0xab0)) returned 1 [0080.646] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e5a8) returned 1 [0080.646] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\3YAya5eDcy-F-cb-1Rdx.lnk" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\windows\\recent\\3yaya5edcy-f-cb-1rdx.lnk"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\3YAya5eDcy-F-cb-1Rdx.lnk" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\windows\\recent\\3yaya5edcy-f-cb-1rdx.lnk")) returned 1 [0080.647] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\405ySziuaxMlV m5JO.lnk", nBufferLength=0x105, lpBuffer=0x31e02c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\405ySziuaxMlV m5JO.lnk", lpFilePart=0x0) returned 0x5d [0080.647] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e520) returned 1 [0080.647] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\405ySziuaxMlV m5JO.lnk" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\windows\\recent\\405ysziuaxmlv m5jo.lnk"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x264 [0080.647] GetFileType (hFile=0x264) returned 0x1 [0080.647] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e51c) returned 1 [0080.647] GetFileType (hFile=0x264) returned 0x1 [0080.647] GetFileSize (in: hFile=0x264, lpFileSizeHigh=0x31e628 | out: lpFileSizeHigh=0x31e628*=0x0) returned 0x13b0 [0080.647] ReadFile (in: hFile=0x264, lpBuffer=0x26fa2c4, nNumberOfBytesToRead=0x13b0, lpNumberOfBytesRead=0x31e5d4, lpOverlapped=0x0 | out: lpBuffer=0x26fa2c4*, lpNumberOfBytesRead=0x31e5d4*=0x13b0, lpOverlapped=0x0) returned 1 [0080.664] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\405ySziuaxMlV m5JO.lnk", nBufferLength=0x105, lpBuffer=0x31e018, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\405ySziuaxMlV m5JO.lnk", lpFilePart=0x0) returned 0x5d [0080.664] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e50c) returned 1 [0080.664] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\405ySziuaxMlV m5JO.lnk" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\windows\\recent\\405ysziuaxmlv m5jo.lnk"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x264 [0080.665] GetFileType (hFile=0x264) returned 0x1 [0080.665] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e508) returned 1 [0080.665] GetFileType (hFile=0x264) returned 0x1 [0080.665] WriteFile (in: hFile=0x264, lpBuffer=0x274d368*, nNumberOfBytesToWrite=0x13c0, lpNumberOfBytesWritten=0x31e5c8, lpOverlapped=0x0 | out: lpBuffer=0x274d368*, lpNumberOfBytesWritten=0x31e5c8*=0x13c0, lpOverlapped=0x0) returned 1 [0080.666] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\405ySziuaxMlV m5JO.lnk", nBufferLength=0x105, lpBuffer=0x31e14c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\405ySziuaxMlV m5JO.lnk", lpFilePart=0x0) returned 0x5d [0080.666] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\405ySziuaxMlV m5JO.lnk", nBufferLength=0x105, lpBuffer=0x31e14c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\405ySziuaxMlV m5JO.lnk", lpFilePart=0x0) returned 0x5d [0080.666] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e5ac) returned 1 [0080.666] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\405ySziuaxMlV m5JO.lnk" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\windows\\recent\\405ysziuaxmlv m5jo.lnk"), fInfoLevelId=0x0, lpFileInformation=0x31e628 | out: lpFileInformation=0x31e628*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xdbd22b00, ftCreationTime.dwHighDateTime=0x1d5e82a, ftLastAccessTime.dwLowDateTime=0xdd242e40, ftLastAccessTime.dwHighDateTime=0x1d5e82a, ftLastWriteTime.dwLowDateTime=0x13852860, ftLastWriteTime.dwHighDateTime=0x1d6eb7f, nFileSizeHigh=0x0, nFileSizeLow=0x13c0)) returned 1 [0080.666] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e5a8) returned 1 [0080.666] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\405ySziuaxMlV m5JO.lnk" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\windows\\recent\\405ysziuaxmlv m5jo.lnk"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\405ySziuaxMlV m5JO.lnk" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\windows\\recent\\405ysziuaxmlv m5jo.lnk")) returned 1 [0080.667] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\5mEc8mcZ9jfK.lnk", nBufferLength=0x105, lpBuffer=0x31e02c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\5mEc8mcZ9jfK.lnk", lpFilePart=0x0) returned 0x57 [0080.667] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e520) returned 1 [0080.667] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\5mEc8mcZ9jfK.lnk" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\windows\\recent\\5mec8mcz9jfk.lnk"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x264 [0080.667] GetFileType (hFile=0x264) returned 0x1 [0080.667] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e51c) returned 1 [0080.667] GetFileType (hFile=0x264) returned 0x1 [0080.667] GetFileSize (in: hFile=0x264, lpFileSizeHigh=0x31e628 | out: lpFileSizeHigh=0x31e628*=0x0) returned 0x13cd [0080.667] ReadFile (in: hFile=0x264, lpBuffer=0x274eb84, nNumberOfBytesToRead=0x13cd, lpNumberOfBytesRead=0x31e5d4, lpOverlapped=0x0 | out: lpBuffer=0x274eb84*, lpNumberOfBytesRead=0x31e5d4*=0x13cd, lpOverlapped=0x0) returned 1 [0080.681] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\5mEc8mcZ9jfK.lnk", nBufferLength=0x105, lpBuffer=0x31e018, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\5mEc8mcZ9jfK.lnk", lpFilePart=0x0) returned 0x57 [0080.681] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e50c) returned 1 [0080.681] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\5mEc8mcZ9jfK.lnk" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\windows\\recent\\5mec8mcz9jfk.lnk"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x264 [0080.682] GetFileType (hFile=0x264) returned 0x1 [0080.682] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e508) returned 1 [0080.682] GetFileType (hFile=0x264) returned 0x1 [0080.682] WriteFile (in: hFile=0x264, lpBuffer=0x27a1c7c*, nNumberOfBytesToWrite=0x13d0, lpNumberOfBytesWritten=0x31e5c8, lpOverlapped=0x0 | out: lpBuffer=0x27a1c7c*, lpNumberOfBytesWritten=0x31e5c8*=0x13d0, lpOverlapped=0x0) returned 1 [0080.683] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\5mEc8mcZ9jfK.lnk", nBufferLength=0x105, lpBuffer=0x31e14c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\5mEc8mcZ9jfK.lnk", lpFilePart=0x0) returned 0x57 [0080.683] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\5mEc8mcZ9jfK.lnk", nBufferLength=0x105, lpBuffer=0x31e14c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\5mEc8mcZ9jfK.lnk", lpFilePart=0x0) returned 0x57 [0080.683] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e5ac) returned 1 [0080.683] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\5mEc8mcZ9jfK.lnk" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\windows\\recent\\5mec8mcz9jfk.lnk"), fInfoLevelId=0x0, lpFileInformation=0x31e628 | out: lpFileInformation=0x31e628*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xdb566380, ftCreationTime.dwHighDateTime=0x1d5e82a, ftLastAccessTime.dwLowDateTime=0xdd621200, ftLastAccessTime.dwHighDateTime=0x1d5e82a, ftLastWriteTime.dwLowDateTime=0x1389eb20, ftLastWriteTime.dwHighDateTime=0x1d6eb7f, nFileSizeHigh=0x0, nFileSizeLow=0x13d0)) returned 1 [0080.684] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e5a8) returned 1 [0080.684] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\5mEc8mcZ9jfK.lnk" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\windows\\recent\\5mec8mcz9jfk.lnk"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\5mEc8mcZ9jfK.lnk" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\windows\\recent\\5mec8mcz9jfk.lnk")) returned 1 [0080.684] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\5QUm8R.lnk", nBufferLength=0x105, lpBuffer=0x31e02c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\5QUm8R.lnk", lpFilePart=0x0) returned 0x51 [0080.684] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e520) returned 1 [0080.684] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\5QUm8R.lnk" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\windows\\recent\\5qum8r.lnk"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x264 [0080.684] GetFileType (hFile=0x264) returned 0x1 [0080.684] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e51c) returned 1 [0080.684] GetFileType (hFile=0x264) returned 0x1 [0080.684] GetFileSize (in: hFile=0x264, lpFileSizeHigh=0x31e628 | out: lpFileSizeHigh=0x31e628*=0x0) returned 0x937 [0080.685] ReadFile (in: hFile=0x264, lpBuffer=0x27a3da4, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x31e5d4, lpOverlapped=0x0 | out: lpBuffer=0x27a3da4*, lpNumberOfBytesRead=0x31e5d4*=0x937, lpOverlapped=0x0) returned 1 [0080.698] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\5QUm8R.lnk", nBufferLength=0x105, lpBuffer=0x31e018, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\5QUm8R.lnk", lpFilePart=0x0) returned 0x51 [0080.698] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e50c) returned 1 [0080.698] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\5QUm8R.lnk" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\windows\\recent\\5qum8r.lnk"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x264 [0080.699] GetFileType (hFile=0x264) returned 0x1 [0080.699] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e508) returned 1 [0080.699] GetFileType (hFile=0x264) returned 0x1 [0080.700] WriteFile (in: hFile=0x264, lpBuffer=0x27f4b10*, nNumberOfBytesToWrite=0x940, lpNumberOfBytesWritten=0x31e59c, lpOverlapped=0x0 | out: lpBuffer=0x27f4b10*, lpNumberOfBytesWritten=0x31e59c*=0x940, lpOverlapped=0x0) returned 1 [0080.700] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\5QUm8R.lnk", nBufferLength=0x105, lpBuffer=0x31e14c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\5QUm8R.lnk", lpFilePart=0x0) returned 0x51 [0080.700] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\5QUm8R.lnk", nBufferLength=0x105, lpBuffer=0x31e14c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\5QUm8R.lnk", lpFilePart=0x0) returned 0x51 [0080.700] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e5ac) returned 1 [0080.701] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\5QUm8R.lnk" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\windows\\recent\\5qum8r.lnk"), fInfoLevelId=0x0, lpFileInformation=0x31e628 | out: lpFileInformation=0x31e628*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xdb8ac1c0, ftCreationTime.dwHighDateTime=0x1d5e82a, ftLastAccessTime.dwLowDateTime=0xdd516860, ftLastAccessTime.dwHighDateTime=0x1d5e82a, ftLastWriteTime.dwLowDateTime=0x138c4c80, ftLastWriteTime.dwHighDateTime=0x1d6eb7f, nFileSizeHigh=0x0, nFileSizeLow=0x940)) returned 1 [0080.701] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e5a8) returned 1 [0080.701] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\5QUm8R.lnk" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\windows\\recent\\5qum8r.lnk"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\5QUm8R.lnk" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\windows\\recent\\5qum8r.lnk")) returned 1 [0080.701] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\6b4NNrp5 bh.lnk", nBufferLength=0x105, lpBuffer=0x31e02c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\6b4NNrp5 bh.lnk", lpFilePart=0x0) returned 0x56 [0080.701] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e520) returned 1 [0080.701] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\6b4NNrp5 bh.lnk" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\windows\\recent\\6b4nnrp5 bh.lnk"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x264 [0080.701] GetFileType (hFile=0x264) returned 0x1 [0080.701] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e51c) returned 1 [0080.701] GetFileType (hFile=0x264) returned 0x1 [0080.702] GetFileSize (in: hFile=0x264, lpFileSizeHigh=0x31e628 | out: lpFileSizeHigh=0x31e628*=0x0) returned 0x248 [0080.702] ReadFile (in: hFile=0x264, lpBuffer=0x27f602c, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x31e5d4, lpOverlapped=0x0 | out: lpBuffer=0x27f602c*, lpNumberOfBytesRead=0x31e5d4*=0x248, lpOverlapped=0x0) returned 1 [0080.716] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\6b4NNrp5 bh.lnk", nBufferLength=0x105, lpBuffer=0x31e018, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\6b4NNrp5 bh.lnk", lpFilePart=0x0) returned 0x56 [0080.716] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e50c) returned 1 [0080.716] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\6b4NNrp5 bh.lnk" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\windows\\recent\\6b4nnrp5 bh.lnk"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x264 [0080.716] GetFileType (hFile=0x264) returned 0x1 [0080.716] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e508) returned 1 [0080.717] GetFileType (hFile=0x264) returned 0x1 [0080.717] WriteFile (in: hFile=0x264, lpBuffer=0x2844af8*, nNumberOfBytesToWrite=0x250, lpNumberOfBytesWritten=0x31e59c, lpOverlapped=0x0 | out: lpBuffer=0x2844af8*, lpNumberOfBytesWritten=0x31e59c*=0x250, lpOverlapped=0x0) returned 1 [0080.717] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\6b4NNrp5 bh.lnk", nBufferLength=0x105, lpBuffer=0x31e14c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\6b4NNrp5 bh.lnk", lpFilePart=0x0) returned 0x56 [0080.717] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\6b4NNrp5 bh.lnk", nBufferLength=0x105, lpBuffer=0x31e14c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\6b4NNrp5 bh.lnk", lpFilePart=0x0) returned 0x56 [0080.717] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e5ac) returned 1 [0080.718] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\6b4NNrp5 bh.lnk" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\windows\\recent\\6b4nnrp5 bh.lnk"), fInfoLevelId=0x0, lpFileInformation=0x31e628 | out: lpFileInformation=0x31e628*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xdc5516a0, ftCreationTime.dwHighDateTime=0x1d5e82a, ftLastAccessTime.dwLowDateTime=0xdc5516a0, ftLastAccessTime.dwHighDateTime=0x1d5e82a, ftLastWriteTime.dwLowDateTime=0x138eade0, ftLastWriteTime.dwHighDateTime=0x1d6eb7f, nFileSizeHigh=0x0, nFileSizeLow=0x250)) returned 1 [0080.718] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e5a8) returned 1 [0080.718] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\6b4NNrp5 bh.lnk" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\windows\\recent\\6b4nnrp5 bh.lnk"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\6b4NNrp5 bh.lnk" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\windows\\recent\\6b4nnrp5 bh.lnk")) returned 1 [0080.718] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\6PH LQIJcfFOT3.lnk", nBufferLength=0x105, lpBuffer=0x31e02c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\6PH LQIJcfFOT3.lnk", lpFilePart=0x0) returned 0x59 [0080.718] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e520) returned 1 [0080.718] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\6PH LQIJcfFOT3.lnk" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\windows\\recent\\6ph lqijcffot3.lnk"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x264 [0080.718] GetFileType (hFile=0x264) returned 0x1 [0080.718] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e51c) returned 1 [0080.719] GetFileType (hFile=0x264) returned 0x1 [0080.719] GetFileSize (in: hFile=0x264, lpFileSizeHigh=0x31e628 | out: lpFileSizeHigh=0x31e628*=0x0) returned 0x2205 [0080.719] ReadFile (in: hFile=0x264, lpBuffer=0x2845de4, nNumberOfBytesToRead=0x2205, lpNumberOfBytesRead=0x31e5d4, lpOverlapped=0x0 | out: lpBuffer=0x2845de4*, lpNumberOfBytesRead=0x31e5d4*=0x2205, lpOverlapped=0x0) returned 1 [0080.761] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\6PH LQIJcfFOT3.lnk", nBufferLength=0x105, lpBuffer=0x31e018, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\6PH LQIJcfFOT3.lnk", lpFilePart=0x0) returned 0x59 [0080.761] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e50c) returned 1 [0080.761] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\6PH LQIJcfFOT3.lnk" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\windows\\recent\\6ph lqijcffot3.lnk"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x264 [0080.765] GetFileType (hFile=0x264) returned 0x1 [0080.765] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e508) returned 1 [0080.765] GetFileType (hFile=0x264) returned 0x1 [0080.765] WriteFile (in: hFile=0x264, lpBuffer=0x269edb8*, nNumberOfBytesToWrite=0x2210, lpNumberOfBytesWritten=0x31e5c8, lpOverlapped=0x0 | out: lpBuffer=0x269edb8*, lpNumberOfBytesWritten=0x31e5c8*=0x2210, lpOverlapped=0x0) returned 1 [0080.766] CloseHandle (hObject=0x264) returned 1 [0080.766] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\6PH LQIJcfFOT3.lnk", nBufferLength=0x105, lpBuffer=0x31e14c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\6PH LQIJcfFOT3.lnk", lpFilePart=0x0) returned 0x59 [0080.766] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\6PH LQIJcfFOT3.lnk", nBufferLength=0x105, lpBuffer=0x31e14c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\6PH LQIJcfFOT3.lnk", lpFilePart=0x0) returned 0x59 [0080.766] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e5ac) returned 1 [0080.766] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\6PH LQIJcfFOT3.lnk" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\windows\\recent\\6ph lqijcffot3.lnk"), fInfoLevelId=0x0, lpFileInformation=0x31e628 | out: lpFileInformation=0x31e628*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xdd458180, ftCreationTime.dwHighDateTime=0x1d5e82a, ftLastAccessTime.dwLowDateTime=0xdd458180, ftLastAccessTime.dwHighDateTime=0x1d5e82a, ftLastWriteTime.dwLowDateTime=0x1395d200, ftLastWriteTime.dwHighDateTime=0x1d6eb7f, nFileSizeHigh=0x0, nFileSizeLow=0x2210)) returned 1 [0080.766] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e5a8) returned 1 [0080.766] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\6PH LQIJcfFOT3.lnk" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\windows\\recent\\6ph lqijcffot3.lnk"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\6PH LQIJcfFOT3.lnk" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\windows\\recent\\6ph lqijcffot3.lnk")) returned 1 [0080.767] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\6wgIYQzJ1lqH2MW.lnk", nBufferLength=0x105, lpBuffer=0x31e02c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\6wgIYQzJ1lqH2MW.lnk", lpFilePart=0x0) returned 0x5a [0080.767] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e520) returned 1 [0080.767] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\6wgIYQzJ1lqH2MW.lnk" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\windows\\recent\\6wgiyqzj1lqh2mw.lnk"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x264 [0080.767] GetFileType (hFile=0x264) returned 0x1 [0080.767] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e51c) returned 1 [0080.767] GetFileType (hFile=0x264) returned 0x1 [0080.767] GetFileSize (in: hFile=0x264, lpFileSizeHigh=0x31e628 | out: lpFileSizeHigh=0x31e628*=0x0) returned 0x2df [0080.767] ReadFile (in: hFile=0x264, lpBuffer=0x26a16fc, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x31e5d4, lpOverlapped=0x0 | out: lpBuffer=0x26a16fc*, lpNumberOfBytesRead=0x31e5d4*=0x2df, lpOverlapped=0x0) returned 1 [0080.768] CloseHandle (hObject=0x264) returned 1 [0080.781] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\6wgIYQzJ1lqH2MW.lnk", nBufferLength=0x105, lpBuffer=0x31e018, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\6wgIYQzJ1lqH2MW.lnk", lpFilePart=0x0) returned 0x5a [0080.781] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e50c) returned 1 [0080.781] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\6wgIYQzJ1lqH2MW.lnk" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\windows\\recent\\6wgiyqzj1lqh2mw.lnk"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x264 [0080.782] GetFileType (hFile=0x264) returned 0x1 [0080.782] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e508) returned 1 [0080.782] GetFileType (hFile=0x264) returned 0x1 [0080.782] WriteFile (in: hFile=0x264, lpBuffer=0x26f0600*, nNumberOfBytesToWrite=0x2e0, lpNumberOfBytesWritten=0x31e59c, lpOverlapped=0x0 | out: lpBuffer=0x26f0600*, lpNumberOfBytesWritten=0x31e59c*=0x2e0, lpOverlapped=0x0) returned 1 [0080.783] CloseHandle (hObject=0x264) returned 1 [0080.783] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\6wgIYQzJ1lqH2MW.lnk", nBufferLength=0x105, lpBuffer=0x31e14c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\6wgIYQzJ1lqH2MW.lnk", lpFilePart=0x0) returned 0x5a [0080.783] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\6wgIYQzJ1lqH2MW.lnk", nBufferLength=0x105, lpBuffer=0x31e14c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\6wgIYQzJ1lqH2MW.lnk", lpFilePart=0x0) returned 0x5a [0080.783] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e5ac) returned 1 [0080.784] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\6wgIYQzJ1lqH2MW.lnk" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\windows\\recent\\6wgiyqzj1lqh2mw.lnk"), fInfoLevelId=0x0, lpFileInformation=0x31e628 | out: lpFileInformation=0x31e628*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xdd66d4c0, ftCreationTime.dwHighDateTime=0x1d5e82a, ftLastAccessTime.dwLowDateTime=0xdd66d4c0, ftLastAccessTime.dwHighDateTime=0x1d5e82a, ftLastWriteTime.dwLowDateTime=0x13983360, ftLastWriteTime.dwHighDateTime=0x1d6eb7f, nFileSizeHigh=0x0, nFileSizeLow=0x2e0)) returned 1 [0080.784] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e5a8) returned 1 [0080.784] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\6wgIYQzJ1lqH2MW.lnk" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\windows\\recent\\6wgiyqzj1lqh2mw.lnk"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\6wgIYQzJ1lqH2MW.lnk" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\windows\\recent\\6wgiyqzj1lqh2mw.lnk")) returned 1 [0080.784] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\6ygdYcRuO9.lnk", nBufferLength=0x105, lpBuffer=0x31e02c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\6ygdYcRuO9.lnk", lpFilePart=0x0) returned 0x55 [0080.784] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e520) returned 1 [0080.784] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\6ygdYcRuO9.lnk" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\windows\\recent\\6ygdycruo9.lnk"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x264 [0080.784] GetFileType (hFile=0x264) returned 0x1 [0080.784] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e51c) returned 1 [0080.785] GetFileType (hFile=0x264) returned 0x1 [0080.785] GetFileSize (in: hFile=0x264, lpFileSizeHigh=0x31e628 | out: lpFileSizeHigh=0x31e628*=0x0) returned 0x1496 [0080.785] ReadFile (in: hFile=0x264, lpBuffer=0x26f18ec, nNumberOfBytesToRead=0x1496, lpNumberOfBytesRead=0x31e5d4, lpOverlapped=0x0 | out: lpBuffer=0x26f18ec*, lpNumberOfBytesRead=0x31e5d4*=0x1496, lpOverlapped=0x0) returned 1 [0080.785] CloseHandle (hObject=0x264) returned 1 [0080.799] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\6ygdYcRuO9.lnk", nBufferLength=0x105, lpBuffer=0x31e018, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\6ygdYcRuO9.lnk", lpFilePart=0x0) returned 0x55 [0080.799] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e50c) returned 1 [0080.799] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\6ygdYcRuO9.lnk" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\windows\\recent\\6ygdycruo9.lnk"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x264 [0080.800] GetFileType (hFile=0x264) returned 0x1 [0080.800] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e508) returned 1 [0080.800] GetFileType (hFile=0x264) returned 0x1 [0080.800] WriteFile (in: hFile=0x264, lpBuffer=0x2744df4*, nNumberOfBytesToWrite=0x14a0, lpNumberOfBytesWritten=0x31e5c8, lpOverlapped=0x0 | out: lpBuffer=0x2744df4*, lpNumberOfBytesWritten=0x31e5c8*=0x14a0, lpOverlapped=0x0) returned 1 [0080.801] CloseHandle (hObject=0x264) returned 1 [0080.801] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\6ygdYcRuO9.lnk", nBufferLength=0x105, lpBuffer=0x31e14c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\6ygdYcRuO9.lnk", lpFilePart=0x0) returned 0x55 [0080.801] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\6ygdYcRuO9.lnk", nBufferLength=0x105, lpBuffer=0x31e14c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\6ygdYcRuO9.lnk", lpFilePart=0x0) returned 0x55 [0080.801] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e5ac) returned 1 [0080.801] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\6ygdYcRuO9.lnk" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\windows\\recent\\6ygdycruo9.lnk"), fInfoLevelId=0x0, lpFileInformation=0x31e628 | out: lpFileInformation=0x31e628*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xdc33c360, ftCreationTime.dwHighDateTime=0x1d5e82a, ftLastAccessTime.dwLowDateTime=0xdd647360, ftLastAccessTime.dwHighDateTime=0x1d5e82a, ftLastWriteTime.dwLowDateTime=0x139a94c0, ftLastWriteTime.dwHighDateTime=0x1d6eb7f, nFileSizeHigh=0x0, nFileSizeLow=0x14a0)) returned 1 [0080.801] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e5a8) returned 1 [0080.801] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\6ygdYcRuO9.lnk" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\windows\\recent\\6ygdycruo9.lnk"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\6ygdYcRuO9.lnk" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\windows\\recent\\6ygdycruo9.lnk")) returned 1 [0080.802] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\81Hibdy.lnk", nBufferLength=0x105, lpBuffer=0x31e02c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\81Hibdy.lnk", lpFilePart=0x0) returned 0x52 [0080.802] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e520) returned 1 [0080.802] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\81Hibdy.lnk" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\windows\\recent\\81hibdy.lnk"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x264 [0080.802] GetFileType (hFile=0x264) returned 0x1 [0080.802] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e51c) returned 1 [0080.802] GetFileType (hFile=0x264) returned 0x1 [0080.802] GetFileSize (in: hFile=0x264, lpFileSizeHigh=0x31e628 | out: lpFileSizeHigh=0x31e628*=0x0) returned 0x232 [0080.802] ReadFile (in: hFile=0x264, lpBuffer=0x27468dc, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x31e5d4, lpOverlapped=0x0 | out: lpBuffer=0x27468dc*, lpNumberOfBytesRead=0x31e5d4*=0x232, lpOverlapped=0x0) returned 1 [0080.803] CloseHandle (hObject=0x264) returned 1 [0080.816] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\81Hibdy.lnk", nBufferLength=0x105, lpBuffer=0x31e018, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\81Hibdy.lnk", lpFilePart=0x0) returned 0x52 [0080.816] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e50c) returned 1 [0080.816] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\81Hibdy.lnk" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\windows\\recent\\81hibdy.lnk"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x264 [0080.817] GetFileType (hFile=0x264) returned 0x1 [0080.817] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e508) returned 1 [0080.817] GetFileType (hFile=0x264) returned 0x1 [0080.817] WriteFile (in: hFile=0x264, lpBuffer=0x2795350*, nNumberOfBytesToWrite=0x240, lpNumberOfBytesWritten=0x31e59c, lpOverlapped=0x0 | out: lpBuffer=0x2795350*, lpNumberOfBytesWritten=0x31e59c*=0x240, lpOverlapped=0x0) returned 1 [0080.818] CloseHandle (hObject=0x264) returned 1 [0080.818] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\81Hibdy.lnk", nBufferLength=0x105, lpBuffer=0x31e14c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\81Hibdy.lnk", lpFilePart=0x0) returned 0x52 [0080.818] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\81Hibdy.lnk", nBufferLength=0x105, lpBuffer=0x31e14c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\81Hibdy.lnk", lpFilePart=0x0) returned 0x52 [0080.818] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e5ac) returned 1 [0080.818] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\81Hibdy.lnk" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\windows\\recent\\81hibdy.lnk"), fInfoLevelId=0x0, lpFileInformation=0x31e628 | out: lpFileInformation=0x31e628*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xdce187c0, ftCreationTime.dwHighDateTime=0x1d5e82a, ftLastAccessTime.dwLowDateTime=0xdce187c0, ftLastAccessTime.dwHighDateTime=0x1d5e82a, ftLastWriteTime.dwLowDateTime=0x139cf620, ftLastWriteTime.dwHighDateTime=0x1d6eb7f, nFileSizeHigh=0x0, nFileSizeLow=0x240)) returned 1 [0080.818] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e5a8) returned 1 [0080.818] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\81Hibdy.lnk" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\windows\\recent\\81hibdy.lnk"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\81Hibdy.lnk" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\windows\\recent\\81hibdy.lnk")) returned 1 [0080.819] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\84yfCS6st5K5-66QqbH.flv.lnk", nBufferLength=0x105, lpBuffer=0x31e02c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\84yfCS6st5K5-66QqbH.flv.lnk", lpFilePart=0x0) returned 0x62 [0080.819] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e520) returned 1 [0080.819] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\84yfCS6st5K5-66QqbH.flv.lnk" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\windows\\recent\\84yfcs6st5k5-66qqbh.flv.lnk"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x264 [0080.819] GetFileType (hFile=0x264) returned 0x1 [0080.819] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e51c) returned 1 [0080.819] GetFileType (hFile=0x264) returned 0x1 [0080.819] GetFileSize (in: hFile=0x264, lpFileSizeHigh=0x31e628 | out: lpFileSizeHigh=0x31e628*=0x0) returned 0x1474 [0080.819] ReadFile (in: hFile=0x264, lpBuffer=0x2796650, nNumberOfBytesToRead=0x1474, lpNumberOfBytesRead=0x31e5d4, lpOverlapped=0x0 | out: lpBuffer=0x2796650*, lpNumberOfBytesRead=0x31e5d4*=0x1474, lpOverlapped=0x0) returned 1 [0080.820] CloseHandle (hObject=0x264) returned 1 [0080.834] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\84yfCS6st5K5-66QqbH.flv.lnk", nBufferLength=0x105, lpBuffer=0x31e018, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\84yfCS6st5K5-66QqbH.flv.lnk", lpFilePart=0x0) returned 0x62 [0080.835] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e50c) returned 1 [0080.835] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\84yfCS6st5K5-66QqbH.flv.lnk" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\windows\\recent\\84yfcs6st5k5-66qqbh.flv.lnk"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x264 [0080.835] GetFileType (hFile=0x264) returned 0x1 [0080.835] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e508) returned 1 [0080.836] GetFileType (hFile=0x264) returned 0x1 [0080.836] WriteFile (in: hFile=0x264, lpBuffer=0x27e9ab4*, nNumberOfBytesToWrite=0x1480, lpNumberOfBytesWritten=0x31e5c8, lpOverlapped=0x0 | out: lpBuffer=0x27e9ab4*, lpNumberOfBytesWritten=0x31e5c8*=0x1480, lpOverlapped=0x0) returned 1 [0080.836] CloseHandle (hObject=0x264) returned 1 [0080.837] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\84yfCS6st5K5-66QqbH.flv.lnk", nBufferLength=0x105, lpBuffer=0x31e14c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\84yfCS6st5K5-66QqbH.flv.lnk", lpFilePart=0x0) returned 0x62 [0080.837] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\84yfCS6st5K5-66QqbH.flv.lnk", nBufferLength=0x105, lpBuffer=0x31e14c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\84yfCS6st5K5-66QqbH.flv.lnk", lpFilePart=0x0) returned 0x62 [0080.837] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e5ac) returned 1 [0080.837] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\84yfCS6st5K5-66QqbH.flv.lnk" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\windows\\recent\\84yfcs6st5k5-66qqbh.flv.lnk"), fInfoLevelId=0x0, lpFileInformation=0x31e628 | out: lpFileInformation=0x31e628*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xdcbb71c0, ftCreationTime.dwHighDateTime=0x1d5e82a, ftLastAccessTime.dwLowDateTime=0xdcbb71c0, ftLastAccessTime.dwHighDateTime=0x1d5e82a, ftLastWriteTime.dwLowDateTime=0x139f5780, ftLastWriteTime.dwHighDateTime=0x1d6eb7f, nFileSizeHigh=0x0, nFileSizeLow=0x1480)) returned 1 [0080.837] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e5a8) returned 1 [0080.837] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\84yfCS6st5K5-66QqbH.flv.lnk" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\windows\\recent\\84yfcs6st5k5-66qqbh.flv.lnk"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\84yfCS6st5K5-66QqbH.flv.lnk" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\windows\\recent\\84yfcs6st5k5-66qqbh.flv.lnk")) returned 1 [0080.837] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\8mSM9XyQ3XQ6.lnk", nBufferLength=0x105, lpBuffer=0x31e02c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\8mSM9XyQ3XQ6.lnk", lpFilePart=0x0) returned 0x57 [0080.837] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e520) returned 1 [0080.838] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\8mSM9XyQ3XQ6.lnk" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\windows\\recent\\8msm9xyq3xq6.lnk"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x264 [0080.838] GetFileType (hFile=0x264) returned 0x1 [0080.838] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e51c) returned 1 [0080.838] GetFileType (hFile=0x264) returned 0x1 [0080.838] GetFileSize (in: hFile=0x264, lpFileSizeHigh=0x31e628 | out: lpFileSizeHigh=0x31e628*=0x0) returned 0x98c [0080.838] ReadFile (in: hFile=0x264, lpBuffer=0x27ebd54, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x31e5d4, lpOverlapped=0x0 | out: lpBuffer=0x27ebd54*, lpNumberOfBytesRead=0x31e5d4*=0x98c, lpOverlapped=0x0) returned 1 [0080.839] CloseHandle (hObject=0x264) returned 1 [0080.852] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\8mSM9XyQ3XQ6.lnk", nBufferLength=0x105, lpBuffer=0x31e018, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\8mSM9XyQ3XQ6.lnk", lpFilePart=0x0) returned 0x57 [0080.852] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e50c) returned 1 [0080.852] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\8mSM9XyQ3XQ6.lnk" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\windows\\recent\\8msm9xyq3xq6.lnk"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x264 [0080.853] GetFileType (hFile=0x264) returned 0x1 [0080.853] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e508) returned 1 [0080.853] GetFileType (hFile=0x264) returned 0x1 [0080.853] WriteFile (in: hFile=0x264, lpBuffer=0x283cc60*, nNumberOfBytesToWrite=0x990, lpNumberOfBytesWritten=0x31e59c, lpOverlapped=0x0 | out: lpBuffer=0x283cc60*, lpNumberOfBytesWritten=0x31e59c*=0x990, lpOverlapped=0x0) returned 1 [0080.854] CloseHandle (hObject=0x264) returned 1 [0080.854] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\8mSM9XyQ3XQ6.lnk", nBufferLength=0x105, lpBuffer=0x31e14c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\8mSM9XyQ3XQ6.lnk", lpFilePart=0x0) returned 0x57 [0080.854] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\8mSM9XyQ3XQ6.lnk", nBufferLength=0x105, lpBuffer=0x31e14c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\8mSM9XyQ3XQ6.lnk", lpFilePart=0x0) returned 0x57 [0080.854] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e5ac) returned 1 [0080.854] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\8mSM9XyQ3XQ6.lnk" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\windows\\recent\\8msm9xyq3xq6.lnk"), fInfoLevelId=0x0, lpFileInformation=0x31e628 | out: lpFileInformation=0x31e628*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xdbe2d4a0, ftCreationTime.dwHighDateTime=0x1d5e82a, ftLastAccessTime.dwLowDateTime=0xdd34d7e0, ftLastAccessTime.dwHighDateTime=0x1d5e82a, ftLastWriteTime.dwLowDateTime=0x13a1b8e0, ftLastWriteTime.dwHighDateTime=0x1d6eb7f, nFileSizeHigh=0x0, nFileSizeLow=0x990)) returned 1 [0080.854] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e5a8) returned 1 [0080.854] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\8mSM9XyQ3XQ6.lnk" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\windows\\recent\\8msm9xyq3xq6.lnk"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\8mSM9XyQ3XQ6.lnk" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\windows\\recent\\8msm9xyq3xq6.lnk")) returned 1 [0080.866] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\8y 4TOn5NPzM-8ECXs7.lnk", nBufferLength=0x105, lpBuffer=0x31e02c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\8y 4TOn5NPzM-8ECXs7.lnk", lpFilePart=0x0) returned 0x5e [0080.866] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e520) returned 1 [0080.866] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\8y 4TOn5NPzM-8ECXs7.lnk" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\windows\\recent\\8y 4ton5npzm-8ecxs7.lnk"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x264 [0080.866] GetFileType (hFile=0x264) returned 0x1 [0080.866] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e51c) returned 1 [0080.866] GetFileType (hFile=0x264) returned 0x1 [0080.866] GetFileSize (in: hFile=0x264, lpFileSizeHigh=0x31e628 | out: lpFileSizeHigh=0x31e628*=0x0) returned 0xa7a [0080.866] ReadFile (in: hFile=0x264, lpBuffer=0x283e9e8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x31e5d4, lpOverlapped=0x0 | out: lpBuffer=0x283e9e8*, lpNumberOfBytesRead=0x31e5d4*=0xa7a, lpOverlapped=0x0) returned 1 [0080.867] CloseHandle (hObject=0x264) returned 1 [0081.004] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\8y 4TOn5NPzM-8ECXs7.lnk", nBufferLength=0x105, lpBuffer=0x31e018, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\8y 4TOn5NPzM-8ECXs7.lnk", lpFilePart=0x0) returned 0x5e [0081.004] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e50c) returned 1 [0081.004] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\8y 4TOn5NPzM-8ECXs7.lnk" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\windows\\recent\\8y 4ton5npzm-8ecxs7.lnk"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x264 [0081.005] GetFileType (hFile=0x264) returned 0x1 [0081.005] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e508) returned 1 [0081.005] GetFileType (hFile=0x264) returned 0x1 [0081.005] WriteFile (in: hFile=0x264, lpBuffer=0x268e628*, nNumberOfBytesToWrite=0xa80, lpNumberOfBytesWritten=0x31e59c, lpOverlapped=0x0 | out: lpBuffer=0x268e628*, lpNumberOfBytesWritten=0x31e59c*=0xa80, lpOverlapped=0x0) returned 1 [0081.006] CloseHandle (hObject=0x264) returned 1 [0081.006] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\8y 4TOn5NPzM-8ECXs7.lnk", nBufferLength=0x105, lpBuffer=0x31e14c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\8y 4TOn5NPzM-8ECXs7.lnk", lpFilePart=0x0) returned 0x5e [0081.006] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\8y 4TOn5NPzM-8ECXs7.lnk", nBufferLength=0x105, lpBuffer=0x31e14c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\8y 4TOn5NPzM-8ECXs7.lnk", lpFilePart=0x0) returned 0x5e [0081.007] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e5ac) returned 1 [0081.007] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\8y 4TOn5NPzM-8ECXs7.lnk" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\windows\\recent\\8y 4ton5npzm-8ecxs7.lnk"), fInfoLevelId=0x0, lpFileInformation=0x31e628 | out: lpFileInformation=0x31e628*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xdc6821a0, ftCreationTime.dwHighDateTime=0x1d5e82a, ftLastAccessTime.dwLowDateTime=0xdc6821a0, ftLastAccessTime.dwHighDateTime=0x1d5e82a, ftLastWriteTime.dwLowDateTime=0x13b986a0, ftLastWriteTime.dwHighDateTime=0x1d6eb7f, nFileSizeHigh=0x0, nFileSizeLow=0xa80)) returned 1 [0081.007] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e5a8) returned 1 [0081.007] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\8y 4TOn5NPzM-8ECXs7.lnk" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\windows\\recent\\8y 4ton5npzm-8ecxs7.lnk"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\8y 4TOn5NPzM-8ECXs7.lnk" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\windows\\recent\\8y 4ton5npzm-8ecxs7.lnk")) returned 1 [0081.007] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\aAze.lnk", nBufferLength=0x105, lpBuffer=0x31e02c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\aAze.lnk", lpFilePart=0x0) returned 0x4f [0081.007] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e520) returned 1 [0081.007] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\aAze.lnk" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\windows\\recent\\aaze.lnk"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x264 [0081.008] GetFileType (hFile=0x264) returned 0x1 [0081.008] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e51c) returned 1 [0081.008] GetFileType (hFile=0x264) returned 0x1 [0081.008] GetFileSize (in: hFile=0x264, lpFileSizeHigh=0x31e628 | out: lpFileSizeHigh=0x31e628*=0x0) returned 0x2b9 [0081.008] ReadFile (in: hFile=0x264, lpBuffer=0x268fbd4, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x31e5d4, lpOverlapped=0x0 | out: lpBuffer=0x268fbd4*, lpNumberOfBytesRead=0x31e5d4*=0x2b9, lpOverlapped=0x0) returned 1 [0081.008] CloseHandle (hObject=0x264) returned 1 [0081.022] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\aAze.lnk", nBufferLength=0x105, lpBuffer=0x31e018, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\aAze.lnk", lpFilePart=0x0) returned 0x4f [0081.022] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e50c) returned 1 [0081.022] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\aAze.lnk" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\windows\\recent\\aaze.lnk"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x264 [0081.023] GetFileType (hFile=0x264) returned 0x1 [0081.023] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e508) returned 1 [0081.023] GetFileType (hFile=0x264) returned 0x1 [0081.023] WriteFile (in: hFile=0x264, lpBuffer=0x26dea10*, nNumberOfBytesToWrite=0x2c0, lpNumberOfBytesWritten=0x31e59c, lpOverlapped=0x0 | out: lpBuffer=0x26dea10*, lpNumberOfBytesWritten=0x31e59c*=0x2c0, lpOverlapped=0x0) returned 1 [0081.024] CloseHandle (hObject=0x264) returned 1 [0081.024] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\aAze.lnk", nBufferLength=0x105, lpBuffer=0x31e14c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\aAze.lnk", lpFilePart=0x0) returned 0x4f [0081.024] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\aAze.lnk", nBufferLength=0x105, lpBuffer=0x31e14c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\aAze.lnk", lpFilePart=0x0) returned 0x4f [0081.024] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e5ac) returned 1 [0081.024] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\aAze.lnk" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\windows\\recent\\aaze.lnk"), fInfoLevelId=0x0, lpFileInformation=0x31e628 | out: lpFileInformation=0x31e628*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xdd777e60, ftCreationTime.dwHighDateTime=0x1d5e82a, ftLastAccessTime.dwLowDateTime=0xdd777e60, ftLastAccessTime.dwHighDateTime=0x1d5e82a, ftLastWriteTime.dwLowDateTime=0x13bbe800, ftLastWriteTime.dwHighDateTime=0x1d6eb7f, nFileSizeHigh=0x0, nFileSizeLow=0x2c0)) returned 1 [0081.024] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e5a8) returned 1 [0081.024] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\aAze.lnk" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\windows\\recent\\aaze.lnk"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\aAze.lnk" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\windows\\recent\\aaze.lnk")) returned 1 [0081.025] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\Ab6fh6TA.lnk", nBufferLength=0x105, lpBuffer=0x31e02c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\Ab6fh6TA.lnk", lpFilePart=0x0) returned 0x53 [0081.025] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e520) returned 1 [0081.025] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\Ab6fh6TA.lnk" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\windows\\recent\\ab6fh6ta.lnk"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x264 [0081.025] GetFileType (hFile=0x264) returned 0x1 [0081.025] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e51c) returned 1 [0081.025] GetFileType (hFile=0x264) returned 0x1 [0081.025] GetFileSize (in: hFile=0x264, lpFileSizeHigh=0x31e628 | out: lpFileSizeHigh=0x31e628*=0x0) returned 0xf7e [0081.025] ReadFile (in: hFile=0x264, lpBuffer=0x26e0c50, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x31e5d4, lpOverlapped=0x0 | out: lpBuffer=0x26e0c50*, lpNumberOfBytesRead=0x31e5d4*=0xf7e, lpOverlapped=0x0) returned 1 [0081.026] CloseHandle (hObject=0x264) returned 1 [0081.040] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\Ab6fh6TA.lnk", nBufferLength=0x105, lpBuffer=0x31e018, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\Ab6fh6TA.lnk", lpFilePart=0x0) returned 0x53 [0081.040] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e50c) returned 1 [0081.040] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\Ab6fh6TA.lnk" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\windows\\recent\\ab6fh6ta.lnk"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x264 [0081.041] GetFileType (hFile=0x264) returned 0x1 [0081.041] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e508) returned 1 [0081.041] GetFileType (hFile=0x264) returned 0x1 [0081.041] WriteFile (in: hFile=0x264, lpBuffer=0x27338fc*, nNumberOfBytesToWrite=0xf80, lpNumberOfBytesWritten=0x31e59c, lpOverlapped=0x0 | out: lpBuffer=0x27338fc*, lpNumberOfBytesWritten=0x31e59c*=0xf80, lpOverlapped=0x0) returned 1 [0081.042] CloseHandle (hObject=0x264) returned 1 [0081.042] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\Ab6fh6TA.lnk", nBufferLength=0x105, lpBuffer=0x31e14c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\Ab6fh6TA.lnk", lpFilePart=0x0) returned 0x53 [0081.042] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\Ab6fh6TA.lnk", nBufferLength=0x105, lpBuffer=0x31e14c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\Ab6fh6TA.lnk", lpFilePart=0x0) returned 0x53 [0081.042] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e5ac) returned 1 [0081.042] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\Ab6fh6TA.lnk" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\windows\\recent\\ab6fh6ta.lnk"), fInfoLevelId=0x0, lpFileInformation=0x31e628 | out: lpFileInformation=0x31e628*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xdcc4f740, ftCreationTime.dwHighDateTime=0x1d5e82a, ftLastAccessTime.dwLowDateTime=0xdcc4f740, ftLastAccessTime.dwHighDateTime=0x1d5e82a, ftLastWriteTime.dwLowDateTime=0x13be4960, ftLastWriteTime.dwHighDateTime=0x1d6eb7f, nFileSizeHigh=0x0, nFileSizeLow=0xf80)) returned 1 [0081.042] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e5a8) returned 1 [0081.042] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\Ab6fh6TA.lnk" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\windows\\recent\\ab6fh6ta.lnk"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\Ab6fh6TA.lnk" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\windows\\recent\\ab6fh6ta.lnk")) returned 1 [0081.043] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\aF BVNmJ_Atzx_a.lnk", nBufferLength=0x105, lpBuffer=0x31e02c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\aF BVNmJ_Atzx_a.lnk", lpFilePart=0x0) returned 0x5a [0081.043] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e520) returned 1 [0081.043] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\aF BVNmJ_Atzx_a.lnk" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\windows\\recent\\af bvnmj_atzx_a.lnk"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x264 [0081.043] GetFileType (hFile=0x264) returned 0x1 [0081.043] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e51c) returned 1 [0081.043] GetFileType (hFile=0x264) returned 0x1 [0081.043] GetFileSize (in: hFile=0x264, lpFileSizeHigh=0x31e628 | out: lpFileSizeHigh=0x31e628*=0x0) returned 0x1bf1 [0081.043] ReadFile (in: hFile=0x264, lpBuffer=0x2734bdc, nNumberOfBytesToRead=0x1bf1, lpNumberOfBytesRead=0x31e5d4, lpOverlapped=0x0 | out: lpBuffer=0x2734bdc*, lpNumberOfBytesRead=0x31e5d4*=0x1bf1, lpOverlapped=0x0) returned 1 [0081.044] CloseHandle (hObject=0x264) returned 1 [0081.057] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\aF BVNmJ_Atzx_a.lnk", nBufferLength=0x105, lpBuffer=0x31e018, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\aF BVNmJ_Atzx_a.lnk", lpFilePart=0x0) returned 0x5a [0081.057] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e50c) returned 1 [0081.058] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\aF BVNmJ_Atzx_a.lnk" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\windows\\recent\\af bvnmj_atzx_a.lnk"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x264 [0081.059] GetFileType (hFile=0x264) returned 0x1 [0081.059] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e508) returned 1 [0081.059] GetFileType (hFile=0x264) returned 0x1 [0081.059] WriteFile (in: hFile=0x264, lpBuffer=0x278a5c4*, nNumberOfBytesToWrite=0x1c00, lpNumberOfBytesWritten=0x31e5c8, lpOverlapped=0x0 | out: lpBuffer=0x278a5c4*, lpNumberOfBytesWritten=0x31e5c8*=0x1c00, lpOverlapped=0x0) returned 1 [0081.060] CloseHandle (hObject=0x264) returned 1 [0081.060] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\aF BVNmJ_Atzx_a.lnk", nBufferLength=0x105, lpBuffer=0x31e14c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\aF BVNmJ_Atzx_a.lnk", lpFilePart=0x0) returned 0x5a [0081.060] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\aF BVNmJ_Atzx_a.lnk", nBufferLength=0x105, lpBuffer=0x31e14c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\aF BVNmJ_Atzx_a.lnk", lpFilePart=0x0) returned 0x5a [0081.060] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e5ac) returned 1 [0081.060] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\aF BVNmJ_Atzx_a.lnk" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\windows\\recent\\af bvnmj_atzx_a.lnk"), fInfoLevelId=0x0, lpFileInformation=0x31e628 | out: lpFileInformation=0x31e628*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xdd53c9c0, ftCreationTime.dwHighDateTime=0x1d5e82a, ftLastAccessTime.dwLowDateTime=0xdd53c9c0, ftLastAccessTime.dwHighDateTime=0x1d5e82a, ftLastWriteTime.dwLowDateTime=0x13c30c20, ftLastWriteTime.dwHighDateTime=0x1d6eb7f, nFileSizeHigh=0x0, nFileSizeLow=0x1c00)) returned 1 [0081.060] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e5a8) returned 1 [0081.060] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\aF BVNmJ_Atzx_a.lnk" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\windows\\recent\\af bvnmj_atzx_a.lnk"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\aF BVNmJ_Atzx_a.lnk" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\windows\\recent\\af bvnmj_atzx_a.lnk")) returned 1 [0081.061] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\atwN3-g8oPk6T3g.lnk", nBufferLength=0x105, lpBuffer=0x31e02c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\atwN3-g8oPk6T3g.lnk", lpFilePart=0x0) returned 0x5a [0081.061] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e520) returned 1 [0081.061] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\atwN3-g8oPk6T3g.lnk" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\windows\\recent\\atwn3-g8opk6t3g.lnk"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x264 [0081.061] GetFileType (hFile=0x264) returned 0x1 [0081.061] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e51c) returned 1 [0081.061] GetFileType (hFile=0x264) returned 0x1 [0081.061] GetFileSize (in: hFile=0x264, lpFileSizeHigh=0x31e628 | out: lpFileSizeHigh=0x31e628*=0x0) returned 0x309 [0081.061] ReadFile (in: hFile=0x264, lpBuffer=0x278c930, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x31e5d4, lpOverlapped=0x0 | out: lpBuffer=0x278c930*, lpNumberOfBytesRead=0x31e5d4*=0x309, lpOverlapped=0x0) returned 1 [0081.062] CloseHandle (hObject=0x264) returned 1 [0081.083] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\atwN3-g8oPk6T3g.lnk", nBufferLength=0x105, lpBuffer=0x31e018, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\atwN3-g8oPk6T3g.lnk", lpFilePart=0x0) returned 0x5a [0081.083] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e50c) returned 1 [0081.083] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\atwN3-g8oPk6T3g.lnk" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\windows\\recent\\atwn3-g8opk6t3g.lnk"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x264 [0081.084] GetFileType (hFile=0x264) returned 0x1 [0081.084] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e508) returned 1 [0081.084] GetFileType (hFile=0x264) returned 0x1 [0081.084] WriteFile (in: hFile=0x264, lpBuffer=0x27db7cc*, nNumberOfBytesToWrite=0x310, lpNumberOfBytesWritten=0x31e59c, lpOverlapped=0x0 | out: lpBuffer=0x27db7cc*, lpNumberOfBytesWritten=0x31e59c*=0x310, lpOverlapped=0x0) returned 1 [0081.085] CloseHandle (hObject=0x264) returned 1 [0081.085] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\atwN3-g8oPk6T3g.lnk", nBufferLength=0x105, lpBuffer=0x31e14c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\atwN3-g8oPk6T3g.lnk", lpFilePart=0x0) returned 0x5a [0081.085] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\atwN3-g8oPk6T3g.lnk", nBufferLength=0x105, lpBuffer=0x31e14c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\atwN3-g8oPk6T3g.lnk", lpFilePart=0x0) returned 0x5a [0081.085] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e5ac) returned 1 [0081.085] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\atwN3-g8oPk6T3g.lnk" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\windows\\recent\\atwn3-g8opk6t3g.lnk"), fInfoLevelId=0x0, lpFileInformation=0x31e628 | out: lpFileInformation=0x31e628*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xdc6821a0, ftCreationTime.dwHighDateTime=0x1d5e82a, ftLastAccessTime.dwLowDateTime=0xdc6821a0, ftLastAccessTime.dwHighDateTime=0x1d5e82a, ftLastWriteTime.dwLowDateTime=0x13c56d80, ftLastWriteTime.dwHighDateTime=0x1d6eb7f, nFileSizeHigh=0x0, nFileSizeLow=0x310)) returned 1 [0081.085] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e5a8) returned 1 [0081.085] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\atwN3-g8oPk6T3g.lnk" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\windows\\recent\\atwn3-g8opk6t3g.lnk"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\atwN3-g8oPk6T3g.lnk" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\windows\\recent\\atwn3-g8opk6t3g.lnk")) returned 1 [0081.086] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\avs0VLVQy.mkv.lnk", nBufferLength=0x105, lpBuffer=0x31e02c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\avs0VLVQy.mkv.lnk", lpFilePart=0x0) returned 0x58 [0081.086] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e520) returned 1 [0081.086] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\avs0VLVQy.mkv.lnk" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\windows\\recent\\avs0vlvqy.mkv.lnk"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x264 [0081.086] GetFileType (hFile=0x264) returned 0x1 [0081.086] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e51c) returned 1 [0081.086] GetFileType (hFile=0x264) returned 0x1 [0081.086] GetFileSize (in: hFile=0x264, lpFileSizeHigh=0x31e628 | out: lpFileSizeHigh=0x31e628*=0x0) returned 0xef2 [0081.086] ReadFile (in: hFile=0x264, lpBuffer=0x27dd9c4, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x31e5d4, lpOverlapped=0x0 | out: lpBuffer=0x27dd9c4*, lpNumberOfBytesRead=0x31e5d4*=0xef2, lpOverlapped=0x0) returned 1 [0081.087] CloseHandle (hObject=0x264) returned 1 [0081.101] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\avs0VLVQy.mkv.lnk", nBufferLength=0x105, lpBuffer=0x31e018, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\avs0VLVQy.mkv.lnk", lpFilePart=0x0) returned 0x58 [0081.101] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e50c) returned 1 [0081.101] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\avs0VLVQy.mkv.lnk" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\windows\\recent\\avs0vlvqy.mkv.lnk"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x264 [0081.102] GetFileType (hFile=0x264) returned 0x1 [0081.102] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e508) returned 1 [0081.102] GetFileType (hFile=0x264) returned 0x1 [0081.102] WriteFile (in: hFile=0x264, lpBuffer=0x2830410*, nNumberOfBytesToWrite=0xf00, lpNumberOfBytesWritten=0x31e59c, lpOverlapped=0x0 | out: lpBuffer=0x2830410*, lpNumberOfBytesWritten=0x31e59c*=0xf00, lpOverlapped=0x0) returned 1 [0081.103] CloseHandle (hObject=0x264) returned 1 [0081.103] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\avs0VLVQy.mkv.lnk", nBufferLength=0x105, lpBuffer=0x31e14c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\avs0VLVQy.mkv.lnk", lpFilePart=0x0) returned 0x58 [0081.103] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\avs0VLVQy.mkv.lnk", nBufferLength=0x105, lpBuffer=0x31e14c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\avs0VLVQy.mkv.lnk", lpFilePart=0x0) returned 0x58 [0081.103] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e5ac) returned 1 [0081.103] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\avs0VLVQy.mkv.lnk" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\windows\\recent\\avs0vlvqy.mkv.lnk"), fInfoLevelId=0x0, lpFileInformation=0x31e628 | out: lpFileInformation=0x31e628*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xdc871380, ftCreationTime.dwHighDateTime=0x1d5e82a, ftLastAccessTime.dwLowDateTime=0xdc871380, ftLastAccessTime.dwHighDateTime=0x1d5e82a, ftLastWriteTime.dwLowDateTime=0x13c7cee0, ftLastWriteTime.dwHighDateTime=0x1d6eb7f, nFileSizeHigh=0x0, nFileSizeLow=0xf00)) returned 1 [0081.103] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e5a8) returned 1 [0081.103] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\avs0VLVQy.mkv.lnk" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\windows\\recent\\avs0vlvqy.mkv.lnk"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\avs0VLVQy.mkv.lnk" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\windows\\recent\\avs0vlvqy.mkv.lnk")) returned 1 [0081.104] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\awnCnvVOwwTZEf.lnk", nBufferLength=0x105, lpBuffer=0x31e02c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\awnCnvVOwwTZEf.lnk", lpFilePart=0x0) returned 0x59 [0081.104] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e520) returned 1 [0081.104] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\awnCnvVOwwTZEf.lnk" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\windows\\recent\\awncnvvowwtzef.lnk"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x264 [0081.104] GetFileType (hFile=0x264) returned 0x1 [0081.104] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e51c) returned 1 [0081.104] GetFileType (hFile=0x264) returned 0x1 [0081.104] GetFileSize (in: hFile=0x264, lpFileSizeHigh=0x31e628 | out: lpFileSizeHigh=0x31e628*=0x0) returned 0x15d1 [0081.104] ReadFile (in: hFile=0x264, lpBuffer=0x2831704, nNumberOfBytesToRead=0x15d1, lpNumberOfBytesRead=0x31e5d4, lpOverlapped=0x0 | out: lpBuffer=0x2831704*, lpNumberOfBytesRead=0x31e5d4*=0x15d1, lpOverlapped=0x0) returned 1 [0081.105] CloseHandle (hObject=0x264) returned 1 [0081.147] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\awnCnvVOwwTZEf.lnk", nBufferLength=0x105, lpBuffer=0x31e018, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\awnCnvVOwwTZEf.lnk", lpFilePart=0x0) returned 0x59 [0081.147] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e50c) returned 1 [0081.147] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\awnCnvVOwwTZEf.lnk" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\windows\\recent\\awncnvvowwtzef.lnk"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x264 [0081.148] GetFileType (hFile=0x264) returned 0x1 [0081.148] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e508) returned 1 [0081.148] GetFileType (hFile=0x264) returned 0x1 [0081.148] WriteFile (in: hFile=0x264, lpBuffer=0x2685d94*, nNumberOfBytesToWrite=0x15e0, lpNumberOfBytesWritten=0x31e5c8, lpOverlapped=0x0 | out: lpBuffer=0x2685d94*, lpNumberOfBytesWritten=0x31e5c8*=0x15e0, lpOverlapped=0x0) returned 1 [0081.149] CloseHandle (hObject=0x264) returned 1 [0081.149] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\awnCnvVOwwTZEf.lnk", nBufferLength=0x105, lpBuffer=0x31e14c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\awnCnvVOwwTZEf.lnk", lpFilePart=0x0) returned 0x59 [0081.149] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\awnCnvVOwwTZEf.lnk", nBufferLength=0x105, lpBuffer=0x31e14c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\awnCnvVOwwTZEf.lnk", lpFilePart=0x0) returned 0x59 [0081.149] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e5ac) returned 1 [0081.149] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\awnCnvVOwwTZEf.lnk" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\windows\\recent\\awncnvvowwtzef.lnk"), fInfoLevelId=0x0, lpFileInformation=0x31e628 | out: lpFileInformation=0x31e628*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xdd399aa0, ftCreationTime.dwHighDateTime=0x1d5e82a, ftLastAccessTime.dwLowDateTime=0xdd399aa0, ftLastAccessTime.dwHighDateTime=0x1d5e82a, ftLastWriteTime.dwLowDateTime=0x13cef300, ftLastWriteTime.dwHighDateTime=0x1d6eb7f, nFileSizeHigh=0x0, nFileSizeLow=0x15e0)) returned 1 [0081.149] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e5a8) returned 1 [0081.149] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\awnCnvVOwwTZEf.lnk" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\windows\\recent\\awncnvvowwtzef.lnk"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\awnCnvVOwwTZEf.lnk" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\windows\\recent\\awncnvvowwtzef.lnk")) returned 1 [0081.150] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\BbAIdQK9.lnk", nBufferLength=0x105, lpBuffer=0x31e02c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\BbAIdQK9.lnk", lpFilePart=0x0) returned 0x53 [0081.150] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e520) returned 1 [0081.150] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\BbAIdQK9.lnk" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\windows\\recent\\bbaidqk9.lnk"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x264 [0081.150] GetFileType (hFile=0x264) returned 0x1 [0081.150] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e51c) returned 1 [0081.150] GetFileType (hFile=0x264) returned 0x1 [0081.150] GetFileSize (in: hFile=0x264, lpFileSizeHigh=0x31e628 | out: lpFileSizeHigh=0x31e628*=0x0) returned 0xa05 [0081.150] ReadFile (in: hFile=0x264, lpBuffer=0x26881b4, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x31e5d4, lpOverlapped=0x0 | out: lpBuffer=0x26881b4*, lpNumberOfBytesRead=0x31e5d4*=0xa05, lpOverlapped=0x0) returned 1 [0081.151] CloseHandle (hObject=0x264) returned 1 [0081.165] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\BbAIdQK9.lnk", nBufferLength=0x105, lpBuffer=0x31e018, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\BbAIdQK9.lnk", lpFilePart=0x0) returned 0x53 [0081.165] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e50c) returned 1 [0081.165] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\BbAIdQK9.lnk" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\windows\\recent\\bbaidqk9.lnk"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x264 [0081.166] GetFileType (hFile=0x264) returned 0x1 [0081.166] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e508) returned 1 [0081.166] GetFileType (hFile=0x264) returned 0x1 [0081.166] WriteFile (in: hFile=0x264, lpBuffer=0x26d9494*, nNumberOfBytesToWrite=0xa10, lpNumberOfBytesWritten=0x31e59c, lpOverlapped=0x0 | out: lpBuffer=0x26d9494*, lpNumberOfBytesWritten=0x31e59c*=0xa10, lpOverlapped=0x0) returned 1 [0081.168] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\BbAIdQK9.lnk", nBufferLength=0x105, lpBuffer=0x31e14c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\BbAIdQK9.lnk", lpFilePart=0x0) returned 0x53 [0081.168] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\BbAIdQK9.lnk", nBufferLength=0x105, lpBuffer=0x31e14c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\BbAIdQK9.lnk", lpFilePart=0x0) returned 0x53 [0081.168] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e5ac) returned 1 [0081.168] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\BbAIdQK9.lnk" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\windows\\recent\\bbaidqk9.lnk"), fInfoLevelId=0x0, lpFileInformation=0x31e628 | out: lpFileInformation=0x31e628*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xdd2b5260, ftCreationTime.dwHighDateTime=0x1d5e82a, ftLastAccessTime.dwLowDateTime=0xdd2b5260, ftLastAccessTime.dwHighDateTime=0x1d5e82a, ftLastWriteTime.dwLowDateTime=0x13d3b5c0, ftLastWriteTime.dwHighDateTime=0x1d6eb7f, nFileSizeHigh=0x0, nFileSizeLow=0xa10)) returned 1 [0081.168] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e5a8) returned 1 [0081.168] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\BbAIdQK9.lnk" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\windows\\recent\\bbaidqk9.lnk"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\BbAIdQK9.lnk" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\windows\\recent\\bbaidqk9.lnk")) returned 1 [0081.169] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\bErvzuwNUg.lnk", nBufferLength=0x105, lpBuffer=0x31e02c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\bErvzuwNUg.lnk", lpFilePart=0x0) returned 0x55 [0081.169] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e520) returned 1 [0081.169] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\bErvzuwNUg.lnk" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\windows\\recent\\bervzuwnug.lnk"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x264 [0081.169] GetFileType (hFile=0x264) returned 0x1 [0081.169] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e51c) returned 1 [0081.169] GetFileType (hFile=0x264) returned 0x1 [0081.169] GetFileSize (in: hFile=0x264, lpFileSizeHigh=0x31e628 | out: lpFileSizeHigh=0x31e628*=0x0) returned 0x305 [0081.169] ReadFile (in: hFile=0x264, lpBuffer=0x26daa74, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x31e5d4, lpOverlapped=0x0 | out: lpBuffer=0x26daa74*, lpNumberOfBytesRead=0x31e5d4*=0x305, lpOverlapped=0x0) returned 1 [0081.184] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\bErvzuwNUg.lnk", nBufferLength=0x105, lpBuffer=0x31e018, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\bErvzuwNUg.lnk", lpFilePart=0x0) returned 0x55 [0081.184] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e50c) returned 1 [0081.184] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\bErvzuwNUg.lnk" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\windows\\recent\\bervzuwnug.lnk"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x264 [0081.185] GetFileType (hFile=0x264) returned 0x1 [0081.185] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e508) returned 1 [0081.185] GetFileType (hFile=0x264) returned 0x1 [0081.185] WriteFile (in: hFile=0x264, lpBuffer=0x2729900*, nNumberOfBytesToWrite=0x310, lpNumberOfBytesWritten=0x31e59c, lpOverlapped=0x0 | out: lpBuffer=0x2729900*, lpNumberOfBytesWritten=0x31e59c*=0x310, lpOverlapped=0x0) returned 1 [0081.186] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\bErvzuwNUg.lnk", nBufferLength=0x105, lpBuffer=0x31e14c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\bErvzuwNUg.lnk", lpFilePart=0x0) returned 0x55 [0081.186] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\bErvzuwNUg.lnk", nBufferLength=0x105, lpBuffer=0x31e14c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\bErvzuwNUg.lnk", lpFilePart=0x0) returned 0x55 [0081.186] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e5ac) returned 1 [0081.186] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\bErvzuwNUg.lnk" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\windows\\recent\\bervzuwnug.lnk"), fInfoLevelId=0x0, lpFileInformation=0x31e628 | out: lpFileInformation=0x31e628*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xdd3bfc00, ftCreationTime.dwHighDateTime=0x1d5e82a, ftLastAccessTime.dwLowDateTime=0xdd3bfc00, ftLastAccessTime.dwHighDateTime=0x1d5e82a, ftLastWriteTime.dwLowDateTime=0x13d61720, ftLastWriteTime.dwHighDateTime=0x1d6eb7f, nFileSizeHigh=0x0, nFileSizeLow=0x310)) returned 1 [0081.186] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e5a8) returned 1 [0081.186] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\bErvzuwNUg.lnk" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\windows\\recent\\bervzuwnug.lnk"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\bErvzuwNUg.lnk" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\windows\\recent\\bervzuwnug.lnk")) returned 1 [0081.187] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\C3gHw-4vc.lnk", nBufferLength=0x105, lpBuffer=0x31e02c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\C3gHw-4vc.lnk", lpFilePart=0x0) returned 0x54 [0081.187] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e520) returned 1 [0081.187] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\C3gHw-4vc.lnk" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\windows\\recent\\c3ghw-4vc.lnk"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x264 [0081.187] GetFileType (hFile=0x264) returned 0x1 [0081.187] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e51c) returned 1 [0081.187] GetFileType (hFile=0x264) returned 0x1 [0081.187] GetFileSize (in: hFile=0x264, lpFileSizeHigh=0x31e628 | out: lpFileSizeHigh=0x31e628*=0x0) returned 0x3ed [0081.187] ReadFile (in: hFile=0x264, lpBuffer=0x272afcc, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x31e5d4, lpOverlapped=0x0 | out: lpBuffer=0x272afcc*, lpNumberOfBytesRead=0x31e5d4*=0x3ed, lpOverlapped=0x0) returned 1 [0081.201] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\C3gHw-4vc.lnk", nBufferLength=0x105, lpBuffer=0x31e018, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\C3gHw-4vc.lnk", lpFilePart=0x0) returned 0x54 [0081.201] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e50c) returned 1 [0081.201] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\C3gHw-4vc.lnk" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\windows\\recent\\c3ghw-4vc.lnk"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x264 [0081.202] GetFileType (hFile=0x264) returned 0x1 [0081.202] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e508) returned 1 [0081.202] GetFileType (hFile=0x264) returned 0x1 [0081.202] WriteFile (in: hFile=0x264, lpBuffer=0x277a2ac*, nNumberOfBytesToWrite=0x3f0, lpNumberOfBytesWritten=0x31e59c, lpOverlapped=0x0 | out: lpBuffer=0x277a2ac*, lpNumberOfBytesWritten=0x31e59c*=0x3f0, lpOverlapped=0x0) returned 1 [0081.203] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\C3gHw-4vc.lnk", nBufferLength=0x105, lpBuffer=0x31e14c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\C3gHw-4vc.lnk", lpFilePart=0x0) returned 0x54 [0081.203] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\C3gHw-4vc.lnk", nBufferLength=0x105, lpBuffer=0x31e14c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\C3gHw-4vc.lnk", lpFilePart=0x0) returned 0x54 [0081.203] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e5ac) returned 1 [0081.203] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\C3gHw-4vc.lnk" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\windows\\recent\\c3ghw-4vc.lnk"), fInfoLevelId=0x0, lpFileInformation=0x31e628 | out: lpFileInformation=0x31e628*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xdcbdd320, ftCreationTime.dwHighDateTime=0x1d5e82a, ftLastAccessTime.dwLowDateTime=0xdcbdd320, ftLastAccessTime.dwHighDateTime=0x1d5e82a, ftLastWriteTime.dwLowDateTime=0x13d87880, ftLastWriteTime.dwHighDateTime=0x1d6eb7f, nFileSizeHigh=0x0, nFileSizeLow=0x3f0)) returned 1 [0081.203] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e5a8) returned 1 [0081.203] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\C3gHw-4vc.lnk" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\windows\\recent\\c3ghw-4vc.lnk"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\C3gHw-4vc.lnk" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\windows\\recent\\c3ghw-4vc.lnk")) returned 1 [0081.204] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\cBq3YiZO5mBKpb7HK3.lnk", nBufferLength=0x105, lpBuffer=0x31e02c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\cBq3YiZO5mBKpb7HK3.lnk", lpFilePart=0x0) returned 0x5d [0081.204] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e520) returned 1 [0081.204] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\cBq3YiZO5mBKpb7HK3.lnk" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\windows\\recent\\cbq3yizo5mbkpb7hk3.lnk"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x264 [0081.204] GetFileType (hFile=0x264) returned 0x1 [0081.204] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e51c) returned 1 [0081.204] GetFileType (hFile=0x264) returned 0x1 [0081.204] GetFileSize (in: hFile=0x264, lpFileSizeHigh=0x31e628 | out: lpFileSizeHigh=0x31e628*=0x0) returned 0xfec [0081.204] ReadFile (in: hFile=0x264, lpBuffer=0x277c598, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x31e5d4, lpOverlapped=0x0 | out: lpBuffer=0x277c598*, lpNumberOfBytesRead=0x31e5d4*=0xfec, lpOverlapped=0x0) returned 1 [0081.219] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\cBq3YiZO5mBKpb7HK3.lnk", nBufferLength=0x105, lpBuffer=0x31e018, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\cBq3YiZO5mBKpb7HK3.lnk", lpFilePart=0x0) returned 0x5d [0081.219] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e50c) returned 1 [0081.219] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\cBq3YiZO5mBKpb7HK3.lnk" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\windows\\recent\\cbq3yizo5mbkpb7hk3.lnk"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x264 [0081.220] GetFileType (hFile=0x264) returned 0x1 [0081.220] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e508) returned 1 [0081.220] GetFileType (hFile=0x264) returned 0x1 [0081.220] WriteFile (in: hFile=0x264, lpBuffer=0x27cf49c*, nNumberOfBytesToWrite=0xff0, lpNumberOfBytesWritten=0x31e59c, lpOverlapped=0x0 | out: lpBuffer=0x27cf49c*, lpNumberOfBytesWritten=0x31e59c*=0xff0, lpOverlapped=0x0) returned 1 [0081.221] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\cBq3YiZO5mBKpb7HK3.lnk", nBufferLength=0x105, lpBuffer=0x31e14c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\cBq3YiZO5mBKpb7HK3.lnk", lpFilePart=0x0) returned 0x5d [0081.221] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\cBq3YiZO5mBKpb7HK3.lnk", nBufferLength=0x105, lpBuffer=0x31e14c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\cBq3YiZO5mBKpb7HK3.lnk", lpFilePart=0x0) returned 0x5d [0081.221] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e5ac) returned 1 [0081.221] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\cBq3YiZO5mBKpb7HK3.lnk" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\windows\\recent\\cbq3yizo5mbkpb7hk3.lnk"), fInfoLevelId=0x0, lpFileInformation=0x31e628 | out: lpFileInformation=0x31e628*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xdcd33f80, ftCreationTime.dwHighDateTime=0x1d5e82a, ftLastAccessTime.dwLowDateTime=0xdcd33f80, ftLastAccessTime.dwHighDateTime=0x1d5e82a, ftLastWriteTime.dwLowDateTime=0x13dad9e0, ftLastWriteTime.dwHighDateTime=0x1d6eb7f, nFileSizeHigh=0x0, nFileSizeLow=0xff0)) returned 1 [0081.221] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e5a8) returned 1 [0081.221] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\cBq3YiZO5mBKpb7HK3.lnk" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\windows\\recent\\cbq3yizo5mbkpb7hk3.lnk"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\cBq3YiZO5mBKpb7HK3.lnk" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\windows\\recent\\cbq3yizo5mbkpb7hk3.lnk")) returned 1 [0081.221] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\CUcIWhXZcN.lnk", nBufferLength=0x105, lpBuffer=0x31e02c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\CUcIWhXZcN.lnk", lpFilePart=0x0) returned 0x55 [0081.222] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e520) returned 1 [0081.222] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\CUcIWhXZcN.lnk" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\windows\\recent\\cuciwhxzcn.lnk"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x264 [0081.222] GetFileType (hFile=0x264) returned 0x1 [0081.222] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e51c) returned 1 [0081.222] GetFileType (hFile=0x264) returned 0x1 [0081.222] GetFileSize (in: hFile=0x264, lpFileSizeHigh=0x31e628 | out: lpFileSizeHigh=0x31e628*=0x0) returned 0x1a9a [0081.222] ReadFile (in: hFile=0x264, lpBuffer=0x27d0790, nNumberOfBytesToRead=0x1a9a, lpNumberOfBytesRead=0x31e5d4, lpOverlapped=0x0 | out: lpBuffer=0x27d0790*, lpNumberOfBytesRead=0x31e5d4*=0x1a9a, lpOverlapped=0x0) returned 1 [0081.236] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\CUcIWhXZcN.lnk", nBufferLength=0x105, lpBuffer=0x31e018, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\CUcIWhXZcN.lnk", lpFilePart=0x0) returned 0x55 [0081.236] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e50c) returned 1 [0081.236] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\CUcIWhXZcN.lnk" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\windows\\recent\\cuciwhxzcn.lnk"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x264 [0081.237] GetFileType (hFile=0x264) returned 0x1 [0081.237] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e508) returned 1 [0081.237] GetFileType (hFile=0x264) returned 0x1 [0081.237] WriteFile (in: hFile=0x264, lpBuffer=0x2825a98*, nNumberOfBytesToWrite=0x1aa0, lpNumberOfBytesWritten=0x31e5c8, lpOverlapped=0x0 | out: lpBuffer=0x2825a98*, lpNumberOfBytesWritten=0x31e5c8*=0x1aa0, lpOverlapped=0x0) returned 1 [0081.238] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\CUcIWhXZcN.lnk", nBufferLength=0x105, lpBuffer=0x31e14c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\CUcIWhXZcN.lnk", lpFilePart=0x0) returned 0x55 [0081.238] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\CUcIWhXZcN.lnk", nBufferLength=0x105, lpBuffer=0x31e14c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\CUcIWhXZcN.lnk", lpFilePart=0x0) returned 0x55 [0081.238] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e5ac) returned 1 [0081.238] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\CUcIWhXZcN.lnk" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\windows\\recent\\cuciwhxzcn.lnk"), fInfoLevelId=0x0, lpFileInformation=0x31e628 | out: lpFileInformation=0x31e628*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xdd6b9780, ftCreationTime.dwHighDateTime=0x1d5e82a, ftLastAccessTime.dwLowDateTime=0xdd6b9780, ftLastAccessTime.dwHighDateTime=0x1d5e82a, ftLastWriteTime.dwLowDateTime=0x13dd3b40, ftLastWriteTime.dwHighDateTime=0x1d6eb7f, nFileSizeHigh=0x0, nFileSizeLow=0x1aa0)) returned 1 [0081.238] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e5a8) returned 1 [0081.238] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\CUcIWhXZcN.lnk" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\windows\\recent\\cuciwhxzcn.lnk"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\CUcIWhXZcN.lnk" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\windows\\recent\\cuciwhxzcn.lnk")) returned 1 [0081.239] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\d6 dLC jkU9.lnk", nBufferLength=0x105, lpBuffer=0x31e02c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\d6 dLC jkU9.lnk", lpFilePart=0x0) returned 0x56 [0081.239] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e520) returned 1 [0081.239] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\d6 dLC jkU9.lnk" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\windows\\recent\\d6 dlc jku9.lnk"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x264 [0081.239] GetFileType (hFile=0x264) returned 0x1 [0081.239] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e51c) returned 1 [0081.239] GetFileType (hFile=0x264) returned 0x1 [0081.239] GetFileSize (in: hFile=0x264, lpFileSizeHigh=0x31e628 | out: lpFileSizeHigh=0x31e628*=0x0) returned 0x1b5f [0081.239] ReadFile (in: hFile=0x264, lpBuffer=0x2827950, nNumberOfBytesToRead=0x1b5f, lpNumberOfBytesRead=0x31e5d4, lpOverlapped=0x0 | out: lpBuffer=0x2827950*, lpNumberOfBytesRead=0x31e5d4*=0x1b5f, lpOverlapped=0x0) returned 1 [0081.290] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\d6 dLC jkU9.lnk", nBufferLength=0x105, lpBuffer=0x31e018, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\d6 dLC jkU9.lnk", lpFilePart=0x0) returned 0x56 [0081.290] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e50c) returned 1 [0081.290] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\d6 dLC jkU9.lnk" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\windows\\recent\\d6 dlc jku9.lnk"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x264 [0081.291] GetFileType (hFile=0x264) returned 0x1 [0081.291] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e508) returned 1 [0081.291] GetFileType (hFile=0x264) returned 0x1 [0081.291] WriteFile (in: hFile=0x264, lpBuffer=0x267d590*, nNumberOfBytesToWrite=0x1b60, lpNumberOfBytesWritten=0x31e5c8, lpOverlapped=0x0 | out: lpBuffer=0x267d590*, lpNumberOfBytesWritten=0x31e5c8*=0x1b60, lpOverlapped=0x0) returned 1 [0081.292] CloseHandle (hObject=0x264) returned 1 [0081.292] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\d6 dLC jkU9.lnk", nBufferLength=0x105, lpBuffer=0x31e14c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\d6 dLC jkU9.lnk", lpFilePart=0x0) returned 0x56 [0081.292] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\d6 dLC jkU9.lnk", nBufferLength=0x105, lpBuffer=0x31e14c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\d6 dLC jkU9.lnk", lpFilePart=0x0) returned 0x56 [0081.293] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e5ac) returned 1 [0081.293] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\d6 dLC jkU9.lnk" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\windows\\recent\\d6 dlc jku9.lnk"), fInfoLevelId=0x0, lpFileInformation=0x31e628 | out: lpFileInformation=0x31e628*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xdd516860, ftCreationTime.dwHighDateTime=0x1d5e82a, ftLastAccessTime.dwLowDateTime=0xdd516860, ftLastAccessTime.dwHighDateTime=0x1d5e82a, ftLastWriteTime.dwLowDateTime=0x13e6c0c0, ftLastWriteTime.dwHighDateTime=0x1d6eb7f, nFileSizeHigh=0x0, nFileSizeLow=0x1b60)) returned 1 [0081.293] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e5a8) returned 1 [0081.293] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\d6 dLC jkU9.lnk" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\windows\\recent\\d6 dlc jku9.lnk"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\d6 dLC jkU9.lnk" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\windows\\recent\\d6 dlc jku9.lnk")) returned 1 [0081.293] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\dF-VG_t_vGxzSuUsEnW3.lnk", nBufferLength=0x105, lpBuffer=0x31e02c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\dF-VG_t_vGxzSuUsEnW3.lnk", lpFilePart=0x0) returned 0x5f [0081.293] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e520) returned 1 [0081.293] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\dF-VG_t_vGxzSuUsEnW3.lnk" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\windows\\recent\\df-vg_t_vgxzsuusenw3.lnk"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x264 [0081.294] GetFileType (hFile=0x264) returned 0x1 [0081.294] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e51c) returned 1 [0081.294] GetFileType (hFile=0x264) returned 0x1 [0081.294] GetFileSize (in: hFile=0x264, lpFileSizeHigh=0x31e628 | out: lpFileSizeHigh=0x31e628*=0x0) returned 0x1613 [0081.294] ReadFile (in: hFile=0x264, lpBuffer=0x267f550, nNumberOfBytesToRead=0x1613, lpNumberOfBytesRead=0x31e5d4, lpOverlapped=0x0 | out: lpBuffer=0x267f550*, lpNumberOfBytesRead=0x31e5d4*=0x1613, lpOverlapped=0x0) returned 1 [0081.294] CloseHandle (hObject=0x264) returned 1 [0081.309] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\dF-VG_t_vGxzSuUsEnW3.lnk", nBufferLength=0x105, lpBuffer=0x31e018, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\dF-VG_t_vGxzSuUsEnW3.lnk", lpFilePart=0x0) returned 0x5f [0081.309] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e50c) returned 1 [0081.309] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\dF-VG_t_vGxzSuUsEnW3.lnk" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\windows\\recent\\df-vg_t_vgxzsuusenw3.lnk"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x264 [0081.310] GetFileType (hFile=0x264) returned 0x1 [0081.310] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e508) returned 1 [0081.310] GetFileType (hFile=0x264) returned 0x1 [0081.310] WriteFile (in: hFile=0x264, lpBuffer=0x26d3334*, nNumberOfBytesToWrite=0x1620, lpNumberOfBytesWritten=0x31e5c8, lpOverlapped=0x0 | out: lpBuffer=0x26d3334*, lpNumberOfBytesWritten=0x31e5c8*=0x1620, lpOverlapped=0x0) returned 1 [0081.311] CloseHandle (hObject=0x264) returned 1 [0081.311] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\dF-VG_t_vGxzSuUsEnW3.lnk", nBufferLength=0x105, lpBuffer=0x31e14c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\dF-VG_t_vGxzSuUsEnW3.lnk", lpFilePart=0x0) returned 0x5f [0081.311] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\dF-VG_t_vGxzSuUsEnW3.lnk", nBufferLength=0x105, lpBuffer=0x31e14c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\dF-VG_t_vGxzSuUsEnW3.lnk", lpFilePart=0x0) returned 0x5f [0081.311] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e5ac) returned 1 [0081.311] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\dF-VG_t_vGxzSuUsEnW3.lnk" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\windows\\recent\\df-vg_t_vgxzsuusenw3.lnk"), fInfoLevelId=0x0, lpFileInformation=0x31e628 | out: lpFileInformation=0x31e628*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xdd268fa0, ftCreationTime.dwHighDateTime=0x1d5e82a, ftLastAccessTime.dwLowDateTime=0xdd268fa0, ftLastAccessTime.dwHighDateTime=0x1d5e82a, ftLastWriteTime.dwLowDateTime=0x13e92220, ftLastWriteTime.dwHighDateTime=0x1d6eb7f, nFileSizeHigh=0x0, nFileSizeLow=0x1620)) returned 1 [0081.311] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e5a8) returned 1 [0081.311] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\dF-VG_t_vGxzSuUsEnW3.lnk" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\windows\\recent\\df-vg_t_vgxzsuusenw3.lnk"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\dF-VG_t_vGxzSuUsEnW3.lnk" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\windows\\recent\\df-vg_t_vgxzsuusenw3.lnk")) returned 1 [0081.312] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\DfXgi8mluBJ.lnk", nBufferLength=0x105, lpBuffer=0x31e02c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\DfXgi8mluBJ.lnk", lpFilePart=0x0) returned 0x56 [0081.312] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e520) returned 1 [0081.312] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\DfXgi8mluBJ.lnk" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\windows\\recent\\dfxgi8mlubj.lnk"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x264 [0081.312] GetFileType (hFile=0x264) returned 0x1 [0081.312] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e51c) returned 1 [0081.312] GetFileType (hFile=0x264) returned 0x1 [0081.312] GetFileSize (in: hFile=0x264, lpFileSizeHigh=0x31e628 | out: lpFileSizeHigh=0x31e628*=0x0) returned 0x1b5f [0081.312] ReadFile (in: hFile=0x264, lpBuffer=0x26d4dbc, nNumberOfBytesToRead=0x1b5f, lpNumberOfBytesRead=0x31e5d4, lpOverlapped=0x0 | out: lpBuffer=0x26d4dbc*, lpNumberOfBytesRead=0x31e5d4*=0x1b5f, lpOverlapped=0x0) returned 1 [0081.313] CloseHandle (hObject=0x264) returned 1 [0081.326] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\DfXgi8mluBJ.lnk", nBufferLength=0x105, lpBuffer=0x31e018, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\DfXgi8mluBJ.lnk", lpFilePart=0x0) returned 0x56 [0081.326] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e50c) returned 1 [0081.327] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\DfXgi8mluBJ.lnk" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\windows\\recent\\dfxgi8mlubj.lnk"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x264 [0081.327] GetFileType (hFile=0x264) returned 0x1 [0081.327] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e508) returned 1 [0081.328] GetFileType (hFile=0x264) returned 0x1 [0081.328] WriteFile (in: hFile=0x264, lpBuffer=0x272a484*, nNumberOfBytesToWrite=0x1b60, lpNumberOfBytesWritten=0x31e5c8, lpOverlapped=0x0 | out: lpBuffer=0x272a484*, lpNumberOfBytesWritten=0x31e5c8*=0x1b60, lpOverlapped=0x0) returned 1 [0081.328] CloseHandle (hObject=0x264) returned 1 [0081.329] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\DfXgi8mluBJ.lnk", nBufferLength=0x105, lpBuffer=0x31e14c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\DfXgi8mluBJ.lnk", lpFilePart=0x0) returned 0x56 [0081.329] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\DfXgi8mluBJ.lnk", nBufferLength=0x105, lpBuffer=0x31e14c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\DfXgi8mluBJ.lnk", lpFilePart=0x0) returned 0x56 [0081.329] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e5ac) returned 1 [0081.329] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\DfXgi8mluBJ.lnk" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\windows\\recent\\dfxgi8mlubj.lnk"), fInfoLevelId=0x0, lpFileInformation=0x31e628 | out: lpFileInformation=0x31e628*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xdd647360, ftCreationTime.dwHighDateTime=0x1d5e82a, ftLastAccessTime.dwLowDateTime=0xdd647360, ftLastAccessTime.dwHighDateTime=0x1d5e82a, ftLastWriteTime.dwLowDateTime=0x13eb8380, ftLastWriteTime.dwHighDateTime=0x1d6eb7f, nFileSizeHigh=0x0, nFileSizeLow=0x1b60)) returned 1 [0081.329] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e5a8) returned 1 [0081.329] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\DfXgi8mluBJ.lnk" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\windows\\recent\\dfxgi8mlubj.lnk"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\DfXgi8mluBJ.lnk" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\windows\\recent\\dfxgi8mlubj.lnk")) returned 1 [0081.329] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\E5yqHX_c 22spYoHS.lnk", nBufferLength=0x105, lpBuffer=0x31e02c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\E5yqHX_c 22spYoHS.lnk", lpFilePart=0x0) returned 0x5c [0081.329] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e520) returned 1 [0081.329] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\E5yqHX_c 22spYoHS.lnk" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\windows\\recent\\e5yqhx_c 22spyohs.lnk"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x264 [0081.330] GetFileType (hFile=0x264) returned 0x1 [0081.330] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e51c) returned 1 [0081.330] GetFileType (hFile=0x264) returned 0x1 [0081.330] GetFileSize (in: hFile=0x264, lpFileSizeHigh=0x31e628 | out: lpFileSizeHigh=0x31e628*=0x0) returned 0x13fc [0081.330] ReadFile (in: hFile=0x264, lpBuffer=0x272c420, nNumberOfBytesToRead=0x13fc, lpNumberOfBytesRead=0x31e5d4, lpOverlapped=0x0 | out: lpBuffer=0x272c420*, lpNumberOfBytesRead=0x31e5d4*=0x13fc, lpOverlapped=0x0) returned 1 [0081.330] CloseHandle (hObject=0x264) returned 1 [0081.345] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\E5yqHX_c 22spYoHS.lnk", nBufferLength=0x105, lpBuffer=0x31e018, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\E5yqHX_c 22spYoHS.lnk", lpFilePart=0x0) returned 0x5c [0081.345] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e50c) returned 1 [0081.345] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\E5yqHX_c 22spYoHS.lnk" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\windows\\recent\\e5yqhx_c 22spyohs.lnk"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x264 [0081.346] GetFileType (hFile=0x264) returned 0x1 [0081.346] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e508) returned 1 [0081.346] GetFileType (hFile=0x264) returned 0x1 [0081.346] WriteFile (in: hFile=0x264, lpBuffer=0x277f604*, nNumberOfBytesToWrite=0x1400, lpNumberOfBytesWritten=0x31e5c8, lpOverlapped=0x0 | out: lpBuffer=0x277f604*, lpNumberOfBytesWritten=0x31e5c8*=0x1400, lpOverlapped=0x0) returned 1 [0081.347] CloseHandle (hObject=0x264) returned 1 [0081.347] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\E5yqHX_c 22spYoHS.lnk", nBufferLength=0x105, lpBuffer=0x31e14c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\E5yqHX_c 22spYoHS.lnk", lpFilePart=0x0) returned 0x5c [0081.347] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\E5yqHX_c 22spYoHS.lnk", nBufferLength=0x105, lpBuffer=0x31e14c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\E5yqHX_c 22spYoHS.lnk", lpFilePart=0x0) returned 0x5c [0081.347] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e5ac) returned 1 [0081.347] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\E5yqHX_c 22spYoHS.lnk" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\windows\\recent\\e5yqhx_c 22spyohs.lnk"), fInfoLevelId=0x0, lpFileInformation=0x31e628 | out: lpFileInformation=0x31e628*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xdb40f720, ftCreationTime.dwHighDateTime=0x1d5e82a, ftLastAccessTime.dwLowDateTime=0xdd72bba0, ftLastAccessTime.dwHighDateTime=0x1d5e82a, ftLastWriteTime.dwLowDateTime=0x13ede4e0, ftLastWriteTime.dwHighDateTime=0x1d6eb7f, nFileSizeHigh=0x0, nFileSizeLow=0x1400)) returned 1 [0081.347] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e5a8) returned 1 [0081.347] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\E5yqHX_c 22spYoHS.lnk" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\windows\\recent\\e5yqhx_c 22spyohs.lnk"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\E5yqHX_c 22spYoHS.lnk" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\windows\\recent\\e5yqhx_c 22spyohs.lnk")) returned 1 [0081.348] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\eEZ0I5zK3ZKi8gNeQ.lnk", nBufferLength=0x105, lpBuffer=0x31e02c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\eEZ0I5zK3ZKi8gNeQ.lnk", lpFilePart=0x0) returned 0x5c [0081.348] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e520) returned 1 [0081.348] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\eEZ0I5zK3ZKi8gNeQ.lnk" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\windows\\recent\\eez0i5zk3zki8gneq.lnk"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x264 [0081.348] GetFileType (hFile=0x264) returned 0x1 [0081.348] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e51c) returned 1 [0081.348] GetFileType (hFile=0x264) returned 0x1 [0081.348] GetFileSize (in: hFile=0x264, lpFileSizeHigh=0x31e628 | out: lpFileSizeHigh=0x31e628*=0x0) returned 0x1ba1 [0081.348] ReadFile (in: hFile=0x264, lpBuffer=0x2780e70, nNumberOfBytesToRead=0x1ba1, lpNumberOfBytesRead=0x31e5d4, lpOverlapped=0x0 | out: lpBuffer=0x2780e70*, lpNumberOfBytesRead=0x31e5d4*=0x1ba1, lpOverlapped=0x0) returned 1 [0081.349] CloseHandle (hObject=0x264) returned 1 [0081.362] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\eEZ0I5zK3ZKi8gNeQ.lnk", nBufferLength=0x105, lpBuffer=0x31e018, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\eEZ0I5zK3ZKi8gNeQ.lnk", lpFilePart=0x0) returned 0x5c [0081.362] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e50c) returned 1 [0081.362] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\eEZ0I5zK3ZKi8gNeQ.lnk" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\windows\\recent\\eez0i5zk3zki8gneq.lnk"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x264 [0081.363] GetFileType (hFile=0x264) returned 0x1 [0081.363] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e508) returned 1 [0081.363] GetFileType (hFile=0x264) returned 0x1 [0081.363] WriteFile (in: hFile=0x264, lpBuffer=0x27d66c8*, nNumberOfBytesToWrite=0x1bb0, lpNumberOfBytesWritten=0x31e5c8, lpOverlapped=0x0 | out: lpBuffer=0x27d66c8*, lpNumberOfBytesWritten=0x31e5c8*=0x1bb0, lpOverlapped=0x0) returned 1 [0081.364] CloseHandle (hObject=0x264) returned 1 [0081.364] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\eEZ0I5zK3ZKi8gNeQ.lnk", nBufferLength=0x105, lpBuffer=0x31e14c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\eEZ0I5zK3ZKi8gNeQ.lnk", lpFilePart=0x0) returned 0x5c [0081.364] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\eEZ0I5zK3ZKi8gNeQ.lnk", nBufferLength=0x105, lpBuffer=0x31e14c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\eEZ0I5zK3ZKi8gNeQ.lnk", lpFilePart=0x0) returned 0x5c [0081.364] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e5ac) returned 1 [0081.364] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\eEZ0I5zK3ZKi8gNeQ.lnk" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\windows\\recent\\eez0i5zk3zki8gneq.lnk"), fInfoLevelId=0x0, lpFileInformation=0x31e628 | out: lpFileInformation=0x31e628*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xdcd33f80, ftCreationTime.dwHighDateTime=0x1d5e82a, ftLastAccessTime.dwLowDateTime=0xdcd33f80, ftLastAccessTime.dwHighDateTime=0x1d5e82a, ftLastWriteTime.dwLowDateTime=0x13f04640, ftLastWriteTime.dwHighDateTime=0x1d6eb7f, nFileSizeHigh=0x0, nFileSizeLow=0x1bb0)) returned 1 [0081.364] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e5a8) returned 1 [0081.365] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\eEZ0I5zK3ZKi8gNeQ.lnk" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\windows\\recent\\eez0i5zk3zki8gneq.lnk"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\eEZ0I5zK3ZKi8gNeQ.lnk" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\windows\\recent\\eez0i5zk3zki8gneq.lnk")) returned 1 [0081.365] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\EfftTM9vyjFXlwqKsjF.lnk", nBufferLength=0x105, lpBuffer=0x31e02c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\EfftTM9vyjFXlwqKsjF.lnk", lpFilePart=0x0) returned 0x5e [0081.365] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e520) returned 1 [0081.365] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\EfftTM9vyjFXlwqKsjF.lnk" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\windows\\recent\\effttm9vyjfxlwqksjf.lnk"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x264 [0081.365] GetFileType (hFile=0x264) returned 0x1 [0081.365] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e51c) returned 1 [0081.365] GetFileType (hFile=0x264) returned 0x1 [0081.365] GetFileSize (in: hFile=0x264, lpFileSizeHigh=0x31e628 | out: lpFileSizeHigh=0x31e628*=0x0) returned 0xff3 [0081.366] ReadFile (in: hFile=0x264, lpBuffer=0x27d96ec, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x31e5d4, lpOverlapped=0x0 | out: lpBuffer=0x27d96ec*, lpNumberOfBytesRead=0x31e5d4*=0xff3, lpOverlapped=0x0) returned 1 [0081.366] CloseHandle (hObject=0x264) returned 1 [0081.381] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\EfftTM9vyjFXlwqKsjF.lnk", nBufferLength=0x105, lpBuffer=0x31e018, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\EfftTM9vyjFXlwqKsjF.lnk", lpFilePart=0x0) returned 0x5e [0081.381] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e50c) returned 1 [0081.381] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\EfftTM9vyjFXlwqKsjF.lnk" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\windows\\recent\\effttm9vyjfxlwqksjf.lnk"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x264 [0081.382] GetFileType (hFile=0x264) returned 0x1 [0081.382] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e508) returned 1 [0081.382] GetFileType (hFile=0x264) returned 0x1 [0081.382] WriteFile (in: hFile=0x264, lpBuffer=0x282b4e0*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x31e5c8, lpOverlapped=0x0 | out: lpBuffer=0x282b4e0*, lpNumberOfBytesWritten=0x31e5c8*=0x1000, lpOverlapped=0x0) returned 1 [0081.383] CloseHandle (hObject=0x264) returned 1 [0081.383] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\EfftTM9vyjFXlwqKsjF.lnk", nBufferLength=0x105, lpBuffer=0x31e14c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\EfftTM9vyjFXlwqKsjF.lnk", lpFilePart=0x0) returned 0x5e [0081.383] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\EfftTM9vyjFXlwqKsjF.lnk", nBufferLength=0x105, lpBuffer=0x31e14c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\EfftTM9vyjFXlwqKsjF.lnk", lpFilePart=0x0) returned 0x5e [0081.383] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e5ac) returned 1 [0081.383] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\EfftTM9vyjFXlwqKsjF.lnk" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\windows\\recent\\effttm9vyjfxlwqksjf.lnk"), fInfoLevelId=0x0, lpFileInformation=0x31e628 | out: lpFileInformation=0x31e628*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xdd588c80, ftCreationTime.dwHighDateTime=0x1d5e82a, ftLastAccessTime.dwLowDateTime=0xdd588c80, ftLastAccessTime.dwHighDateTime=0x1d5e82a, ftLastWriteTime.dwLowDateTime=0x13f2a7a0, ftLastWriteTime.dwHighDateTime=0x1d6eb7f, nFileSizeHigh=0x0, nFileSizeLow=0x1000)) returned 1 [0081.383] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e5a8) returned 1 [0081.383] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\EfftTM9vyjFXlwqKsjF.lnk" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\windows\\recent\\effttm9vyjfxlwqksjf.lnk"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\EfftTM9vyjFXlwqKsjF.lnk" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\windows\\recent\\effttm9vyjfxlwqksjf.lnk")) returned 1 [0081.384] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\egNz9w_.lnk", nBufferLength=0x105, lpBuffer=0x31e02c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\egNz9w_.lnk", lpFilePart=0x0) returned 0x52 [0081.384] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e520) returned 1 [0081.384] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\egNz9w_.lnk" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\windows\\recent\\egnz9w_.lnk"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x264 [0081.384] GetFileType (hFile=0x264) returned 0x1 [0081.384] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e51c) returned 1 [0081.384] GetFileType (hFile=0x264) returned 0x1 [0081.384] GetFileSize (in: hFile=0x264, lpFileSizeHigh=0x31e628 | out: lpFileSizeHigh=0x31e628*=0x0) returned 0x1580 [0081.384] ReadFile (in: hFile=0x264, lpBuffer=0x282c934, nNumberOfBytesToRead=0x1580, lpNumberOfBytesRead=0x31e5d4, lpOverlapped=0x0 | out: lpBuffer=0x282c934*, lpNumberOfBytesRead=0x31e5d4*=0x1580, lpOverlapped=0x0) returned 1 [0081.385] CloseHandle (hObject=0x264) returned 1 [0081.429] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\egNz9w_.lnk", nBufferLength=0x105, lpBuffer=0x31e018, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\egNz9w_.lnk", lpFilePart=0x0) returned 0x52 [0081.430] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e50c) returned 1 [0081.430] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\egNz9w_.lnk" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\windows\\recent\\egnz9w_.lnk"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x264 [0081.431] GetFileType (hFile=0x264) returned 0x1 [0081.431] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e508) returned 1 [0081.431] GetFileType (hFile=0x264) returned 0x1 [0081.431] WriteFile (in: hFile=0x264, lpBuffer=0x267fcf0*, nNumberOfBytesToWrite=0x1590, lpNumberOfBytesWritten=0x31e5c8, lpOverlapped=0x0 | out: lpBuffer=0x267fcf0*, lpNumberOfBytesWritten=0x31e5c8*=0x1590, lpOverlapped=0x0) returned 1 [0081.432] CloseHandle (hObject=0x264) returned 1 [0081.432] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\egNz9w_.lnk", nBufferLength=0x105, lpBuffer=0x31e14c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\egNz9w_.lnk", lpFilePart=0x0) returned 0x52 [0081.432] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\egNz9w_.lnk", nBufferLength=0x105, lpBuffer=0x31e14c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\egNz9w_.lnk", lpFilePart=0x0) returned 0x52 [0081.432] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e5ac) returned 1 [0081.432] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\egNz9w_.lnk" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\windows\\recent\\egnz9w_.lnk"), fInfoLevelId=0x0, lpFileInformation=0x31e628 | out: lpFileInformation=0x31e628*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xdd1384a0, ftCreationTime.dwHighDateTime=0x1d5e82a, ftLastAccessTime.dwLowDateTime=0xdd1384a0, ftLastAccessTime.dwHighDateTime=0x1d5e82a, ftLastWriteTime.dwLowDateTime=0x13f9cbc0, ftLastWriteTime.dwHighDateTime=0x1d6eb7f, nFileSizeHigh=0x0, nFileSizeLow=0x1590)) returned 1 [0081.432] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e5a8) returned 1 [0081.432] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\egNz9w_.lnk" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\windows\\recent\\egnz9w_.lnk"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\egNz9w_.lnk" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\windows\\recent\\egnz9w_.lnk")) returned 1 [0081.433] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\eStdF.lnk", nBufferLength=0x105, lpBuffer=0x31e02c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\eStdF.lnk", lpFilePart=0x0) returned 0x50 [0081.433] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e520) returned 1 [0081.433] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\eStdF.lnk" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\windows\\recent\\estdf.lnk"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x264 [0081.433] GetFileType (hFile=0x264) returned 0x1 [0081.433] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e51c) returned 1 [0081.433] GetFileType (hFile=0x264) returned 0x1 [0081.433] GetFileSize (in: hFile=0x264, lpFileSizeHigh=0x31e628 | out: lpFileSizeHigh=0x31e628*=0x0) returned 0xe5c [0081.433] ReadFile (in: hFile=0x264, lpBuffer=0x26824d4, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x31e5d4, lpOverlapped=0x0 | out: lpBuffer=0x26824d4*, lpNumberOfBytesRead=0x31e5d4*=0xe5c, lpOverlapped=0x0) returned 1 [0081.434] CloseHandle (hObject=0x264) returned 1 [0081.447] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\eStdF.lnk", nBufferLength=0x105, lpBuffer=0x31e018, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\eStdF.lnk", lpFilePart=0x0) returned 0x50 [0081.447] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e50c) returned 1 [0081.447] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\eStdF.lnk" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\windows\\recent\\estdf.lnk"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x264 [0081.448] GetFileType (hFile=0x264) returned 0x1 [0081.448] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e508) returned 1 [0081.448] GetFileType (hFile=0x264) returned 0x1 [0081.448] WriteFile (in: hFile=0x264, lpBuffer=0x26d4d30*, nNumberOfBytesToWrite=0xe60, lpNumberOfBytesWritten=0x31e59c, lpOverlapped=0x0 | out: lpBuffer=0x26d4d30*, lpNumberOfBytesWritten=0x31e59c*=0xe60, lpOverlapped=0x0) returned 1 [0081.449] CloseHandle (hObject=0x264) returned 1 [0081.449] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\eStdF.lnk", nBufferLength=0x105, lpBuffer=0x31e14c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\eStdF.lnk", lpFilePart=0x0) returned 0x50 [0081.449] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\eStdF.lnk", nBufferLength=0x105, lpBuffer=0x31e14c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\eStdF.lnk", lpFilePart=0x0) returned 0x50 [0081.449] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e5ac) returned 1 [0081.449] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\eStdF.lnk" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\windows\\recent\\estdf.lnk"), fInfoLevelId=0x0, lpFileInformation=0x31e628 | out: lpFileInformation=0x31e628*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xdb4f3f60, ftCreationTime.dwHighDateTime=0x1d5e82a, ftLastAccessTime.dwLowDateTime=0xdd751d00, ftLastAccessTime.dwHighDateTime=0x1d5e82a, ftLastWriteTime.dwLowDateTime=0x13fe8e80, ftLastWriteTime.dwHighDateTime=0x1d6eb7f, nFileSizeHigh=0x0, nFileSizeLow=0xe60)) returned 1 [0081.450] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e5a8) returned 1 [0081.450] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\eStdF.lnk" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\windows\\recent\\estdf.lnk"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\eStdF.lnk" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\windows\\recent\\estdf.lnk")) returned 1 [0081.450] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\ewcSZPE2Uke_ysh8Kk.lnk", nBufferLength=0x105, lpBuffer=0x31e02c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\ewcSZPE2Uke_ysh8Kk.lnk", lpFilePart=0x0) returned 0x5d [0081.450] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e520) returned 1 [0081.450] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\ewcSZPE2Uke_ysh8Kk.lnk" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\windows\\recent\\ewcszpe2uke_ysh8kk.lnk"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x264 [0081.450] GetFileType (hFile=0x264) returned 0x1 [0081.450] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e51c) returned 1 [0081.451] GetFileType (hFile=0x264) returned 0x1 [0081.451] GetFileSize (in: hFile=0x264, lpFileSizeHigh=0x31e628 | out: lpFileSizeHigh=0x31e628*=0x0) returned 0xa8f [0081.451] ReadFile (in: hFile=0x264, lpBuffer=0x26d6ab0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x31e5d4, lpOverlapped=0x0 | out: lpBuffer=0x26d6ab0*, lpNumberOfBytesRead=0x31e5d4*=0xa8f, lpOverlapped=0x0) returned 1 [0081.451] CloseHandle (hObject=0x264) returned 1 [0081.467] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\ewcSZPE2Uke_ysh8Kk.lnk", nBufferLength=0x105, lpBuffer=0x31e018, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\ewcSZPE2Uke_ysh8Kk.lnk", lpFilePart=0x0) returned 0x5d [0081.467] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e50c) returned 1 [0081.467] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\ewcSZPE2Uke_ysh8Kk.lnk" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\windows\\recent\\ewcszpe2uke_ysh8kk.lnk"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x264 [0081.468] GetFileType (hFile=0x264) returned 0x1 [0081.468] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e508) returned 1 [0081.468] GetFileType (hFile=0x264) returned 0x1 [0081.468] WriteFile (in: hFile=0x264, lpBuffer=0x2727ed4*, nNumberOfBytesToWrite=0xa90, lpNumberOfBytesWritten=0x31e59c, lpOverlapped=0x0 | out: lpBuffer=0x2727ed4*, lpNumberOfBytesWritten=0x31e59c*=0xa90, lpOverlapped=0x0) returned 1 [0081.469] CloseHandle (hObject=0x264) returned 1 [0081.469] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\ewcSZPE2Uke_ysh8Kk.lnk", nBufferLength=0x105, lpBuffer=0x31e14c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\ewcSZPE2Uke_ysh8Kk.lnk", lpFilePart=0x0) returned 0x5d [0081.469] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\ewcSZPE2Uke_ysh8Kk.lnk", nBufferLength=0x105, lpBuffer=0x31e14c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\ewcSZPE2Uke_ysh8Kk.lnk", lpFilePart=0x0) returned 0x5d [0081.469] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e5ac) returned 1 [0081.469] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\ewcSZPE2Uke_ysh8Kk.lnk" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\windows\\recent\\ewcszpe2uke_ysh8kk.lnk"), fInfoLevelId=0x0, lpFileInformation=0x31e628 | out: lpFileInformation=0x31e628*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xdc6ce460, ftCreationTime.dwHighDateTime=0x1d5e82a, ftLastAccessTime.dwLowDateTime=0xdc6ce460, ftLastAccessTime.dwHighDateTime=0x1d5e82a, ftLastWriteTime.dwLowDateTime=0x1400efe0, ftLastWriteTime.dwHighDateTime=0x1d6eb7f, nFileSizeHigh=0x0, nFileSizeLow=0xa90)) returned 1 [0081.470] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e5a8) returned 1 [0081.470] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\ewcSZPE2Uke_ysh8Kk.lnk" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\windows\\recent\\ewcszpe2uke_ysh8kk.lnk"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\ewcSZPE2Uke_ysh8Kk.lnk" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\windows\\recent\\ewcszpe2uke_ysh8kk.lnk")) returned 1 [0081.470] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\EYB4.lnk", nBufferLength=0x105, lpBuffer=0x31e02c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\EYB4.lnk", lpFilePart=0x0) returned 0x4f [0081.470] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e520) returned 1 [0081.470] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\EYB4.lnk" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\windows\\recent\\eyb4.lnk"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x264 [0081.470] GetFileType (hFile=0x264) returned 0x1 [0081.470] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e51c) returned 1 [0081.470] GetFileType (hFile=0x264) returned 0x1 [0081.471] GetFileSize (in: hFile=0x264, lpFileSizeHigh=0x31e628 | out: lpFileSizeHigh=0x31e628*=0x0) returned 0x1b8d [0081.471] ReadFile (in: hFile=0x264, lpBuffer=0x27291b0, nNumberOfBytesToRead=0x1b8d, lpNumberOfBytesRead=0x31e5d4, lpOverlapped=0x0 | out: lpBuffer=0x27291b0*, lpNumberOfBytesRead=0x31e5d4*=0x1b8d, lpOverlapped=0x0) returned 1 [0081.471] CloseHandle (hObject=0x264) returned 1 [0081.485] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\EYB4.lnk", nBufferLength=0x105, lpBuffer=0x31e018, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\EYB4.lnk", lpFilePart=0x0) returned 0x4f [0081.485] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e50c) returned 1 [0081.485] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\EYB4.lnk" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\windows\\recent\\eyb4.lnk"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x264 [0081.486] GetFileType (hFile=0x264) returned 0x1 [0081.486] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e508) returned 1 [0081.486] GetFileType (hFile=0x264) returned 0x1 [0081.486] WriteFile (in: hFile=0x264, lpBuffer=0x277e968*, nNumberOfBytesToWrite=0x1b90, lpNumberOfBytesWritten=0x31e5c8, lpOverlapped=0x0 | out: lpBuffer=0x277e968*, lpNumberOfBytesWritten=0x31e5c8*=0x1b90, lpOverlapped=0x0) returned 1 [0081.487] CloseHandle (hObject=0x264) returned 1 [0081.487] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\EYB4.lnk", nBufferLength=0x105, lpBuffer=0x31e14c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\EYB4.lnk", lpFilePart=0x0) returned 0x4f [0081.487] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\EYB4.lnk", nBufferLength=0x105, lpBuffer=0x31e14c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\EYB4.lnk", lpFilePart=0x0) returned 0x4f [0081.487] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e5ac) returned 1 [0081.487] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\EYB4.lnk" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\windows\\recent\\eyb4.lnk"), fInfoLevelId=0x0, lpFileInformation=0x31e628 | out: lpFileInformation=0x31e628*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xdcdcc500, ftCreationTime.dwHighDateTime=0x1d5e82a, ftLastAccessTime.dwLowDateTime=0xdcdcc500, ftLastAccessTime.dwHighDateTime=0x1d5e82a, ftLastWriteTime.dwLowDateTime=0x14035140, ftLastWriteTime.dwHighDateTime=0x1d6eb7f, nFileSizeHigh=0x0, nFileSizeLow=0x1b90)) returned 1 [0081.487] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e5a8) returned 1 [0081.487] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\EYB4.lnk" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\windows\\recent\\eyb4.lnk"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\EYB4.lnk" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\windows\\recent\\eyb4.lnk")) returned 1 [0081.488] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\F3qq-TdX0v1.lnk", nBufferLength=0x105, lpBuffer=0x31e02c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\F3qq-TdX0v1.lnk", lpFilePart=0x0) returned 0x56 [0081.488] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e520) returned 1 [0081.488] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\F3qq-TdX0v1.lnk" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\windows\\recent\\f3qq-tdx0v1.lnk"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x264 [0081.488] GetFileType (hFile=0x264) returned 0x1 [0081.488] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e51c) returned 1 [0081.488] GetFileType (hFile=0x264) returned 0x1 [0081.488] GetFileSize (in: hFile=0x264, lpFileSizeHigh=0x31e628 | out: lpFileSizeHigh=0x31e628*=0x0) returned 0xa42 [0081.488] ReadFile (in: hFile=0x264, lpBuffer=0x2781330, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x31e5d4, lpOverlapped=0x0 | out: lpBuffer=0x2781330*, lpNumberOfBytesRead=0x31e5d4*=0xa42, lpOverlapped=0x0) returned 1 [0081.489] CloseHandle (hObject=0x264) returned 1 [0081.502] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\F3qq-TdX0v1.lnk", nBufferLength=0x105, lpBuffer=0x31e018, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\F3qq-TdX0v1.lnk", lpFilePart=0x0) returned 0x56 [0081.502] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e50c) returned 1 [0081.502] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\F3qq-TdX0v1.lnk" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\windows\\recent\\f3qq-tdx0v1.lnk"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x264 [0081.503] GetFileType (hFile=0x264) returned 0x1 [0081.503] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e508) returned 1 [0081.503] GetFileType (hFile=0x264) returned 0x1 [0081.503] WriteFile (in: hFile=0x264, lpBuffer=0x27d2604*, nNumberOfBytesToWrite=0xa50, lpNumberOfBytesWritten=0x31e59c, lpOverlapped=0x0 | out: lpBuffer=0x27d2604*, lpNumberOfBytesWritten=0x31e59c*=0xa50, lpOverlapped=0x0) returned 1 [0081.504] CloseHandle (hObject=0x264) returned 1 [0081.504] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\F3qq-TdX0v1.lnk", nBufferLength=0x105, lpBuffer=0x31e14c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\F3qq-TdX0v1.lnk", lpFilePart=0x0) returned 0x56 [0081.504] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\F3qq-TdX0v1.lnk", nBufferLength=0x105, lpBuffer=0x31e14c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\F3qq-TdX0v1.lnk", lpFilePart=0x0) returned 0x56 [0081.504] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e5ac) returned 1 [0081.504] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\F3qq-TdX0v1.lnk" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\windows\\recent\\f3qq-tdx0v1.lnk"), fInfoLevelId=0x0, lpFileInformation=0x31e628 | out: lpFileInformation=0x31e628*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xdcc295e0, ftCreationTime.dwHighDateTime=0x1d5e82a, ftLastAccessTime.dwLowDateTime=0xdcc295e0, ftLastAccessTime.dwHighDateTime=0x1d5e82a, ftLastWriteTime.dwLowDateTime=0x1405b2a0, ftLastWriteTime.dwHighDateTime=0x1d6eb7f, nFileSizeHigh=0x0, nFileSizeLow=0xa50)) returned 1 [0081.504] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e5a8) returned 1 [0081.504] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\F3qq-TdX0v1.lnk" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\windows\\recent\\f3qq-tdx0v1.lnk"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\F3qq-TdX0v1.lnk" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\windows\\recent\\f3qq-tdx0v1.lnk")) returned 1 [0081.505] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\FG2Vgd.flv.lnk", nBufferLength=0x105, lpBuffer=0x31e02c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\FG2Vgd.flv.lnk", lpFilePart=0x0) returned 0x55 [0081.505] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e520) returned 1 [0081.505] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\FG2Vgd.flv.lnk" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\windows\\recent\\fg2vgd.flv.lnk"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x264 [0081.505] GetFileType (hFile=0x264) returned 0x1 [0081.505] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e51c) returned 1 [0081.505] GetFileType (hFile=0x264) returned 0x1 [0081.505] GetFileSize (in: hFile=0x264, lpFileSizeHigh=0x31e628 | out: lpFileSizeHigh=0x31e628*=0x0) returned 0x3dc [0081.505] ReadFile (in: hFile=0x264, lpBuffer=0x27d3cc8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x31e5d4, lpOverlapped=0x0 | out: lpBuffer=0x27d3cc8*, lpNumberOfBytesRead=0x31e5d4*=0x3dc, lpOverlapped=0x0) returned 1 [0081.506] CloseHandle (hObject=0x264) returned 1 [0081.522] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\FG2Vgd.flv.lnk", nBufferLength=0x105, lpBuffer=0x31e018, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\FG2Vgd.flv.lnk", lpFilePart=0x0) returned 0x55 [0081.522] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e50c) returned 1 [0081.522] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\FG2Vgd.flv.lnk" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\windows\\recent\\fg2vgd.flv.lnk"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x264 [0081.522] GetFileType (hFile=0x264) returned 0x1 [0081.523] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e508) returned 1 [0081.523] GetFileType (hFile=0x264) returned 0x1 [0081.523] WriteFile (in: hFile=0x264, lpBuffer=0x2822f5c*, nNumberOfBytesToWrite=0x3e0, lpNumberOfBytesWritten=0x31e59c, lpOverlapped=0x0 | out: lpBuffer=0x2822f5c*, lpNumberOfBytesWritten=0x31e59c*=0x3e0, lpOverlapped=0x0) returned 1 [0081.524] CloseHandle (hObject=0x264) returned 1 [0081.524] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\FG2Vgd.flv.lnk", nBufferLength=0x105, lpBuffer=0x31e14c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\FG2Vgd.flv.lnk", lpFilePart=0x0) returned 0x55 [0081.524] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\FG2Vgd.flv.lnk", nBufferLength=0x105, lpBuffer=0x31e14c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\FG2Vgd.flv.lnk", lpFilePart=0x0) returned 0x55 [0081.524] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e5ac) returned 1 [0081.524] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\FG2Vgd.flv.lnk" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\windows\\recent\\fg2vgd.flv.lnk"), fInfoLevelId=0x0, lpFileInformation=0x31e628 | out: lpFileInformation=0x31e628*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xdbfaa260, ftCreationTime.dwHighDateTime=0x1d5e82a, ftLastAccessTime.dwLowDateTime=0xdbfaa260, ftLastAccessTime.dwHighDateTime=0x1d5e82a, ftLastWriteTime.dwLowDateTime=0x14081400, ftLastWriteTime.dwHighDateTime=0x1d6eb7f, nFileSizeHigh=0x0, nFileSizeLow=0x3e0)) returned 1 [0081.524] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e5a8) returned 1 [0081.524] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\FG2Vgd.flv.lnk" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\windows\\recent\\fg2vgd.flv.lnk"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\FG2Vgd.flv.lnk" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\windows\\recent\\fg2vgd.flv.lnk")) returned 1 [0081.525] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\FlnuIIzR61ZMgS.lnk", nBufferLength=0x105, lpBuffer=0x31e02c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\FlnuIIzR61ZMgS.lnk", lpFilePart=0x0) returned 0x59 [0081.525] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e520) returned 1 [0081.525] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\FlnuIIzR61ZMgS.lnk" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\windows\\recent\\flnuiizr61zmgs.lnk"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x264 [0081.525] GetFileType (hFile=0x264) returned 0x1 [0081.525] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e51c) returned 1 [0081.525] GetFileType (hFile=0x264) returned 0x1 [0081.525] GetFileSize (in: hFile=0x264, lpFileSizeHigh=0x31e628 | out: lpFileSizeHigh=0x31e628*=0x0) returned 0x15d1 [0081.525] ReadFile (in: hFile=0x264, lpBuffer=0x2824240, nNumberOfBytesToRead=0x15d1, lpNumberOfBytesRead=0x31e5d4, lpOverlapped=0x0 | out: lpBuffer=0x2824240*, lpNumberOfBytesRead=0x31e5d4*=0x15d1, lpOverlapped=0x0) returned 1 [0081.526] CloseHandle (hObject=0x264) returned 1 [0081.575] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\FlnuIIzR61ZMgS.lnk", nBufferLength=0x105, lpBuffer=0x31e018, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\FlnuIIzR61ZMgS.lnk", lpFilePart=0x0) returned 0x59 [0081.575] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e50c) returned 1 [0081.575] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\FlnuIIzR61ZMgS.lnk" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\windows\\recent\\flnuiizr61zmgs.lnk"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x264 [0081.576] GetFileType (hFile=0x264) returned 0x1 [0081.576] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e508) returned 1 [0081.576] GetFileType (hFile=0x264) returned 0x1 [0081.576] WriteFile (in: hFile=0x264, lpBuffer=0x2677e04*, nNumberOfBytesToWrite=0x15e0, lpNumberOfBytesWritten=0x31e5c8, lpOverlapped=0x0 | out: lpBuffer=0x2677e04*, lpNumberOfBytesWritten=0x31e5c8*=0x15e0, lpOverlapped=0x0) returned 1 [0081.577] CloseHandle (hObject=0x264) returned 1 [0081.577] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\FlnuIIzR61ZMgS.lnk", nBufferLength=0x105, lpBuffer=0x31e14c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\FlnuIIzR61ZMgS.lnk", lpFilePart=0x0) returned 0x59 [0081.577] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\FlnuIIzR61ZMgS.lnk", nBufferLength=0x105, lpBuffer=0x31e14c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\FlnuIIzR61ZMgS.lnk", lpFilePart=0x0) returned 0x59 [0081.577] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e5ac) returned 1 [0081.577] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\FlnuIIzR61ZMgS.lnk" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\windows\\recent\\flnuiizr61zmgs.lnk"), fInfoLevelId=0x0, lpFileInformation=0x31e628 | out: lpFileInformation=0x31e628*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xdd562b20, ftCreationTime.dwHighDateTime=0x1d5e82a, ftLastAccessTime.dwLowDateTime=0xdd562b20, ftLastAccessTime.dwHighDateTime=0x1d5e82a, ftLastWriteTime.dwLowDateTime=0x14119980, ftLastWriteTime.dwHighDateTime=0x1d6eb7f, nFileSizeHigh=0x0, nFileSizeLow=0x15e0)) returned 1 [0081.577] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e5a8) returned 1 [0081.577] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\FlnuIIzR61ZMgS.lnk" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\windows\\recent\\flnuiizr61zmgs.lnk"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\FlnuIIzR61ZMgS.lnk" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\windows\\recent\\flnuiizr61zmgs.lnk")) returned 1 [0081.578] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\fo7DC8R1OiqEuI ix.lnk", nBufferLength=0x105, lpBuffer=0x31e02c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\fo7DC8R1OiqEuI ix.lnk", lpFilePart=0x0) returned 0x5c [0081.578] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e520) returned 1 [0081.578] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\fo7DC8R1OiqEuI ix.lnk" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\windows\\recent\\fo7dc8r1oiqeui ix.lnk"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x264 [0081.578] GetFileType (hFile=0x264) returned 0x1 [0081.578] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e51c) returned 1 [0081.578] GetFileType (hFile=0x264) returned 0x1 [0081.578] GetFileSize (in: hFile=0x264, lpFileSizeHigh=0x31e628 | out: lpFileSizeHigh=0x31e628*=0x0) returned 0x202 [0081.578] ReadFile (in: hFile=0x264, lpBuffer=0x2679a44, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x31e5d4, lpOverlapped=0x0 | out: lpBuffer=0x2679a44*, lpNumberOfBytesRead=0x31e5d4*=0x202, lpOverlapped=0x0) returned 1 [0081.579] CloseHandle (hObject=0x264) returned 1 [0081.593] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\fo7DC8R1OiqEuI ix.lnk", nBufferLength=0x105, lpBuffer=0x31e018, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\fo7DC8R1OiqEuI ix.lnk", lpFilePart=0x0) returned 0x5c [0081.593] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e50c) returned 1 [0081.593] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\fo7DC8R1OiqEuI ix.lnk" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\windows\\recent\\fo7dc8r1oiqeui ix.lnk"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x264 [0081.594] GetFileType (hFile=0x264) returned 0x1 [0081.594] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e508) returned 1 [0081.594] GetFileType (hFile=0x264) returned 0x1 [0081.594] WriteFile (in: hFile=0x264, lpBuffer=0x26c854c*, nNumberOfBytesToWrite=0x210, lpNumberOfBytesWritten=0x31e59c, lpOverlapped=0x0 | out: lpBuffer=0x26c854c*, lpNumberOfBytesWritten=0x31e59c*=0x210, lpOverlapped=0x0) returned 1 [0081.596] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\fo7DC8R1OiqEuI ix.lnk", nBufferLength=0x105, lpBuffer=0x31e14c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\fo7DC8R1OiqEuI ix.lnk", lpFilePart=0x0) returned 0x5c [0081.596] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\fo7DC8R1OiqEuI ix.lnk", nBufferLength=0x105, lpBuffer=0x31e14c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\fo7DC8R1OiqEuI ix.lnk", lpFilePart=0x0) returned 0x5c [0081.596] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e5ac) returned 1 [0081.596] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\fo7DC8R1OiqEuI ix.lnk" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\windows\\recent\\fo7dc8r1oiqeui ix.lnk"), fInfoLevelId=0x0, lpFileInformation=0x31e628 | out: lpFileInformation=0x31e628*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xdbf84100, ftCreationTime.dwHighDateTime=0x1d5e82a, ftLastAccessTime.dwLowDateTime=0xdd3e5d60, ftLastAccessTime.dwHighDateTime=0x1d5e82a, ftLastWriteTime.dwLowDateTime=0x1413fae0, ftLastWriteTime.dwHighDateTime=0x1d6eb7f, nFileSizeHigh=0x0, nFileSizeLow=0x210)) returned 1 [0081.596] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e5a8) returned 1 [0081.596] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\fo7DC8R1OiqEuI ix.lnk" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\windows\\recent\\fo7dc8r1oiqeui ix.lnk"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\fo7DC8R1OiqEuI ix.lnk" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\windows\\recent\\fo7dc8r1oiqeui ix.lnk")) returned 1 [0081.597] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\fs6ZyJDVW7MWb.lnk", nBufferLength=0x105, lpBuffer=0x31e02c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\fs6ZyJDVW7MWb.lnk", lpFilePart=0x0) returned 0x58 [0081.597] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e520) returned 1 [0081.597] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\fs6ZyJDVW7MWb.lnk" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\windows\\recent\\fs6zyjdvw7mwb.lnk"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x264 [0081.597] GetFileType (hFile=0x264) returned 0x1 [0081.597] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e51c) returned 1 [0081.597] GetFileType (hFile=0x264) returned 0x1 [0081.597] GetFileSize (in: hFile=0x264, lpFileSizeHigh=0x31e628 | out: lpFileSizeHigh=0x31e628*=0x0) returned 0x14eb [0081.597] ReadFile (in: hFile=0x264, lpBuffer=0x26c984c, nNumberOfBytesToRead=0x14eb, lpNumberOfBytesRead=0x31e5d4, lpOverlapped=0x0 | out: lpBuffer=0x26c984c*, lpNumberOfBytesRead=0x31e5d4*=0x14eb, lpOverlapped=0x0) returned 1 [0081.611] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\fs6ZyJDVW7MWb.lnk", nBufferLength=0x105, lpBuffer=0x31e018, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\fs6ZyJDVW7MWb.lnk", lpFilePart=0x0) returned 0x58 [0081.611] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e50c) returned 1 [0081.611] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\fs6ZyJDVW7MWb.lnk" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\windows\\recent\\fs6zyjdvw7mwb.lnk"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x264 [0081.612] GetFileType (hFile=0x264) returned 0x1 [0081.612] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e508) returned 1 [0081.612] GetFileType (hFile=0x264) returned 0x1 [0081.612] WriteFile (in: hFile=0x264, lpBuffer=0x271cee4*, nNumberOfBytesToWrite=0x14f0, lpNumberOfBytesWritten=0x31e5c8, lpOverlapped=0x0 | out: lpBuffer=0x271cee4*, lpNumberOfBytesWritten=0x31e5c8*=0x14f0, lpOverlapped=0x0) returned 1 [0081.613] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\fs6ZyJDVW7MWb.lnk", nBufferLength=0x105, lpBuffer=0x31e14c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\fs6ZyJDVW7MWb.lnk", lpFilePart=0x0) returned 0x58 [0081.613] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\fs6ZyJDVW7MWb.lnk", nBufferLength=0x105, lpBuffer=0x31e14c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\fs6ZyJDVW7MWb.lnk", lpFilePart=0x0) returned 0x58 [0081.613] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e5ac) returned 1 [0081.613] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\fs6ZyJDVW7MWb.lnk" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\windows\\recent\\fs6zyjdvw7mwb.lnk"), fInfoLevelId=0x0, lpFileInformation=0x31e628 | out: lpFileInformation=0x31e628*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xdb292960, ftCreationTime.dwHighDateTime=0x1d5e82a, ftLastAccessTime.dwLowDateTime=0xdd4a4440, ftLastAccessTime.dwHighDateTime=0x1d5e82a, ftLastWriteTime.dwLowDateTime=0x14165c40, ftLastWriteTime.dwHighDateTime=0x1d6eb7f, nFileSizeHigh=0x0, nFileSizeLow=0x14f0)) returned 1 [0081.613] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e5a8) returned 1 [0081.613] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\fs6ZyJDVW7MWb.lnk" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\windows\\recent\\fs6zyjdvw7mwb.lnk"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\fs6ZyJDVW7MWb.lnk" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\windows\\recent\\fs6zyjdvw7mwb.lnk")) returned 1 [0081.614] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\fWvZmodXByr bYeQQ7Y.lnk", nBufferLength=0x105, lpBuffer=0x31e02c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\fWvZmodXByr bYeQQ7Y.lnk", lpFilePart=0x0) returned 0x5e [0081.614] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e520) returned 1 [0081.614] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\fWvZmodXByr bYeQQ7Y.lnk" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\windows\\recent\\fwvzmodxbyr byeqq7y.lnk"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x264 [0081.614] GetFileType (hFile=0x264) returned 0x1 [0081.614] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e51c) returned 1 [0081.614] GetFileType (hFile=0x264) returned 0x1 [0081.614] GetFileSize (in: hFile=0x264, lpFileSizeHigh=0x31e628 | out: lpFileSizeHigh=0x31e628*=0x0) returned 0x1af5 [0081.614] ReadFile (in: hFile=0x264, lpBuffer=0x271e828, nNumberOfBytesToRead=0x1af5, lpNumberOfBytesRead=0x31e5d4, lpOverlapped=0x0 | out: lpBuffer=0x271e828*, lpNumberOfBytesRead=0x31e5d4*=0x1af5, lpOverlapped=0x0) returned 1 [0081.629] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\fWvZmodXByr bYeQQ7Y.lnk", nBufferLength=0x105, lpBuffer=0x31e018, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\fWvZmodXByr bYeQQ7Y.lnk", lpFilePart=0x0) returned 0x5e [0081.629] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e50c) returned 1 [0081.629] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\fWvZmodXByr bYeQQ7Y.lnk" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\windows\\recent\\fwvzmodxbyr byeqq7y.lnk"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x264 [0081.630] GetFileType (hFile=0x264) returned 0x1 [0081.630] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e508) returned 1 [0081.630] GetFileType (hFile=0x264) returned 0x1 [0081.630] WriteFile (in: hFile=0x264, lpBuffer=0x2773d10*, nNumberOfBytesToWrite=0x1b00, lpNumberOfBytesWritten=0x31e5c8, lpOverlapped=0x0 | out: lpBuffer=0x2773d10*, lpNumberOfBytesWritten=0x31e5c8*=0x1b00, lpOverlapped=0x0) returned 1 [0081.631] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\fWvZmodXByr bYeQQ7Y.lnk", nBufferLength=0x105, lpBuffer=0x31e14c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\fWvZmodXByr bYeQQ7Y.lnk", lpFilePart=0x0) returned 0x5e [0081.631] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\fWvZmodXByr bYeQQ7Y.lnk", nBufferLength=0x105, lpBuffer=0x31e14c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\fWvZmodXByr bYeQQ7Y.lnk", lpFilePart=0x0) returned 0x5e [0081.631] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e5ac) returned 1 [0081.631] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\fWvZmodXByr bYeQQ7Y.lnk" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\windows\\recent\\fwvzmodxbyr byeqq7y.lnk"), fInfoLevelId=0x0, lpFileInformation=0x31e628 | out: lpFileInformation=0x31e628*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xdb58c4e0, ftCreationTime.dwHighDateTime=0x1d5e82a, ftLastAccessTime.dwLowDateTime=0xdb58c4e0, ftLastAccessTime.dwHighDateTime=0x1d5e82a, ftLastWriteTime.dwLowDateTime=0x1418bda0, ftLastWriteTime.dwHighDateTime=0x1d6eb7f, nFileSizeHigh=0x0, nFileSizeLow=0x1b00)) returned 1 [0081.631] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e5a8) returned 1 [0081.631] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\fWvZmodXByr bYeQQ7Y.lnk" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\windows\\recent\\fwvzmodxbyr byeqq7y.lnk"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\fWvZmodXByr bYeQQ7Y.lnk" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\windows\\recent\\fwvzmodxbyr byeqq7y.lnk")) returned 1 [0081.632] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\Fz1uxg4uH8FGJTt.lnk", nBufferLength=0x105, lpBuffer=0x31e02c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\Fz1uxg4uH8FGJTt.lnk", lpFilePart=0x0) returned 0x5a [0081.632] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e520) returned 1 [0081.632] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\Fz1uxg4uH8FGJTt.lnk" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\windows\\recent\\fz1uxg4uh8fgjtt.lnk"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x264 [0081.632] GetFileType (hFile=0x264) returned 0x1 [0081.632] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e51c) returned 1 [0081.632] GetFileType (hFile=0x264) returned 0x1 [0081.632] GetFileSize (in: hFile=0x264, lpFileSizeHigh=0x31e628 | out: lpFileSizeHigh=0x31e628*=0x0) returned 0x2f4 [0081.632] ReadFile (in: hFile=0x264, lpBuffer=0x2775f84, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x31e5d4, lpOverlapped=0x0 | out: lpBuffer=0x2775f84*, lpNumberOfBytesRead=0x31e5d4*=0x2f4, lpOverlapped=0x0) returned 1 [0081.646] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\Fz1uxg4uH8FGJTt.lnk", nBufferLength=0x105, lpBuffer=0x31e018, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\Fz1uxg4uH8FGJTt.lnk", lpFilePart=0x0) returned 0x5a [0081.646] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e50c) returned 1 [0081.646] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\Fz1uxg4uH8FGJTt.lnk" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\windows\\recent\\fz1uxg4uh8fgjtt.lnk"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x264 [0081.647] GetFileType (hFile=0x264) returned 0x1 [0081.647] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e508) returned 1 [0081.647] GetFileType (hFile=0x264) returned 0x1 [0081.647] WriteFile (in: hFile=0x264, lpBuffer=0x27c4dd4*, nNumberOfBytesToWrite=0x300, lpNumberOfBytesWritten=0x31e59c, lpOverlapped=0x0 | out: lpBuffer=0x27c4dd4*, lpNumberOfBytesWritten=0x31e59c*=0x300, lpOverlapped=0x0) returned 1 [0081.648] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\Fz1uxg4uH8FGJTt.lnk", nBufferLength=0x105, lpBuffer=0x31e14c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\Fz1uxg4uH8FGJTt.lnk", lpFilePart=0x0) returned 0x5a [0081.648] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\Fz1uxg4uH8FGJTt.lnk", nBufferLength=0x105, lpBuffer=0x31e14c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\Fz1uxg4uH8FGJTt.lnk", lpFilePart=0x0) returned 0x5a [0081.648] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e5ac) returned 1 [0081.648] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\Fz1uxg4uH8FGJTt.lnk" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\windows\\recent\\fz1uxg4uh8fgjtt.lnk"), fInfoLevelId=0x0, lpFileInformation=0x31e628 | out: lpFileInformation=0x31e628*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xdd47e2e0, ftCreationTime.dwHighDateTime=0x1d5e82a, ftLastAccessTime.dwLowDateTime=0xdd47e2e0, ftLastAccessTime.dwHighDateTime=0x1d5e82a, ftLastWriteTime.dwLowDateTime=0x141b1f00, ftLastWriteTime.dwHighDateTime=0x1d6eb7f, nFileSizeHigh=0x0, nFileSizeLow=0x300)) returned 1 [0081.648] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e5a8) returned 1 [0081.648] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\Fz1uxg4uH8FGJTt.lnk" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\windows\\recent\\fz1uxg4uh8fgjtt.lnk"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\Fz1uxg4uH8FGJTt.lnk" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\windows\\recent\\fz1uxg4uh8fgjtt.lnk")) returned 1 [0081.648] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\GibSj0Oqv_.lnk", nBufferLength=0x105, lpBuffer=0x31e02c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\GibSj0Oqv_.lnk", lpFilePart=0x0) returned 0x55 [0081.649] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e520) returned 1 [0081.649] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\GibSj0Oqv_.lnk" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\windows\\recent\\gibsj0oqv_.lnk"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x264 [0081.649] GetFileType (hFile=0x264) returned 0x1 [0081.649] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e51c) returned 1 [0081.649] GetFileType (hFile=0x264) returned 0x1 [0081.649] GetFileSize (in: hFile=0x264, lpFileSizeHigh=0x31e628 | out: lpFileSizeHigh=0x31e628*=0x0) returned 0x1569 [0081.649] ReadFile (in: hFile=0x264, lpBuffer=0x27c60c0, nNumberOfBytesToRead=0x1569, lpNumberOfBytesRead=0x31e5d4, lpOverlapped=0x0 | out: lpBuffer=0x27c60c0*, lpNumberOfBytesRead=0x31e5d4*=0x1569, lpOverlapped=0x0) returned 1 [0081.665] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\GibSj0Oqv_.lnk", nBufferLength=0x105, lpBuffer=0x31e018, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\GibSj0Oqv_.lnk", lpFilePart=0x0) returned 0x55 [0081.665] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e50c) returned 1 [0081.665] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\GibSj0Oqv_.lnk" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\windows\\recent\\gibsj0oqv_.lnk"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x264 [0081.666] GetFileType (hFile=0x264) returned 0x1 [0081.666] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e508) returned 1 [0081.666] GetFileType (hFile=0x264) returned 0x1 [0081.666] WriteFile (in: hFile=0x264, lpBuffer=0x28199d8*, nNumberOfBytesToWrite=0x1570, lpNumberOfBytesWritten=0x31e5c8, lpOverlapped=0x0 | out: lpBuffer=0x28199d8*, lpNumberOfBytesWritten=0x31e5c8*=0x1570, lpOverlapped=0x0) returned 1 [0081.667] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\GibSj0Oqv_.lnk", nBufferLength=0x105, lpBuffer=0x31e14c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\GibSj0Oqv_.lnk", lpFilePart=0x0) returned 0x55 [0081.667] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\GibSj0Oqv_.lnk", nBufferLength=0x105, lpBuffer=0x31e14c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\GibSj0Oqv_.lnk", lpFilePart=0x0) returned 0x55 [0081.667] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e5ac) returned 1 [0081.667] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\GibSj0Oqv_.lnk" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\windows\\recent\\gibsj0oqv_.lnk"), fInfoLevelId=0x0, lpFileInformation=0x31e628 | out: lpFileInformation=0x31e628*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xdd373940, ftCreationTime.dwHighDateTime=0x1d5e82a, ftLastAccessTime.dwLowDateTime=0xdd373940, ftLastAccessTime.dwHighDateTime=0x1d5e82a, ftLastWriteTime.dwLowDateTime=0x141fe1c0, ftLastWriteTime.dwHighDateTime=0x1d6eb7f, nFileSizeHigh=0x0, nFileSizeLow=0x1570)) returned 1 [0081.667] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e5a8) returned 1 [0081.667] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\GibSj0Oqv_.lnk" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\windows\\recent\\gibsj0oqv_.lnk"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\GibSj0Oqv_.lnk" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\windows\\recent\\gibsj0oqv_.lnk")) returned 1 [0081.668] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\HiHn1FTQ027Hcj vP6d8.lnk", nBufferLength=0x105, lpBuffer=0x31e02c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\HiHn1FTQ027Hcj vP6d8.lnk", lpFilePart=0x0) returned 0x5f [0081.668] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e520) returned 1 [0081.668] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\HiHn1FTQ027Hcj vP6d8.lnk" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\windows\\recent\\hihn1ftq027hcj vp6d8.lnk"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x264 [0081.668] GetFileType (hFile=0x264) returned 0x1 [0081.668] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e51c) returned 1 [0081.668] GetFileType (hFile=0x264) returned 0x1 [0081.668] GetFileSize (in: hFile=0x264, lpFileSizeHigh=0x31e628 | out: lpFileSizeHigh=0x31e628*=0x0) returned 0xaa5 [0081.668] ReadFile (in: hFile=0x264, lpBuffer=0x281be38, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x31e5d4, lpOverlapped=0x0 | out: lpBuffer=0x281be38*, lpNumberOfBytesRead=0x31e5d4*=0xaa5, lpOverlapped=0x0) returned 1 [0081.711] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\HiHn1FTQ027Hcj vP6d8.lnk", nBufferLength=0x105, lpBuffer=0x31e018, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\HiHn1FTQ027Hcj vP6d8.lnk", lpFilePart=0x0) returned 0x5f [0081.711] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e50c) returned 1 [0081.711] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\HiHn1FTQ027Hcj vP6d8.lnk" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\windows\\recent\\hihn1ftq027hcj vp6d8.lnk"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x264 [0081.712] GetFileType (hFile=0x264) returned 0x1 [0081.712] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e508) returned 1 [0081.712] GetFileType (hFile=0x264) returned 0x1 [0081.712] WriteFile (in: hFile=0x264, lpBuffer=0x266c7c4*, nNumberOfBytesToWrite=0xab0, lpNumberOfBytesWritten=0x31e59c, lpOverlapped=0x0 | out: lpBuffer=0x266c7c4*, lpNumberOfBytesWritten=0x31e59c*=0xab0, lpOverlapped=0x0) returned 1 [0081.714] CloseHandle (hObject=0x264) returned 1 [0081.714] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\HiHn1FTQ027Hcj vP6d8.lnk", nBufferLength=0x105, lpBuffer=0x31e14c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\HiHn1FTQ027Hcj vP6d8.lnk", lpFilePart=0x0) returned 0x5f [0081.714] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\HiHn1FTQ027Hcj vP6d8.lnk", nBufferLength=0x105, lpBuffer=0x31e14c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\HiHn1FTQ027Hcj vP6d8.lnk", lpFilePart=0x0) returned 0x5f [0081.714] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e5ac) returned 1 [0081.714] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\HiHn1FTQ027Hcj vP6d8.lnk" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\windows\\recent\\hihn1ftq027hcj vp6d8.lnk"), fInfoLevelId=0x0, lpFileInformation=0x31e628 | out: lpFileInformation=0x31e628*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xdc7fef60, ftCreationTime.dwHighDateTime=0x1d5e82a, ftLastAccessTime.dwLowDateTime=0xdc7fef60, ftLastAccessTime.dwHighDateTime=0x1d5e82a, ftLastWriteTime.dwLowDateTime=0x142705e0, ftLastWriteTime.dwHighDateTime=0x1d6eb7f, nFileSizeHigh=0x0, nFileSizeLow=0xab0)) returned 1 [0081.714] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e5a8) returned 1 [0081.714] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\HiHn1FTQ027Hcj vP6d8.lnk" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\windows\\recent\\hihn1ftq027hcj vp6d8.lnk"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\HiHn1FTQ027Hcj vP6d8.lnk" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\windows\\recent\\hihn1ftq027hcj vp6d8.lnk")) returned 1 [0081.715] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\HS_jtO INeCAdLtO.lnk", nBufferLength=0x105, lpBuffer=0x31e02c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\HS_jtO INeCAdLtO.lnk", lpFilePart=0x0) returned 0x5b [0081.715] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e520) returned 1 [0081.715] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\HS_jtO INeCAdLtO.lnk" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\windows\\recent\\hs_jto inecadlto.lnk"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x264 [0081.715] GetFileType (hFile=0x264) returned 0x1 [0081.715] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e51c) returned 1 [0081.715] GetFileType (hFile=0x264) returned 0x1 [0081.715] GetFileSize (in: hFile=0x264, lpFileSizeHigh=0x31e628 | out: lpFileSizeHigh=0x31e628*=0x0) returned 0xa79 [0081.715] ReadFile (in: hFile=0x264, lpBuffer=0x266e560, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x31e5d4, lpOverlapped=0x0 | out: lpBuffer=0x266e560*, lpNumberOfBytesRead=0x31e5d4*=0xa79, lpOverlapped=0x0) returned 1 [0081.716] CloseHandle (hObject=0x264) returned 1 [0081.729] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\HS_jtO INeCAdLtO.lnk", nBufferLength=0x105, lpBuffer=0x31e018, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\HS_jtO INeCAdLtO.lnk", lpFilePart=0x0) returned 0x5b [0081.729] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e50c) returned 1 [0081.729] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\HS_jtO INeCAdLtO.lnk" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\windows\\recent\\hs_jto inecadlto.lnk"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x264 [0081.730] GetFileType (hFile=0x264) returned 0x1 [0081.730] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e508) returned 1 [0081.730] GetFileType (hFile=0x264) returned 0x1 [0081.730] WriteFile (in: hFile=0x264, lpBuffer=0x26bfa8c*, nNumberOfBytesToWrite=0xa80, lpNumberOfBytesWritten=0x31e59c, lpOverlapped=0x0 | out: lpBuffer=0x26bfa8c*, lpNumberOfBytesWritten=0x31e59c*=0xa80, lpOverlapped=0x0) returned 1 [0081.731] CloseHandle (hObject=0x264) returned 1 [0081.731] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\HS_jtO INeCAdLtO.lnk", nBufferLength=0x105, lpBuffer=0x31e14c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\HS_jtO INeCAdLtO.lnk", lpFilePart=0x0) returned 0x5b [0081.731] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\HS_jtO INeCAdLtO.lnk", nBufferLength=0x105, lpBuffer=0x31e14c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\HS_jtO INeCAdLtO.lnk", lpFilePart=0x0) returned 0x5b [0081.731] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e5ac) returned 1 [0081.731] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\HS_jtO INeCAdLtO.lnk" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\windows\\recent\\hs_jto inecadlto.lnk"), fInfoLevelId=0x0, lpFileInformation=0x31e628 | out: lpFileInformation=0x31e628*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xdd3bfc00, ftCreationTime.dwHighDateTime=0x1d5e82a, ftLastAccessTime.dwLowDateTime=0xdd3bfc00, ftLastAccessTime.dwHighDateTime=0x1d5e82a, ftLastWriteTime.dwLowDateTime=0x14296740, ftLastWriteTime.dwHighDateTime=0x1d6eb7f, nFileSizeHigh=0x0, nFileSizeLow=0xa80)) returned 1 [0081.731] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e5a8) returned 1 [0081.731] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\HS_jtO INeCAdLtO.lnk" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\windows\\recent\\hs_jto inecadlto.lnk"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\HS_jtO INeCAdLtO.lnk" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\windows\\recent\\hs_jto inecadlto.lnk")) returned 1 [0081.732] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\i8FtK.lnk", nBufferLength=0x105, lpBuffer=0x31e02c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\i8FtK.lnk", lpFilePart=0x0) returned 0x50 [0081.732] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e520) returned 1 [0081.732] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\i8FtK.lnk" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\windows\\recent\\i8ftk.lnk"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x264 [0081.732] GetFileType (hFile=0x264) returned 0x1 [0081.732] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e51c) returned 1 [0081.732] GetFileType (hFile=0x264) returned 0x1 [0081.732] GetFileSize (in: hFile=0x264, lpFileSizeHigh=0x31e628 | out: lpFileSizeHigh=0x31e628*=0x0) returned 0x1566 [0081.732] ReadFile (in: hFile=0x264, lpBuffer=0x26c0d64, nNumberOfBytesToRead=0x1566, lpNumberOfBytesRead=0x31e5d4, lpOverlapped=0x0 | out: lpBuffer=0x26c0d64*, lpNumberOfBytesRead=0x31e5d4*=0x1566, lpOverlapped=0x0) returned 1 [0081.733] CloseHandle (hObject=0x264) returned 1 [0081.746] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\i8FtK.lnk", nBufferLength=0x105, lpBuffer=0x31e018, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\i8FtK.lnk", lpFilePart=0x0) returned 0x50 [0081.746] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e50c) returned 1 [0081.746] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\i8FtK.lnk" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\windows\\recent\\i8ftk.lnk"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x264 [0081.747] GetFileType (hFile=0x264) returned 0x1 [0081.747] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e508) returned 1 [0081.747] GetFileType (hFile=0x264) returned 0x1 [0081.747] WriteFile (in: hFile=0x264, lpBuffer=0x271467c*, nNumberOfBytesToWrite=0x1570, lpNumberOfBytesWritten=0x31e5c8, lpOverlapped=0x0 | out: lpBuffer=0x271467c*, lpNumberOfBytesWritten=0x31e5c8*=0x1570, lpOverlapped=0x0) returned 1 [0081.748] CloseHandle (hObject=0x264) returned 1 [0081.748] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\i8FtK.lnk", nBufferLength=0x105, lpBuffer=0x31e14c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\i8FtK.lnk", lpFilePart=0x0) returned 0x50 [0081.748] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\i8FtK.lnk", nBufferLength=0x105, lpBuffer=0x31e14c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\i8FtK.lnk", lpFilePart=0x0) returned 0x50 [0081.748] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e5ac) returned 1 [0081.748] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\i8FtK.lnk" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\windows\\recent\\i8ftk.lnk"), fInfoLevelId=0x0, lpFileInformation=0x31e628 | out: lpFileInformation=0x31e628*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xdd432020, ftCreationTime.dwHighDateTime=0x1d5e82a, ftLastAccessTime.dwLowDateTime=0xdd432020, ftLastAccessTime.dwHighDateTime=0x1d5e82a, ftLastWriteTime.dwLowDateTime=0x142bc8a0, ftLastWriteTime.dwHighDateTime=0x1d6eb7f, nFileSizeHigh=0x0, nFileSizeLow=0x1570)) returned 1 [0081.748] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e5a8) returned 1 [0081.748] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\i8FtK.lnk" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\windows\\recent\\i8ftk.lnk"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\i8FtK.lnk" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\windows\\recent\\i8ftk.lnk")) returned 1 [0081.749] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\IU5aJXql.lnk", nBufferLength=0x105, lpBuffer=0x31e02c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\IU5aJXql.lnk", lpFilePart=0x0) returned 0x53 [0081.749] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e520) returned 1 [0081.749] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\IU5aJXql.lnk" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\windows\\recent\\iu5ajxql.lnk"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x264 [0081.749] GetFileType (hFile=0x264) returned 0x1 [0081.749] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e51c) returned 1 [0081.749] GetFileType (hFile=0x264) returned 0x1 [0081.749] GetFileSize (in: hFile=0x264, lpFileSizeHigh=0x31e628 | out: lpFileSizeHigh=0x31e628*=0x0) returned 0x145d [0081.749] ReadFile (in: hFile=0x264, lpBuffer=0x2715fd4, nNumberOfBytesToRead=0x145d, lpNumberOfBytesRead=0x31e5d4, lpOverlapped=0x0 | out: lpBuffer=0x2715fd4*, lpNumberOfBytesRead=0x31e5d4*=0x145d, lpOverlapped=0x0) returned 1 [0081.750] CloseHandle (hObject=0x264) returned 1 [0081.763] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\IU5aJXql.lnk", nBufferLength=0x105, lpBuffer=0x31e018, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\IU5aJXql.lnk", lpFilePart=0x0) returned 0x53 [0081.763] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e50c) returned 1 [0081.763] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\IU5aJXql.lnk" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\windows\\recent\\iu5ajxql.lnk"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x264 [0081.764] GetFileType (hFile=0x264) returned 0x1 [0081.764] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e508) returned 1 [0081.764] GetFileType (hFile=0x264) returned 0x1 [0081.764] WriteFile (in: hFile=0x264, lpBuffer=0x276939c*, nNumberOfBytesToWrite=0x1460, lpNumberOfBytesWritten=0x31e5c8, lpOverlapped=0x0 | out: lpBuffer=0x276939c*, lpNumberOfBytesWritten=0x31e5c8*=0x1460, lpOverlapped=0x0) returned 1 [0081.765] CloseHandle (hObject=0x264) returned 1 [0081.765] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\IU5aJXql.lnk", nBufferLength=0x105, lpBuffer=0x31e14c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\IU5aJXql.lnk", lpFilePart=0x0) returned 0x53 [0081.765] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\IU5aJXql.lnk", nBufferLength=0x105, lpBuffer=0x31e14c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\IU5aJXql.lnk", lpFilePart=0x0) returned 0x53 [0081.765] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e5ac) returned 1 [0081.765] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\IU5aJXql.lnk" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\windows\\recent\\iu5ajxql.lnk"), fInfoLevelId=0x0, lpFileInformation=0x31e628 | out: lpFileInformation=0x31e628*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xdd184760, ftCreationTime.dwHighDateTime=0x1d5e82a, ftLastAccessTime.dwLowDateTime=0xdd184760, ftLastAccessTime.dwHighDateTime=0x1d5e82a, ftLastWriteTime.dwLowDateTime=0x142e2a00, ftLastWriteTime.dwHighDateTime=0x1d6eb7f, nFileSizeHigh=0x0, nFileSizeLow=0x1460)) returned 1 [0081.765] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e5a8) returned 1 [0081.765] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\IU5aJXql.lnk" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\windows\\recent\\iu5ajxql.lnk"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\IU5aJXql.lnk" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\windows\\recent\\iu5ajxql.lnk")) returned 1 [0081.766] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\iv9kxoY1h.lnk", nBufferLength=0x105, lpBuffer=0x31e02c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\iv9kxoY1h.lnk", lpFilePart=0x0) returned 0x54 [0081.766] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e520) returned 1 [0081.766] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\iv9kxoY1h.lnk" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\windows\\recent\\iv9kxoy1h.lnk"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x264 [0081.766] GetFileType (hFile=0x264) returned 0x1 [0081.766] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e51c) returned 1 [0081.766] GetFileType (hFile=0x264) returned 0x1 [0081.766] GetFileSize (in: hFile=0x264, lpFileSizeHigh=0x31e628 | out: lpFileSizeHigh=0x31e628*=0x0) returned 0x3ed [0081.766] ReadFile (in: hFile=0x264, lpBuffer=0x276aff8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x31e5d4, lpOverlapped=0x0 | out: lpBuffer=0x276aff8*, lpNumberOfBytesRead=0x31e5d4*=0x3ed, lpOverlapped=0x0) returned 1 [0081.767] CloseHandle (hObject=0x264) returned 1 [0081.781] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\iv9kxoY1h.lnk", nBufferLength=0x105, lpBuffer=0x31e018, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\iv9kxoY1h.lnk", lpFilePart=0x0) returned 0x54 [0081.781] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e50c) returned 1 [0081.781] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\iv9kxoY1h.lnk" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\windows\\recent\\iv9kxoy1h.lnk"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x264 [0081.782] GetFileType (hFile=0x264) returned 0x1 [0081.782] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e508) returned 1 [0081.782] GetFileType (hFile=0x264) returned 0x1 [0081.782] WriteFile (in: hFile=0x264, lpBuffer=0x27ba2d8*, nNumberOfBytesToWrite=0x3f0, lpNumberOfBytesWritten=0x31e59c, lpOverlapped=0x0 | out: lpBuffer=0x27ba2d8*, lpNumberOfBytesWritten=0x31e59c*=0x3f0, lpOverlapped=0x0) returned 1 [0081.783] CloseHandle (hObject=0x264) returned 1 [0081.783] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\iv9kxoY1h.lnk", nBufferLength=0x105, lpBuffer=0x31e14c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\iv9kxoY1h.lnk", lpFilePart=0x0) returned 0x54 [0081.783] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\iv9kxoY1h.lnk", nBufferLength=0x105, lpBuffer=0x31e14c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\iv9kxoY1h.lnk", lpFilePart=0x0) returned 0x54 [0081.783] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e5ac) returned 1 [0081.783] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\iv9kxoY1h.lnk" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\windows\\recent\\iv9kxoy1h.lnk"), fInfoLevelId=0x0, lpFileInformation=0x31e628 | out: lpFileInformation=0x31e628*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xdd5fb0a0, ftCreationTime.dwHighDateTime=0x1d5e82a, ftLastAccessTime.dwLowDateTime=0xdd5fb0a0, ftLastAccessTime.dwHighDateTime=0x1d5e82a, ftLastWriteTime.dwLowDateTime=0x14308b60, ftLastWriteTime.dwHighDateTime=0x1d6eb7f, nFileSizeHigh=0x0, nFileSizeLow=0x3f0)) returned 1 [0081.783] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e5a8) returned 1 [0081.783] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\iv9kxoY1h.lnk" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\windows\\recent\\iv9kxoy1h.lnk"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\iv9kxoY1h.lnk" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\windows\\recent\\iv9kxoy1h.lnk")) returned 1 [0081.784] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\j rWKaz2b-64YTGN.lnk", nBufferLength=0x105, lpBuffer=0x31e02c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\j rWKaz2b-64YTGN.lnk", lpFilePart=0x0) returned 0x5b [0081.784] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e520) returned 1 [0081.784] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\j rWKaz2b-64YTGN.lnk" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\windows\\recent\\j rwkaz2b-64ytgn.lnk"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x264 [0081.784] GetFileType (hFile=0x264) returned 0x1 [0081.784] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e51c) returned 1 [0081.784] GetFileType (hFile=0x264) returned 0x1 [0081.784] GetFileSize (in: hFile=0x264, lpFileSizeHigh=0x31e628 | out: lpFileSizeHigh=0x31e628*=0x0) returned 0x14b2 [0081.784] ReadFile (in: hFile=0x264, lpBuffer=0x27bb5c4, nNumberOfBytesToRead=0x14b2, lpNumberOfBytesRead=0x31e5d4, lpOverlapped=0x0 | out: lpBuffer=0x27bb5c4*, lpNumberOfBytesRead=0x31e5d4*=0x14b2, lpOverlapped=0x0) returned 1 [0081.785] CloseHandle (hObject=0x264) returned 1 [0081.798] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\j rWKaz2b-64YTGN.lnk", nBufferLength=0x105, lpBuffer=0x31e018, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\j rWKaz2b-64YTGN.lnk", lpFilePart=0x0) returned 0x5b [0081.798] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e50c) returned 1 [0081.798] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\j rWKaz2b-64YTGN.lnk" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\windows\\recent\\j rwkaz2b-64ytgn.lnk"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x264 [0081.799] GetFileType (hFile=0x264) returned 0x1 [0081.799] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e508) returned 1 [0081.799] GetFileType (hFile=0x264) returned 0x1 [0081.799] WriteFile (in: hFile=0x264, lpBuffer=0x280eb6c*, nNumberOfBytesToWrite=0x14c0, lpNumberOfBytesWritten=0x31e5c8, lpOverlapped=0x0 | out: lpBuffer=0x280eb6c*, lpNumberOfBytesWritten=0x31e5c8*=0x14c0, lpOverlapped=0x0) returned 1 [0081.800] CloseHandle (hObject=0x264) returned 1 [0081.800] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\j rWKaz2b-64YTGN.lnk", nBufferLength=0x105, lpBuffer=0x31e14c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\j rWKaz2b-64YTGN.lnk", lpFilePart=0x0) returned 0x5b [0081.800] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\j rWKaz2b-64YTGN.lnk", nBufferLength=0x105, lpBuffer=0x31e14c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\j rWKaz2b-64YTGN.lnk", lpFilePart=0x0) returned 0x5b [0081.800] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e5ac) returned 1 [0081.800] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\j rWKaz2b-64YTGN.lnk" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\windows\\recent\\j rwkaz2b-64ytgn.lnk"), fInfoLevelId=0x0, lpFileInformation=0x31e628 | out: lpFileInformation=0x31e628*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xdca142a0, ftCreationTime.dwHighDateTime=0x1d5e82a, ftLastAccessTime.dwLowDateTime=0xdca142a0, ftLastAccessTime.dwHighDateTime=0x1d5e82a, ftLastWriteTime.dwLowDateTime=0x1432ecc0, ftLastWriteTime.dwHighDateTime=0x1d6eb7f, nFileSizeHigh=0x0, nFileSizeLow=0x14c0)) returned 1 [0081.800] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e5a8) returned 1 [0081.800] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\j rWKaz2b-64YTGN.lnk" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\windows\\recent\\j rwkaz2b-64ytgn.lnk"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\j rWKaz2b-64YTGN.lnk" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\windows\\recent\\j rwkaz2b-64ytgn.lnk")) returned 1 [0081.801] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\j_g3ZRLUMjKwy4 0Ihg.lnk", nBufferLength=0x105, lpBuffer=0x31e02c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\j_g3ZRLUMjKwy4 0Ihg.lnk", lpFilePart=0x0) returned 0x5e [0081.801] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e520) returned 1 [0081.801] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\j_g3ZRLUMjKwy4 0Ihg.lnk" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\windows\\recent\\j_g3zrlumjkwy4 0ihg.lnk"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x264 [0081.801] GetFileType (hFile=0x264) returned 0x1 [0081.801] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e51c) returned 1 [0081.801] GetFileType (hFile=0x264) returned 0x1 [0081.801] GetFileSize (in: hFile=0x264, lpFileSizeHigh=0x31e628 | out: lpFileSizeHigh=0x31e628*=0x0) returned 0x275 [0081.801] ReadFile (in: hFile=0x264, lpBuffer=0x2810718, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x31e5d4, lpOverlapped=0x0 | out: lpBuffer=0x2810718*, lpNumberOfBytesRead=0x31e5d4*=0x275, lpOverlapped=0x0) returned 1 [0081.802] CloseHandle (hObject=0x264) returned 1 [0081.841] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\j_g3ZRLUMjKwy4 0Ihg.lnk", nBufferLength=0x105, lpBuffer=0x31e018, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\j_g3ZRLUMjKwy4 0Ihg.lnk", lpFilePart=0x0) returned 0x5e [0081.842] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e50c) returned 1 [0081.842] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\j_g3ZRLUMjKwy4 0Ihg.lnk" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\windows\\recent\\j_g3zrlumjkwy4 0ihg.lnk"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x264 [0081.842] GetFileType (hFile=0x264) returned 0x1 [0081.842] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e508) returned 1 [0081.842] GetFileType (hFile=0x264) returned 0x1 [0081.843] WriteFile (in: hFile=0x264, lpBuffer=0x265eab4*, nNumberOfBytesToWrite=0x280, lpNumberOfBytesWritten=0x31e59c, lpOverlapped=0x0 | out: lpBuffer=0x265eab4*, lpNumberOfBytesWritten=0x31e59c*=0x280, lpOverlapped=0x0) returned 1 [0081.843] CloseHandle (hObject=0x264) returned 1 [0081.843] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\j_g3ZRLUMjKwy4 0Ihg.lnk", nBufferLength=0x105, lpBuffer=0x31e14c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\j_g3ZRLUMjKwy4 0Ihg.lnk", lpFilePart=0x0) returned 0x5e [0081.843] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\j_g3ZRLUMjKwy4 0Ihg.lnk", nBufferLength=0x105, lpBuffer=0x31e14c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\j_g3ZRLUMjKwy4 0Ihg.lnk", lpFilePart=0x0) returned 0x5e [0081.844] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e5ac) returned 1 [0081.844] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\j_g3ZRLUMjKwy4 0Ihg.lnk" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\windows\\recent\\j_g3zrlumjkwy4 0ihg.lnk"), fInfoLevelId=0x0, lpFileInformation=0x31e628 | out: lpFileInformation=0x31e628*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xdbd48c60, ftCreationTime.dwHighDateTime=0x1d5e82a, ftLastAccessTime.dwLowDateTime=0xdbd48c60, ftLastAccessTime.dwHighDateTime=0x1d5e82a, ftLastWriteTime.dwLowDateTime=0x143a10e0, ftLastWriteTime.dwHighDateTime=0x1d6eb7f, nFileSizeHigh=0x0, nFileSizeLow=0x280)) returned 1 [0081.844] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e5a8) returned 1 [0081.844] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\j_g3ZRLUMjKwy4 0Ihg.lnk" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\windows\\recent\\j_g3zrlumjkwy4 0ihg.lnk"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\j_g3ZRLUMjKwy4 0Ihg.lnk" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\windows\\recent\\j_g3zrlumjkwy4 0ihg.lnk")) returned 1 [0081.844] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\k0j at2.flv.lnk", nBufferLength=0x105, lpBuffer=0x31e02c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\k0j at2.flv.lnk", lpFilePart=0x0) returned 0x56 [0081.844] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e520) returned 1 [0081.844] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\k0j at2.flv.lnk" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\windows\\recent\\k0j at2.flv.lnk"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x264 [0081.844] GetFileType (hFile=0x264) returned 0x1 [0081.845] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e51c) returned 1 [0081.845] GetFileType (hFile=0x264) returned 0x1 [0081.845] GetFileSize (in: hFile=0x264, lpFileSizeHigh=0x31e628 | out: lpFileSizeHigh=0x31e628*=0x0) returned 0xedc [0081.845] ReadFile (in: hFile=0x264, lpBuffer=0x2660c9c, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x31e5d4, lpOverlapped=0x0 | out: lpBuffer=0x2660c9c*, lpNumberOfBytesRead=0x31e5d4*=0xedc, lpOverlapped=0x0) returned 1 [0081.845] CloseHandle (hObject=0x264) returned 1 [0081.866] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\k0j at2.flv.lnk", nBufferLength=0x105, lpBuffer=0x31e018, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\k0j at2.flv.lnk", lpFilePart=0x0) returned 0x56 [0081.866] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e50c) returned 1 [0081.866] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\k0j at2.flv.lnk" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\windows\\recent\\k0j at2.flv.lnk"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x264 [0081.867] GetFileType (hFile=0x264) returned 0x1 [0081.867] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e508) returned 1 [0081.867] GetFileType (hFile=0x264) returned 0x1 [0081.867] WriteFile (in: hFile=0x264, lpBuffer=0x26b3790*, nNumberOfBytesToWrite=0xee0, lpNumberOfBytesWritten=0x31e59c, lpOverlapped=0x0 | out: lpBuffer=0x26b3790*, lpNumberOfBytesWritten=0x31e59c*=0xee0, lpOverlapped=0x0) returned 1 [0081.868] CloseHandle (hObject=0x264) returned 1 [0081.868] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\k0j at2.flv.lnk", nBufferLength=0x105, lpBuffer=0x31e14c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\k0j at2.flv.lnk", lpFilePart=0x0) returned 0x56 [0081.868] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\k0j at2.flv.lnk", nBufferLength=0x105, lpBuffer=0x31e14c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\k0j at2.flv.lnk", lpFilePart=0x0) returned 0x56 [0081.868] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e5ac) returned 1 [0081.868] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\k0j at2.flv.lnk" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\windows\\recent\\k0j at2.flv.lnk"), fInfoLevelId=0x0, lpFileInformation=0x31e628 | out: lpFileInformation=0x31e628*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xdc5516a0, ftCreationTime.dwHighDateTime=0x1d5e82a, ftLastAccessTime.dwLowDateTime=0xdc5516a0, ftLastAccessTime.dwHighDateTime=0x1d5e82a, ftLastWriteTime.dwLowDateTime=0x143c7240, ftLastWriteTime.dwHighDateTime=0x1d6eb7f, nFileSizeHigh=0x0, nFileSizeLow=0xee0)) returned 1 [0081.868] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e5a8) returned 1 [0081.868] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\k0j at2.flv.lnk" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\windows\\recent\\k0j at2.flv.lnk"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\k0j at2.flv.lnk" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\windows\\recent\\k0j at2.flv.lnk")) returned 1 [0081.868] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\KaunNs4TVi5V7PIurI.ots.lnk", nBufferLength=0x105, lpBuffer=0x31e02c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\KaunNs4TVi5V7PIurI.ots.lnk", lpFilePart=0x0) returned 0x61 [0081.869] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e520) returned 1 [0081.869] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\KaunNs4TVi5V7PIurI.ots.lnk" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\windows\\recent\\kaunns4tvi5v7piuri.ots.lnk"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x264 [0081.869] GetFileType (hFile=0x264) returned 0x1 [0081.869] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e51c) returned 1 [0081.869] GetFileType (hFile=0x264) returned 0x1 [0081.870] GetFileSize (in: hFile=0x264, lpFileSizeHigh=0x31e628 | out: lpFileSizeHigh=0x31e628*=0x0) returned 0x15a0 [0081.870] ReadFile (in: hFile=0x264, lpBuffer=0x26b4a9c, nNumberOfBytesToRead=0x15a0, lpNumberOfBytesRead=0x31e5d4, lpOverlapped=0x0 | out: lpBuffer=0x26b4a9c*, lpNumberOfBytesRead=0x31e5d4*=0x15a0, lpOverlapped=0x0) returned 1 [0081.871] CloseHandle (hObject=0x264) returned 1 [0081.884] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\KaunNs4TVi5V7PIurI.ots.lnk", nBufferLength=0x105, lpBuffer=0x31e018, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\KaunNs4TVi5V7PIurI.ots.lnk", lpFilePart=0x0) returned 0x61 [0081.884] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e50c) returned 1 [0081.885] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\KaunNs4TVi5V7PIurI.ots.lnk" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\windows\\recent\\kaunns4tvi5v7piuri.ots.lnk"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x264 [0081.886] GetFileType (hFile=0x264) returned 0x1 [0081.886] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e508) returned 1 [0081.886] GetFileType (hFile=0x264) returned 0x1 [0081.886] WriteFile (in: hFile=0x264, lpBuffer=0x27084f0*, nNumberOfBytesToWrite=0x15b0, lpNumberOfBytesWritten=0x31e5c8, lpOverlapped=0x0 | out: lpBuffer=0x27084f0*, lpNumberOfBytesWritten=0x31e5c8*=0x15b0, lpOverlapped=0x0) returned 1 [0081.887] CloseHandle (hObject=0x264) returned 1 [0081.887] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\KaunNs4TVi5V7PIurI.ots.lnk", nBufferLength=0x105, lpBuffer=0x31e14c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\KaunNs4TVi5V7PIurI.ots.lnk", lpFilePart=0x0) returned 0x61 [0081.887] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\KaunNs4TVi5V7PIurI.ots.lnk", nBufferLength=0x105, lpBuffer=0x31e14c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\KaunNs4TVi5V7PIurI.ots.lnk", lpFilePart=0x0) returned 0x61 [0081.887] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e5ac) returned 1 [0081.887] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\KaunNs4TVi5V7PIurI.ots.lnk" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\windows\\recent\\kaunns4tvi5v7piuri.ots.lnk"), fInfoLevelId=0x0, lpFileInformation=0x31e628 | out: lpFileInformation=0x31e628*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xdd0079a0, ftCreationTime.dwHighDateTime=0x1d5e82a, ftLastAccessTime.dwLowDateTime=0xdd0079a0, ftLastAccessTime.dwHighDateTime=0x1d5e82a, ftLastWriteTime.dwLowDateTime=0x14413500, ftLastWriteTime.dwHighDateTime=0x1d6eb7f, nFileSizeHigh=0x0, nFileSizeLow=0x15b0)) returned 1 [0081.887] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e5a8) returned 1 [0081.887] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\KaunNs4TVi5V7PIurI.ots.lnk" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\windows\\recent\\kaunns4tvi5v7piuri.ots.lnk"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\KaunNs4TVi5V7PIurI.ots.lnk" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\windows\\recent\\kaunns4tvi5v7piuri.ots.lnk")) returned 1 [0081.888] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\kpbUV nhoxZNIL.lnk", nBufferLength=0x105, lpBuffer=0x31e02c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\kpbUV nhoxZNIL.lnk", lpFilePart=0x0) returned 0x59 [0081.888] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e520) returned 1 [0081.888] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\kpbUV nhoxZNIL.lnk" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\windows\\recent\\kpbuv nhoxznil.lnk"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x264 [0081.888] GetFileType (hFile=0x264) returned 0x1 [0081.888] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e51c) returned 1 [0081.888] GetFileType (hFile=0x264) returned 0x1 [0081.888] GetFileSize (in: hFile=0x264, lpFileSizeHigh=0x31e628 | out: lpFileSizeHigh=0x31e628*=0x0) returned 0x1bea [0081.888] ReadFile (in: hFile=0x264, lpBuffer=0x2709f24, nNumberOfBytesToRead=0x1bea, lpNumberOfBytesRead=0x31e5d4, lpOverlapped=0x0 | out: lpBuffer=0x2709f24*, lpNumberOfBytesRead=0x31e5d4*=0x1bea, lpOverlapped=0x0) returned 1 [0081.889] CloseHandle (hObject=0x264) returned 1 [0081.903] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\kpbUV nhoxZNIL.lnk", nBufferLength=0x105, lpBuffer=0x31e018, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\kpbUV nhoxZNIL.lnk", lpFilePart=0x0) returned 0x59 [0081.903] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e50c) returned 1 [0081.903] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\kpbUV nhoxZNIL.lnk" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\windows\\recent\\kpbuv nhoxznil.lnk"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x264 [0081.904] GetFileType (hFile=0x264) returned 0x1 [0081.904] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e508) returned 1 [0081.904] GetFileType (hFile=0x264) returned 0x1 [0081.904] WriteFile (in: hFile=0x264, lpBuffer=0x275f8bc*, nNumberOfBytesToWrite=0x1bf0, lpNumberOfBytesWritten=0x31e5c8, lpOverlapped=0x0 | out: lpBuffer=0x275f8bc*, lpNumberOfBytesWritten=0x31e5c8*=0x1bf0, lpOverlapped=0x0) returned 1 [0081.904] CloseHandle (hObject=0x264) returned 1 [0081.905] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\kpbUV nhoxZNIL.lnk", nBufferLength=0x105, lpBuffer=0x31e14c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\kpbUV nhoxZNIL.lnk", lpFilePart=0x0) returned 0x59 [0081.905] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\kpbUV nhoxZNIL.lnk", nBufferLength=0x105, lpBuffer=0x31e14c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\kpbUV nhoxZNIL.lnk", lpFilePart=0x0) returned 0x59 [0081.905] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e5ac) returned 1 [0081.905] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\kpbUV nhoxZNIL.lnk" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\windows\\recent\\kpbuv nhoxznil.lnk"), fInfoLevelId=0x0, lpFileInformation=0x31e628 | out: lpFileInformation=0x31e628*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xdbbf2000, ftCreationTime.dwHighDateTime=0x1d5e82a, ftLastAccessTime.dwLowDateTime=0xdbbf2000, ftLastAccessTime.dwHighDateTime=0x1d5e82a, ftLastWriteTime.dwLowDateTime=0x14439660, ftLastWriteTime.dwHighDateTime=0x1d6eb7f, nFileSizeHigh=0x0, nFileSizeLow=0x1bf0)) returned 1 [0081.905] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e5a8) returned 1 [0081.905] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\kpbUV nhoxZNIL.lnk" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\windows\\recent\\kpbuv nhoxznil.lnk"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\kpbUV nhoxZNIL.lnk" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\windows\\recent\\kpbuv nhoxznil.lnk")) returned 1 [0081.905] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\LajwuWOfmL7z35P7ILh_.lnk", nBufferLength=0x105, lpBuffer=0x31e02c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\LajwuWOfmL7z35P7ILh_.lnk", lpFilePart=0x0) returned 0x5f [0081.906] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e520) returned 1 [0081.906] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\LajwuWOfmL7z35P7ILh_.lnk" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\windows\\recent\\lajwuwofml7z35p7ilh_.lnk"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x264 [0081.906] GetFileType (hFile=0x264) returned 0x1 [0081.906] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e51c) returned 1 [0081.906] GetFileType (hFile=0x264) returned 0x1 [0081.906] GetFileSize (in: hFile=0x264, lpFileSizeHigh=0x31e628 | out: lpFileSizeHigh=0x31e628*=0x0) returned 0x275 [0081.906] ReadFile (in: hFile=0x264, lpBuffer=0x2761b8c, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x31e5d4, lpOverlapped=0x0 | out: lpBuffer=0x2761b8c*, lpNumberOfBytesRead=0x31e5d4*=0x275, lpOverlapped=0x0) returned 1 [0081.907] CloseHandle (hObject=0x264) returned 1 [0081.920] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\LajwuWOfmL7z35P7ILh_.lnk", nBufferLength=0x105, lpBuffer=0x31e018, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\LajwuWOfmL7z35P7ILh_.lnk", lpFilePart=0x0) returned 0x5f [0081.920] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e50c) returned 1 [0081.920] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\LajwuWOfmL7z35P7ILh_.lnk" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\windows\\recent\\lajwuwofml7z35p7ilh_.lnk"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x264 [0081.921] GetFileType (hFile=0x264) returned 0x1 [0081.921] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e508) returned 1 [0081.921] GetFileType (hFile=0x264) returned 0x1 [0081.921] WriteFile (in: hFile=0x264, lpBuffer=0x27b0770*, nNumberOfBytesToWrite=0x280, lpNumberOfBytesWritten=0x31e59c, lpOverlapped=0x0 | out: lpBuffer=0x27b0770*, lpNumberOfBytesWritten=0x31e59c*=0x280, lpOverlapped=0x0) returned 1 [0081.922] CloseHandle (hObject=0x264) returned 1 [0081.922] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\LajwuWOfmL7z35P7ILh_.lnk", nBufferLength=0x105, lpBuffer=0x31e14c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\LajwuWOfmL7z35P7ILh_.lnk", lpFilePart=0x0) returned 0x5f [0081.922] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\LajwuWOfmL7z35P7ILh_.lnk", nBufferLength=0x105, lpBuffer=0x31e14c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\LajwuWOfmL7z35P7ILh_.lnk", lpFilePart=0x0) returned 0x5f [0081.922] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e5ac) returned 1 [0081.922] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\LajwuWOfmL7z35P7ILh_.lnk" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\windows\\recent\\lajwuwofml7z35p7ilh_.lnk"), fInfoLevelId=0x0, lpFileInformation=0x31e628 | out: lpFileInformation=0x31e628*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xdd242e40, ftCreationTime.dwHighDateTime=0x1d5e82a, ftLastAccessTime.dwLowDateTime=0xdd242e40, ftLastAccessTime.dwHighDateTime=0x1d5e82a, ftLastWriteTime.dwLowDateTime=0x1445f7c0, ftLastWriteTime.dwHighDateTime=0x1d6eb7f, nFileSizeHigh=0x0, nFileSizeLow=0x280)) returned 1 [0081.922] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e5a8) returned 1 [0081.922] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\LajwuWOfmL7z35P7ILh_.lnk" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\windows\\recent\\lajwuwofml7z35p7ilh_.lnk"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\LajwuWOfmL7z35P7ILh_.lnk" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\windows\\recent\\lajwuwofml7z35p7ilh_.lnk")) returned 1 [0081.923] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\lCnlTJ-G.lnk", nBufferLength=0x105, lpBuffer=0x31e02c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\lCnlTJ-G.lnk", lpFilePart=0x0) returned 0x53 [0081.923] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e520) returned 1 [0081.923] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\lCnlTJ-G.lnk" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\windows\\recent\\lcnltj-g.lnk"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x264 [0081.923] GetFileType (hFile=0x264) returned 0x1 [0081.923] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e51c) returned 1 [0081.923] GetFileType (hFile=0x264) returned 0x1 [0081.923] GetFileSize (in: hFile=0x264, lpFileSizeHigh=0x31e628 | out: lpFileSizeHigh=0x31e628*=0x0) returned 0x1d5 [0081.923] ReadFile (in: hFile=0x264, lpBuffer=0x27b1c48, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x31e5d4, lpOverlapped=0x0 | out: lpBuffer=0x27b1c48*, lpNumberOfBytesRead=0x31e5d4*=0x1d5, lpOverlapped=0x0) returned 1 [0081.924] CloseHandle (hObject=0x264) returned 1 [0081.937] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\lCnlTJ-G.lnk", nBufferLength=0x105, lpBuffer=0x31e018, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\lCnlTJ-G.lnk", lpFilePart=0x0) returned 0x53 [0081.937] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e50c) returned 1 [0081.937] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\lCnlTJ-G.lnk" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\windows\\recent\\lcnltj-g.lnk"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x264 [0081.938] GetFileType (hFile=0x264) returned 0x1 [0081.938] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e508) returned 1 [0081.938] GetFileType (hFile=0x264) returned 0x1 [0081.938] WriteFile (in: hFile=0x264, lpBuffer=0x28004dc*, nNumberOfBytesToWrite=0x1e0, lpNumberOfBytesWritten=0x31e59c, lpOverlapped=0x0 | out: lpBuffer=0x28004dc*, lpNumberOfBytesWritten=0x31e59c*=0x1e0, lpOverlapped=0x0) returned 1 [0081.939] CloseHandle (hObject=0x264) returned 1 [0081.939] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\lCnlTJ-G.lnk", nBufferLength=0x105, lpBuffer=0x31e14c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\lCnlTJ-G.lnk", lpFilePart=0x0) returned 0x53 [0081.939] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\lCnlTJ-G.lnk", nBufferLength=0x105, lpBuffer=0x31e14c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\lCnlTJ-G.lnk", lpFilePart=0x0) returned 0x53 [0081.939] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e5ac) returned 1 [0081.939] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\lCnlTJ-G.lnk" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\windows\\recent\\lcnltj-g.lnk"), fInfoLevelId=0x0, lpFileInformation=0x31e628 | out: lpFileInformation=0x31e628*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xdc3624c0, ftCreationTime.dwHighDateTime=0x1d5e82a, ftLastAccessTime.dwLowDateTime=0xdd66d4c0, ftLastAccessTime.dwHighDateTime=0x1d5e82a, ftLastWriteTime.dwLowDateTime=0x14485920, ftLastWriteTime.dwHighDateTime=0x1d6eb7f, nFileSizeHigh=0x0, nFileSizeLow=0x1e0)) returned 1 [0081.940] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e5a8) returned 1 [0081.940] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\lCnlTJ-G.lnk" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\windows\\recent\\lcnltj-g.lnk"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\lCnlTJ-G.lnk" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\windows\\recent\\lcnltj-g.lnk")) returned 1 [0081.940] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\mcdNsT5RVFSVyld.lnk", nBufferLength=0x105, lpBuffer=0x31e02c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\mcdNsT5RVFSVyld.lnk", lpFilePart=0x0) returned 0x5a [0081.940] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e520) returned 1 [0081.940] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\mcdNsT5RVFSVyld.lnk" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\windows\\recent\\mcdnst5rvfsvyld.lnk"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x264 [0081.940] GetFileType (hFile=0x264) returned 0x1 [0081.940] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e51c) returned 1 [0081.940] GetFileType (hFile=0x264) returned 0x1 [0081.941] GetFileSize (in: hFile=0x264, lpFileSizeHigh=0x31e628 | out: lpFileSizeHigh=0x31e628*=0x0) returned 0x9da [0081.941] ReadFile (in: hFile=0x264, lpBuffer=0x28021a4, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x31e5d4, lpOverlapped=0x0 | out: lpBuffer=0x28021a4*, lpNumberOfBytesRead=0x31e5d4*=0x9da, lpOverlapped=0x0) returned 1 [0081.941] CloseHandle (hObject=0x264) returned 1 [0081.954] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\mcdNsT5RVFSVyld.lnk", nBufferLength=0x105, lpBuffer=0x31e018, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\mcdNsT5RVFSVyld.lnk", lpFilePart=0x0) returned 0x5a [0081.954] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e50c) returned 1 [0081.954] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\mcdNsT5RVFSVyld.lnk" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\windows\\recent\\mcdnst5rvfsvyld.lnk"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x264 [0081.955] GetFileType (hFile=0x264) returned 0x1 [0081.955] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e508) returned 1 [0081.955] GetFileType (hFile=0x264) returned 0x1 [0081.955] WriteFile (in: hFile=0x264, lpBuffer=0x2853250*, nNumberOfBytesToWrite=0x9e0, lpNumberOfBytesWritten=0x31e59c, lpOverlapped=0x0 | out: lpBuffer=0x2853250*, lpNumberOfBytesWritten=0x31e59c*=0x9e0, lpOverlapped=0x0) returned 1 [0081.956] CloseHandle (hObject=0x264) returned 1 [0081.956] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\mcdNsT5RVFSVyld.lnk", nBufferLength=0x105, lpBuffer=0x31e14c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\mcdNsT5RVFSVyld.lnk", lpFilePart=0x0) returned 0x5a [0081.956] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\mcdNsT5RVFSVyld.lnk", nBufferLength=0x105, lpBuffer=0x31e14c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\mcdNsT5RVFSVyld.lnk", lpFilePart=0x0) returned 0x5a [0081.956] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e5ac) returned 1 [0081.956] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\mcdNsT5RVFSVyld.lnk" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\windows\\recent\\mcdnst5rvfsvyld.lnk"), fInfoLevelId=0x0, lpFileInformation=0x31e628 | out: lpFileInformation=0x31e628*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xdc446d00, ftCreationTime.dwHighDateTime=0x1d5e82a, ftLastAccessTime.dwLowDateTime=0xdd5fb0a0, ftLastAccessTime.dwHighDateTime=0x1d5e82a, ftLastWriteTime.dwLowDateTime=0x144aba80, ftLastWriteTime.dwHighDateTime=0x1d6eb7f, nFileSizeHigh=0x0, nFileSizeLow=0x9e0)) returned 1 [0081.957] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e5a8) returned 1 [0081.957] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\mcdNsT5RVFSVyld.lnk" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\windows\\recent\\mcdnst5rvfsvyld.lnk"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\mcdNsT5RVFSVyld.lnk" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\windows\\recent\\mcdnst5rvfsvyld.lnk")) returned 1 [0081.957] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\McRkdzYB9JBSM2hjqEG.flv.lnk", nBufferLength=0x105, lpBuffer=0x31e02c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\McRkdzYB9JBSM2hjqEG.flv.lnk", lpFilePart=0x0) returned 0x62 [0081.957] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e520) returned 1 [0081.957] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\McRkdzYB9JBSM2hjqEG.flv.lnk" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\windows\\recent\\mcrkdzyb9jbsm2hjqeg.flv.lnk"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x264 [0081.957] GetFileType (hFile=0x264) returned 0x1 [0081.957] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e51c) returned 1 [0081.957] GetFileType (hFile=0x264) returned 0x1 [0081.957] GetFileSize (in: hFile=0x264, lpFileSizeHigh=0x31e628 | out: lpFileSizeHigh=0x31e628*=0x0) returned 0x41f [0081.958] ReadFile (in: hFile=0x264, lpBuffer=0x285499c, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x31e5d4, lpOverlapped=0x0 | out: lpBuffer=0x285499c*, lpNumberOfBytesRead=0x31e5d4*=0x41f, lpOverlapped=0x0) returned 1 [0081.958] CloseHandle (hObject=0x264) returned 1 [0082.000] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\McRkdzYB9JBSM2hjqEG.flv.lnk", nBufferLength=0x105, lpBuffer=0x31e018, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\McRkdzYB9JBSM2hjqEG.flv.lnk", lpFilePart=0x0) returned 0x62 [0082.000] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e50c) returned 1 [0082.000] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\McRkdzYB9JBSM2hjqEG.flv.lnk" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\windows\\recent\\mcrkdzyb9jbsm2hjqeg.flv.lnk"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x264 [0082.001] GetFileType (hFile=0x264) returned 0x1 [0082.001] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e508) returned 1 [0082.001] GetFileType (hFile=0x264) returned 0x1 [0082.001] WriteFile (in: hFile=0x264, lpBuffer=0x26a3f28*, nNumberOfBytesToWrite=0x420, lpNumberOfBytesWritten=0x31e59c, lpOverlapped=0x0 | out: lpBuffer=0x26a3f28*, lpNumberOfBytesWritten=0x31e59c*=0x420, lpOverlapped=0x0) returned 1 [0082.003] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\McRkdzYB9JBSM2hjqEG.flv.lnk", nBufferLength=0x105, lpBuffer=0x31e14c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\McRkdzYB9JBSM2hjqEG.flv.lnk", lpFilePart=0x0) returned 0x62 [0082.003] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\McRkdzYB9JBSM2hjqEG.flv.lnk", nBufferLength=0x105, lpBuffer=0x31e14c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\McRkdzYB9JBSM2hjqEG.flv.lnk", lpFilePart=0x0) returned 0x62 [0082.003] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e5ac) returned 1 [0082.003] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\McRkdzYB9JBSM2hjqEG.flv.lnk" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\windows\\recent\\mcrkdzyb9jbsm2hjqeg.flv.lnk"), fInfoLevelId=0x0, lpFileInformation=0x31e628 | out: lpFileInformation=0x31e628*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xdbe2d4a0, ftCreationTime.dwHighDateTime=0x1d5e82a, ftLastAccessTime.dwLowDateTime=0xdbe2d4a0, ftLastAccessTime.dwHighDateTime=0x1d5e82a, ftLastWriteTime.dwLowDateTime=0x1451dea0, ftLastWriteTime.dwHighDateTime=0x1d6eb7f, nFileSizeHigh=0x0, nFileSizeLow=0x420)) returned 1 [0082.003] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e5a8) returned 1 [0082.003] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\McRkdzYB9JBSM2hjqEG.flv.lnk" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\windows\\recent\\mcrkdzyb9jbsm2hjqeg.flv.lnk"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\McRkdzYB9JBSM2hjqEG.flv.lnk" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\windows\\recent\\mcrkdzyb9jbsm2hjqeg.flv.lnk")) returned 1 [0082.004] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\MqHlcYZXc1ykd8m-7zLx.lnk", nBufferLength=0x105, lpBuffer=0x31e02c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\MqHlcYZXc1ykd8m-7zLx.lnk", lpFilePart=0x0) returned 0x5f [0082.004] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e520) returned 1 [0082.004] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\MqHlcYZXc1ykd8m-7zLx.lnk" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\windows\\recent\\mqhlcyzxc1ykd8m-7zlx.lnk"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x264 [0082.004] GetFileType (hFile=0x264) returned 0x1 [0082.004] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e51c) returned 1 [0082.004] GetFileType (hFile=0x264) returned 0x1 [0082.004] GetFileSize (in: hFile=0x264, lpFileSizeHigh=0x31e628 | out: lpFileSizeHigh=0x31e628*=0x0) returned 0xf55 [0082.004] ReadFile (in: hFile=0x264, lpBuffer=0x26a61c0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x31e5d4, lpOverlapped=0x0 | out: lpBuffer=0x26a61c0*, lpNumberOfBytesRead=0x31e5d4*=0xf55, lpOverlapped=0x0) returned 1 [0082.018] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\MqHlcYZXc1ykd8m-7zLx.lnk", nBufferLength=0x105, lpBuffer=0x31e018, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\MqHlcYZXc1ykd8m-7zLx.lnk", lpFilePart=0x0) returned 0x5f [0082.018] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e50c) returned 1 [0082.018] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\MqHlcYZXc1ykd8m-7zLx.lnk" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\windows\\recent\\mqhlcyzxc1ykd8m-7zlx.lnk"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x264 [0082.019] GetFileType (hFile=0x264) returned 0x1 [0082.019] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e508) returned 1 [0082.019] GetFileType (hFile=0x264) returned 0x1 [0082.019] WriteFile (in: hFile=0x264, lpBuffer=0x26f8f60*, nNumberOfBytesToWrite=0xf60, lpNumberOfBytesWritten=0x31e59c, lpOverlapped=0x0 | out: lpBuffer=0x26f8f60*, lpNumberOfBytesWritten=0x31e59c*=0xf60, lpOverlapped=0x0) returned 1 [0082.020] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\MqHlcYZXc1ykd8m-7zLx.lnk", nBufferLength=0x105, lpBuffer=0x31e14c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\MqHlcYZXc1ykd8m-7zLx.lnk", lpFilePart=0x0) returned 0x5f [0082.020] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\MqHlcYZXc1ykd8m-7zLx.lnk", nBufferLength=0x105, lpBuffer=0x31e14c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\MqHlcYZXc1ykd8m-7zLx.lnk", lpFilePart=0x0) returned 0x5f [0082.020] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e5ac) returned 1 [0082.020] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\MqHlcYZXc1ykd8m-7zLx.lnk" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\windows\\recent\\mqhlcyzxc1ykd8m-7zlx.lnk"), fInfoLevelId=0x0, lpFileInformation=0x31e628 | out: lpFileInformation=0x31e628*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xdb540220, ftCreationTime.dwHighDateTime=0x1d5e82a, ftLastAccessTime.dwLowDateTime=0xdd6df8e0, ftLastAccessTime.dwHighDateTime=0x1d5e82a, ftLastWriteTime.dwLowDateTime=0x14544000, ftLastWriteTime.dwHighDateTime=0x1d6eb7f, nFileSizeHigh=0x0, nFileSizeLow=0xf60)) returned 1 [0082.020] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e5a8) returned 1 [0082.020] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\MqHlcYZXc1ykd8m-7zLx.lnk" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\windows\\recent\\mqhlcyzxc1ykd8m-7zlx.lnk"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\MqHlcYZXc1ykd8m-7zLx.lnk" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\windows\\recent\\mqhlcyzxc1ykd8m-7zlx.lnk")) returned 1 [0082.021] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\MVUshvijtjHU.lnk", nBufferLength=0x105, lpBuffer=0x31e02c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\MVUshvijtjHU.lnk", lpFilePart=0x0) returned 0x57 [0082.021] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e520) returned 1 [0082.021] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\MVUshvijtjHU.lnk" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\windows\\recent\\mvushvijtjhu.lnk"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x264 [0082.021] GetFileType (hFile=0x264) returned 0x1 [0082.021] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e51c) returned 1 [0082.021] GetFileType (hFile=0x264) returned 0x1 [0082.021] GetFileSize (in: hFile=0x264, lpFileSizeHigh=0x31e628 | out: lpFileSizeHigh=0x31e628*=0x0) returned 0xa4d [0082.021] ReadFile (in: hFile=0x264, lpBuffer=0x26facc0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x31e5d4, lpOverlapped=0x0 | out: lpBuffer=0x26facc0*, lpNumberOfBytesRead=0x31e5d4*=0xa4d, lpOverlapped=0x0) returned 1 [0082.035] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\MVUshvijtjHU.lnk", nBufferLength=0x105, lpBuffer=0x31e018, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\MVUshvijtjHU.lnk", lpFilePart=0x0) returned 0x57 [0082.035] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e50c) returned 1 [0082.035] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\MVUshvijtjHU.lnk" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\windows\\recent\\mvushvijtjhu.lnk"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x264 [0082.036] GetFileType (hFile=0x264) returned 0x1 [0082.036] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e508) returned 1 [0082.036] GetFileType (hFile=0x264) returned 0x1 [0082.036] WriteFile (in: hFile=0x264, lpBuffer=0x274bf8c*, nNumberOfBytesToWrite=0xa50, lpNumberOfBytesWritten=0x31e59c, lpOverlapped=0x0 | out: lpBuffer=0x274bf8c*, lpNumberOfBytesWritten=0x31e59c*=0xa50, lpOverlapped=0x0) returned 1 [0082.037] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\MVUshvijtjHU.lnk", nBufferLength=0x105, lpBuffer=0x31e14c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\MVUshvijtjHU.lnk", lpFilePart=0x0) returned 0x57 [0082.037] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\MVUshvijtjHU.lnk", nBufferLength=0x105, lpBuffer=0x31e14c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\MVUshvijtjHU.lnk", lpFilePart=0x0) returned 0x57 [0082.037] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e5ac) returned 1 [0082.037] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\MVUshvijtjHU.lnk" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\windows\\recent\\mvushvijtjhu.lnk"), fInfoLevelId=0x0, lpFileInformation=0x31e628 | out: lpFileInformation=0x31e628*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xdcda63a0, ftCreationTime.dwHighDateTime=0x1d5e82a, ftLastAccessTime.dwLowDateTime=0xdcda63a0, ftLastAccessTime.dwHighDateTime=0x1d5e82a, ftLastWriteTime.dwLowDateTime=0x1456a160, ftLastWriteTime.dwHighDateTime=0x1d6eb7f, nFileSizeHigh=0x0, nFileSizeLow=0xa50)) returned 1 [0082.037] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e5a8) returned 1 [0082.037] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\MVUshvijtjHU.lnk" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\windows\\recent\\mvushvijtjhu.lnk"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\MVUshvijtjHU.lnk" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\windows\\recent\\mvushvijtjhu.lnk")) returned 1 [0082.038] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\My Music.lnk", nBufferLength=0x105, lpBuffer=0x31e02c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\My Music.lnk", lpFilePart=0x0) returned 0x53 [0082.038] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e520) returned 1 [0082.038] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\My Music.lnk" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\windows\\recent\\my music.lnk"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x264 [0082.038] GetFileType (hFile=0x264) returned 0x1 [0082.038] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e51c) returned 1 [0082.038] GetFileType (hFile=0x264) returned 0x1 [0082.038] GetFileSize (in: hFile=0x264, lpFileSizeHigh=0x31e628 | out: lpFileSizeHigh=0x31e628*=0x0) returned 0x52a [0082.038] ReadFile (in: hFile=0x264, lpBuffer=0x274d798, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x31e5d4, lpOverlapped=0x0 | out: lpBuffer=0x274d798*, lpNumberOfBytesRead=0x31e5d4*=0x52a, lpOverlapped=0x0) returned 1 [0082.052] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\My Music.lnk", nBufferLength=0x105, lpBuffer=0x31e018, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\My Music.lnk", lpFilePart=0x0) returned 0x53 [0082.052] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e50c) returned 1 [0082.052] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\My Music.lnk" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\windows\\recent\\my music.lnk"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x264 [0082.053] GetFileType (hFile=0x264) returned 0x1 [0082.053] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e508) returned 1 [0082.053] GetFileType (hFile=0x264) returned 0x1 [0082.053] WriteFile (in: hFile=0x264, lpBuffer=0x279d0b8*, nNumberOfBytesToWrite=0x530, lpNumberOfBytesWritten=0x31e59c, lpOverlapped=0x0 | out: lpBuffer=0x279d0b8*, lpNumberOfBytesWritten=0x31e59c*=0x530, lpOverlapped=0x0) returned 1 [0082.054] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\My Music.lnk", nBufferLength=0x105, lpBuffer=0x31e14c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\My Music.lnk", lpFilePart=0x0) returned 0x53 [0082.054] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\My Music.lnk", nBufferLength=0x105, lpBuffer=0x31e14c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\My Music.lnk", lpFilePart=0x0) returned 0x53 [0082.054] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e5ac) returned 1 [0082.054] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\My Music.lnk" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\windows\\recent\\my music.lnk"), fInfoLevelId=0x0, lpFileInformation=0x31e628 | out: lpFileInformation=0x31e628*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xdcd0de20, ftCreationTime.dwHighDateTime=0x1d5e82a, ftLastAccessTime.dwLowDateTime=0xdd705a40, ftLastAccessTime.dwHighDateTime=0x1d5e82a, ftLastWriteTime.dwLowDateTime=0x145902c0, ftLastWriteTime.dwHighDateTime=0x1d6eb7f, nFileSizeHigh=0x0, nFileSizeLow=0x530)) returned 1 [0082.054] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e5a8) returned 1 [0082.054] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\My Music.lnk" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\windows\\recent\\my music.lnk"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\My Music.lnk" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\windows\\recent\\my music.lnk")) returned 1 [0082.055] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\My Pictures.lnk", nBufferLength=0x105, lpBuffer=0x31e02c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\My Pictures.lnk", lpFilePart=0x0) returned 0x56 [0082.055] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e520) returned 1 [0082.055] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\My Pictures.lnk" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\windows\\recent\\my pictures.lnk"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x264 [0082.055] GetFileType (hFile=0x264) returned 0x1 [0082.055] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e51c) returned 1 [0082.055] GetFileType (hFile=0x264) returned 0x1 [0082.055] GetFileSize (in: hFile=0x264, lpFileSizeHigh=0x31e628 | out: lpFileSizeHigh=0x31e628*=0x0) returned 0x54f [0082.055] ReadFile (in: hFile=0x264, lpBuffer=0x279e8e4, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x31e5d4, lpOverlapped=0x0 | out: lpBuffer=0x279e8e4*, lpNumberOfBytesRead=0x31e5d4*=0x54f, lpOverlapped=0x0) returned 1 [0082.069] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\My Pictures.lnk", nBufferLength=0x105, lpBuffer=0x31e018, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\My Pictures.lnk", lpFilePart=0x0) returned 0x56 [0082.069] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e50c) returned 1 [0082.069] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\My Pictures.lnk" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\windows\\recent\\my pictures.lnk"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x264 [0082.070] GetFileType (hFile=0x264) returned 0x1 [0082.070] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e508) returned 1 [0082.070] GetFileType (hFile=0x264) returned 0x1 [0082.070] WriteFile (in: hFile=0x264, lpBuffer=0x27ee2ac*, nNumberOfBytesToWrite=0x550, lpNumberOfBytesWritten=0x31e59c, lpOverlapped=0x0 | out: lpBuffer=0x27ee2ac*, lpNumberOfBytesWritten=0x31e59c*=0x550, lpOverlapped=0x0) returned 1 [0082.071] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\My Pictures.lnk", nBufferLength=0x105, lpBuffer=0x31e14c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\My Pictures.lnk", lpFilePart=0x0) returned 0x56 [0082.071] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\My Pictures.lnk", nBufferLength=0x105, lpBuffer=0x31e14c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\My Pictures.lnk", lpFilePart=0x0) returned 0x56 [0082.071] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e5ac) returned 1 [0082.071] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\My Pictures.lnk" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\windows\\recent\\my pictures.lnk"), fInfoLevelId=0x0, lpFileInformation=0x31e628 | out: lpFileInformation=0x31e628*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xdba02e20, ftCreationTime.dwHighDateTime=0x1d5e82a, ftLastAccessTime.dwLowDateTime=0xdd693620, ftLastAccessTime.dwHighDateTime=0x1d5e82a, ftLastWriteTime.dwLowDateTime=0x145b6420, ftLastWriteTime.dwHighDateTime=0x1d6eb7f, nFileSizeHigh=0x0, nFileSizeLow=0x550)) returned 1 [0082.071] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e5a8) returned 1 [0082.071] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\My Pictures.lnk" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\windows\\recent\\my pictures.lnk"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\My Pictures.lnk" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\windows\\recent\\my pictures.lnk")) returned 1 [0082.071] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\My Videos.lnk", nBufferLength=0x105, lpBuffer=0x31e02c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\My Videos.lnk", lpFilePart=0x0) returned 0x54 [0082.071] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e520) returned 1 [0082.071] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\My Videos.lnk" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\windows\\recent\\my videos.lnk"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x264 [0082.072] GetFileType (hFile=0x264) returned 0x1 [0082.072] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e51c) returned 1 [0082.072] GetFileType (hFile=0x264) returned 0x1 [0082.072] GetFileSize (in: hFile=0x264, lpFileSizeHigh=0x31e628 | out: lpFileSizeHigh=0x31e628*=0x0) returned 0x539 [0082.072] ReadFile (in: hFile=0x264, lpBuffer=0x27efacc, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x31e5d4, lpOverlapped=0x0 | out: lpBuffer=0x27efacc*, lpNumberOfBytesRead=0x31e5d4*=0x539, lpOverlapped=0x0) returned 1 [0082.085] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\My Videos.lnk", nBufferLength=0x105, lpBuffer=0x31e018, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\My Videos.lnk", lpFilePart=0x0) returned 0x54 [0082.086] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e50c) returned 1 [0082.086] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\My Videos.lnk" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\windows\\recent\\my videos.lnk"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x264 [0082.086] GetFileType (hFile=0x264) returned 0x1 [0082.086] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e508) returned 1 [0082.086] GetFileType (hFile=0x264) returned 0x1 [0082.087] WriteFile (in: hFile=0x264, lpBuffer=0x283f440*, nNumberOfBytesToWrite=0x540, lpNumberOfBytesWritten=0x31e59c, lpOverlapped=0x0 | out: lpBuffer=0x283f440*, lpNumberOfBytesWritten=0x31e59c*=0x540, lpOverlapped=0x0) returned 1 [0082.088] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\My Videos.lnk", nBufferLength=0x105, lpBuffer=0x31e14c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\My Videos.lnk", lpFilePart=0x0) returned 0x54 [0082.088] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\My Videos.lnk", nBufferLength=0x105, lpBuffer=0x31e14c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\My Videos.lnk", lpFilePart=0x0) returned 0x54 [0082.088] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e5ac) returned 1 [0082.088] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\My Videos.lnk" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\windows\\recent\\my videos.lnk"), fInfoLevelId=0x0, lpFileInformation=0x31e628 | out: lpFileInformation=0x31e628*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xdb0c98e0, ftCreationTime.dwHighDateTime=0x1d5e82a, ftLastAccessTime.dwLowDateTime=0xdd6b9780, ftLastAccessTime.dwHighDateTime=0x1d5e82a, ftLastWriteTime.dwLowDateTime=0x146026e0, ftLastWriteTime.dwHighDateTime=0x1d6eb7f, nFileSizeHigh=0x0, nFileSizeLow=0x540)) returned 1 [0082.088] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e5a8) returned 1 [0082.088] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\My Videos.lnk" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\windows\\recent\\my videos.lnk"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\My Videos.lnk" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\windows\\recent\\my videos.lnk")) returned 1 [0082.088] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\Otujad-E.lnk", nBufferLength=0x105, lpBuffer=0x31e02c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\Otujad-E.lnk", lpFilePart=0x0) returned 0x53 [0082.088] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e520) returned 1 [0082.089] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\Otujad-E.lnk" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\windows\\recent\\otujad-e.lnk"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x264 [0082.089] GetFileType (hFile=0x264) returned 0x1 [0082.089] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e51c) returned 1 [0082.089] GetFileType (hFile=0x264) returned 0x1 [0082.089] GetFileSize (in: hFile=0x264, lpFileSizeHigh=0x31e628 | out: lpFileSizeHigh=0x31e628*=0x0) returned 0x1b42 [0082.089] ReadFile (in: hFile=0x264, lpBuffer=0x284070c, nNumberOfBytesToRead=0x1b42, lpNumberOfBytesRead=0x31e5d4, lpOverlapped=0x0 | out: lpBuffer=0x284070c*, lpNumberOfBytesRead=0x31e5d4*=0x1b42, lpOverlapped=0x0) returned 1 [0082.131] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\Otujad-E.lnk", nBufferLength=0x105, lpBuffer=0x31e018, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\Otujad-E.lnk", lpFilePart=0x0) returned 0x53 [0082.132] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e50c) returned 1 [0082.132] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\Otujad-E.lnk" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\windows\\recent\\otujad-e.lnk"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x264 [0082.133] GetFileType (hFile=0x264) returned 0x1 [0082.133] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e508) returned 1 [0082.133] GetFileType (hFile=0x264) returned 0x1 [0082.133] WriteFile (in: hFile=0x264, lpBuffer=0x2697460*, nNumberOfBytesToWrite=0x1b50, lpNumberOfBytesWritten=0x31e5c8, lpOverlapped=0x0 | out: lpBuffer=0x2697460*, lpNumberOfBytesWritten=0x31e5c8*=0x1b50, lpOverlapped=0x0) returned 1 [0082.134] CloseHandle (hObject=0x264) returned 1 [0082.134] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\Otujad-E.lnk", nBufferLength=0x105, lpBuffer=0x31e14c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\Otujad-E.lnk", lpFilePart=0x0) returned 0x53 [0082.134] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\Otujad-E.lnk", nBufferLength=0x105, lpBuffer=0x31e14c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\Otujad-E.lnk", lpFilePart=0x0) returned 0x53 [0082.134] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e5ac) returned 1 [0082.134] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\Otujad-E.lnk" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\windows\\recent\\otujad-e.lnk"), fInfoLevelId=0x0, lpFileInformation=0x31e628 | out: lpFileInformation=0x31e628*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xdc33c360, ftCreationTime.dwHighDateTime=0x1d5e82a, ftLastAccessTime.dwLowDateTime=0xdc33c360, ftLastAccessTime.dwHighDateTime=0x1d5e82a, ftLastWriteTime.dwLowDateTime=0x1464e9a0, ftLastWriteTime.dwHighDateTime=0x1d6eb7f, nFileSizeHigh=0x0, nFileSizeLow=0x1b50)) returned 1 [0082.134] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e5a8) returned 1 [0082.134] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\Otujad-E.lnk" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\windows\\recent\\otujad-e.lnk"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\Otujad-E.lnk" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\windows\\recent\\otujad-e.lnk")) returned 1 [0082.135] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\Oxgbwq.lnk", nBufferLength=0x105, lpBuffer=0x31e02c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\Oxgbwq.lnk", lpFilePart=0x0) returned 0x51 [0082.135] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e520) returned 1 [0082.135] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\Oxgbwq.lnk" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\windows\\recent\\oxgbwq.lnk"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x264 [0082.135] GetFileType (hFile=0x264) returned 0x1 [0082.135] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e51c) returned 1 [0082.135] GetFileType (hFile=0x264) returned 0x1 [0082.135] GetFileSize (in: hFile=0x264, lpFileSizeHigh=0x31e628 | out: lpFileSizeHigh=0x31e628*=0x0) returned 0x1ba3 [0082.135] ReadFile (in: hFile=0x264, lpBuffer=0x26993a4, nNumberOfBytesToRead=0x1ba3, lpNumberOfBytesRead=0x31e5d4, lpOverlapped=0x0 | out: lpBuffer=0x26993a4*, lpNumberOfBytesRead=0x31e5d4*=0x1ba3, lpOverlapped=0x0) returned 1 [0082.136] CloseHandle (hObject=0x264) returned 1 [0082.149] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\Oxgbwq.lnk", nBufferLength=0x105, lpBuffer=0x31e018, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\Oxgbwq.lnk", lpFilePart=0x0) returned 0x51 [0082.149] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e50c) returned 1 [0082.149] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\Oxgbwq.lnk" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\windows\\recent\\oxgbwq.lnk"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x264 [0082.150] GetFileType (hFile=0x264) returned 0x1 [0082.150] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e508) returned 1 [0082.151] GetFileType (hFile=0x264) returned 0x1 [0082.151] WriteFile (in: hFile=0x264, lpBuffer=0x26eed58*, nNumberOfBytesToWrite=0x1bb0, lpNumberOfBytesWritten=0x31e5c8, lpOverlapped=0x0 | out: lpBuffer=0x26eed58*, lpNumberOfBytesWritten=0x31e5c8*=0x1bb0, lpOverlapped=0x0) returned 1 [0082.151] CloseHandle (hObject=0x264) returned 1 [0082.152] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\Oxgbwq.lnk", nBufferLength=0x105, lpBuffer=0x31e14c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\Oxgbwq.lnk", lpFilePart=0x0) returned 0x51 [0082.152] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\Oxgbwq.lnk", nBufferLength=0x105, lpBuffer=0x31e14c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\Oxgbwq.lnk", lpFilePart=0x0) returned 0x51 [0082.152] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e5ac) returned 1 [0082.152] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\Oxgbwq.lnk" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\windows\\recent\\oxgbwq.lnk"), fInfoLevelId=0x0, lpFileInformation=0x31e628 | out: lpFileInformation=0x31e628*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xdc6a8300, ftCreationTime.dwHighDateTime=0x1d5e82a, ftLastAccessTime.dwLowDateTime=0xdc6a8300, ftLastAccessTime.dwHighDateTime=0x1d5e82a, ftLastWriteTime.dwLowDateTime=0x1469ac60, ftLastWriteTime.dwHighDateTime=0x1d6eb7f, nFileSizeHigh=0x0, nFileSizeLow=0x1bb0)) returned 1 [0082.152] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e5a8) returned 1 [0082.152] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\Oxgbwq.lnk" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\windows\\recent\\oxgbwq.lnk"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\Oxgbwq.lnk" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\windows\\recent\\oxgbwq.lnk")) returned 1 [0082.153] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\phtzJp3.lnk", nBufferLength=0x105, lpBuffer=0x31e02c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\phtzJp3.lnk", lpFilePart=0x0) returned 0x52 [0082.153] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e520) returned 1 [0082.153] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\phtzJp3.lnk" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\windows\\recent\\phtzjp3.lnk"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x264 [0082.153] GetFileType (hFile=0x264) returned 0x1 [0082.153] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e51c) returned 1 [0082.153] GetFileType (hFile=0x264) returned 0x1 [0082.153] GetFileSize (in: hFile=0x264, lpFileSizeHigh=0x31e628 | out: lpFileSizeHigh=0x31e628*=0x0) returned 0xa07 [0082.153] ReadFile (in: hFile=0x264, lpBuffer=0x26f1704, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x31e5d4, lpOverlapped=0x0 | out: lpBuffer=0x26f1704*, lpNumberOfBytesRead=0x31e5d4*=0xa07, lpOverlapped=0x0) returned 1 [0082.154] CloseHandle (hObject=0x264) returned 1 [0082.167] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\phtzJp3.lnk", nBufferLength=0x105, lpBuffer=0x31e018, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\phtzJp3.lnk", lpFilePart=0x0) returned 0x52 [0082.167] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e50c) returned 1 [0082.167] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\phtzJp3.lnk" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\windows\\recent\\phtzjp3.lnk"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x264 [0082.168] GetFileType (hFile=0x264) returned 0x1 [0082.168] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e508) returned 1 [0082.168] GetFileType (hFile=0x264) returned 0x1 [0082.168] WriteFile (in: hFile=0x264, lpBuffer=0x2742884*, nNumberOfBytesToWrite=0xa10, lpNumberOfBytesWritten=0x31e59c, lpOverlapped=0x0 | out: lpBuffer=0x2742884*, lpNumberOfBytesWritten=0x31e59c*=0xa10, lpOverlapped=0x0) returned 1 [0082.169] CloseHandle (hObject=0x264) returned 1 [0082.169] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\phtzJp3.lnk", nBufferLength=0x105, lpBuffer=0x31e14c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\phtzJp3.lnk", lpFilePart=0x0) returned 0x52 [0082.169] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\phtzJp3.lnk", nBufferLength=0x105, lpBuffer=0x31e14c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\phtzJp3.lnk", lpFilePart=0x0) returned 0x52 [0082.169] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e5ac) returned 1 [0082.169] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\phtzJp3.lnk" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\windows\\recent\\phtzjp3.lnk"), fInfoLevelId=0x0, lpFileInformation=0x31e628 | out: lpFileInformation=0x31e628*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xdd2db3c0, ftCreationTime.dwHighDateTime=0x1d5e82a, ftLastAccessTime.dwLowDateTime=0xdd2db3c0, ftLastAccessTime.dwHighDateTime=0x1d5e82a, ftLastWriteTime.dwLowDateTime=0x146c0dc0, ftLastWriteTime.dwHighDateTime=0x1d6eb7f, nFileSizeHigh=0x0, nFileSizeLow=0xa10)) returned 1 [0082.169] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e5a8) returned 1 [0082.169] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\phtzJp3.lnk" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\windows\\recent\\phtzjp3.lnk"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\phtzJp3.lnk" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\windows\\recent\\phtzjp3.lnk")) returned 1 [0082.170] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\PlzXFM1.lnk", nBufferLength=0x105, lpBuffer=0x31e02c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\PlzXFM1.lnk", lpFilePart=0x0) returned 0x52 [0082.170] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e520) returned 1 [0082.170] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\PlzXFM1.lnk" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\windows\\recent\\plzxfm1.lnk"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x264 [0082.170] GetFileType (hFile=0x264) returned 0x1 [0082.170] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e51c) returned 1 [0082.170] GetFileType (hFile=0x264) returned 0x1 [0082.170] GetFileSize (in: hFile=0x264, lpFileSizeHigh=0x31e628 | out: lpFileSizeHigh=0x31e628*=0x0) returned 0x232 [0082.170] ReadFile (in: hFile=0x264, lpBuffer=0x2743d84, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x31e5d4, lpOverlapped=0x0 | out: lpBuffer=0x2743d84*, lpNumberOfBytesRead=0x31e5d4*=0x232, lpOverlapped=0x0) returned 1 [0082.171] CloseHandle (hObject=0x264) returned 1 [0082.184] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\PlzXFM1.lnk", nBufferLength=0x105, lpBuffer=0x31e018, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\PlzXFM1.lnk", lpFilePart=0x0) returned 0x52 [0082.184] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e50c) returned 1 [0082.185] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\PlzXFM1.lnk" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\windows\\recent\\plzxfm1.lnk"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x264 [0082.185] GetFileType (hFile=0x264) returned 0x1 [0082.185] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e508) returned 1 [0082.185] GetFileType (hFile=0x264) returned 0x1 [0082.185] WriteFile (in: hFile=0x264, lpBuffer=0x27927f8*, nNumberOfBytesToWrite=0x240, lpNumberOfBytesWritten=0x31e59c, lpOverlapped=0x0 | out: lpBuffer=0x27927f8*, lpNumberOfBytesWritten=0x31e59c*=0x240, lpOverlapped=0x0) returned 1 [0082.186] CloseHandle (hObject=0x264) returned 1 [0082.186] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\PlzXFM1.lnk", nBufferLength=0x105, lpBuffer=0x31e14c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\PlzXFM1.lnk", lpFilePart=0x0) returned 0x52 [0082.186] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\PlzXFM1.lnk", nBufferLength=0x105, lpBuffer=0x31e14c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\PlzXFM1.lnk", lpFilePart=0x0) returned 0x52 [0082.187] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e5ac) returned 1 [0082.187] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\PlzXFM1.lnk" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\windows\\recent\\plzxfm1.lnk"), fInfoLevelId=0x0, lpFileInformation=0x31e628 | out: lpFileInformation=0x31e628*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xdd5d4f40, ftCreationTime.dwHighDateTime=0x1d5e82a, ftLastAccessTime.dwLowDateTime=0xdd5d4f40, ftLastAccessTime.dwHighDateTime=0x1d5e82a, ftLastWriteTime.dwLowDateTime=0x146e6f20, ftLastWriteTime.dwHighDateTime=0x1d6eb7f, nFileSizeHigh=0x0, nFileSizeLow=0x240)) returned 1 [0082.187] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e5a8) returned 1 [0082.187] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\PlzXFM1.lnk" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\windows\\recent\\plzxfm1.lnk"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\PlzXFM1.lnk" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\windows\\recent\\plzxfm1.lnk")) returned 1 [0082.187] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\PVyCWCHH.mkv.lnk", nBufferLength=0x105, lpBuffer=0x31e02c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\PVyCWCHH.mkv.lnk", lpFilePart=0x0) returned 0x57 [0082.187] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e520) returned 1 [0082.187] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\PVyCWCHH.mkv.lnk" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\windows\\recent\\pvycwchh.mkv.lnk"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x264 [0082.187] GetFileType (hFile=0x264) returned 0x1 [0082.188] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e51c) returned 1 [0082.188] GetFileType (hFile=0x264) returned 0x1 [0082.188] GetFileSize (in: hFile=0x264, lpFileSizeHigh=0x31e628 | out: lpFileSizeHigh=0x31e628*=0x0) returned 0xeab [0082.188] ReadFile (in: hFile=0x264, lpBuffer=0x2794984, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x31e5d4, lpOverlapped=0x0 | out: lpBuffer=0x2794984*, lpNumberOfBytesRead=0x31e5d4*=0xeab, lpOverlapped=0x0) returned 1 [0082.188] CloseHandle (hObject=0x264) returned 1 [0082.202] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\PVyCWCHH.mkv.lnk", nBufferLength=0x105, lpBuffer=0x31e018, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\PVyCWCHH.mkv.lnk", lpFilePart=0x0) returned 0x57 [0082.202] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e50c) returned 1 [0082.202] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\PVyCWCHH.mkv.lnk" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\windows\\recent\\pvycwchh.mkv.lnk"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x264 [0082.203] GetFileType (hFile=0x264) returned 0x1 [0082.203] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e508) returned 1 [0082.203] GetFileType (hFile=0x264) returned 0x1 [0082.203] WriteFile (in: hFile=0x264, lpBuffer=0x27e7234*, nNumberOfBytesToWrite=0xeb0, lpNumberOfBytesWritten=0x31e59c, lpOverlapped=0x0 | out: lpBuffer=0x27e7234*, lpNumberOfBytesWritten=0x31e59c*=0xeb0, lpOverlapped=0x0) returned 1 [0082.204] CloseHandle (hObject=0x264) returned 1 [0082.204] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\PVyCWCHH.mkv.lnk", nBufferLength=0x105, lpBuffer=0x31e14c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\PVyCWCHH.mkv.lnk", lpFilePart=0x0) returned 0x57 [0082.204] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\PVyCWCHH.mkv.lnk", nBufferLength=0x105, lpBuffer=0x31e14c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\PVyCWCHH.mkv.lnk", lpFilePart=0x0) returned 0x57 [0082.204] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e5ac) returned 1 [0082.204] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\PVyCWCHH.mkv.lnk" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\windows\\recent\\pvycwchh.mkv.lnk"), fInfoLevelId=0x0, lpFileInformation=0x31e628 | out: lpFileInformation=0x31e628*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xdbe2d4a0, ftCreationTime.dwHighDateTime=0x1d5e82a, ftLastAccessTime.dwLowDateTime=0xdbe2d4a0, ftLastAccessTime.dwHighDateTime=0x1d5e82a, ftLastWriteTime.dwLowDateTime=0x1470d080, ftLastWriteTime.dwHighDateTime=0x1d6eb7f, nFileSizeHigh=0x0, nFileSizeLow=0xeb0)) returned 1 [0082.204] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e5a8) returned 1 [0082.204] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\PVyCWCHH.mkv.lnk" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\windows\\recent\\pvycwchh.mkv.lnk"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\PVyCWCHH.mkv.lnk" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\windows\\recent\\pvycwchh.mkv.lnk")) returned 1 [0082.205] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\q-7-UiG.flv.lnk", nBufferLength=0x105, lpBuffer=0x31e02c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\q-7-UiG.flv.lnk", lpFilePart=0x0) returned 0x56 [0082.205] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e520) returned 1 [0082.205] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\q-7-UiG.flv.lnk" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\windows\\recent\\q-7-uig.flv.lnk"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x264 [0082.205] GetFileType (hFile=0x264) returned 0x1 [0082.205] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e51c) returned 1 [0082.205] GetFileType (hFile=0x264) returned 0x1 [0082.205] GetFileSize (in: hFile=0x264, lpFileSizeHigh=0x31e628 | out: lpFileSizeHigh=0x31e628*=0x0) returned 0x9b3 [0082.205] ReadFile (in: hFile=0x264, lpBuffer=0x27e8ed4, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x31e5d4, lpOverlapped=0x0 | out: lpBuffer=0x27e8ed4*, lpNumberOfBytesRead=0x31e5d4*=0x9b3, lpOverlapped=0x0) returned 1 [0082.206] CloseHandle (hObject=0x264) returned 1 [0082.219] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\q-7-UiG.flv.lnk", nBufferLength=0x105, lpBuffer=0x31e018, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\q-7-UiG.flv.lnk", lpFilePart=0x0) returned 0x56 [0082.219] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e50c) returned 1 [0082.220] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\q-7-UiG.flv.lnk" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\windows\\recent\\q-7-uig.flv.lnk"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x264 [0082.220] GetFileType (hFile=0x264) returned 0x1 [0082.220] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e508) returned 1 [0082.220] GetFileType (hFile=0x264) returned 0x1 [0082.220] WriteFile (in: hFile=0x264, lpBuffer=0x2839ed8*, nNumberOfBytesToWrite=0x9c0, lpNumberOfBytesWritten=0x31e59c, lpOverlapped=0x0 | out: lpBuffer=0x2839ed8*, lpNumberOfBytesWritten=0x31e59c*=0x9c0, lpOverlapped=0x0) returned 1 [0082.224] CloseHandle (hObject=0x264) returned 1 [0082.224] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\q-7-UiG.flv.lnk", nBufferLength=0x105, lpBuffer=0x31e14c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\q-7-UiG.flv.lnk", lpFilePart=0x0) returned 0x56 [0082.224] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\q-7-UiG.flv.lnk", nBufferLength=0x105, lpBuffer=0x31e14c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\q-7-UiG.flv.lnk", lpFilePart=0x0) returned 0x56 [0082.224] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e5ac) returned 1 [0082.224] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\q-7-UiG.flv.lnk" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\windows\\recent\\q-7-uig.flv.lnk"), fInfoLevelId=0x0, lpFileInformation=0x31e628 | out: lpFileInformation=0x31e628*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xdce8abe0, ftCreationTime.dwHighDateTime=0x1d5e82a, ftLastAccessTime.dwLowDateTime=0xdce8abe0, ftLastAccessTime.dwHighDateTime=0x1d5e82a, ftLastWriteTime.dwLowDateTime=0x147331e0, ftLastWriteTime.dwHighDateTime=0x1d6eb7f, nFileSizeHigh=0x0, nFileSizeLow=0x9c0)) returned 1 [0082.224] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e5a8) returned 1 [0082.224] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\q-7-UiG.flv.lnk" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\windows\\recent\\q-7-uig.flv.lnk"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\q-7-UiG.flv.lnk" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\windows\\recent\\q-7-uig.flv.lnk")) returned 1 [0082.225] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\qAXggmD1LKlgDc4Js.lnk", nBufferLength=0x105, lpBuffer=0x31e02c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\qAXggmD1LKlgDc4Js.lnk", lpFilePart=0x0) returned 0x5c [0082.225] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e520) returned 1 [0082.225] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\qAXggmD1LKlgDc4Js.lnk" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\windows\\recent\\qaxggmd1lklgdc4js.lnk"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x264 [0082.225] GetFileType (hFile=0x264) returned 0x1 [0082.225] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e51c) returned 1 [0082.225] GetFileType (hFile=0x264) returned 0x1 [0082.225] GetFileSize (in: hFile=0x264, lpFileSizeHigh=0x31e628 | out: lpFileSizeHigh=0x31e628*=0x0) returned 0xeba [0082.225] ReadFile (in: hFile=0x264, lpBuffer=0x283c098, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x31e5d4, lpOverlapped=0x0 | out: lpBuffer=0x283c098*, lpNumberOfBytesRead=0x31e5d4*=0xeba, lpOverlapped=0x0) returned 1 [0082.226] CloseHandle (hObject=0x264) returned 1 [0082.278] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\qAXggmD1LKlgDc4Js.lnk", nBufferLength=0x105, lpBuffer=0x31e018, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\qAXggmD1LKlgDc4Js.lnk", lpFilePart=0x0) returned 0x5c [0082.278] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e50c) returned 1 [0082.278] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\qAXggmD1LKlgDc4Js.lnk" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\windows\\recent\\qaxggmd1lklgdc4js.lnk"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x264 [0082.279] GetFileType (hFile=0x264) returned 0x1 [0082.279] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e508) returned 1 [0082.279] GetFileType (hFile=0x264) returned 0x1 [0082.279] WriteFile (in: hFile=0x264, lpBuffer=0x268dd18*, nNumberOfBytesToWrite=0xec0, lpNumberOfBytesWritten=0x31e59c, lpOverlapped=0x0 | out: lpBuffer=0x268dd18*, lpNumberOfBytesWritten=0x31e59c*=0xec0, lpOverlapped=0x0) returned 1 [0082.280] CloseHandle (hObject=0x264) returned 1 [0082.280] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\qAXggmD1LKlgDc4Js.lnk", nBufferLength=0x105, lpBuffer=0x31e14c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\qAXggmD1LKlgDc4Js.lnk", lpFilePart=0x0) returned 0x5c [0082.280] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\qAXggmD1LKlgDc4Js.lnk", nBufferLength=0x105, lpBuffer=0x31e14c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\qAXggmD1LKlgDc4Js.lnk", lpFilePart=0x0) returned 0x5c [0082.280] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e5ac) returned 1 [0082.281] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\qAXggmD1LKlgDc4Js.lnk" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\windows\\recent\\qaxggmd1lklgdc4js.lnk"), fInfoLevelId=0x0, lpFileInformation=0x31e628 | out: lpFileInformation=0x31e628*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xdd0ec1e0, ftCreationTime.dwHighDateTime=0x1d5e82a, ftLastAccessTime.dwLowDateTime=0xdd53c9c0, ftLastAccessTime.dwHighDateTime=0x1d5e82a, ftLastWriteTime.dwLowDateTime=0x147cb760, ftLastWriteTime.dwHighDateTime=0x1d6eb7f, nFileSizeHigh=0x0, nFileSizeLow=0xec0)) returned 1 [0082.281] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e5a8) returned 1 [0082.281] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\qAXggmD1LKlgDc4Js.lnk" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\windows\\recent\\qaxggmd1lklgdc4js.lnk"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\qAXggmD1LKlgDc4Js.lnk" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\windows\\recent\\qaxggmd1lklgdc4js.lnk")) returned 1 [0082.281] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\QIviB1J8S42yLfp.lnk", nBufferLength=0x105, lpBuffer=0x31e02c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\QIviB1J8S42yLfp.lnk", lpFilePart=0x0) returned 0x5a [0082.281] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e520) returned 1 [0082.281] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\QIviB1J8S42yLfp.lnk" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\windows\\recent\\qivib1j8s42ylfp.lnk"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x264 [0082.282] GetFileType (hFile=0x264) returned 0x1 [0082.282] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e51c) returned 1 [0082.282] GetFileType (hFile=0x264) returned 0x1 [0082.282] GetFileSize (in: hFile=0x264, lpFileSizeHigh=0x31e628 | out: lpFileSizeHigh=0x31e628*=0x0) returned 0xf2d [0082.282] ReadFile (in: hFile=0x264, lpBuffer=0x268ff5c, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x31e5d4, lpOverlapped=0x0 | out: lpBuffer=0x268ff5c*, lpNumberOfBytesRead=0x31e5d4*=0xf2d, lpOverlapped=0x0) returned 1 [0082.282] CloseHandle (hObject=0x264) returned 1 [0082.296] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\QIviB1J8S42yLfp.lnk", nBufferLength=0x105, lpBuffer=0x31e018, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\QIviB1J8S42yLfp.lnk", lpFilePart=0x0) returned 0x5a [0082.296] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e50c) returned 1 [0082.296] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\QIviB1J8S42yLfp.lnk" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\windows\\recent\\qivib1j8s42ylfp.lnk"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x264 [0082.297] GetFileType (hFile=0x264) returned 0x1 [0082.297] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e508) returned 1 [0082.297] GetFileType (hFile=0x264) returned 0x1 [0082.297] WriteFile (in: hFile=0x264, lpBuffer=0x26e2bf0*, nNumberOfBytesToWrite=0xf30, lpNumberOfBytesWritten=0x31e59c, lpOverlapped=0x0 | out: lpBuffer=0x26e2bf0*, lpNumberOfBytesWritten=0x31e59c*=0xf30, lpOverlapped=0x0) returned 1 [0082.298] CloseHandle (hObject=0x264) returned 1 [0082.298] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\QIviB1J8S42yLfp.lnk", nBufferLength=0x105, lpBuffer=0x31e14c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\QIviB1J8S42yLfp.lnk", lpFilePart=0x0) returned 0x5a [0082.298] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\QIviB1J8S42yLfp.lnk", nBufferLength=0x105, lpBuffer=0x31e14c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\QIviB1J8S42yLfp.lnk", lpFilePart=0x0) returned 0x5a [0082.298] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e5ac) returned 1 [0082.298] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\QIviB1J8S42yLfp.lnk" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\windows\\recent\\qivib1j8s42ylfp.lnk"), fInfoLevelId=0x0, lpFileInformation=0x31e628 | out: lpFileInformation=0x31e628*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xdd0079a0, ftCreationTime.dwHighDateTime=0x1d5e82a, ftLastAccessTime.dwLowDateTime=0xdd373940, ftLastAccessTime.dwHighDateTime=0x1d5e82a, ftLastWriteTime.dwLowDateTime=0x147f18c0, ftLastWriteTime.dwHighDateTime=0x1d6eb7f, nFileSizeHigh=0x0, nFileSizeLow=0xf30)) returned 1 [0082.298] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e5a8) returned 1 [0082.298] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\QIviB1J8S42yLfp.lnk" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\windows\\recent\\qivib1j8s42ylfp.lnk"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\QIviB1J8S42yLfp.lnk" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\windows\\recent\\qivib1j8s42ylfp.lnk")) returned 1 [0082.299] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\QKe_6XpG.lnk", nBufferLength=0x105, lpBuffer=0x31e02c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\QKe_6XpG.lnk", lpFilePart=0x0) returned 0x53 [0082.299] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e520) returned 1 [0082.299] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\QKe_6XpG.lnk" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\windows\\recent\\qke_6xpg.lnk"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x264 [0082.299] GetFileType (hFile=0x264) returned 0x1 [0082.299] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e51c) returned 1 [0082.299] GetFileType (hFile=0x264) returned 0x1 [0082.299] GetFileSize (in: hFile=0x264, lpFileSizeHigh=0x31e628 | out: lpFileSizeHigh=0x31e628*=0x0) returned 0x239 [0082.299] ReadFile (in: hFile=0x264, lpBuffer=0x26e411c, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x31e5d4, lpOverlapped=0x0 | out: lpBuffer=0x26e411c*, lpNumberOfBytesRead=0x31e5d4*=0x239, lpOverlapped=0x0) returned 1 [0082.300] CloseHandle (hObject=0x264) returned 1 [0082.313] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\QKe_6XpG.lnk", nBufferLength=0x105, lpBuffer=0x31e018, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\QKe_6XpG.lnk", lpFilePart=0x0) returned 0x53 [0082.314] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e50c) returned 1 [0082.314] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\QKe_6XpG.lnk" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\windows\\recent\\qke_6xpg.lnk"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x264 [0082.314] GetFileType (hFile=0x264) returned 0x1 [0082.314] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e508) returned 1 [0082.315] GetFileType (hFile=0x264) returned 0x1 [0082.315] WriteFile (in: hFile=0x264, lpBuffer=0x2732b8c*, nNumberOfBytesToWrite=0x240, lpNumberOfBytesWritten=0x31e59c, lpOverlapped=0x0 | out: lpBuffer=0x2732b8c*, lpNumberOfBytesWritten=0x31e59c*=0x240, lpOverlapped=0x0) returned 1 [0082.315] CloseHandle (hObject=0x264) returned 1 [0082.315] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\QKe_6XpG.lnk", nBufferLength=0x105, lpBuffer=0x31e14c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\QKe_6XpG.lnk", lpFilePart=0x0) returned 0x53 [0082.316] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\QKe_6XpG.lnk", nBufferLength=0x105, lpBuffer=0x31e14c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\QKe_6XpG.lnk", lpFilePart=0x0) returned 0x53 [0082.316] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e5ac) returned 1 [0082.316] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\QKe_6XpG.lnk" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\windows\\recent\\qke_6xpg.lnk"), fInfoLevelId=0x0, lpFileInformation=0x31e628 | out: lpFileInformation=0x31e628*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xdc127020, ftCreationTime.dwHighDateTime=0x1d5e82a, ftLastAccessTime.dwLowDateTime=0xdc127020, ftLastAccessTime.dwHighDateTime=0x1d5e82a, ftLastWriteTime.dwLowDateTime=0x14817a20, ftLastWriteTime.dwHighDateTime=0x1d6eb7f, nFileSizeHigh=0x0, nFileSizeLow=0x240)) returned 1 [0082.316] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e5a8) returned 1 [0082.316] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\QKe_6XpG.lnk" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\windows\\recent\\qke_6xpg.lnk"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\QKe_6XpG.lnk" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\windows\\recent\\qke_6xpg.lnk")) returned 1 [0082.316] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\Qq6wMGqMzL.lnk", nBufferLength=0x105, lpBuffer=0x31e02c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\Qq6wMGqMzL.lnk", lpFilePart=0x0) returned 0x55 [0082.316] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e520) returned 1 [0082.316] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\Qq6wMGqMzL.lnk" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\windows\\recent\\qq6wmgqmzl.lnk"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x264 [0082.317] GetFileType (hFile=0x264) returned 0x1 [0082.317] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e51c) returned 1 [0082.317] GetFileType (hFile=0x264) returned 0x1 [0082.317] GetFileSize (in: hFile=0x264, lpFileSizeHigh=0x31e628 | out: lpFileSizeHigh=0x31e628*=0x0) returned 0x248 [0082.317] ReadFile (in: hFile=0x264, lpBuffer=0x27340ac, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x31e5d4, lpOverlapped=0x0 | out: lpBuffer=0x27340ac*, lpNumberOfBytesRead=0x31e5d4*=0x248, lpOverlapped=0x0) returned 1 [0082.317] CloseHandle (hObject=0x264) returned 1 [0082.331] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\Qq6wMGqMzL.lnk", nBufferLength=0x105, lpBuffer=0x31e018, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\Qq6wMGqMzL.lnk", lpFilePart=0x0) returned 0x55 [0082.331] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e50c) returned 1 [0082.331] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\Qq6wMGqMzL.lnk" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\windows\\recent\\qq6wmgqmzl.lnk"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x264 [0082.332] GetFileType (hFile=0x264) returned 0x1 [0082.332] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e508) returned 1 [0082.332] GetFileType (hFile=0x264) returned 0x1 [0082.332] WriteFile (in: hFile=0x264, lpBuffer=0x2782b74*, nNumberOfBytesToWrite=0x250, lpNumberOfBytesWritten=0x31e59c, lpOverlapped=0x0 | out: lpBuffer=0x2782b74*, lpNumberOfBytesWritten=0x31e59c*=0x250, lpOverlapped=0x0) returned 1 [0082.334] CloseHandle (hObject=0x264) returned 1 [0082.334] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\Qq6wMGqMzL.lnk", nBufferLength=0x105, lpBuffer=0x31e14c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\Qq6wMGqMzL.lnk", lpFilePart=0x0) returned 0x55 [0082.334] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\Qq6wMGqMzL.lnk", nBufferLength=0x105, lpBuffer=0x31e14c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\Qq6wMGqMzL.lnk", lpFilePart=0x0) returned 0x55 [0082.334] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e5ac) returned 1 [0082.334] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\Qq6wMGqMzL.lnk" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\windows\\recent\\qq6wmgqmzl.lnk"), fInfoLevelId=0x0, lpFileInformation=0x31e628 | out: lpFileInformation=0x31e628*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xdd3e5d60, ftCreationTime.dwHighDateTime=0x1d5e82a, ftLastAccessTime.dwLowDateTime=0xdd3e5d60, ftLastAccessTime.dwHighDateTime=0x1d5e82a, ftLastWriteTime.dwLowDateTime=0x1483db80, ftLastWriteTime.dwHighDateTime=0x1d6eb7f, nFileSizeHigh=0x0, nFileSizeLow=0x250)) returned 1 [0082.335] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e5a8) returned 1 [0082.335] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\Qq6wMGqMzL.lnk" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\windows\\recent\\qq6wmgqmzl.lnk"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\Qq6wMGqMzL.lnk" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\windows\\recent\\qq6wmgqmzl.lnk")) returned 1 [0082.335] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\qqLhydztItrIGc3q_E.lnk", nBufferLength=0x105, lpBuffer=0x31e02c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\qqLhydztItrIGc3q_E.lnk", lpFilePart=0x0) returned 0x5d [0082.335] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e520) returned 1 [0082.335] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\qqLhydztItrIGc3q_E.lnk" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\windows\\recent\\qqlhydztitrigc3q_e.lnk"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x264 [0082.335] GetFileType (hFile=0x264) returned 0x1 [0082.335] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e51c) returned 1 [0082.336] GetFileType (hFile=0x264) returned 0x1 [0082.336] GetFileSize (in: hFile=0x264, lpFileSizeHigh=0x31e628 | out: lpFileSizeHigh=0x31e628*=0x0) returned 0xec9 [0082.336] ReadFile (in: hFile=0x264, lpBuffer=0x2784d40, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x31e5d4, lpOverlapped=0x0 | out: lpBuffer=0x2784d40*, lpNumberOfBytesRead=0x31e5d4*=0xec9, lpOverlapped=0x0) returned 1 [0082.336] CloseHandle (hObject=0x264) returned 1 [0082.350] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\qqLhydztItrIGc3q_E.lnk", nBufferLength=0x105, lpBuffer=0x31e018, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\qqLhydztItrIGc3q_E.lnk", lpFilePart=0x0) returned 0x5d [0082.350] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e50c) returned 1 [0082.350] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\qqLhydztItrIGc3q_E.lnk" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\windows\\recent\\qqlhydztitrigc3q_e.lnk"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x264 [0082.351] GetFileType (hFile=0x264) returned 0x1 [0082.351] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e508) returned 1 [0082.351] GetFileType (hFile=0x264) returned 0x1 [0082.351] WriteFile (in: hFile=0x264, lpBuffer=0x27d76a8*, nNumberOfBytesToWrite=0xed0, lpNumberOfBytesWritten=0x31e59c, lpOverlapped=0x0 | out: lpBuffer=0x27d76a8*, lpNumberOfBytesWritten=0x31e59c*=0xed0, lpOverlapped=0x0) returned 1 [0082.352] CloseHandle (hObject=0x264) returned 1 [0082.352] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\qqLhydztItrIGc3q_E.lnk", nBufferLength=0x105, lpBuffer=0x31e14c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\qqLhydztItrIGc3q_E.lnk", lpFilePart=0x0) returned 0x5d [0082.353] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\qqLhydztItrIGc3q_E.lnk", nBufferLength=0x105, lpBuffer=0x31e14c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\qqLhydztItrIGc3q_E.lnk", lpFilePart=0x0) returned 0x5d [0082.353] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e5ac) returned 1 [0082.353] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\qqLhydztItrIGc3q_E.lnk" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\windows\\recent\\qqlhydztitrigc3q_e.lnk"), fInfoLevelId=0x0, lpFileInformation=0x31e628 | out: lpFileInformation=0x31e628*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xdb7edae0, ftCreationTime.dwHighDateTime=0x1d5e82a, ftLastAccessTime.dwLowDateTime=0xdd3e5d60, ftLastAccessTime.dwHighDateTime=0x1d5e82a, ftLastWriteTime.dwLowDateTime=0x14863ce0, ftLastWriteTime.dwHighDateTime=0x1d6eb7f, nFileSizeHigh=0x0, nFileSizeLow=0xed0)) returned 1 [0082.353] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e5a8) returned 1 [0082.353] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\qqLhydztItrIGc3q_E.lnk" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\windows\\recent\\qqlhydztitrigc3q_e.lnk"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\qqLhydztItrIGc3q_E.lnk" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\windows\\recent\\qqlhydztitrigc3q_e.lnk")) returned 1 [0082.354] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\qVjfxVr.mkv.lnk", nBufferLength=0x105, lpBuffer=0x31e02c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\qVjfxVr.mkv.lnk", lpFilePart=0x0) returned 0x56 [0082.354] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e520) returned 1 [0082.354] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\qVjfxVr.mkv.lnk" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\windows\\recent\\qvjfxvr.mkv.lnk"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x264 [0082.354] GetFileType (hFile=0x264) returned 0x1 [0082.354] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e51c) returned 1 [0082.354] GetFileType (hFile=0x264) returned 0x1 [0082.354] GetFileSize (in: hFile=0x264, lpFileSizeHigh=0x31e628 | out: lpFileSizeHigh=0x31e628*=0x0) returned 0x3e1 [0082.354] ReadFile (in: hFile=0x264, lpBuffer=0x27d8d90, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x31e5d4, lpOverlapped=0x0 | out: lpBuffer=0x27d8d90*, lpNumberOfBytesRead=0x31e5d4*=0x3e1, lpOverlapped=0x0) returned 1 [0082.355] CloseHandle (hObject=0x264) returned 1 [0082.368] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\qVjfxVr.mkv.lnk", nBufferLength=0x105, lpBuffer=0x31e018, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\qVjfxVr.mkv.lnk", lpFilePart=0x0) returned 0x56 [0082.369] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e50c) returned 1 [0082.369] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\qVjfxVr.mkv.lnk" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\windows\\recent\\qvjfxvr.mkv.lnk"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x264 [0082.370] GetFileType (hFile=0x264) returned 0x1 [0082.370] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e508) returned 1 [0082.370] GetFileType (hFile=0x264) returned 0x1 [0082.370] WriteFile (in: hFile=0x264, lpBuffer=0x2828084*, nNumberOfBytesToWrite=0x3f0, lpNumberOfBytesWritten=0x31e59c, lpOverlapped=0x0 | out: lpBuffer=0x2828084*, lpNumberOfBytesWritten=0x31e59c*=0x3f0, lpOverlapped=0x0) returned 1 [0082.371] CloseHandle (hObject=0x264) returned 1 [0082.371] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\qVjfxVr.mkv.lnk", nBufferLength=0x105, lpBuffer=0x31e14c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\qVjfxVr.mkv.lnk", lpFilePart=0x0) returned 0x56 [0082.371] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\qVjfxVr.mkv.lnk", nBufferLength=0x105, lpBuffer=0x31e14c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\qVjfxVr.mkv.lnk", lpFilePart=0x0) returned 0x56 [0082.371] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e5ac) returned 1 [0082.371] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\qVjfxVr.mkv.lnk" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\windows\\recent\\qvjfxvr.mkv.lnk"), fInfoLevelId=0x0, lpFileInformation=0x31e628 | out: lpFileInformation=0x31e628*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xdcd5a0e0, ftCreationTime.dwHighDateTime=0x1d5e82a, ftLastAccessTime.dwLowDateTime=0xdcd5a0e0, ftLastAccessTime.dwHighDateTime=0x1d5e82a, ftLastWriteTime.dwLowDateTime=0x148affa0, ftLastWriteTime.dwHighDateTime=0x1d6eb7f, nFileSizeHigh=0x0, nFileSizeLow=0x3f0)) returned 1 [0082.371] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e5a8) returned 1 [0082.371] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\qVjfxVr.mkv.lnk" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\windows\\recent\\qvjfxvr.mkv.lnk"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\qVjfxVr.mkv.lnk" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\windows\\recent\\qvjfxvr.mkv.lnk")) returned 1 [0082.372] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\qXc5CfQ1VI 7A-Et3.lnk", nBufferLength=0x105, lpBuffer=0x31e02c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\qXc5CfQ1VI 7A-Et3.lnk", lpFilePart=0x0) returned 0x5c [0082.372] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e520) returned 1 [0082.372] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\qXc5CfQ1VI 7A-Et3.lnk" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\windows\\recent\\qxc5cfq1vi 7a-et3.lnk"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x264 [0082.372] GetFileType (hFile=0x264) returned 0x1 [0082.372] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e51c) returned 1 [0082.372] GetFileType (hFile=0x264) returned 0x1 [0082.372] GetFileSize (in: hFile=0x264, lpFileSizeHigh=0x31e628 | out: lpFileSizeHigh=0x31e628*=0x0) returned 0xa64 [0082.372] ReadFile (in: hFile=0x264, lpBuffer=0x2829dec, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x31e5d4, lpOverlapped=0x0 | out: lpBuffer=0x2829dec*, lpNumberOfBytesRead=0x31e5d4*=0xa64, lpOverlapped=0x0) returned 1 [0082.373] CloseHandle (hObject=0x264) returned 1 [0082.415] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\qXc5CfQ1VI 7A-Et3.lnk", nBufferLength=0x105, lpBuffer=0x31e018, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\qXc5CfQ1VI 7A-Et3.lnk", lpFilePart=0x0) returned 0x5c [0082.415] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e50c) returned 1 [0082.415] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\qXc5CfQ1VI 7A-Et3.lnk" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\windows\\recent\\qxc5cfq1vi 7a-et3.lnk"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x264 [0082.416] GetFileType (hFile=0x264) returned 0x1 [0082.416] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e508) returned 1 [0082.416] GetFileType (hFile=0x264) returned 0x1 [0082.416] WriteFile (in: hFile=0x264, lpBuffer=0x267ad00*, nNumberOfBytesToWrite=0xa70, lpNumberOfBytesWritten=0x31e59c, lpOverlapped=0x0 | out: lpBuffer=0x267ad00*, lpNumberOfBytesWritten=0x31e59c*=0xa70, lpOverlapped=0x0) returned 1 [0082.416] CloseHandle (hObject=0x264) returned 1 [0082.417] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\qXc5CfQ1VI 7A-Et3.lnk", nBufferLength=0x105, lpBuffer=0x31e14c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\qXc5CfQ1VI 7A-Et3.lnk", lpFilePart=0x0) returned 0x5c [0082.417] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\qXc5CfQ1VI 7A-Et3.lnk", nBufferLength=0x105, lpBuffer=0x31e14c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\qXc5CfQ1VI 7A-Et3.lnk", lpFilePart=0x0) returned 0x5c [0082.417] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e5ac) returned 1 [0082.417] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\qXc5CfQ1VI 7A-Et3.lnk" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\windows\\recent\\qxc5cfq1vi 7a-et3.lnk"), fInfoLevelId=0x0, lpFileInformation=0x31e628 | out: lpFileInformation=0x31e628*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xdd112340, ftCreationTime.dwHighDateTime=0x1d5e82a, ftLastAccessTime.dwLowDateTime=0xdd112340, ftLastAccessTime.dwHighDateTime=0x1d5e82a, ftLastWriteTime.dwLowDateTime=0x149223c0, ftLastWriteTime.dwHighDateTime=0x1d6eb7f, nFileSizeHigh=0x0, nFileSizeLow=0xa70)) returned 1 [0082.417] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e5a8) returned 1 [0082.417] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\qXc5CfQ1VI 7A-Et3.lnk" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\windows\\recent\\qxc5cfq1vi 7a-et3.lnk"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\qXc5CfQ1VI 7A-Et3.lnk" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\windows\\recent\\qxc5cfq1vi 7a-et3.lnk")) returned 1 [0082.417] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\qZqQJke.lnk", nBufferLength=0x105, lpBuffer=0x31e02c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\qZqQJke.lnk", lpFilePart=0x0) returned 0x52 [0082.417] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e520) returned 1 [0082.417] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\qZqQJke.lnk" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\windows\\recent\\qzqqjke.lnk"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x264 [0082.418] GetFileType (hFile=0x264) returned 0x1 [0082.418] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e51c) returned 1 [0082.418] GetFileType (hFile=0x264) returned 0x1 [0082.418] GetFileSize (in: hFile=0x264, lpFileSizeHigh=0x31e628 | out: lpFileSizeHigh=0x31e628*=0x0) returned 0xe82 [0082.418] ReadFile (in: hFile=0x264, lpBuffer=0x267ce78, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x31e5d4, lpOverlapped=0x0 | out: lpBuffer=0x267ce78*, lpNumberOfBytesRead=0x31e5d4*=0xe82, lpOverlapped=0x0) returned 1 [0082.419] CloseHandle (hObject=0x264) returned 1 [0082.432] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\qZqQJke.lnk", nBufferLength=0x105, lpBuffer=0x31e018, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\qZqQJke.lnk", lpFilePart=0x0) returned 0x52 [0082.432] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e50c) returned 1 [0082.432] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\qZqQJke.lnk" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\windows\\recent\\qzqqjke.lnk"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x264 [0082.433] GetFileType (hFile=0x264) returned 0x1 [0082.433] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e508) returned 1 [0082.433] GetFileType (hFile=0x264) returned 0x1 [0082.433] WriteFile (in: hFile=0x264, lpBuffer=0x26cf7d8*, nNumberOfBytesToWrite=0xe90, lpNumberOfBytesWritten=0x31e59c, lpOverlapped=0x0 | out: lpBuffer=0x26cf7d8*, lpNumberOfBytesWritten=0x31e59c*=0xe90, lpOverlapped=0x0) returned 1 [0082.435] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\qZqQJke.lnk", nBufferLength=0x105, lpBuffer=0x31e14c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\qZqQJke.lnk", lpFilePart=0x0) returned 0x52 [0082.435] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\qZqQJke.lnk", nBufferLength=0x105, lpBuffer=0x31e14c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\qZqQJke.lnk", lpFilePart=0x0) returned 0x52 [0082.435] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e5ac) returned 1 [0082.435] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\qZqQJke.lnk" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\windows\\recent\\qzqqjke.lnk"), fInfoLevelId=0x0, lpFileInformation=0x31e628 | out: lpFileInformation=0x31e628*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xdca3a400, ftCreationTime.dwHighDateTime=0x1d5e82a, ftLastAccessTime.dwLowDateTime=0xdd705a40, ftLastAccessTime.dwHighDateTime=0x1d5e82a, ftLastWriteTime.dwLowDateTime=0x14948520, ftLastWriteTime.dwHighDateTime=0x1d6eb7f, nFileSizeHigh=0x0, nFileSizeLow=0xe90)) returned 1 [0082.435] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e5a8) returned 1 [0082.435] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\qZqQJke.lnk" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\windows\\recent\\qzqqjke.lnk"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\qZqQJke.lnk" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\windows\\recent\\qzqqjke.lnk")) returned 1 [0082.436] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\r M9y9TQ8L-H.lnk", nBufferLength=0x105, lpBuffer=0x31e02c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\r M9y9TQ8L-H.lnk", lpFilePart=0x0) returned 0x57 [0082.436] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e520) returned 1 [0082.436] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\r M9y9TQ8L-H.lnk" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\windows\\recent\\r m9y9tq8l-h.lnk"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x264 [0082.436] GetFileType (hFile=0x264) returned 0x1 [0082.436] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e51c) returned 1 [0082.436] GetFileType (hFile=0x264) returned 0x1 [0082.436] GetFileSize (in: hFile=0x264, lpFileSizeHigh=0x31e628 | out: lpFileSizeHigh=0x31e628*=0x0) returned 0x1a85 [0082.436] ReadFile (in: hFile=0x264, lpBuffer=0x26d0aac, nNumberOfBytesToRead=0x1a85, lpNumberOfBytesRead=0x31e5d4, lpOverlapped=0x0 | out: lpBuffer=0x26d0aac*, lpNumberOfBytesRead=0x31e5d4*=0x1a85, lpOverlapped=0x0) returned 1 [0082.464] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\r M9y9TQ8L-H.lnk", nBufferLength=0x105, lpBuffer=0x31e018, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\r M9y9TQ8L-H.lnk", lpFilePart=0x0) returned 0x57 [0082.464] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e50c) returned 1 [0082.464] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\r M9y9TQ8L-H.lnk" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\windows\\recent\\r m9y9tq8l-h.lnk"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x264 [0082.467] GetFileType (hFile=0x264) returned 0x1 [0082.467] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e508) returned 1 [0082.467] GetFileType (hFile=0x264) returned 0x1 [0082.467] WriteFile (in: hFile=0x264, lpBuffer=0x2725d64*, nNumberOfBytesToWrite=0x1a90, lpNumberOfBytesWritten=0x31e5c8, lpOverlapped=0x0 | out: lpBuffer=0x2725d64*, lpNumberOfBytesWritten=0x31e5c8*=0x1a90, lpOverlapped=0x0) returned 1 [0082.469] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\r M9y9TQ8L-H.lnk", nBufferLength=0x105, lpBuffer=0x31e14c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\r M9y9TQ8L-H.lnk", lpFilePart=0x0) returned 0x57 [0082.469] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\r M9y9TQ8L-H.lnk", nBufferLength=0x105, lpBuffer=0x31e14c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\r M9y9TQ8L-H.lnk", lpFilePart=0x0) returned 0x57 [0082.469] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e5ac) returned 1 [0082.469] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\r M9y9TQ8L-H.lnk" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\windows\\recent\\r m9y9tq8l-h.lnk"), fInfoLevelId=0x0, lpFileInformation=0x31e628 | out: lpFileInformation=0x31e628*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xdba28f80, ftCreationTime.dwHighDateTime=0x1d5e82a, ftLastAccessTime.dwLowDateTime=0xdd47e2e0, ftLastAccessTime.dwHighDateTime=0x1d5e82a, ftLastWriteTime.dwLowDateTime=0x149947e0, ftLastWriteTime.dwHighDateTime=0x1d6eb7f, nFileSizeHigh=0x0, nFileSizeLow=0x1a90)) returned 1 [0082.469] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e5a8) returned 1 [0082.469] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\r M9y9TQ8L-H.lnk" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\windows\\recent\\r m9y9tq8l-h.lnk"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\r M9y9TQ8L-H.lnk" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\windows\\recent\\r m9y9tq8l-h.lnk")) returned 1 [0082.471] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\r7hjDl5.lnk", nBufferLength=0x105, lpBuffer=0x31e02c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\r7hjDl5.lnk", lpFilePart=0x0) returned 0x52 [0082.471] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e520) returned 1 [0082.471] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\r7hjDl5.lnk" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\windows\\recent\\r7hjdl5.lnk"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x264 [0082.471] GetFileType (hFile=0x264) returned 0x1 [0082.471] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e51c) returned 1 [0082.471] GetFileType (hFile=0x264) returned 0x1 [0082.471] GetFileSize (in: hFile=0x264, lpFileSizeHigh=0x31e628 | out: lpFileSizeHigh=0x31e628*=0x0) returned 0x2ca [0082.471] ReadFile (in: hFile=0x264, lpBuffer=0x2727ee4, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x31e5d4, lpOverlapped=0x0 | out: lpBuffer=0x2727ee4*, lpNumberOfBytesRead=0x31e5d4*=0x2ca, lpOverlapped=0x0) returned 1 [0082.486] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\r7hjDl5.lnk", nBufferLength=0x105, lpBuffer=0x31e018, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\r7hjDl5.lnk", lpFilePart=0x0) returned 0x52 [0082.486] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e50c) returned 1 [0082.486] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\r7hjDl5.lnk" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\windows\\recent\\r7hjdl5.lnk"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x264 [0082.487] GetFileType (hFile=0x264) returned 0x1 [0082.487] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e508) returned 1 [0082.487] GetFileType (hFile=0x264) returned 0x1 [0082.487] WriteFile (in: hFile=0x264, lpBuffer=0x2776c20*, nNumberOfBytesToWrite=0x2d0, lpNumberOfBytesWritten=0x31e59c, lpOverlapped=0x0 | out: lpBuffer=0x2776c20*, lpNumberOfBytesWritten=0x31e59c*=0x2d0, lpOverlapped=0x0) returned 1 [0082.488] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\r7hjDl5.lnk", nBufferLength=0x105, lpBuffer=0x31e14c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\r7hjDl5.lnk", lpFilePart=0x0) returned 0x52 [0082.488] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\r7hjDl5.lnk", nBufferLength=0x105, lpBuffer=0x31e14c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\r7hjDl5.lnk", lpFilePart=0x0) returned 0x52 [0082.488] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e5ac) returned 1 [0082.488] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\r7hjDl5.lnk" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\windows\\recent\\r7hjdl5.lnk"), fInfoLevelId=0x0, lpFileInformation=0x31e628 | out: lpFileInformation=0x31e628*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xdcb91060, ftCreationTime.dwHighDateTime=0x1d5e82a, ftLastAccessTime.dwLowDateTime=0xdcb91060, ftLastAccessTime.dwHighDateTime=0x1d5e82a, ftLastWriteTime.dwLowDateTime=0x149ba940, ftLastWriteTime.dwHighDateTime=0x1d6eb7f, nFileSizeHigh=0x0, nFileSizeLow=0x2d0)) returned 1 [0082.488] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e5a8) returned 1 [0082.488] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\r7hjDl5.lnk" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\windows\\recent\\r7hjdl5.lnk"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\r7hjDl5.lnk" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\windows\\recent\\r7hjdl5.lnk")) returned 1 [0082.489] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\r8aQr.lnk", nBufferLength=0x105, lpBuffer=0x31e02c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\r8aQr.lnk", lpFilePart=0x0) returned 0x50 [0082.489] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e520) returned 1 [0082.489] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\r8aQr.lnk" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\windows\\recent\\r8aqr.lnk"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x264 [0082.489] GetFileType (hFile=0x264) returned 0x1 [0082.489] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e51c) returned 1 [0082.489] GetFileType (hFile=0x264) returned 0x1 [0082.489] GetFileSize (in: hFile=0x264, lpFileSizeHigh=0x31e628 | out: lpFileSizeHigh=0x31e628*=0x0) returned 0x1a0e [0082.489] ReadFile (in: hFile=0x264, lpBuffer=0x2777ed8, nNumberOfBytesToRead=0x1a0e, lpNumberOfBytesRead=0x31e5d4, lpOverlapped=0x0 | out: lpBuffer=0x2777ed8*, lpNumberOfBytesRead=0x31e5d4*=0x1a0e, lpOverlapped=0x0) returned 1 [0082.505] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\r8aQr.lnk", nBufferLength=0x105, lpBuffer=0x31e018, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\r8aQr.lnk", lpFilePart=0x0) returned 0x50 [0082.505] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e50c) returned 1 [0082.505] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\r8aQr.lnk" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\windows\\recent\\r8aqr.lnk"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x264 [0082.506] GetFileType (hFile=0x264) returned 0x1 [0082.506] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e508) returned 1 [0082.506] GetFileType (hFile=0x264) returned 0x1 [0082.506] WriteFile (in: hFile=0x264, lpBuffer=0x27ccf10*, nNumberOfBytesToWrite=0x1a10, lpNumberOfBytesWritten=0x31e5c8, lpOverlapped=0x0 | out: lpBuffer=0x27ccf10*, lpNumberOfBytesWritten=0x31e5c8*=0x1a10, lpOverlapped=0x0) returned 1 [0082.507] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\r8aQr.lnk", nBufferLength=0x105, lpBuffer=0x31e14c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\r8aQr.lnk", lpFilePart=0x0) returned 0x50 [0082.507] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\r8aQr.lnk", nBufferLength=0x105, lpBuffer=0x31e14c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\r8aQr.lnk", lpFilePart=0x0) returned 0x50 [0082.507] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e5ac) returned 1 [0082.507] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\r8aQr.lnk" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\windows\\recent\\r8aqr.lnk"), fInfoLevelId=0x0, lpFileInformation=0x31e628 | out: lpFileInformation=0x31e628*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xdc6ce460, ftCreationTime.dwHighDateTime=0x1d5e82a, ftLastAccessTime.dwLowDateTime=0xdc6ce460, ftLastAccessTime.dwHighDateTime=0x1d5e82a, ftLastWriteTime.dwLowDateTime=0x149e0aa0, ftLastWriteTime.dwHighDateTime=0x1d6eb7f, nFileSizeHigh=0x0, nFileSizeLow=0x1a10)) returned 1 [0082.508] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e5a8) returned 1 [0082.508] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\r8aQr.lnk" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\windows\\recent\\r8aqr.lnk"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\r8aQr.lnk" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\windows\\recent\\r8aqr.lnk")) returned 1 [0082.508] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\R9y47OQ.mkv.lnk", nBufferLength=0x105, lpBuffer=0x31e02c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\R9y47OQ.mkv.lnk", lpFilePart=0x0) returned 0x56 [0082.508] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e520) returned 1 [0082.508] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\R9y47OQ.mkv.lnk" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\windows\\recent\\r9y47oq.mkv.lnk"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x264 [0082.508] GetFileType (hFile=0x264) returned 0x1 [0082.508] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e51c) returned 1 [0082.508] GetFileType (hFile=0x264) returned 0x1 [0082.509] GetFileSize (in: hFile=0x264, lpFileSizeHigh=0x31e628 | out: lpFileSizeHigh=0x31e628*=0x0) returned 0xedc [0082.509] ReadFile (in: hFile=0x264, lpBuffer=0x27cfbfc, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x31e5d4, lpOverlapped=0x0 | out: lpBuffer=0x27cfbfc*, lpNumberOfBytesRead=0x31e5d4*=0xedc, lpOverlapped=0x0) returned 1 [0082.522] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\R9y47OQ.mkv.lnk", nBufferLength=0x105, lpBuffer=0x31e018, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\R9y47OQ.mkv.lnk", lpFilePart=0x0) returned 0x56 [0082.522] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e50c) returned 1 [0082.523] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\R9y47OQ.mkv.lnk" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\windows\\recent\\r9y47oq.mkv.lnk"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x264 [0082.523] GetFileType (hFile=0x264) returned 0x1 [0082.523] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e508) returned 1 [0082.523] GetFileType (hFile=0x264) returned 0x1 [0082.523] WriteFile (in: hFile=0x264, lpBuffer=0x2822594*, nNumberOfBytesToWrite=0xee0, lpNumberOfBytesWritten=0x31e59c, lpOverlapped=0x0 | out: lpBuffer=0x2822594*, lpNumberOfBytesWritten=0x31e59c*=0xee0, lpOverlapped=0x0) returned 1 [0082.525] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\R9y47OQ.mkv.lnk", nBufferLength=0x105, lpBuffer=0x31e14c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\R9y47OQ.mkv.lnk", lpFilePart=0x0) returned 0x56 [0082.525] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\R9y47OQ.mkv.lnk", nBufferLength=0x105, lpBuffer=0x31e14c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\R9y47OQ.mkv.lnk", lpFilePart=0x0) returned 0x56 [0082.525] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e5ac) returned 1 [0082.525] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\R9y47OQ.mkv.lnk" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\windows\\recent\\r9y47oq.mkv.lnk"), fInfoLevelId=0x0, lpFileInformation=0x31e628 | out: lpFileInformation=0x31e628*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xdd2b5260, ftCreationTime.dwHighDateTime=0x1d5e82a, ftLastAccessTime.dwLowDateTime=0xdd2b5260, ftLastAccessTime.dwHighDateTime=0x1d5e82a, ftLastWriteTime.dwLowDateTime=0x14a2cd60, ftLastWriteTime.dwHighDateTime=0x1d6eb7f, nFileSizeHigh=0x0, nFileSizeLow=0xee0)) returned 1 [0082.525] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e5a8) returned 1 [0082.525] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\R9y47OQ.mkv.lnk" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\windows\\recent\\r9y47oq.mkv.lnk"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\R9y47OQ.mkv.lnk" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\windows\\recent\\r9y47oq.mkv.lnk")) returned 1 [0082.525] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\Roaming.lnk", nBufferLength=0x105, lpBuffer=0x31e02c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\Roaming.lnk", lpFilePart=0x0) returned 0x52 [0082.526] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e520) returned 1 [0082.526] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\Roaming.lnk" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\windows\\recent\\roaming.lnk"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x264 [0082.526] GetFileType (hFile=0x264) returned 0x1 [0082.526] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e51c) returned 1 [0082.526] GetFileType (hFile=0x264) returned 0x1 [0082.526] GetFileSize (in: hFile=0x264, lpFileSizeHigh=0x31e628 | out: lpFileSizeHigh=0x31e628*=0x0) returned 0x303 [0082.526] ReadFile (in: hFile=0x264, lpBuffer=0x2823b74, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x31e5d4, lpOverlapped=0x0 | out: lpBuffer=0x2823b74*, lpNumberOfBytesRead=0x31e5d4*=0x303, lpOverlapped=0x0) returned 1 [0082.573] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\Roaming.lnk", nBufferLength=0x105, lpBuffer=0x31e018, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\Roaming.lnk", lpFilePart=0x0) returned 0x52 [0082.573] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e50c) returned 1 [0082.573] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\Roaming.lnk" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\windows\\recent\\roaming.lnk"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x264 [0082.574] GetFileType (hFile=0x264) returned 0x1 [0082.574] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e508) returned 1 [0082.574] GetFileType (hFile=0x264) returned 0x1 [0082.574] WriteFile (in: hFile=0x264, lpBuffer=0x26722d8*, nNumberOfBytesToWrite=0x310, lpNumberOfBytesWritten=0x31e59c, lpOverlapped=0x0 | out: lpBuffer=0x26722d8*, lpNumberOfBytesWritten=0x31e59c*=0x310, lpOverlapped=0x0) returned 1 [0082.575] CloseHandle (hObject=0x264) returned 1 [0082.575] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\Roaming.lnk", nBufferLength=0x105, lpBuffer=0x31e14c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\Roaming.lnk", lpFilePart=0x0) returned 0x52 [0082.575] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\Roaming.lnk", nBufferLength=0x105, lpBuffer=0x31e14c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\Roaming.lnk", lpFilePart=0x0) returned 0x52 [0082.575] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e5ac) returned 1 [0082.575] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\Roaming.lnk" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\windows\\recent\\roaming.lnk"), fInfoLevelId=0x0, lpFileInformation=0x31e628 | out: lpFileInformation=0x31e628*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xdb64abc0, ftCreationTime.dwHighDateTime=0x1d5e82a, ftLastAccessTime.dwLowDateTime=0xdd693620, ftLastAccessTime.dwHighDateTime=0x1d5e82a, ftLastWriteTime.dwLowDateTime=0x14a9f180, ftLastWriteTime.dwHighDateTime=0x1d6eb7f, nFileSizeHigh=0x0, nFileSizeLow=0x310)) returned 1 [0082.575] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e5a8) returned 1 [0082.575] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\Roaming.lnk" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\windows\\recent\\roaming.lnk"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\Roaming.lnk" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\windows\\recent\\roaming.lnk")) returned 1 [0082.576] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\rQ40SPQ.lnk", nBufferLength=0x105, lpBuffer=0x31e02c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\rQ40SPQ.lnk", lpFilePart=0x0) returned 0x52 [0082.576] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e520) returned 1 [0082.576] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\rQ40SPQ.lnk" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\windows\\recent\\rq40spq.lnk"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x264 [0082.576] GetFileType (hFile=0x264) returned 0x1 [0082.576] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e51c) returned 1 [0082.576] GetFileType (hFile=0x264) returned 0x1 [0082.576] GetFileSize (in: hFile=0x264, lpFileSizeHigh=0x31e628 | out: lpFileSizeHigh=0x31e628*=0x0) returned 0xf6b [0082.576] ReadFile (in: hFile=0x264, lpBuffer=0x2674510, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x31e5d4, lpOverlapped=0x0 | out: lpBuffer=0x2674510*, lpNumberOfBytesRead=0x31e5d4*=0xf6b, lpOverlapped=0x0) returned 1 [0082.577] CloseHandle (hObject=0x264) returned 1 [0082.593] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\rQ40SPQ.lnk", nBufferLength=0x105, lpBuffer=0x31e018, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\rQ40SPQ.lnk", lpFilePart=0x0) returned 0x52 [0082.593] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e50c) returned 1 [0082.593] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\rQ40SPQ.lnk" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\windows\\recent\\rq40spq.lnk"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x264 [0082.594] GetFileType (hFile=0x264) returned 0x1 [0082.594] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e508) returned 1 [0082.594] GetFileType (hFile=0x264) returned 0x1 [0082.594] WriteFile (in: hFile=0x264, lpBuffer=0x26c72c8*, nNumberOfBytesToWrite=0xf70, lpNumberOfBytesWritten=0x31e59c, lpOverlapped=0x0 | out: lpBuffer=0x26c72c8*, lpNumberOfBytesWritten=0x31e59c*=0xf70, lpOverlapped=0x0) returned 1 [0082.595] CloseHandle (hObject=0x264) returned 1 [0082.595] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\rQ40SPQ.lnk", nBufferLength=0x105, lpBuffer=0x31e14c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\rQ40SPQ.lnk", lpFilePart=0x0) returned 0x52 [0082.595] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\rQ40SPQ.lnk", nBufferLength=0x105, lpBuffer=0x31e14c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\rQ40SPQ.lnk", lpFilePart=0x0) returned 0x52 [0082.595] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e5ac) returned 1 [0082.595] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\rQ40SPQ.lnk" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\windows\\recent\\rq40spq.lnk"), fInfoLevelId=0x0, lpFileInformation=0x31e628 | out: lpFileInformation=0x31e628*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xdd399aa0, ftCreationTime.dwHighDateTime=0x1d5e82a, ftLastAccessTime.dwLowDateTime=0xdd399aa0, ftLastAccessTime.dwHighDateTime=0x1d5e82a, ftLastWriteTime.dwLowDateTime=0x14ac52e0, ftLastWriteTime.dwHighDateTime=0x1d6eb7f, nFileSizeHigh=0x0, nFileSizeLow=0xf70)) returned 1 [0082.595] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e5a8) returned 1 [0082.595] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\rQ40SPQ.lnk" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\windows\\recent\\rq40spq.lnk"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\rQ40SPQ.lnk" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\windows\\recent\\rq40spq.lnk")) returned 1 [0082.596] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\RQIFP0AFaRZryGtQ.mkv.lnk", nBufferLength=0x105, lpBuffer=0x31e02c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\RQIFP0AFaRZryGtQ.mkv.lnk", lpFilePart=0x0) returned 0x5f [0082.596] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e520) returned 1 [0082.596] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\RQIFP0AFaRZryGtQ.mkv.lnk" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\windows\\recent\\rqifp0afarzrygtq.mkv.lnk"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x264 [0082.596] GetFileType (hFile=0x264) returned 0x1 [0082.596] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e51c) returned 1 [0082.596] GetFileType (hFile=0x264) returned 0x1 [0082.596] GetFileSize (in: hFile=0x264, lpFileSizeHigh=0x31e628 | out: lpFileSizeHigh=0x31e628*=0x0) returned 0xf47 [0082.596] ReadFile (in: hFile=0x264, lpBuffer=0x26c9510, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x31e5d4, lpOverlapped=0x0 | out: lpBuffer=0x26c9510*, lpNumberOfBytesRead=0x31e5d4*=0xf47, lpOverlapped=0x0) returned 1 [0082.597] CloseHandle (hObject=0x264) returned 1 [0082.610] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\RQIFP0AFaRZryGtQ.mkv.lnk", nBufferLength=0x105, lpBuffer=0x31e018, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\RQIFP0AFaRZryGtQ.mkv.lnk", lpFilePart=0x0) returned 0x5f [0082.611] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e50c) returned 1 [0082.611] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\RQIFP0AFaRZryGtQ.mkv.lnk" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\windows\\recent\\rqifp0afarzrygtq.mkv.lnk"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x264 [0082.611] GetFileType (hFile=0x264) returned 0x1 [0082.611] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e508) returned 1 [0082.611] GetFileType (hFile=0x264) returned 0x1 [0082.612] WriteFile (in: hFile=0x264, lpBuffer=0x271c104*, nNumberOfBytesToWrite=0xf50, lpNumberOfBytesWritten=0x31e59c, lpOverlapped=0x0 | out: lpBuffer=0x271c104*, lpNumberOfBytesWritten=0x31e59c*=0xf50, lpOverlapped=0x0) returned 1 [0082.612] CloseHandle (hObject=0x264) returned 1 [0082.612] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\RQIFP0AFaRZryGtQ.mkv.lnk", nBufferLength=0x105, lpBuffer=0x31e14c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\RQIFP0AFaRZryGtQ.mkv.lnk", lpFilePart=0x0) returned 0x5f [0082.612] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\RQIFP0AFaRZryGtQ.mkv.lnk", nBufferLength=0x105, lpBuffer=0x31e14c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\RQIFP0AFaRZryGtQ.mkv.lnk", lpFilePart=0x0) returned 0x5f [0082.613] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e5ac) returned 1 [0082.613] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\RQIFP0AFaRZryGtQ.mkv.lnk" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\windows\\recent\\rqifp0afarzrygtq.mkv.lnk"), fInfoLevelId=0x0, lpFileInformation=0x31e628 | out: lpFileInformation=0x31e628*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xdc871380, ftCreationTime.dwHighDateTime=0x1d5e82a, ftLastAccessTime.dwLowDateTime=0xdc871380, ftLastAccessTime.dwHighDateTime=0x1d5e82a, ftLastWriteTime.dwLowDateTime=0x14aeb440, ftLastWriteTime.dwHighDateTime=0x1d6eb7f, nFileSizeHigh=0x0, nFileSizeLow=0xf50)) returned 1 [0082.613] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e5a8) returned 1 [0082.613] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\RQIFP0AFaRZryGtQ.mkv.lnk" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\windows\\recent\\rqifp0afarzrygtq.mkv.lnk"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\RQIFP0AFaRZryGtQ.mkv.lnk" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\windows\\recent\\rqifp0afarzrygtq.mkv.lnk")) returned 1 [0082.613] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\ShYapy659.lnk", nBufferLength=0x105, lpBuffer=0x31e02c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\ShYapy659.lnk", lpFilePart=0x0) returned 0x54 [0082.613] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e520) returned 1 [0082.613] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\ShYapy659.lnk" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\windows\\recent\\shyapy659.lnk"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x264 [0082.613] GetFileType (hFile=0x264) returned 0x1 [0082.614] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e51c) returned 1 [0082.614] GetFileType (hFile=0x264) returned 0x1 [0082.614] GetFileSize (in: hFile=0x264, lpFileSizeHigh=0x31e628 | out: lpFileSizeHigh=0x31e628*=0x0) returned 0xa2c [0082.614] ReadFile (in: hFile=0x264, lpBuffer=0x271de34, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x31e5d4, lpOverlapped=0x0 | out: lpBuffer=0x271de34*, lpNumberOfBytesRead=0x31e5d4*=0xa2c, lpOverlapped=0x0) returned 1 [0082.614] CloseHandle (hObject=0x264) returned 1 [0082.628] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\ShYapy659.lnk", nBufferLength=0x105, lpBuffer=0x31e018, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\ShYapy659.lnk", lpFilePart=0x0) returned 0x54 [0082.628] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e50c) returned 1 [0082.628] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\ShYapy659.lnk" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\windows\\recent\\shyapy659.lnk"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x264 [0082.628] GetFileType (hFile=0x264) returned 0x1 [0082.628] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e508) returned 1 [0082.629] GetFileType (hFile=0x264) returned 0x1 [0082.629] WriteFile (in: hFile=0x264, lpBuffer=0x276f054*, nNumberOfBytesToWrite=0xa30, lpNumberOfBytesWritten=0x31e59c, lpOverlapped=0x0 | out: lpBuffer=0x276f054*, lpNumberOfBytesWritten=0x31e59c*=0xa30, lpOverlapped=0x0) returned 1 [0082.629] CloseHandle (hObject=0x264) returned 1 [0082.629] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\ShYapy659.lnk", nBufferLength=0x105, lpBuffer=0x31e14c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\ShYapy659.lnk", lpFilePart=0x0) returned 0x54 [0082.630] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\ShYapy659.lnk", nBufferLength=0x105, lpBuffer=0x31e14c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\ShYapy659.lnk", lpFilePart=0x0) returned 0x54 [0082.630] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e5ac) returned 1 [0082.630] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\ShYapy659.lnk" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\windows\\recent\\shyapy659.lnk"), fInfoLevelId=0x0, lpFileInformation=0x31e628 | out: lpFileInformation=0x31e628*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xdd1f6b80, ftCreationTime.dwHighDateTime=0x1d5e82a, ftLastAccessTime.dwLowDateTime=0xdd1f6b80, ftLastAccessTime.dwHighDateTime=0x1d5e82a, ftLastWriteTime.dwLowDateTime=0x14b115a0, ftLastWriteTime.dwHighDateTime=0x1d6eb7f, nFileSizeHigh=0x0, nFileSizeLow=0xa30)) returned 1 [0082.630] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e5a8) returned 1 [0082.630] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\ShYapy659.lnk" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\windows\\recent\\shyapy659.lnk"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\ShYapy659.lnk" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\windows\\recent\\shyapy659.lnk")) returned 1 [0082.630] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\SRp8.lnk", nBufferLength=0x105, lpBuffer=0x31e02c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\SRp8.lnk", lpFilePart=0x0) returned 0x4f [0082.630] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e520) returned 1 [0082.630] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\SRp8.lnk" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\windows\\recent\\srp8.lnk"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x264 [0082.631] GetFileType (hFile=0x264) returned 0x1 [0082.631] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e51c) returned 1 [0082.631] GetFileType (hFile=0x264) returned 0x1 [0082.631] GetFileSize (in: hFile=0x264, lpFileSizeHigh=0x31e628 | out: lpFileSizeHigh=0x31e628*=0x0) returned 0x1a54 [0082.631] ReadFile (in: hFile=0x264, lpBuffer=0x2770310, nNumberOfBytesToRead=0x1a54, lpNumberOfBytesRead=0x31e5d4, lpOverlapped=0x0 | out: lpBuffer=0x2770310*, lpNumberOfBytesRead=0x31e5d4*=0x1a54, lpOverlapped=0x0) returned 1 [0082.631] CloseHandle (hObject=0x264) returned 1 [0082.645] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\SRp8.lnk", nBufferLength=0x105, lpBuffer=0x31e018, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\SRp8.lnk", lpFilePart=0x0) returned 0x4f [0082.645] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e50c) returned 1 [0082.645] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\SRp8.lnk" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\windows\\recent\\srp8.lnk"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x264 [0082.646] GetFileType (hFile=0x264) returned 0x1 [0082.646] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e508) returned 1 [0082.646] GetFileType (hFile=0x264) returned 0x1 [0082.646] WriteFile (in: hFile=0x264, lpBuffer=0x27c54d4*, nNumberOfBytesToWrite=0x1a60, lpNumberOfBytesWritten=0x31e5c8, lpOverlapped=0x0 | out: lpBuffer=0x27c54d4*, lpNumberOfBytesWritten=0x31e5c8*=0x1a60, lpOverlapped=0x0) returned 1 [0082.647] CloseHandle (hObject=0x264) returned 1 [0082.647] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\SRp8.lnk", nBufferLength=0x105, lpBuffer=0x31e14c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\SRp8.lnk", lpFilePart=0x0) returned 0x4f [0082.647] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\SRp8.lnk", nBufferLength=0x105, lpBuffer=0x31e14c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\SRp8.lnk", lpFilePart=0x0) returned 0x4f [0082.647] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e5ac) returned 1 [0082.647] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\SRp8.lnk" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\windows\\recent\\srp8.lnk"), fInfoLevelId=0x0, lpFileInformation=0x31e628 | out: lpFileInformation=0x31e628*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xdd72bba0, ftCreationTime.dwHighDateTime=0x1d5e82a, ftLastAccessTime.dwLowDateTime=0xdd72bba0, ftLastAccessTime.dwHighDateTime=0x1d5e82a, ftLastWriteTime.dwLowDateTime=0x14b37700, ftLastWriteTime.dwHighDateTime=0x1d6eb7f, nFileSizeHigh=0x0, nFileSizeLow=0x1a60)) returned 1 [0082.647] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e5a8) returned 1 [0082.647] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\SRp8.lnk" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\windows\\recent\\srp8.lnk"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\SRp8.lnk" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\windows\\recent\\srp8.lnk")) returned 1 [0082.648] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\ste8yr_-iA.ots.lnk", nBufferLength=0x105, lpBuffer=0x31e02c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\ste8yr_-iA.ots.lnk", lpFilePart=0x0) returned 0x59 [0082.648] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e520) returned 1 [0082.648] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\ste8yr_-iA.ots.lnk" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\windows\\recent\\ste8yr_-ia.ots.lnk"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x264 [0082.648] GetFileType (hFile=0x264) returned 0x1 [0082.648] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e51c) returned 1 [0082.648] GetFileType (hFile=0x264) returned 0x1 [0082.648] GetFileSize (in: hFile=0x264, lpFileSizeHigh=0x31e628 | out: lpFileSizeHigh=0x31e628*=0x0) returned 0x1b37 [0082.648] ReadFile (in: hFile=0x264, lpBuffer=0x27c7328, nNumberOfBytesToRead=0x1b37, lpNumberOfBytesRead=0x31e5d4, lpOverlapped=0x0 | out: lpBuffer=0x27c7328*, lpNumberOfBytesRead=0x31e5d4*=0x1b37, lpOverlapped=0x0) returned 1 [0082.649] CloseHandle (hObject=0x264) returned 1 [0082.664] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\ste8yr_-iA.ots.lnk", nBufferLength=0x105, lpBuffer=0x31e018, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\ste8yr_-iA.ots.lnk", lpFilePart=0x0) returned 0x59 [0082.664] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e50c) returned 1 [0082.664] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\ste8yr_-iA.ots.lnk" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\windows\\recent\\ste8yr_-ia.ots.lnk"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x264 [0082.665] GetFileType (hFile=0x264) returned 0x1 [0082.665] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e508) returned 1 [0082.665] GetFileType (hFile=0x264) returned 0x1 [0082.665] WriteFile (in: hFile=0x264, lpBuffer=0x281c950*, nNumberOfBytesToWrite=0x1b40, lpNumberOfBytesWritten=0x31e5c8, lpOverlapped=0x0 | out: lpBuffer=0x281c950*, lpNumberOfBytesWritten=0x31e5c8*=0x1b40, lpOverlapped=0x0) returned 1 [0082.666] CloseHandle (hObject=0x264) returned 1 [0082.666] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\ste8yr_-iA.ots.lnk", nBufferLength=0x105, lpBuffer=0x31e14c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\ste8yr_-iA.ots.lnk", lpFilePart=0x0) returned 0x59 [0082.666] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\ste8yr_-iA.ots.lnk", nBufferLength=0x105, lpBuffer=0x31e14c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\ste8yr_-iA.ots.lnk", lpFilePart=0x0) returned 0x59 [0082.666] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e5ac) returned 1 [0082.666] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\ste8yr_-iA.ots.lnk" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\windows\\recent\\ste8yr_-ia.ots.lnk"), fInfoLevelId=0x0, lpFileInformation=0x31e628 | out: lpFileInformation=0x31e628*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xdcdf2660, ftCreationTime.dwHighDateTime=0x1d5e82a, ftLastAccessTime.dwLowDateTime=0xdcdf2660, ftLastAccessTime.dwHighDateTime=0x1d5e82a, ftLastWriteTime.dwLowDateTime=0x14b839c0, ftLastWriteTime.dwHighDateTime=0x1d6eb7f, nFileSizeHigh=0x0, nFileSizeLow=0x1b40)) returned 1 [0082.666] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e5a8) returned 1 [0082.666] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\ste8yr_-iA.ots.lnk" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\windows\\recent\\ste8yr_-ia.ots.lnk"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\ste8yr_-iA.ots.lnk" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\windows\\recent\\ste8yr_-ia.ots.lnk")) returned 1 [0082.667] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\sXaTFSe1U.lnk", nBufferLength=0x105, lpBuffer=0x31e02c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\sXaTFSe1U.lnk", lpFilePart=0x0) returned 0x54 [0082.667] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e520) returned 1 [0082.667] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\sXaTFSe1U.lnk" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\windows\\recent\\sxatfse1u.lnk"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x264 [0082.667] GetFileType (hFile=0x264) returned 0x1 [0082.667] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e51c) returned 1 [0082.667] GetFileType (hFile=0x264) returned 0x1 [0082.667] GetFileSize (in: hFile=0x264, lpFileSizeHigh=0x31e628 | out: lpFileSizeHigh=0x31e628*=0x0) returned 0x23e [0082.667] ReadFile (in: hFile=0x264, lpBuffer=0x281eb0c, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x31e5d4, lpOverlapped=0x0 | out: lpBuffer=0x281eb0c*, lpNumberOfBytesRead=0x31e5d4*=0x23e, lpOverlapped=0x0) returned 1 [0082.668] CloseHandle (hObject=0x264) returned 1 [0082.711] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\sXaTFSe1U.lnk", nBufferLength=0x105, lpBuffer=0x31e018, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\sXaTFSe1U.lnk", lpFilePart=0x0) returned 0x54 [0082.711] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e50c) returned 1 [0082.711] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\sXaTFSe1U.lnk" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\windows\\recent\\sxatfse1u.lnk"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x264 [0082.712] GetFileType (hFile=0x264) returned 0x1 [0082.712] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e508) returned 1 [0082.712] GetFileType (hFile=0x264) returned 0x1 [0082.712] WriteFile (in: hFile=0x264, lpBuffer=0x266d498*, nNumberOfBytesToWrite=0x240, lpNumberOfBytesWritten=0x31e59c, lpOverlapped=0x0 | out: lpBuffer=0x266d498*, lpNumberOfBytesWritten=0x31e59c*=0x240, lpOverlapped=0x0) returned 1 [0082.713] CloseHandle (hObject=0x264) returned 1 [0082.713] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\sXaTFSe1U.lnk", nBufferLength=0x105, lpBuffer=0x31e14c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\sXaTFSe1U.lnk", lpFilePart=0x0) returned 0x54 [0082.713] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\sXaTFSe1U.lnk", nBufferLength=0x105, lpBuffer=0x31e14c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\sXaTFSe1U.lnk", lpFilePart=0x0) returned 0x54 [0082.713] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e5ac) returned 1 [0082.713] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\sXaTFSe1U.lnk" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\windows\\recent\\sxatfse1u.lnk"), fInfoLevelId=0x0, lpFileInformation=0x31e628 | out: lpFileInformation=0x31e628*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xdd4ca5a0, ftCreationTime.dwHighDateTime=0x1d5e82a, ftLastAccessTime.dwLowDateTime=0xdd4ca5a0, ftLastAccessTime.dwHighDateTime=0x1d5e82a, ftLastWriteTime.dwLowDateTime=0x14bf5de0, ftLastWriteTime.dwHighDateTime=0x1d6eb7f, nFileSizeHigh=0x0, nFileSizeLow=0x240)) returned 1 [0082.713] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e5a8) returned 1 [0082.713] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\sXaTFSe1U.lnk" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\windows\\recent\\sxatfse1u.lnk"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\sXaTFSe1U.lnk" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\windows\\recent\\sxatfse1u.lnk")) returned 1 [0082.714] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\sxtRyYUIDz-oVBFJk2R_.lnk", nBufferLength=0x105, lpBuffer=0x31e02c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\sxtRyYUIDz-oVBFJk2R_.lnk", lpFilePart=0x0) returned 0x5f [0082.714] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e520) returned 1 [0082.714] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\sxtRyYUIDz-oVBFJk2R_.lnk" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\windows\\recent\\sxtryyuidz-ovbfjk2r_.lnk"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x264 [0082.714] GetFileType (hFile=0x264) returned 0x1 [0082.714] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e51c) returned 1 [0082.714] GetFileType (hFile=0x264) returned 0x1 [0082.714] GetFileSize (in: hFile=0x264, lpFileSizeHigh=0x31e628 | out: lpFileSizeHigh=0x31e628*=0x0) returned 0x2fd [0082.714] ReadFile (in: hFile=0x264, lpBuffer=0x266eaa0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x31e5d4, lpOverlapped=0x0 | out: lpBuffer=0x266eaa0*, lpNumberOfBytesRead=0x31e5d4*=0x2fd, lpOverlapped=0x0) returned 1 [0082.715] CloseHandle (hObject=0x264) returned 1 [0082.729] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\sxtRyYUIDz-oVBFJk2R_.lnk", nBufferLength=0x105, lpBuffer=0x31e018, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\sxtRyYUIDz-oVBFJk2R_.lnk", lpFilePart=0x0) returned 0x5f [0082.729] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e50c) returned 1 [0082.729] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\sxtRyYUIDz-oVBFJk2R_.lnk" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\windows\\recent\\sxtryyuidz-ovbfjk2r_.lnk"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x264 [0082.730] GetFileType (hFile=0x264) returned 0x1 [0082.730] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e508) returned 1 [0082.730] GetFileType (hFile=0x264) returned 0x1 [0082.730] WriteFile (in: hFile=0x264, lpBuffer=0x26bda58*, nNumberOfBytesToWrite=0x300, lpNumberOfBytesWritten=0x31e59c, lpOverlapped=0x0 | out: lpBuffer=0x26bda58*, lpNumberOfBytesWritten=0x31e59c*=0x300, lpOverlapped=0x0) returned 1 [0082.731] CloseHandle (hObject=0x264) returned 1 [0082.731] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\sxtRyYUIDz-oVBFJk2R_.lnk", nBufferLength=0x105, lpBuffer=0x31e14c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\sxtRyYUIDz-oVBFJk2R_.lnk", lpFilePart=0x0) returned 0x5f [0082.731] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\sxtRyYUIDz-oVBFJk2R_.lnk", nBufferLength=0x105, lpBuffer=0x31e14c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\sxtRyYUIDz-oVBFJk2R_.lnk", lpFilePart=0x0) returned 0x5f [0082.731] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e5ac) returned 1 [0082.731] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\sxtRyYUIDz-oVBFJk2R_.lnk" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\windows\\recent\\sxtryyuidz-ovbfjk2r_.lnk"), fInfoLevelId=0x0, lpFileInformation=0x31e628 | out: lpFileInformation=0x31e628*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xdc3624c0, ftCreationTime.dwHighDateTime=0x1d5e82a, ftLastAccessTime.dwLowDateTime=0xdc3624c0, ftLastAccessTime.dwHighDateTime=0x1d5e82a, ftLastWriteTime.dwLowDateTime=0x14c1bf40, ftLastWriteTime.dwHighDateTime=0x1d6eb7f, nFileSizeHigh=0x0, nFileSizeLow=0x300)) returned 1 [0082.733] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e5a8) returned 1 [0082.734] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\sxtRyYUIDz-oVBFJk2R_.lnk" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\windows\\recent\\sxtryyuidz-ovbfjk2r_.lnk"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\sxtRyYUIDz-oVBFJk2R_.lnk" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\windows\\recent\\sxtryyuidz-ovbfjk2r_.lnk")) returned 1 [0082.734] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\sylRmbaPWvbAwXpKH.lnk", nBufferLength=0x105, lpBuffer=0x31e02c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\sylRmbaPWvbAwXpKH.lnk", lpFilePart=0x0) returned 0x5c [0082.734] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e520) returned 1 [0082.734] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\sylRmbaPWvbAwXpKH.lnk" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\windows\\recent\\sylrmbapwvbawxpkh.lnk"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x264 [0082.734] GetFileType (hFile=0x264) returned 0x1 [0082.734] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e51c) returned 1 [0082.734] GetFileType (hFile=0x264) returned 0x1 [0082.735] GetFileSize (in: hFile=0x264, lpFileSizeHigh=0x31e628 | out: lpFileSizeHigh=0x31e628*=0x0) returned 0xa84 [0082.735] ReadFile (in: hFile=0x264, lpBuffer=0x26bf800, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x31e5d4, lpOverlapped=0x0 | out: lpBuffer=0x26bf800*, lpNumberOfBytesRead=0x31e5d4*=0xa84, lpOverlapped=0x0) returned 1 [0082.735] CloseHandle (hObject=0x264) returned 1 [0082.749] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\sylRmbaPWvbAwXpKH.lnk", nBufferLength=0x105, lpBuffer=0x31e018, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\sylRmbaPWvbAwXpKH.lnk", lpFilePart=0x0) returned 0x5c [0082.749] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e50c) returned 1 [0082.749] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\sylRmbaPWvbAwXpKH.lnk" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\windows\\recent\\sylrmbapwvbawxpkh.lnk"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x264 [0082.749] GetFileType (hFile=0x264) returned 0x1 [0082.749] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e508) returned 1 [0082.750] GetFileType (hFile=0x264) returned 0x1 [0082.750] WriteFile (in: hFile=0x264, lpBuffer=0x2710c28*, nNumberOfBytesToWrite=0xa90, lpNumberOfBytesWritten=0x31e59c, lpOverlapped=0x0 | out: lpBuffer=0x2710c28*, lpNumberOfBytesWritten=0x31e59c*=0xa90, lpOverlapped=0x0) returned 1 [0082.750] CloseHandle (hObject=0x264) returned 1 [0082.751] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\sylRmbaPWvbAwXpKH.lnk", nBufferLength=0x105, lpBuffer=0x31e14c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\sylRmbaPWvbAwXpKH.lnk", lpFilePart=0x0) returned 0x5c [0082.751] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\sylRmbaPWvbAwXpKH.lnk", nBufferLength=0x105, lpBuffer=0x31e14c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\sylRmbaPWvbAwXpKH.lnk", lpFilePart=0x0) returned 0x5c [0082.751] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e5ac) returned 1 [0082.751] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\sylRmbaPWvbAwXpKH.lnk" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\windows\\recent\\sylrmbapwvbawxpkh.lnk"), fInfoLevelId=0x0, lpFileInformation=0x31e628 | out: lpFileInformation=0x31e628*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xdd21cce0, ftCreationTime.dwHighDateTime=0x1d5e82a, ftLastAccessTime.dwLowDateTime=0xdd21cce0, ftLastAccessTime.dwHighDateTime=0x1d5e82a, ftLastWriteTime.dwLowDateTime=0x14c420a0, ftLastWriteTime.dwHighDateTime=0x1d6eb7f, nFileSizeHigh=0x0, nFileSizeLow=0xa90)) returned 1 [0082.751] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e5a8) returned 1 [0082.751] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\sylRmbaPWvbAwXpKH.lnk" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\windows\\recent\\sylrmbapwvbawxpkh.lnk"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\sylRmbaPWvbAwXpKH.lnk" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\windows\\recent\\sylrmbapwvbawxpkh.lnk")) returned 1 [0082.751] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\T9 LZd.lnk", nBufferLength=0x105, lpBuffer=0x31e02c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\T9 LZd.lnk", lpFilePart=0x0) returned 0x51 [0082.752] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e520) returned 1 [0082.752] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\T9 LZd.lnk" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\windows\\recent\\t9 lzd.lnk"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x264 [0082.752] GetFileType (hFile=0x264) returned 0x1 [0082.752] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e51c) returned 1 [0082.752] GetFileType (hFile=0x264) returned 0x1 [0082.752] GetFileSize (in: hFile=0x264, lpFileSizeHigh=0x31e628 | out: lpFileSizeHigh=0x31e628*=0x0) returned 0x1575 [0082.752] ReadFile (in: hFile=0x264, lpBuffer=0x2711f0c, nNumberOfBytesToRead=0x1575, lpNumberOfBytesRead=0x31e5d4, lpOverlapped=0x0 | out: lpBuffer=0x2711f0c*, lpNumberOfBytesRead=0x31e5d4*=0x1575, lpOverlapped=0x0) returned 1 [0082.753] CloseHandle (hObject=0x264) returned 1 [0082.766] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\T9 LZd.lnk", nBufferLength=0x105, lpBuffer=0x31e018, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\T9 LZd.lnk", lpFilePart=0x0) returned 0x51 [0082.766] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e50c) returned 1 [0082.766] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\T9 LZd.lnk" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\windows\\recent\\t9 lzd.lnk"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x264 [0082.767] GetFileType (hFile=0x264) returned 0x1 [0082.767] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e508) returned 1 [0082.767] GetFileType (hFile=0x264) returned 0x1 [0082.767] WriteFile (in: hFile=0x264, lpBuffer=0x2765874*, nNumberOfBytesToWrite=0x1580, lpNumberOfBytesWritten=0x31e5c8, lpOverlapped=0x0 | out: lpBuffer=0x2765874*, lpNumberOfBytesWritten=0x31e5c8*=0x1580, lpOverlapped=0x0) returned 1 [0082.768] CloseHandle (hObject=0x264) returned 1 [0082.768] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\T9 LZd.lnk", nBufferLength=0x105, lpBuffer=0x31e14c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\T9 LZd.lnk", lpFilePart=0x0) returned 0x51 [0082.768] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\T9 LZd.lnk", nBufferLength=0x105, lpBuffer=0x31e14c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\T9 LZd.lnk", lpFilePart=0x0) returned 0x51 [0082.768] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e5ac) returned 1 [0082.768] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\T9 LZd.lnk" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\windows\\recent\\t9 lzd.lnk"), fInfoLevelId=0x0, lpFileInformation=0x31e628 | out: lpFileInformation=0x31e628*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xdca866c0, ftCreationTime.dwHighDateTime=0x1d5e82a, ftLastAccessTime.dwLowDateTime=0xdca866c0, ftLastAccessTime.dwHighDateTime=0x1d5e82a, ftLastWriteTime.dwLowDateTime=0x14c68200, ftLastWriteTime.dwHighDateTime=0x1d6eb7f, nFileSizeHigh=0x0, nFileSizeLow=0x1580)) returned 1 [0082.768] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e5a8) returned 1 [0082.768] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\T9 LZd.lnk" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\windows\\recent\\t9 lzd.lnk"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\T9 LZd.lnk" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\windows\\recent\\t9 lzd.lnk")) returned 1 [0082.768] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\tDKPWNeB04vfmhzT6s.lnk", nBufferLength=0x105, lpBuffer=0x31e02c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\tDKPWNeB04vfmhzT6s.lnk", lpFilePart=0x0) returned 0x5d [0082.768] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e520) returned 1 [0082.769] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\tDKPWNeB04vfmhzT6s.lnk" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\windows\\recent\\tdkpwneb04vfmhzt6s.lnk"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x264 [0082.769] GetFileType (hFile=0x264) returned 0x1 [0082.769] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e51c) returned 1 [0082.769] GetFileType (hFile=0x264) returned 0x1 [0082.769] GetFileSize (in: hFile=0x264, lpFileSizeHigh=0x31e628 | out: lpFileSizeHigh=0x31e628*=0x0) returned 0xfac [0082.769] ReadFile (in: hFile=0x264, lpBuffer=0x27681c0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x31e5d4, lpOverlapped=0x0 | out: lpBuffer=0x27681c0*, lpNumberOfBytesRead=0x31e5d4*=0xfac, lpOverlapped=0x0) returned 1 [0082.770] CloseHandle (hObject=0x264) returned 1 [0082.784] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\tDKPWNeB04vfmhzT6s.lnk", nBufferLength=0x105, lpBuffer=0x31e018, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\tDKPWNeB04vfmhzT6s.lnk", lpFilePart=0x0) returned 0x5d [0082.784] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e50c) returned 1 [0082.784] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\tDKPWNeB04vfmhzT6s.lnk" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\windows\\recent\\tdkpwneb04vfmhzt6s.lnk"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x264 [0082.785] GetFileType (hFile=0x264) returned 0x1 [0082.785] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e508) returned 1 [0082.785] GetFileType (hFile=0x264) returned 0x1 [0082.785] WriteFile (in: hFile=0x264, lpBuffer=0x27baf84*, nNumberOfBytesToWrite=0xfb0, lpNumberOfBytesWritten=0x31e59c, lpOverlapped=0x0 | out: lpBuffer=0x27baf84*, lpNumberOfBytesWritten=0x31e59c*=0xfb0, lpOverlapped=0x0) returned 1 [0082.786] CloseHandle (hObject=0x264) returned 1 [0082.786] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\tDKPWNeB04vfmhzT6s.lnk", nBufferLength=0x105, lpBuffer=0x31e14c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\tDKPWNeB04vfmhzT6s.lnk", lpFilePart=0x0) returned 0x5d [0082.786] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\tDKPWNeB04vfmhzT6s.lnk", nBufferLength=0x105, lpBuffer=0x31e14c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\tDKPWNeB04vfmhzT6s.lnk", lpFilePart=0x0) returned 0x5d [0082.786] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e5ac) returned 1 [0082.786] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\tDKPWNeB04vfmhzT6s.lnk" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\windows\\recent\\tdkpwneb04vfmhzt6s.lnk"), fInfoLevelId=0x0, lpFileInformation=0x31e628 | out: lpFileInformation=0x31e628*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xdc446d00, ftCreationTime.dwHighDateTime=0x1d5e82a, ftLastAccessTime.dwLowDateTime=0xdc446d00, ftLastAccessTime.dwHighDateTime=0x1d5e82a, ftLastWriteTime.dwLowDateTime=0x14c8e360, ftLastWriteTime.dwHighDateTime=0x1d6eb7f, nFileSizeHigh=0x0, nFileSizeLow=0xfb0)) returned 1 [0082.786] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e5a8) returned 1 [0082.787] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\tDKPWNeB04vfmhzT6s.lnk" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\windows\\recent\\tdkpwneb04vfmhzt6s.lnk"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\tDKPWNeB04vfmhzT6s.lnk" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\windows\\recent\\tdkpwneb04vfmhzt6s.lnk")) returned 1 [0082.787] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\TKmol_O0z8oXNmmMF.lnk", nBufferLength=0x105, lpBuffer=0x31e02c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\TKmol_O0z8oXNmmMF.lnk", lpFilePart=0x0) returned 0x5c [0082.787] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e520) returned 1 [0082.787] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\TKmol_O0z8oXNmmMF.lnk" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\windows\\recent\\tkmol_o0z8oxnmmmf.lnk"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x264 [0082.787] GetFileType (hFile=0x264) returned 0x1 [0082.787] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e51c) returned 1 [0082.787] GetFileType (hFile=0x264) returned 0x1 [0082.787] GetFileSize (in: hFile=0x264, lpFileSizeHigh=0x31e628 | out: lpFileSizeHigh=0x31e628*=0x0) returned 0x1adf [0082.787] ReadFile (in: hFile=0x264, lpBuffer=0x27bc294, nNumberOfBytesToRead=0x1adf, lpNumberOfBytesRead=0x31e5d4, lpOverlapped=0x0 | out: lpBuffer=0x27bc294*, lpNumberOfBytesRead=0x31e5d4*=0x1adf, lpOverlapped=0x0) returned 1 [0082.788] CloseHandle (hObject=0x264) returned 1 [0082.801] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\TKmol_O0z8oXNmmMF.lnk", nBufferLength=0x105, lpBuffer=0x31e018, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\TKmol_O0z8oXNmmMF.lnk", lpFilePart=0x0) returned 0x5c [0082.801] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e50c) returned 1 [0082.801] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\TKmol_O0z8oXNmmMF.lnk" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\windows\\recent\\tkmol_o0z8oxnmmmf.lnk"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x264 [0082.802] GetFileType (hFile=0x264) returned 0x1 [0082.802] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e508) returned 1 [0082.802] GetFileType (hFile=0x264) returned 0x1 [0082.802] WriteFile (in: hFile=0x264, lpBuffer=0x28116dc*, nNumberOfBytesToWrite=0x1ae0, lpNumberOfBytesWritten=0x31e5c8, lpOverlapped=0x0 | out: lpBuffer=0x28116dc*, lpNumberOfBytesWritten=0x31e5c8*=0x1ae0, lpOverlapped=0x0) returned 1 [0082.803] CloseHandle (hObject=0x264) returned 1 [0082.804] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\TKmol_O0z8oXNmmMF.lnk", nBufferLength=0x105, lpBuffer=0x31e14c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\TKmol_O0z8oXNmmMF.lnk", lpFilePart=0x0) returned 0x5c [0082.804] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\TKmol_O0z8oXNmmMF.lnk", nBufferLength=0x105, lpBuffer=0x31e14c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\TKmol_O0z8oXNmmMF.lnk", lpFilePart=0x0) returned 0x5c [0082.804] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e5ac) returned 1 [0082.804] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\TKmol_O0z8oXNmmMF.lnk" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\windows\\recent\\tkmol_o0z8oxnmmmf.lnk"), fInfoLevelId=0x0, lpFileInformation=0x31e628 | out: lpFileInformation=0x31e628*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xdb8f8480, ftCreationTime.dwHighDateTime=0x1d5e82a, ftLastAccessTime.dwLowDateTime=0xdb8f8480, ftLastAccessTime.dwHighDateTime=0x1d5e82a, ftLastWriteTime.dwLowDateTime=0x14cb44c0, ftLastWriteTime.dwHighDateTime=0x1d6eb7f, nFileSizeHigh=0x0, nFileSizeLow=0x1ae0)) returned 1 [0082.804] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e5a8) returned 1 [0082.804] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\TKmol_O0z8oXNmmMF.lnk" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\windows\\recent\\tkmol_o0z8oxnmmmf.lnk"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\TKmol_O0z8oXNmmMF.lnk" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\windows\\recent\\tkmol_o0z8oxnmmmf.lnk")) returned 1 [0082.804] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\Tub7RsstsPF5bhl.lnk", nBufferLength=0x105, lpBuffer=0x31e02c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\Tub7RsstsPF5bhl.lnk", lpFilePart=0x0) returned 0x5a [0082.804] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e520) returned 1 [0082.805] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\Tub7RsstsPF5bhl.lnk" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\windows\\recent\\tub7rsstspf5bhl.lnk"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x264 [0082.805] GetFileType (hFile=0x264) returned 0x1 [0082.805] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e51c) returned 1 [0082.805] GetFileType (hFile=0x264) returned 0x1 [0082.805] GetFileSize (in: hFile=0x264, lpFileSizeHigh=0x31e628 | out: lpFileSizeHigh=0x31e628*=0x0) returned 0xa6e [0082.805] ReadFile (in: hFile=0x264, lpBuffer=0x281409c, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x31e5d4, lpOverlapped=0x0 | out: lpBuffer=0x281409c*, lpNumberOfBytesRead=0x31e5d4*=0xa6e, lpOverlapped=0x0) returned 1 [0082.806] CloseHandle (hObject=0x264) returned 1 [0082.846] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\Tub7RsstsPF5bhl.lnk", nBufferLength=0x105, lpBuffer=0x31e018, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\Tub7RsstsPF5bhl.lnk", lpFilePart=0x0) returned 0x5a [0082.846] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e50c) returned 1 [0082.846] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\Tub7RsstsPF5bhl.lnk" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\windows\\recent\\tub7rsstspf5bhl.lnk"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x264 [0082.847] GetFileType (hFile=0x264) returned 0x1 [0082.847] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e508) returned 1 [0082.847] GetFileType (hFile=0x264) returned 0x1 [0082.847] WriteFile (in: hFile=0x264, lpBuffer=0x2665c28*, nNumberOfBytesToWrite=0xa70, lpNumberOfBytesWritten=0x31e59c, lpOverlapped=0x0 | out: lpBuffer=0x2665c28*, lpNumberOfBytesWritten=0x31e59c*=0xa70, lpOverlapped=0x0) returned 1 [0082.848] CloseHandle (hObject=0x264) returned 1 [0082.848] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\Tub7RsstsPF5bhl.lnk", nBufferLength=0x105, lpBuffer=0x31e14c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\Tub7RsstsPF5bhl.lnk", lpFilePart=0x0) returned 0x5a [0082.848] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\Tub7RsstsPF5bhl.lnk", nBufferLength=0x105, lpBuffer=0x31e14c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\Tub7RsstsPF5bhl.lnk", lpFilePart=0x0) returned 0x5a [0082.848] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e5ac) returned 1 [0082.848] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\Tub7RsstsPF5bhl.lnk" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\windows\\recent\\tub7rsstspf5bhl.lnk"), fInfoLevelId=0x0, lpFileInformation=0x31e628 | out: lpFileInformation=0x31e628*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xdc65c040, ftCreationTime.dwHighDateTime=0x1d5e82a, ftLastAccessTime.dwLowDateTime=0xdc65c040, ftLastAccessTime.dwHighDateTime=0x1d5e82a, ftLastWriteTime.dwLowDateTime=0x14d268e0, ftLastWriteTime.dwHighDateTime=0x1d6eb7f, nFileSizeHigh=0x0, nFileSizeLow=0xa70)) returned 1 [0082.848] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e5a8) returned 1 [0082.848] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\Tub7RsstsPF5bhl.lnk" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\windows\\recent\\tub7rsstspf5bhl.lnk"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\Tub7RsstsPF5bhl.lnk" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\windows\\recent\\tub7rsstspf5bhl.lnk")) returned 1 [0082.849] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\TuLuB1aKsHS-_cYIE.lnk", nBufferLength=0x105, lpBuffer=0x31e02c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\TuLuB1aKsHS-_cYIE.lnk", lpFilePart=0x0) returned 0x5c [0082.849] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e520) returned 1 [0082.849] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\TuLuB1aKsHS-_cYIE.lnk" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\windows\\recent\\tulub1akshs-_cyie.lnk"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x264 [0082.849] GetFileType (hFile=0x264) returned 0x1 [0082.849] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e51c) returned 1 [0082.849] GetFileType (hFile=0x264) returned 0x1 [0082.849] GetFileSize (in: hFile=0x264, lpFileSizeHigh=0x31e628 | out: lpFileSizeHigh=0x31e628*=0x0) returned 0x266 [0082.849] ReadFile (in: hFile=0x264, lpBuffer=0x26671a4, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x31e5d4, lpOverlapped=0x0 | out: lpBuffer=0x26671a4*, lpNumberOfBytesRead=0x31e5d4*=0x266, lpOverlapped=0x0) returned 1 [0082.850] CloseHandle (hObject=0x264) returned 1 [0082.863] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\TuLuB1aKsHS-_cYIE.lnk", nBufferLength=0x105, lpBuffer=0x31e018, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\TuLuB1aKsHS-_cYIE.lnk", lpFilePart=0x0) returned 0x5c [0082.863] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e50c) returned 1 [0082.863] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\TuLuB1aKsHS-_cYIE.lnk" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\windows\\recent\\tulub1akshs-_cyie.lnk"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x264 [0082.864] GetFileType (hFile=0x264) returned 0x1 [0082.864] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e508) returned 1 [0082.864] GetFileType (hFile=0x264) returned 0x1 [0082.864] WriteFile (in: hFile=0x264, lpBuffer=0x26b5e88*, nNumberOfBytesToWrite=0x270, lpNumberOfBytesWritten=0x31e59c, lpOverlapped=0x0 | out: lpBuffer=0x26b5e88*, lpNumberOfBytesWritten=0x31e59c*=0x270, lpOverlapped=0x0) returned 1 [0082.866] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\TuLuB1aKsHS-_cYIE.lnk", nBufferLength=0x105, lpBuffer=0x31e14c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\TuLuB1aKsHS-_cYIE.lnk", lpFilePart=0x0) returned 0x5c [0082.866] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\TuLuB1aKsHS-_cYIE.lnk", nBufferLength=0x105, lpBuffer=0x31e14c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\TuLuB1aKsHS-_cYIE.lnk", lpFilePart=0x0) returned 0x5c [0082.866] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e5ac) returned 1 [0082.866] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\TuLuB1aKsHS-_cYIE.lnk" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\windows\\recent\\tulub1akshs-_cyie.lnk"), fInfoLevelId=0x0, lpFileInformation=0x31e628 | out: lpFileInformation=0x31e628*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xdcdcc500, ftCreationTime.dwHighDateTime=0x1d5e82a, ftLastAccessTime.dwLowDateTime=0xdcdcc500, ftLastAccessTime.dwHighDateTime=0x1d5e82a, ftLastWriteTime.dwLowDateTime=0x14d4ca40, ftLastWriteTime.dwHighDateTime=0x1d6eb7f, nFileSizeHigh=0x0, nFileSizeLow=0x270)) returned 1 [0082.866] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e5a8) returned 1 [0082.866] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\TuLuB1aKsHS-_cYIE.lnk" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\windows\\recent\\tulub1akshs-_cyie.lnk"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\TuLuB1aKsHS-_cYIE.lnk" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\windows\\recent\\tulub1akshs-_cyie.lnk")) returned 1 [0082.867] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\tZ02_j2HoUAEzAXcbrvF.lnk", nBufferLength=0x105, lpBuffer=0x31e02c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\tZ02_j2HoUAEzAXcbrvF.lnk", lpFilePart=0x0) returned 0x5f [0082.867] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e520) returned 1 [0082.867] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\tZ02_j2HoUAEzAXcbrvF.lnk" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\windows\\recent\\tz02_j2houaezaxcbrvf.lnk"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x264 [0082.961] GetFileType (hFile=0x264) returned 0x1 [0082.961] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e51c) returned 1 [0082.961] GetFileType (hFile=0x264) returned 0x1 [0082.961] GetFileSize (in: hFile=0x264, lpFileSizeHigh=0x31e628 | out: lpFileSizeHigh=0x31e628*=0x0) returned 0xa06 [0082.961] ReadFile (in: hFile=0x264, lpBuffer=0x26b7bb8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x31e5d4, lpOverlapped=0x0 | out: lpBuffer=0x26b7bb8*, lpNumberOfBytesRead=0x31e5d4*=0xa06, lpOverlapped=0x0) returned 1 [0082.975] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\tZ02_j2HoUAEzAXcbrvF.lnk", nBufferLength=0x105, lpBuffer=0x31e018, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\tZ02_j2HoUAEzAXcbrvF.lnk", lpFilePart=0x0) returned 0x5f [0082.975] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e50c) returned 1 [0082.975] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\tZ02_j2HoUAEzAXcbrvF.lnk" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\windows\\recent\\tz02_j2houaezaxcbrvf.lnk"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x264 [0082.976] GetFileType (hFile=0x264) returned 0x1 [0082.976] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e508) returned 1 [0082.976] GetFileType (hFile=0x264) returned 0x1 [0082.976] WriteFile (in: hFile=0x264, lpBuffer=0x2708d6c*, nNumberOfBytesToWrite=0xa10, lpNumberOfBytesWritten=0x31e59c, lpOverlapped=0x0 | out: lpBuffer=0x2708d6c*, lpNumberOfBytesWritten=0x31e59c*=0xa10, lpOverlapped=0x0) returned 1 [0082.977] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\tZ02_j2HoUAEzAXcbrvF.lnk", nBufferLength=0x105, lpBuffer=0x31e14c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\tZ02_j2HoUAEzAXcbrvF.lnk", lpFilePart=0x0) returned 0x5f [0082.977] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\tZ02_j2HoUAEzAXcbrvF.lnk", nBufferLength=0x105, lpBuffer=0x31e14c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\tZ02_j2HoUAEzAXcbrvF.lnk", lpFilePart=0x0) returned 0x5f [0082.977] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e5ac) returned 1 [0082.977] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\tZ02_j2HoUAEzAXcbrvF.lnk" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\windows\\recent\\tz02_j2houaezaxcbrvf.lnk"), fInfoLevelId=0x0, lpFileInformation=0x31e628 | out: lpFileInformation=0x31e628*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xdbb0d7c0, ftCreationTime.dwHighDateTime=0x1d5e82a, ftLastAccessTime.dwLowDateTime=0xdd5d4f40, ftLastAccessTime.dwHighDateTime=0x1d5e82a, ftLastWriteTime.dwLowDateTime=0x14e7d540, ftLastWriteTime.dwHighDateTime=0x1d6eb7f, nFileSizeHigh=0x0, nFileSizeLow=0xa10)) returned 1 [0082.978] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e5a8) returned 1 [0082.978] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\tZ02_j2HoUAEzAXcbrvF.lnk" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\windows\\recent\\tz02_j2houaezaxcbrvf.lnk"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\tZ02_j2HoUAEzAXcbrvF.lnk" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\windows\\recent\\tz02_j2houaezaxcbrvf.lnk")) returned 1 [0082.978] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\UI0YnTvRe3FtpToWZZU.mkv.lnk", nBufferLength=0x105, lpBuffer=0x31e02c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\UI0YnTvRe3FtpToWZZU.mkv.lnk", lpFilePart=0x0) returned 0x62 [0082.978] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e520) returned 1 [0082.978] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\UI0YnTvRe3FtpToWZZU.mkv.lnk" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\windows\\recent\\ui0yntvre3ftptowzzu.mkv.lnk"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x264 [0082.978] GetFileType (hFile=0x264) returned 0x1 [0082.978] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e51c) returned 1 [0082.978] GetFileType (hFile=0x264) returned 0x1 [0082.978] GetFileSize (in: hFile=0x264, lpFileSizeHigh=0x31e628 | out: lpFileSizeHigh=0x31e628*=0x0) returned 0xf1c [0082.979] ReadFile (in: hFile=0x264, lpBuffer=0x270afc4, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x31e5d4, lpOverlapped=0x0 | out: lpBuffer=0x270afc4*, lpNumberOfBytesRead=0x31e5d4*=0xf1c, lpOverlapped=0x0) returned 1 [0082.992] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\UI0YnTvRe3FtpToWZZU.mkv.lnk", nBufferLength=0x105, lpBuffer=0x31e018, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\UI0YnTvRe3FtpToWZZU.mkv.lnk", lpFilePart=0x0) returned 0x62 [0082.992] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e50c) returned 1 [0082.992] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\UI0YnTvRe3FtpToWZZU.mkv.lnk" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\windows\\recent\\ui0yntvre3ftptowzzu.mkv.lnk"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x264 [0082.993] GetFileType (hFile=0x264) returned 0x1 [0082.993] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e508) returned 1 [0082.993] GetFileType (hFile=0x264) returned 0x1 [0082.993] WriteFile (in: hFile=0x264, lpBuffer=0x275dacc*, nNumberOfBytesToWrite=0xf20, lpNumberOfBytesWritten=0x31e59c, lpOverlapped=0x0 | out: lpBuffer=0x275dacc*, lpNumberOfBytesWritten=0x31e59c*=0xf20, lpOverlapped=0x0) returned 1 [0082.994] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\UI0YnTvRe3FtpToWZZU.mkv.lnk", nBufferLength=0x105, lpBuffer=0x31e14c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\UI0YnTvRe3FtpToWZZU.mkv.lnk", lpFilePart=0x0) returned 0x62 [0082.994] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\UI0YnTvRe3FtpToWZZU.mkv.lnk", nBufferLength=0x105, lpBuffer=0x31e14c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\UI0YnTvRe3FtpToWZZU.mkv.lnk", lpFilePart=0x0) returned 0x62 [0082.995] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e5ac) returned 1 [0082.995] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\UI0YnTvRe3FtpToWZZU.mkv.lnk" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\windows\\recent\\ui0yntvre3ftptowzzu.mkv.lnk"), fInfoLevelId=0x0, lpFileInformation=0x31e628 | out: lpFileInformation=0x31e628*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xdc127020, ftCreationTime.dwHighDateTime=0x1d5e82a, ftLastAccessTime.dwLowDateTime=0xdc127020, ftLastAccessTime.dwHighDateTime=0x1d5e82a, ftLastWriteTime.dwLowDateTime=0x14e7d540, ftLastWriteTime.dwHighDateTime=0x1d6eb7f, nFileSizeHigh=0x0, nFileSizeLow=0xf20)) returned 1 [0082.995] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e5a8) returned 1 [0082.995] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\UI0YnTvRe3FtpToWZZU.mkv.lnk" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\windows\\recent\\ui0yntvre3ftptowzzu.mkv.lnk"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\UI0YnTvRe3FtpToWZZU.mkv.lnk" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\windows\\recent\\ui0yntvre3ftptowzzu.mkv.lnk")) returned 1 [0082.995] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\UjUJtBCLIKM-5dz9N.mkv.lnk", nBufferLength=0x105, lpBuffer=0x31e02c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\UjUJtBCLIKM-5dz9N.mkv.lnk", lpFilePart=0x0) returned 0x60 [0082.995] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e520) returned 1 [0082.995] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\UjUJtBCLIKM-5dz9N.mkv.lnk" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\windows\\recent\\ujujtbclikm-5dz9n.mkv.lnk"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x264 [0082.995] GetFileType (hFile=0x264) returned 0x1 [0082.995] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e51c) returned 1 [0082.996] GetFileType (hFile=0x264) returned 0x1 [0082.996] GetFileSize (in: hFile=0x264, lpFileSizeHigh=0x31e628 | out: lpFileSizeHigh=0x31e628*=0x0) returned 0x415 [0082.996] ReadFile (in: hFile=0x264, lpBuffer=0x275f228, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x31e5d4, lpOverlapped=0x0 | out: lpBuffer=0x275f228*, lpNumberOfBytesRead=0x31e5d4*=0x415, lpOverlapped=0x0) returned 1 [0083.009] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\UjUJtBCLIKM-5dz9N.mkv.lnk", nBufferLength=0x105, lpBuffer=0x31e018, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\UjUJtBCLIKM-5dz9N.mkv.lnk", lpFilePart=0x0) returned 0x60 [0083.009] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e50c) returned 1 [0083.009] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\UjUJtBCLIKM-5dz9N.mkv.lnk" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\windows\\recent\\ujujtbclikm-5dz9n.mkv.lnk"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x264 [0083.010] GetFileType (hFile=0x264) returned 0x1 [0083.010] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e508) returned 1 [0083.010] GetFileType (hFile=0x264) returned 0x1 [0083.010] WriteFile (in: hFile=0x264, lpBuffer=0x27ae630*, nNumberOfBytesToWrite=0x420, lpNumberOfBytesWritten=0x31e59c, lpOverlapped=0x0 | out: lpBuffer=0x27ae630*, lpNumberOfBytesWritten=0x31e59c*=0x420, lpOverlapped=0x0) returned 1 [0083.011] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\UjUJtBCLIKM-5dz9N.mkv.lnk", nBufferLength=0x105, lpBuffer=0x31e14c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\UjUJtBCLIKM-5dz9N.mkv.lnk", lpFilePart=0x0) returned 0x60 [0083.011] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\UjUJtBCLIKM-5dz9N.mkv.lnk", nBufferLength=0x105, lpBuffer=0x31e14c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\UjUJtBCLIKM-5dz9N.mkv.lnk", lpFilePart=0x0) returned 0x60 [0083.011] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e5ac) returned 1 [0083.011] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\UjUJtBCLIKM-5dz9N.mkv.lnk" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\windows\\recent\\ujujtbclikm-5dz9n.mkv.lnk"), fInfoLevelId=0x0, lpFileInformation=0x31e628 | out: lpFileInformation=0x31e628*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xdce8abe0, ftCreationTime.dwHighDateTime=0x1d5e82a, ftLastAccessTime.dwLowDateTime=0xdce8abe0, ftLastAccessTime.dwHighDateTime=0x1d5e82a, ftLastWriteTime.dwLowDateTime=0x14ec9800, ftLastWriteTime.dwHighDateTime=0x1d6eb7f, nFileSizeHigh=0x0, nFileSizeLow=0x420)) returned 1 [0083.011] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e5a8) returned 1 [0083.011] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\UjUJtBCLIKM-5dz9N.mkv.lnk" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\windows\\recent\\ujujtbclikm-5dz9n.mkv.lnk"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\UjUJtBCLIKM-5dz9N.mkv.lnk" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\windows\\recent\\ujujtbclikm-5dz9n.mkv.lnk")) returned 1 [0083.012] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\ur1m5T0qt.lnk", nBufferLength=0x105, lpBuffer=0x31e02c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\ur1m5T0qt.lnk", lpFilePart=0x0) returned 0x54 [0083.012] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e520) returned 1 [0083.012] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\ur1m5T0qt.lnk" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\windows\\recent\\ur1m5t0qt.lnk"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x264 [0083.012] GetFileType (hFile=0x264) returned 0x1 [0083.012] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e51c) returned 1 [0083.012] GetFileType (hFile=0x264) returned 0x1 [0083.012] GetFileSize (in: hFile=0x264, lpFileSizeHigh=0x31e628 | out: lpFileSizeHigh=0x31e628*=0x0) returned 0xf50 [0083.012] ReadFile (in: hFile=0x264, lpBuffer=0x27b088c, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x31e5d4, lpOverlapped=0x0 | out: lpBuffer=0x27b088c*, lpNumberOfBytesRead=0x31e5d4*=0xf50, lpOverlapped=0x0) returned 1 [0083.026] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\ur1m5T0qt.lnk", nBufferLength=0x105, lpBuffer=0x31e018, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\ur1m5T0qt.lnk", lpFilePart=0x0) returned 0x54 [0083.026] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e50c) returned 1 [0083.026] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\ur1m5T0qt.lnk" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\windows\\recent\\ur1m5t0qt.lnk"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x264 [0083.027] GetFileType (hFile=0x264) returned 0x1 [0083.027] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e508) returned 1 [0083.027] GetFileType (hFile=0x264) returned 0x1 [0083.027] WriteFile (in: hFile=0x264, lpBuffer=0x28034a8*, nNumberOfBytesToWrite=0xf60, lpNumberOfBytesWritten=0x31e59c, lpOverlapped=0x0 | out: lpBuffer=0x28034a8*, lpNumberOfBytesWritten=0x31e59c*=0xf60, lpOverlapped=0x0) returned 1 [0083.028] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\ur1m5T0qt.lnk", nBufferLength=0x105, lpBuffer=0x31e14c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\ur1m5T0qt.lnk", lpFilePart=0x0) returned 0x54 [0083.028] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\ur1m5T0qt.lnk", nBufferLength=0x105, lpBuffer=0x31e14c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\ur1m5T0qt.lnk", lpFilePart=0x0) returned 0x54 [0083.028] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e5ac) returned 1 [0083.028] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\ur1m5T0qt.lnk" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\windows\\recent\\ur1m5t0qt.lnk"), fInfoLevelId=0x0, lpFileInformation=0x31e628 | out: lpFileInformation=0x31e628*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xdd5fb0a0, ftCreationTime.dwHighDateTime=0x1d5e82a, ftLastAccessTime.dwLowDateTime=0xdd5fb0a0, ftLastAccessTime.dwHighDateTime=0x1d5e82a, ftLastWriteTime.dwLowDateTime=0x14eef960, ftLastWriteTime.dwHighDateTime=0x1d6eb7f, nFileSizeHigh=0x0, nFileSizeLow=0xf60)) returned 1 [0083.028] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e5a8) returned 1 [0083.028] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\ur1m5T0qt.lnk" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\windows\\recent\\ur1m5t0qt.lnk"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\ur1m5T0qt.lnk" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\windows\\recent\\ur1m5t0qt.lnk")) returned 1 [0083.029] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\utBP6.lnk", nBufferLength=0x105, lpBuffer=0x31e02c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\utBP6.lnk", lpFilePart=0x0) returned 0x50 [0083.029] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e520) returned 1 [0083.029] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\utBP6.lnk" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\windows\\recent\\utbp6.lnk"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x264 [0083.029] GetFileType (hFile=0x264) returned 0x1 [0083.029] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e51c) returned 1 [0083.029] GetFileType (hFile=0x264) returned 0x1 [0083.029] GetFileSize (in: hFile=0x264, lpFileSizeHigh=0x31e628 | out: lpFileSizeHigh=0x31e628*=0x0) returned 0xf55 [0083.029] ReadFile (in: hFile=0x264, lpBuffer=0x28056cc, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x31e5d4, lpOverlapped=0x0 | out: lpBuffer=0x28056cc*, lpNumberOfBytesRead=0x31e5d4*=0xf55, lpOverlapped=0x0) returned 1 [0083.043] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\utBP6.lnk", nBufferLength=0x105, lpBuffer=0x31e018, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\utBP6.lnk", lpFilePart=0x0) returned 0x50 [0083.043] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e50c) returned 1 [0083.043] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\utBP6.lnk" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\windows\\recent\\utbp6.lnk"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x264 [0083.044] GetFileType (hFile=0x264) returned 0x1 [0083.044] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e508) returned 1 [0083.044] GetFileType (hFile=0x264) returned 0x1 [0083.044] WriteFile (in: hFile=0x264, lpBuffer=0x28582d4*, nNumberOfBytesToWrite=0xf60, lpNumberOfBytesWritten=0x31e59c, lpOverlapped=0x0 | out: lpBuffer=0x28582d4*, lpNumberOfBytesWritten=0x31e59c*=0xf60, lpOverlapped=0x0) returned 1 [0083.045] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\utBP6.lnk", nBufferLength=0x105, lpBuffer=0x31e14c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\utBP6.lnk", lpFilePart=0x0) returned 0x50 [0083.045] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\utBP6.lnk", nBufferLength=0x105, lpBuffer=0x31e14c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\utBP6.lnk", lpFilePart=0x0) returned 0x50 [0083.045] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e5ac) returned 1 [0083.045] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\utBP6.lnk" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\windows\\recent\\utbp6.lnk"), fInfoLevelId=0x0, lpFileInformation=0x31e628 | out: lpFileInformation=0x31e628*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xdd5d4f40, ftCreationTime.dwHighDateTime=0x1d5e82a, ftLastAccessTime.dwLowDateTime=0xdd5d4f40, ftLastAccessTime.dwHighDateTime=0x1d5e82a, ftLastWriteTime.dwLowDateTime=0x14f15ac0, ftLastWriteTime.dwHighDateTime=0x1d6eb7f, nFileSizeHigh=0x0, nFileSizeLow=0xf60)) returned 1 [0083.045] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e5a8) returned 1 [0083.045] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\utBP6.lnk" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\windows\\recent\\utbp6.lnk"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\utBP6.lnk" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\windows\\recent\\utbp6.lnk")) returned 1 [0083.049] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\Uv _kLMMgs1_MElw.flv.lnk", nBufferLength=0x105, lpBuffer=0x31e02c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\Uv _kLMMgs1_MElw.flv.lnk", lpFilePart=0x0) returned 0x5f [0083.049] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e520) returned 1 [0083.049] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\Uv _kLMMgs1_MElw.flv.lnk" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\windows\\recent\\uv _klmmgs1_melw.flv.lnk"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x264 [0083.049] GetFileType (hFile=0x264) returned 0x1 [0083.049] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e51c) returned 1 [0083.049] GetFileType (hFile=0x264) returned 0x1 [0083.049] GetFileSize (in: hFile=0x264, lpFileSizeHigh=0x31e628 | out: lpFileSizeHigh=0x31e628*=0x0) returned 0x410 [0083.049] ReadFile (in: hFile=0x264, lpBuffer=0x2658c24, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x31e5d4, lpOverlapped=0x0 | out: lpBuffer=0x2658c24*, lpNumberOfBytesRead=0x31e5d4*=0x410, lpOverlapped=0x0) returned 1 [0083.089] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\Uv _kLMMgs1_MElw.flv.lnk", nBufferLength=0x105, lpBuffer=0x31e018, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\Uv _kLMMgs1_MElw.flv.lnk", lpFilePart=0x0) returned 0x5f [0083.089] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e50c) returned 1 [0083.089] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\Uv _kLMMgs1_MElw.flv.lnk" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\windows\\recent\\uv _klmmgs1_melw.flv.lnk"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x264 [0083.090] GetFileType (hFile=0x264) returned 0x1 [0083.090] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e508) returned 1 [0083.090] GetFileType (hFile=0x264) returned 0x1 [0083.090] WriteFile (in: hFile=0x264, lpBuffer=0x26a8188*, nNumberOfBytesToWrite=0x420, lpNumberOfBytesWritten=0x31e59c, lpOverlapped=0x0 | out: lpBuffer=0x26a8188*, lpNumberOfBytesWritten=0x31e59c*=0x420, lpOverlapped=0x0) returned 1 [0083.091] CloseHandle (hObject=0x264) returned 1 [0083.091] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\Uv _kLMMgs1_MElw.flv.lnk", nBufferLength=0x105, lpBuffer=0x31e14c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\Uv _kLMMgs1_MElw.flv.lnk", lpFilePart=0x0) returned 0x5f [0083.091] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\Uv _kLMMgs1_MElw.flv.lnk", nBufferLength=0x105, lpBuffer=0x31e14c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\Uv _kLMMgs1_MElw.flv.lnk", lpFilePart=0x0) returned 0x5f [0083.091] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e5ac) returned 1 [0083.091] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\Uv _kLMMgs1_MElw.flv.lnk" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\windows\\recent\\uv _klmmgs1_melw.flv.lnk"), fInfoLevelId=0x0, lpFileInformation=0x31e628 | out: lpFileInformation=0x31e628*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xdc7d8e00, ftCreationTime.dwHighDateTime=0x1d5e82a, ftLastAccessTime.dwLowDateTime=0xdc7d8e00, ftLastAccessTime.dwHighDateTime=0x1d5e82a, ftLastWriteTime.dwLowDateTime=0x14f87ee0, ftLastWriteTime.dwHighDateTime=0x1d6eb7f, nFileSizeHigh=0x0, nFileSizeLow=0x420)) returned 1 [0083.091] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e5a8) returned 1 [0083.091] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\Uv _kLMMgs1_MElw.flv.lnk" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\windows\\recent\\uv _klmmgs1_melw.flv.lnk"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\Uv _kLMMgs1_MElw.flv.lnk" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\windows\\recent\\uv _klmmgs1_melw.flv.lnk")) returned 1 [0083.092] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\Uvon-ej5Wh.lnk", nBufferLength=0x105, lpBuffer=0x31e02c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\Uvon-ej5Wh.lnk", lpFilePart=0x0) returned 0x55 [0083.092] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e520) returned 1 [0083.092] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\Uvon-ej5Wh.lnk" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\windows\\recent\\uvon-ej5wh.lnk"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x264 [0083.092] GetFileType (hFile=0x264) returned 0x1 [0083.092] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e51c) returned 1 [0083.092] GetFileType (hFile=0x264) returned 0x1 [0083.092] GetFileSize (in: hFile=0x264, lpFileSizeHigh=0x31e628 | out: lpFileSizeHigh=0x31e628*=0x0) returned 0xf94 [0083.092] ReadFile (in: hFile=0x264, lpBuffer=0x26aa424, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x31e5d4, lpOverlapped=0x0 | out: lpBuffer=0x26aa424*, lpNumberOfBytesRead=0x31e5d4*=0xf94, lpOverlapped=0x0) returned 1 [0083.093] CloseHandle (hObject=0x264) returned 1 [0083.106] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\Uvon-ej5Wh.lnk", nBufferLength=0x105, lpBuffer=0x31e018, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\Uvon-ej5Wh.lnk", lpFilePart=0x0) returned 0x55 [0083.106] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e50c) returned 1 [0083.106] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\Uvon-ej5Wh.lnk" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\windows\\recent\\uvon-ej5wh.lnk"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x264 [0083.107] GetFileType (hFile=0x264) returned 0x1 [0083.107] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e508) returned 1 [0083.107] GetFileType (hFile=0x264) returned 0x1 [0083.107] WriteFile (in: hFile=0x264, lpBuffer=0x26fd180*, nNumberOfBytesToWrite=0xfa0, lpNumberOfBytesWritten=0x31e59c, lpOverlapped=0x0 | out: lpBuffer=0x26fd180*, lpNumberOfBytesWritten=0x31e59c*=0xfa0, lpOverlapped=0x0) returned 1 [0083.108] CloseHandle (hObject=0x264) returned 1 [0083.108] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\Uvon-ej5Wh.lnk", nBufferLength=0x105, lpBuffer=0x31e14c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\Uvon-ej5Wh.lnk", lpFilePart=0x0) returned 0x55 [0083.108] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\Uvon-ej5Wh.lnk", nBufferLength=0x105, lpBuffer=0x31e14c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\Uvon-ej5Wh.lnk", lpFilePart=0x0) returned 0x55 [0083.108] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e5ac) returned 1 [0083.108] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\Uvon-ej5Wh.lnk" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\windows\\recent\\uvon-ej5wh.lnk"), fInfoLevelId=0x0, lpFileInformation=0x31e628 | out: lpFileInformation=0x31e628*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xdd40bec0, ftCreationTime.dwHighDateTime=0x1d5e82a, ftLastAccessTime.dwLowDateTime=0xdd40bec0, ftLastAccessTime.dwHighDateTime=0x1d5e82a, ftLastWriteTime.dwLowDateTime=0x14fae040, ftLastWriteTime.dwHighDateTime=0x1d6eb7f, nFileSizeHigh=0x0, nFileSizeLow=0xfa0)) returned 1 [0083.108] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e5a8) returned 1 [0083.108] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\Uvon-ej5Wh.lnk" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\windows\\recent\\uvon-ej5wh.lnk"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\Uvon-ej5Wh.lnk" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\windows\\recent\\uvon-ej5wh.lnk")) returned 1 [0083.109] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\UVT6TQK.lnk", nBufferLength=0x105, lpBuffer=0x31e02c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\UVT6TQK.lnk", lpFilePart=0x0) returned 0x52 [0083.109] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e520) returned 1 [0083.109] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\UVT6TQK.lnk" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\windows\\recent\\uvt6tqk.lnk"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x264 [0083.109] GetFileType (hFile=0x264) returned 0x1 [0083.109] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e51c) returned 1 [0083.109] GetFileType (hFile=0x264) returned 0x1 [0083.109] GetFileSize (in: hFile=0x264, lpFileSizeHigh=0x31e628 | out: lpFileSizeHigh=0x31e628*=0x0) returned 0x232 [0083.109] ReadFile (in: hFile=0x264, lpBuffer=0x26fe688, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x31e5d4, lpOverlapped=0x0 | out: lpBuffer=0x26fe688*, lpNumberOfBytesRead=0x31e5d4*=0x232, lpOverlapped=0x0) returned 1 [0083.110] CloseHandle (hObject=0x264) returned 1 [0083.123] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\UVT6TQK.lnk", nBufferLength=0x105, lpBuffer=0x31e018, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\UVT6TQK.lnk", lpFilePart=0x0) returned 0x52 [0083.123] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e50c) returned 1 [0083.123] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\UVT6TQK.lnk" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\windows\\recent\\uvt6tqk.lnk"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x264 [0083.124] GetFileType (hFile=0x264) returned 0x1 [0083.124] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e508) returned 1 [0083.124] GetFileType (hFile=0x264) returned 0x1 [0083.124] WriteFile (in: hFile=0x264, lpBuffer=0x274d0fc*, nNumberOfBytesToWrite=0x240, lpNumberOfBytesWritten=0x31e59c, lpOverlapped=0x0 | out: lpBuffer=0x274d0fc*, lpNumberOfBytesWritten=0x31e59c*=0x240, lpOverlapped=0x0) returned 1 [0083.125] CloseHandle (hObject=0x264) returned 1 [0083.125] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\UVT6TQK.lnk", nBufferLength=0x105, lpBuffer=0x31e14c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\UVT6TQK.lnk", lpFilePart=0x0) returned 0x52 [0083.125] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\UVT6TQK.lnk", nBufferLength=0x105, lpBuffer=0x31e14c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\UVT6TQK.lnk", lpFilePart=0x0) returned 0x52 [0083.125] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e5ac) returned 1 [0083.125] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\UVT6TQK.lnk" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\windows\\recent\\uvt6tqk.lnk"), fInfoLevelId=0x0, lpFileInformation=0x31e628 | out: lpFileInformation=0x31e628*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xdcc295e0, ftCreationTime.dwHighDateTime=0x1d5e82a, ftLastAccessTime.dwLowDateTime=0xdcc295e0, ftLastAccessTime.dwHighDateTime=0x1d5e82a, ftLastWriteTime.dwLowDateTime=0x14fd41a0, ftLastWriteTime.dwHighDateTime=0x1d6eb7f, nFileSizeHigh=0x0, nFileSizeLow=0x240)) returned 1 [0083.125] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e5a8) returned 1 [0083.125] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\UVT6TQK.lnk" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\windows\\recent\\uvt6tqk.lnk"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\UVT6TQK.lnk" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\windows\\recent\\uvt6tqk.lnk")) returned 1 [0083.126] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\UXStKO.lnk", nBufferLength=0x105, lpBuffer=0x31e02c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\UXStKO.lnk", lpFilePart=0x0) returned 0x51 [0083.126] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e520) returned 1 [0083.126] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\UXStKO.lnk" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\windows\\recent\\uxstko.lnk"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x264 [0083.126] GetFileType (hFile=0x264) returned 0x1 [0083.126] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e51c) returned 1 [0083.126] GetFileType (hFile=0x264) returned 0x1 [0083.126] GetFileSize (in: hFile=0x264, lpFileSizeHigh=0x31e628 | out: lpFileSizeHigh=0x31e628*=0x0) returned 0x22d [0083.126] ReadFile (in: hFile=0x264, lpBuffer=0x274e5f4, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x31e5d4, lpOverlapped=0x0 | out: lpBuffer=0x274e5f4*, lpNumberOfBytesRead=0x31e5d4*=0x22d, lpOverlapped=0x0) returned 1 [0083.127] CloseHandle (hObject=0x264) returned 1 [0083.140] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\UXStKO.lnk", nBufferLength=0x105, lpBuffer=0x31e018, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\UXStKO.lnk", lpFilePart=0x0) returned 0x51 [0083.140] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e50c) returned 1 [0083.140] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\UXStKO.lnk" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\windows\\recent\\uxstko.lnk"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x264 [0083.141] GetFileType (hFile=0x264) returned 0x1 [0083.141] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e508) returned 1 [0083.141] GetFileType (hFile=0x264) returned 0x1 [0083.141] WriteFile (in: hFile=0x264, lpBuffer=0x279d008*, nNumberOfBytesToWrite=0x230, lpNumberOfBytesWritten=0x31e59c, lpOverlapped=0x0 | out: lpBuffer=0x279d008*, lpNumberOfBytesWritten=0x31e59c*=0x230, lpOverlapped=0x0) returned 1 [0083.142] CloseHandle (hObject=0x264) returned 1 [0083.142] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\UXStKO.lnk", nBufferLength=0x105, lpBuffer=0x31e14c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\UXStKO.lnk", lpFilePart=0x0) returned 0x51 [0083.142] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\UXStKO.lnk", nBufferLength=0x105, lpBuffer=0x31e14c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\UXStKO.lnk", lpFilePart=0x0) returned 0x51 [0083.142] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e5ac) returned 1 [0083.142] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\UXStKO.lnk" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\windows\\recent\\uxstko.lnk"), fInfoLevelId=0x0, lpFileInformation=0x31e628 | out: lpFileInformation=0x31e628*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xdcc295e0, ftCreationTime.dwHighDateTime=0x1d5e82a, ftLastAccessTime.dwLowDateTime=0xdcc295e0, ftLastAccessTime.dwHighDateTime=0x1d5e82a, ftLastWriteTime.dwLowDateTime=0x14ffa300, ftLastWriteTime.dwHighDateTime=0x1d6eb7f, nFileSizeHigh=0x0, nFileSizeLow=0x230)) returned 1 [0083.142] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e5a8) returned 1 [0083.142] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\UXStKO.lnk" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\windows\\recent\\uxstko.lnk"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\UXStKO.lnk" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\windows\\recent\\uxstko.lnk")) returned 1 [0083.143] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\uZhRJalfyk_WN.lnk", nBufferLength=0x105, lpBuffer=0x31e02c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\uZhRJalfyk_WN.lnk", lpFilePart=0x0) returned 0x58 [0083.143] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e520) returned 1 [0083.143] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\uZhRJalfyk_WN.lnk" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\windows\\recent\\uzhrjalfyk_wn.lnk"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x264 [0083.143] GetFileType (hFile=0x264) returned 0x1 [0083.143] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e51c) returned 1 [0083.143] GetFileType (hFile=0x264) returned 0x1 [0083.143] GetFileSize (in: hFile=0x264, lpFileSizeHigh=0x31e628 | out: lpFileSizeHigh=0x31e628*=0x0) returned 0x401 [0083.143] ReadFile (in: hFile=0x264, lpBuffer=0x279e6e8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x31e5d4, lpOverlapped=0x0 | out: lpBuffer=0x279e6e8*, lpNumberOfBytesRead=0x31e5d4*=0x401, lpOverlapped=0x0) returned 1 [0083.144] CloseHandle (hObject=0x264) returned 1 [0083.157] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\uZhRJalfyk_WN.lnk", nBufferLength=0x105, lpBuffer=0x31e018, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\uZhRJalfyk_WN.lnk", lpFilePart=0x0) returned 0x58 [0083.157] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e50c) returned 1 [0083.157] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\uZhRJalfyk_WN.lnk" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\windows\\recent\\uzhrjalfyk_wn.lnk"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x264 [0083.158] GetFileType (hFile=0x264) returned 0x1 [0083.158] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e508) returned 1 [0083.158] GetFileType (hFile=0x264) returned 0x1 [0083.158] WriteFile (in: hFile=0x264, lpBuffer=0x27eda84*, nNumberOfBytesToWrite=0x410, lpNumberOfBytesWritten=0x31e59c, lpOverlapped=0x0 | out: lpBuffer=0x27eda84*, lpNumberOfBytesWritten=0x31e59c*=0x410, lpOverlapped=0x0) returned 1 [0083.159] CloseHandle (hObject=0x264) returned 1 [0083.159] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\uZhRJalfyk_WN.lnk", nBufferLength=0x105, lpBuffer=0x31e14c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\uZhRJalfyk_WN.lnk", lpFilePart=0x0) returned 0x58 [0083.159] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\uZhRJalfyk_WN.lnk", nBufferLength=0x105, lpBuffer=0x31e14c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\uZhRJalfyk_WN.lnk", lpFilePart=0x0) returned 0x58 [0083.159] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e5ac) returned 1 [0083.159] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\uZhRJalfyk_WN.lnk" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\windows\\recent\\uzhrjalfyk_wn.lnk"), fInfoLevelId=0x0, lpFileInformation=0x31e628 | out: lpFileInformation=0x31e628*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xdba4f0e0, ftCreationTime.dwHighDateTime=0x1d5e82a, ftLastAccessTime.dwLowDateTime=0xdba4f0e0, ftLastAccessTime.dwHighDateTime=0x1d5e82a, ftLastWriteTime.dwLowDateTime=0x15020460, ftLastWriteTime.dwHighDateTime=0x1d6eb7f, nFileSizeHigh=0x0, nFileSizeLow=0x410)) returned 1 [0083.160] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e5a8) returned 1 [0083.160] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\uZhRJalfyk_WN.lnk" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\windows\\recent\\uzhrjalfyk_wn.lnk"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\uZhRJalfyk_WN.lnk" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\windows\\recent\\uzhrjalfyk_wn.lnk")) returned 1 [0083.160] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\v62Jp.lnk", nBufferLength=0x105, lpBuffer=0x31e02c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\v62Jp.lnk", lpFilePart=0x0) returned 0x50 [0083.160] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e520) returned 1 [0083.160] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\v62Jp.lnk" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\windows\\recent\\v62jp.lnk"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x264 [0083.160] GetFileType (hFile=0x264) returned 0x1 [0083.160] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e51c) returned 1 [0083.160] GetFileType (hFile=0x264) returned 0x1 [0083.160] GetFileSize (in: hFile=0x264, lpFileSizeHigh=0x31e628 | out: lpFileSizeHigh=0x31e628*=0x0) returned 0xa00 [0083.161] ReadFile (in: hFile=0x264, lpBuffer=0x27ef760, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x31e5d4, lpOverlapped=0x0 | out: lpBuffer=0x27ef760*, lpNumberOfBytesRead=0x31e5d4*=0xa00, lpOverlapped=0x0) returned 1 [0083.161] CloseHandle (hObject=0x264) returned 1 [0083.190] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\v62Jp.lnk", nBufferLength=0x105, lpBuffer=0x31e018, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\v62Jp.lnk", lpFilePart=0x0) returned 0x50 [0083.190] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e50c) returned 1 [0083.190] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\v62Jp.lnk" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\windows\\recent\\v62jp.lnk"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x264 [0083.191] GetFileType (hFile=0x264) returned 0x1 [0083.191] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e508) returned 1 [0083.191] GetFileType (hFile=0x264) returned 0x1 [0083.191] WriteFile (in: hFile=0x264, lpBuffer=0x28408dc*, nNumberOfBytesToWrite=0xa10, lpNumberOfBytesWritten=0x31e59c, lpOverlapped=0x0 | out: lpBuffer=0x28408dc*, lpNumberOfBytesWritten=0x31e59c*=0xa10, lpOverlapped=0x0) returned 1 [0083.192] CloseHandle (hObject=0x264) returned 1 [0083.192] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\v62Jp.lnk", nBufferLength=0x105, lpBuffer=0x31e14c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\v62Jp.lnk", lpFilePart=0x0) returned 0x50 [0083.192] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\v62Jp.lnk", nBufferLength=0x105, lpBuffer=0x31e14c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\v62Jp.lnk", lpFilePart=0x0) returned 0x50 [0083.192] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e5ac) returned 1 [0083.192] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\v62Jp.lnk" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\windows\\recent\\v62jp.lnk"), fInfoLevelId=0x0, lpFileInformation=0x31e628 | out: lpFileInformation=0x31e628*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xdb8f8480, ftCreationTime.dwHighDateTime=0x1d5e82a, ftLastAccessTime.dwLowDateTime=0xdb8f8480, ftLastAccessTime.dwHighDateTime=0x1d5e82a, ftLastWriteTime.dwLowDateTime=0x1506c720, ftLastWriteTime.dwHighDateTime=0x1d6eb7f, nFileSizeHigh=0x0, nFileSizeLow=0xa10)) returned 1 [0083.192] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e5a8) returned 1 [0083.192] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\v62Jp.lnk" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\windows\\recent\\v62jp.lnk"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\v62Jp.lnk" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\windows\\recent\\v62jp.lnk")) returned 1 [0083.193] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\V7vkSt.lnk", nBufferLength=0x105, lpBuffer=0x31e02c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\V7vkSt.lnk", lpFilePart=0x0) returned 0x51 [0083.193] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e520) returned 1 [0083.193] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\V7vkSt.lnk" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\windows\\recent\\v7vkst.lnk"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x264 [0083.193] GetFileType (hFile=0x264) returned 0x1 [0083.193] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e51c) returned 1 [0083.193] GetFileType (hFile=0x264) returned 0x1 [0083.193] GetFileSize (in: hFile=0x264, lpFileSizeHigh=0x31e628 | out: lpFileSizeHigh=0x31e628*=0x0) returned 0x3dc [0083.193] ReadFile (in: hFile=0x264, lpBuffer=0x2841f78, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x31e5d4, lpOverlapped=0x0 | out: lpBuffer=0x2841f78*, lpNumberOfBytesRead=0x31e5d4*=0x3dc, lpOverlapped=0x0) returned 1 [0083.194] CloseHandle (hObject=0x264) returned 1 [0083.240] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\V7vkSt.lnk", nBufferLength=0x105, lpBuffer=0x31e018, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\V7vkSt.lnk", lpFilePart=0x0) returned 0x51 [0083.240] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e50c) returned 1 [0083.240] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\V7vkSt.lnk" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\windows\\recent\\v7vkst.lnk"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x264 [0083.241] GetFileType (hFile=0x264) returned 0x1 [0083.241] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e508) returned 1 [0083.241] GetFileType (hFile=0x264) returned 0x1 [0083.241] WriteFile (in: hFile=0x264, lpBuffer=0x26918b8*, nNumberOfBytesToWrite=0x3e0, lpNumberOfBytesWritten=0x31e59c, lpOverlapped=0x0 | out: lpBuffer=0x26918b8*, lpNumberOfBytesWritten=0x31e59c*=0x3e0, lpOverlapped=0x0) returned 1 [0083.242] CloseHandle (hObject=0x264) returned 1 [0083.242] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\V7vkSt.lnk", nBufferLength=0x105, lpBuffer=0x31e14c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\V7vkSt.lnk", lpFilePart=0x0) returned 0x51 [0083.243] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\V7vkSt.lnk", nBufferLength=0x105, lpBuffer=0x31e14c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\V7vkSt.lnk", lpFilePart=0x0) returned 0x51 [0083.243] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e5ac) returned 1 [0083.243] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\V7vkSt.lnk" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\windows\\recent\\v7vkst.lnk"), fInfoLevelId=0x0, lpFileInformation=0x31e628 | out: lpFileInformation=0x31e628*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xdce64a80, ftCreationTime.dwHighDateTime=0x1d5e82a, ftLastAccessTime.dwLowDateTime=0xdce64a80, ftLastAccessTime.dwHighDateTime=0x1d5e82a, ftLastWriteTime.dwLowDateTime=0x15104ca0, ftLastWriteTime.dwHighDateTime=0x1d6eb7f, nFileSizeHigh=0x0, nFileSizeLow=0x3e0)) returned 1 [0083.243] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e5a8) returned 1 [0083.243] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\V7vkSt.lnk" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\windows\\recent\\v7vkst.lnk"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\V7vkSt.lnk" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\windows\\recent\\v7vkst.lnk")) returned 1 [0083.243] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\VPUJVJbaoT0AA1L.lnk", nBufferLength=0x105, lpBuffer=0x31e02c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\VPUJVJbaoT0AA1L.lnk", lpFilePart=0x0) returned 0x5a [0083.243] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e520) returned 1 [0083.243] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\VPUJVJbaoT0AA1L.lnk" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\windows\\recent\\vpujvjbaot0aa1l.lnk"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x264 [0083.244] GetFileType (hFile=0x264) returned 0x1 [0083.244] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e51c) returned 1 [0083.244] GetFileType (hFile=0x264) returned 0x1 [0083.244] GetFileSize (in: hFile=0x264, lpFileSizeHigh=0x31e628 | out: lpFileSizeHigh=0x31e628*=0x0) returned 0x996 [0083.244] ReadFile (in: hFile=0x264, lpBuffer=0x2693534, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x31e5d4, lpOverlapped=0x0 | out: lpBuffer=0x2693534*, lpNumberOfBytesRead=0x31e5d4*=0x996, lpOverlapped=0x0) returned 1 [0083.245] CloseHandle (hObject=0x264) returned 1 [0083.430] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\VPUJVJbaoT0AA1L.lnk", nBufferLength=0x105, lpBuffer=0x31e018, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\VPUJVJbaoT0AA1L.lnk", lpFilePart=0x0) returned 0x5a [0083.430] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e50c) returned 1 [0083.430] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\VPUJVJbaoT0AA1L.lnk" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\windows\\recent\\vpujvjbaot0aa1l.lnk"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x264 [0083.431] GetFileType (hFile=0x264) returned 0x1 [0083.431] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e508) returned 1 [0083.431] GetFileType (hFile=0x264) returned 0x1 [0083.431] WriteFile (in: hFile=0x264, lpBuffer=0x26e4600*, nNumberOfBytesToWrite=0x9a0, lpNumberOfBytesWritten=0x31e59c, lpOverlapped=0x0 | out: lpBuffer=0x26e4600*, lpNumberOfBytesWritten=0x31e59c*=0x9a0, lpOverlapped=0x0) returned 1 [0083.432] CloseHandle (hObject=0x264) returned 1 [0083.432] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\VPUJVJbaoT0AA1L.lnk", nBufferLength=0x105, lpBuffer=0x31e14c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\VPUJVJbaoT0AA1L.lnk", lpFilePart=0x0) returned 0x5a [0083.432] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\VPUJVJbaoT0AA1L.lnk", nBufferLength=0x105, lpBuffer=0x31e14c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\VPUJVJbaoT0AA1L.lnk", lpFilePart=0x0) returned 0x5a [0083.433] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e5ac) returned 1 [0083.433] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\VPUJVJbaoT0AA1L.lnk" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\windows\\recent\\vpujvjbaot0aa1l.lnk"), fInfoLevelId=0x0, lpFileInformation=0x31e628 | out: lpFileInformation=0x31e628*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xdb351040, ftCreationTime.dwHighDateTime=0x1d5e82a, ftLastAccessTime.dwLowDateTime=0xdd4f0700, ftLastAccessTime.dwHighDateTime=0x1d5e82a, ftLastWriteTime.dwLowDateTime=0x152cdd20, ftLastWriteTime.dwHighDateTime=0x1d6eb7f, nFileSizeHigh=0x0, nFileSizeLow=0x9a0)) returned 1 [0083.433] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e5a8) returned 1 [0083.433] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\VPUJVJbaoT0AA1L.lnk" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\windows\\recent\\vpujvjbaot0aa1l.lnk"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\VPUJVJbaoT0AA1L.lnk" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\windows\\recent\\vpujvjbaot0aa1l.lnk")) returned 1 [0083.433] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\VRQcjXR.flv.lnk", nBufferLength=0x105, lpBuffer=0x31e02c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\VRQcjXR.flv.lnk", lpFilePart=0x0) returned 0x56 [0083.433] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e520) returned 1 [0083.433] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\VRQcjXR.flv.lnk" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\windows\\recent\\vrqcjxr.flv.lnk"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x264 [0083.434] GetFileType (hFile=0x264) returned 0x1 [0083.434] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e51c) returned 1 [0083.434] GetFileType (hFile=0x264) returned 0x1 [0083.434] GetFileSize (in: hFile=0x264, lpFileSizeHigh=0x31e628 | out: lpFileSizeHigh=0x31e628*=0x0) returned 0x13f0 [0083.434] ReadFile (in: hFile=0x264, lpBuffer=0x26e58f0, nNumberOfBytesToRead=0x13f0, lpNumberOfBytesRead=0x31e5d4, lpOverlapped=0x0 | out: lpBuffer=0x26e58f0*, lpNumberOfBytesRead=0x31e5d4*=0x13f0, lpOverlapped=0x0) returned 1 [0083.434] CloseHandle (hObject=0x264) returned 1 [0083.448] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\VRQcjXR.flv.lnk", nBufferLength=0x105, lpBuffer=0x31e018, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\VRQcjXR.flv.lnk", lpFilePart=0x0) returned 0x56 [0083.448] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e50c) returned 1 [0083.448] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\VRQcjXR.flv.lnk" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\windows\\recent\\vrqcjxr.flv.lnk"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x264 [0083.449] GetFileType (hFile=0x264) returned 0x1 [0083.449] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e508) returned 1 [0083.449] GetFileType (hFile=0x264) returned 0x1 [0083.449] WriteFile (in: hFile=0x264, lpBuffer=0x2738ad4*, nNumberOfBytesToWrite=0x1400, lpNumberOfBytesWritten=0x31e5c8, lpOverlapped=0x0 | out: lpBuffer=0x2738ad4*, lpNumberOfBytesWritten=0x31e5c8*=0x1400, lpOverlapped=0x0) returned 1 [0083.450] CloseHandle (hObject=0x264) returned 1 [0083.450] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\VRQcjXR.flv.lnk", nBufferLength=0x105, lpBuffer=0x31e14c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\VRQcjXR.flv.lnk", lpFilePart=0x0) returned 0x56 [0083.450] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\VRQcjXR.flv.lnk", nBufferLength=0x105, lpBuffer=0x31e14c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\VRQcjXR.flv.lnk", lpFilePart=0x0) returned 0x56 [0083.450] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e5ac) returned 1 [0083.450] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\VRQcjXR.flv.lnk" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\windows\\recent\\vrqcjxr.flv.lnk"), fInfoLevelId=0x0, lpFileInformation=0x31e628 | out: lpFileInformation=0x31e628*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xdd751d00, ftCreationTime.dwHighDateTime=0x1d5e82a, ftLastAccessTime.dwLowDateTime=0xdd751d00, ftLastAccessTime.dwHighDateTime=0x1d5e82a, ftLastWriteTime.dwLowDateTime=0x152f3e80, ftLastWriteTime.dwHighDateTime=0x1d6eb7f, nFileSizeHigh=0x0, nFileSizeLow=0x1400)) returned 1 [0083.450] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e5a8) returned 1 [0083.450] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\VRQcjXR.flv.lnk" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\windows\\recent\\vrqcjxr.flv.lnk"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\VRQcjXR.flv.lnk" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\windows\\recent\\vrqcjxr.flv.lnk")) returned 1 [0083.451] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\vZhdjERKcp.lnk", nBufferLength=0x105, lpBuffer=0x31e02c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\vZhdjERKcp.lnk", lpFilePart=0x0) returned 0x55 [0083.451] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e520) returned 1 [0083.451] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\vZhdjERKcp.lnk" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\windows\\recent\\vzhdjerkcp.lnk"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x264 [0083.451] GetFileType (hFile=0x264) returned 0x1 [0083.451] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e51c) returned 1 [0083.451] GetFileType (hFile=0x264) returned 0x1 [0083.451] GetFileSize (in: hFile=0x264, lpFileSizeHigh=0x31e628 | out: lpFileSizeHigh=0x31e628*=0x0) returned 0x2c6 [0083.451] ReadFile (in: hFile=0x264, lpBuffer=0x273a5c8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x31e5d4, lpOverlapped=0x0 | out: lpBuffer=0x273a5c8*, lpNumberOfBytesRead=0x31e5d4*=0x2c6, lpOverlapped=0x0) returned 1 [0083.452] CloseHandle (hObject=0x264) returned 1 [0083.465] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\vZhdjERKcp.lnk", nBufferLength=0x105, lpBuffer=0x31e018, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\vZhdjERKcp.lnk", lpFilePart=0x0) returned 0x55 [0083.465] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e50c) returned 1 [0083.466] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\vZhdjERKcp.lnk" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\windows\\recent\\vzhdjerkcp.lnk"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x264 [0083.466] GetFileType (hFile=0x264) returned 0x1 [0083.466] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e508) returned 1 [0083.466] GetFileType (hFile=0x264) returned 0x1 [0083.467] WriteFile (in: hFile=0x264, lpBuffer=0x2789314*, nNumberOfBytesToWrite=0x2d0, lpNumberOfBytesWritten=0x31e59c, lpOverlapped=0x0 | out: lpBuffer=0x2789314*, lpNumberOfBytesWritten=0x31e59c*=0x2d0, lpOverlapped=0x0) returned 1 [0083.467] CloseHandle (hObject=0x264) returned 1 [0083.467] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\vZhdjERKcp.lnk", nBufferLength=0x105, lpBuffer=0x31e14c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\vZhdjERKcp.lnk", lpFilePart=0x0) returned 0x55 [0083.468] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\vZhdjERKcp.lnk", nBufferLength=0x105, lpBuffer=0x31e14c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\vZhdjERKcp.lnk", lpFilePart=0x0) returned 0x55 [0083.468] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e5ac) returned 1 [0083.468] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\vZhdjERKcp.lnk" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\windows\\recent\\vzhdjerkcp.lnk"), fInfoLevelId=0x0, lpFileInformation=0x31e628 | out: lpFileInformation=0x31e628*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xdd242e40, ftCreationTime.dwHighDateTime=0x1d5e82a, ftLastAccessTime.dwLowDateTime=0xdd242e40, ftLastAccessTime.dwHighDateTime=0x1d5e82a, ftLastWriteTime.dwLowDateTime=0x15319fe0, ftLastWriteTime.dwHighDateTime=0x1d6eb7f, nFileSizeHigh=0x0, nFileSizeLow=0x2d0)) returned 1 [0083.468] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e5a8) returned 1 [0083.468] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\vZhdjERKcp.lnk" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\windows\\recent\\vzhdjerkcp.lnk"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\vZhdjERKcp.lnk" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\windows\\recent\\vzhdjerkcp.lnk")) returned 1 [0083.468] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\vzk6K51PQW9jyiRf.lnk", nBufferLength=0x105, lpBuffer=0x31e02c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\vzk6K51PQW9jyiRf.lnk", lpFilePart=0x0) returned 0x5b [0083.468] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e520) returned 1 [0083.468] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\vzk6K51PQW9jyiRf.lnk" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\windows\\recent\\vzk6k51pqw9jyirf.lnk"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x264 [0083.468] GetFileType (hFile=0x264) returned 0x1 [0083.469] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e51c) returned 1 [0083.469] GetFileType (hFile=0x264) returned 0x1 [0083.469] GetFileSize (in: hFile=0x264, lpFileSizeHigh=0x31e628 | out: lpFileSizeHigh=0x31e628*=0x0) returned 0x9b8 [0083.469] ReadFile (in: hFile=0x264, lpBuffer=0x278afc4, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x31e5d4, lpOverlapped=0x0 | out: lpBuffer=0x278afc4*, lpNumberOfBytesRead=0x31e5d4*=0x9b8, lpOverlapped=0x0) returned 1 [0083.469] CloseHandle (hObject=0x264) returned 1 [0083.482] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\vzk6K51PQW9jyiRf.lnk", nBufferLength=0x105, lpBuffer=0x31e018, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\vzk6K51PQW9jyiRf.lnk", lpFilePart=0x0) returned 0x5b [0083.482] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e50c) returned 1 [0083.482] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\vzk6K51PQW9jyiRf.lnk" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\windows\\recent\\vzk6k51pqw9jyirf.lnk"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x264 [0083.483] GetFileType (hFile=0x264) returned 0x1 [0083.483] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e508) returned 1 [0083.483] GetFileType (hFile=0x264) returned 0x1 [0083.483] WriteFile (in: hFile=0x264, lpBuffer=0x27dbfd4*, nNumberOfBytesToWrite=0x9c0, lpNumberOfBytesWritten=0x31e59c, lpOverlapped=0x0 | out: lpBuffer=0x27dbfd4*, lpNumberOfBytesWritten=0x31e59c*=0x9c0, lpOverlapped=0x0) returned 1 [0083.484] CloseHandle (hObject=0x264) returned 1 [0083.484] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\vzk6K51PQW9jyiRf.lnk", nBufferLength=0x105, lpBuffer=0x31e14c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\vzk6K51PQW9jyiRf.lnk", lpFilePart=0x0) returned 0x5b [0083.484] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\vzk6K51PQW9jyiRf.lnk", nBufferLength=0x105, lpBuffer=0x31e14c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\vzk6K51PQW9jyiRf.lnk", lpFilePart=0x0) returned 0x5b [0083.484] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e5ac) returned 1 [0083.484] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\vzk6K51PQW9jyiRf.lnk" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\windows\\recent\\vzk6k51pqw9jyirf.lnk"), fInfoLevelId=0x0, lpFileInformation=0x31e628 | out: lpFileInformation=0x31e628*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xdc5516a0, ftCreationTime.dwHighDateTime=0x1d5e82a, ftLastAccessTime.dwLowDateTime=0xdd2b5260, ftLastAccessTime.dwHighDateTime=0x1d5e82a, ftLastWriteTime.dwLowDateTime=0x15340140, ftLastWriteTime.dwHighDateTime=0x1d6eb7f, nFileSizeHigh=0x0, nFileSizeLow=0x9c0)) returned 1 [0083.485] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e5a8) returned 1 [0083.485] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\vzk6K51PQW9jyiRf.lnk" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\windows\\recent\\vzk6k51pqw9jyirf.lnk"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\vzk6K51PQW9jyiRf.lnk" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\windows\\recent\\vzk6k51pqw9jyirf.lnk")) returned 1 [0083.485] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\W2JtfG_38gA.lnk", nBufferLength=0x105, lpBuffer=0x31e02c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\W2JtfG_38gA.lnk", lpFilePart=0x0) returned 0x56 [0083.485] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e520) returned 1 [0083.485] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\W2JtfG_38gA.lnk" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\windows\\recent\\w2jtfg_38ga.lnk"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x264 [0083.485] GetFileType (hFile=0x264) returned 0x1 [0083.485] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e51c) returned 1 [0083.485] GetFileType (hFile=0x264) returned 0x1 [0083.486] GetFileSize (in: hFile=0x264, lpFileSizeHigh=0x31e628 | out: lpFileSizeHigh=0x31e628*=0x0) returned 0x1e4 [0083.486] ReadFile (in: hFile=0x264, lpBuffer=0x27dd4b4, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x31e5d4, lpOverlapped=0x0 | out: lpBuffer=0x27dd4b4*, lpNumberOfBytesRead=0x31e5d4*=0x1e4, lpOverlapped=0x0) returned 1 [0083.486] CloseHandle (hObject=0x264) returned 1 [0083.499] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\W2JtfG_38gA.lnk", nBufferLength=0x105, lpBuffer=0x31e018, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\W2JtfG_38gA.lnk", lpFilePart=0x0) returned 0x56 [0083.499] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e50c) returned 1 [0083.500] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\W2JtfG_38gA.lnk" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\windows\\recent\\w2jtfg_38ga.lnk"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x264 [0083.500] GetFileType (hFile=0x264) returned 0x1 [0083.500] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e508) returned 1 [0083.500] GetFileType (hFile=0x264) returned 0x1 [0083.500] WriteFile (in: hFile=0x264, lpBuffer=0x282bda4*, nNumberOfBytesToWrite=0x1f0, lpNumberOfBytesWritten=0x31e59c, lpOverlapped=0x0 | out: lpBuffer=0x282bda4*, lpNumberOfBytesWritten=0x31e59c*=0x1f0, lpOverlapped=0x0) returned 1 [0083.501] CloseHandle (hObject=0x264) returned 1 [0083.501] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\W2JtfG_38gA.lnk", nBufferLength=0x105, lpBuffer=0x31e14c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\W2JtfG_38gA.lnk", lpFilePart=0x0) returned 0x56 [0083.501] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\W2JtfG_38gA.lnk", nBufferLength=0x105, lpBuffer=0x31e14c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\W2JtfG_38gA.lnk", lpFilePart=0x0) returned 0x56 [0083.501] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e5ac) returned 1 [0083.501] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\W2JtfG_38gA.lnk" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\windows\\recent\\w2jtfg_38ga.lnk"), fInfoLevelId=0x0, lpFileInformation=0x31e628 | out: lpFileInformation=0x31e628*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xdcb91060, ftCreationTime.dwHighDateTime=0x1d5e82a, ftLastAccessTime.dwLowDateTime=0xdd777e60, ftLastAccessTime.dwHighDateTime=0x1d5e82a, ftLastWriteTime.dwLowDateTime=0x153662a0, ftLastWriteTime.dwHighDateTime=0x1d6eb7f, nFileSizeHigh=0x0, nFileSizeLow=0x1f0)) returned 1 [0083.502] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e5a8) returned 1 [0083.502] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\W2JtfG_38gA.lnk" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\windows\\recent\\w2jtfg_38ga.lnk"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\W2JtfG_38gA.lnk" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\windows\\recent\\w2jtfg_38ga.lnk")) returned 1 [0083.502] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\WAwfTxwVF7xfXscX.lnk", nBufferLength=0x105, lpBuffer=0x31e02c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\WAwfTxwVF7xfXscX.lnk", lpFilePart=0x0) returned 0x5b [0083.502] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e520) returned 1 [0083.502] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\WAwfTxwVF7xfXscX.lnk" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\windows\\recent\\wawftxwvf7xfxscx.lnk"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x264 [0083.502] GetFileType (hFile=0x264) returned 0x1 [0083.502] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e51c) returned 1 [0083.502] GetFileType (hFile=0x264) returned 0x1 [0083.503] GetFileSize (in: hFile=0x264, lpFileSizeHigh=0x31e628 | out: lpFileSizeHigh=0x31e628*=0x0) returned 0xe0e [0083.503] ReadFile (in: hFile=0x264, lpBuffer=0x282deb4, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x31e5d4, lpOverlapped=0x0 | out: lpBuffer=0x282deb4*, lpNumberOfBytesRead=0x31e5d4*=0xe0e, lpOverlapped=0x0) returned 1 [0083.503] CloseHandle (hObject=0x264) returned 1 [0083.544] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\WAwfTxwVF7xfXscX.lnk", nBufferLength=0x105, lpBuffer=0x31e018, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\WAwfTxwVF7xfXscX.lnk", lpFilePart=0x0) returned 0x5b [0083.544] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e50c) returned 1 [0083.544] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\WAwfTxwVF7xfXscX.lnk" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\windows\\recent\\wawftxwvf7xfxscx.lnk"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x264 [0083.545] GetFileType (hFile=0x264) returned 0x1 [0083.545] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e508) returned 1 [0083.545] GetFileType (hFile=0x264) returned 0x1 [0083.545] WriteFile (in: hFile=0x264, lpBuffer=0x2680e64*, nNumberOfBytesToWrite=0xe10, lpNumberOfBytesWritten=0x31e59c, lpOverlapped=0x0 | out: lpBuffer=0x2680e64*, lpNumberOfBytesWritten=0x31e59c*=0xe10, lpOverlapped=0x0) returned 1 [0083.546] CloseHandle (hObject=0x264) returned 1 [0083.546] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\WAwfTxwVF7xfXscX.lnk", nBufferLength=0x105, lpBuffer=0x31e14c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\WAwfTxwVF7xfXscX.lnk", lpFilePart=0x0) returned 0x5b [0083.546] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\WAwfTxwVF7xfXscX.lnk", nBufferLength=0x105, lpBuffer=0x31e14c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\WAwfTxwVF7xfXscX.lnk", lpFilePart=0x0) returned 0x5b [0083.546] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e5ac) returned 1 [0083.546] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\WAwfTxwVF7xfXscX.lnk" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\windows\\recent\\wawftxwvf7xfxscx.lnk"), fInfoLevelId=0x0, lpFileInformation=0x31e628 | out: lpFileInformation=0x31e628*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xdbb33920, ftCreationTime.dwHighDateTime=0x1d5e82a, ftLastAccessTime.dwLowDateTime=0xdd1aa8c0, ftLastAccessTime.dwHighDateTime=0x1d5e82a, ftLastWriteTime.dwLowDateTime=0x153d86c0, ftLastWriteTime.dwHighDateTime=0x1d6eb7f, nFileSizeHigh=0x0, nFileSizeLow=0xe10)) returned 1 [0083.547] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e5a8) returned 1 [0083.547] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\WAwfTxwVF7xfXscX.lnk" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\windows\\recent\\wawftxwvf7xfxscx.lnk"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\WAwfTxwVF7xfXscX.lnk" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\windows\\recent\\wawftxwvf7xfxscx.lnk")) returned 1 [0083.547] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\WHE1DQO_Ps0NUHD5IUA.lnk", nBufferLength=0x105, lpBuffer=0x31e02c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\WHE1DQO_Ps0NUHD5IUA.lnk", lpFilePart=0x0) returned 0x5e [0083.547] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e520) returned 1 [0083.547] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\WHE1DQO_Ps0NUHD5IUA.lnk" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\windows\\recent\\whe1dqo_ps0nuhd5iua.lnk"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x264 [0083.547] GetFileType (hFile=0x264) returned 0x1 [0083.547] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e51c) returned 1 [0083.547] GetFileType (hFile=0x264) returned 0x1 [0083.547] GetFileSize (in: hFile=0x264, lpFileSizeHigh=0x31e628 | out: lpFileSizeHigh=0x31e628*=0x0) returned 0xa9a [0083.548] ReadFile (in: hFile=0x264, lpBuffer=0x2682c1c, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x31e5d4, lpOverlapped=0x0 | out: lpBuffer=0x2682c1c*, lpNumberOfBytesRead=0x31e5d4*=0xa9a, lpOverlapped=0x0) returned 1 [0083.548] CloseHandle (hObject=0x264) returned 1 [0083.562] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\WHE1DQO_Ps0NUHD5IUA.lnk", nBufferLength=0x105, lpBuffer=0x31e018, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\WHE1DQO_Ps0NUHD5IUA.lnk", lpFilePart=0x0) returned 0x5e [0083.562] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e50c) returned 1 [0083.562] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\WHE1DQO_Ps0NUHD5IUA.lnk" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\windows\\recent\\whe1dqo_ps0nuhd5iua.lnk"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x264 [0083.562] GetFileType (hFile=0x264) returned 0x1 [0083.562] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e508) returned 1 [0083.562] GetFileType (hFile=0x264) returned 0x1 [0083.563] WriteFile (in: hFile=0x264, lpBuffer=0x26d41f4*, nNumberOfBytesToWrite=0xaa0, lpNumberOfBytesWritten=0x31e59c, lpOverlapped=0x0 | out: lpBuffer=0x26d41f4*, lpNumberOfBytesWritten=0x31e59c*=0xaa0, lpOverlapped=0x0) returned 1 [0083.564] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\WHE1DQO_Ps0NUHD5IUA.lnk", nBufferLength=0x105, lpBuffer=0x31e14c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\WHE1DQO_Ps0NUHD5IUA.lnk", lpFilePart=0x0) returned 0x5e [0083.564] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\WHE1DQO_Ps0NUHD5IUA.lnk", nBufferLength=0x105, lpBuffer=0x31e14c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\WHE1DQO_Ps0NUHD5IUA.lnk", lpFilePart=0x0) returned 0x5e [0083.564] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e5ac) returned 1 [0083.564] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\WHE1DQO_Ps0NUHD5IUA.lnk" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\windows\\recent\\whe1dqo_ps0nuhd5iua.lnk"), fInfoLevelId=0x0, lpFileInformation=0x31e628 | out: lpFileInformation=0x31e628*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xdce3e920, ftCreationTime.dwHighDateTime=0x1d5e82a, ftLastAccessTime.dwLowDateTime=0xdce3e920, ftLastAccessTime.dwHighDateTime=0x1d5e82a, ftLastWriteTime.dwLowDateTime=0x153fe820, ftLastWriteTime.dwHighDateTime=0x1d6eb7f, nFileSizeHigh=0x0, nFileSizeLow=0xaa0)) returned 1 [0083.565] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e5a8) returned 1 [0083.565] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\WHE1DQO_Ps0NUHD5IUA.lnk" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\windows\\recent\\whe1dqo_ps0nuhd5iua.lnk"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\WHE1DQO_Ps0NUHD5IUA.lnk" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\windows\\recent\\whe1dqo_ps0nuhd5iua.lnk")) returned 1 [0083.565] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\wmGhH6LXjHSc.lnk", nBufferLength=0x105, lpBuffer=0x31e02c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\wmGhH6LXjHSc.lnk", lpFilePart=0x0) returned 0x57 [0083.565] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e520) returned 1 [0083.565] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\wmGhH6LXjHSc.lnk" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\windows\\recent\\wmghh6lxjhsc.lnk"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x264 [0083.565] GetFileType (hFile=0x264) returned 0x1 [0083.565] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e51c) returned 1 [0083.565] GetFileType (hFile=0x264) returned 0x1 [0083.565] GetFileSize (in: hFile=0x264, lpFileSizeHigh=0x31e628 | out: lpFileSizeHigh=0x31e628*=0x0) returned 0x15bb [0083.565] ReadFile (in: hFile=0x264, lpBuffer=0x26d54f8, nNumberOfBytesToRead=0x15bb, lpNumberOfBytesRead=0x31e5d4, lpOverlapped=0x0 | out: lpBuffer=0x26d54f8*, lpNumberOfBytesRead=0x31e5d4*=0x15bb, lpOverlapped=0x0) returned 1 [0083.579] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\wmGhH6LXjHSc.lnk", nBufferLength=0x105, lpBuffer=0x31e018, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\wmGhH6LXjHSc.lnk", lpFilePart=0x0) returned 0x57 [0083.579] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e50c) returned 1 [0083.579] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\wmGhH6LXjHSc.lnk" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\windows\\recent\\wmghh6lxjhsc.lnk"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x264 [0083.580] GetFileType (hFile=0x264) returned 0x1 [0083.580] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e508) returned 1 [0083.580] GetFileType (hFile=0x264) returned 0x1 [0083.580] WriteFile (in: hFile=0x264, lpBuffer=0x2728fa0*, nNumberOfBytesToWrite=0x15c0, lpNumberOfBytesWritten=0x31e5c8, lpOverlapped=0x0 | out: lpBuffer=0x2728fa0*, lpNumberOfBytesWritten=0x31e5c8*=0x15c0, lpOverlapped=0x0) returned 1 [0083.581] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\wmGhH6LXjHSc.lnk", nBufferLength=0x105, lpBuffer=0x31e14c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\wmGhH6LXjHSc.lnk", lpFilePart=0x0) returned 0x57 [0083.581] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\wmGhH6LXjHSc.lnk", nBufferLength=0x105, lpBuffer=0x31e14c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\wmGhH6LXjHSc.lnk", lpFilePart=0x0) returned 0x57 [0083.581] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e5ac) returned 1 [0083.581] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\wmGhH6LXjHSc.lnk" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\windows\\recent\\wmghh6lxjhsc.lnk"), fInfoLevelId=0x0, lpFileInformation=0x31e628 | out: lpFileInformation=0x31e628*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xdbba5d40, ftCreationTime.dwHighDateTime=0x1d5e82a, ftLastAccessTime.dwLowDateTime=0xdbba5d40, ftLastAccessTime.dwHighDateTime=0x1d5e82a, ftLastWriteTime.dwLowDateTime=0x15424980, ftLastWriteTime.dwHighDateTime=0x1d6eb7f, nFileSizeHigh=0x0, nFileSizeLow=0x15c0)) returned 1 [0083.581] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e5a8) returned 1 [0083.582] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\wmGhH6LXjHSc.lnk" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\windows\\recent\\wmghh6lxjhsc.lnk"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\wmGhH6LXjHSc.lnk" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\windows\\recent\\wmghh6lxjhsc.lnk")) returned 1 [0083.582] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\woIAzWgoxq8m n.lnk", nBufferLength=0x105, lpBuffer=0x31e02c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\woIAzWgoxq8m n.lnk", lpFilePart=0x0) returned 0x59 [0083.582] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e520) returned 1 [0083.582] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\woIAzWgoxq8m n.lnk" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\windows\\recent\\woiazwgoxq8m n.lnk"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x264 [0083.582] GetFileType (hFile=0x264) returned 0x1 [0083.582] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e51c) returned 1 [0083.582] GetFileType (hFile=0x264) returned 0x1 [0083.582] GetFileSize (in: hFile=0x264, lpFileSizeHigh=0x31e628 | out: lpFileSizeHigh=0x31e628*=0x0) returned 0x2ef [0083.582] ReadFile (in: hFile=0x264, lpBuffer=0x272ac90, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x31e5d4, lpOverlapped=0x0 | out: lpBuffer=0x272ac90*, lpNumberOfBytesRead=0x31e5d4*=0x2ef, lpOverlapped=0x0) returned 1 [0083.609] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\woIAzWgoxq8m n.lnk", nBufferLength=0x105, lpBuffer=0x31e018, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\woIAzWgoxq8m n.lnk", lpFilePart=0x0) returned 0x59 [0083.609] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e50c) returned 1 [0083.609] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\woIAzWgoxq8m n.lnk" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\windows\\recent\\woiazwgoxq8m n.lnk"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x264 [0083.609] GetFileType (hFile=0x264) returned 0x1 [0083.609] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e508) returned 1 [0083.609] GetFileType (hFile=0x264) returned 0x1 [0083.610] WriteFile (in: hFile=0x264, lpBuffer=0x2779a84*, nNumberOfBytesToWrite=0x2f0, lpNumberOfBytesWritten=0x31e59c, lpOverlapped=0x0 | out: lpBuffer=0x2779a84*, lpNumberOfBytesWritten=0x31e59c*=0x2f0, lpOverlapped=0x0) returned 1 [0083.610] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\woIAzWgoxq8m n.lnk", nBufferLength=0x105, lpBuffer=0x31e14c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\woIAzWgoxq8m n.lnk", lpFilePart=0x0) returned 0x59 [0083.610] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\woIAzWgoxq8m n.lnk", nBufferLength=0x105, lpBuffer=0x31e14c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\woIAzWgoxq8m n.lnk", lpFilePart=0x0) returned 0x59 [0083.610] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e5ac) returned 1 [0083.611] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\woIAzWgoxq8m n.lnk" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\windows\\recent\\woiazwgoxq8m n.lnk"), fInfoLevelId=0x0, lpFileInformation=0x31e628 | out: lpFileInformation=0x31e628*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xdd1d0a20, ftCreationTime.dwHighDateTime=0x1d5e82a, ftLastAccessTime.dwLowDateTime=0xdd1d0a20, ftLastAccessTime.dwHighDateTime=0x1d5e82a, ftLastWriteTime.dwLowDateTime=0x15470c40, ftLastWriteTime.dwHighDateTime=0x1d6eb7f, nFileSizeHigh=0x0, nFileSizeLow=0x2f0)) returned 1 [0083.611] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e5a8) returned 1 [0083.611] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\woIAzWgoxq8m n.lnk" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\windows\\recent\\woiazwgoxq8m n.lnk"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\woIAzWgoxq8m n.lnk" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\windows\\recent\\woiazwgoxq8m n.lnk")) returned 1 [0083.611] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\WpAlC1uR.lnk", nBufferLength=0x105, lpBuffer=0x31e02c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\WpAlC1uR.lnk", lpFilePart=0x0) returned 0x53 [0083.611] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e520) returned 1 [0083.611] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\WpAlC1uR.lnk" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\windows\\recent\\wpalc1ur.lnk"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x264 [0083.611] GetFileType (hFile=0x264) returned 0x1 [0083.611] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e51c) returned 1 [0083.611] GetFileType (hFile=0x264) returned 0x1 [0083.611] GetFileSize (in: hFile=0x264, lpFileSizeHigh=0x31e628 | out: lpFileSizeHigh=0x31e628*=0x0) returned 0x3e8 [0083.612] ReadFile (in: hFile=0x264, lpBuffer=0x277b154, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x31e5d4, lpOverlapped=0x0 | out: lpBuffer=0x277b154*, lpNumberOfBytesRead=0x31e5d4*=0x3e8, lpOverlapped=0x0) returned 1 [0083.625] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\WpAlC1uR.lnk", nBufferLength=0x105, lpBuffer=0x31e018, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\WpAlC1uR.lnk", lpFilePart=0x0) returned 0x53 [0083.625] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e50c) returned 1 [0083.626] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\WpAlC1uR.lnk" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\windows\\recent\\wpalc1ur.lnk"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x264 [0083.626] GetFileType (hFile=0x264) returned 0x1 [0083.626] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e508) returned 1 [0083.626] GetFileType (hFile=0x264) returned 0x1 [0083.626] WriteFile (in: hFile=0x264, lpBuffer=0x27ca434*, nNumberOfBytesToWrite=0x3f0, lpNumberOfBytesWritten=0x31e59c, lpOverlapped=0x0 | out: lpBuffer=0x27ca434*, lpNumberOfBytesWritten=0x31e59c*=0x3f0, lpOverlapped=0x0) returned 1 [0083.627] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\WpAlC1uR.lnk", nBufferLength=0x105, lpBuffer=0x31e14c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\WpAlC1uR.lnk", lpFilePart=0x0) returned 0x53 [0083.627] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\WpAlC1uR.lnk", nBufferLength=0x105, lpBuffer=0x31e14c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\WpAlC1uR.lnk", lpFilePart=0x0) returned 0x53 [0083.627] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e5ac) returned 1 [0083.627] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\WpAlC1uR.lnk" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\windows\\recent\\wpalc1ur.lnk"), fInfoLevelId=0x0, lpFileInformation=0x31e628 | out: lpFileInformation=0x31e628*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xdd5aede0, ftCreationTime.dwHighDateTime=0x1d5e82a, ftLastAccessTime.dwLowDateTime=0xdd5aede0, ftLastAccessTime.dwHighDateTime=0x1d5e82a, ftLastWriteTime.dwLowDateTime=0x15496da0, ftLastWriteTime.dwHighDateTime=0x1d6eb7f, nFileSizeHigh=0x0, nFileSizeLow=0x3f0)) returned 1 [0083.627] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e5a8) returned 1 [0083.627] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\WpAlC1uR.lnk" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\windows\\recent\\wpalc1ur.lnk"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\WpAlC1uR.lnk" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\windows\\recent\\wpalc1ur.lnk")) returned 1 [0083.628] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\WUwVH33W.lnk", nBufferLength=0x105, lpBuffer=0x31e02c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\WUwVH33W.lnk", lpFilePart=0x0) returned 0x53 [0083.628] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e520) returned 1 [0083.628] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\WUwVH33W.lnk" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\windows\\recent\\wuwvh33w.lnk"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x264 [0083.628] GetFileType (hFile=0x264) returned 0x1 [0083.628] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e51c) returned 1 [0083.628] GetFileType (hFile=0x264) returned 0x1 [0083.628] GetFileSize (in: hFile=0x264, lpFileSizeHigh=0x31e628 | out: lpFileSizeHigh=0x31e628*=0x0) returned 0x158f [0083.628] ReadFile (in: hFile=0x264, lpBuffer=0x27cb6f8, nNumberOfBytesToRead=0x158f, lpNumberOfBytesRead=0x31e5d4, lpOverlapped=0x0 | out: lpBuffer=0x27cb6f8*, lpNumberOfBytesRead=0x31e5d4*=0x158f, lpOverlapped=0x0) returned 1 [0083.642] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\WUwVH33W.lnk", nBufferLength=0x105, lpBuffer=0x31e018, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\WUwVH33W.lnk", lpFilePart=0x0) returned 0x53 [0083.642] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e50c) returned 1 [0083.642] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\WUwVH33W.lnk" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\windows\\recent\\wuwvh33w.lnk"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x264 [0083.643] GetFileType (hFile=0x264) returned 0x1 [0083.643] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e508) returned 1 [0083.643] GetFileType (hFile=0x264) returned 0x1 [0083.643] WriteFile (in: hFile=0x264, lpBuffer=0x281f0b0*, nNumberOfBytesToWrite=0x1590, lpNumberOfBytesWritten=0x31e5c8, lpOverlapped=0x0 | out: lpBuffer=0x281f0b0*, lpNumberOfBytesWritten=0x31e5c8*=0x1590, lpOverlapped=0x0) returned 1 [0083.644] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\WUwVH33W.lnk", nBufferLength=0x105, lpBuffer=0x31e14c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\WUwVH33W.lnk", lpFilePart=0x0) returned 0x53 [0083.644] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\WUwVH33W.lnk", nBufferLength=0x105, lpBuffer=0x31e14c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\WUwVH33W.lnk", lpFilePart=0x0) returned 0x53 [0083.644] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e5ac) returned 1 [0083.644] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\WUwVH33W.lnk" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\windows\\recent\\wuwvh33w.lnk"), fInfoLevelId=0x0, lpFileInformation=0x31e628 | out: lpFileInformation=0x31e628*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xdcd80240, ftCreationTime.dwHighDateTime=0x1d5e82a, ftLastAccessTime.dwLowDateTime=0xdcd80240, ftLastAccessTime.dwHighDateTime=0x1d5e82a, ftLastWriteTime.dwLowDateTime=0x154bcf00, ftLastWriteTime.dwHighDateTime=0x1d6eb7f, nFileSizeHigh=0x0, nFileSizeLow=0x1590)) returned 1 [0083.644] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e5a8) returned 1 [0083.644] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\WUwVH33W.lnk" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\windows\\recent\\wuwvh33w.lnk"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\WUwVH33W.lnk" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\windows\\recent\\wuwvh33w.lnk")) returned 1 [0083.645] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\x-WU9.flv.lnk", nBufferLength=0x105, lpBuffer=0x31e02c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\x-WU9.flv.lnk", lpFilePart=0x0) returned 0x54 [0083.645] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e520) returned 1 [0083.645] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\x-WU9.flv.lnk" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\windows\\recent\\x-wu9.flv.lnk"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x264 [0083.645] GetFileType (hFile=0x264) returned 0x1 [0083.645] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e51c) returned 1 [0083.645] GetFileType (hFile=0x264) returned 0x1 [0083.645] GetFileSize (in: hFile=0x264, lpFileSizeHigh=0x31e628 | out: lpFileSizeHigh=0x31e628*=0x0) returned 0x3d5 [0083.645] ReadFile (in: hFile=0x264, lpBuffer=0x2820e24, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x31e5d4, lpOverlapped=0x0 | out: lpBuffer=0x2820e24*, lpNumberOfBytesRead=0x31e5d4*=0x3d5, lpOverlapped=0x0) returned 1 [0083.688] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\x-WU9.flv.lnk", nBufferLength=0x105, lpBuffer=0x31e018, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\x-WU9.flv.lnk", lpFilePart=0x0) returned 0x54 [0083.688] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e50c) returned 1 [0083.688] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\x-WU9.flv.lnk" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\windows\\recent\\x-wu9.flv.lnk"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x264 [0083.689] GetFileType (hFile=0x264) returned 0x1 [0083.689] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e508) returned 1 [0083.689] GetFileType (hFile=0x264) returned 0x1 [0083.689] WriteFile (in: hFile=0x264, lpBuffer=0x266f6b8*, nNumberOfBytesToWrite=0x3e0, lpNumberOfBytesWritten=0x31e59c, lpOverlapped=0x0 | out: lpBuffer=0x266f6b8*, lpNumberOfBytesWritten=0x31e59c*=0x3e0, lpOverlapped=0x0) returned 1 [0083.690] CloseHandle (hObject=0x264) returned 1 [0083.690] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\x-WU9.flv.lnk", nBufferLength=0x105, lpBuffer=0x31e14c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\x-WU9.flv.lnk", lpFilePart=0x0) returned 0x54 [0083.690] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\x-WU9.flv.lnk", nBufferLength=0x105, lpBuffer=0x31e14c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\x-WU9.flv.lnk", lpFilePart=0x0) returned 0x54 [0083.690] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e5ac) returned 1 [0083.690] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\x-WU9.flv.lnk" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\windows\\recent\\x-wu9.flv.lnk"), fInfoLevelId=0x0, lpFileInformation=0x31e628 | out: lpFileInformation=0x31e628*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xdcdf2660, ftCreationTime.dwHighDateTime=0x1d5e82a, ftLastAccessTime.dwLowDateTime=0xdcdf2660, ftLastAccessTime.dwHighDateTime=0x1d5e82a, ftLastWriteTime.dwLowDateTime=0x1552f320, ftLastWriteTime.dwHighDateTime=0x1d6eb7f, nFileSizeHigh=0x0, nFileSizeLow=0x3e0)) returned 1 [0083.690] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e5a8) returned 1 [0083.690] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\x-WU9.flv.lnk" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\windows\\recent\\x-wu9.flv.lnk"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\x-WU9.flv.lnk" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\windows\\recent\\x-wu9.flv.lnk")) returned 1 [0083.691] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\xhxot_kWSkhA9P.lnk", nBufferLength=0x105, lpBuffer=0x31e02c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\xhxot_kWSkhA9P.lnk", lpFilePart=0x0) returned 0x59 [0083.691] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e520) returned 1 [0083.691] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\xhxot_kWSkhA9P.lnk" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\windows\\recent\\xhxot_kwskha9p.lnk"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x264 [0083.691] GetFileType (hFile=0x264) returned 0x1 [0083.691] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e51c) returned 1 [0083.691] GetFileType (hFile=0x264) returned 0x1 [0083.691] GetFileSize (in: hFile=0x264, lpFileSizeHigh=0x31e628 | out: lpFileSizeHigh=0x31e628*=0x0) returned 0x1f3 [0083.691] ReadFile (in: hFile=0x264, lpBuffer=0x2670b9c, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x31e5d4, lpOverlapped=0x0 | out: lpBuffer=0x2670b9c*, lpNumberOfBytesRead=0x31e5d4*=0x1f3, lpOverlapped=0x0) returned 1 [0083.692] CloseHandle (hObject=0x264) returned 1 [0083.705] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\xhxot_kWSkhA9P.lnk", nBufferLength=0x105, lpBuffer=0x31e018, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\xhxot_kWSkhA9P.lnk", lpFilePart=0x0) returned 0x59 [0083.705] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e50c) returned 1 [0083.705] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\xhxot_kWSkhA9P.lnk" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\windows\\recent\\xhxot_kwskha9p.lnk"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x264 [0083.706] GetFileType (hFile=0x264) returned 0x1 [0083.706] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e508) returned 1 [0083.706] GetFileType (hFile=0x264) returned 0x1 [0083.706] WriteFile (in: hFile=0x264, lpBuffer=0x26bf648*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x31e59c, lpOverlapped=0x0 | out: lpBuffer=0x26bf648*, lpNumberOfBytesWritten=0x31e59c*=0x200, lpOverlapped=0x0) returned 1 [0083.707] CloseHandle (hObject=0x264) returned 1 [0083.707] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\xhxot_kWSkhA9P.lnk", nBufferLength=0x105, lpBuffer=0x31e14c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\xhxot_kWSkhA9P.lnk", lpFilePart=0x0) returned 0x59 [0083.707] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\xhxot_kWSkhA9P.lnk", nBufferLength=0x105, lpBuffer=0x31e14c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\xhxot_kWSkhA9P.lnk", lpFilePart=0x0) returned 0x59 [0083.707] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e5ac) returned 1 [0083.707] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\xhxot_kWSkhA9P.lnk" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\windows\\recent\\xhxot_kwskha9p.lnk"), fInfoLevelId=0x0, lpFileInformation=0x31e628 | out: lpFileInformation=0x31e628*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xdae42180, ftCreationTime.dwHighDateTime=0x1d5e82a, ftLastAccessTime.dwLowDateTime=0xdd3bfc00, ftLastAccessTime.dwHighDateTime=0x1d5e82a, ftLastWriteTime.dwLowDateTime=0x15555480, ftLastWriteTime.dwHighDateTime=0x1d6eb7f, nFileSizeHigh=0x0, nFileSizeLow=0x200)) returned 1 [0083.707] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e5a8) returned 1 [0083.708] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\xhxot_kWSkhA9P.lnk" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\windows\\recent\\xhxot_kwskha9p.lnk"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\xhxot_kWSkhA9P.lnk" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\windows\\recent\\xhxot_kwskha9p.lnk")) returned 1 [0083.708] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\xi26C-f e26K1XH.lnk", nBufferLength=0x105, lpBuffer=0x31e02c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\xi26C-f e26K1XH.lnk", lpFilePart=0x0) returned 0x5a [0083.708] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e520) returned 1 [0083.708] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\xi26C-f e26K1XH.lnk" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\windows\\recent\\xi26c-f e26k1xh.lnk"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x264 [0083.708] GetFileType (hFile=0x264) returned 0x1 [0083.708] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e51c) returned 1 [0083.708] GetFileType (hFile=0x264) returned 0x1 [0083.708] GetFileSize (in: hFile=0x264, lpFileSizeHigh=0x31e628 | out: lpFileSizeHigh=0x31e628*=0x0) returned 0x25c [0083.708] ReadFile (in: hFile=0x264, lpBuffer=0x26c0ba8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x31e5d4, lpOverlapped=0x0 | out: lpBuffer=0x26c0ba8*, lpNumberOfBytesRead=0x31e5d4*=0x25c, lpOverlapped=0x0) returned 1 [0083.709] CloseHandle (hObject=0x264) returned 1 [0083.723] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\xi26C-f e26K1XH.lnk", nBufferLength=0x105, lpBuffer=0x31e018, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\xi26C-f e26K1XH.lnk", lpFilePart=0x0) returned 0x5a [0083.723] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e50c) returned 1 [0083.723] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\xi26C-f e26K1XH.lnk" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\windows\\recent\\xi26c-f e26k1xh.lnk"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x264 [0083.724] GetFileType (hFile=0x264) returned 0x1 [0083.724] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e508) returned 1 [0083.724] GetFileType (hFile=0x264) returned 0x1 [0083.724] WriteFile (in: hFile=0x264, lpBuffer=0x270f6d0*, nNumberOfBytesToWrite=0x260, lpNumberOfBytesWritten=0x31e59c, lpOverlapped=0x0 | out: lpBuffer=0x270f6d0*, lpNumberOfBytesWritten=0x31e59c*=0x260, lpOverlapped=0x0) returned 1 [0083.725] CloseHandle (hObject=0x264) returned 1 [0083.725] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\xi26C-f e26K1XH.lnk", nBufferLength=0x105, lpBuffer=0x31e14c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\xi26C-f e26K1XH.lnk", lpFilePart=0x0) returned 0x5a [0083.725] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\xi26C-f e26K1XH.lnk", nBufferLength=0x105, lpBuffer=0x31e14c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\xi26C-f e26K1XH.lnk", lpFilePart=0x0) returned 0x5a [0083.725] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e5ac) returned 1 [0083.725] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\xi26C-f e26K1XH.lnk" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\windows\\recent\\xi26c-f e26k1xh.lnk"), fInfoLevelId=0x0, lpFileInformation=0x31e628 | out: lpFileInformation=0x31e628*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xdbb59a80, ftCreationTime.dwHighDateTime=0x1d5e82a, ftLastAccessTime.dwLowDateTime=0xdbb59a80, ftLastAccessTime.dwHighDateTime=0x1d5e82a, ftLastWriteTime.dwLowDateTime=0x1557b5e0, ftLastWriteTime.dwHighDateTime=0x1d6eb7f, nFileSizeHigh=0x0, nFileSizeLow=0x260)) returned 1 [0083.726] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e5a8) returned 1 [0083.726] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\xi26C-f e26K1XH.lnk" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\windows\\recent\\xi26c-f e26k1xh.lnk"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\xi26C-f e26K1XH.lnk" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\windows\\recent\\xi26c-f e26k1xh.lnk")) returned 1 [0083.726] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\Xjiv7PmC.lnk", nBufferLength=0x105, lpBuffer=0x31e02c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\Xjiv7PmC.lnk", lpFilePart=0x0) returned 0x53 [0083.726] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e520) returned 1 [0083.726] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\Xjiv7PmC.lnk" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\windows\\recent\\xjiv7pmc.lnk"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x264 [0083.726] GetFileType (hFile=0x264) returned 0x1 [0083.726] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e51c) returned 1 [0083.726] GetFileType (hFile=0x264) returned 0x1 [0083.726] GetFileSize (in: hFile=0x264, lpFileSizeHigh=0x31e628 | out: lpFileSizeHigh=0x31e628*=0x0) returned 0x3e8 [0083.727] ReadFile (in: hFile=0x264, lpBuffer=0x2710da8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x31e5d4, lpOverlapped=0x0 | out: lpBuffer=0x2710da8*, lpNumberOfBytesRead=0x31e5d4*=0x3e8, lpOverlapped=0x0) returned 1 [0083.727] CloseHandle (hObject=0x264) returned 1 [0083.740] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\Xjiv7PmC.lnk", nBufferLength=0x105, lpBuffer=0x31e018, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\Xjiv7PmC.lnk", lpFilePart=0x0) returned 0x53 [0083.740] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e50c) returned 1 [0083.740] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\Xjiv7PmC.lnk" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\windows\\recent\\xjiv7pmc.lnk"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x264 [0083.742] GetFileType (hFile=0x264) returned 0x1 [0083.742] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e508) returned 1 [0083.742] GetFileType (hFile=0x264) returned 0x1 [0083.742] WriteFile (in: hFile=0x264, lpBuffer=0x2760088*, nNumberOfBytesToWrite=0x3f0, lpNumberOfBytesWritten=0x31e59c, lpOverlapped=0x0 | out: lpBuffer=0x2760088*, lpNumberOfBytesWritten=0x31e59c*=0x3f0, lpOverlapped=0x0) returned 1 [0083.743] CloseHandle (hObject=0x264) returned 1 [0083.743] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\Xjiv7PmC.lnk", nBufferLength=0x105, lpBuffer=0x31e14c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\Xjiv7PmC.lnk", lpFilePart=0x0) returned 0x53 [0083.743] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\Xjiv7PmC.lnk", nBufferLength=0x105, lpBuffer=0x31e14c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\Xjiv7PmC.lnk", lpFilePart=0x0) returned 0x53 [0083.743] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e5ac) returned 1 [0083.743] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\Xjiv7PmC.lnk" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\windows\\recent\\xjiv7pmc.lnk"), fInfoLevelId=0x0, lpFileInformation=0x31e628 | out: lpFileInformation=0x31e628*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xdca3a400, ftCreationTime.dwHighDateTime=0x1d5e82a, ftLastAccessTime.dwLowDateTime=0xdca3a400, ftLastAccessTime.dwHighDateTime=0x1d5e82a, ftLastWriteTime.dwLowDateTime=0x155c78a0, ftLastWriteTime.dwHighDateTime=0x1d6eb7f, nFileSizeHigh=0x0, nFileSizeLow=0x3f0)) returned 1 [0083.743] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e5a8) returned 1 [0083.743] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\Xjiv7PmC.lnk" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\windows\\recent\\xjiv7pmc.lnk"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\Xjiv7PmC.lnk" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\windows\\recent\\xjiv7pmc.lnk")) returned 1 [0083.744] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\XQv9HAJ4krDS5PoLDZN.ots.lnk", nBufferLength=0x105, lpBuffer=0x31e02c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\XQv9HAJ4krDS5PoLDZN.ots.lnk", lpFilePart=0x0) returned 0x62 [0083.744] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e520) returned 1 [0083.744] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\XQv9HAJ4krDS5PoLDZN.ots.lnk" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\windows\\recent\\xqv9haj4krds5poldzn.ots.lnk"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x264 [0083.744] GetFileType (hFile=0x264) returned 0x1 [0083.744] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e51c) returned 1 [0083.744] GetFileType (hFile=0x264) returned 0x1 [0083.744] GetFileSize (in: hFile=0x264, lpFileSizeHigh=0x31e628 | out: lpFileSizeHigh=0x31e628*=0x0) returned 0x2217 [0083.744] ReadFile (in: hFile=0x264, lpBuffer=0x2761388, nNumberOfBytesToRead=0x2217, lpNumberOfBytesRead=0x31e5d4, lpOverlapped=0x0 | out: lpBuffer=0x2761388*, lpNumberOfBytesRead=0x31e5d4*=0x2217, lpOverlapped=0x0) returned 1 [0083.745] CloseHandle (hObject=0x264) returned 1 [0083.758] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\XQv9HAJ4krDS5PoLDZN.ots.lnk", nBufferLength=0x105, lpBuffer=0x31e018, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\XQv9HAJ4krDS5PoLDZN.ots.lnk", lpFilePart=0x0) returned 0x62 [0083.758] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e50c) returned 1 [0083.758] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\XQv9HAJ4krDS5PoLDZN.ots.lnk" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\windows\\recent\\xqv9haj4krds5poldzn.ots.lnk"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x264 [0083.759] GetFileType (hFile=0x264) returned 0x1 [0083.759] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e508) returned 1 [0083.759] GetFileType (hFile=0x264) returned 0x1 [0083.759] WriteFile (in: hFile=0x264, lpBuffer=0x27b8c10*, nNumberOfBytesToWrite=0x2220, lpNumberOfBytesWritten=0x31e5c8, lpOverlapped=0x0 | out: lpBuffer=0x27b8c10*, lpNumberOfBytesWritten=0x31e5c8*=0x2220, lpOverlapped=0x0) returned 1 [0083.760] CloseHandle (hObject=0x264) returned 1 [0083.760] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\XQv9HAJ4krDS5PoLDZN.ots.lnk", nBufferLength=0x105, lpBuffer=0x31e14c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\XQv9HAJ4krDS5PoLDZN.ots.lnk", lpFilePart=0x0) returned 0x62 [0083.760] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\XQv9HAJ4krDS5PoLDZN.ots.lnk", nBufferLength=0x105, lpBuffer=0x31e14c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\XQv9HAJ4krDS5PoLDZN.ots.lnk", lpFilePart=0x0) returned 0x62 [0083.760] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e5ac) returned 1 [0083.760] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\XQv9HAJ4krDS5PoLDZN.ots.lnk" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\windows\\recent\\xqv9haj4krds5poldzn.ots.lnk"), fInfoLevelId=0x0, lpFileInformation=0x31e628 | out: lpFileInformation=0x31e628*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xdba28f80, ftCreationTime.dwHighDateTime=0x1d5e82a, ftLastAccessTime.dwLowDateTime=0xdba28f80, ftLastAccessTime.dwHighDateTime=0x1d5e82a, ftLastWriteTime.dwLowDateTime=0x155eda00, ftLastWriteTime.dwHighDateTime=0x1d6eb7f, nFileSizeHigh=0x0, nFileSizeLow=0x2220)) returned 1 [0083.760] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e5a8) returned 1 [0083.760] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\XQv9HAJ4krDS5PoLDZN.ots.lnk" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\windows\\recent\\xqv9haj4krds5poldzn.ots.lnk"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\XQv9HAJ4krDS5PoLDZN.ots.lnk" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\windows\\recent\\xqv9haj4krds5poldzn.ots.lnk")) returned 1 [0083.761] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\xXD95e7i 9JIiSYfn.lnk", nBufferLength=0x105, lpBuffer=0x31e02c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\xXD95e7i 9JIiSYfn.lnk", lpFilePart=0x0) returned 0x5c [0083.761] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e520) returned 1 [0083.761] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\xXD95e7i 9JIiSYfn.lnk" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\windows\\recent\\xxd95e7i 9jiisyfn.lnk"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x264 [0083.761] GetFileType (hFile=0x264) returned 0x1 [0083.761] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e51c) returned 1 [0083.761] GetFileType (hFile=0x264) returned 0x1 [0083.761] GetFileSize (in: hFile=0x264, lpFileSizeHigh=0x31e628 | out: lpFileSizeHigh=0x31e628*=0x0) returned 0xa84 [0083.761] ReadFile (in: hFile=0x264, lpBuffer=0x27bbd5c, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x31e5d4, lpOverlapped=0x0 | out: lpBuffer=0x27bbd5c*, lpNumberOfBytesRead=0x31e5d4*=0xa84, lpOverlapped=0x0) returned 1 [0083.762] CloseHandle (hObject=0x264) returned 1 [0083.775] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\xXD95e7i 9JIiSYfn.lnk", nBufferLength=0x105, lpBuffer=0x31e018, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\xXD95e7i 9JIiSYfn.lnk", lpFilePart=0x0) returned 0x5c [0083.775] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e50c) returned 1 [0083.775] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\xXD95e7i 9JIiSYfn.lnk" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\windows\\recent\\xxd95e7i 9jiisyfn.lnk"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x264 [0083.776] GetFileType (hFile=0x264) returned 0x1 [0083.776] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e508) returned 1 [0083.776] GetFileType (hFile=0x264) returned 0x1 [0083.776] WriteFile (in: hFile=0x264, lpBuffer=0x280d184*, nNumberOfBytesToWrite=0xa90, lpNumberOfBytesWritten=0x31e59c, lpOverlapped=0x0 | out: lpBuffer=0x280d184*, lpNumberOfBytesWritten=0x31e59c*=0xa90, lpOverlapped=0x0) returned 1 [0083.777] CloseHandle (hObject=0x264) returned 1 [0083.777] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\xXD95e7i 9JIiSYfn.lnk", nBufferLength=0x105, lpBuffer=0x31e14c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\xXD95e7i 9JIiSYfn.lnk", lpFilePart=0x0) returned 0x5c [0083.777] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\xXD95e7i 9JIiSYfn.lnk", nBufferLength=0x105, lpBuffer=0x31e14c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\xXD95e7i 9JIiSYfn.lnk", lpFilePart=0x0) returned 0x5c [0083.777] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e5ac) returned 1 [0083.777] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\xXD95e7i 9JIiSYfn.lnk" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\windows\\recent\\xxd95e7i 9jiisyfn.lnk"), fInfoLevelId=0x0, lpFileInformation=0x31e628 | out: lpFileInformation=0x31e628*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xdc8bd640, ftCreationTime.dwHighDateTime=0x1d5e82a, ftLastAccessTime.dwLowDateTime=0xdc8bd640, ftLastAccessTime.dwHighDateTime=0x1d5e82a, ftLastWriteTime.dwLowDateTime=0x15613b60, ftLastWriteTime.dwHighDateTime=0x1d6eb7f, nFileSizeHigh=0x0, nFileSizeLow=0xa90)) returned 1 [0083.777] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e5a8) returned 1 [0083.777] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\xXD95e7i 9JIiSYfn.lnk" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\windows\\recent\\xxd95e7i 9jiisyfn.lnk"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\xXD95e7i 9JIiSYfn.lnk" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\windows\\recent\\xxd95e7i 9jiisyfn.lnk")) returned 1 [0083.778] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\Xzz-K fFe.lnk", nBufferLength=0x105, lpBuffer=0x31e02c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\Xzz-K fFe.lnk", lpFilePart=0x0) returned 0x54 [0083.778] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e520) returned 1 [0083.778] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\Xzz-K fFe.lnk" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\windows\\recent\\xzz-k ffe.lnk"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x264 [0083.778] GetFileType (hFile=0x264) returned 0x1 [0083.778] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e51c) returned 1 [0083.778] GetFileType (hFile=0x264) returned 0x1 [0083.778] GetFileSize (in: hFile=0x264, lpFileSizeHigh=0x31e628 | out: lpFileSizeHigh=0x31e628*=0x0) returned 0xf9e [0083.778] ReadFile (in: hFile=0x264, lpBuffer=0x280f420, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x31e5d4, lpOverlapped=0x0 | out: lpBuffer=0x280f420*, lpNumberOfBytesRead=0x31e5d4*=0xf9e, lpOverlapped=0x0) returned 1 [0083.779] CloseHandle (hObject=0x264) returned 1 [0083.818] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\Xzz-K fFe.lnk", nBufferLength=0x105, lpBuffer=0x31e018, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\Xzz-K fFe.lnk", lpFilePart=0x0) returned 0x54 [0083.819] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e50c) returned 1 [0083.819] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\Xzz-K fFe.lnk" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\windows\\recent\\xzz-k ffe.lnk"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x264 [0083.820] GetFileType (hFile=0x264) returned 0x1 [0083.820] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e508) returned 1 [0083.820] GetFileType (hFile=0x264) returned 0x1 [0083.820] WriteFile (in: hFile=0x264, lpBuffer=0x2662d1c*, nNumberOfBytesToWrite=0xfa0, lpNumberOfBytesWritten=0x31e59c, lpOverlapped=0x0 | out: lpBuffer=0x2662d1c*, lpNumberOfBytesWritten=0x31e59c*=0xfa0, lpOverlapped=0x0) returned 1 [0083.821] CloseHandle (hObject=0x264) returned 1 [0083.821] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\Xzz-K fFe.lnk", nBufferLength=0x105, lpBuffer=0x31e14c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\Xzz-K fFe.lnk", lpFilePart=0x0) returned 0x54 [0083.821] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\Xzz-K fFe.lnk", nBufferLength=0x105, lpBuffer=0x31e14c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\Xzz-K fFe.lnk", lpFilePart=0x0) returned 0x54 [0083.821] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e5ac) returned 1 [0083.821] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\Xzz-K fFe.lnk" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\windows\\recent\\xzz-k ffe.lnk"), fInfoLevelId=0x0, lpFileInformation=0x31e628 | out: lpFileInformation=0x31e628*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xdc7b2ca0, ftCreationTime.dwHighDateTime=0x1d5e82a, ftLastAccessTime.dwLowDateTime=0xdc7b2ca0, ftLastAccessTime.dwHighDateTime=0x1d5e82a, ftLastWriteTime.dwLowDateTime=0x15685f80, ftLastWriteTime.dwHighDateTime=0x1d6eb7f, nFileSizeHigh=0x0, nFileSizeLow=0xfa0)) returned 1 [0083.821] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e5a8) returned 1 [0083.821] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\Xzz-K fFe.lnk" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\windows\\recent\\xzz-k ffe.lnk"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\Xzz-K fFe.lnk" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\windows\\recent\\xzz-k ffe.lnk")) returned 1 [0083.821] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\YCXGBLVtV61m.ots.lnk", nBufferLength=0x105, lpBuffer=0x31e02c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\YCXGBLVtV61m.ots.lnk", lpFilePart=0x0) returned 0x5b [0083.822] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e520) returned 1 [0083.822] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\YCXGBLVtV61m.ots.lnk" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\windows\\recent\\ycxgblvtv61m.ots.lnk"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x264 [0083.822] GetFileType (hFile=0x264) returned 0x1 [0083.822] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e51c) returned 1 [0083.822] GetFileType (hFile=0x264) returned 0x1 [0083.822] GetFileSize (in: hFile=0x264, lpFileSizeHigh=0x31e628 | out: lpFileSizeHigh=0x31e628*=0x0) returned 0x24d [0083.822] ReadFile (in: hFile=0x264, lpBuffer=0x2664264, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x31e5d4, lpOverlapped=0x0 | out: lpBuffer=0x2664264*, lpNumberOfBytesRead=0x31e5d4*=0x24d, lpOverlapped=0x0) returned 1 [0083.823] CloseHandle (hObject=0x264) returned 1 [0083.836] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\YCXGBLVtV61m.ots.lnk", nBufferLength=0x105, lpBuffer=0x31e018, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\YCXGBLVtV61m.ots.lnk", lpFilePart=0x0) returned 0x5b [0083.836] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e50c) returned 1 [0083.836] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\YCXGBLVtV61m.ots.lnk" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\windows\\recent\\ycxgblvtv61m.ots.lnk"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x264 [0083.837] GetFileType (hFile=0x264) returned 0x1 [0083.837] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e508) returned 1 [0083.837] GetFileType (hFile=0x264) returned 0x1 [0083.837] WriteFile (in: hFile=0x264, lpBuffer=0x26b2e9c*, nNumberOfBytesToWrite=0x250, lpNumberOfBytesWritten=0x31e59c, lpOverlapped=0x0 | out: lpBuffer=0x26b2e9c*, lpNumberOfBytesWritten=0x31e59c*=0x250, lpOverlapped=0x0) returned 1 [0083.838] CloseHandle (hObject=0x264) returned 1 [0083.838] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\YCXGBLVtV61m.ots.lnk", nBufferLength=0x105, lpBuffer=0x31e14c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\YCXGBLVtV61m.ots.lnk", lpFilePart=0x0) returned 0x5b [0083.838] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\YCXGBLVtV61m.ots.lnk", nBufferLength=0x105, lpBuffer=0x31e14c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\YCXGBLVtV61m.ots.lnk", lpFilePart=0x0) returned 0x5b [0083.838] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e5ac) returned 1 [0083.838] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\YCXGBLVtV61m.ots.lnk" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\windows\\recent\\ycxgblvtv61m.ots.lnk"), fInfoLevelId=0x0, lpFileInformation=0x31e628 | out: lpFileInformation=0x31e628*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xdd47e2e0, ftCreationTime.dwHighDateTime=0x1d5e82a, ftLastAccessTime.dwLowDateTime=0xdd47e2e0, ftLastAccessTime.dwHighDateTime=0x1d5e82a, ftLastWriteTime.dwLowDateTime=0x156ac0e0, ftLastWriteTime.dwHighDateTime=0x1d6eb7f, nFileSizeHigh=0x0, nFileSizeLow=0x250)) returned 1 [0083.838] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e5a8) returned 1 [0083.838] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\YCXGBLVtV61m.ots.lnk" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\windows\\recent\\ycxgblvtv61m.ots.lnk"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\YCXGBLVtV61m.ots.lnk" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\windows\\recent\\ycxgblvtv61m.ots.lnk")) returned 1 [0083.839] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\YFAmrd4RrOq5.lnk", nBufferLength=0x105, lpBuffer=0x31e02c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\YFAmrd4RrOq5.lnk", lpFilePart=0x0) returned 0x57 [0083.839] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e520) returned 1 [0083.839] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\YFAmrd4RrOq5.lnk" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\windows\\recent\\yfamrd4rroq5.lnk"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x264 [0083.839] GetFileType (hFile=0x264) returned 0x1 [0083.839] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e51c) returned 1 [0083.839] GetFileType (hFile=0x264) returned 0x1 [0083.839] GetFileSize (in: hFile=0x264, lpFileSizeHigh=0x31e628 | out: lpFileSizeHigh=0x31e628*=0x0) returned 0x1489 [0083.839] ReadFile (in: hFile=0x264, lpBuffer=0x26b4190, nNumberOfBytesToRead=0x1489, lpNumberOfBytesRead=0x31e5d4, lpOverlapped=0x0 | out: lpBuffer=0x26b4190*, lpNumberOfBytesRead=0x31e5d4*=0x1489, lpOverlapped=0x0) returned 1 [0083.840] CloseHandle (hObject=0x264) returned 1 [0083.854] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\YFAmrd4RrOq5.lnk", nBufferLength=0x105, lpBuffer=0x31e018, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\YFAmrd4RrOq5.lnk", lpFilePart=0x0) returned 0x57 [0083.854] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e50c) returned 1 [0083.854] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\YFAmrd4RrOq5.lnk" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\windows\\recent\\yfamrd4rroq5.lnk"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x264 [0083.855] GetFileType (hFile=0x264) returned 0x1 [0083.855] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e508) returned 1 [0083.855] GetFileType (hFile=0x264) returned 0x1 [0083.855] WriteFile (in: hFile=0x264, lpBuffer=0x2707648*, nNumberOfBytesToWrite=0x1490, lpNumberOfBytesWritten=0x31e5c8, lpOverlapped=0x0 | out: lpBuffer=0x2707648*, lpNumberOfBytesWritten=0x31e5c8*=0x1490, lpOverlapped=0x0) returned 1 [0083.856] CloseHandle (hObject=0x264) returned 1 [0083.856] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\YFAmrd4RrOq5.lnk", nBufferLength=0x105, lpBuffer=0x31e14c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\YFAmrd4RrOq5.lnk", lpFilePart=0x0) returned 0x57 [0083.856] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\YFAmrd4RrOq5.lnk", nBufferLength=0x105, lpBuffer=0x31e14c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\YFAmrd4RrOq5.lnk", lpFilePart=0x0) returned 0x57 [0083.856] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e5ac) returned 1 [0083.856] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\YFAmrd4RrOq5.lnk" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\windows\\recent\\yfamrd4rroq5.lnk"), fInfoLevelId=0x0, lpFileInformation=0x31e628 | out: lpFileInformation=0x31e628*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xdd705a40, ftCreationTime.dwHighDateTime=0x1d5e82a, ftLastAccessTime.dwLowDateTime=0xdd705a40, ftLastAccessTime.dwHighDateTime=0x1d5e82a, ftLastWriteTime.dwLowDateTime=0x156d2240, ftLastWriteTime.dwHighDateTime=0x1d6eb7f, nFileSizeHigh=0x0, nFileSizeLow=0x1490)) returned 1 [0083.856] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e5a8) returned 1 [0083.856] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\YFAmrd4RrOq5.lnk" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\windows\\recent\\yfamrd4rroq5.lnk"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\YFAmrd4RrOq5.lnk" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\windows\\recent\\yfamrd4rroq5.lnk")) returned 1 [0083.857] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\yis5j.mkv.lnk", nBufferLength=0x105, lpBuffer=0x31e02c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\yis5j.mkv.lnk", lpFilePart=0x0) returned 0x54 [0083.857] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e520) returned 1 [0083.857] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\yis5j.mkv.lnk" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\windows\\recent\\yis5j.mkv.lnk"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x264 [0083.857] GetFileType (hFile=0x264) returned 0x1 [0083.857] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e51c) returned 1 [0083.857] GetFileType (hFile=0x264) returned 0x1 [0083.857] GetFileSize (in: hFile=0x264, lpFileSizeHigh=0x31e628 | out: lpFileSizeHigh=0x31e628*=0x0) returned 0x3d5 [0083.857] ReadFile (in: hFile=0x264, lpBuffer=0x27092dc, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x31e5d4, lpOverlapped=0x0 | out: lpBuffer=0x27092dc*, lpNumberOfBytesRead=0x31e5d4*=0x3d5, lpOverlapped=0x0) returned 1 [0083.858] CloseHandle (hObject=0x264) returned 1 [0083.873] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\yis5j.mkv.lnk", nBufferLength=0x105, lpBuffer=0x31e018, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\yis5j.mkv.lnk", lpFilePart=0x0) returned 0x54 [0083.873] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e50c) returned 1 [0083.873] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\yis5j.mkv.lnk" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\windows\\recent\\yis5j.mkv.lnk"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x264 [0083.881] GetFileType (hFile=0x264) returned 0x1 [0083.881] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e508) returned 1 [0083.881] GetFileType (hFile=0x264) returned 0x1 [0083.882] WriteFile (in: hFile=0x264, lpBuffer=0x2758574*, nNumberOfBytesToWrite=0x3e0, lpNumberOfBytesWritten=0x31e59c, lpOverlapped=0x0 | out: lpBuffer=0x2758574*, lpNumberOfBytesWritten=0x31e59c*=0x3e0, lpOverlapped=0x0) returned 1 [0083.882] CloseHandle (hObject=0x264) returned 1 [0083.882] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\yis5j.mkv.lnk", nBufferLength=0x105, lpBuffer=0x31e14c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\yis5j.mkv.lnk", lpFilePart=0x0) returned 0x54 [0083.883] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\yis5j.mkv.lnk", nBufferLength=0x105, lpBuffer=0x31e14c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\yis5j.mkv.lnk", lpFilePart=0x0) returned 0x54 [0083.883] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e5ac) returned 1 [0083.883] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\yis5j.mkv.lnk" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\windows\\recent\\yis5j.mkv.lnk"), fInfoLevelId=0x0, lpFileInformation=0x31e628 | out: lpFileInformation=0x31e628*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xdb91e5e0, ftCreationTime.dwHighDateTime=0x1d5e82a, ftLastAccessTime.dwLowDateTime=0xdb91e5e0, ftLastAccessTime.dwHighDateTime=0x1d5e82a, ftLastWriteTime.dwLowDateTime=0x1571e500, ftLastWriteTime.dwHighDateTime=0x1d6eb7f, nFileSizeHigh=0x0, nFileSizeLow=0x3e0)) returned 1 [0083.883] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e5a8) returned 1 [0083.883] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\yis5j.mkv.lnk" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\windows\\recent\\yis5j.mkv.lnk"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\yis5j.mkv.lnk" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\windows\\recent\\yis5j.mkv.lnk")) returned 1 [0083.883] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\ylM2mu-V6E1bfaho.lnk", nBufferLength=0x105, lpBuffer=0x31e02c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\ylM2mu-V6E1bfaho.lnk", lpFilePart=0x0) returned 0x5b [0083.883] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e520) returned 1 [0083.883] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\ylM2mu-V6E1bfaho.lnk" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\windows\\recent\\ylm2mu-v6e1bfaho.lnk"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x264 [0083.884] GetFileType (hFile=0x264) returned 0x1 [0083.884] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e51c) returned 1 [0083.884] GetFileType (hFile=0x264) returned 0x1 [0083.884] GetFileSize (in: hFile=0x264, lpFileSizeHigh=0x31e628 | out: lpFileSizeHigh=0x31e628*=0x0) returned 0x14d8 [0083.884] ReadFile (in: hFile=0x264, lpBuffer=0x2759860, nNumberOfBytesToRead=0x14d8, lpNumberOfBytesRead=0x31e5d4, lpOverlapped=0x0 | out: lpBuffer=0x2759860*, lpNumberOfBytesRead=0x31e5d4*=0x14d8, lpOverlapped=0x0) returned 1 [0083.884] CloseHandle (hObject=0x264) returned 1 [0083.898] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\ylM2mu-V6E1bfaho.lnk", nBufferLength=0x105, lpBuffer=0x31e018, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\ylM2mu-V6E1bfaho.lnk", lpFilePart=0x0) returned 0x5b [0083.898] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e50c) returned 1 [0083.898] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\ylM2mu-V6E1bfaho.lnk" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\windows\\recent\\ylm2mu-v6e1bfaho.lnk"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x264 [0083.899] GetFileType (hFile=0x264) returned 0x1 [0083.899] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e508) returned 1 [0083.899] GetFileType (hFile=0x264) returned 0x1 [0083.899] WriteFile (in: hFile=0x264, lpBuffer=0x27acea4*, nNumberOfBytesToWrite=0x14e0, lpNumberOfBytesWritten=0x31e5c8, lpOverlapped=0x0 | out: lpBuffer=0x27acea4*, lpNumberOfBytesWritten=0x31e5c8*=0x14e0, lpOverlapped=0x0) returned 1 [0083.900] CloseHandle (hObject=0x264) returned 1 [0083.900] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\ylM2mu-V6E1bfaho.lnk", nBufferLength=0x105, lpBuffer=0x31e14c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\ylM2mu-V6E1bfaho.lnk", lpFilePart=0x0) returned 0x5b [0083.900] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\ylM2mu-V6E1bfaho.lnk", nBufferLength=0x105, lpBuffer=0x31e14c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\ylM2mu-V6E1bfaho.lnk", lpFilePart=0x0) returned 0x5b [0083.900] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e5ac) returned 1 [0083.900] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\ylM2mu-V6E1bfaho.lnk" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\windows\\recent\\ylm2mu-v6e1bfaho.lnk"), fInfoLevelId=0x0, lpFileInformation=0x31e628 | out: lpFileInformation=0x31e628*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xdb13bd00, ftCreationTime.dwHighDateTime=0x1d5e82a, ftLastAccessTime.dwLowDateTime=0xdd53c9c0, ftLastAccessTime.dwHighDateTime=0x1d5e82a, ftLastWriteTime.dwLowDateTime=0x15744660, ftLastWriteTime.dwHighDateTime=0x1d6eb7f, nFileSizeHigh=0x0, nFileSizeLow=0x14e0)) returned 1 [0083.900] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e5a8) returned 1 [0083.900] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\ylM2mu-V6E1bfaho.lnk" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\windows\\recent\\ylm2mu-v6e1bfaho.lnk"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\ylM2mu-V6E1bfaho.lnk" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\windows\\recent\\ylm2mu-v6e1bfaho.lnk")) returned 1 [0083.901] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\ypQAwj_1Xn8LoFy0UjN.lnk", nBufferLength=0x105, lpBuffer=0x31e02c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\ypQAwj_1Xn8LoFy0UjN.lnk", lpFilePart=0x0) returned 0x5e [0083.901] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e520) returned 1 [0083.901] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\ypQAwj_1Xn8LoFy0UjN.lnk" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\windows\\recent\\ypqawj_1xn8lofy0ujn.lnk"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x264 [0083.901] GetFileType (hFile=0x264) returned 0x1 [0083.901] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e51c) returned 1 [0083.901] GetFileType (hFile=0x264) returned 0x1 [0083.901] GetFileSize (in: hFile=0x264, lpFileSizeHigh=0x31e628 | out: lpFileSizeHigh=0x31e628*=0x0) returned 0xe2f [0083.901] ReadFile (in: hFile=0x264, lpBuffer=0x27af628, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x31e5d4, lpOverlapped=0x0 | out: lpBuffer=0x27af628*, lpNumberOfBytesRead=0x31e5d4*=0xe2f, lpOverlapped=0x0) returned 1 [0083.902] CloseHandle (hObject=0x264) returned 1 [0083.915] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\ypQAwj_1Xn8LoFy0UjN.lnk", nBufferLength=0x105, lpBuffer=0x31e018, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\ypQAwj_1Xn8LoFy0UjN.lnk", lpFilePart=0x0) returned 0x5e [0083.915] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e50c) returned 1 [0083.915] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\ypQAwj_1Xn8LoFy0UjN.lnk" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\windows\\recent\\ypqawj_1xn8lofy0ujn.lnk"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x264 [0083.916] GetFileType (hFile=0x264) returned 0x1 [0083.916] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e508) returned 1 [0083.916] GetFileType (hFile=0x264) returned 0x1 [0083.916] WriteFile (in: hFile=0x264, lpBuffer=0x2801c70*, nNumberOfBytesToWrite=0xe30, lpNumberOfBytesWritten=0x31e59c, lpOverlapped=0x0 | out: lpBuffer=0x2801c70*, lpNumberOfBytesWritten=0x31e59c*=0xe30, lpOverlapped=0x0) returned 1 [0083.917] CloseHandle (hObject=0x264) returned 1 [0083.917] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\ypQAwj_1Xn8LoFy0UjN.lnk", nBufferLength=0x105, lpBuffer=0x31e14c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\ypQAwj_1Xn8LoFy0UjN.lnk", lpFilePart=0x0) returned 0x5e [0083.917] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\ypQAwj_1Xn8LoFy0UjN.lnk", nBufferLength=0x105, lpBuffer=0x31e14c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\ypQAwj_1Xn8LoFy0UjN.lnk", lpFilePart=0x0) returned 0x5e [0083.917] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e5ac) returned 1 [0083.917] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\ypQAwj_1Xn8LoFy0UjN.lnk" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\windows\\recent\\ypqawj_1xn8lofy0ujn.lnk"), fInfoLevelId=0x0, lpFileInformation=0x31e628 | out: lpFileInformation=0x31e628*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xdb72f400, ftCreationTime.dwHighDateTime=0x1d5e82a, ftLastAccessTime.dwLowDateTime=0xdd4ca5a0, ftLastAccessTime.dwHighDateTime=0x1d5e82a, ftLastWriteTime.dwLowDateTime=0x1576a7c0, ftLastWriteTime.dwHighDateTime=0x1d6eb7f, nFileSizeHigh=0x0, nFileSizeLow=0xe30)) returned 1 [0083.917] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e5a8) returned 1 [0083.917] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\ypQAwj_1Xn8LoFy0UjN.lnk" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\windows\\recent\\ypqawj_1xn8lofy0ujn.lnk"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\ypQAwj_1Xn8LoFy0UjN.lnk" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\windows\\recent\\ypqawj_1xn8lofy0ujn.lnk")) returned 1 [0083.918] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\Ytscf.lnk", nBufferLength=0x105, lpBuffer=0x31e02c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\Ytscf.lnk", lpFilePart=0x0) returned 0x50 [0083.918] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e520) returned 1 [0083.918] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\Ytscf.lnk" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\windows\\recent\\ytscf.lnk"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x264 [0083.918] GetFileType (hFile=0x264) returned 0x1 [0083.919] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e51c) returned 1 [0083.919] GetFileType (hFile=0x264) returned 0x1 [0083.919] GetFileSize (in: hFile=0x264, lpFileSizeHigh=0x31e628 | out: lpFileSizeHigh=0x31e628*=0x0) returned 0xa00 [0083.919] ReadFile (in: hFile=0x264, lpBuffer=0x2803964, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x31e5d4, lpOverlapped=0x0 | out: lpBuffer=0x2803964*, lpNumberOfBytesRead=0x31e5d4*=0xa00, lpOverlapped=0x0) returned 1 [0083.919] CloseHandle (hObject=0x264) returned 1 [0083.933] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\Ytscf.lnk", nBufferLength=0x105, lpBuffer=0x31e018, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\Ytscf.lnk", lpFilePart=0x0) returned 0x50 [0083.933] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e50c) returned 1 [0083.933] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\Ytscf.lnk" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\windows\\recent\\ytscf.lnk"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x264 [0083.933] GetFileType (hFile=0x264) returned 0x1 [0083.934] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e508) returned 1 [0083.934] GetFileType (hFile=0x264) returned 0x1 [0083.934] WriteFile (in: hFile=0x264, lpBuffer=0x2854ae0*, nNumberOfBytesToWrite=0xa10, lpNumberOfBytesWritten=0x31e59c, lpOverlapped=0x0 | out: lpBuffer=0x2854ae0*, lpNumberOfBytesWritten=0x31e59c*=0xa10, lpOverlapped=0x0) returned 1 [0083.934] CloseHandle (hObject=0x264) returned 1 [0083.935] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\Ytscf.lnk", nBufferLength=0x105, lpBuffer=0x31e14c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\Ytscf.lnk", lpFilePart=0x0) returned 0x50 [0083.935] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\Ytscf.lnk", nBufferLength=0x105, lpBuffer=0x31e14c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\Ytscf.lnk", lpFilePart=0x0) returned 0x50 [0083.935] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e5ac) returned 1 [0083.935] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\Ytscf.lnk" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\windows\\recent\\ytscf.lnk"), fInfoLevelId=0x0, lpFileInformation=0x31e628 | out: lpFileInformation=0x31e628*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xdba4f0e0, ftCreationTime.dwHighDateTime=0x1d5e82a, ftLastAccessTime.dwLowDateTime=0xdba4f0e0, ftLastAccessTime.dwHighDateTime=0x1d5e82a, ftLastWriteTime.dwLowDateTime=0x15790920, ftLastWriteTime.dwHighDateTime=0x1d6eb7f, nFileSizeHigh=0x0, nFileSizeLow=0xa10)) returned 1 [0083.935] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e5a8) returned 1 [0083.935] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\Ytscf.lnk" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\windows\\recent\\ytscf.lnk"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\Ytscf.lnk" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\windows\\recent\\ytscf.lnk")) returned 1 [0083.935] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\YZ7eP Q.lnk", nBufferLength=0x105, lpBuffer=0x31e02c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\YZ7eP Q.lnk", lpFilePart=0x0) returned 0x52 [0083.935] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e520) returned 1 [0083.936] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\YZ7eP Q.lnk" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\windows\\recent\\yz7ep q.lnk"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x264 [0083.936] GetFileType (hFile=0x264) returned 0x1 [0083.936] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e51c) returned 1 [0083.936] GetFileType (hFile=0x264) returned 0x1 [0083.936] GetFileSize (in: hFile=0x264, lpFileSizeHigh=0x31e628 | out: lpFileSizeHigh=0x31e628*=0x0) returned 0x3e3 [0083.936] ReadFile (in: hFile=0x264, lpBuffer=0x2856188, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x31e5d4, lpOverlapped=0x0 | out: lpBuffer=0x2856188*, lpNumberOfBytesRead=0x31e5d4*=0x3e3, lpOverlapped=0x0) returned 1 [0083.937] CloseHandle (hObject=0x264) returned 1 [0083.978] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\YZ7eP Q.lnk", nBufferLength=0x105, lpBuffer=0x31e018, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\YZ7eP Q.lnk", lpFilePart=0x0) returned 0x52 [0083.978] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e50c) returned 1 [0083.978] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\YZ7eP Q.lnk" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\windows\\recent\\yz7ep q.lnk"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x264 [0083.979] GetFileType (hFile=0x264) returned 0x1 [0083.979] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e508) returned 1 [0083.979] GetFileType (hFile=0x264) returned 0x1 [0083.979] WriteFile (in: hFile=0x264, lpBuffer=0x26a488c*, nNumberOfBytesToWrite=0x3f0, lpNumberOfBytesWritten=0x31e59c, lpOverlapped=0x0 | out: lpBuffer=0x26a488c*, lpNumberOfBytesWritten=0x31e59c*=0x3f0, lpOverlapped=0x0) returned 1 [0083.981] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\YZ7eP Q.lnk", nBufferLength=0x105, lpBuffer=0x31e14c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\YZ7eP Q.lnk", lpFilePart=0x0) returned 0x52 [0083.981] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\YZ7eP Q.lnk", nBufferLength=0x105, lpBuffer=0x31e14c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\YZ7eP Q.lnk", lpFilePart=0x0) returned 0x52 [0083.981] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e5ac) returned 1 [0083.981] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\YZ7eP Q.lnk" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\windows\\recent\\yz7ep q.lnk"), fInfoLevelId=0x0, lpFileInformation=0x31e628 | out: lpFileInformation=0x31e628*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xdd28f100, ftCreationTime.dwHighDateTime=0x1d5e82a, ftLastAccessTime.dwLowDateTime=0xdd28f100, ftLastAccessTime.dwHighDateTime=0x1d5e82a, ftLastWriteTime.dwLowDateTime=0x15802d40, ftLastWriteTime.dwHighDateTime=0x1d6eb7f, nFileSizeHigh=0x0, nFileSizeLow=0x3f0)) returned 1 [0083.981] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e5a8) returned 1 [0083.981] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\YZ7eP Q.lnk" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\windows\\recent\\yz7ep q.lnk"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\YZ7eP Q.lnk" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\windows\\recent\\yz7ep q.lnk")) returned 1 [0083.981] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\ZbKUnKkgcHGbWFlacj.mkv.lnk", nBufferLength=0x105, lpBuffer=0x31e02c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\ZbKUnKkgcHGbWFlacj.mkv.lnk", lpFilePart=0x0) returned 0x61 [0083.981] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e520) returned 1 [0083.982] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\ZbKUnKkgcHGbWFlacj.mkv.lnk" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\windows\\recent\\zbkunkkgchgbwflacj.mkv.lnk"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x264 [0083.982] GetFileType (hFile=0x264) returned 0x1 [0083.982] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e51c) returned 1 [0083.982] GetFileType (hFile=0x264) returned 0x1 [0083.982] GetFileSize (in: hFile=0x264, lpFileSizeHigh=0x31e628 | out: lpFileSizeHigh=0x31e628*=0x0) returned 0xf5d [0083.982] ReadFile (in: hFile=0x264, lpBuffer=0x26a6af4, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x31e5d4, lpOverlapped=0x0 | out: lpBuffer=0x26a6af4*, lpNumberOfBytesRead=0x31e5d4*=0xf5d, lpOverlapped=0x0) returned 1 [0083.996] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\ZbKUnKkgcHGbWFlacj.mkv.lnk", nBufferLength=0x105, lpBuffer=0x31e018, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\ZbKUnKkgcHGbWFlacj.mkv.lnk", lpFilePart=0x0) returned 0x61 [0083.996] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e50c) returned 1 [0083.996] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\ZbKUnKkgcHGbWFlacj.mkv.lnk" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\windows\\recent\\zbkunkkgchgbwflacj.mkv.lnk"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x264 [0083.997] GetFileType (hFile=0x264) returned 0x1 [0083.997] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e508) returned 1 [0083.997] GetFileType (hFile=0x264) returned 0x1 [0083.997] WriteFile (in: hFile=0x264, lpBuffer=0x26f9894*, nNumberOfBytesToWrite=0xf60, lpNumberOfBytesWritten=0x31e59c, lpOverlapped=0x0 | out: lpBuffer=0x26f9894*, lpNumberOfBytesWritten=0x31e59c*=0xf60, lpOverlapped=0x0) returned 1 [0083.998] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\ZbKUnKkgcHGbWFlacj.mkv.lnk", nBufferLength=0x105, lpBuffer=0x31e14c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\ZbKUnKkgcHGbWFlacj.mkv.lnk", lpFilePart=0x0) returned 0x61 [0083.998] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\ZbKUnKkgcHGbWFlacj.mkv.lnk", nBufferLength=0x105, lpBuffer=0x31e14c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\ZbKUnKkgcHGbWFlacj.mkv.lnk", lpFilePart=0x0) returned 0x61 [0083.998] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e5ac) returned 1 [0083.998] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\ZbKUnKkgcHGbWFlacj.mkv.lnk" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\windows\\recent\\zbkunkkgchgbwflacj.mkv.lnk"), fInfoLevelId=0x0, lpFileInformation=0x31e628 | out: lpFileInformation=0x31e628*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xdd1d0a20, ftCreationTime.dwHighDateTime=0x1d5e82a, ftLastAccessTime.dwLowDateTime=0xdd1d0a20, ftLastAccessTime.dwHighDateTime=0x1d5e82a, ftLastWriteTime.dwLowDateTime=0x15828ea0, ftLastWriteTime.dwHighDateTime=0x1d6eb7f, nFileSizeHigh=0x0, nFileSizeLow=0xf60)) returned 1 [0083.998] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e5a8) returned 1 [0083.998] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\ZbKUnKkgcHGbWFlacj.mkv.lnk" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\windows\\recent\\zbkunkkgchgbwflacj.mkv.lnk"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\ZbKUnKkgcHGbWFlacj.mkv.lnk" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\windows\\recent\\zbkunkkgchgbwflacj.mkv.lnk")) returned 1 [0083.999] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\Ze4qx331n4oC1.ots.lnk", nBufferLength=0x105, lpBuffer=0x31e02c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\Ze4qx331n4oC1.ots.lnk", lpFilePart=0x0) returned 0x5c [0083.999] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e520) returned 1 [0083.999] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\Ze4qx331n4oC1.ots.lnk" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\windows\\recent\\ze4qx331n4oc1.ots.lnk"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x264 [0083.999] GetFileType (hFile=0x264) returned 0x1 [0083.999] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e51c) returned 1 [0083.999] GetFileType (hFile=0x264) returned 0x1 [0083.999] GetFileSize (in: hFile=0x264, lpFileSizeHigh=0x31e628 | out: lpFileSizeHigh=0x31e628*=0x0) returned 0x1bba [0083.999] ReadFile (in: hFile=0x264, lpBuffer=0x26fabb4, nNumberOfBytesToRead=0x1bba, lpNumberOfBytesRead=0x31e5d4, lpOverlapped=0x0 | out: lpBuffer=0x26fabb4*, lpNumberOfBytesRead=0x31e5d4*=0x1bba, lpOverlapped=0x0) returned 1 [0084.013] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\Ze4qx331n4oC1.ots.lnk", nBufferLength=0x105, lpBuffer=0x31e018, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\Ze4qx331n4oC1.ots.lnk", lpFilePart=0x0) returned 0x5c [0084.013] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e50c) returned 1 [0084.013] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\Ze4qx331n4oC1.ots.lnk" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\windows\\recent\\ze4qx331n4oc1.ots.lnk"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x264 [0084.014] GetFileType (hFile=0x264) returned 0x1 [0084.014] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e508) returned 1 [0084.014] GetFileType (hFile=0x264) returned 0x1 [0084.014] WriteFile (in: hFile=0x264, lpBuffer=0x275045c*, nNumberOfBytesToWrite=0x1bc0, lpNumberOfBytesWritten=0x31e5c8, lpOverlapped=0x0 | out: lpBuffer=0x275045c*, lpNumberOfBytesWritten=0x31e5c8*=0x1bc0, lpOverlapped=0x0) returned 1 [0084.015] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\Ze4qx331n4oC1.ots.lnk", nBufferLength=0x105, lpBuffer=0x31e14c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\Ze4qx331n4oC1.ots.lnk", lpFilePart=0x0) returned 0x5c [0084.015] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\Ze4qx331n4oC1.ots.lnk", nBufferLength=0x105, lpBuffer=0x31e14c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\Ze4qx331n4oC1.ots.lnk", lpFilePart=0x0) returned 0x5c [0084.015] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e5ac) returned 1 [0084.015] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\Ze4qx331n4oC1.ots.lnk" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\windows\\recent\\ze4qx331n4oc1.ots.lnk"), fInfoLevelId=0x0, lpFileInformation=0x31e628 | out: lpFileInformation=0x31e628*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xdc909900, ftCreationTime.dwHighDateTime=0x1d5e82a, ftLastAccessTime.dwLowDateTime=0xdc909900, ftLastAccessTime.dwHighDateTime=0x1d5e82a, ftLastWriteTime.dwLowDateTime=0x1584f000, ftLastWriteTime.dwHighDateTime=0x1d6eb7f, nFileSizeHigh=0x0, nFileSizeLow=0x1bc0)) returned 1 [0084.015] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e5a8) returned 1 [0084.015] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\Ze4qx331n4oC1.ots.lnk" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\windows\\recent\\ze4qx331n4oc1.ots.lnk"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\Ze4qx331n4oC1.ots.lnk" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\windows\\recent\\ze4qx331n4oc1.ots.lnk")) returned 1 [0084.016] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\ZTDDJr-2j.lnk", nBufferLength=0x105, lpBuffer=0x31e02c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\ZTDDJr-2j.lnk", lpFilePart=0x0) returned 0x54 [0084.016] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e520) returned 1 [0084.016] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\ZTDDJr-2j.lnk" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\windows\\recent\\ztddjr-2j.lnk"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x264 [0084.016] GetFileType (hFile=0x264) returned 0x1 [0084.016] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e51c) returned 1 [0084.016] GetFileType (hFile=0x264) returned 0x1 [0084.016] GetFileSize (in: hFile=0x264, lpFileSizeHigh=0x31e628 | out: lpFileSizeHigh=0x31e628*=0x0) returned 0x1a45 [0084.016] ReadFile (in: hFile=0x264, lpBuffer=0x2752468, nNumberOfBytesToRead=0x1a45, lpNumberOfBytesRead=0x31e5d4, lpOverlapped=0x0 | out: lpBuffer=0x2752468*, lpNumberOfBytesRead=0x31e5d4*=0x1a45, lpOverlapped=0x0) returned 1 [0084.030] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\ZTDDJr-2j.lnk", nBufferLength=0x105, lpBuffer=0x31e018, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\ZTDDJr-2j.lnk", lpFilePart=0x0) returned 0x54 [0084.031] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e50c) returned 1 [0084.031] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\ZTDDJr-2j.lnk" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\windows\\recent\\ztddjr-2j.lnk"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x264 [0084.031] GetFileType (hFile=0x264) returned 0x1 [0084.031] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e508) returned 1 [0084.031] GetFileType (hFile=0x264) returned 0x1 [0084.032] WriteFile (in: hFile=0x264, lpBuffer=0x27a75e0*, nNumberOfBytesToWrite=0x1a50, lpNumberOfBytesWritten=0x31e5c8, lpOverlapped=0x0 | out: lpBuffer=0x27a75e0*, lpNumberOfBytesWritten=0x31e5c8*=0x1a50, lpOverlapped=0x0) returned 1 [0084.033] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\ZTDDJr-2j.lnk", nBufferLength=0x105, lpBuffer=0x31e14c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\ZTDDJr-2j.lnk", lpFilePart=0x0) returned 0x54 [0084.033] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\ZTDDJr-2j.lnk", nBufferLength=0x105, lpBuffer=0x31e14c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\ZTDDJr-2j.lnk", lpFilePart=0x0) returned 0x54 [0084.033] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e5ac) returned 1 [0084.033] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\ZTDDJr-2j.lnk" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\windows\\recent\\ztddjr-2j.lnk"), fInfoLevelId=0x0, lpFileInformation=0x31e628 | out: lpFileInformation=0x31e628*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xdd621200, ftCreationTime.dwHighDateTime=0x1d5e82a, ftLastAccessTime.dwLowDateTime=0xdd621200, ftLastAccessTime.dwHighDateTime=0x1d5e82a, ftLastWriteTime.dwLowDateTime=0x15875160, ftLastWriteTime.dwHighDateTime=0x1d6eb7f, nFileSizeHigh=0x0, nFileSizeLow=0x1a50)) returned 1 [0084.033] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e5a8) returned 1 [0084.033] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\ZTDDJr-2j.lnk" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\windows\\recent\\ztddjr-2j.lnk"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\ZTDDJr-2j.lnk" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\windows\\recent\\ztddjr-2j.lnk")) returned 1 [0084.033] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\zXdq.lnk", nBufferLength=0x105, lpBuffer=0x31e02c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\zXdq.lnk", lpFilePart=0x0) returned 0x4f [0084.033] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e520) returned 1 [0084.033] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\zXdq.lnk" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\windows\\recent\\zxdq.lnk"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x264 [0084.034] GetFileType (hFile=0x264) returned 0x1 [0084.034] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e51c) returned 1 [0084.034] GetFileType (hFile=0x264) returned 0x1 [0084.034] GetFileSize (in: hFile=0x264, lpFileSizeHigh=0x31e628 | out: lpFileSizeHigh=0x31e628*=0x0) returned 0x21da [0084.034] ReadFile (in: hFile=0x264, lpBuffer=0x27a9428, nNumberOfBytesToRead=0x21da, lpNumberOfBytesRead=0x31e5d4, lpOverlapped=0x0 | out: lpBuffer=0x27a9428*, lpNumberOfBytesRead=0x31e5d4*=0x21da, lpOverlapped=0x0) returned 1 [0084.048] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\zXdq.lnk", nBufferLength=0x105, lpBuffer=0x31e018, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\zXdq.lnk", lpFilePart=0x0) returned 0x4f [0084.048] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e50c) returned 1 [0084.048] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\zXdq.lnk" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\windows\\recent\\zxdq.lnk"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x264 [0084.049] GetFileType (hFile=0x264) returned 0x1 [0084.049] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e508) returned 1 [0084.049] GetFileType (hFile=0x264) returned 0x1 [0084.049] WriteFile (in: hFile=0x264, lpBuffer=0x2800b70*, nNumberOfBytesToWrite=0x21e0, lpNumberOfBytesWritten=0x31e5c8, lpOverlapped=0x0 | out: lpBuffer=0x2800b70*, lpNumberOfBytesWritten=0x31e5c8*=0x21e0, lpOverlapped=0x0) returned 1 [0084.050] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\zXdq.lnk", nBufferLength=0x105, lpBuffer=0x31e14c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\zXdq.lnk", lpFilePart=0x0) returned 0x4f [0084.050] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\zXdq.lnk", nBufferLength=0x105, lpBuffer=0x31e14c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\zXdq.lnk", lpFilePart=0x0) returned 0x4f [0084.050] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e5ac) returned 1 [0084.050] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\zXdq.lnk" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\windows\\recent\\zxdq.lnk"), fInfoLevelId=0x0, lpFileInformation=0x31e628 | out: lpFileInformation=0x31e628*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xdc100ec0, ftCreationTime.dwHighDateTime=0x1d5e82a, ftLastAccessTime.dwLowDateTime=0xdc100ec0, ftLastAccessTime.dwHighDateTime=0x1d5e82a, ftLastWriteTime.dwLowDateTime=0x1589b2c0, ftLastWriteTime.dwHighDateTime=0x1d6eb7f, nFileSizeHigh=0x0, nFileSizeLow=0x21e0)) returned 1 [0084.050] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e5a8) returned 1 [0084.050] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\zXdq.lnk" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\windows\\recent\\zxdq.lnk"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\zXdq.lnk" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\windows\\recent\\zxdq.lnk")) returned 1 [0084.051] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e5dc) returned 1 [0084.051] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\AutomaticDestinations", nBufferLength=0x105, lpBuffer=0x31e0e4, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\AutomaticDestinations", lpFilePart=0x0) returned 0x5c [0084.051] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\AutomaticDestinations\\", nBufferLength=0x105, lpBuffer=0x31e0b8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\AutomaticDestinations\\", lpFilePart=0x0) returned 0x5d [0084.051] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\AutomaticDestinations\\*", lpFindFileData=0x31e304 | out: lpFindFileData=0x31e304*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x28cff640, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x4bce65c0, ftLastAccessTime.dwHighDateTime=0x1d2fad7, ftLastWriteTime.dwLowDateTime=0x4bce65c0, ftLastWriteTime.dwHighDateTime=0x1d2fad7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x381c40 [0084.051] FindNextFileW (in: hFindFile=0x381c40, lpFindFileData=0x31e314 | out: lpFindFileData=0x31e314*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x28cff640, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x4bce65c0, ftLastAccessTime.dwHighDateTime=0x1d2fad7, ftLastWriteTime.dwLowDateTime=0x4bce65c0, ftLastWriteTime.dwHighDateTime=0x1d2fad7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0084.051] FindNextFileW (in: hFindFile=0x381c40, lpFindFileData=0x31e314 | out: lpFindFileData=0x31e314*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x28d97bc0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28d97bc0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xdd006a00, ftLastWriteTime.dwHighDateTime=0x1d5e82a, nFileSizeHigh=0x0, nFileSizeLow=0x1f200, dwReserved0=0x0, dwReserved1=0x0, cFileName="1b4dd67f29cb1962.automaticDestinations-ms", cAlternateFileName="1B4DD6~1.AUT")) returned 1 [0084.052] FindNextFileW (in: hFindFile=0x381c40, lpFindFileData=0x31e314 | out: lpFindFileData=0x31e314*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc606a140, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xc606a140, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0x80e1f4a0, ftLastWriteTime.dwHighDateTime=0x1d5e82a, nFileSizeHigh=0x0, nFileSizeLow=0x1e00, dwReserved0=0x0, dwReserved1=0x0, cFileName="7e4dca80246863e3.automaticDestinations-ms", cAlternateFileName="7E4DCA~1.AUT")) returned 1 [0084.052] FindNextFileW (in: hFindFile=0x381c40, lpFindFileData=0x31e314 | out: lpFindFileData=0x31e314*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4bce65c0, ftCreationTime.dwHighDateTime=0x1d2fad7, ftLastAccessTime.dwLowDateTime=0x4bce65c0, ftLastAccessTime.dwHighDateTime=0x1d2fad7, ftLastWriteTime.dwLowDateTime=0x4bce4e50, ftLastWriteTime.dwHighDateTime=0x1d2fad7, nFileSizeHigh=0x0, nFileSizeLow=0xe00, dwReserved0=0x0, dwReserved1=0x0, cFileName="eb282ead62b4db87.automaticDestinations-ms", cAlternateFileName="EB282E~1.AUT")) returned 1 [0084.052] FindNextFileW (in: hFindFile=0x381c40, lpFindFileData=0x31e314 | out: lpFindFileData=0x31e314*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0084.052] FindClose (in: hFindFile=0x381c40 | out: hFindFile=0x381c40) returned 1 [0084.052] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e59c) returned 1 [0084.052] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e5a8) returned 1 [0084.052] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e5dc) returned 1 [0084.052] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\AutomaticDestinations", nBufferLength=0x105, lpBuffer=0x31e0e4, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\AutomaticDestinations", lpFilePart=0x0) returned 0x5c [0084.052] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\AutomaticDestinations\\", nBufferLength=0x105, lpBuffer=0x31e0b8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\AutomaticDestinations\\", lpFilePart=0x0) returned 0x5d [0084.052] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\AutomaticDestinations\\*", lpFindFileData=0x31e304 | out: lpFindFileData=0x31e304*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x28cff640, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x4bce65c0, ftLastAccessTime.dwHighDateTime=0x1d2fad7, ftLastWriteTime.dwLowDateTime=0x4bce65c0, ftLastWriteTime.dwHighDateTime=0x1d2fad7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x381c40 [0084.052] FindNextFileW (in: hFindFile=0x381c40, lpFindFileData=0x31e314 | out: lpFindFileData=0x31e314*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x28cff640, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x4bce65c0, ftLastAccessTime.dwHighDateTime=0x1d2fad7, ftLastWriteTime.dwLowDateTime=0x4bce65c0, ftLastWriteTime.dwHighDateTime=0x1d2fad7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0084.053] FindNextFileW (in: hFindFile=0x381c40, lpFindFileData=0x31e314 | out: lpFindFileData=0x31e314*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x28d97bc0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28d97bc0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xdd006a00, ftLastWriteTime.dwHighDateTime=0x1d5e82a, nFileSizeHigh=0x0, nFileSizeLow=0x1f200, dwReserved0=0x0, dwReserved1=0x0, cFileName="1b4dd67f29cb1962.automaticDestinations-ms", cAlternateFileName="1B4DD6~1.AUT")) returned 1 [0084.053] FindNextFileW (in: hFindFile=0x381c40, lpFindFileData=0x31e314 | out: lpFindFileData=0x31e314*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc606a140, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xc606a140, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0x80e1f4a0, ftLastWriteTime.dwHighDateTime=0x1d5e82a, nFileSizeHigh=0x0, nFileSizeLow=0x1e00, dwReserved0=0x0, dwReserved1=0x0, cFileName="7e4dca80246863e3.automaticDestinations-ms", cAlternateFileName="7E4DCA~1.AUT")) returned 1 [0084.053] FindNextFileW (in: hFindFile=0x381c40, lpFindFileData=0x31e314 | out: lpFindFileData=0x31e314*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4bce65c0, ftCreationTime.dwHighDateTime=0x1d2fad7, ftLastAccessTime.dwLowDateTime=0x4bce65c0, ftLastAccessTime.dwHighDateTime=0x1d2fad7, ftLastWriteTime.dwLowDateTime=0x4bce4e50, ftLastWriteTime.dwHighDateTime=0x1d2fad7, nFileSizeHigh=0x0, nFileSizeLow=0xe00, dwReserved0=0x0, dwReserved1=0x0, cFileName="eb282ead62b4db87.automaticDestinations-ms", cAlternateFileName="EB282E~1.AUT")) returned 1 [0084.053] FindNextFileW (in: hFindFile=0x381c40, lpFindFileData=0x31e314 | out: lpFindFileData=0x31e314*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4bce65c0, ftCreationTime.dwHighDateTime=0x1d2fad7, ftLastAccessTime.dwLowDateTime=0x4bce65c0, ftLastAccessTime.dwHighDateTime=0x1d2fad7, ftLastWriteTime.dwLowDateTime=0x4bce4e50, ftLastWriteTime.dwHighDateTime=0x1d2fad7, nFileSizeHigh=0x0, nFileSizeLow=0xe00, dwReserved0=0x0, dwReserved1=0x0, cFileName="eb282ead62b4db87.automaticDestinations-ms", cAlternateFileName="EB282E~1.AUT")) returned 0 [0084.053] FindClose (in: hFindFile=0x381c40 | out: hFindFile=0x381c40) returned 1 [0084.053] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e59c) returned 1 [0084.053] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e5a8) returned 1 [0084.053] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e5dc) returned 1 [0084.053] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\CustomDestinations", nBufferLength=0x105, lpBuffer=0x31e0e4, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\CustomDestinations", lpFilePart=0x0) returned 0x59 [0084.054] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\CustomDestinations\\", nBufferLength=0x105, lpBuffer=0x31e0b8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\CustomDestinations\\", lpFilePart=0x0) returned 0x5a [0084.054] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\CustomDestinations\\*", lpFindFileData=0x31e304 | out: lpFindFileData=0x31e304*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x28cff640, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0xce5f0760, ftLastAccessTime.dwHighDateTime=0x1d4d596, ftLastWriteTime.dwLowDateTime=0xce5f0760, ftLastWriteTime.dwHighDateTime=0x1d4d596, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x381c40 [0084.054] FindNextFileW (in: hFindFile=0x381c40, lpFindFileData=0x31e314 | out: lpFindFileData=0x31e314*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x28cff640, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0xce5f0760, ftLastAccessTime.dwHighDateTime=0x1d4d596, ftLastWriteTime.dwLowDateTime=0xce5f0760, ftLastWriteTime.dwHighDateTime=0x1d4d596, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0084.055] FindNextFileW (in: hFindFile=0x381c40, lpFindFileData=0x31e314 | out: lpFindFileData=0x31e314*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x28d97bc0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x2dc975e0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x2dc975e0, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x18, dwReserved0=0x0, dwReserved1=0x0, cFileName="1b4dd67f29cb1962.customDestinations-ms", cAlternateFileName="1B4DD6~1.CUS")) returned 1 [0084.055] FindNextFileW (in: hFindFile=0x381c40, lpFindFileData=0x31e314 | out: lpFindFileData=0x31e314*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe22bfd60, ftCreationTime.dwHighDateTime=0x1d2fab5, ftLastAccessTime.dwLowDateTime=0xcbe116e0, ftLastAccessTime.dwHighDateTime=0x1d4d596, ftLastWriteTime.dwLowDateTime=0xcbe116e0, ftLastWriteTime.dwHighDateTime=0x1d4d596, nFileSizeHigh=0x0, nFileSizeLow=0x1f68, dwReserved0=0x0, dwReserved1=0x0, cFileName="590aee7bdd69b59b.customDestinations-ms", cAlternateFileName="590AEE~1.CUS")) returned 1 [0084.055] FindNextFileW (in: hFindFile=0x381c40, lpFindFileData=0x31e314 | out: lpFindFileData=0x31e314*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x28d97bc0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x2da822a0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x2daa8400, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x43a3, dwReserved0=0x0, dwReserved1=0x0, cFileName="5afe4de1b92fc382.customDestinations-ms", cAlternateFileName="5AFE4D~1.CUS")) returned 1 [0084.055] FindNextFileW (in: hFindFile=0x381c40, lpFindFileData=0x31e314 | out: lpFindFileData=0x31e314*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x85096390, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x96ec4eb0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x96ec4eb0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x17d4, dwReserved0=0x0, dwReserved1=0x0, cFileName="5d696d521de238c3.customDestinations-ms", cAlternateFileName="5D696D~1.CUS")) returned 1 [0084.055] FindNextFileW (in: hFindFile=0x381c40, lpFindFileData=0x31e314 | out: lpFindFileData=0x31e314*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x28d97bc0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x2dc975e0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x2dc975e0, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x18, dwReserved0=0x0, dwReserved1=0x0, cFileName="7e4dca80246863e3.customDestinations-ms", cAlternateFileName="7E4DCA~1.CUS")) returned 1 [0084.055] FindNextFileW (in: hFindFile=0x381c40, lpFindFileData=0x31e314 | out: lpFindFileData=0x31e314*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5cb126c0, ftCreationTime.dwHighDateTime=0x1d2fad7, ftLastAccessTime.dwLowDateTime=0x5ddd1400, ftLastAccessTime.dwHighDateTime=0x1d2fad7, ftLastWriteTime.dwLowDateTime=0x5ddd1400, ftLastWriteTime.dwHighDateTime=0x1d2fad7, nFileSizeHigh=0x0, nFileSizeLow=0x23ff, dwReserved0=0x0, dwReserved1=0x0, cFileName="be71009ff8bb02a2.customDestinations-ms", cAlternateFileName="BE7100~1.CUS")) returned 1 [0084.055] FindNextFileW (in: hFindFile=0x381c40, lpFindFileData=0x31e314 | out: lpFindFileData=0x31e314*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1a388960, ftCreationTime.dwHighDateTime=0x1d42023, ftLastAccessTime.dwLowDateTime=0xce5f0760, ftLastAccessTime.dwHighDateTime=0x1d4d596, ftLastWriteTime.dwLowDateTime=0xce5f0760, ftLastWriteTime.dwHighDateTime=0x1d4d596, nFileSizeHigh=0x0, nFileSizeLow=0x1f68, dwReserved0=0x0, dwReserved1=0x0, cFileName="d93f411851d7c929.customDestinations-ms", cAlternateFileName="D93F41~1.CUS")) returned 1 [0084.056] FindNextFileW (in: hFindFile=0x381c40, lpFindFileData=0x31e314 | out: lpFindFileData=0x31e314*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0084.056] FindClose (in: hFindFile=0x381c40 | out: hFindFile=0x381c40) returned 1 [0084.056] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e59c) returned 1 [0084.056] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e5a8) returned 1 [0084.056] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e5dc) returned 1 [0084.056] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\CustomDestinations", nBufferLength=0x105, lpBuffer=0x31e0e4, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\CustomDestinations", lpFilePart=0x0) returned 0x59 [0084.056] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\CustomDestinations\\", nBufferLength=0x105, lpBuffer=0x31e0b8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\CustomDestinations\\", lpFilePart=0x0) returned 0x5a [0084.056] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\CustomDestinations\\*", lpFindFileData=0x31e304 | out: lpFindFileData=0x31e304*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x28cff640, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0xce5f0760, ftLastAccessTime.dwHighDateTime=0x1d4d596, ftLastWriteTime.dwLowDateTime=0xce5f0760, ftLastWriteTime.dwHighDateTime=0x1d4d596, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x381c40 [0084.057] FindNextFileW (in: hFindFile=0x381c40, lpFindFileData=0x31e314 | out: lpFindFileData=0x31e314*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x28cff640, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0xce5f0760, ftLastAccessTime.dwHighDateTime=0x1d4d596, ftLastWriteTime.dwLowDateTime=0xce5f0760, ftLastWriteTime.dwHighDateTime=0x1d4d596, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0084.057] FindNextFileW (in: hFindFile=0x381c40, lpFindFileData=0x31e314 | out: lpFindFileData=0x31e314*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x28d97bc0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x2dc975e0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x2dc975e0, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x18, dwReserved0=0x0, dwReserved1=0x0, cFileName="1b4dd67f29cb1962.customDestinations-ms", cAlternateFileName="1B4DD6~1.CUS")) returned 1 [0084.058] FindNextFileW (in: hFindFile=0x381c40, lpFindFileData=0x31e314 | out: lpFindFileData=0x31e314*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe22bfd60, ftCreationTime.dwHighDateTime=0x1d2fab5, ftLastAccessTime.dwLowDateTime=0xcbe116e0, ftLastAccessTime.dwHighDateTime=0x1d4d596, ftLastWriteTime.dwLowDateTime=0xcbe116e0, ftLastWriteTime.dwHighDateTime=0x1d4d596, nFileSizeHigh=0x0, nFileSizeLow=0x1f68, dwReserved0=0x0, dwReserved1=0x0, cFileName="590aee7bdd69b59b.customDestinations-ms", cAlternateFileName="590AEE~1.CUS")) returned 1 [0084.058] FindNextFileW (in: hFindFile=0x381c40, lpFindFileData=0x31e314 | out: lpFindFileData=0x31e314*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x28d97bc0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x2da822a0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x2daa8400, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x43a3, dwReserved0=0x0, dwReserved1=0x0, cFileName="5afe4de1b92fc382.customDestinations-ms", cAlternateFileName="5AFE4D~1.CUS")) returned 1 [0084.058] FindNextFileW (in: hFindFile=0x381c40, lpFindFileData=0x31e314 | out: lpFindFileData=0x31e314*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x85096390, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x96ec4eb0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x96ec4eb0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x17d4, dwReserved0=0x0, dwReserved1=0x0, cFileName="5d696d521de238c3.customDestinations-ms", cAlternateFileName="5D696D~1.CUS")) returned 1 [0084.058] FindNextFileW (in: hFindFile=0x381c40, lpFindFileData=0x31e314 | out: lpFindFileData=0x31e314*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x28d97bc0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x2dc975e0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x2dc975e0, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x18, dwReserved0=0x0, dwReserved1=0x0, cFileName="7e4dca80246863e3.customDestinations-ms", cAlternateFileName="7E4DCA~1.CUS")) returned 1 [0084.058] FindNextFileW (in: hFindFile=0x381c40, lpFindFileData=0x31e314 | out: lpFindFileData=0x31e314*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5cb126c0, ftCreationTime.dwHighDateTime=0x1d2fad7, ftLastAccessTime.dwLowDateTime=0x5ddd1400, ftLastAccessTime.dwHighDateTime=0x1d2fad7, ftLastWriteTime.dwLowDateTime=0x5ddd1400, ftLastWriteTime.dwHighDateTime=0x1d2fad7, nFileSizeHigh=0x0, nFileSizeLow=0x23ff, dwReserved0=0x0, dwReserved1=0x0, cFileName="be71009ff8bb02a2.customDestinations-ms", cAlternateFileName="BE7100~1.CUS")) returned 1 [0084.058] FindNextFileW (in: hFindFile=0x381c40, lpFindFileData=0x31e314 | out: lpFindFileData=0x31e314*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1a388960, ftCreationTime.dwHighDateTime=0x1d42023, ftLastAccessTime.dwLowDateTime=0xce5f0760, ftLastAccessTime.dwHighDateTime=0x1d4d596, ftLastWriteTime.dwLowDateTime=0xce5f0760, ftLastWriteTime.dwHighDateTime=0x1d4d596, nFileSizeHigh=0x0, nFileSizeLow=0x1f68, dwReserved0=0x0, dwReserved1=0x0, cFileName="d93f411851d7c929.customDestinations-ms", cAlternateFileName="D93F41~1.CUS")) returned 1 [0084.058] FindNextFileW (in: hFindFile=0x381c40, lpFindFileData=0x31e314 | out: lpFindFileData=0x31e314*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1a388960, ftCreationTime.dwHighDateTime=0x1d42023, ftLastAccessTime.dwLowDateTime=0xce5f0760, ftLastAccessTime.dwHighDateTime=0x1d4d596, ftLastWriteTime.dwLowDateTime=0xce5f0760, ftLastWriteTime.dwHighDateTime=0x1d4d596, nFileSizeHigh=0x0, nFileSizeLow=0x1f68, dwReserved0=0x0, dwReserved1=0x0, cFileName="d93f411851d7c929.customDestinations-ms", cAlternateFileName="D93F41~1.CUS")) returned 0 [0084.059] FindClose (in: hFindFile=0x381c40 | out: hFindFile=0x381c40) returned 1 [0084.059] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e59c) returned 1 [0084.059] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e5a8) returned 1 [0084.059] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e654) returned 1 [0084.059] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\SendTo", nBufferLength=0x105, lpBuffer=0x31e15c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\SendTo", lpFilePart=0x0) returned 0x46 [0084.059] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\SendTo\\", nBufferLength=0x105, lpBuffer=0x31e130, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\SendTo\\", lpFilePart=0x0) returned 0x47 [0084.059] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\SendTo\\*", lpFindFileData=0x31e37c | out: lpFindFileData=0x31e37c*(dwFileAttributes=0x2011, ftCreationTime.dwLowDateTime=0x28cff640, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28d97bc0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xf9b7c855, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x381c40 [0084.062] FindNextFileW (in: hFindFile=0x381c40, lpFindFileData=0x31e38c | out: lpFindFileData=0x31e38c*(dwFileAttributes=0x2011, ftCreationTime.dwLowDateTime=0x28cff640, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28d97bc0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xf9b7c855, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0084.062] FindNextFileW (in: hFindFile=0x381c40, lpFindFileData=0x31e38c | out: lpFindFileData=0x31e38c*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x28d97bc0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28d97bc0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x639ff80f, ftLastWriteTime.dwHighDateTime=0x1c9ea0c, nFileSizeHigh=0x0, nFileSizeLow=0x3, dwReserved0=0x0, dwReserved1=0x0, cFileName="Compressed (zipped) Folder.ZFSendToTarget", cAlternateFileName="COMPRE~1.ZFS")) returned 1 [0084.062] FindNextFileW (in: hFindFile=0x381c40, lpFindFileData=0x31e38c | out: lpFindFileData=0x31e38c*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x28d97bc0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28d97bc0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x3bb52ab9, ftLastWriteTime.dwHighDateTime=0x1c9ea0c, nFileSizeHigh=0x0, nFileSizeLow=0x7, dwReserved0=0x0, dwReserved1=0x0, cFileName="Desktop (create shortcut).DeskLink", cAlternateFileName="DESKTO~1.DES")) returned 1 [0084.062] FindNextFileW (in: hFindFile=0x381c40, lpFindFileData=0x31e38c | out: lpFindFileData=0x31e38c*(dwFileAttributes=0x2026, ftCreationTime.dwLowDateTime=0x28d97bc0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28d97bc0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x3d828fa3, ftLastWriteTime.dwHighDateTime=0x1ca043f, nFileSizeHigh=0x0, nFileSizeLow=0x22e, dwReserved0=0x0, dwReserved1=0x0, cFileName="Desktop.ini", cAlternateFileName="")) returned 1 [0084.062] FindNextFileW (in: hFindFile=0x381c40, lpFindFileData=0x31e38c | out: lpFindFileData=0x31e38c*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x28d97bc0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28d97bc0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xf9b7c855, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Documents.mydocs", cAlternateFileName="DOCUME~1.MYD")) returned 1 [0084.062] FindNextFileW (in: hFindFile=0x381c40, lpFindFileData=0x31e38c | out: lpFindFileData=0x31e38c*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x28d97bc0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28d97bc0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x3d802e42, ftLastWriteTime.dwHighDateTime=0x1ca043f, nFileSizeHigh=0x0, nFileSizeLow=0x4d6, dwReserved0=0x0, dwReserved1=0x0, cFileName="Fax Recipient.lnk", cAlternateFileName="FAXREC~1.LNK")) returned 1 [0084.062] FindNextFileW (in: hFindFile=0x381c40, lpFindFileData=0x31e38c | out: lpFindFileData=0x31e38c*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x28d97bc0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28d97bc0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x3bb9ed75, ftLastWriteTime.dwHighDateTime=0x1c9ea0c, nFileSizeHigh=0x0, nFileSizeLow=0x4, dwReserved0=0x0, dwReserved1=0x0, cFileName="Mail Recipient.MAPIMail", cAlternateFileName="MAILRE~1.MAP")) returned 1 [0084.063] FindNextFileW (in: hFindFile=0x381c40, lpFindFileData=0x31e38c | out: lpFindFileData=0x31e38c*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0084.063] FindClose (in: hFindFile=0x381c40 | out: hFindFile=0x381c40) returned 1 [0084.063] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e614) returned 1 [0084.063] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e620) returned 1 [0084.063] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e654) returned 1 [0084.063] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\SendTo", nBufferLength=0x105, lpBuffer=0x31e15c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\SendTo", lpFilePart=0x0) returned 0x46 [0084.063] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\SendTo\\", nBufferLength=0x105, lpBuffer=0x31e130, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\SendTo\\", lpFilePart=0x0) returned 0x47 [0084.064] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\SendTo\\*", lpFindFileData=0x31e37c | out: lpFindFileData=0x31e37c*(dwFileAttributes=0x2011, ftCreationTime.dwLowDateTime=0x28cff640, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28d97bc0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xf9b7c855, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x381c40 [0084.064] FindNextFileW (in: hFindFile=0x381c40, lpFindFileData=0x31e38c | out: lpFindFileData=0x31e38c*(dwFileAttributes=0x2011, ftCreationTime.dwLowDateTime=0x28cff640, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28d97bc0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xf9b7c855, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0084.064] FindNextFileW (in: hFindFile=0x381c40, lpFindFileData=0x31e38c | out: lpFindFileData=0x31e38c*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x28d97bc0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28d97bc0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x639ff80f, ftLastWriteTime.dwHighDateTime=0x1c9ea0c, nFileSizeHigh=0x0, nFileSizeLow=0x3, dwReserved0=0x0, dwReserved1=0x0, cFileName="Compressed (zipped) Folder.ZFSendToTarget", cAlternateFileName="COMPRE~1.ZFS")) returned 1 [0084.065] FindNextFileW (in: hFindFile=0x381c40, lpFindFileData=0x31e38c | out: lpFindFileData=0x31e38c*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x28d97bc0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28d97bc0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x3bb52ab9, ftLastWriteTime.dwHighDateTime=0x1c9ea0c, nFileSizeHigh=0x0, nFileSizeLow=0x7, dwReserved0=0x0, dwReserved1=0x0, cFileName="Desktop (create shortcut).DeskLink", cAlternateFileName="DESKTO~1.DES")) returned 1 [0084.065] FindNextFileW (in: hFindFile=0x381c40, lpFindFileData=0x31e38c | out: lpFindFileData=0x31e38c*(dwFileAttributes=0x2026, ftCreationTime.dwLowDateTime=0x28d97bc0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28d97bc0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x3d828fa3, ftLastWriteTime.dwHighDateTime=0x1ca043f, nFileSizeHigh=0x0, nFileSizeLow=0x22e, dwReserved0=0x0, dwReserved1=0x0, cFileName="Desktop.ini", cAlternateFileName="")) returned 1 [0084.065] FindNextFileW (in: hFindFile=0x381c40, lpFindFileData=0x31e38c | out: lpFindFileData=0x31e38c*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x28d97bc0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28d97bc0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xf9b7c855, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Documents.mydocs", cAlternateFileName="DOCUME~1.MYD")) returned 1 [0084.065] FindNextFileW (in: hFindFile=0x381c40, lpFindFileData=0x31e38c | out: lpFindFileData=0x31e38c*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x28d97bc0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28d97bc0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x3d802e42, ftLastWriteTime.dwHighDateTime=0x1ca043f, nFileSizeHigh=0x0, nFileSizeLow=0x4d6, dwReserved0=0x0, dwReserved1=0x0, cFileName="Fax Recipient.lnk", cAlternateFileName="FAXREC~1.LNK")) returned 1 [0084.065] FindNextFileW (in: hFindFile=0x381c40, lpFindFileData=0x31e38c | out: lpFindFileData=0x31e38c*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x28d97bc0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28d97bc0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x3bb9ed75, ftLastWriteTime.dwHighDateTime=0x1c9ea0c, nFileSizeHigh=0x0, nFileSizeLow=0x4, dwReserved0=0x0, dwReserved1=0x0, cFileName="Mail Recipient.MAPIMail", cAlternateFileName="MAILRE~1.MAP")) returned 1 [0084.065] FindNextFileW (in: hFindFile=0x381c40, lpFindFileData=0x31e38c | out: lpFindFileData=0x31e38c*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x28d97bc0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28d97bc0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x3bb9ed75, ftLastWriteTime.dwHighDateTime=0x1c9ea0c, nFileSizeHigh=0x0, nFileSizeLow=0x4, dwReserved0=0x0, dwReserved1=0x0, cFileName="Mail Recipient.MAPIMail", cAlternateFileName="MAILRE~1.MAP")) returned 0 [0084.065] FindClose (in: hFindFile=0x381c40 | out: hFindFile=0x381c40) returned 1 [0084.066] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e614) returned 1 [0084.066] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e620) returned 1 [0084.066] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\SendTo\\Fax Recipient.lnk", nBufferLength=0x105, lpBuffer=0x31e02c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\SendTo\\Fax Recipient.lnk", lpFilePart=0x0) returned 0x58 [0084.066] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e520) returned 1 [0084.066] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\SendTo\\Fax Recipient.lnk" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\windows\\sendto\\fax recipient.lnk"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x264 [0084.068] GetFileType (hFile=0x264) returned 0x1 [0084.068] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e51c) returned 1 [0084.068] GetFileType (hFile=0x264) returned 0x1 [0084.068] GetFileSize (in: hFile=0x264, lpFileSizeHigh=0x31e628 | out: lpFileSizeHigh=0x31e628*=0x0) returned 0x4d6 [0084.068] ReadFile (in: hFile=0x264, lpBuffer=0x280d85c, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x31e5d4, lpOverlapped=0x0 | out: lpBuffer=0x280d85c*, lpNumberOfBytesRead=0x31e5d4*=0x4d6, lpOverlapped=0x0) returned 1 [0084.109] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\SendTo\\Fax Recipient.lnk", nBufferLength=0x105, lpBuffer=0x31e018, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\SendTo\\Fax Recipient.lnk", lpFilePart=0x0) returned 0x58 [0084.109] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e50c) returned 1 [0084.109] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\SendTo\\Fax Recipient.lnk" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\windows\\sendto\\fax recipient.lnk"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x264 [0084.110] GetFileType (hFile=0x264) returned 0x1 [0084.110] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e508) returned 1 [0084.110] GetFileType (hFile=0x264) returned 0x1 [0084.110] WriteFile (in: hFile=0x264, lpBuffer=0x26560f4*, nNumberOfBytesToWrite=0x4e0, lpNumberOfBytesWritten=0x31e59c, lpOverlapped=0x0 | out: lpBuffer=0x26560f4*, lpNumberOfBytesWritten=0x31e59c*=0x4e0, lpOverlapped=0x0) returned 1 [0084.111] CloseHandle (hObject=0x264) returned 1 [0084.111] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\SendTo\\Fax Recipient.lnk", nBufferLength=0x105, lpBuffer=0x31e14c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\SendTo\\Fax Recipient.lnk", lpFilePart=0x0) returned 0x58 [0084.111] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\SendTo\\Fax Recipient.lnk", nBufferLength=0x105, lpBuffer=0x31e14c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\SendTo\\Fax Recipient.lnk", lpFilePart=0x0) returned 0x58 [0084.111] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e5ac) returned 1 [0084.111] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\SendTo\\Fax Recipient.lnk" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\windows\\sendto\\fax recipient.lnk"), fInfoLevelId=0x0, lpFileInformation=0x31e628 | out: lpFileInformation=0x31e628*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x28d97bc0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28d97bc0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x15933840, ftLastWriteTime.dwHighDateTime=0x1d6eb7f, nFileSizeHigh=0x0, nFileSizeLow=0x4e0)) returned 1 [0084.111] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e5a8) returned 1 [0084.111] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\SendTo\\Fax Recipient.lnk" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\windows\\sendto\\fax recipient.lnk"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\SendTo\\Fax Recipient.lnk" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\windows\\sendto\\fax recipient.lnk")) returned 1 [0084.111] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e654) returned 1 [0084.111] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Start Menu", nBufferLength=0x105, lpBuffer=0x31e15c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Start Menu", lpFilePart=0x0) returned 0x4a [0084.111] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Start Menu\\", nBufferLength=0x105, lpBuffer=0x31e130, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Start Menu\\", lpFilePart=0x0) returned 0x4b [0084.111] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Start Menu\\*", lpFindFileData=0x31e37c | out: lpFindFileData=0x31e37c*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x28cff640, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28d97bc0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x2d1bb180, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x381b40 [0084.112] FindNextFileW (in: hFindFile=0x381b40, lpFindFileData=0x31e38c | out: lpFindFileData=0x31e38c*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x28cff640, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28d97bc0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x2d1bb180, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0084.112] FindNextFileW (in: hFindFile=0x381b40, lpFindFileData=0x31e38c | out: lpFindFileData=0x31e38c*(dwFileAttributes=0x6, ftCreationTime.dwLowDateTime=0x28d97bc0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28d97bc0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x2d1bb180, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0xae, dwReserved0=0x0, dwReserved1=0x0, cFileName="desktop.ini", cAlternateFileName="")) returned 1 [0084.112] FindNextFileW (in: hFindFile=0x381b40, lpFindFileData=0x31e38c | out: lpFindFileData=0x31e38c*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x28cff640, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x2d7ae880, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x2d7ae880, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Programs", cAlternateFileName="")) returned 1 [0084.112] FindNextFileW (in: hFindFile=0x381b40, lpFindFileData=0x31e38c | out: lpFindFileData=0x31e38c*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x28cff640, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x2d7ae880, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x2d7ae880, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Programs", cAlternateFileName="")) returned 0 [0084.112] FindClose (in: hFindFile=0x381b40 | out: hFindFile=0x381b40) returned 1 [0084.112] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e614) returned 1 [0084.112] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e620) returned 1 [0084.112] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e654) returned 1 [0084.112] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Start Menu", nBufferLength=0x105, lpBuffer=0x31e15c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Start Menu", lpFilePart=0x0) returned 0x4a [0084.112] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Start Menu\\", nBufferLength=0x105, lpBuffer=0x31e130, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Start Menu\\", lpFilePart=0x0) returned 0x4b [0084.112] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Start Menu\\*", lpFindFileData=0x31e37c | out: lpFindFileData=0x31e37c*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x28cff640, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28d97bc0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x2d1bb180, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x381b40 [0084.113] FindNextFileW (in: hFindFile=0x381b40, lpFindFileData=0x31e38c | out: lpFindFileData=0x31e38c*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x28cff640, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28d97bc0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x2d1bb180, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0084.113] FindNextFileW (in: hFindFile=0x381b40, lpFindFileData=0x31e38c | out: lpFindFileData=0x31e38c*(dwFileAttributes=0x6, ftCreationTime.dwLowDateTime=0x28d97bc0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28d97bc0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x2d1bb180, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0xae, dwReserved0=0x0, dwReserved1=0x0, cFileName="desktop.ini", cAlternateFileName="")) returned 1 [0084.113] FindNextFileW (in: hFindFile=0x381b40, lpFindFileData=0x31e38c | out: lpFindFileData=0x31e38c*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x28cff640, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x2d7ae880, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x2d7ae880, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Programs", cAlternateFileName="")) returned 1 [0084.113] FindNextFileW (in: hFindFile=0x381b40, lpFindFileData=0x31e38c | out: lpFindFileData=0x31e38c*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0084.113] FindClose (in: hFindFile=0x381b40 | out: hFindFile=0x381b40) returned 1 [0084.113] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e614) returned 1 [0084.113] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e620) returned 1 [0084.113] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e5dc) returned 1 [0084.113] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Start Menu\\Programs", nBufferLength=0x105, lpBuffer=0x31e0e4, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Start Menu\\Programs", lpFilePart=0x0) returned 0x53 [0084.113] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Start Menu\\Programs\\", nBufferLength=0x105, lpBuffer=0x31e0b8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Start Menu\\Programs\\", lpFilePart=0x0) returned 0x54 [0084.113] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Start Menu\\Programs\\*", lpFindFileData=0x31e304 | out: lpFindFileData=0x31e304*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x28cff640, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x2d7ae880, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x2d7ae880, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x381b40 [0084.114] FindNextFileW (in: hFindFile=0x381b40, lpFindFileData=0x31e314 | out: lpFindFileData=0x31e314*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x28cff640, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x2d7ae880, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x2d7ae880, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0084.114] FindNextFileW (in: hFindFile=0x381b40, lpFindFileData=0x31e314 | out: lpFindFileData=0x31e314*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x28cff640, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28d71a60, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x2d76088a, ftLastWriteTime.dwHighDateTime=0x1ca043f, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Accessories", cAlternateFileName="ACCESS~1")) returned 1 [0084.114] FindNextFileW (in: hFindFile=0x381b40, lpFindFileData=0x31e314 | out: lpFindFileData=0x31e314*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x28cff640, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28d71a60, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x2d207440, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Administrative Tools", cAlternateFileName="ADMINI~1")) returned 1 [0084.114] FindNextFileW (in: hFindFile=0x381b40, lpFindFileData=0x31e314 | out: lpFindFileData=0x31e314*(dwFileAttributes=0x6, ftCreationTime.dwLowDateTime=0x28d71a60, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28d71a60, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x2d7ae880, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x1dc, dwReserved0=0x0, dwReserved1=0x0, cFileName="desktop.ini", cAlternateFileName="")) returned 1 [0084.114] FindNextFileW (in: hFindFile=0x381b40, lpFindFileData=0x31e314 | out: lpFindFileData=0x31e314*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x28d71a60, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28d71a60, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x2d7ae880, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x58b, dwReserved0=0x0, dwReserved1=0x0, cFileName="Internet Explorer (64-bit).lnk", cAlternateFileName="INTERN~2.LNK")) returned 1 [0084.114] FindNextFileW (in: hFindFile=0x381b40, lpFindFileData=0x31e314 | out: lpFindFileData=0x31e314*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x28d71a60, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x2d7ae880, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x2d7ae880, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x5ad, dwReserved0=0x0, dwReserved1=0x0, cFileName="Internet Explorer.lnk", cAlternateFileName="INTERN~1.LNK")) returned 1 [0084.114] FindNextFileW (in: hFindFile=0x381b40, lpFindFileData=0x31e314 | out: lpFindFileData=0x31e314*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x28cff640, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28d71a60, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x7e05e94e, ftLastWriteTime.dwHighDateTime=0x1ca043e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Maintenance", cAlternateFileName="MAINTE~1")) returned 1 [0084.115] FindNextFileW (in: hFindFile=0x381b40, lpFindFileData=0x31e314 | out: lpFindFileData=0x31e314*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x28cff640, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28d71a60, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x2d207440, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Startup", cAlternateFileName="")) returned 1 [0084.115] FindNextFileW (in: hFindFile=0x381b40, lpFindFileData=0x31e314 | out: lpFindFileData=0x31e314*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x28cff640, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28d71a60, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x2d207440, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Startup", cAlternateFileName="")) returned 0 [0084.115] FindClose (in: hFindFile=0x381b40 | out: hFindFile=0x381b40) returned 1 [0084.115] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e59c) returned 1 [0084.115] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e5a8) returned 1 [0084.115] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e5dc) returned 1 [0084.115] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Start Menu\\Programs", nBufferLength=0x105, lpBuffer=0x31e0e4, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Start Menu\\Programs", lpFilePart=0x0) returned 0x53 [0084.115] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Start Menu\\Programs\\", nBufferLength=0x105, lpBuffer=0x31e0b8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Start Menu\\Programs\\", lpFilePart=0x0) returned 0x54 [0084.115] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Start Menu\\Programs\\*", lpFindFileData=0x31e304 | out: lpFindFileData=0x31e304*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x28cff640, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x2d7ae880, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x2d7ae880, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x381b40 [0084.116] FindNextFileW (in: hFindFile=0x381b40, lpFindFileData=0x31e314 | out: lpFindFileData=0x31e314*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x28cff640, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x2d7ae880, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x2d7ae880, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0084.116] FindNextFileW (in: hFindFile=0x381b40, lpFindFileData=0x31e314 | out: lpFindFileData=0x31e314*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x28cff640, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28d71a60, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x2d76088a, ftLastWriteTime.dwHighDateTime=0x1ca043f, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Accessories", cAlternateFileName="ACCESS~1")) returned 1 [0084.116] FindNextFileW (in: hFindFile=0x381b40, lpFindFileData=0x31e314 | out: lpFindFileData=0x31e314*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x28cff640, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28d71a60, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x2d207440, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Administrative Tools", cAlternateFileName="ADMINI~1")) returned 1 [0084.116] FindNextFileW (in: hFindFile=0x381b40, lpFindFileData=0x31e314 | out: lpFindFileData=0x31e314*(dwFileAttributes=0x6, ftCreationTime.dwLowDateTime=0x28d71a60, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28d71a60, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x2d7ae880, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x1dc, dwReserved0=0x0, dwReserved1=0x0, cFileName="desktop.ini", cAlternateFileName="")) returned 1 [0084.116] FindNextFileW (in: hFindFile=0x381b40, lpFindFileData=0x31e314 | out: lpFindFileData=0x31e314*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x28d71a60, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28d71a60, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x2d7ae880, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x58b, dwReserved0=0x0, dwReserved1=0x0, cFileName="Internet Explorer (64-bit).lnk", cAlternateFileName="INTERN~2.LNK")) returned 1 [0084.116] FindNextFileW (in: hFindFile=0x381b40, lpFindFileData=0x31e314 | out: lpFindFileData=0x31e314*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x28d71a60, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x2d7ae880, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x2d7ae880, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x5ad, dwReserved0=0x0, dwReserved1=0x0, cFileName="Internet Explorer.lnk", cAlternateFileName="INTERN~1.LNK")) returned 1 [0084.116] FindNextFileW (in: hFindFile=0x381b40, lpFindFileData=0x31e314 | out: lpFindFileData=0x31e314*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x28cff640, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28d71a60, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x7e05e94e, ftLastWriteTime.dwHighDateTime=0x1ca043e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Maintenance", cAlternateFileName="MAINTE~1")) returned 1 [0084.117] FindNextFileW (in: hFindFile=0x381b40, lpFindFileData=0x31e314 | out: lpFindFileData=0x31e314*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x28cff640, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28d71a60, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x2d207440, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Startup", cAlternateFileName="")) returned 1 [0084.117] FindNextFileW (in: hFindFile=0x381b40, lpFindFileData=0x31e314 | out: lpFindFileData=0x31e314*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0084.117] FindClose (in: hFindFile=0x381b40 | out: hFindFile=0x381b40) returned 1 [0084.117] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e59c) returned 1 [0084.117] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e5a8) returned 1 [0084.117] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Start Menu\\Programs\\Internet Explorer (64-bit).lnk", nBufferLength=0x105, lpBuffer=0x31dfb4, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Start Menu\\Programs\\Internet Explorer (64-bit).lnk", lpFilePart=0x0) returned 0x72 [0084.117] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e4a8) returned 1 [0084.117] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Start Menu\\Programs\\Internet Explorer (64-bit).lnk" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\windows\\start menu\\programs\\internet explorer (64-bit).lnk"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x264 [0084.117] GetFileType (hFile=0x264) returned 0x1 [0084.117] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e4a4) returned 1 [0084.118] GetFileType (hFile=0x264) returned 0x1 [0084.118] GetFileSize (in: hFile=0x264, lpFileSizeHigh=0x31e5b0 | out: lpFileSizeHigh=0x31e5b0*=0x0) returned 0x58b [0084.118] ReadFile (in: hFile=0x264, lpBuffer=0x265cf00, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x31e55c, lpOverlapped=0x0 | out: lpBuffer=0x265cf00*, lpNumberOfBytesRead=0x31e55c*=0x58b, lpOverlapped=0x0) returned 1 [0084.119] CloseHandle (hObject=0x264) returned 1 [0084.135] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Start Menu\\Programs\\Internet Explorer (64-bit).lnk", nBufferLength=0x105, lpBuffer=0x31dfa0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Start Menu\\Programs\\Internet Explorer (64-bit).lnk", lpFilePart=0x0) returned 0x72 [0084.135] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e494) returned 1 [0084.135] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Start Menu\\Programs\\Internet Explorer (64-bit).lnk" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\windows\\start menu\\programs\\internet explorer (64-bit).lnk"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x264 [0084.136] GetFileType (hFile=0x264) returned 0x1 [0084.136] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e490) returned 1 [0084.136] GetFileType (hFile=0x264) returned 0x1 [0084.136] WriteFile (in: hFile=0x264, lpBuffer=0x26acbc0*, nNumberOfBytesToWrite=0x590, lpNumberOfBytesWritten=0x31e524, lpOverlapped=0x0 | out: lpBuffer=0x26acbc0*, lpNumberOfBytesWritten=0x31e524*=0x590, lpOverlapped=0x0) returned 1 [0084.137] CloseHandle (hObject=0x264) returned 1 [0084.137] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Start Menu\\Programs\\Internet Explorer (64-bit).lnk", nBufferLength=0x105, lpBuffer=0x31e0d4, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Start Menu\\Programs\\Internet Explorer (64-bit).lnk", lpFilePart=0x0) returned 0x72 [0084.137] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Start Menu\\Programs\\Internet Explorer (64-bit).lnk", nBufferLength=0x105, lpBuffer=0x31e0d4, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Start Menu\\Programs\\Internet Explorer (64-bit).lnk", lpFilePart=0x0) returned 0x72 [0084.137] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e534) returned 1 [0084.137] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Start Menu\\Programs\\Internet Explorer (64-bit).lnk" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\windows\\start menu\\programs\\internet explorer (64-bit).lnk"), fInfoLevelId=0x0, lpFileInformation=0x31e5b0 | out: lpFileInformation=0x31e5b0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x28d71a60, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28d71a60, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x1597fb00, ftLastWriteTime.dwHighDateTime=0x1d6eb7f, nFileSizeHigh=0x0, nFileSizeLow=0x590)) returned 1 [0084.137] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e530) returned 1 [0084.137] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Start Menu\\Programs\\Internet Explorer (64-bit).lnk" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\windows\\start menu\\programs\\internet explorer (64-bit).lnk"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Start Menu\\Programs\\Internet Explorer (64-bit).lnk" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\windows\\start menu\\programs\\internet explorer (64-bit).lnk")) returned 1 [0084.138] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Start Menu\\Programs\\Internet Explorer.lnk", nBufferLength=0x105, lpBuffer=0x31dfb4, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Start Menu\\Programs\\Internet Explorer.lnk", lpFilePart=0x0) returned 0x69 [0084.138] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e4a8) returned 1 [0084.138] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Start Menu\\Programs\\Internet Explorer.lnk" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\windows\\start menu\\programs\\internet explorer.lnk"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x264 [0084.138] GetFileType (hFile=0x264) returned 0x1 [0084.138] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e4a4) returned 1 [0084.139] GetFileType (hFile=0x264) returned 0x1 [0084.139] GetFileSize (in: hFile=0x264, lpFileSizeHigh=0x31e5b0 | out: lpFileSizeHigh=0x31e5b0*=0x0) returned 0x5ad [0084.139] ReadFile (in: hFile=0x264, lpBuffer=0x26ae4fc, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x31e55c, lpOverlapped=0x0 | out: lpBuffer=0x26ae4fc*, lpNumberOfBytesRead=0x31e55c*=0x5ad, lpOverlapped=0x0) returned 1 [0084.140] CloseHandle (hObject=0x264) returned 1 [0084.154] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Start Menu\\Programs\\Internet Explorer.lnk", nBufferLength=0x105, lpBuffer=0x31dfa0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Start Menu\\Programs\\Internet Explorer.lnk", lpFilePart=0x0) returned 0x69 [0084.154] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e494) returned 1 [0084.154] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Start Menu\\Programs\\Internet Explorer.lnk" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\windows\\start menu\\programs\\internet explorer.lnk"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x264 [0084.155] GetFileType (hFile=0x264) returned 0x1 [0084.155] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e490) returned 1 [0084.155] GetFileType (hFile=0x264) returned 0x1 [0084.155] WriteFile (in: hFile=0x264, lpBuffer=0x26fe0d4*, nNumberOfBytesToWrite=0x5b0, lpNumberOfBytesWritten=0x31e524, lpOverlapped=0x0 | out: lpBuffer=0x26fe0d4*, lpNumberOfBytesWritten=0x31e524*=0x5b0, lpOverlapped=0x0) returned 1 [0084.156] CloseHandle (hObject=0x264) returned 1 [0084.156] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Start Menu\\Programs\\Internet Explorer.lnk", nBufferLength=0x105, lpBuffer=0x31e0d4, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Start Menu\\Programs\\Internet Explorer.lnk", lpFilePart=0x0) returned 0x69 [0084.156] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Start Menu\\Programs\\Internet Explorer.lnk", nBufferLength=0x105, lpBuffer=0x31e0d4, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Start Menu\\Programs\\Internet Explorer.lnk", lpFilePart=0x0) returned 0x69 [0084.156] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e534) returned 1 [0084.156] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Start Menu\\Programs\\Internet Explorer.lnk" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\windows\\start menu\\programs\\internet explorer.lnk"), fInfoLevelId=0x0, lpFileInformation=0x31e5b0 | out: lpFileInformation=0x31e5b0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x28d71a60, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x2d7ae880, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x159a5c60, ftLastWriteTime.dwHighDateTime=0x1d6eb7f, nFileSizeHigh=0x0, nFileSizeLow=0x5b0)) returned 1 [0084.156] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e530) returned 1 [0084.156] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Start Menu\\Programs\\Internet Explorer.lnk" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\windows\\start menu\\programs\\internet explorer.lnk"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Start Menu\\Programs\\Internet Explorer.lnk" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\windows\\start menu\\programs\\internet explorer.lnk")) returned 1 [0084.157] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e564) returned 1 [0084.157] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Start Menu\\Programs\\Accessories", nBufferLength=0x105, lpBuffer=0x31e06c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Start Menu\\Programs\\Accessories", lpFilePart=0x0) returned 0x5f [0084.157] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Start Menu\\Programs\\Accessories\\", nBufferLength=0x105, lpBuffer=0x31e040, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Start Menu\\Programs\\Accessories\\", lpFilePart=0x0) returned 0x60 [0084.157] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Start Menu\\Programs\\Accessories\\*", lpFindFileData=0x31e28c | out: lpFindFileData=0x31e28c*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x28cff640, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28d71a60, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x2d76088a, ftLastWriteTime.dwHighDateTime=0x1ca043f, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x381d00 [0084.157] FindNextFileW (in: hFindFile=0x381d00, lpFindFileData=0x31e29c | out: lpFindFileData=0x31e29c*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x28cff640, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28d71a60, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x2d76088a, ftLastWriteTime.dwHighDateTime=0x1ca043f, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0084.157] FindNextFileW (in: hFindFile=0x381d00, lpFindFileData=0x31e29c | out: lpFindFileData=0x31e29c*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x28cff640, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28dbdd20, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x1b75a077, ftLastWriteTime.dwHighDateTime=0x1ca043f, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Accessibility", cAlternateFileName="ACCESS~1")) returned 1 [0084.158] FindNextFileW (in: hFindFile=0x381d00, lpFindFileData=0x31e29c | out: lpFindFileData=0x31e29c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x28d71a60, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28d71a60, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x2a53d8cd, ftLastWriteTime.dwHighDateTime=0x1ca043f, nFileSizeHigh=0x0, nFileSizeLow=0x500, dwReserved0=0x0, dwReserved1=0x0, cFileName="Command Prompt.lnk", cAlternateFileName="COMMAN~1.LNK")) returned 1 [0084.158] FindNextFileW (in: hFindFile=0x381d00, lpFindFileData=0x31e29c | out: lpFindFileData=0x31e29c*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0x28d71a60, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28d71a60, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x2d76088a, ftLastWriteTime.dwHighDateTime=0x1ca043f, nFileSizeHigh=0x0, nFileSizeLow=0x2a6, dwReserved0=0x0, dwReserved1=0x0, cFileName="Desktop.ini", cAlternateFileName="")) returned 1 [0084.158] FindNextFileW (in: hFindFile=0x381d00, lpFindFileData=0x31e29c | out: lpFindFileData=0x31e29c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x28d71a60, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28d71a60, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x2d73a72a, ftLastWriteTime.dwHighDateTime=0x1ca043f, nFileSizeHigh=0x0, nFileSizeLow=0x518, dwReserved0=0x0, dwReserved1=0x0, cFileName="Notepad.lnk", cAlternateFileName="")) returned 1 [0084.158] FindNextFileW (in: hFindFile=0x381d00, lpFindFileData=0x31e29c | out: lpFindFileData=0x31e29c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x28d71a60, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28d71a60, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x7dfec52d, ftLastWriteTime.dwHighDateTime=0x1ca043e, nFileSizeHigh=0x0, nFileSizeLow=0x106, dwReserved0=0x0, dwReserved1=0x0, cFileName="Run.lnk", cAlternateFileName="")) returned 1 [0084.158] FindNextFileW (in: hFindFile=0x381d00, lpFindFileData=0x31e29c | out: lpFindFileData=0x31e29c*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x28cff640, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28d71a60, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x2d7ae880, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="System Tools", cAlternateFileName="SYSTEM~1")) returned 1 [0084.158] FindNextFileW (in: hFindFile=0x381d00, lpFindFileData=0x31e29c | out: lpFindFileData=0x31e29c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x28d71a60, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28d71a60, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x7dfa026d, ftLastWriteTime.dwHighDateTime=0x1ca043e, nFileSizeHigh=0x0, nFileSizeLow=0x4cc, dwReserved0=0x0, dwReserved1=0x0, cFileName="Windows Explorer.lnk", cAlternateFileName="WINDOW~1.LNK")) returned 1 [0084.158] FindNextFileW (in: hFindFile=0x381d00, lpFindFileData=0x31e29c | out: lpFindFileData=0x31e29c*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0084.158] FindClose (in: hFindFile=0x381d00 | out: hFindFile=0x381d00) returned 1 [0084.158] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e524) returned 1 [0084.158] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e530) returned 1 [0084.158] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e564) returned 1 [0084.159] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Start Menu\\Programs\\Accessories", nBufferLength=0x105, lpBuffer=0x31e06c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Start Menu\\Programs\\Accessories", lpFilePart=0x0) returned 0x5f [0084.159] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Start Menu\\Programs\\Accessories\\", nBufferLength=0x105, lpBuffer=0x31e040, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Start Menu\\Programs\\Accessories\\", lpFilePart=0x0) returned 0x60 [0084.159] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Start Menu\\Programs\\Accessories\\*", lpFindFileData=0x31e28c | out: lpFindFileData=0x31e28c*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x28cff640, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28d71a60, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x2d76088a, ftLastWriteTime.dwHighDateTime=0x1ca043f, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x381d00 [0084.159] FindNextFileW (in: hFindFile=0x381d00, lpFindFileData=0x31e29c | out: lpFindFileData=0x31e29c*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x28cff640, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28d71a60, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x2d76088a, ftLastWriteTime.dwHighDateTime=0x1ca043f, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0084.159] FindNextFileW (in: hFindFile=0x381d00, lpFindFileData=0x31e29c | out: lpFindFileData=0x31e29c*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x28cff640, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28dbdd20, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x1b75a077, ftLastWriteTime.dwHighDateTime=0x1ca043f, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Accessibility", cAlternateFileName="ACCESS~1")) returned 1 [0084.159] FindNextFileW (in: hFindFile=0x381d00, lpFindFileData=0x31e29c | out: lpFindFileData=0x31e29c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x28d71a60, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28d71a60, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x2a53d8cd, ftLastWriteTime.dwHighDateTime=0x1ca043f, nFileSizeHigh=0x0, nFileSizeLow=0x500, dwReserved0=0x0, dwReserved1=0x0, cFileName="Command Prompt.lnk", cAlternateFileName="COMMAN~1.LNK")) returned 1 [0084.159] FindNextFileW (in: hFindFile=0x381d00, lpFindFileData=0x31e29c | out: lpFindFileData=0x31e29c*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0x28d71a60, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28d71a60, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x2d76088a, ftLastWriteTime.dwHighDateTime=0x1ca043f, nFileSizeHigh=0x0, nFileSizeLow=0x2a6, dwReserved0=0x0, dwReserved1=0x0, cFileName="Desktop.ini", cAlternateFileName="")) returned 1 [0084.159] FindNextFileW (in: hFindFile=0x381d00, lpFindFileData=0x31e29c | out: lpFindFileData=0x31e29c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x28d71a60, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28d71a60, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x2d73a72a, ftLastWriteTime.dwHighDateTime=0x1ca043f, nFileSizeHigh=0x0, nFileSizeLow=0x518, dwReserved0=0x0, dwReserved1=0x0, cFileName="Notepad.lnk", cAlternateFileName="")) returned 1 [0084.160] FindNextFileW (in: hFindFile=0x381d00, lpFindFileData=0x31e29c | out: lpFindFileData=0x31e29c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x28d71a60, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28d71a60, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x7dfec52d, ftLastWriteTime.dwHighDateTime=0x1ca043e, nFileSizeHigh=0x0, nFileSizeLow=0x106, dwReserved0=0x0, dwReserved1=0x0, cFileName="Run.lnk", cAlternateFileName="")) returned 1 [0084.160] FindNextFileW (in: hFindFile=0x381d00, lpFindFileData=0x31e29c | out: lpFindFileData=0x31e29c*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x28cff640, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28d71a60, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x2d7ae880, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="System Tools", cAlternateFileName="SYSTEM~1")) returned 1 [0084.160] FindNextFileW (in: hFindFile=0x381d00, lpFindFileData=0x31e29c | out: lpFindFileData=0x31e29c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x28d71a60, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28d71a60, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x7dfa026d, ftLastWriteTime.dwHighDateTime=0x1ca043e, nFileSizeHigh=0x0, nFileSizeLow=0x4cc, dwReserved0=0x0, dwReserved1=0x0, cFileName="Windows Explorer.lnk", cAlternateFileName="WINDOW~1.LNK")) returned 1 [0084.160] FindNextFileW (in: hFindFile=0x381d00, lpFindFileData=0x31e29c | out: lpFindFileData=0x31e29c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x28d71a60, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28d71a60, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x7dfa026d, ftLastWriteTime.dwHighDateTime=0x1ca043e, nFileSizeHigh=0x0, nFileSizeLow=0x4cc, dwReserved0=0x0, dwReserved1=0x0, cFileName="Windows Explorer.lnk", cAlternateFileName="WINDOW~1.LNK")) returned 0 [0084.160] FindClose (in: hFindFile=0x381d00 | out: hFindFile=0x381d00) returned 1 [0084.160] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e524) returned 1 [0084.160] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e530) returned 1 [0084.160] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Start Menu\\Programs\\Accessories\\Command Prompt.lnk", nBufferLength=0x105, lpBuffer=0x31df3c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Start Menu\\Programs\\Accessories\\Command Prompt.lnk", lpFilePart=0x0) returned 0x72 [0084.160] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e430) returned 1 [0084.160] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Start Menu\\Programs\\Accessories\\Command Prompt.lnk" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\windows\\start menu\\programs\\accessories\\command prompt.lnk"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x264 [0084.161] GetFileType (hFile=0x264) returned 0x1 [0084.161] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e42c) returned 1 [0084.161] GetFileType (hFile=0x264) returned 0x1 [0084.161] GetFileSize (in: hFile=0x264, lpFileSizeHigh=0x31e538 | out: lpFileSizeHigh=0x31e538*=0x0) returned 0x500 [0084.161] ReadFile (in: hFile=0x264, lpBuffer=0x270348c, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x31e4e4, lpOverlapped=0x0 | out: lpBuffer=0x270348c*, lpNumberOfBytesRead=0x31e4e4*=0x500, lpOverlapped=0x0) returned 1 [0084.163] CloseHandle (hObject=0x264) returned 1 [0084.176] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Start Menu\\Programs\\Accessories\\Command Prompt.lnk", nBufferLength=0x105, lpBuffer=0x31df28, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Start Menu\\Programs\\Accessories\\Command Prompt.lnk", lpFilePart=0x0) returned 0x72 [0084.176] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e41c) returned 1 [0084.176] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Start Menu\\Programs\\Accessories\\Command Prompt.lnk" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\windows\\start menu\\programs\\accessories\\command prompt.lnk"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x264 [0084.177] GetFileType (hFile=0x264) returned 0x1 [0084.177] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e418) returned 1 [0084.177] GetFileType (hFile=0x264) returned 0x1 [0084.177] WriteFile (in: hFile=0x264, lpBuffer=0x2752d60*, nNumberOfBytesToWrite=0x510, lpNumberOfBytesWritten=0x31e4ac, lpOverlapped=0x0 | out: lpBuffer=0x2752d60*, lpNumberOfBytesWritten=0x31e4ac*=0x510, lpOverlapped=0x0) returned 1 [0084.178] CloseHandle (hObject=0x264) returned 1 [0084.178] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Start Menu\\Programs\\Accessories\\Command Prompt.lnk", nBufferLength=0x105, lpBuffer=0x31e05c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Start Menu\\Programs\\Accessories\\Command Prompt.lnk", lpFilePart=0x0) returned 0x72 [0084.178] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Start Menu\\Programs\\Accessories\\Command Prompt.lnk", nBufferLength=0x105, lpBuffer=0x31e05c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Start Menu\\Programs\\Accessories\\Command Prompt.lnk", lpFilePart=0x0) returned 0x72 [0084.178] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e4bc) returned 1 [0084.178] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Start Menu\\Programs\\Accessories\\Command Prompt.lnk" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\windows\\start menu\\programs\\accessories\\command prompt.lnk"), fInfoLevelId=0x0, lpFileInformation=0x31e538 | out: lpFileInformation=0x31e538*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x28d71a60, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28d71a60, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x159f1f20, ftLastWriteTime.dwHighDateTime=0x1d6eb7f, nFileSizeHigh=0x0, nFileSizeLow=0x510)) returned 1 [0084.179] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e4b8) returned 1 [0084.179] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Start Menu\\Programs\\Accessories\\Command Prompt.lnk" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\windows\\start menu\\programs\\accessories\\command prompt.lnk"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Start Menu\\Programs\\Accessories\\Command Prompt.lnk" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\windows\\start menu\\programs\\accessories\\command prompt.lnk")) returned 1 [0084.179] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Start Menu\\Programs\\Accessories\\Notepad.lnk", nBufferLength=0x105, lpBuffer=0x31df3c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Start Menu\\Programs\\Accessories\\Notepad.lnk", lpFilePart=0x0) returned 0x6b [0084.179] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e430) returned 1 [0084.179] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Start Menu\\Programs\\Accessories\\Notepad.lnk" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\windows\\start menu\\programs\\accessories\\notepad.lnk"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x264 [0084.193] GetFileType (hFile=0x264) returned 0x1 [0084.194] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e42c) returned 1 [0084.194] GetFileType (hFile=0x264) returned 0x1 [0084.194] GetFileSize (in: hFile=0x264, lpFileSizeHigh=0x31e538 | out: lpFileSizeHigh=0x31e538*=0x0) returned 0x518 [0084.194] ReadFile (in: hFile=0x264, lpBuffer=0x275460c, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x31e4e4, lpOverlapped=0x0 | out: lpBuffer=0x275460c*, lpNumberOfBytesRead=0x31e4e4*=0x518, lpOverlapped=0x0) returned 1 [0084.195] CloseHandle (hObject=0x264) returned 1 [0084.208] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Start Menu\\Programs\\Accessories\\Notepad.lnk", nBufferLength=0x105, lpBuffer=0x31df28, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Start Menu\\Programs\\Accessories\\Notepad.lnk", lpFilePart=0x0) returned 0x6b [0084.208] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e41c) returned 1 [0084.209] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Start Menu\\Programs\\Accessories\\Notepad.lnk" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\windows\\start menu\\programs\\accessories\\notepad.lnk"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x264 [0084.210] GetFileType (hFile=0x264) returned 0x1 [0084.210] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e418) returned 1 [0084.210] GetFileType (hFile=0x264) returned 0x1 [0084.210] WriteFile (in: hFile=0x264, lpBuffer=0x27a3f08*, nNumberOfBytesToWrite=0x520, lpNumberOfBytesWritten=0x31e4ac, lpOverlapped=0x0 | out: lpBuffer=0x27a3f08*, lpNumberOfBytesWritten=0x31e4ac*=0x520, lpOverlapped=0x0) returned 1 [0084.211] CloseHandle (hObject=0x264) returned 1 [0084.211] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Start Menu\\Programs\\Accessories\\Notepad.lnk", nBufferLength=0x105, lpBuffer=0x31e05c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Start Menu\\Programs\\Accessories\\Notepad.lnk", lpFilePart=0x0) returned 0x6b [0084.211] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Start Menu\\Programs\\Accessories\\Notepad.lnk", nBufferLength=0x105, lpBuffer=0x31e05c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Start Menu\\Programs\\Accessories\\Notepad.lnk", lpFilePart=0x0) returned 0x6b [0084.211] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e4bc) returned 1 [0084.211] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Start Menu\\Programs\\Accessories\\Notepad.lnk" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\windows\\start menu\\programs\\accessories\\notepad.lnk"), fInfoLevelId=0x0, lpFileInformation=0x31e538 | out: lpFileInformation=0x31e538*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x28d71a60, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28d71a60, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x15a3e1e0, ftLastWriteTime.dwHighDateTime=0x1d6eb7f, nFileSizeHigh=0x0, nFileSizeLow=0x520)) returned 1 [0084.211] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e4b8) returned 1 [0084.211] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Start Menu\\Programs\\Accessories\\Notepad.lnk" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\windows\\start menu\\programs\\accessories\\notepad.lnk"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Start Menu\\Programs\\Accessories\\Notepad.lnk" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\windows\\start menu\\programs\\accessories\\notepad.lnk")) returned 1 [0084.212] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Start Menu\\Programs\\Accessories\\Run.lnk", nBufferLength=0x105, lpBuffer=0x31df3c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Start Menu\\Programs\\Accessories\\Run.lnk", lpFilePart=0x0) returned 0x67 [0084.212] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e430) returned 1 [0084.212] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Start Menu\\Programs\\Accessories\\Run.lnk" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\windows\\start menu\\programs\\accessories\\run.lnk"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x264 [0084.212] GetFileType (hFile=0x264) returned 0x1 [0084.212] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e42c) returned 1 [0084.212] GetFileType (hFile=0x264) returned 0x1 [0084.212] GetFileSize (in: hFile=0x264, lpFileSizeHigh=0x31e538 | out: lpFileSizeHigh=0x31e538*=0x0) returned 0x106 [0084.212] ReadFile (in: hFile=0x264, lpBuffer=0x27a535c, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x31e4e4, lpOverlapped=0x0 | out: lpBuffer=0x27a535c*, lpNumberOfBytesRead=0x31e4e4*=0x106, lpOverlapped=0x0) returned 1 [0084.213] CloseHandle (hObject=0x264) returned 1 [0084.227] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Start Menu\\Programs\\Accessories\\Run.lnk", nBufferLength=0x105, lpBuffer=0x31df28, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Start Menu\\Programs\\Accessories\\Run.lnk", lpFilePart=0x0) returned 0x67 [0084.227] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e41c) returned 1 [0084.227] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Start Menu\\Programs\\Accessories\\Run.lnk" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\windows\\start menu\\programs\\accessories\\run.lnk"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x264 [0084.228] GetFileType (hFile=0x264) returned 0x1 [0084.228] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e418) returned 1 [0084.228] GetFileType (hFile=0x264) returned 0x1 [0084.228] WriteFile (in: hFile=0x264, lpBuffer=0x27f37fc*, nNumberOfBytesToWrite=0x110, lpNumberOfBytesWritten=0x31e4ac, lpOverlapped=0x0 | out: lpBuffer=0x27f37fc*, lpNumberOfBytesWritten=0x31e4ac*=0x110, lpOverlapped=0x0) returned 1 [0084.229] CloseHandle (hObject=0x264) returned 1 [0084.229] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Start Menu\\Programs\\Accessories\\Run.lnk", nBufferLength=0x105, lpBuffer=0x31e05c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Start Menu\\Programs\\Accessories\\Run.lnk", lpFilePart=0x0) returned 0x67 [0084.229] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Start Menu\\Programs\\Accessories\\Run.lnk", nBufferLength=0x105, lpBuffer=0x31e05c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Start Menu\\Programs\\Accessories\\Run.lnk", lpFilePart=0x0) returned 0x67 [0084.229] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e4bc) returned 1 [0084.229] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Start Menu\\Programs\\Accessories\\Run.lnk" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\windows\\start menu\\programs\\accessories\\run.lnk"), fInfoLevelId=0x0, lpFileInformation=0x31e538 | out: lpFileInformation=0x31e538*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x28d71a60, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28d71a60, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x15a64340, ftLastWriteTime.dwHighDateTime=0x1d6eb7f, nFileSizeHigh=0x0, nFileSizeLow=0x110)) returned 1 [0084.229] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e4b8) returned 1 [0084.229] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Start Menu\\Programs\\Accessories\\Run.lnk" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\windows\\start menu\\programs\\accessories\\run.lnk"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Start Menu\\Programs\\Accessories\\Run.lnk" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\windows\\start menu\\programs\\accessories\\run.lnk")) returned 1 [0084.230] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Start Menu\\Programs\\Accessories\\Windows Explorer.lnk", nBufferLength=0x105, lpBuffer=0x31df3c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Start Menu\\Programs\\Accessories\\Windows Explorer.lnk", lpFilePart=0x0) returned 0x74 [0084.230] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e430) returned 1 [0084.230] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Start Menu\\Programs\\Accessories\\Windows Explorer.lnk" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\windows\\start menu\\programs\\accessories\\windows explorer.lnk"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x264 [0084.231] GetFileType (hFile=0x264) returned 0x1 [0084.231] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e42c) returned 1 [0084.231] GetFileType (hFile=0x264) returned 0x1 [0084.231] GetFileSize (in: hFile=0x264, lpFileSizeHigh=0x31e538 | out: lpFileSizeHigh=0x31e538*=0x0) returned 0x4cc [0084.231] ReadFile (in: hFile=0x264, lpBuffer=0x27f503c, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x31e4e4, lpOverlapped=0x0 | out: lpBuffer=0x27f503c*, lpNumberOfBytesRead=0x31e4e4*=0x4cc, lpOverlapped=0x0) returned 1 [0084.233] CloseHandle (hObject=0x264) returned 1 [0084.246] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Start Menu\\Programs\\Accessories\\Windows Explorer.lnk", nBufferLength=0x105, lpBuffer=0x31df28, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Start Menu\\Programs\\Accessories\\Windows Explorer.lnk", lpFilePart=0x0) returned 0x74 [0084.246] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e41c) returned 1 [0084.246] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Start Menu\\Programs\\Accessories\\Windows Explorer.lnk" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\windows\\start menu\\programs\\accessories\\windows explorer.lnk"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x264 [0084.247] GetFileType (hFile=0x264) returned 0x1 [0084.247] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e418) returned 1 [0084.247] GetFileType (hFile=0x264) returned 0x1 [0084.247] WriteFile (in: hFile=0x264, lpBuffer=0x28447cc*, nNumberOfBytesToWrite=0x4d0, lpNumberOfBytesWritten=0x31e4ac, lpOverlapped=0x0 | out: lpBuffer=0x28447cc*, lpNumberOfBytesWritten=0x31e4ac*=0x4d0, lpOverlapped=0x0) returned 1 [0084.248] CloseHandle (hObject=0x264) returned 1 [0084.248] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Start Menu\\Programs\\Accessories\\Windows Explorer.lnk", nBufferLength=0x105, lpBuffer=0x31e05c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Start Menu\\Programs\\Accessories\\Windows Explorer.lnk", lpFilePart=0x0) returned 0x74 [0084.248] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Start Menu\\Programs\\Accessories\\Windows Explorer.lnk", nBufferLength=0x105, lpBuffer=0x31e05c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Start Menu\\Programs\\Accessories\\Windows Explorer.lnk", lpFilePart=0x0) returned 0x74 [0084.248] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e4bc) returned 1 [0084.248] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Start Menu\\Programs\\Accessories\\Windows Explorer.lnk" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\windows\\start menu\\programs\\accessories\\windows explorer.lnk"), fInfoLevelId=0x0, lpFileInformation=0x31e538 | out: lpFileInformation=0x31e538*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x28d71a60, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28d71a60, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x15a8a4a0, ftLastWriteTime.dwHighDateTime=0x1d6eb7f, nFileSizeHigh=0x0, nFileSizeLow=0x4d0)) returned 1 [0084.248] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e4b8) returned 1 [0084.248] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Start Menu\\Programs\\Accessories\\Windows Explorer.lnk" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\windows\\start menu\\programs\\accessories\\windows explorer.lnk"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Start Menu\\Programs\\Accessories\\Windows Explorer.lnk" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\windows\\start menu\\programs\\accessories\\windows explorer.lnk")) returned 1 [0084.249] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e4ec) returned 1 [0084.249] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Start Menu\\Programs\\Accessories\\Accessibility", nBufferLength=0x105, lpBuffer=0x31dff4, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Start Menu\\Programs\\Accessories\\Accessibility", lpFilePart=0x0) returned 0x6d [0084.249] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Start Menu\\Programs\\Accessories\\Accessibility\\", nBufferLength=0x105, lpBuffer=0x31dfc8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Start Menu\\Programs\\Accessories\\Accessibility\\", lpFilePart=0x0) returned 0x6e [0084.249] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Start Menu\\Programs\\Accessories\\Accessibility\\*", lpFindFileData=0x31e214 | out: lpFindFileData=0x31e214*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x28cff640, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28dbdd20, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x1b75a077, ftLastWriteTime.dwHighDateTime=0x1ca043f, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x381e40 [0084.249] FindNextFileW (in: hFindFile=0x381e40, lpFindFileData=0x31e224 | out: lpFindFileData=0x31e224*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x28cff640, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28dbdd20, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x1b75a077, ftLastWriteTime.dwHighDateTime=0x1ca043f, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0084.249] FindNextFileW (in: hFindFile=0x381e40, lpFindFileData=0x31e224 | out: lpFindFileData=0x31e224*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0x28d97bc0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28d97bc0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x1b75a077, ftLastWriteTime.dwHighDateTime=0x1ca043f, nFileSizeHigh=0x0, nFileSizeLow=0x2c0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Desktop.ini", cAlternateFileName="")) returned 1 [0084.249] FindNextFileW (in: hFindFile=0x381e40, lpFindFileData=0x31e224 | out: lpFindFileData=0x31e224*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x28d71a60, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28d71a60, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x1ab4d101, ftLastWriteTime.dwHighDateTime=0x1ca043f, nFileSizeHigh=0x0, nFileSizeLow=0x54e, dwReserved0=0x0, dwReserved1=0x0, cFileName="Ease of Access.lnk", cAlternateFileName="EASEOF~1.LNK")) returned 1 [0084.250] FindNextFileW (in: hFindFile=0x381e40, lpFindFileData=0x31e224 | out: lpFindFileData=0x31e224*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x28d71a60, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28d71a60, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x1a98407e, ftLastWriteTime.dwHighDateTime=0x1ca043f, nFileSizeHigh=0x0, nFileSizeLow=0x4ea, dwReserved0=0x0, dwReserved1=0x0, cFileName="Magnify.lnk", cAlternateFileName="")) returned 1 [0084.250] FindNextFileW (in: hFindFile=0x381e40, lpFindFileData=0x31e224 | out: lpFindFileData=0x31e224*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x28d71a60, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28d71a60, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x1b733f17, ftLastWriteTime.dwHighDateTime=0x1ca043f, nFileSizeHigh=0x0, nFileSizeLow=0x4ee, dwReserved0=0x0, dwReserved1=0x0, cFileName="Narrator.lnk", cAlternateFileName="")) returned 1 [0084.250] FindNextFileW (in: hFindFile=0x381e40, lpFindFileData=0x31e224 | out: lpFindFileData=0x31e224*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x28d71a60, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28d71a60, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x1aa4275f, ftLastWriteTime.dwHighDateTime=0x1ca043f, nFileSizeHigh=0x0, nFileSizeLow=0x4e2, dwReserved0=0x0, dwReserved1=0x0, cFileName="On-Screen Keyboard.lnk", cAlternateFileName="ON-SCR~1.LNK")) returned 1 [0084.250] FindNextFileW (in: hFindFile=0x381e40, lpFindFileData=0x31e224 | out: lpFindFileData=0x31e224*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0084.250] FindClose (in: hFindFile=0x381e40 | out: hFindFile=0x381e40) returned 1 [0084.250] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e4ac) returned 1 [0084.250] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e4b8) returned 1 [0084.250] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e4ec) returned 1 [0084.250] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Start Menu\\Programs\\Accessories\\Accessibility", nBufferLength=0x105, lpBuffer=0x31dff4, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Start Menu\\Programs\\Accessories\\Accessibility", lpFilePart=0x0) returned 0x6d [0084.250] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Start Menu\\Programs\\Accessories\\Accessibility\\", nBufferLength=0x105, lpBuffer=0x31dfc8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Start Menu\\Programs\\Accessories\\Accessibility\\", lpFilePart=0x0) returned 0x6e [0084.250] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Start Menu\\Programs\\Accessories\\Accessibility\\*", lpFindFileData=0x31e214 | out: lpFindFileData=0x31e214*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x28cff640, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28dbdd20, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x1b75a077, ftLastWriteTime.dwHighDateTime=0x1ca043f, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x381e40 [0084.251] FindNextFileW (in: hFindFile=0x381e40, lpFindFileData=0x31e224 | out: lpFindFileData=0x31e224*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x28cff640, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28dbdd20, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x1b75a077, ftLastWriteTime.dwHighDateTime=0x1ca043f, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0084.251] FindNextFileW (in: hFindFile=0x381e40, lpFindFileData=0x31e224 | out: lpFindFileData=0x31e224*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0x28d97bc0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28d97bc0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x1b75a077, ftLastWriteTime.dwHighDateTime=0x1ca043f, nFileSizeHigh=0x0, nFileSizeLow=0x2c0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Desktop.ini", cAlternateFileName="")) returned 1 [0084.251] FindNextFileW (in: hFindFile=0x381e40, lpFindFileData=0x31e224 | out: lpFindFileData=0x31e224*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x28d71a60, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28d71a60, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x1ab4d101, ftLastWriteTime.dwHighDateTime=0x1ca043f, nFileSizeHigh=0x0, nFileSizeLow=0x54e, dwReserved0=0x0, dwReserved1=0x0, cFileName="Ease of Access.lnk", cAlternateFileName="EASEOF~1.LNK")) returned 1 [0084.251] FindNextFileW (in: hFindFile=0x381e40, lpFindFileData=0x31e224 | out: lpFindFileData=0x31e224*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x28d71a60, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28d71a60, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x1a98407e, ftLastWriteTime.dwHighDateTime=0x1ca043f, nFileSizeHigh=0x0, nFileSizeLow=0x4ea, dwReserved0=0x0, dwReserved1=0x0, cFileName="Magnify.lnk", cAlternateFileName="")) returned 1 [0084.251] FindNextFileW (in: hFindFile=0x381e40, lpFindFileData=0x31e224 | out: lpFindFileData=0x31e224*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x28d71a60, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28d71a60, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x1b733f17, ftLastWriteTime.dwHighDateTime=0x1ca043f, nFileSizeHigh=0x0, nFileSizeLow=0x4ee, dwReserved0=0x0, dwReserved1=0x0, cFileName="Narrator.lnk", cAlternateFileName="")) returned 1 [0084.251] FindNextFileW (in: hFindFile=0x381e40, lpFindFileData=0x31e224 | out: lpFindFileData=0x31e224*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x28d71a60, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28d71a60, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x1aa4275f, ftLastWriteTime.dwHighDateTime=0x1ca043f, nFileSizeHigh=0x0, nFileSizeLow=0x4e2, dwReserved0=0x0, dwReserved1=0x0, cFileName="On-Screen Keyboard.lnk", cAlternateFileName="ON-SCR~1.LNK")) returned 1 [0084.251] FindNextFileW (in: hFindFile=0x381e40, lpFindFileData=0x31e224 | out: lpFindFileData=0x31e224*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x28d71a60, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28d71a60, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x1aa4275f, ftLastWriteTime.dwHighDateTime=0x1ca043f, nFileSizeHigh=0x0, nFileSizeLow=0x4e2, dwReserved0=0x0, dwReserved1=0x0, cFileName="On-Screen Keyboard.lnk", cAlternateFileName="ON-SCR~1.LNK")) returned 0 [0084.252] FindClose (in: hFindFile=0x381e40 | out: hFindFile=0x381e40) returned 1 [0084.252] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e4ac) returned 1 [0084.252] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e4b8) returned 1 [0084.252] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Start Menu\\Programs\\Accessories\\Accessibility\\Ease of Access.lnk", nBufferLength=0x105, lpBuffer=0x31dec4, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Start Menu\\Programs\\Accessories\\Accessibility\\Ease of Access.lnk", lpFilePart=0x0) returned 0x80 [0084.252] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e3b8) returned 1 [0084.252] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Start Menu\\Programs\\Accessories\\Accessibility\\Ease of Access.lnk" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\windows\\start menu\\programs\\accessories\\accessibility\\ease of access.lnk"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x264 [0084.252] GetFileType (hFile=0x264) returned 0x1 [0084.252] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e3b4) returned 1 [0084.252] GetFileType (hFile=0x264) returned 0x1 [0084.252] GetFileSize (in: hFile=0x264, lpFileSizeHigh=0x31e4c0 | out: lpFileSizeHigh=0x31e4c0*=0x0) returned 0x54e [0084.252] ReadFile (in: hFile=0x264, lpBuffer=0x2849858, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x31e46c, lpOverlapped=0x0 | out: lpBuffer=0x2849858*, lpNumberOfBytesRead=0x31e46c*=0x54e, lpOverlapped=0x0) returned 1 [0084.254] CloseHandle (hObject=0x264) returned 1 [0084.315] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Start Menu\\Programs\\Accessories\\Accessibility\\Ease of Access.lnk", nBufferLength=0x105, lpBuffer=0x31deb0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Start Menu\\Programs\\Accessories\\Accessibility\\Ease of Access.lnk", lpFilePart=0x0) returned 0x80 [0084.315] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e3a4) returned 1 [0084.315] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Start Menu\\Programs\\Accessories\\Accessibility\\Ease of Access.lnk" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\windows\\start menu\\programs\\accessories\\accessibility\\ease of access.lnk"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x264 [0084.316] GetFileType (hFile=0x264) returned 0x1 [0084.316] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e3a0) returned 1 [0084.316] GetFileType (hFile=0x264) returned 0x1 [0084.319] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Start Menu\\Programs\\Accessories\\Accessibility\\Ease of Access.lnk", nBufferLength=0x105, lpBuffer=0x31dfe4, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Start Menu\\Programs\\Accessories\\Accessibility\\Ease of Access.lnk", lpFilePart=0x0) returned 0x80 [0084.319] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Start Menu\\Programs\\Accessories\\Accessibility\\Ease of Access.lnk", nBufferLength=0x105, lpBuffer=0x31dfe4, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Start Menu\\Programs\\Accessories\\Accessibility\\Ease of Access.lnk", lpFilePart=0x0) returned 0x80 [0084.319] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e444) returned 1 [0084.319] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Start Menu\\Programs\\Accessories\\Accessibility\\Ease of Access.lnk" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\windows\\start menu\\programs\\accessories\\accessibility\\ease of access.lnk"), fInfoLevelId=0x0, lpFileInformation=0x31e4c0 | out: lpFileInformation=0x31e4c0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x28d71a60, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28d71a60, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x15b48b80, ftLastWriteTime.dwHighDateTime=0x1d6eb7f, nFileSizeHigh=0x0, nFileSizeLow=0x550)) returned 1 [0084.319] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e440) returned 1 [0084.319] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Start Menu\\Programs\\Accessories\\Accessibility\\Ease of Access.lnk" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\windows\\start menu\\programs\\accessories\\accessibility\\ease of access.lnk"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Start Menu\\Programs\\Accessories\\Accessibility\\Ease of Access.lnk" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\windows\\start menu\\programs\\accessories\\accessibility\\ease of access.lnk")) returned 1 [0084.320] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Start Menu\\Programs\\Accessories\\Accessibility\\Magnify.lnk", nBufferLength=0x105, lpBuffer=0x31dec4, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Start Menu\\Programs\\Accessories\\Accessibility\\Magnify.lnk", lpFilePart=0x0) returned 0x79 [0084.320] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e3b8) returned 1 [0084.320] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Start Menu\\Programs\\Accessories\\Accessibility\\Magnify.lnk" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\windows\\start menu\\programs\\accessories\\accessibility\\magnify.lnk"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x264 [0084.320] GetFileType (hFile=0x264) returned 0x1 [0084.320] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e3b4) returned 1 [0084.320] GetFileType (hFile=0x264) returned 0x1 [0084.321] GetFileSize (in: hFile=0x264, lpFileSizeHigh=0x31e4c0 | out: lpFileSizeHigh=0x31e4c0*=0x0) returned 0x4ea [0084.321] ReadFile (in: hFile=0x264, lpBuffer=0x269bcbc, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x31e46c, lpOverlapped=0x0 | out: lpBuffer=0x269bcbc*, lpNumberOfBytesRead=0x31e46c*=0x4ea, lpOverlapped=0x0) returned 1 [0084.335] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Start Menu\\Programs\\Accessories\\Accessibility\\Magnify.lnk", nBufferLength=0x105, lpBuffer=0x31deb0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Start Menu\\Programs\\Accessories\\Accessibility\\Magnify.lnk", lpFilePart=0x0) returned 0x79 [0084.335] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e3a4) returned 1 [0084.335] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Start Menu\\Programs\\Accessories\\Accessibility\\Magnify.lnk" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\windows\\start menu\\programs\\accessories\\accessibility\\magnify.lnk"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x264 [0084.336] GetFileType (hFile=0x264) returned 0x1 [0084.336] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e3a0) returned 1 [0084.336] GetFileType (hFile=0x264) returned 0x1 [0084.336] WriteFile (in: hFile=0x264, lpBuffer=0x26eb640*, nNumberOfBytesToWrite=0x4f0, lpNumberOfBytesWritten=0x31e434, lpOverlapped=0x0 | out: lpBuffer=0x26eb640*, lpNumberOfBytesWritten=0x31e434*=0x4f0, lpOverlapped=0x0) returned 1 [0084.337] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Start Menu\\Programs\\Accessories\\Accessibility\\Magnify.lnk", nBufferLength=0x105, lpBuffer=0x31dfe4, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Start Menu\\Programs\\Accessories\\Accessibility\\Magnify.lnk", lpFilePart=0x0) returned 0x79 [0084.337] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Start Menu\\Programs\\Accessories\\Accessibility\\Magnify.lnk", nBufferLength=0x105, lpBuffer=0x31dfe4, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Start Menu\\Programs\\Accessories\\Accessibility\\Magnify.lnk", lpFilePart=0x0) returned 0x79 [0084.337] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e444) returned 1 [0084.337] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Start Menu\\Programs\\Accessories\\Accessibility\\Magnify.lnk" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\windows\\start menu\\programs\\accessories\\accessibility\\magnify.lnk"), fInfoLevelId=0x0, lpFileInformation=0x31e4c0 | out: lpFileInformation=0x31e4c0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x28d71a60, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28d71a60, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x15b6ece0, ftLastWriteTime.dwHighDateTime=0x1d6eb7f, nFileSizeHigh=0x0, nFileSizeLow=0x4f0)) returned 1 [0084.338] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e440) returned 1 [0084.338] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Start Menu\\Programs\\Accessories\\Accessibility\\Magnify.lnk" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\windows\\start menu\\programs\\accessories\\accessibility\\magnify.lnk"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Start Menu\\Programs\\Accessories\\Accessibility\\Magnify.lnk" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\windows\\start menu\\programs\\accessories\\accessibility\\magnify.lnk")) returned 1 [0084.338] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Start Menu\\Programs\\Accessories\\Accessibility\\Narrator.lnk", nBufferLength=0x105, lpBuffer=0x31dec4, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Start Menu\\Programs\\Accessories\\Accessibility\\Narrator.lnk", lpFilePart=0x0) returned 0x7a [0084.338] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e3b8) returned 1 [0084.338] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Start Menu\\Programs\\Accessories\\Accessibility\\Narrator.lnk" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\windows\\start menu\\programs\\accessories\\accessibility\\narrator.lnk"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x264 [0084.339] GetFileType (hFile=0x264) returned 0x1 [0084.339] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e3b4) returned 1 [0084.339] GetFileType (hFile=0x264) returned 0x1 [0084.339] GetFileSize (in: hFile=0x264, lpFileSizeHigh=0x31e4c0 | out: lpFileSizeHigh=0x31e4c0*=0x0) returned 0x4ee [0084.339] ReadFile (in: hFile=0x264, lpBuffer=0x26ecee8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x31e46c, lpOverlapped=0x0 | out: lpBuffer=0x26ecee8*, lpNumberOfBytesRead=0x31e46c*=0x4ee, lpOverlapped=0x0) returned 1 [0084.354] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Start Menu\\Programs\\Accessories\\Accessibility\\Narrator.lnk", nBufferLength=0x105, lpBuffer=0x31deb0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Start Menu\\Programs\\Accessories\\Accessibility\\Narrator.lnk", lpFilePart=0x0) returned 0x7a [0084.354] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e3a4) returned 1 [0084.354] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Start Menu\\Programs\\Accessories\\Accessibility\\Narrator.lnk" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\windows\\start menu\\programs\\accessories\\accessibility\\narrator.lnk"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x264 [0084.355] GetFileType (hFile=0x264) returned 0x1 [0084.355] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e3a0) returned 1 [0084.355] GetFileType (hFile=0x264) returned 0x1 [0084.355] WriteFile (in: hFile=0x264, lpBuffer=0x273c714*, nNumberOfBytesToWrite=0x4f0, lpNumberOfBytesWritten=0x31e434, lpOverlapped=0x0 | out: lpBuffer=0x273c714*, lpNumberOfBytesWritten=0x31e434*=0x4f0, lpOverlapped=0x0) returned 1 [0084.356] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Start Menu\\Programs\\Accessories\\Accessibility\\Narrator.lnk", nBufferLength=0x105, lpBuffer=0x31dfe4, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Start Menu\\Programs\\Accessories\\Accessibility\\Narrator.lnk", lpFilePart=0x0) returned 0x7a [0084.356] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Start Menu\\Programs\\Accessories\\Accessibility\\Narrator.lnk", nBufferLength=0x105, lpBuffer=0x31dfe4, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Start Menu\\Programs\\Accessories\\Accessibility\\Narrator.lnk", lpFilePart=0x0) returned 0x7a [0084.356] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e444) returned 1 [0084.356] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Start Menu\\Programs\\Accessories\\Accessibility\\Narrator.lnk" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\windows\\start menu\\programs\\accessories\\accessibility\\narrator.lnk"), fInfoLevelId=0x0, lpFileInformation=0x31e4c0 | out: lpFileInformation=0x31e4c0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x28d71a60, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28d71a60, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x15b94e40, ftLastWriteTime.dwHighDateTime=0x1d6eb7f, nFileSizeHigh=0x0, nFileSizeLow=0x4f0)) returned 1 [0084.356] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e440) returned 1 [0084.356] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Start Menu\\Programs\\Accessories\\Accessibility\\Narrator.lnk" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\windows\\start menu\\programs\\accessories\\accessibility\\narrator.lnk"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Start Menu\\Programs\\Accessories\\Accessibility\\Narrator.lnk" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\windows\\start menu\\programs\\accessories\\accessibility\\narrator.lnk")) returned 1 [0084.357] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Start Menu\\Programs\\Accessories\\Accessibility\\On-Screen Keyboard.lnk", nBufferLength=0x105, lpBuffer=0x31dec4, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Start Menu\\Programs\\Accessories\\Accessibility\\On-Screen Keyboard.lnk", lpFilePart=0x0) returned 0x84 [0084.357] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e3b8) returned 1 [0084.357] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Start Menu\\Programs\\Accessories\\Accessibility\\On-Screen Keyboard.lnk" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\windows\\start menu\\programs\\accessories\\accessibility\\on-screen keyboard.lnk"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x264 [0084.358] GetFileType (hFile=0x264) returned 0x1 [0084.358] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e3b4) returned 1 [0084.358] GetFileType (hFile=0x264) returned 0x1 [0084.358] GetFileSize (in: hFile=0x264, lpFileSizeHigh=0x31e4c0 | out: lpFileSizeHigh=0x31e4c0*=0x0) returned 0x4e2 [0084.358] ReadFile (in: hFile=0x264, lpBuffer=0x273dfe0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x31e46c, lpOverlapped=0x0 | out: lpBuffer=0x273dfe0*, lpNumberOfBytesRead=0x31e46c*=0x4e2, lpOverlapped=0x0) returned 1 [0084.374] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Start Menu\\Programs\\Accessories\\Accessibility\\On-Screen Keyboard.lnk", nBufferLength=0x105, lpBuffer=0x31deb0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Start Menu\\Programs\\Accessories\\Accessibility\\On-Screen Keyboard.lnk", lpFilePart=0x0) returned 0x84 [0084.374] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e3a4) returned 1 [0084.374] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Start Menu\\Programs\\Accessories\\Accessibility\\On-Screen Keyboard.lnk" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\windows\\start menu\\programs\\accessories\\accessibility\\on-screen keyboard.lnk"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x264 [0084.375] GetFileType (hFile=0x264) returned 0x1 [0084.375] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e3a0) returned 1 [0084.375] GetFileType (hFile=0x264) returned 0x1 [0084.375] WriteFile (in: hFile=0x264, lpBuffer=0x278d840*, nNumberOfBytesToWrite=0x4f0, lpNumberOfBytesWritten=0x31e434, lpOverlapped=0x0 | out: lpBuffer=0x278d840*, lpNumberOfBytesWritten=0x31e434*=0x4f0, lpOverlapped=0x0) returned 1 [0084.376] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Start Menu\\Programs\\Accessories\\Accessibility\\On-Screen Keyboard.lnk", nBufferLength=0x105, lpBuffer=0x31dfe4, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Start Menu\\Programs\\Accessories\\Accessibility\\On-Screen Keyboard.lnk", lpFilePart=0x0) returned 0x84 [0084.376] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Start Menu\\Programs\\Accessories\\Accessibility\\On-Screen Keyboard.lnk", nBufferLength=0x105, lpBuffer=0x31dfe4, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Start Menu\\Programs\\Accessories\\Accessibility\\On-Screen Keyboard.lnk", lpFilePart=0x0) returned 0x84 [0084.376] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e444) returned 1 [0084.376] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Start Menu\\Programs\\Accessories\\Accessibility\\On-Screen Keyboard.lnk" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\windows\\start menu\\programs\\accessories\\accessibility\\on-screen keyboard.lnk"), fInfoLevelId=0x0, lpFileInformation=0x31e4c0 | out: lpFileInformation=0x31e4c0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x28d71a60, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28d71a60, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x15bbafa0, ftLastWriteTime.dwHighDateTime=0x1d6eb7f, nFileSizeHigh=0x0, nFileSizeLow=0x4f0)) returned 1 [0084.376] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e440) returned 1 [0084.376] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Start Menu\\Programs\\Accessories\\Accessibility\\On-Screen Keyboard.lnk" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\windows\\start menu\\programs\\accessories\\accessibility\\on-screen keyboard.lnk"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Start Menu\\Programs\\Accessories\\Accessibility\\On-Screen Keyboard.lnk" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\windows\\start menu\\programs\\accessories\\accessibility\\on-screen keyboard.lnk")) returned 1 [0084.377] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e4ec) returned 1 [0084.377] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Start Menu\\Programs\\Accessories\\System Tools", nBufferLength=0x105, lpBuffer=0x31dff4, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Start Menu\\Programs\\Accessories\\System Tools", lpFilePart=0x0) returned 0x6c [0084.377] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Start Menu\\Programs\\Accessories\\System Tools\\", nBufferLength=0x105, lpBuffer=0x31dfc8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Start Menu\\Programs\\Accessories\\System Tools\\", lpFilePart=0x0) returned 0x6d [0084.377] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Start Menu\\Programs\\Accessories\\System Tools\\*", lpFindFileData=0x31e214 | out: lpFindFileData=0x31e214*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x28cff640, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28d71a60, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x2d7ae880, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x381e80 [0084.377] FindNextFileW (in: hFindFile=0x381e80, lpFindFileData=0x31e224 | out: lpFindFileData=0x31e224*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x28cff640, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28d71a60, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x2d7ae880, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0084.377] FindNextFileW (in: hFindFile=0x381e80, lpFindFileData=0x31e224 | out: lpFindFileData=0x31e224*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x28d71a60, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28d71a60, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x7e0d0d6f, ftLastWriteTime.dwHighDateTime=0x1ca043e, nFileSizeHigh=0x0, nFileSizeLow=0x106, dwReserved0=0x0, dwReserved1=0x0, cFileName="computer.lnk", cAlternateFileName="")) returned 1 [0084.377] FindNextFileW (in: hFindFile=0x381e80, lpFindFileData=0x31e224 | out: lpFindFileData=0x31e224*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x28d71a60, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28d71a60, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x7e084aaf, ftLastWriteTime.dwHighDateTime=0x1ca043e, nFileSizeHigh=0x0, nFileSizeLow=0x106, dwReserved0=0x0, dwReserved1=0x0, cFileName="Control Panel.lnk", cAlternateFileName="CONTRO~1.LNK")) returned 1 [0084.377] FindNextFileW (in: hFindFile=0x381e80, lpFindFileData=0x31e224 | out: lpFindFileData=0x31e224*(dwFileAttributes=0x6, ftCreationTime.dwLowDateTime=0x28d71a60, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28d71a60, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x2d7ae880, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x2e2, dwReserved0=0x0, dwReserved1=0x0, cFileName="Desktop.ini", cAlternateFileName="")) returned 1 [0084.377] FindNextFileW (in: hFindFile=0x381e80, lpFindFileData=0x31e224 | out: lpFindFileData=0x31e224*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x28d71a60, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28d71a60, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x2d7ae880, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x5df, dwReserved0=0x0, dwReserved1=0x0, cFileName="Internet Explorer (No Add-ons).lnk", cAlternateFileName="INTERN~1.LNK")) returned 1 [0084.378] FindNextFileW (in: hFindFile=0x381e80, lpFindFileData=0x31e224 | out: lpFindFileData=0x31e224*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x28d71a60, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28d71a60, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x3d424a7b, ftLastWriteTime.dwHighDateTime=0x1ca043f, nFileSizeHigh=0x0, nFileSizeLow=0x51a, dwReserved0=0x0, dwReserved1=0x0, cFileName="Private Character Editor.lnk", cAlternateFileName="PRIVAT~1.LNK")) returned 1 [0084.378] FindNextFileW (in: hFindFile=0x381e80, lpFindFileData=0x31e224 | out: lpFindFileData=0x31e224*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0084.378] FindClose (in: hFindFile=0x381e80 | out: hFindFile=0x381e80) returned 1 [0084.378] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e4ac) returned 1 [0084.378] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e4b8) returned 1 [0084.378] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e4ec) returned 1 [0084.378] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Start Menu\\Programs\\Accessories\\System Tools", nBufferLength=0x105, lpBuffer=0x31dff4, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Start Menu\\Programs\\Accessories\\System Tools", lpFilePart=0x0) returned 0x6c [0084.378] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Start Menu\\Programs\\Accessories\\System Tools\\", nBufferLength=0x105, lpBuffer=0x31dfc8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Start Menu\\Programs\\Accessories\\System Tools\\", lpFilePart=0x0) returned 0x6d [0084.378] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Start Menu\\Programs\\Accessories\\System Tools\\*", lpFindFileData=0x31e214 | out: lpFindFileData=0x31e214*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x28cff640, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28d71a60, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x2d7ae880, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x381e80 [0084.378] FindNextFileW (in: hFindFile=0x381e80, lpFindFileData=0x31e224 | out: lpFindFileData=0x31e224*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x28cff640, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28d71a60, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x2d7ae880, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0084.378] FindNextFileW (in: hFindFile=0x381e80, lpFindFileData=0x31e224 | out: lpFindFileData=0x31e224*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x28d71a60, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28d71a60, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x7e0d0d6f, ftLastWriteTime.dwHighDateTime=0x1ca043e, nFileSizeHigh=0x0, nFileSizeLow=0x106, dwReserved0=0x0, dwReserved1=0x0, cFileName="computer.lnk", cAlternateFileName="")) returned 1 [0084.379] FindNextFileW (in: hFindFile=0x381e80, lpFindFileData=0x31e224 | out: lpFindFileData=0x31e224*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x28d71a60, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28d71a60, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x7e084aaf, ftLastWriteTime.dwHighDateTime=0x1ca043e, nFileSizeHigh=0x0, nFileSizeLow=0x106, dwReserved0=0x0, dwReserved1=0x0, cFileName="Control Panel.lnk", cAlternateFileName="CONTRO~1.LNK")) returned 1 [0084.379] FindNextFileW (in: hFindFile=0x381e80, lpFindFileData=0x31e224 | out: lpFindFileData=0x31e224*(dwFileAttributes=0x6, ftCreationTime.dwLowDateTime=0x28d71a60, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28d71a60, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x2d7ae880, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x2e2, dwReserved0=0x0, dwReserved1=0x0, cFileName="Desktop.ini", cAlternateFileName="")) returned 1 [0084.379] FindNextFileW (in: hFindFile=0x381e80, lpFindFileData=0x31e224 | out: lpFindFileData=0x31e224*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x28d71a60, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28d71a60, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x2d7ae880, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x5df, dwReserved0=0x0, dwReserved1=0x0, cFileName="Internet Explorer (No Add-ons).lnk", cAlternateFileName="INTERN~1.LNK")) returned 1 [0084.379] FindNextFileW (in: hFindFile=0x381e80, lpFindFileData=0x31e224 | out: lpFindFileData=0x31e224*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x28d71a60, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28d71a60, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x3d424a7b, ftLastWriteTime.dwHighDateTime=0x1ca043f, nFileSizeHigh=0x0, nFileSizeLow=0x51a, dwReserved0=0x0, dwReserved1=0x0, cFileName="Private Character Editor.lnk", cAlternateFileName="PRIVAT~1.LNK")) returned 1 [0084.379] FindNextFileW (in: hFindFile=0x381e80, lpFindFileData=0x31e224 | out: lpFindFileData=0x31e224*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x28d71a60, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28d71a60, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x3d424a7b, ftLastWriteTime.dwHighDateTime=0x1ca043f, nFileSizeHigh=0x0, nFileSizeLow=0x51a, dwReserved0=0x0, dwReserved1=0x0, cFileName="Private Character Editor.lnk", cAlternateFileName="PRIVAT~1.LNK")) returned 0 [0084.379] FindClose (in: hFindFile=0x381e80 | out: hFindFile=0x381e80) returned 1 [0084.379] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e4ac) returned 1 [0084.379] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e4b8) returned 1 [0084.379] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Start Menu\\Programs\\Accessories\\System Tools\\computer.lnk", nBufferLength=0x105, lpBuffer=0x31dec4, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Start Menu\\Programs\\Accessories\\System Tools\\computer.lnk", lpFilePart=0x0) returned 0x79 [0084.379] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e3b8) returned 1 [0084.379] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Start Menu\\Programs\\Accessories\\System Tools\\computer.lnk" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\windows\\start menu\\programs\\accessories\\system tools\\computer.lnk"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x264 [0084.380] GetFileType (hFile=0x264) returned 0x1 [0084.380] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e3b4) returned 1 [0084.380] GetFileType (hFile=0x264) returned 0x1 [0084.380] GetFileSize (in: hFile=0x264, lpFileSizeHigh=0x31e4c0 | out: lpFileSizeHigh=0x31e4c0*=0x0) returned 0x106 [0084.380] ReadFile (in: hFile=0x264, lpBuffer=0x27925ec, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x31e46c, lpOverlapped=0x0 | out: lpBuffer=0x27925ec*, lpNumberOfBytesRead=0x31e46c*=0x106, lpOverlapped=0x0) returned 1 [0084.394] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Start Menu\\Programs\\Accessories\\System Tools\\computer.lnk", nBufferLength=0x105, lpBuffer=0x31deb0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Start Menu\\Programs\\Accessories\\System Tools\\computer.lnk", lpFilePart=0x0) returned 0x79 [0084.394] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e3a4) returned 1 [0084.394] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Start Menu\\Programs\\Accessories\\System Tools\\computer.lnk" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\windows\\start menu\\programs\\accessories\\system tools\\computer.lnk"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x264 [0084.395] GetFileType (hFile=0x264) returned 0x1 [0084.395] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e3a0) returned 1 [0084.395] GetFileType (hFile=0x264) returned 0x1 [0084.395] WriteFile (in: hFile=0x264, lpBuffer=0x27e0abc*, nNumberOfBytesToWrite=0x110, lpNumberOfBytesWritten=0x31e434, lpOverlapped=0x0 | out: lpBuffer=0x27e0abc*, lpNumberOfBytesWritten=0x31e434*=0x110, lpOverlapped=0x0) returned 1 [0084.397] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Start Menu\\Programs\\Accessories\\System Tools\\computer.lnk", nBufferLength=0x105, lpBuffer=0x31dfe4, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Start Menu\\Programs\\Accessories\\System Tools\\computer.lnk", lpFilePart=0x0) returned 0x79 [0084.397] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Start Menu\\Programs\\Accessories\\System Tools\\computer.lnk", nBufferLength=0x105, lpBuffer=0x31dfe4, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Start Menu\\Programs\\Accessories\\System Tools\\computer.lnk", lpFilePart=0x0) returned 0x79 [0084.397] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e444) returned 1 [0084.397] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Start Menu\\Programs\\Accessories\\System Tools\\computer.lnk" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\windows\\start menu\\programs\\accessories\\system tools\\computer.lnk"), fInfoLevelId=0x0, lpFileInformation=0x31e4c0 | out: lpFileInformation=0x31e4c0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x28d71a60, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28d71a60, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x15c07260, ftLastWriteTime.dwHighDateTime=0x1d6eb7f, nFileSizeHigh=0x0, nFileSizeLow=0x110)) returned 1 [0084.397] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e440) returned 1 [0084.397] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Start Menu\\Programs\\Accessories\\System Tools\\computer.lnk" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\windows\\start menu\\programs\\accessories\\system tools\\computer.lnk"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Start Menu\\Programs\\Accessories\\System Tools\\computer.lnk" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\windows\\start menu\\programs\\accessories\\system tools\\computer.lnk")) returned 1 [0084.398] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Start Menu\\Programs\\Accessories\\System Tools\\Control Panel.lnk", nBufferLength=0x105, lpBuffer=0x31dec4, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Start Menu\\Programs\\Accessories\\System Tools\\Control Panel.lnk", lpFilePart=0x0) returned 0x7e [0084.398] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e3b8) returned 1 [0084.398] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Start Menu\\Programs\\Accessories\\System Tools\\Control Panel.lnk" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\windows\\start menu\\programs\\accessories\\system tools\\control panel.lnk"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x264 [0084.398] GetFileType (hFile=0x264) returned 0x1 [0084.398] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e3b4) returned 1 [0084.398] GetFileType (hFile=0x264) returned 0x1 [0084.398] GetFileSize (in: hFile=0x264, lpFileSizeHigh=0x31e4c0 | out: lpFileSizeHigh=0x31e4c0*=0x0) returned 0x106 [0084.398] ReadFile (in: hFile=0x264, lpBuffer=0x27e1f8c, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x31e46c, lpOverlapped=0x0 | out: lpBuffer=0x27e1f8c*, lpNumberOfBytesRead=0x31e46c*=0x106, lpOverlapped=0x0) returned 1 [0084.415] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Start Menu\\Programs\\Accessories\\System Tools\\Control Panel.lnk", nBufferLength=0x105, lpBuffer=0x31deb0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Start Menu\\Programs\\Accessories\\System Tools\\Control Panel.lnk", lpFilePart=0x0) returned 0x7e [0084.415] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e3a4) returned 1 [0084.415] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Start Menu\\Programs\\Accessories\\System Tools\\Control Panel.lnk" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\windows\\start menu\\programs\\accessories\\system tools\\control panel.lnk"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x264 [0084.418] GetFileType (hFile=0x264) returned 0x1 [0084.418] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e3a0) returned 1 [0084.418] GetFileType (hFile=0x264) returned 0x1 [0084.418] WriteFile (in: hFile=0x264, lpBuffer=0x2830470*, nNumberOfBytesToWrite=0x110, lpNumberOfBytesWritten=0x31e434, lpOverlapped=0x0 | out: lpBuffer=0x2830470*, lpNumberOfBytesWritten=0x31e434*=0x110, lpOverlapped=0x0) returned 1 [0084.441] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Start Menu\\Programs\\Accessories\\System Tools\\Control Panel.lnk", nBufferLength=0x105, lpBuffer=0x31dfe4, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Start Menu\\Programs\\Accessories\\System Tools\\Control Panel.lnk", lpFilePart=0x0) returned 0x7e [0084.441] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Start Menu\\Programs\\Accessories\\System Tools\\Control Panel.lnk", nBufferLength=0x105, lpBuffer=0x31dfe4, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Start Menu\\Programs\\Accessories\\System Tools\\Control Panel.lnk", lpFilePart=0x0) returned 0x7e [0084.441] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e444) returned 1 [0084.441] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Start Menu\\Programs\\Accessories\\System Tools\\Control Panel.lnk" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\windows\\start menu\\programs\\accessories\\system tools\\control panel.lnk"), fInfoLevelId=0x0, lpFileInformation=0x31e4c0 | out: lpFileInformation=0x31e4c0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x28d71a60, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28d71a60, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x15c2d3c0, ftLastWriteTime.dwHighDateTime=0x1d6eb7f, nFileSizeHigh=0x0, nFileSizeLow=0x110)) returned 1 [0084.441] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e440) returned 1 [0084.441] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Start Menu\\Programs\\Accessories\\System Tools\\Control Panel.lnk" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\windows\\start menu\\programs\\accessories\\system tools\\control panel.lnk"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Start Menu\\Programs\\Accessories\\System Tools\\Control Panel.lnk" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\windows\\start menu\\programs\\accessories\\system tools\\control panel.lnk")) returned 1 [0084.442] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Start Menu\\Programs\\Accessories\\System Tools\\Internet Explorer (No Add-ons).lnk", nBufferLength=0x105, lpBuffer=0x31dec4, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Start Menu\\Programs\\Accessories\\System Tools\\Internet Explorer (No Add-ons).lnk", lpFilePart=0x0) returned 0x8f [0084.442] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e3b8) returned 1 [0084.442] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Start Menu\\Programs\\Accessories\\System Tools\\Internet Explorer (No Add-ons).lnk" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\windows\\start menu\\programs\\accessories\\system tools\\internet explorer (no add-ons).lnk"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x264 [0084.443] GetFileType (hFile=0x264) returned 0x1 [0084.443] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e3b4) returned 1 [0084.443] GetFileType (hFile=0x264) returned 0x1 [0084.443] GetFileSize (in: hFile=0x264, lpFileSizeHigh=0x31e4c0 | out: lpFileSizeHigh=0x31e4c0*=0x0) returned 0x5df [0084.443] ReadFile (in: hFile=0x264, lpBuffer=0x2831e8c, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x31e46c, lpOverlapped=0x0 | out: lpBuffer=0x2831e8c*, lpNumberOfBytesRead=0x31e46c*=0x5df, lpOverlapped=0x0) returned 1 [0084.488] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Start Menu\\Programs\\Accessories\\System Tools\\Internet Explorer (No Add-ons).lnk", nBufferLength=0x105, lpBuffer=0x31deb0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Start Menu\\Programs\\Accessories\\System Tools\\Internet Explorer (No Add-ons).lnk", lpFilePart=0x0) returned 0x8f [0084.488] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e3a4) returned 1 [0084.488] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Start Menu\\Programs\\Accessories\\System Tools\\Internet Explorer (No Add-ons).lnk" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\windows\\start menu\\programs\\accessories\\system tools\\internet explorer (no add-ons).lnk"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x264 [0084.490] GetFileType (hFile=0x264) returned 0x1 [0084.490] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e3a0) returned 1 [0084.490] GetFileType (hFile=0x264) returned 0x1 [0084.490] WriteFile (in: hFile=0x264, lpBuffer=0x2681c48*, nNumberOfBytesToWrite=0x5e0, lpNumberOfBytesWritten=0x31e434, lpOverlapped=0x0 | out: lpBuffer=0x2681c48*, lpNumberOfBytesWritten=0x31e434*=0x5e0, lpOverlapped=0x0) returned 1 [0084.491] CloseHandle (hObject=0x264) returned 1 [0084.492] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Start Menu\\Programs\\Accessories\\System Tools\\Internet Explorer (No Add-ons).lnk", nBufferLength=0x105, lpBuffer=0x31dfe4, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Start Menu\\Programs\\Accessories\\System Tools\\Internet Explorer (No Add-ons).lnk", lpFilePart=0x0) returned 0x8f [0084.492] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Start Menu\\Programs\\Accessories\\System Tools\\Internet Explorer (No Add-ons).lnk", nBufferLength=0x105, lpBuffer=0x31dfe4, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Start Menu\\Programs\\Accessories\\System Tools\\Internet Explorer (No Add-ons).lnk", lpFilePart=0x0) returned 0x8f [0084.492] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e444) returned 1 [0084.492] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Start Menu\\Programs\\Accessories\\System Tools\\Internet Explorer (No Add-ons).lnk" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\windows\\start menu\\programs\\accessories\\system tools\\internet explorer (no add-ons).lnk"), fInfoLevelId=0x0, lpFileInformation=0x31e4c0 | out: lpFileInformation=0x31e4c0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x28d71a60, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28d71a60, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x15cebaa0, ftLastWriteTime.dwHighDateTime=0x1d6eb7f, nFileSizeHigh=0x0, nFileSizeLow=0x5e0)) returned 1 [0084.492] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e440) returned 1 [0084.492] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Start Menu\\Programs\\Accessories\\System Tools\\Internet Explorer (No Add-ons).lnk" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\windows\\start menu\\programs\\accessories\\system tools\\internet explorer (no add-ons).lnk"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Start Menu\\Programs\\Accessories\\System Tools\\Internet Explorer (No Add-ons).lnk" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\windows\\start menu\\programs\\accessories\\system tools\\internet explorer (no add-ons).lnk")) returned 1 [0084.493] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Start Menu\\Programs\\Accessories\\System Tools\\Private Character Editor.lnk", nBufferLength=0x105, lpBuffer=0x31dec4, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Start Menu\\Programs\\Accessories\\System Tools\\Private Character Editor.lnk", lpFilePart=0x0) returned 0x89 [0084.493] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e3b8) returned 1 [0084.493] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Start Menu\\Programs\\Accessories\\System Tools\\Private Character Editor.lnk" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\windows\\start menu\\programs\\accessories\\system tools\\private character editor.lnk"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x264 [0084.493] GetFileType (hFile=0x264) returned 0x1 [0084.493] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e3b4) returned 1 [0084.493] GetFileType (hFile=0x264) returned 0x1 [0084.493] GetFileSize (in: hFile=0x264, lpFileSizeHigh=0x31e4c0 | out: lpFileSizeHigh=0x31e4c0*=0x0) returned 0x51a [0084.493] ReadFile (in: hFile=0x264, lpBuffer=0x26835b0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x31e46c, lpOverlapped=0x0 | out: lpBuffer=0x26835b0*, lpNumberOfBytesRead=0x31e46c*=0x51a, lpOverlapped=0x0) returned 1 [0084.495] CloseHandle (hObject=0x264) returned 1 [0084.508] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Start Menu\\Programs\\Accessories\\System Tools\\Private Character Editor.lnk", nBufferLength=0x105, lpBuffer=0x31deb0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Start Menu\\Programs\\Accessories\\System Tools\\Private Character Editor.lnk", lpFilePart=0x0) returned 0x89 [0084.508] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e3a4) returned 1 [0084.508] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Start Menu\\Programs\\Accessories\\System Tools\\Private Character Editor.lnk" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\windows\\start menu\\programs\\accessories\\system tools\\private character editor.lnk"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x264 [0084.509] GetFileType (hFile=0x264) returned 0x1 [0084.509] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e3a0) returned 1 [0084.509] GetFileType (hFile=0x264) returned 0x1 [0084.509] WriteFile (in: hFile=0x264, lpBuffer=0x26d3068*, nNumberOfBytesToWrite=0x520, lpNumberOfBytesWritten=0x31e434, lpOverlapped=0x0 | out: lpBuffer=0x26d3068*, lpNumberOfBytesWritten=0x31e434*=0x520, lpOverlapped=0x0) returned 1 [0084.510] CloseHandle (hObject=0x264) returned 1 [0084.510] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Start Menu\\Programs\\Accessories\\System Tools\\Private Character Editor.lnk", nBufferLength=0x105, lpBuffer=0x31dfe4, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Start Menu\\Programs\\Accessories\\System Tools\\Private Character Editor.lnk", lpFilePart=0x0) returned 0x89 [0084.510] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Start Menu\\Programs\\Accessories\\System Tools\\Private Character Editor.lnk", nBufferLength=0x105, lpBuffer=0x31dfe4, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Start Menu\\Programs\\Accessories\\System Tools\\Private Character Editor.lnk", lpFilePart=0x0) returned 0x89 [0084.510] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e444) returned 1 [0084.510] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Start Menu\\Programs\\Accessories\\System Tools\\Private Character Editor.lnk" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\windows\\start menu\\programs\\accessories\\system tools\\private character editor.lnk"), fInfoLevelId=0x0, lpFileInformation=0x31e4c0 | out: lpFileInformation=0x31e4c0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x28d71a60, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28d71a60, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x15d11c00, ftLastWriteTime.dwHighDateTime=0x1d6eb7f, nFileSizeHigh=0x0, nFileSizeLow=0x520)) returned 1 [0084.511] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e440) returned 1 [0084.511] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Start Menu\\Programs\\Accessories\\System Tools\\Private Character Editor.lnk" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\windows\\start menu\\programs\\accessories\\system tools\\private character editor.lnk"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Start Menu\\Programs\\Accessories\\System Tools\\Private Character Editor.lnk" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\windows\\start menu\\programs\\accessories\\system tools\\private character editor.lnk")) returned 1 [0084.511] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e564) returned 1 [0084.511] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Start Menu\\Programs\\Administrative Tools", nBufferLength=0x105, lpBuffer=0x31e06c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Start Menu\\Programs\\Administrative Tools", lpFilePart=0x0) returned 0x68 [0084.511] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Start Menu\\Programs\\Administrative Tools\\", nBufferLength=0x105, lpBuffer=0x31e040, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Start Menu\\Programs\\Administrative Tools\\", lpFilePart=0x0) returned 0x69 [0084.511] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Start Menu\\Programs\\Administrative Tools\\*", lpFindFileData=0x31e28c | out: lpFindFileData=0x31e28c*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x28cff640, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28d71a60, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x2d207440, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x381f80 [0084.512] FindNextFileW (in: hFindFile=0x381f80, lpFindFileData=0x31e29c | out: lpFindFileData=0x31e29c*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x28cff640, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28d71a60, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x2d207440, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0084.512] FindNextFileW (in: hFindFile=0x381f80, lpFindFileData=0x31e29c | out: lpFindFileData=0x31e29c*(dwFileAttributes=0x6, ftCreationTime.dwLowDateTime=0x28d71a60, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28d71a60, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x2d207440, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0xae, dwReserved0=0x0, dwReserved1=0x0, cFileName="desktop.ini", cAlternateFileName="")) returned 1 [0084.512] FindNextFileW (in: hFindFile=0x381f80, lpFindFileData=0x31e29c | out: lpFindFileData=0x31e29c*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0084.512] FindClose (in: hFindFile=0x381f80 | out: hFindFile=0x381f80) returned 1 [0084.512] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e524) returned 1 [0084.512] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e530) returned 1 [0084.512] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e564) returned 1 [0084.512] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Start Menu\\Programs\\Administrative Tools", nBufferLength=0x105, lpBuffer=0x31e06c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Start Menu\\Programs\\Administrative Tools", lpFilePart=0x0) returned 0x68 [0084.512] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Start Menu\\Programs\\Administrative Tools\\", nBufferLength=0x105, lpBuffer=0x31e040, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Start Menu\\Programs\\Administrative Tools\\", lpFilePart=0x0) returned 0x69 [0084.512] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Start Menu\\Programs\\Administrative Tools\\*", lpFindFileData=0x31e28c | out: lpFindFileData=0x31e28c*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x28cff640, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28d71a60, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x2d207440, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x381f80 [0084.513] FindNextFileW (in: hFindFile=0x381f80, lpFindFileData=0x31e29c | out: lpFindFileData=0x31e29c*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x28cff640, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28d71a60, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x2d207440, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0084.513] FindNextFileW (in: hFindFile=0x381f80, lpFindFileData=0x31e29c | out: lpFindFileData=0x31e29c*(dwFileAttributes=0x6, ftCreationTime.dwLowDateTime=0x28d71a60, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28d71a60, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x2d207440, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0xae, dwReserved0=0x0, dwReserved1=0x0, cFileName="desktop.ini", cAlternateFileName="")) returned 1 [0084.513] FindNextFileW (in: hFindFile=0x381f80, lpFindFileData=0x31e29c | out: lpFindFileData=0x31e29c*(dwFileAttributes=0x6, ftCreationTime.dwLowDateTime=0x28d71a60, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28d71a60, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x2d207440, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0xae, dwReserved0=0x0, dwReserved1=0x0, cFileName="desktop.ini", cAlternateFileName="")) returned 0 [0084.513] FindClose (in: hFindFile=0x381f80 | out: hFindFile=0x381f80) returned 1 [0084.513] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e524) returned 1 [0084.513] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e530) returned 1 [0084.513] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e564) returned 1 [0084.513] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Start Menu\\Programs\\Maintenance", nBufferLength=0x105, lpBuffer=0x31e06c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Start Menu\\Programs\\Maintenance", lpFilePart=0x0) returned 0x5f [0084.513] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Start Menu\\Programs\\Maintenance\\", nBufferLength=0x105, lpBuffer=0x31e040, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Start Menu\\Programs\\Maintenance\\", lpFilePart=0x0) returned 0x60 [0084.513] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Start Menu\\Programs\\Maintenance\\*", lpFindFileData=0x31e28c | out: lpFindFileData=0x31e28c*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x28cff640, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28d71a60, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x7e05e94e, ftLastWriteTime.dwHighDateTime=0x1ca043e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x381f80 [0084.513] FindNextFileW (in: hFindFile=0x381f80, lpFindFileData=0x31e29c | out: lpFindFileData=0x31e29c*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x28cff640, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28d71a60, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x7e05e94e, ftLastWriteTime.dwHighDateTime=0x1ca043e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0084.514] FindNextFileW (in: hFindFile=0x381f80, lpFindFileData=0x31e29c | out: lpFindFileData=0x31e29c*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0x28d71a60, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28d71a60, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x7e05e94e, ftLastWriteTime.dwHighDateTime=0x1ca043e, nFileSizeHigh=0x0, nFileSizeLow=0x13e, dwReserved0=0x0, dwReserved1=0x0, cFileName="Desktop.ini", cAlternateFileName="")) returned 1 [0084.514] FindNextFileW (in: hFindFile=0x381f80, lpFindFileData=0x31e29c | out: lpFindFileData=0x31e29c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x28d71a60, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28d71a60, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x7e0387ee, ftLastWriteTime.dwHighDateTime=0x1ca043e, nFileSizeHigh=0x0, nFileSizeLow=0x106, dwReserved0=0x0, dwReserved1=0x0, cFileName="Help.lnk", cAlternateFileName="")) returned 1 [0084.514] FindNextFileW (in: hFindFile=0x381f80, lpFindFileData=0x31e29c | out: lpFindFileData=0x31e29c*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0084.514] FindClose (in: hFindFile=0x381f80 | out: hFindFile=0x381f80) returned 1 [0084.514] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e524) returned 1 [0084.514] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e530) returned 1 [0084.514] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e564) returned 1 [0084.514] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Start Menu\\Programs\\Maintenance", nBufferLength=0x105, lpBuffer=0x31e06c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Start Menu\\Programs\\Maintenance", lpFilePart=0x0) returned 0x5f [0084.514] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Start Menu\\Programs\\Maintenance\\", nBufferLength=0x105, lpBuffer=0x31e040, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Start Menu\\Programs\\Maintenance\\", lpFilePart=0x0) returned 0x60 [0084.514] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Start Menu\\Programs\\Maintenance\\*", lpFindFileData=0x31e28c | out: lpFindFileData=0x31e28c*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x28cff640, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28d71a60, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x7e05e94e, ftLastWriteTime.dwHighDateTime=0x1ca043e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x381f80 [0084.514] FindNextFileW (in: hFindFile=0x381f80, lpFindFileData=0x31e29c | out: lpFindFileData=0x31e29c*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x28cff640, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28d71a60, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x7e05e94e, ftLastWriteTime.dwHighDateTime=0x1ca043e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0084.515] FindNextFileW (in: hFindFile=0x381f80, lpFindFileData=0x31e29c | out: lpFindFileData=0x31e29c*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0x28d71a60, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28d71a60, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x7e05e94e, ftLastWriteTime.dwHighDateTime=0x1ca043e, nFileSizeHigh=0x0, nFileSizeLow=0x13e, dwReserved0=0x0, dwReserved1=0x0, cFileName="Desktop.ini", cAlternateFileName="")) returned 1 [0084.515] FindNextFileW (in: hFindFile=0x381f80, lpFindFileData=0x31e29c | out: lpFindFileData=0x31e29c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x28d71a60, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28d71a60, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x7e0387ee, ftLastWriteTime.dwHighDateTime=0x1ca043e, nFileSizeHigh=0x0, nFileSizeLow=0x106, dwReserved0=0x0, dwReserved1=0x0, cFileName="Help.lnk", cAlternateFileName="")) returned 1 [0084.515] FindNextFileW (in: hFindFile=0x381f80, lpFindFileData=0x31e29c | out: lpFindFileData=0x31e29c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x28d71a60, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28d71a60, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x7e0387ee, ftLastWriteTime.dwHighDateTime=0x1ca043e, nFileSizeHigh=0x0, nFileSizeLow=0x106, dwReserved0=0x0, dwReserved1=0x0, cFileName="Help.lnk", cAlternateFileName="")) returned 0 [0084.515] FindClose (in: hFindFile=0x381f80 | out: hFindFile=0x381f80) returned 1 [0084.515] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e524) returned 1 [0084.515] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e530) returned 1 [0084.515] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Start Menu\\Programs\\Maintenance\\Help.lnk", nBufferLength=0x105, lpBuffer=0x31df3c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Start Menu\\Programs\\Maintenance\\Help.lnk", lpFilePart=0x0) returned 0x68 [0084.515] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e430) returned 1 [0084.515] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Start Menu\\Programs\\Maintenance\\Help.lnk" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\windows\\start menu\\programs\\maintenance\\help.lnk"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x264 [0084.516] GetFileType (hFile=0x264) returned 0x1 [0084.516] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e42c) returned 1 [0084.516] GetFileType (hFile=0x264) returned 0x1 [0084.516] GetFileSize (in: hFile=0x264, lpFileSizeHigh=0x31e538 | out: lpFileSizeHigh=0x31e538*=0x0) returned 0x106 [0084.516] ReadFile (in: hFile=0x264, lpBuffer=0x26d8a58, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x31e4e4, lpOverlapped=0x0 | out: lpBuffer=0x26d8a58*, lpNumberOfBytesRead=0x31e4e4*=0x106, lpOverlapped=0x0) returned 1 [0084.517] CloseHandle (hObject=0x264) returned 1 [0084.531] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Start Menu\\Programs\\Maintenance\\Help.lnk", nBufferLength=0x105, lpBuffer=0x31df28, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Start Menu\\Programs\\Maintenance\\Help.lnk", lpFilePart=0x0) returned 0x68 [0084.531] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e41c) returned 1 [0084.531] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Start Menu\\Programs\\Maintenance\\Help.lnk" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\windows\\start menu\\programs\\maintenance\\help.lnk"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x264 [0084.532] GetFileType (hFile=0x264) returned 0x1 [0084.532] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e418) returned 1 [0084.532] GetFileType (hFile=0x264) returned 0x1 [0084.532] WriteFile (in: hFile=0x264, lpBuffer=0x2726f00*, nNumberOfBytesToWrite=0x110, lpNumberOfBytesWritten=0x31e4ac, lpOverlapped=0x0 | out: lpBuffer=0x2726f00*, lpNumberOfBytesWritten=0x31e4ac*=0x110, lpOverlapped=0x0) returned 1 [0084.533] CloseHandle (hObject=0x264) returned 1 [0084.533] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Start Menu\\Programs\\Maintenance\\Help.lnk", nBufferLength=0x105, lpBuffer=0x31e05c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Start Menu\\Programs\\Maintenance\\Help.lnk", lpFilePart=0x0) returned 0x68 [0084.533] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Start Menu\\Programs\\Maintenance\\Help.lnk", nBufferLength=0x105, lpBuffer=0x31e05c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Start Menu\\Programs\\Maintenance\\Help.lnk", lpFilePart=0x0) returned 0x68 [0084.533] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e4bc) returned 1 [0084.533] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Start Menu\\Programs\\Maintenance\\Help.lnk" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\windows\\start menu\\programs\\maintenance\\help.lnk"), fInfoLevelId=0x0, lpFileInformation=0x31e538 | out: lpFileInformation=0x31e538*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x28d71a60, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28d71a60, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x15d37d60, ftLastWriteTime.dwHighDateTime=0x1d6eb7f, nFileSizeHigh=0x0, nFileSizeLow=0x110)) returned 1 [0084.533] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e4b8) returned 1 [0084.533] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Start Menu\\Programs\\Maintenance\\Help.lnk" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\windows\\start menu\\programs\\maintenance\\help.lnk"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Start Menu\\Programs\\Maintenance\\Help.lnk" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\windows\\start menu\\programs\\maintenance\\help.lnk")) returned 1 [0084.534] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e564) returned 1 [0084.534] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Start Menu\\Programs\\Startup", nBufferLength=0x105, lpBuffer=0x31e06c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Start Menu\\Programs\\Startup", lpFilePart=0x0) returned 0x5b [0084.534] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Start Menu\\Programs\\Startup\\", nBufferLength=0x105, lpBuffer=0x31e040, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Start Menu\\Programs\\Startup\\", lpFilePart=0x0) returned 0x5c [0084.534] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Start Menu\\Programs\\Startup\\*", lpFindFileData=0x31e28c | out: lpFindFileData=0x31e28c*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x28cff640, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28d71a60, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x2d207440, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x381e00 [0084.534] FindNextFileW (in: hFindFile=0x381e00, lpFindFileData=0x31e29c | out: lpFindFileData=0x31e29c*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x28cff640, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28d71a60, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x2d207440, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0084.534] FindNextFileW (in: hFindFile=0x381e00, lpFindFileData=0x31e29c | out: lpFindFileData=0x31e29c*(dwFileAttributes=0x6, ftCreationTime.dwLowDateTime=0x28d71a60, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28d71a60, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x2d207440, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0xae, dwReserved0=0x0, dwReserved1=0x0, cFileName="desktop.ini", cAlternateFileName="")) returned 1 [0084.534] FindNextFileW (in: hFindFile=0x381e00, lpFindFileData=0x31e29c | out: lpFindFileData=0x31e29c*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0084.535] FindClose (in: hFindFile=0x381e00 | out: hFindFile=0x381e00) returned 1 [0084.535] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e524) returned 1 [0084.535] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e530) returned 1 [0084.535] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e564) returned 1 [0084.535] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Start Menu\\Programs\\Startup", nBufferLength=0x105, lpBuffer=0x31e06c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Start Menu\\Programs\\Startup", lpFilePart=0x0) returned 0x5b [0084.535] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Start Menu\\Programs\\Startup\\", nBufferLength=0x105, lpBuffer=0x31e040, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Start Menu\\Programs\\Startup\\", lpFilePart=0x0) returned 0x5c [0084.535] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Start Menu\\Programs\\Startup\\*", lpFindFileData=0x31e28c | out: lpFindFileData=0x31e28c*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x28cff640, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28d71a60, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x2d207440, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x381e00 [0084.535] FindNextFileW (in: hFindFile=0x381e00, lpFindFileData=0x31e29c | out: lpFindFileData=0x31e29c*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x28cff640, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28d71a60, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x2d207440, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0084.535] FindNextFileW (in: hFindFile=0x381e00, lpFindFileData=0x31e29c | out: lpFindFileData=0x31e29c*(dwFileAttributes=0x6, ftCreationTime.dwLowDateTime=0x28d71a60, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28d71a60, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x2d207440, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0xae, dwReserved0=0x0, dwReserved1=0x0, cFileName="desktop.ini", cAlternateFileName="")) returned 1 [0084.535] FindNextFileW (in: hFindFile=0x381e00, lpFindFileData=0x31e29c | out: lpFindFileData=0x31e29c*(dwFileAttributes=0x6, ftCreationTime.dwLowDateTime=0x28d71a60, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28d71a60, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x2d207440, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0xae, dwReserved0=0x0, dwReserved1=0x0, cFileName="desktop.ini", cAlternateFileName="")) returned 0 [0084.535] FindClose (in: hFindFile=0x381e00 | out: hFindFile=0x381e00) returned 1 [0084.536] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e524) returned 1 [0084.536] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e530) returned 1 [0084.536] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e654) returned 1 [0084.536] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Templates", nBufferLength=0x105, lpBuffer=0x31e15c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Templates", lpFilePart=0x0) returned 0x49 [0084.536] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Templates\\", nBufferLength=0x105, lpBuffer=0x31e130, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Templates\\", lpFilePart=0x0) returned 0x4a [0084.536] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Templates\\*", lpFindFileData=0x31e37c | out: lpFindFileData=0x31e37c*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x28cff640, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28cff640, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xaef15879, ftLastWriteTime.dwHighDateTime=0x1ca042b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x381e00 [0084.536] FindNextFileW (in: hFindFile=0x381e00, lpFindFileData=0x31e38c | out: lpFindFileData=0x31e38c*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x28cff640, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28cff640, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xaef15879, ftLastWriteTime.dwHighDateTime=0x1ca042b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0084.537] FindNextFileW (in: hFindFile=0x381e00, lpFindFileData=0x31e38c | out: lpFindFileData=0x31e38c*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x28cff640, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28cff640, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xaef15879, ftLastWriteTime.dwHighDateTime=0x1ca042b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 0 [0084.537] FindClose (in: hFindFile=0x381e00 | out: hFindFile=0x381e00) returned 1 [0084.537] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e614) returned 1 [0084.537] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e620) returned 1 [0084.537] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e654) returned 1 [0084.537] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Templates", nBufferLength=0x105, lpBuffer=0x31e15c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Templates", lpFilePart=0x0) returned 0x49 [0084.537] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Templates\\", nBufferLength=0x105, lpBuffer=0x31e130, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Templates\\", lpFilePart=0x0) returned 0x4a [0084.537] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Templates\\*", lpFindFileData=0x31e37c | out: lpFindFileData=0x31e37c*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x28cff640, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28cff640, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xaef15879, ftLastWriteTime.dwHighDateTime=0x1ca042b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x381e00 [0084.537] FindNextFileW (in: hFindFile=0x381e00, lpFindFileData=0x31e38c | out: lpFindFileData=0x31e38c*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x28cff640, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28cff640, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xaef15879, ftLastWriteTime.dwHighDateTime=0x1ca042b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0084.537] FindNextFileW (in: hFindFile=0x381e00, lpFindFileData=0x31e38c | out: lpFindFileData=0x31e38c*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x28cff640, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28cff640, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xaef15879, ftLastWriteTime.dwHighDateTime=0x1ca042b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 0 [0084.537] FindClose (in: hFindFile=0x381e00 | out: hFindFile=0x381e00) returned 1 [0084.538] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e614) returned 1 [0084.538] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e620) returned 1 [0084.538] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e654) returned 1 [0084.538] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Themes", nBufferLength=0x105, lpBuffer=0x31e15c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Themes", lpFilePart=0x0) returned 0x46 [0084.538] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Themes\\", nBufferLength=0x105, lpBuffer=0x31e130, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Themes\\", lpFilePart=0x0) returned 0x47 [0084.538] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Themes\\*", lpFindFileData=0x31e37c | out: lpFindFileData=0x31e37c*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x28cff640, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28d71a60, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xef632f84, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x381e00 [0084.538] FindNextFileW (in: hFindFile=0x381e00, lpFindFileData=0x31e38c | out: lpFindFileData=0x31e38c*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x28cff640, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28d71a60, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xef632f84, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0084.538] FindNextFileW (in: hFindFile=0x381e00, lpFindFileData=0x31e38c | out: lpFindFileData=0x31e38c*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x28d4b900, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28d4b900, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xd9d7d3c0, ftLastWriteTime.dwHighDateTime=0x1d3373f, nFileSizeHigh=0x0, nFileSizeLow=0x9cfab, dwReserved0=0x0, dwReserved1=0x0, cFileName="TranscodedWallpaper.jpg", cAlternateFileName="TRANSC~1.JPG")) returned 1 [0084.539] FindNextFileW (in: hFindFile=0x381e00, lpFindFileData=0x31e38c | out: lpFindFileData=0x31e38c*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0084.539] FindClose (in: hFindFile=0x381e00 | out: hFindFile=0x381e00) returned 1 [0084.539] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e614) returned 1 [0084.539] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e620) returned 1 [0084.539] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e654) returned 1 [0084.539] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Themes", nBufferLength=0x105, lpBuffer=0x31e15c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Themes", lpFilePart=0x0) returned 0x46 [0084.539] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Themes\\", nBufferLength=0x105, lpBuffer=0x31e130, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Themes\\", lpFilePart=0x0) returned 0x47 [0084.539] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Themes\\*", lpFindFileData=0x31e37c | out: lpFindFileData=0x31e37c*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x28cff640, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28d71a60, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xef632f84, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x381e00 [0084.539] FindNextFileW (in: hFindFile=0x381e00, lpFindFileData=0x31e38c | out: lpFindFileData=0x31e38c*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x28cff640, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28d71a60, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xef632f84, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0084.539] FindNextFileW (in: hFindFile=0x381e00, lpFindFileData=0x31e38c | out: lpFindFileData=0x31e38c*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x28d4b900, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28d4b900, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xd9d7d3c0, ftLastWriteTime.dwHighDateTime=0x1d3373f, nFileSizeHigh=0x0, nFileSizeLow=0x9cfab, dwReserved0=0x0, dwReserved1=0x0, cFileName="TranscodedWallpaper.jpg", cAlternateFileName="TRANSC~1.JPG")) returned 1 [0084.539] FindNextFileW (in: hFindFile=0x381e00, lpFindFileData=0x31e38c | out: lpFindFileData=0x31e38c*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x28d4b900, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28d4b900, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xd9d7d3c0, ftLastWriteTime.dwHighDateTime=0x1d3373f, nFileSizeHigh=0x0, nFileSizeLow=0x9cfab, dwReserved0=0x0, dwReserved1=0x0, cFileName="TranscodedWallpaper.jpg", cAlternateFileName="TRANSC~1.JPG")) returned 0 [0084.540] FindClose (in: hFindFile=0x381e00 | out: hFindFile=0x381e00) returned 1 [0084.540] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e614) returned 1 [0084.540] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e620) returned 1 [0084.540] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Themes\\TranscodedWallpaper.jpg", nBufferLength=0x105, lpBuffer=0x31e02c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Themes\\TranscodedWallpaper.jpg", lpFilePart=0x0) returned 0x5e [0084.540] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e520) returned 1 [0084.540] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Themes\\TranscodedWallpaper.jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\windows\\themes\\transcodedwallpaper.jpg"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x264 [0084.540] GetFileType (hFile=0x264) returned 0x1 [0084.540] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e51c) returned 1 [0084.540] GetFileType (hFile=0x264) returned 0x1 [0084.540] GetFileSize (in: hFile=0x264, lpFileSizeHigh=0x31e628 | out: lpFileSizeHigh=0x31e628*=0x0) returned 0x9cfab [0084.540] ReadFile (in: hFile=0x264, lpBuffer=0x36d5c70, nNumberOfBytesToRead=0x9cfab, lpNumberOfBytesRead=0x31e5d4, lpOverlapped=0x0 | out: lpBuffer=0x36d5c70*, lpNumberOfBytesRead=0x31e5d4*=0x9cfab, lpOverlapped=0x0) returned 1 [0084.549] CloseHandle (hObject=0x264) returned 1 [0084.595] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Themes\\TranscodedWallpaper.jpg", nBufferLength=0x105, lpBuffer=0x31e018, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Themes\\TranscodedWallpaper.jpg", lpFilePart=0x0) returned 0x5e [0084.595] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e50c) returned 1 [0084.595] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Themes\\TranscodedWallpaper.jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\windows\\themes\\transcodedwallpaper.jpg"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x264 [0084.601] GetFileType (hFile=0x264) returned 0x1 [0084.601] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e508) returned 1 [0084.601] GetFileType (hFile=0x264) returned 0x1 [0084.601] WriteFile (in: hFile=0x264, lpBuffer=0x36194b0*, nNumberOfBytesToWrite=0x9cfb0, lpNumberOfBytesWritten=0x31e5c8, lpOverlapped=0x0 | out: lpBuffer=0x36194b0*, lpNumberOfBytesWritten=0x31e5c8*=0x9cfb0, lpOverlapped=0x0) returned 1 [0084.611] CloseHandle (hObject=0x264) returned 1 [0084.611] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Themes\\TranscodedWallpaper.jpg", nBufferLength=0x105, lpBuffer=0x31e14c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Themes\\TranscodedWallpaper.jpg", lpFilePart=0x0) returned 0x5e [0084.611] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Themes\\TranscodedWallpaper.jpg", nBufferLength=0x105, lpBuffer=0x31e14c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Themes\\TranscodedWallpaper.jpg", lpFilePart=0x0) returned 0x5e [0084.611] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e5ac) returned 1 [0084.611] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Themes\\TranscodedWallpaper.jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\windows\\themes\\transcodedwallpaper.jpg"), fInfoLevelId=0x0, lpFileInformation=0x31e628 | out: lpFileInformation=0x31e628*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x28d4b900, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28d4b900, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x15df6440, ftLastWriteTime.dwHighDateTime=0x1d6eb7f, nFileSizeHigh=0x0, nFileSizeLow=0x9cfb0)) returned 1 [0084.612] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e5a8) returned 1 [0084.612] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Themes\\TranscodedWallpaper.jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\windows\\themes\\transcodedwallpaper.jpg"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Themes\\TranscodedWallpaper.jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\windows\\themes\\transcodedwallpaper.jpg")) returned 1 [0084.612] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e6cc) returned 1 [0084.612] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Word", nBufferLength=0x105, lpBuffer=0x31e1d4, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Word", lpFilePart=0x0) returned 0x3c [0084.612] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Word\\", nBufferLength=0x105, lpBuffer=0x31e1a8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Word\\", lpFilePart=0x0) returned 0x3d [0084.612] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Word\\*", lpFindFileData=0x31e3f4 | out: lpFindFileData=0x31e3f4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x4f71aa70, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0x27c7d150, ftLastAccessTime.dwHighDateTime=0x1d3aaba, ftLastWriteTime.dwLowDateTime=0x27c7d150, ftLastWriteTime.dwHighDateTime=0x1d3aaba, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x381d40 [0084.614] FindNextFileW (in: hFindFile=0x381d40, lpFindFileData=0x31e404 | out: lpFindFileData=0x31e404*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x4f71aa70, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0x27c7d150, ftLastAccessTime.dwHighDateTime=0x1d3aaba, ftLastWriteTime.dwLowDateTime=0x27c7d150, ftLastWriteTime.dwHighDateTime=0x1d3aaba, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0084.614] FindNextFileW (in: hFindFile=0x381d40, lpFindFileData=0x31e404 | out: lpFindFileData=0x31e404*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x27c7d150, ftCreationTime.dwHighDateTime=0x1d3aaba, ftLastAccessTime.dwLowDateTime=0x27c7d150, ftLastAccessTime.dwHighDateTime=0x1d3aaba, ftLastWriteTime.dwLowDateTime=0x27c7d150, ftLastWriteTime.dwHighDateTime=0x1d3aaba, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="STARTUP", cAlternateFileName="")) returned 1 [0084.615] FindNextFileW (in: hFindFile=0x381d40, lpFindFileData=0x31e404 | out: lpFindFileData=0x31e404*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x27c7d150, ftCreationTime.dwHighDateTime=0x1d3aaba, ftLastAccessTime.dwLowDateTime=0x27c7d150, ftLastAccessTime.dwHighDateTime=0x1d3aaba, ftLastWriteTime.dwLowDateTime=0x27c7d150, ftLastWriteTime.dwHighDateTime=0x1d3aaba, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="STARTUP", cAlternateFileName="")) returned 0 [0084.615] FindClose (in: hFindFile=0x381d40 | out: hFindFile=0x381d40) returned 1 [0084.615] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e68c) returned 1 [0084.615] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e698) returned 1 [0084.615] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e6cc) returned 1 [0084.615] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Word", nBufferLength=0x105, lpBuffer=0x31e1d4, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Word", lpFilePart=0x0) returned 0x3c [0084.615] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Word\\", nBufferLength=0x105, lpBuffer=0x31e1a8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Word\\", lpFilePart=0x0) returned 0x3d [0084.615] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Word\\*", lpFindFileData=0x31e3f4 | out: lpFindFileData=0x31e3f4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x4f71aa70, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0x27c7d150, ftLastAccessTime.dwHighDateTime=0x1d3aaba, ftLastWriteTime.dwLowDateTime=0x27c7d150, ftLastWriteTime.dwHighDateTime=0x1d3aaba, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x381d40 [0084.615] FindNextFileW (in: hFindFile=0x381d40, lpFindFileData=0x31e404 | out: lpFindFileData=0x31e404*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x4f71aa70, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0x27c7d150, ftLastAccessTime.dwHighDateTime=0x1d3aaba, ftLastWriteTime.dwLowDateTime=0x27c7d150, ftLastWriteTime.dwHighDateTime=0x1d3aaba, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0084.615] FindNextFileW (in: hFindFile=0x381d40, lpFindFileData=0x31e404 | out: lpFindFileData=0x31e404*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x27c7d150, ftCreationTime.dwHighDateTime=0x1d3aaba, ftLastAccessTime.dwLowDateTime=0x27c7d150, ftLastAccessTime.dwHighDateTime=0x1d3aaba, ftLastWriteTime.dwLowDateTime=0x27c7d150, ftLastWriteTime.dwHighDateTime=0x1d3aaba, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="STARTUP", cAlternateFileName="")) returned 1 [0084.615] FindNextFileW (in: hFindFile=0x381d40, lpFindFileData=0x31e404 | out: lpFindFileData=0x31e404*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0084.616] FindClose (in: hFindFile=0x381d40 | out: hFindFile=0x381d40) returned 1 [0084.616] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e68c) returned 1 [0084.616] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e698) returned 1 [0084.616] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e654) returned 1 [0084.616] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Word\\STARTUP", nBufferLength=0x105, lpBuffer=0x31e15c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Word\\STARTUP", lpFilePart=0x0) returned 0x44 [0084.616] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Word\\STARTUP\\", nBufferLength=0x105, lpBuffer=0x31e130, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Word\\STARTUP\\", lpFilePart=0x0) returned 0x45 [0084.616] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Word\\STARTUP\\*", lpFindFileData=0x31e37c | out: lpFindFileData=0x31e37c*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x27c7d150, ftCreationTime.dwHighDateTime=0x1d3aaba, ftLastAccessTime.dwLowDateTime=0x27c7d150, ftLastAccessTime.dwHighDateTime=0x1d3aaba, ftLastWriteTime.dwLowDateTime=0x27c7d150, ftLastWriteTime.dwHighDateTime=0x1d3aaba, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x381d40 [0084.618] FindNextFileW (in: hFindFile=0x381d40, lpFindFileData=0x31e38c | out: lpFindFileData=0x31e38c*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x27c7d150, ftCreationTime.dwHighDateTime=0x1d3aaba, ftLastAccessTime.dwLowDateTime=0x27c7d150, ftLastAccessTime.dwHighDateTime=0x1d3aaba, ftLastWriteTime.dwLowDateTime=0x27c7d150, ftLastWriteTime.dwHighDateTime=0x1d3aaba, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0084.618] FindNextFileW (in: hFindFile=0x381d40, lpFindFileData=0x31e38c | out: lpFindFileData=0x31e38c*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x27c7d150, ftCreationTime.dwHighDateTime=0x1d3aaba, ftLastAccessTime.dwLowDateTime=0x27c7d150, ftLastAccessTime.dwHighDateTime=0x1d3aaba, ftLastWriteTime.dwLowDateTime=0x27c7d150, ftLastWriteTime.dwHighDateTime=0x1d3aaba, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 0 [0084.619] FindClose (in: hFindFile=0x381d40 | out: hFindFile=0x381d40) returned 1 [0084.619] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e614) returned 1 [0084.619] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e620) returned 1 [0084.619] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e654) returned 1 [0084.619] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Word\\STARTUP", nBufferLength=0x105, lpBuffer=0x31e15c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Word\\STARTUP", lpFilePart=0x0) returned 0x44 [0084.619] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Word\\STARTUP\\", nBufferLength=0x105, lpBuffer=0x31e130, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Word\\STARTUP\\", lpFilePart=0x0) returned 0x45 [0084.619] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Word\\STARTUP\\*", lpFindFileData=0x31e37c | out: lpFindFileData=0x31e37c*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x27c7d150, ftCreationTime.dwHighDateTime=0x1d3aaba, ftLastAccessTime.dwLowDateTime=0x27c7d150, ftLastAccessTime.dwHighDateTime=0x1d3aaba, ftLastWriteTime.dwLowDateTime=0x27c7d150, ftLastWriteTime.dwHighDateTime=0x1d3aaba, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x381d40 [0084.619] FindNextFileW (in: hFindFile=0x381d40, lpFindFileData=0x31e38c | out: lpFindFileData=0x31e38c*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x27c7d150, ftCreationTime.dwHighDateTime=0x1d3aaba, ftLastAccessTime.dwLowDateTime=0x27c7d150, ftLastAccessTime.dwHighDateTime=0x1d3aaba, ftLastWriteTime.dwLowDateTime=0x27c7d150, ftLastWriteTime.dwHighDateTime=0x1d3aaba, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0084.619] FindNextFileW (in: hFindFile=0x381d40, lpFindFileData=0x31e38c | out: lpFindFileData=0x31e38c*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x27c7d150, ftCreationTime.dwHighDateTime=0x1d3aaba, ftLastAccessTime.dwLowDateTime=0x27c7d150, ftLastAccessTime.dwHighDateTime=0x1d3aaba, ftLastWriteTime.dwLowDateTime=0x27c7d150, ftLastWriteTime.dwHighDateTime=0x1d3aaba, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 0 [0084.619] FindClose (in: hFindFile=0x381d40 | out: hFindFile=0x381d40) returned 1 [0084.619] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e614) returned 1 [0084.619] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e620) returned 1 [0084.619] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e744) returned 1 [0084.619] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Mozilla", nBufferLength=0x105, lpBuffer=0x31e24c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Mozilla", lpFilePart=0x0) returned 0x35 [0084.620] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Mozilla\\", nBufferLength=0x105, lpBuffer=0x31e220, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Mozilla\\", lpFilePart=0x0) returned 0x36 [0084.620] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Mozilla\\*", lpFindFileData=0x31e46c | out: lpFindFileData=0x31e46c*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xb264df80, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xb458e750, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0xb458e750, ftLastWriteTime.dwHighDateTime=0x1d2dda4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x381d40 [0084.620] FindNextFileW (in: hFindFile=0x381d40, lpFindFileData=0x31e47c | out: lpFindFileData=0x31e47c*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xb264df80, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xb458e750, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0xb458e750, ftLastWriteTime.dwHighDateTime=0x1d2dda4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0084.620] FindNextFileW (in: hFindFile=0x381d40, lpFindFileData=0x31e47c | out: lpFindFileData=0x31e47c*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xb458e750, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xb458e750, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0xb458e750, ftLastWriteTime.dwHighDateTime=0x1d2dda4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Extensions", cAlternateFileName="EXTENS~1")) returned 1 [0084.620] FindNextFileW (in: hFindFile=0x381d40, lpFindFileData=0x31e47c | out: lpFindFileData=0x31e47c*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xb264df80, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xb26740e0, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0xb26740e0, ftLastWriteTime.dwHighDateTime=0x1d2dda4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Firefox", cAlternateFileName="")) returned 1 [0084.620] FindNextFileW (in: hFindFile=0x381d40, lpFindFileData=0x31e47c | out: lpFindFileData=0x31e47c*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xb264df80, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xb26740e0, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0xb26740e0, ftLastWriteTime.dwHighDateTime=0x1d2dda4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Firefox", cAlternateFileName="")) returned 0 [0084.621] FindClose (in: hFindFile=0x381d40 | out: hFindFile=0x381d40) returned 1 [0084.621] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e704) returned 1 [0084.621] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e710) returned 1 [0084.621] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e744) returned 1 [0084.621] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Mozilla", nBufferLength=0x105, lpBuffer=0x31e24c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Mozilla", lpFilePart=0x0) returned 0x35 [0084.621] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Mozilla\\", nBufferLength=0x105, lpBuffer=0x31e220, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Mozilla\\", lpFilePart=0x0) returned 0x36 [0084.621] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Mozilla\\*", lpFindFileData=0x31e46c | out: lpFindFileData=0x31e46c*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xb264df80, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xb458e750, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0xb458e750, ftLastWriteTime.dwHighDateTime=0x1d2dda4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x381d40 [0084.621] FindNextFileW (in: hFindFile=0x381d40, lpFindFileData=0x31e47c | out: lpFindFileData=0x31e47c*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xb264df80, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xb458e750, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0xb458e750, ftLastWriteTime.dwHighDateTime=0x1d2dda4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0084.621] FindNextFileW (in: hFindFile=0x381d40, lpFindFileData=0x31e47c | out: lpFindFileData=0x31e47c*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xb458e750, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xb458e750, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0xb458e750, ftLastWriteTime.dwHighDateTime=0x1d2dda4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Extensions", cAlternateFileName="EXTENS~1")) returned 1 [0084.621] FindNextFileW (in: hFindFile=0x381d40, lpFindFileData=0x31e47c | out: lpFindFileData=0x31e47c*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xb264df80, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xb26740e0, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0xb26740e0, ftLastWriteTime.dwHighDateTime=0x1d2dda4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Firefox", cAlternateFileName="")) returned 1 [0084.621] FindNextFileW (in: hFindFile=0x381d40, lpFindFileData=0x31e47c | out: lpFindFileData=0x31e47c*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0084.622] FindClose (in: hFindFile=0x381d40 | out: hFindFile=0x381d40) returned 1 [0084.622] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e704) returned 1 [0084.622] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e710) returned 1 [0084.622] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e6cc) returned 1 [0084.622] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Mozilla\\Extensions", nBufferLength=0x105, lpBuffer=0x31e1d4, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Mozilla\\Extensions", lpFilePart=0x0) returned 0x40 [0084.622] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Mozilla\\Extensions\\", nBufferLength=0x105, lpBuffer=0x31e1a8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Mozilla\\Extensions\\", lpFilePart=0x0) returned 0x41 [0084.622] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Mozilla\\Extensions\\*", lpFindFileData=0x31e3f4 | out: lpFindFileData=0x31e3f4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xb458e750, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xb458e750, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0xb458e750, ftLastWriteTime.dwHighDateTime=0x1d2dda4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x381d40 [0084.623] FindNextFileW (in: hFindFile=0x381d40, lpFindFileData=0x31e404 | out: lpFindFileData=0x31e404*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xb458e750, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xb458e750, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0xb458e750, ftLastWriteTime.dwHighDateTime=0x1d2dda4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0084.623] FindNextFileW (in: hFindFile=0x381d40, lpFindFileData=0x31e404 | out: lpFindFileData=0x31e404*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xb458e750, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xb458e750, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0xb458e750, ftLastWriteTime.dwHighDateTime=0x1d2dda4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 0 [0084.623] FindClose (in: hFindFile=0x381d40 | out: hFindFile=0x381d40) returned 1 [0084.623] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e68c) returned 1 [0084.623] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e698) returned 1 [0084.623] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e6cc) returned 1 [0084.623] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Mozilla\\Extensions", nBufferLength=0x105, lpBuffer=0x31e1d4, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Mozilla\\Extensions", lpFilePart=0x0) returned 0x40 [0084.623] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Mozilla\\Extensions\\", nBufferLength=0x105, lpBuffer=0x31e1a8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Mozilla\\Extensions\\", lpFilePart=0x0) returned 0x41 [0084.623] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Mozilla\\Extensions\\*", lpFindFileData=0x31e3f4 | out: lpFindFileData=0x31e3f4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xb458e750, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xb458e750, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0xb458e750, ftLastWriteTime.dwHighDateTime=0x1d2dda4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x381d40 [0084.624] FindNextFileW (in: hFindFile=0x381d40, lpFindFileData=0x31e404 | out: lpFindFileData=0x31e404*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xb458e750, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xb458e750, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0xb458e750, ftLastWriteTime.dwHighDateTime=0x1d2dda4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0084.624] FindNextFileW (in: hFindFile=0x381d40, lpFindFileData=0x31e404 | out: lpFindFileData=0x31e404*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xb458e750, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xb458e750, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0xb458e750, ftLastWriteTime.dwHighDateTime=0x1d2dda4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 0 [0084.624] FindClose (in: hFindFile=0x381d40 | out: hFindFile=0x381d40) returned 1 [0084.624] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e68c) returned 1 [0084.624] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e698) returned 1 [0084.624] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e6cc) returned 1 [0084.624] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Mozilla\\Firefox", nBufferLength=0x105, lpBuffer=0x31e1d4, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Mozilla\\Firefox", lpFilePart=0x0) returned 0x3d [0084.624] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Mozilla\\Firefox\\", nBufferLength=0x105, lpBuffer=0x31e1a8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Mozilla\\Firefox\\", lpFilePart=0x0) returned 0x3e [0084.624] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Mozilla\\Firefox\\*", lpFindFileData=0x31e3f4 | out: lpFindFileData=0x31e3f4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xb264df80, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xb26740e0, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0xb26740e0, ftLastWriteTime.dwHighDateTime=0x1d2dda4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x381d40 [0084.625] FindNextFileW (in: hFindFile=0x381d40, lpFindFileData=0x31e404 | out: lpFindFileData=0x31e404*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xb264df80, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xb26740e0, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0xb26740e0, ftLastWriteTime.dwHighDateTime=0x1d2dda4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0084.625] FindNextFileW (in: hFindFile=0x381d40, lpFindFileData=0x31e404 | out: lpFindFileData=0x31e404*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xb264df80, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xb264df80, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0xb264df80, ftLastWriteTime.dwHighDateTime=0x1d2dda4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Crash Reports", cAlternateFileName="CRASHR~1")) returned 1 [0084.625] FindNextFileW (in: hFindFile=0x381d40, lpFindFileData=0x31e404 | out: lpFindFileData=0x31e404*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xb264df80, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xb264df80, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0xb264df80, ftLastWriteTime.dwHighDateTime=0x1d2dda4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Profiles", cAlternateFileName="")) returned 1 [0084.625] FindNextFileW (in: hFindFile=0x381d40, lpFindFileData=0x31e404 | out: lpFindFileData=0x31e404*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xb26740e0, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xb26740e0, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0xb26740e0, ftLastWriteTime.dwHighDateTime=0x1d2dda4, nFileSizeHigh=0x0, nFileSizeLow=0x6f, dwReserved0=0x0, dwReserved1=0x0, cFileName="profiles.ini", cAlternateFileName="")) returned 1 [0084.626] FindNextFileW (in: hFindFile=0x381d40, lpFindFileData=0x31e404 | out: lpFindFileData=0x31e404*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0084.626] FindClose (in: hFindFile=0x381d40 | out: hFindFile=0x381d40) returned 1 [0084.626] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e68c) returned 1 [0084.626] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e698) returned 1 [0084.626] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e6cc) returned 1 [0084.626] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Mozilla\\Firefox", nBufferLength=0x105, lpBuffer=0x31e1d4, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Mozilla\\Firefox", lpFilePart=0x0) returned 0x3d [0084.626] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Mozilla\\Firefox\\", nBufferLength=0x105, lpBuffer=0x31e1a8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Mozilla\\Firefox\\", lpFilePart=0x0) returned 0x3e [0084.626] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Mozilla\\Firefox\\*", lpFindFileData=0x31e3f4 | out: lpFindFileData=0x31e3f4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xb264df80, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xb26740e0, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0xb26740e0, ftLastWriteTime.dwHighDateTime=0x1d2dda4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x381d40 [0084.626] FindNextFileW (in: hFindFile=0x381d40, lpFindFileData=0x31e404 | out: lpFindFileData=0x31e404*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xb264df80, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xb26740e0, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0xb26740e0, ftLastWriteTime.dwHighDateTime=0x1d2dda4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0084.626] FindNextFileW (in: hFindFile=0x381d40, lpFindFileData=0x31e404 | out: lpFindFileData=0x31e404*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xb264df80, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xb264df80, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0xb264df80, ftLastWriteTime.dwHighDateTime=0x1d2dda4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Crash Reports", cAlternateFileName="CRASHR~1")) returned 1 [0084.626] FindNextFileW (in: hFindFile=0x381d40, lpFindFileData=0x31e404 | out: lpFindFileData=0x31e404*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xb264df80, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xb264df80, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0xb264df80, ftLastWriteTime.dwHighDateTime=0x1d2dda4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Profiles", cAlternateFileName="")) returned 1 [0084.626] FindNextFileW (in: hFindFile=0x381d40, lpFindFileData=0x31e404 | out: lpFindFileData=0x31e404*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xb26740e0, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xb26740e0, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0xb26740e0, ftLastWriteTime.dwHighDateTime=0x1d2dda4, nFileSizeHigh=0x0, nFileSizeLow=0x6f, dwReserved0=0x0, dwReserved1=0x0, cFileName="profiles.ini", cAlternateFileName="")) returned 1 [0084.627] FindNextFileW (in: hFindFile=0x381d40, lpFindFileData=0x31e404 | out: lpFindFileData=0x31e404*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xb26740e0, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xb26740e0, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0xb26740e0, ftLastWriteTime.dwHighDateTime=0x1d2dda4, nFileSizeHigh=0x0, nFileSizeLow=0x6f, dwReserved0=0x0, dwReserved1=0x0, cFileName="profiles.ini", cAlternateFileName="")) returned 0 [0084.627] FindClose (in: hFindFile=0x381d40 | out: hFindFile=0x381d40) returned 1 [0084.627] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e68c) returned 1 [0084.627] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e698) returned 1 [0084.627] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e654) returned 1 [0084.627] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Mozilla\\Firefox\\Crash Reports", nBufferLength=0x105, lpBuffer=0x31e15c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Mozilla\\Firefox\\Crash Reports", lpFilePart=0x0) returned 0x4b [0084.627] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Mozilla\\Firefox\\Crash Reports\\", nBufferLength=0x105, lpBuffer=0x31e130, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Mozilla\\Firefox\\Crash Reports\\", lpFilePart=0x0) returned 0x4c [0084.627] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Mozilla\\Firefox\\Crash Reports\\*", lpFindFileData=0x31e37c | out: lpFindFileData=0x31e37c*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xb264df80, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xb264df80, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0xb264df80, ftLastWriteTime.dwHighDateTime=0x1d2dda4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x381d40 [0084.628] FindNextFileW (in: hFindFile=0x381d40, lpFindFileData=0x31e38c | out: lpFindFileData=0x31e38c*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xb264df80, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xb264df80, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0xb264df80, ftLastWriteTime.dwHighDateTime=0x1d2dda4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0084.628] FindNextFileW (in: hFindFile=0x381d40, lpFindFileData=0x31e38c | out: lpFindFileData=0x31e38c*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xb264df80, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xb264df80, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0xb264df80, ftLastWriteTime.dwHighDateTime=0x1d2dda4, nFileSizeHigh=0x0, nFileSizeLow=0xa, dwReserved0=0x0, dwReserved1=0x0, cFileName="InstallTime20131025151332", cAlternateFileName="INSTAL~1")) returned 1 [0084.628] FindNextFileW (in: hFindFile=0x381d40, lpFindFileData=0x31e38c | out: lpFindFileData=0x31e38c*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0084.628] FindClose (in: hFindFile=0x381d40 | out: hFindFile=0x381d40) returned 1 [0084.628] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e614) returned 1 [0084.628] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e620) returned 1 [0084.628] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e654) returned 1 [0084.629] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Mozilla\\Firefox\\Crash Reports", nBufferLength=0x105, lpBuffer=0x31e15c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Mozilla\\Firefox\\Crash Reports", lpFilePart=0x0) returned 0x4b [0084.629] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Mozilla\\Firefox\\Crash Reports\\", nBufferLength=0x105, lpBuffer=0x31e130, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Mozilla\\Firefox\\Crash Reports\\", lpFilePart=0x0) returned 0x4c [0084.629] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Mozilla\\Firefox\\Crash Reports\\*", lpFindFileData=0x31e37c | out: lpFindFileData=0x31e37c*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xb264df80, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xb264df80, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0xb264df80, ftLastWriteTime.dwHighDateTime=0x1d2dda4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x381d40 [0084.629] FindNextFileW (in: hFindFile=0x381d40, lpFindFileData=0x31e38c | out: lpFindFileData=0x31e38c*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xb264df80, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xb264df80, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0xb264df80, ftLastWriteTime.dwHighDateTime=0x1d2dda4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0084.629] FindNextFileW (in: hFindFile=0x381d40, lpFindFileData=0x31e38c | out: lpFindFileData=0x31e38c*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xb264df80, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xb264df80, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0xb264df80, ftLastWriteTime.dwHighDateTime=0x1d2dda4, nFileSizeHigh=0x0, nFileSizeLow=0xa, dwReserved0=0x0, dwReserved1=0x0, cFileName="InstallTime20131025151332", cAlternateFileName="INSTAL~1")) returned 1 [0084.629] FindNextFileW (in: hFindFile=0x381d40, lpFindFileData=0x31e38c | out: lpFindFileData=0x31e38c*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xb264df80, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xb264df80, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0xb264df80, ftLastWriteTime.dwHighDateTime=0x1d2dda4, nFileSizeHigh=0x0, nFileSizeLow=0xa, dwReserved0=0x0, dwReserved1=0x0, cFileName="InstallTime20131025151332", cAlternateFileName="INSTAL~1")) returned 0 [0084.629] FindClose (in: hFindFile=0x381d40 | out: hFindFile=0x381d40) returned 1 [0084.629] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e614) returned 1 [0084.629] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e620) returned 1 [0084.629] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e654) returned 1 [0084.629] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles", nBufferLength=0x105, lpBuffer=0x31e15c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles", lpFilePart=0x0) returned 0x46 [0084.629] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\", nBufferLength=0x105, lpBuffer=0x31e130, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\", lpFilePart=0x0) returned 0x47 [0084.630] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\*", lpFindFileData=0x31e37c | out: lpFindFileData=0x31e37c*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xb264df80, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xb264df80, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0xb264df80, ftLastWriteTime.dwHighDateTime=0x1d2dda4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x381d40 [0084.630] FindNextFileW (in: hFindFile=0x381d40, lpFindFileData=0x31e38c | out: lpFindFileData=0x31e38c*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xb264df80, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xb264df80, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0xb264df80, ftLastWriteTime.dwHighDateTime=0x1d2dda4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0084.631] FindNextFileW (in: hFindFile=0x381d40, lpFindFileData=0x31e38c | out: lpFindFileData=0x31e38c*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xb264df80, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0x85442390, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x85442390, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="silmbjec.default", cAlternateFileName="SILMBJ~1.DEF")) returned 1 [0084.631] FindNextFileW (in: hFindFile=0x381d40, lpFindFileData=0x31e38c | out: lpFindFileData=0x31e38c*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xb264df80, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0x85442390, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x85442390, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="silmbjec.default", cAlternateFileName="SILMBJ~1.DEF")) returned 0 [0084.631] FindClose (in: hFindFile=0x381d40 | out: hFindFile=0x381d40) returned 1 [0084.631] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e614) returned 1 [0084.631] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e620) returned 1 [0084.631] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e654) returned 1 [0084.631] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles", nBufferLength=0x105, lpBuffer=0x31e15c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles", lpFilePart=0x0) returned 0x46 [0084.631] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\", nBufferLength=0x105, lpBuffer=0x31e130, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\", lpFilePart=0x0) returned 0x47 [0084.631] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\*", lpFindFileData=0x31e37c | out: lpFindFileData=0x31e37c*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xb264df80, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xb264df80, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0xb264df80, ftLastWriteTime.dwHighDateTime=0x1d2dda4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x381d40 [0084.631] FindNextFileW (in: hFindFile=0x381d40, lpFindFileData=0x31e38c | out: lpFindFileData=0x31e38c*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xb264df80, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xb264df80, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0xb264df80, ftLastWriteTime.dwHighDateTime=0x1d2dda4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0084.631] FindNextFileW (in: hFindFile=0x381d40, lpFindFileData=0x31e38c | out: lpFindFileData=0x31e38c*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xb264df80, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0x85442390, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x85442390, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="silmbjec.default", cAlternateFileName="SILMBJ~1.DEF")) returned 1 [0084.632] FindNextFileW (in: hFindFile=0x381d40, lpFindFileData=0x31e38c | out: lpFindFileData=0x31e38c*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0084.632] FindClose (in: hFindFile=0x381d40 | out: hFindFile=0x381d40) returned 1 [0084.632] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e614) returned 1 [0084.632] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e620) returned 1 [0084.632] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e5dc) returned 1 [0084.632] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\silmbjec.default", nBufferLength=0x105, lpBuffer=0x31e0e4, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\silmbjec.default", lpFilePart=0x0) returned 0x57 [0084.632] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\", nBufferLength=0x105, lpBuffer=0x31e0b8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\", lpFilePart=0x0) returned 0x58 [0084.632] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\*", lpFindFileData=0x31e304 | out: lpFindFileData=0x31e304*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xb264df80, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0x85442390, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x85442390, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x381d40 [0084.634] FindNextFileW (in: hFindFile=0x381d40, lpFindFileData=0x31e314 | out: lpFindFileData=0x31e314*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xb264df80, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0x85442390, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x85442390, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0084.636] FindNextFileW (in: hFindFile=0x381d40, lpFindFileData=0x31e314 | out: lpFindFileData=0x31e314*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xb76a6d10, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xb76a6d10, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0xb76a6d10, ftLastWriteTime.dwHighDateTime=0x1d2dda4, nFileSizeHigh=0x0, nFileSizeLow=0x18, dwReserved0=0x0, dwReserved1=0x0, cFileName="addons.json", cAlternateFileName="ADDONS~1.JSO")) returned 1 [0084.636] FindNextFileW (in: hFindFile=0x381d40, lpFindFileData=0x31e314 | out: lpFindFileData=0x31e314*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xb5233c30, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0x8503de70, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x8503de70, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="bookmarkbackups", cAlternateFileName="BOOKMA~1")) returned 1 [0084.636] FindNextFileW (in: hFindFile=0x381d40, lpFindFileData=0x31e314 | out: lpFindFileData=0x31e314*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xb47c9bf0, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xb47c9bf0, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0x853f60d0, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x10000, dwReserved0=0x0, dwReserved1=0x0, cFileName="cert8.db", cAlternateFileName="")) returned 1 [0084.636] FindNextFileW (in: hFindFile=0x381d40, lpFindFileData=0x31e314 | out: lpFindFileData=0x31e314*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xb26740e0, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xb26740e0, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0x80696ec0, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0xce, dwReserved0=0x0, dwReserved1=0x0, cFileName="compatibility.ini", cAlternateFileName="COMPAT~1.INI")) returned 1 [0084.636] FindNextFileW (in: hFindFile=0x381d40, lpFindFileData=0x31e314 | out: lpFindFileData=0x31e314*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xb5e8ce50, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xb5e8ce50, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0xb639bd10, ftLastWriteTime.dwHighDateTime=0x1d2dda4, nFileSizeHigh=0x0, nFileSizeLow=0x38000, dwReserved0=0x0, dwReserved1=0x0, cFileName="content-prefs.sqlite", cAlternateFileName="CONTEN~1.SQL")) returned 1 [0084.636] FindNextFileW (in: hFindFile=0x381d40, lpFindFileData=0x31e314 | out: lpFindFileData=0x31e314*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xb5ad4bf0, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xb5ad4bf0, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0x83256a10, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x80000, dwReserved0=0x0, dwReserved1=0x0, cFileName="cookies.sqlite", cAlternateFileName="COOKIE~1.SQL")) returned 1 [0084.636] FindNextFileW (in: hFindFile=0x381d40, lpFindFileData=0x31e314 | out: lpFindFileData=0x31e314*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xbc374ed0, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xbc374ed0, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0xbc555e20, ftLastWriteTime.dwHighDateTime=0x1d2dda4, nFileSizeHigh=0x0, nFileSizeLow=0x18000, dwReserved0=0x0, dwReserved1=0x0, cFileName="downloads.sqlite", cAlternateFileName="DOWNLO~1.SQL")) returned 1 [0084.636] FindNextFileW (in: hFindFile=0x381d40, lpFindFileData=0x31e314 | out: lpFindFileData=0x31e314*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xb4b81e50, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xb4b81e50, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0xb4b81e50, ftLastWriteTime.dwHighDateTime=0x1d2dda4, nFileSizeHigh=0x0, nFileSizeLow=0x8d, dwReserved0=0x0, dwReserved1=0x0, cFileName="extensions.ini", cAlternateFileName="EXTENS~1.INI")) returned 1 [0084.637] FindNextFileW (in: hFindFile=0x381d40, lpFindFileData=0x31e314 | out: lpFindFileData=0x31e314*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xb45b48b0, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xb45b48b0, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0xb4b0fa30, ftLastWriteTime.dwHighDateTime=0x1d2dda4, nFileSizeHigh=0x0, nFileSizeLow=0x70000, dwReserved0=0x0, dwReserved1=0x0, cFileName="extensions.sqlite", cAlternateFileName="EXTENS~1.SQL")) returned 1 [0084.637] FindNextFileW (in: hFindFile=0x381d40, lpFindFileData=0x31e314 | out: lpFindFileData=0x31e314*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xb6ff4f30, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xb701b090, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0xb701b090, ftLastWriteTime.dwHighDateTime=0x1d2dda4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="indexedDB", cAlternateFileName="INDEXE~1")) returned 1 [0084.637] FindNextFileW (in: hFindFile=0x381d40, lpFindFileData=0x31e314 | out: lpFindFileData=0x31e314*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xb4815eb0, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xb4815eb0, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0x853f60d0, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x4000, dwReserved0=0x0, dwReserved1=0x0, cFileName="key3.db", cAlternateFileName="")) returned 1 [0084.637] FindNextFileW (in: hFindFile=0x381d40, lpFindFileData=0x31e314 | out: lpFindFileData=0x31e314*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x850d63f0, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x850d63f0, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x850d63f0, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x501, dwReserved0=0x0, dwReserved1=0x0, cFileName="localstore.rdf", cAlternateFileName="LOCALS~1.RDF")) returned 1 [0084.637] FindNextFileW (in: hFindFile=0x381d40, lpFindFileData=0x31e314 | out: lpFindFileData=0x31e314*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xb6518ad0, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xb6518ad0, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0x85572e90, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x39, dwReserved0=0x0, dwReserved1=0x0, cFileName="marionette.log", cAlternateFileName="MARION~1.LOG")) returned 1 [0084.637] FindNextFileW (in: hFindFile=0x381d40, lpFindFileData=0x31e314 | out: lpFindFileData=0x31e314*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xb50b6e70, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xb5175550, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0xb5175550, ftLastWriteTime.dwHighDateTime=0x1d2dda4, nFileSizeHigh=0x0, nFileSizeLow=0xef3, dwReserved0=0x0, dwReserved1=0x0, cFileName="mimeTypes.rdf", cAlternateFileName="MIMETY~1.RDF")) returned 1 [0084.637] FindNextFileW (in: hFindFile=0x381d40, lpFindFileData=0x31e314 | out: lpFindFileData=0x31e314*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xb26740e0, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xb26740e0, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0xb26740e0, ftLastWriteTime.dwHighDateTime=0x1d2dda4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="minidumps", cAlternateFileName="MINIDU~1")) returned 1 [0084.637] FindNextFileW (in: hFindFile=0x381d40, lpFindFileData=0x31e314 | out: lpFindFileData=0x31e314*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xb26740e0, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xb26740e0, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0x80696ec0, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="parent.lock", cAlternateFileName="PARENT~1.LOC")) returned 1 [0084.638] FindNextFileW (in: hFindFile=0x381d40, lpFindFileData=0x31e314 | out: lpFindFileData=0x31e314*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xb43eb830, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xb43eb830, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0xc3b3f6e0, ftLastWriteTime.dwHighDateTime=0x1d2dda4, nFileSizeHigh=0x0, nFileSizeLow=0x10000, dwReserved0=0x0, dwReserved1=0x0, cFileName="permissions.sqlite", cAlternateFileName="PERMIS~1.SQL")) returned 1 [0084.638] FindNextFileW (in: hFindFile=0x381d40, lpFindFileData=0x31e314 | out: lpFindFileData=0x31e314*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xb4c1a3d0, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xb4c1a3d0, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0x82b58970, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0xa00000, dwReserved0=0x0, dwReserved1=0x0, cFileName="places.sqlite", cAlternateFileName="PLACES~1.SQL")) returned 1 [0084.638] FindNextFileW (in: hFindFile=0x381d40, lpFindFileData=0x31e314 | out: lpFindFileData=0x31e314*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x81fbde30, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x81fbde30, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x81fbde30, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0xe14, dwReserved0=0x0, dwReserved1=0x0, cFileName="pluginreg.dat", cAlternateFileName="PLUGIN~1.DAT")) returned 1 [0084.638] FindNextFileW (in: hFindFile=0x381d40, lpFindFileData=0x31e314 | out: lpFindFileData=0x31e314*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x84c85c10, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x853f60d0, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x12069be0, ftLastWriteTime.dwHighDateTime=0x1d4d597, nFileSizeHigh=0x0, nFileSizeLow=0xfde, dwReserved0=0x0, dwReserved1=0x0, cFileName="prefs.js", cAlternateFileName="")) returned 1 [0084.638] FindNextFileW (in: hFindFile=0x381d40, lpFindFileData=0x31e314 | out: lpFindFileData=0x31e314*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xb6fa8c70, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xb6fa8c70, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0xb6fa8c70, ftLastWriteTime.dwHighDateTime=0x1d2dda4, nFileSizeHigh=0x0, nFileSizeLow=0x4183, dwReserved0=0x0, dwReserved1=0x0, cFileName="search.json", cAlternateFileName="SEARCH~1.JSO")) returned 1 [0084.638] FindNextFileW (in: hFindFile=0x381d40, lpFindFileData=0x31e314 | out: lpFindFileData=0x31e314*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xb477d930, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xb477d930, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0xb47c9bf0, ftLastWriteTime.dwHighDateTime=0x1d2dda4, nFileSizeHigh=0x0, nFileSizeLow=0x4000, dwReserved0=0x0, dwReserved1=0x0, cFileName="secmod.db", cAlternateFileName="")) returned 1 [0084.638] FindNextFileW (in: hFindFile=0x381d40, lpFindFileData=0x31e314 | out: lpFindFileData=0x31e314*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xb82fff30, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xc3787480, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0xc3787480, ftLastWriteTime.dwHighDateTime=0x1d2dda4, nFileSizeHigh=0x0, nFileSizeLow=0x3d6, dwReserved0=0x0, dwReserved1=0x0, cFileName="sessionstore.bak", cAlternateFileName="SESSIO~1.BAK")) returned 1 [0084.638] FindNextFileW (in: hFindFile=0x381d40, lpFindFileData=0x31e314 | out: lpFindFileData=0x31e314*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xb82fff30, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0x84e029d0, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x84e029d0, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0xbc5, dwReserved0=0x0, dwReserved1=0x0, cFileName="sessionstore.js", cAlternateFileName="SESSIO~1.JS")) returned 1 [0084.639] FindNextFileW (in: hFindFile=0x381d40, lpFindFileData=0x31e314 | out: lpFindFileData=0x31e314*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xb66495d0, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xb66495d0, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0xb6f36850, ftLastWriteTime.dwHighDateTime=0x1d2dda4, nFileSizeHigh=0x0, nFileSizeLow=0x50000, dwReserved0=0x0, dwReserved1=0x0, cFileName="signons.sqlite", cAlternateFileName="SIGNON~1.SQL")) returned 1 [0084.639] FindNextFileW (in: hFindFile=0x381d40, lpFindFileData=0x31e314 | out: lpFindFileData=0x31e314*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xb26740e0, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xb26740e0, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0xb26740e0, ftLastWriteTime.dwHighDateTime=0x1d2dda4, nFileSizeHigh=0x0, nFileSizeLow=0x1d, dwReserved0=0x0, dwReserved1=0x0, cFileName="times.json", cAlternateFileName="TIMES~1.JSO")) returned 1 [0084.639] FindNextFileW (in: hFindFile=0x381d40, lpFindFileData=0x31e314 | out: lpFindFileData=0x31e314*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xb4f60210, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0x80d71510, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x80d71510, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="webapps", cAlternateFileName="")) returned 1 [0084.639] FindNextFileW (in: hFindFile=0x381d40, lpFindFileData=0x31e314 | out: lpFindFileData=0x31e314*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xb66495d0, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xb66495d0, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0xc3a63b40, ftLastWriteTime.dwHighDateTime=0x1d2dda4, nFileSizeHigh=0x0, nFileSizeLow=0x18000, dwReserved0=0x0, dwReserved1=0x0, cFileName="webappsstore.sqlite", cAlternateFileName="WEBAPP~1.SQL")) returned 1 [0084.639] FindNextFileW (in: hFindFile=0x381d40, lpFindFileData=0x31e314 | out: lpFindFileData=0x31e314*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0084.639] FindClose (in: hFindFile=0x381d40 | out: hFindFile=0x381d40) returned 1 [0084.640] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e59c) returned 1 [0084.640] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e5a8) returned 1 [0084.640] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e5dc) returned 1 [0084.640] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\silmbjec.default", nBufferLength=0x105, lpBuffer=0x31e0e4, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\silmbjec.default", lpFilePart=0x0) returned 0x57 [0084.640] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\", nBufferLength=0x105, lpBuffer=0x31e0b8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\", lpFilePart=0x0) returned 0x58 [0084.640] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\*", lpFindFileData=0x31e304 | out: lpFindFileData=0x31e304*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xb264df80, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0x85442390, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x85442390, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x381d40 [0084.641] FindNextFileW (in: hFindFile=0x381d40, lpFindFileData=0x31e314 | out: lpFindFileData=0x31e314*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xb264df80, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0x85442390, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x85442390, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0084.641] FindNextFileW (in: hFindFile=0x381d40, lpFindFileData=0x31e314 | out: lpFindFileData=0x31e314*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xb76a6d10, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xb76a6d10, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0xb76a6d10, ftLastWriteTime.dwHighDateTime=0x1d2dda4, nFileSizeHigh=0x0, nFileSizeLow=0x18, dwReserved0=0x0, dwReserved1=0x0, cFileName="addons.json", cAlternateFileName="ADDONS~1.JSO")) returned 1 [0084.641] FindNextFileW (in: hFindFile=0x381d40, lpFindFileData=0x31e314 | out: lpFindFileData=0x31e314*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xb5233c30, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0x8503de70, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x8503de70, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="bookmarkbackups", cAlternateFileName="BOOKMA~1")) returned 1 [0084.641] FindNextFileW (in: hFindFile=0x381d40, lpFindFileData=0x31e314 | out: lpFindFileData=0x31e314*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xb47c9bf0, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xb47c9bf0, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0x853f60d0, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x10000, dwReserved0=0x0, dwReserved1=0x0, cFileName="cert8.db", cAlternateFileName="")) returned 1 [0084.641] FindNextFileW (in: hFindFile=0x381d40, lpFindFileData=0x31e314 | out: lpFindFileData=0x31e314*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xb26740e0, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xb26740e0, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0x80696ec0, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0xce, dwReserved0=0x0, dwReserved1=0x0, cFileName="compatibility.ini", cAlternateFileName="COMPAT~1.INI")) returned 1 [0084.642] FindNextFileW (in: hFindFile=0x381d40, lpFindFileData=0x31e314 | out: lpFindFileData=0x31e314*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xb5e8ce50, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xb5e8ce50, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0xb639bd10, ftLastWriteTime.dwHighDateTime=0x1d2dda4, nFileSizeHigh=0x0, nFileSizeLow=0x38000, dwReserved0=0x0, dwReserved1=0x0, cFileName="content-prefs.sqlite", cAlternateFileName="CONTEN~1.SQL")) returned 1 [0084.642] FindNextFileW (in: hFindFile=0x381d40, lpFindFileData=0x31e314 | out: lpFindFileData=0x31e314*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xb5ad4bf0, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xb5ad4bf0, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0x83256a10, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x80000, dwReserved0=0x0, dwReserved1=0x0, cFileName="cookies.sqlite", cAlternateFileName="COOKIE~1.SQL")) returned 1 [0084.642] FindNextFileW (in: hFindFile=0x381d40, lpFindFileData=0x31e314 | out: lpFindFileData=0x31e314*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xbc374ed0, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xbc374ed0, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0xbc555e20, ftLastWriteTime.dwHighDateTime=0x1d2dda4, nFileSizeHigh=0x0, nFileSizeLow=0x18000, dwReserved0=0x0, dwReserved1=0x0, cFileName="downloads.sqlite", cAlternateFileName="DOWNLO~1.SQL")) returned 1 [0084.642] FindNextFileW (in: hFindFile=0x381d40, lpFindFileData=0x31e314 | out: lpFindFileData=0x31e314*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xb4b81e50, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xb4b81e50, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0xb4b81e50, ftLastWriteTime.dwHighDateTime=0x1d2dda4, nFileSizeHigh=0x0, nFileSizeLow=0x8d, dwReserved0=0x0, dwReserved1=0x0, cFileName="extensions.ini", cAlternateFileName="EXTENS~1.INI")) returned 1 [0084.642] FindNextFileW (in: hFindFile=0x381d40, lpFindFileData=0x31e314 | out: lpFindFileData=0x31e314*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xb45b48b0, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xb45b48b0, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0xb4b0fa30, ftLastWriteTime.dwHighDateTime=0x1d2dda4, nFileSizeHigh=0x0, nFileSizeLow=0x70000, dwReserved0=0x0, dwReserved1=0x0, cFileName="extensions.sqlite", cAlternateFileName="EXTENS~1.SQL")) returned 1 [0084.642] FindNextFileW (in: hFindFile=0x381d40, lpFindFileData=0x31e314 | out: lpFindFileData=0x31e314*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xb6ff4f30, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xb701b090, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0xb701b090, ftLastWriteTime.dwHighDateTime=0x1d2dda4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="indexedDB", cAlternateFileName="INDEXE~1")) returned 1 [0084.643] FindNextFileW (in: hFindFile=0x381d40, lpFindFileData=0x31e314 | out: lpFindFileData=0x31e314*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xb4815eb0, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xb4815eb0, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0x853f60d0, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x4000, dwReserved0=0x0, dwReserved1=0x0, cFileName="key3.db", cAlternateFileName="")) returned 1 [0084.643] FindNextFileW (in: hFindFile=0x381d40, lpFindFileData=0x31e314 | out: lpFindFileData=0x31e314*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x850d63f0, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x850d63f0, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x850d63f0, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x501, dwReserved0=0x0, dwReserved1=0x0, cFileName="localstore.rdf", cAlternateFileName="LOCALS~1.RDF")) returned 1 [0084.643] FindNextFileW (in: hFindFile=0x381d40, lpFindFileData=0x31e314 | out: lpFindFileData=0x31e314*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xb6518ad0, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xb6518ad0, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0x85572e90, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x39, dwReserved0=0x0, dwReserved1=0x0, cFileName="marionette.log", cAlternateFileName="MARION~1.LOG")) returned 1 [0084.643] FindNextFileW (in: hFindFile=0x381d40, lpFindFileData=0x31e314 | out: lpFindFileData=0x31e314*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xb50b6e70, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xb5175550, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0xb5175550, ftLastWriteTime.dwHighDateTime=0x1d2dda4, nFileSizeHigh=0x0, nFileSizeLow=0xef3, dwReserved0=0x0, dwReserved1=0x0, cFileName="mimeTypes.rdf", cAlternateFileName="MIMETY~1.RDF")) returned 1 [0084.643] FindNextFileW (in: hFindFile=0x381d40, lpFindFileData=0x31e314 | out: lpFindFileData=0x31e314*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xb26740e0, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xb26740e0, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0xb26740e0, ftLastWriteTime.dwHighDateTime=0x1d2dda4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="minidumps", cAlternateFileName="MINIDU~1")) returned 1 [0084.643] FindNextFileW (in: hFindFile=0x381d40, lpFindFileData=0x31e314 | out: lpFindFileData=0x31e314*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xb26740e0, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xb26740e0, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0x80696ec0, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="parent.lock", cAlternateFileName="PARENT~1.LOC")) returned 1 [0084.643] FindNextFileW (in: hFindFile=0x381d40, lpFindFileData=0x31e314 | out: lpFindFileData=0x31e314*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xb43eb830, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xb43eb830, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0xc3b3f6e0, ftLastWriteTime.dwHighDateTime=0x1d2dda4, nFileSizeHigh=0x0, nFileSizeLow=0x10000, dwReserved0=0x0, dwReserved1=0x0, cFileName="permissions.sqlite", cAlternateFileName="PERMIS~1.SQL")) returned 1 [0084.644] FindNextFileW (in: hFindFile=0x381d40, lpFindFileData=0x31e314 | out: lpFindFileData=0x31e314*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xb4c1a3d0, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xb4c1a3d0, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0x82b58970, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0xa00000, dwReserved0=0x0, dwReserved1=0x0, cFileName="places.sqlite", cAlternateFileName="PLACES~1.SQL")) returned 1 [0084.644] FindNextFileW (in: hFindFile=0x381d40, lpFindFileData=0x31e314 | out: lpFindFileData=0x31e314*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x81fbde30, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x81fbde30, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x81fbde30, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0xe14, dwReserved0=0x0, dwReserved1=0x0, cFileName="pluginreg.dat", cAlternateFileName="PLUGIN~1.DAT")) returned 1 [0084.644] FindNextFileW (in: hFindFile=0x381d40, lpFindFileData=0x31e314 | out: lpFindFileData=0x31e314*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x84c85c10, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x853f60d0, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x12069be0, ftLastWriteTime.dwHighDateTime=0x1d4d597, nFileSizeHigh=0x0, nFileSizeLow=0xfde, dwReserved0=0x0, dwReserved1=0x0, cFileName="prefs.js", cAlternateFileName="")) returned 1 [0084.644] FindNextFileW (in: hFindFile=0x381d40, lpFindFileData=0x31e314 | out: lpFindFileData=0x31e314*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xb6fa8c70, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xb6fa8c70, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0xb6fa8c70, ftLastWriteTime.dwHighDateTime=0x1d2dda4, nFileSizeHigh=0x0, nFileSizeLow=0x4183, dwReserved0=0x0, dwReserved1=0x0, cFileName="search.json", cAlternateFileName="SEARCH~1.JSO")) returned 1 [0084.644] FindNextFileW (in: hFindFile=0x381d40, lpFindFileData=0x31e314 | out: lpFindFileData=0x31e314*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xb477d930, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xb477d930, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0xb47c9bf0, ftLastWriteTime.dwHighDateTime=0x1d2dda4, nFileSizeHigh=0x0, nFileSizeLow=0x4000, dwReserved0=0x0, dwReserved1=0x0, cFileName="secmod.db", cAlternateFileName="")) returned 1 [0084.644] FindNextFileW (in: hFindFile=0x381d40, lpFindFileData=0x31e314 | out: lpFindFileData=0x31e314*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xb82fff30, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xc3787480, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0xc3787480, ftLastWriteTime.dwHighDateTime=0x1d2dda4, nFileSizeHigh=0x0, nFileSizeLow=0x3d6, dwReserved0=0x0, dwReserved1=0x0, cFileName="sessionstore.bak", cAlternateFileName="SESSIO~1.BAK")) returned 1 [0084.644] FindNextFileW (in: hFindFile=0x381d40, lpFindFileData=0x31e314 | out: lpFindFileData=0x31e314*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xb82fff30, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0x84e029d0, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x84e029d0, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0xbc5, dwReserved0=0x0, dwReserved1=0x0, cFileName="sessionstore.js", cAlternateFileName="SESSIO~1.JS")) returned 1 [0084.645] FindNextFileW (in: hFindFile=0x381d40, lpFindFileData=0x31e314 | out: lpFindFileData=0x31e314*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xb66495d0, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xb66495d0, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0xb6f36850, ftLastWriteTime.dwHighDateTime=0x1d2dda4, nFileSizeHigh=0x0, nFileSizeLow=0x50000, dwReserved0=0x0, dwReserved1=0x0, cFileName="signons.sqlite", cAlternateFileName="SIGNON~1.SQL")) returned 1 [0084.645] FindNextFileW (in: hFindFile=0x381d40, lpFindFileData=0x31e314 | out: lpFindFileData=0x31e314*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xb26740e0, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xb26740e0, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0xb26740e0, ftLastWriteTime.dwHighDateTime=0x1d2dda4, nFileSizeHigh=0x0, nFileSizeLow=0x1d, dwReserved0=0x0, dwReserved1=0x0, cFileName="times.json", cAlternateFileName="TIMES~1.JSO")) returned 1 [0084.645] FindNextFileW (in: hFindFile=0x381d40, lpFindFileData=0x31e314 | out: lpFindFileData=0x31e314*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xb4f60210, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0x80d71510, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x80d71510, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="webapps", cAlternateFileName="")) returned 1 [0084.645] FindNextFileW (in: hFindFile=0x381d40, lpFindFileData=0x31e314 | out: lpFindFileData=0x31e314*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xb66495d0, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xb66495d0, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0xc3a63b40, ftLastWriteTime.dwHighDateTime=0x1d2dda4, nFileSizeHigh=0x0, nFileSizeLow=0x18000, dwReserved0=0x0, dwReserved1=0x0, cFileName="webappsstore.sqlite", cAlternateFileName="WEBAPP~1.SQL")) returned 1 [0084.645] FindNextFileW (in: hFindFile=0x381d40, lpFindFileData=0x31e314 | out: lpFindFileData=0x31e314*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xb66495d0, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xb66495d0, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0xc3a63b40, ftLastWriteTime.dwHighDateTime=0x1d2dda4, nFileSizeHigh=0x0, nFileSizeLow=0x18000, dwReserved0=0x0, dwReserved1=0x0, cFileName="webappsstore.sqlite", cAlternateFileName="WEBAPP~1.SQL")) returned 0 [0084.645] FindClose (in: hFindFile=0x381d40 | out: hFindFile=0x381d40) returned 1 [0084.646] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e59c) returned 1 [0084.646] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e5a8) returned 1 [0084.646] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e564) returned 1 [0084.646] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\bookmarkbackups", nBufferLength=0x105, lpBuffer=0x31e06c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\bookmarkbackups", lpFilePart=0x0) returned 0x67 [0084.646] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\bookmarkbackups\\", nBufferLength=0x105, lpBuffer=0x31e040, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\bookmarkbackups\\", lpFilePart=0x0) returned 0x68 [0084.646] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\bookmarkbackups\\*", lpFindFileData=0x31e28c | out: lpFindFileData=0x31e28c*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xb5233c30, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0x8503de70, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x8503de70, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x381d40 [0084.649] FindNextFileW (in: hFindFile=0x381d40, lpFindFileData=0x31e29c | out: lpFindFileData=0x31e29c*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xb5233c30, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0x8503de70, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x8503de70, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0084.649] FindNextFileW (in: hFindFile=0x381d40, lpFindFileData=0x31e29c | out: lpFindFileData=0x31e29c*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xc37c9330, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xc37c9330, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0xc37df2c0, ftLastWriteTime.dwHighDateTime=0x1d2dda4, nFileSizeHigh=0x0, nFileSizeLow=0xbdb, dwReserved0=0x0, dwReserved1=0x0, cFileName="bookmarks-2017-06-05_5.json", cAlternateFileName="BOOKMA~1.JSO")) returned 1 [0084.650] FindNextFileW (in: hFindFile=0x381d40, lpFindFileData=0x31e29c | out: lpFindFileData=0x31e29c*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x85017d10, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x85017d10, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x85017d10, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0xbdb, dwReserved0=0x0, dwReserved1=0x0, cFileName="bookmarks-2017-06-16_5.json", cAlternateFileName="BOOKMA~2.JSO")) returned 1 [0084.650] FindNextFileW (in: hFindFile=0x381d40, lpFindFileData=0x31e29c | out: lpFindFileData=0x31e29c*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0084.650] FindClose (in: hFindFile=0x381d40 | out: hFindFile=0x381d40) returned 1 [0084.650] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e524) returned 1 [0084.650] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e530) returned 1 [0084.650] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e564) returned 1 [0084.651] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\bookmarkbackups", nBufferLength=0x105, lpBuffer=0x31e06c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\bookmarkbackups", lpFilePart=0x0) returned 0x67 [0084.651] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\bookmarkbackups\\", nBufferLength=0x105, lpBuffer=0x31e040, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\bookmarkbackups\\", lpFilePart=0x0) returned 0x68 [0084.651] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\bookmarkbackups\\*", lpFindFileData=0x31e28c | out: lpFindFileData=0x31e28c*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xb5233c30, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0x8503de70, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x8503de70, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x381d40 [0084.651] FindNextFileW (in: hFindFile=0x381d40, lpFindFileData=0x31e29c | out: lpFindFileData=0x31e29c*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xb5233c30, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0x8503de70, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x8503de70, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0084.652] FindNextFileW (in: hFindFile=0x381d40, lpFindFileData=0x31e29c | out: lpFindFileData=0x31e29c*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xc37c9330, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xc37c9330, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0xc37df2c0, ftLastWriteTime.dwHighDateTime=0x1d2dda4, nFileSizeHigh=0x0, nFileSizeLow=0xbdb, dwReserved0=0x0, dwReserved1=0x0, cFileName="bookmarks-2017-06-05_5.json", cAlternateFileName="BOOKMA~1.JSO")) returned 1 [0084.652] FindNextFileW (in: hFindFile=0x381d40, lpFindFileData=0x31e29c | out: lpFindFileData=0x31e29c*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x85017d10, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x85017d10, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x85017d10, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0xbdb, dwReserved0=0x0, dwReserved1=0x0, cFileName="bookmarks-2017-06-16_5.json", cAlternateFileName="BOOKMA~2.JSO")) returned 1 [0084.652] FindNextFileW (in: hFindFile=0x381d40, lpFindFileData=0x31e29c | out: lpFindFileData=0x31e29c*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x85017d10, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x85017d10, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x85017d10, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0xbdb, dwReserved0=0x0, dwReserved1=0x0, cFileName="bookmarks-2017-06-16_5.json", cAlternateFileName="BOOKMA~2.JSO")) returned 0 [0084.652] FindClose (in: hFindFile=0x381d40 | out: hFindFile=0x381d40) returned 1 [0084.653] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e524) returned 1 [0084.653] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e530) returned 1 [0084.653] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e564) returned 1 [0084.653] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\indexedDB", nBufferLength=0x105, lpBuffer=0x31e06c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\indexedDB", lpFilePart=0x0) returned 0x61 [0084.653] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\indexedDB\\", nBufferLength=0x105, lpBuffer=0x31e040, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\indexedDB\\", lpFilePart=0x0) returned 0x62 [0084.653] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\indexedDB\\*", lpFindFileData=0x31e28c | out: lpFindFileData=0x31e28c*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xb6ff4f30, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xb701b090, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0xb701b090, ftLastWriteTime.dwHighDateTime=0x1d2dda4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x381d40 [0084.654] FindNextFileW (in: hFindFile=0x381d40, lpFindFileData=0x31e29c | out: lpFindFileData=0x31e29c*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xb6ff4f30, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xb701b090, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0xb701b090, ftLastWriteTime.dwHighDateTime=0x1d2dda4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0084.654] FindNextFileW (in: hFindFile=0x381d40, lpFindFileData=0x31e29c | out: lpFindFileData=0x31e29c*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xb701b090, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xb701b090, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0xb701b090, ftLastWriteTime.dwHighDateTime=0x1d2dda4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="moz-safe-about+home", cAlternateFileName="MOZ-SA~1")) returned 1 [0084.654] FindNextFileW (in: hFindFile=0x381d40, lpFindFileData=0x31e29c | out: lpFindFileData=0x31e29c*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xb701b090, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xb701b090, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0xb701b090, ftLastWriteTime.dwHighDateTime=0x1d2dda4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="moz-safe-about+home", cAlternateFileName="MOZ-SA~1")) returned 0 [0084.654] FindClose (in: hFindFile=0x381d40 | out: hFindFile=0x381d40) returned 1 [0084.654] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e524) returned 1 [0084.654] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e530) returned 1 [0084.654] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e564) returned 1 [0084.654] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\indexedDB", nBufferLength=0x105, lpBuffer=0x31e06c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\indexedDB", lpFilePart=0x0) returned 0x61 [0084.654] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\indexedDB\\", nBufferLength=0x105, lpBuffer=0x31e040, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\indexedDB\\", lpFilePart=0x0) returned 0x62 [0084.654] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\indexedDB\\*", lpFindFileData=0x31e28c | out: lpFindFileData=0x31e28c*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xb6ff4f30, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xb701b090, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0xb701b090, ftLastWriteTime.dwHighDateTime=0x1d2dda4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x381d40 [0084.655] FindNextFileW (in: hFindFile=0x381d40, lpFindFileData=0x31e29c | out: lpFindFileData=0x31e29c*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xb6ff4f30, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xb701b090, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0xb701b090, ftLastWriteTime.dwHighDateTime=0x1d2dda4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0084.655] FindNextFileW (in: hFindFile=0x381d40, lpFindFileData=0x31e29c | out: lpFindFileData=0x31e29c*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xb701b090, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xb701b090, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0xb701b090, ftLastWriteTime.dwHighDateTime=0x1d2dda4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="moz-safe-about+home", cAlternateFileName="MOZ-SA~1")) returned 1 [0084.655] FindNextFileW (in: hFindFile=0x381d40, lpFindFileData=0x31e29c | out: lpFindFileData=0x31e29c*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0084.656] FindClose (in: hFindFile=0x381d40 | out: hFindFile=0x381d40) returned 1 [0084.656] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e524) returned 1 [0084.656] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e530) returned 1 [0084.656] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e4ec) returned 1 [0084.656] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\indexedDB\\moz-safe-about+home", nBufferLength=0x105, lpBuffer=0x31dff4, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\indexedDB\\moz-safe-about+home", lpFilePart=0x0) returned 0x75 [0084.656] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\indexedDB\\moz-safe-about+home\\", nBufferLength=0x105, lpBuffer=0x31dfc8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\indexedDB\\moz-safe-about+home\\", lpFilePart=0x0) returned 0x76 [0084.656] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\indexedDB\\moz-safe-about+home\\*", lpFindFileData=0x31e214 | out: lpFindFileData=0x31e214*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xb701b090, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xb701b090, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0xb701b090, ftLastWriteTime.dwHighDateTime=0x1d2dda4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x381d40 [0084.657] FindNextFileW (in: hFindFile=0x381d40, lpFindFileData=0x31e224 | out: lpFindFileData=0x31e224*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xb701b090, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xb701b090, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0xb701b090, ftLastWriteTime.dwHighDateTime=0x1d2dda4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0084.657] FindNextFileW (in: hFindFile=0x381d40, lpFindFileData=0x31e224 | out: lpFindFileData=0x31e224*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xb701b090, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xb701b090, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0xb701b090, ftLastWriteTime.dwHighDateTime=0x1d2dda4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".metadata", cAlternateFileName="METADA~1")) returned 1 [0084.657] FindNextFileW (in: hFindFile=0x381d40, lpFindFileData=0x31e224 | out: lpFindFileData=0x31e224*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xb701b090, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xb8110d50, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0xb8110d50, ftLastWriteTime.dwHighDateTime=0x1d2dda4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="idb", cAlternateFileName="")) returned 1 [0084.657] FindNextFileW (in: hFindFile=0x381d40, lpFindFileData=0x31e224 | out: lpFindFileData=0x31e224*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xb701b090, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xb8110d50, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0xb8110d50, ftLastWriteTime.dwHighDateTime=0x1d2dda4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="idb", cAlternateFileName="")) returned 0 [0084.658] FindClose (in: hFindFile=0x381d40 | out: hFindFile=0x381d40) returned 1 [0084.658] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e4ac) returned 1 [0084.658] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e4b8) returned 1 [0084.658] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e4ec) returned 1 [0084.658] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\indexedDB\\moz-safe-about+home", nBufferLength=0x105, lpBuffer=0x31dff4, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\indexedDB\\moz-safe-about+home", lpFilePart=0x0) returned 0x75 [0084.658] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\indexedDB\\moz-safe-about+home\\", nBufferLength=0x105, lpBuffer=0x31dfc8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\indexedDB\\moz-safe-about+home\\", lpFilePart=0x0) returned 0x76 [0084.658] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\indexedDB\\moz-safe-about+home\\*", lpFindFileData=0x31e214 | out: lpFindFileData=0x31e214*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xb701b090, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xb701b090, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0xb701b090, ftLastWriteTime.dwHighDateTime=0x1d2dda4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x381d40 [0084.658] FindNextFileW (in: hFindFile=0x381d40, lpFindFileData=0x31e224 | out: lpFindFileData=0x31e224*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xb701b090, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xb701b090, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0xb701b090, ftLastWriteTime.dwHighDateTime=0x1d2dda4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0084.658] FindNextFileW (in: hFindFile=0x381d40, lpFindFileData=0x31e224 | out: lpFindFileData=0x31e224*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xb701b090, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xb701b090, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0xb701b090, ftLastWriteTime.dwHighDateTime=0x1d2dda4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".metadata", cAlternateFileName="METADA~1")) returned 1 [0084.658] FindNextFileW (in: hFindFile=0x381d40, lpFindFileData=0x31e224 | out: lpFindFileData=0x31e224*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xb701b090, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xb8110d50, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0xb8110d50, ftLastWriteTime.dwHighDateTime=0x1d2dda4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="idb", cAlternateFileName="")) returned 1 [0084.658] FindNextFileW (in: hFindFile=0x381d40, lpFindFileData=0x31e224 | out: lpFindFileData=0x31e224*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0084.658] FindClose (in: hFindFile=0x381d40 | out: hFindFile=0x381d40) returned 1 [0084.658] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e4ac) returned 1 [0084.658] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e4b8) returned 1 [0084.658] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e474) returned 1 [0084.658] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\indexedDB\\moz-safe-about+home\\idb", nBufferLength=0x105, lpBuffer=0x31df7c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\indexedDB\\moz-safe-about+home\\idb", lpFilePart=0x0) returned 0x79 [0084.658] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\indexedDB\\moz-safe-about+home\\idb\\", nBufferLength=0x105, lpBuffer=0x31df50, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\indexedDB\\moz-safe-about+home\\idb\\", lpFilePart=0x0) returned 0x7a [0084.659] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\indexedDB\\moz-safe-about+home\\idb\\*", lpFindFileData=0x31e19c | out: lpFindFileData=0x31e19c*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xb701b090, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xb8110d50, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0xb8110d50, ftLastWriteTime.dwHighDateTime=0x1d2dda4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x381d40 [0084.660] FindNextFileW (in: hFindFile=0x381d40, lpFindFileData=0x31e1ac | out: lpFindFileData=0x31e1ac*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xb701b090, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xb8110d50, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0xb8110d50, ftLastWriteTime.dwHighDateTime=0x1d2dda4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0084.660] FindNextFileW (in: hFindFile=0x381d40, lpFindFileData=0x31e1ac | out: lpFindFileData=0x31e1ac*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xb70ff8d0, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xb70ff8d0, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0xb70ff8d0, ftLastWriteTime.dwHighDateTime=0x1d2dda4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="818200132aebmoouht", cAlternateFileName="818200~1")) returned 1 [0084.660] FindNextFileW (in: hFindFile=0x381d40, lpFindFileData=0x31e1ac | out: lpFindFileData=0x31e1ac*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xb701b090, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xb701b090, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0xb81a92d0, ftLastWriteTime.dwHighDateTime=0x1d2dda4, nFileSizeHigh=0x0, nFileSizeLow=0xa0000, dwReserved0=0x0, dwReserved1=0x0, cFileName="818200132aebmoouht.sqlite", cAlternateFileName="818200~1.SQL")) returned 1 [0084.660] FindNextFileW (in: hFindFile=0x381d40, lpFindFileData=0x31e1ac | out: lpFindFileData=0x31e1ac*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0084.660] FindClose (in: hFindFile=0x381d40 | out: hFindFile=0x381d40) returned 1 [0084.661] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e434) returned 1 [0084.661] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e440) returned 1 [0084.661] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e474) returned 1 [0084.661] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\indexedDB\\moz-safe-about+home\\idb", nBufferLength=0x105, lpBuffer=0x31df7c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\indexedDB\\moz-safe-about+home\\idb", lpFilePart=0x0) returned 0x79 [0084.661] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\indexedDB\\moz-safe-about+home\\idb\\", nBufferLength=0x105, lpBuffer=0x31df50, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\indexedDB\\moz-safe-about+home\\idb\\", lpFilePart=0x0) returned 0x7a [0084.661] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\indexedDB\\moz-safe-about+home\\idb\\*", lpFindFileData=0x31e19c | out: lpFindFileData=0x31e19c*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xb701b090, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xb8110d50, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0xb8110d50, ftLastWriteTime.dwHighDateTime=0x1d2dda4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x381d40 [0084.662] FindNextFileW (in: hFindFile=0x381d40, lpFindFileData=0x31e1ac | out: lpFindFileData=0x31e1ac*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xb701b090, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xb8110d50, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0xb8110d50, ftLastWriteTime.dwHighDateTime=0x1d2dda4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0084.662] FindNextFileW (in: hFindFile=0x381d40, lpFindFileData=0x31e1ac | out: lpFindFileData=0x31e1ac*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xb70ff8d0, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xb70ff8d0, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0xb70ff8d0, ftLastWriteTime.dwHighDateTime=0x1d2dda4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="818200132aebmoouht", cAlternateFileName="818200~1")) returned 1 [0084.663] FindNextFileW (in: hFindFile=0x381d40, lpFindFileData=0x31e1ac | out: lpFindFileData=0x31e1ac*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xb701b090, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xb701b090, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0xb81a92d0, ftLastWriteTime.dwHighDateTime=0x1d2dda4, nFileSizeHigh=0x0, nFileSizeLow=0xa0000, dwReserved0=0x0, dwReserved1=0x0, cFileName="818200132aebmoouht.sqlite", cAlternateFileName="818200~1.SQL")) returned 1 [0084.663] FindNextFileW (in: hFindFile=0x381d40, lpFindFileData=0x31e1ac | out: lpFindFileData=0x31e1ac*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xb701b090, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xb701b090, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0xb81a92d0, ftLastWriteTime.dwHighDateTime=0x1d2dda4, nFileSizeHigh=0x0, nFileSizeLow=0xa0000, dwReserved0=0x0, dwReserved1=0x0, cFileName="818200132aebmoouht.sqlite", cAlternateFileName="818200~1.SQL")) returned 0 [0084.663] FindClose (in: hFindFile=0x381d40 | out: hFindFile=0x381d40) returned 1 [0084.663] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e434) returned 1 [0084.663] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e440) returned 1 [0084.664] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e3fc) returned 1 [0084.664] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\indexedDB\\moz-safe-about+home\\idb\\818200132aebmoouht", nBufferLength=0x105, lpBuffer=0x31df04, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\indexedDB\\moz-safe-about+home\\idb\\818200132aebmoouht", lpFilePart=0x0) returned 0x8c [0084.664] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\indexedDB\\moz-safe-about+home\\idb\\818200132aebmoouht\\", nBufferLength=0x105, lpBuffer=0x31ded8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\indexedDB\\moz-safe-about+home\\idb\\818200132aebmoouht\\", lpFilePart=0x0) returned 0x8d [0084.664] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\indexedDB\\moz-safe-about+home\\idb\\818200132aebmoouht\\*", lpFindFileData=0x31e124 | out: lpFindFileData=0x31e124*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xb70ff8d0, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xb70ff8d0, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0xb70ff8d0, ftLastWriteTime.dwHighDateTime=0x1d2dda4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x381d40 [0084.665] FindNextFileW (in: hFindFile=0x381d40, lpFindFileData=0x31e134 | out: lpFindFileData=0x31e134*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xb70ff8d0, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xb70ff8d0, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0xb70ff8d0, ftLastWriteTime.dwHighDateTime=0x1d2dda4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0084.665] FindNextFileW (in: hFindFile=0x381d40, lpFindFileData=0x31e134 | out: lpFindFileData=0x31e134*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xb70ff8d0, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xb70ff8d0, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0xb70ff8d0, ftLastWriteTime.dwHighDateTime=0x1d2dda4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 0 [0084.665] FindClose (in: hFindFile=0x381d40 | out: hFindFile=0x381d40) returned 1 [0084.665] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e3bc) returned 1 [0084.665] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e3c8) returned 1 [0084.665] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e3fc) returned 1 [0084.665] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\indexedDB\\moz-safe-about+home\\idb\\818200132aebmoouht", nBufferLength=0x105, lpBuffer=0x31df04, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\indexedDB\\moz-safe-about+home\\idb\\818200132aebmoouht", lpFilePart=0x0) returned 0x8c [0084.665] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\indexedDB\\moz-safe-about+home\\idb\\818200132aebmoouht\\", nBufferLength=0x105, lpBuffer=0x31ded8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\indexedDB\\moz-safe-about+home\\idb\\818200132aebmoouht\\", lpFilePart=0x0) returned 0x8d [0084.666] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\indexedDB\\moz-safe-about+home\\idb\\818200132aebmoouht\\*", lpFindFileData=0x31e124 | out: lpFindFileData=0x31e124*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xb70ff8d0, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xb70ff8d0, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0xb70ff8d0, ftLastWriteTime.dwHighDateTime=0x1d2dda4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x381d40 [0084.666] FindNextFileW (in: hFindFile=0x381d40, lpFindFileData=0x31e134 | out: lpFindFileData=0x31e134*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xb70ff8d0, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xb70ff8d0, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0xb70ff8d0, ftLastWriteTime.dwHighDateTime=0x1d2dda4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0084.666] FindNextFileW (in: hFindFile=0x381d40, lpFindFileData=0x31e134 | out: lpFindFileData=0x31e134*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xb70ff8d0, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xb70ff8d0, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0xb70ff8d0, ftLastWriteTime.dwHighDateTime=0x1d2dda4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 0 [0084.666] FindClose (in: hFindFile=0x381d40 | out: hFindFile=0x381d40) returned 1 [0084.666] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e3bc) returned 1 [0084.666] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e3c8) returned 1 [0084.666] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e564) returned 1 [0084.667] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\minidumps", nBufferLength=0x105, lpBuffer=0x31e06c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\minidumps", lpFilePart=0x0) returned 0x61 [0084.667] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\minidumps\\", nBufferLength=0x105, lpBuffer=0x31e040, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\minidumps\\", lpFilePart=0x0) returned 0x62 [0084.667] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\minidumps\\*", lpFindFileData=0x31e28c | out: lpFindFileData=0x31e28c*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xb26740e0, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xb26740e0, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0xb26740e0, ftLastWriteTime.dwHighDateTime=0x1d2dda4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x381d40 [0084.667] FindNextFileW (in: hFindFile=0x381d40, lpFindFileData=0x31e29c | out: lpFindFileData=0x31e29c*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xb26740e0, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xb26740e0, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0xb26740e0, ftLastWriteTime.dwHighDateTime=0x1d2dda4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0084.667] FindNextFileW (in: hFindFile=0x381d40, lpFindFileData=0x31e29c | out: lpFindFileData=0x31e29c*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xb26740e0, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xb26740e0, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0xb26740e0, ftLastWriteTime.dwHighDateTime=0x1d2dda4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 0 [0084.668] FindClose (in: hFindFile=0x381d40 | out: hFindFile=0x381d40) returned 1 [0084.668] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e524) returned 1 [0084.668] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e530) returned 1 [0084.668] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e564) returned 1 [0084.668] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\minidumps", nBufferLength=0x105, lpBuffer=0x31e06c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\minidumps", lpFilePart=0x0) returned 0x61 [0084.668] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\minidumps\\", nBufferLength=0x105, lpBuffer=0x31e040, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\minidumps\\", lpFilePart=0x0) returned 0x62 [0084.668] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\minidumps\\*", lpFindFileData=0x31e28c | out: lpFindFileData=0x31e28c*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xb26740e0, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xb26740e0, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0xb26740e0, ftLastWriteTime.dwHighDateTime=0x1d2dda4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x381d40 [0084.668] FindNextFileW (in: hFindFile=0x381d40, lpFindFileData=0x31e29c | out: lpFindFileData=0x31e29c*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xb26740e0, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xb26740e0, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0xb26740e0, ftLastWriteTime.dwHighDateTime=0x1d2dda4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0084.668] FindNextFileW (in: hFindFile=0x381d40, lpFindFileData=0x31e29c | out: lpFindFileData=0x31e29c*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xb26740e0, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xb26740e0, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0xb26740e0, ftLastWriteTime.dwHighDateTime=0x1d2dda4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 0 [0084.668] FindClose (in: hFindFile=0x381d40 | out: hFindFile=0x381d40) returned 1 [0084.668] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e524) returned 1 [0084.668] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e530) returned 1 [0084.668] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e564) returned 1 [0084.668] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\webapps", nBufferLength=0x105, lpBuffer=0x31e06c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\webapps", lpFilePart=0x0) returned 0x5f [0084.668] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\webapps\\", nBufferLength=0x105, lpBuffer=0x31e040, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\webapps\\", lpFilePart=0x0) returned 0x60 [0084.668] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\webapps\\*", lpFindFileData=0x31e28c | out: lpFindFileData=0x31e28c*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xb4f60210, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0x80d71510, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x80d71510, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x381d40 [0084.669] FindNextFileW (in: hFindFile=0x381d40, lpFindFileData=0x31e29c | out: lpFindFileData=0x31e29c*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xb4f60210, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0x80d71510, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x80d71510, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0084.669] FindNextFileW (in: hFindFile=0x381d40, lpFindFileData=0x31e29c | out: lpFindFileData=0x31e29c*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x80cff0f0, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x80cff0f0, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x80cff0f0, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x2, dwReserved0=0x0, dwReserved1=0x0, cFileName="webapps.json", cAlternateFileName="WEBAPP~1.JSO")) returned 1 [0084.669] FindNextFileW (in: hFindFile=0x381d40, lpFindFileData=0x31e29c | out: lpFindFileData=0x31e29c*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0084.669] FindClose (in: hFindFile=0x381d40 | out: hFindFile=0x381d40) returned 1 [0084.669] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e524) returned 1 [0084.669] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e530) returned 1 [0084.670] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e564) returned 1 [0084.670] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\webapps", nBufferLength=0x105, lpBuffer=0x31e06c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\webapps", lpFilePart=0x0) returned 0x5f [0084.670] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\webapps\\", nBufferLength=0x105, lpBuffer=0x31e040, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\webapps\\", lpFilePart=0x0) returned 0x60 [0084.670] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\webapps\\*", lpFindFileData=0x31e28c | out: lpFindFileData=0x31e28c*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xb4f60210, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0x80d71510, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x80d71510, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x381d40 [0084.670] FindNextFileW (in: hFindFile=0x381d40, lpFindFileData=0x31e29c | out: lpFindFileData=0x31e29c*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xb4f60210, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0x80d71510, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x80d71510, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0084.670] FindNextFileW (in: hFindFile=0x381d40, lpFindFileData=0x31e29c | out: lpFindFileData=0x31e29c*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x80cff0f0, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x80cff0f0, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x80cff0f0, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x2, dwReserved0=0x0, dwReserved1=0x0, cFileName="webapps.json", cAlternateFileName="WEBAPP~1.JSO")) returned 1 [0084.670] FindNextFileW (in: hFindFile=0x381d40, lpFindFileData=0x31e29c | out: lpFindFileData=0x31e29c*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x80cff0f0, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x80cff0f0, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x80cff0f0, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x2, dwReserved0=0x0, dwReserved1=0x0, cFileName="webapps.json", cAlternateFileName="WEBAPP~1.JSO")) returned 0 [0084.670] FindClose (in: hFindFile=0x381d40 | out: hFindFile=0x381d40) returned 1 [0084.670] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e524) returned 1 [0084.670] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e530) returned 1 [0084.670] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e834) returned 1 [0084.670] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Application Data", nBufferLength=0x105, lpBuffer=0x31e33c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Application Data", lpFilePart=0x0) returned 0x2e [0084.670] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Application Data\\", nBufferLength=0x105, lpBuffer=0x31e310, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Application Data\\", lpFilePart=0x0) returned 0x2f [0084.670] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Application Data\\*", lpFindFileData=0x31e55c | out: lpFindFileData=0x31e55c*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0084.671] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e7f8) returned 1 [0084.672] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e834) returned 1 [0084.672] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Contacts", nBufferLength=0x105, lpBuffer=0x31e33c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Contacts", lpFilePart=0x0) returned 0x26 [0084.672] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Contacts\\", nBufferLength=0x105, lpBuffer=0x31e310, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Contacts\\", lpFilePart=0x0) returned 0x27 [0084.673] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Contacts\\*", lpFindFileData=0x31e55c | out: lpFindFileData=0x31e55c*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x28cff640, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x2eaf1340, ftLastAccessTime.dwHighDateTime=0x1d2fad7, ftLastWriteTime.dwLowDateTime=0x2eaf1340, ftLastWriteTime.dwHighDateTime=0x1d2fad7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x381d40 [0084.673] FindNextFileW (in: hFindFile=0x381d40, lpFindFileData=0x31e56c | out: lpFindFileData=0x31e56c*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x28cff640, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x2eaf1340, ftLastAccessTime.dwHighDateTime=0x1d2fad7, ftLastWriteTime.dwLowDateTime=0x2eaf1340, ftLastWriteTime.dwHighDateTime=0x1d2fad7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0084.673] FindNextFileW (in: hFindFile=0x381d40, lpFindFileData=0x31e56c | out: lpFindFileData=0x31e56c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2ea7ef20, ftCreationTime.dwHighDateTime=0x1d2fad7, ftLastAccessTime.dwLowDateTime=0x2ea7ef20, ftLastAccessTime.dwHighDateTime=0x1d2fad7, ftLastWriteTime.dwLowDateTime=0x2ea7ef20, ftLastWriteTime.dwHighDateTime=0x1d2fad7, nFileSizeHigh=0x0, nFileSizeLow=0x49a, dwReserved0=0x0, dwReserved1=0x0, cFileName="Aclviho ASldjfl.contact", cAlternateFileName="ACLVIH~1.CON")) returned 1 [0084.673] FindNextFileW (in: hFindFile=0x381d40, lpFindFileData=0x31e56c | out: lpFindFileData=0x31e56c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x28d4b900, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28d4b900, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xf0fefd94, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x10b1e, dwReserved0=0x0, dwReserved1=0x0, cFileName="Administrator.contact", cAlternateFileName="ADMINI~1.CON")) returned 1 [0084.673] FindNextFileW (in: hFindFile=0x381d40, lpFindFileData=0x31e56c | out: lpFindFileData=0x31e56c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2eaa5080, ftCreationTime.dwHighDateTime=0x1d2fad7, ftLastAccessTime.dwLowDateTime=0x2eaa5080, ftLastAccessTime.dwHighDateTime=0x1d2fad7, ftLastWriteTime.dwLowDateTime=0x2eaa5080, ftLastWriteTime.dwHighDateTime=0x1d2fad7, nFileSizeHigh=0x0, nFileSizeLow=0x493, dwReserved0=0x0, dwReserved1=0x0, cFileName="asdlfk poopvy.contact", cAlternateFileName="ASDLFK~1.CON")) returned 1 [0084.673] FindNextFileW (in: hFindFile=0x381d40, lpFindFileData=0x31e56c | out: lpFindFileData=0x31e56c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2eacb1e0, ftCreationTime.dwHighDateTime=0x1d2fad7, ftLastAccessTime.dwLowDateTime=0x2eacb1e0, ftLastAccessTime.dwHighDateTime=0x1d2fad7, ftLastWriteTime.dwLowDateTime=0x2eacb1e0, ftLastWriteTime.dwHighDateTime=0x1d2fad7, nFileSizeHigh=0x0, nFileSizeLow=0x499, dwReserved0=0x0, dwReserved1=0x0, cFileName="chucu jadnvk.contact", cAlternateFileName="CHUCUJ~1.CON")) returned 1 [0084.673] FindNextFileW (in: hFindFile=0x381d40, lpFindFileData=0x31e56c | out: lpFindFileData=0x31e56c*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0x28d4b900, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28d4b900, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x2d1bb180, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x19c, dwReserved0=0x0, dwReserved1=0x0, cFileName="desktop.ini", cAlternateFileName="")) returned 1 [0084.673] FindNextFileW (in: hFindFile=0x381d40, lpFindFileData=0x31e56c | out: lpFindFileData=0x31e56c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2eaf1340, ftCreationTime.dwHighDateTime=0x1d2fad7, ftLastAccessTime.dwLowDateTime=0x2eaf1340, ftLastAccessTime.dwHighDateTime=0x1d2fad7, ftLastWriteTime.dwLowDateTime=0x2eaf1340, ftLastWriteTime.dwHighDateTime=0x1d2fad7, nFileSizeHigh=0x0, nFileSizeLow=0x496, dwReserved0=0x0, dwReserved1=0x0, cFileName="lulcit amkdfe.contact", cAlternateFileName="LULCIT~1.CON")) returned 1 [0084.673] FindNextFileW (in: hFindFile=0x381d40, lpFindFileData=0x31e56c | out: lpFindFileData=0x31e56c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2eaf1340, ftCreationTime.dwHighDateTime=0x1d2fad7, ftLastAccessTime.dwLowDateTime=0x2eaf1340, ftLastAccessTime.dwHighDateTime=0x1d2fad7, ftLastWriteTime.dwLowDateTime=0x2eaf1340, ftLastWriteTime.dwHighDateTime=0x1d2fad7, nFileSizeHigh=0x0, nFileSizeLow=0x494, dwReserved0=0x0, dwReserved1=0x0, cFileName="sikvnb huvuib.contact", cAlternateFileName="SIKVNB~1.CON")) returned 1 [0084.673] FindNextFileW (in: hFindFile=0x381d40, lpFindFileData=0x31e56c | out: lpFindFileData=0x31e56c*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0084.673] FindClose (in: hFindFile=0x381d40 | out: hFindFile=0x381d40) returned 1 [0084.673] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e7f4) returned 1 [0084.673] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e800) returned 1 [0084.673] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e834) returned 1 [0084.673] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Contacts", nBufferLength=0x105, lpBuffer=0x31e33c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Contacts", lpFilePart=0x0) returned 0x26 [0084.673] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Contacts\\", nBufferLength=0x105, lpBuffer=0x31e310, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Contacts\\", lpFilePart=0x0) returned 0x27 [0084.674] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Contacts\\*", lpFindFileData=0x31e55c | out: lpFindFileData=0x31e55c*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x28cff640, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x2eaf1340, ftLastAccessTime.dwHighDateTime=0x1d2fad7, ftLastWriteTime.dwLowDateTime=0x2eaf1340, ftLastWriteTime.dwHighDateTime=0x1d2fad7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x381d40 [0084.674] FindNextFileW (in: hFindFile=0x381d40, lpFindFileData=0x31e56c | out: lpFindFileData=0x31e56c*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x28cff640, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x2eaf1340, ftLastAccessTime.dwHighDateTime=0x1d2fad7, ftLastWriteTime.dwLowDateTime=0x2eaf1340, ftLastWriteTime.dwHighDateTime=0x1d2fad7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0084.674] FindNextFileW (in: hFindFile=0x381d40, lpFindFileData=0x31e56c | out: lpFindFileData=0x31e56c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2ea7ef20, ftCreationTime.dwHighDateTime=0x1d2fad7, ftLastAccessTime.dwLowDateTime=0x2ea7ef20, ftLastAccessTime.dwHighDateTime=0x1d2fad7, ftLastWriteTime.dwLowDateTime=0x2ea7ef20, ftLastWriteTime.dwHighDateTime=0x1d2fad7, nFileSizeHigh=0x0, nFileSizeLow=0x49a, dwReserved0=0x0, dwReserved1=0x0, cFileName="Aclviho ASldjfl.contact", cAlternateFileName="ACLVIH~1.CON")) returned 1 [0084.674] FindNextFileW (in: hFindFile=0x381d40, lpFindFileData=0x31e56c | out: lpFindFileData=0x31e56c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x28d4b900, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28d4b900, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xf0fefd94, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x10b1e, dwReserved0=0x0, dwReserved1=0x0, cFileName="Administrator.contact", cAlternateFileName="ADMINI~1.CON")) returned 1 [0084.674] FindNextFileW (in: hFindFile=0x381d40, lpFindFileData=0x31e56c | out: lpFindFileData=0x31e56c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2eaa5080, ftCreationTime.dwHighDateTime=0x1d2fad7, ftLastAccessTime.dwLowDateTime=0x2eaa5080, ftLastAccessTime.dwHighDateTime=0x1d2fad7, ftLastWriteTime.dwLowDateTime=0x2eaa5080, ftLastWriteTime.dwHighDateTime=0x1d2fad7, nFileSizeHigh=0x0, nFileSizeLow=0x493, dwReserved0=0x0, dwReserved1=0x0, cFileName="asdlfk poopvy.contact", cAlternateFileName="ASDLFK~1.CON")) returned 1 [0084.674] FindNextFileW (in: hFindFile=0x381d40, lpFindFileData=0x31e56c | out: lpFindFileData=0x31e56c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2eacb1e0, ftCreationTime.dwHighDateTime=0x1d2fad7, ftLastAccessTime.dwLowDateTime=0x2eacb1e0, ftLastAccessTime.dwHighDateTime=0x1d2fad7, ftLastWriteTime.dwLowDateTime=0x2eacb1e0, ftLastWriteTime.dwHighDateTime=0x1d2fad7, nFileSizeHigh=0x0, nFileSizeLow=0x499, dwReserved0=0x0, dwReserved1=0x0, cFileName="chucu jadnvk.contact", cAlternateFileName="CHUCUJ~1.CON")) returned 1 [0084.674] FindNextFileW (in: hFindFile=0x381d40, lpFindFileData=0x31e56c | out: lpFindFileData=0x31e56c*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0x28d4b900, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28d4b900, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x2d1bb180, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x19c, dwReserved0=0x0, dwReserved1=0x0, cFileName="desktop.ini", cAlternateFileName="")) returned 1 [0084.674] FindNextFileW (in: hFindFile=0x381d40, lpFindFileData=0x31e56c | out: lpFindFileData=0x31e56c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2eaf1340, ftCreationTime.dwHighDateTime=0x1d2fad7, ftLastAccessTime.dwLowDateTime=0x2eaf1340, ftLastAccessTime.dwHighDateTime=0x1d2fad7, ftLastWriteTime.dwLowDateTime=0x2eaf1340, ftLastWriteTime.dwHighDateTime=0x1d2fad7, nFileSizeHigh=0x0, nFileSizeLow=0x496, dwReserved0=0x0, dwReserved1=0x0, cFileName="lulcit amkdfe.contact", cAlternateFileName="LULCIT~1.CON")) returned 1 [0084.674] FindNextFileW (in: hFindFile=0x381d40, lpFindFileData=0x31e56c | out: lpFindFileData=0x31e56c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2eaf1340, ftCreationTime.dwHighDateTime=0x1d2fad7, ftLastAccessTime.dwLowDateTime=0x2eaf1340, ftLastAccessTime.dwHighDateTime=0x1d2fad7, ftLastWriteTime.dwLowDateTime=0x2eaf1340, ftLastWriteTime.dwHighDateTime=0x1d2fad7, nFileSizeHigh=0x0, nFileSizeLow=0x494, dwReserved0=0x0, dwReserved1=0x0, cFileName="sikvnb huvuib.contact", cAlternateFileName="SIKVNB~1.CON")) returned 1 [0084.674] FindNextFileW (in: hFindFile=0x381d40, lpFindFileData=0x31e56c | out: lpFindFileData=0x31e56c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2eaf1340, ftCreationTime.dwHighDateTime=0x1d2fad7, ftLastAccessTime.dwLowDateTime=0x2eaf1340, ftLastAccessTime.dwHighDateTime=0x1d2fad7, ftLastWriteTime.dwLowDateTime=0x2eaf1340, ftLastWriteTime.dwHighDateTime=0x1d2fad7, nFileSizeHigh=0x0, nFileSizeLow=0x494, dwReserved0=0x0, dwReserved1=0x0, cFileName="sikvnb huvuib.contact", cAlternateFileName="SIKVNB~1.CON")) returned 0 [0084.674] FindClose (in: hFindFile=0x381d40 | out: hFindFile=0x381d40) returned 1 [0084.674] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e7f4) returned 1 [0084.674] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e800) returned 1 [0084.674] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e834) returned 1 [0084.674] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Cookies", nBufferLength=0x105, lpBuffer=0x31e33c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Cookies", lpFilePart=0x0) returned 0x25 [0084.674] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Cookies\\", nBufferLength=0x105, lpBuffer=0x31e310, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Cookies\\", lpFilePart=0x0) returned 0x26 [0084.674] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Cookies\\*", lpFindFileData=0x31e55c | out: lpFindFileData=0x31e55c*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0084.674] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e7f8) returned 1 [0084.675] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e834) returned 1 [0084.675] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop", nBufferLength=0x105, lpBuffer=0x31e33c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop", lpFilePart=0x0) returned 0x25 [0084.675] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\", nBufferLength=0x105, lpBuffer=0x31e310, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\", lpFilePart=0x0) returned 0x26 [0084.675] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\*", lpFindFileData=0x31e55c | out: lpFindFileData=0x31e55c*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x28cff640, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0xee595980, ftLastAccessTime.dwHighDateTime=0x1d6eb7e, ftLastWriteTime.dwLowDateTime=0xee595980, ftLastWriteTime.dwHighDateTime=0x1d6eb7e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x381d40 [0084.676] FindNextFileW (in: hFindFile=0x381d40, lpFindFileData=0x31e56c | out: lpFindFileData=0x31e56c*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x28cff640, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0xee595980, ftLastAccessTime.dwHighDateTime=0x1d6eb7e, ftLastWriteTime.dwLowDateTime=0xee595980, ftLastWriteTime.dwHighDateTime=0x1d6eb7e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0084.676] FindNextFileW (in: hFindFile=0x381d40, lpFindFileData=0x31e56c | out: lpFindFileData=0x31e56c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9ece53a0, ftCreationTime.dwHighDateTime=0x1d5d821, ftLastAccessTime.dwLowDateTime=0x74cf9c10, ftLastAccessTime.dwHighDateTime=0x1d5e4ee, ftLastWriteTime.dwLowDateTime=0x74cf9c10, ftLastWriteTime.dwHighDateTime=0x1d5e4ee, nFileSizeHigh=0x0, nFileSizeLow=0x6a0e, dwReserved0=0x0, dwReserved1=0x0, cFileName="6b4NNrp5 bh.pdf", cAlternateFileName="6B4NNR~1.PDF")) returned 1 [0084.676] FindNextFileW (in: hFindFile=0x381d40, lpFindFileData=0x31e56c | out: lpFindFileData=0x31e56c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8b51c650, ftCreationTime.dwHighDateTime=0x1d5e44b, ftLastAccessTime.dwLowDateTime=0x5e6b2d0, ftLastAccessTime.dwHighDateTime=0x1d5d994, ftLastWriteTime.dwLowDateTime=0x5e6b2d0, ftLastWriteTime.dwHighDateTime=0x1d5d994, nFileSizeHigh=0x0, nFileSizeLow=0x9e4e, dwReserved0=0x0, dwReserved1=0x0, cFileName="81Hibdy.gif", cAlternateFileName="")) returned 1 [0084.676] FindNextFileW (in: hFindFile=0x381d40, lpFindFileData=0x31e56c | out: lpFindFileData=0x31e56c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf5c9ba20, ftCreationTime.dwHighDateTime=0x1d5e58f, ftLastAccessTime.dwLowDateTime=0x8ddae20, ftLastAccessTime.dwHighDateTime=0x1d5e7aa, ftLastWriteTime.dwLowDateTime=0x8ddae20, ftLastWriteTime.dwHighDateTime=0x1d5e7aa, nFileSizeHigh=0x0, nFileSizeLow=0x3b9f, dwReserved0=0x0, dwReserved1=0x0, cFileName="99MhsqKE-rdB-aBVWt9F.mp4", cAlternateFileName="99MHSQ~1.MP4")) returned 1 [0084.676] FindNextFileW (in: hFindFile=0x381d40, lpFindFileData=0x31e56c | out: lpFindFileData=0x31e56c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe5ee1380, ftCreationTime.dwHighDateTime=0x1d6eb7e, ftLastAccessTime.dwLowDateTime=0xe5ee1380, ftLastAccessTime.dwHighDateTime=0x1d6eb7e, ftLastWriteTime.dwLowDateTime=0xe4245000, ftLastWriteTime.dwHighDateTime=0x1d6eb7e, nFileSizeHigh=0x0, nFileSizeLow=0x5600, dwReserved0=0x0, dwReserved1=0x0, cFileName="B221.exe", cAlternateFileName="")) returned 1 [0084.676] FindNextFileW (in: hFindFile=0x381d40, lpFindFileData=0x31e56c | out: lpFindFileData=0x31e56c*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0x28d4b900, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28d4b900, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x2d1bb180, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x11a, dwReserved0=0x0, dwReserved1=0x0, cFileName="desktop.ini", cAlternateFileName="")) returned 1 [0084.676] FindNextFileW (in: hFindFile=0x381d40, lpFindFileData=0x31e56c | out: lpFindFileData=0x31e56c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x20e85da0, ftCreationTime.dwHighDateTime=0x1d5e78a, ftLastAccessTime.dwLowDateTime=0x555fbf70, ftLastAccessTime.dwHighDateTime=0x1d5d7ad, ftLastWriteTime.dwLowDateTime=0x555fbf70, ftLastWriteTime.dwHighDateTime=0x1d5d7ad, nFileSizeHigh=0x0, nFileSizeLow=0x7e4b, dwReserved0=0x0, dwReserved1=0x0, cFileName="dVMHP12YJw.avi", cAlternateFileName="DVMHP1~1.AVI")) returned 1 [0084.676] FindNextFileW (in: hFindFile=0x381d40, lpFindFileData=0x31e56c | out: lpFindFileData=0x31e56c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1a1a4200, ftCreationTime.dwHighDateTime=0x1d5deab, ftLastAccessTime.dwLowDateTime=0xdd6c4700, ftLastAccessTime.dwHighDateTime=0x1d5e0de, ftLastWriteTime.dwLowDateTime=0xdd6c4700, ftLastWriteTime.dwHighDateTime=0x1d5e0de, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="fo7DC8R1OiqEuI ix", cAlternateFileName="FO7DC8~1")) returned 1 [0084.676] FindNextFileW (in: hFindFile=0x381d40, lpFindFileData=0x31e56c | out: lpFindFileData=0x31e56c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7508f630, ftCreationTime.dwHighDateTime=0x1d5e74c, ftLastAccessTime.dwLowDateTime=0x71780f20, ftLastAccessTime.dwHighDateTime=0x1d5e60b, ftLastWriteTime.dwLowDateTime=0x71780f20, ftLastWriteTime.dwHighDateTime=0x1d5e60b, nFileSizeHigh=0x0, nFileSizeLow=0x1413f, dwReserved0=0x0, dwReserved1=0x0, cFileName="HhqZlj.wav", cAlternateFileName="")) returned 1 [0084.676] FindNextFileW (in: hFindFile=0x381d40, lpFindFileData=0x31e56c | out: lpFindFileData=0x31e56c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4d876660, ftCreationTime.dwHighDateTime=0x1d5e1bf, ftLastAccessTime.dwLowDateTime=0x577e8010, ftLastAccessTime.dwHighDateTime=0x1d5d8c6, ftLastWriteTime.dwLowDateTime=0x577e8010, ftLastWriteTime.dwHighDateTime=0x1d5d8c6, nFileSizeHigh=0x0, nFileSizeLow=0x3e85, dwReserved0=0x0, dwReserved1=0x0, cFileName="HtDElibU1DDUUobGb2we.avi", cAlternateFileName="HTDELI~1.AVI")) returned 1 [0084.676] FindNextFileW (in: hFindFile=0x381d40, lpFindFileData=0x31e56c | out: lpFindFileData=0x31e56c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x40857900, ftCreationTime.dwHighDateTime=0x1d5e4aa, ftLastAccessTime.dwLowDateTime=0xd31c04d0, ftLastAccessTime.dwHighDateTime=0x1d5e308, ftLastWriteTime.dwLowDateTime=0xd31c04d0, ftLastWriteTime.dwHighDateTime=0x1d5e308, nFileSizeHigh=0x0, nFileSizeLow=0x51cc, dwReserved0=0x0, dwReserved1=0x0, cFileName="Huq3uXdk.mp4", cAlternateFileName="")) returned 1 [0084.676] FindNextFileW (in: hFindFile=0x381d40, lpFindFileData=0x31e56c | out: lpFindFileData=0x31e56c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x954ba360, ftCreationTime.dwHighDateTime=0x1d5e44b, ftLastAccessTime.dwLowDateTime=0xe5986090, ftLastAccessTime.dwHighDateTime=0x1d5e5ce, ftLastWriteTime.dwLowDateTime=0xe5986090, ftLastWriteTime.dwHighDateTime=0x1d5e5ce, nFileSizeHigh=0x0, nFileSizeLow=0x14a41, dwReserved0=0x0, dwReserved1=0x0, cFileName="jJnNyz.mp3", cAlternateFileName="")) returned 1 [0084.676] FindNextFileW (in: hFindFile=0x381d40, lpFindFileData=0x31e56c | out: lpFindFileData=0x31e56c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa0ce6d80, ftCreationTime.dwHighDateTime=0x1d5ddc0, ftLastAccessTime.dwLowDateTime=0xddc44020, ftLastAccessTime.dwHighDateTime=0x1d5e351, ftLastWriteTime.dwLowDateTime=0xddc44020, ftLastWriteTime.dwHighDateTime=0x1d5e351, nFileSizeHigh=0x0, nFileSizeLow=0x2d36, dwReserved0=0x0, dwReserved1=0x0, cFileName="j_g3ZRLUMjKwy4 0Ihg.xlsx", cAlternateFileName="J_G3ZR~1.XLS")) returned 1 [0084.676] FindNextFileW (in: hFindFile=0x381d40, lpFindFileData=0x31e56c | out: lpFindFileData=0x31e56c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb350d30, ftCreationTime.dwHighDateTime=0x1d5e32c, ftLastAccessTime.dwLowDateTime=0xb5d3dbb0, ftLastAccessTime.dwHighDateTime=0x1d5e645, ftLastWriteTime.dwLowDateTime=0xb5d3dbb0, ftLastWriteTime.dwHighDateTime=0x1d5e645, nFileSizeHigh=0x0, nFileSizeLow=0x7c7e, dwReserved0=0x0, dwReserved1=0x0, cFileName="kr6eFTD-N.wav", cAlternateFileName="KR6EFT~1.WAV")) returned 1 [0084.676] FindNextFileW (in: hFindFile=0x381d40, lpFindFileData=0x31e56c | out: lpFindFileData=0x31e56c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x800c6620, ftCreationTime.dwHighDateTime=0x1d5ddab, ftLastAccessTime.dwLowDateTime=0x221b2ff0, ftLastAccessTime.dwHighDateTime=0x1d5e798, ftLastWriteTime.dwLowDateTime=0x221b2ff0, ftLastWriteTime.dwHighDateTime=0x1d5e798, nFileSizeHigh=0x0, nFileSizeLow=0x13d3a, dwReserved0=0x0, dwReserved1=0x0, cFileName="LajwuWOfmL7z35P7ILh_.doc", cAlternateFileName="LAJWUW~1.DOC")) returned 1 [0084.676] FindNextFileW (in: hFindFile=0x381d40, lpFindFileData=0x31e56c | out: lpFindFileData=0x31e56c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x720b0b80, ftCreationTime.dwHighDateTime=0x1d5e5b7, ftLastAccessTime.dwLowDateTime=0xbddce6c0, ftLastAccessTime.dwHighDateTime=0x1d5e76d, ftLastWriteTime.dwLowDateTime=0xbddce6c0, ftLastWriteTime.dwHighDateTime=0x1d5e76d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="lCnlTJ-G", cAlternateFileName="")) returned 1 [0084.676] FindNextFileW (in: hFindFile=0x381d40, lpFindFileData=0x31e56c | out: lpFindFileData=0x31e56c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3d3b8bc0, ftCreationTime.dwHighDateTime=0x1d5e3c6, ftLastAccessTime.dwLowDateTime=0xcb247f60, ftLastAccessTime.dwHighDateTime=0x1d5e695, ftLastWriteTime.dwLowDateTime=0xcb247f60, ftLastWriteTime.dwHighDateTime=0x1d5e695, nFileSizeHigh=0x0, nFileSizeLow=0x154ff, dwReserved0=0x0, dwReserved1=0x0, cFileName="ogh55mhoOIV0q8Di8.mp3", cAlternateFileName="OGH55M~1.MP3")) returned 1 [0084.676] FindNextFileW (in: hFindFile=0x381d40, lpFindFileData=0x31e56c | out: lpFindFileData=0x31e56c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2ee296c0, ftCreationTime.dwHighDateTime=0x1d5e107, ftLastAccessTime.dwLowDateTime=0x72950210, ftLastAccessTime.dwHighDateTime=0x1d5d87c, ftLastWriteTime.dwLowDateTime=0x72950210, ftLastWriteTime.dwHighDateTime=0x1d5d87c, nFileSizeHigh=0x0, nFileSizeLow=0x9420, dwReserved0=0x0, dwReserved1=0x0, cFileName="PlzXFM1.pdf", cAlternateFileName="")) returned 1 [0084.676] FindNextFileW (in: hFindFile=0x381d40, lpFindFileData=0x31e56c | out: lpFindFileData=0x31e56c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe40810a0, ftCreationTime.dwHighDateTime=0x1d5e42e, ftLastAccessTime.dwLowDateTime=0x2b25de0, ftLastAccessTime.dwHighDateTime=0x1d5e2cb, ftLastWriteTime.dwLowDateTime=0x2b25de0, ftLastWriteTime.dwHighDateTime=0x1d5e2cb, nFileSizeHigh=0x0, nFileSizeLow=0x7ea9, dwReserved0=0x0, dwReserved1=0x0, cFileName="QKe_6XpG.ods", cAlternateFileName="")) returned 1 [0084.676] FindNextFileW (in: hFindFile=0x381d40, lpFindFileData=0x31e56c | out: lpFindFileData=0x31e56c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc639f710, ftCreationTime.dwHighDateTime=0x1d5d7f3, ftLastAccessTime.dwLowDateTime=0x50391f40, ftLastAccessTime.dwHighDateTime=0x1d5df56, ftLastWriteTime.dwLowDateTime=0x50391f40, ftLastWriteTime.dwHighDateTime=0x1d5df56, nFileSizeHigh=0x0, nFileSizeLow=0x1ed7, dwReserved0=0x0, dwReserved1=0x0, cFileName="Qq6wMGqMzL.docx", cAlternateFileName="QQ6WMG~1.DOC")) returned 1 [0084.676] FindNextFileW (in: hFindFile=0x381d40, lpFindFileData=0x31e56c | out: lpFindFileData=0x31e56c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1b2ac460, ftCreationTime.dwHighDateTime=0x1d5df6b, ftLastAccessTime.dwLowDateTime=0xa98077f0, ftLastAccessTime.dwHighDateTime=0x1d5dbb5, ftLastWriteTime.dwLowDateTime=0xa98077f0, ftLastWriteTime.dwHighDateTime=0x1d5dbb5, nFileSizeHigh=0x0, nFileSizeLow=0x51c6, dwReserved0=0x0, dwReserved1=0x0, cFileName="R4pxWKI.wav", cAlternateFileName="")) returned 1 [0084.676] FindNextFileW (in: hFindFile=0x381d40, lpFindFileData=0x31e56c | out: lpFindFileData=0x31e56c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb0865610, ftCreationTime.dwHighDateTime=0x1d5e7ad, ftLastAccessTime.dwLowDateTime=0xe81bf660, ftLastAccessTime.dwHighDateTime=0x1d5e169, ftLastWriteTime.dwLowDateTime=0xe81bf660, ftLastWriteTime.dwHighDateTime=0x1d5e169, nFileSizeHigh=0x0, nFileSizeLow=0x14d87, dwReserved0=0x0, dwReserved1=0x0, cFileName="sXaTFSe1U.ods", cAlternateFileName="SXATFS~1.ODS")) returned 1 [0084.676] FindNextFileW (in: hFindFile=0x381d40, lpFindFileData=0x31e56c | out: lpFindFileData=0x31e56c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xfb42e790, ftCreationTime.dwHighDateTime=0x1d5e24e, ftLastAccessTime.dwLowDateTime=0x4ab272b0, ftLastAccessTime.dwHighDateTime=0x1d5e3a7, ftLastWriteTime.dwLowDateTime=0x4ab272b0, ftLastWriteTime.dwHighDateTime=0x1d5e3a7, nFileSizeHigh=0x0, nFileSizeLow=0xf221, dwReserved0=0x0, dwReserved1=0x0, cFileName="t3GW ZMnrl.avi", cAlternateFileName="T3GWZM~1.AVI")) returned 1 [0084.676] FindNextFileW (in: hFindFile=0x381d40, lpFindFileData=0x31e56c | out: lpFindFileData=0x31e56c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xbc126420, ftCreationTime.dwHighDateTime=0x1d5e013, ftLastAccessTime.dwLowDateTime=0x9ada8720, ftLastAccessTime.dwHighDateTime=0x1d5dda6, ftLastWriteTime.dwLowDateTime=0x9ada8720, ftLastWriteTime.dwHighDateTime=0x1d5dda6, nFileSizeHigh=0x0, nFileSizeLow=0xc9aa, dwReserved0=0x0, dwReserved1=0x0, cFileName="TCjWHCEXor.avi", cAlternateFileName="TCJWHC~1.AVI")) returned 1 [0084.677] FindNextFileW (in: hFindFile=0x381d40, lpFindFileData=0x31e56c | out: lpFindFileData=0x31e56c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4690f2f0, ftCreationTime.dwHighDateTime=0x1d5dfca, ftLastAccessTime.dwLowDateTime=0x7509a760, ftLastAccessTime.dwHighDateTime=0x1d5dd65, ftLastWriteTime.dwLowDateTime=0x7509a760, ftLastWriteTime.dwHighDateTime=0x1d5dd65, nFileSizeHigh=0x0, nFileSizeLow=0xf368, dwReserved0=0x0, dwReserved1=0x0, cFileName="TuLuB1aKsHS-_cYIE.csv", cAlternateFileName="TULUB1~1.CSV")) returned 1 [0084.677] FindNextFileW (in: hFindFile=0x381d40, lpFindFileData=0x31e56c | out: lpFindFileData=0x31e56c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x96815570, ftCreationTime.dwHighDateTime=0x1d5d8e0, ftLastAccessTime.dwLowDateTime=0x318a2640, ftLastAccessTime.dwHighDateTime=0x1d5e03a, ftLastWriteTime.dwLowDateTime=0x318a2640, ftLastWriteTime.dwHighDateTime=0x1d5e03a, nFileSizeHigh=0x0, nFileSizeLow=0x68e8, dwReserved0=0x0, dwReserved1=0x0, cFileName="Uhq4eqc0GR9.m4a", cAlternateFileName="UHQ4EQ~1.M4A")) returned 1 [0084.677] FindNextFileW (in: hFindFile=0x381d40, lpFindFileData=0x31e56c | out: lpFindFileData=0x31e56c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa67bfd30, ftCreationTime.dwHighDateTime=0x1d5e39a, ftLastAccessTime.dwLowDateTime=0x9d8a61c0, ftLastAccessTime.dwHighDateTime=0x1d5e431, ftLastWriteTime.dwLowDateTime=0x9d8a61c0, ftLastWriteTime.dwHighDateTime=0x1d5e431, nFileSizeHigh=0x0, nFileSizeLow=0x1321e, dwReserved0=0x0, dwReserved1=0x0, cFileName="UvlrnJnT_l t.png", cAlternateFileName="UVLRNJ~1.PNG")) returned 1 [0084.677] FindNextFileW (in: hFindFile=0x381d40, lpFindFileData=0x31e56c | out: lpFindFileData=0x31e56c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5047cf0, ftCreationTime.dwHighDateTime=0x1d5e739, ftLastAccessTime.dwLowDateTime=0xde80da30, ftLastAccessTime.dwHighDateTime=0x1d5d95d, ftLastWriteTime.dwLowDateTime=0xde80da30, ftLastWriteTime.dwHighDateTime=0x1d5d95d, nFileSizeHigh=0x0, nFileSizeLow=0x923, dwReserved0=0x0, dwReserved1=0x0, cFileName="UVT6TQK.png", cAlternateFileName="")) returned 1 [0084.677] FindNextFileW (in: hFindFile=0x381d40, lpFindFileData=0x31e56c | out: lpFindFileData=0x31e56c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x89e03450, ftCreationTime.dwHighDateTime=0x1d5e711, ftLastAccessTime.dwLowDateTime=0x4256c720, ftLastAccessTime.dwHighDateTime=0x1d5d834, ftLastWriteTime.dwLowDateTime=0x4256c720, ftLastWriteTime.dwHighDateTime=0x1d5d834, nFileSizeHigh=0x0, nFileSizeLow=0x504e, dwReserved0=0x0, dwReserved1=0x0, cFileName="UXStKO.gif", cAlternateFileName="")) returned 1 [0084.677] FindNextFileW (in: hFindFile=0x381d40, lpFindFileData=0x31e56c | out: lpFindFileData=0x31e56c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x61433de0, ftCreationTime.dwHighDateTime=0x1d5e18e, ftLastAccessTime.dwLowDateTime=0x46909370, ftLastAccessTime.dwHighDateTime=0x1d5ddca, ftLastWriteTime.dwLowDateTime=0x46909370, ftLastWriteTime.dwHighDateTime=0x1d5ddca, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="W2JtfG_38gA", cAlternateFileName="W2JTFG~1")) returned 1 [0084.677] FindNextFileW (in: hFindFile=0x381d40, lpFindFileData=0x31e56c | out: lpFindFileData=0x31e56c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xfc35f5c0, ftCreationTime.dwHighDateTime=0x1d5d86c, ftLastAccessTime.dwLowDateTime=0x7f7548a0, ftLastAccessTime.dwHighDateTime=0x1d5e100, ftLastWriteTime.dwLowDateTime=0x7f7548a0, ftLastWriteTime.dwHighDateTime=0x1d5e100, nFileSizeHigh=0x0, nFileSizeLow=0x34e0, dwReserved0=0x0, dwReserved1=0x0, cFileName="wzR1a01KM.avi", cAlternateFileName="WZR1A0~1.AVI")) returned 1 [0084.677] FindNextFileW (in: hFindFile=0x381d40, lpFindFileData=0x31e56c | out: lpFindFileData=0x31e56c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa5cc1ca0, ftCreationTime.dwHighDateTime=0x1d5e433, ftLastAccessTime.dwLowDateTime=0xe3bde090, ftLastAccessTime.dwHighDateTime=0x1d5e594, ftLastWriteTime.dwLowDateTime=0xe3bde090, ftLastWriteTime.dwHighDateTime=0x1d5e594, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="xhxot_kWSkhA9P", cAlternateFileName="XHXOT_~1")) returned 1 [0084.677] FindNextFileW (in: hFindFile=0x381d40, lpFindFileData=0x31e56c | out: lpFindFileData=0x31e56c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa481b680, ftCreationTime.dwHighDateTime=0x1d5db18, ftLastAccessTime.dwLowDateTime=0x21e05db0, ftLastAccessTime.dwHighDateTime=0x1d5e0f1, ftLastWriteTime.dwLowDateTime=0x21e05db0, ftLastWriteTime.dwHighDateTime=0x1d5e0f1, nFileSizeHigh=0x0, nFileSizeLow=0x16574, dwReserved0=0x0, dwReserved1=0x0, cFileName="xi26C-f e26K1XH.ppt", cAlternateFileName="XI26C-~1.PPT")) returned 1 [0084.677] FindNextFileW (in: hFindFile=0x381d40, lpFindFileData=0x31e56c | out: lpFindFileData=0x31e56c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb6f209c0, ftCreationTime.dwHighDateTime=0x1d5e480, ftLastAccessTime.dwLowDateTime=0xbcdd7880, ftLastAccessTime.dwHighDateTime=0x1d5e2d5, ftLastWriteTime.dwLowDateTime=0xbcdd7880, ftLastWriteTime.dwHighDateTime=0x1d5e2d5, nFileSizeHigh=0x0, nFileSizeLow=0xd14b, dwReserved0=0x0, dwReserved1=0x0, cFileName="YCXGBLVtV61m.ots", cAlternateFileName="YCXGBL~1.OTS")) returned 1 [0084.677] FindNextFileW (in: hFindFile=0x381d40, lpFindFileData=0x31e56c | out: lpFindFileData=0x31e56c*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0084.677] FindClose (in: hFindFile=0x381d40 | out: hFindFile=0x381d40) returned 1 [0084.677] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e7f4) returned 1 [0084.677] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e800) returned 1 [0084.677] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e834) returned 1 [0084.677] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop", nBufferLength=0x105, lpBuffer=0x31e33c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop", lpFilePart=0x0) returned 0x25 [0084.677] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\", nBufferLength=0x105, lpBuffer=0x31e310, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\", lpFilePart=0x0) returned 0x26 [0084.677] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\*", lpFindFileData=0x31e55c | out: lpFindFileData=0x31e55c*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x28cff640, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0xee595980, ftLastAccessTime.dwHighDateTime=0x1d6eb7e, ftLastWriteTime.dwLowDateTime=0xee595980, ftLastWriteTime.dwHighDateTime=0x1d6eb7e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x381d40 [0084.678] FindNextFileW (in: hFindFile=0x381d40, lpFindFileData=0x31e56c | out: lpFindFileData=0x31e56c*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x28cff640, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0xee595980, ftLastAccessTime.dwHighDateTime=0x1d6eb7e, ftLastWriteTime.dwLowDateTime=0xee595980, ftLastWriteTime.dwHighDateTime=0x1d6eb7e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0084.678] FindNextFileW (in: hFindFile=0x381d40, lpFindFileData=0x31e56c | out: lpFindFileData=0x31e56c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9ece53a0, ftCreationTime.dwHighDateTime=0x1d5d821, ftLastAccessTime.dwLowDateTime=0x74cf9c10, ftLastAccessTime.dwHighDateTime=0x1d5e4ee, ftLastWriteTime.dwLowDateTime=0x74cf9c10, ftLastWriteTime.dwHighDateTime=0x1d5e4ee, nFileSizeHigh=0x0, nFileSizeLow=0x6a0e, dwReserved0=0x0, dwReserved1=0x0, cFileName="6b4NNrp5 bh.pdf", cAlternateFileName="6B4NNR~1.PDF")) returned 1 [0084.678] FindNextFileW (in: hFindFile=0x381d40, lpFindFileData=0x31e56c | out: lpFindFileData=0x31e56c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8b51c650, ftCreationTime.dwHighDateTime=0x1d5e44b, ftLastAccessTime.dwLowDateTime=0x5e6b2d0, ftLastAccessTime.dwHighDateTime=0x1d5d994, ftLastWriteTime.dwLowDateTime=0x5e6b2d0, ftLastWriteTime.dwHighDateTime=0x1d5d994, nFileSizeHigh=0x0, nFileSizeLow=0x9e4e, dwReserved0=0x0, dwReserved1=0x0, cFileName="81Hibdy.gif", cAlternateFileName="")) returned 1 [0084.678] FindNextFileW (in: hFindFile=0x381d40, lpFindFileData=0x31e56c | out: lpFindFileData=0x31e56c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf5c9ba20, ftCreationTime.dwHighDateTime=0x1d5e58f, ftLastAccessTime.dwLowDateTime=0x8ddae20, ftLastAccessTime.dwHighDateTime=0x1d5e7aa, ftLastWriteTime.dwLowDateTime=0x8ddae20, ftLastWriteTime.dwHighDateTime=0x1d5e7aa, nFileSizeHigh=0x0, nFileSizeLow=0x3b9f, dwReserved0=0x0, dwReserved1=0x0, cFileName="99MhsqKE-rdB-aBVWt9F.mp4", cAlternateFileName="99MHSQ~1.MP4")) returned 1 [0084.678] FindNextFileW (in: hFindFile=0x381d40, lpFindFileData=0x31e56c | out: lpFindFileData=0x31e56c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe5ee1380, ftCreationTime.dwHighDateTime=0x1d6eb7e, ftLastAccessTime.dwLowDateTime=0xe5ee1380, ftLastAccessTime.dwHighDateTime=0x1d6eb7e, ftLastWriteTime.dwLowDateTime=0xe4245000, ftLastWriteTime.dwHighDateTime=0x1d6eb7e, nFileSizeHigh=0x0, nFileSizeLow=0x5600, dwReserved0=0x0, dwReserved1=0x0, cFileName="B221.exe", cAlternateFileName="")) returned 1 [0084.678] FindNextFileW (in: hFindFile=0x381d40, lpFindFileData=0x31e56c | out: lpFindFileData=0x31e56c*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0x28d4b900, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28d4b900, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x2d1bb180, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x11a, dwReserved0=0x0, dwReserved1=0x0, cFileName="desktop.ini", cAlternateFileName="")) returned 1 [0084.678] FindNextFileW (in: hFindFile=0x381d40, lpFindFileData=0x31e56c | out: lpFindFileData=0x31e56c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x20e85da0, ftCreationTime.dwHighDateTime=0x1d5e78a, ftLastAccessTime.dwLowDateTime=0x555fbf70, ftLastAccessTime.dwHighDateTime=0x1d5d7ad, ftLastWriteTime.dwLowDateTime=0x555fbf70, ftLastWriteTime.dwHighDateTime=0x1d5d7ad, nFileSizeHigh=0x0, nFileSizeLow=0x7e4b, dwReserved0=0x0, dwReserved1=0x0, cFileName="dVMHP12YJw.avi", cAlternateFileName="DVMHP1~1.AVI")) returned 1 [0084.678] FindNextFileW (in: hFindFile=0x381d40, lpFindFileData=0x31e56c | out: lpFindFileData=0x31e56c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1a1a4200, ftCreationTime.dwHighDateTime=0x1d5deab, ftLastAccessTime.dwLowDateTime=0xdd6c4700, ftLastAccessTime.dwHighDateTime=0x1d5e0de, ftLastWriteTime.dwLowDateTime=0xdd6c4700, ftLastWriteTime.dwHighDateTime=0x1d5e0de, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="fo7DC8R1OiqEuI ix", cAlternateFileName="FO7DC8~1")) returned 1 [0084.678] FindNextFileW (in: hFindFile=0x381d40, lpFindFileData=0x31e56c | out: lpFindFileData=0x31e56c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7508f630, ftCreationTime.dwHighDateTime=0x1d5e74c, ftLastAccessTime.dwLowDateTime=0x71780f20, ftLastAccessTime.dwHighDateTime=0x1d5e60b, ftLastWriteTime.dwLowDateTime=0x71780f20, ftLastWriteTime.dwHighDateTime=0x1d5e60b, nFileSizeHigh=0x0, nFileSizeLow=0x1413f, dwReserved0=0x0, dwReserved1=0x0, cFileName="HhqZlj.wav", cAlternateFileName="")) returned 1 [0084.678] FindNextFileW (in: hFindFile=0x381d40, lpFindFileData=0x31e56c | out: lpFindFileData=0x31e56c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4d876660, ftCreationTime.dwHighDateTime=0x1d5e1bf, ftLastAccessTime.dwLowDateTime=0x577e8010, ftLastAccessTime.dwHighDateTime=0x1d5d8c6, ftLastWriteTime.dwLowDateTime=0x577e8010, ftLastWriteTime.dwHighDateTime=0x1d5d8c6, nFileSizeHigh=0x0, nFileSizeLow=0x3e85, dwReserved0=0x0, dwReserved1=0x0, cFileName="HtDElibU1DDUUobGb2we.avi", cAlternateFileName="HTDELI~1.AVI")) returned 1 [0084.678] FindNextFileW (in: hFindFile=0x381d40, lpFindFileData=0x31e56c | out: lpFindFileData=0x31e56c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x40857900, ftCreationTime.dwHighDateTime=0x1d5e4aa, ftLastAccessTime.dwLowDateTime=0xd31c04d0, ftLastAccessTime.dwHighDateTime=0x1d5e308, ftLastWriteTime.dwLowDateTime=0xd31c04d0, ftLastWriteTime.dwHighDateTime=0x1d5e308, nFileSizeHigh=0x0, nFileSizeLow=0x51cc, dwReserved0=0x0, dwReserved1=0x0, cFileName="Huq3uXdk.mp4", cAlternateFileName="")) returned 1 [0084.678] FindNextFileW (in: hFindFile=0x381d40, lpFindFileData=0x31e56c | out: lpFindFileData=0x31e56c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x954ba360, ftCreationTime.dwHighDateTime=0x1d5e44b, ftLastAccessTime.dwLowDateTime=0xe5986090, ftLastAccessTime.dwHighDateTime=0x1d5e5ce, ftLastWriteTime.dwLowDateTime=0xe5986090, ftLastWriteTime.dwHighDateTime=0x1d5e5ce, nFileSizeHigh=0x0, nFileSizeLow=0x14a41, dwReserved0=0x0, dwReserved1=0x0, cFileName="jJnNyz.mp3", cAlternateFileName="")) returned 1 [0084.678] FindNextFileW (in: hFindFile=0x381d40, lpFindFileData=0x31e56c | out: lpFindFileData=0x31e56c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa0ce6d80, ftCreationTime.dwHighDateTime=0x1d5ddc0, ftLastAccessTime.dwLowDateTime=0xddc44020, ftLastAccessTime.dwHighDateTime=0x1d5e351, ftLastWriteTime.dwLowDateTime=0xddc44020, ftLastWriteTime.dwHighDateTime=0x1d5e351, nFileSizeHigh=0x0, nFileSizeLow=0x2d36, dwReserved0=0x0, dwReserved1=0x0, cFileName="j_g3ZRLUMjKwy4 0Ihg.xlsx", cAlternateFileName="J_G3ZR~1.XLS")) returned 1 [0084.678] FindNextFileW (in: hFindFile=0x381d40, lpFindFileData=0x31e56c | out: lpFindFileData=0x31e56c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb350d30, ftCreationTime.dwHighDateTime=0x1d5e32c, ftLastAccessTime.dwLowDateTime=0xb5d3dbb0, ftLastAccessTime.dwHighDateTime=0x1d5e645, ftLastWriteTime.dwLowDateTime=0xb5d3dbb0, ftLastWriteTime.dwHighDateTime=0x1d5e645, nFileSizeHigh=0x0, nFileSizeLow=0x7c7e, dwReserved0=0x0, dwReserved1=0x0, cFileName="kr6eFTD-N.wav", cAlternateFileName="KR6EFT~1.WAV")) returned 1 [0084.678] FindNextFileW (in: hFindFile=0x381d40, lpFindFileData=0x31e56c | out: lpFindFileData=0x31e56c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x800c6620, ftCreationTime.dwHighDateTime=0x1d5ddab, ftLastAccessTime.dwLowDateTime=0x221b2ff0, ftLastAccessTime.dwHighDateTime=0x1d5e798, ftLastWriteTime.dwLowDateTime=0x221b2ff0, ftLastWriteTime.dwHighDateTime=0x1d5e798, nFileSizeHigh=0x0, nFileSizeLow=0x13d3a, dwReserved0=0x0, dwReserved1=0x0, cFileName="LajwuWOfmL7z35P7ILh_.doc", cAlternateFileName="LAJWUW~1.DOC")) returned 1 [0084.678] FindNextFileW (in: hFindFile=0x381d40, lpFindFileData=0x31e56c | out: lpFindFileData=0x31e56c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x720b0b80, ftCreationTime.dwHighDateTime=0x1d5e5b7, ftLastAccessTime.dwLowDateTime=0xbddce6c0, ftLastAccessTime.dwHighDateTime=0x1d5e76d, ftLastWriteTime.dwLowDateTime=0xbddce6c0, ftLastWriteTime.dwHighDateTime=0x1d5e76d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="lCnlTJ-G", cAlternateFileName="")) returned 1 [0084.678] FindNextFileW (in: hFindFile=0x381d40, lpFindFileData=0x31e56c | out: lpFindFileData=0x31e56c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3d3b8bc0, ftCreationTime.dwHighDateTime=0x1d5e3c6, ftLastAccessTime.dwLowDateTime=0xcb247f60, ftLastAccessTime.dwHighDateTime=0x1d5e695, ftLastWriteTime.dwLowDateTime=0xcb247f60, ftLastWriteTime.dwHighDateTime=0x1d5e695, nFileSizeHigh=0x0, nFileSizeLow=0x154ff, dwReserved0=0x0, dwReserved1=0x0, cFileName="ogh55mhoOIV0q8Di8.mp3", cAlternateFileName="OGH55M~1.MP3")) returned 1 [0084.678] FindNextFileW (in: hFindFile=0x381d40, lpFindFileData=0x31e56c | out: lpFindFileData=0x31e56c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2ee296c0, ftCreationTime.dwHighDateTime=0x1d5e107, ftLastAccessTime.dwLowDateTime=0x72950210, ftLastAccessTime.dwHighDateTime=0x1d5d87c, ftLastWriteTime.dwLowDateTime=0x72950210, ftLastWriteTime.dwHighDateTime=0x1d5d87c, nFileSizeHigh=0x0, nFileSizeLow=0x9420, dwReserved0=0x0, dwReserved1=0x0, cFileName="PlzXFM1.pdf", cAlternateFileName="")) returned 1 [0084.678] FindNextFileW (in: hFindFile=0x381d40, lpFindFileData=0x31e56c | out: lpFindFileData=0x31e56c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe40810a0, ftCreationTime.dwHighDateTime=0x1d5e42e, ftLastAccessTime.dwLowDateTime=0x2b25de0, ftLastAccessTime.dwHighDateTime=0x1d5e2cb, ftLastWriteTime.dwLowDateTime=0x2b25de0, ftLastWriteTime.dwHighDateTime=0x1d5e2cb, nFileSizeHigh=0x0, nFileSizeLow=0x7ea9, dwReserved0=0x0, dwReserved1=0x0, cFileName="QKe_6XpG.ods", cAlternateFileName="")) returned 1 [0084.678] FindNextFileW (in: hFindFile=0x381d40, lpFindFileData=0x31e56c | out: lpFindFileData=0x31e56c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc639f710, ftCreationTime.dwHighDateTime=0x1d5d7f3, ftLastAccessTime.dwLowDateTime=0x50391f40, ftLastAccessTime.dwHighDateTime=0x1d5df56, ftLastWriteTime.dwLowDateTime=0x50391f40, ftLastWriteTime.dwHighDateTime=0x1d5df56, nFileSizeHigh=0x0, nFileSizeLow=0x1ed7, dwReserved0=0x0, dwReserved1=0x0, cFileName="Qq6wMGqMzL.docx", cAlternateFileName="QQ6WMG~1.DOC")) returned 1 [0084.678] FindNextFileW (in: hFindFile=0x381d40, lpFindFileData=0x31e56c | out: lpFindFileData=0x31e56c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1b2ac460, ftCreationTime.dwHighDateTime=0x1d5df6b, ftLastAccessTime.dwLowDateTime=0xa98077f0, ftLastAccessTime.dwHighDateTime=0x1d5dbb5, ftLastWriteTime.dwLowDateTime=0xa98077f0, ftLastWriteTime.dwHighDateTime=0x1d5dbb5, nFileSizeHigh=0x0, nFileSizeLow=0x51c6, dwReserved0=0x0, dwReserved1=0x0, cFileName="R4pxWKI.wav", cAlternateFileName="")) returned 1 [0084.678] FindNextFileW (in: hFindFile=0x381d40, lpFindFileData=0x31e56c | out: lpFindFileData=0x31e56c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb0865610, ftCreationTime.dwHighDateTime=0x1d5e7ad, ftLastAccessTime.dwLowDateTime=0xe81bf660, ftLastAccessTime.dwHighDateTime=0x1d5e169, ftLastWriteTime.dwLowDateTime=0xe81bf660, ftLastWriteTime.dwHighDateTime=0x1d5e169, nFileSizeHigh=0x0, nFileSizeLow=0x14d87, dwReserved0=0x0, dwReserved1=0x0, cFileName="sXaTFSe1U.ods", cAlternateFileName="SXATFS~1.ODS")) returned 1 [0084.679] FindNextFileW (in: hFindFile=0x381d40, lpFindFileData=0x31e56c | out: lpFindFileData=0x31e56c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xfb42e790, ftCreationTime.dwHighDateTime=0x1d5e24e, ftLastAccessTime.dwLowDateTime=0x4ab272b0, ftLastAccessTime.dwHighDateTime=0x1d5e3a7, ftLastWriteTime.dwLowDateTime=0x4ab272b0, ftLastWriteTime.dwHighDateTime=0x1d5e3a7, nFileSizeHigh=0x0, nFileSizeLow=0xf221, dwReserved0=0x0, dwReserved1=0x0, cFileName="t3GW ZMnrl.avi", cAlternateFileName="T3GWZM~1.AVI")) returned 1 [0084.679] FindNextFileW (in: hFindFile=0x381d40, lpFindFileData=0x31e56c | out: lpFindFileData=0x31e56c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xbc126420, ftCreationTime.dwHighDateTime=0x1d5e013, ftLastAccessTime.dwLowDateTime=0x9ada8720, ftLastAccessTime.dwHighDateTime=0x1d5dda6, ftLastWriteTime.dwLowDateTime=0x9ada8720, ftLastWriteTime.dwHighDateTime=0x1d5dda6, nFileSizeHigh=0x0, nFileSizeLow=0xc9aa, dwReserved0=0x0, dwReserved1=0x0, cFileName="TCjWHCEXor.avi", cAlternateFileName="TCJWHC~1.AVI")) returned 1 [0084.679] FindNextFileW (in: hFindFile=0x381d40, lpFindFileData=0x31e56c | out: lpFindFileData=0x31e56c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4690f2f0, ftCreationTime.dwHighDateTime=0x1d5dfca, ftLastAccessTime.dwLowDateTime=0x7509a760, ftLastAccessTime.dwHighDateTime=0x1d5dd65, ftLastWriteTime.dwLowDateTime=0x7509a760, ftLastWriteTime.dwHighDateTime=0x1d5dd65, nFileSizeHigh=0x0, nFileSizeLow=0xf368, dwReserved0=0x0, dwReserved1=0x0, cFileName="TuLuB1aKsHS-_cYIE.csv", cAlternateFileName="TULUB1~1.CSV")) returned 1 [0084.679] FindNextFileW (in: hFindFile=0x381d40, lpFindFileData=0x31e56c | out: lpFindFileData=0x31e56c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x96815570, ftCreationTime.dwHighDateTime=0x1d5d8e0, ftLastAccessTime.dwLowDateTime=0x318a2640, ftLastAccessTime.dwHighDateTime=0x1d5e03a, ftLastWriteTime.dwLowDateTime=0x318a2640, ftLastWriteTime.dwHighDateTime=0x1d5e03a, nFileSizeHigh=0x0, nFileSizeLow=0x68e8, dwReserved0=0x0, dwReserved1=0x0, cFileName="Uhq4eqc0GR9.m4a", cAlternateFileName="UHQ4EQ~1.M4A")) returned 1 [0084.679] FindNextFileW (in: hFindFile=0x381d40, lpFindFileData=0x31e56c | out: lpFindFileData=0x31e56c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa67bfd30, ftCreationTime.dwHighDateTime=0x1d5e39a, ftLastAccessTime.dwLowDateTime=0x9d8a61c0, ftLastAccessTime.dwHighDateTime=0x1d5e431, ftLastWriteTime.dwLowDateTime=0x9d8a61c0, ftLastWriteTime.dwHighDateTime=0x1d5e431, nFileSizeHigh=0x0, nFileSizeLow=0x1321e, dwReserved0=0x0, dwReserved1=0x0, cFileName="UvlrnJnT_l t.png", cAlternateFileName="UVLRNJ~1.PNG")) returned 1 [0084.679] FindNextFileW (in: hFindFile=0x381d40, lpFindFileData=0x31e56c | out: lpFindFileData=0x31e56c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5047cf0, ftCreationTime.dwHighDateTime=0x1d5e739, ftLastAccessTime.dwLowDateTime=0xde80da30, ftLastAccessTime.dwHighDateTime=0x1d5d95d, ftLastWriteTime.dwLowDateTime=0xde80da30, ftLastWriteTime.dwHighDateTime=0x1d5d95d, nFileSizeHigh=0x0, nFileSizeLow=0x923, dwReserved0=0x0, dwReserved1=0x0, cFileName="UVT6TQK.png", cAlternateFileName="")) returned 1 [0084.679] FindNextFileW (in: hFindFile=0x381d40, lpFindFileData=0x31e56c | out: lpFindFileData=0x31e56c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x89e03450, ftCreationTime.dwHighDateTime=0x1d5e711, ftLastAccessTime.dwLowDateTime=0x4256c720, ftLastAccessTime.dwHighDateTime=0x1d5d834, ftLastWriteTime.dwLowDateTime=0x4256c720, ftLastWriteTime.dwHighDateTime=0x1d5d834, nFileSizeHigh=0x0, nFileSizeLow=0x504e, dwReserved0=0x0, dwReserved1=0x0, cFileName="UXStKO.gif", cAlternateFileName="")) returned 1 [0084.679] FindNextFileW (in: hFindFile=0x381d40, lpFindFileData=0x31e56c | out: lpFindFileData=0x31e56c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x61433de0, ftCreationTime.dwHighDateTime=0x1d5e18e, ftLastAccessTime.dwLowDateTime=0x46909370, ftLastAccessTime.dwHighDateTime=0x1d5ddca, ftLastWriteTime.dwLowDateTime=0x46909370, ftLastWriteTime.dwHighDateTime=0x1d5ddca, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="W2JtfG_38gA", cAlternateFileName="W2JTFG~1")) returned 1 [0084.679] FindNextFileW (in: hFindFile=0x381d40, lpFindFileData=0x31e56c | out: lpFindFileData=0x31e56c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xfc35f5c0, ftCreationTime.dwHighDateTime=0x1d5d86c, ftLastAccessTime.dwLowDateTime=0x7f7548a0, ftLastAccessTime.dwHighDateTime=0x1d5e100, ftLastWriteTime.dwLowDateTime=0x7f7548a0, ftLastWriteTime.dwHighDateTime=0x1d5e100, nFileSizeHigh=0x0, nFileSizeLow=0x34e0, dwReserved0=0x0, dwReserved1=0x0, cFileName="wzR1a01KM.avi", cAlternateFileName="WZR1A0~1.AVI")) returned 1 [0084.679] FindNextFileW (in: hFindFile=0x381d40, lpFindFileData=0x31e56c | out: lpFindFileData=0x31e56c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa5cc1ca0, ftCreationTime.dwHighDateTime=0x1d5e433, ftLastAccessTime.dwLowDateTime=0xe3bde090, ftLastAccessTime.dwHighDateTime=0x1d5e594, ftLastWriteTime.dwLowDateTime=0xe3bde090, ftLastWriteTime.dwHighDateTime=0x1d5e594, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="xhxot_kWSkhA9P", cAlternateFileName="XHXOT_~1")) returned 1 [0084.679] FindNextFileW (in: hFindFile=0x381d40, lpFindFileData=0x31e56c | out: lpFindFileData=0x31e56c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa481b680, ftCreationTime.dwHighDateTime=0x1d5db18, ftLastAccessTime.dwLowDateTime=0x21e05db0, ftLastAccessTime.dwHighDateTime=0x1d5e0f1, ftLastWriteTime.dwLowDateTime=0x21e05db0, ftLastWriteTime.dwHighDateTime=0x1d5e0f1, nFileSizeHigh=0x0, nFileSizeLow=0x16574, dwReserved0=0x0, dwReserved1=0x0, cFileName="xi26C-f e26K1XH.ppt", cAlternateFileName="XI26C-~1.PPT")) returned 1 [0084.679] FindNextFileW (in: hFindFile=0x381d40, lpFindFileData=0x31e56c | out: lpFindFileData=0x31e56c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb6f209c0, ftCreationTime.dwHighDateTime=0x1d5e480, ftLastAccessTime.dwLowDateTime=0xbcdd7880, ftLastAccessTime.dwHighDateTime=0x1d5e2d5, ftLastWriteTime.dwLowDateTime=0xbcdd7880, ftLastWriteTime.dwHighDateTime=0x1d5e2d5, nFileSizeHigh=0x0, nFileSizeLow=0xd14b, dwReserved0=0x0, dwReserved1=0x0, cFileName="YCXGBLVtV61m.ots", cAlternateFileName="YCXGBL~1.OTS")) returned 1 [0084.679] FindNextFileW (in: hFindFile=0x381d40, lpFindFileData=0x31e56c | out: lpFindFileData=0x31e56c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb6f209c0, ftCreationTime.dwHighDateTime=0x1d5e480, ftLastAccessTime.dwLowDateTime=0xbcdd7880, ftLastAccessTime.dwHighDateTime=0x1d5e2d5, ftLastWriteTime.dwLowDateTime=0xbcdd7880, ftLastWriteTime.dwHighDateTime=0x1d5e2d5, nFileSizeHigh=0x0, nFileSizeLow=0xd14b, dwReserved0=0x0, dwReserved1=0x0, cFileName="YCXGBLVtV61m.ots", cAlternateFileName="YCXGBL~1.OTS")) returned 0 [0084.679] FindClose (in: hFindFile=0x381d40 | out: hFindFile=0x381d40) returned 1 [0084.679] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e7f4) returned 1 [0084.679] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e800) returned 1 [0084.679] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\6b4NNrp5 bh.pdf", nBufferLength=0x105, lpBuffer=0x31e20c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\6b4NNrp5 bh.pdf", lpFilePart=0x0) returned 0x35 [0084.679] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e700) returned 1 [0084.679] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\6b4NNrp5 bh.pdf" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\6b4nnrp5 bh.pdf"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x264 [0084.679] GetFileType (hFile=0x264) returned 0x1 [0084.679] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e6fc) returned 1 [0084.679] GetFileType (hFile=0x264) returned 0x1 [0084.679] GetFileSize (in: hFile=0x264, lpFileSizeHigh=0x31e808 | out: lpFileSizeHigh=0x31e808*=0x0) returned 0x6a0e [0084.680] ReadFile (in: hFile=0x264, lpBuffer=0x265c95c, nNumberOfBytesToRead=0x6a0e, lpNumberOfBytesRead=0x31e7b4, lpOverlapped=0x0 | out: lpBuffer=0x265c95c*, lpNumberOfBytesRead=0x31e7b4*=0x6a0e, lpOverlapped=0x0) returned 1 [0084.680] CloseHandle (hObject=0x264) returned 1 [0084.721] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\6b4NNrp5 bh.pdf", nBufferLength=0x105, lpBuffer=0x31e1f8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\6b4NNrp5 bh.pdf", lpFilePart=0x0) returned 0x35 [0084.721] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e6ec) returned 1 [0084.721] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\6b4NNrp5 bh.pdf" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\6b4nnrp5 bh.pdf"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x264 [0084.722] GetFileType (hFile=0x264) returned 0x1 [0084.722] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e6e8) returned 1 [0084.723] GetFileType (hFile=0x264) returned 0x1 [0084.723] WriteFile (in: hFile=0x264, lpBuffer=0x26caaf0*, nNumberOfBytesToWrite=0x6a10, lpNumberOfBytesWritten=0x31e7a8, lpOverlapped=0x0 | out: lpBuffer=0x26caaf0*, lpNumberOfBytesWritten=0x31e7a8*=0x6a10, lpOverlapped=0x0) returned 1 [0084.724] CloseHandle (hObject=0x264) returned 1 [0084.724] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\6b4NNrp5 bh.pdf", nBufferLength=0x105, lpBuffer=0x31e32c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\6b4NNrp5 bh.pdf", lpFilePart=0x0) returned 0x35 [0084.724] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\6b4NNrp5 bh.pdf", nBufferLength=0x105, lpBuffer=0x31e32c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\6b4NNrp5 bh.pdf", lpFilePart=0x0) returned 0x35 [0084.724] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e78c) returned 1 [0084.724] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\6b4NNrp5 bh.pdf" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\6b4nnrp5 bh.pdf"), fInfoLevelId=0x0, lpFileInformation=0x31e808 | out: lpFileInformation=0x31e808*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9ece53a0, ftCreationTime.dwHighDateTime=0x1d5d821, ftLastAccessTime.dwLowDateTime=0x74cf9c10, ftLastAccessTime.dwHighDateTime=0x1d5e4ee, ftLastWriteTime.dwLowDateTime=0x15f26f40, ftLastWriteTime.dwHighDateTime=0x1d6eb7f, nFileSizeHigh=0x0, nFileSizeLow=0x6a10)) returned 1 [0084.724] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e788) returned 1 [0084.724] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\6b4NNrp5 bh.pdf" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\6b4nnrp5 bh.pdf"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\6b4NNrp5 bh.pdf" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\6b4nnrp5 bh.pdf")) returned 1 [0084.725] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\99MhsqKE-rdB-aBVWt9F.mp4", nBufferLength=0x105, lpBuffer=0x31e20c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\99MhsqKE-rdB-aBVWt9F.mp4", lpFilePart=0x0) returned 0x3e [0084.725] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e700) returned 1 [0084.725] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\99MhsqKE-rdB-aBVWt9F.mp4" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\99mhsqke-rdb-abvwt9f.mp4"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x264 [0084.725] GetFileType (hFile=0x264) returned 0x1 [0084.725] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e6fc) returned 1 [0084.725] GetFileType (hFile=0x264) returned 0x1 [0084.725] GetFileSize (in: hFile=0x264, lpFileSizeHigh=0x31e808 | out: lpFileSizeHigh=0x31e808*=0x0) returned 0x3b9f [0084.725] ReadFile (in: hFile=0x264, lpBuffer=0x26d1854, nNumberOfBytesToRead=0x3b9f, lpNumberOfBytesRead=0x31e7b4, lpOverlapped=0x0 | out: lpBuffer=0x26d1854*, lpNumberOfBytesRead=0x31e7b4*=0x3b9f, lpOverlapped=0x0) returned 1 [0084.726] CloseHandle (hObject=0x264) returned 1 [0084.740] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\99MhsqKE-rdB-aBVWt9F.mp4", nBufferLength=0x105, lpBuffer=0x31e1f8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\99MhsqKE-rdB-aBVWt9F.mp4", lpFilePart=0x0) returned 0x3e [0084.740] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e6ec) returned 1 [0084.740] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\99MhsqKE-rdB-aBVWt9F.mp4" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\99mhsqke-rdb-abvwt9f.mp4"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x264 [0084.741] GetFileType (hFile=0x264) returned 0x1 [0084.741] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e6e8) returned 1 [0084.741] GetFileType (hFile=0x264) returned 0x1 [0084.741] WriteFile (in: hFile=0x264, lpBuffer=0x273105c*, nNumberOfBytesToWrite=0x3ba0, lpNumberOfBytesWritten=0x31e7a8, lpOverlapped=0x0 | out: lpBuffer=0x273105c*, lpNumberOfBytesWritten=0x31e7a8*=0x3ba0, lpOverlapped=0x0) returned 1 [0084.742] CloseHandle (hObject=0x264) returned 1 [0084.742] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\99MhsqKE-rdB-aBVWt9F.mp4", nBufferLength=0x105, lpBuffer=0x31e32c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\99MhsqKE-rdB-aBVWt9F.mp4", lpFilePart=0x0) returned 0x3e [0084.742] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\99MhsqKE-rdB-aBVWt9F.mp4", nBufferLength=0x105, lpBuffer=0x31e32c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\99MhsqKE-rdB-aBVWt9F.mp4", lpFilePart=0x0) returned 0x3e [0084.742] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e78c) returned 1 [0084.742] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\99MhsqKE-rdB-aBVWt9F.mp4" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\99mhsqke-rdb-abvwt9f.mp4"), fInfoLevelId=0x0, lpFileInformation=0x31e808 | out: lpFileInformation=0x31e808*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf5c9ba20, ftCreationTime.dwHighDateTime=0x1d5e58f, ftLastAccessTime.dwLowDateTime=0x8ddae20, ftLastAccessTime.dwHighDateTime=0x1d5e7aa, ftLastWriteTime.dwLowDateTime=0x15f4d0a0, ftLastWriteTime.dwHighDateTime=0x1d6eb7f, nFileSizeHigh=0x0, nFileSizeLow=0x3ba0)) returned 1 [0084.742] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e788) returned 1 [0084.742] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\99MhsqKE-rdB-aBVWt9F.mp4" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\99mhsqke-rdb-abvwt9f.mp4"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\99MhsqKE-rdB-aBVWt9F.mp4" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\99mhsqke-rdb-abvwt9f.mp4")) returned 1 [0084.743] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\dVMHP12YJw.avi", nBufferLength=0x105, lpBuffer=0x31e20c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\dVMHP12YJw.avi", lpFilePart=0x0) returned 0x34 [0084.743] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e700) returned 1 [0084.743] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\dVMHP12YJw.avi" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\dvmhp12yjw.avi"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x264 [0084.743] GetFileType (hFile=0x264) returned 0x1 [0084.743] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e6fc) returned 1 [0084.743] GetFileType (hFile=0x264) returned 0x1 [0084.743] GetFileSize (in: hFile=0x264, lpFileSizeHigh=0x31e808 | out: lpFileSizeHigh=0x31e808*=0x0) returned 0x7e4b [0084.743] ReadFile (in: hFile=0x264, lpBuffer=0x2734f90, nNumberOfBytesToRead=0x7e4b, lpNumberOfBytesRead=0x31e7b4, lpOverlapped=0x0 | out: lpBuffer=0x2734f90*, lpNumberOfBytesRead=0x31e7b4*=0x7e4b, lpOverlapped=0x0) returned 1 [0084.744] CloseHandle (hObject=0x264) returned 1 [0084.760] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\dVMHP12YJw.avi", nBufferLength=0x105, lpBuffer=0x31e1f8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\dVMHP12YJw.avi", lpFilePart=0x0) returned 0x34 [0084.760] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e6ec) returned 1 [0084.760] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\dVMHP12YJw.avi" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\dvmhp12yjw.avi"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x264 [0084.761] GetFileType (hFile=0x264) returned 0x1 [0084.761] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e6e8) returned 1 [0084.761] GetFileType (hFile=0x264) returned 0x1 [0084.761] WriteFile (in: hFile=0x264, lpBuffer=0x27a9508*, nNumberOfBytesToWrite=0x7e50, lpNumberOfBytesWritten=0x31e7a8, lpOverlapped=0x0 | out: lpBuffer=0x27a9508*, lpNumberOfBytesWritten=0x31e7a8*=0x7e50, lpOverlapped=0x0) returned 1 [0084.762] CloseHandle (hObject=0x264) returned 1 [0084.763] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\dVMHP12YJw.avi", nBufferLength=0x105, lpBuffer=0x31e32c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\dVMHP12YJw.avi", lpFilePart=0x0) returned 0x34 [0084.763] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\dVMHP12YJw.avi", nBufferLength=0x105, lpBuffer=0x31e32c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\dVMHP12YJw.avi", lpFilePart=0x0) returned 0x34 [0084.763] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e78c) returned 1 [0084.763] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\dVMHP12YJw.avi" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\dvmhp12yjw.avi"), fInfoLevelId=0x0, lpFileInformation=0x31e808 | out: lpFileInformation=0x31e808*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x20e85da0, ftCreationTime.dwHighDateTime=0x1d5e78a, ftLastAccessTime.dwLowDateTime=0x555fbf70, ftLastAccessTime.dwHighDateTime=0x1d5d7ad, ftLastWriteTime.dwLowDateTime=0x15f73200, ftLastWriteTime.dwHighDateTime=0x1d6eb7f, nFileSizeHigh=0x0, nFileSizeLow=0x7e50)) returned 1 [0084.763] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e788) returned 1 [0084.763] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\dVMHP12YJw.avi" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\dvmhp12yjw.avi"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\dVMHP12YJw.avi" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\dvmhp12yjw.avi")) returned 1 [0084.763] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\HhqZlj.wav", nBufferLength=0x105, lpBuffer=0x31e20c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\HhqZlj.wav", lpFilePart=0x0) returned 0x30 [0084.763] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e700) returned 1 [0084.763] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\HhqZlj.wav" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\hhqzlj.wav"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x264 [0084.764] GetFileType (hFile=0x264) returned 0x1 [0084.764] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e6fc) returned 1 [0084.764] GetFileType (hFile=0x264) returned 0x1 [0084.764] GetFileSize (in: hFile=0x264, lpFileSizeHigh=0x31e808 | out: lpFileSizeHigh=0x31e808*=0x0) returned 0x1413f [0084.764] ReadFile (in: hFile=0x264, lpBuffer=0x27b165c, nNumberOfBytesToRead=0x1413f, lpNumberOfBytesRead=0x31e7b4, lpOverlapped=0x0 | out: lpBuffer=0x27b165c*, lpNumberOfBytesRead=0x31e7b4*=0x1413f, lpOverlapped=0x0) returned 1 [0084.765] CloseHandle (hObject=0x264) returned 1 [0084.782] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\HhqZlj.wav", nBufferLength=0x105, lpBuffer=0x31e1f8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\HhqZlj.wav", lpFilePart=0x0) returned 0x30 [0084.782] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e6ec) returned 1 [0084.782] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\HhqZlj.wav" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\hhqzlj.wav"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x264 [0084.784] GetFileType (hFile=0x264) returned 0x1 [0084.784] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e6e8) returned 1 [0084.784] GetFileType (hFile=0x264) returned 0x1 [0084.784] WriteFile (in: hFile=0x264, lpBuffer=0x26434b8*, nNumberOfBytesToWrite=0x14140, lpNumberOfBytesWritten=0x31e7a8, lpOverlapped=0x0 | out: lpBuffer=0x26434b8*, lpNumberOfBytesWritten=0x31e7a8*=0x14140, lpOverlapped=0x0) returned 1 [0084.786] CloseHandle (hObject=0x264) returned 1 [0084.786] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\HhqZlj.wav", nBufferLength=0x105, lpBuffer=0x31e32c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\HhqZlj.wav", lpFilePart=0x0) returned 0x30 [0084.786] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\HhqZlj.wav", nBufferLength=0x105, lpBuffer=0x31e32c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\HhqZlj.wav", lpFilePart=0x0) returned 0x30 [0084.786] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e78c) returned 1 [0084.786] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\HhqZlj.wav" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\hhqzlj.wav"), fInfoLevelId=0x0, lpFileInformation=0x31e808 | out: lpFileInformation=0x31e808*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7508f630, ftCreationTime.dwHighDateTime=0x1d5e74c, ftLastAccessTime.dwLowDateTime=0x71780f20, ftLastAccessTime.dwHighDateTime=0x1d5e60b, ftLastWriteTime.dwLowDateTime=0x15f99360, ftLastWriteTime.dwHighDateTime=0x1d6eb7f, nFileSizeHigh=0x0, nFileSizeLow=0x14140)) returned 1 [0084.786] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e788) returned 1 [0084.786] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\HhqZlj.wav" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\hhqzlj.wav"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\HhqZlj.wav" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\hhqzlj.wav")) returned 1 [0084.787] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\HtDElibU1DDUUobGb2we.avi", nBufferLength=0x105, lpBuffer=0x31e20c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\HtDElibU1DDUUobGb2we.avi", lpFilePart=0x0) returned 0x3e [0084.787] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e700) returned 1 [0084.787] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\HtDElibU1DDUUobGb2we.avi" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\htdelibu1dduuobgb2we.avi"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x264 [0084.787] GetFileType (hFile=0x264) returned 0x1 [0084.787] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e6fc) returned 1 [0084.787] GetFileType (hFile=0x264) returned 0x1 [0084.787] GetFileSize (in: hFile=0x264, lpFileSizeHigh=0x31e808 | out: lpFileSizeHigh=0x31e808*=0x0) returned 0x3e85 [0084.787] ReadFile (in: hFile=0x264, lpBuffer=0x2657914, nNumberOfBytesToRead=0x3e85, lpNumberOfBytesRead=0x31e7b4, lpOverlapped=0x0 | out: lpBuffer=0x2657914*, lpNumberOfBytesRead=0x31e7b4*=0x3e85, lpOverlapped=0x0) returned 1 [0084.788] CloseHandle (hObject=0x264) returned 1 [0084.826] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\HtDElibU1DDUUobGb2we.avi", nBufferLength=0x105, lpBuffer=0x31e1f8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\HtDElibU1DDUUobGb2we.avi", lpFilePart=0x0) returned 0x3e [0084.826] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e6ec) returned 1 [0084.826] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\HtDElibU1DDUUobGb2we.avi" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\htdelibu1dduuobgb2we.avi"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x264 [0084.827] GetFileType (hFile=0x264) returned 0x1 [0084.827] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e6e8) returned 1 [0084.827] GetFileType (hFile=0x264) returned 0x1 [0084.827] WriteFile (in: hFile=0x264, lpBuffer=0x26b8128*, nNumberOfBytesToWrite=0x3e90, lpNumberOfBytesWritten=0x31e7a8, lpOverlapped=0x0 | out: lpBuffer=0x26b8128*, lpNumberOfBytesWritten=0x31e7a8*=0x3e90, lpOverlapped=0x0) returned 1 [0084.828] CloseHandle (hObject=0x264) returned 1 [0084.829] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\HtDElibU1DDUUobGb2we.avi", nBufferLength=0x105, lpBuffer=0x31e32c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\HtDElibU1DDUUobGb2we.avi", lpFilePart=0x0) returned 0x3e [0084.829] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\HtDElibU1DDUUobGb2we.avi", nBufferLength=0x105, lpBuffer=0x31e32c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\HtDElibU1DDUUobGb2we.avi", lpFilePart=0x0) returned 0x3e [0084.829] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e78c) returned 1 [0084.829] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\HtDElibU1DDUUobGb2we.avi" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\htdelibu1dduuobgb2we.avi"), fInfoLevelId=0x0, lpFileInformation=0x31e808 | out: lpFileInformation=0x31e808*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4d876660, ftCreationTime.dwHighDateTime=0x1d5e1bf, ftLastAccessTime.dwLowDateTime=0x577e8010, ftLastAccessTime.dwHighDateTime=0x1d5d8c6, ftLastWriteTime.dwLowDateTime=0x1600b780, ftLastWriteTime.dwHighDateTime=0x1d6eb7f, nFileSizeHigh=0x0, nFileSizeLow=0x3e90)) returned 1 [0084.829] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e788) returned 1 [0084.829] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\HtDElibU1DDUUobGb2we.avi" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\htdelibu1dduuobgb2we.avi"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\HtDElibU1DDUUobGb2we.avi" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\htdelibu1dduuobgb2we.avi")) returned 1 [0084.829] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\Huq3uXdk.mp4", nBufferLength=0x105, lpBuffer=0x31e20c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\Huq3uXdk.mp4", lpFilePart=0x0) returned 0x32 [0084.829] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e700) returned 1 [0084.829] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\Huq3uXdk.mp4" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\huq3uxdk.mp4"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x264 [0084.830] GetFileType (hFile=0x264) returned 0x1 [0084.830] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e6fc) returned 1 [0084.830] GetFileType (hFile=0x264) returned 0x1 [0084.830] GetFileSize (in: hFile=0x264, lpFileSizeHigh=0x31e808 | out: lpFileSizeHigh=0x31e808*=0x0) returned 0x51cc [0084.830] ReadFile (in: hFile=0x264, lpBuffer=0x26bc314, nNumberOfBytesToRead=0x51cc, lpNumberOfBytesRead=0x31e7b4, lpOverlapped=0x0 | out: lpBuffer=0x26bc314*, lpNumberOfBytesRead=0x31e7b4*=0x51cc, lpOverlapped=0x0) returned 1 [0084.831] CloseHandle (hObject=0x264) returned 1 [0084.845] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\Huq3uXdk.mp4", nBufferLength=0x105, lpBuffer=0x31e1f8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\Huq3uXdk.mp4", lpFilePart=0x0) returned 0x32 [0084.845] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e6ec) returned 1 [0084.845] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\Huq3uXdk.mp4" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\huq3uxdk.mp4"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x264 [0084.846] GetFileType (hFile=0x264) returned 0x1 [0084.846] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e6e8) returned 1 [0084.846] GetFileType (hFile=0x264) returned 0x1 [0084.846] WriteFile (in: hFile=0x264, lpBuffer=0x2722a08*, nNumberOfBytesToWrite=0x51d0, lpNumberOfBytesWritten=0x31e7a8, lpOverlapped=0x0 | out: lpBuffer=0x2722a08*, lpNumberOfBytesWritten=0x31e7a8*=0x51d0, lpOverlapped=0x0) returned 1 [0084.847] CloseHandle (hObject=0x264) returned 1 [0084.847] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\Huq3uXdk.mp4", nBufferLength=0x105, lpBuffer=0x31e32c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\Huq3uXdk.mp4", lpFilePart=0x0) returned 0x32 [0084.847] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\Huq3uXdk.mp4", nBufferLength=0x105, lpBuffer=0x31e32c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\Huq3uXdk.mp4", lpFilePart=0x0) returned 0x32 [0084.847] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e78c) returned 1 [0084.847] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\Huq3uXdk.mp4" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\huq3uxdk.mp4"), fInfoLevelId=0x0, lpFileInformation=0x31e808 | out: lpFileInformation=0x31e808*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x40857900, ftCreationTime.dwHighDateTime=0x1d5e4aa, ftLastAccessTime.dwLowDateTime=0xd31c04d0, ftLastAccessTime.dwHighDateTime=0x1d5e308, ftLastWriteTime.dwLowDateTime=0x160318e0, ftLastWriteTime.dwHighDateTime=0x1d6eb7f, nFileSizeHigh=0x0, nFileSizeLow=0x51d0)) returned 1 [0084.847] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e788) returned 1 [0084.847] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\Huq3uXdk.mp4" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\huq3uxdk.mp4"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\Huq3uXdk.mp4" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\huq3uxdk.mp4")) returned 1 [0084.848] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\jJnNyz.mp3", nBufferLength=0x105, lpBuffer=0x31e20c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\jJnNyz.mp3", lpFilePart=0x0) returned 0x30 [0084.848] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e700) returned 1 [0084.848] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\jJnNyz.mp3" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\jjnnyz.mp3"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x264 [0084.848] GetFileType (hFile=0x264) returned 0x1 [0084.848] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e6fc) returned 1 [0084.848] GetFileType (hFile=0x264) returned 0x1 [0084.848] GetFileSize (in: hFile=0x264, lpFileSizeHigh=0x31e808 | out: lpFileSizeHigh=0x31e808*=0x0) returned 0x14a41 [0084.848] ReadFile (in: hFile=0x264, lpBuffer=0x2727ecc, nNumberOfBytesToRead=0x14a41, lpNumberOfBytesRead=0x31e7b4, lpOverlapped=0x0 | out: lpBuffer=0x2727ecc*, lpNumberOfBytesRead=0x31e7b4*=0x14a41, lpOverlapped=0x0) returned 1 [0084.850] CloseHandle (hObject=0x264) returned 1 [0084.954] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\jJnNyz.mp3", nBufferLength=0x105, lpBuffer=0x31e1f8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\jJnNyz.mp3", lpFilePart=0x0) returned 0x30 [0084.954] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e6ec) returned 1 [0084.954] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\jJnNyz.mp3" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\jjnnyz.mp3"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x264 [0084.955] GetFileType (hFile=0x264) returned 0x1 [0084.955] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e6e8) returned 1 [0084.955] GetFileType (hFile=0x264) returned 0x1 [0084.955] WriteFile (in: hFile=0x264, lpBuffer=0x27b2bb8*, nNumberOfBytesToWrite=0x14a50, lpNumberOfBytesWritten=0x31e7a8, lpOverlapped=0x0 | out: lpBuffer=0x27b2bb8*, lpNumberOfBytesWritten=0x31e7a8*=0x14a50, lpOverlapped=0x0) returned 1 [0084.957] CloseHandle (hObject=0x264) returned 1 [0084.958] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\jJnNyz.mp3", nBufferLength=0x105, lpBuffer=0x31e32c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\jJnNyz.mp3", lpFilePart=0x0) returned 0x30 [0084.958] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\jJnNyz.mp3", nBufferLength=0x105, lpBuffer=0x31e32c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\jJnNyz.mp3", lpFilePart=0x0) returned 0x30 [0084.958] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e78c) returned 1 [0084.958] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\jJnNyz.mp3" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\jjnnyz.mp3"), fInfoLevelId=0x0, lpFileInformation=0x31e808 | out: lpFileInformation=0x31e808*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x954ba360, ftCreationTime.dwHighDateTime=0x1d5e44b, ftLastAccessTime.dwLowDateTime=0xe5986090, ftLastAccessTime.dwHighDateTime=0x1d5e5ce, ftLastWriteTime.dwLowDateTime=0x1613c280, ftLastWriteTime.dwHighDateTime=0x1d6eb7f, nFileSizeHigh=0x0, nFileSizeLow=0x14a50)) returned 1 [0084.958] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e788) returned 1 [0084.958] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\jJnNyz.mp3" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\jjnnyz.mp3"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\jJnNyz.mp3" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\jjnnyz.mp3")) returned 1 [0084.959] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\j_g3ZRLUMjKwy4 0Ihg.xlsx", nBufferLength=0x105, lpBuffer=0x31e20c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\j_g3ZRLUMjKwy4 0Ihg.xlsx", lpFilePart=0x0) returned 0x3e [0084.959] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e700) returned 1 [0084.959] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\j_g3ZRLUMjKwy4 0Ihg.xlsx" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\j_g3zrlumjkwy4 0ihg.xlsx"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x264 [0084.959] GetFileType (hFile=0x264) returned 0x1 [0084.959] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e6fc) returned 1 [0084.959] GetFileType (hFile=0x264) returned 0x1 [0084.959] GetFileSize (in: hFile=0x264, lpFileSizeHigh=0x31e808 | out: lpFileSizeHigh=0x31e808*=0x0) returned 0x2d36 [0084.959] ReadFile (in: hFile=0x264, lpBuffer=0x27c7924, nNumberOfBytesToRead=0x2d36, lpNumberOfBytesRead=0x31e7b4, lpOverlapped=0x0 | out: lpBuffer=0x27c7924*, lpNumberOfBytesRead=0x31e7b4*=0x2d36, lpOverlapped=0x0) returned 1 [0084.960] CloseHandle (hObject=0x264) returned 1 [0084.973] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\j_g3ZRLUMjKwy4 0Ihg.xlsx", nBufferLength=0x105, lpBuffer=0x31e1f8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\j_g3ZRLUMjKwy4 0Ihg.xlsx", lpFilePart=0x0) returned 0x3e [0084.973] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e6ec) returned 1 [0084.973] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\j_g3ZRLUMjKwy4 0Ihg.xlsx" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\j_g3zrlumjkwy4 0ihg.xlsx"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x264 [0084.974] GetFileType (hFile=0x264) returned 0x1 [0084.975] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e6e8) returned 1 [0084.975] GetFileType (hFile=0x264) returned 0x1 [0084.975] WriteFile (in: hFile=0x264, lpBuffer=0x282294c*, nNumberOfBytesToWrite=0x2d40, lpNumberOfBytesWritten=0x31e7a8, lpOverlapped=0x0 | out: lpBuffer=0x282294c*, lpNumberOfBytesWritten=0x31e7a8*=0x2d40, lpOverlapped=0x0) returned 1 [0084.976] CloseHandle (hObject=0x264) returned 1 [0084.976] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\j_g3ZRLUMjKwy4 0Ihg.xlsx", nBufferLength=0x105, lpBuffer=0x31e32c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\j_g3ZRLUMjKwy4 0Ihg.xlsx", lpFilePart=0x0) returned 0x3e [0084.976] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\j_g3ZRLUMjKwy4 0Ihg.xlsx", nBufferLength=0x105, lpBuffer=0x31e32c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\j_g3ZRLUMjKwy4 0Ihg.xlsx", lpFilePart=0x0) returned 0x3e [0084.976] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e78c) returned 1 [0084.976] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\j_g3ZRLUMjKwy4 0Ihg.xlsx" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\j_g3zrlumjkwy4 0ihg.xlsx"), fInfoLevelId=0x0, lpFileInformation=0x31e808 | out: lpFileInformation=0x31e808*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa0ce6d80, ftCreationTime.dwHighDateTime=0x1d5ddc0, ftLastAccessTime.dwLowDateTime=0xddc44020, ftLastAccessTime.dwHighDateTime=0x1d5e351, ftLastWriteTime.dwLowDateTime=0x16188540, ftLastWriteTime.dwHighDateTime=0x1d6eb7f, nFileSizeHigh=0x0, nFileSizeLow=0x2d40)) returned 1 [0084.976] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e788) returned 1 [0084.976] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\j_g3ZRLUMjKwy4 0Ihg.xlsx" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\j_g3zrlumjkwy4 0ihg.xlsx"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\j_g3ZRLUMjKwy4 0Ihg.xlsx" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\j_g3zrlumjkwy4 0ihg.xlsx")) returned 1 [0084.977] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\kr6eFTD-N.wav", nBufferLength=0x105, lpBuffer=0x31e20c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\kr6eFTD-N.wav", lpFilePart=0x0) returned 0x33 [0084.977] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e700) returned 1 [0084.977] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\kr6eFTD-N.wav" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\kr6eftd-n.wav"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x264 [0084.977] GetFileType (hFile=0x264) returned 0x1 [0084.977] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e6fc) returned 1 [0084.977] GetFileType (hFile=0x264) returned 0x1 [0084.977] GetFileSize (in: hFile=0x264, lpFileSizeHigh=0x31e808 | out: lpFileSizeHigh=0x31e808*=0x0) returned 0x7c7e [0084.977] ReadFile (in: hFile=0x264, lpBuffer=0x28259e8, nNumberOfBytesToRead=0x7c7e, lpNumberOfBytesRead=0x31e7b4, lpOverlapped=0x0 | out: lpBuffer=0x28259e8*, lpNumberOfBytesRead=0x31e7b4*=0x7c7e, lpOverlapped=0x0) returned 1 [0084.978] CloseHandle (hObject=0x264) returned 1 [0085.017] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\kr6eFTD-N.wav", nBufferLength=0x105, lpBuffer=0x31e1f8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\kr6eFTD-N.wav", lpFilePart=0x0) returned 0x33 [0085.017] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e6ec) returned 1 [0085.017] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\kr6eFTD-N.wav" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\kr6eftd-n.wav"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x264 [0085.019] GetFileType (hFile=0x264) returned 0x1 [0085.019] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e6e8) returned 1 [0085.019] GetFileType (hFile=0x264) returned 0x1 [0085.019] WriteFile (in: hFile=0x264, lpBuffer=0x26a16dc*, nNumberOfBytesToWrite=0x7c80, lpNumberOfBytesWritten=0x31e7a8, lpOverlapped=0x0 | out: lpBuffer=0x26a16dc*, lpNumberOfBytesWritten=0x31e7a8*=0x7c80, lpOverlapped=0x0) returned 1 [0085.020] CloseHandle (hObject=0x264) returned 1 [0085.020] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\kr6eFTD-N.wav", nBufferLength=0x105, lpBuffer=0x31e32c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\kr6eFTD-N.wav", lpFilePart=0x0) returned 0x33 [0085.020] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\kr6eFTD-N.wav", nBufferLength=0x105, lpBuffer=0x31e32c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\kr6eFTD-N.wav", lpFilePart=0x0) returned 0x33 [0085.020] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e78c) returned 1 [0085.020] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\kr6eFTD-N.wav" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\kr6eftd-n.wav"), fInfoLevelId=0x0, lpFileInformation=0x31e808 | out: lpFileInformation=0x31e808*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb350d30, ftCreationTime.dwHighDateTime=0x1d5e32c, ftLastAccessTime.dwLowDateTime=0xb5d3dbb0, ftLastAccessTime.dwHighDateTime=0x1d5e645, ftLastWriteTime.dwLowDateTime=0x161d4800, ftLastWriteTime.dwHighDateTime=0x1d6eb7f, nFileSizeHigh=0x0, nFileSizeLow=0x7c80)) returned 1 [0085.021] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e788) returned 1 [0085.021] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\kr6eFTD-N.wav" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\kr6eftd-n.wav"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\kr6eFTD-N.wav" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\kr6eftd-n.wav")) returned 1 [0085.021] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\LajwuWOfmL7z35P7ILh_.doc", nBufferLength=0x105, lpBuffer=0x31e20c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\LajwuWOfmL7z35P7ILh_.doc", lpFilePart=0x0) returned 0x3e [0085.021] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e700) returned 1 [0085.021] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\LajwuWOfmL7z35P7ILh_.doc" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\lajwuwofml7z35p7ilh_.doc"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x264 [0085.021] GetFileType (hFile=0x264) returned 0x1 [0085.021] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e6fc) returned 1 [0085.021] GetFileType (hFile=0x264) returned 0x1 [0085.021] GetFileSize (in: hFile=0x264, lpFileSizeHigh=0x31e808 | out: lpFileSizeHigh=0x31e808*=0x0) returned 0x13d3a [0085.021] ReadFile (in: hFile=0x264, lpBuffer=0x26a9688, nNumberOfBytesToRead=0x13d3a, lpNumberOfBytesRead=0x31e7b4, lpOverlapped=0x0 | out: lpBuffer=0x26a9688*, lpNumberOfBytesRead=0x31e7b4*=0x13d3a, lpOverlapped=0x0) returned 1 [0085.022] CloseHandle (hObject=0x264) returned 1 [0085.037] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\LajwuWOfmL7z35P7ILh_.doc", nBufferLength=0x105, lpBuffer=0x31e1f8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\LajwuWOfmL7z35P7ILh_.doc", lpFilePart=0x0) returned 0x3e [0085.037] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e6ec) returned 1 [0085.038] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\LajwuWOfmL7z35P7ILh_.doc" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\lajwuwofml7z35p7ilh_.doc"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x264 [0085.039] GetFileType (hFile=0x264) returned 0x1 [0085.039] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e6e8) returned 1 [0085.039] GetFileType (hFile=0x264) returned 0x1 [0085.039] WriteFile (in: hFile=0x264, lpBuffer=0x2731da0*, nNumberOfBytesToWrite=0x13d40, lpNumberOfBytesWritten=0x31e7a8, lpOverlapped=0x0 | out: lpBuffer=0x2731da0*, lpNumberOfBytesWritten=0x31e7a8*=0x13d40, lpOverlapped=0x0) returned 1 [0085.041] CloseHandle (hObject=0x264) returned 1 [0085.041] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\LajwuWOfmL7z35P7ILh_.doc", nBufferLength=0x105, lpBuffer=0x31e32c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\LajwuWOfmL7z35P7ILh_.doc", lpFilePart=0x0) returned 0x3e [0085.041] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\LajwuWOfmL7z35P7ILh_.doc", nBufferLength=0x105, lpBuffer=0x31e32c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\LajwuWOfmL7z35P7ILh_.doc", lpFilePart=0x0) returned 0x3e [0085.041] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e78c) returned 1 [0085.041] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\LajwuWOfmL7z35P7ILh_.doc" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\lajwuwofml7z35p7ilh_.doc"), fInfoLevelId=0x0, lpFileInformation=0x31e808 | out: lpFileInformation=0x31e808*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x800c6620, ftCreationTime.dwHighDateTime=0x1d5ddab, ftLastAccessTime.dwLowDateTime=0x221b2ff0, ftLastAccessTime.dwHighDateTime=0x1d5e798, ftLastWriteTime.dwLowDateTime=0x16220ac0, ftLastWriteTime.dwHighDateTime=0x1d6eb7f, nFileSizeHigh=0x0, nFileSizeLow=0x13d40)) returned 1 [0085.041] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e788) returned 1 [0085.042] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\LajwuWOfmL7z35P7ILh_.doc" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\lajwuwofml7z35p7ilh_.doc"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\LajwuWOfmL7z35P7ILh_.doc" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\lajwuwofml7z35p7ilh_.doc")) returned 1 [0085.042] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\ogh55mhoOIV0q8Di8.mp3", nBufferLength=0x105, lpBuffer=0x31e20c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\ogh55mhoOIV0q8Di8.mp3", lpFilePart=0x0) returned 0x3b [0085.042] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e700) returned 1 [0085.042] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\ogh55mhoOIV0q8Di8.mp3" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\ogh55mhooiv0q8di8.mp3"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x264 [0085.042] GetFileType (hFile=0x264) returned 0x1 [0085.042] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e6fc) returned 1 [0085.042] GetFileType (hFile=0x264) returned 0x1 [0085.042] GetFileSize (in: hFile=0x264, lpFileSizeHigh=0x31e808 | out: lpFileSizeHigh=0x31e808*=0x0) returned 0x154ff [0085.043] ReadFile (in: hFile=0x264, lpBuffer=0x36b6480, nNumberOfBytesToRead=0x154ff, lpNumberOfBytesRead=0x31e7b4, lpOverlapped=0x0 | out: lpBuffer=0x36b6480*, lpNumberOfBytesRead=0x31e7b4*=0x154ff, lpOverlapped=0x0) returned 1 [0085.044] CloseHandle (hObject=0x264) returned 1 [0085.059] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\ogh55mhoOIV0q8Di8.mp3", nBufferLength=0x105, lpBuffer=0x31e1f8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\ogh55mhoOIV0q8Di8.mp3", lpFilePart=0x0) returned 0x3b [0085.059] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e6ec) returned 1 [0085.059] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\ogh55mhoOIV0q8Di8.mp3" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\ogh55mhooiv0q8di8.mp3"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x264 [0085.061] GetFileType (hFile=0x264) returned 0x1 [0085.061] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e6e8) returned 1 [0085.061] GetFileType (hFile=0x264) returned 0x1 [0085.061] WriteFile (in: hFile=0x264, lpBuffer=0x38411f8*, nNumberOfBytesToWrite=0x15500, lpNumberOfBytesWritten=0x31e7a8, lpOverlapped=0x0 | out: lpBuffer=0x38411f8*, lpNumberOfBytesWritten=0x31e7a8*=0x15500, lpOverlapped=0x0) returned 1 [0085.063] CloseHandle (hObject=0x264) returned 1 [0085.063] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\ogh55mhoOIV0q8Di8.mp3", nBufferLength=0x105, lpBuffer=0x31e32c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\ogh55mhoOIV0q8Di8.mp3", lpFilePart=0x0) returned 0x3b [0085.063] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\ogh55mhoOIV0q8Di8.mp3", nBufferLength=0x105, lpBuffer=0x31e32c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\ogh55mhoOIV0q8Di8.mp3", lpFilePart=0x0) returned 0x3b [0085.063] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e78c) returned 1 [0085.063] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\ogh55mhoOIV0q8Di8.mp3" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\ogh55mhooiv0q8di8.mp3"), fInfoLevelId=0x0, lpFileInformation=0x31e808 | out: lpFileInformation=0x31e808*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3d3b8bc0, ftCreationTime.dwHighDateTime=0x1d5e3c6, ftLastAccessTime.dwLowDateTime=0xcb247f60, ftLastAccessTime.dwHighDateTime=0x1d5e695, ftLastWriteTime.dwLowDateTime=0x16246c20, ftLastWriteTime.dwHighDateTime=0x1d6eb7f, nFileSizeHigh=0x0, nFileSizeLow=0x15500)) returned 1 [0085.064] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e788) returned 1 [0085.064] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\ogh55mhoOIV0q8Di8.mp3" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\ogh55mhooiv0q8di8.mp3"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\ogh55mhoOIV0q8Di8.mp3" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\ogh55mhooiv0q8di8.mp3")) returned 1 [0085.064] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\PlzXFM1.pdf", nBufferLength=0x105, lpBuffer=0x31e20c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\PlzXFM1.pdf", lpFilePart=0x0) returned 0x31 [0085.064] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e700) returned 1 [0085.064] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\PlzXFM1.pdf" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\plzxfm1.pdf"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x264 [0085.064] GetFileType (hFile=0x264) returned 0x1 [0085.064] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e6fc) returned 1 [0085.064] GetFileType (hFile=0x264) returned 0x1 [0085.064] GetFileSize (in: hFile=0x264, lpFileSizeHigh=0x31e808 | out: lpFileSizeHigh=0x31e808*=0x0) returned 0x9420 [0085.064] ReadFile (in: hFile=0x264, lpBuffer=0x2792f7c, nNumberOfBytesToRead=0x9420, lpNumberOfBytesRead=0x31e7b4, lpOverlapped=0x0 | out: lpBuffer=0x2792f7c*, lpNumberOfBytesRead=0x31e7b4*=0x9420, lpOverlapped=0x0) returned 1 [0085.065] CloseHandle (hObject=0x264) returned 1 [0085.080] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\PlzXFM1.pdf", nBufferLength=0x105, lpBuffer=0x31e1f8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\PlzXFM1.pdf", lpFilePart=0x0) returned 0x31 [0085.080] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e6ec) returned 1 [0085.080] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\PlzXFM1.pdf" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\plzxfm1.pdf"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x264 [0085.081] GetFileType (hFile=0x264) returned 0x1 [0085.081] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e6e8) returned 1 [0085.081] GetFileType (hFile=0x264) returned 0x1 [0085.081] WriteFile (in: hFile=0x264, lpBuffer=0x280e250*, nNumberOfBytesToWrite=0x9430, lpNumberOfBytesWritten=0x31e7a8, lpOverlapped=0x0 | out: lpBuffer=0x280e250*, lpNumberOfBytesWritten=0x31e7a8*=0x9430, lpOverlapped=0x0) returned 1 [0085.083] CloseHandle (hObject=0x264) returned 1 [0085.083] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\PlzXFM1.pdf", nBufferLength=0x105, lpBuffer=0x31e32c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\PlzXFM1.pdf", lpFilePart=0x0) returned 0x31 [0085.083] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\PlzXFM1.pdf", nBufferLength=0x105, lpBuffer=0x31e32c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\PlzXFM1.pdf", lpFilePart=0x0) returned 0x31 [0085.083] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e78c) returned 1 [0085.083] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\PlzXFM1.pdf" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\plzxfm1.pdf"), fInfoLevelId=0x0, lpFileInformation=0x31e808 | out: lpFileInformation=0x31e808*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2ee296c0, ftCreationTime.dwHighDateTime=0x1d5e107, ftLastAccessTime.dwLowDateTime=0x72950210, ftLastAccessTime.dwHighDateTime=0x1d5d87c, ftLastWriteTime.dwLowDateTime=0x16292ee0, ftLastWriteTime.dwHighDateTime=0x1d6eb7f, nFileSizeHigh=0x0, nFileSizeLow=0x9430)) returned 1 [0085.083] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e788) returned 1 [0085.083] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\PlzXFM1.pdf" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\plzxfm1.pdf"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\PlzXFM1.pdf" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\plzxfm1.pdf")) returned 1 [0085.084] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\Qq6wMGqMzL.docx", nBufferLength=0x105, lpBuffer=0x31e20c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\Qq6wMGqMzL.docx", lpFilePart=0x0) returned 0x35 [0085.084] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e700) returned 1 [0085.084] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\Qq6wMGqMzL.docx" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\qq6wmgqmzl.docx"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x264 [0085.084] GetFileType (hFile=0x264) returned 0x1 [0085.084] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e6fc) returned 1 [0085.084] GetFileType (hFile=0x264) returned 0x1 [0085.084] GetFileSize (in: hFile=0x264, lpFileSizeHigh=0x31e808 | out: lpFileSizeHigh=0x31e808*=0x0) returned 0x1ed7 [0085.084] ReadFile (in: hFile=0x264, lpBuffer=0x281798c, nNumberOfBytesToRead=0x1ed7, lpNumberOfBytesRead=0x31e7b4, lpOverlapped=0x0 | out: lpBuffer=0x281798c*, lpNumberOfBytesRead=0x31e7b4*=0x1ed7, lpOverlapped=0x0) returned 1 [0085.085] CloseHandle (hObject=0x264) returned 1 [0085.125] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\Qq6wMGqMzL.docx", nBufferLength=0x105, lpBuffer=0x31e1f8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\Qq6wMGqMzL.docx", lpFilePart=0x0) returned 0x35 [0085.125] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e6ec) returned 1 [0085.125] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\Qq6wMGqMzL.docx" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\qq6wmgqmzl.docx"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x264 [0085.127] GetFileType (hFile=0x264) returned 0x1 [0085.127] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e6e8) returned 1 [0085.127] GetFileType (hFile=0x264) returned 0x1 [0085.127] WriteFile (in: hFile=0x264, lpBuffer=0x267fddc*, nNumberOfBytesToWrite=0x1ee0, lpNumberOfBytesWritten=0x31e7a8, lpOverlapped=0x0 | out: lpBuffer=0x267fddc*, lpNumberOfBytesWritten=0x31e7a8*=0x1ee0, lpOverlapped=0x0) returned 1 [0085.128] CloseHandle (hObject=0x264) returned 1 [0085.128] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\Qq6wMGqMzL.docx", nBufferLength=0x105, lpBuffer=0x31e32c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\Qq6wMGqMzL.docx", lpFilePart=0x0) returned 0x35 [0085.128] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\Qq6wMGqMzL.docx", nBufferLength=0x105, lpBuffer=0x31e32c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\Qq6wMGqMzL.docx", lpFilePart=0x0) returned 0x35 [0085.128] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e78c) returned 1 [0085.128] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\Qq6wMGqMzL.docx" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\qq6wmgqmzl.docx"), fInfoLevelId=0x0, lpFileInformation=0x31e808 | out: lpFileInformation=0x31e808*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc639f710, ftCreationTime.dwHighDateTime=0x1d5d7f3, ftLastAccessTime.dwLowDateTime=0x50391f40, ftLastAccessTime.dwHighDateTime=0x1d5df56, ftLastWriteTime.dwLowDateTime=0x162df1a0, ftLastWriteTime.dwHighDateTime=0x1d6eb7f, nFileSizeHigh=0x0, nFileSizeLow=0x1ee0)) returned 1 [0085.128] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e788) returned 1 [0085.128] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\Qq6wMGqMzL.docx" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\qq6wmgqmzl.docx"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\Qq6wMGqMzL.docx" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\qq6wmgqmzl.docx")) returned 1 [0085.129] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\R4pxWKI.wav", nBufferLength=0x105, lpBuffer=0x31e20c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\R4pxWKI.wav", lpFilePart=0x0) returned 0x31 [0085.129] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e700) returned 1 [0085.129] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\R4pxWKI.wav" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\r4pxwki.wav"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x264 [0085.129] GetFileType (hFile=0x264) returned 0x1 [0085.129] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e6fc) returned 1 [0085.129] GetFileType (hFile=0x264) returned 0x1 [0085.129] GetFileSize (in: hFile=0x264, lpFileSizeHigh=0x31e808 | out: lpFileSizeHigh=0x31e808*=0x0) returned 0x51c6 [0085.129] ReadFile (in: hFile=0x264, lpBuffer=0x2681fc0, nNumberOfBytesToRead=0x51c6, lpNumberOfBytesRead=0x31e7b4, lpOverlapped=0x0 | out: lpBuffer=0x2681fc0*, lpNumberOfBytesRead=0x31e7b4*=0x51c6, lpOverlapped=0x0) returned 1 [0085.130] CloseHandle (hObject=0x264) returned 1 [0085.143] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\R4pxWKI.wav", nBufferLength=0x105, lpBuffer=0x31e1f8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\R4pxWKI.wav", lpFilePart=0x0) returned 0x31 [0085.143] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e6ec) returned 1 [0085.143] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\R4pxWKI.wav" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\r4pxwki.wav"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x264 [0085.145] GetFileType (hFile=0x264) returned 0x1 [0085.176] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e6e8) returned 1 [0085.176] GetFileType (hFile=0x264) returned 0x1 [0085.176] WriteFile (in: hFile=0x264, lpBuffer=0x26e8814*, nNumberOfBytesToWrite=0x51d0, lpNumberOfBytesWritten=0x31e7a8, lpOverlapped=0x0 | out: lpBuffer=0x26e8814*, lpNumberOfBytesWritten=0x31e7a8*=0x51d0, lpOverlapped=0x0) returned 1 [0085.178] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\R4pxWKI.wav", nBufferLength=0x105, lpBuffer=0x31e32c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\R4pxWKI.wav", lpFilePart=0x0) returned 0x31 [0085.178] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\R4pxWKI.wav", nBufferLength=0x105, lpBuffer=0x31e32c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\R4pxWKI.wav", lpFilePart=0x0) returned 0x31 [0085.178] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e78c) returned 1 [0085.178] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\R4pxWKI.wav" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\r4pxwki.wav"), fInfoLevelId=0x0, lpFileInformation=0x31e808 | out: lpFileInformation=0x31e808*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1b2ac460, ftCreationTime.dwHighDateTime=0x1d5df6b, ftLastAccessTime.dwLowDateTime=0xa98077f0, ftLastAccessTime.dwHighDateTime=0x1d5dbb5, ftLastWriteTime.dwLowDateTime=0x16377720, ftLastWriteTime.dwHighDateTime=0x1d6eb7f, nFileSizeHigh=0x0, nFileSizeLow=0x51d0)) returned 1 [0085.178] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e788) returned 1 [0085.179] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\R4pxWKI.wav" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\r4pxwki.wav"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\R4pxWKI.wav" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\r4pxwki.wav")) returned 1 [0085.179] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\t3GW ZMnrl.avi", nBufferLength=0x105, lpBuffer=0x31e20c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\t3GW ZMnrl.avi", lpFilePart=0x0) returned 0x34 [0085.179] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e700) returned 1 [0085.179] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\t3GW ZMnrl.avi" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\t3gw zmnrl.avi"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x264 [0085.179] GetFileType (hFile=0x264) returned 0x1 [0085.179] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e6fc) returned 1 [0085.179] GetFileType (hFile=0x264) returned 0x1 [0085.179] GetFileSize (in: hFile=0x264, lpFileSizeHigh=0x31e808 | out: lpFileSizeHigh=0x31e808*=0x0) returned 0xf221 [0085.179] ReadFile (in: hFile=0x264, lpBuffer=0x26edcf0, nNumberOfBytesToRead=0xf221, lpNumberOfBytesRead=0x31e7b4, lpOverlapped=0x0 | out: lpBuffer=0x26edcf0*, lpNumberOfBytesRead=0x31e7b4*=0xf221, lpOverlapped=0x0) returned 1 [0085.195] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\t3GW ZMnrl.avi", nBufferLength=0x105, lpBuffer=0x31e1f8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\t3GW ZMnrl.avi", lpFilePart=0x0) returned 0x34 [0085.195] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e6ec) returned 1 [0085.195] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\t3GW ZMnrl.avi" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\t3gw zmnrl.avi"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x264 [0085.196] GetFileType (hFile=0x264) returned 0x1 [0085.196] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e6e8) returned 1 [0085.196] GetFileType (hFile=0x264) returned 0x1 [0085.196] WriteFile (in: hFile=0x264, lpBuffer=0x276817c*, nNumberOfBytesToWrite=0xf230, lpNumberOfBytesWritten=0x31e7a8, lpOverlapped=0x0 | out: lpBuffer=0x276817c*, lpNumberOfBytesWritten=0x31e7a8*=0xf230, lpOverlapped=0x0) returned 1 [0085.197] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\t3GW ZMnrl.avi", nBufferLength=0x105, lpBuffer=0x31e32c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\t3GW ZMnrl.avi", lpFilePart=0x0) returned 0x34 [0085.197] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\t3GW ZMnrl.avi", nBufferLength=0x105, lpBuffer=0x31e32c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\t3GW ZMnrl.avi", lpFilePart=0x0) returned 0x34 [0085.198] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e78c) returned 1 [0085.198] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\t3GW ZMnrl.avi" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\t3gw zmnrl.avi"), fInfoLevelId=0x0, lpFileInformation=0x31e808 | out: lpFileInformation=0x31e808*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xfb42e790, ftCreationTime.dwHighDateTime=0x1d5e24e, ftLastAccessTime.dwLowDateTime=0x4ab272b0, ftLastAccessTime.dwHighDateTime=0x1d5e3a7, ftLastWriteTime.dwLowDateTime=0x1639d880, ftLastWriteTime.dwHighDateTime=0x1d6eb7f, nFileSizeHigh=0x0, nFileSizeLow=0xf230)) returned 1 [0085.198] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e788) returned 1 [0085.198] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\t3GW ZMnrl.avi" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\t3gw zmnrl.avi"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\t3GW ZMnrl.avi" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\t3gw zmnrl.avi")) returned 1 [0085.198] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\TCjWHCEXor.avi", nBufferLength=0x105, lpBuffer=0x31e20c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\TCjWHCEXor.avi", lpFilePart=0x0) returned 0x34 [0085.198] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e700) returned 1 [0085.198] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\TCjWHCEXor.avi" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\tcjwhcexor.avi"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x264 [0085.198] GetFileType (hFile=0x264) returned 0x1 [0085.198] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e6fc) returned 1 [0085.198] GetFileType (hFile=0x264) returned 0x1 [0085.198] GetFileSize (in: hFile=0x264, lpFileSizeHigh=0x31e808 | out: lpFileSizeHigh=0x31e808*=0x0) returned 0xc9aa [0085.198] ReadFile (in: hFile=0x264, lpBuffer=0x27776c0, nNumberOfBytesToRead=0xc9aa, lpNumberOfBytesRead=0x31e7b4, lpOverlapped=0x0 | out: lpBuffer=0x27776c0*, lpNumberOfBytesRead=0x31e7b4*=0xc9aa, lpOverlapped=0x0) returned 1 [0085.214] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\TCjWHCEXor.avi", nBufferLength=0x105, lpBuffer=0x31e1f8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\TCjWHCEXor.avi", lpFilePart=0x0) returned 0x34 [0085.214] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e6ec) returned 1 [0085.214] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\TCjWHCEXor.avi" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\tcjwhcexor.avi"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x264 [0085.215] GetFileType (hFile=0x264) returned 0x1 [0085.215] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e6e8) returned 1 [0085.215] GetFileType (hFile=0x264) returned 0x1 [0085.215] WriteFile (in: hFile=0x264, lpBuffer=0x27ea1cc*, nNumberOfBytesToWrite=0xc9b0, lpNumberOfBytesWritten=0x31e7a8, lpOverlapped=0x0 | out: lpBuffer=0x27ea1cc*, lpNumberOfBytesWritten=0x31e7a8*=0xc9b0, lpOverlapped=0x0) returned 1 [0085.216] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\TCjWHCEXor.avi", nBufferLength=0x105, lpBuffer=0x31e32c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\TCjWHCEXor.avi", lpFilePart=0x0) returned 0x34 [0085.216] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\TCjWHCEXor.avi", nBufferLength=0x105, lpBuffer=0x31e32c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\TCjWHCEXor.avi", lpFilePart=0x0) returned 0x34 [0085.216] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e78c) returned 1 [0085.216] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\TCjWHCEXor.avi" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\tcjwhcexor.avi"), fInfoLevelId=0x0, lpFileInformation=0x31e808 | out: lpFileInformation=0x31e808*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xbc126420, ftCreationTime.dwHighDateTime=0x1d5e013, ftLastAccessTime.dwLowDateTime=0x9ada8720, ftLastAccessTime.dwHighDateTime=0x1d5dda6, ftLastWriteTime.dwLowDateTime=0x163c39e0, ftLastWriteTime.dwHighDateTime=0x1d6eb7f, nFileSizeHigh=0x0, nFileSizeLow=0xc9b0)) returned 1 [0085.216] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e788) returned 1 [0085.216] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\TCjWHCEXor.avi" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\tcjwhcexor.avi"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\TCjWHCEXor.avi" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\tcjwhcexor.avi")) returned 1 [0085.217] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\TuLuB1aKsHS-_cYIE.csv", nBufferLength=0x105, lpBuffer=0x31e20c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\TuLuB1aKsHS-_cYIE.csv", lpFilePart=0x0) returned 0x3b [0085.217] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e700) returned 1 [0085.217] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\TuLuB1aKsHS-_cYIE.csv" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\tulub1akshs-_cyie.csv"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x264 [0085.217] GetFileType (hFile=0x264) returned 0x1 [0085.217] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e6fc) returned 1 [0085.217] GetFileType (hFile=0x264) returned 0x1 [0085.217] GetFileSize (in: hFile=0x264, lpFileSizeHigh=0x31e808 | out: lpFileSizeHigh=0x31e808*=0x0) returned 0xf368 [0085.217] ReadFile (in: hFile=0x264, lpBuffer=0x27f6ea8, nNumberOfBytesToRead=0xf368, lpNumberOfBytesRead=0x31e7b4, lpOverlapped=0x0 | out: lpBuffer=0x27f6ea8*, lpNumberOfBytesRead=0x31e7b4*=0xf368, lpOverlapped=0x0) returned 1 [0085.242] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\TuLuB1aKsHS-_cYIE.csv", nBufferLength=0x105, lpBuffer=0x31e1f8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\TuLuB1aKsHS-_cYIE.csv", lpFilePart=0x0) returned 0x3b [0085.242] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e6ec) returned 1 [0085.243] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\TuLuB1aKsHS-_cYIE.csv" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\tulub1akshs-_cyie.csv"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x264 [0085.244] GetFileType (hFile=0x264) returned 0x1 [0085.244] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e6e8) returned 1 [0085.244] GetFileType (hFile=0x264) returned 0x1 [0085.244] WriteFile (in: hFile=0x264, lpBuffer=0x26890f0*, nNumberOfBytesToWrite=0xf370, lpNumberOfBytesWritten=0x31e7a8, lpOverlapped=0x0 | out: lpBuffer=0x26890f0*, lpNumberOfBytesWritten=0x31e7a8*=0xf370, lpOverlapped=0x0) returned 1 [0085.245] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\TuLuB1aKsHS-_cYIE.csv", nBufferLength=0x105, lpBuffer=0x31e32c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\TuLuB1aKsHS-_cYIE.csv", lpFilePart=0x0) returned 0x3b [0085.246] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\TuLuB1aKsHS-_cYIE.csv", nBufferLength=0x105, lpBuffer=0x31e32c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\TuLuB1aKsHS-_cYIE.csv", lpFilePart=0x0) returned 0x3b [0085.246] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e78c) returned 1 [0085.246] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\TuLuB1aKsHS-_cYIE.csv" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\tulub1akshs-_cyie.csv"), fInfoLevelId=0x0, lpFileInformation=0x31e808 | out: lpFileInformation=0x31e808*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4690f2f0, ftCreationTime.dwHighDateTime=0x1d5dfca, ftLastAccessTime.dwLowDateTime=0x7509a760, ftLastAccessTime.dwHighDateTime=0x1d5dd65, ftLastWriteTime.dwLowDateTime=0x1640fca0, ftLastWriteTime.dwHighDateTime=0x1d6eb7f, nFileSizeHigh=0x0, nFileSizeLow=0xf370)) returned 1 [0085.246] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e788) returned 1 [0085.246] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\TuLuB1aKsHS-_cYIE.csv" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\tulub1akshs-_cyie.csv"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\TuLuB1aKsHS-_cYIE.csv" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\tulub1akshs-_cyie.csv")) returned 1 [0085.246] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\UvlrnJnT_l t.png", nBufferLength=0x105, lpBuffer=0x31e20c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\UvlrnJnT_l t.png", lpFilePart=0x0) returned 0x36 [0085.246] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e700) returned 1 [0085.246] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\UvlrnJnT_l t.png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\uvlrnjnt_l t.png"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x264 [0085.246] GetFileType (hFile=0x264) returned 0x1 [0085.246] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e6fc) returned 1 [0085.246] GetFileType (hFile=0x264) returned 0x1 [0085.247] GetFileSize (in: hFile=0x264, lpFileSizeHigh=0x31e808 | out: lpFileSizeHigh=0x31e808*=0x0) returned 0x1321e [0085.247] ReadFile (in: hFile=0x264, lpBuffer=0x26987c4, nNumberOfBytesToRead=0x1321e, lpNumberOfBytesRead=0x31e7b4, lpOverlapped=0x0 | out: lpBuffer=0x26987c4*, lpNumberOfBytesRead=0x31e7b4*=0x1321e, lpOverlapped=0x0) returned 1 [0085.303] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\UvlrnJnT_l t.png", nBufferLength=0x105, lpBuffer=0x31e1f8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\UvlrnJnT_l t.png", lpFilePart=0x0) returned 0x36 [0085.303] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e6ec) returned 1 [0085.303] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\UvlrnJnT_l t.png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\uvlrnjnt_l t.png"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x264 [0085.305] GetFileType (hFile=0x264) returned 0x1 [0085.305] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e6e8) returned 1 [0085.305] GetFileType (hFile=0x264) returned 0x1 [0085.305] WriteFile (in: hFile=0x264, lpBuffer=0x271ed7c*, nNumberOfBytesToWrite=0x13220, lpNumberOfBytesWritten=0x31e7a8, lpOverlapped=0x0 | out: lpBuffer=0x271ed7c*, lpNumberOfBytesWritten=0x31e7a8*=0x13220, lpOverlapped=0x0) returned 1 [0085.307] CloseHandle (hObject=0x264) returned 1 [0085.307] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\UvlrnJnT_l t.png", nBufferLength=0x105, lpBuffer=0x31e32c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\UvlrnJnT_l t.png", lpFilePart=0x0) returned 0x36 [0085.307] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\UvlrnJnT_l t.png", nBufferLength=0x105, lpBuffer=0x31e32c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\UvlrnJnT_l t.png", lpFilePart=0x0) returned 0x36 [0085.307] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e78c) returned 1 [0085.307] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\UvlrnJnT_l t.png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\uvlrnjnt_l t.png"), fInfoLevelId=0x0, lpFileInformation=0x31e808 | out: lpFileInformation=0x31e808*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa67bfd30, ftCreationTime.dwHighDateTime=0x1d5e39a, ftLastAccessTime.dwLowDateTime=0x9d8a61c0, ftLastAccessTime.dwHighDateTime=0x1d5e431, ftLastWriteTime.dwLowDateTime=0x164a8220, ftLastWriteTime.dwHighDateTime=0x1d6eb7f, nFileSizeHigh=0x0, nFileSizeLow=0x13220)) returned 1 [0085.307] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e788) returned 1 [0085.307] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\UvlrnJnT_l t.png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\uvlrnjnt_l t.png"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\UvlrnJnT_l t.png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\uvlrnjnt_l t.png")) returned 1 [0085.307] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\UVT6TQK.png", nBufferLength=0x105, lpBuffer=0x31e20c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\UVT6TQK.png", lpFilePart=0x0) returned 0x31 [0085.307] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e700) returned 1 [0085.308] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\UVT6TQK.png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\uvt6tqk.png"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x264 [0085.308] GetFileType (hFile=0x264) returned 0x1 [0085.308] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e6fc) returned 1 [0085.308] GetFileType (hFile=0x264) returned 0x1 [0085.308] GetFileSize (in: hFile=0x264, lpFileSizeHigh=0x31e808 | out: lpFileSizeHigh=0x31e808*=0x0) returned 0x923 [0085.308] ReadFile (in: hFile=0x264, lpBuffer=0x2732be0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x31e7b4, lpOverlapped=0x0 | out: lpBuffer=0x2732be0*, lpNumberOfBytesRead=0x31e7b4*=0x923, lpOverlapped=0x0) returned 1 [0085.308] CloseHandle (hObject=0x264) returned 1 [0085.323] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\UVT6TQK.png", nBufferLength=0x105, lpBuffer=0x31e1f8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\UVT6TQK.png", lpFilePart=0x0) returned 0x31 [0085.323] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e6ec) returned 1 [0085.323] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\UVT6TQK.png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\uvt6tqk.png"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x264 [0085.324] GetFileType (hFile=0x264) returned 0x1 [0085.324] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e6e8) returned 1 [0085.324] GetFileType (hFile=0x264) returned 0x1 [0085.324] WriteFile (in: hFile=0x264, lpBuffer=0x27838c0*, nNumberOfBytesToWrite=0x930, lpNumberOfBytesWritten=0x31e77c, lpOverlapped=0x0 | out: lpBuffer=0x27838c0*, lpNumberOfBytesWritten=0x31e77c*=0x930, lpOverlapped=0x0) returned 1 [0085.325] CloseHandle (hObject=0x264) returned 1 [0085.325] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\UVT6TQK.png", nBufferLength=0x105, lpBuffer=0x31e32c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\UVT6TQK.png", lpFilePart=0x0) returned 0x31 [0085.325] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\UVT6TQK.png", nBufferLength=0x105, lpBuffer=0x31e32c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\UVT6TQK.png", lpFilePart=0x0) returned 0x31 [0085.325] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e78c) returned 1 [0085.325] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\UVT6TQK.png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\uvt6tqk.png"), fInfoLevelId=0x0, lpFileInformation=0x31e808 | out: lpFileInformation=0x31e808*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5047cf0, ftCreationTime.dwHighDateTime=0x1d5e739, ftLastAccessTime.dwLowDateTime=0xde80da30, ftLastAccessTime.dwHighDateTime=0x1d5d95d, ftLastWriteTime.dwLowDateTime=0x164ce380, ftLastWriteTime.dwHighDateTime=0x1d6eb7f, nFileSizeHigh=0x0, nFileSizeLow=0x930)) returned 1 [0085.325] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e788) returned 1 [0085.326] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\UVT6TQK.png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\uvt6tqk.png"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\UVT6TQK.png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\uvt6tqk.png")) returned 1 [0085.326] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\wzR1a01KM.avi", nBufferLength=0x105, lpBuffer=0x31e20c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\wzR1a01KM.avi", lpFilePart=0x0) returned 0x33 [0085.326] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e700) returned 1 [0085.326] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\wzR1a01KM.avi" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\wzr1a01km.avi"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x264 [0085.326] GetFileType (hFile=0x264) returned 0x1 [0085.326] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e6fc) returned 1 [0085.326] GetFileType (hFile=0x264) returned 0x1 [0085.326] GetFileSize (in: hFile=0x264, lpFileSizeHigh=0x31e808 | out: lpFileSizeHigh=0x31e808*=0x0) returned 0x34e0 [0085.326] ReadFile (in: hFile=0x264, lpBuffer=0x2784ad4, nNumberOfBytesToRead=0x34e0, lpNumberOfBytesRead=0x31e7b4, lpOverlapped=0x0 | out: lpBuffer=0x2784ad4*, lpNumberOfBytesRead=0x31e7b4*=0x34e0, lpOverlapped=0x0) returned 1 [0085.327] CloseHandle (hObject=0x264) returned 1 [0085.342] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\wzR1a01KM.avi", nBufferLength=0x105, lpBuffer=0x31e1f8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\wzR1a01KM.avi", lpFilePart=0x0) returned 0x33 [0085.342] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e6ec) returned 1 [0085.342] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\wzR1a01KM.avi" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\wzr1a01km.avi"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x264 [0085.343] GetFileType (hFile=0x264) returned 0x1 [0085.343] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e6e8) returned 1 [0085.343] GetFileType (hFile=0x264) returned 0x1 [0085.343] WriteFile (in: hFile=0x264, lpBuffer=0x27e2168*, nNumberOfBytesToWrite=0x34f0, lpNumberOfBytesWritten=0x31e7a8, lpOverlapped=0x0 | out: lpBuffer=0x27e2168*, lpNumberOfBytesWritten=0x31e7a8*=0x34f0, lpOverlapped=0x0) returned 1 [0085.344] CloseHandle (hObject=0x264) returned 1 [0085.344] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\wzR1a01KM.avi", nBufferLength=0x105, lpBuffer=0x31e32c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\wzR1a01KM.avi", lpFilePart=0x0) returned 0x33 [0085.344] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\wzR1a01KM.avi", nBufferLength=0x105, lpBuffer=0x31e32c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\wzR1a01KM.avi", lpFilePart=0x0) returned 0x33 [0085.344] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e78c) returned 1 [0085.344] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\wzR1a01KM.avi" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\wzr1a01km.avi"), fInfoLevelId=0x0, lpFileInformation=0x31e808 | out: lpFileInformation=0x31e808*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xfc35f5c0, ftCreationTime.dwHighDateTime=0x1d5d86c, ftLastAccessTime.dwLowDateTime=0x7f7548a0, ftLastAccessTime.dwHighDateTime=0x1d5e100, ftLastWriteTime.dwLowDateTime=0x164f44e0, ftLastWriteTime.dwHighDateTime=0x1d6eb7f, nFileSizeHigh=0x0, nFileSizeLow=0x34f0)) returned 1 [0085.344] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e788) returned 1 [0085.344] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\wzR1a01KM.avi" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\wzr1a01km.avi"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\wzR1a01KM.avi" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\wzr1a01km.avi")) returned 1 [0085.345] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\xi26C-f e26K1XH.ppt", nBufferLength=0x105, lpBuffer=0x31e20c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\xi26C-f e26K1XH.ppt", lpFilePart=0x0) returned 0x39 [0085.345] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e700) returned 1 [0085.345] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\xi26C-f e26K1XH.ppt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\xi26c-f e26k1xh.ppt"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x264 [0085.345] GetFileType (hFile=0x264) returned 0x1 [0085.345] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e6fc) returned 1 [0085.345] GetFileType (hFile=0x264) returned 0x1 [0085.345] GetFileSize (in: hFile=0x264, lpFileSizeHigh=0x31e808 | out: lpFileSizeHigh=0x31e808*=0x0) returned 0x16574 [0085.345] ReadFile (in: hFile=0x264, lpBuffer=0x3a0cf58, nNumberOfBytesToRead=0x16574, lpNumberOfBytesRead=0x31e7b4, lpOverlapped=0x0 | out: lpBuffer=0x3a0cf58*, lpNumberOfBytesRead=0x31e7b4*=0x16574, lpOverlapped=0x0) returned 1 [0085.347] CloseHandle (hObject=0x264) returned 1 [0085.366] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\xi26C-f e26K1XH.ppt", nBufferLength=0x105, lpBuffer=0x31e1f8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\xi26C-f e26K1XH.ppt", lpFilePart=0x0) returned 0x39 [0085.366] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e6ec) returned 1 [0085.366] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\xi26C-f e26K1XH.ppt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\xi26c-f e26k1xh.ppt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x264 [0085.367] GetFileType (hFile=0x264) returned 0x1 [0085.368] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e6e8) returned 1 [0085.368] GetFileType (hFile=0x264) returned 0x1 [0085.368] WriteFile (in: hFile=0x264, lpBuffer=0x3a7cb08*, nNumberOfBytesToWrite=0x16580, lpNumberOfBytesWritten=0x31e7a8, lpOverlapped=0x0 | out: lpBuffer=0x3a7cb08*, lpNumberOfBytesWritten=0x31e7a8*=0x16580, lpOverlapped=0x0) returned 1 [0085.370] CloseHandle (hObject=0x264) returned 1 [0085.370] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\xi26C-f e26K1XH.ppt", nBufferLength=0x105, lpBuffer=0x31e32c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\xi26C-f e26K1XH.ppt", lpFilePart=0x0) returned 0x39 [0085.370] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\xi26C-f e26K1XH.ppt", nBufferLength=0x105, lpBuffer=0x31e32c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\xi26C-f e26K1XH.ppt", lpFilePart=0x0) returned 0x39 [0085.370] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e78c) returned 1 [0085.370] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\xi26C-f e26K1XH.ppt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\xi26c-f e26k1xh.ppt"), fInfoLevelId=0x0, lpFileInformation=0x31e808 | out: lpFileInformation=0x31e808*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa481b680, ftCreationTime.dwHighDateTime=0x1d5db18, ftLastAccessTime.dwLowDateTime=0x21e05db0, ftLastAccessTime.dwHighDateTime=0x1d5e0f1, ftLastWriteTime.dwLowDateTime=0x165407a0, ftLastWriteTime.dwHighDateTime=0x1d6eb7f, nFileSizeHigh=0x0, nFileSizeLow=0x16580)) returned 1 [0085.370] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e788) returned 1 [0085.370] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\xi26C-f e26K1XH.ppt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\xi26c-f e26k1xh.ppt"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\xi26C-f e26K1XH.ppt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\xi26c-f e26k1xh.ppt")) returned 1 [0085.370] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e7bc) returned 1 [0085.371] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\fo7DC8R1OiqEuI ix", nBufferLength=0x105, lpBuffer=0x31e2c4, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\fo7DC8R1OiqEuI ix", lpFilePart=0x0) returned 0x37 [0085.371] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\fo7DC8R1OiqEuI ix\\", nBufferLength=0x105, lpBuffer=0x31e298, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\fo7DC8R1OiqEuI ix\\", lpFilePart=0x0) returned 0x38 [0085.371] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\fo7DC8R1OiqEuI ix\\*", lpFindFileData=0x31e4e4 | out: lpFindFileData=0x31e4e4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1a1a4200, ftCreationTime.dwHighDateTime=0x1d5deab, ftLastAccessTime.dwLowDateTime=0xdd6c4700, ftLastAccessTime.dwHighDateTime=0x1d5e0de, ftLastWriteTime.dwLowDateTime=0xdd6c4700, ftLastWriteTime.dwHighDateTime=0x1d5e0de, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x381e40 [0085.371] FindNextFileW (in: hFindFile=0x381e40, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1a1a4200, ftCreationTime.dwHighDateTime=0x1d5deab, ftLastAccessTime.dwLowDateTime=0xdd6c4700, ftLastAccessTime.dwHighDateTime=0x1d5e0de, ftLastWriteTime.dwLowDateTime=0xdd6c4700, ftLastWriteTime.dwHighDateTime=0x1d5e0de, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0085.371] FindNextFileW (in: hFindFile=0x381e40, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x99d67bb0, ftCreationTime.dwHighDateTime=0x1d5d863, ftLastAccessTime.dwLowDateTime=0x48115e40, ftLastAccessTime.dwHighDateTime=0x1d5e334, ftLastWriteTime.dwLowDateTime=0x48115e40, ftLastWriteTime.dwHighDateTime=0x1d5e334, nFileSizeHigh=0x0, nFileSizeLow=0x116f1, dwReserved0=0x0, dwReserved1=0x0, cFileName="1iogfuz_21wpdknL.docx", cAlternateFileName="1IOGFU~1.DOC")) returned 1 [0085.371] FindNextFileW (in: hFindFile=0x381e40, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3fcbc8f0, ftCreationTime.dwHighDateTime=0x1d5e218, ftLastAccessTime.dwLowDateTime=0x10b1dad0, ftLastAccessTime.dwHighDateTime=0x1d5df40, ftLastWriteTime.dwLowDateTime=0x10b1dad0, ftLastWriteTime.dwHighDateTime=0x1d5df40, nFileSizeHigh=0x0, nFileSizeLow=0x6428, dwReserved0=0x0, dwReserved1=0x0, cFileName="bErvzuwNUg.png", cAlternateFileName="BERVZU~1.PNG")) returned 1 [0085.371] FindNextFileW (in: hFindFile=0x381e40, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xfab06cf0, ftCreationTime.dwHighDateTime=0x1d5ddab, ftLastAccessTime.dwLowDateTime=0x423b5fa0, ftLastAccessTime.dwHighDateTime=0x1d5dd05, ftLastWriteTime.dwLowDateTime=0x423b5fa0, ftLastWriteTime.dwHighDateTime=0x1d5dd05, nFileSizeHigh=0x0, nFileSizeLow=0xc21b, dwReserved0=0x0, dwReserved1=0x0, cFileName="dRUDEhAMk73z.gif", cAlternateFileName="DRUDEH~1.GIF")) returned 1 [0085.371] FindNextFileW (in: hFindFile=0x381e40, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0085.372] FindClose (in: hFindFile=0x381e40 | out: hFindFile=0x381e40) returned 1 [0085.372] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e77c) returned 1 [0085.372] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e788) returned 1 [0085.372] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e7bc) returned 1 [0085.372] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\fo7DC8R1OiqEuI ix", nBufferLength=0x105, lpBuffer=0x31e2c4, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\fo7DC8R1OiqEuI ix", lpFilePart=0x0) returned 0x37 [0085.372] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\fo7DC8R1OiqEuI ix\\", nBufferLength=0x105, lpBuffer=0x31e298, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\fo7DC8R1OiqEuI ix\\", lpFilePart=0x0) returned 0x38 [0085.372] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\fo7DC8R1OiqEuI ix\\*", lpFindFileData=0x31e4e4 | out: lpFindFileData=0x31e4e4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1a1a4200, ftCreationTime.dwHighDateTime=0x1d5deab, ftLastAccessTime.dwLowDateTime=0xdd6c4700, ftLastAccessTime.dwHighDateTime=0x1d5e0de, ftLastWriteTime.dwLowDateTime=0xdd6c4700, ftLastWriteTime.dwHighDateTime=0x1d5e0de, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x381e40 [0085.372] FindNextFileW (in: hFindFile=0x381e40, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1a1a4200, ftCreationTime.dwHighDateTime=0x1d5deab, ftLastAccessTime.dwLowDateTime=0xdd6c4700, ftLastAccessTime.dwHighDateTime=0x1d5e0de, ftLastWriteTime.dwLowDateTime=0xdd6c4700, ftLastWriteTime.dwHighDateTime=0x1d5e0de, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0085.372] FindNextFileW (in: hFindFile=0x381e40, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x99d67bb0, ftCreationTime.dwHighDateTime=0x1d5d863, ftLastAccessTime.dwLowDateTime=0x48115e40, ftLastAccessTime.dwHighDateTime=0x1d5e334, ftLastWriteTime.dwLowDateTime=0x48115e40, ftLastWriteTime.dwHighDateTime=0x1d5e334, nFileSizeHigh=0x0, nFileSizeLow=0x116f1, dwReserved0=0x0, dwReserved1=0x0, cFileName="1iogfuz_21wpdknL.docx", cAlternateFileName="1IOGFU~1.DOC")) returned 1 [0085.372] FindNextFileW (in: hFindFile=0x381e40, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3fcbc8f0, ftCreationTime.dwHighDateTime=0x1d5e218, ftLastAccessTime.dwLowDateTime=0x10b1dad0, ftLastAccessTime.dwHighDateTime=0x1d5df40, ftLastWriteTime.dwLowDateTime=0x10b1dad0, ftLastWriteTime.dwHighDateTime=0x1d5df40, nFileSizeHigh=0x0, nFileSizeLow=0x6428, dwReserved0=0x0, dwReserved1=0x0, cFileName="bErvzuwNUg.png", cAlternateFileName="BERVZU~1.PNG")) returned 1 [0085.372] FindNextFileW (in: hFindFile=0x381e40, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xfab06cf0, ftCreationTime.dwHighDateTime=0x1d5ddab, ftLastAccessTime.dwLowDateTime=0x423b5fa0, ftLastAccessTime.dwHighDateTime=0x1d5dd05, ftLastWriteTime.dwLowDateTime=0x423b5fa0, ftLastWriteTime.dwHighDateTime=0x1d5dd05, nFileSizeHigh=0x0, nFileSizeLow=0xc21b, dwReserved0=0x0, dwReserved1=0x0, cFileName="dRUDEhAMk73z.gif", cAlternateFileName="DRUDEH~1.GIF")) returned 1 [0085.373] FindNextFileW (in: hFindFile=0x381e40, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xfab06cf0, ftCreationTime.dwHighDateTime=0x1d5ddab, ftLastAccessTime.dwLowDateTime=0x423b5fa0, ftLastAccessTime.dwHighDateTime=0x1d5dd05, ftLastWriteTime.dwLowDateTime=0x423b5fa0, ftLastWriteTime.dwHighDateTime=0x1d5dd05, nFileSizeHigh=0x0, nFileSizeLow=0xc21b, dwReserved0=0x0, dwReserved1=0x0, cFileName="dRUDEhAMk73z.gif", cAlternateFileName="DRUDEH~1.GIF")) returned 0 [0085.373] FindClose (in: hFindFile=0x381e40 | out: hFindFile=0x381e40) returned 1 [0085.373] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e77c) returned 1 [0085.373] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e788) returned 1 [0085.373] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\fo7DC8R1OiqEuI ix\\1iogfuz_21wpdknL.docx", nBufferLength=0x105, lpBuffer=0x31e194, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\fo7DC8R1OiqEuI ix\\1iogfuz_21wpdknL.docx", lpFilePart=0x0) returned 0x4d [0085.373] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e688) returned 1 [0085.373] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\fo7DC8R1OiqEuI ix\\1iogfuz_21wpdknL.docx" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\fo7dc8r1oiqeui ix\\1iogfuz_21wpdknl.docx"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x264 [0085.373] GetFileType (hFile=0x264) returned 0x1 [0085.373] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e684) returned 1 [0085.373] GetFileType (hFile=0x264) returned 0x1 [0085.373] GetFileSize (in: hFile=0x264, lpFileSizeHigh=0x31e790 | out: lpFileSizeHigh=0x31e790*=0x0) returned 0x116f1 [0085.373] ReadFile (in: hFile=0x264, lpBuffer=0x28348e4, nNumberOfBytesToRead=0x116f1, lpNumberOfBytesRead=0x31e73c, lpOverlapped=0x0 | out: lpBuffer=0x28348e4*, lpNumberOfBytesRead=0x31e73c*=0x116f1, lpOverlapped=0x0) returned 1 [0085.375] CloseHandle (hObject=0x264) returned 1 [0085.416] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\fo7DC8R1OiqEuI ix\\1iogfuz_21wpdknL.docx", nBufferLength=0x105, lpBuffer=0x31e180, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\fo7DC8R1OiqEuI ix\\1iogfuz_21wpdknL.docx", lpFilePart=0x0) returned 0x4d [0085.416] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e674) returned 1 [0085.416] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\fo7DC8R1OiqEuI ix\\1iogfuz_21wpdknL.docx" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\fo7dc8r1oiqeui ix\\1iogfuz_21wpdknl.docx"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x264 [0085.417] GetFileType (hFile=0x264) returned 0x1 [0085.417] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e670) returned 1 [0085.417] GetFileType (hFile=0x264) returned 0x1 [0085.417] WriteFile (in: hFile=0x264, lpBuffer=0x28b5be0*, nNumberOfBytesToWrite=0x11700, lpNumberOfBytesWritten=0x31e730, lpOverlapped=0x0 | out: lpBuffer=0x28b5be0*, lpNumberOfBytesWritten=0x31e730*=0x11700, lpOverlapped=0x0) returned 1 [0085.419] CloseHandle (hObject=0x264) returned 1 [0085.419] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\fo7DC8R1OiqEuI ix\\1iogfuz_21wpdknL.docx", nBufferLength=0x105, lpBuffer=0x31e2b4, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\fo7DC8R1OiqEuI ix\\1iogfuz_21wpdknL.docx", lpFilePart=0x0) returned 0x4d [0085.419] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\fo7DC8R1OiqEuI ix\\1iogfuz_21wpdknL.docx", nBufferLength=0x105, lpBuffer=0x31e2b4, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\fo7DC8R1OiqEuI ix\\1iogfuz_21wpdknL.docx", lpFilePart=0x0) returned 0x4d [0085.419] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e714) returned 1 [0085.419] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\fo7DC8R1OiqEuI ix\\1iogfuz_21wpdknL.docx" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\fo7dc8r1oiqeui ix\\1iogfuz_21wpdknl.docx"), fInfoLevelId=0x0, lpFileInformation=0x31e790 | out: lpFileInformation=0x31e790*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x99d67bb0, ftCreationTime.dwHighDateTime=0x1d5d863, ftLastAccessTime.dwLowDateTime=0x48115e40, ftLastAccessTime.dwHighDateTime=0x1d5e334, ftLastWriteTime.dwLowDateTime=0x165b2bc0, ftLastWriteTime.dwHighDateTime=0x1d6eb7f, nFileSizeHigh=0x0, nFileSizeLow=0x11700)) returned 1 [0085.419] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e710) returned 1 [0085.419] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\fo7DC8R1OiqEuI ix\\1iogfuz_21wpdknL.docx" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\fo7dc8r1oiqeui ix\\1iogfuz_21wpdknl.docx"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\fo7DC8R1OiqEuI ix\\1iogfuz_21wpdknL.docx" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\fo7dc8r1oiqeui ix\\1iogfuz_21wpdknl.docx")) returned 1 [0085.420] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\fo7DC8R1OiqEuI ix\\bErvzuwNUg.png", nBufferLength=0x105, lpBuffer=0x31e194, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\fo7DC8R1OiqEuI ix\\bErvzuwNUg.png", lpFilePart=0x0) returned 0x46 [0085.420] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e688) returned 1 [0085.420] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\fo7DC8R1OiqEuI ix\\bErvzuwNUg.png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\fo7dc8r1oiqeui ix\\bervzuwnug.png"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x264 [0085.420] GetFileType (hFile=0x264) returned 0x1 [0085.420] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e684) returned 1 [0085.420] GetFileType (hFile=0x264) returned 0x1 [0085.420] GetFileSize (in: hFile=0x264, lpFileSizeHigh=0x31e790 | out: lpFileSizeHigh=0x31e790*=0x0) returned 0x6428 [0085.420] ReadFile (in: hFile=0x264, lpBuffer=0x28c76b4, nNumberOfBytesToRead=0x6428, lpNumberOfBytesRead=0x31e73c, lpOverlapped=0x0 | out: lpBuffer=0x28c76b4*, lpNumberOfBytesRead=0x31e73c*=0x6428, lpOverlapped=0x0) returned 1 [0085.421] CloseHandle (hObject=0x264) returned 1 [0085.437] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\fo7DC8R1OiqEuI ix\\bErvzuwNUg.png", nBufferLength=0x105, lpBuffer=0x31e180, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\fo7DC8R1OiqEuI ix\\bErvzuwNUg.png", lpFilePart=0x0) returned 0x46 [0085.437] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e674) returned 1 [0085.438] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\fo7DC8R1OiqEuI ix\\bErvzuwNUg.png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\fo7dc8r1oiqeui ix\\bervzuwnug.png"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x264 [0085.439] GetFileType (hFile=0x264) returned 0x1 [0085.439] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e670) returned 1 [0085.439] GetFileType (hFile=0x264) returned 0x1 [0085.439] WriteFile (in: hFile=0x264, lpBuffer=0x2933988*, nNumberOfBytesToWrite=0x6430, lpNumberOfBytesWritten=0x31e730, lpOverlapped=0x0 | out: lpBuffer=0x2933988*, lpNumberOfBytesWritten=0x31e730*=0x6430, lpOverlapped=0x0) returned 1 [0085.440] CloseHandle (hObject=0x264) returned 1 [0085.440] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\fo7DC8R1OiqEuI ix\\bErvzuwNUg.png", nBufferLength=0x105, lpBuffer=0x31e2b4, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\fo7DC8R1OiqEuI ix\\bErvzuwNUg.png", lpFilePart=0x0) returned 0x46 [0085.440] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\fo7DC8R1OiqEuI ix\\bErvzuwNUg.png", nBufferLength=0x105, lpBuffer=0x31e2b4, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\fo7DC8R1OiqEuI ix\\bErvzuwNUg.png", lpFilePart=0x0) returned 0x46 [0085.440] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e714) returned 1 [0085.440] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\fo7DC8R1OiqEuI ix\\bErvzuwNUg.png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\fo7dc8r1oiqeui ix\\bervzuwnug.png"), fInfoLevelId=0x0, lpFileInformation=0x31e790 | out: lpFileInformation=0x31e790*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3fcbc8f0, ftCreationTime.dwHighDateTime=0x1d5e218, ftLastAccessTime.dwLowDateTime=0x10b1dad0, ftLastAccessTime.dwHighDateTime=0x1d5df40, ftLastWriteTime.dwLowDateTime=0x165d8d20, ftLastWriteTime.dwHighDateTime=0x1d6eb7f, nFileSizeHigh=0x0, nFileSizeLow=0x6430)) returned 1 [0085.440] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e710) returned 1 [0085.440] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\fo7DC8R1OiqEuI ix\\bErvzuwNUg.png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\fo7dc8r1oiqeui ix\\bervzuwnug.png"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\fo7DC8R1OiqEuI ix\\bErvzuwNUg.png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\fo7dc8r1oiqeui ix\\bervzuwnug.png")) returned 1 [0085.440] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e7bc) returned 1 [0085.441] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\lCnlTJ-G", nBufferLength=0x105, lpBuffer=0x31e2c4, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\lCnlTJ-G", lpFilePart=0x0) returned 0x2e [0085.441] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\lCnlTJ-G\\", nBufferLength=0x105, lpBuffer=0x31e298, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\lCnlTJ-G\\", lpFilePart=0x0) returned 0x2f [0085.441] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\lCnlTJ-G\\*", lpFindFileData=0x31e4e4 | out: lpFindFileData=0x31e4e4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x720b0b80, ftCreationTime.dwHighDateTime=0x1d5e5b7, ftLastAccessTime.dwLowDateTime=0xbddce6c0, ftLastAccessTime.dwHighDateTime=0x1d5e76d, ftLastWriteTime.dwLowDateTime=0xbddce6c0, ftLastWriteTime.dwHighDateTime=0x1d5e76d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x51078a0 [0085.441] FindNextFileW (in: hFindFile=0x51078a0, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x720b0b80, ftCreationTime.dwHighDateTime=0x1d5e5b7, ftLastAccessTime.dwLowDateTime=0xbddce6c0, ftLastAccessTime.dwHighDateTime=0x1d5e76d, ftLastWriteTime.dwLowDateTime=0xbddce6c0, ftLastWriteTime.dwHighDateTime=0x1d5e76d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0085.441] FindNextFileW (in: hFindFile=0x51078a0, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1f46a150, ftCreationTime.dwHighDateTime=0x1d5df83, ftLastAccessTime.dwLowDateTime=0x5b5dc320, ftLastAccessTime.dwHighDateTime=0x1d5e137, ftLastWriteTime.dwLowDateTime=0x5b5dc320, ftLastWriteTime.dwHighDateTime=0x1d5e137, nFileSizeHigh=0x0, nFileSizeLow=0xae13, dwReserved0=0x0, dwReserved1=0x0, cFileName="6wgIYQzJ1lqH2MW.pps", cAlternateFileName="6WGIYQ~1.PPS")) returned 1 [0085.441] FindNextFileW (in: hFindFile=0x51078a0, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf835680, ftCreationTime.dwHighDateTime=0x1d5e31d, ftLastAccessTime.dwLowDateTime=0x2d6ad8a0, ftLastAccessTime.dwHighDateTime=0x1d5d8a8, ftLastWriteTime.dwLowDateTime=0x2d6ad8a0, ftLastWriteTime.dwHighDateTime=0x1d5d8a8, nFileSizeHigh=0x0, nFileSizeLow=0x6a68, dwReserved0=0x0, dwReserved1=0x0, cFileName="9dmiDc5TdN6aBaN.m4a", cAlternateFileName="9DMIDC~1.M4A")) returned 1 [0085.441] FindNextFileW (in: hFindFile=0x51078a0, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa6828cf0, ftCreationTime.dwHighDateTime=0x1d5e2d6, ftLastAccessTime.dwLowDateTime=0xef0d8bb0, ftLastAccessTime.dwHighDateTime=0x1d5d885, ftLastWriteTime.dwLowDateTime=0xef0d8bb0, ftLastWriteTime.dwHighDateTime=0x1d5d885, nFileSizeHigh=0x0, nFileSizeLow=0x55c3, dwReserved0=0x0, dwReserved1=0x0, cFileName="sxtRyYUIDz-oVBFJk2R_.pptx", cAlternateFileName="SXTRYY~1.PPT")) returned 1 [0085.442] FindNextFileW (in: hFindFile=0x51078a0, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4e320230, ftCreationTime.dwHighDateTime=0x1d5dfe6, ftLastAccessTime.dwLowDateTime=0x60162240, ftLastAccessTime.dwHighDateTime=0x1d5d9bc, ftLastWriteTime.dwLowDateTime=0x60162240, ftLastWriteTime.dwHighDateTime=0x1d5d9bc, nFileSizeHigh=0x0, nFileSizeLow=0x13bb2, dwReserved0=0x0, dwReserved1=0x0, cFileName="vZhdjERKcp.pdf", cAlternateFileName="VZHDJE~1.PDF")) returned 1 [0085.442] FindNextFileW (in: hFindFile=0x51078a0, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0085.442] FindClose (in: hFindFile=0x51078a0 | out: hFindFile=0x51078a0) returned 1 [0085.442] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e77c) returned 1 [0085.442] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e788) returned 1 [0085.442] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e7bc) returned 1 [0085.442] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\lCnlTJ-G", nBufferLength=0x105, lpBuffer=0x31e2c4, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\lCnlTJ-G", lpFilePart=0x0) returned 0x2e [0085.442] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\lCnlTJ-G\\", nBufferLength=0x105, lpBuffer=0x31e298, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\lCnlTJ-G\\", lpFilePart=0x0) returned 0x2f [0085.442] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\lCnlTJ-G\\*", lpFindFileData=0x31e4e4 | out: lpFindFileData=0x31e4e4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x720b0b80, ftCreationTime.dwHighDateTime=0x1d5e5b7, ftLastAccessTime.dwLowDateTime=0xbddce6c0, ftLastAccessTime.dwHighDateTime=0x1d5e76d, ftLastWriteTime.dwLowDateTime=0xbddce6c0, ftLastWriteTime.dwHighDateTime=0x1d5e76d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x51078a0 [0085.442] FindNextFileW (in: hFindFile=0x51078a0, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x720b0b80, ftCreationTime.dwHighDateTime=0x1d5e5b7, ftLastAccessTime.dwLowDateTime=0xbddce6c0, ftLastAccessTime.dwHighDateTime=0x1d5e76d, ftLastWriteTime.dwLowDateTime=0xbddce6c0, ftLastWriteTime.dwHighDateTime=0x1d5e76d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0085.443] FindNextFileW (in: hFindFile=0x51078a0, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1f46a150, ftCreationTime.dwHighDateTime=0x1d5df83, ftLastAccessTime.dwLowDateTime=0x5b5dc320, ftLastAccessTime.dwHighDateTime=0x1d5e137, ftLastWriteTime.dwLowDateTime=0x5b5dc320, ftLastWriteTime.dwHighDateTime=0x1d5e137, nFileSizeHigh=0x0, nFileSizeLow=0xae13, dwReserved0=0x0, dwReserved1=0x0, cFileName="6wgIYQzJ1lqH2MW.pps", cAlternateFileName="6WGIYQ~1.PPS")) returned 1 [0085.443] FindNextFileW (in: hFindFile=0x51078a0, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf835680, ftCreationTime.dwHighDateTime=0x1d5e31d, ftLastAccessTime.dwLowDateTime=0x2d6ad8a0, ftLastAccessTime.dwHighDateTime=0x1d5d8a8, ftLastWriteTime.dwLowDateTime=0x2d6ad8a0, ftLastWriteTime.dwHighDateTime=0x1d5d8a8, nFileSizeHigh=0x0, nFileSizeLow=0x6a68, dwReserved0=0x0, dwReserved1=0x0, cFileName="9dmiDc5TdN6aBaN.m4a", cAlternateFileName="9DMIDC~1.M4A")) returned 1 [0085.443] FindNextFileW (in: hFindFile=0x51078a0, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa6828cf0, ftCreationTime.dwHighDateTime=0x1d5e2d6, ftLastAccessTime.dwLowDateTime=0xef0d8bb0, ftLastAccessTime.dwHighDateTime=0x1d5d885, ftLastWriteTime.dwLowDateTime=0xef0d8bb0, ftLastWriteTime.dwHighDateTime=0x1d5d885, nFileSizeHigh=0x0, nFileSizeLow=0x55c3, dwReserved0=0x0, dwReserved1=0x0, cFileName="sxtRyYUIDz-oVBFJk2R_.pptx", cAlternateFileName="SXTRYY~1.PPT")) returned 1 [0085.443] FindNextFileW (in: hFindFile=0x51078a0, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4e320230, ftCreationTime.dwHighDateTime=0x1d5dfe6, ftLastAccessTime.dwLowDateTime=0x60162240, ftLastAccessTime.dwHighDateTime=0x1d5d9bc, ftLastWriteTime.dwLowDateTime=0x60162240, ftLastWriteTime.dwHighDateTime=0x1d5d9bc, nFileSizeHigh=0x0, nFileSizeLow=0x13bb2, dwReserved0=0x0, dwReserved1=0x0, cFileName="vZhdjERKcp.pdf", cAlternateFileName="VZHDJE~1.PDF")) returned 1 [0085.443] FindNextFileW (in: hFindFile=0x51078a0, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4e320230, ftCreationTime.dwHighDateTime=0x1d5dfe6, ftLastAccessTime.dwLowDateTime=0x60162240, ftLastAccessTime.dwHighDateTime=0x1d5d9bc, ftLastWriteTime.dwLowDateTime=0x60162240, ftLastWriteTime.dwHighDateTime=0x1d5d9bc, nFileSizeHigh=0x0, nFileSizeLow=0x13bb2, dwReserved0=0x0, dwReserved1=0x0, cFileName="vZhdjERKcp.pdf", cAlternateFileName="VZHDJE~1.PDF")) returned 0 [0085.443] FindClose (in: hFindFile=0x51078a0 | out: hFindFile=0x51078a0) returned 1 [0085.443] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e77c) returned 1 [0085.443] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e788) returned 1 [0085.443] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\lCnlTJ-G\\sxtRyYUIDz-oVBFJk2R_.pptx", nBufferLength=0x105, lpBuffer=0x31e194, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\lCnlTJ-G\\sxtRyYUIDz-oVBFJk2R_.pptx", lpFilePart=0x0) returned 0x48 [0085.443] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e688) returned 1 [0085.444] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\lCnlTJ-G\\sxtRyYUIDz-oVBFJk2R_.pptx" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\lcnltj-g\\sxtryyuidz-ovbfjk2r_.pptx"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x264 [0085.444] GetFileType (hFile=0x264) returned 0x1 [0085.444] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e684) returned 1 [0085.444] GetFileType (hFile=0x264) returned 0x1 [0085.444] GetFileSize (in: hFile=0x264, lpFileSizeHigh=0x31e790 | out: lpFileSizeHigh=0x31e790*=0x0) returned 0x55c3 [0085.444] ReadFile (in: hFile=0x264, lpBuffer=0x293c0dc, nNumberOfBytesToRead=0x55c3, lpNumberOfBytesRead=0x31e73c, lpOverlapped=0x0 | out: lpBuffer=0x293c0dc*, lpNumberOfBytesRead=0x31e73c*=0x55c3, lpOverlapped=0x0) returned 1 [0085.445] CloseHandle (hObject=0x264) returned 1 [0085.461] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\lCnlTJ-G\\sxtRyYUIDz-oVBFJk2R_.pptx", nBufferLength=0x105, lpBuffer=0x31e180, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\lCnlTJ-G\\sxtRyYUIDz-oVBFJk2R_.pptx", lpFilePart=0x0) returned 0x48 [0085.461] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e674) returned 1 [0085.461] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\lCnlTJ-G\\sxtRyYUIDz-oVBFJk2R_.pptx" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\lcnltj-g\\sxtryyuidz-ovbfjk2r_.pptx"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x264 [0085.462] GetFileType (hFile=0x264) returned 0x1 [0085.462] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e670) returned 1 [0085.462] GetFileType (hFile=0x264) returned 0x1 [0085.462] WriteFile (in: hFile=0x264, lpBuffer=0x29a3bd4*, nNumberOfBytesToWrite=0x55d0, lpNumberOfBytesWritten=0x31e730, lpOverlapped=0x0 | out: lpBuffer=0x29a3bd4*, lpNumberOfBytesWritten=0x31e730*=0x55d0, lpOverlapped=0x0) returned 1 [0085.463] CloseHandle (hObject=0x264) returned 1 [0085.463] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\lCnlTJ-G\\sxtRyYUIDz-oVBFJk2R_.pptx", nBufferLength=0x105, lpBuffer=0x31e2b4, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\lCnlTJ-G\\sxtRyYUIDz-oVBFJk2R_.pptx", lpFilePart=0x0) returned 0x48 [0085.463] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\lCnlTJ-G\\sxtRyYUIDz-oVBFJk2R_.pptx", nBufferLength=0x105, lpBuffer=0x31e2b4, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\lCnlTJ-G\\sxtRyYUIDz-oVBFJk2R_.pptx", lpFilePart=0x0) returned 0x48 [0085.463] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e714) returned 1 [0085.463] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\lCnlTJ-G\\sxtRyYUIDz-oVBFJk2R_.pptx" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\lcnltj-g\\sxtryyuidz-ovbfjk2r_.pptx"), fInfoLevelId=0x0, lpFileInformation=0x31e790 | out: lpFileInformation=0x31e790*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa6828cf0, ftCreationTime.dwHighDateTime=0x1d5e2d6, ftLastAccessTime.dwLowDateTime=0xef0d8bb0, ftLastAccessTime.dwHighDateTime=0x1d5d885, ftLastWriteTime.dwLowDateTime=0x16624fe0, ftLastWriteTime.dwHighDateTime=0x1d6eb7f, nFileSizeHigh=0x0, nFileSizeLow=0x55d0)) returned 1 [0085.464] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e710) returned 1 [0085.464] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\lCnlTJ-G\\sxtRyYUIDz-oVBFJk2R_.pptx" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\lcnltj-g\\sxtryyuidz-ovbfjk2r_.pptx"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\lCnlTJ-G\\sxtRyYUIDz-oVBFJk2R_.pptx" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\lcnltj-g\\sxtryyuidz-ovbfjk2r_.pptx")) returned 1 [0085.464] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\lCnlTJ-G\\vZhdjERKcp.pdf", nBufferLength=0x105, lpBuffer=0x31e194, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\lCnlTJ-G\\vZhdjERKcp.pdf", lpFilePart=0x0) returned 0x3d [0085.464] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e688) returned 1 [0085.464] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\lCnlTJ-G\\vZhdjERKcp.pdf" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\lcnltj-g\\vzhdjerkcp.pdf"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x264 [0085.464] GetFileType (hFile=0x264) returned 0x1 [0085.464] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e684) returned 1 [0085.464] GetFileType (hFile=0x264) returned 0x1 [0085.464] GetFileSize (in: hFile=0x264, lpFileSizeHigh=0x31e790 | out: lpFileSizeHigh=0x31e790*=0x0) returned 0x13bb2 [0085.465] ReadFile (in: hFile=0x264, lpBuffer=0x29a9554, nNumberOfBytesToRead=0x13bb2, lpNumberOfBytesRead=0x31e73c, lpOverlapped=0x0 | out: lpBuffer=0x29a9554*, lpNumberOfBytesRead=0x31e73c*=0x13bb2, lpOverlapped=0x0) returned 1 [0085.466] CloseHandle (hObject=0x264) returned 1 [0085.488] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\lCnlTJ-G\\vZhdjERKcp.pdf", nBufferLength=0x105, lpBuffer=0x31e180, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\lCnlTJ-G\\vZhdjERKcp.pdf", lpFilePart=0x0) returned 0x3d [0085.488] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e674) returned 1 [0085.488] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\lCnlTJ-G\\vZhdjERKcp.pdf" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\lcnltj-g\\vzhdjerkcp.pdf"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x264 [0085.490] GetFileType (hFile=0x264) returned 0x1 [0085.490] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e670) returned 1 [0085.490] GetFileType (hFile=0x264) returned 0x1 [0085.490] WriteFile (in: hFile=0x264, lpBuffer=0x26689d4*, nNumberOfBytesToWrite=0x13bc0, lpNumberOfBytesWritten=0x31e730, lpOverlapped=0x0 | out: lpBuffer=0x26689d4*, lpNumberOfBytesWritten=0x31e730*=0x13bc0, lpOverlapped=0x0) returned 1 [0085.492] CloseHandle (hObject=0x264) returned 1 [0085.492] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\lCnlTJ-G\\vZhdjERKcp.pdf", nBufferLength=0x105, lpBuffer=0x31e2b4, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\lCnlTJ-G\\vZhdjERKcp.pdf", lpFilePart=0x0) returned 0x3d [0085.492] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\lCnlTJ-G\\vZhdjERKcp.pdf", nBufferLength=0x105, lpBuffer=0x31e2b4, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\lCnlTJ-G\\vZhdjERKcp.pdf", lpFilePart=0x0) returned 0x3d [0085.492] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e714) returned 1 [0085.492] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\lCnlTJ-G\\vZhdjERKcp.pdf" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\lcnltj-g\\vzhdjerkcp.pdf"), fInfoLevelId=0x0, lpFileInformation=0x31e790 | out: lpFileInformation=0x31e790*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4e320230, ftCreationTime.dwHighDateTime=0x1d5dfe6, ftLastAccessTime.dwLowDateTime=0x60162240, ftLastAccessTime.dwHighDateTime=0x1d5d9bc, ftLastWriteTime.dwLowDateTime=0x166712a0, ftLastWriteTime.dwHighDateTime=0x1d6eb7f, nFileSizeHigh=0x0, nFileSizeLow=0x13bc0)) returned 1 [0085.492] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e710) returned 1 [0085.492] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\lCnlTJ-G\\vZhdjERKcp.pdf" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\lcnltj-g\\vzhdjerkcp.pdf"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\lCnlTJ-G\\vZhdjERKcp.pdf" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\lcnltj-g\\vzhdjerkcp.pdf")) returned 1 [0085.492] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e7bc) returned 1 [0085.492] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\W2JtfG_38gA", nBufferLength=0x105, lpBuffer=0x31e2c4, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\W2JtfG_38gA", lpFilePart=0x0) returned 0x31 [0085.492] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\W2JtfG_38gA\\", nBufferLength=0x105, lpBuffer=0x31e298, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\W2JtfG_38gA\\", lpFilePart=0x0) returned 0x32 [0085.492] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\W2JtfG_38gA\\*", lpFindFileData=0x31e4e4 | out: lpFindFileData=0x31e4e4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x61433de0, ftCreationTime.dwHighDateTime=0x1d5e18e, ftLastAccessTime.dwLowDateTime=0x46909370, ftLastAccessTime.dwHighDateTime=0x1d5ddca, ftLastWriteTime.dwLowDateTime=0x46909370, ftLastWriteTime.dwHighDateTime=0x1d5ddca, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x381e80 [0085.493] FindNextFileW (in: hFindFile=0x381e80, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x61433de0, ftCreationTime.dwHighDateTime=0x1d5e18e, ftLastAccessTime.dwLowDateTime=0x46909370, ftLastAccessTime.dwHighDateTime=0x1d5ddca, ftLastWriteTime.dwLowDateTime=0x46909370, ftLastWriteTime.dwHighDateTime=0x1d5ddca, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0085.493] FindNextFileW (in: hFindFile=0x381e80, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb60ea410, ftCreationTime.dwHighDateTime=0x1d5dd2c, ftLastAccessTime.dwLowDateTime=0x37988c30, ftLastAccessTime.dwHighDateTime=0x1d5e4b7, ftLastWriteTime.dwLowDateTime=0x37988c30, ftLastWriteTime.dwHighDateTime=0x1d5e4b7, nFileSizeHigh=0x0, nFileSizeLow=0x6478, dwReserved0=0x0, dwReserved1=0x0, cFileName="aAze.png", cAlternateFileName="")) returned 1 [0085.493] FindNextFileW (in: hFindFile=0x381e80, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd90b3740, ftCreationTime.dwHighDateTime=0x1d5e546, ftLastAccessTime.dwLowDateTime=0xebc33580, ftLastAccessTime.dwHighDateTime=0x1d5db60, ftLastWriteTime.dwLowDateTime=0xebc33580, ftLastWriteTime.dwHighDateTime=0x1d5db60, nFileSizeHigh=0x0, nFileSizeLow=0x9401, dwReserved0=0x0, dwReserved1=0x0, cFileName="Fz1uxg4uH8FGJTt.bmp", cAlternateFileName="FZ1UXG~1.BMP")) returned 1 [0085.493] FindNextFileW (in: hFindFile=0x381e80, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4afc2040, ftCreationTime.dwHighDateTime=0x1d5e6a4, ftLastAccessTime.dwLowDateTime=0xc3795ce0, ftLastAccessTime.dwHighDateTime=0x1d5e59b, ftLastWriteTime.dwLowDateTime=0xc3795ce0, ftLastWriteTime.dwHighDateTime=0x1d5e59b, nFileSizeHigh=0x0, nFileSizeLow=0x16616, dwReserved0=0x0, dwReserved1=0x0, cFileName="r7hjDl5.png", cAlternateFileName="")) returned 1 [0085.493] FindNextFileW (in: hFindFile=0x381e80, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf502fd10, ftCreationTime.dwHighDateTime=0x1d5db2e, ftLastAccessTime.dwLowDateTime=0xac387820, ftLastAccessTime.dwHighDateTime=0x1d5de8b, ftLastWriteTime.dwLowDateTime=0xac387820, ftLastWriteTime.dwHighDateTime=0x1d5de8b, nFileSizeHigh=0x0, nFileSizeLow=0x7314, dwReserved0=0x0, dwReserved1=0x0, cFileName="woIAzWgoxq8m n.bmp", cAlternateFileName="WOIAZW~1.BMP")) returned 1 [0085.493] FindNextFileW (in: hFindFile=0x381e80, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0085.493] FindClose (in: hFindFile=0x381e80 | out: hFindFile=0x381e80) returned 1 [0085.493] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e77c) returned 1 [0085.494] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e788) returned 1 [0085.494] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e7bc) returned 1 [0085.494] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\W2JtfG_38gA", nBufferLength=0x105, lpBuffer=0x31e2c4, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\W2JtfG_38gA", lpFilePart=0x0) returned 0x31 [0085.494] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\W2JtfG_38gA\\", nBufferLength=0x105, lpBuffer=0x31e298, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\W2JtfG_38gA\\", lpFilePart=0x0) returned 0x32 [0085.494] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\W2JtfG_38gA\\*", lpFindFileData=0x31e4e4 | out: lpFindFileData=0x31e4e4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x61433de0, ftCreationTime.dwHighDateTime=0x1d5e18e, ftLastAccessTime.dwLowDateTime=0x46909370, ftLastAccessTime.dwHighDateTime=0x1d5ddca, ftLastWriteTime.dwLowDateTime=0x46909370, ftLastWriteTime.dwHighDateTime=0x1d5ddca, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x381e80 [0085.494] FindNextFileW (in: hFindFile=0x381e80, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x61433de0, ftCreationTime.dwHighDateTime=0x1d5e18e, ftLastAccessTime.dwLowDateTime=0x46909370, ftLastAccessTime.dwHighDateTime=0x1d5ddca, ftLastWriteTime.dwLowDateTime=0x46909370, ftLastWriteTime.dwHighDateTime=0x1d5ddca, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0085.494] FindNextFileW (in: hFindFile=0x381e80, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb60ea410, ftCreationTime.dwHighDateTime=0x1d5dd2c, ftLastAccessTime.dwLowDateTime=0x37988c30, ftLastAccessTime.dwHighDateTime=0x1d5e4b7, ftLastWriteTime.dwLowDateTime=0x37988c30, ftLastWriteTime.dwHighDateTime=0x1d5e4b7, nFileSizeHigh=0x0, nFileSizeLow=0x6478, dwReserved0=0x0, dwReserved1=0x0, cFileName="aAze.png", cAlternateFileName="")) returned 1 [0085.494] FindNextFileW (in: hFindFile=0x381e80, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd90b3740, ftCreationTime.dwHighDateTime=0x1d5e546, ftLastAccessTime.dwLowDateTime=0xebc33580, ftLastAccessTime.dwHighDateTime=0x1d5db60, ftLastWriteTime.dwLowDateTime=0xebc33580, ftLastWriteTime.dwHighDateTime=0x1d5db60, nFileSizeHigh=0x0, nFileSizeLow=0x9401, dwReserved0=0x0, dwReserved1=0x0, cFileName="Fz1uxg4uH8FGJTt.bmp", cAlternateFileName="FZ1UXG~1.BMP")) returned 1 [0085.494] FindNextFileW (in: hFindFile=0x381e80, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4afc2040, ftCreationTime.dwHighDateTime=0x1d5e6a4, ftLastAccessTime.dwLowDateTime=0xc3795ce0, ftLastAccessTime.dwHighDateTime=0x1d5e59b, ftLastWriteTime.dwLowDateTime=0xc3795ce0, ftLastWriteTime.dwHighDateTime=0x1d5e59b, nFileSizeHigh=0x0, nFileSizeLow=0x16616, dwReserved0=0x0, dwReserved1=0x0, cFileName="r7hjDl5.png", cAlternateFileName="")) returned 1 [0085.495] FindNextFileW (in: hFindFile=0x381e80, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf502fd10, ftCreationTime.dwHighDateTime=0x1d5db2e, ftLastAccessTime.dwLowDateTime=0xac387820, ftLastAccessTime.dwHighDateTime=0x1d5de8b, ftLastWriteTime.dwLowDateTime=0xac387820, ftLastWriteTime.dwHighDateTime=0x1d5de8b, nFileSizeHigh=0x0, nFileSizeLow=0x7314, dwReserved0=0x0, dwReserved1=0x0, cFileName="woIAzWgoxq8m n.bmp", cAlternateFileName="WOIAZW~1.BMP")) returned 1 [0085.495] FindNextFileW (in: hFindFile=0x381e80, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf502fd10, ftCreationTime.dwHighDateTime=0x1d5db2e, ftLastAccessTime.dwLowDateTime=0xac387820, ftLastAccessTime.dwHighDateTime=0x1d5de8b, ftLastWriteTime.dwLowDateTime=0xac387820, ftLastWriteTime.dwHighDateTime=0x1d5de8b, nFileSizeHigh=0x0, nFileSizeLow=0x7314, dwReserved0=0x0, dwReserved1=0x0, cFileName="woIAzWgoxq8m n.bmp", cAlternateFileName="WOIAZW~1.BMP")) returned 0 [0085.495] FindClose (in: hFindFile=0x381e80 | out: hFindFile=0x381e80) returned 1 [0085.495] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e77c) returned 1 [0085.495] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e788) returned 1 [0085.495] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\W2JtfG_38gA\\aAze.png", nBufferLength=0x105, lpBuffer=0x31e194, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\W2JtfG_38gA\\aAze.png", lpFilePart=0x0) returned 0x3a [0085.495] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e688) returned 1 [0085.495] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\W2JtfG_38gA\\aAze.png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\w2jtfg_38ga\\aaze.png"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x264 [0085.495] GetFileType (hFile=0x264) returned 0x1 [0085.495] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e684) returned 1 [0085.495] GetFileType (hFile=0x264) returned 0x1 [0085.495] GetFileSize (in: hFile=0x264, lpFileSizeHigh=0x31e790 | out: lpFileSizeHigh=0x31e790*=0x0) returned 0x6478 [0085.495] ReadFile (in: hFile=0x264, lpBuffer=0x267e748, nNumberOfBytesToRead=0x6478, lpNumberOfBytesRead=0x31e73c, lpOverlapped=0x0 | out: lpBuffer=0x267e748*, lpNumberOfBytesRead=0x31e73c*=0x6478, lpOverlapped=0x0) returned 1 [0085.496] CloseHandle (hObject=0x264) returned 1 [0085.536] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\W2JtfG_38gA\\aAze.png", nBufferLength=0x105, lpBuffer=0x31e180, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\W2JtfG_38gA\\aAze.png", lpFilePart=0x0) returned 0x3a [0085.536] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e674) returned 1 [0085.536] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\W2JtfG_38gA\\aAze.png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\w2jtfg_38ga\\aaze.png"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x264 [0085.537] GetFileType (hFile=0x264) returned 0x1 [0085.537] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e670) returned 1 [0085.537] GetFileType (hFile=0x264) returned 0x1 [0085.537] WriteFile (in: hFile=0x264, lpBuffer=0x26ead08*, nNumberOfBytesToWrite=0x6480, lpNumberOfBytesWritten=0x31e730, lpOverlapped=0x0 | out: lpBuffer=0x26ead08*, lpNumberOfBytesWritten=0x31e730*=0x6480, lpOverlapped=0x0) returned 1 [0085.538] CloseHandle (hObject=0x264) returned 1 [0085.538] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\W2JtfG_38gA\\aAze.png", nBufferLength=0x105, lpBuffer=0x31e2b4, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\W2JtfG_38gA\\aAze.png", lpFilePart=0x0) returned 0x3a [0085.538] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\W2JtfG_38gA\\aAze.png", nBufferLength=0x105, lpBuffer=0x31e2b4, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\W2JtfG_38gA\\aAze.png", lpFilePart=0x0) returned 0x3a [0085.538] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e714) returned 1 [0085.538] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\W2JtfG_38gA\\aAze.png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\w2jtfg_38ga\\aaze.png"), fInfoLevelId=0x0, lpFileInformation=0x31e790 | out: lpFileInformation=0x31e790*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb60ea410, ftCreationTime.dwHighDateTime=0x1d5dd2c, ftLastAccessTime.dwLowDateTime=0x37988c30, ftLastAccessTime.dwHighDateTime=0x1d5e4b7, ftLastWriteTime.dwLowDateTime=0x166e36c0, ftLastWriteTime.dwHighDateTime=0x1d6eb7f, nFileSizeHigh=0x0, nFileSizeLow=0x6480)) returned 1 [0085.538] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e710) returned 1 [0085.538] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\W2JtfG_38gA\\aAze.png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\w2jtfg_38ga\\aaze.png"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\W2JtfG_38gA\\aAze.png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\w2jtfg_38ga\\aaze.png")) returned 1 [0085.539] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\W2JtfG_38gA\\Fz1uxg4uH8FGJTt.bmp", nBufferLength=0x105, lpBuffer=0x31e194, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\W2JtfG_38gA\\Fz1uxg4uH8FGJTt.bmp", lpFilePart=0x0) returned 0x45 [0085.539] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e688) returned 1 [0085.539] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\W2JtfG_38gA\\Fz1uxg4uH8FGJTt.bmp" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\w2jtfg_38ga\\fz1uxg4uh8fgjtt.bmp"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x264 [0085.539] GetFileType (hFile=0x264) returned 0x1 [0085.539] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e684) returned 1 [0085.539] GetFileType (hFile=0x264) returned 0x1 [0085.539] GetFileSize (in: hFile=0x264, lpFileSizeHigh=0x31e790 | out: lpFileSizeHigh=0x31e790*=0x0) returned 0x9401 [0085.539] ReadFile (in: hFile=0x264, lpBuffer=0x26f14dc, nNumberOfBytesToRead=0x9401, lpNumberOfBytesRead=0x31e73c, lpOverlapped=0x0 | out: lpBuffer=0x26f14dc*, lpNumberOfBytesRead=0x31e73c*=0x9401, lpOverlapped=0x0) returned 1 [0085.540] CloseHandle (hObject=0x264) returned 1 [0085.554] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\W2JtfG_38gA\\Fz1uxg4uH8FGJTt.bmp", nBufferLength=0x105, lpBuffer=0x31e180, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\W2JtfG_38gA\\Fz1uxg4uH8FGJTt.bmp", lpFilePart=0x0) returned 0x45 [0085.555] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e674) returned 1 [0085.555] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\W2JtfG_38gA\\Fz1uxg4uH8FGJTt.bmp" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\w2jtfg_38ga\\fz1uxg4uh8fgjtt.bmp"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x264 [0085.556] GetFileType (hFile=0x264) returned 0x1 [0085.556] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e670) returned 1 [0085.556] GetFileType (hFile=0x264) returned 0x1 [0085.556] WriteFile (in: hFile=0x264, lpBuffer=0x276c714*, nNumberOfBytesToWrite=0x9410, lpNumberOfBytesWritten=0x31e730, lpOverlapped=0x0 | out: lpBuffer=0x276c714*, lpNumberOfBytesWritten=0x31e730*=0x9410, lpOverlapped=0x0) returned 1 [0085.557] CloseHandle (hObject=0x264) returned 1 [0085.557] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\W2JtfG_38gA\\Fz1uxg4uH8FGJTt.bmp", nBufferLength=0x105, lpBuffer=0x31e2b4, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\W2JtfG_38gA\\Fz1uxg4uH8FGJTt.bmp", lpFilePart=0x0) returned 0x45 [0085.557] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\W2JtfG_38gA\\Fz1uxg4uH8FGJTt.bmp", nBufferLength=0x105, lpBuffer=0x31e2b4, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\W2JtfG_38gA\\Fz1uxg4uH8FGJTt.bmp", lpFilePart=0x0) returned 0x45 [0085.557] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e714) returned 1 [0085.557] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\W2JtfG_38gA\\Fz1uxg4uH8FGJTt.bmp" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\w2jtfg_38ga\\fz1uxg4uh8fgjtt.bmp"), fInfoLevelId=0x0, lpFileInformation=0x31e790 | out: lpFileInformation=0x31e790*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd90b3740, ftCreationTime.dwHighDateTime=0x1d5e546, ftLastAccessTime.dwLowDateTime=0xebc33580, ftLastAccessTime.dwHighDateTime=0x1d5db60, ftLastWriteTime.dwLowDateTime=0x16709820, ftLastWriteTime.dwHighDateTime=0x1d6eb7f, nFileSizeHigh=0x0, nFileSizeLow=0x9410)) returned 1 [0085.557] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e710) returned 1 [0085.558] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\W2JtfG_38gA\\Fz1uxg4uH8FGJTt.bmp" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\w2jtfg_38ga\\fz1uxg4uh8fgjtt.bmp"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\W2JtfG_38gA\\Fz1uxg4uH8FGJTt.bmp" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\w2jtfg_38ga\\fz1uxg4uh8fgjtt.bmp")) returned 1 [0085.558] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\W2JtfG_38gA\\r7hjDl5.png", nBufferLength=0x105, lpBuffer=0x31e194, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\W2JtfG_38gA\\r7hjDl5.png", lpFilePart=0x0) returned 0x3d [0085.558] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e688) returned 1 [0085.558] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\W2JtfG_38gA\\r7hjDl5.png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\w2jtfg_38ga\\r7hjdl5.png"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x264 [0085.558] GetFileType (hFile=0x264) returned 0x1 [0085.558] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e684) returned 1 [0085.558] GetFileType (hFile=0x264) returned 0x1 [0085.558] GetFileSize (in: hFile=0x264, lpFileSizeHigh=0x31e790 | out: lpFileSizeHigh=0x31e790*=0x0) returned 0x16616 [0085.558] ReadFile (in: hFile=0x264, lpBuffer=0x3add628, nNumberOfBytesToRead=0x16616, lpNumberOfBytesRead=0x31e73c, lpOverlapped=0x0 | out: lpBuffer=0x3add628*, lpNumberOfBytesRead=0x31e73c*=0x16616, lpOverlapped=0x0) returned 1 [0085.613] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\W2JtfG_38gA\\r7hjDl5.png", nBufferLength=0x105, lpBuffer=0x31e180, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\W2JtfG_38gA\\r7hjDl5.png", lpFilePart=0x0) returned 0x3d [0085.613] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e674) returned 1 [0085.613] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\W2JtfG_38gA\\r7hjDl5.png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\w2jtfg_38ga\\r7hjdl5.png"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x178 [0085.615] GetFileType (hFile=0x178) returned 0x1 [0085.615] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e670) returned 1 [0085.615] GetFileType (hFile=0x178) returned 0x1 [0085.615] WriteFile (in: hFile=0x178, lpBuffer=0x36460f0*, nNumberOfBytesToWrite=0x16620, lpNumberOfBytesWritten=0x31e730, lpOverlapped=0x0 | out: lpBuffer=0x36460f0*, lpNumberOfBytesWritten=0x31e730*=0x16620, lpOverlapped=0x0) returned 1 [0085.617] CloseHandle (hObject=0x178) returned 1 [0085.617] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\W2JtfG_38gA\\r7hjDl5.png", nBufferLength=0x105, lpBuffer=0x31e2b4, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\W2JtfG_38gA\\r7hjDl5.png", lpFilePart=0x0) returned 0x3d [0085.617] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\W2JtfG_38gA\\r7hjDl5.png", nBufferLength=0x105, lpBuffer=0x31e2b4, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\W2JtfG_38gA\\r7hjDl5.png", lpFilePart=0x0) returned 0x3d [0085.617] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e714) returned 1 [0085.617] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\W2JtfG_38gA\\r7hjDl5.png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\w2jtfg_38ga\\r7hjdl5.png"), fInfoLevelId=0x0, lpFileInformation=0x31e790 | out: lpFileInformation=0x31e790*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4afc2040, ftCreationTime.dwHighDateTime=0x1d5e6a4, ftLastAccessTime.dwLowDateTime=0xc3795ce0, ftLastAccessTime.dwHighDateTime=0x1d5e59b, ftLastWriteTime.dwLowDateTime=0x167a1da0, ftLastWriteTime.dwHighDateTime=0x1d6eb7f, nFileSizeHigh=0x0, nFileSizeLow=0x16620)) returned 1 [0085.617] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e710) returned 1 [0085.617] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\W2JtfG_38gA\\r7hjDl5.png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\w2jtfg_38ga\\r7hjdl5.png"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\W2JtfG_38gA\\r7hjDl5.png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\w2jtfg_38ga\\r7hjdl5.png")) returned 1 [0085.618] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\W2JtfG_38gA\\woIAzWgoxq8m n.bmp", nBufferLength=0x105, lpBuffer=0x31e194, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\W2JtfG_38gA\\woIAzWgoxq8m n.bmp", lpFilePart=0x0) returned 0x44 [0085.618] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e688) returned 1 [0085.618] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\W2JtfG_38gA\\woIAzWgoxq8m n.bmp" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\w2jtfg_38ga\\woiazwgoxq8m n.bmp"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x178 [0085.618] GetFileType (hFile=0x178) returned 0x1 [0085.618] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e684) returned 1 [0085.618] GetFileType (hFile=0x178) returned 0x1 [0085.618] GetFileSize (in: hFile=0x178, lpFileSizeHigh=0x31e790 | out: lpFileSizeHigh=0x31e790*=0x0) returned 0x7314 [0085.618] ReadFile (in: hFile=0x178, lpBuffer=0x265516c, nNumberOfBytesToRead=0x7314, lpNumberOfBytesRead=0x31e73c, lpOverlapped=0x0 | out: lpBuffer=0x265516c*, lpNumberOfBytesRead=0x31e73c*=0x7314, lpOverlapped=0x0) returned 1 [0085.619] CloseHandle (hObject=0x178) returned 1 [0085.842] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\W2JtfG_38gA\\woIAzWgoxq8m n.bmp", nBufferLength=0x105, lpBuffer=0x31e180, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\W2JtfG_38gA\\woIAzWgoxq8m n.bmp", lpFilePart=0x0) returned 0x44 [0085.842] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e674) returned 1 [0085.842] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\W2JtfG_38gA\\woIAzWgoxq8m n.bmp" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\w2jtfg_38ga\\woiazwgoxq8m n.bmp"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x178 [0085.843] GetFileType (hFile=0x178) returned 0x1 [0085.843] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e670) returned 1 [0085.843] GetFileType (hFile=0x178) returned 0x1 [0085.843] WriteFile (in: hFile=0x178, lpBuffer=0x26c6410*, nNumberOfBytesToWrite=0x7320, lpNumberOfBytesWritten=0x31e730, lpOverlapped=0x0 | out: lpBuffer=0x26c6410*, lpNumberOfBytesWritten=0x31e730*=0x7320, lpOverlapped=0x0) returned 1 [0085.844] CloseHandle (hObject=0x178) returned 1 [0085.844] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\W2JtfG_38gA\\woIAzWgoxq8m n.bmp", nBufferLength=0x105, lpBuffer=0x31e2b4, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\W2JtfG_38gA\\woIAzWgoxq8m n.bmp", lpFilePart=0x0) returned 0x44 [0085.844] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\W2JtfG_38gA\\woIAzWgoxq8m n.bmp", nBufferLength=0x105, lpBuffer=0x31e2b4, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\W2JtfG_38gA\\woIAzWgoxq8m n.bmp", lpFilePart=0x0) returned 0x44 [0085.844] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e714) returned 1 [0085.845] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\W2JtfG_38gA\\woIAzWgoxq8m n.bmp" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\w2jtfg_38ga\\woiazwgoxq8m n.bmp"), fInfoLevelId=0x0, lpFileInformation=0x31e790 | out: lpFileInformation=0x31e790*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf502fd10, ftCreationTime.dwHighDateTime=0x1d5db2e, ftLastAccessTime.dwLowDateTime=0xac387820, ftLastAccessTime.dwHighDateTime=0x1d5de8b, ftLastWriteTime.dwLowDateTime=0x169b70e0, ftLastWriteTime.dwHighDateTime=0x1d6eb7f, nFileSizeHigh=0x0, nFileSizeLow=0x7320)) returned 1 [0085.845] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e710) returned 1 [0085.845] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\W2JtfG_38gA\\woIAzWgoxq8m n.bmp" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\w2jtfg_38ga\\woiazwgoxq8m n.bmp"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\W2JtfG_38gA\\woIAzWgoxq8m n.bmp" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\w2jtfg_38ga\\woiazwgoxq8m n.bmp")) returned 1 [0085.845] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e7bc) returned 1 [0085.845] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\xhxot_kWSkhA9P", nBufferLength=0x105, lpBuffer=0x31e2c4, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\xhxot_kWSkhA9P", lpFilePart=0x0) returned 0x34 [0085.845] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\xhxot_kWSkhA9P\\", nBufferLength=0x105, lpBuffer=0x31e298, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\xhxot_kWSkhA9P\\", lpFilePart=0x0) returned 0x35 [0085.845] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\xhxot_kWSkhA9P\\*", lpFindFileData=0x31e4e4 | out: lpFindFileData=0x31e4e4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa5cc1ca0, ftCreationTime.dwHighDateTime=0x1d5e433, ftLastAccessTime.dwLowDateTime=0xe3bde090, ftLastAccessTime.dwHighDateTime=0x1d5e594, ftLastWriteTime.dwLowDateTime=0xe3bde090, ftLastWriteTime.dwHighDateTime=0x1d5e594, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x381b40 [0085.845] FindNextFileW (in: hFindFile=0x381b40, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa5cc1ca0, ftCreationTime.dwHighDateTime=0x1d5e433, ftLastAccessTime.dwLowDateTime=0xe3bde090, ftLastAccessTime.dwHighDateTime=0x1d5e594, ftLastWriteTime.dwLowDateTime=0xe3bde090, ftLastWriteTime.dwHighDateTime=0x1d5e594, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0085.845] FindNextFileW (in: hFindFile=0x381b40, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2531c930, ftCreationTime.dwHighDateTime=0x1d5e43f, ftLastAccessTime.dwLowDateTime=0xfcc33f00, ftLastAccessTime.dwHighDateTime=0x1d5e77d, ftLastWriteTime.dwLowDateTime=0xfcc33f00, ftLastWriteTime.dwHighDateTime=0x1d5e77d, nFileSizeHigh=0x0, nFileSizeLow=0x88d9, dwReserved0=0x0, dwReserved1=0x0, cFileName="atwN3-g8oPk6T3g.jpg", cAlternateFileName="ATWN3-~1.JPG")) returned 1 [0085.846] FindNextFileW (in: hFindFile=0x381b40, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5abb1fe0, ftCreationTime.dwHighDateTime=0x1d5e3bb, ftLastAccessTime.dwLowDateTime=0xc0a85c30, ftLastAccessTime.dwHighDateTime=0x1d5dbcf, ftLastWriteTime.dwLowDateTime=0xc0a85c30, ftLastWriteTime.dwHighDateTime=0x1d5dbcf, nFileSizeHigh=0x0, nFileSizeLow=0xf22b, dwReserved0=0x0, dwReserved1=0x0, cFileName="cmYxylv 6W.bmp", cAlternateFileName="CMYXYL~1.BMP")) returned 1 [0085.846] FindNextFileW (in: hFindFile=0x381b40, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x596c0b60, ftCreationTime.dwHighDateTime=0x1d5da8b, ftLastAccessTime.dwLowDateTime=0xc60dd160, ftLastAccessTime.dwHighDateTime=0x1d5e772, ftLastWriteTime.dwLowDateTime=0xc60dd160, ftLastWriteTime.dwHighDateTime=0x1d5e772, nFileSizeHigh=0x0, nFileSizeLow=0x27d4, dwReserved0=0x0, dwReserved1=0x0, cFileName="FdZ8ddtdrxmF.m4a", cAlternateFileName="FDZ8DD~1.M4A")) returned 1 [0085.846] FindNextFileW (in: hFindFile=0x381b40, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3211380, ftCreationTime.dwHighDateTime=0x1d5de10, ftLastAccessTime.dwLowDateTime=0xce7294c0, ftLastAccessTime.dwHighDateTime=0x1d5dcd8, ftLastWriteTime.dwLowDateTime=0xce7294c0, ftLastWriteTime.dwHighDateTime=0x1d5dcd8, nFileSizeHigh=0x0, nFileSizeLow=0x839, dwReserved0=0x0, dwReserved1=0x0, cFileName="mqz37 1dgTG.m4a", cAlternateFileName="MQZ371~1.M4A")) returned 1 [0085.846] FindNextFileW (in: hFindFile=0x381b40, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0085.846] FindClose (in: hFindFile=0x381b40 | out: hFindFile=0x381b40) returned 1 [0085.846] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e77c) returned 1 [0085.846] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e788) returned 1 [0085.846] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e7bc) returned 1 [0085.846] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\xhxot_kWSkhA9P", nBufferLength=0x105, lpBuffer=0x31e2c4, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\xhxot_kWSkhA9P", lpFilePart=0x0) returned 0x34 [0085.846] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\xhxot_kWSkhA9P\\", nBufferLength=0x105, lpBuffer=0x31e298, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\xhxot_kWSkhA9P\\", lpFilePart=0x0) returned 0x35 [0085.846] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\xhxot_kWSkhA9P\\*", lpFindFileData=0x31e4e4 | out: lpFindFileData=0x31e4e4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa5cc1ca0, ftCreationTime.dwHighDateTime=0x1d5e433, ftLastAccessTime.dwLowDateTime=0xe3bde090, ftLastAccessTime.dwHighDateTime=0x1d5e594, ftLastWriteTime.dwLowDateTime=0xe3bde090, ftLastWriteTime.dwHighDateTime=0x1d5e594, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x381b40 [0085.847] FindNextFileW (in: hFindFile=0x381b40, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa5cc1ca0, ftCreationTime.dwHighDateTime=0x1d5e433, ftLastAccessTime.dwLowDateTime=0xe3bde090, ftLastAccessTime.dwHighDateTime=0x1d5e594, ftLastWriteTime.dwLowDateTime=0xe3bde090, ftLastWriteTime.dwHighDateTime=0x1d5e594, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0085.847] FindNextFileW (in: hFindFile=0x381b40, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2531c930, ftCreationTime.dwHighDateTime=0x1d5e43f, ftLastAccessTime.dwLowDateTime=0xfcc33f00, ftLastAccessTime.dwHighDateTime=0x1d5e77d, ftLastWriteTime.dwLowDateTime=0xfcc33f00, ftLastWriteTime.dwHighDateTime=0x1d5e77d, nFileSizeHigh=0x0, nFileSizeLow=0x88d9, dwReserved0=0x0, dwReserved1=0x0, cFileName="atwN3-g8oPk6T3g.jpg", cAlternateFileName="ATWN3-~1.JPG")) returned 1 [0085.847] FindNextFileW (in: hFindFile=0x381b40, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5abb1fe0, ftCreationTime.dwHighDateTime=0x1d5e3bb, ftLastAccessTime.dwLowDateTime=0xc0a85c30, ftLastAccessTime.dwHighDateTime=0x1d5dbcf, ftLastWriteTime.dwLowDateTime=0xc0a85c30, ftLastWriteTime.dwHighDateTime=0x1d5dbcf, nFileSizeHigh=0x0, nFileSizeLow=0xf22b, dwReserved0=0x0, dwReserved1=0x0, cFileName="cmYxylv 6W.bmp", cAlternateFileName="CMYXYL~1.BMP")) returned 1 [0085.847] FindNextFileW (in: hFindFile=0x381b40, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x596c0b60, ftCreationTime.dwHighDateTime=0x1d5da8b, ftLastAccessTime.dwLowDateTime=0xc60dd160, ftLastAccessTime.dwHighDateTime=0x1d5e772, ftLastWriteTime.dwLowDateTime=0xc60dd160, ftLastWriteTime.dwHighDateTime=0x1d5e772, nFileSizeHigh=0x0, nFileSizeLow=0x27d4, dwReserved0=0x0, dwReserved1=0x0, cFileName="FdZ8ddtdrxmF.m4a", cAlternateFileName="FDZ8DD~1.M4A")) returned 1 [0085.847] FindNextFileW (in: hFindFile=0x381b40, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3211380, ftCreationTime.dwHighDateTime=0x1d5de10, ftLastAccessTime.dwLowDateTime=0xce7294c0, ftLastAccessTime.dwHighDateTime=0x1d5dcd8, ftLastWriteTime.dwLowDateTime=0xce7294c0, ftLastWriteTime.dwHighDateTime=0x1d5dcd8, nFileSizeHigh=0x0, nFileSizeLow=0x839, dwReserved0=0x0, dwReserved1=0x0, cFileName="mqz37 1dgTG.m4a", cAlternateFileName="MQZ371~1.M4A")) returned 1 [0085.848] FindNextFileW (in: hFindFile=0x381b40, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3211380, ftCreationTime.dwHighDateTime=0x1d5de10, ftLastAccessTime.dwLowDateTime=0xce7294c0, ftLastAccessTime.dwHighDateTime=0x1d5dcd8, ftLastWriteTime.dwLowDateTime=0xce7294c0, ftLastWriteTime.dwHighDateTime=0x1d5dcd8, nFileSizeHigh=0x0, nFileSizeLow=0x839, dwReserved0=0x0, dwReserved1=0x0, cFileName="mqz37 1dgTG.m4a", cAlternateFileName="MQZ371~1.M4A")) returned 0 [0085.848] FindClose (in: hFindFile=0x381b40 | out: hFindFile=0x381b40) returned 1 [0085.848] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e77c) returned 1 [0085.848] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e788) returned 1 [0085.848] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\xhxot_kWSkhA9P\\atwN3-g8oPk6T3g.jpg", nBufferLength=0x105, lpBuffer=0x31e194, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\xhxot_kWSkhA9P\\atwN3-g8oPk6T3g.jpg", lpFilePart=0x0) returned 0x48 [0085.848] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e688) returned 1 [0085.848] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\xhxot_kWSkhA9P\\atwN3-g8oPk6T3g.jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\xhxot_kwskha9p\\atwn3-g8opk6t3g.jpg"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x178 [0085.848] GetFileType (hFile=0x178) returned 0x1 [0085.848] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e684) returned 1 [0085.848] GetFileType (hFile=0x178) returned 0x1 [0085.848] GetFileSize (in: hFile=0x178, lpFileSizeHigh=0x31e790 | out: lpFileSizeHigh=0x31e790*=0x0) returned 0x88d9 [0085.848] ReadFile (in: hFile=0x178, lpBuffer=0x26d167c, nNumberOfBytesToRead=0x88d9, lpNumberOfBytesRead=0x31e73c, lpOverlapped=0x0 | out: lpBuffer=0x26d167c*, lpNumberOfBytesRead=0x31e73c*=0x88d9, lpOverlapped=0x0) returned 1 [0085.849] CloseHandle (hObject=0x178) returned 1 [0085.974] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\xhxot_kWSkhA9P\\atwN3-g8oPk6T3g.jpg", nBufferLength=0x105, lpBuffer=0x31e180, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\xhxot_kWSkhA9P\\atwN3-g8oPk6T3g.jpg", lpFilePart=0x0) returned 0x48 [0085.974] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e674) returned 1 [0085.974] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\xhxot_kWSkhA9P\\atwN3-g8oPk6T3g.jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\xhxot_kwskha9p\\atwn3-g8opk6t3g.jpg"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x178 [0085.976] GetFileType (hFile=0x178) returned 0x1 [0085.976] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e670) returned 1 [0085.976] GetFileType (hFile=0x178) returned 0x1 [0085.976] WriteFile (in: hFile=0x178, lpBuffer=0x2661e70*, nNumberOfBytesToWrite=0x88e0, lpNumberOfBytesWritten=0x31e730, lpOverlapped=0x0 | out: lpBuffer=0x2661e70*, lpNumberOfBytesWritten=0x31e730*=0x88e0, lpOverlapped=0x0) returned 1 [0085.977] CloseHandle (hObject=0x178) returned 1 [0085.977] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\xhxot_kWSkhA9P\\atwN3-g8oPk6T3g.jpg", nBufferLength=0x105, lpBuffer=0x31e2b4, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\xhxot_kWSkhA9P\\atwN3-g8oPk6T3g.jpg", lpFilePart=0x0) returned 0x48 [0085.977] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\xhxot_kWSkhA9P\\atwN3-g8oPk6T3g.jpg", nBufferLength=0x105, lpBuffer=0x31e2b4, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\xhxot_kWSkhA9P\\atwN3-g8oPk6T3g.jpg", lpFilePart=0x0) returned 0x48 [0085.977] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e714) returned 1 [0085.977] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\xhxot_kWSkhA9P\\atwN3-g8oPk6T3g.jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\xhxot_kwskha9p\\atwn3-g8opk6t3g.jpg"), fInfoLevelId=0x0, lpFileInformation=0x31e790 | out: lpFileInformation=0x31e790*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2531c930, ftCreationTime.dwHighDateTime=0x1d5e43f, ftLastAccessTime.dwLowDateTime=0xfcc33f00, ftLastAccessTime.dwHighDateTime=0x1d5e77d, ftLastWriteTime.dwLowDateTime=0x16b0dd40, ftLastWriteTime.dwHighDateTime=0x1d6eb7f, nFileSizeHigh=0x0, nFileSizeLow=0x88e0)) returned 1 [0085.977] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e710) returned 1 [0085.977] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\xhxot_kWSkhA9P\\atwN3-g8oPk6T3g.jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\xhxot_kwskha9p\\atwn3-g8opk6t3g.jpg"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\xhxot_kWSkhA9P\\atwN3-g8oPk6T3g.jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\xhxot_kwskha9p\\atwn3-g8opk6t3g.jpg")) returned 1 [0085.977] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\xhxot_kWSkhA9P\\cmYxylv 6W.bmp", nBufferLength=0x105, lpBuffer=0x31e194, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\xhxot_kWSkhA9P\\cmYxylv 6W.bmp", lpFilePart=0x0) returned 0x43 [0085.978] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e688) returned 1 [0085.978] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\xhxot_kWSkhA9P\\cmYxylv 6W.bmp" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\xhxot_kwskha9p\\cmyxylv 6w.bmp"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x178 [0085.978] GetFileType (hFile=0x178) returned 0x1 [0085.978] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e684) returned 1 [0085.978] GetFileType (hFile=0x178) returned 0x1 [0085.978] GetFileSize (in: hFile=0x178, lpFileSizeHigh=0x31e790 | out: lpFileSizeHigh=0x31e790*=0x0) returned 0xf22b [0085.978] ReadFile (in: hFile=0x178, lpBuffer=0x266ab00, nNumberOfBytesToRead=0xf22b, lpNumberOfBytesRead=0x31e73c, lpOverlapped=0x0 | out: lpBuffer=0x266ab00*, lpNumberOfBytesRead=0x31e73c*=0xf22b, lpOverlapped=0x0) returned 1 [0085.979] CloseHandle (hObject=0x178) returned 1 [0085.994] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\xhxot_kWSkhA9P\\cmYxylv 6W.bmp", nBufferLength=0x105, lpBuffer=0x31e180, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\xhxot_kWSkhA9P\\cmYxylv 6W.bmp", lpFilePart=0x0) returned 0x43 [0085.994] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e674) returned 1 [0085.994] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\xhxot_kWSkhA9P\\cmYxylv 6W.bmp" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\xhxot_kwskha9p\\cmyxylv 6w.bmp"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x178 [0085.995] GetFileType (hFile=0x178) returned 0x1 [0085.995] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e670) returned 1 [0085.995] GetFileType (hFile=0x178) returned 0x1 [0085.995] WriteFile (in: hFile=0x178, lpBuffer=0x26e50e8*, nNumberOfBytesToWrite=0xf230, lpNumberOfBytesWritten=0x31e730, lpOverlapped=0x0 | out: lpBuffer=0x26e50e8*, lpNumberOfBytesWritten=0x31e730*=0xf230, lpOverlapped=0x0) returned 1 [0085.997] CloseHandle (hObject=0x178) returned 1 [0085.997] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\xhxot_kWSkhA9P\\cmYxylv 6W.bmp", nBufferLength=0x105, lpBuffer=0x31e2b4, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\xhxot_kWSkhA9P\\cmYxylv 6W.bmp", lpFilePart=0x0) returned 0x43 [0085.997] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\xhxot_kWSkhA9P\\cmYxylv 6W.bmp", nBufferLength=0x105, lpBuffer=0x31e2b4, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\xhxot_kWSkhA9P\\cmYxylv 6W.bmp", lpFilePart=0x0) returned 0x43 [0085.997] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e714) returned 1 [0085.997] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\xhxot_kWSkhA9P\\cmYxylv 6W.bmp" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\xhxot_kwskha9p\\cmyxylv 6w.bmp"), fInfoLevelId=0x0, lpFileInformation=0x31e790 | out: lpFileInformation=0x31e790*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5abb1fe0, ftCreationTime.dwHighDateTime=0x1d5e3bb, ftLastAccessTime.dwLowDateTime=0xc0a85c30, ftLastAccessTime.dwHighDateTime=0x1d5dbcf, ftLastWriteTime.dwLowDateTime=0x16b33ea0, ftLastWriteTime.dwHighDateTime=0x1d6eb7f, nFileSizeHigh=0x0, nFileSizeLow=0xf230)) returned 1 [0085.997] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e710) returned 1 [0085.997] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\xhxot_kWSkhA9P\\cmYxylv 6W.bmp" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\xhxot_kwskha9p\\cmyxylv 6w.bmp"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\xhxot_kWSkhA9P\\cmYxylv 6W.bmp" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\xhxot_kwskha9p\\cmyxylv 6w.bmp")) returned 1 [0085.998] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e834) returned 1 [0085.998] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents", nBufferLength=0x105, lpBuffer=0x31e33c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents", lpFilePart=0x0) returned 0x27 [0085.998] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\", nBufferLength=0x105, lpBuffer=0x31e310, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\", lpFilePart=0x0) returned 0x28 [0085.998] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\*", lpFindFileData=0x31e55c | out: lpFindFileData=0x31e55c*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x28cff640, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0xd8df9720, ftLastAccessTime.dwHighDateTime=0x1d5e82a, ftLastWriteTime.dwLowDateTime=0xd8df9720, ftLastWriteTime.dwHighDateTime=0x1d5e82a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x381c40 [0085.998] FindNextFileW (in: hFindFile=0x381c40, lpFindFileData=0x31e56c | out: lpFindFileData=0x31e56c*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x28cff640, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0xd8df9720, ftLastAccessTime.dwHighDateTime=0x1d5e82a, ftLastWriteTime.dwLowDateTime=0xd8df9720, ftLastWriteTime.dwHighDateTime=0x1d5e82a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0085.998] FindNextFileW (in: hFindFile=0x381c40, lpFindFileData=0x31e56c | out: lpFindFileData=0x31e56c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf71e7900, ftCreationTime.dwHighDateTime=0x1d58c1c, ftLastAccessTime.dwLowDateTime=0xb04f1420, ftLastAccessTime.dwHighDateTime=0x1d5a75c, ftLastWriteTime.dwLowDateTime=0xb04f1420, ftLastWriteTime.dwHighDateTime=0x1d5a75c, nFileSizeHigh=0x0, nFileSizeLow=0x12cf4, dwReserved0=0x0, dwReserved1=0x0, cFileName="-XBhFw3KRNIiI.docx", cAlternateFileName="-XBHFW~1.DOC")) returned 1 [0085.998] FindNextFileW (in: hFindFile=0x381c40, lpFindFileData=0x31e56c | out: lpFindFileData=0x31e56c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2ee4a250, ftCreationTime.dwHighDateTime=0x1d56bc6, ftLastAccessTime.dwLowDateTime=0x2f784590, ftLastAccessTime.dwHighDateTime=0x1d5858a, ftLastWriteTime.dwLowDateTime=0x2f784590, ftLastWriteTime.dwHighDateTime=0x1d5858a, nFileSizeHigh=0x0, nFileSizeLow=0x6c40, dwReserved0=0x0, dwReserved1=0x0, cFileName="1GMPKC9.xlsx", cAlternateFileName="1GMPKC~1.XLS")) returned 1 [0085.998] FindNextFileW (in: hFindFile=0x381c40, lpFindFileData=0x31e56c | out: lpFindFileData=0x31e56c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc7c34310, ftCreationTime.dwHighDateTime=0x1d5dcbd, ftLastAccessTime.dwLowDateTime=0xe8a5f080, ftLastAccessTime.dwHighDateTime=0x1d5d47c, ftLastWriteTime.dwLowDateTime=0xe8a5f080, ftLastWriteTime.dwHighDateTime=0x1d5d47c, nFileSizeHigh=0x0, nFileSizeLow=0x10a4d, dwReserved0=0x0, dwReserved1=0x0, cFileName="3g 7kD u8yPvSBKq.pptx", cAlternateFileName="3G7KDU~1.PPT")) returned 1 [0085.999] FindNextFileW (in: hFindFile=0x381c40, lpFindFileData=0x31e56c | out: lpFindFileData=0x31e56c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4087d9d0, ftCreationTime.dwHighDateTime=0x1d5b943, ftLastAccessTime.dwLowDateTime=0x3e122b20, ftLastAccessTime.dwHighDateTime=0x1d5a709, ftLastWriteTime.dwLowDateTime=0x3e122b20, ftLastWriteTime.dwHighDateTime=0x1d5a709, nFileSizeHigh=0x0, nFileSizeLow=0xcee, dwReserved0=0x0, dwReserved1=0x0, cFileName="3YAya5eDcy-F-cb-1Rdx.docx", cAlternateFileName="3YAYA5~1.DOC")) returned 1 [0085.999] FindNextFileW (in: hFindFile=0x381c40, lpFindFileData=0x31e56c | out: lpFindFileData=0x31e56c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1c7b7dd0, ftCreationTime.dwHighDateTime=0x1d5e10c, ftLastAccessTime.dwLowDateTime=0x600694f0, ftLastAccessTime.dwHighDateTime=0x1d5e02a, ftLastWriteTime.dwLowDateTime=0x600694f0, ftLastWriteTime.dwHighDateTime=0x1d5e02a, nFileSizeHigh=0x0, nFileSizeLow=0x17352, dwReserved0=0x0, dwReserved1=0x0, cFileName="AP4ujLNzybJF J.rtf", cAlternateFileName="AP4UJL~1.RTF")) returned 1 [0085.999] FindNextFileW (in: hFindFile=0x381c40, lpFindFileData=0x31e56c | out: lpFindFileData=0x31e56c*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0x28d4b900, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28d4b900, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x2d207440, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x192, dwReserved0=0x0, dwReserved1=0x0, cFileName="desktop.ini", cAlternateFileName="")) returned 1 [0085.999] FindNextFileW (in: hFindFile=0x381c40, lpFindFileData=0x31e56c | out: lpFindFileData=0x31e56c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xadcb0e10, ftCreationTime.dwHighDateTime=0x1d57deb, ftLastAccessTime.dwLowDateTime=0xac3d5360, ftLastAccessTime.dwHighDateTime=0x1d58173, ftLastWriteTime.dwLowDateTime=0xac3d5360, ftLastWriteTime.dwHighDateTime=0x1d58173, nFileSizeHigh=0x0, nFileSizeLow=0x11a63, dwReserved0=0x0, dwReserved1=0x0, cFileName="ewcSZPE2Uke_ysh8Kk.xlsx", cAlternateFileName="EWCSZP~1.XLS")) returned 1 [0085.999] FindNextFileW (in: hFindFile=0x381c40, lpFindFileData=0x31e56c | out: lpFindFileData=0x31e56c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xce106420, ftCreationTime.dwHighDateTime=0x1d57528, ftLastAccessTime.dwLowDateTime=0x8112dd20, ftLastAccessTime.dwHighDateTime=0x1d5957f, ftLastWriteTime.dwLowDateTime=0x8112dd20, ftLastWriteTime.dwHighDateTime=0x1d5957f, nFileSizeHigh=0x0, nFileSizeLow=0x13d9d, dwReserved0=0x0, dwReserved1=0x0, cFileName="F3qq-TdX0v1.xlsx", cAlternateFileName="F3QQ-T~1.XLS")) returned 1 [0085.999] FindNextFileW (in: hFindFile=0x381c40, lpFindFileData=0x31e56c | out: lpFindFileData=0x31e56c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa01f22e0, ftCreationTime.dwHighDateTime=0x1d5a566, ftLastAccessTime.dwLowDateTime=0x9870b660, ftLastAccessTime.dwHighDateTime=0x1d5c3b8, ftLastWriteTime.dwLowDateTime=0x9870b660, ftLastWriteTime.dwHighDateTime=0x1d5c3b8, nFileSizeHigh=0x0, nFileSizeLow=0x12288, dwReserved0=0x0, dwReserved1=0x0, cFileName="HiHn1FTQ027Hcj vP6d8.docx", cAlternateFileName="HIHN1F~1.DOC")) returned 1 [0085.999] FindNextFileW (in: hFindFile=0x381c40, lpFindFileData=0x31e56c | out: lpFindFileData=0x31e56c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x93d8c1a0, ftCreationTime.dwHighDateTime=0x1d57ad0, ftLastAccessTime.dwLowDateTime=0xc10fed20, ftLastAccessTime.dwHighDateTime=0x1d5dfec, ftLastWriteTime.dwLowDateTime=0xc10fed20, ftLastWriteTime.dwHighDateTime=0x1d5dfec, nFileSizeHigh=0x0, nFileSizeLow=0xfab8, dwReserved0=0x0, dwReserved1=0x0, cFileName="HS_jtO INeCAdLtO.xlsx", cAlternateFileName="HS_JTO~1.XLS")) returned 1 [0085.999] FindNextFileW (in: hFindFile=0x381c40, lpFindFileData=0x31e56c | out: lpFindFileData=0x31e56c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x263eb2a0, ftCreationTime.dwHighDateTime=0x1d5dfdc, ftLastAccessTime.dwLowDateTime=0xadc9aae0, ftLastAccessTime.dwHighDateTime=0x1d5e75c, ftLastWriteTime.dwLowDateTime=0xadc9aae0, ftLastWriteTime.dwHighDateTime=0x1d5e75c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="mcdNsT5RVFSVyld", cAlternateFileName="MCDNST~1")) returned 1 [0086.000] FindNextFileW (in: hFindFile=0x381c40, lpFindFileData=0x31e56c | out: lpFindFileData=0x31e56c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x315c4630, ftCreationTime.dwHighDateTime=0x1d58379, ftLastAccessTime.dwLowDateTime=0xea423510, ftLastAccessTime.dwHighDateTime=0x1d5b182, ftLastWriteTime.dwLowDateTime=0xea423510, ftLastWriteTime.dwHighDateTime=0x1d5b182, nFileSizeHigh=0x0, nFileSizeLow=0x617a, dwReserved0=0x0, dwReserved1=0x0, cFileName="MVUshvijtjHU.pptx", cAlternateFileName="MVUSHV~1.PPT")) returned 1 [0086.000] FindNextFileW (in: hFindFile=0x381c40, lpFindFileData=0x31e56c | out: lpFindFileData=0x31e56c*(dwFileAttributes=0x2416, ftCreationTime.dwLowDateTime=0x290dda00, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x290dda00, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x290dda00, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="My Music", cAlternateFileName="MYMUSI~1")) returned 1 [0086.000] FindNextFileW (in: hFindFile=0x381c40, lpFindFileData=0x31e56c | out: lpFindFileData=0x31e56c*(dwFileAttributes=0x2416, ftCreationTime.dwLowDateTime=0x290dda00, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x290dda00, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x290dda00, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="My Pictures", cAlternateFileName="MYPICT~1")) returned 1 [0086.000] FindNextFileW (in: hFindFile=0x381c40, lpFindFileData=0x31e56c | out: lpFindFileData=0x31e56c*(dwFileAttributes=0x14, ftCreationTime.dwLowDateTime=0x9e9e4460, ftCreationTime.dwHighDateTime=0x1d305ee, ftLastAccessTime.dwLowDateTime=0x9ebad4e0, ftLastAccessTime.dwHighDateTime=0x1d305ee, ftLastWriteTime.dwLowDateTime=0x9ebad4e0, ftLastWriteTime.dwHighDateTime=0x1d305ee, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="My Shapes", cAlternateFileName="MYSHAP~1")) returned 1 [0086.000] FindNextFileW (in: hFindFile=0x381c40, lpFindFileData=0x31e56c | out: lpFindFileData=0x31e56c*(dwFileAttributes=0x2416, ftCreationTime.dwLowDateTime=0x290dda00, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x290dda00, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x290dda00, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="My Videos", cAlternateFileName="MYVIDE~1")) returned 1 [0086.000] FindNextFileW (in: hFindFile=0x381c40, lpFindFileData=0x31e56c | out: lpFindFileData=0x31e56c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5a7a9f80, ftCreationTime.dwHighDateTime=0x1d2fad7, ftLastAccessTime.dwLowDateTime=0x8a4af3c0, ftLastAccessTime.dwHighDateTime=0x1d5e82a, ftLastWriteTime.dwLowDateTime=0x8a4af3c0, ftLastWriteTime.dwHighDateTime=0x1d5e82a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Outlook Files", cAlternateFileName="OUTLOO~1")) returned 1 [0086.000] FindNextFileW (in: hFindFile=0x381c40, lpFindFileData=0x31e56c | out: lpFindFileData=0x31e56c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd0522f10, ftCreationTime.dwHighDateTime=0x1d5e7ed, ftLastAccessTime.dwLowDateTime=0x5c61c6e0, ftLastAccessTime.dwHighDateTime=0x1d5e08d, ftLastWriteTime.dwLowDateTime=0x5c61c6e0, ftLastWriteTime.dwHighDateTime=0x1d5e08d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="pC9__AmTieaQ3iZVw9R8", cAlternateFileName="PC9__A~1")) returned 1 [0086.001] FindNextFileW (in: hFindFile=0x381c40, lpFindFileData=0x31e56c | out: lpFindFileData=0x31e56c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x19f75280, ftCreationTime.dwHighDateTime=0x1d5de70, ftLastAccessTime.dwLowDateTime=0xb2fafc50, ftLastAccessTime.dwHighDateTime=0x1d5d9c7, ftLastWriteTime.dwLowDateTime=0xb2fafc50, ftLastWriteTime.dwHighDateTime=0x1d5d9c7, nFileSizeHigh=0x0, nFileSizeLow=0x18623, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="phtzJp3.doc", cAlternateFileName="")) returned 1 [0086.001] FindNextFileW (in: hFindFile=0x381c40, lpFindFileData=0x31e56c | out: lpFindFileData=0x31e56c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe26eac60, ftCreationTime.dwHighDateTime=0x1d5ded2, ftLastAccessTime.dwLowDateTime=0xe92a6430, ftLastAccessTime.dwHighDateTime=0x1d5d8d9, ftLastWriteTime.dwLowDateTime=0xe92a6430, ftLastWriteTime.dwHighDateTime=0x1d5d8d9, nFileSizeHigh=0x0, nFileSizeLow=0x149a, dwReserved0=0x0, dwReserved1=0x0, cFileName="ShYapy659.docx", cAlternateFileName="SHYAPY~1.DOC")) returned 1 [0086.001] FindNextFileW (in: hFindFile=0x381c40, lpFindFileData=0x31e56c | out: lpFindFileData=0x31e56c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x823294e0, ftCreationTime.dwHighDateTime=0x1d5ab3f, ftLastAccessTime.dwLowDateTime=0x47e0ab40, ftLastAccessTime.dwHighDateTime=0x1d5a9a2, ftLastWriteTime.dwLowDateTime=0x47e0ab40, ftLastWriteTime.dwHighDateTime=0x1d5a9a2, nFileSizeHigh=0x0, nFileSizeLow=0x18334, dwReserved0=0x0, dwReserved1=0x0, cFileName="sylRmbaPWvbAwXpKH.pptx", cAlternateFileName="SYLRMB~1.PPT")) returned 1 [0086.001] FindNextFileW (in: hFindFile=0x381c40, lpFindFileData=0x31e56c | out: lpFindFileData=0x31e56c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa7e2aa90, ftCreationTime.dwHighDateTime=0x1d5a92d, ftLastAccessTime.dwLowDateTime=0x7c6dede0, ftLastAccessTime.dwHighDateTime=0x1d58e73, ftLastWriteTime.dwLowDateTime=0x7c6dede0, ftLastWriteTime.dwHighDateTime=0x1d58e73, nFileSizeHigh=0x0, nFileSizeLow=0x10ac8, dwReserved0=0x0, dwReserved1=0x0, cFileName="Tub7RsstsPF5bhl.docx", cAlternateFileName="TUB7RS~1.DOC")) returned 1 [0086.001] FindNextFileW (in: hFindFile=0x381c40, lpFindFileData=0x31e56c | out: lpFindFileData=0x31e56c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9a9cb2e0, ftCreationTime.dwHighDateTime=0x1d598de, ftLastAccessTime.dwLowDateTime=0x2102b670, ftLastAccessTime.dwHighDateTime=0x1d57cad, ftLastWriteTime.dwLowDateTime=0x2102b670, ftLastWriteTime.dwHighDateTime=0x1d57cad, nFileSizeHigh=0x0, nFileSizeLow=0x6c58, dwReserved0=0x0, dwReserved1=0x0, cFileName="v62Jp.xlsx", cAlternateFileName="V62JP~1.XLS")) returned 1 [0086.001] FindNextFileW (in: hFindFile=0x381c40, lpFindFileData=0x31e56c | out: lpFindFileData=0x31e56c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc35a3c70, ftCreationTime.dwHighDateTime=0x1d5b846, ftLastAccessTime.dwLowDateTime=0x130f7d20, ftLastAccessTime.dwHighDateTime=0x1d56bc1, ftLastWriteTime.dwLowDateTime=0x130f7d20, ftLastWriteTime.dwHighDateTime=0x1d56bc1, nFileSizeHigh=0x0, nFileSizeLow=0x16a86, dwReserved0=0x0, dwReserved1=0x0, cFileName="WHE1DQO_Ps0NUHD5IUA.docx", cAlternateFileName="WHE1DQ~1.DOC")) returned 1 [0086.001] FindNextFileW (in: hFindFile=0x381c40, lpFindFileData=0x31e56c | out: lpFindFileData=0x31e56c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x56543370, ftCreationTime.dwHighDateTime=0x1d5e072, ftLastAccessTime.dwLowDateTime=0x595be5f0, ftLastAccessTime.dwHighDateTime=0x1d5a71e, ftLastWriteTime.dwLowDateTime=0x595be5f0, ftLastWriteTime.dwHighDateTime=0x1d5a71e, nFileSizeHigh=0x0, nFileSizeLow=0xc832, dwReserved0=0x0, dwReserved1=0x0, cFileName="xXD95e7i 9JIiSYfn.pptx", cAlternateFileName="XXD95E~1.PPT")) returned 1 [0086.001] FindNextFileW (in: hFindFile=0x381c40, lpFindFileData=0x31e56c | out: lpFindFileData=0x31e56c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x976c9ee0, ftCreationTime.dwHighDateTime=0x1d5a4e2, ftLastAccessTime.dwLowDateTime=0x8b931c40, ftLastAccessTime.dwHighDateTime=0x1d5a4a9, ftLastWriteTime.dwLowDateTime=0x8b931c40, ftLastWriteTime.dwHighDateTime=0x1d5a4a9, nFileSizeHigh=0x0, nFileSizeLow=0x17458, dwReserved0=0x0, dwReserved1=0x0, cFileName="Ytscf.pptx", cAlternateFileName="YTSCF~1.PPT")) returned 1 [0086.001] FindNextFileW (in: hFindFile=0x381c40, lpFindFileData=0x31e56c | out: lpFindFileData=0x31e56c*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0086.002] FindClose (in: hFindFile=0x381c40 | out: hFindFile=0x381c40) returned 1 [0086.002] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e7f4) returned 1 [0086.002] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e800) returned 1 [0086.002] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e834) returned 1 [0086.002] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents", nBufferLength=0x105, lpBuffer=0x31e33c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents", lpFilePart=0x0) returned 0x27 [0086.002] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\", nBufferLength=0x105, lpBuffer=0x31e310, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\", lpFilePart=0x0) returned 0x28 [0086.002] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\*", lpFindFileData=0x31e55c | out: lpFindFileData=0x31e55c*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x28cff640, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0xd8df9720, ftLastAccessTime.dwHighDateTime=0x1d5e82a, ftLastWriteTime.dwLowDateTime=0xd8df9720, ftLastWriteTime.dwHighDateTime=0x1d5e82a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x381c40 [0086.002] FindNextFileW (in: hFindFile=0x381c40, lpFindFileData=0x31e56c | out: lpFindFileData=0x31e56c*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x28cff640, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0xd8df9720, ftLastAccessTime.dwHighDateTime=0x1d5e82a, ftLastWriteTime.dwLowDateTime=0xd8df9720, ftLastWriteTime.dwHighDateTime=0x1d5e82a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0086.002] FindNextFileW (in: hFindFile=0x381c40, lpFindFileData=0x31e56c | out: lpFindFileData=0x31e56c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf71e7900, ftCreationTime.dwHighDateTime=0x1d58c1c, ftLastAccessTime.dwLowDateTime=0xb04f1420, ftLastAccessTime.dwHighDateTime=0x1d5a75c, ftLastWriteTime.dwLowDateTime=0xb04f1420, ftLastWriteTime.dwHighDateTime=0x1d5a75c, nFileSizeHigh=0x0, nFileSizeLow=0x12cf4, dwReserved0=0x0, dwReserved1=0x0, cFileName="-XBhFw3KRNIiI.docx", cAlternateFileName="-XBHFW~1.DOC")) returned 1 [0086.002] FindNextFileW (in: hFindFile=0x381c40, lpFindFileData=0x31e56c | out: lpFindFileData=0x31e56c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2ee4a250, ftCreationTime.dwHighDateTime=0x1d56bc6, ftLastAccessTime.dwLowDateTime=0x2f784590, ftLastAccessTime.dwHighDateTime=0x1d5858a, ftLastWriteTime.dwLowDateTime=0x2f784590, ftLastWriteTime.dwHighDateTime=0x1d5858a, nFileSizeHigh=0x0, nFileSizeLow=0x6c40, dwReserved0=0x0, dwReserved1=0x0, cFileName="1GMPKC9.xlsx", cAlternateFileName="1GMPKC~1.XLS")) returned 1 [0086.003] FindNextFileW (in: hFindFile=0x381c40, lpFindFileData=0x31e56c | out: lpFindFileData=0x31e56c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc7c34310, ftCreationTime.dwHighDateTime=0x1d5dcbd, ftLastAccessTime.dwLowDateTime=0xe8a5f080, ftLastAccessTime.dwHighDateTime=0x1d5d47c, ftLastWriteTime.dwLowDateTime=0xe8a5f080, ftLastWriteTime.dwHighDateTime=0x1d5d47c, nFileSizeHigh=0x0, nFileSizeLow=0x10a4d, dwReserved0=0x0, dwReserved1=0x0, cFileName="3g 7kD u8yPvSBKq.pptx", cAlternateFileName="3G7KDU~1.PPT")) returned 1 [0086.003] FindNextFileW (in: hFindFile=0x381c40, lpFindFileData=0x31e56c | out: lpFindFileData=0x31e56c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4087d9d0, ftCreationTime.dwHighDateTime=0x1d5b943, ftLastAccessTime.dwLowDateTime=0x3e122b20, ftLastAccessTime.dwHighDateTime=0x1d5a709, ftLastWriteTime.dwLowDateTime=0x3e122b20, ftLastWriteTime.dwHighDateTime=0x1d5a709, nFileSizeHigh=0x0, nFileSizeLow=0xcee, dwReserved0=0x0, dwReserved1=0x0, cFileName="3YAya5eDcy-F-cb-1Rdx.docx", cAlternateFileName="3YAYA5~1.DOC")) returned 1 [0086.017] FindNextFileW (in: hFindFile=0x381c40, lpFindFileData=0x31e56c | out: lpFindFileData=0x31e56c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1c7b7dd0, ftCreationTime.dwHighDateTime=0x1d5e10c, ftLastAccessTime.dwLowDateTime=0x600694f0, ftLastAccessTime.dwHighDateTime=0x1d5e02a, ftLastWriteTime.dwLowDateTime=0x600694f0, ftLastWriteTime.dwHighDateTime=0x1d5e02a, nFileSizeHigh=0x0, nFileSizeLow=0x17352, dwReserved0=0x0, dwReserved1=0x0, cFileName="AP4ujLNzybJF J.rtf", cAlternateFileName="AP4UJL~1.RTF")) returned 1 [0086.017] FindNextFileW (in: hFindFile=0x381c40, lpFindFileData=0x31e56c | out: lpFindFileData=0x31e56c*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0x28d4b900, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28d4b900, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x2d207440, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x192, dwReserved0=0x0, dwReserved1=0x0, cFileName="desktop.ini", cAlternateFileName="")) returned 1 [0086.017] FindNextFileW (in: hFindFile=0x381c40, lpFindFileData=0x31e56c | out: lpFindFileData=0x31e56c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xadcb0e10, ftCreationTime.dwHighDateTime=0x1d57deb, ftLastAccessTime.dwLowDateTime=0xac3d5360, ftLastAccessTime.dwHighDateTime=0x1d58173, ftLastWriteTime.dwLowDateTime=0xac3d5360, ftLastWriteTime.dwHighDateTime=0x1d58173, nFileSizeHigh=0x0, nFileSizeLow=0x11a63, dwReserved0=0x0, dwReserved1=0x0, cFileName="ewcSZPE2Uke_ysh8Kk.xlsx", cAlternateFileName="EWCSZP~1.XLS")) returned 1 [0086.017] FindNextFileW (in: hFindFile=0x381c40, lpFindFileData=0x31e56c | out: lpFindFileData=0x31e56c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xce106420, ftCreationTime.dwHighDateTime=0x1d57528, ftLastAccessTime.dwLowDateTime=0x8112dd20, ftLastAccessTime.dwHighDateTime=0x1d5957f, ftLastWriteTime.dwLowDateTime=0x8112dd20, ftLastWriteTime.dwHighDateTime=0x1d5957f, nFileSizeHigh=0x0, nFileSizeLow=0x13d9d, dwReserved0=0x0, dwReserved1=0x0, cFileName="F3qq-TdX0v1.xlsx", cAlternateFileName="F3QQ-T~1.XLS")) returned 1 [0086.018] FindNextFileW (in: hFindFile=0x381c40, lpFindFileData=0x31e56c | out: lpFindFileData=0x31e56c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa01f22e0, ftCreationTime.dwHighDateTime=0x1d5a566, ftLastAccessTime.dwLowDateTime=0x9870b660, ftLastAccessTime.dwHighDateTime=0x1d5c3b8, ftLastWriteTime.dwLowDateTime=0x9870b660, ftLastWriteTime.dwHighDateTime=0x1d5c3b8, nFileSizeHigh=0x0, nFileSizeLow=0x12288, dwReserved0=0x0, dwReserved1=0x0, cFileName="HiHn1FTQ027Hcj vP6d8.docx", cAlternateFileName="HIHN1F~1.DOC")) returned 1 [0086.018] FindNextFileW (in: hFindFile=0x381c40, lpFindFileData=0x31e56c | out: lpFindFileData=0x31e56c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x93d8c1a0, ftCreationTime.dwHighDateTime=0x1d57ad0, ftLastAccessTime.dwLowDateTime=0xc10fed20, ftLastAccessTime.dwHighDateTime=0x1d5dfec, ftLastWriteTime.dwLowDateTime=0xc10fed20, ftLastWriteTime.dwHighDateTime=0x1d5dfec, nFileSizeHigh=0x0, nFileSizeLow=0xfab8, dwReserved0=0x0, dwReserved1=0x0, cFileName="HS_jtO INeCAdLtO.xlsx", cAlternateFileName="HS_JTO~1.XLS")) returned 1 [0086.018] FindNextFileW (in: hFindFile=0x381c40, lpFindFileData=0x31e56c | out: lpFindFileData=0x31e56c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x263eb2a0, ftCreationTime.dwHighDateTime=0x1d5dfdc, ftLastAccessTime.dwLowDateTime=0xadc9aae0, ftLastAccessTime.dwHighDateTime=0x1d5e75c, ftLastWriteTime.dwLowDateTime=0xadc9aae0, ftLastWriteTime.dwHighDateTime=0x1d5e75c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="mcdNsT5RVFSVyld", cAlternateFileName="MCDNST~1")) returned 1 [0086.018] FindNextFileW (in: hFindFile=0x381c40, lpFindFileData=0x31e56c | out: lpFindFileData=0x31e56c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x315c4630, ftCreationTime.dwHighDateTime=0x1d58379, ftLastAccessTime.dwLowDateTime=0xea423510, ftLastAccessTime.dwHighDateTime=0x1d5b182, ftLastWriteTime.dwLowDateTime=0xea423510, ftLastWriteTime.dwHighDateTime=0x1d5b182, nFileSizeHigh=0x0, nFileSizeLow=0x617a, dwReserved0=0x0, dwReserved1=0x0, cFileName="MVUshvijtjHU.pptx", cAlternateFileName="MVUSHV~1.PPT")) returned 1 [0086.018] FindNextFileW (in: hFindFile=0x381c40, lpFindFileData=0x31e56c | out: lpFindFileData=0x31e56c*(dwFileAttributes=0x2416, ftCreationTime.dwLowDateTime=0x290dda00, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x290dda00, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x290dda00, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="My Music", cAlternateFileName="MYMUSI~1")) returned 1 [0086.018] FindNextFileW (in: hFindFile=0x381c40, lpFindFileData=0x31e56c | out: lpFindFileData=0x31e56c*(dwFileAttributes=0x2416, ftCreationTime.dwLowDateTime=0x290dda00, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x290dda00, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x290dda00, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="My Pictures", cAlternateFileName="MYPICT~1")) returned 1 [0086.019] FindNextFileW (in: hFindFile=0x381c40, lpFindFileData=0x31e56c | out: lpFindFileData=0x31e56c*(dwFileAttributes=0x14, ftCreationTime.dwLowDateTime=0x9e9e4460, ftCreationTime.dwHighDateTime=0x1d305ee, ftLastAccessTime.dwLowDateTime=0x9ebad4e0, ftLastAccessTime.dwHighDateTime=0x1d305ee, ftLastWriteTime.dwLowDateTime=0x9ebad4e0, ftLastWriteTime.dwHighDateTime=0x1d305ee, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="My Shapes", cAlternateFileName="MYSHAP~1")) returned 1 [0086.019] FindNextFileW (in: hFindFile=0x381c40, lpFindFileData=0x31e56c | out: lpFindFileData=0x31e56c*(dwFileAttributes=0x2416, ftCreationTime.dwLowDateTime=0x290dda00, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x290dda00, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x290dda00, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="My Videos", cAlternateFileName="MYVIDE~1")) returned 1 [0086.019] FindNextFileW (in: hFindFile=0x381c40, lpFindFileData=0x31e56c | out: lpFindFileData=0x31e56c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5a7a9f80, ftCreationTime.dwHighDateTime=0x1d2fad7, ftLastAccessTime.dwLowDateTime=0x8a4af3c0, ftLastAccessTime.dwHighDateTime=0x1d5e82a, ftLastWriteTime.dwLowDateTime=0x8a4af3c0, ftLastWriteTime.dwHighDateTime=0x1d5e82a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Outlook Files", cAlternateFileName="OUTLOO~1")) returned 1 [0086.019] FindNextFileW (in: hFindFile=0x381c40, lpFindFileData=0x31e56c | out: lpFindFileData=0x31e56c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd0522f10, ftCreationTime.dwHighDateTime=0x1d5e7ed, ftLastAccessTime.dwLowDateTime=0x5c61c6e0, ftLastAccessTime.dwHighDateTime=0x1d5e08d, ftLastWriteTime.dwLowDateTime=0x5c61c6e0, ftLastWriteTime.dwHighDateTime=0x1d5e08d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="pC9__AmTieaQ3iZVw9R8", cAlternateFileName="PC9__A~1")) returned 1 [0086.019] FindNextFileW (in: hFindFile=0x381c40, lpFindFileData=0x31e56c | out: lpFindFileData=0x31e56c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x19f75280, ftCreationTime.dwHighDateTime=0x1d5de70, ftLastAccessTime.dwLowDateTime=0xb2fafc50, ftLastAccessTime.dwHighDateTime=0x1d5d9c7, ftLastWriteTime.dwLowDateTime=0xb2fafc50, ftLastWriteTime.dwHighDateTime=0x1d5d9c7, nFileSizeHigh=0x0, nFileSizeLow=0x18623, dwReserved0=0x0, dwReserved1=0x0, cFileName="phtzJp3.doc", cAlternateFileName="")) returned 1 [0086.019] FindNextFileW (in: hFindFile=0x381c40, lpFindFileData=0x31e56c | out: lpFindFileData=0x31e56c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe26eac60, ftCreationTime.dwHighDateTime=0x1d5ded2, ftLastAccessTime.dwLowDateTime=0xe92a6430, ftLastAccessTime.dwHighDateTime=0x1d5d8d9, ftLastWriteTime.dwLowDateTime=0xe92a6430, ftLastWriteTime.dwHighDateTime=0x1d5d8d9, nFileSizeHigh=0x0, nFileSizeLow=0x149a, dwReserved0=0x0, dwReserved1=0x0, cFileName="ShYapy659.docx", cAlternateFileName="SHYAPY~1.DOC")) returned 1 [0086.020] FindNextFileW (in: hFindFile=0x381c40, lpFindFileData=0x31e56c | out: lpFindFileData=0x31e56c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x823294e0, ftCreationTime.dwHighDateTime=0x1d5ab3f, ftLastAccessTime.dwLowDateTime=0x47e0ab40, ftLastAccessTime.dwHighDateTime=0x1d5a9a2, ftLastWriteTime.dwLowDateTime=0x47e0ab40, ftLastWriteTime.dwHighDateTime=0x1d5a9a2, nFileSizeHigh=0x0, nFileSizeLow=0x18334, dwReserved0=0x0, dwReserved1=0x0, cFileName="sylRmbaPWvbAwXpKH.pptx", cAlternateFileName="SYLRMB~1.PPT")) returned 1 [0086.020] FindNextFileW (in: hFindFile=0x381c40, lpFindFileData=0x31e56c | out: lpFindFileData=0x31e56c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa7e2aa90, ftCreationTime.dwHighDateTime=0x1d5a92d, ftLastAccessTime.dwLowDateTime=0x7c6dede0, ftLastAccessTime.dwHighDateTime=0x1d58e73, ftLastWriteTime.dwLowDateTime=0x7c6dede0, ftLastWriteTime.dwHighDateTime=0x1d58e73, nFileSizeHigh=0x0, nFileSizeLow=0x10ac8, dwReserved0=0x0, dwReserved1=0x0, cFileName="Tub7RsstsPF5bhl.docx", cAlternateFileName="TUB7RS~1.DOC")) returned 1 [0086.020] FindNextFileW (in: hFindFile=0x381c40, lpFindFileData=0x31e56c | out: lpFindFileData=0x31e56c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9a9cb2e0, ftCreationTime.dwHighDateTime=0x1d598de, ftLastAccessTime.dwLowDateTime=0x2102b670, ftLastAccessTime.dwHighDateTime=0x1d57cad, ftLastWriteTime.dwLowDateTime=0x2102b670, ftLastWriteTime.dwHighDateTime=0x1d57cad, nFileSizeHigh=0x0, nFileSizeLow=0x6c58, dwReserved0=0x0, dwReserved1=0x0, cFileName="v62Jp.xlsx", cAlternateFileName="V62JP~1.XLS")) returned 1 [0086.020] FindNextFileW (in: hFindFile=0x381c40, lpFindFileData=0x31e56c | out: lpFindFileData=0x31e56c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc35a3c70, ftCreationTime.dwHighDateTime=0x1d5b846, ftLastAccessTime.dwLowDateTime=0x130f7d20, ftLastAccessTime.dwHighDateTime=0x1d56bc1, ftLastWriteTime.dwLowDateTime=0x130f7d20, ftLastWriteTime.dwHighDateTime=0x1d56bc1, nFileSizeHigh=0x0, nFileSizeLow=0x16a86, dwReserved0=0x0, dwReserved1=0x0, cFileName="WHE1DQO_Ps0NUHD5IUA.docx", cAlternateFileName="WHE1DQ~1.DOC")) returned 1 [0086.020] FindNextFileW (in: hFindFile=0x381c40, lpFindFileData=0x31e56c | out: lpFindFileData=0x31e56c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x56543370, ftCreationTime.dwHighDateTime=0x1d5e072, ftLastAccessTime.dwLowDateTime=0x595be5f0, ftLastAccessTime.dwHighDateTime=0x1d5a71e, ftLastWriteTime.dwLowDateTime=0x595be5f0, ftLastWriteTime.dwHighDateTime=0x1d5a71e, nFileSizeHigh=0x0, nFileSizeLow=0xc832, dwReserved0=0x0, dwReserved1=0x0, cFileName="xXD95e7i 9JIiSYfn.pptx", cAlternateFileName="XXD95E~1.PPT")) returned 1 [0086.020] FindNextFileW (in: hFindFile=0x381c40, lpFindFileData=0x31e56c | out: lpFindFileData=0x31e56c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x976c9ee0, ftCreationTime.dwHighDateTime=0x1d5a4e2, ftLastAccessTime.dwLowDateTime=0x8b931c40, ftLastAccessTime.dwHighDateTime=0x1d5a4a9, ftLastWriteTime.dwLowDateTime=0x8b931c40, ftLastWriteTime.dwHighDateTime=0x1d5a4a9, nFileSizeHigh=0x0, nFileSizeLow=0x17458, dwReserved0=0x0, dwReserved1=0x0, cFileName="Ytscf.pptx", cAlternateFileName="YTSCF~1.PPT")) returned 1 [0086.021] FindNextFileW (in: hFindFile=0x381c40, lpFindFileData=0x31e56c | out: lpFindFileData=0x31e56c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x976c9ee0, ftCreationTime.dwHighDateTime=0x1d5a4e2, ftLastAccessTime.dwLowDateTime=0x8b931c40, ftLastAccessTime.dwHighDateTime=0x1d5a4a9, ftLastWriteTime.dwLowDateTime=0x8b931c40, ftLastWriteTime.dwHighDateTime=0x1d5a4a9, nFileSizeHigh=0x0, nFileSizeLow=0x17458, dwReserved0=0x0, dwReserved1=0x0, cFileName="Ytscf.pptx", cAlternateFileName="YTSCF~1.PPT")) returned 0 [0086.021] FindClose (in: hFindFile=0x381c40 | out: hFindFile=0x381c40) returned 1 [0086.021] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e7f4) returned 1 [0086.021] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e800) returned 1 [0086.021] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\-XBhFw3KRNIiI.docx", nBufferLength=0x105, lpBuffer=0x31e20c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\-XBhFw3KRNIiI.docx", lpFilePart=0x0) returned 0x3a [0086.021] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e700) returned 1 [0086.021] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\-XBhFw3KRNIiI.docx" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\-xbhfw3krniii.docx"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x178 [0086.021] GetFileType (hFile=0x178) returned 0x1 [0086.021] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e6fc) returned 1 [0086.021] GetFileType (hFile=0x178) returned 0x1 [0086.021] GetFileSize (in: hFile=0x178, lpFileSizeHigh=0x31e808 | out: lpFileSizeHigh=0x31e808*=0x0) returned 0x12cf4 [0086.021] ReadFile (in: hFile=0x178, lpBuffer=0x26fa6fc, nNumberOfBytesToRead=0x12cf4, lpNumberOfBytesRead=0x31e7b4, lpOverlapped=0x0 | out: lpBuffer=0x26fa6fc*, lpNumberOfBytesRead=0x31e7b4*=0x12cf4, lpOverlapped=0x0) returned 1 [0086.022] CloseHandle (hObject=0x178) returned 1 [0086.037] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\-XBhFw3KRNIiI.docx", nBufferLength=0x105, lpBuffer=0x31e1f8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\-XBhFw3KRNIiI.docx", lpFilePart=0x0) returned 0x3a [0086.037] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e6ec) returned 1 [0086.037] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\-XBhFw3KRNIiI.docx" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\-xbhfw3krniii.docx"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x178 [0086.039] GetFileType (hFile=0x178) returned 0x1 [0086.039] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e6e8) returned 1 [0086.039] GetFileType (hFile=0x178) returned 0x1 [0086.039] WriteFile (in: hFile=0x178, lpBuffer=0x277fbf4*, nNumberOfBytesToWrite=0x12d00, lpNumberOfBytesWritten=0x31e7a8, lpOverlapped=0x0 | out: lpBuffer=0x277fbf4*, lpNumberOfBytesWritten=0x31e7a8*=0x12d00, lpOverlapped=0x0) returned 1 [0086.041] CloseHandle (hObject=0x178) returned 1 [0086.041] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\-XBhFw3KRNIiI.docx", nBufferLength=0x105, lpBuffer=0x31e32c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\-XBhFw3KRNIiI.docx", lpFilePart=0x0) returned 0x3a [0086.041] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\-XBhFw3KRNIiI.docx", nBufferLength=0x105, lpBuffer=0x31e32c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\-XBhFw3KRNIiI.docx", lpFilePart=0x0) returned 0x3a [0086.041] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e78c) returned 1 [0086.041] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\-XBhFw3KRNIiI.docx" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\-xbhfw3krniii.docx"), fInfoLevelId=0x0, lpFileInformation=0x31e808 | out: lpFileInformation=0x31e808*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf71e7900, ftCreationTime.dwHighDateTime=0x1d58c1c, ftLastAccessTime.dwLowDateTime=0xb04f1420, ftLastAccessTime.dwHighDateTime=0x1d5a75c, ftLastWriteTime.dwLowDateTime=0x16ba62c0, ftLastWriteTime.dwHighDateTime=0x1d6eb7f, nFileSizeHigh=0x0, nFileSizeLow=0x12d00)) returned 1 [0086.041] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e788) returned 1 [0086.041] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\-XBhFw3KRNIiI.docx" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\-xbhfw3krniii.docx"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\-XBhFw3KRNIiI.docx" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\-xbhfw3krniii.docx")) returned 1 [0086.041] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\1GMPKC9.xlsx", nBufferLength=0x105, lpBuffer=0x31e20c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\1GMPKC9.xlsx", lpFilePart=0x0) returned 0x34 [0086.041] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e700) returned 1 [0086.041] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\1GMPKC9.xlsx" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\1gmpkc9.xlsx"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x178 [0086.042] GetFileType (hFile=0x178) returned 0x1 [0086.042] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e6fc) returned 1 [0086.042] GetFileType (hFile=0x178) returned 0x1 [0086.042] GetFileSize (in: hFile=0x178, lpFileSizeHigh=0x31e808 | out: lpFileSizeHigh=0x31e808*=0x0) returned 0x6c40 [0086.042] ReadFile (in: hFile=0x178, lpBuffer=0x2792c30, nNumberOfBytesToRead=0x6c40, lpNumberOfBytesRead=0x31e7b4, lpOverlapped=0x0 | out: lpBuffer=0x2792c30*, lpNumberOfBytesRead=0x31e7b4*=0x6c40, lpOverlapped=0x0) returned 1 [0086.043] CloseHandle (hObject=0x178) returned 1 [0086.058] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\1GMPKC9.xlsx", nBufferLength=0x105, lpBuffer=0x31e1f8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\1GMPKC9.xlsx", lpFilePart=0x0) returned 0x34 [0086.058] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e6ec) returned 1 [0086.058] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\1GMPKC9.xlsx" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\1gmpkc9.xlsx"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x178 [0086.059] GetFileType (hFile=0x178) returned 0x1 [0086.059] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e6e8) returned 1 [0086.059] GetFileType (hFile=0x178) returned 0x1 [0086.059] WriteFile (in: hFile=0x178, lpBuffer=0x28017a4*, nNumberOfBytesToWrite=0x6c50, lpNumberOfBytesWritten=0x31e7a8, lpOverlapped=0x0 | out: lpBuffer=0x28017a4*, lpNumberOfBytesWritten=0x31e7a8*=0x6c50, lpOverlapped=0x0) returned 1 [0086.061] CloseHandle (hObject=0x178) returned 1 [0086.061] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\1GMPKC9.xlsx", nBufferLength=0x105, lpBuffer=0x31e32c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\1GMPKC9.xlsx", lpFilePart=0x0) returned 0x34 [0086.061] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\1GMPKC9.xlsx", nBufferLength=0x105, lpBuffer=0x31e32c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\1GMPKC9.xlsx", lpFilePart=0x0) returned 0x34 [0086.061] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e78c) returned 1 [0086.061] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\1GMPKC9.xlsx" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\1gmpkc9.xlsx"), fInfoLevelId=0x0, lpFileInformation=0x31e808 | out: lpFileInformation=0x31e808*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2ee4a250, ftCreationTime.dwHighDateTime=0x1d56bc6, ftLastAccessTime.dwLowDateTime=0x2f784590, ftLastAccessTime.dwHighDateTime=0x1d5858a, ftLastWriteTime.dwLowDateTime=0x16bcc420, ftLastWriteTime.dwHighDateTime=0x1d6eb7f, nFileSizeHigh=0x0, nFileSizeLow=0x6c50)) returned 1 [0086.061] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e788) returned 1 [0086.061] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\1GMPKC9.xlsx" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\1gmpkc9.xlsx"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\1GMPKC9.xlsx" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\1gmpkc9.xlsx")) returned 1 [0086.061] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\3g 7kD u8yPvSBKq.pptx", nBufferLength=0x105, lpBuffer=0x31e20c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\3g 7kD u8yPvSBKq.pptx", lpFilePart=0x0) returned 0x3d [0086.061] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e700) returned 1 [0086.061] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\3g 7kD u8yPvSBKq.pptx" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\3g 7kd u8ypvsbkq.pptx"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x178 [0086.061] GetFileType (hFile=0x178) returned 0x1 [0086.061] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e6fc) returned 1 [0086.062] GetFileType (hFile=0x178) returned 0x1 [0086.062] GetFileSize (in: hFile=0x178, lpFileSizeHigh=0x31e808 | out: lpFileSizeHigh=0x31e808*=0x0) returned 0x10a4d [0086.062] ReadFile (in: hFile=0x178, lpBuffer=0x2808720, nNumberOfBytesToRead=0x10a4d, lpNumberOfBytesRead=0x31e7b4, lpOverlapped=0x0 | out: lpBuffer=0x2808720*, lpNumberOfBytesRead=0x31e7b4*=0x10a4d, lpOverlapped=0x0) returned 1 [0086.063] CloseHandle (hObject=0x178) returned 1 [0086.108] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\3g 7kD u8yPvSBKq.pptx", nBufferLength=0x105, lpBuffer=0x31e1f8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\3g 7kD u8yPvSBKq.pptx", lpFilePart=0x0) returned 0x3d [0086.108] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e6ec) returned 1 [0086.108] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\3g 7kD u8yPvSBKq.pptx" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\3g 7kd u8ypvsbkq.pptx"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x178 [0086.109] GetFileType (hFile=0x178) returned 0x1 [0086.109] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e6e8) returned 1 [0086.109] GetFileType (hFile=0x178) returned 0x1 [0086.109] WriteFile (in: hFile=0x178, lpBuffer=0x26aa2a8*, nNumberOfBytesToWrite=0x10a50, lpNumberOfBytesWritten=0x31e7a8, lpOverlapped=0x0 | out: lpBuffer=0x26aa2a8*, lpNumberOfBytesWritten=0x31e7a8*=0x10a50, lpOverlapped=0x0) returned 1 [0086.111] CloseHandle (hObject=0x178) returned 1 [0086.111] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\3g 7kD u8yPvSBKq.pptx", nBufferLength=0x105, lpBuffer=0x31e32c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\3g 7kD u8yPvSBKq.pptx", lpFilePart=0x0) returned 0x3d [0086.111] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\3g 7kD u8yPvSBKq.pptx", nBufferLength=0x105, lpBuffer=0x31e32c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\3g 7kD u8yPvSBKq.pptx", lpFilePart=0x0) returned 0x3d [0086.111] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e78c) returned 1 [0086.111] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\3g 7kD u8yPvSBKq.pptx" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\3g 7kd u8ypvsbkq.pptx"), fInfoLevelId=0x0, lpFileInformation=0x31e808 | out: lpFileInformation=0x31e808*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc7c34310, ftCreationTime.dwHighDateTime=0x1d5dcbd, ftLastAccessTime.dwLowDateTime=0xe8a5f080, ftLastAccessTime.dwHighDateTime=0x1d5d47c, ftLastWriteTime.dwLowDateTime=0x16c3e840, ftLastWriteTime.dwHighDateTime=0x1d6eb7f, nFileSizeHigh=0x0, nFileSizeLow=0x10a50)) returned 1 [0086.111] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e788) returned 1 [0086.111] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\3g 7kD u8yPvSBKq.pptx" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\3g 7kd u8ypvsbkq.pptx"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\3g 7kD u8yPvSBKq.pptx" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\3g 7kd u8ypvsbkq.pptx")) returned 1 [0086.112] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\3YAya5eDcy-F-cb-1Rdx.docx", nBufferLength=0x105, lpBuffer=0x31e20c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\3YAya5eDcy-F-cb-1Rdx.docx", lpFilePart=0x0) returned 0x41 [0086.112] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e700) returned 1 [0086.112] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\3YAya5eDcy-F-cb-1Rdx.docx" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\3yaya5edcy-f-cb-1rdx.docx"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x178 [0086.112] GetFileType (hFile=0x178) returned 0x1 [0086.112] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e6fc) returned 1 [0086.112] GetFileType (hFile=0x178) returned 0x1 [0086.112] GetFileSize (in: hFile=0x178, lpFileSizeHigh=0x31e808 | out: lpFileSizeHigh=0x31e808*=0x0) returned 0xcee [0086.112] ReadFile (in: hFile=0x178, lpBuffer=0x26bbd70, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x31e7b4, lpOverlapped=0x0 | out: lpBuffer=0x26bbd70*, lpNumberOfBytesRead=0x31e7b4*=0xcee, lpOverlapped=0x0) returned 1 [0086.113] CloseHandle (hObject=0x178) returned 1 [0086.127] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\3YAya5eDcy-F-cb-1Rdx.docx", nBufferLength=0x105, lpBuffer=0x31e1f8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\3YAya5eDcy-F-cb-1Rdx.docx", lpFilePart=0x0) returned 0x41 [0086.127] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e6ec) returned 1 [0086.127] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\3YAya5eDcy-F-cb-1Rdx.docx" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\3yaya5edcy-f-cb-1rdx.docx"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x178 [0086.127] GetFileType (hFile=0x178) returned 0x1 [0086.128] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e6e8) returned 1 [0086.128] GetFileType (hFile=0x178) returned 0x1 [0086.128] WriteFile (in: hFile=0x178, lpBuffer=0x270de9c*, nNumberOfBytesToWrite=0xcf0, lpNumberOfBytesWritten=0x31e77c, lpOverlapped=0x0 | out: lpBuffer=0x270de9c*, lpNumberOfBytesWritten=0x31e77c*=0xcf0, lpOverlapped=0x0) returned 1 [0086.128] CloseHandle (hObject=0x178) returned 1 [0086.129] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\3YAya5eDcy-F-cb-1Rdx.docx", nBufferLength=0x105, lpBuffer=0x31e32c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\3YAya5eDcy-F-cb-1Rdx.docx", lpFilePart=0x0) returned 0x41 [0086.129] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\3YAya5eDcy-F-cb-1Rdx.docx", nBufferLength=0x105, lpBuffer=0x31e32c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\3YAya5eDcy-F-cb-1Rdx.docx", lpFilePart=0x0) returned 0x41 [0086.129] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e78c) returned 1 [0086.129] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\3YAya5eDcy-F-cb-1Rdx.docx" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\3yaya5edcy-f-cb-1rdx.docx"), fInfoLevelId=0x0, lpFileInformation=0x31e808 | out: lpFileInformation=0x31e808*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4087d9d0, ftCreationTime.dwHighDateTime=0x1d5b943, ftLastAccessTime.dwLowDateTime=0x3e122b20, ftLastAccessTime.dwHighDateTime=0x1d5a709, ftLastWriteTime.dwLowDateTime=0x16c8ab00, ftLastWriteTime.dwHighDateTime=0x1d6eb7f, nFileSizeHigh=0x0, nFileSizeLow=0xcf0)) returned 1 [0086.129] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e788) returned 1 [0086.129] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\3YAya5eDcy-F-cb-1Rdx.docx" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\3yaya5edcy-f-cb-1rdx.docx"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\3YAya5eDcy-F-cb-1Rdx.docx" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\3yaya5edcy-f-cb-1rdx.docx")) returned 1 [0086.129] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\AP4ujLNzybJF J.rtf", nBufferLength=0x105, lpBuffer=0x31e20c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\AP4ujLNzybJF J.rtf", lpFilePart=0x0) returned 0x3a [0086.129] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e700) returned 1 [0086.129] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\AP4ujLNzybJF J.rtf" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\ap4ujlnzybjf j.rtf"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x178 [0086.129] GetFileType (hFile=0x178) returned 0x1 [0086.130] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e6fc) returned 1 [0086.130] GetFileType (hFile=0x178) returned 0x1 [0086.130] GetFileSize (in: hFile=0x178, lpFileSizeHigh=0x31e808 | out: lpFileSizeHigh=0x31e808*=0x0) returned 0x17352 [0086.130] ReadFile (in: hFile=0x178, lpBuffer=0x36c1a30, nNumberOfBytesToRead=0x17352, lpNumberOfBytesRead=0x31e7b4, lpOverlapped=0x0 | out: lpBuffer=0x36c1a30*, lpNumberOfBytesRead=0x31e7b4*=0x17352, lpOverlapped=0x0) returned 1 [0086.131] CloseHandle (hObject=0x178) returned 1 [0086.161] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\AP4ujLNzybJF J.rtf", nBufferLength=0x105, lpBuffer=0x31e1f8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\AP4ujLNzybJF J.rtf", lpFilePart=0x0) returned 0x3a [0086.161] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e6ec) returned 1 [0086.162] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\AP4ujLNzybJF J.rtf" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\ap4ujlnzybjf j.rtf"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x178 [0086.163] GetFileType (hFile=0x178) returned 0x1 [0086.163] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e6e8) returned 1 [0086.163] GetFileType (hFile=0x178) returned 0x1 [0086.163] WriteFile (in: hFile=0x178, lpBuffer=0x3735b40*, nNumberOfBytesToWrite=0x17360, lpNumberOfBytesWritten=0x31e7a8, lpOverlapped=0x0 | out: lpBuffer=0x3735b40*, lpNumberOfBytesWritten=0x31e7a8*=0x17360, lpOverlapped=0x0) returned 1 [0086.165] CloseHandle (hObject=0x178) returned 1 [0086.167] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\AP4ujLNzybJF J.rtf", nBufferLength=0x105, lpBuffer=0x31e32c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\AP4ujLNzybJF J.rtf", lpFilePart=0x0) returned 0x3a [0086.167] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\AP4ujLNzybJF J.rtf", nBufferLength=0x105, lpBuffer=0x31e32c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\AP4ujLNzybJF J.rtf", lpFilePart=0x0) returned 0x3a [0086.167] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e78c) returned 1 [0086.167] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\AP4ujLNzybJF J.rtf" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\ap4ujlnzybjf j.rtf"), fInfoLevelId=0x0, lpFileInformation=0x31e808 | out: lpFileInformation=0x31e808*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1c7b7dd0, ftCreationTime.dwHighDateTime=0x1d5e10c, ftLastAccessTime.dwLowDateTime=0x600694f0, ftLastAccessTime.dwHighDateTime=0x1d5e02a, ftLastWriteTime.dwLowDateTime=0x16cd6dc0, ftLastWriteTime.dwHighDateTime=0x1d6eb7f, nFileSizeHigh=0x0, nFileSizeLow=0x17360)) returned 1 [0086.167] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e788) returned 1 [0086.168] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\AP4ujLNzybJF J.rtf" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\ap4ujlnzybjf j.rtf"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\AP4ujLNzybJF J.rtf" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\ap4ujlnzybjf j.rtf")) returned 1 [0086.168] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\ewcSZPE2Uke_ysh8Kk.xlsx", nBufferLength=0x105, lpBuffer=0x31e20c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\ewcSZPE2Uke_ysh8Kk.xlsx", lpFilePart=0x0) returned 0x3f [0086.168] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e700) returned 1 [0086.168] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\ewcSZPE2Uke_ysh8Kk.xlsx" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\ewcszpe2uke_ysh8kk.xlsx"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x178 [0086.168] GetFileType (hFile=0x178) returned 0x1 [0086.168] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e6fc) returned 1 [0086.168] GetFileType (hFile=0x178) returned 0x1 [0086.168] GetFileSize (in: hFile=0x178, lpFileSizeHigh=0x31e808 | out: lpFileSizeHigh=0x31e808*=0x0) returned 0x11a63 [0086.168] ReadFile (in: hFile=0x178, lpBuffer=0x275c268, nNumberOfBytesToRead=0x11a63, lpNumberOfBytesRead=0x31e7b4, lpOverlapped=0x0 | out: lpBuffer=0x275c268*, lpNumberOfBytesRead=0x31e7b4*=0x11a63, lpOverlapped=0x0) returned 1 [0086.185] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\ewcSZPE2Uke_ysh8Kk.xlsx", nBufferLength=0x105, lpBuffer=0x31e1f8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\ewcSZPE2Uke_ysh8Kk.xlsx", lpFilePart=0x0) returned 0x3f [0086.185] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e6ec) returned 1 [0086.185] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\ewcSZPE2Uke_ysh8Kk.xlsx" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\ewcszpe2uke_ysh8kk.xlsx"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x178 [0086.186] GetFileType (hFile=0x178) returned 0x1 [0086.186] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e6e8) returned 1 [0086.186] GetFileType (hFile=0x178) returned 0x1 [0086.186] WriteFile (in: hFile=0x178, lpBuffer=0x27ddfb4*, nNumberOfBytesToWrite=0x11a70, lpNumberOfBytesWritten=0x31e7a8, lpOverlapped=0x0 | out: lpBuffer=0x27ddfb4*, lpNumberOfBytesWritten=0x31e7a8*=0x11a70, lpOverlapped=0x0) returned 1 [0086.188] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\ewcSZPE2Uke_ysh8Kk.xlsx", nBufferLength=0x105, lpBuffer=0x31e32c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\ewcSZPE2Uke_ysh8Kk.xlsx", lpFilePart=0x0) returned 0x3f [0086.188] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\ewcSZPE2Uke_ysh8Kk.xlsx", nBufferLength=0x105, lpBuffer=0x31e32c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\ewcSZPE2Uke_ysh8Kk.xlsx", lpFilePart=0x0) returned 0x3f [0086.188] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e78c) returned 1 [0086.188] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\ewcSZPE2Uke_ysh8Kk.xlsx" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\ewcszpe2uke_ysh8kk.xlsx"), fInfoLevelId=0x0, lpFileInformation=0x31e808 | out: lpFileInformation=0x31e808*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xadcb0e10, ftCreationTime.dwHighDateTime=0x1d57deb, ftLastAccessTime.dwLowDateTime=0xac3d5360, ftLastAccessTime.dwHighDateTime=0x1d58173, ftLastWriteTime.dwLowDateTime=0x16cfcf20, ftLastWriteTime.dwHighDateTime=0x1d6eb7f, nFileSizeHigh=0x0, nFileSizeLow=0x11a70)) returned 1 [0086.188] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e788) returned 1 [0086.188] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\ewcSZPE2Uke_ysh8Kk.xlsx" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\ewcszpe2uke_ysh8kk.xlsx"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\ewcSZPE2Uke_ysh8Kk.xlsx" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\ewcszpe2uke_ysh8kk.xlsx")) returned 1 [0086.189] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\F3qq-TdX0v1.xlsx", nBufferLength=0x105, lpBuffer=0x31e20c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\F3qq-TdX0v1.xlsx", lpFilePart=0x0) returned 0x38 [0086.189] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e700) returned 1 [0086.189] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\F3qq-TdX0v1.xlsx" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\f3qq-tdx0v1.xlsx"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x178 [0086.189] GetFileType (hFile=0x178) returned 0x1 [0086.189] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e6fc) returned 1 [0086.189] GetFileType (hFile=0x178) returned 0x1 [0086.189] GetFileSize (in: hFile=0x178, lpFileSizeHigh=0x31e808 | out: lpFileSizeHigh=0x31e808*=0x0) returned 0x13d9d [0086.189] ReadFile (in: hFile=0x178, lpBuffer=0x27efd90, nNumberOfBytesToRead=0x13d9d, lpNumberOfBytesRead=0x31e7b4, lpOverlapped=0x0 | out: lpBuffer=0x27efd90*, lpNumberOfBytesRead=0x31e7b4*=0x13d9d, lpOverlapped=0x0) returned 1 [0086.205] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\F3qq-TdX0v1.xlsx", nBufferLength=0x105, lpBuffer=0x31e1f8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\F3qq-TdX0v1.xlsx", lpFilePart=0x0) returned 0x38 [0086.205] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e6ec) returned 1 [0086.205] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\F3qq-TdX0v1.xlsx" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\f3qq-tdx0v1.xlsx"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x178 [0086.207] GetFileType (hFile=0x178) returned 0x1 [0086.207] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e6e8) returned 1 [0086.207] GetFileType (hFile=0x178) returned 0x1 [0086.207] WriteFile (in: hFile=0x178, lpBuffer=0x287846c*, nNumberOfBytesToWrite=0x13da0, lpNumberOfBytesWritten=0x31e7a8, lpOverlapped=0x0 | out: lpBuffer=0x287846c*, lpNumberOfBytesWritten=0x31e7a8*=0x13da0, lpOverlapped=0x0) returned 1 [0086.209] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\F3qq-TdX0v1.xlsx", nBufferLength=0x105, lpBuffer=0x31e32c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\F3qq-TdX0v1.xlsx", lpFilePart=0x0) returned 0x38 [0086.209] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\F3qq-TdX0v1.xlsx", nBufferLength=0x105, lpBuffer=0x31e32c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\F3qq-TdX0v1.xlsx", lpFilePart=0x0) returned 0x38 [0086.209] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e78c) returned 1 [0086.209] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\F3qq-TdX0v1.xlsx" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\f3qq-tdx0v1.xlsx"), fInfoLevelId=0x0, lpFileInformation=0x31e808 | out: lpFileInformation=0x31e808*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xce106420, ftCreationTime.dwHighDateTime=0x1d57528, ftLastAccessTime.dwLowDateTime=0x8112dd20, ftLastAccessTime.dwHighDateTime=0x1d5957f, ftLastWriteTime.dwLowDateTime=0x16d491e0, ftLastWriteTime.dwHighDateTime=0x1d6eb7f, nFileSizeHigh=0x0, nFileSizeLow=0x13da0)) returned 1 [0086.209] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e788) returned 1 [0086.209] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\F3qq-TdX0v1.xlsx" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\f3qq-tdx0v1.xlsx"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\F3qq-TdX0v1.xlsx" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\f3qq-tdx0v1.xlsx")) returned 1 [0086.209] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\HiHn1FTQ027Hcj vP6d8.docx", nBufferLength=0x105, lpBuffer=0x31e20c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\HiHn1FTQ027Hcj vP6d8.docx", lpFilePart=0x0) returned 0x41 [0086.210] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e700) returned 1 [0086.210] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\HiHn1FTQ027Hcj vP6d8.docx" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\hihn1ftq027hcj vp6d8.docx"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x178 [0086.210] GetFileType (hFile=0x178) returned 0x1 [0086.210] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e6fc) returned 1 [0086.210] GetFileType (hFile=0x178) returned 0x1 [0086.210] GetFileSize (in: hFile=0x178, lpFileSizeHigh=0x31e808 | out: lpFileSizeHigh=0x31e808*=0x0) returned 0x12288 [0086.210] ReadFile (in: hFile=0x178, lpBuffer=0x288c568, nNumberOfBytesToRead=0x12288, lpNumberOfBytesRead=0x31e7b4, lpOverlapped=0x0 | out: lpBuffer=0x288c568*, lpNumberOfBytesRead=0x31e7b4*=0x12288, lpOverlapped=0x0) returned 1 [0086.226] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\HiHn1FTQ027Hcj vP6d8.docx", nBufferLength=0x105, lpBuffer=0x31e1f8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\HiHn1FTQ027Hcj vP6d8.docx", lpFilePart=0x0) returned 0x41 [0086.226] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e6ec) returned 1 [0086.226] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\HiHn1FTQ027Hcj vP6d8.docx" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\hihn1ftq027hcj vp6d8.docx"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x178 [0086.227] GetFileType (hFile=0x178) returned 0x1 [0086.227] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e6e8) returned 1 [0086.227] GetFileType (hFile=0x178) returned 0x1 [0086.227] WriteFile (in: hFile=0x178, lpBuffer=0x290fb10*, nNumberOfBytesToWrite=0x12290, lpNumberOfBytesWritten=0x31e7a8, lpOverlapped=0x0 | out: lpBuffer=0x290fb10*, lpNumberOfBytesWritten=0x31e7a8*=0x12290, lpOverlapped=0x0) returned 1 [0086.229] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\HiHn1FTQ027Hcj vP6d8.docx", nBufferLength=0x105, lpBuffer=0x31e32c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\HiHn1FTQ027Hcj vP6d8.docx", lpFilePart=0x0) returned 0x41 [0086.229] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\HiHn1FTQ027Hcj vP6d8.docx", nBufferLength=0x105, lpBuffer=0x31e32c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\HiHn1FTQ027Hcj vP6d8.docx", lpFilePart=0x0) returned 0x41 [0086.229] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e78c) returned 1 [0086.229] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\HiHn1FTQ027Hcj vP6d8.docx" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\hihn1ftq027hcj vp6d8.docx"), fInfoLevelId=0x0, lpFileInformation=0x31e808 | out: lpFileInformation=0x31e808*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa01f22e0, ftCreationTime.dwHighDateTime=0x1d5a566, ftLastAccessTime.dwLowDateTime=0x9870b660, ftLastAccessTime.dwHighDateTime=0x1d5c3b8, ftLastWriteTime.dwLowDateTime=0x16d6f340, ftLastWriteTime.dwHighDateTime=0x1d6eb7f, nFileSizeHigh=0x0, nFileSizeLow=0x12290)) returned 1 [0086.229] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e788) returned 1 [0086.229] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\HiHn1FTQ027Hcj vP6d8.docx" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\hihn1ftq027hcj vp6d8.docx"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\HiHn1FTQ027Hcj vP6d8.docx" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\hihn1ftq027hcj vp6d8.docx")) returned 1 [0086.230] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\HS_jtO INeCAdLtO.xlsx", nBufferLength=0x105, lpBuffer=0x31e20c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\HS_jtO INeCAdLtO.xlsx", lpFilePart=0x0) returned 0x3d [0086.230] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e700) returned 1 [0086.230] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\HS_jtO INeCAdLtO.xlsx" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\hs_jto inecadlto.xlsx"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x178 [0086.230] GetFileType (hFile=0x178) returned 0x1 [0086.230] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e6fc) returned 1 [0086.230] GetFileType (hFile=0x178) returned 0x1 [0086.230] GetFileSize (in: hFile=0x178, lpFileSizeHigh=0x31e808 | out: lpFileSizeHigh=0x31e808*=0x0) returned 0xfab8 [0086.248] ReadFile (in: hFile=0x178, lpBuffer=0x2658b60, nNumberOfBytesToRead=0xfab8, lpNumberOfBytesRead=0x31e7b4, lpOverlapped=0x0 | out: lpBuffer=0x2658b60*, lpNumberOfBytesRead=0x31e7b4*=0xfab8, lpOverlapped=0x0) returned 1 [0086.298] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\HS_jtO INeCAdLtO.xlsx", nBufferLength=0x105, lpBuffer=0x31e1f8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\HS_jtO INeCAdLtO.xlsx", lpFilePart=0x0) returned 0x3d [0086.298] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e6ec) returned 1 [0086.298] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\HS_jtO INeCAdLtO.xlsx" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\hs_jto inecadlto.xlsx"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x178 [0086.301] GetFileType (hFile=0x178) returned 0x1 [0086.301] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e6e8) returned 1 [0086.301] GetFileType (hFile=0x178) returned 0x1 [0086.301] WriteFile (in: hFile=0x178, lpBuffer=0x26d4af4*, nNumberOfBytesToWrite=0xfac0, lpNumberOfBytesWritten=0x31e7a8, lpOverlapped=0x0 | out: lpBuffer=0x26d4af4*, lpNumberOfBytesWritten=0x31e7a8*=0xfac0, lpOverlapped=0x0) returned 1 [0086.303] CloseHandle (hObject=0x178) returned 1 [0086.303] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\HS_jtO INeCAdLtO.xlsx", nBufferLength=0x105, lpBuffer=0x31e32c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\HS_jtO INeCAdLtO.xlsx", lpFilePart=0x0) returned 0x3d [0086.303] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\HS_jtO INeCAdLtO.xlsx", nBufferLength=0x105, lpBuffer=0x31e32c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\HS_jtO INeCAdLtO.xlsx", lpFilePart=0x0) returned 0x3d [0086.303] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e78c) returned 1 [0086.303] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\HS_jtO INeCAdLtO.xlsx" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\hs_jto inecadlto.xlsx"), fInfoLevelId=0x0, lpFileInformation=0x31e808 | out: lpFileInformation=0x31e808*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x93d8c1a0, ftCreationTime.dwHighDateTime=0x1d57ad0, ftLastAccessTime.dwLowDateTime=0xc10fed20, ftLastAccessTime.dwHighDateTime=0x1d5dfec, ftLastWriteTime.dwLowDateTime=0x16e2da20, ftLastWriteTime.dwHighDateTime=0x1d6eb7f, nFileSizeHigh=0x0, nFileSizeLow=0xfac0)) returned 1 [0086.303] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e788) returned 1 [0086.303] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\HS_jtO INeCAdLtO.xlsx" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\hs_jto inecadlto.xlsx"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\HS_jtO INeCAdLtO.xlsx" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\hs_jto inecadlto.xlsx")) returned 1 [0086.304] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\MVUshvijtjHU.pptx", nBufferLength=0x105, lpBuffer=0x31e20c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\MVUshvijtjHU.pptx", lpFilePart=0x0) returned 0x39 [0086.304] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e700) returned 1 [0086.304] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\MVUshvijtjHU.pptx" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\mvushvijtjhu.pptx"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x178 [0086.304] GetFileType (hFile=0x178) returned 0x1 [0086.304] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e6fc) returned 1 [0086.304] GetFileType (hFile=0x178) returned 0x1 [0086.304] GetFileSize (in: hFile=0x178, lpFileSizeHigh=0x31e808 | out: lpFileSizeHigh=0x31e808*=0x0) returned 0x617a [0086.304] ReadFile (in: hFile=0x178, lpBuffer=0x26e4910, nNumberOfBytesToRead=0x617a, lpNumberOfBytesRead=0x31e7b4, lpOverlapped=0x0 | out: lpBuffer=0x26e4910*, lpNumberOfBytesRead=0x31e7b4*=0x617a, lpOverlapped=0x0) returned 1 [0086.305] CloseHandle (hObject=0x178) returned 1 [0086.319] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\MVUshvijtjHU.pptx", nBufferLength=0x105, lpBuffer=0x31e1f8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\MVUshvijtjHU.pptx", lpFilePart=0x0) returned 0x39 [0086.319] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e6ec) returned 1 [0086.319] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\MVUshvijtjHU.pptx" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\mvushvijtjhu.pptx"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x178 [0086.320] GetFileType (hFile=0x178) returned 0x1 [0086.320] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e6e8) returned 1 [0086.320] GetFileType (hFile=0x178) returned 0x1 [0086.320] WriteFile (in: hFile=0x178, lpBuffer=0x274fe78*, nNumberOfBytesToWrite=0x6180, lpNumberOfBytesWritten=0x31e7a8, lpOverlapped=0x0 | out: lpBuffer=0x274fe78*, lpNumberOfBytesWritten=0x31e7a8*=0x6180, lpOverlapped=0x0) returned 1 [0086.321] CloseHandle (hObject=0x178) returned 1 [0086.321] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\MVUshvijtjHU.pptx", nBufferLength=0x105, lpBuffer=0x31e32c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\MVUshvijtjHU.pptx", lpFilePart=0x0) returned 0x39 [0086.321] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\MVUshvijtjHU.pptx", nBufferLength=0x105, lpBuffer=0x31e32c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\MVUshvijtjHU.pptx", lpFilePart=0x0) returned 0x39 [0086.321] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e78c) returned 1 [0086.321] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\MVUshvijtjHU.pptx" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\mvushvijtjhu.pptx"), fInfoLevelId=0x0, lpFileInformation=0x31e808 | out: lpFileInformation=0x31e808*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x315c4630, ftCreationTime.dwHighDateTime=0x1d58379, ftLastAccessTime.dwLowDateTime=0xea423510, ftLastAccessTime.dwHighDateTime=0x1d5b182, ftLastWriteTime.dwLowDateTime=0x16e53b80, ftLastWriteTime.dwHighDateTime=0x1d6eb7f, nFileSizeHigh=0x0, nFileSizeLow=0x6180)) returned 1 [0086.321] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e788) returned 1 [0086.321] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\MVUshvijtjHU.pptx" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\mvushvijtjhu.pptx"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\MVUshvijtjHU.pptx" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\mvushvijtjhu.pptx")) returned 1 [0086.322] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\phtzJp3.doc", nBufferLength=0x105, lpBuffer=0x31e20c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\phtzJp3.doc", lpFilePart=0x0) returned 0x33 [0086.322] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e700) returned 1 [0086.322] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\phtzJp3.doc" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\phtzjp3.doc"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x178 [0086.322] GetFileType (hFile=0x178) returned 0x1 [0086.322] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e6fc) returned 1 [0086.322] GetFileType (hFile=0x178) returned 0x1 [0086.322] GetFileSize (in: hFile=0x178, lpFileSizeHigh=0x31e808 | out: lpFileSizeHigh=0x31e808*=0x0) returned 0x18623 [0086.322] ReadFile (in: hFile=0x178, lpBuffer=0x37db980, nNumberOfBytesToRead=0x18623, lpNumberOfBytesRead=0x31e7b4, lpOverlapped=0x0 | out: lpBuffer=0x37db980*, lpNumberOfBytesRead=0x31e7b4*=0x18623, lpOverlapped=0x0) returned 1 [0086.324] CloseHandle (hObject=0x178) returned 1 [0086.339] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\phtzJp3.doc", nBufferLength=0x105, lpBuffer=0x31e1f8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\phtzJp3.doc", lpFilePart=0x0) returned 0x33 [0086.339] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e6ec) returned 1 [0086.339] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\phtzJp3.doc" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\phtzjp3.doc"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x178 [0086.341] GetFileType (hFile=0x178) returned 0x1 [0086.341] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e6e8) returned 1 [0086.341] GetFileType (hFile=0x178) returned 0x1 [0086.341] WriteFile (in: hFile=0x178, lpBuffer=0x38558a0*, nNumberOfBytesToWrite=0x18630, lpNumberOfBytesWritten=0x31e7a8, lpOverlapped=0x0 | out: lpBuffer=0x38558a0*, lpNumberOfBytesWritten=0x31e7a8*=0x18630, lpOverlapped=0x0) returned 1 [0086.343] CloseHandle (hObject=0x178) returned 1 [0086.343] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\phtzJp3.doc", nBufferLength=0x105, lpBuffer=0x31e32c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\phtzJp3.doc", lpFilePart=0x0) returned 0x33 [0086.343] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\phtzJp3.doc", nBufferLength=0x105, lpBuffer=0x31e32c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\phtzJp3.doc", lpFilePart=0x0) returned 0x33 [0086.343] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e78c) returned 1 [0086.343] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\phtzJp3.doc" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\phtzjp3.doc"), fInfoLevelId=0x0, lpFileInformation=0x31e808 | out: lpFileInformation=0x31e808*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x19f75280, ftCreationTime.dwHighDateTime=0x1d5de70, ftLastAccessTime.dwLowDateTime=0xb2fafc50, ftLastAccessTime.dwHighDateTime=0x1d5d9c7, ftLastWriteTime.dwLowDateTime=0x16e79ce0, ftLastWriteTime.dwHighDateTime=0x1d6eb7f, nFileSizeHigh=0x0, nFileSizeLow=0x18630)) returned 1 [0086.343] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e788) returned 1 [0086.343] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\phtzJp3.doc" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\phtzjp3.doc"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\phtzJp3.doc" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\phtzjp3.doc")) returned 1 [0086.344] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\ShYapy659.docx", nBufferLength=0x105, lpBuffer=0x31e20c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\ShYapy659.docx", lpFilePart=0x0) returned 0x36 [0086.344] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e700) returned 1 [0086.344] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\ShYapy659.docx" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\shyapy659.docx"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x178 [0086.344] GetFileType (hFile=0x178) returned 0x1 [0086.344] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e6fc) returned 1 [0086.344] GetFileType (hFile=0x178) returned 0x1 [0086.344] GetFileSize (in: hFile=0x178, lpFileSizeHigh=0x31e808 | out: lpFileSizeHigh=0x31e808*=0x0) returned 0x149a [0086.344] ReadFile (in: hFile=0x178, lpBuffer=0x27a3418, nNumberOfBytesToRead=0x149a, lpNumberOfBytesRead=0x31e7b4, lpOverlapped=0x0 | out: lpBuffer=0x27a3418*, lpNumberOfBytesRead=0x31e7b4*=0x149a, lpOverlapped=0x0) returned 1 [0086.345] CloseHandle (hObject=0x178) returned 1 [0086.360] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\ShYapy659.docx", nBufferLength=0x105, lpBuffer=0x31e1f8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\ShYapy659.docx", lpFilePart=0x0) returned 0x36 [0086.360] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e6ec) returned 1 [0086.360] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\ShYapy659.docx" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\shyapy659.docx"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x178 [0086.361] GetFileType (hFile=0x178) returned 0x1 [0086.361] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e6e8) returned 1 [0086.361] GetFileType (hFile=0x178) returned 0x1 [0086.361] WriteFile (in: hFile=0x178, lpBuffer=0x27f6920*, nNumberOfBytesToWrite=0x14a0, lpNumberOfBytesWritten=0x31e7a8, lpOverlapped=0x0 | out: lpBuffer=0x27f6920*, lpNumberOfBytesWritten=0x31e7a8*=0x14a0, lpOverlapped=0x0) returned 1 [0086.362] CloseHandle (hObject=0x178) returned 1 [0086.362] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\ShYapy659.docx", nBufferLength=0x105, lpBuffer=0x31e32c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\ShYapy659.docx", lpFilePart=0x0) returned 0x36 [0086.363] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\ShYapy659.docx", nBufferLength=0x105, lpBuffer=0x31e32c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\ShYapy659.docx", lpFilePart=0x0) returned 0x36 [0086.363] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e78c) returned 1 [0086.363] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\ShYapy659.docx" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\shyapy659.docx"), fInfoLevelId=0x0, lpFileInformation=0x31e808 | out: lpFileInformation=0x31e808*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe26eac60, ftCreationTime.dwHighDateTime=0x1d5ded2, ftLastAccessTime.dwLowDateTime=0xe92a6430, ftLastAccessTime.dwHighDateTime=0x1d5d8d9, ftLastWriteTime.dwLowDateTime=0x16ec5fa0, ftLastWriteTime.dwHighDateTime=0x1d6eb7f, nFileSizeHigh=0x0, nFileSizeLow=0x14a0)) returned 1 [0086.363] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e788) returned 1 [0086.363] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\ShYapy659.docx" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\shyapy659.docx"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\ShYapy659.docx" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\shyapy659.docx")) returned 1 [0086.363] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\sylRmbaPWvbAwXpKH.pptx", nBufferLength=0x105, lpBuffer=0x31e20c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\sylRmbaPWvbAwXpKH.pptx", lpFilePart=0x0) returned 0x3e [0086.363] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e700) returned 1 [0086.363] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\sylRmbaPWvbAwXpKH.pptx" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\sylrmbapwvbawxpkh.pptx"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x178 [0086.363] GetFileType (hFile=0x178) returned 0x1 [0086.363] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e6fc) returned 1 [0086.363] GetFileType (hFile=0x178) returned 0x1 [0086.363] GetFileSize (in: hFile=0x178, lpFileSizeHigh=0x31e808 | out: lpFileSizeHigh=0x31e808*=0x0) returned 0x18334 [0086.364] ReadFile (in: hFile=0x178, lpBuffer=0x386def0, nNumberOfBytesToRead=0x18334, lpNumberOfBytesRead=0x31e7b4, lpOverlapped=0x0 | out: lpBuffer=0x386def0*, lpNumberOfBytesRead=0x31e7b4*=0x18334, lpOverlapped=0x0) returned 1 [0086.365] CloseHandle (hObject=0x178) returned 1 [0086.381] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\sylRmbaPWvbAwXpKH.pptx", nBufferLength=0x105, lpBuffer=0x31e1f8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\sylRmbaPWvbAwXpKH.pptx", lpFilePart=0x0) returned 0x3e [0086.381] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e6ec) returned 1 [0086.381] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\sylRmbaPWvbAwXpKH.pptx" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\sylrmbapwvbawxpkh.pptx"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x178 [0086.382] GetFileType (hFile=0x178) returned 0x1 [0086.382] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e6e8) returned 1 [0086.382] GetFileType (hFile=0x178) returned 0x1 [0086.382] WriteFile (in: hFile=0x178, lpBuffer=0x38e6f60*, nNumberOfBytesToWrite=0x18340, lpNumberOfBytesWritten=0x31e7a8, lpOverlapped=0x0 | out: lpBuffer=0x38e6f60*, lpNumberOfBytesWritten=0x31e7a8*=0x18340, lpOverlapped=0x0) returned 1 [0086.384] CloseHandle (hObject=0x178) returned 1 [0086.384] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\sylRmbaPWvbAwXpKH.pptx", nBufferLength=0x105, lpBuffer=0x31e32c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\sylRmbaPWvbAwXpKH.pptx", lpFilePart=0x0) returned 0x3e [0086.385] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\sylRmbaPWvbAwXpKH.pptx", nBufferLength=0x105, lpBuffer=0x31e32c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\sylRmbaPWvbAwXpKH.pptx", lpFilePart=0x0) returned 0x3e [0086.385] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e78c) returned 1 [0086.385] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\sylRmbaPWvbAwXpKH.pptx" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\sylrmbapwvbawxpkh.pptx"), fInfoLevelId=0x0, lpFileInformation=0x31e808 | out: lpFileInformation=0x31e808*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x823294e0, ftCreationTime.dwHighDateTime=0x1d5ab3f, ftLastAccessTime.dwLowDateTime=0x47e0ab40, ftLastAccessTime.dwHighDateTime=0x1d5a9a2, ftLastWriteTime.dwLowDateTime=0x16eec100, ftLastWriteTime.dwHighDateTime=0x1d6eb7f, nFileSizeHigh=0x0, nFileSizeLow=0x18340)) returned 1 [0086.385] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e788) returned 1 [0086.385] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\sylRmbaPWvbAwXpKH.pptx" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\sylrmbapwvbawxpkh.pptx"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\sylRmbaPWvbAwXpKH.pptx" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\sylrmbapwvbawxpkh.pptx")) returned 1 [0086.385] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\Tub7RsstsPF5bhl.docx", nBufferLength=0x105, lpBuffer=0x31e20c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\Tub7RsstsPF5bhl.docx", lpFilePart=0x0) returned 0x3c [0086.385] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e700) returned 1 [0086.385] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\Tub7RsstsPF5bhl.docx" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\tub7rsstspf5bhl.docx"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x178 [0086.385] GetFileType (hFile=0x178) returned 0x1 [0086.385] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e6fc) returned 1 [0086.385] GetFileType (hFile=0x178) returned 0x1 [0086.385] GetFileSize (in: hFile=0x178, lpFileSizeHigh=0x31e808 | out: lpFileSizeHigh=0x31e808*=0x0) returned 0x10ac8 [0086.386] ReadFile (in: hFile=0x178, lpBuffer=0x2845274, nNumberOfBytesToRead=0x10ac8, lpNumberOfBytesRead=0x31e7b4, lpOverlapped=0x0 | out: lpBuffer=0x2845274*, lpNumberOfBytesRead=0x31e7b4*=0x10ac8, lpOverlapped=0x0) returned 1 [0086.387] CloseHandle (hObject=0x178) returned 1 [0086.439] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\Tub7RsstsPF5bhl.docx", nBufferLength=0x105, lpBuffer=0x31e1f8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\Tub7RsstsPF5bhl.docx", lpFilePart=0x0) returned 0x3c [0086.439] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e6ec) returned 1 [0086.439] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\Tub7RsstsPF5bhl.docx" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\tub7rsstspf5bhl.docx"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x178 [0086.442] GetFileType (hFile=0x178) returned 0x1 [0086.442] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e6e8) returned 1 [0086.442] GetFileType (hFile=0x178) returned 0x1 [0086.442] WriteFile (in: hFile=0x178, lpBuffer=0x26d4e8c*, nNumberOfBytesToWrite=0x10ad0, lpNumberOfBytesWritten=0x31e7a8, lpOverlapped=0x0 | out: lpBuffer=0x26d4e8c*, lpNumberOfBytesWritten=0x31e7a8*=0x10ad0, lpOverlapped=0x0) returned 1 [0086.444] CloseHandle (hObject=0x178) returned 1 [0086.444] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\Tub7RsstsPF5bhl.docx", nBufferLength=0x105, lpBuffer=0x31e32c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\Tub7RsstsPF5bhl.docx", lpFilePart=0x0) returned 0x3c [0086.444] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\Tub7RsstsPF5bhl.docx", nBufferLength=0x105, lpBuffer=0x31e32c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\Tub7RsstsPF5bhl.docx", lpFilePart=0x0) returned 0x3c [0086.444] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e78c) returned 1 [0086.444] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\Tub7RsstsPF5bhl.docx" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\tub7rsstspf5bhl.docx"), fInfoLevelId=0x0, lpFileInformation=0x31e808 | out: lpFileInformation=0x31e808*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa7e2aa90, ftCreationTime.dwHighDateTime=0x1d5a92d, ftLastAccessTime.dwLowDateTime=0x7c6dede0, ftLastAccessTime.dwHighDateTime=0x1d58e73, ftLastWriteTime.dwLowDateTime=0x16f84680, ftLastWriteTime.dwHighDateTime=0x1d6eb7f, nFileSizeHigh=0x0, nFileSizeLow=0x10ad0)) returned 1 [0086.444] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e788) returned 1 [0086.444] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\Tub7RsstsPF5bhl.docx" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\tub7rsstspf5bhl.docx"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\Tub7RsstsPF5bhl.docx" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\tub7rsstspf5bhl.docx")) returned 1 [0086.445] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\v62Jp.xlsx", nBufferLength=0x105, lpBuffer=0x31e20c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\v62Jp.xlsx", lpFilePart=0x0) returned 0x32 [0086.445] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e700) returned 1 [0086.445] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\v62Jp.xlsx" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\v62jp.xlsx"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x178 [0086.445] GetFileType (hFile=0x178) returned 0x1 [0086.445] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e6fc) returned 1 [0086.445] GetFileType (hFile=0x178) returned 0x1 [0086.445] GetFileSize (in: hFile=0x178, lpFileSizeHigh=0x31e808 | out: lpFileSizeHigh=0x31e808*=0x0) returned 0x6c58 [0086.445] ReadFile (in: hFile=0x178, lpBuffer=0x26e5ca0, nNumberOfBytesToRead=0x6c58, lpNumberOfBytesRead=0x31e7b4, lpOverlapped=0x0 | out: lpBuffer=0x26e5ca0*, lpNumberOfBytesRead=0x31e7b4*=0x6c58, lpOverlapped=0x0) returned 1 [0086.446] CloseHandle (hObject=0x178) returned 1 [0086.460] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\v62Jp.xlsx", nBufferLength=0x105, lpBuffer=0x31e1f8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\v62Jp.xlsx", lpFilePart=0x0) returned 0x32 [0086.460] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e6ec) returned 1 [0086.460] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\v62Jp.xlsx" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\v62jp.xlsx"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x178 [0086.461] GetFileType (hFile=0x178) returned 0x1 [0086.461] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e6e8) returned 1 [0086.461] GetFileType (hFile=0x178) returned 0x1 [0086.461] WriteFile (in: hFile=0x178, lpBuffer=0x27549c0*, nNumberOfBytesToWrite=0x6c60, lpNumberOfBytesWritten=0x31e7a8, lpOverlapped=0x0 | out: lpBuffer=0x27549c0*, lpNumberOfBytesWritten=0x31e7a8*=0x6c60, lpOverlapped=0x0) returned 1 [0086.462] CloseHandle (hObject=0x178) returned 1 [0086.463] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\v62Jp.xlsx", nBufferLength=0x105, lpBuffer=0x31e32c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\v62Jp.xlsx", lpFilePart=0x0) returned 0x32 [0086.463] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\v62Jp.xlsx", nBufferLength=0x105, lpBuffer=0x31e32c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\v62Jp.xlsx", lpFilePart=0x0) returned 0x32 [0086.463] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e78c) returned 1 [0086.463] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\v62Jp.xlsx" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\v62jp.xlsx"), fInfoLevelId=0x0, lpFileInformation=0x31e808 | out: lpFileInformation=0x31e808*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9a9cb2e0, ftCreationTime.dwHighDateTime=0x1d598de, ftLastAccessTime.dwLowDateTime=0x2102b670, ftLastAccessTime.dwHighDateTime=0x1d57cad, ftLastWriteTime.dwLowDateTime=0x16faa7e0, ftLastWriteTime.dwHighDateTime=0x1d6eb7f, nFileSizeHigh=0x0, nFileSizeLow=0x6c60)) returned 1 [0086.463] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e788) returned 1 [0086.463] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\v62Jp.xlsx" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\v62jp.xlsx"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\v62Jp.xlsx" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\v62jp.xlsx")) returned 1 [0086.463] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\WHE1DQO_Ps0NUHD5IUA.docx", nBufferLength=0x105, lpBuffer=0x31e20c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\WHE1DQO_Ps0NUHD5IUA.docx", lpFilePart=0x0) returned 0x40 [0086.463] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e700) returned 1 [0086.463] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\WHE1DQO_Ps0NUHD5IUA.docx" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\whe1dqo_ps0nuhd5iua.docx"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x178 [0086.463] GetFileType (hFile=0x178) returned 0x1 [0086.463] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e6fc) returned 1 [0086.463] GetFileType (hFile=0x178) returned 0x1 [0086.464] GetFileSize (in: hFile=0x178, lpFileSizeHigh=0x31e808 | out: lpFileSizeHigh=0x31e808*=0x0) returned 0x16a86 [0086.467] ReadFile (in: hFile=0x178, lpBuffer=0x36194b0, nNumberOfBytesToRead=0x16a86, lpNumberOfBytesRead=0x31e7b4, lpOverlapped=0x0 | out: lpBuffer=0x36194b0*, lpNumberOfBytesRead=0x31e7b4*=0x16a86, lpOverlapped=0x0) returned 1 [0086.468] CloseHandle (hObject=0x178) returned 1 [0086.514] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\WHE1DQO_Ps0NUHD5IUA.docx", nBufferLength=0x105, lpBuffer=0x31e1f8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\WHE1DQO_Ps0NUHD5IUA.docx", lpFilePart=0x0) returned 0x40 [0086.514] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e6ec) returned 1 [0086.514] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\WHE1DQO_Ps0NUHD5IUA.docx" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\whe1dqo_ps0nuhd5iua.docx"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x178 [0086.516] GetFileType (hFile=0x178) returned 0x1 [0086.516] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e6e8) returned 1 [0086.516] GetFileType (hFile=0x178) returned 0x1 [0086.516] WriteFile (in: hFile=0x178, lpBuffer=0x368a9b8*, nNumberOfBytesToWrite=0x16a90, lpNumberOfBytesWritten=0x31e7a8, lpOverlapped=0x0 | out: lpBuffer=0x368a9b8*, lpNumberOfBytesWritten=0x31e7a8*=0x16a90, lpOverlapped=0x0) returned 1 [0086.518] CloseHandle (hObject=0x178) returned 1 [0086.518] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\WHE1DQO_Ps0NUHD5IUA.docx", nBufferLength=0x105, lpBuffer=0x31e32c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\WHE1DQO_Ps0NUHD5IUA.docx", lpFilePart=0x0) returned 0x40 [0086.518] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\WHE1DQO_Ps0NUHD5IUA.docx", nBufferLength=0x105, lpBuffer=0x31e32c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\WHE1DQO_Ps0NUHD5IUA.docx", lpFilePart=0x0) returned 0x40 [0086.518] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e78c) returned 1 [0086.518] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\WHE1DQO_Ps0NUHD5IUA.docx" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\whe1dqo_ps0nuhd5iua.docx"), fInfoLevelId=0x0, lpFileInformation=0x31e808 | out: lpFileInformation=0x31e808*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc35a3c70, ftCreationTime.dwHighDateTime=0x1d5b846, ftLastAccessTime.dwLowDateTime=0x130f7d20, ftLastAccessTime.dwHighDateTime=0x1d56bc1, ftLastWriteTime.dwLowDateTime=0x17042d60, ftLastWriteTime.dwHighDateTime=0x1d6eb7f, nFileSizeHigh=0x0, nFileSizeLow=0x16a90)) returned 1 [0086.518] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e788) returned 1 [0086.518] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\WHE1DQO_Ps0NUHD5IUA.docx" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\whe1dqo_ps0nuhd5iua.docx"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\WHE1DQO_Ps0NUHD5IUA.docx" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\whe1dqo_ps0nuhd5iua.docx")) returned 1 [0086.519] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\xXD95e7i 9JIiSYfn.pptx", nBufferLength=0x105, lpBuffer=0x31e20c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\xXD95e7i 9JIiSYfn.pptx", lpFilePart=0x0) returned 0x3e [0086.519] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e700) returned 1 [0086.519] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\xXD95e7i 9JIiSYfn.pptx" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\xxd95e7i 9jiisyfn.pptx"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x178 [0086.519] GetFileType (hFile=0x178) returned 0x1 [0086.519] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e6fc) returned 1 [0086.519] GetFileType (hFile=0x178) returned 0x1 [0086.519] GetFileSize (in: hFile=0x178, lpFileSizeHigh=0x31e808 | out: lpFileSizeHigh=0x31e808*=0x0) returned 0xc832 [0086.519] ReadFile (in: hFile=0x178, lpBuffer=0x2678710, nNumberOfBytesToRead=0xc832, lpNumberOfBytesRead=0x31e7b4, lpOverlapped=0x0 | out: lpBuffer=0x2678710*, lpNumberOfBytesRead=0x31e7b4*=0xc832, lpOverlapped=0x0) returned 1 [0086.520] CloseHandle (hObject=0x178) returned 1 [0086.537] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\xXD95e7i 9JIiSYfn.pptx", nBufferLength=0x105, lpBuffer=0x31e1f8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\xXD95e7i 9JIiSYfn.pptx", lpFilePart=0x0) returned 0x3e [0086.537] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e6ec) returned 1 [0086.537] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\xXD95e7i 9JIiSYfn.pptx" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\xxd95e7i 9jiisyfn.pptx"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x178 [0086.538] GetFileType (hFile=0x178) returned 0x1 [0086.538] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e6e8) returned 1 [0086.538] GetFileType (hFile=0x178) returned 0x1 [0086.538] WriteFile (in: hFile=0x178, lpBuffer=0x26eadcc*, nNumberOfBytesToWrite=0xc840, lpNumberOfBytesWritten=0x31e7a8, lpOverlapped=0x0 | out: lpBuffer=0x26eadcc*, lpNumberOfBytesWritten=0x31e7a8*=0xc840, lpOverlapped=0x0) returned 1 [0086.540] CloseHandle (hObject=0x178) returned 1 [0086.540] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\xXD95e7i 9JIiSYfn.pptx", nBufferLength=0x105, lpBuffer=0x31e32c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\xXD95e7i 9JIiSYfn.pptx", lpFilePart=0x0) returned 0x3e [0086.540] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\xXD95e7i 9JIiSYfn.pptx", nBufferLength=0x105, lpBuffer=0x31e32c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\xXD95e7i 9JIiSYfn.pptx", lpFilePart=0x0) returned 0x3e [0086.540] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e78c) returned 1 [0086.540] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\xXD95e7i 9JIiSYfn.pptx" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\xxd95e7i 9jiisyfn.pptx"), fInfoLevelId=0x0, lpFileInformation=0x31e808 | out: lpFileInformation=0x31e808*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x56543370, ftCreationTime.dwHighDateTime=0x1d5e072, ftLastAccessTime.dwLowDateTime=0x595be5f0, ftLastAccessTime.dwHighDateTime=0x1d5a71e, ftLastWriteTime.dwLowDateTime=0x17068ec0, ftLastWriteTime.dwHighDateTime=0x1d6eb7f, nFileSizeHigh=0x0, nFileSizeLow=0xc840)) returned 1 [0086.540] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e788) returned 1 [0086.540] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\xXD95e7i 9JIiSYfn.pptx" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\xxd95e7i 9jiisyfn.pptx"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\xXD95e7i 9JIiSYfn.pptx" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\xxd95e7i 9jiisyfn.pptx")) returned 1 [0086.540] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\Ytscf.pptx", nBufferLength=0x105, lpBuffer=0x31e20c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\Ytscf.pptx", lpFilePart=0x0) returned 0x32 [0086.540] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e700) returned 1 [0086.540] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\Ytscf.pptx" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\ytscf.pptx"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x178 [0086.541] GetFileType (hFile=0x178) returned 0x1 [0086.541] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e6fc) returned 1 [0086.541] GetFileType (hFile=0x178) returned 0x1 [0086.541] GetFileSize (in: hFile=0x178, lpFileSizeHigh=0x31e808 | out: lpFileSizeHigh=0x31e808*=0x0) returned 0x17458 [0086.541] ReadFile (in: hFile=0x178, lpBuffer=0x36ba4e8, nNumberOfBytesToRead=0x17458, lpNumberOfBytesRead=0x31e7b4, lpOverlapped=0x0 | out: lpBuffer=0x36ba4e8*, lpNumberOfBytesRead=0x31e7b4*=0x17458, lpOverlapped=0x0) returned 1 [0086.543] CloseHandle (hObject=0x178) returned 1 [0086.561] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\Ytscf.pptx", nBufferLength=0x105, lpBuffer=0x31e1f8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\Ytscf.pptx", lpFilePart=0x0) returned 0x32 [0086.561] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e6ec) returned 1 [0086.561] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\Ytscf.pptx" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\ytscf.pptx"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x178 [0086.562] GetFileType (hFile=0x178) returned 0x1 [0086.562] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e6e8) returned 1 [0086.562] GetFileType (hFile=0x178) returned 0x1 [0086.562] WriteFile (in: hFile=0x178, lpBuffer=0x372eb00*, nNumberOfBytesToWrite=0x17460, lpNumberOfBytesWritten=0x31e7a8, lpOverlapped=0x0 | out: lpBuffer=0x372eb00*, lpNumberOfBytesWritten=0x31e7a8*=0x17460, lpOverlapped=0x0) returned 1 [0086.564] CloseHandle (hObject=0x178) returned 1 [0086.564] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\Ytscf.pptx", nBufferLength=0x105, lpBuffer=0x31e32c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\Ytscf.pptx", lpFilePart=0x0) returned 0x32 [0086.564] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\Ytscf.pptx", nBufferLength=0x105, lpBuffer=0x31e32c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\Ytscf.pptx", lpFilePart=0x0) returned 0x32 [0086.564] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e78c) returned 1 [0086.564] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\Ytscf.pptx" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\ytscf.pptx"), fInfoLevelId=0x0, lpFileInformation=0x31e808 | out: lpFileInformation=0x31e808*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x976c9ee0, ftCreationTime.dwHighDateTime=0x1d5a4e2, ftLastAccessTime.dwLowDateTime=0x8b931c40, ftLastAccessTime.dwHighDateTime=0x1d5a4a9, ftLastWriteTime.dwLowDateTime=0x1708f020, ftLastWriteTime.dwHighDateTime=0x1d6eb7f, nFileSizeHigh=0x0, nFileSizeLow=0x17460)) returned 1 [0086.564] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e788) returned 1 [0086.565] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\Ytscf.pptx" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\ytscf.pptx"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\Ytscf.pptx" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\ytscf.pptx")) returned 1 [0086.565] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e7bc) returned 1 [0086.565] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\mcdNsT5RVFSVyld", nBufferLength=0x105, lpBuffer=0x31e2c4, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\mcdNsT5RVFSVyld", lpFilePart=0x0) returned 0x37 [0086.565] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\mcdNsT5RVFSVyld\\", nBufferLength=0x105, lpBuffer=0x31e298, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\mcdNsT5RVFSVyld\\", lpFilePart=0x0) returned 0x38 [0086.565] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\mcdNsT5RVFSVyld\\*", lpFindFileData=0x31e4e4 | out: lpFindFileData=0x31e4e4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x263eb2a0, ftCreationTime.dwHighDateTime=0x1d5dfdc, ftLastAccessTime.dwLowDateTime=0xadc9aae0, ftLastAccessTime.dwHighDateTime=0x1d5e75c, ftLastWriteTime.dwLowDateTime=0xadc9aae0, ftLastWriteTime.dwHighDateTime=0x1d5e75c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x381f00 [0086.565] FindNextFileW (in: hFindFile=0x381f00, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x263eb2a0, ftCreationTime.dwHighDateTime=0x1d5dfdc, ftLastAccessTime.dwLowDateTime=0xadc9aae0, ftLastAccessTime.dwHighDateTime=0x1d5e75c, ftLastWriteTime.dwLowDateTime=0xadc9aae0, ftLastWriteTime.dwHighDateTime=0x1d5e75c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0086.565] FindNextFileW (in: hFindFile=0x381f00, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x85e956a0, ftCreationTime.dwHighDateTime=0x1d5e23a, ftLastAccessTime.dwLowDateTime=0x745f6bf0, ftLastAccessTime.dwHighDateTime=0x1d5e2bb, ftLastWriteTime.dwLowDateTime=0x745f6bf0, ftLastWriteTime.dwHighDateTime=0x1d5e2bb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="qZqQJke", cAlternateFileName="")) returned 1 [0086.566] FindNextFileW (in: hFindFile=0x381f00, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe11da6b0, ftCreationTime.dwHighDateTime=0x1d5d9c1, ftLastAccessTime.dwLowDateTime=0x23dadd90, ftLastAccessTime.dwHighDateTime=0x1d5dfd2, ftLastWriteTime.dwLowDateTime=0x23dadd90, ftLastWriteTime.dwHighDateTime=0x1d5dfd2, nFileSizeHigh=0x0, nFileSizeLow=0x143e3, dwReserved0=0x0, dwReserved1=0x0, cFileName="tDKPWNeB04vfmhzT6s.doc", cAlternateFileName="TDKPWN~1.DOC")) returned 1 [0086.566] FindNextFileW (in: hFindFile=0x381f00, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1524ab80, ftCreationTime.dwHighDateTime=0x1d5dba1, ftLastAccessTime.dwLowDateTime=0xc2bdc2e0, ftLastAccessTime.dwHighDateTime=0x1d5dc78, ftLastWriteTime.dwLowDateTime=0xc2bdc2e0, ftLastWriteTime.dwHighDateTime=0x1d5dc78, nFileSizeHigh=0x0, nFileSizeLow=0x99d, dwReserved0=0x0, dwReserved1=0x0, cFileName="ur1m5T0qt.pptx", cAlternateFileName="UR1M5T~1.PPT")) returned 1 [0086.566] FindNextFileW (in: hFindFile=0x381f00, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0086.566] FindClose (in: hFindFile=0x381f00 | out: hFindFile=0x381f00) returned 1 [0086.566] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e77c) returned 1 [0086.566] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e788) returned 1 [0086.566] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e7bc) returned 1 [0086.566] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\mcdNsT5RVFSVyld", nBufferLength=0x105, lpBuffer=0x31e2c4, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\mcdNsT5RVFSVyld", lpFilePart=0x0) returned 0x37 [0086.566] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\mcdNsT5RVFSVyld\\", nBufferLength=0x105, lpBuffer=0x31e298, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\mcdNsT5RVFSVyld\\", lpFilePart=0x0) returned 0x38 [0086.566] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\mcdNsT5RVFSVyld\\*", lpFindFileData=0x31e4e4 | out: lpFindFileData=0x31e4e4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x263eb2a0, ftCreationTime.dwHighDateTime=0x1d5dfdc, ftLastAccessTime.dwLowDateTime=0xadc9aae0, ftLastAccessTime.dwHighDateTime=0x1d5e75c, ftLastWriteTime.dwLowDateTime=0xadc9aae0, ftLastWriteTime.dwHighDateTime=0x1d5e75c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x381f00 [0086.566] FindNextFileW (in: hFindFile=0x381f00, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x263eb2a0, ftCreationTime.dwHighDateTime=0x1d5dfdc, ftLastAccessTime.dwLowDateTime=0xadc9aae0, ftLastAccessTime.dwHighDateTime=0x1d5e75c, ftLastWriteTime.dwLowDateTime=0xadc9aae0, ftLastWriteTime.dwHighDateTime=0x1d5e75c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0086.567] FindNextFileW (in: hFindFile=0x381f00, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x85e956a0, ftCreationTime.dwHighDateTime=0x1d5e23a, ftLastAccessTime.dwLowDateTime=0x745f6bf0, ftLastAccessTime.dwHighDateTime=0x1d5e2bb, ftLastWriteTime.dwLowDateTime=0x745f6bf0, ftLastWriteTime.dwHighDateTime=0x1d5e2bb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="qZqQJke", cAlternateFileName="")) returned 1 [0086.567] FindNextFileW (in: hFindFile=0x381f00, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe11da6b0, ftCreationTime.dwHighDateTime=0x1d5d9c1, ftLastAccessTime.dwLowDateTime=0x23dadd90, ftLastAccessTime.dwHighDateTime=0x1d5dfd2, ftLastWriteTime.dwLowDateTime=0x23dadd90, ftLastWriteTime.dwHighDateTime=0x1d5dfd2, nFileSizeHigh=0x0, nFileSizeLow=0x143e3, dwReserved0=0x0, dwReserved1=0x0, cFileName="tDKPWNeB04vfmhzT6s.doc", cAlternateFileName="TDKPWN~1.DOC")) returned 1 [0086.567] FindNextFileW (in: hFindFile=0x381f00, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1524ab80, ftCreationTime.dwHighDateTime=0x1d5dba1, ftLastAccessTime.dwLowDateTime=0xc2bdc2e0, ftLastAccessTime.dwHighDateTime=0x1d5dc78, ftLastWriteTime.dwLowDateTime=0xc2bdc2e0, ftLastWriteTime.dwHighDateTime=0x1d5dc78, nFileSizeHigh=0x0, nFileSizeLow=0x99d, dwReserved0=0x0, dwReserved1=0x0, cFileName="ur1m5T0qt.pptx", cAlternateFileName="UR1M5T~1.PPT")) returned 1 [0086.567] FindNextFileW (in: hFindFile=0x381f00, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1524ab80, ftCreationTime.dwHighDateTime=0x1d5dba1, ftLastAccessTime.dwLowDateTime=0xc2bdc2e0, ftLastAccessTime.dwHighDateTime=0x1d5dc78, ftLastWriteTime.dwLowDateTime=0xc2bdc2e0, ftLastWriteTime.dwHighDateTime=0x1d5dc78, nFileSizeHigh=0x0, nFileSizeLow=0x99d, dwReserved0=0x0, dwReserved1=0x0, cFileName="ur1m5T0qt.pptx", cAlternateFileName="UR1M5T~1.PPT")) returned 0 [0086.567] FindClose (in: hFindFile=0x381f00 | out: hFindFile=0x381f00) returned 1 [0086.567] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e77c) returned 1 [0086.567] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e788) returned 1 [0086.567] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\mcdNsT5RVFSVyld\\tDKPWNeB04vfmhzT6s.doc", nBufferLength=0x105, lpBuffer=0x31e194, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\mcdNsT5RVFSVyld\\tDKPWNeB04vfmhzT6s.doc", lpFilePart=0x0) returned 0x4e [0086.567] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e688) returned 1 [0086.567] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\mcdNsT5RVFSVyld\\tDKPWNeB04vfmhzT6s.doc" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\mcdnst5rvfsvyld\\tdkpwneb04vfmhzt6s.doc"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x178 [0086.567] GetFileType (hFile=0x178) returned 0x1 [0086.567] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e684) returned 1 [0086.568] GetFileType (hFile=0x178) returned 0x1 [0086.568] GetFileSize (in: hFile=0x178, lpFileSizeHigh=0x31e790 | out: lpFileSizeHigh=0x31e790*=0x0) returned 0x143e3 [0086.568] ReadFile (in: hFile=0x178, lpBuffer=0x27467f8, nNumberOfBytesToRead=0x143e3, lpNumberOfBytesRead=0x31e73c, lpOverlapped=0x0 | out: lpBuffer=0x27467f8*, lpNumberOfBytesRead=0x31e73c*=0x143e3, lpOverlapped=0x0) returned 1 [0086.569] CloseHandle (hObject=0x178) returned 1 [0086.608] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\mcdNsT5RVFSVyld\\tDKPWNeB04vfmhzT6s.doc", nBufferLength=0x105, lpBuffer=0x31e180, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\mcdNsT5RVFSVyld\\tDKPWNeB04vfmhzT6s.doc", lpFilePart=0x0) returned 0x4e [0086.608] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e674) returned 1 [0086.608] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\mcdNsT5RVFSVyld\\tDKPWNeB04vfmhzT6s.doc" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\mcdnst5rvfsvyld\\tdkpwneb04vfmhzt6s.doc"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x178 [0086.610] GetFileType (hFile=0x178) returned 0x1 [0086.610] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e670) returned 1 [0086.610] GetFileType (hFile=0x178) returned 0x1 [0086.610] WriteFile (in: hFile=0x178, lpBuffer=0x27d01c4*, nNumberOfBytesToWrite=0x143f0, lpNumberOfBytesWritten=0x31e730, lpOverlapped=0x0 | out: lpBuffer=0x27d01c4*, lpNumberOfBytesWritten=0x31e730*=0x143f0, lpOverlapped=0x0) returned 1 [0086.612] CloseHandle (hObject=0x178) returned 1 [0086.612] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\mcdNsT5RVFSVyld\\tDKPWNeB04vfmhzT6s.doc", nBufferLength=0x105, lpBuffer=0x31e2b4, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\mcdNsT5RVFSVyld\\tDKPWNeB04vfmhzT6s.doc", lpFilePart=0x0) returned 0x4e [0086.612] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\mcdNsT5RVFSVyld\\tDKPWNeB04vfmhzT6s.doc", nBufferLength=0x105, lpBuffer=0x31e2b4, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\mcdNsT5RVFSVyld\\tDKPWNeB04vfmhzT6s.doc", lpFilePart=0x0) returned 0x4e [0086.612] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e714) returned 1 [0086.612] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\mcdNsT5RVFSVyld\\tDKPWNeB04vfmhzT6s.doc" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\mcdnst5rvfsvyld\\tdkpwneb04vfmhzt6s.doc"), fInfoLevelId=0x0, lpFileInformation=0x31e790 | out: lpFileInformation=0x31e790*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe11da6b0, ftCreationTime.dwHighDateTime=0x1d5d9c1, ftLastAccessTime.dwLowDateTime=0x23dadd90, ftLastAccessTime.dwHighDateTime=0x1d5dfd2, ftLastWriteTime.dwLowDateTime=0x171275a0, ftLastWriteTime.dwHighDateTime=0x1d6eb7f, nFileSizeHigh=0x0, nFileSizeLow=0x143f0)) returned 1 [0086.612] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e710) returned 1 [0086.612] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\mcdNsT5RVFSVyld\\tDKPWNeB04vfmhzT6s.doc" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\mcdnst5rvfsvyld\\tdkpwneb04vfmhzt6s.doc"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\mcdNsT5RVFSVyld\\tDKPWNeB04vfmhzT6s.doc" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\mcdnst5rvfsvyld\\tdkpwneb04vfmhzt6s.doc")) returned 1 [0086.612] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\mcdNsT5RVFSVyld\\ur1m5T0qt.pptx", nBufferLength=0x105, lpBuffer=0x31e194, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\mcdNsT5RVFSVyld\\ur1m5T0qt.pptx", lpFilePart=0x0) returned 0x46 [0086.613] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e688) returned 1 [0086.613] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\mcdNsT5RVFSVyld\\ur1m5T0qt.pptx" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\mcdnst5rvfsvyld\\ur1m5t0qt.pptx"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x178 [0086.613] GetFileType (hFile=0x178) returned 0x1 [0086.613] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e684) returned 1 [0086.613] GetFileType (hFile=0x178) returned 0x1 [0086.613] GetFileSize (in: hFile=0x178, lpFileSizeHigh=0x31e790 | out: lpFileSizeHigh=0x31e790*=0x0) returned 0x99d [0086.613] ReadFile (in: hFile=0x178, lpBuffer=0x27e5344, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x31e73c, lpOverlapped=0x0 | out: lpBuffer=0x27e5344*, lpNumberOfBytesRead=0x31e73c*=0x99d, lpOverlapped=0x0) returned 1 [0086.614] CloseHandle (hObject=0x178) returned 1 [0086.629] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\mcdNsT5RVFSVyld\\ur1m5T0qt.pptx", nBufferLength=0x105, lpBuffer=0x31e180, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\mcdNsT5RVFSVyld\\ur1m5T0qt.pptx", lpFilePart=0x0) returned 0x46 [0086.629] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e674) returned 1 [0086.629] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\mcdNsT5RVFSVyld\\ur1m5T0qt.pptx" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\mcdnst5rvfsvyld\\ur1m5t0qt.pptx"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x178 [0086.630] GetFileType (hFile=0x178) returned 0x1 [0086.630] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e670) returned 1 [0086.630] GetFileType (hFile=0x178) returned 0x1 [0086.630] WriteFile (in: hFile=0x178, lpBuffer=0x2637330*, nNumberOfBytesToWrite=0x9a0, lpNumberOfBytesWritten=0x31e704, lpOverlapped=0x0 | out: lpBuffer=0x2637330*, lpNumberOfBytesWritten=0x31e704*=0x9a0, lpOverlapped=0x0) returned 1 [0086.630] CloseHandle (hObject=0x178) returned 1 [0086.631] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\mcdNsT5RVFSVyld\\ur1m5T0qt.pptx", nBufferLength=0x105, lpBuffer=0x31e2b4, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\mcdNsT5RVFSVyld\\ur1m5T0qt.pptx", lpFilePart=0x0) returned 0x46 [0086.631] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\mcdNsT5RVFSVyld\\ur1m5T0qt.pptx", nBufferLength=0x105, lpBuffer=0x31e2b4, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\mcdNsT5RVFSVyld\\ur1m5T0qt.pptx", lpFilePart=0x0) returned 0x46 [0086.631] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e714) returned 1 [0086.631] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\mcdNsT5RVFSVyld\\ur1m5T0qt.pptx" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\mcdnst5rvfsvyld\\ur1m5t0qt.pptx"), fInfoLevelId=0x0, lpFileInformation=0x31e790 | out: lpFileInformation=0x31e790*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1524ab80, ftCreationTime.dwHighDateTime=0x1d5dba1, ftLastAccessTime.dwLowDateTime=0xc2bdc2e0, ftLastAccessTime.dwHighDateTime=0x1d5dc78, ftLastWriteTime.dwLowDateTime=0x1714d700, ftLastWriteTime.dwHighDateTime=0x1d6eb7f, nFileSizeHigh=0x0, nFileSizeLow=0x9a0)) returned 1 [0086.631] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e710) returned 1 [0086.631] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\mcdNsT5RVFSVyld\\ur1m5T0qt.pptx" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\mcdnst5rvfsvyld\\ur1m5t0qt.pptx"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\mcdNsT5RVFSVyld\\ur1m5T0qt.pptx" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\mcdnst5rvfsvyld\\ur1m5t0qt.pptx")) returned 1 [0086.631] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e744) returned 1 [0086.631] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\mcdNsT5RVFSVyld\\qZqQJke", nBufferLength=0x105, lpBuffer=0x31e24c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\mcdNsT5RVFSVyld\\qZqQJke", lpFilePart=0x0) returned 0x3f [0086.631] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\mcdNsT5RVFSVyld\\qZqQJke\\", nBufferLength=0x105, lpBuffer=0x31e220, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\mcdNsT5RVFSVyld\\qZqQJke\\", lpFilePart=0x0) returned 0x40 [0086.631] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\mcdNsT5RVFSVyld\\qZqQJke\\*", lpFindFileData=0x31e46c | out: lpFindFileData=0x31e46c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x85e956a0, ftCreationTime.dwHighDateTime=0x1d5e23a, ftLastAccessTime.dwLowDateTime=0x745f6bf0, ftLastAccessTime.dwHighDateTime=0x1d5e2bb, ftLastWriteTime.dwLowDateTime=0x745f6bf0, ftLastWriteTime.dwHighDateTime=0x1d5e2bb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x381d80 [0086.631] FindNextFileW (in: hFindFile=0x381d80, lpFindFileData=0x31e47c | out: lpFindFileData=0x31e47c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x85e956a0, ftCreationTime.dwHighDateTime=0x1d5e23a, ftLastAccessTime.dwLowDateTime=0x745f6bf0, ftLastAccessTime.dwHighDateTime=0x1d5e2bb, ftLastWriteTime.dwLowDateTime=0x745f6bf0, ftLastWriteTime.dwHighDateTime=0x1d5e2bb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0086.632] FindNextFileW (in: hFindFile=0x381d80, lpFindFileData=0x31e47c | out: lpFindFileData=0x31e47c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x315eb1a0, ftCreationTime.dwHighDateTime=0x1d5d8b4, ftLastAccessTime.dwLowDateTime=0x1626ca70, ftLastAccessTime.dwHighDateTime=0x1d5e14d, ftLastWriteTime.dwLowDateTime=0x1626ca70, ftLastWriteTime.dwHighDateTime=0x1d5e14d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="5mEc8mcZ9jfK", cAlternateFileName="5MEC8M~1")) returned 1 [0086.632] FindNextFileW (in: hFindFile=0x381d80, lpFindFileData=0x31e47c | out: lpFindFileData=0x31e47c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8c189040, ftCreationTime.dwHighDateTime=0x1d5e370, ftLastAccessTime.dwLowDateTime=0x9b44cc60, ftLastAccessTime.dwHighDateTime=0x1d5e261, ftLastWriteTime.dwLowDateTime=0x9b44cc60, ftLastWriteTime.dwHighDateTime=0x1d5e261, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="E5yqHX_c 22spYoHS", cAlternateFileName="E5YQHX~1")) returned 1 [0086.632] FindNextFileW (in: hFindFile=0x381d80, lpFindFileData=0x31e47c | out: lpFindFileData=0x31e47c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb088fb10, ftCreationTime.dwHighDateTime=0x1d5dbad, ftLastAccessTime.dwLowDateTime=0x50623070, ftLastAccessTime.dwHighDateTime=0x1d5e6bc, ftLastWriteTime.dwLowDateTime=0x50623070, ftLastWriteTime.dwHighDateTime=0x1d5e6bc, nFileSizeHigh=0x0, nFileSizeLow=0x17379, dwReserved0=0x0, dwReserved1=0x0, cFileName="IU5aJXql.pptx", cAlternateFileName="IU5AJX~1.PPT")) returned 1 [0086.632] FindNextFileW (in: hFindFile=0x381d80, lpFindFileData=0x31e47c | out: lpFindFileData=0x31e47c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x470266c0, ftCreationTime.dwHighDateTime=0x1d5e68b, ftLastAccessTime.dwLowDateTime=0xa081940, ftLastAccessTime.dwHighDateTime=0x1d5e258, ftLastWriteTime.dwLowDateTime=0xa081940, ftLastWriteTime.dwHighDateTime=0x1d5e258, nFileSizeHigh=0x0, nFileSizeLow=0x4f3a, dwReserved0=0x0, dwReserved1=0x0, cFileName="j rWKaz2b-64YTGN.ppt", cAlternateFileName="JRWKAZ~1.PPT")) returned 1 [0086.632] FindNextFileW (in: hFindFile=0x381d80, lpFindFileData=0x31e47c | out: lpFindFileData=0x31e47c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x20d129d0, ftCreationTime.dwHighDateTime=0x1d5d7ec, ftLastAccessTime.dwLowDateTime=0xb99a7cc0, ftLastAccessTime.dwHighDateTime=0x1d5e75a, ftLastWriteTime.dwLowDateTime=0xb99a7cc0, ftLastWriteTime.dwHighDateTime=0x1d5e75a, nFileSizeHigh=0x0, nFileSizeLow=0x2f24, dwReserved0=0x0, dwReserved1=0x0, cFileName="YFAmrd4RrOq5.pptx", cAlternateFileName="YFAMRD~1.PPT")) returned 1 [0086.632] FindNextFileW (in: hFindFile=0x381d80, lpFindFileData=0x31e47c | out: lpFindFileData=0x31e47c*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0086.632] FindClose (in: hFindFile=0x381d80 | out: hFindFile=0x381d80) returned 1 [0086.632] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e704) returned 1 [0086.632] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e710) returned 1 [0086.632] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e744) returned 1 [0086.632] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\mcdNsT5RVFSVyld\\qZqQJke", nBufferLength=0x105, lpBuffer=0x31e24c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\mcdNsT5RVFSVyld\\qZqQJke", lpFilePart=0x0) returned 0x3f [0086.632] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\mcdNsT5RVFSVyld\\qZqQJke\\", nBufferLength=0x105, lpBuffer=0x31e220, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\mcdNsT5RVFSVyld\\qZqQJke\\", lpFilePart=0x0) returned 0x40 [0086.632] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\mcdNsT5RVFSVyld\\qZqQJke\\*", lpFindFileData=0x31e46c | out: lpFindFileData=0x31e46c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x85e956a0, ftCreationTime.dwHighDateTime=0x1d5e23a, ftLastAccessTime.dwLowDateTime=0x745f6bf0, ftLastAccessTime.dwHighDateTime=0x1d5e2bb, ftLastWriteTime.dwLowDateTime=0x745f6bf0, ftLastWriteTime.dwHighDateTime=0x1d5e2bb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x381d80 [0086.633] FindNextFileW (in: hFindFile=0x381d80, lpFindFileData=0x31e47c | out: lpFindFileData=0x31e47c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x85e956a0, ftCreationTime.dwHighDateTime=0x1d5e23a, ftLastAccessTime.dwLowDateTime=0x745f6bf0, ftLastAccessTime.dwHighDateTime=0x1d5e2bb, ftLastWriteTime.dwLowDateTime=0x745f6bf0, ftLastWriteTime.dwHighDateTime=0x1d5e2bb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0086.633] FindNextFileW (in: hFindFile=0x381d80, lpFindFileData=0x31e47c | out: lpFindFileData=0x31e47c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x315eb1a0, ftCreationTime.dwHighDateTime=0x1d5d8b4, ftLastAccessTime.dwLowDateTime=0x1626ca70, ftLastAccessTime.dwHighDateTime=0x1d5e14d, ftLastWriteTime.dwLowDateTime=0x1626ca70, ftLastWriteTime.dwHighDateTime=0x1d5e14d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="5mEc8mcZ9jfK", cAlternateFileName="5MEC8M~1")) returned 1 [0086.633] FindNextFileW (in: hFindFile=0x381d80, lpFindFileData=0x31e47c | out: lpFindFileData=0x31e47c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8c189040, ftCreationTime.dwHighDateTime=0x1d5e370, ftLastAccessTime.dwLowDateTime=0x9b44cc60, ftLastAccessTime.dwHighDateTime=0x1d5e261, ftLastWriteTime.dwLowDateTime=0x9b44cc60, ftLastWriteTime.dwHighDateTime=0x1d5e261, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="E5yqHX_c 22spYoHS", cAlternateFileName="E5YQHX~1")) returned 1 [0086.633] FindNextFileW (in: hFindFile=0x381d80, lpFindFileData=0x31e47c | out: lpFindFileData=0x31e47c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb088fb10, ftCreationTime.dwHighDateTime=0x1d5dbad, ftLastAccessTime.dwLowDateTime=0x50623070, ftLastAccessTime.dwHighDateTime=0x1d5e6bc, ftLastWriteTime.dwLowDateTime=0x50623070, ftLastWriteTime.dwHighDateTime=0x1d5e6bc, nFileSizeHigh=0x0, nFileSizeLow=0x17379, dwReserved0=0x0, dwReserved1=0x0, cFileName="IU5aJXql.pptx", cAlternateFileName="IU5AJX~1.PPT")) returned 1 [0086.633] FindNextFileW (in: hFindFile=0x381d80, lpFindFileData=0x31e47c | out: lpFindFileData=0x31e47c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x470266c0, ftCreationTime.dwHighDateTime=0x1d5e68b, ftLastAccessTime.dwLowDateTime=0xa081940, ftLastAccessTime.dwHighDateTime=0x1d5e258, ftLastWriteTime.dwLowDateTime=0xa081940, ftLastWriteTime.dwHighDateTime=0x1d5e258, nFileSizeHigh=0x0, nFileSizeLow=0x4f3a, dwReserved0=0x0, dwReserved1=0x0, cFileName="j rWKaz2b-64YTGN.ppt", cAlternateFileName="JRWKAZ~1.PPT")) returned 1 [0086.633] FindNextFileW (in: hFindFile=0x381d80, lpFindFileData=0x31e47c | out: lpFindFileData=0x31e47c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x20d129d0, ftCreationTime.dwHighDateTime=0x1d5d7ec, ftLastAccessTime.dwLowDateTime=0xb99a7cc0, ftLastAccessTime.dwHighDateTime=0x1d5e75a, ftLastWriteTime.dwLowDateTime=0xb99a7cc0, ftLastWriteTime.dwHighDateTime=0x1d5e75a, nFileSizeHigh=0x0, nFileSizeLow=0x2f24, dwReserved0=0x0, dwReserved1=0x0, cFileName="YFAmrd4RrOq5.pptx", cAlternateFileName="YFAMRD~1.PPT")) returned 1 [0086.633] FindNextFileW (in: hFindFile=0x381d80, lpFindFileData=0x31e47c | out: lpFindFileData=0x31e47c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x20d129d0, ftCreationTime.dwHighDateTime=0x1d5d7ec, ftLastAccessTime.dwLowDateTime=0xb99a7cc0, ftLastAccessTime.dwHighDateTime=0x1d5e75a, ftLastWriteTime.dwLowDateTime=0xb99a7cc0, ftLastWriteTime.dwHighDateTime=0x1d5e75a, nFileSizeHigh=0x0, nFileSizeLow=0x2f24, dwReserved0=0x0, dwReserved1=0x0, cFileName="YFAmrd4RrOq5.pptx", cAlternateFileName="YFAMRD~1.PPT")) returned 0 [0086.633] FindClose (in: hFindFile=0x381d80 | out: hFindFile=0x381d80) returned 1 [0086.633] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e704) returned 1 [0086.633] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e710) returned 1 [0086.634] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\mcdNsT5RVFSVyld\\qZqQJke\\IU5aJXql.pptx", nBufferLength=0x105, lpBuffer=0x31e11c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\mcdNsT5RVFSVyld\\qZqQJke\\IU5aJXql.pptx", lpFilePart=0x0) returned 0x4d [0086.634] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e610) returned 1 [0086.634] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\mcdNsT5RVFSVyld\\qZqQJke\\IU5aJXql.pptx" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\mcdnst5rvfsvyld\\qzqqjke\\iu5ajxql.pptx"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x178 [0086.634] GetFileType (hFile=0x178) returned 0x1 [0086.634] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e60c) returned 1 [0086.634] GetFileType (hFile=0x178) returned 0x1 [0086.634] GetFileSize (in: hFile=0x178, lpFileSizeHigh=0x31e718 | out: lpFileSizeHigh=0x31e718*=0x0) returned 0x17379 [0086.634] ReadFile (in: hFile=0x178, lpBuffer=0x376e760, nNumberOfBytesToRead=0x17379, lpNumberOfBytesRead=0x31e6c4, lpOverlapped=0x0 | out: lpBuffer=0x376e760*, lpNumberOfBytesRead=0x31e6c4*=0x17379, lpOverlapped=0x0) returned 1 [0086.680] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\mcdNsT5RVFSVyld\\qZqQJke\\IU5aJXql.pptx", nBufferLength=0x105, lpBuffer=0x31e108, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\mcdNsT5RVFSVyld\\qZqQJke\\IU5aJXql.pptx", lpFilePart=0x0) returned 0x4d [0086.680] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e5fc) returned 1 [0086.680] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\mcdNsT5RVFSVyld\\qZqQJke\\IU5aJXql.pptx" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\mcdnst5rvfsvyld\\qzqqjke\\iu5ajxql.pptx"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x178 [0086.681] GetFileType (hFile=0x178) returned 0x1 [0086.681] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e5f8) returned 1 [0086.681] GetFileType (hFile=0x178) returned 0x1 [0086.681] WriteFile (in: hFile=0x178, lpBuffer=0x37e2918*, nNumberOfBytesToWrite=0x17380, lpNumberOfBytesWritten=0x31e6b8, lpOverlapped=0x0 | out: lpBuffer=0x37e2918*, lpNumberOfBytesWritten=0x31e6b8*=0x17380, lpOverlapped=0x0) returned 1 [0086.684] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\mcdNsT5RVFSVyld\\qZqQJke\\IU5aJXql.pptx", nBufferLength=0x105, lpBuffer=0x31e23c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\mcdNsT5RVFSVyld\\qZqQJke\\IU5aJXql.pptx", lpFilePart=0x0) returned 0x4d [0086.684] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\mcdNsT5RVFSVyld\\qZqQJke\\IU5aJXql.pptx", nBufferLength=0x105, lpBuffer=0x31e23c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\mcdNsT5RVFSVyld\\qZqQJke\\IU5aJXql.pptx", lpFilePart=0x0) returned 0x4d [0086.684] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e69c) returned 1 [0086.684] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\mcdNsT5RVFSVyld\\qZqQJke\\IU5aJXql.pptx" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\mcdnst5rvfsvyld\\qzqqjke\\iu5ajxql.pptx"), fInfoLevelId=0x0, lpFileInformation=0x31e718 | out: lpFileInformation=0x31e718*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb088fb10, ftCreationTime.dwHighDateTime=0x1d5dbad, ftLastAccessTime.dwLowDateTime=0x50623070, ftLastAccessTime.dwHighDateTime=0x1d5e6bc, ftLastWriteTime.dwLowDateTime=0x171bfb20, ftLastWriteTime.dwHighDateTime=0x1d6eb7f, nFileSizeHigh=0x0, nFileSizeLow=0x17380)) returned 1 [0086.684] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e698) returned 1 [0086.685] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\mcdNsT5RVFSVyld\\qZqQJke\\IU5aJXql.pptx" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\mcdnst5rvfsvyld\\qzqqjke\\iu5ajxql.pptx"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\mcdNsT5RVFSVyld\\qZqQJke\\IU5aJXql.pptx" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\mcdnst5rvfsvyld\\qzqqjke\\iu5ajxql.pptx")) returned 1 [0086.685] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\mcdNsT5RVFSVyld\\qZqQJke\\j rWKaz2b-64YTGN.ppt", nBufferLength=0x105, lpBuffer=0x31e11c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\mcdNsT5RVFSVyld\\qZqQJke\\j rWKaz2b-64YTGN.ppt", lpFilePart=0x0) returned 0x54 [0086.685] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e610) returned 1 [0086.685] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\mcdNsT5RVFSVyld\\qZqQJke\\j rWKaz2b-64YTGN.ppt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\mcdnst5rvfsvyld\\qzqqjke\\j rwkaz2b-64ytgn.ppt"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x178 [0086.685] GetFileType (hFile=0x178) returned 0x1 [0086.685] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e60c) returned 1 [0086.685] GetFileType (hFile=0x178) returned 0x1 [0086.685] GetFileSize (in: hFile=0x178, lpFileSizeHigh=0x31e718 | out: lpFileSizeHigh=0x31e718*=0x0) returned 0x4f3a [0086.685] ReadFile (in: hFile=0x178, lpBuffer=0x26880b0, nNumberOfBytesToRead=0x4f3a, lpNumberOfBytesRead=0x31e6c4, lpOverlapped=0x0 | out: lpBuffer=0x26880b0*, lpNumberOfBytesRead=0x31e6c4*=0x4f3a, lpOverlapped=0x0) returned 1 [0086.699] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\mcdNsT5RVFSVyld\\qZqQJke\\j rWKaz2b-64YTGN.ppt", nBufferLength=0x105, lpBuffer=0x31e108, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\mcdNsT5RVFSVyld\\qZqQJke\\j rWKaz2b-64YTGN.ppt", lpFilePart=0x0) returned 0x54 [0086.699] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e5fc) returned 1 [0086.699] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\mcdNsT5RVFSVyld\\qZqQJke\\j rWKaz2b-64YTGN.ppt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\mcdnst5rvfsvyld\\qzqqjke\\j rwkaz2b-64ytgn.ppt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x178 [0086.700] GetFileType (hFile=0x178) returned 0x1 [0086.700] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e5f8) returned 1 [0086.700] GetFileType (hFile=0x178) returned 0x1 [0086.700] WriteFile (in: hFile=0x178, lpBuffer=0x26edad8*, nNumberOfBytesToWrite=0x4f40, lpNumberOfBytesWritten=0x31e6b8, lpOverlapped=0x0 | out: lpBuffer=0x26edad8*, lpNumberOfBytesWritten=0x31e6b8*=0x4f40, lpOverlapped=0x0) returned 1 [0086.701] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\mcdNsT5RVFSVyld\\qZqQJke\\j rWKaz2b-64YTGN.ppt", nBufferLength=0x105, lpBuffer=0x31e23c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\mcdNsT5RVFSVyld\\qZqQJke\\j rWKaz2b-64YTGN.ppt", lpFilePart=0x0) returned 0x54 [0086.701] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\mcdNsT5RVFSVyld\\qZqQJke\\j rWKaz2b-64YTGN.ppt", nBufferLength=0x105, lpBuffer=0x31e23c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\mcdNsT5RVFSVyld\\qZqQJke\\j rWKaz2b-64YTGN.ppt", lpFilePart=0x0) returned 0x54 [0086.701] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e69c) returned 1 [0086.701] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\mcdNsT5RVFSVyld\\qZqQJke\\j rWKaz2b-64YTGN.ppt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\mcdnst5rvfsvyld\\qzqqjke\\j rwkaz2b-64ytgn.ppt"), fInfoLevelId=0x0, lpFileInformation=0x31e718 | out: lpFileInformation=0x31e718*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x470266c0, ftCreationTime.dwHighDateTime=0x1d5e68b, ftLastAccessTime.dwLowDateTime=0xa081940, ftLastAccessTime.dwHighDateTime=0x1d5e258, ftLastWriteTime.dwLowDateTime=0x171e5c80, ftLastWriteTime.dwHighDateTime=0x1d6eb7f, nFileSizeHigh=0x0, nFileSizeLow=0x4f40)) returned 1 [0086.701] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e698) returned 1 [0086.701] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\mcdNsT5RVFSVyld\\qZqQJke\\j rWKaz2b-64YTGN.ppt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\mcdnst5rvfsvyld\\qzqqjke\\j rwkaz2b-64ytgn.ppt"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\mcdNsT5RVFSVyld\\qZqQJke\\j rWKaz2b-64YTGN.ppt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\mcdnst5rvfsvyld\\qzqqjke\\j rwkaz2b-64ytgn.ppt")) returned 1 [0086.702] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\mcdNsT5RVFSVyld\\qZqQJke\\YFAmrd4RrOq5.pptx", nBufferLength=0x105, lpBuffer=0x31e11c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\mcdNsT5RVFSVyld\\qZqQJke\\YFAmrd4RrOq5.pptx", lpFilePart=0x0) returned 0x51 [0086.702] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e610) returned 1 [0086.702] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\mcdNsT5RVFSVyld\\qZqQJke\\YFAmrd4RrOq5.pptx" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\mcdnst5rvfsvyld\\qzqqjke\\yfamrd4rroq5.pptx"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x178 [0086.702] GetFileType (hFile=0x178) returned 0x1 [0086.702] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e60c) returned 1 [0086.702] GetFileType (hFile=0x178) returned 0x1 [0086.702] GetFileSize (in: hFile=0x178, lpFileSizeHigh=0x31e718 | out: lpFileSizeHigh=0x31e718*=0x0) returned 0x2f24 [0086.702] ReadFile (in: hFile=0x178, lpBuffer=0x26f2e34, nNumberOfBytesToRead=0x2f24, lpNumberOfBytesRead=0x31e6c4, lpOverlapped=0x0 | out: lpBuffer=0x26f2e34*, lpNumberOfBytesRead=0x31e6c4*=0x2f24, lpOverlapped=0x0) returned 1 [0086.717] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\mcdNsT5RVFSVyld\\qZqQJke\\YFAmrd4RrOq5.pptx", nBufferLength=0x105, lpBuffer=0x31e108, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\mcdNsT5RVFSVyld\\qZqQJke\\YFAmrd4RrOq5.pptx", lpFilePart=0x0) returned 0x51 [0086.717] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e5fc) returned 1 [0086.717] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\mcdNsT5RVFSVyld\\qZqQJke\\YFAmrd4RrOq5.pptx" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\mcdnst5rvfsvyld\\qzqqjke\\yfamrd4rroq5.pptx"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x178 [0086.717] GetFileType (hFile=0x178) returned 0x1 [0086.718] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e5f8) returned 1 [0086.718] GetFileType (hFile=0x178) returned 0x1 [0086.718] WriteFile (in: hFile=0x178, lpBuffer=0x274e808*, nNumberOfBytesToWrite=0x2f30, lpNumberOfBytesWritten=0x31e6b8, lpOverlapped=0x0 | out: lpBuffer=0x274e808*, lpNumberOfBytesWritten=0x31e6b8*=0x2f30, lpOverlapped=0x0) returned 1 [0086.719] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\mcdNsT5RVFSVyld\\qZqQJke\\YFAmrd4RrOq5.pptx", nBufferLength=0x105, lpBuffer=0x31e23c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\mcdNsT5RVFSVyld\\qZqQJke\\YFAmrd4RrOq5.pptx", lpFilePart=0x0) returned 0x51 [0086.719] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\mcdNsT5RVFSVyld\\qZqQJke\\YFAmrd4RrOq5.pptx", nBufferLength=0x105, lpBuffer=0x31e23c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\mcdNsT5RVFSVyld\\qZqQJke\\YFAmrd4RrOq5.pptx", lpFilePart=0x0) returned 0x51 [0086.719] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e69c) returned 1 [0086.719] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\mcdNsT5RVFSVyld\\qZqQJke\\YFAmrd4RrOq5.pptx" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\mcdnst5rvfsvyld\\qzqqjke\\yfamrd4rroq5.pptx"), fInfoLevelId=0x0, lpFileInformation=0x31e718 | out: lpFileInformation=0x31e718*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x20d129d0, ftCreationTime.dwHighDateTime=0x1d5d7ec, ftLastAccessTime.dwLowDateTime=0xb99a7cc0, ftLastAccessTime.dwHighDateTime=0x1d5e75a, ftLastWriteTime.dwLowDateTime=0x1720bde0, ftLastWriteTime.dwHighDateTime=0x1d6eb7f, nFileSizeHigh=0x0, nFileSizeLow=0x2f30)) returned 1 [0086.719] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e698) returned 1 [0086.719] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\mcdNsT5RVFSVyld\\qZqQJke\\YFAmrd4RrOq5.pptx" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\mcdnst5rvfsvyld\\qzqqjke\\yfamrd4rroq5.pptx"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\mcdNsT5RVFSVyld\\qZqQJke\\YFAmrd4RrOq5.pptx" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\mcdnst5rvfsvyld\\qzqqjke\\yfamrd4rroq5.pptx")) returned 1 [0086.719] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e6cc) returned 1 [0086.719] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\mcdNsT5RVFSVyld\\qZqQJke\\5mEc8mcZ9jfK", nBufferLength=0x105, lpBuffer=0x31e1d4, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\mcdNsT5RVFSVyld\\qZqQJke\\5mEc8mcZ9jfK", lpFilePart=0x0) returned 0x4c [0086.719] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\mcdNsT5RVFSVyld\\qZqQJke\\5mEc8mcZ9jfK\\", nBufferLength=0x105, lpBuffer=0x31e1a8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\mcdNsT5RVFSVyld\\qZqQJke\\5mEc8mcZ9jfK\\", lpFilePart=0x0) returned 0x4d [0086.719] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\mcdNsT5RVFSVyld\\qZqQJke\\5mEc8mcZ9jfK\\*", lpFindFileData=0x31e3f4 | out: lpFindFileData=0x31e3f4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x315eb1a0, ftCreationTime.dwHighDateTime=0x1d5d8b4, ftLastAccessTime.dwLowDateTime=0x1626ca70, ftLastAccessTime.dwHighDateTime=0x1d5e14d, ftLastWriteTime.dwLowDateTime=0x1626ca70, ftLastWriteTime.dwHighDateTime=0x1d5e14d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x381f80 [0086.719] FindNextFileW (in: hFindFile=0x381f80, lpFindFileData=0x31e404 | out: lpFindFileData=0x31e404*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x315eb1a0, ftCreationTime.dwHighDateTime=0x1d5d8b4, ftLastAccessTime.dwLowDateTime=0x1626ca70, ftLastAccessTime.dwHighDateTime=0x1d5e14d, ftLastWriteTime.dwLowDateTime=0x1626ca70, ftLastWriteTime.dwHighDateTime=0x1d5e14d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0086.720] FindNextFileW (in: hFindFile=0x381f80, lpFindFileData=0x31e404 | out: lpFindFileData=0x31e404*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf06ec390, ftCreationTime.dwHighDateTime=0x1d5ddce, ftLastAccessTime.dwLowDateTime=0x42d26d70, ftLastAccessTime.dwHighDateTime=0x1d5d8fd, ftLastWriteTime.dwLowDateTime=0x42d26d70, ftLastWriteTime.dwHighDateTime=0x1d5d8fd, nFileSizeHigh=0x0, nFileSizeLow=0x3c67, dwReserved0=0x0, dwReserved1=0x0, cFileName="jUr6h7f7IjsQGe6JnswI.csv", cAlternateFileName="JUR6H7~1.CSV")) returned 1 [0086.720] FindNextFileW (in: hFindFile=0x381f80, lpFindFileData=0x31e404 | out: lpFindFileData=0x31e404*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7a8c16c0, ftCreationTime.dwHighDateTime=0x1d5e7d1, ftLastAccessTime.dwLowDateTime=0xfb621990, ftLastAccessTime.dwHighDateTime=0x1d5e365, ftLastWriteTime.dwLowDateTime=0xfb621990, ftLastWriteTime.dwHighDateTime=0x1d5e365, nFileSizeHigh=0x0, nFileSizeLow=0x9d68, dwReserved0=0x0, dwReserved1=0x0, cFileName="r8aQr.csv", cAlternateFileName="")) returned 1 [0086.720] FindNextFileW (in: hFindFile=0x381f80, lpFindFileData=0x31e404 | out: lpFindFileData=0x31e404*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xec7a1160, ftCreationTime.dwHighDateTime=0x1d5d84a, ftLastAccessTime.dwLowDateTime=0xac9ee330, ftLastAccessTime.dwHighDateTime=0x1d5e3fe, ftLastWriteTime.dwLowDateTime=0xac9ee330, ftLastWriteTime.dwHighDateTime=0x1d5e3fe, nFileSizeHigh=0x0, nFileSizeLow=0x846b, dwReserved0=0x0, dwReserved1=0x0, cFileName="ZTDDJr-2j.pptx", cAlternateFileName="ZTDDJR~1.PPT")) returned 1 [0086.720] FindNextFileW (in: hFindFile=0x381f80, lpFindFileData=0x31e404 | out: lpFindFileData=0x31e404*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0086.720] FindClose (in: hFindFile=0x381f80 | out: hFindFile=0x381f80) returned 1 [0086.720] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e68c) returned 1 [0086.720] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e698) returned 1 [0086.720] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e6cc) returned 1 [0086.720] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\mcdNsT5RVFSVyld\\qZqQJke\\5mEc8mcZ9jfK", nBufferLength=0x105, lpBuffer=0x31e1d4, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\mcdNsT5RVFSVyld\\qZqQJke\\5mEc8mcZ9jfK", lpFilePart=0x0) returned 0x4c [0086.720] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\mcdNsT5RVFSVyld\\qZqQJke\\5mEc8mcZ9jfK\\", nBufferLength=0x105, lpBuffer=0x31e1a8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\mcdNsT5RVFSVyld\\qZqQJke\\5mEc8mcZ9jfK\\", lpFilePart=0x0) returned 0x4d [0086.720] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\mcdNsT5RVFSVyld\\qZqQJke\\5mEc8mcZ9jfK\\*", lpFindFileData=0x31e3f4 | out: lpFindFileData=0x31e3f4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x315eb1a0, ftCreationTime.dwHighDateTime=0x1d5d8b4, ftLastAccessTime.dwLowDateTime=0x1626ca70, ftLastAccessTime.dwHighDateTime=0x1d5e14d, ftLastWriteTime.dwLowDateTime=0x1626ca70, ftLastWriteTime.dwHighDateTime=0x1d5e14d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x381f80 [0086.728] FindNextFileW (in: hFindFile=0x381f80, lpFindFileData=0x31e404 | out: lpFindFileData=0x31e404*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x315eb1a0, ftCreationTime.dwHighDateTime=0x1d5d8b4, ftLastAccessTime.dwLowDateTime=0x1626ca70, ftLastAccessTime.dwHighDateTime=0x1d5e14d, ftLastWriteTime.dwLowDateTime=0x1626ca70, ftLastWriteTime.dwHighDateTime=0x1d5e14d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0086.728] FindNextFileW (in: hFindFile=0x381f80, lpFindFileData=0x31e404 | out: lpFindFileData=0x31e404*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf06ec390, ftCreationTime.dwHighDateTime=0x1d5ddce, ftLastAccessTime.dwLowDateTime=0x42d26d70, ftLastAccessTime.dwHighDateTime=0x1d5d8fd, ftLastWriteTime.dwLowDateTime=0x42d26d70, ftLastWriteTime.dwHighDateTime=0x1d5d8fd, nFileSizeHigh=0x0, nFileSizeLow=0x3c67, dwReserved0=0x0, dwReserved1=0x0, cFileName="jUr6h7f7IjsQGe6JnswI.csv", cAlternateFileName="JUR6H7~1.CSV")) returned 1 [0086.728] FindNextFileW (in: hFindFile=0x381f80, lpFindFileData=0x31e404 | out: lpFindFileData=0x31e404*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7a8c16c0, ftCreationTime.dwHighDateTime=0x1d5e7d1, ftLastAccessTime.dwLowDateTime=0xfb621990, ftLastAccessTime.dwHighDateTime=0x1d5e365, ftLastWriteTime.dwLowDateTime=0xfb621990, ftLastWriteTime.dwHighDateTime=0x1d5e365, nFileSizeHigh=0x0, nFileSizeLow=0x9d68, dwReserved0=0x0, dwReserved1=0x0, cFileName="r8aQr.csv", cAlternateFileName="")) returned 1 [0086.728] FindNextFileW (in: hFindFile=0x381f80, lpFindFileData=0x31e404 | out: lpFindFileData=0x31e404*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xec7a1160, ftCreationTime.dwHighDateTime=0x1d5d84a, ftLastAccessTime.dwLowDateTime=0xac9ee330, ftLastAccessTime.dwHighDateTime=0x1d5e3fe, ftLastWriteTime.dwLowDateTime=0xac9ee330, ftLastWriteTime.dwHighDateTime=0x1d5e3fe, nFileSizeHigh=0x0, nFileSizeLow=0x846b, dwReserved0=0x0, dwReserved1=0x0, cFileName="ZTDDJr-2j.pptx", cAlternateFileName="ZTDDJR~1.PPT")) returned 1 [0086.728] FindNextFileW (in: hFindFile=0x381f80, lpFindFileData=0x31e404 | out: lpFindFileData=0x31e404*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xec7a1160, ftCreationTime.dwHighDateTime=0x1d5d84a, ftLastAccessTime.dwLowDateTime=0xac9ee330, ftLastAccessTime.dwHighDateTime=0x1d5e3fe, ftLastWriteTime.dwLowDateTime=0xac9ee330, ftLastWriteTime.dwHighDateTime=0x1d5e3fe, nFileSizeHigh=0x0, nFileSizeLow=0x846b, dwReserved0=0x0, dwReserved1=0x0, cFileName="ZTDDJr-2j.pptx", cAlternateFileName="ZTDDJR~1.PPT")) returned 0 [0086.728] FindClose (in: hFindFile=0x381f80 | out: hFindFile=0x381f80) returned 1 [0086.728] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e68c) returned 1 [0086.728] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e698) returned 1 [0086.728] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\mcdNsT5RVFSVyld\\qZqQJke\\5mEc8mcZ9jfK\\jUr6h7f7IjsQGe6JnswI.csv", nBufferLength=0x105, lpBuffer=0x31e0a4, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\mcdNsT5RVFSVyld\\qZqQJke\\5mEc8mcZ9jfK\\jUr6h7f7IjsQGe6JnswI.csv", lpFilePart=0x0) returned 0x65 [0086.728] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e598) returned 1 [0086.729] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\mcdNsT5RVFSVyld\\qZqQJke\\5mEc8mcZ9jfK\\jUr6h7f7IjsQGe6JnswI.csv" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\mcdnst5rvfsvyld\\qzqqjke\\5mec8mcz9jfk\\jur6h7f7ijsqge6jnswi.csv"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x178 [0086.729] GetFileType (hFile=0x178) returned 0x1 [0086.729] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e594) returned 1 [0086.729] GetFileType (hFile=0x178) returned 0x1 [0086.729] GetFileSize (in: hFile=0x178, lpFileSizeHigh=0x31e6a0 | out: lpFileSizeHigh=0x31e6a0*=0x0) returned 0x3c67 [0086.729] ReadFile (in: hFile=0x178, lpBuffer=0x2753f2c, nNumberOfBytesToRead=0x3c67, lpNumberOfBytesRead=0x31e64c, lpOverlapped=0x0 | out: lpBuffer=0x2753f2c*, lpNumberOfBytesRead=0x31e64c*=0x3c67, lpOverlapped=0x0) returned 1 [0086.743] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\mcdNsT5RVFSVyld\\qZqQJke\\5mEc8mcZ9jfK\\jUr6h7f7IjsQGe6JnswI.csv", nBufferLength=0x105, lpBuffer=0x31e090, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\mcdNsT5RVFSVyld\\qZqQJke\\5mEc8mcZ9jfK\\jUr6h7f7IjsQGe6JnswI.csv", lpFilePart=0x0) returned 0x65 [0086.743] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e584) returned 1 [0086.743] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\mcdNsT5RVFSVyld\\qZqQJke\\5mEc8mcZ9jfK\\jUr6h7f7IjsQGe6JnswI.csv" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\mcdnst5rvfsvyld\\qzqqjke\\5mec8mcz9jfk\\jur6h7f7ijsqge6jnswi.csv"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x178 [0086.744] GetFileType (hFile=0x178) returned 0x1 [0086.744] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e580) returned 1 [0086.744] GetFileType (hFile=0x178) returned 0x1 [0086.744] WriteFile (in: hFile=0x178, lpBuffer=0x27b3b44*, nNumberOfBytesToWrite=0x3c70, lpNumberOfBytesWritten=0x31e640, lpOverlapped=0x0 | out: lpBuffer=0x27b3b44*, lpNumberOfBytesWritten=0x31e640*=0x3c70, lpOverlapped=0x0) returned 1 [0086.745] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\mcdNsT5RVFSVyld\\qZqQJke\\5mEc8mcZ9jfK\\jUr6h7f7IjsQGe6JnswI.csv", nBufferLength=0x105, lpBuffer=0x31e1c4, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\mcdNsT5RVFSVyld\\qZqQJke\\5mEc8mcZ9jfK\\jUr6h7f7IjsQGe6JnswI.csv", lpFilePart=0x0) returned 0x65 [0086.745] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\mcdNsT5RVFSVyld\\qZqQJke\\5mEc8mcZ9jfK\\jUr6h7f7IjsQGe6JnswI.csv", nBufferLength=0x105, lpBuffer=0x31e1c4, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\mcdNsT5RVFSVyld\\qZqQJke\\5mEc8mcZ9jfK\\jUr6h7f7IjsQGe6JnswI.csv", lpFilePart=0x0) returned 0x65 [0086.745] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e624) returned 1 [0086.745] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\mcdNsT5RVFSVyld\\qZqQJke\\5mEc8mcZ9jfK\\jUr6h7f7IjsQGe6JnswI.csv" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\mcdnst5rvfsvyld\\qzqqjke\\5mec8mcz9jfk\\jur6h7f7ijsqge6jnswi.csv"), fInfoLevelId=0x0, lpFileInformation=0x31e6a0 | out: lpFileInformation=0x31e6a0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf06ec390, ftCreationTime.dwHighDateTime=0x1d5ddce, ftLastAccessTime.dwLowDateTime=0x42d26d70, ftLastAccessTime.dwHighDateTime=0x1d5d8fd, ftLastWriteTime.dwLowDateTime=0x172580a0, ftLastWriteTime.dwHighDateTime=0x1d6eb7f, nFileSizeHigh=0x0, nFileSizeLow=0x3c70)) returned 1 [0086.745] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e620) returned 1 [0086.745] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\mcdNsT5RVFSVyld\\qZqQJke\\5mEc8mcZ9jfK\\jUr6h7f7IjsQGe6JnswI.csv" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\mcdnst5rvfsvyld\\qzqqjke\\5mec8mcz9jfk\\jur6h7f7ijsqge6jnswi.csv"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\mcdNsT5RVFSVyld\\qZqQJke\\5mEc8mcZ9jfK\\jUr6h7f7IjsQGe6JnswI.csv" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\mcdnst5rvfsvyld\\qzqqjke\\5mec8mcz9jfk\\jur6h7f7ijsqge6jnswi.csv")) returned 1 [0086.746] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\mcdNsT5RVFSVyld\\qZqQJke\\5mEc8mcZ9jfK\\r8aQr.csv", nBufferLength=0x105, lpBuffer=0x31e0a4, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\mcdNsT5RVFSVyld\\qZqQJke\\5mEc8mcZ9jfK\\r8aQr.csv", lpFilePart=0x0) returned 0x56 [0086.746] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e598) returned 1 [0086.746] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\mcdNsT5RVFSVyld\\qZqQJke\\5mEc8mcZ9jfK\\r8aQr.csv" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\mcdnst5rvfsvyld\\qzqqjke\\5mec8mcz9jfk\\r8aqr.csv"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x178 [0086.746] GetFileType (hFile=0x178) returned 0x1 [0086.746] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e594) returned 1 [0086.746] GetFileType (hFile=0x178) returned 0x1 [0086.746] GetFileSize (in: hFile=0x178, lpFileSizeHigh=0x31e6a0 | out: lpFileSizeHigh=0x31e6a0*=0x0) returned 0x9d68 [0086.746] ReadFile (in: hFile=0x178, lpBuffer=0x27b7c34, nNumberOfBytesToRead=0x9d68, lpNumberOfBytesRead=0x31e64c, lpOverlapped=0x0 | out: lpBuffer=0x27b7c34*, lpNumberOfBytesRead=0x31e64c*=0x9d68, lpOverlapped=0x0) returned 1 [0086.765] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\mcdNsT5RVFSVyld\\qZqQJke\\5mEc8mcZ9jfK\\r8aQr.csv", nBufferLength=0x105, lpBuffer=0x31e090, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\mcdNsT5RVFSVyld\\qZqQJke\\5mEc8mcZ9jfK\\r8aQr.csv", lpFilePart=0x0) returned 0x56 [0086.765] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e584) returned 1 [0086.765] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\mcdNsT5RVFSVyld\\qZqQJke\\5mEc8mcZ9jfK\\r8aQr.csv" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\mcdnst5rvfsvyld\\qzqqjke\\5mec8mcz9jfk\\r8aqr.csv"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x178 [0086.766] GetFileType (hFile=0x178) returned 0x1 [0086.766] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e580) returned 1 [0086.766] GetFileType (hFile=0x178) returned 0x1 [0086.766] WriteFile (in: hFile=0x178, lpBuffer=0x264bff8*, nNumberOfBytesToWrite=0x9d70, lpNumberOfBytesWritten=0x31e640, lpOverlapped=0x0 | out: lpBuffer=0x264bff8*, lpNumberOfBytesWritten=0x31e640*=0x9d70, lpOverlapped=0x0) returned 1 [0086.767] CloseHandle (hObject=0x178) returned 1 [0086.767] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\mcdNsT5RVFSVyld\\qZqQJke\\5mEc8mcZ9jfK\\r8aQr.csv", nBufferLength=0x105, lpBuffer=0x31e1c4, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\mcdNsT5RVFSVyld\\qZqQJke\\5mEc8mcZ9jfK\\r8aQr.csv", lpFilePart=0x0) returned 0x56 [0086.768] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\mcdNsT5RVFSVyld\\qZqQJke\\5mEc8mcZ9jfK\\r8aQr.csv", nBufferLength=0x105, lpBuffer=0x31e1c4, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\mcdNsT5RVFSVyld\\qZqQJke\\5mEc8mcZ9jfK\\r8aQr.csv", lpFilePart=0x0) returned 0x56 [0086.768] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e624) returned 1 [0086.768] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\mcdNsT5RVFSVyld\\qZqQJke\\5mEc8mcZ9jfK\\r8aQr.csv" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\mcdnst5rvfsvyld\\qzqqjke\\5mec8mcz9jfk\\r8aqr.csv"), fInfoLevelId=0x0, lpFileInformation=0x31e6a0 | out: lpFileInformation=0x31e6a0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7a8c16c0, ftCreationTime.dwHighDateTime=0x1d5e7d1, ftLastAccessTime.dwLowDateTime=0xfb621990, ftLastAccessTime.dwHighDateTime=0x1d5e365, ftLastWriteTime.dwLowDateTime=0x172a4360, ftLastWriteTime.dwHighDateTime=0x1d6eb7f, nFileSizeHigh=0x0, nFileSizeLow=0x9d70)) returned 1 [0086.768] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e620) returned 1 [0086.768] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\mcdNsT5RVFSVyld\\qZqQJke\\5mEc8mcZ9jfK\\r8aQr.csv" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\mcdnst5rvfsvyld\\qzqqjke\\5mec8mcz9jfk\\r8aqr.csv"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\mcdNsT5RVFSVyld\\qZqQJke\\5mEc8mcZ9jfK\\r8aQr.csv" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\mcdnst5rvfsvyld\\qzqqjke\\5mec8mcz9jfk\\r8aqr.csv")) returned 1 [0086.768] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\mcdNsT5RVFSVyld\\qZqQJke\\5mEc8mcZ9jfK\\ZTDDJr-2j.pptx", nBufferLength=0x105, lpBuffer=0x31e0a4, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\mcdNsT5RVFSVyld\\qZqQJke\\5mEc8mcZ9jfK\\ZTDDJr-2j.pptx", lpFilePart=0x0) returned 0x5b [0086.768] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e598) returned 1 [0086.768] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\mcdNsT5RVFSVyld\\qZqQJke\\5mEc8mcZ9jfK\\ZTDDJr-2j.pptx" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\mcdnst5rvfsvyld\\qzqqjke\\5mec8mcz9jfk\\ztddjr-2j.pptx"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x178 [0086.768] GetFileType (hFile=0x178) returned 0x1 [0086.768] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e594) returned 1 [0086.768] GetFileType (hFile=0x178) returned 0x1 [0086.768] GetFileSize (in: hFile=0x178, lpFileSizeHigh=0x31e6a0 | out: lpFileSizeHigh=0x31e6a0*=0x0) returned 0x846b [0086.768] ReadFile (in: hFile=0x178, lpBuffer=0x2656188, nNumberOfBytesToRead=0x846b, lpNumberOfBytesRead=0x31e64c, lpOverlapped=0x0 | out: lpBuffer=0x2656188*, lpNumberOfBytesRead=0x31e64c*=0x846b, lpOverlapped=0x0) returned 1 [0086.769] CloseHandle (hObject=0x178) returned 1 [0086.809] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\mcdNsT5RVFSVyld\\qZqQJke\\5mEc8mcZ9jfK\\ZTDDJr-2j.pptx", nBufferLength=0x105, lpBuffer=0x31e090, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\mcdNsT5RVFSVyld\\qZqQJke\\5mEc8mcZ9jfK\\ZTDDJr-2j.pptx", lpFilePart=0x0) returned 0x5b [0086.809] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e584) returned 1 [0086.809] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\mcdNsT5RVFSVyld\\qZqQJke\\5mEc8mcZ9jfK\\ZTDDJr-2j.pptx" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\mcdnst5rvfsvyld\\qzqqjke\\5mec8mcz9jfk\\ztddjr-2j.pptx"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x178 [0086.810] GetFileType (hFile=0x178) returned 0x1 [0086.810] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e580) returned 1 [0086.810] GetFileType (hFile=0x178) returned 0x1 [0086.810] WriteFile (in: hFile=0x178, lpBuffer=0x26cc6fc*, nNumberOfBytesToWrite=0x8470, lpNumberOfBytesWritten=0x31e640, lpOverlapped=0x0 | out: lpBuffer=0x26cc6fc*, lpNumberOfBytesWritten=0x31e640*=0x8470, lpOverlapped=0x0) returned 1 [0086.813] CloseHandle (hObject=0x178) returned 1 [0086.813] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\mcdNsT5RVFSVyld\\qZqQJke\\5mEc8mcZ9jfK\\ZTDDJr-2j.pptx", nBufferLength=0x105, lpBuffer=0x31e1c4, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\mcdNsT5RVFSVyld\\qZqQJke\\5mEc8mcZ9jfK\\ZTDDJr-2j.pptx", lpFilePart=0x0) returned 0x5b [0086.813] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\mcdNsT5RVFSVyld\\qZqQJke\\5mEc8mcZ9jfK\\ZTDDJr-2j.pptx", nBufferLength=0x105, lpBuffer=0x31e1c4, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\mcdNsT5RVFSVyld\\qZqQJke\\5mEc8mcZ9jfK\\ZTDDJr-2j.pptx", lpFilePart=0x0) returned 0x5b [0086.813] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e624) returned 1 [0086.813] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\mcdNsT5RVFSVyld\\qZqQJke\\5mEc8mcZ9jfK\\ZTDDJr-2j.pptx" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\mcdnst5rvfsvyld\\qzqqjke\\5mec8mcz9jfk\\ztddjr-2j.pptx"), fInfoLevelId=0x0, lpFileInformation=0x31e6a0 | out: lpFileInformation=0x31e6a0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xec7a1160, ftCreationTime.dwHighDateTime=0x1d5d84a, ftLastAccessTime.dwLowDateTime=0xac9ee330, ftLastAccessTime.dwHighDateTime=0x1d5e3fe, ftLastWriteTime.dwLowDateTime=0x172f0620, ftLastWriteTime.dwHighDateTime=0x1d6eb7f, nFileSizeHigh=0x0, nFileSizeLow=0x8470)) returned 1 [0086.813] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e620) returned 1 [0086.813] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\mcdNsT5RVFSVyld\\qZqQJke\\5mEc8mcZ9jfK\\ZTDDJr-2j.pptx" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\mcdnst5rvfsvyld\\qzqqjke\\5mec8mcz9jfk\\ztddjr-2j.pptx"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\mcdNsT5RVFSVyld\\qZqQJke\\5mEc8mcZ9jfK\\ZTDDJr-2j.pptx" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\mcdnst5rvfsvyld\\qzqqjke\\5mec8mcz9jfk\\ztddjr-2j.pptx")) returned 1 [0086.813] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e6cc) returned 1 [0086.813] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\mcdNsT5RVFSVyld\\qZqQJke\\E5yqHX_c 22spYoHS", nBufferLength=0x105, lpBuffer=0x31e1d4, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\mcdNsT5RVFSVyld\\qZqQJke\\E5yqHX_c 22spYoHS", lpFilePart=0x0) returned 0x51 [0086.813] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\mcdNsT5RVFSVyld\\qZqQJke\\E5yqHX_c 22spYoHS\\", nBufferLength=0x105, lpBuffer=0x31e1a8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\mcdNsT5RVFSVyld\\qZqQJke\\E5yqHX_c 22spYoHS\\", lpFilePart=0x0) returned 0x52 [0086.813] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\mcdNsT5RVFSVyld\\qZqQJke\\E5yqHX_c 22spYoHS\\*", lpFindFileData=0x31e3f4 | out: lpFindFileData=0x31e3f4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8c189040, ftCreationTime.dwHighDateTime=0x1d5e370, ftLastAccessTime.dwLowDateTime=0x9b44cc60, ftLastAccessTime.dwHighDateTime=0x1d5e261, ftLastWriteTime.dwLowDateTime=0x9b44cc60, ftLastWriteTime.dwHighDateTime=0x1d5e261, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x381f80 [0086.814] FindNextFileW (in: hFindFile=0x381f80, lpFindFileData=0x31e404 | out: lpFindFileData=0x31e404*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8c189040, ftCreationTime.dwHighDateTime=0x1d5e370, ftLastAccessTime.dwLowDateTime=0x9b44cc60, ftLastAccessTime.dwHighDateTime=0x1d5e261, ftLastWriteTime.dwLowDateTime=0x9b44cc60, ftLastWriteTime.dwHighDateTime=0x1d5e261, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0086.814] FindNextFileW (in: hFindFile=0x381f80, lpFindFileData=0x31e404 | out: lpFindFileData=0x31e404*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x93928500, ftCreationTime.dwHighDateTime=0x1d5d903, ftLastAccessTime.dwLowDateTime=0xa7123090, ftLastAccessTime.dwHighDateTime=0x1d5dac4, ftLastWriteTime.dwLowDateTime=0xa7123090, ftLastWriteTime.dwHighDateTime=0x1d5dac4, nFileSizeHigh=0x0, nFileSizeLow=0xa3b4, dwReserved0=0x0, dwReserved1=0x0, cFileName="1MlIv-7ANr-ec.rtf", cAlternateFileName="1MLIV-~1.RTF")) returned 1 [0086.814] FindNextFileW (in: hFindFile=0x381f80, lpFindFileData=0x31e404 | out: lpFindFileData=0x31e404*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4f163a00, ftCreationTime.dwHighDateTime=0x1d5d7ca, ftLastAccessTime.dwLowDateTime=0x86d0efc0, ftLastAccessTime.dwHighDateTime=0x1d5daa0, ftLastWriteTime.dwLowDateTime=0x86d0efc0, ftLastWriteTime.dwHighDateTime=0x1d5daa0, nFileSizeHigh=0x0, nFileSizeLow=0x5c4c, dwReserved0=0x0, dwReserved1=0x0, cFileName="CUcIWhXZcN.odp", cAlternateFileName="CUCIWH~1.ODP")) returned 1 [0086.814] FindNextFileW (in: hFindFile=0x381f80, lpFindFileData=0x31e404 | out: lpFindFileData=0x31e404*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc21b8310, ftCreationTime.dwHighDateTime=0x1d5e194, ftLastAccessTime.dwLowDateTime=0x976958f0, ftLastAccessTime.dwHighDateTime=0x1d5d937, ftLastWriteTime.dwLowDateTime=0x976958f0, ftLastWriteTime.dwHighDateTime=0x1d5d937, nFileSizeHigh=0x0, nFileSizeLow=0x4370, dwReserved0=0x0, dwReserved1=0x0, cFileName="fWvZmodXByr bYeQQ7Y.xls", cAlternateFileName="FWVZMO~1.XLS")) returned 1 [0086.814] FindNextFileW (in: hFindFile=0x381f80, lpFindFileData=0x31e404 | out: lpFindFileData=0x31e404*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x87ee64e0, ftCreationTime.dwHighDateTime=0x1d5e4ec, ftLastAccessTime.dwLowDateTime=0x2bb32350, ftLastAccessTime.dwHighDateTime=0x1d5e1b8, ftLastWriteTime.dwLowDateTime=0x2bb32350, ftLastWriteTime.dwHighDateTime=0x1d5e1b8, nFileSizeHigh=0x0, nFileSizeLow=0xa0d5, dwReserved0=0x0, dwReserved1=0x0, cFileName="QUdx6pEkN0ci.ots", cAlternateFileName="QUDX6P~1.OTS")) returned 1 [0086.814] FindNextFileW (in: hFindFile=0x381f80, lpFindFileData=0x31e404 | out: lpFindFileData=0x31e404*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe75e1b40, ftCreationTime.dwHighDateTime=0x1d5e3f3, ftLastAccessTime.dwLowDateTime=0xc39b3b30, ftLastAccessTime.dwHighDateTime=0x1d5e537, ftLastWriteTime.dwLowDateTime=0xc39b3b30, ftLastWriteTime.dwHighDateTime=0x1d5e537, nFileSizeHigh=0x0, nFileSizeLow=0x15d90, dwReserved0=0x0, dwReserved1=0x0, cFileName="SRp8.xls", cAlternateFileName="")) returned 1 [0086.815] FindNextFileW (in: hFindFile=0x381f80, lpFindFileData=0x31e404 | out: lpFindFileData=0x31e404*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x68d99ad0, ftCreationTime.dwHighDateTime=0x1d5dea1, ftLastAccessTime.dwLowDateTime=0x1a3f2d80, ftLastAccessTime.dwHighDateTime=0x1d5d7b8, ftLastWriteTime.dwLowDateTime=0x1a3f2d80, ftLastWriteTime.dwHighDateTime=0x1d5d7b8, nFileSizeHigh=0x0, nFileSizeLow=0x60cf, dwReserved0=0x0, dwReserved1=0x0, cFileName="TKmol_O0z8oXNmmMF.ods", cAlternateFileName="TKMOL_~1.ODS")) returned 1 [0086.815] FindNextFileW (in: hFindFile=0x381f80, lpFindFileData=0x31e404 | out: lpFindFileData=0x31e404*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0086.815] FindClose (in: hFindFile=0x381f80 | out: hFindFile=0x381f80) returned 1 [0086.815] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e68c) returned 1 [0086.815] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e698) returned 1 [0086.815] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e6cc) returned 1 [0086.815] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\mcdNsT5RVFSVyld\\qZqQJke\\E5yqHX_c 22spYoHS", nBufferLength=0x105, lpBuffer=0x31e1d4, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\mcdNsT5RVFSVyld\\qZqQJke\\E5yqHX_c 22spYoHS", lpFilePart=0x0) returned 0x51 [0086.815] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\mcdNsT5RVFSVyld\\qZqQJke\\E5yqHX_c 22spYoHS\\", nBufferLength=0x105, lpBuffer=0x31e1a8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\mcdNsT5RVFSVyld\\qZqQJke\\E5yqHX_c 22spYoHS\\", lpFilePart=0x0) returned 0x52 [0086.815] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\mcdNsT5RVFSVyld\\qZqQJke\\E5yqHX_c 22spYoHS\\*", lpFindFileData=0x31e3f4 | out: lpFindFileData=0x31e3f4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8c189040, ftCreationTime.dwHighDateTime=0x1d5e370, ftLastAccessTime.dwLowDateTime=0x9b44cc60, ftLastAccessTime.dwHighDateTime=0x1d5e261, ftLastWriteTime.dwLowDateTime=0x9b44cc60, ftLastWriteTime.dwHighDateTime=0x1d5e261, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x381f80 [0086.815] FindNextFileW (in: hFindFile=0x381f80, lpFindFileData=0x31e404 | out: lpFindFileData=0x31e404*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8c189040, ftCreationTime.dwHighDateTime=0x1d5e370, ftLastAccessTime.dwLowDateTime=0x9b44cc60, ftLastAccessTime.dwHighDateTime=0x1d5e261, ftLastWriteTime.dwLowDateTime=0x9b44cc60, ftLastWriteTime.dwHighDateTime=0x1d5e261, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0086.815] FindNextFileW (in: hFindFile=0x381f80, lpFindFileData=0x31e404 | out: lpFindFileData=0x31e404*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x93928500, ftCreationTime.dwHighDateTime=0x1d5d903, ftLastAccessTime.dwLowDateTime=0xa7123090, ftLastAccessTime.dwHighDateTime=0x1d5dac4, ftLastWriteTime.dwLowDateTime=0xa7123090, ftLastWriteTime.dwHighDateTime=0x1d5dac4, nFileSizeHigh=0x0, nFileSizeLow=0xa3b4, dwReserved0=0x0, dwReserved1=0x0, cFileName="1MlIv-7ANr-ec.rtf", cAlternateFileName="1MLIV-~1.RTF")) returned 1 [0086.816] FindNextFileW (in: hFindFile=0x381f80, lpFindFileData=0x31e404 | out: lpFindFileData=0x31e404*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4f163a00, ftCreationTime.dwHighDateTime=0x1d5d7ca, ftLastAccessTime.dwLowDateTime=0x86d0efc0, ftLastAccessTime.dwHighDateTime=0x1d5daa0, ftLastWriteTime.dwLowDateTime=0x86d0efc0, ftLastWriteTime.dwHighDateTime=0x1d5daa0, nFileSizeHigh=0x0, nFileSizeLow=0x5c4c, dwReserved0=0x0, dwReserved1=0x0, cFileName="CUcIWhXZcN.odp", cAlternateFileName="CUCIWH~1.ODP")) returned 1 [0086.816] FindNextFileW (in: hFindFile=0x381f80, lpFindFileData=0x31e404 | out: lpFindFileData=0x31e404*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc21b8310, ftCreationTime.dwHighDateTime=0x1d5e194, ftLastAccessTime.dwLowDateTime=0x976958f0, ftLastAccessTime.dwHighDateTime=0x1d5d937, ftLastWriteTime.dwLowDateTime=0x976958f0, ftLastWriteTime.dwHighDateTime=0x1d5d937, nFileSizeHigh=0x0, nFileSizeLow=0x4370, dwReserved0=0x0, dwReserved1=0x0, cFileName="fWvZmodXByr bYeQQ7Y.xls", cAlternateFileName="FWVZMO~1.XLS")) returned 1 [0086.816] FindNextFileW (in: hFindFile=0x381f80, lpFindFileData=0x31e404 | out: lpFindFileData=0x31e404*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x87ee64e0, ftCreationTime.dwHighDateTime=0x1d5e4ec, ftLastAccessTime.dwLowDateTime=0x2bb32350, ftLastAccessTime.dwHighDateTime=0x1d5e1b8, ftLastWriteTime.dwLowDateTime=0x2bb32350, ftLastWriteTime.dwHighDateTime=0x1d5e1b8, nFileSizeHigh=0x0, nFileSizeLow=0xa0d5, dwReserved0=0x0, dwReserved1=0x0, cFileName="QUdx6pEkN0ci.ots", cAlternateFileName="QUDX6P~1.OTS")) returned 1 [0086.816] FindNextFileW (in: hFindFile=0x381f80, lpFindFileData=0x31e404 | out: lpFindFileData=0x31e404*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe75e1b40, ftCreationTime.dwHighDateTime=0x1d5e3f3, ftLastAccessTime.dwLowDateTime=0xc39b3b30, ftLastAccessTime.dwHighDateTime=0x1d5e537, ftLastWriteTime.dwLowDateTime=0xc39b3b30, ftLastWriteTime.dwHighDateTime=0x1d5e537, nFileSizeHigh=0x0, nFileSizeLow=0x15d90, dwReserved0=0x0, dwReserved1=0x0, cFileName="SRp8.xls", cAlternateFileName="")) returned 1 [0086.816] FindNextFileW (in: hFindFile=0x381f80, lpFindFileData=0x31e404 | out: lpFindFileData=0x31e404*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x68d99ad0, ftCreationTime.dwHighDateTime=0x1d5dea1, ftLastAccessTime.dwLowDateTime=0x1a3f2d80, ftLastAccessTime.dwHighDateTime=0x1d5d7b8, ftLastWriteTime.dwLowDateTime=0x1a3f2d80, ftLastWriteTime.dwHighDateTime=0x1d5d7b8, nFileSizeHigh=0x0, nFileSizeLow=0x60cf, dwReserved0=0x0, dwReserved1=0x0, cFileName="TKmol_O0z8oXNmmMF.ods", cAlternateFileName="TKMOL_~1.ODS")) returned 1 [0086.816] FindNextFileW (in: hFindFile=0x381f80, lpFindFileData=0x31e404 | out: lpFindFileData=0x31e404*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x68d99ad0, ftCreationTime.dwHighDateTime=0x1d5dea1, ftLastAccessTime.dwLowDateTime=0x1a3f2d80, ftLastAccessTime.dwHighDateTime=0x1d5d7b8, ftLastWriteTime.dwLowDateTime=0x1a3f2d80, ftLastWriteTime.dwHighDateTime=0x1d5d7b8, nFileSizeHigh=0x0, nFileSizeLow=0x60cf, dwReserved0=0x0, dwReserved1=0x0, cFileName="TKmol_O0z8oXNmmMF.ods", cAlternateFileName="TKMOL_~1.ODS")) returned 0 [0086.816] FindClose (in: hFindFile=0x381f80 | out: hFindFile=0x381f80) returned 1 [0086.817] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e68c) returned 1 [0086.817] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e698) returned 1 [0086.817] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\mcdNsT5RVFSVyld\\qZqQJke\\E5yqHX_c 22spYoHS\\1MlIv-7ANr-ec.rtf", nBufferLength=0x105, lpBuffer=0x31e0a4, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\mcdNsT5RVFSVyld\\qZqQJke\\E5yqHX_c 22spYoHS\\1MlIv-7ANr-ec.rtf", lpFilePart=0x0) returned 0x63 [0086.817] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e598) returned 1 [0086.817] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\mcdNsT5RVFSVyld\\qZqQJke\\E5yqHX_c 22spYoHS\\1MlIv-7ANr-ec.rtf" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\mcdnst5rvfsvyld\\qzqqjke\\e5yqhx_c 22spyohs\\1mliv-7anr-ec.rtf"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x178 [0086.817] GetFileType (hFile=0x178) returned 0x1 [0086.817] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e594) returned 1 [0086.817] GetFileType (hFile=0x178) returned 0x1 [0086.817] GetFileSize (in: hFile=0x178, lpFileSizeHigh=0x31e6a0 | out: lpFileSizeHigh=0x31e6a0*=0x0) returned 0xa3b4 [0086.817] ReadFile (in: hFile=0x178, lpBuffer=0x26d827c, nNumberOfBytesToRead=0xa3b4, lpNumberOfBytesRead=0x31e64c, lpOverlapped=0x0 | out: lpBuffer=0x26d827c*, lpNumberOfBytesRead=0x31e64c*=0xa3b4, lpOverlapped=0x0) returned 1 [0086.818] CloseHandle (hObject=0x178) returned 1 [0086.832] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\mcdNsT5RVFSVyld\\qZqQJke\\E5yqHX_c 22spYoHS\\1MlIv-7ANr-ec.rtf", nBufferLength=0x105, lpBuffer=0x31e090, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\mcdNsT5RVFSVyld\\qZqQJke\\E5yqHX_c 22spYoHS\\1MlIv-7ANr-ec.rtf", lpFilePart=0x0) returned 0x63 [0086.832] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e584) returned 1 [0086.833] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\mcdNsT5RVFSVyld\\qZqQJke\\E5yqHX_c 22spYoHS\\1MlIv-7ANr-ec.rtf" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\mcdnst5rvfsvyld\\qzqqjke\\e5yqhx_c 22spyohs\\1mliv-7anr-ec.rtf"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x178 [0086.834] GetFileType (hFile=0x178) returned 0x1 [0086.834] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e580) returned 1 [0086.834] GetFileType (hFile=0x178) returned 0x1 [0086.834] WriteFile (in: hFile=0x178, lpBuffer=0x2758320*, nNumberOfBytesToWrite=0xa3c0, lpNumberOfBytesWritten=0x31e640, lpOverlapped=0x0 | out: lpBuffer=0x2758320*, lpNumberOfBytesWritten=0x31e640*=0xa3c0, lpOverlapped=0x0) returned 1 [0086.835] CloseHandle (hObject=0x178) returned 1 [0086.835] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\mcdNsT5RVFSVyld\\qZqQJke\\E5yqHX_c 22spYoHS\\1MlIv-7ANr-ec.rtf", nBufferLength=0x105, lpBuffer=0x31e1c4, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\mcdNsT5RVFSVyld\\qZqQJke\\E5yqHX_c 22spYoHS\\1MlIv-7ANr-ec.rtf", lpFilePart=0x0) returned 0x63 [0086.835] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\mcdNsT5RVFSVyld\\qZqQJke\\E5yqHX_c 22spYoHS\\1MlIv-7ANr-ec.rtf", nBufferLength=0x105, lpBuffer=0x31e1c4, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\mcdNsT5RVFSVyld\\qZqQJke\\E5yqHX_c 22spYoHS\\1MlIv-7ANr-ec.rtf", lpFilePart=0x0) returned 0x63 [0086.835] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e624) returned 1 [0086.835] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\mcdNsT5RVFSVyld\\qZqQJke\\E5yqHX_c 22spYoHS\\1MlIv-7ANr-ec.rtf" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\mcdnst5rvfsvyld\\qzqqjke\\e5yqhx_c 22spyohs\\1mliv-7anr-ec.rtf"), fInfoLevelId=0x0, lpFileInformation=0x31e6a0 | out: lpFileInformation=0x31e6a0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x93928500, ftCreationTime.dwHighDateTime=0x1d5d903, ftLastAccessTime.dwLowDateTime=0xa7123090, ftLastAccessTime.dwHighDateTime=0x1d5dac4, ftLastWriteTime.dwLowDateTime=0x1733c8e0, ftLastWriteTime.dwHighDateTime=0x1d6eb7f, nFileSizeHigh=0x0, nFileSizeLow=0xa3c0)) returned 1 [0086.835] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e620) returned 1 [0086.835] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\mcdNsT5RVFSVyld\\qZqQJke\\E5yqHX_c 22spYoHS\\1MlIv-7ANr-ec.rtf" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\mcdnst5rvfsvyld\\qzqqjke\\e5yqhx_c 22spyohs\\1mliv-7anr-ec.rtf"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\mcdNsT5RVFSVyld\\qZqQJke\\E5yqHX_c 22spYoHS\\1MlIv-7ANr-ec.rtf" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\mcdnst5rvfsvyld\\qzqqjke\\e5yqhx_c 22spyohs\\1mliv-7anr-ec.rtf")) returned 1 [0086.836] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\mcdNsT5RVFSVyld\\qZqQJke\\E5yqHX_c 22spYoHS\\fWvZmodXByr bYeQQ7Y.xls", nBufferLength=0x105, lpBuffer=0x31e0a4, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\mcdNsT5RVFSVyld\\qZqQJke\\E5yqHX_c 22spYoHS\\fWvZmodXByr bYeQQ7Y.xls", lpFilePart=0x0) returned 0x69 [0086.836] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e598) returned 1 [0086.836] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\mcdNsT5RVFSVyld\\qZqQJke\\E5yqHX_c 22spYoHS\\fWvZmodXByr bYeQQ7Y.xls" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\mcdnst5rvfsvyld\\qzqqjke\\e5yqhx_c 22spyohs\\fwvzmodxbyr byeqq7y.xls"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x178 [0086.836] GetFileType (hFile=0x178) returned 0x1 [0086.836] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e594) returned 1 [0086.836] GetFileType (hFile=0x178) returned 0x1 [0086.836] GetFileSize (in: hFile=0x178, lpFileSizeHigh=0x31e6a0 | out: lpFileSizeHigh=0x31e6a0*=0x0) returned 0x4370 [0086.836] ReadFile (in: hFile=0x178, lpBuffer=0x2762b9c, nNumberOfBytesToRead=0x4370, lpNumberOfBytesRead=0x31e64c, lpOverlapped=0x0 | out: lpBuffer=0x2762b9c*, lpNumberOfBytesRead=0x31e64c*=0x4370, lpOverlapped=0x0) returned 1 [0086.837] CloseHandle (hObject=0x178) returned 1 [0086.850] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\mcdNsT5RVFSVyld\\qZqQJke\\E5yqHX_c 22spYoHS\\fWvZmodXByr bYeQQ7Y.xls", nBufferLength=0x105, lpBuffer=0x31e090, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\mcdNsT5RVFSVyld\\qZqQJke\\E5yqHX_c 22spYoHS\\fWvZmodXByr bYeQQ7Y.xls", lpFilePart=0x0) returned 0x69 [0086.851] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e584) returned 1 [0086.851] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\mcdNsT5RVFSVyld\\qZqQJke\\E5yqHX_c 22spYoHS\\fWvZmodXByr bYeQQ7Y.xls" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\mcdnst5rvfsvyld\\qzqqjke\\e5yqhx_c 22spyohs\\fwvzmodxbyr byeqq7y.xls"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x178 [0086.851] GetFileType (hFile=0x178) returned 0x1 [0086.852] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e580) returned 1 [0086.852] GetFileType (hFile=0x178) returned 0x1 [0086.852] WriteFile (in: hFile=0x178, lpBuffer=0x27c4b00*, nNumberOfBytesToWrite=0x4380, lpNumberOfBytesWritten=0x31e640, lpOverlapped=0x0 | out: lpBuffer=0x27c4b00*, lpNumberOfBytesWritten=0x31e640*=0x4380, lpOverlapped=0x0) returned 1 [0086.853] CloseHandle (hObject=0x178) returned 1 [0086.853] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\mcdNsT5RVFSVyld\\qZqQJke\\E5yqHX_c 22spYoHS\\fWvZmodXByr bYeQQ7Y.xls", nBufferLength=0x105, lpBuffer=0x31e1c4, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\mcdNsT5RVFSVyld\\qZqQJke\\E5yqHX_c 22spYoHS\\fWvZmodXByr bYeQQ7Y.xls", lpFilePart=0x0) returned 0x69 [0086.853] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\mcdNsT5RVFSVyld\\qZqQJke\\E5yqHX_c 22spYoHS\\fWvZmodXByr bYeQQ7Y.xls", nBufferLength=0x105, lpBuffer=0x31e1c4, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\mcdNsT5RVFSVyld\\qZqQJke\\E5yqHX_c 22spYoHS\\fWvZmodXByr bYeQQ7Y.xls", lpFilePart=0x0) returned 0x69 [0086.853] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e624) returned 1 [0086.853] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\mcdNsT5RVFSVyld\\qZqQJke\\E5yqHX_c 22spYoHS\\fWvZmodXByr bYeQQ7Y.xls" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\mcdnst5rvfsvyld\\qzqqjke\\e5yqhx_c 22spyohs\\fwvzmodxbyr byeqq7y.xls"), fInfoLevelId=0x0, lpFileInformation=0x31e6a0 | out: lpFileInformation=0x31e6a0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc21b8310, ftCreationTime.dwHighDateTime=0x1d5e194, ftLastAccessTime.dwLowDateTime=0x976958f0, ftLastAccessTime.dwHighDateTime=0x1d5d937, ftLastWriteTime.dwLowDateTime=0x17362a40, ftLastWriteTime.dwHighDateTime=0x1d6eb7f, nFileSizeHigh=0x0, nFileSizeLow=0x4380)) returned 1 [0086.853] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e620) returned 1 [0086.853] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\mcdNsT5RVFSVyld\\qZqQJke\\E5yqHX_c 22spYoHS\\fWvZmodXByr bYeQQ7Y.xls" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\mcdnst5rvfsvyld\\qzqqjke\\e5yqhx_c 22spyohs\\fwvzmodxbyr byeqq7y.xls"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\mcdNsT5RVFSVyld\\qZqQJke\\E5yqHX_c 22spYoHS\\fWvZmodXByr bYeQQ7Y.xls" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\mcdnst5rvfsvyld\\qzqqjke\\e5yqhx_c 22spyohs\\fwvzmodxbyr byeqq7y.xls")) returned 1 [0086.853] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\mcdNsT5RVFSVyld\\qZqQJke\\E5yqHX_c 22spYoHS\\SRp8.xls", nBufferLength=0x105, lpBuffer=0x31e0a4, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\mcdNsT5RVFSVyld\\qZqQJke\\E5yqHX_c 22spYoHS\\SRp8.xls", lpFilePart=0x0) returned 0x5a [0086.853] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e598) returned 1 [0086.853] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\mcdNsT5RVFSVyld\\qZqQJke\\E5yqHX_c 22spYoHS\\SRp8.xls" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\mcdnst5rvfsvyld\\qzqqjke\\e5yqhx_c 22spyohs\\srp8.xls"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x178 [0086.853] GetFileType (hFile=0x178) returned 0x1 [0086.853] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e594) returned 1 [0086.854] GetFileType (hFile=0x178) returned 0x1 [0086.854] GetFileSize (in: hFile=0x178, lpFileSizeHigh=0x31e6a0 | out: lpFileSizeHigh=0x31e6a0*=0x0) returned 0x15d90 [0086.854] ReadFile (in: hFile=0x178, lpBuffer=0x37f9cb8, nNumberOfBytesToRead=0x15d90, lpNumberOfBytesRead=0x31e64c, lpOverlapped=0x0 | out: lpBuffer=0x37f9cb8*, lpNumberOfBytesRead=0x31e64c*=0x15d90, lpOverlapped=0x0) returned 1 [0086.856] CloseHandle (hObject=0x178) returned 1 [0086.875] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\mcdNsT5RVFSVyld\\qZqQJke\\E5yqHX_c 22spYoHS\\SRp8.xls", nBufferLength=0x105, lpBuffer=0x31e090, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\mcdNsT5RVFSVyld\\qZqQJke\\E5yqHX_c 22spYoHS\\SRp8.xls", lpFilePart=0x0) returned 0x5a [0086.875] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e584) returned 1 [0086.875] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\mcdNsT5RVFSVyld\\qZqQJke\\E5yqHX_c 22spYoHS\\SRp8.xls" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\mcdnst5rvfsvyld\\qzqqjke\\e5yqhx_c 22spyohs\\srp8.xls"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x178 [0086.876] GetFileType (hFile=0x178) returned 0x1 [0086.876] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e580) returned 1 [0086.876] GetFileType (hFile=0x178) returned 0x1 [0086.876] WriteFile (in: hFile=0x178, lpBuffer=0x3867108*, nNumberOfBytesToWrite=0x15da0, lpNumberOfBytesWritten=0x31e640, lpOverlapped=0x0 | out: lpBuffer=0x3867108*, lpNumberOfBytesWritten=0x31e640*=0x15da0, lpOverlapped=0x0) returned 1 [0086.878] CloseHandle (hObject=0x178) returned 1 [0086.878] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\mcdNsT5RVFSVyld\\qZqQJke\\E5yqHX_c 22spYoHS\\SRp8.xls", nBufferLength=0x105, lpBuffer=0x31e1c4, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\mcdNsT5RVFSVyld\\qZqQJke\\E5yqHX_c 22spYoHS\\SRp8.xls", lpFilePart=0x0) returned 0x5a [0086.934] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\mcdNsT5RVFSVyld\\qZqQJke\\E5yqHX_c 22spYoHS\\SRp8.xls", nBufferLength=0x105, lpBuffer=0x31e1c4, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\mcdNsT5RVFSVyld\\qZqQJke\\E5yqHX_c 22spYoHS\\SRp8.xls", lpFilePart=0x0) returned 0x5a [0086.934] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e624) returned 1 [0086.934] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\mcdNsT5RVFSVyld\\qZqQJke\\E5yqHX_c 22spYoHS\\SRp8.xls" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\mcdnst5rvfsvyld\\qzqqjke\\e5yqhx_c 22spyohs\\srp8.xls"), fInfoLevelId=0x0, lpFileInformation=0x31e6a0 | out: lpFileInformation=0x31e6a0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe75e1b40, ftCreationTime.dwHighDateTime=0x1d5e3f3, ftLastAccessTime.dwLowDateTime=0xc39b3b30, ftLastAccessTime.dwHighDateTime=0x1d5e537, ftLastWriteTime.dwLowDateTime=0x17388ba0, ftLastWriteTime.dwHighDateTime=0x1d6eb7f, nFileSizeHigh=0x0, nFileSizeLow=0x15da0)) returned 1 [0086.934] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e620) returned 1 [0086.934] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\mcdNsT5RVFSVyld\\qZqQJke\\E5yqHX_c 22spYoHS\\SRp8.xls" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\mcdnst5rvfsvyld\\qzqqjke\\e5yqhx_c 22spyohs\\srp8.xls"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\mcdNsT5RVFSVyld\\qZqQJke\\E5yqHX_c 22spYoHS\\SRp8.xls" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\mcdnst5rvfsvyld\\qzqqjke\\e5yqhx_c 22spyohs\\srp8.xls")) returned 1 [0086.935] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e7bc) returned 1 [0086.935] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\My Music", nBufferLength=0x105, lpBuffer=0x31e2c4, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\My Music", lpFilePart=0x0) returned 0x30 [0086.935] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\My Music\\", nBufferLength=0x105, lpBuffer=0x31e298, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\My Music\\", lpFilePart=0x0) returned 0x31 [0086.935] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\My Music\\*", lpFindFileData=0x31e4e4 | out: lpFindFileData=0x31e4e4*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0086.935] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e780) returned 1 [0086.936] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e7bc) returned 1 [0086.936] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\My Pictures", nBufferLength=0x105, lpBuffer=0x31e2c4, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\My Pictures", lpFilePart=0x0) returned 0x33 [0086.936] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\My Pictures\\", nBufferLength=0x105, lpBuffer=0x31e298, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\My Pictures\\", lpFilePart=0x0) returned 0x34 [0086.937] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\My Pictures\\*", lpFindFileData=0x31e4e4 | out: lpFindFileData=0x31e4e4*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0086.937] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e780) returned 1 [0086.938] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e7bc) returned 1 [0086.938] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\My Shapes", nBufferLength=0x105, lpBuffer=0x31e2c4, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\My Shapes", lpFilePart=0x0) returned 0x31 [0086.938] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\My Shapes\\", nBufferLength=0x105, lpBuffer=0x31e298, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\My Shapes\\", lpFilePart=0x0) returned 0x32 [0086.938] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\My Shapes\\*", lpFindFileData=0x31e4e4 | out: lpFindFileData=0x31e4e4*(dwFileAttributes=0x14, ftCreationTime.dwLowDateTime=0x9e9e4460, ftCreationTime.dwHighDateTime=0x1d305ee, ftLastAccessTime.dwLowDateTime=0x9ebad4e0, ftLastAccessTime.dwHighDateTime=0x1d305ee, ftLastWriteTime.dwLowDateTime=0x9ebad4e0, ftLastWriteTime.dwHighDateTime=0x1d305ee, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x381b40 [0086.938] FindNextFileW (in: hFindFile=0x381b40, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x14, ftCreationTime.dwLowDateTime=0x9e9e4460, ftCreationTime.dwHighDateTime=0x1d305ee, ftLastAccessTime.dwLowDateTime=0x9ebad4e0, ftLastAccessTime.dwHighDateTime=0x1d305ee, ftLastWriteTime.dwLowDateTime=0x9ebad4e0, ftLastWriteTime.dwHighDateTime=0x1d305ee, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0086.939] FindNextFileW (in: hFindFile=0x381b40, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x2, ftCreationTime.dwLowDateTime=0x9ebad4e0, ftCreationTime.dwHighDateTime=0x1d305ee, ftLastAccessTime.dwLowDateTime=0x9ebad4e0, ftLastAccessTime.dwHighDateTime=0x1d305ee, ftLastWriteTime.dwLowDateTime=0x9ebf97a0, ftLastWriteTime.dwHighDateTime=0x1d305ee, nFileSizeHigh=0x0, nFileSizeLow=0xd8, dwReserved0=0x0, dwReserved1=0x0, cFileName="desktop.ini", cAlternateFileName="")) returned 1 [0086.939] FindNextFileW (in: hFindFile=0x381b40, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9e9e4460, ftCreationTime.dwHighDateTime=0x1d305ee, ftLastAccessTime.dwLowDateTime=0x9e9e4460, ftLastAccessTime.dwHighDateTime=0x1d305ee, ftLastWriteTime.dwLowDateTime=0x9e9e4460, ftLastWriteTime.dwHighDateTime=0x1d305ee, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Favorites.vss", cAlternateFileName="FAVORI~1.VSS")) returned 1 [0086.939] FindNextFileW (in: hFindFile=0x381b40, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x12, ftCreationTime.dwLowDateTime=0x9ebad4e0, ftCreationTime.dwHighDateTime=0x1d305ee, ftLastAccessTime.dwLowDateTime=0x9ebad4e0, ftLastAccessTime.dwHighDateTime=0x1d305ee, ftLastWriteTime.dwLowDateTime=0x9ebad4e0, ftLastWriteTime.dwHighDateTime=0x1d305ee, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="_private", cAlternateFileName="")) returned 1 [0086.939] FindNextFileW (in: hFindFile=0x381b40, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x12, ftCreationTime.dwLowDateTime=0x9ebad4e0, ftCreationTime.dwHighDateTime=0x1d305ee, ftLastAccessTime.dwLowDateTime=0x9ebad4e0, ftLastAccessTime.dwHighDateTime=0x1d305ee, ftLastWriteTime.dwLowDateTime=0x9ebad4e0, ftLastWriteTime.dwHighDateTime=0x1d305ee, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="_private", cAlternateFileName="")) returned 0 [0086.939] FindClose (in: hFindFile=0x381b40 | out: hFindFile=0x381b40) returned 1 [0086.939] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e77c) returned 1 [0086.939] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e788) returned 1 [0086.939] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e7bc) returned 1 [0086.939] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\My Shapes", nBufferLength=0x105, lpBuffer=0x31e2c4, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\My Shapes", lpFilePart=0x0) returned 0x31 [0086.939] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\My Shapes\\", nBufferLength=0x105, lpBuffer=0x31e298, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\My Shapes\\", lpFilePart=0x0) returned 0x32 [0086.939] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\My Shapes\\*", lpFindFileData=0x31e4e4 | out: lpFindFileData=0x31e4e4*(dwFileAttributes=0x14, ftCreationTime.dwLowDateTime=0x9e9e4460, ftCreationTime.dwHighDateTime=0x1d305ee, ftLastAccessTime.dwLowDateTime=0x9ebad4e0, ftLastAccessTime.dwHighDateTime=0x1d305ee, ftLastWriteTime.dwLowDateTime=0x9ebad4e0, ftLastWriteTime.dwHighDateTime=0x1d305ee, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x381b40 [0086.940] FindNextFileW (in: hFindFile=0x381b40, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x14, ftCreationTime.dwLowDateTime=0x9e9e4460, ftCreationTime.dwHighDateTime=0x1d305ee, ftLastAccessTime.dwLowDateTime=0x9ebad4e0, ftLastAccessTime.dwHighDateTime=0x1d305ee, ftLastWriteTime.dwLowDateTime=0x9ebad4e0, ftLastWriteTime.dwHighDateTime=0x1d305ee, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0086.940] FindNextFileW (in: hFindFile=0x381b40, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x2, ftCreationTime.dwLowDateTime=0x9ebad4e0, ftCreationTime.dwHighDateTime=0x1d305ee, ftLastAccessTime.dwLowDateTime=0x9ebad4e0, ftLastAccessTime.dwHighDateTime=0x1d305ee, ftLastWriteTime.dwLowDateTime=0x9ebf97a0, ftLastWriteTime.dwHighDateTime=0x1d305ee, nFileSizeHigh=0x0, nFileSizeLow=0xd8, dwReserved0=0x0, dwReserved1=0x0, cFileName="desktop.ini", cAlternateFileName="")) returned 1 [0086.940] FindNextFileW (in: hFindFile=0x381b40, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9e9e4460, ftCreationTime.dwHighDateTime=0x1d305ee, ftLastAccessTime.dwLowDateTime=0x9e9e4460, ftLastAccessTime.dwHighDateTime=0x1d305ee, ftLastWriteTime.dwLowDateTime=0x9e9e4460, ftLastWriteTime.dwHighDateTime=0x1d305ee, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Favorites.vss", cAlternateFileName="FAVORI~1.VSS")) returned 1 [0086.940] FindNextFileW (in: hFindFile=0x381b40, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x12, ftCreationTime.dwLowDateTime=0x9ebad4e0, ftCreationTime.dwHighDateTime=0x1d305ee, ftLastAccessTime.dwLowDateTime=0x9ebad4e0, ftLastAccessTime.dwHighDateTime=0x1d305ee, ftLastWriteTime.dwLowDateTime=0x9ebad4e0, ftLastWriteTime.dwHighDateTime=0x1d305ee, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="_private", cAlternateFileName="")) returned 1 [0086.940] FindNextFileW (in: hFindFile=0x381b40, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0086.940] FindClose (in: hFindFile=0x381b40 | out: hFindFile=0x381b40) returned 1 [0086.940] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e77c) returned 1 [0086.940] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e788) returned 1 [0086.940] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e744) returned 1 [0086.940] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\My Shapes\\_private", nBufferLength=0x105, lpBuffer=0x31e24c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\My Shapes\\_private", lpFilePart=0x0) returned 0x3a [0086.940] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\My Shapes\\_private\\", nBufferLength=0x105, lpBuffer=0x31e220, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\My Shapes\\_private\\", lpFilePart=0x0) returned 0x3b [0086.941] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\My Shapes\\_private\\*", lpFindFileData=0x31e46c | out: lpFindFileData=0x31e46c*(dwFileAttributes=0x12, ftCreationTime.dwLowDateTime=0x9ebad4e0, ftCreationTime.dwHighDateTime=0x1d305ee, ftLastAccessTime.dwLowDateTime=0x9ebad4e0, ftLastAccessTime.dwHighDateTime=0x1d305ee, ftLastWriteTime.dwLowDateTime=0x9ebad4e0, ftLastWriteTime.dwHighDateTime=0x1d305ee, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x381b40 [0086.944] FindNextFileW (in: hFindFile=0x381b40, lpFindFileData=0x31e47c | out: lpFindFileData=0x31e47c*(dwFileAttributes=0x12, ftCreationTime.dwLowDateTime=0x9ebad4e0, ftCreationTime.dwHighDateTime=0x1d305ee, ftLastAccessTime.dwLowDateTime=0x9ebad4e0, ftLastAccessTime.dwHighDateTime=0x1d305ee, ftLastWriteTime.dwLowDateTime=0x9ebad4e0, ftLastWriteTime.dwHighDateTime=0x1d305ee, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0086.944] FindNextFileW (in: hFindFile=0x381b40, lpFindFileData=0x31e47c | out: lpFindFileData=0x31e47c*(dwFileAttributes=0x2, ftCreationTime.dwLowDateTime=0x9ebad4e0, ftCreationTime.dwHighDateTime=0x1d305ee, ftLastAccessTime.dwLowDateTime=0x9ebad4e0, ftLastAccessTime.dwHighDateTime=0x1d305ee, ftLastWriteTime.dwLowDateTime=0x9ebf97a0, ftLastWriteTime.dwHighDateTime=0x1d305ee, nFileSizeHigh=0x0, nFileSizeLow=0x74e6, dwReserved0=0x0, dwReserved1=0x0, cFileName="folder.ico", cAlternateFileName="")) returned 1 [0086.944] FindNextFileW (in: hFindFile=0x381b40, lpFindFileData=0x31e47c | out: lpFindFileData=0x31e47c*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0086.944] FindClose (in: hFindFile=0x381b40 | out: hFindFile=0x381b40) returned 1 [0086.944] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e704) returned 1 [0086.944] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e710) returned 1 [0086.944] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e744) returned 1 [0086.944] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\My Shapes\\_private", nBufferLength=0x105, lpBuffer=0x31e24c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\My Shapes\\_private", lpFilePart=0x0) returned 0x3a [0086.944] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\My Shapes\\_private\\", nBufferLength=0x105, lpBuffer=0x31e220, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\My Shapes\\_private\\", lpFilePart=0x0) returned 0x3b [0086.944] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\My Shapes\\_private\\*", lpFindFileData=0x31e46c | out: lpFindFileData=0x31e46c*(dwFileAttributes=0x12, ftCreationTime.dwLowDateTime=0x9ebad4e0, ftCreationTime.dwHighDateTime=0x1d305ee, ftLastAccessTime.dwLowDateTime=0x9ebad4e0, ftLastAccessTime.dwHighDateTime=0x1d305ee, ftLastWriteTime.dwLowDateTime=0x9ebad4e0, ftLastWriteTime.dwHighDateTime=0x1d305ee, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x381b40 [0086.945] FindNextFileW (in: hFindFile=0x381b40, lpFindFileData=0x31e47c | out: lpFindFileData=0x31e47c*(dwFileAttributes=0x12, ftCreationTime.dwLowDateTime=0x9ebad4e0, ftCreationTime.dwHighDateTime=0x1d305ee, ftLastAccessTime.dwLowDateTime=0x9ebad4e0, ftLastAccessTime.dwHighDateTime=0x1d305ee, ftLastWriteTime.dwLowDateTime=0x9ebad4e0, ftLastWriteTime.dwHighDateTime=0x1d305ee, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0086.945] FindNextFileW (in: hFindFile=0x381b40, lpFindFileData=0x31e47c | out: lpFindFileData=0x31e47c*(dwFileAttributes=0x2, ftCreationTime.dwLowDateTime=0x9ebad4e0, ftCreationTime.dwHighDateTime=0x1d305ee, ftLastAccessTime.dwLowDateTime=0x9ebad4e0, ftLastAccessTime.dwHighDateTime=0x1d305ee, ftLastWriteTime.dwLowDateTime=0x9ebf97a0, ftLastWriteTime.dwHighDateTime=0x1d305ee, nFileSizeHigh=0x0, nFileSizeLow=0x74e6, dwReserved0=0x0, dwReserved1=0x0, cFileName="folder.ico", cAlternateFileName="")) returned 1 [0086.945] FindNextFileW (in: hFindFile=0x381b40, lpFindFileData=0x31e47c | out: lpFindFileData=0x31e47c*(dwFileAttributes=0x2, ftCreationTime.dwLowDateTime=0x9ebad4e0, ftCreationTime.dwHighDateTime=0x1d305ee, ftLastAccessTime.dwLowDateTime=0x9ebad4e0, ftLastAccessTime.dwHighDateTime=0x1d305ee, ftLastWriteTime.dwLowDateTime=0x9ebf97a0, ftLastWriteTime.dwHighDateTime=0x1d305ee, nFileSizeHigh=0x0, nFileSizeLow=0x74e6, dwReserved0=0x0, dwReserved1=0x0, cFileName="folder.ico", cAlternateFileName="")) returned 0 [0086.945] FindClose (in: hFindFile=0x381b40 | out: hFindFile=0x381b40) returned 1 [0086.945] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e704) returned 1 [0086.945] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e710) returned 1 [0086.945] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e7bc) returned 1 [0086.945] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\My Videos", nBufferLength=0x105, lpBuffer=0x31e2c4, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\My Videos", lpFilePart=0x0) returned 0x31 [0086.945] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\My Videos\\", nBufferLength=0x105, lpBuffer=0x31e298, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\My Videos\\", lpFilePart=0x0) returned 0x32 [0086.945] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\My Videos\\*", lpFindFileData=0x31e4e4 | out: lpFindFileData=0x31e4e4*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0086.945] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e780) returned 1 [0086.947] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e7bc) returned 1 [0086.947] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\Outlook Files", nBufferLength=0x105, lpBuffer=0x31e2c4, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\Outlook Files", lpFilePart=0x0) returned 0x35 [0086.947] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\Outlook Files\\", nBufferLength=0x105, lpBuffer=0x31e298, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\Outlook Files\\", lpFilePart=0x0) returned 0x36 [0086.947] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\Outlook Files\\*", lpFindFileData=0x31e4e4 | out: lpFindFileData=0x31e4e4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5a7a9f80, ftCreationTime.dwHighDateTime=0x1d2fad7, ftLastAccessTime.dwLowDateTime=0x8a4af3c0, ftLastAccessTime.dwHighDateTime=0x1d5e82a, ftLastWriteTime.dwLowDateTime=0x8a4af3c0, ftLastWriteTime.dwHighDateTime=0x1d5e82a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x381b40 [0086.947] FindNextFileW (in: hFindFile=0x381b40, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5a7a9f80, ftCreationTime.dwHighDateTime=0x1d2fad7, ftLastAccessTime.dwLowDateTime=0x8a4af3c0, ftLastAccessTime.dwHighDateTime=0x1d5e82a, ftLastWriteTime.dwLowDateTime=0x8a4af3c0, ftLastWriteTime.dwHighDateTime=0x1d5e82a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0086.947] FindNextFileW (in: hFindFile=0x381b40, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x5a868660, ftCreationTime.dwHighDateTime=0x1d2fad7, ftLastAccessTime.dwLowDateTime=0x5a868660, ftLastAccessTime.dwHighDateTime=0x1d2fad7, ftLastWriteTime.dwLowDateTime=0x8a4fb680, ftLastWriteTime.dwHighDateTime=0x1d5e82a, nFileSizeHigh=0x0, nFileSizeLow=0x42400, dwReserved0=0x0, dwReserved1=0x0, cFileName="voeimd@djhreuu.uhd.pst", cAlternateFileName="VOEIMD~1.PST")) returned 1 [0086.947] FindNextFileW (in: hFindFile=0x381b40, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0086.947] FindClose (in: hFindFile=0x381b40 | out: hFindFile=0x381b40) returned 1 [0086.947] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e77c) returned 1 [0086.948] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e788) returned 1 [0086.948] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e7bc) returned 1 [0086.948] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\Outlook Files", nBufferLength=0x105, lpBuffer=0x31e2c4, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\Outlook Files", lpFilePart=0x0) returned 0x35 [0086.948] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\Outlook Files\\", nBufferLength=0x105, lpBuffer=0x31e298, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\Outlook Files\\", lpFilePart=0x0) returned 0x36 [0086.948] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\Outlook Files\\*", lpFindFileData=0x31e4e4 | out: lpFindFileData=0x31e4e4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5a7a9f80, ftCreationTime.dwHighDateTime=0x1d2fad7, ftLastAccessTime.dwLowDateTime=0x8a4af3c0, ftLastAccessTime.dwHighDateTime=0x1d5e82a, ftLastWriteTime.dwLowDateTime=0x8a4af3c0, ftLastWriteTime.dwHighDateTime=0x1d5e82a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x381b40 [0086.948] FindNextFileW (in: hFindFile=0x381b40, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5a7a9f80, ftCreationTime.dwHighDateTime=0x1d2fad7, ftLastAccessTime.dwLowDateTime=0x8a4af3c0, ftLastAccessTime.dwHighDateTime=0x1d5e82a, ftLastWriteTime.dwLowDateTime=0x8a4af3c0, ftLastWriteTime.dwHighDateTime=0x1d5e82a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0086.948] FindNextFileW (in: hFindFile=0x381b40, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x5a868660, ftCreationTime.dwHighDateTime=0x1d2fad7, ftLastAccessTime.dwLowDateTime=0x5a868660, ftLastAccessTime.dwHighDateTime=0x1d2fad7, ftLastWriteTime.dwLowDateTime=0x8a4fb680, ftLastWriteTime.dwHighDateTime=0x1d5e82a, nFileSizeHigh=0x0, nFileSizeLow=0x42400, dwReserved0=0x0, dwReserved1=0x0, cFileName="voeimd@djhreuu.uhd.pst", cAlternateFileName="VOEIMD~1.PST")) returned 1 [0086.948] FindNextFileW (in: hFindFile=0x381b40, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x5a868660, ftCreationTime.dwHighDateTime=0x1d2fad7, ftLastAccessTime.dwLowDateTime=0x5a868660, ftLastAccessTime.dwHighDateTime=0x1d2fad7, ftLastWriteTime.dwLowDateTime=0x8a4fb680, ftLastWriteTime.dwHighDateTime=0x1d5e82a, nFileSizeHigh=0x0, nFileSizeLow=0x42400, dwReserved0=0x0, dwReserved1=0x0, cFileName="voeimd@djhreuu.uhd.pst", cAlternateFileName="VOEIMD~1.PST")) returned 0 [0086.948] FindClose (in: hFindFile=0x381b40 | out: hFindFile=0x381b40) returned 1 [0086.948] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e77c) returned 1 [0086.948] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e788) returned 1 [0086.948] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e7bc) returned 1 [0086.949] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\pC9__AmTieaQ3iZVw9R8", nBufferLength=0x105, lpBuffer=0x31e2c4, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\pC9__AmTieaQ3iZVw9R8", lpFilePart=0x0) returned 0x3c [0086.949] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\pC9__AmTieaQ3iZVw9R8\\", nBufferLength=0x105, lpBuffer=0x31e298, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\pC9__AmTieaQ3iZVw9R8\\", lpFilePart=0x0) returned 0x3d [0086.949] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\pC9__AmTieaQ3iZVw9R8\\*", lpFindFileData=0x31e4e4 | out: lpFindFileData=0x31e4e4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd0522f10, ftCreationTime.dwHighDateTime=0x1d5e7ed, ftLastAccessTime.dwLowDateTime=0x5c61c6e0, ftLastAccessTime.dwHighDateTime=0x1d5e08d, ftLastWriteTime.dwLowDateTime=0x5c61c6e0, ftLastWriteTime.dwHighDateTime=0x1d5e08d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x381b40 [0086.949] FindNextFileW (in: hFindFile=0x381b40, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd0522f10, ftCreationTime.dwHighDateTime=0x1d5e7ed, ftLastAccessTime.dwLowDateTime=0x5c61c6e0, ftLastAccessTime.dwHighDateTime=0x1d5e08d, ftLastWriteTime.dwLowDateTime=0x5c61c6e0, ftLastWriteTime.dwHighDateTime=0x1d5e08d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0086.949] FindNextFileW (in: hFindFile=0x381b40, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xb98d7da0, ftCreationTime.dwHighDateTime=0x1d5db97, ftLastAccessTime.dwLowDateTime=0x666f3220, ftLastAccessTime.dwHighDateTime=0x1d5e7c3, ftLastWriteTime.dwLowDateTime=0x666f3220, ftLastWriteTime.dwHighDateTime=0x1d5e7c3, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="QIviB1J8S42yLfp", cAlternateFileName="QIVIB1~1")) returned 1 [0086.949] FindNextFileW (in: hFindFile=0x381b40, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd2a6a150, ftCreationTime.dwHighDateTime=0x1d5e677, ftLastAccessTime.dwLowDateTime=0xa2d1f2c0, ftLastAccessTime.dwHighDateTime=0x1d5e2af, ftLastWriteTime.dwLowDateTime=0xa2d1f2c0, ftLastWriteTime.dwHighDateTime=0x1d5e2af, nFileSizeHigh=0x0, nFileSizeLow=0xcc3a, dwReserved0=0x0, dwReserved1=0x0, cFileName="Xzz-K fFe.odt", cAlternateFileName="XZZ-KF~1.ODT")) returned 1 [0086.949] FindNextFileW (in: hFindFile=0x381b40, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0086.949] FindClose (in: hFindFile=0x381b40 | out: hFindFile=0x381b40) returned 1 [0086.949] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e77c) returned 1 [0086.949] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e788) returned 1 [0086.949] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e7bc) returned 1 [0086.949] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\pC9__AmTieaQ3iZVw9R8", nBufferLength=0x105, lpBuffer=0x31e2c4, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\pC9__AmTieaQ3iZVw9R8", lpFilePart=0x0) returned 0x3c [0086.950] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\pC9__AmTieaQ3iZVw9R8\\", nBufferLength=0x105, lpBuffer=0x31e298, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\pC9__AmTieaQ3iZVw9R8\\", lpFilePart=0x0) returned 0x3d [0086.950] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\pC9__AmTieaQ3iZVw9R8\\*", lpFindFileData=0x31e4e4 | out: lpFindFileData=0x31e4e4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd0522f10, ftCreationTime.dwHighDateTime=0x1d5e7ed, ftLastAccessTime.dwLowDateTime=0x5c61c6e0, ftLastAccessTime.dwHighDateTime=0x1d5e08d, ftLastWriteTime.dwLowDateTime=0x5c61c6e0, ftLastWriteTime.dwHighDateTime=0x1d5e08d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x381b40 [0086.950] FindNextFileW (in: hFindFile=0x381b40, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd0522f10, ftCreationTime.dwHighDateTime=0x1d5e7ed, ftLastAccessTime.dwLowDateTime=0x5c61c6e0, ftLastAccessTime.dwHighDateTime=0x1d5e08d, ftLastWriteTime.dwLowDateTime=0x5c61c6e0, ftLastWriteTime.dwHighDateTime=0x1d5e08d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0086.950] FindNextFileW (in: hFindFile=0x381b40, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xb98d7da0, ftCreationTime.dwHighDateTime=0x1d5db97, ftLastAccessTime.dwLowDateTime=0x666f3220, ftLastAccessTime.dwHighDateTime=0x1d5e7c3, ftLastWriteTime.dwLowDateTime=0x666f3220, ftLastWriteTime.dwHighDateTime=0x1d5e7c3, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="QIviB1J8S42yLfp", cAlternateFileName="QIVIB1~1")) returned 1 [0086.950] FindNextFileW (in: hFindFile=0x381b40, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd2a6a150, ftCreationTime.dwHighDateTime=0x1d5e677, ftLastAccessTime.dwLowDateTime=0xa2d1f2c0, ftLastAccessTime.dwHighDateTime=0x1d5e2af, ftLastWriteTime.dwLowDateTime=0xa2d1f2c0, ftLastWriteTime.dwHighDateTime=0x1d5e2af, nFileSizeHigh=0x0, nFileSizeLow=0xcc3a, dwReserved0=0x0, dwReserved1=0x0, cFileName="Xzz-K fFe.odt", cAlternateFileName="XZZ-KF~1.ODT")) returned 1 [0086.950] FindNextFileW (in: hFindFile=0x381b40, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd2a6a150, ftCreationTime.dwHighDateTime=0x1d5e677, ftLastAccessTime.dwLowDateTime=0xa2d1f2c0, ftLastAccessTime.dwHighDateTime=0x1d5e2af, ftLastWriteTime.dwLowDateTime=0xa2d1f2c0, ftLastWriteTime.dwHighDateTime=0x1d5e2af, nFileSizeHigh=0x0, nFileSizeLow=0xcc3a, dwReserved0=0x0, dwReserved1=0x0, cFileName="Xzz-K fFe.odt", cAlternateFileName="XZZ-KF~1.ODT")) returned 0 [0086.950] FindClose (in: hFindFile=0x381b40 | out: hFindFile=0x381b40) returned 1 [0086.950] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e77c) returned 1 [0086.950] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e788) returned 1 [0086.950] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\pC9__AmTieaQ3iZVw9R8\\Xzz-K fFe.odt", nBufferLength=0x105, lpBuffer=0x31e194, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\pC9__AmTieaQ3iZVw9R8\\Xzz-K fFe.odt", lpFilePart=0x0) returned 0x4a [0086.951] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e688) returned 1 [0086.951] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\pC9__AmTieaQ3iZVw9R8\\Xzz-K fFe.odt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\pc9__amtieaq3izvw9r8\\xzz-k ffe.odt"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x178 [0086.951] GetFileType (hFile=0x178) returned 0x1 [0086.951] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e684) returned 1 [0086.951] GetFileType (hFile=0x178) returned 0x1 [0086.951] GetFileSize (in: hFile=0x178, lpFileSizeHigh=0x31e790 | out: lpFileSizeHigh=0x31e790*=0x0) returned 0xcc3a [0086.951] ReadFile (in: hFile=0x178, lpBuffer=0x281e64c, nNumberOfBytesToRead=0xcc3a, lpNumberOfBytesRead=0x31e73c, lpOverlapped=0x0 | out: lpBuffer=0x281e64c*, lpNumberOfBytesRead=0x31e73c*=0xcc3a, lpOverlapped=0x0) returned 1 [0086.952] CloseHandle (hObject=0x178) returned 1 [0086.997] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\pC9__AmTieaQ3iZVw9R8\\Xzz-K fFe.odt", nBufferLength=0x105, lpBuffer=0x31e180, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\pC9__AmTieaQ3iZVw9R8\\Xzz-K fFe.odt", lpFilePart=0x0) returned 0x4a [0086.997] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e674) returned 1 [0086.997] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\pC9__AmTieaQ3iZVw9R8\\Xzz-K fFe.odt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\pc9__amtieaq3izvw9r8\\xzz-k ffe.odt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x178 [0086.998] GetFileType (hFile=0x178) returned 0x1 [0086.998] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e670) returned 1 [0086.998] GetFileType (hFile=0x178) returned 0x1 [0086.998] WriteFile (in: hFile=0x178, lpBuffer=0x2891908*, nNumberOfBytesToWrite=0xcc40, lpNumberOfBytesWritten=0x31e730, lpOverlapped=0x0 | out: lpBuffer=0x2891908*, lpNumberOfBytesWritten=0x31e730*=0xcc40, lpOverlapped=0x0) returned 1 [0087.000] CloseHandle (hObject=0x178) returned 1 [0087.000] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\pC9__AmTieaQ3iZVw9R8\\Xzz-K fFe.odt", nBufferLength=0x105, lpBuffer=0x31e2b4, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\pC9__AmTieaQ3iZVw9R8\\Xzz-K fFe.odt", lpFilePart=0x0) returned 0x4a [0087.000] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\pC9__AmTieaQ3iZVw9R8\\Xzz-K fFe.odt", nBufferLength=0x105, lpBuffer=0x31e2b4, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\pC9__AmTieaQ3iZVw9R8\\Xzz-K fFe.odt", lpFilePart=0x0) returned 0x4a [0087.000] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e714) returned 1 [0087.000] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\pC9__AmTieaQ3iZVw9R8\\Xzz-K fFe.odt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\pc9__amtieaq3izvw9r8\\xzz-k ffe.odt"), fInfoLevelId=0x0, lpFileInformation=0x31e790 | out: lpFileInformation=0x31e790*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd2a6a150, ftCreationTime.dwHighDateTime=0x1d5e677, ftLastAccessTime.dwLowDateTime=0xa2d1f2c0, ftLastAccessTime.dwHighDateTime=0x1d5e2af, ftLastWriteTime.dwLowDateTime=0x174b96a0, ftLastWriteTime.dwHighDateTime=0x1d6eb7f, nFileSizeHigh=0x0, nFileSizeLow=0xcc40)) returned 1 [0087.000] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e710) returned 1 [0087.000] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\pC9__AmTieaQ3iZVw9R8\\Xzz-K fFe.odt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\pc9__amtieaq3izvw9r8\\xzz-k ffe.odt"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\pC9__AmTieaQ3iZVw9R8\\Xzz-K fFe.odt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\pc9__amtieaq3izvw9r8\\xzz-k ffe.odt")) returned 1 [0087.000] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e744) returned 1 [0087.000] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\pC9__AmTieaQ3iZVw9R8\\QIviB1J8S42yLfp", nBufferLength=0x105, lpBuffer=0x31e24c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\pC9__AmTieaQ3iZVw9R8\\QIviB1J8S42yLfp", lpFilePart=0x0) returned 0x4c [0087.000] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\pC9__AmTieaQ3iZVw9R8\\QIviB1J8S42yLfp\\", nBufferLength=0x105, lpBuffer=0x31e220, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\pC9__AmTieaQ3iZVw9R8\\QIviB1J8S42yLfp\\", lpFilePart=0x0) returned 0x4d [0087.001] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\pC9__AmTieaQ3iZVw9R8\\QIviB1J8S42yLfp\\*", lpFindFileData=0x31e46c | out: lpFindFileData=0x31e46c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xb98d7da0, ftCreationTime.dwHighDateTime=0x1d5db97, ftLastAccessTime.dwLowDateTime=0x666f3220, ftLastAccessTime.dwHighDateTime=0x1d5e7c3, ftLastWriteTime.dwLowDateTime=0x666f3220, ftLastWriteTime.dwHighDateTime=0x1d5e7c3, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x381dc0 [0087.001] FindNextFileW (in: hFindFile=0x381dc0, lpFindFileData=0x31e47c | out: lpFindFileData=0x31e47c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xb98d7da0, ftCreationTime.dwHighDateTime=0x1d5db97, ftLastAccessTime.dwLowDateTime=0x666f3220, ftLastAccessTime.dwHighDateTime=0x1d5e7c3, ftLastWriteTime.dwLowDateTime=0x666f3220, ftLastWriteTime.dwHighDateTime=0x1d5e7c3, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0087.001] FindNextFileW (in: hFindFile=0x381dc0, lpFindFileData=0x31e47c | out: lpFindFileData=0x31e47c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x477b1fe0, ftCreationTime.dwHighDateTime=0x1d5e7a1, ftLastAccessTime.dwLowDateTime=0x9af24df0, ftLastAccessTime.dwHighDateTime=0x1d5dd2f, ftLastWriteTime.dwLowDateTime=0x9af24df0, ftLastWriteTime.dwHighDateTime=0x1d5dd2f, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="6ygdYcRuO9", cAlternateFileName="6YGDYC~1")) returned 1 [0087.004] FindNextFileW (in: hFindFile=0x381dc0, lpFindFileData=0x31e47c | out: lpFindFileData=0x31e47c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd8b2cc30, ftCreationTime.dwHighDateTime=0x1d5dac0, ftLastAccessTime.dwLowDateTime=0x2940bcc0, ftLastAccessTime.dwHighDateTime=0x1d5dab2, ftLastWriteTime.dwLowDateTime=0x2940bcc0, ftLastWriteTime.dwHighDateTime=0x1d5dab2, nFileSizeHigh=0x0, nFileSizeLow=0x4590, dwReserved0=0x0, dwReserved1=0x0, cFileName="GibSj0Oqv_.rtf", cAlternateFileName="GIBSJ0~1.RTF")) returned 1 [0087.004] FindNextFileW (in: hFindFile=0x381dc0, lpFindFileData=0x31e47c | out: lpFindFileData=0x31e47c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2cb575b0, ftCreationTime.dwHighDateTime=0x1d5d884, ftLastAccessTime.dwLowDateTime=0xe7513340, ftLastAccessTime.dwHighDateTime=0x1d5d81c, ftLastWriteTime.dwLowDateTime=0xe7513340, ftLastWriteTime.dwHighDateTime=0x1d5d81c, nFileSizeHigh=0x0, nFileSizeLow=0x281c, dwReserved0=0x0, dwReserved1=0x0, cFileName="KaunNs4TVi5V7PIurI.ots", cAlternateFileName="KAUNNS~1.OTS")) returned 1 [0087.004] FindNextFileW (in: hFindFile=0x381dc0, lpFindFileData=0x31e47c | out: lpFindFileData=0x31e47c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1fd7a230, ftCreationTime.dwHighDateTime=0x1d5ddcc, ftLastAccessTime.dwLowDateTime=0x19bdfed0, ftLastAccessTime.dwHighDateTime=0x1d5d8e5, ftLastWriteTime.dwLowDateTime=0x19bdfed0, ftLastWriteTime.dwHighDateTime=0x1d5d8e5, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="ylM2mu-V6E1bfaho", cAlternateFileName="YLM2MU~1")) returned 1 [0087.004] FindNextFileW (in: hFindFile=0x381dc0, lpFindFileData=0x31e47c | out: lpFindFileData=0x31e47c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1fd7a230, ftCreationTime.dwHighDateTime=0x1d5ddcc, ftLastAccessTime.dwLowDateTime=0x19bdfed0, ftLastAccessTime.dwHighDateTime=0x1d5d8e5, ftLastWriteTime.dwLowDateTime=0x19bdfed0, ftLastWriteTime.dwHighDateTime=0x1d5d8e5, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="ylM2mu-V6E1bfaho", cAlternateFileName="YLM2MU~1")) returned 0 [0087.004] FindClose (in: hFindFile=0x381dc0 | out: hFindFile=0x381dc0) returned 1 [0087.004] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e704) returned 1 [0087.004] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e710) returned 1 [0087.004] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e744) returned 1 [0087.004] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\pC9__AmTieaQ3iZVw9R8\\QIviB1J8S42yLfp", nBufferLength=0x105, lpBuffer=0x31e24c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\pC9__AmTieaQ3iZVw9R8\\QIviB1J8S42yLfp", lpFilePart=0x0) returned 0x4c [0087.004] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\pC9__AmTieaQ3iZVw9R8\\QIviB1J8S42yLfp\\", nBufferLength=0x105, lpBuffer=0x31e220, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\pC9__AmTieaQ3iZVw9R8\\QIviB1J8S42yLfp\\", lpFilePart=0x0) returned 0x4d [0087.005] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\pC9__AmTieaQ3iZVw9R8\\QIviB1J8S42yLfp\\*", lpFindFileData=0x31e46c | out: lpFindFileData=0x31e46c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xb98d7da0, ftCreationTime.dwHighDateTime=0x1d5db97, ftLastAccessTime.dwLowDateTime=0x666f3220, ftLastAccessTime.dwHighDateTime=0x1d5e7c3, ftLastWriteTime.dwLowDateTime=0x666f3220, ftLastWriteTime.dwHighDateTime=0x1d5e7c3, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x381dc0 [0087.005] FindNextFileW (in: hFindFile=0x381dc0, lpFindFileData=0x31e47c | out: lpFindFileData=0x31e47c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xb98d7da0, ftCreationTime.dwHighDateTime=0x1d5db97, ftLastAccessTime.dwLowDateTime=0x666f3220, ftLastAccessTime.dwHighDateTime=0x1d5e7c3, ftLastWriteTime.dwLowDateTime=0x666f3220, ftLastWriteTime.dwHighDateTime=0x1d5e7c3, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0087.005] FindNextFileW (in: hFindFile=0x381dc0, lpFindFileData=0x31e47c | out: lpFindFileData=0x31e47c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x477b1fe0, ftCreationTime.dwHighDateTime=0x1d5e7a1, ftLastAccessTime.dwLowDateTime=0x9af24df0, ftLastAccessTime.dwHighDateTime=0x1d5dd2f, ftLastWriteTime.dwLowDateTime=0x9af24df0, ftLastWriteTime.dwHighDateTime=0x1d5dd2f, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="6ygdYcRuO9", cAlternateFileName="6YGDYC~1")) returned 1 [0087.005] FindNextFileW (in: hFindFile=0x381dc0, lpFindFileData=0x31e47c | out: lpFindFileData=0x31e47c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd8b2cc30, ftCreationTime.dwHighDateTime=0x1d5dac0, ftLastAccessTime.dwLowDateTime=0x2940bcc0, ftLastAccessTime.dwHighDateTime=0x1d5dab2, ftLastWriteTime.dwLowDateTime=0x2940bcc0, ftLastWriteTime.dwHighDateTime=0x1d5dab2, nFileSizeHigh=0x0, nFileSizeLow=0x4590, dwReserved0=0x0, dwReserved1=0x0, cFileName="GibSj0Oqv_.rtf", cAlternateFileName="GIBSJ0~1.RTF")) returned 1 [0087.005] FindNextFileW (in: hFindFile=0x381dc0, lpFindFileData=0x31e47c | out: lpFindFileData=0x31e47c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2cb575b0, ftCreationTime.dwHighDateTime=0x1d5d884, ftLastAccessTime.dwLowDateTime=0xe7513340, ftLastAccessTime.dwHighDateTime=0x1d5d81c, ftLastWriteTime.dwLowDateTime=0xe7513340, ftLastWriteTime.dwHighDateTime=0x1d5d81c, nFileSizeHigh=0x0, nFileSizeLow=0x281c, dwReserved0=0x0, dwReserved1=0x0, cFileName="KaunNs4TVi5V7PIurI.ots", cAlternateFileName="KAUNNS~1.OTS")) returned 1 [0087.005] FindNextFileW (in: hFindFile=0x381dc0, lpFindFileData=0x31e47c | out: lpFindFileData=0x31e47c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1fd7a230, ftCreationTime.dwHighDateTime=0x1d5ddcc, ftLastAccessTime.dwLowDateTime=0x19bdfed0, ftLastAccessTime.dwHighDateTime=0x1d5d8e5, ftLastWriteTime.dwLowDateTime=0x19bdfed0, ftLastWriteTime.dwHighDateTime=0x1d5d8e5, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="ylM2mu-V6E1bfaho", cAlternateFileName="YLM2MU~1")) returned 1 [0087.005] FindNextFileW (in: hFindFile=0x381dc0, lpFindFileData=0x31e47c | out: lpFindFileData=0x31e47c*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0087.005] FindClose (in: hFindFile=0x381dc0 | out: hFindFile=0x381dc0) returned 1 [0087.006] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e704) returned 1 [0087.006] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e710) returned 1 [0087.006] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\pC9__AmTieaQ3iZVw9R8\\QIviB1J8S42yLfp\\GibSj0Oqv_.rtf", nBufferLength=0x105, lpBuffer=0x31e11c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\pC9__AmTieaQ3iZVw9R8\\QIviB1J8S42yLfp\\GibSj0Oqv_.rtf", lpFilePart=0x0) returned 0x5b [0087.006] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e610) returned 1 [0087.006] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\pC9__AmTieaQ3iZVw9R8\\QIviB1J8S42yLfp\\GibSj0Oqv_.rtf" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\pc9__amtieaq3izvw9r8\\qivib1j8s42ylfp\\gibsj0oqv_.rtf"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x178 [0087.006] GetFileType (hFile=0x178) returned 0x1 [0087.006] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e60c) returned 1 [0087.006] GetFileType (hFile=0x178) returned 0x1 [0087.006] GetFileSize (in: hFile=0x178, lpFileSizeHigh=0x31e718 | out: lpFileSizeHigh=0x31e718*=0x0) returned 0x4590 [0087.006] ReadFile (in: hFile=0x178, lpBuffer=0x264e310, nNumberOfBytesToRead=0x4590, lpNumberOfBytesRead=0x31e6c4, lpOverlapped=0x0 | out: lpBuffer=0x264e310*, lpNumberOfBytesRead=0x31e6c4*=0x4590, lpOverlapped=0x0) returned 1 [0087.047] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\pC9__AmTieaQ3iZVw9R8\\QIviB1J8S42yLfp\\GibSj0Oqv_.rtf", nBufferLength=0x105, lpBuffer=0x31e108, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\pC9__AmTieaQ3iZVw9R8\\QIviB1J8S42yLfp\\GibSj0Oqv_.rtf", lpFilePart=0x0) returned 0x5b [0087.047] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e5fc) returned 1 [0087.047] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\pC9__AmTieaQ3iZVw9R8\\QIviB1J8S42yLfp\\GibSj0Oqv_.rtf" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\pc9__amtieaq3izvw9r8\\qivib1j8s42ylfp\\gibsj0oqv_.rtf"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x178 [0087.048] GetFileType (hFile=0x178) returned 0x1 [0087.048] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e5f8) returned 1 [0087.048] GetFileType (hFile=0x178) returned 0x1 [0087.048] WriteFile (in: hFile=0x178, lpBuffer=0x26b0e70*, nNumberOfBytesToWrite=0x45a0, lpNumberOfBytesWritten=0x31e6b8, lpOverlapped=0x0 | out: lpBuffer=0x26b0e70*, lpNumberOfBytesWritten=0x31e6b8*=0x45a0, lpOverlapped=0x0) returned 1 [0087.049] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\pC9__AmTieaQ3iZVw9R8\\QIviB1J8S42yLfp\\GibSj0Oqv_.rtf", nBufferLength=0x105, lpBuffer=0x31e23c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\pC9__AmTieaQ3iZVw9R8\\QIviB1J8S42yLfp\\GibSj0Oqv_.rtf", lpFilePart=0x0) returned 0x5b [0087.049] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\pC9__AmTieaQ3iZVw9R8\\QIviB1J8S42yLfp\\GibSj0Oqv_.rtf", nBufferLength=0x105, lpBuffer=0x31e23c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\pC9__AmTieaQ3iZVw9R8\\QIviB1J8S42yLfp\\GibSj0Oqv_.rtf", lpFilePart=0x0) returned 0x5b [0087.049] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e69c) returned 1 [0087.049] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\pC9__AmTieaQ3iZVw9R8\\QIviB1J8S42yLfp\\GibSj0Oqv_.rtf" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\pc9__amtieaq3izvw9r8\\qivib1j8s42ylfp\\gibsj0oqv_.rtf"), fInfoLevelId=0x0, lpFileInformation=0x31e718 | out: lpFileInformation=0x31e718*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd8b2cc30, ftCreationTime.dwHighDateTime=0x1d5dac0, ftLastAccessTime.dwLowDateTime=0x2940bcc0, ftLastAccessTime.dwHighDateTime=0x1d5dab2, ftLastWriteTime.dwLowDateTime=0x17551c20, ftLastWriteTime.dwHighDateTime=0x1d6eb7f, nFileSizeHigh=0x0, nFileSizeLow=0x45a0)) returned 1 [0087.050] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e698) returned 1 [0087.050] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\pC9__AmTieaQ3iZVw9R8\\QIviB1J8S42yLfp\\GibSj0Oqv_.rtf" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\pc9__amtieaq3izvw9r8\\qivib1j8s42ylfp\\gibsj0oqv_.rtf"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\pC9__AmTieaQ3iZVw9R8\\QIviB1J8S42yLfp\\GibSj0Oqv_.rtf" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\pc9__amtieaq3izvw9r8\\qivib1j8s42ylfp\\gibsj0oqv_.rtf")) returned 1 [0087.050] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e6cc) returned 1 [0087.050] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\pC9__AmTieaQ3iZVw9R8\\QIviB1J8S42yLfp\\6ygdYcRuO9", nBufferLength=0x105, lpBuffer=0x31e1d4, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\pC9__AmTieaQ3iZVw9R8\\QIviB1J8S42yLfp\\6ygdYcRuO9", lpFilePart=0x0) returned 0x57 [0087.050] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\pC9__AmTieaQ3iZVw9R8\\QIviB1J8S42yLfp\\6ygdYcRuO9\\", nBufferLength=0x105, lpBuffer=0x31e1a8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\pC9__AmTieaQ3iZVw9R8\\QIviB1J8S42yLfp\\6ygdYcRuO9\\", lpFilePart=0x0) returned 0x58 [0087.050] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\pC9__AmTieaQ3iZVw9R8\\QIviB1J8S42yLfp\\6ygdYcRuO9\\*", lpFindFileData=0x31e3f4 | out: lpFindFileData=0x31e3f4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x477b1fe0, ftCreationTime.dwHighDateTime=0x1d5e7a1, ftLastAccessTime.dwLowDateTime=0x9af24df0, ftLastAccessTime.dwHighDateTime=0x1d5dd2f, ftLastWriteTime.dwLowDateTime=0x9af24df0, ftLastWriteTime.dwHighDateTime=0x1d5dd2f, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x381f00 [0087.050] FindNextFileW (in: hFindFile=0x381f00, lpFindFileData=0x31e404 | out: lpFindFileData=0x31e404*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x477b1fe0, ftCreationTime.dwHighDateTime=0x1d5e7a1, ftLastAccessTime.dwLowDateTime=0x9af24df0, ftLastAccessTime.dwHighDateTime=0x1d5dd2f, ftLastWriteTime.dwLowDateTime=0x9af24df0, ftLastWriteTime.dwHighDateTime=0x1d5dd2f, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0087.050] FindNextFileW (in: hFindFile=0x381f00, lpFindFileData=0x31e404 | out: lpFindFileData=0x31e404*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe46b6670, ftCreationTime.dwHighDateTime=0x1d5e035, ftLastAccessTime.dwLowDateTime=0xc7756e60, ftLastAccessTime.dwHighDateTime=0x1d5e456, ftLastWriteTime.dwLowDateTime=0xc7756e60, ftLastWriteTime.dwHighDateTime=0x1d5e456, nFileSizeHigh=0x0, nFileSizeLow=0x128ce, dwReserved0=0x0, dwReserved1=0x0, cFileName="d6 dLC jkU9.doc", cAlternateFileName="D6DLCJ~1.DOC")) returned 1 [0087.050] FindNextFileW (in: hFindFile=0x381f00, lpFindFileData=0x31e404 | out: lpFindFileData=0x31e404*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xfd446e80, ftCreationTime.dwHighDateTime=0x1d5dc5c, ftLastAccessTime.dwLowDateTime=0xf551a90, ftLastAccessTime.dwHighDateTime=0x1d5dbca, ftLastWriteTime.dwLowDateTime=0xf551a90, ftLastWriteTime.dwHighDateTime=0x1d5dbca, nFileSizeHigh=0x0, nFileSizeLow=0x32c3, dwReserved0=0x0, dwReserved1=0x0, cFileName="DfXgi8mluBJ.doc", cAlternateFileName="DFXGI8~1.DOC")) returned 1 [0087.051] FindNextFileW (in: hFindFile=0x381f00, lpFindFileData=0x31e404 | out: lpFindFileData=0x31e404*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x74778820, ftCreationTime.dwHighDateTime=0x1d5dee7, ftLastAccessTime.dwLowDateTime=0xdb2fa010, ftLastAccessTime.dwHighDateTime=0x1d5e2e4, ftLastWriteTime.dwLowDateTime=0xdb2fa010, ftLastWriteTime.dwHighDateTime=0x1d5e2e4, nFileSizeHigh=0x0, nFileSizeLow=0xbd2c, dwReserved0=0x0, dwReserved1=0x0, cFileName="eEZ0I5zK3ZKi8gNeQ.xls", cAlternateFileName="EEZ0I5~1.XLS")) returned 1 [0087.051] FindNextFileW (in: hFindFile=0x381f00, lpFindFileData=0x31e404 | out: lpFindFileData=0x31e404*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x95777d20, ftCreationTime.dwHighDateTime=0x1d5dc2e, ftLastAccessTime.dwLowDateTime=0x428f2610, ftLastAccessTime.dwHighDateTime=0x1d5dde3, ftLastWriteTime.dwLowDateTime=0x428f2610, ftLastWriteTime.dwHighDateTime=0x1d5dde3, nFileSizeHigh=0x0, nFileSizeLow=0x16965, dwReserved0=0x0, dwReserved1=0x0, cFileName="Otujad-E.csv", cAlternateFileName="")) returned 1 [0087.051] FindNextFileW (in: hFindFile=0x381f00, lpFindFileData=0x31e404 | out: lpFindFileData=0x31e404*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xb1731ba0, ftCreationTime.dwHighDateTime=0x1d5e62f, ftLastAccessTime.dwLowDateTime=0x4c0beb60, ftLastAccessTime.dwHighDateTime=0x1d5e3ab, ftLastWriteTime.dwLowDateTime=0x4c0beb60, ftLastWriteTime.dwHighDateTime=0x1d5e3ab, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="r M9y9TQ8L-H", cAlternateFileName="RM9Y9T~1")) returned 1 [0087.051] FindNextFileW (in: hFindFile=0x381f00, lpFindFileData=0x31e404 | out: lpFindFileData=0x31e404*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8e4cd730, ftCreationTime.dwHighDateTime=0x1d5d971, ftLastAccessTime.dwLowDateTime=0xa139b750, ftLastAccessTime.dwHighDateTime=0x1d5da2f, ftLastWriteTime.dwLowDateTime=0xa139b750, ftLastWriteTime.dwHighDateTime=0x1d5da2f, nFileSizeHigh=0x0, nFileSizeLow=0xb50d, dwReserved0=0x0, dwReserved1=0x0, cFileName="ste8yr_-iA.ots", cAlternateFileName="STE8YR~1.OTS")) returned 1 [0087.051] FindNextFileW (in: hFindFile=0x381f00, lpFindFileData=0x31e404 | out: lpFindFileData=0x31e404*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0087.051] FindClose (in: hFindFile=0x381f00 | out: hFindFile=0x381f00) returned 1 [0087.051] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e68c) returned 1 [0087.051] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e698) returned 1 [0087.051] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e6cc) returned 1 [0087.051] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\pC9__AmTieaQ3iZVw9R8\\QIviB1J8S42yLfp\\6ygdYcRuO9", nBufferLength=0x105, lpBuffer=0x31e1d4, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\pC9__AmTieaQ3iZVw9R8\\QIviB1J8S42yLfp\\6ygdYcRuO9", lpFilePart=0x0) returned 0x57 [0087.051] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\pC9__AmTieaQ3iZVw9R8\\QIviB1J8S42yLfp\\6ygdYcRuO9\\", nBufferLength=0x105, lpBuffer=0x31e1a8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\pC9__AmTieaQ3iZVw9R8\\QIviB1J8S42yLfp\\6ygdYcRuO9\\", lpFilePart=0x0) returned 0x58 [0087.051] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\pC9__AmTieaQ3iZVw9R8\\QIviB1J8S42yLfp\\6ygdYcRuO9\\*", lpFindFileData=0x31e3f4 | out: lpFindFileData=0x31e3f4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x477b1fe0, ftCreationTime.dwHighDateTime=0x1d5e7a1, ftLastAccessTime.dwLowDateTime=0x9af24df0, ftLastAccessTime.dwHighDateTime=0x1d5dd2f, ftLastWriteTime.dwLowDateTime=0x9af24df0, ftLastWriteTime.dwHighDateTime=0x1d5dd2f, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x381f00 [0087.052] FindNextFileW (in: hFindFile=0x381f00, lpFindFileData=0x31e404 | out: lpFindFileData=0x31e404*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x477b1fe0, ftCreationTime.dwHighDateTime=0x1d5e7a1, ftLastAccessTime.dwLowDateTime=0x9af24df0, ftLastAccessTime.dwHighDateTime=0x1d5dd2f, ftLastWriteTime.dwLowDateTime=0x9af24df0, ftLastWriteTime.dwHighDateTime=0x1d5dd2f, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0087.052] FindNextFileW (in: hFindFile=0x381f00, lpFindFileData=0x31e404 | out: lpFindFileData=0x31e404*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe46b6670, ftCreationTime.dwHighDateTime=0x1d5e035, ftLastAccessTime.dwLowDateTime=0xc7756e60, ftLastAccessTime.dwHighDateTime=0x1d5e456, ftLastWriteTime.dwLowDateTime=0xc7756e60, ftLastWriteTime.dwHighDateTime=0x1d5e456, nFileSizeHigh=0x0, nFileSizeLow=0x128ce, dwReserved0=0x0, dwReserved1=0x0, cFileName="d6 dLC jkU9.doc", cAlternateFileName="D6DLCJ~1.DOC")) returned 1 [0087.052] FindNextFileW (in: hFindFile=0x381f00, lpFindFileData=0x31e404 | out: lpFindFileData=0x31e404*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xfd446e80, ftCreationTime.dwHighDateTime=0x1d5dc5c, ftLastAccessTime.dwLowDateTime=0xf551a90, ftLastAccessTime.dwHighDateTime=0x1d5dbca, ftLastWriteTime.dwLowDateTime=0xf551a90, ftLastWriteTime.dwHighDateTime=0x1d5dbca, nFileSizeHigh=0x0, nFileSizeLow=0x32c3, dwReserved0=0x0, dwReserved1=0x0, cFileName="DfXgi8mluBJ.doc", cAlternateFileName="DFXGI8~1.DOC")) returned 1 [0087.052] FindNextFileW (in: hFindFile=0x381f00, lpFindFileData=0x31e404 | out: lpFindFileData=0x31e404*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x74778820, ftCreationTime.dwHighDateTime=0x1d5dee7, ftLastAccessTime.dwLowDateTime=0xdb2fa010, ftLastAccessTime.dwHighDateTime=0x1d5e2e4, ftLastWriteTime.dwLowDateTime=0xdb2fa010, ftLastWriteTime.dwHighDateTime=0x1d5e2e4, nFileSizeHigh=0x0, nFileSizeLow=0xbd2c, dwReserved0=0x0, dwReserved1=0x0, cFileName="eEZ0I5zK3ZKi8gNeQ.xls", cAlternateFileName="EEZ0I5~1.XLS")) returned 1 [0087.052] FindNextFileW (in: hFindFile=0x381f00, lpFindFileData=0x31e404 | out: lpFindFileData=0x31e404*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x95777d20, ftCreationTime.dwHighDateTime=0x1d5dc2e, ftLastAccessTime.dwLowDateTime=0x428f2610, ftLastAccessTime.dwHighDateTime=0x1d5dde3, ftLastWriteTime.dwLowDateTime=0x428f2610, ftLastWriteTime.dwHighDateTime=0x1d5dde3, nFileSizeHigh=0x0, nFileSizeLow=0x16965, dwReserved0=0x0, dwReserved1=0x0, cFileName="Otujad-E.csv", cAlternateFileName="")) returned 1 [0087.052] FindNextFileW (in: hFindFile=0x381f00, lpFindFileData=0x31e404 | out: lpFindFileData=0x31e404*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xb1731ba0, ftCreationTime.dwHighDateTime=0x1d5e62f, ftLastAccessTime.dwLowDateTime=0x4c0beb60, ftLastAccessTime.dwHighDateTime=0x1d5e3ab, ftLastWriteTime.dwLowDateTime=0x4c0beb60, ftLastWriteTime.dwHighDateTime=0x1d5e3ab, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="r M9y9TQ8L-H", cAlternateFileName="RM9Y9T~1")) returned 1 [0087.052] FindNextFileW (in: hFindFile=0x381f00, lpFindFileData=0x31e404 | out: lpFindFileData=0x31e404*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8e4cd730, ftCreationTime.dwHighDateTime=0x1d5d971, ftLastAccessTime.dwLowDateTime=0xa139b750, ftLastAccessTime.dwHighDateTime=0x1d5da2f, ftLastWriteTime.dwLowDateTime=0xa139b750, ftLastWriteTime.dwHighDateTime=0x1d5da2f, nFileSizeHigh=0x0, nFileSizeLow=0xb50d, dwReserved0=0x0, dwReserved1=0x0, cFileName="ste8yr_-iA.ots", cAlternateFileName="STE8YR~1.OTS")) returned 1 [0087.053] FindNextFileW (in: hFindFile=0x381f00, lpFindFileData=0x31e404 | out: lpFindFileData=0x31e404*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8e4cd730, ftCreationTime.dwHighDateTime=0x1d5d971, ftLastAccessTime.dwLowDateTime=0xa139b750, ftLastAccessTime.dwHighDateTime=0x1d5da2f, ftLastWriteTime.dwLowDateTime=0xa139b750, ftLastWriteTime.dwHighDateTime=0x1d5da2f, nFileSizeHigh=0x0, nFileSizeLow=0xb50d, dwReserved0=0x0, dwReserved1=0x0, cFileName="ste8yr_-iA.ots", cAlternateFileName="STE8YR~1.OTS")) returned 0 [0087.053] FindClose (in: hFindFile=0x381f00 | out: hFindFile=0x381f00) returned 1 [0087.053] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e68c) returned 1 [0087.053] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e698) returned 1 [0087.053] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\pC9__AmTieaQ3iZVw9R8\\QIviB1J8S42yLfp\\6ygdYcRuO9\\d6 dLC jkU9.doc", nBufferLength=0x105, lpBuffer=0x31e0a4, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\pC9__AmTieaQ3iZVw9R8\\QIviB1J8S42yLfp\\6ygdYcRuO9\\d6 dLC jkU9.doc", lpFilePart=0x0) returned 0x67 [0087.053] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e598) returned 1 [0087.053] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\pC9__AmTieaQ3iZVw9R8\\QIviB1J8S42yLfp\\6ygdYcRuO9\\d6 dLC jkU9.doc" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\pc9__amtieaq3izvw9r8\\qivib1j8s42ylfp\\6ygdycruo9\\d6 dlc jku9.doc"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x178 [0087.053] GetFileType (hFile=0x178) returned 0x1 [0087.053] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e594) returned 1 [0087.053] GetFileType (hFile=0x178) returned 0x1 [0087.053] GetFileSize (in: hFile=0x178, lpFileSizeHigh=0x31e6a0 | out: lpFileSizeHigh=0x31e6a0*=0x0) returned 0x128ce [0087.053] ReadFile (in: hFile=0x178, lpBuffer=0x26b8d1c, nNumberOfBytesToRead=0x128ce, lpNumberOfBytesRead=0x31e64c, lpOverlapped=0x0 | out: lpBuffer=0x26b8d1c*, lpNumberOfBytesRead=0x31e64c*=0x128ce, lpOverlapped=0x0) returned 1 [0087.069] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\pC9__AmTieaQ3iZVw9R8\\QIviB1J8S42yLfp\\6ygdYcRuO9\\d6 dLC jkU9.doc", nBufferLength=0x105, lpBuffer=0x31e090, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\pC9__AmTieaQ3iZVw9R8\\QIviB1J8S42yLfp\\6ygdYcRuO9\\d6 dLC jkU9.doc", lpFilePart=0x0) returned 0x67 [0087.069] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e584) returned 1 [0087.069] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\pC9__AmTieaQ3iZVw9R8\\QIviB1J8S42yLfp\\6ygdYcRuO9\\d6 dLC jkU9.doc" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\pc9__amtieaq3izvw9r8\\qivib1j8s42ylfp\\6ygdycruo9\\d6 dlc jku9.doc"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x178 [0087.071] GetFileType (hFile=0x178) returned 0x1 [0087.071] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e580) returned 1 [0087.071] GetFileType (hFile=0x178) returned 0x1 [0087.071] WriteFile (in: hFile=0x178, lpBuffer=0x273d588*, nNumberOfBytesToWrite=0x128d0, lpNumberOfBytesWritten=0x31e640, lpOverlapped=0x0 | out: lpBuffer=0x273d588*, lpNumberOfBytesWritten=0x31e640*=0x128d0, lpOverlapped=0x0) returned 1 [0087.073] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\pC9__AmTieaQ3iZVw9R8\\QIviB1J8S42yLfp\\6ygdYcRuO9\\d6 dLC jkU9.doc", nBufferLength=0x105, lpBuffer=0x31e1c4, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\pC9__AmTieaQ3iZVw9R8\\QIviB1J8S42yLfp\\6ygdYcRuO9\\d6 dLC jkU9.doc", lpFilePart=0x0) returned 0x67 [0087.073] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\pC9__AmTieaQ3iZVw9R8\\QIviB1J8S42yLfp\\6ygdYcRuO9\\d6 dLC jkU9.doc", nBufferLength=0x105, lpBuffer=0x31e1c4, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\pC9__AmTieaQ3iZVw9R8\\QIviB1J8S42yLfp\\6ygdYcRuO9\\d6 dLC jkU9.doc", lpFilePart=0x0) returned 0x67 [0087.073] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e624) returned 1 [0087.073] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\pC9__AmTieaQ3iZVw9R8\\QIviB1J8S42yLfp\\6ygdYcRuO9\\d6 dLC jkU9.doc" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\pc9__amtieaq3izvw9r8\\qivib1j8s42ylfp\\6ygdycruo9\\d6 dlc jku9.doc"), fInfoLevelId=0x0, lpFileInformation=0x31e6a0 | out: lpFileInformation=0x31e6a0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe46b6670, ftCreationTime.dwHighDateTime=0x1d5e035, ftLastAccessTime.dwLowDateTime=0xc7756e60, ftLastAccessTime.dwHighDateTime=0x1d5e456, ftLastWriteTime.dwLowDateTime=0x17577d80, ftLastWriteTime.dwHighDateTime=0x1d6eb7f, nFileSizeHigh=0x0, nFileSizeLow=0x128d0)) returned 1 [0087.073] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e620) returned 1 [0087.073] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\pC9__AmTieaQ3iZVw9R8\\QIviB1J8S42yLfp\\6ygdYcRuO9\\d6 dLC jkU9.doc" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\pc9__amtieaq3izvw9r8\\qivib1j8s42ylfp\\6ygdycruo9\\d6 dlc jku9.doc"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\pC9__AmTieaQ3iZVw9R8\\QIviB1J8S42yLfp\\6ygdYcRuO9\\d6 dLC jkU9.doc" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\pc9__amtieaq3izvw9r8\\qivib1j8s42ylfp\\6ygdycruo9\\d6 dlc jku9.doc")) returned 1 [0087.073] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\pC9__AmTieaQ3iZVw9R8\\QIviB1J8S42yLfp\\6ygdYcRuO9\\DfXgi8mluBJ.doc", nBufferLength=0x105, lpBuffer=0x31e0a4, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\pC9__AmTieaQ3iZVw9R8\\QIviB1J8S42yLfp\\6ygdYcRuO9\\DfXgi8mluBJ.doc", lpFilePart=0x0) returned 0x67 [0087.073] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e598) returned 1 [0087.073] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\pC9__AmTieaQ3iZVw9R8\\QIviB1J8S42yLfp\\6ygdYcRuO9\\DfXgi8mluBJ.doc" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\pc9__amtieaq3izvw9r8\\qivib1j8s42ylfp\\6ygdycruo9\\dfxgi8mlubj.doc"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x178 [0087.073] GetFileType (hFile=0x178) returned 0x1 [0087.073] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e594) returned 1 [0087.073] GetFileType (hFile=0x178) returned 0x1 [0087.073] GetFileSize (in: hFile=0x178, lpFileSizeHigh=0x31e6a0 | out: lpFileSizeHigh=0x31e6a0*=0x0) returned 0x32c3 [0087.073] ReadFile (in: hFile=0x178, lpBuffer=0x27502fc, nNumberOfBytesToRead=0x32c3, lpNumberOfBytesRead=0x31e64c, lpOverlapped=0x0 | out: lpBuffer=0x27502fc*, lpNumberOfBytesRead=0x31e64c*=0x32c3, lpOverlapped=0x0) returned 1 [0087.090] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\pC9__AmTieaQ3iZVw9R8\\QIviB1J8S42yLfp\\6ygdYcRuO9\\DfXgi8mluBJ.doc", nBufferLength=0x105, lpBuffer=0x31e090, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\pC9__AmTieaQ3iZVw9R8\\QIviB1J8S42yLfp\\6ygdYcRuO9\\DfXgi8mluBJ.doc", lpFilePart=0x0) returned 0x67 [0087.090] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e584) returned 1 [0087.090] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\pC9__AmTieaQ3iZVw9R8\\QIviB1J8S42yLfp\\6ygdYcRuO9\\DfXgi8mluBJ.doc" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\pc9__amtieaq3izvw9r8\\qivib1j8s42ylfp\\6ygdycruo9\\dfxgi8mlubj.doc"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x178 [0087.091] GetFileType (hFile=0x178) returned 0x1 [0087.091] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e580) returned 1 [0087.091] GetFileType (hFile=0x178) returned 0x1 [0087.091] WriteFile (in: hFile=0x178, lpBuffer=0x27acef4*, nNumberOfBytesToWrite=0x32d0, lpNumberOfBytesWritten=0x31e640, lpOverlapped=0x0 | out: lpBuffer=0x27acef4*, lpNumberOfBytesWritten=0x31e640*=0x32d0, lpOverlapped=0x0) returned 1 [0087.092] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\pC9__AmTieaQ3iZVw9R8\\QIviB1J8S42yLfp\\6ygdYcRuO9\\DfXgi8mluBJ.doc", nBufferLength=0x105, lpBuffer=0x31e1c4, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\pC9__AmTieaQ3iZVw9R8\\QIviB1J8S42yLfp\\6ygdYcRuO9\\DfXgi8mluBJ.doc", lpFilePart=0x0) returned 0x67 [0087.092] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\pC9__AmTieaQ3iZVw9R8\\QIviB1J8S42yLfp\\6ygdYcRuO9\\DfXgi8mluBJ.doc", nBufferLength=0x105, lpBuffer=0x31e1c4, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\pC9__AmTieaQ3iZVw9R8\\QIviB1J8S42yLfp\\6ygdYcRuO9\\DfXgi8mluBJ.doc", lpFilePart=0x0) returned 0x67 [0087.092] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e624) returned 1 [0087.092] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\pC9__AmTieaQ3iZVw9R8\\QIviB1J8S42yLfp\\6ygdYcRuO9\\DfXgi8mluBJ.doc" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\pc9__amtieaq3izvw9r8\\qivib1j8s42ylfp\\6ygdycruo9\\dfxgi8mlubj.doc"), fInfoLevelId=0x0, lpFileInformation=0x31e6a0 | out: lpFileInformation=0x31e6a0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xfd446e80, ftCreationTime.dwHighDateTime=0x1d5dc5c, ftLastAccessTime.dwLowDateTime=0xf551a90, ftLastAccessTime.dwHighDateTime=0x1d5dbca, ftLastWriteTime.dwLowDateTime=0x1759dee0, ftLastWriteTime.dwHighDateTime=0x1d6eb7f, nFileSizeHigh=0x0, nFileSizeLow=0x32d0)) returned 1 [0087.092] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e620) returned 1 [0087.092] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\pC9__AmTieaQ3iZVw9R8\\QIviB1J8S42yLfp\\6ygdYcRuO9\\DfXgi8mluBJ.doc" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\pc9__amtieaq3izvw9r8\\qivib1j8s42ylfp\\6ygdycruo9\\dfxgi8mlubj.doc"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\pC9__AmTieaQ3iZVw9R8\\QIviB1J8S42yLfp\\6ygdYcRuO9\\DfXgi8mluBJ.doc" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\pc9__amtieaq3izvw9r8\\qivib1j8s42ylfp\\6ygdycruo9\\dfxgi8mlubj.doc")) returned 1 [0087.092] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\pC9__AmTieaQ3iZVw9R8\\QIviB1J8S42yLfp\\6ygdYcRuO9\\eEZ0I5zK3ZKi8gNeQ.xls", nBufferLength=0x105, lpBuffer=0x31e0a4, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\pC9__AmTieaQ3iZVw9R8\\QIviB1J8S42yLfp\\6ygdYcRuO9\\eEZ0I5zK3ZKi8gNeQ.xls", lpFilePart=0x0) returned 0x6d [0087.093] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e598) returned 1 [0087.093] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\pC9__AmTieaQ3iZVw9R8\\QIviB1J8S42yLfp\\6ygdYcRuO9\\eEZ0I5zK3ZKi8gNeQ.xls" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\pc9__amtieaq3izvw9r8\\qivib1j8s42ylfp\\6ygdycruo9\\eez0i5zk3zki8gneq.xls"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x178 [0087.093] GetFileType (hFile=0x178) returned 0x1 [0087.093] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e594) returned 1 [0087.093] GetFileType (hFile=0x178) returned 0x1 [0087.093] GetFileSize (in: hFile=0x178, lpFileSizeHigh=0x31e6a0 | out: lpFileSizeHigh=0x31e6a0*=0x0) returned 0xbd2c [0087.093] ReadFile (in: hFile=0x178, lpBuffer=0x27b0680, nNumberOfBytesToRead=0xbd2c, lpNumberOfBytesRead=0x31e64c, lpOverlapped=0x0 | out: lpBuffer=0x27b0680*, lpNumberOfBytesRead=0x31e64c*=0xbd2c, lpOverlapped=0x0) returned 1 [0087.109] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\pC9__AmTieaQ3iZVw9R8\\QIviB1J8S42yLfp\\6ygdYcRuO9\\eEZ0I5zK3ZKi8gNeQ.xls", nBufferLength=0x105, lpBuffer=0x31e090, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\pC9__AmTieaQ3iZVw9R8\\QIviB1J8S42yLfp\\6ygdYcRuO9\\eEZ0I5zK3ZKi8gNeQ.xls", lpFilePart=0x0) returned 0x6d [0087.109] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e584) returned 1 [0087.109] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\pC9__AmTieaQ3iZVw9R8\\QIviB1J8S42yLfp\\6ygdYcRuO9\\eEZ0I5zK3ZKi8gNeQ.xls" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\pc9__amtieaq3izvw9r8\\qivib1j8s42ylfp\\6ygdycruo9\\eez0i5zk3zki8gneq.xls"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x178 [0087.110] GetFileType (hFile=0x178) returned 0x1 [0087.110] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e580) returned 1 [0087.110] GetFileType (hFile=0x178) returned 0x1 [0087.110] WriteFile (in: hFile=0x178, lpBuffer=0x2820c08*, nNumberOfBytesToWrite=0xbd30, lpNumberOfBytesWritten=0x31e640, lpOverlapped=0x0 | out: lpBuffer=0x2820c08*, lpNumberOfBytesWritten=0x31e640*=0xbd30, lpOverlapped=0x0) returned 1 [0087.112] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\pC9__AmTieaQ3iZVw9R8\\QIviB1J8S42yLfp\\6ygdYcRuO9\\eEZ0I5zK3ZKi8gNeQ.xls", nBufferLength=0x105, lpBuffer=0x31e1c4, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\pC9__AmTieaQ3iZVw9R8\\QIviB1J8S42yLfp\\6ygdYcRuO9\\eEZ0I5zK3ZKi8gNeQ.xls", lpFilePart=0x0) returned 0x6d [0087.112] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\pC9__AmTieaQ3iZVw9R8\\QIviB1J8S42yLfp\\6ygdYcRuO9\\eEZ0I5zK3ZKi8gNeQ.xls", nBufferLength=0x105, lpBuffer=0x31e1c4, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\pC9__AmTieaQ3iZVw9R8\\QIviB1J8S42yLfp\\6ygdYcRuO9\\eEZ0I5zK3ZKi8gNeQ.xls", lpFilePart=0x0) returned 0x6d [0087.112] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e624) returned 1 [0087.112] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\pC9__AmTieaQ3iZVw9R8\\QIviB1J8S42yLfp\\6ygdYcRuO9\\eEZ0I5zK3ZKi8gNeQ.xls" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\pc9__amtieaq3izvw9r8\\qivib1j8s42ylfp\\6ygdycruo9\\eez0i5zk3zki8gneq.xls"), fInfoLevelId=0x0, lpFileInformation=0x31e6a0 | out: lpFileInformation=0x31e6a0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x74778820, ftCreationTime.dwHighDateTime=0x1d5dee7, ftLastAccessTime.dwLowDateTime=0xdb2fa010, ftLastAccessTime.dwHighDateTime=0x1d5e2e4, ftLastWriteTime.dwLowDateTime=0x175ea1a0, ftLastWriteTime.dwHighDateTime=0x1d6eb7f, nFileSizeHigh=0x0, nFileSizeLow=0xbd30)) returned 1 [0087.112] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e620) returned 1 [0087.112] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\pC9__AmTieaQ3iZVw9R8\\QIviB1J8S42yLfp\\6ygdYcRuO9\\eEZ0I5zK3ZKi8gNeQ.xls" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\pc9__amtieaq3izvw9r8\\qivib1j8s42ylfp\\6ygdycruo9\\eez0i5zk3zki8gneq.xls"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\pC9__AmTieaQ3iZVw9R8\\QIviB1J8S42yLfp\\6ygdYcRuO9\\eEZ0I5zK3ZKi8gNeQ.xls" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\pc9__amtieaq3izvw9r8\\qivib1j8s42ylfp\\6ygdycruo9\\eez0i5zk3zki8gneq.xls")) returned 1 [0087.112] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\pC9__AmTieaQ3iZVw9R8\\QIviB1J8S42yLfp\\6ygdYcRuO9\\Otujad-E.csv", nBufferLength=0x105, lpBuffer=0x31e0a4, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\pC9__AmTieaQ3iZVw9R8\\QIviB1J8S42yLfp\\6ygdYcRuO9\\Otujad-E.csv", lpFilePart=0x0) returned 0x64 [0087.112] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e598) returned 1 [0087.112] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\pC9__AmTieaQ3iZVw9R8\\QIviB1J8S42yLfp\\6ygdYcRuO9\\Otujad-E.csv" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\pc9__amtieaq3izvw9r8\\qivib1j8s42ylfp\\6ygdycruo9\\otujad-e.csv"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x178 [0087.113] GetFileType (hFile=0x178) returned 0x1 [0087.113] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e594) returned 1 [0087.113] GetFileType (hFile=0x178) returned 0x1 [0087.113] GetFileSize (in: hFile=0x178, lpFileSizeHigh=0x31e6a0 | out: lpFileSizeHigh=0x31e6a0*=0x0) returned 0x16965 [0087.113] ReadFile (in: hFile=0x178, lpBuffer=0x38d3348, nNumberOfBytesToRead=0x16965, lpNumberOfBytesRead=0x31e64c, lpOverlapped=0x0 | out: lpBuffer=0x38d3348*, lpNumberOfBytesRead=0x31e64c*=0x16965, lpOverlapped=0x0) returned 1 [0087.162] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\pC9__AmTieaQ3iZVw9R8\\QIviB1J8S42yLfp\\6ygdYcRuO9\\Otujad-E.csv", nBufferLength=0x105, lpBuffer=0x31e090, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\pC9__AmTieaQ3iZVw9R8\\QIviB1J8S42yLfp\\6ygdYcRuO9\\Otujad-E.csv", lpFilePart=0x0) returned 0x64 [0087.162] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e584) returned 1 [0087.162] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\pC9__AmTieaQ3iZVw9R8\\QIviB1J8S42yLfp\\6ygdYcRuO9\\Otujad-E.csv" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\pc9__amtieaq3izvw9r8\\qivib1j8s42ylfp\\6ygdycruo9\\otujad-e.csv"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x178 [0087.163] GetFileType (hFile=0x178) returned 0x1 [0087.164] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e580) returned 1 [0087.164] GetFileType (hFile=0x178) returned 0x1 [0087.164] WriteFile (in: hFile=0x178, lpBuffer=0x38e9cd0*, nNumberOfBytesToWrite=0x16970, lpNumberOfBytesWritten=0x31e640, lpOverlapped=0x0 | out: lpBuffer=0x38e9cd0*, lpNumberOfBytesWritten=0x31e640*=0x16970, lpOverlapped=0x0) returned 1 [0087.165] CloseHandle (hObject=0x178) returned 1 [0087.166] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\pC9__AmTieaQ3iZVw9R8\\QIviB1J8S42yLfp\\6ygdYcRuO9\\Otujad-E.csv", nBufferLength=0x105, lpBuffer=0x31e1c4, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\pC9__AmTieaQ3iZVw9R8\\QIviB1J8S42yLfp\\6ygdYcRuO9\\Otujad-E.csv", lpFilePart=0x0) returned 0x64 [0087.166] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\pC9__AmTieaQ3iZVw9R8\\QIviB1J8S42yLfp\\6ygdYcRuO9\\Otujad-E.csv", nBufferLength=0x105, lpBuffer=0x31e1c4, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\pC9__AmTieaQ3iZVw9R8\\QIviB1J8S42yLfp\\6ygdYcRuO9\\Otujad-E.csv", lpFilePart=0x0) returned 0x64 [0087.166] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e624) returned 1 [0087.166] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\pC9__AmTieaQ3iZVw9R8\\QIviB1J8S42yLfp\\6ygdYcRuO9\\Otujad-E.csv" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\pc9__amtieaq3izvw9r8\\qivib1j8s42ylfp\\6ygdycruo9\\otujad-e.csv"), fInfoLevelId=0x0, lpFileInformation=0x31e6a0 | out: lpFileInformation=0x31e6a0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x95777d20, ftCreationTime.dwHighDateTime=0x1d5dc2e, ftLastAccessTime.dwLowDateTime=0x428f2610, ftLastAccessTime.dwHighDateTime=0x1d5dde3, ftLastWriteTime.dwLowDateTime=0x1765c5c0, ftLastWriteTime.dwHighDateTime=0x1d6eb7f, nFileSizeHigh=0x0, nFileSizeLow=0x16970)) returned 1 [0087.166] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e620) returned 1 [0087.166] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\pC9__AmTieaQ3iZVw9R8\\QIviB1J8S42yLfp\\6ygdYcRuO9\\Otujad-E.csv" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\pc9__amtieaq3izvw9r8\\qivib1j8s42ylfp\\6ygdycruo9\\otujad-e.csv"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\pC9__AmTieaQ3iZVw9R8\\QIviB1J8S42yLfp\\6ygdYcRuO9\\Otujad-E.csv" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\pc9__amtieaq3izvw9r8\\qivib1j8s42ylfp\\6ygdycruo9\\otujad-e.csv")) returned 1 [0087.166] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e654) returned 1 [0087.166] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\pC9__AmTieaQ3iZVw9R8\\QIviB1J8S42yLfp\\6ygdYcRuO9\\r M9y9TQ8L-H", nBufferLength=0x105, lpBuffer=0x31e15c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\pC9__AmTieaQ3iZVw9R8\\QIviB1J8S42yLfp\\6ygdYcRuO9\\r M9y9TQ8L-H", lpFilePart=0x0) returned 0x64 [0087.166] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\pC9__AmTieaQ3iZVw9R8\\QIviB1J8S42yLfp\\6ygdYcRuO9\\r M9y9TQ8L-H\\", nBufferLength=0x105, lpBuffer=0x31e130, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\pC9__AmTieaQ3iZVw9R8\\QIviB1J8S42yLfp\\6ygdYcRuO9\\r M9y9TQ8L-H\\", lpFilePart=0x0) returned 0x65 [0087.166] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\pC9__AmTieaQ3iZVw9R8\\QIviB1J8S42yLfp\\6ygdYcRuO9\\r M9y9TQ8L-H\\*", lpFindFileData=0x31e37c | out: lpFindFileData=0x31e37c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xb1731ba0, ftCreationTime.dwHighDateTime=0x1d5e62f, ftLastAccessTime.dwLowDateTime=0x4c0beb60, ftLastAccessTime.dwHighDateTime=0x1d5e3ab, ftLastWriteTime.dwLowDateTime=0x4c0beb60, ftLastWriteTime.dwHighDateTime=0x1d5e3ab, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x381d40 [0087.167] FindNextFileW (in: hFindFile=0x381d40, lpFindFileData=0x31e38c | out: lpFindFileData=0x31e38c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xb1731ba0, ftCreationTime.dwHighDateTime=0x1d5e62f, ftLastAccessTime.dwLowDateTime=0x4c0beb60, ftLastAccessTime.dwHighDateTime=0x1d5e3ab, ftLastWriteTime.dwLowDateTime=0x4c0beb60, ftLastWriteTime.dwHighDateTime=0x1d5e3ab, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0087.167] FindNextFileW (in: hFindFile=0x381d40, lpFindFileData=0x31e38c | out: lpFindFileData=0x31e38c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7a6b2f80, ftCreationTime.dwHighDateTime=0x1d5e1b6, ftLastAccessTime.dwLowDateTime=0xf41fa2d0, ftLastAccessTime.dwHighDateTime=0x1d5df1c, ftLastWriteTime.dwLowDateTime=0xf41fa2d0, ftLastWriteTime.dwHighDateTime=0x1d5df1c, nFileSizeHigh=0x0, nFileSizeLow=0x9d19, dwReserved0=0x0, dwReserved1=0x0, cFileName="2pGy8blaGINSTsQu.ods", cAlternateFileName="2PGY8B~1.ODS")) returned 1 [0087.167] FindNextFileW (in: hFindFile=0x381d40, lpFindFileData=0x31e38c | out: lpFindFileData=0x31e38c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb08597c0, ftCreationTime.dwHighDateTime=0x1d5d8d0, ftLastAccessTime.dwLowDateTime=0xcf225fa0, ftLastAccessTime.dwHighDateTime=0x1d5e803, ftLastWriteTime.dwLowDateTime=0xcf225fa0, ftLastWriteTime.dwHighDateTime=0x1d5e803, nFileSizeHigh=0x0, nFileSizeLow=0x18cb0, dwReserved0=0x0, dwReserved1=0x0, cFileName="6PH LQIJcfFOT3.ppt", cAlternateFileName="6PHLQI~1.PPT")) returned 1 [0087.167] FindNextFileW (in: hFindFile=0x381d40, lpFindFileData=0x31e38c | out: lpFindFileData=0x31e38c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x53dfd660, ftCreationTime.dwHighDateTime=0x1d5e678, ftLastAccessTime.dwLowDateTime=0xc752bc0, ftLastAccessTime.dwHighDateTime=0x1d5db80, ftLastWriteTime.dwLowDateTime=0xc752bc0, ftLastWriteTime.dwHighDateTime=0x1d5db80, nFileSizeHigh=0x0, nFileSizeLow=0x189bb, dwReserved0=0x0, dwReserved1=0x0, cFileName="XQv9HAJ4krDS5PoLDZN.ots", cAlternateFileName="XQV9HA~1.OTS")) returned 1 [0087.167] FindNextFileW (in: hFindFile=0x381d40, lpFindFileData=0x31e38c | out: lpFindFileData=0x31e38c*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0087.167] FindClose (in: hFindFile=0x381d40 | out: hFindFile=0x381d40) returned 1 [0087.167] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e614) returned 1 [0087.167] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e620) returned 1 [0087.167] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e654) returned 1 [0087.167] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\pC9__AmTieaQ3iZVw9R8\\QIviB1J8S42yLfp\\6ygdYcRuO9\\r M9y9TQ8L-H", nBufferLength=0x105, lpBuffer=0x31e15c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\pC9__AmTieaQ3iZVw9R8\\QIviB1J8S42yLfp\\6ygdYcRuO9\\r M9y9TQ8L-H", lpFilePart=0x0) returned 0x64 [0087.167] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\pC9__AmTieaQ3iZVw9R8\\QIviB1J8S42yLfp\\6ygdYcRuO9\\r M9y9TQ8L-H\\", nBufferLength=0x105, lpBuffer=0x31e130, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\pC9__AmTieaQ3iZVw9R8\\QIviB1J8S42yLfp\\6ygdYcRuO9\\r M9y9TQ8L-H\\", lpFilePart=0x0) returned 0x65 [0087.168] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\pC9__AmTieaQ3iZVw9R8\\QIviB1J8S42yLfp\\6ygdYcRuO9\\r M9y9TQ8L-H\\*", lpFindFileData=0x31e37c | out: lpFindFileData=0x31e37c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xb1731ba0, ftCreationTime.dwHighDateTime=0x1d5e62f, ftLastAccessTime.dwLowDateTime=0x4c0beb60, ftLastAccessTime.dwHighDateTime=0x1d5e3ab, ftLastWriteTime.dwLowDateTime=0x4c0beb60, ftLastWriteTime.dwHighDateTime=0x1d5e3ab, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x381d40 [0087.168] FindNextFileW (in: hFindFile=0x381d40, lpFindFileData=0x31e38c | out: lpFindFileData=0x31e38c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xb1731ba0, ftCreationTime.dwHighDateTime=0x1d5e62f, ftLastAccessTime.dwLowDateTime=0x4c0beb60, ftLastAccessTime.dwHighDateTime=0x1d5e3ab, ftLastWriteTime.dwLowDateTime=0x4c0beb60, ftLastWriteTime.dwHighDateTime=0x1d5e3ab, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0087.168] FindNextFileW (in: hFindFile=0x381d40, lpFindFileData=0x31e38c | out: lpFindFileData=0x31e38c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7a6b2f80, ftCreationTime.dwHighDateTime=0x1d5e1b6, ftLastAccessTime.dwLowDateTime=0xf41fa2d0, ftLastAccessTime.dwHighDateTime=0x1d5df1c, ftLastWriteTime.dwLowDateTime=0xf41fa2d0, ftLastWriteTime.dwHighDateTime=0x1d5df1c, nFileSizeHigh=0x0, nFileSizeLow=0x9d19, dwReserved0=0x0, dwReserved1=0x0, cFileName="2pGy8blaGINSTsQu.ods", cAlternateFileName="2PGY8B~1.ODS")) returned 1 [0087.168] FindNextFileW (in: hFindFile=0x381d40, lpFindFileData=0x31e38c | out: lpFindFileData=0x31e38c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb08597c0, ftCreationTime.dwHighDateTime=0x1d5d8d0, ftLastAccessTime.dwLowDateTime=0xcf225fa0, ftLastAccessTime.dwHighDateTime=0x1d5e803, ftLastWriteTime.dwLowDateTime=0xcf225fa0, ftLastWriteTime.dwHighDateTime=0x1d5e803, nFileSizeHigh=0x0, nFileSizeLow=0x18cb0, dwReserved0=0x0, dwReserved1=0x0, cFileName="6PH LQIJcfFOT3.ppt", cAlternateFileName="6PHLQI~1.PPT")) returned 1 [0087.168] FindNextFileW (in: hFindFile=0x381d40, lpFindFileData=0x31e38c | out: lpFindFileData=0x31e38c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x53dfd660, ftCreationTime.dwHighDateTime=0x1d5e678, ftLastAccessTime.dwLowDateTime=0xc752bc0, ftLastAccessTime.dwHighDateTime=0x1d5db80, ftLastWriteTime.dwLowDateTime=0xc752bc0, ftLastWriteTime.dwHighDateTime=0x1d5db80, nFileSizeHigh=0x0, nFileSizeLow=0x189bb, dwReserved0=0x0, dwReserved1=0x0, cFileName="XQv9HAJ4krDS5PoLDZN.ots", cAlternateFileName="XQV9HA~1.OTS")) returned 1 [0087.168] FindNextFileW (in: hFindFile=0x381d40, lpFindFileData=0x31e38c | out: lpFindFileData=0x31e38c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x53dfd660, ftCreationTime.dwHighDateTime=0x1d5e678, ftLastAccessTime.dwLowDateTime=0xc752bc0, ftLastAccessTime.dwHighDateTime=0x1d5db80, ftLastWriteTime.dwLowDateTime=0xc752bc0, ftLastWriteTime.dwHighDateTime=0x1d5db80, nFileSizeHigh=0x0, nFileSizeLow=0x189bb, dwReserved0=0x0, dwReserved1=0x0, cFileName="XQv9HAJ4krDS5PoLDZN.ots", cAlternateFileName="XQV9HA~1.OTS")) returned 0 [0087.168] FindClose (in: hFindFile=0x381d40 | out: hFindFile=0x381d40) returned 1 [0087.168] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e614) returned 1 [0087.168] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e620) returned 1 [0087.169] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\pC9__AmTieaQ3iZVw9R8\\QIviB1J8S42yLfp\\6ygdYcRuO9\\r M9y9TQ8L-H\\6PH LQIJcfFOT3.ppt", nBufferLength=0x105, lpBuffer=0x31e02c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\pC9__AmTieaQ3iZVw9R8\\QIviB1J8S42yLfp\\6ygdYcRuO9\\r M9y9TQ8L-H\\6PH LQIJcfFOT3.ppt", lpFilePart=0x0) returned 0x77 [0087.169] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e520) returned 1 [0087.169] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\pC9__AmTieaQ3iZVw9R8\\QIviB1J8S42yLfp\\6ygdYcRuO9\\r M9y9TQ8L-H\\6PH LQIJcfFOT3.ppt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\pc9__amtieaq3izvw9r8\\qivib1j8s42ylfp\\6ygdycruo9\\r m9y9tq8l-h\\6ph lqijcffot3.ppt"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x178 [0087.169] GetFileType (hFile=0x178) returned 0x1 [0087.169] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e51c) returned 1 [0087.169] GetFileType (hFile=0x178) returned 0x1 [0087.169] GetFileSize (in: hFile=0x178, lpFileSizeHigh=0x31e628 | out: lpFileSizeHigh=0x31e628*=0x0) returned 0x18cb0 [0087.169] ReadFile (in: hFile=0x178, lpBuffer=0x36194b0, nNumberOfBytesToRead=0x18cb0, lpNumberOfBytesRead=0x31e5d4, lpOverlapped=0x0 | out: lpBuffer=0x36194b0*, lpNumberOfBytesRead=0x31e5d4*=0x18cb0, lpOverlapped=0x0) returned 1 [0087.170] CloseHandle (hObject=0x178) returned 1 [0087.211] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\pC9__AmTieaQ3iZVw9R8\\QIviB1J8S42yLfp\\6ygdYcRuO9\\r M9y9TQ8L-H\\6PH LQIJcfFOT3.ppt", nBufferLength=0x105, lpBuffer=0x31e018, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\pC9__AmTieaQ3iZVw9R8\\QIviB1J8S42yLfp\\6ygdYcRuO9\\r M9y9TQ8L-H\\6PH LQIJcfFOT3.ppt", lpFilePart=0x0) returned 0x77 [0087.211] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e50c) returned 1 [0087.211] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\pC9__AmTieaQ3iZVw9R8\\QIviB1J8S42yLfp\\6ygdYcRuO9\\r M9y9TQ8L-H\\6PH LQIJcfFOT3.ppt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\pc9__amtieaq3izvw9r8\\qivib1j8s42ylfp\\6ygdycruo9\\r m9y9tq8l-h\\6ph lqijcffot3.ppt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x178 [0087.213] GetFileType (hFile=0x178) returned 0x1 [0087.213] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e508) returned 1 [0087.213] GetFileType (hFile=0x178) returned 0x1 [0087.213] WriteFile (in: hFile=0x178, lpBuffer=0x36954a0*, nNumberOfBytesToWrite=0x18cc0, lpNumberOfBytesWritten=0x31e5c8, lpOverlapped=0x0 | out: lpBuffer=0x36954a0*, lpNumberOfBytesWritten=0x31e5c8*=0x18cc0, lpOverlapped=0x0) returned 1 [0087.215] CloseHandle (hObject=0x178) returned 1 [0087.215] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\pC9__AmTieaQ3iZVw9R8\\QIviB1J8S42yLfp\\6ygdYcRuO9\\r M9y9TQ8L-H\\6PH LQIJcfFOT3.ppt", nBufferLength=0x105, lpBuffer=0x31e14c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\pC9__AmTieaQ3iZVw9R8\\QIviB1J8S42yLfp\\6ygdYcRuO9\\r M9y9TQ8L-H\\6PH LQIJcfFOT3.ppt", lpFilePart=0x0) returned 0x77 [0087.215] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\pC9__AmTieaQ3iZVw9R8\\QIviB1J8S42yLfp\\6ygdYcRuO9\\r M9y9TQ8L-H\\6PH LQIJcfFOT3.ppt", nBufferLength=0x105, lpBuffer=0x31e14c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\pC9__AmTieaQ3iZVw9R8\\QIviB1J8S42yLfp\\6ygdYcRuO9\\r M9y9TQ8L-H\\6PH LQIJcfFOT3.ppt", lpFilePart=0x0) returned 0x77 [0087.215] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e5ac) returned 1 [0087.215] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\pC9__AmTieaQ3iZVw9R8\\QIviB1J8S42yLfp\\6ygdYcRuO9\\r M9y9TQ8L-H\\6PH LQIJcfFOT3.ppt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\pc9__amtieaq3izvw9r8\\qivib1j8s42ylfp\\6ygdycruo9\\r m9y9tq8l-h\\6ph lqijcffot3.ppt"), fInfoLevelId=0x0, lpFileInformation=0x31e628 | out: lpFileInformation=0x31e628*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb08597c0, ftCreationTime.dwHighDateTime=0x1d5d8d0, ftLastAccessTime.dwLowDateTime=0xcf225fa0, ftLastAccessTime.dwHighDateTime=0x1d5e803, ftLastWriteTime.dwLowDateTime=0x176ce9e0, ftLastWriteTime.dwHighDateTime=0x1d6eb7f, nFileSizeHigh=0x0, nFileSizeLow=0x18cc0)) returned 1 [0087.215] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e5a8) returned 1 [0087.215] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\pC9__AmTieaQ3iZVw9R8\\QIviB1J8S42yLfp\\6ygdYcRuO9\\r M9y9TQ8L-H\\6PH LQIJcfFOT3.ppt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\pc9__amtieaq3izvw9r8\\qivib1j8s42ylfp\\6ygdycruo9\\r m9y9tq8l-h\\6ph lqijcffot3.ppt"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\pC9__AmTieaQ3iZVw9R8\\QIviB1J8S42yLfp\\6ygdYcRuO9\\r M9y9TQ8L-H\\6PH LQIJcfFOT3.ppt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\pc9__amtieaq3izvw9r8\\qivib1j8s42ylfp\\6ygdycruo9\\r m9y9tq8l-h\\6ph lqijcffot3.ppt")) returned 1 [0087.216] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e6cc) returned 1 [0087.216] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\pC9__AmTieaQ3iZVw9R8\\QIviB1J8S42yLfp\\ylM2mu-V6E1bfaho", nBufferLength=0x105, lpBuffer=0x31e1d4, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\pC9__AmTieaQ3iZVw9R8\\QIviB1J8S42yLfp\\ylM2mu-V6E1bfaho", lpFilePart=0x0) returned 0x5d [0087.216] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\pC9__AmTieaQ3iZVw9R8\\QIviB1J8S42yLfp\\ylM2mu-V6E1bfaho\\", nBufferLength=0x105, lpBuffer=0x31e1a8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\pC9__AmTieaQ3iZVw9R8\\QIviB1J8S42yLfp\\ylM2mu-V6E1bfaho\\", lpFilePart=0x0) returned 0x5e [0087.216] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\pC9__AmTieaQ3iZVw9R8\\QIviB1J8S42yLfp\\ylM2mu-V6E1bfaho\\*", lpFindFileData=0x31e3f4 | out: lpFindFileData=0x31e3f4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1fd7a230, ftCreationTime.dwHighDateTime=0x1d5ddcc, ftLastAccessTime.dwLowDateTime=0x19bdfed0, ftLastAccessTime.dwHighDateTime=0x1d5d8e5, ftLastWriteTime.dwLowDateTime=0x19bdfed0, ftLastWriteTime.dwHighDateTime=0x1d5d8e5, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x381d00 [0087.216] FindNextFileW (in: hFindFile=0x381d00, lpFindFileData=0x31e404 | out: lpFindFileData=0x31e404*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1fd7a230, ftCreationTime.dwHighDateTime=0x1d5ddcc, ftLastAccessTime.dwLowDateTime=0x19bdfed0, ftLastAccessTime.dwHighDateTime=0x1d5d8e5, ftLastWriteTime.dwLowDateTime=0x19bdfed0, ftLastWriteTime.dwHighDateTime=0x1d5d8e5, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0087.216] FindNextFileW (in: hFindFile=0x381d00, lpFindFileData=0x31e404 | out: lpFindFileData=0x31e404*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9152a580, ftCreationTime.dwHighDateTime=0x1d5e598, ftLastAccessTime.dwLowDateTime=0xff8dc6d0, ftLastAccessTime.dwHighDateTime=0x1d5da2e, ftLastWriteTime.dwLowDateTime=0xff8dc6d0, ftLastWriteTime.dwHighDateTime=0x1d5da2e, nFileSizeHigh=0x0, nFileSizeLow=0x10116, dwReserved0=0x0, dwReserved1=0x0, cFileName="aF BVNmJ_Atzx_a.ods", cAlternateFileName="AFBVNM~1.ODS")) returned 1 [0087.216] FindNextFileW (in: hFindFile=0x381d00, lpFindFileData=0x31e404 | out: lpFindFileData=0x31e404*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xde82be50, ftCreationTime.dwHighDateTime=0x1d5e7a8, ftLastAccessTime.dwLowDateTime=0x7d95b360, ftLastAccessTime.dwHighDateTime=0x1d5dc43, ftLastWriteTime.dwLowDateTime=0x7d95b360, ftLastWriteTime.dwHighDateTime=0x1d5dc43, nFileSizeHigh=0x0, nFileSizeLow=0xa4dc, dwReserved0=0x0, dwReserved1=0x0, cFileName="dkDwWWi6Y8y Q.docx", cAlternateFileName="DKDWWW~1.DOC")) returned 1 [0087.216] FindNextFileW (in: hFindFile=0x381d00, lpFindFileData=0x31e404 | out: lpFindFileData=0x31e404*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x13c2f830, ftCreationTime.dwHighDateTime=0x1d5e5df, ftLastAccessTime.dwLowDateTime=0xb1248f60, ftLastAccessTime.dwHighDateTime=0x1d5e690, ftLastWriteTime.dwLowDateTime=0xb1248f60, ftLastWriteTime.dwHighDateTime=0x1d5e690, nFileSizeHigh=0x0, nFileSizeLow=0x13859, dwReserved0=0x0, dwReserved1=0x0, cFileName="kpbUV nhoxZNIL.csv", cAlternateFileName="KPBUVN~1.CSV")) returned 1 [0087.216] FindNextFileW (in: hFindFile=0x381d00, lpFindFileData=0x31e404 | out: lpFindFileData=0x31e404*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x16541440, ftCreationTime.dwHighDateTime=0x1d5e5e8, ftLastAccessTime.dwLowDateTime=0x678fe760, ftLastAccessTime.dwHighDateTime=0x1d5ddde, ftLastWriteTime.dwLowDateTime=0x678fe760, ftLastWriteTime.dwHighDateTime=0x1d5ddde, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="TgDrcLYi-", cAlternateFileName="TGDRCL~1")) returned 1 [0087.217] FindNextFileW (in: hFindFile=0x381d00, lpFindFileData=0x31e404 | out: lpFindFileData=0x31e404*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x869aee20, ftCreationTime.dwHighDateTime=0x1d5de2e, ftLastAccessTime.dwLowDateTime=0x60e7d390, ftLastAccessTime.dwHighDateTime=0x1d5e785, ftLastWriteTime.dwLowDateTime=0x60e7d390, ftLastWriteTime.dwHighDateTime=0x1d5e785, nFileSizeHigh=0x0, nFileSizeLow=0xd934, dwReserved0=0x0, dwReserved1=0x0, cFileName="Ze4qx331n4oC1.ots", cAlternateFileName="ZE4QX3~1.OTS")) returned 1 [0087.217] FindNextFileW (in: hFindFile=0x381d00, lpFindFileData=0x31e404 | out: lpFindFileData=0x31e404*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0087.217] FindClose (in: hFindFile=0x381d00 | out: hFindFile=0x381d00) returned 1 [0087.217] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e68c) returned 1 [0087.217] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e698) returned 1 [0087.217] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e6cc) returned 1 [0087.217] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\pC9__AmTieaQ3iZVw9R8\\QIviB1J8S42yLfp\\ylM2mu-V6E1bfaho", nBufferLength=0x105, lpBuffer=0x31e1d4, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\pC9__AmTieaQ3iZVw9R8\\QIviB1J8S42yLfp\\ylM2mu-V6E1bfaho", lpFilePart=0x0) returned 0x5d [0087.217] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\pC9__AmTieaQ3iZVw9R8\\QIviB1J8S42yLfp\\ylM2mu-V6E1bfaho\\", nBufferLength=0x105, lpBuffer=0x31e1a8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\pC9__AmTieaQ3iZVw9R8\\QIviB1J8S42yLfp\\ylM2mu-V6E1bfaho\\", lpFilePart=0x0) returned 0x5e [0087.217] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\pC9__AmTieaQ3iZVw9R8\\QIviB1J8S42yLfp\\ylM2mu-V6E1bfaho\\*", lpFindFileData=0x31e3f4 | out: lpFindFileData=0x31e3f4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1fd7a230, ftCreationTime.dwHighDateTime=0x1d5ddcc, ftLastAccessTime.dwLowDateTime=0x19bdfed0, ftLastAccessTime.dwHighDateTime=0x1d5d8e5, ftLastWriteTime.dwLowDateTime=0x19bdfed0, ftLastWriteTime.dwHighDateTime=0x1d5d8e5, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x381d00 [0087.217] FindNextFileW (in: hFindFile=0x381d00, lpFindFileData=0x31e404 | out: lpFindFileData=0x31e404*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1fd7a230, ftCreationTime.dwHighDateTime=0x1d5ddcc, ftLastAccessTime.dwLowDateTime=0x19bdfed0, ftLastAccessTime.dwHighDateTime=0x1d5d8e5, ftLastWriteTime.dwLowDateTime=0x19bdfed0, ftLastWriteTime.dwHighDateTime=0x1d5d8e5, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0087.217] FindNextFileW (in: hFindFile=0x381d00, lpFindFileData=0x31e404 | out: lpFindFileData=0x31e404*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9152a580, ftCreationTime.dwHighDateTime=0x1d5e598, ftLastAccessTime.dwLowDateTime=0xff8dc6d0, ftLastAccessTime.dwHighDateTime=0x1d5da2e, ftLastWriteTime.dwLowDateTime=0xff8dc6d0, ftLastWriteTime.dwHighDateTime=0x1d5da2e, nFileSizeHigh=0x0, nFileSizeLow=0x10116, dwReserved0=0x0, dwReserved1=0x0, cFileName="aF BVNmJ_Atzx_a.ods", cAlternateFileName="AFBVNM~1.ODS")) returned 1 [0087.217] FindNextFileW (in: hFindFile=0x381d00, lpFindFileData=0x31e404 | out: lpFindFileData=0x31e404*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xde82be50, ftCreationTime.dwHighDateTime=0x1d5e7a8, ftLastAccessTime.dwLowDateTime=0x7d95b360, ftLastAccessTime.dwHighDateTime=0x1d5dc43, ftLastWriteTime.dwLowDateTime=0x7d95b360, ftLastWriteTime.dwHighDateTime=0x1d5dc43, nFileSizeHigh=0x0, nFileSizeLow=0xa4dc, dwReserved0=0x0, dwReserved1=0x0, cFileName="dkDwWWi6Y8y Q.docx", cAlternateFileName="DKDWWW~1.DOC")) returned 1 [0087.218] FindNextFileW (in: hFindFile=0x381d00, lpFindFileData=0x31e404 | out: lpFindFileData=0x31e404*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x13c2f830, ftCreationTime.dwHighDateTime=0x1d5e5df, ftLastAccessTime.dwLowDateTime=0xb1248f60, ftLastAccessTime.dwHighDateTime=0x1d5e690, ftLastWriteTime.dwLowDateTime=0xb1248f60, ftLastWriteTime.dwHighDateTime=0x1d5e690, nFileSizeHigh=0x0, nFileSizeLow=0x13859, dwReserved0=0x0, dwReserved1=0x0, cFileName="kpbUV nhoxZNIL.csv", cAlternateFileName="KPBUVN~1.CSV")) returned 1 [0087.218] FindNextFileW (in: hFindFile=0x381d00, lpFindFileData=0x31e404 | out: lpFindFileData=0x31e404*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x16541440, ftCreationTime.dwHighDateTime=0x1d5e5e8, ftLastAccessTime.dwLowDateTime=0x678fe760, ftLastAccessTime.dwHighDateTime=0x1d5ddde, ftLastWriteTime.dwLowDateTime=0x678fe760, ftLastWriteTime.dwHighDateTime=0x1d5ddde, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="TgDrcLYi-", cAlternateFileName="TGDRCL~1")) returned 1 [0087.218] FindNextFileW (in: hFindFile=0x381d00, lpFindFileData=0x31e404 | out: lpFindFileData=0x31e404*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x869aee20, ftCreationTime.dwHighDateTime=0x1d5de2e, ftLastAccessTime.dwLowDateTime=0x60e7d390, ftLastAccessTime.dwHighDateTime=0x1d5e785, ftLastWriteTime.dwLowDateTime=0x60e7d390, ftLastWriteTime.dwHighDateTime=0x1d5e785, nFileSizeHigh=0x0, nFileSizeLow=0xd934, dwReserved0=0x0, dwReserved1=0x0, cFileName="Ze4qx331n4oC1.ots", cAlternateFileName="ZE4QX3~1.OTS")) returned 1 [0087.218] FindNextFileW (in: hFindFile=0x381d00, lpFindFileData=0x31e404 | out: lpFindFileData=0x31e404*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x869aee20, ftCreationTime.dwHighDateTime=0x1d5de2e, ftLastAccessTime.dwLowDateTime=0x60e7d390, ftLastAccessTime.dwHighDateTime=0x1d5e785, ftLastWriteTime.dwLowDateTime=0x60e7d390, ftLastWriteTime.dwHighDateTime=0x1d5e785, nFileSizeHigh=0x0, nFileSizeLow=0xd934, dwReserved0=0x0, dwReserved1=0x0, cFileName="Ze4qx331n4oC1.ots", cAlternateFileName="ZE4QX3~1.OTS")) returned 0 [0087.218] FindClose (in: hFindFile=0x381d00 | out: hFindFile=0x381d00) returned 1 [0087.218] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e68c) returned 1 [0087.218] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e698) returned 1 [0087.218] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\pC9__AmTieaQ3iZVw9R8\\QIviB1J8S42yLfp\\ylM2mu-V6E1bfaho\\dkDwWWi6Y8y Q.docx", nBufferLength=0x105, lpBuffer=0x31e0a4, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\pC9__AmTieaQ3iZVw9R8\\QIviB1J8S42yLfp\\ylM2mu-V6E1bfaho\\dkDwWWi6Y8y Q.docx", lpFilePart=0x0) returned 0x70 [0087.218] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e598) returned 1 [0087.218] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\pC9__AmTieaQ3iZVw9R8\\QIviB1J8S42yLfp\\ylM2mu-V6E1bfaho\\dkDwWWi6Y8y Q.docx" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\pc9__amtieaq3izvw9r8\\qivib1j8s42ylfp\\ylm2mu-v6e1bfaho\\dkdwwwi6y8y q.docx"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x178 [0087.218] GetFileType (hFile=0x178) returned 0x1 [0087.218] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e594) returned 1 [0087.219] GetFileType (hFile=0x178) returned 0x1 [0087.219] GetFileSize (in: hFile=0x178, lpFileSizeHigh=0x31e6a0 | out: lpFileSizeHigh=0x31e6a0*=0x0) returned 0xa4dc [0087.219] ReadFile (in: hFile=0x178, lpBuffer=0x267fed8, nNumberOfBytesToRead=0xa4dc, lpNumberOfBytesRead=0x31e64c, lpOverlapped=0x0 | out: lpBuffer=0x267fed8*, lpNumberOfBytesRead=0x31e64c*=0xa4dc, lpOverlapped=0x0) returned 1 [0087.220] CloseHandle (hObject=0x178) returned 1 [0087.234] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\pC9__AmTieaQ3iZVw9R8\\QIviB1J8S42yLfp\\ylM2mu-V6E1bfaho\\dkDwWWi6Y8y Q.docx", nBufferLength=0x105, lpBuffer=0x31e090, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\pC9__AmTieaQ3iZVw9R8\\QIviB1J8S42yLfp\\ylM2mu-V6E1bfaho\\dkDwWWi6Y8y Q.docx", lpFilePart=0x0) returned 0x70 [0087.234] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e584) returned 1 [0087.234] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\pC9__AmTieaQ3iZVw9R8\\QIviB1J8S42yLfp\\ylM2mu-V6E1bfaho\\dkDwWWi6Y8y Q.docx" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\pc9__amtieaq3izvw9r8\\qivib1j8s42ylfp\\ylm2mu-v6e1bfaho\\dkdwwwi6y8y q.docx"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x178 [0087.235] GetFileType (hFile=0x178) returned 0x1 [0087.235] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e580) returned 1 [0087.235] GetFileType (hFile=0x178) returned 0x1 [0087.235] WriteFile (in: hFile=0x178, lpBuffer=0x270051c*, nNumberOfBytesToWrite=0xa4e0, lpNumberOfBytesWritten=0x31e640, lpOverlapped=0x0 | out: lpBuffer=0x270051c*, lpNumberOfBytesWritten=0x31e640*=0xa4e0, lpOverlapped=0x0) returned 1 [0087.236] CloseHandle (hObject=0x178) returned 1 [0087.236] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\pC9__AmTieaQ3iZVw9R8\\QIviB1J8S42yLfp\\ylM2mu-V6E1bfaho\\dkDwWWi6Y8y Q.docx", nBufferLength=0x105, lpBuffer=0x31e1c4, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\pC9__AmTieaQ3iZVw9R8\\QIviB1J8S42yLfp\\ylM2mu-V6E1bfaho\\dkDwWWi6Y8y Q.docx", lpFilePart=0x0) returned 0x70 [0087.237] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\pC9__AmTieaQ3iZVw9R8\\QIviB1J8S42yLfp\\ylM2mu-V6E1bfaho\\dkDwWWi6Y8y Q.docx", nBufferLength=0x105, lpBuffer=0x31e1c4, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\pC9__AmTieaQ3iZVw9R8\\QIviB1J8S42yLfp\\ylM2mu-V6E1bfaho\\dkDwWWi6Y8y Q.docx", lpFilePart=0x0) returned 0x70 [0087.237] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e624) returned 1 [0087.237] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\pC9__AmTieaQ3iZVw9R8\\QIviB1J8S42yLfp\\ylM2mu-V6E1bfaho\\dkDwWWi6Y8y Q.docx" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\pc9__amtieaq3izvw9r8\\qivib1j8s42ylfp\\ylm2mu-v6e1bfaho\\dkdwwwi6y8y q.docx"), fInfoLevelId=0x0, lpFileInformation=0x31e6a0 | out: lpFileInformation=0x31e6a0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xde82be50, ftCreationTime.dwHighDateTime=0x1d5e7a8, ftLastAccessTime.dwLowDateTime=0x7d95b360, ftLastAccessTime.dwHighDateTime=0x1d5dc43, ftLastWriteTime.dwLowDateTime=0x1771aca0, ftLastWriteTime.dwHighDateTime=0x1d6eb7f, nFileSizeHigh=0x0, nFileSizeLow=0xa4e0)) returned 1 [0087.237] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e620) returned 1 [0087.237] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\pC9__AmTieaQ3iZVw9R8\\QIviB1J8S42yLfp\\ylM2mu-V6E1bfaho\\dkDwWWi6Y8y Q.docx" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\pc9__amtieaq3izvw9r8\\qivib1j8s42ylfp\\ylm2mu-v6e1bfaho\\dkdwwwi6y8y q.docx"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\pC9__AmTieaQ3iZVw9R8\\QIviB1J8S42yLfp\\ylM2mu-V6E1bfaho\\dkDwWWi6Y8y Q.docx" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\pc9__amtieaq3izvw9r8\\qivib1j8s42ylfp\\ylm2mu-v6e1bfaho\\dkdwwwi6y8y q.docx")) returned 1 [0087.237] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\pC9__AmTieaQ3iZVw9R8\\QIviB1J8S42yLfp\\ylM2mu-V6E1bfaho\\kpbUV nhoxZNIL.csv", nBufferLength=0x105, lpBuffer=0x31e0a4, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\pC9__AmTieaQ3iZVw9R8\\QIviB1J8S42yLfp\\ylM2mu-V6E1bfaho\\kpbUV nhoxZNIL.csv", lpFilePart=0x0) returned 0x70 [0087.237] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e598) returned 1 [0087.237] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\pC9__AmTieaQ3iZVw9R8\\QIviB1J8S42yLfp\\ylM2mu-V6E1bfaho\\kpbUV nhoxZNIL.csv" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\pc9__amtieaq3izvw9r8\\qivib1j8s42ylfp\\ylm2mu-v6e1bfaho\\kpbuv nhoxznil.csv"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x178 [0087.237] GetFileType (hFile=0x178) returned 0x1 [0087.237] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e594) returned 1 [0087.237] GetFileType (hFile=0x178) returned 0x1 [0087.237] GetFileSize (in: hFile=0x178, lpFileSizeHigh=0x31e6a0 | out: lpFileSizeHigh=0x31e6a0*=0x0) returned 0x13859 [0087.237] ReadFile (in: hFile=0x178, lpBuffer=0x270af00, nNumberOfBytesToRead=0x13859, lpNumberOfBytesRead=0x31e64c, lpOverlapped=0x0 | out: lpBuffer=0x270af00*, lpNumberOfBytesRead=0x31e64c*=0x13859, lpOverlapped=0x0) returned 1 [0087.239] CloseHandle (hObject=0x178) returned 1 [0087.277] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\pC9__AmTieaQ3iZVw9R8\\QIviB1J8S42yLfp\\ylM2mu-V6E1bfaho\\kpbUV nhoxZNIL.csv", nBufferLength=0x105, lpBuffer=0x31e090, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\pC9__AmTieaQ3iZVw9R8\\QIviB1J8S42yLfp\\ylM2mu-V6E1bfaho\\kpbUV nhoxZNIL.csv", lpFilePart=0x0) returned 0x70 [0087.277] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e584) returned 1 [0087.277] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\pC9__AmTieaQ3iZVw9R8\\QIviB1J8S42yLfp\\ylM2mu-V6E1bfaho\\kpbUV nhoxZNIL.csv" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\pc9__amtieaq3izvw9r8\\qivib1j8s42ylfp\\ylm2mu-v6e1bfaho\\kpbuv nhoxznil.csv"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x178 [0087.279] GetFileType (hFile=0x178) returned 0x1 [0087.279] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e580) returned 1 [0087.279] GetFileType (hFile=0x178) returned 0x1 [0087.279] WriteFile (in: hFile=0x178, lpBuffer=0x279261c*, nNumberOfBytesToWrite=0x13860, lpNumberOfBytesWritten=0x31e640, lpOverlapped=0x0 | out: lpBuffer=0x279261c*, lpNumberOfBytesWritten=0x31e640*=0x13860, lpOverlapped=0x0) returned 1 [0087.280] CloseHandle (hObject=0x178) returned 1 [0087.281] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\pC9__AmTieaQ3iZVw9R8\\QIviB1J8S42yLfp\\ylM2mu-V6E1bfaho\\kpbUV nhoxZNIL.csv", nBufferLength=0x105, lpBuffer=0x31e1c4, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\pC9__AmTieaQ3iZVw9R8\\QIviB1J8S42yLfp\\ylM2mu-V6E1bfaho\\kpbUV nhoxZNIL.csv", lpFilePart=0x0) returned 0x70 [0087.281] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\pC9__AmTieaQ3iZVw9R8\\QIviB1J8S42yLfp\\ylM2mu-V6E1bfaho\\kpbUV nhoxZNIL.csv", nBufferLength=0x105, lpBuffer=0x31e1c4, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\pC9__AmTieaQ3iZVw9R8\\QIviB1J8S42yLfp\\ylM2mu-V6E1bfaho\\kpbUV nhoxZNIL.csv", lpFilePart=0x0) returned 0x70 [0087.281] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e624) returned 1 [0087.281] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\pC9__AmTieaQ3iZVw9R8\\QIviB1J8S42yLfp\\ylM2mu-V6E1bfaho\\kpbUV nhoxZNIL.csv" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\pc9__amtieaq3izvw9r8\\qivib1j8s42ylfp\\ylm2mu-v6e1bfaho\\kpbuv nhoxznil.csv"), fInfoLevelId=0x0, lpFileInformation=0x31e6a0 | out: lpFileInformation=0x31e6a0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x13c2f830, ftCreationTime.dwHighDateTime=0x1d5e5df, ftLastAccessTime.dwLowDateTime=0xb1248f60, ftLastAccessTime.dwHighDateTime=0x1d5e690, ftLastWriteTime.dwLowDateTime=0x17766f60, ftLastWriteTime.dwHighDateTime=0x1d6eb7f, nFileSizeHigh=0x0, nFileSizeLow=0x13860)) returned 1 [0087.281] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e620) returned 1 [0087.281] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\pC9__AmTieaQ3iZVw9R8\\QIviB1J8S42yLfp\\ylM2mu-V6E1bfaho\\kpbUV nhoxZNIL.csv" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\pc9__amtieaq3izvw9r8\\qivib1j8s42ylfp\\ylm2mu-v6e1bfaho\\kpbuv nhoxznil.csv"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\pC9__AmTieaQ3iZVw9R8\\QIviB1J8S42yLfp\\ylM2mu-V6E1bfaho\\kpbUV nhoxZNIL.csv" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\pc9__amtieaq3izvw9r8\\qivib1j8s42ylfp\\ylm2mu-v6e1bfaho\\kpbuv nhoxznil.csv")) returned 1 [0087.281] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e654) returned 1 [0087.281] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\pC9__AmTieaQ3iZVw9R8\\QIviB1J8S42yLfp\\ylM2mu-V6E1bfaho\\TgDrcLYi-", nBufferLength=0x105, lpBuffer=0x31e15c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\pC9__AmTieaQ3iZVw9R8\\QIviB1J8S42yLfp\\ylM2mu-V6E1bfaho\\TgDrcLYi-", lpFilePart=0x0) returned 0x67 [0087.281] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\pC9__AmTieaQ3iZVw9R8\\QIviB1J8S42yLfp\\ylM2mu-V6E1bfaho\\TgDrcLYi-\\", nBufferLength=0x105, lpBuffer=0x31e130, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\pC9__AmTieaQ3iZVw9R8\\QIviB1J8S42yLfp\\ylM2mu-V6E1bfaho\\TgDrcLYi-\\", lpFilePart=0x0) returned 0x68 [0087.281] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\pC9__AmTieaQ3iZVw9R8\\QIviB1J8S42yLfp\\ylM2mu-V6E1bfaho\\TgDrcLYi-\\*", lpFindFileData=0x31e37c | out: lpFindFileData=0x31e37c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x16541440, ftCreationTime.dwHighDateTime=0x1d5e5e8, ftLastAccessTime.dwLowDateTime=0x678fe760, ftLastAccessTime.dwHighDateTime=0x1d5ddde, ftLastWriteTime.dwLowDateTime=0x678fe760, ftLastWriteTime.dwHighDateTime=0x1d5ddde, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x381e00 [0087.282] FindNextFileW (in: hFindFile=0x381e00, lpFindFileData=0x31e38c | out: lpFindFileData=0x31e38c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x16541440, ftCreationTime.dwHighDateTime=0x1d5e5e8, ftLastAccessTime.dwLowDateTime=0x678fe760, ftLastAccessTime.dwHighDateTime=0x1d5ddde, ftLastWriteTime.dwLowDateTime=0x678fe760, ftLastWriteTime.dwHighDateTime=0x1d5ddde, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0087.282] FindNextFileW (in: hFindFile=0x381e00, lpFindFileData=0x31e38c | out: lpFindFileData=0x31e38c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf97ee5b0, ftCreationTime.dwHighDateTime=0x1d5e70a, ftLastAccessTime.dwLowDateTime=0x335eaa80, ftLastAccessTime.dwHighDateTime=0x1d5dfbe, ftLastWriteTime.dwLowDateTime=0x335eaa80, ftLastWriteTime.dwHighDateTime=0x1d5dfbe, nFileSizeHigh=0x0, nFileSizeLow=0xd6bc, dwReserved0=0x0, dwReserved1=0x0, cFileName="zXdq.odt", cAlternateFileName="")) returned 1 [0087.282] FindNextFileW (in: hFindFile=0x381e00, lpFindFileData=0x31e38c | out: lpFindFileData=0x31e38c*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0087.282] FindClose (in: hFindFile=0x381e00 | out: hFindFile=0x381e00) returned 1 [0087.282] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e614) returned 1 [0087.282] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e620) returned 1 [0087.282] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e654) returned 1 [0087.282] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\pC9__AmTieaQ3iZVw9R8\\QIviB1J8S42yLfp\\ylM2mu-V6E1bfaho\\TgDrcLYi-", nBufferLength=0x105, lpBuffer=0x31e15c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\pC9__AmTieaQ3iZVw9R8\\QIviB1J8S42yLfp\\ylM2mu-V6E1bfaho\\TgDrcLYi-", lpFilePart=0x0) returned 0x67 [0087.282] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\pC9__AmTieaQ3iZVw9R8\\QIviB1J8S42yLfp\\ylM2mu-V6E1bfaho\\TgDrcLYi-\\", nBufferLength=0x105, lpBuffer=0x31e130, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\pC9__AmTieaQ3iZVw9R8\\QIviB1J8S42yLfp\\ylM2mu-V6E1bfaho\\TgDrcLYi-\\", lpFilePart=0x0) returned 0x68 [0087.282] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\pC9__AmTieaQ3iZVw9R8\\QIviB1J8S42yLfp\\ylM2mu-V6E1bfaho\\TgDrcLYi-\\*", lpFindFileData=0x31e37c | out: lpFindFileData=0x31e37c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x16541440, ftCreationTime.dwHighDateTime=0x1d5e5e8, ftLastAccessTime.dwLowDateTime=0x678fe760, ftLastAccessTime.dwHighDateTime=0x1d5ddde, ftLastWriteTime.dwLowDateTime=0x678fe760, ftLastWriteTime.dwHighDateTime=0x1d5ddde, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x381e00 [0087.283] FindNextFileW (in: hFindFile=0x381e00, lpFindFileData=0x31e38c | out: lpFindFileData=0x31e38c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x16541440, ftCreationTime.dwHighDateTime=0x1d5e5e8, ftLastAccessTime.dwLowDateTime=0x678fe760, ftLastAccessTime.dwHighDateTime=0x1d5ddde, ftLastWriteTime.dwLowDateTime=0x678fe760, ftLastWriteTime.dwHighDateTime=0x1d5ddde, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0087.283] FindNextFileW (in: hFindFile=0x381e00, lpFindFileData=0x31e38c | out: lpFindFileData=0x31e38c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf97ee5b0, ftCreationTime.dwHighDateTime=0x1d5e70a, ftLastAccessTime.dwLowDateTime=0x335eaa80, ftLastAccessTime.dwHighDateTime=0x1d5dfbe, ftLastWriteTime.dwLowDateTime=0x335eaa80, ftLastWriteTime.dwHighDateTime=0x1d5dfbe, nFileSizeHigh=0x0, nFileSizeLow=0xd6bc, dwReserved0=0x0, dwReserved1=0x0, cFileName="zXdq.odt", cAlternateFileName="")) returned 1 [0087.283] FindNextFileW (in: hFindFile=0x381e00, lpFindFileData=0x31e38c | out: lpFindFileData=0x31e38c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf97ee5b0, ftCreationTime.dwHighDateTime=0x1d5e70a, ftLastAccessTime.dwLowDateTime=0x335eaa80, ftLastAccessTime.dwHighDateTime=0x1d5dfbe, ftLastWriteTime.dwLowDateTime=0x335eaa80, ftLastWriteTime.dwHighDateTime=0x1d5dfbe, nFileSizeHigh=0x0, nFileSizeLow=0xd6bc, dwReserved0=0x0, dwReserved1=0x0, cFileName="zXdq.odt", cAlternateFileName="")) returned 0 [0087.283] FindClose (in: hFindFile=0x381e00 | out: hFindFile=0x381e00) returned 1 [0087.283] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e614) returned 1 [0087.283] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e620) returned 1 [0087.283] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\pC9__AmTieaQ3iZVw9R8\\QIviB1J8S42yLfp\\ylM2mu-V6E1bfaho\\TgDrcLYi-\\zXdq.odt", nBufferLength=0x105, lpBuffer=0x31e02c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\pC9__AmTieaQ3iZVw9R8\\QIviB1J8S42yLfp\\ylM2mu-V6E1bfaho\\TgDrcLYi-\\zXdq.odt", lpFilePart=0x0) returned 0x70 [0087.283] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e520) returned 1 [0087.283] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\pC9__AmTieaQ3iZVw9R8\\QIviB1J8S42yLfp\\ylM2mu-V6E1bfaho\\TgDrcLYi-\\zXdq.odt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\pc9__amtieaq3izvw9r8\\qivib1j8s42ylfp\\ylm2mu-v6e1bfaho\\tgdrclyi-\\zxdq.odt"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x178 [0087.283] GetFileType (hFile=0x178) returned 0x1 [0087.283] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e51c) returned 1 [0087.283] GetFileType (hFile=0x178) returned 0x1 [0087.283] GetFileSize (in: hFile=0x178, lpFileSizeHigh=0x31e628 | out: lpFileSizeHigh=0x31e628*=0x0) returned 0xd6bc [0087.283] ReadFile (in: hFile=0x178, lpBuffer=0x27a8490, nNumberOfBytesToRead=0xd6bc, lpNumberOfBytesRead=0x31e5d4, lpOverlapped=0x0 | out: lpBuffer=0x27a8490*, lpNumberOfBytesRead=0x31e5d4*=0xd6bc, lpOverlapped=0x0) returned 1 [0087.284] CloseHandle (hObject=0x178) returned 1 [0087.299] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\pC9__AmTieaQ3iZVw9R8\\QIviB1J8S42yLfp\\ylM2mu-V6E1bfaho\\TgDrcLYi-\\zXdq.odt", nBufferLength=0x105, lpBuffer=0x31e018, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\pC9__AmTieaQ3iZVw9R8\\QIviB1J8S42yLfp\\ylM2mu-V6E1bfaho\\TgDrcLYi-\\zXdq.odt", lpFilePart=0x0) returned 0x70 [0087.299] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e50c) returned 1 [0087.299] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\pC9__AmTieaQ3iZVw9R8\\QIviB1J8S42yLfp\\ylM2mu-V6E1bfaho\\TgDrcLYi-\\zXdq.odt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\pc9__amtieaq3izvw9r8\\qivib1j8s42ylfp\\ylm2mu-v6e1bfaho\\tgdrclyi-\\zxdq.odt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x178 [0087.300] GetFileType (hFile=0x178) returned 0x1 [0087.300] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e508) returned 1 [0087.300] GetFileType (hFile=0x178) returned 0x1 [0087.300] WriteFile (in: hFile=0x178, lpBuffer=0x281d6c8*, nNumberOfBytesToWrite=0xd6c0, lpNumberOfBytesWritten=0x31e5c8, lpOverlapped=0x0 | out: lpBuffer=0x281d6c8*, lpNumberOfBytesWritten=0x31e5c8*=0xd6c0, lpOverlapped=0x0) returned 1 [0087.302] CloseHandle (hObject=0x178) returned 1 [0087.302] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\pC9__AmTieaQ3iZVw9R8\\QIviB1J8S42yLfp\\ylM2mu-V6E1bfaho\\TgDrcLYi-\\zXdq.odt", nBufferLength=0x105, lpBuffer=0x31e14c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\pC9__AmTieaQ3iZVw9R8\\QIviB1J8S42yLfp\\ylM2mu-V6E1bfaho\\TgDrcLYi-\\zXdq.odt", lpFilePart=0x0) returned 0x70 [0087.302] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\pC9__AmTieaQ3iZVw9R8\\QIviB1J8S42yLfp\\ylM2mu-V6E1bfaho\\TgDrcLYi-\\zXdq.odt", nBufferLength=0x105, lpBuffer=0x31e14c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\pC9__AmTieaQ3iZVw9R8\\QIviB1J8S42yLfp\\ylM2mu-V6E1bfaho\\TgDrcLYi-\\zXdq.odt", lpFilePart=0x0) returned 0x70 [0087.302] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e5ac) returned 1 [0087.302] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\pC9__AmTieaQ3iZVw9R8\\QIviB1J8S42yLfp\\ylM2mu-V6E1bfaho\\TgDrcLYi-\\zXdq.odt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\pc9__amtieaq3izvw9r8\\qivib1j8s42ylfp\\ylm2mu-v6e1bfaho\\tgdrclyi-\\zxdq.odt"), fInfoLevelId=0x0, lpFileInformation=0x31e628 | out: lpFileInformation=0x31e628*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf97ee5b0, ftCreationTime.dwHighDateTime=0x1d5e70a, ftLastAccessTime.dwLowDateTime=0x335eaa80, ftLastAccessTime.dwHighDateTime=0x1d5dfbe, ftLastWriteTime.dwLowDateTime=0x177b3220, ftLastWriteTime.dwHighDateTime=0x1d6eb7f, nFileSizeHigh=0x0, nFileSizeLow=0xd6c0)) returned 1 [0087.302] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e5a8) returned 1 [0087.302] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\pC9__AmTieaQ3iZVw9R8\\QIviB1J8S42yLfp\\ylM2mu-V6E1bfaho\\TgDrcLYi-\\zXdq.odt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\pc9__amtieaq3izvw9r8\\qivib1j8s42ylfp\\ylm2mu-v6e1bfaho\\tgdrclyi-\\zxdq.odt"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\pC9__AmTieaQ3iZVw9R8\\QIviB1J8S42yLfp\\ylM2mu-V6E1bfaho\\TgDrcLYi-\\zXdq.odt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\pc9__amtieaq3izvw9r8\\qivib1j8s42ylfp\\ylm2mu-v6e1bfaho\\tgdrclyi-\\zxdq.odt")) returned 1 [0087.302] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e834) returned 1 [0087.302] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Downloads", nBufferLength=0x105, lpBuffer=0x31e33c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Downloads", lpFilePart=0x0) returned 0x27 [0087.302] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Downloads\\", nBufferLength=0x105, lpBuffer=0x31e310, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Downloads\\", lpFilePart=0x0) returned 0x28 [0087.302] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Downloads\\*", lpFindFileData=0x31e55c | out: lpFindFileData=0x31e55c*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x28cff640, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28d4b900, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x2d1e12e0, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x381dc0 [0087.303] FindNextFileW (in: hFindFile=0x381dc0, lpFindFileData=0x31e56c | out: lpFindFileData=0x31e56c*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x28cff640, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28d4b900, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x2d1e12e0, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0087.303] FindNextFileW (in: hFindFile=0x381dc0, lpFindFileData=0x31e56c | out: lpFindFileData=0x31e56c*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0x28d4b900, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28d4b900, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x2d1e12e0, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x11a, dwReserved0=0x0, dwReserved1=0x0, cFileName="desktop.ini", cAlternateFileName="")) returned 1 [0087.303] FindNextFileW (in: hFindFile=0x381dc0, lpFindFileData=0x31e56c | out: lpFindFileData=0x31e56c*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0087.303] FindClose (in: hFindFile=0x381dc0 | out: hFindFile=0x381dc0) returned 1 [0087.303] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e7f4) returned 1 [0087.303] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e800) returned 1 [0087.303] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e834) returned 1 [0087.303] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Downloads", nBufferLength=0x105, lpBuffer=0x31e33c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Downloads", lpFilePart=0x0) returned 0x27 [0087.303] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Downloads\\", nBufferLength=0x105, lpBuffer=0x31e310, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Downloads\\", lpFilePart=0x0) returned 0x28 [0087.303] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Downloads\\*", lpFindFileData=0x31e55c | out: lpFindFileData=0x31e55c*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x28cff640, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28d4b900, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x2d1e12e0, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x381dc0 [0087.303] FindNextFileW (in: hFindFile=0x381dc0, lpFindFileData=0x31e56c | out: lpFindFileData=0x31e56c*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x28cff640, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28d4b900, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x2d1e12e0, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0087.304] FindNextFileW (in: hFindFile=0x381dc0, lpFindFileData=0x31e56c | out: lpFindFileData=0x31e56c*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0x28d4b900, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28d4b900, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x2d1e12e0, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x11a, dwReserved0=0x0, dwReserved1=0x0, cFileName="desktop.ini", cAlternateFileName="")) returned 1 [0087.304] FindNextFileW (in: hFindFile=0x381dc0, lpFindFileData=0x31e56c | out: lpFindFileData=0x31e56c*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0x28d4b900, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28d4b900, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x2d1e12e0, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x11a, dwReserved0=0x0, dwReserved1=0x0, cFileName="desktop.ini", cAlternateFileName="")) returned 0 [0087.304] FindClose (in: hFindFile=0x381dc0 | out: hFindFile=0x381dc0) returned 1 [0087.304] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e7f4) returned 1 [0087.304] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e800) returned 1 [0087.304] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e834) returned 1 [0087.304] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Favorites", nBufferLength=0x105, lpBuffer=0x31e33c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Favorites", lpFilePart=0x0) returned 0x27 [0087.304] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Favorites\\", nBufferLength=0x105, lpBuffer=0x31e310, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Favorites\\", lpFilePart=0x0) returned 0x28 [0087.306] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Favorites\\*", lpFindFileData=0x31e55c | out: lpFindFileData=0x31e55c*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x28cff640, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28d4b900, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x2d1bb180, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x381d00 [0087.306] FindNextFileW (in: hFindFile=0x381d00, lpFindFileData=0x31e56c | out: lpFindFileData=0x31e56c*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x28cff640, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28d4b900, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x2d1bb180, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0087.307] FindNextFileW (in: hFindFile=0x381d00, lpFindFileData=0x31e56c | out: lpFindFileData=0x31e56c*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0x28d4b900, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28d4b900, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x2d1bb180, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x192, dwReserved0=0x0, dwReserved1=0x0, cFileName="desktop.ini", cAlternateFileName="")) returned 1 [0087.307] FindNextFileW (in: hFindFile=0x381d00, lpFindFileData=0x31e56c | out: lpFindFileData=0x31e56c*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x28cff640, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x52cd1930, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0xbae0ad90, ftLastWriteTime.dwHighDateTime=0x1d2faf2, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Links", cAlternateFileName="")) returned 1 [0087.307] FindNextFileW (in: hFindFile=0x381d00, lpFindFileData=0x31e56c | out: lpFindFileData=0x31e56c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x28cff640, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28d4b900, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xfe5472dd, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft Websites", cAlternateFileName="MICROS~1")) returned 1 [0087.307] FindNextFileW (in: hFindFile=0x381d00, lpFindFileData=0x31e56c | out: lpFindFileData=0x31e56c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x28cff640, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28d4b900, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xfe4d4ebc, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="MSN Websites", cAlternateFileName="MSNWEB~1")) returned 1 [0087.307] FindNextFileW (in: hFindFile=0x381d00, lpFindFileData=0x31e56c | out: lpFindFileData=0x31e56c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x28cff640, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28d71a60, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xfe5472dd, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Windows Live", cAlternateFileName="WINDOW~1")) returned 1 [0087.307] FindNextFileW (in: hFindFile=0x381d00, lpFindFileData=0x31e56c | out: lpFindFileData=0x31e56c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x28cff640, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28d71a60, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xfe5472dd, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Windows Live", cAlternateFileName="WINDOW~1")) returned 0 [0087.307] FindClose (in: hFindFile=0x381d00 | out: hFindFile=0x381d00) returned 1 [0087.307] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e7f4) returned 1 [0087.308] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e800) returned 1 [0087.308] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e834) returned 1 [0087.308] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Favorites", nBufferLength=0x105, lpBuffer=0x31e33c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Favorites", lpFilePart=0x0) returned 0x27 [0087.308] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Favorites\\", nBufferLength=0x105, lpBuffer=0x31e310, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Favorites\\", lpFilePart=0x0) returned 0x28 [0087.308] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Favorites\\*", lpFindFileData=0x31e55c | out: lpFindFileData=0x31e55c*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x28cff640, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28d4b900, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x2d1bb180, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x381d00 [0087.308] FindNextFileW (in: hFindFile=0x381d00, lpFindFileData=0x31e56c | out: lpFindFileData=0x31e56c*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x28cff640, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28d4b900, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x2d1bb180, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0087.308] FindNextFileW (in: hFindFile=0x381d00, lpFindFileData=0x31e56c | out: lpFindFileData=0x31e56c*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0x28d4b900, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28d4b900, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x2d1bb180, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x192, dwReserved0=0x0, dwReserved1=0x0, cFileName="desktop.ini", cAlternateFileName="")) returned 1 [0087.308] FindNextFileW (in: hFindFile=0x381d00, lpFindFileData=0x31e56c | out: lpFindFileData=0x31e56c*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x28cff640, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x52cd1930, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0xbae0ad90, ftLastWriteTime.dwHighDateTime=0x1d2faf2, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Links", cAlternateFileName="")) returned 1 [0087.308] FindNextFileW (in: hFindFile=0x381d00, lpFindFileData=0x31e56c | out: lpFindFileData=0x31e56c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x28cff640, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28d4b900, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xfe5472dd, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft Websites", cAlternateFileName="MICROS~1")) returned 1 [0087.308] FindNextFileW (in: hFindFile=0x381d00, lpFindFileData=0x31e56c | out: lpFindFileData=0x31e56c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x28cff640, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28d4b900, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xfe4d4ebc, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="MSN Websites", cAlternateFileName="MSNWEB~1")) returned 1 [0087.309] FindNextFileW (in: hFindFile=0x381d00, lpFindFileData=0x31e56c | out: lpFindFileData=0x31e56c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x28cff640, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28d71a60, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xfe5472dd, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Windows Live", cAlternateFileName="WINDOW~1")) returned 1 [0087.309] FindNextFileW (in: hFindFile=0x381d00, lpFindFileData=0x31e56c | out: lpFindFileData=0x31e56c*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0087.309] FindClose (in: hFindFile=0x381d00 | out: hFindFile=0x381d00) returned 1 [0087.309] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e7f4) returned 1 [0087.309] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e800) returned 1 [0087.309] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e7bc) returned 1 [0087.309] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Favorites\\Links", nBufferLength=0x105, lpBuffer=0x31e2c4, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Favorites\\Links", lpFilePart=0x0) returned 0x2d [0087.309] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Favorites\\Links\\", nBufferLength=0x105, lpBuffer=0x31e298, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Favorites\\Links\\", lpFilePart=0x0) returned 0x2e [0087.309] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Favorites\\Links\\*", lpFindFileData=0x31e4e4 | out: lpFindFileData=0x31e4e4*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x28cff640, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x52cd1930, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0xbae0ad90, ftLastWriteTime.dwHighDateTime=0x1d2faf2, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x381d00 [0087.309] FindNextFileW (in: hFindFile=0x381d00, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x28cff640, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x52cd1930, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0xbae0ad90, ftLastWriteTime.dwHighDateTime=0x1d2faf2, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0087.309] FindNextFileW (in: hFindFile=0x381d00, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x6, ftCreationTime.dwLowDateTime=0x28d4b900, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28d4b900, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xbae0ad90, ftLastWriteTime.dwHighDateTime=0x1d2faf2, nFileSizeHigh=0x0, nFileSizeLow=0x50, dwReserved0=0x0, dwReserved1=0x0, cFileName="desktop.ini", cAlternateFileName="")) returned 1 [0087.310] FindNextFileW (in: hFindFile=0x381d00, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x52cd1930, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x52cd1930, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x52fcb4b0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0xec, dwReserved0=0x0, dwReserved1=0x0, cFileName="Suggested Sites.url", cAlternateFileName="SUGGES~1.URL")) returned 1 [0087.310] FindNextFileW (in: hFindFile=0x381d00, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x28d4b900, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28d4b900, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x2d9517a0, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0xe2, dwReserved0=0x0, dwReserved1=0x0, cFileName="Web Slice Gallery.url", cAlternateFileName="WEBSLI~1.URL")) returned 1 [0087.310] FindNextFileW (in: hFindFile=0x381d00, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0087.310] FindClose (in: hFindFile=0x381d00 | out: hFindFile=0x381d00) returned 1 [0087.310] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e77c) returned 1 [0087.310] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e788) returned 1 [0087.310] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e7bc) returned 1 [0087.310] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Favorites\\Links", nBufferLength=0x105, lpBuffer=0x31e2c4, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Favorites\\Links", lpFilePart=0x0) returned 0x2d [0087.310] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Favorites\\Links\\", nBufferLength=0x105, lpBuffer=0x31e298, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Favorites\\Links\\", lpFilePart=0x0) returned 0x2e [0087.310] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Favorites\\Links\\*", lpFindFileData=0x31e4e4 | out: lpFindFileData=0x31e4e4*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x28cff640, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x52cd1930, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0xbae0ad90, ftLastWriteTime.dwHighDateTime=0x1d2faf2, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x381d00 [0087.310] FindNextFileW (in: hFindFile=0x381d00, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x28cff640, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x52cd1930, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0xbae0ad90, ftLastWriteTime.dwHighDateTime=0x1d2faf2, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0087.310] FindNextFileW (in: hFindFile=0x381d00, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x6, ftCreationTime.dwLowDateTime=0x28d4b900, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28d4b900, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xbae0ad90, ftLastWriteTime.dwHighDateTime=0x1d2faf2, nFileSizeHigh=0x0, nFileSizeLow=0x50, dwReserved0=0x0, dwReserved1=0x0, cFileName="desktop.ini", cAlternateFileName="")) returned 1 [0087.311] FindNextFileW (in: hFindFile=0x381d00, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x52cd1930, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x52cd1930, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x52fcb4b0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0xec, dwReserved0=0x0, dwReserved1=0x0, cFileName="Suggested Sites.url", cAlternateFileName="SUGGES~1.URL")) returned 1 [0087.311] FindNextFileW (in: hFindFile=0x381d00, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x28d4b900, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28d4b900, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x2d9517a0, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0xe2, dwReserved0=0x0, dwReserved1=0x0, cFileName="Web Slice Gallery.url", cAlternateFileName="WEBSLI~1.URL")) returned 1 [0087.311] FindNextFileW (in: hFindFile=0x381d00, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x28d4b900, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28d4b900, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x2d9517a0, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0xe2, dwReserved0=0x0, dwReserved1=0x0, cFileName="Web Slice Gallery.url", cAlternateFileName="WEBSLI~1.URL")) returned 0 [0087.311] FindClose (in: hFindFile=0x381d00 | out: hFindFile=0x381d00) returned 1 [0087.311] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e77c) returned 1 [0087.311] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e788) returned 1 [0087.311] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e7bc) returned 1 [0087.311] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Favorites\\Microsoft Websites", nBufferLength=0x105, lpBuffer=0x31e2c4, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Favorites\\Microsoft Websites", lpFilePart=0x0) returned 0x3a [0087.311] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Favorites\\Microsoft Websites\\", nBufferLength=0x105, lpBuffer=0x31e298, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Favorites\\Microsoft Websites\\", lpFilePart=0x0) returned 0x3b [0087.311] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Favorites\\Microsoft Websites\\*", lpFindFileData=0x31e4e4 | out: lpFindFileData=0x31e4e4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x28cff640, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28d4b900, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xfe5472dd, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x381d00 [0087.320] FindNextFileW (in: hFindFile=0x381d00, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x28cff640, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28d4b900, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xfe5472dd, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0087.320] FindNextFileW (in: hFindFile=0x381d00, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x28d4b900, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28d4b900, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x2d86cf60, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x85, dwReserved0=0x0, dwReserved1=0x0, cFileName="IE Add-on site.url", cAlternateFileName="IEADD-~1.URL")) returned 1 [0087.320] FindNextFileW (in: hFindFile=0x381d00, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x28d4b900, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28d4b900, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x2d86cf60, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x85, dwReserved0=0x0, dwReserved1=0x0, cFileName="IE site on Microsoft.com.url", cAlternateFileName="IESITE~1.URL")) returned 1 [0087.320] FindNextFileW (in: hFindFile=0x381d00, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x28d4b900, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28d4b900, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x2d86cf60, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x85, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft At Home.url", cAlternateFileName="MICROS~3.URL")) returned 1 [0087.320] FindNextFileW (in: hFindFile=0x381d00, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x28d4b900, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28d4b900, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x2d86cf60, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x85, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft At Work.url", cAlternateFileName="MICROS~2.URL")) returned 1 [0087.320] FindNextFileW (in: hFindFile=0x381d00, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x28d4b900, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28d4b900, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x2d8930c0, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x86, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft Store.url", cAlternateFileName="MICROS~1.URL")) returned 1 [0087.320] FindNextFileW (in: hFindFile=0x381d00, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0087.320] FindClose (in: hFindFile=0x381d00 | out: hFindFile=0x381d00) returned 1 [0087.321] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e77c) returned 1 [0087.321] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e788) returned 1 [0087.321] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e7bc) returned 1 [0087.321] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Favorites\\Microsoft Websites", nBufferLength=0x105, lpBuffer=0x31e2c4, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Favorites\\Microsoft Websites", lpFilePart=0x0) returned 0x3a [0087.321] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Favorites\\Microsoft Websites\\", nBufferLength=0x105, lpBuffer=0x31e298, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Favorites\\Microsoft Websites\\", lpFilePart=0x0) returned 0x3b [0087.321] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Favorites\\Microsoft Websites\\*", lpFindFileData=0x31e4e4 | out: lpFindFileData=0x31e4e4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x28cff640, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28d4b900, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xfe5472dd, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x381d00 [0087.322] FindNextFileW (in: hFindFile=0x381d00, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x28cff640, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28d4b900, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xfe5472dd, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0087.322] FindNextFileW (in: hFindFile=0x381d00, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x28d4b900, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28d4b900, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x2d86cf60, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x85, dwReserved0=0x0, dwReserved1=0x0, cFileName="IE Add-on site.url", cAlternateFileName="IEADD-~1.URL")) returned 1 [0087.323] FindNextFileW (in: hFindFile=0x381d00, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x28d4b900, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28d4b900, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x2d86cf60, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x85, dwReserved0=0x0, dwReserved1=0x0, cFileName="IE site on Microsoft.com.url", cAlternateFileName="IESITE~1.URL")) returned 1 [0087.323] FindNextFileW (in: hFindFile=0x381d00, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x28d4b900, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28d4b900, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x2d86cf60, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x85, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft At Home.url", cAlternateFileName="MICROS~3.URL")) returned 1 [0087.323] FindNextFileW (in: hFindFile=0x381d00, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x28d4b900, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28d4b900, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x2d86cf60, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x85, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft At Work.url", cAlternateFileName="MICROS~2.URL")) returned 1 [0087.323] FindNextFileW (in: hFindFile=0x381d00, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x28d4b900, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28d4b900, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x2d8930c0, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x86, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft Store.url", cAlternateFileName="MICROS~1.URL")) returned 1 [0087.323] FindNextFileW (in: hFindFile=0x381d00, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x28d4b900, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28d4b900, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x2d8930c0, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x86, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft Store.url", cAlternateFileName="MICROS~1.URL")) returned 0 [0087.323] FindClose (in: hFindFile=0x381d00 | out: hFindFile=0x381d00) returned 1 [0087.324] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e77c) returned 1 [0087.324] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e788) returned 1 [0087.324] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e7bc) returned 1 [0087.324] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Favorites\\MSN Websites", nBufferLength=0x105, lpBuffer=0x31e2c4, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Favorites\\MSN Websites", lpFilePart=0x0) returned 0x34 [0087.324] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Favorites\\MSN Websites\\", nBufferLength=0x105, lpBuffer=0x31e298, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Favorites\\MSN Websites\\", lpFilePart=0x0) returned 0x35 [0087.324] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Favorites\\MSN Websites\\*", lpFindFileData=0x31e4e4 | out: lpFindFileData=0x31e4e4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x28cff640, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28d4b900, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xfe4d4ebc, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x381d00 [0087.326] FindNextFileW (in: hFindFile=0x381d00, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x28cff640, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28d4b900, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xfe4d4ebc, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0087.326] FindNextFileW (in: hFindFile=0x381d00, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x28d4b900, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28d4b900, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x2d8930c0, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x85, dwReserved0=0x0, dwReserved1=0x0, cFileName="MSN Autos.url", cAlternateFileName="MSNAUT~1.URL")) returned 1 [0087.326] FindNextFileW (in: hFindFile=0x381d00, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x28d4b900, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28d4b900, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x2d86cf60, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x85, dwReserved0=0x0, dwReserved1=0x0, cFileName="MSN Entertainment.url", cAlternateFileName="MSNENT~1.URL")) returned 1 [0087.326] FindNextFileW (in: hFindFile=0x381d00, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x28d4b900, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28d4b900, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x2d86cf60, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x85, dwReserved0=0x0, dwReserved1=0x0, cFileName="MSN Money.url", cAlternateFileName="MSNMON~1.URL")) returned 1 [0087.326] FindNextFileW (in: hFindFile=0x381d00, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x28d4b900, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28d4b900, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x2d86cf60, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x85, dwReserved0=0x0, dwReserved1=0x0, cFileName="MSN Sports.url", cAlternateFileName="MSNSPO~1.URL")) returned 1 [0087.326] FindNextFileW (in: hFindFile=0x381d00, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x28d4b900, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28d4b900, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x2d86cf60, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x85, dwReserved0=0x0, dwReserved1=0x0, cFileName="MSN.url", cAlternateFileName="")) returned 1 [0087.326] FindNextFileW (in: hFindFile=0x381d00, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x28d4b900, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28d4b900, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x2d86cf60, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x85, dwReserved0=0x0, dwReserved1=0x0, cFileName="MSNBC News.url", cAlternateFileName="MSNBCN~1.URL")) returned 1 [0087.326] FindNextFileW (in: hFindFile=0x381d00, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0087.327] FindClose (in: hFindFile=0x381d00 | out: hFindFile=0x381d00) returned 1 [0087.327] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e77c) returned 1 [0087.327] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e788) returned 1 [0087.327] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e7bc) returned 1 [0087.327] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Favorites\\MSN Websites", nBufferLength=0x105, lpBuffer=0x31e2c4, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Favorites\\MSN Websites", lpFilePart=0x0) returned 0x34 [0087.327] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Favorites\\MSN Websites\\", nBufferLength=0x105, lpBuffer=0x31e298, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Favorites\\MSN Websites\\", lpFilePart=0x0) returned 0x35 [0087.327] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Favorites\\MSN Websites\\*", lpFindFileData=0x31e4e4 | out: lpFindFileData=0x31e4e4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x28cff640, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28d4b900, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xfe4d4ebc, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x381d00 [0087.328] FindNextFileW (in: hFindFile=0x381d00, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x28cff640, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28d4b900, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xfe4d4ebc, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0087.328] FindNextFileW (in: hFindFile=0x381d00, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x28d4b900, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28d4b900, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x2d8930c0, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x85, dwReserved0=0x0, dwReserved1=0x0, cFileName="MSN Autos.url", cAlternateFileName="MSNAUT~1.URL")) returned 1 [0087.328] FindNextFileW (in: hFindFile=0x381d00, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x28d4b900, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28d4b900, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x2d86cf60, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x85, dwReserved0=0x0, dwReserved1=0x0, cFileName="MSN Entertainment.url", cAlternateFileName="MSNENT~1.URL")) returned 1 [0087.329] FindNextFileW (in: hFindFile=0x381d00, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x28d4b900, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28d4b900, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x2d86cf60, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x85, dwReserved0=0x0, dwReserved1=0x0, cFileName="MSN Money.url", cAlternateFileName="MSNMON~1.URL")) returned 1 [0087.329] FindNextFileW (in: hFindFile=0x381d00, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x28d4b900, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28d4b900, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x2d86cf60, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x85, dwReserved0=0x0, dwReserved1=0x0, cFileName="MSN Sports.url", cAlternateFileName="MSNSPO~1.URL")) returned 1 [0087.329] FindNextFileW (in: hFindFile=0x381d00, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x28d4b900, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28d4b900, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x2d86cf60, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x85, dwReserved0=0x0, dwReserved1=0x0, cFileName="MSN.url", cAlternateFileName="")) returned 1 [0087.329] FindNextFileW (in: hFindFile=0x381d00, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x28d4b900, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28d4b900, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x2d86cf60, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x85, dwReserved0=0x0, dwReserved1=0x0, cFileName="MSNBC News.url", cAlternateFileName="MSNBCN~1.URL")) returned 1 [0087.329] FindNextFileW (in: hFindFile=0x381d00, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x28d4b900, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28d4b900, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x2d86cf60, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x85, dwReserved0=0x0, dwReserved1=0x0, cFileName="MSNBC News.url", cAlternateFileName="MSNBCN~1.URL")) returned 0 [0087.329] FindClose (in: hFindFile=0x381d00 | out: hFindFile=0x381d00) returned 1 [0087.330] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e77c) returned 1 [0087.330] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e788) returned 1 [0087.330] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e7bc) returned 1 [0087.330] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Favorites\\Windows Live", nBufferLength=0x105, lpBuffer=0x31e2c4, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Favorites\\Windows Live", lpFilePart=0x0) returned 0x34 [0087.330] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Favorites\\Windows Live\\", nBufferLength=0x105, lpBuffer=0x31e298, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Favorites\\Windows Live\\", lpFilePart=0x0) returned 0x35 [0087.330] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Favorites\\Windows Live\\*", lpFindFileData=0x31e4e4 | out: lpFindFileData=0x31e4e4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x28cff640, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28d71a60, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xfe5472dd, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x381d00 [0087.336] FindNextFileW (in: hFindFile=0x381d00, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x28cff640, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28d71a60, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xfe5472dd, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0087.336] FindNextFileW (in: hFindFile=0x381d00, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x28d4b900, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28d4b900, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x2d8930c0, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x85, dwReserved0=0x0, dwReserved1=0x0, cFileName="Get Windows Live.url", cAlternateFileName="GETWIN~1.URL")) returned 1 [0087.336] FindNextFileW (in: hFindFile=0x381d00, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x28d4b900, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28d4b900, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x2d8930c0, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x85, dwReserved0=0x0, dwReserved1=0x0, cFileName="Windows Live Gallery.url", cAlternateFileName="WINDOW~2.URL")) returned 1 [0087.336] FindNextFileW (in: hFindFile=0x381d00, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x28d4b900, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28d4b900, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x2d8930c0, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x85, dwReserved0=0x0, dwReserved1=0x0, cFileName="Windows Live Mail.url", cAlternateFileName="WINDOW~1.URL")) returned 1 [0087.336] FindNextFileW (in: hFindFile=0x381d00, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x28d4b900, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28d4b900, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x2d8930c0, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x85, dwReserved0=0x0, dwReserved1=0x0, cFileName="Windows Live Spaces.url", cAlternateFileName="WINDOW~3.URL")) returned 1 [0087.336] FindNextFileW (in: hFindFile=0x381d00, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0087.337] FindClose (in: hFindFile=0x381d00 | out: hFindFile=0x381d00) returned 1 [0087.337] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e77c) returned 1 [0087.337] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e788) returned 1 [0087.337] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e7bc) returned 1 [0087.337] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Favorites\\Windows Live", nBufferLength=0x105, lpBuffer=0x31e2c4, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Favorites\\Windows Live", lpFilePart=0x0) returned 0x34 [0087.337] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Favorites\\Windows Live\\", nBufferLength=0x105, lpBuffer=0x31e298, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Favorites\\Windows Live\\", lpFilePart=0x0) returned 0x35 [0087.337] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Favorites\\Windows Live\\*", lpFindFileData=0x31e4e4 | out: lpFindFileData=0x31e4e4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x28cff640, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28d71a60, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xfe5472dd, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x381d00 [0087.338] FindNextFileW (in: hFindFile=0x381d00, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x28cff640, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28d71a60, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xfe5472dd, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0087.338] FindNextFileW (in: hFindFile=0x381d00, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x28d4b900, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28d4b900, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x2d8930c0, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x85, dwReserved0=0x0, dwReserved1=0x0, cFileName="Get Windows Live.url", cAlternateFileName="GETWIN~1.URL")) returned 1 [0087.338] FindNextFileW (in: hFindFile=0x381d00, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x28d4b900, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28d4b900, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x2d8930c0, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x85, dwReserved0=0x0, dwReserved1=0x0, cFileName="Windows Live Gallery.url", cAlternateFileName="WINDOW~2.URL")) returned 1 [0087.339] FindNextFileW (in: hFindFile=0x381d00, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x28d4b900, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28d4b900, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x2d8930c0, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x85, dwReserved0=0x0, dwReserved1=0x0, cFileName="Windows Live Mail.url", cAlternateFileName="WINDOW~1.URL")) returned 1 [0087.339] FindNextFileW (in: hFindFile=0x381d00, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x28d4b900, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28d4b900, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x2d8930c0, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x85, dwReserved0=0x0, dwReserved1=0x0, cFileName="Windows Live Spaces.url", cAlternateFileName="WINDOW~3.URL")) returned 1 [0087.339] FindNextFileW (in: hFindFile=0x381d00, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x28d4b900, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28d4b900, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x2d8930c0, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x85, dwReserved0=0x0, dwReserved1=0x0, cFileName="Windows Live Spaces.url", cAlternateFileName="WINDOW~3.URL")) returned 0 [0087.339] FindClose (in: hFindFile=0x381d00 | out: hFindFile=0x381d00) returned 1 [0087.340] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e77c) returned 1 [0087.340] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e788) returned 1 [0087.340] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e834) returned 1 [0087.340] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Links", nBufferLength=0x105, lpBuffer=0x31e33c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Links", lpFilePart=0x0) returned 0x23 [0087.340] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Links\\", nBufferLength=0x105, lpBuffer=0x31e310, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Links\\", lpFilePart=0x0) returned 0x24 [0087.340] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Links\\*", lpFindFileData=0x31e55c | out: lpFindFileData=0x31e55c*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x28cff640, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28d4b900, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x2d2c5b20, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x381d00 [0087.340] FindNextFileW (in: hFindFile=0x381d00, lpFindFileData=0x31e56c | out: lpFindFileData=0x31e56c*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x28cff640, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28d4b900, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x2d2c5b20, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0087.340] FindNextFileW (in: hFindFile=0x381d00, lpFindFileData=0x31e56c | out: lpFindFileData=0x31e56c*(dwFileAttributes=0x6, ftCreationTime.dwLowDateTime=0x28d4b900, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28d4b900, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x2d2c5b20, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x244, dwReserved0=0x0, dwReserved1=0x0, cFileName="desktop.ini", cAlternateFileName="")) returned 1 [0087.340] FindNextFileW (in: hFindFile=0x381d00, lpFindFileData=0x31e56c | out: lpFindFileData=0x31e56c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x28d4b900, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28d4b900, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x2d2c5b20, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x1e6, dwReserved0=0x0, dwReserved1=0x0, cFileName="Desktop.lnk", cAlternateFileName="")) returned 1 [0087.340] FindNextFileW (in: hFindFile=0x381d00, lpFindFileData=0x31e56c | out: lpFindFileData=0x31e56c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x28d4b900, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28d4b900, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x2d2c5b20, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x3a1, dwReserved0=0x0, dwReserved1=0x0, cFileName="Downloads.lnk", cAlternateFileName="DOWNLO~1.LNK")) returned 1 [0087.340] FindNextFileW (in: hFindFile=0x381d00, lpFindFileData=0x31e56c | out: lpFindFileData=0x31e56c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x28d257a0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28d257a0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x2d2c5b20, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x16b, dwReserved0=0x0, dwReserved1=0x0, cFileName="RecentPlaces.lnk", cAlternateFileName="RECENT~1.LNK")) returned 1 [0087.340] FindNextFileW (in: hFindFile=0x381d00, lpFindFileData=0x31e56c | out: lpFindFileData=0x31e56c*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0087.341] FindClose (in: hFindFile=0x381d00 | out: hFindFile=0x381d00) returned 1 [0087.341] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e7f4) returned 1 [0087.341] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e800) returned 1 [0087.341] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e834) returned 1 [0087.341] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Links", nBufferLength=0x105, lpBuffer=0x31e33c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Links", lpFilePart=0x0) returned 0x23 [0087.341] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Links\\", nBufferLength=0x105, lpBuffer=0x31e310, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Links\\", lpFilePart=0x0) returned 0x24 [0087.341] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Links\\*", lpFindFileData=0x31e55c | out: lpFindFileData=0x31e55c*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x28cff640, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28d4b900, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x2d2c5b20, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x381d00 [0087.341] FindNextFileW (in: hFindFile=0x381d00, lpFindFileData=0x31e56c | out: lpFindFileData=0x31e56c*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x28cff640, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28d4b900, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x2d2c5b20, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0087.341] FindNextFileW (in: hFindFile=0x381d00, lpFindFileData=0x31e56c | out: lpFindFileData=0x31e56c*(dwFileAttributes=0x6, ftCreationTime.dwLowDateTime=0x28d4b900, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28d4b900, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x2d2c5b20, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x244, dwReserved0=0x0, dwReserved1=0x0, cFileName="desktop.ini", cAlternateFileName="")) returned 1 [0087.341] FindNextFileW (in: hFindFile=0x381d00, lpFindFileData=0x31e56c | out: lpFindFileData=0x31e56c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x28d4b900, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28d4b900, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x2d2c5b20, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x1e6, dwReserved0=0x0, dwReserved1=0x0, cFileName="Desktop.lnk", cAlternateFileName="")) returned 1 [0087.341] FindNextFileW (in: hFindFile=0x381d00, lpFindFileData=0x31e56c | out: lpFindFileData=0x31e56c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x28d4b900, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28d4b900, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x2d2c5b20, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x3a1, dwReserved0=0x0, dwReserved1=0x0, cFileName="Downloads.lnk", cAlternateFileName="DOWNLO~1.LNK")) returned 1 [0087.341] FindNextFileW (in: hFindFile=0x381d00, lpFindFileData=0x31e56c | out: lpFindFileData=0x31e56c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x28d257a0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28d257a0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x2d2c5b20, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x16b, dwReserved0=0x0, dwReserved1=0x0, cFileName="RecentPlaces.lnk", cAlternateFileName="RECENT~1.LNK")) returned 1 [0087.341] FindNextFileW (in: hFindFile=0x381d00, lpFindFileData=0x31e56c | out: lpFindFileData=0x31e56c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x28d257a0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28d257a0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x2d2c5b20, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x16b, dwReserved0=0x0, dwReserved1=0x0, cFileName="RecentPlaces.lnk", cAlternateFileName="RECENT~1.LNK")) returned 0 [0087.342] FindClose (in: hFindFile=0x381d00 | out: hFindFile=0x381d00) returned 1 [0087.342] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e7f4) returned 1 [0087.342] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e800) returned 1 [0087.342] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Links\\Desktop.lnk", nBufferLength=0x105, lpBuffer=0x31e20c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Links\\Desktop.lnk", lpFilePart=0x0) returned 0x2f [0087.342] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e700) returned 1 [0087.342] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Links\\Desktop.lnk" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\links\\desktop.lnk"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x178 [0087.343] GetFileType (hFile=0x178) returned 0x1 [0087.343] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e6fc) returned 1 [0087.343] GetFileType (hFile=0x178) returned 0x1 [0087.343] GetFileSize (in: hFile=0x178, lpFileSizeHigh=0x31e808 | out: lpFileSizeHigh=0x31e808*=0x0) returned 0x1e6 [0087.343] ReadFile (in: hFile=0x178, lpBuffer=0x2638c3c, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x31e7b4, lpOverlapped=0x0 | out: lpBuffer=0x2638c3c*, lpNumberOfBytesRead=0x31e7b4*=0x1e6, lpOverlapped=0x0) returned 1 [0087.344] CloseHandle (hObject=0x178) returned 1 [0087.383] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Links\\Desktop.lnk", nBufferLength=0x105, lpBuffer=0x31e1f8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Links\\Desktop.lnk", lpFilePart=0x0) returned 0x2f [0087.383] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e6ec) returned 1 [0087.383] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Links\\Desktop.lnk" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\links\\desktop.lnk"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x178 [0087.384] GetFileType (hFile=0x178) returned 0x1 [0087.384] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e6e8) returned 1 [0087.384] GetFileType (hFile=0x178) returned 0x1 [0087.384] WriteFile (in: hFile=0x178, lpBuffer=0x2687630*, nNumberOfBytesToWrite=0x1f0, lpNumberOfBytesWritten=0x31e77c, lpOverlapped=0x0 | out: lpBuffer=0x2687630*, lpNumberOfBytesWritten=0x31e77c*=0x1f0, lpOverlapped=0x0) returned 1 [0087.386] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Links\\Desktop.lnk", nBufferLength=0x105, lpBuffer=0x31e32c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Links\\Desktop.lnk", lpFilePart=0x0) returned 0x2f [0087.386] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Links\\Desktop.lnk", nBufferLength=0x105, lpBuffer=0x31e32c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Links\\Desktop.lnk", lpFilePart=0x0) returned 0x2f [0087.386] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e78c) returned 1 [0087.386] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Links\\Desktop.lnk" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\links\\desktop.lnk"), fInfoLevelId=0x0, lpFileInformation=0x31e808 | out: lpFileInformation=0x31e808*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x28d4b900, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28d4b900, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x17871900, ftLastWriteTime.dwHighDateTime=0x1d6eb7f, nFileSizeHigh=0x0, nFileSizeLow=0x1f0)) returned 1 [0087.386] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e788) returned 1 [0087.386] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Links\\Desktop.lnk" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\links\\desktop.lnk"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Links\\Desktop.lnk" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\links\\desktop.lnk")) returned 1 [0087.387] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Links\\Downloads.lnk", nBufferLength=0x105, lpBuffer=0x31e20c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Links\\Downloads.lnk", lpFilePart=0x0) returned 0x31 [0087.387] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e700) returned 1 [0087.387] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Links\\Downloads.lnk" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\links\\downloads.lnk"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x178 [0087.387] GetFileType (hFile=0x178) returned 0x1 [0087.387] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e6fc) returned 1 [0087.387] GetFileType (hFile=0x178) returned 0x1 [0087.387] GetFileSize (in: hFile=0x178, lpFileSizeHigh=0x31e808 | out: lpFileSizeHigh=0x31e808*=0x0) returned 0x3a1 [0087.387] ReadFile (in: hFile=0x178, lpBuffer=0x2688bd0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x31e7b4, lpOverlapped=0x0 | out: lpBuffer=0x2688bd0*, lpNumberOfBytesRead=0x31e7b4*=0x3a1, lpOverlapped=0x0) returned 1 [0087.402] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Links\\Downloads.lnk", nBufferLength=0x105, lpBuffer=0x31e1f8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Links\\Downloads.lnk", lpFilePart=0x0) returned 0x31 [0087.402] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e6ec) returned 1 [0087.402] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Links\\Downloads.lnk" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\links\\downloads.lnk"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x178 [0087.403] GetFileType (hFile=0x178) returned 0x1 [0087.403] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e6e8) returned 1 [0087.403] GetFileType (hFile=0x178) returned 0x1 [0087.403] WriteFile (in: hFile=0x178, lpBuffer=0x26d7d34*, nNumberOfBytesToWrite=0x3b0, lpNumberOfBytesWritten=0x31e77c, lpOverlapped=0x0 | out: lpBuffer=0x26d7d34*, lpNumberOfBytesWritten=0x31e77c*=0x3b0, lpOverlapped=0x0) returned 1 [0087.404] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Links\\Downloads.lnk", nBufferLength=0x105, lpBuffer=0x31e32c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Links\\Downloads.lnk", lpFilePart=0x0) returned 0x31 [0087.404] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Links\\Downloads.lnk", nBufferLength=0x105, lpBuffer=0x31e32c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Links\\Downloads.lnk", lpFilePart=0x0) returned 0x31 [0087.404] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e78c) returned 1 [0087.404] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Links\\Downloads.lnk" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\links\\downloads.lnk"), fInfoLevelId=0x0, lpFileInformation=0x31e808 | out: lpFileInformation=0x31e808*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x28d4b900, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28d4b900, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x17897a60, ftLastWriteTime.dwHighDateTime=0x1d6eb7f, nFileSizeHigh=0x0, nFileSizeLow=0x3b0)) returned 1 [0087.404] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e788) returned 1 [0087.404] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Links\\Downloads.lnk" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\links\\downloads.lnk"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Links\\Downloads.lnk" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\links\\downloads.lnk")) returned 1 [0087.404] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Links\\RecentPlaces.lnk", nBufferLength=0x105, lpBuffer=0x31e20c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Links\\RecentPlaces.lnk", lpFilePart=0x0) returned 0x34 [0087.404] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e700) returned 1 [0087.404] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Links\\RecentPlaces.lnk" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\links\\recentplaces.lnk"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x178 [0087.407] GetFileType (hFile=0x178) returned 0x1 [0087.407] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e6fc) returned 1 [0087.407] GetFileType (hFile=0x178) returned 0x1 [0087.407] GetFileSize (in: hFile=0x178, lpFileSizeHigh=0x31e808 | out: lpFileSizeHigh=0x31e808*=0x0) returned 0x16b [0087.407] ReadFile (in: hFile=0x178, lpBuffer=0x26d90b4, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x31e7b4, lpOverlapped=0x0 | out: lpBuffer=0x26d90b4*, lpNumberOfBytesRead=0x31e7b4*=0x16b, lpOverlapped=0x0) returned 1 [0087.421] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Links\\RecentPlaces.lnk", nBufferLength=0x105, lpBuffer=0x31e1f8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Links\\RecentPlaces.lnk", lpFilePart=0x0) returned 0x34 [0087.421] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e6ec) returned 1 [0087.421] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Links\\RecentPlaces.lnk" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\links\\recentplaces.lnk"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x178 [0087.422] GetFileType (hFile=0x178) returned 0x1 [0087.422] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e6e8) returned 1 [0087.422] GetFileType (hFile=0x178) returned 0x1 [0087.422] WriteFile (in: hFile=0x178, lpBuffer=0x27276e0*, nNumberOfBytesToWrite=0x170, lpNumberOfBytesWritten=0x31e77c, lpOverlapped=0x0 | out: lpBuffer=0x27276e0*, lpNumberOfBytesWritten=0x31e77c*=0x170, lpOverlapped=0x0) returned 1 [0087.423] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Links\\RecentPlaces.lnk", nBufferLength=0x105, lpBuffer=0x31e32c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Links\\RecentPlaces.lnk", lpFilePart=0x0) returned 0x34 [0087.423] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Links\\RecentPlaces.lnk", nBufferLength=0x105, lpBuffer=0x31e32c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Links\\RecentPlaces.lnk", lpFilePart=0x0) returned 0x34 [0087.423] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e78c) returned 1 [0087.423] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Links\\RecentPlaces.lnk" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\links\\recentplaces.lnk"), fInfoLevelId=0x0, lpFileInformation=0x31e808 | out: lpFileInformation=0x31e808*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x28d257a0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28d257a0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x178e3d20, ftLastWriteTime.dwHighDateTime=0x1d6eb7f, nFileSizeHigh=0x0, nFileSizeLow=0x170)) returned 1 [0087.423] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e788) returned 1 [0087.423] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Links\\RecentPlaces.lnk" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\links\\recentplaces.lnk"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Links\\RecentPlaces.lnk" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\links\\recentplaces.lnk")) returned 1 [0087.423] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e834) returned 1 [0087.423] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Local Settings", nBufferLength=0x105, lpBuffer=0x31e33c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Local Settings", lpFilePart=0x0) returned 0x2c [0087.423] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Local Settings\\", nBufferLength=0x105, lpBuffer=0x31e310, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Local Settings\\", lpFilePart=0x0) returned 0x2d [0087.423] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Local Settings\\*", lpFindFileData=0x31e55c | out: lpFindFileData=0x31e55c*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0087.424] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e7f8) returned 1 [0087.425] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e834) returned 1 [0087.425] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music", nBufferLength=0x105, lpBuffer=0x31e33c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music", lpFilePart=0x0) returned 0x23 [0087.425] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\", nBufferLength=0x105, lpBuffer=0x31e310, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\", lpFilePart=0x0) returned 0x24 [0087.425] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\*", lpFindFileData=0x31e55c | out: lpFindFileData=0x31e55c*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x28cff640, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0xd8e6bb40, ftLastAccessTime.dwHighDateTime=0x1d5e82a, ftLastWriteTime.dwLowDateTime=0xd8e6bb40, ftLastWriteTime.dwHighDateTime=0x1d5e82a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x381d40 [0087.425] FindNextFileW (in: hFindFile=0x381d40, lpFindFileData=0x31e56c | out: lpFindFileData=0x31e56c*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x28cff640, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0xd8e6bb40, ftLastAccessTime.dwHighDateTime=0x1d5e82a, ftLastWriteTime.dwLowDateTime=0xd8e6bb40, ftLastWriteTime.dwHighDateTime=0x1d5e82a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0087.425] FindNextFileW (in: hFindFile=0x381d40, lpFindFileData=0x31e56c | out: lpFindFileData=0x31e56c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xe60b7f20, ftCreationTime.dwHighDateTime=0x1d5e228, ftLastAccessTime.dwLowDateTime=0x5138e40, ftLastAccessTime.dwHighDateTime=0x1d5d9ea, ftLastWriteTime.dwLowDateTime=0x5138e40, ftLastWriteTime.dwHighDateTime=0x1d5d9ea, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="5QUm8R", cAlternateFileName="")) returned 1 [0087.425] FindNextFileW (in: hFindFile=0x381d40, lpFindFileData=0x31e56c | out: lpFindFileData=0x31e56c*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0x28d257a0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28d257a0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x2d1bb180, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x1f8, dwReserved0=0x0, dwReserved1=0x0, cFileName="desktop.ini", cAlternateFileName="")) returned 1 [0087.425] FindNextFileW (in: hFindFile=0x381d40, lpFindFileData=0x31e56c | out: lpFindFileData=0x31e56c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x866447b0, ftCreationTime.dwHighDateTime=0x1d5e687, ftLastAccessTime.dwLowDateTime=0x48e13570, ftLastAccessTime.dwHighDateTime=0x1d5dfd3, ftLastWriteTime.dwLowDateTime=0x48e13570, ftLastWriteTime.dwHighDateTime=0x1d5dfd3, nFileSizeHigh=0x0, nFileSizeLow=0x63f9, dwReserved0=0x0, dwReserved1=0x0, cFileName="KAABaMGRIc.wav", cAlternateFileName="KAABAM~1.WAV")) returned 1 [0087.426] FindNextFileW (in: hFindFile=0x381d40, lpFindFileData=0x31e56c | out: lpFindFileData=0x31e56c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3b76cd70, ftCreationTime.dwHighDateTime=0x1d5e74c, ftLastAccessTime.dwLowDateTime=0xa8633250, ftLastAccessTime.dwHighDateTime=0x1d5d7ea, ftLastWriteTime.dwLowDateTime=0xa8633250, ftLastWriteTime.dwHighDateTime=0x1d5d7ea, nFileSizeHigh=0x0, nFileSizeLow=0x8fe2, dwReserved0=0x0, dwReserved1=0x0, cFileName="Lq6J.m4a", cAlternateFileName="")) returned 1 [0087.426] FindNextFileW (in: hFindFile=0x381d40, lpFindFileData=0x31e56c | out: lpFindFileData=0x31e56c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8ecd14f0, ftCreationTime.dwHighDateTime=0x1d5e1db, ftLastAccessTime.dwLowDateTime=0x8b95aea0, ftLastAccessTime.dwHighDateTime=0x1d5e091, ftLastWriteTime.dwLowDateTime=0x8b95aea0, ftLastWriteTime.dwHighDateTime=0x1d5e091, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="MSpnEVxlBuedaCUP1", cAlternateFileName="MSPNEV~1")) returned 1 [0087.426] FindNextFileW (in: hFindFile=0x381d40, lpFindFileData=0x31e56c | out: lpFindFileData=0x31e56c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x25297810, ftCreationTime.dwHighDateTime=0x1d5dab8, ftLastAccessTime.dwLowDateTime=0x7fd35fc0, ftLastAccessTime.dwHighDateTime=0x1d5dac1, ftLastWriteTime.dwLowDateTime=0x7fd35fc0, ftLastWriteTime.dwHighDateTime=0x1d5dac1, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="VPUJVJbaoT0AA1L", cAlternateFileName="VPUJVJ~1")) returned 1 [0087.426] FindNextFileW (in: hFindFile=0x381d40, lpFindFileData=0x31e56c | out: lpFindFileData=0x31e56c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x25297810, ftCreationTime.dwHighDateTime=0x1d5dab8, ftLastAccessTime.dwLowDateTime=0x7fd35fc0, ftLastAccessTime.dwHighDateTime=0x1d5dac1, ftLastWriteTime.dwLowDateTime=0x7fd35fc0, ftLastWriteTime.dwHighDateTime=0x1d5dac1, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="VPUJVJbaoT0AA1L", cAlternateFileName="VPUJVJ~1")) returned 0 [0087.426] FindClose (in: hFindFile=0x381d40 | out: hFindFile=0x381d40) returned 1 [0087.426] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e7f4) returned 1 [0087.426] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e800) returned 1 [0087.426] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e834) returned 1 [0087.426] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music", nBufferLength=0x105, lpBuffer=0x31e33c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music", lpFilePart=0x0) returned 0x23 [0087.426] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\", nBufferLength=0x105, lpBuffer=0x31e310, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\", lpFilePart=0x0) returned 0x24 [0087.426] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\*", lpFindFileData=0x31e55c | out: lpFindFileData=0x31e55c*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x28cff640, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0xd8e6bb40, ftLastAccessTime.dwHighDateTime=0x1d5e82a, ftLastWriteTime.dwLowDateTime=0xd8e6bb40, ftLastWriteTime.dwHighDateTime=0x1d5e82a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x381d40 [0087.427] FindNextFileW (in: hFindFile=0x381d40, lpFindFileData=0x31e56c | out: lpFindFileData=0x31e56c*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x28cff640, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0xd8e6bb40, ftLastAccessTime.dwHighDateTime=0x1d5e82a, ftLastWriteTime.dwLowDateTime=0xd8e6bb40, ftLastWriteTime.dwHighDateTime=0x1d5e82a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0087.427] FindNextFileW (in: hFindFile=0x381d40, lpFindFileData=0x31e56c | out: lpFindFileData=0x31e56c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xe60b7f20, ftCreationTime.dwHighDateTime=0x1d5e228, ftLastAccessTime.dwLowDateTime=0x5138e40, ftLastAccessTime.dwHighDateTime=0x1d5d9ea, ftLastWriteTime.dwLowDateTime=0x5138e40, ftLastWriteTime.dwHighDateTime=0x1d5d9ea, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="5QUm8R", cAlternateFileName="")) returned 1 [0087.427] FindNextFileW (in: hFindFile=0x381d40, lpFindFileData=0x31e56c | out: lpFindFileData=0x31e56c*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0x28d257a0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28d257a0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x2d1bb180, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x1f8, dwReserved0=0x0, dwReserved1=0x0, cFileName="desktop.ini", cAlternateFileName="")) returned 1 [0087.427] FindNextFileW (in: hFindFile=0x381d40, lpFindFileData=0x31e56c | out: lpFindFileData=0x31e56c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x866447b0, ftCreationTime.dwHighDateTime=0x1d5e687, ftLastAccessTime.dwLowDateTime=0x48e13570, ftLastAccessTime.dwHighDateTime=0x1d5dfd3, ftLastWriteTime.dwLowDateTime=0x48e13570, ftLastWriteTime.dwHighDateTime=0x1d5dfd3, nFileSizeHigh=0x0, nFileSizeLow=0x63f9, dwReserved0=0x0, dwReserved1=0x0, cFileName="KAABaMGRIc.wav", cAlternateFileName="KAABAM~1.WAV")) returned 1 [0087.427] FindNextFileW (in: hFindFile=0x381d40, lpFindFileData=0x31e56c | out: lpFindFileData=0x31e56c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3b76cd70, ftCreationTime.dwHighDateTime=0x1d5e74c, ftLastAccessTime.dwLowDateTime=0xa8633250, ftLastAccessTime.dwHighDateTime=0x1d5d7ea, ftLastWriteTime.dwLowDateTime=0xa8633250, ftLastWriteTime.dwHighDateTime=0x1d5d7ea, nFileSizeHigh=0x0, nFileSizeLow=0x8fe2, dwReserved0=0x0, dwReserved1=0x0, cFileName="Lq6J.m4a", cAlternateFileName="")) returned 1 [0087.427] FindNextFileW (in: hFindFile=0x381d40, lpFindFileData=0x31e56c | out: lpFindFileData=0x31e56c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8ecd14f0, ftCreationTime.dwHighDateTime=0x1d5e1db, ftLastAccessTime.dwLowDateTime=0x8b95aea0, ftLastAccessTime.dwHighDateTime=0x1d5e091, ftLastWriteTime.dwLowDateTime=0x8b95aea0, ftLastWriteTime.dwHighDateTime=0x1d5e091, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="MSpnEVxlBuedaCUP1", cAlternateFileName="MSPNEV~1")) returned 1 [0087.427] FindNextFileW (in: hFindFile=0x381d40, lpFindFileData=0x31e56c | out: lpFindFileData=0x31e56c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x25297810, ftCreationTime.dwHighDateTime=0x1d5dab8, ftLastAccessTime.dwLowDateTime=0x7fd35fc0, ftLastAccessTime.dwHighDateTime=0x1d5dac1, ftLastWriteTime.dwLowDateTime=0x7fd35fc0, ftLastWriteTime.dwHighDateTime=0x1d5dac1, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="VPUJVJbaoT0AA1L", cAlternateFileName="VPUJVJ~1")) returned 1 [0087.428] FindNextFileW (in: hFindFile=0x381d40, lpFindFileData=0x31e56c | out: lpFindFileData=0x31e56c*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0087.428] FindClose (in: hFindFile=0x381d40 | out: hFindFile=0x381d40) returned 1 [0087.428] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e7f4) returned 1 [0087.428] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e800) returned 1 [0087.428] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\KAABaMGRIc.wav", nBufferLength=0x105, lpBuffer=0x31e20c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\KAABaMGRIc.wav", lpFilePart=0x0) returned 0x32 [0087.428] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e700) returned 1 [0087.428] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\KAABaMGRIc.wav" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\music\\kaabamgric.wav"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x178 [0087.428] GetFileType (hFile=0x178) returned 0x1 [0087.428] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e6fc) returned 1 [0087.428] GetFileType (hFile=0x178) returned 0x1 [0087.428] GetFileSize (in: hFile=0x178, lpFileSizeHigh=0x31e808 | out: lpFileSizeHigh=0x31e808*=0x0) returned 0x63f9 [0087.428] ReadFile (in: hFile=0x178, lpBuffer=0x272b0f8, nNumberOfBytesToRead=0x63f9, lpNumberOfBytesRead=0x31e7b4, lpOverlapped=0x0 | out: lpBuffer=0x272b0f8*, lpNumberOfBytesRead=0x31e7b4*=0x63f9, lpOverlapped=0x0) returned 1 [0087.429] CloseHandle (hObject=0x178) returned 1 [0087.467] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\KAABaMGRIc.wav", nBufferLength=0x105, lpBuffer=0x31e1f8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\KAABaMGRIc.wav", lpFilePart=0x0) returned 0x32 [0087.467] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e6ec) returned 1 [0087.467] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\KAABaMGRIc.wav" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\music\\kaabamgric.wav"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x178 [0087.468] GetFileType (hFile=0x178) returned 0x1 [0087.468] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e6e8) returned 1 [0087.469] GetFileType (hFile=0x178) returned 0x1 [0087.469] WriteFile (in: hFile=0x178, lpBuffer=0x27972e0*, nNumberOfBytesToWrite=0x6400, lpNumberOfBytesWritten=0x31e7a8, lpOverlapped=0x0 | out: lpBuffer=0x27972e0*, lpNumberOfBytesWritten=0x31e7a8*=0x6400, lpOverlapped=0x0) returned 1 [0087.470] CloseHandle (hObject=0x178) returned 1 [0087.470] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\KAABaMGRIc.wav", nBufferLength=0x105, lpBuffer=0x31e32c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\KAABaMGRIc.wav", lpFilePart=0x0) returned 0x32 [0087.470] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\KAABaMGRIc.wav", nBufferLength=0x105, lpBuffer=0x31e32c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\KAABaMGRIc.wav", lpFilePart=0x0) returned 0x32 [0087.470] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e78c) returned 1 [0087.470] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\KAABaMGRIc.wav" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\music\\kaabamgric.wav"), fInfoLevelId=0x0, lpFileInformation=0x31e808 | out: lpFileInformation=0x31e808*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x866447b0, ftCreationTime.dwHighDateTime=0x1d5e687, ftLastAccessTime.dwLowDateTime=0x48e13570, ftLastAccessTime.dwHighDateTime=0x1d5dfd3, ftLastWriteTime.dwLowDateTime=0x17956140, ftLastWriteTime.dwHighDateTime=0x1d6eb7f, nFileSizeHigh=0x0, nFileSizeLow=0x6400)) returned 1 [0087.470] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e788) returned 1 [0087.470] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\KAABaMGRIc.wav" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\music\\kaabamgric.wav"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\KAABaMGRIc.wav" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\music\\kaabamgric.wav")) returned 1 [0087.471] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e7bc) returned 1 [0087.471] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\5QUm8R", nBufferLength=0x105, lpBuffer=0x31e2c4, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\5QUm8R", lpFilePart=0x0) returned 0x2a [0087.471] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\5QUm8R\\", nBufferLength=0x105, lpBuffer=0x31e298, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\5QUm8R\\", lpFilePart=0x0) returned 0x2b [0087.471] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\5QUm8R\\*", lpFindFileData=0x31e4e4 | out: lpFindFileData=0x31e4e4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xe60b7f20, ftCreationTime.dwHighDateTime=0x1d5e228, ftLastAccessTime.dwLowDateTime=0x5138e40, ftLastAccessTime.dwHighDateTime=0x1d5d9ea, ftLastWriteTime.dwLowDateTime=0x5138e40, ftLastWriteTime.dwHighDateTime=0x1d5d9ea, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x381dc0 [0087.471] FindNextFileW (in: hFindFile=0x381dc0, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xe60b7f20, ftCreationTime.dwHighDateTime=0x1d5e228, ftLastAccessTime.dwLowDateTime=0x5138e40, ftLastAccessTime.dwHighDateTime=0x1d5d9ea, ftLastWriteTime.dwLowDateTime=0x5138e40, ftLastWriteTime.dwHighDateTime=0x1d5d9ea, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0087.471] FindNextFileW (in: hFindFile=0x381dc0, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1104f1c0, ftCreationTime.dwHighDateTime=0x1d5e3ff, ftLastAccessTime.dwLowDateTime=0x6fd16b10, ftLastAccessTime.dwHighDateTime=0x1d5e4fa, ftLastWriteTime.dwLowDateTime=0x6fd16b10, ftLastWriteTime.dwHighDateTime=0x1d5e4fa, nFileSizeHigh=0x0, nFileSizeLow=0x135ee, dwReserved0=0x0, dwReserved1=0x0, cFileName="7pnJroq6TA8sDt0s.wav", cAlternateFileName="7PNJRO~1.WAV")) returned 1 [0087.471] FindNextFileW (in: hFindFile=0x381dc0, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x52599bb0, ftCreationTime.dwHighDateTime=0x1d5d96b, ftLastAccessTime.dwLowDateTime=0x6a730360, ftLastAccessTime.dwHighDateTime=0x1d5d8aa, ftLastWriteTime.dwLowDateTime=0x6a730360, ftLastWriteTime.dwHighDateTime=0x1d5d8aa, nFileSizeHigh=0x0, nFileSizeLow=0x52fa, dwReserved0=0x0, dwReserved1=0x0, cFileName="7pnWDtzdw9HyFDwihW.mp3", cAlternateFileName="7PNWDT~1.MP3")) returned 1 [0087.471] FindNextFileW (in: hFindFile=0x381dc0, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6171b510, ftCreationTime.dwHighDateTime=0x1d5de66, ftLastAccessTime.dwLowDateTime=0x84a06e60, ftLastAccessTime.dwHighDateTime=0x1d5e789, ftLastWriteTime.dwLowDateTime=0x84a06e60, ftLastWriteTime.dwHighDateTime=0x1d5e789, nFileSizeHigh=0x0, nFileSizeLow=0xd0a8, dwReserved0=0x0, dwReserved1=0x0, cFileName="V3Wknm EVuxxYhtOt.m4a", cAlternateFileName="V3WKNM~1.M4A")) returned 1 [0087.471] FindNextFileW (in: hFindFile=0x381dc0, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xb8e3edd0, ftCreationTime.dwHighDateTime=0x1d5dbb0, ftLastAccessTime.dwLowDateTime=0x1cce9380, ftLastAccessTime.dwHighDateTime=0x1d5e404, ftLastWriteTime.dwLowDateTime=0x1cce9380, ftLastWriteTime.dwHighDateTime=0x1d5e404, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="WAwfTxwVF7xfXscX", cAlternateFileName="WAWFTX~1")) returned 1 [0087.472] FindNextFileW (in: hFindFile=0x381dc0, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xab7c1e10, ftCreationTime.dwHighDateTime=0x1d5de6c, ftLastAccessTime.dwLowDateTime=0x306c09e0, ftLastAccessTime.dwHighDateTime=0x1d5e50d, ftLastWriteTime.dwLowDateTime=0x306c09e0, ftLastWriteTime.dwHighDateTime=0x1d5e50d, nFileSizeHigh=0x0, nFileSizeLow=0x4849, dwReserved0=0x0, dwReserved1=0x0, cFileName="wCfIWq.wav", cAlternateFileName="")) returned 1 [0087.472] FindNextFileW (in: hFindFile=0x381dc0, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xff3b3af0, ftCreationTime.dwHighDateTime=0x1d5e71c, ftLastAccessTime.dwLowDateTime=0xbb0bf200, ftLastAccessTime.dwHighDateTime=0x1d5e7a5, ftLastWriteTime.dwLowDateTime=0xbb0bf200, ftLastWriteTime.dwHighDateTime=0x1d5e7a5, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="ypQAwj_1Xn8LoFy0UjN", cAlternateFileName="YPQAWJ~1")) returned 1 [0087.472] FindNextFileW (in: hFindFile=0x381dc0, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xff3b3af0, ftCreationTime.dwHighDateTime=0x1d5e71c, ftLastAccessTime.dwLowDateTime=0xbb0bf200, ftLastAccessTime.dwHighDateTime=0x1d5e7a5, ftLastWriteTime.dwLowDateTime=0xbb0bf200, ftLastWriteTime.dwHighDateTime=0x1d5e7a5, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="ypQAwj_1Xn8LoFy0UjN", cAlternateFileName="YPQAWJ~1")) returned 0 [0087.472] FindClose (in: hFindFile=0x381dc0 | out: hFindFile=0x381dc0) returned 1 [0087.472] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e77c) returned 1 [0087.472] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e788) returned 1 [0087.472] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e7bc) returned 1 [0087.472] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\5QUm8R", nBufferLength=0x105, lpBuffer=0x31e2c4, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\5QUm8R", lpFilePart=0x0) returned 0x2a [0087.472] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\5QUm8R\\", nBufferLength=0x105, lpBuffer=0x31e298, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\5QUm8R\\", lpFilePart=0x0) returned 0x2b [0087.472] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\5QUm8R\\*", lpFindFileData=0x31e4e4 | out: lpFindFileData=0x31e4e4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xe60b7f20, ftCreationTime.dwHighDateTime=0x1d5e228, ftLastAccessTime.dwLowDateTime=0x5138e40, ftLastAccessTime.dwHighDateTime=0x1d5d9ea, ftLastWriteTime.dwLowDateTime=0x5138e40, ftLastWriteTime.dwHighDateTime=0x1d5d9ea, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x381dc0 [0087.472] FindNextFileW (in: hFindFile=0x381dc0, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xe60b7f20, ftCreationTime.dwHighDateTime=0x1d5e228, ftLastAccessTime.dwLowDateTime=0x5138e40, ftLastAccessTime.dwHighDateTime=0x1d5d9ea, ftLastWriteTime.dwLowDateTime=0x5138e40, ftLastWriteTime.dwHighDateTime=0x1d5d9ea, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0087.473] FindNextFileW (in: hFindFile=0x381dc0, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1104f1c0, ftCreationTime.dwHighDateTime=0x1d5e3ff, ftLastAccessTime.dwLowDateTime=0x6fd16b10, ftLastAccessTime.dwHighDateTime=0x1d5e4fa, ftLastWriteTime.dwLowDateTime=0x6fd16b10, ftLastWriteTime.dwHighDateTime=0x1d5e4fa, nFileSizeHigh=0x0, nFileSizeLow=0x135ee, dwReserved0=0x0, dwReserved1=0x0, cFileName="7pnJroq6TA8sDt0s.wav", cAlternateFileName="7PNJRO~1.WAV")) returned 1 [0087.473] FindNextFileW (in: hFindFile=0x381dc0, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x52599bb0, ftCreationTime.dwHighDateTime=0x1d5d96b, ftLastAccessTime.dwLowDateTime=0x6a730360, ftLastAccessTime.dwHighDateTime=0x1d5d8aa, ftLastWriteTime.dwLowDateTime=0x6a730360, ftLastWriteTime.dwHighDateTime=0x1d5d8aa, nFileSizeHigh=0x0, nFileSizeLow=0x52fa, dwReserved0=0x0, dwReserved1=0x0, cFileName="7pnWDtzdw9HyFDwihW.mp3", cAlternateFileName="7PNWDT~1.MP3")) returned 1 [0087.473] FindNextFileW (in: hFindFile=0x381dc0, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6171b510, ftCreationTime.dwHighDateTime=0x1d5de66, ftLastAccessTime.dwLowDateTime=0x84a06e60, ftLastAccessTime.dwHighDateTime=0x1d5e789, ftLastWriteTime.dwLowDateTime=0x84a06e60, ftLastWriteTime.dwHighDateTime=0x1d5e789, nFileSizeHigh=0x0, nFileSizeLow=0xd0a8, dwReserved0=0x0, dwReserved1=0x0, cFileName="V3Wknm EVuxxYhtOt.m4a", cAlternateFileName="V3WKNM~1.M4A")) returned 1 [0087.473] FindNextFileW (in: hFindFile=0x381dc0, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xb8e3edd0, ftCreationTime.dwHighDateTime=0x1d5dbb0, ftLastAccessTime.dwLowDateTime=0x1cce9380, ftLastAccessTime.dwHighDateTime=0x1d5e404, ftLastWriteTime.dwLowDateTime=0x1cce9380, ftLastWriteTime.dwHighDateTime=0x1d5e404, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="WAwfTxwVF7xfXscX", cAlternateFileName="WAWFTX~1")) returned 1 [0087.473] FindNextFileW (in: hFindFile=0x381dc0, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xab7c1e10, ftCreationTime.dwHighDateTime=0x1d5de6c, ftLastAccessTime.dwLowDateTime=0x306c09e0, ftLastAccessTime.dwHighDateTime=0x1d5e50d, ftLastWriteTime.dwLowDateTime=0x306c09e0, ftLastWriteTime.dwHighDateTime=0x1d5e50d, nFileSizeHigh=0x0, nFileSizeLow=0x4849, dwReserved0=0x0, dwReserved1=0x0, cFileName="wCfIWq.wav", cAlternateFileName="")) returned 1 [0087.473] FindNextFileW (in: hFindFile=0x381dc0, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xff3b3af0, ftCreationTime.dwHighDateTime=0x1d5e71c, ftLastAccessTime.dwLowDateTime=0xbb0bf200, ftLastAccessTime.dwHighDateTime=0x1d5e7a5, ftLastWriteTime.dwLowDateTime=0xbb0bf200, ftLastWriteTime.dwHighDateTime=0x1d5e7a5, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="ypQAwj_1Xn8LoFy0UjN", cAlternateFileName="YPQAWJ~1")) returned 1 [0087.473] FindNextFileW (in: hFindFile=0x381dc0, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0087.473] FindClose (in: hFindFile=0x381dc0 | out: hFindFile=0x381dc0) returned 1 [0087.474] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e77c) returned 1 [0087.474] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e788) returned 1 [0087.474] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\5QUm8R\\7pnJroq6TA8sDt0s.wav", nBufferLength=0x105, lpBuffer=0x31e194, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\5QUm8R\\7pnJroq6TA8sDt0s.wav", lpFilePart=0x0) returned 0x3f [0087.474] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e688) returned 1 [0087.474] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\5QUm8R\\7pnJroq6TA8sDt0s.wav" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\music\\5qum8r\\7pnjroq6ta8sdt0s.wav"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x178 [0087.474] GetFileType (hFile=0x178) returned 0x1 [0087.474] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e684) returned 1 [0087.474] GetFileType (hFile=0x178) returned 0x1 [0087.474] GetFileSize (in: hFile=0x178, lpFileSizeHigh=0x31e790 | out: lpFileSizeHigh=0x31e790*=0x0) returned 0x135ee [0087.474] ReadFile (in: hFile=0x178, lpBuffer=0x279fddc, nNumberOfBytesToRead=0x135ee, lpNumberOfBytesRead=0x31e73c, lpOverlapped=0x0 | out: lpBuffer=0x279fddc*, lpNumberOfBytesRead=0x31e73c*=0x135ee, lpOverlapped=0x0) returned 1 [0087.475] CloseHandle (hObject=0x178) returned 1 [0087.491] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\5QUm8R\\7pnJroq6TA8sDt0s.wav", nBufferLength=0x105, lpBuffer=0x31e180, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\5QUm8R\\7pnJroq6TA8sDt0s.wav", lpFilePart=0x0) returned 0x3f [0087.491] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e674) returned 1 [0087.491] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\5QUm8R\\7pnJroq6TA8sDt0s.wav" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\music\\5qum8r\\7pnjroq6ta8sdt0s.wav"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x178 [0087.492] GetFileType (hFile=0x178) returned 0x1 [0087.492] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e670) returned 1 [0087.492] GetFileType (hFile=0x178) returned 0x1 [0087.492] WriteFile (in: hFile=0x178, lpBuffer=0x2826da8*, nNumberOfBytesToWrite=0x135f0, lpNumberOfBytesWritten=0x31e730, lpOverlapped=0x0 | out: lpBuffer=0x2826da8*, lpNumberOfBytesWritten=0x31e730*=0x135f0, lpOverlapped=0x0) returned 1 [0087.494] CloseHandle (hObject=0x178) returned 1 [0087.494] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\5QUm8R\\7pnJroq6TA8sDt0s.wav", nBufferLength=0x105, lpBuffer=0x31e2b4, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\5QUm8R\\7pnJroq6TA8sDt0s.wav", lpFilePart=0x0) returned 0x3f [0087.494] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\5QUm8R\\7pnJroq6TA8sDt0s.wav", nBufferLength=0x105, lpBuffer=0x31e2b4, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\5QUm8R\\7pnJroq6TA8sDt0s.wav", lpFilePart=0x0) returned 0x3f [0087.494] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e714) returned 1 [0087.494] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\5QUm8R\\7pnJroq6TA8sDt0s.wav" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\music\\5qum8r\\7pnjroq6ta8sdt0s.wav"), fInfoLevelId=0x0, lpFileInformation=0x31e790 | out: lpFileInformation=0x31e790*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1104f1c0, ftCreationTime.dwHighDateTime=0x1d5e3ff, ftLastAccessTime.dwLowDateTime=0x6fd16b10, ftLastAccessTime.dwHighDateTime=0x1d5e4fa, ftLastWriteTime.dwLowDateTime=0x1797c2a0, ftLastWriteTime.dwHighDateTime=0x1d6eb7f, nFileSizeHigh=0x0, nFileSizeLow=0x135f0)) returned 1 [0087.494] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e710) returned 1 [0087.494] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\5QUm8R\\7pnJroq6TA8sDt0s.wav" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\music\\5qum8r\\7pnjroq6ta8sdt0s.wav"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\5QUm8R\\7pnJroq6TA8sDt0s.wav" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\music\\5qum8r\\7pnjroq6ta8sdt0s.wav")) returned 1 [0087.495] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\5QUm8R\\7pnWDtzdw9HyFDwihW.mp3", nBufferLength=0x105, lpBuffer=0x31e194, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\5QUm8R\\7pnWDtzdw9HyFDwihW.mp3", lpFilePart=0x0) returned 0x41 [0087.495] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e688) returned 1 [0087.495] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\5QUm8R\\7pnWDtzdw9HyFDwihW.mp3" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\music\\5qum8r\\7pnwdtzdw9hyfdwihw.mp3"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x178 [0087.495] GetFileType (hFile=0x178) returned 0x1 [0087.495] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e684) returned 1 [0087.495] GetFileType (hFile=0x178) returned 0x1 [0087.495] GetFileSize (in: hFile=0x178, lpFileSizeHigh=0x31e790 | out: lpFileSizeHigh=0x31e790*=0x0) returned 0x52fa [0087.497] ReadFile (in: hFile=0x178, lpBuffer=0x262d340, nNumberOfBytesToRead=0x52fa, lpNumberOfBytesRead=0x31e73c, lpOverlapped=0x0 | out: lpBuffer=0x262d340*, lpNumberOfBytesRead=0x31e73c*=0x52fa, lpOverlapped=0x0) returned 1 [0087.498] CloseHandle (hObject=0x178) returned 1 [0087.535] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\5QUm8R\\7pnWDtzdw9HyFDwihW.mp3", nBufferLength=0x105, lpBuffer=0x31e180, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\5QUm8R\\7pnWDtzdw9HyFDwihW.mp3", lpFilePart=0x0) returned 0x41 [0087.535] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e674) returned 1 [0087.535] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\5QUm8R\\7pnWDtzdw9HyFDwihW.mp3" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\music\\5qum8r\\7pnwdtzdw9hyfdwihw.mp3"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x178 [0087.536] GetFileType (hFile=0x178) returned 0x1 [0087.536] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e670) returned 1 [0087.536] GetFileType (hFile=0x178) returned 0x1 [0087.536] WriteFile (in: hFile=0x178, lpBuffer=0x2694184*, nNumberOfBytesToWrite=0x5300, lpNumberOfBytesWritten=0x31e730, lpOverlapped=0x0 | out: lpBuffer=0x2694184*, lpNumberOfBytesWritten=0x31e730*=0x5300, lpOverlapped=0x0) returned 1 [0087.537] CloseHandle (hObject=0x178) returned 1 [0087.537] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\5QUm8R\\7pnWDtzdw9HyFDwihW.mp3", nBufferLength=0x105, lpBuffer=0x31e2b4, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\5QUm8R\\7pnWDtzdw9HyFDwihW.mp3", lpFilePart=0x0) returned 0x41 [0087.537] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\5QUm8R\\7pnWDtzdw9HyFDwihW.mp3", nBufferLength=0x105, lpBuffer=0x31e2b4, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\5QUm8R\\7pnWDtzdw9HyFDwihW.mp3", lpFilePart=0x0) returned 0x41 [0087.537] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e714) returned 1 [0087.537] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\5QUm8R\\7pnWDtzdw9HyFDwihW.mp3" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\music\\5qum8r\\7pnwdtzdw9hyfdwihw.mp3"), fInfoLevelId=0x0, lpFileInformation=0x31e790 | out: lpFileInformation=0x31e790*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x52599bb0, ftCreationTime.dwHighDateTime=0x1d5d96b, ftLastAccessTime.dwLowDateTime=0x6a730360, ftLastAccessTime.dwHighDateTime=0x1d5d8aa, ftLastWriteTime.dwLowDateTime=0x179ee6c0, ftLastWriteTime.dwHighDateTime=0x1d6eb7f, nFileSizeHigh=0x0, nFileSizeLow=0x5300)) returned 1 [0087.538] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e710) returned 1 [0087.538] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\5QUm8R\\7pnWDtzdw9HyFDwihW.mp3" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\music\\5qum8r\\7pnwdtzdw9hyfdwihw.mp3"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\5QUm8R\\7pnWDtzdw9HyFDwihW.mp3" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\music\\5qum8r\\7pnwdtzdw9hyfdwihw.mp3")) returned 1 [0087.538] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\5QUm8R\\wCfIWq.wav", nBufferLength=0x105, lpBuffer=0x31e194, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\5QUm8R\\wCfIWq.wav", lpFilePart=0x0) returned 0x35 [0087.538] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e688) returned 1 [0087.538] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\5QUm8R\\wCfIWq.wav" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\music\\5qum8r\\wcfiwq.wav"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x178 [0087.538] GetFileType (hFile=0x178) returned 0x1 [0087.538] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e684) returned 1 [0087.538] GetFileType (hFile=0x178) returned 0x1 [0087.538] GetFileSize (in: hFile=0x178, lpFileSizeHigh=0x31e790 | out: lpFileSizeHigh=0x31e790*=0x0) returned 0x4849 [0087.538] ReadFile (in: hFile=0x178, lpBuffer=0x2699800, nNumberOfBytesToRead=0x4849, lpNumberOfBytesRead=0x31e73c, lpOverlapped=0x0 | out: lpBuffer=0x2699800*, lpNumberOfBytesRead=0x31e73c*=0x4849, lpOverlapped=0x0) returned 1 [0087.539] CloseHandle (hObject=0x178) returned 1 [0087.553] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\5QUm8R\\wCfIWq.wav", nBufferLength=0x105, lpBuffer=0x31e180, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\5QUm8R\\wCfIWq.wav", lpFilePart=0x0) returned 0x35 [0087.553] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e674) returned 1 [0087.553] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\5QUm8R\\wCfIWq.wav" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\music\\5qum8r\\wcfiwq.wav"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x178 [0087.554] GetFileType (hFile=0x178) returned 0x1 [0087.554] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e670) returned 1 [0087.554] GetFileType (hFile=0x178) returned 0x1 [0087.554] WriteFile (in: hFile=0x178, lpBuffer=0x26fcf78*, nNumberOfBytesToWrite=0x4850, lpNumberOfBytesWritten=0x31e730, lpOverlapped=0x0 | out: lpBuffer=0x26fcf78*, lpNumberOfBytesWritten=0x31e730*=0x4850, lpOverlapped=0x0) returned 1 [0087.555] CloseHandle (hObject=0x178) returned 1 [0087.555] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\5QUm8R\\wCfIWq.wav", nBufferLength=0x105, lpBuffer=0x31e2b4, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\5QUm8R\\wCfIWq.wav", lpFilePart=0x0) returned 0x35 [0087.555] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\5QUm8R\\wCfIWq.wav", nBufferLength=0x105, lpBuffer=0x31e2b4, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\5QUm8R\\wCfIWq.wav", lpFilePart=0x0) returned 0x35 [0087.555] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e714) returned 1 [0087.555] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\5QUm8R\\wCfIWq.wav" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\music\\5qum8r\\wcfiwq.wav"), fInfoLevelId=0x0, lpFileInformation=0x31e790 | out: lpFileInformation=0x31e790*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xab7c1e10, ftCreationTime.dwHighDateTime=0x1d5de6c, ftLastAccessTime.dwLowDateTime=0x306c09e0, ftLastAccessTime.dwHighDateTime=0x1d5e50d, ftLastWriteTime.dwLowDateTime=0x17a14820, ftLastWriteTime.dwHighDateTime=0x1d6eb7f, nFileSizeHigh=0x0, nFileSizeLow=0x4850)) returned 1 [0087.555] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e710) returned 1 [0087.555] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\5QUm8R\\wCfIWq.wav" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\music\\5qum8r\\wcfiwq.wav"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\5QUm8R\\wCfIWq.wav" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\music\\5qum8r\\wcfiwq.wav")) returned 1 [0087.555] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e744) returned 1 [0087.555] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\5QUm8R\\WAwfTxwVF7xfXscX", nBufferLength=0x105, lpBuffer=0x31e24c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\5QUm8R\\WAwfTxwVF7xfXscX", lpFilePart=0x0) returned 0x3b [0087.555] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\5QUm8R\\WAwfTxwVF7xfXscX\\", nBufferLength=0x105, lpBuffer=0x31e220, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\5QUm8R\\WAwfTxwVF7xfXscX\\", lpFilePart=0x0) returned 0x3c [0087.555] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\5QUm8R\\WAwfTxwVF7xfXscX\\*", lpFindFileData=0x31e46c | out: lpFindFileData=0x31e46c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xb8e3edd0, ftCreationTime.dwHighDateTime=0x1d5dbb0, ftLastAccessTime.dwLowDateTime=0x1cce9380, ftLastAccessTime.dwHighDateTime=0x1d5e404, ftLastWriteTime.dwLowDateTime=0x1cce9380, ftLastWriteTime.dwHighDateTime=0x1d5e404, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x381c40 [0087.556] FindNextFileW (in: hFindFile=0x381c40, lpFindFileData=0x31e47c | out: lpFindFileData=0x31e47c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xb8e3edd0, ftCreationTime.dwHighDateTime=0x1d5dbb0, ftLastAccessTime.dwLowDateTime=0x1cce9380, ftLastAccessTime.dwHighDateTime=0x1d5e404, ftLastWriteTime.dwLowDateTime=0x1cce9380, ftLastWriteTime.dwHighDateTime=0x1d5e404, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0087.556] FindNextFileW (in: hFindFile=0x381c40, lpFindFileData=0x31e47c | out: lpFindFileData=0x31e47c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xae8215e0, ftCreationTime.dwHighDateTime=0x1d5db5d, ftLastAccessTime.dwLowDateTime=0xef717110, ftLastAccessTime.dwHighDateTime=0x1d5e740, ftLastWriteTime.dwLowDateTime=0xef717110, ftLastWriteTime.dwHighDateTime=0x1d5e740, nFileSizeHigh=0x0, nFileSizeLow=0xaf2b, dwReserved0=0x0, dwReserved1=0x0, cFileName="E-G1X D.mp3", cAlternateFileName="E-G1XD~1.MP3")) returned 1 [0087.556] FindNextFileW (in: hFindFile=0x381c40, lpFindFileData=0x31e47c | out: lpFindFileData=0x31e47c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x80457420, ftCreationTime.dwHighDateTime=0x1d5dd82, ftLastAccessTime.dwLowDateTime=0x10e67c30, ftLastAccessTime.dwHighDateTime=0x1d5d7e9, ftLastWriteTime.dwLowDateTime=0x10e67c30, ftLastWriteTime.dwHighDateTime=0x1d5d7e9, nFileSizeHigh=0x0, nFileSizeLow=0xa95e, dwReserved0=0x0, dwReserved1=0x0, cFileName="Gmi8b9JWT.wav", cAlternateFileName="GMI8B9~1.WAV")) returned 1 [0087.556] FindNextFileW (in: hFindFile=0x381c40, lpFindFileData=0x31e47c | out: lpFindFileData=0x31e47c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x40f6bb80, ftCreationTime.dwHighDateTime=0x1d5e2b4, ftLastAccessTime.dwLowDateTime=0x31e843d0, ftLastAccessTime.dwHighDateTime=0x1d5e092, ftLastWriteTime.dwLowDateTime=0x31e843d0, ftLastWriteTime.dwHighDateTime=0x1d5e092, nFileSizeHigh=0x0, nFileSizeLow=0x6c18, dwReserved0=0x0, dwReserved1=0x0, cFileName="IwC0hLT.mp3", cAlternateFileName="")) returned 1 [0087.556] FindNextFileW (in: hFindFile=0x381c40, lpFindFileData=0x31e47c | out: lpFindFileData=0x31e47c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3e7c1540, ftCreationTime.dwHighDateTime=0x1d5e209, ftLastAccessTime.dwLowDateTime=0xe42629c0, ftLastAccessTime.dwHighDateTime=0x1d5e12a, ftLastWriteTime.dwLowDateTime=0xe42629c0, ftLastWriteTime.dwHighDateTime=0x1d5e12a, nFileSizeHigh=0x0, nFileSizeLow=0x10d3f, dwReserved0=0x0, dwReserved1=0x0, cFileName="p9JY5Z93.mp3", cAlternateFileName="")) returned 1 [0087.556] FindNextFileW (in: hFindFile=0x381c40, lpFindFileData=0x31e47c | out: lpFindFileData=0x31e47c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xccdab680, ftCreationTime.dwHighDateTime=0x1d5e195, ftLastAccessTime.dwLowDateTime=0xdd0cc560, ftLastAccessTime.dwHighDateTime=0x1d5dd0e, ftLastWriteTime.dwLowDateTime=0xdd0cc560, ftLastWriteTime.dwHighDateTime=0x1d5dd0e, nFileSizeHigh=0x0, nFileSizeLow=0xa9c9, dwReserved0=0x0, dwReserved1=0x0, cFileName="UMTlLE37InoqB6DI.mp3", cAlternateFileName="UMTLLE~1.MP3")) returned 1 [0087.556] FindNextFileW (in: hFindFile=0x381c40, lpFindFileData=0x31e47c | out: lpFindFileData=0x31e47c*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0087.556] FindClose (in: hFindFile=0x381c40 | out: hFindFile=0x381c40) returned 1 [0087.557] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e704) returned 1 [0087.557] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e710) returned 1 [0087.557] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e744) returned 1 [0087.557] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\5QUm8R\\WAwfTxwVF7xfXscX", nBufferLength=0x105, lpBuffer=0x31e24c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\5QUm8R\\WAwfTxwVF7xfXscX", lpFilePart=0x0) returned 0x3b [0087.557] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\5QUm8R\\WAwfTxwVF7xfXscX\\", nBufferLength=0x105, lpBuffer=0x31e220, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\5QUm8R\\WAwfTxwVF7xfXscX\\", lpFilePart=0x0) returned 0x3c [0087.557] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\5QUm8R\\WAwfTxwVF7xfXscX\\*", lpFindFileData=0x31e46c | out: lpFindFileData=0x31e46c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xb8e3edd0, ftCreationTime.dwHighDateTime=0x1d5dbb0, ftLastAccessTime.dwLowDateTime=0x1cce9380, ftLastAccessTime.dwHighDateTime=0x1d5e404, ftLastWriteTime.dwLowDateTime=0x1cce9380, ftLastWriteTime.dwHighDateTime=0x1d5e404, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x381c40 [0087.557] FindNextFileW (in: hFindFile=0x381c40, lpFindFileData=0x31e47c | out: lpFindFileData=0x31e47c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xb8e3edd0, ftCreationTime.dwHighDateTime=0x1d5dbb0, ftLastAccessTime.dwLowDateTime=0x1cce9380, ftLastAccessTime.dwHighDateTime=0x1d5e404, ftLastWriteTime.dwLowDateTime=0x1cce9380, ftLastWriteTime.dwHighDateTime=0x1d5e404, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0087.557] FindNextFileW (in: hFindFile=0x381c40, lpFindFileData=0x31e47c | out: lpFindFileData=0x31e47c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xae8215e0, ftCreationTime.dwHighDateTime=0x1d5db5d, ftLastAccessTime.dwLowDateTime=0xef717110, ftLastAccessTime.dwHighDateTime=0x1d5e740, ftLastWriteTime.dwLowDateTime=0xef717110, ftLastWriteTime.dwHighDateTime=0x1d5e740, nFileSizeHigh=0x0, nFileSizeLow=0xaf2b, dwReserved0=0x0, dwReserved1=0x0, cFileName="E-G1X D.mp3", cAlternateFileName="E-G1XD~1.MP3")) returned 1 [0087.557] FindNextFileW (in: hFindFile=0x381c40, lpFindFileData=0x31e47c | out: lpFindFileData=0x31e47c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x80457420, ftCreationTime.dwHighDateTime=0x1d5dd82, ftLastAccessTime.dwLowDateTime=0x10e67c30, ftLastAccessTime.dwHighDateTime=0x1d5d7e9, ftLastWriteTime.dwLowDateTime=0x10e67c30, ftLastWriteTime.dwHighDateTime=0x1d5d7e9, nFileSizeHigh=0x0, nFileSizeLow=0xa95e, dwReserved0=0x0, dwReserved1=0x0, cFileName="Gmi8b9JWT.wav", cAlternateFileName="GMI8B9~1.WAV")) returned 1 [0087.557] FindNextFileW (in: hFindFile=0x381c40, lpFindFileData=0x31e47c | out: lpFindFileData=0x31e47c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x40f6bb80, ftCreationTime.dwHighDateTime=0x1d5e2b4, ftLastAccessTime.dwLowDateTime=0x31e843d0, ftLastAccessTime.dwHighDateTime=0x1d5e092, ftLastWriteTime.dwLowDateTime=0x31e843d0, ftLastWriteTime.dwHighDateTime=0x1d5e092, nFileSizeHigh=0x0, nFileSizeLow=0x6c18, dwReserved0=0x0, dwReserved1=0x0, cFileName="IwC0hLT.mp3", cAlternateFileName="")) returned 1 [0087.558] FindNextFileW (in: hFindFile=0x381c40, lpFindFileData=0x31e47c | out: lpFindFileData=0x31e47c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3e7c1540, ftCreationTime.dwHighDateTime=0x1d5e209, ftLastAccessTime.dwLowDateTime=0xe42629c0, ftLastAccessTime.dwHighDateTime=0x1d5e12a, ftLastWriteTime.dwLowDateTime=0xe42629c0, ftLastWriteTime.dwHighDateTime=0x1d5e12a, nFileSizeHigh=0x0, nFileSizeLow=0x10d3f, dwReserved0=0x0, dwReserved1=0x0, cFileName="p9JY5Z93.mp3", cAlternateFileName="")) returned 1 [0087.558] FindNextFileW (in: hFindFile=0x381c40, lpFindFileData=0x31e47c | out: lpFindFileData=0x31e47c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xccdab680, ftCreationTime.dwHighDateTime=0x1d5e195, ftLastAccessTime.dwLowDateTime=0xdd0cc560, ftLastAccessTime.dwHighDateTime=0x1d5dd0e, ftLastWriteTime.dwLowDateTime=0xdd0cc560, ftLastWriteTime.dwHighDateTime=0x1d5dd0e, nFileSizeHigh=0x0, nFileSizeLow=0xa9c9, dwReserved0=0x0, dwReserved1=0x0, cFileName="UMTlLE37InoqB6DI.mp3", cAlternateFileName="UMTLLE~1.MP3")) returned 1 [0087.558] FindNextFileW (in: hFindFile=0x381c40, lpFindFileData=0x31e47c | out: lpFindFileData=0x31e47c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xccdab680, ftCreationTime.dwHighDateTime=0x1d5e195, ftLastAccessTime.dwLowDateTime=0xdd0cc560, ftLastAccessTime.dwHighDateTime=0x1d5dd0e, ftLastWriteTime.dwLowDateTime=0xdd0cc560, ftLastWriteTime.dwHighDateTime=0x1d5dd0e, nFileSizeHigh=0x0, nFileSizeLow=0xa9c9, dwReserved0=0x0, dwReserved1=0x0, cFileName="UMTlLE37InoqB6DI.mp3", cAlternateFileName="UMTLLE~1.MP3")) returned 0 [0087.558] FindClose (in: hFindFile=0x381c40 | out: hFindFile=0x381c40) returned 1 [0087.558] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e704) returned 1 [0087.558] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e710) returned 1 [0087.558] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\5QUm8R\\WAwfTxwVF7xfXscX\\E-G1X D.mp3", nBufferLength=0x105, lpBuffer=0x31e11c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\5QUm8R\\WAwfTxwVF7xfXscX\\E-G1X D.mp3", lpFilePart=0x0) returned 0x47 [0087.558] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e610) returned 1 [0087.558] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\5QUm8R\\WAwfTxwVF7xfXscX\\E-G1X D.mp3" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\music\\5qum8r\\wawftxwvf7xfxscx\\e-g1x d.mp3"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x178 [0087.558] GetFileType (hFile=0x178) returned 0x1 [0087.558] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e60c) returned 1 [0087.558] GetFileType (hFile=0x178) returned 0x1 [0087.558] GetFileSize (in: hFile=0x178, lpFileSizeHigh=0x31e718 | out: lpFileSizeHigh=0x31e718*=0x0) returned 0xaf2b [0087.558] ReadFile (in: hFile=0x178, lpBuffer=0x2704048, nNumberOfBytesToRead=0xaf2b, lpNumberOfBytesRead=0x31e6c4, lpOverlapped=0x0 | out: lpBuffer=0x2704048*, lpNumberOfBytesRead=0x31e6c4*=0xaf2b, lpOverlapped=0x0) returned 1 [0087.559] CloseHandle (hObject=0x178) returned 1 [0087.573] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\5QUm8R\\WAwfTxwVF7xfXscX\\E-G1X D.mp3", nBufferLength=0x105, lpBuffer=0x31e108, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\5QUm8R\\WAwfTxwVF7xfXscX\\E-G1X D.mp3", lpFilePart=0x0) returned 0x47 [0087.573] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e5fc) returned 1 [0087.573] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\5QUm8R\\WAwfTxwVF7xfXscX\\E-G1X D.mp3" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\music\\5qum8r\\wawftxwvf7xfxscx\\e-g1x d.mp3"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x178 [0087.574] GetFileType (hFile=0x178) returned 0x1 [0087.574] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e5f8) returned 1 [0087.574] GetFileType (hFile=0x178) returned 0x1 [0087.574] WriteFile (in: hFile=0x178, lpBuffer=0x2771bd4*, nNumberOfBytesToWrite=0xaf30, lpNumberOfBytesWritten=0x31e6b8, lpOverlapped=0x0 | out: lpBuffer=0x2771bd4*, lpNumberOfBytesWritten=0x31e6b8*=0xaf30, lpOverlapped=0x0) returned 1 [0087.576] CloseHandle (hObject=0x178) returned 1 [0087.576] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\5QUm8R\\WAwfTxwVF7xfXscX\\E-G1X D.mp3", nBufferLength=0x105, lpBuffer=0x31e23c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\5QUm8R\\WAwfTxwVF7xfXscX\\E-G1X D.mp3", lpFilePart=0x0) returned 0x47 [0087.576] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\5QUm8R\\WAwfTxwVF7xfXscX\\E-G1X D.mp3", nBufferLength=0x105, lpBuffer=0x31e23c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\5QUm8R\\WAwfTxwVF7xfXscX\\E-G1X D.mp3", lpFilePart=0x0) returned 0x47 [0087.576] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e69c) returned 1 [0087.576] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\5QUm8R\\WAwfTxwVF7xfXscX\\E-G1X D.mp3" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\music\\5qum8r\\wawftxwvf7xfxscx\\e-g1x d.mp3"), fInfoLevelId=0x0, lpFileInformation=0x31e718 | out: lpFileInformation=0x31e718*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xae8215e0, ftCreationTime.dwHighDateTime=0x1d5db5d, ftLastAccessTime.dwLowDateTime=0xef717110, ftLastAccessTime.dwHighDateTime=0x1d5e740, ftLastWriteTime.dwLowDateTime=0x17a3a980, ftLastWriteTime.dwHighDateTime=0x1d6eb7f, nFileSizeHigh=0x0, nFileSizeLow=0xaf30)) returned 1 [0087.576] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e698) returned 1 [0087.576] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\5QUm8R\\WAwfTxwVF7xfXscX\\E-G1X D.mp3" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\music\\5qum8r\\wawftxwvf7xfxscx\\e-g1x d.mp3"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\5QUm8R\\WAwfTxwVF7xfXscX\\E-G1X D.mp3" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\music\\5qum8r\\wawftxwvf7xfxscx\\e-g1x d.mp3")) returned 1 [0087.576] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\5QUm8R\\WAwfTxwVF7xfXscX\\Gmi8b9JWT.wav", nBufferLength=0x105, lpBuffer=0x31e11c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\5QUm8R\\WAwfTxwVF7xfXscX\\Gmi8b9JWT.wav", lpFilePart=0x0) returned 0x49 [0087.576] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e610) returned 1 [0087.577] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\5QUm8R\\WAwfTxwVF7xfXscX\\Gmi8b9JWT.wav" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\music\\5qum8r\\wawftxwvf7xfxscx\\gmi8b9jwt.wav"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x178 [0087.577] GetFileType (hFile=0x178) returned 0x1 [0087.577] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e60c) returned 1 [0087.577] GetFileType (hFile=0x178) returned 0x1 [0087.577] GetFileSize (in: hFile=0x178, lpFileSizeHigh=0x31e718 | out: lpFileSizeHigh=0x31e718*=0x0) returned 0xa95e [0087.577] ReadFile (in: hFile=0x178, lpBuffer=0x277cea0, nNumberOfBytesToRead=0xa95e, lpNumberOfBytesRead=0x31e6c4, lpOverlapped=0x0 | out: lpBuffer=0x277cea0*, lpNumberOfBytesRead=0x31e6c4*=0xa95e, lpOverlapped=0x0) returned 1 [0087.578] CloseHandle (hObject=0x178) returned 1 [0087.592] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\5QUm8R\\WAwfTxwVF7xfXscX\\Gmi8b9JWT.wav", nBufferLength=0x105, lpBuffer=0x31e108, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\5QUm8R\\WAwfTxwVF7xfXscX\\Gmi8b9JWT.wav", lpFilePart=0x0) returned 0x49 [0087.592] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e5fc) returned 1 [0087.592] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\5QUm8R\\WAwfTxwVF7xfXscX\\Gmi8b9JWT.wav" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\music\\5qum8r\\wawftxwvf7xfxscx\\gmi8b9jwt.wav"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x178 [0087.593] GetFileType (hFile=0x178) returned 0x1 [0087.593] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e5f8) returned 1 [0087.593] GetFileType (hFile=0x178) returned 0x1 [0087.594] WriteFile (in: hFile=0x178, lpBuffer=0x27e98bc*, nNumberOfBytesToWrite=0xa960, lpNumberOfBytesWritten=0x31e6b8, lpOverlapped=0x0 | out: lpBuffer=0x27e98bc*, lpNumberOfBytesWritten=0x31e6b8*=0xa960, lpOverlapped=0x0) returned 1 [0087.595] CloseHandle (hObject=0x178) returned 1 [0087.595] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\5QUm8R\\WAwfTxwVF7xfXscX\\Gmi8b9JWT.wav", nBufferLength=0x105, lpBuffer=0x31e23c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\5QUm8R\\WAwfTxwVF7xfXscX\\Gmi8b9JWT.wav", lpFilePart=0x0) returned 0x49 [0087.595] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\5QUm8R\\WAwfTxwVF7xfXscX\\Gmi8b9JWT.wav", nBufferLength=0x105, lpBuffer=0x31e23c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\5QUm8R\\WAwfTxwVF7xfXscX\\Gmi8b9JWT.wav", lpFilePart=0x0) returned 0x49 [0087.595] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e69c) returned 1 [0087.595] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\5QUm8R\\WAwfTxwVF7xfXscX\\Gmi8b9JWT.wav" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\music\\5qum8r\\wawftxwvf7xfxscx\\gmi8b9jwt.wav"), fInfoLevelId=0x0, lpFileInformation=0x31e718 | out: lpFileInformation=0x31e718*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x80457420, ftCreationTime.dwHighDateTime=0x1d5dd82, ftLastAccessTime.dwLowDateTime=0x10e67c30, ftLastAccessTime.dwHighDateTime=0x1d5d7e9, ftLastWriteTime.dwLowDateTime=0x17a86c40, ftLastWriteTime.dwHighDateTime=0x1d6eb7f, nFileSizeHigh=0x0, nFileSizeLow=0xa960)) returned 1 [0087.596] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e698) returned 1 [0087.596] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\5QUm8R\\WAwfTxwVF7xfXscX\\Gmi8b9JWT.wav" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\music\\5qum8r\\wawftxwvf7xfxscx\\gmi8b9jwt.wav"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\5QUm8R\\WAwfTxwVF7xfXscX\\Gmi8b9JWT.wav" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\music\\5qum8r\\wawftxwvf7xfxscx\\gmi8b9jwt.wav")) returned 1 [0087.596] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\5QUm8R\\WAwfTxwVF7xfXscX\\IwC0hLT.mp3", nBufferLength=0x105, lpBuffer=0x31e11c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\5QUm8R\\WAwfTxwVF7xfXscX\\IwC0hLT.mp3", lpFilePart=0x0) returned 0x47 [0087.596] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e610) returned 1 [0087.596] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\5QUm8R\\WAwfTxwVF7xfXscX\\IwC0hLT.mp3" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\music\\5qum8r\\wawftxwvf7xfxscx\\iwc0hlt.mp3"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x178 [0087.596] GetFileType (hFile=0x178) returned 0x1 [0087.596] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e60c) returned 1 [0087.596] GetFileType (hFile=0x178) returned 0x1 [0087.596] GetFileSize (in: hFile=0x178, lpFileSizeHigh=0x31e718 | out: lpFileSizeHigh=0x31e718*=0x0) returned 0x6c18 [0087.596] ReadFile (in: hFile=0x178, lpBuffer=0x27f45c0, nNumberOfBytesToRead=0x6c18, lpNumberOfBytesRead=0x31e6c4, lpOverlapped=0x0 | out: lpBuffer=0x27f45c0*, lpNumberOfBytesRead=0x31e6c4*=0x6c18, lpOverlapped=0x0) returned 1 [0087.597] CloseHandle (hObject=0x178) returned 1 [0087.637] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\5QUm8R\\WAwfTxwVF7xfXscX\\IwC0hLT.mp3", nBufferLength=0x105, lpBuffer=0x31e108, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\5QUm8R\\WAwfTxwVF7xfXscX\\IwC0hLT.mp3", lpFilePart=0x0) returned 0x47 [0087.637] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e5fc) returned 1 [0087.637] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\5QUm8R\\WAwfTxwVF7xfXscX\\IwC0hLT.mp3" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\music\\5qum8r\\wawftxwvf7xfxscx\\iwc0hlt.mp3"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x178 [0087.638] GetFileType (hFile=0x178) returned 0x1 [0087.638] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e5f8) returned 1 [0087.638] GetFileType (hFile=0x178) returned 0x1 [0087.638] WriteFile (in: hFile=0x178, lpBuffer=0x266a488*, nNumberOfBytesToWrite=0x6c20, lpNumberOfBytesWritten=0x31e6b8, lpOverlapped=0x0 | out: lpBuffer=0x266a488*, lpNumberOfBytesWritten=0x31e6b8*=0x6c20, lpOverlapped=0x0) returned 1 [0087.639] CloseHandle (hObject=0x178) returned 1 [0087.639] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\5QUm8R\\WAwfTxwVF7xfXscX\\IwC0hLT.mp3", nBufferLength=0x105, lpBuffer=0x31e23c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\5QUm8R\\WAwfTxwVF7xfXscX\\IwC0hLT.mp3", lpFilePart=0x0) returned 0x47 [0087.639] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\5QUm8R\\WAwfTxwVF7xfXscX\\IwC0hLT.mp3", nBufferLength=0x105, lpBuffer=0x31e23c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\5QUm8R\\WAwfTxwVF7xfXscX\\IwC0hLT.mp3", lpFilePart=0x0) returned 0x47 [0087.639] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e69c) returned 1 [0087.639] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\5QUm8R\\WAwfTxwVF7xfXscX\\IwC0hLT.mp3" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\music\\5qum8r\\wawftxwvf7xfxscx\\iwc0hlt.mp3"), fInfoLevelId=0x0, lpFileInformation=0x31e718 | out: lpFileInformation=0x31e718*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x40f6bb80, ftCreationTime.dwHighDateTime=0x1d5e2b4, ftLastAccessTime.dwLowDateTime=0x31e843d0, ftLastAccessTime.dwHighDateTime=0x1d5e092, ftLastWriteTime.dwLowDateTime=0x17ad2f00, ftLastWriteTime.dwHighDateTime=0x1d6eb7f, nFileSizeHigh=0x0, nFileSizeLow=0x6c20)) returned 1 [0087.640] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e698) returned 1 [0087.640] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\5QUm8R\\WAwfTxwVF7xfXscX\\IwC0hLT.mp3" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\music\\5qum8r\\wawftxwvf7xfxscx\\iwc0hlt.mp3"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\5QUm8R\\WAwfTxwVF7xfXscX\\IwC0hLT.mp3" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\music\\5qum8r\\wawftxwvf7xfxscx\\iwc0hlt.mp3")) returned 1 [0087.640] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\5QUm8R\\WAwfTxwVF7xfXscX\\p9JY5Z93.mp3", nBufferLength=0x105, lpBuffer=0x31e11c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\5QUm8R\\WAwfTxwVF7xfXscX\\p9JY5Z93.mp3", lpFilePart=0x0) returned 0x48 [0087.640] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e610) returned 1 [0087.640] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\5QUm8R\\WAwfTxwVF7xfXscX\\p9JY5Z93.mp3" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\music\\5qum8r\\wawftxwvf7xfxscx\\p9jy5z93.mp3"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x178 [0087.640] GetFileType (hFile=0x178) returned 0x1 [0087.640] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e60c) returned 1 [0087.640] GetFileType (hFile=0x178) returned 0x1 [0087.640] GetFileSize (in: hFile=0x178, lpFileSizeHigh=0x31e718 | out: lpFileSizeHigh=0x31e718*=0x0) returned 0x10d3f [0087.640] ReadFile (in: hFile=0x178, lpBuffer=0x2671444, nNumberOfBytesToRead=0x10d3f, lpNumberOfBytesRead=0x31e6c4, lpOverlapped=0x0 | out: lpBuffer=0x2671444*, lpNumberOfBytesRead=0x31e6c4*=0x10d3f, lpOverlapped=0x0) returned 1 [0087.641] CloseHandle (hObject=0x178) returned 1 [0087.659] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\5QUm8R\\WAwfTxwVF7xfXscX\\p9JY5Z93.mp3", nBufferLength=0x105, lpBuffer=0x31e108, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\5QUm8R\\WAwfTxwVF7xfXscX\\p9JY5Z93.mp3", lpFilePart=0x0) returned 0x48 [0087.659] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e5fc) returned 1 [0087.659] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\5QUm8R\\WAwfTxwVF7xfXscX\\p9JY5Z93.mp3" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\music\\5qum8r\\wawftxwvf7xfxscx\\p9jy5z93.mp3"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x178 [0087.660] GetFileType (hFile=0x178) returned 0x1 [0087.660] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e5f8) returned 1 [0087.660] GetFileType (hFile=0x178) returned 0x1 [0087.660] WriteFile (in: hFile=0x178, lpBuffer=0x26f0b5c*, nNumberOfBytesToWrite=0x10d40, lpNumberOfBytesWritten=0x31e6b8, lpOverlapped=0x0 | out: lpBuffer=0x26f0b5c*, lpNumberOfBytesWritten=0x31e6b8*=0x10d40, lpOverlapped=0x0) returned 1 [0087.662] CloseHandle (hObject=0x178) returned 1 [0087.662] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\5QUm8R\\WAwfTxwVF7xfXscX\\p9JY5Z93.mp3", nBufferLength=0x105, lpBuffer=0x31e23c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\5QUm8R\\WAwfTxwVF7xfXscX\\p9JY5Z93.mp3", lpFilePart=0x0) returned 0x48 [0087.662] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\5QUm8R\\WAwfTxwVF7xfXscX\\p9JY5Z93.mp3", nBufferLength=0x105, lpBuffer=0x31e23c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\5QUm8R\\WAwfTxwVF7xfXscX\\p9JY5Z93.mp3", lpFilePart=0x0) returned 0x48 [0087.662] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e69c) returned 1 [0087.662] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\5QUm8R\\WAwfTxwVF7xfXscX\\p9JY5Z93.mp3" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\music\\5qum8r\\wawftxwvf7xfxscx\\p9jy5z93.mp3"), fInfoLevelId=0x0, lpFileInformation=0x31e718 | out: lpFileInformation=0x31e718*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3e7c1540, ftCreationTime.dwHighDateTime=0x1d5e209, ftLastAccessTime.dwLowDateTime=0xe42629c0, ftLastAccessTime.dwHighDateTime=0x1d5e12a, ftLastWriteTime.dwLowDateTime=0x17b1f1c0, ftLastWriteTime.dwHighDateTime=0x1d6eb7f, nFileSizeHigh=0x0, nFileSizeLow=0x10d40)) returned 1 [0087.662] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e698) returned 1 [0087.662] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\5QUm8R\\WAwfTxwVF7xfXscX\\p9JY5Z93.mp3" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\music\\5qum8r\\wawftxwvf7xfxscx\\p9jy5z93.mp3"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\5QUm8R\\WAwfTxwVF7xfXscX\\p9JY5Z93.mp3" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\music\\5qum8r\\wawftxwvf7xfxscx\\p9jy5z93.mp3")) returned 1 [0087.663] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\5QUm8R\\WAwfTxwVF7xfXscX\\UMTlLE37InoqB6DI.mp3", nBufferLength=0x105, lpBuffer=0x31e11c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\5QUm8R\\WAwfTxwVF7xfXscX\\UMTlLE37InoqB6DI.mp3", lpFilePart=0x0) returned 0x50 [0087.663] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e610) returned 1 [0087.663] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\5QUm8R\\WAwfTxwVF7xfXscX\\UMTlLE37InoqB6DI.mp3" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\music\\5qum8r\\wawftxwvf7xfxscx\\umtlle37inoqb6di.mp3"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x178 [0087.663] GetFileType (hFile=0x178) returned 0x1 [0087.663] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e60c) returned 1 [0087.663] GetFileType (hFile=0x178) returned 0x1 [0087.663] GetFileSize (in: hFile=0x178, lpFileSizeHigh=0x31e718 | out: lpFileSizeHigh=0x31e718*=0x0) returned 0xa9c9 [0087.663] ReadFile (in: hFile=0x178, lpBuffer=0x2701c68, nNumberOfBytesToRead=0xa9c9, lpNumberOfBytesRead=0x31e6c4, lpOverlapped=0x0 | out: lpBuffer=0x2701c68*, lpNumberOfBytesRead=0x31e6c4*=0xa9c9, lpOverlapped=0x0) returned 1 [0087.664] CloseHandle (hObject=0x178) returned 1 [0087.678] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\5QUm8R\\WAwfTxwVF7xfXscX\\UMTlLE37InoqB6DI.mp3", nBufferLength=0x105, lpBuffer=0x31e108, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\5QUm8R\\WAwfTxwVF7xfXscX\\UMTlLE37InoqB6DI.mp3", lpFilePart=0x0) returned 0x50 [0087.678] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e5fc) returned 1 [0087.678] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\5QUm8R\\WAwfTxwVF7xfXscX\\UMTlLE37InoqB6DI.mp3" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\music\\5qum8r\\wawftxwvf7xfxscx\\umtlle37inoqb6di.mp3"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x178 [0087.679] GetFileType (hFile=0x178) returned 0x1 [0087.679] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e5f8) returned 1 [0087.679] GetFileType (hFile=0x178) returned 0x1 [0087.679] WriteFile (in: hFile=0x178, lpBuffer=0x276e7d4*, nNumberOfBytesToWrite=0xa9d0, lpNumberOfBytesWritten=0x31e6b8, lpOverlapped=0x0 | out: lpBuffer=0x276e7d4*, lpNumberOfBytesWritten=0x31e6b8*=0xa9d0, lpOverlapped=0x0) returned 1 [0087.681] CloseHandle (hObject=0x178) returned 1 [0087.681] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\5QUm8R\\WAwfTxwVF7xfXscX\\UMTlLE37InoqB6DI.mp3", nBufferLength=0x105, lpBuffer=0x31e23c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\5QUm8R\\WAwfTxwVF7xfXscX\\UMTlLE37InoqB6DI.mp3", lpFilePart=0x0) returned 0x50 [0087.681] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\5QUm8R\\WAwfTxwVF7xfXscX\\UMTlLE37InoqB6DI.mp3", nBufferLength=0x105, lpBuffer=0x31e23c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\5QUm8R\\WAwfTxwVF7xfXscX\\UMTlLE37InoqB6DI.mp3", lpFilePart=0x0) returned 0x50 [0087.681] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e69c) returned 1 [0087.681] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\5QUm8R\\WAwfTxwVF7xfXscX\\UMTlLE37InoqB6DI.mp3" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\music\\5qum8r\\wawftxwvf7xfxscx\\umtlle37inoqb6di.mp3"), fInfoLevelId=0x0, lpFileInformation=0x31e718 | out: lpFileInformation=0x31e718*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xccdab680, ftCreationTime.dwHighDateTime=0x1d5e195, ftLastAccessTime.dwLowDateTime=0xdd0cc560, ftLastAccessTime.dwHighDateTime=0x1d5dd0e, ftLastWriteTime.dwLowDateTime=0x17b45320, ftLastWriteTime.dwHighDateTime=0x1d6eb7f, nFileSizeHigh=0x0, nFileSizeLow=0xa9d0)) returned 1 [0087.681] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e698) returned 1 [0087.681] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\5QUm8R\\WAwfTxwVF7xfXscX\\UMTlLE37InoqB6DI.mp3" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\music\\5qum8r\\wawftxwvf7xfxscx\\umtlle37inoqb6di.mp3"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\5QUm8R\\WAwfTxwVF7xfXscX\\UMTlLE37InoqB6DI.mp3" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\music\\5qum8r\\wawftxwvf7xfxscx\\umtlle37inoqb6di.mp3")) returned 1 [0087.681] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e744) returned 1 [0087.681] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\5QUm8R\\ypQAwj_1Xn8LoFy0UjN", nBufferLength=0x105, lpBuffer=0x31e24c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\5QUm8R\\ypQAwj_1Xn8LoFy0UjN", lpFilePart=0x0) returned 0x3e [0087.681] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\5QUm8R\\ypQAwj_1Xn8LoFy0UjN\\", nBufferLength=0x105, lpBuffer=0x31e220, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\5QUm8R\\ypQAwj_1Xn8LoFy0UjN\\", lpFilePart=0x0) returned 0x3f [0087.681] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\5QUm8R\\ypQAwj_1Xn8LoFy0UjN\\*", lpFindFileData=0x31e46c | out: lpFindFileData=0x31e46c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xff3b3af0, ftCreationTime.dwHighDateTime=0x1d5e71c, ftLastAccessTime.dwLowDateTime=0xbb0bf200, ftLastAccessTime.dwHighDateTime=0x1d5e7a5, ftLastWriteTime.dwLowDateTime=0xbb0bf200, ftLastWriteTime.dwHighDateTime=0x1d5e7a5, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x381fc0 [0087.682] FindNextFileW (in: hFindFile=0x381fc0, lpFindFileData=0x31e47c | out: lpFindFileData=0x31e47c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xff3b3af0, ftCreationTime.dwHighDateTime=0x1d5e71c, ftLastAccessTime.dwLowDateTime=0xbb0bf200, ftLastAccessTime.dwHighDateTime=0x1d5e7a5, ftLastWriteTime.dwLowDateTime=0xbb0bf200, ftLastWriteTime.dwHighDateTime=0x1d5e7a5, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0087.682] FindNextFileW (in: hFindFile=0x381fc0, lpFindFileData=0x31e47c | out: lpFindFileData=0x31e47c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x35a5b870, ftCreationTime.dwHighDateTime=0x1d5e2ec, ftLastAccessTime.dwLowDateTime=0xf50c94b0, ftLastAccessTime.dwHighDateTime=0x1d5e41b, ftLastWriteTime.dwLowDateTime=0xf50c94b0, ftLastWriteTime.dwHighDateTime=0x1d5e41b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="405ySziuaxMlV m5JO", cAlternateFileName="405YSZ~1")) returned 1 [0087.682] FindNextFileW (in: hFindFile=0x381fc0, lpFindFileData=0x31e47c | out: lpFindFileData=0x31e47c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf42f8990, ftCreationTime.dwHighDateTime=0x1d5e307, ftLastAccessTime.dwLowDateTime=0x5662e440, ftLastAccessTime.dwHighDateTime=0x1d5dd63, ftLastWriteTime.dwLowDateTime=0x5662e440, ftLastWriteTime.dwHighDateTime=0x1d5dd63, nFileSizeHigh=0x0, nFileSizeLow=0xf59c, dwReserved0=0x0, dwReserved1=0x0, cFileName="aVE0z.wav", cAlternateFileName="")) returned 1 [0087.682] FindNextFileW (in: hFindFile=0x381fc0, lpFindFileData=0x31e47c | out: lpFindFileData=0x31e47c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x97d2550, ftCreationTime.dwHighDateTime=0x1d5d7fa, ftLastAccessTime.dwLowDateTime=0xa5f62030, ftLastAccessTime.dwHighDateTime=0x1d5e3ee, ftLastWriteTime.dwLowDateTime=0xa5f62030, ftLastWriteTime.dwHighDateTime=0x1d5e3ee, nFileSizeHigh=0x0, nFileSizeLow=0x13c1a, dwReserved0=0x0, dwReserved1=0x0, cFileName="DbBPhnI2aFBZMIH.wav", cAlternateFileName="DBBPHN~1.WAV")) returned 1 [0087.682] FindNextFileW (in: hFindFile=0x381fc0, lpFindFileData=0x31e47c | out: lpFindFileData=0x31e47c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xce1e1770, ftCreationTime.dwHighDateTime=0x1d5d88b, ftLastAccessTime.dwLowDateTime=0x8aeac4a0, ftLastAccessTime.dwHighDateTime=0x1d5e0bd, ftLastWriteTime.dwLowDateTime=0x8aeac4a0, ftLastWriteTime.dwHighDateTime=0x1d5e0bd, nFileSizeHigh=0x0, nFileSizeLow=0xb98, dwReserved0=0x0, dwReserved1=0x0, cFileName="j85vGxwv.m4a", cAlternateFileName="")) returned 1 [0087.682] FindNextFileW (in: hFindFile=0x381fc0, lpFindFileData=0x31e47c | out: lpFindFileData=0x31e47c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x88e55980, ftCreationTime.dwHighDateTime=0x1d5e2f3, ftLastAccessTime.dwLowDateTime=0x5ebaf3f0, ftLastAccessTime.dwHighDateTime=0x1d5e310, ftLastWriteTime.dwLowDateTime=0x5ebaf3f0, ftLastWriteTime.dwHighDateTime=0x1d5e310, nFileSizeHigh=0x0, nFileSizeLow=0x1451b, dwReserved0=0x0, dwReserved1=0x0, cFileName="sYwQHdC.mp3", cAlternateFileName="")) returned 1 [0087.682] FindNextFileW (in: hFindFile=0x381fc0, lpFindFileData=0x31e47c | out: lpFindFileData=0x31e47c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3d3ab860, ftCreationTime.dwHighDateTime=0x1d5dde7, ftLastAccessTime.dwLowDateTime=0xabbaaec0, ftLastAccessTime.dwHighDateTime=0x1d5d8bb, ftLastWriteTime.dwLowDateTime=0xabbaaec0, ftLastWriteTime.dwHighDateTime=0x1d5d8bb, nFileSizeHigh=0x0, nFileSizeLow=0x9952, dwReserved0=0x0, dwReserved1=0x0, cFileName="W_f1m7J4h3C3NsPy_e.mp3", cAlternateFileName="W_F1M7~1.MP3")) returned 1 [0087.682] FindNextFileW (in: hFindFile=0x381fc0, lpFindFileData=0x31e47c | out: lpFindFileData=0x31e47c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xadb3a130, ftCreationTime.dwHighDateTime=0x1d5d80e, ftLastAccessTime.dwLowDateTime=0x58df5790, ftLastAccessTime.dwHighDateTime=0x1d5e456, ftLastWriteTime.dwLowDateTime=0x58df5790, ftLastWriteTime.dwHighDateTime=0x1d5e456, nFileSizeHigh=0x0, nFileSizeLow=0x1610, dwReserved0=0x0, dwReserved1=0x0, cFileName="zYNpE5.wav", cAlternateFileName="")) returned 1 [0087.682] FindNextFileW (in: hFindFile=0x381fc0, lpFindFileData=0x31e47c | out: lpFindFileData=0x31e47c*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0087.683] FindClose (in: hFindFile=0x381fc0 | out: hFindFile=0x381fc0) returned 1 [0087.683] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e704) returned 1 [0087.683] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e710) returned 1 [0087.683] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e744) returned 1 [0087.683] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\5QUm8R\\ypQAwj_1Xn8LoFy0UjN", nBufferLength=0x105, lpBuffer=0x31e24c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\5QUm8R\\ypQAwj_1Xn8LoFy0UjN", lpFilePart=0x0) returned 0x3e [0087.683] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\5QUm8R\\ypQAwj_1Xn8LoFy0UjN\\", nBufferLength=0x105, lpBuffer=0x31e220, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\5QUm8R\\ypQAwj_1Xn8LoFy0UjN\\", lpFilePart=0x0) returned 0x3f [0087.683] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\5QUm8R\\ypQAwj_1Xn8LoFy0UjN\\*", lpFindFileData=0x31e46c | out: lpFindFileData=0x31e46c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xff3b3af0, ftCreationTime.dwHighDateTime=0x1d5e71c, ftLastAccessTime.dwLowDateTime=0xbb0bf200, ftLastAccessTime.dwHighDateTime=0x1d5e7a5, ftLastWriteTime.dwLowDateTime=0xbb0bf200, ftLastWriteTime.dwHighDateTime=0x1d5e7a5, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x381fc0 [0087.683] FindNextFileW (in: hFindFile=0x381fc0, lpFindFileData=0x31e47c | out: lpFindFileData=0x31e47c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xff3b3af0, ftCreationTime.dwHighDateTime=0x1d5e71c, ftLastAccessTime.dwLowDateTime=0xbb0bf200, ftLastAccessTime.dwHighDateTime=0x1d5e7a5, ftLastWriteTime.dwLowDateTime=0xbb0bf200, ftLastWriteTime.dwHighDateTime=0x1d5e7a5, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0087.683] FindNextFileW (in: hFindFile=0x381fc0, lpFindFileData=0x31e47c | out: lpFindFileData=0x31e47c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x35a5b870, ftCreationTime.dwHighDateTime=0x1d5e2ec, ftLastAccessTime.dwLowDateTime=0xf50c94b0, ftLastAccessTime.dwHighDateTime=0x1d5e41b, ftLastWriteTime.dwLowDateTime=0xf50c94b0, ftLastWriteTime.dwHighDateTime=0x1d5e41b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="405ySziuaxMlV m5JO", cAlternateFileName="405YSZ~1")) returned 1 [0087.683] FindNextFileW (in: hFindFile=0x381fc0, lpFindFileData=0x31e47c | out: lpFindFileData=0x31e47c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf42f8990, ftCreationTime.dwHighDateTime=0x1d5e307, ftLastAccessTime.dwLowDateTime=0x5662e440, ftLastAccessTime.dwHighDateTime=0x1d5dd63, ftLastWriteTime.dwLowDateTime=0x5662e440, ftLastWriteTime.dwHighDateTime=0x1d5dd63, nFileSizeHigh=0x0, nFileSizeLow=0xf59c, dwReserved0=0x0, dwReserved1=0x0, cFileName="aVE0z.wav", cAlternateFileName="")) returned 1 [0087.683] FindNextFileW (in: hFindFile=0x381fc0, lpFindFileData=0x31e47c | out: lpFindFileData=0x31e47c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x97d2550, ftCreationTime.dwHighDateTime=0x1d5d7fa, ftLastAccessTime.dwLowDateTime=0xa5f62030, ftLastAccessTime.dwHighDateTime=0x1d5e3ee, ftLastWriteTime.dwLowDateTime=0xa5f62030, ftLastWriteTime.dwHighDateTime=0x1d5e3ee, nFileSizeHigh=0x0, nFileSizeLow=0x13c1a, dwReserved0=0x0, dwReserved1=0x0, cFileName="DbBPhnI2aFBZMIH.wav", cAlternateFileName="DBBPHN~1.WAV")) returned 1 [0087.683] FindNextFileW (in: hFindFile=0x381fc0, lpFindFileData=0x31e47c | out: lpFindFileData=0x31e47c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xce1e1770, ftCreationTime.dwHighDateTime=0x1d5d88b, ftLastAccessTime.dwLowDateTime=0x8aeac4a0, ftLastAccessTime.dwHighDateTime=0x1d5e0bd, ftLastWriteTime.dwLowDateTime=0x8aeac4a0, ftLastWriteTime.dwHighDateTime=0x1d5e0bd, nFileSizeHigh=0x0, nFileSizeLow=0xb98, dwReserved0=0x0, dwReserved1=0x0, cFileName="j85vGxwv.m4a", cAlternateFileName="")) returned 1 [0087.684] FindNextFileW (in: hFindFile=0x381fc0, lpFindFileData=0x31e47c | out: lpFindFileData=0x31e47c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x88e55980, ftCreationTime.dwHighDateTime=0x1d5e2f3, ftLastAccessTime.dwLowDateTime=0x5ebaf3f0, ftLastAccessTime.dwHighDateTime=0x1d5e310, ftLastWriteTime.dwLowDateTime=0x5ebaf3f0, ftLastWriteTime.dwHighDateTime=0x1d5e310, nFileSizeHigh=0x0, nFileSizeLow=0x1451b, dwReserved0=0x0, dwReserved1=0x0, cFileName="sYwQHdC.mp3", cAlternateFileName="")) returned 1 [0087.684] FindNextFileW (in: hFindFile=0x381fc0, lpFindFileData=0x31e47c | out: lpFindFileData=0x31e47c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3d3ab860, ftCreationTime.dwHighDateTime=0x1d5dde7, ftLastAccessTime.dwLowDateTime=0xabbaaec0, ftLastAccessTime.dwHighDateTime=0x1d5d8bb, ftLastWriteTime.dwLowDateTime=0xabbaaec0, ftLastWriteTime.dwHighDateTime=0x1d5d8bb, nFileSizeHigh=0x0, nFileSizeLow=0x9952, dwReserved0=0x0, dwReserved1=0x0, cFileName="W_f1m7J4h3C3NsPy_e.mp3", cAlternateFileName="W_F1M7~1.MP3")) returned 1 [0087.684] FindNextFileW (in: hFindFile=0x381fc0, lpFindFileData=0x31e47c | out: lpFindFileData=0x31e47c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xadb3a130, ftCreationTime.dwHighDateTime=0x1d5d80e, ftLastAccessTime.dwLowDateTime=0x58df5790, ftLastAccessTime.dwHighDateTime=0x1d5e456, ftLastWriteTime.dwLowDateTime=0x58df5790, ftLastWriteTime.dwHighDateTime=0x1d5e456, nFileSizeHigh=0x0, nFileSizeLow=0x1610, dwReserved0=0x0, dwReserved1=0x0, cFileName="zYNpE5.wav", cAlternateFileName="")) returned 1 [0087.684] FindNextFileW (in: hFindFile=0x381fc0, lpFindFileData=0x31e47c | out: lpFindFileData=0x31e47c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xadb3a130, ftCreationTime.dwHighDateTime=0x1d5d80e, ftLastAccessTime.dwLowDateTime=0x58df5790, ftLastAccessTime.dwHighDateTime=0x1d5e456, ftLastWriteTime.dwLowDateTime=0x58df5790, ftLastWriteTime.dwHighDateTime=0x1d5e456, nFileSizeHigh=0x0, nFileSizeLow=0x1610, dwReserved0=0x0, dwReserved1=0x0, cFileName="zYNpE5.wav", cAlternateFileName="")) returned 0 [0087.684] FindClose (in: hFindFile=0x381fc0 | out: hFindFile=0x381fc0) returned 1 [0087.684] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e704) returned 1 [0087.684] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e710) returned 1 [0087.684] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\5QUm8R\\ypQAwj_1Xn8LoFy0UjN\\aVE0z.wav", nBufferLength=0x105, lpBuffer=0x31e11c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\5QUm8R\\ypQAwj_1Xn8LoFy0UjN\\aVE0z.wav", lpFilePart=0x0) returned 0x48 [0087.684] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e610) returned 1 [0087.684] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\5QUm8R\\ypQAwj_1Xn8LoFy0UjN\\aVE0z.wav" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\music\\5qum8r\\ypqawj_1xn8lofy0ujn\\ave0z.wav"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x178 [0087.684] GetFileType (hFile=0x178) returned 0x1 [0087.684] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e60c) returned 1 [0087.684] GetFileType (hFile=0x178) returned 0x1 [0087.684] GetFileSize (in: hFile=0x178, lpFileSizeHigh=0x31e718 | out: lpFileSizeHigh=0x31e718*=0x0) returned 0xf59c [0087.685] ReadFile (in: hFile=0x178, lpBuffer=0x277c2e8, nNumberOfBytesToRead=0xf59c, lpNumberOfBytesRead=0x31e6c4, lpOverlapped=0x0 | out: lpBuffer=0x277c2e8*, lpNumberOfBytesRead=0x31e6c4*=0xf59c, lpOverlapped=0x0) returned 1 [0087.700] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\5QUm8R\\ypQAwj_1Xn8LoFy0UjN\\aVE0z.wav", nBufferLength=0x105, lpBuffer=0x31e108, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\5QUm8R\\ypQAwj_1Xn8LoFy0UjN\\aVE0z.wav", lpFilePart=0x0) returned 0x48 [0087.700] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e5fc) returned 1 [0087.700] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\5QUm8R\\ypQAwj_1Xn8LoFy0UjN\\aVE0z.wav" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\music\\5qum8r\\ypqawj_1xn8lofy0ujn\\ave0z.wav"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x178 [0087.701] GetFileType (hFile=0x178) returned 0x1 [0087.701] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e5f8) returned 1 [0087.701] GetFileType (hFile=0x178) returned 0x1 [0087.701] WriteFile (in: hFile=0x178, lpBuffer=0x27f71c0*, nNumberOfBytesToWrite=0xf5a0, lpNumberOfBytesWritten=0x31e6b8, lpOverlapped=0x0 | out: lpBuffer=0x27f71c0*, lpNumberOfBytesWritten=0x31e6b8*=0xf5a0, lpOverlapped=0x0) returned 1 [0087.705] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\5QUm8R\\ypQAwj_1Xn8LoFy0UjN\\aVE0z.wav", nBufferLength=0x105, lpBuffer=0x31e23c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\5QUm8R\\ypQAwj_1Xn8LoFy0UjN\\aVE0z.wav", lpFilePart=0x0) returned 0x48 [0087.705] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\5QUm8R\\ypQAwj_1Xn8LoFy0UjN\\aVE0z.wav", nBufferLength=0x105, lpBuffer=0x31e23c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\5QUm8R\\ypQAwj_1Xn8LoFy0UjN\\aVE0z.wav", lpFilePart=0x0) returned 0x48 [0087.705] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e69c) returned 1 [0087.705] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\5QUm8R\\ypQAwj_1Xn8LoFy0UjN\\aVE0z.wav" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\music\\5qum8r\\ypqawj_1xn8lofy0ujn\\ave0z.wav"), fInfoLevelId=0x0, lpFileInformation=0x31e718 | out: lpFileInformation=0x31e718*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf42f8990, ftCreationTime.dwHighDateTime=0x1d5e307, ftLastAccessTime.dwLowDateTime=0x5662e440, ftLastAccessTime.dwHighDateTime=0x1d5dd63, ftLastWriteTime.dwLowDateTime=0x17b6b480, ftLastWriteTime.dwHighDateTime=0x1d6eb7f, nFileSizeHigh=0x0, nFileSizeLow=0xf5a0)) returned 1 [0087.705] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e698) returned 1 [0087.705] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\5QUm8R\\ypQAwj_1Xn8LoFy0UjN\\aVE0z.wav" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\music\\5qum8r\\ypqawj_1xn8lofy0ujn\\ave0z.wav"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\5QUm8R\\ypQAwj_1Xn8LoFy0UjN\\aVE0z.wav" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\music\\5qum8r\\ypqawj_1xn8lofy0ujn\\ave0z.wav")) returned 1 [0087.705] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\5QUm8R\\ypQAwj_1Xn8LoFy0UjN\\DbBPhnI2aFBZMIH.wav", nBufferLength=0x105, lpBuffer=0x31e11c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\5QUm8R\\ypQAwj_1Xn8LoFy0UjN\\DbBPhnI2aFBZMIH.wav", lpFilePart=0x0) returned 0x52 [0087.705] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e610) returned 1 [0087.705] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\5QUm8R\\ypQAwj_1Xn8LoFy0UjN\\DbBPhnI2aFBZMIH.wav" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\music\\5qum8r\\ypqawj_1xn8lofy0ujn\\dbbphni2afbzmih.wav"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x178 [0087.705] GetFileType (hFile=0x178) returned 0x1 [0087.705] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e60c) returned 1 [0087.706] GetFileType (hFile=0x178) returned 0x1 [0087.706] GetFileSize (in: hFile=0x178, lpFileSizeHigh=0x31e718 | out: lpFileSizeHigh=0x31e718*=0x0) returned 0x13c1a [0087.706] ReadFile (in: hFile=0x178, lpBuffer=0x2806b24, nNumberOfBytesToRead=0x13c1a, lpNumberOfBytesRead=0x31e6c4, lpOverlapped=0x0 | out: lpBuffer=0x2806b24*, lpNumberOfBytesRead=0x31e6c4*=0x13c1a, lpOverlapped=0x0) returned 1 [0087.748] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\5QUm8R\\ypQAwj_1Xn8LoFy0UjN\\DbBPhnI2aFBZMIH.wav", nBufferLength=0x105, lpBuffer=0x31e108, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\5QUm8R\\ypQAwj_1Xn8LoFy0UjN\\DbBPhnI2aFBZMIH.wav", lpFilePart=0x0) returned 0x52 [0087.748] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e5fc) returned 1 [0087.748] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\5QUm8R\\ypQAwj_1Xn8LoFy0UjN\\DbBPhnI2aFBZMIH.wav" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\music\\5qum8r\\ypqawj_1xn8lofy0ujn\\dbbphni2afbzmih.wav"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x178 [0087.749] GetFileType (hFile=0x178) returned 0x1 [0087.749] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e5f8) returned 1 [0087.749] GetFileType (hFile=0x178) returned 0x1 [0087.749] WriteFile (in: hFile=0x178, lpBuffer=0x26b0bac*, nNumberOfBytesToWrite=0x13c20, lpNumberOfBytesWritten=0x31e6b8, lpOverlapped=0x0 | out: lpBuffer=0x26b0bac*, lpNumberOfBytesWritten=0x31e6b8*=0x13c20, lpOverlapped=0x0) returned 1 [0087.752] CloseHandle (hObject=0x178) returned 1 [0087.752] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\5QUm8R\\ypQAwj_1Xn8LoFy0UjN\\DbBPhnI2aFBZMIH.wav", nBufferLength=0x105, lpBuffer=0x31e23c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\5QUm8R\\ypQAwj_1Xn8LoFy0UjN\\DbBPhnI2aFBZMIH.wav", lpFilePart=0x0) returned 0x52 [0087.752] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\5QUm8R\\ypQAwj_1Xn8LoFy0UjN\\DbBPhnI2aFBZMIH.wav", nBufferLength=0x105, lpBuffer=0x31e23c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\5QUm8R\\ypQAwj_1Xn8LoFy0UjN\\DbBPhnI2aFBZMIH.wav", lpFilePart=0x0) returned 0x52 [0087.752] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e69c) returned 1 [0087.752] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\5QUm8R\\ypQAwj_1Xn8LoFy0UjN\\DbBPhnI2aFBZMIH.wav" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\music\\5qum8r\\ypqawj_1xn8lofy0ujn\\dbbphni2afbzmih.wav"), fInfoLevelId=0x0, lpFileInformation=0x31e718 | out: lpFileInformation=0x31e718*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x97d2550, ftCreationTime.dwHighDateTime=0x1d5d7fa, ftLastAccessTime.dwLowDateTime=0xa5f62030, ftLastAccessTime.dwHighDateTime=0x1d5e3ee, ftLastWriteTime.dwLowDateTime=0x17c03a00, ftLastWriteTime.dwHighDateTime=0x1d6eb7f, nFileSizeHigh=0x0, nFileSizeLow=0x13c20)) returned 1 [0087.752] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e698) returned 1 [0087.752] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\5QUm8R\\ypQAwj_1Xn8LoFy0UjN\\DbBPhnI2aFBZMIH.wav" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\music\\5qum8r\\ypqawj_1xn8lofy0ujn\\dbbphni2afbzmih.wav"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\5QUm8R\\ypQAwj_1Xn8LoFy0UjN\\DbBPhnI2aFBZMIH.wav" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\music\\5qum8r\\ypqawj_1xn8lofy0ujn\\dbbphni2afbzmih.wav")) returned 1 [0087.752] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\5QUm8R\\ypQAwj_1Xn8LoFy0UjN\\sYwQHdC.mp3", nBufferLength=0x105, lpBuffer=0x31e11c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\5QUm8R\\ypQAwj_1Xn8LoFy0UjN\\sYwQHdC.mp3", lpFilePart=0x0) returned 0x4a [0087.752] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e610) returned 1 [0087.752] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\5QUm8R\\ypQAwj_1Xn8LoFy0UjN\\sYwQHdC.mp3" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\music\\5qum8r\\ypqawj_1xn8lofy0ujn\\sywqhdc.mp3"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x178 [0087.753] GetFileType (hFile=0x178) returned 0x1 [0087.753] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e60c) returned 1 [0087.753] GetFileType (hFile=0x178) returned 0x1 [0087.753] GetFileSize (in: hFile=0x178, lpFileSizeHigh=0x31e718 | out: lpFileSizeHigh=0x31e718*=0x0) returned 0x1451b [0087.753] ReadFile (in: hFile=0x178, lpBuffer=0x26c4bd8, nNumberOfBytesToRead=0x1451b, lpNumberOfBytesRead=0x31e6c4, lpOverlapped=0x0 | out: lpBuffer=0x26c4bd8*, lpNumberOfBytesRead=0x31e6c4*=0x1451b, lpOverlapped=0x0) returned 1 [0087.754] CloseHandle (hObject=0x178) returned 1 [0087.769] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\5QUm8R\\ypQAwj_1Xn8LoFy0UjN\\sYwQHdC.mp3", nBufferLength=0x105, lpBuffer=0x31e108, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\5QUm8R\\ypQAwj_1Xn8LoFy0UjN\\sYwQHdC.mp3", lpFilePart=0x0) returned 0x4a [0087.769] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e5fc) returned 1 [0087.769] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\5QUm8R\\ypQAwj_1Xn8LoFy0UjN\\sYwQHdC.mp3" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\music\\5qum8r\\ypqawj_1xn8lofy0ujn\\sywqhdc.mp3"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x178 [0087.770] GetFileType (hFile=0x178) returned 0x1 [0087.770] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e5f8) returned 1 [0087.770] GetFileType (hFile=0x178) returned 0x1 [0087.770] WriteFile (in: hFile=0x178, lpBuffer=0x274ea90*, nNumberOfBytesToWrite=0x14520, lpNumberOfBytesWritten=0x31e6b8, lpOverlapped=0x0 | out: lpBuffer=0x274ea90*, lpNumberOfBytesWritten=0x31e6b8*=0x14520, lpOverlapped=0x0) returned 1 [0087.772] CloseHandle (hObject=0x178) returned 1 [0087.772] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\5QUm8R\\ypQAwj_1Xn8LoFy0UjN\\sYwQHdC.mp3", nBufferLength=0x105, lpBuffer=0x31e23c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\5QUm8R\\ypQAwj_1Xn8LoFy0UjN\\sYwQHdC.mp3", lpFilePart=0x0) returned 0x4a [0087.772] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\5QUm8R\\ypQAwj_1Xn8LoFy0UjN\\sYwQHdC.mp3", nBufferLength=0x105, lpBuffer=0x31e23c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\5QUm8R\\ypQAwj_1Xn8LoFy0UjN\\sYwQHdC.mp3", lpFilePart=0x0) returned 0x4a [0087.772] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e69c) returned 1 [0087.772] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\5QUm8R\\ypQAwj_1Xn8LoFy0UjN\\sYwQHdC.mp3" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\music\\5qum8r\\ypqawj_1xn8lofy0ujn\\sywqhdc.mp3"), fInfoLevelId=0x0, lpFileInformation=0x31e718 | out: lpFileInformation=0x31e718*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x88e55980, ftCreationTime.dwHighDateTime=0x1d5e2f3, ftLastAccessTime.dwLowDateTime=0x5ebaf3f0, ftLastAccessTime.dwHighDateTime=0x1d5e310, ftLastWriteTime.dwLowDateTime=0x17c29b60, ftLastWriteTime.dwHighDateTime=0x1d6eb7f, nFileSizeHigh=0x0, nFileSizeLow=0x14520)) returned 1 [0087.773] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e698) returned 1 [0087.773] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\5QUm8R\\ypQAwj_1Xn8LoFy0UjN\\sYwQHdC.mp3" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\music\\5qum8r\\ypqawj_1xn8lofy0ujn\\sywqhdc.mp3"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\5QUm8R\\ypQAwj_1Xn8LoFy0UjN\\sYwQHdC.mp3" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\music\\5qum8r\\ypqawj_1xn8lofy0ujn\\sywqhdc.mp3")) returned 1 [0087.773] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\5QUm8R\\ypQAwj_1Xn8LoFy0UjN\\W_f1m7J4h3C3NsPy_e.mp3", nBufferLength=0x105, lpBuffer=0x31e11c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\5QUm8R\\ypQAwj_1Xn8LoFy0UjN\\W_f1m7J4h3C3NsPy_e.mp3", lpFilePart=0x0) returned 0x55 [0087.773] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e610) returned 1 [0087.773] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\5QUm8R\\ypQAwj_1Xn8LoFy0UjN\\W_f1m7J4h3C3NsPy_e.mp3" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\music\\5qum8r\\ypqawj_1xn8lofy0ujn\\w_f1m7j4h3c3nspy_e.mp3"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x178 [0087.773] GetFileType (hFile=0x178) returned 0x1 [0087.773] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e60c) returned 1 [0087.773] GetFileType (hFile=0x178) returned 0x1 [0087.773] GetFileSize (in: hFile=0x178, lpFileSizeHigh=0x31e718 | out: lpFileSizeHigh=0x31e718*=0x0) returned 0x9952 [0087.773] ReadFile (in: hFile=0x178, lpBuffer=0x2763390, nNumberOfBytesToRead=0x9952, lpNumberOfBytesRead=0x31e6c4, lpOverlapped=0x0 | out: lpBuffer=0x2763390*, lpNumberOfBytesRead=0x31e6c4*=0x9952, lpOverlapped=0x0) returned 1 [0087.774] CloseHandle (hObject=0x178) returned 1 [0087.788] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\5QUm8R\\ypQAwj_1Xn8LoFy0UjN\\W_f1m7J4h3C3NsPy_e.mp3", nBufferLength=0x105, lpBuffer=0x31e108, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\5QUm8R\\ypQAwj_1Xn8LoFy0UjN\\W_f1m7J4h3C3NsPy_e.mp3", lpFilePart=0x0) returned 0x55 [0087.788] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e5fc) returned 1 [0087.788] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\5QUm8R\\ypQAwj_1Xn8LoFy0UjN\\W_f1m7J4h3C3NsPy_e.mp3" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\music\\5qum8r\\ypqawj_1xn8lofy0ujn\\w_f1m7j4h3c3nspy_e.mp3"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x178 [0087.789] GetFileType (hFile=0x178) returned 0x1 [0087.789] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e5f8) returned 1 [0087.789] GetFileType (hFile=0x178) returned 0x1 [0087.789] WriteFile (in: hFile=0x178, lpBuffer=0x27e0058*, nNumberOfBytesToWrite=0x9960, lpNumberOfBytesWritten=0x31e6b8, lpOverlapped=0x0 | out: lpBuffer=0x27e0058*, lpNumberOfBytesWritten=0x31e6b8*=0x9960, lpOverlapped=0x0) returned 1 [0087.791] CloseHandle (hObject=0x178) returned 1 [0087.791] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\5QUm8R\\ypQAwj_1Xn8LoFy0UjN\\W_f1m7J4h3C3NsPy_e.mp3", nBufferLength=0x105, lpBuffer=0x31e23c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\5QUm8R\\ypQAwj_1Xn8LoFy0UjN\\W_f1m7J4h3C3NsPy_e.mp3", lpFilePart=0x0) returned 0x55 [0087.791] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\5QUm8R\\ypQAwj_1Xn8LoFy0UjN\\W_f1m7J4h3C3NsPy_e.mp3", nBufferLength=0x105, lpBuffer=0x31e23c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\5QUm8R\\ypQAwj_1Xn8LoFy0UjN\\W_f1m7J4h3C3NsPy_e.mp3", lpFilePart=0x0) returned 0x55 [0087.791] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e69c) returned 1 [0087.791] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\5QUm8R\\ypQAwj_1Xn8LoFy0UjN\\W_f1m7J4h3C3NsPy_e.mp3" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\music\\5qum8r\\ypqawj_1xn8lofy0ujn\\w_f1m7j4h3c3nspy_e.mp3"), fInfoLevelId=0x0, lpFileInformation=0x31e718 | out: lpFileInformation=0x31e718*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3d3ab860, ftCreationTime.dwHighDateTime=0x1d5dde7, ftLastAccessTime.dwLowDateTime=0xabbaaec0, ftLastAccessTime.dwHighDateTime=0x1d5d8bb, ftLastWriteTime.dwLowDateTime=0x17c4fcc0, ftLastWriteTime.dwHighDateTime=0x1d6eb7f, nFileSizeHigh=0x0, nFileSizeLow=0x9960)) returned 1 [0087.791] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e698) returned 1 [0087.791] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\5QUm8R\\ypQAwj_1Xn8LoFy0UjN\\W_f1m7J4h3C3NsPy_e.mp3" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\music\\5qum8r\\ypqawj_1xn8lofy0ujn\\w_f1m7j4h3c3nspy_e.mp3"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\5QUm8R\\ypQAwj_1Xn8LoFy0UjN\\W_f1m7J4h3C3NsPy_e.mp3" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\music\\5qum8r\\ypqawj_1xn8lofy0ujn\\w_f1m7j4h3c3nspy_e.mp3")) returned 1 [0087.791] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\5QUm8R\\ypQAwj_1Xn8LoFy0UjN\\zYNpE5.wav", nBufferLength=0x105, lpBuffer=0x31e11c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\5QUm8R\\ypQAwj_1Xn8LoFy0UjN\\zYNpE5.wav", lpFilePart=0x0) returned 0x49 [0087.791] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e610) returned 1 [0087.792] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\5QUm8R\\ypQAwj_1Xn8LoFy0UjN\\zYNpE5.wav" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\music\\5qum8r\\ypqawj_1xn8lofy0ujn\\zynpe5.wav"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x178 [0087.792] GetFileType (hFile=0x178) returned 0x1 [0087.792] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e60c) returned 1 [0087.792] GetFileType (hFile=0x178) returned 0x1 [0087.792] GetFileSize (in: hFile=0x178, lpFileSizeHigh=0x31e718 | out: lpFileSizeHigh=0x31e718*=0x0) returned 0x1610 [0087.792] ReadFile (in: hFile=0x178, lpBuffer=0x27e9dbc, nNumberOfBytesToRead=0x1610, lpNumberOfBytesRead=0x31e6c4, lpOverlapped=0x0 | out: lpBuffer=0x27e9dbc*, lpNumberOfBytesRead=0x31e6c4*=0x1610, lpOverlapped=0x0) returned 1 [0087.792] CloseHandle (hObject=0x178) returned 1 [0087.807] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\5QUm8R\\ypQAwj_1Xn8LoFy0UjN\\zYNpE5.wav", nBufferLength=0x105, lpBuffer=0x31e108, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\5QUm8R\\ypQAwj_1Xn8LoFy0UjN\\zYNpE5.wav", lpFilePart=0x0) returned 0x49 [0087.807] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e5fc) returned 1 [0087.807] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\5QUm8R\\ypQAwj_1Xn8LoFy0UjN\\zYNpE5.wav" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\music\\5qum8r\\ypqawj_1xn8lofy0ujn\\zynpe5.wav"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x178 [0087.808] GetFileType (hFile=0x178) returned 0x1 [0087.808] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e5f8) returned 1 [0087.808] GetFileType (hFile=0x178) returned 0x1 [0087.808] WriteFile (in: hFile=0x178, lpBuffer=0x283da40*, nNumberOfBytesToWrite=0x1620, lpNumberOfBytesWritten=0x31e6b8, lpOverlapped=0x0 | out: lpBuffer=0x283da40*, lpNumberOfBytesWritten=0x31e6b8*=0x1620, lpOverlapped=0x0) returned 1 [0087.809] CloseHandle (hObject=0x178) returned 1 [0087.809] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\5QUm8R\\ypQAwj_1Xn8LoFy0UjN\\zYNpE5.wav", nBufferLength=0x105, lpBuffer=0x31e23c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\5QUm8R\\ypQAwj_1Xn8LoFy0UjN\\zYNpE5.wav", lpFilePart=0x0) returned 0x49 [0087.809] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\5QUm8R\\ypQAwj_1Xn8LoFy0UjN\\zYNpE5.wav", nBufferLength=0x105, lpBuffer=0x31e23c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\5QUm8R\\ypQAwj_1Xn8LoFy0UjN\\zYNpE5.wav", lpFilePart=0x0) returned 0x49 [0087.809] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e69c) returned 1 [0087.809] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\5QUm8R\\ypQAwj_1Xn8LoFy0UjN\\zYNpE5.wav" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\music\\5qum8r\\ypqawj_1xn8lofy0ujn\\zynpe5.wav"), fInfoLevelId=0x0, lpFileInformation=0x31e718 | out: lpFileInformation=0x31e718*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xadb3a130, ftCreationTime.dwHighDateTime=0x1d5d80e, ftLastAccessTime.dwLowDateTime=0x58df5790, ftLastAccessTime.dwHighDateTime=0x1d5e456, ftLastWriteTime.dwLowDateTime=0x17c75e20, ftLastWriteTime.dwHighDateTime=0x1d6eb7f, nFileSizeHigh=0x0, nFileSizeLow=0x1620)) returned 1 [0087.809] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e698) returned 1 [0087.809] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\5QUm8R\\ypQAwj_1Xn8LoFy0UjN\\zYNpE5.wav" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\music\\5qum8r\\ypqawj_1xn8lofy0ujn\\zynpe5.wav"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\5QUm8R\\ypQAwj_1Xn8LoFy0UjN\\zYNpE5.wav" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\music\\5qum8r\\ypqawj_1xn8lofy0ujn\\zynpe5.wav")) returned 1 [0087.810] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e6cc) returned 1 [0087.810] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\5QUm8R\\ypQAwj_1Xn8LoFy0UjN\\405ySziuaxMlV m5JO", nBufferLength=0x105, lpBuffer=0x31e1d4, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\5QUm8R\\ypQAwj_1Xn8LoFy0UjN\\405ySziuaxMlV m5JO", lpFilePart=0x0) returned 0x51 [0087.810] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\5QUm8R\\ypQAwj_1Xn8LoFy0UjN\\405ySziuaxMlV m5JO\\", nBufferLength=0x105, lpBuffer=0x31e1a8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\5QUm8R\\ypQAwj_1Xn8LoFy0UjN\\405ySziuaxMlV m5JO\\", lpFilePart=0x0) returned 0x52 [0087.810] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\5QUm8R\\ypQAwj_1Xn8LoFy0UjN\\405ySziuaxMlV m5JO\\*", lpFindFileData=0x31e3f4 | out: lpFindFileData=0x31e3f4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x35a5b870, ftCreationTime.dwHighDateTime=0x1d5e2ec, ftLastAccessTime.dwLowDateTime=0xf50c94b0, ftLastAccessTime.dwHighDateTime=0x1d5e41b, ftLastWriteTime.dwLowDateTime=0xf50c94b0, ftLastWriteTime.dwHighDateTime=0x1d5e41b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x381f00 [0087.810] FindNextFileW (in: hFindFile=0x381f00, lpFindFileData=0x31e404 | out: lpFindFileData=0x31e404*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x35a5b870, ftCreationTime.dwHighDateTime=0x1d5e2ec, ftLastAccessTime.dwLowDateTime=0xf50c94b0, ftLastAccessTime.dwHighDateTime=0x1d5e41b, ftLastWriteTime.dwLowDateTime=0xf50c94b0, ftLastWriteTime.dwHighDateTime=0x1d5e41b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0087.810] FindNextFileW (in: hFindFile=0x381f00, lpFindFileData=0x31e404 | out: lpFindFileData=0x31e404*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xde9bd2a0, ftCreationTime.dwHighDateTime=0x1d5dc86, ftLastAccessTime.dwLowDateTime=0x93ef4870, ftLastAccessTime.dwHighDateTime=0x1d5d8aa, ftLastWriteTime.dwLowDateTime=0x93ef4870, ftLastWriteTime.dwHighDateTime=0x1d5d8aa, nFileSizeHigh=0x0, nFileSizeLow=0x15306, dwReserved0=0x0, dwReserved1=0x0, cFileName="88Ps5GB6IumfGDhwdL-8.mp3", cAlternateFileName="88PS5G~1.MP3")) returned 1 [0087.810] FindNextFileW (in: hFindFile=0x381f00, lpFindFileData=0x31e404 | out: lpFindFileData=0x31e404*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xfff01710, ftCreationTime.dwHighDateTime=0x1d5de8c, ftLastAccessTime.dwLowDateTime=0x44a9fff0, ftLastAccessTime.dwHighDateTime=0x1d5d876, ftLastWriteTime.dwLowDateTime=0x44a9fff0, ftLastWriteTime.dwHighDateTime=0x1d5d876, nFileSizeHigh=0x0, nFileSizeLow=0xc1e7, dwReserved0=0x0, dwReserved1=0x0, cFileName="Ey4qjyzwE0gytixDsd.mp3", cAlternateFileName="EY4QJY~1.MP3")) returned 1 [0087.810] FindNextFileW (in: hFindFile=0x381f00, lpFindFileData=0x31e404 | out: lpFindFileData=0x31e404*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x80948520, ftCreationTime.dwHighDateTime=0x1d5e1cd, ftLastAccessTime.dwLowDateTime=0xf5a007d0, ftLastAccessTime.dwHighDateTime=0x1d5d7f6, ftLastWriteTime.dwLowDateTime=0xf5a007d0, ftLastWriteTime.dwHighDateTime=0x1d5d7f6, nFileSizeHigh=0x0, nFileSizeLow=0x12232, dwReserved0=0x0, dwReserved1=0x0, cFileName="LqiFq2NdlL8e-JIAznFc.mp3", cAlternateFileName="LQIFQ2~1.MP3")) returned 1 [0087.810] FindNextFileW (in: hFindFile=0x381f00, lpFindFileData=0x31e404 | out: lpFindFileData=0x31e404*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x10271d10, ftCreationTime.dwHighDateTime=0x1d5dc79, ftLastAccessTime.dwLowDateTime=0xa02a12a0, ftLastAccessTime.dwHighDateTime=0x1d5dfee, ftLastWriteTime.dwLowDateTime=0xa02a12a0, ftLastWriteTime.dwHighDateTime=0x1d5dfee, nFileSizeHigh=0x0, nFileSizeLow=0xb66f, dwReserved0=0x0, dwReserved1=0x0, cFileName="P7xPMlJYc.wav", cAlternateFileName="P7XPML~1.WAV")) returned 1 [0087.811] FindNextFileW (in: hFindFile=0x381f00, lpFindFileData=0x31e404 | out: lpFindFileData=0x31e404*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0087.811] FindClose (in: hFindFile=0x381f00 | out: hFindFile=0x381f00) returned 1 [0087.811] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e68c) returned 1 [0087.811] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e698) returned 1 [0087.811] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e6cc) returned 1 [0087.811] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\5QUm8R\\ypQAwj_1Xn8LoFy0UjN\\405ySziuaxMlV m5JO", nBufferLength=0x105, lpBuffer=0x31e1d4, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\5QUm8R\\ypQAwj_1Xn8LoFy0UjN\\405ySziuaxMlV m5JO", lpFilePart=0x0) returned 0x51 [0087.811] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\5QUm8R\\ypQAwj_1Xn8LoFy0UjN\\405ySziuaxMlV m5JO\\", nBufferLength=0x105, lpBuffer=0x31e1a8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\5QUm8R\\ypQAwj_1Xn8LoFy0UjN\\405ySziuaxMlV m5JO\\", lpFilePart=0x0) returned 0x52 [0087.811] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\5QUm8R\\ypQAwj_1Xn8LoFy0UjN\\405ySziuaxMlV m5JO\\*", lpFindFileData=0x31e3f4 | out: lpFindFileData=0x31e3f4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x35a5b870, ftCreationTime.dwHighDateTime=0x1d5e2ec, ftLastAccessTime.dwLowDateTime=0xf50c94b0, ftLastAccessTime.dwHighDateTime=0x1d5e41b, ftLastWriteTime.dwLowDateTime=0xf50c94b0, ftLastWriteTime.dwHighDateTime=0x1d5e41b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x381f00 [0087.811] FindNextFileW (in: hFindFile=0x381f00, lpFindFileData=0x31e404 | out: lpFindFileData=0x31e404*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x35a5b870, ftCreationTime.dwHighDateTime=0x1d5e2ec, ftLastAccessTime.dwLowDateTime=0xf50c94b0, ftLastAccessTime.dwHighDateTime=0x1d5e41b, ftLastWriteTime.dwLowDateTime=0xf50c94b0, ftLastWriteTime.dwHighDateTime=0x1d5e41b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0087.811] FindNextFileW (in: hFindFile=0x381f00, lpFindFileData=0x31e404 | out: lpFindFileData=0x31e404*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xde9bd2a0, ftCreationTime.dwHighDateTime=0x1d5dc86, ftLastAccessTime.dwLowDateTime=0x93ef4870, ftLastAccessTime.dwHighDateTime=0x1d5d8aa, ftLastWriteTime.dwLowDateTime=0x93ef4870, ftLastWriteTime.dwHighDateTime=0x1d5d8aa, nFileSizeHigh=0x0, nFileSizeLow=0x15306, dwReserved0=0x0, dwReserved1=0x0, cFileName="88Ps5GB6IumfGDhwdL-8.mp3", cAlternateFileName="88PS5G~1.MP3")) returned 1 [0087.811] FindNextFileW (in: hFindFile=0x381f00, lpFindFileData=0x31e404 | out: lpFindFileData=0x31e404*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xfff01710, ftCreationTime.dwHighDateTime=0x1d5de8c, ftLastAccessTime.dwLowDateTime=0x44a9fff0, ftLastAccessTime.dwHighDateTime=0x1d5d876, ftLastWriteTime.dwLowDateTime=0x44a9fff0, ftLastWriteTime.dwHighDateTime=0x1d5d876, nFileSizeHigh=0x0, nFileSizeLow=0xc1e7, dwReserved0=0x0, dwReserved1=0x0, cFileName="Ey4qjyzwE0gytixDsd.mp3", cAlternateFileName="EY4QJY~1.MP3")) returned 1 [0087.812] FindNextFileW (in: hFindFile=0x381f00, lpFindFileData=0x31e404 | out: lpFindFileData=0x31e404*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x80948520, ftCreationTime.dwHighDateTime=0x1d5e1cd, ftLastAccessTime.dwLowDateTime=0xf5a007d0, ftLastAccessTime.dwHighDateTime=0x1d5d7f6, ftLastWriteTime.dwLowDateTime=0xf5a007d0, ftLastWriteTime.dwHighDateTime=0x1d5d7f6, nFileSizeHigh=0x0, nFileSizeLow=0x12232, dwReserved0=0x0, dwReserved1=0x0, cFileName="LqiFq2NdlL8e-JIAznFc.mp3", cAlternateFileName="LQIFQ2~1.MP3")) returned 1 [0087.812] FindNextFileW (in: hFindFile=0x381f00, lpFindFileData=0x31e404 | out: lpFindFileData=0x31e404*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x10271d10, ftCreationTime.dwHighDateTime=0x1d5dc79, ftLastAccessTime.dwLowDateTime=0xa02a12a0, ftLastAccessTime.dwHighDateTime=0x1d5dfee, ftLastWriteTime.dwLowDateTime=0xa02a12a0, ftLastWriteTime.dwHighDateTime=0x1d5dfee, nFileSizeHigh=0x0, nFileSizeLow=0xb66f, dwReserved0=0x0, dwReserved1=0x0, cFileName="P7xPMlJYc.wav", cAlternateFileName="P7XPML~1.WAV")) returned 1 [0087.812] FindNextFileW (in: hFindFile=0x381f00, lpFindFileData=0x31e404 | out: lpFindFileData=0x31e404*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x10271d10, ftCreationTime.dwHighDateTime=0x1d5dc79, ftLastAccessTime.dwLowDateTime=0xa02a12a0, ftLastAccessTime.dwHighDateTime=0x1d5dfee, ftLastWriteTime.dwLowDateTime=0xa02a12a0, ftLastWriteTime.dwHighDateTime=0x1d5dfee, nFileSizeHigh=0x0, nFileSizeLow=0xb66f, dwReserved0=0x0, dwReserved1=0x0, cFileName="P7xPMlJYc.wav", cAlternateFileName="P7XPML~1.WAV")) returned 0 [0087.812] FindClose (in: hFindFile=0x381f00 | out: hFindFile=0x381f00) returned 1 [0087.812] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e68c) returned 1 [0087.812] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e698) returned 1 [0087.812] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\5QUm8R\\ypQAwj_1Xn8LoFy0UjN\\405ySziuaxMlV m5JO\\88Ps5GB6IumfGDhwdL-8.mp3", nBufferLength=0x105, lpBuffer=0x31e0a4, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\5QUm8R\\ypQAwj_1Xn8LoFy0UjN\\405ySziuaxMlV m5JO\\88Ps5GB6IumfGDhwdL-8.mp3", lpFilePart=0x0) returned 0x6a [0087.812] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e598) returned 1 [0087.812] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\5QUm8R\\ypQAwj_1Xn8LoFy0UjN\\405ySziuaxMlV m5JO\\88Ps5GB6IumfGDhwdL-8.mp3" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\music\\5qum8r\\ypqawj_1xn8lofy0ujn\\405ysziuaxmlv m5jo\\88ps5gb6iumfgdhwdl-8.mp3"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x178 [0087.812] GetFileType (hFile=0x178) returned 0x1 [0087.812] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e594) returned 1 [0087.812] GetFileType (hFile=0x178) returned 0x1 [0087.812] GetFileSize (in: hFile=0x178, lpFileSizeHigh=0x31e6a0 | out: lpFileSizeHigh=0x31e6a0*=0x0) returned 0x15306 [0087.813] ReadFile (in: hFile=0x178, lpBuffer=0x37d1a40, nNumberOfBytesToRead=0x15306, lpNumberOfBytesRead=0x31e64c, lpOverlapped=0x0 | out: lpBuffer=0x37d1a40*, lpNumberOfBytesRead=0x31e64c*=0x15306, lpOverlapped=0x0) returned 1 [0087.814] CloseHandle (hObject=0x178) returned 1 [0087.829] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\5QUm8R\\ypQAwj_1Xn8LoFy0UjN\\405ySziuaxMlV m5JO\\88Ps5GB6IumfGDhwdL-8.mp3", nBufferLength=0x105, lpBuffer=0x31e090, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\5QUm8R\\ypQAwj_1Xn8LoFy0UjN\\405ySziuaxMlV m5JO\\88Ps5GB6IumfGDhwdL-8.mp3", lpFilePart=0x0) returned 0x6a [0087.829] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e584) returned 1 [0087.829] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\5QUm8R\\ypQAwj_1Xn8LoFy0UjN\\405ySziuaxMlV m5JO\\88Ps5GB6IumfGDhwdL-8.mp3" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\music\\5qum8r\\ypqawj_1xn8lofy0ujn\\405ysziuaxmlv m5jo\\88ps5gb6iumfgdhwdl-8.mp3"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x178 [0087.830] GetFileType (hFile=0x178) returned 0x1 [0087.830] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e580) returned 1 [0087.830] GetFileType (hFile=0x178) returned 0x1 [0087.830] WriteFile (in: hFile=0x178, lpBuffer=0x383b9c8*, nNumberOfBytesToWrite=0x15310, lpNumberOfBytesWritten=0x31e640, lpOverlapped=0x0 | out: lpBuffer=0x383b9c8*, lpNumberOfBytesWritten=0x31e640*=0x15310, lpOverlapped=0x0) returned 1 [0087.832] CloseHandle (hObject=0x178) returned 1 [0087.832] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\5QUm8R\\ypQAwj_1Xn8LoFy0UjN\\405ySziuaxMlV m5JO\\88Ps5GB6IumfGDhwdL-8.mp3", nBufferLength=0x105, lpBuffer=0x31e1c4, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\5QUm8R\\ypQAwj_1Xn8LoFy0UjN\\405ySziuaxMlV m5JO\\88Ps5GB6IumfGDhwdL-8.mp3", lpFilePart=0x0) returned 0x6a [0087.832] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\5QUm8R\\ypQAwj_1Xn8LoFy0UjN\\405ySziuaxMlV m5JO\\88Ps5GB6IumfGDhwdL-8.mp3", nBufferLength=0x105, lpBuffer=0x31e1c4, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\5QUm8R\\ypQAwj_1Xn8LoFy0UjN\\405ySziuaxMlV m5JO\\88Ps5GB6IumfGDhwdL-8.mp3", lpFilePart=0x0) returned 0x6a [0087.832] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e624) returned 1 [0087.832] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\5QUm8R\\ypQAwj_1Xn8LoFy0UjN\\405ySziuaxMlV m5JO\\88Ps5GB6IumfGDhwdL-8.mp3" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\music\\5qum8r\\ypqawj_1xn8lofy0ujn\\405ysziuaxmlv m5jo\\88ps5gb6iumfgdhwdl-8.mp3"), fInfoLevelId=0x0, lpFileInformation=0x31e6a0 | out: lpFileInformation=0x31e6a0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xde9bd2a0, ftCreationTime.dwHighDateTime=0x1d5dc86, ftLastAccessTime.dwLowDateTime=0x93ef4870, ftLastAccessTime.dwHighDateTime=0x1d5d8aa, ftLastWriteTime.dwLowDateTime=0x17cc20e0, ftLastWriteTime.dwHighDateTime=0x1d6eb7f, nFileSizeHigh=0x0, nFileSizeLow=0x15310)) returned 1 [0087.832] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e620) returned 1 [0087.832] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\5QUm8R\\ypQAwj_1Xn8LoFy0UjN\\405ySziuaxMlV m5JO\\88Ps5GB6IumfGDhwdL-8.mp3" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\music\\5qum8r\\ypqawj_1xn8lofy0ujn\\405ysziuaxmlv m5jo\\88ps5gb6iumfgdhwdl-8.mp3"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\5QUm8R\\ypQAwj_1Xn8LoFy0UjN\\405ySziuaxMlV m5JO\\88Ps5GB6IumfGDhwdL-8.mp3" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\music\\5qum8r\\ypqawj_1xn8lofy0ujn\\405ysziuaxmlv m5jo\\88ps5gb6iumfgdhwdl-8.mp3")) returned 1 [0087.833] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\5QUm8R\\ypQAwj_1Xn8LoFy0UjN\\405ySziuaxMlV m5JO\\Ey4qjyzwE0gytixDsd.mp3", nBufferLength=0x105, lpBuffer=0x31e0a4, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\5QUm8R\\ypQAwj_1Xn8LoFy0UjN\\405ySziuaxMlV m5JO\\Ey4qjyzwE0gytixDsd.mp3", lpFilePart=0x0) returned 0x68 [0087.833] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e598) returned 1 [0087.833] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\5QUm8R\\ypQAwj_1Xn8LoFy0UjN\\405ySziuaxMlV m5JO\\Ey4qjyzwE0gytixDsd.mp3" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\music\\5qum8r\\ypqawj_1xn8lofy0ujn\\405ysziuaxmlv m5jo\\ey4qjyzwe0gytixdsd.mp3"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x178 [0087.833] GetFileType (hFile=0x178) returned 0x1 [0087.833] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e594) returned 1 [0087.833] GetFileType (hFile=0x178) returned 0x1 [0087.833] GetFileSize (in: hFile=0x178, lpFileSizeHigh=0x31e6a0 | out: lpFileSizeHigh=0x31e6a0*=0x0) returned 0xc1e7 [0087.833] ReadFile (in: hFile=0x178, lpBuffer=0x288f210, nNumberOfBytesToRead=0xc1e7, lpNumberOfBytesRead=0x31e64c, lpOverlapped=0x0 | out: lpBuffer=0x288f210*, lpNumberOfBytesRead=0x31e64c*=0xc1e7, lpOverlapped=0x0) returned 1 [0087.834] CloseHandle (hObject=0x178) returned 1 [0087.851] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\5QUm8R\\ypQAwj_1Xn8LoFy0UjN\\405ySziuaxMlV m5JO\\Ey4qjyzwE0gytixDsd.mp3", nBufferLength=0x105, lpBuffer=0x31e090, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\5QUm8R\\ypQAwj_1Xn8LoFy0UjN\\405ySziuaxMlV m5JO\\Ey4qjyzwE0gytixDsd.mp3", lpFilePart=0x0) returned 0x68 [0087.851] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e584) returned 1 [0087.852] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\5QUm8R\\ypQAwj_1Xn8LoFy0UjN\\405ySziuaxMlV m5JO\\Ey4qjyzwE0gytixDsd.mp3" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\music\\5qum8r\\ypqawj_1xn8lofy0ujn\\405ysziuaxmlv m5jo\\ey4qjyzwe0gytixdsd.mp3"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x178 [0087.853] GetFileType (hFile=0x178) returned 0x1 [0087.853] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e580) returned 1 [0087.853] GetFileType (hFile=0x178) returned 0x1 [0087.855] WriteFile (in: hFile=0x178, lpBuffer=0x266341c*, nNumberOfBytesToWrite=0xc1f0, lpNumberOfBytesWritten=0x31e640, lpOverlapped=0x0 | out: lpBuffer=0x266341c*, lpNumberOfBytesWritten=0x31e640*=0xc1f0, lpOverlapped=0x0) returned 1 [0087.856] CloseHandle (hObject=0x178) returned 1 [0087.856] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\5QUm8R\\ypQAwj_1Xn8LoFy0UjN\\405ySziuaxMlV m5JO\\Ey4qjyzwE0gytixDsd.mp3", nBufferLength=0x105, lpBuffer=0x31e1c4, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\5QUm8R\\ypQAwj_1Xn8LoFy0UjN\\405ySziuaxMlV m5JO\\Ey4qjyzwE0gytixDsd.mp3", lpFilePart=0x0) returned 0x68 [0087.856] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\5QUm8R\\ypQAwj_1Xn8LoFy0UjN\\405ySziuaxMlV m5JO\\Ey4qjyzwE0gytixDsd.mp3", nBufferLength=0x105, lpBuffer=0x31e1c4, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\5QUm8R\\ypQAwj_1Xn8LoFy0UjN\\405ySziuaxMlV m5JO\\Ey4qjyzwE0gytixDsd.mp3", lpFilePart=0x0) returned 0x68 [0087.856] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e624) returned 1 [0087.856] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\5QUm8R\\ypQAwj_1Xn8LoFy0UjN\\405ySziuaxMlV m5JO\\Ey4qjyzwE0gytixDsd.mp3" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\music\\5qum8r\\ypqawj_1xn8lofy0ujn\\405ysziuaxmlv m5jo\\ey4qjyzwe0gytixdsd.mp3"), fInfoLevelId=0x0, lpFileInformation=0x31e6a0 | out: lpFileInformation=0x31e6a0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xfff01710, ftCreationTime.dwHighDateTime=0x1d5de8c, ftLastAccessTime.dwLowDateTime=0x44a9fff0, ftLastAccessTime.dwHighDateTime=0x1d5d876, ftLastWriteTime.dwLowDateTime=0x17ce8240, ftLastWriteTime.dwHighDateTime=0x1d6eb7f, nFileSizeHigh=0x0, nFileSizeLow=0xc1f0)) returned 1 [0087.857] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e620) returned 1 [0087.857] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\5QUm8R\\ypQAwj_1Xn8LoFy0UjN\\405ySziuaxMlV m5JO\\Ey4qjyzwE0gytixDsd.mp3" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\music\\5qum8r\\ypqawj_1xn8lofy0ujn\\405ysziuaxmlv m5jo\\ey4qjyzwe0gytixdsd.mp3"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\5QUm8R\\ypQAwj_1Xn8LoFy0UjN\\405ySziuaxMlV m5JO\\Ey4qjyzwE0gytixDsd.mp3" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\music\\5qum8r\\ypqawj_1xn8lofy0ujn\\405ysziuaxmlv m5jo\\ey4qjyzwe0gytixdsd.mp3")) returned 1 [0087.857] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\5QUm8R\\ypQAwj_1Xn8LoFy0UjN\\405ySziuaxMlV m5JO\\LqiFq2NdlL8e-JIAznFc.mp3", nBufferLength=0x105, lpBuffer=0x31e0a4, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\5QUm8R\\ypQAwj_1Xn8LoFy0UjN\\405ySziuaxMlV m5JO\\LqiFq2NdlL8e-JIAznFc.mp3", lpFilePart=0x0) returned 0x6a [0087.857] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e598) returned 1 [0087.857] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\5QUm8R\\ypQAwj_1Xn8LoFy0UjN\\405ySziuaxMlV m5JO\\LqiFq2NdlL8e-JIAznFc.mp3" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\music\\5qum8r\\ypqawj_1xn8lofy0ujn\\405ysziuaxmlv m5jo\\lqifq2ndll8e-jiaznfc.mp3"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x178 [0087.857] GetFileType (hFile=0x178) returned 0x1 [0087.857] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e594) returned 1 [0087.857] GetFileType (hFile=0x178) returned 0x1 [0087.857] GetFileSize (in: hFile=0x178, lpFileSizeHigh=0x31e6a0 | out: lpFileSizeHigh=0x31e6a0*=0x0) returned 0x12232 [0087.857] ReadFile (in: hFile=0x178, lpBuffer=0x266fae8, nNumberOfBytesToRead=0x12232, lpNumberOfBytesRead=0x31e64c, lpOverlapped=0x0 | out: lpBuffer=0x266fae8*, lpNumberOfBytesRead=0x31e64c*=0x12232, lpOverlapped=0x0) returned 1 [0087.858] CloseHandle (hObject=0x178) returned 1 [0087.896] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\5QUm8R\\ypQAwj_1Xn8LoFy0UjN\\405ySziuaxMlV m5JO\\LqiFq2NdlL8e-JIAznFc.mp3", nBufferLength=0x105, lpBuffer=0x31e090, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\5QUm8R\\ypQAwj_1Xn8LoFy0UjN\\405ySziuaxMlV m5JO\\LqiFq2NdlL8e-JIAznFc.mp3", lpFilePart=0x0) returned 0x6a [0087.896] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e584) returned 1 [0087.896] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\5QUm8R\\ypQAwj_1Xn8LoFy0UjN\\405ySziuaxMlV m5JO\\LqiFq2NdlL8e-JIAznFc.mp3" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\music\\5qum8r\\ypqawj_1xn8lofy0ujn\\405ysziuaxmlv m5jo\\lqifq2ndll8e-jiaznfc.mp3"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x178 [0087.898] GetFileType (hFile=0x178) returned 0x1 [0087.898] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e580) returned 1 [0087.898] GetFileType (hFile=0x178) returned 0x1 [0087.898] WriteFile (in: hFile=0x178, lpBuffer=0x26f3100*, nNumberOfBytesToWrite=0x12240, lpNumberOfBytesWritten=0x31e640, lpOverlapped=0x0 | out: lpBuffer=0x26f3100*, lpNumberOfBytesWritten=0x31e640*=0x12240, lpOverlapped=0x0) returned 1 [0087.900] CloseHandle (hObject=0x178) returned 1 [0087.900] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\5QUm8R\\ypQAwj_1Xn8LoFy0UjN\\405ySziuaxMlV m5JO\\LqiFq2NdlL8e-JIAznFc.mp3", nBufferLength=0x105, lpBuffer=0x31e1c4, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\5QUm8R\\ypQAwj_1Xn8LoFy0UjN\\405ySziuaxMlV m5JO\\LqiFq2NdlL8e-JIAznFc.mp3", lpFilePart=0x0) returned 0x6a [0087.900] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\5QUm8R\\ypQAwj_1Xn8LoFy0UjN\\405ySziuaxMlV m5JO\\LqiFq2NdlL8e-JIAznFc.mp3", nBufferLength=0x105, lpBuffer=0x31e1c4, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\5QUm8R\\ypQAwj_1Xn8LoFy0UjN\\405ySziuaxMlV m5JO\\LqiFq2NdlL8e-JIAznFc.mp3", lpFilePart=0x0) returned 0x6a [0087.900] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e624) returned 1 [0087.900] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\5QUm8R\\ypQAwj_1Xn8LoFy0UjN\\405ySziuaxMlV m5JO\\LqiFq2NdlL8e-JIAznFc.mp3" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\music\\5qum8r\\ypqawj_1xn8lofy0ujn\\405ysziuaxmlv m5jo\\lqifq2ndll8e-jiaznfc.mp3"), fInfoLevelId=0x0, lpFileInformation=0x31e6a0 | out: lpFileInformation=0x31e6a0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x80948520, ftCreationTime.dwHighDateTime=0x1d5e1cd, ftLastAccessTime.dwLowDateTime=0xf5a007d0, ftLastAccessTime.dwHighDateTime=0x1d5d7f6, ftLastWriteTime.dwLowDateTime=0x17d5a660, ftLastWriteTime.dwHighDateTime=0x1d6eb7f, nFileSizeHigh=0x0, nFileSizeLow=0x12240)) returned 1 [0087.900] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e620) returned 1 [0087.900] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\5QUm8R\\ypQAwj_1Xn8LoFy0UjN\\405ySziuaxMlV m5JO\\LqiFq2NdlL8e-JIAznFc.mp3" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\music\\5qum8r\\ypqawj_1xn8lofy0ujn\\405ysziuaxmlv m5jo\\lqifq2ndll8e-jiaznfc.mp3"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\5QUm8R\\ypQAwj_1Xn8LoFy0UjN\\405ySziuaxMlV m5JO\\LqiFq2NdlL8e-JIAznFc.mp3" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\music\\5qum8r\\ypqawj_1xn8lofy0ujn\\405ysziuaxmlv m5jo\\lqifq2ndll8e-jiaznfc.mp3")) returned 1 [0087.900] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\5QUm8R\\ypQAwj_1Xn8LoFy0UjN\\405ySziuaxMlV m5JO\\P7xPMlJYc.wav", nBufferLength=0x105, lpBuffer=0x31e0a4, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\5QUm8R\\ypQAwj_1Xn8LoFy0UjN\\405ySziuaxMlV m5JO\\P7xPMlJYc.wav", lpFilePart=0x0) returned 0x5f [0087.900] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e598) returned 1 [0087.900] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\5QUm8R\\ypQAwj_1Xn8LoFy0UjN\\405ySziuaxMlV m5JO\\P7xPMlJYc.wav" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\music\\5qum8r\\ypqawj_1xn8lofy0ujn\\405ysziuaxmlv m5jo\\p7xpmljyc.wav"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x178 [0087.900] GetFileType (hFile=0x178) returned 0x1 [0087.900] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e594) returned 1 [0087.901] GetFileType (hFile=0x178) returned 0x1 [0087.901] GetFileSize (in: hFile=0x178, lpFileSizeHigh=0x31e6a0 | out: lpFileSizeHigh=0x31e6a0*=0x0) returned 0xb66f [0087.901] ReadFile (in: hFile=0x178, lpBuffer=0x27057fc, nNumberOfBytesToRead=0xb66f, lpNumberOfBytesRead=0x31e64c, lpOverlapped=0x0 | out: lpBuffer=0x27057fc*, lpNumberOfBytesRead=0x31e64c*=0xb66f, lpOverlapped=0x0) returned 1 [0087.902] CloseHandle (hObject=0x178) returned 1 [0087.915] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\5QUm8R\\ypQAwj_1Xn8LoFy0UjN\\405ySziuaxMlV m5JO\\P7xPMlJYc.wav", nBufferLength=0x105, lpBuffer=0x31e090, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\5QUm8R\\ypQAwj_1Xn8LoFy0UjN\\405ySziuaxMlV m5JO\\P7xPMlJYc.wav", lpFilePart=0x0) returned 0x5f [0087.915] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e584) returned 1 [0087.915] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\5QUm8R\\ypQAwj_1Xn8LoFy0UjN\\405ySziuaxMlV m5JO\\P7xPMlJYc.wav" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\music\\5qum8r\\ypqawj_1xn8lofy0ujn\\405ysziuaxmlv m5jo\\p7xpmljyc.wav"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x178 [0087.916] GetFileType (hFile=0x178) returned 0x1 [0087.916] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e580) returned 1 [0087.916] GetFileType (hFile=0x178) returned 0x1 [0087.916] WriteFile (in: hFile=0x178, lpBuffer=0x2774948*, nNumberOfBytesToWrite=0xb670, lpNumberOfBytesWritten=0x31e640, lpOverlapped=0x0 | out: lpBuffer=0x2774948*, lpNumberOfBytesWritten=0x31e640*=0xb670, lpOverlapped=0x0) returned 1 [0087.918] CloseHandle (hObject=0x178) returned 1 [0087.918] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\5QUm8R\\ypQAwj_1Xn8LoFy0UjN\\405ySziuaxMlV m5JO\\P7xPMlJYc.wav", nBufferLength=0x105, lpBuffer=0x31e1c4, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\5QUm8R\\ypQAwj_1Xn8LoFy0UjN\\405ySziuaxMlV m5JO\\P7xPMlJYc.wav", lpFilePart=0x0) returned 0x5f [0087.918] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\5QUm8R\\ypQAwj_1Xn8LoFy0UjN\\405ySziuaxMlV m5JO\\P7xPMlJYc.wav", nBufferLength=0x105, lpBuffer=0x31e1c4, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\5QUm8R\\ypQAwj_1Xn8LoFy0UjN\\405ySziuaxMlV m5JO\\P7xPMlJYc.wav", lpFilePart=0x0) returned 0x5f [0087.918] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e624) returned 1 [0087.918] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\5QUm8R\\ypQAwj_1Xn8LoFy0UjN\\405ySziuaxMlV m5JO\\P7xPMlJYc.wav" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\music\\5qum8r\\ypqawj_1xn8lofy0ujn\\405ysziuaxmlv m5jo\\p7xpmljyc.wav"), fInfoLevelId=0x0, lpFileInformation=0x31e6a0 | out: lpFileInformation=0x31e6a0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x10271d10, ftCreationTime.dwHighDateTime=0x1d5dc79, ftLastAccessTime.dwLowDateTime=0xa02a12a0, ftLastAccessTime.dwHighDateTime=0x1d5dfee, ftLastWriteTime.dwLowDateTime=0x17d807c0, ftLastWriteTime.dwHighDateTime=0x1d6eb7f, nFileSizeHigh=0x0, nFileSizeLow=0xb670)) returned 1 [0087.918] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e620) returned 1 [0087.918] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\5QUm8R\\ypQAwj_1Xn8LoFy0UjN\\405ySziuaxMlV m5JO\\P7xPMlJYc.wav" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\music\\5qum8r\\ypqawj_1xn8lofy0ujn\\405ysziuaxmlv m5jo\\p7xpmljyc.wav"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\5QUm8R\\ypQAwj_1Xn8LoFy0UjN\\405ySziuaxMlV m5JO\\P7xPMlJYc.wav" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\music\\5qum8r\\ypqawj_1xn8lofy0ujn\\405ysziuaxmlv m5jo\\p7xpmljyc.wav")) returned 1 [0087.918] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e7bc) returned 1 [0087.918] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\MSpnEVxlBuedaCUP1", nBufferLength=0x105, lpBuffer=0x31e2c4, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\MSpnEVxlBuedaCUP1", lpFilePart=0x0) returned 0x35 [0087.918] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\MSpnEVxlBuedaCUP1\\", nBufferLength=0x105, lpBuffer=0x31e298, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\MSpnEVxlBuedaCUP1\\", lpFilePart=0x0) returned 0x36 [0087.919] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\MSpnEVxlBuedaCUP1\\*", lpFindFileData=0x31e4e4 | out: lpFindFileData=0x31e4e4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8ecd14f0, ftCreationTime.dwHighDateTime=0x1d5e1db, ftLastAccessTime.dwLowDateTime=0x8b95aea0, ftLastAccessTime.dwHighDateTime=0x1d5e091, ftLastWriteTime.dwLowDateTime=0x8b95aea0, ftLastWriteTime.dwHighDateTime=0x1d5e091, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x381f80 [0087.919] FindNextFileW (in: hFindFile=0x381f80, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8ecd14f0, ftCreationTime.dwHighDateTime=0x1d5e1db, ftLastAccessTime.dwLowDateTime=0x8b95aea0, ftLastAccessTime.dwHighDateTime=0x1d5e091, ftLastWriteTime.dwLowDateTime=0x8b95aea0, ftLastWriteTime.dwHighDateTime=0x1d5e091, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0087.919] FindNextFileW (in: hFindFile=0x381f80, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x852099c0, ftCreationTime.dwHighDateTime=0x1d5e1c9, ftLastAccessTime.dwLowDateTime=0x88c13340, ftLastAccessTime.dwHighDateTime=0x1d5de5f, ftLastWriteTime.dwLowDateTime=0x88c13340, ftLastWriteTime.dwHighDateTime=0x1d5de5f, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="HgxX", cAlternateFileName="")) returned 1 [0087.919] FindNextFileW (in: hFindFile=0x381f80, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x14a02eb0, ftCreationTime.dwHighDateTime=0x1d5dba0, ftLastAccessTime.dwLowDateTime=0xd015d910, ftLastAccessTime.dwHighDateTime=0x1d5e2ad, ftLastWriteTime.dwLowDateTime=0xd015d910, ftLastWriteTime.dwHighDateTime=0x1d5e2ad, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="qAXggmD1LKlgDc4Js", cAlternateFileName="QAXGGM~1")) returned 1 [0087.919] FindNextFileW (in: hFindFile=0x381f80, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8fa0ec00, ftCreationTime.dwHighDateTime=0x1d5dd83, ftLastAccessTime.dwLowDateTime=0x69d0cd10, ftLastAccessTime.dwHighDateTime=0x1d5e5e9, ftLastWriteTime.dwLowDateTime=0x69d0cd10, ftLastWriteTime.dwHighDateTime=0x1d5e5e9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="qqLhydztItrIGc3q_E", cAlternateFileName="QQLHYD~1")) returned 1 [0087.919] FindNextFileW (in: hFindFile=0x381f80, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8fa0ec00, ftCreationTime.dwHighDateTime=0x1d5dd83, ftLastAccessTime.dwLowDateTime=0x69d0cd10, ftLastAccessTime.dwHighDateTime=0x1d5e5e9, ftLastWriteTime.dwLowDateTime=0x69d0cd10, ftLastWriteTime.dwHighDateTime=0x1d5e5e9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="qqLhydztItrIGc3q_E", cAlternateFileName="QQLHYD~1")) returned 0 [0087.919] FindClose (in: hFindFile=0x381f80 | out: hFindFile=0x381f80) returned 1 [0087.920] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e77c) returned 1 [0087.920] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e788) returned 1 [0087.920] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e7bc) returned 1 [0087.920] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\MSpnEVxlBuedaCUP1", nBufferLength=0x105, lpBuffer=0x31e2c4, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\MSpnEVxlBuedaCUP1", lpFilePart=0x0) returned 0x35 [0087.920] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\MSpnEVxlBuedaCUP1\\", nBufferLength=0x105, lpBuffer=0x31e298, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\MSpnEVxlBuedaCUP1\\", lpFilePart=0x0) returned 0x36 [0087.920] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\MSpnEVxlBuedaCUP1\\*", lpFindFileData=0x31e4e4 | out: lpFindFileData=0x31e4e4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8ecd14f0, ftCreationTime.dwHighDateTime=0x1d5e1db, ftLastAccessTime.dwLowDateTime=0x8b95aea0, ftLastAccessTime.dwHighDateTime=0x1d5e091, ftLastWriteTime.dwLowDateTime=0x8b95aea0, ftLastWriteTime.dwHighDateTime=0x1d5e091, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x381f80 [0087.920] FindNextFileW (in: hFindFile=0x381f80, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8ecd14f0, ftCreationTime.dwHighDateTime=0x1d5e1db, ftLastAccessTime.dwLowDateTime=0x8b95aea0, ftLastAccessTime.dwHighDateTime=0x1d5e091, ftLastWriteTime.dwLowDateTime=0x8b95aea0, ftLastWriteTime.dwHighDateTime=0x1d5e091, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0087.920] FindNextFileW (in: hFindFile=0x381f80, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x852099c0, ftCreationTime.dwHighDateTime=0x1d5e1c9, ftLastAccessTime.dwLowDateTime=0x88c13340, ftLastAccessTime.dwHighDateTime=0x1d5de5f, ftLastWriteTime.dwLowDateTime=0x88c13340, ftLastWriteTime.dwHighDateTime=0x1d5de5f, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="HgxX", cAlternateFileName="")) returned 1 [0087.920] FindNextFileW (in: hFindFile=0x381f80, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x14a02eb0, ftCreationTime.dwHighDateTime=0x1d5dba0, ftLastAccessTime.dwLowDateTime=0xd015d910, ftLastAccessTime.dwHighDateTime=0x1d5e2ad, ftLastWriteTime.dwLowDateTime=0xd015d910, ftLastWriteTime.dwHighDateTime=0x1d5e2ad, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="qAXggmD1LKlgDc4Js", cAlternateFileName="QAXGGM~1")) returned 1 [0087.920] FindNextFileW (in: hFindFile=0x381f80, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8fa0ec00, ftCreationTime.dwHighDateTime=0x1d5dd83, ftLastAccessTime.dwLowDateTime=0x69d0cd10, ftLastAccessTime.dwHighDateTime=0x1d5e5e9, ftLastWriteTime.dwLowDateTime=0x69d0cd10, ftLastWriteTime.dwHighDateTime=0x1d5e5e9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="qqLhydztItrIGc3q_E", cAlternateFileName="QQLHYD~1")) returned 1 [0087.920] FindNextFileW (in: hFindFile=0x381f80, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0087.921] FindClose (in: hFindFile=0x381f80 | out: hFindFile=0x381f80) returned 1 [0087.921] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e77c) returned 1 [0087.921] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e788) returned 1 [0087.921] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e744) returned 1 [0087.921] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\MSpnEVxlBuedaCUP1\\HgxX", nBufferLength=0x105, lpBuffer=0x31e24c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\MSpnEVxlBuedaCUP1\\HgxX", lpFilePart=0x0) returned 0x3a [0087.921] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\MSpnEVxlBuedaCUP1\\HgxX\\", nBufferLength=0x105, lpBuffer=0x31e220, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\MSpnEVxlBuedaCUP1\\HgxX\\", lpFilePart=0x0) returned 0x3b [0087.921] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\MSpnEVxlBuedaCUP1\\HgxX\\*", lpFindFileData=0x31e46c | out: lpFindFileData=0x31e46c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x852099c0, ftCreationTime.dwHighDateTime=0x1d5e1c9, ftLastAccessTime.dwLowDateTime=0x88c13340, ftLastAccessTime.dwHighDateTime=0x1d5de5f, ftLastWriteTime.dwLowDateTime=0x88c13340, ftLastWriteTime.dwHighDateTime=0x1d5de5f, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x381f80 [0087.921] FindNextFileW (in: hFindFile=0x381f80, lpFindFileData=0x31e47c | out: lpFindFileData=0x31e47c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x852099c0, ftCreationTime.dwHighDateTime=0x1d5e1c9, ftLastAccessTime.dwLowDateTime=0x88c13340, ftLastAccessTime.dwHighDateTime=0x1d5de5f, ftLastWriteTime.dwLowDateTime=0x88c13340, ftLastWriteTime.dwHighDateTime=0x1d5de5f, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0087.921] FindNextFileW (in: hFindFile=0x381f80, lpFindFileData=0x31e47c | out: lpFindFileData=0x31e47c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf3b98dd0, ftCreationTime.dwHighDateTime=0x1d5e64a, ftLastAccessTime.dwLowDateTime=0xa77919a0, ftLastAccessTime.dwHighDateTime=0x1d5e702, ftLastWriteTime.dwLowDateTime=0xa77919a0, ftLastWriteTime.dwHighDateTime=0x1d5e702, nFileSizeHigh=0x0, nFileSizeLow=0x6cd0, dwReserved0=0x0, dwReserved1=0x0, cFileName="xFKVV Nfb3iN4.mp3", cAlternateFileName="XFKVVN~1.MP3")) returned 1 [0087.921] FindNextFileW (in: hFindFile=0x381f80, lpFindFileData=0x31e47c | out: lpFindFileData=0x31e47c*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0087.921] FindClose (in: hFindFile=0x381f80 | out: hFindFile=0x381f80) returned 1 [0087.921] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e704) returned 1 [0087.921] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e710) returned 1 [0087.921] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e744) returned 1 [0087.922] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\MSpnEVxlBuedaCUP1\\HgxX", nBufferLength=0x105, lpBuffer=0x31e24c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\MSpnEVxlBuedaCUP1\\HgxX", lpFilePart=0x0) returned 0x3a [0087.922] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\MSpnEVxlBuedaCUP1\\HgxX\\", nBufferLength=0x105, lpBuffer=0x31e220, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\MSpnEVxlBuedaCUP1\\HgxX\\", lpFilePart=0x0) returned 0x3b [0087.922] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\MSpnEVxlBuedaCUP1\\HgxX\\*", lpFindFileData=0x31e46c | out: lpFindFileData=0x31e46c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x852099c0, ftCreationTime.dwHighDateTime=0x1d5e1c9, ftLastAccessTime.dwLowDateTime=0x88c13340, ftLastAccessTime.dwHighDateTime=0x1d5de5f, ftLastWriteTime.dwLowDateTime=0x88c13340, ftLastWriteTime.dwHighDateTime=0x1d5de5f, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x381f80 [0087.922] FindNextFileW (in: hFindFile=0x381f80, lpFindFileData=0x31e47c | out: lpFindFileData=0x31e47c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x852099c0, ftCreationTime.dwHighDateTime=0x1d5e1c9, ftLastAccessTime.dwLowDateTime=0x88c13340, ftLastAccessTime.dwHighDateTime=0x1d5de5f, ftLastWriteTime.dwLowDateTime=0x88c13340, ftLastWriteTime.dwHighDateTime=0x1d5de5f, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0087.922] FindNextFileW (in: hFindFile=0x381f80, lpFindFileData=0x31e47c | out: lpFindFileData=0x31e47c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf3b98dd0, ftCreationTime.dwHighDateTime=0x1d5e64a, ftLastAccessTime.dwLowDateTime=0xa77919a0, ftLastAccessTime.dwHighDateTime=0x1d5e702, ftLastWriteTime.dwLowDateTime=0xa77919a0, ftLastWriteTime.dwHighDateTime=0x1d5e702, nFileSizeHigh=0x0, nFileSizeLow=0x6cd0, dwReserved0=0x0, dwReserved1=0x0, cFileName="xFKVV Nfb3iN4.mp3", cAlternateFileName="XFKVVN~1.MP3")) returned 1 [0087.922] FindNextFileW (in: hFindFile=0x381f80, lpFindFileData=0x31e47c | out: lpFindFileData=0x31e47c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf3b98dd0, ftCreationTime.dwHighDateTime=0x1d5e64a, ftLastAccessTime.dwLowDateTime=0xa77919a0, ftLastAccessTime.dwHighDateTime=0x1d5e702, ftLastWriteTime.dwLowDateTime=0xa77919a0, ftLastWriteTime.dwHighDateTime=0x1d5e702, nFileSizeHigh=0x0, nFileSizeLow=0x6cd0, dwReserved0=0x0, dwReserved1=0x0, cFileName="xFKVV Nfb3iN4.mp3", cAlternateFileName="XFKVVN~1.MP3")) returned 0 [0087.922] FindClose (in: hFindFile=0x381f80 | out: hFindFile=0x381f80) returned 1 [0087.922] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e704) returned 1 [0087.922] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e710) returned 1 [0087.922] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\MSpnEVxlBuedaCUP1\\HgxX\\xFKVV Nfb3iN4.mp3", nBufferLength=0x105, lpBuffer=0x31e11c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\MSpnEVxlBuedaCUP1\\HgxX\\xFKVV Nfb3iN4.mp3", lpFilePart=0x0) returned 0x4c [0087.923] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e610) returned 1 [0087.923] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\MSpnEVxlBuedaCUP1\\HgxX\\xFKVV Nfb3iN4.mp3" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\music\\mspnevxlbuedacup1\\hgxx\\xfkvv nfb3in4.mp3"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x178 [0087.923] GetFileType (hFile=0x178) returned 0x1 [0087.923] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e60c) returned 1 [0087.923] GetFileType (hFile=0x178) returned 0x1 [0087.923] GetFileSize (in: hFile=0x178, lpFileSizeHigh=0x31e718 | out: lpFileSizeHigh=0x31e718*=0x0) returned 0x6cd0 [0087.923] ReadFile (in: hFile=0x178, lpBuffer=0x27837dc, nNumberOfBytesToRead=0x6cd0, lpNumberOfBytesRead=0x31e6c4, lpOverlapped=0x0 | out: lpBuffer=0x27837dc*, lpNumberOfBytesRead=0x31e6c4*=0x6cd0, lpOverlapped=0x0) returned 1 [0087.924] CloseHandle (hObject=0x178) returned 1 [0087.936] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\MSpnEVxlBuedaCUP1\\HgxX\\xFKVV Nfb3iN4.mp3", nBufferLength=0x105, lpBuffer=0x31e108, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\MSpnEVxlBuedaCUP1\\HgxX\\xFKVV Nfb3iN4.mp3", lpFilePart=0x0) returned 0x4c [0087.937] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e5fc) returned 1 [0087.937] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\MSpnEVxlBuedaCUP1\\HgxX\\xFKVV Nfb3iN4.mp3" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\music\\mspnevxlbuedacup1\\hgxx\\xfkvv nfb3in4.mp3"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x178 [0087.940] GetFileType (hFile=0x178) returned 0x1 [0087.940] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e5f8) returned 1 [0087.940] GetFileType (hFile=0x178) returned 0x1 [0087.940] WriteFile (in: hFile=0x178, lpBuffer=0x27f2620*, nNumberOfBytesToWrite=0x6ce0, lpNumberOfBytesWritten=0x31e6b8, lpOverlapped=0x0 | out: lpBuffer=0x27f2620*, lpNumberOfBytesWritten=0x31e6b8*=0x6ce0, lpOverlapped=0x0) returned 1 [0087.941] CloseHandle (hObject=0x178) returned 1 [0087.942] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\MSpnEVxlBuedaCUP1\\HgxX\\xFKVV Nfb3iN4.mp3", nBufferLength=0x105, lpBuffer=0x31e23c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\MSpnEVxlBuedaCUP1\\HgxX\\xFKVV Nfb3iN4.mp3", lpFilePart=0x0) returned 0x4c [0087.942] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\MSpnEVxlBuedaCUP1\\HgxX\\xFKVV Nfb3iN4.mp3", nBufferLength=0x105, lpBuffer=0x31e23c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\MSpnEVxlBuedaCUP1\\HgxX\\xFKVV Nfb3iN4.mp3", lpFilePart=0x0) returned 0x4c [0087.942] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e69c) returned 1 [0087.942] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\MSpnEVxlBuedaCUP1\\HgxX\\xFKVV Nfb3iN4.mp3" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\music\\mspnevxlbuedacup1\\hgxx\\xfkvv nfb3in4.mp3"), fInfoLevelId=0x0, lpFileInformation=0x31e718 | out: lpFileInformation=0x31e718*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf3b98dd0, ftCreationTime.dwHighDateTime=0x1d5e64a, ftLastAccessTime.dwLowDateTime=0xa77919a0, ftLastAccessTime.dwHighDateTime=0x1d5e702, ftLastWriteTime.dwLowDateTime=0x17dcca80, ftLastWriteTime.dwHighDateTime=0x1d6eb7f, nFileSizeHigh=0x0, nFileSizeLow=0x6ce0)) returned 1 [0087.942] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e698) returned 1 [0087.942] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\MSpnEVxlBuedaCUP1\\HgxX\\xFKVV Nfb3iN4.mp3" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\music\\mspnevxlbuedacup1\\hgxx\\xfkvv nfb3in4.mp3"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\MSpnEVxlBuedaCUP1\\HgxX\\xFKVV Nfb3iN4.mp3" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\music\\mspnevxlbuedacup1\\hgxx\\xfkvv nfb3in4.mp3")) returned 1 [0087.942] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e744) returned 1 [0087.942] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\MSpnEVxlBuedaCUP1\\qAXggmD1LKlgDc4Js", nBufferLength=0x105, lpBuffer=0x31e24c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\MSpnEVxlBuedaCUP1\\qAXggmD1LKlgDc4Js", lpFilePart=0x0) returned 0x47 [0087.942] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\MSpnEVxlBuedaCUP1\\qAXggmD1LKlgDc4Js\\", nBufferLength=0x105, lpBuffer=0x31e220, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\MSpnEVxlBuedaCUP1\\qAXggmD1LKlgDc4Js\\", lpFilePart=0x0) returned 0x48 [0087.942] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\MSpnEVxlBuedaCUP1\\qAXggmD1LKlgDc4Js\\*", lpFindFileData=0x31e46c | out: lpFindFileData=0x31e46c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x14a02eb0, ftCreationTime.dwHighDateTime=0x1d5dba0, ftLastAccessTime.dwLowDateTime=0xd015d910, ftLastAccessTime.dwHighDateTime=0x1d5e2ad, ftLastWriteTime.dwLowDateTime=0xd015d910, ftLastWriteTime.dwHighDateTime=0x1d5e2ad, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x381fc0 [0087.943] FindNextFileW (in: hFindFile=0x381fc0, lpFindFileData=0x31e47c | out: lpFindFileData=0x31e47c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x14a02eb0, ftCreationTime.dwHighDateTime=0x1d5dba0, ftLastAccessTime.dwLowDateTime=0xd015d910, ftLastAccessTime.dwHighDateTime=0x1d5e2ad, ftLastWriteTime.dwLowDateTime=0xd015d910, ftLastWriteTime.dwHighDateTime=0x1d5e2ad, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0087.943] FindNextFileW (in: hFindFile=0x381fc0, lpFindFileData=0x31e47c | out: lpFindFileData=0x31e47c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7839d6e0, ftCreationTime.dwHighDateTime=0x1d5e764, ftLastAccessTime.dwLowDateTime=0x2fccfa10, ftLastAccessTime.dwHighDateTime=0x1d5dd12, ftLastWriteTime.dwLowDateTime=0x2fccfa10, ftLastWriteTime.dwHighDateTime=0x1d5dd12, nFileSizeHigh=0x0, nFileSizeLow=0x127e4, dwReserved0=0x0, dwReserved1=0x0, cFileName="F9o2PK1k.m4a", cAlternateFileName="")) returned 1 [0087.943] FindNextFileW (in: hFindFile=0x381fc0, lpFindFileData=0x31e47c | out: lpFindFileData=0x31e47c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6a64380, ftCreationTime.dwHighDateTime=0x1d5d83a, ftLastAccessTime.dwLowDateTime=0x23186050, ftLastAccessTime.dwHighDateTime=0x1d5dc42, ftLastWriteTime.dwLowDateTime=0x23186050, ftLastWriteTime.dwHighDateTime=0x1d5dc42, nFileSizeHigh=0x0, nFileSizeLow=0x324a, dwReserved0=0x0, dwReserved1=0x0, cFileName="NO5a_3qtgF.mp3", cAlternateFileName="NO5A_3~1.MP3")) returned 1 [0087.943] FindNextFileW (in: hFindFile=0x381fc0, lpFindFileData=0x31e47c | out: lpFindFileData=0x31e47c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xcbd7b0c0, ftCreationTime.dwHighDateTime=0x1d5e5fb, ftLastAccessTime.dwLowDateTime=0xa0fd4a20, ftLastAccessTime.dwHighDateTime=0x1d5e46d, ftLastWriteTime.dwLowDateTime=0xa0fd4a20, ftLastWriteTime.dwHighDateTime=0x1d5e46d, nFileSizeHigh=0x0, nFileSizeLow=0x1097d, dwReserved0=0x0, dwReserved1=0x0, cFileName="wDR9noxj8BATjUKZ.wav", cAlternateFileName="WDR9NO~1.WAV")) returned 1 [0087.943] FindNextFileW (in: hFindFile=0x381fc0, lpFindFileData=0x31e47c | out: lpFindFileData=0x31e47c*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0087.943] FindClose (in: hFindFile=0x381fc0 | out: hFindFile=0x381fc0) returned 1 [0087.943] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e704) returned 1 [0087.943] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e710) returned 1 [0087.943] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e744) returned 1 [0087.943] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\MSpnEVxlBuedaCUP1\\qAXggmD1LKlgDc4Js", nBufferLength=0x105, lpBuffer=0x31e24c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\MSpnEVxlBuedaCUP1\\qAXggmD1LKlgDc4Js", lpFilePart=0x0) returned 0x47 [0087.943] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\MSpnEVxlBuedaCUP1\\qAXggmD1LKlgDc4Js\\", nBufferLength=0x105, lpBuffer=0x31e220, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\MSpnEVxlBuedaCUP1\\qAXggmD1LKlgDc4Js\\", lpFilePart=0x0) returned 0x48 [0087.943] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\MSpnEVxlBuedaCUP1\\qAXggmD1LKlgDc4Js\\*", lpFindFileData=0x31e46c | out: lpFindFileData=0x31e46c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x14a02eb0, ftCreationTime.dwHighDateTime=0x1d5dba0, ftLastAccessTime.dwLowDateTime=0xd015d910, ftLastAccessTime.dwHighDateTime=0x1d5e2ad, ftLastWriteTime.dwLowDateTime=0xd015d910, ftLastWriteTime.dwHighDateTime=0x1d5e2ad, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x381fc0 [0087.944] FindNextFileW (in: hFindFile=0x381fc0, lpFindFileData=0x31e47c | out: lpFindFileData=0x31e47c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x14a02eb0, ftCreationTime.dwHighDateTime=0x1d5dba0, ftLastAccessTime.dwLowDateTime=0xd015d910, ftLastAccessTime.dwHighDateTime=0x1d5e2ad, ftLastWriteTime.dwLowDateTime=0xd015d910, ftLastWriteTime.dwHighDateTime=0x1d5e2ad, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0087.944] FindNextFileW (in: hFindFile=0x381fc0, lpFindFileData=0x31e47c | out: lpFindFileData=0x31e47c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7839d6e0, ftCreationTime.dwHighDateTime=0x1d5e764, ftLastAccessTime.dwLowDateTime=0x2fccfa10, ftLastAccessTime.dwHighDateTime=0x1d5dd12, ftLastWriteTime.dwLowDateTime=0x2fccfa10, ftLastWriteTime.dwHighDateTime=0x1d5dd12, nFileSizeHigh=0x0, nFileSizeLow=0x127e4, dwReserved0=0x0, dwReserved1=0x0, cFileName="F9o2PK1k.m4a", cAlternateFileName="")) returned 1 [0087.944] FindNextFileW (in: hFindFile=0x381fc0, lpFindFileData=0x31e47c | out: lpFindFileData=0x31e47c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6a64380, ftCreationTime.dwHighDateTime=0x1d5d83a, ftLastAccessTime.dwLowDateTime=0x23186050, ftLastAccessTime.dwHighDateTime=0x1d5dc42, ftLastWriteTime.dwLowDateTime=0x23186050, ftLastWriteTime.dwHighDateTime=0x1d5dc42, nFileSizeHigh=0x0, nFileSizeLow=0x324a, dwReserved0=0x0, dwReserved1=0x0, cFileName="NO5a_3qtgF.mp3", cAlternateFileName="NO5A_3~1.MP3")) returned 1 [0087.944] FindNextFileW (in: hFindFile=0x381fc0, lpFindFileData=0x31e47c | out: lpFindFileData=0x31e47c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xcbd7b0c0, ftCreationTime.dwHighDateTime=0x1d5e5fb, ftLastAccessTime.dwLowDateTime=0xa0fd4a20, ftLastAccessTime.dwHighDateTime=0x1d5e46d, ftLastWriteTime.dwLowDateTime=0xa0fd4a20, ftLastWriteTime.dwHighDateTime=0x1d5e46d, nFileSizeHigh=0x0, nFileSizeLow=0x1097d, dwReserved0=0x0, dwReserved1=0x0, cFileName="wDR9noxj8BATjUKZ.wav", cAlternateFileName="WDR9NO~1.WAV")) returned 1 [0087.944] FindNextFileW (in: hFindFile=0x381fc0, lpFindFileData=0x31e47c | out: lpFindFileData=0x31e47c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xcbd7b0c0, ftCreationTime.dwHighDateTime=0x1d5e5fb, ftLastAccessTime.dwLowDateTime=0xa0fd4a20, ftLastAccessTime.dwHighDateTime=0x1d5e46d, ftLastWriteTime.dwLowDateTime=0xa0fd4a20, ftLastWriteTime.dwHighDateTime=0x1d5e46d, nFileSizeHigh=0x0, nFileSizeLow=0x1097d, dwReserved0=0x0, dwReserved1=0x0, cFileName="wDR9noxj8BATjUKZ.wav", cAlternateFileName="WDR9NO~1.WAV")) returned 0 [0087.944] FindClose (in: hFindFile=0x381fc0 | out: hFindFile=0x381fc0) returned 1 [0087.944] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e704) returned 1 [0087.944] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e710) returned 1 [0087.944] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\MSpnEVxlBuedaCUP1\\qAXggmD1LKlgDc4Js\\NO5a_3qtgF.mp3", nBufferLength=0x105, lpBuffer=0x31e11c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\MSpnEVxlBuedaCUP1\\qAXggmD1LKlgDc4Js\\NO5a_3qtgF.mp3", lpFilePart=0x0) returned 0x56 [0087.944] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e610) returned 1 [0087.944] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\MSpnEVxlBuedaCUP1\\qAXggmD1LKlgDc4Js\\NO5a_3qtgF.mp3" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\music\\mspnevxlbuedacup1\\qaxggmd1lklgdc4js\\no5a_3qtgf.mp3"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x178 [0087.945] GetFileType (hFile=0x178) returned 0x1 [0087.945] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e60c) returned 1 [0087.945] GetFileType (hFile=0x178) returned 0x1 [0087.945] GetFileSize (in: hFile=0x178, lpFileSizeHigh=0x31e718 | out: lpFileSizeHigh=0x31e718*=0x0) returned 0x324a [0087.945] ReadFile (in: hFile=0x178, lpBuffer=0x27fb948, nNumberOfBytesToRead=0x324a, lpNumberOfBytesRead=0x31e6c4, lpOverlapped=0x0 | out: lpBuffer=0x27fb948*, lpNumberOfBytesRead=0x31e6c4*=0x324a, lpOverlapped=0x0) returned 1 [0087.959] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\MSpnEVxlBuedaCUP1\\qAXggmD1LKlgDc4Js\\NO5a_3qtgF.mp3", nBufferLength=0x105, lpBuffer=0x31e108, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\MSpnEVxlBuedaCUP1\\qAXggmD1LKlgDc4Js\\NO5a_3qtgF.mp3", lpFilePart=0x0) returned 0x56 [0087.959] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e5fc) returned 1 [0087.959] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\MSpnEVxlBuedaCUP1\\qAXggmD1LKlgDc4Js\\NO5a_3qtgF.mp3" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\music\\mspnevxlbuedacup1\\qaxggmd1lklgdc4js\\no5a_3qtgf.mp3"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x178 [0087.960] GetFileType (hFile=0x178) returned 0x1 [0087.960] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e5f8) returned 1 [0087.960] GetFileType (hFile=0x178) returned 0x1 [0087.960] WriteFile (in: hFile=0x178, lpBuffer=0x28582c0*, nNumberOfBytesToWrite=0x3250, lpNumberOfBytesWritten=0x31e6b8, lpOverlapped=0x0 | out: lpBuffer=0x28582c0*, lpNumberOfBytesWritten=0x31e6b8*=0x3250, lpOverlapped=0x0) returned 1 [0087.961] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\MSpnEVxlBuedaCUP1\\qAXggmD1LKlgDc4Js\\NO5a_3qtgF.mp3", nBufferLength=0x105, lpBuffer=0x31e23c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\MSpnEVxlBuedaCUP1\\qAXggmD1LKlgDc4Js\\NO5a_3qtgF.mp3", lpFilePart=0x0) returned 0x56 [0087.961] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\MSpnEVxlBuedaCUP1\\qAXggmD1LKlgDc4Js\\NO5a_3qtgF.mp3", nBufferLength=0x105, lpBuffer=0x31e23c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\MSpnEVxlBuedaCUP1\\qAXggmD1LKlgDc4Js\\NO5a_3qtgF.mp3", lpFilePart=0x0) returned 0x56 [0087.961] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e69c) returned 1 [0087.961] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\MSpnEVxlBuedaCUP1\\qAXggmD1LKlgDc4Js\\NO5a_3qtgF.mp3" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\music\\mspnevxlbuedacup1\\qaxggmd1lklgdc4js\\no5a_3qtgf.mp3"), fInfoLevelId=0x0, lpFileInformation=0x31e718 | out: lpFileInformation=0x31e718*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6a64380, ftCreationTime.dwHighDateTime=0x1d5d83a, ftLastAccessTime.dwLowDateTime=0x23186050, ftLastAccessTime.dwHighDateTime=0x1d5dc42, ftLastWriteTime.dwLowDateTime=0x17df2be0, ftLastWriteTime.dwHighDateTime=0x1d6eb7f, nFileSizeHigh=0x0, nFileSizeLow=0x3250)) returned 1 [0087.961] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e698) returned 1 [0087.961] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\MSpnEVxlBuedaCUP1\\qAXggmD1LKlgDc4Js\\NO5a_3qtgF.mp3" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\music\\mspnevxlbuedacup1\\qaxggmd1lklgdc4js\\no5a_3qtgf.mp3"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\MSpnEVxlBuedaCUP1\\qAXggmD1LKlgDc4Js\\NO5a_3qtgF.mp3" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\music\\mspnevxlbuedacup1\\qaxggmd1lklgdc4js\\no5a_3qtgf.mp3")) returned 1 [0087.962] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\MSpnEVxlBuedaCUP1\\qAXggmD1LKlgDc4Js\\wDR9noxj8BATjUKZ.wav", nBufferLength=0x105, lpBuffer=0x31e11c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\MSpnEVxlBuedaCUP1\\qAXggmD1LKlgDc4Js\\wDR9noxj8BATjUKZ.wav", lpFilePart=0x0) returned 0x5c [0087.962] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e610) returned 1 [0087.962] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\MSpnEVxlBuedaCUP1\\qAXggmD1LKlgDc4Js\\wDR9noxj8BATjUKZ.wav" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\music\\mspnevxlbuedacup1\\qaxggmd1lklgdc4js\\wdr9noxj8batjukz.wav"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x178 [0087.962] GetFileType (hFile=0x178) returned 0x1 [0087.962] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e60c) returned 1 [0087.962] GetFileType (hFile=0x178) returned 0x1 [0087.962] GetFileSize (in: hFile=0x178, lpFileSizeHigh=0x31e718 | out: lpFileSizeHigh=0x31e718*=0x0) returned 0x1097d [0087.962] ReadFile (in: hFile=0x178, lpBuffer=0x285b94c, nNumberOfBytesToRead=0x1097d, lpNumberOfBytesRead=0x31e6c4, lpOverlapped=0x0 | out: lpBuffer=0x285b94c*, lpNumberOfBytesRead=0x31e6c4*=0x1097d, lpOverlapped=0x0) returned 1 [0088.003] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\MSpnEVxlBuedaCUP1\\qAXggmD1LKlgDc4Js\\wDR9noxj8BATjUKZ.wav", nBufferLength=0x105, lpBuffer=0x31e108, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\MSpnEVxlBuedaCUP1\\qAXggmD1LKlgDc4Js\\wDR9noxj8BATjUKZ.wav", lpFilePart=0x0) returned 0x5c [0088.003] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e5fc) returned 1 [0088.003] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\MSpnEVxlBuedaCUP1\\qAXggmD1LKlgDc4Js\\wDR9noxj8BATjUKZ.wav" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\music\\mspnevxlbuedacup1\\qaxggmd1lklgdc4js\\wdr9noxj8batjukz.wav"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x178 [0088.005] GetFileType (hFile=0x178) returned 0x1 [0088.005] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e5f8) returned 1 [0088.005] GetFileType (hFile=0x178) returned 0x1 [0088.005] WriteFile (in: hFile=0x178, lpBuffer=0x26d3f24*, nNumberOfBytesToWrite=0x10980, lpNumberOfBytesWritten=0x31e6b8, lpOverlapped=0x0 | out: lpBuffer=0x26d3f24*, lpNumberOfBytesWritten=0x31e6b8*=0x10980, lpOverlapped=0x0) returned 1 [0088.006] CloseHandle (hObject=0x178) returned 1 [0088.006] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\MSpnEVxlBuedaCUP1\\qAXggmD1LKlgDc4Js\\wDR9noxj8BATjUKZ.wav", nBufferLength=0x105, lpBuffer=0x31e23c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\MSpnEVxlBuedaCUP1\\qAXggmD1LKlgDc4Js\\wDR9noxj8BATjUKZ.wav", lpFilePart=0x0) returned 0x5c [0088.006] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\MSpnEVxlBuedaCUP1\\qAXggmD1LKlgDc4Js\\wDR9noxj8BATjUKZ.wav", nBufferLength=0x105, lpBuffer=0x31e23c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\MSpnEVxlBuedaCUP1\\qAXggmD1LKlgDc4Js\\wDR9noxj8BATjUKZ.wav", lpFilePart=0x0) returned 0x5c [0088.006] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e69c) returned 1 [0088.007] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\MSpnEVxlBuedaCUP1\\qAXggmD1LKlgDc4Js\\wDR9noxj8BATjUKZ.wav" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\music\\mspnevxlbuedacup1\\qaxggmd1lklgdc4js\\wdr9noxj8batjukz.wav"), fInfoLevelId=0x0, lpFileInformation=0x31e718 | out: lpFileInformation=0x31e718*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xcbd7b0c0, ftCreationTime.dwHighDateTime=0x1d5e5fb, ftLastAccessTime.dwLowDateTime=0xa0fd4a20, ftLastAccessTime.dwHighDateTime=0x1d5e46d, ftLastWriteTime.dwLowDateTime=0x17e65000, ftLastWriteTime.dwHighDateTime=0x1d6eb7f, nFileSizeHigh=0x0, nFileSizeLow=0x10980)) returned 1 [0088.007] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e698) returned 1 [0088.007] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\MSpnEVxlBuedaCUP1\\qAXggmD1LKlgDc4Js\\wDR9noxj8BATjUKZ.wav" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\music\\mspnevxlbuedacup1\\qaxggmd1lklgdc4js\\wdr9noxj8batjukz.wav"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\MSpnEVxlBuedaCUP1\\qAXggmD1LKlgDc4Js\\wDR9noxj8BATjUKZ.wav" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\music\\mspnevxlbuedacup1\\qaxggmd1lklgdc4js\\wdr9noxj8batjukz.wav")) returned 1 [0088.007] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e744) returned 1 [0088.007] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\MSpnEVxlBuedaCUP1\\qqLhydztItrIGc3q_E", nBufferLength=0x105, lpBuffer=0x31e24c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\MSpnEVxlBuedaCUP1\\qqLhydztItrIGc3q_E", lpFilePart=0x0) returned 0x48 [0088.007] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\MSpnEVxlBuedaCUP1\\qqLhydztItrIGc3q_E\\", nBufferLength=0x105, lpBuffer=0x31e220, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\MSpnEVxlBuedaCUP1\\qqLhydztItrIGc3q_E\\", lpFilePart=0x0) returned 0x49 [0088.007] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\MSpnEVxlBuedaCUP1\\qqLhydztItrIGc3q_E\\*", lpFindFileData=0x31e46c | out: lpFindFileData=0x31e46c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8fa0ec00, ftCreationTime.dwHighDateTime=0x1d5dd83, ftLastAccessTime.dwLowDateTime=0x69d0cd10, ftLastAccessTime.dwHighDateTime=0x1d5e5e9, ftLastWriteTime.dwLowDateTime=0x69d0cd10, ftLastWriteTime.dwHighDateTime=0x1d5e5e9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x381e40 [0088.007] FindNextFileW (in: hFindFile=0x381e40, lpFindFileData=0x31e47c | out: lpFindFileData=0x31e47c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8fa0ec00, ftCreationTime.dwHighDateTime=0x1d5dd83, ftLastAccessTime.dwLowDateTime=0x69d0cd10, ftLastAccessTime.dwHighDateTime=0x1d5e5e9, ftLastWriteTime.dwLowDateTime=0x69d0cd10, ftLastWriteTime.dwHighDateTime=0x1d5e5e9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0088.007] FindNextFileW (in: hFindFile=0x381e40, lpFindFileData=0x31e47c | out: lpFindFileData=0x31e47c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5a64cac0, ftCreationTime.dwHighDateTime=0x1d5db71, ftLastAccessTime.dwLowDateTime=0xb88e3040, ftLastAccessTime.dwHighDateTime=0x1d5de6f, ftLastWriteTime.dwLowDateTime=0xb88e3040, ftLastWriteTime.dwHighDateTime=0x1d5de6f, nFileSizeHigh=0x0, nFileSizeLow=0x15505, dwReserved0=0x0, dwReserved1=0x0, cFileName="8VbKTOf.wav", cAlternateFileName="")) returned 1 [0088.008] FindNextFileW (in: hFindFile=0x381e40, lpFindFileData=0x31e47c | out: lpFindFileData=0x31e47c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x77512ed0, ftCreationTime.dwHighDateTime=0x1d5d7b1, ftLastAccessTime.dwLowDateTime=0x5650fb10, ftLastAccessTime.dwHighDateTime=0x1d5def1, ftLastWriteTime.dwLowDateTime=0x5650fb10, ftLastWriteTime.dwHighDateTime=0x1d5def1, nFileSizeHigh=0x0, nFileSizeLow=0x17b6a, dwReserved0=0x0, dwReserved1=0x0, cFileName="hEJbXZluidY8yrqM.mp3", cAlternateFileName="HEJBXZ~1.MP3")) returned 1 [0088.008] FindNextFileW (in: hFindFile=0x381e40, lpFindFileData=0x31e47c | out: lpFindFileData=0x31e47c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4743cfe0, ftCreationTime.dwHighDateTime=0x1d5d982, ftLastAccessTime.dwLowDateTime=0xcc19e6a0, ftLastAccessTime.dwHighDateTime=0x1d5df68, ftLastWriteTime.dwLowDateTime=0xcc19e6a0, ftLastWriteTime.dwHighDateTime=0x1d5df68, nFileSizeHigh=0x0, nFileSizeLow=0x16eae, dwReserved0=0x0, dwReserved1=0x0, cFileName="X7wFZ9Z_DnDH_onTLsq.mp3", cAlternateFileName="X7WFZ9~1.MP3")) returned 1 [0088.008] FindNextFileW (in: hFindFile=0x381e40, lpFindFileData=0x31e47c | out: lpFindFileData=0x31e47c*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0088.008] FindClose (in: hFindFile=0x381e40 | out: hFindFile=0x381e40) returned 1 [0088.008] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e704) returned 1 [0088.008] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e710) returned 1 [0088.008] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e744) returned 1 [0088.008] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\MSpnEVxlBuedaCUP1\\qqLhydztItrIGc3q_E", nBufferLength=0x105, lpBuffer=0x31e24c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\MSpnEVxlBuedaCUP1\\qqLhydztItrIGc3q_E", lpFilePart=0x0) returned 0x48 [0088.008] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\MSpnEVxlBuedaCUP1\\qqLhydztItrIGc3q_E\\", nBufferLength=0x105, lpBuffer=0x31e220, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\MSpnEVxlBuedaCUP1\\qqLhydztItrIGc3q_E\\", lpFilePart=0x0) returned 0x49 [0088.008] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\MSpnEVxlBuedaCUP1\\qqLhydztItrIGc3q_E\\*", lpFindFileData=0x31e46c | out: lpFindFileData=0x31e46c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8fa0ec00, ftCreationTime.dwHighDateTime=0x1d5dd83, ftLastAccessTime.dwLowDateTime=0x69d0cd10, ftLastAccessTime.dwHighDateTime=0x1d5e5e9, ftLastWriteTime.dwLowDateTime=0x69d0cd10, ftLastWriteTime.dwHighDateTime=0x1d5e5e9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x381e40 [0088.008] FindNextFileW (in: hFindFile=0x381e40, lpFindFileData=0x31e47c | out: lpFindFileData=0x31e47c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8fa0ec00, ftCreationTime.dwHighDateTime=0x1d5dd83, ftLastAccessTime.dwLowDateTime=0x69d0cd10, ftLastAccessTime.dwHighDateTime=0x1d5e5e9, ftLastWriteTime.dwLowDateTime=0x69d0cd10, ftLastWriteTime.dwHighDateTime=0x1d5e5e9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0088.008] FindNextFileW (in: hFindFile=0x381e40, lpFindFileData=0x31e47c | out: lpFindFileData=0x31e47c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5a64cac0, ftCreationTime.dwHighDateTime=0x1d5db71, ftLastAccessTime.dwLowDateTime=0xb88e3040, ftLastAccessTime.dwHighDateTime=0x1d5de6f, ftLastWriteTime.dwLowDateTime=0xb88e3040, ftLastWriteTime.dwHighDateTime=0x1d5de6f, nFileSizeHigh=0x0, nFileSizeLow=0x15505, dwReserved0=0x0, dwReserved1=0x0, cFileName="8VbKTOf.wav", cAlternateFileName="")) returned 1 [0088.009] FindNextFileW (in: hFindFile=0x381e40, lpFindFileData=0x31e47c | out: lpFindFileData=0x31e47c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x77512ed0, ftCreationTime.dwHighDateTime=0x1d5d7b1, ftLastAccessTime.dwLowDateTime=0x5650fb10, ftLastAccessTime.dwHighDateTime=0x1d5def1, ftLastWriteTime.dwLowDateTime=0x5650fb10, ftLastWriteTime.dwHighDateTime=0x1d5def1, nFileSizeHigh=0x0, nFileSizeLow=0x17b6a, dwReserved0=0x0, dwReserved1=0x0, cFileName="hEJbXZluidY8yrqM.mp3", cAlternateFileName="HEJBXZ~1.MP3")) returned 1 [0088.009] FindNextFileW (in: hFindFile=0x381e40, lpFindFileData=0x31e47c | out: lpFindFileData=0x31e47c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4743cfe0, ftCreationTime.dwHighDateTime=0x1d5d982, ftLastAccessTime.dwLowDateTime=0xcc19e6a0, ftLastAccessTime.dwHighDateTime=0x1d5df68, ftLastWriteTime.dwLowDateTime=0xcc19e6a0, ftLastWriteTime.dwHighDateTime=0x1d5df68, nFileSizeHigh=0x0, nFileSizeLow=0x16eae, dwReserved0=0x0, dwReserved1=0x0, cFileName="X7wFZ9Z_DnDH_onTLsq.mp3", cAlternateFileName="X7WFZ9~1.MP3")) returned 1 [0088.009] FindNextFileW (in: hFindFile=0x381e40, lpFindFileData=0x31e47c | out: lpFindFileData=0x31e47c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4743cfe0, ftCreationTime.dwHighDateTime=0x1d5d982, ftLastAccessTime.dwLowDateTime=0xcc19e6a0, ftLastAccessTime.dwHighDateTime=0x1d5df68, ftLastWriteTime.dwLowDateTime=0xcc19e6a0, ftLastWriteTime.dwHighDateTime=0x1d5df68, nFileSizeHigh=0x0, nFileSizeLow=0x16eae, dwReserved0=0x0, dwReserved1=0x0, cFileName="X7wFZ9Z_DnDH_onTLsq.mp3", cAlternateFileName="X7WFZ9~1.MP3")) returned 0 [0088.009] FindClose (in: hFindFile=0x381e40 | out: hFindFile=0x381e40) returned 1 [0088.009] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e704) returned 1 [0088.009] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e710) returned 1 [0088.009] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\MSpnEVxlBuedaCUP1\\qqLhydztItrIGc3q_E\\8VbKTOf.wav", nBufferLength=0x105, lpBuffer=0x31e11c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\MSpnEVxlBuedaCUP1\\qqLhydztItrIGc3q_E\\8VbKTOf.wav", lpFilePart=0x0) returned 0x54 [0088.009] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e610) returned 1 [0088.009] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\MSpnEVxlBuedaCUP1\\qqLhydztItrIGc3q_E\\8VbKTOf.wav" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\music\\mspnevxlbuedacup1\\qqlhydztitrigc3q_e\\8vbktof.wav"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x178 [0088.009] GetFileType (hFile=0x178) returned 0x1 [0088.009] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e60c) returned 1 [0088.009] GetFileType (hFile=0x178) returned 0x1 [0088.009] GetFileSize (in: hFile=0x178, lpFileSizeHigh=0x31e718 | out: lpFileSizeHigh=0x31e718*=0x0) returned 0x15505 [0088.010] ReadFile (in: hFile=0x178, lpBuffer=0x39442b0, nNumberOfBytesToRead=0x15505, lpNumberOfBytesRead=0x31e6c4, lpOverlapped=0x0 | out: lpBuffer=0x39442b0*, lpNumberOfBytesRead=0x31e6c4*=0x15505, lpOverlapped=0x0) returned 1 [0088.011] CloseHandle (hObject=0x178) returned 1 [0088.029] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\MSpnEVxlBuedaCUP1\\qqLhydztItrIGc3q_E\\8VbKTOf.wav", nBufferLength=0x105, lpBuffer=0x31e108, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\MSpnEVxlBuedaCUP1\\qqLhydztItrIGc3q_E\\8VbKTOf.wav", lpFilePart=0x0) returned 0x54 [0088.029] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e5fc) returned 1 [0088.029] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\MSpnEVxlBuedaCUP1\\qqLhydztItrIGc3q_E\\8VbKTOf.wav" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\music\\mspnevxlbuedacup1\\qqlhydztitrigc3q_e\\8vbktof.wav"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x178 [0088.030] GetFileType (hFile=0x178) returned 0x1 [0088.030] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e5f8) returned 1 [0088.030] GetFileType (hFile=0x178) returned 0x1 [0088.030] WriteFile (in: hFile=0x178, lpBuffer=0x36593f0*, nNumberOfBytesToWrite=0x15510, lpNumberOfBytesWritten=0x31e6b8, lpOverlapped=0x0 | out: lpBuffer=0x36593f0*, lpNumberOfBytesWritten=0x31e6b8*=0x15510, lpOverlapped=0x0) returned 1 [0088.032] CloseHandle (hObject=0x178) returned 1 [0088.033] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\MSpnEVxlBuedaCUP1\\qqLhydztItrIGc3q_E\\8VbKTOf.wav", nBufferLength=0x105, lpBuffer=0x31e23c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\MSpnEVxlBuedaCUP1\\qqLhydztItrIGc3q_E\\8VbKTOf.wav", lpFilePart=0x0) returned 0x54 [0088.033] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\MSpnEVxlBuedaCUP1\\qqLhydztItrIGc3q_E\\8VbKTOf.wav", nBufferLength=0x105, lpBuffer=0x31e23c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\MSpnEVxlBuedaCUP1\\qqLhydztItrIGc3q_E\\8VbKTOf.wav", lpFilePart=0x0) returned 0x54 [0088.033] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e69c) returned 1 [0088.033] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\MSpnEVxlBuedaCUP1\\qqLhydztItrIGc3q_E\\8VbKTOf.wav" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\music\\mspnevxlbuedacup1\\qqlhydztitrigc3q_e\\8vbktof.wav"), fInfoLevelId=0x0, lpFileInformation=0x31e718 | out: lpFileInformation=0x31e718*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5a64cac0, ftCreationTime.dwHighDateTime=0x1d5db71, ftLastAccessTime.dwLowDateTime=0xb88e3040, ftLastAccessTime.dwHighDateTime=0x1d5de6f, ftLastWriteTime.dwLowDateTime=0x17eb12c0, ftLastWriteTime.dwHighDateTime=0x1d6eb7f, nFileSizeHigh=0x0, nFileSizeLow=0x15510)) returned 1 [0088.033] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e698) returned 1 [0088.033] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\MSpnEVxlBuedaCUP1\\qqLhydztItrIGc3q_E\\8VbKTOf.wav" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\music\\mspnevxlbuedacup1\\qqlhydztitrigc3q_e\\8vbktof.wav"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\MSpnEVxlBuedaCUP1\\qqLhydztItrIGc3q_E\\8VbKTOf.wav" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\music\\mspnevxlbuedacup1\\qqlhydztitrigc3q_e\\8vbktof.wav")) returned 1 [0088.033] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\MSpnEVxlBuedaCUP1\\qqLhydztItrIGc3q_E\\hEJbXZluidY8yrqM.mp3", nBufferLength=0x105, lpBuffer=0x31e11c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\MSpnEVxlBuedaCUP1\\qqLhydztItrIGc3q_E\\hEJbXZluidY8yrqM.mp3", lpFilePart=0x0) returned 0x5d [0088.033] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e610) returned 1 [0088.033] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\MSpnEVxlBuedaCUP1\\qqLhydztItrIGc3q_E\\hEJbXZluidY8yrqM.mp3" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\music\\mspnevxlbuedacup1\\qqlhydztitrigc3q_e\\hejbxzluidy8yrqm.mp3"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x178 [0088.033] GetFileType (hFile=0x178) returned 0x1 [0088.033] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e60c) returned 1 [0088.033] GetFileType (hFile=0x178) returned 0x1 [0088.033] GetFileSize (in: hFile=0x178, lpFileSizeHigh=0x31e718 | out: lpFileSizeHigh=0x31e718*=0x0) returned 0x17b6a [0088.033] ReadFile (in: hFile=0x178, lpBuffer=0x366e920, nNumberOfBytesToRead=0x17b6a, lpNumberOfBytesRead=0x31e6c4, lpOverlapped=0x0 | out: lpBuffer=0x366e920*, lpNumberOfBytesRead=0x31e6c4*=0x17b6a, lpOverlapped=0x0) returned 1 [0088.035] CloseHandle (hObject=0x178) returned 1 [0088.082] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\MSpnEVxlBuedaCUP1\\qqLhydztItrIGc3q_E\\hEJbXZluidY8yrqM.mp3", nBufferLength=0x105, lpBuffer=0x31e108, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\MSpnEVxlBuedaCUP1\\qqLhydztItrIGc3q_E\\hEJbXZluidY8yrqM.mp3", lpFilePart=0x0) returned 0x5d [0088.082] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e5fc) returned 1 [0088.082] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\MSpnEVxlBuedaCUP1\\qqLhydztItrIGc3q_E\\hEJbXZluidY8yrqM.mp3" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\music\\mspnevxlbuedacup1\\qqlhydztitrigc3q_e\\hejbxzluidy8yrqm.mp3"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x178 [0088.083] GetFileType (hFile=0x178) returned 0x1 [0088.083] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e5f8) returned 1 [0088.083] GetFileType (hFile=0x178) returned 0x1 [0088.084] WriteFile (in: hFile=0x178, lpBuffer=0x36e5288*, nNumberOfBytesToWrite=0x17b70, lpNumberOfBytesWritten=0x31e6b8, lpOverlapped=0x0 | out: lpBuffer=0x36e5288*, lpNumberOfBytesWritten=0x31e6b8*=0x17b70, lpOverlapped=0x0) returned 1 [0088.085] CloseHandle (hObject=0x178) returned 1 [0088.086] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\MSpnEVxlBuedaCUP1\\qqLhydztItrIGc3q_E\\hEJbXZluidY8yrqM.mp3", nBufferLength=0x105, lpBuffer=0x31e23c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\MSpnEVxlBuedaCUP1\\qqLhydztItrIGc3q_E\\hEJbXZluidY8yrqM.mp3", lpFilePart=0x0) returned 0x5d [0088.086] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\MSpnEVxlBuedaCUP1\\qqLhydztItrIGc3q_E\\hEJbXZluidY8yrqM.mp3", nBufferLength=0x105, lpBuffer=0x31e23c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\MSpnEVxlBuedaCUP1\\qqLhydztItrIGc3q_E\\hEJbXZluidY8yrqM.mp3", lpFilePart=0x0) returned 0x5d [0088.086] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e69c) returned 1 [0088.086] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\MSpnEVxlBuedaCUP1\\qqLhydztItrIGc3q_E\\hEJbXZluidY8yrqM.mp3" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\music\\mspnevxlbuedacup1\\qqlhydztitrigc3q_e\\hejbxzluidy8yrqm.mp3"), fInfoLevelId=0x0, lpFileInformation=0x31e718 | out: lpFileInformation=0x31e718*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x77512ed0, ftCreationTime.dwHighDateTime=0x1d5d7b1, ftLastAccessTime.dwLowDateTime=0x5650fb10, ftLastAccessTime.dwHighDateTime=0x1d5def1, ftLastWriteTime.dwLowDateTime=0x17f236e0, ftLastWriteTime.dwHighDateTime=0x1d6eb7f, nFileSizeHigh=0x0, nFileSizeLow=0x17b70)) returned 1 [0088.086] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e698) returned 1 [0088.086] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\MSpnEVxlBuedaCUP1\\qqLhydztItrIGc3q_E\\hEJbXZluidY8yrqM.mp3" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\music\\mspnevxlbuedacup1\\qqlhydztitrigc3q_e\\hejbxzluidy8yrqm.mp3"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\MSpnEVxlBuedaCUP1\\qqLhydztItrIGc3q_E\\hEJbXZluidY8yrqM.mp3" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\music\\mspnevxlbuedacup1\\qqlhydztitrigc3q_e\\hejbxzluidy8yrqm.mp3")) returned 1 [0088.086] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\MSpnEVxlBuedaCUP1\\qqLhydztItrIGc3q_E\\X7wFZ9Z_DnDH_onTLsq.mp3", nBufferLength=0x105, lpBuffer=0x31e11c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\MSpnEVxlBuedaCUP1\\qqLhydztItrIGc3q_E\\X7wFZ9Z_DnDH_onTLsq.mp3", lpFilePart=0x0) returned 0x60 [0088.086] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e610) returned 1 [0088.086] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\MSpnEVxlBuedaCUP1\\qqLhydztItrIGc3q_E\\X7wFZ9Z_DnDH_onTLsq.mp3" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\music\\mspnevxlbuedacup1\\qqlhydztitrigc3q_e\\x7wfz9z_dndh_ontlsq.mp3"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x178 [0088.086] GetFileType (hFile=0x178) returned 0x1 [0088.086] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e60c) returned 1 [0088.086] GetFileType (hFile=0x178) returned 0x1 [0088.086] GetFileSize (in: hFile=0x178, lpFileSizeHigh=0x31e718 | out: lpFileSizeHigh=0x31e718*=0x0) returned 0x16eae [0088.087] ReadFile (in: hFile=0x178, lpBuffer=0x36fce18, nNumberOfBytesToRead=0x16eae, lpNumberOfBytesRead=0x31e6c4, lpOverlapped=0x0 | out: lpBuffer=0x36fce18*, lpNumberOfBytesRead=0x31e6c4*=0x16eae, lpOverlapped=0x0) returned 1 [0088.088] CloseHandle (hObject=0x178) returned 1 [0088.103] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\MSpnEVxlBuedaCUP1\\qqLhydztItrIGc3q_E\\X7wFZ9Z_DnDH_onTLsq.mp3", nBufferLength=0x105, lpBuffer=0x31e108, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\MSpnEVxlBuedaCUP1\\qqLhydztItrIGc3q_E\\X7wFZ9Z_DnDH_onTLsq.mp3", lpFilePart=0x0) returned 0x60 [0088.103] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e5fc) returned 1 [0088.103] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\MSpnEVxlBuedaCUP1\\qqLhydztItrIGc3q_E\\X7wFZ9Z_DnDH_onTLsq.mp3" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\music\\mspnevxlbuedacup1\\qqlhydztitrigc3q_e\\x7wfz9z_dndh_ontlsq.mp3"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x178 [0088.104] GetFileType (hFile=0x178) returned 0x1 [0088.104] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e5f8) returned 1 [0088.104] GetFileType (hFile=0x178) returned 0x1 [0088.104] WriteFile (in: hFile=0x178, lpBuffer=0x376f7c8*, nNumberOfBytesToWrite=0x16eb0, lpNumberOfBytesWritten=0x31e6b8, lpOverlapped=0x0 | out: lpBuffer=0x376f7c8*, lpNumberOfBytesWritten=0x31e6b8*=0x16eb0, lpOverlapped=0x0) returned 1 [0088.106] CloseHandle (hObject=0x178) returned 1 [0088.106] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\MSpnEVxlBuedaCUP1\\qqLhydztItrIGc3q_E\\X7wFZ9Z_DnDH_onTLsq.mp3", nBufferLength=0x105, lpBuffer=0x31e23c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\MSpnEVxlBuedaCUP1\\qqLhydztItrIGc3q_E\\X7wFZ9Z_DnDH_onTLsq.mp3", lpFilePart=0x0) returned 0x60 [0088.106] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\MSpnEVxlBuedaCUP1\\qqLhydztItrIGc3q_E\\X7wFZ9Z_DnDH_onTLsq.mp3", nBufferLength=0x105, lpBuffer=0x31e23c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\MSpnEVxlBuedaCUP1\\qqLhydztItrIGc3q_E\\X7wFZ9Z_DnDH_onTLsq.mp3", lpFilePart=0x0) returned 0x60 [0088.106] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e69c) returned 1 [0088.106] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\MSpnEVxlBuedaCUP1\\qqLhydztItrIGc3q_E\\X7wFZ9Z_DnDH_onTLsq.mp3" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\music\\mspnevxlbuedacup1\\qqlhydztitrigc3q_e\\x7wfz9z_dndh_ontlsq.mp3"), fInfoLevelId=0x0, lpFileInformation=0x31e718 | out: lpFileInformation=0x31e718*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4743cfe0, ftCreationTime.dwHighDateTime=0x1d5d982, ftLastAccessTime.dwLowDateTime=0xcc19e6a0, ftLastAccessTime.dwHighDateTime=0x1d5df68, ftLastWriteTime.dwLowDateTime=0x17f49840, ftLastWriteTime.dwHighDateTime=0x1d6eb7f, nFileSizeHigh=0x0, nFileSizeLow=0x16eb0)) returned 1 [0088.106] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e698) returned 1 [0088.106] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\MSpnEVxlBuedaCUP1\\qqLhydztItrIGc3q_E\\X7wFZ9Z_DnDH_onTLsq.mp3" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\music\\mspnevxlbuedacup1\\qqlhydztitrigc3q_e\\x7wfz9z_dndh_ontlsq.mp3"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\MSpnEVxlBuedaCUP1\\qqLhydztItrIGc3q_E\\X7wFZ9Z_DnDH_onTLsq.mp3" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\music\\mspnevxlbuedacup1\\qqlhydztitrigc3q_e\\x7wfz9z_dndh_ontlsq.mp3")) returned 1 [0088.107] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e7bc) returned 1 [0088.107] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\VPUJVJbaoT0AA1L", nBufferLength=0x105, lpBuffer=0x31e2c4, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\VPUJVJbaoT0AA1L", lpFilePart=0x0) returned 0x33 [0088.107] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\VPUJVJbaoT0AA1L\\", nBufferLength=0x105, lpBuffer=0x31e298, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\VPUJVJbaoT0AA1L\\", lpFilePart=0x0) returned 0x34 [0088.107] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\VPUJVJbaoT0AA1L\\*", lpFindFileData=0x31e4e4 | out: lpFindFileData=0x31e4e4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x25297810, ftCreationTime.dwHighDateTime=0x1d5dab8, ftLastAccessTime.dwLowDateTime=0x7fd35fc0, ftLastAccessTime.dwHighDateTime=0x1d5dac1, ftLastWriteTime.dwLowDateTime=0x7fd35fc0, ftLastWriteTime.dwHighDateTime=0x1d5dac1, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x381d00 [0088.107] FindNextFileW (in: hFindFile=0x381d00, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x25297810, ftCreationTime.dwHighDateTime=0x1d5dab8, ftLastAccessTime.dwLowDateTime=0x7fd35fc0, ftLastAccessTime.dwHighDateTime=0x1d5dac1, ftLastWriteTime.dwLowDateTime=0x7fd35fc0, ftLastWriteTime.dwHighDateTime=0x1d5dac1, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0088.107] FindNextFileW (in: hFindFile=0x381d00, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc86009b0, ftCreationTime.dwHighDateTime=0x1d5db88, ftLastAccessTime.dwLowDateTime=0x425b41f0, ftLastAccessTime.dwHighDateTime=0x1d5e3cf, ftLastWriteTime.dwLowDateTime=0x425b41f0, ftLastWriteTime.dwHighDateTime=0x1d5e3cf, nFileSizeHigh=0x0, nFileSizeLow=0xe0bc, dwReserved0=0x0, dwReserved1=0x0, cFileName="71np54D.m4a", cAlternateFileName="")) returned 1 [0088.107] FindNextFileW (in: hFindFile=0x381d00, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x34ef2800, ftCreationTime.dwHighDateTime=0x1d5dd6d, ftLastAccessTime.dwLowDateTime=0x6b558c40, ftLastAccessTime.dwHighDateTime=0x1d5dafc, ftLastWriteTime.dwLowDateTime=0x6b558c40, ftLastWriteTime.dwHighDateTime=0x1d5dafc, nFileSizeHigh=0x0, nFileSizeLow=0x703d, dwReserved0=0x0, dwReserved1=0x0, cFileName="BN0t.mp3", cAlternateFileName="")) returned 1 [0088.107] FindNextFileW (in: hFindFile=0x381d00, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe36654d0, ftCreationTime.dwHighDateTime=0x1d5e12d, ftLastAccessTime.dwLowDateTime=0x965a2390, ftLastAccessTime.dwHighDateTime=0x1d5d8ce, ftLastWriteTime.dwLowDateTime=0x965a2390, ftLastWriteTime.dwHighDateTime=0x1d5d8ce, nFileSizeHigh=0x0, nFileSizeLow=0x1086f, dwReserved0=0x0, dwReserved1=0x0, cFileName="YaMfCReW-Bf.m4a", cAlternateFileName="YAMFCR~1.M4A")) returned 1 [0088.107] FindNextFileW (in: hFindFile=0x381d00, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xce3c150, ftCreationTime.dwHighDateTime=0x1d5e2ad, ftLastAccessTime.dwLowDateTime=0xc6dd6840, ftLastAccessTime.dwHighDateTime=0x1d5d98e, ftLastWriteTime.dwLowDateTime=0xc6dd6840, ftLastWriteTime.dwHighDateTime=0x1d5d98e, nFileSizeHigh=0x0, nFileSizeLow=0x156f6, dwReserved0=0x0, dwReserved1=0x0, cFileName="Yhgp87w8M7AIinfzM.wav", cAlternateFileName="YHGP87~1.WAV")) returned 1 [0088.107] FindNextFileW (in: hFindFile=0x381d00, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0088.108] FindClose (in: hFindFile=0x381d00 | out: hFindFile=0x381d00) returned 1 [0088.108] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e77c) returned 1 [0088.108] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e788) returned 1 [0088.108] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e7bc) returned 1 [0088.108] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\VPUJVJbaoT0AA1L", nBufferLength=0x105, lpBuffer=0x31e2c4, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\VPUJVJbaoT0AA1L", lpFilePart=0x0) returned 0x33 [0088.108] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\VPUJVJbaoT0AA1L\\", nBufferLength=0x105, lpBuffer=0x31e298, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\VPUJVJbaoT0AA1L\\", lpFilePart=0x0) returned 0x34 [0088.108] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\VPUJVJbaoT0AA1L\\*", lpFindFileData=0x31e4e4 | out: lpFindFileData=0x31e4e4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x25297810, ftCreationTime.dwHighDateTime=0x1d5dab8, ftLastAccessTime.dwLowDateTime=0x7fd35fc0, ftLastAccessTime.dwHighDateTime=0x1d5dac1, ftLastWriteTime.dwLowDateTime=0x7fd35fc0, ftLastWriteTime.dwHighDateTime=0x1d5dac1, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x381d00 [0088.108] FindNextFileW (in: hFindFile=0x381d00, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x25297810, ftCreationTime.dwHighDateTime=0x1d5dab8, ftLastAccessTime.dwLowDateTime=0x7fd35fc0, ftLastAccessTime.dwHighDateTime=0x1d5dac1, ftLastWriteTime.dwLowDateTime=0x7fd35fc0, ftLastWriteTime.dwHighDateTime=0x1d5dac1, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0088.108] FindNextFileW (in: hFindFile=0x381d00, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc86009b0, ftCreationTime.dwHighDateTime=0x1d5db88, ftLastAccessTime.dwLowDateTime=0x425b41f0, ftLastAccessTime.dwHighDateTime=0x1d5e3cf, ftLastWriteTime.dwLowDateTime=0x425b41f0, ftLastWriteTime.dwHighDateTime=0x1d5e3cf, nFileSizeHigh=0x0, nFileSizeLow=0xe0bc, dwReserved0=0x0, dwReserved1=0x0, cFileName="71np54D.m4a", cAlternateFileName="")) returned 1 [0088.108] FindNextFileW (in: hFindFile=0x381d00, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x34ef2800, ftCreationTime.dwHighDateTime=0x1d5dd6d, ftLastAccessTime.dwLowDateTime=0x6b558c40, ftLastAccessTime.dwHighDateTime=0x1d5dafc, ftLastWriteTime.dwLowDateTime=0x6b558c40, ftLastWriteTime.dwHighDateTime=0x1d5dafc, nFileSizeHigh=0x0, nFileSizeLow=0x703d, dwReserved0=0x0, dwReserved1=0x0, cFileName="BN0t.mp3", cAlternateFileName="")) returned 1 [0088.108] FindNextFileW (in: hFindFile=0x381d00, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe36654d0, ftCreationTime.dwHighDateTime=0x1d5e12d, ftLastAccessTime.dwLowDateTime=0x965a2390, ftLastAccessTime.dwHighDateTime=0x1d5d8ce, ftLastWriteTime.dwLowDateTime=0x965a2390, ftLastWriteTime.dwHighDateTime=0x1d5d8ce, nFileSizeHigh=0x0, nFileSizeLow=0x1086f, dwReserved0=0x0, dwReserved1=0x0, cFileName="YaMfCReW-Bf.m4a", cAlternateFileName="YAMFCR~1.M4A")) returned 1 [0088.109] FindNextFileW (in: hFindFile=0x381d00, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xce3c150, ftCreationTime.dwHighDateTime=0x1d5e2ad, ftLastAccessTime.dwLowDateTime=0xc6dd6840, ftLastAccessTime.dwHighDateTime=0x1d5d98e, ftLastWriteTime.dwLowDateTime=0xc6dd6840, ftLastWriteTime.dwHighDateTime=0x1d5d98e, nFileSizeHigh=0x0, nFileSizeLow=0x156f6, dwReserved0=0x0, dwReserved1=0x0, cFileName="Yhgp87w8M7AIinfzM.wav", cAlternateFileName="YHGP87~1.WAV")) returned 1 [0088.109] FindNextFileW (in: hFindFile=0x381d00, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xce3c150, ftCreationTime.dwHighDateTime=0x1d5e2ad, ftLastAccessTime.dwLowDateTime=0xc6dd6840, ftLastAccessTime.dwHighDateTime=0x1d5d98e, ftLastWriteTime.dwLowDateTime=0xc6dd6840, ftLastWriteTime.dwHighDateTime=0x1d5d98e, nFileSizeHigh=0x0, nFileSizeLow=0x156f6, dwReserved0=0x0, dwReserved1=0x0, cFileName="Yhgp87w8M7AIinfzM.wav", cAlternateFileName="YHGP87~1.WAV")) returned 0 [0088.109] FindClose (in: hFindFile=0x381d00 | out: hFindFile=0x381d00) returned 1 [0088.109] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e77c) returned 1 [0088.109] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e788) returned 1 [0088.109] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\VPUJVJbaoT0AA1L\\BN0t.mp3", nBufferLength=0x105, lpBuffer=0x31e194, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\VPUJVJbaoT0AA1L\\BN0t.mp3", lpFilePart=0x0) returned 0x3c [0088.109] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e688) returned 1 [0088.109] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\VPUJVJbaoT0AA1L\\BN0t.mp3" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\music\\vpujvjbaot0aa1l\\bn0t.mp3"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x178 [0088.109] GetFileType (hFile=0x178) returned 0x1 [0088.109] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e684) returned 1 [0088.109] GetFileType (hFile=0x178) returned 0x1 [0088.109] GetFileSize (in: hFile=0x178, lpFileSizeHigh=0x31e790 | out: lpFileSizeHigh=0x31e790*=0x0) returned 0x703d [0088.109] ReadFile (in: hFile=0x178, lpBuffer=0x26c7f2c, nNumberOfBytesToRead=0x703d, lpNumberOfBytesRead=0x31e73c, lpOverlapped=0x0 | out: lpBuffer=0x26c7f2c*, lpNumberOfBytesRead=0x31e73c*=0x703d, lpOverlapped=0x0) returned 1 [0088.110] CloseHandle (hObject=0x178) returned 1 [0088.124] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\VPUJVJbaoT0AA1L\\BN0t.mp3", nBufferLength=0x105, lpBuffer=0x31e180, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\VPUJVJbaoT0AA1L\\BN0t.mp3", lpFilePart=0x0) returned 0x3c [0088.124] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e674) returned 1 [0088.124] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\VPUJVJbaoT0AA1L\\BN0t.mp3" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\music\\vpujvjbaot0aa1l\\bn0t.mp3"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x178 [0088.125] GetFileType (hFile=0x178) returned 0x1 [0088.125] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e670) returned 1 [0088.125] GetFileType (hFile=0x178) returned 0x1 [0088.125] WriteFile (in: hFile=0x178, lpBuffer=0x2737e54*, nNumberOfBytesToWrite=0x7040, lpNumberOfBytesWritten=0x31e730, lpOverlapped=0x0 | out: lpBuffer=0x2737e54*, lpNumberOfBytesWritten=0x31e730*=0x7040, lpOverlapped=0x0) returned 1 [0088.126] CloseHandle (hObject=0x178) returned 1 [0088.126] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\VPUJVJbaoT0AA1L\\BN0t.mp3", nBufferLength=0x105, lpBuffer=0x31e2b4, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\VPUJVJbaoT0AA1L\\BN0t.mp3", lpFilePart=0x0) returned 0x3c [0088.126] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\VPUJVJbaoT0AA1L\\BN0t.mp3", nBufferLength=0x105, lpBuffer=0x31e2b4, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\VPUJVJbaoT0AA1L\\BN0t.mp3", lpFilePart=0x0) returned 0x3c [0088.126] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e714) returned 1 [0088.127] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\VPUJVJbaoT0AA1L\\BN0t.mp3" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\music\\vpujvjbaot0aa1l\\bn0t.mp3"), fInfoLevelId=0x0, lpFileInformation=0x31e790 | out: lpFileInformation=0x31e790*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x34ef2800, ftCreationTime.dwHighDateTime=0x1d5dd6d, ftLastAccessTime.dwLowDateTime=0x6b558c40, ftLastAccessTime.dwHighDateTime=0x1d5dafc, ftLastWriteTime.dwLowDateTime=0x17f95b00, ftLastWriteTime.dwHighDateTime=0x1d6eb7f, nFileSizeHigh=0x0, nFileSizeLow=0x7040)) returned 1 [0088.127] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e710) returned 1 [0088.127] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\VPUJVJbaoT0AA1L\\BN0t.mp3" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\music\\vpujvjbaot0aa1l\\bn0t.mp3"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\VPUJVJbaoT0AA1L\\BN0t.mp3" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\music\\vpujvjbaot0aa1l\\bn0t.mp3")) returned 1 [0088.127] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\VPUJVJbaoT0AA1L\\Yhgp87w8M7AIinfzM.wav", nBufferLength=0x105, lpBuffer=0x31e194, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\VPUJVJbaoT0AA1L\\Yhgp87w8M7AIinfzM.wav", lpFilePart=0x0) returned 0x49 [0088.127] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e688) returned 1 [0088.127] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\VPUJVJbaoT0AA1L\\Yhgp87w8M7AIinfzM.wav" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\music\\vpujvjbaot0aa1l\\yhgp87w8m7aiinfzm.wav"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x178 [0088.127] GetFileType (hFile=0x178) returned 0x1 [0088.127] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e684) returned 1 [0088.127] GetFileType (hFile=0x178) returned 0x1 [0088.127] GetFileSize (in: hFile=0x178, lpFileSizeHigh=0x31e790 | out: lpFileSizeHigh=0x31e790*=0x0) returned 0x156f6 [0088.127] ReadFile (in: hFile=0x178, lpBuffer=0x3786698, nNumberOfBytesToRead=0x156f6, lpNumberOfBytesRead=0x31e73c, lpOverlapped=0x0 | out: lpBuffer=0x3786698*, lpNumberOfBytesRead=0x31e73c*=0x156f6, lpOverlapped=0x0) returned 1 [0088.129] CloseHandle (hObject=0x178) returned 1 [0088.143] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\VPUJVJbaoT0AA1L\\Yhgp87w8M7AIinfzM.wav", nBufferLength=0x105, lpBuffer=0x31e180, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\VPUJVJbaoT0AA1L\\Yhgp87w8M7AIinfzM.wav", lpFilePart=0x0) returned 0x49 [0088.143] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e674) returned 1 [0088.143] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\VPUJVJbaoT0AA1L\\Yhgp87w8M7AIinfzM.wav" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\music\\vpujvjbaot0aa1l\\yhgp87w8m7aiinfzm.wav"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x178 [0088.145] GetFileType (hFile=0x178) returned 0x1 [0088.145] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e670) returned 1 [0088.145] GetFileType (hFile=0x178) returned 0x1 [0088.145] WriteFile (in: hFile=0x178, lpBuffer=0x37f19d0*, nNumberOfBytesToWrite=0x15700, lpNumberOfBytesWritten=0x31e730, lpOverlapped=0x0 | out: lpBuffer=0x37f19d0*, lpNumberOfBytesWritten=0x31e730*=0x15700, lpOverlapped=0x0) returned 1 [0088.147] CloseHandle (hObject=0x178) returned 1 [0088.149] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\VPUJVJbaoT0AA1L\\Yhgp87w8M7AIinfzM.wav", nBufferLength=0x105, lpBuffer=0x31e2b4, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\VPUJVJbaoT0AA1L\\Yhgp87w8M7AIinfzM.wav", lpFilePart=0x0) returned 0x49 [0088.149] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\VPUJVJbaoT0AA1L\\Yhgp87w8M7AIinfzM.wav", nBufferLength=0x105, lpBuffer=0x31e2b4, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\VPUJVJbaoT0AA1L\\Yhgp87w8M7AIinfzM.wav", lpFilePart=0x0) returned 0x49 [0088.149] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e714) returned 1 [0088.149] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\VPUJVJbaoT0AA1L\\Yhgp87w8M7AIinfzM.wav" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\music\\vpujvjbaot0aa1l\\yhgp87w8m7aiinfzm.wav"), fInfoLevelId=0x0, lpFileInformation=0x31e790 | out: lpFileInformation=0x31e790*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xce3c150, ftCreationTime.dwHighDateTime=0x1d5e2ad, ftLastAccessTime.dwLowDateTime=0xc6dd6840, ftLastAccessTime.dwHighDateTime=0x1d5d98e, ftLastWriteTime.dwLowDateTime=0x17fbbc60, ftLastWriteTime.dwHighDateTime=0x1d6eb7f, nFileSizeHigh=0x0, nFileSizeLow=0x15700)) returned 1 [0088.149] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e710) returned 1 [0088.149] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\VPUJVJbaoT0AA1L\\Yhgp87w8M7AIinfzM.wav" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\music\\vpujvjbaot0aa1l\\yhgp87w8m7aiinfzm.wav"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\VPUJVJbaoT0AA1L\\Yhgp87w8M7AIinfzM.wav" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\music\\vpujvjbaot0aa1l\\yhgp87w8m7aiinfzm.wav")) returned 1 [0088.149] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e834) returned 1 [0088.149] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\My Documents", nBufferLength=0x105, lpBuffer=0x31e33c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\My Documents", lpFilePart=0x0) returned 0x2a [0088.149] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\My Documents\\", nBufferLength=0x105, lpBuffer=0x31e310, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\My Documents\\", lpFilePart=0x0) returned 0x2b [0088.149] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\My Documents\\*", lpFindFileData=0x31e55c | out: lpFindFileData=0x31e55c*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0088.150] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e7f8) returned 1 [0088.151] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e834) returned 1 [0088.151] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\NetHood", nBufferLength=0x105, lpBuffer=0x31e33c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\NetHood", lpFilePart=0x0) returned 0x25 [0088.151] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\NetHood\\", nBufferLength=0x105, lpBuffer=0x31e310, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\NetHood\\", lpFilePart=0x0) returned 0x26 [0088.151] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\NetHood\\*", lpFindFileData=0x31e55c | out: lpFindFileData=0x31e55c*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0088.152] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e7f8) returned 1 [0088.153] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e834) returned 1 [0088.153] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures", nBufferLength=0x105, lpBuffer=0x31e33c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures", lpFilePart=0x0) returned 0x26 [0088.153] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\", nBufferLength=0x105, lpBuffer=0x31e310, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\", lpFilePart=0x0) returned 0x27 [0088.153] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\*", lpFindFileData=0x31e55c | out: lpFindFileData=0x31e55c*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x28cd94e0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0xd8fc27a0, ftLastAccessTime.dwHighDateTime=0x1d5e82a, ftLastWriteTime.dwLowDateTime=0xd8fc27a0, ftLastWriteTime.dwHighDateTime=0x1d5e82a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x381d40 [0088.153] FindNextFileW (in: hFindFile=0x381d40, lpFindFileData=0x31e56c | out: lpFindFileData=0x31e56c*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x28cd94e0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0xd8fc27a0, ftLastAccessTime.dwHighDateTime=0x1d5e82a, ftLastWriteTime.dwLowDateTime=0xd8fc27a0, ftLastWriteTime.dwHighDateTime=0x1d5e82a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0088.153] FindNextFileW (in: hFindFile=0x381d40, lpFindFileData=0x31e56c | out: lpFindFileData=0x31e56c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x820a9300, ftCreationTime.dwHighDateTime=0x1d5db2d, ftLastAccessTime.dwLowDateTime=0x3c5c9a50, ftLastAccessTime.dwHighDateTime=0x1d5d93a, ftLastWriteTime.dwLowDateTime=0x3c5c9a50, ftLastWriteTime.dwHighDateTime=0x1d5d93a, nFileSizeHigh=0x0, nFileSizeLow=0x1516a, dwReserved0=0x0, dwReserved1=0x0, cFileName="2iM6el404FPP9.jpg", cAlternateFileName="2IM6EL~1.JPG")) returned 1 [0088.153] FindNextFileW (in: hFindFile=0x381d40, lpFindFileData=0x31e56c | out: lpFindFileData=0x31e56c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd8901730, ftCreationTime.dwHighDateTime=0x1d5e08d, ftLastAccessTime.dwLowDateTime=0x49c9df90, ftLastAccessTime.dwHighDateTime=0x1d5e006, ftLastWriteTime.dwLowDateTime=0x49c9df90, ftLastWriteTime.dwHighDateTime=0x1d5e006, nFileSizeHigh=0x0, nFileSizeLow=0xbd4f, dwReserved0=0x0, dwReserved1=0x0, cFileName="3Sx06XnyBNN.jpg", cAlternateFileName="3SX06X~1.JPG")) returned 1 [0088.153] FindNextFileW (in: hFindFile=0x381d40, lpFindFileData=0x31e56c | out: lpFindFileData=0x31e56c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xae9b6a30, ftCreationTime.dwHighDateTime=0x1d5de92, ftLastAccessTime.dwLowDateTime=0xba7842e0, ftLastAccessTime.dwHighDateTime=0x1d5e065, ftLastWriteTime.dwLowDateTime=0xba7842e0, ftLastWriteTime.dwHighDateTime=0x1d5e065, nFileSizeHigh=0x0, nFileSizeLow=0xb79f, dwReserved0=0x0, dwReserved1=0x0, cFileName="8y 4TOn5NPzM-8ECXs7.bmp", cAlternateFileName="8Y4TON~1.BMP")) returned 1 [0088.153] FindNextFileW (in: hFindFile=0x381d40, lpFindFileData=0x31e56c | out: lpFindFileData=0x31e56c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1e275800, ftCreationTime.dwHighDateTime=0x1d5e44c, ftLastAccessTime.dwLowDateTime=0xbb216510, ftLastAccessTime.dwHighDateTime=0x1d5e06e, ftLastWriteTime.dwLowDateTime=0xbb216510, ftLastWriteTime.dwHighDateTime=0x1d5e06e, nFileSizeHigh=0x0, nFileSizeLow=0x5efe, dwReserved0=0x0, dwReserved1=0x0, cFileName="BbAIdQK9.gif", cAlternateFileName="")) returned 1 [0088.153] FindNextFileW (in: hFindFile=0x381d40, lpFindFileData=0x31e56c | out: lpFindFileData=0x31e56c*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0x28d257a0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28d257a0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x2d1bb180, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x1f8, dwReserved0=0x0, dwReserved1=0x0, cFileName="desktop.ini", cAlternateFileName="")) returned 1 [0088.154] FindNextFileW (in: hFindFile=0x381d40, lpFindFileData=0x31e56c | out: lpFindFileData=0x31e56c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa3055ca0, ftCreationTime.dwHighDateTime=0x1d5d8dc, ftLastAccessTime.dwLowDateTime=0xab861f50, ftLastAccessTime.dwHighDateTime=0x1d5d8bd, ftLastWriteTime.dwLowDateTime=0xab861f50, ftLastWriteTime.dwHighDateTime=0x1d5d8bd, nFileSizeHigh=0x0, nFileSizeLow=0x519d, dwReserved0=0x0, dwReserved1=0x0, cFileName="qXc5CfQ1VI 7A-Et3.jpg", cAlternateFileName="QXC5CF~1.JPG")) returned 1 [0088.154] FindNextFileW (in: hFindFile=0x381d40, lpFindFileData=0x31e56c | out: lpFindFileData=0x31e56c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8a765d60, ftCreationTime.dwHighDateTime=0x1d5d8b9, ftLastAccessTime.dwLowDateTime=0x9a95d60, ftLastAccessTime.dwHighDateTime=0x1d5db87, ftLastWriteTime.dwLowDateTime=0x9a95d60, ftLastWriteTime.dwHighDateTime=0x1d5db87, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="tZ02_j2HoUAEzAXcbrvF", cAlternateFileName="TZ02_J~1")) returned 1 [0088.154] FindNextFileW (in: hFindFile=0x381d40, lpFindFileData=0x31e56c | out: lpFindFileData=0x31e56c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xff3f7390, ftCreationTime.dwHighDateTime=0x1d5e6c2, ftLastAccessTime.dwLowDateTime=0x41051780, ftLastAccessTime.dwHighDateTime=0x1d5dc1e, ftLastWriteTime.dwLowDateTime=0x41051780, ftLastWriteTime.dwHighDateTime=0x1d5dc1e, nFileSizeHigh=0x0, nFileSizeLow=0x4f54, dwReserved0=0x0, dwReserved1=0x0, cFileName="wSTY9VZBSCTH9J0CtOr.png", cAlternateFileName="WSTY9V~1.PNG")) returned 1 [0088.154] FindNextFileW (in: hFindFile=0x381d40, lpFindFileData=0x31e56c | out: lpFindFileData=0x31e56c*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0088.154] FindClose (in: hFindFile=0x381d40 | out: hFindFile=0x381d40) returned 1 [0088.154] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e7f4) returned 1 [0088.154] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e800) returned 1 [0088.154] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e834) returned 1 [0088.154] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures", nBufferLength=0x105, lpBuffer=0x31e33c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures", lpFilePart=0x0) returned 0x26 [0088.154] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\", nBufferLength=0x105, lpBuffer=0x31e310, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\", lpFilePart=0x0) returned 0x27 [0088.154] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\*", lpFindFileData=0x31e55c | out: lpFindFileData=0x31e55c*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x28cd94e0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0xd8fc27a0, ftLastAccessTime.dwHighDateTime=0x1d5e82a, ftLastWriteTime.dwLowDateTime=0xd8fc27a0, ftLastWriteTime.dwHighDateTime=0x1d5e82a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x381d40 [0088.154] FindNextFileW (in: hFindFile=0x381d40, lpFindFileData=0x31e56c | out: lpFindFileData=0x31e56c*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x28cd94e0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0xd8fc27a0, ftLastAccessTime.dwHighDateTime=0x1d5e82a, ftLastWriteTime.dwLowDateTime=0xd8fc27a0, ftLastWriteTime.dwHighDateTime=0x1d5e82a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0088.155] FindNextFileW (in: hFindFile=0x381d40, lpFindFileData=0x31e56c | out: lpFindFileData=0x31e56c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x820a9300, ftCreationTime.dwHighDateTime=0x1d5db2d, ftLastAccessTime.dwLowDateTime=0x3c5c9a50, ftLastAccessTime.dwHighDateTime=0x1d5d93a, ftLastWriteTime.dwLowDateTime=0x3c5c9a50, ftLastWriteTime.dwHighDateTime=0x1d5d93a, nFileSizeHigh=0x0, nFileSizeLow=0x1516a, dwReserved0=0x0, dwReserved1=0x0, cFileName="2iM6el404FPP9.jpg", cAlternateFileName="2IM6EL~1.JPG")) returned 1 [0088.155] FindNextFileW (in: hFindFile=0x381d40, lpFindFileData=0x31e56c | out: lpFindFileData=0x31e56c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd8901730, ftCreationTime.dwHighDateTime=0x1d5e08d, ftLastAccessTime.dwLowDateTime=0x49c9df90, ftLastAccessTime.dwHighDateTime=0x1d5e006, ftLastWriteTime.dwLowDateTime=0x49c9df90, ftLastWriteTime.dwHighDateTime=0x1d5e006, nFileSizeHigh=0x0, nFileSizeLow=0xbd4f, dwReserved0=0x0, dwReserved1=0x0, cFileName="3Sx06XnyBNN.jpg", cAlternateFileName="3SX06X~1.JPG")) returned 1 [0088.155] FindNextFileW (in: hFindFile=0x381d40, lpFindFileData=0x31e56c | out: lpFindFileData=0x31e56c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xae9b6a30, ftCreationTime.dwHighDateTime=0x1d5de92, ftLastAccessTime.dwLowDateTime=0xba7842e0, ftLastAccessTime.dwHighDateTime=0x1d5e065, ftLastWriteTime.dwLowDateTime=0xba7842e0, ftLastWriteTime.dwHighDateTime=0x1d5e065, nFileSizeHigh=0x0, nFileSizeLow=0xb79f, dwReserved0=0x0, dwReserved1=0x0, cFileName="8y 4TOn5NPzM-8ECXs7.bmp", cAlternateFileName="8Y4TON~1.BMP")) returned 1 [0088.155] FindNextFileW (in: hFindFile=0x381d40, lpFindFileData=0x31e56c | out: lpFindFileData=0x31e56c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1e275800, ftCreationTime.dwHighDateTime=0x1d5e44c, ftLastAccessTime.dwLowDateTime=0xbb216510, ftLastAccessTime.dwHighDateTime=0x1d5e06e, ftLastWriteTime.dwLowDateTime=0xbb216510, ftLastWriteTime.dwHighDateTime=0x1d5e06e, nFileSizeHigh=0x0, nFileSizeLow=0x5efe, dwReserved0=0x0, dwReserved1=0x0, cFileName="BbAIdQK9.gif", cAlternateFileName="")) returned 1 [0088.155] FindNextFileW (in: hFindFile=0x381d40, lpFindFileData=0x31e56c | out: lpFindFileData=0x31e56c*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0x28d257a0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28d257a0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x2d1bb180, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x1f8, dwReserved0=0x0, dwReserved1=0x0, cFileName="desktop.ini", cAlternateFileName="")) returned 1 [0088.155] FindNextFileW (in: hFindFile=0x381d40, lpFindFileData=0x31e56c | out: lpFindFileData=0x31e56c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa3055ca0, ftCreationTime.dwHighDateTime=0x1d5d8dc, ftLastAccessTime.dwLowDateTime=0xab861f50, ftLastAccessTime.dwHighDateTime=0x1d5d8bd, ftLastWriteTime.dwLowDateTime=0xab861f50, ftLastWriteTime.dwHighDateTime=0x1d5d8bd, nFileSizeHigh=0x0, nFileSizeLow=0x519d, dwReserved0=0x0, dwReserved1=0x0, cFileName="qXc5CfQ1VI 7A-Et3.jpg", cAlternateFileName="QXC5CF~1.JPG")) returned 1 [0088.155] FindNextFileW (in: hFindFile=0x381d40, lpFindFileData=0x31e56c | out: lpFindFileData=0x31e56c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8a765d60, ftCreationTime.dwHighDateTime=0x1d5d8b9, ftLastAccessTime.dwLowDateTime=0x9a95d60, ftLastAccessTime.dwHighDateTime=0x1d5db87, ftLastWriteTime.dwLowDateTime=0x9a95d60, ftLastWriteTime.dwHighDateTime=0x1d5db87, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="tZ02_j2HoUAEzAXcbrvF", cAlternateFileName="TZ02_J~1")) returned 1 [0088.156] FindNextFileW (in: hFindFile=0x381d40, lpFindFileData=0x31e56c | out: lpFindFileData=0x31e56c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xff3f7390, ftCreationTime.dwHighDateTime=0x1d5e6c2, ftLastAccessTime.dwLowDateTime=0x41051780, ftLastAccessTime.dwHighDateTime=0x1d5dc1e, ftLastWriteTime.dwLowDateTime=0x41051780, ftLastWriteTime.dwHighDateTime=0x1d5dc1e, nFileSizeHigh=0x0, nFileSizeLow=0x4f54, dwReserved0=0x0, dwReserved1=0x0, cFileName="wSTY9VZBSCTH9J0CtOr.png", cAlternateFileName="WSTY9V~1.PNG")) returned 1 [0088.156] FindNextFileW (in: hFindFile=0x381d40, lpFindFileData=0x31e56c | out: lpFindFileData=0x31e56c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xff3f7390, ftCreationTime.dwHighDateTime=0x1d5e6c2, ftLastAccessTime.dwLowDateTime=0x41051780, ftLastAccessTime.dwHighDateTime=0x1d5dc1e, ftLastWriteTime.dwLowDateTime=0x41051780, ftLastWriteTime.dwHighDateTime=0x1d5dc1e, nFileSizeHigh=0x0, nFileSizeLow=0x4f54, dwReserved0=0x0, dwReserved1=0x0, cFileName="wSTY9VZBSCTH9J0CtOr.png", cAlternateFileName="WSTY9V~1.PNG")) returned 0 [0088.156] FindClose (in: hFindFile=0x381d40 | out: hFindFile=0x381d40) returned 1 [0088.156] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e7f4) returned 1 [0088.156] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e800) returned 1 [0088.156] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\2iM6el404FPP9.jpg", nBufferLength=0x105, lpBuffer=0x31e20c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\2iM6el404FPP9.jpg", lpFilePart=0x0) returned 0x38 [0088.157] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e700) returned 1 [0088.157] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\2iM6el404FPP9.jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\pictures\\2im6el404fpp9.jpg"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x178 [0088.157] GetFileType (hFile=0x178) returned 0x1 [0088.157] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e6fc) returned 1 [0088.157] GetFileType (hFile=0x178) returned 0x1 [0088.157] GetFileSize (in: hFile=0x178, lpFileSizeHigh=0x31e808 | out: lpFileSizeHigh=0x31e808*=0x0) returned 0x1516a [0088.157] ReadFile (in: hFile=0x178, lpBuffer=0x38070f0, nNumberOfBytesToRead=0x1516a, lpNumberOfBytesRead=0x31e7b4, lpOverlapped=0x0 | out: lpBuffer=0x38070f0*, lpNumberOfBytesRead=0x31e7b4*=0x1516a, lpOverlapped=0x0) returned 1 [0088.158] CloseHandle (hObject=0x178) returned 1 [0088.327] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\2iM6el404FPP9.jpg", nBufferLength=0x105, lpBuffer=0x31e1f8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\2iM6el404FPP9.jpg", lpFilePart=0x0) returned 0x38 [0088.327] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e6ec) returned 1 [0088.327] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\2iM6el404FPP9.jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\pictures\\2im6el404fpp9.jpg"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x178 [0088.329] GetFileType (hFile=0x178) returned 0x1 [0088.329] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e6e8) returned 1 [0088.329] GetFileType (hFile=0x178) returned 0x1 [0088.329] WriteFile (in: hFile=0x178, lpBuffer=0x3870858*, nNumberOfBytesToWrite=0x15170, lpNumberOfBytesWritten=0x31e7a8, lpOverlapped=0x0 | out: lpBuffer=0x3870858*, lpNumberOfBytesWritten=0x31e7a8*=0x15170, lpOverlapped=0x0) returned 1 [0088.331] CloseHandle (hObject=0x178) returned 1 [0088.331] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\2iM6el404FPP9.jpg", nBufferLength=0x105, lpBuffer=0x31e32c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\2iM6el404FPP9.jpg", lpFilePart=0x0) returned 0x38 [0088.331] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\2iM6el404FPP9.jpg", nBufferLength=0x105, lpBuffer=0x31e32c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\2iM6el404FPP9.jpg", lpFilePart=0x0) returned 0x38 [0088.331] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e78c) returned 1 [0088.331] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\2iM6el404FPP9.jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\pictures\\2im6el404fpp9.jpg"), fInfoLevelId=0x0, lpFileInformation=0x31e808 | out: lpFileInformation=0x31e808*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x820a9300, ftCreationTime.dwHighDateTime=0x1d5db2d, ftLastAccessTime.dwLowDateTime=0x3c5c9a50, ftLastAccessTime.dwHighDateTime=0x1d5d93a, ftLastWriteTime.dwLowDateTime=0x18184ce0, ftLastWriteTime.dwHighDateTime=0x1d6eb7f, nFileSizeHigh=0x0, nFileSizeLow=0x15170)) returned 1 [0088.331] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e788) returned 1 [0088.331] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\2iM6el404FPP9.jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\pictures\\2im6el404fpp9.jpg"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\2iM6el404FPP9.jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\pictures\\2im6el404fpp9.jpg")) returned 1 [0088.331] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\3Sx06XnyBNN.jpg", nBufferLength=0x105, lpBuffer=0x31e20c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\3Sx06XnyBNN.jpg", lpFilePart=0x0) returned 0x36 [0088.332] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e700) returned 1 [0088.332] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\3Sx06XnyBNN.jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\pictures\\3sx06xnybnn.jpg"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x178 [0088.332] GetFileType (hFile=0x178) returned 0x1 [0088.332] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e6fc) returned 1 [0088.332] GetFileType (hFile=0x178) returned 0x1 [0088.332] GetFileSize (in: hFile=0x178, lpFileSizeHigh=0x31e808 | out: lpFileSizeHigh=0x31e808*=0x0) returned 0xbd4f [0088.332] ReadFile (in: hFile=0x178, lpBuffer=0x27dcf3c, nNumberOfBytesToRead=0xbd4f, lpNumberOfBytesRead=0x31e7b4, lpOverlapped=0x0 | out: lpBuffer=0x27dcf3c*, lpNumberOfBytesRead=0x31e7b4*=0xbd4f, lpOverlapped=0x0) returned 1 [0088.333] CloseHandle (hObject=0x178) returned 1 [0088.371] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\3Sx06XnyBNN.jpg", nBufferLength=0x105, lpBuffer=0x31e1f8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\3Sx06XnyBNN.jpg", lpFilePart=0x0) returned 0x36 [0088.371] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e6ec) returned 1 [0088.371] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\3Sx06XnyBNN.jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\pictures\\3sx06xnybnn.jpg"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x178 [0088.372] GetFileType (hFile=0x178) returned 0x1 [0088.372] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e6e8) returned 1 [0088.372] GetFileType (hFile=0x178) returned 0x1 [0088.372] WriteFile (in: hFile=0x178, lpBuffer=0x2659c04*, nNumberOfBytesToWrite=0xbd50, lpNumberOfBytesWritten=0x31e7a8, lpOverlapped=0x0 | out: lpBuffer=0x2659c04*, lpNumberOfBytesWritten=0x31e7a8*=0xbd50, lpOverlapped=0x0) returned 1 [0088.373] CloseHandle (hObject=0x178) returned 1 [0088.374] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\3Sx06XnyBNN.jpg", nBufferLength=0x105, lpBuffer=0x31e32c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\3Sx06XnyBNN.jpg", lpFilePart=0x0) returned 0x36 [0088.374] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\3Sx06XnyBNN.jpg", nBufferLength=0x105, lpBuffer=0x31e32c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\3Sx06XnyBNN.jpg", lpFilePart=0x0) returned 0x36 [0088.374] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e78c) returned 1 [0088.374] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\3Sx06XnyBNN.jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\pictures\\3sx06xnybnn.jpg"), fInfoLevelId=0x0, lpFileInformation=0x31e808 | out: lpFileInformation=0x31e808*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd8901730, ftCreationTime.dwHighDateTime=0x1d5e08d, ftLastAccessTime.dwLowDateTime=0x49c9df90, ftLastAccessTime.dwHighDateTime=0x1d5e006, ftLastWriteTime.dwLowDateTime=0x181d0fa0, ftLastWriteTime.dwHighDateTime=0x1d6eb7f, nFileSizeHigh=0x0, nFileSizeLow=0xbd50)) returned 1 [0088.374] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e788) returned 1 [0088.374] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\3Sx06XnyBNN.jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\pictures\\3sx06xnybnn.jpg"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\3Sx06XnyBNN.jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\pictures\\3sx06xnybnn.jpg")) returned 1 [0088.374] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\8y 4TOn5NPzM-8ECXs7.bmp", nBufferLength=0x105, lpBuffer=0x31e20c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\8y 4TOn5NPzM-8ECXs7.bmp", lpFilePart=0x0) returned 0x3e [0088.374] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e700) returned 1 [0088.374] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\8y 4TOn5NPzM-8ECXs7.bmp" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\pictures\\8y 4ton5npzm-8ecxs7.bmp"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x178 [0088.374] GetFileType (hFile=0x178) returned 0x1 [0088.374] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e6fc) returned 1 [0088.374] GetFileType (hFile=0x178) returned 0x1 [0088.374] GetFileSize (in: hFile=0x178, lpFileSizeHigh=0x31e808 | out: lpFileSizeHigh=0x31e808*=0x0) returned 0xb79f [0088.375] ReadFile (in: hFile=0x178, lpBuffer=0x2665c98, nNumberOfBytesToRead=0xb79f, lpNumberOfBytesRead=0x31e7b4, lpOverlapped=0x0 | out: lpBuffer=0x2665c98*, lpNumberOfBytesRead=0x31e7b4*=0xb79f, lpOverlapped=0x0) returned 1 [0088.375] CloseHandle (hObject=0x178) returned 1 [0088.418] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\8y 4TOn5NPzM-8ECXs7.bmp", nBufferLength=0x105, lpBuffer=0x31e1f8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\8y 4TOn5NPzM-8ECXs7.bmp", lpFilePart=0x0) returned 0x3e [0088.418] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e6ec) returned 1 [0088.418] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\8y 4TOn5NPzM-8ECXs7.bmp" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\pictures\\8y 4ton5npzm-8ecxs7.bmp"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x178 [0088.419] GetFileType (hFile=0x178) returned 0x1 [0088.419] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e6e8) returned 1 [0088.419] GetFileType (hFile=0x178) returned 0x1 [0088.419] WriteFile (in: hFile=0x178, lpBuffer=0x26d52d0*, nNumberOfBytesToWrite=0xb7a0, lpNumberOfBytesWritten=0x31e7a8, lpOverlapped=0x0 | out: lpBuffer=0x26d52d0*, lpNumberOfBytesWritten=0x31e7a8*=0xb7a0, lpOverlapped=0x0) returned 1 [0088.421] CloseHandle (hObject=0x178) returned 1 [0088.421] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\8y 4TOn5NPzM-8ECXs7.bmp", nBufferLength=0x105, lpBuffer=0x31e32c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\8y 4TOn5NPzM-8ECXs7.bmp", lpFilePart=0x0) returned 0x3e [0088.421] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\8y 4TOn5NPzM-8ECXs7.bmp", nBufferLength=0x105, lpBuffer=0x31e32c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\8y 4TOn5NPzM-8ECXs7.bmp", lpFilePart=0x0) returned 0x3e [0088.421] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e78c) returned 1 [0088.421] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\8y 4TOn5NPzM-8ECXs7.bmp" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\pictures\\8y 4ton5npzm-8ecxs7.bmp"), fInfoLevelId=0x0, lpFileInformation=0x31e808 | out: lpFileInformation=0x31e808*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xae9b6a30, ftCreationTime.dwHighDateTime=0x1d5de92, ftLastAccessTime.dwLowDateTime=0xba7842e0, ftLastAccessTime.dwHighDateTime=0x1d5e065, ftLastWriteTime.dwLowDateTime=0x18269520, ftLastWriteTime.dwHighDateTime=0x1d6eb7f, nFileSizeHigh=0x0, nFileSizeLow=0xb7a0)) returned 1 [0088.421] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e788) returned 1 [0088.421] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\8y 4TOn5NPzM-8ECXs7.bmp" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\pictures\\8y 4ton5npzm-8ecxs7.bmp"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\8y 4TOn5NPzM-8ECXs7.bmp" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\pictures\\8y 4ton5npzm-8ecxs7.bmp")) returned 1 [0088.422] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\qXc5CfQ1VI 7A-Et3.jpg", nBufferLength=0x105, lpBuffer=0x31e20c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\qXc5CfQ1VI 7A-Et3.jpg", lpFilePart=0x0) returned 0x3c [0088.422] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e700) returned 1 [0088.422] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\qXc5CfQ1VI 7A-Et3.jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\pictures\\qxc5cfq1vi 7a-et3.jpg"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x178 [0088.422] GetFileType (hFile=0x178) returned 0x1 [0088.422] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e6fc) returned 1 [0088.422] GetFileType (hFile=0x178) returned 0x1 [0088.422] GetFileSize (in: hFile=0x178, lpFileSizeHigh=0x31e808 | out: lpFileSizeHigh=0x31e808*=0x0) returned 0x519d [0088.422] ReadFile (in: hFile=0x178, lpBuffer=0x26e0e1c, nNumberOfBytesToRead=0x519d, lpNumberOfBytesRead=0x31e7b4, lpOverlapped=0x0 | out: lpBuffer=0x26e0e1c*, lpNumberOfBytesRead=0x31e7b4*=0x519d, lpOverlapped=0x0) returned 1 [0088.437] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\qXc5CfQ1VI 7A-Et3.jpg", nBufferLength=0x105, lpBuffer=0x31e1f8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\qXc5CfQ1VI 7A-Et3.jpg", lpFilePart=0x0) returned 0x3c [0088.437] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e6ec) returned 1 [0088.437] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\qXc5CfQ1VI 7A-Et3.jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\pictures\\qxc5cfq1vi 7a-et3.jpg"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x178 [0088.438] GetFileType (hFile=0x178) returned 0x1 [0088.438] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e6e8) returned 1 [0088.438] GetFileType (hFile=0x178) returned 0x1 [0088.439] WriteFile (in: hFile=0x178, lpBuffer=0x2747424*, nNumberOfBytesToWrite=0x51a0, lpNumberOfBytesWritten=0x31e7a8, lpOverlapped=0x0 | out: lpBuffer=0x2747424*, lpNumberOfBytesWritten=0x31e7a8*=0x51a0, lpOverlapped=0x0) returned 1 [0088.440] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\qXc5CfQ1VI 7A-Et3.jpg", nBufferLength=0x105, lpBuffer=0x31e32c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\qXc5CfQ1VI 7A-Et3.jpg", lpFilePart=0x0) returned 0x3c [0088.440] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\qXc5CfQ1VI 7A-Et3.jpg", nBufferLength=0x105, lpBuffer=0x31e32c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\qXc5CfQ1VI 7A-Et3.jpg", lpFilePart=0x0) returned 0x3c [0088.440] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e78c) returned 1 [0088.440] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\qXc5CfQ1VI 7A-Et3.jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\pictures\\qxc5cfq1vi 7a-et3.jpg"), fInfoLevelId=0x0, lpFileInformation=0x31e808 | out: lpFileInformation=0x31e808*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa3055ca0, ftCreationTime.dwHighDateTime=0x1d5d8dc, ftLastAccessTime.dwLowDateTime=0xab861f50, ftLastAccessTime.dwHighDateTime=0x1d5d8bd, ftLastWriteTime.dwLowDateTime=0x1828f680, ftLastWriteTime.dwHighDateTime=0x1d6eb7f, nFileSizeHigh=0x0, nFileSizeLow=0x51a0)) returned 1 [0088.440] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e788) returned 1 [0088.440] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\qXc5CfQ1VI 7A-Et3.jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\pictures\\qxc5cfq1vi 7a-et3.jpg"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\qXc5CfQ1VI 7A-Et3.jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\pictures\\qxc5cfq1vi 7a-et3.jpg")) returned 1 [0088.441] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\wSTY9VZBSCTH9J0CtOr.png", nBufferLength=0x105, lpBuffer=0x31e20c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\wSTY9VZBSCTH9J0CtOr.png", lpFilePart=0x0) returned 0x3e [0088.441] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e700) returned 1 [0088.441] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\wSTY9VZBSCTH9J0CtOr.png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\pictures\\wsty9vzbscth9j0ctor.png"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x178 [0088.441] GetFileType (hFile=0x178) returned 0x1 [0088.441] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e6fc) returned 1 [0088.441] GetFileType (hFile=0x178) returned 0x1 [0088.441] GetFileSize (in: hFile=0x178, lpFileSizeHigh=0x31e808 | out: lpFileSizeHigh=0x31e808*=0x0) returned 0x4f54 [0088.441] ReadFile (in: hFile=0x178, lpBuffer=0x274c938, nNumberOfBytesToRead=0x4f54, lpNumberOfBytesRead=0x31e7b4, lpOverlapped=0x0 | out: lpBuffer=0x274c938*, lpNumberOfBytesRead=0x31e7b4*=0x4f54, lpOverlapped=0x0) returned 1 [0088.455] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\wSTY9VZBSCTH9J0CtOr.png", nBufferLength=0x105, lpBuffer=0x31e1f8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\wSTY9VZBSCTH9J0CtOr.png", lpFilePart=0x0) returned 0x3e [0088.455] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e6ec) returned 1 [0088.455] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\wSTY9VZBSCTH9J0CtOr.png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\pictures\\wsty9vzbscth9j0ctor.png"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x178 [0088.456] GetFileType (hFile=0x178) returned 0x1 [0088.456] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e6e8) returned 1 [0088.456] GetFileType (hFile=0x178) returned 0x1 [0088.456] WriteFile (in: hFile=0x178, lpBuffer=0x27b23fc*, nNumberOfBytesToWrite=0x4f60, lpNumberOfBytesWritten=0x31e7a8, lpOverlapped=0x0 | out: lpBuffer=0x27b23fc*, lpNumberOfBytesWritten=0x31e7a8*=0x4f60, lpOverlapped=0x0) returned 1 [0088.457] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\wSTY9VZBSCTH9J0CtOr.png", nBufferLength=0x105, lpBuffer=0x31e32c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\wSTY9VZBSCTH9J0CtOr.png", lpFilePart=0x0) returned 0x3e [0088.457] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\wSTY9VZBSCTH9J0CtOr.png", nBufferLength=0x105, lpBuffer=0x31e32c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\wSTY9VZBSCTH9J0CtOr.png", lpFilePart=0x0) returned 0x3e [0088.457] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e78c) returned 1 [0088.457] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\wSTY9VZBSCTH9J0CtOr.png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\pictures\\wsty9vzbscth9j0ctor.png"), fInfoLevelId=0x0, lpFileInformation=0x31e808 | out: lpFileInformation=0x31e808*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xff3f7390, ftCreationTime.dwHighDateTime=0x1d5e6c2, ftLastAccessTime.dwLowDateTime=0x41051780, ftLastAccessTime.dwHighDateTime=0x1d5dc1e, ftLastWriteTime.dwLowDateTime=0x182b57e0, ftLastWriteTime.dwHighDateTime=0x1d6eb7f, nFileSizeHigh=0x0, nFileSizeLow=0x4f60)) returned 1 [0088.458] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e788) returned 1 [0088.458] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\wSTY9VZBSCTH9J0CtOr.png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\pictures\\wsty9vzbscth9j0ctor.png"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\wSTY9VZBSCTH9J0CtOr.png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\pictures\\wsty9vzbscth9j0ctor.png")) returned 1 [0088.458] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e7bc) returned 1 [0088.458] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\tZ02_j2HoUAEzAXcbrvF", nBufferLength=0x105, lpBuffer=0x31e2c4, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\tZ02_j2HoUAEzAXcbrvF", lpFilePart=0x0) returned 0x3b [0088.458] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\tZ02_j2HoUAEzAXcbrvF\\", nBufferLength=0x105, lpBuffer=0x31e298, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\tZ02_j2HoUAEzAXcbrvF\\", lpFilePart=0x0) returned 0x3c [0088.458] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\tZ02_j2HoUAEzAXcbrvF\\*", lpFindFileData=0x31e4e4 | out: lpFindFileData=0x31e4e4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8a765d60, ftCreationTime.dwHighDateTime=0x1d5d8b9, ftLastAccessTime.dwLowDateTime=0x9a95d60, ftLastAccessTime.dwHighDateTime=0x1d5db87, ftLastWriteTime.dwLowDateTime=0x9a95d60, ftLastWriteTime.dwHighDateTime=0x1d5db87, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x381e80 [0088.458] FindNextFileW (in: hFindFile=0x381e80, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8a765d60, ftCreationTime.dwHighDateTime=0x1d5d8b9, ftLastAccessTime.dwLowDateTime=0x9a95d60, ftLastAccessTime.dwHighDateTime=0x1d5db87, ftLastWriteTime.dwLowDateTime=0x9a95d60, ftLastWriteTime.dwHighDateTime=0x1d5db87, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0088.458] FindNextFileW (in: hFindFile=0x381e80, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x62ba4d20, ftCreationTime.dwHighDateTime=0x1d5e144, ftLastAccessTime.dwLowDateTime=0x6d03b350, ftLastAccessTime.dwHighDateTime=0x1d5e632, ftLastWriteTime.dwLowDateTime=0x6d03b350, ftLastWriteTime.dwHighDateTime=0x1d5e632, nFileSizeHigh=0x0, nFileSizeLow=0xa7e4, dwReserved0=0x0, dwReserved1=0x0, cFileName="Ab6fh6TA.bmp", cAlternateFileName="")) returned 1 [0088.459] FindNextFileW (in: hFindFile=0x381e80, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7afcf00, ftCreationTime.dwHighDateTime=0x1d5dad1, ftLastAccessTime.dwLowDateTime=0x51f61430, ftLastAccessTime.dwHighDateTime=0x1d5e309, ftLastWriteTime.dwLowDateTime=0x51f61430, ftLastWriteTime.dwHighDateTime=0x1d5e309, nFileSizeHigh=0x0, nFileSizeLow=0xe70, dwReserved0=0x0, dwReserved1=0x0, cFileName="cBq3YiZO5mBKpb7HK3.gif", cAlternateFileName="CBQ3YI~1.GIF")) returned 1 [0088.459] FindNextFileW (in: hFindFile=0x381e80, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe61e1520, ftCreationTime.dwHighDateTime=0x1d5d906, ftLastAccessTime.dwLowDateTime=0x4d217b10, ftLastAccessTime.dwHighDateTime=0x1d5e12f, ftLastWriteTime.dwLowDateTime=0x4d217b10, ftLastWriteTime.dwHighDateTime=0x1d5e12f, nFileSizeHigh=0x0, nFileSizeLow=0x143b8, dwReserved0=0x0, dwReserved1=0x0, cFileName="EfftTM9vyjFXlwqKsjF.bmp", cAlternateFileName="EFFTTM~1.BMP")) returned 1 [0088.459] FindNextFileW (in: hFindFile=0x381e80, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x4b49f040, ftCreationTime.dwHighDateTime=0x1d5db6e, ftLastAccessTime.dwLowDateTime=0x866c26f0, ftLastAccessTime.dwHighDateTime=0x1d5dd73, ftLastWriteTime.dwLowDateTime=0x866c26f0, ftLastWriteTime.dwHighDateTime=0x1d5dd73, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="MqHlcYZXc1ykd8m-7zLx", cAlternateFileName="MQHLCY~1")) returned 1 [0088.459] FindNextFileW (in: hFindFile=0x381e80, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3a386740, ftCreationTime.dwHighDateTime=0x1d5d9e9, ftLastAccessTime.dwLowDateTime=0x543a11e0, ftLastAccessTime.dwHighDateTime=0x1d5d7b2, ftLastWriteTime.dwLowDateTime=0x543a11e0, ftLastWriteTime.dwHighDateTime=0x1d5d7b2, nFileSizeHigh=0x0, nFileSizeLow=0x1174b, dwReserved0=0x0, dwReserved1=0x0, cFileName="rQ40SPQ.bmp", cAlternateFileName="")) returned 1 [0088.459] FindNextFileW (in: hFindFile=0x381e80, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x24c57c10, ftCreationTime.dwHighDateTime=0x1d5e33d, ftLastAccessTime.dwLowDateTime=0x1e5d68f0, ftLastAccessTime.dwHighDateTime=0x1d5dc45, ftLastWriteTime.dwLowDateTime=0x1e5d68f0, ftLastWriteTime.dwHighDateTime=0x1d5dc45, nFileSizeHigh=0x0, nFileSizeLow=0xe328, dwReserved0=0x0, dwReserved1=0x0, cFileName="utBP6.gif", cAlternateFileName="")) returned 1 [0088.459] FindNextFileW (in: hFindFile=0x381e80, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5d984150, ftCreationTime.dwHighDateTime=0x1d5d909, ftLastAccessTime.dwLowDateTime=0x4144c9b0, ftLastAccessTime.dwHighDateTime=0x1d5e39f, ftLastWriteTime.dwLowDateTime=0x4144c9b0, ftLastWriteTime.dwHighDateTime=0x1d5e39f, nFileSizeHigh=0x0, nFileSizeLow=0xdcdc, dwReserved0=0x0, dwReserved1=0x0, cFileName="Uvon-ej5Wh.png", cAlternateFileName="UVON-E~1.PNG")) returned 1 [0088.459] FindNextFileW (in: hFindFile=0x381e80, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2d2e15f0, ftCreationTime.dwHighDateTime=0x1d5db96, ftLastAccessTime.dwLowDateTime=0x935e2ee0, ftLastAccessTime.dwHighDateTime=0x1d5e164, ftLastWriteTime.dwLowDateTime=0x935e2ee0, ftLastWriteTime.dwHighDateTime=0x1d5e164, nFileSizeHigh=0x0, nFileSizeLow=0x3681, dwReserved0=0x0, dwReserved1=0x0, cFileName="VQlz_RRY6WR.png", cAlternateFileName="VQLZ_R~1.PNG")) returned 1 [0088.459] FindNextFileW (in: hFindFile=0x381e80, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0088.459] FindClose (in: hFindFile=0x381e80 | out: hFindFile=0x381e80) returned 1 [0088.459] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e77c) returned 1 [0088.459] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e788) returned 1 [0088.460] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e7bc) returned 1 [0088.460] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\tZ02_j2HoUAEzAXcbrvF", nBufferLength=0x105, lpBuffer=0x31e2c4, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\tZ02_j2HoUAEzAXcbrvF", lpFilePart=0x0) returned 0x3b [0088.460] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\tZ02_j2HoUAEzAXcbrvF\\", nBufferLength=0x105, lpBuffer=0x31e298, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\tZ02_j2HoUAEzAXcbrvF\\", lpFilePart=0x0) returned 0x3c [0088.460] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\tZ02_j2HoUAEzAXcbrvF\\*", lpFindFileData=0x31e4e4 | out: lpFindFileData=0x31e4e4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8a765d60, ftCreationTime.dwHighDateTime=0x1d5d8b9, ftLastAccessTime.dwLowDateTime=0x9a95d60, ftLastAccessTime.dwHighDateTime=0x1d5db87, ftLastWriteTime.dwLowDateTime=0x9a95d60, ftLastWriteTime.dwHighDateTime=0x1d5db87, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x381e80 [0088.460] FindNextFileW (in: hFindFile=0x381e80, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8a765d60, ftCreationTime.dwHighDateTime=0x1d5d8b9, ftLastAccessTime.dwLowDateTime=0x9a95d60, ftLastAccessTime.dwHighDateTime=0x1d5db87, ftLastWriteTime.dwLowDateTime=0x9a95d60, ftLastWriteTime.dwHighDateTime=0x1d5db87, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0088.460] FindNextFileW (in: hFindFile=0x381e80, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x62ba4d20, ftCreationTime.dwHighDateTime=0x1d5e144, ftLastAccessTime.dwLowDateTime=0x6d03b350, ftLastAccessTime.dwHighDateTime=0x1d5e632, ftLastWriteTime.dwLowDateTime=0x6d03b350, ftLastWriteTime.dwHighDateTime=0x1d5e632, nFileSizeHigh=0x0, nFileSizeLow=0xa7e4, dwReserved0=0x0, dwReserved1=0x0, cFileName="Ab6fh6TA.bmp", cAlternateFileName="")) returned 1 [0088.460] FindNextFileW (in: hFindFile=0x381e80, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7afcf00, ftCreationTime.dwHighDateTime=0x1d5dad1, ftLastAccessTime.dwLowDateTime=0x51f61430, ftLastAccessTime.dwHighDateTime=0x1d5e309, ftLastWriteTime.dwLowDateTime=0x51f61430, ftLastWriteTime.dwHighDateTime=0x1d5e309, nFileSizeHigh=0x0, nFileSizeLow=0xe70, dwReserved0=0x0, dwReserved1=0x0, cFileName="cBq3YiZO5mBKpb7HK3.gif", cAlternateFileName="CBQ3YI~1.GIF")) returned 1 [0088.460] FindNextFileW (in: hFindFile=0x381e80, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe61e1520, ftCreationTime.dwHighDateTime=0x1d5d906, ftLastAccessTime.dwLowDateTime=0x4d217b10, ftLastAccessTime.dwHighDateTime=0x1d5e12f, ftLastWriteTime.dwLowDateTime=0x4d217b10, ftLastWriteTime.dwHighDateTime=0x1d5e12f, nFileSizeHigh=0x0, nFileSizeLow=0x143b8, dwReserved0=0x0, dwReserved1=0x0, cFileName="EfftTM9vyjFXlwqKsjF.bmp", cAlternateFileName="EFFTTM~1.BMP")) returned 1 [0088.460] FindNextFileW (in: hFindFile=0x381e80, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x4b49f040, ftCreationTime.dwHighDateTime=0x1d5db6e, ftLastAccessTime.dwLowDateTime=0x866c26f0, ftLastAccessTime.dwHighDateTime=0x1d5dd73, ftLastWriteTime.dwLowDateTime=0x866c26f0, ftLastWriteTime.dwHighDateTime=0x1d5dd73, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="MqHlcYZXc1ykd8m-7zLx", cAlternateFileName="MQHLCY~1")) returned 1 [0088.460] FindNextFileW (in: hFindFile=0x381e80, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3a386740, ftCreationTime.dwHighDateTime=0x1d5d9e9, ftLastAccessTime.dwLowDateTime=0x543a11e0, ftLastAccessTime.dwHighDateTime=0x1d5d7b2, ftLastWriteTime.dwLowDateTime=0x543a11e0, ftLastWriteTime.dwHighDateTime=0x1d5d7b2, nFileSizeHigh=0x0, nFileSizeLow=0x1174b, dwReserved0=0x0, dwReserved1=0x0, cFileName="rQ40SPQ.bmp", cAlternateFileName="")) returned 1 [0088.461] FindNextFileW (in: hFindFile=0x381e80, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x24c57c10, ftCreationTime.dwHighDateTime=0x1d5e33d, ftLastAccessTime.dwLowDateTime=0x1e5d68f0, ftLastAccessTime.dwHighDateTime=0x1d5dc45, ftLastWriteTime.dwLowDateTime=0x1e5d68f0, ftLastWriteTime.dwHighDateTime=0x1d5dc45, nFileSizeHigh=0x0, nFileSizeLow=0xe328, dwReserved0=0x0, dwReserved1=0x0, cFileName="utBP6.gif", cAlternateFileName="")) returned 1 [0088.461] FindNextFileW (in: hFindFile=0x381e80, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5d984150, ftCreationTime.dwHighDateTime=0x1d5d909, ftLastAccessTime.dwLowDateTime=0x4144c9b0, ftLastAccessTime.dwHighDateTime=0x1d5e39f, ftLastWriteTime.dwLowDateTime=0x4144c9b0, ftLastWriteTime.dwHighDateTime=0x1d5e39f, nFileSizeHigh=0x0, nFileSizeLow=0xdcdc, dwReserved0=0x0, dwReserved1=0x0, cFileName="Uvon-ej5Wh.png", cAlternateFileName="UVON-E~1.PNG")) returned 1 [0088.461] FindNextFileW (in: hFindFile=0x381e80, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2d2e15f0, ftCreationTime.dwHighDateTime=0x1d5db96, ftLastAccessTime.dwLowDateTime=0x935e2ee0, ftLastAccessTime.dwHighDateTime=0x1d5e164, ftLastWriteTime.dwLowDateTime=0x935e2ee0, ftLastWriteTime.dwHighDateTime=0x1d5e164, nFileSizeHigh=0x0, nFileSizeLow=0x3681, dwReserved0=0x0, dwReserved1=0x0, cFileName="VQlz_RRY6WR.png", cAlternateFileName="VQLZ_R~1.PNG")) returned 1 [0088.461] FindNextFileW (in: hFindFile=0x381e80, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2d2e15f0, ftCreationTime.dwHighDateTime=0x1d5db96, ftLastAccessTime.dwLowDateTime=0x935e2ee0, ftLastAccessTime.dwHighDateTime=0x1d5e164, ftLastWriteTime.dwLowDateTime=0x935e2ee0, ftLastWriteTime.dwHighDateTime=0x1d5e164, nFileSizeHigh=0x0, nFileSizeLow=0x3681, dwReserved0=0x0, dwReserved1=0x0, cFileName="VQlz_RRY6WR.png", cAlternateFileName="VQLZ_R~1.PNG")) returned 0 [0088.461] FindClose (in: hFindFile=0x381e80 | out: hFindFile=0x381e80) returned 1 [0088.461] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e77c) returned 1 [0088.461] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e788) returned 1 [0088.461] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\tZ02_j2HoUAEzAXcbrvF\\Ab6fh6TA.bmp", nBufferLength=0x105, lpBuffer=0x31e194, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\tZ02_j2HoUAEzAXcbrvF\\Ab6fh6TA.bmp", lpFilePart=0x0) returned 0x48 [0088.461] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e688) returned 1 [0088.461] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\tZ02_j2HoUAEzAXcbrvF\\Ab6fh6TA.bmp" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\pictures\\tz02_j2houaezaxcbrvf\\ab6fh6ta.bmp"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x178 [0088.461] GetFileType (hFile=0x178) returned 0x1 [0088.461] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e684) returned 1 [0088.461] GetFileType (hFile=0x178) returned 0x1 [0088.461] GetFileSize (in: hFile=0x178, lpFileSizeHigh=0x31e790 | out: lpFileSizeHigh=0x31e790*=0x0) returned 0xa7e4 [0088.462] ReadFile (in: hFile=0x178, lpBuffer=0x27ba788, nNumberOfBytesToRead=0xa7e4, lpNumberOfBytesRead=0x31e73c, lpOverlapped=0x0 | out: lpBuffer=0x27ba788*, lpNumberOfBytesRead=0x31e73c*=0xa7e4, lpOverlapped=0x0) returned 1 [0088.476] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\tZ02_j2HoUAEzAXcbrvF\\Ab6fh6TA.bmp", nBufferLength=0x105, lpBuffer=0x31e180, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\tZ02_j2HoUAEzAXcbrvF\\Ab6fh6TA.bmp", lpFilePart=0x0) returned 0x48 [0088.477] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e674) returned 1 [0088.477] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\tZ02_j2HoUAEzAXcbrvF\\Ab6fh6TA.bmp" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\pictures\\tz02_j2houaezaxcbrvf\\ab6fh6ta.bmp"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x178 [0088.478] GetFileType (hFile=0x178) returned 0x1 [0088.478] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e670) returned 1 [0088.478] GetFileType (hFile=0x178) returned 0x1 [0088.478] WriteFile (in: hFile=0x178, lpBuffer=0x2826d50*, nNumberOfBytesToWrite=0xa7f0, lpNumberOfBytesWritten=0x31e730, lpOverlapped=0x0 | out: lpBuffer=0x2826d50*, lpNumberOfBytesWritten=0x31e730*=0xa7f0, lpOverlapped=0x0) returned 1 [0088.479] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\tZ02_j2HoUAEzAXcbrvF\\Ab6fh6TA.bmp", nBufferLength=0x105, lpBuffer=0x31e2b4, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\tZ02_j2HoUAEzAXcbrvF\\Ab6fh6TA.bmp", lpFilePart=0x0) returned 0x48 [0088.479] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\tZ02_j2HoUAEzAXcbrvF\\Ab6fh6TA.bmp", nBufferLength=0x105, lpBuffer=0x31e2b4, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\tZ02_j2HoUAEzAXcbrvF\\Ab6fh6TA.bmp", lpFilePart=0x0) returned 0x48 [0088.479] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e714) returned 1 [0088.479] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\tZ02_j2HoUAEzAXcbrvF\\Ab6fh6TA.bmp" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\pictures\\tz02_j2houaezaxcbrvf\\ab6fh6ta.bmp"), fInfoLevelId=0x0, lpFileInformation=0x31e790 | out: lpFileInformation=0x31e790*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x62ba4d20, ftCreationTime.dwHighDateTime=0x1d5e144, ftLastAccessTime.dwLowDateTime=0x6d03b350, ftLastAccessTime.dwHighDateTime=0x1d5e632, ftLastWriteTime.dwLowDateTime=0x182db940, ftLastWriteTime.dwHighDateTime=0x1d6eb7f, nFileSizeHigh=0x0, nFileSizeLow=0xa7f0)) returned 1 [0088.479] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e710) returned 1 [0088.479] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\tZ02_j2HoUAEzAXcbrvF\\Ab6fh6TA.bmp" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\pictures\\tz02_j2houaezaxcbrvf\\ab6fh6ta.bmp"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\tZ02_j2HoUAEzAXcbrvF\\Ab6fh6TA.bmp" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\pictures\\tz02_j2houaezaxcbrvf\\ab6fh6ta.bmp")) returned 1 [0088.479] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\tZ02_j2HoUAEzAXcbrvF\\EfftTM9vyjFXlwqKsjF.bmp", nBufferLength=0x105, lpBuffer=0x31e194, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\tZ02_j2HoUAEzAXcbrvF\\EfftTM9vyjFXlwqKsjF.bmp", lpFilePart=0x0) returned 0x53 [0088.480] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e688) returned 1 [0088.480] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\tZ02_j2HoUAEzAXcbrvF\\EfftTM9vyjFXlwqKsjF.bmp" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\pictures\\tz02_j2houaezaxcbrvf\\effttm9vyjfxlwqksjf.bmp"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x178 [0088.480] GetFileType (hFile=0x178) returned 0x1 [0088.480] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e684) returned 1 [0088.480] GetFileType (hFile=0x178) returned 0x1 [0088.480] GetFileSize (in: hFile=0x178, lpFileSizeHigh=0x31e790 | out: lpFileSizeHigh=0x31e790*=0x0) returned 0x143b8 [0088.480] ReadFile (in: hFile=0x178, lpBuffer=0x283192c, nNumberOfBytesToRead=0x143b8, lpNumberOfBytesRead=0x31e73c, lpOverlapped=0x0 | out: lpBuffer=0x283192c*, lpNumberOfBytesRead=0x31e73c*=0x143b8, lpOverlapped=0x0) returned 1 [0088.525] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\tZ02_j2HoUAEzAXcbrvF\\EfftTM9vyjFXlwqKsjF.bmp", nBufferLength=0x105, lpBuffer=0x31e180, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\tZ02_j2HoUAEzAXcbrvF\\EfftTM9vyjFXlwqKsjF.bmp", lpFilePart=0x0) returned 0x53 [0088.525] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e674) returned 1 [0088.526] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\tZ02_j2HoUAEzAXcbrvF\\EfftTM9vyjFXlwqKsjF.bmp" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\pictures\\tz02_j2houaezaxcbrvf\\effttm9vyjfxlwqksjf.bmp"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x178 [0088.527] GetFileType (hFile=0x178) returned 0x1 [0088.527] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e670) returned 1 [0088.527] GetFileType (hFile=0x178) returned 0x1 [0088.527] WriteFile (in: hFile=0x178, lpBuffer=0x26c1e60*, nNumberOfBytesToWrite=0x143c0, lpNumberOfBytesWritten=0x31e730, lpOverlapped=0x0 | out: lpBuffer=0x26c1e60*, lpNumberOfBytesWritten=0x31e730*=0x143c0, lpOverlapped=0x0) returned 1 [0088.529] CloseHandle (hObject=0x178) returned 1 [0088.529] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\tZ02_j2HoUAEzAXcbrvF\\EfftTM9vyjFXlwqKsjF.bmp", nBufferLength=0x105, lpBuffer=0x31e2b4, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\tZ02_j2HoUAEzAXcbrvF\\EfftTM9vyjFXlwqKsjF.bmp", lpFilePart=0x0) returned 0x53 [0088.529] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\tZ02_j2HoUAEzAXcbrvF\\EfftTM9vyjFXlwqKsjF.bmp", nBufferLength=0x105, lpBuffer=0x31e2b4, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\tZ02_j2HoUAEzAXcbrvF\\EfftTM9vyjFXlwqKsjF.bmp", lpFilePart=0x0) returned 0x53 [0088.529] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e714) returned 1 [0088.529] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\tZ02_j2HoUAEzAXcbrvF\\EfftTM9vyjFXlwqKsjF.bmp" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\pictures\\tz02_j2houaezaxcbrvf\\effttm9vyjfxlwqksjf.bmp"), fInfoLevelId=0x0, lpFileInformation=0x31e790 | out: lpFileInformation=0x31e790*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe61e1520, ftCreationTime.dwHighDateTime=0x1d5d906, ftLastAccessTime.dwLowDateTime=0x4d217b10, ftLastAccessTime.dwHighDateTime=0x1d5e12f, ftLastWriteTime.dwLowDateTime=0x1834dd60, ftLastWriteTime.dwHighDateTime=0x1d6eb7f, nFileSizeHigh=0x0, nFileSizeLow=0x143c0)) returned 1 [0088.529] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e710) returned 1 [0088.529] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\tZ02_j2HoUAEzAXcbrvF\\EfftTM9vyjFXlwqKsjF.bmp" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\pictures\\tz02_j2houaezaxcbrvf\\effttm9vyjfxlwqksjf.bmp"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\tZ02_j2HoUAEzAXcbrvF\\EfftTM9vyjFXlwqKsjF.bmp" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\pictures\\tz02_j2houaezaxcbrvf\\effttm9vyjfxlwqksjf.bmp")) returned 1 [0088.529] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\tZ02_j2HoUAEzAXcbrvF\\rQ40SPQ.bmp", nBufferLength=0x105, lpBuffer=0x31e194, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\tZ02_j2HoUAEzAXcbrvF\\rQ40SPQ.bmp", lpFilePart=0x0) returned 0x47 [0088.529] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e688) returned 1 [0088.529] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\tZ02_j2HoUAEzAXcbrvF\\rQ40SPQ.bmp" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\pictures\\tz02_j2houaezaxcbrvf\\rq40spq.bmp"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x178 [0088.529] GetFileType (hFile=0x178) returned 0x1 [0088.529] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e684) returned 1 [0088.529] GetFileType (hFile=0x178) returned 0x1 [0088.529] GetFileSize (in: hFile=0x178, lpFileSizeHigh=0x31e790 | out: lpFileSizeHigh=0x31e790*=0x0) returned 0x1174b [0088.530] ReadFile (in: hFile=0x178, lpBuffer=0x26d6614, nNumberOfBytesToRead=0x1174b, lpNumberOfBytesRead=0x31e73c, lpOverlapped=0x0 | out: lpBuffer=0x26d6614*, lpNumberOfBytesRead=0x31e73c*=0x1174b, lpOverlapped=0x0) returned 1 [0088.531] CloseHandle (hObject=0x178) returned 1 [0088.546] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\tZ02_j2HoUAEzAXcbrvF\\rQ40SPQ.bmp", nBufferLength=0x105, lpBuffer=0x31e180, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\tZ02_j2HoUAEzAXcbrvF\\rQ40SPQ.bmp", lpFilePart=0x0) returned 0x47 [0088.547] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e674) returned 1 [0088.547] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\tZ02_j2HoUAEzAXcbrvF\\rQ40SPQ.bmp" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\pictures\\tz02_j2houaezaxcbrvf\\rq40spq.bmp"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x178 [0088.548] GetFileType (hFile=0x178) returned 0x1 [0088.548] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e670) returned 1 [0088.548] GetFileType (hFile=0x178) returned 0x1 [0088.548] WriteFile (in: hFile=0x178, lpBuffer=0x2757a00*, nNumberOfBytesToWrite=0x11750, lpNumberOfBytesWritten=0x31e730, lpOverlapped=0x0 | out: lpBuffer=0x2757a00*, lpNumberOfBytesWritten=0x31e730*=0x11750, lpOverlapped=0x0) returned 1 [0088.549] CloseHandle (hObject=0x178) returned 1 [0088.549] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\tZ02_j2HoUAEzAXcbrvF\\rQ40SPQ.bmp", nBufferLength=0x105, lpBuffer=0x31e2b4, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\tZ02_j2HoUAEzAXcbrvF\\rQ40SPQ.bmp", lpFilePart=0x0) returned 0x47 [0088.550] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\tZ02_j2HoUAEzAXcbrvF\\rQ40SPQ.bmp", nBufferLength=0x105, lpBuffer=0x31e2b4, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\tZ02_j2HoUAEzAXcbrvF\\rQ40SPQ.bmp", lpFilePart=0x0) returned 0x47 [0088.550] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e714) returned 1 [0088.550] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\tZ02_j2HoUAEzAXcbrvF\\rQ40SPQ.bmp" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\pictures\\tz02_j2houaezaxcbrvf\\rq40spq.bmp"), fInfoLevelId=0x0, lpFileInformation=0x31e790 | out: lpFileInformation=0x31e790*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3a386740, ftCreationTime.dwHighDateTime=0x1d5d9e9, ftLastAccessTime.dwLowDateTime=0x543a11e0, ftLastAccessTime.dwHighDateTime=0x1d5d7b2, ftLastWriteTime.dwLowDateTime=0x1839a020, ftLastWriteTime.dwHighDateTime=0x1d6eb7f, nFileSizeHigh=0x0, nFileSizeLow=0x11750)) returned 1 [0088.550] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e710) returned 1 [0088.550] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\tZ02_j2HoUAEzAXcbrvF\\rQ40SPQ.bmp" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\pictures\\tz02_j2houaezaxcbrvf\\rq40spq.bmp"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\tZ02_j2HoUAEzAXcbrvF\\rQ40SPQ.bmp" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\pictures\\tz02_j2houaezaxcbrvf\\rq40spq.bmp")) returned 1 [0088.550] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\tZ02_j2HoUAEzAXcbrvF\\Uvon-ej5Wh.png", nBufferLength=0x105, lpBuffer=0x31e194, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\tZ02_j2HoUAEzAXcbrvF\\Uvon-ej5Wh.png", lpFilePart=0x0) returned 0x4a [0088.550] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e688) returned 1 [0088.550] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\tZ02_j2HoUAEzAXcbrvF\\Uvon-ej5Wh.png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\pictures\\tz02_j2houaezaxcbrvf\\uvon-ej5wh.png"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x178 [0088.550] GetFileType (hFile=0x178) returned 0x1 [0088.550] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e684) returned 1 [0088.550] GetFileType (hFile=0x178) returned 0x1 [0088.550] GetFileSize (in: hFile=0x178, lpFileSizeHigh=0x31e790 | out: lpFileSizeHigh=0x31e790*=0x0) returned 0xdcdc [0088.550] ReadFile (in: hFile=0x178, lpBuffer=0x276950c, nNumberOfBytesToRead=0xdcdc, lpNumberOfBytesRead=0x31e73c, lpOverlapped=0x0 | out: lpBuffer=0x276950c*, lpNumberOfBytesRead=0x31e73c*=0xdcdc, lpOverlapped=0x0) returned 1 [0088.551] CloseHandle (hObject=0x178) returned 1 [0088.565] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\tZ02_j2HoUAEzAXcbrvF\\Uvon-ej5Wh.png", nBufferLength=0x105, lpBuffer=0x31e180, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\tZ02_j2HoUAEzAXcbrvF\\Uvon-ej5Wh.png", lpFilePart=0x0) returned 0x4a [0088.565] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e674) returned 1 [0088.566] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\tZ02_j2HoUAEzAXcbrvF\\Uvon-ej5Wh.png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\pictures\\tz02_j2houaezaxcbrvf\\uvon-ej5wh.png"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x178 [0088.567] GetFileType (hFile=0x178) returned 0x1 [0088.567] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e670) returned 1 [0088.567] GetFileType (hFile=0x178) returned 0x1 [0088.567] WriteFile (in: hFile=0x178, lpBuffer=0x27df9a4*, nNumberOfBytesToWrite=0xdce0, lpNumberOfBytesWritten=0x31e730, lpOverlapped=0x0 | out: lpBuffer=0x27df9a4*, lpNumberOfBytesWritten=0x31e730*=0xdce0, lpOverlapped=0x0) returned 1 [0088.568] CloseHandle (hObject=0x178) returned 1 [0088.568] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\tZ02_j2HoUAEzAXcbrvF\\Uvon-ej5Wh.png", nBufferLength=0x105, lpBuffer=0x31e2b4, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\tZ02_j2HoUAEzAXcbrvF\\Uvon-ej5Wh.png", lpFilePart=0x0) returned 0x4a [0088.568] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\tZ02_j2HoUAEzAXcbrvF\\Uvon-ej5Wh.png", nBufferLength=0x105, lpBuffer=0x31e2b4, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\tZ02_j2HoUAEzAXcbrvF\\Uvon-ej5Wh.png", lpFilePart=0x0) returned 0x4a [0088.568] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e714) returned 1 [0088.568] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\tZ02_j2HoUAEzAXcbrvF\\Uvon-ej5Wh.png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\pictures\\tz02_j2houaezaxcbrvf\\uvon-ej5wh.png"), fInfoLevelId=0x0, lpFileInformation=0x31e790 | out: lpFileInformation=0x31e790*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5d984150, ftCreationTime.dwHighDateTime=0x1d5d909, ftLastAccessTime.dwLowDateTime=0x4144c9b0, ftLastAccessTime.dwHighDateTime=0x1d5e39f, ftLastWriteTime.dwLowDateTime=0x183c0180, ftLastWriteTime.dwHighDateTime=0x1d6eb7f, nFileSizeHigh=0x0, nFileSizeLow=0xdce0)) returned 1 [0088.568] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e710) returned 1 [0088.568] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\tZ02_j2HoUAEzAXcbrvF\\Uvon-ej5Wh.png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\pictures\\tz02_j2houaezaxcbrvf\\uvon-ej5wh.png"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\tZ02_j2HoUAEzAXcbrvF\\Uvon-ej5Wh.png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\pictures\\tz02_j2houaezaxcbrvf\\uvon-ej5wh.png")) returned 1 [0088.569] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\tZ02_j2HoUAEzAXcbrvF\\VQlz_RRY6WR.png", nBufferLength=0x105, lpBuffer=0x31e194, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\tZ02_j2HoUAEzAXcbrvF\\VQlz_RRY6WR.png", lpFilePart=0x0) returned 0x4b [0088.569] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e688) returned 1 [0088.569] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\tZ02_j2HoUAEzAXcbrvF\\VQlz_RRY6WR.png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\pictures\\tz02_j2houaezaxcbrvf\\vqlz_rry6wr.png"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x178 [0088.569] GetFileType (hFile=0x178) returned 0x1 [0088.569] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e684) returned 1 [0088.569] GetFileType (hFile=0x178) returned 0x1 [0088.569] GetFileSize (in: hFile=0x178, lpFileSizeHigh=0x31e790 | out: lpFileSizeHigh=0x31e790*=0x0) returned 0x3681 [0088.569] ReadFile (in: hFile=0x178, lpBuffer=0x27eda48, nNumberOfBytesToRead=0x3681, lpNumberOfBytesRead=0x31e73c, lpOverlapped=0x0 | out: lpBuffer=0x27eda48*, lpNumberOfBytesRead=0x31e73c*=0x3681, lpOverlapped=0x0) returned 1 [0088.570] CloseHandle (hObject=0x178) returned 1 [0088.587] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\tZ02_j2HoUAEzAXcbrvF\\VQlz_RRY6WR.png", nBufferLength=0x105, lpBuffer=0x31e180, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\tZ02_j2HoUAEzAXcbrvF\\VQlz_RRY6WR.png", lpFilePart=0x0) returned 0x4b [0088.587] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e674) returned 1 [0088.587] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\tZ02_j2HoUAEzAXcbrvF\\VQlz_RRY6WR.png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\pictures\\tz02_j2houaezaxcbrvf\\vqlz_rry6wr.png"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x178 [0088.588] GetFileType (hFile=0x178) returned 0x1 [0088.588] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e670) returned 1 [0088.588] GetFileType (hFile=0x178) returned 0x1 [0088.588] WriteFile (in: hFile=0x178, lpBuffer=0x2635b48*, nNumberOfBytesToWrite=0x3690, lpNumberOfBytesWritten=0x31e730, lpOverlapped=0x0 | out: lpBuffer=0x2635b48*, lpNumberOfBytesWritten=0x31e730*=0x3690, lpOverlapped=0x0) returned 1 [0088.589] CloseHandle (hObject=0x178) returned 1 [0088.589] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\tZ02_j2HoUAEzAXcbrvF\\VQlz_RRY6WR.png", nBufferLength=0x105, lpBuffer=0x31e2b4, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\tZ02_j2HoUAEzAXcbrvF\\VQlz_RRY6WR.png", lpFilePart=0x0) returned 0x4b [0088.589] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\tZ02_j2HoUAEzAXcbrvF\\VQlz_RRY6WR.png", nBufferLength=0x105, lpBuffer=0x31e2b4, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\tZ02_j2HoUAEzAXcbrvF\\VQlz_RRY6WR.png", lpFilePart=0x0) returned 0x4b [0088.589] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e714) returned 1 [0088.590] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\tZ02_j2HoUAEzAXcbrvF\\VQlz_RRY6WR.png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\pictures\\tz02_j2houaezaxcbrvf\\vqlz_rry6wr.png"), fInfoLevelId=0x0, lpFileInformation=0x31e790 | out: lpFileInformation=0x31e790*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2d2e15f0, ftCreationTime.dwHighDateTime=0x1d5db96, ftLastAccessTime.dwLowDateTime=0x935e2ee0, ftLastAccessTime.dwHighDateTime=0x1d5e164, ftLastWriteTime.dwLowDateTime=0x183e62e0, ftLastWriteTime.dwHighDateTime=0x1d6eb7f, nFileSizeHigh=0x0, nFileSizeLow=0x3690)) returned 1 [0088.590] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e710) returned 1 [0088.590] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\tZ02_j2HoUAEzAXcbrvF\\VQlz_RRY6WR.png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\pictures\\tz02_j2houaezaxcbrvf\\vqlz_rry6wr.png"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\tZ02_j2HoUAEzAXcbrvF\\VQlz_RRY6WR.png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\pictures\\tz02_j2houaezaxcbrvf\\vqlz_rry6wr.png")) returned 1 [0088.590] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e744) returned 1 [0088.590] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\tZ02_j2HoUAEzAXcbrvF\\MqHlcYZXc1ykd8m-7zLx", nBufferLength=0x105, lpBuffer=0x31e24c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\tZ02_j2HoUAEzAXcbrvF\\MqHlcYZXc1ykd8m-7zLx", lpFilePart=0x0) returned 0x50 [0088.590] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\tZ02_j2HoUAEzAXcbrvF\\MqHlcYZXc1ykd8m-7zLx\\", nBufferLength=0x105, lpBuffer=0x31e220, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\tZ02_j2HoUAEzAXcbrvF\\MqHlcYZXc1ykd8m-7zLx\\", lpFilePart=0x0) returned 0x51 [0088.590] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\tZ02_j2HoUAEzAXcbrvF\\MqHlcYZXc1ykd8m-7zLx\\*", lpFindFileData=0x31e46c | out: lpFindFileData=0x31e46c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x4b49f040, ftCreationTime.dwHighDateTime=0x1d5db6e, ftLastAccessTime.dwLowDateTime=0x866c26f0, ftLastAccessTime.dwHighDateTime=0x1d5dd73, ftLastWriteTime.dwLowDateTime=0x866c26f0, ftLastWriteTime.dwHighDateTime=0x1d5dd73, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x381e80 [0088.590] FindNextFileW (in: hFindFile=0x381e80, lpFindFileData=0x31e47c | out: lpFindFileData=0x31e47c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x4b49f040, ftCreationTime.dwHighDateTime=0x1d5db6e, ftLastAccessTime.dwLowDateTime=0x866c26f0, ftLastAccessTime.dwHighDateTime=0x1d5dd73, ftLastWriteTime.dwLowDateTime=0x866c26f0, ftLastWriteTime.dwHighDateTime=0x1d5dd73, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0088.590] FindNextFileW (in: hFindFile=0x381e80, lpFindFileData=0x31e47c | out: lpFindFileData=0x31e47c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6ea5c500, ftCreationTime.dwHighDateTime=0x1d5dc36, ftLastAccessTime.dwLowDateTime=0xe1a8ed80, ftLastAccessTime.dwHighDateTime=0x1d5dfa5, ftLastWriteTime.dwLowDateTime=0xe1a8ed80, ftLastWriteTime.dwHighDateTime=0x1d5dfa5, nFileSizeHigh=0x0, nFileSizeLow=0xa932, dwReserved0=0x0, dwReserved1=0x0, cFileName="-C9Sja0mJwrJKSu90.jpg", cAlternateFileName="-C9SJA~1.JPG")) returned 1 [0088.591] FindNextFileW (in: hFindFile=0x381e80, lpFindFileData=0x31e47c | out: lpFindFileData=0x31e47c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9e3bac00, ftCreationTime.dwHighDateTime=0x1d5e1a2, ftLastAccessTime.dwLowDateTime=0xdf989ac0, ftLastAccessTime.dwHighDateTime=0x1d5e4ed, ftLastWriteTime.dwLowDateTime=0xdf989ac0, ftLastWriteTime.dwHighDateTime=0x1d5e4ed, nFileSizeHigh=0x0, nFileSizeLow=0x125e6, dwReserved0=0x0, dwReserved1=0x0, cFileName="35bcBrdvj.gif", cAlternateFileName="35BCBR~1.GIF")) returned 1 [0088.591] FindNextFileW (in: hFindFile=0x381e80, lpFindFileData=0x31e47c | out: lpFindFileData=0x31e47c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa9fed1a0, ftCreationTime.dwHighDateTime=0x1d5dc63, ftLastAccessTime.dwLowDateTime=0x41dbdc60, ftLastAccessTime.dwHighDateTime=0x1d5de77, ftLastWriteTime.dwLowDateTime=0x41dbdc60, ftLastWriteTime.dwHighDateTime=0x1d5de77, nFileSizeHigh=0x0, nFileSizeLow=0x16239, dwReserved0=0x0, dwReserved1=0x0, cFileName="6rxb4QwV9CI1MR.jpg", cAlternateFileName="6RXB4Q~1.JPG")) returned 1 [0088.591] FindNextFileW (in: hFindFile=0x381e80, lpFindFileData=0x31e47c | out: lpFindFileData=0x31e47c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa12f5450, ftCreationTime.dwHighDateTime=0x1d5e375, ftLastAccessTime.dwLowDateTime=0x10d21c30, ftLastAccessTime.dwHighDateTime=0x1d5dec0, ftLastWriteTime.dwLowDateTime=0x10d21c30, ftLastWriteTime.dwHighDateTime=0x1d5dec0, nFileSizeHigh=0x0, nFileSizeLow=0x15e99, dwReserved0=0x0, dwReserved1=0x0, cFileName="awnCnvVOwwTZEf.png", cAlternateFileName="AWNCNV~1.PNG")) returned 1 [0088.591] FindNextFileW (in: hFindFile=0x381e80, lpFindFileData=0x31e47c | out: lpFindFileData=0x31e47c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf5893630, ftCreationTime.dwHighDateTime=0x1d5e675, ftLastAccessTime.dwLowDateTime=0xb59e9aa0, ftLastAccessTime.dwHighDateTime=0x1d5e202, ftLastWriteTime.dwLowDateTime=0xb59e9aa0, ftLastWriteTime.dwHighDateTime=0x1d5e202, nFileSizeHigh=0x0, nFileSizeLow=0x1349d, dwReserved0=0x0, dwReserved1=0x0, cFileName="dF-VG_t_vGxzSuUsEnW3.jpg", cAlternateFileName="DF-VG_~1.JPG")) returned 1 [0088.591] FindNextFileW (in: hFindFile=0x381e80, lpFindFileData=0x31e47c | out: lpFindFileData=0x31e47c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x16cbeeb0, ftCreationTime.dwHighDateTime=0x1d5de19, ftLastAccessTime.dwLowDateTime=0xfca92120, ftLastAccessTime.dwHighDateTime=0x1d5d8f4, ftLastWriteTime.dwLowDateTime=0xfca92120, ftLastWriteTime.dwHighDateTime=0x1d5d8f4, nFileSizeHigh=0x0, nFileSizeLow=0x83b5, dwReserved0=0x0, dwReserved1=0x0, cFileName="egNz9w_.jpg", cAlternateFileName="")) returned 1 [0088.591] FindNextFileW (in: hFindFile=0x381e80, lpFindFileData=0x31e47c | out: lpFindFileData=0x31e47c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf1deaf10, ftCreationTime.dwHighDateTime=0x1d5e715, ftLastAccessTime.dwLowDateTime=0xaf7f6190, ftLastAccessTime.dwHighDateTime=0x1d5e103, ftLastWriteTime.dwLowDateTime=0xaf7f6190, ftLastWriteTime.dwHighDateTime=0x1d5e103, nFileSizeHigh=0x0, nFileSizeLow=0xea73, dwReserved0=0x0, dwReserved1=0x0, cFileName="FlnuIIzR61ZMgS.gif", cAlternateFileName="FLNUII~1.GIF")) returned 1 [0088.591] FindNextFileW (in: hFindFile=0x381e80, lpFindFileData=0x31e47c | out: lpFindFileData=0x31e47c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7c2c5350, ftCreationTime.dwHighDateTime=0x1d5dd8b, ftLastAccessTime.dwLowDateTime=0x88406230, ftLastAccessTime.dwHighDateTime=0x1d5e01a, ftLastWriteTime.dwLowDateTime=0x88406230, ftLastWriteTime.dwHighDateTime=0x1d5e01a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="fs6ZyJDVW7MWb", cAlternateFileName="FS6ZYJ~1")) returned 1 [0088.591] FindNextFileW (in: hFindFile=0x381e80, lpFindFileData=0x31e47c | out: lpFindFileData=0x31e47c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe38b4a10, ftCreationTime.dwHighDateTime=0x1d5e1be, ftLastAccessTime.dwLowDateTime=0x6298c790, ftLastAccessTime.dwHighDateTime=0x1d5e0e5, ftLastWriteTime.dwLowDateTime=0x6298c790, ftLastWriteTime.dwHighDateTime=0x1d5e0e5, nFileSizeHigh=0x0, nFileSizeLow=0xbf60, dwReserved0=0x0, dwReserved1=0x0, cFileName="i8FtK.gif", cAlternateFileName="")) returned 1 [0088.592] FindNextFileW (in: hFindFile=0x381e80, lpFindFileData=0x31e47c | out: lpFindFileData=0x31e47c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x92e87bd0, ftCreationTime.dwHighDateTime=0x1d5e076, ftLastAccessTime.dwLowDateTime=0x74c5de20, ftLastAccessTime.dwHighDateTime=0x1d5e3e8, ftLastWriteTime.dwLowDateTime=0x74c5de20, ftLastWriteTime.dwHighDateTime=0x1d5e3e8, nFileSizeHigh=0x0, nFileSizeLow=0x1535c, dwReserved0=0x0, dwReserved1=0x0, cFileName="jQ4M83F3MGD67ytT.png", cAlternateFileName="JQ4M83~1.PNG")) returned 1 [0088.592] FindNextFileW (in: hFindFile=0x381e80, lpFindFileData=0x31e47c | out: lpFindFileData=0x31e47c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf7eb8870, ftCreationTime.dwHighDateTime=0x1d5dc6a, ftLastAccessTime.dwLowDateTime=0x97a848b0, ftLastAccessTime.dwHighDateTime=0x1d5d871, ftLastWriteTime.dwLowDateTime=0x97a848b0, ftLastWriteTime.dwHighDateTime=0x1d5d871, nFileSizeHigh=0x0, nFileSizeLow=0x170c7, dwReserved0=0x0, dwReserved1=0x0, cFileName="So0XvzJy8QKL.bmp", cAlternateFileName="SO0XVZ~1.BMP")) returned 1 [0088.592] FindNextFileW (in: hFindFile=0x381e80, lpFindFileData=0x31e47c | out: lpFindFileData=0x31e47c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x33267850, ftCreationTime.dwHighDateTime=0x1d5dda1, ftLastAccessTime.dwLowDateTime=0x5db25620, ftLastAccessTime.dwHighDateTime=0x1d5e3d7, ftLastWriteTime.dwLowDateTime=0x5db25620, ftLastWriteTime.dwHighDateTime=0x1d5e3d7, nFileSizeHigh=0x0, nFileSizeLow=0x14886, dwReserved0=0x0, dwReserved1=0x0, cFileName="T9 LZd.png", cAlternateFileName="T9LZD~1.PNG")) returned 1 [0088.592] FindNextFileW (in: hFindFile=0x381e80, lpFindFileData=0x31e47c | out: lpFindFileData=0x31e47c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x42521860, ftCreationTime.dwHighDateTime=0x1d5d7d5, ftLastAccessTime.dwLowDateTime=0x1197be20, ftLastAccessTime.dwHighDateTime=0x1d5de68, ftLastWriteTime.dwLowDateTime=0x1197be20, ftLastWriteTime.dwHighDateTime=0x1d5de68, nFileSizeHigh=0x0, nFileSizeLow=0xe29c, dwReserved0=0x0, dwReserved1=0x0, cFileName="UAUORTL.gif", cAlternateFileName="")) returned 1 [0088.592] FindNextFileW (in: hFindFile=0x381e80, lpFindFileData=0x31e47c | out: lpFindFileData=0x31e47c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xeeae5c40, ftCreationTime.dwHighDateTime=0x1d5db18, ftLastAccessTime.dwLowDateTime=0x4b54df50, ftLastAccessTime.dwHighDateTime=0x1d5da06, ftLastWriteTime.dwLowDateTime=0x4b54df50, ftLastWriteTime.dwHighDateTime=0x1d5da06, nFileSizeHigh=0x0, nFileSizeLow=0x8cb7, dwReserved0=0x0, dwReserved1=0x0, cFileName="wmGhH6LXjHSc.bmp", cAlternateFileName="WMGHH6~1.BMP")) returned 1 [0088.592] FindNextFileW (in: hFindFile=0x381e80, lpFindFileData=0x31e47c | out: lpFindFileData=0x31e47c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x163169d0, ftCreationTime.dwHighDateTime=0x1d5d82e, ftLastAccessTime.dwLowDateTime=0x649394c0, ftLastAccessTime.dwHighDateTime=0x1d5e749, ftLastWriteTime.dwLowDateTime=0x649394c0, ftLastWriteTime.dwHighDateTime=0x1d5e749, nFileSizeHigh=0x0, nFileSizeLow=0x2a82, dwReserved0=0x0, dwReserved1=0x0, cFileName="WUwVH33W.png", cAlternateFileName="")) returned 1 [0088.592] FindNextFileW (in: hFindFile=0x381e80, lpFindFileData=0x31e47c | out: lpFindFileData=0x31e47c*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0088.592] FindClose (in: hFindFile=0x381e80 | out: hFindFile=0x381e80) returned 1 [0088.592] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e704) returned 1 [0088.592] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e710) returned 1 [0088.592] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e744) returned 1 [0088.593] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\tZ02_j2HoUAEzAXcbrvF\\MqHlcYZXc1ykd8m-7zLx", nBufferLength=0x105, lpBuffer=0x31e24c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\tZ02_j2HoUAEzAXcbrvF\\MqHlcYZXc1ykd8m-7zLx", lpFilePart=0x0) returned 0x50 [0088.593] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\tZ02_j2HoUAEzAXcbrvF\\MqHlcYZXc1ykd8m-7zLx\\", nBufferLength=0x105, lpBuffer=0x31e220, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\tZ02_j2HoUAEzAXcbrvF\\MqHlcYZXc1ykd8m-7zLx\\", lpFilePart=0x0) returned 0x51 [0088.593] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\tZ02_j2HoUAEzAXcbrvF\\MqHlcYZXc1ykd8m-7zLx\\*", lpFindFileData=0x31e46c | out: lpFindFileData=0x31e46c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x4b49f040, ftCreationTime.dwHighDateTime=0x1d5db6e, ftLastAccessTime.dwLowDateTime=0x866c26f0, ftLastAccessTime.dwHighDateTime=0x1d5dd73, ftLastWriteTime.dwLowDateTime=0x866c26f0, ftLastWriteTime.dwHighDateTime=0x1d5dd73, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x381e80 [0088.593] FindNextFileW (in: hFindFile=0x381e80, lpFindFileData=0x31e47c | out: lpFindFileData=0x31e47c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x4b49f040, ftCreationTime.dwHighDateTime=0x1d5db6e, ftLastAccessTime.dwLowDateTime=0x866c26f0, ftLastAccessTime.dwHighDateTime=0x1d5dd73, ftLastWriteTime.dwLowDateTime=0x866c26f0, ftLastWriteTime.dwHighDateTime=0x1d5dd73, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0088.593] FindNextFileW (in: hFindFile=0x381e80, lpFindFileData=0x31e47c | out: lpFindFileData=0x31e47c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6ea5c500, ftCreationTime.dwHighDateTime=0x1d5dc36, ftLastAccessTime.dwLowDateTime=0xe1a8ed80, ftLastAccessTime.dwHighDateTime=0x1d5dfa5, ftLastWriteTime.dwLowDateTime=0xe1a8ed80, ftLastWriteTime.dwHighDateTime=0x1d5dfa5, nFileSizeHigh=0x0, nFileSizeLow=0xa932, dwReserved0=0x0, dwReserved1=0x0, cFileName="-C9Sja0mJwrJKSu90.jpg", cAlternateFileName="-C9SJA~1.JPG")) returned 1 [0088.593] FindNextFileW (in: hFindFile=0x381e80, lpFindFileData=0x31e47c | out: lpFindFileData=0x31e47c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9e3bac00, ftCreationTime.dwHighDateTime=0x1d5e1a2, ftLastAccessTime.dwLowDateTime=0xdf989ac0, ftLastAccessTime.dwHighDateTime=0x1d5e4ed, ftLastWriteTime.dwLowDateTime=0xdf989ac0, ftLastWriteTime.dwHighDateTime=0x1d5e4ed, nFileSizeHigh=0x0, nFileSizeLow=0x125e6, dwReserved0=0x0, dwReserved1=0x0, cFileName="35bcBrdvj.gif", cAlternateFileName="35BCBR~1.GIF")) returned 1 [0088.593] FindNextFileW (in: hFindFile=0x381e80, lpFindFileData=0x31e47c | out: lpFindFileData=0x31e47c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa9fed1a0, ftCreationTime.dwHighDateTime=0x1d5dc63, ftLastAccessTime.dwLowDateTime=0x41dbdc60, ftLastAccessTime.dwHighDateTime=0x1d5de77, ftLastWriteTime.dwLowDateTime=0x41dbdc60, ftLastWriteTime.dwHighDateTime=0x1d5de77, nFileSizeHigh=0x0, nFileSizeLow=0x16239, dwReserved0=0x0, dwReserved1=0x0, cFileName="6rxb4QwV9CI1MR.jpg", cAlternateFileName="6RXB4Q~1.JPG")) returned 1 [0088.593] FindNextFileW (in: hFindFile=0x381e80, lpFindFileData=0x31e47c | out: lpFindFileData=0x31e47c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa12f5450, ftCreationTime.dwHighDateTime=0x1d5e375, ftLastAccessTime.dwLowDateTime=0x10d21c30, ftLastAccessTime.dwHighDateTime=0x1d5dec0, ftLastWriteTime.dwLowDateTime=0x10d21c30, ftLastWriteTime.dwHighDateTime=0x1d5dec0, nFileSizeHigh=0x0, nFileSizeLow=0x15e99, dwReserved0=0x0, dwReserved1=0x0, cFileName="awnCnvVOwwTZEf.png", cAlternateFileName="AWNCNV~1.PNG")) returned 1 [0088.594] FindNextFileW (in: hFindFile=0x381e80, lpFindFileData=0x31e47c | out: lpFindFileData=0x31e47c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf5893630, ftCreationTime.dwHighDateTime=0x1d5e675, ftLastAccessTime.dwLowDateTime=0xb59e9aa0, ftLastAccessTime.dwHighDateTime=0x1d5e202, ftLastWriteTime.dwLowDateTime=0xb59e9aa0, ftLastWriteTime.dwHighDateTime=0x1d5e202, nFileSizeHigh=0x0, nFileSizeLow=0x1349d, dwReserved0=0x0, dwReserved1=0x0, cFileName="dF-VG_t_vGxzSuUsEnW3.jpg", cAlternateFileName="DF-VG_~1.JPG")) returned 1 [0088.594] FindNextFileW (in: hFindFile=0x381e80, lpFindFileData=0x31e47c | out: lpFindFileData=0x31e47c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x16cbeeb0, ftCreationTime.dwHighDateTime=0x1d5de19, ftLastAccessTime.dwLowDateTime=0xfca92120, ftLastAccessTime.dwHighDateTime=0x1d5d8f4, ftLastWriteTime.dwLowDateTime=0xfca92120, ftLastWriteTime.dwHighDateTime=0x1d5d8f4, nFileSizeHigh=0x0, nFileSizeLow=0x83b5, dwReserved0=0x0, dwReserved1=0x0, cFileName="egNz9w_.jpg", cAlternateFileName="")) returned 1 [0088.594] FindNextFileW (in: hFindFile=0x381e80, lpFindFileData=0x31e47c | out: lpFindFileData=0x31e47c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf1deaf10, ftCreationTime.dwHighDateTime=0x1d5e715, ftLastAccessTime.dwLowDateTime=0xaf7f6190, ftLastAccessTime.dwHighDateTime=0x1d5e103, ftLastWriteTime.dwLowDateTime=0xaf7f6190, ftLastWriteTime.dwHighDateTime=0x1d5e103, nFileSizeHigh=0x0, nFileSizeLow=0xea73, dwReserved0=0x0, dwReserved1=0x0, cFileName="FlnuIIzR61ZMgS.gif", cAlternateFileName="FLNUII~1.GIF")) returned 1 [0088.594] FindNextFileW (in: hFindFile=0x381e80, lpFindFileData=0x31e47c | out: lpFindFileData=0x31e47c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7c2c5350, ftCreationTime.dwHighDateTime=0x1d5dd8b, ftLastAccessTime.dwLowDateTime=0x88406230, ftLastAccessTime.dwHighDateTime=0x1d5e01a, ftLastWriteTime.dwLowDateTime=0x88406230, ftLastWriteTime.dwHighDateTime=0x1d5e01a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="fs6ZyJDVW7MWb", cAlternateFileName="FS6ZYJ~1")) returned 1 [0088.594] FindNextFileW (in: hFindFile=0x381e80, lpFindFileData=0x31e47c | out: lpFindFileData=0x31e47c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe38b4a10, ftCreationTime.dwHighDateTime=0x1d5e1be, ftLastAccessTime.dwLowDateTime=0x6298c790, ftLastAccessTime.dwHighDateTime=0x1d5e0e5, ftLastWriteTime.dwLowDateTime=0x6298c790, ftLastWriteTime.dwHighDateTime=0x1d5e0e5, nFileSizeHigh=0x0, nFileSizeLow=0xbf60, dwReserved0=0x0, dwReserved1=0x0, cFileName="i8FtK.gif", cAlternateFileName="")) returned 1 [0088.594] FindNextFileW (in: hFindFile=0x381e80, lpFindFileData=0x31e47c | out: lpFindFileData=0x31e47c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x92e87bd0, ftCreationTime.dwHighDateTime=0x1d5e076, ftLastAccessTime.dwLowDateTime=0x74c5de20, ftLastAccessTime.dwHighDateTime=0x1d5e3e8, ftLastWriteTime.dwLowDateTime=0x74c5de20, ftLastWriteTime.dwHighDateTime=0x1d5e3e8, nFileSizeHigh=0x0, nFileSizeLow=0x1535c, dwReserved0=0x0, dwReserved1=0x0, cFileName="jQ4M83F3MGD67ytT.png", cAlternateFileName="JQ4M83~1.PNG")) returned 1 [0088.594] FindNextFileW (in: hFindFile=0x381e80, lpFindFileData=0x31e47c | out: lpFindFileData=0x31e47c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf7eb8870, ftCreationTime.dwHighDateTime=0x1d5dc6a, ftLastAccessTime.dwLowDateTime=0x97a848b0, ftLastAccessTime.dwHighDateTime=0x1d5d871, ftLastWriteTime.dwLowDateTime=0x97a848b0, ftLastWriteTime.dwHighDateTime=0x1d5d871, nFileSizeHigh=0x0, nFileSizeLow=0x170c7, dwReserved0=0x0, dwReserved1=0x0, cFileName="So0XvzJy8QKL.bmp", cAlternateFileName="SO0XVZ~1.BMP")) returned 1 [0088.595] FindNextFileW (in: hFindFile=0x381e80, lpFindFileData=0x31e47c | out: lpFindFileData=0x31e47c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x33267850, ftCreationTime.dwHighDateTime=0x1d5dda1, ftLastAccessTime.dwLowDateTime=0x5db25620, ftLastAccessTime.dwHighDateTime=0x1d5e3d7, ftLastWriteTime.dwLowDateTime=0x5db25620, ftLastWriteTime.dwHighDateTime=0x1d5e3d7, nFileSizeHigh=0x0, nFileSizeLow=0x14886, dwReserved0=0x0, dwReserved1=0x0, cFileName="T9 LZd.png", cAlternateFileName="T9LZD~1.PNG")) returned 1 [0088.595] FindNextFileW (in: hFindFile=0x381e80, lpFindFileData=0x31e47c | out: lpFindFileData=0x31e47c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x42521860, ftCreationTime.dwHighDateTime=0x1d5d7d5, ftLastAccessTime.dwLowDateTime=0x1197be20, ftLastAccessTime.dwHighDateTime=0x1d5de68, ftLastWriteTime.dwLowDateTime=0x1197be20, ftLastWriteTime.dwHighDateTime=0x1d5de68, nFileSizeHigh=0x0, nFileSizeLow=0xe29c, dwReserved0=0x0, dwReserved1=0x0, cFileName="UAUORTL.gif", cAlternateFileName="")) returned 1 [0088.595] FindNextFileW (in: hFindFile=0x381e80, lpFindFileData=0x31e47c | out: lpFindFileData=0x31e47c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xeeae5c40, ftCreationTime.dwHighDateTime=0x1d5db18, ftLastAccessTime.dwLowDateTime=0x4b54df50, ftLastAccessTime.dwHighDateTime=0x1d5da06, ftLastWriteTime.dwLowDateTime=0x4b54df50, ftLastWriteTime.dwHighDateTime=0x1d5da06, nFileSizeHigh=0x0, nFileSizeLow=0x8cb7, dwReserved0=0x0, dwReserved1=0x0, cFileName="wmGhH6LXjHSc.bmp", cAlternateFileName="WMGHH6~1.BMP")) returned 1 [0088.595] FindNextFileW (in: hFindFile=0x381e80, lpFindFileData=0x31e47c | out: lpFindFileData=0x31e47c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x163169d0, ftCreationTime.dwHighDateTime=0x1d5d82e, ftLastAccessTime.dwLowDateTime=0x649394c0, ftLastAccessTime.dwHighDateTime=0x1d5e749, ftLastWriteTime.dwLowDateTime=0x649394c0, ftLastWriteTime.dwHighDateTime=0x1d5e749, nFileSizeHigh=0x0, nFileSizeLow=0x2a82, dwReserved0=0x0, dwReserved1=0x0, cFileName="WUwVH33W.png", cAlternateFileName="")) returned 1 [0088.595] FindNextFileW (in: hFindFile=0x381e80, lpFindFileData=0x31e47c | out: lpFindFileData=0x31e47c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x163169d0, ftCreationTime.dwHighDateTime=0x1d5d82e, ftLastAccessTime.dwLowDateTime=0x649394c0, ftLastAccessTime.dwHighDateTime=0x1d5e749, ftLastWriteTime.dwLowDateTime=0x649394c0, ftLastWriteTime.dwHighDateTime=0x1d5e749, nFileSizeHigh=0x0, nFileSizeLow=0x2a82, dwReserved0=0x0, dwReserved1=0x0, cFileName="WUwVH33W.png", cAlternateFileName="")) returned 0 [0088.595] FindClose (in: hFindFile=0x381e80 | out: hFindFile=0x381e80) returned 1 [0088.595] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e704) returned 1 [0088.595] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e710) returned 1 [0088.595] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\tZ02_j2HoUAEzAXcbrvF\\MqHlcYZXc1ykd8m-7zLx\\-C9Sja0mJwrJKSu90.jpg", nBufferLength=0x105, lpBuffer=0x31e11c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\tZ02_j2HoUAEzAXcbrvF\\MqHlcYZXc1ykd8m-7zLx\\-C9Sja0mJwrJKSu90.jpg", lpFilePart=0x0) returned 0x66 [0088.595] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e610) returned 1 [0088.595] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\tZ02_j2HoUAEzAXcbrvF\\MqHlcYZXc1ykd8m-7zLx\\-C9Sja0mJwrJKSu90.jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\pictures\\tz02_j2houaezaxcbrvf\\mqhlcyzxc1ykd8m-7zlx\\-c9sja0mjwrjksu90.jpg"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x178 [0088.596] GetFileType (hFile=0x178) returned 0x1 [0088.596] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e60c) returned 1 [0088.596] GetFileType (hFile=0x178) returned 0x1 [0088.596] GetFileSize (in: hFile=0x178, lpFileSizeHigh=0x31e718 | out: lpFileSizeHigh=0x31e718*=0x0) returned 0xa932 [0088.596] ReadFile (in: hFile=0x178, lpBuffer=0x263edf8, nNumberOfBytesToRead=0xa932, lpNumberOfBytesRead=0x31e6c4, lpOverlapped=0x0 | out: lpBuffer=0x263edf8*, lpNumberOfBytesRead=0x31e6c4*=0xa932, lpOverlapped=0x0) returned 1 [0088.597] CloseHandle (hObject=0x178) returned 1 [0088.634] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\tZ02_j2HoUAEzAXcbrvF\\MqHlcYZXc1ykd8m-7zLx\\-C9Sja0mJwrJKSu90.jpg", nBufferLength=0x105, lpBuffer=0x31e108, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\tZ02_j2HoUAEzAXcbrvF\\MqHlcYZXc1ykd8m-7zLx\\-C9Sja0mJwrJKSu90.jpg", lpFilePart=0x0) returned 0x66 [0088.634] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e5fc) returned 1 [0088.634] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\tZ02_j2HoUAEzAXcbrvF\\MqHlcYZXc1ykd8m-7zLx\\-C9Sja0mJwrJKSu90.jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\pictures\\tz02_j2houaezaxcbrvf\\mqhlcyzxc1ykd8m-7zlx\\-c9sja0mjwrjksu90.jpg"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x178 [0088.635] GetFileType (hFile=0x178) returned 0x1 [0088.635] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e5f8) returned 1 [0088.635] GetFileType (hFile=0x178) returned 0x1 [0088.636] WriteFile (in: hFile=0x178, lpBuffer=0x26ab910*, nNumberOfBytesToWrite=0xa940, lpNumberOfBytesWritten=0x31e6b8, lpOverlapped=0x0 | out: lpBuffer=0x26ab910*, lpNumberOfBytesWritten=0x31e6b8*=0xa940, lpOverlapped=0x0) returned 1 [0088.637] CloseHandle (hObject=0x178) returned 1 [0088.637] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\tZ02_j2HoUAEzAXcbrvF\\MqHlcYZXc1ykd8m-7zLx\\-C9Sja0mJwrJKSu90.jpg", nBufferLength=0x105, lpBuffer=0x31e23c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\tZ02_j2HoUAEzAXcbrvF\\MqHlcYZXc1ykd8m-7zLx\\-C9Sja0mJwrJKSu90.jpg", lpFilePart=0x0) returned 0x66 [0088.637] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\tZ02_j2HoUAEzAXcbrvF\\MqHlcYZXc1ykd8m-7zLx\\-C9Sja0mJwrJKSu90.jpg", nBufferLength=0x105, lpBuffer=0x31e23c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\tZ02_j2HoUAEzAXcbrvF\\MqHlcYZXc1ykd8m-7zLx\\-C9Sja0mJwrJKSu90.jpg", lpFilePart=0x0) returned 0x66 [0088.637] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e69c) returned 1 [0088.637] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\tZ02_j2HoUAEzAXcbrvF\\MqHlcYZXc1ykd8m-7zLx\\-C9Sja0mJwrJKSu90.jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\pictures\\tz02_j2houaezaxcbrvf\\mqhlcyzxc1ykd8m-7zlx\\-c9sja0mjwrjksu90.jpg"), fInfoLevelId=0x0, lpFileInformation=0x31e718 | out: lpFileInformation=0x31e718*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6ea5c500, ftCreationTime.dwHighDateTime=0x1d5dc36, ftLastAccessTime.dwLowDateTime=0xe1a8ed80, ftLastAccessTime.dwHighDateTime=0x1d5dfa5, ftLastWriteTime.dwLowDateTime=0x18458700, ftLastWriteTime.dwHighDateTime=0x1d6eb7f, nFileSizeHigh=0x0, nFileSizeLow=0xa940)) returned 1 [0088.637] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e698) returned 1 [0088.637] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\tZ02_j2HoUAEzAXcbrvF\\MqHlcYZXc1ykd8m-7zLx\\-C9Sja0mJwrJKSu90.jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\pictures\\tz02_j2houaezaxcbrvf\\mqhlcyzxc1ykd8m-7zlx\\-c9sja0mjwrjksu90.jpg"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\tZ02_j2HoUAEzAXcbrvF\\MqHlcYZXc1ykd8m-7zLx\\-C9Sja0mJwrJKSu90.jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\pictures\\tz02_j2houaezaxcbrvf\\mqhlcyzxc1ykd8m-7zlx\\-c9sja0mjwrjksu90.jpg")) returned 1 [0088.637] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\tZ02_j2HoUAEzAXcbrvF\\MqHlcYZXc1ykd8m-7zLx\\6rxb4QwV9CI1MR.jpg", nBufferLength=0x105, lpBuffer=0x31e11c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\tZ02_j2HoUAEzAXcbrvF\\MqHlcYZXc1ykd8m-7zLx\\6rxb4QwV9CI1MR.jpg", lpFilePart=0x0) returned 0x63 [0088.638] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e610) returned 1 [0088.638] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\tZ02_j2HoUAEzAXcbrvF\\MqHlcYZXc1ykd8m-7zLx\\6rxb4QwV9CI1MR.jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\pictures\\tz02_j2houaezaxcbrvf\\mqhlcyzxc1ykd8m-7zlx\\6rxb4qwv9ci1mr.jpg"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x178 [0088.638] GetFileType (hFile=0x178) returned 0x1 [0088.638] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e60c) returned 1 [0088.638] GetFileType (hFile=0x178) returned 0x1 [0088.638] GetFileSize (in: hFile=0x178, lpFileSizeHigh=0x31e718 | out: lpFileSizeHigh=0x31e718*=0x0) returned 0x16239 [0088.638] ReadFile (in: hFile=0x178, lpBuffer=0x362e730, nNumberOfBytesToRead=0x16239, lpNumberOfBytesRead=0x31e6c4, lpOverlapped=0x0 | out: lpBuffer=0x362e730*, lpNumberOfBytesRead=0x31e6c4*=0x16239, lpOverlapped=0x0) returned 1 [0088.640] CloseHandle (hObject=0x178) returned 1 [0088.659] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\tZ02_j2HoUAEzAXcbrvF\\MqHlcYZXc1ykd8m-7zLx\\6rxb4QwV9CI1MR.jpg", nBufferLength=0x105, lpBuffer=0x31e108, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\tZ02_j2HoUAEzAXcbrvF\\MqHlcYZXc1ykd8m-7zLx\\6rxb4QwV9CI1MR.jpg", lpFilePart=0x0) returned 0x63 [0088.659] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e5fc) returned 1 [0088.659] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\tZ02_j2HoUAEzAXcbrvF\\MqHlcYZXc1ykd8m-7zLx\\6rxb4QwV9CI1MR.jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\pictures\\tz02_j2houaezaxcbrvf\\mqhlcyzxc1ykd8m-7zlx\\6rxb4qwv9ci1mr.jpg"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x178 [0088.660] GetFileType (hFile=0x178) returned 0x1 [0088.660] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e5f8) returned 1 [0088.660] GetFileType (hFile=0x178) returned 0x1 [0088.660] WriteFile (in: hFile=0x178, lpBuffer=0x369d2a8*, nNumberOfBytesToWrite=0x16240, lpNumberOfBytesWritten=0x31e6b8, lpOverlapped=0x0 | out: lpBuffer=0x369d2a8*, lpNumberOfBytesWritten=0x31e6b8*=0x16240, lpOverlapped=0x0) returned 1 [0088.662] CloseHandle (hObject=0x178) returned 1 [0088.662] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\tZ02_j2HoUAEzAXcbrvF\\MqHlcYZXc1ykd8m-7zLx\\6rxb4QwV9CI1MR.jpg", nBufferLength=0x105, lpBuffer=0x31e23c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\tZ02_j2HoUAEzAXcbrvF\\MqHlcYZXc1ykd8m-7zLx\\6rxb4QwV9CI1MR.jpg", lpFilePart=0x0) returned 0x63 [0088.662] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\tZ02_j2HoUAEzAXcbrvF\\MqHlcYZXc1ykd8m-7zLx\\6rxb4QwV9CI1MR.jpg", nBufferLength=0x105, lpBuffer=0x31e23c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\tZ02_j2HoUAEzAXcbrvF\\MqHlcYZXc1ykd8m-7zLx\\6rxb4QwV9CI1MR.jpg", lpFilePart=0x0) returned 0x63 [0088.662] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e69c) returned 1 [0088.662] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\tZ02_j2HoUAEzAXcbrvF\\MqHlcYZXc1ykd8m-7zLx\\6rxb4QwV9CI1MR.jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\pictures\\tz02_j2houaezaxcbrvf\\mqhlcyzxc1ykd8m-7zlx\\6rxb4qwv9ci1mr.jpg"), fInfoLevelId=0x0, lpFileInformation=0x31e718 | out: lpFileInformation=0x31e718*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa9fed1a0, ftCreationTime.dwHighDateTime=0x1d5dc63, ftLastAccessTime.dwLowDateTime=0x41dbdc60, ftLastAccessTime.dwHighDateTime=0x1d5de77, ftLastWriteTime.dwLowDateTime=0x184a49c0, ftLastWriteTime.dwHighDateTime=0x1d6eb7f, nFileSizeHigh=0x0, nFileSizeLow=0x16240)) returned 1 [0088.662] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e698) returned 1 [0088.662] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\tZ02_j2HoUAEzAXcbrvF\\MqHlcYZXc1ykd8m-7zLx\\6rxb4QwV9CI1MR.jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\pictures\\tz02_j2houaezaxcbrvf\\mqhlcyzxc1ykd8m-7zlx\\6rxb4qwv9ci1mr.jpg"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\tZ02_j2HoUAEzAXcbrvF\\MqHlcYZXc1ykd8m-7zLx\\6rxb4QwV9CI1MR.jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\pictures\\tz02_j2houaezaxcbrvf\\mqhlcyzxc1ykd8m-7zlx\\6rxb4qwv9ci1mr.jpg")) returned 1 [0088.662] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\tZ02_j2HoUAEzAXcbrvF\\MqHlcYZXc1ykd8m-7zLx\\awnCnvVOwwTZEf.png", nBufferLength=0x105, lpBuffer=0x31e11c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\tZ02_j2HoUAEzAXcbrvF\\MqHlcYZXc1ykd8m-7zLx\\awnCnvVOwwTZEf.png", lpFilePart=0x0) returned 0x63 [0088.663] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e610) returned 1 [0088.663] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\tZ02_j2HoUAEzAXcbrvF\\MqHlcYZXc1ykd8m-7zLx\\awnCnvVOwwTZEf.png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\pictures\\tz02_j2houaezaxcbrvf\\mqhlcyzxc1ykd8m-7zlx\\awncnvvowwtzef.png"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x178 [0088.663] GetFileType (hFile=0x178) returned 0x1 [0088.663] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e60c) returned 1 [0088.663] GetFileType (hFile=0x178) returned 0x1 [0088.663] GetFileSize (in: hFile=0x178, lpFileSizeHigh=0x31e718 | out: lpFileSizeHigh=0x31e718*=0x0) returned 0x15e99 [0088.663] ReadFile (in: hFile=0x178, lpBuffer=0x36b3508, nNumberOfBytesToRead=0x15e99, lpNumberOfBytesRead=0x31e6c4, lpOverlapped=0x0 | out: lpBuffer=0x36b3508*, lpNumberOfBytesRead=0x31e6c4*=0x15e99, lpOverlapped=0x0) returned 1 [0088.665] CloseHandle (hObject=0x178) returned 1 [0088.682] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\tZ02_j2HoUAEzAXcbrvF\\MqHlcYZXc1ykd8m-7zLx\\awnCnvVOwwTZEf.png", nBufferLength=0x105, lpBuffer=0x31e108, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\tZ02_j2HoUAEzAXcbrvF\\MqHlcYZXc1ykd8m-7zLx\\awnCnvVOwwTZEf.png", lpFilePart=0x0) returned 0x63 [0088.682] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e5fc) returned 1 [0088.682] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\tZ02_j2HoUAEzAXcbrvF\\MqHlcYZXc1ykd8m-7zLx\\awnCnvVOwwTZEf.png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\pictures\\tz02_j2houaezaxcbrvf\\mqhlcyzxc1ykd8m-7zlx\\awncnvvowwtzef.png"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x178 [0088.684] GetFileType (hFile=0x178) returned 0x1 [0088.684] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e5f8) returned 1 [0088.684] GetFileType (hFile=0x178) returned 0x1 [0088.684] WriteFile (in: hFile=0x178, lpBuffer=0x3720e60*, nNumberOfBytesToWrite=0x15ea0, lpNumberOfBytesWritten=0x31e6b8, lpOverlapped=0x0 | out: lpBuffer=0x3720e60*, lpNumberOfBytesWritten=0x31e6b8*=0x15ea0, lpOverlapped=0x0) returned 1 [0088.686] CloseHandle (hObject=0x178) returned 1 [0088.686] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\tZ02_j2HoUAEzAXcbrvF\\MqHlcYZXc1ykd8m-7zLx\\awnCnvVOwwTZEf.png", nBufferLength=0x105, lpBuffer=0x31e23c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\tZ02_j2HoUAEzAXcbrvF\\MqHlcYZXc1ykd8m-7zLx\\awnCnvVOwwTZEf.png", lpFilePart=0x0) returned 0x63 [0088.686] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\tZ02_j2HoUAEzAXcbrvF\\MqHlcYZXc1ykd8m-7zLx\\awnCnvVOwwTZEf.png", nBufferLength=0x105, lpBuffer=0x31e23c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\tZ02_j2HoUAEzAXcbrvF\\MqHlcYZXc1ykd8m-7zLx\\awnCnvVOwwTZEf.png", lpFilePart=0x0) returned 0x63 [0088.687] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e69c) returned 1 [0088.687] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\tZ02_j2HoUAEzAXcbrvF\\MqHlcYZXc1ykd8m-7zLx\\awnCnvVOwwTZEf.png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\pictures\\tz02_j2houaezaxcbrvf\\mqhlcyzxc1ykd8m-7zlx\\awncnvvowwtzef.png"), fInfoLevelId=0x0, lpFileInformation=0x31e718 | out: lpFileInformation=0x31e718*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa12f5450, ftCreationTime.dwHighDateTime=0x1d5e375, ftLastAccessTime.dwLowDateTime=0x10d21c30, ftLastAccessTime.dwHighDateTime=0x1d5dec0, ftLastWriteTime.dwLowDateTime=0x184cab20, ftLastWriteTime.dwHighDateTime=0x1d6eb7f, nFileSizeHigh=0x0, nFileSizeLow=0x15ea0)) returned 1 [0088.687] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e698) returned 1 [0088.687] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\tZ02_j2HoUAEzAXcbrvF\\MqHlcYZXc1ykd8m-7zLx\\awnCnvVOwwTZEf.png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\pictures\\tz02_j2houaezaxcbrvf\\mqhlcyzxc1ykd8m-7zlx\\awncnvvowwtzef.png"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\tZ02_j2HoUAEzAXcbrvF\\MqHlcYZXc1ykd8m-7zLx\\awnCnvVOwwTZEf.png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\pictures\\tz02_j2houaezaxcbrvf\\mqhlcyzxc1ykd8m-7zlx\\awncnvvowwtzef.png")) returned 1 [0088.687] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\tZ02_j2HoUAEzAXcbrvF\\MqHlcYZXc1ykd8m-7zLx\\dF-VG_t_vGxzSuUsEnW3.jpg", nBufferLength=0x105, lpBuffer=0x31e11c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\tZ02_j2HoUAEzAXcbrvF\\MqHlcYZXc1ykd8m-7zLx\\dF-VG_t_vGxzSuUsEnW3.jpg", lpFilePart=0x0) returned 0x69 [0088.687] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e610) returned 1 [0088.687] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\tZ02_j2HoUAEzAXcbrvF\\MqHlcYZXc1ykd8m-7zLx\\dF-VG_t_vGxzSuUsEnW3.jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\pictures\\tz02_j2houaezaxcbrvf\\mqhlcyzxc1ykd8m-7zlx\\df-vg_t_vgxzsuusenw3.jpg"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x178 [0088.687] GetFileType (hFile=0x178) returned 0x1 [0088.687] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e60c) returned 1 [0088.687] GetFileType (hFile=0x178) returned 0x1 [0088.687] GetFileSize (in: hFile=0x178, lpFileSizeHigh=0x31e718 | out: lpFileSizeHigh=0x31e718*=0x0) returned 0x1349d [0088.688] ReadFile (in: hFile=0x178, lpBuffer=0x2750c38, nNumberOfBytesToRead=0x1349d, lpNumberOfBytesRead=0x31e6c4, lpOverlapped=0x0 | out: lpBuffer=0x2750c38*, lpNumberOfBytesRead=0x31e6c4*=0x1349d, lpOverlapped=0x0) returned 1 [0088.689] CloseHandle (hObject=0x178) returned 1 [0088.704] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\tZ02_j2HoUAEzAXcbrvF\\MqHlcYZXc1ykd8m-7zLx\\dF-VG_t_vGxzSuUsEnW3.jpg", nBufferLength=0x105, lpBuffer=0x31e108, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\tZ02_j2HoUAEzAXcbrvF\\MqHlcYZXc1ykd8m-7zLx\\dF-VG_t_vGxzSuUsEnW3.jpg", lpFilePart=0x0) returned 0x69 [0088.704] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e5fc) returned 1 [0088.704] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\tZ02_j2HoUAEzAXcbrvF\\MqHlcYZXc1ykd8m-7zLx\\dF-VG_t_vGxzSuUsEnW3.jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\pictures\\tz02_j2houaezaxcbrvf\\mqhlcyzxc1ykd8m-7zlx\\df-vg_t_vgxzsuusenw3.jpg"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x178 [0088.706] GetFileType (hFile=0x178) returned 0x1 [0088.706] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e5f8) returned 1 [0088.706] GetFileType (hFile=0x178) returned 0x1 [0088.706] WriteFile (in: hFile=0x178, lpBuffer=0x27d7814*, nNumberOfBytesToWrite=0x134a0, lpNumberOfBytesWritten=0x31e6b8, lpOverlapped=0x0 | out: lpBuffer=0x27d7814*, lpNumberOfBytesWritten=0x31e6b8*=0x134a0, lpOverlapped=0x0) returned 1 [0088.707] CloseHandle (hObject=0x178) returned 1 [0088.708] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\tZ02_j2HoUAEzAXcbrvF\\MqHlcYZXc1ykd8m-7zLx\\dF-VG_t_vGxzSuUsEnW3.jpg", nBufferLength=0x105, lpBuffer=0x31e23c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\tZ02_j2HoUAEzAXcbrvF\\MqHlcYZXc1ykd8m-7zLx\\dF-VG_t_vGxzSuUsEnW3.jpg", lpFilePart=0x0) returned 0x69 [0088.708] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\tZ02_j2HoUAEzAXcbrvF\\MqHlcYZXc1ykd8m-7zLx\\dF-VG_t_vGxzSuUsEnW3.jpg", nBufferLength=0x105, lpBuffer=0x31e23c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\tZ02_j2HoUAEzAXcbrvF\\MqHlcYZXc1ykd8m-7zLx\\dF-VG_t_vGxzSuUsEnW3.jpg", lpFilePart=0x0) returned 0x69 [0088.708] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e69c) returned 1 [0088.708] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\tZ02_j2HoUAEzAXcbrvF\\MqHlcYZXc1ykd8m-7zLx\\dF-VG_t_vGxzSuUsEnW3.jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\pictures\\tz02_j2houaezaxcbrvf\\mqhlcyzxc1ykd8m-7zlx\\df-vg_t_vgxzsuusenw3.jpg"), fInfoLevelId=0x0, lpFileInformation=0x31e718 | out: lpFileInformation=0x31e718*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf5893630, ftCreationTime.dwHighDateTime=0x1d5e675, ftLastAccessTime.dwLowDateTime=0xb59e9aa0, ftLastAccessTime.dwHighDateTime=0x1d5e202, ftLastWriteTime.dwLowDateTime=0x18516de0, ftLastWriteTime.dwHighDateTime=0x1d6eb7f, nFileSizeHigh=0x0, nFileSizeLow=0x134a0)) returned 1 [0088.708] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e698) returned 1 [0088.708] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\tZ02_j2HoUAEzAXcbrvF\\MqHlcYZXc1ykd8m-7zLx\\dF-VG_t_vGxzSuUsEnW3.jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\pictures\\tz02_j2houaezaxcbrvf\\mqhlcyzxc1ykd8m-7zlx\\df-vg_t_vgxzsuusenw3.jpg"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\tZ02_j2HoUAEzAXcbrvF\\MqHlcYZXc1ykd8m-7zLx\\dF-VG_t_vGxzSuUsEnW3.jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\pictures\\tz02_j2houaezaxcbrvf\\mqhlcyzxc1ykd8m-7zlx\\df-vg_t_vgxzsuusenw3.jpg")) returned 1 [0088.708] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\tZ02_j2HoUAEzAXcbrvF\\MqHlcYZXc1ykd8m-7zLx\\egNz9w_.jpg", nBufferLength=0x105, lpBuffer=0x31e11c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\tZ02_j2HoUAEzAXcbrvF\\MqHlcYZXc1ykd8m-7zLx\\egNz9w_.jpg", lpFilePart=0x0) returned 0x5c [0088.708] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e610) returned 1 [0088.708] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\tZ02_j2HoUAEzAXcbrvF\\MqHlcYZXc1ykd8m-7zLx\\egNz9w_.jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\pictures\\tz02_j2houaezaxcbrvf\\mqhlcyzxc1ykd8m-7zlx\\egnz9w_.jpg"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x178 [0088.708] GetFileType (hFile=0x178) returned 0x1 [0088.708] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e60c) returned 1 [0088.708] GetFileType (hFile=0x178) returned 0x1 [0088.708] GetFileSize (in: hFile=0x178, lpFileSizeHigh=0x31e718 | out: lpFileSizeHigh=0x31e718*=0x0) returned 0x83b5 [0088.708] ReadFile (in: hFile=0x178, lpBuffer=0x27eb15c, nNumberOfBytesToRead=0x83b5, lpNumberOfBytesRead=0x31e6c4, lpOverlapped=0x0 | out: lpBuffer=0x27eb15c*, lpNumberOfBytesRead=0x31e6c4*=0x83b5, lpOverlapped=0x0) returned 1 [0088.709] CloseHandle (hObject=0x178) returned 1 [0088.747] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\tZ02_j2HoUAEzAXcbrvF\\MqHlcYZXc1ykd8m-7zLx\\egNz9w_.jpg", nBufferLength=0x105, lpBuffer=0x31e108, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\tZ02_j2HoUAEzAXcbrvF\\MqHlcYZXc1ykd8m-7zLx\\egNz9w_.jpg", lpFilePart=0x0) returned 0x5c [0088.748] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e5fc) returned 1 [0088.748] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\tZ02_j2HoUAEzAXcbrvF\\MqHlcYZXc1ykd8m-7zLx\\egNz9w_.jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\pictures\\tz02_j2houaezaxcbrvf\\mqhlcyzxc1ykd8m-7zlx\\egnz9w_.jpg"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x178 [0088.749] GetFileType (hFile=0x178) returned 0x1 [0088.749] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e5f8) returned 1 [0088.749] GetFileType (hFile=0x178) returned 0x1 [0088.749] WriteFile (in: hFile=0x178, lpBuffer=0x266a754*, nNumberOfBytesToWrite=0x83c0, lpNumberOfBytesWritten=0x31e6b8, lpOverlapped=0x0 | out: lpBuffer=0x266a754*, lpNumberOfBytesWritten=0x31e6b8*=0x83c0, lpOverlapped=0x0) returned 1 [0088.750] CloseHandle (hObject=0x178) returned 1 [0088.750] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\tZ02_j2HoUAEzAXcbrvF\\MqHlcYZXc1ykd8m-7zLx\\egNz9w_.jpg", nBufferLength=0x105, lpBuffer=0x31e23c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\tZ02_j2HoUAEzAXcbrvF\\MqHlcYZXc1ykd8m-7zLx\\egNz9w_.jpg", lpFilePart=0x0) returned 0x5c [0088.750] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\tZ02_j2HoUAEzAXcbrvF\\MqHlcYZXc1ykd8m-7zLx\\egNz9w_.jpg", nBufferLength=0x105, lpBuffer=0x31e23c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\tZ02_j2HoUAEzAXcbrvF\\MqHlcYZXc1ykd8m-7zLx\\egNz9w_.jpg", lpFilePart=0x0) returned 0x5c [0088.750] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e69c) returned 1 [0088.750] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\tZ02_j2HoUAEzAXcbrvF\\MqHlcYZXc1ykd8m-7zLx\\egNz9w_.jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\pictures\\tz02_j2houaezaxcbrvf\\mqhlcyzxc1ykd8m-7zlx\\egnz9w_.jpg"), fInfoLevelId=0x0, lpFileInformation=0x31e718 | out: lpFileInformation=0x31e718*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x16cbeeb0, ftCreationTime.dwHighDateTime=0x1d5de19, ftLastAccessTime.dwLowDateTime=0xfca92120, ftLastAccessTime.dwHighDateTime=0x1d5d8f4, ftLastWriteTime.dwLowDateTime=0x18589200, ftLastWriteTime.dwHighDateTime=0x1d6eb7f, nFileSizeHigh=0x0, nFileSizeLow=0x83c0)) returned 1 [0088.750] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e698) returned 1 [0088.750] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\tZ02_j2HoUAEzAXcbrvF\\MqHlcYZXc1ykd8m-7zLx\\egNz9w_.jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\pictures\\tz02_j2houaezaxcbrvf\\mqhlcyzxc1ykd8m-7zlx\\egnz9w_.jpg"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\tZ02_j2HoUAEzAXcbrvF\\MqHlcYZXc1ykd8m-7zLx\\egNz9w_.jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\pictures\\tz02_j2houaezaxcbrvf\\mqhlcyzxc1ykd8m-7zlx\\egnz9w_.jpg")) returned 1 [0088.751] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\tZ02_j2HoUAEzAXcbrvF\\MqHlcYZXc1ykd8m-7zLx\\jQ4M83F3MGD67ytT.png", nBufferLength=0x105, lpBuffer=0x31e11c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\tZ02_j2HoUAEzAXcbrvF\\MqHlcYZXc1ykd8m-7zLx\\jQ4M83F3MGD67ytT.png", lpFilePart=0x0) returned 0x65 [0088.751] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e610) returned 1 [0088.751] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\tZ02_j2HoUAEzAXcbrvF\\MqHlcYZXc1ykd8m-7zLx\\jQ4M83F3MGD67ytT.png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\pictures\\tz02_j2houaezaxcbrvf\\mqhlcyzxc1ykd8m-7zlx\\jq4m83f3mgd67ytt.png"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x178 [0088.751] GetFileType (hFile=0x178) returned 0x1 [0088.751] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e60c) returned 1 [0088.751] GetFileType (hFile=0x178) returned 0x1 [0088.751] GetFileSize (in: hFile=0x178, lpFileSizeHigh=0x31e718 | out: lpFileSizeHigh=0x31e718*=0x0) returned 0x1535c [0088.751] ReadFile (in: hFile=0x178, lpBuffer=0x375d660, nNumberOfBytesToRead=0x1535c, lpNumberOfBytesRead=0x31e6c4, lpOverlapped=0x0 | out: lpBuffer=0x375d660*, lpNumberOfBytesRead=0x31e6c4*=0x1535c, lpOverlapped=0x0) returned 1 [0088.753] CloseHandle (hObject=0x178) returned 1 [0088.770] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\tZ02_j2HoUAEzAXcbrvF\\MqHlcYZXc1ykd8m-7zLx\\jQ4M83F3MGD67ytT.png", nBufferLength=0x105, lpBuffer=0x31e108, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\tZ02_j2HoUAEzAXcbrvF\\MqHlcYZXc1ykd8m-7zLx\\jQ4M83F3MGD67ytT.png", lpFilePart=0x0) returned 0x65 [0088.770] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e5fc) returned 1 [0088.770] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\tZ02_j2HoUAEzAXcbrvF\\MqHlcYZXc1ykd8m-7zLx\\jQ4M83F3MGD67ytT.png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\pictures\\tz02_j2houaezaxcbrvf\\mqhlcyzxc1ykd8m-7zlx\\jq4m83f3mgd67ytt.png"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x178 [0088.772] GetFileType (hFile=0x178) returned 0x1 [0088.772] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e5f8) returned 1 [0088.772] GetFileType (hFile=0x178) returned 0x1 [0088.772] WriteFile (in: hFile=0x178, lpBuffer=0x37c7778*, nNumberOfBytesToWrite=0x15360, lpNumberOfBytesWritten=0x31e6b8, lpOverlapped=0x0 | out: lpBuffer=0x37c7778*, lpNumberOfBytesWritten=0x31e6b8*=0x15360, lpOverlapped=0x0) returned 1 [0088.773] CloseHandle (hObject=0x178) returned 1 [0088.774] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\tZ02_j2HoUAEzAXcbrvF\\MqHlcYZXc1ykd8m-7zLx\\jQ4M83F3MGD67ytT.png", nBufferLength=0x105, lpBuffer=0x31e23c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\tZ02_j2HoUAEzAXcbrvF\\MqHlcYZXc1ykd8m-7zLx\\jQ4M83F3MGD67ytT.png", lpFilePart=0x0) returned 0x65 [0088.774] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\tZ02_j2HoUAEzAXcbrvF\\MqHlcYZXc1ykd8m-7zLx\\jQ4M83F3MGD67ytT.png", nBufferLength=0x105, lpBuffer=0x31e23c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\tZ02_j2HoUAEzAXcbrvF\\MqHlcYZXc1ykd8m-7zLx\\jQ4M83F3MGD67ytT.png", lpFilePart=0x0) returned 0x65 [0088.774] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e69c) returned 1 [0088.774] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\tZ02_j2HoUAEzAXcbrvF\\MqHlcYZXc1ykd8m-7zLx\\jQ4M83F3MGD67ytT.png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\pictures\\tz02_j2houaezaxcbrvf\\mqhlcyzxc1ykd8m-7zlx\\jq4m83f3mgd67ytt.png"), fInfoLevelId=0x0, lpFileInformation=0x31e718 | out: lpFileInformation=0x31e718*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x92e87bd0, ftCreationTime.dwHighDateTime=0x1d5e076, ftLastAccessTime.dwLowDateTime=0x74c5de20, ftLastAccessTime.dwHighDateTime=0x1d5e3e8, ftLastWriteTime.dwLowDateTime=0x185af360, ftLastWriteTime.dwHighDateTime=0x1d6eb7f, nFileSizeHigh=0x0, nFileSizeLow=0x15360)) returned 1 [0088.774] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e698) returned 1 [0088.774] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\tZ02_j2HoUAEzAXcbrvF\\MqHlcYZXc1ykd8m-7zLx\\jQ4M83F3MGD67ytT.png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\pictures\\tz02_j2houaezaxcbrvf\\mqhlcyzxc1ykd8m-7zlx\\jq4m83f3mgd67ytt.png"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\tZ02_j2HoUAEzAXcbrvF\\MqHlcYZXc1ykd8m-7zLx\\jQ4M83F3MGD67ytT.png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\pictures\\tz02_j2houaezaxcbrvf\\mqhlcyzxc1ykd8m-7zlx\\jq4m83f3mgd67ytt.png")) returned 1 [0088.774] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\tZ02_j2HoUAEzAXcbrvF\\MqHlcYZXc1ykd8m-7zLx\\So0XvzJy8QKL.bmp", nBufferLength=0x105, lpBuffer=0x31e11c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\tZ02_j2HoUAEzAXcbrvF\\MqHlcYZXc1ykd8m-7zLx\\So0XvzJy8QKL.bmp", lpFilePart=0x0) returned 0x61 [0088.774] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e610) returned 1 [0088.774] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\tZ02_j2HoUAEzAXcbrvF\\MqHlcYZXc1ykd8m-7zLx\\So0XvzJy8QKL.bmp" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\pictures\\tz02_j2houaezaxcbrvf\\mqhlcyzxc1ykd8m-7zlx\\so0xvzjy8qkl.bmp"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x178 [0088.774] GetFileType (hFile=0x178) returned 0x1 [0088.774] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e60c) returned 1 [0088.774] GetFileType (hFile=0x178) returned 0x1 [0088.774] GetFileSize (in: hFile=0x178, lpFileSizeHigh=0x31e718 | out: lpFileSizeHigh=0x31e718*=0x0) returned 0x170c7 [0088.775] ReadFile (in: hFile=0x178, lpBuffer=0x37dcaf8, nNumberOfBytesToRead=0x170c7, lpNumberOfBytesRead=0x31e6c4, lpOverlapped=0x0 | out: lpBuffer=0x37dcaf8*, lpNumberOfBytesRead=0x31e6c4*=0x170c7, lpOverlapped=0x0) returned 1 [0088.776] CloseHandle (hObject=0x178) returned 1 [0088.793] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\tZ02_j2HoUAEzAXcbrvF\\MqHlcYZXc1ykd8m-7zLx\\So0XvzJy8QKL.bmp", nBufferLength=0x105, lpBuffer=0x31e108, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\tZ02_j2HoUAEzAXcbrvF\\MqHlcYZXc1ykd8m-7zLx\\So0XvzJy8QKL.bmp", lpFilePart=0x0) returned 0x61 [0088.793] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e5fc) returned 1 [0088.793] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\tZ02_j2HoUAEzAXcbrvF\\MqHlcYZXc1ykd8m-7zLx\\So0XvzJy8QKL.bmp" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\pictures\\tz02_j2houaezaxcbrvf\\mqhlcyzxc1ykd8m-7zlx\\so0xvzjy8qkl.bmp"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x178 [0088.795] GetFileType (hFile=0x178) returned 0x1 [0088.795] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e5f8) returned 1 [0088.795] GetFileType (hFile=0x178) returned 0x1 [0088.795] WriteFile (in: hFile=0x178, lpBuffer=0x384ff40*, nNumberOfBytesToWrite=0x170d0, lpNumberOfBytesWritten=0x31e6b8, lpOverlapped=0x0 | out: lpBuffer=0x384ff40*, lpNumberOfBytesWritten=0x31e6b8*=0x170d0, lpOverlapped=0x0) returned 1 [0088.797] CloseHandle (hObject=0x178) returned 1 [0088.797] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\tZ02_j2HoUAEzAXcbrvF\\MqHlcYZXc1ykd8m-7zLx\\So0XvzJy8QKL.bmp", nBufferLength=0x105, lpBuffer=0x31e23c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\tZ02_j2HoUAEzAXcbrvF\\MqHlcYZXc1ykd8m-7zLx\\So0XvzJy8QKL.bmp", lpFilePart=0x0) returned 0x61 [0088.797] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\tZ02_j2HoUAEzAXcbrvF\\MqHlcYZXc1ykd8m-7zLx\\So0XvzJy8QKL.bmp", nBufferLength=0x105, lpBuffer=0x31e23c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\tZ02_j2HoUAEzAXcbrvF\\MqHlcYZXc1ykd8m-7zLx\\So0XvzJy8QKL.bmp", lpFilePart=0x0) returned 0x61 [0088.797] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e69c) returned 1 [0088.797] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\tZ02_j2HoUAEzAXcbrvF\\MqHlcYZXc1ykd8m-7zLx\\So0XvzJy8QKL.bmp" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\pictures\\tz02_j2houaezaxcbrvf\\mqhlcyzxc1ykd8m-7zlx\\so0xvzjy8qkl.bmp"), fInfoLevelId=0x0, lpFileInformation=0x31e718 | out: lpFileInformation=0x31e718*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf7eb8870, ftCreationTime.dwHighDateTime=0x1d5dc6a, ftLastAccessTime.dwLowDateTime=0x97a848b0, ftLastAccessTime.dwHighDateTime=0x1d5d871, ftLastWriteTime.dwLowDateTime=0x185fb620, ftLastWriteTime.dwHighDateTime=0x1d6eb7f, nFileSizeHigh=0x0, nFileSizeLow=0x170d0)) returned 1 [0088.797] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e698) returned 1 [0088.798] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\tZ02_j2HoUAEzAXcbrvF\\MqHlcYZXc1ykd8m-7zLx\\So0XvzJy8QKL.bmp" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\pictures\\tz02_j2houaezaxcbrvf\\mqhlcyzxc1ykd8m-7zlx\\so0xvzjy8qkl.bmp"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\tZ02_j2HoUAEzAXcbrvF\\MqHlcYZXc1ykd8m-7zLx\\So0XvzJy8QKL.bmp" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\pictures\\tz02_j2houaezaxcbrvf\\mqhlcyzxc1ykd8m-7zlx\\so0xvzjy8qkl.bmp")) returned 1 [0088.798] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\tZ02_j2HoUAEzAXcbrvF\\MqHlcYZXc1ykd8m-7zLx\\T9 LZd.png", nBufferLength=0x105, lpBuffer=0x31e11c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\tZ02_j2HoUAEzAXcbrvF\\MqHlcYZXc1ykd8m-7zLx\\T9 LZd.png", lpFilePart=0x0) returned 0x5b [0088.798] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e610) returned 1 [0088.798] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\tZ02_j2HoUAEzAXcbrvF\\MqHlcYZXc1ykd8m-7zLx\\T9 LZd.png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\pictures\\tz02_j2houaezaxcbrvf\\mqhlcyzxc1ykd8m-7zlx\\t9 lzd.png"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x178 [0088.798] GetFileType (hFile=0x178) returned 0x1 [0088.798] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e60c) returned 1 [0088.798] GetFileType (hFile=0x178) returned 0x1 [0088.798] GetFileSize (in: hFile=0x178, lpFileSizeHigh=0x31e718 | out: lpFileSizeHigh=0x31e718*=0x0) returned 0x14886 [0088.798] ReadFile (in: hFile=0x178, lpBuffer=0x270d5e8, nNumberOfBytesToRead=0x14886, lpNumberOfBytesRead=0x31e6c4, lpOverlapped=0x0 | out: lpBuffer=0x270d5e8*, lpNumberOfBytesRead=0x31e6c4*=0x14886, lpOverlapped=0x0) returned 1 [0088.815] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\tZ02_j2HoUAEzAXcbrvF\\MqHlcYZXc1ykd8m-7zLx\\T9 LZd.png", nBufferLength=0x105, lpBuffer=0x31e108, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\tZ02_j2HoUAEzAXcbrvF\\MqHlcYZXc1ykd8m-7zLx\\T9 LZd.png", lpFilePart=0x0) returned 0x5b [0088.815] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e5fc) returned 1 [0088.815] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\tZ02_j2HoUAEzAXcbrvF\\MqHlcYZXc1ykd8m-7zLx\\T9 LZd.png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\pictures\\tz02_j2houaezaxcbrvf\\mqhlcyzxc1ykd8m-7zlx\\t9 lzd.png"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x178 [0088.816] GetFileType (hFile=0x178) returned 0x1 [0088.816] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e5f8) returned 1 [0088.816] GetFileType (hFile=0x178) returned 0x1 [0088.816] WriteFile (in: hFile=0x178, lpBuffer=0x2797d94*, nNumberOfBytesToWrite=0x14890, lpNumberOfBytesWritten=0x31e6b8, lpOverlapped=0x0 | out: lpBuffer=0x2797d94*, lpNumberOfBytesWritten=0x31e6b8*=0x14890, lpOverlapped=0x0) returned 1 [0088.818] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\tZ02_j2HoUAEzAXcbrvF\\MqHlcYZXc1ykd8m-7zLx\\T9 LZd.png", nBufferLength=0x105, lpBuffer=0x31e23c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\tZ02_j2HoUAEzAXcbrvF\\MqHlcYZXc1ykd8m-7zLx\\T9 LZd.png", lpFilePart=0x0) returned 0x5b [0088.818] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\tZ02_j2HoUAEzAXcbrvF\\MqHlcYZXc1ykd8m-7zLx\\T9 LZd.png", nBufferLength=0x105, lpBuffer=0x31e23c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\tZ02_j2HoUAEzAXcbrvF\\MqHlcYZXc1ykd8m-7zLx\\T9 LZd.png", lpFilePart=0x0) returned 0x5b [0088.818] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e69c) returned 1 [0088.818] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\tZ02_j2HoUAEzAXcbrvF\\MqHlcYZXc1ykd8m-7zLx\\T9 LZd.png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\pictures\\tz02_j2houaezaxcbrvf\\mqhlcyzxc1ykd8m-7zlx\\t9 lzd.png"), fInfoLevelId=0x0, lpFileInformation=0x31e718 | out: lpFileInformation=0x31e718*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x33267850, ftCreationTime.dwHighDateTime=0x1d5dda1, ftLastAccessTime.dwLowDateTime=0x5db25620, ftLastAccessTime.dwHighDateTime=0x1d5e3d7, ftLastWriteTime.dwLowDateTime=0x18621780, ftLastWriteTime.dwHighDateTime=0x1d6eb7f, nFileSizeHigh=0x0, nFileSizeLow=0x14890)) returned 1 [0088.819] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e698) returned 1 [0088.819] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\tZ02_j2HoUAEzAXcbrvF\\MqHlcYZXc1ykd8m-7zLx\\T9 LZd.png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\pictures\\tz02_j2houaezaxcbrvf\\mqhlcyzxc1ykd8m-7zlx\\t9 lzd.png"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\tZ02_j2HoUAEzAXcbrvF\\MqHlcYZXc1ykd8m-7zLx\\T9 LZd.png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\pictures\\tz02_j2houaezaxcbrvf\\mqhlcyzxc1ykd8m-7zlx\\t9 lzd.png")) returned 1 [0088.819] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\tZ02_j2HoUAEzAXcbrvF\\MqHlcYZXc1ykd8m-7zLx\\wmGhH6LXjHSc.bmp", nBufferLength=0x105, lpBuffer=0x31e11c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\tZ02_j2HoUAEzAXcbrvF\\MqHlcYZXc1ykd8m-7zLx\\wmGhH6LXjHSc.bmp", lpFilePart=0x0) returned 0x61 [0088.819] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e610) returned 1 [0088.819] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\tZ02_j2HoUAEzAXcbrvF\\MqHlcYZXc1ykd8m-7zLx\\wmGhH6LXjHSc.bmp" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\pictures\\tz02_j2houaezaxcbrvf\\mqhlcyzxc1ykd8m-7zlx\\wmghh6lxjhsc.bmp"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x178 [0088.819] GetFileType (hFile=0x178) returned 0x1 [0088.819] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e60c) returned 1 [0088.819] GetFileType (hFile=0x178) returned 0x1 [0088.819] GetFileSize (in: hFile=0x178, lpFileSizeHigh=0x31e718 | out: lpFileSizeHigh=0x31e718*=0x0) returned 0x8cb7 [0088.819] ReadFile (in: hFile=0x178, lpBuffer=0x27aca88, nNumberOfBytesToRead=0x8cb7, lpNumberOfBytesRead=0x31e6c4, lpOverlapped=0x0 | out: lpBuffer=0x27aca88*, lpNumberOfBytesRead=0x31e6c4*=0x8cb7, lpOverlapped=0x0) returned 1 [0088.835] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\tZ02_j2HoUAEzAXcbrvF\\MqHlcYZXc1ykd8m-7zLx\\wmGhH6LXjHSc.bmp", nBufferLength=0x105, lpBuffer=0x31e108, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\tZ02_j2HoUAEzAXcbrvF\\MqHlcYZXc1ykd8m-7zLx\\wmGhH6LXjHSc.bmp", lpFilePart=0x0) returned 0x61 [0088.835] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e5fc) returned 1 [0088.835] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\tZ02_j2HoUAEzAXcbrvF\\MqHlcYZXc1ykd8m-7zLx\\wmGhH6LXjHSc.bmp" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\pictures\\tz02_j2houaezaxcbrvf\\mqhlcyzxc1ykd8m-7zlx\\wmghh6lxjhsc.bmp"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x178 [0088.836] GetFileType (hFile=0x178) returned 0x1 [0088.836] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e5f8) returned 1 [0088.836] GetFileType (hFile=0x178) returned 0x1 [0088.836] WriteFile (in: hFile=0x178, lpBuffer=0x2825830*, nNumberOfBytesToWrite=0x8cc0, lpNumberOfBytesWritten=0x31e6b8, lpOverlapped=0x0 | out: lpBuffer=0x2825830*, lpNumberOfBytesWritten=0x31e6b8*=0x8cc0, lpOverlapped=0x0) returned 1 [0088.837] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\tZ02_j2HoUAEzAXcbrvF\\MqHlcYZXc1ykd8m-7zLx\\wmGhH6LXjHSc.bmp", nBufferLength=0x105, lpBuffer=0x31e23c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\tZ02_j2HoUAEzAXcbrvF\\MqHlcYZXc1ykd8m-7zLx\\wmGhH6LXjHSc.bmp", lpFilePart=0x0) returned 0x61 [0088.837] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\tZ02_j2HoUAEzAXcbrvF\\MqHlcYZXc1ykd8m-7zLx\\wmGhH6LXjHSc.bmp", nBufferLength=0x105, lpBuffer=0x31e23c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\tZ02_j2HoUAEzAXcbrvF\\MqHlcYZXc1ykd8m-7zLx\\wmGhH6LXjHSc.bmp", lpFilePart=0x0) returned 0x61 [0088.837] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e69c) returned 1 [0088.837] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\tZ02_j2HoUAEzAXcbrvF\\MqHlcYZXc1ykd8m-7zLx\\wmGhH6LXjHSc.bmp" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\pictures\\tz02_j2houaezaxcbrvf\\mqhlcyzxc1ykd8m-7zlx\\wmghh6lxjhsc.bmp"), fInfoLevelId=0x0, lpFileInformation=0x31e718 | out: lpFileInformation=0x31e718*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xeeae5c40, ftCreationTime.dwHighDateTime=0x1d5db18, ftLastAccessTime.dwLowDateTime=0x4b54df50, ftLastAccessTime.dwHighDateTime=0x1d5da06, ftLastWriteTime.dwLowDateTime=0x186478e0, ftLastWriteTime.dwHighDateTime=0x1d6eb7f, nFileSizeHigh=0x0, nFileSizeLow=0x8cc0)) returned 1 [0088.837] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e698) returned 1 [0088.837] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\tZ02_j2HoUAEzAXcbrvF\\MqHlcYZXc1ykd8m-7zLx\\wmGhH6LXjHSc.bmp" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\pictures\\tz02_j2houaezaxcbrvf\\mqhlcyzxc1ykd8m-7zlx\\wmghh6lxjhsc.bmp"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\tZ02_j2HoUAEzAXcbrvF\\MqHlcYZXc1ykd8m-7zLx\\wmGhH6LXjHSc.bmp" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\pictures\\tz02_j2houaezaxcbrvf\\mqhlcyzxc1ykd8m-7zlx\\wmghh6lxjhsc.bmp")) returned 1 [0088.838] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\tZ02_j2HoUAEzAXcbrvF\\MqHlcYZXc1ykd8m-7zLx\\WUwVH33W.png", nBufferLength=0x105, lpBuffer=0x31e11c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\tZ02_j2HoUAEzAXcbrvF\\MqHlcYZXc1ykd8m-7zLx\\WUwVH33W.png", lpFilePart=0x0) returned 0x5d [0088.838] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e610) returned 1 [0088.838] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\tZ02_j2HoUAEzAXcbrvF\\MqHlcYZXc1ykd8m-7zLx\\WUwVH33W.png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\pictures\\tz02_j2houaezaxcbrvf\\mqhlcyzxc1ykd8m-7zlx\\wuwvh33w.png"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x178 [0088.838] GetFileType (hFile=0x178) returned 0x1 [0088.838] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e60c) returned 1 [0088.838] GetFileType (hFile=0x178) returned 0x1 [0088.838] GetFileSize (in: hFile=0x178, lpFileSizeHigh=0x31e718 | out: lpFileSizeHigh=0x31e718*=0x0) returned 0x2a82 [0088.838] ReadFile (in: hFile=0x178, lpBuffer=0x282e95c, nNumberOfBytesToRead=0x2a82, lpNumberOfBytesRead=0x31e6c4, lpOverlapped=0x0 | out: lpBuffer=0x282e95c*, lpNumberOfBytesRead=0x31e6c4*=0x2a82, lpOverlapped=0x0) returned 1 [0088.879] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\tZ02_j2HoUAEzAXcbrvF\\MqHlcYZXc1ykd8m-7zLx\\WUwVH33W.png", nBufferLength=0x105, lpBuffer=0x31e108, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\tZ02_j2HoUAEzAXcbrvF\\MqHlcYZXc1ykd8m-7zLx\\WUwVH33W.png", lpFilePart=0x0) returned 0x5d [0088.879] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e5fc) returned 1 [0088.879] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\tZ02_j2HoUAEzAXcbrvF\\MqHlcYZXc1ykd8m-7zLx\\WUwVH33W.png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\pictures\\tz02_j2houaezaxcbrvf\\mqhlcyzxc1ykd8m-7zlx\\wuwvh33w.png"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x178 [0088.880] GetFileType (hFile=0x178) returned 0x1 [0088.880] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e5f8) returned 1 [0088.880] GetFileType (hFile=0x178) returned 0x1 [0088.880] WriteFile (in: hFile=0x178, lpBuffer=0x269c280*, nNumberOfBytesToWrite=0x2a90, lpNumberOfBytesWritten=0x31e6b8, lpOverlapped=0x0 | out: lpBuffer=0x269c280*, lpNumberOfBytesWritten=0x31e6b8*=0x2a90, lpOverlapped=0x0) returned 1 [0088.881] CloseHandle (hObject=0x178) returned 1 [0088.881] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\tZ02_j2HoUAEzAXcbrvF\\MqHlcYZXc1ykd8m-7zLx\\WUwVH33W.png", nBufferLength=0x105, lpBuffer=0x31e23c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\tZ02_j2HoUAEzAXcbrvF\\MqHlcYZXc1ykd8m-7zLx\\WUwVH33W.png", lpFilePart=0x0) returned 0x5d [0088.881] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\tZ02_j2HoUAEzAXcbrvF\\MqHlcYZXc1ykd8m-7zLx\\WUwVH33W.png", nBufferLength=0x105, lpBuffer=0x31e23c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\tZ02_j2HoUAEzAXcbrvF\\MqHlcYZXc1ykd8m-7zLx\\WUwVH33W.png", lpFilePart=0x0) returned 0x5d [0088.881] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e69c) returned 1 [0088.881] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\tZ02_j2HoUAEzAXcbrvF\\MqHlcYZXc1ykd8m-7zLx\\WUwVH33W.png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\pictures\\tz02_j2houaezaxcbrvf\\mqhlcyzxc1ykd8m-7zlx\\wuwvh33w.png"), fInfoLevelId=0x0, lpFileInformation=0x31e718 | out: lpFileInformation=0x31e718*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x163169d0, ftCreationTime.dwHighDateTime=0x1d5d82e, ftLastAccessTime.dwLowDateTime=0x649394c0, ftLastAccessTime.dwHighDateTime=0x1d5e749, ftLastWriteTime.dwLowDateTime=0x186b9d00, ftLastWriteTime.dwHighDateTime=0x1d6eb7f, nFileSizeHigh=0x0, nFileSizeLow=0x2a90)) returned 1 [0088.881] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e698) returned 1 [0088.881] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\tZ02_j2HoUAEzAXcbrvF\\MqHlcYZXc1ykd8m-7zLx\\WUwVH33W.png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\pictures\\tz02_j2houaezaxcbrvf\\mqhlcyzxc1ykd8m-7zlx\\wuwvh33w.png"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\tZ02_j2HoUAEzAXcbrvF\\MqHlcYZXc1ykd8m-7zLx\\WUwVH33W.png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\pictures\\tz02_j2houaezaxcbrvf\\mqhlcyzxc1ykd8m-7zlx\\wuwvh33w.png")) returned 1 [0088.882] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e6cc) returned 1 [0088.882] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\tZ02_j2HoUAEzAXcbrvF\\MqHlcYZXc1ykd8m-7zLx\\fs6ZyJDVW7MWb", nBufferLength=0x105, lpBuffer=0x31e1d4, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\tZ02_j2HoUAEzAXcbrvF\\MqHlcYZXc1ykd8m-7zLx\\fs6ZyJDVW7MWb", lpFilePart=0x0) returned 0x5e [0088.882] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\tZ02_j2HoUAEzAXcbrvF\\MqHlcYZXc1ykd8m-7zLx\\fs6ZyJDVW7MWb\\", nBufferLength=0x105, lpBuffer=0x31e1a8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\tZ02_j2HoUAEzAXcbrvF\\MqHlcYZXc1ykd8m-7zLx\\fs6ZyJDVW7MWb\\", lpFilePart=0x0) returned 0x5f [0088.882] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\tZ02_j2HoUAEzAXcbrvF\\MqHlcYZXc1ykd8m-7zLx\\fs6ZyJDVW7MWb\\*", lpFindFileData=0x31e3f4 | out: lpFindFileData=0x31e3f4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7c2c5350, ftCreationTime.dwHighDateTime=0x1d5dd8b, ftLastAccessTime.dwLowDateTime=0x88406230, ftLastAccessTime.dwHighDateTime=0x1d5e01a, ftLastWriteTime.dwLowDateTime=0x88406230, ftLastWriteTime.dwHighDateTime=0x1d5e01a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x381e80 [0088.882] FindNextFileW (in: hFindFile=0x381e80, lpFindFileData=0x31e404 | out: lpFindFileData=0x31e404*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7c2c5350, ftCreationTime.dwHighDateTime=0x1d5dd8b, ftLastAccessTime.dwLowDateTime=0x88406230, ftLastAccessTime.dwHighDateTime=0x1d5e01a, ftLastWriteTime.dwLowDateTime=0x88406230, ftLastWriteTime.dwHighDateTime=0x1d5e01a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0088.882] FindNextFileW (in: hFindFile=0x381e80, lpFindFileData=0x31e404 | out: lpFindFileData=0x31e404*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xeb8c2c30, ftCreationTime.dwHighDateTime=0x1d5e672, ftLastAccessTime.dwLowDateTime=0x9d5ea6d0, ftLastAccessTime.dwHighDateTime=0x1d5e5f2, ftLastWriteTime.dwLowDateTime=0x9d5ea6d0, ftLastWriteTime.dwHighDateTime=0x1d5e5f2, nFileSizeHigh=0x0, nFileSizeLow=0x8340, dwReserved0=0x0, dwReserved1=0x0, cFileName="-5 rgXAKNVWpqoUUHt.bmp", cAlternateFileName="-5RGXA~1.BMP")) returned 1 [0088.882] FindNextFileW (in: hFindFile=0x381e80, lpFindFileData=0x31e404 | out: lpFindFileData=0x31e404*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xea179ce0, ftCreationTime.dwHighDateTime=0x1d5e6db, ftLastAccessTime.dwLowDateTime=0xf9a8520, ftLastAccessTime.dwHighDateTime=0x1d5e427, ftLastWriteTime.dwLowDateTime=0xf9a8520, ftLastWriteTime.dwHighDateTime=0x1d5e427, nFileSizeHigh=0x0, nFileSizeLow=0xdd16, dwReserved0=0x0, dwReserved1=0x0, cFileName="02uI45CVA0UfWQJTSx6.gif", cAlternateFileName="02UI45~1.GIF")) returned 1 [0088.882] FindNextFileW (in: hFindFile=0x381e80, lpFindFileData=0x31e404 | out: lpFindFileData=0x31e404*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x42c96e30, ftCreationTime.dwHighDateTime=0x1d5e23c, ftLastAccessTime.dwLowDateTime=0xe97d76d0, ftLastAccessTime.dwHighDateTime=0x1d5dcb6, ftLastWriteTime.dwLowDateTime=0xe97d76d0, ftLastWriteTime.dwHighDateTime=0x1d5dcb6, nFileSizeHigh=0x0, nFileSizeLow=0x9e0, dwReserved0=0x0, dwReserved1=0x0, cFileName="0QpBHVtt5vUmfNi.jpg", cAlternateFileName="0QPBHV~1.JPG")) returned 1 [0088.883] FindNextFileW (in: hFindFile=0x381e80, lpFindFileData=0x31e404 | out: lpFindFileData=0x31e404*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x28eb4f20, ftCreationTime.dwHighDateTime=0x1d5e489, ftLastAccessTime.dwLowDateTime=0x50fa5980, ftLastAccessTime.dwHighDateTime=0x1d5e492, ftLastWriteTime.dwLowDateTime=0x50fa5980, ftLastWriteTime.dwHighDateTime=0x1d5e492, nFileSizeHigh=0x0, nFileSizeLow=0x8e9e, dwReserved0=0x0, dwReserved1=0x0, cFileName="czJdS4vLOz86tVuLLa.gif", cAlternateFileName="CZJDS4~1.GIF")) returned 1 [0088.883] FindNextFileW (in: hFindFile=0x381e80, lpFindFileData=0x31e404 | out: lpFindFileData=0x31e404*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xae0354c0, ftCreationTime.dwHighDateTime=0x1d5dab4, ftLastAccessTime.dwLowDateTime=0x965af8d0, ftLastAccessTime.dwHighDateTime=0x1d5e501, ftLastWriteTime.dwLowDateTime=0x965af8d0, ftLastWriteTime.dwHighDateTime=0x1d5e501, nFileSizeHigh=0x0, nFileSizeLow=0x13e97, dwReserved0=0x0, dwReserved1=0x0, cFileName="EYB4.bmp", cAlternateFileName="")) returned 1 [0088.883] FindNextFileW (in: hFindFile=0x381e80, lpFindFileData=0x31e404 | out: lpFindFileData=0x31e404*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe5865d80, ftCreationTime.dwHighDateTime=0x1d5dabd, ftLastAccessTime.dwLowDateTime=0x6ab6f040, ftLastAccessTime.dwHighDateTime=0x1d5dc86, ftLastWriteTime.dwLowDateTime=0x6ab6f040, ftLastWriteTime.dwHighDateTime=0x1d5dc86, nFileSizeHigh=0x0, nFileSizeLow=0x44d3, dwReserved0=0x0, dwReserved1=0x0, cFileName="haueJziX5JC6wVVx5.gif", cAlternateFileName="HAUEJZ~1.GIF")) returned 1 [0088.883] FindNextFileW (in: hFindFile=0x381e80, lpFindFileData=0x31e404 | out: lpFindFileData=0x31e404*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x395a1bd0, ftCreationTime.dwHighDateTime=0x1d5d952, ftLastAccessTime.dwLowDateTime=0xd44e1be0, ftLastAccessTime.dwHighDateTime=0x1d5df89, ftLastWriteTime.dwLowDateTime=0xd44e1be0, ftLastWriteTime.dwHighDateTime=0x1d5df89, nFileSizeHigh=0x0, nFileSizeLow=0x74a0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Oxgbwq.jpg", cAlternateFileName="")) returned 1 [0088.883] FindNextFileW (in: hFindFile=0x381e80, lpFindFileData=0x31e404 | out: lpFindFileData=0x31e404*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x629cee60, ftCreationTime.dwHighDateTime=0x1d5e658, ftLastAccessTime.dwLowDateTime=0x5d857fe0, ftLastAccessTime.dwHighDateTime=0x1d5e20d, ftLastWriteTime.dwLowDateTime=0x5d857fe0, ftLastWriteTime.dwHighDateTime=0x1d5e20d, nFileSizeHigh=0x0, nFileSizeLow=0xa4e0, dwReserved0=0x0, dwReserved1=0x0, cFileName="wEMrbUbF-Mv87fszk-.bmp", cAlternateFileName="WEMRBU~1.BMP")) returned 1 [0088.883] FindNextFileW (in: hFindFile=0x381e80, lpFindFileData=0x31e404 | out: lpFindFileData=0x31e404*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8d622550, ftCreationTime.dwHighDateTime=0x1d5db6f, ftLastAccessTime.dwLowDateTime=0xe5922830, ftLastAccessTime.dwHighDateTime=0x1d5e0ae, ftLastWriteTime.dwLowDateTime=0xe5922830, ftLastWriteTime.dwHighDateTime=0x1d5e0ae, nFileSizeHigh=0x0, nFileSizeLow=0xf17e, dwReserved0=0x0, dwReserved1=0x0, cFileName="_asLnaNpks5 rTrdu.gif", cAlternateFileName="_ASLNA~1.GIF")) returned 1 [0088.883] FindNextFileW (in: hFindFile=0x381e80, lpFindFileData=0x31e404 | out: lpFindFileData=0x31e404*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0088.883] FindClose (in: hFindFile=0x381e80 | out: hFindFile=0x381e80) returned 1 [0088.883] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e68c) returned 1 [0088.883] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e698) returned 1 [0088.884] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e6cc) returned 1 [0088.884] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\tZ02_j2HoUAEzAXcbrvF\\MqHlcYZXc1ykd8m-7zLx\\fs6ZyJDVW7MWb", nBufferLength=0x105, lpBuffer=0x31e1d4, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\tZ02_j2HoUAEzAXcbrvF\\MqHlcYZXc1ykd8m-7zLx\\fs6ZyJDVW7MWb", lpFilePart=0x0) returned 0x5e [0088.884] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\tZ02_j2HoUAEzAXcbrvF\\MqHlcYZXc1ykd8m-7zLx\\fs6ZyJDVW7MWb\\", nBufferLength=0x105, lpBuffer=0x31e1a8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\tZ02_j2HoUAEzAXcbrvF\\MqHlcYZXc1ykd8m-7zLx\\fs6ZyJDVW7MWb\\", lpFilePart=0x0) returned 0x5f [0088.884] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\tZ02_j2HoUAEzAXcbrvF\\MqHlcYZXc1ykd8m-7zLx\\fs6ZyJDVW7MWb\\*", lpFindFileData=0x31e3f4 | out: lpFindFileData=0x31e3f4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7c2c5350, ftCreationTime.dwHighDateTime=0x1d5dd8b, ftLastAccessTime.dwLowDateTime=0x88406230, ftLastAccessTime.dwHighDateTime=0x1d5e01a, ftLastWriteTime.dwLowDateTime=0x88406230, ftLastWriteTime.dwHighDateTime=0x1d5e01a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x381e80 [0088.884] FindNextFileW (in: hFindFile=0x381e80, lpFindFileData=0x31e404 | out: lpFindFileData=0x31e404*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7c2c5350, ftCreationTime.dwHighDateTime=0x1d5dd8b, ftLastAccessTime.dwLowDateTime=0x88406230, ftLastAccessTime.dwHighDateTime=0x1d5e01a, ftLastWriteTime.dwLowDateTime=0x88406230, ftLastWriteTime.dwHighDateTime=0x1d5e01a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0088.884] FindNextFileW (in: hFindFile=0x381e80, lpFindFileData=0x31e404 | out: lpFindFileData=0x31e404*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xeb8c2c30, ftCreationTime.dwHighDateTime=0x1d5e672, ftLastAccessTime.dwLowDateTime=0x9d5ea6d0, ftLastAccessTime.dwHighDateTime=0x1d5e5f2, ftLastWriteTime.dwLowDateTime=0x9d5ea6d0, ftLastWriteTime.dwHighDateTime=0x1d5e5f2, nFileSizeHigh=0x0, nFileSizeLow=0x8340, dwReserved0=0x0, dwReserved1=0x0, cFileName="-5 rgXAKNVWpqoUUHt.bmp", cAlternateFileName="-5RGXA~1.BMP")) returned 1 [0088.884] FindNextFileW (in: hFindFile=0x381e80, lpFindFileData=0x31e404 | out: lpFindFileData=0x31e404*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xea179ce0, ftCreationTime.dwHighDateTime=0x1d5e6db, ftLastAccessTime.dwLowDateTime=0xf9a8520, ftLastAccessTime.dwHighDateTime=0x1d5e427, ftLastWriteTime.dwLowDateTime=0xf9a8520, ftLastWriteTime.dwHighDateTime=0x1d5e427, nFileSizeHigh=0x0, nFileSizeLow=0xdd16, dwReserved0=0x0, dwReserved1=0x0, cFileName="02uI45CVA0UfWQJTSx6.gif", cAlternateFileName="02UI45~1.GIF")) returned 1 [0088.884] FindNextFileW (in: hFindFile=0x381e80, lpFindFileData=0x31e404 | out: lpFindFileData=0x31e404*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x42c96e30, ftCreationTime.dwHighDateTime=0x1d5e23c, ftLastAccessTime.dwLowDateTime=0xe97d76d0, ftLastAccessTime.dwHighDateTime=0x1d5dcb6, ftLastWriteTime.dwLowDateTime=0xe97d76d0, ftLastWriteTime.dwHighDateTime=0x1d5dcb6, nFileSizeHigh=0x0, nFileSizeLow=0x9e0, dwReserved0=0x0, dwReserved1=0x0, cFileName="0QpBHVtt5vUmfNi.jpg", cAlternateFileName="0QPBHV~1.JPG")) returned 1 [0088.884] FindNextFileW (in: hFindFile=0x381e80, lpFindFileData=0x31e404 | out: lpFindFileData=0x31e404*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x28eb4f20, ftCreationTime.dwHighDateTime=0x1d5e489, ftLastAccessTime.dwLowDateTime=0x50fa5980, ftLastAccessTime.dwHighDateTime=0x1d5e492, ftLastWriteTime.dwLowDateTime=0x50fa5980, ftLastWriteTime.dwHighDateTime=0x1d5e492, nFileSizeHigh=0x0, nFileSizeLow=0x8e9e, dwReserved0=0x0, dwReserved1=0x0, cFileName="czJdS4vLOz86tVuLLa.gif", cAlternateFileName="CZJDS4~1.GIF")) returned 1 [0088.885] FindNextFileW (in: hFindFile=0x381e80, lpFindFileData=0x31e404 | out: lpFindFileData=0x31e404*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xae0354c0, ftCreationTime.dwHighDateTime=0x1d5dab4, ftLastAccessTime.dwLowDateTime=0x965af8d0, ftLastAccessTime.dwHighDateTime=0x1d5e501, ftLastWriteTime.dwLowDateTime=0x965af8d0, ftLastWriteTime.dwHighDateTime=0x1d5e501, nFileSizeHigh=0x0, nFileSizeLow=0x13e97, dwReserved0=0x0, dwReserved1=0x0, cFileName="EYB4.bmp", cAlternateFileName="")) returned 1 [0088.885] FindNextFileW (in: hFindFile=0x381e80, lpFindFileData=0x31e404 | out: lpFindFileData=0x31e404*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe5865d80, ftCreationTime.dwHighDateTime=0x1d5dabd, ftLastAccessTime.dwLowDateTime=0x6ab6f040, ftLastAccessTime.dwHighDateTime=0x1d5dc86, ftLastWriteTime.dwLowDateTime=0x6ab6f040, ftLastWriteTime.dwHighDateTime=0x1d5dc86, nFileSizeHigh=0x0, nFileSizeLow=0x44d3, dwReserved0=0x0, dwReserved1=0x0, cFileName="haueJziX5JC6wVVx5.gif", cAlternateFileName="HAUEJZ~1.GIF")) returned 1 [0088.885] FindNextFileW (in: hFindFile=0x381e80, lpFindFileData=0x31e404 | out: lpFindFileData=0x31e404*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x395a1bd0, ftCreationTime.dwHighDateTime=0x1d5d952, ftLastAccessTime.dwLowDateTime=0xd44e1be0, ftLastAccessTime.dwHighDateTime=0x1d5df89, ftLastWriteTime.dwLowDateTime=0xd44e1be0, ftLastWriteTime.dwHighDateTime=0x1d5df89, nFileSizeHigh=0x0, nFileSizeLow=0x74a0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Oxgbwq.jpg", cAlternateFileName="")) returned 1 [0088.885] FindNextFileW (in: hFindFile=0x381e80, lpFindFileData=0x31e404 | out: lpFindFileData=0x31e404*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x629cee60, ftCreationTime.dwHighDateTime=0x1d5e658, ftLastAccessTime.dwLowDateTime=0x5d857fe0, ftLastAccessTime.dwHighDateTime=0x1d5e20d, ftLastWriteTime.dwLowDateTime=0x5d857fe0, ftLastWriteTime.dwHighDateTime=0x1d5e20d, nFileSizeHigh=0x0, nFileSizeLow=0xa4e0, dwReserved0=0x0, dwReserved1=0x0, cFileName="wEMrbUbF-Mv87fszk-.bmp", cAlternateFileName="WEMRBU~1.BMP")) returned 1 [0088.885] FindNextFileW (in: hFindFile=0x381e80, lpFindFileData=0x31e404 | out: lpFindFileData=0x31e404*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8d622550, ftCreationTime.dwHighDateTime=0x1d5db6f, ftLastAccessTime.dwLowDateTime=0xe5922830, ftLastAccessTime.dwHighDateTime=0x1d5e0ae, ftLastWriteTime.dwLowDateTime=0xe5922830, ftLastWriteTime.dwHighDateTime=0x1d5e0ae, nFileSizeHigh=0x0, nFileSizeLow=0xf17e, dwReserved0=0x0, dwReserved1=0x0, cFileName="_asLnaNpks5 rTrdu.gif", cAlternateFileName="_ASLNA~1.GIF")) returned 1 [0088.885] FindNextFileW (in: hFindFile=0x381e80, lpFindFileData=0x31e404 | out: lpFindFileData=0x31e404*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8d622550, ftCreationTime.dwHighDateTime=0x1d5db6f, ftLastAccessTime.dwLowDateTime=0xe5922830, ftLastAccessTime.dwHighDateTime=0x1d5e0ae, ftLastWriteTime.dwLowDateTime=0xe5922830, ftLastWriteTime.dwHighDateTime=0x1d5e0ae, nFileSizeHigh=0x0, nFileSizeLow=0xf17e, dwReserved0=0x0, dwReserved1=0x0, cFileName="_asLnaNpks5 rTrdu.gif", cAlternateFileName="_ASLNA~1.GIF")) returned 0 [0088.885] FindClose (in: hFindFile=0x381e80 | out: hFindFile=0x381e80) returned 1 [0088.885] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e68c) returned 1 [0088.885] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e698) returned 1 [0088.886] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\tZ02_j2HoUAEzAXcbrvF\\MqHlcYZXc1ykd8m-7zLx\\fs6ZyJDVW7MWb\\-5 rgXAKNVWpqoUUHt.bmp", nBufferLength=0x105, lpBuffer=0x31e0a4, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\tZ02_j2HoUAEzAXcbrvF\\MqHlcYZXc1ykd8m-7zLx\\fs6ZyJDVW7MWb\\-5 rgXAKNVWpqoUUHt.bmp", lpFilePart=0x0) returned 0x76 [0088.886] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e598) returned 1 [0088.886] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\tZ02_j2HoUAEzAXcbrvF\\MqHlcYZXc1ykd8m-7zLx\\fs6ZyJDVW7MWb\\-5 rgXAKNVWpqoUUHt.bmp" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\pictures\\tz02_j2houaezaxcbrvf\\mqhlcyzxc1ykd8m-7zlx\\fs6zyjdvw7mwb\\-5 rgxaknvwpqouuht.bmp"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x178 [0088.886] GetFileType (hFile=0x178) returned 0x1 [0088.886] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e594) returned 1 [0088.886] GetFileType (hFile=0x178) returned 0x1 [0088.886] GetFileSize (in: hFile=0x178, lpFileSizeHigh=0x31e6a0 | out: lpFileSizeHigh=0x31e6a0*=0x0) returned 0x8340 [0088.886] ReadFile (in: hFile=0x178, lpBuffer=0x26a38e8, nNumberOfBytesToRead=0x8340, lpNumberOfBytesRead=0x31e64c, lpOverlapped=0x0 | out: lpBuffer=0x26a38e8*, lpNumberOfBytesRead=0x31e64c*=0x8340, lpOverlapped=0x0) returned 1 [0088.887] CloseHandle (hObject=0x178) returned 1 [0089.078] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\tZ02_j2HoUAEzAXcbrvF\\MqHlcYZXc1ykd8m-7zLx\\fs6ZyJDVW7MWb\\-5 rgXAKNVWpqoUUHt.bmp", nBufferLength=0x105, lpBuffer=0x31e090, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\tZ02_j2HoUAEzAXcbrvF\\MqHlcYZXc1ykd8m-7zLx\\fs6ZyJDVW7MWb\\-5 rgXAKNVWpqoUUHt.bmp", lpFilePart=0x0) returned 0x76 [0089.078] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e584) returned 1 [0089.078] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\tZ02_j2HoUAEzAXcbrvF\\MqHlcYZXc1ykd8m-7zLx\\fs6ZyJDVW7MWb\\-5 rgXAKNVWpqoUUHt.bmp" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\pictures\\tz02_j2houaezaxcbrvf\\mqhlcyzxc1ykd8m-7zlx\\fs6zyjdvw7mwb\\-5 rgxaknvwpqouuht.bmp"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x178 [0089.078] GetFileType (hFile=0x178) returned 0x1 [0089.078] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e580) returned 1 [0089.078] GetFileType (hFile=0x178) returned 0x1 [0089.078] WriteFile (in: hFile=0x178, lpBuffer=0x27198b8*, nNumberOfBytesToWrite=0x8350, lpNumberOfBytesWritten=0x31e640, lpOverlapped=0x0 | out: lpBuffer=0x27198b8*, lpNumberOfBytesWritten=0x31e640*=0x8350, lpOverlapped=0x0) returned 1 [0089.080] CloseHandle (hObject=0x178) returned 1 [0089.080] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\tZ02_j2HoUAEzAXcbrvF\\MqHlcYZXc1ykd8m-7zLx\\fs6ZyJDVW7MWb\\-5 rgXAKNVWpqoUUHt.bmp", nBufferLength=0x105, lpBuffer=0x31e1c4, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\tZ02_j2HoUAEzAXcbrvF\\MqHlcYZXc1ykd8m-7zLx\\fs6ZyJDVW7MWb\\-5 rgXAKNVWpqoUUHt.bmp", lpFilePart=0x0) returned 0x76 [0089.080] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\tZ02_j2HoUAEzAXcbrvF\\MqHlcYZXc1ykd8m-7zLx\\fs6ZyJDVW7MWb\\-5 rgXAKNVWpqoUUHt.bmp", nBufferLength=0x105, lpBuffer=0x31e1c4, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\tZ02_j2HoUAEzAXcbrvF\\MqHlcYZXc1ykd8m-7zLx\\fs6ZyJDVW7MWb\\-5 rgXAKNVWpqoUUHt.bmp", lpFilePart=0x0) returned 0x76 [0089.080] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e624) returned 1 [0089.080] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\tZ02_j2HoUAEzAXcbrvF\\MqHlcYZXc1ykd8m-7zLx\\fs6ZyJDVW7MWb\\-5 rgXAKNVWpqoUUHt.bmp" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\pictures\\tz02_j2houaezaxcbrvf\\mqhlcyzxc1ykd8m-7zlx\\fs6zyjdvw7mwb\\-5 rgxaknvwpqouuht.bmp"), fInfoLevelId=0x0, lpFileInformation=0x31e6a0 | out: lpFileInformation=0x31e6a0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xeb8c2c30, ftCreationTime.dwHighDateTime=0x1d5e672, ftLastAccessTime.dwLowDateTime=0x9d5ea6d0, ftLastAccessTime.dwHighDateTime=0x1d5e5f2, ftLastWriteTime.dwLowDateTime=0x188a8ee0, ftLastWriteTime.dwHighDateTime=0x1d6eb7f, nFileSizeHigh=0x0, nFileSizeLow=0x8350)) returned 1 [0089.080] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e620) returned 1 [0089.080] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\tZ02_j2HoUAEzAXcbrvF\\MqHlcYZXc1ykd8m-7zLx\\fs6ZyJDVW7MWb\\-5 rgXAKNVWpqoUUHt.bmp" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\pictures\\tz02_j2houaezaxcbrvf\\mqhlcyzxc1ykd8m-7zlx\\fs6zyjdvw7mwb\\-5 rgxaknvwpqouuht.bmp"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\tZ02_j2HoUAEzAXcbrvF\\MqHlcYZXc1ykd8m-7zLx\\fs6ZyJDVW7MWb\\-5 rgXAKNVWpqoUUHt.bmp" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\pictures\\tz02_j2houaezaxcbrvf\\mqhlcyzxc1ykd8m-7zlx\\fs6zyjdvw7mwb\\-5 rgxaknvwpqouuht.bmp")) returned 1 [0089.080] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\tZ02_j2HoUAEzAXcbrvF\\MqHlcYZXc1ykd8m-7zLx\\fs6ZyJDVW7MWb\\0QpBHVtt5vUmfNi.jpg", nBufferLength=0x105, lpBuffer=0x31e0a4, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\tZ02_j2HoUAEzAXcbrvF\\MqHlcYZXc1ykd8m-7zLx\\fs6ZyJDVW7MWb\\0QpBHVtt5vUmfNi.jpg", lpFilePart=0x0) returned 0x72 [0089.080] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e598) returned 1 [0089.080] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\tZ02_j2HoUAEzAXcbrvF\\MqHlcYZXc1ykd8m-7zLx\\fs6ZyJDVW7MWb\\0QpBHVtt5vUmfNi.jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\pictures\\tz02_j2houaezaxcbrvf\\mqhlcyzxc1ykd8m-7zlx\\fs6zyjdvw7mwb\\0qpbhvtt5vumfni.jpg"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x178 [0089.081] GetFileType (hFile=0x178) returned 0x1 [0089.081] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e594) returned 1 [0089.081] GetFileType (hFile=0x178) returned 0x1 [0089.081] GetFileSize (in: hFile=0x178, lpFileSizeHigh=0x31e6a0 | out: lpFileSizeHigh=0x31e6a0*=0x0) returned 0x9e0 [0089.081] ReadFile (in: hFile=0x178, lpBuffer=0x2722b40, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x31e64c, lpOverlapped=0x0 | out: lpBuffer=0x2722b40*, lpNumberOfBytesRead=0x31e64c*=0x9e0, lpOverlapped=0x0) returned 1 [0089.081] CloseHandle (hObject=0x178) returned 1 [0089.095] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\tZ02_j2HoUAEzAXcbrvF\\MqHlcYZXc1ykd8m-7zLx\\fs6ZyJDVW7MWb\\0QpBHVtt5vUmfNi.jpg", nBufferLength=0x105, lpBuffer=0x31e090, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\tZ02_j2HoUAEzAXcbrvF\\MqHlcYZXc1ykd8m-7zLx\\fs6ZyJDVW7MWb\\0QpBHVtt5vUmfNi.jpg", lpFilePart=0x0) returned 0x72 [0089.095] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e584) returned 1 [0089.095] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\tZ02_j2HoUAEzAXcbrvF\\MqHlcYZXc1ykd8m-7zLx\\fs6ZyJDVW7MWb\\0QpBHVtt5vUmfNi.jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\pictures\\tz02_j2houaezaxcbrvf\\mqhlcyzxc1ykd8m-7zlx\\fs6zyjdvw7mwb\\0qpbhvtt5vumfni.jpg"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x178 [0089.096] GetFileType (hFile=0x178) returned 0x1 [0089.096] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e580) returned 1 [0089.096] GetFileType (hFile=0x178) returned 0x1 [0089.096] WriteFile (in: hFile=0x178, lpBuffer=0x2773c74*, nNumberOfBytesToWrite=0x9f0, lpNumberOfBytesWritten=0x31e614, lpOverlapped=0x0 | out: lpBuffer=0x2773c74*, lpNumberOfBytesWritten=0x31e614*=0x9f0, lpOverlapped=0x0) returned 1 [0089.097] CloseHandle (hObject=0x178) returned 1 [0089.097] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\tZ02_j2HoUAEzAXcbrvF\\MqHlcYZXc1ykd8m-7zLx\\fs6ZyJDVW7MWb\\0QpBHVtt5vUmfNi.jpg", nBufferLength=0x105, lpBuffer=0x31e1c4, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\tZ02_j2HoUAEzAXcbrvF\\MqHlcYZXc1ykd8m-7zLx\\fs6ZyJDVW7MWb\\0QpBHVtt5vUmfNi.jpg", lpFilePart=0x0) returned 0x72 [0089.097] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\tZ02_j2HoUAEzAXcbrvF\\MqHlcYZXc1ykd8m-7zLx\\fs6ZyJDVW7MWb\\0QpBHVtt5vUmfNi.jpg", nBufferLength=0x105, lpBuffer=0x31e1c4, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\tZ02_j2HoUAEzAXcbrvF\\MqHlcYZXc1ykd8m-7zLx\\fs6ZyJDVW7MWb\\0QpBHVtt5vUmfNi.jpg", lpFilePart=0x0) returned 0x72 [0089.097] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e624) returned 1 [0089.097] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\tZ02_j2HoUAEzAXcbrvF\\MqHlcYZXc1ykd8m-7zLx\\fs6ZyJDVW7MWb\\0QpBHVtt5vUmfNi.jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\pictures\\tz02_j2houaezaxcbrvf\\mqhlcyzxc1ykd8m-7zlx\\fs6zyjdvw7mwb\\0qpbhvtt5vumfni.jpg"), fInfoLevelId=0x0, lpFileInformation=0x31e6a0 | out: lpFileInformation=0x31e6a0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x42c96e30, ftCreationTime.dwHighDateTime=0x1d5e23c, ftLastAccessTime.dwLowDateTime=0xe97d76d0, ftLastAccessTime.dwHighDateTime=0x1d5dcb6, ftLastWriteTime.dwLowDateTime=0x188cf040, ftLastWriteTime.dwHighDateTime=0x1d6eb7f, nFileSizeHigh=0x0, nFileSizeLow=0x9f0)) returned 1 [0089.097] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e620) returned 1 [0089.097] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\tZ02_j2HoUAEzAXcbrvF\\MqHlcYZXc1ykd8m-7zLx\\fs6ZyJDVW7MWb\\0QpBHVtt5vUmfNi.jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\pictures\\tz02_j2houaezaxcbrvf\\mqhlcyzxc1ykd8m-7zlx\\fs6zyjdvw7mwb\\0qpbhvtt5vumfni.jpg"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\tZ02_j2HoUAEzAXcbrvF\\MqHlcYZXc1ykd8m-7zLx\\fs6ZyJDVW7MWb\\0QpBHVtt5vUmfNi.jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\pictures\\tz02_j2houaezaxcbrvf\\mqhlcyzxc1ykd8m-7zlx\\fs6zyjdvw7mwb\\0qpbhvtt5vumfni.jpg")) returned 1 [0089.097] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\tZ02_j2HoUAEzAXcbrvF\\MqHlcYZXc1ykd8m-7zLx\\fs6ZyJDVW7MWb\\EYB4.bmp", nBufferLength=0x105, lpBuffer=0x31e0a4, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\tZ02_j2HoUAEzAXcbrvF\\MqHlcYZXc1ykd8m-7zLx\\fs6ZyJDVW7MWb\\EYB4.bmp", lpFilePart=0x0) returned 0x67 [0089.097] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e598) returned 1 [0089.097] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\tZ02_j2HoUAEzAXcbrvF\\MqHlcYZXc1ykd8m-7zLx\\fs6ZyJDVW7MWb\\EYB4.bmp" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\pictures\\tz02_j2houaezaxcbrvf\\mqhlcyzxc1ykd8m-7zlx\\fs6zyjdvw7mwb\\eyb4.bmp"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x178 [0089.098] GetFileType (hFile=0x178) returned 0x1 [0089.098] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e594) returned 1 [0089.098] GetFileType (hFile=0x178) returned 0x1 [0089.098] GetFileSize (in: hFile=0x178, lpFileSizeHigh=0x31e6a0 | out: lpFileSizeHigh=0x31e6a0*=0x0) returned 0x13e97 [0089.098] ReadFile (in: hFile=0x178, lpBuffer=0x2774ff0, nNumberOfBytesToRead=0x13e97, lpNumberOfBytesRead=0x31e64c, lpOverlapped=0x0 | out: lpBuffer=0x2774ff0*, lpNumberOfBytesRead=0x31e64c*=0x13e97, lpOverlapped=0x0) returned 1 [0089.099] CloseHandle (hObject=0x178) returned 1 [0089.116] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\tZ02_j2HoUAEzAXcbrvF\\MqHlcYZXc1ykd8m-7zLx\\fs6ZyJDVW7MWb\\EYB4.bmp", nBufferLength=0x105, lpBuffer=0x31e090, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\tZ02_j2HoUAEzAXcbrvF\\MqHlcYZXc1ykd8m-7zLx\\fs6ZyJDVW7MWb\\EYB4.bmp", lpFilePart=0x0) returned 0x67 [0089.117] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e584) returned 1 [0089.117] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\tZ02_j2HoUAEzAXcbrvF\\MqHlcYZXc1ykd8m-7zLx\\fs6ZyJDVW7MWb\\EYB4.bmp" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\pictures\\tz02_j2houaezaxcbrvf\\mqhlcyzxc1ykd8m-7zlx\\fs6zyjdvw7mwb\\eyb4.bmp"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x178 [0089.118] GetFileType (hFile=0x178) returned 0x1 [0089.118] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e580) returned 1 [0089.118] GetFileType (hFile=0x178) returned 0x1 [0089.118] WriteFile (in: hFile=0x178, lpBuffer=0x27fd9cc*, nNumberOfBytesToWrite=0x13ea0, lpNumberOfBytesWritten=0x31e640, lpOverlapped=0x0 | out: lpBuffer=0x27fd9cc*, lpNumberOfBytesWritten=0x31e640*=0x13ea0, lpOverlapped=0x0) returned 1 [0089.120] CloseHandle (hObject=0x178) returned 1 [0089.120] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\tZ02_j2HoUAEzAXcbrvF\\MqHlcYZXc1ykd8m-7zLx\\fs6ZyJDVW7MWb\\EYB4.bmp", nBufferLength=0x105, lpBuffer=0x31e1c4, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\tZ02_j2HoUAEzAXcbrvF\\MqHlcYZXc1ykd8m-7zLx\\fs6ZyJDVW7MWb\\EYB4.bmp", lpFilePart=0x0) returned 0x67 [0089.120] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\tZ02_j2HoUAEzAXcbrvF\\MqHlcYZXc1ykd8m-7zLx\\fs6ZyJDVW7MWb\\EYB4.bmp", nBufferLength=0x105, lpBuffer=0x31e1c4, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\tZ02_j2HoUAEzAXcbrvF\\MqHlcYZXc1ykd8m-7zLx\\fs6ZyJDVW7MWb\\EYB4.bmp", lpFilePart=0x0) returned 0x67 [0089.120] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e624) returned 1 [0089.120] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\tZ02_j2HoUAEzAXcbrvF\\MqHlcYZXc1ykd8m-7zLx\\fs6ZyJDVW7MWb\\EYB4.bmp" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\pictures\\tz02_j2houaezaxcbrvf\\mqhlcyzxc1ykd8m-7zlx\\fs6zyjdvw7mwb\\eyb4.bmp"), fInfoLevelId=0x0, lpFileInformation=0x31e6a0 | out: lpFileInformation=0x31e6a0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xae0354c0, ftCreationTime.dwHighDateTime=0x1d5dab4, ftLastAccessTime.dwLowDateTime=0x965af8d0, ftLastAccessTime.dwHighDateTime=0x1d5e501, ftLastWriteTime.dwLowDateTime=0x188f51a0, ftLastWriteTime.dwHighDateTime=0x1d6eb7f, nFileSizeHigh=0x0, nFileSizeLow=0x13ea0)) returned 1 [0089.120] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e620) returned 1 [0089.120] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\tZ02_j2HoUAEzAXcbrvF\\MqHlcYZXc1ykd8m-7zLx\\fs6ZyJDVW7MWb\\EYB4.bmp" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\pictures\\tz02_j2houaezaxcbrvf\\mqhlcyzxc1ykd8m-7zlx\\fs6zyjdvw7mwb\\eyb4.bmp"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\tZ02_j2HoUAEzAXcbrvF\\MqHlcYZXc1ykd8m-7zLx\\fs6ZyJDVW7MWb\\EYB4.bmp" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\pictures\\tz02_j2houaezaxcbrvf\\mqhlcyzxc1ykd8m-7zlx\\fs6zyjdvw7mwb\\eyb4.bmp")) returned 1 [0089.120] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\tZ02_j2HoUAEzAXcbrvF\\MqHlcYZXc1ykd8m-7zLx\\fs6ZyJDVW7MWb\\Oxgbwq.jpg", nBufferLength=0x105, lpBuffer=0x31e0a4, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\tZ02_j2HoUAEzAXcbrvF\\MqHlcYZXc1ykd8m-7zLx\\fs6ZyJDVW7MWb\\Oxgbwq.jpg", lpFilePart=0x0) returned 0x69 [0089.120] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e598) returned 1 [0089.120] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\tZ02_j2HoUAEzAXcbrvF\\MqHlcYZXc1ykd8m-7zLx\\fs6ZyJDVW7MWb\\Oxgbwq.jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\pictures\\tz02_j2houaezaxcbrvf\\mqhlcyzxc1ykd8m-7zlx\\fs6zyjdvw7mwb\\oxgbwq.jpg"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x178 [0089.121] GetFileType (hFile=0x178) returned 0x1 [0089.121] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e594) returned 1 [0089.121] GetFileType (hFile=0x178) returned 0x1 [0089.121] GetFileSize (in: hFile=0x178, lpFileSizeHigh=0x31e6a0 | out: lpFileSizeHigh=0x31e6a0*=0x0) returned 0x74a0 [0089.121] ReadFile (in: hFile=0x178, lpBuffer=0x2811d18, nNumberOfBytesToRead=0x74a0, lpNumberOfBytesRead=0x31e64c, lpOverlapped=0x0 | out: lpBuffer=0x2811d18*, lpNumberOfBytesRead=0x31e64c*=0x74a0, lpOverlapped=0x0) returned 1 [0089.122] CloseHandle (hObject=0x178) returned 1 [0089.162] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\tZ02_j2HoUAEzAXcbrvF\\MqHlcYZXc1ykd8m-7zLx\\fs6ZyJDVW7MWb\\Oxgbwq.jpg", nBufferLength=0x105, lpBuffer=0x31e090, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\tZ02_j2HoUAEzAXcbrvF\\MqHlcYZXc1ykd8m-7zLx\\fs6ZyJDVW7MWb\\Oxgbwq.jpg", lpFilePart=0x0) returned 0x69 [0089.162] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e584) returned 1 [0089.162] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\tZ02_j2HoUAEzAXcbrvF\\MqHlcYZXc1ykd8m-7zLx\\fs6ZyJDVW7MWb\\Oxgbwq.jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\pictures\\tz02_j2houaezaxcbrvf\\mqhlcyzxc1ykd8m-7zlx\\fs6zyjdvw7mwb\\oxgbwq.jpg"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x178 [0089.163] GetFileType (hFile=0x178) returned 0x1 [0089.163] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e580) returned 1 [0089.163] GetFileType (hFile=0x178) returned 0x1 [0089.163] WriteFile (in: hFile=0x178, lpBuffer=0x2690a34*, nNumberOfBytesToWrite=0x74b0, lpNumberOfBytesWritten=0x31e640, lpOverlapped=0x0 | out: lpBuffer=0x2690a34*, lpNumberOfBytesWritten=0x31e640*=0x74b0, lpOverlapped=0x0) returned 1 [0089.164] CloseHandle (hObject=0x178) returned 1 [0089.165] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\tZ02_j2HoUAEzAXcbrvF\\MqHlcYZXc1ykd8m-7zLx\\fs6ZyJDVW7MWb\\Oxgbwq.jpg", nBufferLength=0x105, lpBuffer=0x31e1c4, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\tZ02_j2HoUAEzAXcbrvF\\MqHlcYZXc1ykd8m-7zLx\\fs6ZyJDVW7MWb\\Oxgbwq.jpg", lpFilePart=0x0) returned 0x69 [0089.165] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\tZ02_j2HoUAEzAXcbrvF\\MqHlcYZXc1ykd8m-7zLx\\fs6ZyJDVW7MWb\\Oxgbwq.jpg", nBufferLength=0x105, lpBuffer=0x31e1c4, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\tZ02_j2HoUAEzAXcbrvF\\MqHlcYZXc1ykd8m-7zLx\\fs6ZyJDVW7MWb\\Oxgbwq.jpg", lpFilePart=0x0) returned 0x69 [0089.165] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e624) returned 1 [0089.165] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\tZ02_j2HoUAEzAXcbrvF\\MqHlcYZXc1ykd8m-7zLx\\fs6ZyJDVW7MWb\\Oxgbwq.jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\pictures\\tz02_j2houaezaxcbrvf\\mqhlcyzxc1ykd8m-7zlx\\fs6zyjdvw7mwb\\oxgbwq.jpg"), fInfoLevelId=0x0, lpFileInformation=0x31e6a0 | out: lpFileInformation=0x31e6a0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x395a1bd0, ftCreationTime.dwHighDateTime=0x1d5d952, ftLastAccessTime.dwLowDateTime=0xd44e1be0, ftLastAccessTime.dwHighDateTime=0x1d5df89, ftLastWriteTime.dwLowDateTime=0x189675c0, ftLastWriteTime.dwHighDateTime=0x1d6eb7f, nFileSizeHigh=0x0, nFileSizeLow=0x74b0)) returned 1 [0089.165] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e620) returned 1 [0089.165] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\tZ02_j2HoUAEzAXcbrvF\\MqHlcYZXc1ykd8m-7zLx\\fs6ZyJDVW7MWb\\Oxgbwq.jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\pictures\\tz02_j2houaezaxcbrvf\\mqhlcyzxc1ykd8m-7zlx\\fs6zyjdvw7mwb\\oxgbwq.jpg"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\tZ02_j2HoUAEzAXcbrvF\\MqHlcYZXc1ykd8m-7zLx\\fs6ZyJDVW7MWb\\Oxgbwq.jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\pictures\\tz02_j2houaezaxcbrvf\\mqhlcyzxc1ykd8m-7zlx\\fs6zyjdvw7mwb\\oxgbwq.jpg")) returned 1 [0089.165] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\tZ02_j2HoUAEzAXcbrvF\\MqHlcYZXc1ykd8m-7zLx\\fs6ZyJDVW7MWb\\wEMrbUbF-Mv87fszk-.bmp", nBufferLength=0x105, lpBuffer=0x31e0a4, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\tZ02_j2HoUAEzAXcbrvF\\MqHlcYZXc1ykd8m-7zLx\\fs6ZyJDVW7MWb\\wEMrbUbF-Mv87fszk-.bmp", lpFilePart=0x0) returned 0x75 [0089.165] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e598) returned 1 [0089.165] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\tZ02_j2HoUAEzAXcbrvF\\MqHlcYZXc1ykd8m-7zLx\\fs6ZyJDVW7MWb\\wEMrbUbF-Mv87fszk-.bmp" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\pictures\\tz02_j2houaezaxcbrvf\\mqhlcyzxc1ykd8m-7zlx\\fs6zyjdvw7mwb\\wemrbubf-mv87fszk-.bmp"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x178 [0089.165] GetFileType (hFile=0x178) returned 0x1 [0089.165] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e594) returned 1 [0089.165] GetFileType (hFile=0x178) returned 0x1 [0089.165] GetFileSize (in: hFile=0x178, lpFileSizeHigh=0x31e6a0 | out: lpFileSizeHigh=0x31e6a0*=0x0) returned 0xa4e0 [0089.165] ReadFile (in: hFile=0x178, lpBuffer=0x26983b8, nNumberOfBytesToRead=0xa4e0, lpNumberOfBytesRead=0x31e64c, lpOverlapped=0x0 | out: lpBuffer=0x26983b8*, lpNumberOfBytesRead=0x31e64c*=0xa4e0, lpOverlapped=0x0) returned 1 [0089.166] CloseHandle (hObject=0x178) returned 1 [0089.181] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\tZ02_j2HoUAEzAXcbrvF\\MqHlcYZXc1ykd8m-7zLx\\fs6ZyJDVW7MWb\\wEMrbUbF-Mv87fszk-.bmp", nBufferLength=0x105, lpBuffer=0x31e090, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\tZ02_j2HoUAEzAXcbrvF\\MqHlcYZXc1ykd8m-7zLx\\fs6ZyJDVW7MWb\\wEMrbUbF-Mv87fszk-.bmp", lpFilePart=0x0) returned 0x75 [0089.181] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e584) returned 1 [0089.181] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\tZ02_j2HoUAEzAXcbrvF\\MqHlcYZXc1ykd8m-7zLx\\fs6ZyJDVW7MWb\\wEMrbUbF-Mv87fszk-.bmp" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\pictures\\tz02_j2houaezaxcbrvf\\mqhlcyzxc1ykd8m-7zlx\\fs6zyjdvw7mwb\\wemrbubf-mv87fszk-.bmp"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x178 [0089.182] GetFileType (hFile=0x178) returned 0x1 [0089.182] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e580) returned 1 [0089.182] GetFileType (hFile=0x178) returned 0x1 [0089.182] WriteFile (in: hFile=0x178, lpBuffer=0x2718ba8*, nNumberOfBytesToWrite=0xa4f0, lpNumberOfBytesWritten=0x31e640, lpOverlapped=0x0 | out: lpBuffer=0x2718ba8*, lpNumberOfBytesWritten=0x31e640*=0xa4f0, lpOverlapped=0x0) returned 1 [0089.183] CloseHandle (hObject=0x178) returned 1 [0089.183] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\tZ02_j2HoUAEzAXcbrvF\\MqHlcYZXc1ykd8m-7zLx\\fs6ZyJDVW7MWb\\wEMrbUbF-Mv87fszk-.bmp", nBufferLength=0x105, lpBuffer=0x31e1c4, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\tZ02_j2HoUAEzAXcbrvF\\MqHlcYZXc1ykd8m-7zLx\\fs6ZyJDVW7MWb\\wEMrbUbF-Mv87fszk-.bmp", lpFilePart=0x0) returned 0x75 [0089.183] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\tZ02_j2HoUAEzAXcbrvF\\MqHlcYZXc1ykd8m-7zLx\\fs6ZyJDVW7MWb\\wEMrbUbF-Mv87fszk-.bmp", nBufferLength=0x105, lpBuffer=0x31e1c4, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\tZ02_j2HoUAEzAXcbrvF\\MqHlcYZXc1ykd8m-7zLx\\fs6ZyJDVW7MWb\\wEMrbUbF-Mv87fszk-.bmp", lpFilePart=0x0) returned 0x75 [0089.183] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e624) returned 1 [0089.184] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\tZ02_j2HoUAEzAXcbrvF\\MqHlcYZXc1ykd8m-7zLx\\fs6ZyJDVW7MWb\\wEMrbUbF-Mv87fszk-.bmp" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\pictures\\tz02_j2houaezaxcbrvf\\mqhlcyzxc1ykd8m-7zlx\\fs6zyjdvw7mwb\\wemrbubf-mv87fszk-.bmp"), fInfoLevelId=0x0, lpFileInformation=0x31e6a0 | out: lpFileInformation=0x31e6a0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x629cee60, ftCreationTime.dwHighDateTime=0x1d5e658, ftLastAccessTime.dwLowDateTime=0x5d857fe0, ftLastAccessTime.dwHighDateTime=0x1d5e20d, ftLastWriteTime.dwLowDateTime=0x1898d720, ftLastWriteTime.dwHighDateTime=0x1d6eb7f, nFileSizeHigh=0x0, nFileSizeLow=0xa4f0)) returned 1 [0089.184] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e620) returned 1 [0089.184] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\tZ02_j2HoUAEzAXcbrvF\\MqHlcYZXc1ykd8m-7zLx\\fs6ZyJDVW7MWb\\wEMrbUbF-Mv87fszk-.bmp" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\pictures\\tz02_j2houaezaxcbrvf\\mqhlcyzxc1ykd8m-7zlx\\fs6zyjdvw7mwb\\wemrbubf-mv87fszk-.bmp"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\tZ02_j2HoUAEzAXcbrvF\\MqHlcYZXc1ykd8m-7zLx\\fs6ZyJDVW7MWb\\wEMrbUbF-Mv87fszk-.bmp" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\pictures\\tz02_j2houaezaxcbrvf\\mqhlcyzxc1ykd8m-7zlx\\fs6zyjdvw7mwb\\wemrbubf-mv87fszk-.bmp")) returned 1 [0089.184] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e834) returned 1 [0089.184] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\PrintHood", nBufferLength=0x105, lpBuffer=0x31e33c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\PrintHood", lpFilePart=0x0) returned 0x27 [0089.184] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\PrintHood\\", nBufferLength=0x105, lpBuffer=0x31e310, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\PrintHood\\", lpFilePart=0x0) returned 0x28 [0089.184] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\PrintHood\\*", lpFindFileData=0x31e55c | out: lpFindFileData=0x31e55c*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0089.184] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e7f8) returned 1 [0089.186] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e834) returned 1 [0089.186] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Recent", nBufferLength=0x105, lpBuffer=0x31e33c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Recent", lpFilePart=0x0) returned 0x24 [0089.186] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Recent\\", nBufferLength=0x105, lpBuffer=0x31e310, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Recent\\", lpFilePart=0x0) returned 0x25 [0089.186] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Recent\\*", lpFindFileData=0x31e55c | out: lpFindFileData=0x31e55c*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0089.186] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e7f8) returned 1 [0089.187] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e834) returned 1 [0089.187] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Saved Games", nBufferLength=0x105, lpBuffer=0x31e33c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Saved Games", lpFilePart=0x0) returned 0x29 [0089.187] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Saved Games\\", nBufferLength=0x105, lpBuffer=0x31e310, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Saved Games\\", lpFilePart=0x0) returned 0x2a [0089.187] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Saved Games\\*", lpFindFileData=0x31e55c | out: lpFindFileData=0x31e55c*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x28cd94e0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28d257a0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x2d22d5a0, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x381fc0 [0089.188] FindNextFileW (in: hFindFile=0x381fc0, lpFindFileData=0x31e56c | out: lpFindFileData=0x31e56c*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x28cd94e0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28d257a0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x2d22d5a0, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0089.188] FindNextFileW (in: hFindFile=0x381fc0, lpFindFileData=0x31e56c | out: lpFindFileData=0x31e56c*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0x28d257a0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28d257a0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x2d22d5a0, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x11a, dwReserved0=0x0, dwReserved1=0x0, cFileName="desktop.ini", cAlternateFileName="")) returned 1 [0089.188] FindNextFileW (in: hFindFile=0x381fc0, lpFindFileData=0x31e56c | out: lpFindFileData=0x31e56c*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0089.188] FindClose (in: hFindFile=0x381fc0 | out: hFindFile=0x381fc0) returned 1 [0089.188] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e7f4) returned 1 [0089.188] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e800) returned 1 [0089.188] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e834) returned 1 [0089.188] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Saved Games", nBufferLength=0x105, lpBuffer=0x31e33c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Saved Games", lpFilePart=0x0) returned 0x29 [0089.188] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Saved Games\\", nBufferLength=0x105, lpBuffer=0x31e310, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Saved Games\\", lpFilePart=0x0) returned 0x2a [0089.188] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Saved Games\\*", lpFindFileData=0x31e55c | out: lpFindFileData=0x31e55c*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x28cd94e0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28d257a0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x2d22d5a0, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x381fc0 [0089.188] FindNextFileW (in: hFindFile=0x381fc0, lpFindFileData=0x31e56c | out: lpFindFileData=0x31e56c*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x28cd94e0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28d257a0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x2d22d5a0, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0089.189] FindNextFileW (in: hFindFile=0x381fc0, lpFindFileData=0x31e56c | out: lpFindFileData=0x31e56c*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0x28d257a0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28d257a0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x2d22d5a0, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x11a, dwReserved0=0x0, dwReserved1=0x0, cFileName="desktop.ini", cAlternateFileName="")) returned 1 [0089.189] FindNextFileW (in: hFindFile=0x381fc0, lpFindFileData=0x31e56c | out: lpFindFileData=0x31e56c*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0x28d257a0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28d257a0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x2d22d5a0, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x11a, dwReserved0=0x0, dwReserved1=0x0, cFileName="desktop.ini", cAlternateFileName="")) returned 0 [0089.189] FindClose (in: hFindFile=0x381fc0 | out: hFindFile=0x381fc0) returned 1 [0089.189] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e7f4) returned 1 [0089.189] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e800) returned 1 [0089.189] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e834) returned 1 [0089.189] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Searches", nBufferLength=0x105, lpBuffer=0x31e33c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Searches", lpFilePart=0x0) returned 0x26 [0089.189] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Searches\\", nBufferLength=0x105, lpBuffer=0x31e310, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Searches\\", lpFilePart=0x0) returned 0x27 [0089.189] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Searches\\*", lpFindFileData=0x31e55c | out: lpFindFileData=0x31e55c*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x28cd94e0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28de3e80, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x2d1e12e0, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x381fc0 [0089.189] FindNextFileW (in: hFindFile=0x381fc0, lpFindFileData=0x31e56c | out: lpFindFileData=0x31e56c*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x28cd94e0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28de3e80, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x2d1e12e0, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0089.189] FindNextFileW (in: hFindFile=0x381fc0, lpFindFileData=0x31e56c | out: lpFindFileData=0x31e56c*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0x28d257a0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28d257a0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x2d1e12e0, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x20c, dwReserved0=0x0, dwReserved1=0x0, cFileName="desktop.ini", cAlternateFileName="")) returned 1 [0089.190] FindNextFileW (in: hFindFile=0x381fc0, lpFindFileData=0x31e56c | out: lpFindFileData=0x31e56c*(dwFileAttributes=0x23, ftCreationTime.dwLowDateTime=0x28d257a0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28d257a0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xf99d9932, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0xf8, dwReserved0=0x0, dwReserved1=0x0, cFileName="Everywhere.search-ms", cAlternateFileName="EVERYW~1.SEA")) returned 1 [0089.190] FindNextFileW (in: hFindFile=0x381fc0, lpFindFileData=0x31e56c | out: lpFindFileData=0x31e56c*(dwFileAttributes=0x23, ftCreationTime.dwLowDateTime=0x28d257a0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28d257a0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xf99b37d1, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0xf8, dwReserved0=0x0, dwReserved1=0x0, cFileName="Indexed Locations.search-ms", cAlternateFileName="INDEXE~1.SEA")) returned 1 [0089.190] FindNextFileW (in: hFindFile=0x381fc0, lpFindFileData=0x31e56c | out: lpFindFileData=0x31e56c*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0089.190] FindClose (in: hFindFile=0x381fc0 | out: hFindFile=0x381fc0) returned 1 [0089.190] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e7f4) returned 1 [0089.190] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e800) returned 1 [0089.190] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e834) returned 1 [0089.190] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Searches", nBufferLength=0x105, lpBuffer=0x31e33c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Searches", lpFilePart=0x0) returned 0x26 [0089.190] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Searches\\", nBufferLength=0x105, lpBuffer=0x31e310, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Searches\\", lpFilePart=0x0) returned 0x27 [0089.190] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Searches\\*", lpFindFileData=0x31e55c | out: lpFindFileData=0x31e55c*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x28cd94e0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28de3e80, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x2d1e12e0, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x381fc0 [0089.190] FindNextFileW (in: hFindFile=0x381fc0, lpFindFileData=0x31e56c | out: lpFindFileData=0x31e56c*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x28cd94e0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28de3e80, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x2d1e12e0, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0089.190] FindNextFileW (in: hFindFile=0x381fc0, lpFindFileData=0x31e56c | out: lpFindFileData=0x31e56c*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0x28d257a0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28d257a0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x2d1e12e0, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x20c, dwReserved0=0x0, dwReserved1=0x0, cFileName="desktop.ini", cAlternateFileName="")) returned 1 [0089.191] FindNextFileW (in: hFindFile=0x381fc0, lpFindFileData=0x31e56c | out: lpFindFileData=0x31e56c*(dwFileAttributes=0x23, ftCreationTime.dwLowDateTime=0x28d257a0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28d257a0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xf99d9932, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0xf8, dwReserved0=0x0, dwReserved1=0x0, cFileName="Everywhere.search-ms", cAlternateFileName="EVERYW~1.SEA")) returned 1 [0089.191] FindNextFileW (in: hFindFile=0x381fc0, lpFindFileData=0x31e56c | out: lpFindFileData=0x31e56c*(dwFileAttributes=0x23, ftCreationTime.dwLowDateTime=0x28d257a0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28d257a0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xf99b37d1, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0xf8, dwReserved0=0x0, dwReserved1=0x0, cFileName="Indexed Locations.search-ms", cAlternateFileName="INDEXE~1.SEA")) returned 1 [0089.191] FindNextFileW (in: hFindFile=0x381fc0, lpFindFileData=0x31e56c | out: lpFindFileData=0x31e56c*(dwFileAttributes=0x23, ftCreationTime.dwLowDateTime=0x28d257a0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28d257a0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xf99b37d1, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0xf8, dwReserved0=0x0, dwReserved1=0x0, cFileName="Indexed Locations.search-ms", cAlternateFileName="INDEXE~1.SEA")) returned 0 [0089.191] FindClose (in: hFindFile=0x381fc0 | out: hFindFile=0x381fc0) returned 1 [0089.191] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e7f4) returned 1 [0089.191] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e800) returned 1 [0089.191] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e834) returned 1 [0089.191] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\SendTo", nBufferLength=0x105, lpBuffer=0x31e33c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\SendTo", lpFilePart=0x0) returned 0x24 [0089.191] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\SendTo\\", nBufferLength=0x105, lpBuffer=0x31e310, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\SendTo\\", lpFilePart=0x0) returned 0x25 [0089.191] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\SendTo\\*", lpFindFileData=0x31e55c | out: lpFindFileData=0x31e55c*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0089.191] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e7f8) returned 1 [0089.192] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e834) returned 1 [0089.193] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Start Menu", nBufferLength=0x105, lpBuffer=0x31e33c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Start Menu", lpFilePart=0x0) returned 0x28 [0089.193] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Start Menu\\", nBufferLength=0x105, lpBuffer=0x31e310, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Start Menu\\", lpFilePart=0x0) returned 0x29 [0089.193] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Start Menu\\*", lpFindFileData=0x31e55c | out: lpFindFileData=0x31e55c*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0089.193] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e7f8) returned 1 [0089.194] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e834) returned 1 [0089.194] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Templates", nBufferLength=0x105, lpBuffer=0x31e33c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Templates", lpFilePart=0x0) returned 0x27 [0089.194] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Templates\\", nBufferLength=0x105, lpBuffer=0x31e310, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Templates\\", lpFilePart=0x0) returned 0x28 [0089.194] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Templates\\*", lpFindFileData=0x31e55c | out: lpFindFileData=0x31e55c*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0089.194] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e7f8) returned 1 [0089.195] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e834) returned 1 [0089.195] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos", nBufferLength=0x105, lpBuffer=0x31e33c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos", lpFilePart=0x0) returned 0x24 [0089.195] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\", nBufferLength=0x105, lpBuffer=0x31e310, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\", lpFilePart=0x0) returned 0x25 [0089.195] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\*", lpFindFileData=0x31e55c | out: lpFindFileData=0x31e55c*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x28cd94e0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0xd8f50380, ftLastAccessTime.dwHighDateTime=0x1d5e82a, ftLastWriteTime.dwLowDateTime=0xd8f50380, ftLastWriteTime.dwHighDateTime=0x1d5e82a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x381fc0 [0089.195] FindNextFileW (in: hFindFile=0x381fc0, lpFindFileData=0x31e56c | out: lpFindFileData=0x31e56c*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x28cd94e0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0xd8f50380, ftLastAccessTime.dwHighDateTime=0x1d5e82a, ftLastWriteTime.dwLowDateTime=0xd8f50380, ftLastWriteTime.dwHighDateTime=0x1d5e82a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0089.196] FindNextFileW (in: hFindFile=0x381fc0, lpFindFileData=0x31e56c | out: lpFindFileData=0x31e56c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x63b75200, ftCreationTime.dwHighDateTime=0x1d5e058, ftLastAccessTime.dwLowDateTime=0x73ad1ac0, ftLastAccessTime.dwHighDateTime=0x1d5debc, ftLastWriteTime.dwLowDateTime=0x73ad1ac0, ftLastWriteTime.dwHighDateTime=0x1d5debc, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="3fmT5WPHA39l3f9", cAlternateFileName="3FMT5W~1")) returned 1 [0089.196] FindNextFileW (in: hFindFile=0x381fc0, lpFindFileData=0x31e56c | out: lpFindFileData=0x31e56c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x88078cb0, ftCreationTime.dwHighDateTime=0x1d5d7bb, ftLastAccessTime.dwLowDateTime=0x3689e410, ftLastAccessTime.dwHighDateTime=0x1d5dda0, ftLastWriteTime.dwLowDateTime=0x3689e410, ftLastWriteTime.dwHighDateTime=0x1d5dda0, nFileSizeHigh=0x0, nFileSizeLow=0x1290c, dwReserved0=0x0, dwReserved1=0x0, cFileName="56VC_W.mkv", cAlternateFileName="")) returned 1 [0089.196] FindNextFileW (in: hFindFile=0x381fc0, lpFindFileData=0x31e56c | out: lpFindFileData=0x31e56c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x866ac560, ftCreationTime.dwHighDateTime=0x1d5e26b, ftLastAccessTime.dwLowDateTime=0xe7f77a00, ftLastAccessTime.dwHighDateTime=0x1d5e480, ftLastWriteTime.dwLowDateTime=0xe7f77a00, ftLastWriteTime.dwHighDateTime=0x1d5e480, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="8mSM9XyQ3XQ6", cAlternateFileName="8MSM9X~1")) returned 1 [0089.196] FindNextFileW (in: hFindFile=0x381fc0, lpFindFileData=0x31e56c | out: lpFindFileData=0x31e56c*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0x28d257a0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28d257a0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x2d1bb180, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x1f8, dwReserved0=0x0, dwReserved1=0x0, cFileName="desktop.ini", cAlternateFileName="")) returned 1 [0089.196] FindNextFileW (in: hFindFile=0x381fc0, lpFindFileData=0x31e56c | out: lpFindFileData=0x31e56c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3e985b90, ftCreationTime.dwHighDateTime=0x1d5e706, ftLastAccessTime.dwLowDateTime=0x642c5060, ftLastAccessTime.dwHighDateTime=0x1d5e539, ftLastWriteTime.dwLowDateTime=0x642c5060, ftLastWriteTime.dwHighDateTime=0x1d5e539, nFileSizeHigh=0x0, nFileSizeLow=0xe9c2, dwReserved0=0x0, dwReserved1=0x0, cFileName="KWFBnXM-ANv oaw_q191.mp4", cAlternateFileName="KWFBNX~1.MP4")) returned 1 [0089.196] FindNextFileW (in: hFindFile=0x381fc0, lpFindFileData=0x31e56c | out: lpFindFileData=0x31e56c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6d14cec0, ftCreationTime.dwHighDateTime=0x1d5e7fd, ftLastAccessTime.dwLowDateTime=0x5b884830, ftLastAccessTime.dwHighDateTime=0x1d5d7b8, ftLastWriteTime.dwLowDateTime=0x5b884830, ftLastWriteTime.dwHighDateTime=0x1d5d7b8, nFileSizeHigh=0x0, nFileSizeLow=0x15ebd, dwReserved0=0x0, dwReserved1=0x0, cFileName="LQtj-lRCWNvjz.avi", cAlternateFileName="LQTJ-L~1.AVI")) returned 1 [0089.196] FindNextFileW (in: hFindFile=0x381fc0, lpFindFileData=0x31e56c | out: lpFindFileData=0x31e56c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x85c71b0, ftCreationTime.dwHighDateTime=0x1d5da2c, ftLastAccessTime.dwLowDateTime=0x4d3d6b00, ftLastAccessTime.dwHighDateTime=0x1d5dfd0, ftLastWriteTime.dwLowDateTime=0x4d3d6b00, ftLastWriteTime.dwHighDateTime=0x1d5dfd0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="MRfMb1EbDbFqINXp-b", cAlternateFileName="MRFMB1~1")) returned 1 [0089.197] FindNextFileW (in: hFindFile=0x381fc0, lpFindFileData=0x31e56c | out: lpFindFileData=0x31e56c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x769bd1b0, ftCreationTime.dwHighDateTime=0x1d5e0ea, ftLastAccessTime.dwLowDateTime=0x2181eb10, ftLastAccessTime.dwHighDateTime=0x1d5ddb1, ftLastWriteTime.dwLowDateTime=0x2181eb10, ftLastWriteTime.dwHighDateTime=0x1d5ddb1, nFileSizeHigh=0x0, nFileSizeLow=0x18e2a, dwReserved0=0x0, dwReserved1=0x0, cFileName="oEOIae9ppu.avi", cAlternateFileName="OEOIAE~1.AVI")) returned 1 [0089.197] FindNextFileW (in: hFindFile=0x381fc0, lpFindFileData=0x31e56c | out: lpFindFileData=0x31e56c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa4d1fcc0, ftCreationTime.dwHighDateTime=0x1d5e505, ftLastAccessTime.dwLowDateTime=0x7dd58d0, ftLastAccessTime.dwHighDateTime=0x1d5dcac, ftLastWriteTime.dwLowDateTime=0x7dd58d0, ftLastWriteTime.dwHighDateTime=0x1d5dcac, nFileSizeHigh=0x0, nFileSizeLow=0x15f55, dwReserved0=0x0, dwReserved1=0x0, cFileName="q-7-UiG.flv", cAlternateFileName="")) returned 1 [0089.197] FindNextFileW (in: hFindFile=0x381fc0, lpFindFileData=0x31e56c | out: lpFindFileData=0x31e56c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1e1cd5f0, ftCreationTime.dwHighDateTime=0x1d5dc23, ftLastAccessTime.dwLowDateTime=0x12f9c200, ftLastAccessTime.dwHighDateTime=0x1d5daed, ftLastWriteTime.dwLowDateTime=0x12f9c200, ftLastWriteTime.dwHighDateTime=0x1d5daed, nFileSizeHigh=0x0, nFileSizeLow=0x13124, dwReserved0=0x0, dwReserved1=0x0, cFileName="RS_wBLO.swf", cAlternateFileName="")) returned 1 [0089.197] FindNextFileW (in: hFindFile=0x381fc0, lpFindFileData=0x31e56c | out: lpFindFileData=0x31e56c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xcf944970, ftCreationTime.dwHighDateTime=0x1d5db0c, ftLastAccessTime.dwLowDateTime=0x16896ff0, ftLastAccessTime.dwHighDateTime=0x1d5e3d6, ftLastWriteTime.dwLowDateTime=0x16896ff0, ftLastWriteTime.dwHighDateTime=0x1d5e3d6, nFileSizeHigh=0x0, nFileSizeLow=0x4923, dwReserved0=0x0, dwReserved1=0x0, cFileName="vR-mDTch9N.swf", cAlternateFileName="VR-MDT~1.SWF")) returned 1 [0089.197] FindNextFileW (in: hFindFile=0x381fc0, lpFindFileData=0x31e56c | out: lpFindFileData=0x31e56c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x979e8bc0, ftCreationTime.dwHighDateTime=0x1d5dc42, ftLastAccessTime.dwLowDateTime=0x7b191b50, ftLastAccessTime.dwHighDateTime=0x1d5e4ee, ftLastWriteTime.dwLowDateTime=0x7b191b50, ftLastWriteTime.dwHighDateTime=0x1d5e4ee, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="vzk6K51PQW9jyiRf", cAlternateFileName="VZK6K5~1")) returned 1 [0089.197] FindNextFileW (in: hFindFile=0x381fc0, lpFindFileData=0x31e56c | out: lpFindFileData=0x31e56c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x979e8bc0, ftCreationTime.dwHighDateTime=0x1d5dc42, ftLastAccessTime.dwLowDateTime=0x7b191b50, ftLastAccessTime.dwHighDateTime=0x1d5e4ee, ftLastWriteTime.dwLowDateTime=0x7b191b50, ftLastWriteTime.dwHighDateTime=0x1d5e4ee, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="vzk6K51PQW9jyiRf", cAlternateFileName="VZK6K5~1")) returned 0 [0089.197] FindClose (in: hFindFile=0x381fc0 | out: hFindFile=0x381fc0) returned 1 [0089.197] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e7f4) returned 1 [0089.197] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e800) returned 1 [0089.197] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e834) returned 1 [0089.197] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos", nBufferLength=0x105, lpBuffer=0x31e33c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos", lpFilePart=0x0) returned 0x24 [0089.197] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\", nBufferLength=0x105, lpBuffer=0x31e310, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\", lpFilePart=0x0) returned 0x25 [0089.198] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\*", lpFindFileData=0x31e55c | out: lpFindFileData=0x31e55c*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x28cd94e0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0xd8f50380, ftLastAccessTime.dwHighDateTime=0x1d5e82a, ftLastWriteTime.dwLowDateTime=0xd8f50380, ftLastWriteTime.dwHighDateTime=0x1d5e82a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x381fc0 [0089.198] FindNextFileW (in: hFindFile=0x381fc0, lpFindFileData=0x31e56c | out: lpFindFileData=0x31e56c*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x28cd94e0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0xd8f50380, ftLastAccessTime.dwHighDateTime=0x1d5e82a, ftLastWriteTime.dwLowDateTime=0xd8f50380, ftLastWriteTime.dwHighDateTime=0x1d5e82a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0089.198] FindNextFileW (in: hFindFile=0x381fc0, lpFindFileData=0x31e56c | out: lpFindFileData=0x31e56c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x63b75200, ftCreationTime.dwHighDateTime=0x1d5e058, ftLastAccessTime.dwLowDateTime=0x73ad1ac0, ftLastAccessTime.dwHighDateTime=0x1d5debc, ftLastWriteTime.dwLowDateTime=0x73ad1ac0, ftLastWriteTime.dwHighDateTime=0x1d5debc, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="3fmT5WPHA39l3f9", cAlternateFileName="3FMT5W~1")) returned 1 [0089.198] FindNextFileW (in: hFindFile=0x381fc0, lpFindFileData=0x31e56c | out: lpFindFileData=0x31e56c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x88078cb0, ftCreationTime.dwHighDateTime=0x1d5d7bb, ftLastAccessTime.dwLowDateTime=0x3689e410, ftLastAccessTime.dwHighDateTime=0x1d5dda0, ftLastWriteTime.dwLowDateTime=0x3689e410, ftLastWriteTime.dwHighDateTime=0x1d5dda0, nFileSizeHigh=0x0, nFileSizeLow=0x1290c, dwReserved0=0x0, dwReserved1=0x0, cFileName="56VC_W.mkv", cAlternateFileName="")) returned 1 [0089.198] FindNextFileW (in: hFindFile=0x381fc0, lpFindFileData=0x31e56c | out: lpFindFileData=0x31e56c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x866ac560, ftCreationTime.dwHighDateTime=0x1d5e26b, ftLastAccessTime.dwLowDateTime=0xe7f77a00, ftLastAccessTime.dwHighDateTime=0x1d5e480, ftLastWriteTime.dwLowDateTime=0xe7f77a00, ftLastWriteTime.dwHighDateTime=0x1d5e480, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="8mSM9XyQ3XQ6", cAlternateFileName="8MSM9X~1")) returned 1 [0089.198] FindNextFileW (in: hFindFile=0x381fc0, lpFindFileData=0x31e56c | out: lpFindFileData=0x31e56c*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0x28d257a0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28d257a0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x2d1bb180, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x1f8, dwReserved0=0x0, dwReserved1=0x0, cFileName="desktop.ini", cAlternateFileName="")) returned 1 [0089.198] FindNextFileW (in: hFindFile=0x381fc0, lpFindFileData=0x31e56c | out: lpFindFileData=0x31e56c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3e985b90, ftCreationTime.dwHighDateTime=0x1d5e706, ftLastAccessTime.dwLowDateTime=0x642c5060, ftLastAccessTime.dwHighDateTime=0x1d5e539, ftLastWriteTime.dwLowDateTime=0x642c5060, ftLastWriteTime.dwHighDateTime=0x1d5e539, nFileSizeHigh=0x0, nFileSizeLow=0xe9c2, dwReserved0=0x0, dwReserved1=0x0, cFileName="KWFBnXM-ANv oaw_q191.mp4", cAlternateFileName="KWFBNX~1.MP4")) returned 1 [0089.198] FindNextFileW (in: hFindFile=0x381fc0, lpFindFileData=0x31e56c | out: lpFindFileData=0x31e56c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6d14cec0, ftCreationTime.dwHighDateTime=0x1d5e7fd, ftLastAccessTime.dwLowDateTime=0x5b884830, ftLastAccessTime.dwHighDateTime=0x1d5d7b8, ftLastWriteTime.dwLowDateTime=0x5b884830, ftLastWriteTime.dwHighDateTime=0x1d5d7b8, nFileSizeHigh=0x0, nFileSizeLow=0x15ebd, dwReserved0=0x0, dwReserved1=0x0, cFileName="LQtj-lRCWNvjz.avi", cAlternateFileName="LQTJ-L~1.AVI")) returned 1 [0089.199] FindNextFileW (in: hFindFile=0x381fc0, lpFindFileData=0x31e56c | out: lpFindFileData=0x31e56c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x85c71b0, ftCreationTime.dwHighDateTime=0x1d5da2c, ftLastAccessTime.dwLowDateTime=0x4d3d6b00, ftLastAccessTime.dwHighDateTime=0x1d5dfd0, ftLastWriteTime.dwLowDateTime=0x4d3d6b00, ftLastWriteTime.dwHighDateTime=0x1d5dfd0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="MRfMb1EbDbFqINXp-b", cAlternateFileName="MRFMB1~1")) returned 1 [0089.199] FindNextFileW (in: hFindFile=0x381fc0, lpFindFileData=0x31e56c | out: lpFindFileData=0x31e56c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x769bd1b0, ftCreationTime.dwHighDateTime=0x1d5e0ea, ftLastAccessTime.dwLowDateTime=0x2181eb10, ftLastAccessTime.dwHighDateTime=0x1d5ddb1, ftLastWriteTime.dwLowDateTime=0x2181eb10, ftLastWriteTime.dwHighDateTime=0x1d5ddb1, nFileSizeHigh=0x0, nFileSizeLow=0x18e2a, dwReserved0=0x0, dwReserved1=0x0, cFileName="oEOIae9ppu.avi", cAlternateFileName="OEOIAE~1.AVI")) returned 1 [0089.199] FindNextFileW (in: hFindFile=0x381fc0, lpFindFileData=0x31e56c | out: lpFindFileData=0x31e56c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa4d1fcc0, ftCreationTime.dwHighDateTime=0x1d5e505, ftLastAccessTime.dwLowDateTime=0x7dd58d0, ftLastAccessTime.dwHighDateTime=0x1d5dcac, ftLastWriteTime.dwLowDateTime=0x7dd58d0, ftLastWriteTime.dwHighDateTime=0x1d5dcac, nFileSizeHigh=0x0, nFileSizeLow=0x15f55, dwReserved0=0x0, dwReserved1=0x0, cFileName="q-7-UiG.flv", cAlternateFileName="")) returned 1 [0089.199] FindNextFileW (in: hFindFile=0x381fc0, lpFindFileData=0x31e56c | out: lpFindFileData=0x31e56c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1e1cd5f0, ftCreationTime.dwHighDateTime=0x1d5dc23, ftLastAccessTime.dwLowDateTime=0x12f9c200, ftLastAccessTime.dwHighDateTime=0x1d5daed, ftLastWriteTime.dwLowDateTime=0x12f9c200, ftLastWriteTime.dwHighDateTime=0x1d5daed, nFileSizeHigh=0x0, nFileSizeLow=0x13124, dwReserved0=0x0, dwReserved1=0x0, cFileName="RS_wBLO.swf", cAlternateFileName="")) returned 1 [0089.199] FindNextFileW (in: hFindFile=0x381fc0, lpFindFileData=0x31e56c | out: lpFindFileData=0x31e56c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xcf944970, ftCreationTime.dwHighDateTime=0x1d5db0c, ftLastAccessTime.dwLowDateTime=0x16896ff0, ftLastAccessTime.dwHighDateTime=0x1d5e3d6, ftLastWriteTime.dwLowDateTime=0x16896ff0, ftLastWriteTime.dwHighDateTime=0x1d5e3d6, nFileSizeHigh=0x0, nFileSizeLow=0x4923, dwReserved0=0x0, dwReserved1=0x0, cFileName="vR-mDTch9N.swf", cAlternateFileName="VR-MDT~1.SWF")) returned 1 [0089.199] FindNextFileW (in: hFindFile=0x381fc0, lpFindFileData=0x31e56c | out: lpFindFileData=0x31e56c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x979e8bc0, ftCreationTime.dwHighDateTime=0x1d5dc42, ftLastAccessTime.dwLowDateTime=0x7b191b50, ftLastAccessTime.dwHighDateTime=0x1d5e4ee, ftLastWriteTime.dwLowDateTime=0x7b191b50, ftLastWriteTime.dwHighDateTime=0x1d5e4ee, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="vzk6K51PQW9jyiRf", cAlternateFileName="VZK6K5~1")) returned 1 [0089.199] FindNextFileW (in: hFindFile=0x381fc0, lpFindFileData=0x31e56c | out: lpFindFileData=0x31e56c*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0089.199] FindClose (in: hFindFile=0x381fc0 | out: hFindFile=0x381fc0) returned 1 [0089.200] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e7f4) returned 1 [0089.200] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e800) returned 1 [0089.200] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\56VC_W.mkv", nBufferLength=0x105, lpBuffer=0x31e20c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\56VC_W.mkv", lpFilePart=0x0) returned 0x2f [0089.200] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e700) returned 1 [0089.200] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\56VC_W.mkv" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\videos\\56vc_w.mkv"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x178 [0089.200] GetFileType (hFile=0x178) returned 0x1 [0089.200] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e6fc) returned 1 [0089.200] GetFileType (hFile=0x178) returned 0x1 [0089.200] GetFileSize (in: hFile=0x178, lpFileSizeHigh=0x31e808 | out: lpFileSizeHigh=0x31e808*=0x0) returned 0x1290c [0089.200] ReadFile (in: hFile=0x178, lpBuffer=0x272bed8, nNumberOfBytesToRead=0x1290c, lpNumberOfBytesRead=0x31e7b4, lpOverlapped=0x0 | out: lpBuffer=0x272bed8*, lpNumberOfBytesRead=0x31e7b4*=0x1290c, lpOverlapped=0x0) returned 1 [0089.243] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\56VC_W.mkv", nBufferLength=0x105, lpBuffer=0x31e1f8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\56VC_W.mkv", lpFilePart=0x0) returned 0x2f [0089.243] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e6ec) returned 1 [0089.243] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\56VC_W.mkv" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\videos\\56vc_w.mkv"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x178 [0089.244] GetFileType (hFile=0x178) returned 0x1 [0089.244] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e6e8) returned 1 [0089.244] GetFileType (hFile=0x178) returned 0x1 [0089.244] WriteFile (in: hFile=0x178, lpBuffer=0x27b0800*, nNumberOfBytesToWrite=0x12910, lpNumberOfBytesWritten=0x31e7a8, lpOverlapped=0x0 | out: lpBuffer=0x27b0800*, lpNumberOfBytesWritten=0x31e7a8*=0x12910, lpOverlapped=0x0) returned 1 [0089.246] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\56VC_W.mkv", nBufferLength=0x105, lpBuffer=0x31e32c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\56VC_W.mkv", lpFilePart=0x0) returned 0x2f [0089.246] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\56VC_W.mkv", nBufferLength=0x105, lpBuffer=0x31e32c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\56VC_W.mkv", lpFilePart=0x0) returned 0x2f [0089.246] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e78c) returned 1 [0089.247] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\56VC_W.mkv" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\videos\\56vc_w.mkv"), fInfoLevelId=0x0, lpFileInformation=0x31e808 | out: lpFileInformation=0x31e808*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x88078cb0, ftCreationTime.dwHighDateTime=0x1d5d7bb, ftLastAccessTime.dwLowDateTime=0x3689e410, ftLastAccessTime.dwHighDateTime=0x1d5dda0, ftLastWriteTime.dwLowDateTime=0x18a25ca0, ftLastWriteTime.dwHighDateTime=0x1d6eb7f, nFileSizeHigh=0x0, nFileSizeLow=0x12910)) returned 1 [0089.247] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e788) returned 1 [0089.247] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\56VC_W.mkv" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\videos\\56vc_w.mkv"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\56VC_W.mkv" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\videos\\56vc_w.mkv")) returned 1 [0089.247] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\KWFBnXM-ANv oaw_q191.mp4", nBufferLength=0x105, lpBuffer=0x31e20c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\KWFBnXM-ANv oaw_q191.mp4", lpFilePart=0x0) returned 0x3d [0089.247] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e700) returned 1 [0089.247] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\KWFBnXM-ANv oaw_q191.mp4" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\videos\\kwfbnxm-anv oaw_q191.mp4"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x178 [0089.247] GetFileType (hFile=0x178) returned 0x1 [0089.247] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e6fc) returned 1 [0089.247] GetFileType (hFile=0x178) returned 0x1 [0089.247] GetFileSize (in: hFile=0x178, lpFileSizeHigh=0x31e808 | out: lpFileSizeHigh=0x31e808*=0x0) returned 0xe9c2 [0089.247] ReadFile (in: hFile=0x178, lpBuffer=0x27c3434, nNumberOfBytesToRead=0xe9c2, lpNumberOfBytesRead=0x31e7b4, lpOverlapped=0x0 | out: lpBuffer=0x27c3434*, lpNumberOfBytesRead=0x31e7b4*=0xe9c2, lpOverlapped=0x0) returned 1 [0089.279] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\KWFBnXM-ANv oaw_q191.mp4", nBufferLength=0x105, lpBuffer=0x31e1f8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\KWFBnXM-ANv oaw_q191.mp4", lpFilePart=0x0) returned 0x3d [0089.279] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e6ec) returned 1 [0089.279] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\KWFBnXM-ANv oaw_q191.mp4" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\videos\\kwfbnxm-anv oaw_q191.mp4"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x178 [0089.280] GetFileType (hFile=0x178) returned 0x1 [0089.280] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e6e8) returned 1 [0089.280] GetFileType (hFile=0x178) returned 0x1 [0089.280] WriteFile (in: hFile=0x178, lpBuffer=0x283bfa0*, nNumberOfBytesToWrite=0xe9d0, lpNumberOfBytesWritten=0x31e7a8, lpOverlapped=0x0 | out: lpBuffer=0x283bfa0*, lpNumberOfBytesWritten=0x31e7a8*=0xe9d0, lpOverlapped=0x0) returned 1 [0089.282] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\KWFBnXM-ANv oaw_q191.mp4", nBufferLength=0x105, lpBuffer=0x31e32c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\KWFBnXM-ANv oaw_q191.mp4", lpFilePart=0x0) returned 0x3d [0089.282] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\KWFBnXM-ANv oaw_q191.mp4", nBufferLength=0x105, lpBuffer=0x31e32c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\KWFBnXM-ANv oaw_q191.mp4", lpFilePart=0x0) returned 0x3d [0089.282] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e78c) returned 1 [0089.282] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\KWFBnXM-ANv oaw_q191.mp4" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\videos\\kwfbnxm-anv oaw_q191.mp4"), fInfoLevelId=0x0, lpFileInformation=0x31e808 | out: lpFileInformation=0x31e808*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3e985b90, ftCreationTime.dwHighDateTime=0x1d5e706, ftLastAccessTime.dwLowDateTime=0x642c5060, ftLastAccessTime.dwHighDateTime=0x1d5e539, ftLastWriteTime.dwLowDateTime=0x18a980c0, ftLastWriteTime.dwHighDateTime=0x1d6eb7f, nFileSizeHigh=0x0, nFileSizeLow=0xe9d0)) returned 1 [0089.282] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e788) returned 1 [0089.282] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\KWFBnXM-ANv oaw_q191.mp4" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\videos\\kwfbnxm-anv oaw_q191.mp4"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\KWFBnXM-ANv oaw_q191.mp4" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\videos\\kwfbnxm-anv oaw_q191.mp4")) returned 1 [0089.282] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\LQtj-lRCWNvjz.avi", nBufferLength=0x105, lpBuffer=0x31e20c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\LQtj-lRCWNvjz.avi", lpFilePart=0x0) returned 0x36 [0089.282] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e700) returned 1 [0089.282] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\LQtj-lRCWNvjz.avi" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\videos\\lqtj-lrcwnvjz.avi"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x178 [0089.282] GetFileType (hFile=0x178) returned 0x1 [0089.282] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e6fc) returned 1 [0089.282] GetFileType (hFile=0x178) returned 0x1 [0089.283] GetFileSize (in: hFile=0x178, lpFileSizeHigh=0x31e808 | out: lpFileSizeHigh=0x31e808*=0x0) returned 0x15ebd [0089.283] ReadFile (in: hFile=0x178, lpBuffer=0x38fa450, nNumberOfBytesToRead=0x15ebd, lpNumberOfBytesRead=0x31e7b4, lpOverlapped=0x0 | out: lpBuffer=0x38fa450*, lpNumberOfBytesRead=0x31e7b4*=0x15ebd, lpOverlapped=0x0) returned 1 [0089.336] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\LQtj-lRCWNvjz.avi", nBufferLength=0x105, lpBuffer=0x31e1f8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\LQtj-lRCWNvjz.avi", lpFilePart=0x0) returned 0x36 [0089.336] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e6ec) returned 1 [0089.336] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\LQtj-lRCWNvjz.avi" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\videos\\lqtj-lrcwnvjz.avi"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x178 [0089.337] GetFileType (hFile=0x178) returned 0x1 [0089.337] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e6e8) returned 1 [0089.337] GetFileType (hFile=0x178) returned 0x1 [0089.338] WriteFile (in: hFile=0x178, lpBuffer=0x365b100*, nNumberOfBytesToWrite=0x15ec0, lpNumberOfBytesWritten=0x31e7a8, lpOverlapped=0x0 | out: lpBuffer=0x365b100*, lpNumberOfBytesWritten=0x31e7a8*=0x15ec0, lpOverlapped=0x0) returned 1 [0089.340] CloseHandle (hObject=0x178) returned 1 [0089.340] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\LQtj-lRCWNvjz.avi", nBufferLength=0x105, lpBuffer=0x31e32c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\LQtj-lRCWNvjz.avi", lpFilePart=0x0) returned 0x36 [0089.340] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\LQtj-lRCWNvjz.avi", nBufferLength=0x105, lpBuffer=0x31e32c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\LQtj-lRCWNvjz.avi", lpFilePart=0x0) returned 0x36 [0089.340] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e78c) returned 1 [0089.340] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\LQtj-lRCWNvjz.avi" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\videos\\lqtj-lrcwnvjz.avi"), fInfoLevelId=0x0, lpFileInformation=0x31e808 | out: lpFileInformation=0x31e808*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6d14cec0, ftCreationTime.dwHighDateTime=0x1d5e7fd, ftLastAccessTime.dwLowDateTime=0x5b884830, ftLastAccessTime.dwHighDateTime=0x1d5d7b8, ftLastWriteTime.dwLowDateTime=0x18b0a4e0, ftLastWriteTime.dwHighDateTime=0x1d6eb7f, nFileSizeHigh=0x0, nFileSizeLow=0x15ec0)) returned 1 [0089.340] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e788) returned 1 [0089.340] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\LQtj-lRCWNvjz.avi" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\videos\\lqtj-lrcwnvjz.avi"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\LQtj-lRCWNvjz.avi" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\videos\\lqtj-lrcwnvjz.avi")) returned 1 [0089.340] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\oEOIae9ppu.avi", nBufferLength=0x105, lpBuffer=0x31e20c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\oEOIae9ppu.avi", lpFilePart=0x0) returned 0x33 [0089.340] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e700) returned 1 [0089.340] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\oEOIae9ppu.avi" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\videos\\oeoiae9ppu.avi"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x178 [0089.340] GetFileType (hFile=0x178) returned 0x1 [0089.340] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e6fc) returned 1 [0089.341] GetFileType (hFile=0x178) returned 0x1 [0089.341] GetFileSize (in: hFile=0x178, lpFileSizeHigh=0x31e808 | out: lpFileSizeHigh=0x31e808*=0x0) returned 0x18e2a [0089.341] ReadFile (in: hFile=0x178, lpBuffer=0x3670fe0, nNumberOfBytesToRead=0x18e2a, lpNumberOfBytesRead=0x31e7b4, lpOverlapped=0x0 | out: lpBuffer=0x3670fe0*, lpNumberOfBytesRead=0x31e7b4*=0x18e2a, lpOverlapped=0x0) returned 1 [0089.342] CloseHandle (hObject=0x178) returned 1 [0089.392] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\oEOIae9ppu.avi", nBufferLength=0x105, lpBuffer=0x31e1f8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\oEOIae9ppu.avi", lpFilePart=0x0) returned 0x33 [0089.392] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e6ec) returned 1 [0089.392] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\oEOIae9ppu.avi" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\videos\\oeoiae9ppu.avi"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x178 [0089.394] GetFileType (hFile=0x178) returned 0x1 [0089.394] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e6e8) returned 1 [0089.394] GetFileType (hFile=0x178) returned 0x1 [0089.394] WriteFile (in: hFile=0x178, lpBuffer=0x36ed708*, nNumberOfBytesToWrite=0x18e30, lpNumberOfBytesWritten=0x31e7a8, lpOverlapped=0x0 | out: lpBuffer=0x36ed708*, lpNumberOfBytesWritten=0x31e7a8*=0x18e30, lpOverlapped=0x0) returned 1 [0089.396] CloseHandle (hObject=0x178) returned 1 [0089.396] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\oEOIae9ppu.avi", nBufferLength=0x105, lpBuffer=0x31e32c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\oEOIae9ppu.avi", lpFilePart=0x0) returned 0x33 [0089.396] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\oEOIae9ppu.avi", nBufferLength=0x105, lpBuffer=0x31e32c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\oEOIae9ppu.avi", lpFilePart=0x0) returned 0x33 [0089.396] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e78c) returned 1 [0089.396] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\oEOIae9ppu.avi" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\videos\\oeoiae9ppu.avi"), fInfoLevelId=0x0, lpFileInformation=0x31e808 | out: lpFileInformation=0x31e808*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x769bd1b0, ftCreationTime.dwHighDateTime=0x1d5e0ea, ftLastAccessTime.dwLowDateTime=0x2181eb10, ftLastAccessTime.dwHighDateTime=0x1d5ddb1, ftLastWriteTime.dwLowDateTime=0x18ba2a60, ftLastWriteTime.dwHighDateTime=0x1d6eb7f, nFileSizeHigh=0x0, nFileSizeLow=0x18e30)) returned 1 [0089.396] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e788) returned 1 [0089.396] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\oEOIae9ppu.avi" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\videos\\oeoiae9ppu.avi"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\oEOIae9ppu.avi" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\videos\\oeoiae9ppu.avi")) returned 1 [0089.396] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e7bc) returned 1 [0089.396] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\3fmT5WPHA39l3f9", nBufferLength=0x105, lpBuffer=0x31e2c4, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\3fmT5WPHA39l3f9", lpFilePart=0x0) returned 0x34 [0089.396] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\3fmT5WPHA39l3f9\\", nBufferLength=0x105, lpBuffer=0x31e298, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\3fmT5WPHA39l3f9\\", lpFilePart=0x0) returned 0x35 [0089.396] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\3fmT5WPHA39l3f9\\*", lpFindFileData=0x31e4e4 | out: lpFindFileData=0x31e4e4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x63b75200, ftCreationTime.dwHighDateTime=0x1d5e058, ftLastAccessTime.dwLowDateTime=0x73ad1ac0, ftLastAccessTime.dwHighDateTime=0x1d5debc, ftLastWriteTime.dwLowDateTime=0x73ad1ac0, ftLastWriteTime.dwHighDateTime=0x1d5debc, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x381e40 [0089.397] FindNextFileW (in: hFindFile=0x381e40, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x63b75200, ftCreationTime.dwHighDateTime=0x1d5e058, ftLastAccessTime.dwLowDateTime=0x73ad1ac0, ftLastAccessTime.dwHighDateTime=0x1d5debc, ftLastWriteTime.dwLowDateTime=0x73ad1ac0, ftLastWriteTime.dwHighDateTime=0x1d5debc, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0089.397] FindNextFileW (in: hFindFile=0x381e40, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5c2c06b0, ftCreationTime.dwHighDateTime=0x1d5e5b8, ftLastAccessTime.dwLowDateTime=0xb8a207e0, ftLastAccessTime.dwHighDateTime=0x1d5d844, ftLastWriteTime.dwLowDateTime=0xb8a207e0, ftLastWriteTime.dwHighDateTime=0x1d5d844, nFileSizeHigh=0x0, nFileSizeLow=0xb357, dwReserved0=0x0, dwReserved1=0x0, cFileName="mpKbLZ7.swf", cAlternateFileName="")) returned 1 [0089.397] FindNextFileW (in: hFindFile=0x381e40, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x499ae9d0, ftCreationTime.dwHighDateTime=0x1d5dbf4, ftLastAccessTime.dwLowDateTime=0x12675b0, ftLastAccessTime.dwHighDateTime=0x1d5e497, ftLastWriteTime.dwLowDateTime=0x12675b0, ftLastWriteTime.dwHighDateTime=0x1d5e497, nFileSizeHigh=0x0, nFileSizeLow=0x17793, dwReserved0=0x0, dwReserved1=0x0, cFileName="WelTZuyMFRD.mp4", cAlternateFileName="WELTZU~1.MP4")) returned 1 [0089.397] FindNextFileW (in: hFindFile=0x381e40, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0089.397] FindClose (in: hFindFile=0x381e40 | out: hFindFile=0x381e40) returned 1 [0089.397] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e77c) returned 1 [0089.397] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e788) returned 1 [0089.397] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e7bc) returned 1 [0089.397] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\3fmT5WPHA39l3f9", nBufferLength=0x105, lpBuffer=0x31e2c4, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\3fmT5WPHA39l3f9", lpFilePart=0x0) returned 0x34 [0089.397] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\3fmT5WPHA39l3f9\\", nBufferLength=0x105, lpBuffer=0x31e298, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\3fmT5WPHA39l3f9\\", lpFilePart=0x0) returned 0x35 [0089.397] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\3fmT5WPHA39l3f9\\*", lpFindFileData=0x31e4e4 | out: lpFindFileData=0x31e4e4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x63b75200, ftCreationTime.dwHighDateTime=0x1d5e058, ftLastAccessTime.dwLowDateTime=0x73ad1ac0, ftLastAccessTime.dwHighDateTime=0x1d5debc, ftLastWriteTime.dwLowDateTime=0x73ad1ac0, ftLastWriteTime.dwHighDateTime=0x1d5debc, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x381e40 [0089.398] FindNextFileW (in: hFindFile=0x381e40, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x63b75200, ftCreationTime.dwHighDateTime=0x1d5e058, ftLastAccessTime.dwLowDateTime=0x73ad1ac0, ftLastAccessTime.dwHighDateTime=0x1d5debc, ftLastWriteTime.dwLowDateTime=0x73ad1ac0, ftLastWriteTime.dwHighDateTime=0x1d5debc, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0089.398] FindNextFileW (in: hFindFile=0x381e40, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5c2c06b0, ftCreationTime.dwHighDateTime=0x1d5e5b8, ftLastAccessTime.dwLowDateTime=0xb8a207e0, ftLastAccessTime.dwHighDateTime=0x1d5d844, ftLastWriteTime.dwLowDateTime=0xb8a207e0, ftLastWriteTime.dwHighDateTime=0x1d5d844, nFileSizeHigh=0x0, nFileSizeLow=0xb357, dwReserved0=0x0, dwReserved1=0x0, cFileName="mpKbLZ7.swf", cAlternateFileName="")) returned 1 [0089.398] FindNextFileW (in: hFindFile=0x381e40, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x499ae9d0, ftCreationTime.dwHighDateTime=0x1d5dbf4, ftLastAccessTime.dwLowDateTime=0x12675b0, ftLastAccessTime.dwHighDateTime=0x1d5e497, ftLastWriteTime.dwLowDateTime=0x12675b0, ftLastWriteTime.dwHighDateTime=0x1d5e497, nFileSizeHigh=0x0, nFileSizeLow=0x17793, dwReserved0=0x0, dwReserved1=0x0, cFileName="WelTZuyMFRD.mp4", cAlternateFileName="WELTZU~1.MP4")) returned 1 [0089.398] FindNextFileW (in: hFindFile=0x381e40, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x499ae9d0, ftCreationTime.dwHighDateTime=0x1d5dbf4, ftLastAccessTime.dwLowDateTime=0x12675b0, ftLastAccessTime.dwHighDateTime=0x1d5e497, ftLastWriteTime.dwLowDateTime=0x12675b0, ftLastWriteTime.dwHighDateTime=0x1d5e497, nFileSizeHigh=0x0, nFileSizeLow=0x17793, dwReserved0=0x0, dwReserved1=0x0, cFileName="WelTZuyMFRD.mp4", cAlternateFileName="WELTZU~1.MP4")) returned 0 [0089.398] FindClose (in: hFindFile=0x381e40 | out: hFindFile=0x381e40) returned 1 [0089.398] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e77c) returned 1 [0089.398] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e788) returned 1 [0089.398] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\3fmT5WPHA39l3f9\\WelTZuyMFRD.mp4", nBufferLength=0x105, lpBuffer=0x31e194, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\3fmT5WPHA39l3f9\\WelTZuyMFRD.mp4", lpFilePart=0x0) returned 0x44 [0089.398] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e688) returned 1 [0089.398] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\3fmT5WPHA39l3f9\\WelTZuyMFRD.mp4" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\videos\\3fmt5wpha39l3f9\\weltzuymfrd.mp4"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x178 [0089.398] GetFileType (hFile=0x178) returned 0x1 [0089.398] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e684) returned 1 [0089.398] GetFileType (hFile=0x178) returned 0x1 [0089.398] GetFileSize (in: hFile=0x178, lpFileSizeHigh=0x31e790 | out: lpFileSizeHigh=0x31e790*=0x0) returned 0x17793 [0089.399] ReadFile (in: hFile=0x178, lpBuffer=0x3706558, nNumberOfBytesToRead=0x17793, lpNumberOfBytesRead=0x31e73c, lpOverlapped=0x0 | out: lpBuffer=0x3706558*, lpNumberOfBytesRead=0x31e73c*=0x17793, lpOverlapped=0x0) returned 1 [0089.400] CloseHandle (hObject=0x178) returned 1 [0089.426] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\3fmT5WPHA39l3f9\\WelTZuyMFRD.mp4", nBufferLength=0x105, lpBuffer=0x31e180, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\3fmT5WPHA39l3f9\\WelTZuyMFRD.mp4", lpFilePart=0x0) returned 0x44 [0089.426] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e674) returned 1 [0089.426] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\3fmT5WPHA39l3f9\\WelTZuyMFRD.mp4" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\videos\\3fmt5wpha39l3f9\\weltzuymfrd.mp4"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x178 [0089.427] GetFileType (hFile=0x178) returned 0x1 [0089.427] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e670) returned 1 [0089.427] GetFileType (hFile=0x178) returned 0x1 [0089.428] WriteFile (in: hFile=0x178, lpBuffer=0x377bba8*, nNumberOfBytesToWrite=0x177a0, lpNumberOfBytesWritten=0x31e730, lpOverlapped=0x0 | out: lpBuffer=0x377bba8*, lpNumberOfBytesWritten=0x31e730*=0x177a0, lpOverlapped=0x0) returned 1 [0089.429] CloseHandle (hObject=0x178) returned 1 [0089.429] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\3fmT5WPHA39l3f9\\WelTZuyMFRD.mp4", nBufferLength=0x105, lpBuffer=0x31e2b4, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\3fmT5WPHA39l3f9\\WelTZuyMFRD.mp4", lpFilePart=0x0) returned 0x44 [0089.429] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\3fmT5WPHA39l3f9\\WelTZuyMFRD.mp4", nBufferLength=0x105, lpBuffer=0x31e2b4, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\3fmT5WPHA39l3f9\\WelTZuyMFRD.mp4", lpFilePart=0x0) returned 0x44 [0089.429] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e714) returned 1 [0089.430] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\3fmT5WPHA39l3f9\\WelTZuyMFRD.mp4" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\videos\\3fmt5wpha39l3f9\\weltzuymfrd.mp4"), fInfoLevelId=0x0, lpFileInformation=0x31e790 | out: lpFileInformation=0x31e790*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x499ae9d0, ftCreationTime.dwHighDateTime=0x1d5dbf4, ftLastAccessTime.dwLowDateTime=0x12675b0, ftLastAccessTime.dwHighDateTime=0x1d5e497, ftLastWriteTime.dwLowDateTime=0x18beed20, ftLastWriteTime.dwHighDateTime=0x1d6eb7f, nFileSizeHigh=0x0, nFileSizeLow=0x177a0)) returned 1 [0089.430] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e710) returned 1 [0089.430] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\3fmT5WPHA39l3f9\\WelTZuyMFRD.mp4" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\videos\\3fmt5wpha39l3f9\\weltzuymfrd.mp4"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\3fmT5WPHA39l3f9\\WelTZuyMFRD.mp4" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\videos\\3fmt5wpha39l3f9\\weltzuymfrd.mp4")) returned 1 [0089.430] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e7bc) returned 1 [0089.430] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\8mSM9XyQ3XQ6", nBufferLength=0x105, lpBuffer=0x31e2c4, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\8mSM9XyQ3XQ6", lpFilePart=0x0) returned 0x31 [0089.430] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\8mSM9XyQ3XQ6\\", nBufferLength=0x105, lpBuffer=0x31e298, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\8mSM9XyQ3XQ6\\", lpFilePart=0x0) returned 0x32 [0089.430] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\8mSM9XyQ3XQ6\\*", lpFindFileData=0x31e4e4 | out: lpFindFileData=0x31e4e4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x866ac560, ftCreationTime.dwHighDateTime=0x1d5e26b, ftLastAccessTime.dwLowDateTime=0xe7f77a00, ftLastAccessTime.dwHighDateTime=0x1d5e480, ftLastWriteTime.dwLowDateTime=0xe7f77a00, ftLastWriteTime.dwHighDateTime=0x1d5e480, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x381f40 [0089.430] FindNextFileW (in: hFindFile=0x381f40, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x866ac560, ftCreationTime.dwHighDateTime=0x1d5e26b, ftLastAccessTime.dwLowDateTime=0xe7f77a00, ftLastAccessTime.dwHighDateTime=0x1d5e480, ftLastWriteTime.dwLowDateTime=0xe7f77a00, ftLastWriteTime.dwHighDateTime=0x1d5e480, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0089.430] FindNextFileW (in: hFindFile=0x381f40, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb951f180, ftCreationTime.dwHighDateTime=0x1d5e2b9, ftLastAccessTime.dwLowDateTime=0xd7194d60, ftLastAccessTime.dwHighDateTime=0x1d5e72a, ftLastWriteTime.dwLowDateTime=0xd7194d60, ftLastWriteTime.dwHighDateTime=0x1d5e72a, nFileSizeHigh=0x0, nFileSizeLow=0xfe91, dwReserved0=0x0, dwReserved1=0x0, cFileName="E5D-hegZXII.mp4", cAlternateFileName="E5D-HE~1.MP4")) returned 1 [0089.431] FindNextFileW (in: hFindFile=0x381f40, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5d143710, ftCreationTime.dwHighDateTime=0x1d5e0c6, ftLastAccessTime.dwLowDateTime=0xdae8bac0, ftLastAccessTime.dwHighDateTime=0x1d5e06d, ftLastWriteTime.dwLowDateTime=0xdae8bac0, ftLastWriteTime.dwHighDateTime=0x1d5e06d, nFileSizeHigh=0x0, nFileSizeLow=0xd20e, dwReserved0=0x0, dwReserved1=0x0, cFileName="PVyCWCHH.mkv", cAlternateFileName="")) returned 1 [0089.431] FindNextFileW (in: hFindFile=0x381f40, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3aaa8500, ftCreationTime.dwHighDateTime=0x1d5e655, ftLastAccessTime.dwLowDateTime=0xe0213410, ftLastAccessTime.dwHighDateTime=0x1d5e4df, ftLastWriteTime.dwLowDateTime=0xe0213410, ftLastWriteTime.dwHighDateTime=0x1d5e4df, nFileSizeHigh=0x0, nFileSizeLow=0xe15b, dwReserved0=0x0, dwReserved1=0x0, cFileName="UI0YnTvRe3FtpToWZZU.mkv", cAlternateFileName="UI0YNT~1.MKV")) returned 1 [0089.431] FindNextFileW (in: hFindFile=0x381f40, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0089.431] FindClose (in: hFindFile=0x381f40 | out: hFindFile=0x381f40) returned 1 [0089.431] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e77c) returned 1 [0089.431] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e788) returned 1 [0089.431] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e7bc) returned 1 [0089.431] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\8mSM9XyQ3XQ6", nBufferLength=0x105, lpBuffer=0x31e2c4, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\8mSM9XyQ3XQ6", lpFilePart=0x0) returned 0x31 [0089.431] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\8mSM9XyQ3XQ6\\", nBufferLength=0x105, lpBuffer=0x31e298, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\8mSM9XyQ3XQ6\\", lpFilePart=0x0) returned 0x32 [0089.431] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\8mSM9XyQ3XQ6\\*", lpFindFileData=0x31e4e4 | out: lpFindFileData=0x31e4e4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x866ac560, ftCreationTime.dwHighDateTime=0x1d5e26b, ftLastAccessTime.dwLowDateTime=0xe7f77a00, ftLastAccessTime.dwHighDateTime=0x1d5e480, ftLastWriteTime.dwLowDateTime=0xe7f77a00, ftLastWriteTime.dwHighDateTime=0x1d5e480, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x381f40 [0089.431] FindNextFileW (in: hFindFile=0x381f40, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x866ac560, ftCreationTime.dwHighDateTime=0x1d5e26b, ftLastAccessTime.dwLowDateTime=0xe7f77a00, ftLastAccessTime.dwHighDateTime=0x1d5e480, ftLastWriteTime.dwLowDateTime=0xe7f77a00, ftLastWriteTime.dwHighDateTime=0x1d5e480, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0089.431] FindNextFileW (in: hFindFile=0x381f40, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb951f180, ftCreationTime.dwHighDateTime=0x1d5e2b9, ftLastAccessTime.dwLowDateTime=0xd7194d60, ftLastAccessTime.dwHighDateTime=0x1d5e72a, ftLastWriteTime.dwLowDateTime=0xd7194d60, ftLastWriteTime.dwHighDateTime=0x1d5e72a, nFileSizeHigh=0x0, nFileSizeLow=0xfe91, dwReserved0=0x0, dwReserved1=0x0, cFileName="E5D-hegZXII.mp4", cAlternateFileName="E5D-HE~1.MP4")) returned 1 [0089.432] FindNextFileW (in: hFindFile=0x381f40, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5d143710, ftCreationTime.dwHighDateTime=0x1d5e0c6, ftLastAccessTime.dwLowDateTime=0xdae8bac0, ftLastAccessTime.dwHighDateTime=0x1d5e06d, ftLastWriteTime.dwLowDateTime=0xdae8bac0, ftLastWriteTime.dwHighDateTime=0x1d5e06d, nFileSizeHigh=0x0, nFileSizeLow=0xd20e, dwReserved0=0x0, dwReserved1=0x0, cFileName="PVyCWCHH.mkv", cAlternateFileName="")) returned 1 [0089.432] FindNextFileW (in: hFindFile=0x381f40, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3aaa8500, ftCreationTime.dwHighDateTime=0x1d5e655, ftLastAccessTime.dwLowDateTime=0xe0213410, ftLastAccessTime.dwHighDateTime=0x1d5e4df, ftLastWriteTime.dwLowDateTime=0xe0213410, ftLastWriteTime.dwHighDateTime=0x1d5e4df, nFileSizeHigh=0x0, nFileSizeLow=0xe15b, dwReserved0=0x0, dwReserved1=0x0, cFileName="UI0YnTvRe3FtpToWZZU.mkv", cAlternateFileName="UI0YNT~1.MKV")) returned 1 [0089.432] FindNextFileW (in: hFindFile=0x381f40, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3aaa8500, ftCreationTime.dwHighDateTime=0x1d5e655, ftLastAccessTime.dwLowDateTime=0xe0213410, ftLastAccessTime.dwHighDateTime=0x1d5e4df, ftLastWriteTime.dwLowDateTime=0xe0213410, ftLastWriteTime.dwHighDateTime=0x1d5e4df, nFileSizeHigh=0x0, nFileSizeLow=0xe15b, dwReserved0=0x0, dwReserved1=0x0, cFileName="UI0YnTvRe3FtpToWZZU.mkv", cAlternateFileName="UI0YNT~1.MKV")) returned 0 [0089.432] FindClose (in: hFindFile=0x381f40 | out: hFindFile=0x381f40) returned 1 [0089.432] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e77c) returned 1 [0089.432] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e788) returned 1 [0089.432] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\8mSM9XyQ3XQ6\\E5D-hegZXII.mp4", nBufferLength=0x105, lpBuffer=0x31e194, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\8mSM9XyQ3XQ6\\E5D-hegZXII.mp4", lpFilePart=0x0) returned 0x41 [0089.432] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e688) returned 1 [0089.432] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\8mSM9XyQ3XQ6\\E5D-hegZXII.mp4" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\videos\\8msm9xyq3xq6\\e5d-hegzxii.mp4"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x178 [0089.432] GetFileType (hFile=0x178) returned 0x1 [0089.432] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e684) returned 1 [0089.432] GetFileType (hFile=0x178) returned 0x1 [0089.432] GetFileSize (in: hFile=0x178, lpFileSizeHigh=0x31e790 | out: lpFileSizeHigh=0x31e790*=0x0) returned 0xfe91 [0089.432] ReadFile (in: hFile=0x178, lpBuffer=0x26c8f40, nNumberOfBytesToRead=0xfe91, lpNumberOfBytesRead=0x31e73c, lpOverlapped=0x0 | out: lpBuffer=0x26c8f40*, lpNumberOfBytesRead=0x31e73c*=0xfe91, lpOverlapped=0x0) returned 1 [0089.433] CloseHandle (hObject=0x178) returned 1 [0089.448] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\8mSM9XyQ3XQ6\\E5D-hegZXII.mp4", nBufferLength=0x105, lpBuffer=0x31e180, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\8mSM9XyQ3XQ6\\E5D-hegZXII.mp4", lpFilePart=0x0) returned 0x41 [0089.448] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e674) returned 1 [0089.448] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\8mSM9XyQ3XQ6\\E5D-hegZXII.mp4" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\videos\\8msm9xyq3xq6\\e5d-hegzxii.mp4"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x178 [0089.450] GetFileType (hFile=0x178) returned 0x1 [0089.450] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e670) returned 1 [0089.450] GetFileType (hFile=0x178) returned 0x1 [0089.450] WriteFile (in: hFile=0x178, lpBuffer=0x274591c*, nNumberOfBytesToWrite=0xfea0, lpNumberOfBytesWritten=0x31e730, lpOverlapped=0x0 | out: lpBuffer=0x274591c*, lpNumberOfBytesWritten=0x31e730*=0xfea0, lpOverlapped=0x0) returned 1 [0089.452] CloseHandle (hObject=0x178) returned 1 [0089.452] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\8mSM9XyQ3XQ6\\E5D-hegZXII.mp4", nBufferLength=0x105, lpBuffer=0x31e2b4, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\8mSM9XyQ3XQ6\\E5D-hegZXII.mp4", lpFilePart=0x0) returned 0x41 [0089.452] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\8mSM9XyQ3XQ6\\E5D-hegZXII.mp4", nBufferLength=0x105, lpBuffer=0x31e2b4, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\8mSM9XyQ3XQ6\\E5D-hegZXII.mp4", lpFilePart=0x0) returned 0x41 [0089.452] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e714) returned 1 [0089.452] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\8mSM9XyQ3XQ6\\E5D-hegZXII.mp4" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\videos\\8msm9xyq3xq6\\e5d-hegzxii.mp4"), fInfoLevelId=0x0, lpFileInformation=0x31e790 | out: lpFileInformation=0x31e790*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb951f180, ftCreationTime.dwHighDateTime=0x1d5e2b9, ftLastAccessTime.dwLowDateTime=0xd7194d60, ftLastAccessTime.dwHighDateTime=0x1d5e72a, ftLastWriteTime.dwLowDateTime=0x18c3afe0, ftLastWriteTime.dwHighDateTime=0x1d6eb7f, nFileSizeHigh=0x0, nFileSizeLow=0xfea0)) returned 1 [0089.452] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e710) returned 1 [0089.452] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\8mSM9XyQ3XQ6\\E5D-hegZXII.mp4" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\videos\\8msm9xyq3xq6\\e5d-hegzxii.mp4"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\8mSM9XyQ3XQ6\\E5D-hegZXII.mp4" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\videos\\8msm9xyq3xq6\\e5d-hegzxii.mp4")) returned 1 [0089.452] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\8mSM9XyQ3XQ6\\PVyCWCHH.mkv", nBufferLength=0x105, lpBuffer=0x31e194, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\8mSM9XyQ3XQ6\\PVyCWCHH.mkv", lpFilePart=0x0) returned 0x3e [0089.452] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e688) returned 1 [0089.452] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\8mSM9XyQ3XQ6\\PVyCWCHH.mkv" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\videos\\8msm9xyq3xq6\\pvycwchh.mkv"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x178 [0089.453] GetFileType (hFile=0x178) returned 0x1 [0089.453] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e684) returned 1 [0089.453] GetFileType (hFile=0x178) returned 0x1 [0089.453] GetFileSize (in: hFile=0x178, lpFileSizeHigh=0x31e790 | out: lpFileSizeHigh=0x31e790*=0x0) returned 0xd20e [0089.453] ReadFile (in: hFile=0x178, lpBuffer=0x2755b28, nNumberOfBytesToRead=0xd20e, lpNumberOfBytesRead=0x31e73c, lpOverlapped=0x0 | out: lpBuffer=0x2755b28*, lpNumberOfBytesRead=0x31e73c*=0xd20e, lpOverlapped=0x0) returned 1 [0089.454] CloseHandle (hObject=0x178) returned 1 [0089.468] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\8mSM9XyQ3XQ6\\PVyCWCHH.mkv", nBufferLength=0x105, lpBuffer=0x31e180, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\8mSM9XyQ3XQ6\\PVyCWCHH.mkv", lpFilePart=0x0) returned 0x3e [0089.468] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e674) returned 1 [0089.468] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\8mSM9XyQ3XQ6\\PVyCWCHH.mkv" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\videos\\8msm9xyq3xq6\\pvycwchh.mkv"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x178 [0089.470] GetFileType (hFile=0x178) returned 0x1 [0089.470] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e670) returned 1 [0089.470] GetFileType (hFile=0x178) returned 0x1 [0089.470] WriteFile (in: hFile=0x178, lpBuffer=0x27c9f54*, nNumberOfBytesToWrite=0xd210, lpNumberOfBytesWritten=0x31e730, lpOverlapped=0x0 | out: lpBuffer=0x27c9f54*, lpNumberOfBytesWritten=0x31e730*=0xd210, lpOverlapped=0x0) returned 1 [0089.471] CloseHandle (hObject=0x178) returned 1 [0089.471] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\8mSM9XyQ3XQ6\\PVyCWCHH.mkv", nBufferLength=0x105, lpBuffer=0x31e2b4, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\8mSM9XyQ3XQ6\\PVyCWCHH.mkv", lpFilePart=0x0) returned 0x3e [0089.471] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\8mSM9XyQ3XQ6\\PVyCWCHH.mkv", nBufferLength=0x105, lpBuffer=0x31e2b4, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\8mSM9XyQ3XQ6\\PVyCWCHH.mkv", lpFilePart=0x0) returned 0x3e [0089.471] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e714) returned 1 [0089.471] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\8mSM9XyQ3XQ6\\PVyCWCHH.mkv" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\videos\\8msm9xyq3xq6\\pvycwchh.mkv"), fInfoLevelId=0x0, lpFileInformation=0x31e790 | out: lpFileInformation=0x31e790*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5d143710, ftCreationTime.dwHighDateTime=0x1d5e0c6, ftLastAccessTime.dwLowDateTime=0xdae8bac0, ftLastAccessTime.dwHighDateTime=0x1d5e06d, ftLastWriteTime.dwLowDateTime=0x18c61140, ftLastWriteTime.dwHighDateTime=0x1d6eb7f, nFileSizeHigh=0x0, nFileSizeLow=0xd210)) returned 1 [0089.471] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e710) returned 1 [0089.471] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\8mSM9XyQ3XQ6\\PVyCWCHH.mkv" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\videos\\8msm9xyq3xq6\\pvycwchh.mkv"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\8mSM9XyQ3XQ6\\PVyCWCHH.mkv" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\videos\\8msm9xyq3xq6\\pvycwchh.mkv")) returned 1 [0089.472] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\8mSM9XyQ3XQ6\\UI0YnTvRe3FtpToWZZU.mkv", nBufferLength=0x105, lpBuffer=0x31e194, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\8mSM9XyQ3XQ6\\UI0YnTvRe3FtpToWZZU.mkv", lpFilePart=0x0) returned 0x49 [0089.472] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e688) returned 1 [0089.472] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\8mSM9XyQ3XQ6\\UI0YnTvRe3FtpToWZZU.mkv" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\videos\\8msm9xyq3xq6\\ui0yntvre3ftptowzzu.mkv"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x178 [0089.472] GetFileType (hFile=0x178) returned 0x1 [0089.472] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e684) returned 1 [0089.472] GetFileType (hFile=0x178) returned 0x1 [0089.472] GetFileSize (in: hFile=0x178, lpFileSizeHigh=0x31e790 | out: lpFileSizeHigh=0x31e790*=0x0) returned 0xe15b [0089.472] ReadFile (in: hFile=0x178, lpBuffer=0x27d74e8, nNumberOfBytesToRead=0xe15b, lpNumberOfBytesRead=0x31e73c, lpOverlapped=0x0 | out: lpBuffer=0x27d74e8*, lpNumberOfBytesRead=0x31e73c*=0xe15b, lpOverlapped=0x0) returned 1 [0089.473] CloseHandle (hObject=0x178) returned 1 [0089.509] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\8mSM9XyQ3XQ6\\UI0YnTvRe3FtpToWZZU.mkv", nBufferLength=0x105, lpBuffer=0x31e180, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\8mSM9XyQ3XQ6\\UI0YnTvRe3FtpToWZZU.mkv", lpFilePart=0x0) returned 0x49 [0089.509] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e674) returned 1 [0089.509] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\8mSM9XyQ3XQ6\\UI0YnTvRe3FtpToWZZU.mkv" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\videos\\8msm9xyq3xq6\\ui0yntvre3ftptowzzu.mkv"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x178 [0089.510] GetFileType (hFile=0x178) returned 0x1 [0089.510] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e670) returned 1 [0089.510] GetFileType (hFile=0x178) returned 0x1 [0089.510] WriteFile (in: hFile=0x178, lpBuffer=0x265cf68*, nNumberOfBytesToWrite=0xe160, lpNumberOfBytesWritten=0x31e730, lpOverlapped=0x0 | out: lpBuffer=0x265cf68*, lpNumberOfBytesWritten=0x31e730*=0xe160, lpOverlapped=0x0) returned 1 [0089.512] CloseHandle (hObject=0x178) returned 1 [0089.512] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\8mSM9XyQ3XQ6\\UI0YnTvRe3FtpToWZZU.mkv", nBufferLength=0x105, lpBuffer=0x31e2b4, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\8mSM9XyQ3XQ6\\UI0YnTvRe3FtpToWZZU.mkv", lpFilePart=0x0) returned 0x49 [0089.512] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\8mSM9XyQ3XQ6\\UI0YnTvRe3FtpToWZZU.mkv", nBufferLength=0x105, lpBuffer=0x31e2b4, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\8mSM9XyQ3XQ6\\UI0YnTvRe3FtpToWZZU.mkv", lpFilePart=0x0) returned 0x49 [0089.512] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e714) returned 1 [0089.512] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\8mSM9XyQ3XQ6\\UI0YnTvRe3FtpToWZZU.mkv" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\videos\\8msm9xyq3xq6\\ui0yntvre3ftptowzzu.mkv"), fInfoLevelId=0x0, lpFileInformation=0x31e790 | out: lpFileInformation=0x31e790*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3aaa8500, ftCreationTime.dwHighDateTime=0x1d5e655, ftLastAccessTime.dwLowDateTime=0xe0213410, ftLastAccessTime.dwHighDateTime=0x1d5e4df, ftLastWriteTime.dwLowDateTime=0x18cad400, ftLastWriteTime.dwHighDateTime=0x1d6eb7f, nFileSizeHigh=0x0, nFileSizeLow=0xe160)) returned 1 [0089.512] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e710) returned 1 [0089.512] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\8mSM9XyQ3XQ6\\UI0YnTvRe3FtpToWZZU.mkv" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\videos\\8msm9xyq3xq6\\ui0yntvre3ftptowzzu.mkv"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\8mSM9XyQ3XQ6\\UI0YnTvRe3FtpToWZZU.mkv" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\videos\\8msm9xyq3xq6\\ui0yntvre3ftptowzzu.mkv")) returned 1 [0089.512] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e7bc) returned 1 [0089.513] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\MRfMb1EbDbFqINXp-b", nBufferLength=0x105, lpBuffer=0x31e2c4, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\MRfMb1EbDbFqINXp-b", lpFilePart=0x0) returned 0x37 [0089.513] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\MRfMb1EbDbFqINXp-b\\", nBufferLength=0x105, lpBuffer=0x31e298, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\MRfMb1EbDbFqINXp-b\\", lpFilePart=0x0) returned 0x38 [0089.513] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\MRfMb1EbDbFqINXp-b\\*", lpFindFileData=0x31e4e4 | out: lpFindFileData=0x31e4e4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x85c71b0, ftCreationTime.dwHighDateTime=0x1d5da2c, ftLastAccessTime.dwLowDateTime=0x4d3d6b00, ftLastAccessTime.dwHighDateTime=0x1d5dfd0, ftLastWriteTime.dwLowDateTime=0x4d3d6b00, ftLastWriteTime.dwHighDateTime=0x1d5dfd0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x381fc0 [0089.513] FindNextFileW (in: hFindFile=0x381fc0, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x85c71b0, ftCreationTime.dwHighDateTime=0x1d5da2c, ftLastAccessTime.dwLowDateTime=0x4d3d6b00, ftLastAccessTime.dwHighDateTime=0x1d5dfd0, ftLastWriteTime.dwLowDateTime=0x4d3d6b00, ftLastWriteTime.dwHighDateTime=0x1d5dfd0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0089.513] FindNextFileW (in: hFindFile=0x381fc0, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x80f81d80, ftCreationTime.dwHighDateTime=0x1d5e7a2, ftLastAccessTime.dwLowDateTime=0x19be200, ftLastAccessTime.dwHighDateTime=0x1d5e582, ftLastWriteTime.dwLowDateTime=0x19be200, ftLastWriteTime.dwHighDateTime=0x1d5e582, nFileSizeHigh=0x0, nFileSizeLow=0x121d3, dwReserved0=0x0, dwReserved1=0x0, cFileName="aS5NfmSx.swf", cAlternateFileName="")) returned 1 [0089.514] FindNextFileW (in: hFindFile=0x381fc0, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc6e6a390, ftCreationTime.dwHighDateTime=0x1d5de0e, ftLastAccessTime.dwLowDateTime=0x7b0a7870, ftLastAccessTime.dwHighDateTime=0x1d5dbf2, ftLastWriteTime.dwLowDateTime=0x7b0a7870, ftLastWriteTime.dwHighDateTime=0x1d5dbf2, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="eStdF", cAlternateFileName="")) returned 1 [0089.514] FindNextFileW (in: hFindFile=0x381fc0, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4bd95d70, ftCreationTime.dwHighDateTime=0x1d5e4ce, ftLastAccessTime.dwLowDateTime=0x98bbf130, ftLastAccessTime.dwHighDateTime=0x1d5de88, ftLastWriteTime.dwLowDateTime=0x98bbf130, ftLastWriteTime.dwHighDateTime=0x1d5de88, nFileSizeHigh=0x0, nFileSizeLow=0x970f, dwReserved0=0x0, dwReserved1=0x0, cFileName="F40BGKD.swf", cAlternateFileName="")) returned 1 [0089.514] FindNextFileW (in: hFindFile=0x381fc0, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x525727c0, ftCreationTime.dwHighDateTime=0x1d5ddaa, ftLastAccessTime.dwLowDateTime=0xef2acf50, ftLastAccessTime.dwHighDateTime=0x1d5e4c8, ftLastWriteTime.dwLowDateTime=0xef2acf50, ftLastWriteTime.dwHighDateTime=0x1d5e4c8, nFileSizeHigh=0x0, nFileSizeLow=0x17538, dwReserved0=0x0, dwReserved1=0x0, cFileName="M5Akdkq9KjqxEu1WGM.avi", cAlternateFileName="M5AKDK~1.AVI")) returned 1 [0089.514] FindNextFileW (in: hFindFile=0x381fc0, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0089.514] FindClose (in: hFindFile=0x381fc0 | out: hFindFile=0x381fc0) returned 1 [0089.514] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e77c) returned 1 [0089.514] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e788) returned 1 [0089.514] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e7bc) returned 1 [0089.514] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\MRfMb1EbDbFqINXp-b", nBufferLength=0x105, lpBuffer=0x31e2c4, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\MRfMb1EbDbFqINXp-b", lpFilePart=0x0) returned 0x37 [0089.514] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\MRfMb1EbDbFqINXp-b\\", nBufferLength=0x105, lpBuffer=0x31e298, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\MRfMb1EbDbFqINXp-b\\", lpFilePart=0x0) returned 0x38 [0089.514] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\MRfMb1EbDbFqINXp-b\\*", lpFindFileData=0x31e4e4 | out: lpFindFileData=0x31e4e4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x85c71b0, ftCreationTime.dwHighDateTime=0x1d5da2c, ftLastAccessTime.dwLowDateTime=0x4d3d6b00, ftLastAccessTime.dwHighDateTime=0x1d5dfd0, ftLastWriteTime.dwLowDateTime=0x4d3d6b00, ftLastWriteTime.dwHighDateTime=0x1d5dfd0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x381fc0 [0089.515] FindNextFileW (in: hFindFile=0x381fc0, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x85c71b0, ftCreationTime.dwHighDateTime=0x1d5da2c, ftLastAccessTime.dwLowDateTime=0x4d3d6b00, ftLastAccessTime.dwHighDateTime=0x1d5dfd0, ftLastWriteTime.dwLowDateTime=0x4d3d6b00, ftLastWriteTime.dwHighDateTime=0x1d5dfd0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0089.515] FindNextFileW (in: hFindFile=0x381fc0, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x80f81d80, ftCreationTime.dwHighDateTime=0x1d5e7a2, ftLastAccessTime.dwLowDateTime=0x19be200, ftLastAccessTime.dwHighDateTime=0x1d5e582, ftLastWriteTime.dwLowDateTime=0x19be200, ftLastWriteTime.dwHighDateTime=0x1d5e582, nFileSizeHigh=0x0, nFileSizeLow=0x121d3, dwReserved0=0x0, dwReserved1=0x0, cFileName="aS5NfmSx.swf", cAlternateFileName="")) returned 1 [0089.515] FindNextFileW (in: hFindFile=0x381fc0, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc6e6a390, ftCreationTime.dwHighDateTime=0x1d5de0e, ftLastAccessTime.dwLowDateTime=0x7b0a7870, ftLastAccessTime.dwHighDateTime=0x1d5dbf2, ftLastWriteTime.dwLowDateTime=0x7b0a7870, ftLastWriteTime.dwHighDateTime=0x1d5dbf2, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="eStdF", cAlternateFileName="")) returned 1 [0089.515] FindNextFileW (in: hFindFile=0x381fc0, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4bd95d70, ftCreationTime.dwHighDateTime=0x1d5e4ce, ftLastAccessTime.dwLowDateTime=0x98bbf130, ftLastAccessTime.dwHighDateTime=0x1d5de88, ftLastWriteTime.dwLowDateTime=0x98bbf130, ftLastWriteTime.dwHighDateTime=0x1d5de88, nFileSizeHigh=0x0, nFileSizeLow=0x970f, dwReserved0=0x0, dwReserved1=0x0, cFileName="F40BGKD.swf", cAlternateFileName="")) returned 1 [0089.515] FindNextFileW (in: hFindFile=0x381fc0, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x525727c0, ftCreationTime.dwHighDateTime=0x1d5ddaa, ftLastAccessTime.dwLowDateTime=0xef2acf50, ftLastAccessTime.dwHighDateTime=0x1d5e4c8, ftLastWriteTime.dwLowDateTime=0xef2acf50, ftLastWriteTime.dwHighDateTime=0x1d5e4c8, nFileSizeHigh=0x0, nFileSizeLow=0x17538, dwReserved0=0x0, dwReserved1=0x0, cFileName="M5Akdkq9KjqxEu1WGM.avi", cAlternateFileName="M5AKDK~1.AVI")) returned 1 [0089.515] FindNextFileW (in: hFindFile=0x381fc0, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x525727c0, ftCreationTime.dwHighDateTime=0x1d5ddaa, ftLastAccessTime.dwLowDateTime=0xef2acf50, ftLastAccessTime.dwHighDateTime=0x1d5e4c8, ftLastWriteTime.dwLowDateTime=0xef2acf50, ftLastWriteTime.dwHighDateTime=0x1d5e4c8, nFileSizeHigh=0x0, nFileSizeLow=0x17538, dwReserved0=0x0, dwReserved1=0x0, cFileName="M5Akdkq9KjqxEu1WGM.avi", cAlternateFileName="M5AKDK~1.AVI")) returned 0 [0089.515] FindClose (in: hFindFile=0x381fc0 | out: hFindFile=0x381fc0) returned 1 [0089.515] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e77c) returned 1 [0089.515] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e788) returned 1 [0089.515] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\MRfMb1EbDbFqINXp-b\\M5Akdkq9KjqxEu1WGM.avi", nBufferLength=0x105, lpBuffer=0x31e194, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\MRfMb1EbDbFqINXp-b\\M5Akdkq9KjqxEu1WGM.avi", lpFilePart=0x0) returned 0x4e [0089.515] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e688) returned 1 [0089.516] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\MRfMb1EbDbFqINXp-b\\M5Akdkq9KjqxEu1WGM.avi" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\videos\\mrfmb1ebdbfqinxp-b\\m5akdkq9kjqxeu1wgm.avi"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x178 [0089.516] GetFileType (hFile=0x178) returned 0x1 [0089.516] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e684) returned 1 [0089.516] GetFileType (hFile=0x178) returned 0x1 [0089.516] GetFileSize (in: hFile=0x178, lpFileSizeHigh=0x31e790 | out: lpFileSizeHigh=0x31e790*=0x0) returned 0x17538 [0089.516] ReadFile (in: hFile=0x178, lpBuffer=0x37e9788, nNumberOfBytesToRead=0x17538, lpNumberOfBytesRead=0x31e73c, lpOverlapped=0x0 | out: lpBuffer=0x37e9788*, lpNumberOfBytesRead=0x31e73c*=0x17538, lpOverlapped=0x0) returned 1 [0089.517] CloseHandle (hObject=0x178) returned 1 [0089.532] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\MRfMb1EbDbFqINXp-b\\M5Akdkq9KjqxEu1WGM.avi", nBufferLength=0x105, lpBuffer=0x31e180, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\MRfMb1EbDbFqINXp-b\\M5Akdkq9KjqxEu1WGM.avi", lpFilePart=0x0) returned 0x4e [0089.532] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e674) returned 1 [0089.532] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\MRfMb1EbDbFqINXp-b\\M5Akdkq9KjqxEu1WGM.avi" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\videos\\mrfmb1ebdbfqinxp-b\\m5akdkq9kjqxeu1wgm.avi"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x178 [0089.534] GetFileType (hFile=0x178) returned 0x1 [0089.534] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e670) returned 1 [0089.534] GetFileType (hFile=0x178) returned 0x1 [0089.534] WriteFile (in: hFile=0x178, lpBuffer=0x385e200*, nNumberOfBytesToWrite=0x17540, lpNumberOfBytesWritten=0x31e730, lpOverlapped=0x0 | out: lpBuffer=0x385e200*, lpNumberOfBytesWritten=0x31e730*=0x17540, lpOverlapped=0x0) returned 1 [0089.536] CloseHandle (hObject=0x178) returned 1 [0089.536] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\MRfMb1EbDbFqINXp-b\\M5Akdkq9KjqxEu1WGM.avi", nBufferLength=0x105, lpBuffer=0x31e2b4, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\MRfMb1EbDbFqINXp-b\\M5Akdkq9KjqxEu1WGM.avi", lpFilePart=0x0) returned 0x4e [0089.536] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\MRfMb1EbDbFqINXp-b\\M5Akdkq9KjqxEu1WGM.avi", nBufferLength=0x105, lpBuffer=0x31e2b4, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\MRfMb1EbDbFqINXp-b\\M5Akdkq9KjqxEu1WGM.avi", lpFilePart=0x0) returned 0x4e [0089.536] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e714) returned 1 [0089.536] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\MRfMb1EbDbFqINXp-b\\M5Akdkq9KjqxEu1WGM.avi" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\videos\\mrfmb1ebdbfqinxp-b\\m5akdkq9kjqxeu1wgm.avi"), fInfoLevelId=0x0, lpFileInformation=0x31e790 | out: lpFileInformation=0x31e790*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x525727c0, ftCreationTime.dwHighDateTime=0x1d5ddaa, ftLastAccessTime.dwLowDateTime=0xef2acf50, ftLastAccessTime.dwHighDateTime=0x1d5e4c8, ftLastWriteTime.dwLowDateTime=0x18cf96c0, ftLastWriteTime.dwHighDateTime=0x1d6eb7f, nFileSizeHigh=0x0, nFileSizeLow=0x17540)) returned 1 [0089.536] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e710) returned 1 [0089.536] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\MRfMb1EbDbFqINXp-b\\M5Akdkq9KjqxEu1WGM.avi" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\videos\\mrfmb1ebdbfqinxp-b\\m5akdkq9kjqxeu1wgm.avi"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\MRfMb1EbDbFqINXp-b\\M5Akdkq9KjqxEu1WGM.avi" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\videos\\mrfmb1ebdbfqinxp-b\\m5akdkq9kjqxeu1wgm.avi")) returned 1 [0089.536] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e744) returned 1 [0089.536] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\MRfMb1EbDbFqINXp-b\\eStdF", nBufferLength=0x105, lpBuffer=0x31e24c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\MRfMb1EbDbFqINXp-b\\eStdF", lpFilePart=0x0) returned 0x3d [0089.536] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\MRfMb1EbDbFqINXp-b\\eStdF\\", nBufferLength=0x105, lpBuffer=0x31e220, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\MRfMb1EbDbFqINXp-b\\eStdF\\", lpFilePart=0x0) returned 0x3e [0089.536] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\MRfMb1EbDbFqINXp-b\\eStdF\\*", lpFindFileData=0x31e46c | out: lpFindFileData=0x31e46c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc6e6a390, ftCreationTime.dwHighDateTime=0x1d5de0e, ftLastAccessTime.dwLowDateTime=0x7b0a7870, ftLastAccessTime.dwHighDateTime=0x1d5dbf2, ftLastWriteTime.dwLowDateTime=0x7b0a7870, ftLastWriteTime.dwHighDateTime=0x1d5dbf2, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x381f40 [0089.537] FindNextFileW (in: hFindFile=0x381f40, lpFindFileData=0x31e47c | out: lpFindFileData=0x31e47c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc6e6a390, ftCreationTime.dwHighDateTime=0x1d5de0e, ftLastAccessTime.dwLowDateTime=0x7b0a7870, ftLastAccessTime.dwHighDateTime=0x1d5dbf2, ftLastWriteTime.dwLowDateTime=0x7b0a7870, ftLastWriteTime.dwHighDateTime=0x1d5dbf2, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0089.537] FindNextFileW (in: hFindFile=0x381f40, lpFindFileData=0x31e47c | out: lpFindFileData=0x31e47c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc501c820, ftCreationTime.dwHighDateTime=0x1d5d896, ftLastAccessTime.dwLowDateTime=0x9fab6b50, ftLastAccessTime.dwHighDateTime=0x1d5d920, ftLastWriteTime.dwLowDateTime=0x9fab6b50, ftLastWriteTime.dwHighDateTime=0x1d5d920, nFileSizeHigh=0x0, nFileSizeLow=0xa99d, dwReserved0=0x0, dwReserved1=0x0, cFileName="0fonx3QbySjHW9kekT.flv", cAlternateFileName="0FONX3~1.FLV")) returned 1 [0089.537] FindNextFileW (in: hFindFile=0x381f40, lpFindFileData=0x31e47c | out: lpFindFileData=0x31e47c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x47f5d6e0, ftCreationTime.dwHighDateTime=0x1d5e08a, ftLastAccessTime.dwLowDateTime=0xe18016c0, ftLastAccessTime.dwHighDateTime=0x1d5e3ed, ftLastWriteTime.dwLowDateTime=0xe18016c0, ftLastWriteTime.dwHighDateTime=0x1d5e3ed, nFileSizeHigh=0x0, nFileSizeLow=0x6071, dwReserved0=0x0, dwReserved1=0x0, cFileName="84yfCS6st5K5-66QqbH.flv", cAlternateFileName="84YFCS~1.FLV")) returned 1 [0089.537] FindNextFileW (in: hFindFile=0x381f40, lpFindFileData=0x31e47c | out: lpFindFileData=0x31e47c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x97daebe0, ftCreationTime.dwHighDateTime=0x1d5e1fd, ftLastAccessTime.dwLowDateTime=0xd50d2650, ftLastAccessTime.dwHighDateTime=0x1d5dfae, ftLastWriteTime.dwLowDateTime=0xd50d2650, ftLastWriteTime.dwHighDateTime=0x1d5dfae, nFileSizeHigh=0x0, nFileSizeLow=0x18f71, dwReserved0=0x0, dwReserved1=0x0, cFileName="I_6vs OEkcms 9.avi", cAlternateFileName="I_6VSO~1.AVI")) returned 1 [0089.537] FindNextFileW (in: hFindFile=0x381f40, lpFindFileData=0x31e47c | out: lpFindFileData=0x31e47c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x64f1c0a0, ftCreationTime.dwHighDateTime=0x1d5d96f, ftLastAccessTime.dwLowDateTime=0xdec27400, ftLastAccessTime.dwHighDateTime=0x1d5da42, ftLastWriteTime.dwLowDateTime=0xdec27400, ftLastWriteTime.dwHighDateTime=0x1d5da42, nFileSizeHigh=0x0, nFileSizeLow=0xa518, dwReserved0=0x0, dwReserved1=0x0, cFileName="JRCMw8ia7Ft_DJ1tOw1R.swf", cAlternateFileName="JRCMW8~1.SWF")) returned 1 [0089.537] FindNextFileW (in: hFindFile=0x381f40, lpFindFileData=0x31e47c | out: lpFindFileData=0x31e47c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xfc59e300, ftCreationTime.dwHighDateTime=0x1d5dd02, ftLastAccessTime.dwLowDateTime=0x6a9d76c0, ftLastAccessTime.dwHighDateTime=0x1d5d852, ftLastWriteTime.dwLowDateTime=0x6a9d76c0, ftLastWriteTime.dwHighDateTime=0x1d5d852, nFileSizeHigh=0x0, nFileSizeLow=0xa9ec, dwReserved0=0x0, dwReserved1=0x0, cFileName="oqnnsV1y3L.avi", cAlternateFileName="OQNNSV~1.AVI")) returned 1 [0089.537] FindNextFileW (in: hFindFile=0x381f40, lpFindFileData=0x31e47c | out: lpFindFileData=0x31e47c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3053d3c0, ftCreationTime.dwHighDateTime=0x1d5d824, ftLastAccessTime.dwLowDateTime=0x281af530, ftLastAccessTime.dwHighDateTime=0x1d5d964, ftLastWriteTime.dwLowDateTime=0x281af530, ftLastWriteTime.dwHighDateTime=0x1d5d964, nFileSizeHigh=0x0, nFileSizeLow=0x6aaf, dwReserved0=0x0, dwReserved1=0x0, cFileName="VRQcjXR.flv", cAlternateFileName="")) returned 1 [0089.537] FindNextFileW (in: hFindFile=0x381f40, lpFindFileData=0x31e47c | out: lpFindFileData=0x31e47c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3fd79130, ftCreationTime.dwHighDateTime=0x1d5e146, ftLastAccessTime.dwLowDateTime=0x95f5790, ftLastAccessTime.dwHighDateTime=0x1d5df62, ftLastWriteTime.dwLowDateTime=0x95f5790, ftLastWriteTime.dwHighDateTime=0x1d5df62, nFileSizeHigh=0x0, nFileSizeLow=0x22ed, dwReserved0=0x0, dwReserved1=0x0, cFileName="XVhbcUwPblVHFgKQ.swf", cAlternateFileName="XVHBCU~1.SWF")) returned 1 [0089.538] FindNextFileW (in: hFindFile=0x381f40, lpFindFileData=0x31e47c | out: lpFindFileData=0x31e47c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x90d2810, ftCreationTime.dwHighDateTime=0x1d5dee2, ftLastAccessTime.dwLowDateTime=0xcf54520, ftLastAccessTime.dwHighDateTime=0x1d5e79d, ftLastWriteTime.dwLowDateTime=0xcf54520, ftLastWriteTime.dwHighDateTime=0x1d5e79d, nFileSizeHigh=0x0, nFileSizeLow=0x16f9d, dwReserved0=0x0, dwReserved1=0x0, cFileName="Yq_52sjx1uoh.mp4", cAlternateFileName="YQ_52S~1.MP4")) returned 1 [0089.538] FindNextFileW (in: hFindFile=0x381f40, lpFindFileData=0x31e47c | out: lpFindFileData=0x31e47c*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0089.538] FindClose (in: hFindFile=0x381f40 | out: hFindFile=0x381f40) returned 1 [0089.538] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e704) returned 1 [0089.538] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e710) returned 1 [0089.538] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e744) returned 1 [0089.538] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\MRfMb1EbDbFqINXp-b\\eStdF", nBufferLength=0x105, lpBuffer=0x31e24c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\MRfMb1EbDbFqINXp-b\\eStdF", lpFilePart=0x0) returned 0x3d [0089.538] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\MRfMb1EbDbFqINXp-b\\eStdF\\", nBufferLength=0x105, lpBuffer=0x31e220, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\MRfMb1EbDbFqINXp-b\\eStdF\\", lpFilePart=0x0) returned 0x3e [0089.538] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\MRfMb1EbDbFqINXp-b\\eStdF\\*", lpFindFileData=0x31e46c | out: lpFindFileData=0x31e46c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc6e6a390, ftCreationTime.dwHighDateTime=0x1d5de0e, ftLastAccessTime.dwLowDateTime=0x7b0a7870, ftLastAccessTime.dwHighDateTime=0x1d5dbf2, ftLastWriteTime.dwLowDateTime=0x7b0a7870, ftLastWriteTime.dwHighDateTime=0x1d5dbf2, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x381f40 [0089.538] FindNextFileW (in: hFindFile=0x381f40, lpFindFileData=0x31e47c | out: lpFindFileData=0x31e47c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc6e6a390, ftCreationTime.dwHighDateTime=0x1d5de0e, ftLastAccessTime.dwLowDateTime=0x7b0a7870, ftLastAccessTime.dwHighDateTime=0x1d5dbf2, ftLastWriteTime.dwLowDateTime=0x7b0a7870, ftLastWriteTime.dwHighDateTime=0x1d5dbf2, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0089.538] FindNextFileW (in: hFindFile=0x381f40, lpFindFileData=0x31e47c | out: lpFindFileData=0x31e47c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc501c820, ftCreationTime.dwHighDateTime=0x1d5d896, ftLastAccessTime.dwLowDateTime=0x9fab6b50, ftLastAccessTime.dwHighDateTime=0x1d5d920, ftLastWriteTime.dwLowDateTime=0x9fab6b50, ftLastWriteTime.dwHighDateTime=0x1d5d920, nFileSizeHigh=0x0, nFileSizeLow=0xa99d, dwReserved0=0x0, dwReserved1=0x0, cFileName="0fonx3QbySjHW9kekT.flv", cAlternateFileName="0FONX3~1.FLV")) returned 1 [0089.539] FindNextFileW (in: hFindFile=0x381f40, lpFindFileData=0x31e47c | out: lpFindFileData=0x31e47c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x47f5d6e0, ftCreationTime.dwHighDateTime=0x1d5e08a, ftLastAccessTime.dwLowDateTime=0xe18016c0, ftLastAccessTime.dwHighDateTime=0x1d5e3ed, ftLastWriteTime.dwLowDateTime=0xe18016c0, ftLastWriteTime.dwHighDateTime=0x1d5e3ed, nFileSizeHigh=0x0, nFileSizeLow=0x6071, dwReserved0=0x0, dwReserved1=0x0, cFileName="84yfCS6st5K5-66QqbH.flv", cAlternateFileName="84YFCS~1.FLV")) returned 1 [0089.539] FindNextFileW (in: hFindFile=0x381f40, lpFindFileData=0x31e47c | out: lpFindFileData=0x31e47c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x97daebe0, ftCreationTime.dwHighDateTime=0x1d5e1fd, ftLastAccessTime.dwLowDateTime=0xd50d2650, ftLastAccessTime.dwHighDateTime=0x1d5dfae, ftLastWriteTime.dwLowDateTime=0xd50d2650, ftLastWriteTime.dwHighDateTime=0x1d5dfae, nFileSizeHigh=0x0, nFileSizeLow=0x18f71, dwReserved0=0x0, dwReserved1=0x0, cFileName="I_6vs OEkcms 9.avi", cAlternateFileName="I_6VSO~1.AVI")) returned 1 [0089.539] FindNextFileW (in: hFindFile=0x381f40, lpFindFileData=0x31e47c | out: lpFindFileData=0x31e47c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x64f1c0a0, ftCreationTime.dwHighDateTime=0x1d5d96f, ftLastAccessTime.dwLowDateTime=0xdec27400, ftLastAccessTime.dwHighDateTime=0x1d5da42, ftLastWriteTime.dwLowDateTime=0xdec27400, ftLastWriteTime.dwHighDateTime=0x1d5da42, nFileSizeHigh=0x0, nFileSizeLow=0xa518, dwReserved0=0x0, dwReserved1=0x0, cFileName="JRCMw8ia7Ft_DJ1tOw1R.swf", cAlternateFileName="JRCMW8~1.SWF")) returned 1 [0089.539] FindNextFileW (in: hFindFile=0x381f40, lpFindFileData=0x31e47c | out: lpFindFileData=0x31e47c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xfc59e300, ftCreationTime.dwHighDateTime=0x1d5dd02, ftLastAccessTime.dwLowDateTime=0x6a9d76c0, ftLastAccessTime.dwHighDateTime=0x1d5d852, ftLastWriteTime.dwLowDateTime=0x6a9d76c0, ftLastWriteTime.dwHighDateTime=0x1d5d852, nFileSizeHigh=0x0, nFileSizeLow=0xa9ec, dwReserved0=0x0, dwReserved1=0x0, cFileName="oqnnsV1y3L.avi", cAlternateFileName="OQNNSV~1.AVI")) returned 1 [0089.539] FindNextFileW (in: hFindFile=0x381f40, lpFindFileData=0x31e47c | out: lpFindFileData=0x31e47c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3053d3c0, ftCreationTime.dwHighDateTime=0x1d5d824, ftLastAccessTime.dwLowDateTime=0x281af530, ftLastAccessTime.dwHighDateTime=0x1d5d964, ftLastWriteTime.dwLowDateTime=0x281af530, ftLastWriteTime.dwHighDateTime=0x1d5d964, nFileSizeHigh=0x0, nFileSizeLow=0x6aaf, dwReserved0=0x0, dwReserved1=0x0, cFileName="VRQcjXR.flv", cAlternateFileName="")) returned 1 [0089.539] FindNextFileW (in: hFindFile=0x381f40, lpFindFileData=0x31e47c | out: lpFindFileData=0x31e47c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3fd79130, ftCreationTime.dwHighDateTime=0x1d5e146, ftLastAccessTime.dwLowDateTime=0x95f5790, ftLastAccessTime.dwHighDateTime=0x1d5df62, ftLastWriteTime.dwLowDateTime=0x95f5790, ftLastWriteTime.dwHighDateTime=0x1d5df62, nFileSizeHigh=0x0, nFileSizeLow=0x22ed, dwReserved0=0x0, dwReserved1=0x0, cFileName="XVhbcUwPblVHFgKQ.swf", cAlternateFileName="XVHBCU~1.SWF")) returned 1 [0089.539] FindNextFileW (in: hFindFile=0x381f40, lpFindFileData=0x31e47c | out: lpFindFileData=0x31e47c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x90d2810, ftCreationTime.dwHighDateTime=0x1d5dee2, ftLastAccessTime.dwLowDateTime=0xcf54520, ftLastAccessTime.dwHighDateTime=0x1d5e79d, ftLastWriteTime.dwLowDateTime=0xcf54520, ftLastWriteTime.dwHighDateTime=0x1d5e79d, nFileSizeHigh=0x0, nFileSizeLow=0x16f9d, dwReserved0=0x0, dwReserved1=0x0, cFileName="Yq_52sjx1uoh.mp4", cAlternateFileName="YQ_52S~1.MP4")) returned 1 [0089.539] FindNextFileW (in: hFindFile=0x381f40, lpFindFileData=0x31e47c | out: lpFindFileData=0x31e47c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x90d2810, ftCreationTime.dwHighDateTime=0x1d5dee2, ftLastAccessTime.dwLowDateTime=0xcf54520, ftLastAccessTime.dwHighDateTime=0x1d5e79d, ftLastWriteTime.dwLowDateTime=0xcf54520, ftLastWriteTime.dwHighDateTime=0x1d5e79d, nFileSizeHigh=0x0, nFileSizeLow=0x16f9d, dwReserved0=0x0, dwReserved1=0x0, cFileName="Yq_52sjx1uoh.mp4", cAlternateFileName="YQ_52S~1.MP4")) returned 0 [0089.540] FindClose (in: hFindFile=0x381f40 | out: hFindFile=0x381f40) returned 1 [0089.540] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e704) returned 1 [0089.540] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e710) returned 1 [0089.540] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\MRfMb1EbDbFqINXp-b\\eStdF\\I_6vs OEkcms 9.avi", nBufferLength=0x105, lpBuffer=0x31e11c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\MRfMb1EbDbFqINXp-b\\eStdF\\I_6vs OEkcms 9.avi", lpFilePart=0x0) returned 0x50 [0089.540] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e610) returned 1 [0089.540] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\MRfMb1EbDbFqINXp-b\\eStdF\\I_6vs OEkcms 9.avi" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\videos\\mrfmb1ebdbfqinxp-b\\estdf\\i_6vs oekcms 9.avi"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x178 [0089.540] GetFileType (hFile=0x178) returned 0x1 [0089.540] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e60c) returned 1 [0089.540] GetFileType (hFile=0x178) returned 0x1 [0089.540] GetFileSize (in: hFile=0x178, lpFileSizeHigh=0x31e718 | out: lpFileSizeHigh=0x31e718*=0x0) returned 0x18f71 [0089.540] ReadFile (in: hFile=0x178, lpBuffer=0x3875760, nNumberOfBytesToRead=0x18f71, lpNumberOfBytesRead=0x31e6c4, lpOverlapped=0x0 | out: lpBuffer=0x3875760*, lpNumberOfBytesRead=0x31e6c4*=0x18f71, lpOverlapped=0x0) returned 1 [0089.542] CloseHandle (hObject=0x178) returned 1 [0089.558] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\MRfMb1EbDbFqINXp-b\\eStdF\\I_6vs OEkcms 9.avi", nBufferLength=0x105, lpBuffer=0x31e108, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\MRfMb1EbDbFqINXp-b\\eStdF\\I_6vs OEkcms 9.avi", lpFilePart=0x0) returned 0x50 [0089.558] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e5fc) returned 1 [0089.558] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\MRfMb1EbDbFqINXp-b\\eStdF\\I_6vs OEkcms 9.avi" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\videos\\mrfmb1ebdbfqinxp-b\\estdf\\i_6vs oekcms 9.avi"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x178 [0089.559] GetFileType (hFile=0x178) returned 0x1 [0089.559] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e5f8) returned 1 [0089.559] GetFileType (hFile=0x178) returned 0x1 [0089.560] WriteFile (in: hFile=0x178, lpBuffer=0x3926200*, nNumberOfBytesToWrite=0x18f80, lpNumberOfBytesWritten=0x31e6b8, lpOverlapped=0x0 | out: lpBuffer=0x3926200*, lpNumberOfBytesWritten=0x31e6b8*=0x18f80, lpOverlapped=0x0) returned 1 [0089.562] CloseHandle (hObject=0x178) returned 1 [0089.562] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\MRfMb1EbDbFqINXp-b\\eStdF\\I_6vs OEkcms 9.avi", nBufferLength=0x105, lpBuffer=0x31e23c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\MRfMb1EbDbFqINXp-b\\eStdF\\I_6vs OEkcms 9.avi", lpFilePart=0x0) returned 0x50 [0089.562] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\MRfMb1EbDbFqINXp-b\\eStdF\\I_6vs OEkcms 9.avi", nBufferLength=0x105, lpBuffer=0x31e23c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\MRfMb1EbDbFqINXp-b\\eStdF\\I_6vs OEkcms 9.avi", lpFilePart=0x0) returned 0x50 [0089.562] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e69c) returned 1 [0089.562] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\MRfMb1EbDbFqINXp-b\\eStdF\\I_6vs OEkcms 9.avi" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\videos\\mrfmb1ebdbfqinxp-b\\estdf\\i_6vs oekcms 9.avi"), fInfoLevelId=0x0, lpFileInformation=0x31e718 | out: lpFileInformation=0x31e718*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x97daebe0, ftCreationTime.dwHighDateTime=0x1d5e1fd, ftLastAccessTime.dwLowDateTime=0xd50d2650, ftLastAccessTime.dwHighDateTime=0x1d5dfae, ftLastWriteTime.dwLowDateTime=0x18d45980, ftLastWriteTime.dwHighDateTime=0x1d6eb7f, nFileSizeHigh=0x0, nFileSizeLow=0x18f80)) returned 1 [0089.562] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e698) returned 1 [0089.562] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\MRfMb1EbDbFqINXp-b\\eStdF\\I_6vs OEkcms 9.avi" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\videos\\mrfmb1ebdbfqinxp-b\\estdf\\i_6vs oekcms 9.avi"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\MRfMb1EbDbFqINXp-b\\eStdF\\I_6vs OEkcms 9.avi" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\videos\\mrfmb1ebdbfqinxp-b\\estdf\\i_6vs oekcms 9.avi")) returned 1 [0089.562] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\MRfMb1EbDbFqINXp-b\\eStdF\\oqnnsV1y3L.avi", nBufferLength=0x105, lpBuffer=0x31e11c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\MRfMb1EbDbFqINXp-b\\eStdF\\oqnnsV1y3L.avi", lpFilePart=0x0) returned 0x4c [0089.562] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e610) returned 1 [0089.562] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\MRfMb1EbDbFqINXp-b\\eStdF\\oqnnsV1y3L.avi" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\videos\\mrfmb1ebdbfqinxp-b\\estdf\\oqnnsv1y3l.avi"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x178 [0089.562] GetFileType (hFile=0x178) returned 0x1 [0089.563] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e60c) returned 1 [0089.563] GetFileType (hFile=0x178) returned 0x1 [0089.563] GetFileSize (in: hFile=0x178, lpFileSizeHigh=0x31e718 | out: lpFileSizeHigh=0x31e718*=0x0) returned 0xa9ec [0089.563] ReadFile (in: hFile=0x178, lpBuffer=0x270ad94, nNumberOfBytesToRead=0xa9ec, lpNumberOfBytesRead=0x31e6c4, lpOverlapped=0x0 | out: lpBuffer=0x270ad94*, lpNumberOfBytesRead=0x31e6c4*=0xa9ec, lpOverlapped=0x0) returned 1 [0089.564] CloseHandle (hObject=0x178) returned 1 [0089.577] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\MRfMb1EbDbFqINXp-b\\eStdF\\oqnnsV1y3L.avi", nBufferLength=0x105, lpBuffer=0x31e108, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\MRfMb1EbDbFqINXp-b\\eStdF\\oqnnsV1y3L.avi", lpFilePart=0x0) returned 0x4c [0089.577] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e5fc) returned 1 [0089.577] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\MRfMb1EbDbFqINXp-b\\eStdF\\oqnnsV1y3L.avi" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\videos\\mrfmb1ebdbfqinxp-b\\estdf\\oqnnsv1y3l.avi"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x178 [0089.578] GetFileType (hFile=0x178) returned 0x1 [0089.578] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e5f8) returned 1 [0089.578] GetFileType (hFile=0x178) returned 0x1 [0089.578] WriteFile (in: hFile=0x178, lpBuffer=0x277795c*, nNumberOfBytesToWrite=0xa9f0, lpNumberOfBytesWritten=0x31e6b8, lpOverlapped=0x0 | out: lpBuffer=0x277795c*, lpNumberOfBytesWritten=0x31e6b8*=0xa9f0, lpOverlapped=0x0) returned 1 [0089.581] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\MRfMb1EbDbFqINXp-b\\eStdF\\oqnnsV1y3L.avi", nBufferLength=0x105, lpBuffer=0x31e23c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\MRfMb1EbDbFqINXp-b\\eStdF\\oqnnsV1y3L.avi", lpFilePart=0x0) returned 0x4c [0089.581] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\MRfMb1EbDbFqINXp-b\\eStdF\\oqnnsV1y3L.avi", nBufferLength=0x105, lpBuffer=0x31e23c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\MRfMb1EbDbFqINXp-b\\eStdF\\oqnnsV1y3L.avi", lpFilePart=0x0) returned 0x4c [0089.581] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e69c) returned 1 [0089.581] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\MRfMb1EbDbFqINXp-b\\eStdF\\oqnnsV1y3L.avi" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\videos\\mrfmb1ebdbfqinxp-b\\estdf\\oqnnsv1y3l.avi"), fInfoLevelId=0x0, lpFileInformation=0x31e718 | out: lpFileInformation=0x31e718*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xfc59e300, ftCreationTime.dwHighDateTime=0x1d5dd02, ftLastAccessTime.dwLowDateTime=0x6a9d76c0, ftLastAccessTime.dwHighDateTime=0x1d5d852, ftLastWriteTime.dwLowDateTime=0x18d6bae0, ftLastWriteTime.dwHighDateTime=0x1d6eb7f, nFileSizeHigh=0x0, nFileSizeLow=0xa9f0)) returned 1 [0089.581] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e698) returned 1 [0089.581] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\MRfMb1EbDbFqINXp-b\\eStdF\\oqnnsV1y3L.avi" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\videos\\mrfmb1ebdbfqinxp-b\\estdf\\oqnnsv1y3l.avi"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\MRfMb1EbDbFqINXp-b\\eStdF\\oqnnsV1y3L.avi" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\videos\\mrfmb1ebdbfqinxp-b\\estdf\\oqnnsv1y3l.avi")) returned 1 [0089.581] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\MRfMb1EbDbFqINXp-b\\eStdF\\Yq_52sjx1uoh.mp4", nBufferLength=0x105, lpBuffer=0x31e11c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\MRfMb1EbDbFqINXp-b\\eStdF\\Yq_52sjx1uoh.mp4", lpFilePart=0x0) returned 0x4e [0089.581] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e610) returned 1 [0089.581] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\MRfMb1EbDbFqINXp-b\\eStdF\\Yq_52sjx1uoh.mp4" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\videos\\mrfmb1ebdbfqinxp-b\\estdf\\yq_52sjx1uoh.mp4"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x178 [0089.581] GetFileType (hFile=0x178) returned 0x1 [0089.581] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e60c) returned 1 [0089.581] GetFileType (hFile=0x178) returned 0x1 [0089.581] GetFileSize (in: hFile=0x178, lpFileSizeHigh=0x31e718 | out: lpFileSizeHigh=0x31e718*=0x0) returned 0x16f9d [0089.585] ReadFile (in: hFile=0x178, lpBuffer=0x36194b0, nNumberOfBytesToRead=0x16f9d, lpNumberOfBytesRead=0x31e6c4, lpOverlapped=0x0 | out: lpBuffer=0x36194b0*, lpNumberOfBytesRead=0x31e6c4*=0x16f9d, lpOverlapped=0x0) returned 1 [0089.586] CloseHandle (hObject=0x178) returned 1 [0089.639] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\MRfMb1EbDbFqINXp-b\\eStdF\\Yq_52sjx1uoh.mp4", nBufferLength=0x105, lpBuffer=0x31e108, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\MRfMb1EbDbFqINXp-b\\eStdF\\Yq_52sjx1uoh.mp4", lpFilePart=0x0) returned 0x4e [0089.639] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e5fc) returned 1 [0089.639] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\MRfMb1EbDbFqINXp-b\\eStdF\\Yq_52sjx1uoh.mp4" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\videos\\mrfmb1ebdbfqinxp-b\\estdf\\yq_52sjx1uoh.mp4"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x178 [0089.641] GetFileType (hFile=0x178) returned 0x1 [0089.641] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e5f8) returned 1 [0089.641] GetFileType (hFile=0x178) returned 0x1 [0089.641] WriteFile (in: hFile=0x178, lpBuffer=0x368c310*, nNumberOfBytesToWrite=0x16fa0, lpNumberOfBytesWritten=0x31e6b8, lpOverlapped=0x0 | out: lpBuffer=0x368c310*, lpNumberOfBytesWritten=0x31e6b8*=0x16fa0, lpOverlapped=0x0) returned 1 [0089.643] CloseHandle (hObject=0x178) returned 1 [0089.643] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\MRfMb1EbDbFqINXp-b\\eStdF\\Yq_52sjx1uoh.mp4", nBufferLength=0x105, lpBuffer=0x31e23c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\MRfMb1EbDbFqINXp-b\\eStdF\\Yq_52sjx1uoh.mp4", lpFilePart=0x0) returned 0x4e [0089.643] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\MRfMb1EbDbFqINXp-b\\eStdF\\Yq_52sjx1uoh.mp4", nBufferLength=0x105, lpBuffer=0x31e23c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\MRfMb1EbDbFqINXp-b\\eStdF\\Yq_52sjx1uoh.mp4", lpFilePart=0x0) returned 0x4e [0089.643] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e69c) returned 1 [0089.643] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\MRfMb1EbDbFqINXp-b\\eStdF\\Yq_52sjx1uoh.mp4" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\videos\\mrfmb1ebdbfqinxp-b\\estdf\\yq_52sjx1uoh.mp4"), fInfoLevelId=0x0, lpFileInformation=0x31e718 | out: lpFileInformation=0x31e718*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x90d2810, ftCreationTime.dwHighDateTime=0x1d5dee2, ftLastAccessTime.dwLowDateTime=0xcf54520, ftLastAccessTime.dwHighDateTime=0x1d5e79d, ftLastWriteTime.dwLowDateTime=0x18e04060, ftLastWriteTime.dwHighDateTime=0x1d6eb7f, nFileSizeHigh=0x0, nFileSizeLow=0x16fa0)) returned 1 [0089.643] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e698) returned 1 [0089.643] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\MRfMb1EbDbFqINXp-b\\eStdF\\Yq_52sjx1uoh.mp4" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\videos\\mrfmb1ebdbfqinxp-b\\estdf\\yq_52sjx1uoh.mp4"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\MRfMb1EbDbFqINXp-b\\eStdF\\Yq_52sjx1uoh.mp4" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\videos\\mrfmb1ebdbfqinxp-b\\estdf\\yq_52sjx1uoh.mp4")) returned 1 [0089.643] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e7bc) returned 1 [0089.643] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\vzk6K51PQW9jyiRf", nBufferLength=0x105, lpBuffer=0x31e2c4, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\vzk6K51PQW9jyiRf", lpFilePart=0x0) returned 0x35 [0089.643] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\vzk6K51PQW9jyiRf\\", nBufferLength=0x105, lpBuffer=0x31e298, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\vzk6K51PQW9jyiRf\\", lpFilePart=0x0) returned 0x36 [0089.643] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\vzk6K51PQW9jyiRf\\*", lpFindFileData=0x31e4e4 | out: lpFindFileData=0x31e4e4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x979e8bc0, ftCreationTime.dwHighDateTime=0x1d5dc42, ftLastAccessTime.dwLowDateTime=0x7b191b50, ftLastAccessTime.dwHighDateTime=0x1d5e4ee, ftLastWriteTime.dwLowDateTime=0x7b191b50, ftLastWriteTime.dwHighDateTime=0x1d5e4ee, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x381dc0 [0089.644] FindNextFileW (in: hFindFile=0x381dc0, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x979e8bc0, ftCreationTime.dwHighDateTime=0x1d5dc42, ftLastAccessTime.dwLowDateTime=0x7b191b50, ftLastAccessTime.dwHighDateTime=0x1d5e4ee, ftLastWriteTime.dwLowDateTime=0x7b191b50, ftLastWriteTime.dwHighDateTime=0x1d5e4ee, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0089.644] FindNextFileW (in: hFindFile=0x381dc0, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x76104c80, ftCreationTime.dwHighDateTime=0x1d5dfd7, ftLastAccessTime.dwLowDateTime=0xc0fba870, ftLastAccessTime.dwHighDateTime=0x1d5e6a8, ftLastWriteTime.dwLowDateTime=0xc0fba870, ftLastWriteTime.dwHighDateTime=0x1d5e6a8, nFileSizeHigh=0x0, nFileSizeLow=0x16efd, dwReserved0=0x0, dwReserved1=0x0, cFileName="avs0VLVQy.mkv", cAlternateFileName="AVS0VL~1.MKV")) returned 1 [0089.644] FindNextFileW (in: hFindFile=0x381dc0, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xcb890d50, ftCreationTime.dwHighDateTime=0x1d5d88e, ftLastAccessTime.dwLowDateTime=0xad920a20, ftLastAccessTime.dwHighDateTime=0x1d5e36c, ftLastWriteTime.dwLowDateTime=0xad920a20, ftLastWriteTime.dwHighDateTime=0x1d5e36c, nFileSizeHigh=0x0, nFileSizeLow=0xcbb9, dwReserved0=0x0, dwReserved1=0x0, cFileName="k0j at2.flv", cAlternateFileName="K0JAT2~1.FLV")) returned 1 [0089.644] FindNextFileW (in: hFindFile=0x381dc0, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3abce710, ftCreationTime.dwHighDateTime=0x1d5e11c, ftLastAccessTime.dwLowDateTime=0x95804290, ftLastAccessTime.dwHighDateTime=0x1d5d803, ftLastWriteTime.dwLowDateTime=0x95804290, ftLastWriteTime.dwHighDateTime=0x1d5d803, nFileSizeHigh=0x0, nFileSizeLow=0x5396, dwReserved0=0x0, dwReserved1=0x0, cFileName="R9y47OQ.mkv", cAlternateFileName="")) returned 1 [0089.644] FindNextFileW (in: hFindFile=0x381dc0, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xba4a3310, ftCreationTime.dwHighDateTime=0x1d5d817, ftLastAccessTime.dwLowDateTime=0x993b2060, ftLastAccessTime.dwHighDateTime=0x1d5de95, ftLastWriteTime.dwLowDateTime=0x993b2060, ftLastWriteTime.dwHighDateTime=0x1d5de95, nFileSizeHigh=0x0, nFileSizeLow=0x111ec, dwReserved0=0x0, dwReserved1=0x0, cFileName="RQIFP0AFaRZryGtQ.mkv", cAlternateFileName="RQIFP0~1.MKV")) returned 1 [0089.644] FindNextFileW (in: hFindFile=0x381dc0, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x856c77a0, ftCreationTime.dwHighDateTime=0x1d5dedb, ftLastAccessTime.dwLowDateTime=0xb0d60080, ftLastAccessTime.dwHighDateTime=0x1d5d8b6, ftLastWriteTime.dwLowDateTime=0xb0d60080, ftLastWriteTime.dwHighDateTime=0x1d5d8b6, nFileSizeHigh=0x0, nFileSizeLow=0xc6fb, dwReserved0=0x0, dwReserved1=0x0, cFileName="ZbKUnKkgcHGbWFlacj.mkv", cAlternateFileName="ZBKUNK~1.MKV")) returned 1 [0089.644] FindNextFileW (in: hFindFile=0x381dc0, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2350ca70, ftCreationTime.dwHighDateTime=0x1d5e40e, ftLastAccessTime.dwLowDateTime=0xeeaeccb0, ftLastAccessTime.dwHighDateTime=0x1d5dab0, ftLastWriteTime.dwLowDateTime=0xeeaeccb0, ftLastWriteTime.dwHighDateTime=0x1d5dab0, nFileSizeHigh=0x0, nFileSizeLow=0x9a9a, dwReserved0=0x0, dwReserved1=0x0, cFileName="ZnIuVbheGUKnztXYh7.avi", cAlternateFileName="ZNIUVB~1.AVI")) returned 1 [0089.644] FindNextFileW (in: hFindFile=0x381dc0, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0089.644] FindClose (in: hFindFile=0x381dc0 | out: hFindFile=0x381dc0) returned 1 [0089.645] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e77c) returned 1 [0089.645] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e788) returned 1 [0089.645] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e7bc) returned 1 [0089.645] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\vzk6K51PQW9jyiRf", nBufferLength=0x105, lpBuffer=0x31e2c4, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\vzk6K51PQW9jyiRf", lpFilePart=0x0) returned 0x35 [0089.645] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\vzk6K51PQW9jyiRf\\", nBufferLength=0x105, lpBuffer=0x31e298, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\vzk6K51PQW9jyiRf\\", lpFilePart=0x0) returned 0x36 [0089.645] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\vzk6K51PQW9jyiRf\\*", lpFindFileData=0x31e4e4 | out: lpFindFileData=0x31e4e4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x979e8bc0, ftCreationTime.dwHighDateTime=0x1d5dc42, ftLastAccessTime.dwLowDateTime=0x7b191b50, ftLastAccessTime.dwHighDateTime=0x1d5e4ee, ftLastWriteTime.dwLowDateTime=0x7b191b50, ftLastWriteTime.dwHighDateTime=0x1d5e4ee, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x381dc0 [0089.645] FindNextFileW (in: hFindFile=0x381dc0, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x979e8bc0, ftCreationTime.dwHighDateTime=0x1d5dc42, ftLastAccessTime.dwLowDateTime=0x7b191b50, ftLastAccessTime.dwHighDateTime=0x1d5e4ee, ftLastWriteTime.dwLowDateTime=0x7b191b50, ftLastWriteTime.dwHighDateTime=0x1d5e4ee, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0089.645] FindNextFileW (in: hFindFile=0x381dc0, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x76104c80, ftCreationTime.dwHighDateTime=0x1d5dfd7, ftLastAccessTime.dwLowDateTime=0xc0fba870, ftLastAccessTime.dwHighDateTime=0x1d5e6a8, ftLastWriteTime.dwLowDateTime=0xc0fba870, ftLastWriteTime.dwHighDateTime=0x1d5e6a8, nFileSizeHigh=0x0, nFileSizeLow=0x16efd, dwReserved0=0x0, dwReserved1=0x0, cFileName="avs0VLVQy.mkv", cAlternateFileName="AVS0VL~1.MKV")) returned 1 [0089.645] FindNextFileW (in: hFindFile=0x381dc0, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xcb890d50, ftCreationTime.dwHighDateTime=0x1d5d88e, ftLastAccessTime.dwLowDateTime=0xad920a20, ftLastAccessTime.dwHighDateTime=0x1d5e36c, ftLastWriteTime.dwLowDateTime=0xad920a20, ftLastWriteTime.dwHighDateTime=0x1d5e36c, nFileSizeHigh=0x0, nFileSizeLow=0xcbb9, dwReserved0=0x0, dwReserved1=0x0, cFileName="k0j at2.flv", cAlternateFileName="K0JAT2~1.FLV")) returned 1 [0089.645] FindNextFileW (in: hFindFile=0x381dc0, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3abce710, ftCreationTime.dwHighDateTime=0x1d5e11c, ftLastAccessTime.dwLowDateTime=0x95804290, ftLastAccessTime.dwHighDateTime=0x1d5d803, ftLastWriteTime.dwLowDateTime=0x95804290, ftLastWriteTime.dwHighDateTime=0x1d5d803, nFileSizeHigh=0x0, nFileSizeLow=0x5396, dwReserved0=0x0, dwReserved1=0x0, cFileName="R9y47OQ.mkv", cAlternateFileName="")) returned 1 [0089.645] FindNextFileW (in: hFindFile=0x381dc0, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xba4a3310, ftCreationTime.dwHighDateTime=0x1d5d817, ftLastAccessTime.dwLowDateTime=0x993b2060, ftLastAccessTime.dwHighDateTime=0x1d5de95, ftLastWriteTime.dwLowDateTime=0x993b2060, ftLastWriteTime.dwHighDateTime=0x1d5de95, nFileSizeHigh=0x0, nFileSizeLow=0x111ec, dwReserved0=0x0, dwReserved1=0x0, cFileName="RQIFP0AFaRZryGtQ.mkv", cAlternateFileName="RQIFP0~1.MKV")) returned 1 [0089.645] FindNextFileW (in: hFindFile=0x381dc0, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x856c77a0, ftCreationTime.dwHighDateTime=0x1d5dedb, ftLastAccessTime.dwLowDateTime=0xb0d60080, ftLastAccessTime.dwHighDateTime=0x1d5d8b6, ftLastWriteTime.dwLowDateTime=0xb0d60080, ftLastWriteTime.dwHighDateTime=0x1d5d8b6, nFileSizeHigh=0x0, nFileSizeLow=0xc6fb, dwReserved0=0x0, dwReserved1=0x0, cFileName="ZbKUnKkgcHGbWFlacj.mkv", cAlternateFileName="ZBKUNK~1.MKV")) returned 1 [0089.645] FindNextFileW (in: hFindFile=0x381dc0, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2350ca70, ftCreationTime.dwHighDateTime=0x1d5e40e, ftLastAccessTime.dwLowDateTime=0xeeaeccb0, ftLastAccessTime.dwHighDateTime=0x1d5dab0, ftLastWriteTime.dwLowDateTime=0xeeaeccb0, ftLastWriteTime.dwHighDateTime=0x1d5dab0, nFileSizeHigh=0x0, nFileSizeLow=0x9a9a, dwReserved0=0x0, dwReserved1=0x0, cFileName="ZnIuVbheGUKnztXYh7.avi", cAlternateFileName="ZNIUVB~1.AVI")) returned 1 [0089.646] FindNextFileW (in: hFindFile=0x381dc0, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2350ca70, ftCreationTime.dwHighDateTime=0x1d5e40e, ftLastAccessTime.dwLowDateTime=0xeeaeccb0, ftLastAccessTime.dwHighDateTime=0x1d5dab0, ftLastWriteTime.dwLowDateTime=0xeeaeccb0, ftLastWriteTime.dwHighDateTime=0x1d5dab0, nFileSizeHigh=0x0, nFileSizeLow=0x9a9a, dwReserved0=0x0, dwReserved1=0x0, cFileName="ZnIuVbheGUKnztXYh7.avi", cAlternateFileName="ZNIUVB~1.AVI")) returned 0 [0089.646] FindClose (in: hFindFile=0x381dc0 | out: hFindFile=0x381dc0) returned 1 [0089.646] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e77c) returned 1 [0089.646] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e788) returned 1 [0089.646] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\vzk6K51PQW9jyiRf\\avs0VLVQy.mkv", nBufferLength=0x105, lpBuffer=0x31e194, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\vzk6K51PQW9jyiRf\\avs0VLVQy.mkv", lpFilePart=0x0) returned 0x43 [0089.646] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e688) returned 1 [0089.646] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\vzk6K51PQW9jyiRf\\avs0VLVQy.mkv" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\videos\\vzk6k51pqw9jyirf\\avs0vlvqy.mkv"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x178 [0089.646] GetFileType (hFile=0x178) returned 0x1 [0089.646] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e684) returned 1 [0089.646] GetFileType (hFile=0x178) returned 0x1 [0089.646] GetFileSize (in: hFile=0x178, lpFileSizeHigh=0x31e790 | out: lpFileSizeHigh=0x31e790*=0x0) returned 0x16efd [0089.646] ReadFile (in: hFile=0x178, lpBuffer=0x36a32d0, nNumberOfBytesToRead=0x16efd, lpNumberOfBytesRead=0x31e73c, lpOverlapped=0x0 | out: lpBuffer=0x36a32d0*, lpNumberOfBytesRead=0x31e73c*=0x16efd, lpOverlapped=0x0) returned 1 [0089.648] CloseHandle (hObject=0x178) returned 1 [0089.668] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\vzk6K51PQW9jyiRf\\avs0VLVQy.mkv", nBufferLength=0x105, lpBuffer=0x31e180, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\vzk6K51PQW9jyiRf\\avs0VLVQy.mkv", lpFilePart=0x0) returned 0x43 [0089.668] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e674) returned 1 [0089.668] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\vzk6K51PQW9jyiRf\\avs0VLVQy.mkv" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\videos\\vzk6k51pqw9jyirf\\avs0vlvqy.mkv"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x178 [0089.670] GetFileType (hFile=0x178) returned 0x1 [0089.670] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e670) returned 1 [0089.670] GetFileType (hFile=0x178) returned 0x1 [0089.670] WriteFile (in: hFile=0x178, lpBuffer=0x3715e10*, nNumberOfBytesToWrite=0x16f00, lpNumberOfBytesWritten=0x31e730, lpOverlapped=0x0 | out: lpBuffer=0x3715e10*, lpNumberOfBytesWritten=0x31e730*=0x16f00, lpOverlapped=0x0) returned 1 [0089.672] CloseHandle (hObject=0x178) returned 1 [0089.672] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\vzk6K51PQW9jyiRf\\avs0VLVQy.mkv", nBufferLength=0x105, lpBuffer=0x31e2b4, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\vzk6K51PQW9jyiRf\\avs0VLVQy.mkv", lpFilePart=0x0) returned 0x43 [0089.672] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\vzk6K51PQW9jyiRf\\avs0VLVQy.mkv", nBufferLength=0x105, lpBuffer=0x31e2b4, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\vzk6K51PQW9jyiRf\\avs0VLVQy.mkv", lpFilePart=0x0) returned 0x43 [0089.672] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e714) returned 1 [0089.672] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\vzk6K51PQW9jyiRf\\avs0VLVQy.mkv" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\videos\\vzk6k51pqw9jyirf\\avs0vlvqy.mkv"), fInfoLevelId=0x0, lpFileInformation=0x31e790 | out: lpFileInformation=0x31e790*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x76104c80, ftCreationTime.dwHighDateTime=0x1d5dfd7, ftLastAccessTime.dwLowDateTime=0xc0fba870, ftLastAccessTime.dwHighDateTime=0x1d5e6a8, ftLastWriteTime.dwLowDateTime=0x18e50320, ftLastWriteTime.dwHighDateTime=0x1d6eb7f, nFileSizeHigh=0x0, nFileSizeLow=0x16f00)) returned 1 [0089.672] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e710) returned 1 [0089.672] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\vzk6K51PQW9jyiRf\\avs0VLVQy.mkv" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\videos\\vzk6k51pqw9jyirf\\avs0vlvqy.mkv"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\vzk6K51PQW9jyiRf\\avs0VLVQy.mkv" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\videos\\vzk6k51pqw9jyirf\\avs0vlvqy.mkv")) returned 1 [0089.672] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\vzk6K51PQW9jyiRf\\R9y47OQ.mkv", nBufferLength=0x105, lpBuffer=0x31e194, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\vzk6K51PQW9jyiRf\\R9y47OQ.mkv", lpFilePart=0x0) returned 0x41 [0089.673] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e688) returned 1 [0089.673] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\vzk6K51PQW9jyiRf\\R9y47OQ.mkv" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\videos\\vzk6k51pqw9jyirf\\r9y47oq.mkv"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x178 [0089.673] GetFileType (hFile=0x178) returned 0x1 [0089.673] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e684) returned 1 [0089.673] GetFileType (hFile=0x178) returned 0x1 [0089.673] GetFileSize (in: hFile=0x178, lpFileSizeHigh=0x31e790 | out: lpFileSizeHigh=0x31e790*=0x0) returned 0x5396 [0089.673] ReadFile (in: hFile=0x178, lpBuffer=0x26c82d4, nNumberOfBytesToRead=0x5396, lpNumberOfBytesRead=0x31e73c, lpOverlapped=0x0 | out: lpBuffer=0x26c82d4*, lpNumberOfBytesRead=0x31e73c*=0x5396, lpOverlapped=0x0) returned 1 [0089.674] CloseHandle (hObject=0x178) returned 1 [0089.711] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\vzk6K51PQW9jyiRf\\R9y47OQ.mkv", nBufferLength=0x105, lpBuffer=0x31e180, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\vzk6K51PQW9jyiRf\\R9y47OQ.mkv", lpFilePart=0x0) returned 0x41 [0089.711] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e674) returned 1 [0089.711] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\vzk6K51PQW9jyiRf\\R9y47OQ.mkv" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\videos\\vzk6k51pqw9jyirf\\r9y47oq.mkv"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x178 [0089.712] GetFileType (hFile=0x178) returned 0x1 [0089.712] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e670) returned 1 [0089.712] GetFileType (hFile=0x178) returned 0x1 [0089.712] WriteFile (in: hFile=0x178, lpBuffer=0x272f2dc*, nNumberOfBytesToWrite=0x53a0, lpNumberOfBytesWritten=0x31e730, lpOverlapped=0x0 | out: lpBuffer=0x272f2dc*, lpNumberOfBytesWritten=0x31e730*=0x53a0, lpOverlapped=0x0) returned 1 [0089.713] CloseHandle (hObject=0x178) returned 1 [0089.714] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\vzk6K51PQW9jyiRf\\R9y47OQ.mkv", nBufferLength=0x105, lpBuffer=0x31e2b4, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\vzk6K51PQW9jyiRf\\R9y47OQ.mkv", lpFilePart=0x0) returned 0x41 [0089.714] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\vzk6K51PQW9jyiRf\\R9y47OQ.mkv", nBufferLength=0x105, lpBuffer=0x31e2b4, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\vzk6K51PQW9jyiRf\\R9y47OQ.mkv", lpFilePart=0x0) returned 0x41 [0089.714] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e714) returned 1 [0089.714] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\vzk6K51PQW9jyiRf\\R9y47OQ.mkv" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\videos\\vzk6k51pqw9jyirf\\r9y47oq.mkv"), fInfoLevelId=0x0, lpFileInformation=0x31e790 | out: lpFileInformation=0x31e790*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3abce710, ftCreationTime.dwHighDateTime=0x1d5e11c, ftLastAccessTime.dwLowDateTime=0x95804290, ftLastAccessTime.dwHighDateTime=0x1d5d803, ftLastWriteTime.dwLowDateTime=0x18e9c5e0, ftLastWriteTime.dwHighDateTime=0x1d6eb7f, nFileSizeHigh=0x0, nFileSizeLow=0x53a0)) returned 1 [0089.714] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e710) returned 1 [0089.714] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\vzk6K51PQW9jyiRf\\R9y47OQ.mkv" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\videos\\vzk6k51pqw9jyirf\\r9y47oq.mkv"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\vzk6K51PQW9jyiRf\\R9y47OQ.mkv" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\videos\\vzk6k51pqw9jyirf\\r9y47oq.mkv")) returned 1 [0089.714] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\vzk6K51PQW9jyiRf\\RQIFP0AFaRZryGtQ.mkv", nBufferLength=0x105, lpBuffer=0x31e194, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\vzk6K51PQW9jyiRf\\RQIFP0AFaRZryGtQ.mkv", lpFilePart=0x0) returned 0x4a [0089.714] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e688) returned 1 [0089.714] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\vzk6K51PQW9jyiRf\\RQIFP0AFaRZryGtQ.mkv" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\videos\\vzk6k51pqw9jyirf\\rqifp0afarzrygtq.mkv"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x178 [0089.714] GetFileType (hFile=0x178) returned 0x1 [0089.714] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e684) returned 1 [0089.714] GetFileType (hFile=0x178) returned 0x1 [0089.714] GetFileSize (in: hFile=0x178, lpFileSizeHigh=0x31e790 | out: lpFileSizeHigh=0x31e790*=0x0) returned 0x111ec [0089.714] ReadFile (in: hFile=0x178, lpBuffer=0x2734a08, nNumberOfBytesToRead=0x111ec, lpNumberOfBytesRead=0x31e73c, lpOverlapped=0x0 | out: lpBuffer=0x2734a08*, lpNumberOfBytesRead=0x31e73c*=0x111ec, lpOverlapped=0x0) returned 1 [0089.715] CloseHandle (hObject=0x178) returned 1 [0089.730] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\vzk6K51PQW9jyiRf\\RQIFP0AFaRZryGtQ.mkv", nBufferLength=0x105, lpBuffer=0x31e180, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\vzk6K51PQW9jyiRf\\RQIFP0AFaRZryGtQ.mkv", lpFilePart=0x0) returned 0x4a [0089.730] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e674) returned 1 [0089.730] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\vzk6K51PQW9jyiRf\\RQIFP0AFaRZryGtQ.mkv" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\videos\\vzk6k51pqw9jyirf\\rqifp0afarzrygtq.mkv"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x178 [0089.732] GetFileType (hFile=0x178) returned 0x1 [0089.732] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e670) returned 1 [0089.732] GetFileType (hFile=0x178) returned 0x1 [0089.732] WriteFile (in: hFile=0x178, lpBuffer=0x27b4dd0*, nNumberOfBytesToWrite=0x111f0, lpNumberOfBytesWritten=0x31e730, lpOverlapped=0x0 | out: lpBuffer=0x27b4dd0*, lpNumberOfBytesWritten=0x31e730*=0x111f0, lpOverlapped=0x0) returned 1 [0089.734] CloseHandle (hObject=0x178) returned 1 [0089.734] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\vzk6K51PQW9jyiRf\\RQIFP0AFaRZryGtQ.mkv", nBufferLength=0x105, lpBuffer=0x31e2b4, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\vzk6K51PQW9jyiRf\\RQIFP0AFaRZryGtQ.mkv", lpFilePart=0x0) returned 0x4a [0089.734] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\vzk6K51PQW9jyiRf\\RQIFP0AFaRZryGtQ.mkv", nBufferLength=0x105, lpBuffer=0x31e2b4, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\vzk6K51PQW9jyiRf\\RQIFP0AFaRZryGtQ.mkv", lpFilePart=0x0) returned 0x4a [0089.734] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e714) returned 1 [0089.734] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\vzk6K51PQW9jyiRf\\RQIFP0AFaRZryGtQ.mkv" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\videos\\vzk6k51pqw9jyirf\\rqifp0afarzrygtq.mkv"), fInfoLevelId=0x0, lpFileInformation=0x31e790 | out: lpFileInformation=0x31e790*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xba4a3310, ftCreationTime.dwHighDateTime=0x1d5d817, ftLastAccessTime.dwLowDateTime=0x993b2060, ftLastAccessTime.dwHighDateTime=0x1d5de95, ftLastWriteTime.dwLowDateTime=0x18ee88a0, ftLastWriteTime.dwHighDateTime=0x1d6eb7f, nFileSizeHigh=0x0, nFileSizeLow=0x111f0)) returned 1 [0089.734] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e710) returned 1 [0089.734] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\vzk6K51PQW9jyiRf\\RQIFP0AFaRZryGtQ.mkv" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\videos\\vzk6k51pqw9jyirf\\rqifp0afarzrygtq.mkv"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\vzk6K51PQW9jyiRf\\RQIFP0AFaRZryGtQ.mkv" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\videos\\vzk6k51pqw9jyirf\\rqifp0afarzrygtq.mkv")) returned 1 [0089.734] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\vzk6K51PQW9jyiRf\\ZbKUnKkgcHGbWFlacj.mkv", nBufferLength=0x105, lpBuffer=0x31e194, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\vzk6K51PQW9jyiRf\\ZbKUnKkgcHGbWFlacj.mkv", lpFilePart=0x0) returned 0x4c [0089.734] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e688) returned 1 [0089.734] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\vzk6K51PQW9jyiRf\\ZbKUnKkgcHGbWFlacj.mkv" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\videos\\vzk6k51pqw9jyirf\\zbkunkkgchgbwflacj.mkv"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x178 [0089.734] GetFileType (hFile=0x178) returned 0x1 [0089.734] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e684) returned 1 [0089.734] GetFileType (hFile=0x178) returned 0x1 [0089.734] GetFileSize (in: hFile=0x178, lpFileSizeHigh=0x31e790 | out: lpFileSizeHigh=0x31e790*=0x0) returned 0xc6fb [0089.735] ReadFile (in: hFile=0x178, lpBuffer=0x27c63a4, nNumberOfBytesToRead=0xc6fb, lpNumberOfBytesRead=0x31e73c, lpOverlapped=0x0 | out: lpBuffer=0x27c63a4*, lpNumberOfBytesRead=0x31e73c*=0xc6fb, lpOverlapped=0x0) returned 1 [0089.735] CloseHandle (hObject=0x178) returned 1 [0089.752] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\vzk6K51PQW9jyiRf\\ZbKUnKkgcHGbWFlacj.mkv", nBufferLength=0x105, lpBuffer=0x31e180, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\vzk6K51PQW9jyiRf\\ZbKUnKkgcHGbWFlacj.mkv", lpFilePart=0x0) returned 0x4c [0089.752] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e674) returned 1 [0089.752] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\vzk6K51PQW9jyiRf\\ZbKUnKkgcHGbWFlacj.mkv" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\videos\\vzk6k51pqw9jyirf\\zbkunkkgchgbwflacj.mkv"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x178 [0089.753] GetFileType (hFile=0x178) returned 0x1 [0089.753] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e670) returned 1 [0089.753] GetFileType (hFile=0x178) returned 0x1 [0089.753] WriteFile (in: hFile=0x178, lpBuffer=0x2651800*, nNumberOfBytesToWrite=0xc700, lpNumberOfBytesWritten=0x31e730, lpOverlapped=0x0 | out: lpBuffer=0x2651800*, lpNumberOfBytesWritten=0x31e730*=0xc700, lpOverlapped=0x0) returned 1 [0089.755] CloseHandle (hObject=0x178) returned 1 [0089.755] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\vzk6K51PQW9jyiRf\\ZbKUnKkgcHGbWFlacj.mkv", nBufferLength=0x105, lpBuffer=0x31e2b4, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\vzk6K51PQW9jyiRf\\ZbKUnKkgcHGbWFlacj.mkv", lpFilePart=0x0) returned 0x4c [0089.755] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\vzk6K51PQW9jyiRf\\ZbKUnKkgcHGbWFlacj.mkv", nBufferLength=0x105, lpBuffer=0x31e2b4, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\vzk6K51PQW9jyiRf\\ZbKUnKkgcHGbWFlacj.mkv", lpFilePart=0x0) returned 0x4c [0089.755] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e714) returned 1 [0089.755] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\vzk6K51PQW9jyiRf\\ZbKUnKkgcHGbWFlacj.mkv" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\videos\\vzk6k51pqw9jyirf\\zbkunkkgchgbwflacj.mkv"), fInfoLevelId=0x0, lpFileInformation=0x31e790 | out: lpFileInformation=0x31e790*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x856c77a0, ftCreationTime.dwHighDateTime=0x1d5dedb, ftLastAccessTime.dwLowDateTime=0xb0d60080, ftLastAccessTime.dwHighDateTime=0x1d5d8b6, ftLastWriteTime.dwLowDateTime=0x18f0ea00, ftLastWriteTime.dwHighDateTime=0x1d6eb7f, nFileSizeHigh=0x0, nFileSizeLow=0xc700)) returned 1 [0089.755] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e710) returned 1 [0089.755] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\vzk6K51PQW9jyiRf\\ZbKUnKkgcHGbWFlacj.mkv" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\videos\\vzk6k51pqw9jyirf\\zbkunkkgchgbwflacj.mkv"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\vzk6K51PQW9jyiRf\\ZbKUnKkgcHGbWFlacj.mkv" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\videos\\vzk6k51pqw9jyirf\\zbkunkkgchgbwflacj.mkv")) returned 1 [0089.756] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\vzk6K51PQW9jyiRf\\ZnIuVbheGUKnztXYh7.avi", nBufferLength=0x105, lpBuffer=0x31e194, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\vzk6K51PQW9jyiRf\\ZnIuVbheGUKnztXYh7.avi", lpFilePart=0x0) returned 0x4c [0089.756] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e688) returned 1 [0089.756] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\vzk6K51PQW9jyiRf\\ZnIuVbheGUKnztXYh7.avi" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\videos\\vzk6k51pqw9jyirf\\zniuvbheguknztxyh7.avi"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x178 [0089.756] GetFileType (hFile=0x178) returned 0x1 [0089.756] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e684) returned 1 [0089.756] GetFileType (hFile=0x178) returned 0x1 [0089.756] GetFileSize (in: hFile=0x178, lpFileSizeHigh=0x31e790 | out: lpFileSizeHigh=0x31e790*=0x0) returned 0x9a9a [0089.756] ReadFile (in: hFile=0x178, lpBuffer=0x265e2f4, nNumberOfBytesToRead=0x9a9a, lpNumberOfBytesRead=0x31e73c, lpOverlapped=0x0 | out: lpBuffer=0x265e2f4*, lpNumberOfBytesRead=0x31e73c*=0x9a9a, lpOverlapped=0x0) returned 1 [0089.757] CloseHandle (hObject=0x178) returned 1 [0089.795] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\vzk6K51PQW9jyiRf\\ZnIuVbheGUKnztXYh7.avi", nBufferLength=0x105, lpBuffer=0x31e180, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\vzk6K51PQW9jyiRf\\ZnIuVbheGUKnztXYh7.avi", lpFilePart=0x0) returned 0x4c [0089.795] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e674) returned 1 [0089.795] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\vzk6K51PQW9jyiRf\\ZnIuVbheGUKnztXYh7.avi" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\videos\\vzk6k51pqw9jyirf\\zniuvbheguknztxyh7.avi"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x178 [0089.796] GetFileType (hFile=0x178) returned 0x1 [0089.796] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e670) returned 1 [0089.796] GetFileType (hFile=0x178) returned 0x1 [0089.796] WriteFile (in: hFile=0x178, lpBuffer=0x26db758*, nNumberOfBytesToWrite=0x9aa0, lpNumberOfBytesWritten=0x31e730, lpOverlapped=0x0 | out: lpBuffer=0x26db758*, lpNumberOfBytesWritten=0x31e730*=0x9aa0, lpOverlapped=0x0) returned 1 [0089.797] CloseHandle (hObject=0x178) returned 1 [0089.797] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\vzk6K51PQW9jyiRf\\ZnIuVbheGUKnztXYh7.avi", nBufferLength=0x105, lpBuffer=0x31e2b4, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\vzk6K51PQW9jyiRf\\ZnIuVbheGUKnztXYh7.avi", lpFilePart=0x0) returned 0x4c [0089.797] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\vzk6K51PQW9jyiRf\\ZnIuVbheGUKnztXYh7.avi", nBufferLength=0x105, lpBuffer=0x31e2b4, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\vzk6K51PQW9jyiRf\\ZnIuVbheGUKnztXYh7.avi", lpFilePart=0x0) returned 0x4c [0089.797] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e714) returned 1 [0089.797] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\vzk6K51PQW9jyiRf\\ZnIuVbheGUKnztXYh7.avi" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\videos\\vzk6k51pqw9jyirf\\zniuvbheguknztxyh7.avi"), fInfoLevelId=0x0, lpFileInformation=0x31e790 | out: lpFileInformation=0x31e790*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2350ca70, ftCreationTime.dwHighDateTime=0x1d5e40e, ftLastAccessTime.dwLowDateTime=0xeeaeccb0, ftLastAccessTime.dwHighDateTime=0x1d5dab0, ftLastWriteTime.dwLowDateTime=0x18f80e20, ftLastWriteTime.dwHighDateTime=0x1d6eb7f, nFileSizeHigh=0x0, nFileSizeLow=0x9aa0)) returned 1 [0089.797] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e710) returned 1 [0089.797] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\vzk6K51PQW9jyiRf\\ZnIuVbheGUKnztXYh7.avi" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\videos\\vzk6k51pqw9jyirf\\zniuvbheguknztxyh7.avi"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\vzk6K51PQW9jyiRf\\ZnIuVbheGUKnztXYh7.avi" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\videos\\vzk6k51pqw9jyirf\\zniuvbheguknztxyh7.avi")) returned 1 [0089.797] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e8ac) returned 1 [0089.797] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users", nBufferLength=0x105, lpBuffer=0x31e3b4, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users", lpFilePart=0x0) returned 0x12 [0089.798] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\", nBufferLength=0x105, lpBuffer=0x31e388, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\", lpFilePart=0x0) returned 0x13 [0089.798] FindFirstFileW (in: lpFileName="C:\\Users\\All Users\\*", lpFindFileData=0x31e5d4 | out: lpFindFileData=0x31e5d4*(dwFileAttributes=0x2012, ftCreationTime.dwLowDateTime=0xfd943744, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x803771e0, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x803771e0, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x381dc0 [0089.798] FindNextFileW (in: hFindFile=0x381dc0, lpFindFileData=0x31e5e4 | out: lpFindFileData=0x31e5e4*(dwFileAttributes=0x2012, ftCreationTime.dwLowDateTime=0xfd943744, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x803771e0, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x803771e0, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0089.798] FindNextFileW (in: hFindFile=0x381dc0, lpFindFileData=0x31e5e4 | out: lpFindFileData=0x31e5e4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x8000ce40, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0xe4efbbe0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0xe4efbbe0, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Adobe", cAlternateFileName="")) returned 1 [0089.798] FindNextFileW (in: hFindFile=0x381dc0, lpFindFileData=0x31e5e4 | out: lpFindFileData=0x31e5e4*(dwFileAttributes=0x2416, ftCreationTime.dwLowDateTime=0x3074f252, ftCreationTime.dwHighDateTime=0x1ca0441, ftLastAccessTime.dwLowDateTime=0x3074f252, ftLastAccessTime.dwHighDateTime=0x1ca0441, ftLastWriteTime.dwLowDateTime=0x3074f252, ftLastWriteTime.dwHighDateTime=0x1ca0441, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Application Data", cAlternateFileName="APPLIC~1")) returned 1 [0089.798] FindNextFileW (in: hFindFile=0x381dc0, lpFindFileData=0x31e5e4 | out: lpFindFileData=0x31e5e4*(dwFileAttributes=0x2416, ftCreationTime.dwLowDateTime=0x307290f2, ftCreationTime.dwHighDateTime=0x1ca0441, ftLastAccessTime.dwLowDateTime=0x307290f2, ftLastAccessTime.dwHighDateTime=0x1ca0441, ftLastWriteTime.dwLowDateTime=0x307290f2, ftLastWriteTime.dwHighDateTime=0x1ca0441, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Desktop", cAlternateFileName="")) returned 1 [0089.798] FindNextFileW (in: hFindFile=0x381dc0, lpFindFileData=0x31e5e4 | out: lpFindFileData=0x31e5e4*(dwFileAttributes=0x2416, ftCreationTime.dwLowDateTime=0x3074f252, ftCreationTime.dwHighDateTime=0x1ca0441, ftLastAccessTime.dwLowDateTime=0x3074f252, ftLastAccessTime.dwHighDateTime=0x1ca0441, ftLastWriteTime.dwLowDateTime=0x3074f252, ftLastWriteTime.dwHighDateTime=0x1ca0441, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Documents", cAlternateFileName="DOCUME~1")) returned 1 [0089.798] FindNextFileW (in: hFindFile=0x381dc0, lpFindFileData=0x31e5e4 | out: lpFindFileData=0x31e5e4*(dwFileAttributes=0x2416, ftCreationTime.dwLowDateTime=0x3074f252, ftCreationTime.dwHighDateTime=0x1ca0441, ftLastAccessTime.dwLowDateTime=0x3074f252, ftLastAccessTime.dwHighDateTime=0x1ca0441, ftLastWriteTime.dwLowDateTime=0x3074f252, ftLastWriteTime.dwHighDateTime=0x1ca0441, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Favorites", cAlternateFileName="FAVORI~1")) returned 1 [0089.799] FindNextFileW (in: hFindFile=0x381dc0, lpFindFileData=0x31e5e4 | out: lpFindFileData=0x31e5e4*(dwFileAttributes=0x2014, ftCreationTime.dwLowDateTime=0xfd943744, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x80ac5760, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0x80ac5760, ftLastWriteTime.dwHighDateTime=0x1d305eb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Microsoft", cAlternateFileName="MICROS~1")) returned 1 [0089.799] FindNextFileW (in: hFindFile=0x381dc0, lpFindFileData=0x31e5e4 | out: lpFindFileData=0x31e5e4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe79db030, ftCreationTime.dwHighDateTime=0x1d2dda1, ftLastAccessTime.dwLowDateTime=0xed25d0a0, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0xed25d0a0, ftLastWriteTime.dwHighDateTime=0x1d305f1, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Microsoft Help", cAlternateFileName="MICROS~2")) returned 1 [0089.799] FindNextFileW (in: hFindFile=0x381dc0, lpFindFileData=0x31e5e4 | out: lpFindFileData=0x31e5e4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xaf8556a0, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xaf8556a0, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0xaf8556a0, ftLastWriteTime.dwHighDateTime=0x1d2dda4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Mozilla", cAlternateFileName="")) returned 1 [0089.799] FindNextFileW (in: hFindFile=0x381dc0, lpFindFileData=0x31e5e4 | out: lpFindFileData=0x31e5e4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x7e3c6d00, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x7e3c6d00, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x7eea3160, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Oracle", cAlternateFileName="")) returned 1 [0089.799] FindNextFileW (in: hFindFile=0x381dc0, lpFindFileData=0x31e5e4 | out: lpFindFileData=0x31e5e4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xecce51e0, ftCreationTime.dwHighDateTime=0x1d2e620, ftLastAccessTime.dwLowDateTime=0x4819be0, ftLastAccessTime.dwHighDateTime=0x1d2fc28, ftLastWriteTime.dwLowDateTime=0x4819be0, ftLastWriteTime.dwHighDateTime=0x1d2fc28, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Package Cache", cAlternateFileName="PACKAG~1")) returned 1 [0089.799] FindNextFileW (in: hFindFile=0x381dc0, lpFindFileData=0x31e5e4 | out: lpFindFileData=0x31e5e4*(dwFileAttributes=0x2416, ftCreationTime.dwLowDateTime=0x307753b3, ftCreationTime.dwHighDateTime=0x1ca0441, ftLastAccessTime.dwLowDateTime=0x307753b3, ftLastAccessTime.dwHighDateTime=0x1ca0441, ftLastWriteTime.dwLowDateTime=0x307753b3, ftLastWriteTime.dwHighDateTime=0x1ca0441, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Start Menu", cAlternateFileName="STARTM~1")) returned 1 [0089.799] FindNextFileW (in: hFindFile=0x381dc0, lpFindFileData=0x31e5e4 | out: lpFindFileData=0x31e5e4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x803771e0, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x803771e0, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x803771e0, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Sun", cAlternateFileName="")) returned 1 [0089.800] FindNextFileW (in: hFindFile=0x381dc0, lpFindFileData=0x31e5e4 | out: lpFindFileData=0x31e5e4*(dwFileAttributes=0x2416, ftCreationTime.dwLowDateTime=0x307753b3, ftCreationTime.dwHighDateTime=0x1ca0441, ftLastAccessTime.dwLowDateTime=0x307753b3, ftLastAccessTime.dwHighDateTime=0x1ca0441, ftLastWriteTime.dwLowDateTime=0x307753b3, ftLastWriteTime.dwHighDateTime=0x1ca0441, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Templates", cAlternateFileName="TEMPLA~1")) returned 1 [0089.800] FindNextFileW (in: hFindFile=0x381dc0, lpFindFileData=0x31e5e4 | out: lpFindFileData=0x31e5e4*(dwFileAttributes=0x2416, ftCreationTime.dwLowDateTime=0x307753b3, ftCreationTime.dwHighDateTime=0x1ca0441, ftLastAccessTime.dwLowDateTime=0x307753b3, ftLastAccessTime.dwHighDateTime=0x1ca0441, ftLastWriteTime.dwLowDateTime=0x307753b3, ftLastWriteTime.dwHighDateTime=0x1ca0441, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Templates", cAlternateFileName="TEMPLA~1")) returned 0 [0089.800] FindClose (in: hFindFile=0x381dc0 | out: hFindFile=0x381dc0) returned 1 [0089.800] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e86c) returned 1 [0089.800] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e878) returned 1 [0089.800] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e8ac) returned 1 [0089.800] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users", nBufferLength=0x105, lpBuffer=0x31e3b4, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users", lpFilePart=0x0) returned 0x12 [0089.800] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\", nBufferLength=0x105, lpBuffer=0x31e388, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\", lpFilePart=0x0) returned 0x13 [0089.800] FindFirstFileW (in: lpFileName="C:\\Users\\All Users\\*", lpFindFileData=0x31e5d4 | out: lpFindFileData=0x31e5d4*(dwFileAttributes=0x2012, ftCreationTime.dwLowDateTime=0xfd943744, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x803771e0, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x803771e0, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x381dc0 [0089.800] FindNextFileW (in: hFindFile=0x381dc0, lpFindFileData=0x31e5e4 | out: lpFindFileData=0x31e5e4*(dwFileAttributes=0x2012, ftCreationTime.dwLowDateTime=0xfd943744, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x803771e0, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x803771e0, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0089.800] FindNextFileW (in: hFindFile=0x381dc0, lpFindFileData=0x31e5e4 | out: lpFindFileData=0x31e5e4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x8000ce40, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0xe4efbbe0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0xe4efbbe0, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Adobe", cAlternateFileName="")) returned 1 [0089.800] FindNextFileW (in: hFindFile=0x381dc0, lpFindFileData=0x31e5e4 | out: lpFindFileData=0x31e5e4*(dwFileAttributes=0x2416, ftCreationTime.dwLowDateTime=0x3074f252, ftCreationTime.dwHighDateTime=0x1ca0441, ftLastAccessTime.dwLowDateTime=0x3074f252, ftLastAccessTime.dwHighDateTime=0x1ca0441, ftLastWriteTime.dwLowDateTime=0x3074f252, ftLastWriteTime.dwHighDateTime=0x1ca0441, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Application Data", cAlternateFileName="APPLIC~1")) returned 1 [0089.801] FindNextFileW (in: hFindFile=0x381dc0, lpFindFileData=0x31e5e4 | out: lpFindFileData=0x31e5e4*(dwFileAttributes=0x2416, ftCreationTime.dwLowDateTime=0x307290f2, ftCreationTime.dwHighDateTime=0x1ca0441, ftLastAccessTime.dwLowDateTime=0x307290f2, ftLastAccessTime.dwHighDateTime=0x1ca0441, ftLastWriteTime.dwLowDateTime=0x307290f2, ftLastWriteTime.dwHighDateTime=0x1ca0441, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Desktop", cAlternateFileName="")) returned 1 [0089.801] FindNextFileW (in: hFindFile=0x381dc0, lpFindFileData=0x31e5e4 | out: lpFindFileData=0x31e5e4*(dwFileAttributes=0x2416, ftCreationTime.dwLowDateTime=0x3074f252, ftCreationTime.dwHighDateTime=0x1ca0441, ftLastAccessTime.dwLowDateTime=0x3074f252, ftLastAccessTime.dwHighDateTime=0x1ca0441, ftLastWriteTime.dwLowDateTime=0x3074f252, ftLastWriteTime.dwHighDateTime=0x1ca0441, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Documents", cAlternateFileName="DOCUME~1")) returned 1 [0089.801] FindNextFileW (in: hFindFile=0x381dc0, lpFindFileData=0x31e5e4 | out: lpFindFileData=0x31e5e4*(dwFileAttributes=0x2416, ftCreationTime.dwLowDateTime=0x3074f252, ftCreationTime.dwHighDateTime=0x1ca0441, ftLastAccessTime.dwLowDateTime=0x3074f252, ftLastAccessTime.dwHighDateTime=0x1ca0441, ftLastWriteTime.dwLowDateTime=0x3074f252, ftLastWriteTime.dwHighDateTime=0x1ca0441, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Favorites", cAlternateFileName="FAVORI~1")) returned 1 [0089.801] FindNextFileW (in: hFindFile=0x381dc0, lpFindFileData=0x31e5e4 | out: lpFindFileData=0x31e5e4*(dwFileAttributes=0x2014, ftCreationTime.dwLowDateTime=0xfd943744, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x80ac5760, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0x80ac5760, ftLastWriteTime.dwHighDateTime=0x1d305eb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft", cAlternateFileName="MICROS~1")) returned 1 [0089.801] FindNextFileW (in: hFindFile=0x381dc0, lpFindFileData=0x31e5e4 | out: lpFindFileData=0x31e5e4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe79db030, ftCreationTime.dwHighDateTime=0x1d2dda1, ftLastAccessTime.dwLowDateTime=0xed25d0a0, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0xed25d0a0, ftLastWriteTime.dwHighDateTime=0x1d305f1, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft Help", cAlternateFileName="MICROS~2")) returned 1 [0089.801] FindNextFileW (in: hFindFile=0x381dc0, lpFindFileData=0x31e5e4 | out: lpFindFileData=0x31e5e4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xaf8556a0, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xaf8556a0, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0xaf8556a0, ftLastWriteTime.dwHighDateTime=0x1d2dda4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Mozilla", cAlternateFileName="")) returned 1 [0089.801] FindNextFileW (in: hFindFile=0x381dc0, lpFindFileData=0x31e5e4 | out: lpFindFileData=0x31e5e4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x7e3c6d00, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x7e3c6d00, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x7eea3160, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Oracle", cAlternateFileName="")) returned 1 [0089.801] FindNextFileW (in: hFindFile=0x381dc0, lpFindFileData=0x31e5e4 | out: lpFindFileData=0x31e5e4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xecce51e0, ftCreationTime.dwHighDateTime=0x1d2e620, ftLastAccessTime.dwLowDateTime=0x4819be0, ftLastAccessTime.dwHighDateTime=0x1d2fc28, ftLastWriteTime.dwLowDateTime=0x4819be0, ftLastWriteTime.dwHighDateTime=0x1d2fc28, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Package Cache", cAlternateFileName="PACKAG~1")) returned 1 [0089.801] FindNextFileW (in: hFindFile=0x381dc0, lpFindFileData=0x31e5e4 | out: lpFindFileData=0x31e5e4*(dwFileAttributes=0x2416, ftCreationTime.dwLowDateTime=0x307753b3, ftCreationTime.dwHighDateTime=0x1ca0441, ftLastAccessTime.dwLowDateTime=0x307753b3, ftLastAccessTime.dwHighDateTime=0x1ca0441, ftLastWriteTime.dwLowDateTime=0x307753b3, ftLastWriteTime.dwHighDateTime=0x1ca0441, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Start Menu", cAlternateFileName="STARTM~1")) returned 1 [0089.802] FindNextFileW (in: hFindFile=0x381dc0, lpFindFileData=0x31e5e4 | out: lpFindFileData=0x31e5e4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x803771e0, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x803771e0, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x803771e0, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Sun", cAlternateFileName="")) returned 1 [0089.802] FindNextFileW (in: hFindFile=0x381dc0, lpFindFileData=0x31e5e4 | out: lpFindFileData=0x31e5e4*(dwFileAttributes=0x2416, ftCreationTime.dwLowDateTime=0x307753b3, ftCreationTime.dwHighDateTime=0x1ca0441, ftLastAccessTime.dwLowDateTime=0x307753b3, ftLastAccessTime.dwHighDateTime=0x1ca0441, ftLastWriteTime.dwLowDateTime=0x307753b3, ftLastWriteTime.dwHighDateTime=0x1ca0441, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Templates", cAlternateFileName="TEMPLA~1")) returned 1 [0089.802] FindNextFileW (in: hFindFile=0x381dc0, lpFindFileData=0x31e5e4 | out: lpFindFileData=0x31e5e4*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0089.802] FindClose (in: hFindFile=0x381dc0 | out: hFindFile=0x381dc0) returned 1 [0089.802] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e86c) returned 1 [0089.802] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e878) returned 1 [0089.802] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e834) returned 1 [0089.802] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Adobe", nBufferLength=0x105, lpBuffer=0x31e33c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Adobe", lpFilePart=0x0) returned 0x18 [0089.802] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Adobe\\", nBufferLength=0x105, lpBuffer=0x31e310, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Adobe\\", lpFilePart=0x0) returned 0x19 [0089.802] FindFirstFileW (in: lpFileName="C:\\Users\\All Users\\Adobe\\*", lpFindFileData=0x31e55c | out: lpFindFileData=0x31e55c*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x8000ce40, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0xe4efbbe0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0xe4efbbe0, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x381dc0 [0089.802] FindNextFileW (in: hFindFile=0x381dc0, lpFindFileData=0x31e56c | out: lpFindFileData=0x31e56c*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x8000ce40, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0xe4efbbe0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0xe4efbbe0, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0089.802] FindNextFileW (in: hFindFile=0x381dc0, lpFindFileData=0x31e56c | out: lpFindFileData=0x31e56c*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x8000ce40, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x8000ce40, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x8000ce40, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Acrobat", cAlternateFileName="")) returned 1 [0089.803] FindNextFileW (in: hFindFile=0x381dc0, lpFindFileData=0x31e56c | out: lpFindFileData=0x31e56c*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe4efbbe0, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0xe4efbbe0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0xe4efbbe0, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="ARM", cAlternateFileName="")) returned 1 [0089.803] FindNextFileW (in: hFindFile=0x381dc0, lpFindFileData=0x31e56c | out: lpFindFileData=0x31e56c*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe4efbbe0, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0xe4efbbe0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0xe4efbbe0, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="ARM", cAlternateFileName="")) returned 0 [0089.803] FindClose (in: hFindFile=0x381dc0 | out: hFindFile=0x381dc0) returned 1 [0089.803] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e7f4) returned 1 [0089.803] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e800) returned 1 [0089.803] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e834) returned 1 [0089.803] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Adobe", nBufferLength=0x105, lpBuffer=0x31e33c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Adobe", lpFilePart=0x0) returned 0x18 [0089.803] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Adobe\\", nBufferLength=0x105, lpBuffer=0x31e310, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Adobe\\", lpFilePart=0x0) returned 0x19 [0089.803] FindFirstFileW (in: lpFileName="C:\\Users\\All Users\\Adobe\\*", lpFindFileData=0x31e55c | out: lpFindFileData=0x31e55c*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x8000ce40, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0xe4efbbe0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0xe4efbbe0, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x381dc0 [0089.803] FindNextFileW (in: hFindFile=0x381dc0, lpFindFileData=0x31e56c | out: lpFindFileData=0x31e56c*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x8000ce40, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0xe4efbbe0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0xe4efbbe0, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0089.803] FindNextFileW (in: hFindFile=0x381dc0, lpFindFileData=0x31e56c | out: lpFindFileData=0x31e56c*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x8000ce40, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x8000ce40, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x8000ce40, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Acrobat", cAlternateFileName="")) returned 1 [0089.804] FindNextFileW (in: hFindFile=0x381dc0, lpFindFileData=0x31e56c | out: lpFindFileData=0x31e56c*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe4efbbe0, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0xe4efbbe0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0xe4efbbe0, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="ARM", cAlternateFileName="")) returned 1 [0089.804] FindNextFileW (in: hFindFile=0x381dc0, lpFindFileData=0x31e56c | out: lpFindFileData=0x31e56c*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0089.804] FindClose (in: hFindFile=0x381dc0 | out: hFindFile=0x381dc0) returned 1 [0089.804] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e7f4) returned 1 [0089.804] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e800) returned 1 [0089.804] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e7bc) returned 1 [0089.804] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Adobe\\Acrobat", nBufferLength=0x105, lpBuffer=0x31e2c4, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Adobe\\Acrobat", lpFilePart=0x0) returned 0x20 [0089.804] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Adobe\\Acrobat\\", nBufferLength=0x105, lpBuffer=0x31e298, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Adobe\\Acrobat\\", lpFilePart=0x0) returned 0x21 [0089.804] FindFirstFileW (in: lpFileName="C:\\Users\\All Users\\Adobe\\Acrobat\\*", lpFindFileData=0x31e4e4 | out: lpFindFileData=0x31e4e4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x8000ce40, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x8000ce40, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x8000ce40, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x381dc0 [0089.804] FindNextFileW (in: hFindFile=0x381dc0, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x8000ce40, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x8000ce40, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x8000ce40, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0089.804] FindNextFileW (in: hFindFile=0x381dc0, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x8000ce40, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x8000ce40, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x8000ce40, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="10.0", cAlternateFileName="")) returned 1 [0089.805] FindNextFileW (in: hFindFile=0x381dc0, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x8000ce40, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x8000ce40, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x8000ce40, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="10.0", cAlternateFileName="")) returned 0 [0089.805] FindClose (in: hFindFile=0x381dc0 | out: hFindFile=0x381dc0) returned 1 [0089.805] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e77c) returned 1 [0089.805] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e788) returned 1 [0089.805] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e7bc) returned 1 [0089.805] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Adobe\\Acrobat", nBufferLength=0x105, lpBuffer=0x31e2c4, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Adobe\\Acrobat", lpFilePart=0x0) returned 0x20 [0089.805] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Adobe\\Acrobat\\", nBufferLength=0x105, lpBuffer=0x31e298, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Adobe\\Acrobat\\", lpFilePart=0x0) returned 0x21 [0089.805] FindFirstFileW (in: lpFileName="C:\\Users\\All Users\\Adobe\\Acrobat\\*", lpFindFileData=0x31e4e4 | out: lpFindFileData=0x31e4e4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x8000ce40, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x8000ce40, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x8000ce40, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x381dc0 [0089.805] FindNextFileW (in: hFindFile=0x381dc0, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x8000ce40, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x8000ce40, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x8000ce40, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0089.805] FindNextFileW (in: hFindFile=0x381dc0, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x8000ce40, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x8000ce40, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x8000ce40, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="10.0", cAlternateFileName="")) returned 1 [0089.805] FindNextFileW (in: hFindFile=0x381dc0, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0089.805] FindClose (in: hFindFile=0x381dc0 | out: hFindFile=0x381dc0) returned 1 [0089.806] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e77c) returned 1 [0089.806] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e788) returned 1 [0089.806] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e744) returned 1 [0089.806] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Adobe\\Acrobat\\10.0", nBufferLength=0x105, lpBuffer=0x31e24c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Adobe\\Acrobat\\10.0", lpFilePart=0x0) returned 0x25 [0089.806] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Adobe\\Acrobat\\10.0\\", nBufferLength=0x105, lpBuffer=0x31e220, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Adobe\\Acrobat\\10.0\\", lpFilePart=0x0) returned 0x26 [0089.806] FindFirstFileW (in: lpFileName="C:\\Users\\All Users\\Adobe\\Acrobat\\10.0\\*", lpFindFileData=0x31e46c | out: lpFindFileData=0x31e46c*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x8000ce40, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x8000ce40, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x8000ce40, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x381dc0 [0089.806] FindNextFileW (in: hFindFile=0x381dc0, lpFindFileData=0x31e47c | out: lpFindFileData=0x31e47c*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x8000ce40, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x8000ce40, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x8000ce40, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0089.806] FindNextFileW (in: hFindFile=0x381dc0, lpFindFileData=0x31e47c | out: lpFindFileData=0x31e47c*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x8000ce40, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x8000ce40, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x8000ce40, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Replicate", cAlternateFileName="REPLIC~1")) returned 1 [0089.806] FindNextFileW (in: hFindFile=0x381dc0, lpFindFileData=0x31e47c | out: lpFindFileData=0x31e47c*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x8000ce40, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x8000ce40, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x8000ce40, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Replicate", cAlternateFileName="REPLIC~1")) returned 0 [0089.806] FindClose (in: hFindFile=0x381dc0 | out: hFindFile=0x381dc0) returned 1 [0089.806] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e704) returned 1 [0089.807] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e710) returned 1 [0089.807] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e744) returned 1 [0089.807] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Adobe\\Acrobat\\10.0", nBufferLength=0x105, lpBuffer=0x31e24c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Adobe\\Acrobat\\10.0", lpFilePart=0x0) returned 0x25 [0089.807] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Adobe\\Acrobat\\10.0\\", nBufferLength=0x105, lpBuffer=0x31e220, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Adobe\\Acrobat\\10.0\\", lpFilePart=0x0) returned 0x26 [0089.807] FindFirstFileW (in: lpFileName="C:\\Users\\All Users\\Adobe\\Acrobat\\10.0\\*", lpFindFileData=0x31e46c | out: lpFindFileData=0x31e46c*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x8000ce40, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x8000ce40, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x8000ce40, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x381dc0 [0089.807] FindNextFileW (in: hFindFile=0x381dc0, lpFindFileData=0x31e47c | out: lpFindFileData=0x31e47c*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x8000ce40, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x8000ce40, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x8000ce40, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0089.807] FindNextFileW (in: hFindFile=0x381dc0, lpFindFileData=0x31e47c | out: lpFindFileData=0x31e47c*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x8000ce40, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x8000ce40, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x8000ce40, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Replicate", cAlternateFileName="REPLIC~1")) returned 1 [0089.807] FindNextFileW (in: hFindFile=0x381dc0, lpFindFileData=0x31e47c | out: lpFindFileData=0x31e47c*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0089.807] FindClose (in: hFindFile=0x381dc0 | out: hFindFile=0x381dc0) returned 1 [0089.807] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e704) returned 1 [0089.807] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e710) returned 1 [0089.807] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e6cc) returned 1 [0089.807] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Adobe\\Acrobat\\10.0\\Replicate", nBufferLength=0x105, lpBuffer=0x31e1d4, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Adobe\\Acrobat\\10.0\\Replicate", lpFilePart=0x0) returned 0x2f [0089.807] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Adobe\\Acrobat\\10.0\\Replicate\\", nBufferLength=0x105, lpBuffer=0x31e1a8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Adobe\\Acrobat\\10.0\\Replicate\\", lpFilePart=0x0) returned 0x30 [0089.808] FindFirstFileW (in: lpFileName="C:\\Users\\All Users\\Adobe\\Acrobat\\10.0\\Replicate\\*", lpFindFileData=0x31e3f4 | out: lpFindFileData=0x31e3f4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x8000ce40, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x8000ce40, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x8000ce40, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x381dc0 [0089.808] FindNextFileW (in: hFindFile=0x381dc0, lpFindFileData=0x31e404 | out: lpFindFileData=0x31e404*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x8000ce40, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x8000ce40, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x8000ce40, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0089.808] FindNextFileW (in: hFindFile=0x381dc0, lpFindFileData=0x31e404 | out: lpFindFileData=0x31e404*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x8000ce40, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x8000ce40, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x8000ce40, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Security", cAlternateFileName="")) returned 1 [0089.808] FindNextFileW (in: hFindFile=0x381dc0, lpFindFileData=0x31e404 | out: lpFindFileData=0x31e404*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x8000ce40, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x8000ce40, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x8000ce40, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Security", cAlternateFileName="")) returned 0 [0089.808] FindClose (in: hFindFile=0x381dc0 | out: hFindFile=0x381dc0) returned 1 [0089.808] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e68c) returned 1 [0089.808] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e698) returned 1 [0089.808] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e6cc) returned 1 [0089.808] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Adobe\\Acrobat\\10.0\\Replicate", nBufferLength=0x105, lpBuffer=0x31e1d4, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Adobe\\Acrobat\\10.0\\Replicate", lpFilePart=0x0) returned 0x2f [0089.808] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Adobe\\Acrobat\\10.0\\Replicate\\", nBufferLength=0x105, lpBuffer=0x31e1a8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Adobe\\Acrobat\\10.0\\Replicate\\", lpFilePart=0x0) returned 0x30 [0089.808] FindFirstFileW (in: lpFileName="C:\\Users\\All Users\\Adobe\\Acrobat\\10.0\\Replicate\\*", lpFindFileData=0x31e3f4 | out: lpFindFileData=0x31e3f4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x8000ce40, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x8000ce40, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x8000ce40, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x381dc0 [0089.809] FindNextFileW (in: hFindFile=0x381dc0, lpFindFileData=0x31e404 | out: lpFindFileData=0x31e404*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x8000ce40, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x8000ce40, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x8000ce40, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0089.809] FindNextFileW (in: hFindFile=0x381dc0, lpFindFileData=0x31e404 | out: lpFindFileData=0x31e404*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x8000ce40, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x8000ce40, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x8000ce40, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Security", cAlternateFileName="")) returned 1 [0089.809] FindNextFileW (in: hFindFile=0x381dc0, lpFindFileData=0x31e404 | out: lpFindFileData=0x31e404*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0089.809] FindClose (in: hFindFile=0x381dc0 | out: hFindFile=0x381dc0) returned 1 [0089.809] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e68c) returned 1 [0089.809] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e698) returned 1 [0089.809] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e654) returned 1 [0089.809] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Adobe\\Acrobat\\10.0\\Replicate\\Security", nBufferLength=0x105, lpBuffer=0x31e15c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Adobe\\Acrobat\\10.0\\Replicate\\Security", lpFilePart=0x0) returned 0x38 [0089.809] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Adobe\\Acrobat\\10.0\\Replicate\\Security\\", nBufferLength=0x105, lpBuffer=0x31e130, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Adobe\\Acrobat\\10.0\\Replicate\\Security\\", lpFilePart=0x0) returned 0x39 [0089.809] FindFirstFileW (in: lpFileName="C:\\Users\\All Users\\Adobe\\Acrobat\\10.0\\Replicate\\Security\\*", lpFindFileData=0x31e37c | out: lpFindFileData=0x31e37c*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x8000ce40, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x8000ce40, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x8000ce40, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x381dc0 [0089.810] FindNextFileW (in: hFindFile=0x381dc0, lpFindFileData=0x31e38c | out: lpFindFileData=0x31e38c*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x8000ce40, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x8000ce40, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x8000ce40, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0089.810] FindNextFileW (in: hFindFile=0x381dc0, lpFindFileData=0x31e38c | out: lpFindFileData=0x31e38c*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x93de7300, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x8000ce40, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x93de7300, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x1df, dwReserved0=0x0, dwReserved1=0x0, cFileName="directories.acrodata", cAlternateFileName="DIRECT~1.ACR")) returned 1 [0089.810] FindNextFileW (in: hFindFile=0x381dc0, lpFindFileData=0x31e38c | out: lpFindFileData=0x31e38c*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0089.810] FindClose (in: hFindFile=0x381dc0 | out: hFindFile=0x381dc0) returned 1 [0089.810] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e614) returned 1 [0089.810] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e620) returned 1 [0089.810] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e654) returned 1 [0089.810] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Adobe\\Acrobat\\10.0\\Replicate\\Security", nBufferLength=0x105, lpBuffer=0x31e15c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Adobe\\Acrobat\\10.0\\Replicate\\Security", lpFilePart=0x0) returned 0x38 [0089.810] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Adobe\\Acrobat\\10.0\\Replicate\\Security\\", nBufferLength=0x105, lpBuffer=0x31e130, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Adobe\\Acrobat\\10.0\\Replicate\\Security\\", lpFilePart=0x0) returned 0x39 [0089.810] FindFirstFileW (in: lpFileName="C:\\Users\\All Users\\Adobe\\Acrobat\\10.0\\Replicate\\Security\\*", lpFindFileData=0x31e37c | out: lpFindFileData=0x31e37c*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x8000ce40, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x8000ce40, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x8000ce40, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x381dc0 [0089.810] FindNextFileW (in: hFindFile=0x381dc0, lpFindFileData=0x31e38c | out: lpFindFileData=0x31e38c*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x8000ce40, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x8000ce40, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x8000ce40, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0089.811] FindNextFileW (in: hFindFile=0x381dc0, lpFindFileData=0x31e38c | out: lpFindFileData=0x31e38c*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x93de7300, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x8000ce40, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x93de7300, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x1df, dwReserved0=0x0, dwReserved1=0x0, cFileName="directories.acrodata", cAlternateFileName="DIRECT~1.ACR")) returned 1 [0089.811] FindNextFileW (in: hFindFile=0x381dc0, lpFindFileData=0x31e38c | out: lpFindFileData=0x31e38c*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x93de7300, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x8000ce40, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x93de7300, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x1df, dwReserved0=0x0, dwReserved1=0x0, cFileName="directories.acrodata", cAlternateFileName="DIRECT~1.ACR")) returned 0 [0089.811] FindClose (in: hFindFile=0x381dc0 | out: hFindFile=0x381dc0) returned 1 [0089.811] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e614) returned 1 [0089.811] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e620) returned 1 [0089.811] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e7bc) returned 1 [0089.811] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Adobe\\ARM", nBufferLength=0x105, lpBuffer=0x31e2c4, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Adobe\\ARM", lpFilePart=0x0) returned 0x1c [0089.811] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Adobe\\ARM\\", nBufferLength=0x105, lpBuffer=0x31e298, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Adobe\\ARM\\", lpFilePart=0x0) returned 0x1d [0089.811] FindFirstFileW (in: lpFileName="C:\\Users\\All Users\\Adobe\\ARM\\*", lpFindFileData=0x31e4e4 | out: lpFindFileData=0x31e4e4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe4efbbe0, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0xe4efbbe0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0xe4efbbe0, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x381dc0 [0089.811] FindNextFileW (in: hFindFile=0x381dc0, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe4efbbe0, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0xe4efbbe0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0xe4efbbe0, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0089.811] FindNextFileW (in: hFindFile=0x381dc0, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xe4efbbe0, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0xf2028d90, ftLastAccessTime.dwHighDateTime=0x1d2ddf4, ftLastWriteTime.dwLowDateTime=0xf2028d90, ftLastWriteTime.dwHighDateTime=0x1d2ddf4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Reader_10.0.0", cAlternateFileName="READER~1.0")) returned 1 [0089.811] FindNextFileW (in: hFindFile=0x381dc0, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xe4efbbe0, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0xf2028d90, ftLastAccessTime.dwHighDateTime=0x1d2ddf4, ftLastWriteTime.dwLowDateTime=0xf2028d90, ftLastWriteTime.dwHighDateTime=0x1d2ddf4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Reader_10.0.0", cAlternateFileName="READER~1.0")) returned 0 [0089.812] FindClose (in: hFindFile=0x381dc0 | out: hFindFile=0x381dc0) returned 1 [0089.812] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e77c) returned 1 [0089.812] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e788) returned 1 [0089.812] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e7bc) returned 1 [0089.812] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Adobe\\ARM", nBufferLength=0x105, lpBuffer=0x31e2c4, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Adobe\\ARM", lpFilePart=0x0) returned 0x1c [0089.812] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Adobe\\ARM\\", nBufferLength=0x105, lpBuffer=0x31e298, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Adobe\\ARM\\", lpFilePart=0x0) returned 0x1d [0089.812] FindFirstFileW (in: lpFileName="C:\\Users\\All Users\\Adobe\\ARM\\*", lpFindFileData=0x31e4e4 | out: lpFindFileData=0x31e4e4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe4efbbe0, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0xe4efbbe0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0xe4efbbe0, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x381dc0 [0089.812] FindNextFileW (in: hFindFile=0x381dc0, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe4efbbe0, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0xe4efbbe0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0xe4efbbe0, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0089.812] FindNextFileW (in: hFindFile=0x381dc0, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xe4efbbe0, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0xf2028d90, ftLastAccessTime.dwHighDateTime=0x1d2ddf4, ftLastWriteTime.dwLowDateTime=0xf2028d90, ftLastWriteTime.dwHighDateTime=0x1d2ddf4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Reader_10.0.0", cAlternateFileName="READER~1.0")) returned 1 [0089.812] FindNextFileW (in: hFindFile=0x381dc0, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0089.812] FindClose (in: hFindFile=0x381dc0 | out: hFindFile=0x381dc0) returned 1 [0089.812] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e77c) returned 1 [0089.812] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e788) returned 1 [0089.812] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e744) returned 1 [0089.812] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Adobe\\ARM\\Reader_10.0.0", nBufferLength=0x105, lpBuffer=0x31e24c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Adobe\\ARM\\Reader_10.0.0", lpFilePart=0x0) returned 0x2a [0089.813] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Adobe\\ARM\\Reader_10.0.0\\", nBufferLength=0x105, lpBuffer=0x31e220, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Adobe\\ARM\\Reader_10.0.0\\", lpFilePart=0x0) returned 0x2b [0089.813] FindFirstFileW (in: lpFileName="C:\\Users\\All Users\\Adobe\\ARM\\Reader_10.0.0\\*", lpFindFileData=0x31e46c | out: lpFindFileData=0x31e46c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xe4efbbe0, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0xf2028d90, ftLastAccessTime.dwHighDateTime=0x1d2ddf4, ftLastWriteTime.dwLowDateTime=0xf2028d90, ftLastWriteTime.dwHighDateTime=0x1d2ddf4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x381dc0 [0089.813] FindNextFileW (in: hFindFile=0x381dc0, lpFindFileData=0x31e47c | out: lpFindFileData=0x31e47c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xe4efbbe0, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0xf2028d90, ftLastAccessTime.dwHighDateTime=0x1d2ddf4, ftLastWriteTime.dwLowDateTime=0xf2028d90, ftLastWriteTime.dwHighDateTime=0x1d2ddf4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0089.813] FindNextFileW (in: hFindFile=0x381dc0, lpFindFileData=0x31e47c | out: lpFindFileData=0x31e47c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7e186d00, ftCreationTime.dwHighDateTime=0x1cfb543, ftLastAccessTime.dwLowDateTime=0x7e186d00, ftLastAccessTime.dwHighDateTime=0x1cfb543, ftLastWriteTime.dwLowDateTime=0x7e186d00, ftLastWriteTime.dwHighDateTime=0x1cfb543, nFileSizeHigh=0x0, nFileSizeLow=0x3d800, dwReserved0=0x0, dwReserved1=0x0, cFileName="AdbeRdrSecUpd10111.msp", cAlternateFileName="ADBERD~2.MSP")) returned 1 [0089.814] FindNextFileW (in: hFindFile=0x381dc0, lpFindFileData=0x31e47c | out: lpFindFileData=0x31e47c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb4450880, ftCreationTime.dwHighDateTime=0x1cf6c45, ftLastAccessTime.dwLowDateTime=0xb4450880, ftLastAccessTime.dwHighDateTime=0x1cf6c45, ftLastWriteTime.dwLowDateTime=0xb4450880, ftLastWriteTime.dwHighDateTime=0x1cf6c45, nFileSizeHigh=0x0, nFileSizeLow=0x10e3000, dwReserved0=0x0, dwReserved1=0x0, cFileName="AdbeRdrUpd10110_MUI.msp", cAlternateFileName="ADBERD~1.MSP")) returned 1 [0089.814] FindNextFileW (in: hFindFile=0x381dc0, lpFindFileData=0x31e47c | out: lpFindFileData=0x31e47c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2540cc00, ftCreationTime.dwHighDateTime=0x1d1056e, ftLastAccessTime.dwLowDateTime=0x2540cc00, ftLastAccessTime.dwHighDateTime=0x1d1056e, ftLastWriteTime.dwLowDateTime=0x2540cc00, ftLastWriteTime.dwHighDateTime=0x1d1056e, nFileSizeHigh=0x0, nFileSizeLow=0x109d000, dwReserved0=0x0, dwReserved1=0x0, cFileName="AdbeRdrUpd10116_MUI.msp", cAlternateFileName="ADBERD~3.MSP")) returned 1 [0089.814] FindNextFileW (in: hFindFile=0x381dc0, lpFindFileData=0x31e47c | out: lpFindFileData=0x31e47c*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0089.814] FindClose (in: hFindFile=0x381dc0 | out: hFindFile=0x381dc0) returned 1 [0089.814] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e704) returned 1 [0089.815] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e710) returned 1 [0089.815] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e744) returned 1 [0089.815] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Adobe\\ARM\\Reader_10.0.0", nBufferLength=0x105, lpBuffer=0x31e24c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Adobe\\ARM\\Reader_10.0.0", lpFilePart=0x0) returned 0x2a [0089.815] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Adobe\\ARM\\Reader_10.0.0\\", nBufferLength=0x105, lpBuffer=0x31e220, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Adobe\\ARM\\Reader_10.0.0\\", lpFilePart=0x0) returned 0x2b [0089.815] FindFirstFileW (in: lpFileName="C:\\Users\\All Users\\Adobe\\ARM\\Reader_10.0.0\\*", lpFindFileData=0x31e46c | out: lpFindFileData=0x31e46c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xe4efbbe0, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0xf2028d90, ftLastAccessTime.dwHighDateTime=0x1d2ddf4, ftLastWriteTime.dwLowDateTime=0xf2028d90, ftLastWriteTime.dwHighDateTime=0x1d2ddf4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x381dc0 [0089.815] FindNextFileW (in: hFindFile=0x381dc0, lpFindFileData=0x31e47c | out: lpFindFileData=0x31e47c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xe4efbbe0, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0xf2028d90, ftLastAccessTime.dwHighDateTime=0x1d2ddf4, ftLastWriteTime.dwLowDateTime=0xf2028d90, ftLastWriteTime.dwHighDateTime=0x1d2ddf4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0089.816] FindNextFileW (in: hFindFile=0x381dc0, lpFindFileData=0x31e47c | out: lpFindFileData=0x31e47c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7e186d00, ftCreationTime.dwHighDateTime=0x1cfb543, ftLastAccessTime.dwLowDateTime=0x7e186d00, ftLastAccessTime.dwHighDateTime=0x1cfb543, ftLastWriteTime.dwLowDateTime=0x7e186d00, ftLastWriteTime.dwHighDateTime=0x1cfb543, nFileSizeHigh=0x0, nFileSizeLow=0x3d800, dwReserved0=0x0, dwReserved1=0x0, cFileName="AdbeRdrSecUpd10111.msp", cAlternateFileName="ADBERD~2.MSP")) returned 1 [0089.816] FindNextFileW (in: hFindFile=0x381dc0, lpFindFileData=0x31e47c | out: lpFindFileData=0x31e47c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb4450880, ftCreationTime.dwHighDateTime=0x1cf6c45, ftLastAccessTime.dwLowDateTime=0xb4450880, ftLastAccessTime.dwHighDateTime=0x1cf6c45, ftLastWriteTime.dwLowDateTime=0xb4450880, ftLastWriteTime.dwHighDateTime=0x1cf6c45, nFileSizeHigh=0x0, nFileSizeLow=0x10e3000, dwReserved0=0x0, dwReserved1=0x0, cFileName="AdbeRdrUpd10110_MUI.msp", cAlternateFileName="ADBERD~1.MSP")) returned 1 [0089.816] FindNextFileW (in: hFindFile=0x381dc0, lpFindFileData=0x31e47c | out: lpFindFileData=0x31e47c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2540cc00, ftCreationTime.dwHighDateTime=0x1d1056e, ftLastAccessTime.dwLowDateTime=0x2540cc00, ftLastAccessTime.dwHighDateTime=0x1d1056e, ftLastWriteTime.dwLowDateTime=0x2540cc00, ftLastWriteTime.dwHighDateTime=0x1d1056e, nFileSizeHigh=0x0, nFileSizeLow=0x109d000, dwReserved0=0x0, dwReserved1=0x0, cFileName="AdbeRdrUpd10116_MUI.msp", cAlternateFileName="ADBERD~3.MSP")) returned 1 [0089.816] FindNextFileW (in: hFindFile=0x381dc0, lpFindFileData=0x31e47c | out: lpFindFileData=0x31e47c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2540cc00, ftCreationTime.dwHighDateTime=0x1d1056e, ftLastAccessTime.dwLowDateTime=0x2540cc00, ftLastAccessTime.dwHighDateTime=0x1d1056e, ftLastWriteTime.dwLowDateTime=0x2540cc00, ftLastWriteTime.dwHighDateTime=0x1d1056e, nFileSizeHigh=0x0, nFileSizeLow=0x109d000, dwReserved0=0x0, dwReserved1=0x0, cFileName="AdbeRdrUpd10116_MUI.msp", cAlternateFileName="ADBERD~3.MSP")) returned 0 [0089.816] FindClose (in: hFindFile=0x381dc0 | out: hFindFile=0x381dc0) returned 1 [0089.817] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e704) returned 1 [0089.817] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e710) returned 1 [0089.817] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e834) returned 1 [0089.817] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Application Data", nBufferLength=0x105, lpBuffer=0x31e33c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Application Data", lpFilePart=0x0) returned 0x23 [0089.817] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Application Data\\", nBufferLength=0x105, lpBuffer=0x31e310, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Application Data\\", lpFilePart=0x0) returned 0x24 [0089.817] FindFirstFileW (in: lpFileName="C:\\Users\\All Users\\Application Data\\*", lpFindFileData=0x31e55c | out: lpFindFileData=0x31e55c*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0089.817] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e7f8) returned 1 [0089.818] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e834) returned 1 [0089.818] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Desktop", nBufferLength=0x105, lpBuffer=0x31e33c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Desktop", lpFilePart=0x0) returned 0x1a [0089.818] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Desktop\\", nBufferLength=0x105, lpBuffer=0x31e310, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Desktop\\", lpFilePart=0x0) returned 0x1b [0089.818] FindFirstFileW (in: lpFileName="C:\\Users\\All Users\\Desktop\\*", lpFindFileData=0x31e55c | out: lpFindFileData=0x31e55c*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0089.818] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e7f8) returned 1 [0089.819] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e834) returned 1 [0089.819] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Documents", nBufferLength=0x105, lpBuffer=0x31e33c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Documents", lpFilePart=0x0) returned 0x1c [0089.820] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Documents\\", nBufferLength=0x105, lpBuffer=0x31e310, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Documents\\", lpFilePart=0x0) returned 0x1d [0089.820] FindFirstFileW (in: lpFileName="C:\\Users\\All Users\\Documents\\*", lpFindFileData=0x31e55c | out: lpFindFileData=0x31e55c*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0089.820] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e7f8) returned 1 [0089.821] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e834) returned 1 [0089.821] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Favorites", nBufferLength=0x105, lpBuffer=0x31e33c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Favorites", lpFilePart=0x0) returned 0x1c [0089.821] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Favorites\\", nBufferLength=0x105, lpBuffer=0x31e310, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Favorites\\", lpFilePart=0x0) returned 0x1d [0089.821] FindFirstFileW (in: lpFileName="C:\\Users\\All Users\\Favorites\\*", lpFindFileData=0x31e55c | out: lpFindFileData=0x31e55c*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0089.821] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e7f8) returned 1 [0089.822] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e834) returned 1 [0089.822] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Microsoft", nBufferLength=0x105, lpBuffer=0x31e33c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Microsoft", lpFilePart=0x0) returned 0x1c [0089.822] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\", nBufferLength=0x105, lpBuffer=0x31e310, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Microsoft\\", lpFilePart=0x0) returned 0x1d [0089.822] FindFirstFileW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\*", lpFindFileData=0x31e55c | out: lpFindFileData=0x31e55c*(dwFileAttributes=0x2014, ftCreationTime.dwLowDateTime=0xfd943744, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x80ac5760, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0x80ac5760, ftLastWriteTime.dwHighDateTime=0x1d305eb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x381dc0 [0089.823] FindNextFileW (in: hFindFile=0x381dc0, lpFindFileData=0x31e56c | out: lpFindFileData=0x31e56c*(dwFileAttributes=0x2014, ftCreationTime.dwLowDateTime=0xfd943744, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x80ac5760, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0x80ac5760, ftLastWriteTime.dwHighDateTime=0x1d305eb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0089.823] FindNextFileW (in: hFindFile=0x381dc0, lpFindFileData=0x31e56c | out: lpFindFileData=0x31e56c*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x3fc949a4, ftCreationTime.dwHighDateTime=0x1ca0445, ftLastAccessTime.dwLowDateTime=0x3fc949a4, ftLastAccessTime.dwHighDateTime=0x1ca0445, ftLastWriteTime.dwLowDateTime=0x3fc949a4, ftLastWriteTime.dwHighDateTime=0x1ca0445, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Assistance", cAlternateFileName="ASSIST~1")) returned 1 [0089.823] FindNextFileW (in: hFindFile=0x381dc0, lpFindFileData=0x31e56c | out: lpFindFileData=0x31e56c*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xfd943744, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd96989e, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xfd96989e, ftLastWriteTime.dwHighDateTime=0x1ca0431, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Crypto", cAlternateFileName="")) returned 1 [0089.823] FindNextFileW (in: hFindFile=0x381dc0, lpFindFileData=0x31e56c | out: lpFindFileData=0x31e56c*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xfd96989e, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd96989e, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xfd96989e, ftLastWriteTime.dwHighDateTime=0x1ca0431, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Device Stage", cAlternateFileName="DEVICE~1")) returned 1 [0089.823] FindNextFileW (in: hFindFile=0x381dc0, lpFindFileData=0x31e56c | out: lpFindFileData=0x31e56c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd98f9f8, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd98f9f8, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xd789d88f, ftLastWriteTime.dwHighDateTime=0x1ca042b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="DeviceSync", cAlternateFileName="DEVICE~2")) returned 1 [0089.823] FindNextFileW (in: hFindFile=0x381dc0, lpFindFileData=0x31e56c | out: lpFindFileData=0x31e56c*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xfd98f9f8, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd98f9f8, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xfd98f9f8, ftLastWriteTime.dwHighDateTime=0x1ca0431, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="DRM", cAlternateFileName="")) returned 1 [0089.823] FindNextFileW (in: hFindFile=0x381dc0, lpFindFileData=0x31e56c | out: lpFindFileData=0x31e56c*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x9182055d, ftCreationTime.dwHighDateTime=0x1cbf8eb, ftLastAccessTime.dwLowDateTime=0xaa597fc2, ftLastAccessTime.dwHighDateTime=0x1cbf8eb, ftLastWriteTime.dwLowDateTime=0x9182055d, ftLastWriteTime.dwHighDateTime=0x1cbf8eb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="eHome", cAlternateFileName="")) returned 1 [0089.824] FindNextFileW (in: hFindFile=0x381dc0, lpFindFileData=0x31e56c | out: lpFindFileData=0x31e56c*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x3235c810, ftCreationTime.dwHighDateTime=0x1d2fa9b, ftLastAccessTime.dwLowDateTime=0x3a6c7630, ftLastAccessTime.dwHighDateTime=0x1d3aaba, ftLastWriteTime.dwLowDateTime=0x3a6c7630, ftLastWriteTime.dwHighDateTime=0x1d3aaba, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Event Viewer", cAlternateFileName="EVENTV~1")) returned 1 [0089.824] FindNextFileW (in: hFindFile=0x381dc0, lpFindFileData=0x31e56c | out: lpFindFileData=0x31e56c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd98f9f8, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd9b5b52, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xfd9b5b52, ftLastWriteTime.dwHighDateTime=0x1ca0431, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="IdentityCRL", cAlternateFileName="IDENTI~1")) returned 1 [0089.824] FindNextFileW (in: hFindFile=0x381dc0, lpFindFileData=0x31e56c | out: lpFindFileData=0x31e56c*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x3ee349fc, ftCreationTime.dwHighDateTime=0x1ca0441, ftLastAccessTime.dwLowDateTime=0x3ee349fc, ftLastAccessTime.dwHighDateTime=0x1ca0441, ftLastWriteTime.dwLowDateTime=0x3ee349fc, ftLastWriteTime.dwHighDateTime=0x1ca0441, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Media Player", cAlternateFileName="MEDIAP~1")) returned 1 [0089.824] FindNextFileW (in: hFindFile=0x381dc0, lpFindFileData=0x31e56c | out: lpFindFileData=0x31e56c*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x7fffaad0, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x80340916, ftLastAccessTime.dwHighDateTime=0x1ca0444, ftLastWriteTime.dwLowDateTime=0x80340916, ftLastWriteTime.dwHighDateTime=0x1ca0444, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="MF", cAlternateFileName="")) returned 1 [0089.824] FindNextFileW (in: hFindFile=0x381dc0, lpFindFileData=0x31e56c | out: lpFindFileData=0x31e56c*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x50ea0e30, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x50ea0e30, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x50ea0e30, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="MSDN", cAlternateFileName="")) returned 1 [0089.824] FindNextFileW (in: hFindFile=0x381dc0, lpFindFileData=0x31e56c | out: lpFindFileData=0x31e56c*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x56ac2f60, ftCreationTime.dwHighDateTime=0x1d2e676, ftLastAccessTime.dwLowDateTime=0x56ac2f60, ftLastAccessTime.dwHighDateTime=0x1d2e676, ftLastWriteTime.dwLowDateTime=0x56ac2f60, ftLastWriteTime.dwHighDateTime=0x1d2e676, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="NetFramework", cAlternateFileName="NETFRA~1")) returned 1 [0089.824] FindNextFileW (in: hFindFile=0x381dc0, lpFindFileData=0x31e56c | out: lpFindFileData=0x31e56c*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xfd9b5b52, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd9b5b52, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xfd9b5b52, ftLastWriteTime.dwHighDateTime=0x1ca0431, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Network", cAlternateFileName="")) returned 1 [0089.824] FindNextFileW (in: hFindFile=0x381dc0, lpFindFileData=0x31e56c | out: lpFindFileData=0x31e56c*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xeed38550, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0x6d3a4910, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x6d3a4910, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="OFFICE", cAlternateFileName="")) returned 1 [0089.825] FindNextFileW (in: hFindFile=0x381dc0, lpFindFileData=0x31e56c | out: lpFindFileData=0x31e56c*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x50ea0e30, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0xfa44d4a0, ftLastAccessTime.dwHighDateTime=0x1d305fd, ftLastWriteTime.dwLowDateTime=0xfa44d4a0, ftLastWriteTime.dwHighDateTime=0x1d305fd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="OfficeSoftwareProtectionPlatform", cAlternateFileName="OFFICE~1")) returned 1 [0089.825] FindNextFileW (in: hFindFile=0x381dc0, lpFindFileData=0x31e56c | out: lpFindFileData=0x31e56c*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xfd9b5b52, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd9b5b52, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xfd9b5b52, ftLastWriteTime.dwHighDateTime=0x1ca0431, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="RAC", cAlternateFileName="")) returned 1 [0089.825] FindNextFileW (in: hFindFile=0x381dc0, lpFindFileData=0x31e56c | out: lpFindFileData=0x31e56c*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x27df8b60, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x27df8b60, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x27df8b60, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Search", cAlternateFileName="")) returned 1 [0089.825] FindNextFileW (in: hFindFile=0x381dc0, lpFindFileData=0x31e56c | out: lpFindFileData=0x31e56c*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xfd9b5b52, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x29423840, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x29423840, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="User Account Pictures", cAlternateFileName="USERAC~1")) returned 1 [0089.825] FindNextFileW (in: hFindFile=0x381dc0, lpFindFileData=0x31e56c | out: lpFindFileData=0x31e56c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd9b5b52, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd9b5b52, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xc602eec6, ftLastWriteTime.dwHighDateTime=0x1ca042b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Vault", cAlternateFileName="")) returned 1 [0089.825] FindNextFileW (in: hFindFile=0x381dc0, lpFindFileData=0x31e56c | out: lpFindFileData=0x31e56c*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x80ac5760, ftCreationTime.dwHighDateTime=0x1d305eb, ftLastAccessTime.dwLowDateTime=0x80ac5760, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0x80ac5760, ftLastWriteTime.dwHighDateTime=0x1d305eb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="VISIO", cAlternateFileName="")) returned 1 [0089.826] FindNextFileW (in: hFindFile=0x381dc0, lpFindFileData=0x31e56c | out: lpFindFileData=0x31e56c*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xfd9b5b52, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x60ae73a0, ftLastAccessTime.dwHighDateTime=0x1d2de2a, ftLastWriteTime.dwLowDateTime=0x60ae73a0, ftLastWriteTime.dwHighDateTime=0x1d2de2a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Windows", cAlternateFileName="")) returned 1 [0089.826] FindNextFileW (in: hFindFile=0x381dc0, lpFindFileData=0x31e56c | out: lpFindFileData=0x31e56c*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x7fffaad0, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x591e8ca0, ftLastAccessTime.dwHighDateTime=0x1d4d596, ftLastWriteTime.dwLowDateTime=0x591e8ca0, ftLastWriteTime.dwHighDateTime=0x1d4d596, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Windows Defender", cAlternateFileName="WINDOW~1")) returned 1 [0089.826] FindNextFileW (in: hFindFile=0x381dc0, lpFindFileData=0x31e56c | out: lpFindFileData=0x31e56c*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x7fffaad0, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x7fffaad0, ftLastAccessTime.dwHighDateTime=0x1ca0444, ftLastWriteTime.dwLowDateTime=0x7fffaad0, ftLastWriteTime.dwHighDateTime=0x1ca0444, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Windows NT", cAlternateFileName="WINDOW~2")) returned 1 [0089.826] FindNextFileW (in: hFindFile=0x381dc0, lpFindFileData=0x31e56c | out: lpFindFileData=0x31e56c*(dwFileAttributes=0x2012, ftCreationTime.dwLowDateTime=0x7fffaad0, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x7fffaad0, ftLastAccessTime.dwHighDateTime=0x1ca0444, ftLastWriteTime.dwLowDateTime=0x7fffaad0, ftLastWriteTime.dwHighDateTime=0x1ca0444, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="WwanSvc", cAlternateFileName="")) returned 1 [0089.826] FindNextFileW (in: hFindFile=0x381dc0, lpFindFileData=0x31e56c | out: lpFindFileData=0x31e56c*(dwFileAttributes=0x2012, ftCreationTime.dwLowDateTime=0x7fffaad0, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x7fffaad0, ftLastAccessTime.dwHighDateTime=0x1ca0444, ftLastWriteTime.dwLowDateTime=0x7fffaad0, ftLastWriteTime.dwHighDateTime=0x1ca0444, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="WwanSvc", cAlternateFileName="")) returned 0 [0089.826] FindClose (in: hFindFile=0x381dc0 | out: hFindFile=0x381dc0) returned 1 [0089.826] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e7f4) returned 1 [0089.826] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e800) returned 1 [0089.826] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e834) returned 1 [0089.826] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Microsoft", nBufferLength=0x105, lpBuffer=0x31e33c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Microsoft", lpFilePart=0x0) returned 0x1c [0089.826] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\", nBufferLength=0x105, lpBuffer=0x31e310, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Microsoft\\", lpFilePart=0x0) returned 0x1d [0089.826] FindFirstFileW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\*", lpFindFileData=0x31e55c | out: lpFindFileData=0x31e55c*(dwFileAttributes=0x2014, ftCreationTime.dwLowDateTime=0xfd943744, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x80ac5760, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0x80ac5760, ftLastWriteTime.dwHighDateTime=0x1d305eb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x381dc0 [0089.827] FindNextFileW (in: hFindFile=0x381dc0, lpFindFileData=0x31e56c | out: lpFindFileData=0x31e56c*(dwFileAttributes=0x2014, ftCreationTime.dwLowDateTime=0xfd943744, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x80ac5760, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0x80ac5760, ftLastWriteTime.dwHighDateTime=0x1d305eb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0089.827] FindNextFileW (in: hFindFile=0x381dc0, lpFindFileData=0x31e56c | out: lpFindFileData=0x31e56c*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x3fc949a4, ftCreationTime.dwHighDateTime=0x1ca0445, ftLastAccessTime.dwLowDateTime=0x3fc949a4, ftLastAccessTime.dwHighDateTime=0x1ca0445, ftLastWriteTime.dwLowDateTime=0x3fc949a4, ftLastWriteTime.dwHighDateTime=0x1ca0445, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Assistance", cAlternateFileName="ASSIST~1")) returned 1 [0089.827] FindNextFileW (in: hFindFile=0x381dc0, lpFindFileData=0x31e56c | out: lpFindFileData=0x31e56c*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xfd943744, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd96989e, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xfd96989e, ftLastWriteTime.dwHighDateTime=0x1ca0431, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Crypto", cAlternateFileName="")) returned 1 [0089.827] FindNextFileW (in: hFindFile=0x381dc0, lpFindFileData=0x31e56c | out: lpFindFileData=0x31e56c*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xfd96989e, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd96989e, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xfd96989e, ftLastWriteTime.dwHighDateTime=0x1ca0431, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Device Stage", cAlternateFileName="DEVICE~1")) returned 1 [0089.827] FindNextFileW (in: hFindFile=0x381dc0, lpFindFileData=0x31e56c | out: lpFindFileData=0x31e56c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd98f9f8, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd98f9f8, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xd789d88f, ftLastWriteTime.dwHighDateTime=0x1ca042b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="DeviceSync", cAlternateFileName="DEVICE~2")) returned 1 [0089.827] FindNextFileW (in: hFindFile=0x381dc0, lpFindFileData=0x31e56c | out: lpFindFileData=0x31e56c*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xfd98f9f8, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd98f9f8, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xfd98f9f8, ftLastWriteTime.dwHighDateTime=0x1ca0431, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="DRM", cAlternateFileName="")) returned 1 [0089.827] FindNextFileW (in: hFindFile=0x381dc0, lpFindFileData=0x31e56c | out: lpFindFileData=0x31e56c*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x9182055d, ftCreationTime.dwHighDateTime=0x1cbf8eb, ftLastAccessTime.dwLowDateTime=0xaa597fc2, ftLastAccessTime.dwHighDateTime=0x1cbf8eb, ftLastWriteTime.dwLowDateTime=0x9182055d, ftLastWriteTime.dwHighDateTime=0x1cbf8eb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="eHome", cAlternateFileName="")) returned 1 [0089.827] FindNextFileW (in: hFindFile=0x381dc0, lpFindFileData=0x31e56c | out: lpFindFileData=0x31e56c*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x3235c810, ftCreationTime.dwHighDateTime=0x1d2fa9b, ftLastAccessTime.dwLowDateTime=0x3a6c7630, ftLastAccessTime.dwHighDateTime=0x1d3aaba, ftLastWriteTime.dwLowDateTime=0x3a6c7630, ftLastWriteTime.dwHighDateTime=0x1d3aaba, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Event Viewer", cAlternateFileName="EVENTV~1")) returned 1 [0089.827] FindNextFileW (in: hFindFile=0x381dc0, lpFindFileData=0x31e56c | out: lpFindFileData=0x31e56c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd98f9f8, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd9b5b52, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xfd9b5b52, ftLastWriteTime.dwHighDateTime=0x1ca0431, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="IdentityCRL", cAlternateFileName="IDENTI~1")) returned 1 [0089.827] FindNextFileW (in: hFindFile=0x381dc0, lpFindFileData=0x31e56c | out: lpFindFileData=0x31e56c*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x3ee349fc, ftCreationTime.dwHighDateTime=0x1ca0441, ftLastAccessTime.dwLowDateTime=0x3ee349fc, ftLastAccessTime.dwHighDateTime=0x1ca0441, ftLastWriteTime.dwLowDateTime=0x3ee349fc, ftLastWriteTime.dwHighDateTime=0x1ca0441, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Media Player", cAlternateFileName="MEDIAP~1")) returned 1 [0089.827] FindNextFileW (in: hFindFile=0x381dc0, lpFindFileData=0x31e56c | out: lpFindFileData=0x31e56c*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x7fffaad0, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x80340916, ftLastAccessTime.dwHighDateTime=0x1ca0444, ftLastWriteTime.dwLowDateTime=0x80340916, ftLastWriteTime.dwHighDateTime=0x1ca0444, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="MF", cAlternateFileName="")) returned 1 [0089.828] FindNextFileW (in: hFindFile=0x381dc0, lpFindFileData=0x31e56c | out: lpFindFileData=0x31e56c*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x50ea0e30, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x50ea0e30, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x50ea0e30, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="MSDN", cAlternateFileName="")) returned 1 [0089.828] FindNextFileW (in: hFindFile=0x381dc0, lpFindFileData=0x31e56c | out: lpFindFileData=0x31e56c*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x56ac2f60, ftCreationTime.dwHighDateTime=0x1d2e676, ftLastAccessTime.dwLowDateTime=0x56ac2f60, ftLastAccessTime.dwHighDateTime=0x1d2e676, ftLastWriteTime.dwLowDateTime=0x56ac2f60, ftLastWriteTime.dwHighDateTime=0x1d2e676, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="NetFramework", cAlternateFileName="NETFRA~1")) returned 1 [0089.828] FindNextFileW (in: hFindFile=0x381dc0, lpFindFileData=0x31e56c | out: lpFindFileData=0x31e56c*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xfd9b5b52, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd9b5b52, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xfd9b5b52, ftLastWriteTime.dwHighDateTime=0x1ca0431, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Network", cAlternateFileName="")) returned 1 [0089.828] FindNextFileW (in: hFindFile=0x381dc0, lpFindFileData=0x31e56c | out: lpFindFileData=0x31e56c*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xeed38550, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0x6d3a4910, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x6d3a4910, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="OFFICE", cAlternateFileName="")) returned 1 [0089.828] FindNextFileW (in: hFindFile=0x381dc0, lpFindFileData=0x31e56c | out: lpFindFileData=0x31e56c*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x50ea0e30, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0xfa44d4a0, ftLastAccessTime.dwHighDateTime=0x1d305fd, ftLastWriteTime.dwLowDateTime=0xfa44d4a0, ftLastWriteTime.dwHighDateTime=0x1d305fd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="OfficeSoftwareProtectionPlatform", cAlternateFileName="OFFICE~1")) returned 1 [0089.828] FindNextFileW (in: hFindFile=0x381dc0, lpFindFileData=0x31e56c | out: lpFindFileData=0x31e56c*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xfd9b5b52, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd9b5b52, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xfd9b5b52, ftLastWriteTime.dwHighDateTime=0x1ca0431, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="RAC", cAlternateFileName="")) returned 1 [0089.828] FindNextFileW (in: hFindFile=0x381dc0, lpFindFileData=0x31e56c | out: lpFindFileData=0x31e56c*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x27df8b60, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x27df8b60, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x27df8b60, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Search", cAlternateFileName="")) returned 1 [0089.828] FindNextFileW (in: hFindFile=0x381dc0, lpFindFileData=0x31e56c | out: lpFindFileData=0x31e56c*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xfd9b5b52, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x29423840, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x29423840, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="User Account Pictures", cAlternateFileName="USERAC~1")) returned 1 [0089.828] FindNextFileW (in: hFindFile=0x381dc0, lpFindFileData=0x31e56c | out: lpFindFileData=0x31e56c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd9b5b52, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd9b5b52, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xc602eec6, ftLastWriteTime.dwHighDateTime=0x1ca042b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Vault", cAlternateFileName="")) returned 1 [0089.828] FindNextFileW (in: hFindFile=0x381dc0, lpFindFileData=0x31e56c | out: lpFindFileData=0x31e56c*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x80ac5760, ftCreationTime.dwHighDateTime=0x1d305eb, ftLastAccessTime.dwLowDateTime=0x80ac5760, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0x80ac5760, ftLastWriteTime.dwHighDateTime=0x1d305eb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="VISIO", cAlternateFileName="")) returned 1 [0089.828] FindNextFileW (in: hFindFile=0x381dc0, lpFindFileData=0x31e56c | out: lpFindFileData=0x31e56c*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xfd9b5b52, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x60ae73a0, ftLastAccessTime.dwHighDateTime=0x1d2de2a, ftLastWriteTime.dwLowDateTime=0x60ae73a0, ftLastWriteTime.dwHighDateTime=0x1d2de2a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Windows", cAlternateFileName="")) returned 1 [0089.828] FindNextFileW (in: hFindFile=0x381dc0, lpFindFileData=0x31e56c | out: lpFindFileData=0x31e56c*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x7fffaad0, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x591e8ca0, ftLastAccessTime.dwHighDateTime=0x1d4d596, ftLastWriteTime.dwLowDateTime=0x591e8ca0, ftLastWriteTime.dwHighDateTime=0x1d4d596, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Windows Defender", cAlternateFileName="WINDOW~1")) returned 1 [0089.828] FindNextFileW (in: hFindFile=0x381dc0, lpFindFileData=0x31e56c | out: lpFindFileData=0x31e56c*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x7fffaad0, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x7fffaad0, ftLastAccessTime.dwHighDateTime=0x1ca0444, ftLastWriteTime.dwLowDateTime=0x7fffaad0, ftLastWriteTime.dwHighDateTime=0x1ca0444, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Windows NT", cAlternateFileName="WINDOW~2")) returned 1 [0089.829] FindNextFileW (in: hFindFile=0x381dc0, lpFindFileData=0x31e56c | out: lpFindFileData=0x31e56c*(dwFileAttributes=0x2012, ftCreationTime.dwLowDateTime=0x7fffaad0, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x7fffaad0, ftLastAccessTime.dwHighDateTime=0x1ca0444, ftLastWriteTime.dwLowDateTime=0x7fffaad0, ftLastWriteTime.dwHighDateTime=0x1ca0444, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="WwanSvc", cAlternateFileName="")) returned 1 [0089.829] FindNextFileW (in: hFindFile=0x381dc0, lpFindFileData=0x31e56c | out: lpFindFileData=0x31e56c*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0089.829] FindClose (in: hFindFile=0x381dc0 | out: hFindFile=0x381dc0) returned 1 [0089.829] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e7f4) returned 1 [0089.829] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e800) returned 1 [0089.829] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e7bc) returned 1 [0089.829] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Assistance", nBufferLength=0x105, lpBuffer=0x31e2c4, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Microsoft\\Assistance", lpFilePart=0x0) returned 0x27 [0089.829] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Assistance\\", nBufferLength=0x105, lpBuffer=0x31e298, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Microsoft\\Assistance\\", lpFilePart=0x0) returned 0x28 [0089.829] FindFirstFileW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Assistance\\*", lpFindFileData=0x31e4e4 | out: lpFindFileData=0x31e4e4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x3fc949a4, ftCreationTime.dwHighDateTime=0x1ca0445, ftLastAccessTime.dwLowDateTime=0x3fc949a4, ftLastAccessTime.dwHighDateTime=0x1ca0445, ftLastWriteTime.dwLowDateTime=0x3fc949a4, ftLastWriteTime.dwHighDateTime=0x1ca0445, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x381dc0 [0089.829] FindNextFileW (in: hFindFile=0x381dc0, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x3fc949a4, ftCreationTime.dwHighDateTime=0x1ca0445, ftLastAccessTime.dwLowDateTime=0x3fc949a4, ftLastAccessTime.dwHighDateTime=0x1ca0445, ftLastWriteTime.dwLowDateTime=0x3fc949a4, ftLastWriteTime.dwHighDateTime=0x1ca0445, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0089.829] FindNextFileW (in: hFindFile=0x381dc0, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x3fc949a4, ftCreationTime.dwHighDateTime=0x1ca0445, ftLastAccessTime.dwLowDateTime=0x3fc949a4, ftLastAccessTime.dwHighDateTime=0x1ca0445, ftLastWriteTime.dwLowDateTime=0x3fc949a4, ftLastWriteTime.dwHighDateTime=0x1ca0445, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Client", cAlternateFileName="")) returned 1 [0089.829] FindNextFileW (in: hFindFile=0x381dc0, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x3fc949a4, ftCreationTime.dwHighDateTime=0x1ca0445, ftLastAccessTime.dwLowDateTime=0x3fc949a4, ftLastAccessTime.dwHighDateTime=0x1ca0445, ftLastWriteTime.dwLowDateTime=0x3fc949a4, ftLastWriteTime.dwHighDateTime=0x1ca0445, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Client", cAlternateFileName="")) returned 0 [0089.829] FindClose (in: hFindFile=0x381dc0 | out: hFindFile=0x381dc0) returned 1 [0089.829] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e77c) returned 1 [0089.829] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e788) returned 1 [0089.829] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e7bc) returned 1 [0089.830] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Assistance", nBufferLength=0x105, lpBuffer=0x31e2c4, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Microsoft\\Assistance", lpFilePart=0x0) returned 0x27 [0089.830] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Assistance\\", nBufferLength=0x105, lpBuffer=0x31e298, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Microsoft\\Assistance\\", lpFilePart=0x0) returned 0x28 [0089.830] FindFirstFileW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Assistance\\*", lpFindFileData=0x31e4e4 | out: lpFindFileData=0x31e4e4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x3fc949a4, ftCreationTime.dwHighDateTime=0x1ca0445, ftLastAccessTime.dwLowDateTime=0x3fc949a4, ftLastAccessTime.dwHighDateTime=0x1ca0445, ftLastWriteTime.dwLowDateTime=0x3fc949a4, ftLastWriteTime.dwHighDateTime=0x1ca0445, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x381dc0 [0089.830] FindNextFileW (in: hFindFile=0x381dc0, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x3fc949a4, ftCreationTime.dwHighDateTime=0x1ca0445, ftLastAccessTime.dwLowDateTime=0x3fc949a4, ftLastAccessTime.dwHighDateTime=0x1ca0445, ftLastWriteTime.dwLowDateTime=0x3fc949a4, ftLastWriteTime.dwHighDateTime=0x1ca0445, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0089.830] FindNextFileW (in: hFindFile=0x381dc0, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x3fc949a4, ftCreationTime.dwHighDateTime=0x1ca0445, ftLastAccessTime.dwLowDateTime=0x3fc949a4, ftLastAccessTime.dwHighDateTime=0x1ca0445, ftLastWriteTime.dwLowDateTime=0x3fc949a4, ftLastWriteTime.dwHighDateTime=0x1ca0445, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Client", cAlternateFileName="")) returned 1 [0089.830] FindNextFileW (in: hFindFile=0x381dc0, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0089.830] FindClose (in: hFindFile=0x381dc0 | out: hFindFile=0x381dc0) returned 1 [0089.830] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e77c) returned 1 [0089.830] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e788) returned 1 [0089.830] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e744) returned 1 [0089.830] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Assistance\\Client", nBufferLength=0x105, lpBuffer=0x31e24c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Microsoft\\Assistance\\Client", lpFilePart=0x0) returned 0x2e [0089.830] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Assistance\\Client\\", nBufferLength=0x105, lpBuffer=0x31e220, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Microsoft\\Assistance\\Client\\", lpFilePart=0x0) returned 0x2f [0089.830] FindFirstFileW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Assistance\\Client\\*", lpFindFileData=0x31e46c | out: lpFindFileData=0x31e46c*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x3fc949a4, ftCreationTime.dwHighDateTime=0x1ca0445, ftLastAccessTime.dwLowDateTime=0x3fc949a4, ftLastAccessTime.dwHighDateTime=0x1ca0445, ftLastWriteTime.dwLowDateTime=0x3fc949a4, ftLastWriteTime.dwHighDateTime=0x1ca0445, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x381dc0 [0089.830] FindNextFileW (in: hFindFile=0x381dc0, lpFindFileData=0x31e47c | out: lpFindFileData=0x31e47c*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x3fc949a4, ftCreationTime.dwHighDateTime=0x1ca0445, ftLastAccessTime.dwLowDateTime=0x3fc949a4, ftLastAccessTime.dwHighDateTime=0x1ca0445, ftLastWriteTime.dwLowDateTime=0x3fc949a4, ftLastWriteTime.dwHighDateTime=0x1ca0445, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0089.831] FindNextFileW (in: hFindFile=0x381dc0, lpFindFileData=0x31e47c | out: lpFindFileData=0x31e47c*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x3fc949a4, ftCreationTime.dwHighDateTime=0x1ca0445, ftLastAccessTime.dwLowDateTime=0xa8f17049, ftLastAccessTime.dwHighDateTime=0x1cbf8eb, ftLastWriteTime.dwLowDateTime=0x243448f1, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="1.0", cAlternateFileName="")) returned 1 [0089.831] FindNextFileW (in: hFindFile=0x381dc0, lpFindFileData=0x31e47c | out: lpFindFileData=0x31e47c*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x3fc949a4, ftCreationTime.dwHighDateTime=0x1ca0445, ftLastAccessTime.dwLowDateTime=0xa8f17049, ftLastAccessTime.dwHighDateTime=0x1cbf8eb, ftLastWriteTime.dwLowDateTime=0x243448f1, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="1.0", cAlternateFileName="")) returned 0 [0089.831] FindClose (in: hFindFile=0x381dc0 | out: hFindFile=0x381dc0) returned 1 [0089.831] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e704) returned 1 [0089.831] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e710) returned 1 [0089.831] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e744) returned 1 [0089.831] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Assistance\\Client", nBufferLength=0x105, lpBuffer=0x31e24c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Microsoft\\Assistance\\Client", lpFilePart=0x0) returned 0x2e [0089.831] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Assistance\\Client\\", nBufferLength=0x105, lpBuffer=0x31e220, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Microsoft\\Assistance\\Client\\", lpFilePart=0x0) returned 0x2f [0089.831] FindFirstFileW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Assistance\\Client\\*", lpFindFileData=0x31e46c | out: lpFindFileData=0x31e46c*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x3fc949a4, ftCreationTime.dwHighDateTime=0x1ca0445, ftLastAccessTime.dwLowDateTime=0x3fc949a4, ftLastAccessTime.dwHighDateTime=0x1ca0445, ftLastWriteTime.dwLowDateTime=0x3fc949a4, ftLastWriteTime.dwHighDateTime=0x1ca0445, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x381dc0 [0089.831] FindNextFileW (in: hFindFile=0x381dc0, lpFindFileData=0x31e47c | out: lpFindFileData=0x31e47c*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x3fc949a4, ftCreationTime.dwHighDateTime=0x1ca0445, ftLastAccessTime.dwLowDateTime=0x3fc949a4, ftLastAccessTime.dwHighDateTime=0x1ca0445, ftLastWriteTime.dwLowDateTime=0x3fc949a4, ftLastWriteTime.dwHighDateTime=0x1ca0445, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0089.831] FindNextFileW (in: hFindFile=0x381dc0, lpFindFileData=0x31e47c | out: lpFindFileData=0x31e47c*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x3fc949a4, ftCreationTime.dwHighDateTime=0x1ca0445, ftLastAccessTime.dwLowDateTime=0xa8f17049, ftLastAccessTime.dwHighDateTime=0x1cbf8eb, ftLastWriteTime.dwLowDateTime=0x243448f1, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="1.0", cAlternateFileName="")) returned 1 [0089.831] FindNextFileW (in: hFindFile=0x381dc0, lpFindFileData=0x31e47c | out: lpFindFileData=0x31e47c*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0089.831] FindClose (in: hFindFile=0x381dc0 | out: hFindFile=0x381dc0) returned 1 [0089.831] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e704) returned 1 [0089.832] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e710) returned 1 [0089.832] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e6cc) returned 1 [0089.832] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Assistance\\Client\\1.0", nBufferLength=0x105, lpBuffer=0x31e1d4, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Microsoft\\Assistance\\Client\\1.0", lpFilePart=0x0) returned 0x32 [0089.832] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Assistance\\Client\\1.0\\", nBufferLength=0x105, lpBuffer=0x31e1a8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Microsoft\\Assistance\\Client\\1.0\\", lpFilePart=0x0) returned 0x33 [0089.832] FindFirstFileW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Assistance\\Client\\1.0\\*", lpFindFileData=0x31e3f4 | out: lpFindFileData=0x31e3f4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x3fc949a4, ftCreationTime.dwHighDateTime=0x1ca0445, ftLastAccessTime.dwLowDateTime=0xa8f17049, ftLastAccessTime.dwHighDateTime=0x1cbf8eb, ftLastWriteTime.dwLowDateTime=0x243448f1, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x381dc0 [0089.832] FindNextFileW (in: hFindFile=0x381dc0, lpFindFileData=0x31e404 | out: lpFindFileData=0x31e404*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x3fc949a4, ftCreationTime.dwHighDateTime=0x1ca0445, ftLastAccessTime.dwLowDateTime=0xa8f17049, ftLastAccessTime.dwHighDateTime=0x1cbf8eb, ftLastWriteTime.dwLowDateTime=0x243448f1, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0089.832] FindNextFileW (in: hFindFile=0x381dc0, lpFindFileData=0x31e404 | out: lpFindFileData=0x31e404*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x243448f1, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0xae0e8854, ftLastAccessTime.dwHighDateTime=0x1cbf8eb, ftLastWriteTime.dwLowDateTime=0xae0e8854, ftLastWriteTime.dwHighDateTime=0x1cbf8eb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="en-US", cAlternateFileName="")) returned 1 [0089.832] FindNextFileW (in: hFindFile=0x381dc0, lpFindFileData=0x31e404 | out: lpFindFileData=0x31e404*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x243448f1, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0xae0e8854, ftLastAccessTime.dwHighDateTime=0x1cbf8eb, ftLastWriteTime.dwLowDateTime=0xae0e8854, ftLastWriteTime.dwHighDateTime=0x1cbf8eb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="en-US", cAlternateFileName="")) returned 0 [0089.832] FindClose (in: hFindFile=0x381dc0 | out: hFindFile=0x381dc0) returned 1 [0089.832] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e68c) returned 1 [0089.832] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e698) returned 1 [0089.832] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e6cc) returned 1 [0089.832] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Assistance\\Client\\1.0", nBufferLength=0x105, lpBuffer=0x31e1d4, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Microsoft\\Assistance\\Client\\1.0", lpFilePart=0x0) returned 0x32 [0089.832] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Assistance\\Client\\1.0\\", nBufferLength=0x105, lpBuffer=0x31e1a8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Microsoft\\Assistance\\Client\\1.0\\", lpFilePart=0x0) returned 0x33 [0089.832] FindFirstFileW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Assistance\\Client\\1.0\\*", lpFindFileData=0x31e3f4 | out: lpFindFileData=0x31e3f4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x3fc949a4, ftCreationTime.dwHighDateTime=0x1ca0445, ftLastAccessTime.dwLowDateTime=0xa8f17049, ftLastAccessTime.dwHighDateTime=0x1cbf8eb, ftLastWriteTime.dwLowDateTime=0x243448f1, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x381dc0 [0089.833] FindNextFileW (in: hFindFile=0x381dc0, lpFindFileData=0x31e404 | out: lpFindFileData=0x31e404*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x3fc949a4, ftCreationTime.dwHighDateTime=0x1ca0445, ftLastAccessTime.dwLowDateTime=0xa8f17049, ftLastAccessTime.dwHighDateTime=0x1cbf8eb, ftLastWriteTime.dwLowDateTime=0x243448f1, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0089.833] FindNextFileW (in: hFindFile=0x381dc0, lpFindFileData=0x31e404 | out: lpFindFileData=0x31e404*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x243448f1, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0xae0e8854, ftLastAccessTime.dwHighDateTime=0x1cbf8eb, ftLastWriteTime.dwLowDateTime=0xae0e8854, ftLastWriteTime.dwHighDateTime=0x1cbf8eb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="en-US", cAlternateFileName="")) returned 1 [0089.833] FindNextFileW (in: hFindFile=0x381dc0, lpFindFileData=0x31e404 | out: lpFindFileData=0x31e404*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0089.833] FindClose (in: hFindFile=0x381dc0 | out: hFindFile=0x381dc0) returned 1 [0089.833] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e68c) returned 1 [0089.833] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e698) returned 1 [0089.833] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e654) returned 1 [0089.833] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Assistance\\Client\\1.0\\en-US", nBufferLength=0x105, lpBuffer=0x31e15c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Microsoft\\Assistance\\Client\\1.0\\en-US", lpFilePart=0x0) returned 0x38 [0089.833] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Assistance\\Client\\1.0\\en-US\\", nBufferLength=0x105, lpBuffer=0x31e130, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Microsoft\\Assistance\\Client\\1.0\\en-US\\", lpFilePart=0x0) returned 0x39 [0089.833] FindFirstFileW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Assistance\\Client\\1.0\\en-US\\*", lpFindFileData=0x31e37c | out: lpFindFileData=0x31e37c*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x243448f1, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0xae0e8854, ftLastAccessTime.dwHighDateTime=0x1cbf8eb, ftLastWriteTime.dwLowDateTime=0xae0e8854, ftLastWriteTime.dwHighDateTime=0x1cbf8eb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x381dc0 [0089.834] FindNextFileW (in: hFindFile=0x381dc0, lpFindFileData=0x31e38c | out: lpFindFileData=0x31e38c*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x243448f1, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0xae0e8854, ftLastAccessTime.dwHighDateTime=0x1cbf8eb, ftLastWriteTime.dwLowDateTime=0xae0e8854, ftLastWriteTime.dwHighDateTime=0x1cbf8eb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0089.834] FindNextFileW (in: hFindFile=0x381dc0, lpFindFileData=0x31e38c | out: lpFindFileData=0x31e38c*(dwFileAttributes=0x2026, ftCreationTime.dwLowDateTime=0x2436abaa, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0xabde2c6f, ftLastAccessTime.dwHighDateTime=0x1cbf8eb, ftLastWriteTime.dwLowDateTime=0xa65a8bbf, ftLastWriteTime.dwHighDateTime=0x1cbf8eb, nFileSizeHigh=0x0, nFileSizeLow=0x2f22, dwReserved0=0x0, dwReserved1=0x0, cFileName="Help_CValidator.H1D", cAlternateFileName="HELP_C~1.H1D")) returned 1 [0089.834] FindNextFileW (in: hFindFile=0x381dc0, lpFindFileData=0x31e38c | out: lpFindFileData=0x31e38c*(dwFileAttributes=0x2026, ftCreationTime.dwLowDateTime=0x24534c56, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0xae2660aa, ftLastAccessTime.dwHighDateTime=0x1cbf8eb, ftLastWriteTime.dwLowDateTime=0xae2660aa, ftLastWriteTime.dwHighDateTime=0x1cbf8eb, nFileSizeHigh=0x0, nFileSizeLow=0x365fc, dwReserved0=0x0, dwReserved1=0x0, cFileName="Help_MKWD_AssetId.H1W", cAlternateFileName="HELP_M~1.H1W")) returned 1 [0089.834] FindNextFileW (in: hFindFile=0x381dc0, lpFindFileData=0x31e38c | out: lpFindFileData=0x31e38c*(dwFileAttributes=0x2026, ftCreationTime.dwLowDateTime=0x24534c56, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0xae409b6f, ftLastAccessTime.dwHighDateTime=0x1cbf8eb, ftLastWriteTime.dwLowDateTime=0xae409b6f, ftLastWriteTime.dwHighDateTime=0x1cbf8eb, nFileSizeHigh=0x0, nFileSizeLow=0x325ec, dwReserved0=0x0, dwReserved1=0x0, cFileName="Help_MKWD_BestBet.H1W", cAlternateFileName="HELP_M~2.H1W")) returned 1 [0089.834] FindNextFileW (in: hFindFile=0x381dc0, lpFindFileData=0x31e38c | out: lpFindFileData=0x31e38c*(dwFileAttributes=0x2026, ftCreationTime.dwLowDateTime=0x24534c56, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0xae45604d, ftLastAccessTime.dwHighDateTime=0x1cbf8eb, ftLastWriteTime.dwLowDateTime=0xae45604d, ftLastWriteTime.dwHighDateTime=0x1cbf8eb, nFileSizeHigh=0x0, nFileSizeLow=0x79f1a, dwReserved0=0x0, dwReserved1=0x0, cFileName="Help_MTOC_help.H1H", cAlternateFileName="HELP_M~1.H1H")) returned 1 [0089.834] FindNextFileW (in: hFindFile=0x381dc0, lpFindFileData=0x31e38c | out: lpFindFileData=0x31e38c*(dwFileAttributes=0x2026, ftCreationTime.dwLowDateTime=0x26353250, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0xae45604d, ftLastAccessTime.dwHighDateTime=0x1cbf8eb, ftLastWriteTime.dwLowDateTime=0xae45604d, ftLastWriteTime.dwHighDateTime=0x1cbf8eb, nFileSizeHigh=0x0, nFileSizeLow=0x3944, dwReserved0=0x0, dwReserved1=0x0, cFileName="Help_MValidator.H1D", cAlternateFileName="HELP_M~1.H1D")) returned 1 [0089.834] FindNextFileW (in: hFindFile=0x381dc0, lpFindFileData=0x31e38c | out: lpFindFileData=0x31e38c*(dwFileAttributes=0x2026, ftCreationTime.dwLowDateTime=0x24534c56, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0xae45604d, ftLastAccessTime.dwHighDateTime=0x1cbf8eb, ftLastWriteTime.dwLowDateTime=0xae45604d, ftLastWriteTime.dwHighDateTime=0x1cbf8eb, nFileSizeHigh=0x0, nFileSizeLow=0x4, dwReserved0=0x0, dwReserved1=0x0, cFileName="Help_MValidator.Lck", cAlternateFileName="HELP_M~1.LCK")) returned 1 [0089.834] FindNextFileW (in: hFindFile=0x381dc0, lpFindFileData=0x31e38c | out: lpFindFileData=0x31e38c*(dwFileAttributes=0x2026, ftCreationTime.dwLowDateTime=0x249fa376, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0xae0e8854, ftLastAccessTime.dwHighDateTime=0x1cbf8eb, ftLastWriteTime.dwLowDateTime=0xae0e8854, ftLastWriteTime.dwHighDateTime=0x1cbf8eb, nFileSizeHigh=0x0, nFileSizeLow=0xd5310, dwReserved0=0x0, dwReserved1=0x0, cFileName="Help{9DAA54E8-CD95-4107-8E7F-BA3F24732D95}.H1Q", cAlternateFileName="HELP{9~1.H1Q")) returned 1 [0089.835] FindNextFileW (in: hFindFile=0x381dc0, lpFindFileData=0x31e38c | out: lpFindFileData=0x31e38c*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0089.835] FindClose (in: hFindFile=0x381dc0 | out: hFindFile=0x381dc0) returned 1 [0089.835] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e614) returned 1 [0089.835] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e620) returned 1 [0089.835] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e654) returned 1 [0089.835] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Assistance\\Client\\1.0\\en-US", nBufferLength=0x105, lpBuffer=0x31e15c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Microsoft\\Assistance\\Client\\1.0\\en-US", lpFilePart=0x0) returned 0x38 [0089.835] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Assistance\\Client\\1.0\\en-US\\", nBufferLength=0x105, lpBuffer=0x31e130, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Microsoft\\Assistance\\Client\\1.0\\en-US\\", lpFilePart=0x0) returned 0x39 [0089.835] FindFirstFileW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Assistance\\Client\\1.0\\en-US\\*", lpFindFileData=0x31e37c | out: lpFindFileData=0x31e37c*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x243448f1, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0xae0e8854, ftLastAccessTime.dwHighDateTime=0x1cbf8eb, ftLastWriteTime.dwLowDateTime=0xae0e8854, ftLastWriteTime.dwHighDateTime=0x1cbf8eb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x381dc0 [0089.836] FindNextFileW (in: hFindFile=0x381dc0, lpFindFileData=0x31e38c | out: lpFindFileData=0x31e38c*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x243448f1, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0xae0e8854, ftLastAccessTime.dwHighDateTime=0x1cbf8eb, ftLastWriteTime.dwLowDateTime=0xae0e8854, ftLastWriteTime.dwHighDateTime=0x1cbf8eb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0089.836] FindNextFileW (in: hFindFile=0x381dc0, lpFindFileData=0x31e38c | out: lpFindFileData=0x31e38c*(dwFileAttributes=0x2026, ftCreationTime.dwLowDateTime=0x2436abaa, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0xabde2c6f, ftLastAccessTime.dwHighDateTime=0x1cbf8eb, ftLastWriteTime.dwLowDateTime=0xa65a8bbf, ftLastWriteTime.dwHighDateTime=0x1cbf8eb, nFileSizeHigh=0x0, nFileSizeLow=0x2f22, dwReserved0=0x0, dwReserved1=0x0, cFileName="Help_CValidator.H1D", cAlternateFileName="HELP_C~1.H1D")) returned 1 [0089.836] FindNextFileW (in: hFindFile=0x381dc0, lpFindFileData=0x31e38c | out: lpFindFileData=0x31e38c*(dwFileAttributes=0x2026, ftCreationTime.dwLowDateTime=0x24534c56, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0xae2660aa, ftLastAccessTime.dwHighDateTime=0x1cbf8eb, ftLastWriteTime.dwLowDateTime=0xae2660aa, ftLastWriteTime.dwHighDateTime=0x1cbf8eb, nFileSizeHigh=0x0, nFileSizeLow=0x365fc, dwReserved0=0x0, dwReserved1=0x0, cFileName="Help_MKWD_AssetId.H1W", cAlternateFileName="HELP_M~1.H1W")) returned 1 [0089.836] FindNextFileW (in: hFindFile=0x381dc0, lpFindFileData=0x31e38c | out: lpFindFileData=0x31e38c*(dwFileAttributes=0x2026, ftCreationTime.dwLowDateTime=0x24534c56, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0xae409b6f, ftLastAccessTime.dwHighDateTime=0x1cbf8eb, ftLastWriteTime.dwLowDateTime=0xae409b6f, ftLastWriteTime.dwHighDateTime=0x1cbf8eb, nFileSizeHigh=0x0, nFileSizeLow=0x325ec, dwReserved0=0x0, dwReserved1=0x0, cFileName="Help_MKWD_BestBet.H1W", cAlternateFileName="HELP_M~2.H1W")) returned 1 [0089.837] FindNextFileW (in: hFindFile=0x381dc0, lpFindFileData=0x31e38c | out: lpFindFileData=0x31e38c*(dwFileAttributes=0x2026, ftCreationTime.dwLowDateTime=0x24534c56, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0xae45604d, ftLastAccessTime.dwHighDateTime=0x1cbf8eb, ftLastWriteTime.dwLowDateTime=0xae45604d, ftLastWriteTime.dwHighDateTime=0x1cbf8eb, nFileSizeHigh=0x0, nFileSizeLow=0x79f1a, dwReserved0=0x0, dwReserved1=0x0, cFileName="Help_MTOC_help.H1H", cAlternateFileName="HELP_M~1.H1H")) returned 1 [0089.837] FindNextFileW (in: hFindFile=0x381dc0, lpFindFileData=0x31e38c | out: lpFindFileData=0x31e38c*(dwFileAttributes=0x2026, ftCreationTime.dwLowDateTime=0x26353250, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0xae45604d, ftLastAccessTime.dwHighDateTime=0x1cbf8eb, ftLastWriteTime.dwLowDateTime=0xae45604d, ftLastWriteTime.dwHighDateTime=0x1cbf8eb, nFileSizeHigh=0x0, nFileSizeLow=0x3944, dwReserved0=0x0, dwReserved1=0x0, cFileName="Help_MValidator.H1D", cAlternateFileName="HELP_M~1.H1D")) returned 1 [0089.837] FindNextFileW (in: hFindFile=0x381dc0, lpFindFileData=0x31e38c | out: lpFindFileData=0x31e38c*(dwFileAttributes=0x2026, ftCreationTime.dwLowDateTime=0x24534c56, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0xae45604d, ftLastAccessTime.dwHighDateTime=0x1cbf8eb, ftLastWriteTime.dwLowDateTime=0xae45604d, ftLastWriteTime.dwHighDateTime=0x1cbf8eb, nFileSizeHigh=0x0, nFileSizeLow=0x4, dwReserved0=0x0, dwReserved1=0x0, cFileName="Help_MValidator.Lck", cAlternateFileName="HELP_M~1.LCK")) returned 1 [0089.837] FindNextFileW (in: hFindFile=0x381dc0, lpFindFileData=0x31e38c | out: lpFindFileData=0x31e38c*(dwFileAttributes=0x2026, ftCreationTime.dwLowDateTime=0x249fa376, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0xae0e8854, ftLastAccessTime.dwHighDateTime=0x1cbf8eb, ftLastWriteTime.dwLowDateTime=0xae0e8854, ftLastWriteTime.dwHighDateTime=0x1cbf8eb, nFileSizeHigh=0x0, nFileSizeLow=0xd5310, dwReserved0=0x0, dwReserved1=0x0, cFileName="Help{9DAA54E8-CD95-4107-8E7F-BA3F24732D95}.H1Q", cAlternateFileName="HELP{9~1.H1Q")) returned 1 [0089.837] FindNextFileW (in: hFindFile=0x381dc0, lpFindFileData=0x31e38c | out: lpFindFileData=0x31e38c*(dwFileAttributes=0x2026, ftCreationTime.dwLowDateTime=0x249fa376, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0xae0e8854, ftLastAccessTime.dwHighDateTime=0x1cbf8eb, ftLastWriteTime.dwLowDateTime=0xae0e8854, ftLastWriteTime.dwHighDateTime=0x1cbf8eb, nFileSizeHigh=0x0, nFileSizeLow=0xd5310, dwReserved0=0x0, dwReserved1=0x0, cFileName="Help{9DAA54E8-CD95-4107-8E7F-BA3F24732D95}.H1Q", cAlternateFileName="HELP{9~1.H1Q")) returned 0 [0089.837] FindClose (in: hFindFile=0x381dc0 | out: hFindFile=0x381dc0) returned 1 [0089.838] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e614) returned 1 [0089.838] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e620) returned 1 [0089.838] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e7bc) returned 1 [0089.838] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Crypto", nBufferLength=0x105, lpBuffer=0x31e2c4, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Microsoft\\Crypto", lpFilePart=0x0) returned 0x23 [0089.838] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Crypto\\", nBufferLength=0x105, lpBuffer=0x31e298, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Microsoft\\Crypto\\", lpFilePart=0x0) returned 0x24 [0089.838] FindFirstFileW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Crypto\\*", lpFindFileData=0x31e4e4 | out: lpFindFileData=0x31e4e4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xfd943744, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd96989e, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xfd96989e, ftLastWriteTime.dwHighDateTime=0x1ca0431, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x381dc0 [0089.838] FindNextFileW (in: hFindFile=0x381dc0, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xfd943744, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd96989e, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xfd96989e, ftLastWriteTime.dwHighDateTime=0x1ca0431, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0089.838] FindNextFileW (in: hFindFile=0x381dc0, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xfd943744, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd943744, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xfd943744, ftLastWriteTime.dwHighDateTime=0x1ca0431, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="DSS", cAlternateFileName="")) returned 1 [0089.838] FindNextFileW (in: hFindFile=0x381dc0, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x14, ftCreationTime.dwLowDateTime=0xfd96989e, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd96989e, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xb66d81ea, ftLastWriteTime.dwHighDateTime=0x1ca042b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Keys", cAlternateFileName="")) returned 1 [0089.838] FindNextFileW (in: hFindFile=0x381dc0, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xfd96989e, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfc65d150, ftLastAccessTime.dwHighDateTime=0x1d2dda1, ftLastWriteTime.dwLowDateTime=0xfc65d150, ftLastWriteTime.dwHighDateTime=0x1d2dda1, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="RSA", cAlternateFileName="")) returned 1 [0089.838] FindNextFileW (in: hFindFile=0x381dc0, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xfd96989e, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfc65d150, ftLastAccessTime.dwHighDateTime=0x1d2dda1, ftLastWriteTime.dwLowDateTime=0xfc65d150, ftLastWriteTime.dwHighDateTime=0x1d2dda1, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="RSA", cAlternateFileName="")) returned 0 [0089.838] FindClose (in: hFindFile=0x381dc0 | out: hFindFile=0x381dc0) returned 1 [0089.839] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e77c) returned 1 [0089.839] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e788) returned 1 [0089.839] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e7bc) returned 1 [0089.839] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Crypto", nBufferLength=0x105, lpBuffer=0x31e2c4, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Microsoft\\Crypto", lpFilePart=0x0) returned 0x23 [0089.839] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Crypto\\", nBufferLength=0x105, lpBuffer=0x31e298, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Microsoft\\Crypto\\", lpFilePart=0x0) returned 0x24 [0089.839] FindFirstFileW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Crypto\\*", lpFindFileData=0x31e4e4 | out: lpFindFileData=0x31e4e4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xfd943744, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd96989e, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xfd96989e, ftLastWriteTime.dwHighDateTime=0x1ca0431, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x381dc0 [0089.839] FindNextFileW (in: hFindFile=0x381dc0, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xfd943744, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd96989e, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xfd96989e, ftLastWriteTime.dwHighDateTime=0x1ca0431, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0089.839] FindNextFileW (in: hFindFile=0x381dc0, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xfd943744, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd943744, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xfd943744, ftLastWriteTime.dwHighDateTime=0x1ca0431, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="DSS", cAlternateFileName="")) returned 1 [0089.839] FindNextFileW (in: hFindFile=0x381dc0, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x14, ftCreationTime.dwLowDateTime=0xfd96989e, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd96989e, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xb66d81ea, ftLastWriteTime.dwHighDateTime=0x1ca042b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Keys", cAlternateFileName="")) returned 1 [0089.839] FindNextFileW (in: hFindFile=0x381dc0, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xfd96989e, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfc65d150, ftLastAccessTime.dwHighDateTime=0x1d2dda1, ftLastWriteTime.dwLowDateTime=0xfc65d150, ftLastWriteTime.dwHighDateTime=0x1d2dda1, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="RSA", cAlternateFileName="")) returned 1 [0089.839] FindNextFileW (in: hFindFile=0x381dc0, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0089.839] FindClose (in: hFindFile=0x381dc0 | out: hFindFile=0x381dc0) returned 1 [0089.839] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e77c) returned 1 [0089.839] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e788) returned 1 [0089.839] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e744) returned 1 [0089.839] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Crypto\\DSS", nBufferLength=0x105, lpBuffer=0x31e24c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Microsoft\\Crypto\\DSS", lpFilePart=0x0) returned 0x27 [0089.839] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Crypto\\DSS\\", nBufferLength=0x105, lpBuffer=0x31e220, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Microsoft\\Crypto\\DSS\\", lpFilePart=0x0) returned 0x28 [0089.839] FindFirstFileW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Crypto\\DSS\\*", lpFindFileData=0x31e46c | out: lpFindFileData=0x31e46c*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xfd943744, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd943744, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xfd943744, ftLastWriteTime.dwHighDateTime=0x1ca0431, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x381dc0 [0089.839] FindNextFileW (in: hFindFile=0x381dc0, lpFindFileData=0x31e47c | out: lpFindFileData=0x31e47c*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xfd943744, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd943744, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xfd943744, ftLastWriteTime.dwHighDateTime=0x1ca0431, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0089.840] FindNextFileW (in: hFindFile=0x381dc0, lpFindFileData=0x31e47c | out: lpFindFileData=0x31e47c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd943744, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd943744, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xb66d81ea, ftLastWriteTime.dwHighDateTime=0x1ca042b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="MachineKeys", cAlternateFileName="MACHIN~1")) returned 1 [0089.840] FindNextFileW (in: hFindFile=0x381dc0, lpFindFileData=0x31e47c | out: lpFindFileData=0x31e47c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd943744, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd943744, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xb66d81ea, ftLastWriteTime.dwHighDateTime=0x1ca042b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="MachineKeys", cAlternateFileName="MACHIN~1")) returned 0 [0089.840] FindClose (in: hFindFile=0x381dc0 | out: hFindFile=0x381dc0) returned 1 [0089.840] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e704) returned 1 [0089.840] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e710) returned 1 [0089.840] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e744) returned 1 [0089.840] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Crypto\\DSS", nBufferLength=0x105, lpBuffer=0x31e24c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Microsoft\\Crypto\\DSS", lpFilePart=0x0) returned 0x27 [0089.840] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Crypto\\DSS\\", nBufferLength=0x105, lpBuffer=0x31e220, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Microsoft\\Crypto\\DSS\\", lpFilePart=0x0) returned 0x28 [0089.840] FindFirstFileW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Crypto\\DSS\\*", lpFindFileData=0x31e46c | out: lpFindFileData=0x31e46c*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xfd943744, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd943744, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xfd943744, ftLastWriteTime.dwHighDateTime=0x1ca0431, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x381dc0 [0089.840] FindNextFileW (in: hFindFile=0x381dc0, lpFindFileData=0x31e47c | out: lpFindFileData=0x31e47c*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xfd943744, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd943744, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xfd943744, ftLastWriteTime.dwHighDateTime=0x1ca0431, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0089.840] FindNextFileW (in: hFindFile=0x381dc0, lpFindFileData=0x31e47c | out: lpFindFileData=0x31e47c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd943744, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd943744, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xb66d81ea, ftLastWriteTime.dwHighDateTime=0x1ca042b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="MachineKeys", cAlternateFileName="MACHIN~1")) returned 1 [0089.840] FindNextFileW (in: hFindFile=0x381dc0, lpFindFileData=0x31e47c | out: lpFindFileData=0x31e47c*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0089.840] FindClose (in: hFindFile=0x381dc0 | out: hFindFile=0x381dc0) returned 1 [0089.840] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e704) returned 1 [0089.840] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e710) returned 1 [0089.840] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e6cc) returned 1 [0089.840] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Crypto\\DSS\\MachineKeys", nBufferLength=0x105, lpBuffer=0x31e1d4, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Microsoft\\Crypto\\DSS\\MachineKeys", lpFilePart=0x0) returned 0x33 [0089.840] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Crypto\\DSS\\MachineKeys\\", nBufferLength=0x105, lpBuffer=0x31e1a8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Microsoft\\Crypto\\DSS\\MachineKeys\\", lpFilePart=0x0) returned 0x34 [0089.844] FindFirstFileW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Crypto\\DSS\\MachineKeys\\*", lpFindFileData=0x31e3f4 | out: lpFindFileData=0x31e3f4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd943744, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd943744, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xb66d81ea, ftLastWriteTime.dwHighDateTime=0x1ca042b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x381dc0 [0089.844] FindNextFileW (in: hFindFile=0x381dc0, lpFindFileData=0x31e404 | out: lpFindFileData=0x31e404*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd943744, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd943744, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xb66d81ea, ftLastWriteTime.dwHighDateTime=0x1ca042b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0089.844] FindNextFileW (in: hFindFile=0x381dc0, lpFindFileData=0x31e404 | out: lpFindFileData=0x31e404*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd943744, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd943744, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xb66d81ea, ftLastWriteTime.dwHighDateTime=0x1ca042b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 0 [0089.844] FindClose (in: hFindFile=0x381dc0 | out: hFindFile=0x381dc0) returned 1 [0089.844] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e68c) returned 1 [0089.844] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e698) returned 1 [0089.844] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e6cc) returned 1 [0089.844] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Crypto\\DSS\\MachineKeys", nBufferLength=0x105, lpBuffer=0x31e1d4, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Microsoft\\Crypto\\DSS\\MachineKeys", lpFilePart=0x0) returned 0x33 [0089.844] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Crypto\\DSS\\MachineKeys\\", nBufferLength=0x105, lpBuffer=0x31e1a8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Microsoft\\Crypto\\DSS\\MachineKeys\\", lpFilePart=0x0) returned 0x34 [0089.844] FindFirstFileW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Crypto\\DSS\\MachineKeys\\*", lpFindFileData=0x31e3f4 | out: lpFindFileData=0x31e3f4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd943744, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd943744, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xb66d81ea, ftLastWriteTime.dwHighDateTime=0x1ca042b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x381dc0 [0089.844] FindNextFileW (in: hFindFile=0x381dc0, lpFindFileData=0x31e404 | out: lpFindFileData=0x31e404*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd943744, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd943744, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xb66d81ea, ftLastWriteTime.dwHighDateTime=0x1ca042b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0089.845] FindNextFileW (in: hFindFile=0x381dc0, lpFindFileData=0x31e404 | out: lpFindFileData=0x31e404*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd943744, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd943744, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xb66d81ea, ftLastWriteTime.dwHighDateTime=0x1ca042b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 0 [0089.845] FindClose (in: hFindFile=0x381dc0 | out: hFindFile=0x381dc0) returned 1 [0089.845] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e68c) returned 1 [0089.845] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e698) returned 1 [0089.845] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e744) returned 1 [0089.845] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Crypto\\Keys", nBufferLength=0x105, lpBuffer=0x31e24c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Microsoft\\Crypto\\Keys", lpFilePart=0x0) returned 0x28 [0089.845] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Crypto\\Keys\\", nBufferLength=0x105, lpBuffer=0x31e220, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Microsoft\\Crypto\\Keys\\", lpFilePart=0x0) returned 0x29 [0089.845] FindFirstFileW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Crypto\\Keys\\*", lpFindFileData=0x31e46c | out: lpFindFileData=0x31e46c*(dwFileAttributes=0x14, ftCreationTime.dwLowDateTime=0xfd96989e, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd96989e, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xb66d81ea, ftLastWriteTime.dwHighDateTime=0x1ca042b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x381dc0 [0089.845] FindNextFileW (in: hFindFile=0x381dc0, lpFindFileData=0x31e47c | out: lpFindFileData=0x31e47c*(dwFileAttributes=0x14, ftCreationTime.dwLowDateTime=0xfd96989e, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd96989e, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xb66d81ea, ftLastWriteTime.dwHighDateTime=0x1ca042b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0089.845] FindNextFileW (in: hFindFile=0x381dc0, lpFindFileData=0x31e47c | out: lpFindFileData=0x31e47c*(dwFileAttributes=0x14, ftCreationTime.dwLowDateTime=0xfd96989e, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd96989e, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xb66d81ea, ftLastWriteTime.dwHighDateTime=0x1ca042b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 0 [0089.845] FindClose (in: hFindFile=0x381dc0 | out: hFindFile=0x381dc0) returned 1 [0089.845] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e704) returned 1 [0089.845] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e710) returned 1 [0089.845] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e744) returned 1 [0089.845] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Crypto\\Keys", nBufferLength=0x105, lpBuffer=0x31e24c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Microsoft\\Crypto\\Keys", lpFilePart=0x0) returned 0x28 [0089.845] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Crypto\\Keys\\", nBufferLength=0x105, lpBuffer=0x31e220, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Microsoft\\Crypto\\Keys\\", lpFilePart=0x0) returned 0x29 [0089.846] FindFirstFileW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Crypto\\Keys\\*", lpFindFileData=0x31e46c | out: lpFindFileData=0x31e46c*(dwFileAttributes=0x14, ftCreationTime.dwLowDateTime=0xfd96989e, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd96989e, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xb66d81ea, ftLastWriteTime.dwHighDateTime=0x1ca042b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x381dc0 [0089.846] FindNextFileW (in: hFindFile=0x381dc0, lpFindFileData=0x31e47c | out: lpFindFileData=0x31e47c*(dwFileAttributes=0x14, ftCreationTime.dwLowDateTime=0xfd96989e, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd96989e, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xb66d81ea, ftLastWriteTime.dwHighDateTime=0x1ca042b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0089.846] FindNextFileW (in: hFindFile=0x381dc0, lpFindFileData=0x31e47c | out: lpFindFileData=0x31e47c*(dwFileAttributes=0x14, ftCreationTime.dwLowDateTime=0xfd96989e, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd96989e, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xb66d81ea, ftLastWriteTime.dwHighDateTime=0x1ca042b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 0 [0089.846] FindClose (in: hFindFile=0x381dc0 | out: hFindFile=0x381dc0) returned 1 [0089.846] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e704) returned 1 [0089.846] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e710) returned 1 [0089.846] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e744) returned 1 [0089.846] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Crypto\\RSA", nBufferLength=0x105, lpBuffer=0x31e24c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Microsoft\\Crypto\\RSA", lpFilePart=0x0) returned 0x27 [0089.846] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Crypto\\RSA\\", nBufferLength=0x105, lpBuffer=0x31e220, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Microsoft\\Crypto\\RSA\\", lpFilePart=0x0) returned 0x28 [0089.846] FindFirstFileW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Crypto\\RSA\\*", lpFindFileData=0x31e46c | out: lpFindFileData=0x31e46c*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xfd96989e, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfc65d150, ftLastAccessTime.dwHighDateTime=0x1d2dda1, ftLastWriteTime.dwLowDateTime=0xfc65d150, ftLastWriteTime.dwHighDateTime=0x1d2dda1, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x381dc0 [0089.846] FindNextFileW (in: hFindFile=0x381dc0, lpFindFileData=0x31e47c | out: lpFindFileData=0x31e47c*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xfd96989e, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfc65d150, ftLastAccessTime.dwHighDateTime=0x1d2dda1, ftLastWriteTime.dwLowDateTime=0xfc65d150, ftLastWriteTime.dwHighDateTime=0x1d2dda1, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0089.846] FindNextFileW (in: hFindFile=0x381dc0, lpFindFileData=0x31e47c | out: lpFindFileData=0x31e47c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd96989e, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd96989e, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xb66d81ea, ftLastWriteTime.dwHighDateTime=0x1ca042b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="MachineKeys", cAlternateFileName="MACHIN~1")) returned 1 [0089.846] FindNextFileW (in: hFindFile=0x381dc0, lpFindFileData=0x31e47c | out: lpFindFileData=0x31e47c*(dwFileAttributes=0x2014, ftCreationTime.dwLowDateTime=0xfc65d150, ftCreationTime.dwHighDateTime=0x1d2dda1, ftLastAccessTime.dwLowDateTime=0xe5bc2f0, ftLastAccessTime.dwHighDateTime=0x1d35d06, ftLastWriteTime.dwLowDateTime=0xe5bc2f0, ftLastWriteTime.dwHighDateTime=0x1d35d06, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="S-1-5-18", cAlternateFileName="")) returned 1 [0089.846] FindNextFileW (in: hFindFile=0x381dc0, lpFindFileData=0x31e47c | out: lpFindFileData=0x31e47c*(dwFileAttributes=0x2014, ftCreationTime.dwLowDateTime=0xfc65d150, ftCreationTime.dwHighDateTime=0x1d2dda1, ftLastAccessTime.dwLowDateTime=0xe5bc2f0, ftLastAccessTime.dwHighDateTime=0x1d35d06, ftLastWriteTime.dwLowDateTime=0xe5bc2f0, ftLastWriteTime.dwHighDateTime=0x1d35d06, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="S-1-5-18", cAlternateFileName="")) returned 0 [0089.847] FindClose (in: hFindFile=0x381dc0 | out: hFindFile=0x381dc0) returned 1 [0089.847] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e704) returned 1 [0089.847] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e710) returned 1 [0089.847] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e744) returned 1 [0089.847] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Crypto\\RSA", nBufferLength=0x105, lpBuffer=0x31e24c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Microsoft\\Crypto\\RSA", lpFilePart=0x0) returned 0x27 [0089.847] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Crypto\\RSA\\", nBufferLength=0x105, lpBuffer=0x31e220, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Microsoft\\Crypto\\RSA\\", lpFilePart=0x0) returned 0x28 [0089.847] FindFirstFileW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Crypto\\RSA\\*", lpFindFileData=0x31e46c | out: lpFindFileData=0x31e46c*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xfd96989e, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfc65d150, ftLastAccessTime.dwHighDateTime=0x1d2dda1, ftLastWriteTime.dwLowDateTime=0xfc65d150, ftLastWriteTime.dwHighDateTime=0x1d2dda1, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x381dc0 [0089.847] FindNextFileW (in: hFindFile=0x381dc0, lpFindFileData=0x31e47c | out: lpFindFileData=0x31e47c*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xfd96989e, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfc65d150, ftLastAccessTime.dwHighDateTime=0x1d2dda1, ftLastWriteTime.dwLowDateTime=0xfc65d150, ftLastWriteTime.dwHighDateTime=0x1d2dda1, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0089.847] FindNextFileW (in: hFindFile=0x381dc0, lpFindFileData=0x31e47c | out: lpFindFileData=0x31e47c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd96989e, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd96989e, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xb66d81ea, ftLastWriteTime.dwHighDateTime=0x1ca042b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="MachineKeys", cAlternateFileName="MACHIN~1")) returned 1 [0089.847] FindNextFileW (in: hFindFile=0x381dc0, lpFindFileData=0x31e47c | out: lpFindFileData=0x31e47c*(dwFileAttributes=0x2014, ftCreationTime.dwLowDateTime=0xfc65d150, ftCreationTime.dwHighDateTime=0x1d2dda1, ftLastAccessTime.dwLowDateTime=0xe5bc2f0, ftLastAccessTime.dwHighDateTime=0x1d35d06, ftLastWriteTime.dwLowDateTime=0xe5bc2f0, ftLastWriteTime.dwHighDateTime=0x1d35d06, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="S-1-5-18", cAlternateFileName="")) returned 1 [0089.847] FindNextFileW (in: hFindFile=0x381dc0, lpFindFileData=0x31e47c | out: lpFindFileData=0x31e47c*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0089.847] FindClose (in: hFindFile=0x381dc0 | out: hFindFile=0x381dc0) returned 1 [0089.847] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e704) returned 1 [0089.847] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e710) returned 1 [0089.847] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e6cc) returned 1 [0089.847] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Crypto\\RSA\\MachineKeys", nBufferLength=0x105, lpBuffer=0x31e1d4, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Microsoft\\Crypto\\RSA\\MachineKeys", lpFilePart=0x0) returned 0x33 [0089.847] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Crypto\\RSA\\MachineKeys\\", nBufferLength=0x105, lpBuffer=0x31e1a8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Microsoft\\Crypto\\RSA\\MachineKeys\\", lpFilePart=0x0) returned 0x34 [0089.847] FindFirstFileW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Crypto\\RSA\\MachineKeys\\*", lpFindFileData=0x31e3f4 | out: lpFindFileData=0x31e3f4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd96989e, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd96989e, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xb66d81ea, ftLastWriteTime.dwHighDateTime=0x1ca042b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x381dc0 [0089.848] FindNextFileW (in: hFindFile=0x381dc0, lpFindFileData=0x31e404 | out: lpFindFileData=0x31e404*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd96989e, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd96989e, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xb66d81ea, ftLastWriteTime.dwHighDateTime=0x1ca042b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0089.848] FindNextFileW (in: hFindFile=0x381dc0, lpFindFileData=0x31e404 | out: lpFindFileData=0x31e404*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd96989e, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd96989e, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xb66d81ea, ftLastWriteTime.dwHighDateTime=0x1ca042b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 0 [0089.848] FindClose (in: hFindFile=0x381dc0 | out: hFindFile=0x381dc0) returned 1 [0089.848] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e68c) returned 1 [0089.848] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e698) returned 1 [0089.848] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e6cc) returned 1 [0089.848] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Crypto\\RSA\\MachineKeys", nBufferLength=0x105, lpBuffer=0x31e1d4, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Microsoft\\Crypto\\RSA\\MachineKeys", lpFilePart=0x0) returned 0x33 [0089.848] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Crypto\\RSA\\MachineKeys\\", nBufferLength=0x105, lpBuffer=0x31e1a8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Microsoft\\Crypto\\RSA\\MachineKeys\\", lpFilePart=0x0) returned 0x34 [0089.848] FindFirstFileW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Crypto\\RSA\\MachineKeys\\*", lpFindFileData=0x31e3f4 | out: lpFindFileData=0x31e3f4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd96989e, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd96989e, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xb66d81ea, ftLastWriteTime.dwHighDateTime=0x1ca042b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x381dc0 [0089.848] FindNextFileW (in: hFindFile=0x381dc0, lpFindFileData=0x31e404 | out: lpFindFileData=0x31e404*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd96989e, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd96989e, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xb66d81ea, ftLastWriteTime.dwHighDateTime=0x1ca042b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0089.848] FindNextFileW (in: hFindFile=0x381dc0, lpFindFileData=0x31e404 | out: lpFindFileData=0x31e404*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd96989e, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd96989e, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xb66d81ea, ftLastWriteTime.dwHighDateTime=0x1ca042b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 0 [0089.848] FindClose (in: hFindFile=0x381dc0 | out: hFindFile=0x381dc0) returned 1 [0089.848] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e68c) returned 1 [0089.848] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e698) returned 1 [0089.848] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e6cc) returned 1 [0089.848] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Crypto\\RSA\\S-1-5-18", nBufferLength=0x105, lpBuffer=0x31e1d4, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Microsoft\\Crypto\\RSA\\S-1-5-18", lpFilePart=0x0) returned 0x30 [0089.849] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Crypto\\RSA\\S-1-5-18\\", nBufferLength=0x105, lpBuffer=0x31e1a8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Microsoft\\Crypto\\RSA\\S-1-5-18\\", lpFilePart=0x0) returned 0x31 [0089.849] FindFirstFileW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Crypto\\RSA\\S-1-5-18\\*", lpFindFileData=0x31e3f4 | out: lpFindFileData=0x31e3f4*(dwFileAttributes=0x2014, ftCreationTime.dwLowDateTime=0xfc65d150, ftCreationTime.dwHighDateTime=0x1d2dda1, ftLastAccessTime.dwLowDateTime=0xe5bc2f0, ftLastAccessTime.dwHighDateTime=0x1d35d06, ftLastWriteTime.dwLowDateTime=0xe5bc2f0, ftLastWriteTime.dwHighDateTime=0x1d35d06, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x381dc0 [0089.849] FindNextFileW (in: hFindFile=0x381dc0, lpFindFileData=0x31e404 | out: lpFindFileData=0x31e404*(dwFileAttributes=0x2014, ftCreationTime.dwLowDateTime=0xfc65d150, ftCreationTime.dwHighDateTime=0x1d2dda1, ftLastAccessTime.dwLowDateTime=0xe5bc2f0, ftLastAccessTime.dwHighDateTime=0x1d35d06, ftLastWriteTime.dwLowDateTime=0xe5bc2f0, ftLastWriteTime.dwHighDateTime=0x1d35d06, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0089.849] FindNextFileW (in: hFindFile=0x381dc0, lpFindFileData=0x31e404 | out: lpFindFileData=0x31e404*(dwFileAttributes=0x2024, ftCreationTime.dwLowDateTime=0xfc767af0, ftCreationTime.dwHighDateTime=0x1d2dda1, ftLastAccessTime.dwLowDateTime=0xfc767af0, ftLastAccessTime.dwHighDateTime=0x1d2dda1, ftLastWriteTime.dwLowDateTime=0xfc767af0, ftLastWriteTime.dwHighDateTime=0x1d2dda1, nFileSizeHigh=0x0, nFileSizeLow=0x2f, dwReserved0=0x0, dwReserved1=0x0, cFileName="6d14e4b1d8ca773bab785d1be032546e_0303d5b4-ffe9-470e-9dd8-7d9ec416e53f", cAlternateFileName="6D14E4~1")) returned 1 [0089.849] FindNextFileW (in: hFindFile=0x381dc0, lpFindFileData=0x31e404 | out: lpFindFileData=0x31e404*(dwFileAttributes=0x2024, ftCreationTime.dwLowDateTime=0xe5bc2f0, ftCreationTime.dwHighDateTime=0x1d35d06, ftLastAccessTime.dwLowDateTime=0xe5bc2f0, ftLastAccessTime.dwHighDateTime=0x1d35d06, ftLastWriteTime.dwLowDateTime=0xe5bc2f0, ftLastWriteTime.dwHighDateTime=0x1d35d06, nFileSizeHigh=0x0, nFileSizeLow=0x41d, dwReserved0=0x0, dwReserved1=0x0, cFileName="d42cc0c3858a58db2db37658219e6400_0303d5b4-ffe9-470e-9dd8-7d9ec416e53f", cAlternateFileName="D42CC0~1")) returned 1 [0089.849] FindNextFileW (in: hFindFile=0x381dc0, lpFindFileData=0x31e404 | out: lpFindFileData=0x31e404*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0089.849] FindClose (in: hFindFile=0x381dc0 | out: hFindFile=0x381dc0) returned 1 [0089.849] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e68c) returned 1 [0089.849] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e698) returned 1 [0089.849] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e6cc) returned 1 [0089.849] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Crypto\\RSA\\S-1-5-18", nBufferLength=0x105, lpBuffer=0x31e1d4, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Microsoft\\Crypto\\RSA\\S-1-5-18", lpFilePart=0x0) returned 0x30 [0089.849] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Crypto\\RSA\\S-1-5-18\\", nBufferLength=0x105, lpBuffer=0x31e1a8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Microsoft\\Crypto\\RSA\\S-1-5-18\\", lpFilePart=0x0) returned 0x31 [0089.849] FindFirstFileW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Crypto\\RSA\\S-1-5-18\\*", lpFindFileData=0x31e3f4 | out: lpFindFileData=0x31e3f4*(dwFileAttributes=0x2014, ftCreationTime.dwLowDateTime=0xfc65d150, ftCreationTime.dwHighDateTime=0x1d2dda1, ftLastAccessTime.dwLowDateTime=0xe5bc2f0, ftLastAccessTime.dwHighDateTime=0x1d35d06, ftLastWriteTime.dwLowDateTime=0xe5bc2f0, ftLastWriteTime.dwHighDateTime=0x1d35d06, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x381dc0 [0089.849] FindNextFileW (in: hFindFile=0x381dc0, lpFindFileData=0x31e404 | out: lpFindFileData=0x31e404*(dwFileAttributes=0x2014, ftCreationTime.dwLowDateTime=0xfc65d150, ftCreationTime.dwHighDateTime=0x1d2dda1, ftLastAccessTime.dwLowDateTime=0xe5bc2f0, ftLastAccessTime.dwHighDateTime=0x1d35d06, ftLastWriteTime.dwLowDateTime=0xe5bc2f0, ftLastWriteTime.dwHighDateTime=0x1d35d06, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0089.850] FindNextFileW (in: hFindFile=0x381dc0, lpFindFileData=0x31e404 | out: lpFindFileData=0x31e404*(dwFileAttributes=0x2024, ftCreationTime.dwLowDateTime=0xfc767af0, ftCreationTime.dwHighDateTime=0x1d2dda1, ftLastAccessTime.dwLowDateTime=0xfc767af0, ftLastAccessTime.dwHighDateTime=0x1d2dda1, ftLastWriteTime.dwLowDateTime=0xfc767af0, ftLastWriteTime.dwHighDateTime=0x1d2dda1, nFileSizeHigh=0x0, nFileSizeLow=0x2f, dwReserved0=0x0, dwReserved1=0x0, cFileName="6d14e4b1d8ca773bab785d1be032546e_0303d5b4-ffe9-470e-9dd8-7d9ec416e53f", cAlternateFileName="6D14E4~1")) returned 1 [0089.850] FindNextFileW (in: hFindFile=0x381dc0, lpFindFileData=0x31e404 | out: lpFindFileData=0x31e404*(dwFileAttributes=0x2024, ftCreationTime.dwLowDateTime=0xe5bc2f0, ftCreationTime.dwHighDateTime=0x1d35d06, ftLastAccessTime.dwLowDateTime=0xe5bc2f0, ftLastAccessTime.dwHighDateTime=0x1d35d06, ftLastWriteTime.dwLowDateTime=0xe5bc2f0, ftLastWriteTime.dwHighDateTime=0x1d35d06, nFileSizeHigh=0x0, nFileSizeLow=0x41d, dwReserved0=0x0, dwReserved1=0x0, cFileName="d42cc0c3858a58db2db37658219e6400_0303d5b4-ffe9-470e-9dd8-7d9ec416e53f", cAlternateFileName="D42CC0~1")) returned 1 [0089.850] FindNextFileW (in: hFindFile=0x381dc0, lpFindFileData=0x31e404 | out: lpFindFileData=0x31e404*(dwFileAttributes=0x2024, ftCreationTime.dwLowDateTime=0xe5bc2f0, ftCreationTime.dwHighDateTime=0x1d35d06, ftLastAccessTime.dwLowDateTime=0xe5bc2f0, ftLastAccessTime.dwHighDateTime=0x1d35d06, ftLastWriteTime.dwLowDateTime=0xe5bc2f0, ftLastWriteTime.dwHighDateTime=0x1d35d06, nFileSizeHigh=0x0, nFileSizeLow=0x41d, dwReserved0=0x0, dwReserved1=0x0, cFileName="d42cc0c3858a58db2db37658219e6400_0303d5b4-ffe9-470e-9dd8-7d9ec416e53f", cAlternateFileName="D42CC0~1")) returned 0 [0089.850] FindClose (in: hFindFile=0x381dc0 | out: hFindFile=0x381dc0) returned 1 [0089.850] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e68c) returned 1 [0089.850] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e698) returned 1 [0089.850] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e7bc) returned 1 [0089.850] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Device Stage", nBufferLength=0x105, lpBuffer=0x31e2c4, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Microsoft\\Device Stage", lpFilePart=0x0) returned 0x29 [0089.850] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Device Stage\\", nBufferLength=0x105, lpBuffer=0x31e298, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Microsoft\\Device Stage\\", lpFilePart=0x0) returned 0x2a [0089.850] FindFirstFileW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Device Stage\\*", lpFindFileData=0x31e4e4 | out: lpFindFileData=0x31e4e4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xfd96989e, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd96989e, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xfd96989e, ftLastWriteTime.dwHighDateTime=0x1ca0431, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x381dc0 [0089.850] FindNextFileW (in: hFindFile=0x381dc0, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xfd96989e, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd96989e, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xfd96989e, ftLastWriteTime.dwHighDateTime=0x1ca0431, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0089.850] FindNextFileW (in: hFindFile=0x381dc0, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xfd96989e, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd96989e, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xfd96989e, ftLastWriteTime.dwHighDateTime=0x1ca0431, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Device", cAlternateFileName="")) returned 1 [0089.850] FindNextFileW (in: hFindFile=0x381dc0, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xfd96989e, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd98f9f8, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xfd98f9f8, ftLastWriteTime.dwHighDateTime=0x1ca0431, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Task", cAlternateFileName="")) returned 1 [0089.850] FindNextFileW (in: hFindFile=0x381dc0, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xfd96989e, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd98f9f8, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xfd98f9f8, ftLastWriteTime.dwHighDateTime=0x1ca0431, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Task", cAlternateFileName="")) returned 0 [0089.850] FindClose (in: hFindFile=0x381dc0 | out: hFindFile=0x381dc0) returned 1 [0089.850] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e77c) returned 1 [0089.850] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e788) returned 1 [0089.850] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e7bc) returned 1 [0089.851] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Device Stage", nBufferLength=0x105, lpBuffer=0x31e2c4, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Microsoft\\Device Stage", lpFilePart=0x0) returned 0x29 [0089.851] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Device Stage\\", nBufferLength=0x105, lpBuffer=0x31e298, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Microsoft\\Device Stage\\", lpFilePart=0x0) returned 0x2a [0089.851] FindFirstFileW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Device Stage\\*", lpFindFileData=0x31e4e4 | out: lpFindFileData=0x31e4e4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xfd96989e, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd96989e, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xfd96989e, ftLastWriteTime.dwHighDateTime=0x1ca0431, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x381dc0 [0089.851] FindNextFileW (in: hFindFile=0x381dc0, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xfd96989e, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd96989e, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xfd96989e, ftLastWriteTime.dwHighDateTime=0x1ca0431, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0089.851] FindNextFileW (in: hFindFile=0x381dc0, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xfd96989e, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd96989e, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xfd96989e, ftLastWriteTime.dwHighDateTime=0x1ca0431, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Device", cAlternateFileName="")) returned 1 [0089.851] FindNextFileW (in: hFindFile=0x381dc0, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xfd96989e, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd98f9f8, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xfd98f9f8, ftLastWriteTime.dwHighDateTime=0x1ca0431, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Task", cAlternateFileName="")) returned 1 [0089.851] FindNextFileW (in: hFindFile=0x381dc0, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0089.851] FindClose (in: hFindFile=0x381dc0 | out: hFindFile=0x381dc0) returned 1 [0089.851] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e77c) returned 1 [0089.851] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e788) returned 1 [0089.851] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e744) returned 1 [0089.851] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Device Stage\\Device", nBufferLength=0x105, lpBuffer=0x31e24c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Microsoft\\Device Stage\\Device", lpFilePart=0x0) returned 0x30 [0089.851] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Device Stage\\Device\\", nBufferLength=0x105, lpBuffer=0x31e220, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Microsoft\\Device Stage\\Device\\", lpFilePart=0x0) returned 0x31 [0089.851] FindFirstFileW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Device Stage\\Device\\*", lpFindFileData=0x31e46c | out: lpFindFileData=0x31e46c*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xfd96989e, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd96989e, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xfd96989e, ftLastWriteTime.dwHighDateTime=0x1ca0431, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x381dc0 [0089.851] FindNextFileW (in: hFindFile=0x381dc0, lpFindFileData=0x31e47c | out: lpFindFileData=0x31e47c*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xfd96989e, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd96989e, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xfd96989e, ftLastWriteTime.dwHighDateTime=0x1ca0431, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0089.851] FindNextFileW (in: hFindFile=0x381dc0, lpFindFileData=0x31e47c | out: lpFindFileData=0x31e47c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd96989e, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd96989e, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xfd96989e, ftLastWriteTime.dwHighDateTime=0x1ca0431, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="{113527a4-45d4-4b6f-b567-97838f1b04b0}", cAlternateFileName="{11352~1")) returned 1 [0089.852] FindNextFileW (in: hFindFile=0x381dc0, lpFindFileData=0x31e47c | out: lpFindFileData=0x31e47c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd96989e, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd96989e, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xfd96989e, ftLastWriteTime.dwHighDateTime=0x1ca0431, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="{8702d817-5aad-4674-9ef3-4d3decd87120}", cAlternateFileName="{8702D~1")) returned 1 [0089.852] FindNextFileW (in: hFindFile=0x381dc0, lpFindFileData=0x31e47c | out: lpFindFileData=0x31e47c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd96989e, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd96989e, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xfd96989e, ftLastWriteTime.dwHighDateTime=0x1ca0431, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="{8702d817-5aad-4674-9ef3-4d3decd87120}", cAlternateFileName="{8702D~1")) returned 0 [0089.852] FindClose (in: hFindFile=0x381dc0 | out: hFindFile=0x381dc0) returned 1 [0089.852] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e704) returned 1 [0089.852] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e710) returned 1 [0089.852] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e744) returned 1 [0089.852] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Device Stage\\Device", nBufferLength=0x105, lpBuffer=0x31e24c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Microsoft\\Device Stage\\Device", lpFilePart=0x0) returned 0x30 [0089.852] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Device Stage\\Device\\", nBufferLength=0x105, lpBuffer=0x31e220, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Microsoft\\Device Stage\\Device\\", lpFilePart=0x0) returned 0x31 [0089.852] FindFirstFileW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Device Stage\\Device\\*", lpFindFileData=0x31e46c | out: lpFindFileData=0x31e46c*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xfd96989e, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd96989e, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xfd96989e, ftLastWriteTime.dwHighDateTime=0x1ca0431, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x381dc0 [0089.852] FindNextFileW (in: hFindFile=0x381dc0, lpFindFileData=0x31e47c | out: lpFindFileData=0x31e47c*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xfd96989e, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd96989e, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xfd96989e, ftLastWriteTime.dwHighDateTime=0x1ca0431, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0089.852] FindNextFileW (in: hFindFile=0x381dc0, lpFindFileData=0x31e47c | out: lpFindFileData=0x31e47c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd96989e, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd96989e, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xfd96989e, ftLastWriteTime.dwHighDateTime=0x1ca0431, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="{113527a4-45d4-4b6f-b567-97838f1b04b0}", cAlternateFileName="{11352~1")) returned 1 [0089.852] FindNextFileW (in: hFindFile=0x381dc0, lpFindFileData=0x31e47c | out: lpFindFileData=0x31e47c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd96989e, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd96989e, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xfd96989e, ftLastWriteTime.dwHighDateTime=0x1ca0431, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="{8702d817-5aad-4674-9ef3-4d3decd87120}", cAlternateFileName="{8702D~1")) returned 1 [0089.852] FindNextFileW (in: hFindFile=0x381dc0, lpFindFileData=0x31e47c | out: lpFindFileData=0x31e47c*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0089.852] FindClose (in: hFindFile=0x381dc0 | out: hFindFile=0x381dc0) returned 1 [0089.852] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e704) returned 1 [0089.852] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e710) returned 1 [0089.852] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e6cc) returned 1 [0089.852] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Device Stage\\Device\\{113527a4-45d4-4b6f-b567-97838f1b04b0}", nBufferLength=0x105, lpBuffer=0x31e1d4, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Microsoft\\Device Stage\\Device\\{113527a4-45d4-4b6f-b567-97838f1b04b0}", lpFilePart=0x0) returned 0x57 [0089.852] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Device Stage\\Device\\{113527a4-45d4-4b6f-b567-97838f1b04b0}\\", nBufferLength=0x105, lpBuffer=0x31e1a8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Microsoft\\Device Stage\\Device\\{113527a4-45d4-4b6f-b567-97838f1b04b0}\\", lpFilePart=0x0) returned 0x58 [0089.853] FindFirstFileW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Device Stage\\Device\\{113527a4-45d4-4b6f-b567-97838f1b04b0}\\*", lpFindFileData=0x31e3f4 | out: lpFindFileData=0x31e3f4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd96989e, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd96989e, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xfd96989e, ftLastWriteTime.dwHighDateTime=0x1ca0431, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x381dc0 [0089.853] FindNextFileW (in: hFindFile=0x381dc0, lpFindFileData=0x31e404 | out: lpFindFileData=0x31e404*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd96989e, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd96989e, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xfd96989e, ftLastWriteTime.dwHighDateTime=0x1ca0431, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0089.853] FindNextFileW (in: hFindFile=0x381dc0, lpFindFileData=0x31e404 | out: lpFindFileData=0x31e404*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5f07a66f, ftCreationTime.dwHighDateTime=0x1ca040c, ftLastAccessTime.dwLowDateTime=0x5f07a66f, ftLastAccessTime.dwHighDateTime=0x1ca040c, ftLastWriteTime.dwLowDateTime=0xc76b3ce5, ftLastWriteTime.dwHighDateTime=0x1c9ea0e, nFileSizeHigh=0x0, nFileSizeLow=0x1fad1, dwReserved0=0x0, dwReserved1=0x0, cFileName="background.png", cAlternateFileName="")) returned 1 [0089.853] FindNextFileW (in: hFindFile=0x381dc0, lpFindFileData=0x31e404 | out: lpFindFileData=0x31e404*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc7c5b0d9, ftCreationTime.dwHighDateTime=0x1c9ea0e, ftLastAccessTime.dwLowDateTime=0xc7c5b0d9, ftLastAccessTime.dwHighDateTime=0x1c9ea0e, ftLastWriteTime.dwLowDateTime=0xc7c5b0d9, ftLastWriteTime.dwHighDateTime=0x1c9ea0e, nFileSizeHigh=0x0, nFileSizeLow=0xb61, dwReserved0=0x0, dwReserved1=0x0, cFileName="behavior.xml", cAlternateFileName="")) returned 1 [0089.853] FindNextFileW (in: hFindFile=0x381dc0, lpFindFileData=0x31e404 | out: lpFindFileData=0x31e404*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5f07a66f, ftCreationTime.dwHighDateTime=0x1ca040c, ftLastAccessTime.dwLowDateTime=0x5f07a66f, ftLastAccessTime.dwHighDateTime=0x1ca040c, ftLastWriteTime.dwLowDateTime=0xc76b3ce5, ftLastWriteTime.dwHighDateTime=0x1c9ea0e, nFileSizeHigh=0x0, nFileSizeLow=0xadc8, dwReserved0=0x0, dwReserved1=0x0, cFileName="device.png", cAlternateFileName="")) returned 1 [0089.853] FindNextFileW (in: hFindFile=0x381dc0, lpFindFileData=0x31e404 | out: lpFindFileData=0x31e404*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5f0a07cc, ftCreationTime.dwHighDateTime=0x1ca040c, ftLastAccessTime.dwLowDateTime=0x5f0a07cc, ftLastAccessTime.dwHighDateTime=0x1ca040c, ftLastWriteTime.dwLowDateTime=0xc76d9e43, ftLastWriteTime.dwHighDateTime=0x1c9ea0e, nFileSizeHigh=0x0, nFileSizeLow=0x70c1, dwReserved0=0x0, dwReserved1=0x0, cFileName="overlay.png", cAlternateFileName="")) returned 1 [0089.853] FindNextFileW (in: hFindFile=0x381dc0, lpFindFileData=0x31e404 | out: lpFindFileData=0x31e404*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5f0c6929, ftCreationTime.dwHighDateTime=0x1ca040c, ftLastAccessTime.dwLowDateTime=0x5f0c6929, ftLastAccessTime.dwHighDateTime=0x1ca040c, ftLastWriteTime.dwLowDateTime=0xc76d9e43, ftLastWriteTime.dwHighDateTime=0x1c9ea0e, nFileSizeHigh=0x0, nFileSizeLow=0x99d3, dwReserved0=0x0, dwReserved1=0x0, cFileName="superbar.png", cAlternateFileName="")) returned 1 [0089.853] FindNextFileW (in: hFindFile=0x381dc0, lpFindFileData=0x31e404 | out: lpFindFileData=0x31e404*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0089.853] FindClose (in: hFindFile=0x381dc0 | out: hFindFile=0x381dc0) returned 1 [0089.853] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e68c) returned 1 [0089.853] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e698) returned 1 [0089.853] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e6cc) returned 1 [0089.853] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Device Stage\\Device\\{113527a4-45d4-4b6f-b567-97838f1b04b0}", nBufferLength=0x105, lpBuffer=0x31e1d4, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Microsoft\\Device Stage\\Device\\{113527a4-45d4-4b6f-b567-97838f1b04b0}", lpFilePart=0x0) returned 0x57 [0089.853] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Device Stage\\Device\\{113527a4-45d4-4b6f-b567-97838f1b04b0}\\", nBufferLength=0x105, lpBuffer=0x31e1a8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Microsoft\\Device Stage\\Device\\{113527a4-45d4-4b6f-b567-97838f1b04b0}\\", lpFilePart=0x0) returned 0x58 [0089.853] FindFirstFileW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Device Stage\\Device\\{113527a4-45d4-4b6f-b567-97838f1b04b0}\\*", lpFindFileData=0x31e3f4 | out: lpFindFileData=0x31e3f4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd96989e, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd96989e, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xfd96989e, ftLastWriteTime.dwHighDateTime=0x1ca0431, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x381dc0 [0089.853] FindNextFileW (in: hFindFile=0x381dc0, lpFindFileData=0x31e404 | out: lpFindFileData=0x31e404*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd96989e, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd96989e, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xfd96989e, ftLastWriteTime.dwHighDateTime=0x1ca0431, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0089.854] FindNextFileW (in: hFindFile=0x381dc0, lpFindFileData=0x31e404 | out: lpFindFileData=0x31e404*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5f07a66f, ftCreationTime.dwHighDateTime=0x1ca040c, ftLastAccessTime.dwLowDateTime=0x5f07a66f, ftLastAccessTime.dwHighDateTime=0x1ca040c, ftLastWriteTime.dwLowDateTime=0xc76b3ce5, ftLastWriteTime.dwHighDateTime=0x1c9ea0e, nFileSizeHigh=0x0, nFileSizeLow=0x1fad1, dwReserved0=0x0, dwReserved1=0x0, cFileName="background.png", cAlternateFileName="")) returned 1 [0089.854] FindNextFileW (in: hFindFile=0x381dc0, lpFindFileData=0x31e404 | out: lpFindFileData=0x31e404*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc7c5b0d9, ftCreationTime.dwHighDateTime=0x1c9ea0e, ftLastAccessTime.dwLowDateTime=0xc7c5b0d9, ftLastAccessTime.dwHighDateTime=0x1c9ea0e, ftLastWriteTime.dwLowDateTime=0xc7c5b0d9, ftLastWriteTime.dwHighDateTime=0x1c9ea0e, nFileSizeHigh=0x0, nFileSizeLow=0xb61, dwReserved0=0x0, dwReserved1=0x0, cFileName="behavior.xml", cAlternateFileName="")) returned 1 [0089.854] FindNextFileW (in: hFindFile=0x381dc0, lpFindFileData=0x31e404 | out: lpFindFileData=0x31e404*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5f07a66f, ftCreationTime.dwHighDateTime=0x1ca040c, ftLastAccessTime.dwLowDateTime=0x5f07a66f, ftLastAccessTime.dwHighDateTime=0x1ca040c, ftLastWriteTime.dwLowDateTime=0xc76b3ce5, ftLastWriteTime.dwHighDateTime=0x1c9ea0e, nFileSizeHigh=0x0, nFileSizeLow=0xadc8, dwReserved0=0x0, dwReserved1=0x0, cFileName="device.png", cAlternateFileName="")) returned 1 [0089.854] FindNextFileW (in: hFindFile=0x381dc0, lpFindFileData=0x31e404 | out: lpFindFileData=0x31e404*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5f0a07cc, ftCreationTime.dwHighDateTime=0x1ca040c, ftLastAccessTime.dwLowDateTime=0x5f0a07cc, ftLastAccessTime.dwHighDateTime=0x1ca040c, ftLastWriteTime.dwLowDateTime=0xc76d9e43, ftLastWriteTime.dwHighDateTime=0x1c9ea0e, nFileSizeHigh=0x0, nFileSizeLow=0x70c1, dwReserved0=0x0, dwReserved1=0x0, cFileName="overlay.png", cAlternateFileName="")) returned 1 [0089.854] FindNextFileW (in: hFindFile=0x381dc0, lpFindFileData=0x31e404 | out: lpFindFileData=0x31e404*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5f0c6929, ftCreationTime.dwHighDateTime=0x1ca040c, ftLastAccessTime.dwLowDateTime=0x5f0c6929, ftLastAccessTime.dwHighDateTime=0x1ca040c, ftLastWriteTime.dwLowDateTime=0xc76d9e43, ftLastWriteTime.dwHighDateTime=0x1c9ea0e, nFileSizeHigh=0x0, nFileSizeLow=0x99d3, dwReserved0=0x0, dwReserved1=0x0, cFileName="superbar.png", cAlternateFileName="")) returned 1 [0089.854] FindNextFileW (in: hFindFile=0x381dc0, lpFindFileData=0x31e404 | out: lpFindFileData=0x31e404*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5f0c6929, ftCreationTime.dwHighDateTime=0x1ca040c, ftLastAccessTime.dwLowDateTime=0x5f0c6929, ftLastAccessTime.dwHighDateTime=0x1ca040c, ftLastWriteTime.dwLowDateTime=0xc76d9e43, ftLastWriteTime.dwHighDateTime=0x1c9ea0e, nFileSizeHigh=0x0, nFileSizeLow=0x99d3, dwReserved0=0x0, dwReserved1=0x0, cFileName="superbar.png", cAlternateFileName="")) returned 0 [0089.854] FindClose (in: hFindFile=0x381dc0 | out: hFindFile=0x381dc0) returned 1 [0089.854] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e68c) returned 1 [0089.854] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e698) returned 1 [0089.854] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Device Stage\\Device\\{113527a4-45d4-4b6f-b567-97838f1b04b0}\\background.png", nBufferLength=0x105, lpBuffer=0x31e0a4, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Microsoft\\Device Stage\\Device\\{113527a4-45d4-4b6f-b567-97838f1b04b0}\\background.png", lpFilePart=0x0) returned 0x66 [0089.854] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e598) returned 1 [0089.854] CreateFileW (lpFileName="C:\\Users\\All Users\\Microsoft\\Device Stage\\Device\\{113527a4-45d4-4b6f-b567-97838f1b04b0}\\background.png" (normalized: "c:\\users\\all users\\microsoft\\device stage\\device\\{113527a4-45d4-4b6f-b567-97838f1b04b0}\\background.png"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x178 [0089.854] GetFileType (hFile=0x178) returned 0x1 [0089.854] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e594) returned 1 [0089.854] GetFileType (hFile=0x178) returned 0x1 [0089.854] GetFileSize (in: hFile=0x178, lpFileSizeHigh=0x31e6a0 | out: lpFileSizeHigh=0x31e6a0*=0x0) returned 0x1fad1 [0089.855] ReadFile (in: hFile=0x178, lpBuffer=0x3767f10, nNumberOfBytesToRead=0x1fad1, lpNumberOfBytesRead=0x31e64c, lpOverlapped=0x0 | out: lpBuffer=0x3767f10*, lpNumberOfBytesRead=0x31e64c*=0x1fad1, lpOverlapped=0x0) returned 1 [0089.858] CloseHandle (hObject=0x178) returned 1 [0089.899] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Device Stage\\Device\\{113527a4-45d4-4b6f-b567-97838f1b04b0}\\background.png", nBufferLength=0x105, lpBuffer=0x31e090, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Microsoft\\Device Stage\\Device\\{113527a4-45d4-4b6f-b567-97838f1b04b0}\\background.png", lpFilePart=0x0) returned 0x66 [0089.900] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e584) returned 1 [0089.900] CreateFileW (lpFileName="C:\\Users\\All Users\\Microsoft\\Device Stage\\Device\\{113527a4-45d4-4b6f-b567-97838f1b04b0}\\background.png" (normalized: "c:\\users\\all users\\microsoft\\device stage\\device\\{113527a4-45d4-4b6f-b567-97838f1b04b0}\\background.png"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0xffffffff [0089.901] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31d3c0) returned 1 [0089.901] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e6cc) returned 1 [0089.901] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Device Stage\\Device\\{8702d817-5aad-4674-9ef3-4d3decd87120}", nBufferLength=0x105, lpBuffer=0x31e1d4, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Microsoft\\Device Stage\\Device\\{8702d817-5aad-4674-9ef3-4d3decd87120}", lpFilePart=0x0) returned 0x57 [0089.901] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Device Stage\\Device\\{8702d817-5aad-4674-9ef3-4d3decd87120}\\", nBufferLength=0x105, lpBuffer=0x31e1a8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Microsoft\\Device Stage\\Device\\{8702d817-5aad-4674-9ef3-4d3decd87120}\\", lpFilePart=0x0) returned 0x58 [0089.901] FindFirstFileW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Device Stage\\Device\\{8702d817-5aad-4674-9ef3-4d3decd87120}\\*", lpFindFileData=0x31e3f4 | out: lpFindFileData=0x31e3f4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd96989e, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd96989e, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xfd96989e, ftLastWriteTime.dwHighDateTime=0x1ca0431, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x381fc0 [0089.902] FindNextFileW (in: hFindFile=0x381fc0, lpFindFileData=0x31e404 | out: lpFindFileData=0x31e404*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd96989e, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd96989e, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xfd96989e, ftLastWriteTime.dwHighDateTime=0x1ca0431, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0089.902] FindNextFileW (in: hFindFile=0x381fc0, lpFindFileData=0x31e404 | out: lpFindFileData=0x31e404*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9c0af2f7, ftCreationTime.dwHighDateTime=0x1c9ea0e, ftLastAccessTime.dwLowDateTime=0x9c0af2f7, ftLastAccessTime.dwHighDateTime=0x1c9ea0e, ftLastWriteTime.dwLowDateTime=0x9c0af2f7, ftLastWriteTime.dwHighDateTime=0x1c9ea0e, nFileSizeHigh=0x0, nFileSizeLow=0x1fad1, dwReserved0=0x0, dwReserved1=0x0, cFileName="background.png", cAlternateFileName="")) returned 1 [0089.902] FindNextFileW (in: hFindFile=0x381fc0, lpFindFileData=0x31e404 | out: lpFindFileData=0x31e404*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd2feb941, ftCreationTime.dwHighDateTime=0x1ca0407, ftLastAccessTime.dwLowDateTime=0xd2feb941, ftLastAccessTime.dwHighDateTime=0x1ca0407, ftLastWriteTime.dwLowDateTime=0x9c0d5455, ftLastWriteTime.dwHighDateTime=0x1c9ea0e, nFileSizeHigh=0x0, nFileSizeLow=0x769, dwReserved0=0x0, dwReserved1=0x0, cFileName="behavior.xml", cAlternateFileName="")) returned 1 [0089.902] FindNextFileW (in: hFindFile=0x381fc0, lpFindFileData=0x31e404 | out: lpFindFileData=0x31e404*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd3011a9e, ftCreationTime.dwHighDateTime=0x1ca0407, ftLastAccessTime.dwLowDateTime=0xd3011a9e, ftLastAccessTime.dwHighDateTime=0x1ca0407, ftLastWriteTime.dwLowDateTime=0x9c0d5455, ftLastWriteTime.dwHighDateTime=0x1c9ea0e, nFileSizeHigh=0x0, nFileSizeLow=0x70c1, dwReserved0=0x0, dwReserved1=0x0, cFileName="watermark.png", cAlternateFileName="")) returned 1 [0089.902] FindNextFileW (in: hFindFile=0x381fc0, lpFindFileData=0x31e404 | out: lpFindFileData=0x31e404*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0089.902] FindClose (in: hFindFile=0x381fc0 | out: hFindFile=0x381fc0) returned 1 [0089.902] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e68c) returned 1 [0089.902] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e698) returned 1 [0089.902] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e6cc) returned 1 [0089.902] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Device Stage\\Device\\{8702d817-5aad-4674-9ef3-4d3decd87120}", nBufferLength=0x105, lpBuffer=0x31e1d4, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Microsoft\\Device Stage\\Device\\{8702d817-5aad-4674-9ef3-4d3decd87120}", lpFilePart=0x0) returned 0x57 [0089.902] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Device Stage\\Device\\{8702d817-5aad-4674-9ef3-4d3decd87120}\\", nBufferLength=0x105, lpBuffer=0x31e1a8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Microsoft\\Device Stage\\Device\\{8702d817-5aad-4674-9ef3-4d3decd87120}\\", lpFilePart=0x0) returned 0x58 [0089.902] FindFirstFileW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Device Stage\\Device\\{8702d817-5aad-4674-9ef3-4d3decd87120}\\*", lpFindFileData=0x31e3f4 | out: lpFindFileData=0x31e3f4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd96989e, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd96989e, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xfd96989e, ftLastWriteTime.dwHighDateTime=0x1ca0431, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x381fc0 [0089.903] FindNextFileW (in: hFindFile=0x381fc0, lpFindFileData=0x31e404 | out: lpFindFileData=0x31e404*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd96989e, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd96989e, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xfd96989e, ftLastWriteTime.dwHighDateTime=0x1ca0431, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0089.903] FindNextFileW (in: hFindFile=0x381fc0, lpFindFileData=0x31e404 | out: lpFindFileData=0x31e404*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9c0af2f7, ftCreationTime.dwHighDateTime=0x1c9ea0e, ftLastAccessTime.dwLowDateTime=0x9c0af2f7, ftLastAccessTime.dwHighDateTime=0x1c9ea0e, ftLastWriteTime.dwLowDateTime=0x9c0af2f7, ftLastWriteTime.dwHighDateTime=0x1c9ea0e, nFileSizeHigh=0x0, nFileSizeLow=0x1fad1, dwReserved0=0x0, dwReserved1=0x0, cFileName="background.png", cAlternateFileName="")) returned 1 [0089.903] FindNextFileW (in: hFindFile=0x381fc0, lpFindFileData=0x31e404 | out: lpFindFileData=0x31e404*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd2feb941, ftCreationTime.dwHighDateTime=0x1ca0407, ftLastAccessTime.dwLowDateTime=0xd2feb941, ftLastAccessTime.dwHighDateTime=0x1ca0407, ftLastWriteTime.dwLowDateTime=0x9c0d5455, ftLastWriteTime.dwHighDateTime=0x1c9ea0e, nFileSizeHigh=0x0, nFileSizeLow=0x769, dwReserved0=0x0, dwReserved1=0x0, cFileName="behavior.xml", cAlternateFileName="")) returned 1 [0089.903] FindNextFileW (in: hFindFile=0x381fc0, lpFindFileData=0x31e404 | out: lpFindFileData=0x31e404*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd3011a9e, ftCreationTime.dwHighDateTime=0x1ca0407, ftLastAccessTime.dwLowDateTime=0xd3011a9e, ftLastAccessTime.dwHighDateTime=0x1ca0407, ftLastWriteTime.dwLowDateTime=0x9c0d5455, ftLastWriteTime.dwHighDateTime=0x1c9ea0e, nFileSizeHigh=0x0, nFileSizeLow=0x70c1, dwReserved0=0x0, dwReserved1=0x0, cFileName="watermark.png", cAlternateFileName="")) returned 1 [0089.903] FindNextFileW (in: hFindFile=0x381fc0, lpFindFileData=0x31e404 | out: lpFindFileData=0x31e404*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd3011a9e, ftCreationTime.dwHighDateTime=0x1ca0407, ftLastAccessTime.dwLowDateTime=0xd3011a9e, ftLastAccessTime.dwHighDateTime=0x1ca0407, ftLastWriteTime.dwLowDateTime=0x9c0d5455, ftLastWriteTime.dwHighDateTime=0x1c9ea0e, nFileSizeHigh=0x0, nFileSizeLow=0x70c1, dwReserved0=0x0, dwReserved1=0x0, cFileName="watermark.png", cAlternateFileName="")) returned 0 [0089.903] FindClose (in: hFindFile=0x381fc0 | out: hFindFile=0x381fc0) returned 1 [0089.903] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e68c) returned 1 [0089.903] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e698) returned 1 [0089.904] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Device Stage\\Device\\{8702d817-5aad-4674-9ef3-4d3decd87120}\\background.png", nBufferLength=0x105, lpBuffer=0x31e0a4, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Microsoft\\Device Stage\\Device\\{8702d817-5aad-4674-9ef3-4d3decd87120}\\background.png", lpFilePart=0x0) returned 0x66 [0089.904] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e598) returned 1 [0089.904] CreateFileW (lpFileName="C:\\Users\\All Users\\Microsoft\\Device Stage\\Device\\{8702d817-5aad-4674-9ef3-4d3decd87120}\\background.png" (normalized: "c:\\users\\all users\\microsoft\\device stage\\device\\{8702d817-5aad-4674-9ef3-4d3decd87120}\\background.png"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x178 [0089.904] GetFileType (hFile=0x178) returned 0x1 [0089.904] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e594) returned 1 [0089.904] GetFileType (hFile=0x178) returned 0x1 [0089.904] GetFileSize (in: hFile=0x178, lpFileSizeHigh=0x31e6a0 | out: lpFileSizeHigh=0x31e6a0*=0x0) returned 0x1fad1 [0089.904] ReadFile (in: hFile=0x178, lpBuffer=0x38260a0, nNumberOfBytesToRead=0x1fad1, lpNumberOfBytesRead=0x31e64c, lpOverlapped=0x0 | out: lpBuffer=0x38260a0*, lpNumberOfBytesRead=0x31e64c*=0x1fad1, lpOverlapped=0x0) returned 1 [0089.906] CloseHandle (hObject=0x178) returned 1 [0089.945] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Device Stage\\Device\\{8702d817-5aad-4674-9ef3-4d3decd87120}\\background.png", nBufferLength=0x105, lpBuffer=0x31e090, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Microsoft\\Device Stage\\Device\\{8702d817-5aad-4674-9ef3-4d3decd87120}\\background.png", lpFilePart=0x0) returned 0x66 [0089.945] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e584) returned 1 [0089.945] CreateFileW (lpFileName="C:\\Users\\All Users\\Microsoft\\Device Stage\\Device\\{8702d817-5aad-4674-9ef3-4d3decd87120}\\background.png" (normalized: "c:\\users\\all users\\microsoft\\device stage\\device\\{8702d817-5aad-4674-9ef3-4d3decd87120}\\background.png"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0xffffffff [0089.946] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31d3c0) returned 1 [0089.946] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e744) returned 1 [0089.946] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Device Stage\\Task", nBufferLength=0x105, lpBuffer=0x31e24c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Microsoft\\Device Stage\\Task", lpFilePart=0x0) returned 0x2e [0089.947] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Device Stage\\Task\\", nBufferLength=0x105, lpBuffer=0x31e220, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Microsoft\\Device Stage\\Task\\", lpFilePart=0x0) returned 0x2f [0089.947] FindFirstFileW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Device Stage\\Task\\*", lpFindFileData=0x31e46c | out: lpFindFileData=0x31e46c*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xfd96989e, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd98f9f8, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xfd98f9f8, ftLastWriteTime.dwHighDateTime=0x1ca0431, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x381e00 [0089.947] FindNextFileW (in: hFindFile=0x381e00, lpFindFileData=0x31e47c | out: lpFindFileData=0x31e47c*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xfd96989e, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd98f9f8, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xfd98f9f8, ftLastWriteTime.dwHighDateTime=0x1ca0431, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0089.947] FindNextFileW (in: hFindFile=0x381e00, lpFindFileData=0x31e47c | out: lpFindFileData=0x31e47c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd96989e, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x1d91b669, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x1d91b669, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="{07deb856-fc6e-4fb9-8add-d8f2cf8722c9}", cAlternateFileName="{07DEB~1")) returned 1 [0089.947] FindNextFileW (in: hFindFile=0x381e00, lpFindFileData=0x31e47c | out: lpFindFileData=0x31e47c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd98f9f8, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x1d91b669, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x1d91b669, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="{e35be42d-f742-4d96-a50a-1775fb1a7a42}", cAlternateFileName="{E35BE~1")) returned 1 [0089.947] FindNextFileW (in: hFindFile=0x381e00, lpFindFileData=0x31e47c | out: lpFindFileData=0x31e47c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd98f9f8, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x1d91b669, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x1d91b669, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="{e35be42d-f742-4d96-a50a-1775fb1a7a42}", cAlternateFileName="{E35BE~1")) returned 0 [0089.947] FindClose (in: hFindFile=0x381e00 | out: hFindFile=0x381e00) returned 1 [0089.947] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e704) returned 1 [0089.948] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e710) returned 1 [0089.948] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e744) returned 1 [0089.948] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Device Stage\\Task", nBufferLength=0x105, lpBuffer=0x31e24c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Microsoft\\Device Stage\\Task", lpFilePart=0x0) returned 0x2e [0089.948] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Device Stage\\Task\\", nBufferLength=0x105, lpBuffer=0x31e220, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Microsoft\\Device Stage\\Task\\", lpFilePart=0x0) returned 0x2f [0089.948] FindFirstFileW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Device Stage\\Task\\*", lpFindFileData=0x31e46c | out: lpFindFileData=0x31e46c*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xfd96989e, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd98f9f8, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xfd98f9f8, ftLastWriteTime.dwHighDateTime=0x1ca0431, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x381e00 [0089.948] FindNextFileW (in: hFindFile=0x381e00, lpFindFileData=0x31e47c | out: lpFindFileData=0x31e47c*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xfd96989e, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd98f9f8, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xfd98f9f8, ftLastWriteTime.dwHighDateTime=0x1ca0431, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0089.948] FindNextFileW (in: hFindFile=0x381e00, lpFindFileData=0x31e47c | out: lpFindFileData=0x31e47c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd96989e, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x1d91b669, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x1d91b669, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="{07deb856-fc6e-4fb9-8add-d8f2cf8722c9}", cAlternateFileName="{07DEB~1")) returned 1 [0089.948] FindNextFileW (in: hFindFile=0x381e00, lpFindFileData=0x31e47c | out: lpFindFileData=0x31e47c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd98f9f8, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x1d91b669, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x1d91b669, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="{e35be42d-f742-4d96-a50a-1775fb1a7a42}", cAlternateFileName="{E35BE~1")) returned 1 [0089.948] FindNextFileW (in: hFindFile=0x381e00, lpFindFileData=0x31e47c | out: lpFindFileData=0x31e47c*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0089.948] FindClose (in: hFindFile=0x381e00 | out: hFindFile=0x381e00) returned 1 [0089.948] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e704) returned 1 [0089.948] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e710) returned 1 [0089.949] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e6cc) returned 1 [0089.949] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Device Stage\\Task\\{07deb856-fc6e-4fb9-8add-d8f2cf8722c9}", nBufferLength=0x105, lpBuffer=0x31e1d4, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Microsoft\\Device Stage\\Task\\{07deb856-fc6e-4fb9-8add-d8f2cf8722c9}", lpFilePart=0x0) returned 0x55 [0089.949] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Device Stage\\Task\\{07deb856-fc6e-4fb9-8add-d8f2cf8722c9}\\", nBufferLength=0x105, lpBuffer=0x31e1a8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Microsoft\\Device Stage\\Task\\{07deb856-fc6e-4fb9-8add-d8f2cf8722c9}\\", lpFilePart=0x0) returned 0x56 [0089.949] FindFirstFileW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Device Stage\\Task\\{07deb856-fc6e-4fb9-8add-d8f2cf8722c9}\\*", lpFindFileData=0x31e3f4 | out: lpFindFileData=0x31e3f4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd96989e, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x1d91b669, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x1d91b669, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x381e00 [0089.949] FindNextFileW (in: hFindFile=0x381e00, lpFindFileData=0x31e404 | out: lpFindFileData=0x31e404*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd96989e, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x1d91b669, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x1d91b669, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0089.949] FindNextFileW (in: hFindFile=0x381e00, lpFindFileData=0x31e404 | out: lpFindFileData=0x31e404*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1d91b669, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x22f23962, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x1d91b669, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="en-US", cAlternateFileName="")) returned 1 [0089.949] FindNextFileW (in: hFindFile=0x381e00, lpFindFileData=0x31e404 | out: lpFindFileData=0x31e404*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd2c7f9e6, ftCreationTime.dwHighDateTime=0x1ca0407, ftLastAccessTime.dwLowDateTime=0xd2c7f9e6, ftLastAccessTime.dwHighDateTime=0x1ca0407, ftLastWriteTime.dwLowDateTime=0x7c0e93d7, ftLastWriteTime.dwHighDateTime=0x1c9ea0e, nFileSizeHigh=0x0, nFileSizeLow=0xd0a3, dwReserved0=0x0, dwReserved1=0x0, cFileName="folder.ico", cAlternateFileName="")) returned 1 [0089.949] FindNextFileW (in: hFindFile=0x381e00, lpFindFileData=0x31e404 | out: lpFindFileData=0x31e404*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd2db04ce, ftCreationTime.dwHighDateTime=0x1ca0407, ftLastAccessTime.dwLowDateTime=0xd2db04ce, ftLastAccessTime.dwHighDateTime=0x1ca0407, ftLastWriteTime.dwLowDateTime=0x7c0e93d7, ftLastWriteTime.dwHighDateTime=0x1c9ea0e, nFileSizeHigh=0x0, nFileSizeLow=0x72ee, dwReserved0=0x0, dwReserved1=0x0, cFileName="netfol.ico", cAlternateFileName="")) returned 1 [0089.949] FindNextFileW (in: hFindFile=0x381e00, lpFindFileData=0x31e404 | out: lpFindFileData=0x31e404*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd2ca5b43, ftCreationTime.dwHighDateTime=0x1ca0407, ftLastAccessTime.dwLowDateTime=0xd2ca5b43, ftLastAccessTime.dwHighDateTime=0x1ca0407, ftLastWriteTime.dwLowDateTime=0x7c10f535, ftLastWriteTime.dwHighDateTime=0x1c9ea0e, nFileSizeHigh=0x0, nFileSizeLow=0x14668, dwReserved0=0x0, dwReserved1=0x0, cFileName="pictures.ico", cAlternateFileName="")) returned 1 [0089.949] FindNextFileW (in: hFindFile=0x381e00, lpFindFileData=0x31e404 | out: lpFindFileData=0x31e404*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd2c59889, ftCreationTime.dwHighDateTime=0x1ca0407, ftLastAccessTime.dwLowDateTime=0xd2c59889, ftLastAccessTime.dwHighDateTime=0x1ca0407, ftLastWriteTime.dwLowDateTime=0x7c1cdc0b, ftLastWriteTime.dwHighDateTime=0x1c9ea0e, nFileSizeHigh=0x0, nFileSizeLow=0x536, dwReserved0=0x0, dwReserved1=0x0, cFileName="resource.xml", cAlternateFileName="")) returned 1 [0089.950] FindNextFileW (in: hFindFile=0x381e00, lpFindFileData=0x31e404 | out: lpFindFileData=0x31e404*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd2cf1dfd, ftCreationTime.dwHighDateTime=0x1ca0407, ftLastAccessTime.dwLowDateTime=0xd2cf1dfd, ftLastAccessTime.dwHighDateTime=0x1ca0407, ftLastWriteTime.dwLowDateTime=0x7c1f3d69, ftLastWriteTime.dwHighDateTime=0x1c9ea0e, nFileSizeHigh=0x0, nFileSizeLow=0xcaa9, dwReserved0=0x0, dwReserved1=0x0, cFileName="ringtones.ico", cAlternateFileName="")) returned 1 [0089.950] FindNextFileW (in: hFindFile=0x381e00, lpFindFileData=0x31e404 | out: lpFindFileData=0x31e404*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd2d17f5a, ftCreationTime.dwHighDateTime=0x1ca0407, ftLastAccessTime.dwLowDateTime=0xd2d17f5a, ftLastAccessTime.dwHighDateTime=0x1ca0407, ftLastWriteTime.dwLowDateTime=0x7c1f3d69, ftLastWriteTime.dwHighDateTime=0x1c9ea0e, nFileSizeHigh=0x0, nFileSizeLow=0x10850, dwReserved0=0x0, dwReserved1=0x0, cFileName="settings.ico", cAlternateFileName="")) returned 1 [0089.950] FindNextFileW (in: hFindFile=0x381e00, lpFindFileData=0x31e404 | out: lpFindFileData=0x31e404*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd2d3e0b7, ftCreationTime.dwHighDateTime=0x1ca0407, ftLastAccessTime.dwLowDateTime=0xd2d3e0b7, ftLastAccessTime.dwHighDateTime=0x1ca0407, ftLastWriteTime.dwLowDateTime=0x7c219ec7, ftLastWriteTime.dwHighDateTime=0x1c9ea0e, nFileSizeHigh=0x0, nFileSizeLow=0xc04b, dwReserved0=0x0, dwReserved1=0x0, cFileName="sync.ico", cAlternateFileName="")) returned 1 [0089.950] FindNextFileW (in: hFindFile=0x381e00, lpFindFileData=0x31e404 | out: lpFindFileData=0x31e404*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7c219ec7, ftCreationTime.dwHighDateTime=0x1c9ea0e, ftLastAccessTime.dwLowDateTime=0x7c219ec7, ftLastAccessTime.dwHighDateTime=0x1c9ea0e, ftLastWriteTime.dwLowDateTime=0x7c219ec7, ftLastWriteTime.dwHighDateTime=0x1c9ea0e, nFileSizeHigh=0x0, nFileSizeLow=0x3473, dwReserved0=0x0, dwReserved1=0x0, cFileName="tasks.xml", cAlternateFileName="")) returned 1 [0089.951] FindNextFileW (in: hFindFile=0x381e00, lpFindFileData=0x31e404 | out: lpFindFileData=0x31e404*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd2d64214, ftCreationTime.dwHighDateTime=0x1ca0407, ftLastAccessTime.dwLowDateTime=0xd2d64214, ftLastAccessTime.dwHighDateTime=0x1ca0407, ftLastWriteTime.dwLowDateTime=0x7c219ec7, ftLastWriteTime.dwHighDateTime=0x1c9ea0e, nFileSizeHigh=0x0, nFileSizeLow=0x1b9f4, dwReserved0=0x0, dwReserved1=0x0, cFileName="wmp.ico", cAlternateFileName="")) returned 1 [0089.951] FindNextFileW (in: hFindFile=0x381e00, lpFindFileData=0x31e404 | out: lpFindFileData=0x31e404*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0089.951] FindClose (in: hFindFile=0x381e00 | out: hFindFile=0x381e00) returned 1 [0089.951] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e68c) returned 1 [0089.951] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e698) returned 1 [0089.951] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e6cc) returned 1 [0089.951] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Device Stage\\Task\\{07deb856-fc6e-4fb9-8add-d8f2cf8722c9}", nBufferLength=0x105, lpBuffer=0x31e1d4, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Microsoft\\Device Stage\\Task\\{07deb856-fc6e-4fb9-8add-d8f2cf8722c9}", lpFilePart=0x0) returned 0x55 [0089.951] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Device Stage\\Task\\{07deb856-fc6e-4fb9-8add-d8f2cf8722c9}\\", nBufferLength=0x105, lpBuffer=0x31e1a8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Microsoft\\Device Stage\\Task\\{07deb856-fc6e-4fb9-8add-d8f2cf8722c9}\\", lpFilePart=0x0) returned 0x56 [0089.951] FindFirstFileW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Device Stage\\Task\\{07deb856-fc6e-4fb9-8add-d8f2cf8722c9}\\*", lpFindFileData=0x31e3f4 | out: lpFindFileData=0x31e3f4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd96989e, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x1d91b669, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x1d91b669, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x381e00 [0089.951] FindNextFileW (in: hFindFile=0x381e00, lpFindFileData=0x31e404 | out: lpFindFileData=0x31e404*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd96989e, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x1d91b669, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x1d91b669, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0089.951] FindNextFileW (in: hFindFile=0x381e00, lpFindFileData=0x31e404 | out: lpFindFileData=0x31e404*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1d91b669, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x22f23962, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x1d91b669, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="en-US", cAlternateFileName="")) returned 1 [0089.951] FindNextFileW (in: hFindFile=0x381e00, lpFindFileData=0x31e404 | out: lpFindFileData=0x31e404*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd2c7f9e6, ftCreationTime.dwHighDateTime=0x1ca0407, ftLastAccessTime.dwLowDateTime=0xd2c7f9e6, ftLastAccessTime.dwHighDateTime=0x1ca0407, ftLastWriteTime.dwLowDateTime=0x7c0e93d7, ftLastWriteTime.dwHighDateTime=0x1c9ea0e, nFileSizeHigh=0x0, nFileSizeLow=0xd0a3, dwReserved0=0x0, dwReserved1=0x0, cFileName="folder.ico", cAlternateFileName="")) returned 1 [0089.952] FindNextFileW (in: hFindFile=0x381e00, lpFindFileData=0x31e404 | out: lpFindFileData=0x31e404*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd2db04ce, ftCreationTime.dwHighDateTime=0x1ca0407, ftLastAccessTime.dwLowDateTime=0xd2db04ce, ftLastAccessTime.dwHighDateTime=0x1ca0407, ftLastWriteTime.dwLowDateTime=0x7c0e93d7, ftLastWriteTime.dwHighDateTime=0x1c9ea0e, nFileSizeHigh=0x0, nFileSizeLow=0x72ee, dwReserved0=0x0, dwReserved1=0x0, cFileName="netfol.ico", cAlternateFileName="")) returned 1 [0089.952] FindNextFileW (in: hFindFile=0x381e00, lpFindFileData=0x31e404 | out: lpFindFileData=0x31e404*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd2ca5b43, ftCreationTime.dwHighDateTime=0x1ca0407, ftLastAccessTime.dwLowDateTime=0xd2ca5b43, ftLastAccessTime.dwHighDateTime=0x1ca0407, ftLastWriteTime.dwLowDateTime=0x7c10f535, ftLastWriteTime.dwHighDateTime=0x1c9ea0e, nFileSizeHigh=0x0, nFileSizeLow=0x14668, dwReserved0=0x0, dwReserved1=0x0, cFileName="pictures.ico", cAlternateFileName="")) returned 1 [0089.952] FindNextFileW (in: hFindFile=0x381e00, lpFindFileData=0x31e404 | out: lpFindFileData=0x31e404*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd2c59889, ftCreationTime.dwHighDateTime=0x1ca0407, ftLastAccessTime.dwLowDateTime=0xd2c59889, ftLastAccessTime.dwHighDateTime=0x1ca0407, ftLastWriteTime.dwLowDateTime=0x7c1cdc0b, ftLastWriteTime.dwHighDateTime=0x1c9ea0e, nFileSizeHigh=0x0, nFileSizeLow=0x536, dwReserved0=0x0, dwReserved1=0x0, cFileName="resource.xml", cAlternateFileName="")) returned 1 [0089.952] FindNextFileW (in: hFindFile=0x381e00, lpFindFileData=0x31e404 | out: lpFindFileData=0x31e404*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd2cf1dfd, ftCreationTime.dwHighDateTime=0x1ca0407, ftLastAccessTime.dwLowDateTime=0xd2cf1dfd, ftLastAccessTime.dwHighDateTime=0x1ca0407, ftLastWriteTime.dwLowDateTime=0x7c1f3d69, ftLastWriteTime.dwHighDateTime=0x1c9ea0e, nFileSizeHigh=0x0, nFileSizeLow=0xcaa9, dwReserved0=0x0, dwReserved1=0x0, cFileName="ringtones.ico", cAlternateFileName="")) returned 1 [0089.952] FindNextFileW (in: hFindFile=0x381e00, lpFindFileData=0x31e404 | out: lpFindFileData=0x31e404*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd2d17f5a, ftCreationTime.dwHighDateTime=0x1ca0407, ftLastAccessTime.dwLowDateTime=0xd2d17f5a, ftLastAccessTime.dwHighDateTime=0x1ca0407, ftLastWriteTime.dwLowDateTime=0x7c1f3d69, ftLastWriteTime.dwHighDateTime=0x1c9ea0e, nFileSizeHigh=0x0, nFileSizeLow=0x10850, dwReserved0=0x0, dwReserved1=0x0, cFileName="settings.ico", cAlternateFileName="")) returned 1 [0089.952] FindNextFileW (in: hFindFile=0x381e00, lpFindFileData=0x31e404 | out: lpFindFileData=0x31e404*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd2d3e0b7, ftCreationTime.dwHighDateTime=0x1ca0407, ftLastAccessTime.dwLowDateTime=0xd2d3e0b7, ftLastAccessTime.dwHighDateTime=0x1ca0407, ftLastWriteTime.dwLowDateTime=0x7c219ec7, ftLastWriteTime.dwHighDateTime=0x1c9ea0e, nFileSizeHigh=0x0, nFileSizeLow=0xc04b, dwReserved0=0x0, dwReserved1=0x0, cFileName="sync.ico", cAlternateFileName="")) returned 1 [0089.952] FindNextFileW (in: hFindFile=0x381e00, lpFindFileData=0x31e404 | out: lpFindFileData=0x31e404*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7c219ec7, ftCreationTime.dwHighDateTime=0x1c9ea0e, ftLastAccessTime.dwLowDateTime=0x7c219ec7, ftLastAccessTime.dwHighDateTime=0x1c9ea0e, ftLastWriteTime.dwLowDateTime=0x7c219ec7, ftLastWriteTime.dwHighDateTime=0x1c9ea0e, nFileSizeHigh=0x0, nFileSizeLow=0x3473, dwReserved0=0x0, dwReserved1=0x0, cFileName="tasks.xml", cAlternateFileName="")) returned 1 [0089.953] FindNextFileW (in: hFindFile=0x381e00, lpFindFileData=0x31e404 | out: lpFindFileData=0x31e404*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd2d64214, ftCreationTime.dwHighDateTime=0x1ca0407, ftLastAccessTime.dwLowDateTime=0xd2d64214, ftLastAccessTime.dwHighDateTime=0x1ca0407, ftLastWriteTime.dwLowDateTime=0x7c219ec7, ftLastWriteTime.dwHighDateTime=0x1c9ea0e, nFileSizeHigh=0x0, nFileSizeLow=0x1b9f4, dwReserved0=0x0, dwReserved1=0x0, cFileName="wmp.ico", cAlternateFileName="")) returned 1 [0089.953] FindNextFileW (in: hFindFile=0x381e00, lpFindFileData=0x31e404 | out: lpFindFileData=0x31e404*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd2d64214, ftCreationTime.dwHighDateTime=0x1ca0407, ftLastAccessTime.dwLowDateTime=0xd2d64214, ftLastAccessTime.dwHighDateTime=0x1ca0407, ftLastWriteTime.dwLowDateTime=0x7c219ec7, ftLastWriteTime.dwHighDateTime=0x1c9ea0e, nFileSizeHigh=0x0, nFileSizeLow=0x1b9f4, dwReserved0=0x0, dwReserved1=0x0, cFileName="wmp.ico", cAlternateFileName="")) returned 0 [0089.953] FindClose (in: hFindFile=0x381e00 | out: hFindFile=0x381e00) returned 1 [0089.953] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e68c) returned 1 [0089.953] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e698) returned 1 [0089.953] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Device Stage\\Task\\{07deb856-fc6e-4fb9-8add-d8f2cf8722c9}\\resource.xml", nBufferLength=0x105, lpBuffer=0x31e0a4, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Microsoft\\Device Stage\\Task\\{07deb856-fc6e-4fb9-8add-d8f2cf8722c9}\\resource.xml", lpFilePart=0x0) returned 0x62 [0089.953] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e598) returned 1 [0089.953] CreateFileW (lpFileName="C:\\Users\\All Users\\Microsoft\\Device Stage\\Task\\{07deb856-fc6e-4fb9-8add-d8f2cf8722c9}\\resource.xml" (normalized: "c:\\users\\all users\\microsoft\\device stage\\task\\{07deb856-fc6e-4fb9-8add-d8f2cf8722c9}\\resource.xml"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x178 [0089.953] GetFileType (hFile=0x178) returned 0x1 [0089.953] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e594) returned 1 [0089.953] GetFileType (hFile=0x178) returned 0x1 [0089.953] GetFileSize (in: hFile=0x178, lpFileSizeHigh=0x31e6a0 | out: lpFileSizeHigh=0x31e6a0*=0x0) returned 0x536 [0089.953] ReadFile (in: hFile=0x178, lpBuffer=0x27af00c, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x31e64c, lpOverlapped=0x0 | out: lpBuffer=0x27af00c*, lpNumberOfBytesRead=0x31e64c*=0x536, lpOverlapped=0x0) returned 1 [0089.954] CloseHandle (hObject=0x178) returned 1 [0089.992] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Device Stage\\Task\\{07deb856-fc6e-4fb9-8add-d8f2cf8722c9}\\resource.xml", nBufferLength=0x105, lpBuffer=0x31e090, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Microsoft\\Device Stage\\Task\\{07deb856-fc6e-4fb9-8add-d8f2cf8722c9}\\resource.xml", lpFilePart=0x0) returned 0x62 [0089.992] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e584) returned 1 [0089.992] CreateFileW (lpFileName="C:\\Users\\All Users\\Microsoft\\Device Stage\\Task\\{07deb856-fc6e-4fb9-8add-d8f2cf8722c9}\\resource.xml" (normalized: "c:\\users\\all users\\microsoft\\device stage\\task\\{07deb856-fc6e-4fb9-8add-d8f2cf8722c9}\\resource.xml"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0xffffffff [0089.993] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31d3c0) returned 1 [0089.993] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e6cc) returned 1 [0089.993] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Device Stage\\Task\\{e35be42d-f742-4d96-a50a-1775fb1a7a42}", nBufferLength=0x105, lpBuffer=0x31e1d4, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Microsoft\\Device Stage\\Task\\{e35be42d-f742-4d96-a50a-1775fb1a7a42}", lpFilePart=0x0) returned 0x55 [0089.993] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Device Stage\\Task\\{e35be42d-f742-4d96-a50a-1775fb1a7a42}\\", nBufferLength=0x105, lpBuffer=0x31e1a8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Microsoft\\Device Stage\\Task\\{e35be42d-f742-4d96-a50a-1775fb1a7a42}\\", lpFilePart=0x0) returned 0x56 [0089.993] FindFirstFileW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Device Stage\\Task\\{e35be42d-f742-4d96-a50a-1775fb1a7a42}\\*", lpFindFileData=0x31e3f4 | out: lpFindFileData=0x31e3f4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd98f9f8, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x1d91b669, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x1d91b669, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x381e40 [0089.993] FindNextFileW (in: hFindFile=0x381e40, lpFindFileData=0x31e404 | out: lpFindFileData=0x31e404*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd98f9f8, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x1d91b669, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x1d91b669, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0089.993] FindNextFileW (in: hFindFile=0x381e40, lpFindFileData=0x31e404 | out: lpFindFileData=0x31e404*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1d91b669, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x22f23962, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x1d91b669, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="en-US", cAlternateFileName="")) returned 1 [0089.993] FindNextFileW (in: hFindFile=0x381e40, lpFindFileData=0x31e404 | out: lpFindFileData=0x31e404*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5f15ee9d, ftCreationTime.dwHighDateTime=0x1ca040c, ftLastAccessTime.dwLowDateTime=0x5f15ee9d, ftLastAccessTime.dwHighDateTime=0x1ca040c, ftLastWriteTime.dwLowDateTime=0xc78a2eab, ftLastWriteTime.dwHighDateTime=0x1c9ea0e, nFileSizeHigh=0x0, nFileSizeLow=0xd0a3, dwReserved0=0x0, dwReserved1=0x0, cFileName="folder.ico", cAlternateFileName="")) returned 1 [0089.993] FindNextFileW (in: hFindFile=0x381e40, lpFindFileData=0x31e404 | out: lpFindFileData=0x31e404*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5f0eca86, ftCreationTime.dwHighDateTime=0x1ca040c, ftLastAccessTime.dwLowDateTime=0x5f0eca86, ftLastAccessTime.dwHighDateTime=0x1ca040c, ftLastWriteTime.dwLowDateTime=0xc78c9009, ftLastWriteTime.dwHighDateTime=0x1c9ea0e, nFileSizeHigh=0x0, nFileSizeLow=0xe3c8, dwReserved0=0x0, dwReserved1=0x0, cFileName="print_pref.ico", cAlternateFileName="")) returned 1 [0089.994] FindNextFileW (in: hFindFile=0x381e40, lpFindFileData=0x31e404 | out: lpFindFileData=0x31e404*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5f0eca86, ftCreationTime.dwHighDateTime=0x1ca040c, ftLastAccessTime.dwLowDateTime=0x5f0eca86, ftLastAccessTime.dwHighDateTime=0x1ca040c, ftLastWriteTime.dwLowDateTime=0xc78c9009, ftLastWriteTime.dwHighDateTime=0x1c9ea0e, nFileSizeHigh=0x0, nFileSizeLow=0xebb8, dwReserved0=0x0, dwReserved1=0x0, cFileName="print_property.ico", cAlternateFileName="")) returned 1 [0089.994] FindNextFileW (in: hFindFile=0x381e40, lpFindFileData=0x31e404 | out: lpFindFileData=0x31e404*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5f112be3, ftCreationTime.dwHighDateTime=0x1ca040c, ftLastAccessTime.dwLowDateTime=0x5f112be3, ftLastAccessTime.dwHighDateTime=0x1ca040c, ftLastWriteTime.dwLowDateTime=0xc7be8cbf, ftLastWriteTime.dwHighDateTime=0x1c9ea0e, nFileSizeHigh=0x0, nFileSizeLow=0xdff5, dwReserved0=0x0, dwReserved1=0x0, cFileName="print_queue.ico", cAlternateFileName="")) returned 1 [0089.994] FindNextFileW (in: hFindFile=0x381e40, lpFindFileData=0x31e404 | out: lpFindFileData=0x31e404*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5f138d40, ftCreationTime.dwHighDateTime=0x1ca040c, ftLastAccessTime.dwLowDateTime=0x5f138d40, ftLastAccessTime.dwHighDateTime=0x1ca040c, ftLastWriteTime.dwLowDateTime=0xc7c0ee1d, ftLastWriteTime.dwHighDateTime=0x1c9ea0e, nFileSizeHigh=0x0, nFileSizeLow=0xec75, dwReserved0=0x0, dwReserved1=0x0, cFileName="scan_.ico", cAlternateFileName="")) returned 1 [0089.994] FindNextFileW (in: hFindFile=0x381e40, lpFindFileData=0x31e404 | out: lpFindFileData=0x31e404*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5f15ee9d, ftCreationTime.dwHighDateTime=0x1ca040c, ftLastAccessTime.dwLowDateTime=0x5f15ee9d, ftLastAccessTime.dwHighDateTime=0x1ca040c, ftLastWriteTime.dwLowDateTime=0xc7c0ee1d, ftLastWriteTime.dwHighDateTime=0x1c9ea0e, nFileSizeHigh=0x0, nFileSizeLow=0x10654, dwReserved0=0x0, dwReserved1=0x0, cFileName="scan_property.ico", cAlternateFileName="")) returned 1 [0089.994] FindNextFileW (in: hFindFile=0x381e40, lpFindFileData=0x31e404 | out: lpFindFileData=0x31e404*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5f138d40, ftCreationTime.dwHighDateTime=0x1ca040c, ftLastAccessTime.dwLowDateTime=0x5f138d40, ftLastAccessTime.dwHighDateTime=0x1ca040c, ftLastWriteTime.dwLowDateTime=0xc7c34f7b, ftLastWriteTime.dwHighDateTime=0x1c9ea0e, nFileSizeHigh=0x0, nFileSizeLow=0xf8c2, dwReserved0=0x0, dwReserved1=0x0, cFileName="scan_settings.ico", cAlternateFileName="")) returned 1 [0089.994] FindNextFileW (in: hFindFile=0x381e40, lpFindFileData=0x31e404 | out: lpFindFileData=0x31e404*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5f054512, ftCreationTime.dwHighDateTime=0x1ca040c, ftLastAccessTime.dwLowDateTime=0x5f054512, ftLastAccessTime.dwHighDateTime=0x1ca040c, ftLastWriteTime.dwLowDateTime=0xc7d3f90d, ftLastWriteTime.dwHighDateTime=0x1c9ea0e, nFileSizeHigh=0x0, nFileSizeLow=0x2c64, dwReserved0=0x0, dwReserved1=0x0, cFileName="tasks.xml", cAlternateFileName="")) returned 1 [0089.994] FindNextFileW (in: hFindFile=0x381e40, lpFindFileData=0x31e404 | out: lpFindFileData=0x31e404*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0089.994] FindClose (in: hFindFile=0x381e40 | out: hFindFile=0x381e40) returned 1 [0089.994] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e68c) returned 1 [0089.994] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e698) returned 1 [0089.994] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e6cc) returned 1 [0089.994] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Device Stage\\Task\\{e35be42d-f742-4d96-a50a-1775fb1a7a42}", nBufferLength=0x105, lpBuffer=0x31e1d4, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Microsoft\\Device Stage\\Task\\{e35be42d-f742-4d96-a50a-1775fb1a7a42}", lpFilePart=0x0) returned 0x55 [0089.994] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Device Stage\\Task\\{e35be42d-f742-4d96-a50a-1775fb1a7a42}\\", nBufferLength=0x105, lpBuffer=0x31e1a8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Microsoft\\Device Stage\\Task\\{e35be42d-f742-4d96-a50a-1775fb1a7a42}\\", lpFilePart=0x0) returned 0x56 [0089.995] FindFirstFileW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Device Stage\\Task\\{e35be42d-f742-4d96-a50a-1775fb1a7a42}\\*", lpFindFileData=0x31e3f4 | out: lpFindFileData=0x31e3f4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd98f9f8, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x1d91b669, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x1d91b669, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x381e40 [0089.995] FindNextFileW (in: hFindFile=0x381e40, lpFindFileData=0x31e404 | out: lpFindFileData=0x31e404*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd98f9f8, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x1d91b669, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x1d91b669, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0089.995] FindNextFileW (in: hFindFile=0x381e40, lpFindFileData=0x31e404 | out: lpFindFileData=0x31e404*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1d91b669, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x22f23962, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x1d91b669, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="en-US", cAlternateFileName="")) returned 1 [0089.995] FindNextFileW (in: hFindFile=0x381e40, lpFindFileData=0x31e404 | out: lpFindFileData=0x31e404*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5f15ee9d, ftCreationTime.dwHighDateTime=0x1ca040c, ftLastAccessTime.dwLowDateTime=0x5f15ee9d, ftLastAccessTime.dwHighDateTime=0x1ca040c, ftLastWriteTime.dwLowDateTime=0xc78a2eab, ftLastWriteTime.dwHighDateTime=0x1c9ea0e, nFileSizeHigh=0x0, nFileSizeLow=0xd0a3, dwReserved0=0x0, dwReserved1=0x0, cFileName="folder.ico", cAlternateFileName="")) returned 1 [0089.995] FindNextFileW (in: hFindFile=0x381e40, lpFindFileData=0x31e404 | out: lpFindFileData=0x31e404*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5f0eca86, ftCreationTime.dwHighDateTime=0x1ca040c, ftLastAccessTime.dwLowDateTime=0x5f0eca86, ftLastAccessTime.dwHighDateTime=0x1ca040c, ftLastWriteTime.dwLowDateTime=0xc78c9009, ftLastWriteTime.dwHighDateTime=0x1c9ea0e, nFileSizeHigh=0x0, nFileSizeLow=0xe3c8, dwReserved0=0x0, dwReserved1=0x0, cFileName="print_pref.ico", cAlternateFileName="")) returned 1 [0089.995] FindNextFileW (in: hFindFile=0x381e40, lpFindFileData=0x31e404 | out: lpFindFileData=0x31e404*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5f0eca86, ftCreationTime.dwHighDateTime=0x1ca040c, ftLastAccessTime.dwLowDateTime=0x5f0eca86, ftLastAccessTime.dwHighDateTime=0x1ca040c, ftLastWriteTime.dwLowDateTime=0xc78c9009, ftLastWriteTime.dwHighDateTime=0x1c9ea0e, nFileSizeHigh=0x0, nFileSizeLow=0xebb8, dwReserved0=0x0, dwReserved1=0x0, cFileName="print_property.ico", cAlternateFileName="")) returned 1 [0089.995] FindNextFileW (in: hFindFile=0x381e40, lpFindFileData=0x31e404 | out: lpFindFileData=0x31e404*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5f112be3, ftCreationTime.dwHighDateTime=0x1ca040c, ftLastAccessTime.dwLowDateTime=0x5f112be3, ftLastAccessTime.dwHighDateTime=0x1ca040c, ftLastWriteTime.dwLowDateTime=0xc7be8cbf, ftLastWriteTime.dwHighDateTime=0x1c9ea0e, nFileSizeHigh=0x0, nFileSizeLow=0xdff5, dwReserved0=0x0, dwReserved1=0x0, cFileName="print_queue.ico", cAlternateFileName="")) returned 1 [0089.995] FindNextFileW (in: hFindFile=0x381e40, lpFindFileData=0x31e404 | out: lpFindFileData=0x31e404*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5f138d40, ftCreationTime.dwHighDateTime=0x1ca040c, ftLastAccessTime.dwLowDateTime=0x5f138d40, ftLastAccessTime.dwHighDateTime=0x1ca040c, ftLastWriteTime.dwLowDateTime=0xc7c0ee1d, ftLastWriteTime.dwHighDateTime=0x1c9ea0e, nFileSizeHigh=0x0, nFileSizeLow=0xec75, dwReserved0=0x0, dwReserved1=0x0, cFileName="scan_.ico", cAlternateFileName="")) returned 1 [0089.996] FindNextFileW (in: hFindFile=0x381e40, lpFindFileData=0x31e404 | out: lpFindFileData=0x31e404*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5f15ee9d, ftCreationTime.dwHighDateTime=0x1ca040c, ftLastAccessTime.dwLowDateTime=0x5f15ee9d, ftLastAccessTime.dwHighDateTime=0x1ca040c, ftLastWriteTime.dwLowDateTime=0xc7c0ee1d, ftLastWriteTime.dwHighDateTime=0x1c9ea0e, nFileSizeHigh=0x0, nFileSizeLow=0x10654, dwReserved0=0x0, dwReserved1=0x0, cFileName="scan_property.ico", cAlternateFileName="")) returned 1 [0089.996] FindNextFileW (in: hFindFile=0x381e40, lpFindFileData=0x31e404 | out: lpFindFileData=0x31e404*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5f138d40, ftCreationTime.dwHighDateTime=0x1ca040c, ftLastAccessTime.dwLowDateTime=0x5f138d40, ftLastAccessTime.dwHighDateTime=0x1ca040c, ftLastWriteTime.dwLowDateTime=0xc7c34f7b, ftLastWriteTime.dwHighDateTime=0x1c9ea0e, nFileSizeHigh=0x0, nFileSizeLow=0xf8c2, dwReserved0=0x0, dwReserved1=0x0, cFileName="scan_settings.ico", cAlternateFileName="")) returned 1 [0089.996] FindNextFileW (in: hFindFile=0x381e40, lpFindFileData=0x31e404 | out: lpFindFileData=0x31e404*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5f054512, ftCreationTime.dwHighDateTime=0x1ca040c, ftLastAccessTime.dwLowDateTime=0x5f054512, ftLastAccessTime.dwHighDateTime=0x1ca040c, ftLastWriteTime.dwLowDateTime=0xc7d3f90d, ftLastWriteTime.dwHighDateTime=0x1c9ea0e, nFileSizeHigh=0x0, nFileSizeLow=0x2c64, dwReserved0=0x0, dwReserved1=0x0, cFileName="tasks.xml", cAlternateFileName="")) returned 1 [0089.996] FindNextFileW (in: hFindFile=0x381e40, lpFindFileData=0x31e404 | out: lpFindFileData=0x31e404*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5f054512, ftCreationTime.dwHighDateTime=0x1ca040c, ftLastAccessTime.dwLowDateTime=0x5f054512, ftLastAccessTime.dwHighDateTime=0x1ca040c, ftLastWriteTime.dwLowDateTime=0xc7d3f90d, ftLastWriteTime.dwHighDateTime=0x1c9ea0e, nFileSizeHigh=0x0, nFileSizeLow=0x2c64, dwReserved0=0x0, dwReserved1=0x0, cFileName="tasks.xml", cAlternateFileName="")) returned 0 [0089.996] FindClose (in: hFindFile=0x381e40 | out: hFindFile=0x381e40) returned 1 [0089.996] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e68c) returned 1 [0089.996] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e698) returned 1 [0089.996] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Device Stage\\Task\\{e35be42d-f742-4d96-a50a-1775fb1a7a42}\\tasks.xml", nBufferLength=0x105, lpBuffer=0x31e0a4, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Microsoft\\Device Stage\\Task\\{e35be42d-f742-4d96-a50a-1775fb1a7a42}\\tasks.xml", lpFilePart=0x0) returned 0x5f [0089.996] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e598) returned 1 [0089.996] CreateFileW (lpFileName="C:\\Users\\All Users\\Microsoft\\Device Stage\\Task\\{e35be42d-f742-4d96-a50a-1775fb1a7a42}\\tasks.xml" (normalized: "c:\\users\\all users\\microsoft\\device stage\\task\\{e35be42d-f742-4d96-a50a-1775fb1a7a42}\\tasks.xml"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x178 [0089.996] GetFileType (hFile=0x178) returned 0x1 [0089.996] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e594) returned 1 [0089.997] GetFileType (hFile=0x178) returned 0x1 [0089.997] GetFileSize (in: hFile=0x178, lpFileSizeHigh=0x31e6a0 | out: lpFileSizeHigh=0x31e6a0*=0x0) returned 0x2c64 [0089.997] ReadFile (in: hFile=0x178, lpBuffer=0x2802e6c, nNumberOfBytesToRead=0x2c64, lpNumberOfBytesRead=0x31e64c, lpOverlapped=0x0 | out: lpBuffer=0x2802e6c*, lpNumberOfBytesRead=0x31e64c*=0x2c64, lpOverlapped=0x0) returned 1 [0089.997] CloseHandle (hObject=0x178) returned 1 [0090.037] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Device Stage\\Task\\{e35be42d-f742-4d96-a50a-1775fb1a7a42}\\tasks.xml", nBufferLength=0x105, lpBuffer=0x31e090, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Microsoft\\Device Stage\\Task\\{e35be42d-f742-4d96-a50a-1775fb1a7a42}\\tasks.xml", lpFilePart=0x0) returned 0x5f [0090.037] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e584) returned 1 [0090.037] CreateFileW (lpFileName="C:\\Users\\All Users\\Microsoft\\Device Stage\\Task\\{e35be42d-f742-4d96-a50a-1775fb1a7a42}\\tasks.xml" (normalized: "c:\\users\\all users\\microsoft\\device stage\\task\\{e35be42d-f742-4d96-a50a-1775fb1a7a42}\\tasks.xml"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0xffffffff [0090.038] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31d3c0) returned 1 [0090.038] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e7bc) returned 1 [0090.038] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\DeviceSync", nBufferLength=0x105, lpBuffer=0x31e2c4, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Microsoft\\DeviceSync", lpFilePart=0x0) returned 0x27 [0090.038] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\DeviceSync\\", nBufferLength=0x105, lpBuffer=0x31e298, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Microsoft\\DeviceSync\\", lpFilePart=0x0) returned 0x28 [0090.038] FindFirstFileW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\DeviceSync\\*", lpFindFileData=0x31e4e4 | out: lpFindFileData=0x31e4e4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd98f9f8, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd98f9f8, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xd789d88f, ftLastWriteTime.dwHighDateTime=0x1ca042b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x381f00 [0090.039] FindNextFileW (in: hFindFile=0x381f00, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd98f9f8, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd98f9f8, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xd789d88f, ftLastWriteTime.dwHighDateTime=0x1ca042b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0090.039] FindNextFileW (in: hFindFile=0x381f00, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd98f9f8, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd98f9f8, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xd789d88f, ftLastWriteTime.dwHighDateTime=0x1ca042b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 0 [0090.039] FindClose (in: hFindFile=0x381f00 | out: hFindFile=0x381f00) returned 1 [0090.039] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e77c) returned 1 [0090.039] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e788) returned 1 [0090.039] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e7bc) returned 1 [0090.039] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\DeviceSync", nBufferLength=0x105, lpBuffer=0x31e2c4, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Microsoft\\DeviceSync", lpFilePart=0x0) returned 0x27 [0090.040] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\DeviceSync\\", nBufferLength=0x105, lpBuffer=0x31e298, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Microsoft\\DeviceSync\\", lpFilePart=0x0) returned 0x28 [0090.040] FindFirstFileW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\DeviceSync\\*", lpFindFileData=0x31e4e4 | out: lpFindFileData=0x31e4e4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd98f9f8, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd98f9f8, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xd789d88f, ftLastWriteTime.dwHighDateTime=0x1ca042b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x381f00 [0090.040] FindNextFileW (in: hFindFile=0x381f00, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd98f9f8, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd98f9f8, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xd789d88f, ftLastWriteTime.dwHighDateTime=0x1ca042b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0090.040] FindNextFileW (in: hFindFile=0x381f00, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd98f9f8, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd98f9f8, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xd789d88f, ftLastWriteTime.dwHighDateTime=0x1ca042b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 0 [0090.040] FindClose (in: hFindFile=0x381f00 | out: hFindFile=0x381f00) returned 1 [0090.040] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e77c) returned 1 [0090.040] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e788) returned 1 [0090.040] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e7bc) returned 1 [0090.040] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\DRM", nBufferLength=0x105, lpBuffer=0x31e2c4, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Microsoft\\DRM", lpFilePart=0x0) returned 0x20 [0090.040] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\DRM\\", nBufferLength=0x105, lpBuffer=0x31e298, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Microsoft\\DRM\\", lpFilePart=0x0) returned 0x21 [0090.040] FindFirstFileW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\DRM\\*", lpFindFileData=0x31e4e4 | out: lpFindFileData=0x31e4e4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xfd98f9f8, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd98f9f8, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xfd98f9f8, ftLastWriteTime.dwHighDateTime=0x1ca0431, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x381f00 [0090.041] FindNextFileW (in: hFindFile=0x381f00, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xfd98f9f8, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd98f9f8, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xfd98f9f8, ftLastWriteTime.dwHighDateTime=0x1ca0431, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0090.041] FindNextFileW (in: hFindFile=0x381f00, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x16, ftCreationTime.dwLowDateTime=0xfd98f9f8, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd98f9f8, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xba6f6d7d, ftLastWriteTime.dwHighDateTime=0x1ca042b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Server", cAlternateFileName="")) returned 1 [0090.041] FindNextFileW (in: hFindFile=0x381f00, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x16, ftCreationTime.dwLowDateTime=0xfd98f9f8, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd98f9f8, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xba6f6d7d, ftLastWriteTime.dwHighDateTime=0x1ca042b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Server", cAlternateFileName="")) returned 0 [0090.041] FindClose (in: hFindFile=0x381f00 | out: hFindFile=0x381f00) returned 1 [0090.041] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e77c) returned 1 [0090.041] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e788) returned 1 [0090.041] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e7bc) returned 1 [0090.041] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\DRM", nBufferLength=0x105, lpBuffer=0x31e2c4, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Microsoft\\DRM", lpFilePart=0x0) returned 0x20 [0090.041] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\DRM\\", nBufferLength=0x105, lpBuffer=0x31e298, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Microsoft\\DRM\\", lpFilePart=0x0) returned 0x21 [0090.041] FindFirstFileW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\DRM\\*", lpFindFileData=0x31e4e4 | out: lpFindFileData=0x31e4e4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xfd98f9f8, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd98f9f8, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xfd98f9f8, ftLastWriteTime.dwHighDateTime=0x1ca0431, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x381f00 [0090.041] FindNextFileW (in: hFindFile=0x381f00, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xfd98f9f8, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd98f9f8, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xfd98f9f8, ftLastWriteTime.dwHighDateTime=0x1ca0431, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0090.041] FindNextFileW (in: hFindFile=0x381f00, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x16, ftCreationTime.dwLowDateTime=0xfd98f9f8, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd98f9f8, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xba6f6d7d, ftLastWriteTime.dwHighDateTime=0x1ca042b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Server", cAlternateFileName="")) returned 1 [0090.042] FindNextFileW (in: hFindFile=0x381f00, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0090.042] FindClose (in: hFindFile=0x381f00 | out: hFindFile=0x381f00) returned 1 [0090.042] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e77c) returned 1 [0090.042] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e788) returned 1 [0090.042] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e744) returned 1 [0090.042] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\DRM\\Server", nBufferLength=0x105, lpBuffer=0x31e24c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Microsoft\\DRM\\Server", lpFilePart=0x0) returned 0x27 [0090.042] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\DRM\\Server\\", nBufferLength=0x105, lpBuffer=0x31e220, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Microsoft\\DRM\\Server\\", lpFilePart=0x0) returned 0x28 [0090.042] FindFirstFileW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\DRM\\Server\\*", lpFindFileData=0x31e46c | out: lpFindFileData=0x31e46c*(dwFileAttributes=0x16, ftCreationTime.dwLowDateTime=0xfd98f9f8, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd98f9f8, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xba6f6d7d, ftLastWriteTime.dwHighDateTime=0x1ca042b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x381f00 [0090.042] FindNextFileW (in: hFindFile=0x381f00, lpFindFileData=0x31e47c | out: lpFindFileData=0x31e47c*(dwFileAttributes=0x16, ftCreationTime.dwLowDateTime=0xfd98f9f8, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd98f9f8, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xba6f6d7d, ftLastWriteTime.dwHighDateTime=0x1ca042b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0090.042] FindNextFileW (in: hFindFile=0x381f00, lpFindFileData=0x31e47c | out: lpFindFileData=0x31e47c*(dwFileAttributes=0x16, ftCreationTime.dwLowDateTime=0xfd98f9f8, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd98f9f8, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xba6f6d7d, ftLastWriteTime.dwHighDateTime=0x1ca042b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 0 [0090.042] FindClose (in: hFindFile=0x381f00 | out: hFindFile=0x381f00) returned 1 [0090.042] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e704) returned 1 [0090.042] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e710) returned 1 [0090.043] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e744) returned 1 [0090.043] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\DRM\\Server", nBufferLength=0x105, lpBuffer=0x31e24c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Microsoft\\DRM\\Server", lpFilePart=0x0) returned 0x27 [0090.043] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\DRM\\Server\\", nBufferLength=0x105, lpBuffer=0x31e220, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Microsoft\\DRM\\Server\\", lpFilePart=0x0) returned 0x28 [0090.043] FindFirstFileW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\DRM\\Server\\*", lpFindFileData=0x31e46c | out: lpFindFileData=0x31e46c*(dwFileAttributes=0x16, ftCreationTime.dwLowDateTime=0xfd98f9f8, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd98f9f8, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xba6f6d7d, ftLastWriteTime.dwHighDateTime=0x1ca042b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x381f00 [0090.043] FindNextFileW (in: hFindFile=0x381f00, lpFindFileData=0x31e47c | out: lpFindFileData=0x31e47c*(dwFileAttributes=0x16, ftCreationTime.dwLowDateTime=0xfd98f9f8, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd98f9f8, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xba6f6d7d, ftLastWriteTime.dwHighDateTime=0x1ca042b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0090.043] FindNextFileW (in: hFindFile=0x381f00, lpFindFileData=0x31e47c | out: lpFindFileData=0x31e47c*(dwFileAttributes=0x16, ftCreationTime.dwLowDateTime=0xfd98f9f8, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd98f9f8, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xba6f6d7d, ftLastWriteTime.dwHighDateTime=0x1ca042b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 0 [0090.043] FindClose (in: hFindFile=0x381f00 | out: hFindFile=0x381f00) returned 1 [0090.043] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e704) returned 1 [0090.043] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e710) returned 1 [0090.043] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e7bc) returned 1 [0090.043] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\eHome", nBufferLength=0x105, lpBuffer=0x31e2c4, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Microsoft\\eHome", lpFilePart=0x0) returned 0x22 [0090.043] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\eHome\\", nBufferLength=0x105, lpBuffer=0x31e298, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Microsoft\\eHome\\", lpFilePart=0x0) returned 0x23 [0090.044] FindFirstFileW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\eHome\\*", lpFindFileData=0x31e4e4 | out: lpFindFileData=0x31e4e4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x9182055d, ftCreationTime.dwHighDateTime=0x1cbf8eb, ftLastAccessTime.dwLowDateTime=0xaa597fc2, ftLastAccessTime.dwHighDateTime=0x1cbf8eb, ftLastWriteTime.dwLowDateTime=0x9182055d, ftLastWriteTime.dwHighDateTime=0x1cbf8eb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x381f00 [0090.044] FindNextFileW (in: hFindFile=0x381f00, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x9182055d, ftCreationTime.dwHighDateTime=0x1cbf8eb, ftLastAccessTime.dwLowDateTime=0xaa597fc2, ftLastAccessTime.dwHighDateTime=0x1cbf8eb, ftLastWriteTime.dwLowDateTime=0x9182055d, ftLastWriteTime.dwHighDateTime=0x1cbf8eb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0090.044] FindNextFileW (in: hFindFile=0x381f00, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x9182055d, ftCreationTime.dwHighDateTime=0x1cbf8eb, ftLastAccessTime.dwLowDateTime=0xaa597fc2, ftLastAccessTime.dwHighDateTime=0x1cbf8eb, ftLastWriteTime.dwLowDateTime=0x9182055d, ftLastWriteTime.dwHighDateTime=0x1cbf8eb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="logs", cAlternateFileName="")) returned 1 [0090.044] FindNextFileW (in: hFindFile=0x381f00, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x9182055d, ftCreationTime.dwHighDateTime=0x1cbf8eb, ftLastAccessTime.dwLowDateTime=0xaa597fc2, ftLastAccessTime.dwHighDateTime=0x1cbf8eb, ftLastWriteTime.dwLowDateTime=0x9182055d, ftLastWriteTime.dwHighDateTime=0x1cbf8eb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="logs", cAlternateFileName="")) returned 0 [0090.044] FindClose (in: hFindFile=0x381f00 | out: hFindFile=0x381f00) returned 1 [0090.044] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e77c) returned 1 [0090.044] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e788) returned 1 [0090.044] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e7bc) returned 1 [0090.044] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\eHome", nBufferLength=0x105, lpBuffer=0x31e2c4, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Microsoft\\eHome", lpFilePart=0x0) returned 0x22 [0090.044] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\eHome\\", nBufferLength=0x105, lpBuffer=0x31e298, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Microsoft\\eHome\\", lpFilePart=0x0) returned 0x23 [0090.044] FindFirstFileW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\eHome\\*", lpFindFileData=0x31e4e4 | out: lpFindFileData=0x31e4e4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x9182055d, ftCreationTime.dwHighDateTime=0x1cbf8eb, ftLastAccessTime.dwLowDateTime=0xaa597fc2, ftLastAccessTime.dwHighDateTime=0x1cbf8eb, ftLastWriteTime.dwLowDateTime=0x9182055d, ftLastWriteTime.dwHighDateTime=0x1cbf8eb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x381f00 [0090.045] FindNextFileW (in: hFindFile=0x381f00, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x9182055d, ftCreationTime.dwHighDateTime=0x1cbf8eb, ftLastAccessTime.dwLowDateTime=0xaa597fc2, ftLastAccessTime.dwHighDateTime=0x1cbf8eb, ftLastWriteTime.dwLowDateTime=0x9182055d, ftLastWriteTime.dwHighDateTime=0x1cbf8eb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0090.045] FindNextFileW (in: hFindFile=0x381f00, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x9182055d, ftCreationTime.dwHighDateTime=0x1cbf8eb, ftLastAccessTime.dwLowDateTime=0xaa597fc2, ftLastAccessTime.dwHighDateTime=0x1cbf8eb, ftLastWriteTime.dwLowDateTime=0x9182055d, ftLastWriteTime.dwHighDateTime=0x1cbf8eb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="logs", cAlternateFileName="")) returned 1 [0090.045] FindNextFileW (in: hFindFile=0x381f00, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0090.045] FindClose (in: hFindFile=0x381f00 | out: hFindFile=0x381f00) returned 1 [0090.045] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e77c) returned 1 [0090.045] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e788) returned 1 [0090.045] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e744) returned 1 [0090.045] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\eHome\\logs", nBufferLength=0x105, lpBuffer=0x31e24c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Microsoft\\eHome\\logs", lpFilePart=0x0) returned 0x27 [0090.045] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\eHome\\logs\\", nBufferLength=0x105, lpBuffer=0x31e220, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Microsoft\\eHome\\logs\\", lpFilePart=0x0) returned 0x28 [0090.045] FindFirstFileW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\eHome\\logs\\*", lpFindFileData=0x31e46c | out: lpFindFileData=0x31e46c*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x9182055d, ftCreationTime.dwHighDateTime=0x1cbf8eb, ftLastAccessTime.dwLowDateTime=0xaa597fc2, ftLastAccessTime.dwHighDateTime=0x1cbf8eb, ftLastWriteTime.dwLowDateTime=0x9182055d, ftLastWriteTime.dwHighDateTime=0x1cbf8eb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x381f00 [0090.046] FindNextFileW (in: hFindFile=0x381f00, lpFindFileData=0x31e47c | out: lpFindFileData=0x31e47c*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x9182055d, ftCreationTime.dwHighDateTime=0x1cbf8eb, ftLastAccessTime.dwLowDateTime=0xaa597fc2, ftLastAccessTime.dwHighDateTime=0x1cbf8eb, ftLastWriteTime.dwLowDateTime=0x9182055d, ftLastWriteTime.dwHighDateTime=0x1cbf8eb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0090.046] FindNextFileW (in: hFindFile=0x381f00, lpFindFileData=0x31e47c | out: lpFindFileData=0x31e47c*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x9182055d, ftCreationTime.dwHighDateTime=0x1cbf8eb, ftLastAccessTime.dwLowDateTime=0xaa597fc2, ftLastAccessTime.dwHighDateTime=0x1cbf8eb, ftLastWriteTime.dwLowDateTime=0x9182055d, ftLastWriteTime.dwHighDateTime=0x1cbf8eb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 0 [0090.046] FindClose (in: hFindFile=0x381f00 | out: hFindFile=0x381f00) returned 1 [0090.046] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e704) returned 1 [0090.046] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e710) returned 1 [0090.046] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e744) returned 1 [0090.046] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\eHome\\logs", nBufferLength=0x105, lpBuffer=0x31e24c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Microsoft\\eHome\\logs", lpFilePart=0x0) returned 0x27 [0090.046] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\eHome\\logs\\", nBufferLength=0x105, lpBuffer=0x31e220, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Microsoft\\eHome\\logs\\", lpFilePart=0x0) returned 0x28 [0090.046] FindFirstFileW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\eHome\\logs\\*", lpFindFileData=0x31e46c | out: lpFindFileData=0x31e46c*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x9182055d, ftCreationTime.dwHighDateTime=0x1cbf8eb, ftLastAccessTime.dwLowDateTime=0xaa597fc2, ftLastAccessTime.dwHighDateTime=0x1cbf8eb, ftLastWriteTime.dwLowDateTime=0x9182055d, ftLastWriteTime.dwHighDateTime=0x1cbf8eb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x381f00 [0090.046] FindNextFileW (in: hFindFile=0x381f00, lpFindFileData=0x31e47c | out: lpFindFileData=0x31e47c*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x9182055d, ftCreationTime.dwHighDateTime=0x1cbf8eb, ftLastAccessTime.dwLowDateTime=0xaa597fc2, ftLastAccessTime.dwHighDateTime=0x1cbf8eb, ftLastWriteTime.dwLowDateTime=0x9182055d, ftLastWriteTime.dwHighDateTime=0x1cbf8eb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0090.046] FindNextFileW (in: hFindFile=0x381f00, lpFindFileData=0x31e47c | out: lpFindFileData=0x31e47c*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x9182055d, ftCreationTime.dwHighDateTime=0x1cbf8eb, ftLastAccessTime.dwLowDateTime=0xaa597fc2, ftLastAccessTime.dwHighDateTime=0x1cbf8eb, ftLastWriteTime.dwLowDateTime=0x9182055d, ftLastWriteTime.dwHighDateTime=0x1cbf8eb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 0 [0090.047] FindClose (in: hFindFile=0x381f00 | out: hFindFile=0x381f00) returned 1 [0090.047] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e704) returned 1 [0090.047] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e710) returned 1 [0090.047] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e7bc) returned 1 [0090.047] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Event Viewer", nBufferLength=0x105, lpBuffer=0x31e2c4, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Microsoft\\Event Viewer", lpFilePart=0x0) returned 0x29 [0090.047] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Event Viewer\\", nBufferLength=0x105, lpBuffer=0x31e298, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Microsoft\\Event Viewer\\", lpFilePart=0x0) returned 0x2a [0090.047] FindFirstFileW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Event Viewer\\*", lpFindFileData=0x31e4e4 | out: lpFindFileData=0x31e4e4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x3235c810, ftCreationTime.dwHighDateTime=0x1d2fa9b, ftLastAccessTime.dwLowDateTime=0x3a6c7630, ftLastAccessTime.dwHighDateTime=0x1d3aaba, ftLastWriteTime.dwLowDateTime=0x3a6c7630, ftLastWriteTime.dwHighDateTime=0x1d3aaba, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x381f00 [0090.047] FindNextFileW (in: hFindFile=0x381f00, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x3235c810, ftCreationTime.dwHighDateTime=0x1d2fa9b, ftLastAccessTime.dwLowDateTime=0x3a6c7630, ftLastAccessTime.dwHighDateTime=0x1d3aaba, ftLastWriteTime.dwLowDateTime=0x3a6c7630, ftLastWriteTime.dwHighDateTime=0x1d3aaba, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0090.047] FindNextFileW (in: hFindFile=0x381f00, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x3235c810, ftCreationTime.dwHighDateTime=0x1d2fa9b, ftLastAccessTime.dwLowDateTime=0x3235c810, ftLastAccessTime.dwHighDateTime=0x1d2fa9b, ftLastWriteTime.dwLowDateTime=0x3235c810, ftLastWriteTime.dwHighDateTime=0x1d2fa9b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Views", cAlternateFileName="")) returned 1 [0090.047] FindNextFileW (in: hFindFile=0x381f00, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x3235c810, ftCreationTime.dwHighDateTime=0x1d2fa9b, ftLastAccessTime.dwLowDateTime=0x3235c810, ftLastAccessTime.dwHighDateTime=0x1d2fa9b, ftLastWriteTime.dwLowDateTime=0x3235c810, ftLastWriteTime.dwHighDateTime=0x1d2fa9b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Views", cAlternateFileName="")) returned 0 [0090.048] FindClose (in: hFindFile=0x381f00 | out: hFindFile=0x381f00) returned 1 [0090.048] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e77c) returned 1 [0090.048] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e788) returned 1 [0090.048] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e7bc) returned 1 [0090.048] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Event Viewer", nBufferLength=0x105, lpBuffer=0x31e2c4, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Microsoft\\Event Viewer", lpFilePart=0x0) returned 0x29 [0090.048] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Event Viewer\\", nBufferLength=0x105, lpBuffer=0x31e298, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Microsoft\\Event Viewer\\", lpFilePart=0x0) returned 0x2a [0090.048] FindFirstFileW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Event Viewer\\*", lpFindFileData=0x31e4e4 | out: lpFindFileData=0x31e4e4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x3235c810, ftCreationTime.dwHighDateTime=0x1d2fa9b, ftLastAccessTime.dwLowDateTime=0x3a6c7630, ftLastAccessTime.dwHighDateTime=0x1d3aaba, ftLastWriteTime.dwLowDateTime=0x3a6c7630, ftLastWriteTime.dwHighDateTime=0x1d3aaba, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x381f00 [0090.048] FindNextFileW (in: hFindFile=0x381f00, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x3235c810, ftCreationTime.dwHighDateTime=0x1d2fa9b, ftLastAccessTime.dwLowDateTime=0x3a6c7630, ftLastAccessTime.dwHighDateTime=0x1d3aaba, ftLastWriteTime.dwLowDateTime=0x3a6c7630, ftLastWriteTime.dwHighDateTime=0x1d3aaba, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0090.048] FindNextFileW (in: hFindFile=0x381f00, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x3235c810, ftCreationTime.dwHighDateTime=0x1d2fa9b, ftLastAccessTime.dwLowDateTime=0x3235c810, ftLastAccessTime.dwHighDateTime=0x1d2fa9b, ftLastWriteTime.dwLowDateTime=0x3235c810, ftLastWriteTime.dwHighDateTime=0x1d2fa9b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Views", cAlternateFileName="")) returned 1 [0090.048] FindNextFileW (in: hFindFile=0x381f00, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0090.048] FindClose (in: hFindFile=0x381f00 | out: hFindFile=0x381f00) returned 1 [0090.048] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e77c) returned 1 [0090.048] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e788) returned 1 [0090.048] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e744) returned 1 [0090.048] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Event Viewer\\Views", nBufferLength=0x105, lpBuffer=0x31e24c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Microsoft\\Event Viewer\\Views", lpFilePart=0x0) returned 0x2f [0090.049] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Event Viewer\\Views\\", nBufferLength=0x105, lpBuffer=0x31e220, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Microsoft\\Event Viewer\\Views\\", lpFilePart=0x0) returned 0x30 [0090.049] FindFirstFileW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Event Viewer\\Views\\*", lpFindFileData=0x31e46c | out: lpFindFileData=0x31e46c*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x3235c810, ftCreationTime.dwHighDateTime=0x1d2fa9b, ftLastAccessTime.dwLowDateTime=0x3235c810, ftLastAccessTime.dwHighDateTime=0x1d2fa9b, ftLastWriteTime.dwLowDateTime=0x3235c810, ftLastWriteTime.dwHighDateTime=0x1d2fa9b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x381f00 [0090.049] FindNextFileW (in: hFindFile=0x381f00, lpFindFileData=0x31e47c | out: lpFindFileData=0x31e47c*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x3235c810, ftCreationTime.dwHighDateTime=0x1d2fa9b, ftLastAccessTime.dwLowDateTime=0x3235c810, ftLastAccessTime.dwHighDateTime=0x1d2fa9b, ftLastWriteTime.dwLowDateTime=0x3235c810, ftLastWriteTime.dwHighDateTime=0x1d2fa9b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0090.049] FindNextFileW (in: hFindFile=0x381f00, lpFindFileData=0x31e47c | out: lpFindFileData=0x31e47c*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x3235c810, ftCreationTime.dwHighDateTime=0x1d2fa9b, ftLastAccessTime.dwLowDateTime=0x3235c810, ftLastAccessTime.dwHighDateTime=0x1d2fa9b, ftLastWriteTime.dwLowDateTime=0x3235c810, ftLastWriteTime.dwHighDateTime=0x1d2fa9b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="ApplicationViewsRootNode", cAlternateFileName="APPLIC~1")) returned 1 [0090.049] FindNextFileW (in: hFindFile=0x381f00, lpFindFileData=0x31e47c | out: lpFindFileData=0x31e47c*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x3235c810, ftCreationTime.dwHighDateTime=0x1d2fa9b, ftLastAccessTime.dwLowDateTime=0x3235c810, ftLastAccessTime.dwHighDateTime=0x1d2fa9b, ftLastWriteTime.dwLowDateTime=0x3235c810, ftLastWriteTime.dwHighDateTime=0x1d2fa9b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="ApplicationViewsRootNode", cAlternateFileName="APPLIC~1")) returned 0 [0090.049] FindClose (in: hFindFile=0x381f00 | out: hFindFile=0x381f00) returned 1 [0090.049] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e704) returned 1 [0090.049] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e710) returned 1 [0090.049] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e744) returned 1 [0090.049] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Event Viewer\\Views", nBufferLength=0x105, lpBuffer=0x31e24c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Microsoft\\Event Viewer\\Views", lpFilePart=0x0) returned 0x2f [0090.049] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Event Viewer\\Views\\", nBufferLength=0x105, lpBuffer=0x31e220, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Microsoft\\Event Viewer\\Views\\", lpFilePart=0x0) returned 0x30 [0090.050] FindFirstFileW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Event Viewer\\Views\\*", lpFindFileData=0x31e46c | out: lpFindFileData=0x31e46c*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x3235c810, ftCreationTime.dwHighDateTime=0x1d2fa9b, ftLastAccessTime.dwLowDateTime=0x3235c810, ftLastAccessTime.dwHighDateTime=0x1d2fa9b, ftLastWriteTime.dwLowDateTime=0x3235c810, ftLastWriteTime.dwHighDateTime=0x1d2fa9b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x381f00 [0090.050] FindNextFileW (in: hFindFile=0x381f00, lpFindFileData=0x31e47c | out: lpFindFileData=0x31e47c*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x3235c810, ftCreationTime.dwHighDateTime=0x1d2fa9b, ftLastAccessTime.dwLowDateTime=0x3235c810, ftLastAccessTime.dwHighDateTime=0x1d2fa9b, ftLastWriteTime.dwLowDateTime=0x3235c810, ftLastWriteTime.dwHighDateTime=0x1d2fa9b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0090.050] FindNextFileW (in: hFindFile=0x381f00, lpFindFileData=0x31e47c | out: lpFindFileData=0x31e47c*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x3235c810, ftCreationTime.dwHighDateTime=0x1d2fa9b, ftLastAccessTime.dwLowDateTime=0x3235c810, ftLastAccessTime.dwHighDateTime=0x1d2fa9b, ftLastWriteTime.dwLowDateTime=0x3235c810, ftLastWriteTime.dwHighDateTime=0x1d2fa9b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="ApplicationViewsRootNode", cAlternateFileName="APPLIC~1")) returned 1 [0090.050] FindNextFileW (in: hFindFile=0x381f00, lpFindFileData=0x31e47c | out: lpFindFileData=0x31e47c*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0090.050] FindClose (in: hFindFile=0x381f00 | out: hFindFile=0x381f00) returned 1 [0090.050] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e704) returned 1 [0090.050] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e710) returned 1 [0090.050] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e6cc) returned 1 [0090.050] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Event Viewer\\Views\\ApplicationViewsRootNode", nBufferLength=0x105, lpBuffer=0x31e1d4, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Microsoft\\Event Viewer\\Views\\ApplicationViewsRootNode", lpFilePart=0x0) returned 0x48 [0090.050] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Event Viewer\\Views\\ApplicationViewsRootNode\\", nBufferLength=0x105, lpBuffer=0x31e1a8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Microsoft\\Event Viewer\\Views\\ApplicationViewsRootNode\\", lpFilePart=0x0) returned 0x49 [0090.050] FindFirstFileW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Event Viewer\\Views\\ApplicationViewsRootNode\\*", lpFindFileData=0x31e3f4 | out: lpFindFileData=0x31e3f4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x3235c810, ftCreationTime.dwHighDateTime=0x1d2fa9b, ftLastAccessTime.dwLowDateTime=0x3235c810, ftLastAccessTime.dwHighDateTime=0x1d2fa9b, ftLastWriteTime.dwLowDateTime=0x3235c810, ftLastWriteTime.dwHighDateTime=0x1d2fa9b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x381f00 [0090.051] FindNextFileW (in: hFindFile=0x381f00, lpFindFileData=0x31e404 | out: lpFindFileData=0x31e404*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x3235c810, ftCreationTime.dwHighDateTime=0x1d2fa9b, ftLastAccessTime.dwLowDateTime=0x3235c810, ftLastAccessTime.dwHighDateTime=0x1d2fa9b, ftLastWriteTime.dwLowDateTime=0x3235c810, ftLastWriteTime.dwHighDateTime=0x1d2fa9b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0090.051] FindNextFileW (in: hFindFile=0x381f00, lpFindFileData=0x31e404 | out: lpFindFileData=0x31e404*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x3235c810, ftCreationTime.dwHighDateTime=0x1d2fa9b, ftLastAccessTime.dwLowDateTime=0x3235c810, ftLastAccessTime.dwHighDateTime=0x1d2fa9b, ftLastWriteTime.dwLowDateTime=0x3235c810, ftLastWriteTime.dwHighDateTime=0x1d2fa9b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 0 [0090.051] FindClose (in: hFindFile=0x381f00 | out: hFindFile=0x381f00) returned 1 [0090.051] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e68c) returned 1 [0090.051] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e698) returned 1 [0090.051] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e6cc) returned 1 [0090.051] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Event Viewer\\Views\\ApplicationViewsRootNode", nBufferLength=0x105, lpBuffer=0x31e1d4, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Microsoft\\Event Viewer\\Views\\ApplicationViewsRootNode", lpFilePart=0x0) returned 0x48 [0090.051] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Event Viewer\\Views\\ApplicationViewsRootNode\\", nBufferLength=0x105, lpBuffer=0x31e1a8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Microsoft\\Event Viewer\\Views\\ApplicationViewsRootNode\\", lpFilePart=0x0) returned 0x49 [0090.051] FindFirstFileW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Event Viewer\\Views\\ApplicationViewsRootNode\\*", lpFindFileData=0x31e3f4 | out: lpFindFileData=0x31e3f4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x3235c810, ftCreationTime.dwHighDateTime=0x1d2fa9b, ftLastAccessTime.dwLowDateTime=0x3235c810, ftLastAccessTime.dwHighDateTime=0x1d2fa9b, ftLastWriteTime.dwLowDateTime=0x3235c810, ftLastWriteTime.dwHighDateTime=0x1d2fa9b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x381f00 [0090.051] FindNextFileW (in: hFindFile=0x381f00, lpFindFileData=0x31e404 | out: lpFindFileData=0x31e404*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x3235c810, ftCreationTime.dwHighDateTime=0x1d2fa9b, ftLastAccessTime.dwLowDateTime=0x3235c810, ftLastAccessTime.dwHighDateTime=0x1d2fa9b, ftLastWriteTime.dwLowDateTime=0x3235c810, ftLastWriteTime.dwHighDateTime=0x1d2fa9b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0090.052] FindNextFileW (in: hFindFile=0x381f00, lpFindFileData=0x31e404 | out: lpFindFileData=0x31e404*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x3235c810, ftCreationTime.dwHighDateTime=0x1d2fa9b, ftLastAccessTime.dwLowDateTime=0x3235c810, ftLastAccessTime.dwHighDateTime=0x1d2fa9b, ftLastWriteTime.dwLowDateTime=0x3235c810, ftLastWriteTime.dwHighDateTime=0x1d2fa9b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 0 [0090.052] FindClose (in: hFindFile=0x381f00 | out: hFindFile=0x381f00) returned 1 [0090.052] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e68c) returned 1 [0090.052] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e698) returned 1 [0090.052] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e7bc) returned 1 [0090.052] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\IdentityCRL", nBufferLength=0x105, lpBuffer=0x31e2c4, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Microsoft\\IdentityCRL", lpFilePart=0x0) returned 0x28 [0090.052] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\IdentityCRL\\", nBufferLength=0x105, lpBuffer=0x31e298, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Microsoft\\IdentityCRL\\", lpFilePart=0x0) returned 0x29 [0090.052] FindFirstFileW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\IdentityCRL\\*", lpFindFileData=0x31e4e4 | out: lpFindFileData=0x31e4e4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd98f9f8, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd9b5b52, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xfd9b5b52, ftLastWriteTime.dwHighDateTime=0x1ca0431, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x381f00 [0090.052] FindNextFileW (in: hFindFile=0x381f00, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd98f9f8, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd9b5b52, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xfd9b5b52, ftLastWriteTime.dwHighDateTime=0x1ca0431, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0090.052] FindNextFileW (in: hFindFile=0x381f00, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd591378b, ftCreationTime.dwHighDateTime=0x1ca042b, ftLastAccessTime.dwLowDateTime=0xd591378b, ftLastAccessTime.dwHighDateTime=0x1ca042b, ftLastWriteTime.dwLowDateTime=0x6ac29de1, ftLastWriteTime.dwHighDateTime=0x1c9ea0a, nFileSizeHigh=0x0, nFileSizeLow=0x3d00, dwReserved0=0x0, dwReserved1=0x0, cFileName="ppcrlconfig.dll", cAlternateFileName="PPCRLC~1.DLL")) returned 1 [0090.052] FindNextFileW (in: hFindFile=0x381f00, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd582ef5d, ftCreationTime.dwHighDateTime=0x1ca042b, ftLastAccessTime.dwLowDateTime=0xd582ef5d, ftLastAccessTime.dwHighDateTime=0x1ca042b, ftLastWriteTime.dwLowDateTime=0x6ac4ff3f, ftLastWriteTime.dwHighDateTime=0x1c9ea0a, nFileSizeHigh=0x0, nFileSizeLow=0x3e108, dwReserved0=0x0, dwReserved1=0x0, cFileName="ppcrlui.dll", cAlternateFileName="")) returned 1 [0090.052] FindNextFileW (in: hFindFile=0x381f00, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0090.053] FindClose (in: hFindFile=0x381f00 | out: hFindFile=0x381f00) returned 1 [0090.053] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e77c) returned 1 [0090.053] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e788) returned 1 [0090.053] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e7bc) returned 1 [0090.053] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\IdentityCRL", nBufferLength=0x105, lpBuffer=0x31e2c4, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Microsoft\\IdentityCRL", lpFilePart=0x0) returned 0x28 [0090.053] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\IdentityCRL\\", nBufferLength=0x105, lpBuffer=0x31e298, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Microsoft\\IdentityCRL\\", lpFilePart=0x0) returned 0x29 [0090.053] FindFirstFileW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\IdentityCRL\\*", lpFindFileData=0x31e4e4 | out: lpFindFileData=0x31e4e4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd98f9f8, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd9b5b52, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xfd9b5b52, ftLastWriteTime.dwHighDateTime=0x1ca0431, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x381f00 [0090.053] FindNextFileW (in: hFindFile=0x381f00, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd98f9f8, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd9b5b52, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xfd9b5b52, ftLastWriteTime.dwHighDateTime=0x1ca0431, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0090.053] FindNextFileW (in: hFindFile=0x381f00, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd591378b, ftCreationTime.dwHighDateTime=0x1ca042b, ftLastAccessTime.dwLowDateTime=0xd591378b, ftLastAccessTime.dwHighDateTime=0x1ca042b, ftLastWriteTime.dwLowDateTime=0x6ac29de1, ftLastWriteTime.dwHighDateTime=0x1c9ea0a, nFileSizeHigh=0x0, nFileSizeLow=0x3d00, dwReserved0=0x0, dwReserved1=0x0, cFileName="ppcrlconfig.dll", cAlternateFileName="PPCRLC~1.DLL")) returned 1 [0090.053] FindNextFileW (in: hFindFile=0x381f00, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd582ef5d, ftCreationTime.dwHighDateTime=0x1ca042b, ftLastAccessTime.dwLowDateTime=0xd582ef5d, ftLastAccessTime.dwHighDateTime=0x1ca042b, ftLastWriteTime.dwLowDateTime=0x6ac4ff3f, ftLastWriteTime.dwHighDateTime=0x1c9ea0a, nFileSizeHigh=0x0, nFileSizeLow=0x3e108, dwReserved0=0x0, dwReserved1=0x0, cFileName="ppcrlui.dll", cAlternateFileName="")) returned 1 [0090.053] FindNextFileW (in: hFindFile=0x381f00, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd582ef5d, ftCreationTime.dwHighDateTime=0x1ca042b, ftLastAccessTime.dwLowDateTime=0xd582ef5d, ftLastAccessTime.dwHighDateTime=0x1ca042b, ftLastWriteTime.dwLowDateTime=0x6ac4ff3f, ftLastWriteTime.dwHighDateTime=0x1c9ea0a, nFileSizeHigh=0x0, nFileSizeLow=0x3e108, dwReserved0=0x0, dwReserved1=0x0, cFileName="ppcrlui.dll", cAlternateFileName="")) returned 0 [0090.054] FindClose (in: hFindFile=0x381f00 | out: hFindFile=0x381f00) returned 1 [0090.054] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e77c) returned 1 [0090.054] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e788) returned 1 [0090.054] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e7bc) returned 1 [0090.054] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Media Player", nBufferLength=0x105, lpBuffer=0x31e2c4, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Microsoft\\Media Player", lpFilePart=0x0) returned 0x29 [0090.054] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Media Player\\", nBufferLength=0x105, lpBuffer=0x31e298, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Microsoft\\Media Player\\", lpFilePart=0x0) returned 0x2a [0090.054] FindFirstFileW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Media Player\\*", lpFindFileData=0x31e4e4 | out: lpFindFileData=0x31e4e4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x3ee349fc, ftCreationTime.dwHighDateTime=0x1ca0441, ftLastAccessTime.dwLowDateTime=0x3ee349fc, ftLastAccessTime.dwHighDateTime=0x1ca0441, ftLastWriteTime.dwLowDateTime=0x3ee349fc, ftLastWriteTime.dwHighDateTime=0x1ca0441, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x381f00 [0090.054] FindNextFileW (in: hFindFile=0x381f00, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x3ee349fc, ftCreationTime.dwHighDateTime=0x1ca0441, ftLastAccessTime.dwLowDateTime=0x3ee349fc, ftLastAccessTime.dwHighDateTime=0x1ca0441, ftLastWriteTime.dwLowDateTime=0x3ee349fc, ftLastWriteTime.dwHighDateTime=0x1ca0441, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0090.054] FindNextFileW (in: hFindFile=0x381f00, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x3ee349fc, ftCreationTime.dwHighDateTime=0x1ca0441, ftLastAccessTime.dwLowDateTime=0x3ee349fc, ftLastAccessTime.dwHighDateTime=0x1ca0441, ftLastWriteTime.dwLowDateTime=0x3ee349fc, ftLastWriteTime.dwHighDateTime=0x1ca0441, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 0 [0090.054] FindClose (in: hFindFile=0x381f00 | out: hFindFile=0x381f00) returned 1 [0090.054] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e77c) returned 1 [0090.054] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e788) returned 1 [0090.054] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e7bc) returned 1 [0090.054] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Media Player", nBufferLength=0x105, lpBuffer=0x31e2c4, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Microsoft\\Media Player", lpFilePart=0x0) returned 0x29 [0090.054] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Media Player\\", nBufferLength=0x105, lpBuffer=0x31e298, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Microsoft\\Media Player\\", lpFilePart=0x0) returned 0x2a [0090.055] FindFirstFileW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Media Player\\*", lpFindFileData=0x31e4e4 | out: lpFindFileData=0x31e4e4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x3ee349fc, ftCreationTime.dwHighDateTime=0x1ca0441, ftLastAccessTime.dwLowDateTime=0x3ee349fc, ftLastAccessTime.dwHighDateTime=0x1ca0441, ftLastWriteTime.dwLowDateTime=0x3ee349fc, ftLastWriteTime.dwHighDateTime=0x1ca0441, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x381f00 [0090.055] FindNextFileW (in: hFindFile=0x381f00, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x3ee349fc, ftCreationTime.dwHighDateTime=0x1ca0441, ftLastAccessTime.dwLowDateTime=0x3ee349fc, ftLastAccessTime.dwHighDateTime=0x1ca0441, ftLastWriteTime.dwLowDateTime=0x3ee349fc, ftLastWriteTime.dwHighDateTime=0x1ca0441, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0090.055] FindNextFileW (in: hFindFile=0x381f00, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x3ee349fc, ftCreationTime.dwHighDateTime=0x1ca0441, ftLastAccessTime.dwLowDateTime=0x3ee349fc, ftLastAccessTime.dwHighDateTime=0x1ca0441, ftLastWriteTime.dwLowDateTime=0x3ee349fc, ftLastWriteTime.dwHighDateTime=0x1ca0441, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 0 [0090.055] FindClose (in: hFindFile=0x381f00 | out: hFindFile=0x381f00) returned 1 [0090.055] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e77c) returned 1 [0090.055] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e788) returned 1 [0090.055] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e7bc) returned 1 [0090.055] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\MF", nBufferLength=0x105, lpBuffer=0x31e2c4, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Microsoft\\MF", lpFilePart=0x0) returned 0x1f [0090.055] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\MF\\", nBufferLength=0x105, lpBuffer=0x31e298, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Microsoft\\MF\\", lpFilePart=0x0) returned 0x20 [0090.055] FindFirstFileW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\MF\\*", lpFindFileData=0x31e4e4 | out: lpFindFileData=0x31e4e4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x7fffaad0, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x80340916, ftLastAccessTime.dwHighDateTime=0x1ca0444, ftLastWriteTime.dwLowDateTime=0x80340916, ftLastWriteTime.dwHighDateTime=0x1ca0444, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x381f00 [0090.055] FindNextFileW (in: hFindFile=0x381f00, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x7fffaad0, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x80340916, ftLastAccessTime.dwHighDateTime=0x1ca0444, ftLastWriteTime.dwLowDateTime=0x80340916, ftLastWriteTime.dwHighDateTime=0x1ca0444, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0090.056] FindNextFileW (in: hFindFile=0x381f00, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x80340916, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x7beaaeb8, ftLastAccessTime.dwHighDateTime=0x1ca0444, ftLastWriteTime.dwLowDateTime=0x7beaaeb8, ftLastWriteTime.dwHighDateTime=0x1ca0444, nFileSizeHigh=0x0, nFileSizeLow=0x3a7c, dwReserved0=0x0, dwReserved1=0x0, cFileName="Active.GRL", cAlternateFileName="")) returned 1 [0090.056] FindNextFileW (in: hFindFile=0x381f00, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x80340916, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x7bed1018, ftLastAccessTime.dwHighDateTime=0x1ca0444, ftLastWriteTime.dwLowDateTime=0x7bed1018, ftLastWriteTime.dwHighDateTime=0x1ca0444, nFileSizeHigh=0x0, nFileSizeLow=0x3a7c, dwReserved0=0x0, dwReserved1=0x0, cFileName="Pending.GRL", cAlternateFileName="")) returned 1 [0090.056] FindNextFileW (in: hFindFile=0x381f00, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0090.056] FindClose (in: hFindFile=0x381f00 | out: hFindFile=0x381f00) returned 1 [0090.056] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e77c) returned 1 [0090.056] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e788) returned 1 [0090.056] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e7bc) returned 1 [0090.056] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\MF", nBufferLength=0x105, lpBuffer=0x31e2c4, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Microsoft\\MF", lpFilePart=0x0) returned 0x1f [0090.056] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\MF\\", nBufferLength=0x105, lpBuffer=0x31e298, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Microsoft\\MF\\", lpFilePart=0x0) returned 0x20 [0090.056] FindFirstFileW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\MF\\*", lpFindFileData=0x31e4e4 | out: lpFindFileData=0x31e4e4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x7fffaad0, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x80340916, ftLastAccessTime.dwHighDateTime=0x1ca0444, ftLastWriteTime.dwLowDateTime=0x80340916, ftLastWriteTime.dwHighDateTime=0x1ca0444, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x381f00 [0090.056] FindNextFileW (in: hFindFile=0x381f00, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x7fffaad0, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x80340916, ftLastAccessTime.dwHighDateTime=0x1ca0444, ftLastWriteTime.dwLowDateTime=0x80340916, ftLastWriteTime.dwHighDateTime=0x1ca0444, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0090.056] FindNextFileW (in: hFindFile=0x381f00, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x80340916, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x7beaaeb8, ftLastAccessTime.dwHighDateTime=0x1ca0444, ftLastWriteTime.dwLowDateTime=0x7beaaeb8, ftLastWriteTime.dwHighDateTime=0x1ca0444, nFileSizeHigh=0x0, nFileSizeLow=0x3a7c, dwReserved0=0x0, dwReserved1=0x0, cFileName="Active.GRL", cAlternateFileName="")) returned 1 [0090.057] FindNextFileW (in: hFindFile=0x381f00, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x80340916, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x7bed1018, ftLastAccessTime.dwHighDateTime=0x1ca0444, ftLastWriteTime.dwLowDateTime=0x7bed1018, ftLastWriteTime.dwHighDateTime=0x1ca0444, nFileSizeHigh=0x0, nFileSizeLow=0x3a7c, dwReserved0=0x0, dwReserved1=0x0, cFileName="Pending.GRL", cAlternateFileName="")) returned 1 [0090.057] FindNextFileW (in: hFindFile=0x381f00, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x80340916, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x7bed1018, ftLastAccessTime.dwHighDateTime=0x1ca0444, ftLastWriteTime.dwLowDateTime=0x7bed1018, ftLastWriteTime.dwHighDateTime=0x1ca0444, nFileSizeHigh=0x0, nFileSizeLow=0x3a7c, dwReserved0=0x0, dwReserved1=0x0, cFileName="Pending.GRL", cAlternateFileName="")) returned 0 [0090.057] FindClose (in: hFindFile=0x381f00 | out: hFindFile=0x381f00) returned 1 [0090.057] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e77c) returned 1 [0090.057] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e788) returned 1 [0090.057] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e7bc) returned 1 [0090.057] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\MSDN", nBufferLength=0x105, lpBuffer=0x31e2c4, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Microsoft\\MSDN", lpFilePart=0x0) returned 0x21 [0090.057] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\MSDN\\", nBufferLength=0x105, lpBuffer=0x31e298, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Microsoft\\MSDN\\", lpFilePart=0x0) returned 0x22 [0090.057] FindFirstFileW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\MSDN\\*", lpFindFileData=0x31e4e4 | out: lpFindFileData=0x31e4e4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x50ea0e30, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x50ea0e30, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x50ea0e30, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x381f00 [0090.057] FindNextFileW (in: hFindFile=0x381f00, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x50ea0e30, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x50ea0e30, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x50ea0e30, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0090.058] FindNextFileW (in: hFindFile=0x381f00, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x50ea0e30, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x50ea0e30, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x50ea0e30, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="8.0", cAlternateFileName="")) returned 1 [0090.058] FindNextFileW (in: hFindFile=0x381f00, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x50ea0e30, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x50ea0e30, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x50ea0e30, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="8.0", cAlternateFileName="")) returned 0 [0090.058] FindClose (in: hFindFile=0x381f00 | out: hFindFile=0x381f00) returned 1 [0090.058] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e77c) returned 1 [0090.058] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e788) returned 1 [0090.058] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e7bc) returned 1 [0090.058] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\MSDN", nBufferLength=0x105, lpBuffer=0x31e2c4, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Microsoft\\MSDN", lpFilePart=0x0) returned 0x21 [0090.058] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\MSDN\\", nBufferLength=0x105, lpBuffer=0x31e298, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Microsoft\\MSDN\\", lpFilePart=0x0) returned 0x22 [0090.058] FindFirstFileW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\MSDN\\*", lpFindFileData=0x31e4e4 | out: lpFindFileData=0x31e4e4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x50ea0e30, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x50ea0e30, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x50ea0e30, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x381f00 [0090.058] FindNextFileW (in: hFindFile=0x381f00, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x50ea0e30, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x50ea0e30, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x50ea0e30, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0090.058] FindNextFileW (in: hFindFile=0x381f00, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x50ea0e30, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x50ea0e30, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x50ea0e30, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="8.0", cAlternateFileName="")) returned 1 [0090.058] FindNextFileW (in: hFindFile=0x381f00, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0090.059] FindClose (in: hFindFile=0x381f00 | out: hFindFile=0x381f00) returned 1 [0090.059] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e77c) returned 1 [0090.059] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e788) returned 1 [0090.059] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e744) returned 1 [0090.059] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\MSDN\\8.0", nBufferLength=0x105, lpBuffer=0x31e24c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Microsoft\\MSDN\\8.0", lpFilePart=0x0) returned 0x25 [0090.059] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\MSDN\\8.0\\", nBufferLength=0x105, lpBuffer=0x31e220, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Microsoft\\MSDN\\8.0\\", lpFilePart=0x0) returned 0x26 [0090.059] FindFirstFileW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\MSDN\\8.0\\*", lpFindFileData=0x31e46c | out: lpFindFileData=0x31e46c*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x50ea0e30, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x50ea0e30, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x50ea0e30, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x381f00 [0090.059] FindNextFileW (in: hFindFile=0x381f00, lpFindFileData=0x31e47c | out: lpFindFileData=0x31e47c*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x50ea0e30, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x50ea0e30, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x50ea0e30, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0090.060] FindNextFileW (in: hFindFile=0x381f00, lpFindFileData=0x31e47c | out: lpFindFileData=0x31e47c*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x50ea0e30, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x50ea0e30, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x50ea0e30, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 0 [0090.060] FindClose (in: hFindFile=0x381f00 | out: hFindFile=0x381f00) returned 1 [0090.060] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e704) returned 1 [0090.060] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e710) returned 1 [0090.060] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e744) returned 1 [0090.060] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\MSDN\\8.0", nBufferLength=0x105, lpBuffer=0x31e24c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Microsoft\\MSDN\\8.0", lpFilePart=0x0) returned 0x25 [0090.060] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\MSDN\\8.0\\", nBufferLength=0x105, lpBuffer=0x31e220, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Microsoft\\MSDN\\8.0\\", lpFilePart=0x0) returned 0x26 [0090.060] FindFirstFileW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\MSDN\\8.0\\*", lpFindFileData=0x31e46c | out: lpFindFileData=0x31e46c*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x50ea0e30, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x50ea0e30, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x50ea0e30, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x381f00 [0090.060] FindNextFileW (in: hFindFile=0x381f00, lpFindFileData=0x31e47c | out: lpFindFileData=0x31e47c*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x50ea0e30, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x50ea0e30, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x50ea0e30, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0090.060] FindNextFileW (in: hFindFile=0x381f00, lpFindFileData=0x31e47c | out: lpFindFileData=0x31e47c*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x50ea0e30, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x50ea0e30, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x50ea0e30, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 0 [0090.060] FindClose (in: hFindFile=0x381f00 | out: hFindFile=0x381f00) returned 1 [0090.060] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e704) returned 1 [0090.060] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e710) returned 1 [0090.060] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e7bc) returned 1 [0090.060] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\NetFramework", nBufferLength=0x105, lpBuffer=0x31e2c4, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Microsoft\\NetFramework", lpFilePart=0x0) returned 0x29 [0090.061] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\NetFramework\\", nBufferLength=0x105, lpBuffer=0x31e298, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Microsoft\\NetFramework\\", lpFilePart=0x0) returned 0x2a [0090.061] FindFirstFileW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\NetFramework\\*", lpFindFileData=0x31e4e4 | out: lpFindFileData=0x31e4e4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x56ac2f60, ftCreationTime.dwHighDateTime=0x1d2e676, ftLastAccessTime.dwLowDateTime=0x56ac2f60, ftLastAccessTime.dwHighDateTime=0x1d2e676, ftLastWriteTime.dwLowDateTime=0x56ac2f60, ftLastWriteTime.dwHighDateTime=0x1d2e676, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x381f00 [0090.061] FindNextFileW (in: hFindFile=0x381f00, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x56ac2f60, ftCreationTime.dwHighDateTime=0x1d2e676, ftLastAccessTime.dwLowDateTime=0x56ac2f60, ftLastAccessTime.dwHighDateTime=0x1d2e676, ftLastWriteTime.dwLowDateTime=0x56ac2f60, ftLastWriteTime.dwHighDateTime=0x1d2e676, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0090.061] FindNextFileW (in: hFindFile=0x381f00, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x56ac2f60, ftCreationTime.dwHighDateTime=0x1d2e676, ftLastAccessTime.dwLowDateTime=0x56ac2f60, ftLastAccessTime.dwHighDateTime=0x1d2e676, ftLastWriteTime.dwLowDateTime=0x56ac2f60, ftLastWriteTime.dwHighDateTime=0x1d2e676, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="BreadcrumbStore", cAlternateFileName="BREADC~1")) returned 1 [0090.061] FindNextFileW (in: hFindFile=0x381f00, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x56ac2f60, ftCreationTime.dwHighDateTime=0x1d2e676, ftLastAccessTime.dwLowDateTime=0x56ac2f60, ftLastAccessTime.dwHighDateTime=0x1d2e676, ftLastWriteTime.dwLowDateTime=0x56ac2f60, ftLastWriteTime.dwHighDateTime=0x1d2e676, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="BreadcrumbStore", cAlternateFileName="BREADC~1")) returned 0 [0090.061] FindClose (in: hFindFile=0x381f00 | out: hFindFile=0x381f00) returned 1 [0090.061] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e77c) returned 1 [0090.061] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e788) returned 1 [0090.061] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e7bc) returned 1 [0090.061] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\NetFramework", nBufferLength=0x105, lpBuffer=0x31e2c4, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Microsoft\\NetFramework", lpFilePart=0x0) returned 0x29 [0090.061] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\NetFramework\\", nBufferLength=0x105, lpBuffer=0x31e298, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Microsoft\\NetFramework\\", lpFilePart=0x0) returned 0x2a [0090.062] FindFirstFileW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\NetFramework\\*", lpFindFileData=0x31e4e4 | out: lpFindFileData=0x31e4e4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x56ac2f60, ftCreationTime.dwHighDateTime=0x1d2e676, ftLastAccessTime.dwLowDateTime=0x56ac2f60, ftLastAccessTime.dwHighDateTime=0x1d2e676, ftLastWriteTime.dwLowDateTime=0x56ac2f60, ftLastWriteTime.dwHighDateTime=0x1d2e676, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x381f00 [0090.062] FindNextFileW (in: hFindFile=0x381f00, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x56ac2f60, ftCreationTime.dwHighDateTime=0x1d2e676, ftLastAccessTime.dwLowDateTime=0x56ac2f60, ftLastAccessTime.dwHighDateTime=0x1d2e676, ftLastWriteTime.dwLowDateTime=0x56ac2f60, ftLastWriteTime.dwHighDateTime=0x1d2e676, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0090.062] FindNextFileW (in: hFindFile=0x381f00, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x56ac2f60, ftCreationTime.dwHighDateTime=0x1d2e676, ftLastAccessTime.dwLowDateTime=0x56ac2f60, ftLastAccessTime.dwHighDateTime=0x1d2e676, ftLastWriteTime.dwLowDateTime=0x56ac2f60, ftLastWriteTime.dwHighDateTime=0x1d2e676, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="BreadcrumbStore", cAlternateFileName="BREADC~1")) returned 1 [0090.062] FindNextFileW (in: hFindFile=0x381f00, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0090.062] FindClose (in: hFindFile=0x381f00 | out: hFindFile=0x381f00) returned 1 [0090.062] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e77c) returned 1 [0090.062] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e788) returned 1 [0090.062] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e744) returned 1 [0090.062] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\NetFramework\\BreadcrumbStore", nBufferLength=0x105, lpBuffer=0x31e24c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Microsoft\\NetFramework\\BreadcrumbStore", lpFilePart=0x0) returned 0x39 [0090.062] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\NetFramework\\BreadcrumbStore\\", nBufferLength=0x105, lpBuffer=0x31e220, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Microsoft\\NetFramework\\BreadcrumbStore\\", lpFilePart=0x0) returned 0x3a [0090.062] FindFirstFileW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\NetFramework\\BreadcrumbStore\\*", lpFindFileData=0x31e46c | out: lpFindFileData=0x31e46c*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x56ac2f60, ftCreationTime.dwHighDateTime=0x1d2e676, ftLastAccessTime.dwLowDateTime=0x56ac2f60, ftLastAccessTime.dwHighDateTime=0x1d2e676, ftLastWriteTime.dwLowDateTime=0x56ac2f60, ftLastWriteTime.dwHighDateTime=0x1d2e676, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x381f00 [0090.062] FindNextFileW (in: hFindFile=0x381f00, lpFindFileData=0x31e47c | out: lpFindFileData=0x31e47c*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x56ac2f60, ftCreationTime.dwHighDateTime=0x1d2e676, ftLastAccessTime.dwLowDateTime=0x56ac2f60, ftLastAccessTime.dwHighDateTime=0x1d2e676, ftLastWriteTime.dwLowDateTime=0x56ac2f60, ftLastWriteTime.dwHighDateTime=0x1d2e676, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0090.063] FindNextFileW (in: hFindFile=0x381f00, lpFindFileData=0x31e47c | out: lpFindFileData=0x31e47c*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x56ac2f60, ftCreationTime.dwHighDateTime=0x1d2e676, ftLastAccessTime.dwLowDateTime=0x56ac2f60, ftLastAccessTime.dwHighDateTime=0x1d2e676, ftLastWriteTime.dwLowDateTime=0x56ac2f60, ftLastWriteTime.dwHighDateTime=0x1d2e676, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 0 [0090.063] FindClose (in: hFindFile=0x381f00 | out: hFindFile=0x381f00) returned 1 [0090.063] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e704) returned 1 [0090.063] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e710) returned 1 [0090.063] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e744) returned 1 [0090.063] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\NetFramework\\BreadcrumbStore", nBufferLength=0x105, lpBuffer=0x31e24c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Microsoft\\NetFramework\\BreadcrumbStore", lpFilePart=0x0) returned 0x39 [0090.063] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\NetFramework\\BreadcrumbStore\\", nBufferLength=0x105, lpBuffer=0x31e220, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Microsoft\\NetFramework\\BreadcrumbStore\\", lpFilePart=0x0) returned 0x3a [0090.063] FindFirstFileW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\NetFramework\\BreadcrumbStore\\*", lpFindFileData=0x31e46c | out: lpFindFileData=0x31e46c*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x56ac2f60, ftCreationTime.dwHighDateTime=0x1d2e676, ftLastAccessTime.dwLowDateTime=0x56ac2f60, ftLastAccessTime.dwHighDateTime=0x1d2e676, ftLastWriteTime.dwLowDateTime=0x56ac2f60, ftLastWriteTime.dwHighDateTime=0x1d2e676, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x381f00 [0090.063] FindNextFileW (in: hFindFile=0x381f00, lpFindFileData=0x31e47c | out: lpFindFileData=0x31e47c*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x56ac2f60, ftCreationTime.dwHighDateTime=0x1d2e676, ftLastAccessTime.dwLowDateTime=0x56ac2f60, ftLastAccessTime.dwHighDateTime=0x1d2e676, ftLastWriteTime.dwLowDateTime=0x56ac2f60, ftLastWriteTime.dwHighDateTime=0x1d2e676, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0090.063] FindNextFileW (in: hFindFile=0x381f00, lpFindFileData=0x31e47c | out: lpFindFileData=0x31e47c*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x56ac2f60, ftCreationTime.dwHighDateTime=0x1d2e676, ftLastAccessTime.dwLowDateTime=0x56ac2f60, ftLastAccessTime.dwHighDateTime=0x1d2e676, ftLastWriteTime.dwLowDateTime=0x56ac2f60, ftLastWriteTime.dwHighDateTime=0x1d2e676, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 0 [0090.063] FindClose (in: hFindFile=0x381f00 | out: hFindFile=0x381f00) returned 1 [0090.063] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e704) returned 1 [0090.063] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e710) returned 1 [0090.063] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e7bc) returned 1 [0090.063] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Network", nBufferLength=0x105, lpBuffer=0x31e2c4, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Microsoft\\Network", lpFilePart=0x0) returned 0x24 [0090.064] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Network\\", nBufferLength=0x105, lpBuffer=0x31e298, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Microsoft\\Network\\", lpFilePart=0x0) returned 0x25 [0090.064] FindFirstFileW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Network\\*", lpFindFileData=0x31e4e4 | out: lpFindFileData=0x31e4e4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xfd9b5b52, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd9b5b52, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xfd9b5b52, ftLastWriteTime.dwHighDateTime=0x1ca0431, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x381f00 [0090.064] FindNextFileW (in: hFindFile=0x381f00, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xfd9b5b52, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd9b5b52, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xfd9b5b52, ftLastWriteTime.dwHighDateTime=0x1ca0431, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0090.064] FindNextFileW (in: hFindFile=0x381f00, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd9b5b52, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd9b5b52, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xa68726b4, ftLastWriteTime.dwHighDateTime=0x1ca042b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Connections", cAlternateFileName="CONNEC~1")) returned 1 [0090.064] FindNextFileW (in: hFindFile=0x381f00, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd9b5b52, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x7606ea15, ftLastAccessTime.dwHighDateTime=0x1ca0441, ftLastWriteTime.dwLowDateTime=0x7606ea15, ftLastWriteTime.dwHighDateTime=0x1ca0441, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Downloader", cAlternateFileName="DOWNLO~1")) returned 1 [0090.064] FindNextFileW (in: hFindFile=0x381f00, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd9b5b52, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x7606ea15, ftLastAccessTime.dwHighDateTime=0x1ca0441, ftLastWriteTime.dwLowDateTime=0x7606ea15, ftLastWriteTime.dwHighDateTime=0x1ca0441, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Downloader", cAlternateFileName="DOWNLO~1")) returned 0 [0090.064] FindClose (in: hFindFile=0x381f00 | out: hFindFile=0x381f00) returned 1 [0090.064] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e77c) returned 1 [0090.064] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e788) returned 1 [0090.064] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e7bc) returned 1 [0090.064] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Network", nBufferLength=0x105, lpBuffer=0x31e2c4, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Microsoft\\Network", lpFilePart=0x0) returned 0x24 [0090.065] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Network\\", nBufferLength=0x105, lpBuffer=0x31e298, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Microsoft\\Network\\", lpFilePart=0x0) returned 0x25 [0090.065] FindFirstFileW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Network\\*", lpFindFileData=0x31e4e4 | out: lpFindFileData=0x31e4e4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xfd9b5b52, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd9b5b52, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xfd9b5b52, ftLastWriteTime.dwHighDateTime=0x1ca0431, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x381f00 [0090.065] FindNextFileW (in: hFindFile=0x381f00, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xfd9b5b52, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd9b5b52, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xfd9b5b52, ftLastWriteTime.dwHighDateTime=0x1ca0431, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0090.065] FindNextFileW (in: hFindFile=0x381f00, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd9b5b52, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd9b5b52, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xa68726b4, ftLastWriteTime.dwHighDateTime=0x1ca042b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Connections", cAlternateFileName="CONNEC~1")) returned 1 [0090.065] FindNextFileW (in: hFindFile=0x381f00, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd9b5b52, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x7606ea15, ftLastAccessTime.dwHighDateTime=0x1ca0441, ftLastWriteTime.dwLowDateTime=0x7606ea15, ftLastWriteTime.dwHighDateTime=0x1ca0441, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Downloader", cAlternateFileName="DOWNLO~1")) returned 1 [0090.065] FindNextFileW (in: hFindFile=0x381f00, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0090.065] FindClose (in: hFindFile=0x381f00 | out: hFindFile=0x381f00) returned 1 [0090.065] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e77c) returned 1 [0090.065] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e788) returned 1 [0090.065] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e744) returned 1 [0090.065] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Network\\Connections", nBufferLength=0x105, lpBuffer=0x31e24c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Microsoft\\Network\\Connections", lpFilePart=0x0) returned 0x30 [0090.065] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Network\\Connections\\", nBufferLength=0x105, lpBuffer=0x31e220, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Microsoft\\Network\\Connections\\", lpFilePart=0x0) returned 0x31 [0090.065] FindFirstFileW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Network\\Connections\\*", lpFindFileData=0x31e46c | out: lpFindFileData=0x31e46c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd9b5b52, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd9b5b52, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xa68726b4, ftLastWriteTime.dwHighDateTime=0x1ca042b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x381f00 [0090.066] FindNextFileW (in: hFindFile=0x381f00, lpFindFileData=0x31e47c | out: lpFindFileData=0x31e47c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd9b5b52, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd9b5b52, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xa68726b4, ftLastWriteTime.dwHighDateTime=0x1ca042b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0090.066] FindNextFileW (in: hFindFile=0x381f00, lpFindFileData=0x31e47c | out: lpFindFileData=0x31e47c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd9b5b52, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd9b5b52, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xa68726b4, ftLastWriteTime.dwHighDateTime=0x1ca042b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 0 [0090.066] FindClose (in: hFindFile=0x381f00 | out: hFindFile=0x381f00) returned 1 [0090.066] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e704) returned 1 [0090.066] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e710) returned 1 [0090.066] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e744) returned 1 [0090.066] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Network\\Connections", nBufferLength=0x105, lpBuffer=0x31e24c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Microsoft\\Network\\Connections", lpFilePart=0x0) returned 0x30 [0090.066] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Network\\Connections\\", nBufferLength=0x105, lpBuffer=0x31e220, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Microsoft\\Network\\Connections\\", lpFilePart=0x0) returned 0x31 [0090.066] FindFirstFileW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Network\\Connections\\*", lpFindFileData=0x31e46c | out: lpFindFileData=0x31e46c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd9b5b52, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd9b5b52, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xa68726b4, ftLastWriteTime.dwHighDateTime=0x1ca042b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x381f00 [0090.066] FindNextFileW (in: hFindFile=0x381f00, lpFindFileData=0x31e47c | out: lpFindFileData=0x31e47c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd9b5b52, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd9b5b52, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xa68726b4, ftLastWriteTime.dwHighDateTime=0x1ca042b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0090.066] FindNextFileW (in: hFindFile=0x381f00, lpFindFileData=0x31e47c | out: lpFindFileData=0x31e47c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd9b5b52, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd9b5b52, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xa68726b4, ftLastWriteTime.dwHighDateTime=0x1ca042b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 0 [0090.066] FindClose (in: hFindFile=0x381f00 | out: hFindFile=0x381f00) returned 1 [0090.066] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e704) returned 1 [0090.066] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e710) returned 1 [0090.067] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e744) returned 1 [0090.067] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Network\\Downloader", nBufferLength=0x105, lpBuffer=0x31e24c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Microsoft\\Network\\Downloader", lpFilePart=0x0) returned 0x2f [0090.067] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Network\\Downloader\\", nBufferLength=0x105, lpBuffer=0x31e220, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Microsoft\\Network\\Downloader\\", lpFilePart=0x0) returned 0x30 [0090.067] FindFirstFileW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Network\\Downloader\\*", lpFindFileData=0x31e46c | out: lpFindFileData=0x31e46c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd9b5b52, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x7606ea15, ftLastAccessTime.dwHighDateTime=0x1ca0441, ftLastWriteTime.dwLowDateTime=0x7606ea15, ftLastWriteTime.dwHighDateTime=0x1ca0441, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x381f00 [0090.067] FindNextFileW (in: hFindFile=0x381f00, lpFindFileData=0x31e47c | out: lpFindFileData=0x31e47c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd9b5b52, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x7606ea15, ftLastAccessTime.dwHighDateTime=0x1ca0441, ftLastWriteTime.dwLowDateTime=0x7606ea15, ftLastWriteTime.dwHighDateTime=0x1ca0441, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0090.067] FindNextFileW (in: hFindFile=0x381f00, lpFindFileData=0x31e47c | out: lpFindFileData=0x31e47c*(dwFileAttributes=0x120, ftCreationTime.dwLowDateTime=0x7606ea15, ftCreationTime.dwHighDateTime=0x1ca0441, ftLastAccessTime.dwLowDateTime=0x7606ea15, ftLastAccessTime.dwHighDateTime=0x1ca0441, ftLastWriteTime.dwLowDateTime=0xe0118910, ftLastWriteTime.dwHighDateTime=0x1d2ddf4, nFileSizeHigh=0x0, nFileSizeLow=0x400000, dwReserved0=0x0, dwReserved1=0x0, cFileName="qmgr0.dat", cAlternateFileName="")) returned 1 [0090.067] FindNextFileW (in: hFindFile=0x381f00, lpFindFileData=0x31e47c | out: lpFindFileData=0x31e47c*(dwFileAttributes=0x120, ftCreationTime.dwLowDateTime=0x7606ea15, ftCreationTime.dwHighDateTime=0x1ca0441, ftLastAccessTime.dwLowDateTime=0x7606ea15, ftLastAccessTime.dwHighDateTime=0x1ca0441, ftLastWriteTime.dwLowDateTime=0xdd404870, ftLastWriteTime.dwHighDateTime=0x1d2ddf4, nFileSizeHigh=0x0, nFileSizeLow=0x400000, dwReserved0=0x0, dwReserved1=0x0, cFileName="qmgr1.dat", cAlternateFileName="")) returned 1 [0090.067] FindNextFileW (in: hFindFile=0x381f00, lpFindFileData=0x31e47c | out: lpFindFileData=0x31e47c*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0090.067] FindClose (in: hFindFile=0x381f00 | out: hFindFile=0x381f00) returned 1 [0090.067] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e704) returned 1 [0090.067] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e710) returned 1 [0090.067] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e744) returned 1 [0090.067] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Network\\Downloader", nBufferLength=0x105, lpBuffer=0x31e24c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Microsoft\\Network\\Downloader", lpFilePart=0x0) returned 0x2f [0090.067] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Network\\Downloader\\", nBufferLength=0x105, lpBuffer=0x31e220, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Microsoft\\Network\\Downloader\\", lpFilePart=0x0) returned 0x30 [0090.067] FindFirstFileW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Network\\Downloader\\*", lpFindFileData=0x31e46c | out: lpFindFileData=0x31e46c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd9b5b52, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x7606ea15, ftLastAccessTime.dwHighDateTime=0x1ca0441, ftLastWriteTime.dwLowDateTime=0x7606ea15, ftLastWriteTime.dwHighDateTime=0x1ca0441, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x381f00 [0090.067] FindNextFileW (in: hFindFile=0x381f00, lpFindFileData=0x31e47c | out: lpFindFileData=0x31e47c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd9b5b52, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x7606ea15, ftLastAccessTime.dwHighDateTime=0x1ca0441, ftLastWriteTime.dwLowDateTime=0x7606ea15, ftLastWriteTime.dwHighDateTime=0x1ca0441, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0090.068] FindNextFileW (in: hFindFile=0x381f00, lpFindFileData=0x31e47c | out: lpFindFileData=0x31e47c*(dwFileAttributes=0x120, ftCreationTime.dwLowDateTime=0x7606ea15, ftCreationTime.dwHighDateTime=0x1ca0441, ftLastAccessTime.dwLowDateTime=0x7606ea15, ftLastAccessTime.dwHighDateTime=0x1ca0441, ftLastWriteTime.dwLowDateTime=0xe0118910, ftLastWriteTime.dwHighDateTime=0x1d2ddf4, nFileSizeHigh=0x0, nFileSizeLow=0x400000, dwReserved0=0x0, dwReserved1=0x0, cFileName="qmgr0.dat", cAlternateFileName="")) returned 1 [0090.068] FindNextFileW (in: hFindFile=0x381f00, lpFindFileData=0x31e47c | out: lpFindFileData=0x31e47c*(dwFileAttributes=0x120, ftCreationTime.dwLowDateTime=0x7606ea15, ftCreationTime.dwHighDateTime=0x1ca0441, ftLastAccessTime.dwLowDateTime=0x7606ea15, ftLastAccessTime.dwHighDateTime=0x1ca0441, ftLastWriteTime.dwLowDateTime=0xdd404870, ftLastWriteTime.dwHighDateTime=0x1d2ddf4, nFileSizeHigh=0x0, nFileSizeLow=0x400000, dwReserved0=0x0, dwReserved1=0x0, cFileName="qmgr1.dat", cAlternateFileName="")) returned 1 [0090.068] FindNextFileW (in: hFindFile=0x381f00, lpFindFileData=0x31e47c | out: lpFindFileData=0x31e47c*(dwFileAttributes=0x120, ftCreationTime.dwLowDateTime=0x7606ea15, ftCreationTime.dwHighDateTime=0x1ca0441, ftLastAccessTime.dwLowDateTime=0x7606ea15, ftLastAccessTime.dwHighDateTime=0x1ca0441, ftLastWriteTime.dwLowDateTime=0xdd404870, ftLastWriteTime.dwHighDateTime=0x1d2ddf4, nFileSizeHigh=0x0, nFileSizeLow=0x400000, dwReserved0=0x0, dwReserved1=0x0, cFileName="qmgr1.dat", cAlternateFileName="")) returned 0 [0090.068] FindClose (in: hFindFile=0x381f00 | out: hFindFile=0x381f00) returned 1 [0090.068] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e704) returned 1 [0090.068] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e710) returned 1 [0090.068] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e7bc) returned 1 [0090.068] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\OFFICE", nBufferLength=0x105, lpBuffer=0x31e2c4, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Microsoft\\OFFICE", lpFilePart=0x0) returned 0x23 [0090.068] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\OFFICE\\", nBufferLength=0x105, lpBuffer=0x31e298, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Microsoft\\OFFICE\\", lpFilePart=0x0) returned 0x24 [0090.068] FindFirstFileW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\OFFICE\\*", lpFindFileData=0x31e4e4 | out: lpFindFileData=0x31e4e4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xeed38550, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0x6d3a4910, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x6d3a4910, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x381f00 [0090.068] FindNextFileW (in: hFindFile=0x381f00, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xeed38550, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0x6d3a4910, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x6d3a4910, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0090.068] FindNextFileW (in: hFindFile=0x381f00, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x5011dd00, ftCreationTime.dwHighDateTime=0x1ca04ff, ftLastAccessTime.dwLowDateTime=0x5f409670, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x5011dd00, ftLastWriteTime.dwHighDateTime=0x1ca04ff, nFileSizeHigh=0x0, nFileSizeLow=0x1536, dwReserved0=0x0, dwReserved1=0x0, cFileName="AssetLibrary.ico", cAlternateFileName="ASSETL~1.ICO")) returned 1 [0090.068] FindNextFileW (in: hFindFile=0x381f00, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xabeeea00, ftCreationTime.dwHighDateTime=0x1c63848, ftLastAccessTime.dwLowDateTime=0x51e19d30, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xabeeea00, ftLastWriteTime.dwHighDateTime=0x1c63848, nFileSizeHigh=0x0, nFileSizeLow=0x627e, dwReserved0=0x0, dwReserved1=0x0, cFileName="DocumentRepository.ico", cAlternateFileName="DOCUME~1.ICO")) returned 1 [0090.068] FindNextFileW (in: hFindFile=0x381f00, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x2bfbd800, ftCreationTime.dwHighDateTime=0x1c9facb, ftLastAccessTime.dwLowDateTime=0x6a3248d0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x2bfbd800, ftLastWriteTime.dwHighDateTime=0x1c9facb, nFileSizeHigh=0x0, nFileSizeLow=0x5532e, dwReserved0=0x0, dwReserved1=0x0, cFileName="MySharePoints.ico", cAlternateFileName="MYSHAR~1.ICO")) returned 1 [0090.069] FindNextFileW (in: hFindFile=0x381f00, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xc92d1d00, ftCreationTime.dwHighDateTime=0x1c627a2, ftLastAccessTime.dwLowDateTime=0x594ac510, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xc92d1d00, ftLastWriteTime.dwHighDateTime=0x1c627a2, nFileSizeHigh=0x0, nFileSizeLow=0x627e, dwReserved0=0x0, dwReserved1=0x0, cFileName="MySite.ico", cAlternateFileName="")) returned 1 [0090.069] FindNextFileW (in: hFindFile=0x381f00, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xf2444900, ftCreationTime.dwHighDateTime=0x1c63848, ftLastAccessTime.dwLowDateTime=0x5ab49610, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xf2444900, ftLastWriteTime.dwHighDateTime=0x1c63848, nFileSizeHigh=0x0, nFileSizeLow=0x627e, dwReserved0=0x0, dwReserved1=0x0, cFileName="SharePointPortalSite.ico", cAlternateFileName="SHAREP~1.ICO")) returned 1 [0090.069] FindNextFileW (in: hFindFile=0x381f00, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xad743900, ftCreationTime.dwHighDateTime=0x1c62706, ftLastAccessTime.dwLowDateTime=0x6d3a4910, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xad743900, ftLastWriteTime.dwHighDateTime=0x1c62706, nFileSizeHigh=0x0, nFileSizeLow=0x627e, dwReserved0=0x0, dwReserved1=0x0, cFileName="SharePointTeamSite.ico", cAlternateFileName="SHAREP~2.ICO")) returned 1 [0090.069] FindNextFileW (in: hFindFile=0x381f00, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xeed38550, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xeed38550, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xeed38550, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="UICaptions", cAlternateFileName="UICAPT~1")) returned 1 [0090.069] FindNextFileW (in: hFindFile=0x381f00, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xeed38550, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xeed38550, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xeed38550, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="UICaptions", cAlternateFileName="UICAPT~1")) returned 0 [0090.069] FindClose (in: hFindFile=0x381f00 | out: hFindFile=0x381f00) returned 1 [0090.069] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e77c) returned 1 [0090.069] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e788) returned 1 [0090.069] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e7bc) returned 1 [0090.069] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\OFFICE", nBufferLength=0x105, lpBuffer=0x31e2c4, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Microsoft\\OFFICE", lpFilePart=0x0) returned 0x23 [0090.069] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\OFFICE\\", nBufferLength=0x105, lpBuffer=0x31e298, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Microsoft\\OFFICE\\", lpFilePart=0x0) returned 0x24 [0090.069] FindFirstFileW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\OFFICE\\*", lpFindFileData=0x31e4e4 | out: lpFindFileData=0x31e4e4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xeed38550, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0x6d3a4910, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x6d3a4910, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x381f00 [0090.069] FindNextFileW (in: hFindFile=0x381f00, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xeed38550, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0x6d3a4910, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x6d3a4910, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0090.069] FindNextFileW (in: hFindFile=0x381f00, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x5011dd00, ftCreationTime.dwHighDateTime=0x1ca04ff, ftLastAccessTime.dwLowDateTime=0x5f409670, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x5011dd00, ftLastWriteTime.dwHighDateTime=0x1ca04ff, nFileSizeHigh=0x0, nFileSizeLow=0x1536, dwReserved0=0x0, dwReserved1=0x0, cFileName="AssetLibrary.ico", cAlternateFileName="ASSETL~1.ICO")) returned 1 [0090.070] FindNextFileW (in: hFindFile=0x381f00, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xabeeea00, ftCreationTime.dwHighDateTime=0x1c63848, ftLastAccessTime.dwLowDateTime=0x51e19d30, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xabeeea00, ftLastWriteTime.dwHighDateTime=0x1c63848, nFileSizeHigh=0x0, nFileSizeLow=0x627e, dwReserved0=0x0, dwReserved1=0x0, cFileName="DocumentRepository.ico", cAlternateFileName="DOCUME~1.ICO")) returned 1 [0090.070] FindNextFileW (in: hFindFile=0x381f00, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x2bfbd800, ftCreationTime.dwHighDateTime=0x1c9facb, ftLastAccessTime.dwLowDateTime=0x6a3248d0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x2bfbd800, ftLastWriteTime.dwHighDateTime=0x1c9facb, nFileSizeHigh=0x0, nFileSizeLow=0x5532e, dwReserved0=0x0, dwReserved1=0x0, cFileName="MySharePoints.ico", cAlternateFileName="MYSHAR~1.ICO")) returned 1 [0090.070] FindNextFileW (in: hFindFile=0x381f00, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xc92d1d00, ftCreationTime.dwHighDateTime=0x1c627a2, ftLastAccessTime.dwLowDateTime=0x594ac510, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xc92d1d00, ftLastWriteTime.dwHighDateTime=0x1c627a2, nFileSizeHigh=0x0, nFileSizeLow=0x627e, dwReserved0=0x0, dwReserved1=0x0, cFileName="MySite.ico", cAlternateFileName="")) returned 1 [0090.070] FindNextFileW (in: hFindFile=0x381f00, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xf2444900, ftCreationTime.dwHighDateTime=0x1c63848, ftLastAccessTime.dwLowDateTime=0x5ab49610, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xf2444900, ftLastWriteTime.dwHighDateTime=0x1c63848, nFileSizeHigh=0x0, nFileSizeLow=0x627e, dwReserved0=0x0, dwReserved1=0x0, cFileName="SharePointPortalSite.ico", cAlternateFileName="SHAREP~1.ICO")) returned 1 [0090.070] FindNextFileW (in: hFindFile=0x381f00, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xad743900, ftCreationTime.dwHighDateTime=0x1c62706, ftLastAccessTime.dwLowDateTime=0x6d3a4910, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xad743900, ftLastWriteTime.dwHighDateTime=0x1c62706, nFileSizeHigh=0x0, nFileSizeLow=0x627e, dwReserved0=0x0, dwReserved1=0x0, cFileName="SharePointTeamSite.ico", cAlternateFileName="SHAREP~2.ICO")) returned 1 [0090.070] FindNextFileW (in: hFindFile=0x381f00, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xeed38550, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xeed38550, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xeed38550, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="UICaptions", cAlternateFileName="UICAPT~1")) returned 1 [0090.070] FindNextFileW (in: hFindFile=0x381f00, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0090.070] FindClose (in: hFindFile=0x381f00 | out: hFindFile=0x381f00) returned 1 [0090.070] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e77c) returned 1 [0090.070] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e788) returned 1 [0090.070] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e744) returned 1 [0090.070] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\OFFICE\\UICaptions", nBufferLength=0x105, lpBuffer=0x31e24c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Microsoft\\OFFICE\\UICaptions", lpFilePart=0x0) returned 0x2e [0090.070] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\OFFICE\\UICaptions\\", nBufferLength=0x105, lpBuffer=0x31e220, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Microsoft\\OFFICE\\UICaptions\\", lpFilePart=0x0) returned 0x2f [0090.071] FindFirstFileW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\OFFICE\\UICaptions\\*", lpFindFileData=0x31e46c | out: lpFindFileData=0x31e46c*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xeed38550, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xeed38550, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xeed38550, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x381f00 [0090.071] FindNextFileW (in: hFindFile=0x381f00, lpFindFileData=0x31e47c | out: lpFindFileData=0x31e47c*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xeed38550, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xeed38550, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xeed38550, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0090.071] FindNextFileW (in: hFindFile=0x381f00, lpFindFileData=0x31e47c | out: lpFindFileData=0x31e47c*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xeed38550, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xef116910, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xef116910, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="1036", cAlternateFileName="")) returned 1 [0090.071] FindNextFileW (in: hFindFile=0x381f00, lpFindFileData=0x31e47c | out: lpFindFileData=0x31e47c*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xeed38550, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xef116910, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xef116910, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="3082", cAlternateFileName="")) returned 1 [0090.071] FindNextFileW (in: hFindFile=0x381f00, lpFindFileData=0x31e47c | out: lpFindFileData=0x31e47c*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xeed38550, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xef116910, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xef116910, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="3082", cAlternateFileName="")) returned 0 [0090.071] FindClose (in: hFindFile=0x381f00 | out: hFindFile=0x381f00) returned 1 [0090.071] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e704) returned 1 [0090.071] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e710) returned 1 [0090.071] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e744) returned 1 [0090.071] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\OFFICE\\UICaptions", nBufferLength=0x105, lpBuffer=0x31e24c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Microsoft\\OFFICE\\UICaptions", lpFilePart=0x0) returned 0x2e [0090.071] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\OFFICE\\UICaptions\\", nBufferLength=0x105, lpBuffer=0x31e220, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Microsoft\\OFFICE\\UICaptions\\", lpFilePart=0x0) returned 0x2f [0090.071] FindFirstFileW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\OFFICE\\UICaptions\\*", lpFindFileData=0x31e46c | out: lpFindFileData=0x31e46c*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xeed38550, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xeed38550, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xeed38550, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x381f00 [0090.071] FindNextFileW (in: hFindFile=0x381f00, lpFindFileData=0x31e47c | out: lpFindFileData=0x31e47c*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xeed38550, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xeed38550, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xeed38550, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0090.072] FindNextFileW (in: hFindFile=0x381f00, lpFindFileData=0x31e47c | out: lpFindFileData=0x31e47c*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xeed38550, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xef116910, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xef116910, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="1036", cAlternateFileName="")) returned 1 [0090.072] FindNextFileW (in: hFindFile=0x381f00, lpFindFileData=0x31e47c | out: lpFindFileData=0x31e47c*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xeed38550, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xef116910, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xef116910, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="3082", cAlternateFileName="")) returned 1 [0090.072] FindNextFileW (in: hFindFile=0x381f00, lpFindFileData=0x31e47c | out: lpFindFileData=0x31e47c*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0090.072] FindClose (in: hFindFile=0x381f00 | out: hFindFile=0x381f00) returned 1 [0090.072] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e704) returned 1 [0090.072] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e710) returned 1 [0090.072] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e6cc) returned 1 [0090.072] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\OFFICE\\UICaptions\\1036", nBufferLength=0x105, lpBuffer=0x31e1d4, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Microsoft\\OFFICE\\UICaptions\\1036", lpFilePart=0x0) returned 0x33 [0090.072] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\OFFICE\\UICaptions\\1036\\", nBufferLength=0x105, lpBuffer=0x31e1a8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Microsoft\\OFFICE\\UICaptions\\1036\\", lpFilePart=0x0) returned 0x34 [0090.072] FindFirstFileW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\OFFICE\\UICaptions\\1036\\*", lpFindFileData=0x31e3f4 | out: lpFindFileData=0x31e3f4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xeed38550, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xef116910, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xef116910, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x381f00 [0090.073] FindNextFileW (in: hFindFile=0x381f00, lpFindFileData=0x31e404 | out: lpFindFileData=0x31e404*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xeed38550, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xef116910, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xef116910, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0090.073] FindNextFileW (in: hFindFile=0x381f00, lpFindFileData=0x31e404 | out: lpFindFileData=0x31e404*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x1be9a700, ftCreationTime.dwHighDateTime=0x1caca12, ftLastAccessTime.dwLowDateTime=0xeed38550, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0x1be9a700, ftLastWriteTime.dwHighDateTime=0x1caca12, nFileSizeHigh=0x0, nFileSizeLow=0x3960, dwReserved0=0x0, dwReserved1=0x0, cFileName="ENVELOPR.DLL.trx_dll", cAlternateFileName="ENVELO~1.TRX")) returned 1 [0090.073] FindNextFileW (in: hFindFile=0x381f00, lpFindFileData=0x31e404 | out: lpFindFileData=0x31e404*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xbd48e100, ftCreationTime.dwHighDateTime=0x1cac7f7, ftLastAccessTime.dwLowDateTime=0xeedf6c30, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xbd48e100, ftLastWriteTime.dwHighDateTime=0x1cac7f7, nFileSizeHigh=0x0, nFileSizeLow=0xbf60, dwReserved0=0x0, dwReserved1=0x0, cFileName="GRINTL32.DLL.trx_dll", cAlternateFileName="GRINTL~1.TRX")) returned 1 [0090.073] FindNextFileW (in: hFindFile=0x381f00, lpFindFileData=0x31e404 | out: lpFindFileData=0x31e404*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xbd48e100, ftCreationTime.dwHighDateTime=0x1cac7f7, ftLastAccessTime.dwLowDateTime=0xeedf6c30, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xbd48e100, ftLastWriteTime.dwHighDateTime=0x1cac7f7, nFileSizeHigh=0x0, nFileSizeLow=0x3d960, dwReserved0=0x0, dwReserved1=0x0, cFileName="GRINTL32.REST.trx_dll", cAlternateFileName="GRINTL~2.TRX")) returned 1 [0090.073] FindNextFileW (in: hFindFile=0x381f00, lpFindFileData=0x31e404 | out: lpFindFileData=0x31e404*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x1be9a700, ftCreationTime.dwHighDateTime=0x1caca12, ftLastAccessTime.dwLowDateTime=0xeee1cd90, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0x1be9a700, ftLastWriteTime.dwHighDateTime=0x1caca12, nFileSizeHigh=0x0, nFileSizeLow=0x49f60, dwReserved0=0x0, dwReserved1=0x0, cFileName="MAPIR.DLL.trx_dll", cAlternateFileName="MAPIRD~1.TRX")) returned 1 [0090.073] FindNextFileW (in: hFindFile=0x381f00, lpFindFileData=0x31e404 | out: lpFindFileData=0x31e404*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xa27f6800, ftCreationTime.dwHighDateTime=0x1cac809, ftLastAccessTime.dwLowDateTime=0xeee1cd90, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xa27f6800, ftLastWriteTime.dwHighDateTime=0x1cac809, nFileSizeHigh=0x0, nFileSizeLow=0xc160, dwReserved0=0x0, dwReserved1=0x0, cFileName="MOR6INT.REST.trx_dll", cAlternateFileName="MOR6IN~1.TRX")) returned 1 [0090.073] FindNextFileW (in: hFindFile=0x381f00, lpFindFileData=0x31e404 | out: lpFindFileData=0x31e404*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x9f53ca00, ftCreationTime.dwHighDateTime=0x1caca0b, ftLastAccessTime.dwLowDateTime=0xeee42ef0, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0x9f53ca00, ftLastWriteTime.dwHighDateTime=0x1caca0b, nFileSizeHigh=0x0, nFileSizeLow=0x17960, dwReserved0=0x0, dwReserved1=0x0, cFileName="MSOINTL.DLL.trx_dll", cAlternateFileName="MSOINT~1.TRX")) returned 1 [0090.073] FindNextFileW (in: hFindFile=0x381f00, lpFindFileData=0x31e404 | out: lpFindFileData=0x31e404*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x9f53ca00, ftCreationTime.dwHighDateTime=0x1caca0b, ftLastAccessTime.dwLowDateTime=0xeeeb5310, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0x9f53ca00, ftLastWriteTime.dwHighDateTime=0x1caca0b, nFileSizeHigh=0x0, nFileSizeLow=0x2ced60, dwReserved0=0x0, dwReserved1=0x0, cFileName="MSOINTL.REST.trx_dll", cAlternateFileName="MSOINT~2.TRX")) returned 1 [0090.073] FindNextFileW (in: hFindFile=0x381f00, lpFindFileData=0x31e404 | out: lpFindFileData=0x31e404*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xaa381000, ftCreationTime.dwHighDateTime=0x1cac7fb, ftLastAccessTime.dwLowDateTime=0xeef27730, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xaa381000, ftLastWriteTime.dwHighDateTime=0x1cac7fb, nFileSizeHigh=0x0, nFileSizeLow=0xb360, dwReserved0=0x0, dwReserved1=0x0, cFileName="OMSINTL.DLL.trx_dll", cAlternateFileName="OMSINT~1.TRX")) returned 1 [0090.074] FindNextFileW (in: hFindFile=0x381f00, lpFindFileData=0x31e404 | out: lpFindFileData=0x31e404*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x7337cc00, ftCreationTime.dwHighDateTime=0x1cacf6a, ftLastAccessTime.dwLowDateTime=0xeef27730, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0x7337cc00, ftLastWriteTime.dwHighDateTime=0x1cacf6a, nFileSizeHigh=0x0, nFileSizeLow=0x7b60, dwReserved0=0x0, dwReserved1=0x0, cFileName="ONINTL.DLL.trx_dll", cAlternateFileName="ONINTL~1.TRX")) returned 1 [0090.074] FindNextFileW (in: hFindFile=0x381f00, lpFindFileData=0x31e404 | out: lpFindFileData=0x31e404*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x7337cc00, ftCreationTime.dwHighDateTime=0x1cacf6a, ftLastAccessTime.dwLowDateTime=0xeef4d890, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0x7337cc00, ftLastWriteTime.dwHighDateTime=0x1cacf6a, nFileSizeHigh=0x0, nFileSizeLow=0x3fb60, dwReserved0=0x0, dwReserved1=0x0, cFileName="ONINTL.REST.trx_dll", cAlternateFileName="ONINTL~2.TRX")) returned 1 [0090.074] FindNextFileW (in: hFindFile=0x381f00, lpFindFileData=0x31e404 | out: lpFindFileData=0x31e404*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x1ab87a00, ftCreationTime.dwHighDateTime=0x1caca12, ftLastAccessTime.dwLowDateTime=0xeef4d890, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0x1ab87a00, ftLastWriteTime.dwHighDateTime=0x1caca12, nFileSizeHigh=0x0, nFileSizeLow=0x37560, dwReserved0=0x0, dwReserved1=0x0, cFileName="OUTLLIBR.DLL.trx_dll", cAlternateFileName="OUTLLI~1.TRX")) returned 1 [0090.074] FindNextFileW (in: hFindFile=0x381f00, lpFindFileData=0x31e404 | out: lpFindFileData=0x31e404*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x1ab87a00, ftCreationTime.dwHighDateTime=0x1caca12, ftLastAccessTime.dwLowDateTime=0xeef739f0, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0x1ab87a00, ftLastWriteTime.dwHighDateTime=0x1caca12, nFileSizeHigh=0x0, nFileSizeLow=0xa6560, dwReserved0=0x0, dwReserved1=0x0, cFileName="OUTLLIBR.REST.trx_dll", cAlternateFileName="OUTLLI~2.TRX")) returned 1 [0090.074] FindNextFileW (in: hFindFile=0x381f00, lpFindFileData=0x31e404 | out: lpFindFileData=0x31e404*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x1be9a700, ftCreationTime.dwHighDateTime=0x1caca12, ftLastAccessTime.dwLowDateTime=0xeef739f0, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0x1be9a700, ftLastWriteTime.dwHighDateTime=0x1caca12, nFileSizeHigh=0x0, nFileSizeLow=0x2b60, dwReserved0=0x0, dwReserved1=0x0, cFileName="OUTLWVW.DLL.trx_dll", cAlternateFileName="OUTLWV~1.TRX")) returned 1 [0090.074] FindNextFileW (in: hFindFile=0x381f00, lpFindFileData=0x31e404 | out: lpFindFileData=0x31e404*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x7cef6000, ftCreationTime.dwHighDateTime=0x1cac803, ftLastAccessTime.dwLowDateTime=0xef00bf70, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0x7cef6000, ftLastWriteTime.dwHighDateTime=0x1cac803, nFileSizeHigh=0x0, nFileSizeLow=0xcd60, dwReserved0=0x0, dwReserved1=0x0, cFileName="PPINTL.DLL.trx_dll", cAlternateFileName="PPINTL~1.TRX")) returned 1 [0090.074] FindNextFileW (in: hFindFile=0x381f00, lpFindFileData=0x31e404 | out: lpFindFileData=0x31e404*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x7cef6000, ftCreationTime.dwHighDateTime=0x1cac803, ftLastAccessTime.dwLowDateTime=0xef00bf70, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0x7cef6000, ftLastWriteTime.dwHighDateTime=0x1cac803, nFileSizeHigh=0x0, nFileSizeLow=0x45f60, dwReserved0=0x0, dwReserved1=0x0, cFileName="PPINTL.REST.trx_dll", cAlternateFileName="PPINTL~2.TRX")) returned 1 [0090.074] FindNextFileW (in: hFindFile=0x381f00, lpFindFileData=0x31e404 | out: lpFindFileData=0x31e404*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xa3b09500, ftCreationTime.dwHighDateTime=0x1cac809, ftLastAccessTime.dwLowDateTime=0xef00bf70, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xa3b09500, ftLastWriteTime.dwHighDateTime=0x1cac809, nFileSizeHigh=0x0, nFileSizeLow=0x1a360, dwReserved0=0x0, dwReserved1=0x0, cFileName="PUB6INTL.DLL.trx_dll", cAlternateFileName="PUB6IN~1.TRX")) returned 1 [0090.074] FindNextFileW (in: hFindFile=0x381f00, lpFindFileData=0x31e404 | out: lpFindFileData=0x31e404*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xa27f6800, ftCreationTime.dwHighDateTime=0x1cac809, ftLastAccessTime.dwLowDateTime=0xef0320d0, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xa27f6800, ftLastWriteTime.dwHighDateTime=0x1cac809, nFileSizeHigh=0x0, nFileSizeLow=0x8e160, dwReserved0=0x0, dwReserved1=0x0, cFileName="PUB6INTL.REST.trx_dll", cAlternateFileName="PUB6IN~2.TRX")) returned 1 [0090.077] FindNextFileW (in: hFindFile=0x381f00, lpFindFileData=0x31e404 | out: lpFindFileData=0x31e404*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x749d2200, ftCreationTime.dwHighDateTime=0x1cac80f, ftLastAccessTime.dwLowDateTime=0xef0320d0, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0x749d2200, ftLastWriteTime.dwHighDateTime=0x1cac80f, nFileSizeHigh=0x0, nFileSizeLow=0x5ab60, dwReserved0=0x0, dwReserved1=0x0, cFileName="PUBWZINT.REST.trx_dll", cAlternateFileName="PUBWZI~1.TRX")) returned 1 [0090.077] FindNextFileW (in: hFindFile=0x381f00, lpFindFileData=0x31e404 | out: lpFindFileData=0x31e404*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x6d7a1200, ftCreationTime.dwHighDateTime=0x1cac817, ftLastAccessTime.dwLowDateTime=0xef058230, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0x6d7a1200, ftLastWriteTime.dwHighDateTime=0x1cac817, nFileSizeHigh=0x0, nFileSizeLow=0x3360, dwReserved0=0x0, dwReserved1=0x0, cFileName="SGRES.DLL.trx_dll", cAlternateFileName="SGRESD~1.TRX")) returned 1 [0090.077] FindNextFileW (in: hFindFile=0x381f00, lpFindFileData=0x31e404 | out: lpFindFileData=0x31e404*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xc8e7d800, ftCreationTime.dwHighDateTime=0x1cac7f6, ftLastAccessTime.dwLowDateTime=0xef058230, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xc8e7d800, ftLastWriteTime.dwHighDateTime=0x1cac7f6, nFileSizeHigh=0x0, nFileSizeLow=0x4160, dwReserved0=0x0, dwReserved1=0x0, cFileName="STINTL.DLL.trx_dll", cAlternateFileName="STINTL~1.TRX")) returned 1 [0090.077] FindNextFileW (in: hFindFile=0x381f00, lpFindFileData=0x31e404 | out: lpFindFileData=0x31e404*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xbf706700, ftCreationTime.dwHighDateTime=0x1cac81a, ftLastAccessTime.dwLowDateTime=0xef0a44f0, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xbf706700, ftLastWriteTime.dwHighDateTime=0x1cac81a, nFileSizeHigh=0x0, nFileSizeLow=0x6960, dwReserved0=0x0, dwReserved1=0x0, cFileName="VISBRRES.DLL.trx_dll", cAlternateFileName="VISBRR~1.TRX")) returned 1 [0090.077] FindNextFileW (in: hFindFile=0x381f00, lpFindFileData=0x31e404 | out: lpFindFileData=0x31e404*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x6a315700, ftCreationTime.dwHighDateTime=0x1cac814, ftLastAccessTime.dwLowDateTime=0xef0a44f0, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0x6a315700, ftLastWriteTime.dwHighDateTime=0x1cac814, nFileSizeHigh=0x0, nFileSizeLow=0x77560, dwReserved0=0x0, dwReserved1=0x0, cFileName="VISINTL.DLL.trx_dll", cAlternateFileName="VISINT~1.TRX")) returned 1 [0090.077] FindNextFileW (in: hFindFile=0x381f00, lpFindFileData=0x31e404 | out: lpFindFileData=0x31e404*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xcb31c100, ftCreationTime.dwHighDateTime=0x1cacd25, ftLastAccessTime.dwLowDateTime=0xef0ca650, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xcb31c100, ftLastWriteTime.dwHighDateTime=0x1cacd25, nFileSizeHigh=0x0, nFileSizeLow=0x25b60, dwReserved0=0x0, dwReserved1=0x0, cFileName="WWINTL.DLL.trx_dll", cAlternateFileName="WWINTL~1.TRX")) returned 1 [0090.078] FindNextFileW (in: hFindFile=0x381f00, lpFindFileData=0x31e404 | out: lpFindFileData=0x31e404*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xcb31c100, ftCreationTime.dwHighDateTime=0x1cacd25, ftLastAccessTime.dwLowDateTime=0xef0f07b0, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xcb31c100, ftLastWriteTime.dwHighDateTime=0x1cacd25, nFileSizeHigh=0x0, nFileSizeLow=0x115b60, dwReserved0=0x0, dwReserved1=0x0, cFileName="WWINTL.REST.trx_dll", cAlternateFileName="WWINTL~2.TRX")) returned 1 [0090.078] FindNextFileW (in: hFindFile=0x381f00, lpFindFileData=0x31e404 | out: lpFindFileData=0x31e404*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x6b688100, ftCreationTime.dwHighDateTime=0x1cac820, ftLastAccessTime.dwLowDateTime=0xef0f07b0, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0x6b688100, ftLastWriteTime.dwHighDateTime=0x1cac820, nFileSizeHigh=0x0, nFileSizeLow=0x25360, dwReserved0=0x0, dwReserved1=0x0, cFileName="XLINTL32.DLL.trx_dll", cAlternateFileName="XLINTL~1.TRX")) returned 1 [0090.078] FindNextFileW (in: hFindFile=0x381f00, lpFindFileData=0x31e404 | out: lpFindFileData=0x31e404*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x6a375400, ftCreationTime.dwHighDateTime=0x1cac820, ftLastAccessTime.dwLowDateTime=0xef116910, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0x6a375400, ftLastWriteTime.dwHighDateTime=0x1cac820, nFileSizeHigh=0x0, nFileSizeLow=0x137960, dwReserved0=0x0, dwReserved1=0x0, cFileName="XLINTL32.REST.trx_dll", cAlternateFileName="XLINTL~2.TRX")) returned 1 [0090.078] FindNextFileW (in: hFindFile=0x381f00, lpFindFileData=0x31e404 | out: lpFindFileData=0x31e404*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xfe092000, ftCreationTime.dwHighDateTime=0x1cac820, ftLastAccessTime.dwLowDateTime=0xef116910, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xfe092000, ftLastWriteTime.dwHighDateTime=0x1cac820, nFileSizeHigh=0x0, nFileSizeLow=0x3d60, dwReserved0=0x0, dwReserved1=0x0, cFileName="XLSLICER.DLL.trx_dll", cAlternateFileName="XLSLIC~1.TRX")) returned 1 [0090.078] FindNextFileW (in: hFindFile=0x381f00, lpFindFileData=0x31e404 | out: lpFindFileData=0x31e404*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0090.078] FindClose (in: hFindFile=0x381f00 | out: hFindFile=0x381f00) returned 1 [0090.079] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e68c) returned 1 [0090.079] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e698) returned 1 [0090.079] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e6cc) returned 1 [0090.079] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\OFFICE\\UICaptions\\1036", nBufferLength=0x105, lpBuffer=0x31e1d4, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Microsoft\\OFFICE\\UICaptions\\1036", lpFilePart=0x0) returned 0x33 [0090.079] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\OFFICE\\UICaptions\\1036\\", nBufferLength=0x105, lpBuffer=0x31e1a8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Microsoft\\OFFICE\\UICaptions\\1036\\", lpFilePart=0x0) returned 0x34 [0090.079] FindFirstFileW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\OFFICE\\UICaptions\\1036\\*", lpFindFileData=0x31e3f4 | out: lpFindFileData=0x31e3f4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xeed38550, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xef116910, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xef116910, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x381f00 [0090.080] FindNextFileW (in: hFindFile=0x381f00, lpFindFileData=0x31e404 | out: lpFindFileData=0x31e404*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xeed38550, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xef116910, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xef116910, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0090.080] FindNextFileW (in: hFindFile=0x381f00, lpFindFileData=0x31e404 | out: lpFindFileData=0x31e404*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x1be9a700, ftCreationTime.dwHighDateTime=0x1caca12, ftLastAccessTime.dwLowDateTime=0xeed38550, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0x1be9a700, ftLastWriteTime.dwHighDateTime=0x1caca12, nFileSizeHigh=0x0, nFileSizeLow=0x3960, dwReserved0=0x0, dwReserved1=0x0, cFileName="ENVELOPR.DLL.trx_dll", cAlternateFileName="ENVELO~1.TRX")) returned 1 [0090.080] FindNextFileW (in: hFindFile=0x381f00, lpFindFileData=0x31e404 | out: lpFindFileData=0x31e404*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xbd48e100, ftCreationTime.dwHighDateTime=0x1cac7f7, ftLastAccessTime.dwLowDateTime=0xeedf6c30, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xbd48e100, ftLastWriteTime.dwHighDateTime=0x1cac7f7, nFileSizeHigh=0x0, nFileSizeLow=0xbf60, dwReserved0=0x0, dwReserved1=0x0, cFileName="GRINTL32.DLL.trx_dll", cAlternateFileName="GRINTL~1.TRX")) returned 1 [0090.080] FindNextFileW (in: hFindFile=0x381f00, lpFindFileData=0x31e404 | out: lpFindFileData=0x31e404*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xbd48e100, ftCreationTime.dwHighDateTime=0x1cac7f7, ftLastAccessTime.dwLowDateTime=0xeedf6c30, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xbd48e100, ftLastWriteTime.dwHighDateTime=0x1cac7f7, nFileSizeHigh=0x0, nFileSizeLow=0x3d960, dwReserved0=0x0, dwReserved1=0x0, cFileName="GRINTL32.REST.trx_dll", cAlternateFileName="GRINTL~2.TRX")) returned 1 [0090.080] FindNextFileW (in: hFindFile=0x381f00, lpFindFileData=0x31e404 | out: lpFindFileData=0x31e404*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x1be9a700, ftCreationTime.dwHighDateTime=0x1caca12, ftLastAccessTime.dwLowDateTime=0xeee1cd90, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0x1be9a700, ftLastWriteTime.dwHighDateTime=0x1caca12, nFileSizeHigh=0x0, nFileSizeLow=0x49f60, dwReserved0=0x0, dwReserved1=0x0, cFileName="MAPIR.DLL.trx_dll", cAlternateFileName="MAPIRD~1.TRX")) returned 1 [0090.080] FindNextFileW (in: hFindFile=0x381f00, lpFindFileData=0x31e404 | out: lpFindFileData=0x31e404*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xa27f6800, ftCreationTime.dwHighDateTime=0x1cac809, ftLastAccessTime.dwLowDateTime=0xeee1cd90, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xa27f6800, ftLastWriteTime.dwHighDateTime=0x1cac809, nFileSizeHigh=0x0, nFileSizeLow=0xc160, dwReserved0=0x0, dwReserved1=0x0, cFileName="MOR6INT.REST.trx_dll", cAlternateFileName="MOR6IN~1.TRX")) returned 1 [0090.080] FindNextFileW (in: hFindFile=0x381f00, lpFindFileData=0x31e404 | out: lpFindFileData=0x31e404*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x9f53ca00, ftCreationTime.dwHighDateTime=0x1caca0b, ftLastAccessTime.dwLowDateTime=0xeee42ef0, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0x9f53ca00, ftLastWriteTime.dwHighDateTime=0x1caca0b, nFileSizeHigh=0x0, nFileSizeLow=0x17960, dwReserved0=0x0, dwReserved1=0x0, cFileName="MSOINTL.DLL.trx_dll", cAlternateFileName="MSOINT~1.TRX")) returned 1 [0090.081] FindNextFileW (in: hFindFile=0x381f00, lpFindFileData=0x31e404 | out: lpFindFileData=0x31e404*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x9f53ca00, ftCreationTime.dwHighDateTime=0x1caca0b, ftLastAccessTime.dwLowDateTime=0xeeeb5310, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0x9f53ca00, ftLastWriteTime.dwHighDateTime=0x1caca0b, nFileSizeHigh=0x0, nFileSizeLow=0x2ced60, dwReserved0=0x0, dwReserved1=0x0, cFileName="MSOINTL.REST.trx_dll", cAlternateFileName="MSOINT~2.TRX")) returned 1 [0090.081] FindNextFileW (in: hFindFile=0x381f00, lpFindFileData=0x31e404 | out: lpFindFileData=0x31e404*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xaa381000, ftCreationTime.dwHighDateTime=0x1cac7fb, ftLastAccessTime.dwLowDateTime=0xeef27730, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xaa381000, ftLastWriteTime.dwHighDateTime=0x1cac7fb, nFileSizeHigh=0x0, nFileSizeLow=0xb360, dwReserved0=0x0, dwReserved1=0x0, cFileName="OMSINTL.DLL.trx_dll", cAlternateFileName="OMSINT~1.TRX")) returned 1 [0090.081] FindNextFileW (in: hFindFile=0x381f00, lpFindFileData=0x31e404 | out: lpFindFileData=0x31e404*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x7337cc00, ftCreationTime.dwHighDateTime=0x1cacf6a, ftLastAccessTime.dwLowDateTime=0xeef27730, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0x7337cc00, ftLastWriteTime.dwHighDateTime=0x1cacf6a, nFileSizeHigh=0x0, nFileSizeLow=0x7b60, dwReserved0=0x0, dwReserved1=0x0, cFileName="ONINTL.DLL.trx_dll", cAlternateFileName="ONINTL~1.TRX")) returned 1 [0090.081] FindNextFileW (in: hFindFile=0x381f00, lpFindFileData=0x31e404 | out: lpFindFileData=0x31e404*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x7337cc00, ftCreationTime.dwHighDateTime=0x1cacf6a, ftLastAccessTime.dwLowDateTime=0xeef4d890, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0x7337cc00, ftLastWriteTime.dwHighDateTime=0x1cacf6a, nFileSizeHigh=0x0, nFileSizeLow=0x3fb60, dwReserved0=0x0, dwReserved1=0x0, cFileName="ONINTL.REST.trx_dll", cAlternateFileName="ONINTL~2.TRX")) returned 1 [0090.081] FindNextFileW (in: hFindFile=0x381f00, lpFindFileData=0x31e404 | out: lpFindFileData=0x31e404*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x1ab87a00, ftCreationTime.dwHighDateTime=0x1caca12, ftLastAccessTime.dwLowDateTime=0xeef4d890, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0x1ab87a00, ftLastWriteTime.dwHighDateTime=0x1caca12, nFileSizeHigh=0x0, nFileSizeLow=0x37560, dwReserved0=0x0, dwReserved1=0x0, cFileName="OUTLLIBR.DLL.trx_dll", cAlternateFileName="OUTLLI~1.TRX")) returned 1 [0090.081] FindNextFileW (in: hFindFile=0x381f00, lpFindFileData=0x31e404 | out: lpFindFileData=0x31e404*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x1ab87a00, ftCreationTime.dwHighDateTime=0x1caca12, ftLastAccessTime.dwLowDateTime=0xeef739f0, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0x1ab87a00, ftLastWriteTime.dwHighDateTime=0x1caca12, nFileSizeHigh=0x0, nFileSizeLow=0xa6560, dwReserved0=0x0, dwReserved1=0x0, cFileName="OUTLLIBR.REST.trx_dll", cAlternateFileName="OUTLLI~2.TRX")) returned 1 [0090.081] FindNextFileW (in: hFindFile=0x381f00, lpFindFileData=0x31e404 | out: lpFindFileData=0x31e404*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x1be9a700, ftCreationTime.dwHighDateTime=0x1caca12, ftLastAccessTime.dwLowDateTime=0xeef739f0, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0x1be9a700, ftLastWriteTime.dwHighDateTime=0x1caca12, nFileSizeHigh=0x0, nFileSizeLow=0x2b60, dwReserved0=0x0, dwReserved1=0x0, cFileName="OUTLWVW.DLL.trx_dll", cAlternateFileName="OUTLWV~1.TRX")) returned 1 [0090.081] FindNextFileW (in: hFindFile=0x381f00, lpFindFileData=0x31e404 | out: lpFindFileData=0x31e404*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x7cef6000, ftCreationTime.dwHighDateTime=0x1cac803, ftLastAccessTime.dwLowDateTime=0xef00bf70, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0x7cef6000, ftLastWriteTime.dwHighDateTime=0x1cac803, nFileSizeHigh=0x0, nFileSizeLow=0xcd60, dwReserved0=0x0, dwReserved1=0x0, cFileName="PPINTL.DLL.trx_dll", cAlternateFileName="PPINTL~1.TRX")) returned 1 [0090.081] FindNextFileW (in: hFindFile=0x381f00, lpFindFileData=0x31e404 | out: lpFindFileData=0x31e404*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x7cef6000, ftCreationTime.dwHighDateTime=0x1cac803, ftLastAccessTime.dwLowDateTime=0xef00bf70, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0x7cef6000, ftLastWriteTime.dwHighDateTime=0x1cac803, nFileSizeHigh=0x0, nFileSizeLow=0x45f60, dwReserved0=0x0, dwReserved1=0x0, cFileName="PPINTL.REST.trx_dll", cAlternateFileName="PPINTL~2.TRX")) returned 1 [0090.081] FindNextFileW (in: hFindFile=0x381f00, lpFindFileData=0x31e404 | out: lpFindFileData=0x31e404*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xa3b09500, ftCreationTime.dwHighDateTime=0x1cac809, ftLastAccessTime.dwLowDateTime=0xef00bf70, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xa3b09500, ftLastWriteTime.dwHighDateTime=0x1cac809, nFileSizeHigh=0x0, nFileSizeLow=0x1a360, dwReserved0=0x0, dwReserved1=0x0, cFileName="PUB6INTL.DLL.trx_dll", cAlternateFileName="PUB6IN~1.TRX")) returned 1 [0090.081] FindNextFileW (in: hFindFile=0x381f00, lpFindFileData=0x31e404 | out: lpFindFileData=0x31e404*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xa27f6800, ftCreationTime.dwHighDateTime=0x1cac809, ftLastAccessTime.dwLowDateTime=0xef0320d0, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xa27f6800, ftLastWriteTime.dwHighDateTime=0x1cac809, nFileSizeHigh=0x0, nFileSizeLow=0x8e160, dwReserved0=0x0, dwReserved1=0x0, cFileName="PUB6INTL.REST.trx_dll", cAlternateFileName="PUB6IN~2.TRX")) returned 1 [0090.081] FindNextFileW (in: hFindFile=0x381f00, lpFindFileData=0x31e404 | out: lpFindFileData=0x31e404*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x749d2200, ftCreationTime.dwHighDateTime=0x1cac80f, ftLastAccessTime.dwLowDateTime=0xef0320d0, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0x749d2200, ftLastWriteTime.dwHighDateTime=0x1cac80f, nFileSizeHigh=0x0, nFileSizeLow=0x5ab60, dwReserved0=0x0, dwReserved1=0x0, cFileName="PUBWZINT.REST.trx_dll", cAlternateFileName="PUBWZI~1.TRX")) returned 1 [0090.081] FindNextFileW (in: hFindFile=0x381f00, lpFindFileData=0x31e404 | out: lpFindFileData=0x31e404*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x6d7a1200, ftCreationTime.dwHighDateTime=0x1cac817, ftLastAccessTime.dwLowDateTime=0xef058230, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0x6d7a1200, ftLastWriteTime.dwHighDateTime=0x1cac817, nFileSizeHigh=0x0, nFileSizeLow=0x3360, dwReserved0=0x0, dwReserved1=0x0, cFileName="SGRES.DLL.trx_dll", cAlternateFileName="SGRESD~1.TRX")) returned 1 [0090.081] FindNextFileW (in: hFindFile=0x381f00, lpFindFileData=0x31e404 | out: lpFindFileData=0x31e404*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xc8e7d800, ftCreationTime.dwHighDateTime=0x1cac7f6, ftLastAccessTime.dwLowDateTime=0xef058230, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xc8e7d800, ftLastWriteTime.dwHighDateTime=0x1cac7f6, nFileSizeHigh=0x0, nFileSizeLow=0x4160, dwReserved0=0x0, dwReserved1=0x0, cFileName="STINTL.DLL.trx_dll", cAlternateFileName="STINTL~1.TRX")) returned 1 [0090.081] FindNextFileW (in: hFindFile=0x381f00, lpFindFileData=0x31e404 | out: lpFindFileData=0x31e404*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xbf706700, ftCreationTime.dwHighDateTime=0x1cac81a, ftLastAccessTime.dwLowDateTime=0xef0a44f0, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xbf706700, ftLastWriteTime.dwHighDateTime=0x1cac81a, nFileSizeHigh=0x0, nFileSizeLow=0x6960, dwReserved0=0x0, dwReserved1=0x0, cFileName="VISBRRES.DLL.trx_dll", cAlternateFileName="VISBRR~1.TRX")) returned 1 [0090.081] FindNextFileW (in: hFindFile=0x381f00, lpFindFileData=0x31e404 | out: lpFindFileData=0x31e404*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x6a315700, ftCreationTime.dwHighDateTime=0x1cac814, ftLastAccessTime.dwLowDateTime=0xef0a44f0, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0x6a315700, ftLastWriteTime.dwHighDateTime=0x1cac814, nFileSizeHigh=0x0, nFileSizeLow=0x77560, dwReserved0=0x0, dwReserved1=0x0, cFileName="VISINTL.DLL.trx_dll", cAlternateFileName="VISINT~1.TRX")) returned 1 [0090.081] FindNextFileW (in: hFindFile=0x381f00, lpFindFileData=0x31e404 | out: lpFindFileData=0x31e404*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xcb31c100, ftCreationTime.dwHighDateTime=0x1cacd25, ftLastAccessTime.dwLowDateTime=0xef0ca650, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xcb31c100, ftLastWriteTime.dwHighDateTime=0x1cacd25, nFileSizeHigh=0x0, nFileSizeLow=0x25b60, dwReserved0=0x0, dwReserved1=0x0, cFileName="WWINTL.DLL.trx_dll", cAlternateFileName="WWINTL~1.TRX")) returned 1 [0090.081] FindNextFileW (in: hFindFile=0x381f00, lpFindFileData=0x31e404 | out: lpFindFileData=0x31e404*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xcb31c100, ftCreationTime.dwHighDateTime=0x1cacd25, ftLastAccessTime.dwLowDateTime=0xef0f07b0, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xcb31c100, ftLastWriteTime.dwHighDateTime=0x1cacd25, nFileSizeHigh=0x0, nFileSizeLow=0x115b60, dwReserved0=0x0, dwReserved1=0x0, cFileName="WWINTL.REST.trx_dll", cAlternateFileName="WWINTL~2.TRX")) returned 1 [0090.081] FindNextFileW (in: hFindFile=0x381f00, lpFindFileData=0x31e404 | out: lpFindFileData=0x31e404*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x6b688100, ftCreationTime.dwHighDateTime=0x1cac820, ftLastAccessTime.dwLowDateTime=0xef0f07b0, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0x6b688100, ftLastWriteTime.dwHighDateTime=0x1cac820, nFileSizeHigh=0x0, nFileSizeLow=0x25360, dwReserved0=0x0, dwReserved1=0x0, cFileName="XLINTL32.DLL.trx_dll", cAlternateFileName="XLINTL~1.TRX")) returned 1 [0090.081] FindNextFileW (in: hFindFile=0x381f00, lpFindFileData=0x31e404 | out: lpFindFileData=0x31e404*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x6a375400, ftCreationTime.dwHighDateTime=0x1cac820, ftLastAccessTime.dwLowDateTime=0xef116910, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0x6a375400, ftLastWriteTime.dwHighDateTime=0x1cac820, nFileSizeHigh=0x0, nFileSizeLow=0x137960, dwReserved0=0x0, dwReserved1=0x0, cFileName="XLINTL32.REST.trx_dll", cAlternateFileName="XLINTL~2.TRX")) returned 1 [0090.081] FindNextFileW (in: hFindFile=0x381f00, lpFindFileData=0x31e404 | out: lpFindFileData=0x31e404*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xfe092000, ftCreationTime.dwHighDateTime=0x1cac820, ftLastAccessTime.dwLowDateTime=0xef116910, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xfe092000, ftLastWriteTime.dwHighDateTime=0x1cac820, nFileSizeHigh=0x0, nFileSizeLow=0x3d60, dwReserved0=0x0, dwReserved1=0x0, cFileName="XLSLICER.DLL.trx_dll", cAlternateFileName="XLSLIC~1.TRX")) returned 1 [0090.081] FindNextFileW (in: hFindFile=0x381f00, lpFindFileData=0x31e404 | out: lpFindFileData=0x31e404*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xfe092000, ftCreationTime.dwHighDateTime=0x1cac820, ftLastAccessTime.dwLowDateTime=0xef116910, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xfe092000, ftLastWriteTime.dwHighDateTime=0x1cac820, nFileSizeHigh=0x0, nFileSizeLow=0x3d60, dwReserved0=0x0, dwReserved1=0x0, cFileName="XLSLICER.DLL.trx_dll", cAlternateFileName="XLSLIC~1.TRX")) returned 0 [0090.081] FindClose (in: hFindFile=0x381f00 | out: hFindFile=0x381f00) returned 1 [0090.082] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e68c) returned 1 [0090.082] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e698) returned 1 [0090.082] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e6cc) returned 1 [0090.082] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\OFFICE\\UICaptions\\3082", nBufferLength=0x105, lpBuffer=0x31e1d4, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Microsoft\\OFFICE\\UICaptions\\3082", lpFilePart=0x0) returned 0x33 [0090.082] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\OFFICE\\UICaptions\\3082\\", nBufferLength=0x105, lpBuffer=0x31e1a8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Microsoft\\OFFICE\\UICaptions\\3082\\", lpFilePart=0x0) returned 0x34 [0090.082] FindFirstFileW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\OFFICE\\UICaptions\\3082\\*", lpFindFileData=0x31e3f4 | out: lpFindFileData=0x31e3f4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xeed38550, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xef116910, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xef116910, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x381f00 [0090.083] FindNextFileW (in: hFindFile=0x381f00, lpFindFileData=0x31e404 | out: lpFindFileData=0x31e404*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xeed38550, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xef116910, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xef116910, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0090.083] FindNextFileW (in: hFindFile=0x381f00, lpFindFileData=0x31e404 | out: lpFindFileData=0x31e404*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x302da400, ftCreationTime.dwHighDateTime=0x1caca12, ftLastAccessTime.dwLowDateTime=0xeed38550, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0x302da400, ftLastWriteTime.dwHighDateTime=0x1caca12, nFileSizeHigh=0x0, nFileSizeLow=0x3760, dwReserved0=0x0, dwReserved1=0x0, cFileName="ENVELOPR.DLL.trx_dll", cAlternateFileName="ENVELO~1.TRX")) returned 1 [0090.083] FindNextFileW (in: hFindFile=0x381f00, lpFindFileData=0x31e404 | out: lpFindFileData=0x31e404*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x74912800, ftCreationTime.dwHighDateTime=0x1cac7f7, ftLastAccessTime.dwLowDateTime=0xeedf6c30, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0x74912800, ftLastWriteTime.dwHighDateTime=0x1cac7f7, nFileSizeHigh=0x0, nFileSizeLow=0xb960, dwReserved0=0x0, dwReserved1=0x0, cFileName="GRINTL32.DLL.trx_dll", cAlternateFileName="GRINTL~1.TRX")) returned 1 [0090.083] FindNextFileW (in: hFindFile=0x381f00, lpFindFileData=0x31e404 | out: lpFindFileData=0x31e404*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x74912800, ftCreationTime.dwHighDateTime=0x1cac7f7, ftLastAccessTime.dwLowDateTime=0xeedf6c30, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0x74912800, ftLastWriteTime.dwHighDateTime=0x1cac7f7, nFileSizeHigh=0x0, nFileSizeLow=0x39960, dwReserved0=0x0, dwReserved1=0x0, cFileName="GRINTL32.REST.trx_dll", cAlternateFileName="GRINTL~2.TRX")) returned 1 [0090.083] FindNextFileW (in: hFindFile=0x381f00, lpFindFileData=0x31e404 | out: lpFindFileData=0x31e404*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x302da400, ftCreationTime.dwHighDateTime=0x1caca12, ftLastAccessTime.dwLowDateTime=0xeee1cd90, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0x302da400, ftLastWriteTime.dwHighDateTime=0x1caca12, nFileSizeHigh=0x0, nFileSizeLow=0x47d60, dwReserved0=0x0, dwReserved1=0x0, cFileName="MAPIR.DLL.trx_dll", cAlternateFileName="MAPIRD~1.TRX")) returned 1 [0090.083] FindNextFileW (in: hFindFile=0x381f00, lpFindFileData=0x31e404 | out: lpFindFileData=0x31e404*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x58968200, ftCreationTime.dwHighDateTime=0x1cac809, ftLastAccessTime.dwLowDateTime=0xeee1cd90, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0x58968200, ftLastWriteTime.dwHighDateTime=0x1cac809, nFileSizeHigh=0x0, nFileSizeLow=0xc160, dwReserved0=0x0, dwReserved1=0x0, cFileName="MOR6INT.REST.trx_dll", cAlternateFileName="MOR6IN~1.TRX")) returned 1 [0090.083] FindNextFileW (in: hFindFile=0x381f00, lpFindFileData=0x31e404 | out: lpFindFileData=0x31e404*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x248aaf00, ftCreationTime.dwHighDateTime=0x1caca0b, ftLastAccessTime.dwLowDateTime=0xeee42ef0, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0x248aaf00, ftLastWriteTime.dwHighDateTime=0x1caca0b, nFileSizeHigh=0x0, nFileSizeLow=0x16f60, dwReserved0=0x0, dwReserved1=0x0, cFileName="MSOINTL.DLL.trx_dll", cAlternateFileName="MSOINT~1.TRX")) returned 1 [0090.083] FindNextFileW (in: hFindFile=0x381f00, lpFindFileData=0x31e404 | out: lpFindFileData=0x31e404*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x25bbdc00, ftCreationTime.dwHighDateTime=0x1caca0b, ftLastAccessTime.dwLowDateTime=0xeeeb5310, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0x25bbdc00, ftLastWriteTime.dwHighDateTime=0x1caca0b, nFileSizeHigh=0x0, nFileSizeLow=0x2b2560, dwReserved0=0x0, dwReserved1=0x0, cFileName="MSOINTL.REST.trx_dll", cAlternateFileName="MSOINT~2.TRX")) returned 1 [0090.083] FindNextFileW (in: hFindFile=0x381f00, lpFindFileData=0x31e404 | out: lpFindFileData=0x31e404*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x3564d600, ftCreationTime.dwHighDateTime=0x1cac7fb, ftLastAccessTime.dwLowDateTime=0xeef27730, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0x3564d600, ftLastWriteTime.dwHighDateTime=0x1cac7fb, nFileSizeHigh=0x0, nFileSizeLow=0xb360, dwReserved0=0x0, dwReserved1=0x0, cFileName="OMSINTL.DLL.trx_dll", cAlternateFileName="OMSINT~1.TRX")) returned 1 [0090.084] FindNextFileW (in: hFindFile=0x381f00, lpFindFileData=0x31e404 | out: lpFindFileData=0x31e404*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x63b88300, ftCreationTime.dwHighDateTime=0x1cacf6a, ftLastAccessTime.dwLowDateTime=0xeef27730, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0x63b88300, ftLastWriteTime.dwHighDateTime=0x1cacf6a, nFileSizeHigh=0x0, nFileSizeLow=0x7b60, dwReserved0=0x0, dwReserved1=0x0, cFileName="ONINTL.DLL.trx_dll", cAlternateFileName="ONINTL~1.TRX")) returned 1 [0090.084] FindNextFileW (in: hFindFile=0x381f00, lpFindFileData=0x31e404 | out: lpFindFileData=0x31e404*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x62875600, ftCreationTime.dwHighDateTime=0x1cacf6a, ftLastAccessTime.dwLowDateTime=0xeef4d890, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0x62875600, ftLastWriteTime.dwHighDateTime=0x1cacf6a, nFileSizeHigh=0x0, nFileSizeLow=0x3d960, dwReserved0=0x0, dwReserved1=0x0, cFileName="ONINTL.REST.trx_dll", cAlternateFileName="ONINTL~2.TRX")) returned 1 [0090.084] FindNextFileW (in: hFindFile=0x381f00, lpFindFileData=0x31e404 | out: lpFindFileData=0x31e404*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x302da400, ftCreationTime.dwHighDateTime=0x1caca12, ftLastAccessTime.dwLowDateTime=0xeef4d890, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0x302da400, ftLastWriteTime.dwHighDateTime=0x1caca12, nFileSizeHigh=0x0, nFileSizeLow=0x35960, dwReserved0=0x0, dwReserved1=0x0, cFileName="OUTLLIBR.DLL.trx_dll", cAlternateFileName="OUTLLI~1.TRX")) returned 1 [0090.084] FindNextFileW (in: hFindFile=0x381f00, lpFindFileData=0x31e404 | out: lpFindFileData=0x31e404*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x302da400, ftCreationTime.dwHighDateTime=0x1caca12, ftLastAccessTime.dwLowDateTime=0xeef739f0, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0x302da400, ftLastWriteTime.dwHighDateTime=0x1caca12, nFileSizeHigh=0x0, nFileSizeLow=0x9f560, dwReserved0=0x0, dwReserved1=0x0, cFileName="OUTLLIBR.REST.trx_dll", cAlternateFileName="OUTLLI~2.TRX")) returned 1 [0090.084] FindNextFileW (in: hFindFile=0x381f00, lpFindFileData=0x31e404 | out: lpFindFileData=0x31e404*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x315ed100, ftCreationTime.dwHighDateTime=0x1caca12, ftLastAccessTime.dwLowDateTime=0xeef739f0, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0x315ed100, ftLastWriteTime.dwHighDateTime=0x1caca12, nFileSizeHigh=0x0, nFileSizeLow=0x2d60, dwReserved0=0x0, dwReserved1=0x0, cFileName="OUTLWVW.DLL.trx_dll", cAlternateFileName="OUTLWV~1.TRX")) returned 1 [0090.084] FindNextFileW (in: hFindFile=0x381f00, lpFindFileData=0x31e404 | out: lpFindFileData=0x31e404*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x1a4a9400, ftCreationTime.dwHighDateTime=0x1cac804, ftLastAccessTime.dwLowDateTime=0xef00bf70, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0x1a4a9400, ftLastWriteTime.dwHighDateTime=0x1cac804, nFileSizeHigh=0x0, nFileSizeLow=0xd160, dwReserved0=0x0, dwReserved1=0x0, cFileName="PPINTL.DLL.trx_dll", cAlternateFileName="PPINTL~1.TRX")) returned 1 [0090.084] FindNextFileW (in: hFindFile=0x381f00, lpFindFileData=0x31e404 | out: lpFindFileData=0x31e404*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x19196700, ftCreationTime.dwHighDateTime=0x1cac804, ftLastAccessTime.dwLowDateTime=0xef00bf70, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0x19196700, ftLastWriteTime.dwHighDateTime=0x1cac804, nFileSizeHigh=0x0, nFileSizeLow=0x43560, dwReserved0=0x0, dwReserved1=0x0, cFileName="PPINTL.REST.trx_dll", cAlternateFileName="PPINTL~2.TRX")) returned 1 [0090.084] FindNextFileW (in: hFindFile=0x381f00, lpFindFileData=0x31e404 | out: lpFindFileData=0x31e404*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x58968200, ftCreationTime.dwHighDateTime=0x1cac809, ftLastAccessTime.dwLowDateTime=0xef00bf70, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0x58968200, ftLastWriteTime.dwHighDateTime=0x1cac809, nFileSizeHigh=0x0, nFileSizeLow=0x1a560, dwReserved0=0x0, dwReserved1=0x0, cFileName="PUB6INTL.DLL.trx_dll", cAlternateFileName="PUB6IN~1.TRX")) returned 1 [0090.084] FindNextFileW (in: hFindFile=0x381f00, lpFindFileData=0x31e404 | out: lpFindFileData=0x31e404*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x57655500, ftCreationTime.dwHighDateTime=0x1cac809, ftLastAccessTime.dwLowDateTime=0xef0320d0, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0x57655500, ftLastWriteTime.dwHighDateTime=0x1cac809, nFileSizeHigh=0x0, nFileSizeLow=0x87f60, dwReserved0=0x0, dwReserved1=0x0, cFileName="PUB6INTL.REST.trx_dll", cAlternateFileName="PUB6IN~2.TRX")) returned 1 [0090.084] FindNextFileW (in: hFindFile=0x381f00, lpFindFileData=0x31e404 | out: lpFindFileData=0x31e404*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x2720b500, ftCreationTime.dwHighDateTime=0x1cac80f, ftLastAccessTime.dwLowDateTime=0xef0320d0, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0x2720b500, ftLastWriteTime.dwHighDateTime=0x1cac80f, nFileSizeHigh=0x0, nFileSizeLow=0x57f60, dwReserved0=0x0, dwReserved1=0x0, cFileName="PUBWZINT.REST.trx_dll", cAlternateFileName="PUBWZI~1.TRX")) returned 1 [0090.084] FindNextFileW (in: hFindFile=0x381f00, lpFindFileData=0x31e404 | out: lpFindFileData=0x31e404*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x94d0df00, ftCreationTime.dwHighDateTime=0x1cac817, ftLastAccessTime.dwLowDateTime=0xef058230, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0x94d0df00, ftLastWriteTime.dwHighDateTime=0x1cac817, nFileSizeHigh=0x0, nFileSizeLow=0x3360, dwReserved0=0x0, dwReserved1=0x0, cFileName="SGRES.DLL.trx_dll", cAlternateFileName="SGRESD~1.TRX")) returned 1 [0090.084] FindNextFileW (in: hFindFile=0x381f00, lpFindFileData=0x31e404 | out: lpFindFileData=0x31e404*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xca190500, ftCreationTime.dwHighDateTime=0x1cac7f6, ftLastAccessTime.dwLowDateTime=0xef058230, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xca190500, ftLastWriteTime.dwHighDateTime=0x1cac7f6, nFileSizeHigh=0x0, nFileSizeLow=0x4360, dwReserved0=0x0, dwReserved1=0x0, cFileName="STINTL.DLL.trx_dll", cAlternateFileName="STINTL~1.TRX")) returned 1 [0090.084] FindNextFileW (in: hFindFile=0x381f00, lpFindFileData=0x31e404 | out: lpFindFileData=0x31e404*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xbf706700, ftCreationTime.dwHighDateTime=0x1cac81a, ftLastAccessTime.dwLowDateTime=0xef0a44f0, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xbf706700, ftLastWriteTime.dwHighDateTime=0x1cac81a, nFileSizeHigh=0x0, nFileSizeLow=0x6960, dwReserved0=0x0, dwReserved1=0x0, cFileName="VISBRRES.DLL.trx_dll", cAlternateFileName="VISBRR~1.TRX")) returned 1 [0090.084] FindNextFileW (in: hFindFile=0x381f00, lpFindFileData=0x31e404 | out: lpFindFileData=0x31e404*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x70273800, ftCreationTime.dwHighDateTime=0x1cac814, ftLastAccessTime.dwLowDateTime=0xef0a44f0, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0x70273800, ftLastWriteTime.dwHighDateTime=0x1cac814, nFileSizeHigh=0x0, nFileSizeLow=0x73960, dwReserved0=0x0, dwReserved1=0x0, cFileName="VISINTL.DLL.trx_dll", cAlternateFileName="VISINT~1.TRX")) returned 1 [0090.084] FindNextFileW (in: hFindFile=0x381f00, lpFindFileData=0x31e404 | out: lpFindFileData=0x31e404*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xa1789a00, ftCreationTime.dwHighDateTime=0x1cacd25, ftLastAccessTime.dwLowDateTime=0xef0ca650, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xa1789a00, ftLastWriteTime.dwHighDateTime=0x1cacd25, nFileSizeHigh=0x0, nFileSizeLow=0x24360, dwReserved0=0x0, dwReserved1=0x0, cFileName="WWINTL.DLL.trx_dll", cAlternateFileName="WWINTL~1.TRX")) returned 1 [0090.084] FindNextFileW (in: hFindFile=0x381f00, lpFindFileData=0x31e404 | out: lpFindFileData=0x31e404*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xa2a9c700, ftCreationTime.dwHighDateTime=0x1cacd25, ftLastAccessTime.dwLowDateTime=0xef0f07b0, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xa2a9c700, ftLastWriteTime.dwHighDateTime=0x1cacd25, nFileSizeHigh=0x0, nFileSizeLow=0x110b60, dwReserved0=0x0, dwReserved1=0x0, cFileName="WWINTL.REST.trx_dll", cAlternateFileName="WWINTL~2.TRX")) returned 1 [0090.084] FindNextFileW (in: hFindFile=0x381f00, lpFindFileData=0x31e404 | out: lpFindFileData=0x31e404*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x61df1900, ftCreationTime.dwHighDateTime=0x1cac820, ftLastAccessTime.dwLowDateTime=0xef0f07b0, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0x61df1900, ftLastWriteTime.dwHighDateTime=0x1cac820, nFileSizeHigh=0x0, nFileSizeLow=0x23960, dwReserved0=0x0, dwReserved1=0x0, cFileName="XLINTL32.DLL.trx_dll", cAlternateFileName="XLINTL~1.TRX")) returned 1 [0090.084] FindNextFileW (in: hFindFile=0x381f00, lpFindFileData=0x31e404 | out: lpFindFileData=0x31e404*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x61df1900, ftCreationTime.dwHighDateTime=0x1cac820, ftLastAccessTime.dwLowDateTime=0xef116910, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0x61df1900, ftLastWriteTime.dwHighDateTime=0x1cac820, nFileSizeHigh=0x0, nFileSizeLow=0x126760, dwReserved0=0x0, dwReserved1=0x0, cFileName="XLINTL32.REST.trx_dll", cAlternateFileName="XLINTL~2.TRX")) returned 1 [0090.084] FindNextFileW (in: hFindFile=0x381f00, lpFindFileData=0x31e404 | out: lpFindFileData=0x31e404*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xd7e38000, ftCreationTime.dwHighDateTime=0x1cac820, ftLastAccessTime.dwLowDateTime=0xef116910, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xd7e38000, ftLastWriteTime.dwHighDateTime=0x1cac820, nFileSizeHigh=0x0, nFileSizeLow=0x3960, dwReserved0=0x0, dwReserved1=0x0, cFileName="XLSLICER.DLL.trx_dll", cAlternateFileName="XLSLIC~1.TRX")) returned 1 [0090.084] FindNextFileW (in: hFindFile=0x381f00, lpFindFileData=0x31e404 | out: lpFindFileData=0x31e404*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0090.084] FindClose (in: hFindFile=0x381f00 | out: hFindFile=0x381f00) returned 1 [0090.085] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e68c) returned 1 [0090.085] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e698) returned 1 [0090.085] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e6cc) returned 1 [0090.085] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\OFFICE\\UICaptions\\3082", nBufferLength=0x105, lpBuffer=0x31e1d4, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Microsoft\\OFFICE\\UICaptions\\3082", lpFilePart=0x0) returned 0x33 [0090.085] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\OFFICE\\UICaptions\\3082\\", nBufferLength=0x105, lpBuffer=0x31e1a8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Microsoft\\OFFICE\\UICaptions\\3082\\", lpFilePart=0x0) returned 0x34 [0090.085] FindFirstFileW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\OFFICE\\UICaptions\\3082\\*", lpFindFileData=0x31e3f4 | out: lpFindFileData=0x31e3f4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xeed38550, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xef116910, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xef116910, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x381f00 [0090.086] FindNextFileW (in: hFindFile=0x381f00, lpFindFileData=0x31e404 | out: lpFindFileData=0x31e404*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xeed38550, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xef116910, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xef116910, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0090.086] FindNextFileW (in: hFindFile=0x381f00, lpFindFileData=0x31e404 | out: lpFindFileData=0x31e404*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x302da400, ftCreationTime.dwHighDateTime=0x1caca12, ftLastAccessTime.dwLowDateTime=0xeed38550, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0x302da400, ftLastWriteTime.dwHighDateTime=0x1caca12, nFileSizeHigh=0x0, nFileSizeLow=0x3760, dwReserved0=0x0, dwReserved1=0x0, cFileName="ENVELOPR.DLL.trx_dll", cAlternateFileName="ENVELO~1.TRX")) returned 1 [0090.086] FindNextFileW (in: hFindFile=0x381f00, lpFindFileData=0x31e404 | out: lpFindFileData=0x31e404*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x74912800, ftCreationTime.dwHighDateTime=0x1cac7f7, ftLastAccessTime.dwLowDateTime=0xeedf6c30, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0x74912800, ftLastWriteTime.dwHighDateTime=0x1cac7f7, nFileSizeHigh=0x0, nFileSizeLow=0xb960, dwReserved0=0x0, dwReserved1=0x0, cFileName="GRINTL32.DLL.trx_dll", cAlternateFileName="GRINTL~1.TRX")) returned 1 [0090.086] FindNextFileW (in: hFindFile=0x381f00, lpFindFileData=0x31e404 | out: lpFindFileData=0x31e404*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x74912800, ftCreationTime.dwHighDateTime=0x1cac7f7, ftLastAccessTime.dwLowDateTime=0xeedf6c30, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0x74912800, ftLastWriteTime.dwHighDateTime=0x1cac7f7, nFileSizeHigh=0x0, nFileSizeLow=0x39960, dwReserved0=0x0, dwReserved1=0x0, cFileName="GRINTL32.REST.trx_dll", cAlternateFileName="GRINTL~2.TRX")) returned 1 [0090.086] FindNextFileW (in: hFindFile=0x381f00, lpFindFileData=0x31e404 | out: lpFindFileData=0x31e404*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x302da400, ftCreationTime.dwHighDateTime=0x1caca12, ftLastAccessTime.dwLowDateTime=0xeee1cd90, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0x302da400, ftLastWriteTime.dwHighDateTime=0x1caca12, nFileSizeHigh=0x0, nFileSizeLow=0x47d60, dwReserved0=0x0, dwReserved1=0x0, cFileName="MAPIR.DLL.trx_dll", cAlternateFileName="MAPIRD~1.TRX")) returned 1 [0090.086] FindNextFileW (in: hFindFile=0x381f00, lpFindFileData=0x31e404 | out: lpFindFileData=0x31e404*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x58968200, ftCreationTime.dwHighDateTime=0x1cac809, ftLastAccessTime.dwLowDateTime=0xeee1cd90, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0x58968200, ftLastWriteTime.dwHighDateTime=0x1cac809, nFileSizeHigh=0x0, nFileSizeLow=0xc160, dwReserved0=0x0, dwReserved1=0x0, cFileName="MOR6INT.REST.trx_dll", cAlternateFileName="MOR6IN~1.TRX")) returned 1 [0090.086] FindNextFileW (in: hFindFile=0x381f00, lpFindFileData=0x31e404 | out: lpFindFileData=0x31e404*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x248aaf00, ftCreationTime.dwHighDateTime=0x1caca0b, ftLastAccessTime.dwLowDateTime=0xeee42ef0, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0x248aaf00, ftLastWriteTime.dwHighDateTime=0x1caca0b, nFileSizeHigh=0x0, nFileSizeLow=0x16f60, dwReserved0=0x0, dwReserved1=0x0, cFileName="MSOINTL.DLL.trx_dll", cAlternateFileName="MSOINT~1.TRX")) returned 1 [0090.086] FindNextFileW (in: hFindFile=0x381f00, lpFindFileData=0x31e404 | out: lpFindFileData=0x31e404*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x25bbdc00, ftCreationTime.dwHighDateTime=0x1caca0b, ftLastAccessTime.dwLowDateTime=0xeeeb5310, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0x25bbdc00, ftLastWriteTime.dwHighDateTime=0x1caca0b, nFileSizeHigh=0x0, nFileSizeLow=0x2b2560, dwReserved0=0x0, dwReserved1=0x0, cFileName="MSOINTL.REST.trx_dll", cAlternateFileName="MSOINT~2.TRX")) returned 1 [0090.086] FindNextFileW (in: hFindFile=0x381f00, lpFindFileData=0x31e404 | out: lpFindFileData=0x31e404*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x3564d600, ftCreationTime.dwHighDateTime=0x1cac7fb, ftLastAccessTime.dwLowDateTime=0xeef27730, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0x3564d600, ftLastWriteTime.dwHighDateTime=0x1cac7fb, nFileSizeHigh=0x0, nFileSizeLow=0xb360, dwReserved0=0x0, dwReserved1=0x0, cFileName="OMSINTL.DLL.trx_dll", cAlternateFileName="OMSINT~1.TRX")) returned 1 [0090.086] FindNextFileW (in: hFindFile=0x381f00, lpFindFileData=0x31e404 | out: lpFindFileData=0x31e404*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x63b88300, ftCreationTime.dwHighDateTime=0x1cacf6a, ftLastAccessTime.dwLowDateTime=0xeef27730, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0x63b88300, ftLastWriteTime.dwHighDateTime=0x1cacf6a, nFileSizeHigh=0x0, nFileSizeLow=0x7b60, dwReserved0=0x0, dwReserved1=0x0, cFileName="ONINTL.DLL.trx_dll", cAlternateFileName="ONINTL~1.TRX")) returned 1 [0090.086] FindNextFileW (in: hFindFile=0x381f00, lpFindFileData=0x31e404 | out: lpFindFileData=0x31e404*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x62875600, ftCreationTime.dwHighDateTime=0x1cacf6a, ftLastAccessTime.dwLowDateTime=0xeef4d890, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0x62875600, ftLastWriteTime.dwHighDateTime=0x1cacf6a, nFileSizeHigh=0x0, nFileSizeLow=0x3d960, dwReserved0=0x0, dwReserved1=0x0, cFileName="ONINTL.REST.trx_dll", cAlternateFileName="ONINTL~2.TRX")) returned 1 [0090.086] FindNextFileW (in: hFindFile=0x381f00, lpFindFileData=0x31e404 | out: lpFindFileData=0x31e404*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x302da400, ftCreationTime.dwHighDateTime=0x1caca12, ftLastAccessTime.dwLowDateTime=0xeef4d890, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0x302da400, ftLastWriteTime.dwHighDateTime=0x1caca12, nFileSizeHigh=0x0, nFileSizeLow=0x35960, dwReserved0=0x0, dwReserved1=0x0, cFileName="OUTLLIBR.DLL.trx_dll", cAlternateFileName="OUTLLI~1.TRX")) returned 1 [0090.086] FindNextFileW (in: hFindFile=0x381f00, lpFindFileData=0x31e404 | out: lpFindFileData=0x31e404*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x302da400, ftCreationTime.dwHighDateTime=0x1caca12, ftLastAccessTime.dwLowDateTime=0xeef739f0, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0x302da400, ftLastWriteTime.dwHighDateTime=0x1caca12, nFileSizeHigh=0x0, nFileSizeLow=0x9f560, dwReserved0=0x0, dwReserved1=0x0, cFileName="OUTLLIBR.REST.trx_dll", cAlternateFileName="OUTLLI~2.TRX")) returned 1 [0090.086] FindNextFileW (in: hFindFile=0x381f00, lpFindFileData=0x31e404 | out: lpFindFileData=0x31e404*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x315ed100, ftCreationTime.dwHighDateTime=0x1caca12, ftLastAccessTime.dwLowDateTime=0xeef739f0, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0x315ed100, ftLastWriteTime.dwHighDateTime=0x1caca12, nFileSizeHigh=0x0, nFileSizeLow=0x2d60, dwReserved0=0x0, dwReserved1=0x0, cFileName="OUTLWVW.DLL.trx_dll", cAlternateFileName="OUTLWV~1.TRX")) returned 1 [0090.087] FindNextFileW (in: hFindFile=0x381f00, lpFindFileData=0x31e404 | out: lpFindFileData=0x31e404*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x1a4a9400, ftCreationTime.dwHighDateTime=0x1cac804, ftLastAccessTime.dwLowDateTime=0xef00bf70, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0x1a4a9400, ftLastWriteTime.dwHighDateTime=0x1cac804, nFileSizeHigh=0x0, nFileSizeLow=0xd160, dwReserved0=0x0, dwReserved1=0x0, cFileName="PPINTL.DLL.trx_dll", cAlternateFileName="PPINTL~1.TRX")) returned 1 [0090.087] FindNextFileW (in: hFindFile=0x381f00, lpFindFileData=0x31e404 | out: lpFindFileData=0x31e404*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x19196700, ftCreationTime.dwHighDateTime=0x1cac804, ftLastAccessTime.dwLowDateTime=0xef00bf70, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0x19196700, ftLastWriteTime.dwHighDateTime=0x1cac804, nFileSizeHigh=0x0, nFileSizeLow=0x43560, dwReserved0=0x0, dwReserved1=0x0, cFileName="PPINTL.REST.trx_dll", cAlternateFileName="PPINTL~2.TRX")) returned 1 [0090.087] FindNextFileW (in: hFindFile=0x381f00, lpFindFileData=0x31e404 | out: lpFindFileData=0x31e404*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x58968200, ftCreationTime.dwHighDateTime=0x1cac809, ftLastAccessTime.dwLowDateTime=0xef00bf70, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0x58968200, ftLastWriteTime.dwHighDateTime=0x1cac809, nFileSizeHigh=0x0, nFileSizeLow=0x1a560, dwReserved0=0x0, dwReserved1=0x0, cFileName="PUB6INTL.DLL.trx_dll", cAlternateFileName="PUB6IN~1.TRX")) returned 1 [0090.087] FindNextFileW (in: hFindFile=0x381f00, lpFindFileData=0x31e404 | out: lpFindFileData=0x31e404*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x57655500, ftCreationTime.dwHighDateTime=0x1cac809, ftLastAccessTime.dwLowDateTime=0xef0320d0, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0x57655500, ftLastWriteTime.dwHighDateTime=0x1cac809, nFileSizeHigh=0x0, nFileSizeLow=0x87f60, dwReserved0=0x0, dwReserved1=0x0, cFileName="PUB6INTL.REST.trx_dll", cAlternateFileName="PUB6IN~2.TRX")) returned 1 [0090.087] FindNextFileW (in: hFindFile=0x381f00, lpFindFileData=0x31e404 | out: lpFindFileData=0x31e404*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x2720b500, ftCreationTime.dwHighDateTime=0x1cac80f, ftLastAccessTime.dwLowDateTime=0xef0320d0, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0x2720b500, ftLastWriteTime.dwHighDateTime=0x1cac80f, nFileSizeHigh=0x0, nFileSizeLow=0x57f60, dwReserved0=0x0, dwReserved1=0x0, cFileName="PUBWZINT.REST.trx_dll", cAlternateFileName="PUBWZI~1.TRX")) returned 1 [0090.087] FindNextFileW (in: hFindFile=0x381f00, lpFindFileData=0x31e404 | out: lpFindFileData=0x31e404*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x94d0df00, ftCreationTime.dwHighDateTime=0x1cac817, ftLastAccessTime.dwLowDateTime=0xef058230, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0x94d0df00, ftLastWriteTime.dwHighDateTime=0x1cac817, nFileSizeHigh=0x0, nFileSizeLow=0x3360, dwReserved0=0x0, dwReserved1=0x0, cFileName="SGRES.DLL.trx_dll", cAlternateFileName="SGRESD~1.TRX")) returned 1 [0090.087] FindNextFileW (in: hFindFile=0x381f00, lpFindFileData=0x31e404 | out: lpFindFileData=0x31e404*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xca190500, ftCreationTime.dwHighDateTime=0x1cac7f6, ftLastAccessTime.dwLowDateTime=0xef058230, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xca190500, ftLastWriteTime.dwHighDateTime=0x1cac7f6, nFileSizeHigh=0x0, nFileSizeLow=0x4360, dwReserved0=0x0, dwReserved1=0x0, cFileName="STINTL.DLL.trx_dll", cAlternateFileName="STINTL~1.TRX")) returned 1 [0090.087] FindNextFileW (in: hFindFile=0x381f00, lpFindFileData=0x31e404 | out: lpFindFileData=0x31e404*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xbf706700, ftCreationTime.dwHighDateTime=0x1cac81a, ftLastAccessTime.dwLowDateTime=0xef0a44f0, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xbf706700, ftLastWriteTime.dwHighDateTime=0x1cac81a, nFileSizeHigh=0x0, nFileSizeLow=0x6960, dwReserved0=0x0, dwReserved1=0x0, cFileName="VISBRRES.DLL.trx_dll", cAlternateFileName="VISBRR~1.TRX")) returned 1 [0090.087] FindNextFileW (in: hFindFile=0x381f00, lpFindFileData=0x31e404 | out: lpFindFileData=0x31e404*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x70273800, ftCreationTime.dwHighDateTime=0x1cac814, ftLastAccessTime.dwLowDateTime=0xef0a44f0, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0x70273800, ftLastWriteTime.dwHighDateTime=0x1cac814, nFileSizeHigh=0x0, nFileSizeLow=0x73960, dwReserved0=0x0, dwReserved1=0x0, cFileName="VISINTL.DLL.trx_dll", cAlternateFileName="VISINT~1.TRX")) returned 1 [0090.087] FindNextFileW (in: hFindFile=0x381f00, lpFindFileData=0x31e404 | out: lpFindFileData=0x31e404*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xa1789a00, ftCreationTime.dwHighDateTime=0x1cacd25, ftLastAccessTime.dwLowDateTime=0xef0ca650, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xa1789a00, ftLastWriteTime.dwHighDateTime=0x1cacd25, nFileSizeHigh=0x0, nFileSizeLow=0x24360, dwReserved0=0x0, dwReserved1=0x0, cFileName="WWINTL.DLL.trx_dll", cAlternateFileName="WWINTL~1.TRX")) returned 1 [0090.087] FindNextFileW (in: hFindFile=0x381f00, lpFindFileData=0x31e404 | out: lpFindFileData=0x31e404*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xa2a9c700, ftCreationTime.dwHighDateTime=0x1cacd25, ftLastAccessTime.dwLowDateTime=0xef0f07b0, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xa2a9c700, ftLastWriteTime.dwHighDateTime=0x1cacd25, nFileSizeHigh=0x0, nFileSizeLow=0x110b60, dwReserved0=0x0, dwReserved1=0x0, cFileName="WWINTL.REST.trx_dll", cAlternateFileName="WWINTL~2.TRX")) returned 1 [0090.087] FindNextFileW (in: hFindFile=0x381f00, lpFindFileData=0x31e404 | out: lpFindFileData=0x31e404*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x61df1900, ftCreationTime.dwHighDateTime=0x1cac820, ftLastAccessTime.dwLowDateTime=0xef0f07b0, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0x61df1900, ftLastWriteTime.dwHighDateTime=0x1cac820, nFileSizeHigh=0x0, nFileSizeLow=0x23960, dwReserved0=0x0, dwReserved1=0x0, cFileName="XLINTL32.DLL.trx_dll", cAlternateFileName="XLINTL~1.TRX")) returned 1 [0090.087] FindNextFileW (in: hFindFile=0x381f00, lpFindFileData=0x31e404 | out: lpFindFileData=0x31e404*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x61df1900, ftCreationTime.dwHighDateTime=0x1cac820, ftLastAccessTime.dwLowDateTime=0xef116910, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0x61df1900, ftLastWriteTime.dwHighDateTime=0x1cac820, nFileSizeHigh=0x0, nFileSizeLow=0x126760, dwReserved0=0x0, dwReserved1=0x0, cFileName="XLINTL32.REST.trx_dll", cAlternateFileName="XLINTL~2.TRX")) returned 1 [0090.087] FindNextFileW (in: hFindFile=0x381f00, lpFindFileData=0x31e404 | out: lpFindFileData=0x31e404*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xd7e38000, ftCreationTime.dwHighDateTime=0x1cac820, ftLastAccessTime.dwLowDateTime=0xef116910, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xd7e38000, ftLastWriteTime.dwHighDateTime=0x1cac820, nFileSizeHigh=0x0, nFileSizeLow=0x3960, dwReserved0=0x0, dwReserved1=0x0, cFileName="XLSLICER.DLL.trx_dll", cAlternateFileName="XLSLIC~1.TRX")) returned 1 [0090.087] FindNextFileW (in: hFindFile=0x381f00, lpFindFileData=0x31e404 | out: lpFindFileData=0x31e404*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xd7e38000, ftCreationTime.dwHighDateTime=0x1cac820, ftLastAccessTime.dwLowDateTime=0xef116910, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xd7e38000, ftLastWriteTime.dwHighDateTime=0x1cac820, nFileSizeHigh=0x0, nFileSizeLow=0x3960, dwReserved0=0x0, dwReserved1=0x0, cFileName="XLSLICER.DLL.trx_dll", cAlternateFileName="XLSLIC~1.TRX")) returned 0 [0090.087] FindClose (in: hFindFile=0x381f00 | out: hFindFile=0x381f00) returned 1 [0090.088] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e68c) returned 1 [0090.088] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e698) returned 1 [0090.088] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e7bc) returned 1 [0090.088] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\OfficeSoftwareProtectionPlatform", nBufferLength=0x105, lpBuffer=0x31e2c4, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Microsoft\\OfficeSoftwareProtectionPlatform", lpFilePart=0x0) returned 0x3d [0090.088] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\OfficeSoftwareProtectionPlatform\\", nBufferLength=0x105, lpBuffer=0x31e298, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Microsoft\\OfficeSoftwareProtectionPlatform\\", lpFilePart=0x0) returned 0x3e [0090.088] FindFirstFileW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\OfficeSoftwareProtectionPlatform\\*", lpFindFileData=0x31e4e4 | out: lpFindFileData=0x31e4e4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x50ea0e30, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0xfa44d4a0, ftLastAccessTime.dwHighDateTime=0x1d305fd, ftLastWriteTime.dwLowDateTime=0xfa44d4a0, ftLastWriteTime.dwHighDateTime=0x1d305fd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x381f00 [0090.088] FindNextFileW (in: hFindFile=0x381f00, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x50ea0e30, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0xfa44d4a0, ftLastAccessTime.dwHighDateTime=0x1d305fd, ftLastWriteTime.dwLowDateTime=0xfa44d4a0, ftLastWriteTime.dwHighDateTime=0x1d305fd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0090.088] FindNextFileW (in: hFindFile=0x381f00, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x8ab1ae70, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x9de525d0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x9de525d0, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Cache", cAlternateFileName="")) returned 1 [0090.088] FindNextFileW (in: hFindFile=0x381f00, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x8c015050, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0xfa44d4a0, ftLastAccessTime.dwHighDateTime=0x1d305fd, ftLastWriteTime.dwLowDateTime=0x63c5e40, ftLastWriteTime.dwHighDateTime=0x1d305fe, nFileSizeHigh=0x0, nFileSizeLow=0x469bd5, dwReserved0=0x0, dwReserved1=0x0, cFileName="tokens.dat", cAlternateFileName="")) returned 1 [0090.088] FindNextFileW (in: hFindFile=0x381f00, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0090.088] FindClose (in: hFindFile=0x381f00 | out: hFindFile=0x381f00) returned 1 [0090.088] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e77c) returned 1 [0090.088] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e788) returned 1 [0090.088] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e7bc) returned 1 [0090.088] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\OfficeSoftwareProtectionPlatform", nBufferLength=0x105, lpBuffer=0x31e2c4, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Microsoft\\OfficeSoftwareProtectionPlatform", lpFilePart=0x0) returned 0x3d [0090.089] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\OfficeSoftwareProtectionPlatform\\", nBufferLength=0x105, lpBuffer=0x31e298, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Microsoft\\OfficeSoftwareProtectionPlatform\\", lpFilePart=0x0) returned 0x3e [0090.089] FindFirstFileW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\OfficeSoftwareProtectionPlatform\\*", lpFindFileData=0x31e4e4 | out: lpFindFileData=0x31e4e4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x50ea0e30, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0xfa44d4a0, ftLastAccessTime.dwHighDateTime=0x1d305fd, ftLastWriteTime.dwLowDateTime=0xfa44d4a0, ftLastWriteTime.dwHighDateTime=0x1d305fd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x381f00 [0090.089] FindNextFileW (in: hFindFile=0x381f00, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x50ea0e30, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0xfa44d4a0, ftLastAccessTime.dwHighDateTime=0x1d305fd, ftLastWriteTime.dwLowDateTime=0xfa44d4a0, ftLastWriteTime.dwHighDateTime=0x1d305fd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0090.089] FindNextFileW (in: hFindFile=0x381f00, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x8ab1ae70, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x9de525d0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x9de525d0, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Cache", cAlternateFileName="")) returned 1 [0090.089] FindNextFileW (in: hFindFile=0x381f00, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x8c015050, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0xfa44d4a0, ftLastAccessTime.dwHighDateTime=0x1d305fd, ftLastWriteTime.dwLowDateTime=0x63c5e40, ftLastWriteTime.dwHighDateTime=0x1d305fe, nFileSizeHigh=0x0, nFileSizeLow=0x469bd5, dwReserved0=0x0, dwReserved1=0x0, cFileName="tokens.dat", cAlternateFileName="")) returned 1 [0090.089] FindClose (in: hFindFile=0x381f00 | out: hFindFile=0x381f00) returned 1 [0090.089] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e77c) returned 1 [0090.089] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e788) returned 1 [0090.089] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e744) returned 1 [0090.089] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\OfficeSoftwareProtectionPlatform\\Cache", nBufferLength=0x105, lpBuffer=0x31e24c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Microsoft\\OfficeSoftwareProtectionPlatform\\Cache", lpFilePart=0x0) returned 0x43 [0090.090] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\OfficeSoftwareProtectionPlatform\\Cache\\", nBufferLength=0x105, lpBuffer=0x31e220, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Microsoft\\OfficeSoftwareProtectionPlatform\\Cache\\", lpFilePart=0x0) returned 0x44 [0090.090] FindFirstFileW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\OfficeSoftwareProtectionPlatform\\Cache\\*", lpFindFileData=0x31e46c | out: lpFindFileData=0x31e46c*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x8ab1ae70, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x9de525d0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x9de525d0, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x381f00 [0090.090] FindClose (in: hFindFile=0x381f00 | out: hFindFile=0x381f00) returned 1 [0090.090] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e704) returned 1 [0090.090] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e710) returned 1 [0090.090] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e744) returned 1 [0090.090] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\OfficeSoftwareProtectionPlatform\\Cache", nBufferLength=0x105, lpBuffer=0x31e24c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Microsoft\\OfficeSoftwareProtectionPlatform\\Cache", lpFilePart=0x0) returned 0x43 [0090.090] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\OfficeSoftwareProtectionPlatform\\Cache\\", nBufferLength=0x105, lpBuffer=0x31e220, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Microsoft\\OfficeSoftwareProtectionPlatform\\Cache\\", lpFilePart=0x0) returned 0x44 [0090.090] FindFirstFileW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\OfficeSoftwareProtectionPlatform\\Cache\\*", lpFindFileData=0x31e46c | out: lpFindFileData=0x31e46c*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x8ab1ae70, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x9de525d0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x9de525d0, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x381f00 [0090.090] FindClose (in: hFindFile=0x381f00 | out: hFindFile=0x381f00) returned 1 [0090.090] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e704) returned 1 [0090.090] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e710) returned 1 [0090.090] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e7bc) returned 1 [0090.091] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\RAC", nBufferLength=0x105, lpBuffer=0x31e2c4, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Microsoft\\RAC", lpFilePart=0x0) returned 0x20 [0090.091] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\RAC\\", nBufferLength=0x105, lpBuffer=0x31e298, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Microsoft\\RAC\\", lpFilePart=0x0) returned 0x21 [0090.091] FindFirstFileW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\RAC\\*", lpFindFileData=0x31e4e4 | out: lpFindFileData=0x31e4e4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xfd9b5b52, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd9b5b52, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xfd9b5b52, ftLastWriteTime.dwHighDateTime=0x1ca0431, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x381f00 [0090.091] FindClose (in: hFindFile=0x381f00 | out: hFindFile=0x381f00) returned 1 [0090.091] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e77c) returned 1 [0090.091] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e788) returned 1 [0090.091] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e7bc) returned 1 [0090.091] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\RAC", nBufferLength=0x105, lpBuffer=0x31e2c4, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Microsoft\\RAC", lpFilePart=0x0) returned 0x20 [0090.091] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\RAC\\", nBufferLength=0x105, lpBuffer=0x31e298, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Microsoft\\RAC\\", lpFilePart=0x0) returned 0x21 [0090.091] FindFirstFileW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\RAC\\*", lpFindFileData=0x31e4e4 | out: lpFindFileData=0x31e4e4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xfd9b5b52, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd9b5b52, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xfd9b5b52, ftLastWriteTime.dwHighDateTime=0x1ca0431, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x381f00 [0090.091] FindClose (in: hFindFile=0x381f00 | out: hFindFile=0x381f00) returned 1 [0090.091] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e77c) returned 1 [0090.091] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e788) returned 1 [0090.091] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e744) returned 1 [0090.091] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\RAC\\Outbound", nBufferLength=0x105, lpBuffer=0x31e24c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Microsoft\\RAC\\Outbound", lpFilePart=0x0) returned 0x29 [0090.091] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\RAC\\Outbound\\", nBufferLength=0x105, lpBuffer=0x31e220, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Microsoft\\RAC\\Outbound\\", lpFilePart=0x0) returned 0x2a [0090.091] FindFirstFileW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\RAC\\Outbound\\*", lpFindFileData=0x31e46c | out: lpFindFileData=0x31e46c*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xfd9b5b52, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd9b5b52, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xd6e33921, ftLastWriteTime.dwHighDateTime=0x1ca042b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x381f00 [0090.092] FindClose (in: hFindFile=0x381f00 | out: hFindFile=0x381f00) returned 1 [0090.092] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e704) returned 1 [0090.092] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e710) returned 1 [0090.092] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e744) returned 1 [0090.092] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\RAC\\Outbound", nBufferLength=0x105, lpBuffer=0x31e24c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Microsoft\\RAC\\Outbound", lpFilePart=0x0) returned 0x29 [0090.092] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\RAC\\Outbound\\", nBufferLength=0x105, lpBuffer=0x31e220, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Microsoft\\RAC\\Outbound\\", lpFilePart=0x0) returned 0x2a [0090.092] FindFirstFileW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\RAC\\Outbound\\*", lpFindFileData=0x31e46c | out: lpFindFileData=0x31e46c*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xfd9b5b52, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd9b5b52, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xd6e33921, ftLastWriteTime.dwHighDateTime=0x1ca042b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x381f00 [0090.092] FindClose (in: hFindFile=0x381f00 | out: hFindFile=0x381f00) returned 1 [0090.092] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e704) returned 1 [0090.092] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e710) returned 1 [0090.092] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e744) returned 1 [0090.092] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\RAC\\PublishedData", nBufferLength=0x105, lpBuffer=0x31e24c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Microsoft\\RAC\\PublishedData", lpFilePart=0x0) returned 0x2e [0090.092] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\RAC\\PublishedData\\", nBufferLength=0x105, lpBuffer=0x31e220, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Microsoft\\RAC\\PublishedData\\", lpFilePart=0x0) returned 0x2f [0090.092] FindFirstFileW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\RAC\\PublishedData\\*", lpFindFileData=0x31e46c | out: lpFindFileData=0x31e46c*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xfd9b5b52, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xef3ddd80, ftLastAccessTime.dwHighDateTime=0x1d6eb7e, ftLastWriteTime.dwLowDateTime=0xef3ddd80, ftLastWriteTime.dwHighDateTime=0x1d6eb7e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x381f00 [0090.092] FindClose (in: hFindFile=0x381f00 | out: hFindFile=0x381f00) returned 1 [0090.092] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e704) returned 1 [0090.092] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e710) returned 1 [0090.092] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e744) returned 1 [0090.092] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\RAC\\PublishedData", nBufferLength=0x105, lpBuffer=0x31e24c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Microsoft\\RAC\\PublishedData", lpFilePart=0x0) returned 0x2e [0090.092] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\RAC\\PublishedData\\", nBufferLength=0x105, lpBuffer=0x31e220, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Microsoft\\RAC\\PublishedData\\", lpFilePart=0x0) returned 0x2f [0090.092] FindFirstFileW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\RAC\\PublishedData\\*", lpFindFileData=0x31e46c | out: lpFindFileData=0x31e46c*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xfd9b5b52, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xef3ddd80, ftLastAccessTime.dwHighDateTime=0x1d6eb7e, ftLastWriteTime.dwLowDateTime=0xef3ddd80, ftLastWriteTime.dwHighDateTime=0x1d6eb7e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x381f00 [0090.093] FindClose (in: hFindFile=0x381f00 | out: hFindFile=0x381f00) returned 1 [0090.093] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e704) returned 1 [0090.093] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e710) returned 1 [0090.093] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e744) returned 1 [0090.093] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\RAC\\StateData", nBufferLength=0x105, lpBuffer=0x31e24c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Microsoft\\RAC\\StateData", lpFilePart=0x0) returned 0x2a [0090.093] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\RAC\\StateData\\", nBufferLength=0x105, lpBuffer=0x31e220, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Microsoft\\RAC\\StateData\\", lpFilePart=0x0) returned 0x2b [0090.093] FindFirstFileW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\RAC\\StateData\\*", lpFindFileData=0x31e46c | out: lpFindFileData=0x31e46c*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xfd9b5b52, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xef3ddd80, ftLastAccessTime.dwHighDateTime=0x1d6eb7e, ftLastWriteTime.dwLowDateTime=0xef3ddd80, ftLastWriteTime.dwHighDateTime=0x1d6eb7e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x381f00 [0090.093] FindClose (in: hFindFile=0x381f00 | out: hFindFile=0x381f00) returned 1 [0090.093] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e704) returned 1 [0090.093] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e710) returned 1 [0090.093] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e744) returned 1 [0090.093] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\RAC\\StateData", nBufferLength=0x105, lpBuffer=0x31e24c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Microsoft\\RAC\\StateData", lpFilePart=0x0) returned 0x2a [0090.093] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\RAC\\StateData\\", nBufferLength=0x105, lpBuffer=0x31e220, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Microsoft\\RAC\\StateData\\", lpFilePart=0x0) returned 0x2b [0090.093] FindFirstFileW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\RAC\\StateData\\*", lpFindFileData=0x31e46c | out: lpFindFileData=0x31e46c*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xfd9b5b52, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xef3ddd80, ftLastAccessTime.dwHighDateTime=0x1d6eb7e, ftLastWriteTime.dwLowDateTime=0xef3ddd80, ftLastWriteTime.dwHighDateTime=0x1d6eb7e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x381f00 [0090.093] FindClose (in: hFindFile=0x381f00 | out: hFindFile=0x381f00) returned 1 [0090.093] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e704) returned 1 [0090.093] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e710) returned 1 [0090.093] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e744) returned 1 [0090.093] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\RAC\\Temp", nBufferLength=0x105, lpBuffer=0x31e24c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Microsoft\\RAC\\Temp", lpFilePart=0x0) returned 0x25 [0090.093] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\RAC\\Temp\\", nBufferLength=0x105, lpBuffer=0x31e220, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Microsoft\\RAC\\Temp\\", lpFilePart=0x0) returned 0x26 [0090.093] FindFirstFileW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\RAC\\Temp\\*", lpFindFileData=0x31e46c | out: lpFindFileData=0x31e46c*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xfd9b5b52, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xef50e880, ftLastAccessTime.dwHighDateTime=0x1d6eb7e, ftLastWriteTime.dwLowDateTime=0xef50e880, ftLastWriteTime.dwHighDateTime=0x1d6eb7e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x381f00 [0090.094] FindClose (in: hFindFile=0x381f00 | out: hFindFile=0x381f00) returned 1 [0090.094] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e704) returned 1 [0090.094] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e710) returned 1 [0090.094] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e744) returned 1 [0090.094] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\RAC\\Temp", nBufferLength=0x105, lpBuffer=0x31e24c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Microsoft\\RAC\\Temp", lpFilePart=0x0) returned 0x25 [0090.094] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\RAC\\Temp\\", nBufferLength=0x105, lpBuffer=0x31e220, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Microsoft\\RAC\\Temp\\", lpFilePart=0x0) returned 0x26 [0090.094] FindFirstFileW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\RAC\\Temp\\*", lpFindFileData=0x31e46c | out: lpFindFileData=0x31e46c*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xfd9b5b52, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xef50e880, ftLastAccessTime.dwHighDateTime=0x1d6eb7e, ftLastWriteTime.dwLowDateTime=0xef50e880, ftLastWriteTime.dwHighDateTime=0x1d6eb7e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x381f00 [0090.094] FindClose (in: hFindFile=0x381f00 | out: hFindFile=0x381f00) returned 1 [0090.094] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e704) returned 1 [0090.094] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e710) returned 1 [0090.094] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e7bc) returned 1 [0090.094] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Search", nBufferLength=0x105, lpBuffer=0x31e2c4, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Microsoft\\Search", lpFilePart=0x0) returned 0x23 [0090.094] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Search\\", nBufferLength=0x105, lpBuffer=0x31e298, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Microsoft\\Search\\", lpFilePart=0x0) returned 0x24 [0090.094] FindFirstFileW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Search\\*", lpFindFileData=0x31e4e4 | out: lpFindFileData=0x31e4e4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x27df8b60, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x27df8b60, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x27df8b60, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x381f00 [0090.094] FindClose (in: hFindFile=0x381f00 | out: hFindFile=0x381f00) returned 1 [0090.094] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e77c) returned 1 [0090.094] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e788) returned 1 [0090.094] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e7bc) returned 1 [0090.094] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Search", nBufferLength=0x105, lpBuffer=0x31e2c4, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Microsoft\\Search", lpFilePart=0x0) returned 0x23 [0090.094] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Search\\", nBufferLength=0x105, lpBuffer=0x31e298, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Microsoft\\Search\\", lpFilePart=0x0) returned 0x24 [0090.095] FindFirstFileW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Search\\*", lpFindFileData=0x31e4e4 | out: lpFindFileData=0x31e4e4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x27df8b60, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x27df8b60, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x27df8b60, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x381f00 [0090.095] FindClose (in: hFindFile=0x381f00 | out: hFindFile=0x381f00) returned 1 [0090.095] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e77c) returned 1 [0090.095] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e788) returned 1 [0090.095] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e744) returned 1 [0090.095] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Search\\Data", nBufferLength=0x105, lpBuffer=0x31e24c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Microsoft\\Search\\Data", lpFilePart=0x0) returned 0x28 [0090.095] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Search\\Data\\", nBufferLength=0x105, lpBuffer=0x31e220, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Microsoft\\Search\\Data\\", lpFilePart=0x0) returned 0x29 [0090.095] FindFirstFileW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Search\\Data\\*", lpFindFileData=0x31e46c | out: lpFindFileData=0x31e46c*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x27df8b60, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x27e6af80, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x27e6af80, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x381f00 [0090.095] FindClose (in: hFindFile=0x381f00 | out: hFindFile=0x381f00) returned 1 [0090.095] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e704) returned 1 [0090.095] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e710) returned 1 [0090.095] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e744) returned 1 [0090.095] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Search\\Data", nBufferLength=0x105, lpBuffer=0x31e24c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Microsoft\\Search\\Data", lpFilePart=0x0) returned 0x28 [0090.095] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Search\\Data\\", nBufferLength=0x105, lpBuffer=0x31e220, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Microsoft\\Search\\Data\\", lpFilePart=0x0) returned 0x29 [0090.095] FindFirstFileW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Search\\Data\\*", lpFindFileData=0x31e46c | out: lpFindFileData=0x31e46c*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x27df8b60, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x27e6af80, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x27e6af80, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x381f00 [0090.095] FindClose (in: hFindFile=0x381f00 | out: hFindFile=0x381f00) returned 1 [0090.095] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e704) returned 1 [0090.095] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e710) returned 1 [0090.095] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e6cc) returned 1 [0090.095] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Search\\Data\\Applications", nBufferLength=0x105, lpBuffer=0x31e1d4, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Microsoft\\Search\\Data\\Applications", lpFilePart=0x0) returned 0x35 [0090.096] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Search\\Data\\Applications\\", nBufferLength=0x105, lpBuffer=0x31e1a8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Microsoft\\Search\\Data\\Applications\\", lpFilePart=0x0) returned 0x36 [0090.096] FindFirstFileW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Search\\Data\\Applications\\*", lpFindFileData=0x31e3f4 | out: lpFindFileData=0x31e3f4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x27e6af80, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x27e6af80, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x27e6af80, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x381f00 [0090.096] FindClose (in: hFindFile=0x381f00 | out: hFindFile=0x381f00) returned 1 [0090.096] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e68c) returned 1 [0090.096] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e698) returned 1 [0090.096] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e6cc) returned 1 [0090.096] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Search\\Data\\Applications", nBufferLength=0x105, lpBuffer=0x31e1d4, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Microsoft\\Search\\Data\\Applications", lpFilePart=0x0) returned 0x35 [0090.096] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Search\\Data\\Applications\\", nBufferLength=0x105, lpBuffer=0x31e1a8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Microsoft\\Search\\Data\\Applications\\", lpFilePart=0x0) returned 0x36 [0090.096] FindFirstFileW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Search\\Data\\Applications\\*", lpFindFileData=0x31e3f4 | out: lpFindFileData=0x31e3f4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x27e6af80, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x27e6af80, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x27e6af80, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x381f00 [0090.096] FindClose (in: hFindFile=0x381f00 | out: hFindFile=0x381f00) returned 1 [0090.096] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e68c) returned 1 [0090.096] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e698) returned 1 [0090.096] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e654) returned 1 [0090.096] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Search\\Data\\Applications\\Windows", nBufferLength=0x105, lpBuffer=0x31e15c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Microsoft\\Search\\Data\\Applications\\Windows", lpFilePart=0x0) returned 0x3d [0090.096] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Search\\Data\\Applications\\Windows\\", nBufferLength=0x105, lpBuffer=0x31e130, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Microsoft\\Search\\Data\\Applications\\Windows\\", lpFilePart=0x0) returned 0x3e [0090.096] FindFirstFileW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Search\\Data\\Applications\\Windows\\*", lpFindFileData=0x31e37c | out: lpFindFileData=0x31e37c*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x27e6af80, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x29612a20, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x29612a20, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x381f00 [0090.096] FindClose (in: hFindFile=0x381f00 | out: hFindFile=0x381f00) returned 1 [0090.096] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e614) returned 1 [0090.096] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e620) returned 1 [0090.096] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e654) returned 1 [0090.096] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Search\\Data\\Applications\\Windows", nBufferLength=0x105, lpBuffer=0x31e15c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Microsoft\\Search\\Data\\Applications\\Windows", lpFilePart=0x0) returned 0x3d [0090.097] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Search\\Data\\Applications\\Windows\\", nBufferLength=0x105, lpBuffer=0x31e130, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Microsoft\\Search\\Data\\Applications\\Windows\\", lpFilePart=0x0) returned 0x3e [0090.097] FindFirstFileW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Search\\Data\\Applications\\Windows\\*", lpFindFileData=0x31e37c | out: lpFindFileData=0x31e37c*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x27e6af80, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x29612a20, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x29612a20, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x381f00 [0090.097] FindClose (in: hFindFile=0x381f00 | out: hFindFile=0x381f00) returned 1 [0090.097] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e614) returned 1 [0090.097] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e620) returned 1 [0090.097] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e5dc) returned 1 [0090.097] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Search\\Data\\Applications\\Windows\\Config", nBufferLength=0x105, lpBuffer=0x31e0e4, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Microsoft\\Search\\Data\\Applications\\Windows\\Config", lpFilePart=0x0) returned 0x44 [0090.097] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Search\\Data\\Applications\\Windows\\Config\\", nBufferLength=0x105, lpBuffer=0x31e0b8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Microsoft\\Search\\Data\\Applications\\Windows\\Config\\", lpFilePart=0x0) returned 0x45 [0090.097] FindFirstFileW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Search\\Data\\Applications\\Windows\\Config\\*", lpFindFileData=0x31e304 | out: lpFindFileData=0x31e304*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x27e6af80, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x27e6af80, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x27e6af80, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x381f00 [0090.097] FindClose (in: hFindFile=0x381f00 | out: hFindFile=0x381f00) returned 1 [0090.097] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e59c) returned 1 [0090.097] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e5a8) returned 1 [0090.097] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e5dc) returned 1 [0090.097] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Search\\Data\\Applications\\Windows\\Config", nBufferLength=0x105, lpBuffer=0x31e0e4, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Microsoft\\Search\\Data\\Applications\\Windows\\Config", lpFilePart=0x0) returned 0x44 [0090.097] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Search\\Data\\Applications\\Windows\\Config\\", nBufferLength=0x105, lpBuffer=0x31e0b8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Microsoft\\Search\\Data\\Applications\\Windows\\Config\\", lpFilePart=0x0) returned 0x45 [0090.097] FindFirstFileW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Search\\Data\\Applications\\Windows\\Config\\*", lpFindFileData=0x31e304 | out: lpFindFileData=0x31e304*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x27e6af80, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x27e6af80, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x27e6af80, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x381f00 [0090.097] FindClose (in: hFindFile=0x381f00 | out: hFindFile=0x381f00) returned 1 [0090.098] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e59c) returned 1 [0090.098] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e5a8) returned 1 [0090.098] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e5dc) returned 1 [0090.098] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Search\\Data\\Applications\\Windows\\GatherLogs", nBufferLength=0x105, lpBuffer=0x31e0e4, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Microsoft\\Search\\Data\\Applications\\Windows\\GatherLogs", lpFilePart=0x0) returned 0x48 [0090.098] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Search\\Data\\Applications\\Windows\\GatherLogs\\", nBufferLength=0x105, lpBuffer=0x31e0b8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Microsoft\\Search\\Data\\Applications\\Windows\\GatherLogs\\", lpFilePart=0x0) returned 0x49 [0090.098] FindFirstFileW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Search\\Data\\Applications\\Windows\\GatherLogs\\*", lpFindFileData=0x31e304 | out: lpFindFileData=0x31e304*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x27e6af80, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x29932700, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x29932700, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x381f00 [0090.098] FindClose (in: hFindFile=0x381f00 | out: hFindFile=0x381f00) returned 1 [0090.098] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e59c) returned 1 [0090.098] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e5a8) returned 1 [0090.098] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e5dc) returned 1 [0090.098] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Search\\Data\\Applications\\Windows\\GatherLogs", nBufferLength=0x105, lpBuffer=0x31e0e4, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Microsoft\\Search\\Data\\Applications\\Windows\\GatherLogs", lpFilePart=0x0) returned 0x48 [0090.098] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Search\\Data\\Applications\\Windows\\GatherLogs\\", nBufferLength=0x105, lpBuffer=0x31e0b8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Microsoft\\Search\\Data\\Applications\\Windows\\GatherLogs\\", lpFilePart=0x0) returned 0x49 [0090.098] FindFirstFileW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Search\\Data\\Applications\\Windows\\GatherLogs\\*", lpFindFileData=0x31e304 | out: lpFindFileData=0x31e304*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x27e6af80, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x29932700, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x29932700, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x381f00 [0090.098] FindClose (in: hFindFile=0x381f00 | out: hFindFile=0x381f00) returned 1 [0090.098] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e59c) returned 1 [0090.098] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e5a8) returned 1 [0090.098] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e564) returned 1 [0090.098] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Search\\Data\\Applications\\Windows\\GatherLogs\\SystemIndex", nBufferLength=0x105, lpBuffer=0x31e06c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Microsoft\\Search\\Data\\Applications\\Windows\\GatherLogs\\SystemIndex", lpFilePart=0x0) returned 0x54 [0090.098] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Search\\Data\\Applications\\Windows\\GatherLogs\\SystemIndex\\", nBufferLength=0x105, lpBuffer=0x31e040, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Microsoft\\Search\\Data\\Applications\\Windows\\GatherLogs\\SystemIndex\\", lpFilePart=0x0) returned 0x55 [0090.098] FindFirstFileW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Search\\Data\\Applications\\Windows\\GatherLogs\\SystemIndex\\*", lpFindFileData=0x31e28c | out: lpFindFileData=0x31e28c*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x29932700, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x29932700, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x29932700, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x381f00 [0090.099] FindClose (in: hFindFile=0x381f00 | out: hFindFile=0x381f00) returned 1 [0090.099] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e524) returned 1 [0090.099] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e530) returned 1 [0090.099] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e564) returned 1 [0090.099] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Search\\Data\\Applications\\Windows\\GatherLogs\\SystemIndex", nBufferLength=0x105, lpBuffer=0x31e06c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Microsoft\\Search\\Data\\Applications\\Windows\\GatherLogs\\SystemIndex", lpFilePart=0x0) returned 0x54 [0090.099] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Search\\Data\\Applications\\Windows\\GatherLogs\\SystemIndex\\", nBufferLength=0x105, lpBuffer=0x31e040, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Microsoft\\Search\\Data\\Applications\\Windows\\GatherLogs\\SystemIndex\\", lpFilePart=0x0) returned 0x55 [0090.099] FindFirstFileW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Search\\Data\\Applications\\Windows\\GatherLogs\\SystemIndex\\*", lpFindFileData=0x31e28c | out: lpFindFileData=0x31e28c*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x29932700, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x29932700, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x29932700, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x381f00 [0090.099] FindClose (in: hFindFile=0x381f00 | out: hFindFile=0x381f00) returned 1 [0090.099] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e524) returned 1 [0090.099] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e530) returned 1 [0090.099] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e5dc) returned 1 [0090.099] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Search\\Data\\Applications\\Windows\\Projects", nBufferLength=0x105, lpBuffer=0x31e0e4, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Microsoft\\Search\\Data\\Applications\\Windows\\Projects", lpFilePart=0x0) returned 0x46 [0090.099] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Search\\Data\\Applications\\Windows\\Projects\\", nBufferLength=0x105, lpBuffer=0x31e0b8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Microsoft\\Search\\Data\\Applications\\Windows\\Projects\\", lpFilePart=0x0) returned 0x47 [0090.099] FindFirstFileW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Search\\Data\\Applications\\Windows\\Projects\\*", lpFindFileData=0x31e304 | out: lpFindFileData=0x31e304*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x27e6af80, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x27eb7240, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x27eb7240, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x381f00 [0090.099] FindClose (in: hFindFile=0x381f00 | out: hFindFile=0x381f00) returned 1 [0090.099] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e59c) returned 1 [0090.099] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e5a8) returned 1 [0090.100] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e5dc) returned 1 [0090.100] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Search\\Data\\Applications\\Windows\\Projects", nBufferLength=0x105, lpBuffer=0x31e0e4, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Microsoft\\Search\\Data\\Applications\\Windows\\Projects", lpFilePart=0x0) returned 0x46 [0090.100] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Search\\Data\\Applications\\Windows\\Projects\\", nBufferLength=0x105, lpBuffer=0x31e0b8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Microsoft\\Search\\Data\\Applications\\Windows\\Projects\\", lpFilePart=0x0) returned 0x47 [0090.100] FindFirstFileW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Search\\Data\\Applications\\Windows\\Projects\\*", lpFindFileData=0x31e304 | out: lpFindFileData=0x31e304*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x27e6af80, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x27eb7240, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x27eb7240, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x381f00 [0090.100] FindClose (in: hFindFile=0x381f00 | out: hFindFile=0x381f00) returned 1 [0090.100] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e59c) returned 1 [0090.100] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e5a8) returned 1 [0090.100] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e564) returned 1 [0090.100] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Search\\Data\\Applications\\Windows\\Projects\\SystemIndex", nBufferLength=0x105, lpBuffer=0x31e06c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Microsoft\\Search\\Data\\Applications\\Windows\\Projects\\SystemIndex", lpFilePart=0x0) returned 0x52 [0090.100] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Search\\Data\\Applications\\Windows\\Projects\\SystemIndex\\", nBufferLength=0x105, lpBuffer=0x31e040, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Microsoft\\Search\\Data\\Applications\\Windows\\Projects\\SystemIndex\\", lpFilePart=0x0) returned 0x53 [0090.100] FindFirstFileW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Search\\Data\\Applications\\Windows\\Projects\\SystemIndex\\*", lpFindFileData=0x31e28c | out: lpFindFileData=0x31e28c*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x27eb7240, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x29958860, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x29958860, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x381f00 [0090.100] FindClose (in: hFindFile=0x381f00 | out: hFindFile=0x381f00) returned 1 [0090.100] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e524) returned 1 [0090.100] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e530) returned 1 [0090.100] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e564) returned 1 [0090.100] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Search\\Data\\Applications\\Windows\\Projects\\SystemIndex", nBufferLength=0x105, lpBuffer=0x31e06c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Microsoft\\Search\\Data\\Applications\\Windows\\Projects\\SystemIndex", lpFilePart=0x0) returned 0x52 [0090.100] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Search\\Data\\Applications\\Windows\\Projects\\SystemIndex\\", nBufferLength=0x105, lpBuffer=0x31e040, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Microsoft\\Search\\Data\\Applications\\Windows\\Projects\\SystemIndex\\", lpFilePart=0x0) returned 0x53 [0090.100] FindFirstFileW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Search\\Data\\Applications\\Windows\\Projects\\SystemIndex\\*", lpFindFileData=0x31e28c | out: lpFindFileData=0x31e28c*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x27eb7240, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x29958860, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x29958860, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x381f00 [0090.100] FindClose (in: hFindFile=0x381f00 | out: hFindFile=0x381f00) returned 1 [0090.100] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e524) returned 1 [0090.101] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e530) returned 1 [0090.101] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e4ec) returned 1 [0090.101] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Search\\Data\\Applications\\Windows\\Projects\\SystemIndex\\Indexer", nBufferLength=0x105, lpBuffer=0x31dff4, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Microsoft\\Search\\Data\\Applications\\Windows\\Projects\\SystemIndex\\Indexer", lpFilePart=0x0) returned 0x5a [0090.101] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Search\\Data\\Applications\\Windows\\Projects\\SystemIndex\\Indexer\\", nBufferLength=0x105, lpBuffer=0x31dfc8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Microsoft\\Search\\Data\\Applications\\Windows\\Projects\\SystemIndex\\Indexer\\", lpFilePart=0x0) returned 0x5b [0090.101] FindFirstFileW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Search\\Data\\Applications\\Windows\\Projects\\SystemIndex\\Indexer\\*", lpFindFileData=0x31e214 | out: lpFindFileData=0x31e214*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x29958860, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x29958860, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x29958860, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x381f00 [0090.101] FindClose (in: hFindFile=0x381f00 | out: hFindFile=0x381f00) returned 1 [0090.101] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e4ac) returned 1 [0090.101] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e4b8) returned 1 [0090.101] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e4ec) returned 1 [0090.101] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Search\\Data\\Applications\\Windows\\Projects\\SystemIndex\\Indexer", nBufferLength=0x105, lpBuffer=0x31dff4, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Microsoft\\Search\\Data\\Applications\\Windows\\Projects\\SystemIndex\\Indexer", lpFilePart=0x0) returned 0x5a [0090.101] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Search\\Data\\Applications\\Windows\\Projects\\SystemIndex\\Indexer\\", nBufferLength=0x105, lpBuffer=0x31dfc8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Microsoft\\Search\\Data\\Applications\\Windows\\Projects\\SystemIndex\\Indexer\\", lpFilePart=0x0) returned 0x5b [0090.101] FindFirstFileW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Search\\Data\\Applications\\Windows\\Projects\\SystemIndex\\Indexer\\*", lpFindFileData=0x31e214 | out: lpFindFileData=0x31e214*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x29958860, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x29958860, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x29958860, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x381f00 [0090.101] FindClose (in: hFindFile=0x381f00 | out: hFindFile=0x381f00) returned 1 [0090.101] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e4ac) returned 1 [0090.101] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e4b8) returned 1 [0090.101] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e474) returned 1 [0090.101] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Search\\Data\\Applications\\Windows\\Projects\\SystemIndex\\Indexer\\CiFiles", nBufferLength=0x105, lpBuffer=0x31df7c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Microsoft\\Search\\Data\\Applications\\Windows\\Projects\\SystemIndex\\Indexer\\CiFiles", lpFilePart=0x0) returned 0x62 [0090.101] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Search\\Data\\Applications\\Windows\\Projects\\SystemIndex\\Indexer\\CiFiles\\", nBufferLength=0x105, lpBuffer=0x31df50, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Microsoft\\Search\\Data\\Applications\\Windows\\Projects\\SystemIndex\\Indexer\\CiFiles\\", lpFilePart=0x0) returned 0x63 [0090.101] FindFirstFileW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Search\\Data\\Applications\\Windows\\Projects\\SystemIndex\\Indexer\\CiFiles\\*", lpFindFileData=0x31e19c | out: lpFindFileData=0x31e19c*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x29958860, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x29a3d0a0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x29a3d0a0, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x381f00 [0090.102] FindClose (in: hFindFile=0x381f00 | out: hFindFile=0x381f00) returned 1 [0090.103] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e434) returned 1 [0090.103] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e440) returned 1 [0090.103] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e474) returned 1 [0090.103] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Search\\Data\\Applications\\Windows\\Projects\\SystemIndex\\Indexer\\CiFiles", nBufferLength=0x105, lpBuffer=0x31df7c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Microsoft\\Search\\Data\\Applications\\Windows\\Projects\\SystemIndex\\Indexer\\CiFiles", lpFilePart=0x0) returned 0x62 [0090.103] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Search\\Data\\Applications\\Windows\\Projects\\SystemIndex\\Indexer\\CiFiles\\", nBufferLength=0x105, lpBuffer=0x31df50, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Microsoft\\Search\\Data\\Applications\\Windows\\Projects\\SystemIndex\\Indexer\\CiFiles\\", lpFilePart=0x0) returned 0x63 [0090.103] FindFirstFileW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Search\\Data\\Applications\\Windows\\Projects\\SystemIndex\\Indexer\\CiFiles\\*", lpFindFileData=0x31e19c | out: lpFindFileData=0x31e19c*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x29958860, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x29a3d0a0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x29a3d0a0, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x381f00 [0090.104] FindClose (in: hFindFile=0x381f00 | out: hFindFile=0x381f00) returned 1 [0090.104] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e434) returned 1 [0090.104] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e440) returned 1 [0090.104] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e4ec) returned 1 [0090.104] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Search\\Data\\Applications\\Windows\\Projects\\SystemIndex\\PropMap", nBufferLength=0x105, lpBuffer=0x31dff4, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Microsoft\\Search\\Data\\Applications\\Windows\\Projects\\SystemIndex\\PropMap", lpFilePart=0x0) returned 0x5a [0090.104] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Search\\Data\\Applications\\Windows\\Projects\\SystemIndex\\PropMap\\", nBufferLength=0x105, lpBuffer=0x31dfc8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Microsoft\\Search\\Data\\Applications\\Windows\\Projects\\SystemIndex\\PropMap\\", lpFilePart=0x0) returned 0x5b [0090.104] FindFirstFileW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Search\\Data\\Applications\\Windows\\Projects\\SystemIndex\\PropMap\\*", lpFindFileData=0x31e214 | out: lpFindFileData=0x31e214*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x27eb7240, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x27edd3a0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x27edd3a0, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x381f00 [0090.105] FindClose (in: hFindFile=0x381f00 | out: hFindFile=0x381f00) returned 1 [0090.105] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e4ac) returned 1 [0090.105] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e4b8) returned 1 [0090.105] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e4ec) returned 1 [0090.105] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Search\\Data\\Applications\\Windows\\Projects\\SystemIndex\\PropMap", nBufferLength=0x105, lpBuffer=0x31dff4, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Microsoft\\Search\\Data\\Applications\\Windows\\Projects\\SystemIndex\\PropMap", lpFilePart=0x0) returned 0x5a [0090.105] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Search\\Data\\Applications\\Windows\\Projects\\SystemIndex\\PropMap\\", nBufferLength=0x105, lpBuffer=0x31dfc8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Microsoft\\Search\\Data\\Applications\\Windows\\Projects\\SystemIndex\\PropMap\\", lpFilePart=0x0) returned 0x5b [0090.105] FindFirstFileW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Search\\Data\\Applications\\Windows\\Projects\\SystemIndex\\PropMap\\*", lpFindFileData=0x31e214 | out: lpFindFileData=0x31e214*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x27eb7240, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x27edd3a0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x27edd3a0, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x381f00 [0090.105] FindClose (in: hFindFile=0x381f00 | out: hFindFile=0x381f00) returned 1 [0090.105] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e4ac) returned 1 [0090.105] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e4b8) returned 1 [0090.105] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e4ec) returned 1 [0090.105] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Search\\Data\\Applications\\Windows\\Projects\\SystemIndex\\SecStore", nBufferLength=0x105, lpBuffer=0x31dff4, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Microsoft\\Search\\Data\\Applications\\Windows\\Projects\\SystemIndex\\SecStore", lpFilePart=0x0) returned 0x5b [0090.105] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Search\\Data\\Applications\\Windows\\Projects\\SystemIndex\\SecStore\\", nBufferLength=0x105, lpBuffer=0x31dfc8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Microsoft\\Search\\Data\\Applications\\Windows\\Projects\\SystemIndex\\SecStore\\", lpFilePart=0x0) returned 0x5c [0090.105] FindFirstFileW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Search\\Data\\Applications\\Windows\\Projects\\SystemIndex\\SecStore\\*", lpFindFileData=0x31e214 | out: lpFindFileData=0x31e214*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x29958860, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x29958860, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x29958860, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x381f00 [0090.105] FindClose (in: hFindFile=0x381f00 | out: hFindFile=0x381f00) returned 1 [0090.105] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Search\\Data\\Applications\\Windows\\Projects\\SystemIndex\\SecStore", nBufferLength=0x105, lpBuffer=0x31dff4, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Microsoft\\Search\\Data\\Applications\\Windows\\Projects\\SystemIndex\\SecStore", lpFilePart=0x0) returned 0x5b [0090.106] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Search\\Data\\Applications\\Windows\\Projects\\SystemIndex\\SecStore\\", nBufferLength=0x105, lpBuffer=0x31dfc8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Microsoft\\Search\\Data\\Applications\\Windows\\Projects\\SystemIndex\\SecStore\\", lpFilePart=0x0) returned 0x5c [0090.106] FindFirstFileW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Search\\Data\\Applications\\Windows\\Projects\\SystemIndex\\SecStore\\*", lpFindFileData=0x31e214 | out: lpFindFileData=0x31e214*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x29958860, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x29958860, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x29958860, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x381f00 [0090.107] FindClose (in: hFindFile=0x381f00 | out: hFindFile=0x381f00) returned 1 [0090.107] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Search\\Data\\Temp", nBufferLength=0x105, lpBuffer=0x31e1d4, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Microsoft\\Search\\Data\\Temp", lpFilePart=0x0) returned 0x2d [0090.107] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Search\\Data\\Temp\\", nBufferLength=0x105, lpBuffer=0x31e1a8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Microsoft\\Search\\Data\\Temp\\", lpFilePart=0x0) returned 0x2e [0090.107] FindFirstFileW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Search\\Data\\Temp\\*", lpFindFileData=0x31e3f4 | out: lpFindFileData=0x31e3f4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x27e1ecc0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x27e1ecc0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x422b7290, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x381f00 [0090.107] FindClose (in: hFindFile=0x381f00 | out: hFindFile=0x381f00) returned 1 [0090.107] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Search\\Data\\Temp", nBufferLength=0x105, lpBuffer=0x31e1d4, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Microsoft\\Search\\Data\\Temp", lpFilePart=0x0) returned 0x2d [0090.107] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Search\\Data\\Temp\\", nBufferLength=0x105, lpBuffer=0x31e1a8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Microsoft\\Search\\Data\\Temp\\", lpFilePart=0x0) returned 0x2e [0090.107] FindFirstFileW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Search\\Data\\Temp\\*", lpFindFileData=0x31e3f4 | out: lpFindFileData=0x31e3f4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x27e1ecc0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x27e1ecc0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x422b7290, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x381f00 [0090.107] FindClose (in: hFindFile=0x381f00 | out: hFindFile=0x381f00) returned 1 [0090.107] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\User Account Pictures", nBufferLength=0x105, lpBuffer=0x31e2c4, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Microsoft\\User Account Pictures", lpFilePart=0x0) returned 0x32 [0090.107] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\User Account Pictures\\", nBufferLength=0x105, lpBuffer=0x31e298, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Microsoft\\User Account Pictures\\", lpFilePart=0x0) returned 0x33 [0090.107] FindFirstFileW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\User Account Pictures\\*", lpFindFileData=0x31e4e4 | out: lpFindFileData=0x31e4e4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xfd9b5b52, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x29423840, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x29423840, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x381f00 [0090.107] FindClose (in: hFindFile=0x381f00 | out: hFindFile=0x381f00) returned 1 [0090.108] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\User Account Pictures", nBufferLength=0x105, lpBuffer=0x31e2c4, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Microsoft\\User Account Pictures", lpFilePart=0x0) returned 0x32 [0090.108] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\User Account Pictures\\", nBufferLength=0x105, lpBuffer=0x31e298, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Microsoft\\User Account Pictures\\", lpFilePart=0x0) returned 0x33 [0090.108] FindFirstFileW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\User Account Pictures\\*", lpFindFileData=0x31e4e4 | out: lpFindFileData=0x31e4e4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xfd9b5b52, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x29423840, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x29423840, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x381f00 [0090.108] FindClose (in: hFindFile=0x381f00 | out: hFindFile=0x381f00) returned 1 [0090.108] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\User Account Pictures\\guest.bmp", nBufferLength=0x105, lpBuffer=0x31e194, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Microsoft\\User Account Pictures\\guest.bmp", lpFilePart=0x0) returned 0x3c [0090.108] CreateFileW (lpFileName="C:\\Users\\All Users\\Microsoft\\User Account Pictures\\guest.bmp" (normalized: "c:\\users\\all users\\microsoft\\user account pictures\\guest.bmp"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x178 [0090.108] GetFileType (hFile=0x178) returned 0x1 [0090.108] GetFileType (hFile=0x178) returned 0x1 [0090.108] GetFileSize (in: hFile=0x178, lpFileSizeHigh=0x31e790 | out: lpFileSizeHigh=0x31e790*=0x0) returned 0xc040 [0090.108] ReadFile (in: hFile=0x178, lpBuffer=0x26b57a0, nNumberOfBytesToRead=0xc040, lpNumberOfBytesRead=0x31e73c, lpOverlapped=0x0 | out: lpBuffer=0x26b57a0*, lpNumberOfBytesRead=0x31e73c*=0xc040, lpOverlapped=0x0) returned 1 [0090.136] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\User Account Pictures\\guest.bmp", nBufferLength=0x105, lpBuffer=0x31e180, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Microsoft\\User Account Pictures\\guest.bmp", lpFilePart=0x0) returned 0x3c [0090.136] CreateFileW (lpFileName="C:\\Users\\All Users\\Microsoft\\User Account Pictures\\guest.bmp" (normalized: "c:\\users\\all users\\microsoft\\user account pictures\\guest.bmp"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x178 [0090.138] GetFileType (hFile=0x178) returned 0x1 [0090.138] GetFileType (hFile=0x178) returned 0x1 [0090.138] WriteFile (in: hFile=0x178, lpBuffer=0x27267e4*, nNumberOfBytesToWrite=0xc050, lpNumberOfBytesWritten=0x31e730, lpOverlapped=0x0 | out: lpBuffer=0x27267e4*, lpNumberOfBytesWritten=0x31e730*=0xc050, lpOverlapped=0x0) returned 1 [0090.139] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\User Account Pictures\\guest.bmp", nBufferLength=0x105, lpBuffer=0x31e2b4, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Microsoft\\User Account Pictures\\guest.bmp", lpFilePart=0x0) returned 0x3c [0090.140] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\User Account Pictures\\guest.bmp", nBufferLength=0x105, lpBuffer=0x31e2b4, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Microsoft\\User Account Pictures\\guest.bmp", lpFilePart=0x0) returned 0x3c [0090.140] GetFileAttributesExW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\User Account Pictures\\guest.bmp" (normalized: "c:\\users\\all users\\microsoft\\user account pictures\\guest.bmp"), fInfoLevelId=0x0, lpFileInformation=0x31e790 | out: lpFileInformation=0x31e790*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x80340916, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x7bed1018, ftLastAccessTime.dwHighDateTime=0x1ca0444, ftLastWriteTime.dwLowDateTime=0x192c6c60, ftLastWriteTime.dwHighDateTime=0x1d6eb7f, nFileSizeHigh=0x0, nFileSizeLow=0xc050)) returned 1 [0090.140] MoveFileW (lpExistingFileName="C:\\Users\\All Users\\Microsoft\\User Account Pictures\\guest.bmp" (normalized: "c:\\users\\all users\\microsoft\\user account pictures\\guest.bmp"), lpNewFileName="C:\\Users\\All Users\\Microsoft\\User Account Pictures\\guest.bmp" (normalized: "c:\\users\\all users\\microsoft\\user account pictures\\guest.bmp")) returned 1 [0090.140] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\User Account Pictures\\user.bmp", nBufferLength=0x105, lpBuffer=0x31e194, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Microsoft\\User Account Pictures\\user.bmp", lpFilePart=0x0) returned 0x3b [0090.140] CreateFileW (lpFileName="C:\\Users\\All Users\\Microsoft\\User Account Pictures\\user.bmp" (normalized: "c:\\users\\all users\\microsoft\\user account pictures\\user.bmp"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x178 [0090.140] GetFileType (hFile=0x178) returned 0x1 [0090.141] GetFileType (hFile=0x178) returned 0x1 [0090.141] GetFileSize (in: hFile=0x178, lpFileSizeHigh=0x31e790 | out: lpFileSizeHigh=0x31e790*=0x0) returned 0xc040 [0090.141] ReadFile (in: hFile=0x178, lpBuffer=0x2732b6c, nNumberOfBytesToRead=0xc040, lpNumberOfBytesRead=0x31e73c, lpOverlapped=0x0 | out: lpBuffer=0x2732b6c*, lpNumberOfBytesRead=0x31e73c*=0xc040, lpOverlapped=0x0) returned 1 [0090.156] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\User Account Pictures\\user.bmp", nBufferLength=0x105, lpBuffer=0x31e180, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Microsoft\\User Account Pictures\\user.bmp", lpFilePart=0x0) returned 0x3b [0090.156] CreateFileW (lpFileName="C:\\Users\\All Users\\Microsoft\\User Account Pictures\\user.bmp" (normalized: "c:\\users\\all users\\microsoft\\user account pictures\\user.bmp"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x178 [0090.157] GetFileType (hFile=0x178) returned 0x1 [0090.157] GetFileType (hFile=0x178) returned 0x1 [0090.157] WriteFile (in: hFile=0x178, lpBuffer=0x27a3a54*, nNumberOfBytesToWrite=0xc050, lpNumberOfBytesWritten=0x31e730, lpOverlapped=0x0 | out: lpBuffer=0x27a3a54*, lpNumberOfBytesWritten=0x31e730*=0xc050, lpOverlapped=0x0) returned 1 [0090.158] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\User Account Pictures\\user.bmp", nBufferLength=0x105, lpBuffer=0x31e2b4, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Microsoft\\User Account Pictures\\user.bmp", lpFilePart=0x0) returned 0x3b [0090.158] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\User Account Pictures\\user.bmp", nBufferLength=0x105, lpBuffer=0x31e2b4, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Microsoft\\User Account Pictures\\user.bmp", lpFilePart=0x0) returned 0x3b [0090.158] GetFileAttributesExW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\User Account Pictures\\user.bmp" (normalized: "c:\\users\\all users\\microsoft\\user account pictures\\user.bmp"), fInfoLevelId=0x0, lpFileInformation=0x31e790 | out: lpFileInformation=0x31e790*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x80340916, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x7bed1018, ftLastAccessTime.dwHighDateTime=0x1ca0444, ftLastWriteTime.dwLowDateTime=0x192ecdc0, ftLastWriteTime.dwHighDateTime=0x1d6eb7f, nFileSizeHigh=0x0, nFileSizeLow=0xc050)) returned 1 [0090.158] MoveFileW (lpExistingFileName="C:\\Users\\All Users\\Microsoft\\User Account Pictures\\user.bmp" (normalized: "c:\\users\\all users\\microsoft\\user account pictures\\user.bmp"), lpNewFileName="C:\\Users\\All Users\\Microsoft\\User Account Pictures\\user.bmp" (normalized: "c:\\users\\all users\\microsoft\\user account pictures\\user.bmp")) returned 1 [0090.159] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\User Account Pictures\\Default Pictures", nBufferLength=0x105, lpBuffer=0x31e24c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Microsoft\\User Account Pictures\\Default Pictures", lpFilePart=0x0) returned 0x43 [0090.159] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\User Account Pictures\\Default Pictures\\", nBufferLength=0x105, lpBuffer=0x31e220, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Microsoft\\User Account Pictures\\Default Pictures\\", lpFilePart=0x0) returned 0x44 [0090.159] FindFirstFileW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\User Account Pictures\\Default Pictures\\*", lpFindFileData=0x31e46c | out: lpFindFileData=0x31e46c*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x7fffaad0, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x80366a76, ftLastAccessTime.dwHighDateTime=0x1ca0444, ftLastWriteTime.dwLowDateTime=0x80366a76, ftLastWriteTime.dwHighDateTime=0x1ca0444, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x381d00 [0090.159] FindClose (in: hFindFile=0x381d00 | out: hFindFile=0x381d00) returned 1 [0090.159] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\User Account Pictures\\Default Pictures", nBufferLength=0x105, lpBuffer=0x31e24c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Microsoft\\User Account Pictures\\Default Pictures", lpFilePart=0x0) returned 0x43 [0090.159] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\User Account Pictures\\Default Pictures\\", nBufferLength=0x105, lpBuffer=0x31e220, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Microsoft\\User Account Pictures\\Default Pictures\\", lpFilePart=0x0) returned 0x44 [0090.159] FindFirstFileW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\User Account Pictures\\Default Pictures\\*", lpFindFileData=0x31e46c | out: lpFindFileData=0x31e46c*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x7fffaad0, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x80366a76, ftLastAccessTime.dwHighDateTime=0x1ca0444, ftLastWriteTime.dwLowDateTime=0x80366a76, ftLastWriteTime.dwHighDateTime=0x1ca0444, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x381d00 [0090.160] FindClose (in: hFindFile=0x381d00 | out: hFindFile=0x381d00) returned 1 [0090.160] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\User Account Pictures\\Default Pictures\\usertile10.bmp", nBufferLength=0x105, lpBuffer=0x31e11c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Microsoft\\User Account Pictures\\Default Pictures\\usertile10.bmp", lpFilePart=0x0) returned 0x52 [0090.160] CreateFileW (lpFileName="C:\\Users\\All Users\\Microsoft\\User Account Pictures\\Default Pictures\\usertile10.bmp" (normalized: "c:\\users\\all users\\microsoft\\user account pictures\\default pictures\\usertile10.bmp"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x178 [0090.160] GetFileType (hFile=0x178) returned 0x1 [0090.160] GetFileType (hFile=0x178) returned 0x1 [0090.160] GetFileSize (in: hFile=0x178, lpFileSizeHigh=0x31e718 | out: lpFileSizeHigh=0x31e718*=0x0) returned 0xc038 [0090.160] ReadFile (in: hFile=0x178, lpBuffer=0x27b922c, nNumberOfBytesToRead=0xc038, lpNumberOfBytesRead=0x31e6c4, lpOverlapped=0x0 | out: lpBuffer=0x27b922c*, lpNumberOfBytesRead=0x31e6c4*=0xc038, lpOverlapped=0x0) returned 1 [0090.176] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\User Account Pictures\\Default Pictures\\usertile10.bmp", nBufferLength=0x105, lpBuffer=0x31e108, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Microsoft\\User Account Pictures\\Default Pictures\\usertile10.bmp", lpFilePart=0x0) returned 0x52 [0090.176] CreateFileW (lpFileName="C:\\Users\\All Users\\Microsoft\\User Account Pictures\\Default Pictures\\usertile10.bmp" (normalized: "c:\\users\\all users\\microsoft\\user account pictures\\default pictures\\usertile10.bmp"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0xffffffff [0090.177] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31d438) returned 1 [0090.177] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e7bc) returned 1 [0090.177] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Vault", nBufferLength=0x105, lpBuffer=0x31e2c4, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Microsoft\\Vault", lpFilePart=0x0) returned 0x22 [0090.177] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Vault\\", nBufferLength=0x105, lpBuffer=0x31e298, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Microsoft\\Vault\\", lpFilePart=0x0) returned 0x23 [0090.177] FindFirstFileW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Vault\\*", lpFindFileData=0x31e4e4 | out: lpFindFileData=0x31e4e4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd9b5b52, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd9b5b52, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xc602eec6, ftLastWriteTime.dwHighDateTime=0x1ca042b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x381ec0 [0090.178] FindNextFileW (in: hFindFile=0x381ec0, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd9b5b52, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd9b5b52, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xc602eec6, ftLastWriteTime.dwHighDateTime=0x1ca042b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0090.178] FindNextFileW (in: hFindFile=0x381ec0, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd9b5b52, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd9b5b52, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xc602eec6, ftLastWriteTime.dwHighDateTime=0x1ca042b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 0 [0090.178] FindClose (in: hFindFile=0x381ec0 | out: hFindFile=0x381ec0) returned 1 [0090.178] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e77c) returned 1 [0090.178] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e788) returned 1 [0090.178] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e7bc) returned 1 [0090.178] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Vault", nBufferLength=0x105, lpBuffer=0x31e2c4, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Microsoft\\Vault", lpFilePart=0x0) returned 0x22 [0090.178] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Vault\\", nBufferLength=0x105, lpBuffer=0x31e298, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Microsoft\\Vault\\", lpFilePart=0x0) returned 0x23 [0090.178] FindFirstFileW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Vault\\*", lpFindFileData=0x31e4e4 | out: lpFindFileData=0x31e4e4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd9b5b52, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd9b5b52, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xc602eec6, ftLastWriteTime.dwHighDateTime=0x1ca042b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x381ec0 [0090.178] FindNextFileW (in: hFindFile=0x381ec0, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd9b5b52, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd9b5b52, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xc602eec6, ftLastWriteTime.dwHighDateTime=0x1ca042b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0090.179] FindNextFileW (in: hFindFile=0x381ec0, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd9b5b52, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd9b5b52, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xc602eec6, ftLastWriteTime.dwHighDateTime=0x1ca042b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 0 [0090.179] FindClose (in: hFindFile=0x381ec0 | out: hFindFile=0x381ec0) returned 1 [0090.179] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e77c) returned 1 [0090.179] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e788) returned 1 [0090.179] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e7bc) returned 1 [0090.179] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\VISIO", nBufferLength=0x105, lpBuffer=0x31e2c4, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Microsoft\\VISIO", lpFilePart=0x0) returned 0x22 [0090.179] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\VISIO\\", nBufferLength=0x105, lpBuffer=0x31e298, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Microsoft\\VISIO\\", lpFilePart=0x0) returned 0x23 [0090.179] FindFirstFileW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\VISIO\\*", lpFindFileData=0x31e4e4 | out: lpFindFileData=0x31e4e4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x80ac5760, ftCreationTime.dwHighDateTime=0x1d305eb, ftLastAccessTime.dwLowDateTime=0x80ac5760, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0x80ac5760, ftLastWriteTime.dwHighDateTime=0x1d305eb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x381ec0 [0090.179] FindNextFileW (in: hFindFile=0x381ec0, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x80ac5760, ftCreationTime.dwHighDateTime=0x1d305eb, ftLastAccessTime.dwLowDateTime=0x80ac5760, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0x80ac5760, ftLastWriteTime.dwHighDateTime=0x1d305eb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0090.179] FindNextFileW (in: hFindFile=0x381ec0, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x80ac5760, ftCreationTime.dwHighDateTime=0x1d305eb, ftLastAccessTime.dwLowDateTime=0x80ac5760, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0x80ac5760, ftLastWriteTime.dwHighDateTime=0x1d305eb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 0 [0090.180] FindClose (in: hFindFile=0x381ec0 | out: hFindFile=0x381ec0) returned 1 [0090.180] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e77c) returned 1 [0090.180] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e788) returned 1 [0090.180] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e7bc) returned 1 [0090.180] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\VISIO", nBufferLength=0x105, lpBuffer=0x31e2c4, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Microsoft\\VISIO", lpFilePart=0x0) returned 0x22 [0090.180] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\VISIO\\", nBufferLength=0x105, lpBuffer=0x31e298, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Microsoft\\VISIO\\", lpFilePart=0x0) returned 0x23 [0090.180] FindFirstFileW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\VISIO\\*", lpFindFileData=0x31e4e4 | out: lpFindFileData=0x31e4e4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x80ac5760, ftCreationTime.dwHighDateTime=0x1d305eb, ftLastAccessTime.dwLowDateTime=0x80ac5760, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0x80ac5760, ftLastWriteTime.dwHighDateTime=0x1d305eb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x381ec0 [0090.180] FindNextFileW (in: hFindFile=0x381ec0, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x80ac5760, ftCreationTime.dwHighDateTime=0x1d305eb, ftLastAccessTime.dwLowDateTime=0x80ac5760, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0x80ac5760, ftLastWriteTime.dwHighDateTime=0x1d305eb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0090.180] FindNextFileW (in: hFindFile=0x381ec0, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x80ac5760, ftCreationTime.dwHighDateTime=0x1d305eb, ftLastAccessTime.dwLowDateTime=0x80ac5760, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0x80ac5760, ftLastWriteTime.dwHighDateTime=0x1d305eb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 0 [0090.180] FindClose (in: hFindFile=0x381ec0 | out: hFindFile=0x381ec0) returned 1 [0090.180] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e77c) returned 1 [0090.180] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e788) returned 1 [0090.180] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e7bc) returned 1 [0090.180] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Windows", nBufferLength=0x105, lpBuffer=0x31e2c4, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Microsoft\\Windows", lpFilePart=0x0) returned 0x24 [0090.181] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Windows\\", nBufferLength=0x105, lpBuffer=0x31e298, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Microsoft\\Windows\\", lpFilePart=0x0) returned 0x25 [0090.181] FindFirstFileW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Windows\\*", lpFindFileData=0x31e4e4 | out: lpFindFileData=0x31e4e4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xfd9b5b52, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x60ae73a0, ftLastAccessTime.dwHighDateTime=0x1d2de2a, ftLastWriteTime.dwLowDateTime=0x60ae73a0, ftLastWriteTime.dwHighDateTime=0x1d2de2a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x381ec0 [0090.181] FindNextFileW (in: hFindFile=0x381ec0, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xfd9b5b52, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x60ae73a0, ftLastAccessTime.dwHighDateTime=0x1d2de2a, ftLastWriteTime.dwLowDateTime=0x60ae73a0, ftLastWriteTime.dwHighDateTime=0x1d2de2a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0090.181] FindNextFileW (in: hFindFile=0x381ec0, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x14, ftCreationTime.dwLowDateTime=0xfd9b5b52, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd9b5b52, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xd5be7172, ftLastWriteTime.dwHighDateTime=0x1ca042b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="AIT", cAlternateFileName="")) returned 1 [0090.181] FindNextFileW (in: hFindFile=0x381ec0, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x283ea490, ftCreationTime.dwHighDateTime=0x1ca043f, ftLastAccessTime.dwLowDateTime=0x9b86da60, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0x9b86da60, ftLastWriteTime.dwHighDateTime=0x1d305eb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Caches", cAlternateFileName="")) returned 1 [0090.181] FindNextFileW (in: hFindFile=0x381ec0, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xfd9b5b52, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd9b5b52, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xfd9b5b52, ftLastWriteTime.dwHighDateTime=0x1ca0431, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="DeviceMetadataStore", cAlternateFileName="DEVICE~1")) returned 1 [0090.181] FindNextFileW (in: hFindFile=0x381ec0, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0x80020c30, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x80020c30, ftLastAccessTime.dwHighDateTime=0x1ca0444, ftLastWriteTime.dwLowDateTime=0x80020c30, ftLastWriteTime.dwHighDateTime=0x1ca0444, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="DRM", cAlternateFileName="")) returned 1 [0090.181] FindNextFileW (in: hFindFile=0x381ec0, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xfd9dbcac, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd9dbcac, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xaeea3462, ftLastWriteTime.dwHighDateTime=0x1ca042b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="GameExplorer", cAlternateFileName="GAMEEX~1")) returned 1 [0090.182] FindNextFileW (in: hFindFile=0x381ec0, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd9dbcac, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x80e53620, ftLastAccessTime.dwHighDateTime=0x1d305f5, ftLastWriteTime.dwLowDateTime=0x80e53620, ftLastWriteTime.dwHighDateTime=0x1d305f5, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Power Efficiency Diagnostics", cAlternateFileName="POWERE~1")) returned 1 [0090.182] FindNextFileW (in: hFindFile=0x381ec0, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x7fffaad0, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x8038cbd7, ftLastAccessTime.dwHighDateTime=0x1ca0444, ftLastWriteTime.dwLowDateTime=0x8038cbd7, ftLastWriteTime.dwHighDateTime=0x1ca0444, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Ringtones", cAlternateFileName="RINGTO~1")) returned 1 [0090.182] FindNextFileW (in: hFindFile=0x381ec0, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x60ae73a0, ftCreationTime.dwHighDateTime=0x1d2de2a, ftLastAccessTime.dwLowDateTime=0x60ae73a0, ftLastAccessTime.dwHighDateTime=0x1d2de2a, ftLastWriteTime.dwLowDateTime=0x60ae73a0, ftLastWriteTime.dwHighDateTime=0x1d2de2a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Sqm", cAlternateFileName="")) returned 1 [0090.182] FindNextFileW (in: hFindFile=0x381ec0, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0xfd9dbcac, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x1cc35f15, ftLastAccessTime.dwHighDateTime=0x1ca0440, ftLastWriteTime.dwLowDateTime=0x1cc35f15, ftLastWriteTime.dwHighDateTime=0x1ca0440, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Start Menu", cAlternateFileName="STARTM~1")) returned 1 [0090.182] FindNextFileW (in: hFindFile=0x381ec0, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xfd9dbcac, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd9dbcac, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xaeea3462, ftLastWriteTime.dwHighDateTime=0x1ca042b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Templates", cAlternateFileName="TEMPLA~1")) returned 1 [0090.182] FindNextFileW (in: hFindFile=0x381ec0, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xfd9dbcac, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfda01e06, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xfda01e06, ftLastWriteTime.dwHighDateTime=0x1ca0431, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="WER", cAlternateFileName="")) returned 1 [0090.183] FindNextFileW (in: hFindFile=0x381ec0, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xfd9dbcac, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfda01e06, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xfda01e06, ftLastWriteTime.dwHighDateTime=0x1ca0431, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="WER", cAlternateFileName="")) returned 0 [0090.183] FindClose (in: hFindFile=0x381ec0 | out: hFindFile=0x381ec0) returned 1 [0090.183] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e77c) returned 1 [0090.183] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e788) returned 1 [0090.183] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e7bc) returned 1 [0090.183] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Windows", nBufferLength=0x105, lpBuffer=0x31e2c4, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Microsoft\\Windows", lpFilePart=0x0) returned 0x24 [0090.183] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Windows\\", nBufferLength=0x105, lpBuffer=0x31e298, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Microsoft\\Windows\\", lpFilePart=0x0) returned 0x25 [0090.183] FindFirstFileW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Windows\\*", lpFindFileData=0x31e4e4 | out: lpFindFileData=0x31e4e4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xfd9b5b52, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x60ae73a0, ftLastAccessTime.dwHighDateTime=0x1d2de2a, ftLastWriteTime.dwLowDateTime=0x60ae73a0, ftLastWriteTime.dwHighDateTime=0x1d2de2a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x381ec0 [0090.183] FindNextFileW (in: hFindFile=0x381ec0, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xfd9b5b52, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x60ae73a0, ftLastAccessTime.dwHighDateTime=0x1d2de2a, ftLastWriteTime.dwLowDateTime=0x60ae73a0, ftLastWriteTime.dwHighDateTime=0x1d2de2a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0090.183] FindNextFileW (in: hFindFile=0x381ec0, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x14, ftCreationTime.dwLowDateTime=0xfd9b5b52, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd9b5b52, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xd5be7172, ftLastWriteTime.dwHighDateTime=0x1ca042b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="AIT", cAlternateFileName="")) returned 1 [0090.183] FindNextFileW (in: hFindFile=0x381ec0, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x283ea490, ftCreationTime.dwHighDateTime=0x1ca043f, ftLastAccessTime.dwLowDateTime=0x9b86da60, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0x9b86da60, ftLastWriteTime.dwHighDateTime=0x1d305eb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Caches", cAlternateFileName="")) returned 1 [0090.183] FindNextFileW (in: hFindFile=0x381ec0, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xfd9b5b52, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd9b5b52, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xfd9b5b52, ftLastWriteTime.dwHighDateTime=0x1ca0431, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="DeviceMetadataStore", cAlternateFileName="DEVICE~1")) returned 1 [0090.184] FindNextFileW (in: hFindFile=0x381ec0, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0x80020c30, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x80020c30, ftLastAccessTime.dwHighDateTime=0x1ca0444, ftLastWriteTime.dwLowDateTime=0x80020c30, ftLastWriteTime.dwHighDateTime=0x1ca0444, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="DRM", cAlternateFileName="")) returned 1 [0090.184] FindNextFileW (in: hFindFile=0x381ec0, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xfd9dbcac, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd9dbcac, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xaeea3462, ftLastWriteTime.dwHighDateTime=0x1ca042b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="GameExplorer", cAlternateFileName="GAMEEX~1")) returned 1 [0090.184] FindNextFileW (in: hFindFile=0x381ec0, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd9dbcac, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x80e53620, ftLastAccessTime.dwHighDateTime=0x1d305f5, ftLastWriteTime.dwLowDateTime=0x80e53620, ftLastWriteTime.dwHighDateTime=0x1d305f5, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Power Efficiency Diagnostics", cAlternateFileName="POWERE~1")) returned 1 [0090.184] FindNextFileW (in: hFindFile=0x381ec0, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x7fffaad0, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x8038cbd7, ftLastAccessTime.dwHighDateTime=0x1ca0444, ftLastWriteTime.dwLowDateTime=0x8038cbd7, ftLastWriteTime.dwHighDateTime=0x1ca0444, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Ringtones", cAlternateFileName="RINGTO~1")) returned 1 [0090.184] FindNextFileW (in: hFindFile=0x381ec0, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x60ae73a0, ftCreationTime.dwHighDateTime=0x1d2de2a, ftLastAccessTime.dwLowDateTime=0x60ae73a0, ftLastAccessTime.dwHighDateTime=0x1d2de2a, ftLastWriteTime.dwLowDateTime=0x60ae73a0, ftLastWriteTime.dwHighDateTime=0x1d2de2a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Sqm", cAlternateFileName="")) returned 1 [0090.184] FindNextFileW (in: hFindFile=0x381ec0, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0xfd9dbcac, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x1cc35f15, ftLastAccessTime.dwHighDateTime=0x1ca0440, ftLastWriteTime.dwLowDateTime=0x1cc35f15, ftLastWriteTime.dwHighDateTime=0x1ca0440, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Start Menu", cAlternateFileName="STARTM~1")) returned 1 [0090.184] FindNextFileW (in: hFindFile=0x381ec0, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xfd9dbcac, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd9dbcac, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xaeea3462, ftLastWriteTime.dwHighDateTime=0x1ca042b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Templates", cAlternateFileName="TEMPLA~1")) returned 1 [0090.185] FindNextFileW (in: hFindFile=0x381ec0, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xfd9dbcac, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfda01e06, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xfda01e06, ftLastWriteTime.dwHighDateTime=0x1ca0431, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="WER", cAlternateFileName="")) returned 1 [0090.185] FindNextFileW (in: hFindFile=0x381ec0, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0090.185] FindClose (in: hFindFile=0x381ec0 | out: hFindFile=0x381ec0) returned 1 [0090.185] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e77c) returned 1 [0090.185] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e788) returned 1 [0090.185] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e744) returned 1 [0090.185] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Windows\\AIT", nBufferLength=0x105, lpBuffer=0x31e24c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Microsoft\\Windows\\AIT", lpFilePart=0x0) returned 0x28 [0090.185] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Windows\\AIT\\", nBufferLength=0x105, lpBuffer=0x31e220, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Microsoft\\Windows\\AIT\\", lpFilePart=0x0) returned 0x29 [0090.185] FindFirstFileW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Windows\\AIT\\*", lpFindFileData=0x31e46c | out: lpFindFileData=0x31e46c*(dwFileAttributes=0x14, ftCreationTime.dwLowDateTime=0xfd9b5b52, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd9b5b52, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xd5be7172, ftLastWriteTime.dwHighDateTime=0x1ca042b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x381ec0 [0090.185] FindNextFileW (in: hFindFile=0x381ec0, lpFindFileData=0x31e47c | out: lpFindFileData=0x31e47c*(dwFileAttributes=0x14, ftCreationTime.dwLowDateTime=0xfd9b5b52, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd9b5b52, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xd5be7172, ftLastWriteTime.dwHighDateTime=0x1ca042b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0090.185] FindNextFileW (in: hFindFile=0x381ec0, lpFindFileData=0x31e47c | out: lpFindFileData=0x31e47c*(dwFileAttributes=0x14, ftCreationTime.dwLowDateTime=0xfd9b5b52, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd9b5b52, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xd5be7172, ftLastWriteTime.dwHighDateTime=0x1ca042b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 0 [0090.186] FindClose (in: hFindFile=0x381ec0 | out: hFindFile=0x381ec0) returned 1 [0090.186] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e704) returned 1 [0090.186] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e710) returned 1 [0090.186] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e744) returned 1 [0090.186] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Windows\\AIT", nBufferLength=0x105, lpBuffer=0x31e24c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Microsoft\\Windows\\AIT", lpFilePart=0x0) returned 0x28 [0090.186] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Windows\\AIT\\", nBufferLength=0x105, lpBuffer=0x31e220, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Microsoft\\Windows\\AIT\\", lpFilePart=0x0) returned 0x29 [0090.186] FindFirstFileW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Windows\\AIT\\*", lpFindFileData=0x31e46c | out: lpFindFileData=0x31e46c*(dwFileAttributes=0x14, ftCreationTime.dwLowDateTime=0xfd9b5b52, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd9b5b52, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xd5be7172, ftLastWriteTime.dwHighDateTime=0x1ca042b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x381ec0 [0090.186] FindNextFileW (in: hFindFile=0x381ec0, lpFindFileData=0x31e47c | out: lpFindFileData=0x31e47c*(dwFileAttributes=0x14, ftCreationTime.dwLowDateTime=0xfd9b5b52, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd9b5b52, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xd5be7172, ftLastWriteTime.dwHighDateTime=0x1ca042b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0090.186] FindNextFileW (in: hFindFile=0x381ec0, lpFindFileData=0x31e47c | out: lpFindFileData=0x31e47c*(dwFileAttributes=0x14, ftCreationTime.dwLowDateTime=0xfd9b5b52, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd9b5b52, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xd5be7172, ftLastWriteTime.dwHighDateTime=0x1ca042b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 0 [0090.186] FindClose (in: hFindFile=0x381ec0 | out: hFindFile=0x381ec0) returned 1 [0090.186] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e704) returned 1 [0090.186] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e710) returned 1 [0090.186] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e744) returned 1 [0090.186] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Windows\\Caches", nBufferLength=0x105, lpBuffer=0x31e24c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Microsoft\\Windows\\Caches", lpFilePart=0x0) returned 0x2b [0090.187] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Windows\\Caches\\", nBufferLength=0x105, lpBuffer=0x31e220, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Microsoft\\Windows\\Caches\\", lpFilePart=0x0) returned 0x2c [0090.187] FindFirstFileW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Windows\\Caches\\*", lpFindFileData=0x31e46c | out: lpFindFileData=0x31e46c*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x283ea490, ftCreationTime.dwHighDateTime=0x1ca043f, ftLastAccessTime.dwLowDateTime=0x9b86da60, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0x9b86da60, ftLastWriteTime.dwHighDateTime=0x1d305eb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x381ec0 [0090.187] FindNextFileW (in: hFindFile=0x381ec0, lpFindFileData=0x31e47c | out: lpFindFileData=0x31e47c*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x283ea490, ftCreationTime.dwHighDateTime=0x1ca043f, ftLastAccessTime.dwLowDateTime=0x9b86da60, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0x9b86da60, ftLastWriteTime.dwHighDateTime=0x1d305eb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0090.187] FindNextFileW (in: hFindFile=0x381ec0, lpFindFileData=0x31e47c | out: lpFindFileData=0x31e47c*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x284cecd2, ftCreationTime.dwHighDateTime=0x1ca043f, ftLastAccessTime.dwLowDateTime=0x284cecd2, ftLastAccessTime.dwHighDateTime=0x1ca043f, ftLastWriteTime.dwLowDateTime=0x284cecd2, ftLastWriteTime.dwHighDateTime=0x1ca043f, nFileSizeHigh=0x0, nFileSizeLow=0x4000, dwReserved0=0x0, dwReserved1=0x0, cFileName="cversions.2.db", cAlternateFileName="CVERSI~1.DB")) returned 1 [0090.187] FindNextFileW (in: hFindFile=0x381ec0, lpFindFileData=0x31e47c | out: lpFindFileData=0x31e47c*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x10f4d170, ftCreationTime.dwHighDateTime=0x1d2dda2, ftLastAccessTime.dwLowDateTime=0x10f4d170, ftLastAccessTime.dwHighDateTime=0x1d2dda2, ftLastWriteTime.dwLowDateTime=0x10f4d170, ftLastWriteTime.dwHighDateTime=0x1d2dda2, nFileSizeHigh=0x0, nFileSizeLow=0x418, dwReserved0=0x0, dwReserved1=0x0, cFileName="{11336D5B-7F61-4871-82E3-E0F59766823B}.2.ver0x0000000000000001.db", cAlternateFileName="{11336~1.DB")) returned 1 [0090.187] FindNextFileW (in: hFindFile=0x381ec0, lpFindFileData=0x31e47c | out: lpFindFileData=0x31e47c*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x75fef9b0, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x75fef9b0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x75fef9b0, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x4c0, dwReserved0=0x0, dwReserved1=0x0, cFileName="{3978EA0A-1C7E-4449-8AE1-E1265F039002}.2.ver0x0000000000000003.db", cAlternateFileName="{3978E~1.DB")) returned 1 [0090.187] FindNextFileW (in: hFindFile=0x381ec0, lpFindFileData=0x31e47c | out: lpFindFileData=0x31e47c*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xcf67691e, ftCreationTime.dwHighDateTime=0x1cb892d, ftLastAccessTime.dwLowDateTime=0xcf67691e, ftLastAccessTime.dwHighDateTime=0x1cb892d, ftLastWriteTime.dwLowDateTime=0xcf67691e, ftLastWriteTime.dwHighDateTime=0x1cb892d, nFileSizeHigh=0x0, nFileSizeLow=0x908, dwReserved0=0x0, dwReserved1=0x0, cFileName="{40FC8D7D-05ED-4FEB-B03B-6C100659EF5C}.2.ver0x0000000000000001.db", cAlternateFileName="{40FC8~1.DB")) returned 1 [0090.187] FindNextFileW (in: hFindFile=0x381ec0, lpFindFileData=0x31e47c | out: lpFindFileData=0x31e47c*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x9b7d54e0, ftCreationTime.dwHighDateTime=0x1d305eb, ftLastAccessTime.dwLowDateTime=0x9b7d54e0, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0x9b7d54e0, ftLastWriteTime.dwHighDateTime=0x1d305eb, nFileSizeHigh=0x0, nFileSizeLow=0x418, dwReserved0=0x0, dwReserved1=0x0, cFileName="{4E36EA69-73D1-4458-9D16-50F8E31A69A0}.2.ver0x0000000000000001.db", cAlternateFileName="{4E36E~1.DB")) returned 1 [0090.188] FindNextFileW (in: hFindFile=0x381ec0, lpFindFileData=0x31e47c | out: lpFindFileData=0x31e47c*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xab9fb9ff, ftCreationTime.dwHighDateTime=0x1cb892d, ftLastAccessTime.dwLowDateTime=0xab9fb9ff, ftLastAccessTime.dwHighDateTime=0x1cb892d, ftLastWriteTime.dwLowDateTime=0xab9fb9ff, ftLastWriteTime.dwHighDateTime=0x1cb892d, nFileSizeHigh=0x0, nFileSizeLow=0x908, dwReserved0=0x0, dwReserved1=0x0, cFileName="{4E4260A4-7E39-442E-BC22-7FF751D1C161}.2.ver0x0000000000000002.db", cAlternateFileName="{4E426~2.DB")) returned 1 [0090.188] FindNextFileW (in: hFindFile=0x381ec0, lpFindFileData=0x31e47c | out: lpFindFileData=0x31e47c*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x76015b10, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x76015b10, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x76015b10, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x2f390, dwReserved0=0x0, dwReserved1=0x0, cFileName="{6AF0698E-D558-4F6E-9B3C-3716689AF493}.2.ver0x0000000000000011.db", cAlternateFileName="{6AF06~1.DB")) returned 1 [0090.188] FindNextFileW (in: hFindFile=0x381ec0, lpFindFileData=0x31e47c | out: lpFindFileData=0x31e47c*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x9b8217a0, ftCreationTime.dwHighDateTime=0x1d305eb, ftLastAccessTime.dwLowDateTime=0x9b8217a0, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0x9b8217a0, ftLastWriteTime.dwHighDateTime=0x1d305eb, nFileSizeHigh=0x0, nFileSizeLow=0x2f5f0, dwReserved0=0x0, dwReserved1=0x0, cFileName="{6AF0698E-D558-4F6E-9B3C-3716689AF493}.2.ver0x0000000000000012.db", cAlternateFileName="{6AF06~2.DB")) returned 1 [0090.188] FindNextFileW (in: hFindFile=0x381ec0, lpFindFileData=0x31e47c | out: lpFindFileData=0x31e47c*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xab96347e, ftCreationTime.dwHighDateTime=0x1cb892d, ftLastAccessTime.dwLowDateTime=0xab96347e, ftLastAccessTime.dwHighDateTime=0x1cb892d, ftLastWriteTime.dwLowDateTime=0xab96347e, ftLastWriteTime.dwHighDateTime=0x1cb892d, nFileSizeHigh=0x0, nFileSizeLow=0x65578, dwReserved0=0x0, dwReserved1=0x0, cFileName="{DDF571F2-BE98-426D-8288-1A9A39C3FDA2}.2.ver0x0000000000000002.db", cAlternateFileName="{DDF57~2.DB")) returned 1 [0090.188] FindNextFileW (in: hFindFile=0x381ec0, lpFindFileData=0x31e47c | out: lpFindFileData=0x31e47c*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0090.188] FindClose (in: hFindFile=0x381ec0 | out: hFindFile=0x381ec0) returned 1 [0090.188] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e704) returned 1 [0090.188] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e710) returned 1 [0090.188] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e744) returned 1 [0090.188] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Windows\\Caches", nBufferLength=0x105, lpBuffer=0x31e24c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Microsoft\\Windows\\Caches", lpFilePart=0x0) returned 0x2b [0090.188] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Windows\\Caches\\", nBufferLength=0x105, lpBuffer=0x31e220, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Microsoft\\Windows\\Caches\\", lpFilePart=0x0) returned 0x2c [0090.188] FindFirstFileW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Windows\\Caches\\*", lpFindFileData=0x31e46c | out: lpFindFileData=0x31e46c*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x283ea490, ftCreationTime.dwHighDateTime=0x1ca043f, ftLastAccessTime.dwLowDateTime=0x9b86da60, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0x9b86da60, ftLastWriteTime.dwHighDateTime=0x1d305eb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x381ec0 [0090.189] FindNextFileW (in: hFindFile=0x381ec0, lpFindFileData=0x31e47c | out: lpFindFileData=0x31e47c*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x283ea490, ftCreationTime.dwHighDateTime=0x1ca043f, ftLastAccessTime.dwLowDateTime=0x9b86da60, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0x9b86da60, ftLastWriteTime.dwHighDateTime=0x1d305eb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0090.189] FindNextFileW (in: hFindFile=0x381ec0, lpFindFileData=0x31e47c | out: lpFindFileData=0x31e47c*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x284cecd2, ftCreationTime.dwHighDateTime=0x1ca043f, ftLastAccessTime.dwLowDateTime=0x284cecd2, ftLastAccessTime.dwHighDateTime=0x1ca043f, ftLastWriteTime.dwLowDateTime=0x284cecd2, ftLastWriteTime.dwHighDateTime=0x1ca043f, nFileSizeHigh=0x0, nFileSizeLow=0x4000, dwReserved0=0x0, dwReserved1=0x0, cFileName="cversions.2.db", cAlternateFileName="CVERSI~1.DB")) returned 1 [0090.189] FindNextFileW (in: hFindFile=0x381ec0, lpFindFileData=0x31e47c | out: lpFindFileData=0x31e47c*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x10f4d170, ftCreationTime.dwHighDateTime=0x1d2dda2, ftLastAccessTime.dwLowDateTime=0x10f4d170, ftLastAccessTime.dwHighDateTime=0x1d2dda2, ftLastWriteTime.dwLowDateTime=0x10f4d170, ftLastWriteTime.dwHighDateTime=0x1d2dda2, nFileSizeHigh=0x0, nFileSizeLow=0x418, dwReserved0=0x0, dwReserved1=0x0, cFileName="{11336D5B-7F61-4871-82E3-E0F59766823B}.2.ver0x0000000000000001.db", cAlternateFileName="{11336~1.DB")) returned 1 [0090.189] FindNextFileW (in: hFindFile=0x381ec0, lpFindFileData=0x31e47c | out: lpFindFileData=0x31e47c*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x75fef9b0, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x75fef9b0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x75fef9b0, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x4c0, dwReserved0=0x0, dwReserved1=0x0, cFileName="{3978EA0A-1C7E-4449-8AE1-E1265F039002}.2.ver0x0000000000000003.db", cAlternateFileName="{3978E~1.DB")) returned 1 [0090.189] FindNextFileW (in: hFindFile=0x381ec0, lpFindFileData=0x31e47c | out: lpFindFileData=0x31e47c*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xcf67691e, ftCreationTime.dwHighDateTime=0x1cb892d, ftLastAccessTime.dwLowDateTime=0xcf67691e, ftLastAccessTime.dwHighDateTime=0x1cb892d, ftLastWriteTime.dwLowDateTime=0xcf67691e, ftLastWriteTime.dwHighDateTime=0x1cb892d, nFileSizeHigh=0x0, nFileSizeLow=0x908, dwReserved0=0x0, dwReserved1=0x0, cFileName="{40FC8D7D-05ED-4FEB-B03B-6C100659EF5C}.2.ver0x0000000000000001.db", cAlternateFileName="{40FC8~1.DB")) returned 1 [0090.189] FindNextFileW (in: hFindFile=0x381ec0, lpFindFileData=0x31e47c | out: lpFindFileData=0x31e47c*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x9b7d54e0, ftCreationTime.dwHighDateTime=0x1d305eb, ftLastAccessTime.dwLowDateTime=0x9b7d54e0, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0x9b7d54e0, ftLastWriteTime.dwHighDateTime=0x1d305eb, nFileSizeHigh=0x0, nFileSizeLow=0x418, dwReserved0=0x0, dwReserved1=0x0, cFileName="{4E36EA69-73D1-4458-9D16-50F8E31A69A0}.2.ver0x0000000000000001.db", cAlternateFileName="{4E36E~1.DB")) returned 1 [0090.189] FindNextFileW (in: hFindFile=0x381ec0, lpFindFileData=0x31e47c | out: lpFindFileData=0x31e47c*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xab9fb9ff, ftCreationTime.dwHighDateTime=0x1cb892d, ftLastAccessTime.dwLowDateTime=0xab9fb9ff, ftLastAccessTime.dwHighDateTime=0x1cb892d, ftLastWriteTime.dwLowDateTime=0xab9fb9ff, ftLastWriteTime.dwHighDateTime=0x1cb892d, nFileSizeHigh=0x0, nFileSizeLow=0x908, dwReserved0=0x0, dwReserved1=0x0, cFileName="{4E4260A4-7E39-442E-BC22-7FF751D1C161}.2.ver0x0000000000000002.db", cAlternateFileName="{4E426~2.DB")) returned 1 [0090.190] FindNextFileW (in: hFindFile=0x381ec0, lpFindFileData=0x31e47c | out: lpFindFileData=0x31e47c*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x76015b10, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x76015b10, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x76015b10, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x2f390, dwReserved0=0x0, dwReserved1=0x0, cFileName="{6AF0698E-D558-4F6E-9B3C-3716689AF493}.2.ver0x0000000000000011.db", cAlternateFileName="{6AF06~1.DB")) returned 1 [0090.190] FindNextFileW (in: hFindFile=0x381ec0, lpFindFileData=0x31e47c | out: lpFindFileData=0x31e47c*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x9b8217a0, ftCreationTime.dwHighDateTime=0x1d305eb, ftLastAccessTime.dwLowDateTime=0x9b8217a0, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0x9b8217a0, ftLastWriteTime.dwHighDateTime=0x1d305eb, nFileSizeHigh=0x0, nFileSizeLow=0x2f5f0, dwReserved0=0x0, dwReserved1=0x0, cFileName="{6AF0698E-D558-4F6E-9B3C-3716689AF493}.2.ver0x0000000000000012.db", cAlternateFileName="{6AF06~2.DB")) returned 1 [0090.190] FindNextFileW (in: hFindFile=0x381ec0, lpFindFileData=0x31e47c | out: lpFindFileData=0x31e47c*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xab96347e, ftCreationTime.dwHighDateTime=0x1cb892d, ftLastAccessTime.dwLowDateTime=0xab96347e, ftLastAccessTime.dwHighDateTime=0x1cb892d, ftLastWriteTime.dwLowDateTime=0xab96347e, ftLastWriteTime.dwHighDateTime=0x1cb892d, nFileSizeHigh=0x0, nFileSizeLow=0x65578, dwReserved0=0x0, dwReserved1=0x0, cFileName="{DDF571F2-BE98-426D-8288-1A9A39C3FDA2}.2.ver0x0000000000000002.db", cAlternateFileName="{DDF57~2.DB")) returned 1 [0090.190] FindNextFileW (in: hFindFile=0x381ec0, lpFindFileData=0x31e47c | out: lpFindFileData=0x31e47c*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xab96347e, ftCreationTime.dwHighDateTime=0x1cb892d, ftLastAccessTime.dwLowDateTime=0xab96347e, ftLastAccessTime.dwHighDateTime=0x1cb892d, ftLastWriteTime.dwLowDateTime=0xab96347e, ftLastWriteTime.dwHighDateTime=0x1cb892d, nFileSizeHigh=0x0, nFileSizeLow=0x65578, dwReserved0=0x0, dwReserved1=0x0, cFileName="{DDF571F2-BE98-426D-8288-1A9A39C3FDA2}.2.ver0x0000000000000002.db", cAlternateFileName="{DDF57~2.DB")) returned 0 [0090.190] FindClose (in: hFindFile=0x381ec0 | out: hFindFile=0x381ec0) returned 1 [0090.190] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e704) returned 1 [0090.190] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e710) returned 1 [0090.190] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e744) returned 1 [0090.190] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Windows\\DeviceMetadataStore", nBufferLength=0x105, lpBuffer=0x31e24c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Microsoft\\Windows\\DeviceMetadataStore", lpFilePart=0x0) returned 0x38 [0090.190] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Windows\\DeviceMetadataStore\\", nBufferLength=0x105, lpBuffer=0x31e220, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Microsoft\\Windows\\DeviceMetadataStore\\", lpFilePart=0x0) returned 0x39 [0090.190] FindFirstFileW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Windows\\DeviceMetadataStore\\*", lpFindFileData=0x31e46c | out: lpFindFileData=0x31e46c*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xfd9b5b52, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd9b5b52, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xfd9b5b52, ftLastWriteTime.dwHighDateTime=0x1ca0431, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x381ec0 [0090.191] FindNextFileW (in: hFindFile=0x381ec0, lpFindFileData=0x31e47c | out: lpFindFileData=0x31e47c*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xfd9b5b52, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd9b5b52, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xfd9b5b52, ftLastWriteTime.dwHighDateTime=0x1ca0431, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0090.191] FindNextFileW (in: hFindFile=0x381ec0, lpFindFileData=0x31e47c | out: lpFindFileData=0x31e47c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd9b5b52, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd9dbcac, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xfd9dbcac, ftLastWriteTime.dwHighDateTime=0x1ca0431, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="en-US", cAlternateFileName="")) returned 1 [0090.191] FindNextFileW (in: hFindFile=0x381ec0, lpFindFileData=0x31e47c | out: lpFindFileData=0x31e47c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd9b5b52, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd9dbcac, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xfd9dbcac, ftLastWriteTime.dwHighDateTime=0x1ca0431, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="en-US", cAlternateFileName="")) returned 0 [0090.191] FindClose (in: hFindFile=0x381ec0 | out: hFindFile=0x381ec0) returned 1 [0090.191] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e704) returned 1 [0090.191] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e710) returned 1 [0090.191] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e744) returned 1 [0090.191] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Windows\\DeviceMetadataStore", nBufferLength=0x105, lpBuffer=0x31e24c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Microsoft\\Windows\\DeviceMetadataStore", lpFilePart=0x0) returned 0x38 [0090.191] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Windows\\DeviceMetadataStore\\", nBufferLength=0x105, lpBuffer=0x31e220, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Microsoft\\Windows\\DeviceMetadataStore\\", lpFilePart=0x0) returned 0x39 [0090.191] FindFirstFileW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Windows\\DeviceMetadataStore\\*", lpFindFileData=0x31e46c | out: lpFindFileData=0x31e46c*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xfd9b5b52, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd9b5b52, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xfd9b5b52, ftLastWriteTime.dwHighDateTime=0x1ca0431, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x381ec0 [0090.192] FindNextFileW (in: hFindFile=0x381ec0, lpFindFileData=0x31e47c | out: lpFindFileData=0x31e47c*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xfd9b5b52, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd9b5b52, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xfd9b5b52, ftLastWriteTime.dwHighDateTime=0x1ca0431, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0090.192] FindNextFileW (in: hFindFile=0x381ec0, lpFindFileData=0x31e47c | out: lpFindFileData=0x31e47c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd9b5b52, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd9dbcac, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xfd9dbcac, ftLastWriteTime.dwHighDateTime=0x1ca0431, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="en-US", cAlternateFileName="")) returned 1 [0090.192] FindNextFileW (in: hFindFile=0x381ec0, lpFindFileData=0x31e47c | out: lpFindFileData=0x31e47c*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0090.192] FindClose (in: hFindFile=0x381ec0 | out: hFindFile=0x381ec0) returned 1 [0090.192] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e704) returned 1 [0090.192] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e710) returned 1 [0090.192] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e6cc) returned 1 [0090.192] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Windows\\DeviceMetadataStore\\en-US", nBufferLength=0x105, lpBuffer=0x31e1d4, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Microsoft\\Windows\\DeviceMetadataStore\\en-US", lpFilePart=0x0) returned 0x3e [0090.192] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Windows\\DeviceMetadataStore\\en-US\\", nBufferLength=0x105, lpBuffer=0x31e1a8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Microsoft\\Windows\\DeviceMetadataStore\\en-US\\", lpFilePart=0x0) returned 0x3f [0090.192] FindFirstFileW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Windows\\DeviceMetadataStore\\en-US\\*", lpFindFileData=0x31e3f4 | out: lpFindFileData=0x31e3f4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd9b5b52, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd9dbcac, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xfd9dbcac, ftLastWriteTime.dwHighDateTime=0x1ca0431, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x381ec0 [0090.192] FindNextFileW (in: hFindFile=0x381ec0, lpFindFileData=0x31e404 | out: lpFindFileData=0x31e404*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd9b5b52, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd9dbcac, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xfd9dbcac, ftLastWriteTime.dwHighDateTime=0x1ca0431, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0090.193] FindNextFileW (in: hFindFile=0x381ec0, lpFindFileData=0x31e404 | out: lpFindFileData=0x31e404*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd2db04ce, ftCreationTime.dwHighDateTime=0x1ca0407, ftLastAccessTime.dwLowDateTime=0xd2db04ce, ftLastAccessTime.dwHighDateTime=0x1ca0407, ftLastWriteTime.dwLowDateTime=0x7c0e93d7, ftLastWriteTime.dwHighDateTime=0x1c9ea0e, nFileSizeHigh=0x0, nFileSizeLow=0x3736, dwReserved0=0x0, dwReserved1=0x0, cFileName="34e548a8-3268-4dde-bedf-c40f9b6c814a.devicemetadata-ms", cAlternateFileName="")) returned 1 [0090.193] FindNextFileW (in: hFindFile=0x381ec0, lpFindFileData=0x31e404 | out: lpFindFileData=0x31e404*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5f15ee9d, ftCreationTime.dwHighDateTime=0x1ca040c, ftLastAccessTime.dwLowDateTime=0x5f15ee9d, ftLastAccessTime.dwHighDateTime=0x1ca040c, ftLastWriteTime.dwLowDateTime=0xc7c34f7b, ftLastWriteTime.dwHighDateTime=0x1c9ea0e, nFileSizeHigh=0x0, nFileSizeLow=0x1af79, dwReserved0=0x0, dwReserved1=0x0, cFileName="63921eef-8415-4368-9201-f0df4af5778f.devicemetadata-ms", cAlternateFileName="")) returned 1 [0090.193] FindNextFileW (in: hFindFile=0x381ec0, lpFindFileData=0x31e404 | out: lpFindFileData=0x31e404*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0090.193] FindClose (in: hFindFile=0x381ec0 | out: hFindFile=0x381ec0) returned 1 [0090.193] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e68c) returned 1 [0090.193] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e698) returned 1 [0090.193] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e6cc) returned 1 [0090.193] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Windows\\DeviceMetadataStore\\en-US", nBufferLength=0x105, lpBuffer=0x31e1d4, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Microsoft\\Windows\\DeviceMetadataStore\\en-US", lpFilePart=0x0) returned 0x3e [0090.193] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Windows\\DeviceMetadataStore\\en-US\\", nBufferLength=0x105, lpBuffer=0x31e1a8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Microsoft\\Windows\\DeviceMetadataStore\\en-US\\", lpFilePart=0x0) returned 0x3f [0090.193] FindFirstFileW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Windows\\DeviceMetadataStore\\en-US\\*", lpFindFileData=0x31e3f4 | out: lpFindFileData=0x31e3f4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd9b5b52, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd9dbcac, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xfd9dbcac, ftLastWriteTime.dwHighDateTime=0x1ca0431, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x381ec0 [0090.193] FindNextFileW (in: hFindFile=0x381ec0, lpFindFileData=0x31e404 | out: lpFindFileData=0x31e404*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd9b5b52, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd9dbcac, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xfd9dbcac, ftLastWriteTime.dwHighDateTime=0x1ca0431, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0090.194] FindNextFileW (in: hFindFile=0x381ec0, lpFindFileData=0x31e404 | out: lpFindFileData=0x31e404*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd2db04ce, ftCreationTime.dwHighDateTime=0x1ca0407, ftLastAccessTime.dwLowDateTime=0xd2db04ce, ftLastAccessTime.dwHighDateTime=0x1ca0407, ftLastWriteTime.dwLowDateTime=0x7c0e93d7, ftLastWriteTime.dwHighDateTime=0x1c9ea0e, nFileSizeHigh=0x0, nFileSizeLow=0x3736, dwReserved0=0x0, dwReserved1=0x0, cFileName="34e548a8-3268-4dde-bedf-c40f9b6c814a.devicemetadata-ms", cAlternateFileName="")) returned 1 [0090.194] FindNextFileW (in: hFindFile=0x381ec0, lpFindFileData=0x31e404 | out: lpFindFileData=0x31e404*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5f15ee9d, ftCreationTime.dwHighDateTime=0x1ca040c, ftLastAccessTime.dwLowDateTime=0x5f15ee9d, ftLastAccessTime.dwHighDateTime=0x1ca040c, ftLastWriteTime.dwLowDateTime=0xc7c34f7b, ftLastWriteTime.dwHighDateTime=0x1c9ea0e, nFileSizeHigh=0x0, nFileSizeLow=0x1af79, dwReserved0=0x0, dwReserved1=0x0, cFileName="63921eef-8415-4368-9201-f0df4af5778f.devicemetadata-ms", cAlternateFileName="")) returned 1 [0090.194] FindNextFileW (in: hFindFile=0x381ec0, lpFindFileData=0x31e404 | out: lpFindFileData=0x31e404*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5f15ee9d, ftCreationTime.dwHighDateTime=0x1ca040c, ftLastAccessTime.dwLowDateTime=0x5f15ee9d, ftLastAccessTime.dwHighDateTime=0x1ca040c, ftLastWriteTime.dwLowDateTime=0xc7c34f7b, ftLastWriteTime.dwHighDateTime=0x1c9ea0e, nFileSizeHigh=0x0, nFileSizeLow=0x1af79, dwReserved0=0x0, dwReserved1=0x0, cFileName="63921eef-8415-4368-9201-f0df4af5778f.devicemetadata-ms", cAlternateFileName="")) returned 0 [0090.194] FindClose (in: hFindFile=0x381ec0 | out: hFindFile=0x381ec0) returned 1 [0090.194] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e68c) returned 1 [0090.194] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e698) returned 1 [0090.194] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e744) returned 1 [0090.194] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Windows\\DRM", nBufferLength=0x105, lpBuffer=0x31e24c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Microsoft\\Windows\\DRM", lpFilePart=0x0) returned 0x28 [0090.194] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Windows\\DRM\\", nBufferLength=0x105, lpBuffer=0x31e220, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Microsoft\\Windows\\DRM\\", lpFilePart=0x0) returned 0x29 [0090.194] FindFirstFileW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Windows\\DRM\\*", lpFindFileData=0x31e46c | out: lpFindFileData=0x31e46c*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0x80020c30, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x80020c30, ftLastAccessTime.dwHighDateTime=0x1ca0444, ftLastWriteTime.dwLowDateTime=0x80020c30, ftLastWriteTime.dwHighDateTime=0x1ca0444, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x381ec0 [0090.195] FindNextFileW (in: hFindFile=0x381ec0, lpFindFileData=0x31e47c | out: lpFindFileData=0x31e47c*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0x80020c30, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x80020c30, ftLastAccessTime.dwHighDateTime=0x1ca0444, ftLastWriteTime.dwLowDateTime=0x80020c30, ftLastWriteTime.dwHighDateTime=0x1ca0444, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0090.195] FindNextFileW (in: hFindFile=0x381ec0, lpFindFileData=0x31e47c | out: lpFindFileData=0x31e47c*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0x80020c30, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x80020c30, ftLastAccessTime.dwHighDateTime=0x1ca0444, ftLastWriteTime.dwLowDateTime=0x80020c30, ftLastWriteTime.dwHighDateTime=0x1ca0444, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Cache", cAlternateFileName="")) returned 1 [0090.195] FindNextFileW (in: hFindFile=0x381ec0, lpFindFileData=0x31e47c | out: lpFindFileData=0x31e47c*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0x80020c30, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x80020c30, ftLastAccessTime.dwHighDateTime=0x1ca0444, ftLastWriteTime.dwLowDateTime=0x80020c30, ftLastWriteTime.dwHighDateTime=0x1ca0444, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Cache", cAlternateFileName="")) returned 0 [0090.195] FindClose (in: hFindFile=0x381ec0 | out: hFindFile=0x381ec0) returned 1 [0090.195] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e704) returned 1 [0090.195] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e710) returned 1 [0090.195] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e744) returned 1 [0090.195] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Windows\\DRM", nBufferLength=0x105, lpBuffer=0x31e24c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Microsoft\\Windows\\DRM", lpFilePart=0x0) returned 0x28 [0090.195] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Windows\\DRM\\", nBufferLength=0x105, lpBuffer=0x31e220, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Microsoft\\Windows\\DRM\\", lpFilePart=0x0) returned 0x29 [0090.195] FindFirstFileW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Windows\\DRM\\*", lpFindFileData=0x31e46c | out: lpFindFileData=0x31e46c*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0x80020c30, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x80020c30, ftLastAccessTime.dwHighDateTime=0x1ca0444, ftLastWriteTime.dwLowDateTime=0x80020c30, ftLastWriteTime.dwHighDateTime=0x1ca0444, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x381ec0 [0090.195] FindNextFileW (in: hFindFile=0x381ec0, lpFindFileData=0x31e47c | out: lpFindFileData=0x31e47c*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0x80020c30, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x80020c30, ftLastAccessTime.dwHighDateTime=0x1ca0444, ftLastWriteTime.dwLowDateTime=0x80020c30, ftLastWriteTime.dwHighDateTime=0x1ca0444, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0090.196] FindNextFileW (in: hFindFile=0x381ec0, lpFindFileData=0x31e47c | out: lpFindFileData=0x31e47c*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0x80020c30, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x80020c30, ftLastAccessTime.dwHighDateTime=0x1ca0444, ftLastWriteTime.dwLowDateTime=0x80020c30, ftLastWriteTime.dwHighDateTime=0x1ca0444, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Cache", cAlternateFileName="")) returned 1 [0090.196] FindNextFileW (in: hFindFile=0x381ec0, lpFindFileData=0x31e47c | out: lpFindFileData=0x31e47c*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0090.196] FindClose (in: hFindFile=0x381ec0 | out: hFindFile=0x381ec0) returned 1 [0090.196] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e704) returned 1 [0090.196] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e710) returned 1 [0090.196] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e6cc) returned 1 [0090.196] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Windows\\DRM\\Cache", nBufferLength=0x105, lpBuffer=0x31e1d4, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Microsoft\\Windows\\DRM\\Cache", lpFilePart=0x0) returned 0x2e [0090.196] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Windows\\DRM\\Cache\\", nBufferLength=0x105, lpBuffer=0x31e1a8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Microsoft\\Windows\\DRM\\Cache\\", lpFilePart=0x0) returned 0x2f [0090.196] FindFirstFileW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Windows\\DRM\\Cache\\*", lpFindFileData=0x31e3f4 | out: lpFindFileData=0x31e3f4*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0x80020c30, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x80020c30, ftLastAccessTime.dwHighDateTime=0x1ca0444, ftLastWriteTime.dwLowDateTime=0x80020c30, ftLastWriteTime.dwHighDateTime=0x1ca0444, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x381ec0 [0090.196] FindNextFileW (in: hFindFile=0x381ec0, lpFindFileData=0x31e404 | out: lpFindFileData=0x31e404*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0x80020c30, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x80020c30, ftLastAccessTime.dwHighDateTime=0x1ca0444, ftLastWriteTime.dwLowDateTime=0x80020c30, ftLastWriteTime.dwHighDateTime=0x1ca0444, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0090.196] FindNextFileW (in: hFindFile=0x381ec0, lpFindFileData=0x31e404 | out: lpFindFileData=0x31e404*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0x80020c30, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x80020c30, ftLastAccessTime.dwHighDateTime=0x1ca0444, ftLastWriteTime.dwLowDateTime=0x80020c30, ftLastWriteTime.dwHighDateTime=0x1ca0444, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 0 [0090.197] FindClose (in: hFindFile=0x381ec0 | out: hFindFile=0x381ec0) returned 1 [0090.197] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e68c) returned 1 [0090.197] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e698) returned 1 [0090.197] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e6cc) returned 1 [0090.197] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Windows\\DRM\\Cache", nBufferLength=0x105, lpBuffer=0x31e1d4, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Microsoft\\Windows\\DRM\\Cache", lpFilePart=0x0) returned 0x2e [0090.197] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Windows\\DRM\\Cache\\", nBufferLength=0x105, lpBuffer=0x31e1a8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Microsoft\\Windows\\DRM\\Cache\\", lpFilePart=0x0) returned 0x2f [0090.197] FindFirstFileW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Windows\\DRM\\Cache\\*", lpFindFileData=0x31e3f4 | out: lpFindFileData=0x31e3f4*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0x80020c30, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x80020c30, ftLastAccessTime.dwHighDateTime=0x1ca0444, ftLastWriteTime.dwLowDateTime=0x80020c30, ftLastWriteTime.dwHighDateTime=0x1ca0444, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x381ec0 [0090.197] FindNextFileW (in: hFindFile=0x381ec0, lpFindFileData=0x31e404 | out: lpFindFileData=0x31e404*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0x80020c30, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x80020c30, ftLastAccessTime.dwHighDateTime=0x1ca0444, ftLastWriteTime.dwLowDateTime=0x80020c30, ftLastWriteTime.dwHighDateTime=0x1ca0444, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0090.197] FindNextFileW (in: hFindFile=0x381ec0, lpFindFileData=0x31e404 | out: lpFindFileData=0x31e404*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0x80020c30, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x80020c30, ftLastAccessTime.dwHighDateTime=0x1ca0444, ftLastWriteTime.dwLowDateTime=0x80020c30, ftLastWriteTime.dwHighDateTime=0x1ca0444, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 0 [0090.197] FindClose (in: hFindFile=0x381ec0 | out: hFindFile=0x381ec0) returned 1 [0090.197] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e68c) returned 1 [0090.197] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e698) returned 1 [0090.197] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e744) returned 1 [0090.197] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Windows\\GameExplorer", nBufferLength=0x105, lpBuffer=0x31e24c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Microsoft\\Windows\\GameExplorer", lpFilePart=0x0) returned 0x31 [0090.197] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Windows\\GameExplorer\\", nBufferLength=0x105, lpBuffer=0x31e220, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Microsoft\\Windows\\GameExplorer\\", lpFilePart=0x0) returned 0x32 [0090.198] FindFirstFileW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Windows\\GameExplorer\\*", lpFindFileData=0x31e46c | out: lpFindFileData=0x31e46c*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xfd9dbcac, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd9dbcac, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xaeea3462, ftLastWriteTime.dwHighDateTime=0x1ca042b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x381ec0 [0090.198] FindNextFileW (in: hFindFile=0x381ec0, lpFindFileData=0x31e47c | out: lpFindFileData=0x31e47c*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xfd9dbcac, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd9dbcac, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xaeea3462, ftLastWriteTime.dwHighDateTime=0x1ca042b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0090.198] FindNextFileW (in: hFindFile=0x381ec0, lpFindFileData=0x31e47c | out: lpFindFileData=0x31e47c*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xfd9dbcac, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd9dbcac, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xaeea3462, ftLastWriteTime.dwHighDateTime=0x1ca042b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 0 [0090.198] FindClose (in: hFindFile=0x381ec0 | out: hFindFile=0x381ec0) returned 1 [0090.198] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e704) returned 1 [0090.198] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e710) returned 1 [0090.198] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e744) returned 1 [0090.198] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Windows\\GameExplorer", nBufferLength=0x105, lpBuffer=0x31e24c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Microsoft\\Windows\\GameExplorer", lpFilePart=0x0) returned 0x31 [0090.198] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Windows\\GameExplorer\\", nBufferLength=0x105, lpBuffer=0x31e220, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Microsoft\\Windows\\GameExplorer\\", lpFilePart=0x0) returned 0x32 [0090.198] FindFirstFileW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Windows\\GameExplorer\\*", lpFindFileData=0x31e46c | out: lpFindFileData=0x31e46c*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xfd9dbcac, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd9dbcac, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xaeea3462, ftLastWriteTime.dwHighDateTime=0x1ca042b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x381ec0 [0090.199] FindNextFileW (in: hFindFile=0x381ec0, lpFindFileData=0x31e47c | out: lpFindFileData=0x31e47c*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xfd9dbcac, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd9dbcac, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xaeea3462, ftLastWriteTime.dwHighDateTime=0x1ca042b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0090.199] FindNextFileW (in: hFindFile=0x381ec0, lpFindFileData=0x31e47c | out: lpFindFileData=0x31e47c*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xfd9dbcac, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd9dbcac, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xaeea3462, ftLastWriteTime.dwHighDateTime=0x1ca042b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 0 [0090.199] FindClose (in: hFindFile=0x381ec0 | out: hFindFile=0x381ec0) returned 1 [0090.199] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e704) returned 1 [0090.199] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e710) returned 1 [0090.199] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e744) returned 1 [0090.199] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Windows\\Power Efficiency Diagnostics", nBufferLength=0x105, lpBuffer=0x31e24c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Microsoft\\Windows\\Power Efficiency Diagnostics", lpFilePart=0x0) returned 0x41 [0090.199] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Windows\\Power Efficiency Diagnostics\\", nBufferLength=0x105, lpBuffer=0x31e220, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Microsoft\\Windows\\Power Efficiency Diagnostics\\", lpFilePart=0x0) returned 0x42 [0090.199] FindFirstFileW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Windows\\Power Efficiency Diagnostics\\*", lpFindFileData=0x31e46c | out: lpFindFileData=0x31e46c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd9dbcac, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x80e53620, ftLastAccessTime.dwHighDateTime=0x1d305f5, ftLastWriteTime.dwLowDateTime=0x80e53620, ftLastWriteTime.dwHighDateTime=0x1d305f5, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x381ec0 [0090.200] FindNextFileW (in: hFindFile=0x381ec0, lpFindFileData=0x31e47c | out: lpFindFileData=0x31e47c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd9dbcac, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x80e53620, ftLastAccessTime.dwHighDateTime=0x1d305f5, ftLastWriteTime.dwLowDateTime=0x80e53620, ftLastWriteTime.dwHighDateTime=0x1d305f5, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0090.200] FindNextFileW (in: hFindFile=0x381ec0, lpFindFileData=0x31e47c | out: lpFindFileData=0x31e47c*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xb4a5dfc0, ftCreationTime.dwHighDateTime=0x1d2faf9, ftLastAccessTime.dwLowDateTime=0xb4a5dfc0, ftLastAccessTime.dwHighDateTime=0x1d2faf9, ftLastWriteTime.dwLowDateTime=0x7f828940, ftLastWriteTime.dwHighDateTime=0x1d305f5, nFileSizeHigh=0x0, nFileSizeLow=0x2b0000, dwReserved0=0x0, dwReserved1=0x0, cFileName="energy-ntkl.etl", cAlternateFileName="ENERGY~2.ETL")) returned 1 [0090.200] FindNextFileW (in: hFindFile=0x381ec0, lpFindFileData=0x31e47c | out: lpFindFileData=0x31e47c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd9bd2ca0, ftCreationTime.dwHighDateTime=0x1d2faf9, ftLastAccessTime.dwLowDateTime=0xd9bd2ca0, ftLastAccessTime.dwHighDateTime=0x1d2faf9, ftLastWriteTime.dwLowDateTime=0x89a9a20, ftLastWriteTime.dwHighDateTime=0x1d6eb7f, nFileSizeHigh=0x0, nFileSizeLow=0x7130, dwReserved0=0x0, dwReserved1=0x0, cFileName="energy-report-2017-07-12.xml", cAlternateFileName="ENERGY~2.XML")) returned 1 [0090.200] FindNextFileW (in: hFindFile=0x381ec0, lpFindFileData=0x31e47c | out: lpFindFileData=0x31e47c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x80e53620, ftCreationTime.dwHighDateTime=0x1d305f5, ftLastAccessTime.dwLowDateTime=0x80e53620, ftLastAccessTime.dwHighDateTime=0x1d305f5, ftLastWriteTime.dwLowDateTime=0x89cfb80, ftLastWriteTime.dwHighDateTime=0x1d6eb7f, nFileSizeHigh=0x0, nFileSizeLow=0x5610, dwReserved0=0x0, dwReserved1=0x0, cFileName="energy-report-2017-07-26.xml", cAlternateFileName="ENERGY~3.XML")) returned 1 [0090.200] FindNextFileW (in: hFindFile=0x381ec0, lpFindFileData=0x31e47c | out: lpFindFileData=0x31e47c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd9b145c0, ftCreationTime.dwHighDateTime=0x1d2faf9, ftLastAccessTime.dwLowDateTime=0xd9b145c0, ftLastAccessTime.dwHighDateTime=0x1d2faf9, ftLastWriteTime.dwLowDateTime=0x8a1be40, ftLastWriteTime.dwHighDateTime=0x1d6eb7f, nFileSizeHigh=0x0, nFileSizeLow=0x5610, dwReserved0=0x0, dwReserved1=0x0, cFileName="energy-report-latest.xml", cAlternateFileName="ENERGY~1.XML")) returned 1 [0090.200] FindNextFileW (in: hFindFile=0x381ec0, lpFindFileData=0x31e47c | out: lpFindFileData=0x31e47c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd9c91380, ftCreationTime.dwHighDateTime=0x1d2faf9, ftLastAccessTime.dwLowDateTime=0xd9c91380, ftLastAccessTime.dwHighDateTime=0x1d2faf9, ftLastWriteTime.dwLowDateTime=0x8a41fa0, ftLastWriteTime.dwHighDateTime=0x1d6eb7f, nFileSizeHigh=0x0, nFileSizeLow=0x4200, dwReserved0=0x0, dwReserved1=0x0, cFileName="energy-report.html", cAlternateFileName="ENERGY~1.HTM")) returned 1 [0090.200] FindNextFileW (in: hFindFile=0x381ec0, lpFindFileData=0x31e47c | out: lpFindFileData=0x31e47c*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xb4a5dfc0, ftCreationTime.dwHighDateTime=0x1d2faf9, ftLastAccessTime.dwLowDateTime=0xb4a5dfc0, ftLastAccessTime.dwHighDateTime=0x1d2faf9, ftLastWriteTime.dwLowDateTime=0x7f8c0ec0, ftLastWriteTime.dwHighDateTime=0x1d305f5, nFileSizeHigh=0x0, nFileSizeLow=0x20000, dwReserved0=0x0, dwReserved1=0x0, cFileName="energy-trace.etl", cAlternateFileName="ENERGY~1.ETL")) returned 1 [0090.200] FindNextFileW (in: hFindFile=0x381ec0, lpFindFileData=0x31e47c | out: lpFindFileData=0x31e47c*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0090.201] FindClose (in: hFindFile=0x381ec0 | out: hFindFile=0x381ec0) returned 1 [0090.201] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e704) returned 1 [0090.201] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e710) returned 1 [0090.201] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e744) returned 1 [0090.201] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Windows\\Power Efficiency Diagnostics", nBufferLength=0x105, lpBuffer=0x31e24c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Microsoft\\Windows\\Power Efficiency Diagnostics", lpFilePart=0x0) returned 0x41 [0090.201] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Windows\\Power Efficiency Diagnostics\\", nBufferLength=0x105, lpBuffer=0x31e220, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Microsoft\\Windows\\Power Efficiency Diagnostics\\", lpFilePart=0x0) returned 0x42 [0090.201] FindFirstFileW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Windows\\Power Efficiency Diagnostics\\*", lpFindFileData=0x31e46c | out: lpFindFileData=0x31e46c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd9dbcac, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x80e53620, ftLastAccessTime.dwHighDateTime=0x1d305f5, ftLastWriteTime.dwLowDateTime=0x80e53620, ftLastWriteTime.dwHighDateTime=0x1d305f5, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x381ec0 [0090.201] FindNextFileW (in: hFindFile=0x381ec0, lpFindFileData=0x31e47c | out: lpFindFileData=0x31e47c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd9dbcac, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x80e53620, ftLastAccessTime.dwHighDateTime=0x1d305f5, ftLastWriteTime.dwLowDateTime=0x80e53620, ftLastWriteTime.dwHighDateTime=0x1d305f5, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0090.201] FindNextFileW (in: hFindFile=0x381ec0, lpFindFileData=0x31e47c | out: lpFindFileData=0x31e47c*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xb4a5dfc0, ftCreationTime.dwHighDateTime=0x1d2faf9, ftLastAccessTime.dwLowDateTime=0xb4a5dfc0, ftLastAccessTime.dwHighDateTime=0x1d2faf9, ftLastWriteTime.dwLowDateTime=0x7f828940, ftLastWriteTime.dwHighDateTime=0x1d305f5, nFileSizeHigh=0x0, nFileSizeLow=0x2b0000, dwReserved0=0x0, dwReserved1=0x0, cFileName="energy-ntkl.etl", cAlternateFileName="ENERGY~2.ETL")) returned 1 [0090.201] FindNextFileW (in: hFindFile=0x381ec0, lpFindFileData=0x31e47c | out: lpFindFileData=0x31e47c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd9bd2ca0, ftCreationTime.dwHighDateTime=0x1d2faf9, ftLastAccessTime.dwLowDateTime=0xd9bd2ca0, ftLastAccessTime.dwHighDateTime=0x1d2faf9, ftLastWriteTime.dwLowDateTime=0x89a9a20, ftLastWriteTime.dwHighDateTime=0x1d6eb7f, nFileSizeHigh=0x0, nFileSizeLow=0x7130, dwReserved0=0x0, dwReserved1=0x0, cFileName="energy-report-2017-07-12.xml", cAlternateFileName="ENERGY~2.XML")) returned 1 [0090.202] FindNextFileW (in: hFindFile=0x381ec0, lpFindFileData=0x31e47c | out: lpFindFileData=0x31e47c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x80e53620, ftCreationTime.dwHighDateTime=0x1d305f5, ftLastAccessTime.dwLowDateTime=0x80e53620, ftLastAccessTime.dwHighDateTime=0x1d305f5, ftLastWriteTime.dwLowDateTime=0x89cfb80, ftLastWriteTime.dwHighDateTime=0x1d6eb7f, nFileSizeHigh=0x0, nFileSizeLow=0x5610, dwReserved0=0x0, dwReserved1=0x0, cFileName="energy-report-2017-07-26.xml", cAlternateFileName="ENERGY~3.XML")) returned 1 [0090.202] FindNextFileW (in: hFindFile=0x381ec0, lpFindFileData=0x31e47c | out: lpFindFileData=0x31e47c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd9b145c0, ftCreationTime.dwHighDateTime=0x1d2faf9, ftLastAccessTime.dwLowDateTime=0xd9b145c0, ftLastAccessTime.dwHighDateTime=0x1d2faf9, ftLastWriteTime.dwLowDateTime=0x8a1be40, ftLastWriteTime.dwHighDateTime=0x1d6eb7f, nFileSizeHigh=0x0, nFileSizeLow=0x5610, dwReserved0=0x0, dwReserved1=0x0, cFileName="energy-report-latest.xml", cAlternateFileName="ENERGY~1.XML")) returned 1 [0090.202] FindNextFileW (in: hFindFile=0x381ec0, lpFindFileData=0x31e47c | out: lpFindFileData=0x31e47c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd9c91380, ftCreationTime.dwHighDateTime=0x1d2faf9, ftLastAccessTime.dwLowDateTime=0xd9c91380, ftLastAccessTime.dwHighDateTime=0x1d2faf9, ftLastWriteTime.dwLowDateTime=0x8a41fa0, ftLastWriteTime.dwHighDateTime=0x1d6eb7f, nFileSizeHigh=0x0, nFileSizeLow=0x4200, dwReserved0=0x0, dwReserved1=0x0, cFileName="energy-report.html", cAlternateFileName="ENERGY~1.HTM")) returned 1 [0090.202] FindNextFileW (in: hFindFile=0x381ec0, lpFindFileData=0x31e47c | out: lpFindFileData=0x31e47c*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xb4a5dfc0, ftCreationTime.dwHighDateTime=0x1d2faf9, ftLastAccessTime.dwLowDateTime=0xb4a5dfc0, ftLastAccessTime.dwHighDateTime=0x1d2faf9, ftLastWriteTime.dwLowDateTime=0x7f8c0ec0, ftLastWriteTime.dwHighDateTime=0x1d305f5, nFileSizeHigh=0x0, nFileSizeLow=0x20000, dwReserved0=0x0, dwReserved1=0x0, cFileName="energy-trace.etl", cAlternateFileName="ENERGY~1.ETL")) returned 1 [0090.202] FindNextFileW (in: hFindFile=0x381ec0, lpFindFileData=0x31e47c | out: lpFindFileData=0x31e47c*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xb4a5dfc0, ftCreationTime.dwHighDateTime=0x1d2faf9, ftLastAccessTime.dwLowDateTime=0xb4a5dfc0, ftLastAccessTime.dwHighDateTime=0x1d2faf9, ftLastWriteTime.dwLowDateTime=0x7f8c0ec0, ftLastWriteTime.dwHighDateTime=0x1d305f5, nFileSizeHigh=0x0, nFileSizeLow=0x20000, dwReserved0=0x0, dwReserved1=0x0, cFileName="energy-trace.etl", cAlternateFileName="ENERGY~1.ETL")) returned 0 [0090.202] FindClose (in: hFindFile=0x381ec0 | out: hFindFile=0x381ec0) returned 1 [0090.202] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e704) returned 1 [0090.202] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e710) returned 1 [0090.202] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Windows\\Power Efficiency Diagnostics\\energy-report-2017-07-12.xml", nBufferLength=0x105, lpBuffer=0x31e11c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Microsoft\\Windows\\Power Efficiency Diagnostics\\energy-report-2017-07-12.xml", lpFilePart=0x0) returned 0x5e [0090.202] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e610) returned 1 [0090.202] CreateFileW (lpFileName="C:\\Users\\All Users\\Microsoft\\Windows\\Power Efficiency Diagnostics\\energy-report-2017-07-12.xml" (normalized: "c:\\users\\all users\\microsoft\\windows\\power efficiency diagnostics\\energy-report-2017-07-12.xml"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x178 [0090.203] GetFileType (hFile=0x178) returned 0x1 [0090.203] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e60c) returned 1 [0090.203] GetFileType (hFile=0x178) returned 0x1 [0090.203] GetFileSize (in: hFile=0x178, lpFileSizeHigh=0x31e718 | out: lpFileSizeHigh=0x31e718*=0x0) returned 0x7130 [0090.203] ReadFile (in: hFile=0x178, lpBuffer=0x2849ab8, nNumberOfBytesToRead=0x7130, lpNumberOfBytesRead=0x31e6c4, lpOverlapped=0x0 | out: lpBuffer=0x2849ab8*, lpNumberOfBytesRead=0x31e6c4*=0x7130, lpOverlapped=0x0) returned 1 [0090.204] CloseHandle (hObject=0x178) returned 1 [0090.246] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Windows\\Power Efficiency Diagnostics\\energy-report-2017-07-12.xml", nBufferLength=0x105, lpBuffer=0x31e108, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Microsoft\\Windows\\Power Efficiency Diagnostics\\energy-report-2017-07-12.xml", lpFilePart=0x0) returned 0x5e [0090.246] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e5fc) returned 1 [0090.246] CreateFileW (lpFileName="C:\\Users\\All Users\\Microsoft\\Windows\\Power Efficiency Diagnostics\\energy-report-2017-07-12.xml" (normalized: "c:\\users\\all users\\microsoft\\windows\\power efficiency diagnostics\\energy-report-2017-07-12.xml"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x178 [0090.247] GetFileType (hFile=0x178) returned 0x1 [0090.247] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e5f8) returned 1 [0090.247] GetFileType (hFile=0x178) returned 0x1 [0090.247] WriteFile (in: hFile=0x178, lpBuffer=0x269b4f8*, nNumberOfBytesToWrite=0x7140, lpNumberOfBytesWritten=0x31e6b8, lpOverlapped=0x0 | out: lpBuffer=0x269b4f8*, lpNumberOfBytesWritten=0x31e6b8*=0x7140, lpOverlapped=0x0) returned 1 [0090.248] CloseHandle (hObject=0x178) returned 1 [0090.249] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Windows\\Power Efficiency Diagnostics\\energy-report-2017-07-12.xml", nBufferLength=0x105, lpBuffer=0x31e23c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Microsoft\\Windows\\Power Efficiency Diagnostics\\energy-report-2017-07-12.xml", lpFilePart=0x0) returned 0x5e [0090.249] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Windows\\Power Efficiency Diagnostics\\energy-report-2017-07-12.xml", nBufferLength=0x105, lpBuffer=0x31e23c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Microsoft\\Windows\\Power Efficiency Diagnostics\\energy-report-2017-07-12.xml", lpFilePart=0x0) returned 0x5e [0090.249] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e69c) returned 1 [0090.249] GetFileAttributesExW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Windows\\Power Efficiency Diagnostics\\energy-report-2017-07-12.xml" (normalized: "c:\\users\\all users\\microsoft\\windows\\power efficiency diagnostics\\energy-report-2017-07-12.xml"), fInfoLevelId=0x0, lpFileInformation=0x31e718 | out: lpFileInformation=0x31e718*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd9bd2ca0, ftCreationTime.dwHighDateTime=0x1d2faf9, ftLastAccessTime.dwLowDateTime=0xd9bd2ca0, ftLastAccessTime.dwHighDateTime=0x1d2faf9, ftLastWriteTime.dwLowDateTime=0x193d1600, ftLastWriteTime.dwHighDateTime=0x1d6eb7f, nFileSizeHigh=0x0, nFileSizeLow=0x7140)) returned 1 [0090.249] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e698) returned 1 [0090.249] MoveFileW (lpExistingFileName="C:\\Users\\All Users\\Microsoft\\Windows\\Power Efficiency Diagnostics\\energy-report-2017-07-12.xml" (normalized: "c:\\users\\all users\\microsoft\\windows\\power efficiency diagnostics\\energy-report-2017-07-12.xml"), lpNewFileName="C:\\Users\\All Users\\Microsoft\\Windows\\Power Efficiency Diagnostics\\energy-report-2017-07-12.xml" (normalized: "c:\\users\\all users\\microsoft\\windows\\power efficiency diagnostics\\energy-report-2017-07-12.xml")) returned 1 [0090.249] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Windows\\Power Efficiency Diagnostics\\energy-report-2017-07-26.xml", nBufferLength=0x105, lpBuffer=0x31e11c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Microsoft\\Windows\\Power Efficiency Diagnostics\\energy-report-2017-07-26.xml", lpFilePart=0x0) returned 0x5e [0090.249] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e610) returned 1 [0090.249] CreateFileW (lpFileName="C:\\Users\\All Users\\Microsoft\\Windows\\Power Efficiency Diagnostics\\energy-report-2017-07-26.xml" (normalized: "c:\\users\\all users\\microsoft\\windows\\power efficiency diagnostics\\energy-report-2017-07-26.xml"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x178 [0090.250] GetFileType (hFile=0x178) returned 0x1 [0090.250] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e60c) returned 1 [0090.250] GetFileType (hFile=0x178) returned 0x1 [0090.250] GetFileSize (in: hFile=0x178, lpFileSizeHigh=0x31e718 | out: lpFileSizeHigh=0x31e718*=0x0) returned 0x5610 [0090.250] ReadFile (in: hFile=0x178, lpBuffer=0x26a2ad4, nNumberOfBytesToRead=0x5610, lpNumberOfBytesRead=0x31e6c4, lpOverlapped=0x0 | out: lpBuffer=0x26a2ad4*, lpNumberOfBytesRead=0x31e6c4*=0x5610, lpOverlapped=0x0) returned 1 [0090.250] CloseHandle (hObject=0x178) returned 1 [0090.279] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Windows\\Power Efficiency Diagnostics\\energy-report-2017-07-26.xml", nBufferLength=0x105, lpBuffer=0x31e108, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Microsoft\\Windows\\Power Efficiency Diagnostics\\energy-report-2017-07-26.xml", lpFilePart=0x0) returned 0x5e [0090.279] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e5fc) returned 1 [0090.279] CreateFileW (lpFileName="C:\\Users\\All Users\\Microsoft\\Windows\\Power Efficiency Diagnostics\\energy-report-2017-07-26.xml" (normalized: "c:\\users\\all users\\microsoft\\windows\\power efficiency diagnostics\\energy-report-2017-07-26.xml"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x178 [0090.280] GetFileType (hFile=0x178) returned 0x1 [0090.280] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e5f8) returned 1 [0090.280] GetFileType (hFile=0x178) returned 0x1 [0090.280] WriteFile (in: hFile=0x178, lpBuffer=0x270a8b4*, nNumberOfBytesToWrite=0x5620, lpNumberOfBytesWritten=0x31e6b8, lpOverlapped=0x0 | out: lpBuffer=0x270a8b4*, lpNumberOfBytesWritten=0x31e6b8*=0x5620, lpOverlapped=0x0) returned 1 [0090.281] CloseHandle (hObject=0x178) returned 1 [0090.281] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Windows\\Power Efficiency Diagnostics\\energy-report-2017-07-26.xml", nBufferLength=0x105, lpBuffer=0x31e23c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Microsoft\\Windows\\Power Efficiency Diagnostics\\energy-report-2017-07-26.xml", lpFilePart=0x0) returned 0x5e [0090.281] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Windows\\Power Efficiency Diagnostics\\energy-report-2017-07-26.xml", nBufferLength=0x105, lpBuffer=0x31e23c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Microsoft\\Windows\\Power Efficiency Diagnostics\\energy-report-2017-07-26.xml", lpFilePart=0x0) returned 0x5e [0090.281] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e69c) returned 1 [0090.281] GetFileAttributesExW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Windows\\Power Efficiency Diagnostics\\energy-report-2017-07-26.xml" (normalized: "c:\\users\\all users\\microsoft\\windows\\power efficiency diagnostics\\energy-report-2017-07-26.xml"), fInfoLevelId=0x0, lpFileInformation=0x31e718 | out: lpFileInformation=0x31e718*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x80e53620, ftCreationTime.dwHighDateTime=0x1d305f5, ftLastAccessTime.dwLowDateTime=0x80e53620, ftLastAccessTime.dwHighDateTime=0x1d305f5, ftLastWriteTime.dwLowDateTime=0x1941d8c0, ftLastWriteTime.dwHighDateTime=0x1d6eb7f, nFileSizeHigh=0x0, nFileSizeLow=0x5620)) returned 1 [0090.281] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e698) returned 1 [0090.281] MoveFileW (lpExistingFileName="C:\\Users\\All Users\\Microsoft\\Windows\\Power Efficiency Diagnostics\\energy-report-2017-07-26.xml" (normalized: "c:\\users\\all users\\microsoft\\windows\\power efficiency diagnostics\\energy-report-2017-07-26.xml"), lpNewFileName="C:\\Users\\All Users\\Microsoft\\Windows\\Power Efficiency Diagnostics\\energy-report-2017-07-26.xml" (normalized: "c:\\users\\all users\\microsoft\\windows\\power efficiency diagnostics\\energy-report-2017-07-26.xml")) returned 1 [0090.282] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Windows\\Power Efficiency Diagnostics\\energy-report-latest.xml", nBufferLength=0x105, lpBuffer=0x31e11c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Microsoft\\Windows\\Power Efficiency Diagnostics\\energy-report-latest.xml", lpFilePart=0x0) returned 0x5a [0090.282] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e610) returned 1 [0090.282] CreateFileW (lpFileName="C:\\Users\\All Users\\Microsoft\\Windows\\Power Efficiency Diagnostics\\energy-report-latest.xml" (normalized: "c:\\users\\all users\\microsoft\\windows\\power efficiency diagnostics\\energy-report-latest.xml"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x178 [0090.282] GetFileType (hFile=0x178) returned 0x1 [0090.282] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e60c) returned 1 [0090.282] GetFileType (hFile=0x178) returned 0x1 [0090.282] GetFileSize (in: hFile=0x178, lpFileSizeHigh=0x31e718 | out: lpFileSizeHigh=0x31e718*=0x0) returned 0x5610 [0090.282] ReadFile (in: hFile=0x178, lpBuffer=0x2710360, nNumberOfBytesToRead=0x5610, lpNumberOfBytesRead=0x31e6c4, lpOverlapped=0x0 | out: lpBuffer=0x2710360*, lpNumberOfBytesRead=0x31e6c4*=0x5610, lpOverlapped=0x0) returned 1 [0090.283] CloseHandle (hObject=0x178) returned 1 [0090.298] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Windows\\Power Efficiency Diagnostics\\energy-report-latest.xml", nBufferLength=0x105, lpBuffer=0x31e108, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Microsoft\\Windows\\Power Efficiency Diagnostics\\energy-report-latest.xml", lpFilePart=0x0) returned 0x5a [0090.298] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e5fc) returned 1 [0090.298] CreateFileW (lpFileName="C:\\Users\\All Users\\Microsoft\\Windows\\Power Efficiency Diagnostics\\energy-report-latest.xml" (normalized: "c:\\users\\all users\\microsoft\\windows\\power efficiency diagnostics\\energy-report-latest.xml"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x178 [0090.299] GetFileType (hFile=0x178) returned 0x1 [0090.299] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e5f8) returned 1 [0090.299] GetFileType (hFile=0x178) returned 0x1 [0090.299] WriteFile (in: hFile=0x178, lpBuffer=0x2777fe4*, nNumberOfBytesToWrite=0x5620, lpNumberOfBytesWritten=0x31e6b8, lpOverlapped=0x0 | out: lpBuffer=0x2777fe4*, lpNumberOfBytesWritten=0x31e6b8*=0x5620, lpOverlapped=0x0) returned 1 [0090.300] CloseHandle (hObject=0x178) returned 1 [0090.300] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Windows\\Power Efficiency Diagnostics\\energy-report-latest.xml", nBufferLength=0x105, lpBuffer=0x31e23c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Microsoft\\Windows\\Power Efficiency Diagnostics\\energy-report-latest.xml", lpFilePart=0x0) returned 0x5a [0090.300] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Windows\\Power Efficiency Diagnostics\\energy-report-latest.xml", nBufferLength=0x105, lpBuffer=0x31e23c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Microsoft\\Windows\\Power Efficiency Diagnostics\\energy-report-latest.xml", lpFilePart=0x0) returned 0x5a [0090.300] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e69c) returned 1 [0090.300] GetFileAttributesExW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Windows\\Power Efficiency Diagnostics\\energy-report-latest.xml" (normalized: "c:\\users\\all users\\microsoft\\windows\\power efficiency diagnostics\\energy-report-latest.xml"), fInfoLevelId=0x0, lpFileInformation=0x31e718 | out: lpFileInformation=0x31e718*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd9b145c0, ftCreationTime.dwHighDateTime=0x1d2faf9, ftLastAccessTime.dwLowDateTime=0xd9b145c0, ftLastAccessTime.dwHighDateTime=0x1d2faf9, ftLastWriteTime.dwLowDateTime=0x19443a20, ftLastWriteTime.dwHighDateTime=0x1d6eb7f, nFileSizeHigh=0x0, nFileSizeLow=0x5620)) returned 1 [0090.300] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e698) returned 1 [0090.300] MoveFileW (lpExistingFileName="C:\\Users\\All Users\\Microsoft\\Windows\\Power Efficiency Diagnostics\\energy-report-latest.xml" (normalized: "c:\\users\\all users\\microsoft\\windows\\power efficiency diagnostics\\energy-report-latest.xml"), lpNewFileName="C:\\Users\\All Users\\Microsoft\\Windows\\Power Efficiency Diagnostics\\energy-report-latest.xml" (normalized: "c:\\users\\all users\\microsoft\\windows\\power efficiency diagnostics\\energy-report-latest.xml")) returned 1 [0090.301] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Windows\\Power Efficiency Diagnostics\\energy-report.html", nBufferLength=0x105, lpBuffer=0x31e11c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Microsoft\\Windows\\Power Efficiency Diagnostics\\energy-report.html", lpFilePart=0x0) returned 0x54 [0090.301] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e610) returned 1 [0090.301] CreateFileW (lpFileName="C:\\Users\\All Users\\Microsoft\\Windows\\Power Efficiency Diagnostics\\energy-report.html" (normalized: "c:\\users\\all users\\microsoft\\windows\\power efficiency diagnostics\\energy-report.html"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x178 [0090.301] GetFileType (hFile=0x178) returned 0x1 [0090.301] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e60c) returned 1 [0090.301] GetFileType (hFile=0x178) returned 0x1 [0090.301] GetFileSize (in: hFile=0x178, lpFileSizeHigh=0x31e718 | out: lpFileSizeHigh=0x31e718*=0x0) returned 0x4200 [0090.301] ReadFile (in: hFile=0x178, lpBuffer=0x277da58, nNumberOfBytesToRead=0x4200, lpNumberOfBytesRead=0x31e6c4, lpOverlapped=0x0 | out: lpBuffer=0x277da58*, lpNumberOfBytesRead=0x31e6c4*=0x4200, lpOverlapped=0x0) returned 1 [0090.302] CloseHandle (hObject=0x178) returned 1 [0090.315] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Windows\\Power Efficiency Diagnostics\\energy-report.html", nBufferLength=0x105, lpBuffer=0x31e108, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Microsoft\\Windows\\Power Efficiency Diagnostics\\energy-report.html", lpFilePart=0x0) returned 0x54 [0090.315] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e5fc) returned 1 [0090.315] CreateFileW (lpFileName="C:\\Users\\All Users\\Microsoft\\Windows\\Power Efficiency Diagnostics\\energy-report.html" (normalized: "c:\\users\\all users\\microsoft\\windows\\power efficiency diagnostics\\energy-report.html"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x178 [0090.316] GetFileType (hFile=0x178) returned 0x1 [0090.316] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e5f8) returned 1 [0090.316] GetFileType (hFile=0x178) returned 0x1 [0090.316] WriteFile (in: hFile=0x178, lpBuffer=0x27df28c*, nNumberOfBytesToWrite=0x4210, lpNumberOfBytesWritten=0x31e6b8, lpOverlapped=0x0 | out: lpBuffer=0x27df28c*, lpNumberOfBytesWritten=0x31e6b8*=0x4210, lpOverlapped=0x0) returned 1 [0090.317] CloseHandle (hObject=0x178) returned 1 [0090.318] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Windows\\Power Efficiency Diagnostics\\energy-report.html", nBufferLength=0x105, lpBuffer=0x31e23c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Microsoft\\Windows\\Power Efficiency Diagnostics\\energy-report.html", lpFilePart=0x0) returned 0x54 [0090.318] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Windows\\Power Efficiency Diagnostics\\energy-report.html", nBufferLength=0x105, lpBuffer=0x31e23c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Microsoft\\Windows\\Power Efficiency Diagnostics\\energy-report.html", lpFilePart=0x0) returned 0x54 [0090.318] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e69c) returned 1 [0090.318] GetFileAttributesExW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Windows\\Power Efficiency Diagnostics\\energy-report.html" (normalized: "c:\\users\\all users\\microsoft\\windows\\power efficiency diagnostics\\energy-report.html"), fInfoLevelId=0x0, lpFileInformation=0x31e718 | out: lpFileInformation=0x31e718*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd9c91380, ftCreationTime.dwHighDateTime=0x1d2faf9, ftLastAccessTime.dwLowDateTime=0xd9c91380, ftLastAccessTime.dwHighDateTime=0x1d2faf9, ftLastWriteTime.dwLowDateTime=0x19469b80, ftLastWriteTime.dwHighDateTime=0x1d6eb7f, nFileSizeHigh=0x0, nFileSizeLow=0x4210)) returned 1 [0090.318] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e698) returned 1 [0090.318] MoveFileW (lpExistingFileName="C:\\Users\\All Users\\Microsoft\\Windows\\Power Efficiency Diagnostics\\energy-report.html" (normalized: "c:\\users\\all users\\microsoft\\windows\\power efficiency diagnostics\\energy-report.html"), lpNewFileName="C:\\Users\\All Users\\Microsoft\\Windows\\Power Efficiency Diagnostics\\energy-report.html" (normalized: "c:\\users\\all users\\microsoft\\windows\\power efficiency diagnostics\\energy-report.html")) returned 1 [0090.318] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e744) returned 1 [0090.318] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Windows\\Ringtones", nBufferLength=0x105, lpBuffer=0x31e24c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Microsoft\\Windows\\Ringtones", lpFilePart=0x0) returned 0x2e [0090.318] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Windows\\Ringtones\\", nBufferLength=0x105, lpBuffer=0x31e220, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Microsoft\\Windows\\Ringtones\\", lpFilePart=0x0) returned 0x2f [0090.318] FindFirstFileW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Windows\\Ringtones\\*", lpFindFileData=0x31e46c | out: lpFindFileData=0x31e46c*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x7fffaad0, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x8038cbd7, ftLastAccessTime.dwHighDateTime=0x1ca0444, ftLastWriteTime.dwLowDateTime=0x8038cbd7, ftLastWriteTime.dwHighDateTime=0x1ca0444, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x381b40 [0090.319] FindNextFileW (in: hFindFile=0x381b40, lpFindFileData=0x31e47c | out: lpFindFileData=0x31e47c*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x7fffaad0, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x8038cbd7, ftLastAccessTime.dwHighDateTime=0x1ca0444, ftLastWriteTime.dwLowDateTime=0x8038cbd7, ftLastWriteTime.dwHighDateTime=0x1ca0444, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0090.319] FindNextFileW (in: hFindFile=0x381b40, lpFindFileData=0x31e47c | out: lpFindFileData=0x31e47c*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0x8038cbd7, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x7bed1018, ftLastAccessTime.dwHighDateTime=0x1ca0444, ftLastWriteTime.dwLowDateTime=0x7bed1018, ftLastWriteTime.dwHighDateTime=0x1ca0444, nFileSizeHigh=0x0, nFileSizeLow=0x264, dwReserved0=0x0, dwReserved1=0x0, cFileName="desktop.ini", cAlternateFileName="")) returned 1 [0090.319] FindNextFileW (in: hFindFile=0x381b40, lpFindFileData=0x31e47c | out: lpFindFileData=0x31e47c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x80366a76, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x7bed1018, ftLastAccessTime.dwHighDateTime=0x1ca0444, ftLastWriteTime.dwLowDateTime=0x8a8e260, ftLastWriteTime.dwHighDateTime=0x1d6eb7f, nFileSizeHigh=0x0, nFileSizeLow=0x31470, dwReserved0=0x0, dwReserved1=0x0, cFileName="Ringtone 01.wma", cAlternateFileName="RINGTO~3.WMA")) returned 1 [0090.319] FindNextFileW (in: hFindFile=0x381b40, lpFindFileData=0x31e47c | out: lpFindFileData=0x31e47c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8038cbd7, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x7bed1018, ftLastAccessTime.dwHighDateTime=0x1ca0444, ftLastWriteTime.dwLowDateTime=0x8ada520, ftLastWriteTime.dwHighDateTime=0x1d6eb7f, nFileSizeHigh=0x0, nFileSizeLow=0x21fc0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Ringtone 02.wma", cAlternateFileName="RI5404~1.WMA")) returned 1 [0090.319] FindNextFileW (in: hFindFile=0x381b40, lpFindFileData=0x31e47c | out: lpFindFileData=0x31e47c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8038cbd7, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x7bed1018, ftLastAccessTime.dwHighDateTime=0x1ca0444, ftLastWriteTime.dwLowDateTime=0x8b00680, ftLastWriteTime.dwHighDateTime=0x1d6eb7f, nFileSizeHigh=0x0, nFileSizeLow=0x17100, dwReserved0=0x0, dwReserved1=0x0, cFileName="Ringtone 03.wma", cAlternateFileName="RI0FCF~1.WMA")) returned 1 [0090.319] FindNextFileW (in: hFindFile=0x381b40, lpFindFileData=0x31e47c | out: lpFindFileData=0x31e47c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x80366a76, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x7bed1018, ftLastAccessTime.dwHighDateTime=0x1ca0444, ftLastWriteTime.dwLowDateTime=0x8b98c00, ftLastWriteTime.dwHighDateTime=0x1d6eb7f, nFileSizeHigh=0x0, nFileSizeLow=0x3a040, dwReserved0=0x0, dwReserved1=0x0, cFileName="Ringtone 04.wma", cAlternateFileName="RINGTO~4.WMA")) returned 1 [0090.319] FindNextFileW (in: hFindFile=0x381b40, lpFindFileData=0x31e47c | out: lpFindFileData=0x31e47c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x80366a76, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x7bed1018, ftLastAccessTime.dwHighDateTime=0x1ca0444, ftLastWriteTime.dwLowDateTime=0x8bbed60, ftLastWriteTime.dwHighDateTime=0x1d6eb7f, nFileSizeHigh=0x0, nFileSizeLow=0x1b6f0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Ringtone 05.wma", cAlternateFileName="RINGTO~1.WMA")) returned 1 [0090.319] FindNextFileW (in: hFindFile=0x381b40, lpFindFileData=0x31e47c | out: lpFindFileData=0x31e47c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8038cbd7, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x7bed1018, ftLastAccessTime.dwHighDateTime=0x1ca0444, ftLastWriteTime.dwLowDateTime=0x8c572e0, ftLastWriteTime.dwHighDateTime=0x1d6eb7f, nFileSizeHigh=0x0, nFileSizeLow=0x17100, dwReserved0=0x0, dwReserved1=0x0, cFileName="Ringtone 06.wma", cAlternateFileName="RIF0DC~1.WMA")) returned 1 [0090.320] FindNextFileW (in: hFindFile=0x381b40, lpFindFileData=0x31e47c | out: lpFindFileData=0x31e47c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x80366a76, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x7bed1018, ftLastAccessTime.dwHighDateTime=0x1ca0444, ftLastWriteTime.dwLowDateTime=0x8ca35a0, ftLastWriteTime.dwHighDateTime=0x1d6eb7f, nFileSizeHigh=0x0, nFileSizeLow=0x17100, dwReserved0=0x0, dwReserved1=0x0, cFileName="Ringtone 07.wma", cAlternateFileName="RID564~1.WMA")) returned 1 [0090.320] FindNextFileW (in: hFindFile=0x381b40, lpFindFileData=0x31e47c | out: lpFindFileData=0x31e47c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x80366a76, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x7bed1018, ftLastAccessTime.dwHighDateTime=0x1ca0444, ftLastWriteTime.dwLowDateTime=0x8cef860, ftLastWriteTime.dwHighDateTime=0x1d6eb7f, nFileSizeHigh=0x0, nFileSizeLow=0x21fc0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Ringtone 08.wma", cAlternateFileName="RINGTO~2.WMA")) returned 1 [0090.320] FindNextFileW (in: hFindFile=0x381b40, lpFindFileData=0x31e47c | out: lpFindFileData=0x31e47c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8038cbd7, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x7bed1018, ftLastAccessTime.dwHighDateTime=0x1ca0444, ftLastWriteTime.dwLowDateTime=0x8d3bb20, ftLastWriteTime.dwHighDateTime=0x1d6eb7f, nFileSizeHigh=0x0, nFileSizeLow=0x1b6f0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Ringtone 09.wma", cAlternateFileName="RI70DC~1.WMA")) returned 1 [0090.320] FindNextFileW (in: hFindFile=0x381b40, lpFindFileData=0x31e47c | out: lpFindFileData=0x31e47c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8038cbd7, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x7bed1018, ftLastAccessTime.dwHighDateTime=0x1ca0444, ftLastWriteTime.dwLowDateTime=0x8d61c80, ftLastWriteTime.dwHighDateTime=0x1d6eb7f, nFileSizeHigh=0x0, nFileSizeLow=0x17100, dwReserved0=0x0, dwReserved1=0x0, cFileName="Ringtone 10.wma", cAlternateFileName="RI35A2~1.WMA")) returned 1 [0090.320] FindNextFileW (in: hFindFile=0x381b40, lpFindFileData=0x31e47c | out: lpFindFileData=0x31e47c*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0090.320] FindClose (in: hFindFile=0x381b40 | out: hFindFile=0x381b40) returned 1 [0090.320] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e704) returned 1 [0090.320] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e710) returned 1 [0090.320] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e744) returned 1 [0090.320] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Windows\\Ringtones", nBufferLength=0x105, lpBuffer=0x31e24c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Microsoft\\Windows\\Ringtones", lpFilePart=0x0) returned 0x2e [0090.320] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Windows\\Ringtones\\", nBufferLength=0x105, lpBuffer=0x31e220, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Microsoft\\Windows\\Ringtones\\", lpFilePart=0x0) returned 0x2f [0090.321] FindFirstFileW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Windows\\Ringtones\\*", lpFindFileData=0x31e46c | out: lpFindFileData=0x31e46c*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x7fffaad0, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x8038cbd7, ftLastAccessTime.dwHighDateTime=0x1ca0444, ftLastWriteTime.dwLowDateTime=0x8038cbd7, ftLastWriteTime.dwHighDateTime=0x1ca0444, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x381b40 [0090.321] FindNextFileW (in: hFindFile=0x381b40, lpFindFileData=0x31e47c | out: lpFindFileData=0x31e47c*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x7fffaad0, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x8038cbd7, ftLastAccessTime.dwHighDateTime=0x1ca0444, ftLastWriteTime.dwLowDateTime=0x8038cbd7, ftLastWriteTime.dwHighDateTime=0x1ca0444, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0090.321] FindNextFileW (in: hFindFile=0x381b40, lpFindFileData=0x31e47c | out: lpFindFileData=0x31e47c*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0x8038cbd7, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x7bed1018, ftLastAccessTime.dwHighDateTime=0x1ca0444, ftLastWriteTime.dwLowDateTime=0x7bed1018, ftLastWriteTime.dwHighDateTime=0x1ca0444, nFileSizeHigh=0x0, nFileSizeLow=0x264, dwReserved0=0x0, dwReserved1=0x0, cFileName="desktop.ini", cAlternateFileName="")) returned 1 [0090.321] FindNextFileW (in: hFindFile=0x381b40, lpFindFileData=0x31e47c | out: lpFindFileData=0x31e47c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x80366a76, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x7bed1018, ftLastAccessTime.dwHighDateTime=0x1ca0444, ftLastWriteTime.dwLowDateTime=0x8a8e260, ftLastWriteTime.dwHighDateTime=0x1d6eb7f, nFileSizeHigh=0x0, nFileSizeLow=0x31470, dwReserved0=0x0, dwReserved1=0x0, cFileName="Ringtone 01.wma", cAlternateFileName="RINGTO~3.WMA")) returned 1 [0090.321] FindNextFileW (in: hFindFile=0x381b40, lpFindFileData=0x31e47c | out: lpFindFileData=0x31e47c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8038cbd7, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x7bed1018, ftLastAccessTime.dwHighDateTime=0x1ca0444, ftLastWriteTime.dwLowDateTime=0x8ada520, ftLastWriteTime.dwHighDateTime=0x1d6eb7f, nFileSizeHigh=0x0, nFileSizeLow=0x21fc0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Ringtone 02.wma", cAlternateFileName="RI5404~1.WMA")) returned 1 [0090.321] FindNextFileW (in: hFindFile=0x381b40, lpFindFileData=0x31e47c | out: lpFindFileData=0x31e47c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8038cbd7, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x7bed1018, ftLastAccessTime.dwHighDateTime=0x1ca0444, ftLastWriteTime.dwLowDateTime=0x8b00680, ftLastWriteTime.dwHighDateTime=0x1d6eb7f, nFileSizeHigh=0x0, nFileSizeLow=0x17100, dwReserved0=0x0, dwReserved1=0x0, cFileName="Ringtone 03.wma", cAlternateFileName="RI0FCF~1.WMA")) returned 1 [0090.321] FindNextFileW (in: hFindFile=0x381b40, lpFindFileData=0x31e47c | out: lpFindFileData=0x31e47c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x80366a76, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x7bed1018, ftLastAccessTime.dwHighDateTime=0x1ca0444, ftLastWriteTime.dwLowDateTime=0x8b98c00, ftLastWriteTime.dwHighDateTime=0x1d6eb7f, nFileSizeHigh=0x0, nFileSizeLow=0x3a040, dwReserved0=0x0, dwReserved1=0x0, cFileName="Ringtone 04.wma", cAlternateFileName="RINGTO~4.WMA")) returned 1 [0090.322] FindNextFileW (in: hFindFile=0x381b40, lpFindFileData=0x31e47c | out: lpFindFileData=0x31e47c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x80366a76, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x7bed1018, ftLastAccessTime.dwHighDateTime=0x1ca0444, ftLastWriteTime.dwLowDateTime=0x8bbed60, ftLastWriteTime.dwHighDateTime=0x1d6eb7f, nFileSizeHigh=0x0, nFileSizeLow=0x1b6f0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Ringtone 05.wma", cAlternateFileName="RINGTO~1.WMA")) returned 1 [0090.322] FindNextFileW (in: hFindFile=0x381b40, lpFindFileData=0x31e47c | out: lpFindFileData=0x31e47c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8038cbd7, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x7bed1018, ftLastAccessTime.dwHighDateTime=0x1ca0444, ftLastWriteTime.dwLowDateTime=0x8c572e0, ftLastWriteTime.dwHighDateTime=0x1d6eb7f, nFileSizeHigh=0x0, nFileSizeLow=0x17100, dwReserved0=0x0, dwReserved1=0x0, cFileName="Ringtone 06.wma", cAlternateFileName="RIF0DC~1.WMA")) returned 1 [0090.322] FindNextFileW (in: hFindFile=0x381b40, lpFindFileData=0x31e47c | out: lpFindFileData=0x31e47c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x80366a76, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x7bed1018, ftLastAccessTime.dwHighDateTime=0x1ca0444, ftLastWriteTime.dwLowDateTime=0x8ca35a0, ftLastWriteTime.dwHighDateTime=0x1d6eb7f, nFileSizeHigh=0x0, nFileSizeLow=0x17100, dwReserved0=0x0, dwReserved1=0x0, cFileName="Ringtone 07.wma", cAlternateFileName="RID564~1.WMA")) returned 1 [0090.322] FindNextFileW (in: hFindFile=0x381b40, lpFindFileData=0x31e47c | out: lpFindFileData=0x31e47c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x80366a76, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x7bed1018, ftLastAccessTime.dwHighDateTime=0x1ca0444, ftLastWriteTime.dwLowDateTime=0x8cef860, ftLastWriteTime.dwHighDateTime=0x1d6eb7f, nFileSizeHigh=0x0, nFileSizeLow=0x21fc0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Ringtone 08.wma", cAlternateFileName="RINGTO~2.WMA")) returned 1 [0090.322] FindNextFileW (in: hFindFile=0x381b40, lpFindFileData=0x31e47c | out: lpFindFileData=0x31e47c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8038cbd7, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x7bed1018, ftLastAccessTime.dwHighDateTime=0x1ca0444, ftLastWriteTime.dwLowDateTime=0x8d3bb20, ftLastWriteTime.dwHighDateTime=0x1d6eb7f, nFileSizeHigh=0x0, nFileSizeLow=0x1b6f0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Ringtone 09.wma", cAlternateFileName="RI70DC~1.WMA")) returned 1 [0090.322] FindNextFileW (in: hFindFile=0x381b40, lpFindFileData=0x31e47c | out: lpFindFileData=0x31e47c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8038cbd7, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x7bed1018, ftLastAccessTime.dwHighDateTime=0x1ca0444, ftLastWriteTime.dwLowDateTime=0x8d61c80, ftLastWriteTime.dwHighDateTime=0x1d6eb7f, nFileSizeHigh=0x0, nFileSizeLow=0x17100, dwReserved0=0x0, dwReserved1=0x0, cFileName="Ringtone 10.wma", cAlternateFileName="RI35A2~1.WMA")) returned 1 [0090.322] FindNextFileW (in: hFindFile=0x381b40, lpFindFileData=0x31e47c | out: lpFindFileData=0x31e47c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8038cbd7, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x7bed1018, ftLastAccessTime.dwHighDateTime=0x1ca0444, ftLastWriteTime.dwLowDateTime=0x8d61c80, ftLastWriteTime.dwHighDateTime=0x1d6eb7f, nFileSizeHigh=0x0, nFileSizeLow=0x17100, dwReserved0=0x0, dwReserved1=0x0, cFileName="Ringtone 10.wma", cAlternateFileName="RI35A2~1.WMA")) returned 0 [0090.323] FindClose (in: hFindFile=0x381b40 | out: hFindFile=0x381b40) returned 1 [0090.323] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e704) returned 1 [0090.323] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e710) returned 1 [0090.323] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Windows\\Ringtones\\Ringtone 01.wma", nBufferLength=0x105, lpBuffer=0x31e11c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Microsoft\\Windows\\Ringtones\\Ringtone 01.wma", lpFilePart=0x0) returned 0x3e [0090.323] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e610) returned 1 [0090.323] CreateFileW (lpFileName="C:\\Users\\All Users\\Microsoft\\Windows\\Ringtones\\Ringtone 01.wma" (normalized: "c:\\users\\all users\\microsoft\\windows\\ringtones\\ringtone 01.wma"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x178 [0090.323] GetFileType (hFile=0x178) returned 0x1 [0090.323] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e60c) returned 1 [0090.323] GetFileType (hFile=0x178) returned 0x1 [0090.323] GetFileSize (in: hFile=0x178, lpFileSizeHigh=0x31e718 | out: lpFileSizeHigh=0x31e718*=0x0) returned 0x31470 [0090.323] ReadFile (in: hFile=0x178, lpBuffer=0x36194b0, nNumberOfBytesToRead=0x31470, lpNumberOfBytesRead=0x31e6c4, lpOverlapped=0x0 | out: lpBuffer=0x36194b0*, lpNumberOfBytesRead=0x31e6c4*=0x31470, lpOverlapped=0x0) returned 1 [0090.325] CloseHandle (hObject=0x178) returned 1 [0090.375] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Windows\\Ringtones\\Ringtone 01.wma", nBufferLength=0x105, lpBuffer=0x31e108, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Microsoft\\Windows\\Ringtones\\Ringtone 01.wma", lpFilePart=0x0) returned 0x3e [0090.375] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e5fc) returned 1 [0090.375] CreateFileW (lpFileName="C:\\Users\\All Users\\Microsoft\\Windows\\Ringtones\\Ringtone 01.wma" (normalized: "c:\\users\\all users\\microsoft\\windows\\ringtones\\ringtone 01.wma"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x178 [0090.377] GetFileType (hFile=0x178) returned 0x1 [0090.377] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e5f8) returned 1 [0090.377] GetFileType (hFile=0x178) returned 0x1 [0090.377] WriteFile (in: hFile=0x178, lpBuffer=0x370fb60*, nNumberOfBytesToWrite=0x31480, lpNumberOfBytesWritten=0x31e6b8, lpOverlapped=0x0 | out: lpBuffer=0x370fb60*, lpNumberOfBytesWritten=0x31e6b8*=0x31480, lpOverlapped=0x0) returned 1 [0090.381] CloseHandle (hObject=0x178) returned 1 [0090.381] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Windows\\Ringtones\\Ringtone 01.wma", nBufferLength=0x105, lpBuffer=0x31e23c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Microsoft\\Windows\\Ringtones\\Ringtone 01.wma", lpFilePart=0x0) returned 0x3e [0090.381] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Windows\\Ringtones\\Ringtone 01.wma", nBufferLength=0x105, lpBuffer=0x31e23c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Microsoft\\Windows\\Ringtones\\Ringtone 01.wma", lpFilePart=0x0) returned 0x3e [0090.381] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e69c) returned 1 [0090.381] GetFileAttributesExW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Windows\\Ringtones\\Ringtone 01.wma" (normalized: "c:\\users\\all users\\microsoft\\windows\\ringtones\\ringtone 01.wma"), fInfoLevelId=0x0, lpFileInformation=0x31e718 | out: lpFileInformation=0x31e718*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x80366a76, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x7bed1018, ftLastAccessTime.dwHighDateTime=0x1ca0444, ftLastWriteTime.dwLowDateTime=0x19502100, ftLastWriteTime.dwHighDateTime=0x1d6eb7f, nFileSizeHigh=0x0, nFileSizeLow=0x31480)) returned 1 [0090.381] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e698) returned 1 [0090.381] MoveFileW (lpExistingFileName="C:\\Users\\All Users\\Microsoft\\Windows\\Ringtones\\Ringtone 01.wma" (normalized: "c:\\users\\all users\\microsoft\\windows\\ringtones\\ringtone 01.wma"), lpNewFileName="C:\\Users\\All Users\\Microsoft\\Windows\\Ringtones\\Ringtone 01.wma" (normalized: "c:\\users\\all users\\microsoft\\windows\\ringtones\\ringtone 01.wma")) returned 1 [0090.382] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Windows\\Ringtones\\Ringtone 02.wma", nBufferLength=0x105, lpBuffer=0x31e11c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Microsoft\\Windows\\Ringtones\\Ringtone 02.wma", lpFilePart=0x0) returned 0x3e [0090.382] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e610) returned 1 [0090.382] CreateFileW (lpFileName="C:\\Users\\All Users\\Microsoft\\Windows\\Ringtones\\Ringtone 02.wma" (normalized: "c:\\users\\all users\\microsoft\\windows\\ringtones\\ringtone 02.wma"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x178 [0090.382] GetFileType (hFile=0x178) returned 0x1 [0090.382] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e60c) returned 1 [0090.382] GetFileType (hFile=0x178) returned 0x1 [0090.382] GetFileSize (in: hFile=0x178, lpFileSizeHigh=0x31e718 | out: lpFileSizeHigh=0x31e718*=0x0) returned 0x21fc0 [0090.382] ReadFile (in: hFile=0x178, lpBuffer=0x3741000, nNumberOfBytesToRead=0x21fc0, lpNumberOfBytesRead=0x31e6c4, lpOverlapped=0x0 | out: lpBuffer=0x3741000*, lpNumberOfBytesRead=0x31e6c4*=0x21fc0, lpOverlapped=0x0) returned 1 [0090.384] CloseHandle (hObject=0x178) returned 1 [0090.416] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Windows\\Ringtones\\Ringtone 02.wma", nBufferLength=0x105, lpBuffer=0x31e108, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Microsoft\\Windows\\Ringtones\\Ringtone 02.wma", lpFilePart=0x0) returned 0x3e [0090.416] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e5fc) returned 1 [0090.416] CreateFileW (lpFileName="C:\\Users\\All Users\\Microsoft\\Windows\\Ringtones\\Ringtone 02.wma" (normalized: "c:\\users\\all users\\microsoft\\windows\\ringtones\\ringtone 02.wma"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x178 [0090.418] GetFileType (hFile=0x178) returned 0x1 [0090.418] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e5f8) returned 1 [0090.418] GetFileType (hFile=0x178) returned 0x1 [0090.418] WriteFile (in: hFile=0x178, lpBuffer=0x37eaf40*, nNumberOfBytesToWrite=0x21fd0, lpNumberOfBytesWritten=0x31e6b8, lpOverlapped=0x0 | out: lpBuffer=0x37eaf40*, lpNumberOfBytesWritten=0x31e6b8*=0x21fd0, lpOverlapped=0x0) returned 1 [0090.421] CloseHandle (hObject=0x178) returned 1 [0090.421] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Windows\\Ringtones\\Ringtone 02.wma", nBufferLength=0x105, lpBuffer=0x31e23c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Microsoft\\Windows\\Ringtones\\Ringtone 02.wma", lpFilePart=0x0) returned 0x3e [0090.421] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Windows\\Ringtones\\Ringtone 02.wma", nBufferLength=0x105, lpBuffer=0x31e23c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Microsoft\\Windows\\Ringtones\\Ringtone 02.wma", lpFilePart=0x0) returned 0x3e [0090.421] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e69c) returned 1 [0090.421] GetFileAttributesExW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Windows\\Ringtones\\Ringtone 02.wma" (normalized: "c:\\users\\all users\\microsoft\\windows\\ringtones\\ringtone 02.wma"), fInfoLevelId=0x0, lpFileInformation=0x31e718 | out: lpFileInformation=0x31e718*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8038cbd7, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x7bed1018, ftLastAccessTime.dwHighDateTime=0x1ca0444, ftLastWriteTime.dwLowDateTime=0x19574520, ftLastWriteTime.dwHighDateTime=0x1d6eb7f, nFileSizeHigh=0x0, nFileSizeLow=0x21fd0)) returned 1 [0090.421] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e698) returned 1 [0090.421] MoveFileW (lpExistingFileName="C:\\Users\\All Users\\Microsoft\\Windows\\Ringtones\\Ringtone 02.wma" (normalized: "c:\\users\\all users\\microsoft\\windows\\ringtones\\ringtone 02.wma"), lpNewFileName="C:\\Users\\All Users\\Microsoft\\Windows\\Ringtones\\Ringtone 02.wma" (normalized: "c:\\users\\all users\\microsoft\\windows\\ringtones\\ringtone 02.wma")) returned 1 [0090.422] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Windows\\Ringtones\\Ringtone 03.wma", nBufferLength=0x105, lpBuffer=0x31e11c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Microsoft\\Windows\\Ringtones\\Ringtone 03.wma", lpFilePart=0x0) returned 0x3e [0090.422] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e610) returned 1 [0090.422] CreateFileW (lpFileName="C:\\Users\\All Users\\Microsoft\\Windows\\Ringtones\\Ringtone 03.wma" (normalized: "c:\\users\\all users\\microsoft\\windows\\ringtones\\ringtone 03.wma"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x178 [0090.422] GetFileType (hFile=0x178) returned 0x1 [0090.422] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e60c) returned 1 [0090.422] GetFileType (hFile=0x178) returned 0x1 [0090.422] GetFileSize (in: hFile=0x178, lpFileSizeHigh=0x31e718 | out: lpFileSizeHigh=0x31e718*=0x0) returned 0x17100 [0090.422] ReadFile (in: hFile=0x178, lpBuffer=0x380cf30, nNumberOfBytesToRead=0x17100, lpNumberOfBytesRead=0x31e6c4, lpOverlapped=0x0 | out: lpBuffer=0x380cf30*, lpNumberOfBytesRead=0x31e6c4*=0x17100, lpOverlapped=0x0) returned 1 [0090.424] CloseHandle (hObject=0x178) returned 1 [0090.442] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Windows\\Ringtones\\Ringtone 03.wma", nBufferLength=0x105, lpBuffer=0x31e108, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Microsoft\\Windows\\Ringtones\\Ringtone 03.wma", lpFilePart=0x0) returned 0x3e [0090.442] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e5fc) returned 1 [0090.442] CreateFileW (lpFileName="C:\\Users\\All Users\\Microsoft\\Windows\\Ringtones\\Ringtone 03.wma" (normalized: "c:\\users\\all users\\microsoft\\windows\\ringtones\\ringtone 03.wma"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x178 [0090.443] GetFileType (hFile=0x178) returned 0x1 [0090.443] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e5f8) returned 1 [0090.443] GetFileType (hFile=0x178) returned 0x1 [0090.443] WriteFile (in: hFile=0x178, lpBuffer=0x38804b0*, nNumberOfBytesToWrite=0x17110, lpNumberOfBytesWritten=0x31e6b8, lpOverlapped=0x0 | out: lpBuffer=0x38804b0*, lpNumberOfBytesWritten=0x31e6b8*=0x17110, lpOverlapped=0x0) returned 1 [0090.445] CloseHandle (hObject=0x178) returned 1 [0090.446] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Windows\\Ringtones\\Ringtone 03.wma", nBufferLength=0x105, lpBuffer=0x31e23c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Microsoft\\Windows\\Ringtones\\Ringtone 03.wma", lpFilePart=0x0) returned 0x3e [0090.446] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Windows\\Ringtones\\Ringtone 03.wma", nBufferLength=0x105, lpBuffer=0x31e23c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Microsoft\\Windows\\Ringtones\\Ringtone 03.wma", lpFilePart=0x0) returned 0x3e [0090.446] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e69c) returned 1 [0090.446] GetFileAttributesExW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Windows\\Ringtones\\Ringtone 03.wma" (normalized: "c:\\users\\all users\\microsoft\\windows\\ringtones\\ringtone 03.wma"), fInfoLevelId=0x0, lpFileInformation=0x31e718 | out: lpFileInformation=0x31e718*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8038cbd7, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x7bed1018, ftLastAccessTime.dwHighDateTime=0x1ca0444, ftLastWriteTime.dwLowDateTime=0x1959a680, ftLastWriteTime.dwHighDateTime=0x1d6eb7f, nFileSizeHigh=0x0, nFileSizeLow=0x17110)) returned 1 [0090.446] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e698) returned 1 [0090.446] MoveFileW (lpExistingFileName="C:\\Users\\All Users\\Microsoft\\Windows\\Ringtones\\Ringtone 03.wma" (normalized: "c:\\users\\all users\\microsoft\\windows\\ringtones\\ringtone 03.wma"), lpNewFileName="C:\\Users\\All Users\\Microsoft\\Windows\\Ringtones\\Ringtone 03.wma" (normalized: "c:\\users\\all users\\microsoft\\windows\\ringtones\\ringtone 03.wma")) returned 1 [0090.446] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Windows\\Ringtones\\Ringtone 04.wma", nBufferLength=0x105, lpBuffer=0x31e11c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Microsoft\\Windows\\Ringtones\\Ringtone 04.wma", lpFilePart=0x0) returned 0x3e [0090.446] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e610) returned 1 [0090.446] CreateFileW (lpFileName="C:\\Users\\All Users\\Microsoft\\Windows\\Ringtones\\Ringtone 04.wma" (normalized: "c:\\users\\all users\\microsoft\\windows\\ringtones\\ringtone 04.wma"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x178 [0090.446] GetFileType (hFile=0x178) returned 0x1 [0090.446] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e60c) returned 1 [0090.447] GetFileType (hFile=0x178) returned 0x1 [0090.447] GetFileSize (in: hFile=0x178, lpFileSizeHigh=0x31e718 | out: lpFileSizeHigh=0x31e718*=0x0) returned 0x3a040 [0090.447] ReadFile (in: hFile=0x178, lpBuffer=0x38975e0, nNumberOfBytesToRead=0x3a040, lpNumberOfBytesRead=0x31e6c4, lpOverlapped=0x0 | out: lpBuffer=0x38975e0*, lpNumberOfBytesRead=0x31e6c4*=0x3a040, lpOverlapped=0x0) returned 1 [0090.450] CloseHandle (hObject=0x178) returned 1 [0090.475] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Windows\\Ringtones\\Ringtone 04.wma", nBufferLength=0x105, lpBuffer=0x31e108, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Microsoft\\Windows\\Ringtones\\Ringtone 04.wma", lpFilePart=0x0) returned 0x3e [0090.475] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e5fc) returned 1 [0090.475] CreateFileW (lpFileName="C:\\Users\\All Users\\Microsoft\\Windows\\Ringtones\\Ringtone 04.wma" (normalized: "c:\\users\\all users\\microsoft\\windows\\ringtones\\ringtone 04.wma"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x178 [0090.477] GetFileType (hFile=0x178) returned 0x1 [0090.477] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e5f8) returned 1 [0090.477] GetFileType (hFile=0x178) returned 0x1 [0090.478] WriteFile (in: hFile=0x178, lpBuffer=0x368d550*, nNumberOfBytesToWrite=0x3a050, lpNumberOfBytesWritten=0x31e6b8, lpOverlapped=0x0 | out: lpBuffer=0x368d550*, lpNumberOfBytesWritten=0x31e6b8*=0x3a050, lpOverlapped=0x0) returned 1 [0090.481] CloseHandle (hObject=0x178) returned 1 [0090.481] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Windows\\Ringtones\\Ringtone 04.wma", nBufferLength=0x105, lpBuffer=0x31e23c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Microsoft\\Windows\\Ringtones\\Ringtone 04.wma", lpFilePart=0x0) returned 0x3e [0090.482] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Windows\\Ringtones\\Ringtone 04.wma", nBufferLength=0x105, lpBuffer=0x31e23c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Microsoft\\Windows\\Ringtones\\Ringtone 04.wma", lpFilePart=0x0) returned 0x3e [0090.482] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e69c) returned 1 [0090.482] GetFileAttributesExW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Windows\\Ringtones\\Ringtone 04.wma" (normalized: "c:\\users\\all users\\microsoft\\windows\\ringtones\\ringtone 04.wma"), fInfoLevelId=0x0, lpFileInformation=0x31e718 | out: lpFileInformation=0x31e718*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x80366a76, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x7bed1018, ftLastAccessTime.dwHighDateTime=0x1ca0444, ftLastWriteTime.dwLowDateTime=0x1960caa0, ftLastWriteTime.dwHighDateTime=0x1d6eb7f, nFileSizeHigh=0x0, nFileSizeLow=0x3a050)) returned 1 [0090.482] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e698) returned 1 [0090.482] MoveFileW (lpExistingFileName="C:\\Users\\All Users\\Microsoft\\Windows\\Ringtones\\Ringtone 04.wma" (normalized: "c:\\users\\all users\\microsoft\\windows\\ringtones\\ringtone 04.wma"), lpNewFileName="C:\\Users\\All Users\\Microsoft\\Windows\\Ringtones\\Ringtone 04.wma" (normalized: "c:\\users\\all users\\microsoft\\windows\\ringtones\\ringtone 04.wma")) returned 1 [0090.482] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Windows\\Ringtones\\Ringtone 05.wma", nBufferLength=0x105, lpBuffer=0x31e11c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Microsoft\\Windows\\Ringtones\\Ringtone 05.wma", lpFilePart=0x0) returned 0x3e [0090.482] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e610) returned 1 [0090.482] CreateFileW (lpFileName="C:\\Users\\All Users\\Microsoft\\Windows\\Ringtones\\Ringtone 05.wma" (normalized: "c:\\users\\all users\\microsoft\\windows\\ringtones\\ringtone 05.wma"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x178 [0090.482] GetFileType (hFile=0x178) returned 0x1 [0090.483] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e60c) returned 1 [0090.483] GetFileType (hFile=0x178) returned 0x1 [0090.483] GetFileSize (in: hFile=0x178, lpFileSizeHigh=0x31e718 | out: lpFileSizeHigh=0x31e718*=0x0) returned 0x1b6f0 [0090.483] ReadFile (in: hFile=0x178, lpBuffer=0x38d1640, nNumberOfBytesToRead=0x1b6f0, lpNumberOfBytesRead=0x31e6c4, lpOverlapped=0x0 | out: lpBuffer=0x38d1640*, lpNumberOfBytesRead=0x31e6c4*=0x1b6f0, lpOverlapped=0x0) returned 1 [0090.484] CloseHandle (hObject=0x178) returned 1 [0090.525] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Windows\\Ringtones\\Ringtone 05.wma", nBufferLength=0x105, lpBuffer=0x31e108, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Microsoft\\Windows\\Ringtones\\Ringtone 05.wma", lpFilePart=0x0) returned 0x3e [0090.526] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e5fc) returned 1 [0090.526] CreateFileW (lpFileName="C:\\Users\\All Users\\Microsoft\\Windows\\Ringtones\\Ringtone 05.wma" (normalized: "c:\\users\\all users\\microsoft\\windows\\ringtones\\ringtone 05.wma"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x178 [0090.527] GetFileType (hFile=0x178) returned 0x1 [0090.527] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e5f8) returned 1 [0090.527] GetFileType (hFile=0x178) returned 0x1 [0090.527] WriteFile (in: hFile=0x178, lpBuffer=0x3719ad0*, nNumberOfBytesToWrite=0x1b700, lpNumberOfBytesWritten=0x31e6b8, lpOverlapped=0x0 | out: lpBuffer=0x3719ad0*, lpNumberOfBytesWritten=0x31e6b8*=0x1b700, lpOverlapped=0x0) returned 1 [0090.529] CloseHandle (hObject=0x178) returned 1 [0090.529] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Windows\\Ringtones\\Ringtone 05.wma", nBufferLength=0x105, lpBuffer=0x31e23c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Microsoft\\Windows\\Ringtones\\Ringtone 05.wma", lpFilePart=0x0) returned 0x3e [0090.529] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Windows\\Ringtones\\Ringtone 05.wma", nBufferLength=0x105, lpBuffer=0x31e23c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Microsoft\\Windows\\Ringtones\\Ringtone 05.wma", lpFilePart=0x0) returned 0x3e [0090.529] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e69c) returned 1 [0090.530] GetFileAttributesExW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Windows\\Ringtones\\Ringtone 05.wma" (normalized: "c:\\users\\all users\\microsoft\\windows\\ringtones\\ringtone 05.wma"), fInfoLevelId=0x0, lpFileInformation=0x31e718 | out: lpFileInformation=0x31e718*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x80366a76, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x7bed1018, ftLastAccessTime.dwHighDateTime=0x1ca0444, ftLastWriteTime.dwLowDateTime=0x1967eec0, ftLastWriteTime.dwHighDateTime=0x1d6eb7f, nFileSizeHigh=0x0, nFileSizeLow=0x1b700)) returned 1 [0090.530] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e698) returned 1 [0090.530] MoveFileW (lpExistingFileName="C:\\Users\\All Users\\Microsoft\\Windows\\Ringtones\\Ringtone 05.wma" (normalized: "c:\\users\\all users\\microsoft\\windows\\ringtones\\ringtone 05.wma"), lpNewFileName="C:\\Users\\All Users\\Microsoft\\Windows\\Ringtones\\Ringtone 05.wma" (normalized: "c:\\users\\all users\\microsoft\\windows\\ringtones\\ringtone 05.wma")) returned 1 [0090.530] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Windows\\Ringtones\\Ringtone 06.wma", nBufferLength=0x105, lpBuffer=0x31e11c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Microsoft\\Windows\\Ringtones\\Ringtone 06.wma", lpFilePart=0x0) returned 0x3e [0090.530] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e610) returned 1 [0090.530] CreateFileW (lpFileName="C:\\Users\\All Users\\Microsoft\\Windows\\Ringtones\\Ringtone 06.wma" (normalized: "c:\\users\\all users\\microsoft\\windows\\ringtones\\ringtone 06.wma"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x178 [0090.530] GetFileType (hFile=0x178) returned 0x1 [0090.530] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e60c) returned 1 [0090.530] GetFileType (hFile=0x178) returned 0x1 [0090.530] GetFileSize (in: hFile=0x178, lpFileSizeHigh=0x31e718 | out: lpFileSizeHigh=0x31e718*=0x0) returned 0x17100 [0090.531] ReadFile (in: hFile=0x178, lpBuffer=0x37351f0, nNumberOfBytesToRead=0x17100, lpNumberOfBytesRead=0x31e6c4, lpOverlapped=0x0 | out: lpBuffer=0x37351f0*, lpNumberOfBytesRead=0x31e6c4*=0x17100, lpOverlapped=0x0) returned 1 [0090.531] CloseHandle (hObject=0x178) returned 1 [0090.547] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Windows\\Ringtones\\Ringtone 06.wma", nBufferLength=0x105, lpBuffer=0x31e108, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Microsoft\\Windows\\Ringtones\\Ringtone 06.wma", lpFilePart=0x0) returned 0x3e [0090.547] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e5fc) returned 1 [0090.547] CreateFileW (lpFileName="C:\\Users\\All Users\\Microsoft\\Windows\\Ringtones\\Ringtone 06.wma" (normalized: "c:\\users\\all users\\microsoft\\windows\\ringtones\\ringtone 06.wma"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x178 [0090.548] GetFileType (hFile=0x178) returned 0x1 [0090.548] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e5f8) returned 1 [0090.548] GetFileType (hFile=0x178) returned 0x1 [0090.549] WriteFile (in: hFile=0x178, lpBuffer=0x37a8770*, nNumberOfBytesToWrite=0x17110, lpNumberOfBytesWritten=0x31e6b8, lpOverlapped=0x0 | out: lpBuffer=0x37a8770*, lpNumberOfBytesWritten=0x31e6b8*=0x17110, lpOverlapped=0x0) returned 1 [0090.550] CloseHandle (hObject=0x178) returned 1 [0090.551] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Windows\\Ringtones\\Ringtone 06.wma", nBufferLength=0x105, lpBuffer=0x31e23c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Microsoft\\Windows\\Ringtones\\Ringtone 06.wma", lpFilePart=0x0) returned 0x3e [0090.551] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Windows\\Ringtones\\Ringtone 06.wma", nBufferLength=0x105, lpBuffer=0x31e23c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Microsoft\\Windows\\Ringtones\\Ringtone 06.wma", lpFilePart=0x0) returned 0x3e [0090.551] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e69c) returned 1 [0090.551] GetFileAttributesExW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Windows\\Ringtones\\Ringtone 06.wma" (normalized: "c:\\users\\all users\\microsoft\\windows\\ringtones\\ringtone 06.wma"), fInfoLevelId=0x0, lpFileInformation=0x31e718 | out: lpFileInformation=0x31e718*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8038cbd7, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x7bed1018, ftLastAccessTime.dwHighDateTime=0x1ca0444, ftLastWriteTime.dwLowDateTime=0x196a5020, ftLastWriteTime.dwHighDateTime=0x1d6eb7f, nFileSizeHigh=0x0, nFileSizeLow=0x17110)) returned 1 [0090.551] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e698) returned 1 [0090.551] MoveFileW (lpExistingFileName="C:\\Users\\All Users\\Microsoft\\Windows\\Ringtones\\Ringtone 06.wma" (normalized: "c:\\users\\all users\\microsoft\\windows\\ringtones\\ringtone 06.wma"), lpNewFileName="C:\\Users\\All Users\\Microsoft\\Windows\\Ringtones\\Ringtone 06.wma" (normalized: "c:\\users\\all users\\microsoft\\windows\\ringtones\\ringtone 06.wma")) returned 1 [0090.551] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Windows\\Ringtones\\Ringtone 07.wma", nBufferLength=0x105, lpBuffer=0x31e11c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Microsoft\\Windows\\Ringtones\\Ringtone 07.wma", lpFilePart=0x0) returned 0x3e [0090.551] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e610) returned 1 [0090.551] CreateFileW (lpFileName="C:\\Users\\All Users\\Microsoft\\Windows\\Ringtones\\Ringtone 07.wma" (normalized: "c:\\users\\all users\\microsoft\\windows\\ringtones\\ringtone 07.wma"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x178 [0090.552] GetFileType (hFile=0x178) returned 0x1 [0090.552] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e60c) returned 1 [0090.552] GetFileType (hFile=0x178) returned 0x1 [0090.552] GetFileSize (in: hFile=0x178, lpFileSizeHigh=0x31e718 | out: lpFileSizeHigh=0x31e718*=0x0) returned 0x17100 [0090.552] ReadFile (in: hFile=0x178, lpBuffer=0x37bf8a0, nNumberOfBytesToRead=0x17100, lpNumberOfBytesRead=0x31e6c4, lpOverlapped=0x0 | out: lpBuffer=0x37bf8a0*, lpNumberOfBytesRead=0x31e6c4*=0x17100, lpOverlapped=0x0) returned 1 [0090.553] CloseHandle (hObject=0x178) returned 1 [0090.569] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Windows\\Ringtones\\Ringtone 07.wma", nBufferLength=0x105, lpBuffer=0x31e108, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Microsoft\\Windows\\Ringtones\\Ringtone 07.wma", lpFilePart=0x0) returned 0x3e [0090.569] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e5fc) returned 1 [0090.569] CreateFileW (lpFileName="C:\\Users\\All Users\\Microsoft\\Windows\\Ringtones\\Ringtone 07.wma" (normalized: "c:\\users\\all users\\microsoft\\windows\\ringtones\\ringtone 07.wma"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x178 [0090.570] GetFileType (hFile=0x178) returned 0x1 [0090.570] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e5f8) returned 1 [0090.570] GetFileType (hFile=0x178) returned 0x1 [0090.570] WriteFile (in: hFile=0x178, lpBuffer=0x3832e20*, nNumberOfBytesToWrite=0x17110, lpNumberOfBytesWritten=0x31e6b8, lpOverlapped=0x0 | out: lpBuffer=0x3832e20*, lpNumberOfBytesWritten=0x31e6b8*=0x17110, lpOverlapped=0x0) returned 1 [0090.572] CloseHandle (hObject=0x178) returned 1 [0090.572] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Windows\\Ringtones\\Ringtone 07.wma", nBufferLength=0x105, lpBuffer=0x31e23c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Microsoft\\Windows\\Ringtones\\Ringtone 07.wma", lpFilePart=0x0) returned 0x3e [0090.572] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Windows\\Ringtones\\Ringtone 07.wma", nBufferLength=0x105, lpBuffer=0x31e23c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Microsoft\\Windows\\Ringtones\\Ringtone 07.wma", lpFilePart=0x0) returned 0x3e [0090.573] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e69c) returned 1 [0090.573] GetFileAttributesExW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Windows\\Ringtones\\Ringtone 07.wma" (normalized: "c:\\users\\all users\\microsoft\\windows\\ringtones\\ringtone 07.wma"), fInfoLevelId=0x0, lpFileInformation=0x31e718 | out: lpFileInformation=0x31e718*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x80366a76, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x7bed1018, ftLastAccessTime.dwHighDateTime=0x1ca0444, ftLastWriteTime.dwLowDateTime=0x196cb180, ftLastWriteTime.dwHighDateTime=0x1d6eb7f, nFileSizeHigh=0x0, nFileSizeLow=0x17110)) returned 1 [0090.573] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e698) returned 1 [0090.573] MoveFileW (lpExistingFileName="C:\\Users\\All Users\\Microsoft\\Windows\\Ringtones\\Ringtone 07.wma" (normalized: "c:\\users\\all users\\microsoft\\windows\\ringtones\\ringtone 07.wma"), lpNewFileName="C:\\Users\\All Users\\Microsoft\\Windows\\Ringtones\\Ringtone 07.wma" (normalized: "c:\\users\\all users\\microsoft\\windows\\ringtones\\ringtone 07.wma")) returned 1 [0090.573] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Windows\\Ringtones\\Ringtone 08.wma", nBufferLength=0x105, lpBuffer=0x31e11c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Microsoft\\Windows\\Ringtones\\Ringtone 08.wma", lpFilePart=0x0) returned 0x3e [0090.573] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e610) returned 1 [0090.573] CreateFileW (lpFileName="C:\\Users\\All Users\\Microsoft\\Windows\\Ringtones\\Ringtone 08.wma" (normalized: "c:\\users\\all users\\microsoft\\windows\\ringtones\\ringtone 08.wma"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x178 [0090.573] GetFileType (hFile=0x178) returned 0x1 [0090.573] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e60c) returned 1 [0090.573] GetFileType (hFile=0x178) returned 0x1 [0090.573] GetFileSize (in: hFile=0x178, lpFileSizeHigh=0x31e718 | out: lpFileSizeHigh=0x31e718*=0x0) returned 0x21fc0 [0090.574] ReadFile (in: hFile=0x178, lpBuffer=0x3849f50, nNumberOfBytesToRead=0x21fc0, lpNumberOfBytesRead=0x31e6c4, lpOverlapped=0x0 | out: lpBuffer=0x3849f50*, lpNumberOfBytesRead=0x31e6c4*=0x21fc0, lpOverlapped=0x0) returned 1 [0090.575] CloseHandle (hObject=0x178) returned 1 [0090.596] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Windows\\Ringtones\\Ringtone 08.wma", nBufferLength=0x105, lpBuffer=0x31e108, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Microsoft\\Windows\\Ringtones\\Ringtone 08.wma", lpFilePart=0x0) returned 0x3e [0090.596] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e5fc) returned 1 [0090.596] CreateFileW (lpFileName="C:\\Users\\All Users\\Microsoft\\Windows\\Ringtones\\Ringtone 08.wma" (normalized: "c:\\users\\all users\\microsoft\\windows\\ringtones\\ringtone 08.wma"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x178 [0090.598] GetFileType (hFile=0x178) returned 0x1 [0090.598] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e5f8) returned 1 [0090.598] GetFileType (hFile=0x178) returned 0x1 [0090.598] WriteFile (in: hFile=0x178, lpBuffer=0x386bf30*, nNumberOfBytesToWrite=0x21fd0, lpNumberOfBytesWritten=0x31e6b8, lpOverlapped=0x0 | out: lpBuffer=0x386bf30*, lpNumberOfBytesWritten=0x31e6b8*=0x21fd0, lpOverlapped=0x0) returned 1 [0090.600] CloseHandle (hObject=0x178) returned 1 [0090.601] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Windows\\Ringtones\\Ringtone 08.wma", nBufferLength=0x105, lpBuffer=0x31e23c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Microsoft\\Windows\\Ringtones\\Ringtone 08.wma", lpFilePart=0x0) returned 0x3e [0090.601] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Windows\\Ringtones\\Ringtone 08.wma", nBufferLength=0x105, lpBuffer=0x31e23c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Microsoft\\Windows\\Ringtones\\Ringtone 08.wma", lpFilePart=0x0) returned 0x3e [0090.601] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e69c) returned 1 [0090.601] GetFileAttributesExW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Windows\\Ringtones\\Ringtone 08.wma" (normalized: "c:\\users\\all users\\microsoft\\windows\\ringtones\\ringtone 08.wma"), fInfoLevelId=0x0, lpFileInformation=0x31e718 | out: lpFileInformation=0x31e718*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x80366a76, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x7bed1018, ftLastAccessTime.dwHighDateTime=0x1ca0444, ftLastWriteTime.dwLowDateTime=0x19717440, ftLastWriteTime.dwHighDateTime=0x1d6eb7f, nFileSizeHigh=0x0, nFileSizeLow=0x21fd0)) returned 1 [0090.601] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e698) returned 1 [0090.601] MoveFileW (lpExistingFileName="C:\\Users\\All Users\\Microsoft\\Windows\\Ringtones\\Ringtone 08.wma" (normalized: "c:\\users\\all users\\microsoft\\windows\\ringtones\\ringtone 08.wma"), lpNewFileName="C:\\Users\\All Users\\Microsoft\\Windows\\Ringtones\\Ringtone 08.wma" (normalized: "c:\\users\\all users\\microsoft\\windows\\ringtones\\ringtone 08.wma")) returned 1 [0090.601] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Windows\\Ringtones\\Ringtone 09.wma", nBufferLength=0x105, lpBuffer=0x31e11c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Microsoft\\Windows\\Ringtones\\Ringtone 09.wma", lpFilePart=0x0) returned 0x3e [0090.601] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e610) returned 1 [0090.601] CreateFileW (lpFileName="C:\\Users\\All Users\\Microsoft\\Windows\\Ringtones\\Ringtone 09.wma" (normalized: "c:\\users\\all users\\microsoft\\windows\\ringtones\\ringtone 09.wma"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x178 [0090.602] GetFileType (hFile=0x178) returned 0x1 [0090.602] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e60c) returned 1 [0090.602] GetFileType (hFile=0x178) returned 0x1 [0090.602] GetFileSize (in: hFile=0x178, lpFileSizeHigh=0x31e718 | out: lpFileSizeHigh=0x31e718*=0x0) returned 0x1b6f0 [0090.602] ReadFile (in: hFile=0x178, lpBuffer=0x388df20, nNumberOfBytesToRead=0x1b6f0, lpNumberOfBytesRead=0x31e6c4, lpOverlapped=0x0 | out: lpBuffer=0x388df20*, lpNumberOfBytesRead=0x31e6c4*=0x1b6f0, lpOverlapped=0x0) returned 1 [0090.603] CloseHandle (hObject=0x178) returned 1 [0090.644] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Windows\\Ringtones\\Ringtone 09.wma", nBufferLength=0x105, lpBuffer=0x31e108, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Microsoft\\Windows\\Ringtones\\Ringtone 09.wma", lpFilePart=0x0) returned 0x3e [0090.644] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e5fc) returned 1 [0090.645] CreateFileW (lpFileName="C:\\Users\\All Users\\Microsoft\\Windows\\Ringtones\\Ringtone 09.wma" (normalized: "c:\\users\\all users\\microsoft\\windows\\ringtones\\ringtone 09.wma"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x178 [0090.646] GetFileType (hFile=0x178) returned 0x1 [0090.646] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e5f8) returned 1 [0090.646] GetFileType (hFile=0x178) returned 0x1 [0090.646] WriteFile (in: hFile=0x178, lpBuffer=0x3917250*, nNumberOfBytesToWrite=0x1b700, lpNumberOfBytesWritten=0x31e6b8, lpOverlapped=0x0 | out: lpBuffer=0x3917250*, lpNumberOfBytesWritten=0x31e6b8*=0x1b700, lpOverlapped=0x0) returned 1 [0090.648] CloseHandle (hObject=0x178) returned 1 [0090.648] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Windows\\Ringtones\\Ringtone 09.wma", nBufferLength=0x105, lpBuffer=0x31e23c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Microsoft\\Windows\\Ringtones\\Ringtone 09.wma", lpFilePart=0x0) returned 0x3e [0090.648] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Windows\\Ringtones\\Ringtone 09.wma", nBufferLength=0x105, lpBuffer=0x31e23c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Microsoft\\Windows\\Ringtones\\Ringtone 09.wma", lpFilePart=0x0) returned 0x3e [0090.648] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e69c) returned 1 [0090.648] GetFileAttributesExW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Windows\\Ringtones\\Ringtone 09.wma" (normalized: "c:\\users\\all users\\microsoft\\windows\\ringtones\\ringtone 09.wma"), fInfoLevelId=0x0, lpFileInformation=0x31e718 | out: lpFileInformation=0x31e718*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8038cbd7, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x7bed1018, ftLastAccessTime.dwHighDateTime=0x1ca0444, ftLastWriteTime.dwLowDateTime=0x19789860, ftLastWriteTime.dwHighDateTime=0x1d6eb7f, nFileSizeHigh=0x0, nFileSizeLow=0x1b700)) returned 1 [0090.648] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e698) returned 1 [0090.649] MoveFileW (lpExistingFileName="C:\\Users\\All Users\\Microsoft\\Windows\\Ringtones\\Ringtone 09.wma" (normalized: "c:\\users\\all users\\microsoft\\windows\\ringtones\\ringtone 09.wma"), lpNewFileName="C:\\Users\\All Users\\Microsoft\\Windows\\Ringtones\\Ringtone 09.wma" (normalized: "c:\\users\\all users\\microsoft\\windows\\ringtones\\ringtone 09.wma")) returned 1 [0090.649] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Windows\\Ringtones\\Ringtone 10.wma", nBufferLength=0x105, lpBuffer=0x31e11c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Microsoft\\Windows\\Ringtones\\Ringtone 10.wma", lpFilePart=0x0) returned 0x3e [0090.649] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e610) returned 1 [0090.649] CreateFileW (lpFileName="C:\\Users\\All Users\\Microsoft\\Windows\\Ringtones\\Ringtone 10.wma" (normalized: "c:\\users\\all users\\microsoft\\windows\\ringtones\\ringtone 10.wma"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x178 [0090.649] GetFileType (hFile=0x178) returned 0x1 [0090.649] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e60c) returned 1 [0090.649] GetFileType (hFile=0x178) returned 0x1 [0090.649] GetFileSize (in: hFile=0x178, lpFileSizeHigh=0x31e718 | out: lpFileSizeHigh=0x31e718*=0x0) returned 0x17100 [0090.649] ReadFile (in: hFile=0x178, lpBuffer=0x3932970, nNumberOfBytesToRead=0x17100, lpNumberOfBytesRead=0x31e6c4, lpOverlapped=0x0 | out: lpBuffer=0x3932970*, lpNumberOfBytesRead=0x31e6c4*=0x17100, lpOverlapped=0x0) returned 1 [0090.650] CloseHandle (hObject=0x178) returned 1 [0090.667] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Windows\\Ringtones\\Ringtone 10.wma", nBufferLength=0x105, lpBuffer=0x31e108, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Microsoft\\Windows\\Ringtones\\Ringtone 10.wma", lpFilePart=0x0) returned 0x3e [0090.667] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e5fc) returned 1 [0090.667] CreateFileW (lpFileName="C:\\Users\\All Users\\Microsoft\\Windows\\Ringtones\\Ringtone 10.wma" (normalized: "c:\\users\\all users\\microsoft\\windows\\ringtones\\ringtone 10.wma"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x178 [0090.669] GetFileType (hFile=0x178) returned 0x1 [0090.669] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e5f8) returned 1 [0090.669] GetFileType (hFile=0x178) returned 0x1 [0090.669] WriteFile (in: hFile=0x178, lpBuffer=0x365e7f0*, nNumberOfBytesToWrite=0x17110, lpNumberOfBytesWritten=0x31e6b8, lpOverlapped=0x0 | out: lpBuffer=0x365e7f0*, lpNumberOfBytesWritten=0x31e6b8*=0x17110, lpOverlapped=0x0) returned 1 [0090.671] CloseHandle (hObject=0x178) returned 1 [0090.671] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Windows\\Ringtones\\Ringtone 10.wma", nBufferLength=0x105, lpBuffer=0x31e23c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Microsoft\\Windows\\Ringtones\\Ringtone 10.wma", lpFilePart=0x0) returned 0x3e [0090.671] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Windows\\Ringtones\\Ringtone 10.wma", nBufferLength=0x105, lpBuffer=0x31e23c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Microsoft\\Windows\\Ringtones\\Ringtone 10.wma", lpFilePart=0x0) returned 0x3e [0090.671] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e69c) returned 1 [0090.671] GetFileAttributesExW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Windows\\Ringtones\\Ringtone 10.wma" (normalized: "c:\\users\\all users\\microsoft\\windows\\ringtones\\ringtone 10.wma"), fInfoLevelId=0x0, lpFileInformation=0x31e718 | out: lpFileInformation=0x31e718*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8038cbd7, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x7bed1018, ftLastAccessTime.dwHighDateTime=0x1ca0444, ftLastWriteTime.dwLowDateTime=0x197d5b20, ftLastWriteTime.dwHighDateTime=0x1d6eb7f, nFileSizeHigh=0x0, nFileSizeLow=0x17110)) returned 1 [0090.671] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e698) returned 1 [0090.671] MoveFileW (lpExistingFileName="C:\\Users\\All Users\\Microsoft\\Windows\\Ringtones\\Ringtone 10.wma" (normalized: "c:\\users\\all users\\microsoft\\windows\\ringtones\\ringtone 10.wma"), lpNewFileName="C:\\Users\\All Users\\Microsoft\\Windows\\Ringtones\\Ringtone 10.wma" (normalized: "c:\\users\\all users\\microsoft\\windows\\ringtones\\ringtone 10.wma")) returned 1 [0090.671] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e744) returned 1 [0090.671] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Windows\\Sqm", nBufferLength=0x105, lpBuffer=0x31e24c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Microsoft\\Windows\\Sqm", lpFilePart=0x0) returned 0x28 [0090.672] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Windows\\Sqm\\", nBufferLength=0x105, lpBuffer=0x31e220, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Microsoft\\Windows\\Sqm\\", lpFilePart=0x0) returned 0x29 [0090.672] FindFirstFileW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Windows\\Sqm\\*", lpFindFileData=0x31e46c | out: lpFindFileData=0x31e46c*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x60ae73a0, ftCreationTime.dwHighDateTime=0x1d2de2a, ftLastAccessTime.dwLowDateTime=0x60ae73a0, ftLastAccessTime.dwHighDateTime=0x1d2de2a, ftLastWriteTime.dwLowDateTime=0x60ae73a0, ftLastWriteTime.dwHighDateTime=0x1d2de2a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x381c80 [0090.672] FindNextFileW (in: hFindFile=0x381c80, lpFindFileData=0x31e47c | out: lpFindFileData=0x31e47c*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x60ae73a0, ftCreationTime.dwHighDateTime=0x1d2de2a, ftLastAccessTime.dwLowDateTime=0x60ae73a0, ftLastAccessTime.dwHighDateTime=0x1d2de2a, ftLastWriteTime.dwLowDateTime=0x60ae73a0, ftLastWriteTime.dwHighDateTime=0x1d2de2a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0090.672] FindNextFileW (in: hFindFile=0x381c80, lpFindFileData=0x31e47c | out: lpFindFileData=0x31e47c*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x60ae73a0, ftCreationTime.dwHighDateTime=0x1d2de2a, ftLastAccessTime.dwLowDateTime=0x60ae73a0, ftLastAccessTime.dwHighDateTime=0x1d2de2a, ftLastWriteTime.dwLowDateTime=0x60ae73a0, ftLastWriteTime.dwHighDateTime=0x1d2de2a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Manifest", cAlternateFileName="")) returned 1 [0090.672] FindNextFileW (in: hFindFile=0x381c80, lpFindFileData=0x31e47c | out: lpFindFileData=0x31e47c*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x60ae73a0, ftCreationTime.dwHighDateTime=0x1d2de2a, ftLastAccessTime.dwLowDateTime=0x60ae73a0, ftLastAccessTime.dwHighDateTime=0x1d2de2a, ftLastWriteTime.dwLowDateTime=0x60ae73a0, ftLastWriteTime.dwHighDateTime=0x1d2de2a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Sessions", cAlternateFileName="")) returned 1 [0090.672] FindNextFileW (in: hFindFile=0x381c80, lpFindFileData=0x31e47c | out: lpFindFileData=0x31e47c*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x60ae73a0, ftCreationTime.dwHighDateTime=0x1d2de2a, ftLastAccessTime.dwLowDateTime=0x60ae73a0, ftLastAccessTime.dwHighDateTime=0x1d2de2a, ftLastWriteTime.dwLowDateTime=0x60ae73a0, ftLastWriteTime.dwHighDateTime=0x1d2de2a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Upload", cAlternateFileName="")) returned 1 [0090.673] FindNextFileW (in: hFindFile=0x381c80, lpFindFileData=0x31e47c | out: lpFindFileData=0x31e47c*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x60ae73a0, ftCreationTime.dwHighDateTime=0x1d2de2a, ftLastAccessTime.dwLowDateTime=0x60ae73a0, ftLastAccessTime.dwHighDateTime=0x1d2de2a, ftLastWriteTime.dwLowDateTime=0x60ae73a0, ftLastWriteTime.dwHighDateTime=0x1d2de2a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Upload", cAlternateFileName="")) returned 0 [0090.673] FindClose (in: hFindFile=0x381c80 | out: hFindFile=0x381c80) returned 1 [0090.673] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e704) returned 1 [0090.673] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e710) returned 1 [0090.673] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e744) returned 1 [0090.673] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Windows\\Sqm", nBufferLength=0x105, lpBuffer=0x31e24c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Microsoft\\Windows\\Sqm", lpFilePart=0x0) returned 0x28 [0090.673] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Windows\\Sqm\\", nBufferLength=0x105, lpBuffer=0x31e220, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Microsoft\\Windows\\Sqm\\", lpFilePart=0x0) returned 0x29 [0090.673] FindFirstFileW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Windows\\Sqm\\*", lpFindFileData=0x31e46c | out: lpFindFileData=0x31e46c*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x60ae73a0, ftCreationTime.dwHighDateTime=0x1d2de2a, ftLastAccessTime.dwLowDateTime=0x60ae73a0, ftLastAccessTime.dwHighDateTime=0x1d2de2a, ftLastWriteTime.dwLowDateTime=0x60ae73a0, ftLastWriteTime.dwHighDateTime=0x1d2de2a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x381c80 [0090.673] FindNextFileW (in: hFindFile=0x381c80, lpFindFileData=0x31e47c | out: lpFindFileData=0x31e47c*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x60ae73a0, ftCreationTime.dwHighDateTime=0x1d2de2a, ftLastAccessTime.dwLowDateTime=0x60ae73a0, ftLastAccessTime.dwHighDateTime=0x1d2de2a, ftLastWriteTime.dwLowDateTime=0x60ae73a0, ftLastWriteTime.dwHighDateTime=0x1d2de2a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0090.673] FindNextFileW (in: hFindFile=0x381c80, lpFindFileData=0x31e47c | out: lpFindFileData=0x31e47c*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x60ae73a0, ftCreationTime.dwHighDateTime=0x1d2de2a, ftLastAccessTime.dwLowDateTime=0x60ae73a0, ftLastAccessTime.dwHighDateTime=0x1d2de2a, ftLastWriteTime.dwLowDateTime=0x60ae73a0, ftLastWriteTime.dwHighDateTime=0x1d2de2a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Manifest", cAlternateFileName="")) returned 1 [0090.673] FindNextFileW (in: hFindFile=0x381c80, lpFindFileData=0x31e47c | out: lpFindFileData=0x31e47c*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x60ae73a0, ftCreationTime.dwHighDateTime=0x1d2de2a, ftLastAccessTime.dwLowDateTime=0x60ae73a0, ftLastAccessTime.dwHighDateTime=0x1d2de2a, ftLastWriteTime.dwLowDateTime=0x60ae73a0, ftLastWriteTime.dwHighDateTime=0x1d2de2a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Sessions", cAlternateFileName="")) returned 1 [0090.673] FindNextFileW (in: hFindFile=0x381c80, lpFindFileData=0x31e47c | out: lpFindFileData=0x31e47c*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x60ae73a0, ftCreationTime.dwHighDateTime=0x1d2de2a, ftLastAccessTime.dwLowDateTime=0x60ae73a0, ftLastAccessTime.dwHighDateTime=0x1d2de2a, ftLastWriteTime.dwLowDateTime=0x60ae73a0, ftLastWriteTime.dwHighDateTime=0x1d2de2a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Upload", cAlternateFileName="")) returned 1 [0090.674] FindNextFileW (in: hFindFile=0x381c80, lpFindFileData=0x31e47c | out: lpFindFileData=0x31e47c*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0090.674] FindClose (in: hFindFile=0x381c80 | out: hFindFile=0x381c80) returned 1 [0090.674] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e704) returned 1 [0090.674] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e710) returned 1 [0090.674] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e6cc) returned 1 [0090.674] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Windows\\Sqm\\Manifest", nBufferLength=0x105, lpBuffer=0x31e1d4, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Microsoft\\Windows\\Sqm\\Manifest", lpFilePart=0x0) returned 0x31 [0090.674] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Windows\\Sqm\\Manifest\\", nBufferLength=0x105, lpBuffer=0x31e1a8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Microsoft\\Windows\\Sqm\\Manifest\\", lpFilePart=0x0) returned 0x32 [0090.674] FindFirstFileW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Windows\\Sqm\\Manifest\\*", lpFindFileData=0x31e3f4 | out: lpFindFileData=0x31e3f4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x60ae73a0, ftCreationTime.dwHighDateTime=0x1d2de2a, ftLastAccessTime.dwLowDateTime=0x60ae73a0, ftLastAccessTime.dwHighDateTime=0x1d2de2a, ftLastWriteTime.dwLowDateTime=0x60ae73a0, ftLastWriteTime.dwHighDateTime=0x1d2de2a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x381c80 [0090.674] FindNextFileW (in: hFindFile=0x381c80, lpFindFileData=0x31e404 | out: lpFindFileData=0x31e404*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x60ae73a0, ftCreationTime.dwHighDateTime=0x1d2de2a, ftLastAccessTime.dwLowDateTime=0x60ae73a0, ftLastAccessTime.dwHighDateTime=0x1d2de2a, ftLastWriteTime.dwLowDateTime=0x60ae73a0, ftLastWriteTime.dwHighDateTime=0x1d2de2a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0090.674] FindNextFileW (in: hFindFile=0x381c80, lpFindFileData=0x31e404 | out: lpFindFileData=0x31e404*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x60ae73a0, ftCreationTime.dwHighDateTime=0x1d2de2a, ftLastAccessTime.dwLowDateTime=0x60ae73a0, ftLastAccessTime.dwHighDateTime=0x1d2de2a, ftLastWriteTime.dwLowDateTime=0x60ae73a0, ftLastWriteTime.dwHighDateTime=0x1d2de2a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 0 [0090.674] FindClose (in: hFindFile=0x381c80 | out: hFindFile=0x381c80) returned 1 [0090.675] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e68c) returned 1 [0090.675] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e698) returned 1 [0090.675] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e6cc) returned 1 [0090.675] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Windows\\Sqm\\Manifest", nBufferLength=0x105, lpBuffer=0x31e1d4, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Microsoft\\Windows\\Sqm\\Manifest", lpFilePart=0x0) returned 0x31 [0090.675] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Windows\\Sqm\\Manifest\\", nBufferLength=0x105, lpBuffer=0x31e1a8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Microsoft\\Windows\\Sqm\\Manifest\\", lpFilePart=0x0) returned 0x32 [0090.675] FindFirstFileW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Windows\\Sqm\\Manifest\\*", lpFindFileData=0x31e3f4 | out: lpFindFileData=0x31e3f4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x60ae73a0, ftCreationTime.dwHighDateTime=0x1d2de2a, ftLastAccessTime.dwLowDateTime=0x60ae73a0, ftLastAccessTime.dwHighDateTime=0x1d2de2a, ftLastWriteTime.dwLowDateTime=0x60ae73a0, ftLastWriteTime.dwHighDateTime=0x1d2de2a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x381c80 [0090.675] FindNextFileW (in: hFindFile=0x381c80, lpFindFileData=0x31e404 | out: lpFindFileData=0x31e404*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x60ae73a0, ftCreationTime.dwHighDateTime=0x1d2de2a, ftLastAccessTime.dwLowDateTime=0x60ae73a0, ftLastAccessTime.dwHighDateTime=0x1d2de2a, ftLastWriteTime.dwLowDateTime=0x60ae73a0, ftLastWriteTime.dwHighDateTime=0x1d2de2a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0090.675] FindNextFileW (in: hFindFile=0x381c80, lpFindFileData=0x31e404 | out: lpFindFileData=0x31e404*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x60ae73a0, ftCreationTime.dwHighDateTime=0x1d2de2a, ftLastAccessTime.dwLowDateTime=0x60ae73a0, ftLastAccessTime.dwHighDateTime=0x1d2de2a, ftLastWriteTime.dwLowDateTime=0x60ae73a0, ftLastWriteTime.dwHighDateTime=0x1d2de2a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 0 [0090.675] FindClose (in: hFindFile=0x381c80 | out: hFindFile=0x381c80) returned 1 [0090.675] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e68c) returned 1 [0090.675] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e698) returned 1 [0090.675] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e6cc) returned 1 [0090.675] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Windows\\Sqm\\Sessions", nBufferLength=0x105, lpBuffer=0x31e1d4, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Microsoft\\Windows\\Sqm\\Sessions", lpFilePart=0x0) returned 0x31 [0090.675] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Windows\\Sqm\\Sessions\\", nBufferLength=0x105, lpBuffer=0x31e1a8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Microsoft\\Windows\\Sqm\\Sessions\\", lpFilePart=0x0) returned 0x32 [0090.675] FindFirstFileW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Windows\\Sqm\\Sessions\\*", lpFindFileData=0x31e3f4 | out: lpFindFileData=0x31e3f4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x60ae73a0, ftCreationTime.dwHighDateTime=0x1d2de2a, ftLastAccessTime.dwLowDateTime=0x60ae73a0, ftLastAccessTime.dwHighDateTime=0x1d2de2a, ftLastWriteTime.dwLowDateTime=0x60ae73a0, ftLastWriteTime.dwHighDateTime=0x1d2de2a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x381c80 [0090.676] FindNextFileW (in: hFindFile=0x381c80, lpFindFileData=0x31e404 | out: lpFindFileData=0x31e404*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x60ae73a0, ftCreationTime.dwHighDateTime=0x1d2de2a, ftLastAccessTime.dwLowDateTime=0x60ae73a0, ftLastAccessTime.dwHighDateTime=0x1d2de2a, ftLastWriteTime.dwLowDateTime=0x60ae73a0, ftLastWriteTime.dwHighDateTime=0x1d2de2a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0090.676] FindNextFileW (in: hFindFile=0x381c80, lpFindFileData=0x31e404 | out: lpFindFileData=0x31e404*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x60ae73a0, ftCreationTime.dwHighDateTime=0x1d2de2a, ftLastAccessTime.dwLowDateTime=0x60ae73a0, ftLastAccessTime.dwHighDateTime=0x1d2de2a, ftLastWriteTime.dwLowDateTime=0x60ae73a0, ftLastWriteTime.dwHighDateTime=0x1d2de2a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 0 [0090.676] FindClose (in: hFindFile=0x381c80 | out: hFindFile=0x381c80) returned 1 [0090.676] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e68c) returned 1 [0090.676] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e698) returned 1 [0090.676] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e6cc) returned 1 [0090.676] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Windows\\Sqm\\Sessions", nBufferLength=0x105, lpBuffer=0x31e1d4, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Microsoft\\Windows\\Sqm\\Sessions", lpFilePart=0x0) returned 0x31 [0090.676] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Windows\\Sqm\\Sessions\\", nBufferLength=0x105, lpBuffer=0x31e1a8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Microsoft\\Windows\\Sqm\\Sessions\\", lpFilePart=0x0) returned 0x32 [0090.676] FindFirstFileW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Windows\\Sqm\\Sessions\\*", lpFindFileData=0x31e3f4 | out: lpFindFileData=0x31e3f4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x60ae73a0, ftCreationTime.dwHighDateTime=0x1d2de2a, ftLastAccessTime.dwLowDateTime=0x60ae73a0, ftLastAccessTime.dwHighDateTime=0x1d2de2a, ftLastWriteTime.dwLowDateTime=0x60ae73a0, ftLastWriteTime.dwHighDateTime=0x1d2de2a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x381c80 [0090.676] FindNextFileW (in: hFindFile=0x381c80, lpFindFileData=0x31e404 | out: lpFindFileData=0x31e404*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x60ae73a0, ftCreationTime.dwHighDateTime=0x1d2de2a, ftLastAccessTime.dwLowDateTime=0x60ae73a0, ftLastAccessTime.dwHighDateTime=0x1d2de2a, ftLastWriteTime.dwLowDateTime=0x60ae73a0, ftLastWriteTime.dwHighDateTime=0x1d2de2a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0090.677] FindNextFileW (in: hFindFile=0x381c80, lpFindFileData=0x31e404 | out: lpFindFileData=0x31e404*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x60ae73a0, ftCreationTime.dwHighDateTime=0x1d2de2a, ftLastAccessTime.dwLowDateTime=0x60ae73a0, ftLastAccessTime.dwHighDateTime=0x1d2de2a, ftLastWriteTime.dwLowDateTime=0x60ae73a0, ftLastWriteTime.dwHighDateTime=0x1d2de2a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 0 [0090.677] FindClose (in: hFindFile=0x381c80 | out: hFindFile=0x381c80) returned 1 [0090.677] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e68c) returned 1 [0090.677] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e698) returned 1 [0090.677] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e6cc) returned 1 [0090.677] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Windows\\Sqm\\Upload", nBufferLength=0x105, lpBuffer=0x31e1d4, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Microsoft\\Windows\\Sqm\\Upload", lpFilePart=0x0) returned 0x2f [0090.677] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Windows\\Sqm\\Upload\\", nBufferLength=0x105, lpBuffer=0x31e1a8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Microsoft\\Windows\\Sqm\\Upload\\", lpFilePart=0x0) returned 0x30 [0090.677] FindFirstFileW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Windows\\Sqm\\Upload\\*", lpFindFileData=0x31e3f4 | out: lpFindFileData=0x31e3f4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x60ae73a0, ftCreationTime.dwHighDateTime=0x1d2de2a, ftLastAccessTime.dwLowDateTime=0x60ae73a0, ftLastAccessTime.dwHighDateTime=0x1d2de2a, ftLastWriteTime.dwLowDateTime=0x60ae73a0, ftLastWriteTime.dwHighDateTime=0x1d2de2a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x381c80 [0090.677] FindNextFileW (in: hFindFile=0x381c80, lpFindFileData=0x31e404 | out: lpFindFileData=0x31e404*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x60ae73a0, ftCreationTime.dwHighDateTime=0x1d2de2a, ftLastAccessTime.dwLowDateTime=0x60ae73a0, ftLastAccessTime.dwHighDateTime=0x1d2de2a, ftLastWriteTime.dwLowDateTime=0x60ae73a0, ftLastWriteTime.dwHighDateTime=0x1d2de2a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0090.677] FindNextFileW (in: hFindFile=0x381c80, lpFindFileData=0x31e404 | out: lpFindFileData=0x31e404*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x60ae73a0, ftCreationTime.dwHighDateTime=0x1d2de2a, ftLastAccessTime.dwLowDateTime=0x60ae73a0, ftLastAccessTime.dwHighDateTime=0x1d2de2a, ftLastWriteTime.dwLowDateTime=0x60ae73a0, ftLastWriteTime.dwHighDateTime=0x1d2de2a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 0 [0090.677] FindClose (in: hFindFile=0x381c80 | out: hFindFile=0x381c80) returned 1 [0090.677] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e68c) returned 1 [0090.677] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e698) returned 1 [0090.678] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e6cc) returned 1 [0090.678] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Windows\\Sqm\\Upload", nBufferLength=0x105, lpBuffer=0x31e1d4, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Microsoft\\Windows\\Sqm\\Upload", lpFilePart=0x0) returned 0x2f [0090.678] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Windows\\Sqm\\Upload\\", nBufferLength=0x105, lpBuffer=0x31e1a8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Microsoft\\Windows\\Sqm\\Upload\\", lpFilePart=0x0) returned 0x30 [0090.678] FindFirstFileW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Windows\\Sqm\\Upload\\*", lpFindFileData=0x31e3f4 | out: lpFindFileData=0x31e3f4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x60ae73a0, ftCreationTime.dwHighDateTime=0x1d2de2a, ftLastAccessTime.dwLowDateTime=0x60ae73a0, ftLastAccessTime.dwHighDateTime=0x1d2de2a, ftLastWriteTime.dwLowDateTime=0x60ae73a0, ftLastWriteTime.dwHighDateTime=0x1d2de2a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x381c80 [0090.678] FindNextFileW (in: hFindFile=0x381c80, lpFindFileData=0x31e404 | out: lpFindFileData=0x31e404*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x60ae73a0, ftCreationTime.dwHighDateTime=0x1d2de2a, ftLastAccessTime.dwLowDateTime=0x60ae73a0, ftLastAccessTime.dwHighDateTime=0x1d2de2a, ftLastWriteTime.dwLowDateTime=0x60ae73a0, ftLastWriteTime.dwHighDateTime=0x1d2de2a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0090.678] FindNextFileW (in: hFindFile=0x381c80, lpFindFileData=0x31e404 | out: lpFindFileData=0x31e404*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x60ae73a0, ftCreationTime.dwHighDateTime=0x1d2de2a, ftLastAccessTime.dwLowDateTime=0x60ae73a0, ftLastAccessTime.dwHighDateTime=0x1d2de2a, ftLastWriteTime.dwLowDateTime=0x60ae73a0, ftLastWriteTime.dwHighDateTime=0x1d2de2a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 0 [0090.678] FindClose (in: hFindFile=0x381c80 | out: hFindFile=0x381c80) returned 1 [0090.678] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e68c) returned 1 [0090.678] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e698) returned 1 [0090.678] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e744) returned 1 [0090.678] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu", nBufferLength=0x105, lpBuffer=0x31e24c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu", lpFilePart=0x0) returned 0x2f [0090.678] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\", nBufferLength=0x105, lpBuffer=0x31e220, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\", lpFilePart=0x0) returned 0x30 [0090.678] FindFirstFileW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\*", lpFindFileData=0x31e46c | out: lpFindFileData=0x31e46c*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0xfd9dbcac, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x1cc35f15, ftLastAccessTime.dwHighDateTime=0x1ca0440, ftLastWriteTime.dwLowDateTime=0x1cc35f15, ftLastWriteTime.dwHighDateTime=0x1ca0440, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x381c80 [0090.679] FindNextFileW (in: hFindFile=0x381c80, lpFindFileData=0x31e47c | out: lpFindFileData=0x31e47c*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0xfd9dbcac, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x1cc35f15, ftLastAccessTime.dwHighDateTime=0x1ca0440, ftLastWriteTime.dwLowDateTime=0x1cc35f15, ftLastWriteTime.dwHighDateTime=0x1ca0440, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0090.679] FindNextFileW (in: hFindFile=0x381c80, lpFindFileData=0x31e47c | out: lpFindFileData=0x31e47c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1cc35f15, ftCreationTime.dwHighDateTime=0x1ca0440, ftLastAccessTime.dwLowDateTime=0x1cc35f15, ftLastAccessTime.dwHighDateTime=0x1ca0440, ftLastWriteTime.dwLowDateTime=0x8dd40a0, ftLastWriteTime.dwHighDateTime=0x1d6eb7f, nFileSizeHigh=0x0, nFileSizeLow=0x510, dwReserved0=0x0, dwReserved1=0x0, cFileName="Default Programs.lnk", cAlternateFileName="DEFAUL~1.LNK")) returned 1 [0090.679] FindNextFileW (in: hFindFile=0x381c80, lpFindFileData=0x31e47c | out: lpFindFileData=0x31e47c*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0x7f5a4e15, ftCreationTime.dwHighDateTime=0x1ca043e, ftLastAccessTime.dwLowDateTime=0x7f5a4e15, ftLastAccessTime.dwHighDateTime=0x1ca043e, ftLastWriteTime.dwLowDateTime=0x1cc35f15, ftLastWriteTime.dwHighDateTime=0x1ca0440, nFileSizeHigh=0x0, nFileSizeLow=0x1ba, dwReserved0=0x0, dwReserved1=0x0, cFileName="desktop.ini", cAlternateFileName="")) returned 1 [0090.679] FindNextFileW (in: hFindFile=0x381c80, lpFindFileData=0x31e47c | out: lpFindFileData=0x31e47c*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0xfd9dbcac, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x78038410, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x78038410, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Programs", cAlternateFileName="")) returned 1 [0090.679] FindNextFileW (in: hFindFile=0x381c80, lpFindFileData=0x31e47c | out: lpFindFileData=0x31e47c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7f57ecb5, ftCreationTime.dwHighDateTime=0x1ca043e, ftLastAccessTime.dwLowDateTime=0x7f57ecb5, ftLastAccessTime.dwHighDateTime=0x1ca043e, ftLastWriteTime.dwLowDateTime=0x8e6c620, ftLastWriteTime.dwHighDateTime=0x1d6eb7f, nFileSizeHigh=0x0, nFileSizeLow=0x500, dwReserved0=0x0, dwReserved1=0x0, cFileName="Windows Update.lnk", cAlternateFileName="WINDOW~1.LNK")) returned 1 [0090.679] FindNextFileW (in: hFindFile=0x381c80, lpFindFileData=0x31e47c | out: lpFindFileData=0x31e47c*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0090.679] FindClose (in: hFindFile=0x381c80 | out: hFindFile=0x381c80) returned 1 [0090.679] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e704) returned 1 [0090.679] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e710) returned 1 [0090.679] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e744) returned 1 [0090.680] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu", nBufferLength=0x105, lpBuffer=0x31e24c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu", lpFilePart=0x0) returned 0x2f [0090.680] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\", nBufferLength=0x105, lpBuffer=0x31e220, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\", lpFilePart=0x0) returned 0x30 [0090.680] FindFirstFileW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\*", lpFindFileData=0x31e46c | out: lpFindFileData=0x31e46c*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0xfd9dbcac, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x1cc35f15, ftLastAccessTime.dwHighDateTime=0x1ca0440, ftLastWriteTime.dwLowDateTime=0x1cc35f15, ftLastWriteTime.dwHighDateTime=0x1ca0440, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x381c80 [0090.680] FindNextFileW (in: hFindFile=0x381c80, lpFindFileData=0x31e47c | out: lpFindFileData=0x31e47c*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0xfd9dbcac, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x1cc35f15, ftLastAccessTime.dwHighDateTime=0x1ca0440, ftLastWriteTime.dwLowDateTime=0x1cc35f15, ftLastWriteTime.dwHighDateTime=0x1ca0440, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0090.680] FindNextFileW (in: hFindFile=0x381c80, lpFindFileData=0x31e47c | out: lpFindFileData=0x31e47c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1cc35f15, ftCreationTime.dwHighDateTime=0x1ca0440, ftLastAccessTime.dwLowDateTime=0x1cc35f15, ftLastAccessTime.dwHighDateTime=0x1ca0440, ftLastWriteTime.dwLowDateTime=0x8dd40a0, ftLastWriteTime.dwHighDateTime=0x1d6eb7f, nFileSizeHigh=0x0, nFileSizeLow=0x510, dwReserved0=0x0, dwReserved1=0x0, cFileName="Default Programs.lnk", cAlternateFileName="DEFAUL~1.LNK")) returned 1 [0090.680] FindNextFileW (in: hFindFile=0x381c80, lpFindFileData=0x31e47c | out: lpFindFileData=0x31e47c*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0x7f5a4e15, ftCreationTime.dwHighDateTime=0x1ca043e, ftLastAccessTime.dwLowDateTime=0x7f5a4e15, ftLastAccessTime.dwHighDateTime=0x1ca043e, ftLastWriteTime.dwLowDateTime=0x1cc35f15, ftLastWriteTime.dwHighDateTime=0x1ca0440, nFileSizeHigh=0x0, nFileSizeLow=0x1ba, dwReserved0=0x0, dwReserved1=0x0, cFileName="desktop.ini", cAlternateFileName="")) returned 1 [0090.680] FindNextFileW (in: hFindFile=0x381c80, lpFindFileData=0x31e47c | out: lpFindFileData=0x31e47c*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0xfd9dbcac, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x78038410, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x78038410, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Programs", cAlternateFileName="")) returned 1 [0090.680] FindNextFileW (in: hFindFile=0x381c80, lpFindFileData=0x31e47c | out: lpFindFileData=0x31e47c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7f57ecb5, ftCreationTime.dwHighDateTime=0x1ca043e, ftLastAccessTime.dwLowDateTime=0x7f57ecb5, ftLastAccessTime.dwHighDateTime=0x1ca043e, ftLastWriteTime.dwLowDateTime=0x8e6c620, ftLastWriteTime.dwHighDateTime=0x1d6eb7f, nFileSizeHigh=0x0, nFileSizeLow=0x500, dwReserved0=0x0, dwReserved1=0x0, cFileName="Windows Update.lnk", cAlternateFileName="WINDOW~1.LNK")) returned 1 [0090.680] FindNextFileW (in: hFindFile=0x381c80, lpFindFileData=0x31e47c | out: lpFindFileData=0x31e47c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7f57ecb5, ftCreationTime.dwHighDateTime=0x1ca043e, ftLastAccessTime.dwLowDateTime=0x7f57ecb5, ftLastAccessTime.dwHighDateTime=0x1ca043e, ftLastWriteTime.dwLowDateTime=0x8e6c620, ftLastWriteTime.dwHighDateTime=0x1d6eb7f, nFileSizeHigh=0x0, nFileSizeLow=0x500, dwReserved0=0x0, dwReserved1=0x0, cFileName="Windows Update.lnk", cAlternateFileName="WINDOW~1.LNK")) returned 0 [0090.681] FindClose (in: hFindFile=0x381c80 | out: hFindFile=0x381c80) returned 1 [0090.681] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e704) returned 1 [0090.681] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e710) returned 1 [0090.681] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Default Programs.lnk", nBufferLength=0x105, lpBuffer=0x31e11c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Default Programs.lnk", lpFilePart=0x0) returned 0x44 [0090.681] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e610) returned 1 [0090.681] CreateFileW (lpFileName="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Default Programs.lnk" (normalized: "c:\\users\\all users\\microsoft\\windows\\start menu\\default programs.lnk"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x178 [0090.681] GetFileType (hFile=0x178) returned 0x1 [0090.681] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e60c) returned 1 [0090.681] GetFileType (hFile=0x178) returned 0x1 [0090.681] GetFileSize (in: hFile=0x178, lpFileSizeHigh=0x31e718 | out: lpFileSizeHigh=0x31e718*=0x0) returned 0x510 [0090.681] ReadFile (in: hFile=0x178, lpBuffer=0x26ccfbc, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x31e6c4, lpOverlapped=0x0 | out: lpBuffer=0x26ccfbc*, lpNumberOfBytesRead=0x31e6c4*=0x510, lpOverlapped=0x0) returned 1 [0090.682] CloseHandle (hObject=0x178) returned 1 [0090.695] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Default Programs.lnk", nBufferLength=0x105, lpBuffer=0x31e108, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Default Programs.lnk", lpFilePart=0x0) returned 0x44 [0090.695] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e5fc) returned 1 [0090.695] CreateFileW (lpFileName="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Default Programs.lnk" (normalized: "c:\\users\\all users\\microsoft\\windows\\start menu\\default programs.lnk"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x178 [0090.699] GetFileType (hFile=0x178) returned 0x1 [0090.699] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e5f8) returned 1 [0090.699] GetFileType (hFile=0x178) returned 0x1 [0090.699] WriteFile (in: hFile=0x178, lpBuffer=0x271c888*, nNumberOfBytesToWrite=0x520, lpNumberOfBytesWritten=0x31e68c, lpOverlapped=0x0 | out: lpBuffer=0x271c888*, lpNumberOfBytesWritten=0x31e68c*=0x520, lpOverlapped=0x0) returned 1 [0090.700] CloseHandle (hObject=0x178) returned 1 [0090.700] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Default Programs.lnk", nBufferLength=0x105, lpBuffer=0x31e23c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Default Programs.lnk", lpFilePart=0x0) returned 0x44 [0090.700] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Default Programs.lnk", nBufferLength=0x105, lpBuffer=0x31e23c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Default Programs.lnk", lpFilePart=0x0) returned 0x44 [0090.700] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e69c) returned 1 [0090.700] GetFileAttributesExW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Default Programs.lnk" (normalized: "c:\\users\\all users\\microsoft\\windows\\start menu\\default programs.lnk"), fInfoLevelId=0x0, lpFileInformation=0x31e718 | out: lpFileInformation=0x31e718*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1cc35f15, ftCreationTime.dwHighDateTime=0x1ca0440, ftLastAccessTime.dwLowDateTime=0x1cc35f15, ftLastAccessTime.dwHighDateTime=0x1ca0440, ftLastWriteTime.dwLowDateTime=0x19821de0, ftLastWriteTime.dwHighDateTime=0x1d6eb7f, nFileSizeHigh=0x0, nFileSizeLow=0x520)) returned 1 [0090.700] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e698) returned 1 [0090.700] MoveFileW (lpExistingFileName="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Default Programs.lnk" (normalized: "c:\\users\\all users\\microsoft\\windows\\start menu\\default programs.lnk"), lpNewFileName="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Default Programs.lnk" (normalized: "c:\\users\\all users\\microsoft\\windows\\start menu\\default programs.lnk")) returned 1 [0090.701] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Windows Update.lnk", nBufferLength=0x105, lpBuffer=0x31e11c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Windows Update.lnk", lpFilePart=0x0) returned 0x42 [0090.701] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e610) returned 1 [0090.701] CreateFileW (lpFileName="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Windows Update.lnk" (normalized: "c:\\users\\all users\\microsoft\\windows\\start menu\\windows update.lnk"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x178 [0090.701] GetFileType (hFile=0x178) returned 0x1 [0090.701] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e60c) returned 1 [0090.701] GetFileType (hFile=0x178) returned 0x1 [0090.701] GetFileSize (in: hFile=0x178, lpFileSizeHigh=0x31e718 | out: lpFileSizeHigh=0x31e718*=0x0) returned 0x500 [0090.701] ReadFile (in: hFile=0x178, lpBuffer=0x271e024, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x31e6c4, lpOverlapped=0x0 | out: lpBuffer=0x271e024*, lpNumberOfBytesRead=0x31e6c4*=0x500, lpOverlapped=0x0) returned 1 [0090.702] CloseHandle (hObject=0x178) returned 1 [0090.715] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Windows Update.lnk", nBufferLength=0x105, lpBuffer=0x31e108, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Windows Update.lnk", lpFilePart=0x0) returned 0x42 [0090.715] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e5fc) returned 1 [0090.715] CreateFileW (lpFileName="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Windows Update.lnk" (normalized: "c:\\users\\all users\\microsoft\\windows\\start menu\\windows update.lnk"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x178 [0090.717] GetFileType (hFile=0x178) returned 0x1 [0090.717] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e5f8) returned 1 [0090.717] GetFileType (hFile=0x178) returned 0x1 [0090.717] WriteFile (in: hFile=0x178, lpBuffer=0x276d898*, nNumberOfBytesToWrite=0x510, lpNumberOfBytesWritten=0x31e68c, lpOverlapped=0x0 | out: lpBuffer=0x276d898*, lpNumberOfBytesWritten=0x31e68c*=0x510, lpOverlapped=0x0) returned 1 [0090.719] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Windows Update.lnk", nBufferLength=0x105, lpBuffer=0x31e23c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Windows Update.lnk", lpFilePart=0x0) returned 0x42 [0090.719] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Windows Update.lnk", nBufferLength=0x105, lpBuffer=0x31e23c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Windows Update.lnk", lpFilePart=0x0) returned 0x42 [0090.719] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e69c) returned 1 [0090.719] GetFileAttributesExW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Windows Update.lnk" (normalized: "c:\\users\\all users\\microsoft\\windows\\start menu\\windows update.lnk"), fInfoLevelId=0x0, lpFileInformation=0x31e718 | out: lpFileInformation=0x31e718*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7f57ecb5, ftCreationTime.dwHighDateTime=0x1ca043e, ftLastAccessTime.dwLowDateTime=0x7f57ecb5, ftLastAccessTime.dwHighDateTime=0x1ca043e, ftLastWriteTime.dwLowDateTime=0x19847f40, ftLastWriteTime.dwHighDateTime=0x1d6eb7f, nFileSizeHigh=0x0, nFileSizeLow=0x510)) returned 1 [0090.719] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e698) returned 1 [0090.719] MoveFileW (lpExistingFileName="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Windows Update.lnk" (normalized: "c:\\users\\all users\\microsoft\\windows\\start menu\\windows update.lnk"), lpNewFileName="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Windows Update.lnk" (normalized: "c:\\users\\all users\\microsoft\\windows\\start menu\\windows update.lnk")) returned 1 [0090.720] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e6cc) returned 1 [0090.720] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Programs", nBufferLength=0x105, lpBuffer=0x31e1d4, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Programs", lpFilePart=0x0) returned 0x38 [0090.720] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Programs\\", nBufferLength=0x105, lpBuffer=0x31e1a8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Programs\\", lpFilePart=0x0) returned 0x39 [0090.720] FindFirstFileW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Programs\\*", lpFindFileData=0x31e3f4 | out: lpFindFileData=0x31e3f4*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0xfd9dbcac, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x78038410, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x78038410, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x381fc0 [0090.720] FindNextFileW (in: hFindFile=0x381fc0, lpFindFileData=0x31e404 | out: lpFindFileData=0x31e404*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0xfd9dbcac, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x78038410, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x78038410, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0090.720] FindNextFileW (in: hFindFile=0x381fc0, lpFindFileData=0x31e404 | out: lpFindFileData=0x31e404*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0xfd9dbcac, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x81caf400, ftLastAccessTime.dwHighDateTime=0x1d2de2a, ftLastWriteTime.dwLowDateTime=0x8246bb80, ftLastWriteTime.dwHighDateTime=0x1d2de2a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Accessories", cAlternateFileName="ACCESS~1")) returned 1 [0090.720] FindNextFileW (in: hFindFile=0x381fc0, lpFindFileData=0x31e404 | out: lpFindFileData=0x31e404*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x7fffaad0, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x81c3cfe0, ftLastAccessTime.dwHighDateTime=0x1d2de2a, ftLastWriteTime.dwLowDateTime=0x81c3cfe0, ftLastWriteTime.dwHighDateTime=0x1d2de2a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Administrative Tools", cAlternateFileName="ADMINI~1")) returned 1 [0090.720] FindNextFileW (in: hFindFile=0x381fc0, lpFindFileData=0x31e404 | out: lpFindFileData=0x31e404*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x83c01860, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x83c01860, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x8f2ad00, ftLastWriteTime.dwHighDateTime=0x1d6eb7f, nFileSizeHigh=0x0, nFileSizeLow=0x990, dwReserved0=0x0, dwReserved1=0x0, cFileName="Adobe Reader X.lnk", cAlternateFileName="ADOBER~1.LNK")) returned 1 [0090.721] FindNextFileW (in: hFindFile=0x381fc0, lpFindFileData=0x31e404 | out: lpFindFileData=0x31e404*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0x28305c4e, ftCreationTime.dwHighDateTime=0x1ca043f, ftLastAccessTime.dwLowDateTime=0x28305c4e, ftLastAccessTime.dwHighDateTime=0x1ca043f, ftLastWriteTime.dwLowDateTime=0x824ddfa0, ftLastWriteTime.dwHighDateTime=0x1d2de2a, nFileSizeHigh=0x0, nFileSizeLow=0x46a, dwReserved0=0x0, dwReserved1=0x0, cFileName="desktop.ini", cAlternateFileName="")) returned 1 [0090.721] FindNextFileW (in: hFindFile=0x381fc0, lpFindFileData=0x31e404 | out: lpFindFileData=0x31e404*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x80020c30, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0xa224bfc3, ftLastAccessTime.dwHighDateTime=0x1cbf8eb, ftLastWriteTime.dwLowDateTime=0xa224bfc3, ftLastWriteTime.dwHighDateTime=0x1cbf8eb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Games", cAlternateFileName="")) returned 1 [0090.721] FindNextFileW (in: hFindFile=0x381fc0, lpFindFileData=0x31e404 | out: lpFindFileData=0x31e404*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7df47e00, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x7df47e00, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x8f50e60, ftLastWriteTime.dwHighDateTime=0x1d6eb7f, nFileSizeHigh=0x0, nFileSizeLow=0x8e0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Google Chrome.lnk", cAlternateFileName="GOOGLE~1.LNK")) returned 1 [0090.721] FindNextFileW (in: hFindFile=0x381fc0, lpFindFileData=0x31e404 | out: lpFindFileData=0x31e404*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7577bc60, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x762ca4e0, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x762ca4e0, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Java", cAlternateFileName="")) returned 1 [0090.721] FindNextFileW (in: hFindFile=0x381fc0, lpFindFileData=0x31e404 | out: lpFindFileData=0x31e404*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0xfd9dbcac, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x8ab46fc5, ftLastAccessTime.dwHighDateTime=0x1ca043f, ftLastWriteTime.dwLowDateTime=0x8ab6d126, ftLastWriteTime.dwHighDateTime=0x1ca043f, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Maintenance", cAlternateFileName="MAINTE~1")) returned 1 [0090.721] FindNextFileW (in: hFindFile=0x381fc0, lpFindFileData=0x31e404 | out: lpFindFileData=0x31e404*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x824ddfa0, ftCreationTime.dwHighDateTime=0x1d2de2a, ftLastAccessTime.dwLowDateTime=0x824ddfa0, ftLastAccessTime.dwHighDateTime=0x1d2de2a, ftLastWriteTime.dwLowDateTime=0x8f76fc0, ftLastWriteTime.dwHighDateTime=0x1d6eb7f, nFileSizeHigh=0x0, nFileSizeLow=0x550, dwReserved0=0x0, dwReserved1=0x0, cFileName="Media Center.lnk", cAlternateFileName="MEDIAC~1.LNK")) returned 1 [0090.721] FindNextFileW (in: hFindFile=0x381fc0, lpFindFileData=0x31e404 | out: lpFindFileData=0x31e404*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x77f53bd0, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0xc11c60a0, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0xc11c60a0, ftLastWriteTime.dwHighDateTime=0x1d305f1, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft Office", cAlternateFileName="MICROS~1")) returned 1 [0090.721] FindNextFileW (in: hFindFile=0x381fc0, lpFindFileData=0x31e404 | out: lpFindFileData=0x31e404*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb09bd780, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xb09e38e0, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0x8f9d120, ftLastWriteTime.dwHighDateTime=0x1d6eb7f, nFileSizeHigh=0x0, nFileSizeLow=0x4a0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Mozilla Firefox.lnk", cAlternateFileName="MOZILL~1.LNK")) returned 1 [0090.722] FindNextFileW (in: hFindFile=0x381fc0, lpFindFileData=0x31e404 | out: lpFindFileData=0x31e404*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x78038410, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x78038410, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x78038410, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="SharePoint", cAlternateFileName="SHAREP~1")) returned 1 [0090.722] FindNextFileW (in: hFindFile=0x381fc0, lpFindFileData=0x31e404 | out: lpFindFileData=0x31e404*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8a233bd5, ftCreationTime.dwHighDateTime=0x1ca043f, ftLastAccessTime.dwLowDateTime=0x8a233bd5, ftLastAccessTime.dwHighDateTime=0x1ca043f, ftLastWriteTime.dwLowDateTime=0x8fe93e0, ftLastWriteTime.dwHighDateTime=0x1d6eb7f, nFileSizeHigh=0x0, nFileSizeLow=0x540, dwReserved0=0x0, dwReserved1=0x0, cFileName="Sidebar.lnk", cAlternateFileName="")) returned 1 [0090.722] FindNextFileW (in: hFindFile=0x381fc0, lpFindFileData=0x31e404 | out: lpFindFileData=0x31e404*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0xfd9dbcac, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x2832bdaf, ftLastAccessTime.dwHighDateTime=0x1ca043f, ftLastWriteTime.dwLowDateTime=0x288ad099, ftLastWriteTime.dwHighDateTime=0x1ca043f, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Startup", cAlternateFileName="")) returned 1 [0090.722] FindNextFileW (in: hFindFile=0x381fc0, lpFindFileData=0x31e404 | out: lpFindFileData=0x31e404*(dwFileAttributes=0x13, ftCreationTime.dwLowDateTime=0x9182055d, ftCreationTime.dwHighDateTime=0x1cbf8eb, ftLastAccessTime.dwLowDateTime=0x9182055d, ftLastAccessTime.dwHighDateTime=0x1cbf8eb, ftLastWriteTime.dwLowDateTime=0x9182055d, ftLastWriteTime.dwHighDateTime=0x1cbf8eb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Tablet PC", cAlternateFileName="TABLET~1")) returned 1 [0090.722] FindNextFileW (in: hFindFile=0x381fc0, lpFindFileData=0x31e404 | out: lpFindFileData=0x31e404*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8b186991, ftCreationTime.dwHighDateTime=0x1ca043f, ftLastAccessTime.dwLowDateTime=0x8b186991, ftLastAccessTime.dwHighDateTime=0x1ca043f, ftLastWriteTime.dwLowDateTime=0x905b800, ftLastWriteTime.dwHighDateTime=0x1d6eb7f, nFileSizeHigh=0x0, nFileSizeLow=0x550, dwReserved0=0x0, dwReserved1=0x0, cFileName="Windows Anytime Upgrade.lnk", cAlternateFileName="WINDOW~3.LNK")) returned 1 [0090.722] FindNextFileW (in: hFindFile=0x381fc0, lpFindFileData=0x31e404 | out: lpFindFileData=0x31e404*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x82491ce0, ftCreationTime.dwHighDateTime=0x1d2de2a, ftLastAccessTime.dwLowDateTime=0x82491ce0, ftLastAccessTime.dwHighDateTime=0x1d2de2a, ftLastWriteTime.dwLowDateTime=0x90a7ac0, ftLastWriteTime.dwHighDateTime=0x1d6eb7f, nFileSizeHigh=0x0, nFileSizeLow=0x530, dwReserved0=0x0, dwReserved1=0x0, cFileName="Windows DVD Maker.lnk", cAlternateFileName="WINDOW~4.LNK")) returned 1 [0090.722] FindNextFileW (in: hFindFile=0x381fc0, lpFindFileData=0x31e404 | out: lpFindFileData=0x31e404*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3d7b6b82, ftCreationTime.dwHighDateTime=0x1ca043f, ftLastAccessTime.dwLowDateTime=0x3d7b6b82, ftLastAccessTime.dwHighDateTime=0x1ca043f, ftLastWriteTime.dwLowDateTime=0x90cdc20, ftLastWriteTime.dwHighDateTime=0x1d6eb7f, nFileSizeHigh=0x0, nFileSizeLow=0x4c0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Windows Fax and Scan.lnk", cAlternateFileName="WINDOW~1.LNK")) returned 1 [0090.722] FindNextFileW (in: hFindFile=0x381fc0, lpFindFileData=0x31e404 | out: lpFindFileData=0x31e404*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8945dbdb, ftCreationTime.dwHighDateTime=0x1ca043f, ftLastAccessTime.dwLowDateTime=0x8945dbdb, ftLastAccessTime.dwHighDateTime=0x1ca043f, ftLastWriteTime.dwLowDateTime=0x90f3d80, ftLastWriteTime.dwHighDateTime=0x1d6eb7f, nFileSizeHigh=0x0, nFileSizeLow=0x610, dwReserved0=0x0, dwReserved1=0x0, cFileName="Windows Media Player.lnk", cAlternateFileName="WINDOW~2.LNK")) returned 1 [0090.723] FindNextFileW (in: hFindFile=0x381fc0, lpFindFileData=0x31e404 | out: lpFindFileData=0x31e404*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8aa62784, ftCreationTime.dwHighDateTime=0x1ca043f, ftLastAccessTime.dwLowDateTime=0x8aa62784, ftLastAccessTime.dwHighDateTime=0x1ca043f, ftLastWriteTime.dwLowDateTime=0x9119ee0, ftLastWriteTime.dwHighDateTime=0x1d6eb7f, nFileSizeHigh=0x0, nFileSizeLow=0x4e0, dwReserved0=0x0, dwReserved1=0x0, cFileName="XPS Viewer.lnk", cAlternateFileName="XPSVIE~1.LNK")) returned 1 [0090.723] FindNextFileW (in: hFindFile=0x381fc0, lpFindFileData=0x31e404 | out: lpFindFileData=0x31e404*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0090.723] FindClose (in: hFindFile=0x381fc0 | out: hFindFile=0x381fc0) returned 1 [0090.723] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e68c) returned 1 [0090.723] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e698) returned 1 [0090.723] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e6cc) returned 1 [0090.723] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Programs", nBufferLength=0x105, lpBuffer=0x31e1d4, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Programs", lpFilePart=0x0) returned 0x38 [0090.723] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Programs\\", nBufferLength=0x105, lpBuffer=0x31e1a8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Programs\\", lpFilePart=0x0) returned 0x39 [0090.723] FindFirstFileW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Programs\\*", lpFindFileData=0x31e3f4 | out: lpFindFileData=0x31e3f4*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0xfd9dbcac, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x78038410, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x78038410, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x381fc0 [0090.723] FindNextFileW (in: hFindFile=0x381fc0, lpFindFileData=0x31e404 | out: lpFindFileData=0x31e404*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0xfd9dbcac, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x78038410, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x78038410, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0090.723] FindNextFileW (in: hFindFile=0x381fc0, lpFindFileData=0x31e404 | out: lpFindFileData=0x31e404*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0xfd9dbcac, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x81caf400, ftLastAccessTime.dwHighDateTime=0x1d2de2a, ftLastWriteTime.dwLowDateTime=0x8246bb80, ftLastWriteTime.dwHighDateTime=0x1d2de2a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Accessories", cAlternateFileName="ACCESS~1")) returned 1 [0090.723] FindNextFileW (in: hFindFile=0x381fc0, lpFindFileData=0x31e404 | out: lpFindFileData=0x31e404*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x7fffaad0, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x81c3cfe0, ftLastAccessTime.dwHighDateTime=0x1d2de2a, ftLastWriteTime.dwLowDateTime=0x81c3cfe0, ftLastWriteTime.dwHighDateTime=0x1d2de2a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Administrative Tools", cAlternateFileName="ADMINI~1")) returned 1 [0090.724] FindNextFileW (in: hFindFile=0x381fc0, lpFindFileData=0x31e404 | out: lpFindFileData=0x31e404*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x83c01860, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x83c01860, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x8f2ad00, ftLastWriteTime.dwHighDateTime=0x1d6eb7f, nFileSizeHigh=0x0, nFileSizeLow=0x990, dwReserved0=0x0, dwReserved1=0x0, cFileName="Adobe Reader X.lnk", cAlternateFileName="ADOBER~1.LNK")) returned 1 [0090.724] FindNextFileW (in: hFindFile=0x381fc0, lpFindFileData=0x31e404 | out: lpFindFileData=0x31e404*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0x28305c4e, ftCreationTime.dwHighDateTime=0x1ca043f, ftLastAccessTime.dwLowDateTime=0x28305c4e, ftLastAccessTime.dwHighDateTime=0x1ca043f, ftLastWriteTime.dwLowDateTime=0x824ddfa0, ftLastWriteTime.dwHighDateTime=0x1d2de2a, nFileSizeHigh=0x0, nFileSizeLow=0x46a, dwReserved0=0x0, dwReserved1=0x0, cFileName="desktop.ini", cAlternateFileName="")) returned 1 [0090.724] FindNextFileW (in: hFindFile=0x381fc0, lpFindFileData=0x31e404 | out: lpFindFileData=0x31e404*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x80020c30, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0xa224bfc3, ftLastAccessTime.dwHighDateTime=0x1cbf8eb, ftLastWriteTime.dwLowDateTime=0xa224bfc3, ftLastWriteTime.dwHighDateTime=0x1cbf8eb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Games", cAlternateFileName="")) returned 1 [0090.724] FindNextFileW (in: hFindFile=0x381fc0, lpFindFileData=0x31e404 | out: lpFindFileData=0x31e404*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7df47e00, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x7df47e00, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x8f50e60, ftLastWriteTime.dwHighDateTime=0x1d6eb7f, nFileSizeHigh=0x0, nFileSizeLow=0x8e0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Google Chrome.lnk", cAlternateFileName="GOOGLE~1.LNK")) returned 1 [0090.724] FindNextFileW (in: hFindFile=0x381fc0, lpFindFileData=0x31e404 | out: lpFindFileData=0x31e404*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7577bc60, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x762ca4e0, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x762ca4e0, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Java", cAlternateFileName="")) returned 1 [0090.724] FindNextFileW (in: hFindFile=0x381fc0, lpFindFileData=0x31e404 | out: lpFindFileData=0x31e404*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0xfd9dbcac, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x8ab46fc5, ftLastAccessTime.dwHighDateTime=0x1ca043f, ftLastWriteTime.dwLowDateTime=0x8ab6d126, ftLastWriteTime.dwHighDateTime=0x1ca043f, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Maintenance", cAlternateFileName="MAINTE~1")) returned 1 [0090.724] FindNextFileW (in: hFindFile=0x381fc0, lpFindFileData=0x31e404 | out: lpFindFileData=0x31e404*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x824ddfa0, ftCreationTime.dwHighDateTime=0x1d2de2a, ftLastAccessTime.dwLowDateTime=0x824ddfa0, ftLastAccessTime.dwHighDateTime=0x1d2de2a, ftLastWriteTime.dwLowDateTime=0x8f76fc0, ftLastWriteTime.dwHighDateTime=0x1d6eb7f, nFileSizeHigh=0x0, nFileSizeLow=0x550, dwReserved0=0x0, dwReserved1=0x0, cFileName="Media Center.lnk", cAlternateFileName="MEDIAC~1.LNK")) returned 1 [0090.724] FindNextFileW (in: hFindFile=0x381fc0, lpFindFileData=0x31e404 | out: lpFindFileData=0x31e404*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x77f53bd0, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0xc11c60a0, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0xc11c60a0, ftLastWriteTime.dwHighDateTime=0x1d305f1, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft Office", cAlternateFileName="MICROS~1")) returned 1 [0090.725] FindNextFileW (in: hFindFile=0x381fc0, lpFindFileData=0x31e404 | out: lpFindFileData=0x31e404*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb09bd780, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xb09e38e0, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0x8f9d120, ftLastWriteTime.dwHighDateTime=0x1d6eb7f, nFileSizeHigh=0x0, nFileSizeLow=0x4a0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Mozilla Firefox.lnk", cAlternateFileName="MOZILL~1.LNK")) returned 1 [0090.725] FindNextFileW (in: hFindFile=0x381fc0, lpFindFileData=0x31e404 | out: lpFindFileData=0x31e404*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x78038410, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x78038410, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x78038410, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="SharePoint", cAlternateFileName="SHAREP~1")) returned 1 [0090.725] FindNextFileW (in: hFindFile=0x381fc0, lpFindFileData=0x31e404 | out: lpFindFileData=0x31e404*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8a233bd5, ftCreationTime.dwHighDateTime=0x1ca043f, ftLastAccessTime.dwLowDateTime=0x8a233bd5, ftLastAccessTime.dwHighDateTime=0x1ca043f, ftLastWriteTime.dwLowDateTime=0x8fe93e0, ftLastWriteTime.dwHighDateTime=0x1d6eb7f, nFileSizeHigh=0x0, nFileSizeLow=0x540, dwReserved0=0x0, dwReserved1=0x0, cFileName="Sidebar.lnk", cAlternateFileName="")) returned 1 [0090.725] FindNextFileW (in: hFindFile=0x381fc0, lpFindFileData=0x31e404 | out: lpFindFileData=0x31e404*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0xfd9dbcac, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x2832bdaf, ftLastAccessTime.dwHighDateTime=0x1ca043f, ftLastWriteTime.dwLowDateTime=0x288ad099, ftLastWriteTime.dwHighDateTime=0x1ca043f, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Startup", cAlternateFileName="")) returned 1 [0090.725] FindNextFileW (in: hFindFile=0x381fc0, lpFindFileData=0x31e404 | out: lpFindFileData=0x31e404*(dwFileAttributes=0x13, ftCreationTime.dwLowDateTime=0x9182055d, ftCreationTime.dwHighDateTime=0x1cbf8eb, ftLastAccessTime.dwLowDateTime=0x9182055d, ftLastAccessTime.dwHighDateTime=0x1cbf8eb, ftLastWriteTime.dwLowDateTime=0x9182055d, ftLastWriteTime.dwHighDateTime=0x1cbf8eb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Tablet PC", cAlternateFileName="TABLET~1")) returned 1 [0090.725] FindNextFileW (in: hFindFile=0x381fc0, lpFindFileData=0x31e404 | out: lpFindFileData=0x31e404*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8b186991, ftCreationTime.dwHighDateTime=0x1ca043f, ftLastAccessTime.dwLowDateTime=0x8b186991, ftLastAccessTime.dwHighDateTime=0x1ca043f, ftLastWriteTime.dwLowDateTime=0x905b800, ftLastWriteTime.dwHighDateTime=0x1d6eb7f, nFileSizeHigh=0x0, nFileSizeLow=0x550, dwReserved0=0x0, dwReserved1=0x0, cFileName="Windows Anytime Upgrade.lnk", cAlternateFileName="WINDOW~3.LNK")) returned 1 [0090.725] FindNextFileW (in: hFindFile=0x381fc0, lpFindFileData=0x31e404 | out: lpFindFileData=0x31e404*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x82491ce0, ftCreationTime.dwHighDateTime=0x1d2de2a, ftLastAccessTime.dwLowDateTime=0x82491ce0, ftLastAccessTime.dwHighDateTime=0x1d2de2a, ftLastWriteTime.dwLowDateTime=0x90a7ac0, ftLastWriteTime.dwHighDateTime=0x1d6eb7f, nFileSizeHigh=0x0, nFileSizeLow=0x530, dwReserved0=0x0, dwReserved1=0x0, cFileName="Windows DVD Maker.lnk", cAlternateFileName="WINDOW~4.LNK")) returned 1 [0090.725] FindNextFileW (in: hFindFile=0x381fc0, lpFindFileData=0x31e404 | out: lpFindFileData=0x31e404*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3d7b6b82, ftCreationTime.dwHighDateTime=0x1ca043f, ftLastAccessTime.dwLowDateTime=0x3d7b6b82, ftLastAccessTime.dwHighDateTime=0x1ca043f, ftLastWriteTime.dwLowDateTime=0x90cdc20, ftLastWriteTime.dwHighDateTime=0x1d6eb7f, nFileSizeHigh=0x0, nFileSizeLow=0x4c0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Windows Fax and Scan.lnk", cAlternateFileName="WINDOW~1.LNK")) returned 1 [0090.726] FindNextFileW (in: hFindFile=0x381fc0, lpFindFileData=0x31e404 | out: lpFindFileData=0x31e404*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8945dbdb, ftCreationTime.dwHighDateTime=0x1ca043f, ftLastAccessTime.dwLowDateTime=0x8945dbdb, ftLastAccessTime.dwHighDateTime=0x1ca043f, ftLastWriteTime.dwLowDateTime=0x90f3d80, ftLastWriteTime.dwHighDateTime=0x1d6eb7f, nFileSizeHigh=0x0, nFileSizeLow=0x610, dwReserved0=0x0, dwReserved1=0x0, cFileName="Windows Media Player.lnk", cAlternateFileName="WINDOW~2.LNK")) returned 1 [0090.726] FindNextFileW (in: hFindFile=0x381fc0, lpFindFileData=0x31e404 | out: lpFindFileData=0x31e404*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8aa62784, ftCreationTime.dwHighDateTime=0x1ca043f, ftLastAccessTime.dwLowDateTime=0x8aa62784, ftLastAccessTime.dwHighDateTime=0x1ca043f, ftLastWriteTime.dwLowDateTime=0x9119ee0, ftLastWriteTime.dwHighDateTime=0x1d6eb7f, nFileSizeHigh=0x0, nFileSizeLow=0x4e0, dwReserved0=0x0, dwReserved1=0x0, cFileName="XPS Viewer.lnk", cAlternateFileName="XPSVIE~1.LNK")) returned 1 [0090.726] FindNextFileW (in: hFindFile=0x381fc0, lpFindFileData=0x31e404 | out: lpFindFileData=0x31e404*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8aa62784, ftCreationTime.dwHighDateTime=0x1ca043f, ftLastAccessTime.dwLowDateTime=0x8aa62784, ftLastAccessTime.dwHighDateTime=0x1ca043f, ftLastWriteTime.dwLowDateTime=0x9119ee0, ftLastWriteTime.dwHighDateTime=0x1d6eb7f, nFileSizeHigh=0x0, nFileSizeLow=0x4e0, dwReserved0=0x0, dwReserved1=0x0, cFileName="XPS Viewer.lnk", cAlternateFileName="XPSVIE~1.LNK")) returned 0 [0090.726] FindClose (in: hFindFile=0x381fc0 | out: hFindFile=0x381fc0) returned 1 [0090.726] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e68c) returned 1 [0090.726] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e698) returned 1 [0090.726] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Programs\\Adobe Reader X.lnk", nBufferLength=0x105, lpBuffer=0x31e0a4, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Programs\\Adobe Reader X.lnk", lpFilePart=0x0) returned 0x4b [0090.726] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e598) returned 1 [0090.726] CreateFileW (lpFileName="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Programs\\Adobe Reader X.lnk" (normalized: "c:\\users\\all users\\microsoft\\windows\\start menu\\programs\\adobe reader x.lnk"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x178 [0090.726] GetFileType (hFile=0x178) returned 0x1 [0090.726] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e594) returned 1 [0090.726] GetFileType (hFile=0x178) returned 0x1 [0090.726] GetFileSize (in: hFile=0x178, lpFileSizeHigh=0x31e6a0 | out: lpFileSizeHigh=0x31e6a0*=0x0) returned 0x990 [0090.726] ReadFile (in: hFile=0x178, lpBuffer=0x2774e10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x31e64c, lpOverlapped=0x0 | out: lpBuffer=0x2774e10*, lpNumberOfBytesRead=0x31e64c*=0x990, lpOverlapped=0x0) returned 1 [0090.740] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Programs\\Adobe Reader X.lnk", nBufferLength=0x105, lpBuffer=0x31e090, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Programs\\Adobe Reader X.lnk", lpFilePart=0x0) returned 0x4b [0090.740] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e584) returned 1 [0090.740] CreateFileW (lpFileName="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Programs\\Adobe Reader X.lnk" (normalized: "c:\\users\\all users\\microsoft\\windows\\start menu\\programs\\adobe reader x.lnk"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x178 [0090.742] GetFileType (hFile=0x178) returned 0x1 [0090.742] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e580) returned 1 [0090.742] GetFileType (hFile=0x178) returned 0x1 [0090.742] WriteFile (in: hFile=0x178, lpBuffer=0x27c5d64*, nNumberOfBytesToWrite=0x9a0, lpNumberOfBytesWritten=0x31e614, lpOverlapped=0x0 | out: lpBuffer=0x27c5d64*, lpNumberOfBytesWritten=0x31e614*=0x9a0, lpOverlapped=0x0) returned 1 [0090.743] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Programs\\Adobe Reader X.lnk", nBufferLength=0x105, lpBuffer=0x31e1c4, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Programs\\Adobe Reader X.lnk", lpFilePart=0x0) returned 0x4b [0090.743] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Programs\\Adobe Reader X.lnk", nBufferLength=0x105, lpBuffer=0x31e1c4, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Programs\\Adobe Reader X.lnk", lpFilePart=0x0) returned 0x4b [0090.743] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e624) returned 1 [0090.743] GetFileAttributesExW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Programs\\Adobe Reader X.lnk" (normalized: "c:\\users\\all users\\microsoft\\windows\\start menu\\programs\\adobe reader x.lnk"), fInfoLevelId=0x0, lpFileInformation=0x31e6a0 | out: lpFileInformation=0x31e6a0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x83c01860, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x83c01860, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x1986e0a0, ftLastWriteTime.dwHighDateTime=0x1d6eb7f, nFileSizeHigh=0x0, nFileSizeLow=0x9a0)) returned 1 [0090.743] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e620) returned 1 [0090.743] MoveFileW (lpExistingFileName="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Programs\\Adobe Reader X.lnk" (normalized: "c:\\users\\all users\\microsoft\\windows\\start menu\\programs\\adobe reader x.lnk"), lpNewFileName="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Programs\\Adobe Reader X.lnk" (normalized: "c:\\users\\all users\\microsoft\\windows\\start menu\\programs\\adobe reader x.lnk")) returned 1 [0090.744] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Programs\\Google Chrome.lnk", nBufferLength=0x105, lpBuffer=0x31e0a4, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Programs\\Google Chrome.lnk", lpFilePart=0x0) returned 0x4a [0090.744] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e598) returned 1 [0090.744] CreateFileW (lpFileName="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Programs\\Google Chrome.lnk" (normalized: "c:\\users\\all users\\microsoft\\windows\\start menu\\programs\\google chrome.lnk"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x178 [0090.744] GetFileType (hFile=0x178) returned 0x1 [0090.744] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e594) returned 1 [0090.744] GetFileType (hFile=0x178) returned 0x1 [0090.744] GetFileSize (in: hFile=0x178, lpFileSizeHigh=0x31e6a0 | out: lpFileSizeHigh=0x31e6a0*=0x0) returned 0x8e0 [0090.744] ReadFile (in: hFile=0x178, lpBuffer=0x27c7904, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x31e64c, lpOverlapped=0x0 | out: lpBuffer=0x27c7904*, lpNumberOfBytesRead=0x31e64c*=0x8e0, lpOverlapped=0x0) returned 1 [0090.758] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Programs\\Google Chrome.lnk", nBufferLength=0x105, lpBuffer=0x31e090, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Programs\\Google Chrome.lnk", lpFilePart=0x0) returned 0x4a [0090.758] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e584) returned 1 [0090.758] CreateFileW (lpFileName="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Programs\\Google Chrome.lnk" (normalized: "c:\\users\\all users\\microsoft\\windows\\start menu\\programs\\google chrome.lnk"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x178 [0090.760] GetFileType (hFile=0x178) returned 0x1 [0090.760] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e580) returned 1 [0090.760] GetFileType (hFile=0x178) returned 0x1 [0090.760] WriteFile (in: hFile=0x178, lpBuffer=0x28184e4*, nNumberOfBytesToWrite=0x8f0, lpNumberOfBytesWritten=0x31e614, lpOverlapped=0x0 | out: lpBuffer=0x28184e4*, lpNumberOfBytesWritten=0x31e614*=0x8f0, lpOverlapped=0x0) returned 1 [0090.762] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Programs\\Google Chrome.lnk", nBufferLength=0x105, lpBuffer=0x31e1c4, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Programs\\Google Chrome.lnk", lpFilePart=0x0) returned 0x4a [0090.762] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Programs\\Google Chrome.lnk", nBufferLength=0x105, lpBuffer=0x31e1c4, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Programs\\Google Chrome.lnk", lpFilePart=0x0) returned 0x4a [0090.762] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e624) returned 1 [0090.762] GetFileAttributesExW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Programs\\Google Chrome.lnk" (normalized: "c:\\users\\all users\\microsoft\\windows\\start menu\\programs\\google chrome.lnk"), fInfoLevelId=0x0, lpFileInformation=0x31e6a0 | out: lpFileInformation=0x31e6a0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7df47e00, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x7df47e00, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x198ba360, ftLastWriteTime.dwHighDateTime=0x1d6eb7f, nFileSizeHigh=0x0, nFileSizeLow=0x8f0)) returned 1 [0090.762] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e620) returned 1 [0090.762] MoveFileW (lpExistingFileName="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Programs\\Google Chrome.lnk" (normalized: "c:\\users\\all users\\microsoft\\windows\\start menu\\programs\\google chrome.lnk"), lpNewFileName="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Programs\\Google Chrome.lnk" (normalized: "c:\\users\\all users\\microsoft\\windows\\start menu\\programs\\google chrome.lnk")) returned 1 [0090.763] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Programs\\Media Center.lnk", nBufferLength=0x105, lpBuffer=0x31e0a4, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Programs\\Media Center.lnk", lpFilePart=0x0) returned 0x49 [0090.763] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e598) returned 1 [0090.763] CreateFileW (lpFileName="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Programs\\Media Center.lnk" (normalized: "c:\\users\\all users\\microsoft\\windows\\start menu\\programs\\media center.lnk"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x178 [0090.763] GetFileType (hFile=0x178) returned 0x1 [0090.763] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e594) returned 1 [0090.763] GetFileType (hFile=0x178) returned 0x1 [0090.763] GetFileSize (in: hFile=0x178, lpFileSizeHigh=0x31e6a0 | out: lpFileSizeHigh=0x31e6a0*=0x0) returned 0x550 [0090.763] ReadFile (in: hFile=0x178, lpBuffer=0x2819cd8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x31e64c, lpOverlapped=0x0 | out: lpBuffer=0x2819cd8*, lpNumberOfBytesRead=0x31e64c*=0x550, lpOverlapped=0x0) returned 1 [0090.804] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Programs\\Media Center.lnk", nBufferLength=0x105, lpBuffer=0x31e090, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Programs\\Media Center.lnk", lpFilePart=0x0) returned 0x49 [0090.804] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e584) returned 1 [0090.804] CreateFileW (lpFileName="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Programs\\Media Center.lnk" (normalized: "c:\\users\\all users\\microsoft\\windows\\start menu\\programs\\media center.lnk"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x178 [0090.805] GetFileType (hFile=0x178) returned 0x1 [0090.805] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e580) returned 1 [0090.805] GetFileType (hFile=0x178) returned 0x1 [0090.805] WriteFile (in: hFile=0x178, lpBuffer=0x266b14c*, nNumberOfBytesToWrite=0x560, lpNumberOfBytesWritten=0x31e614, lpOverlapped=0x0 | out: lpBuffer=0x266b14c*, lpNumberOfBytesWritten=0x31e614*=0x560, lpOverlapped=0x0) returned 1 [0090.806] CloseHandle (hObject=0x178) returned 1 [0090.807] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Programs\\Media Center.lnk", nBufferLength=0x105, lpBuffer=0x31e1c4, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Programs\\Media Center.lnk", lpFilePart=0x0) returned 0x49 [0090.807] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Programs\\Media Center.lnk", nBufferLength=0x105, lpBuffer=0x31e1c4, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Programs\\Media Center.lnk", lpFilePart=0x0) returned 0x49 [0090.807] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e624) returned 1 [0090.807] GetFileAttributesExW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Programs\\Media Center.lnk" (normalized: "c:\\users\\all users\\microsoft\\windows\\start menu\\programs\\media center.lnk"), fInfoLevelId=0x0, lpFileInformation=0x31e6a0 | out: lpFileInformation=0x31e6a0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x824ddfa0, ftCreationTime.dwHighDateTime=0x1d2de2a, ftLastAccessTime.dwLowDateTime=0x824ddfa0, ftLastAccessTime.dwHighDateTime=0x1d2de2a, ftLastWriteTime.dwLowDateTime=0x19906620, ftLastWriteTime.dwHighDateTime=0x1d6eb7f, nFileSizeHigh=0x0, nFileSizeLow=0x560)) returned 1 [0090.807] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e620) returned 1 [0090.807] MoveFileW (lpExistingFileName="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Programs\\Media Center.lnk" (normalized: "c:\\users\\all users\\microsoft\\windows\\start menu\\programs\\media center.lnk"), lpNewFileName="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Programs\\Media Center.lnk" (normalized: "c:\\users\\all users\\microsoft\\windows\\start menu\\programs\\media center.lnk")) returned 1 [0090.807] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Programs\\Mozilla Firefox.lnk", nBufferLength=0x105, lpBuffer=0x31e0a4, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Programs\\Mozilla Firefox.lnk", lpFilePart=0x0) returned 0x4c [0090.808] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e598) returned 1 [0090.808] CreateFileW (lpFileName="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Programs\\Mozilla Firefox.lnk" (normalized: "c:\\users\\all users\\microsoft\\windows\\start menu\\programs\\mozilla firefox.lnk"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x178 [0090.808] GetFileType (hFile=0x178) returned 0x1 [0090.808] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e594) returned 1 [0090.808] GetFileType (hFile=0x178) returned 0x1 [0090.808] GetFileSize (in: hFile=0x178, lpFileSizeHigh=0x31e6a0 | out: lpFileSizeHigh=0x31e6a0*=0x0) returned 0x4a0 [0090.808] ReadFile (in: hFile=0x178, lpBuffer=0x266c894, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x31e64c, lpOverlapped=0x0 | out: lpBuffer=0x266c894*, lpNumberOfBytesRead=0x31e64c*=0x4a0, lpOverlapped=0x0) returned 1 [0090.809] CloseHandle (hObject=0x178) returned 1 [0090.822] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Programs\\Mozilla Firefox.lnk", nBufferLength=0x105, lpBuffer=0x31e090, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Programs\\Mozilla Firefox.lnk", lpFilePart=0x0) returned 0x4c [0090.822] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e584) returned 1 [0090.822] CreateFileW (lpFileName="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Programs\\Mozilla Firefox.lnk" (normalized: "c:\\users\\all users\\microsoft\\windows\\start menu\\programs\\mozilla firefox.lnk"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x178 [0090.823] GetFileType (hFile=0x178) returned 0x1 [0090.823] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e580) returned 1 [0090.823] GetFileType (hFile=0x178) returned 0x1 [0090.823] WriteFile (in: hFile=0x178, lpBuffer=0x26bc098*, nNumberOfBytesToWrite=0x4b0, lpNumberOfBytesWritten=0x31e614, lpOverlapped=0x0 | out: lpBuffer=0x26bc098*, lpNumberOfBytesWritten=0x31e614*=0x4b0, lpOverlapped=0x0) returned 1 [0090.824] CloseHandle (hObject=0x178) returned 1 [0090.824] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Programs\\Mozilla Firefox.lnk", nBufferLength=0x105, lpBuffer=0x31e1c4, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Programs\\Mozilla Firefox.lnk", lpFilePart=0x0) returned 0x4c [0090.824] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Programs\\Mozilla Firefox.lnk", nBufferLength=0x105, lpBuffer=0x31e1c4, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Programs\\Mozilla Firefox.lnk", lpFilePart=0x0) returned 0x4c [0090.824] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e624) returned 1 [0090.824] GetFileAttributesExW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Programs\\Mozilla Firefox.lnk" (normalized: "c:\\users\\all users\\microsoft\\windows\\start menu\\programs\\mozilla firefox.lnk"), fInfoLevelId=0x0, lpFileInformation=0x31e6a0 | out: lpFileInformation=0x31e6a0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb09bd780, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xb09e38e0, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0x199528e0, ftLastWriteTime.dwHighDateTime=0x1d6eb7f, nFileSizeHigh=0x0, nFileSizeLow=0x4b0)) returned 1 [0090.824] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e620) returned 1 [0090.825] MoveFileW (lpExistingFileName="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Programs\\Mozilla Firefox.lnk" (normalized: "c:\\users\\all users\\microsoft\\windows\\start menu\\programs\\mozilla firefox.lnk"), lpNewFileName="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Programs\\Mozilla Firefox.lnk" (normalized: "c:\\users\\all users\\microsoft\\windows\\start menu\\programs\\mozilla firefox.lnk")) returned 1 [0090.825] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Programs\\Sidebar.lnk", nBufferLength=0x105, lpBuffer=0x31e0a4, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Programs\\Sidebar.lnk", lpFilePart=0x0) returned 0x44 [0090.825] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e598) returned 1 [0090.825] CreateFileW (lpFileName="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Programs\\Sidebar.lnk" (normalized: "c:\\users\\all users\\microsoft\\windows\\start menu\\programs\\sidebar.lnk"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x178 [0090.825] GetFileType (hFile=0x178) returned 0x1 [0090.825] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e594) returned 1 [0090.825] GetFileType (hFile=0x178) returned 0x1 [0090.825] GetFileSize (in: hFile=0x178, lpFileSizeHigh=0x31e6a0 | out: lpFileSizeHigh=0x31e6a0*=0x0) returned 0x540 [0090.825] ReadFile (in: hFile=0x178, lpBuffer=0x26bd870, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x31e64c, lpOverlapped=0x0 | out: lpBuffer=0x26bd870*, lpNumberOfBytesRead=0x31e64c*=0x540, lpOverlapped=0x0) returned 1 [0090.826] CloseHandle (hObject=0x178) returned 1 [0090.839] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Programs\\Sidebar.lnk", nBufferLength=0x105, lpBuffer=0x31e090, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Programs\\Sidebar.lnk", lpFilePart=0x0) returned 0x44 [0090.840] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e584) returned 1 [0090.840] CreateFileW (lpFileName="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Programs\\Sidebar.lnk" (normalized: "c:\\users\\all users\\microsoft\\windows\\start menu\\programs\\sidebar.lnk"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x178 [0090.841] GetFileType (hFile=0x178) returned 0x1 [0090.841] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e580) returned 1 [0090.841] GetFileType (hFile=0x178) returned 0x1 [0090.841] WriteFile (in: hFile=0x178, lpBuffer=0x270d218*, nNumberOfBytesToWrite=0x550, lpNumberOfBytesWritten=0x31e614, lpOverlapped=0x0 | out: lpBuffer=0x270d218*, lpNumberOfBytesWritten=0x31e614*=0x550, lpOverlapped=0x0) returned 1 [0090.842] CloseHandle (hObject=0x178) returned 1 [0090.842] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Programs\\Sidebar.lnk", nBufferLength=0x105, lpBuffer=0x31e1c4, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Programs\\Sidebar.lnk", lpFilePart=0x0) returned 0x44 [0090.842] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Programs\\Sidebar.lnk", nBufferLength=0x105, lpBuffer=0x31e1c4, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Programs\\Sidebar.lnk", lpFilePart=0x0) returned 0x44 [0090.842] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e624) returned 1 [0090.842] GetFileAttributesExW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Programs\\Sidebar.lnk" (normalized: "c:\\users\\all users\\microsoft\\windows\\start menu\\programs\\sidebar.lnk"), fInfoLevelId=0x0, lpFileInformation=0x31e6a0 | out: lpFileInformation=0x31e6a0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8a233bd5, ftCreationTime.dwHighDateTime=0x1ca043f, ftLastAccessTime.dwLowDateTime=0x8a233bd5, ftLastAccessTime.dwHighDateTime=0x1ca043f, ftLastWriteTime.dwLowDateTime=0x19978a40, ftLastWriteTime.dwHighDateTime=0x1d6eb7f, nFileSizeHigh=0x0, nFileSizeLow=0x550)) returned 1 [0090.842] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e620) returned 1 [0090.842] MoveFileW (lpExistingFileName="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Programs\\Sidebar.lnk" (normalized: "c:\\users\\all users\\microsoft\\windows\\start menu\\programs\\sidebar.lnk"), lpNewFileName="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Programs\\Sidebar.lnk" (normalized: "c:\\users\\all users\\microsoft\\windows\\start menu\\programs\\sidebar.lnk")) returned 1 [0090.843] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Programs\\Windows Anytime Upgrade.lnk", nBufferLength=0x105, lpBuffer=0x31e0a4, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Programs\\Windows Anytime Upgrade.lnk", lpFilePart=0x0) returned 0x54 [0090.843] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e598) returned 1 [0090.843] CreateFileW (lpFileName="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Programs\\Windows Anytime Upgrade.lnk" (normalized: "c:\\users\\all users\\microsoft\\windows\\start menu\\programs\\windows anytime upgrade.lnk"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x178 [0090.843] GetFileType (hFile=0x178) returned 0x1 [0090.843] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e594) returned 1 [0090.843] GetFileType (hFile=0x178) returned 0x1 [0090.843] GetFileSize (in: hFile=0x178, lpFileSizeHigh=0x31e6a0 | out: lpFileSizeHigh=0x31e6a0*=0x0) returned 0x550 [0090.843] ReadFile (in: hFile=0x178, lpBuffer=0x270ea20, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x31e64c, lpOverlapped=0x0 | out: lpBuffer=0x270ea20*, lpNumberOfBytesRead=0x31e64c*=0x550, lpOverlapped=0x0) returned 1 [0090.844] CloseHandle (hObject=0x178) returned 1 [0090.861] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Programs\\Windows Anytime Upgrade.lnk", nBufferLength=0x105, lpBuffer=0x31e090, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Programs\\Windows Anytime Upgrade.lnk", lpFilePart=0x0) returned 0x54 [0090.861] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e584) returned 1 [0090.861] CreateFileW (lpFileName="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Programs\\Windows Anytime Upgrade.lnk" (normalized: "c:\\users\\all users\\microsoft\\windows\\start menu\\programs\\windows anytime upgrade.lnk"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x178 [0090.862] GetFileType (hFile=0x178) returned 0x1 [0090.862] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e580) returned 1 [0090.862] GetFileType (hFile=0x178) returned 0x1 [0090.862] WriteFile (in: hFile=0x178, lpBuffer=0x275e458*, nNumberOfBytesToWrite=0x560, lpNumberOfBytesWritten=0x31e614, lpOverlapped=0x0 | out: lpBuffer=0x275e458*, lpNumberOfBytesWritten=0x31e614*=0x560, lpOverlapped=0x0) returned 1 [0090.863] CloseHandle (hObject=0x178) returned 1 [0090.864] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Programs\\Windows Anytime Upgrade.lnk", nBufferLength=0x105, lpBuffer=0x31e1c4, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Programs\\Windows Anytime Upgrade.lnk", lpFilePart=0x0) returned 0x54 [0090.864] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Programs\\Windows Anytime Upgrade.lnk", nBufferLength=0x105, lpBuffer=0x31e1c4, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Programs\\Windows Anytime Upgrade.lnk", lpFilePart=0x0) returned 0x54 [0090.864] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e624) returned 1 [0090.864] GetFileAttributesExW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Programs\\Windows Anytime Upgrade.lnk" (normalized: "c:\\users\\all users\\microsoft\\windows\\start menu\\programs\\windows anytime upgrade.lnk"), fInfoLevelId=0x0, lpFileInformation=0x31e6a0 | out: lpFileInformation=0x31e6a0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8b186991, ftCreationTime.dwHighDateTime=0x1ca043f, ftLastAccessTime.dwLowDateTime=0x8b186991, ftLastAccessTime.dwHighDateTime=0x1ca043f, ftLastWriteTime.dwLowDateTime=0x1999eba0, ftLastWriteTime.dwHighDateTime=0x1d6eb7f, nFileSizeHigh=0x0, nFileSizeLow=0x560)) returned 1 [0090.864] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e620) returned 1 [0090.864] MoveFileW (lpExistingFileName="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Programs\\Windows Anytime Upgrade.lnk" (normalized: "c:\\users\\all users\\microsoft\\windows\\start menu\\programs\\windows anytime upgrade.lnk"), lpNewFileName="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Programs\\Windows Anytime Upgrade.lnk" (normalized: "c:\\users\\all users\\microsoft\\windows\\start menu\\programs\\windows anytime upgrade.lnk")) returned 1 [0090.864] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Programs\\Windows DVD Maker.lnk", nBufferLength=0x105, lpBuffer=0x31e0a4, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Programs\\Windows DVD Maker.lnk", lpFilePart=0x0) returned 0x4e [0090.865] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e598) returned 1 [0090.865] CreateFileW (lpFileName="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Programs\\Windows DVD Maker.lnk" (normalized: "c:\\users\\all users\\microsoft\\windows\\start menu\\programs\\windows dvd maker.lnk"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x178 [0090.865] GetFileType (hFile=0x178) returned 0x1 [0090.865] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e594) returned 1 [0090.865] GetFileType (hFile=0x178) returned 0x1 [0090.865] GetFileSize (in: hFile=0x178, lpFileSizeHigh=0x31e6a0 | out: lpFileSizeHigh=0x31e6a0*=0x0) returned 0x530 [0090.865] ReadFile (in: hFile=0x178, lpBuffer=0x275fc68, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x31e64c, lpOverlapped=0x0 | out: lpBuffer=0x275fc68*, lpNumberOfBytesRead=0x31e64c*=0x530, lpOverlapped=0x0) returned 1 [0090.866] CloseHandle (hObject=0x178) returned 1 [0090.879] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Programs\\Windows DVD Maker.lnk", nBufferLength=0x105, lpBuffer=0x31e090, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Programs\\Windows DVD Maker.lnk", lpFilePart=0x0) returned 0x4e [0090.879] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e584) returned 1 [0090.879] CreateFileW (lpFileName="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Programs\\Windows DVD Maker.lnk" (normalized: "c:\\users\\all users\\microsoft\\windows\\start menu\\programs\\windows dvd maker.lnk"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x178 [0090.952] GetFileType (hFile=0x178) returned 0x1 [0090.952] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e580) returned 1 [0090.952] GetFileType (hFile=0x178) returned 0x1 [0090.952] WriteFile (in: hFile=0x178, lpBuffer=0x27af5e8*, nNumberOfBytesToWrite=0x540, lpNumberOfBytesWritten=0x31e614, lpOverlapped=0x0 | out: lpBuffer=0x27af5e8*, lpNumberOfBytesWritten=0x31e614*=0x540, lpOverlapped=0x0) returned 1 [0090.953] CloseHandle (hObject=0x178) returned 1 [0090.953] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Programs\\Windows DVD Maker.lnk", nBufferLength=0x105, lpBuffer=0x31e1c4, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Programs\\Windows DVD Maker.lnk", lpFilePart=0x0) returned 0x4e [0090.953] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Programs\\Windows DVD Maker.lnk", nBufferLength=0x105, lpBuffer=0x31e1c4, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Programs\\Windows DVD Maker.lnk", lpFilePart=0x0) returned 0x4e [0090.953] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e624) returned 1 [0090.953] GetFileAttributesExW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Programs\\Windows DVD Maker.lnk" (normalized: "c:\\users\\all users\\microsoft\\windows\\start menu\\programs\\windows dvd maker.lnk"), fInfoLevelId=0x0, lpFileInformation=0x31e6a0 | out: lpFileInformation=0x31e6a0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x82491ce0, ftCreationTime.dwHighDateTime=0x1d2de2a, ftLastAccessTime.dwLowDateTime=0x82491ce0, ftLastAccessTime.dwHighDateTime=0x1d2de2a, ftLastWriteTime.dwLowDateTime=0x19a833e0, ftLastWriteTime.dwHighDateTime=0x1d6eb7f, nFileSizeHigh=0x0, nFileSizeLow=0x540)) returned 1 [0090.953] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e620) returned 1 [0090.953] MoveFileW (lpExistingFileName="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Programs\\Windows DVD Maker.lnk" (normalized: "c:\\users\\all users\\microsoft\\windows\\start menu\\programs\\windows dvd maker.lnk"), lpNewFileName="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Programs\\Windows DVD Maker.lnk" (normalized: "c:\\users\\all users\\microsoft\\windows\\start menu\\programs\\windows dvd maker.lnk")) returned 1 [0090.954] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Programs\\Windows Fax and Scan.lnk", nBufferLength=0x105, lpBuffer=0x31e0a4, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Programs\\Windows Fax and Scan.lnk", lpFilePart=0x0) returned 0x51 [0090.954] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e598) returned 1 [0090.954] CreateFileW (lpFileName="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Programs\\Windows Fax and Scan.lnk" (normalized: "c:\\users\\all users\\microsoft\\windows\\start menu\\programs\\windows fax and scan.lnk"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x178 [0090.954] GetFileType (hFile=0x178) returned 0x1 [0090.954] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e594) returned 1 [0090.954] GetFileType (hFile=0x178) returned 0x1 [0090.954] GetFileSize (in: hFile=0x178, lpFileSizeHigh=0x31e6a0 | out: lpFileSizeHigh=0x31e6a0*=0x0) returned 0x4c0 [0090.954] ReadFile (in: hFile=0x178, lpBuffer=0x27b0d7c, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x31e64c, lpOverlapped=0x0 | out: lpBuffer=0x27b0d7c*, lpNumberOfBytesRead=0x31e64c*=0x4c0, lpOverlapped=0x0) returned 1 [0090.955] CloseHandle (hObject=0x178) returned 1 [0090.968] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Programs\\Windows Fax and Scan.lnk", nBufferLength=0x105, lpBuffer=0x31e090, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Programs\\Windows Fax and Scan.lnk", lpFilePart=0x0) returned 0x51 [0090.968] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e584) returned 1 [0090.968] CreateFileW (lpFileName="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Programs\\Windows Fax and Scan.lnk" (normalized: "c:\\users\\all users\\microsoft\\windows\\start menu\\programs\\windows fax and scan.lnk"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x178 [0090.969] GetFileType (hFile=0x178) returned 0x1 [0090.970] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e580) returned 1 [0090.970] GetFileType (hFile=0x178) returned 0x1 [0090.970] WriteFile (in: hFile=0x178, lpBuffer=0x28004d8*, nNumberOfBytesToWrite=0x4d0, lpNumberOfBytesWritten=0x31e614, lpOverlapped=0x0 | out: lpBuffer=0x28004d8*, lpNumberOfBytesWritten=0x31e614*=0x4d0, lpOverlapped=0x0) returned 1 [0090.970] CloseHandle (hObject=0x178) returned 1 [0090.971] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Programs\\Windows Fax and Scan.lnk", nBufferLength=0x105, lpBuffer=0x31e1c4, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Programs\\Windows Fax and Scan.lnk", lpFilePart=0x0) returned 0x51 [0090.971] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Programs\\Windows Fax and Scan.lnk", nBufferLength=0x105, lpBuffer=0x31e1c4, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Programs\\Windows Fax and Scan.lnk", lpFilePart=0x0) returned 0x51 [0090.971] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e624) returned 1 [0090.971] GetFileAttributesExW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Programs\\Windows Fax and Scan.lnk" (normalized: "c:\\users\\all users\\microsoft\\windows\\start menu\\programs\\windows fax and scan.lnk"), fInfoLevelId=0x0, lpFileInformation=0x31e6a0 | out: lpFileInformation=0x31e6a0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3d7b6b82, ftCreationTime.dwHighDateTime=0x1ca043f, ftLastAccessTime.dwLowDateTime=0x3d7b6b82, ftLastAccessTime.dwHighDateTime=0x1ca043f, ftLastWriteTime.dwLowDateTime=0x19aa9540, ftLastWriteTime.dwHighDateTime=0x1d6eb7f, nFileSizeHigh=0x0, nFileSizeLow=0x4d0)) returned 1 [0090.971] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e620) returned 1 [0090.971] MoveFileW (lpExistingFileName="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Programs\\Windows Fax and Scan.lnk" (normalized: "c:\\users\\all users\\microsoft\\windows\\start menu\\programs\\windows fax and scan.lnk"), lpNewFileName="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Programs\\Windows Fax and Scan.lnk" (normalized: "c:\\users\\all users\\microsoft\\windows\\start menu\\programs\\windows fax and scan.lnk")) returned 1 [0090.972] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Programs\\Windows Media Player.lnk", nBufferLength=0x105, lpBuffer=0x31e0a4, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Programs\\Windows Media Player.lnk", lpFilePart=0x0) returned 0x51 [0090.972] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e598) returned 1 [0090.972] CreateFileW (lpFileName="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Programs\\Windows Media Player.lnk" (normalized: "c:\\users\\all users\\microsoft\\windows\\start menu\\programs\\windows media player.lnk"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x178 [0090.972] GetFileType (hFile=0x178) returned 0x1 [0090.972] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e594) returned 1 [0090.972] GetFileType (hFile=0x178) returned 0x1 [0090.972] GetFileSize (in: hFile=0x178, lpFileSizeHigh=0x31e6a0 | out: lpFileSizeHigh=0x31e6a0*=0x0) returned 0x610 [0090.972] ReadFile (in: hFile=0x178, lpBuffer=0x2801dc4, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x31e64c, lpOverlapped=0x0 | out: lpBuffer=0x2801dc4*, lpNumberOfBytesRead=0x31e64c*=0x610, lpOverlapped=0x0) returned 1 [0090.973] CloseHandle (hObject=0x178) returned 1 [0091.015] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Programs\\Windows Media Player.lnk", nBufferLength=0x105, lpBuffer=0x31e090, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Programs\\Windows Media Player.lnk", lpFilePart=0x0) returned 0x51 [0091.015] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e584) returned 1 [0091.015] CreateFileW (lpFileName="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Programs\\Windows Media Player.lnk" (normalized: "c:\\users\\all users\\microsoft\\windows\\start menu\\programs\\windows media player.lnk"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x178 [0091.016] GetFileType (hFile=0x178) returned 0x1 [0091.016] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e580) returned 1 [0091.016] GetFileType (hFile=0x178) returned 0x1 [0091.016] WriteFile (in: hFile=0x178, lpBuffer=0x2653110*, nNumberOfBytesToWrite=0x620, lpNumberOfBytesWritten=0x31e614, lpOverlapped=0x0 | out: lpBuffer=0x2653110*, lpNumberOfBytesWritten=0x31e614*=0x620, lpOverlapped=0x0) returned 1 [0091.017] CloseHandle (hObject=0x178) returned 1 [0091.019] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Programs\\Windows Media Player.lnk", nBufferLength=0x105, lpBuffer=0x31e1c4, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Programs\\Windows Media Player.lnk", lpFilePart=0x0) returned 0x51 [0091.019] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Programs\\Windows Media Player.lnk", nBufferLength=0x105, lpBuffer=0x31e1c4, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Programs\\Windows Media Player.lnk", lpFilePart=0x0) returned 0x51 [0091.019] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e624) returned 1 [0091.019] GetFileAttributesExW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Programs\\Windows Media Player.lnk" (normalized: "c:\\users\\all users\\microsoft\\windows\\start menu\\programs\\windows media player.lnk"), fInfoLevelId=0x0, lpFileInformation=0x31e6a0 | out: lpFileInformation=0x31e6a0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8945dbdb, ftCreationTime.dwHighDateTime=0x1ca043f, ftLastAccessTime.dwLowDateTime=0x8945dbdb, ftLastAccessTime.dwHighDateTime=0x1ca043f, ftLastWriteTime.dwLowDateTime=0x19b1b960, ftLastWriteTime.dwHighDateTime=0x1d6eb7f, nFileSizeHigh=0x0, nFileSizeLow=0x620)) returned 1 [0091.019] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e620) returned 1 [0091.019] MoveFileW (lpExistingFileName="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Programs\\Windows Media Player.lnk" (normalized: "c:\\users\\all users\\microsoft\\windows\\start menu\\programs\\windows media player.lnk"), lpNewFileName="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Programs\\Windows Media Player.lnk" (normalized: "c:\\users\\all users\\microsoft\\windows\\start menu\\programs\\windows media player.lnk")) returned 1 [0091.020] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Programs\\XPS Viewer.lnk", nBufferLength=0x105, lpBuffer=0x31e0a4, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Programs\\XPS Viewer.lnk", lpFilePart=0x0) returned 0x47 [0091.020] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e598) returned 1 [0091.020] CreateFileW (lpFileName="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Programs\\XPS Viewer.lnk" (normalized: "c:\\users\\all users\\microsoft\\windows\\start menu\\programs\\xps viewer.lnk"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x178 [0091.020] GetFileType (hFile=0x178) returned 0x1 [0091.020] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e594) returned 1 [0091.020] GetFileType (hFile=0x178) returned 0x1 [0091.020] GetFileSize (in: hFile=0x178, lpFileSizeHigh=0x31e6a0 | out: lpFileSizeHigh=0x31e6a0*=0x0) returned 0x4e0 [0091.020] ReadFile (in: hFile=0x178, lpBuffer=0x26548a4, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x31e64c, lpOverlapped=0x0 | out: lpBuffer=0x26548a4*, lpNumberOfBytesRead=0x31e64c*=0x4e0, lpOverlapped=0x0) returned 1 [0091.021] CloseHandle (hObject=0x178) returned 1 [0091.034] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Programs\\XPS Viewer.lnk", nBufferLength=0x105, lpBuffer=0x31e090, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Programs\\XPS Viewer.lnk", lpFilePart=0x0) returned 0x47 [0091.034] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e584) returned 1 [0091.034] CreateFileW (lpFileName="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Programs\\XPS Viewer.lnk" (normalized: "c:\\users\\all users\\microsoft\\windows\\start menu\\programs\\xps viewer.lnk"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x178 [0091.035] GetFileType (hFile=0x178) returned 0x1 [0091.036] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e580) returned 1 [0091.036] GetFileType (hFile=0x178) returned 0x1 [0091.036] WriteFile (in: hFile=0x178, lpBuffer=0x26a41d4*, nNumberOfBytesToWrite=0x4f0, lpNumberOfBytesWritten=0x31e614, lpOverlapped=0x0 | out: lpBuffer=0x26a41d4*, lpNumberOfBytesWritten=0x31e614*=0x4f0, lpOverlapped=0x0) returned 1 [0091.036] CloseHandle (hObject=0x178) returned 1 [0091.037] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Programs\\XPS Viewer.lnk", nBufferLength=0x105, lpBuffer=0x31e1c4, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Programs\\XPS Viewer.lnk", lpFilePart=0x0) returned 0x47 [0091.037] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Programs\\XPS Viewer.lnk", nBufferLength=0x105, lpBuffer=0x31e1c4, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Programs\\XPS Viewer.lnk", lpFilePart=0x0) returned 0x47 [0091.037] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e624) returned 1 [0091.037] GetFileAttributesExW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Programs\\XPS Viewer.lnk" (normalized: "c:\\users\\all users\\microsoft\\windows\\start menu\\programs\\xps viewer.lnk"), fInfoLevelId=0x0, lpFileInformation=0x31e6a0 | out: lpFileInformation=0x31e6a0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8aa62784, ftCreationTime.dwHighDateTime=0x1ca043f, ftLastAccessTime.dwLowDateTime=0x8aa62784, ftLastAccessTime.dwHighDateTime=0x1ca043f, ftLastWriteTime.dwLowDateTime=0x19b41ac0, ftLastWriteTime.dwHighDateTime=0x1d6eb7f, nFileSizeHigh=0x0, nFileSizeLow=0x4f0)) returned 1 [0091.037] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e620) returned 1 [0091.037] MoveFileW (lpExistingFileName="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Programs\\XPS Viewer.lnk" (normalized: "c:\\users\\all users\\microsoft\\windows\\start menu\\programs\\xps viewer.lnk"), lpNewFileName="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Programs\\XPS Viewer.lnk" (normalized: "c:\\users\\all users\\microsoft\\windows\\start menu\\programs\\xps viewer.lnk")) returned 1 [0091.038] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e654) returned 1 [0091.038] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Programs\\Accessories", nBufferLength=0x105, lpBuffer=0x31e15c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Programs\\Accessories", lpFilePart=0x0) returned 0x44 [0091.038] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Programs\\Accessories\\", nBufferLength=0x105, lpBuffer=0x31e130, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Programs\\Accessories\\", lpFilePart=0x0) returned 0x45 [0091.038] FindFirstFileW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Programs\\Accessories\\*", lpFindFileData=0x31e37c | out: lpFindFileData=0x31e37c*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0xfd9dbcac, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x81caf400, ftLastAccessTime.dwHighDateTime=0x1d2de2a, ftLastWriteTime.dwLowDateTime=0x8246bb80, ftLastWriteTime.dwHighDateTime=0x1d2de2a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x382000 [0091.038] FindNextFileW (in: hFindFile=0x382000, lpFindFileData=0x31e38c | out: lpFindFileData=0x31e38c*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0xfd9dbcac, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x81caf400, ftLastAccessTime.dwHighDateTime=0x1d2de2a, ftLastWriteTime.dwLowDateTime=0x8246bb80, ftLastWriteTime.dwHighDateTime=0x1d2de2a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0091.038] FindNextFileW (in: hFindFile=0x382000, lpFindFileData=0x31e38c | out: lpFindFileData=0x31e38c*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0xfd9dbcac, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x89bce0a9, ftLastAccessTime.dwHighDateTime=0x1ca043f, ftLastWriteTime.dwLowDateTime=0x89bf4209, ftLastWriteTime.dwHighDateTime=0x1ca043f, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Accessibility", cAlternateFileName="ACCESS~1")) returned 1 [0091.038] FindNextFileW (in: hFindFile=0x382000, lpFindFileData=0x31e38c | out: lpFindFileData=0x31e38c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3e3e9c58, ftCreationTime.dwHighDateTime=0x1ca043f, ftLastAccessTime.dwLowDateTime=0x3e3e9c58, ftLastAccessTime.dwHighDateTime=0x1ca043f, ftLastWriteTime.dwLowDateTime=0x91661a0, ftLastWriteTime.dwHighDateTime=0x1d6eb7f, nFileSizeHigh=0x0, nFileSizeLow=0x4d0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Calculator.lnk", cAlternateFileName="CALCUL~1.LNK")) returned 1 [0091.038] FindNextFileW (in: hFindFile=0x382000, lpFindFileData=0x31e38c | out: lpFindFileData=0x31e38c*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0xec08153b, ftCreationTime.dwHighDateTime=0x1ca042b, ftLastAccessTime.dwLowDateTime=0xec08153b, ftLastAccessTime.dwHighDateTime=0x1ca042b, ftLastWriteTime.dwLowDateTime=0x8246bb80, ftLastWriteTime.dwHighDateTime=0x1d2de2a, nFileSizeHigh=0x0, nFileSizeLow=0x73e, dwReserved0=0x0, dwReserved1=0x0, cFileName="Desktop.ini", cAlternateFileName="")) returned 1 [0091.039] FindNextFileW (in: hFindFile=0x382000, lpFindFileData=0x31e38c | out: lpFindFileData=0x31e38c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x27fbfe08, ftCreationTime.dwHighDateTime=0x1ca043f, ftLastAccessTime.dwLowDateTime=0x27fbfe08, ftLastAccessTime.dwHighDateTime=0x1ca043f, ftLastWriteTime.dwLowDateTime=0x91d85c0, ftLastWriteTime.dwHighDateTime=0x1d6eb7f, nFileSizeHigh=0x0, nFileSizeLow=0x500, dwReserved0=0x0, dwReserved1=0x0, cFileName="displayswitch.lnk", cAlternateFileName="DISPLA~1.LNK")) returned 1 [0091.039] FindNextFileW (in: hFindFile=0x382000, lpFindFileData=0x31e38c | out: lpFindFileData=0x31e38c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x80c2bb60, ftCreationTime.dwHighDateTime=0x1d2de2a, ftLastAccessTime.dwLowDateTime=0x80c2bb60, ftLastAccessTime.dwHighDateTime=0x1d2de2a, ftLastWriteTime.dwLowDateTime=0x91fe720, ftLastWriteTime.dwHighDateTime=0x1d6eb7f, nFileSizeHigh=0x0, nFileSizeLow=0x560, dwReserved0=0x0, dwReserved1=0x0, cFileName="Math Input Panel.lnk", cAlternateFileName="MATHIN~1.LNK")) returned 1 [0091.039] FindNextFileW (in: hFindFile=0x382000, lpFindFileData=0x31e38c | out: lpFindFileData=0x31e38c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x80c77e20, ftCreationTime.dwHighDateTime=0x1d2de2a, ftLastAccessTime.dwLowDateTime=0x80c77e20, ftLastAccessTime.dwHighDateTime=0x1d2de2a, ftLastWriteTime.dwLowDateTime=0x924a9e0, ftLastWriteTime.dwHighDateTime=0x1d6eb7f, nFileSizeHigh=0x0, nFileSizeLow=0x4e0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Mobility Center.lnk", cAlternateFileName="MOBILI~1.LNK")) returned 1 [0091.039] FindNextFileW (in: hFindFile=0x382000, lpFindFileData=0x31e38c | out: lpFindFileData=0x31e38c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x80afb060, ftCreationTime.dwHighDateTime=0x1d2de2a, ftLastAccessTime.dwLowDateTime=0x80afb060, ftLastAccessTime.dwHighDateTime=0x1d2de2a, ftLastWriteTime.dwLowDateTime=0x9270b40, ftLastWriteTime.dwHighDateTime=0x1d6eb7f, nFileSizeHigh=0x0, nFileSizeLow=0x4e0, dwReserved0=0x0, dwReserved1=0x0, cFileName="NetworkProjection.lnk", cAlternateFileName="NETWOR~1.LNK")) returned 1 [0091.039] FindNextFileW (in: hFindFile=0x382000, lpFindFileData=0x31e38c | out: lpFindFileData=0x31e38c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2d8b74ec, ftCreationTime.dwHighDateTime=0x1ca043f, ftLastAccessTime.dwLowDateTime=0x2d8b74ec, ftLastAccessTime.dwHighDateTime=0x1ca043f, ftLastWriteTime.dwLowDateTime=0x92bce00, ftLastWriteTime.dwHighDateTime=0x1d6eb7f, nFileSizeHigh=0x0, nFileSizeLow=0x4e0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Paint.lnk", cAlternateFileName="")) returned 1 [0091.039] FindNextFileW (in: hFindFile=0x382000, lpFindFileData=0x31e38c | out: lpFindFileData=0x31e38c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x173a8e5b, ftCreationTime.dwHighDateTime=0x1ca043f, ftLastAccessTime.dwLowDateTime=0x173a8e5b, ftLastAccessTime.dwHighDateTime=0x1ca043f, ftLastWriteTime.dwLowDateTime=0x92e2f60, ftLastWriteTime.dwHighDateTime=0x1d6eb7f, nFileSizeHigh=0x0, nFileSizeLow=0x560, dwReserved0=0x0, dwReserved1=0x0, cFileName="Remote Desktop Connection.lnk", cAlternateFileName="REMOTE~1.LNK")) returned 1 [0091.039] FindNextFileW (in: hFindFile=0x382000, lpFindFileData=0x31e38c | out: lpFindFileData=0x31e38c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x81caf400, ftCreationTime.dwHighDateTime=0x1d2de2a, ftLastAccessTime.dwLowDateTime=0x81caf400, ftLastAccessTime.dwHighDateTime=0x1d2de2a, ftLastWriteTime.dwLowDateTime=0x93090c0, ftLastWriteTime.dwHighDateTime=0x1d6eb7f, nFileSizeHigh=0x0, nFileSizeLow=0x500, dwReserved0=0x0, dwReserved1=0x0, cFileName="Snipping Tool.lnk", cAlternateFileName="SNIPPI~1.LNK")) returned 1 [0091.039] FindNextFileW (in: hFindFile=0x382000, lpFindFileData=0x31e38c | out: lpFindFileData=0x31e38c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8aad4ba5, ftCreationTime.dwHighDateTime=0x1ca043f, ftLastAccessTime.dwLowDateTime=0x8aad4ba5, ftLastAccessTime.dwHighDateTime=0x1ca043f, ftLastWriteTime.dwLowDateTime=0x93a1640, ftLastWriteTime.dwHighDateTime=0x1d6eb7f, nFileSizeHigh=0x0, nFileSizeLow=0x540, dwReserved0=0x0, dwReserved1=0x0, cFileName="Sound Recorder.lnk", cAlternateFileName="SOUNDR~1.LNK")) returned 1 [0091.040] FindNextFileW (in: hFindFile=0x382000, lpFindFileData=0x31e38c | out: lpFindFileData=0x31e38c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x80cc40e0, ftCreationTime.dwHighDateTime=0x1d2de2a, ftLastAccessTime.dwLowDateTime=0x80cc40e0, ftLastAccessTime.dwHighDateTime=0x1d2de2a, ftLastWriteTime.dwLowDateTime=0x93c77a0, ftLastWriteTime.dwHighDateTime=0x1d6eb7f, nFileSizeHigh=0x0, nFileSizeLow=0x550, dwReserved0=0x0, dwReserved1=0x0, cFileName="Sticky Notes.lnk", cAlternateFileName="STICKY~1.LNK")) returned 1 [0091.040] FindNextFileW (in: hFindFile=0x382000, lpFindFileData=0x31e38c | out: lpFindFileData=0x31e38c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3c9baa28, ftCreationTime.dwHighDateTime=0x1ca043f, ftLastAccessTime.dwLowDateTime=0x3c9baa28, ftLastAccessTime.dwHighDateTime=0x1ca043f, ftLastWriteTime.dwLowDateTime=0x93ed900, ftLastWriteTime.dwHighDateTime=0x1d6eb7f, nFileSizeHigh=0x0, nFileSizeLow=0x4f0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Sync Center.lnk", cAlternateFileName="SYNCCE~1.LNK")) returned 1 [0091.040] FindNextFileW (in: hFindFile=0x382000, lpFindFileData=0x31e38c | out: lpFindFileData=0x31e38c*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0xfd9dbcac, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x8ace9ee9, ftLastAccessTime.dwHighDateTime=0x1ca043f, ftLastWriteTime.dwLowDateTime=0x8ace9ee9, ftLastWriteTime.dwHighDateTime=0x1ca043f, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="System Tools", cAlternateFileName="SYSTEM~1")) returned 1 [0091.040] FindNextFileW (in: hFindFile=0x382000, lpFindFileData=0x31e38c | out: lpFindFileData=0x31e38c*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x9182055d, ftCreationTime.dwHighDateTime=0x1cbf8eb, ftLastAccessTime.dwLowDateTime=0x8126b520, ftLastAccessTime.dwHighDateTime=0x1d2de2a, ftLastWriteTime.dwLowDateTime=0x81291680, ftLastWriteTime.dwHighDateTime=0x1d2de2a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Tablet PC", cAlternateFileName="TABLET~1")) returned 1 [0091.040] FindNextFileW (in: hFindFile=0x382000, lpFindFileData=0x31e38c | out: lpFindFileData=0x31e38c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8b13a6d0, ftCreationTime.dwHighDateTime=0x1ca043f, ftLastAccessTime.dwLowDateTime=0x8b13a6d0, ftLastAccessTime.dwHighDateTime=0x1ca043f, ftLastWriteTime.dwLowDateTime=0x9413a60, ftLastWriteTime.dwHighDateTime=0x1d6eb7f, nFileSizeHigh=0x0, nFileSizeLow=0x630, dwReserved0=0x0, dwReserved1=0x0, cFileName="Welcome Center.lnk", cAlternateFileName="WELCOM~1.LNK")) returned 1 [0091.040] FindNextFileW (in: hFindFile=0x382000, lpFindFileData=0x31e38c | out: lpFindFileData=0x31e38c*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x80020c30, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x8d79c9d7, ftLastAccessTime.dwHighDateTime=0x1ca043f, ftLastWriteTime.dwLowDateTime=0x8d7c2b37, ftLastWriteTime.dwHighDateTime=0x1ca043f, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Windows PowerShell", cAlternateFileName="WINDOW~1")) returned 1 [0091.040] FindNextFileW (in: hFindFile=0x382000, lpFindFileData=0x31e38c | out: lpFindFileData=0x31e38c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3d25b9f8, ftCreationTime.dwHighDateTime=0x1ca043f, ftLastAccessTime.dwLowDateTime=0x3d25b9f8, ftLastAccessTime.dwHighDateTime=0x1ca043f, ftLastWriteTime.dwLowDateTime=0x9439bc0, ftLastWriteTime.dwHighDateTime=0x1d6eb7f, nFileSizeHigh=0x0, nFileSizeLow=0x530, dwReserved0=0x0, dwReserved1=0x0, cFileName="Wordpad.lnk", cAlternateFileName="")) returned 1 [0091.040] FindNextFileW (in: hFindFile=0x382000, lpFindFileData=0x31e38c | out: lpFindFileData=0x31e38c*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0091.041] FindClose (in: hFindFile=0x382000 | out: hFindFile=0x382000) returned 1 [0091.041] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e614) returned 1 [0091.041] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e620) returned 1 [0091.041] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e654) returned 1 [0091.041] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Programs\\Accessories", nBufferLength=0x105, lpBuffer=0x31e15c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Programs\\Accessories", lpFilePart=0x0) returned 0x44 [0091.041] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Programs\\Accessories\\", nBufferLength=0x105, lpBuffer=0x31e130, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Programs\\Accessories\\", lpFilePart=0x0) returned 0x45 [0091.041] FindFirstFileW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Programs\\Accessories\\*", lpFindFileData=0x31e37c | out: lpFindFileData=0x31e37c*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0xfd9dbcac, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x81caf400, ftLastAccessTime.dwHighDateTime=0x1d2de2a, ftLastWriteTime.dwLowDateTime=0x8246bb80, ftLastWriteTime.dwHighDateTime=0x1d2de2a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x382000 [0091.041] FindNextFileW (in: hFindFile=0x382000, lpFindFileData=0x31e38c | out: lpFindFileData=0x31e38c*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0xfd9dbcac, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x81caf400, ftLastAccessTime.dwHighDateTime=0x1d2de2a, ftLastWriteTime.dwLowDateTime=0x8246bb80, ftLastWriteTime.dwHighDateTime=0x1d2de2a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0091.041] FindNextFileW (in: hFindFile=0x382000, lpFindFileData=0x31e38c | out: lpFindFileData=0x31e38c*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0xfd9dbcac, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x89bce0a9, ftLastAccessTime.dwHighDateTime=0x1ca043f, ftLastWriteTime.dwLowDateTime=0x89bf4209, ftLastWriteTime.dwHighDateTime=0x1ca043f, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Accessibility", cAlternateFileName="ACCESS~1")) returned 1 [0091.041] FindNextFileW (in: hFindFile=0x382000, lpFindFileData=0x31e38c | out: lpFindFileData=0x31e38c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3e3e9c58, ftCreationTime.dwHighDateTime=0x1ca043f, ftLastAccessTime.dwLowDateTime=0x3e3e9c58, ftLastAccessTime.dwHighDateTime=0x1ca043f, ftLastWriteTime.dwLowDateTime=0x91661a0, ftLastWriteTime.dwHighDateTime=0x1d6eb7f, nFileSizeHigh=0x0, nFileSizeLow=0x4d0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Calculator.lnk", cAlternateFileName="CALCUL~1.LNK")) returned 1 [0091.041] FindNextFileW (in: hFindFile=0x382000, lpFindFileData=0x31e38c | out: lpFindFileData=0x31e38c*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0xec08153b, ftCreationTime.dwHighDateTime=0x1ca042b, ftLastAccessTime.dwLowDateTime=0xec08153b, ftLastAccessTime.dwHighDateTime=0x1ca042b, ftLastWriteTime.dwLowDateTime=0x8246bb80, ftLastWriteTime.dwHighDateTime=0x1d2de2a, nFileSizeHigh=0x0, nFileSizeLow=0x73e, dwReserved0=0x0, dwReserved1=0x0, cFileName="Desktop.ini", cAlternateFileName="")) returned 1 [0091.043] FindNextFileW (in: hFindFile=0x382000, lpFindFileData=0x31e38c | out: lpFindFileData=0x31e38c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x27fbfe08, ftCreationTime.dwHighDateTime=0x1ca043f, ftLastAccessTime.dwLowDateTime=0x27fbfe08, ftLastAccessTime.dwHighDateTime=0x1ca043f, ftLastWriteTime.dwLowDateTime=0x91d85c0, ftLastWriteTime.dwHighDateTime=0x1d6eb7f, nFileSizeHigh=0x0, nFileSizeLow=0x500, dwReserved0=0x0, dwReserved1=0x0, cFileName="displayswitch.lnk", cAlternateFileName="DISPLA~1.LNK")) returned 1 [0091.043] FindNextFileW (in: hFindFile=0x382000, lpFindFileData=0x31e38c | out: lpFindFileData=0x31e38c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x80c2bb60, ftCreationTime.dwHighDateTime=0x1d2de2a, ftLastAccessTime.dwLowDateTime=0x80c2bb60, ftLastAccessTime.dwHighDateTime=0x1d2de2a, ftLastWriteTime.dwLowDateTime=0x91fe720, ftLastWriteTime.dwHighDateTime=0x1d6eb7f, nFileSizeHigh=0x0, nFileSizeLow=0x560, dwReserved0=0x0, dwReserved1=0x0, cFileName="Math Input Panel.lnk", cAlternateFileName="MATHIN~1.LNK")) returned 1 [0091.043] FindNextFileW (in: hFindFile=0x382000, lpFindFileData=0x31e38c | out: lpFindFileData=0x31e38c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x80c77e20, ftCreationTime.dwHighDateTime=0x1d2de2a, ftLastAccessTime.dwLowDateTime=0x80c77e20, ftLastAccessTime.dwHighDateTime=0x1d2de2a, ftLastWriteTime.dwLowDateTime=0x924a9e0, ftLastWriteTime.dwHighDateTime=0x1d6eb7f, nFileSizeHigh=0x0, nFileSizeLow=0x4e0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Mobility Center.lnk", cAlternateFileName="MOBILI~1.LNK")) returned 1 [0091.043] FindNextFileW (in: hFindFile=0x382000, lpFindFileData=0x31e38c | out: lpFindFileData=0x31e38c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x80afb060, ftCreationTime.dwHighDateTime=0x1d2de2a, ftLastAccessTime.dwLowDateTime=0x80afb060, ftLastAccessTime.dwHighDateTime=0x1d2de2a, ftLastWriteTime.dwLowDateTime=0x9270b40, ftLastWriteTime.dwHighDateTime=0x1d6eb7f, nFileSizeHigh=0x0, nFileSizeLow=0x4e0, dwReserved0=0x0, dwReserved1=0x0, cFileName="NetworkProjection.lnk", cAlternateFileName="NETWOR~1.LNK")) returned 1 [0091.043] FindNextFileW (in: hFindFile=0x382000, lpFindFileData=0x31e38c | out: lpFindFileData=0x31e38c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2d8b74ec, ftCreationTime.dwHighDateTime=0x1ca043f, ftLastAccessTime.dwLowDateTime=0x2d8b74ec, ftLastAccessTime.dwHighDateTime=0x1ca043f, ftLastWriteTime.dwLowDateTime=0x92bce00, ftLastWriteTime.dwHighDateTime=0x1d6eb7f, nFileSizeHigh=0x0, nFileSizeLow=0x4e0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Paint.lnk", cAlternateFileName="")) returned 1 [0091.043] FindNextFileW (in: hFindFile=0x382000, lpFindFileData=0x31e38c | out: lpFindFileData=0x31e38c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x173a8e5b, ftCreationTime.dwHighDateTime=0x1ca043f, ftLastAccessTime.dwLowDateTime=0x173a8e5b, ftLastAccessTime.dwHighDateTime=0x1ca043f, ftLastWriteTime.dwLowDateTime=0x92e2f60, ftLastWriteTime.dwHighDateTime=0x1d6eb7f, nFileSizeHigh=0x0, nFileSizeLow=0x560, dwReserved0=0x0, dwReserved1=0x0, cFileName="Remote Desktop Connection.lnk", cAlternateFileName="REMOTE~1.LNK")) returned 1 [0091.043] FindNextFileW (in: hFindFile=0x382000, lpFindFileData=0x31e38c | out: lpFindFileData=0x31e38c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x81caf400, ftCreationTime.dwHighDateTime=0x1d2de2a, ftLastAccessTime.dwLowDateTime=0x81caf400, ftLastAccessTime.dwHighDateTime=0x1d2de2a, ftLastWriteTime.dwLowDateTime=0x93090c0, ftLastWriteTime.dwHighDateTime=0x1d6eb7f, nFileSizeHigh=0x0, nFileSizeLow=0x500, dwReserved0=0x0, dwReserved1=0x0, cFileName="Snipping Tool.lnk", cAlternateFileName="SNIPPI~1.LNK")) returned 1 [0091.044] FindNextFileW (in: hFindFile=0x382000, lpFindFileData=0x31e38c | out: lpFindFileData=0x31e38c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8aad4ba5, ftCreationTime.dwHighDateTime=0x1ca043f, ftLastAccessTime.dwLowDateTime=0x8aad4ba5, ftLastAccessTime.dwHighDateTime=0x1ca043f, ftLastWriteTime.dwLowDateTime=0x93a1640, ftLastWriteTime.dwHighDateTime=0x1d6eb7f, nFileSizeHigh=0x0, nFileSizeLow=0x540, dwReserved0=0x0, dwReserved1=0x0, cFileName="Sound Recorder.lnk", cAlternateFileName="SOUNDR~1.LNK")) returned 1 [0091.044] FindNextFileW (in: hFindFile=0x382000, lpFindFileData=0x31e38c | out: lpFindFileData=0x31e38c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x80cc40e0, ftCreationTime.dwHighDateTime=0x1d2de2a, ftLastAccessTime.dwLowDateTime=0x80cc40e0, ftLastAccessTime.dwHighDateTime=0x1d2de2a, ftLastWriteTime.dwLowDateTime=0x93c77a0, ftLastWriteTime.dwHighDateTime=0x1d6eb7f, nFileSizeHigh=0x0, nFileSizeLow=0x550, dwReserved0=0x0, dwReserved1=0x0, cFileName="Sticky Notes.lnk", cAlternateFileName="STICKY~1.LNK")) returned 1 [0091.044] FindNextFileW (in: hFindFile=0x382000, lpFindFileData=0x31e38c | out: lpFindFileData=0x31e38c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3c9baa28, ftCreationTime.dwHighDateTime=0x1ca043f, ftLastAccessTime.dwLowDateTime=0x3c9baa28, ftLastAccessTime.dwHighDateTime=0x1ca043f, ftLastWriteTime.dwLowDateTime=0x93ed900, ftLastWriteTime.dwHighDateTime=0x1d6eb7f, nFileSizeHigh=0x0, nFileSizeLow=0x4f0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Sync Center.lnk", cAlternateFileName="SYNCCE~1.LNK")) returned 1 [0091.044] FindNextFileW (in: hFindFile=0x382000, lpFindFileData=0x31e38c | out: lpFindFileData=0x31e38c*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0xfd9dbcac, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x8ace9ee9, ftLastAccessTime.dwHighDateTime=0x1ca043f, ftLastWriteTime.dwLowDateTime=0x8ace9ee9, ftLastWriteTime.dwHighDateTime=0x1ca043f, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="System Tools", cAlternateFileName="SYSTEM~1")) returned 1 [0091.044] FindNextFileW (in: hFindFile=0x382000, lpFindFileData=0x31e38c | out: lpFindFileData=0x31e38c*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x9182055d, ftCreationTime.dwHighDateTime=0x1cbf8eb, ftLastAccessTime.dwLowDateTime=0x8126b520, ftLastAccessTime.dwHighDateTime=0x1d2de2a, ftLastWriteTime.dwLowDateTime=0x81291680, ftLastWriteTime.dwHighDateTime=0x1d2de2a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Tablet PC", cAlternateFileName="TABLET~1")) returned 1 [0091.044] FindNextFileW (in: hFindFile=0x382000, lpFindFileData=0x31e38c | out: lpFindFileData=0x31e38c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8b13a6d0, ftCreationTime.dwHighDateTime=0x1ca043f, ftLastAccessTime.dwLowDateTime=0x8b13a6d0, ftLastAccessTime.dwHighDateTime=0x1ca043f, ftLastWriteTime.dwLowDateTime=0x9413a60, ftLastWriteTime.dwHighDateTime=0x1d6eb7f, nFileSizeHigh=0x0, nFileSizeLow=0x630, dwReserved0=0x0, dwReserved1=0x0, cFileName="Welcome Center.lnk", cAlternateFileName="WELCOM~1.LNK")) returned 1 [0091.044] FindNextFileW (in: hFindFile=0x382000, lpFindFileData=0x31e38c | out: lpFindFileData=0x31e38c*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x80020c30, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x8d79c9d7, ftLastAccessTime.dwHighDateTime=0x1ca043f, ftLastWriteTime.dwLowDateTime=0x8d7c2b37, ftLastWriteTime.dwHighDateTime=0x1ca043f, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Windows PowerShell", cAlternateFileName="WINDOW~1")) returned 1 [0091.045] FindNextFileW (in: hFindFile=0x382000, lpFindFileData=0x31e38c | out: lpFindFileData=0x31e38c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3d25b9f8, ftCreationTime.dwHighDateTime=0x1ca043f, ftLastAccessTime.dwLowDateTime=0x3d25b9f8, ftLastAccessTime.dwHighDateTime=0x1ca043f, ftLastWriteTime.dwLowDateTime=0x9439bc0, ftLastWriteTime.dwHighDateTime=0x1d6eb7f, nFileSizeHigh=0x0, nFileSizeLow=0x530, dwReserved0=0x0, dwReserved1=0x0, cFileName="Wordpad.lnk", cAlternateFileName="")) returned 1 [0091.045] FindNextFileW (in: hFindFile=0x382000, lpFindFileData=0x31e38c | out: lpFindFileData=0x31e38c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3d25b9f8, ftCreationTime.dwHighDateTime=0x1ca043f, ftLastAccessTime.dwLowDateTime=0x3d25b9f8, ftLastAccessTime.dwHighDateTime=0x1ca043f, ftLastWriteTime.dwLowDateTime=0x9439bc0, ftLastWriteTime.dwHighDateTime=0x1d6eb7f, nFileSizeHigh=0x0, nFileSizeLow=0x530, dwReserved0=0x0, dwReserved1=0x0, cFileName="Wordpad.lnk", cAlternateFileName="")) returned 0 [0091.045] FindClose (in: hFindFile=0x382000 | out: hFindFile=0x382000) returned 1 [0091.045] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e614) returned 1 [0091.045] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e620) returned 1 [0091.045] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Programs\\Accessories\\Calculator.lnk", nBufferLength=0x105, lpBuffer=0x31e02c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Programs\\Accessories\\Calculator.lnk", lpFilePart=0x0) returned 0x53 [0091.045] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e520) returned 1 [0091.045] CreateFileW (lpFileName="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Programs\\Accessories\\Calculator.lnk" (normalized: "c:\\users\\all users\\microsoft\\windows\\start menu\\programs\\accessories\\calculator.lnk"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x178 [0091.045] GetFileType (hFile=0x178) returned 0x1 [0091.045] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e51c) returned 1 [0091.045] GetFileType (hFile=0x178) returned 0x1 [0091.045] GetFileSize (in: hFile=0x178, lpFileSizeHigh=0x31e628 | out: lpFileSizeHigh=0x31e628*=0x0) returned 0x4d0 [0091.045] ReadFile (in: hFile=0x178, lpBuffer=0x26ab5dc, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x31e5d4, lpOverlapped=0x0 | out: lpBuffer=0x26ab5dc*, lpNumberOfBytesRead=0x31e5d4*=0x4d0, lpOverlapped=0x0) returned 1 [0091.046] CloseHandle (hObject=0x178) returned 1 [0091.060] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Programs\\Accessories\\Calculator.lnk", nBufferLength=0x105, lpBuffer=0x31e018, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Programs\\Accessories\\Calculator.lnk", lpFilePart=0x0) returned 0x53 [0091.060] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e50c) returned 1 [0091.060] CreateFileW (lpFileName="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Programs\\Accessories\\Calculator.lnk" (normalized: "c:\\users\\all users\\microsoft\\windows\\start menu\\programs\\accessories\\calculator.lnk"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x178 [0091.061] GetFileType (hFile=0x178) returned 0x1 [0091.061] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e508) returned 1 [0091.061] GetFileType (hFile=0x178) returned 0x1 [0091.061] WriteFile (in: hFile=0x178, lpBuffer=0x26fad78*, nNumberOfBytesToWrite=0x4e0, lpNumberOfBytesWritten=0x31e59c, lpOverlapped=0x0 | out: lpBuffer=0x26fad78*, lpNumberOfBytesWritten=0x31e59c*=0x4e0, lpOverlapped=0x0) returned 1 [0091.062] CloseHandle (hObject=0x178) returned 1 [0091.062] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Programs\\Accessories\\Calculator.lnk", nBufferLength=0x105, lpBuffer=0x31e14c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Programs\\Accessories\\Calculator.lnk", lpFilePart=0x0) returned 0x53 [0091.063] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Programs\\Accessories\\Calculator.lnk", nBufferLength=0x105, lpBuffer=0x31e14c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Programs\\Accessories\\Calculator.lnk", lpFilePart=0x0) returned 0x53 [0091.063] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e5ac) returned 1 [0091.063] GetFileAttributesExW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Programs\\Accessories\\Calculator.lnk" (normalized: "c:\\users\\all users\\microsoft\\windows\\start menu\\programs\\accessories\\calculator.lnk"), fInfoLevelId=0x0, lpFileInformation=0x31e628 | out: lpFileInformation=0x31e628*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3e3e9c58, ftCreationTime.dwHighDateTime=0x1ca043f, ftLastAccessTime.dwLowDateTime=0x3e3e9c58, ftLastAccessTime.dwHighDateTime=0x1ca043f, ftLastWriteTime.dwLowDateTime=0x19b8dd80, ftLastWriteTime.dwHighDateTime=0x1d6eb7f, nFileSizeHigh=0x0, nFileSizeLow=0x4e0)) returned 1 [0091.063] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e5a8) returned 1 [0091.063] MoveFileW (lpExistingFileName="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Programs\\Accessories\\Calculator.lnk" (normalized: "c:\\users\\all users\\microsoft\\windows\\start menu\\programs\\accessories\\calculator.lnk"), lpNewFileName="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Programs\\Accessories\\Calculator.lnk" (normalized: "c:\\users\\all users\\microsoft\\windows\\start menu\\programs\\accessories\\calculator.lnk")) returned 1 [0091.063] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Programs\\Accessories\\displayswitch.lnk", nBufferLength=0x105, lpBuffer=0x31e02c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Programs\\Accessories\\displayswitch.lnk", lpFilePart=0x0) returned 0x56 [0091.063] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e520) returned 1 [0091.063] CreateFileW (lpFileName="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Programs\\Accessories\\displayswitch.lnk" (normalized: "c:\\users\\all users\\microsoft\\windows\\start menu\\programs\\accessories\\displayswitch.lnk"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x178 [0091.064] GetFileType (hFile=0x178) returned 0x1 [0091.064] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e51c) returned 1 [0091.064] GetFileType (hFile=0x178) returned 0x1 [0091.064] GetFileSize (in: hFile=0x178, lpFileSizeHigh=0x31e628 | out: lpFileSizeHigh=0x31e628*=0x0) returned 0x500 [0091.064] ReadFile (in: hFile=0x178, lpBuffer=0x26fc570, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x31e5d4, lpOverlapped=0x0 | out: lpBuffer=0x26fc570*, lpNumberOfBytesRead=0x31e5d4*=0x500, lpOverlapped=0x0) returned 1 [0091.064] CloseHandle (hObject=0x178) returned 1 [0091.078] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Programs\\Accessories\\displayswitch.lnk", nBufferLength=0x105, lpBuffer=0x31e018, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Programs\\Accessories\\displayswitch.lnk", lpFilePart=0x0) returned 0x56 [0091.078] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e50c) returned 1 [0091.078] CreateFileW (lpFileName="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Programs\\Accessories\\displayswitch.lnk" (normalized: "c:\\users\\all users\\microsoft\\windows\\start menu\\programs\\accessories\\displayswitch.lnk"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x178 [0091.079] GetFileType (hFile=0x178) returned 0x1 [0091.079] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e508) returned 1 [0091.079] GetFileType (hFile=0x178) returned 0x1 [0091.079] WriteFile (in: hFile=0x178, lpBuffer=0x274be08*, nNumberOfBytesToWrite=0x510, lpNumberOfBytesWritten=0x31e59c, lpOverlapped=0x0 | out: lpBuffer=0x274be08*, lpNumberOfBytesWritten=0x31e59c*=0x510, lpOverlapped=0x0) returned 1 [0091.080] CloseHandle (hObject=0x178) returned 1 [0091.080] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Programs\\Accessories\\displayswitch.lnk", nBufferLength=0x105, lpBuffer=0x31e14c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Programs\\Accessories\\displayswitch.lnk", lpFilePart=0x0) returned 0x56 [0091.081] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Programs\\Accessories\\displayswitch.lnk", nBufferLength=0x105, lpBuffer=0x31e14c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Programs\\Accessories\\displayswitch.lnk", lpFilePart=0x0) returned 0x56 [0091.081] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e5ac) returned 1 [0091.081] GetFileAttributesExW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Programs\\Accessories\\displayswitch.lnk" (normalized: "c:\\users\\all users\\microsoft\\windows\\start menu\\programs\\accessories\\displayswitch.lnk"), fInfoLevelId=0x0, lpFileInformation=0x31e628 | out: lpFileInformation=0x31e628*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x27fbfe08, ftCreationTime.dwHighDateTime=0x1ca043f, ftLastAccessTime.dwLowDateTime=0x27fbfe08, ftLastAccessTime.dwHighDateTime=0x1ca043f, ftLastWriteTime.dwLowDateTime=0x19bb3ee0, ftLastWriteTime.dwHighDateTime=0x1d6eb7f, nFileSizeHigh=0x0, nFileSizeLow=0x510)) returned 1 [0091.081] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e5a8) returned 1 [0091.081] MoveFileW (lpExistingFileName="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Programs\\Accessories\\displayswitch.lnk" (normalized: "c:\\users\\all users\\microsoft\\windows\\start menu\\programs\\accessories\\displayswitch.lnk"), lpNewFileName="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Programs\\Accessories\\displayswitch.lnk" (normalized: "c:\\users\\all users\\microsoft\\windows\\start menu\\programs\\accessories\\displayswitch.lnk")) returned 1 [0091.081] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Programs\\Accessories\\Math Input Panel.lnk", nBufferLength=0x105, lpBuffer=0x31e02c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Programs\\Accessories\\Math Input Panel.lnk", lpFilePart=0x0) returned 0x59 [0091.081] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e520) returned 1 [0091.081] CreateFileW (lpFileName="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Programs\\Accessories\\Math Input Panel.lnk" (normalized: "c:\\users\\all users\\microsoft\\windows\\start menu\\programs\\accessories\\math input panel.lnk"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x178 [0091.082] GetFileType (hFile=0x178) returned 0x1 [0091.082] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e51c) returned 1 [0091.082] GetFileType (hFile=0x178) returned 0x1 [0091.082] GetFileSize (in: hFile=0x178, lpFileSizeHigh=0x31e628 | out: lpFileSizeHigh=0x31e628*=0x0) returned 0x560 [0091.082] ReadFile (in: hFile=0x178, lpBuffer=0x274d664, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x31e5d4, lpOverlapped=0x0 | out: lpBuffer=0x274d664*, lpNumberOfBytesRead=0x31e5d4*=0x560, lpOverlapped=0x0) returned 1 [0091.082] CloseHandle (hObject=0x178) returned 1 [0091.096] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Programs\\Accessories\\Math Input Panel.lnk", nBufferLength=0x105, lpBuffer=0x31e018, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Programs\\Accessories\\Math Input Panel.lnk", lpFilePart=0x0) returned 0x59 [0091.096] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e50c) returned 1 [0091.096] CreateFileW (lpFileName="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Programs\\Accessories\\Math Input Panel.lnk" (normalized: "c:\\users\\all users\\microsoft\\windows\\start menu\\programs\\accessories\\math input panel.lnk"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x178 [0091.098] GetFileType (hFile=0x178) returned 0x1 [0091.098] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e508) returned 1 [0091.098] GetFileType (hFile=0x178) returned 0x1 [0091.098] WriteFile (in: hFile=0x178, lpBuffer=0x279d0e8*, nNumberOfBytesToWrite=0x570, lpNumberOfBytesWritten=0x31e59c, lpOverlapped=0x0 | out: lpBuffer=0x279d0e8*, lpNumberOfBytesWritten=0x31e59c*=0x570, lpOverlapped=0x0) returned 1 [0091.099] CloseHandle (hObject=0x178) returned 1 [0091.099] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Programs\\Accessories\\Math Input Panel.lnk", nBufferLength=0x105, lpBuffer=0x31e14c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Programs\\Accessories\\Math Input Panel.lnk", lpFilePart=0x0) returned 0x59 [0091.099] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Programs\\Accessories\\Math Input Panel.lnk", nBufferLength=0x105, lpBuffer=0x31e14c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Programs\\Accessories\\Math Input Panel.lnk", lpFilePart=0x0) returned 0x59 [0091.099] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e5ac) returned 1 [0091.099] GetFileAttributesExW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Programs\\Accessories\\Math Input Panel.lnk" (normalized: "c:\\users\\all users\\microsoft\\windows\\start menu\\programs\\accessories\\math input panel.lnk"), fInfoLevelId=0x0, lpFileInformation=0x31e628 | out: lpFileInformation=0x31e628*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x80c2bb60, ftCreationTime.dwHighDateTime=0x1d2de2a, ftLastAccessTime.dwLowDateTime=0x80c2bb60, ftLastAccessTime.dwHighDateTime=0x1d2de2a, ftLastWriteTime.dwLowDateTime=0x19bda040, ftLastWriteTime.dwHighDateTime=0x1d6eb7f, nFileSizeHigh=0x0, nFileSizeLow=0x570)) returned 1 [0091.099] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e5a8) returned 1 [0091.099] MoveFileW (lpExistingFileName="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Programs\\Accessories\\Math Input Panel.lnk" (normalized: "c:\\users\\all users\\microsoft\\windows\\start menu\\programs\\accessories\\math input panel.lnk"), lpNewFileName="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Programs\\Accessories\\Math Input Panel.lnk" (normalized: "c:\\users\\all users\\microsoft\\windows\\start menu\\programs\\accessories\\math input panel.lnk")) returned 1 [0091.100] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Programs\\Accessories\\Mobility Center.lnk", nBufferLength=0x105, lpBuffer=0x31e02c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Programs\\Accessories\\Mobility Center.lnk", lpFilePart=0x0) returned 0x58 [0091.100] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e520) returned 1 [0091.100] CreateFileW (lpFileName="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Programs\\Accessories\\Mobility Center.lnk" (normalized: "c:\\users\\all users\\microsoft\\windows\\start menu\\programs\\accessories\\mobility center.lnk"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x178 [0091.100] GetFileType (hFile=0x178) returned 0x1 [0091.100] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e51c) returned 1 [0091.100] GetFileType (hFile=0x178) returned 0x1 [0091.100] GetFileSize (in: hFile=0x178, lpFileSizeHigh=0x31e628 | out: lpFileSizeHigh=0x31e628*=0x0) returned 0x4e0 [0091.100] ReadFile (in: hFile=0x178, lpBuffer=0x279e8c8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x31e5d4, lpOverlapped=0x0 | out: lpBuffer=0x279e8c8*, lpNumberOfBytesRead=0x31e5d4*=0x4e0, lpOverlapped=0x0) returned 1 [0091.115] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Programs\\Accessories\\Mobility Center.lnk", nBufferLength=0x105, lpBuffer=0x31e018, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Programs\\Accessories\\Mobility Center.lnk", lpFilePart=0x0) returned 0x58 [0091.115] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e50c) returned 1 [0091.115] CreateFileW (lpFileName="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Programs\\Accessories\\Mobility Center.lnk" (normalized: "c:\\users\\all users\\microsoft\\windows\\start menu\\programs\\accessories\\mobility center.lnk"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x178 [0091.116] GetFileType (hFile=0x178) returned 0x1 [0091.116] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e508) returned 1 [0091.116] GetFileType (hFile=0x178) returned 0x1 [0091.116] WriteFile (in: hFile=0x178, lpBuffer=0x27ee0c8*, nNumberOfBytesToWrite=0x4f0, lpNumberOfBytesWritten=0x31e59c, lpOverlapped=0x0 | out: lpBuffer=0x27ee0c8*, lpNumberOfBytesWritten=0x31e59c*=0x4f0, lpOverlapped=0x0) returned 1 [0091.118] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Programs\\Accessories\\Mobility Center.lnk", nBufferLength=0x105, lpBuffer=0x31e14c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Programs\\Accessories\\Mobility Center.lnk", lpFilePart=0x0) returned 0x58 [0091.118] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Programs\\Accessories\\Mobility Center.lnk", nBufferLength=0x105, lpBuffer=0x31e14c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Programs\\Accessories\\Mobility Center.lnk", lpFilePart=0x0) returned 0x58 [0091.118] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e5ac) returned 1 [0091.118] GetFileAttributesExW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Programs\\Accessories\\Mobility Center.lnk" (normalized: "c:\\users\\all users\\microsoft\\windows\\start menu\\programs\\accessories\\mobility center.lnk"), fInfoLevelId=0x0, lpFileInformation=0x31e628 | out: lpFileInformation=0x31e628*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x80c77e20, ftCreationTime.dwHighDateTime=0x1d2de2a, ftLastAccessTime.dwLowDateTime=0x80c77e20, ftLastAccessTime.dwHighDateTime=0x1d2de2a, ftLastWriteTime.dwLowDateTime=0x19c001a0, ftLastWriteTime.dwHighDateTime=0x1d6eb7f, nFileSizeHigh=0x0, nFileSizeLow=0x4f0)) returned 1 [0091.118] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e5a8) returned 1 [0091.118] MoveFileW (lpExistingFileName="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Programs\\Accessories\\Mobility Center.lnk" (normalized: "c:\\users\\all users\\microsoft\\windows\\start menu\\programs\\accessories\\mobility center.lnk"), lpNewFileName="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Programs\\Accessories\\Mobility Center.lnk" (normalized: "c:\\users\\all users\\microsoft\\windows\\start menu\\programs\\accessories\\mobility center.lnk")) returned 1 [0091.118] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Programs\\Accessories\\NetworkProjection.lnk", nBufferLength=0x105, lpBuffer=0x31e02c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Programs\\Accessories\\NetworkProjection.lnk", lpFilePart=0x0) returned 0x5a [0091.119] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e520) returned 1 [0091.119] CreateFileW (lpFileName="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Programs\\Accessories\\NetworkProjection.lnk" (normalized: "c:\\users\\all users\\microsoft\\windows\\start menu\\programs\\accessories\\networkprojection.lnk"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x178 [0091.119] GetFileType (hFile=0x178) returned 0x1 [0091.119] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e51c) returned 1 [0091.119] GetFileType (hFile=0x178) returned 0x1 [0091.119] GetFileSize (in: hFile=0x178, lpFileSizeHigh=0x31e628 | out: lpFileSizeHigh=0x31e628*=0x0) returned 0x4e0 [0091.119] ReadFile (in: hFile=0x178, lpBuffer=0x27ef8b0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x31e5d4, lpOverlapped=0x0 | out: lpBuffer=0x27ef8b0*, lpNumberOfBytesRead=0x31e5d4*=0x4e0, lpOverlapped=0x0) returned 1 [0091.159] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Programs\\Accessories\\NetworkProjection.lnk", nBufferLength=0x105, lpBuffer=0x31e018, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Programs\\Accessories\\NetworkProjection.lnk", lpFilePart=0x0) returned 0x5a [0091.159] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e50c) returned 1 [0091.159] CreateFileW (lpFileName="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Programs\\Accessories\\NetworkProjection.lnk" (normalized: "c:\\users\\all users\\microsoft\\windows\\start menu\\programs\\accessories\\networkprojection.lnk"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x178 [0091.161] GetFileType (hFile=0x178) returned 0x1 [0091.161] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e508) returned 1 [0091.161] GetFileType (hFile=0x178) returned 0x1 [0091.161] WriteFile (in: hFile=0x178, lpBuffer=0x2641518*, nNumberOfBytesToWrite=0x4f0, lpNumberOfBytesWritten=0x31e59c, lpOverlapped=0x0 | out: lpBuffer=0x2641518*, lpNumberOfBytesWritten=0x31e59c*=0x4f0, lpOverlapped=0x0) returned 1 [0091.162] CloseHandle (hObject=0x178) returned 1 [0091.162] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Programs\\Accessories\\NetworkProjection.lnk", nBufferLength=0x105, lpBuffer=0x31e14c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Programs\\Accessories\\NetworkProjection.lnk", lpFilePart=0x0) returned 0x5a [0091.162] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Programs\\Accessories\\NetworkProjection.lnk", nBufferLength=0x105, lpBuffer=0x31e14c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Programs\\Accessories\\NetworkProjection.lnk", lpFilePart=0x0) returned 0x5a [0091.162] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e5ac) returned 1 [0091.162] GetFileAttributesExW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Programs\\Accessories\\NetworkProjection.lnk" (normalized: "c:\\users\\all users\\microsoft\\windows\\start menu\\programs\\accessories\\networkprojection.lnk"), fInfoLevelId=0x0, lpFileInformation=0x31e628 | out: lpFileInformation=0x31e628*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x80afb060, ftCreationTime.dwHighDateTime=0x1d2de2a, ftLastAccessTime.dwLowDateTime=0x80afb060, ftLastAccessTime.dwHighDateTime=0x1d2de2a, ftLastWriteTime.dwLowDateTime=0x19c725c0, ftLastWriteTime.dwHighDateTime=0x1d6eb7f, nFileSizeHigh=0x0, nFileSizeLow=0x4f0)) returned 1 [0091.162] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e5a8) returned 1 [0091.162] MoveFileW (lpExistingFileName="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Programs\\Accessories\\NetworkProjection.lnk" (normalized: "c:\\users\\all users\\microsoft\\windows\\start menu\\programs\\accessories\\networkprojection.lnk"), lpNewFileName="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Programs\\Accessories\\NetworkProjection.lnk" (normalized: "c:\\users\\all users\\microsoft\\windows\\start menu\\programs\\accessories\\networkprojection.lnk")) returned 1 [0091.163] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Programs\\Accessories\\Paint.lnk", nBufferLength=0x105, lpBuffer=0x31e02c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Programs\\Accessories\\Paint.lnk", lpFilePart=0x0) returned 0x4e [0091.163] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e520) returned 1 [0091.163] CreateFileW (lpFileName="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Programs\\Accessories\\Paint.lnk" (normalized: "c:\\users\\all users\\microsoft\\windows\\start menu\\programs\\accessories\\paint.lnk"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x178 [0091.163] GetFileType (hFile=0x178) returned 0x1 [0091.163] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e51c) returned 1 [0091.163] GetFileType (hFile=0x178) returned 0x1 [0091.163] GetFileSize (in: hFile=0x178, lpFileSizeHigh=0x31e628 | out: lpFileSizeHigh=0x31e628*=0x0) returned 0x4e0 [0091.163] ReadFile (in: hFile=0x178, lpBuffer=0x2642cd8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x31e5d4, lpOverlapped=0x0 | out: lpBuffer=0x2642cd8*, lpNumberOfBytesRead=0x31e5d4*=0x4e0, lpOverlapped=0x0) returned 1 [0091.164] CloseHandle (hObject=0x178) returned 1 [0091.177] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Programs\\Accessories\\Paint.lnk", nBufferLength=0x105, lpBuffer=0x31e018, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Programs\\Accessories\\Paint.lnk", lpFilePart=0x0) returned 0x4e [0091.177] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e50c) returned 1 [0091.178] CreateFileW (lpFileName="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Programs\\Accessories\\Paint.lnk" (normalized: "c:\\users\\all users\\microsoft\\windows\\start menu\\programs\\accessories\\paint.lnk"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x178 [0091.179] GetFileType (hFile=0x178) returned 0x1 [0091.179] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e508) returned 1 [0091.179] GetFileType (hFile=0x178) returned 0x1 [0091.181] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Programs\\Accessories\\Paint.lnk", nBufferLength=0x105, lpBuffer=0x31e14c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Programs\\Accessories\\Paint.lnk", lpFilePart=0x0) returned 0x4e [0091.181] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Programs\\Accessories\\Paint.lnk", nBufferLength=0x105, lpBuffer=0x31e14c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Programs\\Accessories\\Paint.lnk", lpFilePart=0x0) returned 0x4e [0091.181] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e5ac) returned 1 [0091.181] GetFileAttributesExW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Programs\\Accessories\\Paint.lnk" (normalized: "c:\\users\\all users\\microsoft\\windows\\start menu\\programs\\accessories\\paint.lnk"), fInfoLevelId=0x0, lpFileInformation=0x31e628 | out: lpFileInformation=0x31e628*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2d8b74ec, ftCreationTime.dwHighDateTime=0x1ca043f, ftLastAccessTime.dwLowDateTime=0x2d8b74ec, ftLastAccessTime.dwHighDateTime=0x1ca043f, ftLastWriteTime.dwLowDateTime=0x19c98720, ftLastWriteTime.dwHighDateTime=0x1d6eb7f, nFileSizeHigh=0x0, nFileSizeLow=0x4f0)) returned 1 [0091.181] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e5a8) returned 1 [0091.181] MoveFileW (lpExistingFileName="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Programs\\Accessories\\Paint.lnk" (normalized: "c:\\users\\all users\\microsoft\\windows\\start menu\\programs\\accessories\\paint.lnk"), lpNewFileName="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Programs\\Accessories\\Paint.lnk" (normalized: "c:\\users\\all users\\microsoft\\windows\\start menu\\programs\\accessories\\paint.lnk")) returned 1 [0091.182] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Programs\\Accessories\\Remote Desktop Connection.lnk", nBufferLength=0x105, lpBuffer=0x31e02c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Programs\\Accessories\\Remote Desktop Connection.lnk", lpFilePart=0x0) returned 0x62 [0091.182] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e520) returned 1 [0091.182] CreateFileW (lpFileName="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Programs\\Accessories\\Remote Desktop Connection.lnk" (normalized: "c:\\users\\all users\\microsoft\\windows\\start menu\\programs\\accessories\\remote desktop connection.lnk"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x178 [0091.182] GetFileType (hFile=0x178) returned 0x1 [0091.182] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e51c) returned 1 [0091.182] GetFileType (hFile=0x178) returned 0x1 [0091.182] GetFileSize (in: hFile=0x178, lpFileSizeHigh=0x31e628 | out: lpFileSizeHigh=0x31e628*=0x0) returned 0x560 [0091.183] ReadFile (in: hFile=0x178, lpBuffer=0x2693e6c, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x31e5d4, lpOverlapped=0x0 | out: lpBuffer=0x2693e6c*, lpNumberOfBytesRead=0x31e5d4*=0x560, lpOverlapped=0x0) returned 1 [0091.183] CloseHandle (hObject=0x178) returned 1 [0091.196] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Programs\\Accessories\\Remote Desktop Connection.lnk", nBufferLength=0x105, lpBuffer=0x31e018, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Programs\\Accessories\\Remote Desktop Connection.lnk", lpFilePart=0x0) returned 0x62 [0091.196] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e50c) returned 1 [0091.196] CreateFileW (lpFileName="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Programs\\Accessories\\Remote Desktop Connection.lnk" (normalized: "c:\\users\\all users\\microsoft\\windows\\start menu\\programs\\accessories\\remote desktop connection.lnk"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x178 [0091.197] GetFileType (hFile=0x178) returned 0x1 [0091.197] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e508) returned 1 [0091.197] GetFileType (hFile=0x178) returned 0x1 [0091.197] WriteFile (in: hFile=0x178, lpBuffer=0x26e3914*, nNumberOfBytesToWrite=0x570, lpNumberOfBytesWritten=0x31e59c, lpOverlapped=0x0 | out: lpBuffer=0x26e3914*, lpNumberOfBytesWritten=0x31e59c*=0x570, lpOverlapped=0x0) returned 1 [0091.199] CloseHandle (hObject=0x178) returned 1 [0091.199] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Programs\\Accessories\\Remote Desktop Connection.lnk", nBufferLength=0x105, lpBuffer=0x31e14c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Programs\\Accessories\\Remote Desktop Connection.lnk", lpFilePart=0x0) returned 0x62 [0091.199] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Programs\\Accessories\\Remote Desktop Connection.lnk", nBufferLength=0x105, lpBuffer=0x31e14c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Programs\\Accessories\\Remote Desktop Connection.lnk", lpFilePart=0x0) returned 0x62 [0091.199] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e5ac) returned 1 [0091.199] GetFileAttributesExW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Programs\\Accessories\\Remote Desktop Connection.lnk" (normalized: "c:\\users\\all users\\microsoft\\windows\\start menu\\programs\\accessories\\remote desktop connection.lnk"), fInfoLevelId=0x0, lpFileInformation=0x31e628 | out: lpFileInformation=0x31e628*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x173a8e5b, ftCreationTime.dwHighDateTime=0x1ca043f, ftLastAccessTime.dwLowDateTime=0x173a8e5b, ftLastAccessTime.dwHighDateTime=0x1ca043f, ftLastWriteTime.dwLowDateTime=0x19ce49e0, ftLastWriteTime.dwHighDateTime=0x1d6eb7f, nFileSizeHigh=0x0, nFileSizeLow=0x570)) returned 1 [0091.199] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e5a8) returned 1 [0091.199] MoveFileW (lpExistingFileName="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Programs\\Accessories\\Remote Desktop Connection.lnk" (normalized: "c:\\users\\all users\\microsoft\\windows\\start menu\\programs\\accessories\\remote desktop connection.lnk"), lpNewFileName="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Programs\\Accessories\\Remote Desktop Connection.lnk" (normalized: "c:\\users\\all users\\microsoft\\windows\\start menu\\programs\\accessories\\remote desktop connection.lnk")) returned 1 [0091.200] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Programs\\Accessories\\Snipping Tool.lnk", nBufferLength=0x105, lpBuffer=0x31e02c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Programs\\Accessories\\Snipping Tool.lnk", lpFilePart=0x0) returned 0x56 [0091.200] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e520) returned 1 [0091.200] CreateFileW (lpFileName="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Programs\\Accessories\\Snipping Tool.lnk" (normalized: "c:\\users\\all users\\microsoft\\windows\\start menu\\programs\\accessories\\snipping tool.lnk"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x178 [0091.200] GetFileType (hFile=0x178) returned 0x1 [0091.200] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e51c) returned 1 [0091.200] GetFileType (hFile=0x178) returned 0x1 [0091.200] GetFileSize (in: hFile=0x178, lpFileSizeHigh=0x31e628 | out: lpFileSizeHigh=0x31e628*=0x0) returned 0x500 [0091.200] ReadFile (in: hFile=0x178, lpBuffer=0x26e5134, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x31e5d4, lpOverlapped=0x0 | out: lpBuffer=0x26e5134*, lpNumberOfBytesRead=0x31e5d4*=0x500, lpOverlapped=0x0) returned 1 [0091.201] CloseHandle (hObject=0x178) returned 1 [0091.214] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Programs\\Accessories\\Snipping Tool.lnk", nBufferLength=0x105, lpBuffer=0x31e018, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Programs\\Accessories\\Snipping Tool.lnk", lpFilePart=0x0) returned 0x56 [0091.214] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e50c) returned 1 [0091.214] CreateFileW (lpFileName="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Programs\\Accessories\\Snipping Tool.lnk" (normalized: "c:\\users\\all users\\microsoft\\windows\\start menu\\programs\\accessories\\snipping tool.lnk"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x178 [0091.215] GetFileType (hFile=0x178) returned 0x1 [0091.215] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e508) returned 1 [0091.215] GetFileType (hFile=0x178) returned 0x1 [0091.216] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Programs\\Accessories\\Snipping Tool.lnk", nBufferLength=0x105, lpBuffer=0x31e14c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Programs\\Accessories\\Snipping Tool.lnk", lpFilePart=0x0) returned 0x56 [0091.216] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Programs\\Accessories\\Snipping Tool.lnk", nBufferLength=0x105, lpBuffer=0x31e14c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Programs\\Accessories\\Snipping Tool.lnk", lpFilePart=0x0) returned 0x56 [0091.216] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e5ac) returned 1 [0091.216] GetFileAttributesExW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Programs\\Accessories\\Snipping Tool.lnk" (normalized: "c:\\users\\all users\\microsoft\\windows\\start menu\\programs\\accessories\\snipping tool.lnk"), fInfoLevelId=0x0, lpFileInformation=0x31e628 | out: lpFileInformation=0x31e628*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x81caf400, ftCreationTime.dwHighDateTime=0x1d2de2a, ftLastAccessTime.dwLowDateTime=0x81caf400, ftLastAccessTime.dwHighDateTime=0x1d2de2a, ftLastWriteTime.dwLowDateTime=0x19d0ab40, ftLastWriteTime.dwHighDateTime=0x1d6eb7f, nFileSizeHigh=0x0, nFileSizeLow=0x510)) returned 1 [0091.216] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e5a8) returned 1 [0091.217] MoveFileW (lpExistingFileName="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Programs\\Accessories\\Snipping Tool.lnk" (normalized: "c:\\users\\all users\\microsoft\\windows\\start menu\\programs\\accessories\\snipping tool.lnk"), lpNewFileName="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Programs\\Accessories\\Snipping Tool.lnk" (normalized: "c:\\users\\all users\\microsoft\\windows\\start menu\\programs\\accessories\\snipping tool.lnk")) returned 1 [0091.217] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Programs\\Accessories\\Sound Recorder.lnk", nBufferLength=0x105, lpBuffer=0x31e02c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Programs\\Accessories\\Sound Recorder.lnk", lpFilePart=0x0) returned 0x57 [0091.217] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e520) returned 1 [0091.217] CreateFileW (lpFileName="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Programs\\Accessories\\Sound Recorder.lnk" (normalized: "c:\\users\\all users\\microsoft\\windows\\start menu\\programs\\accessories\\sound recorder.lnk"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x178 [0091.217] GetFileType (hFile=0x178) returned 0x1 [0091.217] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e51c) returned 1 [0091.217] GetFileType (hFile=0x178) returned 0x1 [0091.217] GetFileSize (in: hFile=0x178, lpFileSizeHigh=0x31e628 | out: lpFileSizeHigh=0x31e628*=0x0) returned 0x540 [0091.218] ReadFile (in: hFile=0x178, lpBuffer=0x2736200, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x31e5d4, lpOverlapped=0x0 | out: lpBuffer=0x2736200*, lpNumberOfBytesRead=0x31e5d4*=0x540, lpOverlapped=0x0) returned 1 [0091.218] CloseHandle (hObject=0x178) returned 1 [0091.232] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Programs\\Accessories\\Sound Recorder.lnk", nBufferLength=0x105, lpBuffer=0x31e018, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Programs\\Accessories\\Sound Recorder.lnk", lpFilePart=0x0) returned 0x57 [0091.232] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e50c) returned 1 [0091.232] CreateFileW (lpFileName="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Programs\\Accessories\\Sound Recorder.lnk" (normalized: "c:\\users\\all users\\microsoft\\windows\\start menu\\programs\\accessories\\sound recorder.lnk"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x178 [0091.233] GetFileType (hFile=0x178) returned 0x1 [0091.233] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e508) returned 1 [0091.233] GetFileType (hFile=0x178) returned 0x1 [0091.233] WriteFile (in: hFile=0x178, lpBuffer=0x2785bdc*, nNumberOfBytesToWrite=0x550, lpNumberOfBytesWritten=0x31e59c, lpOverlapped=0x0 | out: lpBuffer=0x2785bdc*, lpNumberOfBytesWritten=0x31e59c*=0x550, lpOverlapped=0x0) returned 1 [0091.234] CloseHandle (hObject=0x178) returned 1 [0091.234] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Programs\\Accessories\\Sound Recorder.lnk", nBufferLength=0x105, lpBuffer=0x31e14c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Programs\\Accessories\\Sound Recorder.lnk", lpFilePart=0x0) returned 0x57 [0091.234] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Programs\\Accessories\\Sound Recorder.lnk", nBufferLength=0x105, lpBuffer=0x31e14c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Programs\\Accessories\\Sound Recorder.lnk", lpFilePart=0x0) returned 0x57 [0091.234] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e5ac) returned 1 [0091.234] GetFileAttributesExW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Programs\\Accessories\\Sound Recorder.lnk" (normalized: "c:\\users\\all users\\microsoft\\windows\\start menu\\programs\\accessories\\sound recorder.lnk"), fInfoLevelId=0x0, lpFileInformation=0x31e628 | out: lpFileInformation=0x31e628*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8aad4ba5, ftCreationTime.dwHighDateTime=0x1ca043f, ftLastAccessTime.dwLowDateTime=0x8aad4ba5, ftLastAccessTime.dwHighDateTime=0x1ca043f, ftLastWriteTime.dwLowDateTime=0x19d30ca0, ftLastWriteTime.dwHighDateTime=0x1d6eb7f, nFileSizeHigh=0x0, nFileSizeLow=0x550)) returned 1 [0091.235] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e5a8) returned 1 [0091.235] MoveFileW (lpExistingFileName="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Programs\\Accessories\\Sound Recorder.lnk" (normalized: "c:\\users\\all users\\microsoft\\windows\\start menu\\programs\\accessories\\sound recorder.lnk"), lpNewFileName="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Programs\\Accessories\\Sound Recorder.lnk" (normalized: "c:\\users\\all users\\microsoft\\windows\\start menu\\programs\\accessories\\sound recorder.lnk")) returned 1 [0091.235] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Programs\\Accessories\\Sticky Notes.lnk", nBufferLength=0x105, lpBuffer=0x31e02c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Programs\\Accessories\\Sticky Notes.lnk", lpFilePart=0x0) returned 0x55 [0091.235] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e520) returned 1 [0091.235] CreateFileW (lpFileName="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Programs\\Accessories\\Sticky Notes.lnk" (normalized: "c:\\users\\all users\\microsoft\\windows\\start menu\\programs\\accessories\\sticky notes.lnk"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x178 [0091.235] GetFileType (hFile=0x178) returned 0x1 [0091.235] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e51c) returned 1 [0091.235] GetFileType (hFile=0x178) returned 0x1 [0091.236] GetFileSize (in: hFile=0x178, lpFileSizeHigh=0x31e628 | out: lpFileSizeHigh=0x31e628*=0x0) returned 0x550 [0091.236] ReadFile (in: hFile=0x178, lpBuffer=0x2787418, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x31e5d4, lpOverlapped=0x0 | out: lpBuffer=0x2787418*, lpNumberOfBytesRead=0x31e5d4*=0x550, lpOverlapped=0x0) returned 1 [0091.236] CloseHandle (hObject=0x178) returned 1 [0091.249] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Programs\\Accessories\\Sticky Notes.lnk", nBufferLength=0x105, lpBuffer=0x31e018, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Programs\\Accessories\\Sticky Notes.lnk", lpFilePart=0x0) returned 0x55 [0091.250] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e50c) returned 1 [0091.250] CreateFileW (lpFileName="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Programs\\Accessories\\Sticky Notes.lnk" (normalized: "c:\\users\\all users\\microsoft\\windows\\start menu\\programs\\accessories\\sticky notes.lnk"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x178 [0091.251] GetFileType (hFile=0x178) returned 0x1 [0091.251] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e508) returned 1 [0091.251] GetFileType (hFile=0x178) returned 0x1 [0091.251] WriteFile (in: hFile=0x178, lpBuffer=0x27d6e3c*, nNumberOfBytesToWrite=0x560, lpNumberOfBytesWritten=0x31e59c, lpOverlapped=0x0 | out: lpBuffer=0x27d6e3c*, lpNumberOfBytesWritten=0x31e59c*=0x560, lpOverlapped=0x0) returned 1 [0091.252] CloseHandle (hObject=0x178) returned 1 [0091.252] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Programs\\Accessories\\Sticky Notes.lnk", nBufferLength=0x105, lpBuffer=0x31e14c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Programs\\Accessories\\Sticky Notes.lnk", lpFilePart=0x0) returned 0x55 [0091.252] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Programs\\Accessories\\Sticky Notes.lnk", nBufferLength=0x105, lpBuffer=0x31e14c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Programs\\Accessories\\Sticky Notes.lnk", lpFilePart=0x0) returned 0x55 [0091.252] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e5ac) returned 1 [0091.252] GetFileAttributesExW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Programs\\Accessories\\Sticky Notes.lnk" (normalized: "c:\\users\\all users\\microsoft\\windows\\start menu\\programs\\accessories\\sticky notes.lnk"), fInfoLevelId=0x0, lpFileInformation=0x31e628 | out: lpFileInformation=0x31e628*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x80cc40e0, ftCreationTime.dwHighDateTime=0x1d2de2a, ftLastAccessTime.dwLowDateTime=0x80cc40e0, ftLastAccessTime.dwHighDateTime=0x1d2de2a, ftLastWriteTime.dwLowDateTime=0x19d56e00, ftLastWriteTime.dwHighDateTime=0x1d6eb7f, nFileSizeHigh=0x0, nFileSizeLow=0x560)) returned 1 [0091.252] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e5a8) returned 1 [0091.252] MoveFileW (lpExistingFileName="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Programs\\Accessories\\Sticky Notes.lnk" (normalized: "c:\\users\\all users\\microsoft\\windows\\start menu\\programs\\accessories\\sticky notes.lnk"), lpNewFileName="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Programs\\Accessories\\Sticky Notes.lnk" (normalized: "c:\\users\\all users\\microsoft\\windows\\start menu\\programs\\accessories\\sticky notes.lnk")) returned 1 [0091.253] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Programs\\Accessories\\Sync Center.lnk", nBufferLength=0x105, lpBuffer=0x31e02c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Programs\\Accessories\\Sync Center.lnk", lpFilePart=0x0) returned 0x54 [0091.253] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e520) returned 1 [0091.253] CreateFileW (lpFileName="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Programs\\Accessories\\Sync Center.lnk" (normalized: "c:\\users\\all users\\microsoft\\windows\\start menu\\programs\\accessories\\sync center.lnk"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x178 [0091.253] GetFileType (hFile=0x178) returned 0x1 [0091.253] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e51c) returned 1 [0091.253] GetFileType (hFile=0x178) returned 0x1 [0091.253] GetFileSize (in: hFile=0x178, lpFileSizeHigh=0x31e628 | out: lpFileSizeHigh=0x31e628*=0x0) returned 0x4f0 [0091.253] ReadFile (in: hFile=0x178, lpBuffer=0x27d860c, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x31e5d4, lpOverlapped=0x0 | out: lpBuffer=0x27d860c*, lpNumberOfBytesRead=0x31e5d4*=0x4f0, lpOverlapped=0x0) returned 1 [0091.254] CloseHandle (hObject=0x178) returned 1 [0091.300] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Programs\\Accessories\\Sync Center.lnk", nBufferLength=0x105, lpBuffer=0x31e018, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Programs\\Accessories\\Sync Center.lnk", lpFilePart=0x0) returned 0x54 [0091.300] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e50c) returned 1 [0091.300] CreateFileW (lpFileName="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Programs\\Accessories\\Sync Center.lnk" (normalized: "c:\\users\\all users\\microsoft\\windows\\start menu\\programs\\accessories\\sync center.lnk"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x178 [0091.301] GetFileType (hFile=0x178) returned 0x1 [0091.301] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e508) returned 1 [0091.301] GetFileType (hFile=0x178) returned 0x1 [0091.302] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Programs\\Accessories\\Sync Center.lnk", nBufferLength=0x105, lpBuffer=0x31e14c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Programs\\Accessories\\Sync Center.lnk", lpFilePart=0x0) returned 0x54 [0091.302] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Programs\\Accessories\\Sync Center.lnk", nBufferLength=0x105, lpBuffer=0x31e14c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Programs\\Accessories\\Sync Center.lnk", lpFilePart=0x0) returned 0x54 [0091.302] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e5ac) returned 1 [0091.302] GetFileAttributesExW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Programs\\Accessories\\Sync Center.lnk" (normalized: "c:\\users\\all users\\microsoft\\windows\\start menu\\programs\\accessories\\sync center.lnk"), fInfoLevelId=0x0, lpFileInformation=0x31e628 | out: lpFileInformation=0x31e628*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3c9baa28, ftCreationTime.dwHighDateTime=0x1ca043f, ftLastAccessTime.dwLowDateTime=0x3c9baa28, ftLastAccessTime.dwHighDateTime=0x1ca043f, ftLastWriteTime.dwLowDateTime=0x19dc9220, ftLastWriteTime.dwHighDateTime=0x1d6eb7f, nFileSizeHigh=0x0, nFileSizeLow=0x500)) returned 1 [0091.302] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e5a8) returned 1 [0091.302] MoveFileW (lpExistingFileName="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Programs\\Accessories\\Sync Center.lnk" (normalized: "c:\\users\\all users\\microsoft\\windows\\start menu\\programs\\accessories\\sync center.lnk"), lpNewFileName="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Programs\\Accessories\\Sync Center.lnk" (normalized: "c:\\users\\all users\\microsoft\\windows\\start menu\\programs\\accessories\\sync center.lnk")) returned 1 [0091.303] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Programs\\Accessories\\Welcome Center.lnk", nBufferLength=0x105, lpBuffer=0x31e02c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Programs\\Accessories\\Welcome Center.lnk", lpFilePart=0x0) returned 0x57 [0091.303] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e520) returned 1 [0091.303] CreateFileW (lpFileName="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Programs\\Accessories\\Welcome Center.lnk" (normalized: "c:\\users\\all users\\microsoft\\windows\\start menu\\programs\\accessories\\welcome center.lnk"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x178 [0091.303] GetFileType (hFile=0x178) returned 0x1 [0091.303] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e51c) returned 1 [0091.303] GetFileType (hFile=0x178) returned 0x1 [0091.303] GetFileSize (in: hFile=0x178, lpFileSizeHigh=0x31e628 | out: lpFileSizeHigh=0x31e628*=0x0) returned 0x630 [0091.303] ReadFile (in: hFile=0x178, lpBuffer=0x2829768, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x31e5d4, lpOverlapped=0x0 | out: lpBuffer=0x2829768*, lpNumberOfBytesRead=0x31e5d4*=0x630, lpOverlapped=0x0) returned 1 [0091.304] CloseHandle (hObject=0x178) returned 1 [0091.345] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Programs\\Accessories\\Welcome Center.lnk", nBufferLength=0x105, lpBuffer=0x31e018, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Programs\\Accessories\\Welcome Center.lnk", lpFilePart=0x0) returned 0x57 [0091.345] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e50c) returned 1 [0091.345] CreateFileW (lpFileName="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Programs\\Accessories\\Welcome Center.lnk" (normalized: "c:\\users\\all users\\microsoft\\windows\\start menu\\programs\\accessories\\welcome center.lnk"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x178 [0091.346] GetFileType (hFile=0x178) returned 0x1 [0091.346] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e508) returned 1 [0091.346] GetFileType (hFile=0x178) returned 0x1 [0091.346] WriteFile (in: hFile=0x178, lpBuffer=0x267aab4*, nNumberOfBytesToWrite=0x640, lpNumberOfBytesWritten=0x31e59c, lpOverlapped=0x0 | out: lpBuffer=0x267aab4*, lpNumberOfBytesWritten=0x31e59c*=0x640, lpOverlapped=0x0) returned 1 [0091.347] CloseHandle (hObject=0x178) returned 1 [0091.347] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Programs\\Accessories\\Welcome Center.lnk", nBufferLength=0x105, lpBuffer=0x31e14c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Programs\\Accessories\\Welcome Center.lnk", lpFilePart=0x0) returned 0x57 [0091.347] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Programs\\Accessories\\Welcome Center.lnk", nBufferLength=0x105, lpBuffer=0x31e14c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Programs\\Accessories\\Welcome Center.lnk", lpFilePart=0x0) returned 0x57 [0091.347] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e5ac) returned 1 [0091.347] GetFileAttributesExW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Programs\\Accessories\\Welcome Center.lnk" (normalized: "c:\\users\\all users\\microsoft\\windows\\start menu\\programs\\accessories\\welcome center.lnk"), fInfoLevelId=0x0, lpFileInformation=0x31e628 | out: lpFileInformation=0x31e628*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8b13a6d0, ftCreationTime.dwHighDateTime=0x1ca043f, ftLastAccessTime.dwLowDateTime=0x8b13a6d0, ftLastAccessTime.dwHighDateTime=0x1ca043f, ftLastWriteTime.dwLowDateTime=0x19e3b640, ftLastWriteTime.dwHighDateTime=0x1d6eb7f, nFileSizeHigh=0x0, nFileSizeLow=0x640)) returned 1 [0091.347] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e5a8) returned 1 [0091.347] MoveFileW (lpExistingFileName="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Programs\\Accessories\\Welcome Center.lnk" (normalized: "c:\\users\\all users\\microsoft\\windows\\start menu\\programs\\accessories\\welcome center.lnk"), lpNewFileName="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Programs\\Accessories\\Welcome Center.lnk" (normalized: "c:\\users\\all users\\microsoft\\windows\\start menu\\programs\\accessories\\welcome center.lnk")) returned 1 [0091.348] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Programs\\Accessories\\Wordpad.lnk", nBufferLength=0x105, lpBuffer=0x31e02c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Programs\\Accessories\\Wordpad.lnk", lpFilePart=0x0) returned 0x50 [0091.348] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e520) returned 1 [0091.348] CreateFileW (lpFileName="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Programs\\Accessories\\Wordpad.lnk" (normalized: "c:\\users\\all users\\microsoft\\windows\\start menu\\programs\\accessories\\wordpad.lnk"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x178 [0091.348] GetFileType (hFile=0x178) returned 0x1 [0091.348] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e51c) returned 1 [0091.348] GetFileType (hFile=0x178) returned 0x1 [0091.348] GetFileSize (in: hFile=0x178, lpFileSizeHigh=0x31e628 | out: lpFileSizeHigh=0x31e628*=0x0) returned 0x530 [0091.348] ReadFile (in: hFile=0x178, lpBuffer=0x267c2bc, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x31e5d4, lpOverlapped=0x0 | out: lpBuffer=0x267c2bc*, lpNumberOfBytesRead=0x31e5d4*=0x530, lpOverlapped=0x0) returned 1 [0091.349] CloseHandle (hObject=0x178) returned 1 [0091.362] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Programs\\Accessories\\Wordpad.lnk", nBufferLength=0x105, lpBuffer=0x31e018, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Programs\\Accessories\\Wordpad.lnk", lpFilePart=0x0) returned 0x50 [0091.362] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e50c) returned 1 [0091.362] CreateFileW (lpFileName="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Programs\\Accessories\\Wordpad.lnk" (normalized: "c:\\users\\all users\\microsoft\\windows\\start menu\\programs\\accessories\\wordpad.lnk"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x178 [0091.363] GetFileType (hFile=0x178) returned 0x1 [0091.363] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e508) returned 1 [0091.363] GetFileType (hFile=0x178) returned 0x1 [0091.363] WriteFile (in: hFile=0x178, lpBuffer=0x26cbd88*, nNumberOfBytesToWrite=0x540, lpNumberOfBytesWritten=0x31e59c, lpOverlapped=0x0 | out: lpBuffer=0x26cbd88*, lpNumberOfBytesWritten=0x31e59c*=0x540, lpOverlapped=0x0) returned 1 [0091.364] CloseHandle (hObject=0x178) returned 1 [0091.364] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Programs\\Accessories\\Wordpad.lnk", nBufferLength=0x105, lpBuffer=0x31e14c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Programs\\Accessories\\Wordpad.lnk", lpFilePart=0x0) returned 0x50 [0091.364] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Programs\\Accessories\\Wordpad.lnk", nBufferLength=0x105, lpBuffer=0x31e14c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Programs\\Accessories\\Wordpad.lnk", lpFilePart=0x0) returned 0x50 [0091.364] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e5ac) returned 1 [0091.364] GetFileAttributesExW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Programs\\Accessories\\Wordpad.lnk" (normalized: "c:\\users\\all users\\microsoft\\windows\\start menu\\programs\\accessories\\wordpad.lnk"), fInfoLevelId=0x0, lpFileInformation=0x31e628 | out: lpFileInformation=0x31e628*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3d25b9f8, ftCreationTime.dwHighDateTime=0x1ca043f, ftLastAccessTime.dwLowDateTime=0x3d25b9f8, ftLastAccessTime.dwHighDateTime=0x1ca043f, ftLastWriteTime.dwLowDateTime=0x19e617a0, ftLastWriteTime.dwHighDateTime=0x1d6eb7f, nFileSizeHigh=0x0, nFileSizeLow=0x540)) returned 1 [0091.364] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e5a8) returned 1 [0091.364] MoveFileW (lpExistingFileName="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Programs\\Accessories\\Wordpad.lnk" (normalized: "c:\\users\\all users\\microsoft\\windows\\start menu\\programs\\accessories\\wordpad.lnk"), lpNewFileName="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Programs\\Accessories\\Wordpad.lnk" (normalized: "c:\\users\\all users\\microsoft\\windows\\start menu\\programs\\accessories\\wordpad.lnk")) returned 1 [0091.365] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e5dc) returned 1 [0091.365] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Programs\\Accessories\\Accessibility", nBufferLength=0x105, lpBuffer=0x31e0e4, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Programs\\Accessories\\Accessibility", lpFilePart=0x0) returned 0x52 [0091.365] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Programs\\Accessories\\Accessibility\\", nBufferLength=0x105, lpBuffer=0x31e0b8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Programs\\Accessories\\Accessibility\\", lpFilePart=0x0) returned 0x53 [0091.365] FindFirstFileW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Programs\\Accessories\\Accessibility\\*", lpFindFileData=0x31e304 | out: lpFindFileData=0x31e304*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0xfd9dbcac, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x89bce0a9, ftLastAccessTime.dwHighDateTime=0x1ca043f, ftLastWriteTime.dwLowDateTime=0x89bf4209, ftLastWriteTime.dwHighDateTime=0x1ca043f, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x381d40 [0091.365] FindNextFileW (in: hFindFile=0x381d40, lpFindFileData=0x31e314 | out: lpFindFileData=0x31e314*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0xfd9dbcac, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x89bce0a9, ftLastAccessTime.dwHighDateTime=0x1ca043f, ftLastWriteTime.dwLowDateTime=0x89bf4209, ftLastWriteTime.dwHighDateTime=0x1ca043f, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0091.366] FindNextFileW (in: hFindFile=0x381d40, lpFindFileData=0x31e314 | out: lpFindFileData=0x31e314*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0xec0a7698, ftCreationTime.dwHighDateTime=0x1ca042b, ftLastAccessTime.dwLowDateTime=0xec0a7698, ftLastAccessTime.dwHighDateTime=0x1ca042b, ftLastWriteTime.dwLowDateTime=0x89bf4209, ftLastWriteTime.dwHighDateTime=0x1ca043f, nFileSizeHigh=0x0, nFileSizeLow=0x172, dwReserved0=0x0, dwReserved1=0x0, cFileName="Desktop.ini", cAlternateFileName="")) returned 1 [0091.366] FindNextFileW (in: hFindFile=0x381d40, lpFindFileData=0x31e314 | out: lpFindFileData=0x31e314*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x89bce0a9, ftCreationTime.dwHighDateTime=0x1ca043f, ftLastAccessTime.dwLowDateTime=0x89bce0a9, ftLastAccessTime.dwHighDateTime=0x1ca043f, ftLastWriteTime.dwLowDateTime=0x9485e80, ftLastWriteTime.dwHighDateTime=0x1d6eb7f, nFileSizeHigh=0x0, nFileSizeLow=0x570, dwReserved0=0x0, dwReserved1=0x0, cFileName="Speech Recognition.lnk", cAlternateFileName="SPEECH~1.LNK")) returned 1 [0091.366] FindNextFileW (in: hFindFile=0x381d40, lpFindFileData=0x31e314 | out: lpFindFileData=0x31e314*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0091.366] FindClose (in: hFindFile=0x381d40 | out: hFindFile=0x381d40) returned 1 [0091.366] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e59c) returned 1 [0091.366] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e5a8) returned 1 [0091.366] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e5dc) returned 1 [0091.366] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Programs\\Accessories\\Accessibility", nBufferLength=0x105, lpBuffer=0x31e0e4, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Programs\\Accessories\\Accessibility", lpFilePart=0x0) returned 0x52 [0091.366] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Programs\\Accessories\\Accessibility\\", nBufferLength=0x105, lpBuffer=0x31e0b8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Programs\\Accessories\\Accessibility\\", lpFilePart=0x0) returned 0x53 [0091.366] FindFirstFileW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Programs\\Accessories\\Accessibility\\*", lpFindFileData=0x31e304 | out: lpFindFileData=0x31e304*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0xfd9dbcac, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x89bce0a9, ftLastAccessTime.dwHighDateTime=0x1ca043f, ftLastWriteTime.dwLowDateTime=0x89bf4209, ftLastWriteTime.dwHighDateTime=0x1ca043f, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x381d40 [0091.366] FindNextFileW (in: hFindFile=0x381d40, lpFindFileData=0x31e314 | out: lpFindFileData=0x31e314*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0xfd9dbcac, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x89bce0a9, ftLastAccessTime.dwHighDateTime=0x1ca043f, ftLastWriteTime.dwLowDateTime=0x89bf4209, ftLastWriteTime.dwHighDateTime=0x1ca043f, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0091.367] FindNextFileW (in: hFindFile=0x381d40, lpFindFileData=0x31e314 | out: lpFindFileData=0x31e314*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0xec0a7698, ftCreationTime.dwHighDateTime=0x1ca042b, ftLastAccessTime.dwLowDateTime=0xec0a7698, ftLastAccessTime.dwHighDateTime=0x1ca042b, ftLastWriteTime.dwLowDateTime=0x89bf4209, ftLastWriteTime.dwHighDateTime=0x1ca043f, nFileSizeHigh=0x0, nFileSizeLow=0x172, dwReserved0=0x0, dwReserved1=0x0, cFileName="Desktop.ini", cAlternateFileName="")) returned 1 [0091.367] FindNextFileW (in: hFindFile=0x381d40, lpFindFileData=0x31e314 | out: lpFindFileData=0x31e314*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x89bce0a9, ftCreationTime.dwHighDateTime=0x1ca043f, ftLastAccessTime.dwLowDateTime=0x89bce0a9, ftLastAccessTime.dwHighDateTime=0x1ca043f, ftLastWriteTime.dwLowDateTime=0x9485e80, ftLastWriteTime.dwHighDateTime=0x1d6eb7f, nFileSizeHigh=0x0, nFileSizeLow=0x570, dwReserved0=0x0, dwReserved1=0x0, cFileName="Speech Recognition.lnk", cAlternateFileName="SPEECH~1.LNK")) returned 1 [0091.367] FindNextFileW (in: hFindFile=0x381d40, lpFindFileData=0x31e314 | out: lpFindFileData=0x31e314*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x89bce0a9, ftCreationTime.dwHighDateTime=0x1ca043f, ftLastAccessTime.dwLowDateTime=0x89bce0a9, ftLastAccessTime.dwHighDateTime=0x1ca043f, ftLastWriteTime.dwLowDateTime=0x9485e80, ftLastWriteTime.dwHighDateTime=0x1d6eb7f, nFileSizeHigh=0x0, nFileSizeLow=0x570, dwReserved0=0x0, dwReserved1=0x0, cFileName="Speech Recognition.lnk", cAlternateFileName="SPEECH~1.LNK")) returned 0 [0091.367] FindClose (in: hFindFile=0x381d40 | out: hFindFile=0x381d40) returned 1 [0091.367] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e59c) returned 1 [0091.367] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e5a8) returned 1 [0091.367] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Programs\\Accessories\\Accessibility\\Speech Recognition.lnk", nBufferLength=0x105, lpBuffer=0x31dfb4, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Programs\\Accessories\\Accessibility\\Speech Recognition.lnk", lpFilePart=0x0) returned 0x69 [0091.367] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e4a8) returned 1 [0091.367] CreateFileW (lpFileName="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Programs\\Accessories\\Accessibility\\Speech Recognition.lnk" (normalized: "c:\\users\\all users\\microsoft\\windows\\start menu\\programs\\accessories\\accessibility\\speech recognition.lnk"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x178 [0091.367] GetFileType (hFile=0x178) returned 0x1 [0091.367] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e4a4) returned 1 [0091.367] GetFileType (hFile=0x178) returned 0x1 [0091.367] GetFileSize (in: hFile=0x178, lpFileSizeHigh=0x31e5b0 | out: lpFileSizeHigh=0x31e5b0*=0x0) returned 0x570 [0091.367] ReadFile (in: hFile=0x178, lpBuffer=0x26cf760, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x31e55c, lpOverlapped=0x0 | out: lpBuffer=0x26cf760*, lpNumberOfBytesRead=0x31e55c*=0x570, lpOverlapped=0x0) returned 1 [0091.368] CloseHandle (hObject=0x178) returned 1 [0091.389] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Programs\\Accessories\\Accessibility\\Speech Recognition.lnk", nBufferLength=0x105, lpBuffer=0x31dfa0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Programs\\Accessories\\Accessibility\\Speech Recognition.lnk", lpFilePart=0x0) returned 0x69 [0091.389] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e494) returned 1 [0091.389] CreateFileW (lpFileName="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Programs\\Accessories\\Accessibility\\Speech Recognition.lnk" (normalized: "c:\\users\\all users\\microsoft\\windows\\start menu\\programs\\accessories\\accessibility\\speech recognition.lnk"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x178 [0091.390] GetFileType (hFile=0x178) returned 0x1 [0091.390] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e490) returned 1 [0091.390] GetFileType (hFile=0x178) returned 0x1 [0091.390] WriteFile (in: hFile=0x178, lpBuffer=0x271f258*, nNumberOfBytesToWrite=0x580, lpNumberOfBytesWritten=0x31e524, lpOverlapped=0x0 | out: lpBuffer=0x271f258*, lpNumberOfBytesWritten=0x31e524*=0x580, lpOverlapped=0x0) returned 1 [0091.391] CloseHandle (hObject=0x178) returned 1 [0091.391] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Programs\\Accessories\\Accessibility\\Speech Recognition.lnk", nBufferLength=0x105, lpBuffer=0x31e0d4, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Programs\\Accessories\\Accessibility\\Speech Recognition.lnk", lpFilePart=0x0) returned 0x69 [0091.391] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Programs\\Accessories\\Accessibility\\Speech Recognition.lnk", nBufferLength=0x105, lpBuffer=0x31e0d4, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Programs\\Accessories\\Accessibility\\Speech Recognition.lnk", lpFilePart=0x0) returned 0x69 [0091.391] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e534) returned 1 [0091.391] GetFileAttributesExW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Programs\\Accessories\\Accessibility\\Speech Recognition.lnk" (normalized: "c:\\users\\all users\\microsoft\\windows\\start menu\\programs\\accessories\\accessibility\\speech recognition.lnk"), fInfoLevelId=0x0, lpFileInformation=0x31e5b0 | out: lpFileInformation=0x31e5b0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x89bce0a9, ftCreationTime.dwHighDateTime=0x1ca043f, ftLastAccessTime.dwLowDateTime=0x89bce0a9, ftLastAccessTime.dwHighDateTime=0x1ca043f, ftLastWriteTime.dwLowDateTime=0x19eada60, ftLastWriteTime.dwHighDateTime=0x1d6eb7f, nFileSizeHigh=0x0, nFileSizeLow=0x580)) returned 1 [0091.391] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e530) returned 1 [0091.391] MoveFileW (lpExistingFileName="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Programs\\Accessories\\Accessibility\\Speech Recognition.lnk" (normalized: "c:\\users\\all users\\microsoft\\windows\\start menu\\programs\\accessories\\accessibility\\speech recognition.lnk"), lpNewFileName="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Programs\\Accessories\\Accessibility\\Speech Recognition.lnk" (normalized: "c:\\users\\all users\\microsoft\\windows\\start menu\\programs\\accessories\\accessibility\\speech recognition.lnk")) returned 1 [0091.392] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e5dc) returned 1 [0091.392] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Programs\\Accessories\\System Tools", nBufferLength=0x105, lpBuffer=0x31e0e4, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Programs\\Accessories\\System Tools", lpFilePart=0x0) returned 0x51 [0091.392] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Programs\\Accessories\\System Tools\\", nBufferLength=0x105, lpBuffer=0x31e0b8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Programs\\Accessories\\System Tools\\", lpFilePart=0x0) returned 0x52 [0091.392] FindFirstFileW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Programs\\Accessories\\System Tools\\*", lpFindFileData=0x31e304 | out: lpFindFileData=0x31e304*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0xfd9dbcac, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x8ace9ee9, ftLastAccessTime.dwHighDateTime=0x1ca043f, ftLastWriteTime.dwLowDateTime=0x8ace9ee9, ftLastWriteTime.dwHighDateTime=0x1ca043f, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x382000 [0091.392] FindNextFileW (in: hFindFile=0x382000, lpFindFileData=0x31e314 | out: lpFindFileData=0x31e314*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0xfd9dbcac, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x8ace9ee9, ftLastAccessTime.dwHighDateTime=0x1ca043f, ftLastWriteTime.dwLowDateTime=0x8ace9ee9, ftLastWriteTime.dwHighDateTime=0x1ca043f, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0091.392] FindNextFileW (in: hFindFile=0x382000, lpFindFileData=0x31e314 | out: lpFindFileData=0x31e314*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3e4ce49a, ftCreationTime.dwHighDateTime=0x1ca043f, ftLastAccessTime.dwLowDateTime=0x3e4ce49a, ftLastAccessTime.dwHighDateTime=0x1ca043f, ftLastWriteTime.dwLowDateTime=0x94f82a0, ftLastWriteTime.dwHighDateTime=0x1d6eb7f, nFileSizeHigh=0x0, nFileSizeLow=0x4f0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Character Map.lnk", cAlternateFileName="CHARAC~1.LNK")) returned 1 [0091.393] FindNextFileW (in: hFindFile=0x382000, lpFindFileData=0x31e314 | out: lpFindFileData=0x31e314*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0xec0f3952, ftCreationTime.dwHighDateTime=0x1ca042b, ftLastAccessTime.dwLowDateTime=0xec0f3952, ftLastAccessTime.dwHighDateTime=0x1ca042b, ftLastWriteTime.dwLowDateTime=0x8ace9ee9, ftLastWriteTime.dwHighDateTime=0x1ca043f, nFileSizeHigh=0x0, nFileSizeLow=0x53a, dwReserved0=0x0, dwReserved1=0x0, cFileName="Desktop.ini", cAlternateFileName="")) returned 1 [0091.393] FindNextFileW (in: hFindFile=0x382000, lpFindFileData=0x31e314 | out: lpFindFileData=0x31e314*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x297b3b95, ftCreationTime.dwHighDateTime=0x1ca043f, ftLastAccessTime.dwLowDateTime=0x297b3b95, ftLastAccessTime.dwHighDateTime=0x1ca043f, ftLastWriteTime.dwLowDateTime=0x951e400, ftLastWriteTime.dwHighDateTime=0x1d6eb7f, nFileSizeHigh=0x0, nFileSizeLow=0x510, dwReserved0=0x0, dwReserved1=0x0, cFileName="dfrgui.lnk", cAlternateFileName="")) returned 1 [0091.393] FindNextFileW (in: hFindFile=0x382000, lpFindFileData=0x31e314 | out: lpFindFileData=0x31e314*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3d31a0d9, ftCreationTime.dwHighDateTime=0x1ca043f, ftLastAccessTime.dwLowDateTime=0x3d31a0d9, ftLastAccessTime.dwHighDateTime=0x1ca043f, ftLastWriteTime.dwLowDateTime=0x956a6c0, ftLastWriteTime.dwHighDateTime=0x1d6eb7f, nFileSizeHigh=0x0, nFileSizeLow=0x4f0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Disk Cleanup.lnk", cAlternateFileName="DISKCL~1.LNK")) returned 1 [0091.393] FindNextFileW (in: hFindFile=0x382000, lpFindFileData=0x31e314 | out: lpFindFileData=0x31e314*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x141abfff, ftCreationTime.dwHighDateTime=0x1ca043f, ftLastAccessTime.dwLowDateTime=0x141abfff, ftLastAccessTime.dwHighDateTime=0x1ca043f, ftLastWriteTime.dwLowDateTime=0x9590820, ftLastWriteTime.dwHighDateTime=0x1d6eb7f, nFileSizeHigh=0x0, nFileSizeLow=0x4e0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Resource Monitor.lnk", cAlternateFileName="RESOUR~1.LNK")) returned 1 [0091.393] FindNextFileW (in: hFindFile=0x382000, lpFindFileData=0x31e314 | out: lpFindFileData=0x31e314*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa5e7f40, ftCreationTime.dwHighDateTime=0x1ca043f, ftLastAccessTime.dwLowDateTime=0xa5e7f40, ftLastAccessTime.dwHighDateTime=0x1ca043f, ftLastWriteTime.dwLowDateTime=0x95b6980, ftLastWriteTime.dwHighDateTime=0x1d6eb7f, nFileSizeHigh=0x0, nFileSizeLow=0x4f0, dwReserved0=0x0, dwReserved1=0x0, cFileName="System Information.lnk", cAlternateFileName="SYSTEM~1.LNK")) returned 1 [0091.393] FindNextFileW (in: hFindFile=0x382000, lpFindFileData=0x31e314 | out: lpFindFileData=0x31e314*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3c8d61e7, ftCreationTime.dwHighDateTime=0x1ca043f, ftLastAccessTime.dwLowDateTime=0x3c8d61e7, ftLastAccessTime.dwHighDateTime=0x1ca043f, ftLastWriteTime.dwLowDateTime=0x95dcae0, ftLastWriteTime.dwHighDateTime=0x1d6eb7f, nFileSizeHigh=0x0, nFileSizeLow=0x4e0, dwReserved0=0x0, dwReserved1=0x0, cFileName="System Restore.lnk", cAlternateFileName="SYSTEM~2.LNK")) returned 1 [0091.393] FindNextFileW (in: hFindFile=0x382000, lpFindFileData=0x31e314 | out: lpFindFileData=0x31e314*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2b9eb814, ftCreationTime.dwHighDateTime=0x1ca043f, ftLastAccessTime.dwLowDateTime=0x2b9eb814, ftLastAccessTime.dwHighDateTime=0x1ca043f, ftLastWriteTime.dwLowDateTime=0x9675060, ftLastWriteTime.dwHighDateTime=0x1d6eb7f, nFileSizeHigh=0x0, nFileSizeLow=0x500, dwReserved0=0x0, dwReserved1=0x0, cFileName="Task Scheduler.lnk", cAlternateFileName="TASKSC~1.LNK")) returned 1 [0091.393] FindNextFileW (in: hFindFile=0x382000, lpFindFileData=0x31e314 | out: lpFindFileData=0x31e314*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8ace9ee9, ftCreationTime.dwHighDateTime=0x1ca043f, ftLastAccessTime.dwLowDateTime=0x8ace9ee9, ftLastAccessTime.dwHighDateTime=0x1ca043f, ftLastWriteTime.dwLowDateTime=0x969b1c0, ftLastWriteTime.dwHighDateTime=0x1d6eb7f, nFileSizeHigh=0x0, nFileSizeLow=0x530, dwReserved0=0x0, dwReserved1=0x0, cFileName="Windows Easy Transfer Reports.lnk", cAlternateFileName="WINDOW~2.LNK")) returned 1 [0091.393] FindNextFileW (in: hFindFile=0x382000, lpFindFileData=0x31e314 | out: lpFindFileData=0x31e314*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8ac9dc28, ftCreationTime.dwHighDateTime=0x1ca043f, ftLastAccessTime.dwLowDateTime=0x8ac9dc28, ftLastAccessTime.dwHighDateTime=0x1ca043f, ftLastWriteTime.dwLowDateTime=0x96c1320, ftLastWriteTime.dwHighDateTime=0x1d6eb7f, nFileSizeHigh=0x0, nFileSizeLow=0x530, dwReserved0=0x0, dwReserved1=0x0, cFileName="Windows Easy Transfer.lnk", cAlternateFileName="WINDOW~1.LNK")) returned 1 [0091.394] FindNextFileW (in: hFindFile=0x382000, lpFindFileData=0x31e314 | out: lpFindFileData=0x31e314*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0091.394] FindClose (in: hFindFile=0x382000 | out: hFindFile=0x382000) returned 1 [0091.394] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e59c) returned 1 [0091.394] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e5a8) returned 1 [0091.394] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e5dc) returned 1 [0091.394] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Programs\\Accessories\\System Tools", nBufferLength=0x105, lpBuffer=0x31e0e4, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Programs\\Accessories\\System Tools", lpFilePart=0x0) returned 0x51 [0091.394] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Programs\\Accessories\\System Tools\\", nBufferLength=0x105, lpBuffer=0x31e0b8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Programs\\Accessories\\System Tools\\", lpFilePart=0x0) returned 0x52 [0091.394] FindFirstFileW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Programs\\Accessories\\System Tools\\*", lpFindFileData=0x31e304 | out: lpFindFileData=0x31e304*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0xfd9dbcac, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x8ace9ee9, ftLastAccessTime.dwHighDateTime=0x1ca043f, ftLastWriteTime.dwLowDateTime=0x8ace9ee9, ftLastWriteTime.dwHighDateTime=0x1ca043f, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x382000 [0091.394] FindNextFileW (in: hFindFile=0x382000, lpFindFileData=0x31e314 | out: lpFindFileData=0x31e314*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0xfd9dbcac, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x8ace9ee9, ftLastAccessTime.dwHighDateTime=0x1ca043f, ftLastWriteTime.dwLowDateTime=0x8ace9ee9, ftLastWriteTime.dwHighDateTime=0x1ca043f, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0091.394] FindNextFileW (in: hFindFile=0x382000, lpFindFileData=0x31e314 | out: lpFindFileData=0x31e314*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3e4ce49a, ftCreationTime.dwHighDateTime=0x1ca043f, ftLastAccessTime.dwLowDateTime=0x3e4ce49a, ftLastAccessTime.dwHighDateTime=0x1ca043f, ftLastWriteTime.dwLowDateTime=0x94f82a0, ftLastWriteTime.dwHighDateTime=0x1d6eb7f, nFileSizeHigh=0x0, nFileSizeLow=0x4f0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Character Map.lnk", cAlternateFileName="CHARAC~1.LNK")) returned 1 [0091.394] FindNextFileW (in: hFindFile=0x382000, lpFindFileData=0x31e314 | out: lpFindFileData=0x31e314*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0xec0f3952, ftCreationTime.dwHighDateTime=0x1ca042b, ftLastAccessTime.dwLowDateTime=0xec0f3952, ftLastAccessTime.dwHighDateTime=0x1ca042b, ftLastWriteTime.dwLowDateTime=0x8ace9ee9, ftLastWriteTime.dwHighDateTime=0x1ca043f, nFileSizeHigh=0x0, nFileSizeLow=0x53a, dwReserved0=0x0, dwReserved1=0x0, cFileName="Desktop.ini", cAlternateFileName="")) returned 1 [0091.395] FindNextFileW (in: hFindFile=0x382000, lpFindFileData=0x31e314 | out: lpFindFileData=0x31e314*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x297b3b95, ftCreationTime.dwHighDateTime=0x1ca043f, ftLastAccessTime.dwLowDateTime=0x297b3b95, ftLastAccessTime.dwHighDateTime=0x1ca043f, ftLastWriteTime.dwLowDateTime=0x951e400, ftLastWriteTime.dwHighDateTime=0x1d6eb7f, nFileSizeHigh=0x0, nFileSizeLow=0x510, dwReserved0=0x0, dwReserved1=0x0, cFileName="dfrgui.lnk", cAlternateFileName="")) returned 1 [0091.395] FindNextFileW (in: hFindFile=0x382000, lpFindFileData=0x31e314 | out: lpFindFileData=0x31e314*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3d31a0d9, ftCreationTime.dwHighDateTime=0x1ca043f, ftLastAccessTime.dwLowDateTime=0x3d31a0d9, ftLastAccessTime.dwHighDateTime=0x1ca043f, ftLastWriteTime.dwLowDateTime=0x956a6c0, ftLastWriteTime.dwHighDateTime=0x1d6eb7f, nFileSizeHigh=0x0, nFileSizeLow=0x4f0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Disk Cleanup.lnk", cAlternateFileName="DISKCL~1.LNK")) returned 1 [0091.395] FindNextFileW (in: hFindFile=0x382000, lpFindFileData=0x31e314 | out: lpFindFileData=0x31e314*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x141abfff, ftCreationTime.dwHighDateTime=0x1ca043f, ftLastAccessTime.dwLowDateTime=0x141abfff, ftLastAccessTime.dwHighDateTime=0x1ca043f, ftLastWriteTime.dwLowDateTime=0x9590820, ftLastWriteTime.dwHighDateTime=0x1d6eb7f, nFileSizeHigh=0x0, nFileSizeLow=0x4e0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Resource Monitor.lnk", cAlternateFileName="RESOUR~1.LNK")) returned 1 [0091.395] FindNextFileW (in: hFindFile=0x382000, lpFindFileData=0x31e314 | out: lpFindFileData=0x31e314*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa5e7f40, ftCreationTime.dwHighDateTime=0x1ca043f, ftLastAccessTime.dwLowDateTime=0xa5e7f40, ftLastAccessTime.dwHighDateTime=0x1ca043f, ftLastWriteTime.dwLowDateTime=0x95b6980, ftLastWriteTime.dwHighDateTime=0x1d6eb7f, nFileSizeHigh=0x0, nFileSizeLow=0x4f0, dwReserved0=0x0, dwReserved1=0x0, cFileName="System Information.lnk", cAlternateFileName="SYSTEM~1.LNK")) returned 1 [0091.395] FindNextFileW (in: hFindFile=0x382000, lpFindFileData=0x31e314 | out: lpFindFileData=0x31e314*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3c8d61e7, ftCreationTime.dwHighDateTime=0x1ca043f, ftLastAccessTime.dwLowDateTime=0x3c8d61e7, ftLastAccessTime.dwHighDateTime=0x1ca043f, ftLastWriteTime.dwLowDateTime=0x95dcae0, ftLastWriteTime.dwHighDateTime=0x1d6eb7f, nFileSizeHigh=0x0, nFileSizeLow=0x4e0, dwReserved0=0x0, dwReserved1=0x0, cFileName="System Restore.lnk", cAlternateFileName="SYSTEM~2.LNK")) returned 1 [0091.395] FindNextFileW (in: hFindFile=0x382000, lpFindFileData=0x31e314 | out: lpFindFileData=0x31e314*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2b9eb814, ftCreationTime.dwHighDateTime=0x1ca043f, ftLastAccessTime.dwLowDateTime=0x2b9eb814, ftLastAccessTime.dwHighDateTime=0x1ca043f, ftLastWriteTime.dwLowDateTime=0x9675060, ftLastWriteTime.dwHighDateTime=0x1d6eb7f, nFileSizeHigh=0x0, nFileSizeLow=0x500, dwReserved0=0x0, dwReserved1=0x0, cFileName="Task Scheduler.lnk", cAlternateFileName="TASKSC~1.LNK")) returned 1 [0091.395] FindNextFileW (in: hFindFile=0x382000, lpFindFileData=0x31e314 | out: lpFindFileData=0x31e314*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8ace9ee9, ftCreationTime.dwHighDateTime=0x1ca043f, ftLastAccessTime.dwLowDateTime=0x8ace9ee9, ftLastAccessTime.dwHighDateTime=0x1ca043f, ftLastWriteTime.dwLowDateTime=0x969b1c0, ftLastWriteTime.dwHighDateTime=0x1d6eb7f, nFileSizeHigh=0x0, nFileSizeLow=0x530, dwReserved0=0x0, dwReserved1=0x0, cFileName="Windows Easy Transfer Reports.lnk", cAlternateFileName="WINDOW~2.LNK")) returned 1 [0091.396] FindNextFileW (in: hFindFile=0x382000, lpFindFileData=0x31e314 | out: lpFindFileData=0x31e314*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8ac9dc28, ftCreationTime.dwHighDateTime=0x1ca043f, ftLastAccessTime.dwLowDateTime=0x8ac9dc28, ftLastAccessTime.dwHighDateTime=0x1ca043f, ftLastWriteTime.dwLowDateTime=0x96c1320, ftLastWriteTime.dwHighDateTime=0x1d6eb7f, nFileSizeHigh=0x0, nFileSizeLow=0x530, dwReserved0=0x0, dwReserved1=0x0, cFileName="Windows Easy Transfer.lnk", cAlternateFileName="WINDOW~1.LNK")) returned 1 [0091.396] FindNextFileW (in: hFindFile=0x382000, lpFindFileData=0x31e314 | out: lpFindFileData=0x31e314*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8ac9dc28, ftCreationTime.dwHighDateTime=0x1ca043f, ftLastAccessTime.dwLowDateTime=0x8ac9dc28, ftLastAccessTime.dwHighDateTime=0x1ca043f, ftLastWriteTime.dwLowDateTime=0x96c1320, ftLastWriteTime.dwHighDateTime=0x1d6eb7f, nFileSizeHigh=0x0, nFileSizeLow=0x530, dwReserved0=0x0, dwReserved1=0x0, cFileName="Windows Easy Transfer.lnk", cAlternateFileName="WINDOW~1.LNK")) returned 0 [0091.396] FindClose (in: hFindFile=0x382000 | out: hFindFile=0x382000) returned 1 [0091.396] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e59c) returned 1 [0091.396] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e5a8) returned 1 [0091.396] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Programs\\Accessories\\System Tools\\Character Map.lnk", nBufferLength=0x105, lpBuffer=0x31dfb4, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Programs\\Accessories\\System Tools\\Character Map.lnk", lpFilePart=0x0) returned 0x63 [0091.396] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e4a8) returned 1 [0091.396] CreateFileW (lpFileName="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Programs\\Accessories\\System Tools\\Character Map.lnk" (normalized: "c:\\users\\all users\\microsoft\\windows\\start menu\\programs\\accessories\\system tools\\character map.lnk"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x178 [0091.396] GetFileType (hFile=0x178) returned 0x1 [0091.396] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e4a4) returned 1 [0091.396] GetFileType (hFile=0x178) returned 0x1 [0091.396] GetFileSize (in: hFile=0x178, lpFileSizeHigh=0x31e5b0 | out: lpFileSizeHigh=0x31e5b0*=0x0) returned 0x4f0 [0091.396] ReadFile (in: hFile=0x178, lpBuffer=0x272502c, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x31e55c, lpOverlapped=0x0 | out: lpBuffer=0x272502c*, lpNumberOfBytesRead=0x31e55c*=0x4f0, lpOverlapped=0x0) returned 1 [0091.397] CloseHandle (hObject=0x178) returned 1 [0091.410] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Programs\\Accessories\\System Tools\\Character Map.lnk", nBufferLength=0x105, lpBuffer=0x31dfa0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Programs\\Accessories\\System Tools\\Character Map.lnk", lpFilePart=0x0) returned 0x63 [0091.410] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e494) returned 1 [0091.410] CreateFileW (lpFileName="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Programs\\Accessories\\System Tools\\Character Map.lnk" (normalized: "c:\\users\\all users\\microsoft\\windows\\start menu\\programs\\accessories\\system tools\\character map.lnk"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x178 [0091.411] GetFileType (hFile=0x178) returned 0x1 [0091.411] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e490) returned 1 [0091.411] GetFileType (hFile=0x178) returned 0x1 [0091.411] WriteFile (in: hFile=0x178, lpBuffer=0x277488c*, nNumberOfBytesToWrite=0x500, lpNumberOfBytesWritten=0x31e524, lpOverlapped=0x0 | out: lpBuffer=0x277488c*, lpNumberOfBytesWritten=0x31e524*=0x500, lpOverlapped=0x0) returned 1 [0091.412] CloseHandle (hObject=0x178) returned 1 [0091.412] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Programs\\Accessories\\System Tools\\Character Map.lnk", nBufferLength=0x105, lpBuffer=0x31e0d4, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Programs\\Accessories\\System Tools\\Character Map.lnk", lpFilePart=0x0) returned 0x63 [0091.412] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Programs\\Accessories\\System Tools\\Character Map.lnk", nBufferLength=0x105, lpBuffer=0x31e0d4, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Programs\\Accessories\\System Tools\\Character Map.lnk", lpFilePart=0x0) returned 0x63 [0091.412] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e534) returned 1 [0091.412] GetFileAttributesExW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Programs\\Accessories\\System Tools\\Character Map.lnk" (normalized: "c:\\users\\all users\\microsoft\\windows\\start menu\\programs\\accessories\\system tools\\character map.lnk"), fInfoLevelId=0x0, lpFileInformation=0x31e5b0 | out: lpFileInformation=0x31e5b0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3e4ce49a, ftCreationTime.dwHighDateTime=0x1ca043f, ftLastAccessTime.dwLowDateTime=0x3e4ce49a, ftLastAccessTime.dwHighDateTime=0x1ca043f, ftLastWriteTime.dwLowDateTime=0x19ed3bc0, ftLastWriteTime.dwHighDateTime=0x1d6eb7f, nFileSizeHigh=0x0, nFileSizeLow=0x500)) returned 1 [0091.412] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e530) returned 1 [0091.412] MoveFileW (lpExistingFileName="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Programs\\Accessories\\System Tools\\Character Map.lnk" (normalized: "c:\\users\\all users\\microsoft\\windows\\start menu\\programs\\accessories\\system tools\\character map.lnk"), lpNewFileName="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Programs\\Accessories\\System Tools\\Character Map.lnk" (normalized: "c:\\users\\all users\\microsoft\\windows\\start menu\\programs\\accessories\\system tools\\character map.lnk")) returned 1 [0091.413] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Programs\\Accessories\\System Tools\\dfrgui.lnk", nBufferLength=0x105, lpBuffer=0x31dfb4, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Programs\\Accessories\\System Tools\\dfrgui.lnk", lpFilePart=0x0) returned 0x5c [0091.413] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e4a8) returned 1 [0091.413] CreateFileW (lpFileName="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Programs\\Accessories\\System Tools\\dfrgui.lnk" (normalized: "c:\\users\\all users\\microsoft\\windows\\start menu\\programs\\accessories\\system tools\\dfrgui.lnk"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x178 [0091.413] GetFileType (hFile=0x178) returned 0x1 [0091.413] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e4a4) returned 1 [0091.413] GetFileType (hFile=0x178) returned 0x1 [0091.413] GetFileSize (in: hFile=0x178, lpFileSizeHigh=0x31e5b0 | out: lpFileSizeHigh=0x31e5b0*=0x0) returned 0x510 [0091.413] ReadFile (in: hFile=0x178, lpBuffer=0x27760d4, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x31e55c, lpOverlapped=0x0 | out: lpBuffer=0x27760d4*, lpNumberOfBytesRead=0x31e55c*=0x510, lpOverlapped=0x0) returned 1 [0091.427] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Programs\\Accessories\\System Tools\\dfrgui.lnk", nBufferLength=0x105, lpBuffer=0x31dfa0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Programs\\Accessories\\System Tools\\dfrgui.lnk", lpFilePart=0x0) returned 0x5c [0091.427] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e494) returned 1 [0091.427] CreateFileW (lpFileName="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Programs\\Accessories\\System Tools\\dfrgui.lnk" (normalized: "c:\\users\\all users\\microsoft\\windows\\start menu\\programs\\accessories\\system tools\\dfrgui.lnk"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x178 [0091.428] GetFileType (hFile=0x178) returned 0x1 [0091.428] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e490) returned 1 [0091.428] GetFileType (hFile=0x178) returned 0x1 [0091.428] WriteFile (in: hFile=0x178, lpBuffer=0x27c59bc*, nNumberOfBytesToWrite=0x520, lpNumberOfBytesWritten=0x31e524, lpOverlapped=0x0 | out: lpBuffer=0x27c59bc*, lpNumberOfBytesWritten=0x31e524*=0x520, lpOverlapped=0x0) returned 1 [0091.430] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Programs\\Accessories\\System Tools\\dfrgui.lnk", nBufferLength=0x105, lpBuffer=0x31e0d4, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Programs\\Accessories\\System Tools\\dfrgui.lnk", lpFilePart=0x0) returned 0x5c [0091.430] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Programs\\Accessories\\System Tools\\dfrgui.lnk", nBufferLength=0x105, lpBuffer=0x31e0d4, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Programs\\Accessories\\System Tools\\dfrgui.lnk", lpFilePart=0x0) returned 0x5c [0091.430] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e534) returned 1 [0091.430] GetFileAttributesExW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Programs\\Accessories\\System Tools\\dfrgui.lnk" (normalized: "c:\\users\\all users\\microsoft\\windows\\start menu\\programs\\accessories\\system tools\\dfrgui.lnk"), fInfoLevelId=0x0, lpFileInformation=0x31e5b0 | out: lpFileInformation=0x31e5b0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x297b3b95, ftCreationTime.dwHighDateTime=0x1ca043f, ftLastAccessTime.dwLowDateTime=0x297b3b95, ftLastAccessTime.dwHighDateTime=0x1ca043f, ftLastWriteTime.dwLowDateTime=0x19ef9d20, ftLastWriteTime.dwHighDateTime=0x1d6eb7f, nFileSizeHigh=0x0, nFileSizeLow=0x520)) returned 1 [0091.430] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e530) returned 1 [0091.430] MoveFileW (lpExistingFileName="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Programs\\Accessories\\System Tools\\dfrgui.lnk" (normalized: "c:\\users\\all users\\microsoft\\windows\\start menu\\programs\\accessories\\system tools\\dfrgui.lnk"), lpNewFileName="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Programs\\Accessories\\System Tools\\dfrgui.lnk" (normalized: "c:\\users\\all users\\microsoft\\windows\\start menu\\programs\\accessories\\system tools\\dfrgui.lnk")) returned 1 [0091.431] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Programs\\Accessories\\System Tools\\Disk Cleanup.lnk", nBufferLength=0x105, lpBuffer=0x31dfb4, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Programs\\Accessories\\System Tools\\Disk Cleanup.lnk", lpFilePart=0x0) returned 0x62 [0091.431] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e4a8) returned 1 [0091.431] CreateFileW (lpFileName="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Programs\\Accessories\\System Tools\\Disk Cleanup.lnk" (normalized: "c:\\users\\all users\\microsoft\\windows\\start menu\\programs\\accessories\\system tools\\disk cleanup.lnk"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x178 [0091.431] GetFileType (hFile=0x178) returned 0x1 [0091.431] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e4a4) returned 1 [0091.431] GetFileType (hFile=0x178) returned 0x1 [0091.431] GetFileSize (in: hFile=0x178, lpFileSizeHigh=0x31e5b0 | out: lpFileSizeHigh=0x31e5b0*=0x0) returned 0x4f0 [0091.431] ReadFile (in: hFile=0x178, lpBuffer=0x27c71cc, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x31e55c, lpOverlapped=0x0 | out: lpBuffer=0x27c71cc*, lpNumberOfBytesRead=0x31e55c*=0x4f0, lpOverlapped=0x0) returned 1 [0091.445] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Programs\\Accessories\\System Tools\\Disk Cleanup.lnk", nBufferLength=0x105, lpBuffer=0x31dfa0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Programs\\Accessories\\System Tools\\Disk Cleanup.lnk", lpFilePart=0x0) returned 0x62 [0091.445] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e494) returned 1 [0091.446] CreateFileW (lpFileName="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Programs\\Accessories\\System Tools\\Disk Cleanup.lnk" (normalized: "c:\\users\\all users\\microsoft\\windows\\start menu\\programs\\accessories\\system tools\\disk cleanup.lnk"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x178 [0091.446] GetFileType (hFile=0x178) returned 0x1 [0091.447] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e490) returned 1 [0091.447] GetFileType (hFile=0x178) returned 0x1 [0091.447] WriteFile (in: hFile=0x178, lpBuffer=0x2816a2c*, nNumberOfBytesToWrite=0x500, lpNumberOfBytesWritten=0x31e524, lpOverlapped=0x0 | out: lpBuffer=0x2816a2c*, lpNumberOfBytesWritten=0x31e524*=0x500, lpOverlapped=0x0) returned 1 [0091.448] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Programs\\Accessories\\System Tools\\Disk Cleanup.lnk", nBufferLength=0x105, lpBuffer=0x31e0d4, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Programs\\Accessories\\System Tools\\Disk Cleanup.lnk", lpFilePart=0x0) returned 0x62 [0091.448] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Programs\\Accessories\\System Tools\\Disk Cleanup.lnk", nBufferLength=0x105, lpBuffer=0x31e0d4, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Programs\\Accessories\\System Tools\\Disk Cleanup.lnk", lpFilePart=0x0) returned 0x62 [0091.448] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e534) returned 1 [0091.448] GetFileAttributesExW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Programs\\Accessories\\System Tools\\Disk Cleanup.lnk" (normalized: "c:\\users\\all users\\microsoft\\windows\\start menu\\programs\\accessories\\system tools\\disk cleanup.lnk"), fInfoLevelId=0x0, lpFileInformation=0x31e5b0 | out: lpFileInformation=0x31e5b0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3d31a0d9, ftCreationTime.dwHighDateTime=0x1ca043f, ftLastAccessTime.dwLowDateTime=0x3d31a0d9, ftLastAccessTime.dwHighDateTime=0x1ca043f, ftLastWriteTime.dwLowDateTime=0x19f45fe0, ftLastWriteTime.dwHighDateTime=0x1d6eb7f, nFileSizeHigh=0x0, nFileSizeLow=0x500)) returned 1 [0091.448] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e530) returned 1 [0091.448] MoveFileW (lpExistingFileName="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Programs\\Accessories\\System Tools\\Disk Cleanup.lnk" (normalized: "c:\\users\\all users\\microsoft\\windows\\start menu\\programs\\accessories\\system tools\\disk cleanup.lnk"), lpNewFileName="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Programs\\Accessories\\System Tools\\Disk Cleanup.lnk" (normalized: "c:\\users\\all users\\microsoft\\windows\\start menu\\programs\\accessories\\system tools\\disk cleanup.lnk")) returned 1 [0091.449] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Programs\\Accessories\\System Tools\\Resource Monitor.lnk", nBufferLength=0x105, lpBuffer=0x31dfb4, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Programs\\Accessories\\System Tools\\Resource Monitor.lnk", lpFilePart=0x0) returned 0x66 [0091.449] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e4a8) returned 1 [0091.449] CreateFileW (lpFileName="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Programs\\Accessories\\System Tools\\Resource Monitor.lnk" (normalized: "c:\\users\\all users\\microsoft\\windows\\start menu\\programs\\accessories\\system tools\\resource monitor.lnk"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x178 [0091.449] GetFileType (hFile=0x178) returned 0x1 [0091.449] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e4a4) returned 1 [0091.449] GetFileType (hFile=0x178) returned 0x1 [0091.449] GetFileSize (in: hFile=0x178, lpFileSizeHigh=0x31e5b0 | out: lpFileSizeHigh=0x31e5b0*=0x0) returned 0x4e0 [0091.449] ReadFile (in: hFile=0x178, lpBuffer=0x2818254, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x31e55c, lpOverlapped=0x0 | out: lpBuffer=0x2818254*, lpNumberOfBytesRead=0x31e55c*=0x4e0, lpOverlapped=0x0) returned 1 [0091.489] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Programs\\Accessories\\System Tools\\Resource Monitor.lnk", nBufferLength=0x105, lpBuffer=0x31dfa0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Programs\\Accessories\\System Tools\\Resource Monitor.lnk", lpFilePart=0x0) returned 0x66 [0091.489] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e494) returned 1 [0091.489] CreateFileW (lpFileName="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Programs\\Accessories\\System Tools\\Resource Monitor.lnk" (normalized: "c:\\users\\all users\\microsoft\\windows\\start menu\\programs\\accessories\\system tools\\resource monitor.lnk"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x178 [0091.490] GetFileType (hFile=0x178) returned 0x1 [0091.490] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e490) returned 1 [0091.490] GetFileType (hFile=0x178) returned 0x1 [0091.491] WriteFile (in: hFile=0x178, lpBuffer=0x2669a0c*, nNumberOfBytesToWrite=0x4f0, lpNumberOfBytesWritten=0x31e524, lpOverlapped=0x0 | out: lpBuffer=0x2669a0c*, lpNumberOfBytesWritten=0x31e524*=0x4f0, lpOverlapped=0x0) returned 1 [0091.491] CloseHandle (hObject=0x178) returned 1 [0091.492] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Programs\\Accessories\\System Tools\\Resource Monitor.lnk", nBufferLength=0x105, lpBuffer=0x31e0d4, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Programs\\Accessories\\System Tools\\Resource Monitor.lnk", lpFilePart=0x0) returned 0x66 [0091.492] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Programs\\Accessories\\System Tools\\Resource Monitor.lnk", nBufferLength=0x105, lpBuffer=0x31e0d4, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Programs\\Accessories\\System Tools\\Resource Monitor.lnk", lpFilePart=0x0) returned 0x66 [0091.492] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e534) returned 1 [0091.492] GetFileAttributesExW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Programs\\Accessories\\System Tools\\Resource Monitor.lnk" (normalized: "c:\\users\\all users\\microsoft\\windows\\start menu\\programs\\accessories\\system tools\\resource monitor.lnk"), fInfoLevelId=0x0, lpFileInformation=0x31e5b0 | out: lpFileInformation=0x31e5b0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x141abfff, ftCreationTime.dwHighDateTime=0x1ca043f, ftLastAccessTime.dwLowDateTime=0x141abfff, ftLastAccessTime.dwHighDateTime=0x1ca043f, ftLastWriteTime.dwLowDateTime=0x19f922a0, ftLastWriteTime.dwHighDateTime=0x1d6eb7f, nFileSizeHigh=0x0, nFileSizeLow=0x4f0)) returned 1 [0091.492] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e530) returned 1 [0091.492] MoveFileW (lpExistingFileName="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Programs\\Accessories\\System Tools\\Resource Monitor.lnk" (normalized: "c:\\users\\all users\\microsoft\\windows\\start menu\\programs\\accessories\\system tools\\resource monitor.lnk"), lpNewFileName="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Programs\\Accessories\\System Tools\\Resource Monitor.lnk" (normalized: "c:\\users\\all users\\microsoft\\windows\\start menu\\programs\\accessories\\system tools\\resource monitor.lnk")) returned 1 [0091.493] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Programs\\Accessories\\System Tools\\System Information.lnk", nBufferLength=0x105, lpBuffer=0x31dfb4, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Programs\\Accessories\\System Tools\\System Information.lnk", lpFilePart=0x0) returned 0x68 [0091.493] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e4a8) returned 1 [0091.493] CreateFileW (lpFileName="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Programs\\Accessories\\System Tools\\System Information.lnk" (normalized: "c:\\users\\all users\\microsoft\\windows\\start menu\\programs\\accessories\\system tools\\system information.lnk"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x178 [0091.493] GetFileType (hFile=0x178) returned 0x1 [0091.493] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e4a4) returned 1 [0091.493] GetFileType (hFile=0x178) returned 0x1 [0091.493] GetFileSize (in: hFile=0x178, lpFileSizeHigh=0x31e5b0 | out: lpFileSizeHigh=0x31e5b0*=0x0) returned 0x4f0 [0091.493] ReadFile (in: hFile=0x178, lpBuffer=0x266b25c, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x31e55c, lpOverlapped=0x0 | out: lpBuffer=0x266b25c*, lpNumberOfBytesRead=0x31e55c*=0x4f0, lpOverlapped=0x0) returned 1 [0091.494] CloseHandle (hObject=0x178) returned 1 [0091.507] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Programs\\Accessories\\System Tools\\System Information.lnk", nBufferLength=0x105, lpBuffer=0x31dfa0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Programs\\Accessories\\System Tools\\System Information.lnk", lpFilePart=0x0) returned 0x68 [0091.507] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e494) returned 1 [0091.507] CreateFileW (lpFileName="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Programs\\Accessories\\System Tools\\System Information.lnk" (normalized: "c:\\users\\all users\\microsoft\\windows\\start menu\\programs\\accessories\\system tools\\system information.lnk"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x178 [0091.508] GetFileType (hFile=0x178) returned 0x1 [0091.508] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e490) returned 1 [0091.508] GetFileType (hFile=0x178) returned 0x1 [0091.508] WriteFile (in: hFile=0x178, lpBuffer=0x26bac30*, nNumberOfBytesToWrite=0x500, lpNumberOfBytesWritten=0x31e524, lpOverlapped=0x0 | out: lpBuffer=0x26bac30*, lpNumberOfBytesWritten=0x31e524*=0x500, lpOverlapped=0x0) returned 1 [0091.509] CloseHandle (hObject=0x178) returned 1 [0091.509] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Programs\\Accessories\\System Tools\\System Information.lnk", nBufferLength=0x105, lpBuffer=0x31e0d4, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Programs\\Accessories\\System Tools\\System Information.lnk", lpFilePart=0x0) returned 0x68 [0091.509] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Programs\\Accessories\\System Tools\\System Information.lnk", nBufferLength=0x105, lpBuffer=0x31e0d4, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Programs\\Accessories\\System Tools\\System Information.lnk", lpFilePart=0x0) returned 0x68 [0091.509] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e534) returned 1 [0091.510] GetFileAttributesExW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Programs\\Accessories\\System Tools\\System Information.lnk" (normalized: "c:\\users\\all users\\microsoft\\windows\\start menu\\programs\\accessories\\system tools\\system information.lnk"), fInfoLevelId=0x0, lpFileInformation=0x31e5b0 | out: lpFileInformation=0x31e5b0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa5e7f40, ftCreationTime.dwHighDateTime=0x1ca043f, ftLastAccessTime.dwLowDateTime=0xa5e7f40, ftLastAccessTime.dwHighDateTime=0x1ca043f, ftLastWriteTime.dwLowDateTime=0x19fb8400, ftLastWriteTime.dwHighDateTime=0x1d6eb7f, nFileSizeHigh=0x0, nFileSizeLow=0x500)) returned 1 [0091.510] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e530) returned 1 [0091.510] MoveFileW (lpExistingFileName="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Programs\\Accessories\\System Tools\\System Information.lnk" (normalized: "c:\\users\\all users\\microsoft\\windows\\start menu\\programs\\accessories\\system tools\\system information.lnk"), lpNewFileName="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Programs\\Accessories\\System Tools\\System Information.lnk" (normalized: "c:\\users\\all users\\microsoft\\windows\\start menu\\programs\\accessories\\system tools\\system information.lnk")) returned 1 [0091.511] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Programs\\Accessories\\System Tools\\System Restore.lnk", nBufferLength=0x105, lpBuffer=0x31dfb4, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Programs\\Accessories\\System Tools\\System Restore.lnk", lpFilePart=0x0) returned 0x64 [0091.511] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e4a8) returned 1 [0091.511] CreateFileW (lpFileName="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Programs\\Accessories\\System Tools\\System Restore.lnk" (normalized: "c:\\users\\all users\\microsoft\\windows\\start menu\\programs\\accessories\\system tools\\system restore.lnk"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x178 [0091.511] GetFileType (hFile=0x178) returned 0x1 [0091.511] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e4a4) returned 1 [0091.511] GetFileType (hFile=0x178) returned 0x1 [0091.511] GetFileSize (in: hFile=0x178, lpFileSizeHigh=0x31e5b0 | out: lpFileSizeHigh=0x31e5b0*=0x0) returned 0x4e0 [0091.511] ReadFile (in: hFile=0x178, lpBuffer=0x26bc468, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x31e55c, lpOverlapped=0x0 | out: lpBuffer=0x26bc468*, lpNumberOfBytesRead=0x31e55c*=0x4e0, lpOverlapped=0x0) returned 1 [0091.512] CloseHandle (hObject=0x178) returned 1 [0091.525] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Programs\\Accessories\\System Tools\\System Restore.lnk", nBufferLength=0x105, lpBuffer=0x31dfa0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Programs\\Accessories\\System Tools\\System Restore.lnk", lpFilePart=0x0) returned 0x64 [0091.525] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e494) returned 1 [0091.525] CreateFileW (lpFileName="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Programs\\Accessories\\System Tools\\System Restore.lnk" (normalized: "c:\\users\\all users\\microsoft\\windows\\start menu\\programs\\accessories\\system tools\\system restore.lnk"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x178 [0091.526] GetFileType (hFile=0x178) returned 0x1 [0091.526] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e490) returned 1 [0091.526] GetFileType (hFile=0x178) returned 0x1 [0091.526] WriteFile (in: hFile=0x178, lpBuffer=0x270bc80*, nNumberOfBytesToWrite=0x4f0, lpNumberOfBytesWritten=0x31e524, lpOverlapped=0x0 | out: lpBuffer=0x270bc80*, lpNumberOfBytesWritten=0x31e524*=0x4f0, lpOverlapped=0x0) returned 1 [0091.527] CloseHandle (hObject=0x178) returned 1 [0091.527] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Programs\\Accessories\\System Tools\\System Restore.lnk", nBufferLength=0x105, lpBuffer=0x31e0d4, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Programs\\Accessories\\System Tools\\System Restore.lnk", lpFilePart=0x0) returned 0x64 [0091.527] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Programs\\Accessories\\System Tools\\System Restore.lnk", nBufferLength=0x105, lpBuffer=0x31e0d4, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Programs\\Accessories\\System Tools\\System Restore.lnk", lpFilePart=0x0) returned 0x64 [0091.527] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e534) returned 1 [0091.527] GetFileAttributesExW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Programs\\Accessories\\System Tools\\System Restore.lnk" (normalized: "c:\\users\\all users\\microsoft\\windows\\start menu\\programs\\accessories\\system tools\\system restore.lnk"), fInfoLevelId=0x0, lpFileInformation=0x31e5b0 | out: lpFileInformation=0x31e5b0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3c8d61e7, ftCreationTime.dwHighDateTime=0x1ca043f, ftLastAccessTime.dwLowDateTime=0x3c8d61e7, ftLastAccessTime.dwHighDateTime=0x1ca043f, ftLastWriteTime.dwLowDateTime=0x1a0046c0, ftLastWriteTime.dwHighDateTime=0x1d6eb7f, nFileSizeHigh=0x0, nFileSizeLow=0x4f0)) returned 1 [0091.527] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e530) returned 1 [0091.527] MoveFileW (lpExistingFileName="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Programs\\Accessories\\System Tools\\System Restore.lnk" (normalized: "c:\\users\\all users\\microsoft\\windows\\start menu\\programs\\accessories\\system tools\\system restore.lnk"), lpNewFileName="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Programs\\Accessories\\System Tools\\System Restore.lnk" (normalized: "c:\\users\\all users\\microsoft\\windows\\start menu\\programs\\accessories\\system tools\\system restore.lnk")) returned 1 [0091.528] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Programs\\Accessories\\System Tools\\Task Scheduler.lnk", nBufferLength=0x105, lpBuffer=0x31dfb4, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Programs\\Accessories\\System Tools\\Task Scheduler.lnk", lpFilePart=0x0) returned 0x64 [0091.528] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e4a8) returned 1 [0091.528] CreateFileW (lpFileName="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Programs\\Accessories\\System Tools\\Task Scheduler.lnk" (normalized: "c:\\users\\all users\\microsoft\\windows\\start menu\\programs\\accessories\\system tools\\task scheduler.lnk"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x178 [0091.528] GetFileType (hFile=0x178) returned 0x1 [0091.528] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e4a4) returned 1 [0091.528] GetFileType (hFile=0x178) returned 0x1 [0091.528] GetFileSize (in: hFile=0x178, lpFileSizeHigh=0x31e5b0 | out: lpFileSizeHigh=0x31e5b0*=0x0) returned 0x500 [0091.528] ReadFile (in: hFile=0x178, lpBuffer=0x270d4c8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x31e55c, lpOverlapped=0x0 | out: lpBuffer=0x270d4c8*, lpNumberOfBytesRead=0x31e55c*=0x500, lpOverlapped=0x0) returned 1 [0091.529] CloseHandle (hObject=0x178) returned 1 [0091.542] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Programs\\Accessories\\System Tools\\Task Scheduler.lnk", nBufferLength=0x105, lpBuffer=0x31dfa0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Programs\\Accessories\\System Tools\\Task Scheduler.lnk", lpFilePart=0x0) returned 0x64 [0091.542] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e494) returned 1 [0091.542] CreateFileW (lpFileName="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Programs\\Accessories\\System Tools\\Task Scheduler.lnk" (normalized: "c:\\users\\all users\\microsoft\\windows\\start menu\\programs\\accessories\\system tools\\task scheduler.lnk"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x178 [0091.543] GetFileType (hFile=0x178) returned 0x1 [0091.543] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e490) returned 1 [0091.543] GetFileType (hFile=0x178) returned 0x1 [0091.543] WriteFile (in: hFile=0x178, lpBuffer=0x275cd80*, nNumberOfBytesToWrite=0x510, lpNumberOfBytesWritten=0x31e524, lpOverlapped=0x0 | out: lpBuffer=0x275cd80*, lpNumberOfBytesWritten=0x31e524*=0x510, lpOverlapped=0x0) returned 1 [0091.544] CloseHandle (hObject=0x178) returned 1 [0091.544] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Programs\\Accessories\\System Tools\\Task Scheduler.lnk", nBufferLength=0x105, lpBuffer=0x31e0d4, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Programs\\Accessories\\System Tools\\Task Scheduler.lnk", lpFilePart=0x0) returned 0x64 [0091.544] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Programs\\Accessories\\System Tools\\Task Scheduler.lnk", nBufferLength=0x105, lpBuffer=0x31e0d4, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Programs\\Accessories\\System Tools\\Task Scheduler.lnk", lpFilePart=0x0) returned 0x64 [0091.545] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e534) returned 1 [0091.545] GetFileAttributesExW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Programs\\Accessories\\System Tools\\Task Scheduler.lnk" (normalized: "c:\\users\\all users\\microsoft\\windows\\start menu\\programs\\accessories\\system tools\\task scheduler.lnk"), fInfoLevelId=0x0, lpFileInformation=0x31e5b0 | out: lpFileInformation=0x31e5b0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2b9eb814, ftCreationTime.dwHighDateTime=0x1ca043f, ftLastAccessTime.dwLowDateTime=0x2b9eb814, ftLastAccessTime.dwHighDateTime=0x1ca043f, ftLastWriteTime.dwLowDateTime=0x1a02a820, ftLastWriteTime.dwHighDateTime=0x1d6eb7f, nFileSizeHigh=0x0, nFileSizeLow=0x510)) returned 1 [0091.545] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e530) returned 1 [0091.545] MoveFileW (lpExistingFileName="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Programs\\Accessories\\System Tools\\Task Scheduler.lnk" (normalized: "c:\\users\\all users\\microsoft\\windows\\start menu\\programs\\accessories\\system tools\\task scheduler.lnk"), lpNewFileName="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Programs\\Accessories\\System Tools\\Task Scheduler.lnk" (normalized: "c:\\users\\all users\\microsoft\\windows\\start menu\\programs\\accessories\\system tools\\task scheduler.lnk")) returned 1 [0091.545] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Programs\\Accessories\\System Tools\\Windows Easy Transfer Reports.lnk", nBufferLength=0x105, lpBuffer=0x31dfb4, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Programs\\Accessories\\System Tools\\Windows Easy Transfer Reports.lnk", lpFilePart=0x0) returned 0x73 [0091.545] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e4a8) returned 1 [0091.545] CreateFileW (lpFileName="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Programs\\Accessories\\System Tools\\Windows Easy Transfer Reports.lnk" (normalized: "c:\\users\\all users\\microsoft\\windows\\start menu\\programs\\accessories\\system tools\\windows easy transfer reports.lnk"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x178 [0091.546] GetFileType (hFile=0x178) returned 0x1 [0091.546] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e4a4) returned 1 [0091.546] GetFileType (hFile=0x178) returned 0x1 [0091.546] GetFileSize (in: hFile=0x178, lpFileSizeHigh=0x31e5b0 | out: lpFileSizeHigh=0x31e5b0*=0x0) returned 0x530 [0091.546] ReadFile (in: hFile=0x178, lpBuffer=0x275e630, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x31e55c, lpOverlapped=0x0 | out: lpBuffer=0x275e630*, lpNumberOfBytesRead=0x31e55c*=0x530, lpOverlapped=0x0) returned 1 [0091.547] CloseHandle (hObject=0x178) returned 1 [0091.560] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Programs\\Accessories\\System Tools\\Windows Easy Transfer Reports.lnk", nBufferLength=0x105, lpBuffer=0x31dfa0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Programs\\Accessories\\System Tools\\Windows Easy Transfer Reports.lnk", lpFilePart=0x0) returned 0x73 [0091.560] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e494) returned 1 [0091.560] CreateFileW (lpFileName="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Programs\\Accessories\\System Tools\\Windows Easy Transfer Reports.lnk" (normalized: "c:\\users\\all users\\microsoft\\windows\\start menu\\programs\\accessories\\system tools\\windows easy transfer reports.lnk"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x178 [0091.561] GetFileType (hFile=0x178) returned 0x1 [0091.561] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e490) returned 1 [0091.561] GetFileType (hFile=0x178) returned 0x1 [0091.561] WriteFile (in: hFile=0x178, lpBuffer=0x27ae010*, nNumberOfBytesToWrite=0x540, lpNumberOfBytesWritten=0x31e524, lpOverlapped=0x0 | out: lpBuffer=0x27ae010*, lpNumberOfBytesWritten=0x31e524*=0x540, lpOverlapped=0x0) returned 1 [0091.561] CloseHandle (hObject=0x178) returned 1 [0091.562] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Programs\\Accessories\\System Tools\\Windows Easy Transfer Reports.lnk", nBufferLength=0x105, lpBuffer=0x31e0d4, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Programs\\Accessories\\System Tools\\Windows Easy Transfer Reports.lnk", lpFilePart=0x0) returned 0x73 [0091.562] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Programs\\Accessories\\System Tools\\Windows Easy Transfer Reports.lnk", nBufferLength=0x105, lpBuffer=0x31e0d4, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Programs\\Accessories\\System Tools\\Windows Easy Transfer Reports.lnk", lpFilePart=0x0) returned 0x73 [0091.562] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e534) returned 1 [0091.562] GetFileAttributesExW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Programs\\Accessories\\System Tools\\Windows Easy Transfer Reports.lnk" (normalized: "c:\\users\\all users\\microsoft\\windows\\start menu\\programs\\accessories\\system tools\\windows easy transfer reports.lnk"), fInfoLevelId=0x0, lpFileInformation=0x31e5b0 | out: lpFileInformation=0x31e5b0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8ace9ee9, ftCreationTime.dwHighDateTime=0x1ca043f, ftLastAccessTime.dwLowDateTime=0x8ace9ee9, ftLastAccessTime.dwHighDateTime=0x1ca043f, ftLastWriteTime.dwLowDateTime=0x1a050980, ftLastWriteTime.dwHighDateTime=0x1d6eb7f, nFileSizeHigh=0x0, nFileSizeLow=0x540)) returned 1 [0091.562] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e530) returned 1 [0091.562] MoveFileW (lpExistingFileName="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Programs\\Accessories\\System Tools\\Windows Easy Transfer Reports.lnk" (normalized: "c:\\users\\all users\\microsoft\\windows\\start menu\\programs\\accessories\\system tools\\windows easy transfer reports.lnk"), lpNewFileName="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Programs\\Accessories\\System Tools\\Windows Easy Transfer Reports.lnk" (normalized: "c:\\users\\all users\\microsoft\\windows\\start menu\\programs\\accessories\\system tools\\windows easy transfer reports.lnk")) returned 1 [0091.563] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Programs\\Accessories\\System Tools\\Windows Easy Transfer.lnk", nBufferLength=0x105, lpBuffer=0x31dfb4, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Programs\\Accessories\\System Tools\\Windows Easy Transfer.lnk", lpFilePart=0x0) returned 0x6b [0091.563] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e4a8) returned 1 [0091.563] CreateFileW (lpFileName="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Programs\\Accessories\\System Tools\\Windows Easy Transfer.lnk" (normalized: "c:\\users\\all users\\microsoft\\windows\\start menu\\programs\\accessories\\system tools\\windows easy transfer.lnk"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x178 [0091.563] GetFileType (hFile=0x178) returned 0x1 [0091.563] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e4a4) returned 1 [0091.563] GetFileType (hFile=0x178) returned 0x1 [0091.563] GetFileSize (in: hFile=0x178, lpFileSizeHigh=0x31e5b0 | out: lpFileSizeHigh=0x31e5b0*=0x0) returned 0x530 [0091.563] ReadFile (in: hFile=0x178, lpBuffer=0x27af8d8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x31e55c, lpOverlapped=0x0 | out: lpBuffer=0x27af8d8*, lpNumberOfBytesRead=0x31e55c*=0x530, lpOverlapped=0x0) returned 1 [0091.564] CloseHandle (hObject=0x178) returned 1 [0091.577] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Programs\\Accessories\\System Tools\\Windows Easy Transfer.lnk", nBufferLength=0x105, lpBuffer=0x31dfa0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Programs\\Accessories\\System Tools\\Windows Easy Transfer.lnk", lpFilePart=0x0) returned 0x6b [0091.577] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e494) returned 1 [0091.577] CreateFileW (lpFileName="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Programs\\Accessories\\System Tools\\Windows Easy Transfer.lnk" (normalized: "c:\\users\\all users\\microsoft\\windows\\start menu\\programs\\accessories\\system tools\\windows easy transfer.lnk"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x178 [0091.579] GetFileType (hFile=0x178) returned 0x1 [0091.579] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e490) returned 1 [0091.579] GetFileType (hFile=0x178) returned 0x1 [0091.579] WriteFile (in: hFile=0x178, lpBuffer=0x27ff298*, nNumberOfBytesToWrite=0x540, lpNumberOfBytesWritten=0x31e524, lpOverlapped=0x0 | out: lpBuffer=0x27ff298*, lpNumberOfBytesWritten=0x31e524*=0x540, lpOverlapped=0x0) returned 1 [0091.580] CloseHandle (hObject=0x178) returned 1 [0091.580] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Programs\\Accessories\\System Tools\\Windows Easy Transfer.lnk", nBufferLength=0x105, lpBuffer=0x31e0d4, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Programs\\Accessories\\System Tools\\Windows Easy Transfer.lnk", lpFilePart=0x0) returned 0x6b [0091.580] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Programs\\Accessories\\System Tools\\Windows Easy Transfer.lnk", nBufferLength=0x105, lpBuffer=0x31e0d4, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Programs\\Accessories\\System Tools\\Windows Easy Transfer.lnk", lpFilePart=0x0) returned 0x6b [0091.580] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e534) returned 1 [0091.580] GetFileAttributesExW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Programs\\Accessories\\System Tools\\Windows Easy Transfer.lnk" (normalized: "c:\\users\\all users\\microsoft\\windows\\start menu\\programs\\accessories\\system tools\\windows easy transfer.lnk"), fInfoLevelId=0x0, lpFileInformation=0x31e5b0 | out: lpFileInformation=0x31e5b0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8ac9dc28, ftCreationTime.dwHighDateTime=0x1ca043f, ftLastAccessTime.dwLowDateTime=0x8ac9dc28, ftLastAccessTime.dwHighDateTime=0x1ca043f, ftLastWriteTime.dwLowDateTime=0x1a076ae0, ftLastWriteTime.dwHighDateTime=0x1d6eb7f, nFileSizeHigh=0x0, nFileSizeLow=0x540)) returned 1 [0091.580] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e530) returned 1 [0091.580] MoveFileW (lpExistingFileName="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Programs\\Accessories\\System Tools\\Windows Easy Transfer.lnk" (normalized: "c:\\users\\all users\\microsoft\\windows\\start menu\\programs\\accessories\\system tools\\windows easy transfer.lnk"), lpNewFileName="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Programs\\Accessories\\System Tools\\Windows Easy Transfer.lnk" (normalized: "c:\\users\\all users\\microsoft\\windows\\start menu\\programs\\accessories\\system tools\\windows easy transfer.lnk")) returned 1 [0091.581] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e5dc) returned 1 [0091.581] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Programs\\Accessories\\Tablet PC", nBufferLength=0x105, lpBuffer=0x31e0e4, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Programs\\Accessories\\Tablet PC", lpFilePart=0x0) returned 0x4e [0091.581] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Programs\\Accessories\\Tablet PC\\", nBufferLength=0x105, lpBuffer=0x31e0b8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Programs\\Accessories\\Tablet PC\\", lpFilePart=0x0) returned 0x4f [0091.581] FindFirstFileW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Programs\\Accessories\\Tablet PC\\*", lpFindFileData=0x31e304 | out: lpFindFileData=0x31e304*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x9182055d, ftCreationTime.dwHighDateTime=0x1cbf8eb, ftLastAccessTime.dwLowDateTime=0x8126b520, ftLastAccessTime.dwHighDateTime=0x1d2de2a, ftLastWriteTime.dwLowDateTime=0x81291680, ftLastWriteTime.dwHighDateTime=0x1d2de2a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5107ba0 [0091.581] FindNextFileW (in: hFindFile=0x5107ba0, lpFindFileData=0x31e314 | out: lpFindFileData=0x31e314*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x9182055d, ftCreationTime.dwHighDateTime=0x1cbf8eb, ftLastAccessTime.dwLowDateTime=0x8126b520, ftLastAccessTime.dwHighDateTime=0x1d2de2a, ftLastWriteTime.dwLowDateTime=0x81291680, ftLastWriteTime.dwHighDateTime=0x1d2de2a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0091.581] FindNextFileW (in: hFindFile=0x5107ba0, lpFindFileData=0x31e314 | out: lpFindFileData=0x31e314*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0x9182055d, ftCreationTime.dwHighDateTime=0x1cbf8eb, ftLastAccessTime.dwLowDateTime=0x8a217df5, ftLastAccessTime.dwHighDateTime=0x1cbf8eb, ftLastWriteTime.dwLowDateTime=0x81291680, ftLastWriteTime.dwHighDateTime=0x1d2de2a, nFileSizeHigh=0x0, nFileSizeLow=0x157, dwReserved0=0x0, dwReserved1=0x0, cFileName="Desktop.ini", cAlternateFileName="")) returned 1 [0091.581] FindNextFileW (in: hFindFile=0x5107ba0, lpFindFileData=0x31e314 | out: lpFindFileData=0x31e314*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x811d2fa0, ftCreationTime.dwHighDateTime=0x1d2de2a, ftLastAccessTime.dwLowDateTime=0x811d2fa0, ftLastAccessTime.dwHighDateTime=0x1d2de2a, ftLastWriteTime.dwLowDateTime=0x970d5e0, ftLastWriteTime.dwHighDateTime=0x1d6eb7f, nFileSizeHigh=0x0, nFileSizeLow=0x5a0, dwReserved0=0x0, dwReserved1=0x0, cFileName="ShapeCollector.lnk", cAlternateFileName="SHAPEC~1.LNK")) returned 1 [0091.582] FindNextFileW (in: hFindFile=0x5107ba0, lpFindFileData=0x31e314 | out: lpFindFileData=0x31e314*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8126b520, ftCreationTime.dwHighDateTime=0x1d2de2a, ftLastAccessTime.dwLowDateTime=0x8126b520, ftLastAccessTime.dwHighDateTime=0x1d2de2a, ftLastWriteTime.dwLowDateTime=0x9733740, ftLastWriteTime.dwHighDateTime=0x1d6eb7f, nFileSizeHigh=0x0, nFileSizeLow=0x570, dwReserved0=0x0, dwReserved1=0x0, cFileName="TabTip.lnk", cAlternateFileName="")) returned 1 [0091.582] FindNextFileW (in: hFindFile=0x5107ba0, lpFindFileData=0x31e314 | out: lpFindFileData=0x31e314*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x80d103a0, ftCreationTime.dwHighDateTime=0x1d2de2a, ftLastAccessTime.dwLowDateTime=0x80d103a0, ftLastAccessTime.dwHighDateTime=0x1d2de2a, ftLastWriteTime.dwLowDateTime=0x97598a0, ftLastWriteTime.dwHighDateTime=0x1d6eb7f, nFileSizeHigh=0x0, nFileSizeLow=0x530, dwReserved0=0x0, dwReserved1=0x0, cFileName="Windows Journal.lnk", cAlternateFileName="WINDOW~1.LNK")) returned 1 [0091.582] FindNextFileW (in: hFindFile=0x5107ba0, lpFindFileData=0x31e314 | out: lpFindFileData=0x31e314*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0091.582] FindClose (in: hFindFile=0x5107ba0 | out: hFindFile=0x5107ba0) returned 1 [0091.582] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e59c) returned 1 [0091.582] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e5a8) returned 1 [0091.582] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e5dc) returned 1 [0091.582] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Programs\\Accessories\\Tablet PC", nBufferLength=0x105, lpBuffer=0x31e0e4, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Programs\\Accessories\\Tablet PC", lpFilePart=0x0) returned 0x4e [0091.582] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Programs\\Accessories\\Tablet PC\\", nBufferLength=0x105, lpBuffer=0x31e0b8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Programs\\Accessories\\Tablet PC\\", lpFilePart=0x0) returned 0x4f [0091.582] FindFirstFileW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Programs\\Accessories\\Tablet PC\\*", lpFindFileData=0x31e304 | out: lpFindFileData=0x31e304*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x9182055d, ftCreationTime.dwHighDateTime=0x1cbf8eb, ftLastAccessTime.dwLowDateTime=0x8126b520, ftLastAccessTime.dwHighDateTime=0x1d2de2a, ftLastWriteTime.dwLowDateTime=0x81291680, ftLastWriteTime.dwHighDateTime=0x1d2de2a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5107ba0 [0091.582] FindNextFileW (in: hFindFile=0x5107ba0, lpFindFileData=0x31e314 | out: lpFindFileData=0x31e314*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x9182055d, ftCreationTime.dwHighDateTime=0x1cbf8eb, ftLastAccessTime.dwLowDateTime=0x8126b520, ftLastAccessTime.dwHighDateTime=0x1d2de2a, ftLastWriteTime.dwLowDateTime=0x81291680, ftLastWriteTime.dwHighDateTime=0x1d2de2a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0091.583] FindNextFileW (in: hFindFile=0x5107ba0, lpFindFileData=0x31e314 | out: lpFindFileData=0x31e314*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0x9182055d, ftCreationTime.dwHighDateTime=0x1cbf8eb, ftLastAccessTime.dwLowDateTime=0x8a217df5, ftLastAccessTime.dwHighDateTime=0x1cbf8eb, ftLastWriteTime.dwLowDateTime=0x81291680, ftLastWriteTime.dwHighDateTime=0x1d2de2a, nFileSizeHigh=0x0, nFileSizeLow=0x157, dwReserved0=0x0, dwReserved1=0x0, cFileName="Desktop.ini", cAlternateFileName="")) returned 1 [0091.583] FindNextFileW (in: hFindFile=0x5107ba0, lpFindFileData=0x31e314 | out: lpFindFileData=0x31e314*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x811d2fa0, ftCreationTime.dwHighDateTime=0x1d2de2a, ftLastAccessTime.dwLowDateTime=0x811d2fa0, ftLastAccessTime.dwHighDateTime=0x1d2de2a, ftLastWriteTime.dwLowDateTime=0x970d5e0, ftLastWriteTime.dwHighDateTime=0x1d6eb7f, nFileSizeHigh=0x0, nFileSizeLow=0x5a0, dwReserved0=0x0, dwReserved1=0x0, cFileName="ShapeCollector.lnk", cAlternateFileName="SHAPEC~1.LNK")) returned 1 [0091.583] FindNextFileW (in: hFindFile=0x5107ba0, lpFindFileData=0x31e314 | out: lpFindFileData=0x31e314*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8126b520, ftCreationTime.dwHighDateTime=0x1d2de2a, ftLastAccessTime.dwLowDateTime=0x8126b520, ftLastAccessTime.dwHighDateTime=0x1d2de2a, ftLastWriteTime.dwLowDateTime=0x9733740, ftLastWriteTime.dwHighDateTime=0x1d6eb7f, nFileSizeHigh=0x0, nFileSizeLow=0x570, dwReserved0=0x0, dwReserved1=0x0, cFileName="TabTip.lnk", cAlternateFileName="")) returned 1 [0091.583] FindNextFileW (in: hFindFile=0x5107ba0, lpFindFileData=0x31e314 | out: lpFindFileData=0x31e314*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x80d103a0, ftCreationTime.dwHighDateTime=0x1d2de2a, ftLastAccessTime.dwLowDateTime=0x80d103a0, ftLastAccessTime.dwHighDateTime=0x1d2de2a, ftLastWriteTime.dwLowDateTime=0x97598a0, ftLastWriteTime.dwHighDateTime=0x1d6eb7f, nFileSizeHigh=0x0, nFileSizeLow=0x530, dwReserved0=0x0, dwReserved1=0x0, cFileName="Windows Journal.lnk", cAlternateFileName="WINDOW~1.LNK")) returned 1 [0091.583] FindNextFileW (in: hFindFile=0x5107ba0, lpFindFileData=0x31e314 | out: lpFindFileData=0x31e314*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x80d103a0, ftCreationTime.dwHighDateTime=0x1d2de2a, ftLastAccessTime.dwLowDateTime=0x80d103a0, ftLastAccessTime.dwHighDateTime=0x1d2de2a, ftLastWriteTime.dwLowDateTime=0x97598a0, ftLastWriteTime.dwHighDateTime=0x1d6eb7f, nFileSizeHigh=0x0, nFileSizeLow=0x530, dwReserved0=0x0, dwReserved1=0x0, cFileName="Windows Journal.lnk", cAlternateFileName="WINDOW~1.LNK")) returned 0 [0091.583] FindClose (in: hFindFile=0x5107ba0 | out: hFindFile=0x5107ba0) returned 1 [0091.583] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e59c) returned 1 [0091.583] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e5a8) returned 1 [0091.583] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Programs\\Accessories\\Tablet PC\\ShapeCollector.lnk", nBufferLength=0x105, lpBuffer=0x31dfb4, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Programs\\Accessories\\Tablet PC\\ShapeCollector.lnk", lpFilePart=0x0) returned 0x61 [0091.583] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e4a8) returned 1 [0091.583] CreateFileW (lpFileName="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Programs\\Accessories\\Tablet PC\\ShapeCollector.lnk" (normalized: "c:\\users\\all users\\microsoft\\windows\\start menu\\programs\\accessories\\tablet pc\\shapecollector.lnk"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x178 [0091.584] GetFileType (hFile=0x178) returned 0x1 [0091.584] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e4a4) returned 1 [0091.584] GetFileType (hFile=0x178) returned 0x1 [0091.584] GetFileSize (in: hFile=0x178, lpFileSizeHigh=0x31e5b0 | out: lpFileSizeHigh=0x31e5b0*=0x0) returned 0x5a0 [0091.584] ReadFile (in: hFile=0x178, lpBuffer=0x28033c8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x31e55c, lpOverlapped=0x0 | out: lpBuffer=0x28033c8*, lpNumberOfBytesRead=0x31e55c*=0x5a0, lpOverlapped=0x0) returned 1 [0091.584] CloseHandle (hObject=0x178) returned 1 [0091.622] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Programs\\Accessories\\Tablet PC\\ShapeCollector.lnk", nBufferLength=0x105, lpBuffer=0x31dfa0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Programs\\Accessories\\Tablet PC\\ShapeCollector.lnk", lpFilePart=0x0) returned 0x61 [0091.622] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e494) returned 1 [0091.622] CreateFileW (lpFileName="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Programs\\Accessories\\Tablet PC\\ShapeCollector.lnk" (normalized: "c:\\users\\all users\\microsoft\\windows\\start menu\\programs\\accessories\\tablet pc\\shapecollector.lnk"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x178 [0091.623] GetFileType (hFile=0x178) returned 0x1 [0091.623] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e490) returned 1 [0091.623] GetFileType (hFile=0x178) returned 0x1 [0091.624] WriteFile (in: hFile=0x178, lpBuffer=0x26547b4*, nNumberOfBytesToWrite=0x5b0, lpNumberOfBytesWritten=0x31e524, lpOverlapped=0x0 | out: lpBuffer=0x26547b4*, lpNumberOfBytesWritten=0x31e524*=0x5b0, lpOverlapped=0x0) returned 1 [0091.624] CloseHandle (hObject=0x178) returned 1 [0091.625] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Programs\\Accessories\\Tablet PC\\ShapeCollector.lnk", nBufferLength=0x105, lpBuffer=0x31e0d4, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Programs\\Accessories\\Tablet PC\\ShapeCollector.lnk", lpFilePart=0x0) returned 0x61 [0091.625] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Programs\\Accessories\\Tablet PC\\ShapeCollector.lnk", nBufferLength=0x105, lpBuffer=0x31e0d4, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Programs\\Accessories\\Tablet PC\\ShapeCollector.lnk", lpFilePart=0x0) returned 0x61 [0091.625] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e534) returned 1 [0091.625] GetFileAttributesExW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Programs\\Accessories\\Tablet PC\\ShapeCollector.lnk" (normalized: "c:\\users\\all users\\microsoft\\windows\\start menu\\programs\\accessories\\tablet pc\\shapecollector.lnk"), fInfoLevelId=0x0, lpFileInformation=0x31e5b0 | out: lpFileInformation=0x31e5b0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x811d2fa0, ftCreationTime.dwHighDateTime=0x1d2de2a, ftLastAccessTime.dwLowDateTime=0x811d2fa0, ftLastAccessTime.dwHighDateTime=0x1d2de2a, ftLastWriteTime.dwLowDateTime=0x1a0e8f00, ftLastWriteTime.dwHighDateTime=0x1d6eb7f, nFileSizeHigh=0x0, nFileSizeLow=0x5b0)) returned 1 [0091.625] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e530) returned 1 [0091.625] MoveFileW (lpExistingFileName="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Programs\\Accessories\\Tablet PC\\ShapeCollector.lnk" (normalized: "c:\\users\\all users\\microsoft\\windows\\start menu\\programs\\accessories\\tablet pc\\shapecollector.lnk"), lpNewFileName="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Programs\\Accessories\\Tablet PC\\ShapeCollector.lnk" (normalized: "c:\\users\\all users\\microsoft\\windows\\start menu\\programs\\accessories\\tablet pc\\shapecollector.lnk")) returned 1 [0091.626] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Programs\\Accessories\\Tablet PC\\TabTip.lnk", nBufferLength=0x105, lpBuffer=0x31dfb4, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Programs\\Accessories\\Tablet PC\\TabTip.lnk", lpFilePart=0x0) returned 0x59 [0091.626] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e4a8) returned 1 [0091.626] CreateFileW (lpFileName="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Programs\\Accessories\\Tablet PC\\TabTip.lnk" (normalized: "c:\\users\\all users\\microsoft\\windows\\start menu\\programs\\accessories\\tablet pc\\tabtip.lnk"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x178 [0091.626] GetFileType (hFile=0x178) returned 0x1 [0091.626] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e4a4) returned 1 [0091.626] GetFileType (hFile=0x178) returned 0x1 [0091.626] GetFileSize (in: hFile=0x178, lpFileSizeHigh=0x31e5b0 | out: lpFileSizeHigh=0x31e5b0*=0x0) returned 0x570 [0091.626] ReadFile (in: hFile=0x178, lpBuffer=0x2656034, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x31e55c, lpOverlapped=0x0 | out: lpBuffer=0x2656034*, lpNumberOfBytesRead=0x31e55c*=0x570, lpOverlapped=0x0) returned 1 [0091.627] CloseHandle (hObject=0x178) returned 1 [0091.639] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Programs\\Accessories\\Tablet PC\\TabTip.lnk", nBufferLength=0x105, lpBuffer=0x31dfa0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Programs\\Accessories\\Tablet PC\\TabTip.lnk", lpFilePart=0x0) returned 0x59 [0091.640] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e494) returned 1 [0091.640] CreateFileW (lpFileName="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Programs\\Accessories\\Tablet PC\\TabTip.lnk" (normalized: "c:\\users\\all users\\microsoft\\windows\\start menu\\programs\\accessories\\tablet pc\\tabtip.lnk"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x178 [0091.640] GetFileType (hFile=0x178) returned 0x1 [0091.640] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e490) returned 1 [0091.641] GetFileType (hFile=0x178) returned 0x1 [0091.641] WriteFile (in: hFile=0x178, lpBuffer=0x26a5c50*, nNumberOfBytesToWrite=0x580, lpNumberOfBytesWritten=0x31e524, lpOverlapped=0x0 | out: lpBuffer=0x26a5c50*, lpNumberOfBytesWritten=0x31e524*=0x580, lpOverlapped=0x0) returned 1 [0091.641] CloseHandle (hObject=0x178) returned 1 [0091.642] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Programs\\Accessories\\Tablet PC\\TabTip.lnk", nBufferLength=0x105, lpBuffer=0x31e0d4, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Programs\\Accessories\\Tablet PC\\TabTip.lnk", lpFilePart=0x0) returned 0x59 [0091.642] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Programs\\Accessories\\Tablet PC\\TabTip.lnk", nBufferLength=0x105, lpBuffer=0x31e0d4, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Programs\\Accessories\\Tablet PC\\TabTip.lnk", lpFilePart=0x0) returned 0x59 [0091.642] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e534) returned 1 [0091.642] GetFileAttributesExW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Programs\\Accessories\\Tablet PC\\TabTip.lnk" (normalized: "c:\\users\\all users\\microsoft\\windows\\start menu\\programs\\accessories\\tablet pc\\tabtip.lnk"), fInfoLevelId=0x0, lpFileInformation=0x31e5b0 | out: lpFileInformation=0x31e5b0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8126b520, ftCreationTime.dwHighDateTime=0x1d2de2a, ftLastAccessTime.dwLowDateTime=0x8126b520, ftLastAccessTime.dwHighDateTime=0x1d2de2a, ftLastWriteTime.dwLowDateTime=0x1a10f060, ftLastWriteTime.dwHighDateTime=0x1d6eb7f, nFileSizeHigh=0x0, nFileSizeLow=0x580)) returned 1 [0091.642] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e530) returned 1 [0091.642] MoveFileW (lpExistingFileName="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Programs\\Accessories\\Tablet PC\\TabTip.lnk" (normalized: "c:\\users\\all users\\microsoft\\windows\\start menu\\programs\\accessories\\tablet pc\\tabtip.lnk"), lpNewFileName="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Programs\\Accessories\\Tablet PC\\TabTip.lnk" (normalized: "c:\\users\\all users\\microsoft\\windows\\start menu\\programs\\accessories\\tablet pc\\tabtip.lnk")) returned 1 [0091.643] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Programs\\Accessories\\Tablet PC\\Windows Journal.lnk", nBufferLength=0x105, lpBuffer=0x31dfb4, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Programs\\Accessories\\Tablet PC\\Windows Journal.lnk", lpFilePart=0x0) returned 0x62 [0091.643] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e4a8) returned 1 [0091.643] CreateFileW (lpFileName="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Programs\\Accessories\\Tablet PC\\Windows Journal.lnk" (normalized: "c:\\users\\all users\\microsoft\\windows\\start menu\\programs\\accessories\\tablet pc\\windows journal.lnk"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x178 [0091.643] GetFileType (hFile=0x178) returned 0x1 [0091.643] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e4a4) returned 1 [0091.643] GetFileType (hFile=0x178) returned 0x1 [0091.643] GetFileSize (in: hFile=0x178, lpFileSizeHigh=0x31e5b0 | out: lpFileSizeHigh=0x31e5b0*=0x0) returned 0x530 [0091.643] ReadFile (in: hFile=0x178, lpBuffer=0x26a7494, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x31e55c, lpOverlapped=0x0 | out: lpBuffer=0x26a7494*, lpNumberOfBytesRead=0x31e55c*=0x530, lpOverlapped=0x0) returned 1 [0091.644] CloseHandle (hObject=0x178) returned 1 [0091.658] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Programs\\Accessories\\Tablet PC\\Windows Journal.lnk", nBufferLength=0x105, lpBuffer=0x31dfa0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Programs\\Accessories\\Tablet PC\\Windows Journal.lnk", lpFilePart=0x0) returned 0x62 [0091.658] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e494) returned 1 [0091.658] CreateFileW (lpFileName="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Programs\\Accessories\\Tablet PC\\Windows Journal.lnk" (normalized: "c:\\users\\all users\\microsoft\\windows\\start menu\\programs\\accessories\\tablet pc\\windows journal.lnk"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x178 [0091.660] GetFileType (hFile=0x178) returned 0x1 [0091.660] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e490) returned 1 [0091.660] GetFileType (hFile=0x178) returned 0x1 [0091.660] WriteFile (in: hFile=0x178, lpBuffer=0x26f6e38*, nNumberOfBytesToWrite=0x540, lpNumberOfBytesWritten=0x31e524, lpOverlapped=0x0 | out: lpBuffer=0x26f6e38*, lpNumberOfBytesWritten=0x31e524*=0x540, lpOverlapped=0x0) returned 1 [0091.661] CloseHandle (hObject=0x178) returned 1 [0091.661] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Programs\\Accessories\\Tablet PC\\Windows Journal.lnk", nBufferLength=0x105, lpBuffer=0x31e0d4, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Programs\\Accessories\\Tablet PC\\Windows Journal.lnk", lpFilePart=0x0) returned 0x62 [0091.661] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Programs\\Accessories\\Tablet PC\\Windows Journal.lnk", nBufferLength=0x105, lpBuffer=0x31e0d4, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Programs\\Accessories\\Tablet PC\\Windows Journal.lnk", lpFilePart=0x0) returned 0x62 [0091.661] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e534) returned 1 [0091.661] GetFileAttributesExW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Programs\\Accessories\\Tablet PC\\Windows Journal.lnk" (normalized: "c:\\users\\all users\\microsoft\\windows\\start menu\\programs\\accessories\\tablet pc\\windows journal.lnk"), fInfoLevelId=0x0, lpFileInformation=0x31e5b0 | out: lpFileInformation=0x31e5b0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x80d103a0, ftCreationTime.dwHighDateTime=0x1d2de2a, ftLastAccessTime.dwLowDateTime=0x80d103a0, ftLastAccessTime.dwHighDateTime=0x1d2de2a, ftLastWriteTime.dwLowDateTime=0x1a1351c0, ftLastWriteTime.dwHighDateTime=0x1d6eb7f, nFileSizeHigh=0x0, nFileSizeLow=0x540)) returned 1 [0091.661] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e530) returned 1 [0091.662] MoveFileW (lpExistingFileName="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Programs\\Accessories\\Tablet PC\\Windows Journal.lnk" (normalized: "c:\\users\\all users\\microsoft\\windows\\start menu\\programs\\accessories\\tablet pc\\windows journal.lnk"), lpNewFileName="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Programs\\Accessories\\Tablet PC\\Windows Journal.lnk" (normalized: "c:\\users\\all users\\microsoft\\windows\\start menu\\programs\\accessories\\tablet pc\\windows journal.lnk")) returned 1 [0091.662] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e5dc) returned 1 [0091.662] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Programs\\Accessories\\Windows PowerShell", nBufferLength=0x105, lpBuffer=0x31e0e4, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Programs\\Accessories\\Windows PowerShell", lpFilePart=0x0) returned 0x57 [0091.662] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Programs\\Accessories\\Windows PowerShell\\", nBufferLength=0x105, lpBuffer=0x31e0b8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Programs\\Accessories\\Windows PowerShell\\", lpFilePart=0x0) returned 0x58 [0091.662] FindFirstFileW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Programs\\Accessories\\Windows PowerShell\\*", lpFindFileData=0x31e304 | out: lpFindFileData=0x31e304*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x80020c30, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x8d79c9d7, ftLastAccessTime.dwHighDateTime=0x1ca043f, ftLastWriteTime.dwLowDateTime=0x8d7c2b37, ftLastWriteTime.dwHighDateTime=0x1ca043f, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5107a20 [0091.663] FindNextFileW (in: hFindFile=0x5107a20, lpFindFileData=0x31e314 | out: lpFindFileData=0x31e314*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x80020c30, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x8d79c9d7, ftLastAccessTime.dwHighDateTime=0x1ca043f, ftLastWriteTime.dwLowDateTime=0x8d7c2b37, ftLastWriteTime.dwHighDateTime=0x1ca043f, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0091.663] FindNextFileW (in: hFindFile=0x5107a20, lpFindFileData=0x31e314 | out: lpFindFileData=0x31e314*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0x8d776877, ftCreationTime.dwHighDateTime=0x1ca043f, ftLastAccessTime.dwLowDateTime=0x8d776877, ftLastAccessTime.dwHighDateTime=0x1ca043f, ftLastWriteTime.dwLowDateTime=0x8d7c2b37, ftLastWriteTime.dwHighDateTime=0x1ca043f, nFileSizeHigh=0x0, nFileSizeLow=0xd8, dwReserved0=0x0, dwReserved1=0x0, cFileName="desktop.ini", cAlternateFileName="")) returned 1 [0091.663] FindNextFileW (in: hFindFile=0x5107a20, lpFindFileData=0x31e314 | out: lpFindFileData=0x31e314*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8038cbd7, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x7bef7178, ftLastAccessTime.dwHighDateTime=0x1ca0444, ftLastWriteTime.dwLowDateTime=0x97a5b60, ftLastWriteTime.dwHighDateTime=0x1d6eb7f, nFileSizeHigh=0x0, nFileSizeLow=0x7d0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Windows PowerShell (x86).lnk", cAlternateFileName="WINDOW~1.LNK")) returned 1 [0091.663] FindNextFileW (in: hFindFile=0x5107a20, lpFindFileData=0x31e314 | out: lpFindFileData=0x31e314*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8d79c9d7, ftCreationTime.dwHighDateTime=0x1ca043f, ftLastAccessTime.dwLowDateTime=0x8d79c9d7, ftLastAccessTime.dwHighDateTime=0x1ca043f, ftLastWriteTime.dwLowDateTime=0x983e0e0, ftLastWriteTime.dwHighDateTime=0x1d6eb7f, nFileSizeHigh=0x0, nFileSizeLow=0x5c0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Windows PowerShell ISE (x86).lnk", cAlternateFileName="WINDOW~4.LNK")) returned 1 [0091.663] FindNextFileW (in: hFindFile=0x5107a20, lpFindFileData=0x31e314 | out: lpFindFileData=0x31e314*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8d750717, ftCreationTime.dwHighDateTime=0x1ca043f, ftLastAccessTime.dwLowDateTime=0x8d750717, ftLastAccessTime.dwHighDateTime=0x1ca043f, ftLastWriteTime.dwLowDateTime=0x9864240, ftLastWriteTime.dwHighDateTime=0x1d6eb7f, nFileSizeHigh=0x0, nFileSizeLow=0x5c0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Windows PowerShell ISE.lnk", cAlternateFileName="WINDOW~3.LNK")) returned 1 [0091.663] FindNextFileW (in: hFindFile=0x5107a20, lpFindFileData=0x31e314 | out: lpFindFileData=0x31e314*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8038cbd7, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x7bef7178, ftLastAccessTime.dwHighDateTime=0x1ca0444, ftLastWriteTime.dwLowDateTime=0x988a3a0, ftLastWriteTime.dwHighDateTime=0x1d6eb7f, nFileSizeHigh=0x0, nFileSizeLow=0x770, dwReserved0=0x0, dwReserved1=0x0, cFileName="Windows PowerShell.lnk", cAlternateFileName="WINDOW~2.LNK")) returned 1 [0091.663] FindNextFileW (in: hFindFile=0x5107a20, lpFindFileData=0x31e314 | out: lpFindFileData=0x31e314*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0091.663] FindClose (in: hFindFile=0x5107a20 | out: hFindFile=0x5107a20) returned 1 [0091.663] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e59c) returned 1 [0091.663] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e5a8) returned 1 [0091.663] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e5dc) returned 1 [0091.663] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Programs\\Accessories\\Windows PowerShell", nBufferLength=0x105, lpBuffer=0x31e0e4, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Programs\\Accessories\\Windows PowerShell", lpFilePart=0x0) returned 0x57 [0091.664] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Programs\\Accessories\\Windows PowerShell\\", nBufferLength=0x105, lpBuffer=0x31e0b8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Programs\\Accessories\\Windows PowerShell\\", lpFilePart=0x0) returned 0x58 [0091.664] FindFirstFileW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Programs\\Accessories\\Windows PowerShell\\*", lpFindFileData=0x31e304 | out: lpFindFileData=0x31e304*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x80020c30, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x8d79c9d7, ftLastAccessTime.dwHighDateTime=0x1ca043f, ftLastWriteTime.dwLowDateTime=0x8d7c2b37, ftLastWriteTime.dwHighDateTime=0x1ca043f, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5107a20 [0091.664] FindNextFileW (in: hFindFile=0x5107a20, lpFindFileData=0x31e314 | out: lpFindFileData=0x31e314*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x80020c30, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x8d79c9d7, ftLastAccessTime.dwHighDateTime=0x1ca043f, ftLastWriteTime.dwLowDateTime=0x8d7c2b37, ftLastWriteTime.dwHighDateTime=0x1ca043f, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0091.664] FindNextFileW (in: hFindFile=0x5107a20, lpFindFileData=0x31e314 | out: lpFindFileData=0x31e314*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0x8d776877, ftCreationTime.dwHighDateTime=0x1ca043f, ftLastAccessTime.dwLowDateTime=0x8d776877, ftLastAccessTime.dwHighDateTime=0x1ca043f, ftLastWriteTime.dwLowDateTime=0x8d7c2b37, ftLastWriteTime.dwHighDateTime=0x1ca043f, nFileSizeHigh=0x0, nFileSizeLow=0xd8, dwReserved0=0x0, dwReserved1=0x0, cFileName="desktop.ini", cAlternateFileName="")) returned 1 [0091.664] FindNextFileW (in: hFindFile=0x5107a20, lpFindFileData=0x31e314 | out: lpFindFileData=0x31e314*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8038cbd7, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x7bef7178, ftLastAccessTime.dwHighDateTime=0x1ca0444, ftLastWriteTime.dwLowDateTime=0x97a5b60, ftLastWriteTime.dwHighDateTime=0x1d6eb7f, nFileSizeHigh=0x0, nFileSizeLow=0x7d0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Windows PowerShell (x86).lnk", cAlternateFileName="WINDOW~1.LNK")) returned 1 [0091.664] FindNextFileW (in: hFindFile=0x5107a20, lpFindFileData=0x31e314 | out: lpFindFileData=0x31e314*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8d79c9d7, ftCreationTime.dwHighDateTime=0x1ca043f, ftLastAccessTime.dwLowDateTime=0x8d79c9d7, ftLastAccessTime.dwHighDateTime=0x1ca043f, ftLastWriteTime.dwLowDateTime=0x983e0e0, ftLastWriteTime.dwHighDateTime=0x1d6eb7f, nFileSizeHigh=0x0, nFileSizeLow=0x5c0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Windows PowerShell ISE (x86).lnk", cAlternateFileName="WINDOW~4.LNK")) returned 1 [0091.664] FindNextFileW (in: hFindFile=0x5107a20, lpFindFileData=0x31e314 | out: lpFindFileData=0x31e314*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8d750717, ftCreationTime.dwHighDateTime=0x1ca043f, ftLastAccessTime.dwLowDateTime=0x8d750717, ftLastAccessTime.dwHighDateTime=0x1ca043f, ftLastWriteTime.dwLowDateTime=0x9864240, ftLastWriteTime.dwHighDateTime=0x1d6eb7f, nFileSizeHigh=0x0, nFileSizeLow=0x5c0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Windows PowerShell ISE.lnk", cAlternateFileName="WINDOW~3.LNK")) returned 1 [0091.664] FindNextFileW (in: hFindFile=0x5107a20, lpFindFileData=0x31e314 | out: lpFindFileData=0x31e314*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8038cbd7, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x7bef7178, ftLastAccessTime.dwHighDateTime=0x1ca0444, ftLastWriteTime.dwLowDateTime=0x988a3a0, ftLastWriteTime.dwHighDateTime=0x1d6eb7f, nFileSizeHigh=0x0, nFileSizeLow=0x770, dwReserved0=0x0, dwReserved1=0x0, cFileName="Windows PowerShell.lnk", cAlternateFileName="WINDOW~2.LNK")) returned 1 [0091.665] FindNextFileW (in: hFindFile=0x5107a20, lpFindFileData=0x31e314 | out: lpFindFileData=0x31e314*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8038cbd7, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x7bef7178, ftLastAccessTime.dwHighDateTime=0x1ca0444, ftLastWriteTime.dwLowDateTime=0x988a3a0, ftLastWriteTime.dwHighDateTime=0x1d6eb7f, nFileSizeHigh=0x0, nFileSizeLow=0x770, dwReserved0=0x0, dwReserved1=0x0, cFileName="Windows PowerShell.lnk", cAlternateFileName="WINDOW~2.LNK")) returned 0 [0091.665] FindClose (in: hFindFile=0x5107a20 | out: hFindFile=0x5107a20) returned 1 [0091.665] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e59c) returned 1 [0091.665] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e5a8) returned 1 [0091.665] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Programs\\Accessories\\Windows PowerShell\\Windows PowerShell (x86).lnk", nBufferLength=0x105, lpBuffer=0x31dfb4, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Programs\\Accessories\\Windows PowerShell\\Windows PowerShell (x86).lnk", lpFilePart=0x0) returned 0x74 [0091.665] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e4a8) returned 1 [0091.665] CreateFileW (lpFileName="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Programs\\Accessories\\Windows PowerShell\\Windows PowerShell (x86).lnk" (normalized: "c:\\users\\all users\\microsoft\\windows\\start menu\\programs\\accessories\\windows powershell\\windows powershell (x86).lnk"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x178 [0091.665] GetFileType (hFile=0x178) returned 0x1 [0091.665] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e4a4) returned 1 [0091.665] GetFileType (hFile=0x178) returned 0x1 [0091.665] GetFileSize (in: hFile=0x178, lpFileSizeHigh=0x31e5b0 | out: lpFileSizeHigh=0x31e5b0*=0x0) returned 0x7d0 [0091.665] ReadFile (in: hFile=0x178, lpBuffer=0x26fbbd8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x31e55c, lpOverlapped=0x0 | out: lpBuffer=0x26fbbd8*, lpNumberOfBytesRead=0x31e55c*=0x7d0, lpOverlapped=0x0) returned 1 [0091.666] CloseHandle (hObject=0x178) returned 1 [0091.679] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Programs\\Accessories\\Windows PowerShell\\Windows PowerShell (x86).lnk", nBufferLength=0x105, lpBuffer=0x31dfa0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Programs\\Accessories\\Windows PowerShell\\Windows PowerShell (x86).lnk", lpFilePart=0x0) returned 0x74 [0091.679] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e494) returned 1 [0091.679] CreateFileW (lpFileName="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Programs\\Accessories\\Windows PowerShell\\Windows PowerShell (x86).lnk" (normalized: "c:\\users\\all users\\microsoft\\windows\\start menu\\programs\\accessories\\windows powershell\\windows powershell (x86).lnk"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x178 [0091.680] GetFileType (hFile=0x178) returned 0x1 [0091.680] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e490) returned 1 [0091.680] GetFileType (hFile=0x178) returned 0x1 [0091.680] WriteFile (in: hFile=0x178, lpBuffer=0x274c2d4*, nNumberOfBytesToWrite=0x7e0, lpNumberOfBytesWritten=0x31e524, lpOverlapped=0x0 | out: lpBuffer=0x274c2d4*, lpNumberOfBytesWritten=0x31e524*=0x7e0, lpOverlapped=0x0) returned 1 [0091.681] CloseHandle (hObject=0x178) returned 1 [0091.681] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Programs\\Accessories\\Windows PowerShell\\Windows PowerShell (x86).lnk", nBufferLength=0x105, lpBuffer=0x31e0d4, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Programs\\Accessories\\Windows PowerShell\\Windows PowerShell (x86).lnk", lpFilePart=0x0) returned 0x74 [0091.681] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Programs\\Accessories\\Windows PowerShell\\Windows PowerShell (x86).lnk", nBufferLength=0x105, lpBuffer=0x31e0d4, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Programs\\Accessories\\Windows PowerShell\\Windows PowerShell (x86).lnk", lpFilePart=0x0) returned 0x74 [0091.681] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e534) returned 1 [0091.681] GetFileAttributesExW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Programs\\Accessories\\Windows PowerShell\\Windows PowerShell (x86).lnk" (normalized: "c:\\users\\all users\\microsoft\\windows\\start menu\\programs\\accessories\\windows powershell\\windows powershell (x86).lnk"), fInfoLevelId=0x0, lpFileInformation=0x31e5b0 | out: lpFileInformation=0x31e5b0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8038cbd7, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x7bef7178, ftLastAccessTime.dwHighDateTime=0x1ca0444, ftLastWriteTime.dwLowDateTime=0x1a15b320, ftLastWriteTime.dwHighDateTime=0x1d6eb7f, nFileSizeHigh=0x0, nFileSizeLow=0x7e0)) returned 1 [0091.681] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e530) returned 1 [0091.681] MoveFileW (lpExistingFileName="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Programs\\Accessories\\Windows PowerShell\\Windows PowerShell (x86).lnk" (normalized: "c:\\users\\all users\\microsoft\\windows\\start menu\\programs\\accessories\\windows powershell\\windows powershell (x86).lnk"), lpNewFileName="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Programs\\Accessories\\Windows PowerShell\\Windows PowerShell (x86).lnk" (normalized: "c:\\users\\all users\\microsoft\\windows\\start menu\\programs\\accessories\\windows powershell\\windows powershell (x86).lnk")) returned 1 [0091.682] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Programs\\Accessories\\Windows PowerShell\\Windows PowerShell ISE (x86).lnk", nBufferLength=0x105, lpBuffer=0x31dfb4, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Programs\\Accessories\\Windows PowerShell\\Windows PowerShell ISE (x86).lnk", lpFilePart=0x0) returned 0x78 [0091.682] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e4a8) returned 1 [0091.682] CreateFileW (lpFileName="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Programs\\Accessories\\Windows PowerShell\\Windows PowerShell ISE (x86).lnk" (normalized: "c:\\users\\all users\\microsoft\\windows\\start menu\\programs\\accessories\\windows powershell\\windows powershell ise (x86).lnk"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x178 [0091.682] GetFileType (hFile=0x178) returned 0x1 [0091.682] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e4a4) returned 1 [0091.682] GetFileType (hFile=0x178) returned 0x1 [0091.682] GetFileSize (in: hFile=0x178, lpFileSizeHigh=0x31e5b0 | out: lpFileSizeHigh=0x31e5b0*=0x0) returned 0x5c0 [0091.682] ReadFile (in: hFile=0x178, lpBuffer=0x274dc60, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x31e55c, lpOverlapped=0x0 | out: lpBuffer=0x274dc60*, lpNumberOfBytesRead=0x31e55c*=0x5c0, lpOverlapped=0x0) returned 1 [0091.683] CloseHandle (hObject=0x178) returned 1 [0091.696] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Programs\\Accessories\\Windows PowerShell\\Windows PowerShell ISE (x86).lnk", nBufferLength=0x105, lpBuffer=0x31dfa0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Programs\\Accessories\\Windows PowerShell\\Windows PowerShell ISE (x86).lnk", lpFilePart=0x0) returned 0x78 [0091.696] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e494) returned 1 [0091.696] CreateFileW (lpFileName="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Programs\\Accessories\\Windows PowerShell\\Windows PowerShell ISE (x86).lnk" (normalized: "c:\\users\\all users\\microsoft\\windows\\start menu\\programs\\accessories\\windows powershell\\windows powershell ise (x86).lnk"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x178 [0091.697] GetFileType (hFile=0x178) returned 0x1 [0091.697] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e490) returned 1 [0091.697] GetFileType (hFile=0x178) returned 0x1 [0091.697] WriteFile (in: hFile=0x178, lpBuffer=0x279d91c*, nNumberOfBytesToWrite=0x5d0, lpNumberOfBytesWritten=0x31e524, lpOverlapped=0x0 | out: lpBuffer=0x279d91c*, lpNumberOfBytesWritten=0x31e524*=0x5d0, lpOverlapped=0x0) returned 1 [0091.698] CloseHandle (hObject=0x178) returned 1 [0091.699] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Programs\\Accessories\\Windows PowerShell\\Windows PowerShell ISE (x86).lnk", nBufferLength=0x105, lpBuffer=0x31e0d4, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Programs\\Accessories\\Windows PowerShell\\Windows PowerShell ISE (x86).lnk", lpFilePart=0x0) returned 0x78 [0091.699] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Programs\\Accessories\\Windows PowerShell\\Windows PowerShell ISE (x86).lnk", nBufferLength=0x105, lpBuffer=0x31e0d4, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Programs\\Accessories\\Windows PowerShell\\Windows PowerShell ISE (x86).lnk", lpFilePart=0x0) returned 0x78 [0091.699] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e534) returned 1 [0091.699] GetFileAttributesExW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Programs\\Accessories\\Windows PowerShell\\Windows PowerShell ISE (x86).lnk" (normalized: "c:\\users\\all users\\microsoft\\windows\\start menu\\programs\\accessories\\windows powershell\\windows powershell ise (x86).lnk"), fInfoLevelId=0x0, lpFileInformation=0x31e5b0 | out: lpFileInformation=0x31e5b0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8d79c9d7, ftCreationTime.dwHighDateTime=0x1ca043f, ftLastAccessTime.dwLowDateTime=0x8d79c9d7, ftLastAccessTime.dwHighDateTime=0x1ca043f, ftLastWriteTime.dwLowDateTime=0x1a181480, ftLastWriteTime.dwHighDateTime=0x1d6eb7f, nFileSizeHigh=0x0, nFileSizeLow=0x5d0)) returned 1 [0091.699] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e530) returned 1 [0091.699] MoveFileW (lpExistingFileName="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Programs\\Accessories\\Windows PowerShell\\Windows PowerShell ISE (x86).lnk" (normalized: "c:\\users\\all users\\microsoft\\windows\\start menu\\programs\\accessories\\windows powershell\\windows powershell ise (x86).lnk"), lpNewFileName="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Programs\\Accessories\\Windows PowerShell\\Windows PowerShell ISE (x86).lnk" (normalized: "c:\\users\\all users\\microsoft\\windows\\start menu\\programs\\accessories\\windows powershell\\windows powershell ise (x86).lnk")) returned 1 [0091.700] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Programs\\Accessories\\Windows PowerShell\\Windows PowerShell ISE.lnk", nBufferLength=0x105, lpBuffer=0x31dfb4, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Programs\\Accessories\\Windows PowerShell\\Windows PowerShell ISE.lnk", lpFilePart=0x0) returned 0x72 [0091.700] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e4a8) returned 1 [0091.700] CreateFileW (lpFileName="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Programs\\Accessories\\Windows PowerShell\\Windows PowerShell ISE.lnk" (normalized: "c:\\users\\all users\\microsoft\\windows\\start menu\\programs\\accessories\\windows powershell\\windows powershell ise.lnk"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x178 [0091.700] GetFileType (hFile=0x178) returned 0x1 [0091.700] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e4a4) returned 1 [0091.700] GetFileType (hFile=0x178) returned 0x1 [0091.700] GetFileSize (in: hFile=0x178, lpFileSizeHigh=0x31e5b0 | out: lpFileSizeHigh=0x31e5b0*=0x0) returned 0x5c0 [0091.700] ReadFile (in: hFile=0x178, lpBuffer=0x279f2a0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x31e55c, lpOverlapped=0x0 | out: lpBuffer=0x279f2a0*, lpNumberOfBytesRead=0x31e55c*=0x5c0, lpOverlapped=0x0) returned 1 [0091.717] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Programs\\Accessories\\Windows PowerShell\\Windows PowerShell ISE.lnk", nBufferLength=0x105, lpBuffer=0x31dfa0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Programs\\Accessories\\Windows PowerShell\\Windows PowerShell ISE.lnk", lpFilePart=0x0) returned 0x72 [0091.717] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e494) returned 1 [0091.718] CreateFileW (lpFileName="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Programs\\Accessories\\Windows PowerShell\\Windows PowerShell ISE.lnk" (normalized: "c:\\users\\all users\\microsoft\\windows\\start menu\\programs\\accessories\\windows powershell\\windows powershell ise.lnk"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x178 [0091.718] GetFileType (hFile=0x178) returned 0x1 [0091.718] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e490) returned 1 [0091.718] GetFileType (hFile=0x178) returned 0x1 [0091.719] WriteFile (in: hFile=0x178, lpBuffer=0x27eef44*, nNumberOfBytesToWrite=0x5d0, lpNumberOfBytesWritten=0x31e524, lpOverlapped=0x0 | out: lpBuffer=0x27eef44*, lpNumberOfBytesWritten=0x31e524*=0x5d0, lpOverlapped=0x0) returned 1 [0091.720] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Programs\\Accessories\\Windows PowerShell\\Windows PowerShell ISE.lnk", nBufferLength=0x105, lpBuffer=0x31e0d4, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Programs\\Accessories\\Windows PowerShell\\Windows PowerShell ISE.lnk", lpFilePart=0x0) returned 0x72 [0091.720] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Programs\\Accessories\\Windows PowerShell\\Windows PowerShell ISE.lnk", nBufferLength=0x105, lpBuffer=0x31e0d4, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Programs\\Accessories\\Windows PowerShell\\Windows PowerShell ISE.lnk", lpFilePart=0x0) returned 0x72 [0091.720] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e534) returned 1 [0091.720] GetFileAttributesExW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Programs\\Accessories\\Windows PowerShell\\Windows PowerShell ISE.lnk" (normalized: "c:\\users\\all users\\microsoft\\windows\\start menu\\programs\\accessories\\windows powershell\\windows powershell ise.lnk"), fInfoLevelId=0x0, lpFileInformation=0x31e5b0 | out: lpFileInformation=0x31e5b0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8d750717, ftCreationTime.dwHighDateTime=0x1ca043f, ftLastAccessTime.dwLowDateTime=0x8d750717, ftLastAccessTime.dwHighDateTime=0x1ca043f, ftLastWriteTime.dwLowDateTime=0x1a1cd740, ftLastWriteTime.dwHighDateTime=0x1d6eb7f, nFileSizeHigh=0x0, nFileSizeLow=0x5d0)) returned 1 [0091.720] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e530) returned 1 [0091.720] MoveFileW (lpExistingFileName="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Programs\\Accessories\\Windows PowerShell\\Windows PowerShell ISE.lnk" (normalized: "c:\\users\\all users\\microsoft\\windows\\start menu\\programs\\accessories\\windows powershell\\windows powershell ise.lnk"), lpNewFileName="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Programs\\Accessories\\Windows PowerShell\\Windows PowerShell ISE.lnk" (normalized: "c:\\users\\all users\\microsoft\\windows\\start menu\\programs\\accessories\\windows powershell\\windows powershell ise.lnk")) returned 1 [0091.721] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Programs\\Accessories\\Windows PowerShell\\Windows PowerShell.lnk", nBufferLength=0x105, lpBuffer=0x31dfb4, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Programs\\Accessories\\Windows PowerShell\\Windows PowerShell.lnk", lpFilePart=0x0) returned 0x6e [0091.721] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e4a8) returned 1 [0091.721] CreateFileW (lpFileName="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Programs\\Accessories\\Windows PowerShell\\Windows PowerShell.lnk" (normalized: "c:\\users\\all users\\microsoft\\windows\\start menu\\programs\\accessories\\windows powershell\\windows powershell.lnk"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x178 [0091.721] GetFileType (hFile=0x178) returned 0x1 [0091.721] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e4a4) returned 1 [0091.721] GetFileType (hFile=0x178) returned 0x1 [0091.721] GetFileSize (in: hFile=0x178, lpFileSizeHigh=0x31e5b0 | out: lpFileSizeHigh=0x31e5b0*=0x0) returned 0x770 [0091.721] ReadFile (in: hFile=0x178, lpBuffer=0x27f0a50, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x31e55c, lpOverlapped=0x0 | out: lpBuffer=0x27f0a50*, lpNumberOfBytesRead=0x31e55c*=0x770, lpOverlapped=0x0) returned 1 [0091.761] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Programs\\Accessories\\Windows PowerShell\\Windows PowerShell.lnk", nBufferLength=0x105, lpBuffer=0x31dfa0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Programs\\Accessories\\Windows PowerShell\\Windows PowerShell.lnk", lpFilePart=0x0) returned 0x6e [0091.761] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e494) returned 1 [0091.761] CreateFileW (lpFileName="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Programs\\Accessories\\Windows PowerShell\\Windows PowerShell.lnk" (normalized: "c:\\users\\all users\\microsoft\\windows\\start menu\\programs\\accessories\\windows powershell\\windows powershell.lnk"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x178 [0091.762] GetFileType (hFile=0x178) returned 0x1 [0091.762] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e490) returned 1 [0091.762] GetFileType (hFile=0x178) returned 0x1 [0091.762] WriteFile (in: hFile=0x178, lpBuffer=0x2642c98*, nNumberOfBytesToWrite=0x780, lpNumberOfBytesWritten=0x31e524, lpOverlapped=0x0 | out: lpBuffer=0x2642c98*, lpNumberOfBytesWritten=0x31e524*=0x780, lpOverlapped=0x0) returned 1 [0091.763] CloseHandle (hObject=0x178) returned 1 [0091.763] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Programs\\Accessories\\Windows PowerShell\\Windows PowerShell.lnk", nBufferLength=0x105, lpBuffer=0x31e0d4, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Programs\\Accessories\\Windows PowerShell\\Windows PowerShell.lnk", lpFilePart=0x0) returned 0x6e [0091.763] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Programs\\Accessories\\Windows PowerShell\\Windows PowerShell.lnk", nBufferLength=0x105, lpBuffer=0x31e0d4, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Programs\\Accessories\\Windows PowerShell\\Windows PowerShell.lnk", lpFilePart=0x0) returned 0x6e [0091.763] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e534) returned 1 [0091.763] GetFileAttributesExW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Programs\\Accessories\\Windows PowerShell\\Windows PowerShell.lnk" (normalized: "c:\\users\\all users\\microsoft\\windows\\start menu\\programs\\accessories\\windows powershell\\windows powershell.lnk"), fInfoLevelId=0x0, lpFileInformation=0x31e5b0 | out: lpFileInformation=0x31e5b0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8038cbd7, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x7bef7178, ftLastAccessTime.dwHighDateTime=0x1ca0444, ftLastWriteTime.dwLowDateTime=0x1a23fb60, ftLastWriteTime.dwHighDateTime=0x1d6eb7f, nFileSizeHigh=0x0, nFileSizeLow=0x780)) returned 1 [0091.763] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e530) returned 1 [0091.763] MoveFileW (lpExistingFileName="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Programs\\Accessories\\Windows PowerShell\\Windows PowerShell.lnk" (normalized: "c:\\users\\all users\\microsoft\\windows\\start menu\\programs\\accessories\\windows powershell\\windows powershell.lnk"), lpNewFileName="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Programs\\Accessories\\Windows PowerShell\\Windows PowerShell.lnk" (normalized: "c:\\users\\all users\\microsoft\\windows\\start menu\\programs\\accessories\\windows powershell\\windows powershell.lnk")) returned 1 [0091.764] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e654) returned 1 [0091.764] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Programs\\Administrative Tools", nBufferLength=0x105, lpBuffer=0x31e15c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Programs\\Administrative Tools", lpFilePart=0x0) returned 0x4d [0091.764] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Programs\\Administrative Tools\\", nBufferLength=0x105, lpBuffer=0x31e130, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Programs\\Administrative Tools\\", lpFilePart=0x0) returned 0x4e [0091.764] FindFirstFileW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Programs\\Administrative Tools\\*", lpFindFileData=0x31e37c | out: lpFindFileData=0x31e37c*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x7fffaad0, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x81c3cfe0, ftLastAccessTime.dwHighDateTime=0x1d2de2a, ftLastWriteTime.dwLowDateTime=0x81c3cfe0, ftLastWriteTime.dwHighDateTime=0x1d2de2a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x51079a0 [0091.764] FindNextFileW (in: hFindFile=0x51079a0, lpFindFileData=0x31e38c | out: lpFindFileData=0x31e38c*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x7fffaad0, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x81c3cfe0, ftLastAccessTime.dwHighDateTime=0x1d2de2a, ftLastWriteTime.dwLowDateTime=0x81c3cfe0, ftLastWriteTime.dwHighDateTime=0x1d2de2a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0091.764] FindNextFileW (in: hFindFile=0x51079a0, lpFindFileData=0x31e38c | out: lpFindFileData=0x31e38c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x898d4524, ftCreationTime.dwHighDateTime=0x1ca043f, ftLastAccessTime.dwLowDateTime=0x898d4524, ftLastAccessTime.dwHighDateTime=0x1ca043f, ftLastWriteTime.dwLowDateTime=0x98d6660, ftLastWriteTime.dwHighDateTime=0x1d6eb7f, nFileSizeHigh=0x0, nFileSizeLow=0x4e0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Component Services.lnk", cAlternateFileName="COMPON~1.LNK")) returned 1 [0091.764] FindNextFileW (in: hFindFile=0x51079a0, lpFindFileData=0x31e38c | out: lpFindFileData=0x31e38c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x26ea3fc9, ftCreationTime.dwHighDateTime=0x1ca043f, ftLastAccessTime.dwLowDateTime=0x26ea3fc9, ftLastAccessTime.dwHighDateTime=0x1ca043f, ftLastWriteTime.dwLowDateTime=0x98fc7c0, ftLastWriteTime.dwHighDateTime=0x1d6eb7f, nFileSizeHigh=0x0, nFileSizeLow=0x510, dwReserved0=0x0, dwReserved1=0x0, cFileName="Computer Management.lnk", cAlternateFileName="COMPUT~1.LNK")) returned 1 [0091.765] FindNextFileW (in: hFindFile=0x51079a0, lpFindFileData=0x31e38c | out: lpFindFileData=0x31e38c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x15444c01, ftCreationTime.dwHighDateTime=0x1ca043f, ftLastAccessTime.dwLowDateTime=0x15444c01, ftLastAccessTime.dwHighDateTime=0x1ca043f, ftLastWriteTime.dwLowDateTime=0x9922920, ftLastWriteTime.dwHighDateTime=0x1d6eb7f, nFileSizeHigh=0x0, nFileSizeLow=0x500, dwReserved0=0x0, dwReserved1=0x0, cFileName="Data Sources (ODBC).lnk", cAlternateFileName="DATASO~1.LNK")) returned 1 [0091.765] FindNextFileW (in: hFindFile=0x51079a0, lpFindFileData=0x31e38c | out: lpFindFileData=0x31e38c*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0xa3aca9c, ftCreationTime.dwHighDateTime=0x1ca043f, ftLastAccessTime.dwLowDateTime=0xa3aca9c, ftLastAccessTime.dwHighDateTime=0x1ca043f, ftLastWriteTime.dwLowDateTime=0x81c3cfe0, ftLastWriteTime.dwHighDateTime=0x1d2de2a, nFileSizeHigh=0x0, nFileSizeLow=0x7a6, dwReserved0=0x0, dwReserved1=0x0, cFileName="desktop.ini", cAlternateFileName="")) returned 1 [0091.765] FindNextFileW (in: hFindFile=0x51079a0, lpFindFileData=0x31e38c | out: lpFindFileData=0x31e38c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2b8e0e72, ftCreationTime.dwHighDateTime=0x1ca043f, ftLastAccessTime.dwLowDateTime=0x2b8e0e72, ftLastAccessTime.dwHighDateTime=0x1ca043f, ftLastWriteTime.dwLowDateTime=0x9994d40, ftLastWriteTime.dwHighDateTime=0x1d6eb7f, nFileSizeHigh=0x0, nFileSizeLow=0x520, dwReserved0=0x0, dwReserved1=0x0, cFileName="Event Viewer.lnk", cAlternateFileName="EVENTV~1.LNK")) returned 1 [0091.765] FindNextFileW (in: hFindFile=0x51079a0, lpFindFileData=0x31e38c | out: lpFindFileData=0x31e38c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2725c230, ftCreationTime.dwHighDateTime=0x1ca043f, ftLastAccessTime.dwLowDateTime=0x2725c230, ftLastAccessTime.dwHighDateTime=0x1ca043f, ftLastWriteTime.dwLowDateTime=0x99e1000, ftLastWriteTime.dwHighDateTime=0x1d6eb7f, nFileSizeHigh=0x0, nFileSizeLow=0x500, dwReserved0=0x0, dwReserved1=0x0, cFileName="iSCSI Initiator.lnk", cAlternateFileName="ISCSII~1.LNK")) returned 1 [0091.765] FindNextFileW (in: hFindFile=0x51079a0, lpFindFileData=0x31e38c | out: lpFindFileData=0x31e38c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa38693b, ftCreationTime.dwHighDateTime=0x1ca043f, ftLastAccessTime.dwLowDateTime=0xa38693b, ftLastAccessTime.dwHighDateTime=0x1ca043f, ftLastWriteTime.dwLowDateTime=0x9a07160, ftLastWriteTime.dwHighDateTime=0x1d6eb7f, nFileSizeHigh=0x0, nFileSizeLow=0x500, dwReserved0=0x0, dwReserved1=0x0, cFileName="Memory Diagnostics Tool.lnk", cAlternateFileName="MEMORY~1.LNK")) returned 1 [0091.765] FindNextFileW (in: hFindFile=0x51079a0, lpFindFileData=0x31e38c | out: lpFindFileData=0x31e38c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x14139bde, ftCreationTime.dwHighDateTime=0x1ca043f, ftLastAccessTime.dwLowDateTime=0x14139bde, ftLastAccessTime.dwHighDateTime=0x1ca043f, ftLastWriteTime.dwLowDateTime=0x9a2d2c0, ftLastWriteTime.dwHighDateTime=0x1d6eb7f, nFileSizeHigh=0x0, nFileSizeLow=0x4e0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Performance Monitor.lnk", cAlternateFileName="PERFOR~1.LNK")) returned 1 [0091.765] FindNextFileW (in: hFindFile=0x51079a0, lpFindFileData=0x31e38c | out: lpFindFileData=0x31e38c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x806d09e0, ftCreationTime.dwHighDateTime=0x1d2de2a, ftLastAccessTime.dwLowDateTime=0x806d09e0, ftLastAccessTime.dwHighDateTime=0x1d2de2a, ftLastWriteTime.dwLowDateTime=0x9a53420, ftLastWriteTime.dwHighDateTime=0x1d6eb7f, nFileSizeHigh=0x0, nFileSizeLow=0x4f0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Print Management.lnk", cAlternateFileName="PRINTM~1.LNK")) returned 1 [0091.765] FindNextFileW (in: hFindFile=0x51079a0, lpFindFileData=0x31e38c | out: lpFindFileData=0x31e38c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x81c3cfe0, ftCreationTime.dwHighDateTime=0x1d2de2a, ftLastAccessTime.dwLowDateTime=0x81c3cfe0, ftLastAccessTime.dwHighDateTime=0x1d2de2a, ftLastWriteTime.dwLowDateTime=0x9a79580, ftLastWriteTime.dwHighDateTime=0x1d6eb7f, nFileSizeHigh=0x0, nFileSizeLow=0x4f0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Security Configuration Management.lnk", cAlternateFileName="SECURI~1.LNK")) returned 1 [0091.766] FindNextFileW (in: hFindFile=0x51079a0, lpFindFileData=0x31e38c | out: lpFindFileData=0x31e38c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1d7306f2, ftCreationTime.dwHighDateTime=0x1ca043f, ftLastAccessTime.dwLowDateTime=0x1d7306f2, ftLastAccessTime.dwHighDateTime=0x1ca043f, ftLastWriteTime.dwLowDateTime=0x9aeb9a0, ftLastWriteTime.dwHighDateTime=0x1d6eb7f, nFileSizeHigh=0x0, nFileSizeLow=0x510, dwReserved0=0x0, dwReserved1=0x0, cFileName="services.lnk", cAlternateFileName="")) returned 1 [0091.766] FindNextFileW (in: hFindFile=0x51079a0, lpFindFileData=0x31e38c | out: lpFindFileData=0x31e38c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa575b1f, ftCreationTime.dwHighDateTime=0x1ca043f, ftLastAccessTime.dwLowDateTime=0xa575b1f, ftLastAccessTime.dwHighDateTime=0x1ca043f, ftLastWriteTime.dwLowDateTime=0x9b37c60, ftLastWriteTime.dwHighDateTime=0x1d6eb7f, nFileSizeHigh=0x0, nFileSizeLow=0x4e0, dwReserved0=0x0, dwReserved1=0x0, cFileName="System Configuration.lnk", cAlternateFileName="SYSTEM~1.LNK")) returned 1 [0091.766] FindNextFileW (in: hFindFile=0x51079a0, lpFindFileData=0x31e38c | out: lpFindFileData=0x31e38c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2b99f553, ftCreationTime.dwHighDateTime=0x1ca043f, ftLastAccessTime.dwLowDateTime=0x2b99f553, ftLastAccessTime.dwHighDateTime=0x1ca043f, ftLastWriteTime.dwLowDateTime=0x9b5ddc0, ftLastWriteTime.dwHighDateTime=0x1d6eb7f, nFileSizeHigh=0x0, nFileSizeLow=0x4f0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Task Scheduler.lnk", cAlternateFileName="TASKSC~1.LNK")) returned 1 [0091.766] FindNextFileW (in: hFindFile=0x51079a0, lpFindFileData=0x31e38c | out: lpFindFileData=0x31e38c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x191902f2, ftCreationTime.dwHighDateTime=0x1ca043f, ftLastAccessTime.dwLowDateTime=0x191902f2, ftLastAccessTime.dwHighDateTime=0x1ca043f, ftLastWriteTime.dwLowDateTime=0x9b83f20, ftLastWriteTime.dwHighDateTime=0x1d6eb7f, nFileSizeHigh=0x0, nFileSizeLow=0x500, dwReserved0=0x0, dwReserved1=0x0, cFileName="Windows Firewall with Advanced Security.lnk", cAlternateFileName="WINDOW~2.LNK")) returned 1 [0091.766] FindNextFileW (in: hFindFile=0x51079a0, lpFindFileData=0x31e38c | out: lpFindFileData=0x31e38c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8038cbd7, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x7bed1018, ftLastAccessTime.dwHighDateTime=0x1ca0444, ftLastWriteTime.dwLowDateTime=0x9baa080, ftLastWriteTime.dwHighDateTime=0x1d6eb7f, nFileSizeHigh=0x0, nFileSizeLow=0xac0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Windows PowerShell Modules.lnk", cAlternateFileName="WINDOW~1.LNK")) returned 1 [0091.766] FindNextFileW (in: hFindFile=0x51079a0, lpFindFileData=0x31e38c | out: lpFindFileData=0x31e38c*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0091.766] FindClose (in: hFindFile=0x51079a0 | out: hFindFile=0x51079a0) returned 1 [0091.766] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e614) returned 1 [0091.766] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e620) returned 1 [0091.766] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e654) returned 1 [0091.766] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Programs\\Administrative Tools", nBufferLength=0x105, lpBuffer=0x31e15c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Programs\\Administrative Tools", lpFilePart=0x0) returned 0x4d [0091.766] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Programs\\Administrative Tools\\", nBufferLength=0x105, lpBuffer=0x31e130, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Programs\\Administrative Tools\\", lpFilePart=0x0) returned 0x4e [0091.766] FindFirstFileW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Programs\\Administrative Tools\\*", lpFindFileData=0x31e37c | out: lpFindFileData=0x31e37c*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x7fffaad0, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x81c3cfe0, ftLastAccessTime.dwHighDateTime=0x1d2de2a, ftLastWriteTime.dwLowDateTime=0x81c3cfe0, ftLastWriteTime.dwHighDateTime=0x1d2de2a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x51079a0 [0091.767] FindNextFileW (in: hFindFile=0x51079a0, lpFindFileData=0x31e38c | out: lpFindFileData=0x31e38c*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x7fffaad0, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x81c3cfe0, ftLastAccessTime.dwHighDateTime=0x1d2de2a, ftLastWriteTime.dwLowDateTime=0x81c3cfe0, ftLastWriteTime.dwHighDateTime=0x1d2de2a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0091.767] FindNextFileW (in: hFindFile=0x51079a0, lpFindFileData=0x31e38c | out: lpFindFileData=0x31e38c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x898d4524, ftCreationTime.dwHighDateTime=0x1ca043f, ftLastAccessTime.dwLowDateTime=0x898d4524, ftLastAccessTime.dwHighDateTime=0x1ca043f, ftLastWriteTime.dwLowDateTime=0x98d6660, ftLastWriteTime.dwHighDateTime=0x1d6eb7f, nFileSizeHigh=0x0, nFileSizeLow=0x4e0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Component Services.lnk", cAlternateFileName="COMPON~1.LNK")) returned 1 [0091.767] FindNextFileW (in: hFindFile=0x51079a0, lpFindFileData=0x31e38c | out: lpFindFileData=0x31e38c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x26ea3fc9, ftCreationTime.dwHighDateTime=0x1ca043f, ftLastAccessTime.dwLowDateTime=0x26ea3fc9, ftLastAccessTime.dwHighDateTime=0x1ca043f, ftLastWriteTime.dwLowDateTime=0x98fc7c0, ftLastWriteTime.dwHighDateTime=0x1d6eb7f, nFileSizeHigh=0x0, nFileSizeLow=0x510, dwReserved0=0x0, dwReserved1=0x0, cFileName="Computer Management.lnk", cAlternateFileName="COMPUT~1.LNK")) returned 1 [0091.767] FindNextFileW (in: hFindFile=0x51079a0, lpFindFileData=0x31e38c | out: lpFindFileData=0x31e38c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x15444c01, ftCreationTime.dwHighDateTime=0x1ca043f, ftLastAccessTime.dwLowDateTime=0x15444c01, ftLastAccessTime.dwHighDateTime=0x1ca043f, ftLastWriteTime.dwLowDateTime=0x9922920, ftLastWriteTime.dwHighDateTime=0x1d6eb7f, nFileSizeHigh=0x0, nFileSizeLow=0x500, dwReserved0=0x0, dwReserved1=0x0, cFileName="Data Sources (ODBC).lnk", cAlternateFileName="DATASO~1.LNK")) returned 1 [0091.767] FindNextFileW (in: hFindFile=0x51079a0, lpFindFileData=0x31e38c | out: lpFindFileData=0x31e38c*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0xa3aca9c, ftCreationTime.dwHighDateTime=0x1ca043f, ftLastAccessTime.dwLowDateTime=0xa3aca9c, ftLastAccessTime.dwHighDateTime=0x1ca043f, ftLastWriteTime.dwLowDateTime=0x81c3cfe0, ftLastWriteTime.dwHighDateTime=0x1d2de2a, nFileSizeHigh=0x0, nFileSizeLow=0x7a6, dwReserved0=0x0, dwReserved1=0x0, cFileName="desktop.ini", cAlternateFileName="")) returned 1 [0091.767] FindNextFileW (in: hFindFile=0x51079a0, lpFindFileData=0x31e38c | out: lpFindFileData=0x31e38c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2b8e0e72, ftCreationTime.dwHighDateTime=0x1ca043f, ftLastAccessTime.dwLowDateTime=0x2b8e0e72, ftLastAccessTime.dwHighDateTime=0x1ca043f, ftLastWriteTime.dwLowDateTime=0x9994d40, ftLastWriteTime.dwHighDateTime=0x1d6eb7f, nFileSizeHigh=0x0, nFileSizeLow=0x520, dwReserved0=0x0, dwReserved1=0x0, cFileName="Event Viewer.lnk", cAlternateFileName="EVENTV~1.LNK")) returned 1 [0091.768] FindNextFileW (in: hFindFile=0x51079a0, lpFindFileData=0x31e38c | out: lpFindFileData=0x31e38c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2725c230, ftCreationTime.dwHighDateTime=0x1ca043f, ftLastAccessTime.dwLowDateTime=0x2725c230, ftLastAccessTime.dwHighDateTime=0x1ca043f, ftLastWriteTime.dwLowDateTime=0x99e1000, ftLastWriteTime.dwHighDateTime=0x1d6eb7f, nFileSizeHigh=0x0, nFileSizeLow=0x500, dwReserved0=0x0, dwReserved1=0x0, cFileName="iSCSI Initiator.lnk", cAlternateFileName="ISCSII~1.LNK")) returned 1 [0091.768] FindNextFileW (in: hFindFile=0x51079a0, lpFindFileData=0x31e38c | out: lpFindFileData=0x31e38c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa38693b, ftCreationTime.dwHighDateTime=0x1ca043f, ftLastAccessTime.dwLowDateTime=0xa38693b, ftLastAccessTime.dwHighDateTime=0x1ca043f, ftLastWriteTime.dwLowDateTime=0x9a07160, ftLastWriteTime.dwHighDateTime=0x1d6eb7f, nFileSizeHigh=0x0, nFileSizeLow=0x500, dwReserved0=0x0, dwReserved1=0x0, cFileName="Memory Diagnostics Tool.lnk", cAlternateFileName="MEMORY~1.LNK")) returned 1 [0091.768] FindNextFileW (in: hFindFile=0x51079a0, lpFindFileData=0x31e38c | out: lpFindFileData=0x31e38c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x14139bde, ftCreationTime.dwHighDateTime=0x1ca043f, ftLastAccessTime.dwLowDateTime=0x14139bde, ftLastAccessTime.dwHighDateTime=0x1ca043f, ftLastWriteTime.dwLowDateTime=0x9a2d2c0, ftLastWriteTime.dwHighDateTime=0x1d6eb7f, nFileSizeHigh=0x0, nFileSizeLow=0x4e0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Performance Monitor.lnk", cAlternateFileName="PERFOR~1.LNK")) returned 1 [0091.768] FindNextFileW (in: hFindFile=0x51079a0, lpFindFileData=0x31e38c | out: lpFindFileData=0x31e38c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x806d09e0, ftCreationTime.dwHighDateTime=0x1d2de2a, ftLastAccessTime.dwLowDateTime=0x806d09e0, ftLastAccessTime.dwHighDateTime=0x1d2de2a, ftLastWriteTime.dwLowDateTime=0x9a53420, ftLastWriteTime.dwHighDateTime=0x1d6eb7f, nFileSizeHigh=0x0, nFileSizeLow=0x4f0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Print Management.lnk", cAlternateFileName="PRINTM~1.LNK")) returned 1 [0091.768] FindNextFileW (in: hFindFile=0x51079a0, lpFindFileData=0x31e38c | out: lpFindFileData=0x31e38c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x81c3cfe0, ftCreationTime.dwHighDateTime=0x1d2de2a, ftLastAccessTime.dwLowDateTime=0x81c3cfe0, ftLastAccessTime.dwHighDateTime=0x1d2de2a, ftLastWriteTime.dwLowDateTime=0x9a79580, ftLastWriteTime.dwHighDateTime=0x1d6eb7f, nFileSizeHigh=0x0, nFileSizeLow=0x4f0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Security Configuration Management.lnk", cAlternateFileName="SECURI~1.LNK")) returned 1 [0091.768] FindNextFileW (in: hFindFile=0x51079a0, lpFindFileData=0x31e38c | out: lpFindFileData=0x31e38c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1d7306f2, ftCreationTime.dwHighDateTime=0x1ca043f, ftLastAccessTime.dwLowDateTime=0x1d7306f2, ftLastAccessTime.dwHighDateTime=0x1ca043f, ftLastWriteTime.dwLowDateTime=0x9aeb9a0, ftLastWriteTime.dwHighDateTime=0x1d6eb7f, nFileSizeHigh=0x0, nFileSizeLow=0x510, dwReserved0=0x0, dwReserved1=0x0, cFileName="services.lnk", cAlternateFileName="")) returned 1 [0091.768] FindNextFileW (in: hFindFile=0x51079a0, lpFindFileData=0x31e38c | out: lpFindFileData=0x31e38c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa575b1f, ftCreationTime.dwHighDateTime=0x1ca043f, ftLastAccessTime.dwLowDateTime=0xa575b1f, ftLastAccessTime.dwHighDateTime=0x1ca043f, ftLastWriteTime.dwLowDateTime=0x9b37c60, ftLastWriteTime.dwHighDateTime=0x1d6eb7f, nFileSizeHigh=0x0, nFileSizeLow=0x4e0, dwReserved0=0x0, dwReserved1=0x0, cFileName="System Configuration.lnk", cAlternateFileName="SYSTEM~1.LNK")) returned 1 [0091.768] FindNextFileW (in: hFindFile=0x51079a0, lpFindFileData=0x31e38c | out: lpFindFileData=0x31e38c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2b99f553, ftCreationTime.dwHighDateTime=0x1ca043f, ftLastAccessTime.dwLowDateTime=0x2b99f553, ftLastAccessTime.dwHighDateTime=0x1ca043f, ftLastWriteTime.dwLowDateTime=0x9b5ddc0, ftLastWriteTime.dwHighDateTime=0x1d6eb7f, nFileSizeHigh=0x0, nFileSizeLow=0x4f0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Task Scheduler.lnk", cAlternateFileName="TASKSC~1.LNK")) returned 1 [0091.769] FindNextFileW (in: hFindFile=0x51079a0, lpFindFileData=0x31e38c | out: lpFindFileData=0x31e38c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x191902f2, ftCreationTime.dwHighDateTime=0x1ca043f, ftLastAccessTime.dwLowDateTime=0x191902f2, ftLastAccessTime.dwHighDateTime=0x1ca043f, ftLastWriteTime.dwLowDateTime=0x9b83f20, ftLastWriteTime.dwHighDateTime=0x1d6eb7f, nFileSizeHigh=0x0, nFileSizeLow=0x500, dwReserved0=0x0, dwReserved1=0x0, cFileName="Windows Firewall with Advanced Security.lnk", cAlternateFileName="WINDOW~2.LNK")) returned 1 [0091.769] FindNextFileW (in: hFindFile=0x51079a0, lpFindFileData=0x31e38c | out: lpFindFileData=0x31e38c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8038cbd7, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x7bed1018, ftLastAccessTime.dwHighDateTime=0x1ca0444, ftLastWriteTime.dwLowDateTime=0x9baa080, ftLastWriteTime.dwHighDateTime=0x1d6eb7f, nFileSizeHigh=0x0, nFileSizeLow=0xac0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Windows PowerShell Modules.lnk", cAlternateFileName="WINDOW~1.LNK")) returned 1 [0091.769] FindNextFileW (in: hFindFile=0x51079a0, lpFindFileData=0x31e38c | out: lpFindFileData=0x31e38c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8038cbd7, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x7bed1018, ftLastAccessTime.dwHighDateTime=0x1ca0444, ftLastWriteTime.dwLowDateTime=0x9baa080, ftLastWriteTime.dwHighDateTime=0x1d6eb7f, nFileSizeHigh=0x0, nFileSizeLow=0xac0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Windows PowerShell Modules.lnk", cAlternateFileName="WINDOW~1.LNK")) returned 0 [0091.769] FindClose (in: hFindFile=0x51079a0 | out: hFindFile=0x51079a0) returned 1 [0091.769] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e614) returned 1 [0091.769] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e620) returned 1 [0091.769] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Programs\\Administrative Tools\\Component Services.lnk", nBufferLength=0x105, lpBuffer=0x31e02c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Programs\\Administrative Tools\\Component Services.lnk", lpFilePart=0x0) returned 0x64 [0091.769] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e520) returned 1 [0091.769] CreateFileW (lpFileName="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Programs\\Administrative Tools\\Component Services.lnk" (normalized: "c:\\users\\all users\\microsoft\\windows\\start menu\\programs\\administrative tools\\component services.lnk"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x178 [0091.769] GetFileType (hFile=0x178) returned 0x1 [0091.769] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e51c) returned 1 [0091.769] GetFileType (hFile=0x178) returned 0x1 [0091.769] GetFileSize (in: hFile=0x178, lpFileSizeHigh=0x31e628 | out: lpFileSizeHigh=0x31e628*=0x0) returned 0x4e0 [0091.769] ReadFile (in: hFile=0x178, lpBuffer=0x264a160, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x31e5d4, lpOverlapped=0x0 | out: lpBuffer=0x264a160*, lpNumberOfBytesRead=0x31e5d4*=0x4e0, lpOverlapped=0x0) returned 1 [0091.770] CloseHandle (hObject=0x178) returned 1 [0091.784] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Programs\\Administrative Tools\\Component Services.lnk", nBufferLength=0x105, lpBuffer=0x31e018, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Programs\\Administrative Tools\\Component Services.lnk", lpFilePart=0x0) returned 0x64 [0091.784] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e50c) returned 1 [0091.784] CreateFileW (lpFileName="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Programs\\Administrative Tools\\Component Services.lnk" (normalized: "c:\\users\\all users\\microsoft\\windows\\start menu\\programs\\administrative tools\\component services.lnk"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x178 [0091.785] GetFileType (hFile=0x178) returned 0x1 [0091.785] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e508) returned 1 [0091.785] GetFileType (hFile=0x178) returned 0x1 [0091.785] WriteFile (in: hFile=0x178, lpBuffer=0x2699adc*, nNumberOfBytesToWrite=0x4f0, lpNumberOfBytesWritten=0x31e59c, lpOverlapped=0x0 | out: lpBuffer=0x2699adc*, lpNumberOfBytesWritten=0x31e59c*=0x4f0, lpOverlapped=0x0) returned 1 [0091.786] CloseHandle (hObject=0x178) returned 1 [0091.786] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Programs\\Administrative Tools\\Component Services.lnk", nBufferLength=0x105, lpBuffer=0x31e14c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Programs\\Administrative Tools\\Component Services.lnk", lpFilePart=0x0) returned 0x64 [0091.786] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Programs\\Administrative Tools\\Component Services.lnk", nBufferLength=0x105, lpBuffer=0x31e14c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Programs\\Administrative Tools\\Component Services.lnk", lpFilePart=0x0) returned 0x64 [0091.786] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e5ac) returned 1 [0091.786] GetFileAttributesExW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Programs\\Administrative Tools\\Component Services.lnk" (normalized: "c:\\users\\all users\\microsoft\\windows\\start menu\\programs\\administrative tools\\component services.lnk"), fInfoLevelId=0x0, lpFileInformation=0x31e628 | out: lpFileInformation=0x31e628*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x898d4524, ftCreationTime.dwHighDateTime=0x1ca043f, ftLastAccessTime.dwLowDateTime=0x898d4524, ftLastAccessTime.dwHighDateTime=0x1ca043f, ftLastWriteTime.dwLowDateTime=0x1a265cc0, ftLastWriteTime.dwHighDateTime=0x1d6eb7f, nFileSizeHigh=0x0, nFileSizeLow=0x4f0)) returned 1 [0091.786] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e5a8) returned 1 [0091.786] MoveFileW (lpExistingFileName="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Programs\\Administrative Tools\\Component Services.lnk" (normalized: "c:\\users\\all users\\microsoft\\windows\\start menu\\programs\\administrative tools\\component services.lnk"), lpNewFileName="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Programs\\Administrative Tools\\Component Services.lnk" (normalized: "c:\\users\\all users\\microsoft\\windows\\start menu\\programs\\administrative tools\\component services.lnk")) returned 1 [0091.787] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Programs\\Administrative Tools\\Computer Management.lnk", nBufferLength=0x105, lpBuffer=0x31e02c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Programs\\Administrative Tools\\Computer Management.lnk", lpFilePart=0x0) returned 0x65 [0091.787] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e520) returned 1 [0091.787] CreateFileW (lpFileName="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Programs\\Administrative Tools\\Computer Management.lnk" (normalized: "c:\\users\\all users\\microsoft\\windows\\start menu\\programs\\administrative tools\\computer management.lnk"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x178 [0091.787] GetFileType (hFile=0x178) returned 0x1 [0091.787] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e51c) returned 1 [0091.787] GetFileType (hFile=0x178) returned 0x1 [0091.787] GetFileSize (in: hFile=0x178, lpFileSizeHigh=0x31e628 | out: lpFileSizeHigh=0x31e628*=0x0) returned 0x510 [0091.787] ReadFile (in: hFile=0x178, lpBuffer=0x269b33c, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x31e5d4, lpOverlapped=0x0 | out: lpBuffer=0x269b33c*, lpNumberOfBytesRead=0x31e5d4*=0x510, lpOverlapped=0x0) returned 1 [0091.788] CloseHandle (hObject=0x178) returned 1 [0091.801] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Programs\\Administrative Tools\\Computer Management.lnk", nBufferLength=0x105, lpBuffer=0x31e018, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Programs\\Administrative Tools\\Computer Management.lnk", lpFilePart=0x0) returned 0x65 [0091.801] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e50c) returned 1 [0091.801] CreateFileW (lpFileName="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Programs\\Administrative Tools\\Computer Management.lnk" (normalized: "c:\\users\\all users\\microsoft\\windows\\start menu\\programs\\administrative tools\\computer management.lnk"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x178 [0091.802] GetFileType (hFile=0x178) returned 0x1 [0091.802] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e508) returned 1 [0091.802] GetFileType (hFile=0x178) returned 0x1 [0091.802] WriteFile (in: hFile=0x178, lpBuffer=0x26eac4c*, nNumberOfBytesToWrite=0x520, lpNumberOfBytesWritten=0x31e59c, lpOverlapped=0x0 | out: lpBuffer=0x26eac4c*, lpNumberOfBytesWritten=0x31e59c*=0x520, lpOverlapped=0x0) returned 1 [0091.803] CloseHandle (hObject=0x178) returned 1 [0091.803] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Programs\\Administrative Tools\\Computer Management.lnk", nBufferLength=0x105, lpBuffer=0x31e14c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Programs\\Administrative Tools\\Computer Management.lnk", lpFilePart=0x0) returned 0x65 [0091.803] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Programs\\Administrative Tools\\Computer Management.lnk", nBufferLength=0x105, lpBuffer=0x31e14c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Programs\\Administrative Tools\\Computer Management.lnk", lpFilePart=0x0) returned 0x65 [0091.803] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e5ac) returned 1 [0091.803] GetFileAttributesExW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Programs\\Administrative Tools\\Computer Management.lnk" (normalized: "c:\\users\\all users\\microsoft\\windows\\start menu\\programs\\administrative tools\\computer management.lnk"), fInfoLevelId=0x0, lpFileInformation=0x31e628 | out: lpFileInformation=0x31e628*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x26ea3fc9, ftCreationTime.dwHighDateTime=0x1ca043f, ftLastAccessTime.dwLowDateTime=0x26ea3fc9, ftLastAccessTime.dwHighDateTime=0x1ca043f, ftLastWriteTime.dwLowDateTime=0x1a28be20, ftLastWriteTime.dwHighDateTime=0x1d6eb7f, nFileSizeHigh=0x0, nFileSizeLow=0x520)) returned 1 [0091.803] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e5a8) returned 1 [0091.804] MoveFileW (lpExistingFileName="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Programs\\Administrative Tools\\Computer Management.lnk" (normalized: "c:\\users\\all users\\microsoft\\windows\\start menu\\programs\\administrative tools\\computer management.lnk"), lpNewFileName="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Programs\\Administrative Tools\\Computer Management.lnk" (normalized: "c:\\users\\all users\\microsoft\\windows\\start menu\\programs\\administrative tools\\computer management.lnk")) returned 1 [0091.804] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Programs\\Administrative Tools\\Data Sources (ODBC).lnk", nBufferLength=0x105, lpBuffer=0x31e02c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Programs\\Administrative Tools\\Data Sources (ODBC).lnk", lpFilePart=0x0) returned 0x65 [0091.804] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e520) returned 1 [0091.804] CreateFileW (lpFileName="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Programs\\Administrative Tools\\Data Sources (ODBC).lnk" (normalized: "c:\\users\\all users\\microsoft\\windows\\start menu\\programs\\administrative tools\\data sources (odbc).lnk"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x178 [0091.804] GetFileType (hFile=0x178) returned 0x1 [0091.804] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e51c) returned 1 [0091.804] GetFileType (hFile=0x178) returned 0x1 [0091.804] GetFileSize (in: hFile=0x178, lpFileSizeHigh=0x31e628 | out: lpFileSizeHigh=0x31e628*=0x0) returned 0x500 [0091.804] ReadFile (in: hFile=0x178, lpBuffer=0x26ec49c, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x31e5d4, lpOverlapped=0x0 | out: lpBuffer=0x26ec49c*, lpNumberOfBytesRead=0x31e5d4*=0x500, lpOverlapped=0x0) returned 1 [0091.805] CloseHandle (hObject=0x178) returned 1 [0091.818] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Programs\\Administrative Tools\\Data Sources (ODBC).lnk", nBufferLength=0x105, lpBuffer=0x31e018, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Programs\\Administrative Tools\\Data Sources (ODBC).lnk", lpFilePart=0x0) returned 0x65 [0091.818] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e50c) returned 1 [0091.818] CreateFileW (lpFileName="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Programs\\Administrative Tools\\Data Sources (ODBC).lnk" (normalized: "c:\\users\\all users\\microsoft\\windows\\start menu\\programs\\administrative tools\\data sources (odbc).lnk"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x178 [0091.819] GetFileType (hFile=0x178) returned 0x1 [0091.819] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e508) returned 1 [0091.819] GetFileType (hFile=0x178) returned 0x1 [0091.819] WriteFile (in: hFile=0x178, lpBuffer=0x273bd5c*, nNumberOfBytesToWrite=0x510, lpNumberOfBytesWritten=0x31e59c, lpOverlapped=0x0 | out: lpBuffer=0x273bd5c*, lpNumberOfBytesWritten=0x31e59c*=0x510, lpOverlapped=0x0) returned 1 [0091.820] CloseHandle (hObject=0x178) returned 1 [0091.820] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Programs\\Administrative Tools\\Data Sources (ODBC).lnk", nBufferLength=0x105, lpBuffer=0x31e14c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Programs\\Administrative Tools\\Data Sources (ODBC).lnk", lpFilePart=0x0) returned 0x65 [0091.820] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Programs\\Administrative Tools\\Data Sources (ODBC).lnk", nBufferLength=0x105, lpBuffer=0x31e14c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Programs\\Administrative Tools\\Data Sources (ODBC).lnk", lpFilePart=0x0) returned 0x65 [0091.820] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e5ac) returned 1 [0091.820] GetFileAttributesExW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Programs\\Administrative Tools\\Data Sources (ODBC).lnk" (normalized: "c:\\users\\all users\\microsoft\\windows\\start menu\\programs\\administrative tools\\data sources (odbc).lnk"), fInfoLevelId=0x0, lpFileInformation=0x31e628 | out: lpFileInformation=0x31e628*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x15444c01, ftCreationTime.dwHighDateTime=0x1ca043f, ftLastAccessTime.dwLowDateTime=0x15444c01, ftLastAccessTime.dwHighDateTime=0x1ca043f, ftLastWriteTime.dwLowDateTime=0x1a2b1f80, ftLastWriteTime.dwHighDateTime=0x1d6eb7f, nFileSizeHigh=0x0, nFileSizeLow=0x510)) returned 1 [0091.820] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e5a8) returned 1 [0091.820] MoveFileW (lpExistingFileName="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Programs\\Administrative Tools\\Data Sources (ODBC).lnk" (normalized: "c:\\users\\all users\\microsoft\\windows\\start menu\\programs\\administrative tools\\data sources (odbc).lnk"), lpNewFileName="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Programs\\Administrative Tools\\Data Sources (ODBC).lnk" (normalized: "c:\\users\\all users\\microsoft\\windows\\start menu\\programs\\administrative tools\\data sources (odbc).lnk")) returned 1 [0091.821] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Programs\\Administrative Tools\\Event Viewer.lnk", nBufferLength=0x105, lpBuffer=0x31e02c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Programs\\Administrative Tools\\Event Viewer.lnk", lpFilePart=0x0) returned 0x5e [0091.821] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e520) returned 1 [0091.821] CreateFileW (lpFileName="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Programs\\Administrative Tools\\Event Viewer.lnk" (normalized: "c:\\users\\all users\\microsoft\\windows\\start menu\\programs\\administrative tools\\event viewer.lnk"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x178 [0091.821] GetFileType (hFile=0x178) returned 0x1 [0091.821] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e51c) returned 1 [0091.821] GetFileType (hFile=0x178) returned 0x1 [0091.821] GetFileSize (in: hFile=0x178, lpFileSizeHigh=0x31e628 | out: lpFileSizeHigh=0x31e628*=0x0) returned 0x520 [0091.821] ReadFile (in: hFile=0x178, lpBuffer=0x273d5cc, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x31e5d4, lpOverlapped=0x0 | out: lpBuffer=0x273d5cc*, lpNumberOfBytesRead=0x31e5d4*=0x520, lpOverlapped=0x0) returned 1 [0091.823] CloseHandle (hObject=0x178) returned 1 [0091.836] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Programs\\Administrative Tools\\Event Viewer.lnk", nBufferLength=0x105, lpBuffer=0x31e018, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Programs\\Administrative Tools\\Event Viewer.lnk", lpFilePart=0x0) returned 0x5e [0091.836] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e50c) returned 1 [0091.836] CreateFileW (lpFileName="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Programs\\Administrative Tools\\Event Viewer.lnk" (normalized: "c:\\users\\all users\\microsoft\\windows\\start menu\\programs\\administrative tools\\event viewer.lnk"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x178 [0091.837] GetFileType (hFile=0x178) returned 0x1 [0091.837] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e508) returned 1 [0091.837] GetFileType (hFile=0x178) returned 0x1 [0091.837] WriteFile (in: hFile=0x178, lpBuffer=0x278cf14*, nNumberOfBytesToWrite=0x530, lpNumberOfBytesWritten=0x31e59c, lpOverlapped=0x0 | out: lpBuffer=0x278cf14*, lpNumberOfBytesWritten=0x31e59c*=0x530, lpOverlapped=0x0) returned 1 [0091.838] CloseHandle (hObject=0x178) returned 1 [0091.838] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Programs\\Administrative Tools\\Event Viewer.lnk", nBufferLength=0x105, lpBuffer=0x31e14c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Programs\\Administrative Tools\\Event Viewer.lnk", lpFilePart=0x0) returned 0x5e [0091.838] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Programs\\Administrative Tools\\Event Viewer.lnk", nBufferLength=0x105, lpBuffer=0x31e14c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Programs\\Administrative Tools\\Event Viewer.lnk", lpFilePart=0x0) returned 0x5e [0091.838] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e5ac) returned 1 [0091.838] GetFileAttributesExW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Programs\\Administrative Tools\\Event Viewer.lnk" (normalized: "c:\\users\\all users\\microsoft\\windows\\start menu\\programs\\administrative tools\\event viewer.lnk"), fInfoLevelId=0x0, lpFileInformation=0x31e628 | out: lpFileInformation=0x31e628*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2b8e0e72, ftCreationTime.dwHighDateTime=0x1ca043f, ftLastAccessTime.dwLowDateTime=0x2b8e0e72, ftLastAccessTime.dwHighDateTime=0x1ca043f, ftLastWriteTime.dwLowDateTime=0x1a2fe240, ftLastWriteTime.dwHighDateTime=0x1d6eb7f, nFileSizeHigh=0x0, nFileSizeLow=0x530)) returned 1 [0091.838] MoveFileW (lpExistingFileName="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Programs\\Administrative Tools\\Event Viewer.lnk" (normalized: "c:\\users\\all users\\microsoft\\windows\\start menu\\programs\\administrative tools\\event viewer.lnk"), lpNewFileName="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Programs\\Administrative Tools\\Event Viewer.lnk" (normalized: "c:\\users\\all users\\microsoft\\windows\\start menu\\programs\\administrative tools\\event viewer.lnk")) returned 1 [0091.839] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Programs\\Administrative Tools\\iSCSI Initiator.lnk", nBufferLength=0x105, lpBuffer=0x31e02c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Programs\\Administrative Tools\\iSCSI Initiator.lnk", lpFilePart=0x0) returned 0x61 [0091.839] CreateFileW (lpFileName="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Programs\\Administrative Tools\\iSCSI Initiator.lnk" (normalized: "c:\\users\\all users\\microsoft\\windows\\start menu\\programs\\administrative tools\\iscsi initiator.lnk"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x178 [0091.839] GetFileType (hFile=0x178) returned 0x1 [0091.839] GetFileType (hFile=0x178) returned 0x1 [0091.839] GetFileSize (in: hFile=0x178, lpFileSizeHigh=0x31e628 | out: lpFileSizeHigh=0x31e628*=0x0) returned 0x500 [0091.839] ReadFile (in: hFile=0x178, lpBuffer=0x278e73c, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x31e5d4, lpOverlapped=0x0 | out: lpBuffer=0x278e73c*, lpNumberOfBytesRead=0x31e5d4*=0x500, lpOverlapped=0x0) returned 1 [0091.840] CloseHandle (hObject=0x178) returned 1 [0091.852] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Programs\\Administrative Tools\\iSCSI Initiator.lnk", nBufferLength=0x105, lpBuffer=0x31e018, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Programs\\Administrative Tools\\iSCSI Initiator.lnk", lpFilePart=0x0) returned 0x61 [0091.853] CreateFileW (lpFileName="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Programs\\Administrative Tools\\iSCSI Initiator.lnk" (normalized: "c:\\users\\all users\\microsoft\\windows\\start menu\\programs\\administrative tools\\iscsi initiator.lnk"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x178 [0091.854] GetFileType (hFile=0x178) returned 0x1 [0091.854] GetFileType (hFile=0x178) returned 0x1 [0091.854] WriteFile (in: hFile=0x178, lpBuffer=0x27ddfec*, nNumberOfBytesToWrite=0x510, lpNumberOfBytesWritten=0x31e59c, lpOverlapped=0x0 | out: lpBuffer=0x27ddfec*, lpNumberOfBytesWritten=0x31e59c*=0x510, lpOverlapped=0x0) returned 1 [0091.855] CloseHandle (hObject=0x178) returned 1 [0091.855] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Programs\\Administrative Tools\\iSCSI Initiator.lnk", nBufferLength=0x105, lpBuffer=0x31e14c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Programs\\Administrative Tools\\iSCSI Initiator.lnk", lpFilePart=0x0) returned 0x61 [0091.855] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Programs\\Administrative Tools\\iSCSI Initiator.lnk", nBufferLength=0x105, lpBuffer=0x31e14c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Programs\\Administrative Tools\\iSCSI Initiator.lnk", lpFilePart=0x0) returned 0x61 [0091.855] GetFileAttributesExW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Programs\\Administrative Tools\\iSCSI Initiator.lnk" (normalized: "c:\\users\\all users\\microsoft\\windows\\start menu\\programs\\administrative tools\\iscsi initiator.lnk"), fInfoLevelId=0x0, lpFileInformation=0x31e628 | out: lpFileInformation=0x31e628*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2725c230, ftCreationTime.dwHighDateTime=0x1ca043f, ftLastAccessTime.dwLowDateTime=0x2725c230, ftLastAccessTime.dwHighDateTime=0x1ca043f, ftLastWriteTime.dwLowDateTime=0x1a3243a0, ftLastWriteTime.dwHighDateTime=0x1d6eb7f, nFileSizeHigh=0x0, nFileSizeLow=0x510)) returned 1 [0091.855] MoveFileW (lpExistingFileName="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Programs\\Administrative Tools\\iSCSI Initiator.lnk" (normalized: "c:\\users\\all users\\microsoft\\windows\\start menu\\programs\\administrative tools\\iscsi initiator.lnk"), lpNewFileName="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Programs\\Administrative Tools\\iSCSI Initiator.lnk" (normalized: "c:\\users\\all users\\microsoft\\windows\\start menu\\programs\\administrative tools\\iscsi initiator.lnk")) returned 1 [0091.856] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Programs\\Administrative Tools\\Memory Diagnostics Tool.lnk", nBufferLength=0x105, lpBuffer=0x31e02c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Programs\\Administrative Tools\\Memory Diagnostics Tool.lnk", lpFilePart=0x0) returned 0x69 [0091.856] CreateFileW (lpFileName="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Programs\\Administrative Tools\\Memory Diagnostics Tool.lnk" (normalized: "c:\\users\\all users\\microsoft\\windows\\start menu\\programs\\administrative tools\\memory diagnostics tool.lnk"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x178 [0091.856] GetFileType (hFile=0x178) returned 0x1 [0091.856] GetFileType (hFile=0x178) returned 0x1 [0091.856] GetFileSize (in: hFile=0x178, lpFileSizeHigh=0x31e628 | out: lpFileSizeHigh=0x31e628*=0x0) returned 0x500 [0091.856] ReadFile (in: hFile=0x178, lpBuffer=0x27df83c, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x31e5d4, lpOverlapped=0x0 | out: lpBuffer=0x27df83c*, lpNumberOfBytesRead=0x31e5d4*=0x500, lpOverlapped=0x0) returned 1 [0091.857] CloseHandle (hObject=0x178) returned 1 [0091.873] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Programs\\Administrative Tools\\Memory Diagnostics Tool.lnk", nBufferLength=0x105, lpBuffer=0x31e018, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Programs\\Administrative Tools\\Memory Diagnostics Tool.lnk", lpFilePart=0x0) returned 0x69 [0091.874] CreateFileW (lpFileName="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Programs\\Administrative Tools\\Memory Diagnostics Tool.lnk" (normalized: "c:\\users\\all users\\microsoft\\windows\\start menu\\programs\\administrative tools\\memory diagnostics tool.lnk"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x178 [0091.874] GetFileType (hFile=0x178) returned 0x1 [0091.874] GetFileType (hFile=0x178) returned 0x1 [0091.875] WriteFile (in: hFile=0x178, lpBuffer=0x282f10c*, nNumberOfBytesToWrite=0x510, lpNumberOfBytesWritten=0x31e59c, lpOverlapped=0x0 | out: lpBuffer=0x282f10c*, lpNumberOfBytesWritten=0x31e59c*=0x510, lpOverlapped=0x0) returned 1 [0091.875] CloseHandle (hObject=0x178) returned 1 [0091.875] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Programs\\Administrative Tools\\Memory Diagnostics Tool.lnk", nBufferLength=0x105, lpBuffer=0x31e14c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Programs\\Administrative Tools\\Memory Diagnostics Tool.lnk", lpFilePart=0x0) returned 0x69 [0091.876] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Programs\\Administrative Tools\\Memory Diagnostics Tool.lnk", nBufferLength=0x105, lpBuffer=0x31e14c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Programs\\Administrative Tools\\Memory Diagnostics Tool.lnk", lpFilePart=0x0) returned 0x69 [0091.876] GetFileAttributesExW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Programs\\Administrative Tools\\Memory Diagnostics Tool.lnk" (normalized: "c:\\users\\all users\\microsoft\\windows\\start menu\\programs\\administrative tools\\memory diagnostics tool.lnk"), fInfoLevelId=0x0, lpFileInformation=0x31e628 | out: lpFileInformation=0x31e628*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa38693b, ftCreationTime.dwHighDateTime=0x1ca043f, ftLastAccessTime.dwLowDateTime=0xa38693b, ftLastAccessTime.dwHighDateTime=0x1ca043f, ftLastWriteTime.dwLowDateTime=0x1a34a500, ftLastWriteTime.dwHighDateTime=0x1d6eb7f, nFileSizeHigh=0x0, nFileSizeLow=0x510)) returned 1 [0091.876] MoveFileW (lpExistingFileName="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Programs\\Administrative Tools\\Memory Diagnostics Tool.lnk" (normalized: "c:\\users\\all users\\microsoft\\windows\\start menu\\programs\\administrative tools\\memory diagnostics tool.lnk"), lpNewFileName="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Programs\\Administrative Tools\\Memory Diagnostics Tool.lnk" (normalized: "c:\\users\\all users\\microsoft\\windows\\start menu\\programs\\administrative tools\\memory diagnostics tool.lnk")) returned 1 [0091.876] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Programs\\Administrative Tools\\Performance Monitor.lnk", nBufferLength=0x105, lpBuffer=0x31e02c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Programs\\Administrative Tools\\Performance Monitor.lnk", lpFilePart=0x0) returned 0x65 [0091.876] CreateFileW (lpFileName="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Programs\\Administrative Tools\\Performance Monitor.lnk" (normalized: "c:\\users\\all users\\microsoft\\windows\\start menu\\programs\\administrative tools\\performance monitor.lnk"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x178 [0091.876] GetFileType (hFile=0x178) returned 0x1 [0091.876] GetFileType (hFile=0x178) returned 0x1 [0091.877] GetFileSize (in: hFile=0x178, lpFileSizeHigh=0x31e628 | out: lpFileSizeHigh=0x31e628*=0x0) returned 0x4e0 [0091.877] ReadFile (in: hFile=0x178, lpBuffer=0x283094c, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x31e5d4, lpOverlapped=0x0 | out: lpBuffer=0x283094c*, lpNumberOfBytesRead=0x31e5d4*=0x4e0, lpOverlapped=0x0) returned 1 [0091.877] CloseHandle (hObject=0x178) returned 1 [0091.918] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Programs\\Administrative Tools\\Performance Monitor.lnk", nBufferLength=0x105, lpBuffer=0x31e018, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Programs\\Administrative Tools\\Performance Monitor.lnk", lpFilePart=0x0) returned 0x65 [0091.918] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e50c) returned 1 [0091.918] CreateFileW (lpFileName="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Programs\\Administrative Tools\\Performance Monitor.lnk" (normalized: "c:\\users\\all users\\microsoft\\windows\\start menu\\programs\\administrative tools\\performance monitor.lnk"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x178 [0091.919] GetFileType (hFile=0x178) returned 0x1 [0091.919] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e508) returned 1 [0091.919] GetFileType (hFile=0x178) returned 0x1 [0091.919] WriteFile (in: hFile=0x178, lpBuffer=0x2682804*, nNumberOfBytesToWrite=0x4f0, lpNumberOfBytesWritten=0x31e59c, lpOverlapped=0x0 | out: lpBuffer=0x2682804*, lpNumberOfBytesWritten=0x31e59c*=0x4f0, lpOverlapped=0x0) returned 1 [0091.920] CloseHandle (hObject=0x178) returned 1 [0091.920] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Programs\\Administrative Tools\\Performance Monitor.lnk", nBufferLength=0x105, lpBuffer=0x31e14c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Programs\\Administrative Tools\\Performance Monitor.lnk", lpFilePart=0x0) returned 0x65 [0091.920] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Programs\\Administrative Tools\\Performance Monitor.lnk", nBufferLength=0x105, lpBuffer=0x31e14c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Programs\\Administrative Tools\\Performance Monitor.lnk", lpFilePart=0x0) returned 0x65 [0091.920] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e5ac) returned 1 [0091.920] GetFileAttributesExW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Programs\\Administrative Tools\\Performance Monitor.lnk" (normalized: "c:\\users\\all users\\microsoft\\windows\\start menu\\programs\\administrative tools\\performance monitor.lnk"), fInfoLevelId=0x0, lpFileInformation=0x31e628 | out: lpFileInformation=0x31e628*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x14139bde, ftCreationTime.dwHighDateTime=0x1ca043f, ftLastAccessTime.dwLowDateTime=0x14139bde, ftLastAccessTime.dwHighDateTime=0x1ca043f, ftLastWriteTime.dwLowDateTime=0x1a3bc920, ftLastWriteTime.dwHighDateTime=0x1d6eb7f, nFileSizeHigh=0x0, nFileSizeLow=0x4f0)) returned 1 [0091.920] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e5a8) returned 1 [0091.921] MoveFileW (lpExistingFileName="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Programs\\Administrative Tools\\Performance Monitor.lnk" (normalized: "c:\\users\\all users\\microsoft\\windows\\start menu\\programs\\administrative tools\\performance monitor.lnk"), lpNewFileName="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Programs\\Administrative Tools\\Performance Monitor.lnk" (normalized: "c:\\users\\all users\\microsoft\\windows\\start menu\\programs\\administrative tools\\performance monitor.lnk")) returned 1 [0091.921] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Programs\\Administrative Tools\\Print Management.lnk", nBufferLength=0x105, lpBuffer=0x31e02c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Programs\\Administrative Tools\\Print Management.lnk", lpFilePart=0x0) returned 0x62 [0091.921] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e520) returned 1 [0091.921] CreateFileW (lpFileName="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Programs\\Administrative Tools\\Print Management.lnk" (normalized: "c:\\users\\all users\\microsoft\\windows\\start menu\\programs\\administrative tools\\print management.lnk"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x178 [0091.921] GetFileType (hFile=0x178) returned 0x1 [0091.921] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e51c) returned 1 [0091.921] GetFileType (hFile=0x178) returned 0x1 [0091.921] GetFileSize (in: hFile=0x178, lpFileSizeHigh=0x31e628 | out: lpFileSizeHigh=0x31e628*=0x0) returned 0x4f0 [0091.922] ReadFile (in: hFile=0x178, lpBuffer=0x268403c, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x31e5d4, lpOverlapped=0x0 | out: lpBuffer=0x268403c*, lpNumberOfBytesRead=0x31e5d4*=0x4f0, lpOverlapped=0x0) returned 1 [0091.922] CloseHandle (hObject=0x178) returned 1 [0091.935] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Programs\\Administrative Tools\\Print Management.lnk", nBufferLength=0x105, lpBuffer=0x31e018, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Programs\\Administrative Tools\\Print Management.lnk", lpFilePart=0x0) returned 0x62 [0091.935] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e50c) returned 1 [0091.935] CreateFileW (lpFileName="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Programs\\Administrative Tools\\Print Management.lnk" (normalized: "c:\\users\\all users\\microsoft\\windows\\start menu\\programs\\administrative tools\\print management.lnk"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x178 [0091.936] GetFileType (hFile=0x178) returned 0x1 [0091.936] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e508) returned 1 [0091.936] GetFileType (hFile=0x178) returned 0x1 [0091.938] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Programs\\Administrative Tools\\Print Management.lnk", nBufferLength=0x105, lpBuffer=0x31e14c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Programs\\Administrative Tools\\Print Management.lnk", lpFilePart=0x0) returned 0x62 [0091.938] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Programs\\Administrative Tools\\Print Management.lnk", nBufferLength=0x105, lpBuffer=0x31e14c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Programs\\Administrative Tools\\Print Management.lnk", lpFilePart=0x0) returned 0x62 [0091.938] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e5ac) returned 1 [0091.938] GetFileAttributesExW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Programs\\Administrative Tools\\Print Management.lnk" (normalized: "c:\\users\\all users\\microsoft\\windows\\start menu\\programs\\administrative tools\\print management.lnk"), fInfoLevelId=0x0, lpFileInformation=0x31e628 | out: lpFileInformation=0x31e628*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x806d09e0, ftCreationTime.dwHighDateTime=0x1d2de2a, ftLastAccessTime.dwLowDateTime=0x806d09e0, ftLastAccessTime.dwHighDateTime=0x1d2de2a, ftLastWriteTime.dwLowDateTime=0x1a3e2a80, ftLastWriteTime.dwHighDateTime=0x1d6eb7f, nFileSizeHigh=0x0, nFileSizeLow=0x500)) returned 1 [0091.938] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e5a8) returned 1 [0091.938] MoveFileW (lpExistingFileName="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Programs\\Administrative Tools\\Print Management.lnk" (normalized: "c:\\users\\all users\\microsoft\\windows\\start menu\\programs\\administrative tools\\print management.lnk"), lpNewFileName="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Programs\\Administrative Tools\\Print Management.lnk" (normalized: "c:\\users\\all users\\microsoft\\windows\\start menu\\programs\\administrative tools\\print management.lnk")) returned 1 [0091.939] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Programs\\Administrative Tools\\Security Configuration Management.lnk", nBufferLength=0x105, lpBuffer=0x31e02c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Programs\\Administrative Tools\\Security Configuration Management.lnk", lpFilePart=0x0) returned 0x73 [0091.939] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e520) returned 1 [0091.939] CreateFileW (lpFileName="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Programs\\Administrative Tools\\Security Configuration Management.lnk" (normalized: "c:\\users\\all users\\microsoft\\windows\\start menu\\programs\\administrative tools\\security configuration management.lnk"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x178 [0091.939] GetFileType (hFile=0x178) returned 0x1 [0091.939] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e51c) returned 1 [0091.939] GetFileType (hFile=0x178) returned 0x1 [0091.939] GetFileSize (in: hFile=0x178, lpFileSizeHigh=0x31e628 | out: lpFileSizeHigh=0x31e628*=0x0) returned 0x4f0 [0091.939] ReadFile (in: hFile=0x178, lpBuffer=0x26d5270, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x31e5d4, lpOverlapped=0x0 | out: lpBuffer=0x26d5270*, lpNumberOfBytesRead=0x31e5d4*=0x4f0, lpOverlapped=0x0) returned 1 [0091.940] CloseHandle (hObject=0x178) returned 1 [0091.953] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Programs\\Administrative Tools\\Security Configuration Management.lnk", nBufferLength=0x105, lpBuffer=0x31e018, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Programs\\Administrative Tools\\Security Configuration Management.lnk", lpFilePart=0x0) returned 0x73 [0091.953] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e50c) returned 1 [0091.953] CreateFileW (lpFileName="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Programs\\Administrative Tools\\Security Configuration Management.lnk" (normalized: "c:\\users\\all users\\microsoft\\windows\\start menu\\programs\\administrative tools\\security configuration management.lnk"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x178 [0091.953] GetFileType (hFile=0x178) returned 0x1 [0091.954] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e508) returned 1 [0091.954] GetFileType (hFile=0x178) returned 0x1 [0091.954] WriteFile (in: hFile=0x178, lpBuffer=0x2724b18*, nNumberOfBytesToWrite=0x500, lpNumberOfBytesWritten=0x31e59c, lpOverlapped=0x0 | out: lpBuffer=0x2724b18*, lpNumberOfBytesWritten=0x31e59c*=0x500, lpOverlapped=0x0) returned 1 [0091.954] CloseHandle (hObject=0x178) returned 1 [0091.955] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Programs\\Administrative Tools\\Security Configuration Management.lnk", nBufferLength=0x105, lpBuffer=0x31e14c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Programs\\Administrative Tools\\Security Configuration Management.lnk", lpFilePart=0x0) returned 0x73 [0091.955] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Programs\\Administrative Tools\\Security Configuration Management.lnk", nBufferLength=0x105, lpBuffer=0x31e14c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Programs\\Administrative Tools\\Security Configuration Management.lnk", lpFilePart=0x0) returned 0x73 [0091.955] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e5ac) returned 1 [0091.955] GetFileAttributesExW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Programs\\Administrative Tools\\Security Configuration Management.lnk" (normalized: "c:\\users\\all users\\microsoft\\windows\\start menu\\programs\\administrative tools\\security configuration management.lnk"), fInfoLevelId=0x0, lpFileInformation=0x31e628 | out: lpFileInformation=0x31e628*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x81c3cfe0, ftCreationTime.dwHighDateTime=0x1d2de2a, ftLastAccessTime.dwLowDateTime=0x81c3cfe0, ftLastAccessTime.dwHighDateTime=0x1d2de2a, ftLastWriteTime.dwLowDateTime=0x1a408be0, ftLastWriteTime.dwHighDateTime=0x1d6eb7f, nFileSizeHigh=0x0, nFileSizeLow=0x500)) returned 1 [0091.955] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e5a8) returned 1 [0091.955] MoveFileW (lpExistingFileName="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Programs\\Administrative Tools\\Security Configuration Management.lnk" (normalized: "c:\\users\\all users\\microsoft\\windows\\start menu\\programs\\administrative tools\\security configuration management.lnk"), lpNewFileName="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Programs\\Administrative Tools\\Security Configuration Management.lnk" (normalized: "c:\\users\\all users\\microsoft\\windows\\start menu\\programs\\administrative tools\\security configuration management.lnk")) returned 1 [0091.955] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Programs\\Administrative Tools\\services.lnk", nBufferLength=0x105, lpBuffer=0x31e02c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Programs\\Administrative Tools\\services.lnk", lpFilePart=0x0) returned 0x5a [0091.955] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e520) returned 1 [0091.956] CreateFileW (lpFileName="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Programs\\Administrative Tools\\services.lnk" (normalized: "c:\\users\\all users\\microsoft\\windows\\start menu\\programs\\administrative tools\\services.lnk"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x178 [0091.956] GetFileType (hFile=0x178) returned 0x1 [0091.956] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e51c) returned 1 [0091.956] GetFileType (hFile=0x178) returned 0x1 [0091.956] GetFileSize (in: hFile=0x178, lpFileSizeHigh=0x31e628 | out: lpFileSizeHigh=0x31e628*=0x0) returned 0x510 [0091.956] ReadFile (in: hFile=0x178, lpBuffer=0x2726388, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x31e5d4, lpOverlapped=0x0 | out: lpBuffer=0x2726388*, lpNumberOfBytesRead=0x31e5d4*=0x510, lpOverlapped=0x0) returned 1 [0091.956] CloseHandle (hObject=0x178) returned 1 [0091.973] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Programs\\Administrative Tools\\services.lnk", nBufferLength=0x105, lpBuffer=0x31e018, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Programs\\Administrative Tools\\services.lnk", lpFilePart=0x0) returned 0x5a [0091.973] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e50c) returned 1 [0091.973] CreateFileW (lpFileName="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Programs\\Administrative Tools\\services.lnk" (normalized: "c:\\users\\all users\\microsoft\\windows\\start menu\\programs\\administrative tools\\services.lnk"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x178 [0091.973] GetFileType (hFile=0x178) returned 0x1 [0091.974] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e508) returned 1 [0091.974] GetFileType (hFile=0x178) returned 0x1 [0091.974] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Programs\\Administrative Tools\\services.lnk", nBufferLength=0x105, lpBuffer=0x31e14c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Programs\\Administrative Tools\\services.lnk", lpFilePart=0x0) returned 0x5a [0091.974] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Programs\\Administrative Tools\\services.lnk", nBufferLength=0x105, lpBuffer=0x31e14c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Programs\\Administrative Tools\\services.lnk", lpFilePart=0x0) returned 0x5a [0091.975] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e5ac) returned 1 [0091.975] GetFileAttributesExW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Programs\\Administrative Tools\\services.lnk" (normalized: "c:\\users\\all users\\microsoft\\windows\\start menu\\programs\\administrative tools\\services.lnk"), fInfoLevelId=0x0, lpFileInformation=0x31e628 | out: lpFileInformation=0x31e628*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1d7306f2, ftCreationTime.dwHighDateTime=0x1ca043f, ftLastAccessTime.dwLowDateTime=0x1d7306f2, ftLastAccessTime.dwHighDateTime=0x1ca043f, ftLastWriteTime.dwLowDateTime=0x1a42ed40, ftLastWriteTime.dwHighDateTime=0x1d6eb7f, nFileSizeHigh=0x0, nFileSizeLow=0x520)) returned 1 [0091.975] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e5a8) returned 1 [0091.975] MoveFileW (lpExistingFileName="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Programs\\Administrative Tools\\services.lnk" (normalized: "c:\\users\\all users\\microsoft\\windows\\start menu\\programs\\administrative tools\\services.lnk"), lpNewFileName="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Programs\\Administrative Tools\\services.lnk" (normalized: "c:\\users\\all users\\microsoft\\windows\\start menu\\programs\\administrative tools\\services.lnk")) returned 1 [0091.975] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Programs\\Administrative Tools\\System Configuration.lnk", nBufferLength=0x105, lpBuffer=0x31e02c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Programs\\Administrative Tools\\System Configuration.lnk", lpFilePart=0x0) returned 0x66 [0091.975] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e520) returned 1 [0091.975] CreateFileW (lpFileName="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Programs\\Administrative Tools\\System Configuration.lnk" (normalized: "c:\\users\\all users\\microsoft\\windows\\start menu\\programs\\administrative tools\\system configuration.lnk"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x178 [0091.976] GetFileType (hFile=0x178) returned 0x1 [0091.976] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e51c) returned 1 [0091.976] GetFileType (hFile=0x178) returned 0x1 [0091.976] GetFileSize (in: hFile=0x178, lpFileSizeHigh=0x31e628 | out: lpFileSizeHigh=0x31e628*=0x0) returned 0x4e0 [0091.976] ReadFile (in: hFile=0x178, lpBuffer=0x2777480, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x31e5d4, lpOverlapped=0x0 | out: lpBuffer=0x2777480*, lpNumberOfBytesRead=0x31e5d4*=0x4e0, lpOverlapped=0x0) returned 1 [0091.976] CloseHandle (hObject=0x178) returned 1 [0091.990] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Programs\\Administrative Tools\\System Configuration.lnk", nBufferLength=0x105, lpBuffer=0x31e018, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Programs\\Administrative Tools\\System Configuration.lnk", lpFilePart=0x0) returned 0x66 [0091.990] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e50c) returned 1 [0091.990] CreateFileW (lpFileName="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Programs\\Administrative Tools\\System Configuration.lnk" (normalized: "c:\\users\\all users\\microsoft\\windows\\start menu\\programs\\administrative tools\\system configuration.lnk"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x178 [0091.990] GetFileType (hFile=0x178) returned 0x1 [0091.990] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e508) returned 1 [0091.991] GetFileType (hFile=0x178) returned 0x1 [0091.991] WriteFile (in: hFile=0x178, lpBuffer=0x27c6ca8*, nNumberOfBytesToWrite=0x4f0, lpNumberOfBytesWritten=0x31e59c, lpOverlapped=0x0 | out: lpBuffer=0x27c6ca8*, lpNumberOfBytesWritten=0x31e59c*=0x4f0, lpOverlapped=0x0) returned 1 [0091.991] CloseHandle (hObject=0x178) returned 1 [0091.992] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Programs\\Administrative Tools\\System Configuration.lnk", nBufferLength=0x105, lpBuffer=0x31e14c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Programs\\Administrative Tools\\System Configuration.lnk", lpFilePart=0x0) returned 0x66 [0091.992] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Programs\\Administrative Tools\\System Configuration.lnk", nBufferLength=0x105, lpBuffer=0x31e14c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Programs\\Administrative Tools\\System Configuration.lnk", lpFilePart=0x0) returned 0x66 [0091.992] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e5ac) returned 1 [0091.992] GetFileAttributesExW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Programs\\Administrative Tools\\System Configuration.lnk" (normalized: "c:\\users\\all users\\microsoft\\windows\\start menu\\programs\\administrative tools\\system configuration.lnk"), fInfoLevelId=0x0, lpFileInformation=0x31e628 | out: lpFileInformation=0x31e628*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa575b1f, ftCreationTime.dwHighDateTime=0x1ca043f, ftLastAccessTime.dwLowDateTime=0xa575b1f, ftLastAccessTime.dwHighDateTime=0x1ca043f, ftLastWriteTime.dwLowDateTime=0x1a454ea0, ftLastWriteTime.dwHighDateTime=0x1d6eb7f, nFileSizeHigh=0x0, nFileSizeLow=0x4f0)) returned 1 [0091.992] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e5a8) returned 1 [0091.992] MoveFileW (lpExistingFileName="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Programs\\Administrative Tools\\System Configuration.lnk" (normalized: "c:\\users\\all users\\microsoft\\windows\\start menu\\programs\\administrative tools\\system configuration.lnk"), lpNewFileName="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Programs\\Administrative Tools\\System Configuration.lnk" (normalized: "c:\\users\\all users\\microsoft\\windows\\start menu\\programs\\administrative tools\\system configuration.lnk")) returned 1 [0091.992] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Programs\\Administrative Tools\\Task Scheduler.lnk", nBufferLength=0x105, lpBuffer=0x31e02c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Programs\\Administrative Tools\\Task Scheduler.lnk", lpFilePart=0x0) returned 0x60 [0091.992] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e520) returned 1 [0091.993] CreateFileW (lpFileName="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Programs\\Administrative Tools\\Task Scheduler.lnk" (normalized: "c:\\users\\all users\\microsoft\\windows\\start menu\\programs\\administrative tools\\task scheduler.lnk"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x178 [0091.993] GetFileType (hFile=0x178) returned 0x1 [0091.993] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e51c) returned 1 [0091.993] GetFileType (hFile=0x178) returned 0x1 [0091.993] GetFileSize (in: hFile=0x178, lpFileSizeHigh=0x31e628 | out: lpFileSizeHigh=0x31e628*=0x0) returned 0x4f0 [0091.993] ReadFile (in: hFile=0x178, lpBuffer=0x27c84e0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x31e5d4, lpOverlapped=0x0 | out: lpBuffer=0x27c84e0*, lpNumberOfBytesRead=0x31e5d4*=0x4f0, lpOverlapped=0x0) returned 1 [0092.006] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Programs\\Administrative Tools\\Task Scheduler.lnk", nBufferLength=0x105, lpBuffer=0x31e018, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Programs\\Administrative Tools\\Task Scheduler.lnk", lpFilePart=0x0) returned 0x60 [0092.006] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e50c) returned 1 [0092.006] CreateFileW (lpFileName="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Programs\\Administrative Tools\\Task Scheduler.lnk" (normalized: "c:\\users\\all users\\microsoft\\windows\\start menu\\programs\\administrative tools\\task scheduler.lnk"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x178 [0092.007] GetFileType (hFile=0x178) returned 0x1 [0092.007] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e508) returned 1 [0092.007] GetFileType (hFile=0x178) returned 0x1 [0092.008] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Programs\\Administrative Tools\\Task Scheduler.lnk", nBufferLength=0x105, lpBuffer=0x31e14c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Programs\\Administrative Tools\\Task Scheduler.lnk", lpFilePart=0x0) returned 0x60 [0092.008] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Programs\\Administrative Tools\\Task Scheduler.lnk", nBufferLength=0x105, lpBuffer=0x31e14c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Programs\\Administrative Tools\\Task Scheduler.lnk", lpFilePart=0x0) returned 0x60 [0092.008] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e5ac) returned 1 [0092.008] GetFileAttributesExW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Programs\\Administrative Tools\\Task Scheduler.lnk" (normalized: "c:\\users\\all users\\microsoft\\windows\\start menu\\programs\\administrative tools\\task scheduler.lnk"), fInfoLevelId=0x0, lpFileInformation=0x31e628 | out: lpFileInformation=0x31e628*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2b99f553, ftCreationTime.dwHighDateTime=0x1ca043f, ftLastAccessTime.dwLowDateTime=0x2b99f553, ftLastAccessTime.dwHighDateTime=0x1ca043f, ftLastWriteTime.dwLowDateTime=0x1a47b000, ftLastWriteTime.dwHighDateTime=0x1d6eb7f, nFileSizeHigh=0x0, nFileSizeLow=0x500)) returned 1 [0092.008] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e5a8) returned 1 [0092.008] MoveFileW (lpExistingFileName="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Programs\\Administrative Tools\\Task Scheduler.lnk" (normalized: "c:\\users\\all users\\microsoft\\windows\\start menu\\programs\\administrative tools\\task scheduler.lnk"), lpNewFileName="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Programs\\Administrative Tools\\Task Scheduler.lnk" (normalized: "c:\\users\\all users\\microsoft\\windows\\start menu\\programs\\administrative tools\\task scheduler.lnk")) returned 1 [0092.009] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Programs\\Administrative Tools\\Windows Firewall with Advanced Security.lnk", nBufferLength=0x105, lpBuffer=0x31e02c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Programs\\Administrative Tools\\Windows Firewall with Advanced Security.lnk", lpFilePart=0x0) returned 0x79 [0092.009] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e520) returned 1 [0092.009] CreateFileW (lpFileName="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Programs\\Administrative Tools\\Windows Firewall with Advanced Security.lnk" (normalized: "c:\\users\\all users\\microsoft\\windows\\start menu\\programs\\administrative tools\\windows firewall with advanced security.lnk"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x178 [0092.009] GetFileType (hFile=0x178) returned 0x1 [0092.009] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e51c) returned 1 [0092.010] GetFileType (hFile=0x178) returned 0x1 [0092.010] GetFileSize (in: hFile=0x178, lpFileSizeHigh=0x31e628 | out: lpFileSizeHigh=0x31e628*=0x0) returned 0x500 [0092.010] ReadFile (in: hFile=0x178, lpBuffer=0x28195d0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x31e5d4, lpOverlapped=0x0 | out: lpBuffer=0x28195d0*, lpNumberOfBytesRead=0x31e5d4*=0x500, lpOverlapped=0x0) returned 1 [0092.025] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Programs\\Administrative Tools\\Windows Firewall with Advanced Security.lnk", nBufferLength=0x105, lpBuffer=0x31e018, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Programs\\Administrative Tools\\Windows Firewall with Advanced Security.lnk", lpFilePart=0x0) returned 0x79 [0092.025] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e50c) returned 1 [0092.025] CreateFileW (lpFileName="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Programs\\Administrative Tools\\Windows Firewall with Advanced Security.lnk" (normalized: "c:\\users\\all users\\microsoft\\windows\\start menu\\programs\\administrative tools\\windows firewall with advanced security.lnk"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x178 [0092.026] GetFileType (hFile=0x178) returned 0x1 [0092.026] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e508) returned 1 [0092.026] GetFileType (hFile=0x178) returned 0x1 [0092.027] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Programs\\Administrative Tools\\Windows Firewall with Advanced Security.lnk", nBufferLength=0x105, lpBuffer=0x31e14c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Programs\\Administrative Tools\\Windows Firewall with Advanced Security.lnk", lpFilePart=0x0) returned 0x79 [0092.027] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Programs\\Administrative Tools\\Windows Firewall with Advanced Security.lnk", nBufferLength=0x105, lpBuffer=0x31e14c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Programs\\Administrative Tools\\Windows Firewall with Advanced Security.lnk", lpFilePart=0x0) returned 0x79 [0092.027] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e5ac) returned 1 [0092.027] GetFileAttributesExW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Programs\\Administrative Tools\\Windows Firewall with Advanced Security.lnk" (normalized: "c:\\users\\all users\\microsoft\\windows\\start menu\\programs\\administrative tools\\windows firewall with advanced security.lnk"), fInfoLevelId=0x0, lpFileInformation=0x31e628 | out: lpFileInformation=0x31e628*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x191902f2, ftCreationTime.dwHighDateTime=0x1ca043f, ftLastAccessTime.dwLowDateTime=0x191902f2, ftLastAccessTime.dwHighDateTime=0x1ca043f, ftLastWriteTime.dwLowDateTime=0x1a4c72c0, ftLastWriteTime.dwHighDateTime=0x1d6eb7f, nFileSizeHigh=0x0, nFileSizeLow=0x510)) returned 1 [0092.027] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e5a8) returned 1 [0092.027] MoveFileW (lpExistingFileName="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Programs\\Administrative Tools\\Windows Firewall with Advanced Security.lnk" (normalized: "c:\\users\\all users\\microsoft\\windows\\start menu\\programs\\administrative tools\\windows firewall with advanced security.lnk"), lpNewFileName="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Programs\\Administrative Tools\\Windows Firewall with Advanced Security.lnk" (normalized: "c:\\users\\all users\\microsoft\\windows\\start menu\\programs\\administrative tools\\windows firewall with advanced security.lnk")) returned 1 [0092.028] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Programs\\Administrative Tools\\Windows PowerShell Modules.lnk", nBufferLength=0x105, lpBuffer=0x31e02c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Programs\\Administrative Tools\\Windows PowerShell Modules.lnk", lpFilePart=0x0) returned 0x6c [0092.028] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e520) returned 1 [0092.028] CreateFileW (lpFileName="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Programs\\Administrative Tools\\Windows PowerShell Modules.lnk" (normalized: "c:\\users\\all users\\microsoft\\windows\\start menu\\programs\\administrative tools\\windows powershell modules.lnk"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x178 [0092.028] GetFileType (hFile=0x178) returned 0x1 [0092.028] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e51c) returned 1 [0092.028] GetFileType (hFile=0x178) returned 0x1 [0092.028] GetFileSize (in: hFile=0x178, lpFileSizeHigh=0x31e628 | out: lpFileSizeHigh=0x31e628*=0x0) returned 0xac0 [0092.028] ReadFile (in: hFile=0x178, lpBuffer=0x266c0e0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x31e5d4, lpOverlapped=0x0 | out: lpBuffer=0x266c0e0*, lpNumberOfBytesRead=0x31e5d4*=0xac0, lpOverlapped=0x0) returned 1 [0092.042] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Programs\\Administrative Tools\\Windows PowerShell Modules.lnk", nBufferLength=0x105, lpBuffer=0x31e018, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Programs\\Administrative Tools\\Windows PowerShell Modules.lnk", lpFilePart=0x0) returned 0x6c [0092.042] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e50c) returned 1 [0092.042] CreateFileW (lpFileName="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Programs\\Administrative Tools\\Windows PowerShell Modules.lnk" (normalized: "c:\\users\\all users\\microsoft\\windows\\start menu\\programs\\administrative tools\\windows powershell modules.lnk"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x178 [0092.043] GetFileType (hFile=0x178) returned 0x1 [0092.043] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e508) returned 1 [0092.043] GetFileType (hFile=0x178) returned 0x1 [0092.043] WriteFile (in: hFile=0x178, lpBuffer=0x26bd7dc*, nNumberOfBytesToWrite=0xad0, lpNumberOfBytesWritten=0x31e59c, lpOverlapped=0x0 | out: lpBuffer=0x26bd7dc*, lpNumberOfBytesWritten=0x31e59c*=0xad0, lpOverlapped=0x0) returned 1 [0092.044] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Programs\\Administrative Tools\\Windows PowerShell Modules.lnk", nBufferLength=0x105, lpBuffer=0x31e14c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Programs\\Administrative Tools\\Windows PowerShell Modules.lnk", lpFilePart=0x0) returned 0x6c [0092.044] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Programs\\Administrative Tools\\Windows PowerShell Modules.lnk", nBufferLength=0x105, lpBuffer=0x31e14c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Programs\\Administrative Tools\\Windows PowerShell Modules.lnk", lpFilePart=0x0) returned 0x6c [0092.044] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e5ac) returned 1 [0092.044] GetFileAttributesExW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Programs\\Administrative Tools\\Windows PowerShell Modules.lnk" (normalized: "c:\\users\\all users\\microsoft\\windows\\start menu\\programs\\administrative tools\\windows powershell modules.lnk"), fInfoLevelId=0x0, lpFileInformation=0x31e628 | out: lpFileInformation=0x31e628*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8038cbd7, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x7bed1018, ftLastAccessTime.dwHighDateTime=0x1ca0444, ftLastWriteTime.dwLowDateTime=0x1a4ed420, ftLastWriteTime.dwHighDateTime=0x1d6eb7f, nFileSizeHigh=0x0, nFileSizeLow=0xad0)) returned 1 [0092.044] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e5a8) returned 1 [0092.044] MoveFileW (lpExistingFileName="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Programs\\Administrative Tools\\Windows PowerShell Modules.lnk" (normalized: "c:\\users\\all users\\microsoft\\windows\\start menu\\programs\\administrative tools\\windows powershell modules.lnk"), lpNewFileName="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Programs\\Administrative Tools\\Windows PowerShell Modules.lnk" (normalized: "c:\\users\\all users\\microsoft\\windows\\start menu\\programs\\administrative tools\\windows powershell modules.lnk")) returned 1 [0092.045] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e654) returned 1 [0092.045] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Programs\\Games", nBufferLength=0x105, lpBuffer=0x31e15c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Programs\\Games", lpFilePart=0x0) returned 0x3e [0092.045] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Programs\\Games\\", nBufferLength=0x105, lpBuffer=0x31e130, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Programs\\Games\\", lpFilePart=0x0) returned 0x3f [0092.045] FindFirstFileW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Programs\\Games\\*", lpFindFileData=0x31e37c | out: lpFindFileData=0x31e37c*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x80020c30, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0xa224bfc3, ftLastAccessTime.dwHighDateTime=0x1cbf8eb, ftLastWriteTime.dwLowDateTime=0xa224bfc3, ftLastWriteTime.dwHighDateTime=0x1cbf8eb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5107ca0 [0092.045] FindNextFileW (in: hFindFile=0x5107ca0, lpFindFileData=0x31e38c | out: lpFindFileData=0x31e38c*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x80020c30, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0xa224bfc3, ftLastAccessTime.dwHighDateTime=0x1cbf8eb, ftLastWriteTime.dwLowDateTime=0xa224bfc3, ftLastWriteTime.dwHighDateTime=0x1cbf8eb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0092.045] FindNextFileW (in: hFindFile=0x5107ca0, lpFindFileData=0x31e38c | out: lpFindFileData=0x31e38c*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0x8038cbd7, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x8e194aab, ftLastAccessTime.dwHighDateTime=0x1cbf8eb, ftLastWriteTime.dwLowDateTime=0x8e194aab, ftLastWriteTime.dwHighDateTime=0x1cbf8eb, nFileSizeHigh=0x0, nFileSizeLow=0x208, dwReserved0=0x0, dwReserved1=0x0, cFileName="desktop.ini", cAlternateFileName="")) returned 1 [0092.045] FindNextFileW (in: hFindFile=0x5107ca0, lpFindFileData=0x31e38c | out: lpFindFileData=0x31e38c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3db22b28, ftCreationTime.dwHighDateTime=0x1ca043f, ftLastAccessTime.dwLowDateTime=0x3db22b28, ftLastAccessTime.dwHighDateTime=0x1ca043f, ftLastWriteTime.dwLowDateTime=0x9bf6340, ftLastWriteTime.dwHighDateTime=0x1d6eb7f, nFileSizeHigh=0x0, nFileSizeLow=0x110, dwReserved0=0x0, dwReserved1=0x0, cFileName="GameExplorer.lnk", cAlternateFileName="GAMEEX~1.LNK")) returned 1 [0092.045] FindNextFileW (in: hFindFile=0x5107ca0, lpFindFileData=0x31e38c | out: lpFindFileData=0x31e38c*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0092.046] FindClose (in: hFindFile=0x5107ca0 | out: hFindFile=0x5107ca0) returned 1 [0092.048] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e614) returned 1 [0092.048] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e620) returned 1 [0092.048] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e654) returned 1 [0092.048] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Programs\\Games", nBufferLength=0x105, lpBuffer=0x31e15c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Programs\\Games", lpFilePart=0x0) returned 0x3e [0092.048] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Programs\\Games\\", nBufferLength=0x105, lpBuffer=0x31e130, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Programs\\Games\\", lpFilePart=0x0) returned 0x3f [0092.048] FindFirstFileW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Programs\\Games\\*", lpFindFileData=0x31e37c | out: lpFindFileData=0x31e37c*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x80020c30, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0xa224bfc3, ftLastAccessTime.dwHighDateTime=0x1cbf8eb, ftLastWriteTime.dwLowDateTime=0xa224bfc3, ftLastWriteTime.dwHighDateTime=0x1cbf8eb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5107ca0 [0092.048] FindNextFileW (in: hFindFile=0x5107ca0, lpFindFileData=0x31e38c | out: lpFindFileData=0x31e38c*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x80020c30, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0xa224bfc3, ftLastAccessTime.dwHighDateTime=0x1cbf8eb, ftLastWriteTime.dwLowDateTime=0xa224bfc3, ftLastWriteTime.dwHighDateTime=0x1cbf8eb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0092.048] FindNextFileW (in: hFindFile=0x5107ca0, lpFindFileData=0x31e38c | out: lpFindFileData=0x31e38c*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0x8038cbd7, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x8e194aab, ftLastAccessTime.dwHighDateTime=0x1cbf8eb, ftLastWriteTime.dwLowDateTime=0x8e194aab, ftLastWriteTime.dwHighDateTime=0x1cbf8eb, nFileSizeHigh=0x0, nFileSizeLow=0x208, dwReserved0=0x0, dwReserved1=0x0, cFileName="desktop.ini", cAlternateFileName="")) returned 1 [0092.048] FindNextFileW (in: hFindFile=0x5107ca0, lpFindFileData=0x31e38c | out: lpFindFileData=0x31e38c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3db22b28, ftCreationTime.dwHighDateTime=0x1ca043f, ftLastAccessTime.dwLowDateTime=0x3db22b28, ftLastAccessTime.dwHighDateTime=0x1ca043f, ftLastWriteTime.dwLowDateTime=0x9bf6340, ftLastWriteTime.dwHighDateTime=0x1d6eb7f, nFileSizeHigh=0x0, nFileSizeLow=0x110, dwReserved0=0x0, dwReserved1=0x0, cFileName="GameExplorer.lnk", cAlternateFileName="GAMEEX~1.LNK")) returned 1 [0092.048] FindNextFileW (in: hFindFile=0x5107ca0, lpFindFileData=0x31e38c | out: lpFindFileData=0x31e38c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3db22b28, ftCreationTime.dwHighDateTime=0x1ca043f, ftLastAccessTime.dwLowDateTime=0x3db22b28, ftLastAccessTime.dwHighDateTime=0x1ca043f, ftLastWriteTime.dwLowDateTime=0x9bf6340, ftLastWriteTime.dwHighDateTime=0x1d6eb7f, nFileSizeHigh=0x0, nFileSizeLow=0x110, dwReserved0=0x0, dwReserved1=0x0, cFileName="GameExplorer.lnk", cAlternateFileName="GAMEEX~1.LNK")) returned 0 [0092.049] FindClose (in: hFindFile=0x5107ca0 | out: hFindFile=0x5107ca0) returned 1 [0092.049] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e614) returned 1 [0092.049] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e620) returned 1 [0092.049] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Programs\\Games\\GameExplorer.lnk", nBufferLength=0x105, lpBuffer=0x31e02c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Programs\\Games\\GameExplorer.lnk", lpFilePart=0x0) returned 0x4f [0092.049] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e520) returned 1 [0092.049] CreateFileW (lpFileName="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Programs\\Games\\GameExplorer.lnk" (normalized: "c:\\users\\all users\\microsoft\\windows\\start menu\\programs\\games\\gameexplorer.lnk"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x178 [0092.049] GetFileType (hFile=0x178) returned 0x1 [0092.049] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e51c) returned 1 [0092.049] GetFileType (hFile=0x178) returned 0x1 [0092.049] GetFileSize (in: hFile=0x178, lpFileSizeHigh=0x31e628 | out: lpFileSizeHigh=0x31e628*=0x0) returned 0x110 [0092.049] ReadFile (in: hFile=0x178, lpBuffer=0x26c07e0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x31e5d4, lpOverlapped=0x0 | out: lpBuffer=0x26c07e0*, lpNumberOfBytesRead=0x31e5d4*=0x110, lpOverlapped=0x0) returned 1 [0092.088] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Programs\\Games\\GameExplorer.lnk", nBufferLength=0x105, lpBuffer=0x31e018, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Programs\\Games\\GameExplorer.lnk", lpFilePart=0x0) returned 0x4f [0092.088] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e50c) returned 1 [0092.088] CreateFileW (lpFileName="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Programs\\Games\\GameExplorer.lnk" (normalized: "c:\\users\\all users\\microsoft\\windows\\start menu\\programs\\games\\gameexplorer.lnk"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x178 [0092.089] GetFileType (hFile=0x178) returned 0x1 [0092.089] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e508) returned 1 [0092.089] GetFileType (hFile=0x178) returned 0x1 [0092.089] WriteFile (in: hFile=0x178, lpBuffer=0x270ecb8*, nNumberOfBytesToWrite=0x120, lpNumberOfBytesWritten=0x31e59c, lpOverlapped=0x0 | out: lpBuffer=0x270ecb8*, lpNumberOfBytesWritten=0x31e59c*=0x120, lpOverlapped=0x0) returned 1 [0092.090] CloseHandle (hObject=0x178) returned 1 [0092.090] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Programs\\Games\\GameExplorer.lnk", nBufferLength=0x105, lpBuffer=0x31e14c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Programs\\Games\\GameExplorer.lnk", lpFilePart=0x0) returned 0x4f [0092.090] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Programs\\Games\\GameExplorer.lnk", nBufferLength=0x105, lpBuffer=0x31e14c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Programs\\Games\\GameExplorer.lnk", lpFilePart=0x0) returned 0x4f [0092.090] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e5ac) returned 1 [0092.090] GetFileAttributesExW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Programs\\Games\\GameExplorer.lnk" (normalized: "c:\\users\\all users\\microsoft\\windows\\start menu\\programs\\games\\gameexplorer.lnk"), fInfoLevelId=0x0, lpFileInformation=0x31e628 | out: lpFileInformation=0x31e628*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3db22b28, ftCreationTime.dwHighDateTime=0x1ca043f, ftLastAccessTime.dwLowDateTime=0x3db22b28, ftLastAccessTime.dwHighDateTime=0x1ca043f, ftLastWriteTime.dwLowDateTime=0x1a55f840, ftLastWriteTime.dwHighDateTime=0x1d6eb7f, nFileSizeHigh=0x0, nFileSizeLow=0x120)) returned 1 [0092.090] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e5a8) returned 1 [0092.090] MoveFileW (lpExistingFileName="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Programs\\Games\\GameExplorer.lnk" (normalized: "c:\\users\\all users\\microsoft\\windows\\start menu\\programs\\games\\gameexplorer.lnk"), lpNewFileName="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Programs\\Games\\GameExplorer.lnk" (normalized: "c:\\users\\all users\\microsoft\\windows\\start menu\\programs\\games\\gameexplorer.lnk")) returned 1 [0092.091] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e654) returned 1 [0092.091] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Programs\\Java", nBufferLength=0x105, lpBuffer=0x31e15c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Programs\\Java", lpFilePart=0x0) returned 0x3d [0092.091] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Programs\\Java\\", nBufferLength=0x105, lpBuffer=0x31e130, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Programs\\Java\\", lpFilePart=0x0) returned 0x3e [0092.091] FindFirstFileW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Programs\\Java\\*", lpFindFileData=0x31e37c | out: lpFindFileData=0x31e37c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7577bc60, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x762ca4e0, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x762ca4e0, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x51079a0 [0092.091] FindNextFileW (in: hFindFile=0x51079a0, lpFindFileData=0x31e38c | out: lpFindFileData=0x31e38c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7577bc60, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x762ca4e0, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x762ca4e0, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0092.092] FindNextFileW (in: hFindFile=0x51079a0, lpFindFileData=0x31e38c | out: lpFindFileData=0x31e38c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x762ca4e0, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x762ca4e0, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x9cb4a20, ftLastWriteTime.dwHighDateTime=0x1d6eb7f, nFileSizeHigh=0x0, nFileSizeLow=0x7d0, dwReserved0=0x0, dwReserved1=0x0, cFileName="About Java.lnk", cAlternateFileName="ABOUTJ~1.LNK")) returned 1 [0092.092] FindNextFileW (in: hFindFile=0x51079a0, lpFindFileData=0x31e38c | out: lpFindFileData=0x31e38c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x762ca4e0, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x762ca4e0, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x9d26e40, ftLastWriteTime.dwHighDateTime=0x1d6eb7f, nFileSizeHigh=0x0, nFileSizeLow=0x7f0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Check For Updates.lnk", cAlternateFileName="CHECKF~1.LNK")) returned 1 [0092.092] FindNextFileW (in: hFindFile=0x51079a0, lpFindFileData=0x31e38c | out: lpFindFileData=0x31e38c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x762a4380, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x762a4380, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x9d4cfa0, ftLastWriteTime.dwHighDateTime=0x1d6eb7f, nFileSizeHigh=0x0, nFileSizeLow=0x7c0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Configure Java.lnk", cAlternateFileName="CONFIG~1.LNK")) returned 1 [0092.092] FindNextFileW (in: hFindFile=0x51079a0, lpFindFileData=0x31e38c | out: lpFindFileData=0x31e38c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7591eb80, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x7591eb80, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x9d73100, ftLastWriteTime.dwHighDateTime=0x1d6eb7f, nFileSizeHigh=0x0, nFileSizeLow=0x4c0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Get Help.lnk", cAlternateFileName="GETHEL~1.LNK")) returned 1 [0092.092] FindNextFileW (in: hFindFile=0x51079a0, lpFindFileData=0x31e38c | out: lpFindFileData=0x31e38c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x758f8a20, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x758f8a20, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x9d99260, ftLastWriteTime.dwHighDateTime=0x1d6eb7f, nFileSizeHigh=0x0, nFileSizeLow=0x460, dwReserved0=0x0, dwReserved1=0x0, cFileName="Visit Java.com.lnk", cAlternateFileName="VISITJ~1.LNK")) returned 1 [0092.092] FindNextFileW (in: hFindFile=0x51079a0, lpFindFileData=0x31e38c | out: lpFindFileData=0x31e38c*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0092.092] FindClose (in: hFindFile=0x51079a0 | out: hFindFile=0x51079a0) returned 1 [0092.092] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e614) returned 1 [0092.092] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e620) returned 1 [0092.092] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e654) returned 1 [0092.092] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Programs\\Java", nBufferLength=0x105, lpBuffer=0x31e15c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Programs\\Java", lpFilePart=0x0) returned 0x3d [0092.093] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Programs\\Java\\", nBufferLength=0x105, lpBuffer=0x31e130, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Programs\\Java\\", lpFilePart=0x0) returned 0x3e [0092.093] FindFirstFileW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Programs\\Java\\*", lpFindFileData=0x31e37c | out: lpFindFileData=0x31e37c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7577bc60, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x762ca4e0, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x762ca4e0, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x51079a0 [0092.093] FindNextFileW (in: hFindFile=0x51079a0, lpFindFileData=0x31e38c | out: lpFindFileData=0x31e38c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7577bc60, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x762ca4e0, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x762ca4e0, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0092.093] FindNextFileW (in: hFindFile=0x51079a0, lpFindFileData=0x31e38c | out: lpFindFileData=0x31e38c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x762ca4e0, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x762ca4e0, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x9cb4a20, ftLastWriteTime.dwHighDateTime=0x1d6eb7f, nFileSizeHigh=0x0, nFileSizeLow=0x7d0, dwReserved0=0x0, dwReserved1=0x0, cFileName="About Java.lnk", cAlternateFileName="ABOUTJ~1.LNK")) returned 1 [0092.093] FindNextFileW (in: hFindFile=0x51079a0, lpFindFileData=0x31e38c | out: lpFindFileData=0x31e38c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x762ca4e0, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x762ca4e0, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x9d26e40, ftLastWriteTime.dwHighDateTime=0x1d6eb7f, nFileSizeHigh=0x0, nFileSizeLow=0x7f0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Check For Updates.lnk", cAlternateFileName="CHECKF~1.LNK")) returned 1 [0092.093] FindNextFileW (in: hFindFile=0x51079a0, lpFindFileData=0x31e38c | out: lpFindFileData=0x31e38c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x762a4380, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x762a4380, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x9d4cfa0, ftLastWriteTime.dwHighDateTime=0x1d6eb7f, nFileSizeHigh=0x0, nFileSizeLow=0x7c0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Configure Java.lnk", cAlternateFileName="CONFIG~1.LNK")) returned 1 [0092.093] FindNextFileW (in: hFindFile=0x51079a0, lpFindFileData=0x31e38c | out: lpFindFileData=0x31e38c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7591eb80, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x7591eb80, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x9d73100, ftLastWriteTime.dwHighDateTime=0x1d6eb7f, nFileSizeHigh=0x0, nFileSizeLow=0x4c0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Get Help.lnk", cAlternateFileName="GETHEL~1.LNK")) returned 1 [0092.094] FindNextFileW (in: hFindFile=0x51079a0, lpFindFileData=0x31e38c | out: lpFindFileData=0x31e38c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x758f8a20, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x758f8a20, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x9d99260, ftLastWriteTime.dwHighDateTime=0x1d6eb7f, nFileSizeHigh=0x0, nFileSizeLow=0x460, dwReserved0=0x0, dwReserved1=0x0, cFileName="Visit Java.com.lnk", cAlternateFileName="VISITJ~1.LNK")) returned 1 [0092.094] FindNextFileW (in: hFindFile=0x51079a0, lpFindFileData=0x31e38c | out: lpFindFileData=0x31e38c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x758f8a20, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x758f8a20, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x9d99260, ftLastWriteTime.dwHighDateTime=0x1d6eb7f, nFileSizeHigh=0x0, nFileSizeLow=0x460, dwReserved0=0x0, dwReserved1=0x0, cFileName="Visit Java.com.lnk", cAlternateFileName="VISITJ~1.LNK")) returned 0 [0092.094] FindClose (in: hFindFile=0x51079a0 | out: hFindFile=0x51079a0) returned 1 [0092.094] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e614) returned 1 [0092.094] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e620) returned 1 [0092.094] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Programs\\Java\\About Java.lnk", nBufferLength=0x105, lpBuffer=0x31e02c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Programs\\Java\\About Java.lnk", lpFilePart=0x0) returned 0x4c [0092.094] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e520) returned 1 [0092.094] CreateFileW (lpFileName="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Programs\\Java\\About Java.lnk" (normalized: "c:\\users\\all users\\microsoft\\windows\\start menu\\programs\\java\\about java.lnk"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x178 [0092.094] GetFileType (hFile=0x178) returned 0x1 [0092.094] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e51c) returned 1 [0092.094] GetFileType (hFile=0x178) returned 0x1 [0092.094] GetFileSize (in: hFile=0x178, lpFileSizeHigh=0x31e628 | out: lpFileSizeHigh=0x31e628*=0x0) returned 0x7d0 [0092.094] ReadFile (in: hFile=0x178, lpBuffer=0x2712ec4, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x31e5d4, lpOverlapped=0x0 | out: lpBuffer=0x2712ec4*, lpNumberOfBytesRead=0x31e5d4*=0x7d0, lpOverlapped=0x0) returned 1 [0092.095] CloseHandle (hObject=0x178) returned 1 [0092.115] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Programs\\Java\\About Java.lnk", nBufferLength=0x105, lpBuffer=0x31e018, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Programs\\Java\\About Java.lnk", lpFilePart=0x0) returned 0x4c [0092.115] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e50c) returned 1 [0092.115] CreateFileW (lpFileName="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Programs\\Java\\About Java.lnk" (normalized: "c:\\users\\all users\\microsoft\\windows\\start menu\\programs\\java\\about java.lnk"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x178 [0092.116] GetFileType (hFile=0x178) returned 0x1 [0092.116] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e508) returned 1 [0092.116] GetFileType (hFile=0x178) returned 0x1 [0092.116] WriteFile (in: hFile=0x178, lpBuffer=0x2763554*, nNumberOfBytesToWrite=0x7e0, lpNumberOfBytesWritten=0x31e59c, lpOverlapped=0x0 | out: lpBuffer=0x2763554*, lpNumberOfBytesWritten=0x31e59c*=0x7e0, lpOverlapped=0x0) returned 1 [0092.117] CloseHandle (hObject=0x178) returned 1 [0092.117] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Programs\\Java\\About Java.lnk", nBufferLength=0x105, lpBuffer=0x31e14c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Programs\\Java\\About Java.lnk", lpFilePart=0x0) returned 0x4c [0092.117] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Programs\\Java\\About Java.lnk", nBufferLength=0x105, lpBuffer=0x31e14c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Programs\\Java\\About Java.lnk", lpFilePart=0x0) returned 0x4c [0092.117] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e5ac) returned 1 [0092.117] GetFileAttributesExW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Programs\\Java\\About Java.lnk" (normalized: "c:\\users\\all users\\microsoft\\windows\\start menu\\programs\\java\\about java.lnk"), fInfoLevelId=0x0, lpFileInformation=0x31e628 | out: lpFileInformation=0x31e628*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x762ca4e0, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x762ca4e0, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x1a5859a0, ftLastWriteTime.dwHighDateTime=0x1d6eb7f, nFileSizeHigh=0x0, nFileSizeLow=0x7e0)) returned 1 [0092.118] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e5a8) returned 1 [0092.118] MoveFileW (lpExistingFileName="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Programs\\Java\\About Java.lnk" (normalized: "c:\\users\\all users\\microsoft\\windows\\start menu\\programs\\java\\about java.lnk"), lpNewFileName="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Programs\\Java\\About Java.lnk" (normalized: "c:\\users\\all users\\microsoft\\windows\\start menu\\programs\\java\\about java.lnk")) returned 1 [0092.118] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Programs\\Java\\Check For Updates.lnk", nBufferLength=0x105, lpBuffer=0x31e02c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Programs\\Java\\Check For Updates.lnk", lpFilePart=0x0) returned 0x53 [0092.118] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e520) returned 1 [0092.118] CreateFileW (lpFileName="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Programs\\Java\\Check For Updates.lnk" (normalized: "c:\\users\\all users\\microsoft\\windows\\start menu\\programs\\java\\check for updates.lnk"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x178 [0092.119] GetFileType (hFile=0x178) returned 0x1 [0092.119] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e51c) returned 1 [0092.119] GetFileType (hFile=0x178) returned 0x1 [0092.119] GetFileSize (in: hFile=0x178, lpFileSizeHigh=0x31e628 | out: lpFileSizeHigh=0x31e628*=0x0) returned 0x7f0 [0092.119] ReadFile (in: hFile=0x178, lpBuffer=0x276500c, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x31e5d4, lpOverlapped=0x0 | out: lpBuffer=0x276500c*, lpNumberOfBytesRead=0x31e5d4*=0x7f0, lpOverlapped=0x0) returned 1 [0092.119] CloseHandle (hObject=0x178) returned 1 [0092.133] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Programs\\Java\\Check For Updates.lnk", nBufferLength=0x105, lpBuffer=0x31e018, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Programs\\Java\\Check For Updates.lnk", lpFilePart=0x0) returned 0x53 [0092.133] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e50c) returned 1 [0092.133] CreateFileW (lpFileName="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Programs\\Java\\Check For Updates.lnk" (normalized: "c:\\users\\all users\\microsoft\\windows\\start menu\\programs\\java\\check for updates.lnk"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x178 [0092.134] GetFileType (hFile=0x178) returned 0x1 [0092.134] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e508) returned 1 [0092.134] GetFileType (hFile=0x178) returned 0x1 [0092.134] WriteFile (in: hFile=0x178, lpBuffer=0x27b5754*, nNumberOfBytesToWrite=0x800, lpNumberOfBytesWritten=0x31e59c, lpOverlapped=0x0 | out: lpBuffer=0x27b5754*, lpNumberOfBytesWritten=0x31e59c*=0x800, lpOverlapped=0x0) returned 1 [0092.135] CloseHandle (hObject=0x178) returned 1 [0092.135] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Programs\\Java\\Check For Updates.lnk", nBufferLength=0x105, lpBuffer=0x31e14c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Programs\\Java\\Check For Updates.lnk", lpFilePart=0x0) returned 0x53 [0092.135] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Programs\\Java\\Check For Updates.lnk", nBufferLength=0x105, lpBuffer=0x31e14c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Programs\\Java\\Check For Updates.lnk", lpFilePart=0x0) returned 0x53 [0092.135] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e5ac) returned 1 [0092.135] GetFileAttributesExW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Programs\\Java\\Check For Updates.lnk" (normalized: "c:\\users\\all users\\microsoft\\windows\\start menu\\programs\\java\\check for updates.lnk"), fInfoLevelId=0x0, lpFileInformation=0x31e628 | out: lpFileInformation=0x31e628*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x762ca4e0, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x762ca4e0, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x1a5d1c60, ftLastWriteTime.dwHighDateTime=0x1d6eb7f, nFileSizeHigh=0x0, nFileSizeLow=0x800)) returned 1 [0092.135] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e5a8) returned 1 [0092.135] MoveFileW (lpExistingFileName="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Programs\\Java\\Check For Updates.lnk" (normalized: "c:\\users\\all users\\microsoft\\windows\\start menu\\programs\\java\\check for updates.lnk"), lpNewFileName="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Programs\\Java\\Check For Updates.lnk" (normalized: "c:\\users\\all users\\microsoft\\windows\\start menu\\programs\\java\\check for updates.lnk")) returned 1 [0092.136] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Programs\\Java\\Configure Java.lnk", nBufferLength=0x105, lpBuffer=0x31e02c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Programs\\Java\\Configure Java.lnk", lpFilePart=0x0) returned 0x50 [0092.136] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e520) returned 1 [0092.136] CreateFileW (lpFileName="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Programs\\Java\\Configure Java.lnk" (normalized: "c:\\users\\all users\\microsoft\\windows\\start menu\\programs\\java\\configure java.lnk"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x178 [0092.136] GetFileType (hFile=0x178) returned 0x1 [0092.136] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e51c) returned 1 [0092.136] GetFileType (hFile=0x178) returned 0x1 [0092.136] GetFileSize (in: hFile=0x178, lpFileSizeHigh=0x31e628 | out: lpFileSizeHigh=0x31e628*=0x0) returned 0x7c0 [0092.137] ReadFile (in: hFile=0x178, lpBuffer=0x27b71ec, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x31e5d4, lpOverlapped=0x0 | out: lpBuffer=0x27b71ec*, lpNumberOfBytesRead=0x31e5d4*=0x7c0, lpOverlapped=0x0) returned 1 [0092.137] CloseHandle (hObject=0x178) returned 1 [0092.151] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Programs\\Java\\Configure Java.lnk", nBufferLength=0x105, lpBuffer=0x31e018, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Programs\\Java\\Configure Java.lnk", lpFilePart=0x0) returned 0x50 [0092.151] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e50c) returned 1 [0092.151] CreateFileW (lpFileName="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Programs\\Java\\Configure Java.lnk" (normalized: "c:\\users\\all users\\microsoft\\windows\\start menu\\programs\\java\\configure java.lnk"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x178 [0092.152] GetFileType (hFile=0x178) returned 0x1 [0092.152] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e508) returned 1 [0092.152] GetFileType (hFile=0x178) returned 0x1 [0092.152] WriteFile (in: hFile=0x178, lpBuffer=0x280783c*, nNumberOfBytesToWrite=0x7d0, lpNumberOfBytesWritten=0x31e59c, lpOverlapped=0x0 | out: lpBuffer=0x280783c*, lpNumberOfBytesWritten=0x31e59c*=0x7d0, lpOverlapped=0x0) returned 1 [0092.153] CloseHandle (hObject=0x178) returned 1 [0092.153] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Programs\\Java\\Configure Java.lnk", nBufferLength=0x105, lpBuffer=0x31e14c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Programs\\Java\\Configure Java.lnk", lpFilePart=0x0) returned 0x50 [0092.153] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Programs\\Java\\Configure Java.lnk", nBufferLength=0x105, lpBuffer=0x31e14c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Programs\\Java\\Configure Java.lnk", lpFilePart=0x0) returned 0x50 [0092.153] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e5ac) returned 1 [0092.153] GetFileAttributesExW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Programs\\Java\\Configure Java.lnk" (normalized: "c:\\users\\all users\\microsoft\\windows\\start menu\\programs\\java\\configure java.lnk"), fInfoLevelId=0x0, lpFileInformation=0x31e628 | out: lpFileInformation=0x31e628*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x762a4380, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x762a4380, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x1a5f7dc0, ftLastWriteTime.dwHighDateTime=0x1d6eb7f, nFileSizeHigh=0x0, nFileSizeLow=0x7d0)) returned 1 [0092.153] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e5a8) returned 1 [0092.153] MoveFileW (lpExistingFileName="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Programs\\Java\\Configure Java.lnk" (normalized: "c:\\users\\all users\\microsoft\\windows\\start menu\\programs\\java\\configure java.lnk"), lpNewFileName="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Programs\\Java\\Configure Java.lnk" (normalized: "c:\\users\\all users\\microsoft\\windows\\start menu\\programs\\java\\configure java.lnk")) returned 1 [0092.154] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Programs\\Java\\Get Help.lnk", nBufferLength=0x105, lpBuffer=0x31e02c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Programs\\Java\\Get Help.lnk", lpFilePart=0x0) returned 0x4a [0092.154] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e520) returned 1 [0092.154] CreateFileW (lpFileName="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Programs\\Java\\Get Help.lnk" (normalized: "c:\\users\\all users\\microsoft\\windows\\start menu\\programs\\java\\get help.lnk"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x178 [0092.154] GetFileType (hFile=0x178) returned 0x1 [0092.154] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e51c) returned 1 [0092.154] GetFileType (hFile=0x178) returned 0x1 [0092.154] GetFileSize (in: hFile=0x178, lpFileSizeHigh=0x31e628 | out: lpFileSizeHigh=0x31e628*=0x0) returned 0x4c0 [0092.154] ReadFile (in: hFile=0x178, lpBuffer=0x2808fb4, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x31e5d4, lpOverlapped=0x0 | out: lpBuffer=0x2808fb4*, lpNumberOfBytesRead=0x31e5d4*=0x4c0, lpOverlapped=0x0) returned 1 [0092.155] CloseHandle (hObject=0x178) returned 1 [0092.196] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Programs\\Java\\Get Help.lnk", nBufferLength=0x105, lpBuffer=0x31e018, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Programs\\Java\\Get Help.lnk", lpFilePart=0x0) returned 0x4a [0092.196] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e50c) returned 1 [0092.196] CreateFileW (lpFileName="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Programs\\Java\\Get Help.lnk" (normalized: "c:\\users\\all users\\microsoft\\windows\\start menu\\programs\\java\\get help.lnk"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x178 [0092.197] GetFileType (hFile=0x178) returned 0x1 [0092.197] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e508) returned 1 [0092.197] GetFileType (hFile=0x178) returned 0x1 [0092.197] WriteFile (in: hFile=0x178, lpBuffer=0x2659e98*, nNumberOfBytesToWrite=0x4d0, lpNumberOfBytesWritten=0x31e59c, lpOverlapped=0x0 | out: lpBuffer=0x2659e98*, lpNumberOfBytesWritten=0x31e59c*=0x4d0, lpOverlapped=0x0) returned 1 [0092.198] CloseHandle (hObject=0x178) returned 1 [0092.198] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Programs\\Java\\Get Help.lnk", nBufferLength=0x105, lpBuffer=0x31e14c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Programs\\Java\\Get Help.lnk", lpFilePart=0x0) returned 0x4a [0092.199] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Programs\\Java\\Get Help.lnk", nBufferLength=0x105, lpBuffer=0x31e14c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Programs\\Java\\Get Help.lnk", lpFilePart=0x0) returned 0x4a [0092.199] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e5ac) returned 1 [0092.199] GetFileAttributesExW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Programs\\Java\\Get Help.lnk" (normalized: "c:\\users\\all users\\microsoft\\windows\\start menu\\programs\\java\\get help.lnk"), fInfoLevelId=0x0, lpFileInformation=0x31e628 | out: lpFileInformation=0x31e628*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7591eb80, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x7591eb80, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x1a66a1e0, ftLastWriteTime.dwHighDateTime=0x1d6eb7f, nFileSizeHigh=0x0, nFileSizeLow=0x4d0)) returned 1 [0092.199] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e5a8) returned 1 [0092.199] MoveFileW (lpExistingFileName="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Programs\\Java\\Get Help.lnk" (normalized: "c:\\users\\all users\\microsoft\\windows\\start menu\\programs\\java\\get help.lnk"), lpNewFileName="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Programs\\Java\\Get Help.lnk" (normalized: "c:\\users\\all users\\microsoft\\windows\\start menu\\programs\\java\\get help.lnk")) returned 1 [0092.199] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Programs\\Java\\Visit Java.com.lnk", nBufferLength=0x105, lpBuffer=0x31e02c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Programs\\Java\\Visit Java.com.lnk", lpFilePart=0x0) returned 0x50 [0092.199] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e520) returned 1 [0092.200] CreateFileW (lpFileName="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Programs\\Java\\Visit Java.com.lnk" (normalized: "c:\\users\\all users\\microsoft\\windows\\start menu\\programs\\java\\visit java.com.lnk"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x178 [0092.200] GetFileType (hFile=0x178) returned 0x1 [0092.200] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e51c) returned 1 [0092.200] GetFileType (hFile=0x178) returned 0x1 [0092.200] GetFileSize (in: hFile=0x178, lpFileSizeHigh=0x31e628 | out: lpFileSizeHigh=0x31e628*=0x0) returned 0x460 [0092.200] ReadFile (in: hFile=0x178, lpBuffer=0x265b5b0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x31e5d4, lpOverlapped=0x0 | out: lpBuffer=0x265b5b0*, lpNumberOfBytesRead=0x31e5d4*=0x460, lpOverlapped=0x0) returned 1 [0092.201] CloseHandle (hObject=0x178) returned 1 [0092.214] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Programs\\Java\\Visit Java.com.lnk", nBufferLength=0x105, lpBuffer=0x31e018, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Programs\\Java\\Visit Java.com.lnk", lpFilePart=0x0) returned 0x50 [0092.214] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e50c) returned 1 [0092.214] CreateFileW (lpFileName="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Programs\\Java\\Visit Java.com.lnk" (normalized: "c:\\users\\all users\\microsoft\\windows\\start menu\\programs\\java\\visit java.com.lnk"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x178 [0092.215] GetFileType (hFile=0x178) returned 0x1 [0092.215] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e508) returned 1 [0092.215] GetFileType (hFile=0x178) returned 0x1 [0092.215] WriteFile (in: hFile=0x178, lpBuffer=0x26aac7c*, nNumberOfBytesToWrite=0x470, lpNumberOfBytesWritten=0x31e59c, lpOverlapped=0x0 | out: lpBuffer=0x26aac7c*, lpNumberOfBytesWritten=0x31e59c*=0x470, lpOverlapped=0x0) returned 1 [0092.216] CloseHandle (hObject=0x178) returned 1 [0092.224] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Programs\\Java\\Visit Java.com.lnk", nBufferLength=0x105, lpBuffer=0x31e14c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Programs\\Java\\Visit Java.com.lnk", lpFilePart=0x0) returned 0x50 [0092.224] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Programs\\Java\\Visit Java.com.lnk", nBufferLength=0x105, lpBuffer=0x31e14c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Programs\\Java\\Visit Java.com.lnk", lpFilePart=0x0) returned 0x50 [0092.224] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e5ac) returned 1 [0092.224] GetFileAttributesExW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Programs\\Java\\Visit Java.com.lnk" (normalized: "c:\\users\\all users\\microsoft\\windows\\start menu\\programs\\java\\visit java.com.lnk"), fInfoLevelId=0x0, lpFileInformation=0x31e628 | out: lpFileInformation=0x31e628*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x758f8a20, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x758f8a20, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x1a690340, ftLastWriteTime.dwHighDateTime=0x1d6eb7f, nFileSizeHigh=0x0, nFileSizeLow=0x470)) returned 1 [0092.224] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e5a8) returned 1 [0092.224] MoveFileW (lpExistingFileName="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Programs\\Java\\Visit Java.com.lnk" (normalized: "c:\\users\\all users\\microsoft\\windows\\start menu\\programs\\java\\visit java.com.lnk"), lpNewFileName="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Programs\\Java\\Visit Java.com.lnk" (normalized: "c:\\users\\all users\\microsoft\\windows\\start menu\\programs\\java\\visit java.com.lnk")) returned 1 [0092.225] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e654) returned 1 [0092.225] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Programs\\Maintenance", nBufferLength=0x105, lpBuffer=0x31e15c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Programs\\Maintenance", lpFilePart=0x0) returned 0x44 [0092.225] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Programs\\Maintenance\\", nBufferLength=0x105, lpBuffer=0x31e130, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Programs\\Maintenance\\", lpFilePart=0x0) returned 0x45 [0092.225] FindFirstFileW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Programs\\Maintenance\\*", lpFindFileData=0x31e37c | out: lpFindFileData=0x31e37c*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0xfd9dbcac, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x8ab46fc5, ftLastAccessTime.dwHighDateTime=0x1ca043f, ftLastWriteTime.dwLowDateTime=0x8ab6d126, ftLastWriteTime.dwHighDateTime=0x1ca043f, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5107ae0 [0092.226] FindNextFileW (in: hFindFile=0x5107ae0, lpFindFileData=0x31e38c | out: lpFindFileData=0x31e38c*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0xfd9dbcac, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x8ab46fc5, ftLastAccessTime.dwHighDateTime=0x1ca043f, ftLastWriteTime.dwLowDateTime=0x8ab6d126, ftLastWriteTime.dwHighDateTime=0x1ca043f, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0092.226] FindNextFileW (in: hFindFile=0x5107ae0, lpFindFileData=0x31e38c | out: lpFindFileData=0x31e38c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8a1030d3, ftCreationTime.dwHighDateTime=0x1ca043f, ftLastAccessTime.dwLowDateTime=0x8a1030d3, ftLastAccessTime.dwHighDateTime=0x1ca043f, ftLastWriteTime.dwLowDateTime=0x9de5520, ftLastWriteTime.dwHighDateTime=0x1d6eb7f, nFileSizeHigh=0x0, nFileSizeLow=0x520, dwReserved0=0x0, dwReserved1=0x0, cFileName="Backup and Restore Center.lnk", cAlternateFileName="BACKUP~1.LNK")) returned 1 [0092.226] FindNextFileW (in: hFindFile=0x5107ae0, lpFindFileData=0x31e38c | out: lpFindFileData=0x31e38c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x89a77447, ftCreationTime.dwHighDateTime=0x1ca043f, ftLastAccessTime.dwLowDateTime=0x89a77447, ftLastAccessTime.dwHighDateTime=0x1ca043f, ftLastWriteTime.dwLowDateTime=0x9e0b680, ftLastWriteTime.dwHighDateTime=0x1d6eb7f, nFileSizeHigh=0x0, nFileSizeLow=0x4f0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Create Recovery Disc.lnk", cAlternateFileName="CREATE~1.LNK")) returned 1 [0092.226] FindNextFileW (in: hFindFile=0x5107ae0, lpFindFileData=0x31e38c | out: lpFindFileData=0x31e38c*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0xec13fc0c, ftCreationTime.dwHighDateTime=0x1ca042b, ftLastAccessTime.dwLowDateTime=0xec13fc0c, ftLastAccessTime.dwHighDateTime=0x1ca042b, ftLastWriteTime.dwLowDateTime=0x8ab6d126, ftLastWriteTime.dwHighDateTime=0x1ca043f, nFileSizeHigh=0x0, nFileSizeLow=0x25e, dwReserved0=0x0, dwReserved1=0x0, cFileName="Desktop.ini", cAlternateFileName="")) returned 1 [0092.226] FindNextFileW (in: hFindFile=0x5107ae0, lpFindFileData=0x31e38c | out: lpFindFileData=0x31e38c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8ab46fc5, ftCreationTime.dwHighDateTime=0x1ca043f, ftLastAccessTime.dwLowDateTime=0x8ab46fc5, ftLastAccessTime.dwHighDateTime=0x1ca043f, ftLastWriteTime.dwLowDateTime=0x9e7daa0, ftLastWriteTime.dwHighDateTime=0x1d6eb7f, nFileSizeHigh=0x0, nFileSizeLow=0x4c0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Remote Assistance.lnk", cAlternateFileName="REMOTE~1.LNK")) returned 1 [0092.226] FindNextFileW (in: hFindFile=0x5107ae0, lpFindFileData=0x31e38c | out: lpFindFileData=0x31e38c*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0092.226] FindClose (in: hFindFile=0x5107ae0 | out: hFindFile=0x5107ae0) returned 1 [0092.226] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e614) returned 1 [0092.226] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e620) returned 1 [0092.226] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e654) returned 1 [0092.226] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Programs\\Maintenance", nBufferLength=0x105, lpBuffer=0x31e15c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Programs\\Maintenance", lpFilePart=0x0) returned 0x44 [0092.227] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Programs\\Maintenance\\", nBufferLength=0x105, lpBuffer=0x31e130, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Programs\\Maintenance\\", lpFilePart=0x0) returned 0x45 [0092.227] FindFirstFileW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Programs\\Maintenance\\*", lpFindFileData=0x31e37c | out: lpFindFileData=0x31e37c*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0xfd9dbcac, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x8ab46fc5, ftLastAccessTime.dwHighDateTime=0x1ca043f, ftLastWriteTime.dwLowDateTime=0x8ab6d126, ftLastWriteTime.dwHighDateTime=0x1ca043f, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5107ae0 [0092.227] FindNextFileW (in: hFindFile=0x5107ae0, lpFindFileData=0x31e38c | out: lpFindFileData=0x31e38c*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0xfd9dbcac, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x8ab46fc5, ftLastAccessTime.dwHighDateTime=0x1ca043f, ftLastWriteTime.dwLowDateTime=0x8ab6d126, ftLastWriteTime.dwHighDateTime=0x1ca043f, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0092.227] FindNextFileW (in: hFindFile=0x5107ae0, lpFindFileData=0x31e38c | out: lpFindFileData=0x31e38c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8a1030d3, ftCreationTime.dwHighDateTime=0x1ca043f, ftLastAccessTime.dwLowDateTime=0x8a1030d3, ftLastAccessTime.dwHighDateTime=0x1ca043f, ftLastWriteTime.dwLowDateTime=0x9de5520, ftLastWriteTime.dwHighDateTime=0x1d6eb7f, nFileSizeHigh=0x0, nFileSizeLow=0x520, dwReserved0=0x0, dwReserved1=0x0, cFileName="Backup and Restore Center.lnk", cAlternateFileName="BACKUP~1.LNK")) returned 1 [0092.258] FindNextFileW (in: hFindFile=0x5107ae0, lpFindFileData=0x31e38c | out: lpFindFileData=0x31e38c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x89a77447, ftCreationTime.dwHighDateTime=0x1ca043f, ftLastAccessTime.dwLowDateTime=0x89a77447, ftLastAccessTime.dwHighDateTime=0x1ca043f, ftLastWriteTime.dwLowDateTime=0x9e0b680, ftLastWriteTime.dwHighDateTime=0x1d6eb7f, nFileSizeHigh=0x0, nFileSizeLow=0x4f0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Create Recovery Disc.lnk", cAlternateFileName="CREATE~1.LNK")) returned 1 [0092.258] FindNextFileW (in: hFindFile=0x5107ae0, lpFindFileData=0x31e38c | out: lpFindFileData=0x31e38c*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0xec13fc0c, ftCreationTime.dwHighDateTime=0x1ca042b, ftLastAccessTime.dwLowDateTime=0xec13fc0c, ftLastAccessTime.dwHighDateTime=0x1ca042b, ftLastWriteTime.dwLowDateTime=0x8ab6d126, ftLastWriteTime.dwHighDateTime=0x1ca043f, nFileSizeHigh=0x0, nFileSizeLow=0x25e, dwReserved0=0x0, dwReserved1=0x0, cFileName="Desktop.ini", cAlternateFileName="")) returned 1 [0092.258] FindNextFileW (in: hFindFile=0x5107ae0, lpFindFileData=0x31e38c | out: lpFindFileData=0x31e38c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8ab46fc5, ftCreationTime.dwHighDateTime=0x1ca043f, ftLastAccessTime.dwLowDateTime=0x8ab46fc5, ftLastAccessTime.dwHighDateTime=0x1ca043f, ftLastWriteTime.dwLowDateTime=0x9e7daa0, ftLastWriteTime.dwHighDateTime=0x1d6eb7f, nFileSizeHigh=0x0, nFileSizeLow=0x4c0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Remote Assistance.lnk", cAlternateFileName="REMOTE~1.LNK")) returned 1 [0092.268] FindNextFileW (in: hFindFile=0x5107ae0, lpFindFileData=0x31e38c | out: lpFindFileData=0x31e38c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8ab46fc5, ftCreationTime.dwHighDateTime=0x1ca043f, ftLastAccessTime.dwLowDateTime=0x8ab46fc5, ftLastAccessTime.dwHighDateTime=0x1ca043f, ftLastWriteTime.dwLowDateTime=0x9e7daa0, ftLastWriteTime.dwHighDateTime=0x1d6eb7f, nFileSizeHigh=0x0, nFileSizeLow=0x4c0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Remote Assistance.lnk", cAlternateFileName="REMOTE~1.LNK")) returned 0 [0092.268] FindClose (in: hFindFile=0x5107ae0 | out: hFindFile=0x5107ae0) returned 1 [0092.268] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e614) returned 1 [0092.268] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e620) returned 1 [0092.268] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Programs\\Maintenance\\Backup and Restore Center.lnk", nBufferLength=0x105, lpBuffer=0x31e02c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Programs\\Maintenance\\Backup and Restore Center.lnk", lpFilePart=0x0) returned 0x62 [0092.268] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e520) returned 1 [0092.268] CreateFileW (lpFileName="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Programs\\Maintenance\\Backup and Restore Center.lnk" (normalized: "c:\\users\\all users\\microsoft\\windows\\start menu\\programs\\maintenance\\backup and restore center.lnk"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x178 [0092.268] GetFileType (hFile=0x178) returned 0x1 [0092.268] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e51c) returned 1 [0092.268] GetFileType (hFile=0x178) returned 0x1 [0092.268] GetFileSize (in: hFile=0x178, lpFileSizeHigh=0x31e628 | out: lpFileSizeHigh=0x31e628*=0x0) returned 0x520 [0092.268] ReadFile (in: hFile=0x178, lpBuffer=0x26aeb18, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x31e5d4, lpOverlapped=0x0 | out: lpBuffer=0x26aeb18*, lpNumberOfBytesRead=0x31e5d4*=0x520, lpOverlapped=0x0) returned 1 [0092.269] CloseHandle (hObject=0x178) returned 1 [0092.282] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Programs\\Maintenance\\Backup and Restore Center.lnk", nBufferLength=0x105, lpBuffer=0x31e018, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Programs\\Maintenance\\Backup and Restore Center.lnk", lpFilePart=0x0) returned 0x62 [0092.282] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e50c) returned 1 [0092.282] CreateFileW (lpFileName="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Programs\\Maintenance\\Backup and Restore Center.lnk" (normalized: "c:\\users\\all users\\microsoft\\windows\\start menu\\programs\\maintenance\\backup and restore center.lnk"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x178 [0092.283] GetFileType (hFile=0x178) returned 0x1 [0092.283] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e508) returned 1 [0092.283] GetFileType (hFile=0x178) returned 0x1 [0092.283] WriteFile (in: hFile=0x178, lpBuffer=0x26fe480*, nNumberOfBytesToWrite=0x530, lpNumberOfBytesWritten=0x31e59c, lpOverlapped=0x0 | out: lpBuffer=0x26fe480*, lpNumberOfBytesWritten=0x31e59c*=0x530, lpOverlapped=0x0) returned 1 [0092.284] CloseHandle (hObject=0x178) returned 1 [0092.285] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Programs\\Maintenance\\Backup and Restore Center.lnk", nBufferLength=0x105, lpBuffer=0x31e14c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Programs\\Maintenance\\Backup and Restore Center.lnk", lpFilePart=0x0) returned 0x62 [0092.285] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Programs\\Maintenance\\Backup and Restore Center.lnk", nBufferLength=0x105, lpBuffer=0x31e14c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Programs\\Maintenance\\Backup and Restore Center.lnk", lpFilePart=0x0) returned 0x62 [0092.285] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e5ac) returned 1 [0092.285] GetFileAttributesExW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Programs\\Maintenance\\Backup and Restore Center.lnk" (normalized: "c:\\users\\all users\\microsoft\\windows\\start menu\\programs\\maintenance\\backup and restore center.lnk"), fInfoLevelId=0x0, lpFileInformation=0x31e628 | out: lpFileInformation=0x31e628*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8a1030d3, ftCreationTime.dwHighDateTime=0x1ca043f, ftLastAccessTime.dwLowDateTime=0x8a1030d3, ftLastAccessTime.dwHighDateTime=0x1ca043f, ftLastWriteTime.dwLowDateTime=0x1a7288c0, ftLastWriteTime.dwHighDateTime=0x1d6eb7f, nFileSizeHigh=0x0, nFileSizeLow=0x530)) returned 1 [0092.285] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e5a8) returned 1 [0092.285] MoveFileW (lpExistingFileName="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Programs\\Maintenance\\Backup and Restore Center.lnk" (normalized: "c:\\users\\all users\\microsoft\\windows\\start menu\\programs\\maintenance\\backup and restore center.lnk"), lpNewFileName="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Programs\\Maintenance\\Backup and Restore Center.lnk" (normalized: "c:\\users\\all users\\microsoft\\windows\\start menu\\programs\\maintenance\\backup and restore center.lnk")) returned 1 [0092.286] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Programs\\Maintenance\\Create Recovery Disc.lnk", nBufferLength=0x105, lpBuffer=0x31e02c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Programs\\Maintenance\\Create Recovery Disc.lnk", lpFilePart=0x0) returned 0x5d [0092.286] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e520) returned 1 [0092.286] CreateFileW (lpFileName="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Programs\\Maintenance\\Create Recovery Disc.lnk" (normalized: "c:\\users\\all users\\microsoft\\windows\\start menu\\programs\\maintenance\\create recovery disc.lnk"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x178 [0092.286] GetFileType (hFile=0x178) returned 0x1 [0092.286] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e51c) returned 1 [0092.286] GetFileType (hFile=0x178) returned 0x1 [0092.286] GetFileSize (in: hFile=0x178, lpFileSizeHigh=0x31e628 | out: lpFileSizeHigh=0x31e628*=0x0) returned 0x4f0 [0092.286] ReadFile (in: hFile=0x178, lpBuffer=0x26ffcac, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x31e5d4, lpOverlapped=0x0 | out: lpBuffer=0x26ffcac*, lpNumberOfBytesRead=0x31e5d4*=0x4f0, lpOverlapped=0x0) returned 1 [0092.286] CloseHandle (hObject=0x178) returned 1 [0092.300] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Programs\\Maintenance\\Create Recovery Disc.lnk", nBufferLength=0x105, lpBuffer=0x31e018, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Programs\\Maintenance\\Create Recovery Disc.lnk", lpFilePart=0x0) returned 0x5d [0092.300] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e50c) returned 1 [0092.300] CreateFileW (lpFileName="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Programs\\Maintenance\\Create Recovery Disc.lnk" (normalized: "c:\\users\\all users\\microsoft\\windows\\start menu\\programs\\maintenance\\create recovery disc.lnk"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x178 [0092.301] GetFileType (hFile=0x178) returned 0x1 [0092.301] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e508) returned 1 [0092.301] GetFileType (hFile=0x178) returned 0x1 [0092.301] WriteFile (in: hFile=0x178, lpBuffer=0x274f510*, nNumberOfBytesToWrite=0x500, lpNumberOfBytesWritten=0x31e59c, lpOverlapped=0x0 | out: lpBuffer=0x274f510*, lpNumberOfBytesWritten=0x31e59c*=0x500, lpOverlapped=0x0) returned 1 [0092.302] CloseHandle (hObject=0x178) returned 1 [0092.302] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Programs\\Maintenance\\Create Recovery Disc.lnk", nBufferLength=0x105, lpBuffer=0x31e14c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Programs\\Maintenance\\Create Recovery Disc.lnk", lpFilePart=0x0) returned 0x5d [0092.302] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Programs\\Maintenance\\Create Recovery Disc.lnk", nBufferLength=0x105, lpBuffer=0x31e14c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Programs\\Maintenance\\Create Recovery Disc.lnk", lpFilePart=0x0) returned 0x5d [0092.302] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e5ac) returned 1 [0092.302] GetFileAttributesExW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Programs\\Maintenance\\Create Recovery Disc.lnk" (normalized: "c:\\users\\all users\\microsoft\\windows\\start menu\\programs\\maintenance\\create recovery disc.lnk"), fInfoLevelId=0x0, lpFileInformation=0x31e628 | out: lpFileInformation=0x31e628*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x89a77447, ftCreationTime.dwHighDateTime=0x1ca043f, ftLastAccessTime.dwLowDateTime=0x89a77447, ftLastAccessTime.dwHighDateTime=0x1ca043f, ftLastWriteTime.dwLowDateTime=0x1a74ea20, ftLastWriteTime.dwHighDateTime=0x1d6eb7f, nFileSizeHigh=0x0, nFileSizeLow=0x500)) returned 1 [0092.302] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e5a8) returned 1 [0092.302] MoveFileW (lpExistingFileName="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Programs\\Maintenance\\Create Recovery Disc.lnk" (normalized: "c:\\users\\all users\\microsoft\\windows\\start menu\\programs\\maintenance\\create recovery disc.lnk"), lpNewFileName="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Programs\\Maintenance\\Create Recovery Disc.lnk" (normalized: "c:\\users\\all users\\microsoft\\windows\\start menu\\programs\\maintenance\\create recovery disc.lnk")) returned 1 [0092.303] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Programs\\Maintenance\\Remote Assistance.lnk", nBufferLength=0x105, lpBuffer=0x31e02c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Programs\\Maintenance\\Remote Assistance.lnk", lpFilePart=0x0) returned 0x5a [0092.303] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e520) returned 1 [0092.303] CreateFileW (lpFileName="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Programs\\Maintenance\\Remote Assistance.lnk" (normalized: "c:\\users\\all users\\microsoft\\windows\\start menu\\programs\\maintenance\\remote assistance.lnk"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x178 [0092.303] GetFileType (hFile=0x178) returned 0x1 [0092.303] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e51c) returned 1 [0092.303] GetFileType (hFile=0x178) returned 0x1 [0092.303] GetFileSize (in: hFile=0x178, lpFileSizeHigh=0x31e628 | out: lpFileSizeHigh=0x31e628*=0x0) returned 0x4c0 [0092.303] ReadFile (in: hFile=0x178, lpBuffer=0x2750d00, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x31e5d4, lpOverlapped=0x0 | out: lpBuffer=0x2750d00*, lpNumberOfBytesRead=0x31e5d4*=0x4c0, lpOverlapped=0x0) returned 1 [0092.303] CloseHandle (hObject=0x178) returned 1 [0092.317] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Programs\\Maintenance\\Remote Assistance.lnk", nBufferLength=0x105, lpBuffer=0x31e018, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Programs\\Maintenance\\Remote Assistance.lnk", lpFilePart=0x0) returned 0x5a [0092.317] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e50c) returned 1 [0092.317] CreateFileW (lpFileName="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Programs\\Maintenance\\Remote Assistance.lnk" (normalized: "c:\\users\\all users\\microsoft\\windows\\start menu\\programs\\maintenance\\remote assistance.lnk"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x178 [0092.318] GetFileType (hFile=0x178) returned 0x1 [0092.318] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e508) returned 1 [0092.318] GetFileType (hFile=0x178) returned 0x1 [0092.318] WriteFile (in: hFile=0x178, lpBuffer=0x27a0468*, nNumberOfBytesToWrite=0x4d0, lpNumberOfBytesWritten=0x31e59c, lpOverlapped=0x0 | out: lpBuffer=0x27a0468*, lpNumberOfBytesWritten=0x31e59c*=0x4d0, lpOverlapped=0x0) returned 1 [0092.319] CloseHandle (hObject=0x178) returned 1 [0092.319] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Programs\\Maintenance\\Remote Assistance.lnk", nBufferLength=0x105, lpBuffer=0x31e14c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Programs\\Maintenance\\Remote Assistance.lnk", lpFilePart=0x0) returned 0x5a [0092.319] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Programs\\Maintenance\\Remote Assistance.lnk", nBufferLength=0x105, lpBuffer=0x31e14c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Programs\\Maintenance\\Remote Assistance.lnk", lpFilePart=0x0) returned 0x5a [0092.319] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e5ac) returned 1 [0092.319] GetFileAttributesExW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Programs\\Maintenance\\Remote Assistance.lnk" (normalized: "c:\\users\\all users\\microsoft\\windows\\start menu\\programs\\maintenance\\remote assistance.lnk"), fInfoLevelId=0x0, lpFileInformation=0x31e628 | out: lpFileInformation=0x31e628*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8ab46fc5, ftCreationTime.dwHighDateTime=0x1ca043f, ftLastAccessTime.dwLowDateTime=0x8ab46fc5, ftLastAccessTime.dwHighDateTime=0x1ca043f, ftLastWriteTime.dwLowDateTime=0x1a774b80, ftLastWriteTime.dwHighDateTime=0x1d6eb7f, nFileSizeHigh=0x0, nFileSizeLow=0x4d0)) returned 1 [0092.320] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e5a8) returned 1 [0092.320] MoveFileW (lpExistingFileName="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Programs\\Maintenance\\Remote Assistance.lnk" (normalized: "c:\\users\\all users\\microsoft\\windows\\start menu\\programs\\maintenance\\remote assistance.lnk"), lpNewFileName="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Programs\\Maintenance\\Remote Assistance.lnk" (normalized: "c:\\users\\all users\\microsoft\\windows\\start menu\\programs\\maintenance\\remote assistance.lnk")) returned 1 [0092.320] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e654) returned 1 [0092.320] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Programs\\Microsoft Office", nBufferLength=0x105, lpBuffer=0x31e15c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Programs\\Microsoft Office", lpFilePart=0x0) returned 0x49 [0092.320] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Programs\\Microsoft Office\\", nBufferLength=0x105, lpBuffer=0x31e130, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Programs\\Microsoft Office\\", lpFilePart=0x0) returned 0x4a [0092.320] FindFirstFileW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Programs\\Microsoft Office\\*", lpFindFileData=0x31e37c | out: lpFindFileData=0x31e37c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x77f53bd0, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0xc11c60a0, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0xc11c60a0, ftLastWriteTime.dwHighDateTime=0x1d305f1, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5107a60 [0092.321] FindNextFileW (in: hFindFile=0x5107a60, lpFindFileData=0x31e38c | out: lpFindFileData=0x31e38c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x77f53bd0, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0xc11c60a0, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0xc11c60a0, ftLastWriteTime.dwHighDateTime=0x1d305f1, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0092.321] FindNextFileW (in: hFindFile=0x5107a60, lpFindFileData=0x31e38c | out: lpFindFileData=0x31e38c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x780122b0, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x780122b0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x9ec9d60, ftLastWriteTime.dwHighDateTime=0x1d6eb7f, nFileSizeHigh=0x0, nFileSizeLow=0xb70, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft Access 2010.lnk", cAlternateFileName="MICROS~1.LNK")) returned 1 [0092.321] FindNextFileW (in: hFindFile=0x5107a60, lpFindFileData=0x31e38c | out: lpFindFileData=0x31e38c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x78038410, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x78038410, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x9eefec0, ftLastWriteTime.dwHighDateTime=0x1d6eb7f, nFileSizeHigh=0x0, nFileSizeLow=0xb90, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft Excel 2010.lnk", cAlternateFileName="MICROS~2.LNK")) returned 1 [0092.321] FindNextFileW (in: hFindFile=0x5107a60, lpFindFileData=0x31e38c | out: lpFindFileData=0x31e38c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7805e570, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x7805e570, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x9f16020, ftLastWriteTime.dwHighDateTime=0x1d6eb7f, nFileSizeHigh=0x0, nFileSizeLow=0xbf0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft InfoPath Designer 2010.lnk", cAlternateFileName="MIA4FF~1.LNK")) returned 1 [0092.321] FindNextFileW (in: hFindFile=0x5107a60, lpFindFileData=0x31e38c | out: lpFindFileData=0x31e38c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7805e570, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x7805e570, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x9f3c180, ftLastWriteTime.dwHighDateTime=0x1d6eb7f, nFileSizeHigh=0x0, nFileSizeLow=0xbe0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft InfoPath Filler 2010.lnk", cAlternateFileName="MICROS~4.LNK")) returned 1 [0092.321] FindNextFileW (in: hFindFile=0x5107a60, lpFindFileData=0x31e38c | out: lpFindFileData=0x31e38c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x77f53bd0, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0xc11c60a0, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0xc11c60a0, ftLastWriteTime.dwHighDateTime=0x1d305f1, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft Office 2010 Tools", cAlternateFileName="MICROS~1")) returned 1 [0092.322] FindNextFileW (in: hFindFile=0x5107a60, lpFindFileData=0x31e38c | out: lpFindFileData=0x31e38c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7805e570, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x780846d0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x9f622e0, ftLastWriteTime.dwHighDateTime=0x1d6eb7f, nFileSizeHigh=0x0, nFileSizeLow=0xb40, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft OneNote 2010.lnk", cAlternateFileName="MI807F~1.LNK")) returned 1 [0092.322] FindNextFileW (in: hFindFile=0x5107a60, lpFindFileData=0x31e38c | out: lpFindFileData=0x31e38c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x780846d0, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x780846d0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x9fd4700, ftLastWriteTime.dwHighDateTime=0x1d6eb7f, nFileSizeHigh=0x0, nFileSizeLow=0xbe0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft Outlook 2010.lnk", cAlternateFileName="MI4465~1.LNK")) returned 1 [0092.322] FindNextFileW (in: hFindFile=0x5107a60, lpFindFileData=0x31e38c | out: lpFindFileData=0x31e38c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x780846d0, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x780846d0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x9ffa860, ftLastWriteTime.dwHighDateTime=0x1d6eb7f, nFileSizeHigh=0x0, nFileSizeLow=0xb80, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft PowerPoint 2010.lnk", cAlternateFileName="MIAF79~1.LNK")) returned 1 [0092.322] FindNextFileW (in: hFindFile=0x5107a60, lpFindFileData=0x31e38c | out: lpFindFileData=0x31e38c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc11c60a0, ftCreationTime.dwHighDateTime=0x1d305f1, ftLastAccessTime.dwLowDateTime=0xc11c60a0, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0xa046b20, ftLastWriteTime.dwHighDateTime=0x1d6eb7f, nFileSizeHigh=0x0, nFileSizeLow=0xb80, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft Project 2010.lnk", cAlternateFileName="MI6860~1.LNK")) returned 1 [0092.322] FindNextFileW (in: hFindFile=0x5107a60, lpFindFileData=0x31e38c | out: lpFindFileData=0x31e38c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x780846d0, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x780846d0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xa06cc80, ftLastWriteTime.dwHighDateTime=0x1d6eb7f, nFileSizeHigh=0x0, nFileSizeLow=0xbf0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft Publisher 2010.lnk", cAlternateFileName="MI260D~1.LNK")) returned 1 [0092.322] FindNextFileW (in: hFindFile=0x5107a60, lpFindFileData=0x31e38c | out: lpFindFileData=0x31e38c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x78038410, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x78038410, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xa092de0, ftLastWriteTime.dwHighDateTime=0x1d6eb7f, nFileSizeHigh=0x0, nFileSizeLow=0xbf0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft SharePoint Workspace 2010.lnk", cAlternateFileName="MICROS~3.LNK")) returned 1 [0092.322] FindNextFileW (in: hFindFile=0x5107a60, lpFindFileData=0x31e38c | out: lpFindFileData=0x31e38c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8735be00, ftCreationTime.dwHighDateTime=0x1d305eb, ftLastAccessTime.dwLowDateTime=0x8735be00, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0xa0b8f40, ftLastWriteTime.dwHighDateTime=0x1d6eb7f, nFileSizeHigh=0x0, nFileSizeLow=0xad0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft Visio 2010.lnk", cAlternateFileName="MI7E65~1.LNK")) returned 1 [0092.322] FindNextFileW (in: hFindFile=0x5107a60, lpFindFileData=0x31e38c | out: lpFindFileData=0x31e38c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x780aa830, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x780aa830, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xa12b360, ftLastWriteTime.dwHighDateTime=0x1d6eb7f, nFileSizeHigh=0x0, nFileSizeLow=0xbd0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft Word 2010.lnk", cAlternateFileName="MI109D~1.LNK")) returned 1 [0092.323] FindNextFileW (in: hFindFile=0x5107a60, lpFindFileData=0x31e38c | out: lpFindFileData=0x31e38c*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0092.323] FindClose (in: hFindFile=0x5107a60 | out: hFindFile=0x5107a60) returned 1 [0092.323] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e614) returned 1 [0092.323] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e620) returned 1 [0092.323] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e654) returned 1 [0092.323] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Programs\\Microsoft Office", nBufferLength=0x105, lpBuffer=0x31e15c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Programs\\Microsoft Office", lpFilePart=0x0) returned 0x49 [0092.323] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Programs\\Microsoft Office\\", nBufferLength=0x105, lpBuffer=0x31e130, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Programs\\Microsoft Office\\", lpFilePart=0x0) returned 0x4a [0092.323] FindFirstFileW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Programs\\Microsoft Office\\*", lpFindFileData=0x31e37c | out: lpFindFileData=0x31e37c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x77f53bd0, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0xc11c60a0, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0xc11c60a0, ftLastWriteTime.dwHighDateTime=0x1d305f1, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5107a60 [0092.323] FindNextFileW (in: hFindFile=0x5107a60, lpFindFileData=0x31e38c | out: lpFindFileData=0x31e38c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x77f53bd0, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0xc11c60a0, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0xc11c60a0, ftLastWriteTime.dwHighDateTime=0x1d305f1, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0092.323] FindNextFileW (in: hFindFile=0x5107a60, lpFindFileData=0x31e38c | out: lpFindFileData=0x31e38c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x780122b0, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x780122b0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x9ec9d60, ftLastWriteTime.dwHighDateTime=0x1d6eb7f, nFileSizeHigh=0x0, nFileSizeLow=0xb70, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft Access 2010.lnk", cAlternateFileName="MICROS~1.LNK")) returned 1 [0092.324] FindNextFileW (in: hFindFile=0x5107a60, lpFindFileData=0x31e38c | out: lpFindFileData=0x31e38c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x78038410, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x78038410, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x9eefec0, ftLastWriteTime.dwHighDateTime=0x1d6eb7f, nFileSizeHigh=0x0, nFileSizeLow=0xb90, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft Excel 2010.lnk", cAlternateFileName="MICROS~2.LNK")) returned 1 [0092.324] FindNextFileW (in: hFindFile=0x5107a60, lpFindFileData=0x31e38c | out: lpFindFileData=0x31e38c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7805e570, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x7805e570, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x9f16020, ftLastWriteTime.dwHighDateTime=0x1d6eb7f, nFileSizeHigh=0x0, nFileSizeLow=0xbf0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft InfoPath Designer 2010.lnk", cAlternateFileName="MIA4FF~1.LNK")) returned 1 [0092.324] FindNextFileW (in: hFindFile=0x5107a60, lpFindFileData=0x31e38c | out: lpFindFileData=0x31e38c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7805e570, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x7805e570, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x9f3c180, ftLastWriteTime.dwHighDateTime=0x1d6eb7f, nFileSizeHigh=0x0, nFileSizeLow=0xbe0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft InfoPath Filler 2010.lnk", cAlternateFileName="MICROS~4.LNK")) returned 1 [0092.324] FindNextFileW (in: hFindFile=0x5107a60, lpFindFileData=0x31e38c | out: lpFindFileData=0x31e38c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x77f53bd0, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0xc11c60a0, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0xc11c60a0, ftLastWriteTime.dwHighDateTime=0x1d305f1, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft Office 2010 Tools", cAlternateFileName="MICROS~1")) returned 1 [0092.324] FindNextFileW (in: hFindFile=0x5107a60, lpFindFileData=0x31e38c | out: lpFindFileData=0x31e38c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7805e570, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x780846d0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x9f622e0, ftLastWriteTime.dwHighDateTime=0x1d6eb7f, nFileSizeHigh=0x0, nFileSizeLow=0xb40, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft OneNote 2010.lnk", cAlternateFileName="MI807F~1.LNK")) returned 1 [0092.324] FindNextFileW (in: hFindFile=0x5107a60, lpFindFileData=0x31e38c | out: lpFindFileData=0x31e38c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x780846d0, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x780846d0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x9fd4700, ftLastWriteTime.dwHighDateTime=0x1d6eb7f, nFileSizeHigh=0x0, nFileSizeLow=0xbe0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft Outlook 2010.lnk", cAlternateFileName="MI4465~1.LNK")) returned 1 [0092.324] FindNextFileW (in: hFindFile=0x5107a60, lpFindFileData=0x31e38c | out: lpFindFileData=0x31e38c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x780846d0, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x780846d0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x9ffa860, ftLastWriteTime.dwHighDateTime=0x1d6eb7f, nFileSizeHigh=0x0, nFileSizeLow=0xb80, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft PowerPoint 2010.lnk", cAlternateFileName="MIAF79~1.LNK")) returned 1 [0092.325] FindNextFileW (in: hFindFile=0x5107a60, lpFindFileData=0x31e38c | out: lpFindFileData=0x31e38c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc11c60a0, ftCreationTime.dwHighDateTime=0x1d305f1, ftLastAccessTime.dwLowDateTime=0xc11c60a0, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0xa046b20, ftLastWriteTime.dwHighDateTime=0x1d6eb7f, nFileSizeHigh=0x0, nFileSizeLow=0xb80, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft Project 2010.lnk", cAlternateFileName="MI6860~1.LNK")) returned 1 [0092.325] FindNextFileW (in: hFindFile=0x5107a60, lpFindFileData=0x31e38c | out: lpFindFileData=0x31e38c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x780846d0, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x780846d0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xa06cc80, ftLastWriteTime.dwHighDateTime=0x1d6eb7f, nFileSizeHigh=0x0, nFileSizeLow=0xbf0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft Publisher 2010.lnk", cAlternateFileName="MI260D~1.LNK")) returned 1 [0092.325] FindNextFileW (in: hFindFile=0x5107a60, lpFindFileData=0x31e38c | out: lpFindFileData=0x31e38c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x78038410, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x78038410, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xa092de0, ftLastWriteTime.dwHighDateTime=0x1d6eb7f, nFileSizeHigh=0x0, nFileSizeLow=0xbf0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft SharePoint Workspace 2010.lnk", cAlternateFileName="MICROS~3.LNK")) returned 1 [0092.325] FindNextFileW (in: hFindFile=0x5107a60, lpFindFileData=0x31e38c | out: lpFindFileData=0x31e38c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8735be00, ftCreationTime.dwHighDateTime=0x1d305eb, ftLastAccessTime.dwLowDateTime=0x8735be00, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0xa0b8f40, ftLastWriteTime.dwHighDateTime=0x1d6eb7f, nFileSizeHigh=0x0, nFileSizeLow=0xad0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft Visio 2010.lnk", cAlternateFileName="MI7E65~1.LNK")) returned 1 [0092.325] FindNextFileW (in: hFindFile=0x5107a60, lpFindFileData=0x31e38c | out: lpFindFileData=0x31e38c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x780aa830, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x780aa830, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xa12b360, ftLastWriteTime.dwHighDateTime=0x1d6eb7f, nFileSizeHigh=0x0, nFileSizeLow=0xbd0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft Word 2010.lnk", cAlternateFileName="MI109D~1.LNK")) returned 1 [0092.325] FindNextFileW (in: hFindFile=0x5107a60, lpFindFileData=0x31e38c | out: lpFindFileData=0x31e38c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x780aa830, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x780aa830, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xa12b360, ftLastWriteTime.dwHighDateTime=0x1d6eb7f, nFileSizeHigh=0x0, nFileSizeLow=0xbd0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft Word 2010.lnk", cAlternateFileName="MI109D~1.LNK")) returned 0 [0092.325] FindClose (in: hFindFile=0x5107a60 | out: hFindFile=0x5107a60) returned 1 [0092.326] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e614) returned 1 [0092.326] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e620) returned 1 [0092.326] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Programs\\Microsoft Office\\Microsoft Access 2010.lnk", nBufferLength=0x105, lpBuffer=0x31e02c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Programs\\Microsoft Office\\Microsoft Access 2010.lnk", lpFilePart=0x0) returned 0x63 [0092.326] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e520) returned 1 [0092.326] CreateFileW (lpFileName="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Programs\\Microsoft Office\\Microsoft Access 2010.lnk" (normalized: "c:\\users\\all users\\microsoft\\windows\\start menu\\programs\\microsoft office\\microsoft access 2010.lnk"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x178 [0092.326] GetFileType (hFile=0x178) returned 0x1 [0092.326] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e51c) returned 1 [0092.326] GetFileType (hFile=0x178) returned 0x1 [0092.326] GetFileSize (in: hFile=0x178, lpFileSizeHigh=0x31e628 | out: lpFileSizeHigh=0x31e628*=0x0) returned 0xb70 [0092.326] ReadFile (in: hFile=0x178, lpBuffer=0x27a7794, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x31e5d4, lpOverlapped=0x0 | out: lpBuffer=0x27a7794*, lpNumberOfBytesRead=0x31e5d4*=0xb70, lpOverlapped=0x0) returned 1 [0092.341] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Programs\\Microsoft Office\\Microsoft Access 2010.lnk", nBufferLength=0x105, lpBuffer=0x31e018, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Programs\\Microsoft Office\\Microsoft Access 2010.lnk", lpFilePart=0x0) returned 0x63 [0092.342] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e50c) returned 1 [0092.342] CreateFileW (lpFileName="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Programs\\Microsoft Office\\Microsoft Access 2010.lnk" (normalized: "c:\\users\\all users\\microsoft\\windows\\start menu\\programs\\microsoft office\\microsoft access 2010.lnk"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x178 [0092.343] GetFileType (hFile=0x178) returned 0x1 [0092.343] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e508) returned 1 [0092.343] GetFileType (hFile=0x178) returned 0x1 [0092.343] WriteFile (in: hFile=0x178, lpBuffer=0x27f9084*, nNumberOfBytesToWrite=0xb80, lpNumberOfBytesWritten=0x31e59c, lpOverlapped=0x0 | out: lpBuffer=0x27f9084*, lpNumberOfBytesWritten=0x31e59c*=0xb80, lpOverlapped=0x0) returned 1 [0092.344] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Programs\\Microsoft Office\\Microsoft Access 2010.lnk", nBufferLength=0x105, lpBuffer=0x31e14c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Programs\\Microsoft Office\\Microsoft Access 2010.lnk", lpFilePart=0x0) returned 0x63 [0092.344] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Programs\\Microsoft Office\\Microsoft Access 2010.lnk", nBufferLength=0x105, lpBuffer=0x31e14c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Programs\\Microsoft Office\\Microsoft Access 2010.lnk", lpFilePart=0x0) returned 0x63 [0092.344] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e5ac) returned 1 [0092.344] GetFileAttributesExW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Programs\\Microsoft Office\\Microsoft Access 2010.lnk" (normalized: "c:\\users\\all users\\microsoft\\windows\\start menu\\programs\\microsoft office\\microsoft access 2010.lnk"), fInfoLevelId=0x0, lpFileInformation=0x31e628 | out: lpFileInformation=0x31e628*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x780122b0, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x780122b0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x1a7c0e40, ftLastWriteTime.dwHighDateTime=0x1d6eb7f, nFileSizeHigh=0x0, nFileSizeLow=0xb80)) returned 1 [0092.344] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e5a8) returned 1 [0092.344] MoveFileW (lpExistingFileName="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Programs\\Microsoft Office\\Microsoft Access 2010.lnk" (normalized: "c:\\users\\all users\\microsoft\\windows\\start menu\\programs\\microsoft office\\microsoft access 2010.lnk"), lpNewFileName="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Programs\\Microsoft Office\\Microsoft Access 2010.lnk" (normalized: "c:\\users\\all users\\microsoft\\windows\\start menu\\programs\\microsoft office\\microsoft access 2010.lnk")) returned 1 [0092.345] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Programs\\Microsoft Office\\Microsoft Excel 2010.lnk", nBufferLength=0x105, lpBuffer=0x31e02c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Programs\\Microsoft Office\\Microsoft Excel 2010.lnk", lpFilePart=0x0) returned 0x62 [0092.345] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e520) returned 1 [0092.345] CreateFileW (lpFileName="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Programs\\Microsoft Office\\Microsoft Excel 2010.lnk" (normalized: "c:\\users\\all users\\microsoft\\windows\\start menu\\programs\\microsoft office\\microsoft excel 2010.lnk"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x178 [0092.345] GetFileType (hFile=0x178) returned 0x1 [0092.345] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e51c) returned 1 [0092.345] GetFileType (hFile=0x178) returned 0x1 [0092.345] GetFileSize (in: hFile=0x178, lpFileSizeHigh=0x31e628 | out: lpFileSizeHigh=0x31e628*=0x0) returned 0xb90 [0092.345] ReadFile (in: hFile=0x178, lpBuffer=0x27faf5c, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x31e5d4, lpOverlapped=0x0 | out: lpBuffer=0x27faf5c*, lpNumberOfBytesRead=0x31e5d4*=0xb90, lpOverlapped=0x0) returned 1 [0092.386] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Programs\\Microsoft Office\\Microsoft Excel 2010.lnk", nBufferLength=0x105, lpBuffer=0x31e018, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Programs\\Microsoft Office\\Microsoft Excel 2010.lnk", lpFilePart=0x0) returned 0x62 [0092.386] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e50c) returned 1 [0092.386] CreateFileW (lpFileName="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Programs\\Microsoft Office\\Microsoft Excel 2010.lnk" (normalized: "c:\\users\\all users\\microsoft\\windows\\start menu\\programs\\microsoft office\\microsoft excel 2010.lnk"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x178 [0092.387] GetFileType (hFile=0x178) returned 0x1 [0092.387] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e508) returned 1 [0092.387] GetFileType (hFile=0x178) returned 0x1 [0092.387] WriteFile (in: hFile=0x178, lpBuffer=0x264ef30*, nNumberOfBytesToWrite=0xba0, lpNumberOfBytesWritten=0x31e59c, lpOverlapped=0x0 | out: lpBuffer=0x264ef30*, lpNumberOfBytesWritten=0x31e59c*=0xba0, lpOverlapped=0x0) returned 1 [0092.388] CloseHandle (hObject=0x178) returned 1 [0092.389] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Programs\\Microsoft Office\\Microsoft Excel 2010.lnk", nBufferLength=0x105, lpBuffer=0x31e14c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Programs\\Microsoft Office\\Microsoft Excel 2010.lnk", lpFilePart=0x0) returned 0x62 [0092.389] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Programs\\Microsoft Office\\Microsoft Excel 2010.lnk", nBufferLength=0x105, lpBuffer=0x31e14c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Programs\\Microsoft Office\\Microsoft Excel 2010.lnk", lpFilePart=0x0) returned 0x62 [0092.389] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e5ac) returned 1 [0092.389] GetFileAttributesExW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Programs\\Microsoft Office\\Microsoft Excel 2010.lnk" (normalized: "c:\\users\\all users\\microsoft\\windows\\start menu\\programs\\microsoft office\\microsoft excel 2010.lnk"), fInfoLevelId=0x0, lpFileInformation=0x31e628 | out: lpFileInformation=0x31e628*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x78038410, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x78038410, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x1a833260, ftLastWriteTime.dwHighDateTime=0x1d6eb7f, nFileSizeHigh=0x0, nFileSizeLow=0xba0)) returned 1 [0092.389] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e5a8) returned 1 [0092.389] MoveFileW (lpExistingFileName="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Programs\\Microsoft Office\\Microsoft Excel 2010.lnk" (normalized: "c:\\users\\all users\\microsoft\\windows\\start menu\\programs\\microsoft office\\microsoft excel 2010.lnk"), lpNewFileName="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Programs\\Microsoft Office\\Microsoft Excel 2010.lnk" (normalized: "c:\\users\\all users\\microsoft\\windows\\start menu\\programs\\microsoft office\\microsoft excel 2010.lnk")) returned 1 [0092.389] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Programs\\Microsoft Office\\Microsoft InfoPath Designer 2010.lnk", nBufferLength=0x105, lpBuffer=0x31e02c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Programs\\Microsoft Office\\Microsoft InfoPath Designer 2010.lnk", lpFilePart=0x0) returned 0x6e [0092.389] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e520) returned 1 [0092.389] CreateFileW (lpFileName="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Programs\\Microsoft Office\\Microsoft InfoPath Designer 2010.lnk" (normalized: "c:\\users\\all users\\microsoft\\windows\\start menu\\programs\\microsoft office\\microsoft infopath designer 2010.lnk"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x178 [0092.390] GetFileType (hFile=0x178) returned 0x1 [0092.390] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e51c) returned 1 [0092.390] GetFileType (hFile=0x178) returned 0x1 [0092.390] GetFileSize (in: hFile=0x178, lpFileSizeHigh=0x31e628 | out: lpFileSizeHigh=0x31e628*=0x0) returned 0xbf0 [0092.390] ReadFile (in: hFile=0x178, lpBuffer=0x2650e98, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x31e5d4, lpOverlapped=0x0 | out: lpBuffer=0x2650e98*, lpNumberOfBytesRead=0x31e5d4*=0xbf0, lpOverlapped=0x0) returned 1 [0092.390] CloseHandle (hObject=0x178) returned 1 [0092.403] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Programs\\Microsoft Office\\Microsoft InfoPath Designer 2010.lnk", nBufferLength=0x105, lpBuffer=0x31e018, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Programs\\Microsoft Office\\Microsoft InfoPath Designer 2010.lnk", lpFilePart=0x0) returned 0x6e [0092.403] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e50c) returned 1 [0092.403] CreateFileW (lpFileName="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Programs\\Microsoft Office\\Microsoft InfoPath Designer 2010.lnk" (normalized: "c:\\users\\all users\\microsoft\\windows\\start menu\\programs\\microsoft office\\microsoft infopath designer 2010.lnk"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x178 [0092.404] GetFileType (hFile=0x178) returned 0x1 [0092.404] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e508) returned 1 [0092.404] GetFileType (hFile=0x178) returned 0x1 [0092.404] WriteFile (in: hFile=0x178, lpBuffer=0x26a2b94*, nNumberOfBytesToWrite=0xc00, lpNumberOfBytesWritten=0x31e59c, lpOverlapped=0x0 | out: lpBuffer=0x26a2b94*, lpNumberOfBytesWritten=0x31e59c*=0xc00, lpOverlapped=0x0) returned 1 [0092.405] CloseHandle (hObject=0x178) returned 1 [0092.405] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Programs\\Microsoft Office\\Microsoft InfoPath Designer 2010.lnk", nBufferLength=0x105, lpBuffer=0x31e14c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Programs\\Microsoft Office\\Microsoft InfoPath Designer 2010.lnk", lpFilePart=0x0) returned 0x6e [0092.405] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Programs\\Microsoft Office\\Microsoft InfoPath Designer 2010.lnk", nBufferLength=0x105, lpBuffer=0x31e14c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Programs\\Microsoft Office\\Microsoft InfoPath Designer 2010.lnk", lpFilePart=0x0) returned 0x6e [0092.405] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e5ac) returned 1 [0092.405] GetFileAttributesExW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Programs\\Microsoft Office\\Microsoft InfoPath Designer 2010.lnk" (normalized: "c:\\users\\all users\\microsoft\\windows\\start menu\\programs\\microsoft office\\microsoft infopath designer 2010.lnk"), fInfoLevelId=0x0, lpFileInformation=0x31e628 | out: lpFileInformation=0x31e628*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7805e570, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x7805e570, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x1a8593c0, ftLastWriteTime.dwHighDateTime=0x1d6eb7f, nFileSizeHigh=0x0, nFileSizeLow=0xc00)) returned 1 [0092.405] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e5a8) returned 1 [0092.406] MoveFileW (lpExistingFileName="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Programs\\Microsoft Office\\Microsoft InfoPath Designer 2010.lnk" (normalized: "c:\\users\\all users\\microsoft\\windows\\start menu\\programs\\microsoft office\\microsoft infopath designer 2010.lnk"), lpNewFileName="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Programs\\Microsoft Office\\Microsoft InfoPath Designer 2010.lnk" (normalized: "c:\\users\\all users\\microsoft\\windows\\start menu\\programs\\microsoft office\\microsoft infopath designer 2010.lnk")) returned 1 [0092.406] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Programs\\Microsoft Office\\Microsoft InfoPath Filler 2010.lnk", nBufferLength=0x105, lpBuffer=0x31e02c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Programs\\Microsoft Office\\Microsoft InfoPath Filler 2010.lnk", lpFilePart=0x0) returned 0x6c [0092.406] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e520) returned 1 [0092.406] CreateFileW (lpFileName="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Programs\\Microsoft Office\\Microsoft InfoPath Filler 2010.lnk" (normalized: "c:\\users\\all users\\microsoft\\windows\\start menu\\programs\\microsoft office\\microsoft infopath filler 2010.lnk"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x178 [0092.406] GetFileType (hFile=0x178) returned 0x1 [0092.406] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e51c) returned 1 [0092.406] GetFileType (hFile=0x178) returned 0x1 [0092.406] GetFileSize (in: hFile=0x178, lpFileSizeHigh=0x31e628 | out: lpFileSizeHigh=0x31e628*=0x0) returned 0xbe0 [0092.407] ReadFile (in: hFile=0x178, lpBuffer=0x26a4b14, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x31e5d4, lpOverlapped=0x0 | out: lpBuffer=0x26a4b14*, lpNumberOfBytesRead=0x31e5d4*=0xbe0, lpOverlapped=0x0) returned 1 [0092.407] CloseHandle (hObject=0x178) returned 1 [0092.420] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Programs\\Microsoft Office\\Microsoft InfoPath Filler 2010.lnk", nBufferLength=0x105, lpBuffer=0x31e018, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Programs\\Microsoft Office\\Microsoft InfoPath Filler 2010.lnk", lpFilePart=0x0) returned 0x6c [0092.420] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e50c) returned 1 [0092.420] CreateFileW (lpFileName="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Programs\\Microsoft Office\\Microsoft InfoPath Filler 2010.lnk" (normalized: "c:\\users\\all users\\microsoft\\windows\\start menu\\programs\\microsoft office\\microsoft infopath filler 2010.lnk"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x178 [0092.421] GetFileType (hFile=0x178) returned 0x1 [0092.421] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e508) returned 1 [0092.421] GetFileType (hFile=0x178) returned 0x1 [0092.421] WriteFile (in: hFile=0x178, lpBuffer=0x26f665c*, nNumberOfBytesToWrite=0xbf0, lpNumberOfBytesWritten=0x31e59c, lpOverlapped=0x0 | out: lpBuffer=0x26f665c*, lpNumberOfBytesWritten=0x31e59c*=0xbf0, lpOverlapped=0x0) returned 1 [0092.422] CloseHandle (hObject=0x178) returned 1 [0092.422] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Programs\\Microsoft Office\\Microsoft InfoPath Filler 2010.lnk", nBufferLength=0x105, lpBuffer=0x31e14c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Programs\\Microsoft Office\\Microsoft InfoPath Filler 2010.lnk", lpFilePart=0x0) returned 0x6c [0092.422] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Programs\\Microsoft Office\\Microsoft InfoPath Filler 2010.lnk", nBufferLength=0x105, lpBuffer=0x31e14c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Programs\\Microsoft Office\\Microsoft InfoPath Filler 2010.lnk", lpFilePart=0x0) returned 0x6c [0092.422] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e5ac) returned 1 [0092.423] GetFileAttributesExW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Programs\\Microsoft Office\\Microsoft InfoPath Filler 2010.lnk" (normalized: "c:\\users\\all users\\microsoft\\windows\\start menu\\programs\\microsoft office\\microsoft infopath filler 2010.lnk"), fInfoLevelId=0x0, lpFileInformation=0x31e628 | out: lpFileInformation=0x31e628*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7805e570, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x7805e570, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x1a87f520, ftLastWriteTime.dwHighDateTime=0x1d6eb7f, nFileSizeHigh=0x0, nFileSizeLow=0xbf0)) returned 1 [0092.423] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e5a8) returned 1 [0092.423] MoveFileW (lpExistingFileName="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Programs\\Microsoft Office\\Microsoft InfoPath Filler 2010.lnk" (normalized: "c:\\users\\all users\\microsoft\\windows\\start menu\\programs\\microsoft office\\microsoft infopath filler 2010.lnk"), lpNewFileName="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Programs\\Microsoft Office\\Microsoft InfoPath Filler 2010.lnk" (normalized: "c:\\users\\all users\\microsoft\\windows\\start menu\\programs\\microsoft office\\microsoft infopath filler 2010.lnk")) returned 1 [0092.423] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Programs\\Microsoft Office\\Microsoft OneNote 2010.lnk", nBufferLength=0x105, lpBuffer=0x31e02c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Programs\\Microsoft Office\\Microsoft OneNote 2010.lnk", lpFilePart=0x0) returned 0x64 [0092.423] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e520) returned 1 [0092.423] CreateFileW (lpFileName="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Programs\\Microsoft Office\\Microsoft OneNote 2010.lnk" (normalized: "c:\\users\\all users\\microsoft\\windows\\start menu\\programs\\microsoft office\\microsoft onenote 2010.lnk"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x178 [0092.423] GetFileType (hFile=0x178) returned 0x1 [0092.424] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e51c) returned 1 [0092.424] GetFileType (hFile=0x178) returned 0x1 [0092.424] GetFileSize (in: hFile=0x178, lpFileSizeHigh=0x31e628 | out: lpFileSizeHigh=0x31e628*=0x0) returned 0xb40 [0092.424] ReadFile (in: hFile=0x178, lpBuffer=0x26f8514, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x31e5d4, lpOverlapped=0x0 | out: lpBuffer=0x26f8514*, lpNumberOfBytesRead=0x31e5d4*=0xb40, lpOverlapped=0x0) returned 1 [0092.424] CloseHandle (hObject=0x178) returned 1 [0092.437] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Programs\\Microsoft Office\\Microsoft OneNote 2010.lnk", nBufferLength=0x105, lpBuffer=0x31e018, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Programs\\Microsoft Office\\Microsoft OneNote 2010.lnk", lpFilePart=0x0) returned 0x64 [0092.437] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e50c) returned 1 [0092.437] CreateFileW (lpFileName="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Programs\\Microsoft Office\\Microsoft OneNote 2010.lnk" (normalized: "c:\\users\\all users\\microsoft\\windows\\start menu\\programs\\microsoft office\\microsoft onenote 2010.lnk"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x178 [0092.438] GetFileType (hFile=0x178) returned 0x1 [0092.438] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e508) returned 1 [0092.438] GetFileType (hFile=0x178) returned 0x1 [0092.438] WriteFile (in: hFile=0x178, lpBuffer=0x2749d1c*, nNumberOfBytesToWrite=0xb50, lpNumberOfBytesWritten=0x31e59c, lpOverlapped=0x0 | out: lpBuffer=0x2749d1c*, lpNumberOfBytesWritten=0x31e59c*=0xb50, lpOverlapped=0x0) returned 1 [0092.439] CloseHandle (hObject=0x178) returned 1 [0092.439] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Programs\\Microsoft Office\\Microsoft OneNote 2010.lnk", nBufferLength=0x105, lpBuffer=0x31e14c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Programs\\Microsoft Office\\Microsoft OneNote 2010.lnk", lpFilePart=0x0) returned 0x64 [0092.439] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Programs\\Microsoft Office\\Microsoft OneNote 2010.lnk", nBufferLength=0x105, lpBuffer=0x31e14c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Programs\\Microsoft Office\\Microsoft OneNote 2010.lnk", lpFilePart=0x0) returned 0x64 [0092.439] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e5ac) returned 1 [0092.439] GetFileAttributesExW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Programs\\Microsoft Office\\Microsoft OneNote 2010.lnk" (normalized: "c:\\users\\all users\\microsoft\\windows\\start menu\\programs\\microsoft office\\microsoft onenote 2010.lnk"), fInfoLevelId=0x0, lpFileInformation=0x31e628 | out: lpFileInformation=0x31e628*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7805e570, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x780846d0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x1a8a5680, ftLastWriteTime.dwHighDateTime=0x1d6eb7f, nFileSizeHigh=0x0, nFileSizeLow=0xb50)) returned 1 [0092.439] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e5a8) returned 1 [0092.439] MoveFileW (lpExistingFileName="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Programs\\Microsoft Office\\Microsoft OneNote 2010.lnk" (normalized: "c:\\users\\all users\\microsoft\\windows\\start menu\\programs\\microsoft office\\microsoft onenote 2010.lnk"), lpNewFileName="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Programs\\Microsoft Office\\Microsoft OneNote 2010.lnk" (normalized: "c:\\users\\all users\\microsoft\\windows\\start menu\\programs\\microsoft office\\microsoft onenote 2010.lnk")) returned 1 [0092.440] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Programs\\Microsoft Office\\Microsoft Outlook 2010.lnk", nBufferLength=0x105, lpBuffer=0x31e02c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Programs\\Microsoft Office\\Microsoft Outlook 2010.lnk", lpFilePart=0x0) returned 0x64 [0092.440] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e520) returned 1 [0092.440] CreateFileW (lpFileName="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Programs\\Microsoft Office\\Microsoft Outlook 2010.lnk" (normalized: "c:\\users\\all users\\microsoft\\windows\\start menu\\programs\\microsoft office\\microsoft outlook 2010.lnk"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x178 [0092.440] GetFileType (hFile=0x178) returned 0x1 [0092.440] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e51c) returned 1 [0092.440] GetFileType (hFile=0x178) returned 0x1 [0092.440] GetFileSize (in: hFile=0x178, lpFileSizeHigh=0x31e628 | out: lpFileSizeHigh=0x31e628*=0x0) returned 0xbe0 [0092.440] ReadFile (in: hFile=0x178, lpBuffer=0x274bc54, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x31e5d4, lpOverlapped=0x0 | out: lpBuffer=0x274bc54*, lpNumberOfBytesRead=0x31e5d4*=0xbe0, lpOverlapped=0x0) returned 1 [0092.440] CloseHandle (hObject=0x178) returned 1 [0092.453] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Programs\\Microsoft Office\\Microsoft Outlook 2010.lnk", nBufferLength=0x105, lpBuffer=0x31e018, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Programs\\Microsoft Office\\Microsoft Outlook 2010.lnk", lpFilePart=0x0) returned 0x64 [0092.454] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e50c) returned 1 [0092.454] CreateFileW (lpFileName="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Programs\\Microsoft Office\\Microsoft Outlook 2010.lnk" (normalized: "c:\\users\\all users\\microsoft\\windows\\start menu\\programs\\microsoft office\\microsoft outlook 2010.lnk"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x178 [0092.455] GetFileType (hFile=0x178) returned 0x1 [0092.455] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e508) returned 1 [0092.455] GetFileType (hFile=0x178) returned 0x1 [0092.455] WriteFile (in: hFile=0x178, lpBuffer=0x279d77c*, nNumberOfBytesToWrite=0xbf0, lpNumberOfBytesWritten=0x31e59c, lpOverlapped=0x0 | out: lpBuffer=0x279d77c*, lpNumberOfBytesWritten=0x31e59c*=0xbf0, lpOverlapped=0x0) returned 1 [0092.456] CloseHandle (hObject=0x178) returned 1 [0092.456] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Programs\\Microsoft Office\\Microsoft Outlook 2010.lnk", nBufferLength=0x105, lpBuffer=0x31e14c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Programs\\Microsoft Office\\Microsoft Outlook 2010.lnk", lpFilePart=0x0) returned 0x64 [0092.456] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Programs\\Microsoft Office\\Microsoft Outlook 2010.lnk", nBufferLength=0x105, lpBuffer=0x31e14c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Programs\\Microsoft Office\\Microsoft Outlook 2010.lnk", lpFilePart=0x0) returned 0x64 [0092.456] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e5ac) returned 1 [0092.456] GetFileAttributesExW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Programs\\Microsoft Office\\Microsoft Outlook 2010.lnk" (normalized: "c:\\users\\all users\\microsoft\\windows\\start menu\\programs\\microsoft office\\microsoft outlook 2010.lnk"), fInfoLevelId=0x0, lpFileInformation=0x31e628 | out: lpFileInformation=0x31e628*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x780846d0, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x780846d0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x1a8cb7e0, ftLastWriteTime.dwHighDateTime=0x1d6eb7f, nFileSizeHigh=0x0, nFileSizeLow=0xbf0)) returned 1 [0092.456] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e5a8) returned 1 [0092.456] MoveFileW (lpExistingFileName="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Programs\\Microsoft Office\\Microsoft Outlook 2010.lnk" (normalized: "c:\\users\\all users\\microsoft\\windows\\start menu\\programs\\microsoft office\\microsoft outlook 2010.lnk"), lpNewFileName="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Programs\\Microsoft Office\\Microsoft Outlook 2010.lnk" (normalized: "c:\\users\\all users\\microsoft\\windows\\start menu\\programs\\microsoft office\\microsoft outlook 2010.lnk")) returned 1 [0092.457] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Programs\\Microsoft Office\\Microsoft PowerPoint 2010.lnk", nBufferLength=0x105, lpBuffer=0x31e02c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Programs\\Microsoft Office\\Microsoft PowerPoint 2010.lnk", lpFilePart=0x0) returned 0x67 [0092.457] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e520) returned 1 [0092.457] CreateFileW (lpFileName="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Programs\\Microsoft Office\\Microsoft PowerPoint 2010.lnk" (normalized: "c:\\users\\all users\\microsoft\\windows\\start menu\\programs\\microsoft office\\microsoft powerpoint 2010.lnk"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x178 [0092.457] GetFileType (hFile=0x178) returned 0x1 [0092.457] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e51c) returned 1 [0092.457] GetFileType (hFile=0x178) returned 0x1 [0092.457] GetFileSize (in: hFile=0x178, lpFileSizeHigh=0x31e628 | out: lpFileSizeHigh=0x31e628*=0x0) returned 0xb80 [0092.457] ReadFile (in: hFile=0x178, lpBuffer=0x279f65c, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x31e5d4, lpOverlapped=0x0 | out: lpBuffer=0x279f65c*, lpNumberOfBytesRead=0x31e5d4*=0xb80, lpOverlapped=0x0) returned 1 [0092.457] CloseHandle (hObject=0x178) returned 1 [0092.478] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Programs\\Microsoft Office\\Microsoft PowerPoint 2010.lnk", nBufferLength=0x105, lpBuffer=0x31e018, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Programs\\Microsoft Office\\Microsoft PowerPoint 2010.lnk", lpFilePart=0x0) returned 0x67 [0092.478] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e50c) returned 1 [0092.478] CreateFileW (lpFileName="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Programs\\Microsoft Office\\Microsoft PowerPoint 2010.lnk" (normalized: "c:\\users\\all users\\microsoft\\windows\\start menu\\programs\\microsoft office\\microsoft powerpoint 2010.lnk"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x178 [0092.480] GetFileType (hFile=0x178) returned 0x1 [0092.481] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e508) returned 1 [0092.481] GetFileType (hFile=0x178) returned 0x1 [0092.481] WriteFile (in: hFile=0x178, lpBuffer=0x27f0fac*, nNumberOfBytesToWrite=0xb90, lpNumberOfBytesWritten=0x31e59c, lpOverlapped=0x0 | out: lpBuffer=0x27f0fac*, lpNumberOfBytesWritten=0x31e59c*=0xb90, lpOverlapped=0x0) returned 1 [0092.481] CloseHandle (hObject=0x178) returned 1 [0092.482] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Programs\\Microsoft Office\\Microsoft PowerPoint 2010.lnk", nBufferLength=0x105, lpBuffer=0x31e14c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Programs\\Microsoft Office\\Microsoft PowerPoint 2010.lnk", lpFilePart=0x0) returned 0x67 [0092.482] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Programs\\Microsoft Office\\Microsoft PowerPoint 2010.lnk", nBufferLength=0x105, lpBuffer=0x31e14c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Programs\\Microsoft Office\\Microsoft PowerPoint 2010.lnk", lpFilePart=0x0) returned 0x67 [0092.482] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e5ac) returned 1 [0092.482] GetFileAttributesExW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Programs\\Microsoft Office\\Microsoft PowerPoint 2010.lnk" (normalized: "c:\\users\\all users\\microsoft\\windows\\start menu\\programs\\microsoft office\\microsoft powerpoint 2010.lnk"), fInfoLevelId=0x0, lpFileInformation=0x31e628 | out: lpFileInformation=0x31e628*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x780846d0, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x780846d0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x1a917aa0, ftLastWriteTime.dwHighDateTime=0x1d6eb7f, nFileSizeHigh=0x0, nFileSizeLow=0xb90)) returned 1 [0092.482] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e5a8) returned 1 [0092.482] MoveFileW (lpExistingFileName="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Programs\\Microsoft Office\\Microsoft PowerPoint 2010.lnk" (normalized: "c:\\users\\all users\\microsoft\\windows\\start menu\\programs\\microsoft office\\microsoft powerpoint 2010.lnk"), lpNewFileName="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Programs\\Microsoft Office\\Microsoft PowerPoint 2010.lnk" (normalized: "c:\\users\\all users\\microsoft\\windows\\start menu\\programs\\microsoft office\\microsoft powerpoint 2010.lnk")) returned 1 [0092.483] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Programs\\Microsoft Office\\Microsoft Project 2010.lnk", nBufferLength=0x105, lpBuffer=0x31e02c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Programs\\Microsoft Office\\Microsoft Project 2010.lnk", lpFilePart=0x0) returned 0x64 [0092.483] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e520) returned 1 [0092.483] CreateFileW (lpFileName="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Programs\\Microsoft Office\\Microsoft Project 2010.lnk" (normalized: "c:\\users\\all users\\microsoft\\windows\\start menu\\programs\\microsoft office\\microsoft project 2010.lnk"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x178 [0092.483] GetFileType (hFile=0x178) returned 0x1 [0092.483] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e51c) returned 1 [0092.483] GetFileType (hFile=0x178) returned 0x1 [0092.483] GetFileSize (in: hFile=0x178, lpFileSizeHigh=0x31e628 | out: lpFileSizeHigh=0x31e628*=0x0) returned 0xb80 [0092.483] ReadFile (in: hFile=0x178, lpBuffer=0x27f2e8c, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x31e5d4, lpOverlapped=0x0 | out: lpBuffer=0x27f2e8c*, lpNumberOfBytesRead=0x31e5d4*=0xb80, lpOverlapped=0x0) returned 1 [0092.483] CloseHandle (hObject=0x178) returned 1 [0092.520] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Programs\\Microsoft Office\\Microsoft Project 2010.lnk", nBufferLength=0x105, lpBuffer=0x31e018, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Programs\\Microsoft Office\\Microsoft Project 2010.lnk", lpFilePart=0x0) returned 0x64 [0092.520] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e50c) returned 1 [0092.520] CreateFileW (lpFileName="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Programs\\Microsoft Office\\Microsoft Project 2010.lnk" (normalized: "c:\\users\\all users\\microsoft\\windows\\start menu\\programs\\microsoft office\\microsoft project 2010.lnk"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x178 [0092.521] GetFileType (hFile=0x178) returned 0x1 [0092.521] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e508) returned 1 [0092.521] GetFileType (hFile=0x178) returned 0x1 [0092.521] WriteFile (in: hFile=0x178, lpBuffer=0x2646f74*, nNumberOfBytesToWrite=0xb90, lpNumberOfBytesWritten=0x31e59c, lpOverlapped=0x0 | out: lpBuffer=0x2646f74*, lpNumberOfBytesWritten=0x31e59c*=0xb90, lpOverlapped=0x0) returned 1 [0092.522] CloseHandle (hObject=0x178) returned 1 [0092.522] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Programs\\Microsoft Office\\Microsoft Project 2010.lnk", nBufferLength=0x105, lpBuffer=0x31e14c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Programs\\Microsoft Office\\Microsoft Project 2010.lnk", lpFilePart=0x0) returned 0x64 [0092.522] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Programs\\Microsoft Office\\Microsoft Project 2010.lnk", nBufferLength=0x105, lpBuffer=0x31e14c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Programs\\Microsoft Office\\Microsoft Project 2010.lnk", lpFilePart=0x0) returned 0x64 [0092.522] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e5ac) returned 1 [0092.522] GetFileAttributesExW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Programs\\Microsoft Office\\Microsoft Project 2010.lnk" (normalized: "c:\\users\\all users\\microsoft\\windows\\start menu\\programs\\microsoft office\\microsoft project 2010.lnk"), fInfoLevelId=0x0, lpFileInformation=0x31e628 | out: lpFileInformation=0x31e628*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc11c60a0, ftCreationTime.dwHighDateTime=0x1d305f1, ftLastAccessTime.dwLowDateTime=0xc11c60a0, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0x1a963d60, ftLastWriteTime.dwHighDateTime=0x1d6eb7f, nFileSizeHigh=0x0, nFileSizeLow=0xb90)) returned 1 [0092.522] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e5a8) returned 1 [0092.522] MoveFileW (lpExistingFileName="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Programs\\Microsoft Office\\Microsoft Project 2010.lnk" (normalized: "c:\\users\\all users\\microsoft\\windows\\start menu\\programs\\microsoft office\\microsoft project 2010.lnk"), lpNewFileName="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Programs\\Microsoft Office\\Microsoft Project 2010.lnk" (normalized: "c:\\users\\all users\\microsoft\\windows\\start menu\\programs\\microsoft office\\microsoft project 2010.lnk")) returned 1 [0092.523] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Programs\\Microsoft Office\\Microsoft Publisher 2010.lnk", nBufferLength=0x105, lpBuffer=0x31e02c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Programs\\Microsoft Office\\Microsoft Publisher 2010.lnk", lpFilePart=0x0) returned 0x66 [0092.523] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e520) returned 1 [0092.523] CreateFileW (lpFileName="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Programs\\Microsoft Office\\Microsoft Publisher 2010.lnk" (normalized: "c:\\users\\all users\\microsoft\\windows\\start menu\\programs\\microsoft office\\microsoft publisher 2010.lnk"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x178 [0092.523] GetFileType (hFile=0x178) returned 0x1 [0092.523] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e51c) returned 1 [0092.523] GetFileType (hFile=0x178) returned 0x1 [0092.523] GetFileSize (in: hFile=0x178, lpFileSizeHigh=0x31e628 | out: lpFileSizeHigh=0x31e628*=0x0) returned 0xbf0 [0092.523] ReadFile (in: hFile=0x178, lpBuffer=0x2648ec4, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x31e5d4, lpOverlapped=0x0 | out: lpBuffer=0x2648ec4*, lpNumberOfBytesRead=0x31e5d4*=0xbf0, lpOverlapped=0x0) returned 1 [0092.523] CloseHandle (hObject=0x178) returned 1 [0092.542] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Programs\\Microsoft Office\\Microsoft Publisher 2010.lnk", nBufferLength=0x105, lpBuffer=0x31e018, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Programs\\Microsoft Office\\Microsoft Publisher 2010.lnk", lpFilePart=0x0) returned 0x66 [0092.542] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e50c) returned 1 [0092.542] CreateFileW (lpFileName="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Programs\\Microsoft Office\\Microsoft Publisher 2010.lnk" (normalized: "c:\\users\\all users\\microsoft\\windows\\start menu\\programs\\microsoft office\\microsoft publisher 2010.lnk"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x178 [0092.543] GetFileType (hFile=0x178) returned 0x1 [0092.543] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e508) returned 1 [0092.543] GetFileType (hFile=0x178) returned 0x1 [0092.543] WriteFile (in: hFile=0x178, lpBuffer=0x269aba0*, nNumberOfBytesToWrite=0xc00, lpNumberOfBytesWritten=0x31e59c, lpOverlapped=0x0 | out: lpBuffer=0x269aba0*, lpNumberOfBytesWritten=0x31e59c*=0xc00, lpOverlapped=0x0) returned 1 [0092.544] CloseHandle (hObject=0x178) returned 1 [0092.544] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Programs\\Microsoft Office\\Microsoft Publisher 2010.lnk", nBufferLength=0x105, lpBuffer=0x31e14c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Programs\\Microsoft Office\\Microsoft Publisher 2010.lnk", lpFilePart=0x0) returned 0x66 [0092.544] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Programs\\Microsoft Office\\Microsoft Publisher 2010.lnk", nBufferLength=0x105, lpBuffer=0x31e14c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Programs\\Microsoft Office\\Microsoft Publisher 2010.lnk", lpFilePart=0x0) returned 0x66 [0092.545] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e5ac) returned 1 [0092.545] GetFileAttributesExW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Programs\\Microsoft Office\\Microsoft Publisher 2010.lnk" (normalized: "c:\\users\\all users\\microsoft\\windows\\start menu\\programs\\microsoft office\\microsoft publisher 2010.lnk"), fInfoLevelId=0x0, lpFileInformation=0x31e628 | out: lpFileInformation=0x31e628*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x780846d0, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x780846d0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x1a9b0020, ftLastWriteTime.dwHighDateTime=0x1d6eb7f, nFileSizeHigh=0x0, nFileSizeLow=0xc00)) returned 1 [0092.545] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e5a8) returned 1 [0092.545] MoveFileW (lpExistingFileName="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Programs\\Microsoft Office\\Microsoft Publisher 2010.lnk" (normalized: "c:\\users\\all users\\microsoft\\windows\\start menu\\programs\\microsoft office\\microsoft publisher 2010.lnk"), lpNewFileName="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Programs\\Microsoft Office\\Microsoft Publisher 2010.lnk" (normalized: "c:\\users\\all users\\microsoft\\windows\\start menu\\programs\\microsoft office\\microsoft publisher 2010.lnk")) returned 1 [0092.545] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Programs\\Microsoft Office\\Microsoft SharePoint Workspace 2010.lnk", nBufferLength=0x105, lpBuffer=0x31e02c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Programs\\Microsoft Office\\Microsoft SharePoint Workspace 2010.lnk", lpFilePart=0x0) returned 0x71 [0092.545] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e520) returned 1 [0092.545] CreateFileW (lpFileName="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Programs\\Microsoft Office\\Microsoft SharePoint Workspace 2010.lnk" (normalized: "c:\\users\\all users\\microsoft\\windows\\start menu\\programs\\microsoft office\\microsoft sharepoint workspace 2010.lnk"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x178 [0092.546] GetFileType (hFile=0x178) returned 0x1 [0092.546] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e51c) returned 1 [0092.546] GetFileType (hFile=0x178) returned 0x1 [0092.546] GetFileSize (in: hFile=0x178, lpFileSizeHigh=0x31e628 | out: lpFileSizeHigh=0x31e628*=0x0) returned 0xbf0 [0092.546] ReadFile (in: hFile=0x178, lpBuffer=0x269cb20, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x31e5d4, lpOverlapped=0x0 | out: lpBuffer=0x269cb20*, lpNumberOfBytesRead=0x31e5d4*=0xbf0, lpOverlapped=0x0) returned 1 [0092.546] CloseHandle (hObject=0x178) returned 1 [0092.559] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Programs\\Microsoft Office\\Microsoft SharePoint Workspace 2010.lnk", nBufferLength=0x105, lpBuffer=0x31e018, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Programs\\Microsoft Office\\Microsoft SharePoint Workspace 2010.lnk", lpFilePart=0x0) returned 0x71 [0092.559] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e50c) returned 1 [0092.559] CreateFileW (lpFileName="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Programs\\Microsoft Office\\Microsoft SharePoint Workspace 2010.lnk" (normalized: "c:\\users\\all users\\microsoft\\windows\\start menu\\programs\\microsoft office\\microsoft sharepoint workspace 2010.lnk"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x178 [0092.560] GetFileType (hFile=0x178) returned 0x1 [0092.560] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e508) returned 1 [0092.560] GetFileType (hFile=0x178) returned 0x1 [0092.560] WriteFile (in: hFile=0x178, lpBuffer=0x26ee6c8*, nNumberOfBytesToWrite=0xc00, lpNumberOfBytesWritten=0x31e59c, lpOverlapped=0x0 | out: lpBuffer=0x26ee6c8*, lpNumberOfBytesWritten=0x31e59c*=0xc00, lpOverlapped=0x0) returned 1 [0092.561] CloseHandle (hObject=0x178) returned 1 [0092.561] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Programs\\Microsoft Office\\Microsoft SharePoint Workspace 2010.lnk", nBufferLength=0x105, lpBuffer=0x31e14c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Programs\\Microsoft Office\\Microsoft SharePoint Workspace 2010.lnk", lpFilePart=0x0) returned 0x71 [0092.561] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Programs\\Microsoft Office\\Microsoft SharePoint Workspace 2010.lnk", nBufferLength=0x105, lpBuffer=0x31e14c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Programs\\Microsoft Office\\Microsoft SharePoint Workspace 2010.lnk", lpFilePart=0x0) returned 0x71 [0092.561] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e5ac) returned 1 [0092.561] GetFileAttributesExW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Programs\\Microsoft Office\\Microsoft SharePoint Workspace 2010.lnk" (normalized: "c:\\users\\all users\\microsoft\\windows\\start menu\\programs\\microsoft office\\microsoft sharepoint workspace 2010.lnk"), fInfoLevelId=0x0, lpFileInformation=0x31e628 | out: lpFileInformation=0x31e628*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x78038410, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x78038410, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x1a9d6180, ftLastWriteTime.dwHighDateTime=0x1d6eb7f, nFileSizeHigh=0x0, nFileSizeLow=0xc00)) returned 1 [0092.561] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e5a8) returned 1 [0092.562] MoveFileW (lpExistingFileName="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Programs\\Microsoft Office\\Microsoft SharePoint Workspace 2010.lnk" (normalized: "c:\\users\\all users\\microsoft\\windows\\start menu\\programs\\microsoft office\\microsoft sharepoint workspace 2010.lnk"), lpNewFileName="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Programs\\Microsoft Office\\Microsoft SharePoint Workspace 2010.lnk" (normalized: "c:\\users\\all users\\microsoft\\windows\\start menu\\programs\\microsoft office\\microsoft sharepoint workspace 2010.lnk")) returned 1 [0092.562] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Programs\\Microsoft Office\\Microsoft Visio 2010.lnk", nBufferLength=0x105, lpBuffer=0x31e02c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Programs\\Microsoft Office\\Microsoft Visio 2010.lnk", lpFilePart=0x0) returned 0x62 [0092.562] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e520) returned 1 [0092.562] CreateFileW (lpFileName="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Programs\\Microsoft Office\\Microsoft Visio 2010.lnk" (normalized: "c:\\users\\all users\\microsoft\\windows\\start menu\\programs\\microsoft office\\microsoft visio 2010.lnk"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x178 [0092.562] GetFileType (hFile=0x178) returned 0x1 [0092.562] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e51c) returned 1 [0092.562] GetFileType (hFile=0x178) returned 0x1 [0092.563] GetFileSize (in: hFile=0x178, lpFileSizeHigh=0x31e628 | out: lpFileSizeHigh=0x31e628*=0x0) returned 0xad0 [0092.563] ReadFile (in: hFile=0x178, lpBuffer=0x26f0518, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x31e5d4, lpOverlapped=0x0 | out: lpBuffer=0x26f0518*, lpNumberOfBytesRead=0x31e5d4*=0xad0, lpOverlapped=0x0) returned 1 [0092.563] CloseHandle (hObject=0x178) returned 1 [0092.576] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Programs\\Microsoft Office\\Microsoft Visio 2010.lnk", nBufferLength=0x105, lpBuffer=0x31e018, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Programs\\Microsoft Office\\Microsoft Visio 2010.lnk", lpFilePart=0x0) returned 0x62 [0092.576] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e50c) returned 1 [0092.576] CreateFileW (lpFileName="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Programs\\Microsoft Office\\Microsoft Visio 2010.lnk" (normalized: "c:\\users\\all users\\microsoft\\windows\\start menu\\programs\\microsoft office\\microsoft visio 2010.lnk"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x178 [0092.578] GetFileType (hFile=0x178) returned 0x1 [0092.578] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e508) returned 1 [0092.578] GetFileType (hFile=0x178) returned 0x1 [0092.578] WriteFile (in: hFile=0x178, lpBuffer=0x2741ae8*, nNumberOfBytesToWrite=0xae0, lpNumberOfBytesWritten=0x31e59c, lpOverlapped=0x0 | out: lpBuffer=0x2741ae8*, lpNumberOfBytesWritten=0x31e59c*=0xae0, lpOverlapped=0x0) returned 1 [0092.579] CloseHandle (hObject=0x178) returned 1 [0092.579] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Programs\\Microsoft Office\\Microsoft Visio 2010.lnk", nBufferLength=0x105, lpBuffer=0x31e14c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Programs\\Microsoft Office\\Microsoft Visio 2010.lnk", lpFilePart=0x0) returned 0x62 [0092.579] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Programs\\Microsoft Office\\Microsoft Visio 2010.lnk", nBufferLength=0x105, lpBuffer=0x31e14c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Programs\\Microsoft Office\\Microsoft Visio 2010.lnk", lpFilePart=0x0) returned 0x62 [0092.579] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e5ac) returned 1 [0092.579] GetFileAttributesExW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Programs\\Microsoft Office\\Microsoft Visio 2010.lnk" (normalized: "c:\\users\\all users\\microsoft\\windows\\start menu\\programs\\microsoft office\\microsoft visio 2010.lnk"), fInfoLevelId=0x0, lpFileInformation=0x31e628 | out: lpFileInformation=0x31e628*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8735be00, ftCreationTime.dwHighDateTime=0x1d305eb, ftLastAccessTime.dwLowDateTime=0x8735be00, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0x1a9fc2e0, ftLastWriteTime.dwHighDateTime=0x1d6eb7f, nFileSizeHigh=0x0, nFileSizeLow=0xae0)) returned 1 [0092.579] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e5a8) returned 1 [0092.579] MoveFileW (lpExistingFileName="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Programs\\Microsoft Office\\Microsoft Visio 2010.lnk" (normalized: "c:\\users\\all users\\microsoft\\windows\\start menu\\programs\\microsoft office\\microsoft visio 2010.lnk"), lpNewFileName="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Programs\\Microsoft Office\\Microsoft Visio 2010.lnk" (normalized: "c:\\users\\all users\\microsoft\\windows\\start menu\\programs\\microsoft office\\microsoft visio 2010.lnk")) returned 1 [0092.580] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Programs\\Microsoft Office\\Microsoft Word 2010.lnk", nBufferLength=0x105, lpBuffer=0x31e02c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Programs\\Microsoft Office\\Microsoft Word 2010.lnk", lpFilePart=0x0) returned 0x61 [0092.580] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e520) returned 1 [0092.580] CreateFileW (lpFileName="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Programs\\Microsoft Office\\Microsoft Word 2010.lnk" (normalized: "c:\\users\\all users\\microsoft\\windows\\start menu\\programs\\microsoft office\\microsoft word 2010.lnk"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x178 [0092.580] GetFileType (hFile=0x178) returned 0x1 [0092.580] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e51c) returned 1 [0092.580] GetFileType (hFile=0x178) returned 0x1 [0092.580] GetFileSize (in: hFile=0x178, lpFileSizeHigh=0x31e628 | out: lpFileSizeHigh=0x31e628*=0x0) returned 0xbd0 [0092.580] ReadFile (in: hFile=0x178, lpBuffer=0x27439f8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x31e5d4, lpOverlapped=0x0 | out: lpBuffer=0x27439f8*, lpNumberOfBytesRead=0x31e5d4*=0xbd0, lpOverlapped=0x0) returned 1 [0092.580] CloseHandle (hObject=0x178) returned 1 [0092.593] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Programs\\Microsoft Office\\Microsoft Word 2010.lnk", nBufferLength=0x105, lpBuffer=0x31e018, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Programs\\Microsoft Office\\Microsoft Word 2010.lnk", lpFilePart=0x0) returned 0x61 [0092.594] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e50c) returned 1 [0092.594] CreateFileW (lpFileName="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Programs\\Microsoft Office\\Microsoft Word 2010.lnk" (normalized: "c:\\users\\all users\\microsoft\\windows\\start menu\\programs\\microsoft office\\microsoft word 2010.lnk"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x178 [0092.595] GetFileType (hFile=0x178) returned 0x1 [0092.595] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e508) returned 1 [0092.595] GetFileType (hFile=0x178) returned 0x1 [0092.595] WriteFile (in: hFile=0x178, lpBuffer=0x27954c0*, nNumberOfBytesToWrite=0xbe0, lpNumberOfBytesWritten=0x31e59c, lpOverlapped=0x0 | out: lpBuffer=0x27954c0*, lpNumberOfBytesWritten=0x31e59c*=0xbe0, lpOverlapped=0x0) returned 1 [0092.596] CloseHandle (hObject=0x178) returned 1 [0092.596] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Programs\\Microsoft Office\\Microsoft Word 2010.lnk", nBufferLength=0x105, lpBuffer=0x31e14c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Programs\\Microsoft Office\\Microsoft Word 2010.lnk", lpFilePart=0x0) returned 0x61 [0092.596] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Programs\\Microsoft Office\\Microsoft Word 2010.lnk", nBufferLength=0x105, lpBuffer=0x31e14c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Programs\\Microsoft Office\\Microsoft Word 2010.lnk", lpFilePart=0x0) returned 0x61 [0092.596] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e5ac) returned 1 [0092.596] GetFileAttributesExW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Programs\\Microsoft Office\\Microsoft Word 2010.lnk" (normalized: "c:\\users\\all users\\microsoft\\windows\\start menu\\programs\\microsoft office\\microsoft word 2010.lnk"), fInfoLevelId=0x0, lpFileInformation=0x31e628 | out: lpFileInformation=0x31e628*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x780aa830, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x780aa830, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x1aa22440, ftLastWriteTime.dwHighDateTime=0x1d6eb7f, nFileSizeHigh=0x0, nFileSizeLow=0xbe0)) returned 1 [0092.596] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e5a8) returned 1 [0092.596] MoveFileW (lpExistingFileName="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Programs\\Microsoft Office\\Microsoft Word 2010.lnk" (normalized: "c:\\users\\all users\\microsoft\\windows\\start menu\\programs\\microsoft office\\microsoft word 2010.lnk"), lpNewFileName="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Programs\\Microsoft Office\\Microsoft Word 2010.lnk" (normalized: "c:\\users\\all users\\microsoft\\windows\\start menu\\programs\\microsoft office\\microsoft word 2010.lnk")) returned 1 [0092.597] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e5dc) returned 1 [0092.597] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Programs\\Microsoft Office\\Microsoft Office 2010 Tools", nBufferLength=0x105, lpBuffer=0x31e0e4, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Programs\\Microsoft Office\\Microsoft Office 2010 Tools", lpFilePart=0x0) returned 0x65 [0092.597] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Programs\\Microsoft Office\\Microsoft Office 2010 Tools\\", nBufferLength=0x105, lpBuffer=0x31e0b8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Programs\\Microsoft Office\\Microsoft Office 2010 Tools\\", lpFilePart=0x0) returned 0x66 [0092.597] FindFirstFileW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Programs\\Microsoft Office\\Microsoft Office 2010 Tools\\*", lpFindFileData=0x31e304 | out: lpFindFileData=0x31e304*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x77f53bd0, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0xc11c60a0, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0xc11c60a0, ftLastWriteTime.dwHighDateTime=0x1d305f1, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5107ce0 [0092.597] FindNextFileW (in: hFindFile=0x5107ce0, lpFindFileData=0x31e314 | out: lpFindFileData=0x31e314*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x77f53bd0, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0xc11c60a0, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0xc11c60a0, ftLastWriteTime.dwHighDateTime=0x1d305f1, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0092.597] FindNextFileW (in: hFindFile=0x5107ce0, lpFindFileData=0x31e314 | out: lpFindFileData=0x31e314*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x77fec150, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0xc119ff40, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0xa177620, ftLastWriteTime.dwHighDateTime=0x1d6eb7f, nFileSizeHigh=0x0, nFileSizeLow=0xbb0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Digital Certificate for VBA Projects.lnk", cAlternateFileName="DIGITA~1.LNK")) returned 1 [0092.597] FindNextFileW (in: hFindFile=0x5107ce0, lpFindFileData=0x31e314 | out: lpFindFileData=0x31e314*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x77f53bd0, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0xc1179de0, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0xa20fba0, ftLastWriteTime.dwHighDateTime=0x1d6eb7f, nFileSizeHigh=0x0, nFileSizeLow=0xb70, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft Clip Organizer.lnk", cAlternateFileName="MICROS~1.LNK")) returned 1 [0092.598] FindNextFileW (in: hFindFile=0x5107ce0, lpFindFileData=0x31e314 | out: lpFindFileData=0x31e314*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x780122b0, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0xc11c60a0, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0xa235d00, ftLastWriteTime.dwHighDateTime=0x1d6eb7f, nFileSizeHigh=0x0, nFileSizeLow=0xac0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft Office 2010 Language Preferences.lnk", cAlternateFileName="MICROS~4.LNK")) returned 1 [0092.598] FindNextFileW (in: hFindFile=0x5107ce0, lpFindFileData=0x31e314 | out: lpFindFileData=0x31e314*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x77fec150, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0xc119ff40, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0xa25be60, ftLastWriteTime.dwHighDateTime=0x1d6eb7f, nFileSizeHigh=0x0, nFileSizeLow=0xb20, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft Office 2010 Upload Center.lnk", cAlternateFileName="MICROS~3.LNK")) returned 1 [0092.598] FindNextFileW (in: hFindFile=0x5107ce0, lpFindFileData=0x31e314 | out: lpFindFileData=0x31e314*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x77fec150, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0xc1179de0, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0xa281fc0, ftLastWriteTime.dwHighDateTime=0x1d6eb7f, nFileSizeHigh=0x0, nFileSizeLow=0xb40, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft Office Picture Manager.lnk", cAlternateFileName="MICROS~2.LNK")) returned 1 [0092.598] FindNextFileW (in: hFindFile=0x5107ce0, lpFindFileData=0x31e314 | out: lpFindFileData=0x31e314*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc11c60a0, ftCreationTime.dwHighDateTime=0x1d305f1, ftLastAccessTime.dwLowDateTime=0xc11c60a0, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0xa2f43e0, ftLastWriteTime.dwHighDateTime=0x1d6eb7f, nFileSizeHigh=0x0, nFileSizeLow=0xbc0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft Project Server 2010 Accounts.lnk", cAlternateFileName="MIBC23~1.LNK")) returned 1 [0092.598] FindNextFileW (in: hFindFile=0x5107ce0, lpFindFileData=0x31e314 | out: lpFindFileData=0x31e314*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0092.598] FindClose (in: hFindFile=0x5107ce0 | out: hFindFile=0x5107ce0) returned 1 [0092.598] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e59c) returned 1 [0092.598] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e5a8) returned 1 [0092.598] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e5dc) returned 1 [0092.598] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Programs\\Microsoft Office\\Microsoft Office 2010 Tools", nBufferLength=0x105, lpBuffer=0x31e0e4, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Programs\\Microsoft Office\\Microsoft Office 2010 Tools", lpFilePart=0x0) returned 0x65 [0092.598] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Programs\\Microsoft Office\\Microsoft Office 2010 Tools\\", nBufferLength=0x105, lpBuffer=0x31e0b8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Programs\\Microsoft Office\\Microsoft Office 2010 Tools\\", lpFilePart=0x0) returned 0x66 [0092.598] FindFirstFileW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Programs\\Microsoft Office\\Microsoft Office 2010 Tools\\*", lpFindFileData=0x31e304 | out: lpFindFileData=0x31e304*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x77f53bd0, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0xc11c60a0, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0xc11c60a0, ftLastWriteTime.dwHighDateTime=0x1d305f1, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5107ce0 [0092.599] FindNextFileW (in: hFindFile=0x5107ce0, lpFindFileData=0x31e314 | out: lpFindFileData=0x31e314*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x77f53bd0, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0xc11c60a0, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0xc11c60a0, ftLastWriteTime.dwHighDateTime=0x1d305f1, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0092.599] FindNextFileW (in: hFindFile=0x5107ce0, lpFindFileData=0x31e314 | out: lpFindFileData=0x31e314*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x77fec150, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0xc119ff40, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0xa177620, ftLastWriteTime.dwHighDateTime=0x1d6eb7f, nFileSizeHigh=0x0, nFileSizeLow=0xbb0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Digital Certificate for VBA Projects.lnk", cAlternateFileName="DIGITA~1.LNK")) returned 1 [0092.599] FindNextFileW (in: hFindFile=0x5107ce0, lpFindFileData=0x31e314 | out: lpFindFileData=0x31e314*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x77f53bd0, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0xc1179de0, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0xa20fba0, ftLastWriteTime.dwHighDateTime=0x1d6eb7f, nFileSizeHigh=0x0, nFileSizeLow=0xb70, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft Clip Organizer.lnk", cAlternateFileName="MICROS~1.LNK")) returned 1 [0092.599] FindNextFileW (in: hFindFile=0x5107ce0, lpFindFileData=0x31e314 | out: lpFindFileData=0x31e314*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x780122b0, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0xc11c60a0, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0xa235d00, ftLastWriteTime.dwHighDateTime=0x1d6eb7f, nFileSizeHigh=0x0, nFileSizeLow=0xac0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft Office 2010 Language Preferences.lnk", cAlternateFileName="MICROS~4.LNK")) returned 1 [0092.599] FindNextFileW (in: hFindFile=0x5107ce0, lpFindFileData=0x31e314 | out: lpFindFileData=0x31e314*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x77fec150, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0xc119ff40, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0xa25be60, ftLastWriteTime.dwHighDateTime=0x1d6eb7f, nFileSizeHigh=0x0, nFileSizeLow=0xb20, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft Office 2010 Upload Center.lnk", cAlternateFileName="MICROS~3.LNK")) returned 1 [0092.599] FindNextFileW (in: hFindFile=0x5107ce0, lpFindFileData=0x31e314 | out: lpFindFileData=0x31e314*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x77fec150, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0xc1179de0, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0xa281fc0, ftLastWriteTime.dwHighDateTime=0x1d6eb7f, nFileSizeHigh=0x0, nFileSizeLow=0xb40, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft Office Picture Manager.lnk", cAlternateFileName="MICROS~2.LNK")) returned 1 [0092.600] FindNextFileW (in: hFindFile=0x5107ce0, lpFindFileData=0x31e314 | out: lpFindFileData=0x31e314*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc11c60a0, ftCreationTime.dwHighDateTime=0x1d305f1, ftLastAccessTime.dwLowDateTime=0xc11c60a0, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0xa2f43e0, ftLastWriteTime.dwHighDateTime=0x1d6eb7f, nFileSizeHigh=0x0, nFileSizeLow=0xbc0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft Project Server 2010 Accounts.lnk", cAlternateFileName="MIBC23~1.LNK")) returned 1 [0092.600] FindNextFileW (in: hFindFile=0x5107ce0, lpFindFileData=0x31e314 | out: lpFindFileData=0x31e314*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc11c60a0, ftCreationTime.dwHighDateTime=0x1d305f1, ftLastAccessTime.dwLowDateTime=0xc11c60a0, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0xa2f43e0, ftLastWriteTime.dwHighDateTime=0x1d6eb7f, nFileSizeHigh=0x0, nFileSizeLow=0xbc0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft Project Server 2010 Accounts.lnk", cAlternateFileName="MIBC23~1.LNK")) returned 0 [0092.600] FindClose (in: hFindFile=0x5107ce0 | out: hFindFile=0x5107ce0) returned 1 [0092.600] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e59c) returned 1 [0092.600] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e5a8) returned 1 [0092.600] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Programs\\Microsoft Office\\Microsoft Office 2010 Tools\\Digital Certificate for VBA Projects.lnk", nBufferLength=0x105, lpBuffer=0x31dfb4, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Programs\\Microsoft Office\\Microsoft Office 2010 Tools\\Digital Certificate for VBA Projects.lnk", lpFilePart=0x0) returned 0x8e [0092.600] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e4a8) returned 1 [0092.600] CreateFileW (lpFileName="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Programs\\Microsoft Office\\Microsoft Office 2010 Tools\\Digital Certificate for VBA Projects.lnk" (normalized: "c:\\users\\all users\\microsoft\\windows\\start menu\\programs\\microsoft office\\microsoft office 2010 tools\\digital certificate for vba projects.lnk"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x178 [0092.600] GetFileType (hFile=0x178) returned 0x1 [0092.600] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e4a4) returned 1 [0092.600] GetFileType (hFile=0x178) returned 0x1 [0092.600] GetFileSize (in: hFile=0x178, lpFileSizeHigh=0x31e5b0 | out: lpFileSizeHigh=0x31e5b0*=0x0) returned 0xbb0 [0092.600] ReadFile (in: hFile=0x178, lpBuffer=0x279b574, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x31e55c, lpOverlapped=0x0 | out: lpBuffer=0x279b574*, lpNumberOfBytesRead=0x31e55c*=0xbb0, lpOverlapped=0x0) returned 1 [0092.600] CloseHandle (hObject=0x178) returned 1 [0092.614] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Programs\\Microsoft Office\\Microsoft Office 2010 Tools\\Digital Certificate for VBA Projects.lnk", nBufferLength=0x105, lpBuffer=0x31dfa0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Programs\\Microsoft Office\\Microsoft Office 2010 Tools\\Digital Certificate for VBA Projects.lnk", lpFilePart=0x0) returned 0x8e [0092.614] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e494) returned 1 [0092.614] CreateFileW (lpFileName="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Programs\\Microsoft Office\\Microsoft Office 2010 Tools\\Digital Certificate for VBA Projects.lnk" (normalized: "c:\\users\\all users\\microsoft\\windows\\start menu\\programs\\microsoft office\\microsoft office 2010 tools\\digital certificate for vba projects.lnk"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x178 [0092.615] GetFileType (hFile=0x178) returned 0x1 [0092.615] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e490) returned 1 [0092.615] GetFileType (hFile=0x178) returned 0x1 [0092.615] WriteFile (in: hFile=0x178, lpBuffer=0x27ed01c*, nNumberOfBytesToWrite=0xbc0, lpNumberOfBytesWritten=0x31e524, lpOverlapped=0x0 | out: lpBuffer=0x27ed01c*, lpNumberOfBytesWritten=0x31e524*=0xbc0, lpOverlapped=0x0) returned 1 [0092.616] CloseHandle (hObject=0x178) returned 1 [0092.616] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Programs\\Microsoft Office\\Microsoft Office 2010 Tools\\Digital Certificate for VBA Projects.lnk", nBufferLength=0x105, lpBuffer=0x31e0d4, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Programs\\Microsoft Office\\Microsoft Office 2010 Tools\\Digital Certificate for VBA Projects.lnk", lpFilePart=0x0) returned 0x8e [0092.617] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Programs\\Microsoft Office\\Microsoft Office 2010 Tools\\Digital Certificate for VBA Projects.lnk", nBufferLength=0x105, lpBuffer=0x31e0d4, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Programs\\Microsoft Office\\Microsoft Office 2010 Tools\\Digital Certificate for VBA Projects.lnk", lpFilePart=0x0) returned 0x8e [0092.617] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e534) returned 1 [0092.617] GetFileAttributesExW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Programs\\Microsoft Office\\Microsoft Office 2010 Tools\\Digital Certificate for VBA Projects.lnk" (normalized: "c:\\users\\all users\\microsoft\\windows\\start menu\\programs\\microsoft office\\microsoft office 2010 tools\\digital certificate for vba projects.lnk"), fInfoLevelId=0x0, lpFileInformation=0x31e5b0 | out: lpFileInformation=0x31e5b0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x77fec150, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0xc119ff40, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0x1aa485a0, ftLastWriteTime.dwHighDateTime=0x1d6eb7f, nFileSizeHigh=0x0, nFileSizeLow=0xbc0)) returned 1 [0092.617] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e530) returned 1 [0092.617] MoveFileW (lpExistingFileName="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Programs\\Microsoft Office\\Microsoft Office 2010 Tools\\Digital Certificate for VBA Projects.lnk" (normalized: "c:\\users\\all users\\microsoft\\windows\\start menu\\programs\\microsoft office\\microsoft office 2010 tools\\digital certificate for vba projects.lnk"), lpNewFileName="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Programs\\Microsoft Office\\Microsoft Office 2010 Tools\\Digital Certificate for VBA Projects.lnk" (normalized: "c:\\users\\all users\\microsoft\\windows\\start menu\\programs\\microsoft office\\microsoft office 2010 tools\\digital certificate for vba projects.lnk")) returned 1 [0092.618] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Programs\\Microsoft Office\\Microsoft Office 2010 Tools\\Microsoft Clip Organizer.lnk", nBufferLength=0x105, lpBuffer=0x31dfb4, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Programs\\Microsoft Office\\Microsoft Office 2010 Tools\\Microsoft Clip Organizer.lnk", lpFilePart=0x0) returned 0x82 [0092.618] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e4a8) returned 1 [0092.618] CreateFileW (lpFileName="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Programs\\Microsoft Office\\Microsoft Office 2010 Tools\\Microsoft Clip Organizer.lnk" (normalized: "c:\\users\\all users\\microsoft\\windows\\start menu\\programs\\microsoft office\\microsoft office 2010 tools\\microsoft clip organizer.lnk"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x178 [0092.618] GetFileType (hFile=0x178) returned 0x1 [0092.618] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e4a4) returned 1 [0092.618] GetFileType (hFile=0x178) returned 0x1 [0092.618] GetFileSize (in: hFile=0x178, lpFileSizeHigh=0x31e5b0 | out: lpFileSizeHigh=0x31e5b0*=0x0) returned 0xb70 [0092.618] ReadFile (in: hFile=0x178, lpBuffer=0x27eefcc, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x31e55c, lpOverlapped=0x0 | out: lpBuffer=0x27eefcc*, lpNumberOfBytesRead=0x31e55c*=0xb70, lpOverlapped=0x0) returned 1 [0092.631] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Programs\\Microsoft Office\\Microsoft Office 2010 Tools\\Microsoft Clip Organizer.lnk", nBufferLength=0x105, lpBuffer=0x31dfa0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Programs\\Microsoft Office\\Microsoft Office 2010 Tools\\Microsoft Clip Organizer.lnk", lpFilePart=0x0) returned 0x82 [0092.631] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e494) returned 1 [0092.631] CreateFileW (lpFileName="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Programs\\Microsoft Office\\Microsoft Office 2010 Tools\\Microsoft Clip Organizer.lnk" (normalized: "c:\\users\\all users\\microsoft\\windows\\start menu\\programs\\microsoft office\\microsoft office 2010 tools\\microsoft clip organizer.lnk"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x178 [0092.632] GetFileType (hFile=0x178) returned 0x1 [0092.632] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e490) returned 1 [0092.633] GetFileType (hFile=0x178) returned 0x1 [0092.633] WriteFile (in: hFile=0x178, lpBuffer=0x2840904*, nNumberOfBytesToWrite=0xb80, lpNumberOfBytesWritten=0x31e524, lpOverlapped=0x0 | out: lpBuffer=0x2840904*, lpNumberOfBytesWritten=0x31e524*=0xb80, lpOverlapped=0x0) returned 1 [0092.634] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Programs\\Microsoft Office\\Microsoft Office 2010 Tools\\Microsoft Clip Organizer.lnk", nBufferLength=0x105, lpBuffer=0x31e0d4, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Programs\\Microsoft Office\\Microsoft Office 2010 Tools\\Microsoft Clip Organizer.lnk", lpFilePart=0x0) returned 0x82 [0092.634] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Programs\\Microsoft Office\\Microsoft Office 2010 Tools\\Microsoft Clip Organizer.lnk", nBufferLength=0x105, lpBuffer=0x31e0d4, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Programs\\Microsoft Office\\Microsoft Office 2010 Tools\\Microsoft Clip Organizer.lnk", lpFilePart=0x0) returned 0x82 [0092.634] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e534) returned 1 [0092.634] GetFileAttributesExW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Programs\\Microsoft Office\\Microsoft Office 2010 Tools\\Microsoft Clip Organizer.lnk" (normalized: "c:\\users\\all users\\microsoft\\windows\\start menu\\programs\\microsoft office\\microsoft office 2010 tools\\microsoft clip organizer.lnk"), fInfoLevelId=0x0, lpFileInformation=0x31e5b0 | out: lpFileInformation=0x31e5b0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x77f53bd0, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0xc1179de0, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0x1aa94860, ftLastWriteTime.dwHighDateTime=0x1d6eb7f, nFileSizeHigh=0x0, nFileSizeLow=0xb80)) returned 1 [0092.634] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e530) returned 1 [0092.634] MoveFileW (lpExistingFileName="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Programs\\Microsoft Office\\Microsoft Office 2010 Tools\\Microsoft Clip Organizer.lnk" (normalized: "c:\\users\\all users\\microsoft\\windows\\start menu\\programs\\microsoft office\\microsoft office 2010 tools\\microsoft clip organizer.lnk"), lpNewFileName="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Programs\\Microsoft Office\\Microsoft Office 2010 Tools\\Microsoft Clip Organizer.lnk" (normalized: "c:\\users\\all users\\microsoft\\windows\\start menu\\programs\\microsoft office\\microsoft office 2010 tools\\microsoft clip organizer.lnk")) returned 1 [0092.635] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Programs\\Microsoft Office\\Microsoft Office 2010 Tools\\Microsoft Office 2010 Language Preferences.lnk", nBufferLength=0x105, lpBuffer=0x31dfb4, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Programs\\Microsoft Office\\Microsoft Office 2010 Tools\\Microsoft Office 2010 Language Preferences.lnk", lpFilePart=0x0) returned 0x94 [0092.635] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e4a8) returned 1 [0092.635] CreateFileW (lpFileName="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Programs\\Microsoft Office\\Microsoft Office 2010 Tools\\Microsoft Office 2010 Language Preferences.lnk" (normalized: "c:\\users\\all users\\microsoft\\windows\\start menu\\programs\\microsoft office\\microsoft office 2010 tools\\microsoft office 2010 language preferences.lnk"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x178 [0092.635] GetFileType (hFile=0x178) returned 0x1 [0092.635] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e4a4) returned 1 [0092.635] GetFileType (hFile=0x178) returned 0x1 [0092.635] GetFileSize (in: hFile=0x178, lpFileSizeHigh=0x31e5b0 | out: lpFileSizeHigh=0x31e5b0*=0x0) returned 0xac0 [0092.638] ReadFile (in: hFile=0x178, lpBuffer=0x26443bc, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x31e55c, lpOverlapped=0x0 | out: lpBuffer=0x26443bc*, lpNumberOfBytesRead=0x31e55c*=0xac0, lpOverlapped=0x0) returned 1 [0092.638] CloseHandle (hObject=0x178) returned 1 [0092.678] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Programs\\Microsoft Office\\Microsoft Office 2010 Tools\\Microsoft Office 2010 Language Preferences.lnk", nBufferLength=0x105, lpBuffer=0x31dfa0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Programs\\Microsoft Office\\Microsoft Office 2010 Tools\\Microsoft Office 2010 Language Preferences.lnk", lpFilePart=0x0) returned 0x94 [0092.678] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e494) returned 1 [0092.678] CreateFileW (lpFileName="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Programs\\Microsoft Office\\Microsoft Office 2010 Tools\\Microsoft Office 2010 Language Preferences.lnk" (normalized: "c:\\users\\all users\\microsoft\\windows\\start menu\\programs\\microsoft office\\microsoft office 2010 tools\\microsoft office 2010 language preferences.lnk"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x178 [0092.679] GetFileType (hFile=0x178) returned 0x1 [0092.679] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e490) returned 1 [0092.679] GetFileType (hFile=0x178) returned 0x1 [0092.680] WriteFile (in: hFile=0x178, lpBuffer=0x2695b28*, nNumberOfBytesToWrite=0xad0, lpNumberOfBytesWritten=0x31e524, lpOverlapped=0x0 | out: lpBuffer=0x2695b28*, lpNumberOfBytesWritten=0x31e524*=0xad0, lpOverlapped=0x0) returned 1 [0092.680] CloseHandle (hObject=0x178) returned 1 [0092.681] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Programs\\Microsoft Office\\Microsoft Office 2010 Tools\\Microsoft Office 2010 Language Preferences.lnk", nBufferLength=0x105, lpBuffer=0x31e0d4, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Programs\\Microsoft Office\\Microsoft Office 2010 Tools\\Microsoft Office 2010 Language Preferences.lnk", lpFilePart=0x0) returned 0x94 [0092.681] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Programs\\Microsoft Office\\Microsoft Office 2010 Tools\\Microsoft Office 2010 Language Preferences.lnk", nBufferLength=0x105, lpBuffer=0x31e0d4, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Programs\\Microsoft Office\\Microsoft Office 2010 Tools\\Microsoft Office 2010 Language Preferences.lnk", lpFilePart=0x0) returned 0x94 [0092.681] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e534) returned 1 [0092.681] GetFileAttributesExW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Programs\\Microsoft Office\\Microsoft Office 2010 Tools\\Microsoft Office 2010 Language Preferences.lnk" (normalized: "c:\\users\\all users\\microsoft\\windows\\start menu\\programs\\microsoft office\\microsoft office 2010 tools\\microsoft office 2010 language preferences.lnk"), fInfoLevelId=0x0, lpFileInformation=0x31e5b0 | out: lpFileInformation=0x31e5b0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x780122b0, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0xc11c60a0, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0x1ab06c80, ftLastWriteTime.dwHighDateTime=0x1d6eb7f, nFileSizeHigh=0x0, nFileSizeLow=0xad0)) returned 1 [0092.681] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e530) returned 1 [0092.681] MoveFileW (lpExistingFileName="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Programs\\Microsoft Office\\Microsoft Office 2010 Tools\\Microsoft Office 2010 Language Preferences.lnk" (normalized: "c:\\users\\all users\\microsoft\\windows\\start menu\\programs\\microsoft office\\microsoft office 2010 tools\\microsoft office 2010 language preferences.lnk"), lpNewFileName="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Programs\\Microsoft Office\\Microsoft Office 2010 Tools\\Microsoft Office 2010 Language Preferences.lnk" (normalized: "c:\\users\\all users\\microsoft\\windows\\start menu\\programs\\microsoft office\\microsoft office 2010 tools\\microsoft office 2010 language preferences.lnk")) returned 1 [0092.682] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Programs\\Microsoft Office\\Microsoft Office 2010 Tools\\Microsoft Office 2010 Upload Center.lnk", nBufferLength=0x105, lpBuffer=0x31dfb4, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Programs\\Microsoft Office\\Microsoft Office 2010 Tools\\Microsoft Office 2010 Upload Center.lnk", lpFilePart=0x0) returned 0x8d [0092.682] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e4a8) returned 1 [0092.682] CreateFileW (lpFileName="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Programs\\Microsoft Office\\Microsoft Office 2010 Tools\\Microsoft Office 2010 Upload Center.lnk" (normalized: "c:\\users\\all users\\microsoft\\windows\\start menu\\programs\\microsoft office\\microsoft office 2010 tools\\microsoft office 2010 upload center.lnk"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x178 [0092.682] GetFileType (hFile=0x178) returned 0x1 [0092.682] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e4a4) returned 1 [0092.682] GetFileType (hFile=0x178) returned 0x1 [0092.682] GetFileSize (in: hFile=0x178, lpFileSizeHigh=0x31e5b0 | out: lpFileSizeHigh=0x31e5b0*=0x0) returned 0xb20 [0092.682] ReadFile (in: hFile=0x178, lpBuffer=0x2697ac8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x31e55c, lpOverlapped=0x0 | out: lpBuffer=0x2697ac8*, lpNumberOfBytesRead=0x31e55c*=0xb20, lpOverlapped=0x0) returned 1 [0092.682] CloseHandle (hObject=0x178) returned 1 [0092.696] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Programs\\Microsoft Office\\Microsoft Office 2010 Tools\\Microsoft Office 2010 Upload Center.lnk", nBufferLength=0x105, lpBuffer=0x31dfa0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Programs\\Microsoft Office\\Microsoft Office 2010 Tools\\Microsoft Office 2010 Upload Center.lnk", lpFilePart=0x0) returned 0x8d [0092.696] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e494) returned 1 [0092.696] CreateFileW (lpFileName="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Programs\\Microsoft Office\\Microsoft Office 2010 Tools\\Microsoft Office 2010 Upload Center.lnk" (normalized: "c:\\users\\all users\\microsoft\\windows\\start menu\\programs\\microsoft office\\microsoft office 2010 tools\\microsoft office 2010 upload center.lnk"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x178 [0092.697] GetFileType (hFile=0x178) returned 0x1 [0092.697] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e490) returned 1 [0092.697] GetFileType (hFile=0x178) returned 0x1 [0092.700] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Programs\\Microsoft Office\\Microsoft Office 2010 Tools\\Microsoft Office 2010 Upload Center.lnk", nBufferLength=0x105, lpBuffer=0x31e0d4, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Programs\\Microsoft Office\\Microsoft Office 2010 Tools\\Microsoft Office 2010 Upload Center.lnk", lpFilePart=0x0) returned 0x8d [0092.700] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Programs\\Microsoft Office\\Microsoft Office 2010 Tools\\Microsoft Office 2010 Upload Center.lnk", nBufferLength=0x105, lpBuffer=0x31e0d4, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Programs\\Microsoft Office\\Microsoft Office 2010 Tools\\Microsoft Office 2010 Upload Center.lnk", lpFilePart=0x0) returned 0x8d [0092.700] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e534) returned 1 [0092.700] GetFileAttributesExW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Programs\\Microsoft Office\\Microsoft Office 2010 Tools\\Microsoft Office 2010 Upload Center.lnk" (normalized: "c:\\users\\all users\\microsoft\\windows\\start menu\\programs\\microsoft office\\microsoft office 2010 tools\\microsoft office 2010 upload center.lnk"), fInfoLevelId=0x0, lpFileInformation=0x31e5b0 | out: lpFileInformation=0x31e5b0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x77fec150, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0xc119ff40, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0x1ab2cde0, ftLastWriteTime.dwHighDateTime=0x1d6eb7f, nFileSizeHigh=0x0, nFileSizeLow=0xb30)) returned 1 [0092.700] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e530) returned 1 [0092.700] MoveFileW (lpExistingFileName="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Programs\\Microsoft Office\\Microsoft Office 2010 Tools\\Microsoft Office 2010 Upload Center.lnk" (normalized: "c:\\users\\all users\\microsoft\\windows\\start menu\\programs\\microsoft office\\microsoft office 2010 tools\\microsoft office 2010 upload center.lnk"), lpNewFileName="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Programs\\Microsoft Office\\Microsoft Office 2010 Tools\\Microsoft Office 2010 Upload Center.lnk" (normalized: "c:\\users\\all users\\microsoft\\windows\\start menu\\programs\\microsoft office\\microsoft office 2010 tools\\microsoft office 2010 upload center.lnk")) returned 1 [0092.701] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Programs\\Microsoft Office\\Microsoft Office 2010 Tools\\Microsoft Office Picture Manager.lnk", nBufferLength=0x105, lpBuffer=0x31dfb4, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Programs\\Microsoft Office\\Microsoft Office 2010 Tools\\Microsoft Office Picture Manager.lnk", lpFilePart=0x0) returned 0x8a [0092.701] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e4a8) returned 1 [0092.701] CreateFileW (lpFileName="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Programs\\Microsoft Office\\Microsoft Office 2010 Tools\\Microsoft Office Picture Manager.lnk" (normalized: "c:\\users\\all users\\microsoft\\windows\\start menu\\programs\\microsoft office\\microsoft office 2010 tools\\microsoft office picture manager.lnk"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x178 [0092.701] GetFileType (hFile=0x178) returned 0x1 [0092.701] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e4a4) returned 1 [0092.701] GetFileType (hFile=0x178) returned 0x1 [0092.701] GetFileSize (in: hFile=0x178, lpFileSizeHigh=0x31e5b0 | out: lpFileSizeHigh=0x31e5b0*=0x0) returned 0xb40 [0092.701] ReadFile (in: hFile=0x178, lpBuffer=0x26eb230, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x31e55c, lpOverlapped=0x0 | out: lpBuffer=0x26eb230*, lpNumberOfBytesRead=0x31e55c*=0xb40, lpOverlapped=0x0) returned 1 [0092.701] CloseHandle (hObject=0x178) returned 1 [0092.714] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Programs\\Microsoft Office\\Microsoft Office 2010 Tools\\Microsoft Office Picture Manager.lnk", nBufferLength=0x105, lpBuffer=0x31dfa0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Programs\\Microsoft Office\\Microsoft Office 2010 Tools\\Microsoft Office Picture Manager.lnk", lpFilePart=0x0) returned 0x8a [0092.714] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e494) returned 1 [0092.715] CreateFileW (lpFileName="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Programs\\Microsoft Office\\Microsoft Office 2010 Tools\\Microsoft Office Picture Manager.lnk" (normalized: "c:\\users\\all users\\microsoft\\windows\\start menu\\programs\\microsoft office\\microsoft office 2010 tools\\microsoft office picture manager.lnk"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x178 [0092.718] GetFileType (hFile=0x178) returned 0x1 [0092.718] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e490) returned 1 [0092.718] GetFileType (hFile=0x178) returned 0x1 [0092.720] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Programs\\Microsoft Office\\Microsoft Office 2010 Tools\\Microsoft Office Picture Manager.lnk", nBufferLength=0x105, lpBuffer=0x31e0d4, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Programs\\Microsoft Office\\Microsoft Office 2010 Tools\\Microsoft Office Picture Manager.lnk", lpFilePart=0x0) returned 0x8a [0092.720] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Programs\\Microsoft Office\\Microsoft Office 2010 Tools\\Microsoft Office Picture Manager.lnk", nBufferLength=0x105, lpBuffer=0x31e0d4, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Programs\\Microsoft Office\\Microsoft Office 2010 Tools\\Microsoft Office Picture Manager.lnk", lpFilePart=0x0) returned 0x8a [0092.720] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e534) returned 1 [0092.720] GetFileAttributesExW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Programs\\Microsoft Office\\Microsoft Office 2010 Tools\\Microsoft Office Picture Manager.lnk" (normalized: "c:\\users\\all users\\microsoft\\windows\\start menu\\programs\\microsoft office\\microsoft office 2010 tools\\microsoft office picture manager.lnk"), fInfoLevelId=0x0, lpFileInformation=0x31e5b0 | out: lpFileInformation=0x31e5b0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x77fec150, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0xc1179de0, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0x1ab52f40, ftLastWriteTime.dwHighDateTime=0x1d6eb7f, nFileSizeHigh=0x0, nFileSizeLow=0xb50)) returned 1 [0092.720] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e530) returned 1 [0092.720] MoveFileW (lpExistingFileName="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Programs\\Microsoft Office\\Microsoft Office 2010 Tools\\Microsoft Office Picture Manager.lnk" (normalized: "c:\\users\\all users\\microsoft\\windows\\start menu\\programs\\microsoft office\\microsoft office 2010 tools\\microsoft office picture manager.lnk"), lpNewFileName="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Programs\\Microsoft Office\\Microsoft Office 2010 Tools\\Microsoft Office Picture Manager.lnk" (normalized: "c:\\users\\all users\\microsoft\\windows\\start menu\\programs\\microsoft office\\microsoft office 2010 tools\\microsoft office picture manager.lnk")) returned 1 [0092.721] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Programs\\Microsoft Office\\Microsoft Office 2010 Tools\\Microsoft Project Server 2010 Accounts.lnk", nBufferLength=0x105, lpBuffer=0x31dfb4, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Programs\\Microsoft Office\\Microsoft Office 2010 Tools\\Microsoft Project Server 2010 Accounts.lnk", lpFilePart=0x0) returned 0x90 [0092.721] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e4a8) returned 1 [0092.721] CreateFileW (lpFileName="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Programs\\Microsoft Office\\Microsoft Office 2010 Tools\\Microsoft Project Server 2010 Accounts.lnk" (normalized: "c:\\users\\all users\\microsoft\\windows\\start menu\\programs\\microsoft office\\microsoft office 2010 tools\\microsoft project server 2010 accounts.lnk"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x178 [0092.721] GetFileType (hFile=0x178) returned 0x1 [0092.721] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e4a4) returned 1 [0092.721] GetFileType (hFile=0x178) returned 0x1 [0092.721] GetFileSize (in: hFile=0x178, lpFileSizeHigh=0x31e5b0 | out: lpFileSizeHigh=0x31e5b0*=0x0) returned 0xbc0 [0092.721] ReadFile (in: hFile=0x178, lpBuffer=0x273eac0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x31e55c, lpOverlapped=0x0 | out: lpBuffer=0x273eac0*, lpNumberOfBytesRead=0x31e55c*=0xbc0, lpOverlapped=0x0) returned 1 [0092.721] CloseHandle (hObject=0x178) returned 1 [0092.735] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Programs\\Microsoft Office\\Microsoft Office 2010 Tools\\Microsoft Project Server 2010 Accounts.lnk", nBufferLength=0x105, lpBuffer=0x31dfa0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Programs\\Microsoft Office\\Microsoft Office 2010 Tools\\Microsoft Project Server 2010 Accounts.lnk", lpFilePart=0x0) returned 0x90 [0092.735] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e494) returned 1 [0092.735] CreateFileW (lpFileName="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Programs\\Microsoft Office\\Microsoft Office 2010 Tools\\Microsoft Project Server 2010 Accounts.lnk" (normalized: "c:\\users\\all users\\microsoft\\windows\\start menu\\programs\\microsoft office\\microsoft office 2010 tools\\microsoft project server 2010 accounts.lnk"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x178 [0092.736] GetFileType (hFile=0x178) returned 0x1 [0092.736] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e490) returned 1 [0092.736] GetFileType (hFile=0x178) returned 0x1 [0092.736] WriteFile (in: hFile=0x178, lpBuffer=0x27905c0*, nNumberOfBytesToWrite=0xbd0, lpNumberOfBytesWritten=0x31e524, lpOverlapped=0x0 | out: lpBuffer=0x27905c0*, lpNumberOfBytesWritten=0x31e524*=0xbd0, lpOverlapped=0x0) returned 1 [0092.737] CloseHandle (hObject=0x178) returned 1 [0092.738] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Programs\\Microsoft Office\\Microsoft Office 2010 Tools\\Microsoft Project Server 2010 Accounts.lnk", nBufferLength=0x105, lpBuffer=0x31e0d4, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Programs\\Microsoft Office\\Microsoft Office 2010 Tools\\Microsoft Project Server 2010 Accounts.lnk", lpFilePart=0x0) returned 0x90 [0092.738] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Programs\\Microsoft Office\\Microsoft Office 2010 Tools\\Microsoft Project Server 2010 Accounts.lnk", nBufferLength=0x105, lpBuffer=0x31e0d4, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Programs\\Microsoft Office\\Microsoft Office 2010 Tools\\Microsoft Project Server 2010 Accounts.lnk", lpFilePart=0x0) returned 0x90 [0092.738] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e534) returned 1 [0092.738] GetFileAttributesExW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Programs\\Microsoft Office\\Microsoft Office 2010 Tools\\Microsoft Project Server 2010 Accounts.lnk" (normalized: "c:\\users\\all users\\microsoft\\windows\\start menu\\programs\\microsoft office\\microsoft office 2010 tools\\microsoft project server 2010 accounts.lnk"), fInfoLevelId=0x0, lpFileInformation=0x31e5b0 | out: lpFileInformation=0x31e5b0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc11c60a0, ftCreationTime.dwHighDateTime=0x1d305f1, ftLastAccessTime.dwLowDateTime=0xc11c60a0, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0x1ab790a0, ftLastWriteTime.dwHighDateTime=0x1d6eb7f, nFileSizeHigh=0x0, nFileSizeLow=0xbd0)) returned 1 [0092.738] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e530) returned 1 [0092.738] MoveFileW (lpExistingFileName="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Programs\\Microsoft Office\\Microsoft Office 2010 Tools\\Microsoft Project Server 2010 Accounts.lnk" (normalized: "c:\\users\\all users\\microsoft\\windows\\start menu\\programs\\microsoft office\\microsoft office 2010 tools\\microsoft project server 2010 accounts.lnk"), lpNewFileName="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Programs\\Microsoft Office\\Microsoft Office 2010 Tools\\Microsoft Project Server 2010 Accounts.lnk" (normalized: "c:\\users\\all users\\microsoft\\windows\\start menu\\programs\\microsoft office\\microsoft office 2010 tools\\microsoft project server 2010 accounts.lnk")) returned 1 [0092.739] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e654) returned 1 [0092.739] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Programs\\SharePoint", nBufferLength=0x105, lpBuffer=0x31e15c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Programs\\SharePoint", lpFilePart=0x0) returned 0x43 [0092.739] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Programs\\SharePoint\\", nBufferLength=0x105, lpBuffer=0x31e130, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Programs\\SharePoint\\", lpFilePart=0x0) returned 0x44 [0092.739] FindFirstFileW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Programs\\SharePoint\\*", lpFindFileData=0x31e37c | out: lpFindFileData=0x31e37c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x78038410, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x78038410, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x78038410, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5107a60 [0092.739] FindNextFileW (in: hFindFile=0x5107a60, lpFindFileData=0x31e38c | out: lpFindFileData=0x31e38c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x78038410, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x78038410, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x78038410, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0092.739] FindNextFileW (in: hFindFile=0x5107a60, lpFindFileData=0x31e38c | out: lpFindFileData=0x31e38c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x78038410, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x78038410, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xa3406a0, ftLastWriteTime.dwHighDateTime=0x1d6eb7f, nFileSizeHigh=0x0, nFileSizeLow=0xbf0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft SharePoint Workspace 2010.lnk", cAlternateFileName="MICROS~1.LNK")) returned 1 [0092.739] FindNextFileW (in: hFindFile=0x5107a60, lpFindFileData=0x31e38c | out: lpFindFileData=0x31e38c*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0092.739] FindClose (in: hFindFile=0x5107a60 | out: hFindFile=0x5107a60) returned 1 [0092.739] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e614) returned 1 [0092.739] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e620) returned 1 [0092.739] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e654) returned 1 [0092.739] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Programs\\SharePoint", nBufferLength=0x105, lpBuffer=0x31e15c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Programs\\SharePoint", lpFilePart=0x0) returned 0x43 [0092.740] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Programs\\SharePoint\\", nBufferLength=0x105, lpBuffer=0x31e130, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Programs\\SharePoint\\", lpFilePart=0x0) returned 0x44 [0092.740] FindFirstFileW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Programs\\SharePoint\\*", lpFindFileData=0x31e37c | out: lpFindFileData=0x31e37c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x78038410, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x78038410, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x78038410, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5107a60 [0092.740] FindNextFileW (in: hFindFile=0x5107a60, lpFindFileData=0x31e38c | out: lpFindFileData=0x31e38c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x78038410, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x78038410, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x78038410, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0092.740] FindNextFileW (in: hFindFile=0x5107a60, lpFindFileData=0x31e38c | out: lpFindFileData=0x31e38c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x78038410, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x78038410, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xa3406a0, ftLastWriteTime.dwHighDateTime=0x1d6eb7f, nFileSizeHigh=0x0, nFileSizeLow=0xbf0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft SharePoint Workspace 2010.lnk", cAlternateFileName="MICROS~1.LNK")) returned 1 [0092.740] FindNextFileW (in: hFindFile=0x5107a60, lpFindFileData=0x31e38c | out: lpFindFileData=0x31e38c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x78038410, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x78038410, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xa3406a0, ftLastWriteTime.dwHighDateTime=0x1d6eb7f, nFileSizeHigh=0x0, nFileSizeLow=0xbf0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft SharePoint Workspace 2010.lnk", cAlternateFileName="MICROS~1.LNK")) returned 0 [0092.740] FindClose (in: hFindFile=0x5107a60 | out: hFindFile=0x5107a60) returned 1 [0092.740] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e614) returned 1 [0092.740] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e620) returned 1 [0092.740] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Programs\\SharePoint\\Microsoft SharePoint Workspace 2010.lnk", nBufferLength=0x105, lpBuffer=0x31e02c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Programs\\SharePoint\\Microsoft SharePoint Workspace 2010.lnk", lpFilePart=0x0) returned 0x6b [0092.740] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e520) returned 1 [0092.740] CreateFileW (lpFileName="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Programs\\SharePoint\\Microsoft SharePoint Workspace 2010.lnk" (normalized: "c:\\users\\all users\\microsoft\\windows\\start menu\\programs\\sharepoint\\microsoft sharepoint workspace 2010.lnk"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x178 [0092.741] GetFileType (hFile=0x178) returned 0x1 [0092.741] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e51c) returned 1 [0092.741] GetFileType (hFile=0x178) returned 0x1 [0092.741] GetFileSize (in: hFile=0x178, lpFileSizeHigh=0x31e628 | out: lpFileSizeHigh=0x31e628*=0x0) returned 0xbf0 [0092.741] ReadFile (in: hFile=0x178, lpBuffer=0x2794094, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x31e5d4, lpOverlapped=0x0 | out: lpBuffer=0x2794094*, lpNumberOfBytesRead=0x31e5d4*=0xbf0, lpOverlapped=0x0) returned 1 [0092.741] CloseHandle (hObject=0x178) returned 1 [0092.754] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Programs\\SharePoint\\Microsoft SharePoint Workspace 2010.lnk", nBufferLength=0x105, lpBuffer=0x31e018, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Programs\\SharePoint\\Microsoft SharePoint Workspace 2010.lnk", lpFilePart=0x0) returned 0x6b [0092.754] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e50c) returned 1 [0092.754] CreateFileW (lpFileName="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Programs\\SharePoint\\Microsoft SharePoint Workspace 2010.lnk" (normalized: "c:\\users\\all users\\microsoft\\windows\\start menu\\programs\\sharepoint\\microsoft sharepoint workspace 2010.lnk"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x178 [0092.756] GetFileType (hFile=0x178) returned 0x1 [0092.756] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e508) returned 1 [0092.756] GetFileType (hFile=0x178) returned 0x1 [0092.756] WriteFile (in: hFile=0x178, lpBuffer=0x27e5c30*, nNumberOfBytesToWrite=0xc00, lpNumberOfBytesWritten=0x31e59c, lpOverlapped=0x0 | out: lpBuffer=0x27e5c30*, lpNumberOfBytesWritten=0x31e59c*=0xc00, lpOverlapped=0x0) returned 1 [0092.756] CloseHandle (hObject=0x178) returned 1 [0092.757] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Programs\\SharePoint\\Microsoft SharePoint Workspace 2010.lnk", nBufferLength=0x105, lpBuffer=0x31e14c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Programs\\SharePoint\\Microsoft SharePoint Workspace 2010.lnk", lpFilePart=0x0) returned 0x6b [0092.757] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Programs\\SharePoint\\Microsoft SharePoint Workspace 2010.lnk", nBufferLength=0x105, lpBuffer=0x31e14c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Programs\\SharePoint\\Microsoft SharePoint Workspace 2010.lnk", lpFilePart=0x0) returned 0x6b [0092.757] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e5ac) returned 1 [0092.757] GetFileAttributesExW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Programs\\SharePoint\\Microsoft SharePoint Workspace 2010.lnk" (normalized: "c:\\users\\all users\\microsoft\\windows\\start menu\\programs\\sharepoint\\microsoft sharepoint workspace 2010.lnk"), fInfoLevelId=0x0, lpFileInformation=0x31e628 | out: lpFileInformation=0x31e628*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x78038410, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x78038410, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x1ab9f200, ftLastWriteTime.dwHighDateTime=0x1d6eb7f, nFileSizeHigh=0x0, nFileSizeLow=0xc00)) returned 1 [0092.757] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e5a8) returned 1 [0092.757] MoveFileW (lpExistingFileName="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Programs\\SharePoint\\Microsoft SharePoint Workspace 2010.lnk" (normalized: "c:\\users\\all users\\microsoft\\windows\\start menu\\programs\\sharepoint\\microsoft sharepoint workspace 2010.lnk"), lpNewFileName="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Programs\\SharePoint\\Microsoft SharePoint Workspace 2010.lnk" (normalized: "c:\\users\\all users\\microsoft\\windows\\start menu\\programs\\sharepoint\\microsoft sharepoint workspace 2010.lnk")) returned 1 [0092.758] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e654) returned 1 [0092.758] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Programs\\Startup", nBufferLength=0x105, lpBuffer=0x31e15c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Programs\\Startup", lpFilePart=0x0) returned 0x40 [0092.758] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Programs\\Startup\\", nBufferLength=0x105, lpBuffer=0x31e130, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Programs\\Startup\\", lpFilePart=0x0) returned 0x41 [0092.758] FindFirstFileW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Programs\\Startup\\*", lpFindFileData=0x31e37c | out: lpFindFileData=0x31e37c*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0xfd9dbcac, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x2832bdaf, ftLastAccessTime.dwHighDateTime=0x1ca043f, ftLastWriteTime.dwLowDateTime=0x288ad099, ftLastWriteTime.dwHighDateTime=0x1ca043f, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5107b60 [0092.758] FindNextFileW (in: hFindFile=0x5107b60, lpFindFileData=0x31e38c | out: lpFindFileData=0x31e38c*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0xfd9dbcac, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x2832bdaf, ftLastAccessTime.dwHighDateTime=0x1ca043f, ftLastWriteTime.dwLowDateTime=0x288ad099, ftLastWriteTime.dwHighDateTime=0x1ca043f, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0092.758] FindNextFileW (in: hFindFile=0x5107b60, lpFindFileData=0x31e38c | out: lpFindFileData=0x31e38c*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0x2832bdaf, ftCreationTime.dwHighDateTime=0x1ca043f, ftLastAccessTime.dwLowDateTime=0x2832bdaf, ftLastAccessTime.dwHighDateTime=0x1ca043f, ftLastWriteTime.dwLowDateTime=0x288ad099, ftLastWriteTime.dwHighDateTime=0x1ca043f, nFileSizeHigh=0x0, nFileSizeLow=0xae, dwReserved0=0x0, dwReserved1=0x0, cFileName="desktop.ini", cAlternateFileName="")) returned 1 [0092.758] FindNextFileW (in: hFindFile=0x5107b60, lpFindFileData=0x31e38c | out: lpFindFileData=0x31e38c*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0092.759] FindClose (in: hFindFile=0x5107b60 | out: hFindFile=0x5107b60) returned 1 [0092.759] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e614) returned 1 [0092.759] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e620) returned 1 [0092.759] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e654) returned 1 [0092.759] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Programs\\Startup", nBufferLength=0x105, lpBuffer=0x31e15c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Programs\\Startup", lpFilePart=0x0) returned 0x40 [0092.759] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Programs\\Startup\\", nBufferLength=0x105, lpBuffer=0x31e130, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Programs\\Startup\\", lpFilePart=0x0) returned 0x41 [0092.759] FindFirstFileW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Programs\\Startup\\*", lpFindFileData=0x31e37c | out: lpFindFileData=0x31e37c*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0xfd9dbcac, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x2832bdaf, ftLastAccessTime.dwHighDateTime=0x1ca043f, ftLastWriteTime.dwLowDateTime=0x288ad099, ftLastWriteTime.dwHighDateTime=0x1ca043f, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5107b60 [0092.759] FindNextFileW (in: hFindFile=0x5107b60, lpFindFileData=0x31e38c | out: lpFindFileData=0x31e38c*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0xfd9dbcac, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x2832bdaf, ftLastAccessTime.dwHighDateTime=0x1ca043f, ftLastWriteTime.dwLowDateTime=0x288ad099, ftLastWriteTime.dwHighDateTime=0x1ca043f, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0092.759] FindNextFileW (in: hFindFile=0x5107b60, lpFindFileData=0x31e38c | out: lpFindFileData=0x31e38c*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0x2832bdaf, ftCreationTime.dwHighDateTime=0x1ca043f, ftLastAccessTime.dwLowDateTime=0x2832bdaf, ftLastAccessTime.dwHighDateTime=0x1ca043f, ftLastWriteTime.dwLowDateTime=0x288ad099, ftLastWriteTime.dwHighDateTime=0x1ca043f, nFileSizeHigh=0x0, nFileSizeLow=0xae, dwReserved0=0x0, dwReserved1=0x0, cFileName="desktop.ini", cAlternateFileName="")) returned 1 [0092.759] FindNextFileW (in: hFindFile=0x5107b60, lpFindFileData=0x31e38c | out: lpFindFileData=0x31e38c*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0x2832bdaf, ftCreationTime.dwHighDateTime=0x1ca043f, ftLastAccessTime.dwLowDateTime=0x2832bdaf, ftLastAccessTime.dwHighDateTime=0x1ca043f, ftLastWriteTime.dwLowDateTime=0x288ad099, ftLastWriteTime.dwHighDateTime=0x1ca043f, nFileSizeHigh=0x0, nFileSizeLow=0xae, dwReserved0=0x0, dwReserved1=0x0, cFileName="desktop.ini", cAlternateFileName="")) returned 0 [0092.759] FindClose (in: hFindFile=0x5107b60 | out: hFindFile=0x5107b60) returned 1 [0092.759] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e614) returned 1 [0092.759] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e620) returned 1 [0092.759] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e654) returned 1 [0092.760] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Programs\\Tablet PC", nBufferLength=0x105, lpBuffer=0x31e15c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Programs\\Tablet PC", lpFilePart=0x0) returned 0x42 [0092.760] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Programs\\Tablet PC\\", nBufferLength=0x105, lpBuffer=0x31e130, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Programs\\Tablet PC\\", lpFilePart=0x0) returned 0x43 [0092.760] FindFirstFileW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Programs\\Tablet PC\\*", lpFindFileData=0x31e37c | out: lpFindFileData=0x31e37c*(dwFileAttributes=0x13, ftCreationTime.dwLowDateTime=0x9182055d, ftCreationTime.dwHighDateTime=0x1cbf8eb, ftLastAccessTime.dwLowDateTime=0x9182055d, ftLastAccessTime.dwHighDateTime=0x1cbf8eb, ftLastWriteTime.dwLowDateTime=0x9182055d, ftLastWriteTime.dwHighDateTime=0x1cbf8eb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5107b60 [0092.760] FindNextFileW (in: hFindFile=0x5107b60, lpFindFileData=0x31e38c | out: lpFindFileData=0x31e38c*(dwFileAttributes=0x13, ftCreationTime.dwLowDateTime=0x9182055d, ftCreationTime.dwHighDateTime=0x1cbf8eb, ftLastAccessTime.dwLowDateTime=0x9182055d, ftLastAccessTime.dwHighDateTime=0x1cbf8eb, ftLastWriteTime.dwLowDateTime=0x9182055d, ftLastWriteTime.dwHighDateTime=0x1cbf8eb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0092.760] FindNextFileW (in: hFindFile=0x5107b60, lpFindFileData=0x31e38c | out: lpFindFileData=0x31e38c*(dwFileAttributes=0x13, ftCreationTime.dwLowDateTime=0x9182055d, ftCreationTime.dwHighDateTime=0x1cbf8eb, ftLastAccessTime.dwLowDateTime=0x9182055d, ftLastAccessTime.dwHighDateTime=0x1cbf8eb, ftLastWriteTime.dwLowDateTime=0x9182055d, ftLastWriteTime.dwHighDateTime=0x1cbf8eb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 0 [0092.760] FindClose (in: hFindFile=0x5107b60 | out: hFindFile=0x5107b60) returned 1 [0092.760] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e614) returned 1 [0092.760] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e620) returned 1 [0092.760] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e654) returned 1 [0092.760] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Programs\\Tablet PC", nBufferLength=0x105, lpBuffer=0x31e15c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Programs\\Tablet PC", lpFilePart=0x0) returned 0x42 [0092.760] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Programs\\Tablet PC\\", nBufferLength=0x105, lpBuffer=0x31e130, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Programs\\Tablet PC\\", lpFilePart=0x0) returned 0x43 [0092.761] FindFirstFileW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Programs\\Tablet PC\\*", lpFindFileData=0x31e37c | out: lpFindFileData=0x31e37c*(dwFileAttributes=0x13, ftCreationTime.dwLowDateTime=0x9182055d, ftCreationTime.dwHighDateTime=0x1cbf8eb, ftLastAccessTime.dwLowDateTime=0x9182055d, ftLastAccessTime.dwHighDateTime=0x1cbf8eb, ftLastWriteTime.dwLowDateTime=0x9182055d, ftLastWriteTime.dwHighDateTime=0x1cbf8eb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5107b60 [0092.761] FindNextFileW (in: hFindFile=0x5107b60, lpFindFileData=0x31e38c | out: lpFindFileData=0x31e38c*(dwFileAttributes=0x13, ftCreationTime.dwLowDateTime=0x9182055d, ftCreationTime.dwHighDateTime=0x1cbf8eb, ftLastAccessTime.dwLowDateTime=0x9182055d, ftLastAccessTime.dwHighDateTime=0x1cbf8eb, ftLastWriteTime.dwLowDateTime=0x9182055d, ftLastWriteTime.dwHighDateTime=0x1cbf8eb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0092.761] FindNextFileW (in: hFindFile=0x5107b60, lpFindFileData=0x31e38c | out: lpFindFileData=0x31e38c*(dwFileAttributes=0x13, ftCreationTime.dwLowDateTime=0x9182055d, ftCreationTime.dwHighDateTime=0x1cbf8eb, ftLastAccessTime.dwLowDateTime=0x9182055d, ftLastAccessTime.dwHighDateTime=0x1cbf8eb, ftLastWriteTime.dwLowDateTime=0x9182055d, ftLastWriteTime.dwHighDateTime=0x1cbf8eb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 0 [0092.761] FindClose (in: hFindFile=0x5107b60 | out: hFindFile=0x5107b60) returned 1 [0092.761] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e614) returned 1 [0092.761] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e620) returned 1 [0092.761] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e744) returned 1 [0092.761] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Windows\\Templates", nBufferLength=0x105, lpBuffer=0x31e24c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Microsoft\\Windows\\Templates", lpFilePart=0x0) returned 0x2e [0092.761] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Windows\\Templates\\", nBufferLength=0x105, lpBuffer=0x31e220, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Microsoft\\Windows\\Templates\\", lpFilePart=0x0) returned 0x2f [0092.761] FindFirstFileW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Windows\\Templates\\*", lpFindFileData=0x31e46c | out: lpFindFileData=0x31e46c*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xfd9dbcac, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd9dbcac, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xaeea3462, ftLastWriteTime.dwHighDateTime=0x1ca042b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5107b60 [0092.762] FindNextFileW (in: hFindFile=0x5107b60, lpFindFileData=0x31e47c | out: lpFindFileData=0x31e47c*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xfd9dbcac, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd9dbcac, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xaeea3462, ftLastWriteTime.dwHighDateTime=0x1ca042b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0092.762] FindNextFileW (in: hFindFile=0x5107b60, lpFindFileData=0x31e47c | out: lpFindFileData=0x31e47c*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xfd9dbcac, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd9dbcac, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xaeea3462, ftLastWriteTime.dwHighDateTime=0x1ca042b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 0 [0092.762] FindClose (in: hFindFile=0x5107b60 | out: hFindFile=0x5107b60) returned 1 [0092.762] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e704) returned 1 [0092.762] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e710) returned 1 [0092.762] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e744) returned 1 [0092.762] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Windows\\Templates", nBufferLength=0x105, lpBuffer=0x31e24c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Microsoft\\Windows\\Templates", lpFilePart=0x0) returned 0x2e [0092.762] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Windows\\Templates\\", nBufferLength=0x105, lpBuffer=0x31e220, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Microsoft\\Windows\\Templates\\", lpFilePart=0x0) returned 0x2f [0092.762] FindFirstFileW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Windows\\Templates\\*", lpFindFileData=0x31e46c | out: lpFindFileData=0x31e46c*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xfd9dbcac, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd9dbcac, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xaeea3462, ftLastWriteTime.dwHighDateTime=0x1ca042b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5107b60 [0092.762] FindNextFileW (in: hFindFile=0x5107b60, lpFindFileData=0x31e47c | out: lpFindFileData=0x31e47c*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xfd9dbcac, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd9dbcac, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xaeea3462, ftLastWriteTime.dwHighDateTime=0x1ca042b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0092.762] FindNextFileW (in: hFindFile=0x5107b60, lpFindFileData=0x31e47c | out: lpFindFileData=0x31e47c*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xfd9dbcac, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd9dbcac, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xaeea3462, ftLastWriteTime.dwHighDateTime=0x1ca042b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 0 [0092.762] FindClose (in: hFindFile=0x5107b60 | out: hFindFile=0x5107b60) returned 1 [0092.763] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e704) returned 1 [0092.763] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e710) returned 1 [0092.763] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e744) returned 1 [0092.763] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Windows\\WER", nBufferLength=0x105, lpBuffer=0x31e24c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Microsoft\\Windows\\WER", lpFilePart=0x0) returned 0x28 [0092.763] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Windows\\WER\\", nBufferLength=0x105, lpBuffer=0x31e220, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Microsoft\\Windows\\WER\\", lpFilePart=0x0) returned 0x29 [0092.763] FindFirstFileW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Windows\\WER\\*", lpFindFileData=0x31e46c | out: lpFindFileData=0x31e46c*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xfd9dbcac, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfda01e06, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xfda01e06, ftLastWriteTime.dwHighDateTime=0x1ca0431, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5107b60 [0092.763] FindNextFileW (in: hFindFile=0x5107b60, lpFindFileData=0x31e47c | out: lpFindFileData=0x31e47c*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xfd9dbcac, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfda01e06, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xfda01e06, ftLastWriteTime.dwHighDateTime=0x1ca0431, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0092.763] FindNextFileW (in: hFindFile=0x5107b60, lpFindFileData=0x31e47c | out: lpFindFileData=0x31e47c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfda01e06, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfda01e06, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0x9a0a5fd1, ftLastWriteTime.dwHighDateTime=0x1ca042b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="ReportArchive", cAlternateFileName="REPORT~1")) returned 1 [0092.763] FindNextFileW (in: hFindFile=0x5107b60, lpFindFileData=0x31e47c | out: lpFindFileData=0x31e47c*(dwFileAttributes=0x810, ftCreationTime.dwLowDateTime=0xfda01e06, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x2fb59300, ftLastAccessTime.dwHighDateTime=0x1d42023, ftLastWriteTime.dwLowDateTime=0x2fb59300, ftLastWriteTime.dwHighDateTime=0x1d42023, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="ReportQueue", cAlternateFileName="REPORT~2")) returned 1 [0092.763] FindNextFileW (in: hFindFile=0x5107b60, lpFindFileData=0x31e47c | out: lpFindFileData=0x31e47c*(dwFileAttributes=0x810, ftCreationTime.dwLowDateTime=0xfda01e06, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x2fb59300, ftLastAccessTime.dwHighDateTime=0x1d42023, ftLastWriteTime.dwLowDateTime=0x2fb59300, ftLastWriteTime.dwHighDateTime=0x1d42023, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="ReportQueue", cAlternateFileName="REPORT~2")) returned 0 [0092.764] FindClose (in: hFindFile=0x5107b60 | out: hFindFile=0x5107b60) returned 1 [0092.764] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e704) returned 1 [0092.764] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e710) returned 1 [0092.764] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e744) returned 1 [0092.764] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Windows\\WER", nBufferLength=0x105, lpBuffer=0x31e24c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Microsoft\\Windows\\WER", lpFilePart=0x0) returned 0x28 [0092.764] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Windows\\WER\\", nBufferLength=0x105, lpBuffer=0x31e220, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Microsoft\\Windows\\WER\\", lpFilePart=0x0) returned 0x29 [0092.764] FindFirstFileW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Windows\\WER\\*", lpFindFileData=0x31e46c | out: lpFindFileData=0x31e46c*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xfd9dbcac, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfda01e06, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xfda01e06, ftLastWriteTime.dwHighDateTime=0x1ca0431, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5107b60 [0092.764] FindNextFileW (in: hFindFile=0x5107b60, lpFindFileData=0x31e47c | out: lpFindFileData=0x31e47c*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xfd9dbcac, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfda01e06, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xfda01e06, ftLastWriteTime.dwHighDateTime=0x1ca0431, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0092.764] FindNextFileW (in: hFindFile=0x5107b60, lpFindFileData=0x31e47c | out: lpFindFileData=0x31e47c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfda01e06, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfda01e06, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0x9a0a5fd1, ftLastWriteTime.dwHighDateTime=0x1ca042b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="ReportArchive", cAlternateFileName="REPORT~1")) returned 1 [0092.764] FindNextFileW (in: hFindFile=0x5107b60, lpFindFileData=0x31e47c | out: lpFindFileData=0x31e47c*(dwFileAttributes=0x810, ftCreationTime.dwLowDateTime=0xfda01e06, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x2fb59300, ftLastAccessTime.dwHighDateTime=0x1d42023, ftLastWriteTime.dwLowDateTime=0x2fb59300, ftLastWriteTime.dwHighDateTime=0x1d42023, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="ReportQueue", cAlternateFileName="REPORT~2")) returned 1 [0092.764] FindNextFileW (in: hFindFile=0x5107b60, lpFindFileData=0x31e47c | out: lpFindFileData=0x31e47c*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0092.764] FindClose (in: hFindFile=0x5107b60 | out: hFindFile=0x5107b60) returned 1 [0092.765] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e704) returned 1 [0092.765] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e710) returned 1 [0092.765] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e6cc) returned 1 [0092.765] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Windows\\WER\\ReportArchive", nBufferLength=0x105, lpBuffer=0x31e1d4, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Microsoft\\Windows\\WER\\ReportArchive", lpFilePart=0x0) returned 0x36 [0092.765] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Windows\\WER\\ReportArchive\\", nBufferLength=0x105, lpBuffer=0x31e1a8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Microsoft\\Windows\\WER\\ReportArchive\\", lpFilePart=0x0) returned 0x37 [0092.765] FindFirstFileW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Windows\\WER\\ReportArchive\\*", lpFindFileData=0x31e3f4 | out: lpFindFileData=0x31e3f4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfda01e06, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfda01e06, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0x9a0a5fd1, ftLastWriteTime.dwHighDateTime=0x1ca042b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5107b60 [0092.765] FindNextFileW (in: hFindFile=0x5107b60, lpFindFileData=0x31e404 | out: lpFindFileData=0x31e404*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfda01e06, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfda01e06, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0x9a0a5fd1, ftLastWriteTime.dwHighDateTime=0x1ca042b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0092.765] FindNextFileW (in: hFindFile=0x5107b60, lpFindFileData=0x31e404 | out: lpFindFileData=0x31e404*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfda01e06, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfda01e06, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0x9a0a5fd1, ftLastWriteTime.dwHighDateTime=0x1ca042b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 0 [0092.765] FindClose (in: hFindFile=0x5107b60 | out: hFindFile=0x5107b60) returned 1 [0092.765] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e68c) returned 1 [0092.765] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e698) returned 1 [0092.765] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e6cc) returned 1 [0092.765] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Windows\\WER\\ReportArchive", nBufferLength=0x105, lpBuffer=0x31e1d4, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Microsoft\\Windows\\WER\\ReportArchive", lpFilePart=0x0) returned 0x36 [0092.765] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Windows\\WER\\ReportArchive\\", nBufferLength=0x105, lpBuffer=0x31e1a8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Microsoft\\Windows\\WER\\ReportArchive\\", lpFilePart=0x0) returned 0x37 [0092.765] FindFirstFileW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Windows\\WER\\ReportArchive\\*", lpFindFileData=0x31e3f4 | out: lpFindFileData=0x31e3f4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfda01e06, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfda01e06, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0x9a0a5fd1, ftLastWriteTime.dwHighDateTime=0x1ca042b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5107b60 [0092.766] FindNextFileW (in: hFindFile=0x5107b60, lpFindFileData=0x31e404 | out: lpFindFileData=0x31e404*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfda01e06, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfda01e06, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0x9a0a5fd1, ftLastWriteTime.dwHighDateTime=0x1ca042b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0092.766] FindNextFileW (in: hFindFile=0x5107b60, lpFindFileData=0x31e404 | out: lpFindFileData=0x31e404*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfda01e06, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfda01e06, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0x9a0a5fd1, ftLastWriteTime.dwHighDateTime=0x1ca042b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 0 [0092.766] FindClose (in: hFindFile=0x5107b60 | out: hFindFile=0x5107b60) returned 1 [0092.766] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e68c) returned 1 [0092.766] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e698) returned 1 [0092.766] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e6cc) returned 1 [0092.766] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Windows\\WER\\ReportQueue", nBufferLength=0x105, lpBuffer=0x31e1d4, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Microsoft\\Windows\\WER\\ReportQueue", lpFilePart=0x0) returned 0x34 [0092.766] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Windows\\WER\\ReportQueue\\", nBufferLength=0x105, lpBuffer=0x31e1a8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Microsoft\\Windows\\WER\\ReportQueue\\", lpFilePart=0x0) returned 0x35 [0092.766] FindFirstFileW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Windows\\WER\\ReportQueue\\*", lpFindFileData=0x31e3f4 | out: lpFindFileData=0x31e3f4*(dwFileAttributes=0x810, ftCreationTime.dwLowDateTime=0xfda01e06, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x2fb59300, ftLastAccessTime.dwHighDateTime=0x1d42023, ftLastWriteTime.dwLowDateTime=0x2fb59300, ftLastWriteTime.dwHighDateTime=0x1d42023, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5107b60 [0092.766] FindNextFileW (in: hFindFile=0x5107b60, lpFindFileData=0x31e404 | out: lpFindFileData=0x31e404*(dwFileAttributes=0x810, ftCreationTime.dwLowDateTime=0xfda01e06, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x2fb59300, ftLastAccessTime.dwHighDateTime=0x1d42023, ftLastWriteTime.dwLowDateTime=0x2fb59300, ftLastWriteTime.dwHighDateTime=0x1d42023, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0092.767] FindNextFileW (in: hFindFile=0x5107b60, lpFindFileData=0x31e404 | out: lpFindFileData=0x31e404*(dwFileAttributes=0x810, ftCreationTime.dwLowDateTime=0xfda01e06, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x2fb59300, ftLastAccessTime.dwHighDateTime=0x1d42023, ftLastWriteTime.dwLowDateTime=0x2fb59300, ftLastWriteTime.dwHighDateTime=0x1d42023, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 0 [0092.767] FindClose (in: hFindFile=0x5107b60 | out: hFindFile=0x5107b60) returned 1 [0092.767] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e68c) returned 1 [0092.767] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e698) returned 1 [0092.767] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e6cc) returned 1 [0092.767] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Windows\\WER\\ReportQueue", nBufferLength=0x105, lpBuffer=0x31e1d4, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Microsoft\\Windows\\WER\\ReportQueue", lpFilePart=0x0) returned 0x34 [0092.767] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Windows\\WER\\ReportQueue\\", nBufferLength=0x105, lpBuffer=0x31e1a8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Microsoft\\Windows\\WER\\ReportQueue\\", lpFilePart=0x0) returned 0x35 [0092.767] FindFirstFileW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Windows\\WER\\ReportQueue\\*", lpFindFileData=0x31e3f4 | out: lpFindFileData=0x31e3f4*(dwFileAttributes=0x810, ftCreationTime.dwLowDateTime=0xfda01e06, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x2fb59300, ftLastAccessTime.dwHighDateTime=0x1d42023, ftLastWriteTime.dwLowDateTime=0x2fb59300, ftLastWriteTime.dwHighDateTime=0x1d42023, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5107b60 [0092.767] FindNextFileW (in: hFindFile=0x5107b60, lpFindFileData=0x31e404 | out: lpFindFileData=0x31e404*(dwFileAttributes=0x810, ftCreationTime.dwLowDateTime=0xfda01e06, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x2fb59300, ftLastAccessTime.dwHighDateTime=0x1d42023, ftLastWriteTime.dwLowDateTime=0x2fb59300, ftLastWriteTime.dwHighDateTime=0x1d42023, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0092.767] FindNextFileW (in: hFindFile=0x5107b60, lpFindFileData=0x31e404 | out: lpFindFileData=0x31e404*(dwFileAttributes=0x810, ftCreationTime.dwLowDateTime=0xfda01e06, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x2fb59300, ftLastAccessTime.dwHighDateTime=0x1d42023, ftLastWriteTime.dwLowDateTime=0x2fb59300, ftLastWriteTime.dwHighDateTime=0x1d42023, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 0 [0092.767] FindClose (in: hFindFile=0x5107b60 | out: hFindFile=0x5107b60) returned 1 [0092.767] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e68c) returned 1 [0092.767] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e698) returned 1 [0092.767] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e7bc) returned 1 [0092.768] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Windows Defender", nBufferLength=0x105, lpBuffer=0x31e2c4, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Microsoft\\Windows Defender", lpFilePart=0x0) returned 0x2d [0092.768] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Windows Defender\\", nBufferLength=0x105, lpBuffer=0x31e298, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Microsoft\\Windows Defender\\", lpFilePart=0x0) returned 0x2e [0092.768] FindFirstFileW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Windows Defender\\*", lpFindFileData=0x31e4e4 | out: lpFindFileData=0x31e4e4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x7fffaad0, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x591e8ca0, ftLastAccessTime.dwHighDateTime=0x1d4d596, ftLastWriteTime.dwLowDateTime=0x591e8ca0, ftLastWriteTime.dwHighDateTime=0x1d4d596, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5107b60 [0092.768] FindNextFileW (in: hFindFile=0x5107b60, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x7fffaad0, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x591e8ca0, ftLastAccessTime.dwHighDateTime=0x1d4d596, ftLastWriteTime.dwLowDateTime=0x591e8ca0, ftLastWriteTime.dwHighDateTime=0x1d4d596, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0092.768] FindNextFileW (in: hFindFile=0x5107b60, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x7fffaad0, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x1fb3099, ftLastAccessTime.dwHighDateTime=0x1cb892c, ftLastWriteTime.dwLowDateTime=0x1fb3099, ftLastWriteTime.dwHighDateTime=0x1cb892c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Definition Updates", cAlternateFileName="DEFINI~1")) returned 1 [0092.768] FindNextFileW (in: hFindFile=0x5107b60, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x7fffaad0, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x7fffaad0, ftLastAccessTime.dwHighDateTime=0x1ca0444, ftLastWriteTime.dwLowDateTime=0x7fffaad0, ftLastWriteTime.dwHighDateTime=0x1ca0444, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="LocalCopy", cAlternateFileName="LOCALC~1")) returned 1 [0092.768] FindNextFileW (in: hFindFile=0x5107b60, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x7fffaad0, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x7fffaad0, ftLastAccessTime.dwHighDateTime=0x1ca0444, ftLastWriteTime.dwLowDateTime=0x7fffaad0, ftLastWriteTime.dwHighDateTime=0x1ca0444, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Quarantine", cAlternateFileName="QUARAN~1")) returned 1 [0092.768] FindNextFileW (in: hFindFile=0x5107b60, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x7fffaad0, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x7690f9e4, ftLastAccessTime.dwHighDateTime=0x1ca0441, ftLastWriteTime.dwLowDateTime=0x7690f9e4, ftLastWriteTime.dwHighDateTime=0x1ca0441, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Scans", cAlternateFileName="")) returned 1 [0092.768] FindNextFileW (in: hFindFile=0x5107b60, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x7fffaad0, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x76792c22, ftLastAccessTime.dwHighDateTime=0x1ca0441, ftLastWriteTime.dwLowDateTime=0x76792c22, ftLastWriteTime.dwHighDateTime=0x1ca0441, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Support", cAlternateFileName="")) returned 1 [0092.768] FindNextFileW (in: hFindFile=0x5107b60, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x7fffaad0, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x76792c22, ftLastAccessTime.dwHighDateTime=0x1ca0441, ftLastWriteTime.dwLowDateTime=0x76792c22, ftLastWriteTime.dwHighDateTime=0x1ca0441, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Support", cAlternateFileName="")) returned 0 [0092.769] FindClose (in: hFindFile=0x5107b60 | out: hFindFile=0x5107b60) returned 1 [0092.769] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e77c) returned 1 [0092.769] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e788) returned 1 [0092.769] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e7bc) returned 1 [0092.769] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Windows Defender", nBufferLength=0x105, lpBuffer=0x31e2c4, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Microsoft\\Windows Defender", lpFilePart=0x0) returned 0x2d [0092.769] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Windows Defender\\", nBufferLength=0x105, lpBuffer=0x31e298, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Microsoft\\Windows Defender\\", lpFilePart=0x0) returned 0x2e [0092.769] FindFirstFileW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Windows Defender\\*", lpFindFileData=0x31e4e4 | out: lpFindFileData=0x31e4e4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x7fffaad0, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x591e8ca0, ftLastAccessTime.dwHighDateTime=0x1d4d596, ftLastWriteTime.dwLowDateTime=0x591e8ca0, ftLastWriteTime.dwHighDateTime=0x1d4d596, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5107b60 [0092.769] FindNextFileW (in: hFindFile=0x5107b60, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x7fffaad0, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x591e8ca0, ftLastAccessTime.dwHighDateTime=0x1d4d596, ftLastWriteTime.dwLowDateTime=0x591e8ca0, ftLastWriteTime.dwHighDateTime=0x1d4d596, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0092.769] FindNextFileW (in: hFindFile=0x5107b60, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x7fffaad0, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x1fb3099, ftLastAccessTime.dwHighDateTime=0x1cb892c, ftLastWriteTime.dwLowDateTime=0x1fb3099, ftLastWriteTime.dwHighDateTime=0x1cb892c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Definition Updates", cAlternateFileName="DEFINI~1")) returned 1 [0092.769] FindNextFileW (in: hFindFile=0x5107b60, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x7fffaad0, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x7fffaad0, ftLastAccessTime.dwHighDateTime=0x1ca0444, ftLastWriteTime.dwLowDateTime=0x7fffaad0, ftLastWriteTime.dwHighDateTime=0x1ca0444, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="LocalCopy", cAlternateFileName="LOCALC~1")) returned 1 [0092.769] FindNextFileW (in: hFindFile=0x5107b60, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x7fffaad0, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x7fffaad0, ftLastAccessTime.dwHighDateTime=0x1ca0444, ftLastWriteTime.dwLowDateTime=0x7fffaad0, ftLastWriteTime.dwHighDateTime=0x1ca0444, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Quarantine", cAlternateFileName="QUARAN~1")) returned 1 [0092.770] FindNextFileW (in: hFindFile=0x5107b60, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x7fffaad0, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x7690f9e4, ftLastAccessTime.dwHighDateTime=0x1ca0441, ftLastWriteTime.dwLowDateTime=0x7690f9e4, ftLastWriteTime.dwHighDateTime=0x1ca0441, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Scans", cAlternateFileName="")) returned 1 [0092.770] FindNextFileW (in: hFindFile=0x5107b60, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x7fffaad0, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x76792c22, ftLastAccessTime.dwHighDateTime=0x1ca0441, ftLastWriteTime.dwLowDateTime=0x76792c22, ftLastWriteTime.dwHighDateTime=0x1ca0441, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Support", cAlternateFileName="")) returned 1 [0092.770] FindNextFileW (in: hFindFile=0x5107b60, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0092.770] FindClose (in: hFindFile=0x5107b60 | out: hFindFile=0x5107b60) returned 1 [0092.770] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e77c) returned 1 [0092.770] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e788) returned 1 [0092.770] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e744) returned 1 [0092.770] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Windows Defender\\Definition Updates", nBufferLength=0x105, lpBuffer=0x31e24c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Microsoft\\Windows Defender\\Definition Updates", lpFilePart=0x0) returned 0x40 [0092.770] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Windows Defender\\Definition Updates\\", nBufferLength=0x105, lpBuffer=0x31e220, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Microsoft\\Windows Defender\\Definition Updates\\", lpFilePart=0x0) returned 0x41 [0092.770] FindFirstFileW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Windows Defender\\Definition Updates\\*", lpFindFileData=0x31e46c | out: lpFindFileData=0x31e46c*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x7fffaad0, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x1fb3099, ftLastAccessTime.dwHighDateTime=0x1cb892c, ftLastWriteTime.dwLowDateTime=0x1fb3099, ftLastWriteTime.dwHighDateTime=0x1cb892c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5107b60 [0092.770] FindNextFileW (in: hFindFile=0x5107b60, lpFindFileData=0x31e47c | out: lpFindFileData=0x31e47c*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x7fffaad0, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x1fb3099, ftLastAccessTime.dwHighDateTime=0x1cb892c, ftLastWriteTime.dwLowDateTime=0x1fb3099, ftLastWriteTime.dwHighDateTime=0x1cb892c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0092.770] FindNextFileW (in: hFindFile=0x5107b60, lpFindFileData=0x31e47c | out: lpFindFileData=0x31e47c*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x7fffaad0, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x7fffaad0, ftLastAccessTime.dwHighDateTime=0x1ca0444, ftLastWriteTime.dwLowDateTime=0x7fffaad0, ftLastWriteTime.dwHighDateTime=0x1ca0444, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Backup", cAlternateFileName="")) returned 1 [0092.771] FindNextFileW (in: hFindFile=0x5107b60, lpFindFileData=0x31e47c | out: lpFindFileData=0x31e47c*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x7fffaad0, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x7fffaad0, ftLastAccessTime.dwHighDateTime=0x1ca0444, ftLastWriteTime.dwLowDateTime=0x7fffaad0, ftLastWriteTime.dwHighDateTime=0x1ca0444, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Updates", cAlternateFileName="")) returned 1 [0092.771] FindNextFileW (in: hFindFile=0x5107b60, lpFindFileData=0x31e47c | out: lpFindFileData=0x31e47c*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x1fb3099, ftCreationTime.dwHighDateTime=0x1cb892c, ftLastAccessTime.dwLowDateTime=0x1fff35a, ftLastAccessTime.dwHighDateTime=0x1cb892c, ftLastWriteTime.dwLowDateTime=0x1fff35a, ftLastWriteTime.dwHighDateTime=0x1cb892c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="{D2B0B133-42ED-44D3-809A-46EBB62BA863}", cAlternateFileName="{D2B0B~1")) returned 1 [0092.771] FindNextFileW (in: hFindFile=0x5107b60, lpFindFileData=0x31e47c | out: lpFindFileData=0x31e47c*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x1fb3099, ftCreationTime.dwHighDateTime=0x1cb892c, ftLastAccessTime.dwLowDateTime=0x1fff35a, ftLastAccessTime.dwHighDateTime=0x1cb892c, ftLastWriteTime.dwLowDateTime=0x1fff35a, ftLastWriteTime.dwHighDateTime=0x1cb892c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="{D2B0B133-42ED-44D3-809A-46EBB62BA863}", cAlternateFileName="{D2B0B~1")) returned 0 [0092.771] FindClose (in: hFindFile=0x5107b60 | out: hFindFile=0x5107b60) returned 1 [0092.771] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e704) returned 1 [0092.771] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e710) returned 1 [0092.771] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e744) returned 1 [0092.771] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Windows Defender\\Definition Updates", nBufferLength=0x105, lpBuffer=0x31e24c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Microsoft\\Windows Defender\\Definition Updates", lpFilePart=0x0) returned 0x40 [0092.771] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Windows Defender\\Definition Updates\\", nBufferLength=0x105, lpBuffer=0x31e220, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Microsoft\\Windows Defender\\Definition Updates\\", lpFilePart=0x0) returned 0x41 [0092.771] FindFirstFileW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Windows Defender\\Definition Updates\\*", lpFindFileData=0x31e46c | out: lpFindFileData=0x31e46c*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x7fffaad0, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x1fb3099, ftLastAccessTime.dwHighDateTime=0x1cb892c, ftLastWriteTime.dwLowDateTime=0x1fb3099, ftLastWriteTime.dwHighDateTime=0x1cb892c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5107b60 [0092.771] FindNextFileW (in: hFindFile=0x5107b60, lpFindFileData=0x31e47c | out: lpFindFileData=0x31e47c*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x7fffaad0, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x1fb3099, ftLastAccessTime.dwHighDateTime=0x1cb892c, ftLastWriteTime.dwLowDateTime=0x1fb3099, ftLastWriteTime.dwHighDateTime=0x1cb892c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0092.772] FindNextFileW (in: hFindFile=0x5107b60, lpFindFileData=0x31e47c | out: lpFindFileData=0x31e47c*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x7fffaad0, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x7fffaad0, ftLastAccessTime.dwHighDateTime=0x1ca0444, ftLastWriteTime.dwLowDateTime=0x7fffaad0, ftLastWriteTime.dwHighDateTime=0x1ca0444, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Backup", cAlternateFileName="")) returned 1 [0092.772] FindNextFileW (in: hFindFile=0x5107b60, lpFindFileData=0x31e47c | out: lpFindFileData=0x31e47c*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x7fffaad0, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x7fffaad0, ftLastAccessTime.dwHighDateTime=0x1ca0444, ftLastWriteTime.dwLowDateTime=0x7fffaad0, ftLastWriteTime.dwHighDateTime=0x1ca0444, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Updates", cAlternateFileName="")) returned 1 [0092.772] FindNextFileW (in: hFindFile=0x5107b60, lpFindFileData=0x31e47c | out: lpFindFileData=0x31e47c*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x1fb3099, ftCreationTime.dwHighDateTime=0x1cb892c, ftLastAccessTime.dwLowDateTime=0x1fff35a, ftLastAccessTime.dwHighDateTime=0x1cb892c, ftLastWriteTime.dwLowDateTime=0x1fff35a, ftLastWriteTime.dwHighDateTime=0x1cb892c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="{D2B0B133-42ED-44D3-809A-46EBB62BA863}", cAlternateFileName="{D2B0B~1")) returned 1 [0092.772] FindNextFileW (in: hFindFile=0x5107b60, lpFindFileData=0x31e47c | out: lpFindFileData=0x31e47c*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0092.772] FindClose (in: hFindFile=0x5107b60 | out: hFindFile=0x5107b60) returned 1 [0092.772] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e704) returned 1 [0092.772] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e710) returned 1 [0092.772] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e6cc) returned 1 [0092.772] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Windows Defender\\Definition Updates\\Backup", nBufferLength=0x105, lpBuffer=0x31e1d4, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Microsoft\\Windows Defender\\Definition Updates\\Backup", lpFilePart=0x0) returned 0x47 [0092.772] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Windows Defender\\Definition Updates\\Backup\\", nBufferLength=0x105, lpBuffer=0x31e1a8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Microsoft\\Windows Defender\\Definition Updates\\Backup\\", lpFilePart=0x0) returned 0x48 [0092.772] FindFirstFileW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Windows Defender\\Definition Updates\\Backup\\*", lpFindFileData=0x31e3f4 | out: lpFindFileData=0x31e3f4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x7fffaad0, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x7fffaad0, ftLastAccessTime.dwHighDateTime=0x1ca0444, ftLastWriteTime.dwLowDateTime=0x7fffaad0, ftLastWriteTime.dwHighDateTime=0x1ca0444, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5107b60 [0092.772] FindNextFileW (in: hFindFile=0x5107b60, lpFindFileData=0x31e404 | out: lpFindFileData=0x31e404*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x7fffaad0, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x7fffaad0, ftLastAccessTime.dwHighDateTime=0x1ca0444, ftLastWriteTime.dwLowDateTime=0x7fffaad0, ftLastWriteTime.dwHighDateTime=0x1ca0444, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0092.773] FindNextFileW (in: hFindFile=0x5107b60, lpFindFileData=0x31e404 | out: lpFindFileData=0x31e404*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x7fffaad0, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x7fffaad0, ftLastAccessTime.dwHighDateTime=0x1ca0444, ftLastWriteTime.dwLowDateTime=0x7fffaad0, ftLastWriteTime.dwHighDateTime=0x1ca0444, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 0 [0092.773] FindClose (in: hFindFile=0x5107b60 | out: hFindFile=0x5107b60) returned 1 [0092.773] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e68c) returned 1 [0092.773] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e698) returned 1 [0092.773] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e6cc) returned 1 [0092.773] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Windows Defender\\Definition Updates\\Backup", nBufferLength=0x105, lpBuffer=0x31e1d4, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Microsoft\\Windows Defender\\Definition Updates\\Backup", lpFilePart=0x0) returned 0x47 [0092.773] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Windows Defender\\Definition Updates\\Backup\\", nBufferLength=0x105, lpBuffer=0x31e1a8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Microsoft\\Windows Defender\\Definition Updates\\Backup\\", lpFilePart=0x0) returned 0x48 [0092.773] FindFirstFileW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Windows Defender\\Definition Updates\\Backup\\*", lpFindFileData=0x31e3f4 | out: lpFindFileData=0x31e3f4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x7fffaad0, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x7fffaad0, ftLastAccessTime.dwHighDateTime=0x1ca0444, ftLastWriteTime.dwLowDateTime=0x7fffaad0, ftLastWriteTime.dwHighDateTime=0x1ca0444, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5107b60 [0092.773] FindNextFileW (in: hFindFile=0x5107b60, lpFindFileData=0x31e404 | out: lpFindFileData=0x31e404*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x7fffaad0, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x7fffaad0, ftLastAccessTime.dwHighDateTime=0x1ca0444, ftLastWriteTime.dwLowDateTime=0x7fffaad0, ftLastWriteTime.dwHighDateTime=0x1ca0444, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0092.773] FindNextFileW (in: hFindFile=0x5107b60, lpFindFileData=0x31e404 | out: lpFindFileData=0x31e404*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x7fffaad0, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x7fffaad0, ftLastAccessTime.dwHighDateTime=0x1ca0444, ftLastWriteTime.dwLowDateTime=0x7fffaad0, ftLastWriteTime.dwHighDateTime=0x1ca0444, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 0 [0092.773] FindClose (in: hFindFile=0x5107b60 | out: hFindFile=0x5107b60) returned 1 [0092.773] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e68c) returned 1 [0092.773] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e698) returned 1 [0092.773] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e6cc) returned 1 [0092.773] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Windows Defender\\Definition Updates\\Updates", nBufferLength=0x105, lpBuffer=0x31e1d4, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Microsoft\\Windows Defender\\Definition Updates\\Updates", lpFilePart=0x0) returned 0x48 [0092.774] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Windows Defender\\Definition Updates\\Updates\\", nBufferLength=0x105, lpBuffer=0x31e1a8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Microsoft\\Windows Defender\\Definition Updates\\Updates\\", lpFilePart=0x0) returned 0x49 [0092.774] FindFirstFileW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Windows Defender\\Definition Updates\\Updates\\*", lpFindFileData=0x31e3f4 | out: lpFindFileData=0x31e3f4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x7fffaad0, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x7fffaad0, ftLastAccessTime.dwHighDateTime=0x1ca0444, ftLastWriteTime.dwLowDateTime=0x7fffaad0, ftLastWriteTime.dwHighDateTime=0x1ca0444, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5107b60 [0092.774] FindNextFileW (in: hFindFile=0x5107b60, lpFindFileData=0x31e404 | out: lpFindFileData=0x31e404*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x7fffaad0, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x7fffaad0, ftLastAccessTime.dwHighDateTime=0x1ca0444, ftLastWriteTime.dwLowDateTime=0x7fffaad0, ftLastWriteTime.dwHighDateTime=0x1ca0444, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0092.774] FindNextFileW (in: hFindFile=0x5107b60, lpFindFileData=0x31e404 | out: lpFindFileData=0x31e404*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x7fffaad0, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x7fffaad0, ftLastAccessTime.dwHighDateTime=0x1ca0444, ftLastWriteTime.dwLowDateTime=0x7fffaad0, ftLastWriteTime.dwHighDateTime=0x1ca0444, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 0 [0092.774] FindClose (in: hFindFile=0x5107b60 | out: hFindFile=0x5107b60) returned 1 [0092.774] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e68c) returned 1 [0092.774] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e698) returned 1 [0092.774] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e6cc) returned 1 [0092.774] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Windows Defender\\Definition Updates\\Updates", nBufferLength=0x105, lpBuffer=0x31e1d4, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Microsoft\\Windows Defender\\Definition Updates\\Updates", lpFilePart=0x0) returned 0x48 [0092.774] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Windows Defender\\Definition Updates\\Updates\\", nBufferLength=0x105, lpBuffer=0x31e1a8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Microsoft\\Windows Defender\\Definition Updates\\Updates\\", lpFilePart=0x0) returned 0x49 [0092.774] FindFirstFileW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Windows Defender\\Definition Updates\\Updates\\*", lpFindFileData=0x31e3f4 | out: lpFindFileData=0x31e3f4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x7fffaad0, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x7fffaad0, ftLastAccessTime.dwHighDateTime=0x1ca0444, ftLastWriteTime.dwLowDateTime=0x7fffaad0, ftLastWriteTime.dwHighDateTime=0x1ca0444, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5107b60 [0092.774] FindNextFileW (in: hFindFile=0x5107b60, lpFindFileData=0x31e404 | out: lpFindFileData=0x31e404*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x7fffaad0, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x7fffaad0, ftLastAccessTime.dwHighDateTime=0x1ca0444, ftLastWriteTime.dwLowDateTime=0x7fffaad0, ftLastWriteTime.dwHighDateTime=0x1ca0444, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0092.775] FindNextFileW (in: hFindFile=0x5107b60, lpFindFileData=0x31e404 | out: lpFindFileData=0x31e404*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x7fffaad0, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x7fffaad0, ftLastAccessTime.dwHighDateTime=0x1ca0444, ftLastWriteTime.dwLowDateTime=0x7fffaad0, ftLastWriteTime.dwHighDateTime=0x1ca0444, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 0 [0092.775] FindClose (in: hFindFile=0x5107b60 | out: hFindFile=0x5107b60) returned 1 [0092.775] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e68c) returned 1 [0092.775] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e698) returned 1 [0092.775] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e6cc) returned 1 [0092.775] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Windows Defender\\Definition Updates\\{D2B0B133-42ED-44D3-809A-46EBB62BA863}", nBufferLength=0x105, lpBuffer=0x31e1d4, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Microsoft\\Windows Defender\\Definition Updates\\{D2B0B133-42ED-44D3-809A-46EBB62BA863}", lpFilePart=0x0) returned 0x67 [0092.775] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Windows Defender\\Definition Updates\\{D2B0B133-42ED-44D3-809A-46EBB62BA863}\\", nBufferLength=0x105, lpBuffer=0x31e1a8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Microsoft\\Windows Defender\\Definition Updates\\{D2B0B133-42ED-44D3-809A-46EBB62BA863}\\", lpFilePart=0x0) returned 0x68 [0092.775] FindFirstFileW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Windows Defender\\Definition Updates\\{D2B0B133-42ED-44D3-809A-46EBB62BA863}\\*", lpFindFileData=0x31e3f4 | out: lpFindFileData=0x31e3f4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x1fb3099, ftCreationTime.dwHighDateTime=0x1cb892c, ftLastAccessTime.dwLowDateTime=0x1fff35a, ftLastAccessTime.dwHighDateTime=0x1cb892c, ftLastWriteTime.dwLowDateTime=0x1fff35a, ftLastWriteTime.dwHighDateTime=0x1cb892c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5107b60 [0092.775] FindNextFileW (in: hFindFile=0x5107b60, lpFindFileData=0x31e404 | out: lpFindFileData=0x31e404*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x1fb3099, ftCreationTime.dwHighDateTime=0x1cb892c, ftLastAccessTime.dwLowDateTime=0x1fff35a, ftLastAccessTime.dwHighDateTime=0x1cb892c, ftLastWriteTime.dwLowDateTime=0x1fff35a, ftLastWriteTime.dwHighDateTime=0x1cb892c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0092.775] FindNextFileW (in: hFindFile=0x5107b60, lpFindFileData=0x31e404 | out: lpFindFileData=0x31e404*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x1fd91f9, ftCreationTime.dwHighDateTime=0x1cb892c, ftLastAccessTime.dwLowDateTime=0x1fd91f9, ftLastAccessTime.dwHighDateTime=0x1cb892c, ftLastWriteTime.dwLowDateTime=0x12c4d000, ftLastWriteTime.dwHighDateTime=0x1cb85c9, nFileSizeHigh=0x0, nFileSizeLow=0xb17190, dwReserved0=0x0, dwReserved1=0x0, cFileName="mpasbase.vdm", cAlternateFileName="")) returned 1 [0092.775] FindNextFileW (in: hFindFile=0x5107b60, lpFindFileData=0x31e404 | out: lpFindFileData=0x31e404*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x1fff35a, ftCreationTime.dwHighDateTime=0x1cb892c, ftLastAccessTime.dwLowDateTime=0x1fff35a, ftLastAccessTime.dwHighDateTime=0x1cb892c, ftLastWriteTime.dwLowDateTime=0x6da22700, ftLastWriteTime.dwHighDateTime=0x1cb8783, nFileSizeHigh=0x0, nFileSizeLow=0x52d90, dwReserved0=0x0, dwReserved1=0x0, cFileName="mpasdlta.vdm", cAlternateFileName="")) returned 1 [0092.775] FindNextFileW (in: hFindFile=0x5107b60, lpFindFileData=0x31e404 | out: lpFindFileData=0x31e404*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x1fb3099, ftCreationTime.dwHighDateTime=0x1cb892c, ftLastAccessTime.dwLowDateTime=0x1fb3099, ftLastAccessTime.dwHighDateTime=0x1cb892c, ftLastWriteTime.dwLowDateTime=0x93b6800, ftLastWriteTime.dwHighDateTime=0x1cb85c9, nFileSizeHigh=0x0, nFileSizeLow=0x7d1d50, dwReserved0=0x0, dwReserved1=0x0, cFileName="mpengine.dll", cAlternateFileName="")) returned 1 [0092.776] FindNextFileW (in: hFindFile=0x5107b60, lpFindFileData=0x31e404 | out: lpFindFileData=0x31e404*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0092.776] FindClose (in: hFindFile=0x5107b60 | out: hFindFile=0x5107b60) returned 1 [0092.776] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e68c) returned 1 [0092.776] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e698) returned 1 [0092.776] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e6cc) returned 1 [0092.776] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Windows Defender\\Definition Updates\\{D2B0B133-42ED-44D3-809A-46EBB62BA863}", nBufferLength=0x105, lpBuffer=0x31e1d4, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Microsoft\\Windows Defender\\Definition Updates\\{D2B0B133-42ED-44D3-809A-46EBB62BA863}", lpFilePart=0x0) returned 0x67 [0092.776] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Windows Defender\\Definition Updates\\{D2B0B133-42ED-44D3-809A-46EBB62BA863}\\", nBufferLength=0x105, lpBuffer=0x31e1a8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Microsoft\\Windows Defender\\Definition Updates\\{D2B0B133-42ED-44D3-809A-46EBB62BA863}\\", lpFilePart=0x0) returned 0x68 [0092.776] FindFirstFileW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Windows Defender\\Definition Updates\\{D2B0B133-42ED-44D3-809A-46EBB62BA863}\\*", lpFindFileData=0x31e3f4 | out: lpFindFileData=0x31e3f4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x1fb3099, ftCreationTime.dwHighDateTime=0x1cb892c, ftLastAccessTime.dwLowDateTime=0x1fff35a, ftLastAccessTime.dwHighDateTime=0x1cb892c, ftLastWriteTime.dwLowDateTime=0x1fff35a, ftLastWriteTime.dwHighDateTime=0x1cb892c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5107b60 [0092.776] FindNextFileW (in: hFindFile=0x5107b60, lpFindFileData=0x31e404 | out: lpFindFileData=0x31e404*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x1fb3099, ftCreationTime.dwHighDateTime=0x1cb892c, ftLastAccessTime.dwLowDateTime=0x1fff35a, ftLastAccessTime.dwHighDateTime=0x1cb892c, ftLastWriteTime.dwLowDateTime=0x1fff35a, ftLastWriteTime.dwHighDateTime=0x1cb892c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0092.776] FindNextFileW (in: hFindFile=0x5107b60, lpFindFileData=0x31e404 | out: lpFindFileData=0x31e404*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x1fd91f9, ftCreationTime.dwHighDateTime=0x1cb892c, ftLastAccessTime.dwLowDateTime=0x1fd91f9, ftLastAccessTime.dwHighDateTime=0x1cb892c, ftLastWriteTime.dwLowDateTime=0x12c4d000, ftLastWriteTime.dwHighDateTime=0x1cb85c9, nFileSizeHigh=0x0, nFileSizeLow=0xb17190, dwReserved0=0x0, dwReserved1=0x0, cFileName="mpasbase.vdm", cAlternateFileName="")) returned 1 [0092.776] FindNextFileW (in: hFindFile=0x5107b60, lpFindFileData=0x31e404 | out: lpFindFileData=0x31e404*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x1fff35a, ftCreationTime.dwHighDateTime=0x1cb892c, ftLastAccessTime.dwLowDateTime=0x1fff35a, ftLastAccessTime.dwHighDateTime=0x1cb892c, ftLastWriteTime.dwLowDateTime=0x6da22700, ftLastWriteTime.dwHighDateTime=0x1cb8783, nFileSizeHigh=0x0, nFileSizeLow=0x52d90, dwReserved0=0x0, dwReserved1=0x0, cFileName="mpasdlta.vdm", cAlternateFileName="")) returned 1 [0092.776] FindNextFileW (in: hFindFile=0x5107b60, lpFindFileData=0x31e404 | out: lpFindFileData=0x31e404*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x1fb3099, ftCreationTime.dwHighDateTime=0x1cb892c, ftLastAccessTime.dwLowDateTime=0x1fb3099, ftLastAccessTime.dwHighDateTime=0x1cb892c, ftLastWriteTime.dwLowDateTime=0x93b6800, ftLastWriteTime.dwHighDateTime=0x1cb85c9, nFileSizeHigh=0x0, nFileSizeLow=0x7d1d50, dwReserved0=0x0, dwReserved1=0x0, cFileName="mpengine.dll", cAlternateFileName="")) returned 1 [0092.776] FindNextFileW (in: hFindFile=0x5107b60, lpFindFileData=0x31e404 | out: lpFindFileData=0x31e404*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x1fb3099, ftCreationTime.dwHighDateTime=0x1cb892c, ftLastAccessTime.dwLowDateTime=0x1fb3099, ftLastAccessTime.dwHighDateTime=0x1cb892c, ftLastWriteTime.dwLowDateTime=0x93b6800, ftLastWriteTime.dwHighDateTime=0x1cb85c9, nFileSizeHigh=0x0, nFileSizeLow=0x7d1d50, dwReserved0=0x0, dwReserved1=0x0, cFileName="mpengine.dll", cAlternateFileName="")) returned 0 [0092.777] FindClose (in: hFindFile=0x5107b60 | out: hFindFile=0x5107b60) returned 1 [0092.777] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e68c) returned 1 [0092.777] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e698) returned 1 [0092.777] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e744) returned 1 [0092.777] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Windows Defender\\LocalCopy", nBufferLength=0x105, lpBuffer=0x31e24c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Microsoft\\Windows Defender\\LocalCopy", lpFilePart=0x0) returned 0x37 [0092.777] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Windows Defender\\LocalCopy\\", nBufferLength=0x105, lpBuffer=0x31e220, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Microsoft\\Windows Defender\\LocalCopy\\", lpFilePart=0x0) returned 0x38 [0092.777] FindFirstFileW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Windows Defender\\LocalCopy\\*", lpFindFileData=0x31e46c | out: lpFindFileData=0x31e46c*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x7fffaad0, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x7fffaad0, ftLastAccessTime.dwHighDateTime=0x1ca0444, ftLastWriteTime.dwLowDateTime=0x7fffaad0, ftLastWriteTime.dwHighDateTime=0x1ca0444, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5107b60 [0092.777] FindNextFileW (in: hFindFile=0x5107b60, lpFindFileData=0x31e47c | out: lpFindFileData=0x31e47c*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x7fffaad0, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x7fffaad0, ftLastAccessTime.dwHighDateTime=0x1ca0444, ftLastWriteTime.dwLowDateTime=0x7fffaad0, ftLastWriteTime.dwHighDateTime=0x1ca0444, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0092.777] FindNextFileW (in: hFindFile=0x5107b60, lpFindFileData=0x31e47c | out: lpFindFileData=0x31e47c*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x7fffaad0, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x7fffaad0, ftLastAccessTime.dwHighDateTime=0x1ca0444, ftLastWriteTime.dwLowDateTime=0x7fffaad0, ftLastWriteTime.dwHighDateTime=0x1ca0444, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 0 [0092.777] FindClose (in: hFindFile=0x5107b60 | out: hFindFile=0x5107b60) returned 1 [0092.777] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e704) returned 1 [0092.777] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e710) returned 1 [0092.777] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e744) returned 1 [0092.777] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Windows Defender\\LocalCopy", nBufferLength=0x105, lpBuffer=0x31e24c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Microsoft\\Windows Defender\\LocalCopy", lpFilePart=0x0) returned 0x37 [0092.777] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Windows Defender\\LocalCopy\\", nBufferLength=0x105, lpBuffer=0x31e220, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Microsoft\\Windows Defender\\LocalCopy\\", lpFilePart=0x0) returned 0x38 [0092.777] FindFirstFileW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Windows Defender\\LocalCopy\\*", lpFindFileData=0x31e46c | out: lpFindFileData=0x31e46c*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x7fffaad0, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x7fffaad0, ftLastAccessTime.dwHighDateTime=0x1ca0444, ftLastWriteTime.dwLowDateTime=0x7fffaad0, ftLastWriteTime.dwHighDateTime=0x1ca0444, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5107b60 [0092.778] FindNextFileW (in: hFindFile=0x5107b60, lpFindFileData=0x31e47c | out: lpFindFileData=0x31e47c*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x7fffaad0, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x7fffaad0, ftLastAccessTime.dwHighDateTime=0x1ca0444, ftLastWriteTime.dwLowDateTime=0x7fffaad0, ftLastWriteTime.dwHighDateTime=0x1ca0444, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0092.778] FindNextFileW (in: hFindFile=0x5107b60, lpFindFileData=0x31e47c | out: lpFindFileData=0x31e47c*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x7fffaad0, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x7fffaad0, ftLastAccessTime.dwHighDateTime=0x1ca0444, ftLastWriteTime.dwLowDateTime=0x7fffaad0, ftLastWriteTime.dwHighDateTime=0x1ca0444, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 0 [0092.778] FindClose (in: hFindFile=0x5107b60 | out: hFindFile=0x5107b60) returned 1 [0092.778] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e704) returned 1 [0092.778] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e710) returned 1 [0092.778] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e744) returned 1 [0092.778] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Windows Defender\\Quarantine", nBufferLength=0x105, lpBuffer=0x31e24c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Microsoft\\Windows Defender\\Quarantine", lpFilePart=0x0) returned 0x38 [0092.778] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Windows Defender\\Quarantine\\", nBufferLength=0x105, lpBuffer=0x31e220, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Microsoft\\Windows Defender\\Quarantine\\", lpFilePart=0x0) returned 0x39 [0092.778] FindFirstFileW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Windows Defender\\Quarantine\\*", lpFindFileData=0x31e46c | out: lpFindFileData=0x31e46c*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x7fffaad0, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x7fffaad0, ftLastAccessTime.dwHighDateTime=0x1ca0444, ftLastWriteTime.dwLowDateTime=0x7fffaad0, ftLastWriteTime.dwHighDateTime=0x1ca0444, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5107b60 [0092.778] FindNextFileW (in: hFindFile=0x5107b60, lpFindFileData=0x31e47c | out: lpFindFileData=0x31e47c*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x7fffaad0, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x7fffaad0, ftLastAccessTime.dwHighDateTime=0x1ca0444, ftLastWriteTime.dwLowDateTime=0x7fffaad0, ftLastWriteTime.dwHighDateTime=0x1ca0444, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0092.778] FindNextFileW (in: hFindFile=0x5107b60, lpFindFileData=0x31e47c | out: lpFindFileData=0x31e47c*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x7fffaad0, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x7fffaad0, ftLastAccessTime.dwHighDateTime=0x1ca0444, ftLastWriteTime.dwLowDateTime=0x7fffaad0, ftLastWriteTime.dwHighDateTime=0x1ca0444, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 0 [0092.779] FindClose (in: hFindFile=0x5107b60 | out: hFindFile=0x5107b60) returned 1 [0092.779] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e704) returned 1 [0092.779] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e710) returned 1 [0092.779] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e744) returned 1 [0092.779] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Windows Defender\\Quarantine", nBufferLength=0x105, lpBuffer=0x31e24c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Microsoft\\Windows Defender\\Quarantine", lpFilePart=0x0) returned 0x38 [0092.779] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Windows Defender\\Quarantine\\", nBufferLength=0x105, lpBuffer=0x31e220, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Microsoft\\Windows Defender\\Quarantine\\", lpFilePart=0x0) returned 0x39 [0092.779] FindFirstFileW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Windows Defender\\Quarantine\\*", lpFindFileData=0x31e46c | out: lpFindFileData=0x31e46c*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x7fffaad0, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x7fffaad0, ftLastAccessTime.dwHighDateTime=0x1ca0444, ftLastWriteTime.dwLowDateTime=0x7fffaad0, ftLastWriteTime.dwHighDateTime=0x1ca0444, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5107b60 [0092.779] FindNextFileW (in: hFindFile=0x5107b60, lpFindFileData=0x31e47c | out: lpFindFileData=0x31e47c*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x7fffaad0, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x7fffaad0, ftLastAccessTime.dwHighDateTime=0x1ca0444, ftLastWriteTime.dwLowDateTime=0x7fffaad0, ftLastWriteTime.dwHighDateTime=0x1ca0444, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0092.779] FindNextFileW (in: hFindFile=0x5107b60, lpFindFileData=0x31e47c | out: lpFindFileData=0x31e47c*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x7fffaad0, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x7fffaad0, ftLastAccessTime.dwHighDateTime=0x1ca0444, ftLastWriteTime.dwLowDateTime=0x7fffaad0, ftLastWriteTime.dwHighDateTime=0x1ca0444, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 0 [0092.779] FindClose (in: hFindFile=0x5107b60 | out: hFindFile=0x5107b60) returned 1 [0092.779] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e704) returned 1 [0092.779] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e710) returned 1 [0092.779] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e744) returned 1 [0092.779] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Windows Defender\\Scans", nBufferLength=0x105, lpBuffer=0x31e24c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Microsoft\\Windows Defender\\Scans", lpFilePart=0x0) returned 0x33 [0092.779] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Windows Defender\\Scans\\", nBufferLength=0x105, lpBuffer=0x31e220, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Microsoft\\Windows Defender\\Scans\\", lpFilePart=0x0) returned 0x34 [0092.779] FindFirstFileW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Windows Defender\\Scans\\*", lpFindFileData=0x31e46c | out: lpFindFileData=0x31e46c*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x7fffaad0, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x7690f9e4, ftLastAccessTime.dwHighDateTime=0x1ca0441, ftLastWriteTime.dwLowDateTime=0x7690f9e4, ftLastWriteTime.dwHighDateTime=0x1ca0441, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5107b60 [0092.780] FindNextFileW (in: hFindFile=0x5107b60, lpFindFileData=0x31e47c | out: lpFindFileData=0x31e47c*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x7fffaad0, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x7690f9e4, ftLastAccessTime.dwHighDateTime=0x1ca0441, ftLastWriteTime.dwLowDateTime=0x7690f9e4, ftLastWriteTime.dwHighDateTime=0x1ca0441, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0092.780] FindNextFileW (in: hFindFile=0x5107b60, lpFindFileData=0x31e47c | out: lpFindFileData=0x31e47c*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x7690f9e4, ftCreationTime.dwHighDateTime=0x1ca0441, ftLastAccessTime.dwLowDateTime=0x244fb42, ftLastAccessTime.dwHighDateTime=0x1cb892c, ftLastWriteTime.dwLowDateTime=0x244fb42, ftLastWriteTime.dwHighDateTime=0x1cb892c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="History", cAlternateFileName="")) returned 1 [0092.780] FindNextFileW (in: hFindFile=0x5107b60, lpFindFileData=0x31e47c | out: lpFindFileData=0x31e47c*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x7690f9e4, ftCreationTime.dwHighDateTime=0x1ca0441, ftLastAccessTime.dwLowDateTime=0x244fb42, ftLastAccessTime.dwHighDateTime=0x1cb892c, ftLastWriteTime.dwLowDateTime=0x244fb42, ftLastWriteTime.dwHighDateTime=0x1cb892c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="History", cAlternateFileName="")) returned 0 [0092.780] FindClose (in: hFindFile=0x5107b60 | out: hFindFile=0x5107b60) returned 1 [0092.780] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e704) returned 1 [0092.780] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e710) returned 1 [0092.780] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e744) returned 1 [0092.780] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Windows Defender\\Scans", nBufferLength=0x105, lpBuffer=0x31e24c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Microsoft\\Windows Defender\\Scans", lpFilePart=0x0) returned 0x33 [0092.780] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Windows Defender\\Scans\\", nBufferLength=0x105, lpBuffer=0x31e220, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Microsoft\\Windows Defender\\Scans\\", lpFilePart=0x0) returned 0x34 [0092.780] FindFirstFileW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Windows Defender\\Scans\\*", lpFindFileData=0x31e46c | out: lpFindFileData=0x31e46c*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x7fffaad0, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x7690f9e4, ftLastAccessTime.dwHighDateTime=0x1ca0441, ftLastWriteTime.dwLowDateTime=0x7690f9e4, ftLastWriteTime.dwHighDateTime=0x1ca0441, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5107b60 [0092.780] FindNextFileW (in: hFindFile=0x5107b60, lpFindFileData=0x31e47c | out: lpFindFileData=0x31e47c*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x7fffaad0, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x7690f9e4, ftLastAccessTime.dwHighDateTime=0x1ca0441, ftLastWriteTime.dwLowDateTime=0x7690f9e4, ftLastWriteTime.dwHighDateTime=0x1ca0441, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0092.781] FindNextFileW (in: hFindFile=0x5107b60, lpFindFileData=0x31e47c | out: lpFindFileData=0x31e47c*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x7690f9e4, ftCreationTime.dwHighDateTime=0x1ca0441, ftLastAccessTime.dwLowDateTime=0x244fb42, ftLastAccessTime.dwHighDateTime=0x1cb892c, ftLastWriteTime.dwLowDateTime=0x244fb42, ftLastWriteTime.dwHighDateTime=0x1cb892c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="History", cAlternateFileName="")) returned 1 [0092.781] FindNextFileW (in: hFindFile=0x5107b60, lpFindFileData=0x31e47c | out: lpFindFileData=0x31e47c*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0092.781] FindClose (in: hFindFile=0x5107b60 | out: hFindFile=0x5107b60) returned 1 [0092.781] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e704) returned 1 [0092.781] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e710) returned 1 [0092.781] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e6cc) returned 1 [0092.781] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Windows Defender\\Scans\\History", nBufferLength=0x105, lpBuffer=0x31e1d4, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Microsoft\\Windows Defender\\Scans\\History", lpFilePart=0x0) returned 0x3b [0092.781] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Windows Defender\\Scans\\History\\", nBufferLength=0x105, lpBuffer=0x31e1a8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Microsoft\\Windows Defender\\Scans\\History\\", lpFilePart=0x0) returned 0x3c [0092.781] FindFirstFileW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Windows Defender\\Scans\\History\\*", lpFindFileData=0x31e3f4 | out: lpFindFileData=0x31e3f4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x7690f9e4, ftCreationTime.dwHighDateTime=0x1ca0441, ftLastAccessTime.dwLowDateTime=0x244fb42, ftLastAccessTime.dwHighDateTime=0x1cb892c, ftLastWriteTime.dwLowDateTime=0x244fb42, ftLastWriteTime.dwHighDateTime=0x1cb892c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5107b60 [0092.781] FindNextFileW (in: hFindFile=0x5107b60, lpFindFileData=0x31e404 | out: lpFindFileData=0x31e404*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x7690f9e4, ftCreationTime.dwHighDateTime=0x1ca0441, ftLastAccessTime.dwLowDateTime=0x244fb42, ftLastAccessTime.dwHighDateTime=0x1cb892c, ftLastWriteTime.dwLowDateTime=0x244fb42, ftLastWriteTime.dwHighDateTime=0x1cb892c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0092.781] FindNextFileW (in: hFindFile=0x5107b60, lpFindFileData=0x31e404 | out: lpFindFileData=0x31e404*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x76b24d28, ftCreationTime.dwHighDateTime=0x1ca0441, ftLastAccessTime.dwLowDateTime=0xcfc0a7e0, ftLastAccessTime.dwHighDateTime=0x1d2faf9, ftLastWriteTime.dwLowDateTime=0xcfc0a7e0, ftLastWriteTime.dwHighDateTime=0x1d2faf9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="CacheManager", cAlternateFileName="CACHEM~1")) returned 1 [0092.781] FindNextFileW (in: hFindFile=0x5107b60, lpFindFileData=0x31e404 | out: lpFindFileData=0x31e404*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x244fb42, ftCreationTime.dwHighDateTime=0x1cb892c, ftLastAccessTime.dwLowDateTime=0xa13d69d0, ftLastAccessTime.dwHighDateTime=0x1d2dda3, ftLastWriteTime.dwLowDateTime=0xa13d69d0, ftLastWriteTime.dwHighDateTime=0x1d2dda3, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Results", cAlternateFileName="")) returned 1 [0092.781] FindNextFileW (in: hFindFile=0x5107b60, lpFindFileData=0x31e404 | out: lpFindFileData=0x31e404*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x769ce0c6, ftCreationTime.dwHighDateTime=0x1ca0441, ftLastAccessTime.dwLowDateTime=0xb9820270, ftLastAccessTime.dwHighDateTime=0x1d2faf0, ftLastWriteTime.dwLowDateTime=0xb9820270, ftLastWriteTime.dwHighDateTime=0x1d2faf0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Service", cAlternateFileName="")) returned 1 [0092.781] FindNextFileW (in: hFindFile=0x5107b60, lpFindFileData=0x31e404 | out: lpFindFileData=0x31e404*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x244fb42, ftCreationTime.dwHighDateTime=0x1cb892c, ftLastAccessTime.dwLowDateTime=0x244fb42, ftLastAccessTime.dwHighDateTime=0x1cb892c, ftLastWriteTime.dwLowDateTime=0x244fb42, ftLastWriteTime.dwHighDateTime=0x1cb892c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Store", cAlternateFileName="")) returned 1 [0092.782] FindNextFileW (in: hFindFile=0x5107b60, lpFindFileData=0x31e404 | out: lpFindFileData=0x31e404*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x244fb42, ftCreationTime.dwHighDateTime=0x1cb892c, ftLastAccessTime.dwLowDateTime=0x244fb42, ftLastAccessTime.dwHighDateTime=0x1cb892c, ftLastWriteTime.dwLowDateTime=0x244fb42, ftLastWriteTime.dwHighDateTime=0x1cb892c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Store", cAlternateFileName="")) returned 0 [0092.782] FindClose (in: hFindFile=0x5107b60 | out: hFindFile=0x5107b60) returned 1 [0092.782] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e68c) returned 1 [0092.782] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e698) returned 1 [0092.782] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e6cc) returned 1 [0092.782] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Windows Defender\\Scans\\History", nBufferLength=0x105, lpBuffer=0x31e1d4, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Microsoft\\Windows Defender\\Scans\\History", lpFilePart=0x0) returned 0x3b [0092.782] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Windows Defender\\Scans\\History\\", nBufferLength=0x105, lpBuffer=0x31e1a8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Microsoft\\Windows Defender\\Scans\\History\\", lpFilePart=0x0) returned 0x3c [0092.782] FindFirstFileW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Windows Defender\\Scans\\History\\*", lpFindFileData=0x31e3f4 | out: lpFindFileData=0x31e3f4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x7690f9e4, ftCreationTime.dwHighDateTime=0x1ca0441, ftLastAccessTime.dwLowDateTime=0x244fb42, ftLastAccessTime.dwHighDateTime=0x1cb892c, ftLastWriteTime.dwLowDateTime=0x244fb42, ftLastWriteTime.dwHighDateTime=0x1cb892c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5107b60 [0092.782] FindNextFileW (in: hFindFile=0x5107b60, lpFindFileData=0x31e404 | out: lpFindFileData=0x31e404*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x7690f9e4, ftCreationTime.dwHighDateTime=0x1ca0441, ftLastAccessTime.dwLowDateTime=0x244fb42, ftLastAccessTime.dwHighDateTime=0x1cb892c, ftLastWriteTime.dwLowDateTime=0x244fb42, ftLastWriteTime.dwHighDateTime=0x1cb892c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0092.782] FindNextFileW (in: hFindFile=0x5107b60, lpFindFileData=0x31e404 | out: lpFindFileData=0x31e404*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x76b24d28, ftCreationTime.dwHighDateTime=0x1ca0441, ftLastAccessTime.dwLowDateTime=0xcfc0a7e0, ftLastAccessTime.dwHighDateTime=0x1d2faf9, ftLastWriteTime.dwLowDateTime=0xcfc0a7e0, ftLastWriteTime.dwHighDateTime=0x1d2faf9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="CacheManager", cAlternateFileName="CACHEM~1")) returned 1 [0092.782] FindNextFileW (in: hFindFile=0x5107b60, lpFindFileData=0x31e404 | out: lpFindFileData=0x31e404*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x244fb42, ftCreationTime.dwHighDateTime=0x1cb892c, ftLastAccessTime.dwLowDateTime=0xa13d69d0, ftLastAccessTime.dwHighDateTime=0x1d2dda3, ftLastWriteTime.dwLowDateTime=0xa13d69d0, ftLastWriteTime.dwHighDateTime=0x1d2dda3, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Results", cAlternateFileName="")) returned 1 [0092.782] FindNextFileW (in: hFindFile=0x5107b60, lpFindFileData=0x31e404 | out: lpFindFileData=0x31e404*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x769ce0c6, ftCreationTime.dwHighDateTime=0x1ca0441, ftLastAccessTime.dwLowDateTime=0xb9820270, ftLastAccessTime.dwHighDateTime=0x1d2faf0, ftLastWriteTime.dwLowDateTime=0xb9820270, ftLastWriteTime.dwHighDateTime=0x1d2faf0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Service", cAlternateFileName="")) returned 1 [0092.782] FindNextFileW (in: hFindFile=0x5107b60, lpFindFileData=0x31e404 | out: lpFindFileData=0x31e404*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x244fb42, ftCreationTime.dwHighDateTime=0x1cb892c, ftLastAccessTime.dwLowDateTime=0x244fb42, ftLastAccessTime.dwHighDateTime=0x1cb892c, ftLastWriteTime.dwLowDateTime=0x244fb42, ftLastWriteTime.dwHighDateTime=0x1cb892c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Store", cAlternateFileName="")) returned 1 [0092.782] FindNextFileW (in: hFindFile=0x5107b60, lpFindFileData=0x31e404 | out: lpFindFileData=0x31e404*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0092.782] FindClose (in: hFindFile=0x5107b60 | out: hFindFile=0x5107b60) returned 1 [0092.782] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e68c) returned 1 [0092.782] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e698) returned 1 [0092.782] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e654) returned 1 [0092.782] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Windows Defender\\Scans\\History\\CacheManager", nBufferLength=0x105, lpBuffer=0x31e15c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Microsoft\\Windows Defender\\Scans\\History\\CacheManager", lpFilePart=0x0) returned 0x48 [0092.782] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Windows Defender\\Scans\\History\\CacheManager\\", nBufferLength=0x105, lpBuffer=0x31e130, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Microsoft\\Windows Defender\\Scans\\History\\CacheManager\\", lpFilePart=0x0) returned 0x49 [0092.783] FindFirstFileW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Windows Defender\\Scans\\History\\CacheManager\\*", lpFindFileData=0x31e37c | out: lpFindFileData=0x31e37c*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x76b24d28, ftCreationTime.dwHighDateTime=0x1ca0441, ftLastAccessTime.dwLowDateTime=0xcfc0a7e0, ftLastAccessTime.dwHighDateTime=0x1d2faf9, ftLastWriteTime.dwLowDateTime=0xcfc0a7e0, ftLastWriteTime.dwHighDateTime=0x1d2faf9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5107b60 [0092.783] FindNextFileW (in: hFindFile=0x5107b60, lpFindFileData=0x31e38c | out: lpFindFileData=0x31e38c*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x76b24d28, ftCreationTime.dwHighDateTime=0x1ca0441, ftLastAccessTime.dwLowDateTime=0xcfc0a7e0, ftLastAccessTime.dwHighDateTime=0x1d2faf9, ftLastWriteTime.dwLowDateTime=0xcfc0a7e0, ftLastWriteTime.dwHighDateTime=0x1d2faf9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0092.783] FindNextFileW (in: hFindFile=0x5107b60, lpFindFileData=0x31e38c | out: lpFindFileData=0x31e38c*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xcfc0a7e0, ftCreationTime.dwHighDateTime=0x1d2faf9, ftLastAccessTime.dwLowDateTime=0xcfc0a7e0, ftLastAccessTime.dwHighDateTime=0x1d2faf9, ftLastWriteTime.dwLowDateTime=0xcfc30940, ftLastWriteTime.dwHighDateTime=0x1d2faf9, nFileSizeHigh=0x0, nFileSizeLow=0x33b60, dwReserved0=0x0, dwReserved1=0x0, cFileName="MpSfc.bin", cAlternateFileName="")) returned 1 [0092.783] FindNextFileW (in: hFindFile=0x5107b60, lpFindFileData=0x31e38c | out: lpFindFileData=0x31e38c*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0092.783] FindClose (in: hFindFile=0x5107b60 | out: hFindFile=0x5107b60) returned 1 [0092.783] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e614) returned 1 [0092.783] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e620) returned 1 [0092.783] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e654) returned 1 [0092.783] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Windows Defender\\Scans\\History\\CacheManager", nBufferLength=0x105, lpBuffer=0x31e15c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Microsoft\\Windows Defender\\Scans\\History\\CacheManager", lpFilePart=0x0) returned 0x48 [0092.783] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Windows Defender\\Scans\\History\\CacheManager\\", nBufferLength=0x105, lpBuffer=0x31e130, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Microsoft\\Windows Defender\\Scans\\History\\CacheManager\\", lpFilePart=0x0) returned 0x49 [0092.783] FindFirstFileW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Windows Defender\\Scans\\History\\CacheManager\\*", lpFindFileData=0x31e37c | out: lpFindFileData=0x31e37c*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x76b24d28, ftCreationTime.dwHighDateTime=0x1ca0441, ftLastAccessTime.dwLowDateTime=0xcfc0a7e0, ftLastAccessTime.dwHighDateTime=0x1d2faf9, ftLastWriteTime.dwLowDateTime=0xcfc0a7e0, ftLastWriteTime.dwHighDateTime=0x1d2faf9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5107b60 [0092.783] FindNextFileW (in: hFindFile=0x5107b60, lpFindFileData=0x31e38c | out: lpFindFileData=0x31e38c*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x76b24d28, ftCreationTime.dwHighDateTime=0x1ca0441, ftLastAccessTime.dwLowDateTime=0xcfc0a7e0, ftLastAccessTime.dwHighDateTime=0x1d2faf9, ftLastWriteTime.dwLowDateTime=0xcfc0a7e0, ftLastWriteTime.dwHighDateTime=0x1d2faf9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0092.783] FindNextFileW (in: hFindFile=0x5107b60, lpFindFileData=0x31e38c | out: lpFindFileData=0x31e38c*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xcfc0a7e0, ftCreationTime.dwHighDateTime=0x1d2faf9, ftLastAccessTime.dwLowDateTime=0xcfc0a7e0, ftLastAccessTime.dwHighDateTime=0x1d2faf9, ftLastWriteTime.dwLowDateTime=0xcfc30940, ftLastWriteTime.dwHighDateTime=0x1d2faf9, nFileSizeHigh=0x0, nFileSizeLow=0x33b60, dwReserved0=0x0, dwReserved1=0x0, cFileName="MpSfc.bin", cAlternateFileName="")) returned 1 [0092.783] FindNextFileW (in: hFindFile=0x5107b60, lpFindFileData=0x31e38c | out: lpFindFileData=0x31e38c*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xcfc0a7e0, ftCreationTime.dwHighDateTime=0x1d2faf9, ftLastAccessTime.dwLowDateTime=0xcfc0a7e0, ftLastAccessTime.dwHighDateTime=0x1d2faf9, ftLastWriteTime.dwLowDateTime=0xcfc30940, ftLastWriteTime.dwHighDateTime=0x1d2faf9, nFileSizeHigh=0x0, nFileSizeLow=0x33b60, dwReserved0=0x0, dwReserved1=0x0, cFileName="MpSfc.bin", cAlternateFileName="")) returned 0 [0092.783] FindClose (in: hFindFile=0x5107b60 | out: hFindFile=0x5107b60) returned 1 [0092.783] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e614) returned 1 [0092.783] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e620) returned 1 [0092.784] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e654) returned 1 [0092.784] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Windows Defender\\Scans\\History\\Results", nBufferLength=0x105, lpBuffer=0x31e15c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Microsoft\\Windows Defender\\Scans\\History\\Results", lpFilePart=0x0) returned 0x43 [0092.784] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Windows Defender\\Scans\\History\\Results\\", nBufferLength=0x105, lpBuffer=0x31e130, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Microsoft\\Windows Defender\\Scans\\History\\Results\\", lpFilePart=0x0) returned 0x44 [0092.784] FindFirstFileW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Windows Defender\\Scans\\History\\Results\\*", lpFindFileData=0x31e37c | out: lpFindFileData=0x31e37c*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x244fb42, ftCreationTime.dwHighDateTime=0x1cb892c, ftLastAccessTime.dwLowDateTime=0xa13d69d0, ftLastAccessTime.dwHighDateTime=0x1d2dda3, ftLastWriteTime.dwLowDateTime=0xa13d69d0, ftLastWriteTime.dwHighDateTime=0x1d2dda3, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5107b60 [0092.784] FindNextFileW (in: hFindFile=0x5107b60, lpFindFileData=0x31e38c | out: lpFindFileData=0x31e38c*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x244fb42, ftCreationTime.dwHighDateTime=0x1cb892c, ftLastAccessTime.dwLowDateTime=0xa13d69d0, ftLastAccessTime.dwHighDateTime=0x1d2dda3, ftLastWriteTime.dwLowDateTime=0xa13d69d0, ftLastWriteTime.dwHighDateTime=0x1d2dda3, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0092.784] FindNextFileW (in: hFindFile=0x5107b60, lpFindFileData=0x31e38c | out: lpFindFileData=0x31e38c*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xa13d69d0, ftCreationTime.dwHighDateTime=0x1d2dda3, ftLastAccessTime.dwLowDateTime=0x80be8ad0, ftLastAccessTime.dwHighDateTime=0x1d33740, ftLastWriteTime.dwLowDateTime=0x80be8ad0, ftLastWriteTime.dwHighDateTime=0x1d33740, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Resource", cAlternateFileName="")) returned 1 [0092.784] FindNextFileW (in: hFindFile=0x5107b60, lpFindFileData=0x31e38c | out: lpFindFileData=0x31e38c*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xa13d69d0, ftCreationTime.dwHighDateTime=0x1d2dda3, ftLastAccessTime.dwLowDateTime=0x80be8ad0, ftLastAccessTime.dwHighDateTime=0x1d33740, ftLastWriteTime.dwLowDateTime=0x80be8ad0, ftLastWriteTime.dwHighDateTime=0x1d33740, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Resource", cAlternateFileName="")) returned 0 [0092.784] FindClose (in: hFindFile=0x5107b60 | out: hFindFile=0x5107b60) returned 1 [0092.784] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e614) returned 1 [0092.784] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e620) returned 1 [0092.784] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e654) returned 1 [0092.784] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Windows Defender\\Scans\\History\\Results", nBufferLength=0x105, lpBuffer=0x31e15c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Microsoft\\Windows Defender\\Scans\\History\\Results", lpFilePart=0x0) returned 0x43 [0092.784] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Windows Defender\\Scans\\History\\Results\\", nBufferLength=0x105, lpBuffer=0x31e130, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Microsoft\\Windows Defender\\Scans\\History\\Results\\", lpFilePart=0x0) returned 0x44 [0092.784] FindFirstFileW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Windows Defender\\Scans\\History\\Results\\*", lpFindFileData=0x31e37c | out: lpFindFileData=0x31e37c*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x244fb42, ftCreationTime.dwHighDateTime=0x1cb892c, ftLastAccessTime.dwLowDateTime=0xa13d69d0, ftLastAccessTime.dwHighDateTime=0x1d2dda3, ftLastWriteTime.dwLowDateTime=0xa13d69d0, ftLastWriteTime.dwHighDateTime=0x1d2dda3, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5107b60 [0092.784] FindNextFileW (in: hFindFile=0x5107b60, lpFindFileData=0x31e38c | out: lpFindFileData=0x31e38c*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x244fb42, ftCreationTime.dwHighDateTime=0x1cb892c, ftLastAccessTime.dwLowDateTime=0xa13d69d0, ftLastAccessTime.dwHighDateTime=0x1d2dda3, ftLastWriteTime.dwLowDateTime=0xa13d69d0, ftLastWriteTime.dwHighDateTime=0x1d2dda3, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0092.784] FindNextFileW (in: hFindFile=0x5107b60, lpFindFileData=0x31e38c | out: lpFindFileData=0x31e38c*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xa13d69d0, ftCreationTime.dwHighDateTime=0x1d2dda3, ftLastAccessTime.dwLowDateTime=0x80be8ad0, ftLastAccessTime.dwHighDateTime=0x1d33740, ftLastWriteTime.dwLowDateTime=0x80be8ad0, ftLastWriteTime.dwHighDateTime=0x1d33740, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Resource", cAlternateFileName="")) returned 1 [0092.784] FindNextFileW (in: hFindFile=0x5107b60, lpFindFileData=0x31e38c | out: lpFindFileData=0x31e38c*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0092.785] FindClose (in: hFindFile=0x5107b60 | out: hFindFile=0x5107b60) returned 1 [0092.785] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e614) returned 1 [0092.785] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e620) returned 1 [0092.785] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e5dc) returned 1 [0092.785] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Windows Defender\\Scans\\History\\Results\\Resource", nBufferLength=0x105, lpBuffer=0x31e0e4, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Microsoft\\Windows Defender\\Scans\\History\\Results\\Resource", lpFilePart=0x0) returned 0x4c [0092.785] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Windows Defender\\Scans\\History\\Results\\Resource\\", nBufferLength=0x105, lpBuffer=0x31e0b8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Microsoft\\Windows Defender\\Scans\\History\\Results\\Resource\\", lpFilePart=0x0) returned 0x4d [0092.785] FindFirstFileW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Windows Defender\\Scans\\History\\Results\\Resource\\*", lpFindFileData=0x31e304 | out: lpFindFileData=0x31e304*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xa13d69d0, ftCreationTime.dwHighDateTime=0x1d2dda3, ftLastAccessTime.dwLowDateTime=0x80be8ad0, ftLastAccessTime.dwHighDateTime=0x1d33740, ftLastWriteTime.dwLowDateTime=0x80be8ad0, ftLastWriteTime.dwHighDateTime=0x1d33740, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5107b60 [0092.785] FindNextFileW (in: hFindFile=0x5107b60, lpFindFileData=0x31e314 | out: lpFindFileData=0x31e314*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xa13d69d0, ftCreationTime.dwHighDateTime=0x1d2dda3, ftLastAccessTime.dwLowDateTime=0x80be8ad0, ftLastAccessTime.dwHighDateTime=0x1d33740, ftLastWriteTime.dwLowDateTime=0x80be8ad0, ftLastWriteTime.dwHighDateTime=0x1d33740, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0092.785] FindNextFileW (in: hFindFile=0x5107b60, lpFindFileData=0x31e314 | out: lpFindFileData=0x31e314*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x80be8ad0, ftCreationTime.dwHighDateTime=0x1d33740, ftLastAccessTime.dwLowDateTime=0x80be8ad0, ftLastAccessTime.dwHighDateTime=0x1d33740, ftLastWriteTime.dwLowDateTime=0x81085570, ftLastWriteTime.dwHighDateTime=0x1d33740, nFileSizeHigh=0x0, nFileSizeLow=0x1a60, dwReserved0=0x0, dwReserved1=0x0, cFileName="{1D1DBF3A-752F-47E2-BE70-D848D4A9AFB0}", cAlternateFileName="{1D1DB~1")) returned 1 [0092.785] FindNextFileW (in: hFindFile=0x5107b60, lpFindFileData=0x31e314 | out: lpFindFileData=0x31e314*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0092.785] FindClose (in: hFindFile=0x5107b60 | out: hFindFile=0x5107b60) returned 1 [0092.785] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e59c) returned 1 [0092.785] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e5a8) returned 1 [0092.785] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e5dc) returned 1 [0092.785] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Windows Defender\\Scans\\History\\Results\\Resource", nBufferLength=0x105, lpBuffer=0x31e0e4, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Microsoft\\Windows Defender\\Scans\\History\\Results\\Resource", lpFilePart=0x0) returned 0x4c [0092.785] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Windows Defender\\Scans\\History\\Results\\Resource\\", nBufferLength=0x105, lpBuffer=0x31e0b8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Microsoft\\Windows Defender\\Scans\\History\\Results\\Resource\\", lpFilePart=0x0) returned 0x4d [0092.785] FindFirstFileW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Windows Defender\\Scans\\History\\Results\\Resource\\*", lpFindFileData=0x31e304 | out: lpFindFileData=0x31e304*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xa13d69d0, ftCreationTime.dwHighDateTime=0x1d2dda3, ftLastAccessTime.dwLowDateTime=0x80be8ad0, ftLastAccessTime.dwHighDateTime=0x1d33740, ftLastWriteTime.dwLowDateTime=0x80be8ad0, ftLastWriteTime.dwHighDateTime=0x1d33740, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5107b60 [0092.786] FindNextFileW (in: hFindFile=0x5107b60, lpFindFileData=0x31e314 | out: lpFindFileData=0x31e314*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xa13d69d0, ftCreationTime.dwHighDateTime=0x1d2dda3, ftLastAccessTime.dwLowDateTime=0x80be8ad0, ftLastAccessTime.dwHighDateTime=0x1d33740, ftLastWriteTime.dwLowDateTime=0x80be8ad0, ftLastWriteTime.dwHighDateTime=0x1d33740, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0092.786] FindNextFileW (in: hFindFile=0x5107b60, lpFindFileData=0x31e314 | out: lpFindFileData=0x31e314*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x80be8ad0, ftCreationTime.dwHighDateTime=0x1d33740, ftLastAccessTime.dwLowDateTime=0x80be8ad0, ftLastAccessTime.dwHighDateTime=0x1d33740, ftLastWriteTime.dwLowDateTime=0x81085570, ftLastWriteTime.dwHighDateTime=0x1d33740, nFileSizeHigh=0x0, nFileSizeLow=0x1a60, dwReserved0=0x0, dwReserved1=0x0, cFileName="{1D1DBF3A-752F-47E2-BE70-D848D4A9AFB0}", cAlternateFileName="{1D1DB~1")) returned 1 [0092.786] FindNextFileW (in: hFindFile=0x5107b60, lpFindFileData=0x31e314 | out: lpFindFileData=0x31e314*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x80be8ad0, ftCreationTime.dwHighDateTime=0x1d33740, ftLastAccessTime.dwLowDateTime=0x80be8ad0, ftLastAccessTime.dwHighDateTime=0x1d33740, ftLastWriteTime.dwLowDateTime=0x81085570, ftLastWriteTime.dwHighDateTime=0x1d33740, nFileSizeHigh=0x0, nFileSizeLow=0x1a60, dwReserved0=0x0, dwReserved1=0x0, cFileName="{1D1DBF3A-752F-47E2-BE70-D848D4A9AFB0}", cAlternateFileName="{1D1DB~1")) returned 0 [0092.786] FindClose (in: hFindFile=0x5107b60 | out: hFindFile=0x5107b60) returned 1 [0092.786] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e59c) returned 1 [0092.786] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e5a8) returned 1 [0092.786] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e654) returned 1 [0092.786] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Windows Defender\\Scans\\History\\Service", nBufferLength=0x105, lpBuffer=0x31e15c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Microsoft\\Windows Defender\\Scans\\History\\Service", lpFilePart=0x0) returned 0x43 [0092.786] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Windows Defender\\Scans\\History\\Service\\", nBufferLength=0x105, lpBuffer=0x31e130, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Microsoft\\Windows Defender\\Scans\\History\\Service\\", lpFilePart=0x0) returned 0x44 [0092.786] FindFirstFileW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Windows Defender\\Scans\\History\\Service\\*", lpFindFileData=0x31e37c | out: lpFindFileData=0x31e37c*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x769ce0c6, ftCreationTime.dwHighDateTime=0x1ca0441, ftLastAccessTime.dwLowDateTime=0xb9820270, ftLastAccessTime.dwHighDateTime=0x1d2faf0, ftLastWriteTime.dwLowDateTime=0xb9820270, ftLastWriteTime.dwHighDateTime=0x1d2faf0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5107b60 [0092.786] FindNextFileW (in: hFindFile=0x5107b60, lpFindFileData=0x31e38c | out: lpFindFileData=0x31e38c*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x769ce0c6, ftCreationTime.dwHighDateTime=0x1ca0441, ftLastAccessTime.dwLowDateTime=0xb9820270, ftLastAccessTime.dwHighDateTime=0x1d2faf0, ftLastWriteTime.dwLowDateTime=0xb9820270, ftLastWriteTime.dwHighDateTime=0x1d2faf0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0092.786] FindNextFileW (in: hFindFile=0x5107b60, lpFindFileData=0x31e38c | out: lpFindFileData=0x31e38c*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xb9820270, ftCreationTime.dwHighDateTime=0x1d2faf0, ftLastAccessTime.dwLowDateTime=0xb9820270, ftLastAccessTime.dwHighDateTime=0x1d2faf0, ftLastWriteTime.dwLowDateTime=0x7de6c9b0, ftLastWriteTime.dwHighDateTime=0x1d3373d, nFileSizeHigh=0x0, nFileSizeLow=0x2, dwReserved0=0x0, dwReserved1=0x0, cFileName="History.Log", cAlternateFileName="")) returned 1 [0092.786] FindNextFileW (in: hFindFile=0x5107b60, lpFindFileData=0x31e38c | out: lpFindFileData=0x31e38c*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xadeed740, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0xadeed740, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x2d1f02a0, ftLastWriteTime.dwHighDateTime=0x1d4d597, nFileSizeHigh=0x0, nFileSizeLow=0x1a86, dwReserved0=0x0, dwReserved1=0x0, cFileName="Unknown.Log", cAlternateFileName="")) returned 1 [0092.786] FindNextFileW (in: hFindFile=0x5107b60, lpFindFileData=0x31e38c | out: lpFindFileData=0x31e38c*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0092.786] FindClose (in: hFindFile=0x5107b60 | out: hFindFile=0x5107b60) returned 1 [0092.786] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e614) returned 1 [0092.786] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e620) returned 1 [0092.787] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e654) returned 1 [0092.787] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Windows Defender\\Scans\\History\\Service", nBufferLength=0x105, lpBuffer=0x31e15c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Microsoft\\Windows Defender\\Scans\\History\\Service", lpFilePart=0x0) returned 0x43 [0092.787] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Windows Defender\\Scans\\History\\Service\\", nBufferLength=0x105, lpBuffer=0x31e130, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Microsoft\\Windows Defender\\Scans\\History\\Service\\", lpFilePart=0x0) returned 0x44 [0092.787] FindFirstFileW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Windows Defender\\Scans\\History\\Service\\*", lpFindFileData=0x31e37c | out: lpFindFileData=0x31e37c*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x769ce0c6, ftCreationTime.dwHighDateTime=0x1ca0441, ftLastAccessTime.dwLowDateTime=0xb9820270, ftLastAccessTime.dwHighDateTime=0x1d2faf0, ftLastWriteTime.dwLowDateTime=0xb9820270, ftLastWriteTime.dwHighDateTime=0x1d2faf0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5107b60 [0092.787] FindNextFileW (in: hFindFile=0x5107b60, lpFindFileData=0x31e38c | out: lpFindFileData=0x31e38c*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x769ce0c6, ftCreationTime.dwHighDateTime=0x1ca0441, ftLastAccessTime.dwLowDateTime=0xb9820270, ftLastAccessTime.dwHighDateTime=0x1d2faf0, ftLastWriteTime.dwLowDateTime=0xb9820270, ftLastWriteTime.dwHighDateTime=0x1d2faf0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0092.787] FindNextFileW (in: hFindFile=0x5107b60, lpFindFileData=0x31e38c | out: lpFindFileData=0x31e38c*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xb9820270, ftCreationTime.dwHighDateTime=0x1d2faf0, ftLastAccessTime.dwLowDateTime=0xb9820270, ftLastAccessTime.dwHighDateTime=0x1d2faf0, ftLastWriteTime.dwLowDateTime=0x7de6c9b0, ftLastWriteTime.dwHighDateTime=0x1d3373d, nFileSizeHigh=0x0, nFileSizeLow=0x2, dwReserved0=0x0, dwReserved1=0x0, cFileName="History.Log", cAlternateFileName="")) returned 1 [0092.787] FindNextFileW (in: hFindFile=0x5107b60, lpFindFileData=0x31e38c | out: lpFindFileData=0x31e38c*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xadeed740, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0xadeed740, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x2d1f02a0, ftLastWriteTime.dwHighDateTime=0x1d4d597, nFileSizeHigh=0x0, nFileSizeLow=0x1a86, dwReserved0=0x0, dwReserved1=0x0, cFileName="Unknown.Log", cAlternateFileName="")) returned 1 [0092.787] FindNextFileW (in: hFindFile=0x5107b60, lpFindFileData=0x31e38c | out: lpFindFileData=0x31e38c*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xadeed740, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0xadeed740, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x2d1f02a0, ftLastWriteTime.dwHighDateTime=0x1d4d597, nFileSizeHigh=0x0, nFileSizeLow=0x1a86, dwReserved0=0x0, dwReserved1=0x0, cFileName="Unknown.Log", cAlternateFileName="")) returned 0 [0092.787] FindClose (in: hFindFile=0x5107b60 | out: hFindFile=0x5107b60) returned 1 [0092.787] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e614) returned 1 [0092.787] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e620) returned 1 [0092.787] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e654) returned 1 [0092.787] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Windows Defender\\Scans\\History\\Store", nBufferLength=0x105, lpBuffer=0x31e15c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Microsoft\\Windows Defender\\Scans\\History\\Store", lpFilePart=0x0) returned 0x41 [0092.787] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Windows Defender\\Scans\\History\\Store\\", nBufferLength=0x105, lpBuffer=0x31e130, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Microsoft\\Windows Defender\\Scans\\History\\Store\\", lpFilePart=0x0) returned 0x42 [0092.787] FindFirstFileW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Windows Defender\\Scans\\History\\Store\\*", lpFindFileData=0x31e37c | out: lpFindFileData=0x31e37c*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x244fb42, ftCreationTime.dwHighDateTime=0x1cb892c, ftLastAccessTime.dwLowDateTime=0x244fb42, ftLastAccessTime.dwHighDateTime=0x1cb892c, ftLastWriteTime.dwLowDateTime=0x244fb42, ftLastWriteTime.dwHighDateTime=0x1cb892c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5107b60 [0092.787] FindNextFileW (in: hFindFile=0x5107b60, lpFindFileData=0x31e38c | out: lpFindFileData=0x31e38c*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x244fb42, ftCreationTime.dwHighDateTime=0x1cb892c, ftLastAccessTime.dwLowDateTime=0x244fb42, ftLastAccessTime.dwHighDateTime=0x1cb892c, ftLastWriteTime.dwLowDateTime=0x244fb42, ftLastWriteTime.dwHighDateTime=0x1cb892c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0092.787] FindNextFileW (in: hFindFile=0x5107b60, lpFindFileData=0x31e38c | out: lpFindFileData=0x31e38c*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x244fb42, ftCreationTime.dwHighDateTime=0x1cb892c, ftLastAccessTime.dwLowDateTime=0x244fb42, ftLastAccessTime.dwHighDateTime=0x1cb892c, ftLastWriteTime.dwLowDateTime=0x244fb42, ftLastWriteTime.dwHighDateTime=0x1cb892c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 0 [0092.788] FindClose (in: hFindFile=0x5107b60 | out: hFindFile=0x5107b60) returned 1 [0092.788] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e614) returned 1 [0092.788] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e620) returned 1 [0092.788] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e654) returned 1 [0092.788] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Windows Defender\\Scans\\History\\Store", nBufferLength=0x105, lpBuffer=0x31e15c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Microsoft\\Windows Defender\\Scans\\History\\Store", lpFilePart=0x0) returned 0x41 [0092.788] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Windows Defender\\Scans\\History\\Store\\", nBufferLength=0x105, lpBuffer=0x31e130, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Microsoft\\Windows Defender\\Scans\\History\\Store\\", lpFilePart=0x0) returned 0x42 [0092.788] FindFirstFileW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Windows Defender\\Scans\\History\\Store\\*", lpFindFileData=0x31e37c | out: lpFindFileData=0x31e37c*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x244fb42, ftCreationTime.dwHighDateTime=0x1cb892c, ftLastAccessTime.dwLowDateTime=0x244fb42, ftLastAccessTime.dwHighDateTime=0x1cb892c, ftLastWriteTime.dwLowDateTime=0x244fb42, ftLastWriteTime.dwHighDateTime=0x1cb892c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5107b60 [0092.788] FindNextFileW (in: hFindFile=0x5107b60, lpFindFileData=0x31e38c | out: lpFindFileData=0x31e38c*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x244fb42, ftCreationTime.dwHighDateTime=0x1cb892c, ftLastAccessTime.dwLowDateTime=0x244fb42, ftLastAccessTime.dwHighDateTime=0x1cb892c, ftLastWriteTime.dwLowDateTime=0x244fb42, ftLastWriteTime.dwHighDateTime=0x1cb892c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0092.788] FindNextFileW (in: hFindFile=0x5107b60, lpFindFileData=0x31e38c | out: lpFindFileData=0x31e38c*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x244fb42, ftCreationTime.dwHighDateTime=0x1cb892c, ftLastAccessTime.dwLowDateTime=0x244fb42, ftLastAccessTime.dwHighDateTime=0x1cb892c, ftLastWriteTime.dwLowDateTime=0x244fb42, ftLastWriteTime.dwHighDateTime=0x1cb892c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 0 [0092.788] FindClose (in: hFindFile=0x5107b60 | out: hFindFile=0x5107b60) returned 1 [0092.788] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e614) returned 1 [0092.788] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e620) returned 1 [0092.788] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e744) returned 1 [0092.788] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Windows Defender\\Support", nBufferLength=0x105, lpBuffer=0x31e24c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Microsoft\\Windows Defender\\Support", lpFilePart=0x0) returned 0x35 [0092.788] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Windows Defender\\Support\\", nBufferLength=0x105, lpBuffer=0x31e220, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Microsoft\\Windows Defender\\Support\\", lpFilePart=0x0) returned 0x36 [0092.788] FindFirstFileW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Windows Defender\\Support\\*", lpFindFileData=0x31e46c | out: lpFindFileData=0x31e46c*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x7fffaad0, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x76792c22, ftLastAccessTime.dwHighDateTime=0x1ca0441, ftLastWriteTime.dwLowDateTime=0x76792c22, ftLastWriteTime.dwHighDateTime=0x1ca0441, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5107b60 [0092.788] FindNextFileW (in: hFindFile=0x5107b60, lpFindFileData=0x31e47c | out: lpFindFileData=0x31e47c*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x7fffaad0, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x76792c22, ftLastAccessTime.dwHighDateTime=0x1ca0441, ftLastWriteTime.dwLowDateTime=0x76792c22, ftLastWriteTime.dwHighDateTime=0x1ca0441, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0092.788] FindNextFileW (in: hFindFile=0x5107b60, lpFindFileData=0x31e47c | out: lpFindFileData=0x31e47c*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x76792c22, ftCreationTime.dwHighDateTime=0x1ca0441, ftLastAccessTime.dwLowDateTime=0x76792c22, ftLastAccessTime.dwHighDateTime=0x1ca0441, ftLastWriteTime.dwLowDateTime=0x798d48a0, ftLastWriteTime.dwHighDateTime=0x1d4d596, nFileSizeHigh=0x0, nFileSizeLow=0x30ada, dwReserved0=0x0, dwReserved1=0x0, cFileName="MPLog-07132009-221054.log", cAlternateFileName="MPLOG-~1.LOG")) returned 1 [0092.789] FindNextFileW (in: hFindFile=0x5107b60, lpFindFileData=0x31e47c | out: lpFindFileData=0x31e47c*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0092.789] FindClose (in: hFindFile=0x5107b60 | out: hFindFile=0x5107b60) returned 1 [0092.789] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e704) returned 1 [0092.789] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e710) returned 1 [0092.789] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e744) returned 1 [0092.789] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Windows Defender\\Support", nBufferLength=0x105, lpBuffer=0x31e24c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Microsoft\\Windows Defender\\Support", lpFilePart=0x0) returned 0x35 [0092.789] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Windows Defender\\Support\\", nBufferLength=0x105, lpBuffer=0x31e220, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Microsoft\\Windows Defender\\Support\\", lpFilePart=0x0) returned 0x36 [0092.789] FindFirstFileW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Windows Defender\\Support\\*", lpFindFileData=0x31e46c | out: lpFindFileData=0x31e46c*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x7fffaad0, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x76792c22, ftLastAccessTime.dwHighDateTime=0x1ca0441, ftLastWriteTime.dwLowDateTime=0x76792c22, ftLastWriteTime.dwHighDateTime=0x1ca0441, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5107b60 [0092.790] FindNextFileW (in: hFindFile=0x5107b60, lpFindFileData=0x31e47c | out: lpFindFileData=0x31e47c*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x7fffaad0, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x76792c22, ftLastAccessTime.dwHighDateTime=0x1ca0441, ftLastWriteTime.dwLowDateTime=0x76792c22, ftLastWriteTime.dwHighDateTime=0x1ca0441, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0092.790] FindNextFileW (in: hFindFile=0x5107b60, lpFindFileData=0x31e47c | out: lpFindFileData=0x31e47c*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x76792c22, ftCreationTime.dwHighDateTime=0x1ca0441, ftLastAccessTime.dwLowDateTime=0x76792c22, ftLastAccessTime.dwHighDateTime=0x1ca0441, ftLastWriteTime.dwLowDateTime=0x798d48a0, ftLastWriteTime.dwHighDateTime=0x1d4d596, nFileSizeHigh=0x0, nFileSizeLow=0x30ada, dwReserved0=0x0, dwReserved1=0x0, cFileName="MPLog-07132009-221054.log", cAlternateFileName="MPLOG-~1.LOG")) returned 1 [0092.790] FindNextFileW (in: hFindFile=0x5107b60, lpFindFileData=0x31e47c | out: lpFindFileData=0x31e47c*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x76792c22, ftCreationTime.dwHighDateTime=0x1ca0441, ftLastAccessTime.dwLowDateTime=0x76792c22, ftLastAccessTime.dwHighDateTime=0x1ca0441, ftLastWriteTime.dwLowDateTime=0x798d48a0, ftLastWriteTime.dwHighDateTime=0x1d4d596, nFileSizeHigh=0x0, nFileSizeLow=0x30ada, dwReserved0=0x0, dwReserved1=0x0, cFileName="MPLog-07132009-221054.log", cAlternateFileName="MPLOG-~1.LOG")) returned 0 [0092.790] FindClose (in: hFindFile=0x5107b60 | out: hFindFile=0x5107b60) returned 1 [0092.790] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e704) returned 1 [0092.790] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e710) returned 1 [0092.790] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e7bc) returned 1 [0092.790] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Windows NT", nBufferLength=0x105, lpBuffer=0x31e2c4, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Microsoft\\Windows NT", lpFilePart=0x0) returned 0x27 [0092.790] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Windows NT\\", nBufferLength=0x105, lpBuffer=0x31e298, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Microsoft\\Windows NT\\", lpFilePart=0x0) returned 0x28 [0092.790] FindFirstFileW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Windows NT\\*", lpFindFileData=0x31e4e4 | out: lpFindFileData=0x31e4e4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x7fffaad0, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x7fffaad0, ftLastAccessTime.dwHighDateTime=0x1ca0444, ftLastWriteTime.dwLowDateTime=0x7fffaad0, ftLastWriteTime.dwHighDateTime=0x1ca0444, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5107b60 [0092.790] FindNextFileW (in: hFindFile=0x5107b60, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x7fffaad0, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x7fffaad0, ftLastAccessTime.dwHighDateTime=0x1ca0444, ftLastWriteTime.dwLowDateTime=0x7fffaad0, ftLastWriteTime.dwHighDateTime=0x1ca0444, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0092.790] FindNextFileW (in: hFindFile=0x5107b60, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x7fffaad0, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x1d91b669, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x1d91b669, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="MSFax", cAlternateFileName="")) returned 1 [0092.790] FindNextFileW (in: hFindFile=0x5107b60, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x7fffaad0, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x80340916, ftLastAccessTime.dwHighDateTime=0x1ca0444, ftLastWriteTime.dwLowDateTime=0x80340916, ftLastWriteTime.dwHighDateTime=0x1ca0444, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="MSScan", cAlternateFileName="")) returned 1 [0092.790] FindNextFileW (in: hFindFile=0x5107b60, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x7fffaad0, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x80340916, ftLastAccessTime.dwHighDateTime=0x1ca0444, ftLastWriteTime.dwLowDateTime=0x80340916, ftLastWriteTime.dwHighDateTime=0x1ca0444, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="MSScan", cAlternateFileName="")) returned 0 [0092.790] FindClose (in: hFindFile=0x5107b60 | out: hFindFile=0x5107b60) returned 1 [0092.790] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e77c) returned 1 [0092.790] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e788) returned 1 [0092.790] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e7bc) returned 1 [0092.791] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Windows NT", nBufferLength=0x105, lpBuffer=0x31e2c4, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Microsoft\\Windows NT", lpFilePart=0x0) returned 0x27 [0092.791] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Windows NT\\", nBufferLength=0x105, lpBuffer=0x31e298, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Microsoft\\Windows NT\\", lpFilePart=0x0) returned 0x28 [0092.791] FindFirstFileW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Windows NT\\*", lpFindFileData=0x31e4e4 | out: lpFindFileData=0x31e4e4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x7fffaad0, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x7fffaad0, ftLastAccessTime.dwHighDateTime=0x1ca0444, ftLastWriteTime.dwLowDateTime=0x7fffaad0, ftLastWriteTime.dwHighDateTime=0x1ca0444, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5107b60 [0092.791] FindNextFileW (in: hFindFile=0x5107b60, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x7fffaad0, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x7fffaad0, ftLastAccessTime.dwHighDateTime=0x1ca0444, ftLastWriteTime.dwLowDateTime=0x7fffaad0, ftLastWriteTime.dwHighDateTime=0x1ca0444, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0092.791] FindNextFileW (in: hFindFile=0x5107b60, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x7fffaad0, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x1d91b669, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x1d91b669, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="MSFax", cAlternateFileName="")) returned 1 [0092.791] FindNextFileW (in: hFindFile=0x5107b60, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x7fffaad0, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x80340916, ftLastAccessTime.dwHighDateTime=0x1ca0444, ftLastWriteTime.dwLowDateTime=0x80340916, ftLastWriteTime.dwHighDateTime=0x1ca0444, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="MSScan", cAlternateFileName="")) returned 1 [0092.791] FindNextFileW (in: hFindFile=0x5107b60, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0092.791] FindClose (in: hFindFile=0x5107b60 | out: hFindFile=0x5107b60) returned 1 [0092.791] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e77c) returned 1 [0092.791] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e788) returned 1 [0092.791] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e744) returned 1 [0092.791] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Windows NT\\MSFax", nBufferLength=0x105, lpBuffer=0x31e24c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Microsoft\\Windows NT\\MSFax", lpFilePart=0x0) returned 0x2d [0092.791] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Windows NT\\MSFax\\", nBufferLength=0x105, lpBuffer=0x31e220, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Microsoft\\Windows NT\\MSFax\\", lpFilePart=0x0) returned 0x2e [0092.791] FindFirstFileW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Windows NT\\MSFax\\*", lpFindFileData=0x31e46c | out: lpFindFileData=0x31e46c*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x7fffaad0, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x1d91b669, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x1d91b669, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5107b60 [0092.792] FindNextFileW (in: hFindFile=0x5107b60, lpFindFileData=0x31e47c | out: lpFindFileData=0x31e47c*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x7fffaad0, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x1d91b669, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x1d91b669, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0092.792] FindNextFileW (in: hFindFile=0x5107b60, lpFindFileData=0x31e47c | out: lpFindFileData=0x31e47c*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x7fffaad0, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x7fffaad0, ftLastAccessTime.dwHighDateTime=0x1ca0444, ftLastWriteTime.dwLowDateTime=0x7fffaad0, ftLastWriteTime.dwHighDateTime=0x1ca0444, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="ActivityLog", cAlternateFileName="ACTIVI~1")) returned 1 [0092.792] FindNextFileW (in: hFindFile=0x5107b60, lpFindFileData=0x31e47c | out: lpFindFileData=0x31e47c*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x7fffaad0, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x1d91b669, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x1d91b669, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Common Coverpages", cAlternateFileName="COMMON~1")) returned 1 [0092.792] FindNextFileW (in: hFindFile=0x5107b60, lpFindFileData=0x31e47c | out: lpFindFileData=0x31e47c*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x7fffaad0, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x7fffaad0, ftLastAccessTime.dwHighDateTime=0x1ca0444, ftLastWriteTime.dwLowDateTime=0x7fffaad0, ftLastWriteTime.dwHighDateTime=0x1ca0444, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Inbox", cAlternateFileName="")) returned 1 [0092.792] FindNextFileW (in: hFindFile=0x5107b60, lpFindFileData=0x31e47c | out: lpFindFileData=0x31e47c*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x7fffaad0, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x7fffaad0, ftLastAccessTime.dwHighDateTime=0x1ca0444, ftLastWriteTime.dwLowDateTime=0x7fffaad0, ftLastWriteTime.dwHighDateTime=0x1ca0444, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Queue", cAlternateFileName="")) returned 1 [0092.792] FindNextFileW (in: hFindFile=0x5107b60, lpFindFileData=0x31e47c | out: lpFindFileData=0x31e47c*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x7fffaad0, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x7fffaad0, ftLastAccessTime.dwHighDateTime=0x1ca0444, ftLastWriteTime.dwLowDateTime=0x7fffaad0, ftLastWriteTime.dwHighDateTime=0x1ca0444, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="SentItems", cAlternateFileName="SENTIT~1")) returned 1 [0092.792] FindNextFileW (in: hFindFile=0x5107b60, lpFindFileData=0x31e47c | out: lpFindFileData=0x31e47c*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x1d91b669, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x1d91b669, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x1d91b669, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="VirtualInbox", cAlternateFileName="VIRTUA~1")) returned 1 [0092.792] FindNextFileW (in: hFindFile=0x5107b60, lpFindFileData=0x31e47c | out: lpFindFileData=0x31e47c*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x1d91b669, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x1d91b669, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x1d91b669, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="VirtualInbox", cAlternateFileName="VIRTUA~1")) returned 0 [0092.792] FindClose (in: hFindFile=0x5107b60 | out: hFindFile=0x5107b60) returned 1 [0092.793] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e704) returned 1 [0092.793] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e710) returned 1 [0092.793] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e744) returned 1 [0092.793] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Windows NT\\MSFax", nBufferLength=0x105, lpBuffer=0x31e24c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Microsoft\\Windows NT\\MSFax", lpFilePart=0x0) returned 0x2d [0092.793] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Windows NT\\MSFax\\", nBufferLength=0x105, lpBuffer=0x31e220, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Microsoft\\Windows NT\\MSFax\\", lpFilePart=0x0) returned 0x2e [0092.793] FindFirstFileW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Windows NT\\MSFax\\*", lpFindFileData=0x31e46c | out: lpFindFileData=0x31e46c*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x7fffaad0, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x1d91b669, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x1d91b669, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5107b60 [0092.794] FindNextFileW (in: hFindFile=0x5107b60, lpFindFileData=0x31e47c | out: lpFindFileData=0x31e47c*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x7fffaad0, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x1d91b669, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x1d91b669, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0092.794] FindNextFileW (in: hFindFile=0x5107b60, lpFindFileData=0x31e47c | out: lpFindFileData=0x31e47c*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x7fffaad0, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x7fffaad0, ftLastAccessTime.dwHighDateTime=0x1ca0444, ftLastWriteTime.dwLowDateTime=0x7fffaad0, ftLastWriteTime.dwHighDateTime=0x1ca0444, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="ActivityLog", cAlternateFileName="ACTIVI~1")) returned 1 [0092.794] FindNextFileW (in: hFindFile=0x5107b60, lpFindFileData=0x31e47c | out: lpFindFileData=0x31e47c*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x7fffaad0, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x1d91b669, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x1d91b669, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Common Coverpages", cAlternateFileName="COMMON~1")) returned 1 [0092.794] FindNextFileW (in: hFindFile=0x5107b60, lpFindFileData=0x31e47c | out: lpFindFileData=0x31e47c*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x7fffaad0, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x7fffaad0, ftLastAccessTime.dwHighDateTime=0x1ca0444, ftLastWriteTime.dwLowDateTime=0x7fffaad0, ftLastWriteTime.dwHighDateTime=0x1ca0444, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Inbox", cAlternateFileName="")) returned 1 [0092.794] FindNextFileW (in: hFindFile=0x5107b60, lpFindFileData=0x31e47c | out: lpFindFileData=0x31e47c*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x7fffaad0, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x7fffaad0, ftLastAccessTime.dwHighDateTime=0x1ca0444, ftLastWriteTime.dwLowDateTime=0x7fffaad0, ftLastWriteTime.dwHighDateTime=0x1ca0444, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Queue", cAlternateFileName="")) returned 1 [0092.794] FindNextFileW (in: hFindFile=0x5107b60, lpFindFileData=0x31e47c | out: lpFindFileData=0x31e47c*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x7fffaad0, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x7fffaad0, ftLastAccessTime.dwHighDateTime=0x1ca0444, ftLastWriteTime.dwLowDateTime=0x7fffaad0, ftLastWriteTime.dwHighDateTime=0x1ca0444, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="SentItems", cAlternateFileName="SENTIT~1")) returned 1 [0092.794] FindNextFileW (in: hFindFile=0x5107b60, lpFindFileData=0x31e47c | out: lpFindFileData=0x31e47c*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x1d91b669, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x1d91b669, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x1d91b669, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="VirtualInbox", cAlternateFileName="VIRTUA~1")) returned 1 [0092.794] FindNextFileW (in: hFindFile=0x5107b60, lpFindFileData=0x31e47c | out: lpFindFileData=0x31e47c*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0092.794] FindClose (in: hFindFile=0x5107b60 | out: hFindFile=0x5107b60) returned 1 [0092.795] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e704) returned 1 [0092.795] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e710) returned 1 [0092.795] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e6cc) returned 1 [0092.795] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Windows NT\\MSFax\\ActivityLog", nBufferLength=0x105, lpBuffer=0x31e1d4, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Microsoft\\Windows NT\\MSFax\\ActivityLog", lpFilePart=0x0) returned 0x39 [0092.795] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Windows NT\\MSFax\\ActivityLog\\", nBufferLength=0x105, lpBuffer=0x31e1a8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Microsoft\\Windows NT\\MSFax\\ActivityLog\\", lpFilePart=0x0) returned 0x3a [0092.795] FindFirstFileW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Windows NT\\MSFax\\ActivityLog\\*", lpFindFileData=0x31e3f4 | out: lpFindFileData=0x31e3f4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x7fffaad0, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x7fffaad0, ftLastAccessTime.dwHighDateTime=0x1ca0444, ftLastWriteTime.dwLowDateTime=0x7fffaad0, ftLastWriteTime.dwHighDateTime=0x1ca0444, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5107b60 [0092.796] FindNextFileW (in: hFindFile=0x5107b60, lpFindFileData=0x31e404 | out: lpFindFileData=0x31e404*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x7fffaad0, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x7fffaad0, ftLastAccessTime.dwHighDateTime=0x1ca0444, ftLastWriteTime.dwLowDateTime=0x7fffaad0, ftLastWriteTime.dwHighDateTime=0x1ca0444, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0092.796] FindNextFileW (in: hFindFile=0x5107b60, lpFindFileData=0x31e404 | out: lpFindFileData=0x31e404*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x7fffaad0, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x7fffaad0, ftLastAccessTime.dwHighDateTime=0x1ca0444, ftLastWriteTime.dwLowDateTime=0x7fffaad0, ftLastWriteTime.dwHighDateTime=0x1ca0444, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 0 [0092.796] FindClose (in: hFindFile=0x5107b60 | out: hFindFile=0x5107b60) returned 1 [0092.796] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e68c) returned 1 [0092.796] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e698) returned 1 [0092.796] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e6cc) returned 1 [0092.796] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Windows NT\\MSFax\\ActivityLog", nBufferLength=0x105, lpBuffer=0x31e1d4, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Microsoft\\Windows NT\\MSFax\\ActivityLog", lpFilePart=0x0) returned 0x39 [0092.796] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Windows NT\\MSFax\\ActivityLog\\", nBufferLength=0x105, lpBuffer=0x31e1a8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Microsoft\\Windows NT\\MSFax\\ActivityLog\\", lpFilePart=0x0) returned 0x3a [0092.796] FindFirstFileW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Windows NT\\MSFax\\ActivityLog\\*", lpFindFileData=0x31e3f4 | out: lpFindFileData=0x31e3f4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x7fffaad0, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x7fffaad0, ftLastAccessTime.dwHighDateTime=0x1ca0444, ftLastWriteTime.dwLowDateTime=0x7fffaad0, ftLastWriteTime.dwHighDateTime=0x1ca0444, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5107b60 [0092.796] FindNextFileW (in: hFindFile=0x5107b60, lpFindFileData=0x31e404 | out: lpFindFileData=0x31e404*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x7fffaad0, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x7fffaad0, ftLastAccessTime.dwHighDateTime=0x1ca0444, ftLastWriteTime.dwLowDateTime=0x7fffaad0, ftLastWriteTime.dwHighDateTime=0x1ca0444, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0092.796] FindNextFileW (in: hFindFile=0x5107b60, lpFindFileData=0x31e404 | out: lpFindFileData=0x31e404*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x7fffaad0, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x7fffaad0, ftLastAccessTime.dwHighDateTime=0x1ca0444, ftLastWriteTime.dwLowDateTime=0x7fffaad0, ftLastWriteTime.dwHighDateTime=0x1ca0444, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 0 [0092.796] FindClose (in: hFindFile=0x5107b60 | out: hFindFile=0x5107b60) returned 1 [0092.797] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e68c) returned 1 [0092.797] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e698) returned 1 [0092.797] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e6cc) returned 1 [0092.797] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Windows NT\\MSFax\\Common Coverpages", nBufferLength=0x105, lpBuffer=0x31e1d4, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Microsoft\\Windows NT\\MSFax\\Common Coverpages", lpFilePart=0x0) returned 0x3f [0092.797] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Windows NT\\MSFax\\Common Coverpages\\", nBufferLength=0x105, lpBuffer=0x31e1a8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Microsoft\\Windows NT\\MSFax\\Common Coverpages\\", lpFilePart=0x0) returned 0x40 [0092.797] FindFirstFileW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Windows NT\\MSFax\\Common Coverpages\\*", lpFindFileData=0x31e3f4 | out: lpFindFileData=0x31e3f4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x7fffaad0, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x1d91b669, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x1d91b669, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5107b60 [0092.797] FindNextFileW (in: hFindFile=0x5107b60, lpFindFileData=0x31e404 | out: lpFindFileData=0x31e404*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x7fffaad0, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x1d91b669, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x1d91b669, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0092.797] FindNextFileW (in: hFindFile=0x5107b60, lpFindFileData=0x31e404 | out: lpFindFileData=0x31e404*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x1d91b669, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x21cf2d38, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x1d91b669, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="en-US", cAlternateFileName="")) returned 1 [0092.797] FindNextFileW (in: hFindFile=0x5107b60, lpFindFileData=0x31e404 | out: lpFindFileData=0x31e404*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x1d91b669, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x21cf2d38, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x1d91b669, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="en-US", cAlternateFileName="")) returned 0 [0092.797] FindClose (in: hFindFile=0x5107b60 | out: hFindFile=0x5107b60) returned 1 [0092.797] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e68c) returned 1 [0092.797] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e698) returned 1 [0092.797] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e6cc) returned 1 [0092.797] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Windows NT\\MSFax\\Common Coverpages", nBufferLength=0x105, lpBuffer=0x31e1d4, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Microsoft\\Windows NT\\MSFax\\Common Coverpages", lpFilePart=0x0) returned 0x3f [0092.797] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Windows NT\\MSFax\\Common Coverpages\\", nBufferLength=0x105, lpBuffer=0x31e1a8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Microsoft\\Windows NT\\MSFax\\Common Coverpages\\", lpFilePart=0x0) returned 0x40 [0092.797] FindFirstFileW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Windows NT\\MSFax\\Common Coverpages\\*", lpFindFileData=0x31e3f4 | out: lpFindFileData=0x31e3f4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x7fffaad0, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x1d91b669, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x1d91b669, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5107b60 [0092.797] FindNextFileW (in: hFindFile=0x5107b60, lpFindFileData=0x31e404 | out: lpFindFileData=0x31e404*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x7fffaad0, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x1d91b669, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x1d91b669, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0092.798] FindNextFileW (in: hFindFile=0x5107b60, lpFindFileData=0x31e404 | out: lpFindFileData=0x31e404*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x1d91b669, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x21cf2d38, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x1d91b669, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="en-US", cAlternateFileName="")) returned 1 [0092.798] FindNextFileW (in: hFindFile=0x5107b60, lpFindFileData=0x31e404 | out: lpFindFileData=0x31e404*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0092.798] FindClose (in: hFindFile=0x5107b60 | out: hFindFile=0x5107b60) returned 1 [0092.798] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e68c) returned 1 [0092.798] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e698) returned 1 [0092.798] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e654) returned 1 [0092.798] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Windows NT\\MSFax\\Common Coverpages\\en-US", nBufferLength=0x105, lpBuffer=0x31e15c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Microsoft\\Windows NT\\MSFax\\Common Coverpages\\en-US", lpFilePart=0x0) returned 0x45 [0092.798] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Windows NT\\MSFax\\Common Coverpages\\en-US\\", nBufferLength=0x105, lpBuffer=0x31e130, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Microsoft\\Windows NT\\MSFax\\Common Coverpages\\en-US\\", lpFilePart=0x0) returned 0x46 [0092.798] FindFirstFileW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Windows NT\\MSFax\\Common Coverpages\\en-US\\*", lpFindFileData=0x31e37c | out: lpFindFileData=0x31e37c*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x1d91b669, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x21cf2d38, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x1d91b669, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5107b60 [0092.798] FindNextFileW (in: hFindFile=0x5107b60, lpFindFileData=0x31e38c | out: lpFindFileData=0x31e38c*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x1d91b669, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x21cf2d38, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x1d91b669, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0092.798] FindNextFileW (in: hFindFile=0x5107b60, lpFindFileData=0x31e38c | out: lpFindFileData=0x31e38c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xfe3998d, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x10b3266c, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0xfe3998d, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x28aa, dwReserved0=0x0, dwReserved1=0x0, cFileName="confident.cov", cAlternateFileName="")) returned 1 [0092.798] FindNextFileW (in: hFindFile=0x5107b60, lpFindFileData=0x31e38c | out: lpFindFileData=0x31e38c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xfe3998d, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x10b3266c, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0xfe3998d, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x2a09, dwReserved0=0x0, dwReserved1=0x0, cFileName="fyi.cov", cAlternateFileName="")) returned 1 [0092.798] FindNextFileW (in: hFindFile=0x5107b60, lpFindFileData=0x31e38c | out: lpFindFileData=0x31e38c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xfe3998d, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x10b3266c, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0xfe3998d, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x3aa0, dwReserved0=0x0, dwReserved1=0x0, cFileName="generic.cov", cAlternateFileName="")) returned 1 [0092.798] FindNextFileW (in: hFindFile=0x5107b60, lpFindFileData=0x31e38c | out: lpFindFileData=0x31e38c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xfe3998d, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x10b3266c, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0xfe3998d, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x2886, dwReserved0=0x0, dwReserved1=0x0, cFileName="urgent.cov", cAlternateFileName="")) returned 1 [0092.798] FindNextFileW (in: hFindFile=0x5107b60, lpFindFileData=0x31e38c | out: lpFindFileData=0x31e38c*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0092.798] FindClose (in: hFindFile=0x5107b60 | out: hFindFile=0x5107b60) returned 1 [0092.798] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e614) returned 1 [0092.798] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e620) returned 1 [0092.798] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e654) returned 1 [0092.798] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Windows NT\\MSFax\\Common Coverpages\\en-US", nBufferLength=0x105, lpBuffer=0x31e15c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Microsoft\\Windows NT\\MSFax\\Common Coverpages\\en-US", lpFilePart=0x0) returned 0x45 [0092.799] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Windows NT\\MSFax\\Common Coverpages\\en-US\\", nBufferLength=0x105, lpBuffer=0x31e130, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Microsoft\\Windows NT\\MSFax\\Common Coverpages\\en-US\\", lpFilePart=0x0) returned 0x46 [0092.799] FindFirstFileW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Windows NT\\MSFax\\Common Coverpages\\en-US\\*", lpFindFileData=0x31e37c | out: lpFindFileData=0x31e37c*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x1d91b669, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x21cf2d38, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x1d91b669, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5107b60 [0092.799] FindNextFileW (in: hFindFile=0x5107b60, lpFindFileData=0x31e38c | out: lpFindFileData=0x31e38c*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x1d91b669, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x21cf2d38, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x1d91b669, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0092.799] FindNextFileW (in: hFindFile=0x5107b60, lpFindFileData=0x31e38c | out: lpFindFileData=0x31e38c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xfe3998d, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x10b3266c, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0xfe3998d, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x28aa, dwReserved0=0x0, dwReserved1=0x0, cFileName="confident.cov", cAlternateFileName="")) returned 1 [0092.799] FindNextFileW (in: hFindFile=0x5107b60, lpFindFileData=0x31e38c | out: lpFindFileData=0x31e38c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xfe3998d, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x10b3266c, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0xfe3998d, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x2a09, dwReserved0=0x0, dwReserved1=0x0, cFileName="fyi.cov", cAlternateFileName="")) returned 1 [0092.799] FindNextFileW (in: hFindFile=0x5107b60, lpFindFileData=0x31e38c | out: lpFindFileData=0x31e38c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xfe3998d, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x10b3266c, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0xfe3998d, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x3aa0, dwReserved0=0x0, dwReserved1=0x0, cFileName="generic.cov", cAlternateFileName="")) returned 1 [0092.799] FindNextFileW (in: hFindFile=0x5107b60, lpFindFileData=0x31e38c | out: lpFindFileData=0x31e38c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xfe3998d, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x10b3266c, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0xfe3998d, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x2886, dwReserved0=0x0, dwReserved1=0x0, cFileName="urgent.cov", cAlternateFileName="")) returned 1 [0092.799] FindNextFileW (in: hFindFile=0x5107b60, lpFindFileData=0x31e38c | out: lpFindFileData=0x31e38c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xfe3998d, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x10b3266c, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0xfe3998d, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x2886, dwReserved0=0x0, dwReserved1=0x0, cFileName="urgent.cov", cAlternateFileName="")) returned 0 [0092.799] FindClose (in: hFindFile=0x5107b60 | out: hFindFile=0x5107b60) returned 1 [0092.799] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e614) returned 1 [0092.799] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e620) returned 1 [0092.799] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e6cc) returned 1 [0092.799] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Windows NT\\MSFax\\Inbox", nBufferLength=0x105, lpBuffer=0x31e1d4, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Microsoft\\Windows NT\\MSFax\\Inbox", lpFilePart=0x0) returned 0x33 [0092.799] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Windows NT\\MSFax\\Inbox\\", nBufferLength=0x105, lpBuffer=0x31e1a8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Microsoft\\Windows NT\\MSFax\\Inbox\\", lpFilePart=0x0) returned 0x34 [0092.799] FindFirstFileW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Windows NT\\MSFax\\Inbox\\*", lpFindFileData=0x31e3f4 | out: lpFindFileData=0x31e3f4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x7fffaad0, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x7fffaad0, ftLastAccessTime.dwHighDateTime=0x1ca0444, ftLastWriteTime.dwLowDateTime=0x7fffaad0, ftLastWriteTime.dwHighDateTime=0x1ca0444, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5107b60 [0092.799] FindNextFileW (in: hFindFile=0x5107b60, lpFindFileData=0x31e404 | out: lpFindFileData=0x31e404*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x7fffaad0, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x7fffaad0, ftLastAccessTime.dwHighDateTime=0x1ca0444, ftLastWriteTime.dwLowDateTime=0x7fffaad0, ftLastWriteTime.dwHighDateTime=0x1ca0444, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0092.800] FindNextFileW (in: hFindFile=0x5107b60, lpFindFileData=0x31e404 | out: lpFindFileData=0x31e404*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x7fffaad0, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x7fffaad0, ftLastAccessTime.dwHighDateTime=0x1ca0444, ftLastWriteTime.dwLowDateTime=0x7fffaad0, ftLastWriteTime.dwHighDateTime=0x1ca0444, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 0 [0092.800] FindClose (in: hFindFile=0x5107b60 | out: hFindFile=0x5107b60) returned 1 [0092.800] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e68c) returned 1 [0092.800] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e698) returned 1 [0092.800] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e6cc) returned 1 [0092.800] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Windows NT\\MSFax\\Inbox", nBufferLength=0x105, lpBuffer=0x31e1d4, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Microsoft\\Windows NT\\MSFax\\Inbox", lpFilePart=0x0) returned 0x33 [0092.800] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Windows NT\\MSFax\\Inbox\\", nBufferLength=0x105, lpBuffer=0x31e1a8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Microsoft\\Windows NT\\MSFax\\Inbox\\", lpFilePart=0x0) returned 0x34 [0092.800] FindFirstFileW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Windows NT\\MSFax\\Inbox\\*", lpFindFileData=0x31e3f4 | out: lpFindFileData=0x31e3f4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x7fffaad0, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x7fffaad0, ftLastAccessTime.dwHighDateTime=0x1ca0444, ftLastWriteTime.dwLowDateTime=0x7fffaad0, ftLastWriteTime.dwHighDateTime=0x1ca0444, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5107b60 [0092.800] FindNextFileW (in: hFindFile=0x5107b60, lpFindFileData=0x31e404 | out: lpFindFileData=0x31e404*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x7fffaad0, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x7fffaad0, ftLastAccessTime.dwHighDateTime=0x1ca0444, ftLastWriteTime.dwLowDateTime=0x7fffaad0, ftLastWriteTime.dwHighDateTime=0x1ca0444, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0092.800] FindNextFileW (in: hFindFile=0x5107b60, lpFindFileData=0x31e404 | out: lpFindFileData=0x31e404*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x7fffaad0, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x7fffaad0, ftLastAccessTime.dwHighDateTime=0x1ca0444, ftLastWriteTime.dwLowDateTime=0x7fffaad0, ftLastWriteTime.dwHighDateTime=0x1ca0444, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 0 [0092.800] FindClose (in: hFindFile=0x5107b60 | out: hFindFile=0x5107b60) returned 1 [0092.800] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e68c) returned 1 [0092.800] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e698) returned 1 [0092.800] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e6cc) returned 1 [0092.800] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Windows NT\\MSFax\\Queue", nBufferLength=0x105, lpBuffer=0x31e1d4, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Microsoft\\Windows NT\\MSFax\\Queue", lpFilePart=0x0) returned 0x33 [0092.800] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Windows NT\\MSFax\\Queue\\", nBufferLength=0x105, lpBuffer=0x31e1a8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Microsoft\\Windows NT\\MSFax\\Queue\\", lpFilePart=0x0) returned 0x34 [0092.800] FindFirstFileW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Windows NT\\MSFax\\Queue\\*", lpFindFileData=0x31e3f4 | out: lpFindFileData=0x31e3f4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x7fffaad0, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x7fffaad0, ftLastAccessTime.dwHighDateTime=0x1ca0444, ftLastWriteTime.dwLowDateTime=0x7fffaad0, ftLastWriteTime.dwHighDateTime=0x1ca0444, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5107b60 [0092.800] FindNextFileW (in: hFindFile=0x5107b60, lpFindFileData=0x31e404 | out: lpFindFileData=0x31e404*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x7fffaad0, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x7fffaad0, ftLastAccessTime.dwHighDateTime=0x1ca0444, ftLastWriteTime.dwLowDateTime=0x7fffaad0, ftLastWriteTime.dwHighDateTime=0x1ca0444, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0092.801] FindNextFileW (in: hFindFile=0x5107b60, lpFindFileData=0x31e404 | out: lpFindFileData=0x31e404*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x7fffaad0, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x7fffaad0, ftLastAccessTime.dwHighDateTime=0x1ca0444, ftLastWriteTime.dwLowDateTime=0x7fffaad0, ftLastWriteTime.dwHighDateTime=0x1ca0444, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 0 [0092.801] FindClose (in: hFindFile=0x5107b60 | out: hFindFile=0x5107b60) returned 1 [0092.801] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e68c) returned 1 [0092.801] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e698) returned 1 [0092.801] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e6cc) returned 1 [0092.801] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Windows NT\\MSFax\\Queue", nBufferLength=0x105, lpBuffer=0x31e1d4, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Microsoft\\Windows NT\\MSFax\\Queue", lpFilePart=0x0) returned 0x33 [0092.801] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Windows NT\\MSFax\\Queue\\", nBufferLength=0x105, lpBuffer=0x31e1a8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Microsoft\\Windows NT\\MSFax\\Queue\\", lpFilePart=0x0) returned 0x34 [0092.801] FindFirstFileW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Windows NT\\MSFax\\Queue\\*", lpFindFileData=0x31e3f4 | out: lpFindFileData=0x31e3f4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x7fffaad0, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x7fffaad0, ftLastAccessTime.dwHighDateTime=0x1ca0444, ftLastWriteTime.dwLowDateTime=0x7fffaad0, ftLastWriteTime.dwHighDateTime=0x1ca0444, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5107b60 [0092.801] FindNextFileW (in: hFindFile=0x5107b60, lpFindFileData=0x31e404 | out: lpFindFileData=0x31e404*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x7fffaad0, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x7fffaad0, ftLastAccessTime.dwHighDateTime=0x1ca0444, ftLastWriteTime.dwLowDateTime=0x7fffaad0, ftLastWriteTime.dwHighDateTime=0x1ca0444, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0092.801] FindNextFileW (in: hFindFile=0x5107b60, lpFindFileData=0x31e404 | out: lpFindFileData=0x31e404*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x7fffaad0, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x7fffaad0, ftLastAccessTime.dwHighDateTime=0x1ca0444, ftLastWriteTime.dwLowDateTime=0x7fffaad0, ftLastWriteTime.dwHighDateTime=0x1ca0444, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 0 [0092.801] FindClose (in: hFindFile=0x5107b60 | out: hFindFile=0x5107b60) returned 1 [0092.801] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e68c) returned 1 [0092.801] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e698) returned 1 [0092.801] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e6cc) returned 1 [0092.801] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Windows NT\\MSFax\\SentItems", nBufferLength=0x105, lpBuffer=0x31e1d4, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Microsoft\\Windows NT\\MSFax\\SentItems", lpFilePart=0x0) returned 0x37 [0092.801] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Windows NT\\MSFax\\SentItems\\", nBufferLength=0x105, lpBuffer=0x31e1a8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Microsoft\\Windows NT\\MSFax\\SentItems\\", lpFilePart=0x0) returned 0x38 [0092.801] FindFirstFileW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Windows NT\\MSFax\\SentItems\\*", lpFindFileData=0x31e3f4 | out: lpFindFileData=0x31e3f4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x7fffaad0, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x7fffaad0, ftLastAccessTime.dwHighDateTime=0x1ca0444, ftLastWriteTime.dwLowDateTime=0x7fffaad0, ftLastWriteTime.dwHighDateTime=0x1ca0444, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5107b60 [0092.802] FindNextFileW (in: hFindFile=0x5107b60, lpFindFileData=0x31e404 | out: lpFindFileData=0x31e404*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x7fffaad0, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x7fffaad0, ftLastAccessTime.dwHighDateTime=0x1ca0444, ftLastWriteTime.dwLowDateTime=0x7fffaad0, ftLastWriteTime.dwHighDateTime=0x1ca0444, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0092.802] FindNextFileW (in: hFindFile=0x5107b60, lpFindFileData=0x31e404 | out: lpFindFileData=0x31e404*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x7fffaad0, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x7fffaad0, ftLastAccessTime.dwHighDateTime=0x1ca0444, ftLastWriteTime.dwLowDateTime=0x7fffaad0, ftLastWriteTime.dwHighDateTime=0x1ca0444, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 0 [0092.802] FindClose (in: hFindFile=0x5107b60 | out: hFindFile=0x5107b60) returned 1 [0092.802] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e68c) returned 1 [0092.802] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e698) returned 1 [0092.802] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e6cc) returned 1 [0092.802] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Windows NT\\MSFax\\SentItems", nBufferLength=0x105, lpBuffer=0x31e1d4, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Microsoft\\Windows NT\\MSFax\\SentItems", lpFilePart=0x0) returned 0x37 [0092.802] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Windows NT\\MSFax\\SentItems\\", nBufferLength=0x105, lpBuffer=0x31e1a8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Microsoft\\Windows NT\\MSFax\\SentItems\\", lpFilePart=0x0) returned 0x38 [0092.802] FindFirstFileW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Windows NT\\MSFax\\SentItems\\*", lpFindFileData=0x31e3f4 | out: lpFindFileData=0x31e3f4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x7fffaad0, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x7fffaad0, ftLastAccessTime.dwHighDateTime=0x1ca0444, ftLastWriteTime.dwLowDateTime=0x7fffaad0, ftLastWriteTime.dwHighDateTime=0x1ca0444, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5107b60 [0092.802] FindNextFileW (in: hFindFile=0x5107b60, lpFindFileData=0x31e404 | out: lpFindFileData=0x31e404*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x7fffaad0, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x7fffaad0, ftLastAccessTime.dwHighDateTime=0x1ca0444, ftLastWriteTime.dwLowDateTime=0x7fffaad0, ftLastWriteTime.dwHighDateTime=0x1ca0444, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0092.802] FindNextFileW (in: hFindFile=0x5107b60, lpFindFileData=0x31e404 | out: lpFindFileData=0x31e404*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x7fffaad0, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x7fffaad0, ftLastAccessTime.dwHighDateTime=0x1ca0444, ftLastWriteTime.dwLowDateTime=0x7fffaad0, ftLastWriteTime.dwHighDateTime=0x1ca0444, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 0 [0092.802] FindClose (in: hFindFile=0x5107b60 | out: hFindFile=0x5107b60) returned 1 [0092.802] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e68c) returned 1 [0092.802] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e698) returned 1 [0092.802] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e6cc) returned 1 [0092.802] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Windows NT\\MSFax\\VirtualInbox", nBufferLength=0x105, lpBuffer=0x31e1d4, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Microsoft\\Windows NT\\MSFax\\VirtualInbox", lpFilePart=0x0) returned 0x3a [0092.802] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Windows NT\\MSFax\\VirtualInbox\\", nBufferLength=0x105, lpBuffer=0x31e1a8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Microsoft\\Windows NT\\MSFax\\VirtualInbox\\", lpFilePart=0x0) returned 0x3b [0092.802] FindFirstFileW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Windows NT\\MSFax\\VirtualInbox\\*", lpFindFileData=0x31e3f4 | out: lpFindFileData=0x31e3f4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x1d91b669, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x1d91b669, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x1d91b669, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5107b60 [0092.803] FindNextFileW (in: hFindFile=0x5107b60, lpFindFileData=0x31e404 | out: lpFindFileData=0x31e404*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x1d91b669, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x1d91b669, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x1d91b669, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0092.803] FindNextFileW (in: hFindFile=0x5107b60, lpFindFileData=0x31e404 | out: lpFindFileData=0x31e404*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x1d91b669, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x21cf2d38, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x1d91b669, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="en-US", cAlternateFileName="")) returned 1 [0092.803] FindNextFileW (in: hFindFile=0x5107b60, lpFindFileData=0x31e404 | out: lpFindFileData=0x31e404*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x1d91b669, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x21cf2d38, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x1d91b669, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="en-US", cAlternateFileName="")) returned 0 [0092.803] FindClose (in: hFindFile=0x5107b60 | out: hFindFile=0x5107b60) returned 1 [0092.803] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e68c) returned 1 [0092.803] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e698) returned 1 [0092.803] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e6cc) returned 1 [0092.803] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Windows NT\\MSFax\\VirtualInbox", nBufferLength=0x105, lpBuffer=0x31e1d4, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Microsoft\\Windows NT\\MSFax\\VirtualInbox", lpFilePart=0x0) returned 0x3a [0092.803] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Windows NT\\MSFax\\VirtualInbox\\", nBufferLength=0x105, lpBuffer=0x31e1a8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Microsoft\\Windows NT\\MSFax\\VirtualInbox\\", lpFilePart=0x0) returned 0x3b [0092.803] FindFirstFileW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Windows NT\\MSFax\\VirtualInbox\\*", lpFindFileData=0x31e3f4 | out: lpFindFileData=0x31e3f4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x1d91b669, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x1d91b669, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x1d91b669, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5107b60 [0092.803] FindNextFileW (in: hFindFile=0x5107b60, lpFindFileData=0x31e404 | out: lpFindFileData=0x31e404*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x1d91b669, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x1d91b669, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x1d91b669, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0092.804] FindNextFileW (in: hFindFile=0x5107b60, lpFindFileData=0x31e404 | out: lpFindFileData=0x31e404*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x1d91b669, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x21cf2d38, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x1d91b669, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="en-US", cAlternateFileName="")) returned 1 [0092.804] FindNextFileW (in: hFindFile=0x5107b60, lpFindFileData=0x31e404 | out: lpFindFileData=0x31e404*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0092.804] FindClose (in: hFindFile=0x5107b60 | out: hFindFile=0x5107b60) returned 1 [0092.804] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e68c) returned 1 [0092.804] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e698) returned 1 [0092.804] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e654) returned 1 [0092.804] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Windows NT\\MSFax\\VirtualInbox\\en-US", nBufferLength=0x105, lpBuffer=0x31e15c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Microsoft\\Windows NT\\MSFax\\VirtualInbox\\en-US", lpFilePart=0x0) returned 0x40 [0092.804] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Windows NT\\MSFax\\VirtualInbox\\en-US\\", nBufferLength=0x105, lpBuffer=0x31e130, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Microsoft\\Windows NT\\MSFax\\VirtualInbox\\en-US\\", lpFilePart=0x0) returned 0x41 [0092.804] FindFirstFileW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Windows NT\\MSFax\\VirtualInbox\\en-US\\*", lpFindFileData=0x31e37c | out: lpFindFileData=0x31e37c*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x1d91b669, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x21cf2d38, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x1d91b669, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5107b60 [0092.804] FindNextFileW (in: hFindFile=0x5107b60, lpFindFileData=0x31e38c | out: lpFindFileData=0x31e38c*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x1d91b669, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x21cf2d38, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x1d91b669, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0092.804] FindNextFileW (in: hFindFile=0x5107b60, lpFindFileData=0x31e38c | out: lpFindFileData=0x31e38c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xfe3998d, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x10b3266c, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0xfe3998d, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x15dbe, dwReserved0=0x0, dwReserved1=0x0, cFileName="WelcomeFax.tif", cAlternateFileName="")) returned 1 [0092.804] FindNextFileW (in: hFindFile=0x5107b60, lpFindFileData=0x31e38c | out: lpFindFileData=0x31e38c*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0092.805] FindClose (in: hFindFile=0x5107b60 | out: hFindFile=0x5107b60) returned 1 [0092.805] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e614) returned 1 [0092.805] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e620) returned 1 [0092.805] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e654) returned 1 [0092.805] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Windows NT\\MSFax\\VirtualInbox\\en-US", nBufferLength=0x105, lpBuffer=0x31e15c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Microsoft\\Windows NT\\MSFax\\VirtualInbox\\en-US", lpFilePart=0x0) returned 0x40 [0092.805] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Windows NT\\MSFax\\VirtualInbox\\en-US\\", nBufferLength=0x105, lpBuffer=0x31e130, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Microsoft\\Windows NT\\MSFax\\VirtualInbox\\en-US\\", lpFilePart=0x0) returned 0x41 [0092.805] FindFirstFileW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Windows NT\\MSFax\\VirtualInbox\\en-US\\*", lpFindFileData=0x31e37c | out: lpFindFileData=0x31e37c*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x1d91b669, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x21cf2d38, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x1d91b669, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5107b60 [0092.805] FindNextFileW (in: hFindFile=0x5107b60, lpFindFileData=0x31e38c | out: lpFindFileData=0x31e38c*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x1d91b669, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x21cf2d38, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x1d91b669, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0092.805] FindNextFileW (in: hFindFile=0x5107b60, lpFindFileData=0x31e38c | out: lpFindFileData=0x31e38c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xfe3998d, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x10b3266c, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0xfe3998d, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x15dbe, dwReserved0=0x0, dwReserved1=0x0, cFileName="WelcomeFax.tif", cAlternateFileName="")) returned 1 [0092.805] FindNextFileW (in: hFindFile=0x5107b60, lpFindFileData=0x31e38c | out: lpFindFileData=0x31e38c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xfe3998d, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x10b3266c, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0xfe3998d, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x15dbe, dwReserved0=0x0, dwReserved1=0x0, cFileName="WelcomeFax.tif", cAlternateFileName="")) returned 0 [0092.805] FindClose (in: hFindFile=0x5107b60 | out: hFindFile=0x5107b60) returned 1 [0092.805] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e614) returned 1 [0092.805] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e620) returned 1 [0092.805] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e744) returned 1 [0092.805] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Windows NT\\MSScan", nBufferLength=0x105, lpBuffer=0x31e24c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Microsoft\\Windows NT\\MSScan", lpFilePart=0x0) returned 0x2e [0092.805] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Windows NT\\MSScan\\", nBufferLength=0x105, lpBuffer=0x31e220, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Microsoft\\Windows NT\\MSScan\\", lpFilePart=0x0) returned 0x2f [0092.805] FindFirstFileW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Windows NT\\MSScan\\*", lpFindFileData=0x31e46c | out: lpFindFileData=0x31e46c*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x7fffaad0, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x80340916, ftLastAccessTime.dwHighDateTime=0x1ca0444, ftLastWriteTime.dwLowDateTime=0x80340916, ftLastWriteTime.dwHighDateTime=0x1ca0444, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5107b60 [0092.806] FindNextFileW (in: hFindFile=0x5107b60, lpFindFileData=0x31e47c | out: lpFindFileData=0x31e47c*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x7fffaad0, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x80340916, ftLastAccessTime.dwHighDateTime=0x1ca0444, ftLastWriteTime.dwLowDateTime=0x80340916, ftLastWriteTime.dwHighDateTime=0x1ca0444, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0092.806] FindNextFileW (in: hFindFile=0x5107b60, lpFindFileData=0x31e47c | out: lpFindFileData=0x31e47c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xea12c467, ftCreationTime.dwHighDateTime=0x1c9ea0e, ftLastAccessTime.dwLowDateTime=0xea12c467, ftLastAccessTime.dwHighDateTime=0x1c9ea0e, ftLastWriteTime.dwLowDateTime=0xea1525c5, ftLastWriteTime.dwHighDateTime=0x1c9ea0e, nFileSizeHigh=0x0, nFileSizeLow=0x7e148, dwReserved0=0x0, dwReserved1=0x0, cFileName="WelcomeScan.jpg", cAlternateFileName="")) returned 1 [0092.806] FindNextFileW (in: hFindFile=0x5107b60, lpFindFileData=0x31e47c | out: lpFindFileData=0x31e47c*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0092.806] FindClose (in: hFindFile=0x5107b60 | out: hFindFile=0x5107b60) returned 1 [0092.806] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e704) returned 1 [0092.806] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e710) returned 1 [0092.806] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e744) returned 1 [0092.806] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Windows NT\\MSScan", nBufferLength=0x105, lpBuffer=0x31e24c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Microsoft\\Windows NT\\MSScan", lpFilePart=0x0) returned 0x2e [0092.806] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Windows NT\\MSScan\\", nBufferLength=0x105, lpBuffer=0x31e220, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Microsoft\\Windows NT\\MSScan\\", lpFilePart=0x0) returned 0x2f [0092.806] FindFirstFileW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Windows NT\\MSScan\\*", lpFindFileData=0x31e46c | out: lpFindFileData=0x31e46c*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x7fffaad0, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x80340916, ftLastAccessTime.dwHighDateTime=0x1ca0444, ftLastWriteTime.dwLowDateTime=0x80340916, ftLastWriteTime.dwHighDateTime=0x1ca0444, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5107b60 [0092.806] FindNextFileW (in: hFindFile=0x5107b60, lpFindFileData=0x31e47c | out: lpFindFileData=0x31e47c*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x7fffaad0, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x80340916, ftLastAccessTime.dwHighDateTime=0x1ca0444, ftLastWriteTime.dwLowDateTime=0x80340916, ftLastWriteTime.dwHighDateTime=0x1ca0444, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0092.806] FindNextFileW (in: hFindFile=0x5107b60, lpFindFileData=0x31e47c | out: lpFindFileData=0x31e47c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xea12c467, ftCreationTime.dwHighDateTime=0x1c9ea0e, ftLastAccessTime.dwLowDateTime=0xea12c467, ftLastAccessTime.dwHighDateTime=0x1c9ea0e, ftLastWriteTime.dwLowDateTime=0xea1525c5, ftLastWriteTime.dwHighDateTime=0x1c9ea0e, nFileSizeHigh=0x0, nFileSizeLow=0x7e148, dwReserved0=0x0, dwReserved1=0x0, cFileName="WelcomeScan.jpg", cAlternateFileName="")) returned 1 [0092.806] FindNextFileW (in: hFindFile=0x5107b60, lpFindFileData=0x31e47c | out: lpFindFileData=0x31e47c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xea12c467, ftCreationTime.dwHighDateTime=0x1c9ea0e, ftLastAccessTime.dwLowDateTime=0xea12c467, ftLastAccessTime.dwHighDateTime=0x1c9ea0e, ftLastWriteTime.dwLowDateTime=0xea1525c5, ftLastWriteTime.dwHighDateTime=0x1c9ea0e, nFileSizeHigh=0x0, nFileSizeLow=0x7e148, dwReserved0=0x0, dwReserved1=0x0, cFileName="WelcomeScan.jpg", cAlternateFileName="")) returned 0 [0092.806] FindClose (in: hFindFile=0x5107b60 | out: hFindFile=0x5107b60) returned 1 [0092.806] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e704) returned 1 [0092.806] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e710) returned 1 [0092.806] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Windows NT\\MSScan\\WelcomeScan.jpg", nBufferLength=0x105, lpBuffer=0x31e11c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Microsoft\\Windows NT\\MSScan\\WelcomeScan.jpg", lpFilePart=0x0) returned 0x3e [0092.806] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e610) returned 1 [0092.806] CreateFileW (lpFileName="C:\\Users\\All Users\\Microsoft\\Windows NT\\MSScan\\WelcomeScan.jpg" (normalized: "c:\\users\\all users\\microsoft\\windows nt\\msscan\\welcomescan.jpg"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x178 [0092.807] GetFileType (hFile=0x178) returned 0x1 [0092.807] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e60c) returned 1 [0092.807] GetFileType (hFile=0x178) returned 0x1 [0092.807] GetFileSize (in: hFile=0x178, lpFileSizeHigh=0x31e718 | out: lpFileSizeHigh=0x31e718*=0x0) returned 0x7e148 [0092.807] ReadFile (in: hFile=0x178, lpBuffer=0x3675920, nNumberOfBytesToRead=0x7e148, lpNumberOfBytesRead=0x31e6c4, lpOverlapped=0x0 | out: lpBuffer=0x3675920*, lpNumberOfBytesRead=0x31e6c4*=0x7e148, lpOverlapped=0x0) returned 1 [0092.908] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Windows NT\\MSScan\\WelcomeScan.jpg", nBufferLength=0x105, lpBuffer=0x31e108, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Microsoft\\Windows NT\\MSScan\\WelcomeScan.jpg", lpFilePart=0x0) returned 0x3e [0092.908] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e5fc) returned 1 [0092.909] CreateFileW (lpFileName="C:\\Users\\All Users\\Microsoft\\Windows NT\\MSScan\\WelcomeScan.jpg" (normalized: "c:\\users\\all users\\microsoft\\windows nt\\msscan\\welcomescan.jpg"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0xffffffff [0092.910] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31d438) returned 1 [0092.910] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e7bc) returned 1 [0092.910] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\WwanSvc", nBufferLength=0x105, lpBuffer=0x31e2c4, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Microsoft\\WwanSvc", lpFilePart=0x0) returned 0x24 [0092.910] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\WwanSvc\\", nBufferLength=0x105, lpBuffer=0x31e298, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Microsoft\\WwanSvc\\", lpFilePart=0x0) returned 0x25 [0092.910] FindFirstFileW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\WwanSvc\\*", lpFindFileData=0x31e4e4 | out: lpFindFileData=0x31e4e4*(dwFileAttributes=0x2012, ftCreationTime.dwLowDateTime=0x7fffaad0, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x7fffaad0, ftLastAccessTime.dwHighDateTime=0x1ca0444, ftLastWriteTime.dwLowDateTime=0x7fffaad0, ftLastWriteTime.dwHighDateTime=0x1ca0444, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x381ec0 [0092.911] FindNextFileW (in: hFindFile=0x381ec0, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x2012, ftCreationTime.dwLowDateTime=0x7fffaad0, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x7fffaad0, ftLastAccessTime.dwHighDateTime=0x1ca0444, ftLastWriteTime.dwLowDateTime=0x7fffaad0, ftLastWriteTime.dwHighDateTime=0x1ca0444, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0092.911] FindNextFileW (in: hFindFile=0x381ec0, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x2012, ftCreationTime.dwLowDateTime=0x7fffaad0, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x7fffaad0, ftLastAccessTime.dwHighDateTime=0x1ca0444, ftLastWriteTime.dwLowDateTime=0x7fffaad0, ftLastWriteTime.dwHighDateTime=0x1ca0444, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Profiles", cAlternateFileName="")) returned 1 [0092.911] FindNextFileW (in: hFindFile=0x381ec0, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x2012, ftCreationTime.dwLowDateTime=0x7fffaad0, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x7fffaad0, ftLastAccessTime.dwHighDateTime=0x1ca0444, ftLastWriteTime.dwLowDateTime=0x7fffaad0, ftLastWriteTime.dwHighDateTime=0x1ca0444, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Profiles", cAlternateFileName="")) returned 0 [0092.911] FindClose (in: hFindFile=0x381ec0 | out: hFindFile=0x381ec0) returned 1 [0092.911] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e77c) returned 1 [0092.911] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e788) returned 1 [0092.911] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e7bc) returned 1 [0092.911] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\WwanSvc", nBufferLength=0x105, lpBuffer=0x31e2c4, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Microsoft\\WwanSvc", lpFilePart=0x0) returned 0x24 [0092.911] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\WwanSvc\\", nBufferLength=0x105, lpBuffer=0x31e298, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Microsoft\\WwanSvc\\", lpFilePart=0x0) returned 0x25 [0092.911] FindFirstFileW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\WwanSvc\\*", lpFindFileData=0x31e4e4 | out: lpFindFileData=0x31e4e4*(dwFileAttributes=0x2012, ftCreationTime.dwLowDateTime=0x7fffaad0, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x7fffaad0, ftLastAccessTime.dwHighDateTime=0x1ca0444, ftLastWriteTime.dwLowDateTime=0x7fffaad0, ftLastWriteTime.dwHighDateTime=0x1ca0444, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x381ec0 [0092.912] FindNextFileW (in: hFindFile=0x381ec0, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x2012, ftCreationTime.dwLowDateTime=0x7fffaad0, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x7fffaad0, ftLastAccessTime.dwHighDateTime=0x1ca0444, ftLastWriteTime.dwLowDateTime=0x7fffaad0, ftLastWriteTime.dwHighDateTime=0x1ca0444, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0092.912] FindNextFileW (in: hFindFile=0x381ec0, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x2012, ftCreationTime.dwLowDateTime=0x7fffaad0, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x7fffaad0, ftLastAccessTime.dwHighDateTime=0x1ca0444, ftLastWriteTime.dwLowDateTime=0x7fffaad0, ftLastWriteTime.dwHighDateTime=0x1ca0444, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Profiles", cAlternateFileName="")) returned 1 [0092.912] FindNextFileW (in: hFindFile=0x381ec0, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0092.912] FindClose (in: hFindFile=0x381ec0 | out: hFindFile=0x381ec0) returned 1 [0092.912] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e77c) returned 1 [0092.912] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e788) returned 1 [0092.912] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e744) returned 1 [0092.912] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\WwanSvc\\Profiles", nBufferLength=0x105, lpBuffer=0x31e24c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Microsoft\\WwanSvc\\Profiles", lpFilePart=0x0) returned 0x2d [0092.912] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\WwanSvc\\Profiles\\", nBufferLength=0x105, lpBuffer=0x31e220, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Microsoft\\WwanSvc\\Profiles\\", lpFilePart=0x0) returned 0x2e [0092.912] FindFirstFileW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\WwanSvc\\Profiles\\*", lpFindFileData=0x31e46c | out: lpFindFileData=0x31e46c*(dwFileAttributes=0x2012, ftCreationTime.dwLowDateTime=0x7fffaad0, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x7fffaad0, ftLastAccessTime.dwHighDateTime=0x1ca0444, ftLastWriteTime.dwLowDateTime=0x7fffaad0, ftLastWriteTime.dwHighDateTime=0x1ca0444, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x381ec0 [0092.912] FindNextFileW (in: hFindFile=0x381ec0, lpFindFileData=0x31e47c | out: lpFindFileData=0x31e47c*(dwFileAttributes=0x2012, ftCreationTime.dwLowDateTime=0x7fffaad0, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x7fffaad0, ftLastAccessTime.dwHighDateTime=0x1ca0444, ftLastWriteTime.dwLowDateTime=0x7fffaad0, ftLastWriteTime.dwHighDateTime=0x1ca0444, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0092.913] FindNextFileW (in: hFindFile=0x381ec0, lpFindFileData=0x31e47c | out: lpFindFileData=0x31e47c*(dwFileAttributes=0x2012, ftCreationTime.dwLowDateTime=0x7fffaad0, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x7fffaad0, ftLastAccessTime.dwHighDateTime=0x1ca0444, ftLastWriteTime.dwLowDateTime=0x7fffaad0, ftLastWriteTime.dwHighDateTime=0x1ca0444, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 0 [0092.913] FindClose (in: hFindFile=0x381ec0 | out: hFindFile=0x381ec0) returned 1 [0092.913] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e704) returned 1 [0092.913] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e710) returned 1 [0092.913] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e744) returned 1 [0092.913] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\WwanSvc\\Profiles", nBufferLength=0x105, lpBuffer=0x31e24c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Microsoft\\WwanSvc\\Profiles", lpFilePart=0x0) returned 0x2d [0092.913] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\WwanSvc\\Profiles\\", nBufferLength=0x105, lpBuffer=0x31e220, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Microsoft\\WwanSvc\\Profiles\\", lpFilePart=0x0) returned 0x2e [0092.913] FindFirstFileW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\WwanSvc\\Profiles\\*", lpFindFileData=0x31e46c | out: lpFindFileData=0x31e46c*(dwFileAttributes=0x2012, ftCreationTime.dwLowDateTime=0x7fffaad0, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x7fffaad0, ftLastAccessTime.dwHighDateTime=0x1ca0444, ftLastWriteTime.dwLowDateTime=0x7fffaad0, ftLastWriteTime.dwHighDateTime=0x1ca0444, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x381ec0 [0092.913] FindNextFileW (in: hFindFile=0x381ec0, lpFindFileData=0x31e47c | out: lpFindFileData=0x31e47c*(dwFileAttributes=0x2012, ftCreationTime.dwLowDateTime=0x7fffaad0, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x7fffaad0, ftLastAccessTime.dwHighDateTime=0x1ca0444, ftLastWriteTime.dwLowDateTime=0x7fffaad0, ftLastWriteTime.dwHighDateTime=0x1ca0444, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0092.913] FindNextFileW (in: hFindFile=0x381ec0, lpFindFileData=0x31e47c | out: lpFindFileData=0x31e47c*(dwFileAttributes=0x2012, ftCreationTime.dwLowDateTime=0x7fffaad0, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x7fffaad0, ftLastAccessTime.dwHighDateTime=0x1ca0444, ftLastWriteTime.dwLowDateTime=0x7fffaad0, ftLastWriteTime.dwHighDateTime=0x1ca0444, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 0 [0092.913] FindClose (in: hFindFile=0x381ec0 | out: hFindFile=0x381ec0) returned 1 [0092.914] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e704) returned 1 [0092.914] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e710) returned 1 [0092.914] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e834) returned 1 [0092.914] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Microsoft Help", nBufferLength=0x105, lpBuffer=0x31e33c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Microsoft Help", lpFilePart=0x0) returned 0x21 [0092.914] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Microsoft Help\\", nBufferLength=0x105, lpBuffer=0x31e310, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Microsoft Help\\", lpFilePart=0x0) returned 0x22 [0092.914] FindFirstFileW (in: lpFileName="C:\\Users\\All Users\\Microsoft Help\\*", lpFindFileData=0x31e55c | out: lpFindFileData=0x31e55c*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe79db030, ftCreationTime.dwHighDateTime=0x1d2dda1, ftLastAccessTime.dwLowDateTime=0xed25d0a0, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0xed25d0a0, ftLastWriteTime.dwHighDateTime=0x1d305f1, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x381ec0 [0092.915] FindNextFileW (in: hFindFile=0x381ec0, lpFindFileData=0x31e56c | out: lpFindFileData=0x31e56c*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe79db030, ftCreationTime.dwHighDateTime=0x1d2dda1, ftLastAccessTime.dwLowDateTime=0xed25d0a0, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0xed25d0a0, ftLastWriteTime.dwHighDateTime=0x1d305f1, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0092.915] FindNextFileW (in: hFindFile=0x381ec0, lpFindFileData=0x31e56c | out: lpFindFileData=0x31e56c*(dwFileAttributes=0x2022, ftCreationTime.dwLowDateTime=0x896b9210, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x896b9210, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xe8b8c220, ftLastWriteTime.dwHighDateTime=0x1d305f1, nFileSizeHigh=0x0, nFileSizeLow=0x186, dwReserved0=0x0, dwReserved1=0x0, cFileName="Hx.hxn", cAlternateFileName="")) returned 1 [0092.915] FindNextFileW (in: hFindFile=0x381ec0, lpFindFileData=0x31e56c | out: lpFindFileData=0x31e56c*(dwFileAttributes=0x2022, ftCreationTime.dwLowDateTime=0xfa72fc10, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xfa72fc10, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xfa7a2030, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x146, dwReserved0=0x0, dwReserved1=0x0, cFileName="MS.EXCEL.14.1033.hxn", cAlternateFileName="MSEXCE~1.HXN")) returned 1 [0092.915] FindNextFileW (in: hFindFile=0x381ec0, lpFindFileData=0x31e56c | out: lpFindFileData=0x31e56c*(dwFileAttributes=0x2022, ftCreationTime.dwLowDateTime=0xfa755d70, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xfa755d70, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xfa7a2030, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x15e, dwReserved0=0x0, dwReserved1=0x0, cFileName="MS.EXCEL.DEV.14.1033.hxn", cAlternateFileName="MSEXCE~2.HXN")) returned 1 [0092.916] FindNextFileW (in: hFindFile=0x381ec0, lpFindFileData=0x31e56c | out: lpFindFileData=0x31e56c*(dwFileAttributes=0x2022, ftCreationTime.dwLowDateTime=0xef377f10, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xef377f10, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xef3ea330, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x146, dwReserved0=0x0, dwReserved1=0x0, cFileName="MS.GRAPH.14.1033.hxn", cAlternateFileName="MSGRAP~1.HXN")) returned 1 [0092.916] FindNextFileW (in: hFindFile=0x381ec0, lpFindFileData=0x31e56c | out: lpFindFileData=0x31e56c*(dwFileAttributes=0x2022, ftCreationTime.dwLowDateTime=0xfd789af0, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xfd789af0, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xfd822070, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x14c, dwReserved0=0x0, dwReserved1=0x0, cFileName="MS.GROOVE.14.1033.hxn", cAlternateFileName="MSGROO~1.HXN")) returned 1 [0092.916] FindNextFileW (in: hFindFile=0x381ec0, lpFindFileData=0x31e56c | out: lpFindFileData=0x31e56c*(dwFileAttributes=0x2022, ftCreationTime.dwLowDateTime=0x113ae4d0, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x113ae4d0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x11446a50, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x158, dwReserved0=0x0, dwReserved1=0x0, cFileName="MS.INFOPATH.14.1033.hxn", cAlternateFileName="MSINFO~1.HXN")) returned 1 [0092.916] FindNextFileW (in: hFindFile=0x381ec0, lpFindFileData=0x31e56c | out: lpFindFileData=0x31e56c*(dwFileAttributes=0x2022, ftCreationTime.dwLowDateTime=0x113ae4d0, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x113ae4d0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x1146cbb0, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x17c, dwReserved0=0x0, dwReserved1=0x0, cFileName="MS.INFOPATHEDITOR.14.1033.hxn", cAlternateFileName="MSINFO~2.HXN")) returned 1 [0092.916] FindNextFileW (in: hFindFile=0x381ec0, lpFindFileData=0x31e56c | out: lpFindFileData=0x31e56c*(dwFileAttributes=0x2022, ftCreationTime.dwLowDateTime=0x15f8e210, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x15f8e210, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x1604c8f0, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x158, dwReserved0=0x0, dwReserved1=0x0, cFileName="MS.MSACCESS.14.1033.hxn", cAlternateFileName="MSMSAC~1.HXN")) returned 1 [0092.916] FindNextFileW (in: hFindFile=0x381ec0, lpFindFileData=0x31e56c | out: lpFindFileData=0x31e56c*(dwFileAttributes=0x2022, ftCreationTime.dwLowDateTime=0x15f8e210, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x15f8e210, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x1604c8f0, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x170, dwReserved0=0x0, dwReserved1=0x0, cFileName="MS.MSACCESS.DEV.14.1033.hxn", cAlternateFileName="MSMSAC~2.HXN")) returned 1 [0092.916] FindNextFileW (in: hFindFile=0x381ec0, lpFindFileData=0x31e56c | out: lpFindFileData=0x31e56c*(dwFileAttributes=0x2022, ftCreationTime.dwLowDateTime=0xef377f10, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xef377f10, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xef3ea330, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x146, dwReserved0=0x0, dwReserved1=0x0, cFileName="MS.MSOUC.14.1033.hxn", cAlternateFileName="MSMSOU~1.HXN")) returned 1 [0092.916] FindNextFileW (in: hFindFile=0x381ec0, lpFindFileData=0x31e56c | out: lpFindFileData=0x31e56c*(dwFileAttributes=0x2022, ftCreationTime.dwLowDateTime=0x1beeb370, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x1beeb370, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x1bf5d790, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x146, dwReserved0=0x0, dwReserved1=0x0, cFileName="MS.MSPUB.14.1033.hxn", cAlternateFileName="MSMSPU~1.HXN")) returned 1 [0092.917] FindNextFileW (in: hFindFile=0x381ec0, lpFindFileData=0x31e56c | out: lpFindFileData=0x31e56c*(dwFileAttributes=0x2022, ftCreationTime.dwLowDateTime=0x1beeb370, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x1beeb370, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x1bf5d790, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x15e, dwReserved0=0x0, dwReserved1=0x0, cFileName="MS.MSPUB.DEV.14.1033.hxn", cAlternateFileName="MSMSPU~2.HXN")) returned 1 [0092.917] FindNextFileW (in: hFindFile=0x381ec0, lpFindFileData=0x31e56c | out: lpFindFileData=0x31e56c*(dwFileAttributes=0x2022, ftCreationTime.dwLowDateTime=0xef377f10, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xef377f10, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xef3ea330, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x14c, dwReserved0=0x0, dwReserved1=0x0, cFileName="MS.MSTORE.14.1033.hxn", cAlternateFileName="MSMSTO~1.HXN")) returned 1 [0092.917] FindNextFileW (in: hFindFile=0x381ec0, lpFindFileData=0x31e56c | out: lpFindFileData=0x31e56c*(dwFileAttributes=0x2022, ftCreationTime.dwLowDateTime=0xef377f10, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xef377f10, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xef3ea330, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x13a, dwReserved0=0x0, dwReserved1=0x0, cFileName="MS.OIS.14.1033.hxn", cAlternateFileName="MSOIS1~1.HXN")) returned 1 [0092.917] FindNextFileW (in: hFindFile=0x381ec0, lpFindFileData=0x31e56c | out: lpFindFileData=0x31e56c*(dwFileAttributes=0x2022, ftCreationTime.dwLowDateTime=0xc997810, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0xc997810, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xc9e3ad0, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x152, dwReserved0=0x0, dwReserved1=0x0, cFileName="MS.ONENOTE.14.1033.hxn", cAlternateFileName="MSONEN~1.HXN")) returned 1 [0092.917] FindNextFileW (in: hFindFile=0x381ec0, lpFindFileData=0x31e56c | out: lpFindFileData=0x31e56c*(dwFileAttributes=0x2022, ftCreationTime.dwLowDateTime=0x25328b0, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x25328b0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x2689510, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x152, dwReserved0=0x0, dwReserved1=0x0, cFileName="MS.OUTLOOK.14.1033.hxn", cAlternateFileName="MSOUTL~1.HXN")) returned 1 [0092.917] FindNextFileW (in: hFindFile=0x381ec0, lpFindFileData=0x31e56c | out: lpFindFileData=0x31e56c*(dwFileAttributes=0x2022, ftCreationTime.dwLowDateTime=0x25328b0, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x25328b0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x26af670, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x16a, dwReserved0=0x0, dwReserved1=0x0, cFileName="MS.OUTLOOK.DEV.14.1033.hxn", cAlternateFileName="MSOUTL~2.HXN")) returned 1 [0092.917] FindNextFileW (in: hFindFile=0x381ec0, lpFindFileData=0x31e56c | out: lpFindFileData=0x31e56c*(dwFileAttributes=0x2022, ftCreationTime.dwLowDateTime=0xf5fa06b0, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xf5fa06b0, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xf5fec970, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x158, dwReserved0=0x0, dwReserved1=0x0, cFileName="MS.POWERPNT.14.1033.hxn", cAlternateFileName="MSPOWE~1.HXN")) returned 1 [0092.917] FindNextFileW (in: hFindFile=0x381ec0, lpFindFileData=0x31e56c | out: lpFindFileData=0x31e56c*(dwFileAttributes=0x2022, ftCreationTime.dwLowDateTime=0xf5fa06b0, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xf5fa06b0, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xf5fec970, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x170, dwReserved0=0x0, dwReserved1=0x0, cFileName="MS.POWERPNT.DEV.14.1033.hxn", cAlternateFileName="MSPOWE~2.HXN")) returned 1 [0092.918] FindNextFileW (in: hFindFile=0x381ec0, lpFindFileData=0x31e56c | out: lpFindFileData=0x31e56c*(dwFileAttributes=0x2022, ftCreationTime.dwLowDateTime=0xef377f10, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xef377f10, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xef3ea330, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x152, dwReserved0=0x0, dwReserved1=0x0, cFileName="MS.SETLANG.14.1033.hxn", cAlternateFileName="MSSETL~1.HXN")) returned 1 [0092.918] FindNextFileW (in: hFindFile=0x381ec0, lpFindFileData=0x31e56c | out: lpFindFileData=0x31e56c*(dwFileAttributes=0x2022, ftCreationTime.dwLowDateTime=0x523a6340, ftCreationTime.dwHighDateTime=0x1d305eb, ftLastAccessTime.dwLowDateTime=0x523a6340, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0x5269fec0, ftLastWriteTime.dwHighDateTime=0x1d305eb, nFileSizeHigh=0x0, nFileSizeLow=0x146, dwReserved0=0x0, dwReserved1=0x0, cFileName="MS.VISIO.14.1033.hxn", cAlternateFileName="MSVISI~1.HXN")) returned 1 [0092.918] FindNextFileW (in: hFindFile=0x381ec0, lpFindFileData=0x31e56c | out: lpFindFileData=0x31e56c*(dwFileAttributes=0x2022, ftCreationTime.dwLowDateTime=0x523a6340, ftCreationTime.dwHighDateTime=0x1d305eb, ftLastAccessTime.dwLowDateTime=0x523a6340, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0x527122e0, ftLastWriteTime.dwHighDateTime=0x1d305eb, nFileSizeHigh=0x0, nFileSizeLow=0x15e, dwReserved0=0x0, dwReserved1=0x0, cFileName="MS.VISIO.DEV.14.1033.hxn", cAlternateFileName="MSVISI~3.HXN")) returned 1 [0092.918] FindNextFileW (in: hFindFile=0x381ec0, lpFindFileData=0x31e56c | out: lpFindFileData=0x31e56c*(dwFileAttributes=0x2022, ftCreationTime.dwLowDateTime=0x523a6340, ftCreationTime.dwHighDateTime=0x1d305eb, ftLastAccessTime.dwLowDateTime=0x523a6340, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0x52738440, ftLastWriteTime.dwHighDateTime=0x1d305eb, nFileSizeHigh=0x0, nFileSizeLow=0x188, dwReserved0=0x0, dwReserved1=0x0, cFileName="MS.VISIO.SHAPESHEET.14.1033.hxn", cAlternateFileName="MSVISI~4.HXN")) returned 1 [0092.918] FindNextFileW (in: hFindFile=0x381ec0, lpFindFileData=0x31e56c | out: lpFindFileData=0x31e56c*(dwFileAttributes=0x2022, ftCreationTime.dwLowDateTime=0x523a6340, ftCreationTime.dwHighDateTime=0x1d305eb, ftLastAccessTime.dwLowDateTime=0x523a6340, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0x52738440, ftLastWriteTime.dwHighDateTime=0x1d305eb, nFileSizeHigh=0x0, nFileSizeLow=0x15e, dwReserved0=0x0, dwReserved1=0x0, cFileName="MS.VISIO_PRM.14.1033.hxn", cAlternateFileName="MSE1C9~1.HXN")) returned 1 [0092.918] FindNextFileW (in: hFindFile=0x381ec0, lpFindFileData=0x31e56c | out: lpFindFileData=0x31e56c*(dwFileAttributes=0x2022, ftCreationTime.dwLowDateTime=0x523a6340, ftCreationTime.dwHighDateTime=0x1d305eb, ftLastAccessTime.dwLowDateTime=0x523a6340, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0x527122e0, ftLastWriteTime.dwHighDateTime=0x1d305eb, nFileSizeHigh=0x0, nFileSizeLow=0x15e, dwReserved0=0x0, dwReserved1=0x0, cFileName="MS.VISIO_STD.14.1033.hxn", cAlternateFileName="MSVISI~2.HXN")) returned 1 [0092.918] FindNextFileW (in: hFindFile=0x381ec0, lpFindFileData=0x31e56c | out: lpFindFileData=0x31e56c*(dwFileAttributes=0x2022, ftCreationTime.dwLowDateTime=0xaf766ee0, ftCreationTime.dwHighDateTime=0x1d305f1, ftLastAccessTime.dwLowDateTime=0xaf766ee0, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0xaf7d9300, ftLastWriteTime.dwHighDateTime=0x1d305f1, nFileSizeHigh=0x0, nFileSizeLow=0x152, dwReserved0=0x0, dwReserved1=0x0, cFileName="MS.WINPROJ.14.1033.hxn", cAlternateFileName="MSWINP~1.HXN")) returned 1 [0092.918] FindNextFileW (in: hFindFile=0x381ec0, lpFindFileData=0x31e56c | out: lpFindFileData=0x31e56c*(dwFileAttributes=0x2022, ftCreationTime.dwLowDateTime=0xaf766ee0, ftCreationTime.dwHighDateTime=0x1d305f1, ftLastAccessTime.dwLowDateTime=0xaf766ee0, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0xaf7d9300, ftLastWriteTime.dwHighDateTime=0x1d305f1, nFileSizeHigh=0x0, nFileSizeLow=0x16a, dwReserved0=0x0, dwReserved1=0x0, cFileName="MS.WINPROJ.DEV.14.1033.hxn", cAlternateFileName="MSWINP~2.HXN")) returned 1 [0092.919] FindNextFileW (in: hFindFile=0x381ec0, lpFindFileData=0x31e56c | out: lpFindFileData=0x31e56c*(dwFileAttributes=0x2022, ftCreationTime.dwLowDateTime=0x1e67e130, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x1e67e130, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x1e6f0550, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x152, dwReserved0=0x0, dwReserved1=0x0, cFileName="MS.WINWORD.14.1033.hxn", cAlternateFileName="MSWINW~1.HXN")) returned 1 [0092.919] FindNextFileW (in: hFindFile=0x381ec0, lpFindFileData=0x31e56c | out: lpFindFileData=0x31e56c*(dwFileAttributes=0x2022, ftCreationTime.dwLowDateTime=0x1e67e130, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x1e67e130, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x1e6f0550, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x16a, dwReserved0=0x0, dwReserved1=0x0, cFileName="MS.WINWORD.DEV.14.1033.hxn", cAlternateFileName="MSWINW~2.HXN")) returned 1 [0092.919] FindNextFileW (in: hFindFile=0x381ec0, lpFindFileData=0x31e56c | out: lpFindFileData=0x31e56c*(dwFileAttributes=0x2022, ftCreationTime.dwLowDateTime=0xe80ff230, ftCreationTime.dwHighDateTime=0x1d2dda1, ftLastAccessTime.dwLowDateTime=0xe80ff230, ftLastAccessTime.dwHighDateTime=0x1d2dda1, ftLastWriteTime.dwLowDateTime=0xe8b8c220, ftLastWriteTime.dwHighDateTime=0x1d305f1, nFileSizeHigh=0x0, nFileSizeLow=0x21dc, dwReserved0=0x0, dwReserved1=0x0, cFileName="nslist.hxl", cAlternateFileName="")) returned 1 [0092.919] FindNextFileW (in: hFindFile=0x381ec0, lpFindFileData=0x31e56c | out: lpFindFileData=0x31e56c*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0092.919] FindClose (in: hFindFile=0x381ec0 | out: hFindFile=0x381ec0) returned 1 [0092.920] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e7f4) returned 1 [0092.920] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e800) returned 1 [0092.920] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e834) returned 1 [0092.920] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Microsoft Help", nBufferLength=0x105, lpBuffer=0x31e33c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Microsoft Help", lpFilePart=0x0) returned 0x21 [0092.920] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Microsoft Help\\", nBufferLength=0x105, lpBuffer=0x31e310, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Microsoft Help\\", lpFilePart=0x0) returned 0x22 [0092.920] FindFirstFileW (in: lpFileName="C:\\Users\\All Users\\Microsoft Help\\*", lpFindFileData=0x31e55c | out: lpFindFileData=0x31e55c*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe79db030, ftCreationTime.dwHighDateTime=0x1d2dda1, ftLastAccessTime.dwLowDateTime=0xed25d0a0, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0xed25d0a0, ftLastWriteTime.dwHighDateTime=0x1d305f1, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x381ec0 [0092.921] FindNextFileW (in: hFindFile=0x381ec0, lpFindFileData=0x31e56c | out: lpFindFileData=0x31e56c*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe79db030, ftCreationTime.dwHighDateTime=0x1d2dda1, ftLastAccessTime.dwLowDateTime=0xed25d0a0, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0xed25d0a0, ftLastWriteTime.dwHighDateTime=0x1d305f1, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0092.921] FindNextFileW (in: hFindFile=0x381ec0, lpFindFileData=0x31e56c | out: lpFindFileData=0x31e56c*(dwFileAttributes=0x2022, ftCreationTime.dwLowDateTime=0x896b9210, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x896b9210, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xe8b8c220, ftLastWriteTime.dwHighDateTime=0x1d305f1, nFileSizeHigh=0x0, nFileSizeLow=0x186, dwReserved0=0x0, dwReserved1=0x0, cFileName="Hx.hxn", cAlternateFileName="")) returned 1 [0092.921] FindNextFileW (in: hFindFile=0x381ec0, lpFindFileData=0x31e56c | out: lpFindFileData=0x31e56c*(dwFileAttributes=0x2022, ftCreationTime.dwLowDateTime=0xfa72fc10, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xfa72fc10, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xfa7a2030, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x146, dwReserved0=0x0, dwReserved1=0x0, cFileName="MS.EXCEL.14.1033.hxn", cAlternateFileName="MSEXCE~1.HXN")) returned 1 [0092.921] FindNextFileW (in: hFindFile=0x381ec0, lpFindFileData=0x31e56c | out: lpFindFileData=0x31e56c*(dwFileAttributes=0x2022, ftCreationTime.dwLowDateTime=0xfa755d70, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xfa755d70, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xfa7a2030, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x15e, dwReserved0=0x0, dwReserved1=0x0, cFileName="MS.EXCEL.DEV.14.1033.hxn", cAlternateFileName="MSEXCE~2.HXN")) returned 1 [0092.922] FindNextFileW (in: hFindFile=0x381ec0, lpFindFileData=0x31e56c | out: lpFindFileData=0x31e56c*(dwFileAttributes=0x2022, ftCreationTime.dwLowDateTime=0xef377f10, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xef377f10, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xef3ea330, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x146, dwReserved0=0x0, dwReserved1=0x0, cFileName="MS.GRAPH.14.1033.hxn", cAlternateFileName="MSGRAP~1.HXN")) returned 1 [0092.922] FindNextFileW (in: hFindFile=0x381ec0, lpFindFileData=0x31e56c | out: lpFindFileData=0x31e56c*(dwFileAttributes=0x2022, ftCreationTime.dwLowDateTime=0xfd789af0, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xfd789af0, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xfd822070, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x14c, dwReserved0=0x0, dwReserved1=0x0, cFileName="MS.GROOVE.14.1033.hxn", cAlternateFileName="MSGROO~1.HXN")) returned 1 [0092.922] FindNextFileW (in: hFindFile=0x381ec0, lpFindFileData=0x31e56c | out: lpFindFileData=0x31e56c*(dwFileAttributes=0x2022, ftCreationTime.dwLowDateTime=0x113ae4d0, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x113ae4d0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x11446a50, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x158, dwReserved0=0x0, dwReserved1=0x0, cFileName="MS.INFOPATH.14.1033.hxn", cAlternateFileName="MSINFO~1.HXN")) returned 1 [0092.922] FindNextFileW (in: hFindFile=0x381ec0, lpFindFileData=0x31e56c | out: lpFindFileData=0x31e56c*(dwFileAttributes=0x2022, ftCreationTime.dwLowDateTime=0x113ae4d0, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x113ae4d0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x1146cbb0, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x17c, dwReserved0=0x0, dwReserved1=0x0, cFileName="MS.INFOPATHEDITOR.14.1033.hxn", cAlternateFileName="MSINFO~2.HXN")) returned 1 [0092.922] FindNextFileW (in: hFindFile=0x381ec0, lpFindFileData=0x31e56c | out: lpFindFileData=0x31e56c*(dwFileAttributes=0x2022, ftCreationTime.dwLowDateTime=0x15f8e210, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x15f8e210, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x1604c8f0, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x158, dwReserved0=0x0, dwReserved1=0x0, cFileName="MS.MSACCESS.14.1033.hxn", cAlternateFileName="MSMSAC~1.HXN")) returned 1 [0092.922] FindNextFileW (in: hFindFile=0x381ec0, lpFindFileData=0x31e56c | out: lpFindFileData=0x31e56c*(dwFileAttributes=0x2022, ftCreationTime.dwLowDateTime=0x15f8e210, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x15f8e210, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x1604c8f0, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x170, dwReserved0=0x0, dwReserved1=0x0, cFileName="MS.MSACCESS.DEV.14.1033.hxn", cAlternateFileName="MSMSAC~2.HXN")) returned 1 [0092.922] FindNextFileW (in: hFindFile=0x381ec0, lpFindFileData=0x31e56c | out: lpFindFileData=0x31e56c*(dwFileAttributes=0x2022, ftCreationTime.dwLowDateTime=0xef377f10, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xef377f10, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xef3ea330, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x146, dwReserved0=0x0, dwReserved1=0x0, cFileName="MS.MSOUC.14.1033.hxn", cAlternateFileName="MSMSOU~1.HXN")) returned 1 [0092.923] FindNextFileW (in: hFindFile=0x381ec0, lpFindFileData=0x31e56c | out: lpFindFileData=0x31e56c*(dwFileAttributes=0x2022, ftCreationTime.dwLowDateTime=0x1beeb370, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x1beeb370, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x1bf5d790, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x146, dwReserved0=0x0, dwReserved1=0x0, cFileName="MS.MSPUB.14.1033.hxn", cAlternateFileName="MSMSPU~1.HXN")) returned 1 [0092.923] FindNextFileW (in: hFindFile=0x381ec0, lpFindFileData=0x31e56c | out: lpFindFileData=0x31e56c*(dwFileAttributes=0x2022, ftCreationTime.dwLowDateTime=0x1beeb370, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x1beeb370, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x1bf5d790, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x15e, dwReserved0=0x0, dwReserved1=0x0, cFileName="MS.MSPUB.DEV.14.1033.hxn", cAlternateFileName="MSMSPU~2.HXN")) returned 1 [0092.923] FindNextFileW (in: hFindFile=0x381ec0, lpFindFileData=0x31e56c | out: lpFindFileData=0x31e56c*(dwFileAttributes=0x2022, ftCreationTime.dwLowDateTime=0xef377f10, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xef377f10, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xef3ea330, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x14c, dwReserved0=0x0, dwReserved1=0x0, cFileName="MS.MSTORE.14.1033.hxn", cAlternateFileName="MSMSTO~1.HXN")) returned 1 [0092.923] FindNextFileW (in: hFindFile=0x381ec0, lpFindFileData=0x31e56c | out: lpFindFileData=0x31e56c*(dwFileAttributes=0x2022, ftCreationTime.dwLowDateTime=0xef377f10, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xef377f10, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xef3ea330, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x13a, dwReserved0=0x0, dwReserved1=0x0, cFileName="MS.OIS.14.1033.hxn", cAlternateFileName="MSOIS1~1.HXN")) returned 1 [0092.923] FindNextFileW (in: hFindFile=0x381ec0, lpFindFileData=0x31e56c | out: lpFindFileData=0x31e56c*(dwFileAttributes=0x2022, ftCreationTime.dwLowDateTime=0xc997810, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0xc997810, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xc9e3ad0, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x152, dwReserved0=0x0, dwReserved1=0x0, cFileName="MS.ONENOTE.14.1033.hxn", cAlternateFileName="MSONEN~1.HXN")) returned 1 [0092.923] FindNextFileW (in: hFindFile=0x381ec0, lpFindFileData=0x31e56c | out: lpFindFileData=0x31e56c*(dwFileAttributes=0x2022, ftCreationTime.dwLowDateTime=0x25328b0, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x25328b0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x2689510, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x152, dwReserved0=0x0, dwReserved1=0x0, cFileName="MS.OUTLOOK.14.1033.hxn", cAlternateFileName="MSOUTL~1.HXN")) returned 1 [0092.924] FindNextFileW (in: hFindFile=0x381ec0, lpFindFileData=0x31e56c | out: lpFindFileData=0x31e56c*(dwFileAttributes=0x2022, ftCreationTime.dwLowDateTime=0x25328b0, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x25328b0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x26af670, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x16a, dwReserved0=0x0, dwReserved1=0x0, cFileName="MS.OUTLOOK.DEV.14.1033.hxn", cAlternateFileName="MSOUTL~2.HXN")) returned 1 [0092.924] FindNextFileW (in: hFindFile=0x381ec0, lpFindFileData=0x31e56c | out: lpFindFileData=0x31e56c*(dwFileAttributes=0x2022, ftCreationTime.dwLowDateTime=0xf5fa06b0, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xf5fa06b0, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xf5fec970, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x158, dwReserved0=0x0, dwReserved1=0x0, cFileName="MS.POWERPNT.14.1033.hxn", cAlternateFileName="MSPOWE~1.HXN")) returned 1 [0092.924] FindNextFileW (in: hFindFile=0x381ec0, lpFindFileData=0x31e56c | out: lpFindFileData=0x31e56c*(dwFileAttributes=0x2022, ftCreationTime.dwLowDateTime=0xf5fa06b0, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xf5fa06b0, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xf5fec970, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x170, dwReserved0=0x0, dwReserved1=0x0, cFileName="MS.POWERPNT.DEV.14.1033.hxn", cAlternateFileName="MSPOWE~2.HXN")) returned 1 [0092.924] FindNextFileW (in: hFindFile=0x381ec0, lpFindFileData=0x31e56c | out: lpFindFileData=0x31e56c*(dwFileAttributes=0x2022, ftCreationTime.dwLowDateTime=0xef377f10, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xef377f10, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xef3ea330, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x152, dwReserved0=0x0, dwReserved1=0x0, cFileName="MS.SETLANG.14.1033.hxn", cAlternateFileName="MSSETL~1.HXN")) returned 1 [0092.924] FindNextFileW (in: hFindFile=0x381ec0, lpFindFileData=0x31e56c | out: lpFindFileData=0x31e56c*(dwFileAttributes=0x2022, ftCreationTime.dwLowDateTime=0x523a6340, ftCreationTime.dwHighDateTime=0x1d305eb, ftLastAccessTime.dwLowDateTime=0x523a6340, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0x5269fec0, ftLastWriteTime.dwHighDateTime=0x1d305eb, nFileSizeHigh=0x0, nFileSizeLow=0x146, dwReserved0=0x0, dwReserved1=0x0, cFileName="MS.VISIO.14.1033.hxn", cAlternateFileName="MSVISI~1.HXN")) returned 1 [0092.924] FindNextFileW (in: hFindFile=0x381ec0, lpFindFileData=0x31e56c | out: lpFindFileData=0x31e56c*(dwFileAttributes=0x2022, ftCreationTime.dwLowDateTime=0x523a6340, ftCreationTime.dwHighDateTime=0x1d305eb, ftLastAccessTime.dwLowDateTime=0x523a6340, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0x527122e0, ftLastWriteTime.dwHighDateTime=0x1d305eb, nFileSizeHigh=0x0, nFileSizeLow=0x15e, dwReserved0=0x0, dwReserved1=0x0, cFileName="MS.VISIO.DEV.14.1033.hxn", cAlternateFileName="MSVISI~3.HXN")) returned 1 [0092.924] FindNextFileW (in: hFindFile=0x381ec0, lpFindFileData=0x31e56c | out: lpFindFileData=0x31e56c*(dwFileAttributes=0x2022, ftCreationTime.dwLowDateTime=0x523a6340, ftCreationTime.dwHighDateTime=0x1d305eb, ftLastAccessTime.dwLowDateTime=0x523a6340, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0x52738440, ftLastWriteTime.dwHighDateTime=0x1d305eb, nFileSizeHigh=0x0, nFileSizeLow=0x188, dwReserved0=0x0, dwReserved1=0x0, cFileName="MS.VISIO.SHAPESHEET.14.1033.hxn", cAlternateFileName="MSVISI~4.HXN")) returned 1 [0092.925] FindNextFileW (in: hFindFile=0x381ec0, lpFindFileData=0x31e56c | out: lpFindFileData=0x31e56c*(dwFileAttributes=0x2022, ftCreationTime.dwLowDateTime=0x523a6340, ftCreationTime.dwHighDateTime=0x1d305eb, ftLastAccessTime.dwLowDateTime=0x523a6340, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0x52738440, ftLastWriteTime.dwHighDateTime=0x1d305eb, nFileSizeHigh=0x0, nFileSizeLow=0x15e, dwReserved0=0x0, dwReserved1=0x0, cFileName="MS.VISIO_PRM.14.1033.hxn", cAlternateFileName="MSE1C9~1.HXN")) returned 1 [0092.925] FindNextFileW (in: hFindFile=0x381ec0, lpFindFileData=0x31e56c | out: lpFindFileData=0x31e56c*(dwFileAttributes=0x2022, ftCreationTime.dwLowDateTime=0x523a6340, ftCreationTime.dwHighDateTime=0x1d305eb, ftLastAccessTime.dwLowDateTime=0x523a6340, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0x527122e0, ftLastWriteTime.dwHighDateTime=0x1d305eb, nFileSizeHigh=0x0, nFileSizeLow=0x15e, dwReserved0=0x0, dwReserved1=0x0, cFileName="MS.VISIO_STD.14.1033.hxn", cAlternateFileName="MSVISI~2.HXN")) returned 1 [0092.925] FindNextFileW (in: hFindFile=0x381ec0, lpFindFileData=0x31e56c | out: lpFindFileData=0x31e56c*(dwFileAttributes=0x2022, ftCreationTime.dwLowDateTime=0xaf766ee0, ftCreationTime.dwHighDateTime=0x1d305f1, ftLastAccessTime.dwLowDateTime=0xaf766ee0, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0xaf7d9300, ftLastWriteTime.dwHighDateTime=0x1d305f1, nFileSizeHigh=0x0, nFileSizeLow=0x152, dwReserved0=0x0, dwReserved1=0x0, cFileName="MS.WINPROJ.14.1033.hxn", cAlternateFileName="MSWINP~1.HXN")) returned 1 [0092.925] FindNextFileW (in: hFindFile=0x381ec0, lpFindFileData=0x31e56c | out: lpFindFileData=0x31e56c*(dwFileAttributes=0x2022, ftCreationTime.dwLowDateTime=0xaf766ee0, ftCreationTime.dwHighDateTime=0x1d305f1, ftLastAccessTime.dwLowDateTime=0xaf766ee0, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0xaf7d9300, ftLastWriteTime.dwHighDateTime=0x1d305f1, nFileSizeHigh=0x0, nFileSizeLow=0x16a, dwReserved0=0x0, dwReserved1=0x0, cFileName="MS.WINPROJ.DEV.14.1033.hxn", cAlternateFileName="MSWINP~2.HXN")) returned 1 [0092.925] FindNextFileW (in: hFindFile=0x381ec0, lpFindFileData=0x31e56c | out: lpFindFileData=0x31e56c*(dwFileAttributes=0x2022, ftCreationTime.dwLowDateTime=0x1e67e130, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x1e67e130, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x1e6f0550, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x152, dwReserved0=0x0, dwReserved1=0x0, cFileName="MS.WINWORD.14.1033.hxn", cAlternateFileName="MSWINW~1.HXN")) returned 1 [0092.925] FindNextFileW (in: hFindFile=0x381ec0, lpFindFileData=0x31e56c | out: lpFindFileData=0x31e56c*(dwFileAttributes=0x2022, ftCreationTime.dwLowDateTime=0x1e67e130, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x1e67e130, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x1e6f0550, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x16a, dwReserved0=0x0, dwReserved1=0x0, cFileName="MS.WINWORD.DEV.14.1033.hxn", cAlternateFileName="MSWINW~2.HXN")) returned 1 [0092.925] FindNextFileW (in: hFindFile=0x381ec0, lpFindFileData=0x31e56c | out: lpFindFileData=0x31e56c*(dwFileAttributes=0x2022, ftCreationTime.dwLowDateTime=0xe80ff230, ftCreationTime.dwHighDateTime=0x1d2dda1, ftLastAccessTime.dwLowDateTime=0xe80ff230, ftLastAccessTime.dwHighDateTime=0x1d2dda1, ftLastWriteTime.dwLowDateTime=0xe8b8c220, ftLastWriteTime.dwHighDateTime=0x1d305f1, nFileSizeHigh=0x0, nFileSizeLow=0x21dc, dwReserved0=0x0, dwReserved1=0x0, cFileName="nslist.hxl", cAlternateFileName="")) returned 1 [0092.926] FindNextFileW (in: hFindFile=0x381ec0, lpFindFileData=0x31e56c | out: lpFindFileData=0x31e56c*(dwFileAttributes=0x2022, ftCreationTime.dwLowDateTime=0xe80ff230, ftCreationTime.dwHighDateTime=0x1d2dda1, ftLastAccessTime.dwLowDateTime=0xe80ff230, ftLastAccessTime.dwHighDateTime=0x1d2dda1, ftLastWriteTime.dwLowDateTime=0xe8b8c220, ftLastWriteTime.dwHighDateTime=0x1d305f1, nFileSizeHigh=0x0, nFileSizeLow=0x21dc, dwReserved0=0x0, dwReserved1=0x0, cFileName="nslist.hxl", cAlternateFileName="")) returned 0 [0092.926] FindClose (in: hFindFile=0x381ec0 | out: hFindFile=0x381ec0) returned 1 [0092.926] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e7f4) returned 1 [0092.926] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e800) returned 1 [0092.926] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e834) returned 1 [0092.927] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Mozilla", nBufferLength=0x105, lpBuffer=0x31e33c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Mozilla", lpFilePart=0x0) returned 0x1a [0092.927] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Mozilla\\", nBufferLength=0x105, lpBuffer=0x31e310, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Mozilla\\", lpFilePart=0x0) returned 0x1b [0092.927] FindFirstFileW (in: lpFileName="C:\\Users\\All Users\\Mozilla\\*", lpFindFileData=0x31e55c | out: lpFindFileData=0x31e55c*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xaf8556a0, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xaf8556a0, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0xaf8556a0, ftLastWriteTime.dwHighDateTime=0x1d2dda4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x381ec0 [0092.927] FindNextFileW (in: hFindFile=0x381ec0, lpFindFileData=0x31e56c | out: lpFindFileData=0x31e56c*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xaf8556a0, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xaf8556a0, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0xaf8556a0, ftLastWriteTime.dwHighDateTime=0x1d2dda4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0092.927] FindNextFileW (in: hFindFile=0x381ec0, lpFindFileData=0x31e56c | out: lpFindFileData=0x31e56c*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xaf8556a0, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xaf8556a0, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0xaf8556a0, ftLastWriteTime.dwHighDateTime=0x1d2dda4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="logs", cAlternateFileName="")) returned 1 [0092.927] FindNextFileW (in: hFindFile=0x381ec0, lpFindFileData=0x31e56c | out: lpFindFileData=0x31e56c*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xaf8556a0, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xaf8556a0, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0xaf8556a0, ftLastWriteTime.dwHighDateTime=0x1d2dda4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="logs", cAlternateFileName="")) returned 0 [0092.927] FindClose (in: hFindFile=0x381ec0 | out: hFindFile=0x381ec0) returned 1 [0092.927] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e7f4) returned 1 [0092.927] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e800) returned 1 [0092.927] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e834) returned 1 [0092.927] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Mozilla", nBufferLength=0x105, lpBuffer=0x31e33c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Mozilla", lpFilePart=0x0) returned 0x1a [0092.928] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Mozilla\\", nBufferLength=0x105, lpBuffer=0x31e310, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Mozilla\\", lpFilePart=0x0) returned 0x1b [0092.928] FindFirstFileW (in: lpFileName="C:\\Users\\All Users\\Mozilla\\*", lpFindFileData=0x31e55c | out: lpFindFileData=0x31e55c*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xaf8556a0, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xaf8556a0, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0xaf8556a0, ftLastWriteTime.dwHighDateTime=0x1d2dda4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x381ec0 [0092.928] FindNextFileW (in: hFindFile=0x381ec0, lpFindFileData=0x31e56c | out: lpFindFileData=0x31e56c*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xaf8556a0, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xaf8556a0, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0xaf8556a0, ftLastWriteTime.dwHighDateTime=0x1d2dda4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0092.928] FindNextFileW (in: hFindFile=0x381ec0, lpFindFileData=0x31e56c | out: lpFindFileData=0x31e56c*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xaf8556a0, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xaf8556a0, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0xaf8556a0, ftLastWriteTime.dwHighDateTime=0x1d2dda4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="logs", cAlternateFileName="")) returned 1 [0092.928] FindNextFileW (in: hFindFile=0x381ec0, lpFindFileData=0x31e56c | out: lpFindFileData=0x31e56c*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0092.928] FindClose (in: hFindFile=0x381ec0 | out: hFindFile=0x381ec0) returned 1 [0092.928] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e7f4) returned 1 [0092.928] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e800) returned 1 [0092.928] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e7bc) returned 1 [0092.928] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Mozilla\\logs", nBufferLength=0x105, lpBuffer=0x31e2c4, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Mozilla\\logs", lpFilePart=0x0) returned 0x1f [0092.928] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Mozilla\\logs\\", nBufferLength=0x105, lpBuffer=0x31e298, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Mozilla\\logs\\", lpFilePart=0x0) returned 0x20 [0092.928] FindFirstFileW (in: lpFileName="C:\\Users\\All Users\\Mozilla\\logs\\*", lpFindFileData=0x31e4e4 | out: lpFindFileData=0x31e4e4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xaf8556a0, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xaf8556a0, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0xaf8556a0, ftLastWriteTime.dwHighDateTime=0x1d2dda4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x381ec0 [0092.929] FindNextFileW (in: hFindFile=0x381ec0, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xaf8556a0, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xaf8556a0, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0xaf8556a0, ftLastWriteTime.dwHighDateTime=0x1d2dda4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0092.929] FindNextFileW (in: hFindFile=0x381ec0, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xaf8556a0, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xaf8556a0, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0xb07822e0, ftLastWriteTime.dwHighDateTime=0x1d2dda4, nFileSizeHigh=0x0, nFileSizeLow=0xa4, dwReserved0=0x0, dwReserved1=0x0, cFileName="maintenanceservice-install.log", cAlternateFileName="MAINTE~1.LOG")) returned 1 [0092.929] FindNextFileW (in: hFindFile=0x381ec0, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0092.929] FindClose (in: hFindFile=0x381ec0 | out: hFindFile=0x381ec0) returned 1 [0092.929] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e77c) returned 1 [0092.929] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e788) returned 1 [0092.929] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e7bc) returned 1 [0092.929] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Mozilla\\logs", nBufferLength=0x105, lpBuffer=0x31e2c4, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Mozilla\\logs", lpFilePart=0x0) returned 0x1f [0092.929] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Mozilla\\logs\\", nBufferLength=0x105, lpBuffer=0x31e298, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Mozilla\\logs\\", lpFilePart=0x0) returned 0x20 [0092.929] FindFirstFileW (in: lpFileName="C:\\Users\\All Users\\Mozilla\\logs\\*", lpFindFileData=0x31e4e4 | out: lpFindFileData=0x31e4e4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xaf8556a0, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xaf8556a0, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0xaf8556a0, ftLastWriteTime.dwHighDateTime=0x1d2dda4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x381ec0 [0092.930] FindNextFileW (in: hFindFile=0x381ec0, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xaf8556a0, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xaf8556a0, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0xaf8556a0, ftLastWriteTime.dwHighDateTime=0x1d2dda4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0092.930] FindNextFileW (in: hFindFile=0x381ec0, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xaf8556a0, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xaf8556a0, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0xb07822e0, ftLastWriteTime.dwHighDateTime=0x1d2dda4, nFileSizeHigh=0x0, nFileSizeLow=0xa4, dwReserved0=0x0, dwReserved1=0x0, cFileName="maintenanceservice-install.log", cAlternateFileName="MAINTE~1.LOG")) returned 1 [0092.930] FindNextFileW (in: hFindFile=0x381ec0, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xaf8556a0, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xaf8556a0, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0xb07822e0, ftLastWriteTime.dwHighDateTime=0x1d2dda4, nFileSizeHigh=0x0, nFileSizeLow=0xa4, dwReserved0=0x0, dwReserved1=0x0, cFileName="maintenanceservice-install.log", cAlternateFileName="MAINTE~1.LOG")) returned 0 [0092.930] FindClose (in: hFindFile=0x381ec0 | out: hFindFile=0x381ec0) returned 1 [0092.930] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e77c) returned 1 [0092.930] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e788) returned 1 [0092.930] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e834) returned 1 [0092.930] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Oracle", nBufferLength=0x105, lpBuffer=0x31e33c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Oracle", lpFilePart=0x0) returned 0x19 [0092.930] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Oracle\\", nBufferLength=0x105, lpBuffer=0x31e310, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Oracle\\", lpFilePart=0x0) returned 0x1a [0092.930] FindFirstFileW (in: lpFileName="C:\\Users\\All Users\\Oracle\\*", lpFindFileData=0x31e55c | out: lpFindFileData=0x31e55c*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x7e3c6d00, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x7e3c6d00, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x7eea3160, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x381ec0 [0092.931] FindNextFileW (in: hFindFile=0x381ec0, lpFindFileData=0x31e56c | out: lpFindFileData=0x31e56c*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x7e3c6d00, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x7e3c6d00, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x7eea3160, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0092.931] FindNextFileW (in: hFindFile=0x381ec0, lpFindFileData=0x31e56c | out: lpFindFileData=0x31e56c*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x7e3c6d00, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x7e3c6d00, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x7eea3160, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 0 [0092.931] FindClose (in: hFindFile=0x381ec0 | out: hFindFile=0x381ec0) returned 1 [0092.931] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e7f4) returned 1 [0092.931] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e800) returned 1 [0092.931] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e834) returned 1 [0092.931] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Oracle", nBufferLength=0x105, lpBuffer=0x31e33c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Oracle", lpFilePart=0x0) returned 0x19 [0092.931] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Oracle\\", nBufferLength=0x105, lpBuffer=0x31e310, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Oracle\\", lpFilePart=0x0) returned 0x1a [0092.931] FindFirstFileW (in: lpFileName="C:\\Users\\All Users\\Oracle\\*", lpFindFileData=0x31e55c | out: lpFindFileData=0x31e55c*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x7e3c6d00, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x7e3c6d00, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x7eea3160, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x381ec0 [0092.931] FindNextFileW (in: hFindFile=0x381ec0, lpFindFileData=0x31e56c | out: lpFindFileData=0x31e56c*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x7e3c6d00, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x7e3c6d00, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x7eea3160, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0092.931] FindNextFileW (in: hFindFile=0x381ec0, lpFindFileData=0x31e56c | out: lpFindFileData=0x31e56c*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x7e3c6d00, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x7e3c6d00, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x7eea3160, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 0 [0092.932] FindClose (in: hFindFile=0x381ec0 | out: hFindFile=0x381ec0) returned 1 [0092.932] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e7f4) returned 1 [0092.932] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e800) returned 1 [0092.932] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e834) returned 1 [0092.932] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Package Cache", nBufferLength=0x105, lpBuffer=0x31e33c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Package Cache", lpFilePart=0x0) returned 0x20 [0092.932] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Package Cache\\", nBufferLength=0x105, lpBuffer=0x31e310, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Package Cache\\", lpFilePart=0x0) returned 0x21 [0092.932] FindFirstFileW (in: lpFileName="C:\\Users\\All Users\\Package Cache\\*", lpFindFileData=0x31e55c | out: lpFindFileData=0x31e55c*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xecce51e0, ftCreationTime.dwHighDateTime=0x1d2e620, ftLastAccessTime.dwLowDateTime=0x4819be0, ftLastAccessTime.dwHighDateTime=0x1d2fc28, ftLastWriteTime.dwLowDateTime=0x4819be0, ftLastWriteTime.dwHighDateTime=0x1d2fc28, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x381ec0 [0092.933] FindNextFileW (in: hFindFile=0x381ec0, lpFindFileData=0x31e56c | out: lpFindFileData=0x31e56c*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xecce51e0, ftCreationTime.dwHighDateTime=0x1d2e620, ftLastAccessTime.dwLowDateTime=0x4819be0, ftLastAccessTime.dwHighDateTime=0x1d2fc28, ftLastWriteTime.dwLowDateTime=0x4819be0, ftLastWriteTime.dwHighDateTime=0x1d2fc28, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0092.933] FindNextFileW (in: hFindFile=0x381ec0, lpFindFileData=0x31e56c | out: lpFindFileData=0x31e56c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x2924cac0, ftCreationTime.dwHighDateTime=0x1d2e621, ftLastAccessTime.dwLowDateTime=0x29272c20, ftLastAccessTime.dwHighDateTime=0x1d2e621, ftLastWriteTime.dwLowDateTime=0x29272c20, ftLastWriteTime.dwHighDateTime=0x1d2e621, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="42D5BEC7DDFBD49E76467529CBC2868987BF8460", cAlternateFileName="42D5BE~1")) returned 1 [0092.933] FindNextFileW (in: hFindFile=0x381ec0, lpFindFileData=0x31e56c | out: lpFindFileData=0x31e56c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa938e870, ftCreationTime.dwHighDateTime=0x1d2fab4, ftLastAccessTime.dwLowDateTime=0xa989d730, ftLastAccessTime.dwHighDateTime=0x1d2fab4, ftLastWriteTime.dwLowDateTime=0xa989d730, ftLastWriteTime.dwHighDateTime=0x1d2fab4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="54050A5F8AE7F0C56E553F0090146C17A1D2BF8D", cAlternateFileName="54050A~1")) returned 1 [0092.933] FindNextFileW (in: hFindFile=0x381ec0, lpFindFileData=0x31e56c | out: lpFindFileData=0x31e56c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xcb49460, ftCreationTime.dwHighDateTime=0x1d2e621, ftLastAccessTime.dwLowDateTime=0xcb95720, ftLastAccessTime.dwHighDateTime=0x1d2e621, ftLastWriteTime.dwLowDateTime=0xcb95720, ftLastWriteTime.dwHighDateTime=0x1d2e621, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="{13A4EE12-23EA-3371-91EE-EFB36DDFFF3E}v12.0.21005", cAlternateFileName="{13A4E~1.210")) returned 1 [0092.933] FindNextFileW (in: hFindFile=0x381ec0, lpFindFileData=0x31e56c | out: lpFindFileData=0x31e56c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xecd0b340, ftCreationTime.dwHighDateTime=0x1d2e620, ftLastAccessTime.dwLowDateTime=0xecd314a0, ftLastAccessTime.dwHighDateTime=0x1d2e620, ftLastWriteTime.dwLowDateTime=0xecd314a0, ftLastWriteTime.dwHighDateTime=0x1d2e620, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="{33d1fd90-4274-48a1-9bc1-97e33d9c2d6f}", cAlternateFileName="{33D1F~1")) returned 1 [0092.934] FindNextFileW (in: hFindFile=0x381ec0, lpFindFileData=0x31e56c | out: lpFindFileData=0x31e56c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfabe4080, ftCreationTime.dwHighDateTime=0x1d2e620, ftLastAccessTime.dwLowDateTime=0xfabe4080, ftLastAccessTime.dwHighDateTime=0x1d2e620, ftLastWriteTime.dwLowDateTime=0xfabe4080, ftLastWriteTime.dwHighDateTime=0x1d2e620, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="{37B8F9C7-03FB-3253-8781-2517C99D7C00}v11.0.61030", cAlternateFileName="{37B8F~1.610")) returned 1 [0092.934] FindNextFileW (in: hFindFile=0x381ec0, lpFindFileData=0x31e56c | out: lpFindFileData=0x31e56c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1a0db1a0, ftCreationTime.dwHighDateTime=0x1d2e621, ftLastAccessTime.dwLowDateTime=0x1a127460, ftLastAccessTime.dwHighDateTime=0x1d2e621, ftLastWriteTime.dwLowDateTime=0x1a127460, ftLastWriteTime.dwHighDateTime=0x1d2e621, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="{3c3aafc8-d898-43ec-998f-965ffdae065a}", cAlternateFileName="{3C3AA~1")) returned 1 [0092.934] FindNextFileW (in: hFindFile=0x381ec0, lpFindFileData=0x31e56c | out: lpFindFileData=0x31e56c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf94d4300, ftCreationTime.dwHighDateTime=0x1d2fc27, ftLastAccessTime.dwLowDateTime=0xf94d4300, ftLastAccessTime.dwHighDateTime=0x1d2fc27, ftLastWriteTime.dwLowDateTime=0xf94d4300, ftLastWriteTime.dwHighDateTime=0x1d2fc27, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="{582EA838-9199-3518-A05C-DB09462F68EC}v14.10.25017", cAlternateFileName="{582EA~1.250")) returned 1 [0092.934] FindNextFileW (in: hFindFile=0x381ec0, lpFindFileData=0x31e56c | out: lpFindFileData=0x31e56c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf94d4300, ftCreationTime.dwHighDateTime=0x1d2fc27, ftLastAccessTime.dwLowDateTime=0xf94d4300, ftLastAccessTime.dwHighDateTime=0x1d2fc27, ftLastWriteTime.dwLowDateTime=0xf94d4300, ftLastWriteTime.dwHighDateTime=0x1d2fc27, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="{68306422-7C57-373F-8860-D26CE4BA2A15}v14.10.25017", cAlternateFileName="{68306~1.250")) returned 1 [0092.934] FindNextFileW (in: hFindFile=0x381ec0, lpFindFileData=0x31e56c | out: lpFindFileData=0x31e56c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa931c450, ftCreationTime.dwHighDateTime=0x1d2fab4, ftLastAccessTime.dwLowDateTime=0xa931c450, ftLastAccessTime.dwHighDateTime=0x1d2fab4, ftLastWriteTime.dwLowDateTime=0xa931c450, ftLastWriteTime.dwHighDateTime=0x1d2fab4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="{8D4F7A6D-6B81-3DC8-9C21-6008E4866727}v14.10.25017", cAlternateFileName="{8D4F7~1.250")) returned 1 [0092.934] FindNextFileW (in: hFindFile=0x381ec0, lpFindFileData=0x31e56c | out: lpFindFileData=0x31e56c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1a1e5b40, ftCreationTime.dwHighDateTime=0x1d2e621, ftLastAccessTime.dwLowDateTime=0x1a20bca0, ftLastAccessTime.dwHighDateTime=0x1d2e621, ftLastWriteTime.dwLowDateTime=0x1a20bca0, ftLastWriteTime.dwHighDateTime=0x1d2e621, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="{929FBD26-9020-399B-9A7A-751D61F0B942}v12.0.21005", cAlternateFileName="{929FB~1.210")) returned 1 [0092.934] FindNextFileW (in: hFindFile=0x381ec0, lpFindFileData=0x31e56c | out: lpFindFileData=0x31e56c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1a199880, ftCreationTime.dwHighDateTime=0x1d2e621, ftLastAccessTime.dwLowDateTime=0x1a1e5b40, ftLastAccessTime.dwHighDateTime=0x1d2e621, ftLastWriteTime.dwLowDateTime=0x1a1e5b40, ftLastWriteTime.dwHighDateTime=0x1d2e621, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="{A749D8E6-B613-3BE3-8F5F-045C84EBA29B}v12.0.21005", cAlternateFileName="{A749D~1.210")) returned 1 [0092.935] FindNextFileW (in: hFindFile=0x381ec0, lpFindFileData=0x31e56c | out: lpFindFileData=0x31e56c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xedbebcc0, ftCreationTime.dwHighDateTime=0x1d2e620, ftLastAccessTime.dwLowDateTime=0xedbebcc0, ftLastAccessTime.dwHighDateTime=0x1d2e620, ftLastWriteTime.dwLowDateTime=0xedbebcc0, ftLastWriteTime.dwHighDateTime=0x1d2e620, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="{B175520C-86A2-35A7-8619-86DC379688B9}v11.0.61030", cAlternateFileName="{B1755~1.610")) returned 1 [0092.935] FindNextFileW (in: hFindFile=0x381ec0, lpFindFileData=0x31e56c | out: lpFindFileData=0x31e56c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xecd7d760, ftCreationTime.dwHighDateTime=0x1d2e620, ftLastAccessTime.dwLowDateTime=0xedbebcc0, ftLastAccessTime.dwHighDateTime=0x1d2e620, ftLastWriteTime.dwLowDateTime=0xedbebcc0, ftLastWriteTime.dwHighDateTime=0x1d2e620, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="{BD95A8CD-1D9F-35AD-981A-3E7925026EBB}v11.0.61030", cAlternateFileName="{BD95A~1.610")) returned 1 [0092.935] FindNextFileW (in: hFindFile=0x381ec0, lpFindFileData=0x31e56c | out: lpFindFileData=0x31e56c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfaaff840, ftCreationTime.dwHighDateTime=0x1d2e620, ftLastAccessTime.dwLowDateTime=0xfaaff840, ftLastAccessTime.dwHighDateTime=0x1d2e620, ftLastWriteTime.dwLowDateTime=0xfaaff840, ftLastWriteTime.dwHighDateTime=0x1d2e620, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="{ca67548a-5ebe-413a-b50c-4b9ceb6d66c6}", cAlternateFileName="{CA675~1")) returned 1 [0092.936] FindNextFileW (in: hFindFile=0x381ec0, lpFindFileData=0x31e56c | out: lpFindFileData=0x31e56c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfab71c60, ftCreationTime.dwHighDateTime=0x1d2e620, ftLastAccessTime.dwLowDateTime=0xfabbdf20, ftLastAccessTime.dwHighDateTime=0x1d2e620, ftLastWriteTime.dwLowDateTime=0xfabbdf20, ftLastWriteTime.dwHighDateTime=0x1d2e620, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="{CF2BEA3C-26EA-32F8-AA9B-331F7E34BA97}v11.0.61030", cAlternateFileName="{CF2BE~1.610")) returned 1 [0092.936] FindNextFileW (in: hFindFile=0x381ec0, lpFindFileData=0x31e56c | out: lpFindFileData=0x31e56c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa93425b0, ftCreationTime.dwHighDateTime=0x1d2fab4, ftLastAccessTime.dwLowDateTime=0xa9368710, ftLastAccessTime.dwHighDateTime=0x1d2fab4, ftLastWriteTime.dwLowDateTime=0xa9368710, ftLastWriteTime.dwHighDateTime=0x1d2fab4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="{E512788E-C50B-3858-A4B9-73AD5F3F9E93}v14.10.25017", cAlternateFileName="{E5127~1.250")) returned 1 [0092.936] FindNextFileW (in: hFindFile=0x381ec0, lpFindFileData=0x31e56c | out: lpFindFileData=0x31e56c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa912d270, ftCreationTime.dwHighDateTime=0x1d2fab4, ftLastAccessTime.dwLowDateTime=0xa912d270, ftLastAccessTime.dwHighDateTime=0x1d2fab4, ftLastWriteTime.dwLowDateTime=0xa912d270, ftLastWriteTime.dwHighDateTime=0x1d2fab4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="{e52a6842-b0ac-476e-b48f-378a97a67346}", cAlternateFileName="{E52A6~1")) returned 1 [0092.936] FindNextFileW (in: hFindFile=0x381ec0, lpFindFileData=0x31e56c | out: lpFindFileData=0x31e56c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xca64c20, ftCreationTime.dwHighDateTime=0x1d2e621, ftLastAccessTime.dwLowDateTime=0xcad7040, ftLastAccessTime.dwHighDateTime=0x1d2e621, ftLastWriteTime.dwLowDateTime=0xcad7040, ftLastWriteTime.dwHighDateTime=0x1d2e621, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="{e6e75766-da0f-4ba2-9788-6ea593ce702d}", cAlternateFileName="{E6E75~1")) returned 1 [0092.937] FindNextFileW (in: hFindFile=0x381ec0, lpFindFileData=0x31e56c | out: lpFindFileData=0x31e56c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf93c9960, ftCreationTime.dwHighDateTime=0x1d2fc27, ftLastAccessTime.dwLowDateTime=0xf93efac0, ftLastAccessTime.dwHighDateTime=0x1d2fc27, ftLastWriteTime.dwLowDateTime=0xf93efac0, ftLastWriteTime.dwHighDateTime=0x1d2fc27, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="{f325f05b-f963-4640-a43b-c8a494cdda0f}", cAlternateFileName="{F325F~1")) returned 1 [0092.937] FindNextFileW (in: hFindFile=0x381ec0, lpFindFileData=0x31e56c | out: lpFindFileData=0x31e56c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xcbbb880, ftCreationTime.dwHighDateTime=0x1d2e621, ftLastAccessTime.dwLowDateTime=0xcbbb880, ftLastAccessTime.dwHighDateTime=0x1d2e621, ftLastWriteTime.dwLowDateTime=0xcbbb880, ftLastWriteTime.dwHighDateTime=0x1d2e621, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="{F8CFEB22-A2E7-3971-9EDA-4B11EDEFC185}v12.0.21005", cAlternateFileName="{F8CFE~1.210")) returned 1 [0092.937] FindNextFileW (in: hFindFile=0x381ec0, lpFindFileData=0x31e56c | out: lpFindFileData=0x31e56c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xcbbb880, ftCreationTime.dwHighDateTime=0x1d2e621, ftLastAccessTime.dwLowDateTime=0xcbbb880, ftLastAccessTime.dwHighDateTime=0x1d2e621, ftLastWriteTime.dwLowDateTime=0xcbbb880, ftLastWriteTime.dwHighDateTime=0x1d2e621, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="{F8CFEB22-A2E7-3971-9EDA-4B11EDEFC185}v12.0.21005", cAlternateFileName="{F8CFE~1.210")) returned 0 [0092.937] FindClose (in: hFindFile=0x381ec0 | out: hFindFile=0x381ec0) returned 1 [0092.938] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e7f4) returned 1 [0092.938] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e800) returned 1 [0092.938] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e834) returned 1 [0092.938] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Package Cache", nBufferLength=0x105, lpBuffer=0x31e33c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Package Cache", lpFilePart=0x0) returned 0x20 [0092.938] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Package Cache\\", nBufferLength=0x105, lpBuffer=0x31e310, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Package Cache\\", lpFilePart=0x0) returned 0x21 [0092.938] FindFirstFileW (in: lpFileName="C:\\Users\\All Users\\Package Cache\\*", lpFindFileData=0x31e55c | out: lpFindFileData=0x31e55c*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xecce51e0, ftCreationTime.dwHighDateTime=0x1d2e620, ftLastAccessTime.dwLowDateTime=0x4819be0, ftLastAccessTime.dwHighDateTime=0x1d2fc28, ftLastWriteTime.dwLowDateTime=0x4819be0, ftLastWriteTime.dwHighDateTime=0x1d2fc28, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x381ec0 [0092.939] FindNextFileW (in: hFindFile=0x381ec0, lpFindFileData=0x31e56c | out: lpFindFileData=0x31e56c*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xecce51e0, ftCreationTime.dwHighDateTime=0x1d2e620, ftLastAccessTime.dwLowDateTime=0x4819be0, ftLastAccessTime.dwHighDateTime=0x1d2fc28, ftLastWriteTime.dwLowDateTime=0x4819be0, ftLastWriteTime.dwHighDateTime=0x1d2fc28, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0092.939] FindNextFileW (in: hFindFile=0x381ec0, lpFindFileData=0x31e56c | out: lpFindFileData=0x31e56c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x2924cac0, ftCreationTime.dwHighDateTime=0x1d2e621, ftLastAccessTime.dwLowDateTime=0x29272c20, ftLastAccessTime.dwHighDateTime=0x1d2e621, ftLastWriteTime.dwLowDateTime=0x29272c20, ftLastWriteTime.dwHighDateTime=0x1d2e621, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="42D5BEC7DDFBD49E76467529CBC2868987BF8460", cAlternateFileName="42D5BE~1")) returned 1 [0092.939] FindNextFileW (in: hFindFile=0x381ec0, lpFindFileData=0x31e56c | out: lpFindFileData=0x31e56c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa938e870, ftCreationTime.dwHighDateTime=0x1d2fab4, ftLastAccessTime.dwLowDateTime=0xa989d730, ftLastAccessTime.dwHighDateTime=0x1d2fab4, ftLastWriteTime.dwLowDateTime=0xa989d730, ftLastWriteTime.dwHighDateTime=0x1d2fab4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="54050A5F8AE7F0C56E553F0090146C17A1D2BF8D", cAlternateFileName="54050A~1")) returned 1 [0092.939] FindNextFileW (in: hFindFile=0x381ec0, lpFindFileData=0x31e56c | out: lpFindFileData=0x31e56c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xcb49460, ftCreationTime.dwHighDateTime=0x1d2e621, ftLastAccessTime.dwLowDateTime=0xcb95720, ftLastAccessTime.dwHighDateTime=0x1d2e621, ftLastWriteTime.dwLowDateTime=0xcb95720, ftLastWriteTime.dwHighDateTime=0x1d2e621, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="{13A4EE12-23EA-3371-91EE-EFB36DDFFF3E}v12.0.21005", cAlternateFileName="{13A4E~1.210")) returned 1 [0092.939] FindNextFileW (in: hFindFile=0x381ec0, lpFindFileData=0x31e56c | out: lpFindFileData=0x31e56c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xecd0b340, ftCreationTime.dwHighDateTime=0x1d2e620, ftLastAccessTime.dwLowDateTime=0xecd314a0, ftLastAccessTime.dwHighDateTime=0x1d2e620, ftLastWriteTime.dwLowDateTime=0xecd314a0, ftLastWriteTime.dwHighDateTime=0x1d2e620, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="{33d1fd90-4274-48a1-9bc1-97e33d9c2d6f}", cAlternateFileName="{33D1F~1")) returned 1 [0092.939] FindNextFileW (in: hFindFile=0x381ec0, lpFindFileData=0x31e56c | out: lpFindFileData=0x31e56c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfabe4080, ftCreationTime.dwHighDateTime=0x1d2e620, ftLastAccessTime.dwLowDateTime=0xfabe4080, ftLastAccessTime.dwHighDateTime=0x1d2e620, ftLastWriteTime.dwLowDateTime=0xfabe4080, ftLastWriteTime.dwHighDateTime=0x1d2e620, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="{37B8F9C7-03FB-3253-8781-2517C99D7C00}v11.0.61030", cAlternateFileName="{37B8F~1.610")) returned 1 [0092.939] FindNextFileW (in: hFindFile=0x381ec0, lpFindFileData=0x31e56c | out: lpFindFileData=0x31e56c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1a0db1a0, ftCreationTime.dwHighDateTime=0x1d2e621, ftLastAccessTime.dwLowDateTime=0x1a127460, ftLastAccessTime.dwHighDateTime=0x1d2e621, ftLastWriteTime.dwLowDateTime=0x1a127460, ftLastWriteTime.dwHighDateTime=0x1d2e621, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="{3c3aafc8-d898-43ec-998f-965ffdae065a}", cAlternateFileName="{3C3AA~1")) returned 1 [0092.939] FindNextFileW (in: hFindFile=0x381ec0, lpFindFileData=0x31e56c | out: lpFindFileData=0x31e56c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf94d4300, ftCreationTime.dwHighDateTime=0x1d2fc27, ftLastAccessTime.dwLowDateTime=0xf94d4300, ftLastAccessTime.dwHighDateTime=0x1d2fc27, ftLastWriteTime.dwLowDateTime=0xf94d4300, ftLastWriteTime.dwHighDateTime=0x1d2fc27, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="{582EA838-9199-3518-A05C-DB09462F68EC}v14.10.25017", cAlternateFileName="{582EA~1.250")) returned 1 [0092.940] FindNextFileW (in: hFindFile=0x381ec0, lpFindFileData=0x31e56c | out: lpFindFileData=0x31e56c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf94d4300, ftCreationTime.dwHighDateTime=0x1d2fc27, ftLastAccessTime.dwLowDateTime=0xf94d4300, ftLastAccessTime.dwHighDateTime=0x1d2fc27, ftLastWriteTime.dwLowDateTime=0xf94d4300, ftLastWriteTime.dwHighDateTime=0x1d2fc27, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="{68306422-7C57-373F-8860-D26CE4BA2A15}v14.10.25017", cAlternateFileName="{68306~1.250")) returned 1 [0092.940] FindNextFileW (in: hFindFile=0x381ec0, lpFindFileData=0x31e56c | out: lpFindFileData=0x31e56c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa931c450, ftCreationTime.dwHighDateTime=0x1d2fab4, ftLastAccessTime.dwLowDateTime=0xa931c450, ftLastAccessTime.dwHighDateTime=0x1d2fab4, ftLastWriteTime.dwLowDateTime=0xa931c450, ftLastWriteTime.dwHighDateTime=0x1d2fab4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="{8D4F7A6D-6B81-3DC8-9C21-6008E4866727}v14.10.25017", cAlternateFileName="{8D4F7~1.250")) returned 1 [0092.940] FindNextFileW (in: hFindFile=0x381ec0, lpFindFileData=0x31e56c | out: lpFindFileData=0x31e56c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1a1e5b40, ftCreationTime.dwHighDateTime=0x1d2e621, ftLastAccessTime.dwLowDateTime=0x1a20bca0, ftLastAccessTime.dwHighDateTime=0x1d2e621, ftLastWriteTime.dwLowDateTime=0x1a20bca0, ftLastWriteTime.dwHighDateTime=0x1d2e621, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="{929FBD26-9020-399B-9A7A-751D61F0B942}v12.0.21005", cAlternateFileName="{929FB~1.210")) returned 1 [0092.940] FindNextFileW (in: hFindFile=0x381ec0, lpFindFileData=0x31e56c | out: lpFindFileData=0x31e56c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1a199880, ftCreationTime.dwHighDateTime=0x1d2e621, ftLastAccessTime.dwLowDateTime=0x1a1e5b40, ftLastAccessTime.dwHighDateTime=0x1d2e621, ftLastWriteTime.dwLowDateTime=0x1a1e5b40, ftLastWriteTime.dwHighDateTime=0x1d2e621, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="{A749D8E6-B613-3BE3-8F5F-045C84EBA29B}v12.0.21005", cAlternateFileName="{A749D~1.210")) returned 1 [0092.940] FindNextFileW (in: hFindFile=0x381ec0, lpFindFileData=0x31e56c | out: lpFindFileData=0x31e56c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xedbebcc0, ftCreationTime.dwHighDateTime=0x1d2e620, ftLastAccessTime.dwLowDateTime=0xedbebcc0, ftLastAccessTime.dwHighDateTime=0x1d2e620, ftLastWriteTime.dwLowDateTime=0xedbebcc0, ftLastWriteTime.dwHighDateTime=0x1d2e620, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="{B175520C-86A2-35A7-8619-86DC379688B9}v11.0.61030", cAlternateFileName="{B1755~1.610")) returned 1 [0092.940] FindNextFileW (in: hFindFile=0x381ec0, lpFindFileData=0x31e56c | out: lpFindFileData=0x31e56c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xecd7d760, ftCreationTime.dwHighDateTime=0x1d2e620, ftLastAccessTime.dwLowDateTime=0xedbebcc0, ftLastAccessTime.dwHighDateTime=0x1d2e620, ftLastWriteTime.dwLowDateTime=0xedbebcc0, ftLastWriteTime.dwHighDateTime=0x1d2e620, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="{BD95A8CD-1D9F-35AD-981A-3E7925026EBB}v11.0.61030", cAlternateFileName="{BD95A~1.610")) returned 1 [0092.940] FindNextFileW (in: hFindFile=0x381ec0, lpFindFileData=0x31e56c | out: lpFindFileData=0x31e56c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfaaff840, ftCreationTime.dwHighDateTime=0x1d2e620, ftLastAccessTime.dwLowDateTime=0xfaaff840, ftLastAccessTime.dwHighDateTime=0x1d2e620, ftLastWriteTime.dwLowDateTime=0xfaaff840, ftLastWriteTime.dwHighDateTime=0x1d2e620, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="{ca67548a-5ebe-413a-b50c-4b9ceb6d66c6}", cAlternateFileName="{CA675~1")) returned 1 [0092.940] FindNextFileW (in: hFindFile=0x381ec0, lpFindFileData=0x31e56c | out: lpFindFileData=0x31e56c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfab71c60, ftCreationTime.dwHighDateTime=0x1d2e620, ftLastAccessTime.dwLowDateTime=0xfabbdf20, ftLastAccessTime.dwHighDateTime=0x1d2e620, ftLastWriteTime.dwLowDateTime=0xfabbdf20, ftLastWriteTime.dwHighDateTime=0x1d2e620, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="{CF2BEA3C-26EA-32F8-AA9B-331F7E34BA97}v11.0.61030", cAlternateFileName="{CF2BE~1.610")) returned 1 [0092.940] FindNextFileW (in: hFindFile=0x381ec0, lpFindFileData=0x31e56c | out: lpFindFileData=0x31e56c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa93425b0, ftCreationTime.dwHighDateTime=0x1d2fab4, ftLastAccessTime.dwLowDateTime=0xa9368710, ftLastAccessTime.dwHighDateTime=0x1d2fab4, ftLastWriteTime.dwLowDateTime=0xa9368710, ftLastWriteTime.dwHighDateTime=0x1d2fab4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="{E512788E-C50B-3858-A4B9-73AD5F3F9E93}v14.10.25017", cAlternateFileName="{E5127~1.250")) returned 1 [0092.941] FindNextFileW (in: hFindFile=0x381ec0, lpFindFileData=0x31e56c | out: lpFindFileData=0x31e56c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa912d270, ftCreationTime.dwHighDateTime=0x1d2fab4, ftLastAccessTime.dwLowDateTime=0xa912d270, ftLastAccessTime.dwHighDateTime=0x1d2fab4, ftLastWriteTime.dwLowDateTime=0xa912d270, ftLastWriteTime.dwHighDateTime=0x1d2fab4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="{e52a6842-b0ac-476e-b48f-378a97a67346}", cAlternateFileName="{E52A6~1")) returned 1 [0092.941] FindNextFileW (in: hFindFile=0x381ec0, lpFindFileData=0x31e56c | out: lpFindFileData=0x31e56c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xca64c20, ftCreationTime.dwHighDateTime=0x1d2e621, ftLastAccessTime.dwLowDateTime=0xcad7040, ftLastAccessTime.dwHighDateTime=0x1d2e621, ftLastWriteTime.dwLowDateTime=0xcad7040, ftLastWriteTime.dwHighDateTime=0x1d2e621, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="{e6e75766-da0f-4ba2-9788-6ea593ce702d}", cAlternateFileName="{E6E75~1")) returned 1 [0092.941] FindNextFileW (in: hFindFile=0x381ec0, lpFindFileData=0x31e56c | out: lpFindFileData=0x31e56c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf93c9960, ftCreationTime.dwHighDateTime=0x1d2fc27, ftLastAccessTime.dwLowDateTime=0xf93efac0, ftLastAccessTime.dwHighDateTime=0x1d2fc27, ftLastWriteTime.dwLowDateTime=0xf93efac0, ftLastWriteTime.dwHighDateTime=0x1d2fc27, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="{f325f05b-f963-4640-a43b-c8a494cdda0f}", cAlternateFileName="{F325F~1")) returned 1 [0092.941] FindNextFileW (in: hFindFile=0x381ec0, lpFindFileData=0x31e56c | out: lpFindFileData=0x31e56c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xcbbb880, ftCreationTime.dwHighDateTime=0x1d2e621, ftLastAccessTime.dwLowDateTime=0xcbbb880, ftLastAccessTime.dwHighDateTime=0x1d2e621, ftLastWriteTime.dwLowDateTime=0xcbbb880, ftLastWriteTime.dwHighDateTime=0x1d2e621, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="{F8CFEB22-A2E7-3971-9EDA-4B11EDEFC185}v12.0.21005", cAlternateFileName="{F8CFE~1.210")) returned 1 [0092.941] FindNextFileW (in: hFindFile=0x381ec0, lpFindFileData=0x31e56c | out: lpFindFileData=0x31e56c*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0092.941] FindClose (in: hFindFile=0x381ec0 | out: hFindFile=0x381ec0) returned 1 [0092.942] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e7f4) returned 1 [0092.942] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e800) returned 1 [0092.942] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e7bc) returned 1 [0092.942] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Package Cache\\42D5BEC7DDFBD49E76467529CBC2868987BF8460", nBufferLength=0x105, lpBuffer=0x31e2c4, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Package Cache\\42D5BEC7DDFBD49E76467529CBC2868987BF8460", lpFilePart=0x0) returned 0x49 [0092.942] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Package Cache\\42D5BEC7DDFBD49E76467529CBC2868987BF8460\\", nBufferLength=0x105, lpBuffer=0x31e298, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Package Cache\\42D5BEC7DDFBD49E76467529CBC2868987BF8460\\", lpFilePart=0x0) returned 0x4a [0092.942] FindFirstFileW (in: lpFileName="C:\\Users\\All Users\\Package Cache\\42D5BEC7DDFBD49E76467529CBC2868987BF8460\\*", lpFindFileData=0x31e4e4 | out: lpFindFileData=0x31e4e4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x2924cac0, ftCreationTime.dwHighDateTime=0x1d2e621, ftLastAccessTime.dwLowDateTime=0x29272c20, ftLastAccessTime.dwHighDateTime=0x1d2e621, ftLastWriteTime.dwLowDateTime=0x29272c20, ftLastWriteTime.dwHighDateTime=0x1d2e621, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x381ec0 [0092.943] FindNextFileW (in: hFindFile=0x381ec0, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x2924cac0, ftCreationTime.dwHighDateTime=0x1d2e621, ftLastAccessTime.dwLowDateTime=0x29272c20, ftLastAccessTime.dwHighDateTime=0x1d2e621, ftLastWriteTime.dwLowDateTime=0x29272c20, ftLastWriteTime.dwHighDateTime=0x1d2e621, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0092.943] FindNextFileW (in: hFindFile=0x381ec0, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x29272c20, ftCreationTime.dwHighDateTime=0x1d2e621, ftLastAccessTime.dwLowDateTime=0x29272c20, ftLastAccessTime.dwHighDateTime=0x1d2e621, ftLastWriteTime.dwLowDateTime=0x29272c20, ftLastWriteTime.dwHighDateTime=0x1d2e621, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="packages", cAlternateFileName="")) returned 1 [0092.943] FindNextFileW (in: hFindFile=0x381ec0, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x29272c20, ftCreationTime.dwHighDateTime=0x1d2e621, ftLastAccessTime.dwLowDateTime=0x29272c20, ftLastAccessTime.dwHighDateTime=0x1d2e621, ftLastWriteTime.dwLowDateTime=0x29272c20, ftLastWriteTime.dwHighDateTime=0x1d2e621, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="packages", cAlternateFileName="")) returned 0 [0092.943] FindClose (in: hFindFile=0x381ec0 | out: hFindFile=0x381ec0) returned 1 [0092.943] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e77c) returned 1 [0092.943] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e788) returned 1 [0092.943] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e7bc) returned 1 [0092.943] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Package Cache\\42D5BEC7DDFBD49E76467529CBC2868987BF8460", nBufferLength=0x105, lpBuffer=0x31e2c4, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Package Cache\\42D5BEC7DDFBD49E76467529CBC2868987BF8460", lpFilePart=0x0) returned 0x49 [0092.943] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Package Cache\\42D5BEC7DDFBD49E76467529CBC2868987BF8460\\", nBufferLength=0x105, lpBuffer=0x31e298, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Package Cache\\42D5BEC7DDFBD49E76467529CBC2868987BF8460\\", lpFilePart=0x0) returned 0x4a [0092.943] FindFirstFileW (in: lpFileName="C:\\Users\\All Users\\Package Cache\\42D5BEC7DDFBD49E76467529CBC2868987BF8460\\*", lpFindFileData=0x31e4e4 | out: lpFindFileData=0x31e4e4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x2924cac0, ftCreationTime.dwHighDateTime=0x1d2e621, ftLastAccessTime.dwLowDateTime=0x29272c20, ftLastAccessTime.dwHighDateTime=0x1d2e621, ftLastWriteTime.dwLowDateTime=0x29272c20, ftLastWriteTime.dwHighDateTime=0x1d2e621, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x381ec0 [0092.944] FindNextFileW (in: hFindFile=0x381ec0, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x2924cac0, ftCreationTime.dwHighDateTime=0x1d2e621, ftLastAccessTime.dwLowDateTime=0x29272c20, ftLastAccessTime.dwHighDateTime=0x1d2e621, ftLastWriteTime.dwLowDateTime=0x29272c20, ftLastWriteTime.dwHighDateTime=0x1d2e621, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0092.944] FindNextFileW (in: hFindFile=0x381ec0, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x29272c20, ftCreationTime.dwHighDateTime=0x1d2e621, ftLastAccessTime.dwLowDateTime=0x29272c20, ftLastAccessTime.dwHighDateTime=0x1d2e621, ftLastWriteTime.dwLowDateTime=0x29272c20, ftLastWriteTime.dwHighDateTime=0x1d2e621, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="packages", cAlternateFileName="")) returned 1 [0092.944] FindNextFileW (in: hFindFile=0x381ec0, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0092.944] FindClose (in: hFindFile=0x381ec0 | out: hFindFile=0x381ec0) returned 1 [0092.944] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e77c) returned 1 [0092.944] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e788) returned 1 [0092.944] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e744) returned 1 [0092.944] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Package Cache\\42D5BEC7DDFBD49E76467529CBC2868987BF8460\\packages", nBufferLength=0x105, lpBuffer=0x31e24c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Package Cache\\42D5BEC7DDFBD49E76467529CBC2868987BF8460\\packages", lpFilePart=0x0) returned 0x52 [0092.944] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Package Cache\\42D5BEC7DDFBD49E76467529CBC2868987BF8460\\packages\\", nBufferLength=0x105, lpBuffer=0x31e220, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Package Cache\\42D5BEC7DDFBD49E76467529CBC2868987BF8460\\packages\\", lpFilePart=0x0) returned 0x53 [0092.944] FindFirstFileW (in: lpFileName="C:\\Users\\All Users\\Package Cache\\42D5BEC7DDFBD49E76467529CBC2868987BF8460\\packages\\*", lpFindFileData=0x31e46c | out: lpFindFileData=0x31e46c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x29272c20, ftCreationTime.dwHighDateTime=0x1d2e621, ftLastAccessTime.dwLowDateTime=0x29272c20, ftLastAccessTime.dwHighDateTime=0x1d2e621, ftLastWriteTime.dwLowDateTime=0x29272c20, ftLastWriteTime.dwHighDateTime=0x1d2e621, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x381ec0 [0092.944] FindNextFileW (in: hFindFile=0x381ec0, lpFindFileData=0x31e47c | out: lpFindFileData=0x31e47c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x29272c20, ftCreationTime.dwHighDateTime=0x1d2e621, ftLastAccessTime.dwLowDateTime=0x29272c20, ftLastAccessTime.dwHighDateTime=0x1d2e621, ftLastWriteTime.dwLowDateTime=0x29272c20, ftLastWriteTime.dwHighDateTime=0x1d2e621, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0092.945] FindNextFileW (in: hFindFile=0x381ec0, lpFindFileData=0x31e47c | out: lpFindFileData=0x31e47c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x29272c20, ftCreationTime.dwHighDateTime=0x1d2e621, ftLastAccessTime.dwLowDateTime=0x29272c20, ftLastAccessTime.dwHighDateTime=0x1d2e621, ftLastWriteTime.dwLowDateTime=0x29272c20, ftLastWriteTime.dwHighDateTime=0x1d2e621, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Patch", cAlternateFileName="")) returned 1 [0092.945] FindNextFileW (in: hFindFile=0x381ec0, lpFindFileData=0x31e47c | out: lpFindFileData=0x31e47c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x29272c20, ftCreationTime.dwHighDateTime=0x1d2e621, ftLastAccessTime.dwLowDateTime=0x29272c20, ftLastAccessTime.dwHighDateTime=0x1d2e621, ftLastWriteTime.dwLowDateTime=0x29272c20, ftLastWriteTime.dwHighDateTime=0x1d2e621, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Patch", cAlternateFileName="")) returned 0 [0092.946] FindClose (in: hFindFile=0x381ec0 | out: hFindFile=0x381ec0) returned 1 [0092.946] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e704) returned 1 [0092.946] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e710) returned 1 [0092.946] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e744) returned 1 [0092.946] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Package Cache\\42D5BEC7DDFBD49E76467529CBC2868987BF8460\\packages", nBufferLength=0x105, lpBuffer=0x31e24c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Package Cache\\42D5BEC7DDFBD49E76467529CBC2868987BF8460\\packages", lpFilePart=0x0) returned 0x52 [0092.946] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Package Cache\\42D5BEC7DDFBD49E76467529CBC2868987BF8460\\packages\\", nBufferLength=0x105, lpBuffer=0x31e220, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Package Cache\\42D5BEC7DDFBD49E76467529CBC2868987BF8460\\packages\\", lpFilePart=0x0) returned 0x53 [0092.946] FindFirstFileW (in: lpFileName="C:\\Users\\All Users\\Package Cache\\42D5BEC7DDFBD49E76467529CBC2868987BF8460\\packages\\*", lpFindFileData=0x31e46c | out: lpFindFileData=0x31e46c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x29272c20, ftCreationTime.dwHighDateTime=0x1d2e621, ftLastAccessTime.dwLowDateTime=0x29272c20, ftLastAccessTime.dwHighDateTime=0x1d2e621, ftLastWriteTime.dwLowDateTime=0x29272c20, ftLastWriteTime.dwHighDateTime=0x1d2e621, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x381ec0 [0092.946] FindNextFileW (in: hFindFile=0x381ec0, lpFindFileData=0x31e47c | out: lpFindFileData=0x31e47c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x29272c20, ftCreationTime.dwHighDateTime=0x1d2e621, ftLastAccessTime.dwLowDateTime=0x29272c20, ftLastAccessTime.dwHighDateTime=0x1d2e621, ftLastWriteTime.dwLowDateTime=0x29272c20, ftLastWriteTime.dwHighDateTime=0x1d2e621, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0092.946] FindNextFileW (in: hFindFile=0x381ec0, lpFindFileData=0x31e47c | out: lpFindFileData=0x31e47c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x29272c20, ftCreationTime.dwHighDateTime=0x1d2e621, ftLastAccessTime.dwLowDateTime=0x29272c20, ftLastAccessTime.dwHighDateTime=0x1d2e621, ftLastWriteTime.dwLowDateTime=0x29272c20, ftLastWriteTime.dwHighDateTime=0x1d2e621, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Patch", cAlternateFileName="")) returned 1 [0092.946] FindNextFileW (in: hFindFile=0x381ec0, lpFindFileData=0x31e47c | out: lpFindFileData=0x31e47c*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0092.947] FindClose (in: hFindFile=0x381ec0 | out: hFindFile=0x381ec0) returned 1 [0092.947] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e704) returned 1 [0092.947] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e710) returned 1 [0092.947] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e6cc) returned 1 [0092.947] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Package Cache\\42D5BEC7DDFBD49E76467529CBC2868987BF8460\\packages\\Patch", nBufferLength=0x105, lpBuffer=0x31e1d4, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Package Cache\\42D5BEC7DDFBD49E76467529CBC2868987BF8460\\packages\\Patch", lpFilePart=0x0) returned 0x58 [0092.947] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Package Cache\\42D5BEC7DDFBD49E76467529CBC2868987BF8460\\packages\\Patch\\", nBufferLength=0x105, lpBuffer=0x31e1a8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Package Cache\\42D5BEC7DDFBD49E76467529CBC2868987BF8460\\packages\\Patch\\", lpFilePart=0x0) returned 0x59 [0092.947] FindFirstFileW (in: lpFileName="C:\\Users\\All Users\\Package Cache\\42D5BEC7DDFBD49E76467529CBC2868987BF8460\\packages\\Patch\\*", lpFindFileData=0x31e3f4 | out: lpFindFileData=0x31e3f4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x29272c20, ftCreationTime.dwHighDateTime=0x1d2e621, ftLastAccessTime.dwLowDateTime=0x29272c20, ftLastAccessTime.dwHighDateTime=0x1d2e621, ftLastWriteTime.dwLowDateTime=0x29272c20, ftLastWriteTime.dwHighDateTime=0x1d2e621, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x381ec0 [0092.947] FindNextFileW (in: hFindFile=0x381ec0, lpFindFileData=0x31e404 | out: lpFindFileData=0x31e404*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x29272c20, ftCreationTime.dwHighDateTime=0x1d2e621, ftLastAccessTime.dwLowDateTime=0x29272c20, ftLastAccessTime.dwHighDateTime=0x1d2e621, ftLastWriteTime.dwLowDateTime=0x29272c20, ftLastWriteTime.dwHighDateTime=0x1d2e621, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0092.947] FindNextFileW (in: hFindFile=0x381ec0, lpFindFileData=0x31e404 | out: lpFindFileData=0x31e404*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x29272c20, ftCreationTime.dwHighDateTime=0x1d2e621, ftLastAccessTime.dwLowDateTime=0x29272c20, ftLastAccessTime.dwHighDateTime=0x1d2e621, ftLastWriteTime.dwLowDateTime=0x29272c20, ftLastWriteTime.dwHighDateTime=0x1d2e621, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="x64", cAlternateFileName="")) returned 1 [0092.947] FindNextFileW (in: hFindFile=0x381ec0, lpFindFileData=0x31e404 | out: lpFindFileData=0x31e404*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x29272c20, ftCreationTime.dwHighDateTime=0x1d2e621, ftLastAccessTime.dwLowDateTime=0x29272c20, ftLastAccessTime.dwHighDateTime=0x1d2e621, ftLastWriteTime.dwLowDateTime=0x29272c20, ftLastWriteTime.dwHighDateTime=0x1d2e621, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="x64", cAlternateFileName="")) returned 0 [0092.947] FindClose (in: hFindFile=0x381ec0 | out: hFindFile=0x381ec0) returned 1 [0092.947] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e68c) returned 1 [0092.947] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e698) returned 1 [0092.947] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e6cc) returned 1 [0092.947] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Package Cache\\42D5BEC7DDFBD49E76467529CBC2868987BF8460\\packages\\Patch", nBufferLength=0x105, lpBuffer=0x31e1d4, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Package Cache\\42D5BEC7DDFBD49E76467529CBC2868987BF8460\\packages\\Patch", lpFilePart=0x0) returned 0x58 [0092.947] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Package Cache\\42D5BEC7DDFBD49E76467529CBC2868987BF8460\\packages\\Patch\\", nBufferLength=0x105, lpBuffer=0x31e1a8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Package Cache\\42D5BEC7DDFBD49E76467529CBC2868987BF8460\\packages\\Patch\\", lpFilePart=0x0) returned 0x59 [0092.947] FindFirstFileW (in: lpFileName="C:\\Users\\All Users\\Package Cache\\42D5BEC7DDFBD49E76467529CBC2868987BF8460\\packages\\Patch\\*", lpFindFileData=0x31e3f4 | out: lpFindFileData=0x31e3f4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x29272c20, ftCreationTime.dwHighDateTime=0x1d2e621, ftLastAccessTime.dwLowDateTime=0x29272c20, ftLastAccessTime.dwHighDateTime=0x1d2e621, ftLastWriteTime.dwLowDateTime=0x29272c20, ftLastWriteTime.dwHighDateTime=0x1d2e621, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x381ec0 [0092.948] FindNextFileW (in: hFindFile=0x381ec0, lpFindFileData=0x31e404 | out: lpFindFileData=0x31e404*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x29272c20, ftCreationTime.dwHighDateTime=0x1d2e621, ftLastAccessTime.dwLowDateTime=0x29272c20, ftLastAccessTime.dwHighDateTime=0x1d2e621, ftLastWriteTime.dwLowDateTime=0x29272c20, ftLastWriteTime.dwHighDateTime=0x1d2e621, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0092.948] FindNextFileW (in: hFindFile=0x381ec0, lpFindFileData=0x31e404 | out: lpFindFileData=0x31e404*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x29272c20, ftCreationTime.dwHighDateTime=0x1d2e621, ftLastAccessTime.dwLowDateTime=0x29272c20, ftLastAccessTime.dwHighDateTime=0x1d2e621, ftLastWriteTime.dwLowDateTime=0x29272c20, ftLastWriteTime.dwHighDateTime=0x1d2e621, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="x64", cAlternateFileName="")) returned 1 [0092.948] FindNextFileW (in: hFindFile=0x381ec0, lpFindFileData=0x31e404 | out: lpFindFileData=0x31e404*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0092.948] FindClose (in: hFindFile=0x381ec0 | out: hFindFile=0x381ec0) returned 1 [0092.948] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e68c) returned 1 [0092.948] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e698) returned 1 [0092.948] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e654) returned 1 [0092.948] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Package Cache\\42D5BEC7DDFBD49E76467529CBC2868987BF8460\\packages\\Patch\\x64", nBufferLength=0x105, lpBuffer=0x31e15c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Package Cache\\42D5BEC7DDFBD49E76467529CBC2868987BF8460\\packages\\Patch\\x64", lpFilePart=0x0) returned 0x5c [0092.948] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Package Cache\\42D5BEC7DDFBD49E76467529CBC2868987BF8460\\packages\\Patch\\x64\\", nBufferLength=0x105, lpBuffer=0x31e130, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Package Cache\\42D5BEC7DDFBD49E76467529CBC2868987BF8460\\packages\\Patch\\x64\\", lpFilePart=0x0) returned 0x5d [0092.948] FindFirstFileW (in: lpFileName="C:\\Users\\All Users\\Package Cache\\42D5BEC7DDFBD49E76467529CBC2868987BF8460\\packages\\Patch\\x64\\*", lpFindFileData=0x31e37c | out: lpFindFileData=0x31e37c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x29272c20, ftCreationTime.dwHighDateTime=0x1d2e621, ftLastAccessTime.dwLowDateTime=0x29272c20, ftLastAccessTime.dwHighDateTime=0x1d2e621, ftLastWriteTime.dwLowDateTime=0x29272c20, ftLastWriteTime.dwHighDateTime=0x1d2e621, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x381ec0 [0092.948] FindNextFileW (in: hFindFile=0x381ec0, lpFindFileData=0x31e38c | out: lpFindFileData=0x31e38c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x29272c20, ftCreationTime.dwHighDateTime=0x1d2e621, ftLastAccessTime.dwLowDateTime=0x29272c20, ftLastAccessTime.dwHighDateTime=0x1d2e621, ftLastWriteTime.dwLowDateTime=0x29272c20, ftLastWriteTime.dwHighDateTime=0x1d2e621, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0092.948] FindNextFileW (in: hFindFile=0x381ec0, lpFindFileData=0x31e38c | out: lpFindFileData=0x31e38c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x59d2100, ftCreationTime.dwHighDateTime=0x1d0a100, ftLastAccessTime.dwLowDateTime=0x59d2100, ftLastAccessTime.dwHighDateTime=0x1d0a100, ftLastWriteTime.dwLowDateTime=0x59d2100, ftLastWriteTime.dwHighDateTime=0x1d0a100, nFileSizeHigh=0x0, nFileSizeLow=0xf7139, dwReserved0=0x0, dwReserved1=0x0, cFileName="Windows6.1-KB2999226-x64.msu", cAlternateFileName="WINDOW~1.MSU")) returned 1 [0092.948] FindNextFileW (in: hFindFile=0x381ec0, lpFindFileData=0x31e38c | out: lpFindFileData=0x31e38c*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0092.948] FindClose (in: hFindFile=0x381ec0 | out: hFindFile=0x381ec0) returned 1 [0092.949] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e614) returned 1 [0092.949] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e620) returned 1 [0092.949] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e654) returned 1 [0092.949] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Package Cache\\42D5BEC7DDFBD49E76467529CBC2868987BF8460\\packages\\Patch\\x64", nBufferLength=0x105, lpBuffer=0x31e15c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Package Cache\\42D5BEC7DDFBD49E76467529CBC2868987BF8460\\packages\\Patch\\x64", lpFilePart=0x0) returned 0x5c [0092.949] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Package Cache\\42D5BEC7DDFBD49E76467529CBC2868987BF8460\\packages\\Patch\\x64\\", nBufferLength=0x105, lpBuffer=0x31e130, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Package Cache\\42D5BEC7DDFBD49E76467529CBC2868987BF8460\\packages\\Patch\\x64\\", lpFilePart=0x0) returned 0x5d [0092.949] FindFirstFileW (in: lpFileName="C:\\Users\\All Users\\Package Cache\\42D5BEC7DDFBD49E76467529CBC2868987BF8460\\packages\\Patch\\x64\\*", lpFindFileData=0x31e37c | out: lpFindFileData=0x31e37c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x29272c20, ftCreationTime.dwHighDateTime=0x1d2e621, ftLastAccessTime.dwLowDateTime=0x29272c20, ftLastAccessTime.dwHighDateTime=0x1d2e621, ftLastWriteTime.dwLowDateTime=0x29272c20, ftLastWriteTime.dwHighDateTime=0x1d2e621, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x381ec0 [0092.949] FindNextFileW (in: hFindFile=0x381ec0, lpFindFileData=0x31e38c | out: lpFindFileData=0x31e38c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x29272c20, ftCreationTime.dwHighDateTime=0x1d2e621, ftLastAccessTime.dwLowDateTime=0x29272c20, ftLastAccessTime.dwHighDateTime=0x1d2e621, ftLastWriteTime.dwLowDateTime=0x29272c20, ftLastWriteTime.dwHighDateTime=0x1d2e621, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0092.949] FindNextFileW (in: hFindFile=0x381ec0, lpFindFileData=0x31e38c | out: lpFindFileData=0x31e38c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x59d2100, ftCreationTime.dwHighDateTime=0x1d0a100, ftLastAccessTime.dwLowDateTime=0x59d2100, ftLastAccessTime.dwHighDateTime=0x1d0a100, ftLastWriteTime.dwLowDateTime=0x59d2100, ftLastWriteTime.dwHighDateTime=0x1d0a100, nFileSizeHigh=0x0, nFileSizeLow=0xf7139, dwReserved0=0x0, dwReserved1=0x0, cFileName="Windows6.1-KB2999226-x64.msu", cAlternateFileName="WINDOW~1.MSU")) returned 1 [0092.949] FindNextFileW (in: hFindFile=0x381ec0, lpFindFileData=0x31e38c | out: lpFindFileData=0x31e38c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x59d2100, ftCreationTime.dwHighDateTime=0x1d0a100, ftLastAccessTime.dwLowDateTime=0x59d2100, ftLastAccessTime.dwHighDateTime=0x1d0a100, ftLastWriteTime.dwLowDateTime=0x59d2100, ftLastWriteTime.dwHighDateTime=0x1d0a100, nFileSizeHigh=0x0, nFileSizeLow=0xf7139, dwReserved0=0x0, dwReserved1=0x0, cFileName="Windows6.1-KB2999226-x64.msu", cAlternateFileName="WINDOW~1.MSU")) returned 0 [0092.949] FindClose (in: hFindFile=0x381ec0 | out: hFindFile=0x381ec0) returned 1 [0092.949] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e614) returned 1 [0092.949] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e620) returned 1 [0092.949] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e7bc) returned 1 [0092.949] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Package Cache\\54050A5F8AE7F0C56E553F0090146C17A1D2BF8D", nBufferLength=0x105, lpBuffer=0x31e2c4, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Package Cache\\54050A5F8AE7F0C56E553F0090146C17A1D2BF8D", lpFilePart=0x0) returned 0x49 [0092.949] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Package Cache\\54050A5F8AE7F0C56E553F0090146C17A1D2BF8D\\", nBufferLength=0x105, lpBuffer=0x31e298, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Package Cache\\54050A5F8AE7F0C56E553F0090146C17A1D2BF8D\\", lpFilePart=0x0) returned 0x4a [0092.949] FindFirstFileW (in: lpFileName="C:\\Users\\All Users\\Package Cache\\54050A5F8AE7F0C56E553F0090146C17A1D2BF8D\\*", lpFindFileData=0x31e4e4 | out: lpFindFileData=0x31e4e4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa938e870, ftCreationTime.dwHighDateTime=0x1d2fab4, ftLastAccessTime.dwLowDateTime=0xa989d730, ftLastAccessTime.dwHighDateTime=0x1d2fab4, ftLastWriteTime.dwLowDateTime=0xa989d730, ftLastWriteTime.dwHighDateTime=0x1d2fab4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x381ec0 [0092.950] FindNextFileW (in: hFindFile=0x381ec0, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa938e870, ftCreationTime.dwHighDateTime=0x1d2fab4, ftLastAccessTime.dwLowDateTime=0xa989d730, ftLastAccessTime.dwHighDateTime=0x1d2fab4, ftLastWriteTime.dwLowDateTime=0xa989d730, ftLastWriteTime.dwHighDateTime=0x1d2fab4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0092.950] FindNextFileW (in: hFindFile=0x381ec0, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa989d730, ftCreationTime.dwHighDateTime=0x1d2fab4, ftLastAccessTime.dwLowDateTime=0xa989d730, ftLastAccessTime.dwHighDateTime=0x1d2fab4, ftLastWriteTime.dwLowDateTime=0xa989d730, ftLastWriteTime.dwHighDateTime=0x1d2fab4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="packages", cAlternateFileName="")) returned 1 [0092.950] FindNextFileW (in: hFindFile=0x381ec0, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa989d730, ftCreationTime.dwHighDateTime=0x1d2fab4, ftLastAccessTime.dwLowDateTime=0xa989d730, ftLastAccessTime.dwHighDateTime=0x1d2fab4, ftLastWriteTime.dwLowDateTime=0xa989d730, ftLastWriteTime.dwHighDateTime=0x1d2fab4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="packages", cAlternateFileName="")) returned 0 [0092.950] FindClose (in: hFindFile=0x381ec0 | out: hFindFile=0x381ec0) returned 1 [0092.950] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e77c) returned 1 [0092.950] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e788) returned 1 [0092.950] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e7bc) returned 1 [0092.950] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Package Cache\\54050A5F8AE7F0C56E553F0090146C17A1D2BF8D", nBufferLength=0x105, lpBuffer=0x31e2c4, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Package Cache\\54050A5F8AE7F0C56E553F0090146C17A1D2BF8D", lpFilePart=0x0) returned 0x49 [0092.950] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Package Cache\\54050A5F8AE7F0C56E553F0090146C17A1D2BF8D\\", nBufferLength=0x105, lpBuffer=0x31e298, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Package Cache\\54050A5F8AE7F0C56E553F0090146C17A1D2BF8D\\", lpFilePart=0x0) returned 0x4a [0092.950] FindFirstFileW (in: lpFileName="C:\\Users\\All Users\\Package Cache\\54050A5F8AE7F0C56E553F0090146C17A1D2BF8D\\*", lpFindFileData=0x31e4e4 | out: lpFindFileData=0x31e4e4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa938e870, ftCreationTime.dwHighDateTime=0x1d2fab4, ftLastAccessTime.dwLowDateTime=0xa989d730, ftLastAccessTime.dwHighDateTime=0x1d2fab4, ftLastWriteTime.dwLowDateTime=0xa989d730, ftLastWriteTime.dwHighDateTime=0x1d2fab4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x381ec0 [0092.950] FindNextFileW (in: hFindFile=0x381ec0, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa938e870, ftCreationTime.dwHighDateTime=0x1d2fab4, ftLastAccessTime.dwLowDateTime=0xa989d730, ftLastAccessTime.dwHighDateTime=0x1d2fab4, ftLastWriteTime.dwLowDateTime=0xa989d730, ftLastWriteTime.dwHighDateTime=0x1d2fab4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0092.950] FindNextFileW (in: hFindFile=0x381ec0, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa989d730, ftCreationTime.dwHighDateTime=0x1d2fab4, ftLastAccessTime.dwLowDateTime=0xa989d730, ftLastAccessTime.dwHighDateTime=0x1d2fab4, ftLastWriteTime.dwLowDateTime=0xa989d730, ftLastWriteTime.dwHighDateTime=0x1d2fab4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="packages", cAlternateFileName="")) returned 1 [0092.950] FindNextFileW (in: hFindFile=0x381ec0, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0092.950] FindClose (in: hFindFile=0x381ec0 | out: hFindFile=0x381ec0) returned 1 [0092.950] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e77c) returned 1 [0092.950] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e788) returned 1 [0092.951] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e744) returned 1 [0092.951] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Package Cache\\54050A5F8AE7F0C56E553F0090146C17A1D2BF8D\\packages", nBufferLength=0x105, lpBuffer=0x31e24c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Package Cache\\54050A5F8AE7F0C56E553F0090146C17A1D2BF8D\\packages", lpFilePart=0x0) returned 0x52 [0092.951] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Package Cache\\54050A5F8AE7F0C56E553F0090146C17A1D2BF8D\\packages\\", nBufferLength=0x105, lpBuffer=0x31e220, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Package Cache\\54050A5F8AE7F0C56E553F0090146C17A1D2BF8D\\packages\\", lpFilePart=0x0) returned 0x53 [0092.951] FindFirstFileW (in: lpFileName="C:\\Users\\All Users\\Package Cache\\54050A5F8AE7F0C56E553F0090146C17A1D2BF8D\\packages\\*", lpFindFileData=0x31e46c | out: lpFindFileData=0x31e46c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa989d730, ftCreationTime.dwHighDateTime=0x1d2fab4, ftLastAccessTime.dwLowDateTime=0xa989d730, ftLastAccessTime.dwHighDateTime=0x1d2fab4, ftLastWriteTime.dwLowDateTime=0xa989d730, ftLastWriteTime.dwHighDateTime=0x1d2fab4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x381ec0 [0092.951] FindNextFileW (in: hFindFile=0x381ec0, lpFindFileData=0x31e47c | out: lpFindFileData=0x31e47c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa989d730, ftCreationTime.dwHighDateTime=0x1d2fab4, ftLastAccessTime.dwLowDateTime=0xa989d730, ftLastAccessTime.dwHighDateTime=0x1d2fab4, ftLastWriteTime.dwLowDateTime=0xa989d730, ftLastWriteTime.dwHighDateTime=0x1d2fab4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0092.951] FindNextFileW (in: hFindFile=0x381ec0, lpFindFileData=0x31e47c | out: lpFindFileData=0x31e47c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa989d730, ftCreationTime.dwHighDateTime=0x1d2fab4, ftLastAccessTime.dwLowDateTime=0xa989d730, ftLastAccessTime.dwHighDateTime=0x1d2fab4, ftLastWriteTime.dwLowDateTime=0xa989d730, ftLastWriteTime.dwHighDateTime=0x1d2fab4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Patch", cAlternateFileName="")) returned 1 [0092.951] FindNextFileW (in: hFindFile=0x381ec0, lpFindFileData=0x31e47c | out: lpFindFileData=0x31e47c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa989d730, ftCreationTime.dwHighDateTime=0x1d2fab4, ftLastAccessTime.dwLowDateTime=0xa989d730, ftLastAccessTime.dwHighDateTime=0x1d2fab4, ftLastWriteTime.dwLowDateTime=0xa989d730, ftLastWriteTime.dwHighDateTime=0x1d2fab4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Patch", cAlternateFileName="")) returned 0 [0092.951] FindClose (in: hFindFile=0x381ec0 | out: hFindFile=0x381ec0) returned 1 [0092.951] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e704) returned 1 [0092.951] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e710) returned 1 [0092.951] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e744) returned 1 [0092.951] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Package Cache\\54050A5F8AE7F0C56E553F0090146C17A1D2BF8D\\packages", nBufferLength=0x105, lpBuffer=0x31e24c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Package Cache\\54050A5F8AE7F0C56E553F0090146C17A1D2BF8D\\packages", lpFilePart=0x0) returned 0x52 [0092.951] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Package Cache\\54050A5F8AE7F0C56E553F0090146C17A1D2BF8D\\packages\\", nBufferLength=0x105, lpBuffer=0x31e220, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Package Cache\\54050A5F8AE7F0C56E553F0090146C17A1D2BF8D\\packages\\", lpFilePart=0x0) returned 0x53 [0092.951] FindFirstFileW (in: lpFileName="C:\\Users\\All Users\\Package Cache\\54050A5F8AE7F0C56E553F0090146C17A1D2BF8D\\packages\\*", lpFindFileData=0x31e46c | out: lpFindFileData=0x31e46c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa989d730, ftCreationTime.dwHighDateTime=0x1d2fab4, ftLastAccessTime.dwLowDateTime=0xa989d730, ftLastAccessTime.dwHighDateTime=0x1d2fab4, ftLastWriteTime.dwLowDateTime=0xa989d730, ftLastWriteTime.dwHighDateTime=0x1d2fab4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x381ec0 [0092.952] FindNextFileW (in: hFindFile=0x381ec0, lpFindFileData=0x31e47c | out: lpFindFileData=0x31e47c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa989d730, ftCreationTime.dwHighDateTime=0x1d2fab4, ftLastAccessTime.dwLowDateTime=0xa989d730, ftLastAccessTime.dwHighDateTime=0x1d2fab4, ftLastWriteTime.dwLowDateTime=0xa989d730, ftLastWriteTime.dwHighDateTime=0x1d2fab4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0092.952] FindNextFileW (in: hFindFile=0x381ec0, lpFindFileData=0x31e47c | out: lpFindFileData=0x31e47c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa989d730, ftCreationTime.dwHighDateTime=0x1d2fab4, ftLastAccessTime.dwLowDateTime=0xa989d730, ftLastAccessTime.dwHighDateTime=0x1d2fab4, ftLastWriteTime.dwLowDateTime=0xa989d730, ftLastWriteTime.dwHighDateTime=0x1d2fab4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Patch", cAlternateFileName="")) returned 1 [0092.952] FindNextFileW (in: hFindFile=0x381ec0, lpFindFileData=0x31e47c | out: lpFindFileData=0x31e47c*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0092.952] FindClose (in: hFindFile=0x381ec0 | out: hFindFile=0x381ec0) returned 1 [0092.952] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e704) returned 1 [0092.952] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e710) returned 1 [0092.952] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e6cc) returned 1 [0092.952] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Package Cache\\54050A5F8AE7F0C56E553F0090146C17A1D2BF8D\\packages\\Patch", nBufferLength=0x105, lpBuffer=0x31e1d4, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Package Cache\\54050A5F8AE7F0C56E553F0090146C17A1D2BF8D\\packages\\Patch", lpFilePart=0x0) returned 0x58 [0092.952] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Package Cache\\54050A5F8AE7F0C56E553F0090146C17A1D2BF8D\\packages\\Patch\\", nBufferLength=0x105, lpBuffer=0x31e1a8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Package Cache\\54050A5F8AE7F0C56E553F0090146C17A1D2BF8D\\packages\\Patch\\", lpFilePart=0x0) returned 0x59 [0092.952] FindFirstFileW (in: lpFileName="C:\\Users\\All Users\\Package Cache\\54050A5F8AE7F0C56E553F0090146C17A1D2BF8D\\packages\\Patch\\*", lpFindFileData=0x31e3f4 | out: lpFindFileData=0x31e3f4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa989d730, ftCreationTime.dwHighDateTime=0x1d2fab4, ftLastAccessTime.dwLowDateTime=0xa989d730, ftLastAccessTime.dwHighDateTime=0x1d2fab4, ftLastWriteTime.dwLowDateTime=0xa989d730, ftLastWriteTime.dwHighDateTime=0x1d2fab4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x381ec0 [0092.952] FindNextFileW (in: hFindFile=0x381ec0, lpFindFileData=0x31e404 | out: lpFindFileData=0x31e404*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa989d730, ftCreationTime.dwHighDateTime=0x1d2fab4, ftLastAccessTime.dwLowDateTime=0xa989d730, ftLastAccessTime.dwHighDateTime=0x1d2fab4, ftLastWriteTime.dwLowDateTime=0xa989d730, ftLastWriteTime.dwHighDateTime=0x1d2fab4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0092.952] FindNextFileW (in: hFindFile=0x381ec0, lpFindFileData=0x31e404 | out: lpFindFileData=0x31e404*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa989d730, ftCreationTime.dwHighDateTime=0x1d2fab4, ftLastAccessTime.dwLowDateTime=0xa989d730, ftLastAccessTime.dwHighDateTime=0x1d2fab4, ftLastWriteTime.dwLowDateTime=0xa989d730, ftLastWriteTime.dwHighDateTime=0x1d2fab4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="x64", cAlternateFileName="")) returned 1 [0092.952] FindNextFileW (in: hFindFile=0x381ec0, lpFindFileData=0x31e404 | out: lpFindFileData=0x31e404*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa989d730, ftCreationTime.dwHighDateTime=0x1d2fab4, ftLastAccessTime.dwLowDateTime=0xa989d730, ftLastAccessTime.dwHighDateTime=0x1d2fab4, ftLastWriteTime.dwLowDateTime=0xa989d730, ftLastWriteTime.dwHighDateTime=0x1d2fab4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="x64", cAlternateFileName="")) returned 0 [0092.952] FindClose (in: hFindFile=0x381ec0 | out: hFindFile=0x381ec0) returned 1 [0092.952] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e68c) returned 1 [0092.953] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e698) returned 1 [0092.953] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e6cc) returned 1 [0092.953] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Package Cache\\54050A5F8AE7F0C56E553F0090146C17A1D2BF8D\\packages\\Patch", nBufferLength=0x105, lpBuffer=0x31e1d4, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Package Cache\\54050A5F8AE7F0C56E553F0090146C17A1D2BF8D\\packages\\Patch", lpFilePart=0x0) returned 0x58 [0092.953] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Package Cache\\54050A5F8AE7F0C56E553F0090146C17A1D2BF8D\\packages\\Patch\\", nBufferLength=0x105, lpBuffer=0x31e1a8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Package Cache\\54050A5F8AE7F0C56E553F0090146C17A1D2BF8D\\packages\\Patch\\", lpFilePart=0x0) returned 0x59 [0092.953] FindFirstFileW (in: lpFileName="C:\\Users\\All Users\\Package Cache\\54050A5F8AE7F0C56E553F0090146C17A1D2BF8D\\packages\\Patch\\*", lpFindFileData=0x31e3f4 | out: lpFindFileData=0x31e3f4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa989d730, ftCreationTime.dwHighDateTime=0x1d2fab4, ftLastAccessTime.dwLowDateTime=0xa989d730, ftLastAccessTime.dwHighDateTime=0x1d2fab4, ftLastWriteTime.dwLowDateTime=0xa989d730, ftLastWriteTime.dwHighDateTime=0x1d2fab4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x381ec0 [0092.953] FindNextFileW (in: hFindFile=0x381ec0, lpFindFileData=0x31e404 | out: lpFindFileData=0x31e404*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa989d730, ftCreationTime.dwHighDateTime=0x1d2fab4, ftLastAccessTime.dwLowDateTime=0xa989d730, ftLastAccessTime.dwHighDateTime=0x1d2fab4, ftLastWriteTime.dwLowDateTime=0xa989d730, ftLastWriteTime.dwHighDateTime=0x1d2fab4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0092.953] FindNextFileW (in: hFindFile=0x381ec0, lpFindFileData=0x31e404 | out: lpFindFileData=0x31e404*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa989d730, ftCreationTime.dwHighDateTime=0x1d2fab4, ftLastAccessTime.dwLowDateTime=0xa989d730, ftLastAccessTime.dwHighDateTime=0x1d2fab4, ftLastWriteTime.dwLowDateTime=0xa989d730, ftLastWriteTime.dwHighDateTime=0x1d2fab4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="x64", cAlternateFileName="")) returned 1 [0092.953] FindNextFileW (in: hFindFile=0x381ec0, lpFindFileData=0x31e404 | out: lpFindFileData=0x31e404*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0092.953] FindClose (in: hFindFile=0x381ec0 | out: hFindFile=0x381ec0) returned 1 [0092.953] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e68c) returned 1 [0092.953] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e698) returned 1 [0092.953] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e654) returned 1 [0092.953] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Package Cache\\54050A5F8AE7F0C56E553F0090146C17A1D2BF8D\\packages\\Patch\\x64", nBufferLength=0x105, lpBuffer=0x31e15c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Package Cache\\54050A5F8AE7F0C56E553F0090146C17A1D2BF8D\\packages\\Patch\\x64", lpFilePart=0x0) returned 0x5c [0092.953] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Package Cache\\54050A5F8AE7F0C56E553F0090146C17A1D2BF8D\\packages\\Patch\\x64\\", nBufferLength=0x105, lpBuffer=0x31e130, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Package Cache\\54050A5F8AE7F0C56E553F0090146C17A1D2BF8D\\packages\\Patch\\x64\\", lpFilePart=0x0) returned 0x5d [0092.953] FindFirstFileW (in: lpFileName="C:\\Users\\All Users\\Package Cache\\54050A5F8AE7F0C56E553F0090146C17A1D2BF8D\\packages\\Patch\\x64\\*", lpFindFileData=0x31e37c | out: lpFindFileData=0x31e37c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa989d730, ftCreationTime.dwHighDateTime=0x1d2fab4, ftLastAccessTime.dwLowDateTime=0xa989d730, ftLastAccessTime.dwHighDateTime=0x1d2fab4, ftLastWriteTime.dwLowDateTime=0xa989d730, ftLastWriteTime.dwHighDateTime=0x1d2fab4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x381ec0 [0092.953] FindNextFileW (in: hFindFile=0x381ec0, lpFindFileData=0x31e38c | out: lpFindFileData=0x31e38c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa989d730, ftCreationTime.dwHighDateTime=0x1d2fab4, ftLastAccessTime.dwLowDateTime=0xa989d730, ftLastAccessTime.dwHighDateTime=0x1d2fab4, ftLastWriteTime.dwLowDateTime=0xa989d730, ftLastWriteTime.dwHighDateTime=0x1d2fab4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0092.954] FindNextFileW (in: hFindFile=0x381ec0, lpFindFileData=0x31e38c | out: lpFindFileData=0x31e38c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9ab54b00, ftCreationTime.dwHighDateTime=0x1d1a02d, ftLastAccessTime.dwLowDateTime=0x9ab54b00, ftLastAccessTime.dwHighDateTime=0x1d1a02d, ftLastWriteTime.dwLowDateTime=0x9ab54b00, ftLastWriteTime.dwHighDateTime=0x1d1a02d, nFileSizeHigh=0x0, nFileSizeLow=0xfc93c, dwReserved0=0x0, dwReserved1=0x0, cFileName="Windows6.1-KB2999226-x64.msu", cAlternateFileName="WINDOW~1.MSU")) returned 1 [0092.954] FindNextFileW (in: hFindFile=0x381ec0, lpFindFileData=0x31e38c | out: lpFindFileData=0x31e38c*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0092.954] FindClose (in: hFindFile=0x381ec0 | out: hFindFile=0x381ec0) returned 1 [0092.954] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e614) returned 1 [0092.954] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e620) returned 1 [0092.954] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e654) returned 1 [0092.954] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Package Cache\\54050A5F8AE7F0C56E553F0090146C17A1D2BF8D\\packages\\Patch\\x64", nBufferLength=0x105, lpBuffer=0x31e15c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Package Cache\\54050A5F8AE7F0C56E553F0090146C17A1D2BF8D\\packages\\Patch\\x64", lpFilePart=0x0) returned 0x5c [0092.954] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Package Cache\\54050A5F8AE7F0C56E553F0090146C17A1D2BF8D\\packages\\Patch\\x64\\", nBufferLength=0x105, lpBuffer=0x31e130, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Package Cache\\54050A5F8AE7F0C56E553F0090146C17A1D2BF8D\\packages\\Patch\\x64\\", lpFilePart=0x0) returned 0x5d [0092.954] FindFirstFileW (in: lpFileName="C:\\Users\\All Users\\Package Cache\\54050A5F8AE7F0C56E553F0090146C17A1D2BF8D\\packages\\Patch\\x64\\*", lpFindFileData=0x31e37c | out: lpFindFileData=0x31e37c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa989d730, ftCreationTime.dwHighDateTime=0x1d2fab4, ftLastAccessTime.dwLowDateTime=0xa989d730, ftLastAccessTime.dwHighDateTime=0x1d2fab4, ftLastWriteTime.dwLowDateTime=0xa989d730, ftLastWriteTime.dwHighDateTime=0x1d2fab4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x381ec0 [0092.954] FindNextFileW (in: hFindFile=0x381ec0, lpFindFileData=0x31e38c | out: lpFindFileData=0x31e38c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa989d730, ftCreationTime.dwHighDateTime=0x1d2fab4, ftLastAccessTime.dwLowDateTime=0xa989d730, ftLastAccessTime.dwHighDateTime=0x1d2fab4, ftLastWriteTime.dwLowDateTime=0xa989d730, ftLastWriteTime.dwHighDateTime=0x1d2fab4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0092.954] FindNextFileW (in: hFindFile=0x381ec0, lpFindFileData=0x31e38c | out: lpFindFileData=0x31e38c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9ab54b00, ftCreationTime.dwHighDateTime=0x1d1a02d, ftLastAccessTime.dwLowDateTime=0x9ab54b00, ftLastAccessTime.dwHighDateTime=0x1d1a02d, ftLastWriteTime.dwLowDateTime=0x9ab54b00, ftLastWriteTime.dwHighDateTime=0x1d1a02d, nFileSizeHigh=0x0, nFileSizeLow=0xfc93c, dwReserved0=0x0, dwReserved1=0x0, cFileName="Windows6.1-KB2999226-x64.msu", cAlternateFileName="WINDOW~1.MSU")) returned 1 [0092.954] FindNextFileW (in: hFindFile=0x381ec0, lpFindFileData=0x31e38c | out: lpFindFileData=0x31e38c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9ab54b00, ftCreationTime.dwHighDateTime=0x1d1a02d, ftLastAccessTime.dwLowDateTime=0x9ab54b00, ftLastAccessTime.dwHighDateTime=0x1d1a02d, ftLastWriteTime.dwLowDateTime=0x9ab54b00, ftLastWriteTime.dwHighDateTime=0x1d1a02d, nFileSizeHigh=0x0, nFileSizeLow=0xfc93c, dwReserved0=0x0, dwReserved1=0x0, cFileName="Windows6.1-KB2999226-x64.msu", cAlternateFileName="WINDOW~1.MSU")) returned 0 [0092.954] FindClose (in: hFindFile=0x381ec0 | out: hFindFile=0x381ec0) returned 1 [0092.954] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e614) returned 1 [0092.954] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e620) returned 1 [0092.954] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e7bc) returned 1 [0092.955] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Package Cache\\{13A4EE12-23EA-3371-91EE-EFB36DDFFF3E}v12.0.21005", nBufferLength=0x105, lpBuffer=0x31e2c4, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Package Cache\\{13A4EE12-23EA-3371-91EE-EFB36DDFFF3E}v12.0.21005", lpFilePart=0x0) returned 0x52 [0092.955] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Package Cache\\{13A4EE12-23EA-3371-91EE-EFB36DDFFF3E}v12.0.21005\\", nBufferLength=0x105, lpBuffer=0x31e298, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Package Cache\\{13A4EE12-23EA-3371-91EE-EFB36DDFFF3E}v12.0.21005\\", lpFilePart=0x0) returned 0x53 [0092.955] FindFirstFileW (in: lpFileName="C:\\Users\\All Users\\Package Cache\\{13A4EE12-23EA-3371-91EE-EFB36DDFFF3E}v12.0.21005\\*", lpFindFileData=0x31e4e4 | out: lpFindFileData=0x31e4e4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xcb49460, ftCreationTime.dwHighDateTime=0x1d2e621, ftLastAccessTime.dwLowDateTime=0xcb95720, ftLastAccessTime.dwHighDateTime=0x1d2e621, ftLastWriteTime.dwLowDateTime=0xcb95720, ftLastWriteTime.dwHighDateTime=0x1d2e621, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x381ec0 [0092.955] FindNextFileW (in: hFindFile=0x381ec0, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xcb49460, ftCreationTime.dwHighDateTime=0x1d2e621, ftLastAccessTime.dwLowDateTime=0xcb95720, ftLastAccessTime.dwHighDateTime=0x1d2e621, ftLastWriteTime.dwLowDateTime=0xcb95720, ftLastWriteTime.dwHighDateTime=0x1d2e621, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0092.955] FindNextFileW (in: hFindFile=0x381ec0, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xcb95720, ftCreationTime.dwHighDateTime=0x1d2e621, ftLastAccessTime.dwLowDateTime=0xcb95720, ftLastAccessTime.dwHighDateTime=0x1d2e621, ftLastWriteTime.dwLowDateTime=0xcb95720, ftLastWriteTime.dwHighDateTime=0x1d2e621, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="packages", cAlternateFileName="")) returned 1 [0092.955] FindNextFileW (in: hFindFile=0x381ec0, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xcb95720, ftCreationTime.dwHighDateTime=0x1d2e621, ftLastAccessTime.dwLowDateTime=0xcb95720, ftLastAccessTime.dwHighDateTime=0x1d2e621, ftLastWriteTime.dwLowDateTime=0xcb95720, ftLastWriteTime.dwHighDateTime=0x1d2e621, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="packages", cAlternateFileName="")) returned 0 [0092.955] FindClose (in: hFindFile=0x381ec0 | out: hFindFile=0x381ec0) returned 1 [0092.955] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e77c) returned 1 [0092.955] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e788) returned 1 [0092.955] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e7bc) returned 1 [0092.955] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Package Cache\\{13A4EE12-23EA-3371-91EE-EFB36DDFFF3E}v12.0.21005", nBufferLength=0x105, lpBuffer=0x31e2c4, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Package Cache\\{13A4EE12-23EA-3371-91EE-EFB36DDFFF3E}v12.0.21005", lpFilePart=0x0) returned 0x52 [0092.955] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Package Cache\\{13A4EE12-23EA-3371-91EE-EFB36DDFFF3E}v12.0.21005\\", nBufferLength=0x105, lpBuffer=0x31e298, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Package Cache\\{13A4EE12-23EA-3371-91EE-EFB36DDFFF3E}v12.0.21005\\", lpFilePart=0x0) returned 0x53 [0092.955] FindFirstFileW (in: lpFileName="C:\\Users\\All Users\\Package Cache\\{13A4EE12-23EA-3371-91EE-EFB36DDFFF3E}v12.0.21005\\*", lpFindFileData=0x31e4e4 | out: lpFindFileData=0x31e4e4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xcb49460, ftCreationTime.dwHighDateTime=0x1d2e621, ftLastAccessTime.dwLowDateTime=0xcb95720, ftLastAccessTime.dwHighDateTime=0x1d2e621, ftLastWriteTime.dwLowDateTime=0xcb95720, ftLastWriteTime.dwHighDateTime=0x1d2e621, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x381ec0 [0092.955] FindNextFileW (in: hFindFile=0x381ec0, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xcb49460, ftCreationTime.dwHighDateTime=0x1d2e621, ftLastAccessTime.dwLowDateTime=0xcb95720, ftLastAccessTime.dwHighDateTime=0x1d2e621, ftLastWriteTime.dwLowDateTime=0xcb95720, ftLastWriteTime.dwHighDateTime=0x1d2e621, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0092.956] FindNextFileW (in: hFindFile=0x381ec0, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xcb95720, ftCreationTime.dwHighDateTime=0x1d2e621, ftLastAccessTime.dwLowDateTime=0xcb95720, ftLastAccessTime.dwHighDateTime=0x1d2e621, ftLastWriteTime.dwLowDateTime=0xcb95720, ftLastWriteTime.dwHighDateTime=0x1d2e621, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="packages", cAlternateFileName="")) returned 1 [0092.956] FindNextFileW (in: hFindFile=0x381ec0, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0092.956] FindClose (in: hFindFile=0x381ec0 | out: hFindFile=0x381ec0) returned 1 [0092.956] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e77c) returned 1 [0092.956] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e788) returned 1 [0092.956] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e744) returned 1 [0092.956] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Package Cache\\{13A4EE12-23EA-3371-91EE-EFB36DDFFF3E}v12.0.21005\\packages", nBufferLength=0x105, lpBuffer=0x31e24c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Package Cache\\{13A4EE12-23EA-3371-91EE-EFB36DDFFF3E}v12.0.21005\\packages", lpFilePart=0x0) returned 0x5b [0092.956] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Package Cache\\{13A4EE12-23EA-3371-91EE-EFB36DDFFF3E}v12.0.21005\\packages\\", nBufferLength=0x105, lpBuffer=0x31e220, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Package Cache\\{13A4EE12-23EA-3371-91EE-EFB36DDFFF3E}v12.0.21005\\packages\\", lpFilePart=0x0) returned 0x5c [0092.956] FindFirstFileW (in: lpFileName="C:\\Users\\All Users\\Package Cache\\{13A4EE12-23EA-3371-91EE-EFB36DDFFF3E}v12.0.21005\\packages\\*", lpFindFileData=0x31e46c | out: lpFindFileData=0x31e46c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xcb95720, ftCreationTime.dwHighDateTime=0x1d2e621, ftLastAccessTime.dwLowDateTime=0xcb95720, ftLastAccessTime.dwHighDateTime=0x1d2e621, ftLastWriteTime.dwLowDateTime=0xcb95720, ftLastWriteTime.dwHighDateTime=0x1d2e621, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x381ec0 [0092.956] FindNextFileW (in: hFindFile=0x381ec0, lpFindFileData=0x31e47c | out: lpFindFileData=0x31e47c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xcb95720, ftCreationTime.dwHighDateTime=0x1d2e621, ftLastAccessTime.dwLowDateTime=0xcb95720, ftLastAccessTime.dwHighDateTime=0x1d2e621, ftLastWriteTime.dwLowDateTime=0xcb95720, ftLastWriteTime.dwHighDateTime=0x1d2e621, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0092.956] FindNextFileW (in: hFindFile=0x381ec0, lpFindFileData=0x31e47c | out: lpFindFileData=0x31e47c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xcb95720, ftCreationTime.dwHighDateTime=0x1d2e621, ftLastAccessTime.dwLowDateTime=0xcbbb880, ftLastAccessTime.dwHighDateTime=0x1d2e621, ftLastWriteTime.dwLowDateTime=0xcbbb880, ftLastWriteTime.dwHighDateTime=0x1d2e621, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="vcRuntimeMinimum_x86", cAlternateFileName="VCRUNT~1")) returned 1 [0092.956] FindNextFileW (in: hFindFile=0x381ec0, lpFindFileData=0x31e47c | out: lpFindFileData=0x31e47c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xcb95720, ftCreationTime.dwHighDateTime=0x1d2e621, ftLastAccessTime.dwLowDateTime=0xcbbb880, ftLastAccessTime.dwHighDateTime=0x1d2e621, ftLastWriteTime.dwLowDateTime=0xcbbb880, ftLastWriteTime.dwHighDateTime=0x1d2e621, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="vcRuntimeMinimum_x86", cAlternateFileName="VCRUNT~1")) returned 0 [0092.956] FindClose (in: hFindFile=0x381ec0 | out: hFindFile=0x381ec0) returned 1 [0092.956] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e704) returned 1 [0092.956] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e710) returned 1 [0092.956] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e744) returned 1 [0092.956] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Package Cache\\{13A4EE12-23EA-3371-91EE-EFB36DDFFF3E}v12.0.21005\\packages", nBufferLength=0x105, lpBuffer=0x31e24c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Package Cache\\{13A4EE12-23EA-3371-91EE-EFB36DDFFF3E}v12.0.21005\\packages", lpFilePart=0x0) returned 0x5b [0092.956] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Package Cache\\{13A4EE12-23EA-3371-91EE-EFB36DDFFF3E}v12.0.21005\\packages\\", nBufferLength=0x105, lpBuffer=0x31e220, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Package Cache\\{13A4EE12-23EA-3371-91EE-EFB36DDFFF3E}v12.0.21005\\packages\\", lpFilePart=0x0) returned 0x5c [0092.956] FindFirstFileW (in: lpFileName="C:\\Users\\All Users\\Package Cache\\{13A4EE12-23EA-3371-91EE-EFB36DDFFF3E}v12.0.21005\\packages\\*", lpFindFileData=0x31e46c | out: lpFindFileData=0x31e46c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xcb95720, ftCreationTime.dwHighDateTime=0x1d2e621, ftLastAccessTime.dwLowDateTime=0xcb95720, ftLastAccessTime.dwHighDateTime=0x1d2e621, ftLastWriteTime.dwLowDateTime=0xcb95720, ftLastWriteTime.dwHighDateTime=0x1d2e621, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x381ec0 [0092.957] FindNextFileW (in: hFindFile=0x381ec0, lpFindFileData=0x31e47c | out: lpFindFileData=0x31e47c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xcb95720, ftCreationTime.dwHighDateTime=0x1d2e621, ftLastAccessTime.dwLowDateTime=0xcb95720, ftLastAccessTime.dwHighDateTime=0x1d2e621, ftLastWriteTime.dwLowDateTime=0xcb95720, ftLastWriteTime.dwHighDateTime=0x1d2e621, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0092.957] FindNextFileW (in: hFindFile=0x381ec0, lpFindFileData=0x31e47c | out: lpFindFileData=0x31e47c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xcb95720, ftCreationTime.dwHighDateTime=0x1d2e621, ftLastAccessTime.dwLowDateTime=0xcbbb880, ftLastAccessTime.dwHighDateTime=0x1d2e621, ftLastWriteTime.dwLowDateTime=0xcbbb880, ftLastWriteTime.dwHighDateTime=0x1d2e621, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="vcRuntimeMinimum_x86", cAlternateFileName="VCRUNT~1")) returned 1 [0092.957] FindNextFileW (in: hFindFile=0x381ec0, lpFindFileData=0x31e47c | out: lpFindFileData=0x31e47c*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0092.957] FindClose (in: hFindFile=0x381ec0 | out: hFindFile=0x381ec0) returned 1 [0092.957] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e704) returned 1 [0092.957] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e710) returned 1 [0092.957] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e6cc) returned 1 [0092.957] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Package Cache\\{13A4EE12-23EA-3371-91EE-EFB36DDFFF3E}v12.0.21005\\packages\\vcRuntimeMinimum_x86", nBufferLength=0x105, lpBuffer=0x31e1d4, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Package Cache\\{13A4EE12-23EA-3371-91EE-EFB36DDFFF3E}v12.0.21005\\packages\\vcRuntimeMinimum_x86", lpFilePart=0x0) returned 0x70 [0092.957] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Package Cache\\{13A4EE12-23EA-3371-91EE-EFB36DDFFF3E}v12.0.21005\\packages\\vcRuntimeMinimum_x86\\", nBufferLength=0x105, lpBuffer=0x31e1a8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Package Cache\\{13A4EE12-23EA-3371-91EE-EFB36DDFFF3E}v12.0.21005\\packages\\vcRuntimeMinimum_x86\\", lpFilePart=0x0) returned 0x71 [0092.957] FindFirstFileW (in: lpFileName="C:\\Users\\All Users\\Package Cache\\{13A4EE12-23EA-3371-91EE-EFB36DDFFF3E}v12.0.21005\\packages\\vcRuntimeMinimum_x86\\*", lpFindFileData=0x31e3f4 | out: lpFindFileData=0x31e3f4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xcb95720, ftCreationTime.dwHighDateTime=0x1d2e621, ftLastAccessTime.dwLowDateTime=0xcbbb880, ftLastAccessTime.dwHighDateTime=0x1d2e621, ftLastWriteTime.dwLowDateTime=0xcbbb880, ftLastWriteTime.dwHighDateTime=0x1d2e621, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x381ec0 [0092.957] FindNextFileW (in: hFindFile=0x381ec0, lpFindFileData=0x31e404 | out: lpFindFileData=0x31e404*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xcb95720, ftCreationTime.dwHighDateTime=0x1d2e621, ftLastAccessTime.dwLowDateTime=0xcbbb880, ftLastAccessTime.dwHighDateTime=0x1d2e621, ftLastWriteTime.dwLowDateTime=0xcbbb880, ftLastWriteTime.dwHighDateTime=0x1d2e621, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0092.957] FindNextFileW (in: hFindFile=0x381ec0, lpFindFileData=0x31e404 | out: lpFindFileData=0x31e404*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x50cc6500, ftCreationTime.dwHighDateTime=0x1cf3dd3, ftLastAccessTime.dwLowDateTime=0x50cc6500, ftLastAccessTime.dwHighDateTime=0x1cf3dd3, ftLastWriteTime.dwLowDateTime=0x50cc6500, ftLastWriteTime.dwHighDateTime=0x1cf3dd3, nFileSizeHigh=0x0, nFileSizeLow=0xf36be, dwReserved0=0x0, dwReserved1=0x0, cFileName="cab1.cab", cAlternateFileName="")) returned 1 [0092.957] FindNextFileW (in: hFindFile=0x381ec0, lpFindFileData=0x31e404 | out: lpFindFileData=0x31e404*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x50cc6500, ftCreationTime.dwHighDateTime=0x1cf3dd3, ftLastAccessTime.dwLowDateTime=0x50cc6500, ftLastAccessTime.dwHighDateTime=0x1cf3dd3, ftLastWriteTime.dwLowDateTime=0x50cc6500, ftLastWriteTime.dwHighDateTime=0x1cf3dd3, nFileSizeHigh=0x0, nFileSizeLow=0x23000, dwReserved0=0x0, dwReserved1=0x0, cFileName="vc_runtimeMinimum_x86.msi", cAlternateFileName="VC_RUN~1.MSI")) returned 1 [0092.957] FindNextFileW (in: hFindFile=0x381ec0, lpFindFileData=0x31e404 | out: lpFindFileData=0x31e404*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0092.957] FindClose (in: hFindFile=0x381ec0 | out: hFindFile=0x381ec0) returned 1 [0092.957] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e68c) returned 1 [0092.957] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e698) returned 1 [0092.957] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e6cc) returned 1 [0092.957] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Package Cache\\{13A4EE12-23EA-3371-91EE-EFB36DDFFF3E}v12.0.21005\\packages\\vcRuntimeMinimum_x86", nBufferLength=0x105, lpBuffer=0x31e1d4, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Package Cache\\{13A4EE12-23EA-3371-91EE-EFB36DDFFF3E}v12.0.21005\\packages\\vcRuntimeMinimum_x86", lpFilePart=0x0) returned 0x70 [0092.958] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Package Cache\\{13A4EE12-23EA-3371-91EE-EFB36DDFFF3E}v12.0.21005\\packages\\vcRuntimeMinimum_x86\\", nBufferLength=0x105, lpBuffer=0x31e1a8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Package Cache\\{13A4EE12-23EA-3371-91EE-EFB36DDFFF3E}v12.0.21005\\packages\\vcRuntimeMinimum_x86\\", lpFilePart=0x0) returned 0x71 [0092.958] FindFirstFileW (in: lpFileName="C:\\Users\\All Users\\Package Cache\\{13A4EE12-23EA-3371-91EE-EFB36DDFFF3E}v12.0.21005\\packages\\vcRuntimeMinimum_x86\\*", lpFindFileData=0x31e3f4 | out: lpFindFileData=0x31e3f4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xcb95720, ftCreationTime.dwHighDateTime=0x1d2e621, ftLastAccessTime.dwLowDateTime=0xcbbb880, ftLastAccessTime.dwHighDateTime=0x1d2e621, ftLastWriteTime.dwLowDateTime=0xcbbb880, ftLastWriteTime.dwHighDateTime=0x1d2e621, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x381ec0 [0092.958] FindNextFileW (in: hFindFile=0x381ec0, lpFindFileData=0x31e404 | out: lpFindFileData=0x31e404*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xcb95720, ftCreationTime.dwHighDateTime=0x1d2e621, ftLastAccessTime.dwLowDateTime=0xcbbb880, ftLastAccessTime.dwHighDateTime=0x1d2e621, ftLastWriteTime.dwLowDateTime=0xcbbb880, ftLastWriteTime.dwHighDateTime=0x1d2e621, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0092.958] FindNextFileW (in: hFindFile=0x381ec0, lpFindFileData=0x31e404 | out: lpFindFileData=0x31e404*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x50cc6500, ftCreationTime.dwHighDateTime=0x1cf3dd3, ftLastAccessTime.dwLowDateTime=0x50cc6500, ftLastAccessTime.dwHighDateTime=0x1cf3dd3, ftLastWriteTime.dwLowDateTime=0x50cc6500, ftLastWriteTime.dwHighDateTime=0x1cf3dd3, nFileSizeHigh=0x0, nFileSizeLow=0xf36be, dwReserved0=0x0, dwReserved1=0x0, cFileName="cab1.cab", cAlternateFileName="")) returned 1 [0092.958] FindNextFileW (in: hFindFile=0x381ec0, lpFindFileData=0x31e404 | out: lpFindFileData=0x31e404*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x50cc6500, ftCreationTime.dwHighDateTime=0x1cf3dd3, ftLastAccessTime.dwLowDateTime=0x50cc6500, ftLastAccessTime.dwHighDateTime=0x1cf3dd3, ftLastWriteTime.dwLowDateTime=0x50cc6500, ftLastWriteTime.dwHighDateTime=0x1cf3dd3, nFileSizeHigh=0x0, nFileSizeLow=0x23000, dwReserved0=0x0, dwReserved1=0x0, cFileName="vc_runtimeMinimum_x86.msi", cAlternateFileName="VC_RUN~1.MSI")) returned 1 [0092.958] FindNextFileW (in: hFindFile=0x381ec0, lpFindFileData=0x31e404 | out: lpFindFileData=0x31e404*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x50cc6500, ftCreationTime.dwHighDateTime=0x1cf3dd3, ftLastAccessTime.dwLowDateTime=0x50cc6500, ftLastAccessTime.dwHighDateTime=0x1cf3dd3, ftLastWriteTime.dwLowDateTime=0x50cc6500, ftLastWriteTime.dwHighDateTime=0x1cf3dd3, nFileSizeHigh=0x0, nFileSizeLow=0x23000, dwReserved0=0x0, dwReserved1=0x0, cFileName="vc_runtimeMinimum_x86.msi", cAlternateFileName="VC_RUN~1.MSI")) returned 0 [0092.958] FindClose (in: hFindFile=0x381ec0 | out: hFindFile=0x381ec0) returned 1 [0092.958] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e68c) returned 1 [0092.958] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e698) returned 1 [0092.958] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e7bc) returned 1 [0092.958] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Package Cache\\{33d1fd90-4274-48a1-9bc1-97e33d9c2d6f}", nBufferLength=0x105, lpBuffer=0x31e2c4, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Package Cache\\{33d1fd90-4274-48a1-9bc1-97e33d9c2d6f}", lpFilePart=0x0) returned 0x47 [0092.958] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Package Cache\\{33d1fd90-4274-48a1-9bc1-97e33d9c2d6f}\\", nBufferLength=0x105, lpBuffer=0x31e298, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Package Cache\\{33d1fd90-4274-48a1-9bc1-97e33d9c2d6f}\\", lpFilePart=0x0) returned 0x48 [0092.958] FindFirstFileW (in: lpFileName="C:\\Users\\All Users\\Package Cache\\{33d1fd90-4274-48a1-9bc1-97e33d9c2d6f}\\*", lpFindFileData=0x31e4e4 | out: lpFindFileData=0x31e4e4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xecd0b340, ftCreationTime.dwHighDateTime=0x1d2e620, ftLastAccessTime.dwLowDateTime=0xecd314a0, ftLastAccessTime.dwHighDateTime=0x1d2e620, ftLastWriteTime.dwLowDateTime=0xecd314a0, ftLastWriteTime.dwHighDateTime=0x1d2e620, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x381ec0 [0092.958] FindNextFileW (in: hFindFile=0x381ec0, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xecd0b340, ftCreationTime.dwHighDateTime=0x1d2e620, ftLastAccessTime.dwLowDateTime=0xecd314a0, ftLastAccessTime.dwHighDateTime=0x1d2e620, ftLastWriteTime.dwLowDateTime=0xecd314a0, ftLastWriteTime.dwHighDateTime=0x1d2e620, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0092.958] FindNextFileW (in: hFindFile=0x381ec0, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xecd314a0, ftCreationTime.dwHighDateTime=0x1d2e620, ftLastAccessTime.dwLowDateTime=0xecd314a0, ftLastAccessTime.dwHighDateTime=0x1d2e620, ftLastWriteTime.dwLowDateTime=0xf08b3aa0, ftLastWriteTime.dwHighDateTime=0x1d2e620, nFileSizeHigh=0x0, nFileSizeLow=0x28e, dwReserved0=0x0, dwReserved1=0x0, cFileName="state.rsm", cAlternateFileName="")) returned 1 [0092.958] FindNextFileW (in: hFindFile=0x381ec0, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xecd0b340, ftCreationTime.dwHighDateTime=0x1d2e620, ftLastAccessTime.dwLowDateTime=0xecd0b340, ftLastAccessTime.dwHighDateTime=0x1d2e620, ftLastWriteTime.dwLowDateTime=0xd3ea4f80, ftLastWriteTime.dwHighDateTime=0x1d2e620, nFileSizeHigh=0x0, nFileSizeLow=0x6f428, dwReserved0=0x0, dwReserved1=0x0, cFileName="vcredist_x86.exe", cAlternateFileName="VCREDI~1.EXE")) returned 1 [0092.958] FindNextFileW (in: hFindFile=0x381ec0, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0092.958] FindClose (in: hFindFile=0x381ec0 | out: hFindFile=0x381ec0) returned 1 [0092.959] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e77c) returned 1 [0092.959] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e788) returned 1 [0092.959] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e7bc) returned 1 [0092.959] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Package Cache\\{33d1fd90-4274-48a1-9bc1-97e33d9c2d6f}", nBufferLength=0x105, lpBuffer=0x31e2c4, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Package Cache\\{33d1fd90-4274-48a1-9bc1-97e33d9c2d6f}", lpFilePart=0x0) returned 0x47 [0092.959] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Package Cache\\{33d1fd90-4274-48a1-9bc1-97e33d9c2d6f}\\", nBufferLength=0x105, lpBuffer=0x31e298, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Package Cache\\{33d1fd90-4274-48a1-9bc1-97e33d9c2d6f}\\", lpFilePart=0x0) returned 0x48 [0092.959] FindFirstFileW (in: lpFileName="C:\\Users\\All Users\\Package Cache\\{33d1fd90-4274-48a1-9bc1-97e33d9c2d6f}\\*", lpFindFileData=0x31e4e4 | out: lpFindFileData=0x31e4e4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xecd0b340, ftCreationTime.dwHighDateTime=0x1d2e620, ftLastAccessTime.dwLowDateTime=0xecd314a0, ftLastAccessTime.dwHighDateTime=0x1d2e620, ftLastWriteTime.dwLowDateTime=0xecd314a0, ftLastWriteTime.dwHighDateTime=0x1d2e620, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x381ec0 [0092.959] FindNextFileW (in: hFindFile=0x381ec0, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xecd0b340, ftCreationTime.dwHighDateTime=0x1d2e620, ftLastAccessTime.dwLowDateTime=0xecd314a0, ftLastAccessTime.dwHighDateTime=0x1d2e620, ftLastWriteTime.dwLowDateTime=0xecd314a0, ftLastWriteTime.dwHighDateTime=0x1d2e620, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0092.959] FindNextFileW (in: hFindFile=0x381ec0, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xecd314a0, ftCreationTime.dwHighDateTime=0x1d2e620, ftLastAccessTime.dwLowDateTime=0xecd314a0, ftLastAccessTime.dwHighDateTime=0x1d2e620, ftLastWriteTime.dwLowDateTime=0xf08b3aa0, ftLastWriteTime.dwHighDateTime=0x1d2e620, nFileSizeHigh=0x0, nFileSizeLow=0x28e, dwReserved0=0x0, dwReserved1=0x0, cFileName="state.rsm", cAlternateFileName="")) returned 1 [0092.959] FindNextFileW (in: hFindFile=0x381ec0, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xecd0b340, ftCreationTime.dwHighDateTime=0x1d2e620, ftLastAccessTime.dwLowDateTime=0xecd0b340, ftLastAccessTime.dwHighDateTime=0x1d2e620, ftLastWriteTime.dwLowDateTime=0xd3ea4f80, ftLastWriteTime.dwHighDateTime=0x1d2e620, nFileSizeHigh=0x0, nFileSizeLow=0x6f428, dwReserved0=0x0, dwReserved1=0x0, cFileName="vcredist_x86.exe", cAlternateFileName="VCREDI~1.EXE")) returned 1 [0092.959] FindNextFileW (in: hFindFile=0x381ec0, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xecd0b340, ftCreationTime.dwHighDateTime=0x1d2e620, ftLastAccessTime.dwLowDateTime=0xecd0b340, ftLastAccessTime.dwHighDateTime=0x1d2e620, ftLastWriteTime.dwLowDateTime=0xd3ea4f80, ftLastWriteTime.dwHighDateTime=0x1d2e620, nFileSizeHigh=0x0, nFileSizeLow=0x6f428, dwReserved0=0x0, dwReserved1=0x0, cFileName="vcredist_x86.exe", cAlternateFileName="VCREDI~1.EXE")) returned 0 [0092.959] FindClose (in: hFindFile=0x381ec0 | out: hFindFile=0x381ec0) returned 1 [0092.959] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e77c) returned 1 [0092.959] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e788) returned 1 [0092.959] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e7bc) returned 1 [0092.959] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Package Cache\\{37B8F9C7-03FB-3253-8781-2517C99D7C00}v11.0.61030", nBufferLength=0x105, lpBuffer=0x31e2c4, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Package Cache\\{37B8F9C7-03FB-3253-8781-2517C99D7C00}v11.0.61030", lpFilePart=0x0) returned 0x52 [0092.959] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Package Cache\\{37B8F9C7-03FB-3253-8781-2517C99D7C00}v11.0.61030\\", nBufferLength=0x105, lpBuffer=0x31e298, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Package Cache\\{37B8F9C7-03FB-3253-8781-2517C99D7C00}v11.0.61030\\", lpFilePart=0x0) returned 0x53 [0092.959] FindFirstFileW (in: lpFileName="C:\\Users\\All Users\\Package Cache\\{37B8F9C7-03FB-3253-8781-2517C99D7C00}v11.0.61030\\*", lpFindFileData=0x31e4e4 | out: lpFindFileData=0x31e4e4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfabe4080, ftCreationTime.dwHighDateTime=0x1d2e620, ftLastAccessTime.dwLowDateTime=0xfabe4080, ftLastAccessTime.dwHighDateTime=0x1d2e620, ftLastWriteTime.dwLowDateTime=0xfabe4080, ftLastWriteTime.dwHighDateTime=0x1d2e620, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x381ec0 [0092.959] FindNextFileW (in: hFindFile=0x381ec0, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfabe4080, ftCreationTime.dwHighDateTime=0x1d2e620, ftLastAccessTime.dwLowDateTime=0xfabe4080, ftLastAccessTime.dwHighDateTime=0x1d2e620, ftLastWriteTime.dwLowDateTime=0xfabe4080, ftLastWriteTime.dwHighDateTime=0x1d2e620, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0092.960] FindNextFileW (in: hFindFile=0x381ec0, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfabe4080, ftCreationTime.dwHighDateTime=0x1d2e620, ftLastAccessTime.dwLowDateTime=0xfabe4080, ftLastAccessTime.dwHighDateTime=0x1d2e620, ftLastWriteTime.dwLowDateTime=0xfabe4080, ftLastWriteTime.dwHighDateTime=0x1d2e620, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="packages", cAlternateFileName="")) returned 1 [0092.960] FindNextFileW (in: hFindFile=0x381ec0, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfabe4080, ftCreationTime.dwHighDateTime=0x1d2e620, ftLastAccessTime.dwLowDateTime=0xfabe4080, ftLastAccessTime.dwHighDateTime=0x1d2e620, ftLastWriteTime.dwLowDateTime=0xfabe4080, ftLastWriteTime.dwHighDateTime=0x1d2e620, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="packages", cAlternateFileName="")) returned 0 [0092.960] FindClose (in: hFindFile=0x381ec0 | out: hFindFile=0x381ec0) returned 1 [0092.960] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e77c) returned 1 [0092.960] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e788) returned 1 [0092.960] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e7bc) returned 1 [0092.960] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Package Cache\\{37B8F9C7-03FB-3253-8781-2517C99D7C00}v11.0.61030", nBufferLength=0x105, lpBuffer=0x31e2c4, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Package Cache\\{37B8F9C7-03FB-3253-8781-2517C99D7C00}v11.0.61030", lpFilePart=0x0) returned 0x52 [0092.960] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Package Cache\\{37B8F9C7-03FB-3253-8781-2517C99D7C00}v11.0.61030\\", nBufferLength=0x105, lpBuffer=0x31e298, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Package Cache\\{37B8F9C7-03FB-3253-8781-2517C99D7C00}v11.0.61030\\", lpFilePart=0x0) returned 0x53 [0092.960] FindFirstFileW (in: lpFileName="C:\\Users\\All Users\\Package Cache\\{37B8F9C7-03FB-3253-8781-2517C99D7C00}v11.0.61030\\*", lpFindFileData=0x31e4e4 | out: lpFindFileData=0x31e4e4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfabe4080, ftCreationTime.dwHighDateTime=0x1d2e620, ftLastAccessTime.dwLowDateTime=0xfabe4080, ftLastAccessTime.dwHighDateTime=0x1d2e620, ftLastWriteTime.dwLowDateTime=0xfabe4080, ftLastWriteTime.dwHighDateTime=0x1d2e620, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x381ec0 [0092.960] FindNextFileW (in: hFindFile=0x381ec0, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfabe4080, ftCreationTime.dwHighDateTime=0x1d2e620, ftLastAccessTime.dwLowDateTime=0xfabe4080, ftLastAccessTime.dwHighDateTime=0x1d2e620, ftLastWriteTime.dwLowDateTime=0xfabe4080, ftLastWriteTime.dwHighDateTime=0x1d2e620, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0092.960] FindNextFileW (in: hFindFile=0x381ec0, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfabe4080, ftCreationTime.dwHighDateTime=0x1d2e620, ftLastAccessTime.dwLowDateTime=0xfabe4080, ftLastAccessTime.dwHighDateTime=0x1d2e620, ftLastWriteTime.dwLowDateTime=0xfabe4080, ftLastWriteTime.dwHighDateTime=0x1d2e620, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="packages", cAlternateFileName="")) returned 1 [0092.960] FindNextFileW (in: hFindFile=0x381ec0, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0092.960] FindClose (in: hFindFile=0x381ec0 | out: hFindFile=0x381ec0) returned 1 [0092.960] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e77c) returned 1 [0092.960] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e788) returned 1 [0092.960] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e744) returned 1 [0092.960] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Package Cache\\{37B8F9C7-03FB-3253-8781-2517C99D7C00}v11.0.61030\\packages", nBufferLength=0x105, lpBuffer=0x31e24c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Package Cache\\{37B8F9C7-03FB-3253-8781-2517C99D7C00}v11.0.61030\\packages", lpFilePart=0x0) returned 0x5b [0092.960] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Package Cache\\{37B8F9C7-03FB-3253-8781-2517C99D7C00}v11.0.61030\\packages\\", nBufferLength=0x105, lpBuffer=0x31e220, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Package Cache\\{37B8F9C7-03FB-3253-8781-2517C99D7C00}v11.0.61030\\packages\\", lpFilePart=0x0) returned 0x5c [0092.960] FindFirstFileW (in: lpFileName="C:\\Users\\All Users\\Package Cache\\{37B8F9C7-03FB-3253-8781-2517C99D7C00}v11.0.61030\\packages\\*", lpFindFileData=0x31e46c | out: lpFindFileData=0x31e46c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfabe4080, ftCreationTime.dwHighDateTime=0x1d2e620, ftLastAccessTime.dwLowDateTime=0xfabe4080, ftLastAccessTime.dwHighDateTime=0x1d2e620, ftLastWriteTime.dwLowDateTime=0xfabe4080, ftLastWriteTime.dwHighDateTime=0x1d2e620, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x381ec0 [0092.961] FindNextFileW (in: hFindFile=0x381ec0, lpFindFileData=0x31e47c | out: lpFindFileData=0x31e47c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfabe4080, ftCreationTime.dwHighDateTime=0x1d2e620, ftLastAccessTime.dwLowDateTime=0xfabe4080, ftLastAccessTime.dwHighDateTime=0x1d2e620, ftLastWriteTime.dwLowDateTime=0xfabe4080, ftLastWriteTime.dwHighDateTime=0x1d2e620, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0092.961] FindNextFileW (in: hFindFile=0x381ec0, lpFindFileData=0x31e47c | out: lpFindFileData=0x31e47c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfabe4080, ftCreationTime.dwHighDateTime=0x1d2e620, ftLastAccessTime.dwLowDateTime=0xfac0a1e0, ftLastAccessTime.dwHighDateTime=0x1d2e620, ftLastWriteTime.dwLowDateTime=0xfac0a1e0, ftLastWriteTime.dwHighDateTime=0x1d2e620, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="vcRuntimeAdditional_amd64", cAlternateFileName="VCRUNT~1")) returned 1 [0092.961] FindNextFileW (in: hFindFile=0x381ec0, lpFindFileData=0x31e47c | out: lpFindFileData=0x31e47c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfabe4080, ftCreationTime.dwHighDateTime=0x1d2e620, ftLastAccessTime.dwLowDateTime=0xfac0a1e0, ftLastAccessTime.dwHighDateTime=0x1d2e620, ftLastWriteTime.dwLowDateTime=0xfac0a1e0, ftLastWriteTime.dwHighDateTime=0x1d2e620, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="vcRuntimeAdditional_amd64", cAlternateFileName="VCRUNT~1")) returned 0 [0092.961] FindClose (in: hFindFile=0x381ec0 | out: hFindFile=0x381ec0) returned 1 [0092.961] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e704) returned 1 [0092.961] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e710) returned 1 [0092.961] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e744) returned 1 [0092.961] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Package Cache\\{37B8F9C7-03FB-3253-8781-2517C99D7C00}v11.0.61030\\packages", nBufferLength=0x105, lpBuffer=0x31e24c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Package Cache\\{37B8F9C7-03FB-3253-8781-2517C99D7C00}v11.0.61030\\packages", lpFilePart=0x0) returned 0x5b [0092.961] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Package Cache\\{37B8F9C7-03FB-3253-8781-2517C99D7C00}v11.0.61030\\packages\\", nBufferLength=0x105, lpBuffer=0x31e220, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Package Cache\\{37B8F9C7-03FB-3253-8781-2517C99D7C00}v11.0.61030\\packages\\", lpFilePart=0x0) returned 0x5c [0092.961] FindFirstFileW (in: lpFileName="C:\\Users\\All Users\\Package Cache\\{37B8F9C7-03FB-3253-8781-2517C99D7C00}v11.0.61030\\packages\\*", lpFindFileData=0x31e46c | out: lpFindFileData=0x31e46c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfabe4080, ftCreationTime.dwHighDateTime=0x1d2e620, ftLastAccessTime.dwLowDateTime=0xfabe4080, ftLastAccessTime.dwHighDateTime=0x1d2e620, ftLastWriteTime.dwLowDateTime=0xfabe4080, ftLastWriteTime.dwHighDateTime=0x1d2e620, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x381ec0 [0092.961] FindNextFileW (in: hFindFile=0x381ec0, lpFindFileData=0x31e47c | out: lpFindFileData=0x31e47c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfabe4080, ftCreationTime.dwHighDateTime=0x1d2e620, ftLastAccessTime.dwLowDateTime=0xfabe4080, ftLastAccessTime.dwHighDateTime=0x1d2e620, ftLastWriteTime.dwLowDateTime=0xfabe4080, ftLastWriteTime.dwHighDateTime=0x1d2e620, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0092.961] FindNextFileW (in: hFindFile=0x381ec0, lpFindFileData=0x31e47c | out: lpFindFileData=0x31e47c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfabe4080, ftCreationTime.dwHighDateTime=0x1d2e620, ftLastAccessTime.dwLowDateTime=0xfac0a1e0, ftLastAccessTime.dwHighDateTime=0x1d2e620, ftLastWriteTime.dwLowDateTime=0xfac0a1e0, ftLastWriteTime.dwHighDateTime=0x1d2e620, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="vcRuntimeAdditional_amd64", cAlternateFileName="VCRUNT~1")) returned 1 [0092.961] FindNextFileW (in: hFindFile=0x381ec0, lpFindFileData=0x31e47c | out: lpFindFileData=0x31e47c*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0092.961] FindClose (in: hFindFile=0x381ec0 | out: hFindFile=0x381ec0) returned 1 [0092.961] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e704) returned 1 [0092.961] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e710) returned 1 [0092.961] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e6cc) returned 1 [0092.961] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Package Cache\\{37B8F9C7-03FB-3253-8781-2517C99D7C00}v11.0.61030\\packages\\vcRuntimeAdditional_amd64", nBufferLength=0x105, lpBuffer=0x31e1d4, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Package Cache\\{37B8F9C7-03FB-3253-8781-2517C99D7C00}v11.0.61030\\packages\\vcRuntimeAdditional_amd64", lpFilePart=0x0) returned 0x75 [0092.961] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Package Cache\\{37B8F9C7-03FB-3253-8781-2517C99D7C00}v11.0.61030\\packages\\vcRuntimeAdditional_amd64\\", nBufferLength=0x105, lpBuffer=0x31e1a8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Package Cache\\{37B8F9C7-03FB-3253-8781-2517C99D7C00}v11.0.61030\\packages\\vcRuntimeAdditional_amd64\\", lpFilePart=0x0) returned 0x76 [0092.962] FindFirstFileW (in: lpFileName="C:\\Users\\All Users\\Package Cache\\{37B8F9C7-03FB-3253-8781-2517C99D7C00}v11.0.61030\\packages\\vcRuntimeAdditional_amd64\\*", lpFindFileData=0x31e3f4 | out: lpFindFileData=0x31e3f4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfabe4080, ftCreationTime.dwHighDateTime=0x1d2e620, ftLastAccessTime.dwLowDateTime=0xfac0a1e0, ftLastAccessTime.dwHighDateTime=0x1d2e620, ftLastWriteTime.dwLowDateTime=0xfac0a1e0, ftLastWriteTime.dwHighDateTime=0x1d2e620, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x381ec0 [0092.962] FindNextFileW (in: hFindFile=0x381ec0, lpFindFileData=0x31e404 | out: lpFindFileData=0x31e404*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfabe4080, ftCreationTime.dwHighDateTime=0x1d2e620, ftLastAccessTime.dwLowDateTime=0xfac0a1e0, ftLastAccessTime.dwHighDateTime=0x1d2e620, ftLastWriteTime.dwLowDateTime=0xfac0a1e0, ftLastWriteTime.dwHighDateTime=0x1d2e620, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0092.962] FindNextFileW (in: hFindFile=0x381ec0, lpFindFileData=0x31e404 | out: lpFindFileData=0x31e404*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa87bcb00, ftCreationTime.dwHighDateTime=0x1ced4d9, ftLastAccessTime.dwLowDateTime=0xa87bcb00, ftLastAccessTime.dwHighDateTime=0x1ced4d9, ftLastWriteTime.dwLowDateTime=0xa87bcb00, ftLastWriteTime.dwHighDateTime=0x1ced4d9, nFileSizeHigh=0x0, nFileSizeLow=0x588124, dwReserved0=0x0, dwReserved1=0x0, cFileName="cab1.cab", cAlternateFileName="")) returned 1 [0092.962] FindNextFileW (in: hFindFile=0x381ec0, lpFindFileData=0x31e404 | out: lpFindFileData=0x31e404*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4374a500, ftCreationTime.dwHighDateTime=0x1ced4da, ftLastAccessTime.dwLowDateTime=0x4374a500, ftLastAccessTime.dwHighDateTime=0x1ced4da, ftLastWriteTime.dwLowDateTime=0x4374a500, ftLastWriteTime.dwHighDateTime=0x1ced4da, nFileSizeHigh=0x0, nFileSizeLow=0x25000, dwReserved0=0x0, dwReserved1=0x0, cFileName="vc_runtimeAdditional_x64.msi", cAlternateFileName="VC_RUN~1.MSI")) returned 1 [0092.962] FindNextFileW (in: hFindFile=0x381ec0, lpFindFileData=0x31e404 | out: lpFindFileData=0x31e404*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0092.962] FindClose (in: hFindFile=0x381ec0 | out: hFindFile=0x381ec0) returned 1 [0092.962] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e68c) returned 1 [0092.962] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e698) returned 1 [0092.962] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e6cc) returned 1 [0092.962] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Package Cache\\{37B8F9C7-03FB-3253-8781-2517C99D7C00}v11.0.61030\\packages\\vcRuntimeAdditional_amd64", nBufferLength=0x105, lpBuffer=0x31e1d4, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Package Cache\\{37B8F9C7-03FB-3253-8781-2517C99D7C00}v11.0.61030\\packages\\vcRuntimeAdditional_amd64", lpFilePart=0x0) returned 0x75 [0092.962] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Package Cache\\{37B8F9C7-03FB-3253-8781-2517C99D7C00}v11.0.61030\\packages\\vcRuntimeAdditional_amd64\\", nBufferLength=0x105, lpBuffer=0x31e1a8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Package Cache\\{37B8F9C7-03FB-3253-8781-2517C99D7C00}v11.0.61030\\packages\\vcRuntimeAdditional_amd64\\", lpFilePart=0x0) returned 0x76 [0092.962] FindFirstFileW (in: lpFileName="C:\\Users\\All Users\\Package Cache\\{37B8F9C7-03FB-3253-8781-2517C99D7C00}v11.0.61030\\packages\\vcRuntimeAdditional_amd64\\*", lpFindFileData=0x31e3f4 | out: lpFindFileData=0x31e3f4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfabe4080, ftCreationTime.dwHighDateTime=0x1d2e620, ftLastAccessTime.dwLowDateTime=0xfac0a1e0, ftLastAccessTime.dwHighDateTime=0x1d2e620, ftLastWriteTime.dwLowDateTime=0xfac0a1e0, ftLastWriteTime.dwHighDateTime=0x1d2e620, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x381ec0 [0092.962] FindNextFileW (in: hFindFile=0x381ec0, lpFindFileData=0x31e404 | out: lpFindFileData=0x31e404*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfabe4080, ftCreationTime.dwHighDateTime=0x1d2e620, ftLastAccessTime.dwLowDateTime=0xfac0a1e0, ftLastAccessTime.dwHighDateTime=0x1d2e620, ftLastWriteTime.dwLowDateTime=0xfac0a1e0, ftLastWriteTime.dwHighDateTime=0x1d2e620, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0092.962] FindNextFileW (in: hFindFile=0x381ec0, lpFindFileData=0x31e404 | out: lpFindFileData=0x31e404*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa87bcb00, ftCreationTime.dwHighDateTime=0x1ced4d9, ftLastAccessTime.dwLowDateTime=0xa87bcb00, ftLastAccessTime.dwHighDateTime=0x1ced4d9, ftLastWriteTime.dwLowDateTime=0xa87bcb00, ftLastWriteTime.dwHighDateTime=0x1ced4d9, nFileSizeHigh=0x0, nFileSizeLow=0x588124, dwReserved0=0x0, dwReserved1=0x0, cFileName="cab1.cab", cAlternateFileName="")) returned 1 [0092.962] FindNextFileW (in: hFindFile=0x381ec0, lpFindFileData=0x31e404 | out: lpFindFileData=0x31e404*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4374a500, ftCreationTime.dwHighDateTime=0x1ced4da, ftLastAccessTime.dwLowDateTime=0x4374a500, ftLastAccessTime.dwHighDateTime=0x1ced4da, ftLastWriteTime.dwLowDateTime=0x4374a500, ftLastWriteTime.dwHighDateTime=0x1ced4da, nFileSizeHigh=0x0, nFileSizeLow=0x25000, dwReserved0=0x0, dwReserved1=0x0, cFileName="vc_runtimeAdditional_x64.msi", cAlternateFileName="VC_RUN~1.MSI")) returned 1 [0092.962] FindNextFileW (in: hFindFile=0x381ec0, lpFindFileData=0x31e404 | out: lpFindFileData=0x31e404*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4374a500, ftCreationTime.dwHighDateTime=0x1ced4da, ftLastAccessTime.dwLowDateTime=0x4374a500, ftLastAccessTime.dwHighDateTime=0x1ced4da, ftLastWriteTime.dwLowDateTime=0x4374a500, ftLastWriteTime.dwHighDateTime=0x1ced4da, nFileSizeHigh=0x0, nFileSizeLow=0x25000, dwReserved0=0x0, dwReserved1=0x0, cFileName="vc_runtimeAdditional_x64.msi", cAlternateFileName="VC_RUN~1.MSI")) returned 0 [0092.962] FindClose (in: hFindFile=0x381ec0 | out: hFindFile=0x381ec0) returned 1 [0092.963] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e68c) returned 1 [0092.963] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e698) returned 1 [0092.963] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e7bc) returned 1 [0092.963] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Package Cache\\{3c3aafc8-d898-43ec-998f-965ffdae065a}", nBufferLength=0x105, lpBuffer=0x31e2c4, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Package Cache\\{3c3aafc8-d898-43ec-998f-965ffdae065a}", lpFilePart=0x0) returned 0x47 [0092.963] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Package Cache\\{3c3aafc8-d898-43ec-998f-965ffdae065a}\\", nBufferLength=0x105, lpBuffer=0x31e298, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Package Cache\\{3c3aafc8-d898-43ec-998f-965ffdae065a}\\", lpFilePart=0x0) returned 0x48 [0092.963] FindFirstFileW (in: lpFileName="C:\\Users\\All Users\\Package Cache\\{3c3aafc8-d898-43ec-998f-965ffdae065a}\\*", lpFindFileData=0x31e4e4 | out: lpFindFileData=0x31e4e4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1a0db1a0, ftCreationTime.dwHighDateTime=0x1d2e621, ftLastAccessTime.dwLowDateTime=0x1a127460, ftLastAccessTime.dwHighDateTime=0x1d2e621, ftLastWriteTime.dwLowDateTime=0x1a127460, ftLastWriteTime.dwHighDateTime=0x1d2e621, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x381ec0 [0092.963] FindNextFileW (in: hFindFile=0x381ec0, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1a0db1a0, ftCreationTime.dwHighDateTime=0x1d2e621, ftLastAccessTime.dwLowDateTime=0x1a127460, ftLastAccessTime.dwHighDateTime=0x1d2e621, ftLastWriteTime.dwLowDateTime=0x1a127460, ftLastWriteTime.dwHighDateTime=0x1d2e621, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0092.963] FindNextFileW (in: hFindFile=0x381ec0, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1a127460, ftCreationTime.dwHighDateTime=0x1d2e621, ftLastAccessTime.dwLowDateTime=0x1a127460, ftLastAccessTime.dwHighDateTime=0x1d2e621, ftLastWriteTime.dwLowDateTime=0x1c821ca0, ftLastWriteTime.dwHighDateTime=0x1d2e621, nFileSizeHigh=0x0, nFileSizeLow=0x29a, dwReserved0=0x0, dwReserved1=0x0, cFileName="state.rsm", cAlternateFileName="")) returned 1 [0092.963] FindNextFileW (in: hFindFile=0x381ec0, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1a0db1a0, ftCreationTime.dwHighDateTime=0x1d2e621, ftLastAccessTime.dwLowDateTime=0x1a0db1a0, ftLastAccessTime.dwHighDateTime=0x1d2e621, ftLastWriteTime.dwLowDateTime=0x1073de80, ftLastWriteTime.dwHighDateTime=0x1d2e621, nFileSizeHigh=0x0, nFileSizeLow=0x710a8, dwReserved0=0x0, dwReserved1=0x0, cFileName="vcredist_x64.exe", cAlternateFileName="VCREDI~1.EXE")) returned 1 [0092.963] FindNextFileW (in: hFindFile=0x381ec0, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0092.963] FindClose (in: hFindFile=0x381ec0 | out: hFindFile=0x381ec0) returned 1 [0092.963] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e77c) returned 1 [0092.963] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e788) returned 1 [0092.963] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e7bc) returned 1 [0092.963] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Package Cache\\{3c3aafc8-d898-43ec-998f-965ffdae065a}", nBufferLength=0x105, lpBuffer=0x31e2c4, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Package Cache\\{3c3aafc8-d898-43ec-998f-965ffdae065a}", lpFilePart=0x0) returned 0x47 [0092.963] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Package Cache\\{3c3aafc8-d898-43ec-998f-965ffdae065a}\\", nBufferLength=0x105, lpBuffer=0x31e298, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Package Cache\\{3c3aafc8-d898-43ec-998f-965ffdae065a}\\", lpFilePart=0x0) returned 0x48 [0092.963] FindFirstFileW (in: lpFileName="C:\\Users\\All Users\\Package Cache\\{3c3aafc8-d898-43ec-998f-965ffdae065a}\\*", lpFindFileData=0x31e4e4 | out: lpFindFileData=0x31e4e4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1a0db1a0, ftCreationTime.dwHighDateTime=0x1d2e621, ftLastAccessTime.dwLowDateTime=0x1a127460, ftLastAccessTime.dwHighDateTime=0x1d2e621, ftLastWriteTime.dwLowDateTime=0x1a127460, ftLastWriteTime.dwHighDateTime=0x1d2e621, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x381ec0 [0092.963] FindNextFileW (in: hFindFile=0x381ec0, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1a0db1a0, ftCreationTime.dwHighDateTime=0x1d2e621, ftLastAccessTime.dwLowDateTime=0x1a127460, ftLastAccessTime.dwHighDateTime=0x1d2e621, ftLastWriteTime.dwLowDateTime=0x1a127460, ftLastWriteTime.dwHighDateTime=0x1d2e621, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0092.963] FindNextFileW (in: hFindFile=0x381ec0, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1a127460, ftCreationTime.dwHighDateTime=0x1d2e621, ftLastAccessTime.dwLowDateTime=0x1a127460, ftLastAccessTime.dwHighDateTime=0x1d2e621, ftLastWriteTime.dwLowDateTime=0x1c821ca0, ftLastWriteTime.dwHighDateTime=0x1d2e621, nFileSizeHigh=0x0, nFileSizeLow=0x29a, dwReserved0=0x0, dwReserved1=0x0, cFileName="state.rsm", cAlternateFileName="")) returned 1 [0092.964] FindNextFileW (in: hFindFile=0x381ec0, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1a0db1a0, ftCreationTime.dwHighDateTime=0x1d2e621, ftLastAccessTime.dwLowDateTime=0x1a0db1a0, ftLastAccessTime.dwHighDateTime=0x1d2e621, ftLastWriteTime.dwLowDateTime=0x1073de80, ftLastWriteTime.dwHighDateTime=0x1d2e621, nFileSizeHigh=0x0, nFileSizeLow=0x710a8, dwReserved0=0x0, dwReserved1=0x0, cFileName="vcredist_x64.exe", cAlternateFileName="VCREDI~1.EXE")) returned 1 [0092.964] FindNextFileW (in: hFindFile=0x381ec0, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1a0db1a0, ftCreationTime.dwHighDateTime=0x1d2e621, ftLastAccessTime.dwLowDateTime=0x1a0db1a0, ftLastAccessTime.dwHighDateTime=0x1d2e621, ftLastWriteTime.dwLowDateTime=0x1073de80, ftLastWriteTime.dwHighDateTime=0x1d2e621, nFileSizeHigh=0x0, nFileSizeLow=0x710a8, dwReserved0=0x0, dwReserved1=0x0, cFileName="vcredist_x64.exe", cAlternateFileName="VCREDI~1.EXE")) returned 0 [0092.964] FindClose (in: hFindFile=0x381ec0 | out: hFindFile=0x381ec0) returned 1 [0092.964] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e77c) returned 1 [0092.964] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e788) returned 1 [0092.964] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e7bc) returned 1 [0092.964] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Package Cache\\{582EA838-9199-3518-A05C-DB09462F68EC}v14.10.25017", nBufferLength=0x105, lpBuffer=0x31e2c4, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Package Cache\\{582EA838-9199-3518-A05C-DB09462F68EC}v14.10.25017", lpFilePart=0x0) returned 0x53 [0092.964] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Package Cache\\{582EA838-9199-3518-A05C-DB09462F68EC}v14.10.25017\\", nBufferLength=0x105, lpBuffer=0x31e298, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Package Cache\\{582EA838-9199-3518-A05C-DB09462F68EC}v14.10.25017\\", lpFilePart=0x0) returned 0x54 [0092.964] FindFirstFileW (in: lpFileName="C:\\Users\\All Users\\Package Cache\\{582EA838-9199-3518-A05C-DB09462F68EC}v14.10.25017\\*", lpFindFileData=0x31e4e4 | out: lpFindFileData=0x31e4e4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf94d4300, ftCreationTime.dwHighDateTime=0x1d2fc27, ftLastAccessTime.dwLowDateTime=0xf94d4300, ftLastAccessTime.dwHighDateTime=0x1d2fc27, ftLastWriteTime.dwLowDateTime=0xf94d4300, ftLastWriteTime.dwHighDateTime=0x1d2fc27, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x381ec0 [0092.964] FindNextFileW (in: hFindFile=0x381ec0, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf94d4300, ftCreationTime.dwHighDateTime=0x1d2fc27, ftLastAccessTime.dwLowDateTime=0xf94d4300, ftLastAccessTime.dwHighDateTime=0x1d2fc27, ftLastWriteTime.dwLowDateTime=0xf94d4300, ftLastWriteTime.dwHighDateTime=0x1d2fc27, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0092.964] FindNextFileW (in: hFindFile=0x381ec0, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf94d4300, ftCreationTime.dwHighDateTime=0x1d2fc27, ftLastAccessTime.dwLowDateTime=0xf94d4300, ftLastAccessTime.dwHighDateTime=0x1d2fc27, ftLastWriteTime.dwLowDateTime=0xf94d4300, ftLastWriteTime.dwHighDateTime=0x1d2fc27, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="packages", cAlternateFileName="")) returned 1 [0092.964] FindNextFileW (in: hFindFile=0x381ec0, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf94d4300, ftCreationTime.dwHighDateTime=0x1d2fc27, ftLastAccessTime.dwLowDateTime=0xf94d4300, ftLastAccessTime.dwHighDateTime=0x1d2fc27, ftLastWriteTime.dwLowDateTime=0xf94d4300, ftLastWriteTime.dwHighDateTime=0x1d2fc27, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="packages", cAlternateFileName="")) returned 0 [0092.964] FindClose (in: hFindFile=0x381ec0 | out: hFindFile=0x381ec0) returned 1 [0092.964] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e77c) returned 1 [0092.964] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e788) returned 1 [0092.964] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e7bc) returned 1 [0092.964] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Package Cache\\{582EA838-9199-3518-A05C-DB09462F68EC}v14.10.25017", nBufferLength=0x105, lpBuffer=0x31e2c4, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Package Cache\\{582EA838-9199-3518-A05C-DB09462F68EC}v14.10.25017", lpFilePart=0x0) returned 0x53 [0092.964] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Package Cache\\{582EA838-9199-3518-A05C-DB09462F68EC}v14.10.25017\\", nBufferLength=0x105, lpBuffer=0x31e298, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Package Cache\\{582EA838-9199-3518-A05C-DB09462F68EC}v14.10.25017\\", lpFilePart=0x0) returned 0x54 [0092.964] FindFirstFileW (in: lpFileName="C:\\Users\\All Users\\Package Cache\\{582EA838-9199-3518-A05C-DB09462F68EC}v14.10.25017\\*", lpFindFileData=0x31e4e4 | out: lpFindFileData=0x31e4e4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf94d4300, ftCreationTime.dwHighDateTime=0x1d2fc27, ftLastAccessTime.dwLowDateTime=0xf94d4300, ftLastAccessTime.dwHighDateTime=0x1d2fc27, ftLastWriteTime.dwLowDateTime=0xf94d4300, ftLastWriteTime.dwHighDateTime=0x1d2fc27, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x381ec0 [0092.965] FindNextFileW (in: hFindFile=0x381ec0, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf94d4300, ftCreationTime.dwHighDateTime=0x1d2fc27, ftLastAccessTime.dwLowDateTime=0xf94d4300, ftLastAccessTime.dwHighDateTime=0x1d2fc27, ftLastWriteTime.dwLowDateTime=0xf94d4300, ftLastWriteTime.dwHighDateTime=0x1d2fc27, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0092.965] FindNextFileW (in: hFindFile=0x381ec0, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf94d4300, ftCreationTime.dwHighDateTime=0x1d2fc27, ftLastAccessTime.dwLowDateTime=0xf94d4300, ftLastAccessTime.dwHighDateTime=0x1d2fc27, ftLastWriteTime.dwLowDateTime=0xf94d4300, ftLastWriteTime.dwHighDateTime=0x1d2fc27, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="packages", cAlternateFileName="")) returned 1 [0092.965] FindNextFileW (in: hFindFile=0x381ec0, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0092.965] FindClose (in: hFindFile=0x381ec0 | out: hFindFile=0x381ec0) returned 1 [0092.965] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e77c) returned 1 [0092.965] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e788) returned 1 [0092.965] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e744) returned 1 [0092.965] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Package Cache\\{582EA838-9199-3518-A05C-DB09462F68EC}v14.10.25017\\packages", nBufferLength=0x105, lpBuffer=0x31e24c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Package Cache\\{582EA838-9199-3518-A05C-DB09462F68EC}v14.10.25017\\packages", lpFilePart=0x0) returned 0x5c [0092.965] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Package Cache\\{582EA838-9199-3518-A05C-DB09462F68EC}v14.10.25017\\packages\\", nBufferLength=0x105, lpBuffer=0x31e220, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Package Cache\\{582EA838-9199-3518-A05C-DB09462F68EC}v14.10.25017\\packages\\", lpFilePart=0x0) returned 0x5d [0092.965] FindFirstFileW (in: lpFileName="C:\\Users\\All Users\\Package Cache\\{582EA838-9199-3518-A05C-DB09462F68EC}v14.10.25017\\packages\\*", lpFindFileData=0x31e46c | out: lpFindFileData=0x31e46c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf94d4300, ftCreationTime.dwHighDateTime=0x1d2fc27, ftLastAccessTime.dwLowDateTime=0xf94d4300, ftLastAccessTime.dwHighDateTime=0x1d2fc27, ftLastWriteTime.dwLowDateTime=0xf94d4300, ftLastWriteTime.dwHighDateTime=0x1d2fc27, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x381ec0 [0092.965] FindNextFileW (in: hFindFile=0x381ec0, lpFindFileData=0x31e47c | out: lpFindFileData=0x31e47c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf94d4300, ftCreationTime.dwHighDateTime=0x1d2fc27, ftLastAccessTime.dwLowDateTime=0xf94d4300, ftLastAccessTime.dwHighDateTime=0x1d2fc27, ftLastWriteTime.dwLowDateTime=0xf94d4300, ftLastWriteTime.dwHighDateTime=0x1d2fc27, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0092.965] FindNextFileW (in: hFindFile=0x381ec0, lpFindFileData=0x31e47c | out: lpFindFileData=0x31e47c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf94d4300, ftCreationTime.dwHighDateTime=0x1d2fc27, ftLastAccessTime.dwLowDateTime=0xf94d4300, ftLastAccessTime.dwHighDateTime=0x1d2fc27, ftLastWriteTime.dwLowDateTime=0xf94d4300, ftLastWriteTime.dwHighDateTime=0x1d2fc27, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="vcRuntimeMinimum_x86", cAlternateFileName="VCRUNT~1")) returned 1 [0092.965] FindNextFileW (in: hFindFile=0x381ec0, lpFindFileData=0x31e47c | out: lpFindFileData=0x31e47c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf94d4300, ftCreationTime.dwHighDateTime=0x1d2fc27, ftLastAccessTime.dwLowDateTime=0xf94d4300, ftLastAccessTime.dwHighDateTime=0x1d2fc27, ftLastWriteTime.dwLowDateTime=0xf94d4300, ftLastWriteTime.dwHighDateTime=0x1d2fc27, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="vcRuntimeMinimum_x86", cAlternateFileName="VCRUNT~1")) returned 0 [0092.965] FindClose (in: hFindFile=0x381ec0 | out: hFindFile=0x381ec0) returned 1 [0092.965] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e704) returned 1 [0092.965] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e710) returned 1 [0092.965] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e744) returned 1 [0092.965] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Package Cache\\{582EA838-9199-3518-A05C-DB09462F68EC}v14.10.25017\\packages", nBufferLength=0x105, lpBuffer=0x31e24c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Package Cache\\{582EA838-9199-3518-A05C-DB09462F68EC}v14.10.25017\\packages", lpFilePart=0x0) returned 0x5c [0092.965] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Package Cache\\{582EA838-9199-3518-A05C-DB09462F68EC}v14.10.25017\\packages\\", nBufferLength=0x105, lpBuffer=0x31e220, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Package Cache\\{582EA838-9199-3518-A05C-DB09462F68EC}v14.10.25017\\packages\\", lpFilePart=0x0) returned 0x5d [0092.965] FindFirstFileW (in: lpFileName="C:\\Users\\All Users\\Package Cache\\{582EA838-9199-3518-A05C-DB09462F68EC}v14.10.25017\\packages\\*", lpFindFileData=0x31e46c | out: lpFindFileData=0x31e46c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf94d4300, ftCreationTime.dwHighDateTime=0x1d2fc27, ftLastAccessTime.dwLowDateTime=0xf94d4300, ftLastAccessTime.dwHighDateTime=0x1d2fc27, ftLastWriteTime.dwLowDateTime=0xf94d4300, ftLastWriteTime.dwHighDateTime=0x1d2fc27, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x381ec0 [0092.966] FindNextFileW (in: hFindFile=0x381ec0, lpFindFileData=0x31e47c | out: lpFindFileData=0x31e47c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf94d4300, ftCreationTime.dwHighDateTime=0x1d2fc27, ftLastAccessTime.dwLowDateTime=0xf94d4300, ftLastAccessTime.dwHighDateTime=0x1d2fc27, ftLastWriteTime.dwLowDateTime=0xf94d4300, ftLastWriteTime.dwHighDateTime=0x1d2fc27, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0092.966] FindNextFileW (in: hFindFile=0x381ec0, lpFindFileData=0x31e47c | out: lpFindFileData=0x31e47c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf94d4300, ftCreationTime.dwHighDateTime=0x1d2fc27, ftLastAccessTime.dwLowDateTime=0xf94d4300, ftLastAccessTime.dwHighDateTime=0x1d2fc27, ftLastWriteTime.dwLowDateTime=0xf94d4300, ftLastWriteTime.dwHighDateTime=0x1d2fc27, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="vcRuntimeMinimum_x86", cAlternateFileName="VCRUNT~1")) returned 1 [0092.966] FindClose (in: hFindFile=0x381ec0 | out: hFindFile=0x381ec0) returned 1 [0092.966] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e704) returned 1 [0092.966] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e710) returned 1 [0092.966] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e6cc) returned 1 [0092.966] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Package Cache\\{582EA838-9199-3518-A05C-DB09462F68EC}v14.10.25017\\packages\\vcRuntimeMinimum_x86", nBufferLength=0x105, lpBuffer=0x31e1d4, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Package Cache\\{582EA838-9199-3518-A05C-DB09462F68EC}v14.10.25017\\packages\\vcRuntimeMinimum_x86", lpFilePart=0x0) returned 0x71 [0092.966] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Package Cache\\{582EA838-9199-3518-A05C-DB09462F68EC}v14.10.25017\\packages\\vcRuntimeMinimum_x86\\", nBufferLength=0x105, lpBuffer=0x31e1a8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Package Cache\\{582EA838-9199-3518-A05C-DB09462F68EC}v14.10.25017\\packages\\vcRuntimeMinimum_x86\\", lpFilePart=0x0) returned 0x72 [0092.966] FindFirstFileW (in: lpFileName="C:\\Users\\All Users\\Package Cache\\{582EA838-9199-3518-A05C-DB09462F68EC}v14.10.25017\\packages\\vcRuntimeMinimum_x86\\*", lpFindFileData=0x31e3f4 | out: lpFindFileData=0x31e3f4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf94d4300, ftCreationTime.dwHighDateTime=0x1d2fc27, ftLastAccessTime.dwLowDateTime=0xf94d4300, ftLastAccessTime.dwHighDateTime=0x1d2fc27, ftLastWriteTime.dwLowDateTime=0xf94d4300, ftLastWriteTime.dwHighDateTime=0x1d2fc27, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x381ec0 [0092.967] FindClose (in: hFindFile=0x381ec0 | out: hFindFile=0x381ec0) returned 1 [0092.967] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e68c) returned 1 [0092.967] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e698) returned 1 [0092.967] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e6cc) returned 1 [0092.967] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Package Cache\\{582EA838-9199-3518-A05C-DB09462F68EC}v14.10.25017\\packages\\vcRuntimeMinimum_x86", nBufferLength=0x105, lpBuffer=0x31e1d4, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Package Cache\\{582EA838-9199-3518-A05C-DB09462F68EC}v14.10.25017\\packages\\vcRuntimeMinimum_x86", lpFilePart=0x0) returned 0x71 [0092.967] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Package Cache\\{582EA838-9199-3518-A05C-DB09462F68EC}v14.10.25017\\packages\\vcRuntimeMinimum_x86\\", nBufferLength=0x105, lpBuffer=0x31e1a8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Package Cache\\{582EA838-9199-3518-A05C-DB09462F68EC}v14.10.25017\\packages\\vcRuntimeMinimum_x86\\", lpFilePart=0x0) returned 0x72 [0092.967] FindFirstFileW (in: lpFileName="C:\\Users\\All Users\\Package Cache\\{582EA838-9199-3518-A05C-DB09462F68EC}v14.10.25017\\packages\\vcRuntimeMinimum_x86\\*", lpFindFileData=0x31e3f4 | out: lpFindFileData=0x31e3f4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf94d4300, ftCreationTime.dwHighDateTime=0x1d2fc27, ftLastAccessTime.dwLowDateTime=0xf94d4300, ftLastAccessTime.dwHighDateTime=0x1d2fc27, ftLastWriteTime.dwLowDateTime=0xf94d4300, ftLastWriteTime.dwHighDateTime=0x1d2fc27, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x381ec0 [0092.967] FindClose (in: hFindFile=0x381ec0 | out: hFindFile=0x381ec0) returned 1 [0092.967] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e68c) returned 1 [0092.967] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e698) returned 1 [0092.967] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e7bc) returned 1 [0092.967] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Package Cache\\{68306422-7C57-373F-8860-D26CE4BA2A15}v14.10.25017", nBufferLength=0x105, lpBuffer=0x31e2c4, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Package Cache\\{68306422-7C57-373F-8860-D26CE4BA2A15}v14.10.25017", lpFilePart=0x0) returned 0x53 [0092.967] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Package Cache\\{68306422-7C57-373F-8860-D26CE4BA2A15}v14.10.25017\\", nBufferLength=0x105, lpBuffer=0x31e298, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Package Cache\\{68306422-7C57-373F-8860-D26CE4BA2A15}v14.10.25017\\", lpFilePart=0x0) returned 0x54 [0092.967] FindFirstFileW (in: lpFileName="C:\\Users\\All Users\\Package Cache\\{68306422-7C57-373F-8860-D26CE4BA2A15}v14.10.25017\\*", lpFindFileData=0x31e4e4 | out: lpFindFileData=0x31e4e4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf94d4300, ftCreationTime.dwHighDateTime=0x1d2fc27, ftLastAccessTime.dwLowDateTime=0xf94d4300, ftLastAccessTime.dwHighDateTime=0x1d2fc27, ftLastWriteTime.dwLowDateTime=0xf94d4300, ftLastWriteTime.dwHighDateTime=0x1d2fc27, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x381ec0 [0092.968] FindClose (in: hFindFile=0x381ec0 | out: hFindFile=0x381ec0) returned 1 [0092.969] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e77c) returned 1 [0092.969] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e788) returned 1 [0092.969] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e7bc) returned 1 [0092.969] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Package Cache\\{68306422-7C57-373F-8860-D26CE4BA2A15}v14.10.25017", nBufferLength=0x105, lpBuffer=0x31e2c4, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Package Cache\\{68306422-7C57-373F-8860-D26CE4BA2A15}v14.10.25017", lpFilePart=0x0) returned 0x53 [0092.969] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Package Cache\\{68306422-7C57-373F-8860-D26CE4BA2A15}v14.10.25017\\", nBufferLength=0x105, lpBuffer=0x31e298, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Package Cache\\{68306422-7C57-373F-8860-D26CE4BA2A15}v14.10.25017\\", lpFilePart=0x0) returned 0x54 [0092.969] FindFirstFileW (in: lpFileName="C:\\Users\\All Users\\Package Cache\\{68306422-7C57-373F-8860-D26CE4BA2A15}v14.10.25017\\*", lpFindFileData=0x31e4e4 | out: lpFindFileData=0x31e4e4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf94d4300, ftCreationTime.dwHighDateTime=0x1d2fc27, ftLastAccessTime.dwLowDateTime=0xf94d4300, ftLastAccessTime.dwHighDateTime=0x1d2fc27, ftLastWriteTime.dwLowDateTime=0xf94d4300, ftLastWriteTime.dwHighDateTime=0x1d2fc27, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x381ec0 [0092.969] FindClose (in: hFindFile=0x381ec0 | out: hFindFile=0x381ec0) returned 1 [0092.969] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e77c) returned 1 [0092.969] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e788) returned 1 [0092.969] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e744) returned 1 [0092.969] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Package Cache\\{68306422-7C57-373F-8860-D26CE4BA2A15}v14.10.25017\\packages", nBufferLength=0x105, lpBuffer=0x31e24c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Package Cache\\{68306422-7C57-373F-8860-D26CE4BA2A15}v14.10.25017\\packages", lpFilePart=0x0) returned 0x5c [0092.969] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Package Cache\\{68306422-7C57-373F-8860-D26CE4BA2A15}v14.10.25017\\packages\\", nBufferLength=0x105, lpBuffer=0x31e220, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Package Cache\\{68306422-7C57-373F-8860-D26CE4BA2A15}v14.10.25017\\packages\\", lpFilePart=0x0) returned 0x5d [0092.969] FindFirstFileW (in: lpFileName="C:\\Users\\All Users\\Package Cache\\{68306422-7C57-373F-8860-D26CE4BA2A15}v14.10.25017\\packages\\*", lpFindFileData=0x31e46c | out: lpFindFileData=0x31e46c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf94d4300, ftCreationTime.dwHighDateTime=0x1d2fc27, ftLastAccessTime.dwLowDateTime=0xf94d4300, ftLastAccessTime.dwHighDateTime=0x1d2fc27, ftLastWriteTime.dwLowDateTime=0xf94d4300, ftLastWriteTime.dwHighDateTime=0x1d2fc27, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x381ec0 [0092.970] FindClose (in: hFindFile=0x381ec0 | out: hFindFile=0x381ec0) returned 1 [0092.970] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e704) returned 1 [0092.970] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e710) returned 1 [0092.970] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e744) returned 1 [0092.970] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Package Cache\\{68306422-7C57-373F-8860-D26CE4BA2A15}v14.10.25017\\packages", nBufferLength=0x105, lpBuffer=0x31e24c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Package Cache\\{68306422-7C57-373F-8860-D26CE4BA2A15}v14.10.25017\\packages", lpFilePart=0x0) returned 0x5c [0092.970] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Package Cache\\{68306422-7C57-373F-8860-D26CE4BA2A15}v14.10.25017\\packages\\", nBufferLength=0x105, lpBuffer=0x31e220, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Package Cache\\{68306422-7C57-373F-8860-D26CE4BA2A15}v14.10.25017\\packages\\", lpFilePart=0x0) returned 0x5d [0092.970] FindFirstFileW (in: lpFileName="C:\\Users\\All Users\\Package Cache\\{68306422-7C57-373F-8860-D26CE4BA2A15}v14.10.25017\\packages\\*", lpFindFileData=0x31e46c | out: lpFindFileData=0x31e46c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf94d4300, ftCreationTime.dwHighDateTime=0x1d2fc27, ftLastAccessTime.dwLowDateTime=0xf94d4300, ftLastAccessTime.dwHighDateTime=0x1d2fc27, ftLastWriteTime.dwLowDateTime=0xf94d4300, ftLastWriteTime.dwHighDateTime=0x1d2fc27, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x381ec0 [0092.970] FindClose (in: hFindFile=0x381ec0 | out: hFindFile=0x381ec0) returned 1 [0092.970] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e704) returned 1 [0092.970] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e710) returned 1 [0092.970] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e6cc) returned 1 [0092.970] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Package Cache\\{68306422-7C57-373F-8860-D26CE4BA2A15}v14.10.25017\\packages\\vcRuntimeAdditional_x86", nBufferLength=0x105, lpBuffer=0x31e1d4, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Package Cache\\{68306422-7C57-373F-8860-D26CE4BA2A15}v14.10.25017\\packages\\vcRuntimeAdditional_x86", lpFilePart=0x0) returned 0x74 [0092.970] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Package Cache\\{68306422-7C57-373F-8860-D26CE4BA2A15}v14.10.25017\\packages\\vcRuntimeAdditional_x86\\", nBufferLength=0x105, lpBuffer=0x31e1a8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Package Cache\\{68306422-7C57-373F-8860-D26CE4BA2A15}v14.10.25017\\packages\\vcRuntimeAdditional_x86\\", lpFilePart=0x0) returned 0x75 [0092.970] FindFirstFileW (in: lpFileName="C:\\Users\\All Users\\Package Cache\\{68306422-7C57-373F-8860-D26CE4BA2A15}v14.10.25017\\packages\\vcRuntimeAdditional_x86\\*", lpFindFileData=0x31e3f4 | out: lpFindFileData=0x31e3f4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf94d4300, ftCreationTime.dwHighDateTime=0x1d2fc27, ftLastAccessTime.dwLowDateTime=0xf94fa460, ftLastAccessTime.dwHighDateTime=0x1d2fc27, ftLastWriteTime.dwLowDateTime=0xf94fa460, ftLastWriteTime.dwHighDateTime=0x1d2fc27, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x381ec0 [0092.970] FindClose (in: hFindFile=0x381ec0 | out: hFindFile=0x381ec0) returned 1 [0092.970] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e68c) returned 1 [0092.971] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e698) returned 1 [0092.971] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e6cc) returned 1 [0092.971] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Package Cache\\{68306422-7C57-373F-8860-D26CE4BA2A15}v14.10.25017\\packages\\vcRuntimeAdditional_x86", nBufferLength=0x105, lpBuffer=0x31e1d4, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Package Cache\\{68306422-7C57-373F-8860-D26CE4BA2A15}v14.10.25017\\packages\\vcRuntimeAdditional_x86", lpFilePart=0x0) returned 0x74 [0092.971] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Package Cache\\{68306422-7C57-373F-8860-D26CE4BA2A15}v14.10.25017\\packages\\vcRuntimeAdditional_x86\\", nBufferLength=0x105, lpBuffer=0x31e1a8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Package Cache\\{68306422-7C57-373F-8860-D26CE4BA2A15}v14.10.25017\\packages\\vcRuntimeAdditional_x86\\", lpFilePart=0x0) returned 0x75 [0092.971] FindFirstFileW (in: lpFileName="C:\\Users\\All Users\\Package Cache\\{68306422-7C57-373F-8860-D26CE4BA2A15}v14.10.25017\\packages\\vcRuntimeAdditional_x86\\*", lpFindFileData=0x31e3f4 | out: lpFindFileData=0x31e3f4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf94d4300, ftCreationTime.dwHighDateTime=0x1d2fc27, ftLastAccessTime.dwLowDateTime=0xf94fa460, ftLastAccessTime.dwHighDateTime=0x1d2fc27, ftLastWriteTime.dwLowDateTime=0xf94fa460, ftLastWriteTime.dwHighDateTime=0x1d2fc27, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x381ec0 [0092.971] FindClose (in: hFindFile=0x381ec0 | out: hFindFile=0x381ec0) returned 1 [0092.971] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e68c) returned 1 [0092.971] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e698) returned 1 [0092.971] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e7bc) returned 1 [0092.971] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Package Cache\\{8D4F7A6D-6B81-3DC8-9C21-6008E4866727}v14.10.25017", nBufferLength=0x105, lpBuffer=0x31e2c4, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Package Cache\\{8D4F7A6D-6B81-3DC8-9C21-6008E4866727}v14.10.25017", lpFilePart=0x0) returned 0x53 [0092.971] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Package Cache\\{8D4F7A6D-6B81-3DC8-9C21-6008E4866727}v14.10.25017\\", nBufferLength=0x105, lpBuffer=0x31e298, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Package Cache\\{8D4F7A6D-6B81-3DC8-9C21-6008E4866727}v14.10.25017\\", lpFilePart=0x0) returned 0x54 [0092.971] FindFirstFileW (in: lpFileName="C:\\Users\\All Users\\Package Cache\\{8D4F7A6D-6B81-3DC8-9C21-6008E4866727}v14.10.25017\\*", lpFindFileData=0x31e4e4 | out: lpFindFileData=0x31e4e4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa931c450, ftCreationTime.dwHighDateTime=0x1d2fab4, ftLastAccessTime.dwLowDateTime=0xa931c450, ftLastAccessTime.dwHighDateTime=0x1d2fab4, ftLastWriteTime.dwLowDateTime=0xa931c450, ftLastWriteTime.dwHighDateTime=0x1d2fab4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x381ec0 [0092.971] FindClose (in: hFindFile=0x381ec0 | out: hFindFile=0x381ec0) returned 1 [0092.971] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e77c) returned 1 [0092.971] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e788) returned 1 [0092.971] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e7bc) returned 1 [0092.971] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Package Cache\\{8D4F7A6D-6B81-3DC8-9C21-6008E4866727}v14.10.25017", nBufferLength=0x105, lpBuffer=0x31e2c4, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Package Cache\\{8D4F7A6D-6B81-3DC8-9C21-6008E4866727}v14.10.25017", lpFilePart=0x0) returned 0x53 [0092.971] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Package Cache\\{8D4F7A6D-6B81-3DC8-9C21-6008E4866727}v14.10.25017\\", nBufferLength=0x105, lpBuffer=0x31e298, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Package Cache\\{8D4F7A6D-6B81-3DC8-9C21-6008E4866727}v14.10.25017\\", lpFilePart=0x0) returned 0x54 [0092.972] FindFirstFileW (in: lpFileName="C:\\Users\\All Users\\Package Cache\\{8D4F7A6D-6B81-3DC8-9C21-6008E4866727}v14.10.25017\\*", lpFindFileData=0x31e4e4 | out: lpFindFileData=0x31e4e4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa931c450, ftCreationTime.dwHighDateTime=0x1d2fab4, ftLastAccessTime.dwLowDateTime=0xa931c450, ftLastAccessTime.dwHighDateTime=0x1d2fab4, ftLastWriteTime.dwLowDateTime=0xa931c450, ftLastWriteTime.dwHighDateTime=0x1d2fab4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x381ec0 [0092.972] FindClose (in: hFindFile=0x381ec0 | out: hFindFile=0x381ec0) returned 1 [0092.972] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e77c) returned 1 [0092.972] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e788) returned 1 [0092.972] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e744) returned 1 [0092.972] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Package Cache\\{8D4F7A6D-6B81-3DC8-9C21-6008E4866727}v14.10.25017\\packages", nBufferLength=0x105, lpBuffer=0x31e24c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Package Cache\\{8D4F7A6D-6B81-3DC8-9C21-6008E4866727}v14.10.25017\\packages", lpFilePart=0x0) returned 0x5c [0092.972] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Package Cache\\{8D4F7A6D-6B81-3DC8-9C21-6008E4866727}v14.10.25017\\packages\\", nBufferLength=0x105, lpBuffer=0x31e220, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Package Cache\\{8D4F7A6D-6B81-3DC8-9C21-6008E4866727}v14.10.25017\\packages\\", lpFilePart=0x0) returned 0x5d [0092.972] FindFirstFileW (in: lpFileName="C:\\Users\\All Users\\Package Cache\\{8D4F7A6D-6B81-3DC8-9C21-6008E4866727}v14.10.25017\\packages\\*", lpFindFileData=0x31e46c | out: lpFindFileData=0x31e46c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa931c450, ftCreationTime.dwHighDateTime=0x1d2fab4, ftLastAccessTime.dwLowDateTime=0xa931c450, ftLastAccessTime.dwHighDateTime=0x1d2fab4, ftLastWriteTime.dwLowDateTime=0xa931c450, ftLastWriteTime.dwHighDateTime=0x1d2fab4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x381ec0 [0092.972] FindClose (in: hFindFile=0x381ec0 | out: hFindFile=0x381ec0) returned 1 [0092.972] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e704) returned 1 [0092.972] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e710) returned 1 [0092.972] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e744) returned 1 [0092.972] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Package Cache\\{8D4F7A6D-6B81-3DC8-9C21-6008E4866727}v14.10.25017\\packages", nBufferLength=0x105, lpBuffer=0x31e24c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Package Cache\\{8D4F7A6D-6B81-3DC8-9C21-6008E4866727}v14.10.25017\\packages", lpFilePart=0x0) returned 0x5c [0092.972] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Package Cache\\{8D4F7A6D-6B81-3DC8-9C21-6008E4866727}v14.10.25017\\packages\\", nBufferLength=0x105, lpBuffer=0x31e220, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Package Cache\\{8D4F7A6D-6B81-3DC8-9C21-6008E4866727}v14.10.25017\\packages\\", lpFilePart=0x0) returned 0x5d [0092.972] FindFirstFileW (in: lpFileName="C:\\Users\\All Users\\Package Cache\\{8D4F7A6D-6B81-3DC8-9C21-6008E4866727}v14.10.25017\\packages\\*", lpFindFileData=0x31e46c | out: lpFindFileData=0x31e46c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa931c450, ftCreationTime.dwHighDateTime=0x1d2fab4, ftLastAccessTime.dwLowDateTime=0xa931c450, ftLastAccessTime.dwHighDateTime=0x1d2fab4, ftLastWriteTime.dwLowDateTime=0xa931c450, ftLastWriteTime.dwHighDateTime=0x1d2fab4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x381ec0 [0092.972] FindClose (in: hFindFile=0x381ec0 | out: hFindFile=0x381ec0) returned 1 [0092.973] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e704) returned 1 [0092.973] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e710) returned 1 [0092.973] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e6cc) returned 1 [0092.973] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Package Cache\\{8D4F7A6D-6B81-3DC8-9C21-6008E4866727}v14.10.25017\\packages\\vcRuntimeMinimum_amd64", nBufferLength=0x105, lpBuffer=0x31e1d4, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Package Cache\\{8D4F7A6D-6B81-3DC8-9C21-6008E4866727}v14.10.25017\\packages\\vcRuntimeMinimum_amd64", lpFilePart=0x0) returned 0x73 [0092.973] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Package Cache\\{8D4F7A6D-6B81-3DC8-9C21-6008E4866727}v14.10.25017\\packages\\vcRuntimeMinimum_amd64\\", nBufferLength=0x105, lpBuffer=0x31e1a8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Package Cache\\{8D4F7A6D-6B81-3DC8-9C21-6008E4866727}v14.10.25017\\packages\\vcRuntimeMinimum_amd64\\", lpFilePart=0x0) returned 0x74 [0092.973] FindFirstFileW (in: lpFileName="C:\\Users\\All Users\\Package Cache\\{8D4F7A6D-6B81-3DC8-9C21-6008E4866727}v14.10.25017\\packages\\vcRuntimeMinimum_amd64\\*", lpFindFileData=0x31e3f4 | out: lpFindFileData=0x31e3f4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa931c450, ftCreationTime.dwHighDateTime=0x1d2fab4, ftLastAccessTime.dwLowDateTime=0xa93425b0, ftLastAccessTime.dwHighDateTime=0x1d2fab4, ftLastWriteTime.dwLowDateTime=0xa93425b0, ftLastWriteTime.dwHighDateTime=0x1d2fab4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x381ec0 [0092.973] FindClose (in: hFindFile=0x381ec0 | out: hFindFile=0x381ec0) returned 1 [0092.973] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e68c) returned 1 [0092.973] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e698) returned 1 [0092.973] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e6cc) returned 1 [0092.973] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Package Cache\\{8D4F7A6D-6B81-3DC8-9C21-6008E4866727}v14.10.25017\\packages\\vcRuntimeMinimum_amd64", nBufferLength=0x105, lpBuffer=0x31e1d4, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Package Cache\\{8D4F7A6D-6B81-3DC8-9C21-6008E4866727}v14.10.25017\\packages\\vcRuntimeMinimum_amd64", lpFilePart=0x0) returned 0x73 [0092.973] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Package Cache\\{8D4F7A6D-6B81-3DC8-9C21-6008E4866727}v14.10.25017\\packages\\vcRuntimeMinimum_amd64\\", nBufferLength=0x105, lpBuffer=0x31e1a8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Package Cache\\{8D4F7A6D-6B81-3DC8-9C21-6008E4866727}v14.10.25017\\packages\\vcRuntimeMinimum_amd64\\", lpFilePart=0x0) returned 0x74 [0092.973] FindFirstFileW (in: lpFileName="C:\\Users\\All Users\\Package Cache\\{8D4F7A6D-6B81-3DC8-9C21-6008E4866727}v14.10.25017\\packages\\vcRuntimeMinimum_amd64\\*", lpFindFileData=0x31e3f4 | out: lpFindFileData=0x31e3f4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa931c450, ftCreationTime.dwHighDateTime=0x1d2fab4, ftLastAccessTime.dwLowDateTime=0xa93425b0, ftLastAccessTime.dwHighDateTime=0x1d2fab4, ftLastWriteTime.dwLowDateTime=0xa93425b0, ftLastWriteTime.dwHighDateTime=0x1d2fab4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x381ec0 [0092.973] FindClose (in: hFindFile=0x381ec0 | out: hFindFile=0x381ec0) returned 1 [0092.973] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e68c) returned 1 [0092.973] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e698) returned 1 [0092.973] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e7bc) returned 1 [0092.973] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Package Cache\\{929FBD26-9020-399B-9A7A-751D61F0B942}v12.0.21005", nBufferLength=0x105, lpBuffer=0x31e2c4, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Package Cache\\{929FBD26-9020-399B-9A7A-751D61F0B942}v12.0.21005", lpFilePart=0x0) returned 0x52 [0092.973] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Package Cache\\{929FBD26-9020-399B-9A7A-751D61F0B942}v12.0.21005\\", nBufferLength=0x105, lpBuffer=0x31e298, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Package Cache\\{929FBD26-9020-399B-9A7A-751D61F0B942}v12.0.21005\\", lpFilePart=0x0) returned 0x53 [0092.973] FindFirstFileW (in: lpFileName="C:\\Users\\All Users\\Package Cache\\{929FBD26-9020-399B-9A7A-751D61F0B942}v12.0.21005\\*", lpFindFileData=0x31e4e4 | out: lpFindFileData=0x31e4e4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1a1e5b40, ftCreationTime.dwHighDateTime=0x1d2e621, ftLastAccessTime.dwLowDateTime=0x1a20bca0, ftLastAccessTime.dwHighDateTime=0x1d2e621, ftLastWriteTime.dwLowDateTime=0x1a20bca0, ftLastWriteTime.dwHighDateTime=0x1d2e621, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x381ec0 [0092.974] FindClose (in: hFindFile=0x381ec0 | out: hFindFile=0x381ec0) returned 1 [0092.974] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e77c) returned 1 [0092.974] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e788) returned 1 [0092.974] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e7bc) returned 1 [0092.974] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Package Cache\\{929FBD26-9020-399B-9A7A-751D61F0B942}v12.0.21005", nBufferLength=0x105, lpBuffer=0x31e2c4, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Package Cache\\{929FBD26-9020-399B-9A7A-751D61F0B942}v12.0.21005", lpFilePart=0x0) returned 0x52 [0092.974] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Package Cache\\{929FBD26-9020-399B-9A7A-751D61F0B942}v12.0.21005\\", nBufferLength=0x105, lpBuffer=0x31e298, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Package Cache\\{929FBD26-9020-399B-9A7A-751D61F0B942}v12.0.21005\\", lpFilePart=0x0) returned 0x53 [0092.974] FindFirstFileW (in: lpFileName="C:\\Users\\All Users\\Package Cache\\{929FBD26-9020-399B-9A7A-751D61F0B942}v12.0.21005\\*", lpFindFileData=0x31e4e4 | out: lpFindFileData=0x31e4e4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1a1e5b40, ftCreationTime.dwHighDateTime=0x1d2e621, ftLastAccessTime.dwLowDateTime=0x1a20bca0, ftLastAccessTime.dwHighDateTime=0x1d2e621, ftLastWriteTime.dwLowDateTime=0x1a20bca0, ftLastWriteTime.dwHighDateTime=0x1d2e621, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x381ec0 [0092.974] FindClose (in: hFindFile=0x381ec0 | out: hFindFile=0x381ec0) returned 1 [0092.974] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e77c) returned 1 [0092.974] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e788) returned 1 [0092.974] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e744) returned 1 [0092.974] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Package Cache\\{929FBD26-9020-399B-9A7A-751D61F0B942}v12.0.21005\\packages", nBufferLength=0x105, lpBuffer=0x31e24c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Package Cache\\{929FBD26-9020-399B-9A7A-751D61F0B942}v12.0.21005\\packages", lpFilePart=0x0) returned 0x5b [0092.974] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Package Cache\\{929FBD26-9020-399B-9A7A-751D61F0B942}v12.0.21005\\packages\\", nBufferLength=0x105, lpBuffer=0x31e220, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Package Cache\\{929FBD26-9020-399B-9A7A-751D61F0B942}v12.0.21005\\packages\\", lpFilePart=0x0) returned 0x5c [0092.974] FindFirstFileW (in: lpFileName="C:\\Users\\All Users\\Package Cache\\{929FBD26-9020-399B-9A7A-751D61F0B942}v12.0.21005\\packages\\*", lpFindFileData=0x31e46c | out: lpFindFileData=0x31e46c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1a20bca0, ftCreationTime.dwHighDateTime=0x1d2e621, ftLastAccessTime.dwLowDateTime=0x1a20bca0, ftLastAccessTime.dwHighDateTime=0x1d2e621, ftLastWriteTime.dwLowDateTime=0x1a20bca0, ftLastWriteTime.dwHighDateTime=0x1d2e621, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x381ec0 [0092.974] FindClose (in: hFindFile=0x381ec0 | out: hFindFile=0x381ec0) returned 1 [0092.975] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e704) returned 1 [0092.975] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e710) returned 1 [0092.975] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e744) returned 1 [0092.975] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Package Cache\\{929FBD26-9020-399B-9A7A-751D61F0B942}v12.0.21005\\packages", nBufferLength=0x105, lpBuffer=0x31e24c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Package Cache\\{929FBD26-9020-399B-9A7A-751D61F0B942}v12.0.21005\\packages", lpFilePart=0x0) returned 0x5b [0092.975] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Package Cache\\{929FBD26-9020-399B-9A7A-751D61F0B942}v12.0.21005\\packages\\", nBufferLength=0x105, lpBuffer=0x31e220, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Package Cache\\{929FBD26-9020-399B-9A7A-751D61F0B942}v12.0.21005\\packages\\", lpFilePart=0x0) returned 0x5c [0092.975] FindFirstFileW (in: lpFileName="C:\\Users\\All Users\\Package Cache\\{929FBD26-9020-399B-9A7A-751D61F0B942}v12.0.21005\\packages\\*", lpFindFileData=0x31e46c | out: lpFindFileData=0x31e46c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1a20bca0, ftCreationTime.dwHighDateTime=0x1d2e621, ftLastAccessTime.dwLowDateTime=0x1a20bca0, ftLastAccessTime.dwHighDateTime=0x1d2e621, ftLastWriteTime.dwLowDateTime=0x1a20bca0, ftLastWriteTime.dwHighDateTime=0x1d2e621, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x381ec0 [0092.975] FindClose (in: hFindFile=0x381ec0 | out: hFindFile=0x381ec0) returned 1 [0092.975] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e704) returned 1 [0092.975] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e710) returned 1 [0092.975] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e6cc) returned 1 [0092.975] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Package Cache\\{929FBD26-9020-399B-9A7A-751D61F0B942}v12.0.21005\\packages\\vcRuntimeAdditional_amd64", nBufferLength=0x105, lpBuffer=0x31e1d4, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Package Cache\\{929FBD26-9020-399B-9A7A-751D61F0B942}v12.0.21005\\packages\\vcRuntimeAdditional_amd64", lpFilePart=0x0) returned 0x75 [0092.975] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Package Cache\\{929FBD26-9020-399B-9A7A-751D61F0B942}v12.0.21005\\packages\\vcRuntimeAdditional_amd64\\", nBufferLength=0x105, lpBuffer=0x31e1a8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Package Cache\\{929FBD26-9020-399B-9A7A-751D61F0B942}v12.0.21005\\packages\\vcRuntimeAdditional_amd64\\", lpFilePart=0x0) returned 0x76 [0092.975] FindFirstFileW (in: lpFileName="C:\\Users\\All Users\\Package Cache\\{929FBD26-9020-399B-9A7A-751D61F0B942}v12.0.21005\\packages\\vcRuntimeAdditional_amd64\\*", lpFindFileData=0x31e3f4 | out: lpFindFileData=0x31e3f4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1a20bca0, ftCreationTime.dwHighDateTime=0x1d2e621, ftLastAccessTime.dwLowDateTime=0x1a257f60, ftLastAccessTime.dwHighDateTime=0x1d2e621, ftLastWriteTime.dwLowDateTime=0x1a257f60, ftLastWriteTime.dwHighDateTime=0x1d2e621, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x381ec0 [0092.975] FindClose (in: hFindFile=0x381ec0 | out: hFindFile=0x381ec0) returned 1 [0092.975] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e68c) returned 1 [0092.975] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e698) returned 1 [0092.975] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e6cc) returned 1 [0092.976] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Package Cache\\{929FBD26-9020-399B-9A7A-751D61F0B942}v12.0.21005\\packages\\vcRuntimeAdditional_amd64", nBufferLength=0x105, lpBuffer=0x31e1d4, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Package Cache\\{929FBD26-9020-399B-9A7A-751D61F0B942}v12.0.21005\\packages\\vcRuntimeAdditional_amd64", lpFilePart=0x0) returned 0x75 [0092.976] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Package Cache\\{929FBD26-9020-399B-9A7A-751D61F0B942}v12.0.21005\\packages\\vcRuntimeAdditional_amd64\\", nBufferLength=0x105, lpBuffer=0x31e1a8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Package Cache\\{929FBD26-9020-399B-9A7A-751D61F0B942}v12.0.21005\\packages\\vcRuntimeAdditional_amd64\\", lpFilePart=0x0) returned 0x76 [0092.976] FindFirstFileW (in: lpFileName="C:\\Users\\All Users\\Package Cache\\{929FBD26-9020-399B-9A7A-751D61F0B942}v12.0.21005\\packages\\vcRuntimeAdditional_amd64\\*", lpFindFileData=0x31e3f4 | out: lpFindFileData=0x31e3f4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1a20bca0, ftCreationTime.dwHighDateTime=0x1d2e621, ftLastAccessTime.dwLowDateTime=0x1a257f60, ftLastAccessTime.dwHighDateTime=0x1d2e621, ftLastWriteTime.dwLowDateTime=0x1a257f60, ftLastWriteTime.dwHighDateTime=0x1d2e621, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x381ec0 [0092.976] FindClose (in: hFindFile=0x381ec0 | out: hFindFile=0x381ec0) returned 1 [0092.976] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e68c) returned 1 [0092.976] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e698) returned 1 [0092.976] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e7bc) returned 1 [0092.976] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Package Cache\\{A749D8E6-B613-3BE3-8F5F-045C84EBA29B}v12.0.21005", nBufferLength=0x105, lpBuffer=0x31e2c4, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Package Cache\\{A749D8E6-B613-3BE3-8F5F-045C84EBA29B}v12.0.21005", lpFilePart=0x0) returned 0x52 [0092.976] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Package Cache\\{A749D8E6-B613-3BE3-8F5F-045C84EBA29B}v12.0.21005\\", nBufferLength=0x105, lpBuffer=0x31e298, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Package Cache\\{A749D8E6-B613-3BE3-8F5F-045C84EBA29B}v12.0.21005\\", lpFilePart=0x0) returned 0x53 [0092.976] FindFirstFileW (in: lpFileName="C:\\Users\\All Users\\Package Cache\\{A749D8E6-B613-3BE3-8F5F-045C84EBA29B}v12.0.21005\\*", lpFindFileData=0x31e4e4 | out: lpFindFileData=0x31e4e4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1a199880, ftCreationTime.dwHighDateTime=0x1d2e621, ftLastAccessTime.dwLowDateTime=0x1a1e5b40, ftLastAccessTime.dwHighDateTime=0x1d2e621, ftLastWriteTime.dwLowDateTime=0x1a1e5b40, ftLastWriteTime.dwHighDateTime=0x1d2e621, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x381ec0 [0092.976] FindClose (in: hFindFile=0x381ec0 | out: hFindFile=0x381ec0) returned 1 [0092.976] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e77c) returned 1 [0092.976] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e788) returned 1 [0092.977] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e7bc) returned 1 [0092.977] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Package Cache\\{A749D8E6-B613-3BE3-8F5F-045C84EBA29B}v12.0.21005", nBufferLength=0x105, lpBuffer=0x31e2c4, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Package Cache\\{A749D8E6-B613-3BE3-8F5F-045C84EBA29B}v12.0.21005", lpFilePart=0x0) returned 0x52 [0092.977] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Package Cache\\{A749D8E6-B613-3BE3-8F5F-045C84EBA29B}v12.0.21005\\", nBufferLength=0x105, lpBuffer=0x31e298, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Package Cache\\{A749D8E6-B613-3BE3-8F5F-045C84EBA29B}v12.0.21005\\", lpFilePart=0x0) returned 0x53 [0092.977] FindFirstFileW (in: lpFileName="C:\\Users\\All Users\\Package Cache\\{A749D8E6-B613-3BE3-8F5F-045C84EBA29B}v12.0.21005\\*", lpFindFileData=0x31e4e4 | out: lpFindFileData=0x31e4e4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1a199880, ftCreationTime.dwHighDateTime=0x1d2e621, ftLastAccessTime.dwLowDateTime=0x1a1e5b40, ftLastAccessTime.dwHighDateTime=0x1d2e621, ftLastWriteTime.dwLowDateTime=0x1a1e5b40, ftLastWriteTime.dwHighDateTime=0x1d2e621, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x381ec0 [0092.977] FindClose (in: hFindFile=0x381ec0 | out: hFindFile=0x381ec0) returned 1 [0092.977] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e77c) returned 1 [0092.977] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e788) returned 1 [0092.977] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e744) returned 1 [0092.977] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Package Cache\\{A749D8E6-B613-3BE3-8F5F-045C84EBA29B}v12.0.21005\\packages", nBufferLength=0x105, lpBuffer=0x31e24c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Package Cache\\{A749D8E6-B613-3BE3-8F5F-045C84EBA29B}v12.0.21005\\packages", lpFilePart=0x0) returned 0x5b [0092.977] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Package Cache\\{A749D8E6-B613-3BE3-8F5F-045C84EBA29B}v12.0.21005\\packages\\", nBufferLength=0x105, lpBuffer=0x31e220, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Package Cache\\{A749D8E6-B613-3BE3-8F5F-045C84EBA29B}v12.0.21005\\packages\\", lpFilePart=0x0) returned 0x5c [0092.977] FindFirstFileW (in: lpFileName="C:\\Users\\All Users\\Package Cache\\{A749D8E6-B613-3BE3-8F5F-045C84EBA29B}v12.0.21005\\packages\\*", lpFindFileData=0x31e46c | out: lpFindFileData=0x31e46c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1a1e5b40, ftCreationTime.dwHighDateTime=0x1d2e621, ftLastAccessTime.dwLowDateTime=0x1a1e5b40, ftLastAccessTime.dwHighDateTime=0x1d2e621, ftLastWriteTime.dwLowDateTime=0x1a1e5b40, ftLastWriteTime.dwHighDateTime=0x1d2e621, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x381ec0 [0092.977] FindClose (in: hFindFile=0x381ec0 | out: hFindFile=0x381ec0) returned 1 [0092.977] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e704) returned 1 [0092.977] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e710) returned 1 [0092.977] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e744) returned 1 [0092.977] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Package Cache\\{A749D8E6-B613-3BE3-8F5F-045C84EBA29B}v12.0.21005\\packages", nBufferLength=0x105, lpBuffer=0x31e24c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Package Cache\\{A749D8E6-B613-3BE3-8F5F-045C84EBA29B}v12.0.21005\\packages", lpFilePart=0x0) returned 0x5b [0092.977] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Package Cache\\{A749D8E6-B613-3BE3-8F5F-045C84EBA29B}v12.0.21005\\packages\\", nBufferLength=0x105, lpBuffer=0x31e220, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Package Cache\\{A749D8E6-B613-3BE3-8F5F-045C84EBA29B}v12.0.21005\\packages\\", lpFilePart=0x0) returned 0x5c [0092.977] FindFirstFileW (in: lpFileName="C:\\Users\\All Users\\Package Cache\\{A749D8E6-B613-3BE3-8F5F-045C84EBA29B}v12.0.21005\\packages\\*", lpFindFileData=0x31e46c | out: lpFindFileData=0x31e46c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1a1e5b40, ftCreationTime.dwHighDateTime=0x1d2e621, ftLastAccessTime.dwLowDateTime=0x1a1e5b40, ftLastAccessTime.dwHighDateTime=0x1d2e621, ftLastWriteTime.dwLowDateTime=0x1a1e5b40, ftLastWriteTime.dwHighDateTime=0x1d2e621, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x381ec0 [0092.978] FindClose (in: hFindFile=0x381ec0 | out: hFindFile=0x381ec0) returned 1 [0092.978] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e704) returned 1 [0092.978] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e710) returned 1 [0092.978] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e6cc) returned 1 [0092.978] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Package Cache\\{A749D8E6-B613-3BE3-8F5F-045C84EBA29B}v12.0.21005\\packages\\vcRuntimeMinimum_amd64", nBufferLength=0x105, lpBuffer=0x31e1d4, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Package Cache\\{A749D8E6-B613-3BE3-8F5F-045C84EBA29B}v12.0.21005\\packages\\vcRuntimeMinimum_amd64", lpFilePart=0x0) returned 0x72 [0092.978] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Package Cache\\{A749D8E6-B613-3BE3-8F5F-045C84EBA29B}v12.0.21005\\packages\\vcRuntimeMinimum_amd64\\", nBufferLength=0x105, lpBuffer=0x31e1a8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Package Cache\\{A749D8E6-B613-3BE3-8F5F-045C84EBA29B}v12.0.21005\\packages\\vcRuntimeMinimum_amd64\\", lpFilePart=0x0) returned 0x73 [0092.978] FindFirstFileW (in: lpFileName="C:\\Users\\All Users\\Package Cache\\{A749D8E6-B613-3BE3-8F5F-045C84EBA29B}v12.0.21005\\packages\\vcRuntimeMinimum_amd64\\*", lpFindFileData=0x31e3f4 | out: lpFindFileData=0x31e3f4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1a1e5b40, ftCreationTime.dwHighDateTime=0x1d2e621, ftLastAccessTime.dwLowDateTime=0x1a1e5b40, ftLastAccessTime.dwHighDateTime=0x1d2e621, ftLastWriteTime.dwLowDateTime=0x1a1e5b40, ftLastWriteTime.dwHighDateTime=0x1d2e621, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x381ec0 [0092.978] FindClose (in: hFindFile=0x381ec0 | out: hFindFile=0x381ec0) returned 1 [0092.978] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e68c) returned 1 [0092.978] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e698) returned 1 [0092.978] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e6cc) returned 1 [0092.978] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Package Cache\\{A749D8E6-B613-3BE3-8F5F-045C84EBA29B}v12.0.21005\\packages\\vcRuntimeMinimum_amd64", nBufferLength=0x105, lpBuffer=0x31e1d4, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Package Cache\\{A749D8E6-B613-3BE3-8F5F-045C84EBA29B}v12.0.21005\\packages\\vcRuntimeMinimum_amd64", lpFilePart=0x0) returned 0x72 [0092.978] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Package Cache\\{A749D8E6-B613-3BE3-8F5F-045C84EBA29B}v12.0.21005\\packages\\vcRuntimeMinimum_amd64\\", nBufferLength=0x105, lpBuffer=0x31e1a8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Package Cache\\{A749D8E6-B613-3BE3-8F5F-045C84EBA29B}v12.0.21005\\packages\\vcRuntimeMinimum_amd64\\", lpFilePart=0x0) returned 0x73 [0092.978] FindFirstFileW (in: lpFileName="C:\\Users\\All Users\\Package Cache\\{A749D8E6-B613-3BE3-8F5F-045C84EBA29B}v12.0.21005\\packages\\vcRuntimeMinimum_amd64\\*", lpFindFileData=0x31e3f4 | out: lpFindFileData=0x31e3f4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1a1e5b40, ftCreationTime.dwHighDateTime=0x1d2e621, ftLastAccessTime.dwLowDateTime=0x1a1e5b40, ftLastAccessTime.dwHighDateTime=0x1d2e621, ftLastWriteTime.dwLowDateTime=0x1a1e5b40, ftLastWriteTime.dwHighDateTime=0x1d2e621, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x381ec0 [0092.978] FindClose (in: hFindFile=0x381ec0 | out: hFindFile=0x381ec0) returned 1 [0092.978] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e68c) returned 1 [0092.978] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e698) returned 1 [0092.979] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e7bc) returned 1 [0092.979] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Package Cache\\{B175520C-86A2-35A7-8619-86DC379688B9}v11.0.61030", nBufferLength=0x105, lpBuffer=0x31e2c4, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Package Cache\\{B175520C-86A2-35A7-8619-86DC379688B9}v11.0.61030", lpFilePart=0x0) returned 0x52 [0092.979] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Package Cache\\{B175520C-86A2-35A7-8619-86DC379688B9}v11.0.61030\\", nBufferLength=0x105, lpBuffer=0x31e298, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Package Cache\\{B175520C-86A2-35A7-8619-86DC379688B9}v11.0.61030\\", lpFilePart=0x0) returned 0x53 [0092.979] FindFirstFileW (in: lpFileName="C:\\Users\\All Users\\Package Cache\\{B175520C-86A2-35A7-8619-86DC379688B9}v11.0.61030\\*", lpFindFileData=0x31e4e4 | out: lpFindFileData=0x31e4e4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xedbebcc0, ftCreationTime.dwHighDateTime=0x1d2e620, ftLastAccessTime.dwLowDateTime=0xedbebcc0, ftLastAccessTime.dwHighDateTime=0x1d2e620, ftLastWriteTime.dwLowDateTime=0xedbebcc0, ftLastWriteTime.dwHighDateTime=0x1d2e620, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x381ec0 [0092.979] FindClose (in: hFindFile=0x381ec0 | out: hFindFile=0x381ec0) returned 1 [0092.979] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e77c) returned 1 [0092.979] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e788) returned 1 [0092.979] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e7bc) returned 1 [0092.979] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Package Cache\\{B175520C-86A2-35A7-8619-86DC379688B9}v11.0.61030", nBufferLength=0x105, lpBuffer=0x31e2c4, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Package Cache\\{B175520C-86A2-35A7-8619-86DC379688B9}v11.0.61030", lpFilePart=0x0) returned 0x52 [0092.979] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Package Cache\\{B175520C-86A2-35A7-8619-86DC379688B9}v11.0.61030\\", nBufferLength=0x105, lpBuffer=0x31e298, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Package Cache\\{B175520C-86A2-35A7-8619-86DC379688B9}v11.0.61030\\", lpFilePart=0x0) returned 0x53 [0092.979] FindFirstFileW (in: lpFileName="C:\\Users\\All Users\\Package Cache\\{B175520C-86A2-35A7-8619-86DC379688B9}v11.0.61030\\*", lpFindFileData=0x31e4e4 | out: lpFindFileData=0x31e4e4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xedbebcc0, ftCreationTime.dwHighDateTime=0x1d2e620, ftLastAccessTime.dwLowDateTime=0xedbebcc0, ftLastAccessTime.dwHighDateTime=0x1d2e620, ftLastWriteTime.dwLowDateTime=0xedbebcc0, ftLastWriteTime.dwHighDateTime=0x1d2e620, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x381ec0 [0092.979] FindClose (in: hFindFile=0x381ec0 | out: hFindFile=0x381ec0) returned 1 [0092.979] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e77c) returned 1 [0092.979] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e788) returned 1 [0092.979] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e744) returned 1 [0092.979] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Package Cache\\{B175520C-86A2-35A7-8619-86DC379688B9}v11.0.61030\\packages", nBufferLength=0x105, lpBuffer=0x31e24c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Package Cache\\{B175520C-86A2-35A7-8619-86DC379688B9}v11.0.61030\\packages", lpFilePart=0x0) returned 0x5b [0092.979] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Package Cache\\{B175520C-86A2-35A7-8619-86DC379688B9}v11.0.61030\\packages\\", nBufferLength=0x105, lpBuffer=0x31e220, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Package Cache\\{B175520C-86A2-35A7-8619-86DC379688B9}v11.0.61030\\packages\\", lpFilePart=0x0) returned 0x5c [0092.980] FindFirstFileW (in: lpFileName="C:\\Users\\All Users\\Package Cache\\{B175520C-86A2-35A7-8619-86DC379688B9}v11.0.61030\\packages\\*", lpFindFileData=0x31e46c | out: lpFindFileData=0x31e46c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xedbebcc0, ftCreationTime.dwHighDateTime=0x1d2e620, ftLastAccessTime.dwLowDateTime=0xedbebcc0, ftLastAccessTime.dwHighDateTime=0x1d2e620, ftLastWriteTime.dwLowDateTime=0xedbebcc0, ftLastWriteTime.dwHighDateTime=0x1d2e620, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x381ec0 [0092.980] FindClose (in: hFindFile=0x381ec0 | out: hFindFile=0x381ec0) returned 1 [0092.980] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e704) returned 1 [0092.980] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e710) returned 1 [0092.980] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e744) returned 1 [0092.980] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Package Cache\\{B175520C-86A2-35A7-8619-86DC379688B9}v11.0.61030\\packages", nBufferLength=0x105, lpBuffer=0x31e24c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Package Cache\\{B175520C-86A2-35A7-8619-86DC379688B9}v11.0.61030\\packages", lpFilePart=0x0) returned 0x5b [0092.980] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Package Cache\\{B175520C-86A2-35A7-8619-86DC379688B9}v11.0.61030\\packages\\", nBufferLength=0x105, lpBuffer=0x31e220, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Package Cache\\{B175520C-86A2-35A7-8619-86DC379688B9}v11.0.61030\\packages\\", lpFilePart=0x0) returned 0x5c [0092.980] FindFirstFileW (in: lpFileName="C:\\Users\\All Users\\Package Cache\\{B175520C-86A2-35A7-8619-86DC379688B9}v11.0.61030\\packages\\*", lpFindFileData=0x31e46c | out: lpFindFileData=0x31e46c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xedbebcc0, ftCreationTime.dwHighDateTime=0x1d2e620, ftLastAccessTime.dwLowDateTime=0xedbebcc0, ftLastAccessTime.dwHighDateTime=0x1d2e620, ftLastWriteTime.dwLowDateTime=0xedbebcc0, ftLastWriteTime.dwHighDateTime=0x1d2e620, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x381ec0 [0092.980] FindClose (in: hFindFile=0x381ec0 | out: hFindFile=0x381ec0) returned 1 [0092.980] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e704) returned 1 [0092.980] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e710) returned 1 [0092.980] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e6cc) returned 1 [0092.980] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Package Cache\\{B175520C-86A2-35A7-8619-86DC379688B9}v11.0.61030\\packages\\vcRuntimeAdditional_x86", nBufferLength=0x105, lpBuffer=0x31e1d4, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Package Cache\\{B175520C-86A2-35A7-8619-86DC379688B9}v11.0.61030\\packages\\vcRuntimeAdditional_x86", lpFilePart=0x0) returned 0x73 [0092.980] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Package Cache\\{B175520C-86A2-35A7-8619-86DC379688B9}v11.0.61030\\packages\\vcRuntimeAdditional_x86\\", nBufferLength=0x105, lpBuffer=0x31e1a8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Package Cache\\{B175520C-86A2-35A7-8619-86DC379688B9}v11.0.61030\\packages\\vcRuntimeAdditional_x86\\", lpFilePart=0x0) returned 0x74 [0092.980] FindFirstFileW (in: lpFileName="C:\\Users\\All Users\\Package Cache\\{B175520C-86A2-35A7-8619-86DC379688B9}v11.0.61030\\packages\\vcRuntimeAdditional_x86\\*", lpFindFileData=0x31e3f4 | out: lpFindFileData=0x31e3f4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xedbebcc0, ftCreationTime.dwHighDateTime=0x1d2e620, ftLastAccessTime.dwLowDateTime=0xedc37f80, ftLastAccessTime.dwHighDateTime=0x1d2e620, ftLastWriteTime.dwLowDateTime=0xedc37f80, ftLastWriteTime.dwHighDateTime=0x1d2e620, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x381ec0 [0092.980] FindClose (in: hFindFile=0x381ec0 | out: hFindFile=0x381ec0) returned 1 [0092.981] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e68c) returned 1 [0092.981] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e698) returned 1 [0092.981] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e6cc) returned 1 [0092.981] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Package Cache\\{B175520C-86A2-35A7-8619-86DC379688B9}v11.0.61030\\packages\\vcRuntimeAdditional_x86", nBufferLength=0x105, lpBuffer=0x31e1d4, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Package Cache\\{B175520C-86A2-35A7-8619-86DC379688B9}v11.0.61030\\packages\\vcRuntimeAdditional_x86", lpFilePart=0x0) returned 0x73 [0092.981] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Package Cache\\{B175520C-86A2-35A7-8619-86DC379688B9}v11.0.61030\\packages\\vcRuntimeAdditional_x86\\", nBufferLength=0x105, lpBuffer=0x31e1a8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Package Cache\\{B175520C-86A2-35A7-8619-86DC379688B9}v11.0.61030\\packages\\vcRuntimeAdditional_x86\\", lpFilePart=0x0) returned 0x74 [0092.981] FindFirstFileW (in: lpFileName="C:\\Users\\All Users\\Package Cache\\{B175520C-86A2-35A7-8619-86DC379688B9}v11.0.61030\\packages\\vcRuntimeAdditional_x86\\*", lpFindFileData=0x31e3f4 | out: lpFindFileData=0x31e3f4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xedbebcc0, ftCreationTime.dwHighDateTime=0x1d2e620, ftLastAccessTime.dwLowDateTime=0xedc37f80, ftLastAccessTime.dwHighDateTime=0x1d2e620, ftLastWriteTime.dwLowDateTime=0xedc37f80, ftLastWriteTime.dwHighDateTime=0x1d2e620, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x381ec0 [0092.981] FindClose (in: hFindFile=0x381ec0 | out: hFindFile=0x381ec0) returned 1 [0092.981] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e68c) returned 1 [0092.981] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e698) returned 1 [0092.981] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e7bc) returned 1 [0092.981] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Package Cache\\{BD95A8CD-1D9F-35AD-981A-3E7925026EBB}v11.0.61030", nBufferLength=0x105, lpBuffer=0x31e2c4, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Package Cache\\{BD95A8CD-1D9F-35AD-981A-3E7925026EBB}v11.0.61030", lpFilePart=0x0) returned 0x52 [0092.981] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Package Cache\\{BD95A8CD-1D9F-35AD-981A-3E7925026EBB}v11.0.61030\\", nBufferLength=0x105, lpBuffer=0x31e298, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Package Cache\\{BD95A8CD-1D9F-35AD-981A-3E7925026EBB}v11.0.61030\\", lpFilePart=0x0) returned 0x53 [0092.981] FindFirstFileW (in: lpFileName="C:\\Users\\All Users\\Package Cache\\{BD95A8CD-1D9F-35AD-981A-3E7925026EBB}v11.0.61030\\*", lpFindFileData=0x31e4e4 | out: lpFindFileData=0x31e4e4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xecd7d760, ftCreationTime.dwHighDateTime=0x1d2e620, ftLastAccessTime.dwLowDateTime=0xedbebcc0, ftLastAccessTime.dwHighDateTime=0x1d2e620, ftLastWriteTime.dwLowDateTime=0xedbebcc0, ftLastWriteTime.dwHighDateTime=0x1d2e620, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x381ec0 [0092.981] FindClose (in: hFindFile=0x381ec0 | out: hFindFile=0x381ec0) returned 1 [0092.981] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Package Cache\\{BD95A8CD-1D9F-35AD-981A-3E7925026EBB}v11.0.61030", nBufferLength=0x105, lpBuffer=0x31e2c4, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Package Cache\\{BD95A8CD-1D9F-35AD-981A-3E7925026EBB}v11.0.61030", lpFilePart=0x0) returned 0x52 [0092.981] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Package Cache\\{BD95A8CD-1D9F-35AD-981A-3E7925026EBB}v11.0.61030\\", nBufferLength=0x105, lpBuffer=0x31e298, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Package Cache\\{BD95A8CD-1D9F-35AD-981A-3E7925026EBB}v11.0.61030\\", lpFilePart=0x0) returned 0x53 [0092.981] FindFirstFileW (in: lpFileName="C:\\Users\\All Users\\Package Cache\\{BD95A8CD-1D9F-35AD-981A-3E7925026EBB}v11.0.61030\\*", lpFindFileData=0x31e4e4 | out: lpFindFileData=0x31e4e4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xecd7d760, ftCreationTime.dwHighDateTime=0x1d2e620, ftLastAccessTime.dwLowDateTime=0xedbebcc0, ftLastAccessTime.dwHighDateTime=0x1d2e620, ftLastWriteTime.dwLowDateTime=0xedbebcc0, ftLastWriteTime.dwHighDateTime=0x1d2e620, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x381ec0 [0092.982] FindClose (in: hFindFile=0x381ec0 | out: hFindFile=0x381ec0) returned 1 [0092.982] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Package Cache\\{BD95A8CD-1D9F-35AD-981A-3E7925026EBB}v11.0.61030\\packages", nBufferLength=0x105, lpBuffer=0x31e24c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Package Cache\\{BD95A8CD-1D9F-35AD-981A-3E7925026EBB}v11.0.61030\\packages", lpFilePart=0x0) returned 0x5b [0092.982] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Package Cache\\{BD95A8CD-1D9F-35AD-981A-3E7925026EBB}v11.0.61030\\packages\\", nBufferLength=0x105, lpBuffer=0x31e220, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Package Cache\\{BD95A8CD-1D9F-35AD-981A-3E7925026EBB}v11.0.61030\\packages\\", lpFilePart=0x0) returned 0x5c [0092.982] FindFirstFileW (in: lpFileName="C:\\Users\\All Users\\Package Cache\\{BD95A8CD-1D9F-35AD-981A-3E7925026EBB}v11.0.61030\\packages\\*", lpFindFileData=0x31e46c | out: lpFindFileData=0x31e46c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xedbebcc0, ftCreationTime.dwHighDateTime=0x1d2e620, ftLastAccessTime.dwLowDateTime=0xedbebcc0, ftLastAccessTime.dwHighDateTime=0x1d2e620, ftLastWriteTime.dwLowDateTime=0xedbebcc0, ftLastWriteTime.dwHighDateTime=0x1d2e620, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x381ec0 [0092.982] FindClose (in: hFindFile=0x381ec0 | out: hFindFile=0x381ec0) returned 1 [0092.982] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Package Cache\\{BD95A8CD-1D9F-35AD-981A-3E7925026EBB}v11.0.61030\\packages", nBufferLength=0x105, lpBuffer=0x31e24c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Package Cache\\{BD95A8CD-1D9F-35AD-981A-3E7925026EBB}v11.0.61030\\packages", lpFilePart=0x0) returned 0x5b [0092.982] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Package Cache\\{BD95A8CD-1D9F-35AD-981A-3E7925026EBB}v11.0.61030\\packages\\", nBufferLength=0x105, lpBuffer=0x31e220, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Package Cache\\{BD95A8CD-1D9F-35AD-981A-3E7925026EBB}v11.0.61030\\packages\\", lpFilePart=0x0) returned 0x5c [0092.982] FindFirstFileW (in: lpFileName="C:\\Users\\All Users\\Package Cache\\{BD95A8CD-1D9F-35AD-981A-3E7925026EBB}v11.0.61030\\packages\\*", lpFindFileData=0x31e46c | out: lpFindFileData=0x31e46c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xedbebcc0, ftCreationTime.dwHighDateTime=0x1d2e620, ftLastAccessTime.dwLowDateTime=0xedbebcc0, ftLastAccessTime.dwHighDateTime=0x1d2e620, ftLastWriteTime.dwLowDateTime=0xedbebcc0, ftLastWriteTime.dwHighDateTime=0x1d2e620, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x381ec0 [0092.982] FindClose (in: hFindFile=0x381ec0 | out: hFindFile=0x381ec0) returned 1 [0092.982] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Package Cache\\{BD95A8CD-1D9F-35AD-981A-3E7925026EBB}v11.0.61030\\packages\\vcRuntimeMinimum_x86", nBufferLength=0x105, lpBuffer=0x31e1d4, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Package Cache\\{BD95A8CD-1D9F-35AD-981A-3E7925026EBB}v11.0.61030\\packages\\vcRuntimeMinimum_x86", lpFilePart=0x0) returned 0x70 [0092.982] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Package Cache\\{BD95A8CD-1D9F-35AD-981A-3E7925026EBB}v11.0.61030\\packages\\vcRuntimeMinimum_x86\\", nBufferLength=0x105, lpBuffer=0x31e1a8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Package Cache\\{BD95A8CD-1D9F-35AD-981A-3E7925026EBB}v11.0.61030\\packages\\vcRuntimeMinimum_x86\\", lpFilePart=0x0) returned 0x71 [0092.982] FindFirstFileW (in: lpFileName="C:\\Users\\All Users\\Package Cache\\{BD95A8CD-1D9F-35AD-981A-3E7925026EBB}v11.0.61030\\packages\\vcRuntimeMinimum_x86\\*", lpFindFileData=0x31e3f4 | out: lpFindFileData=0x31e3f4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xedbebcc0, ftCreationTime.dwHighDateTime=0x1d2e620, ftLastAccessTime.dwLowDateTime=0xedbebcc0, ftLastAccessTime.dwHighDateTime=0x1d2e620, ftLastWriteTime.dwLowDateTime=0xedbebcc0, ftLastWriteTime.dwHighDateTime=0x1d2e620, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x381ec0 [0092.983] FindClose (in: hFindFile=0x381ec0 | out: hFindFile=0x381ec0) returned 1 [0092.983] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Package Cache\\{BD95A8CD-1D9F-35AD-981A-3E7925026EBB}v11.0.61030\\packages\\vcRuntimeMinimum_x86", nBufferLength=0x105, lpBuffer=0x31e1d4, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Package Cache\\{BD95A8CD-1D9F-35AD-981A-3E7925026EBB}v11.0.61030\\packages\\vcRuntimeMinimum_x86", lpFilePart=0x0) returned 0x70 [0092.983] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Package Cache\\{BD95A8CD-1D9F-35AD-981A-3E7925026EBB}v11.0.61030\\packages\\vcRuntimeMinimum_x86\\", nBufferLength=0x105, lpBuffer=0x31e1a8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Package Cache\\{BD95A8CD-1D9F-35AD-981A-3E7925026EBB}v11.0.61030\\packages\\vcRuntimeMinimum_x86\\", lpFilePart=0x0) returned 0x71 [0092.983] FindFirstFileW (in: lpFileName="C:\\Users\\All Users\\Package Cache\\{BD95A8CD-1D9F-35AD-981A-3E7925026EBB}v11.0.61030\\packages\\vcRuntimeMinimum_x86\\*", lpFindFileData=0x31e3f4 | out: lpFindFileData=0x31e3f4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xedbebcc0, ftCreationTime.dwHighDateTime=0x1d2e620, ftLastAccessTime.dwLowDateTime=0xedbebcc0, ftLastAccessTime.dwHighDateTime=0x1d2e620, ftLastWriteTime.dwLowDateTime=0xedbebcc0, ftLastWriteTime.dwHighDateTime=0x1d2e620, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x381ec0 [0092.983] FindClose (in: hFindFile=0x381ec0 | out: hFindFile=0x381ec0) returned 1 [0092.983] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Package Cache\\{ca67548a-5ebe-413a-b50c-4b9ceb6d66c6}", nBufferLength=0x105, lpBuffer=0x31e2c4, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Package Cache\\{ca67548a-5ebe-413a-b50c-4b9ceb6d66c6}", lpFilePart=0x0) returned 0x47 [0092.983] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Package Cache\\{ca67548a-5ebe-413a-b50c-4b9ceb6d66c6}\\", nBufferLength=0x105, lpBuffer=0x31e298, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Package Cache\\{ca67548a-5ebe-413a-b50c-4b9ceb6d66c6}\\", lpFilePart=0x0) returned 0x48 [0092.983] FindFirstFileW (in: lpFileName="C:\\Users\\All Users\\Package Cache\\{ca67548a-5ebe-413a-b50c-4b9ceb6d66c6}\\*", lpFindFileData=0x31e4e4 | out: lpFindFileData=0x31e4e4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfaaff840, ftCreationTime.dwHighDateTime=0x1d2e620, ftLastAccessTime.dwLowDateTime=0xfaaff840, ftLastAccessTime.dwHighDateTime=0x1d2e620, ftLastWriteTime.dwLowDateTime=0xfaaff840, ftLastWriteTime.dwHighDateTime=0x1d2e620, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x381ec0 [0092.983] FindClose (in: hFindFile=0x381ec0 | out: hFindFile=0x381ec0) returned 1 [0092.983] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Package Cache\\{ca67548a-5ebe-413a-b50c-4b9ceb6d66c6}", nBufferLength=0x105, lpBuffer=0x31e2c4, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Package Cache\\{ca67548a-5ebe-413a-b50c-4b9ceb6d66c6}", lpFilePart=0x0) returned 0x47 [0092.983] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Package Cache\\{ca67548a-5ebe-413a-b50c-4b9ceb6d66c6}\\", nBufferLength=0x105, lpBuffer=0x31e298, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Package Cache\\{ca67548a-5ebe-413a-b50c-4b9ceb6d66c6}\\", lpFilePart=0x0) returned 0x48 [0092.983] FindFirstFileW (in: lpFileName="C:\\Users\\All Users\\Package Cache\\{ca67548a-5ebe-413a-b50c-4b9ceb6d66c6}\\*", lpFindFileData=0x31e4e4 | out: lpFindFileData=0x31e4e4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfaaff840, ftCreationTime.dwHighDateTime=0x1d2e620, ftLastAccessTime.dwLowDateTime=0xfaaff840, ftLastAccessTime.dwHighDateTime=0x1d2e620, ftLastWriteTime.dwLowDateTime=0xfaaff840, ftLastWriteTime.dwHighDateTime=0x1d2e620, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x381ec0 [0092.983] FindClose (in: hFindFile=0x381ec0 | out: hFindFile=0x381ec0) returned 1 [0092.984] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Package Cache\\{CF2BEA3C-26EA-32F8-AA9B-331F7E34BA97}v11.0.61030", nBufferLength=0x105, lpBuffer=0x31e2c4, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Package Cache\\{CF2BEA3C-26EA-32F8-AA9B-331F7E34BA97}v11.0.61030", lpFilePart=0x0) returned 0x52 [0092.984] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Package Cache\\{CF2BEA3C-26EA-32F8-AA9B-331F7E34BA97}v11.0.61030\\", nBufferLength=0x105, lpBuffer=0x31e298, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Package Cache\\{CF2BEA3C-26EA-32F8-AA9B-331F7E34BA97}v11.0.61030\\", lpFilePart=0x0) returned 0x53 [0092.984] FindFirstFileW (in: lpFileName="C:\\Users\\All Users\\Package Cache\\{CF2BEA3C-26EA-32F8-AA9B-331F7E34BA97}v11.0.61030\\*", lpFindFileData=0x31e4e4 | out: lpFindFileData=0x31e4e4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfab71c60, ftCreationTime.dwHighDateTime=0x1d2e620, ftLastAccessTime.dwLowDateTime=0xfabbdf20, ftLastAccessTime.dwHighDateTime=0x1d2e620, ftLastWriteTime.dwLowDateTime=0xfabbdf20, ftLastWriteTime.dwHighDateTime=0x1d2e620, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x381ec0 [0092.984] FindClose (in: hFindFile=0x381ec0 | out: hFindFile=0x381ec0) returned 1 [0092.984] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Package Cache\\{CF2BEA3C-26EA-32F8-AA9B-331F7E34BA97}v11.0.61030", nBufferLength=0x105, lpBuffer=0x31e2c4, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Package Cache\\{CF2BEA3C-26EA-32F8-AA9B-331F7E34BA97}v11.0.61030", lpFilePart=0x0) returned 0x52 [0092.984] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Package Cache\\{CF2BEA3C-26EA-32F8-AA9B-331F7E34BA97}v11.0.61030\\", nBufferLength=0x105, lpBuffer=0x31e298, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Package Cache\\{CF2BEA3C-26EA-32F8-AA9B-331F7E34BA97}v11.0.61030\\", lpFilePart=0x0) returned 0x53 [0092.984] FindFirstFileW (in: lpFileName="C:\\Users\\All Users\\Package Cache\\{CF2BEA3C-26EA-32F8-AA9B-331F7E34BA97}v11.0.61030\\*", lpFindFileData=0x31e4e4 | out: lpFindFileData=0x31e4e4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfab71c60, ftCreationTime.dwHighDateTime=0x1d2e620, ftLastAccessTime.dwLowDateTime=0xfabbdf20, ftLastAccessTime.dwHighDateTime=0x1d2e620, ftLastWriteTime.dwLowDateTime=0xfabbdf20, ftLastWriteTime.dwHighDateTime=0x1d2e620, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x381ec0 [0092.984] FindClose (in: hFindFile=0x381ec0 | out: hFindFile=0x381ec0) returned 1 [0092.984] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Package Cache\\{CF2BEA3C-26EA-32F8-AA9B-331F7E34BA97}v11.0.61030\\packages", nBufferLength=0x105, lpBuffer=0x31e24c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Package Cache\\{CF2BEA3C-26EA-32F8-AA9B-331F7E34BA97}v11.0.61030\\packages", lpFilePart=0x0) returned 0x5b [0092.984] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Package Cache\\{CF2BEA3C-26EA-32F8-AA9B-331F7E34BA97}v11.0.61030\\packages\\", nBufferLength=0x105, lpBuffer=0x31e220, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Package Cache\\{CF2BEA3C-26EA-32F8-AA9B-331F7E34BA97}v11.0.61030\\packages\\", lpFilePart=0x0) returned 0x5c [0092.984] FindFirstFileW (in: lpFileName="C:\\Users\\All Users\\Package Cache\\{CF2BEA3C-26EA-32F8-AA9B-331F7E34BA97}v11.0.61030\\packages\\*", lpFindFileData=0x31e46c | out: lpFindFileData=0x31e46c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfabbdf20, ftCreationTime.dwHighDateTime=0x1d2e620, ftLastAccessTime.dwLowDateTime=0xfabbdf20, ftLastAccessTime.dwHighDateTime=0x1d2e620, ftLastWriteTime.dwLowDateTime=0xfabbdf20, ftLastWriteTime.dwHighDateTime=0x1d2e620, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x381ec0 [0092.984] FindClose (in: hFindFile=0x381ec0 | out: hFindFile=0x381ec0) returned 1 [0092.984] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Package Cache\\{CF2BEA3C-26EA-32F8-AA9B-331F7E34BA97}v11.0.61030\\packages", nBufferLength=0x105, lpBuffer=0x31e24c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Package Cache\\{CF2BEA3C-26EA-32F8-AA9B-331F7E34BA97}v11.0.61030\\packages", lpFilePart=0x0) returned 0x5b [0092.985] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Package Cache\\{CF2BEA3C-26EA-32F8-AA9B-331F7E34BA97}v11.0.61030\\packages\\", nBufferLength=0x105, lpBuffer=0x31e220, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Package Cache\\{CF2BEA3C-26EA-32F8-AA9B-331F7E34BA97}v11.0.61030\\packages\\", lpFilePart=0x0) returned 0x5c [0092.985] FindFirstFileW (in: lpFileName="C:\\Users\\All Users\\Package Cache\\{CF2BEA3C-26EA-32F8-AA9B-331F7E34BA97}v11.0.61030\\packages\\*", lpFindFileData=0x31e46c | out: lpFindFileData=0x31e46c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfabbdf20, ftCreationTime.dwHighDateTime=0x1d2e620, ftLastAccessTime.dwLowDateTime=0xfabbdf20, ftLastAccessTime.dwHighDateTime=0x1d2e620, ftLastWriteTime.dwLowDateTime=0xfabbdf20, ftLastWriteTime.dwHighDateTime=0x1d2e620, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x381ec0 [0092.985] FindClose (in: hFindFile=0x381ec0 | out: hFindFile=0x381ec0) returned 1 [0092.985] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Package Cache\\{CF2BEA3C-26EA-32F8-AA9B-331F7E34BA97}v11.0.61030\\packages\\vcRuntimeMinimum_amd64", nBufferLength=0x105, lpBuffer=0x31e1d4, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Package Cache\\{CF2BEA3C-26EA-32F8-AA9B-331F7E34BA97}v11.0.61030\\packages\\vcRuntimeMinimum_amd64", lpFilePart=0x0) returned 0x72 [0092.985] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Package Cache\\{CF2BEA3C-26EA-32F8-AA9B-331F7E34BA97}v11.0.61030\\packages\\vcRuntimeMinimum_amd64\\", nBufferLength=0x105, lpBuffer=0x31e1a8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Package Cache\\{CF2BEA3C-26EA-32F8-AA9B-331F7E34BA97}v11.0.61030\\packages\\vcRuntimeMinimum_amd64\\", lpFilePart=0x0) returned 0x73 [0092.985] FindFirstFileW (in: lpFileName="C:\\Users\\All Users\\Package Cache\\{CF2BEA3C-26EA-32F8-AA9B-331F7E34BA97}v11.0.61030\\packages\\vcRuntimeMinimum_amd64\\*", lpFindFileData=0x31e3f4 | out: lpFindFileData=0x31e3f4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfabbdf20, ftCreationTime.dwHighDateTime=0x1d2e620, ftLastAccessTime.dwLowDateTime=0xfabe4080, ftLastAccessTime.dwHighDateTime=0x1d2e620, ftLastWriteTime.dwLowDateTime=0xfabe4080, ftLastWriteTime.dwHighDateTime=0x1d2e620, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x381ec0 [0092.985] FindClose (in: hFindFile=0x381ec0 | out: hFindFile=0x381ec0) returned 1 [0092.985] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Package Cache\\{CF2BEA3C-26EA-32F8-AA9B-331F7E34BA97}v11.0.61030\\packages\\vcRuntimeMinimum_amd64", nBufferLength=0x105, lpBuffer=0x31e1d4, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Package Cache\\{CF2BEA3C-26EA-32F8-AA9B-331F7E34BA97}v11.0.61030\\packages\\vcRuntimeMinimum_amd64", lpFilePart=0x0) returned 0x72 [0092.985] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Package Cache\\{CF2BEA3C-26EA-32F8-AA9B-331F7E34BA97}v11.0.61030\\packages\\vcRuntimeMinimum_amd64\\", nBufferLength=0x105, lpBuffer=0x31e1a8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Package Cache\\{CF2BEA3C-26EA-32F8-AA9B-331F7E34BA97}v11.0.61030\\packages\\vcRuntimeMinimum_amd64\\", lpFilePart=0x0) returned 0x73 [0092.985] FindFirstFileW (in: lpFileName="C:\\Users\\All Users\\Package Cache\\{CF2BEA3C-26EA-32F8-AA9B-331F7E34BA97}v11.0.61030\\packages\\vcRuntimeMinimum_amd64\\*", lpFindFileData=0x31e3f4 | out: lpFindFileData=0x31e3f4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfabbdf20, ftCreationTime.dwHighDateTime=0x1d2e620, ftLastAccessTime.dwLowDateTime=0xfabe4080, ftLastAccessTime.dwHighDateTime=0x1d2e620, ftLastWriteTime.dwLowDateTime=0xfabe4080, ftLastWriteTime.dwHighDateTime=0x1d2e620, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x381ec0 [0092.985] FindClose (in: hFindFile=0x381ec0 | out: hFindFile=0x381ec0) returned 1 [0092.985] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Package Cache\\{E512788E-C50B-3858-A4B9-73AD5F3F9E93}v14.10.25017", nBufferLength=0x105, lpBuffer=0x31e2c4, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Package Cache\\{E512788E-C50B-3858-A4B9-73AD5F3F9E93}v14.10.25017", lpFilePart=0x0) returned 0x53 [0092.985] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Package Cache\\{E512788E-C50B-3858-A4B9-73AD5F3F9E93}v14.10.25017\\", nBufferLength=0x105, lpBuffer=0x31e298, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Package Cache\\{E512788E-C50B-3858-A4B9-73AD5F3F9E93}v14.10.25017\\", lpFilePart=0x0) returned 0x54 [0092.985] FindFirstFileW (in: lpFileName="C:\\Users\\All Users\\Package Cache\\{E512788E-C50B-3858-A4B9-73AD5F3F9E93}v14.10.25017\\*", lpFindFileData=0x31e4e4 | out: lpFindFileData=0x31e4e4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa93425b0, ftCreationTime.dwHighDateTime=0x1d2fab4, ftLastAccessTime.dwLowDateTime=0xa9368710, ftLastAccessTime.dwHighDateTime=0x1d2fab4, ftLastWriteTime.dwLowDateTime=0xa9368710, ftLastWriteTime.dwHighDateTime=0x1d2fab4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x381ec0 [0092.986] FindClose (in: hFindFile=0x381ec0 | out: hFindFile=0x381ec0) returned 1 [0092.986] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Package Cache\\{E512788E-C50B-3858-A4B9-73AD5F3F9E93}v14.10.25017", nBufferLength=0x105, lpBuffer=0x31e2c4, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Package Cache\\{E512788E-C50B-3858-A4B9-73AD5F3F9E93}v14.10.25017", lpFilePart=0x0) returned 0x53 [0092.986] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Package Cache\\{E512788E-C50B-3858-A4B9-73AD5F3F9E93}v14.10.25017\\", nBufferLength=0x105, lpBuffer=0x31e298, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Package Cache\\{E512788E-C50B-3858-A4B9-73AD5F3F9E93}v14.10.25017\\", lpFilePart=0x0) returned 0x54 [0092.986] FindFirstFileW (in: lpFileName="C:\\Users\\All Users\\Package Cache\\{E512788E-C50B-3858-A4B9-73AD5F3F9E93}v14.10.25017\\*", lpFindFileData=0x31e4e4 | out: lpFindFileData=0x31e4e4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa93425b0, ftCreationTime.dwHighDateTime=0x1d2fab4, ftLastAccessTime.dwLowDateTime=0xa9368710, ftLastAccessTime.dwHighDateTime=0x1d2fab4, ftLastWriteTime.dwLowDateTime=0xa9368710, ftLastWriteTime.dwHighDateTime=0x1d2fab4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x381ec0 [0092.986] FindClose (in: hFindFile=0x381ec0 | out: hFindFile=0x381ec0) returned 1 [0092.986] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Package Cache\\{E512788E-C50B-3858-A4B9-73AD5F3F9E93}v14.10.25017\\packages", nBufferLength=0x105, lpBuffer=0x31e24c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Package Cache\\{E512788E-C50B-3858-A4B9-73AD5F3F9E93}v14.10.25017\\packages", lpFilePart=0x0) returned 0x5c [0092.986] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Package Cache\\{E512788E-C50B-3858-A4B9-73AD5F3F9E93}v14.10.25017\\packages\\", nBufferLength=0x105, lpBuffer=0x31e220, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Package Cache\\{E512788E-C50B-3858-A4B9-73AD5F3F9E93}v14.10.25017\\packages\\", lpFilePart=0x0) returned 0x5d [0092.986] FindFirstFileW (in: lpFileName="C:\\Users\\All Users\\Package Cache\\{E512788E-C50B-3858-A4B9-73AD5F3F9E93}v14.10.25017\\packages\\*", lpFindFileData=0x31e46c | out: lpFindFileData=0x31e46c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa9368710, ftCreationTime.dwHighDateTime=0x1d2fab4, ftLastAccessTime.dwLowDateTime=0xa9368710, ftLastAccessTime.dwHighDateTime=0x1d2fab4, ftLastWriteTime.dwLowDateTime=0xa9368710, ftLastWriteTime.dwHighDateTime=0x1d2fab4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x381ec0 [0092.986] FindClose (in: hFindFile=0x381ec0 | out: hFindFile=0x381ec0) returned 1 [0092.986] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Package Cache\\{E512788E-C50B-3858-A4B9-73AD5F3F9E93}v14.10.25017\\packages", nBufferLength=0x105, lpBuffer=0x31e24c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Package Cache\\{E512788E-C50B-3858-A4B9-73AD5F3F9E93}v14.10.25017\\packages", lpFilePart=0x0) returned 0x5c [0092.986] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Package Cache\\{E512788E-C50B-3858-A4B9-73AD5F3F9E93}v14.10.25017\\packages\\", nBufferLength=0x105, lpBuffer=0x31e220, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Package Cache\\{E512788E-C50B-3858-A4B9-73AD5F3F9E93}v14.10.25017\\packages\\", lpFilePart=0x0) returned 0x5d [0092.986] FindFirstFileW (in: lpFileName="C:\\Users\\All Users\\Package Cache\\{E512788E-C50B-3858-A4B9-73AD5F3F9E93}v14.10.25017\\packages\\*", lpFindFileData=0x31e46c | out: lpFindFileData=0x31e46c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa9368710, ftCreationTime.dwHighDateTime=0x1d2fab4, ftLastAccessTime.dwLowDateTime=0xa9368710, ftLastAccessTime.dwHighDateTime=0x1d2fab4, ftLastWriteTime.dwLowDateTime=0xa9368710, ftLastWriteTime.dwHighDateTime=0x1d2fab4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x381ec0 [0092.987] FindClose (in: hFindFile=0x381ec0 | out: hFindFile=0x381ec0) returned 1 [0092.987] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Package Cache\\{E512788E-C50B-3858-A4B9-73AD5F3F9E93}v14.10.25017\\packages\\vcRuntimeAdditional_amd64", nBufferLength=0x105, lpBuffer=0x31e1d4, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Package Cache\\{E512788E-C50B-3858-A4B9-73AD5F3F9E93}v14.10.25017\\packages\\vcRuntimeAdditional_amd64", lpFilePart=0x0) returned 0x76 [0092.987] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Package Cache\\{E512788E-C50B-3858-A4B9-73AD5F3F9E93}v14.10.25017\\packages\\vcRuntimeAdditional_amd64\\", nBufferLength=0x105, lpBuffer=0x31e1a8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Package Cache\\{E512788E-C50B-3858-A4B9-73AD5F3F9E93}v14.10.25017\\packages\\vcRuntimeAdditional_amd64\\", lpFilePart=0x0) returned 0x77 [0092.987] FindFirstFileW (in: lpFileName="C:\\Users\\All Users\\Package Cache\\{E512788E-C50B-3858-A4B9-73AD5F3F9E93}v14.10.25017\\packages\\vcRuntimeAdditional_amd64\\*", lpFindFileData=0x31e3f4 | out: lpFindFileData=0x31e3f4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa9368710, ftCreationTime.dwHighDateTime=0x1d2fab4, ftLastAccessTime.dwLowDateTime=0xa938e870, ftLastAccessTime.dwHighDateTime=0x1d2fab4, ftLastWriteTime.dwLowDateTime=0xa938e870, ftLastWriteTime.dwHighDateTime=0x1d2fab4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x381ec0 [0092.987] FindClose (in: hFindFile=0x381ec0 | out: hFindFile=0x381ec0) returned 1 [0092.987] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Package Cache\\{E512788E-C50B-3858-A4B9-73AD5F3F9E93}v14.10.25017\\packages\\vcRuntimeAdditional_amd64", nBufferLength=0x105, lpBuffer=0x31e1d4, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Package Cache\\{E512788E-C50B-3858-A4B9-73AD5F3F9E93}v14.10.25017\\packages\\vcRuntimeAdditional_amd64", lpFilePart=0x0) returned 0x76 [0092.987] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Package Cache\\{E512788E-C50B-3858-A4B9-73AD5F3F9E93}v14.10.25017\\packages\\vcRuntimeAdditional_amd64\\", nBufferLength=0x105, lpBuffer=0x31e1a8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Package Cache\\{E512788E-C50B-3858-A4B9-73AD5F3F9E93}v14.10.25017\\packages\\vcRuntimeAdditional_amd64\\", lpFilePart=0x0) returned 0x77 [0092.987] FindFirstFileW (in: lpFileName="C:\\Users\\All Users\\Package Cache\\{E512788E-C50B-3858-A4B9-73AD5F3F9E93}v14.10.25017\\packages\\vcRuntimeAdditional_amd64\\*", lpFindFileData=0x31e3f4 | out: lpFindFileData=0x31e3f4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa9368710, ftCreationTime.dwHighDateTime=0x1d2fab4, ftLastAccessTime.dwLowDateTime=0xa938e870, ftLastAccessTime.dwHighDateTime=0x1d2fab4, ftLastWriteTime.dwLowDateTime=0xa938e870, ftLastWriteTime.dwHighDateTime=0x1d2fab4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x381ec0 [0092.987] FindClose (in: hFindFile=0x381ec0 | out: hFindFile=0x381ec0) returned 1 [0092.987] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Package Cache\\{e52a6842-b0ac-476e-b48f-378a97a67346}", nBufferLength=0x105, lpBuffer=0x31e2c4, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Package Cache\\{e52a6842-b0ac-476e-b48f-378a97a67346}", lpFilePart=0x0) returned 0x47 [0092.987] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Package Cache\\{e52a6842-b0ac-476e-b48f-378a97a67346}\\", nBufferLength=0x105, lpBuffer=0x31e298, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Package Cache\\{e52a6842-b0ac-476e-b48f-378a97a67346}\\", lpFilePart=0x0) returned 0x48 [0092.987] FindFirstFileW (in: lpFileName="C:\\Users\\All Users\\Package Cache\\{e52a6842-b0ac-476e-b48f-378a97a67346}\\*", lpFindFileData=0x31e4e4 | out: lpFindFileData=0x31e4e4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa912d270, ftCreationTime.dwHighDateTime=0x1d2fab4, ftLastAccessTime.dwLowDateTime=0xa912d270, ftLastAccessTime.dwHighDateTime=0x1d2fab4, ftLastWriteTime.dwLowDateTime=0xa912d270, ftLastWriteTime.dwHighDateTime=0x1d2fab4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x381ec0 [0092.988] FindClose (in: hFindFile=0x381ec0 | out: hFindFile=0x381ec0) returned 1 [0092.988] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Package Cache\\{e52a6842-b0ac-476e-b48f-378a97a67346}", nBufferLength=0x105, lpBuffer=0x31e2c4, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Package Cache\\{e52a6842-b0ac-476e-b48f-378a97a67346}", lpFilePart=0x0) returned 0x47 [0092.988] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Package Cache\\{e52a6842-b0ac-476e-b48f-378a97a67346}\\", nBufferLength=0x105, lpBuffer=0x31e298, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Package Cache\\{e52a6842-b0ac-476e-b48f-378a97a67346}\\", lpFilePart=0x0) returned 0x48 [0092.988] FindFirstFileW (in: lpFileName="C:\\Users\\All Users\\Package Cache\\{e52a6842-b0ac-476e-b48f-378a97a67346}\\*", lpFindFileData=0x31e4e4 | out: lpFindFileData=0x31e4e4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa912d270, ftCreationTime.dwHighDateTime=0x1d2fab4, ftLastAccessTime.dwLowDateTime=0xa912d270, ftLastAccessTime.dwHighDateTime=0x1d2fab4, ftLastWriteTime.dwLowDateTime=0xa912d270, ftLastWriteTime.dwHighDateTime=0x1d2fab4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x381ec0 [0092.988] FindClose (in: hFindFile=0x381ec0 | out: hFindFile=0x381ec0) returned 1 [0092.988] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Package Cache\\{e6e75766-da0f-4ba2-9788-6ea593ce702d}", nBufferLength=0x105, lpBuffer=0x31e2c4, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Package Cache\\{e6e75766-da0f-4ba2-9788-6ea593ce702d}", lpFilePart=0x0) returned 0x47 [0092.988] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Package Cache\\{e6e75766-da0f-4ba2-9788-6ea593ce702d}\\", nBufferLength=0x105, lpBuffer=0x31e298, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Package Cache\\{e6e75766-da0f-4ba2-9788-6ea593ce702d}\\", lpFilePart=0x0) returned 0x48 [0092.988] FindFirstFileW (in: lpFileName="C:\\Users\\All Users\\Package Cache\\{e6e75766-da0f-4ba2-9788-6ea593ce702d}\\*", lpFindFileData=0x31e4e4 | out: lpFindFileData=0x31e4e4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xca64c20, ftCreationTime.dwHighDateTime=0x1d2e621, ftLastAccessTime.dwLowDateTime=0xcad7040, ftLastAccessTime.dwHighDateTime=0x1d2e621, ftLastWriteTime.dwLowDateTime=0xcad7040, ftLastWriteTime.dwHighDateTime=0x1d2e621, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x381ec0 [0092.988] FindClose (in: hFindFile=0x381ec0 | out: hFindFile=0x381ec0) returned 1 [0092.988] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Package Cache\\{e6e75766-da0f-4ba2-9788-6ea593ce702d}", nBufferLength=0x105, lpBuffer=0x31e2c4, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Package Cache\\{e6e75766-da0f-4ba2-9788-6ea593ce702d}", lpFilePart=0x0) returned 0x47 [0092.988] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Package Cache\\{e6e75766-da0f-4ba2-9788-6ea593ce702d}\\", nBufferLength=0x105, lpBuffer=0x31e298, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Package Cache\\{e6e75766-da0f-4ba2-9788-6ea593ce702d}\\", lpFilePart=0x0) returned 0x48 [0092.988] FindFirstFileW (in: lpFileName="C:\\Users\\All Users\\Package Cache\\{e6e75766-da0f-4ba2-9788-6ea593ce702d}\\*", lpFindFileData=0x31e4e4 | out: lpFindFileData=0x31e4e4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xca64c20, ftCreationTime.dwHighDateTime=0x1d2e621, ftLastAccessTime.dwLowDateTime=0xcad7040, ftLastAccessTime.dwHighDateTime=0x1d2e621, ftLastWriteTime.dwLowDateTime=0xcad7040, ftLastWriteTime.dwHighDateTime=0x1d2e621, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x381ec0 [0092.988] FindClose (in: hFindFile=0x381ec0 | out: hFindFile=0x381ec0) returned 1 [0092.988] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Package Cache\\{f325f05b-f963-4640-a43b-c8a494cdda0f}", nBufferLength=0x105, lpBuffer=0x31e2c4, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Package Cache\\{f325f05b-f963-4640-a43b-c8a494cdda0f}", lpFilePart=0x0) returned 0x47 [0092.989] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Package Cache\\{f325f05b-f963-4640-a43b-c8a494cdda0f}\\", nBufferLength=0x105, lpBuffer=0x31e298, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Package Cache\\{f325f05b-f963-4640-a43b-c8a494cdda0f}\\", lpFilePart=0x0) returned 0x48 [0092.989] FindFirstFileW (in: lpFileName="C:\\Users\\All Users\\Package Cache\\{f325f05b-f963-4640-a43b-c8a494cdda0f}\\*", lpFindFileData=0x31e4e4 | out: lpFindFileData=0x31e4e4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf93c9960, ftCreationTime.dwHighDateTime=0x1d2fc27, ftLastAccessTime.dwLowDateTime=0xf93efac0, ftLastAccessTime.dwHighDateTime=0x1d2fc27, ftLastWriteTime.dwLowDateTime=0xf93efac0, ftLastWriteTime.dwHighDateTime=0x1d2fc27, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x381ec0 [0092.989] FindClose (in: hFindFile=0x381ec0 | out: hFindFile=0x381ec0) returned 1 [0092.989] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Package Cache\\{f325f05b-f963-4640-a43b-c8a494cdda0f}", nBufferLength=0x105, lpBuffer=0x31e2c4, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Package Cache\\{f325f05b-f963-4640-a43b-c8a494cdda0f}", lpFilePart=0x0) returned 0x47 [0092.989] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Package Cache\\{f325f05b-f963-4640-a43b-c8a494cdda0f}\\", nBufferLength=0x105, lpBuffer=0x31e298, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Package Cache\\{f325f05b-f963-4640-a43b-c8a494cdda0f}\\", lpFilePart=0x0) returned 0x48 [0092.989] FindFirstFileW (in: lpFileName="C:\\Users\\All Users\\Package Cache\\{f325f05b-f963-4640-a43b-c8a494cdda0f}\\*", lpFindFileData=0x31e4e4 | out: lpFindFileData=0x31e4e4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf93c9960, ftCreationTime.dwHighDateTime=0x1d2fc27, ftLastAccessTime.dwLowDateTime=0xf93efac0, ftLastAccessTime.dwHighDateTime=0x1d2fc27, ftLastWriteTime.dwLowDateTime=0xf93efac0, ftLastWriteTime.dwHighDateTime=0x1d2fc27, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x381ec0 [0092.989] FindClose (in: hFindFile=0x381ec0 | out: hFindFile=0x381ec0) returned 1 [0092.989] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Package Cache\\{F8CFEB22-A2E7-3971-9EDA-4B11EDEFC185}v12.0.21005", nBufferLength=0x105, lpBuffer=0x31e2c4, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Package Cache\\{F8CFEB22-A2E7-3971-9EDA-4B11EDEFC185}v12.0.21005", lpFilePart=0x0) returned 0x52 [0092.989] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Package Cache\\{F8CFEB22-A2E7-3971-9EDA-4B11EDEFC185}v12.0.21005\\", nBufferLength=0x105, lpBuffer=0x31e298, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Package Cache\\{F8CFEB22-A2E7-3971-9EDA-4B11EDEFC185}v12.0.21005\\", lpFilePart=0x0) returned 0x53 [0092.989] FindFirstFileW (in: lpFileName="C:\\Users\\All Users\\Package Cache\\{F8CFEB22-A2E7-3971-9EDA-4B11EDEFC185}v12.0.21005\\*", lpFindFileData=0x31e4e4 | out: lpFindFileData=0x31e4e4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xcbbb880, ftCreationTime.dwHighDateTime=0x1d2e621, ftLastAccessTime.dwLowDateTime=0xcbbb880, ftLastAccessTime.dwHighDateTime=0x1d2e621, ftLastWriteTime.dwLowDateTime=0xcbbb880, ftLastWriteTime.dwHighDateTime=0x1d2e621, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x381ec0 [0092.989] FindClose (in: hFindFile=0x381ec0 | out: hFindFile=0x381ec0) returned 1 [0092.989] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Package Cache\\{F8CFEB22-A2E7-3971-9EDA-4B11EDEFC185}v12.0.21005", nBufferLength=0x105, lpBuffer=0x31e2c4, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Package Cache\\{F8CFEB22-A2E7-3971-9EDA-4B11EDEFC185}v12.0.21005", lpFilePart=0x0) returned 0x52 [0092.989] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Package Cache\\{F8CFEB22-A2E7-3971-9EDA-4B11EDEFC185}v12.0.21005\\", nBufferLength=0x105, lpBuffer=0x31e298, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Package Cache\\{F8CFEB22-A2E7-3971-9EDA-4B11EDEFC185}v12.0.21005\\", lpFilePart=0x0) returned 0x53 [0092.989] FindFirstFileW (in: lpFileName="C:\\Users\\All Users\\Package Cache\\{F8CFEB22-A2E7-3971-9EDA-4B11EDEFC185}v12.0.21005\\*", lpFindFileData=0x31e4e4 | out: lpFindFileData=0x31e4e4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xcbbb880, ftCreationTime.dwHighDateTime=0x1d2e621, ftLastAccessTime.dwLowDateTime=0xcbbb880, ftLastAccessTime.dwHighDateTime=0x1d2e621, ftLastWriteTime.dwLowDateTime=0xcbbb880, ftLastWriteTime.dwHighDateTime=0x1d2e621, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x381ec0 [0092.990] FindClose (in: hFindFile=0x381ec0 | out: hFindFile=0x381ec0) returned 1 [0092.990] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Package Cache\\{F8CFEB22-A2E7-3971-9EDA-4B11EDEFC185}v12.0.21005\\packages", nBufferLength=0x105, lpBuffer=0x31e24c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Package Cache\\{F8CFEB22-A2E7-3971-9EDA-4B11EDEFC185}v12.0.21005\\packages", lpFilePart=0x0) returned 0x5b [0092.990] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Package Cache\\{F8CFEB22-A2E7-3971-9EDA-4B11EDEFC185}v12.0.21005\\packages\\", nBufferLength=0x105, lpBuffer=0x31e220, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Package Cache\\{F8CFEB22-A2E7-3971-9EDA-4B11EDEFC185}v12.0.21005\\packages\\", lpFilePart=0x0) returned 0x5c [0092.990] FindFirstFileW (in: lpFileName="C:\\Users\\All Users\\Package Cache\\{F8CFEB22-A2E7-3971-9EDA-4B11EDEFC185}v12.0.21005\\packages\\*", lpFindFileData=0x31e46c | out: lpFindFileData=0x31e46c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xcbbb880, ftCreationTime.dwHighDateTime=0x1d2e621, ftLastAccessTime.dwLowDateTime=0xcbbb880, ftLastAccessTime.dwHighDateTime=0x1d2e621, ftLastWriteTime.dwLowDateTime=0xcbbb880, ftLastWriteTime.dwHighDateTime=0x1d2e621, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x381ec0 [0092.990] FindClose (in: hFindFile=0x381ec0 | out: hFindFile=0x381ec0) returned 1 [0092.990] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Package Cache\\{F8CFEB22-A2E7-3971-9EDA-4B11EDEFC185}v12.0.21005\\packages", nBufferLength=0x105, lpBuffer=0x31e24c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Package Cache\\{F8CFEB22-A2E7-3971-9EDA-4B11EDEFC185}v12.0.21005\\packages", lpFilePart=0x0) returned 0x5b [0092.990] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Package Cache\\{F8CFEB22-A2E7-3971-9EDA-4B11EDEFC185}v12.0.21005\\packages\\", nBufferLength=0x105, lpBuffer=0x31e220, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Package Cache\\{F8CFEB22-A2E7-3971-9EDA-4B11EDEFC185}v12.0.21005\\packages\\", lpFilePart=0x0) returned 0x5c [0092.990] FindFirstFileW (in: lpFileName="C:\\Users\\All Users\\Package Cache\\{F8CFEB22-A2E7-3971-9EDA-4B11EDEFC185}v12.0.21005\\packages\\*", lpFindFileData=0x31e46c | out: lpFindFileData=0x31e46c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xcbbb880, ftCreationTime.dwHighDateTime=0x1d2e621, ftLastAccessTime.dwLowDateTime=0xcbbb880, ftLastAccessTime.dwHighDateTime=0x1d2e621, ftLastWriteTime.dwLowDateTime=0xcbbb880, ftLastWriteTime.dwHighDateTime=0x1d2e621, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x381ec0 [0092.990] FindClose (in: hFindFile=0x381ec0 | out: hFindFile=0x381ec0) returned 1 [0092.990] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Package Cache\\{F8CFEB22-A2E7-3971-9EDA-4B11EDEFC185}v12.0.21005\\packages\\vcRuntimeAdditional_x86", nBufferLength=0x105, lpBuffer=0x31e1d4, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Package Cache\\{F8CFEB22-A2E7-3971-9EDA-4B11EDEFC185}v12.0.21005\\packages\\vcRuntimeAdditional_x86", lpFilePart=0x0) returned 0x73 [0092.990] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Package Cache\\{F8CFEB22-A2E7-3971-9EDA-4B11EDEFC185}v12.0.21005\\packages\\vcRuntimeAdditional_x86\\", nBufferLength=0x105, lpBuffer=0x31e1a8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Package Cache\\{F8CFEB22-A2E7-3971-9EDA-4B11EDEFC185}v12.0.21005\\packages\\vcRuntimeAdditional_x86\\", lpFilePart=0x0) returned 0x74 [0092.990] FindFirstFileW (in: lpFileName="C:\\Users\\All Users\\Package Cache\\{F8CFEB22-A2E7-3971-9EDA-4B11EDEFC185}v12.0.21005\\packages\\vcRuntimeAdditional_x86\\*", lpFindFileData=0x31e3f4 | out: lpFindFileData=0x31e3f4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xcbbb880, ftCreationTime.dwHighDateTime=0x1d2e621, ftLastAccessTime.dwLowDateTime=0xcc07b40, ftLastAccessTime.dwHighDateTime=0x1d2e621, ftLastWriteTime.dwLowDateTime=0xcc07b40, ftLastWriteTime.dwHighDateTime=0x1d2e621, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x381ec0 [0092.991] FindClose (in: hFindFile=0x381ec0 | out: hFindFile=0x381ec0) returned 1 [0092.991] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Package Cache\\{F8CFEB22-A2E7-3971-9EDA-4B11EDEFC185}v12.0.21005\\packages\\vcRuntimeAdditional_x86", nBufferLength=0x105, lpBuffer=0x31e1d4, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Package Cache\\{F8CFEB22-A2E7-3971-9EDA-4B11EDEFC185}v12.0.21005\\packages\\vcRuntimeAdditional_x86", lpFilePart=0x0) returned 0x73 [0092.991] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Package Cache\\{F8CFEB22-A2E7-3971-9EDA-4B11EDEFC185}v12.0.21005\\packages\\vcRuntimeAdditional_x86\\", nBufferLength=0x105, lpBuffer=0x31e1a8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Package Cache\\{F8CFEB22-A2E7-3971-9EDA-4B11EDEFC185}v12.0.21005\\packages\\vcRuntimeAdditional_x86\\", lpFilePart=0x0) returned 0x74 [0092.991] FindFirstFileW (in: lpFileName="C:\\Users\\All Users\\Package Cache\\{F8CFEB22-A2E7-3971-9EDA-4B11EDEFC185}v12.0.21005\\packages\\vcRuntimeAdditional_x86\\*", lpFindFileData=0x31e3f4 | out: lpFindFileData=0x31e3f4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xcbbb880, ftCreationTime.dwHighDateTime=0x1d2e621, ftLastAccessTime.dwLowDateTime=0xcc07b40, ftLastAccessTime.dwHighDateTime=0x1d2e621, ftLastWriteTime.dwLowDateTime=0xcc07b40, ftLastWriteTime.dwHighDateTime=0x1d2e621, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x381ec0 [0092.991] FindClose (in: hFindFile=0x381ec0 | out: hFindFile=0x381ec0) returned 1 [0092.991] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Start Menu", nBufferLength=0x105, lpBuffer=0x31e33c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Start Menu", lpFilePart=0x0) returned 0x1d [0092.991] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Start Menu\\", nBufferLength=0x105, lpBuffer=0x31e310, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Start Menu\\", lpFilePart=0x0) returned 0x1e [0092.991] FindFirstFileW (in: lpFileName="C:\\Users\\All Users\\Start Menu\\*", lpFindFileData=0x31e55c | out: lpFindFileData=0x31e55c*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0092.992] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Sun", nBufferLength=0x105, lpBuffer=0x31e33c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Sun", lpFilePart=0x0) returned 0x16 [0092.993] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Sun\\", nBufferLength=0x105, lpBuffer=0x31e310, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Sun\\", lpFilePart=0x0) returned 0x17 [0092.993] FindFirstFileW (in: lpFileName="C:\\Users\\All Users\\Sun\\*", lpFindFileData=0x31e55c | out: lpFindFileData=0x31e55c*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x803771e0, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x803771e0, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x803771e0, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x381ec0 [0092.993] FindClose (in: hFindFile=0x381ec0 | out: hFindFile=0x381ec0) returned 1 [0092.993] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Sun", nBufferLength=0x105, lpBuffer=0x31e33c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Sun", lpFilePart=0x0) returned 0x16 [0092.993] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Sun\\", nBufferLength=0x105, lpBuffer=0x31e310, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Sun\\", lpFilePart=0x0) returned 0x17 [0092.993] FindFirstFileW (in: lpFileName="C:\\Users\\All Users\\Sun\\*", lpFindFileData=0x31e55c | out: lpFindFileData=0x31e55c*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x803771e0, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x803771e0, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x803771e0, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x381ec0 [0092.993] FindClose (in: hFindFile=0x381ec0 | out: hFindFile=0x381ec0) returned 1 [0092.993] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Sun\\Java", nBufferLength=0x105, lpBuffer=0x31e2c4, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Sun\\Java", lpFilePart=0x0) returned 0x1b [0092.993] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Sun\\Java\\", nBufferLength=0x105, lpBuffer=0x31e298, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Sun\\Java\\", lpFilePart=0x0) returned 0x1c [0092.993] FindFirstFileW (in: lpFileName="C:\\Users\\All Users\\Sun\\Java\\*", lpFindFileData=0x31e4e4 | out: lpFindFileData=0x31e4e4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x803771e0, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x803771e0, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x803771e0, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x381ec0 [0092.993] FindClose (in: hFindFile=0x381ec0 | out: hFindFile=0x381ec0) returned 1 [0092.993] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Sun\\Java", nBufferLength=0x105, lpBuffer=0x31e2c4, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Sun\\Java", lpFilePart=0x0) returned 0x1b [0092.993] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Sun\\Java\\", nBufferLength=0x105, lpBuffer=0x31e298, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Sun\\Java\\", lpFilePart=0x0) returned 0x1c [0092.993] FindFirstFileW (in: lpFileName="C:\\Users\\All Users\\Sun\\Java\\*", lpFindFileData=0x31e4e4 | out: lpFindFileData=0x31e4e4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x803771e0, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x803771e0, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x803771e0, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x381ec0 [0092.994] FindClose (in: hFindFile=0x381ec0 | out: hFindFile=0x381ec0) returned 1 [0092.994] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Sun\\Java\\Java Update", nBufferLength=0x105, lpBuffer=0x31e24c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Sun\\Java\\Java Update", lpFilePart=0x0) returned 0x27 [0092.994] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Sun\\Java\\Java Update\\", nBufferLength=0x105, lpBuffer=0x31e220, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Sun\\Java\\Java Update\\", lpFilePart=0x0) returned 0x28 [0092.994] FindFirstFileW (in: lpFileName="C:\\Users\\All Users\\Sun\\Java\\Java Update\\*", lpFindFileData=0x31e46c | out: lpFindFileData=0x31e46c*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x803771e0, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x803771e0, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x803771e0, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x381ec0 [0092.994] FindClose (in: hFindFile=0x381ec0 | out: hFindFile=0x381ec0) returned 1 [0092.994] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Sun\\Java\\Java Update", nBufferLength=0x105, lpBuffer=0x31e24c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Sun\\Java\\Java Update", lpFilePart=0x0) returned 0x27 [0092.994] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Sun\\Java\\Java Update\\", nBufferLength=0x105, lpBuffer=0x31e220, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Sun\\Java\\Java Update\\", lpFilePart=0x0) returned 0x28 [0092.994] FindFirstFileW (in: lpFileName="C:\\Users\\All Users\\Sun\\Java\\Java Update\\*", lpFindFileData=0x31e46c | out: lpFindFileData=0x31e46c*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x803771e0, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x803771e0, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x803771e0, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x381ec0 [0092.994] FindClose (in: hFindFile=0x381ec0 | out: hFindFile=0x381ec0) returned 1 [0092.994] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Sun\\Java\\Java Update\\jaureglist.xml", nBufferLength=0x105, lpBuffer=0x31e11c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Sun\\Java\\Java Update\\jaureglist.xml", lpFilePart=0x0) returned 0x36 [0092.994] CreateFileW (lpFileName="C:\\Users\\All Users\\Sun\\Java\\Java Update\\jaureglist.xml" (normalized: "c:\\users\\all users\\sun\\java\\java update\\jaureglist.xml"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x178 [0092.994] GetFileType (hFile=0x178) returned 0x1 [0092.994] GetFileType (hFile=0x178) returned 0x1 [0092.994] GetFileSize (in: hFile=0x178, lpFileSizeHigh=0x31e718 | out: lpFileSizeHigh=0x31e718*=0x0) returned 0x80 [0092.995] ReadFile (in: hFile=0x178, lpBuffer=0x26c1de4, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x31e6c4, lpOverlapped=0x0 | out: lpBuffer=0x26c1de4*, lpNumberOfBytesRead=0x31e6c4*=0x80, lpOverlapped=0x0) returned 1 [0093.033] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Sun\\Java\\Java Update\\jaureglist.xml", nBufferLength=0x105, lpBuffer=0x31e108, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Sun\\Java\\Java Update\\jaureglist.xml", lpFilePart=0x0) returned 0x36 [0093.033] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e5fc) returned 1 [0093.033] CreateFileW (lpFileName="C:\\Users\\All Users\\Sun\\Java\\Java Update\\jaureglist.xml" (normalized: "c:\\users\\all users\\sun\\java\\java update\\jaureglist.xml"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x178 [0093.034] GetFileType (hFile=0x178) returned 0x1 [0093.034] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e5f8) returned 1 [0093.034] GetFileType (hFile=0x178) returned 0x1 [0093.035] WriteFile (in: hFile=0x178, lpBuffer=0x2710088*, nNumberOfBytesToWrite=0x90, lpNumberOfBytesWritten=0x31e68c, lpOverlapped=0x0 | out: lpBuffer=0x2710088*, lpNumberOfBytesWritten=0x31e68c*=0x90, lpOverlapped=0x0) returned 1 [0093.035] CloseHandle (hObject=0x178) returned 1 [0093.035] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Sun\\Java\\Java Update\\jaureglist.xml", nBufferLength=0x105, lpBuffer=0x31e23c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Sun\\Java\\Java Update\\jaureglist.xml", lpFilePart=0x0) returned 0x36 [0093.036] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Sun\\Java\\Java Update\\jaureglist.xml", nBufferLength=0x105, lpBuffer=0x31e23c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Sun\\Java\\Java Update\\jaureglist.xml", lpFilePart=0x0) returned 0x36 [0093.036] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e69c) returned 1 [0093.036] GetFileAttributesExW (in: lpFileName="C:\\Users\\All Users\\Sun\\Java\\Java Update\\jaureglist.xml" (normalized: "c:\\users\\all users\\sun\\java\\java update\\jaureglist.xml"), fInfoLevelId=0x0, lpFileInformation=0x31e718 | out: lpFileInformation=0x31e718*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x803771e0, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x803771e0, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x1ae4cac0, ftLastWriteTime.dwHighDateTime=0x1d6eb7f, nFileSizeHigh=0x0, nFileSizeLow=0x90)) returned 1 [0093.036] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e698) returned 1 [0093.036] MoveFileW (lpExistingFileName="C:\\Users\\All Users\\Sun\\Java\\Java Update\\jaureglist.xml" (normalized: "c:\\users\\all users\\sun\\java\\java update\\jaureglist.xml"), lpNewFileName="C:\\Users\\All Users\\Sun\\Java\\Java Update\\jaureglist.xml" (normalized: "c:\\users\\all users\\sun\\java\\java update\\jaureglist.xml")) returned 1 [0093.036] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e834) returned 1 [0093.036] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Templates", nBufferLength=0x105, lpBuffer=0x31e33c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Templates", lpFilePart=0x0) returned 0x1c [0093.036] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Templates\\", nBufferLength=0x105, lpBuffer=0x31e310, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Templates\\", lpFilePart=0x0) returned 0x1d [0093.036] FindFirstFileW (in: lpFileName="C:\\Users\\All Users\\Templates\\*", lpFindFileData=0x31e55c | out: lpFindFileData=0x31e55c*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0093.037] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e7f8) returned 1 [0093.038] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e8ac) returned 1 [0093.038] FindFirstFileW (in: lpFileName="C:\\Users\\Default\\*", lpFindFileData=0x31e5d4 | out: lpFindFileData=0x31e5d4*(dwFileAttributes=0x13, ftCreationTime.dwLowDateTime=0xfda01e06, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x62fa4a0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x62fa4a0, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x381cc0 [0093.038] FindNextFileW (in: hFindFile=0x381cc0, lpFindFileData=0x31e5e4 | out: lpFindFileData=0x31e5e4*(dwFileAttributes=0x13, ftCreationTime.dwLowDateTime=0xfda01e06, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x62fa4a0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x62fa4a0, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0093.039] FindNextFileW (in: hFindFile=0x381cc0, lpFindFileData=0x31e5e4 | out: lpFindFileData=0x31e5e4*(dwFileAttributes=0x2012, ftCreationTime.dwLowDateTime=0xfda01e06, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x6320600, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xe9bbeade, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="AppData", cAlternateFileName="")) returned 1 [0093.039] FindNextFileW (in: hFindFile=0x381cc0, lpFindFileData=0x31e5e4 | out: lpFindFileData=0x31e5e4*(dwFileAttributes=0x2416, ftCreationTime.dwLowDateTime=0x306dce32, ftCreationTime.dwHighDateTime=0x1ca0441, ftLastAccessTime.dwLowDateTime=0x306dce32, ftLastAccessTime.dwHighDateTime=0x1ca0441, ftLastWriteTime.dwLowDateTime=0x306dce32, ftLastWriteTime.dwHighDateTime=0x1ca0441, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Application Data", cAlternateFileName="APPLIC~1")) returned 1 [0093.039] FindNextFileW (in: hFindFile=0x381cc0, lpFindFileData=0x31e5e4 | out: lpFindFileData=0x31e5e4*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x62fa4a0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x6392a20, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xd888f06b, ftLastWriteTime.dwHighDateTime=0x1cb892d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Contacts", cAlternateFileName="")) returned 1 [0093.039] FindNextFileW (in: hFindFile=0x381cc0, lpFindFileData=0x31e5e4 | out: lpFindFileData=0x31e5e4*(dwFileAttributes=0x2416, ftCreationTime.dwLowDateTime=0x306dce32, ftCreationTime.dwHighDateTime=0x1ca0441, ftLastAccessTime.dwLowDateTime=0x306dce32, ftLastAccessTime.dwHighDateTime=0x1ca0441, ftLastWriteTime.dwLowDateTime=0x306dce32, ftLastWriteTime.dwHighDateTime=0x1ca0441, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Cookies", cAlternateFileName="")) returned 1 [0093.039] FindNextFileW (in: hFindFile=0x381cc0, lpFindFileData=0x31e5e4 | out: lpFindFileData=0x31e5e4*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0xfda4e0ba, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x636c8c0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xd8868f0a, ftLastWriteTime.dwHighDateTime=0x1cb892d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Desktop", cAlternateFileName="")) returned 1 [0093.039] FindNextFileW (in: hFindFile=0x381cc0, lpFindFileData=0x31e5e4 | out: lpFindFileData=0x31e5e4*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0xfda9a36e, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x636c8c0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xd890148c, ftLastWriteTime.dwHighDateTime=0x1cb892d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Documents", cAlternateFileName="DOCUME~1")) returned 1 [0093.040] FindNextFileW (in: hFindFile=0x381cc0, lpFindFileData=0x31e5e4 | out: lpFindFileData=0x31e5e4*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0xfda9a36e, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x636c8c0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xd88db32b, ftLastWriteTime.dwHighDateTime=0x1cb892d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Downloads", cAlternateFileName="DOWNLO~1")) returned 1 [0093.040] FindNextFileW (in: hFindFile=0x381cc0, lpFindFileData=0x31e5e4 | out: lpFindFileData=0x31e5e4*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0xfda9a36e, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x636c8c0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xd888f06b, ftLastWriteTime.dwHighDateTime=0x1cb892d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Favorites", cAlternateFileName="FAVORI~1")) returned 1 [0093.040] FindNextFileW (in: hFindFile=0x381cc0, lpFindFileData=0x31e5e4 | out: lpFindFileData=0x31e5e4*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0xfda9a36e, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x636c8c0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xd89738ac, ftLastWriteTime.dwHighDateTime=0x1cb892d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Links", cAlternateFileName="")) returned 1 [0093.040] FindNextFileW (in: hFindFile=0x381cc0, lpFindFileData=0x31e5e4 | out: lpFindFileData=0x31e5e4*(dwFileAttributes=0x2416, ftCreationTime.dwLowDateTime=0x30702f92, ftCreationTime.dwHighDateTime=0x1ca0441, ftLastAccessTime.dwLowDateTime=0x30702f92, ftLastAccessTime.dwHighDateTime=0x1ca0441, ftLastWriteTime.dwLowDateTime=0x30702f92, ftLastWriteTime.dwHighDateTime=0x1ca0441, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Local Settings", cAlternateFileName="LOCALS~1")) returned 1 [0093.040] FindNextFileW (in: hFindFile=0x381cc0, lpFindFileData=0x31e5e4 | out: lpFindFileData=0x31e5e4*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0xfda9a36e, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x6346760, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xd888f06b, ftLastWriteTime.dwHighDateTime=0x1cb892d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Music", cAlternateFileName="")) returned 1 [0093.040] FindNextFileW (in: hFindFile=0x381cc0, lpFindFileData=0x31e5e4 | out: lpFindFileData=0x31e5e4*(dwFileAttributes=0x2416, ftCreationTime.dwLowDateTime=0x306b6cd1, ftCreationTime.dwHighDateTime=0x1ca0441, ftLastAccessTime.dwLowDateTime=0x306b6cd1, ftLastAccessTime.dwHighDateTime=0x1ca0441, ftLastWriteTime.dwLowDateTime=0x306b6cd1, ftLastWriteTime.dwHighDateTime=0x1ca0441, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="My Documents", cAlternateFileName="MYDOCU~1")) returned 1 [0093.040] FindNextFileW (in: hFindFile=0x381cc0, lpFindFileData=0x31e5e4 | out: lpFindFileData=0x31e5e4*(dwFileAttributes=0x2416, ftCreationTime.dwLowDateTime=0x306dce32, ftCreationTime.dwHighDateTime=0x1ca0441, ftLastAccessTime.dwLowDateTime=0x306dce32, ftLastAccessTime.dwHighDateTime=0x1ca0441, ftLastWriteTime.dwLowDateTime=0x306dce32, ftLastWriteTime.dwHighDateTime=0x1ca0441, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="NetHood", cAlternateFileName="")) returned 1 [0093.041] FindNextFileW (in: hFindFile=0x381cc0, lpFindFileData=0x31e5e4 | out: lpFindFileData=0x31e5e4*(dwFileAttributes=0x2026, ftCreationTime.dwLowDateTime=0x9012aa61, ftCreationTime.dwHighDateTime=0x1ca042b, ftLastAccessTime.dwLowDateTime=0x6770de0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x6770de0, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0xc0000, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="NTUSER.DAT", cAlternateFileName="")) returned 1 [0093.041] FindNextFileW (in: hFindFile=0x381cc0, lpFindFileData=0x31e5e4 | out: lpFindFileData=0x31e5e4*(dwFileAttributes=0x22, ftCreationTime.dwLowDateTime=0xc103692e, ftCreationTime.dwHighDateTime=0x1ca0451, ftLastAccessTime.dwLowDateTime=0x1dd1880d, ftLastAccessTime.dwHighDateTime=0x1cbf8ec, ftLastWriteTime.dwLowDateTime=0x1dd1880d, ftLastWriteTime.dwHighDateTime=0x1cbf8ec, nFileSizeHigh=0x0, nFileSizeLow=0x400, dwReserved0=0x0, dwReserved1=0x0, cFileName="NTUSER.DAT.LOG", cAlternateFileName="NTUSER~3.LOG")) returned 1 [0093.041] FindNextFileW (in: hFindFile=0x381cc0, lpFindFileData=0x31e5e4 | out: lpFindFileData=0x31e5e4*(dwFileAttributes=0x22, ftCreationTime.dwLowDateTime=0x9012aa61, ftCreationTime.dwHighDateTime=0x1ca042b, ftLastAccessTime.dwLowDateTime=0x9012aa61, ftLastAccessTime.dwHighDateTime=0x1ca042b, ftLastWriteTime.dwLowDateTime=0x674ac80, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x2e400, dwReserved0=0x0, dwReserved1=0x0, cFileName="NTUSER.DAT.LOG1", cAlternateFileName="NTUSER~1.LOG")) returned 1 [0093.041] FindNextFileW (in: hFindFile=0x381cc0, lpFindFileData=0x31e5e4 | out: lpFindFileData=0x31e5e4*(dwFileAttributes=0x22, ftCreationTime.dwLowDateTime=0x9012aa61, ftCreationTime.dwHighDateTime=0x1ca042b, ftLastAccessTime.dwLowDateTime=0x9012aa61, ftLastAccessTime.dwHighDateTime=0x1ca042b, ftLastWriteTime.dwLowDateTime=0x9012aa61, ftLastWriteTime.dwHighDateTime=0x1ca042b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="NTUSER.DAT.LOG2", cAlternateFileName="NTUSER~2.LOG")) returned 1 [0093.041] FindNextFileW (in: hFindFile=0x381cc0, lpFindFileData=0x31e5e4 | out: lpFindFileData=0x31e5e4*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0xf8d30919, ftCreationTime.dwHighDateTime=0x1ca043d, ftLastAccessTime.dwLowDateTime=0xf8d30919, ftLastAccessTime.dwHighDateTime=0x1ca043d, ftLastWriteTime.dwLowDateTime=0xf8ead6dc, ftLastWriteTime.dwHighDateTime=0x1ca043d, nFileSizeHigh=0x0, nFileSizeLow=0x10000, dwReserved0=0x0, dwReserved1=0x0, cFileName="NTUSER.DAT{016888bd-6c6f-11de-8d1d-001e0bcde3ec}.TM.blf", cAlternateFileName="NTUSER~1.BLF")) returned 1 [0093.041] FindNextFileW (in: hFindFile=0x381cc0, lpFindFileData=0x31e5e4 | out: lpFindFileData=0x31e5e4*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0xf8da2d3a, ftCreationTime.dwHighDateTime=0x1ca043d, ftLastAccessTime.dwLowDateTime=0xf8da2d3a, ftLastAccessTime.dwHighDateTime=0x1ca043d, ftLastWriteTime.dwLowDateTime=0xf8e8757c, ftLastWriteTime.dwHighDateTime=0x1ca043d, nFileSizeHigh=0x0, nFileSizeLow=0x80000, dwReserved0=0x0, dwReserved1=0x0, cFileName="NTUSER.DAT{016888bd-6c6f-11de-8d1d-001e0bcde3ec}.TMContainer00000000000000000001.regtrans-ms", cAlternateFileName="NTUSER~1.REG")) returned 1 [0093.041] FindNextFileW (in: hFindFile=0x381cc0, lpFindFileData=0x31e5e4 | out: lpFindFileData=0x31e5e4*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0xf8deeffb, ftCreationTime.dwHighDateTime=0x1ca043d, ftLastAccessTime.dwLowDateTime=0xf8deeffb, ftLastAccessTime.dwHighDateTime=0x1ca043d, ftLastWriteTime.dwLowDateTime=0xf8ead6dc, ftLastWriteTime.dwHighDateTime=0x1ca043d, nFileSizeHigh=0x0, nFileSizeLow=0x80000, dwReserved0=0x0, dwReserved1=0x0, cFileName="NTUSER.DAT{016888bd-6c6f-11de-8d1d-001e0bcde3ec}.TMContainer00000000000000000002.regtrans-ms", cAlternateFileName="NTUSER~2.REG")) returned 1 [0093.041] FindNextFileW (in: hFindFile=0x381cc0, lpFindFileData=0x31e5e4 | out: lpFindFileData=0x31e5e4*(dwFileAttributes=0x2026, ftCreationTime.dwLowDateTime=0x62fa4a0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x62fa4a0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xe9bbeade, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x14, dwReserved0=0x0, dwReserved1=0x0, cFileName="ntuser.ini", cAlternateFileName="")) returned 1 [0093.042] FindNextFileW (in: hFindFile=0x381cc0, lpFindFileData=0x31e5e4 | out: lpFindFileData=0x31e5e4*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0xfdac04c8, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x6346760, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xd8868f0a, ftLastWriteTime.dwHighDateTime=0x1cb892d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Pictures", cAlternateFileName="")) returned 1 [0093.042] FindNextFileW (in: hFindFile=0x381cc0, lpFindFileData=0x31e5e4 | out: lpFindFileData=0x31e5e4*(dwFileAttributes=0x2416, ftCreationTime.dwLowDateTime=0x30702f92, ftCreationTime.dwHighDateTime=0x1ca0441, ftLastAccessTime.dwLowDateTime=0x30702f92, ftLastAccessTime.dwHighDateTime=0x1ca0441, ftLastWriteTime.dwLowDateTime=0x30702f92, ftLastWriteTime.dwHighDateTime=0x1ca0441, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="PrintHood", cAlternateFileName="PRINTH~1")) returned 1 [0093.042] FindNextFileW (in: hFindFile=0x381cc0, lpFindFileData=0x31e5e4 | out: lpFindFileData=0x31e5e4*(dwFileAttributes=0x2416, ftCreationTime.dwLowDateTime=0x30702f92, ftCreationTime.dwHighDateTime=0x1ca0441, ftLastAccessTime.dwLowDateTime=0x30702f92, ftLastAccessTime.dwHighDateTime=0x1ca0441, ftLastWriteTime.dwLowDateTime=0x30702f92, ftLastWriteTime.dwHighDateTime=0x1ca0441, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Recent", cAlternateFileName="")) returned 1 [0093.042] FindNextFileW (in: hFindFile=0x381cc0, lpFindFileData=0x31e5e4 | out: lpFindFileData=0x31e5e4*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0xfdac04c8, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x6346760, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xd894d74c, ftLastWriteTime.dwHighDateTime=0x1cb892d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Saved Games", cAlternateFileName="SAVEDG~1")) returned 1 [0093.042] FindNextFileW (in: hFindFile=0x381cc0, lpFindFileData=0x31e5e4 | out: lpFindFileData=0x31e5e4*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x62fa4a0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x6346760, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xd88b51cb, ftLastWriteTime.dwHighDateTime=0x1cb892d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Searches", cAlternateFileName="")) returned 1 [0093.042] FindNextFileW (in: hFindFile=0x381cc0, lpFindFileData=0x31e5e4 | out: lpFindFileData=0x31e5e4*(dwFileAttributes=0x2416, ftCreationTime.dwLowDateTime=0x30702f92, ftCreationTime.dwHighDateTime=0x1ca0441, ftLastAccessTime.dwLowDateTime=0x30702f92, ftLastAccessTime.dwHighDateTime=0x1ca0441, ftLastWriteTime.dwLowDateTime=0x30702f92, ftLastWriteTime.dwHighDateTime=0x1ca0441, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="SendTo", cAlternateFileName="")) returned 1 [0093.042] FindNextFileW (in: hFindFile=0x381cc0, lpFindFileData=0x31e5e4 | out: lpFindFileData=0x31e5e4*(dwFileAttributes=0x2416, ftCreationTime.dwLowDateTime=0x30702f92, ftCreationTime.dwHighDateTime=0x1ca0441, ftLastAccessTime.dwLowDateTime=0x30702f92, ftLastAccessTime.dwHighDateTime=0x1ca0441, ftLastWriteTime.dwLowDateTime=0x30702f92, ftLastWriteTime.dwHighDateTime=0x1ca0441, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Start Menu", cAlternateFileName="STARTM~1")) returned 1 [0093.043] FindNextFileW (in: hFindFile=0x381cc0, lpFindFileData=0x31e5e4 | out: lpFindFileData=0x31e5e4*(dwFileAttributes=0x2416, ftCreationTime.dwLowDateTime=0x30702f92, ftCreationTime.dwHighDateTime=0x1ca0441, ftLastAccessTime.dwLowDateTime=0x30702f92, ftLastAccessTime.dwHighDateTime=0x1ca0441, ftLastWriteTime.dwLowDateTime=0x30702f92, ftLastWriteTime.dwHighDateTime=0x1ca0441, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Templates", cAlternateFileName="TEMPLA~1")) returned 1 [0093.043] FindNextFileW (in: hFindFile=0x381cc0, lpFindFileData=0x31e5e4 | out: lpFindFileData=0x31e5e4*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0xfdac04c8, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x6320600, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xd8868f0a, ftLastWriteTime.dwHighDateTime=0x1cb892d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Videos", cAlternateFileName="")) returned 1 [0093.043] FindNextFileW (in: hFindFile=0x381cc0, lpFindFileData=0x31e5e4 | out: lpFindFileData=0x31e5e4*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0xfdac04c8, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x6320600, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xd8868f0a, ftLastWriteTime.dwHighDateTime=0x1cb892d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Videos", cAlternateFileName="")) returned 0 [0093.043] FindClose (in: hFindFile=0x381cc0 | out: hFindFile=0x381cc0) returned 1 [0093.043] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e86c) returned 1 [0093.043] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e878) returned 1 [0093.043] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e8ac) returned 1 [0093.043] FindFirstFileW (in: lpFileName="C:\\Users\\Default\\*", lpFindFileData=0x31e5d4 | out: lpFindFileData=0x31e5d4*(dwFileAttributes=0x13, ftCreationTime.dwLowDateTime=0xfda01e06, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x62fa4a0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x62fa4a0, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x381cc0 [0093.043] FindNextFileW (in: hFindFile=0x381cc0, lpFindFileData=0x31e5e4 | out: lpFindFileData=0x31e5e4*(dwFileAttributes=0x13, ftCreationTime.dwLowDateTime=0xfda01e06, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x62fa4a0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x62fa4a0, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0093.044] FindNextFileW (in: hFindFile=0x381cc0, lpFindFileData=0x31e5e4 | out: lpFindFileData=0x31e5e4*(dwFileAttributes=0x2012, ftCreationTime.dwLowDateTime=0xfda01e06, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x6320600, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xe9bbeade, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="AppData", cAlternateFileName="")) returned 1 [0093.044] FindNextFileW (in: hFindFile=0x381cc0, lpFindFileData=0x31e5e4 | out: lpFindFileData=0x31e5e4*(dwFileAttributes=0x2416, ftCreationTime.dwLowDateTime=0x306dce32, ftCreationTime.dwHighDateTime=0x1ca0441, ftLastAccessTime.dwLowDateTime=0x306dce32, ftLastAccessTime.dwHighDateTime=0x1ca0441, ftLastWriteTime.dwLowDateTime=0x306dce32, ftLastWriteTime.dwHighDateTime=0x1ca0441, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Application Data", cAlternateFileName="APPLIC~1")) returned 1 [0093.044] FindNextFileW (in: hFindFile=0x381cc0, lpFindFileData=0x31e5e4 | out: lpFindFileData=0x31e5e4*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x62fa4a0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x6392a20, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xd888f06b, ftLastWriteTime.dwHighDateTime=0x1cb892d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Contacts", cAlternateFileName="")) returned 1 [0093.044] FindNextFileW (in: hFindFile=0x381cc0, lpFindFileData=0x31e5e4 | out: lpFindFileData=0x31e5e4*(dwFileAttributes=0x2416, ftCreationTime.dwLowDateTime=0x306dce32, ftCreationTime.dwHighDateTime=0x1ca0441, ftLastAccessTime.dwLowDateTime=0x306dce32, ftLastAccessTime.dwHighDateTime=0x1ca0441, ftLastWriteTime.dwLowDateTime=0x306dce32, ftLastWriteTime.dwHighDateTime=0x1ca0441, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Cookies", cAlternateFileName="")) returned 1 [0093.044] FindNextFileW (in: hFindFile=0x381cc0, lpFindFileData=0x31e5e4 | out: lpFindFileData=0x31e5e4*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0xfda4e0ba, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x636c8c0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xd8868f0a, ftLastWriteTime.dwHighDateTime=0x1cb892d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Desktop", cAlternateFileName="")) returned 1 [0093.044] FindNextFileW (in: hFindFile=0x381cc0, lpFindFileData=0x31e5e4 | out: lpFindFileData=0x31e5e4*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0xfda9a36e, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x636c8c0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xd890148c, ftLastWriteTime.dwHighDateTime=0x1cb892d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Documents", cAlternateFileName="DOCUME~1")) returned 1 [0093.044] FindNextFileW (in: hFindFile=0x381cc0, lpFindFileData=0x31e5e4 | out: lpFindFileData=0x31e5e4*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0xfda9a36e, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x636c8c0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xd88db32b, ftLastWriteTime.dwHighDateTime=0x1cb892d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Downloads", cAlternateFileName="DOWNLO~1")) returned 1 [0093.044] FindNextFileW (in: hFindFile=0x381cc0, lpFindFileData=0x31e5e4 | out: lpFindFileData=0x31e5e4*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0xfda9a36e, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x636c8c0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xd888f06b, ftLastWriteTime.dwHighDateTime=0x1cb892d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Favorites", cAlternateFileName="FAVORI~1")) returned 1 [0093.045] FindNextFileW (in: hFindFile=0x381cc0, lpFindFileData=0x31e5e4 | out: lpFindFileData=0x31e5e4*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0xfda9a36e, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x636c8c0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xd89738ac, ftLastWriteTime.dwHighDateTime=0x1cb892d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Links", cAlternateFileName="")) returned 1 [0093.045] FindNextFileW (in: hFindFile=0x381cc0, lpFindFileData=0x31e5e4 | out: lpFindFileData=0x31e5e4*(dwFileAttributes=0x2416, ftCreationTime.dwLowDateTime=0x30702f92, ftCreationTime.dwHighDateTime=0x1ca0441, ftLastAccessTime.dwLowDateTime=0x30702f92, ftLastAccessTime.dwHighDateTime=0x1ca0441, ftLastWriteTime.dwLowDateTime=0x30702f92, ftLastWriteTime.dwHighDateTime=0x1ca0441, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Local Settings", cAlternateFileName="LOCALS~1")) returned 1 [0093.045] FindNextFileW (in: hFindFile=0x381cc0, lpFindFileData=0x31e5e4 | out: lpFindFileData=0x31e5e4*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0xfda9a36e, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x6346760, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xd888f06b, ftLastWriteTime.dwHighDateTime=0x1cb892d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Music", cAlternateFileName="")) returned 1 [0093.045] FindNextFileW (in: hFindFile=0x381cc0, lpFindFileData=0x31e5e4 | out: lpFindFileData=0x31e5e4*(dwFileAttributes=0x2416, ftCreationTime.dwLowDateTime=0x306b6cd1, ftCreationTime.dwHighDateTime=0x1ca0441, ftLastAccessTime.dwLowDateTime=0x306b6cd1, ftLastAccessTime.dwHighDateTime=0x1ca0441, ftLastWriteTime.dwLowDateTime=0x306b6cd1, ftLastWriteTime.dwHighDateTime=0x1ca0441, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="My Documents", cAlternateFileName="MYDOCU~1")) returned 1 [0093.045] FindNextFileW (in: hFindFile=0x381cc0, lpFindFileData=0x31e5e4 | out: lpFindFileData=0x31e5e4*(dwFileAttributes=0x2416, ftCreationTime.dwLowDateTime=0x306dce32, ftCreationTime.dwHighDateTime=0x1ca0441, ftLastAccessTime.dwLowDateTime=0x306dce32, ftLastAccessTime.dwHighDateTime=0x1ca0441, ftLastWriteTime.dwLowDateTime=0x306dce32, ftLastWriteTime.dwHighDateTime=0x1ca0441, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="NetHood", cAlternateFileName="")) returned 1 [0093.045] FindNextFileW (in: hFindFile=0x381cc0, lpFindFileData=0x31e5e4 | out: lpFindFileData=0x31e5e4*(dwFileAttributes=0x2026, ftCreationTime.dwLowDateTime=0x9012aa61, ftCreationTime.dwHighDateTime=0x1ca042b, ftLastAccessTime.dwLowDateTime=0x6770de0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x6770de0, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0xc0000, dwReserved0=0x0, dwReserved1=0x0, cFileName="NTUSER.DAT", cAlternateFileName="")) returned 1 [0093.045] FindNextFileW (in: hFindFile=0x381cc0, lpFindFileData=0x31e5e4 | out: lpFindFileData=0x31e5e4*(dwFileAttributes=0x22, ftCreationTime.dwLowDateTime=0xc103692e, ftCreationTime.dwHighDateTime=0x1ca0451, ftLastAccessTime.dwLowDateTime=0x1dd1880d, ftLastAccessTime.dwHighDateTime=0x1cbf8ec, ftLastWriteTime.dwLowDateTime=0x1dd1880d, ftLastWriteTime.dwHighDateTime=0x1cbf8ec, nFileSizeHigh=0x0, nFileSizeLow=0x400, dwReserved0=0x0, dwReserved1=0x0, cFileName="NTUSER.DAT.LOG", cAlternateFileName="NTUSER~3.LOG")) returned 1 [0093.045] FindNextFileW (in: hFindFile=0x381cc0, lpFindFileData=0x31e5e4 | out: lpFindFileData=0x31e5e4*(dwFileAttributes=0x22, ftCreationTime.dwLowDateTime=0x9012aa61, ftCreationTime.dwHighDateTime=0x1ca042b, ftLastAccessTime.dwLowDateTime=0x9012aa61, ftLastAccessTime.dwHighDateTime=0x1ca042b, ftLastWriteTime.dwLowDateTime=0x674ac80, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x2e400, dwReserved0=0x0, dwReserved1=0x0, cFileName="NTUSER.DAT.LOG1", cAlternateFileName="NTUSER~1.LOG")) returned 1 [0093.046] FindNextFileW (in: hFindFile=0x381cc0, lpFindFileData=0x31e5e4 | out: lpFindFileData=0x31e5e4*(dwFileAttributes=0x22, ftCreationTime.dwLowDateTime=0x9012aa61, ftCreationTime.dwHighDateTime=0x1ca042b, ftLastAccessTime.dwLowDateTime=0x9012aa61, ftLastAccessTime.dwHighDateTime=0x1ca042b, ftLastWriteTime.dwLowDateTime=0x9012aa61, ftLastWriteTime.dwHighDateTime=0x1ca042b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="NTUSER.DAT.LOG2", cAlternateFileName="NTUSER~2.LOG")) returned 1 [0093.046] FindNextFileW (in: hFindFile=0x381cc0, lpFindFileData=0x31e5e4 | out: lpFindFileData=0x31e5e4*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0xf8d30919, ftCreationTime.dwHighDateTime=0x1ca043d, ftLastAccessTime.dwLowDateTime=0xf8d30919, ftLastAccessTime.dwHighDateTime=0x1ca043d, ftLastWriteTime.dwLowDateTime=0xf8ead6dc, ftLastWriteTime.dwHighDateTime=0x1ca043d, nFileSizeHigh=0x0, nFileSizeLow=0x10000, dwReserved0=0x0, dwReserved1=0x0, cFileName="NTUSER.DAT{016888bd-6c6f-11de-8d1d-001e0bcde3ec}.TM.blf", cAlternateFileName="NTUSER~1.BLF")) returned 1 [0093.046] FindNextFileW (in: hFindFile=0x381cc0, lpFindFileData=0x31e5e4 | out: lpFindFileData=0x31e5e4*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0xf8da2d3a, ftCreationTime.dwHighDateTime=0x1ca043d, ftLastAccessTime.dwLowDateTime=0xf8da2d3a, ftLastAccessTime.dwHighDateTime=0x1ca043d, ftLastWriteTime.dwLowDateTime=0xf8e8757c, ftLastWriteTime.dwHighDateTime=0x1ca043d, nFileSizeHigh=0x0, nFileSizeLow=0x80000, dwReserved0=0x0, dwReserved1=0x0, cFileName="NTUSER.DAT{016888bd-6c6f-11de-8d1d-001e0bcde3ec}.TMContainer00000000000000000001.regtrans-ms", cAlternateFileName="NTUSER~1.REG")) returned 1 [0093.046] FindNextFileW (in: hFindFile=0x381cc0, lpFindFileData=0x31e5e4 | out: lpFindFileData=0x31e5e4*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0xf8deeffb, ftCreationTime.dwHighDateTime=0x1ca043d, ftLastAccessTime.dwLowDateTime=0xf8deeffb, ftLastAccessTime.dwHighDateTime=0x1ca043d, ftLastWriteTime.dwLowDateTime=0xf8ead6dc, ftLastWriteTime.dwHighDateTime=0x1ca043d, nFileSizeHigh=0x0, nFileSizeLow=0x80000, dwReserved0=0x0, dwReserved1=0x0, cFileName="NTUSER.DAT{016888bd-6c6f-11de-8d1d-001e0bcde3ec}.TMContainer00000000000000000002.regtrans-ms", cAlternateFileName="NTUSER~2.REG")) returned 1 [0093.046] FindNextFileW (in: hFindFile=0x381cc0, lpFindFileData=0x31e5e4 | out: lpFindFileData=0x31e5e4*(dwFileAttributes=0x2026, ftCreationTime.dwLowDateTime=0x62fa4a0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x62fa4a0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xe9bbeade, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x14, dwReserved0=0x0, dwReserved1=0x0, cFileName="ntuser.ini", cAlternateFileName="")) returned 1 [0093.046] FindNextFileW (in: hFindFile=0x381cc0, lpFindFileData=0x31e5e4 | out: lpFindFileData=0x31e5e4*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0xfdac04c8, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x6346760, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xd8868f0a, ftLastWriteTime.dwHighDateTime=0x1cb892d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Pictures", cAlternateFileName="")) returned 1 [0093.046] FindNextFileW (in: hFindFile=0x381cc0, lpFindFileData=0x31e5e4 | out: lpFindFileData=0x31e5e4*(dwFileAttributes=0x2416, ftCreationTime.dwLowDateTime=0x30702f92, ftCreationTime.dwHighDateTime=0x1ca0441, ftLastAccessTime.dwLowDateTime=0x30702f92, ftLastAccessTime.dwHighDateTime=0x1ca0441, ftLastWriteTime.dwLowDateTime=0x30702f92, ftLastWriteTime.dwHighDateTime=0x1ca0441, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="PrintHood", cAlternateFileName="PRINTH~1")) returned 1 [0093.047] FindNextFileW (in: hFindFile=0x381cc0, lpFindFileData=0x31e5e4 | out: lpFindFileData=0x31e5e4*(dwFileAttributes=0x2416, ftCreationTime.dwLowDateTime=0x30702f92, ftCreationTime.dwHighDateTime=0x1ca0441, ftLastAccessTime.dwLowDateTime=0x30702f92, ftLastAccessTime.dwHighDateTime=0x1ca0441, ftLastWriteTime.dwLowDateTime=0x30702f92, ftLastWriteTime.dwHighDateTime=0x1ca0441, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Recent", cAlternateFileName="")) returned 1 [0093.047] FindNextFileW (in: hFindFile=0x381cc0, lpFindFileData=0x31e5e4 | out: lpFindFileData=0x31e5e4*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0xfdac04c8, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x6346760, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xd894d74c, ftLastWriteTime.dwHighDateTime=0x1cb892d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Saved Games", cAlternateFileName="SAVEDG~1")) returned 1 [0093.047] FindNextFileW (in: hFindFile=0x381cc0, lpFindFileData=0x31e5e4 | out: lpFindFileData=0x31e5e4*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x62fa4a0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x6346760, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xd88b51cb, ftLastWriteTime.dwHighDateTime=0x1cb892d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Searches", cAlternateFileName="")) returned 1 [0093.047] FindNextFileW (in: hFindFile=0x381cc0, lpFindFileData=0x31e5e4 | out: lpFindFileData=0x31e5e4*(dwFileAttributes=0x2416, ftCreationTime.dwLowDateTime=0x30702f92, ftCreationTime.dwHighDateTime=0x1ca0441, ftLastAccessTime.dwLowDateTime=0x30702f92, ftLastAccessTime.dwHighDateTime=0x1ca0441, ftLastWriteTime.dwLowDateTime=0x30702f92, ftLastWriteTime.dwHighDateTime=0x1ca0441, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="SendTo", cAlternateFileName="")) returned 1 [0093.047] FindNextFileW (in: hFindFile=0x381cc0, lpFindFileData=0x31e5e4 | out: lpFindFileData=0x31e5e4*(dwFileAttributes=0x2416, ftCreationTime.dwLowDateTime=0x30702f92, ftCreationTime.dwHighDateTime=0x1ca0441, ftLastAccessTime.dwLowDateTime=0x30702f92, ftLastAccessTime.dwHighDateTime=0x1ca0441, ftLastWriteTime.dwLowDateTime=0x30702f92, ftLastWriteTime.dwHighDateTime=0x1ca0441, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Start Menu", cAlternateFileName="STARTM~1")) returned 1 [0093.047] FindNextFileW (in: hFindFile=0x381cc0, lpFindFileData=0x31e5e4 | out: lpFindFileData=0x31e5e4*(dwFileAttributes=0x2416, ftCreationTime.dwLowDateTime=0x30702f92, ftCreationTime.dwHighDateTime=0x1ca0441, ftLastAccessTime.dwLowDateTime=0x30702f92, ftLastAccessTime.dwHighDateTime=0x1ca0441, ftLastWriteTime.dwLowDateTime=0x30702f92, ftLastWriteTime.dwHighDateTime=0x1ca0441, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Templates", cAlternateFileName="TEMPLA~1")) returned 1 [0093.047] FindNextFileW (in: hFindFile=0x381cc0, lpFindFileData=0x31e5e4 | out: lpFindFileData=0x31e5e4*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0xfdac04c8, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x6320600, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xd8868f0a, ftLastWriteTime.dwHighDateTime=0x1cb892d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Videos", cAlternateFileName="")) returned 1 [0093.047] FindNextFileW (in: hFindFile=0x381cc0, lpFindFileData=0x31e5e4 | out: lpFindFileData=0x31e5e4*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0093.047] FindClose (in: hFindFile=0x381cc0 | out: hFindFile=0x381cc0) returned 1 [0093.047] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e86c) returned 1 [0093.047] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e878) returned 1 [0093.048] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e834) returned 1 [0093.048] FindFirstFileW (in: lpFileName="C:\\Users\\Default\\AppData\\*", lpFindFileData=0x31e55c | out: lpFindFileData=0x31e55c*(dwFileAttributes=0x2012, ftCreationTime.dwLowDateTime=0xfda01e06, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x6320600, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xe9bbeade, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x381cc0 [0093.048] FindNextFileW (in: hFindFile=0x381cc0, lpFindFileData=0x31e56c | out: lpFindFileData=0x31e56c*(dwFileAttributes=0x2012, ftCreationTime.dwLowDateTime=0xfda01e06, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x6320600, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xe9bbeade, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0093.048] FindNextFileW (in: hFindFile=0x381cc0, lpFindFileData=0x31e56c | out: lpFindFileData=0x31e56c*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xfda01e06, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x66fe9c0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x93e4774a, ftLastWriteTime.dwHighDateTime=0x1cb8927, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Local", cAlternateFileName="")) returned 1 [0093.048] FindNextFileW (in: hFindFile=0x381cc0, lpFindFileData=0x31e56c | out: lpFindFileData=0x31e56c*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x6320600, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x6320600, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x23a1d229, ftLastWriteTime.dwHighDateTime=0x1cb892f, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="LocalLow", cAlternateFileName="")) returned 1 [0093.048] FindNextFileW (in: hFindFile=0x381cc0, lpFindFileData=0x31e56c | out: lpFindFileData=0x31e56c*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xfda27f60, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x6320600, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xf2c805c8, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Roaming", cAlternateFileName="")) returned 1 [0093.049] FindNextFileW (in: hFindFile=0x381cc0, lpFindFileData=0x31e56c | out: lpFindFileData=0x31e56c*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xfda27f60, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x6320600, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xf2c805c8, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Roaming", cAlternateFileName="")) returned 0 [0093.049] FindClose (in: hFindFile=0x381cc0 | out: hFindFile=0x381cc0) returned 1 [0093.049] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e7f4) returned 1 [0093.049] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e800) returned 1 [0093.049] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e834) returned 1 [0093.049] FindFirstFileW (in: lpFileName="C:\\Users\\Default\\AppData\\*", lpFindFileData=0x31e55c | out: lpFindFileData=0x31e55c*(dwFileAttributes=0x2012, ftCreationTime.dwLowDateTime=0xfda01e06, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x6320600, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xe9bbeade, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x381cc0 [0093.049] FindNextFileW (in: hFindFile=0x381cc0, lpFindFileData=0x31e56c | out: lpFindFileData=0x31e56c*(dwFileAttributes=0x2012, ftCreationTime.dwLowDateTime=0xfda01e06, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x6320600, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xe9bbeade, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0093.049] FindNextFileW (in: hFindFile=0x381cc0, lpFindFileData=0x31e56c | out: lpFindFileData=0x31e56c*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xfda01e06, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x66fe9c0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x93e4774a, ftLastWriteTime.dwHighDateTime=0x1cb8927, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Local", cAlternateFileName="")) returned 1 [0093.049] FindNextFileW (in: hFindFile=0x381cc0, lpFindFileData=0x31e56c | out: lpFindFileData=0x31e56c*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x6320600, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x6320600, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x23a1d229, ftLastWriteTime.dwHighDateTime=0x1cb892f, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="LocalLow", cAlternateFileName="")) returned 1 [0093.049] FindNextFileW (in: hFindFile=0x381cc0, lpFindFileData=0x31e56c | out: lpFindFileData=0x31e56c*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xfda27f60, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x6320600, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xf2c805c8, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Roaming", cAlternateFileName="")) returned 1 [0093.050] FindNextFileW (in: hFindFile=0x381cc0, lpFindFileData=0x31e56c | out: lpFindFileData=0x31e56c*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0093.050] FindClose (in: hFindFile=0x381cc0 | out: hFindFile=0x381cc0) returned 1 [0093.050] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e7f4) returned 1 [0093.050] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e800) returned 1 [0093.050] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e7bc) returned 1 [0093.050] FindFirstFileW (in: lpFileName="C:\\Users\\Default\\AppData\\Local\\*", lpFindFileData=0x31e4e4 | out: lpFindFileData=0x31e4e4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xfda01e06, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x66fe9c0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x93e4774a, ftLastWriteTime.dwHighDateTime=0x1cb8927, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x381cc0 [0093.051] FindNextFileW (in: hFindFile=0x381cc0, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xfda01e06, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x66fe9c0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x93e4774a, ftLastWriteTime.dwHighDateTime=0x1cb8927, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0093.051] FindNextFileW (in: hFindFile=0x381cc0, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x2416, ftCreationTime.dwLowDateTime=0x307290f2, ftCreationTime.dwHighDateTime=0x1ca0441, ftLastAccessTime.dwLowDateTime=0x307290f2, ftLastAccessTime.dwHighDateTime=0x1ca0441, ftLastWriteTime.dwLowDateTime=0x307290f2, ftLastWriteTime.dwHighDateTime=0x1ca0441, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Application Data", cAlternateFileName="APPLIC~1")) returned 1 [0093.051] FindNextFileW (in: hFindFile=0x381cc0, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x2416, ftCreationTime.dwLowDateTime=0x307290f2, ftCreationTime.dwHighDateTime=0x1ca0441, ftLastAccessTime.dwLowDateTime=0x307290f2, ftLastAccessTime.dwHighDateTime=0x1ca0441, ftLastWriteTime.dwLowDateTime=0x307290f2, ftLastWriteTime.dwHighDateTime=0x1ca0441, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="History", cAlternateFileName="")) returned 1 [0093.051] FindNextFileW (in: hFindFile=0x381cc0, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x2022, ftCreationTime.dwLowDateTime=0x66b2700, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x66b2700, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xddd35f67, ftLastWriteTime.dwHighDateTime=0x1cb892d, nFileSizeHigh=0x0, nFileSizeLow=0xbd7f0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="IconCache.db", cAlternateFileName="ICONCA~1.DB")) returned 1 [0093.051] FindNextFileW (in: hFindFile=0x381cc0, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xfda01e06, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x6320600, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x184eadb, ftLastWriteTime.dwHighDateTime=0x1cb8927, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft", cAlternateFileName="MICROS~1")) returned 1 [0093.051] FindNextFileW (in: hFindFile=0x381cc0, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xfda27f60, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x6451100, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x3b34dcb8, ftLastWriteTime.dwHighDateTime=0x1cb8930, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Temp", cAlternateFileName="")) returned 1 [0093.052] FindNextFileW (in: hFindFile=0x381cc0, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x2416, ftCreationTime.dwLowDateTime=0x307290f2, ftCreationTime.dwHighDateTime=0x1ca0441, ftLastAccessTime.dwLowDateTime=0x307290f2, ftLastAccessTime.dwHighDateTime=0x1ca0441, ftLastWriteTime.dwLowDateTime=0x307290f2, ftLastWriteTime.dwHighDateTime=0x1ca0441, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Temporary Internet Files", cAlternateFileName="TEMPOR~1")) returned 1 [0093.052] FindNextFileW (in: hFindFile=0x381cc0, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x2416, ftCreationTime.dwLowDateTime=0x307290f2, ftCreationTime.dwHighDateTime=0x1ca0441, ftLastAccessTime.dwLowDateTime=0x307290f2, ftLastAccessTime.dwHighDateTime=0x1ca0441, ftLastWriteTime.dwLowDateTime=0x307290f2, ftLastWriteTime.dwHighDateTime=0x1ca0441, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Temporary Internet Files", cAlternateFileName="TEMPOR~1")) returned 0 [0093.052] FindClose (in: hFindFile=0x381cc0 | out: hFindFile=0x381cc0) returned 1 [0093.052] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e77c) returned 1 [0093.052] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e788) returned 1 [0093.053] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e7bc) returned 1 [0093.053] FindFirstFileW (in: lpFileName="C:\\Users\\Default\\AppData\\Local\\*", lpFindFileData=0x31e4e4 | out: lpFindFileData=0x31e4e4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xfda01e06, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x66fe9c0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x93e4774a, ftLastWriteTime.dwHighDateTime=0x1cb8927, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x381cc0 [0093.053] FindNextFileW (in: hFindFile=0x381cc0, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xfda01e06, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x66fe9c0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x93e4774a, ftLastWriteTime.dwHighDateTime=0x1cb8927, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0093.054] FindNextFileW (in: hFindFile=0x381cc0, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x2416, ftCreationTime.dwLowDateTime=0x307290f2, ftCreationTime.dwHighDateTime=0x1ca0441, ftLastAccessTime.dwLowDateTime=0x307290f2, ftLastAccessTime.dwHighDateTime=0x1ca0441, ftLastWriteTime.dwLowDateTime=0x307290f2, ftLastWriteTime.dwHighDateTime=0x1ca0441, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Application Data", cAlternateFileName="APPLIC~1")) returned 1 [0093.054] FindNextFileW (in: hFindFile=0x381cc0, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x2416, ftCreationTime.dwLowDateTime=0x307290f2, ftCreationTime.dwHighDateTime=0x1ca0441, ftLastAccessTime.dwLowDateTime=0x307290f2, ftLastAccessTime.dwHighDateTime=0x1ca0441, ftLastWriteTime.dwLowDateTime=0x307290f2, ftLastWriteTime.dwHighDateTime=0x1ca0441, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="History", cAlternateFileName="")) returned 1 [0093.054] FindNextFileW (in: hFindFile=0x381cc0, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x2022, ftCreationTime.dwLowDateTime=0x66b2700, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x66b2700, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xddd35f67, ftLastWriteTime.dwHighDateTime=0x1cb892d, nFileSizeHigh=0x0, nFileSizeLow=0xbd7f0, dwReserved0=0x0, dwReserved1=0x0, cFileName="IconCache.db", cAlternateFileName="ICONCA~1.DB")) returned 1 [0093.054] FindNextFileW (in: hFindFile=0x381cc0, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xfda01e06, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x6320600, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x184eadb, ftLastWriteTime.dwHighDateTime=0x1cb8927, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft", cAlternateFileName="MICROS~1")) returned 1 [0093.054] FindNextFileW (in: hFindFile=0x381cc0, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xfda27f60, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x6451100, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x3b34dcb8, ftLastWriteTime.dwHighDateTime=0x1cb8930, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Temp", cAlternateFileName="")) returned 1 [0093.054] FindNextFileW (in: hFindFile=0x381cc0, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x2416, ftCreationTime.dwLowDateTime=0x307290f2, ftCreationTime.dwHighDateTime=0x1ca0441, ftLastAccessTime.dwLowDateTime=0x307290f2, ftLastAccessTime.dwHighDateTime=0x1ca0441, ftLastWriteTime.dwLowDateTime=0x307290f2, ftLastWriteTime.dwHighDateTime=0x1ca0441, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Temporary Internet Files", cAlternateFileName="TEMPOR~1")) returned 1 [0093.054] FindNextFileW (in: hFindFile=0x381cc0, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0093.054] FindClose (in: hFindFile=0x381cc0 | out: hFindFile=0x381cc0) returned 1 [0093.055] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e77c) returned 1 [0093.055] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e788) returned 1 [0093.055] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e744) returned 1 [0093.055] FindFirstFileW (in: lpFileName="C:\\Users\\Default\\AppData\\Local\\Application Data\\*", lpFindFileData=0x31e46c | out: lpFindFileData=0x31e46c*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0093.058] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e708) returned 1 [0093.059] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e744) returned 1 [0093.060] FindFirstFileW (in: lpFileName="C:\\Users\\Default\\AppData\\Local\\History\\*", lpFindFileData=0x31e46c | out: lpFindFileData=0x31e46c*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0093.062] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e708) returned 1 [0093.063] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e744) returned 1 [0093.063] FindFirstFileW (in: lpFileName="C:\\Users\\Default\\AppData\\Local\\Microsoft\\*", lpFindFileData=0x31e46c | out: lpFindFileData=0x31e46c*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xfda01e06, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x6320600, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x184eadb, ftLastWriteTime.dwHighDateTime=0x1cb8927, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x381cc0 [0093.068] FindNextFileW (in: hFindFile=0x381cc0, lpFindFileData=0x31e47c | out: lpFindFileData=0x31e47c*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xfda01e06, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x6320600, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x184eadb, ftLastWriteTime.dwHighDateTime=0x1cb8927, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0093.068] FindNextFileW (in: hFindFile=0x381cc0, lpFindFileData=0x31e47c | out: lpFindFileData=0x31e47c*(dwFileAttributes=0x2014, ftCreationTime.dwLowDateTime=0x6320600, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x6320600, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xea43994d, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Credentials", cAlternateFileName="CREDEN~1")) returned 1 [0093.069] FindNextFileW (in: hFindFile=0x381cc0, lpFindFileData=0x31e47c | out: lpFindFileData=0x31e47c*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x6320600, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x66b2700, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xff0498b1, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Feeds", cAlternateFileName="")) returned 1 [0093.069] FindNextFileW (in: hFindFile=0x381cc0, lpFindFileData=0x31e47c | out: lpFindFileData=0x31e47c*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0x6320600, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x668c5a0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xfea09ee5, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Feeds Cache", cAlternateFileName="FEEDSC~1")) returned 1 [0093.069] FindNextFileW (in: hFindFile=0x381cc0, lpFindFileData=0x31e47c | out: lpFindFileData=0x31e47c*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x6320600, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x668c5a0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x96e13f, ftLastWriteTime.dwHighDateTime=0x1cb8927, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Internet Explorer", cAlternateFileName="INTERN~1")) returned 1 [0093.069] FindNextFileW (in: hFindFile=0x381cc0, lpFindFileData=0x31e47c | out: lpFindFileData=0x31e47c*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x6320600, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x66b2700, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xd856f385, ftLastWriteTime.dwHighDateTime=0x1cb892d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Media Player", cAlternateFileName="MEDIAP~1")) returned 1 [0093.069] FindNextFileW (in: hFindFile=0x381cc0, lpFindFileData=0x31e47c | out: lpFindFileData=0x31e47c*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xfda01e06, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x66d8860, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x4d1d5e4e, ftLastWriteTime.dwHighDateTime=0x1cb8927, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Windows", cAlternateFileName="")) returned 1 [0093.069] FindNextFileW (in: hFindFile=0x381cc0, lpFindFileData=0x31e47c | out: lpFindFileData=0x31e47c*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x6320600, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x66b2700, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xd774d0cb, ftLastWriteTime.dwHighDateTime=0x1cb892d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Windows Mail", cAlternateFileName="WINDOW~3")) returned 1 [0093.069] FindNextFileW (in: hFindFile=0x381cc0, lpFindFileData=0x31e47c | out: lpFindFileData=0x31e47c*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x6320600, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x6320600, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xf7de167e, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Windows Media", cAlternateFileName="WINDOW~2")) returned 1 [0093.070] FindNextFileW (in: hFindFile=0x381cc0, lpFindFileData=0x31e47c | out: lpFindFileData=0x31e47c*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x6320600, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x6451100, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x184eadb, ftLastWriteTime.dwHighDateTime=0x1cb8927, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Windows Sidebar", cAlternateFileName="WINDOW~1")) returned 1 [0093.070] FindNextFileW (in: hFindFile=0x381cc0, lpFindFileData=0x31e47c | out: lpFindFileData=0x31e47c*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x6320600, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x6451100, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x184eadb, ftLastWriteTime.dwHighDateTime=0x1cb8927, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Windows Sidebar", cAlternateFileName="WINDOW~1")) returned 0 [0093.070] FindClose (in: hFindFile=0x381cc0 | out: hFindFile=0x381cc0) returned 1 [0093.071] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e704) returned 1 [0093.071] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e710) returned 1 [0093.071] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e744) returned 1 [0093.071] FindFirstFileW (in: lpFileName="C:\\Users\\Default\\AppData\\Local\\Microsoft\\*", lpFindFileData=0x31e46c | out: lpFindFileData=0x31e46c*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xfda01e06, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x6320600, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x184eadb, ftLastWriteTime.dwHighDateTime=0x1cb8927, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x381cc0 [0093.072] FindNextFileW (in: hFindFile=0x381cc0, lpFindFileData=0x31e47c | out: lpFindFileData=0x31e47c*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xfda01e06, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x6320600, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x184eadb, ftLastWriteTime.dwHighDateTime=0x1cb8927, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0093.072] FindNextFileW (in: hFindFile=0x381cc0, lpFindFileData=0x31e47c | out: lpFindFileData=0x31e47c*(dwFileAttributes=0x2014, ftCreationTime.dwLowDateTime=0x6320600, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x6320600, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xea43994d, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Credentials", cAlternateFileName="CREDEN~1")) returned 1 [0093.072] FindNextFileW (in: hFindFile=0x381cc0, lpFindFileData=0x31e47c | out: lpFindFileData=0x31e47c*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x6320600, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x66b2700, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xff0498b1, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Feeds", cAlternateFileName="")) returned 1 [0093.072] FindNextFileW (in: hFindFile=0x381cc0, lpFindFileData=0x31e47c | out: lpFindFileData=0x31e47c*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0x6320600, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x668c5a0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xfea09ee5, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Feeds Cache", cAlternateFileName="FEEDSC~1")) returned 1 [0093.072] FindNextFileW (in: hFindFile=0x381cc0, lpFindFileData=0x31e47c | out: lpFindFileData=0x31e47c*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x6320600, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x668c5a0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x96e13f, ftLastWriteTime.dwHighDateTime=0x1cb8927, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Internet Explorer", cAlternateFileName="INTERN~1")) returned 1 [0093.072] FindNextFileW (in: hFindFile=0x381cc0, lpFindFileData=0x31e47c | out: lpFindFileData=0x31e47c*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x6320600, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x66b2700, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xd856f385, ftLastWriteTime.dwHighDateTime=0x1cb892d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Media Player", cAlternateFileName="MEDIAP~1")) returned 1 [0093.072] FindNextFileW (in: hFindFile=0x381cc0, lpFindFileData=0x31e47c | out: lpFindFileData=0x31e47c*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xfda01e06, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x66d8860, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x4d1d5e4e, ftLastWriteTime.dwHighDateTime=0x1cb8927, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Windows", cAlternateFileName="")) returned 1 [0093.073] FindNextFileW (in: hFindFile=0x381cc0, lpFindFileData=0x31e47c | out: lpFindFileData=0x31e47c*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x6320600, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x66b2700, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xd774d0cb, ftLastWriteTime.dwHighDateTime=0x1cb892d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Windows Mail", cAlternateFileName="WINDOW~3")) returned 1 [0093.073] FindNextFileW (in: hFindFile=0x381cc0, lpFindFileData=0x31e47c | out: lpFindFileData=0x31e47c*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x6320600, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x6320600, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xf7de167e, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Windows Media", cAlternateFileName="WINDOW~2")) returned 1 [0093.073] FindNextFileW (in: hFindFile=0x381cc0, lpFindFileData=0x31e47c | out: lpFindFileData=0x31e47c*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x6320600, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x6451100, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x184eadb, ftLastWriteTime.dwHighDateTime=0x1cb8927, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Windows Sidebar", cAlternateFileName="WINDOW~1")) returned 1 [0093.073] FindNextFileW (in: hFindFile=0x381cc0, lpFindFileData=0x31e47c | out: lpFindFileData=0x31e47c*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0093.073] FindClose (in: hFindFile=0x381cc0 | out: hFindFile=0x381cc0) returned 1 [0093.074] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e704) returned 1 [0093.074] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e710) returned 1 [0093.074] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e6cc) returned 1 [0093.074] FindFirstFileW (in: lpFileName="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Credentials\\*", lpFindFileData=0x31e3f4 | out: lpFindFileData=0x31e3f4*(dwFileAttributes=0x2014, ftCreationTime.dwLowDateTime=0x6320600, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x6320600, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xea43994d, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x381cc0 [0093.077] FindNextFileW (in: hFindFile=0x381cc0, lpFindFileData=0x31e404 | out: lpFindFileData=0x31e404*(dwFileAttributes=0x2014, ftCreationTime.dwLowDateTime=0x6320600, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x6320600, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xea43994d, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0093.078] FindNextFileW (in: hFindFile=0x381cc0, lpFindFileData=0x31e404 | out: lpFindFileData=0x31e404*(dwFileAttributes=0x2014, ftCreationTime.dwLowDateTime=0x6320600, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x6320600, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xea43994d, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 0 [0093.078] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e68c) returned 1 [0093.078] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e698) returned 1 [0093.078] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e6cc) returned 1 [0093.079] FindFirstFileW (in: lpFileName="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Credentials\\*", lpFindFileData=0x31e3f4 | out: lpFindFileData=0x31e3f4*(dwFileAttributes=0x2014, ftCreationTime.dwLowDateTime=0x6320600, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x6320600, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xea43994d, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x381cc0 [0093.079] FindNextFileW (in: hFindFile=0x381cc0, lpFindFileData=0x31e404 | out: lpFindFileData=0x31e404*(dwFileAttributes=0x2014, ftCreationTime.dwLowDateTime=0x6320600, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x6320600, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xea43994d, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0093.079] FindNextFileW (in: hFindFile=0x381cc0, lpFindFileData=0x31e404 | out: lpFindFileData=0x31e404*(dwFileAttributes=0x2014, ftCreationTime.dwLowDateTime=0x6320600, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x6320600, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xea43994d, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 0 [0093.079] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e68c) returned 1 [0093.079] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e698) returned 1 [0093.079] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e6cc) returned 1 [0093.079] FindFirstFileW (in: lpFileName="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Feeds\\*", lpFindFileData=0x31e3f4 | out: lpFindFileData=0x31e3f4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x6320600, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x66b2700, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xff0498b1, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x381cc0 [0093.081] FindNextFileW (in: hFindFile=0x381cc0, lpFindFileData=0x31e404 | out: lpFindFileData=0x31e404*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x6320600, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x66b2700, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xff0498b1, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0093.081] FindNextFileW (in: hFindFile=0x381cc0, lpFindFileData=0x31e404 | out: lpFindFileData=0x31e404*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x668c5a0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x668c5a0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xff107f92, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x1a00, dwReserved0=0x0, dwReserved1=0x0, cFileName="FeedsStore.feedsdb-ms", cAlternateFileName="FEEDSS~1.FEE")) returned 1 [0093.081] FindNextFileW (in: hFindFile=0x381cc0, lpFindFileData=0x31e404 | out: lpFindFileData=0x31e404*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x6320600, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x66b2700, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xfee3456d, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft Feeds~", cAlternateFileName="MICROS~1")) returned 1 [0093.081] FindNextFileW (in: hFindFile=0x381cc0, lpFindFileData=0x31e404 | out: lpFindFileData=0x31e404*(dwFileAttributes=0x2012, ftCreationTime.dwLowDateTime=0x6320600, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x6320600, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xff0498b1, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="{5588ACFD-6436-411B-A5CE-666AE6A92D3D}~", cAlternateFileName="{5588A~1")) returned 1 [0093.082] FindNextFileW (in: hFindFile=0x381cc0, lpFindFileData=0x31e404 | out: lpFindFileData=0x31e404*(dwFileAttributes=0x2012, ftCreationTime.dwLowDateTime=0x6320600, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x6320600, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xff0498b1, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="{5588ACFD-6436-411B-A5CE-666AE6A92D3D}~", cAlternateFileName="{5588A~1")) returned 0 [0093.082] FindClose (in: hFindFile=0x381cc0 | out: hFindFile=0x381cc0) returned 1 [0093.082] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e68c) returned 1 [0093.082] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e698) returned 1 [0093.082] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e6cc) returned 1 [0093.083] FindFirstFileW (in: lpFileName="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Feeds\\*", lpFindFileData=0x31e3f4 | out: lpFindFileData=0x31e3f4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x6320600, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x66b2700, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xff0498b1, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x381cc0 [0093.083] FindNextFileW (in: hFindFile=0x381cc0, lpFindFileData=0x31e404 | out: lpFindFileData=0x31e404*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x6320600, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x66b2700, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xff0498b1, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0093.083] FindNextFileW (in: hFindFile=0x381cc0, lpFindFileData=0x31e404 | out: lpFindFileData=0x31e404*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x668c5a0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x668c5a0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xff107f92, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x1a00, dwReserved0=0x0, dwReserved1=0x0, cFileName="FeedsStore.feedsdb-ms", cAlternateFileName="FEEDSS~1.FEE")) returned 1 [0093.084] FindNextFileW (in: hFindFile=0x381cc0, lpFindFileData=0x31e404 | out: lpFindFileData=0x31e404*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x6320600, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x66b2700, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xfee3456d, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft Feeds~", cAlternateFileName="MICROS~1")) returned 1 [0093.084] FindNextFileW (in: hFindFile=0x381cc0, lpFindFileData=0x31e404 | out: lpFindFileData=0x31e404*(dwFileAttributes=0x2012, ftCreationTime.dwLowDateTime=0x6320600, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x6320600, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xff0498b1, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="{5588ACFD-6436-411B-A5CE-666AE6A92D3D}~", cAlternateFileName="{5588A~1")) returned 1 [0093.084] FindNextFileW (in: hFindFile=0x381cc0, lpFindFileData=0x31e404 | out: lpFindFileData=0x31e404*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0093.085] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e68c) returned 1 [0093.085] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e698) returned 1 [0093.085] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e654) returned 1 [0093.085] GetLongPathNameW (in: lpszShortPath="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Feeds\\Microsoft Feeds~", lpszLongPath=0x31e148, cchBuffer=0x104 | out: lpszLongPath="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Feeds\\Microsoft Feeds~") returned 0x3f [0093.086] GetFullPathNameW (in: lpFileName="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Feeds\\Microsoft Feeds~", nBufferLength=0x105, lpBuffer=0x31e15c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Feeds\\Microsoft Feeds~", lpFilePart=0x0) returned 0x3f [0093.086] GetLongPathNameW (in: lpszShortPath="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Feeds\\Microsoft Feeds~", lpszLongPath=0x31e148, cchBuffer=0x104 | out: lpszLongPath="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Feeds\\Microsoft Feeds~") returned 0x3f [0093.087] GetLongPathNameW (in: lpszShortPath="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Feeds\\Microsoft Feeds~\\", lpszLongPath=0x31e128, cchBuffer=0x104 | out: lpszLongPath="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Feeds\\Microsoft Feeds~\\") returned 0x40 [0093.087] GetLongPathNameW (in: lpszShortPath="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Feeds\\Microsoft Feeds~\\", lpszLongPath=0x31e11c, cchBuffer=0x104 | out: lpszLongPath="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Feeds\\Microsoft Feeds~\\") returned 0x40 [0093.088] GetFullPathNameW (in: lpFileName="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Feeds\\Microsoft Feeds~\\", nBufferLength=0x105, lpBuffer=0x31e130, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Feeds\\Microsoft Feeds~\\", lpFilePart=0x0) returned 0x40 [0093.088] GetLongPathNameW (in: lpszShortPath="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Feeds\\Microsoft Feeds~\\", lpszLongPath=0x31e11c, cchBuffer=0x104 | out: lpszLongPath="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Feeds\\Microsoft Feeds~\\") returned 0x40 [0093.089] FindFirstFileW (in: lpFileName="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Feeds\\Microsoft Feeds~\\*", lpFindFileData=0x31e37c | out: lpFindFileData=0x31e37c*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x6320600, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x66b2700, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xfee3456d, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x381cc0 [0093.095] FindNextFileW (in: hFindFile=0x381cc0, lpFindFileData=0x31e38c | out: lpFindFileData=0x31e38c*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x6320600, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x66b2700, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xfee3456d, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0093.095] FindNextFileW (in: hFindFile=0x381cc0, lpFindFileData=0x31e38c | out: lpFindFileData=0x31e38c*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x668c5a0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x668c5a0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xfeaa2466, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x7000, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft at Home~.feed-ms", cAlternateFileName="MICROS~2.FEE")) returned 1 [0093.095] FindNextFileW (in: hFindFile=0x381cc0, lpFindFileData=0x31e38c | out: lpFindFileData=0x31e38c*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x668c5a0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x668c5a0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xfedc214c, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x7000, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft at Work~.feed-ms", cAlternateFileName="MICROS~1.FEE")) returned 1 [0093.096] FindNextFileW (in: hFindFile=0x381cc0, lpFindFileData=0x31e38c | out: lpFindFileData=0x31e38c*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x668c5a0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x668c5a0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xfee8082e, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x7000, dwReserved0=0x0, dwReserved1=0x0, cFileName="MSNBC News~.feed-ms", cAlternateFileName="MSNBCN~1.FEE")) returned 1 [0093.096] FindNextFileW (in: hFindFile=0x381cc0, lpFindFileData=0x31e38c | out: lpFindFileData=0x31e38c*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0093.096] FindClose (in: hFindFile=0x381cc0 | out: hFindFile=0x381cc0) returned 1 [0093.096] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e614) returned 1 [0093.096] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e620) returned 1 [0093.096] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e654) returned 1 [0093.097] GetLongPathNameW (in: lpszShortPath="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Feeds\\Microsoft Feeds~", lpszLongPath=0x31e148, cchBuffer=0x104 | out: lpszLongPath="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Feeds\\Microsoft Feeds~") returned 0x3f [0093.097] GetFullPathNameW (in: lpFileName="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Feeds\\Microsoft Feeds~", nBufferLength=0x105, lpBuffer=0x31e15c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Feeds\\Microsoft Feeds~", lpFilePart=0x0) returned 0x3f [0093.097] GetLongPathNameW (in: lpszShortPath="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Feeds\\Microsoft Feeds~", lpszLongPath=0x31e148, cchBuffer=0x104 | out: lpszLongPath="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Feeds\\Microsoft Feeds~") returned 0x3f [0093.098] GetLongPathNameW (in: lpszShortPath="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Feeds\\Microsoft Feeds~\\", lpszLongPath=0x31e128, cchBuffer=0x104 | out: lpszLongPath="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Feeds\\Microsoft Feeds~\\") returned 0x40 [0093.098] GetLongPathNameW (in: lpszShortPath="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Feeds\\Microsoft Feeds~\\", lpszLongPath=0x31e11c, cchBuffer=0x104 | out: lpszLongPath="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Feeds\\Microsoft Feeds~\\") returned 0x40 [0093.099] GetFullPathNameW (in: lpFileName="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Feeds\\Microsoft Feeds~\\", nBufferLength=0x105, lpBuffer=0x31e130, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Feeds\\Microsoft Feeds~\\", lpFilePart=0x0) returned 0x40 [0093.099] GetLongPathNameW (in: lpszShortPath="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Feeds\\Microsoft Feeds~\\", lpszLongPath=0x31e11c, cchBuffer=0x104 | out: lpszLongPath="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Feeds\\Microsoft Feeds~\\") returned 0x40 [0093.100] FindFirstFileW (in: lpFileName="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Feeds\\Microsoft Feeds~\\*", lpFindFileData=0x31e37c | out: lpFindFileData=0x31e37c*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x6320600, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x66b2700, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xfee3456d, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x381cc0 [0093.102] FindNextFileW (in: hFindFile=0x381cc0, lpFindFileData=0x31e38c | out: lpFindFileData=0x31e38c*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x6320600, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x66b2700, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xfee3456d, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0093.102] FindNextFileW (in: hFindFile=0x381cc0, lpFindFileData=0x31e38c | out: lpFindFileData=0x31e38c*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x668c5a0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x668c5a0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xfeaa2466, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x7000, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft at Home~.feed-ms", cAlternateFileName="MICROS~2.FEE")) returned 1 [0093.102] FindNextFileW (in: hFindFile=0x381cc0, lpFindFileData=0x31e38c | out: lpFindFileData=0x31e38c*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x668c5a0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x668c5a0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xfedc214c, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x7000, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft at Work~.feed-ms", cAlternateFileName="MICROS~1.FEE")) returned 1 [0093.102] FindNextFileW (in: hFindFile=0x381cc0, lpFindFileData=0x31e38c | out: lpFindFileData=0x31e38c*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x668c5a0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x668c5a0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xfee8082e, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x7000, dwReserved0=0x0, dwReserved1=0x0, cFileName="MSNBC News~.feed-ms", cAlternateFileName="MSNBCN~1.FEE")) returned 1 [0093.103] FindNextFileW (in: hFindFile=0x381cc0, lpFindFileData=0x31e38c | out: lpFindFileData=0x31e38c*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x668c5a0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x668c5a0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xfee8082e, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x7000, dwReserved0=0x0, dwReserved1=0x0, cFileName="MSNBC News~.feed-ms", cAlternateFileName="MSNBCN~1.FEE")) returned 0 [0093.103] FindClose (in: hFindFile=0x381cc0 | out: hFindFile=0x381cc0) returned 1 [0093.103] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e614) returned 1 [0093.103] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e620) returned 1 [0093.103] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e654) returned 1 [0093.103] GetLongPathNameW (in: lpszShortPath="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Feeds\\{5588ACFD-6436-411B-A5CE-666AE6A92D3D}~", lpszLongPath=0x31e148, cchBuffer=0x104 | out: lpszLongPath="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Feeds\\{5588ACFD-6436-411B-A5CE-666AE6A92D3D}~") returned 0x56 [0093.104] GetFullPathNameW (in: lpFileName="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Feeds\\{5588ACFD-6436-411B-A5CE-666AE6A92D3D}~", nBufferLength=0x105, lpBuffer=0x31e15c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Feeds\\{5588ACFD-6436-411B-A5CE-666AE6A92D3D}~", lpFilePart=0x0) returned 0x56 [0093.104] GetLongPathNameW (in: lpszShortPath="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Feeds\\{5588ACFD-6436-411B-A5CE-666AE6A92D3D}~", lpszLongPath=0x31e148, cchBuffer=0x104 | out: lpszLongPath="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Feeds\\{5588ACFD-6436-411B-A5CE-666AE6A92D3D}~") returned 0x56 [0093.105] GetLongPathNameW (in: lpszShortPath="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Feeds\\{5588ACFD-6436-411B-A5CE-666AE6A92D3D}~\\", lpszLongPath=0x31e128, cchBuffer=0x104 | out: lpszLongPath="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Feeds\\{5588ACFD-6436-411B-A5CE-666AE6A92D3D}~\\") returned 0x57 [0093.105] GetLongPathNameW (in: lpszShortPath="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Feeds\\{5588ACFD-6436-411B-A5CE-666AE6A92D3D}~\\", lpszLongPath=0x31e11c, cchBuffer=0x104 | out: lpszLongPath="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Feeds\\{5588ACFD-6436-411B-A5CE-666AE6A92D3D}~\\") returned 0x57 [0093.106] GetFullPathNameW (in: lpFileName="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Feeds\\{5588ACFD-6436-411B-A5CE-666AE6A92D3D}~\\", nBufferLength=0x105, lpBuffer=0x31e130, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Feeds\\{5588ACFD-6436-411B-A5CE-666AE6A92D3D}~\\", lpFilePart=0x0) returned 0x57 [0093.106] GetLongPathNameW (in: lpszShortPath="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Feeds\\{5588ACFD-6436-411B-A5CE-666AE6A92D3D}~\\", lpszLongPath=0x31e11c, cchBuffer=0x104 | out: lpszLongPath="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Feeds\\{5588ACFD-6436-411B-A5CE-666AE6A92D3D}~\\") returned 0x57 [0093.107] FindFirstFileW (in: lpFileName="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Feeds\\{5588ACFD-6436-411B-A5CE-666AE6A92D3D}~\\*", lpFindFileData=0x31e37c | out: lpFindFileData=0x31e37c*(dwFileAttributes=0x2012, ftCreationTime.dwLowDateTime=0x6320600, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x6320600, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xff0498b1, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x381cc0 [0093.108] FindNextFileW (in: hFindFile=0x381cc0, lpFindFileData=0x31e38c | out: lpFindFileData=0x31e38c*(dwFileAttributes=0x2012, ftCreationTime.dwLowDateTime=0x6320600, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x6320600, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xff0498b1, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0093.108] FindNextFileW (in: hFindFile=0x381cc0, lpFindFileData=0x31e38c | out: lpFindFileData=0x31e38c*(dwFileAttributes=0x2012, ftCreationTime.dwLowDateTime=0x6320600, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x668c5a0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xff0498b1, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="WebSlices~", cAlternateFileName="WEBSLI~1")) returned 1 [0093.108] FindNextFileW (in: hFindFile=0x381cc0, lpFindFileData=0x31e38c | out: lpFindFileData=0x31e38c*(dwFileAttributes=0x2012, ftCreationTime.dwLowDateTime=0x6320600, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x668c5a0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xff0498b1, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="WebSlices~", cAlternateFileName="WEBSLI~1")) returned 0 [0093.108] FindClose (in: hFindFile=0x381cc0 | out: hFindFile=0x381cc0) returned 1 [0093.108] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e614) returned 1 [0093.108] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e620) returned 1 [0093.108] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e654) returned 1 [0093.108] GetLongPathNameW (in: lpszShortPath="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Feeds\\{5588ACFD-6436-411B-A5CE-666AE6A92D3D}~", lpszLongPath=0x31e148, cchBuffer=0x104 | out: lpszLongPath="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Feeds\\{5588ACFD-6436-411B-A5CE-666AE6A92D3D}~") returned 0x56 [0093.109] GetFullPathNameW (in: lpFileName="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Feeds\\{5588ACFD-6436-411B-A5CE-666AE6A92D3D}~", nBufferLength=0x105, lpBuffer=0x31e15c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Feeds\\{5588ACFD-6436-411B-A5CE-666AE6A92D3D}~", lpFilePart=0x0) returned 0x56 [0093.109] GetLongPathNameW (in: lpszShortPath="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Feeds\\{5588ACFD-6436-411B-A5CE-666AE6A92D3D}~", lpszLongPath=0x31e148, cchBuffer=0x104 | out: lpszLongPath="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Feeds\\{5588ACFD-6436-411B-A5CE-666AE6A92D3D}~") returned 0x56 [0093.109] GetLongPathNameW (in: lpszShortPath="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Feeds\\{5588ACFD-6436-411B-A5CE-666AE6A92D3D}~\\", lpszLongPath=0x31e128, cchBuffer=0x104 | out: lpszLongPath="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Feeds\\{5588ACFD-6436-411B-A5CE-666AE6A92D3D}~\\") returned 0x57 [0093.110] GetLongPathNameW (in: lpszShortPath="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Feeds\\{5588ACFD-6436-411B-A5CE-666AE6A92D3D}~\\", lpszLongPath=0x31e11c, cchBuffer=0x104 | out: lpszLongPath="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Feeds\\{5588ACFD-6436-411B-A5CE-666AE6A92D3D}~\\") returned 0x57 [0093.110] GetFullPathNameW (in: lpFileName="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Feeds\\{5588ACFD-6436-411B-A5CE-666AE6A92D3D}~\\", nBufferLength=0x105, lpBuffer=0x31e130, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Feeds\\{5588ACFD-6436-411B-A5CE-666AE6A92D3D}~\\", lpFilePart=0x0) returned 0x57 [0093.110] GetLongPathNameW (in: lpszShortPath="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Feeds\\{5588ACFD-6436-411B-A5CE-666AE6A92D3D}~\\", lpszLongPath=0x31e11c, cchBuffer=0x104 | out: lpszLongPath="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Feeds\\{5588ACFD-6436-411B-A5CE-666AE6A92D3D}~\\") returned 0x57 [0093.112] FindFirstFileW (in: lpFileName="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Feeds\\{5588ACFD-6436-411B-A5CE-666AE6A92D3D}~\\*", lpFindFileData=0x31e37c | out: lpFindFileData=0x31e37c*(dwFileAttributes=0x2012, ftCreationTime.dwLowDateTime=0x6320600, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x6320600, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xff0498b1, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x381cc0 [0093.112] FindNextFileW (in: hFindFile=0x381cc0, lpFindFileData=0x31e38c | out: lpFindFileData=0x31e38c*(dwFileAttributes=0x2012, ftCreationTime.dwLowDateTime=0x6320600, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x6320600, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xff0498b1, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0093.112] FindNextFileW (in: hFindFile=0x381cc0, lpFindFileData=0x31e38c | out: lpFindFileData=0x31e38c*(dwFileAttributes=0x2012, ftCreationTime.dwLowDateTime=0x6320600, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x668c5a0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xff0498b1, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="WebSlices~", cAlternateFileName="WEBSLI~1")) returned 1 [0093.112] FindNextFileW (in: hFindFile=0x381cc0, lpFindFileData=0x31e38c | out: lpFindFileData=0x31e38c*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0093.112] FindClose (in: hFindFile=0x381cc0 | out: hFindFile=0x381cc0) returned 1 [0093.112] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e614) returned 1 [0093.112] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e620) returned 1 [0093.112] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e5dc) returned 1 [0093.112] GetLongPathNameW (in: lpszShortPath="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Feeds\\{5588ACFD-6436-411B-A5CE-666AE6A92D3D}~\\", lpszLongPath=0x31e0d0, cchBuffer=0x104 | out: lpszLongPath="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Feeds\\{5588ACFD-6436-411B-A5CE-666AE6A92D3D}~\\") returned 0x57 [0093.113] GetLongPathNameW (in: lpszShortPath="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Feeds\\{5588ACFD-6436-411B-A5CE-666AE6A92D3D}~\\WebSlices~", lpszLongPath=0x31e0d0, cchBuffer=0x104 | out: lpszLongPath="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Feeds\\{5588ACFD-6436-411B-A5CE-666AE6A92D3D}~\\WebSlices~") returned 0x61 [0093.114] GetFullPathNameW (in: lpFileName="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Feeds\\{5588ACFD-6436-411B-A5CE-666AE6A92D3D}~\\WebSlices~", nBufferLength=0x105, lpBuffer=0x31e0e4, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Feeds\\{5588ACFD-6436-411B-A5CE-666AE6A92D3D}~\\WebSlices~", lpFilePart=0x0) returned 0x61 [0093.114] GetLongPathNameW (in: lpszShortPath="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Feeds\\{5588ACFD-6436-411B-A5CE-666AE6A92D3D}~\\WebSlices~", lpszLongPath=0x31e0d0, cchBuffer=0x104 | out: lpszLongPath="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Feeds\\{5588ACFD-6436-411B-A5CE-666AE6A92D3D}~\\WebSlices~") returned 0x61 [0093.114] GetLongPathNameW (in: lpszShortPath="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Feeds\\{5588ACFD-6436-411B-A5CE-666AE6A92D3D}~\\", lpszLongPath=0x31e0b0, cchBuffer=0x104 | out: lpszLongPath="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Feeds\\{5588ACFD-6436-411B-A5CE-666AE6A92D3D}~\\") returned 0x57 [0093.115] GetLongPathNameW (in: lpszShortPath="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Feeds\\{5588ACFD-6436-411B-A5CE-666AE6A92D3D}~\\WebSlices~\\", lpszLongPath=0x31e0b0, cchBuffer=0x104 | out: lpszLongPath="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Feeds\\{5588ACFD-6436-411B-A5CE-666AE6A92D3D}~\\WebSlices~\\") returned 0x62 [0093.115] GetLongPathNameW (in: lpszShortPath="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Feeds\\{5588ACFD-6436-411B-A5CE-666AE6A92D3D}~\\", lpszLongPath=0x31e0a4, cchBuffer=0x104 | out: lpszLongPath="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Feeds\\{5588ACFD-6436-411B-A5CE-666AE6A92D3D}~\\") returned 0x57 [0093.116] GetLongPathNameW (in: lpszShortPath="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Feeds\\{5588ACFD-6436-411B-A5CE-666AE6A92D3D}~\\WebSlices~\\", lpszLongPath=0x31e0a4, cchBuffer=0x104 | out: lpszLongPath="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Feeds\\{5588ACFD-6436-411B-A5CE-666AE6A92D3D}~\\WebSlices~\\") returned 0x62 [0093.116] GetFullPathNameW (in: lpFileName="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Feeds\\{5588ACFD-6436-411B-A5CE-666AE6A92D3D}~\\WebSlices~\\", nBufferLength=0x105, lpBuffer=0x31e0b8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Feeds\\{5588ACFD-6436-411B-A5CE-666AE6A92D3D}~\\WebSlices~\\", lpFilePart=0x0) returned 0x62 [0093.116] GetLongPathNameW (in: lpszShortPath="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Feeds\\{5588ACFD-6436-411B-A5CE-666AE6A92D3D}~\\WebSlices~\\", lpszLongPath=0x31e0a4, cchBuffer=0x104 | out: lpszLongPath="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Feeds\\{5588ACFD-6436-411B-A5CE-666AE6A92D3D}~\\WebSlices~\\") returned 0x62 [0093.118] FindFirstFileW (in: lpFileName="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Feeds\\{5588ACFD-6436-411B-A5CE-666AE6A92D3D}~\\WebSlices~\\*", lpFindFileData=0x31e304 | out: lpFindFileData=0x31e304*(dwFileAttributes=0x2012, ftCreationTime.dwLowDateTime=0x6320600, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x668c5a0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xff0498b1, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x381cc0 [0093.119] FindNextFileW (in: hFindFile=0x381cc0, lpFindFileData=0x31e314 | out: lpFindFileData=0x31e314*(dwFileAttributes=0x2012, ftCreationTime.dwLowDateTime=0x6320600, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x668c5a0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xff0498b1, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0093.119] FindNextFileW (in: hFindFile=0x381cc0, lpFindFileData=0x31e314 | out: lpFindFileData=0x31e314*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x668c5a0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x668c5a0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xff06fa11, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x7000, dwReserved0=0x0, dwReserved1=0x0, cFileName="Web Slice Gallery~.feed-ms", cAlternateFileName="WEBSLI~1.FEE")) returned 1 [0093.119] FindNextFileW (in: hFindFile=0x381cc0, lpFindFileData=0x31e314 | out: lpFindFileData=0x31e314*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0093.119] FindClose (in: hFindFile=0x381cc0 | out: hFindFile=0x381cc0) returned 1 [0093.119] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e59c) returned 1 [0093.119] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e5a8) returned 1 [0093.119] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e5dc) returned 1 [0093.119] GetLongPathNameW (in: lpszShortPath="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Feeds\\{5588ACFD-6436-411B-A5CE-666AE6A92D3D}~\\", lpszLongPath=0x31e0d0, cchBuffer=0x104 | out: lpszLongPath="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Feeds\\{5588ACFD-6436-411B-A5CE-666AE6A92D3D}~\\") returned 0x57 [0093.119] GetLongPathNameW (in: lpszShortPath="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Feeds\\{5588ACFD-6436-411B-A5CE-666AE6A92D3D}~\\WebSlices~", lpszLongPath=0x31e0d0, cchBuffer=0x104 | out: lpszLongPath="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Feeds\\{5588ACFD-6436-411B-A5CE-666AE6A92D3D}~\\WebSlices~") returned 0x61 [0093.120] GetFullPathNameW (in: lpFileName="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Feeds\\{5588ACFD-6436-411B-A5CE-666AE6A92D3D}~\\WebSlices~", nBufferLength=0x105, lpBuffer=0x31e0e4, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Feeds\\{5588ACFD-6436-411B-A5CE-666AE6A92D3D}~\\WebSlices~", lpFilePart=0x0) returned 0x61 [0093.120] GetLongPathNameW (in: lpszShortPath="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Feeds\\{5588ACFD-6436-411B-A5CE-666AE6A92D3D}~\\WebSlices~", lpszLongPath=0x31e0d0, cchBuffer=0x104 | out: lpszLongPath="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Feeds\\{5588ACFD-6436-411B-A5CE-666AE6A92D3D}~\\WebSlices~") returned 0x61 [0093.121] GetLongPathNameW (in: lpszShortPath="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Feeds\\{5588ACFD-6436-411B-A5CE-666AE6A92D3D}~\\", lpszLongPath=0x31e0b0, cchBuffer=0x104 | out: lpszLongPath="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Feeds\\{5588ACFD-6436-411B-A5CE-666AE6A92D3D}~\\") returned 0x57 [0093.121] GetLongPathNameW (in: lpszShortPath="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Feeds\\{5588ACFD-6436-411B-A5CE-666AE6A92D3D}~\\WebSlices~\\", lpszLongPath=0x31e0b0, cchBuffer=0x104 | out: lpszLongPath="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Feeds\\{5588ACFD-6436-411B-A5CE-666AE6A92D3D}~\\WebSlices~\\") returned 0x62 [0093.122] GetLongPathNameW (in: lpszShortPath="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Feeds\\{5588ACFD-6436-411B-A5CE-666AE6A92D3D}~\\", lpszLongPath=0x31e0a4, cchBuffer=0x104 | out: lpszLongPath="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Feeds\\{5588ACFD-6436-411B-A5CE-666AE6A92D3D}~\\") returned 0x57 [0093.122] GetLongPathNameW (in: lpszShortPath="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Feeds\\{5588ACFD-6436-411B-A5CE-666AE6A92D3D}~\\WebSlices~\\", lpszLongPath=0x31e0a4, cchBuffer=0x104 | out: lpszLongPath="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Feeds\\{5588ACFD-6436-411B-A5CE-666AE6A92D3D}~\\WebSlices~\\") returned 0x62 [0093.123] GetFullPathNameW (in: lpFileName="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Feeds\\{5588ACFD-6436-411B-A5CE-666AE6A92D3D}~\\WebSlices~\\", nBufferLength=0x105, lpBuffer=0x31e0b8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Feeds\\{5588ACFD-6436-411B-A5CE-666AE6A92D3D}~\\WebSlices~\\", lpFilePart=0x0) returned 0x62 [0093.123] GetLongPathNameW (in: lpszShortPath="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Feeds\\{5588ACFD-6436-411B-A5CE-666AE6A92D3D}~\\WebSlices~\\", lpszLongPath=0x31e0a4, cchBuffer=0x104 | out: lpszLongPath="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Feeds\\{5588ACFD-6436-411B-A5CE-666AE6A92D3D}~\\WebSlices~\\") returned 0x62 [0093.124] FindFirstFileW (in: lpFileName="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Feeds\\{5588ACFD-6436-411B-A5CE-666AE6A92D3D}~\\WebSlices~\\*", lpFindFileData=0x31e304 | out: lpFindFileData=0x31e304*(dwFileAttributes=0x2012, ftCreationTime.dwLowDateTime=0x6320600, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x668c5a0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xff0498b1, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x381cc0 [0093.124] FindNextFileW (in: hFindFile=0x381cc0, lpFindFileData=0x31e314 | out: lpFindFileData=0x31e314*(dwFileAttributes=0x2012, ftCreationTime.dwLowDateTime=0x6320600, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x668c5a0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xff0498b1, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0093.124] FindNextFileW (in: hFindFile=0x381cc0, lpFindFileData=0x31e314 | out: lpFindFileData=0x31e314*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x668c5a0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x668c5a0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xff06fa11, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x7000, dwReserved0=0x0, dwReserved1=0x0, cFileName="Web Slice Gallery~.feed-ms", cAlternateFileName="WEBSLI~1.FEE")) returned 1 [0093.125] FindNextFileW (in: hFindFile=0x381cc0, lpFindFileData=0x31e314 | out: lpFindFileData=0x31e314*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x668c5a0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x668c5a0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xff06fa11, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x7000, dwReserved0=0x0, dwReserved1=0x0, cFileName="Web Slice Gallery~.feed-ms", cAlternateFileName="WEBSLI~1.FEE")) returned 0 [0093.125] FindClose (in: hFindFile=0x381cc0 | out: hFindFile=0x381cc0) returned 1 [0093.125] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e59c) returned 1 [0093.125] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e5a8) returned 1 [0093.125] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e6cc) returned 1 [0093.125] GetFullPathNameW (in: lpFileName="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Feeds Cache", nBufferLength=0x105, lpBuffer=0x31e1d4, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Feeds Cache", lpFilePart=0x0) returned 0x34 [0093.125] GetFullPathNameW (in: lpFileName="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Feeds Cache\\", nBufferLength=0x105, lpBuffer=0x31e1a8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Feeds Cache\\", lpFilePart=0x0) returned 0x35 [0093.125] FindFirstFileW (in: lpFileName="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Feeds Cache\\*", lpFindFileData=0x31e3f4 | out: lpFindFileData=0x31e3f4*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0x6320600, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x668c5a0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xfea09ee5, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x381cc0 [0093.130] FindNextFileW (in: hFindFile=0x381cc0, lpFindFileData=0x31e404 | out: lpFindFileData=0x31e404*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0x6320600, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x668c5a0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xfea09ee5, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0093.130] FindNextFileW (in: hFindFile=0x381cc0, lpFindFileData=0x31e404 | out: lpFindFileData=0x31e404*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0x6320600, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x668c5a0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xfedc214c, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="1NBUR4HR", cAlternateFileName="")) returned 1 [0093.131] FindNextFileW (in: hFindFile=0x381cc0, lpFindFileData=0x31e404 | out: lpFindFileData=0x31e404*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0x6320600, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x668c5a0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xfee8082e, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="6ASVN7J7", cAlternateFileName="")) returned 1 [0093.131] FindNextFileW (in: hFindFile=0x381cc0, lpFindFileData=0x31e404 | out: lpFindFileData=0x31e404*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0x6320600, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x668c5a0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xff06fa11, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="D68G7BIJ", cAlternateFileName="")) returned 1 [0093.131] FindNextFileW (in: hFindFile=0x381cc0, lpFindFileData=0x31e404 | out: lpFindFileData=0x31e404*(dwFileAttributes=0x2026, ftCreationTime.dwLowDateTime=0x668c5a0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x668c5a0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xfe9e3d85, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x43, dwReserved0=0x0, dwReserved1=0x0, cFileName="desktop.ini", cAlternateFileName="")) returned 1 [0093.131] FindNextFileW (in: hFindFile=0x381cc0, lpFindFileData=0x31e404 | out: lpFindFileData=0x31e404*(dwFileAttributes=0x2026, ftCreationTime.dwLowDateTime=0x668c5a0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x668c5a0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xa9d0d0, ftLastWriteTime.dwHighDateTime=0x1cb8927, nFileSizeHigh=0x0, nFileSizeLow=0x8000, dwReserved0=0x0, dwReserved1=0x0, cFileName="index.dat", cAlternateFileName="")) returned 1 [0093.131] FindNextFileW (in: hFindFile=0x381cc0, lpFindFileData=0x31e404 | out: lpFindFileData=0x31e404*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0x6320600, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x668c5a0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xfed03a6b, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="KQMHSVKD", cAlternateFileName="")) returned 1 [0093.131] FindNextFileW (in: hFindFile=0x381cc0, lpFindFileData=0x31e404 | out: lpFindFileData=0x31e404*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0x6320600, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x668c5a0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xfed03a6b, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="KQMHSVKD", cAlternateFileName="")) returned 0 [0093.131] FindClose (in: hFindFile=0x381cc0 | out: hFindFile=0x381cc0) returned 1 [0093.132] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e68c) returned 1 [0093.132] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e698) returned 1 [0093.132] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e6cc) returned 1 [0093.132] GetFullPathNameW (in: lpFileName="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Feeds Cache", nBufferLength=0x105, lpBuffer=0x31e1d4, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Feeds Cache", lpFilePart=0x0) returned 0x34 [0093.132] GetFullPathNameW (in: lpFileName="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Feeds Cache\\", nBufferLength=0x105, lpBuffer=0x31e1a8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Feeds Cache\\", lpFilePart=0x0) returned 0x35 [0093.132] FindFirstFileW (in: lpFileName="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Feeds Cache\\*", lpFindFileData=0x31e3f4 | out: lpFindFileData=0x31e3f4*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0x6320600, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x668c5a0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xfea09ee5, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x381cc0 [0093.133] FindNextFileW (in: hFindFile=0x381cc0, lpFindFileData=0x31e404 | out: lpFindFileData=0x31e404*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0x6320600, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x668c5a0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xfea09ee5, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0093.133] FindNextFileW (in: hFindFile=0x381cc0, lpFindFileData=0x31e404 | out: lpFindFileData=0x31e404*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0x6320600, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x668c5a0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xfedc214c, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="1NBUR4HR", cAlternateFileName="")) returned 1 [0093.133] FindNextFileW (in: hFindFile=0x381cc0, lpFindFileData=0x31e404 | out: lpFindFileData=0x31e404*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0x6320600, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x668c5a0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xfee8082e, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="6ASVN7J7", cAlternateFileName="")) returned 1 [0093.133] FindNextFileW (in: hFindFile=0x381cc0, lpFindFileData=0x31e404 | out: lpFindFileData=0x31e404*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0x6320600, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x668c5a0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xff06fa11, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="D68G7BIJ", cAlternateFileName="")) returned 1 [0093.133] FindNextFileW (in: hFindFile=0x381cc0, lpFindFileData=0x31e404 | out: lpFindFileData=0x31e404*(dwFileAttributes=0x2026, ftCreationTime.dwLowDateTime=0x668c5a0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x668c5a0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xfe9e3d85, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x43, dwReserved0=0x0, dwReserved1=0x0, cFileName="desktop.ini", cAlternateFileName="")) returned 1 [0093.133] FindNextFileW (in: hFindFile=0x381cc0, lpFindFileData=0x31e404 | out: lpFindFileData=0x31e404*(dwFileAttributes=0x2026, ftCreationTime.dwLowDateTime=0x668c5a0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x668c5a0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xa9d0d0, ftLastWriteTime.dwHighDateTime=0x1cb8927, nFileSizeHigh=0x0, nFileSizeLow=0x8000, dwReserved0=0x0, dwReserved1=0x0, cFileName="index.dat", cAlternateFileName="")) returned 1 [0093.133] FindNextFileW (in: hFindFile=0x381cc0, lpFindFileData=0x31e404 | out: lpFindFileData=0x31e404*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0x6320600, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x668c5a0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xfed03a6b, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="KQMHSVKD", cAlternateFileName="")) returned 1 [0093.134] FindNextFileW (in: hFindFile=0x381cc0, lpFindFileData=0x31e404 | out: lpFindFileData=0x31e404*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0093.134] FindClose (in: hFindFile=0x381cc0 | out: hFindFile=0x381cc0) returned 1 [0093.134] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e68c) returned 1 [0093.134] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e698) returned 1 [0093.134] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e654) returned 1 [0093.134] GetFullPathNameW (in: lpFileName="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Feeds Cache\\1NBUR4HR", nBufferLength=0x105, lpBuffer=0x31e15c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Feeds Cache\\1NBUR4HR", lpFilePart=0x0) returned 0x3d [0093.134] GetFullPathNameW (in: lpFileName="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Feeds Cache\\1NBUR4HR\\", nBufferLength=0x105, lpBuffer=0x31e130, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Feeds Cache\\1NBUR4HR\\", lpFilePart=0x0) returned 0x3e [0093.134] FindFirstFileW (in: lpFileName="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Feeds Cache\\1NBUR4HR\\*", lpFindFileData=0x31e37c | out: lpFindFileData=0x31e37c*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0x6320600, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x668c5a0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xfedc214c, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x381cc0 [0093.135] FindNextFileW (in: hFindFile=0x381cc0, lpFindFileData=0x31e38c | out: lpFindFileData=0x31e38c*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0x6320600, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x668c5a0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xfedc214c, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0093.135] FindNextFileW (in: hFindFile=0x381cc0, lpFindFileData=0x31e38c | out: lpFindFileData=0x31e38c*(dwFileAttributes=0x2026, ftCreationTime.dwLowDateTime=0x668c5a0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x668c5a0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xfea09ee5, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x43, dwReserved0=0x0, dwReserved1=0x0, cFileName="desktop.ini", cAlternateFileName="")) returned 1 [0093.135] FindNextFileW (in: hFindFile=0x381cc0, lpFindFileData=0x31e38c | out: lpFindFileData=0x31e38c*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x668c5a0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x668c5a0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xfedc214c, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="fwlink[1]", cAlternateFileName="FWLINK~1")) returned 1 [0093.135] FindNextFileW (in: hFindFile=0x381cc0, lpFindFileData=0x31e38c | out: lpFindFileData=0x31e38c*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0093.136] FindClose (in: hFindFile=0x381cc0 | out: hFindFile=0x381cc0) returned 1 [0093.136] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e614) returned 1 [0093.136] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e620) returned 1 [0093.136] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e654) returned 1 [0093.136] GetFullPathNameW (in: lpFileName="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Feeds Cache\\1NBUR4HR", nBufferLength=0x105, lpBuffer=0x31e15c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Feeds Cache\\1NBUR4HR", lpFilePart=0x0) returned 0x3d [0093.136] GetFullPathNameW (in: lpFileName="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Feeds Cache\\1NBUR4HR\\", nBufferLength=0x105, lpBuffer=0x31e130, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Feeds Cache\\1NBUR4HR\\", lpFilePart=0x0) returned 0x3e [0093.136] FindFirstFileW (in: lpFileName="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Feeds Cache\\1NBUR4HR\\*", lpFindFileData=0x31e37c | out: lpFindFileData=0x31e37c*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0x6320600, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x668c5a0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xfedc214c, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x381cc0 [0093.136] FindNextFileW (in: hFindFile=0x381cc0, lpFindFileData=0x31e38c | out: lpFindFileData=0x31e38c*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0x6320600, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x668c5a0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xfedc214c, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0093.136] FindNextFileW (in: hFindFile=0x381cc0, lpFindFileData=0x31e38c | out: lpFindFileData=0x31e38c*(dwFileAttributes=0x2026, ftCreationTime.dwLowDateTime=0x668c5a0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x668c5a0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xfea09ee5, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x43, dwReserved0=0x0, dwReserved1=0x0, cFileName="desktop.ini", cAlternateFileName="")) returned 1 [0093.136] FindNextFileW (in: hFindFile=0x381cc0, lpFindFileData=0x31e38c | out: lpFindFileData=0x31e38c*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x668c5a0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x668c5a0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xfedc214c, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="fwlink[1]", cAlternateFileName="FWLINK~1")) returned 1 [0093.136] FindNextFileW (in: hFindFile=0x381cc0, lpFindFileData=0x31e38c | out: lpFindFileData=0x31e38c*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x668c5a0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x668c5a0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xfedc214c, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="fwlink[1]", cAlternateFileName="FWLINK~1")) returned 0 [0093.136] FindClose (in: hFindFile=0x381cc0 | out: hFindFile=0x381cc0) returned 1 [0093.136] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e614) returned 1 [0093.136] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e620) returned 1 [0093.136] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e654) returned 1 [0093.136] GetFullPathNameW (in: lpFileName="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Feeds Cache\\6ASVN7J7", nBufferLength=0x105, lpBuffer=0x31e15c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Feeds Cache\\6ASVN7J7", lpFilePart=0x0) returned 0x3d [0093.136] GetFullPathNameW (in: lpFileName="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Feeds Cache\\6ASVN7J7\\", nBufferLength=0x105, lpBuffer=0x31e130, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Feeds Cache\\6ASVN7J7\\", lpFilePart=0x0) returned 0x3e [0093.136] FindFirstFileW (in: lpFileName="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Feeds Cache\\6ASVN7J7\\*", lpFindFileData=0x31e37c | out: lpFindFileData=0x31e37c*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0x6320600, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x668c5a0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xfee8082e, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x381cc0 [0093.137] FindNextFileW (in: hFindFile=0x381cc0, lpFindFileData=0x31e38c | out: lpFindFileData=0x31e38c*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0x6320600, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x668c5a0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xfee8082e, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0093.137] FindNextFileW (in: hFindFile=0x381cc0, lpFindFileData=0x31e38c | out: lpFindFileData=0x31e38c*(dwFileAttributes=0x2026, ftCreationTime.dwLowDateTime=0x668c5a0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x668c5a0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xfea09ee5, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x43, dwReserved0=0x0, dwReserved1=0x0, cFileName="desktop.ini", cAlternateFileName="")) returned 1 [0093.137] FindNextFileW (in: hFindFile=0x381cc0, lpFindFileData=0x31e38c | out: lpFindFileData=0x31e38c*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x668c5a0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x668c5a0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xfee8082e, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="fwlink[1]", cAlternateFileName="FWLINK~1")) returned 1 [0093.137] FindNextFileW (in: hFindFile=0x381cc0, lpFindFileData=0x31e38c | out: lpFindFileData=0x31e38c*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0093.137] FindClose (in: hFindFile=0x381cc0 | out: hFindFile=0x381cc0) returned 1 [0093.137] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e614) returned 1 [0093.137] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e620) returned 1 [0093.137] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e654) returned 1 [0093.137] GetFullPathNameW (in: lpFileName="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Feeds Cache\\6ASVN7J7", nBufferLength=0x105, lpBuffer=0x31e15c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Feeds Cache\\6ASVN7J7", lpFilePart=0x0) returned 0x3d [0093.137] GetFullPathNameW (in: lpFileName="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Feeds Cache\\6ASVN7J7\\", nBufferLength=0x105, lpBuffer=0x31e130, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Feeds Cache\\6ASVN7J7\\", lpFilePart=0x0) returned 0x3e [0093.137] FindFirstFileW (in: lpFileName="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Feeds Cache\\6ASVN7J7\\*", lpFindFileData=0x31e37c | out: lpFindFileData=0x31e37c*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0x6320600, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x668c5a0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xfee8082e, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x381cc0 [0093.137] FindNextFileW (in: hFindFile=0x381cc0, lpFindFileData=0x31e38c | out: lpFindFileData=0x31e38c*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0x6320600, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x668c5a0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xfee8082e, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0093.137] FindNextFileW (in: hFindFile=0x381cc0, lpFindFileData=0x31e38c | out: lpFindFileData=0x31e38c*(dwFileAttributes=0x2026, ftCreationTime.dwLowDateTime=0x668c5a0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x668c5a0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xfea09ee5, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x43, dwReserved0=0x0, dwReserved1=0x0, cFileName="desktop.ini", cAlternateFileName="")) returned 1 [0093.138] FindNextFileW (in: hFindFile=0x381cc0, lpFindFileData=0x31e38c | out: lpFindFileData=0x31e38c*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x668c5a0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x668c5a0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xfee8082e, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="fwlink[1]", cAlternateFileName="FWLINK~1")) returned 1 [0093.138] FindNextFileW (in: hFindFile=0x381cc0, lpFindFileData=0x31e38c | out: lpFindFileData=0x31e38c*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x668c5a0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x668c5a0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xfee8082e, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="fwlink[1]", cAlternateFileName="FWLINK~1")) returned 0 [0093.138] FindClose (in: hFindFile=0x381cc0 | out: hFindFile=0x381cc0) returned 1 [0093.138] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e614) returned 1 [0093.138] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e620) returned 1 [0093.138] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e654) returned 1 [0093.138] GetFullPathNameW (in: lpFileName="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Feeds Cache\\D68G7BIJ", nBufferLength=0x105, lpBuffer=0x31e15c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Feeds Cache\\D68G7BIJ", lpFilePart=0x0) returned 0x3d [0093.138] GetFullPathNameW (in: lpFileName="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Feeds Cache\\D68G7BIJ\\", nBufferLength=0x105, lpBuffer=0x31e130, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Feeds Cache\\D68G7BIJ\\", lpFilePart=0x0) returned 0x3e [0093.138] FindFirstFileW (in: lpFileName="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Feeds Cache\\D68G7BIJ\\*", lpFindFileData=0x31e37c | out: lpFindFileData=0x31e37c*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0x6320600, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x668c5a0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xff06fa11, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x381cc0 [0093.138] FindNextFileW (in: hFindFile=0x381cc0, lpFindFileData=0x31e38c | out: lpFindFileData=0x31e38c*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0x6320600, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x668c5a0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xff06fa11, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0093.138] FindNextFileW (in: hFindFile=0x381cc0, lpFindFileData=0x31e38c | out: lpFindFileData=0x31e38c*(dwFileAttributes=0x2026, ftCreationTime.dwLowDateTime=0x668c5a0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x668c5a0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xfea09ee5, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x43, dwReserved0=0x0, dwReserved1=0x0, cFileName="desktop.ini", cAlternateFileName="")) returned 1 [0093.138] FindNextFileW (in: hFindFile=0x381cc0, lpFindFileData=0x31e38c | out: lpFindFileData=0x31e38c*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x668c5a0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x668c5a0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xff06fa11, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="fwlink[1]", cAlternateFileName="FWLINK~1")) returned 1 [0093.138] FindNextFileW (in: hFindFile=0x381cc0, lpFindFileData=0x31e38c | out: lpFindFileData=0x31e38c*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0093.138] FindClose (in: hFindFile=0x381cc0 | out: hFindFile=0x381cc0) returned 1 [0093.138] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e614) returned 1 [0093.138] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e620) returned 1 [0093.138] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e654) returned 1 [0093.138] GetFullPathNameW (in: lpFileName="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Feeds Cache\\D68G7BIJ", nBufferLength=0x105, lpBuffer=0x31e15c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Feeds Cache\\D68G7BIJ", lpFilePart=0x0) returned 0x3d [0093.138] GetFullPathNameW (in: lpFileName="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Feeds Cache\\D68G7BIJ\\", nBufferLength=0x105, lpBuffer=0x31e130, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Feeds Cache\\D68G7BIJ\\", lpFilePart=0x0) returned 0x3e [0093.138] FindFirstFileW (in: lpFileName="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Feeds Cache\\D68G7BIJ\\*", lpFindFileData=0x31e37c | out: lpFindFileData=0x31e37c*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0x6320600, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x668c5a0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xff06fa11, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x381cc0 [0093.139] FindNextFileW (in: hFindFile=0x381cc0, lpFindFileData=0x31e38c | out: lpFindFileData=0x31e38c*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0x6320600, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x668c5a0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xff06fa11, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0093.139] FindNextFileW (in: hFindFile=0x381cc0, lpFindFileData=0x31e38c | out: lpFindFileData=0x31e38c*(dwFileAttributes=0x2026, ftCreationTime.dwLowDateTime=0x668c5a0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x668c5a0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xfea09ee5, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x43, dwReserved0=0x0, dwReserved1=0x0, cFileName="desktop.ini", cAlternateFileName="")) returned 1 [0093.139] FindNextFileW (in: hFindFile=0x381cc0, lpFindFileData=0x31e38c | out: lpFindFileData=0x31e38c*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x668c5a0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x668c5a0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xff06fa11, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="fwlink[1]", cAlternateFileName="FWLINK~1")) returned 1 [0093.139] FindNextFileW (in: hFindFile=0x381cc0, lpFindFileData=0x31e38c | out: lpFindFileData=0x31e38c*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x668c5a0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x668c5a0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xff06fa11, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="fwlink[1]", cAlternateFileName="FWLINK~1")) returned 0 [0093.139] FindClose (in: hFindFile=0x381cc0 | out: hFindFile=0x381cc0) returned 1 [0093.139] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e614) returned 1 [0093.139] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e620) returned 1 [0093.139] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e654) returned 1 [0093.139] GetFullPathNameW (in: lpFileName="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Feeds Cache\\KQMHSVKD", nBufferLength=0x105, lpBuffer=0x31e15c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Feeds Cache\\KQMHSVKD", lpFilePart=0x0) returned 0x3d [0093.139] GetFullPathNameW (in: lpFileName="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Feeds Cache\\KQMHSVKD\\", nBufferLength=0x105, lpBuffer=0x31e130, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Feeds Cache\\KQMHSVKD\\", lpFilePart=0x0) returned 0x3e [0093.139] FindFirstFileW (in: lpFileName="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Feeds Cache\\KQMHSVKD\\*", lpFindFileData=0x31e37c | out: lpFindFileData=0x31e37c*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0x6320600, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x668c5a0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xfed03a6b, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x381cc0 [0093.139] FindNextFileW (in: hFindFile=0x381cc0, lpFindFileData=0x31e38c | out: lpFindFileData=0x31e38c*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0x6320600, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x668c5a0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xfed03a6b, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0093.139] FindNextFileW (in: hFindFile=0x381cc0, lpFindFileData=0x31e38c | out: lpFindFileData=0x31e38c*(dwFileAttributes=0x2026, ftCreationTime.dwLowDateTime=0x668c5a0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x668c5a0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xfe9e3d85, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x43, dwReserved0=0x0, dwReserved1=0x0, cFileName="desktop.ini", cAlternateFileName="")) returned 1 [0093.139] FindNextFileW (in: hFindFile=0x381cc0, lpFindFileData=0x31e38c | out: lpFindFileData=0x31e38c*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x6666440, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x6666440, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xfed03a6b, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="fwlink[1]", cAlternateFileName="FWLINK~1")) returned 1 [0093.139] FindNextFileW (in: hFindFile=0x381cc0, lpFindFileData=0x31e38c | out: lpFindFileData=0x31e38c*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0093.139] FindClose (in: hFindFile=0x381cc0 | out: hFindFile=0x381cc0) returned 1 [0093.139] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e614) returned 1 [0093.139] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e620) returned 1 [0093.139] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e654) returned 1 [0093.140] GetFullPathNameW (in: lpFileName="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Feeds Cache\\KQMHSVKD", nBufferLength=0x105, lpBuffer=0x31e15c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Feeds Cache\\KQMHSVKD", lpFilePart=0x0) returned 0x3d [0093.140] GetFullPathNameW (in: lpFileName="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Feeds Cache\\KQMHSVKD\\", nBufferLength=0x105, lpBuffer=0x31e130, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Feeds Cache\\KQMHSVKD\\", lpFilePart=0x0) returned 0x3e [0093.140] FindFirstFileW (in: lpFileName="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Feeds Cache\\KQMHSVKD\\*", lpFindFileData=0x31e37c | out: lpFindFileData=0x31e37c*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0x6320600, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x668c5a0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xfed03a6b, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x381cc0 [0093.140] FindNextFileW (in: hFindFile=0x381cc0, lpFindFileData=0x31e38c | out: lpFindFileData=0x31e38c*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0x6320600, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x668c5a0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xfed03a6b, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0093.140] FindNextFileW (in: hFindFile=0x381cc0, lpFindFileData=0x31e38c | out: lpFindFileData=0x31e38c*(dwFileAttributes=0x2026, ftCreationTime.dwLowDateTime=0x668c5a0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x668c5a0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xfe9e3d85, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x43, dwReserved0=0x0, dwReserved1=0x0, cFileName="desktop.ini", cAlternateFileName="")) returned 1 [0093.140] FindNextFileW (in: hFindFile=0x381cc0, lpFindFileData=0x31e38c | out: lpFindFileData=0x31e38c*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x6666440, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x6666440, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xfed03a6b, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="fwlink[1]", cAlternateFileName="FWLINK~1")) returned 1 [0093.140] FindNextFileW (in: hFindFile=0x381cc0, lpFindFileData=0x31e38c | out: lpFindFileData=0x31e38c*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x6666440, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x6666440, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xfed03a6b, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="fwlink[1]", cAlternateFileName="FWLINK~1")) returned 0 [0093.140] FindClose (in: hFindFile=0x381cc0 | out: hFindFile=0x381cc0) returned 1 [0093.140] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e614) returned 1 [0093.140] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e620) returned 1 [0093.140] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e6cc) returned 1 [0093.140] GetFullPathNameW (in: lpFileName="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Internet Explorer", nBufferLength=0x105, lpBuffer=0x31e1d4, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Internet Explorer", lpFilePart=0x0) returned 0x3a [0093.140] GetFullPathNameW (in: lpFileName="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Internet Explorer\\", nBufferLength=0x105, lpBuffer=0x31e1a8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Internet Explorer\\", lpFilePart=0x0) returned 0x3b [0093.140] FindFirstFileW (in: lpFileName="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Internet Explorer\\*", lpFindFileData=0x31e3f4 | out: lpFindFileData=0x31e3f4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x6320600, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x668c5a0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x96e13f, ftLastWriteTime.dwHighDateTime=0x1cb8927, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x381cc0 [0093.140] FindNextFileW (in: hFindFile=0x381cc0, lpFindFileData=0x31e404 | out: lpFindFileData=0x31e404*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x6320600, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x668c5a0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x96e13f, ftLastWriteTime.dwHighDateTime=0x1cb8927, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0093.140] FindNextFileW (in: hFindFile=0x381cc0, lpFindFileData=0x31e404 | out: lpFindFileData=0x31e404*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x6666440, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x6666440, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xff12e0f2, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x2fa9, dwReserved0=0x0, dwReserved1=0x0, cFileName="brndlog.bak", cAlternateFileName="")) returned 1 [0093.140] FindNextFileW (in: hFindFile=0x381cc0, lpFindFileData=0x31e404 | out: lpFindFileData=0x31e404*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x6666440, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x6666440, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xb371c2, ftLastWriteTime.dwHighDateTime=0x1cb8927, nFileSizeHigh=0x0, nFileSizeLow=0x2fa9, dwReserved0=0x0, dwReserved1=0x0, cFileName="brndlog.txt", cAlternateFileName="")) returned 1 [0093.140] FindNextFileW (in: hFindFile=0x381cc0, lpFindFileData=0x31e404 | out: lpFindFileData=0x31e404*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0093.140] FindClose (in: hFindFile=0x381cc0 | out: hFindFile=0x381cc0) returned 1 [0093.141] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e68c) returned 1 [0093.141] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e698) returned 1 [0093.141] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e6cc) returned 1 [0093.141] GetFullPathNameW (in: lpFileName="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Internet Explorer", nBufferLength=0x105, lpBuffer=0x31e1d4, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Internet Explorer", lpFilePart=0x0) returned 0x3a [0093.141] GetFullPathNameW (in: lpFileName="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Internet Explorer\\", nBufferLength=0x105, lpBuffer=0x31e1a8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Internet Explorer\\", lpFilePart=0x0) returned 0x3b [0093.141] FindFirstFileW (in: lpFileName="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Internet Explorer\\*", lpFindFileData=0x31e3f4 | out: lpFindFileData=0x31e3f4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x6320600, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x668c5a0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x96e13f, ftLastWriteTime.dwHighDateTime=0x1cb8927, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x381cc0 [0093.141] FindNextFileW (in: hFindFile=0x381cc0, lpFindFileData=0x31e404 | out: lpFindFileData=0x31e404*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x6320600, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x668c5a0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x96e13f, ftLastWriteTime.dwHighDateTime=0x1cb8927, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0093.141] FindNextFileW (in: hFindFile=0x381cc0, lpFindFileData=0x31e404 | out: lpFindFileData=0x31e404*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x6666440, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x6666440, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xff12e0f2, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x2fa9, dwReserved0=0x0, dwReserved1=0x0, cFileName="brndlog.bak", cAlternateFileName="")) returned 1 [0093.141] FindNextFileW (in: hFindFile=0x381cc0, lpFindFileData=0x31e404 | out: lpFindFileData=0x31e404*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x6666440, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x6666440, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xb371c2, ftLastWriteTime.dwHighDateTime=0x1cb8927, nFileSizeHigh=0x0, nFileSizeLow=0x2fa9, dwReserved0=0x0, dwReserved1=0x0, cFileName="brndlog.txt", cAlternateFileName="")) returned 1 [0093.141] FindNextFileW (in: hFindFile=0x381cc0, lpFindFileData=0x31e404 | out: lpFindFileData=0x31e404*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x6666440, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x6666440, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xb371c2, ftLastWriteTime.dwHighDateTime=0x1cb8927, nFileSizeHigh=0x0, nFileSizeLow=0x2fa9, dwReserved0=0x0, dwReserved1=0x0, cFileName="brndlog.txt", cAlternateFileName="")) returned 0 [0093.141] FindClose (in: hFindFile=0x381cc0 | out: hFindFile=0x381cc0) returned 1 [0093.141] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e68c) returned 1 [0093.141] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e698) returned 1 [0093.141] GetFullPathNameW (in: lpFileName="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Internet Explorer\\brndlog.txt", nBufferLength=0x105, lpBuffer=0x31e0a4, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Internet Explorer\\brndlog.txt", lpFilePart=0x0) returned 0x46 [0093.141] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e598) returned 1 [0093.141] CreateFileW (lpFileName="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Internet Explorer\\brndlog.txt" (normalized: "c:\\users\\default\\appdata\\local\\microsoft\\internet explorer\\brndlog.txt"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x178 [0093.142] GetFileType (hFile=0x178) returned 0x1 [0093.142] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e594) returned 1 [0093.142] GetFileType (hFile=0x178) returned 0x1 [0093.142] GetFileSize (in: hFile=0x178, lpFileSizeHigh=0x31e6a0 | out: lpFileSizeHigh=0x31e6a0*=0x0) returned 0x2fa9 [0093.142] ReadFile (in: hFile=0x178, lpBuffer=0x27316c0, nNumberOfBytesToRead=0x2fa9, lpNumberOfBytesRead=0x31e64c, lpOverlapped=0x0 | out: lpBuffer=0x27316c0*, lpNumberOfBytesRead=0x31e64c*=0x2fa9, lpOverlapped=0x0) returned 1 [0093.180] GetFullPathNameW (in: lpFileName="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Internet Explorer\\brndlog.txt", nBufferLength=0x105, lpBuffer=0x31e090, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Internet Explorer\\brndlog.txt", lpFilePart=0x0) returned 0x46 [0093.180] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e584) returned 1 [0093.180] CreateFileW (lpFileName="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Internet Explorer\\brndlog.txt" (normalized: "c:\\users\\default\\appdata\\local\\microsoft\\internet explorer\\brndlog.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x178 [0093.181] GetFileType (hFile=0x178) returned 0x1 [0093.181] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e580) returned 1 [0093.181] GetFileType (hFile=0x178) returned 0x1 [0093.181] WriteFile (in: hFile=0x178, lpBuffer=0x278d318*, nNumberOfBytesToWrite=0x2fb0, lpNumberOfBytesWritten=0x31e640, lpOverlapped=0x0 | out: lpBuffer=0x278d318*, lpNumberOfBytesWritten=0x31e640*=0x2fb0, lpOverlapped=0x0) returned 1 [0093.182] GetFullPathNameW (in: lpFileName="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Internet Explorer\\brndlog.txt", nBufferLength=0x105, lpBuffer=0x31e1c4, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Internet Explorer\\brndlog.txt", lpFilePart=0x0) returned 0x46 [0093.182] GetFullPathNameW (in: lpFileName="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Internet Explorer\\brndlog.txt", nBufferLength=0x105, lpBuffer=0x31e1c4, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Internet Explorer\\brndlog.txt", lpFilePart=0x0) returned 0x46 [0093.182] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e624) returned 1 [0093.182] GetFileAttributesExW (in: lpFileName="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Internet Explorer\\brndlog.txt" (normalized: "c:\\users\\default\\appdata\\local\\microsoft\\internet explorer\\brndlog.txt"), fInfoLevelId=0x0, lpFileInformation=0x31e6a0 | out: lpFileInformation=0x31e6a0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x6666440, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x6666440, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x1afc9880, ftLastWriteTime.dwHighDateTime=0x1d6eb7f, nFileSizeHigh=0x0, nFileSizeLow=0x2fb0)) returned 1 [0093.182] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e620) returned 1 [0093.183] MoveFileW (lpExistingFileName="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Internet Explorer\\brndlog.txt" (normalized: "c:\\users\\default\\appdata\\local\\microsoft\\internet explorer\\brndlog.txt"), lpNewFileName="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Internet Explorer\\brndlog.txt" (normalized: "c:\\users\\default\\appdata\\local\\microsoft\\internet explorer\\brndlog.txt")) returned 1 [0093.183] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e6cc) returned 1 [0093.183] GetFullPathNameW (in: lpFileName="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Media Player", nBufferLength=0x105, lpBuffer=0x31e1d4, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Media Player", lpFilePart=0x0) returned 0x35 [0093.183] GetFullPathNameW (in: lpFileName="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Media Player\\", nBufferLength=0x105, lpBuffer=0x31e1a8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Media Player\\", lpFilePart=0x0) returned 0x36 [0093.183] FindFirstFileW (in: lpFileName="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Media Player\\*", lpFindFileData=0x31e3f4 | out: lpFindFileData=0x31e3f4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x6320600, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x66b2700, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xd856f385, ftLastWriteTime.dwHighDateTime=0x1cb892d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x381f40 [0093.189] FindNextFileW (in: hFindFile=0x381f40, lpFindFileData=0x31e404 | out: lpFindFileData=0x31e404*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x6320600, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x66b2700, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xd856f385, ftLastWriteTime.dwHighDateTime=0x1cb892d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0093.189] FindNextFileW (in: hFindFile=0x381f40, lpFindFileData=0x31e404 | out: lpFindFileData=0x31e404*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x6666440, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x6666440, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xd8679d27, ftLastWriteTime.dwHighDateTime=0x1cb892d, nFileSizeHigh=0x0, nFileSizeLow=0x105000, dwReserved0=0x0, dwReserved1=0x0, cFileName="CurrentDatabase_372.wmdb", cAlternateFileName="CURREN~1.WMD")) returned 1 [0093.189] FindNextFileW (in: hFindFile=0x381f40, lpFindFileData=0x31e404 | out: lpFindFileData=0x31e404*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x6666440, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x6666440, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xd856f385, ftLastWriteTime.dwHighDateTime=0x1cb892d, nFileSizeHigh=0x0, nFileSizeLow=0x1106c, dwReserved0=0x0, dwReserved1=0x0, cFileName="LocalMLS_3.wmdb", cAlternateFileName="LOCALM~1.WMD")) returned 1 [0093.189] FindNextFileW (in: hFindFile=0x381f40, lpFindFileData=0x31e404 | out: lpFindFileData=0x31e404*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x6320600, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x6320600, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xf73e9a4c, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Sync Playlists", cAlternateFileName="SYNCPL~1")) returned 1 [0093.189] FindNextFileW (in: hFindFile=0x381f40, lpFindFileData=0x31e404 | out: lpFindFileData=0x31e404*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x6320600, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x6320600, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xf73e9a4c, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Sync Playlists", cAlternateFileName="SYNCPL~1")) returned 0 [0093.189] FindClose (in: hFindFile=0x381f40 | out: hFindFile=0x381f40) returned 1 [0093.190] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e68c) returned 1 [0093.190] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e698) returned 1 [0093.190] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e6cc) returned 1 [0093.190] GetFullPathNameW (in: lpFileName="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Media Player", nBufferLength=0x105, lpBuffer=0x31e1d4, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Media Player", lpFilePart=0x0) returned 0x35 [0093.190] GetFullPathNameW (in: lpFileName="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Media Player\\", nBufferLength=0x105, lpBuffer=0x31e1a8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Media Player\\", lpFilePart=0x0) returned 0x36 [0093.190] FindFirstFileW (in: lpFileName="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Media Player\\*", lpFindFileData=0x31e3f4 | out: lpFindFileData=0x31e3f4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x6320600, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x66b2700, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xd856f385, ftLastWriteTime.dwHighDateTime=0x1cb892d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x381f40 [0093.191] FindNextFileW (in: hFindFile=0x381f40, lpFindFileData=0x31e404 | out: lpFindFileData=0x31e404*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x6320600, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x66b2700, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xd856f385, ftLastWriteTime.dwHighDateTime=0x1cb892d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0093.191] FindNextFileW (in: hFindFile=0x381f40, lpFindFileData=0x31e404 | out: lpFindFileData=0x31e404*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x6666440, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x6666440, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xd8679d27, ftLastWriteTime.dwHighDateTime=0x1cb892d, nFileSizeHigh=0x0, nFileSizeLow=0x105000, dwReserved0=0x0, dwReserved1=0x0, cFileName="CurrentDatabase_372.wmdb", cAlternateFileName="CURREN~1.WMD")) returned 1 [0093.191] FindNextFileW (in: hFindFile=0x381f40, lpFindFileData=0x31e404 | out: lpFindFileData=0x31e404*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x6666440, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x6666440, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xd856f385, ftLastWriteTime.dwHighDateTime=0x1cb892d, nFileSizeHigh=0x0, nFileSizeLow=0x1106c, dwReserved0=0x0, dwReserved1=0x0, cFileName="LocalMLS_3.wmdb", cAlternateFileName="LOCALM~1.WMD")) returned 1 [0093.191] FindNextFileW (in: hFindFile=0x381f40, lpFindFileData=0x31e404 | out: lpFindFileData=0x31e404*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x6320600, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x6320600, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xf73e9a4c, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Sync Playlists", cAlternateFileName="SYNCPL~1")) returned 1 [0093.191] FindNextFileW (in: hFindFile=0x381f40, lpFindFileData=0x31e404 | out: lpFindFileData=0x31e404*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0093.191] FindClose (in: hFindFile=0x381f40 | out: hFindFile=0x381f40) returned 1 [0093.192] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e68c) returned 1 [0093.192] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e698) returned 1 [0093.192] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e654) returned 1 [0093.192] GetFullPathNameW (in: lpFileName="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Media Player\\Sync Playlists", nBufferLength=0x105, lpBuffer=0x31e15c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Media Player\\Sync Playlists", lpFilePart=0x0) returned 0x44 [0093.192] GetFullPathNameW (in: lpFileName="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Media Player\\Sync Playlists\\", nBufferLength=0x105, lpBuffer=0x31e130, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Media Player\\Sync Playlists\\", lpFilePart=0x0) returned 0x45 [0093.192] FindFirstFileW (in: lpFileName="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Media Player\\Sync Playlists\\*", lpFindFileData=0x31e37c | out: lpFindFileData=0x31e37c*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x6320600, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x6320600, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xf73e9a4c, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x381f40 [0093.193] FindNextFileW (in: hFindFile=0x381f40, lpFindFileData=0x31e38c | out: lpFindFileData=0x31e38c*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x6320600, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x6320600, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xf73e9a4c, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0093.193] FindNextFileW (in: hFindFile=0x381f40, lpFindFileData=0x31e38c | out: lpFindFileData=0x31e38c*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x6320600, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x6320600, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xf73e9a4c, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="en-US", cAlternateFileName="")) returned 1 [0093.193] FindNextFileW (in: hFindFile=0x381f40, lpFindFileData=0x31e38c | out: lpFindFileData=0x31e38c*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x6320600, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x6320600, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xf73e9a4c, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="en-US", cAlternateFileName="")) returned 0 [0093.193] FindClose (in: hFindFile=0x381f40 | out: hFindFile=0x381f40) returned 1 [0093.193] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e614) returned 1 [0093.193] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e620) returned 1 [0093.193] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e654) returned 1 [0093.193] GetFullPathNameW (in: lpFileName="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Media Player\\Sync Playlists", nBufferLength=0x105, lpBuffer=0x31e15c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Media Player\\Sync Playlists", lpFilePart=0x0) returned 0x44 [0093.193] GetFullPathNameW (in: lpFileName="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Media Player\\Sync Playlists\\", nBufferLength=0x105, lpBuffer=0x31e130, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Media Player\\Sync Playlists\\", lpFilePart=0x0) returned 0x45 [0093.193] FindFirstFileW (in: lpFileName="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Media Player\\Sync Playlists\\*", lpFindFileData=0x31e37c | out: lpFindFileData=0x31e37c*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x6320600, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x6320600, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xf73e9a4c, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x381f40 [0093.193] FindNextFileW (in: hFindFile=0x381f40, lpFindFileData=0x31e38c | out: lpFindFileData=0x31e38c*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x6320600, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x6320600, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xf73e9a4c, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0093.194] FindNextFileW (in: hFindFile=0x381f40, lpFindFileData=0x31e38c | out: lpFindFileData=0x31e38c*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x6320600, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x6320600, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xf73e9a4c, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="en-US", cAlternateFileName="")) returned 1 [0093.194] FindNextFileW (in: hFindFile=0x381f40, lpFindFileData=0x31e38c | out: lpFindFileData=0x31e38c*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0093.194] FindClose (in: hFindFile=0x381f40 | out: hFindFile=0x381f40) returned 1 [0093.194] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e614) returned 1 [0093.194] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e620) returned 1 [0093.194] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e5dc) returned 1 [0093.194] GetFullPathNameW (in: lpFileName="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Media Player\\Sync Playlists\\en-US", nBufferLength=0x105, lpBuffer=0x31e0e4, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Media Player\\Sync Playlists\\en-US", lpFilePart=0x0) returned 0x4a [0093.194] GetFullPathNameW (in: lpFileName="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Media Player\\Sync Playlists\\en-US\\", nBufferLength=0x105, lpBuffer=0x31e0b8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Media Player\\Sync Playlists\\en-US\\", lpFilePart=0x0) returned 0x4b [0093.194] FindFirstFileW (in: lpFileName="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Media Player\\Sync Playlists\\en-US\\*", lpFindFileData=0x31e304 | out: lpFindFileData=0x31e304*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x6320600, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x6320600, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xf73e9a4c, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x381f40 [0093.194] FindNextFileW (in: hFindFile=0x381f40, lpFindFileData=0x31e314 | out: lpFindFileData=0x31e314*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x6320600, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x6320600, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xf73e9a4c, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0093.194] FindNextFileW (in: hFindFile=0x381f40, lpFindFileData=0x31e314 | out: lpFindFileData=0x31e314*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x6320600, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x6666440, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xf740fbac, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="00010C6E", cAlternateFileName="")) returned 1 [0093.194] FindNextFileW (in: hFindFile=0x381f40, lpFindFileData=0x31e314 | out: lpFindFileData=0x31e314*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x6320600, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x6666440, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xf740fbac, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="00010C6E", cAlternateFileName="")) returned 0 [0093.194] FindClose (in: hFindFile=0x381f40 | out: hFindFile=0x381f40) returned 1 [0093.195] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e59c) returned 1 [0093.195] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e5a8) returned 1 [0093.195] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e5dc) returned 1 [0093.195] GetFullPathNameW (in: lpFileName="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Media Player\\Sync Playlists\\en-US", nBufferLength=0x105, lpBuffer=0x31e0e4, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Media Player\\Sync Playlists\\en-US", lpFilePart=0x0) returned 0x4a [0093.195] GetFullPathNameW (in: lpFileName="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Media Player\\Sync Playlists\\en-US\\", nBufferLength=0x105, lpBuffer=0x31e0b8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Media Player\\Sync Playlists\\en-US\\", lpFilePart=0x0) returned 0x4b [0093.195] FindFirstFileW (in: lpFileName="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Media Player\\Sync Playlists\\en-US\\*", lpFindFileData=0x31e304 | out: lpFindFileData=0x31e304*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x6320600, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x6320600, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xf73e9a4c, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x381f40 [0093.195] FindNextFileW (in: hFindFile=0x381f40, lpFindFileData=0x31e314 | out: lpFindFileData=0x31e314*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x6320600, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x6320600, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xf73e9a4c, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0093.196] FindNextFileW (in: hFindFile=0x381f40, lpFindFileData=0x31e314 | out: lpFindFileData=0x31e314*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x6320600, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x6666440, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xf740fbac, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="00010C6E", cAlternateFileName="")) returned 1 [0093.196] FindNextFileW (in: hFindFile=0x381f40, lpFindFileData=0x31e314 | out: lpFindFileData=0x31e314*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0093.196] FindClose (in: hFindFile=0x381f40 | out: hFindFile=0x381f40) returned 1 [0093.196] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e59c) returned 1 [0093.196] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e5a8) returned 1 [0093.196] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e564) returned 1 [0093.196] GetFullPathNameW (in: lpFileName="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Media Player\\Sync Playlists\\en-US\\00010C6E", nBufferLength=0x105, lpBuffer=0x31e06c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Media Player\\Sync Playlists\\en-US\\00010C6E", lpFilePart=0x0) returned 0x53 [0093.196] GetFullPathNameW (in: lpFileName="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Media Player\\Sync Playlists\\en-US\\00010C6E\\", nBufferLength=0x105, lpBuffer=0x31e040, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Media Player\\Sync Playlists\\en-US\\00010C6E\\", lpFilePart=0x0) returned 0x54 [0093.196] FindFirstFileW (in: lpFileName="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Media Player\\Sync Playlists\\en-US\\00010C6E\\*", lpFindFileData=0x31e28c | out: lpFindFileData=0x31e28c*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x6320600, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x6666440, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xf740fbac, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x381f40 [0093.201] FindNextFileW (in: hFindFile=0x381f40, lpFindFileData=0x31e29c | out: lpFindFileData=0x31e29c*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x6320600, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x6666440, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xf740fbac, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0093.202] FindNextFileW (in: hFindFile=0x381f40, lpFindFileData=0x31e29c | out: lpFindFileData=0x31e29c*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x6666440, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x6666440, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xf73e9a4c, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x414, dwReserved0=0x0, dwReserved1=0x0, cFileName="01_Music_auto_rated_at_5_stars.wpl", cAlternateFileName="01_MUS~1.WPL")) returned 1 [0093.202] FindNextFileW (in: hFindFile=0x381f40, lpFindFileData=0x31e29c | out: lpFindFileData=0x31e29c*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x6666440, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x6666440, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xf73e9a4c, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x4ff, dwReserved0=0x0, dwReserved1=0x0, cFileName="02_Music_added_in_the_last_month.wpl", cAlternateFileName="02_MUS~1.WPL")) returned 1 [0093.202] FindNextFileW (in: hFindFile=0x381f40, lpFindFileData=0x31e29c | out: lpFindFileData=0x31e29c*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x6666440, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x6666440, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xf73e9a4c, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x4f3, dwReserved0=0x0, dwReserved1=0x0, cFileName="03_Music_rated_at_4_or_5_stars.wpl", cAlternateFileName="03_MUS~1.WPL")) returned 1 [0093.202] FindNextFileW (in: hFindFile=0x381f40, lpFindFileData=0x31e29c | out: lpFindFileData=0x31e29c*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x6666440, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x6666440, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xf73e9a4c, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x504, dwReserved0=0x0, dwReserved1=0x0, cFileName="04_Music_played_in_the_last_month.wpl", cAlternateFileName="04_MUS~1.WPL")) returned 1 [0093.202] FindNextFileW (in: hFindFile=0x381f40, lpFindFileData=0x31e29c | out: lpFindFileData=0x31e29c*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x6666440, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x6666440, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xf73e9a4c, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x31d, dwReserved0=0x0, dwReserved1=0x0, cFileName="05_Pictures_taken_in_the_last_month.wpl", cAlternateFileName="05_PIC~1.WPL")) returned 1 [0093.202] FindNextFileW (in: hFindFile=0x381f40, lpFindFileData=0x31e29c | out: lpFindFileData=0x31e29c*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x6666440, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x6666440, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xf73e9a4c, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x311, dwReserved0=0x0, dwReserved1=0x0, cFileName="06_Pictures_rated_4_or_5_stars.wpl", cAlternateFileName="06_PIC~1.WPL")) returned 1 [0093.202] FindNextFileW (in: hFindFile=0x381f40, lpFindFileData=0x31e29c | out: lpFindFileData=0x31e29c*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x66402e0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x66402e0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xf73e9a4c, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x410, dwReserved0=0x0, dwReserved1=0x0, cFileName="07_TV_recorded_in_the_last_week.wpl", cAlternateFileName="07_TV_~1.WPL")) returned 1 [0093.202] FindNextFileW (in: hFindFile=0x381f40, lpFindFileData=0x31e29c | out: lpFindFileData=0x31e29c*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x6666440, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x6666440, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xf740fbac, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x3fc, dwReserved0=0x0, dwReserved1=0x0, cFileName="08_Video_rated_at_4_or_5_stars.wpl", cAlternateFileName="08_VID~1.WPL")) returned 1 [0093.202] FindNextFileW (in: hFindFile=0x381f40, lpFindFileData=0x31e29c | out: lpFindFileData=0x31e29c*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x66402e0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x66402e0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xf740fbac, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x401, dwReserved0=0x0, dwReserved1=0x0, cFileName="09_Music_played_the_most.wpl", cAlternateFileName="09_MUS~1.WPL")) returned 1 [0093.202] FindNextFileW (in: hFindFile=0x381f40, lpFindFileData=0x31e29c | out: lpFindFileData=0x31e29c*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x66402e0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x66402e0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xf740fbac, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x427, dwReserved0=0x0, dwReserved1=0x0, cFileName="10_All_Music.wpl", cAlternateFileName="10_ALL~1.WPL")) returned 1 [0093.202] FindNextFileW (in: hFindFile=0x381f40, lpFindFileData=0x31e29c | out: lpFindFileData=0x31e29c*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x66402e0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x66402e0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xf740fbac, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x249, dwReserved0=0x0, dwReserved1=0x0, cFileName="11_All_Pictures.wpl", cAlternateFileName="11_ALL~1.WPL")) returned 1 [0093.202] FindNextFileW (in: hFindFile=0x381f40, lpFindFileData=0x31e29c | out: lpFindFileData=0x31e29c*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x66402e0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x66402e0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xf740fbac, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x437, dwReserved0=0x0, dwReserved1=0x0, cFileName="12_All_Video.wpl", cAlternateFileName="12_ALL~1.WPL")) returned 1 [0093.202] FindNextFileW (in: hFindFile=0x381f40, lpFindFileData=0x31e29c | out: lpFindFileData=0x31e29c*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0093.202] FindClose (in: hFindFile=0x381f40 | out: hFindFile=0x381f40) returned 1 [0093.203] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e524) returned 1 [0093.203] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e530) returned 1 [0093.203] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e564) returned 1 [0093.203] GetFullPathNameW (in: lpFileName="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Media Player\\Sync Playlists\\en-US\\00010C6E", nBufferLength=0x105, lpBuffer=0x31e06c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Media Player\\Sync Playlists\\en-US\\00010C6E", lpFilePart=0x0) returned 0x53 [0093.203] GetFullPathNameW (in: lpFileName="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Media Player\\Sync Playlists\\en-US\\00010C6E\\", nBufferLength=0x105, lpBuffer=0x31e040, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Media Player\\Sync Playlists\\en-US\\00010C6E\\", lpFilePart=0x0) returned 0x54 [0093.203] FindFirstFileW (in: lpFileName="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Media Player\\Sync Playlists\\en-US\\00010C6E\\*", lpFindFileData=0x31e28c | out: lpFindFileData=0x31e28c*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x6320600, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x6666440, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xf740fbac, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x381f40 [0093.204] FindNextFileW (in: hFindFile=0x381f40, lpFindFileData=0x31e29c | out: lpFindFileData=0x31e29c*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x6320600, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x6666440, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xf740fbac, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0093.204] FindNextFileW (in: hFindFile=0x381f40, lpFindFileData=0x31e29c | out: lpFindFileData=0x31e29c*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x6666440, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x6666440, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xf73e9a4c, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x414, dwReserved0=0x0, dwReserved1=0x0, cFileName="01_Music_auto_rated_at_5_stars.wpl", cAlternateFileName="01_MUS~1.WPL")) returned 1 [0093.204] FindNextFileW (in: hFindFile=0x381f40, lpFindFileData=0x31e29c | out: lpFindFileData=0x31e29c*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x6666440, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x6666440, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xf73e9a4c, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x4ff, dwReserved0=0x0, dwReserved1=0x0, cFileName="02_Music_added_in_the_last_month.wpl", cAlternateFileName="02_MUS~1.WPL")) returned 1 [0093.204] FindNextFileW (in: hFindFile=0x381f40, lpFindFileData=0x31e29c | out: lpFindFileData=0x31e29c*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x6666440, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x6666440, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xf73e9a4c, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x4f3, dwReserved0=0x0, dwReserved1=0x0, cFileName="03_Music_rated_at_4_or_5_stars.wpl", cAlternateFileName="03_MUS~1.WPL")) returned 1 [0093.204] FindNextFileW (in: hFindFile=0x381f40, lpFindFileData=0x31e29c | out: lpFindFileData=0x31e29c*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x6666440, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x6666440, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xf73e9a4c, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x504, dwReserved0=0x0, dwReserved1=0x0, cFileName="04_Music_played_in_the_last_month.wpl", cAlternateFileName="04_MUS~1.WPL")) returned 1 [0093.204] FindNextFileW (in: hFindFile=0x381f40, lpFindFileData=0x31e29c | out: lpFindFileData=0x31e29c*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x6666440, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x6666440, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xf73e9a4c, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x31d, dwReserved0=0x0, dwReserved1=0x0, cFileName="05_Pictures_taken_in_the_last_month.wpl", cAlternateFileName="05_PIC~1.WPL")) returned 1 [0093.204] FindNextFileW (in: hFindFile=0x381f40, lpFindFileData=0x31e29c | out: lpFindFileData=0x31e29c*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x6666440, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x6666440, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xf73e9a4c, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x311, dwReserved0=0x0, dwReserved1=0x0, cFileName="06_Pictures_rated_4_or_5_stars.wpl", cAlternateFileName="06_PIC~1.WPL")) returned 1 [0093.204] FindNextFileW (in: hFindFile=0x381f40, lpFindFileData=0x31e29c | out: lpFindFileData=0x31e29c*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x66402e0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x66402e0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xf73e9a4c, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x410, dwReserved0=0x0, dwReserved1=0x0, cFileName="07_TV_recorded_in_the_last_week.wpl", cAlternateFileName="07_TV_~1.WPL")) returned 1 [0093.204] FindNextFileW (in: hFindFile=0x381f40, lpFindFileData=0x31e29c | out: lpFindFileData=0x31e29c*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x6666440, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x6666440, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xf740fbac, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x3fc, dwReserved0=0x0, dwReserved1=0x0, cFileName="08_Video_rated_at_4_or_5_stars.wpl", cAlternateFileName="08_VID~1.WPL")) returned 1 [0093.204] FindClose (in: hFindFile=0x381f40 | out: hFindFile=0x381f40) returned 1 [0093.205] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e524) returned 1 [0093.205] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e530) returned 1 [0093.205] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e6cc) returned 1 [0093.205] GetFullPathNameW (in: lpFileName="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Windows", nBufferLength=0x105, lpBuffer=0x31e1d4, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Windows", lpFilePart=0x0) returned 0x30 [0093.205] GetFullPathNameW (in: lpFileName="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Windows\\", nBufferLength=0x105, lpBuffer=0x31e1a8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Windows\\", lpFilePart=0x0) returned 0x31 [0093.205] FindFirstFileW (in: lpFileName="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Windows\\*", lpFindFileData=0x31e3f4 | out: lpFindFileData=0x31e3f4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xfda01e06, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x66d8860, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x4d1d5e4e, ftLastWriteTime.dwHighDateTime=0x1cb8927, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x381f40 [0093.207] FindClose (in: hFindFile=0x381f40 | out: hFindFile=0x381f40) returned 1 [0093.207] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e68c) returned 1 [0093.207] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e698) returned 1 [0093.207] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e6cc) returned 1 [0093.207] GetFullPathNameW (in: lpFileName="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Windows", nBufferLength=0x105, lpBuffer=0x31e1d4, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Windows", lpFilePart=0x0) returned 0x30 [0093.207] GetFullPathNameW (in: lpFileName="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Windows\\", nBufferLength=0x105, lpBuffer=0x31e1a8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Windows\\", lpFilePart=0x0) returned 0x31 [0093.208] FindFirstFileW (in: lpFileName="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Windows\\*", lpFindFileData=0x31e3f4 | out: lpFindFileData=0x31e3f4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xfda01e06, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x66d8860, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x4d1d5e4e, ftLastWriteTime.dwHighDateTime=0x1cb8927, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x381f40 [0093.208] FindClose (in: hFindFile=0x381f40 | out: hFindFile=0x381f40) returned 1 [0093.209] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e68c) returned 1 [0093.209] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e698) returned 1 [0093.209] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e654) returned 1 [0093.209] GetFullPathNameW (in: lpFileName="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Windows\\Burn", nBufferLength=0x105, lpBuffer=0x31e15c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Windows\\Burn", lpFilePart=0x0) returned 0x35 [0093.209] GetFullPathNameW (in: lpFileName="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Windows\\Burn\\", nBufferLength=0x105, lpBuffer=0x31e130, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Windows\\Burn\\", lpFilePart=0x0) returned 0x36 [0093.209] FindFirstFileW (in: lpFileName="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Windows\\Burn\\*", lpFindFileData=0x31e37c | out: lpFindFileData=0x31e37c*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x6320600, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x6320600, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x165f8f7, ftLastWriteTime.dwHighDateTime=0x1cb8927, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x381f40 [0093.210] FindClose (in: hFindFile=0x381f40 | out: hFindFile=0x381f40) returned 1 [0093.210] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e614) returned 1 [0093.210] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e620) returned 1 [0093.211] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e654) returned 1 [0093.211] GetFullPathNameW (in: lpFileName="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Windows\\Burn", nBufferLength=0x105, lpBuffer=0x31e15c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Windows\\Burn", lpFilePart=0x0) returned 0x35 [0093.211] GetFullPathNameW (in: lpFileName="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Windows\\Burn\\", nBufferLength=0x105, lpBuffer=0x31e130, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Windows\\Burn\\", lpFilePart=0x0) returned 0x36 [0093.211] FindFirstFileW (in: lpFileName="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Windows\\Burn\\*", lpFindFileData=0x31e37c | out: lpFindFileData=0x31e37c*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x6320600, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x6320600, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x165f8f7, ftLastWriteTime.dwHighDateTime=0x1cb8927, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x381f40 [0093.211] FindClose (in: hFindFile=0x381f40 | out: hFindFile=0x381f40) returned 1 [0093.211] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e614) returned 1 [0093.211] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e620) returned 1 [0093.211] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e5dc) returned 1 [0093.211] GetFullPathNameW (in: lpFileName="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Windows\\Burn\\Burn", nBufferLength=0x105, lpBuffer=0x31e0e4, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Windows\\Burn\\Burn", lpFilePart=0x0) returned 0x3a [0093.211] GetFullPathNameW (in: lpFileName="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Windows\\Burn\\Burn\\", nBufferLength=0x105, lpBuffer=0x31e0b8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Windows\\Burn\\Burn\\", lpFilePart=0x0) returned 0x3b [0093.211] FindFirstFileW (in: lpFileName="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Windows\\Burn\\Burn\\*", lpFindFileData=0x31e304 | out: lpFindFileData=0x31e304*(dwFileAttributes=0x13, ftCreationTime.dwLowDateTime=0x6320600, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x66402e0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x165f8f7, ftLastWriteTime.dwHighDateTime=0x1cb8927, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x381f40 [0093.211] FindClose (in: hFindFile=0x381f40 | out: hFindFile=0x381f40) returned 1 [0093.211] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e59c) returned 1 [0093.211] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e5a8) returned 1 [0093.211] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e5dc) returned 1 [0093.211] GetFullPathNameW (in: lpFileName="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Windows\\Burn\\Burn", nBufferLength=0x105, lpBuffer=0x31e0e4, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Windows\\Burn\\Burn", lpFilePart=0x0) returned 0x3a [0093.211] GetFullPathNameW (in: lpFileName="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Windows\\Burn\\Burn\\", nBufferLength=0x105, lpBuffer=0x31e0b8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Windows\\Burn\\Burn\\", lpFilePart=0x0) returned 0x3b [0093.211] FindFirstFileW (in: lpFileName="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Windows\\Burn\\Burn\\*", lpFindFileData=0x31e304 | out: lpFindFileData=0x31e304*(dwFileAttributes=0x13, ftCreationTime.dwLowDateTime=0x6320600, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x66402e0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x165f8f7, ftLastWriteTime.dwHighDateTime=0x1cb8927, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x381f40 [0093.212] FindClose (in: hFindFile=0x381f40 | out: hFindFile=0x381f40) returned 1 [0093.212] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e59c) returned 1 [0093.212] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e5a8) returned 1 [0093.212] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e654) returned 1 [0093.212] GetFullPathNameW (in: lpFileName="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Windows\\Caches", nBufferLength=0x105, lpBuffer=0x31e15c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Windows\\Caches", lpFilePart=0x0) returned 0x37 [0093.212] GetFullPathNameW (in: lpFileName="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Windows\\Caches\\", nBufferLength=0x105, lpBuffer=0x31e130, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Windows\\Caches\\", lpFilePart=0x0) returned 0x38 [0093.212] FindFirstFileW (in: lpFileName="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Windows\\Caches\\*", lpFindFileData=0x31e37c | out: lpFindFileData=0x31e37c*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x6320600, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x6320600, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xeb4bd20c, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x381f40 [0093.212] FindClose (in: hFindFile=0x381f40 | out: hFindFile=0x381f40) returned 1 [0093.212] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e614) returned 1 [0093.212] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e620) returned 1 [0093.212] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e654) returned 1 [0093.212] GetFullPathNameW (in: lpFileName="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Windows\\Caches", nBufferLength=0x105, lpBuffer=0x31e15c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Windows\\Caches", lpFilePart=0x0) returned 0x37 [0093.212] GetFullPathNameW (in: lpFileName="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Windows\\Caches\\", nBufferLength=0x105, lpBuffer=0x31e130, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Windows\\Caches\\", lpFilePart=0x0) returned 0x38 [0093.212] FindFirstFileW (in: lpFileName="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Windows\\Caches\\*", lpFindFileData=0x31e37c | out: lpFindFileData=0x31e37c*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x6320600, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x6320600, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xeb4bd20c, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x381f40 [0093.212] FindClose (in: hFindFile=0x381f40 | out: hFindFile=0x381f40) returned 1 [0093.212] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e614) returned 1 [0093.212] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e620) returned 1 [0093.212] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e654) returned 1 [0093.213] GetFullPathNameW (in: lpFileName="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Windows\\Explorer", nBufferLength=0x105, lpBuffer=0x31e15c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Windows\\Explorer", lpFilePart=0x0) returned 0x39 [0093.213] GetFullPathNameW (in: lpFileName="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Windows\\Explorer\\", nBufferLength=0x105, lpBuffer=0x31e130, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Windows\\Explorer\\", lpFilePart=0x0) returned 0x3a [0093.213] FindFirstFileW (in: lpFileName="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Windows\\Explorer\\*", lpFindFileData=0x31e37c | out: lpFindFileData=0x31e37c*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x6320600, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x66402e0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x182897a, ftLastWriteTime.dwHighDateTime=0x1cb8927, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x381f40 [0093.214] FindClose (in: hFindFile=0x381f40 | out: hFindFile=0x381f40) returned 1 [0093.215] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e614) returned 1 [0093.215] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e620) returned 1 [0093.215] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e654) returned 1 [0093.215] GetFullPathNameW (in: lpFileName="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Windows\\Explorer", nBufferLength=0x105, lpBuffer=0x31e15c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Windows\\Explorer", lpFilePart=0x0) returned 0x39 [0093.215] GetFullPathNameW (in: lpFileName="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Windows\\Explorer\\", nBufferLength=0x105, lpBuffer=0x31e130, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Windows\\Explorer\\", lpFilePart=0x0) returned 0x3a [0093.215] FindFirstFileW (in: lpFileName="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Windows\\Explorer\\*", lpFindFileData=0x31e37c | out: lpFindFileData=0x31e37c*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x6320600, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x66402e0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x182897a, ftLastWriteTime.dwHighDateTime=0x1cb8927, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x381f40 [0093.216] FindClose (in: hFindFile=0x381f40 | out: hFindFile=0x381f40) returned 1 [0093.216] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e614) returned 1 [0093.216] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e620) returned 1 [0093.217] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e654) returned 1 [0093.217] GetFullPathNameW (in: lpFileName="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Windows\\GameExplorer", nBufferLength=0x105, lpBuffer=0x31e15c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Windows\\GameExplorer", lpFilePart=0x0) returned 0x3d [0093.217] GetFullPathNameW (in: lpFileName="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Windows\\GameExplorer\\", nBufferLength=0x105, lpBuffer=0x31e130, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Windows\\GameExplorer\\", lpFilePart=0x0) returned 0x3e [0093.217] FindFirstFileW (in: lpFileName="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Windows\\GameExplorer\\*", lpFindFileData=0x31e37c | out: lpFindFileData=0x31e37c*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xfda01e06, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfda01e06, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xaef3b9d6, ftLastWriteTime.dwHighDateTime=0x1ca042b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x381f40 [0093.217] FindClose (in: hFindFile=0x381f40 | out: hFindFile=0x381f40) returned 1 [0093.217] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e614) returned 1 [0093.217] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e620) returned 1 [0093.217] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e654) returned 1 [0093.217] GetFullPathNameW (in: lpFileName="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Windows\\GameExplorer", nBufferLength=0x105, lpBuffer=0x31e15c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Windows\\GameExplorer", lpFilePart=0x0) returned 0x3d [0093.217] GetFullPathNameW (in: lpFileName="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Windows\\GameExplorer\\", nBufferLength=0x105, lpBuffer=0x31e130, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Windows\\GameExplorer\\", lpFilePart=0x0) returned 0x3e [0093.217] FindFirstFileW (in: lpFileName="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Windows\\GameExplorer\\*", lpFindFileData=0x31e37c | out: lpFindFileData=0x31e37c*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xfda01e06, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfda01e06, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xaef3b9d6, ftLastWriteTime.dwHighDateTime=0x1ca042b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x381f40 [0093.217] FindClose (in: hFindFile=0x381f40 | out: hFindFile=0x381f40) returned 1 [0093.217] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e614) returned 1 [0093.217] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e620) returned 1 [0093.217] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e654) returned 1 [0093.217] GetFullPathNameW (in: lpFileName="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Windows\\History", nBufferLength=0x105, lpBuffer=0x31e15c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Windows\\History", lpFilePart=0x0) returned 0x38 [0093.217] GetFullPathNameW (in: lpFileName="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Windows\\History\\", nBufferLength=0x105, lpBuffer=0x31e130, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Windows\\History\\", lpFilePart=0x0) returned 0x39 [0093.217] FindFirstFileW (in: lpFileName="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Windows\\History\\*", lpFindFileData=0x31e37c | out: lpFindFileData=0x31e37c*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0xfda01e06, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x661a180, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xfe75c620, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x381f40 [0093.218] FindClose (in: hFindFile=0x381f40 | out: hFindFile=0x381f40) returned 1 [0093.218] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e614) returned 1 [0093.218] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e620) returned 1 [0093.218] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e654) returned 1 [0093.218] GetFullPathNameW (in: lpFileName="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Windows\\History", nBufferLength=0x105, lpBuffer=0x31e15c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Windows\\History", lpFilePart=0x0) returned 0x38 [0093.218] GetFullPathNameW (in: lpFileName="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Windows\\History\\", nBufferLength=0x105, lpBuffer=0x31e130, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Windows\\History\\", lpFilePart=0x0) returned 0x39 [0093.218] FindFirstFileW (in: lpFileName="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Windows\\History\\*", lpFindFileData=0x31e37c | out: lpFindFileData=0x31e37c*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0xfda01e06, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x661a180, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xfe75c620, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x381f40 [0093.218] FindClose (in: hFindFile=0x381f40 | out: hFindFile=0x381f40) returned 1 [0093.218] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e614) returned 1 [0093.218] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e620) returned 1 [0093.218] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e5dc) returned 1 [0093.218] GetFullPathNameW (in: lpFileName="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Windows\\History\\History.IE5", nBufferLength=0x105, lpBuffer=0x31e0e4, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Windows\\History\\History.IE5", lpFilePart=0x0) returned 0x44 [0093.218] GetFullPathNameW (in: lpFileName="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Windows\\History\\History.IE5\\", nBufferLength=0x105, lpBuffer=0x31e0b8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Windows\\History\\History.IE5\\", lpFilePart=0x0) returned 0x45 [0093.218] FindFirstFileW (in: lpFileName="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Windows\\History\\History.IE5\\*", lpFindFileData=0x31e304 | out: lpFindFileData=0x31e304*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0x6320600, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x661a180, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x3e4d86f4, ftLastWriteTime.dwHighDateTime=0x1cb8930, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x381f40 [0093.218] FindClose (in: hFindFile=0x381f40 | out: hFindFile=0x381f40) returned 1 [0093.219] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e59c) returned 1 [0093.219] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e5a8) returned 1 [0093.219] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e5dc) returned 1 [0093.219] GetFullPathNameW (in: lpFileName="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Windows\\History\\History.IE5", nBufferLength=0x105, lpBuffer=0x31e0e4, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Windows\\History\\History.IE5", lpFilePart=0x0) returned 0x44 [0093.219] GetFullPathNameW (in: lpFileName="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Windows\\History\\History.IE5\\", nBufferLength=0x105, lpBuffer=0x31e0b8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Windows\\History\\History.IE5\\", lpFilePart=0x0) returned 0x45 [0093.219] FindFirstFileW (in: lpFileName="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Windows\\History\\History.IE5\\*", lpFindFileData=0x31e304 | out: lpFindFileData=0x31e304*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0x6320600, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x661a180, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x3e4d86f4, ftLastWriteTime.dwHighDateTime=0x1cb8930, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x381f40 [0093.219] FindClose (in: hFindFile=0x381f40 | out: hFindFile=0x381f40) returned 1 [0093.219] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e59c) returned 1 [0093.219] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e5a8) returned 1 [0093.219] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e5dc) returned 1 [0093.219] GetFullPathNameW (in: lpFileName="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Windows\\History\\Low", nBufferLength=0x105, lpBuffer=0x31e0e4, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Windows\\History\\Low", lpFilePart=0x0) returned 0x3c [0093.219] GetFullPathNameW (in: lpFileName="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Windows\\History\\Low\\", nBufferLength=0x105, lpBuffer=0x31e0b8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Windows\\History\\Low\\", lpFilePart=0x0) returned 0x3d [0093.219] FindFirstFileW (in: lpFileName="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Windows\\History\\Low\\*", lpFindFileData=0x31e304 | out: lpFindFileData=0x31e304*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x6320600, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x6320600, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xedd0e6f6, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x381f40 [0093.219] FindClose (in: hFindFile=0x381f40 | out: hFindFile=0x381f40) returned 1 [0093.219] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e59c) returned 1 [0093.219] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e5a8) returned 1 [0093.219] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e5dc) returned 1 [0093.219] GetFullPathNameW (in: lpFileName="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Windows\\History\\Low", nBufferLength=0x105, lpBuffer=0x31e0e4, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Windows\\History\\Low", lpFilePart=0x0) returned 0x3c [0093.219] GetFullPathNameW (in: lpFileName="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Windows\\History\\Low\\", nBufferLength=0x105, lpBuffer=0x31e0b8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Windows\\History\\Low\\", lpFilePart=0x0) returned 0x3d [0093.220] FindFirstFileW (in: lpFileName="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Windows\\History\\Low\\*", lpFindFileData=0x31e304 | out: lpFindFileData=0x31e304*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x6320600, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x6320600, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xedd0e6f6, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x381f40 [0093.220] FindClose (in: hFindFile=0x381f40 | out: hFindFile=0x381f40) returned 1 [0093.220] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e59c) returned 1 [0093.220] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e5a8) returned 1 [0093.220] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e654) returned 1 [0093.220] GetFullPathNameW (in: lpFileName="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Windows\\Ringtones", nBufferLength=0x105, lpBuffer=0x31e15c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Windows\\Ringtones", lpFilePart=0x0) returned 0x3a [0093.220] GetFullPathNameW (in: lpFileName="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Windows\\Ringtones\\", nBufferLength=0x105, lpBuffer=0x31e130, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Windows\\Ringtones\\", lpFilePart=0x0) returned 0x3b [0093.220] FindFirstFileW (in: lpFileName="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Windows\\Ringtones\\*", lpFindFileData=0x31e37c | out: lpFindFileData=0x31e37c*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x6320600, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x6320600, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xf96dfdac, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x381f40 [0093.220] FindClose (in: hFindFile=0x381f40 | out: hFindFile=0x381f40) returned 1 [0093.221] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e614) returned 1 [0093.221] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e620) returned 1 [0093.221] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e654) returned 1 [0093.221] GetFullPathNameW (in: lpFileName="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Windows\\Ringtones", nBufferLength=0x105, lpBuffer=0x31e15c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Windows\\Ringtones", lpFilePart=0x0) returned 0x3a [0093.221] GetFullPathNameW (in: lpFileName="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Windows\\Ringtones\\", nBufferLength=0x105, lpBuffer=0x31e130, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Windows\\Ringtones\\", lpFilePart=0x0) returned 0x3b [0093.221] FindFirstFileW (in: lpFileName="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Windows\\Ringtones\\*", lpFindFileData=0x31e37c | out: lpFindFileData=0x31e37c*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x6320600, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x6320600, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xf96dfdac, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x381f40 [0093.221] FindClose (in: hFindFile=0x381f40 | out: hFindFile=0x381f40) returned 1 [0093.221] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e614) returned 1 [0093.221] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e620) returned 1 [0093.222] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e654) returned 1 [0093.222] GetFullPathNameW (in: lpFileName="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files", nBufferLength=0x105, lpBuffer=0x31e15c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files", lpFilePart=0x0) returned 0x49 [0093.222] GetFullPathNameW (in: lpFileName="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\", nBufferLength=0x105, lpBuffer=0x31e130, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\", lpFilePart=0x0) returned 0x4a [0093.222] FindFirstFileW (in: lpFileName="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\*", lpFindFileData=0x31e37c | out: lpFindFileData=0x31e37c*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0xfda01e06, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x65f4020, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xfe7364c0, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x381f40 [0093.225] FindClose (in: hFindFile=0x381f40 | out: hFindFile=0x381f40) returned 1 [0093.227] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e614) returned 1 [0093.227] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e620) returned 1 [0093.227] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e654) returned 1 [0093.227] GetFullPathNameW (in: lpFileName="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files", nBufferLength=0x105, lpBuffer=0x31e15c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files", lpFilePart=0x0) returned 0x49 [0093.227] GetFullPathNameW (in: lpFileName="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\", nBufferLength=0x105, lpBuffer=0x31e130, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\", lpFilePart=0x0) returned 0x4a [0093.228] FindFirstFileW (in: lpFileName="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\*", lpFindFileData=0x31e37c | out: lpFindFileData=0x31e37c*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0xfda01e06, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x65f4020, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xfe7364c0, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x381f40 [0093.228] FindClose (in: hFindFile=0x381f40 | out: hFindFile=0x381f40) returned 1 [0093.229] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e614) returned 1 [0093.229] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e620) returned 1 [0093.229] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e5dc) returned 1 [0093.229] GetFullPathNameW (in: lpFileName="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Content.IE5", nBufferLength=0x105, lpBuffer=0x31e0e4, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Content.IE5", lpFilePart=0x0) returned 0x55 [0093.229] GetFullPathNameW (in: lpFileName="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Content.IE5\\", nBufferLength=0x105, lpBuffer=0x31e0b8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Content.IE5\\", lpFilePart=0x0) returned 0x56 [0093.229] FindFirstFileW (in: lpFileName="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Content.IE5\\*", lpFindFileData=0x31e304 | out: lpFindFileData=0x31e304*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0x6320600, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x661a180, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x3e5e3095, ftLastWriteTime.dwHighDateTime=0x1cb8930, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x381f40 [0093.232] FindClose (in: hFindFile=0x381f40 | out: hFindFile=0x381f40) returned 1 [0093.233] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e59c) returned 1 [0093.233] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e5a8) returned 1 [0093.233] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e5dc) returned 1 [0093.233] GetFullPathNameW (in: lpFileName="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Content.IE5", nBufferLength=0x105, lpBuffer=0x31e0e4, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Content.IE5", lpFilePart=0x0) returned 0x55 [0093.233] GetFullPathNameW (in: lpFileName="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Content.IE5\\", nBufferLength=0x105, lpBuffer=0x31e0b8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Content.IE5\\", lpFilePart=0x0) returned 0x56 [0093.233] FindFirstFileW (in: lpFileName="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Content.IE5\\*", lpFindFileData=0x31e304 | out: lpFindFileData=0x31e304*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0x6320600, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x661a180, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x3e5e3095, ftLastWriteTime.dwHighDateTime=0x1cb8930, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x381f40 [0093.234] FindClose (in: hFindFile=0x381f40 | out: hFindFile=0x381f40) returned 1 [0093.234] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e59c) returned 1 [0093.234] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e5a8) returned 1 [0093.234] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e564) returned 1 [0093.234] GetFullPathNameW (in: lpFileName="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Content.IE5\\MM5O9XQS", nBufferLength=0x105, lpBuffer=0x31e06c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Content.IE5\\MM5O9XQS", lpFilePart=0x0) returned 0x5e [0093.234] GetFullPathNameW (in: lpFileName="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Content.IE5\\MM5O9XQS\\", nBufferLength=0x105, lpBuffer=0x31e040, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Content.IE5\\MM5O9XQS\\", lpFilePart=0x0) returned 0x5f [0093.234] FindFirstFileW (in: lpFileName="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Content.IE5\\MM5O9XQS\\*", lpFindFileData=0x31e28c | out: lpFindFileData=0x31e28c*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0x6320600, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x65f4020, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x3e5e3095, ftLastWriteTime.dwHighDateTime=0x1cb8930, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x381f40 [0093.235] FindClose (in: hFindFile=0x381f40 | out: hFindFile=0x381f40) returned 1 [0093.235] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e524) returned 1 [0093.235] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e530) returned 1 [0093.235] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e564) returned 1 [0093.235] GetFullPathNameW (in: lpFileName="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Content.IE5\\MM5O9XQS", nBufferLength=0x105, lpBuffer=0x31e06c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Content.IE5\\MM5O9XQS", lpFilePart=0x0) returned 0x5e [0093.235] GetFullPathNameW (in: lpFileName="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Content.IE5\\MM5O9XQS\\", nBufferLength=0x105, lpBuffer=0x31e040, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Content.IE5\\MM5O9XQS\\", lpFilePart=0x0) returned 0x5f [0093.235] FindFirstFileW (in: lpFileName="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Content.IE5\\MM5O9XQS\\*", lpFindFileData=0x31e28c | out: lpFindFileData=0x31e28c*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0x6320600, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x65f4020, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x3e5e3095, ftLastWriteTime.dwHighDateTime=0x1cb8930, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x381f40 [0093.236] FindClose (in: hFindFile=0x381f40 | out: hFindFile=0x381f40) returned 1 [0093.236] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e524) returned 1 [0093.236] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e530) returned 1 [0093.236] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e564) returned 1 [0093.236] GetFullPathNameW (in: lpFileName="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Content.IE5\\PMMR5K9K", nBufferLength=0x105, lpBuffer=0x31e06c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Content.IE5\\PMMR5K9K", lpFilePart=0x0) returned 0x5e [0093.236] GetFullPathNameW (in: lpFileName="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Content.IE5\\PMMR5K9K\\", nBufferLength=0x105, lpBuffer=0x31e040, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Content.IE5\\PMMR5K9K\\", lpFilePart=0x0) returned 0x5f [0093.236] FindFirstFileW (in: lpFileName="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Content.IE5\\PMMR5K9K\\*", lpFindFileData=0x31e28c | out: lpFindFileData=0x31e28c*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0x6320600, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x65f4020, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x3e5e3095, ftLastWriteTime.dwHighDateTime=0x1cb8930, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x381f40 [0093.236] FindClose (in: hFindFile=0x381f40 | out: hFindFile=0x381f40) returned 1 [0093.236] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e524) returned 1 [0093.236] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e530) returned 1 [0093.236] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e564) returned 1 [0093.236] GetFullPathNameW (in: lpFileName="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Content.IE5\\PMMR5K9K", nBufferLength=0x105, lpBuffer=0x31e06c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Content.IE5\\PMMR5K9K", lpFilePart=0x0) returned 0x5e [0093.236] GetFullPathNameW (in: lpFileName="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Content.IE5\\PMMR5K9K\\", nBufferLength=0x105, lpBuffer=0x31e040, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Content.IE5\\PMMR5K9K\\", lpFilePart=0x0) returned 0x5f [0093.236] FindFirstFileW (in: lpFileName="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Content.IE5\\PMMR5K9K\\*", lpFindFileData=0x31e28c | out: lpFindFileData=0x31e28c*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0x6320600, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x65f4020, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x3e5e3095, ftLastWriteTime.dwHighDateTime=0x1cb8930, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x381f40 [0093.236] FindClose (in: hFindFile=0x381f40 | out: hFindFile=0x381f40) returned 1 [0093.236] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e524) returned 1 [0093.237] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e530) returned 1 [0093.237] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e564) returned 1 [0093.237] GetFullPathNameW (in: lpFileName="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Content.IE5\\RIJUQL1C", nBufferLength=0x105, lpBuffer=0x31e06c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Content.IE5\\RIJUQL1C", lpFilePart=0x0) returned 0x5e [0093.237] GetFullPathNameW (in: lpFileName="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Content.IE5\\RIJUQL1C\\", nBufferLength=0x105, lpBuffer=0x31e040, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Content.IE5\\RIJUQL1C\\", lpFilePart=0x0) returned 0x5f [0093.237] FindFirstFileW (in: lpFileName="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Content.IE5\\RIJUQL1C\\*", lpFindFileData=0x31e28c | out: lpFindFileData=0x31e28c*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0x6320600, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x65f4020, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x3e5e3095, ftLastWriteTime.dwHighDateTime=0x1cb8930, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x381f40 [0093.237] FindClose (in: hFindFile=0x381f40 | out: hFindFile=0x381f40) returned 1 [0093.237] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e524) returned 1 [0093.237] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e530) returned 1 [0093.237] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e564) returned 1 [0093.237] GetFullPathNameW (in: lpFileName="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Content.IE5\\RIJUQL1C", nBufferLength=0x105, lpBuffer=0x31e06c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Content.IE5\\RIJUQL1C", lpFilePart=0x0) returned 0x5e [0093.237] GetFullPathNameW (in: lpFileName="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Content.IE5\\RIJUQL1C\\", nBufferLength=0x105, lpBuffer=0x31e040, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Content.IE5\\RIJUQL1C\\", lpFilePart=0x0) returned 0x5f [0093.237] FindFirstFileW (in: lpFileName="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Content.IE5\\RIJUQL1C\\*", lpFindFileData=0x31e28c | out: lpFindFileData=0x31e28c*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0x6320600, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x65f4020, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x3e5e3095, ftLastWriteTime.dwHighDateTime=0x1cb8930, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x381f40 [0093.237] FindClose (in: hFindFile=0x381f40 | out: hFindFile=0x381f40) returned 1 [0093.237] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e524) returned 1 [0093.237] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e530) returned 1 [0093.237] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e564) returned 1 [0093.237] GetFullPathNameW (in: lpFileName="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Content.IE5\\X9OHK109", nBufferLength=0x105, lpBuffer=0x31e06c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Content.IE5\\X9OHK109", lpFilePart=0x0) returned 0x5e [0093.237] GetFullPathNameW (in: lpFileName="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Content.IE5\\X9OHK109\\", nBufferLength=0x105, lpBuffer=0x31e040, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Content.IE5\\X9OHK109\\", lpFilePart=0x0) returned 0x5f [0093.237] FindFirstFileW (in: lpFileName="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Content.IE5\\X9OHK109\\*", lpFindFileData=0x31e28c | out: lpFindFileData=0x31e28c*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0x6320600, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x65f4020, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x3e5e3095, ftLastWriteTime.dwHighDateTime=0x1cb8930, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x381f40 [0093.238] FindClose (in: hFindFile=0x381f40 | out: hFindFile=0x381f40) returned 1 [0093.238] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e524) returned 1 [0093.238] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e530) returned 1 [0093.238] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e564) returned 1 [0093.238] GetFullPathNameW (in: lpFileName="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Content.IE5\\X9OHK109", nBufferLength=0x105, lpBuffer=0x31e06c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Content.IE5\\X9OHK109", lpFilePart=0x0) returned 0x5e [0093.238] GetFullPathNameW (in: lpFileName="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Content.IE5\\X9OHK109\\", nBufferLength=0x105, lpBuffer=0x31e040, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Content.IE5\\X9OHK109\\", lpFilePart=0x0) returned 0x5f [0093.238] FindFirstFileW (in: lpFileName="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Content.IE5\\X9OHK109\\*", lpFindFileData=0x31e28c | out: lpFindFileData=0x31e28c*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0x6320600, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x65f4020, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x3e5e3095, ftLastWriteTime.dwHighDateTime=0x1cb8930, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x381f40 [0093.238] FindClose (in: hFindFile=0x381f40 | out: hFindFile=0x381f40) returned 1 [0093.238] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e524) returned 1 [0093.238] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e530) returned 1 [0093.238] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e5dc) returned 1 [0093.238] GetFullPathNameW (in: lpFileName="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low", nBufferLength=0x105, lpBuffer=0x31e0e4, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low", lpFilePart=0x0) returned 0x4d [0093.238] GetFullPathNameW (in: lpFileName="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\", nBufferLength=0x105, lpBuffer=0x31e0b8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\", lpFilePart=0x0) returned 0x4e [0093.238] FindFirstFileW (in: lpFileName="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\*", lpFindFileData=0x31e304 | out: lpFindFileData=0x31e304*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x6320600, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x6320600, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xedb45673, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x381f40 [0093.238] FindClose (in: hFindFile=0x381f40 | out: hFindFile=0x381f40) returned 1 [0093.239] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e59c) returned 1 [0093.239] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e5a8) returned 1 [0093.239] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e5dc) returned 1 [0093.239] GetFullPathNameW (in: lpFileName="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low", nBufferLength=0x105, lpBuffer=0x31e0e4, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low", lpFilePart=0x0) returned 0x4d [0093.239] GetFullPathNameW (in: lpFileName="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\", nBufferLength=0x105, lpBuffer=0x31e0b8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\", lpFilePart=0x0) returned 0x4e [0093.239] FindFirstFileW (in: lpFileName="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\*", lpFindFileData=0x31e304 | out: lpFindFileData=0x31e304*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x6320600, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x6320600, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xedb45673, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x381f40 [0093.239] FindClose (in: hFindFile=0x381f40 | out: hFindFile=0x381f40) returned 1 [0093.239] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e59c) returned 1 [0093.239] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e5a8) returned 1 [0093.239] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e5dc) returned 1 [0093.239] GetFullPathNameW (in: lpFileName="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Virtualized", nBufferLength=0x105, lpBuffer=0x31e0e4, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Virtualized", lpFilePart=0x0) returned 0x55 [0093.239] GetFullPathNameW (in: lpFileName="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Virtualized\\", nBufferLength=0x105, lpBuffer=0x31e0b8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Virtualized\\", lpFilePart=0x0) returned 0x56 [0093.239] FindFirstFileW (in: lpFileName="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Virtualized\\*", lpFindFileData=0x31e304 | out: lpFindFileData=0x31e304*(dwFileAttributes=0x2012, ftCreationTime.dwLowDateTime=0x6320600, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x6320600, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xedd0e6f6, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x381f40 [0093.239] FindClose (in: hFindFile=0x381f40 | out: hFindFile=0x381f40) returned 1 [0093.239] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e59c) returned 1 [0093.239] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e5a8) returned 1 [0093.239] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e5dc) returned 1 [0093.239] GetFullPathNameW (in: lpFileName="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Virtualized", nBufferLength=0x105, lpBuffer=0x31e0e4, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Virtualized", lpFilePart=0x0) returned 0x55 [0093.239] GetFullPathNameW (in: lpFileName="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Virtualized\\", nBufferLength=0x105, lpBuffer=0x31e0b8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Virtualized\\", lpFilePart=0x0) returned 0x56 [0093.240] FindFirstFileW (in: lpFileName="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Virtualized\\*", lpFindFileData=0x31e304 | out: lpFindFileData=0x31e304*(dwFileAttributes=0x2012, ftCreationTime.dwLowDateTime=0x6320600, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x6320600, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xedd0e6f6, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x381f40 [0093.240] FindClose (in: hFindFile=0x381f40 | out: hFindFile=0x381f40) returned 1 [0093.240] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e59c) returned 1 [0093.240] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e5a8) returned 1 [0093.240] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e654) returned 1 [0093.240] GetFullPathNameW (in: lpFileName="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Windows\\WER", nBufferLength=0x105, lpBuffer=0x31e15c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Windows\\WER", lpFilePart=0x0) returned 0x34 [0093.240] GetFullPathNameW (in: lpFileName="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Windows\\WER\\", nBufferLength=0x105, lpBuffer=0x31e130, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Windows\\WER\\", lpFilePart=0x0) returned 0x35 [0093.240] FindFirstFileW (in: lpFileName="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Windows\\WER\\*", lpFindFileData=0x31e37c | out: lpFindFileData=0x31e37c*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x6320600, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x6320600, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x4d26e3cf, ftLastWriteTime.dwHighDateTime=0x1cb8927, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x381f40 [0093.240] FindClose (in: hFindFile=0x381f40 | out: hFindFile=0x381f40) returned 1 [0093.240] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e614) returned 1 [0093.240] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e620) returned 1 [0093.240] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e654) returned 1 [0093.240] GetFullPathNameW (in: lpFileName="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Windows\\WER", nBufferLength=0x105, lpBuffer=0x31e15c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Windows\\WER", lpFilePart=0x0) returned 0x34 [0093.240] GetFullPathNameW (in: lpFileName="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Windows\\WER\\", nBufferLength=0x105, lpBuffer=0x31e130, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Windows\\WER\\", lpFilePart=0x0) returned 0x35 [0093.240] FindFirstFileW (in: lpFileName="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Windows\\WER\\*", lpFindFileData=0x31e37c | out: lpFindFileData=0x31e37c*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x6320600, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x6320600, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x4d26e3cf, ftLastWriteTime.dwHighDateTime=0x1cb8927, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x381f40 [0093.240] FindClose (in: hFindFile=0x381f40 | out: hFindFile=0x381f40) returned 1 [0093.240] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e614) returned 1 [0093.241] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e620) returned 1 [0093.241] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e5dc) returned 1 [0093.241] GetFullPathNameW (in: lpFileName="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Windows\\WER\\ERC", nBufferLength=0x105, lpBuffer=0x31e0e4, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Windows\\WER\\ERC", lpFilePart=0x0) returned 0x38 [0093.241] GetFullPathNameW (in: lpFileName="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Windows\\WER\\ERC\\", nBufferLength=0x105, lpBuffer=0x31e0b8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Windows\\WER\\ERC\\", lpFilePart=0x0) returned 0x39 [0093.241] FindFirstFileW (in: lpFileName="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Windows\\WER\\ERC\\*", lpFindFileData=0x31e304 | out: lpFindFileData=0x31e304*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x6320600, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x6320600, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x1b9b8e9c, ftLastWriteTime.dwHighDateTime=0x1cb892f, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x381f40 [0093.241] FindClose (in: hFindFile=0x381f40 | out: hFindFile=0x381f40) returned 1 [0093.241] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e59c) returned 1 [0093.241] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e5a8) returned 1 [0093.241] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e5dc) returned 1 [0093.241] GetFullPathNameW (in: lpFileName="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Windows\\WER\\ERC", nBufferLength=0x105, lpBuffer=0x31e0e4, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Windows\\WER\\ERC", lpFilePart=0x0) returned 0x38 [0093.242] GetFullPathNameW (in: lpFileName="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Windows\\WER\\ERC\\", nBufferLength=0x105, lpBuffer=0x31e0b8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Windows\\WER\\ERC\\", lpFilePart=0x0) returned 0x39 [0093.242] FindFirstFileW (in: lpFileName="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Windows\\WER\\ERC\\*", lpFindFileData=0x31e304 | out: lpFindFileData=0x31e304*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x6320600, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x6320600, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x1b9b8e9c, ftLastWriteTime.dwHighDateTime=0x1cb892f, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x381f40 [0093.242] FindClose (in: hFindFile=0x381f40 | out: hFindFile=0x381f40) returned 1 [0093.242] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e59c) returned 1 [0093.242] GetFullPathNameW (in: lpFileName="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Windows\\WER\\ReportArchive", nBufferLength=0x105, lpBuffer=0x31e0e4, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Windows\\WER\\ReportArchive", lpFilePart=0x0) returned 0x42 [0093.242] GetFullPathNameW (in: lpFileName="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Windows\\WER\\ReportArchive\\", nBufferLength=0x105, lpBuffer=0x31e0b8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Windows\\WER\\ReportArchive\\", lpFilePart=0x0) returned 0x43 [0093.243] FindFirstFileW (in: lpFileName="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Windows\\WER\\ReportArchive\\*", lpFindFileData=0x31e304 | out: lpFindFileData=0x31e304*(dwFileAttributes=0x2810, ftCreationTime.dwLowDateTime=0x6320600, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x6320600, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x4d26e3cf, ftLastWriteTime.dwHighDateTime=0x1cb8927, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x381f40 [0093.243] FindClose (in: hFindFile=0x381f40 | out: hFindFile=0x381f40) returned 1 [0093.243] GetFullPathNameW (in: lpFileName="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Windows\\WER\\ReportArchive", nBufferLength=0x105, lpBuffer=0x31e0e4, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Windows\\WER\\ReportArchive", lpFilePart=0x0) returned 0x42 [0093.243] GetFullPathNameW (in: lpFileName="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Windows\\WER\\ReportArchive\\", nBufferLength=0x105, lpBuffer=0x31e0b8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Windows\\WER\\ReportArchive\\", lpFilePart=0x0) returned 0x43 [0093.243] FindFirstFileW (in: lpFileName="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Windows\\WER\\ReportArchive\\*", lpFindFileData=0x31e304 | out: lpFindFileData=0x31e304*(dwFileAttributes=0x2810, ftCreationTime.dwLowDateTime=0x6320600, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x6320600, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x4d26e3cf, ftLastWriteTime.dwHighDateTime=0x1cb8927, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x381f40 [0093.243] FindClose (in: hFindFile=0x381f40 | out: hFindFile=0x381f40) returned 1 [0093.243] GetFullPathNameW (in: lpFileName="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Windows Mail", nBufferLength=0x105, lpBuffer=0x31e1d4, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Windows Mail", lpFilePart=0x0) returned 0x35 [0093.243] GetFullPathNameW (in: lpFileName="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Windows Mail\\", nBufferLength=0x105, lpBuffer=0x31e1a8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Windows Mail\\", lpFilePart=0x0) returned 0x36 [0093.243] FindFirstFileW (in: lpFileName="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Windows Mail\\*", lpFindFileData=0x31e3f4 | out: lpFindFileData=0x31e3f4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x6320600, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x66b2700, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xd774d0cb, ftLastWriteTime.dwHighDateTime=0x1cb892d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x381f40 [0093.245] FindClose (in: hFindFile=0x381f40 | out: hFindFile=0x381f40) returned 1 [0093.245] GetFullPathNameW (in: lpFileName="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Windows Mail", nBufferLength=0x105, lpBuffer=0x31e1d4, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Windows Mail", lpFilePart=0x0) returned 0x35 [0093.245] GetFullPathNameW (in: lpFileName="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Windows Mail\\", nBufferLength=0x105, lpBuffer=0x31e1a8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Windows Mail\\", lpFilePart=0x0) returned 0x36 [0093.245] FindFirstFileW (in: lpFileName="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Windows Mail\\*", lpFindFileData=0x31e3f4 | out: lpFindFileData=0x31e3f4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x6320600, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x66b2700, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xd774d0cb, ftLastWriteTime.dwHighDateTime=0x1cb892d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x381f40 [0093.246] FindClose (in: hFindFile=0x381f40 | out: hFindFile=0x381f40) returned 1 [0093.247] GetFullPathNameW (in: lpFileName="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Windows Mail\\oeold.xml", nBufferLength=0x105, lpBuffer=0x31e0a4, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Windows Mail\\oeold.xml", lpFilePart=0x0) returned 0x3f [0093.247] CreateFileW (lpFileName="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Windows Mail\\oeold.xml" (normalized: "c:\\users\\default\\appdata\\local\\microsoft\\windows mail\\oeold.xml"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x178 [0093.248] GetFileType (hFile=0x178) returned 0x1 [0093.248] GetFileType (hFile=0x178) returned 0x1 [0093.248] GetFileSize (in: hFile=0x178, lpFileSizeHigh=0x31e6a0 | out: lpFileSizeHigh=0x31e6a0*=0x0) returned 0x104 [0093.248] ReadFile (in: hFile=0x178, lpBuffer=0x27c6224, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x31e64c, lpOverlapped=0x0 | out: lpBuffer=0x27c6224*, lpNumberOfBytesRead=0x31e64c*=0x104, lpOverlapped=0x0) returned 1 [0093.361] GetFullPathNameW (in: lpFileName="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Windows Mail\\oeold.xml", nBufferLength=0x105, lpBuffer=0x31e090, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Windows Mail\\oeold.xml", lpFilePart=0x0) returned 0x3f [0093.361] CreateFileW (lpFileName="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Windows Mail\\oeold.xml" (normalized: "c:\\users\\default\\appdata\\local\\microsoft\\windows mail\\oeold.xml"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x178 [0093.362] GetFileType (hFile=0x178) returned 0x1 [0093.362] GetFileType (hFile=0x178) returned 0x1 [0093.363] GetFullPathNameW (in: lpFileName="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Windows Mail\\oeold.xml", nBufferLength=0x105, lpBuffer=0x31e1c4, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Windows Mail\\oeold.xml", lpFilePart=0x0) returned 0x3f [0093.363] GetFullPathNameW (in: lpFileName="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Windows Mail\\oeold.xml", nBufferLength=0x105, lpBuffer=0x31e1c4, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Windows Mail\\oeold.xml", lpFilePart=0x0) returned 0x3f [0093.363] GetFileAttributesExW (in: lpFileName="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Windows Mail\\oeold.xml" (normalized: "c:\\users\\default\\appdata\\local\\microsoft\\windows mail\\oeold.xml"), fInfoLevelId=0x0, lpFileInformation=0x31e6a0 | out: lpFileInformation=0x31e6a0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x64c3520, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x64c3520, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x1b16c7a0, ftLastWriteTime.dwHighDateTime=0x1d6eb7f, nFileSizeHigh=0x0, nFileSizeLow=0x110)) returned 1 [0093.363] MoveFileW (lpExistingFileName="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Windows Mail\\oeold.xml" (normalized: "c:\\users\\default\\appdata\\local\\microsoft\\windows mail\\oeold.xml"), lpNewFileName="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Windows Mail\\oeold.xml" (normalized: "c:\\users\\default\\appdata\\local\\microsoft\\windows mail\\oeold.xml")) returned 1 [0093.364] GetFullPathNameW (in: lpFileName="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Windows Mail\\Backup", nBufferLength=0x105, lpBuffer=0x31e15c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Windows Mail\\Backup", lpFilePart=0x0) returned 0x3c [0093.364] GetFullPathNameW (in: lpFileName="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Windows Mail\\Backup\\", nBufferLength=0x105, lpBuffer=0x31e130, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Windows Mail\\Backup\\", lpFilePart=0x0) returned 0x3d [0093.364] FindFirstFileW (in: lpFileName="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Windows Mail\\Backup\\*", lpFindFileData=0x31e37c | out: lpFindFileData=0x31e37c*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x6320600, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x6320600, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xf303882f, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x381b40 [0093.365] FindClose (in: hFindFile=0x381b40 | out: hFindFile=0x381b40) returned 1 [0093.365] GetFullPathNameW (in: lpFileName="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Windows Mail\\Backup", nBufferLength=0x105, lpBuffer=0x31e15c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Windows Mail\\Backup", lpFilePart=0x0) returned 0x3c [0093.365] GetFullPathNameW (in: lpFileName="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Windows Mail\\Backup\\", nBufferLength=0x105, lpBuffer=0x31e130, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Windows Mail\\Backup\\", lpFilePart=0x0) returned 0x3d [0093.365] FindFirstFileW (in: lpFileName="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Windows Mail\\Backup\\*", lpFindFileData=0x31e37c | out: lpFindFileData=0x31e37c*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x6320600, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x6320600, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xf303882f, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x381b40 [0093.365] FindClose (in: hFindFile=0x381b40 | out: hFindFile=0x381b40) returned 1 [0093.365] GetFullPathNameW (in: lpFileName="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Windows Mail\\Backup\\new", nBufferLength=0x105, lpBuffer=0x31e0e4, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Windows Mail\\Backup\\new", lpFilePart=0x0) returned 0x40 [0093.365] GetFullPathNameW (in: lpFileName="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Windows Mail\\Backup\\new\\", nBufferLength=0x105, lpBuffer=0x31e0b8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Windows Mail\\Backup\\new\\", lpFilePart=0x0) returned 0x41 [0093.365] FindFirstFileW (in: lpFileName="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Windows Mail\\Backup\\new\\*", lpFindFileData=0x31e304 | out: lpFindFileData=0x31e304*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x6320600, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x66b2700, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xf2f7a14e, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x381b40 [0093.368] FindClose (in: hFindFile=0x381b40 | out: hFindFile=0x381b40) returned 1 [0093.368] GetFullPathNameW (in: lpFileName="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Windows Mail\\Backup\\new", nBufferLength=0x105, lpBuffer=0x31e0e4, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Windows Mail\\Backup\\new", lpFilePart=0x0) returned 0x40 [0093.368] GetFullPathNameW (in: lpFileName="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Windows Mail\\Backup\\new\\", nBufferLength=0x105, lpBuffer=0x31e0b8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Windows Mail\\Backup\\new\\", lpFilePart=0x0) returned 0x41 [0093.368] FindFirstFileW (in: lpFileName="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Windows Mail\\Backup\\new\\*", lpFindFileData=0x31e304 | out: lpFindFileData=0x31e304*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x6320600, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x66b2700, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xf2f7a14e, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x381b40 [0093.369] FindClose (in: hFindFile=0x381b40 | out: hFindFile=0x381b40) returned 1 [0093.370] GetFullPathNameW (in: lpFileName="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Windows Mail\\Stationery", nBufferLength=0x105, lpBuffer=0x31e15c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Windows Mail\\Stationery", lpFilePart=0x0) returned 0x40 [0093.370] GetFullPathNameW (in: lpFileName="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Windows Mail\\Stationery\\", nBufferLength=0x105, lpBuffer=0x31e130, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Windows Mail\\Stationery\\", lpFilePart=0x0) returned 0x41 [0093.370] FindFirstFileW (in: lpFileName="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Windows Mail\\Stationery\\*", lpFindFileData=0x31e37c | out: lpFindFileData=0x31e37c*(dwFileAttributes=0x2014, ftCreationTime.dwLowDateTime=0x6320600, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x650f7e0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xf690d5d8, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x381b40 [0093.372] FindClose (in: hFindFile=0x381b40 | out: hFindFile=0x381b40) returned 1 [0093.372] GetFullPathNameW (in: lpFileName="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Windows Mail\\Stationery", nBufferLength=0x105, lpBuffer=0x31e15c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Windows Mail\\Stationery", lpFilePart=0x0) returned 0x40 [0093.372] GetFullPathNameW (in: lpFileName="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Windows Mail\\Stationery\\", nBufferLength=0x105, lpBuffer=0x31e130, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Windows Mail\\Stationery\\", lpFilePart=0x0) returned 0x41 [0093.372] FindFirstFileW (in: lpFileName="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Windows Mail\\Stationery\\*", lpFindFileData=0x31e37c | out: lpFindFileData=0x31e37c*(dwFileAttributes=0x2014, ftCreationTime.dwLowDateTime=0x6320600, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x650f7e0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xf690d5d8, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x381b40 [0093.373] FindClose (in: hFindFile=0x381b40 | out: hFindFile=0x381b40) returned 1 [0093.374] GetFullPathNameW (in: lpFileName="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Windows Mail\\Stationery\\Bears.jpg", nBufferLength=0x105, lpBuffer=0x31e02c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Windows Mail\\Stationery\\Bears.jpg", lpFilePart=0x0) returned 0x4a [0093.374] CreateFileW (lpFileName="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Windows Mail\\Stationery\\Bears.jpg" (normalized: "c:\\users\\default\\appdata\\local\\microsoft\\windows mail\\stationery\\bears.jpg"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x178 [0093.375] GetFileType (hFile=0x178) returned 0x1 [0093.375] GetFileType (hFile=0x178) returned 0x1 [0093.375] GetFileSize (in: hFile=0x178, lpFileSizeHigh=0x31e628 | out: lpFileSizeHigh=0x31e628*=0x0) returned 0x432 [0093.375] ReadFile (in: hFile=0x178, lpBuffer=0x281f494, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x31e5d4, lpOverlapped=0x0 | out: lpBuffer=0x281f494*, lpNumberOfBytesRead=0x31e5d4*=0x432, lpOverlapped=0x0) returned 1 [0093.418] GetFullPathNameW (in: lpFileName="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Windows Mail\\Stationery\\Bears.jpg", nBufferLength=0x105, lpBuffer=0x31e018, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Windows Mail\\Stationery\\Bears.jpg", lpFilePart=0x0) returned 0x4a [0093.418] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e50c) returned 1 [0093.418] CreateFileW (lpFileName="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Windows Mail\\Stationery\\Bears.jpg" (normalized: "c:\\users\\default\\appdata\\local\\microsoft\\windows mail\\stationery\\bears.jpg"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x178 [0093.419] GetFileType (hFile=0x178) returned 0x1 [0093.419] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e508) returned 1 [0093.419] GetFileType (hFile=0x178) returned 0x1 [0093.419] WriteFile (in: hFile=0x178, lpBuffer=0x2679ca8*, nNumberOfBytesToWrite=0x440, lpNumberOfBytesWritten=0x31e59c, lpOverlapped=0x0 | out: lpBuffer=0x2679ca8*, lpNumberOfBytesWritten=0x31e59c*=0x440, lpOverlapped=0x0) returned 1 [0093.420] CloseHandle (hObject=0x178) returned 1 [0093.420] GetFullPathNameW (in: lpFileName="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Windows Mail\\Stationery\\Bears.jpg", nBufferLength=0x105, lpBuffer=0x31e14c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Windows Mail\\Stationery\\Bears.jpg", lpFilePart=0x0) returned 0x4a [0093.420] GetFullPathNameW (in: lpFileName="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Windows Mail\\Stationery\\Bears.jpg", nBufferLength=0x105, lpBuffer=0x31e14c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Windows Mail\\Stationery\\Bears.jpg", lpFilePart=0x0) returned 0x4a [0093.420] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e5ac) returned 1 [0093.420] GetFileAttributesExW (in: lpFileName="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Windows Mail\\Stationery\\Bears.jpg" (normalized: "c:\\users\\default\\appdata\\local\\microsoft\\windows mail\\stationery\\bears.jpg"), fInfoLevelId=0x0, lpFileInformation=0x31e628 | out: lpFileInformation=0x31e628*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x64c3520, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x64c3520, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x1b204d20, ftLastWriteTime.dwHighDateTime=0x1d6eb7f, nFileSizeHigh=0x0, nFileSizeLow=0x440)) returned 1 [0093.421] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e5a8) returned 1 [0093.421] MoveFileW (lpExistingFileName="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Windows Mail\\Stationery\\Bears.jpg" (normalized: "c:\\users\\default\\appdata\\local\\microsoft\\windows mail\\stationery\\bears.jpg"), lpNewFileName="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Windows Mail\\Stationery\\Bears.jpg" (normalized: "c:\\users\\default\\appdata\\local\\microsoft\\windows mail\\stationery\\bears.jpg")) returned 1 [0093.421] GetFullPathNameW (in: lpFileName="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Windows Mail\\Stationery\\Garden.jpg", nBufferLength=0x105, lpBuffer=0x31e02c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Windows Mail\\Stationery\\Garden.jpg", lpFilePart=0x0) returned 0x4b [0093.421] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e520) returned 1 [0093.421] CreateFileW (lpFileName="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Windows Mail\\Stationery\\Garden.jpg" (normalized: "c:\\users\\default\\appdata\\local\\microsoft\\windows mail\\stationery\\garden.jpg"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x178 [0093.421] GetFileType (hFile=0x178) returned 0x1 [0093.421] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e51c) returned 1 [0093.421] GetFileType (hFile=0x178) returned 0x1 [0093.421] GetFileSize (in: hFile=0x178, lpFileSizeHigh=0x31e628 | out: lpFileSizeHigh=0x31e628*=0x0) returned 0x5d3f [0093.421] ReadFile (in: hFile=0x178, lpBuffer=0x267af68, nNumberOfBytesToRead=0x5d3f, lpNumberOfBytesRead=0x31e5d4, lpOverlapped=0x0 | out: lpBuffer=0x267af68*, lpNumberOfBytesRead=0x31e5d4*=0x5d3f, lpOverlapped=0x0) returned 1 [0093.423] CloseHandle (hObject=0x178) returned 1 [0093.437] GetFullPathNameW (in: lpFileName="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Windows Mail\\Stationery\\Garden.jpg", nBufferLength=0x105, lpBuffer=0x31e018, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Windows Mail\\Stationery\\Garden.jpg", lpFilePart=0x0) returned 0x4b [0093.437] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e50c) returned 1 [0093.437] CreateFileW (lpFileName="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Windows Mail\\Stationery\\Garden.jpg" (normalized: "c:\\users\\default\\appdata\\local\\microsoft\\windows mail\\stationery\\garden.jpg"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x178 [0093.438] GetFileType (hFile=0x178) returned 0x1 [0093.438] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e508) returned 1 [0093.438] GetFileType (hFile=0x178) returned 0x1 [0093.438] WriteFile (in: hFile=0x178, lpBuffer=0x26e50ec*, nNumberOfBytesToWrite=0x5d40, lpNumberOfBytesWritten=0x31e5c8, lpOverlapped=0x0 | out: lpBuffer=0x26e50ec*, lpNumberOfBytesWritten=0x31e5c8*=0x5d40, lpOverlapped=0x0) returned 1 [0093.439] CloseHandle (hObject=0x178) returned 1 [0093.440] GetFullPathNameW (in: lpFileName="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Windows Mail\\Stationery\\Garden.jpg", nBufferLength=0x105, lpBuffer=0x31e14c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Windows Mail\\Stationery\\Garden.jpg", lpFilePart=0x0) returned 0x4b [0093.440] GetFullPathNameW (in: lpFileName="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Windows Mail\\Stationery\\Garden.jpg", nBufferLength=0x105, lpBuffer=0x31e14c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Windows Mail\\Stationery\\Garden.jpg", lpFilePart=0x0) returned 0x4b [0093.440] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e5ac) returned 1 [0093.440] GetFileAttributesExW (in: lpFileName="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Windows Mail\\Stationery\\Garden.jpg" (normalized: "c:\\users\\default\\appdata\\local\\microsoft\\windows mail\\stationery\\garden.jpg"), fInfoLevelId=0x0, lpFileInformation=0x31e628 | out: lpFileInformation=0x31e628*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x64c3520, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x64c3520, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x1b22ae80, ftLastWriteTime.dwHighDateTime=0x1d6eb7f, nFileSizeHigh=0x0, nFileSizeLow=0x5d40)) returned 1 [0093.440] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e5a8) returned 1 [0093.440] MoveFileW (lpExistingFileName="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Windows Mail\\Stationery\\Garden.jpg" (normalized: "c:\\users\\default\\appdata\\local\\microsoft\\windows mail\\stationery\\garden.jpg"), lpNewFileName="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Windows Mail\\Stationery\\Garden.jpg" (normalized: "c:\\users\\default\\appdata\\local\\microsoft\\windows mail\\stationery\\garden.jpg")) returned 1 [0093.440] GetFullPathNameW (in: lpFileName="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Windows Mail\\Stationery\\GreenBubbles.jpg", nBufferLength=0x105, lpBuffer=0x31e02c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Windows Mail\\Stationery\\GreenBubbles.jpg", lpFilePart=0x0) returned 0x51 [0093.440] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e520) returned 1 [0093.440] CreateFileW (lpFileName="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Windows Mail\\Stationery\\GreenBubbles.jpg" (normalized: "c:\\users\\default\\appdata\\local\\microsoft\\windows mail\\stationery\\greenbubbles.jpg"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x178 [0093.441] GetFileType (hFile=0x178) returned 0x1 [0093.441] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e51c) returned 1 [0093.441] GetFileType (hFile=0x178) returned 0x1 [0093.441] GetFileSize (in: hFile=0x178, lpFileSizeHigh=0x31e628 | out: lpFileSizeHigh=0x31e628*=0x0) returned 0x1906 [0093.441] ReadFile (in: hFile=0x178, lpBuffer=0x26eb210, nNumberOfBytesToRead=0x1906, lpNumberOfBytesRead=0x31e5d4, lpOverlapped=0x0 | out: lpBuffer=0x26eb210*, lpNumberOfBytesRead=0x31e5d4*=0x1906, lpOverlapped=0x0) returned 1 [0093.443] CloseHandle (hObject=0x178) returned 1 [0093.457] GetFullPathNameW (in: lpFileName="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Windows Mail\\Stationery\\GreenBubbles.jpg", nBufferLength=0x105, lpBuffer=0x31e018, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Windows Mail\\Stationery\\GreenBubbles.jpg", lpFilePart=0x0) returned 0x51 [0093.457] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e50c) returned 1 [0093.457] CreateFileW (lpFileName="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Windows Mail\\Stationery\\GreenBubbles.jpg" (normalized: "c:\\users\\default\\appdata\\local\\microsoft\\windows mail\\stationery\\greenbubbles.jpg"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x178 [0093.458] GetFileType (hFile=0x178) returned 0x1 [0093.458] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e508) returned 1 [0093.458] GetFileType (hFile=0x178) returned 0x1 [0093.458] WriteFile (in: hFile=0x178, lpBuffer=0x273fd48*, nNumberOfBytesToWrite=0x1910, lpNumberOfBytesWritten=0x31e5c8, lpOverlapped=0x0 | out: lpBuffer=0x273fd48*, lpNumberOfBytesWritten=0x31e5c8*=0x1910, lpOverlapped=0x0) returned 1 [0093.459] CloseHandle (hObject=0x178) returned 1 [0093.459] GetFullPathNameW (in: lpFileName="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Windows Mail\\Stationery\\GreenBubbles.jpg", nBufferLength=0x105, lpBuffer=0x31e14c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Windows Mail\\Stationery\\GreenBubbles.jpg", lpFilePart=0x0) returned 0x51 [0093.459] GetFullPathNameW (in: lpFileName="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Windows Mail\\Stationery\\GreenBubbles.jpg", nBufferLength=0x105, lpBuffer=0x31e14c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Windows Mail\\Stationery\\GreenBubbles.jpg", lpFilePart=0x0) returned 0x51 [0093.460] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e5ac) returned 1 [0093.460] GetFileAttributesExW (in: lpFileName="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Windows Mail\\Stationery\\GreenBubbles.jpg" (normalized: "c:\\users\\default\\appdata\\local\\microsoft\\windows mail\\stationery\\greenbubbles.jpg"), fInfoLevelId=0x0, lpFileInformation=0x31e628 | out: lpFileInformation=0x31e628*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x64c3520, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x64c3520, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x1b250fe0, ftLastWriteTime.dwHighDateTime=0x1d6eb7f, nFileSizeHigh=0x0, nFileSizeLow=0x1910)) returned 1 [0093.460] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e5a8) returned 1 [0093.460] MoveFileW (lpExistingFileName="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Windows Mail\\Stationery\\GreenBubbles.jpg" (normalized: "c:\\users\\default\\appdata\\local\\microsoft\\windows mail\\stationery\\greenbubbles.jpg"), lpNewFileName="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Windows Mail\\Stationery\\GreenBubbles.jpg" (normalized: "c:\\users\\default\\appdata\\local\\microsoft\\windows mail\\stationery\\greenbubbles.jpg")) returned 1 [0093.460] GetFullPathNameW (in: lpFileName="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Windows Mail\\Stationery\\HandPrints.jpg", nBufferLength=0x105, lpBuffer=0x31e02c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Windows Mail\\Stationery\\HandPrints.jpg", lpFilePart=0x0) returned 0x4f [0093.461] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e520) returned 1 [0093.461] CreateFileW (lpFileName="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Windows Mail\\Stationery\\HandPrints.jpg" (normalized: "c:\\users\\default\\appdata\\local\\microsoft\\windows mail\\stationery\\handprints.jpg"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x178 [0093.461] GetFileType (hFile=0x178) returned 0x1 [0093.461] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e51c) returned 1 [0093.461] GetFileType (hFile=0x178) returned 0x1 [0093.461] GetFileSize (in: hFile=0x178, lpFileSizeHigh=0x31e628 | out: lpFileSizeHigh=0x31e628*=0x0) returned 0x107e [0093.461] ReadFile (in: hFile=0x178, lpBuffer=0x2741a64, nNumberOfBytesToRead=0x107e, lpNumberOfBytesRead=0x31e5d4, lpOverlapped=0x0 | out: lpBuffer=0x2741a64*, lpNumberOfBytesRead=0x31e5d4*=0x107e, lpOverlapped=0x0) returned 1 [0093.470] CloseHandle (hObject=0x178) returned 1 [0093.484] GetFullPathNameW (in: lpFileName="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Windows Mail\\Stationery\\HandPrints.jpg", nBufferLength=0x105, lpBuffer=0x31e018, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Windows Mail\\Stationery\\HandPrints.jpg", lpFilePart=0x0) returned 0x4f [0093.484] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e50c) returned 1 [0093.484] CreateFileW (lpFileName="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Windows Mail\\Stationery\\HandPrints.jpg" (normalized: "c:\\users\\default\\appdata\\local\\microsoft\\windows mail\\stationery\\handprints.jpg"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x178 [0093.485] GetFileType (hFile=0x178) returned 0x1 [0093.485] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e508) returned 1 [0093.485] GetFileType (hFile=0x178) returned 0x1 [0093.485] WriteFile (in: hFile=0x178, lpBuffer=0x2793acc*, nNumberOfBytesToWrite=0x1080, lpNumberOfBytesWritten=0x31e5c8, lpOverlapped=0x0 | out: lpBuffer=0x2793acc*, lpNumberOfBytesWritten=0x31e5c8*=0x1080, lpOverlapped=0x0) returned 1 [0093.486] CloseHandle (hObject=0x178) returned 1 [0093.486] GetFullPathNameW (in: lpFileName="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Windows Mail\\Stationery\\HandPrints.jpg", nBufferLength=0x105, lpBuffer=0x31e14c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Windows Mail\\Stationery\\HandPrints.jpg", lpFilePart=0x0) returned 0x4f [0093.486] GetFullPathNameW (in: lpFileName="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Windows Mail\\Stationery\\HandPrints.jpg", nBufferLength=0x105, lpBuffer=0x31e14c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Windows Mail\\Stationery\\HandPrints.jpg", lpFilePart=0x0) returned 0x4f [0093.487] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e5ac) returned 1 [0093.487] GetFileAttributesExW (in: lpFileName="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Windows Mail\\Stationery\\HandPrints.jpg" (normalized: "c:\\users\\default\\appdata\\local\\microsoft\\windows mail\\stationery\\handprints.jpg"), fInfoLevelId=0x0, lpFileInformation=0x31e628 | out: lpFileInformation=0x31e628*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x64c3520, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x64c3520, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x1b29d2a0, ftLastWriteTime.dwHighDateTime=0x1d6eb7f, nFileSizeHigh=0x0, nFileSizeLow=0x1080)) returned 1 [0093.487] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e5a8) returned 1 [0093.487] MoveFileW (lpExistingFileName="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Windows Mail\\Stationery\\HandPrints.jpg" (normalized: "c:\\users\\default\\appdata\\local\\microsoft\\windows mail\\stationery\\handprints.jpg"), lpNewFileName="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Windows Mail\\Stationery\\HandPrints.jpg" (normalized: "c:\\users\\default\\appdata\\local\\microsoft\\windows mail\\stationery\\handprints.jpg")) returned 1 [0093.487] GetFullPathNameW (in: lpFileName="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Windows Mail\\Stationery\\OrangeCircles.jpg", nBufferLength=0x105, lpBuffer=0x31e02c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Windows Mail\\Stationery\\OrangeCircles.jpg", lpFilePart=0x0) returned 0x52 [0093.487] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e520) returned 1 [0093.487] CreateFileW (lpFileName="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Windows Mail\\Stationery\\OrangeCircles.jpg" (normalized: "c:\\users\\default\\appdata\\local\\microsoft\\windows mail\\stationery\\orangecircles.jpg"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x178 [0093.487] GetFileType (hFile=0x178) returned 0x1 [0093.487] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e51c) returned 1 [0093.487] GetFileType (hFile=0x178) returned 0x1 [0093.487] GetFileSize (in: hFile=0x178, lpFileSizeHigh=0x31e628 | out: lpFileSizeHigh=0x31e628*=0x0) returned 0x18ed [0093.487] ReadFile (in: hFile=0x178, lpBuffer=0x2794f54, nNumberOfBytesToRead=0x18ed, lpNumberOfBytesRead=0x31e5d4, lpOverlapped=0x0 | out: lpBuffer=0x2794f54*, lpNumberOfBytesRead=0x31e5d4*=0x18ed, lpOverlapped=0x0) returned 1 [0093.489] CloseHandle (hObject=0x178) returned 1 [0093.503] GetFullPathNameW (in: lpFileName="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Windows Mail\\Stationery\\OrangeCircles.jpg", nBufferLength=0x105, lpBuffer=0x31e018, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Windows Mail\\Stationery\\OrangeCircles.jpg", lpFilePart=0x0) returned 0x52 [0093.503] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e50c) returned 1 [0093.503] CreateFileW (lpFileName="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Windows Mail\\Stationery\\OrangeCircles.jpg" (normalized: "c:\\users\\default\\appdata\\local\\microsoft\\windows mail\\stationery\\orangecircles.jpg"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x178 [0093.504] GetFileType (hFile=0x178) returned 0x1 [0093.504] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e508) returned 1 [0093.504] GetFileType (hFile=0x178) returned 0x1 [0093.504] WriteFile (in: hFile=0x178, lpBuffer=0x27e99ec*, nNumberOfBytesToWrite=0x18f0, lpNumberOfBytesWritten=0x31e5c8, lpOverlapped=0x0 | out: lpBuffer=0x27e99ec*, lpNumberOfBytesWritten=0x31e5c8*=0x18f0, lpOverlapped=0x0) returned 1 [0093.505] CloseHandle (hObject=0x178) returned 1 [0093.505] GetFullPathNameW (in: lpFileName="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Windows Mail\\Stationery\\OrangeCircles.jpg", nBufferLength=0x105, lpBuffer=0x31e14c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Windows Mail\\Stationery\\OrangeCircles.jpg", lpFilePart=0x0) returned 0x52 [0093.505] GetFullPathNameW (in: lpFileName="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Windows Mail\\Stationery\\OrangeCircles.jpg", nBufferLength=0x105, lpBuffer=0x31e14c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Windows Mail\\Stationery\\OrangeCircles.jpg", lpFilePart=0x0) returned 0x52 [0093.505] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e5ac) returned 1 [0093.505] GetFileAttributesExW (in: lpFileName="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Windows Mail\\Stationery\\OrangeCircles.jpg" (normalized: "c:\\users\\default\\appdata\\local\\microsoft\\windows mail\\stationery\\orangecircles.jpg"), fInfoLevelId=0x0, lpFileInformation=0x31e628 | out: lpFileInformation=0x31e628*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x649d3c0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x649d3c0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x1b2c3400, ftLastWriteTime.dwHighDateTime=0x1d6eb7f, nFileSizeHigh=0x0, nFileSizeLow=0x18f0)) returned 1 [0093.505] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e5a8) returned 1 [0093.505] MoveFileW (lpExistingFileName="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Windows Mail\\Stationery\\OrangeCircles.jpg" (normalized: "c:\\users\\default\\appdata\\local\\microsoft\\windows mail\\stationery\\orangecircles.jpg"), lpNewFileName="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Windows Mail\\Stationery\\OrangeCircles.jpg" (normalized: "c:\\users\\default\\appdata\\local\\microsoft\\windows mail\\stationery\\orangecircles.jpg")) returned 1 [0093.505] GetFullPathNameW (in: lpFileName="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Windows Mail\\Stationery\\Peacock.jpg", nBufferLength=0x105, lpBuffer=0x31e02c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Windows Mail\\Stationery\\Peacock.jpg", lpFilePart=0x0) returned 0x4c [0093.505] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e520) returned 1 [0093.505] CreateFileW (lpFileName="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Windows Mail\\Stationery\\Peacock.jpg" (normalized: "c:\\users\\default\\appdata\\local\\microsoft\\windows mail\\stationery\\peacock.jpg"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x178 [0093.506] GetFileType (hFile=0x178) returned 0x1 [0093.506] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e51c) returned 1 [0093.506] GetFileType (hFile=0x178) returned 0x1 [0093.506] GetFileSize (in: hFile=0x178, lpFileSizeHigh=0x31e628 | out: lpFileSizeHigh=0x31e628*=0x0) returned 0x13fb [0093.506] ReadFile (in: hFile=0x178, lpBuffer=0x27eb6e8, nNumberOfBytesToRead=0x13fb, lpNumberOfBytesRead=0x31e5d4, lpOverlapped=0x0 | out: lpBuffer=0x27eb6e8*, lpNumberOfBytesRead=0x31e5d4*=0x13fb, lpOverlapped=0x0) returned 1 [0093.508] CloseHandle (hObject=0x178) returned 1 [0093.548] GetFullPathNameW (in: lpFileName="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Windows Mail\\Stationery\\Peacock.jpg", nBufferLength=0x105, lpBuffer=0x31e018, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Windows Mail\\Stationery\\Peacock.jpg", lpFilePart=0x0) returned 0x4c [0093.548] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e50c) returned 1 [0093.548] CreateFileW (lpFileName="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Windows Mail\\Stationery\\Peacock.jpg" (normalized: "c:\\users\\default\\appdata\\local\\microsoft\\windows mail\\stationery\\peacock.jpg"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x178 [0093.549] GetFileType (hFile=0x178) returned 0x1 [0093.549] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e508) returned 1 [0093.549] GetFileType (hFile=0x178) returned 0x1 [0093.549] WriteFile (in: hFile=0x178, lpBuffer=0x2640a0c*, nNumberOfBytesToWrite=0x1400, lpNumberOfBytesWritten=0x31e5c8, lpOverlapped=0x0 | out: lpBuffer=0x2640a0c*, lpNumberOfBytesWritten=0x31e5c8*=0x1400, lpOverlapped=0x0) returned 1 [0093.550] CloseHandle (hObject=0x178) returned 1 [0093.550] GetFullPathNameW (in: lpFileName="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Windows Mail\\Stationery\\Peacock.jpg", nBufferLength=0x105, lpBuffer=0x31e14c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Windows Mail\\Stationery\\Peacock.jpg", lpFilePart=0x0) returned 0x4c [0093.550] GetFullPathNameW (in: lpFileName="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Windows Mail\\Stationery\\Peacock.jpg", nBufferLength=0x105, lpBuffer=0x31e14c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Windows Mail\\Stationery\\Peacock.jpg", lpFilePart=0x0) returned 0x4c [0093.550] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e5ac) returned 1 [0093.550] GetFileAttributesExW (in: lpFileName="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Windows Mail\\Stationery\\Peacock.jpg" (normalized: "c:\\users\\default\\appdata\\local\\microsoft\\windows mail\\stationery\\peacock.jpg"), fInfoLevelId=0x0, lpFileInformation=0x31e628 | out: lpFileInformation=0x31e628*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x649d3c0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x649d3c0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x1b335820, ftLastWriteTime.dwHighDateTime=0x1d6eb7f, nFileSizeHigh=0x0, nFileSizeLow=0x1400)) returned 1 [0093.551] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e5a8) returned 1 [0093.551] MoveFileW (lpExistingFileName="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Windows Mail\\Stationery\\Peacock.jpg" (normalized: "c:\\users\\default\\appdata\\local\\microsoft\\windows mail\\stationery\\peacock.jpg"), lpNewFileName="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Windows Mail\\Stationery\\Peacock.jpg" (normalized: "c:\\users\\default\\appdata\\local\\microsoft\\windows mail\\stationery\\peacock.jpg")) returned 1 [0093.551] GetFullPathNameW (in: lpFileName="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Windows Mail\\Stationery\\Roses.jpg", nBufferLength=0x105, lpBuffer=0x31e02c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Windows Mail\\Stationery\\Roses.jpg", lpFilePart=0x0) returned 0x4a [0093.551] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e520) returned 1 [0093.551] CreateFileW (lpFileName="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Windows Mail\\Stationery\\Roses.jpg" (normalized: "c:\\users\\default\\appdata\\local\\microsoft\\windows mail\\stationery\\roses.jpg"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x178 [0093.551] GetFileType (hFile=0x178) returned 0x1 [0093.551] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e51c) returned 1 [0093.551] GetFileType (hFile=0x178) returned 0x1 [0093.551] GetFileSize (in: hFile=0x178, lpFileSizeHigh=0x31e628 | out: lpFileSizeHigh=0x31e628*=0x0) returned 0x780 [0093.551] ReadFile (in: hFile=0x178, lpBuffer=0x264296c, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x31e5d4, lpOverlapped=0x0 | out: lpBuffer=0x264296c*, lpNumberOfBytesRead=0x31e5d4*=0x780, lpOverlapped=0x0) returned 1 [0093.577] CloseHandle (hObject=0x178) returned 1 [0093.591] GetFullPathNameW (in: lpFileName="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Windows Mail\\Stationery\\Roses.jpg", nBufferLength=0x105, lpBuffer=0x31e018, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Windows Mail\\Stationery\\Roses.jpg", lpFilePart=0x0) returned 0x4a [0093.591] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e50c) returned 1 [0093.591] CreateFileW (lpFileName="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Windows Mail\\Stationery\\Roses.jpg" (normalized: "c:\\users\\default\\appdata\\local\\microsoft\\windows mail\\stationery\\roses.jpg"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x178 [0093.592] GetFileType (hFile=0x178) returned 0x1 [0093.592] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e508) returned 1 [0093.592] GetFileType (hFile=0x178) returned 0x1 [0093.593] WriteFile (in: hFile=0x178, lpBuffer=0x2692fb8*, nNumberOfBytesToWrite=0x790, lpNumberOfBytesWritten=0x31e59c, lpOverlapped=0x0 | out: lpBuffer=0x2692fb8*, lpNumberOfBytesWritten=0x31e59c*=0x790, lpOverlapped=0x0) returned 1 [0093.593] CloseHandle (hObject=0x178) returned 1 [0093.594] GetFullPathNameW (in: lpFileName="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Windows Mail\\Stationery\\Roses.jpg", nBufferLength=0x105, lpBuffer=0x31e14c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Windows Mail\\Stationery\\Roses.jpg", lpFilePart=0x0) returned 0x4a [0093.594] GetFullPathNameW (in: lpFileName="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Windows Mail\\Stationery\\Roses.jpg", nBufferLength=0x105, lpBuffer=0x31e14c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Windows Mail\\Stationery\\Roses.jpg", lpFilePart=0x0) returned 0x4a [0093.594] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e5ac) returned 1 [0093.594] GetFileAttributesExW (in: lpFileName="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Windows Mail\\Stationery\\Roses.jpg" (normalized: "c:\\users\\default\\appdata\\local\\microsoft\\windows mail\\stationery\\roses.jpg"), fInfoLevelId=0x0, lpFileInformation=0x31e628 | out: lpFileInformation=0x31e628*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x649d3c0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x649d3c0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x1b3a7c40, ftLastWriteTime.dwHighDateTime=0x1d6eb7f, nFileSizeHigh=0x0, nFileSizeLow=0x790)) returned 1 [0093.594] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e5a8) returned 1 [0093.594] MoveFileW (lpExistingFileName="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Windows Mail\\Stationery\\Roses.jpg" (normalized: "c:\\users\\default\\appdata\\local\\microsoft\\windows mail\\stationery\\roses.jpg"), lpNewFileName="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Windows Mail\\Stationery\\Roses.jpg" (normalized: "c:\\users\\default\\appdata\\local\\microsoft\\windows mail\\stationery\\roses.jpg")) returned 1 [0093.594] GetFullPathNameW (in: lpFileName="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Windows Mail\\Stationery\\ShadesOfBlue.jpg", nBufferLength=0x105, lpBuffer=0x31e02c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Windows Mail\\Stationery\\ShadesOfBlue.jpg", lpFilePart=0x0) returned 0x51 [0093.594] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e520) returned 1 [0093.594] CreateFileW (lpFileName="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Windows Mail\\Stationery\\ShadesOfBlue.jpg" (normalized: "c:\\users\\default\\appdata\\local\\microsoft\\windows mail\\stationery\\shadesofblue.jpg"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x178 [0093.595] GetFileType (hFile=0x178) returned 0x1 [0093.595] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e51c) returned 1 [0093.595] GetFileType (hFile=0x178) returned 0x1 [0093.595] GetFileSize (in: hFile=0x178, lpFileSizeHigh=0x31e628 | out: lpFileSizeHigh=0x31e628*=0x0) returned 0x127e [0093.595] ReadFile (in: hFile=0x178, lpBuffer=0x2694278, nNumberOfBytesToRead=0x127e, lpNumberOfBytesRead=0x31e5d4, lpOverlapped=0x0 | out: lpBuffer=0x2694278*, lpNumberOfBytesRead=0x31e5d4*=0x127e, lpOverlapped=0x0) returned 1 [0093.597] CloseHandle (hObject=0x178) returned 1 [0093.611] GetFullPathNameW (in: lpFileName="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Windows Mail\\Stationery\\ShadesOfBlue.jpg", nBufferLength=0x105, lpBuffer=0x31e018, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Windows Mail\\Stationery\\ShadesOfBlue.jpg", lpFilePart=0x0) returned 0x51 [0093.611] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e50c) returned 1 [0093.611] CreateFileW (lpFileName="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Windows Mail\\Stationery\\ShadesOfBlue.jpg" (normalized: "c:\\users\\default\\appdata\\local\\microsoft\\windows mail\\stationery\\shadesofblue.jpg"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x178 [0093.612] GetFileType (hFile=0x178) returned 0x1 [0093.612] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e508) returned 1 [0093.612] GetFileType (hFile=0x178) returned 0x1 [0093.612] WriteFile (in: hFile=0x178, lpBuffer=0x26e6ce0*, nNumberOfBytesToWrite=0x1280, lpNumberOfBytesWritten=0x31e5c8, lpOverlapped=0x0 | out: lpBuffer=0x26e6ce0*, lpNumberOfBytesWritten=0x31e5c8*=0x1280, lpOverlapped=0x0) returned 1 [0093.613] CloseHandle (hObject=0x178) returned 1 [0093.613] GetFullPathNameW (in: lpFileName="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Windows Mail\\Stationery\\ShadesOfBlue.jpg", nBufferLength=0x105, lpBuffer=0x31e14c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Windows Mail\\Stationery\\ShadesOfBlue.jpg", lpFilePart=0x0) returned 0x51 [0093.613] GetFullPathNameW (in: lpFileName="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Windows Mail\\Stationery\\ShadesOfBlue.jpg", nBufferLength=0x105, lpBuffer=0x31e14c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Windows Mail\\Stationery\\ShadesOfBlue.jpg", lpFilePart=0x0) returned 0x51 [0093.613] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e5ac) returned 1 [0093.613] GetFileAttributesExW (in: lpFileName="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Windows Mail\\Stationery\\ShadesOfBlue.jpg" (normalized: "c:\\users\\default\\appdata\\local\\microsoft\\windows mail\\stationery\\shadesofblue.jpg"), fInfoLevelId=0x0, lpFileInformation=0x31e628 | out: lpFileInformation=0x31e628*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x649d3c0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x649d3c0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x1b3cdda0, ftLastWriteTime.dwHighDateTime=0x1d6eb7f, nFileSizeHigh=0x0, nFileSizeLow=0x1280)) returned 1 [0093.614] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e5a8) returned 1 [0093.614] MoveFileW (lpExistingFileName="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Windows Mail\\Stationery\\ShadesOfBlue.jpg" (normalized: "c:\\users\\default\\appdata\\local\\microsoft\\windows mail\\stationery\\shadesofblue.jpg"), lpNewFileName="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Windows Mail\\Stationery\\ShadesOfBlue.jpg" (normalized: "c:\\users\\default\\appdata\\local\\microsoft\\windows mail\\stationery\\shadesofblue.jpg")) returned 1 [0093.614] GetFullPathNameW (in: lpFileName="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Windows Mail\\Stationery\\SoftBlue.jpg", nBufferLength=0x105, lpBuffer=0x31e02c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Windows Mail\\Stationery\\SoftBlue.jpg", lpFilePart=0x0) returned 0x4d [0093.614] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e520) returned 1 [0093.614] CreateFileW (lpFileName="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Windows Mail\\Stationery\\SoftBlue.jpg" (normalized: "c:\\users\\default\\appdata\\local\\microsoft\\windows mail\\stationery\\softblue.jpg"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x178 [0093.615] GetFileType (hFile=0x178) returned 0x1 [0093.615] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e51c) returned 1 [0093.615] GetFileType (hFile=0x178) returned 0x1 [0093.615] GetFileSize (in: hFile=0x178, lpFileSizeHigh=0x31e628 | out: lpFileSizeHigh=0x31e628*=0x0) returned 0x2949 [0093.615] ReadFile (in: hFile=0x178, lpBuffer=0x26e8364, nNumberOfBytesToRead=0x2949, lpNumberOfBytesRead=0x31e5d4, lpOverlapped=0x0 | out: lpBuffer=0x26e8364*, lpNumberOfBytesRead=0x31e5d4*=0x2949, lpOverlapped=0x0) returned 1 [0093.618] CloseHandle (hObject=0x178) returned 1 [0093.632] GetFullPathNameW (in: lpFileName="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Windows Mail\\Stationery\\SoftBlue.jpg", nBufferLength=0x105, lpBuffer=0x31e018, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Windows Mail\\Stationery\\SoftBlue.jpg", lpFilePart=0x0) returned 0x4d [0093.632] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e50c) returned 1 [0093.632] CreateFileW (lpFileName="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Windows Mail\\Stationery\\SoftBlue.jpg" (normalized: "c:\\users\\default\\appdata\\local\\microsoft\\windows mail\\stationery\\softblue.jpg"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x178 [0093.633] GetFileType (hFile=0x178) returned 0x1 [0093.633] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e508) returned 1 [0093.633] GetFileType (hFile=0x178) returned 0x1 [0093.633] WriteFile (in: hFile=0x178, lpBuffer=0x2741fdc*, nNumberOfBytesToWrite=0x2950, lpNumberOfBytesWritten=0x31e5c8, lpOverlapped=0x0 | out: lpBuffer=0x2741fdc*, lpNumberOfBytesWritten=0x31e5c8*=0x2950, lpOverlapped=0x0) returned 1 [0093.634] CloseHandle (hObject=0x178) returned 1 [0093.634] GetFullPathNameW (in: lpFileName="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Windows Mail\\Stationery\\SoftBlue.jpg", nBufferLength=0x105, lpBuffer=0x31e14c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Windows Mail\\Stationery\\SoftBlue.jpg", lpFilePart=0x0) returned 0x4d [0093.634] GetFullPathNameW (in: lpFileName="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Windows Mail\\Stationery\\SoftBlue.jpg", nBufferLength=0x105, lpBuffer=0x31e14c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Windows Mail\\Stationery\\SoftBlue.jpg", lpFilePart=0x0) returned 0x4d [0093.635] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e5ac) returned 1 [0093.635] GetFileAttributesExW (in: lpFileName="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Windows Mail\\Stationery\\SoftBlue.jpg" (normalized: "c:\\users\\default\\appdata\\local\\microsoft\\windows mail\\stationery\\softblue.jpg"), fInfoLevelId=0x0, lpFileInformation=0x31e628 | out: lpFileInformation=0x31e628*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x64e9680, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x64e9680, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x1b41a060, ftLastWriteTime.dwHighDateTime=0x1d6eb7f, nFileSizeHigh=0x0, nFileSizeLow=0x2950)) returned 1 [0093.635] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e5a8) returned 1 [0093.635] MoveFileW (lpExistingFileName="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Windows Mail\\Stationery\\SoftBlue.jpg" (normalized: "c:\\users\\default\\appdata\\local\\microsoft\\windows mail\\stationery\\softblue.jpg"), lpNewFileName="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Windows Mail\\Stationery\\SoftBlue.jpg" (normalized: "c:\\users\\default\\appdata\\local\\microsoft\\windows mail\\stationery\\softblue.jpg")) returned 1 [0093.635] GetFullPathNameW (in: lpFileName="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Windows Mail\\Stationery\\Stars.jpg", nBufferLength=0x105, lpBuffer=0x31e02c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Windows Mail\\Stationery\\Stars.jpg", lpFilePart=0x0) returned 0x4a [0093.635] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e520) returned 1 [0093.635] CreateFileW (lpFileName="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Windows Mail\\Stationery\\Stars.jpg" (normalized: "c:\\users\\default\\appdata\\local\\microsoft\\windows mail\\stationery\\stars.jpg"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x178 [0093.635] GetFileType (hFile=0x178) returned 0x1 [0093.635] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e51c) returned 1 [0093.635] GetFileType (hFile=0x178) returned 0x1 [0093.635] GetFileSize (in: hFile=0x178, lpFileSizeHigh=0x31e628 | out: lpFileSizeHigh=0x31e628*=0x0) returned 0x1d51 [0093.636] ReadFile (in: hFile=0x178, lpBuffer=0x2744d04, nNumberOfBytesToRead=0x1d51, lpNumberOfBytesRead=0x31e5d4, lpOverlapped=0x0 | out: lpBuffer=0x2744d04*, lpNumberOfBytesRead=0x31e5d4*=0x1d51, lpOverlapped=0x0) returned 1 [0093.637] CloseHandle (hObject=0x178) returned 1 [0093.651] GetFullPathNameW (in: lpFileName="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Windows Mail\\Stationery\\Stars.jpg", nBufferLength=0x105, lpBuffer=0x31e018, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Windows Mail\\Stationery\\Stars.jpg", lpFilePart=0x0) returned 0x4a [0093.651] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e50c) returned 1 [0093.651] CreateFileW (lpFileName="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Windows Mail\\Stationery\\Stars.jpg" (normalized: "c:\\users\\default\\appdata\\local\\microsoft\\windows mail\\stationery\\stars.jpg"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x178 [0093.652] GetFileType (hFile=0x178) returned 0x1 [0093.652] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e508) returned 1 [0093.652] GetFileType (hFile=0x178) returned 0x1 [0093.652] WriteFile (in: hFile=0x178, lpBuffer=0x279adcc*, nNumberOfBytesToWrite=0x1d60, lpNumberOfBytesWritten=0x31e5c8, lpOverlapped=0x0 | out: lpBuffer=0x279adcc*, lpNumberOfBytesWritten=0x31e5c8*=0x1d60, lpOverlapped=0x0) returned 1 [0093.653] CloseHandle (hObject=0x178) returned 1 [0093.653] GetFullPathNameW (in: lpFileName="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Windows Mail\\Stationery\\Stars.jpg", nBufferLength=0x105, lpBuffer=0x31e14c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Windows Mail\\Stationery\\Stars.jpg", lpFilePart=0x0) returned 0x4a [0093.653] GetFullPathNameW (in: lpFileName="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Windows Mail\\Stationery\\Stars.jpg", nBufferLength=0x105, lpBuffer=0x31e14c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Windows Mail\\Stationery\\Stars.jpg", lpFilePart=0x0) returned 0x4a [0093.653] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e5ac) returned 1 [0093.653] GetFileAttributesExW (in: lpFileName="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Windows Mail\\Stationery\\Stars.jpg" (normalized: "c:\\users\\default\\appdata\\local\\microsoft\\windows mail\\stationery\\stars.jpg"), fInfoLevelId=0x0, lpFileInformation=0x31e628 | out: lpFileInformation=0x31e628*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x6477260, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x6477260, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x1b4401c0, ftLastWriteTime.dwHighDateTime=0x1d6eb7f, nFileSizeHigh=0x0, nFileSizeLow=0x1d60)) returned 1 [0093.653] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e5a8) returned 1 [0093.653] MoveFileW (lpExistingFileName="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Windows Mail\\Stationery\\Stars.jpg" (normalized: "c:\\users\\default\\appdata\\local\\microsoft\\windows mail\\stationery\\stars.jpg"), lpNewFileName="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Windows Mail\\Stationery\\Stars.jpg" (normalized: "c:\\users\\default\\appdata\\local\\microsoft\\windows mail\\stationery\\stars.jpg")) returned 1 [0093.653] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e6cc) returned 1 [0093.653] GetFullPathNameW (in: lpFileName="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Windows Media", nBufferLength=0x105, lpBuffer=0x31e1d4, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Windows Media", lpFilePart=0x0) returned 0x36 [0093.654] GetFullPathNameW (in: lpFileName="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Windows Media\\", nBufferLength=0x105, lpBuffer=0x31e1a8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Windows Media\\", lpFilePart=0x0) returned 0x37 [0093.654] FindFirstFileW (in: lpFileName="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Windows Media\\*", lpFindFileData=0x31e3f4 | out: lpFindFileData=0x31e3f4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x6320600, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x6320600, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xf7de167e, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x381dc0 [0093.654] FindNextFileW (in: hFindFile=0x381dc0, lpFindFileData=0x31e404 | out: lpFindFileData=0x31e404*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x6320600, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x6320600, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xf7de167e, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0093.654] FindNextFileW (in: hFindFile=0x381dc0, lpFindFileData=0x31e404 | out: lpFindFileData=0x31e404*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x6320600, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x6451100, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xf928f5c4, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="12.0", cAlternateFileName="")) returned 1 [0093.654] FindNextFileW (in: hFindFile=0x381dc0, lpFindFileData=0x31e404 | out: lpFindFileData=0x31e404*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x6320600, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x6451100, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xf928f5c4, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="12.0", cAlternateFileName="")) returned 0 [0093.654] FindClose (in: hFindFile=0x381dc0 | out: hFindFile=0x381dc0) returned 1 [0093.654] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e68c) returned 1 [0093.654] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e698) returned 1 [0093.654] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e6cc) returned 1 [0093.655] GetFullPathNameW (in: lpFileName="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Windows Media", nBufferLength=0x105, lpBuffer=0x31e1d4, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Windows Media", lpFilePart=0x0) returned 0x36 [0093.655] GetFullPathNameW (in: lpFileName="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Windows Media\\", nBufferLength=0x105, lpBuffer=0x31e1a8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Windows Media\\", lpFilePart=0x0) returned 0x37 [0093.655] FindFirstFileW (in: lpFileName="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Windows Media\\*", lpFindFileData=0x31e3f4 | out: lpFindFileData=0x31e3f4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x6320600, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x6320600, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xf7de167e, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x381dc0 [0093.655] FindNextFileW (in: hFindFile=0x381dc0, lpFindFileData=0x31e404 | out: lpFindFileData=0x31e404*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x6320600, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x6320600, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xf7de167e, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0093.656] FindNextFileW (in: hFindFile=0x381dc0, lpFindFileData=0x31e404 | out: lpFindFileData=0x31e404*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x6320600, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x6451100, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xf928f5c4, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="12.0", cAlternateFileName="")) returned 1 [0093.656] FindNextFileW (in: hFindFile=0x381dc0, lpFindFileData=0x31e404 | out: lpFindFileData=0x31e404*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0093.656] FindClose (in: hFindFile=0x381dc0 | out: hFindFile=0x381dc0) returned 1 [0093.656] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e68c) returned 1 [0093.656] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e698) returned 1 [0093.656] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e654) returned 1 [0093.656] GetFullPathNameW (in: lpFileName="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Windows Media\\12.0", nBufferLength=0x105, lpBuffer=0x31e15c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Windows Media\\12.0", lpFilePart=0x0) returned 0x3b [0093.656] GetFullPathNameW (in: lpFileName="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Windows Media\\12.0\\", nBufferLength=0x105, lpBuffer=0x31e130, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Windows Media\\12.0\\", lpFilePart=0x0) returned 0x3c [0093.657] FindFirstFileW (in: lpFileName="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Windows Media\\12.0\\*", lpFindFileData=0x31e37c | out: lpFindFileData=0x31e37c*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x6320600, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x6451100, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xf928f5c4, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x381dc0 [0093.657] FindNextFileW (in: hFindFile=0x381dc0, lpFindFileData=0x31e38c | out: lpFindFileData=0x31e38c*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x6320600, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x6451100, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xf928f5c4, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0093.657] FindNextFileW (in: hFindFile=0x381dc0, lpFindFileData=0x31e38c | out: lpFindFileData=0x31e38c*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x6451100, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x6451100, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xf7de167e, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x1f2, dwReserved0=0x0, dwReserved1=0x0, cFileName="WMSDKNS.DTD", cAlternateFileName="")) returned 1 [0093.657] FindNextFileW (in: hFindFile=0x381dc0, lpFindFileData=0x31e38c | out: lpFindFileData=0x31e38c*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x6451100, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x6451100, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xf9269464, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x27cf, dwReserved0=0x0, dwReserved1=0x0, cFileName="WMSDKNS.XML", cAlternateFileName="")) returned 1 [0093.657] FindNextFileW (in: hFindFile=0x381dc0, lpFindFileData=0x31e38c | out: lpFindFileData=0x31e38c*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0093.657] FindClose (in: hFindFile=0x381dc0 | out: hFindFile=0x381dc0) returned 1 [0093.657] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e614) returned 1 [0093.657] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e620) returned 1 [0093.657] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e654) returned 1 [0093.657] GetFullPathNameW (in: lpFileName="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Windows Media\\12.0", nBufferLength=0x105, lpBuffer=0x31e15c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Windows Media\\12.0", lpFilePart=0x0) returned 0x3b [0093.658] GetFullPathNameW (in: lpFileName="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Windows Media\\12.0\\", nBufferLength=0x105, lpBuffer=0x31e130, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Windows Media\\12.0\\", lpFilePart=0x0) returned 0x3c [0093.658] FindFirstFileW (in: lpFileName="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Windows Media\\12.0\\*", lpFindFileData=0x31e37c | out: lpFindFileData=0x31e37c*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x6320600, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x6451100, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xf928f5c4, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x381dc0 [0093.658] FindNextFileW (in: hFindFile=0x381dc0, lpFindFileData=0x31e38c | out: lpFindFileData=0x31e38c*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x6320600, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x6451100, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xf928f5c4, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0093.658] FindNextFileW (in: hFindFile=0x381dc0, lpFindFileData=0x31e38c | out: lpFindFileData=0x31e38c*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x6451100, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x6451100, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xf7de167e, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x1f2, dwReserved0=0x0, dwReserved1=0x0, cFileName="WMSDKNS.DTD", cAlternateFileName="")) returned 1 [0093.658] FindNextFileW (in: hFindFile=0x381dc0, lpFindFileData=0x31e38c | out: lpFindFileData=0x31e38c*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x6451100, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x6451100, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xf9269464, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x27cf, dwReserved0=0x0, dwReserved1=0x0, cFileName="WMSDKNS.XML", cAlternateFileName="")) returned 1 [0093.658] FindNextFileW (in: hFindFile=0x381dc0, lpFindFileData=0x31e38c | out: lpFindFileData=0x31e38c*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x6451100, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x6451100, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xf9269464, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x27cf, dwReserved0=0x0, dwReserved1=0x0, cFileName="WMSDKNS.XML", cAlternateFileName="")) returned 0 [0093.658] FindClose (in: hFindFile=0x381dc0 | out: hFindFile=0x381dc0) returned 1 [0093.658] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e614) returned 1 [0093.658] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e620) returned 1 [0093.658] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e6cc) returned 1 [0093.659] GetFullPathNameW (in: lpFileName="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Windows Sidebar", nBufferLength=0x105, lpBuffer=0x31e1d4, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Windows Sidebar", lpFilePart=0x0) returned 0x38 [0093.659] GetFullPathNameW (in: lpFileName="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Windows Sidebar\\", nBufferLength=0x105, lpBuffer=0x31e1a8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Windows Sidebar\\", lpFilePart=0x0) returned 0x39 [0093.659] FindFirstFileW (in: lpFileName="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Windows Sidebar\\*", lpFindFileData=0x31e3f4 | out: lpFindFileData=0x31e3f4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x6320600, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x6451100, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x184eadb, ftLastWriteTime.dwHighDateTime=0x1cb8927, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x381dc0 [0093.660] FindNextFileW (in: hFindFile=0x381dc0, lpFindFileData=0x31e404 | out: lpFindFileData=0x31e404*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x6320600, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x6451100, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x184eadb, ftLastWriteTime.dwHighDateTime=0x1cb8927, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0093.660] FindNextFileW (in: hFindFile=0x381dc0, lpFindFileData=0x31e404 | out: lpFindFileData=0x31e404*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x6320600, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x6320600, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x184eadb, ftLastWriteTime.dwHighDateTime=0x1cb8927, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Gadgets", cAlternateFileName="")) returned 1 [0093.660] FindNextFileW (in: hFindFile=0x381dc0, lpFindFileData=0x31e404 | out: lpFindFileData=0x31e404*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x6451100, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x6451100, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x184eadb, ftLastWriteTime.dwHighDateTime=0x1cb8927, nFileSizeHigh=0x0, nFileSizeLow=0x54, dwReserved0=0x0, dwReserved1=0x0, cFileName="Settings.ini", cAlternateFileName="")) returned 1 [0093.660] FindNextFileW (in: hFindFile=0x381dc0, lpFindFileData=0x31e404 | out: lpFindFileData=0x31e404*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0093.660] FindClose (in: hFindFile=0x381dc0 | out: hFindFile=0x381dc0) returned 1 [0093.660] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e68c) returned 1 [0093.660] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e698) returned 1 [0093.660] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e6cc) returned 1 [0093.660] GetFullPathNameW (in: lpFileName="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Windows Sidebar", nBufferLength=0x105, lpBuffer=0x31e1d4, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Windows Sidebar", lpFilePart=0x0) returned 0x38 [0093.660] GetFullPathNameW (in: lpFileName="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Windows Sidebar\\", nBufferLength=0x105, lpBuffer=0x31e1a8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Windows Sidebar\\", lpFilePart=0x0) returned 0x39 [0093.660] FindFirstFileW (in: lpFileName="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Windows Sidebar\\*", lpFindFileData=0x31e3f4 | out: lpFindFileData=0x31e3f4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x6320600, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x6451100, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x184eadb, ftLastWriteTime.dwHighDateTime=0x1cb8927, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x381dc0 [0093.661] FindNextFileW (in: hFindFile=0x381dc0, lpFindFileData=0x31e404 | out: lpFindFileData=0x31e404*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x6320600, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x6451100, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x184eadb, ftLastWriteTime.dwHighDateTime=0x1cb8927, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0093.661] FindNextFileW (in: hFindFile=0x381dc0, lpFindFileData=0x31e404 | out: lpFindFileData=0x31e404*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x6320600, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x6320600, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x184eadb, ftLastWriteTime.dwHighDateTime=0x1cb8927, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Gadgets", cAlternateFileName="")) returned 1 [0093.661] FindNextFileW (in: hFindFile=0x381dc0, lpFindFileData=0x31e404 | out: lpFindFileData=0x31e404*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x6451100, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x6451100, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x184eadb, ftLastWriteTime.dwHighDateTime=0x1cb8927, nFileSizeHigh=0x0, nFileSizeLow=0x54, dwReserved0=0x0, dwReserved1=0x0, cFileName="Settings.ini", cAlternateFileName="")) returned 1 [0093.661] FindNextFileW (in: hFindFile=0x381dc0, lpFindFileData=0x31e404 | out: lpFindFileData=0x31e404*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x6451100, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x6451100, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x184eadb, ftLastWriteTime.dwHighDateTime=0x1cb8927, nFileSizeHigh=0x0, nFileSizeLow=0x54, dwReserved0=0x0, dwReserved1=0x0, cFileName="Settings.ini", cAlternateFileName="")) returned 0 [0093.661] FindClose (in: hFindFile=0x381dc0 | out: hFindFile=0x381dc0) returned 1 [0093.661] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e68c) returned 1 [0093.661] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e698) returned 1 [0093.661] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e654) returned 1 [0093.661] GetFullPathNameW (in: lpFileName="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Windows Sidebar\\Gadgets", nBufferLength=0x105, lpBuffer=0x31e15c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Windows Sidebar\\Gadgets", lpFilePart=0x0) returned 0x40 [0093.661] GetFullPathNameW (in: lpFileName="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Windows Sidebar\\Gadgets\\", nBufferLength=0x105, lpBuffer=0x31e130, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Windows Sidebar\\Gadgets\\", lpFilePart=0x0) returned 0x41 [0093.661] FindFirstFileW (in: lpFileName="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Windows Sidebar\\Gadgets\\*", lpFindFileData=0x31e37c | out: lpFindFileData=0x31e37c*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x6320600, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x6320600, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x184eadb, ftLastWriteTime.dwHighDateTime=0x1cb8927, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x381dc0 [0093.662] FindNextFileW (in: hFindFile=0x381dc0, lpFindFileData=0x31e38c | out: lpFindFileData=0x31e38c*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x6320600, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x6320600, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x184eadb, ftLastWriteTime.dwHighDateTime=0x1cb8927, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0093.662] FindNextFileW (in: hFindFile=0x381dc0, lpFindFileData=0x31e38c | out: lpFindFileData=0x31e38c*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x6320600, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x6320600, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x184eadb, ftLastWriteTime.dwHighDateTime=0x1cb8927, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 0 [0093.662] FindClose (in: hFindFile=0x381dc0 | out: hFindFile=0x381dc0) returned 1 [0093.662] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e614) returned 1 [0093.662] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e620) returned 1 [0093.662] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e654) returned 1 [0093.662] GetFullPathNameW (in: lpFileName="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Windows Sidebar\\Gadgets", nBufferLength=0x105, lpBuffer=0x31e15c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Windows Sidebar\\Gadgets", lpFilePart=0x0) returned 0x40 [0093.662] GetFullPathNameW (in: lpFileName="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Windows Sidebar\\Gadgets\\", nBufferLength=0x105, lpBuffer=0x31e130, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Windows Sidebar\\Gadgets\\", lpFilePart=0x0) returned 0x41 [0093.662] FindFirstFileW (in: lpFileName="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Windows Sidebar\\Gadgets\\*", lpFindFileData=0x31e37c | out: lpFindFileData=0x31e37c*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x6320600, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x6320600, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x184eadb, ftLastWriteTime.dwHighDateTime=0x1cb8927, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x381dc0 [0093.663] FindNextFileW (in: hFindFile=0x381dc0, lpFindFileData=0x31e38c | out: lpFindFileData=0x31e38c*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x6320600, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x6320600, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x184eadb, ftLastWriteTime.dwHighDateTime=0x1cb8927, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0093.663] FindNextFileW (in: hFindFile=0x381dc0, lpFindFileData=0x31e38c | out: lpFindFileData=0x31e38c*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x6320600, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x6320600, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x184eadb, ftLastWriteTime.dwHighDateTime=0x1cb8927, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 0 [0093.663] FindClose (in: hFindFile=0x381dc0 | out: hFindFile=0x381dc0) returned 1 [0093.663] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e614) returned 1 [0093.663] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e620) returned 1 [0093.663] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e744) returned 1 [0093.663] GetFullPathNameW (in: lpFileName="C:\\Users\\Default\\AppData\\Local\\Temp", nBufferLength=0x105, lpBuffer=0x31e24c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\Default\\AppData\\Local\\Temp", lpFilePart=0x0) returned 0x23 [0093.663] GetFullPathNameW (in: lpFileName="C:\\Users\\Default\\AppData\\Local\\Temp\\", nBufferLength=0x105, lpBuffer=0x31e220, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\Default\\AppData\\Local\\Temp\\", lpFilePart=0x0) returned 0x24 [0093.663] FindFirstFileW (in: lpFileName="C:\\Users\\Default\\AppData\\Local\\Temp\\*", lpFindFileData=0x31e46c | out: lpFindFileData=0x31e46c*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xfda27f60, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x6451100, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x3b34dcb8, ftLastWriteTime.dwHighDateTime=0x1cb8930, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x381dc0 [0093.664] FindNextFileW (in: hFindFile=0x381dc0, lpFindFileData=0x31e47c | out: lpFindFileData=0x31e47c*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xfda27f60, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x6451100, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x3b34dcb8, ftLastWriteTime.dwHighDateTime=0x1cb8930, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0093.664] FindNextFileW (in: hFindFile=0x381dc0, lpFindFileData=0x31e47c | out: lpFindFileData=0x31e47c*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x6451100, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x6451100, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x77398c9, ftLastWriteTime.dwHighDateTime=0x1cb8927, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="FXSAPIDebugLogFile.txt", cAlternateFileName="FXSAPI~1.TXT")) returned 1 [0093.664] FindNextFileW (in: hFindFile=0x381dc0, lpFindFileData=0x31e47c | out: lpFindFileData=0x31e47c*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0093.664] FindClose (in: hFindFile=0x381dc0 | out: hFindFile=0x381dc0) returned 1 [0093.664] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e704) returned 1 [0093.664] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e710) returned 1 [0093.664] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e744) returned 1 [0093.664] GetFullPathNameW (in: lpFileName="C:\\Users\\Default\\AppData\\Local\\Temp", nBufferLength=0x105, lpBuffer=0x31e24c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\Default\\AppData\\Local\\Temp", lpFilePart=0x0) returned 0x23 [0093.664] GetFullPathNameW (in: lpFileName="C:\\Users\\Default\\AppData\\Local\\Temp\\", nBufferLength=0x105, lpBuffer=0x31e220, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\Default\\AppData\\Local\\Temp\\", lpFilePart=0x0) returned 0x24 [0093.664] FindFirstFileW (in: lpFileName="C:\\Users\\Default\\AppData\\Local\\Temp\\*", lpFindFileData=0x31e46c | out: lpFindFileData=0x31e46c*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xfda27f60, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x6451100, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x3b34dcb8, ftLastWriteTime.dwHighDateTime=0x1cb8930, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x381dc0 [0093.664] FindNextFileW (in: hFindFile=0x381dc0, lpFindFileData=0x31e47c | out: lpFindFileData=0x31e47c*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xfda27f60, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x6451100, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x3b34dcb8, ftLastWriteTime.dwHighDateTime=0x1cb8930, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0093.664] FindNextFileW (in: hFindFile=0x381dc0, lpFindFileData=0x31e47c | out: lpFindFileData=0x31e47c*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x6451100, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x6451100, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x77398c9, ftLastWriteTime.dwHighDateTime=0x1cb8927, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="FXSAPIDebugLogFile.txt", cAlternateFileName="FXSAPI~1.TXT")) returned 1 [0093.665] FindNextFileW (in: hFindFile=0x381dc0, lpFindFileData=0x31e47c | out: lpFindFileData=0x31e47c*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x6451100, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x6451100, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x77398c9, ftLastWriteTime.dwHighDateTime=0x1cb8927, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="FXSAPIDebugLogFile.txt", cAlternateFileName="FXSAPI~1.TXT")) returned 0 [0093.665] FindClose (in: hFindFile=0x381dc0 | out: hFindFile=0x381dc0) returned 1 [0093.665] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e704) returned 1 [0093.665] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e710) returned 1 [0093.665] GetFullPathNameW (in: lpFileName="C:\\Users\\Default\\AppData\\Local\\Temp\\FXSAPIDebugLogFile.txt", nBufferLength=0x105, lpBuffer=0x31e11c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\Default\\AppData\\Local\\Temp\\FXSAPIDebugLogFile.txt", lpFilePart=0x0) returned 0x3a [0093.665] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e610) returned 1 [0093.665] CreateFileW (lpFileName="C:\\Users\\Default\\AppData\\Local\\Temp\\FXSAPIDebugLogFile.txt" (normalized: "c:\\users\\default\\appdata\\local\\temp\\fxsapidebuglogfile.txt"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x178 [0093.665] GetFileType (hFile=0x178) returned 0x1 [0093.665] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e60c) returned 1 [0093.665] GetFileType (hFile=0x178) returned 0x1 [0093.665] GetFileSize (in: hFile=0x178, lpFileSizeHigh=0x31e718 | out: lpFileSizeHigh=0x31e718*=0x0) returned 0x0 [0093.680] GetFullPathNameW (in: lpFileName="C:\\Users\\Default\\AppData\\Local\\Temp\\FXSAPIDebugLogFile.txt", nBufferLength=0x105, lpBuffer=0x31e108, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\Default\\AppData\\Local\\Temp\\FXSAPIDebugLogFile.txt", lpFilePart=0x0) returned 0x3a [0093.680] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e5fc) returned 1 [0093.680] CreateFileW (lpFileName="C:\\Users\\Default\\AppData\\Local\\Temp\\FXSAPIDebugLogFile.txt" (normalized: "c:\\users\\default\\appdata\\local\\temp\\fxsapidebuglogfile.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x178 [0093.680] GetFileType (hFile=0x178) returned 0x1 [0093.680] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e5f8) returned 1 [0093.680] GetFileType (hFile=0x178) returned 0x1 [0093.680] WriteFile (in: hFile=0x178, lpBuffer=0x27f0f24*, nNumberOfBytesToWrite=0x10, lpNumberOfBytesWritten=0x31e68c, lpOverlapped=0x0 | out: lpBuffer=0x27f0f24*, lpNumberOfBytesWritten=0x31e68c*=0x10, lpOverlapped=0x0) returned 1 [0093.681] GetFullPathNameW (in: lpFileName="C:\\Users\\Default\\AppData\\Local\\Temp\\FXSAPIDebugLogFile.txt", nBufferLength=0x105, lpBuffer=0x31e23c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\Default\\AppData\\Local\\Temp\\FXSAPIDebugLogFile.txt", lpFilePart=0x0) returned 0x3a [0093.681] GetFullPathNameW (in: lpFileName="C:\\Users\\Default\\AppData\\Local\\Temp\\FXSAPIDebugLogFile.txt", nBufferLength=0x105, lpBuffer=0x31e23c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\Default\\AppData\\Local\\Temp\\FXSAPIDebugLogFile.txt", lpFilePart=0x0) returned 0x3a [0093.681] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e69c) returned 1 [0093.681] GetFileAttributesExW (in: lpFileName="C:\\Users\\Default\\AppData\\Local\\Temp\\FXSAPIDebugLogFile.txt" (normalized: "c:\\users\\default\\appdata\\local\\temp\\fxsapidebuglogfile.txt"), fInfoLevelId=0x0, lpFileInformation=0x31e718 | out: lpFileInformation=0x31e718*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x6451100, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x6451100, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x1b48c480, ftLastWriteTime.dwHighDateTime=0x1d6eb7f, nFileSizeHigh=0x0, nFileSizeLow=0x10)) returned 1 [0093.681] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e698) returned 1 [0093.681] MoveFileW (lpExistingFileName="C:\\Users\\Default\\AppData\\Local\\Temp\\FXSAPIDebugLogFile.txt" (normalized: "c:\\users\\default\\appdata\\local\\temp\\fxsapidebuglogfile.txt"), lpNewFileName="C:\\Users\\Default\\AppData\\Local\\Temp\\FXSAPIDebugLogFile.txt" (normalized: "c:\\users\\default\\appdata\\local\\temp\\fxsapidebuglogfile.txt")) returned 1 [0093.682] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e744) returned 1 [0093.682] GetFullPathNameW (in: lpFileName="C:\\Users\\Default\\AppData\\Local\\Temporary Internet Files", nBufferLength=0x105, lpBuffer=0x31e24c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\Default\\AppData\\Local\\Temporary Internet Files", lpFilePart=0x0) returned 0x37 [0093.682] GetFullPathNameW (in: lpFileName="C:\\Users\\Default\\AppData\\Local\\Temporary Internet Files\\", nBufferLength=0x105, lpBuffer=0x31e220, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\Default\\AppData\\Local\\Temporary Internet Files\\", lpFilePart=0x0) returned 0x38 [0093.682] FindFirstFileW (in: lpFileName="C:\\Users\\Default\\AppData\\Local\\Temporary Internet Files\\*", lpFindFileData=0x31e46c | out: lpFindFileData=0x31e46c*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0093.682] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e708) returned 1 [0093.683] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e7bc) returned 1 [0093.683] GetFullPathNameW (in: lpFileName="C:\\Users\\Default\\AppData\\LocalLow", nBufferLength=0x105, lpBuffer=0x31e2c4, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\Default\\AppData\\LocalLow", lpFilePart=0x0) returned 0x21 [0093.683] GetFullPathNameW (in: lpFileName="C:\\Users\\Default\\AppData\\LocalLow\\", nBufferLength=0x105, lpBuffer=0x31e298, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\Default\\AppData\\LocalLow\\", lpFilePart=0x0) returned 0x22 [0093.684] FindFirstFileW (in: lpFileName="C:\\Users\\Default\\AppData\\LocalLow\\*", lpFindFileData=0x31e4e4 | out: lpFindFileData=0x31e4e4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x6320600, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x6320600, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x23a1d229, ftLastWriteTime.dwHighDateTime=0x1cb892f, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x381e40 [0093.685] FindNextFileW (in: hFindFile=0x381e40, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x6320600, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x6320600, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x23a1d229, ftLastWriteTime.dwHighDateTime=0x1cb892f, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0093.685] FindNextFileW (in: hFindFile=0x381e40, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x2014, ftCreationTime.dwLowDateTime=0x6320600, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x6320600, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x23a1d229, ftLastWriteTime.dwHighDateTime=0x1cb892f, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft", cAlternateFileName="MICROS~1")) returned 1 [0093.685] FindNextFileW (in: hFindFile=0x381e40, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x2014, ftCreationTime.dwLowDateTime=0x6320600, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x6320600, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x23a1d229, ftLastWriteTime.dwHighDateTime=0x1cb892f, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft", cAlternateFileName="MICROS~1")) returned 0 [0093.685] FindClose (in: hFindFile=0x381e40 | out: hFindFile=0x381e40) returned 1 [0093.685] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e77c) returned 1 [0093.685] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e788) returned 1 [0093.685] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e7bc) returned 1 [0093.685] GetFullPathNameW (in: lpFileName="C:\\Users\\Default\\AppData\\LocalLow", nBufferLength=0x105, lpBuffer=0x31e2c4, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\Default\\AppData\\LocalLow", lpFilePart=0x0) returned 0x21 [0093.685] GetFullPathNameW (in: lpFileName="C:\\Users\\Default\\AppData\\LocalLow\\", nBufferLength=0x105, lpBuffer=0x31e298, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\Default\\AppData\\LocalLow\\", lpFilePart=0x0) returned 0x22 [0093.685] FindFirstFileW (in: lpFileName="C:\\Users\\Default\\AppData\\LocalLow\\*", lpFindFileData=0x31e4e4 | out: lpFindFileData=0x31e4e4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x6320600, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x6320600, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x23a1d229, ftLastWriteTime.dwHighDateTime=0x1cb892f, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x381e40 [0093.686] FindNextFileW (in: hFindFile=0x381e40, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x6320600, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x6320600, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x23a1d229, ftLastWriteTime.dwHighDateTime=0x1cb892f, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0093.686] FindNextFileW (in: hFindFile=0x381e40, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x2014, ftCreationTime.dwLowDateTime=0x6320600, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x6320600, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x23a1d229, ftLastWriteTime.dwHighDateTime=0x1cb892f, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft", cAlternateFileName="MICROS~1")) returned 1 [0093.686] FindNextFileW (in: hFindFile=0x381e40, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0093.686] FindClose (in: hFindFile=0x381e40 | out: hFindFile=0x381e40) returned 1 [0093.686] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e77c) returned 1 [0093.686] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e788) returned 1 [0093.686] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e744) returned 1 [0093.686] GetFullPathNameW (in: lpFileName="C:\\Users\\Default\\AppData\\LocalLow\\Microsoft", nBufferLength=0x105, lpBuffer=0x31e24c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\Default\\AppData\\LocalLow\\Microsoft", lpFilePart=0x0) returned 0x2b [0093.686] GetFullPathNameW (in: lpFileName="C:\\Users\\Default\\AppData\\LocalLow\\Microsoft\\", nBufferLength=0x105, lpBuffer=0x31e220, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\Default\\AppData\\LocalLow\\Microsoft\\", lpFilePart=0x0) returned 0x2c [0093.686] FindFirstFileW (in: lpFileName="C:\\Users\\Default\\AppData\\LocalLow\\Microsoft\\*", lpFindFileData=0x31e46c | out: lpFindFileData=0x31e46c*(dwFileAttributes=0x2014, ftCreationTime.dwLowDateTime=0x6320600, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x6320600, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x23a1d229, ftLastWriteTime.dwHighDateTime=0x1cb892f, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x381e40 [0093.687] FindNextFileW (in: hFindFile=0x381e40, lpFindFileData=0x31e47c | out: lpFindFileData=0x31e47c*(dwFileAttributes=0x2014, ftCreationTime.dwLowDateTime=0x6320600, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x6320600, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x23a1d229, ftLastWriteTime.dwHighDateTime=0x1cb892f, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0093.687] FindNextFileW (in: hFindFile=0x381e40, lpFindFileData=0x31e47c | out: lpFindFileData=0x31e47c*(dwFileAttributes=0x2014, ftCreationTime.dwLowDateTime=0x6320600, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x6320600, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x23a43389, ftLastWriteTime.dwHighDateTime=0x1cb892f, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="CryptnetUrlCache", cAlternateFileName="CRYPTN~1")) returned 1 [0093.687] FindNextFileW (in: hFindFile=0x381e40, lpFindFileData=0x31e47c | out: lpFindFileData=0x31e47c*(dwFileAttributes=0x2014, ftCreationTime.dwLowDateTime=0x6320600, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x6320600, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x23a43389, ftLastWriteTime.dwHighDateTime=0x1cb892f, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="CryptnetUrlCache", cAlternateFileName="CRYPTN~1")) returned 0 [0093.687] FindClose (in: hFindFile=0x381e40 | out: hFindFile=0x381e40) returned 1 [0093.687] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e704) returned 1 [0093.687] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e710) returned 1 [0093.687] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e744) returned 1 [0093.687] GetFullPathNameW (in: lpFileName="C:\\Users\\Default\\AppData\\LocalLow\\Microsoft", nBufferLength=0x105, lpBuffer=0x31e24c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\Default\\AppData\\LocalLow\\Microsoft", lpFilePart=0x0) returned 0x2b [0093.687] GetFullPathNameW (in: lpFileName="C:\\Users\\Default\\AppData\\LocalLow\\Microsoft\\", nBufferLength=0x105, lpBuffer=0x31e220, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\Default\\AppData\\LocalLow\\Microsoft\\", lpFilePart=0x0) returned 0x2c [0093.687] FindFirstFileW (in: lpFileName="C:\\Users\\Default\\AppData\\LocalLow\\Microsoft\\*", lpFindFileData=0x31e46c | out: lpFindFileData=0x31e46c*(dwFileAttributes=0x2014, ftCreationTime.dwLowDateTime=0x6320600, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x6320600, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x23a1d229, ftLastWriteTime.dwHighDateTime=0x1cb892f, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x381e40 [0093.688] FindNextFileW (in: hFindFile=0x381e40, lpFindFileData=0x31e47c | out: lpFindFileData=0x31e47c*(dwFileAttributes=0x2014, ftCreationTime.dwLowDateTime=0x6320600, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x6320600, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x23a1d229, ftLastWriteTime.dwHighDateTime=0x1cb892f, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0093.688] FindNextFileW (in: hFindFile=0x381e40, lpFindFileData=0x31e47c | out: lpFindFileData=0x31e47c*(dwFileAttributes=0x2014, ftCreationTime.dwLowDateTime=0x6320600, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x6320600, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x23a43389, ftLastWriteTime.dwHighDateTime=0x1cb892f, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="CryptnetUrlCache", cAlternateFileName="CRYPTN~1")) returned 1 [0093.688] FindNextFileW (in: hFindFile=0x381e40, lpFindFileData=0x31e47c | out: lpFindFileData=0x31e47c*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0093.688] FindClose (in: hFindFile=0x381e40 | out: hFindFile=0x381e40) returned 1 [0093.688] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e704) returned 1 [0093.688] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e710) returned 1 [0093.688] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e6cc) returned 1 [0093.688] GetFullPathNameW (in: lpFileName="C:\\Users\\Default\\AppData\\LocalLow\\Microsoft\\CryptnetUrlCache", nBufferLength=0x105, lpBuffer=0x31e1d4, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\Default\\AppData\\LocalLow\\Microsoft\\CryptnetUrlCache", lpFilePart=0x0) returned 0x3c [0093.688] GetFullPathNameW (in: lpFileName="C:\\Users\\Default\\AppData\\LocalLow\\Microsoft\\CryptnetUrlCache\\", nBufferLength=0x105, lpBuffer=0x31e1a8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\Default\\AppData\\LocalLow\\Microsoft\\CryptnetUrlCache\\", lpFilePart=0x0) returned 0x3d [0093.688] FindFirstFileW (in: lpFileName="C:\\Users\\Default\\AppData\\LocalLow\\Microsoft\\CryptnetUrlCache\\*", lpFindFileData=0x31e3f4 | out: lpFindFileData=0x31e3f4*(dwFileAttributes=0x2014, ftCreationTime.dwLowDateTime=0x6320600, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x6320600, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x23a43389, ftLastWriteTime.dwHighDateTime=0x1cb892f, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x381e40 [0093.688] FindNextFileW (in: hFindFile=0x381e40, lpFindFileData=0x31e404 | out: lpFindFileData=0x31e404*(dwFileAttributes=0x2014, ftCreationTime.dwLowDateTime=0x6320600, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x6320600, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x23a43389, ftLastWriteTime.dwHighDateTime=0x1cb892f, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0093.689] FindNextFileW (in: hFindFile=0x381e40, lpFindFileData=0x31e404 | out: lpFindFileData=0x31e404*(dwFileAttributes=0x2014, ftCreationTime.dwLowDateTime=0x6320600, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x6451100, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x23a43389, ftLastWriteTime.dwHighDateTime=0x1cb892f, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Content", cAlternateFileName="")) returned 1 [0093.689] FindNextFileW (in: hFindFile=0x381e40, lpFindFileData=0x31e404 | out: lpFindFileData=0x31e404*(dwFileAttributes=0x2014, ftCreationTime.dwLowDateTime=0x6320600, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x6451100, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x23a43389, ftLastWriteTime.dwHighDateTime=0x1cb892f, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="MetaData", cAlternateFileName="")) returned 1 [0093.689] FindNextFileW (in: hFindFile=0x381e40, lpFindFileData=0x31e404 | out: lpFindFileData=0x31e404*(dwFileAttributes=0x2014, ftCreationTime.dwLowDateTime=0x6320600, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x6451100, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x23a43389, ftLastWriteTime.dwHighDateTime=0x1cb892f, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="MetaData", cAlternateFileName="")) returned 0 [0093.689] FindClose (in: hFindFile=0x381e40 | out: hFindFile=0x381e40) returned 1 [0093.689] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e68c) returned 1 [0093.689] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e698) returned 1 [0093.689] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e6cc) returned 1 [0093.689] GetFullPathNameW (in: lpFileName="C:\\Users\\Default\\AppData\\LocalLow\\Microsoft\\CryptnetUrlCache", nBufferLength=0x105, lpBuffer=0x31e1d4, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\Default\\AppData\\LocalLow\\Microsoft\\CryptnetUrlCache", lpFilePart=0x0) returned 0x3c [0093.689] GetFullPathNameW (in: lpFileName="C:\\Users\\Default\\AppData\\LocalLow\\Microsoft\\CryptnetUrlCache\\", nBufferLength=0x105, lpBuffer=0x31e1a8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\Default\\AppData\\LocalLow\\Microsoft\\CryptnetUrlCache\\", lpFilePart=0x0) returned 0x3d [0093.689] FindFirstFileW (in: lpFileName="C:\\Users\\Default\\AppData\\LocalLow\\Microsoft\\CryptnetUrlCache\\*", lpFindFileData=0x31e3f4 | out: lpFindFileData=0x31e3f4*(dwFileAttributes=0x2014, ftCreationTime.dwLowDateTime=0x6320600, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x6320600, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x23a43389, ftLastWriteTime.dwHighDateTime=0x1cb892f, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x381e40 [0093.689] FindNextFileW (in: hFindFile=0x381e40, lpFindFileData=0x31e404 | out: lpFindFileData=0x31e404*(dwFileAttributes=0x2014, ftCreationTime.dwLowDateTime=0x6320600, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x6320600, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x23a43389, ftLastWriteTime.dwHighDateTime=0x1cb892f, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0093.690] FindNextFileW (in: hFindFile=0x381e40, lpFindFileData=0x31e404 | out: lpFindFileData=0x31e404*(dwFileAttributes=0x2014, ftCreationTime.dwLowDateTime=0x6320600, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x6451100, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x23a43389, ftLastWriteTime.dwHighDateTime=0x1cb892f, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Content", cAlternateFileName="")) returned 1 [0093.690] FindNextFileW (in: hFindFile=0x381e40, lpFindFileData=0x31e404 | out: lpFindFileData=0x31e404*(dwFileAttributes=0x2014, ftCreationTime.dwLowDateTime=0x6320600, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x6451100, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x23a43389, ftLastWriteTime.dwHighDateTime=0x1cb892f, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="MetaData", cAlternateFileName="")) returned 1 [0093.690] FindNextFileW (in: hFindFile=0x381e40, lpFindFileData=0x31e404 | out: lpFindFileData=0x31e404*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0093.690] FindClose (in: hFindFile=0x381e40 | out: hFindFile=0x381e40) returned 1 [0093.690] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e68c) returned 1 [0093.690] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e698) returned 1 [0093.690] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e654) returned 1 [0093.690] GetFullPathNameW (in: lpFileName="C:\\Users\\Default\\AppData\\LocalLow\\Microsoft\\CryptnetUrlCache\\Content", nBufferLength=0x105, lpBuffer=0x31e15c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\Default\\AppData\\LocalLow\\Microsoft\\CryptnetUrlCache\\Content", lpFilePart=0x0) returned 0x44 [0093.690] GetFullPathNameW (in: lpFileName="C:\\Users\\Default\\AppData\\LocalLow\\Microsoft\\CryptnetUrlCache\\Content\\", nBufferLength=0x105, lpBuffer=0x31e130, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\Default\\AppData\\LocalLow\\Microsoft\\CryptnetUrlCache\\Content\\", lpFilePart=0x0) returned 0x45 [0093.690] FindFirstFileW (in: lpFileName="C:\\Users\\Default\\AppData\\LocalLow\\Microsoft\\CryptnetUrlCache\\Content\\*", lpFindFileData=0x31e37c | out: lpFindFileData=0x31e37c*(dwFileAttributes=0x2014, ftCreationTime.dwLowDateTime=0x6320600, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x6451100, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x23a43389, ftLastWriteTime.dwHighDateTime=0x1cb892f, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x381e40 [0093.690] FindNextFileW (in: hFindFile=0x381e40, lpFindFileData=0x31e38c | out: lpFindFileData=0x31e38c*(dwFileAttributes=0x2014, ftCreationTime.dwLowDateTime=0x6320600, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x6451100, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x23a43389, ftLastWriteTime.dwHighDateTime=0x1cb892f, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0093.691] FindNextFileW (in: hFindFile=0x381e40, lpFindFileData=0x31e38c | out: lpFindFileData=0x31e38c*(dwFileAttributes=0x2024, ftCreationTime.dwLowDateTime=0x6451100, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x6451100, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x23a43389, ftLastWriteTime.dwHighDateTime=0x1cb892f, nFileSizeHigh=0x0, nFileSizeLow=0x228, dwReserved0=0x0, dwReserved1=0x0, cFileName="7B2238AACCEDC3F1FFE8E7EB5F575EC9", cAlternateFileName="7B2238~1")) returned 1 [0093.691] FindNextFileW (in: hFindFile=0x381e40, lpFindFileData=0x31e38c | out: lpFindFileData=0x31e38c*(dwFileAttributes=0x2024, ftCreationTime.dwLowDateTime=0x6451100, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x6451100, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x23a43389, ftLastWriteTime.dwHighDateTime=0x1cb892f, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="94308059B57B3142E455B38A6EB92015", cAlternateFileName="943080~1")) returned 1 [0093.691] FindNextFileW (in: hFindFile=0x381e40, lpFindFileData=0x31e38c | out: lpFindFileData=0x31e38c*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0093.691] FindClose (in: hFindFile=0x381e40 | out: hFindFile=0x381e40) returned 1 [0093.691] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e614) returned 1 [0093.691] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e620) returned 1 [0093.691] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e654) returned 1 [0093.691] GetFullPathNameW (in: lpFileName="C:\\Users\\Default\\AppData\\LocalLow\\Microsoft\\CryptnetUrlCache\\Content", nBufferLength=0x105, lpBuffer=0x31e15c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\Default\\AppData\\LocalLow\\Microsoft\\CryptnetUrlCache\\Content", lpFilePart=0x0) returned 0x44 [0093.691] GetFullPathNameW (in: lpFileName="C:\\Users\\Default\\AppData\\LocalLow\\Microsoft\\CryptnetUrlCache\\Content\\", nBufferLength=0x105, lpBuffer=0x31e130, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\Default\\AppData\\LocalLow\\Microsoft\\CryptnetUrlCache\\Content\\", lpFilePart=0x0) returned 0x45 [0093.691] FindFirstFileW (in: lpFileName="C:\\Users\\Default\\AppData\\LocalLow\\Microsoft\\CryptnetUrlCache\\Content\\*", lpFindFileData=0x31e37c | out: lpFindFileData=0x31e37c*(dwFileAttributes=0x2014, ftCreationTime.dwLowDateTime=0x6320600, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x6451100, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x23a43389, ftLastWriteTime.dwHighDateTime=0x1cb892f, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x381e40 [0093.691] FindNextFileW (in: hFindFile=0x381e40, lpFindFileData=0x31e38c | out: lpFindFileData=0x31e38c*(dwFileAttributes=0x2014, ftCreationTime.dwLowDateTime=0x6320600, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x6451100, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x23a43389, ftLastWriteTime.dwHighDateTime=0x1cb892f, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0093.692] FindNextFileW (in: hFindFile=0x381e40, lpFindFileData=0x31e38c | out: lpFindFileData=0x31e38c*(dwFileAttributes=0x2024, ftCreationTime.dwLowDateTime=0x6451100, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x6451100, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x23a43389, ftLastWriteTime.dwHighDateTime=0x1cb892f, nFileSizeHigh=0x0, nFileSizeLow=0x228, dwReserved0=0x0, dwReserved1=0x0, cFileName="7B2238AACCEDC3F1FFE8E7EB5F575EC9", cAlternateFileName="7B2238~1")) returned 1 [0093.692] FindNextFileW (in: hFindFile=0x381e40, lpFindFileData=0x31e38c | out: lpFindFileData=0x31e38c*(dwFileAttributes=0x2024, ftCreationTime.dwLowDateTime=0x6451100, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x6451100, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x23a43389, ftLastWriteTime.dwHighDateTime=0x1cb892f, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="94308059B57B3142E455B38A6EB92015", cAlternateFileName="943080~1")) returned 1 [0093.692] FindNextFileW (in: hFindFile=0x381e40, lpFindFileData=0x31e38c | out: lpFindFileData=0x31e38c*(dwFileAttributes=0x2024, ftCreationTime.dwLowDateTime=0x6451100, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x6451100, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x23a43389, ftLastWriteTime.dwHighDateTime=0x1cb892f, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="94308059B57B3142E455B38A6EB92015", cAlternateFileName="943080~1")) returned 0 [0093.692] FindClose (in: hFindFile=0x381e40 | out: hFindFile=0x381e40) returned 1 [0093.692] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e614) returned 1 [0093.692] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e620) returned 1 [0093.692] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e654) returned 1 [0093.692] GetFullPathNameW (in: lpFileName="C:\\Users\\Default\\AppData\\LocalLow\\Microsoft\\CryptnetUrlCache\\MetaData", nBufferLength=0x105, lpBuffer=0x31e15c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\Default\\AppData\\LocalLow\\Microsoft\\CryptnetUrlCache\\MetaData", lpFilePart=0x0) returned 0x45 [0093.692] GetFullPathNameW (in: lpFileName="C:\\Users\\Default\\AppData\\LocalLow\\Microsoft\\CryptnetUrlCache\\MetaData\\", nBufferLength=0x105, lpBuffer=0x31e130, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\Default\\AppData\\LocalLow\\Microsoft\\CryptnetUrlCache\\MetaData\\", lpFilePart=0x0) returned 0x46 [0093.692] FindFirstFileW (in: lpFileName="C:\\Users\\Default\\AppData\\LocalLow\\Microsoft\\CryptnetUrlCache\\MetaData\\*", lpFindFileData=0x31e37c | out: lpFindFileData=0x31e37c*(dwFileAttributes=0x2014, ftCreationTime.dwLowDateTime=0x6320600, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x6451100, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x23a43389, ftLastWriteTime.dwHighDateTime=0x1cb892f, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x381e40 [0093.693] FindNextFileW (in: hFindFile=0x381e40, lpFindFileData=0x31e38c | out: lpFindFileData=0x31e38c*(dwFileAttributes=0x2014, ftCreationTime.dwLowDateTime=0x6320600, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x6451100, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x23a43389, ftLastWriteTime.dwHighDateTime=0x1cb892f, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0093.693] FindNextFileW (in: hFindFile=0x381e40, lpFindFileData=0x31e38c | out: lpFindFileData=0x31e38c*(dwFileAttributes=0x2024, ftCreationTime.dwLowDateTime=0x6451100, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x6451100, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x23a43389, ftLastWriteTime.dwHighDateTime=0x1cb892f, nFileSizeHigh=0x0, nFileSizeLow=0x104, dwReserved0=0x0, dwReserved1=0x0, cFileName="7B2238AACCEDC3F1FFE8E7EB5F575EC9", cAlternateFileName="7B2238~1")) returned 1 [0093.693] FindNextFileW (in: hFindFile=0x381e40, lpFindFileData=0x31e38c | out: lpFindFileData=0x31e38c*(dwFileAttributes=0x2024, ftCreationTime.dwLowDateTime=0x642afa0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x642afa0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x23a43389, ftLastWriteTime.dwHighDateTime=0x1cb892f, nFileSizeHigh=0x0, nFileSizeLow=0x130, dwReserved0=0x0, dwReserved1=0x0, cFileName="94308059B57B3142E455B38A6EB92015", cAlternateFileName="943080~1")) returned 1 [0093.693] FindNextFileW (in: hFindFile=0x381e40, lpFindFileData=0x31e38c | out: lpFindFileData=0x31e38c*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0093.693] FindClose (in: hFindFile=0x381e40 | out: hFindFile=0x381e40) returned 1 [0093.693] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e614) returned 1 [0093.693] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e620) returned 1 [0093.693] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e654) returned 1 [0093.693] GetFullPathNameW (in: lpFileName="C:\\Users\\Default\\AppData\\LocalLow\\Microsoft\\CryptnetUrlCache\\MetaData", nBufferLength=0x105, lpBuffer=0x31e15c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\Default\\AppData\\LocalLow\\Microsoft\\CryptnetUrlCache\\MetaData", lpFilePart=0x0) returned 0x45 [0093.693] GetFullPathNameW (in: lpFileName="C:\\Users\\Default\\AppData\\LocalLow\\Microsoft\\CryptnetUrlCache\\MetaData\\", nBufferLength=0x105, lpBuffer=0x31e130, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\Default\\AppData\\LocalLow\\Microsoft\\CryptnetUrlCache\\MetaData\\", lpFilePart=0x0) returned 0x46 [0093.693] FindFirstFileW (in: lpFileName="C:\\Users\\Default\\AppData\\LocalLow\\Microsoft\\CryptnetUrlCache\\MetaData\\*", lpFindFileData=0x31e37c | out: lpFindFileData=0x31e37c*(dwFileAttributes=0x2014, ftCreationTime.dwLowDateTime=0x6320600, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x6451100, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x23a43389, ftLastWriteTime.dwHighDateTime=0x1cb892f, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x381e40 [0093.701] FindNextFileW (in: hFindFile=0x381e40, lpFindFileData=0x31e38c | out: lpFindFileData=0x31e38c*(dwFileAttributes=0x2014, ftCreationTime.dwLowDateTime=0x6320600, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x6451100, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x23a43389, ftLastWriteTime.dwHighDateTime=0x1cb892f, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0093.701] FindNextFileW (in: hFindFile=0x381e40, lpFindFileData=0x31e38c | out: lpFindFileData=0x31e38c*(dwFileAttributes=0x2024, ftCreationTime.dwLowDateTime=0x6451100, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x6451100, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x23a43389, ftLastWriteTime.dwHighDateTime=0x1cb892f, nFileSizeHigh=0x0, nFileSizeLow=0x104, dwReserved0=0x0, dwReserved1=0x0, cFileName="7B2238AACCEDC3F1FFE8E7EB5F575EC9", cAlternateFileName="7B2238~1")) returned 1 [0093.701] FindNextFileW (in: hFindFile=0x381e40, lpFindFileData=0x31e38c | out: lpFindFileData=0x31e38c*(dwFileAttributes=0x2024, ftCreationTime.dwLowDateTime=0x642afa0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x642afa0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x23a43389, ftLastWriteTime.dwHighDateTime=0x1cb892f, nFileSizeHigh=0x0, nFileSizeLow=0x130, dwReserved0=0x0, dwReserved1=0x0, cFileName="94308059B57B3142E455B38A6EB92015", cAlternateFileName="943080~1")) returned 1 [0093.701] FindNextFileW (in: hFindFile=0x381e40, lpFindFileData=0x31e38c | out: lpFindFileData=0x31e38c*(dwFileAttributes=0x2024, ftCreationTime.dwLowDateTime=0x642afa0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x642afa0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x23a43389, ftLastWriteTime.dwHighDateTime=0x1cb892f, nFileSizeHigh=0x0, nFileSizeLow=0x130, dwReserved0=0x0, dwReserved1=0x0, cFileName="94308059B57B3142E455B38A6EB92015", cAlternateFileName="943080~1")) returned 0 [0093.701] FindClose (in: hFindFile=0x381e40 | out: hFindFile=0x381e40) returned 1 [0093.702] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e614) returned 1 [0093.702] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e620) returned 1 [0093.702] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e7bc) returned 1 [0093.702] GetFullPathNameW (in: lpFileName="C:\\Users\\Default\\AppData\\Roaming", nBufferLength=0x105, lpBuffer=0x31e2c4, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\Default\\AppData\\Roaming", lpFilePart=0x0) returned 0x20 [0093.702] GetFullPathNameW (in: lpFileName="C:\\Users\\Default\\AppData\\Roaming\\", nBufferLength=0x105, lpBuffer=0x31e298, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\Default\\AppData\\Roaming\\", lpFilePart=0x0) returned 0x21 [0093.702] FindFirstFileW (in: lpFileName="C:\\Users\\Default\\AppData\\Roaming\\*", lpFindFileData=0x31e4e4 | out: lpFindFileData=0x31e4e4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xfda27f60, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x6320600, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xf2c805c8, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x381e40 [0093.702] FindNextFileW (in: hFindFile=0x381e40, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xfda27f60, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x6320600, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xf2c805c8, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0093.702] FindNextFileW (in: hFindFile=0x381e40, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x6320600, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x6320600, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xf2c805c8, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Identities", cAlternateFileName="IDENTI~1")) returned 1 [0093.702] FindNextFileW (in: hFindFile=0x381e40, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x2014, ftCreationTime.dwLowDateTime=0xfda27f60, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x6320600, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x160a67d7, ftLastWriteTime.dwHighDateTime=0x1cb8927, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft", cAlternateFileName="MICROS~1")) returned 1 [0093.703] FindNextFileW (in: hFindFile=0x381e40, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x2014, ftCreationTime.dwLowDateTime=0xfda27f60, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x6320600, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x160a67d7, ftLastWriteTime.dwHighDateTime=0x1cb8927, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft", cAlternateFileName="MICROS~1")) returned 0 [0093.703] FindClose (in: hFindFile=0x381e40 | out: hFindFile=0x381e40) returned 1 [0093.703] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e77c) returned 1 [0093.703] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e788) returned 1 [0093.703] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e7bc) returned 1 [0093.703] GetFullPathNameW (in: lpFileName="C:\\Users\\Default\\AppData\\Roaming", nBufferLength=0x105, lpBuffer=0x31e2c4, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\Default\\AppData\\Roaming", lpFilePart=0x0) returned 0x20 [0093.703] GetFullPathNameW (in: lpFileName="C:\\Users\\Default\\AppData\\Roaming\\", nBufferLength=0x105, lpBuffer=0x31e298, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\Default\\AppData\\Roaming\\", lpFilePart=0x0) returned 0x21 [0093.703] FindFirstFileW (in: lpFileName="C:\\Users\\Default\\AppData\\Roaming\\*", lpFindFileData=0x31e4e4 | out: lpFindFileData=0x31e4e4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xfda27f60, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x6320600, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xf2c805c8, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x381e40 [0093.703] FindNextFileW (in: hFindFile=0x381e40, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xfda27f60, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x6320600, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xf2c805c8, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0093.703] FindNextFileW (in: hFindFile=0x381e40, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x6320600, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x6320600, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xf2c805c8, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Identities", cAlternateFileName="IDENTI~1")) returned 1 [0093.703] FindNextFileW (in: hFindFile=0x381e40, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x2014, ftCreationTime.dwLowDateTime=0xfda27f60, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x6320600, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x160a67d7, ftLastWriteTime.dwHighDateTime=0x1cb8927, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft", cAlternateFileName="MICROS~1")) returned 1 [0093.704] FindNextFileW (in: hFindFile=0x381e40, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0093.704] FindClose (in: hFindFile=0x381e40 | out: hFindFile=0x381e40) returned 1 [0093.704] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e77c) returned 1 [0093.704] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e788) returned 1 [0093.704] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e744) returned 1 [0093.704] GetFullPathNameW (in: lpFileName="C:\\Users\\Default\\AppData\\Roaming\\Identities", nBufferLength=0x105, lpBuffer=0x31e24c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\Default\\AppData\\Roaming\\Identities", lpFilePart=0x0) returned 0x2b [0093.704] GetFullPathNameW (in: lpFileName="C:\\Users\\Default\\AppData\\Roaming\\Identities\\", nBufferLength=0x105, lpBuffer=0x31e220, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\Default\\AppData\\Roaming\\Identities\\", lpFilePart=0x0) returned 0x2c [0093.704] FindFirstFileW (in: lpFileName="C:\\Users\\Default\\AppData\\Roaming\\Identities\\*", lpFindFileData=0x31e46c | out: lpFindFileData=0x31e46c*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x6320600, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x6320600, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xf2c805c8, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x381e40 [0093.705] FindNextFileW (in: hFindFile=0x381e40, lpFindFileData=0x31e47c | out: lpFindFileData=0x31e47c*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x6320600, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x6320600, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xf2c805c8, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0093.705] FindNextFileW (in: hFindFile=0x381e40, lpFindFileData=0x31e47c | out: lpFindFileData=0x31e47c*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x6320600, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x6320600, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xf2c805c8, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="{31810C36-5D23-4CCE-A3B4-316DED195C38}", cAlternateFileName="{31810~1")) returned 1 [0093.706] FindNextFileW (in: hFindFile=0x381e40, lpFindFileData=0x31e47c | out: lpFindFileData=0x31e47c*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x6320600, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x6320600, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xf2c805c8, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="{31810C36-5D23-4CCE-A3B4-316DED195C38}", cAlternateFileName="{31810~1")) returned 0 [0093.706] FindClose (in: hFindFile=0x381e40 | out: hFindFile=0x381e40) returned 1 [0093.706] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e704) returned 1 [0093.706] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e710) returned 1 [0093.706] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e744) returned 1 [0093.706] GetFullPathNameW (in: lpFileName="C:\\Users\\Default\\AppData\\Roaming\\Identities", nBufferLength=0x105, lpBuffer=0x31e24c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\Default\\AppData\\Roaming\\Identities", lpFilePart=0x0) returned 0x2b [0093.706] GetFullPathNameW (in: lpFileName="C:\\Users\\Default\\AppData\\Roaming\\Identities\\", nBufferLength=0x105, lpBuffer=0x31e220, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\Default\\AppData\\Roaming\\Identities\\", lpFilePart=0x0) returned 0x2c [0093.706] FindFirstFileW (in: lpFileName="C:\\Users\\Default\\AppData\\Roaming\\Identities\\*", lpFindFileData=0x31e46c | out: lpFindFileData=0x31e46c*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x6320600, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x6320600, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xf2c805c8, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x381e40 [0093.706] FindNextFileW (in: hFindFile=0x381e40, lpFindFileData=0x31e47c | out: lpFindFileData=0x31e47c*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x6320600, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x6320600, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xf2c805c8, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0093.706] FindNextFileW (in: hFindFile=0x381e40, lpFindFileData=0x31e47c | out: lpFindFileData=0x31e47c*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x6320600, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x6320600, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xf2c805c8, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="{31810C36-5D23-4CCE-A3B4-316DED195C38}", cAlternateFileName="{31810~1")) returned 1 [0093.707] FindNextFileW (in: hFindFile=0x381e40, lpFindFileData=0x31e47c | out: lpFindFileData=0x31e47c*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0093.707] FindClose (in: hFindFile=0x381e40 | out: hFindFile=0x381e40) returned 1 [0093.707] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e704) returned 1 [0093.707] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e710) returned 1 [0093.707] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e6cc) returned 1 [0093.707] GetFullPathNameW (in: lpFileName="C:\\Users\\Default\\AppData\\Roaming\\Identities\\{31810C36-5D23-4CCE-A3B4-316DED195C38}", nBufferLength=0x105, lpBuffer=0x31e1d4, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\Default\\AppData\\Roaming\\Identities\\{31810C36-5D23-4CCE-A3B4-316DED195C38}", lpFilePart=0x0) returned 0x52 [0093.707] GetFullPathNameW (in: lpFileName="C:\\Users\\Default\\AppData\\Roaming\\Identities\\{31810C36-5D23-4CCE-A3B4-316DED195C38}\\", nBufferLength=0x105, lpBuffer=0x31e1a8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\Default\\AppData\\Roaming\\Identities\\{31810C36-5D23-4CCE-A3B4-316DED195C38}\\", lpFilePart=0x0) returned 0x53 [0093.707] FindFirstFileW (in: lpFileName="C:\\Users\\Default\\AppData\\Roaming\\Identities\\{31810C36-5D23-4CCE-A3B4-316DED195C38}\\*", lpFindFileData=0x31e3f4 | out: lpFindFileData=0x31e3f4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x6320600, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x6320600, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xf2c805c8, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x381e40 [0093.707] FindNextFileW (in: hFindFile=0x381e40, lpFindFileData=0x31e404 | out: lpFindFileData=0x31e404*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x6320600, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x6320600, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xf2c805c8, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0093.707] FindNextFileW (in: hFindFile=0x381e40, lpFindFileData=0x31e404 | out: lpFindFileData=0x31e404*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x6320600, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x6320600, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xf2c805c8, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 0 [0093.707] FindClose (in: hFindFile=0x381e40 | out: hFindFile=0x381e40) returned 1 [0093.708] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e68c) returned 1 [0093.708] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e698) returned 1 [0093.708] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e6cc) returned 1 [0093.708] GetFullPathNameW (in: lpFileName="C:\\Users\\Default\\AppData\\Roaming\\Identities\\{31810C36-5D23-4CCE-A3B4-316DED195C38}", nBufferLength=0x105, lpBuffer=0x31e1d4, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\Default\\AppData\\Roaming\\Identities\\{31810C36-5D23-4CCE-A3B4-316DED195C38}", lpFilePart=0x0) returned 0x52 [0093.708] GetFullPathNameW (in: lpFileName="C:\\Users\\Default\\AppData\\Roaming\\Identities\\{31810C36-5D23-4CCE-A3B4-316DED195C38}\\", nBufferLength=0x105, lpBuffer=0x31e1a8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\Default\\AppData\\Roaming\\Identities\\{31810C36-5D23-4CCE-A3B4-316DED195C38}\\", lpFilePart=0x0) returned 0x53 [0093.708] FindFirstFileW (in: lpFileName="C:\\Users\\Default\\AppData\\Roaming\\Identities\\{31810C36-5D23-4CCE-A3B4-316DED195C38}\\*", lpFindFileData=0x31e3f4 | out: lpFindFileData=0x31e3f4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x6320600, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x6320600, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xf2c805c8, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x381e40 [0093.708] FindNextFileW (in: hFindFile=0x381e40, lpFindFileData=0x31e404 | out: lpFindFileData=0x31e404*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x6320600, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x6320600, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xf2c805c8, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0093.708] FindNextFileW (in: hFindFile=0x381e40, lpFindFileData=0x31e404 | out: lpFindFileData=0x31e404*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x6320600, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x6320600, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xf2c805c8, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 0 [0093.708] FindClose (in: hFindFile=0x381e40 | out: hFindFile=0x381e40) returned 1 [0093.708] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e68c) returned 1 [0093.708] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e698) returned 1 [0093.708] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e744) returned 1 [0093.708] GetFullPathNameW (in: lpFileName="C:\\Users\\Default\\AppData\\Roaming\\Microsoft", nBufferLength=0x105, lpBuffer=0x31e24c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\Default\\AppData\\Roaming\\Microsoft", lpFilePart=0x0) returned 0x2a [0093.708] GetFullPathNameW (in: lpFileName="C:\\Users\\Default\\AppData\\Roaming\\Microsoft\\", nBufferLength=0x105, lpBuffer=0x31e220, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\Default\\AppData\\Roaming\\Microsoft\\", lpFilePart=0x0) returned 0x2b [0093.708] FindFirstFileW (in: lpFileName="C:\\Users\\Default\\AppData\\Roaming\\Microsoft\\*", lpFindFileData=0x31e46c | out: lpFindFileData=0x31e46c*(dwFileAttributes=0x2014, ftCreationTime.dwLowDateTime=0xfda27f60, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x6320600, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x160a67d7, ftLastWriteTime.dwHighDateTime=0x1cb8927, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x381e40 [0093.715] FindNextFileW (in: hFindFile=0x381e40, lpFindFileData=0x31e47c | out: lpFindFileData=0x31e47c*(dwFileAttributes=0x2014, ftCreationTime.dwLowDateTime=0xfda27f60, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x6320600, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x160a67d7, ftLastWriteTime.dwHighDateTime=0x1cb8927, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0093.715] FindNextFileW (in: hFindFile=0x381e40, lpFindFileData=0x31e47c | out: lpFindFileData=0x31e47c*(dwFileAttributes=0x2014, ftCreationTime.dwLowDateTime=0x6320600, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x6320600, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xea43994d, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Credentials", cAlternateFileName="CREDEN~1")) returned 1 [0093.715] FindNextFileW (in: hFindFile=0x381e40, lpFindFileData=0x31e47c | out: lpFindFileData=0x31e47c*(dwFileAttributes=0x2014, ftCreationTime.dwLowDateTime=0x6320600, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x6320600, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x160a67d7, ftLastWriteTime.dwHighDateTime=0x1cb8927, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Crypto", cAlternateFileName="")) returned 1 [0093.715] FindNextFileW (in: hFindFile=0x381e40, lpFindFileData=0x31e47c | out: lpFindFileData=0x31e47c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfda27f60, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfda27f60, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xfda27f60, ftLastWriteTime.dwHighDateTime=0x1ca0431, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Internet Explorer", cAlternateFileName="INTERN~1")) returned 1 [0093.716] FindNextFileW (in: hFindFile=0x381e40, lpFindFileData=0x31e47c | out: lpFindFileData=0x31e47c*(dwFileAttributes=0x2014, ftCreationTime.dwLowDateTime=0x62fa4a0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x642afa0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xf29f8e64, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Protect", cAlternateFileName="")) returned 1 [0093.716] FindNextFileW (in: hFindFile=0x381e40, lpFindFileData=0x31e47c | out: lpFindFileData=0x31e47c*(dwFileAttributes=0x2014, ftCreationTime.dwLowDateTime=0x62fa4a0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x62fa4a0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x96779c3, ftLastWriteTime.dwHighDateTime=0x1cb8927, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="SystemCertificates", cAlternateFileName="SYSTEM~1")) returned 1 [0093.716] FindNextFileW (in: hFindFile=0x381e40, lpFindFileData=0x31e47c | out: lpFindFileData=0x31e47c*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xfda27f60, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x62fa4a0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xf96b9c4c, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Windows", cAlternateFileName="")) returned 1 [0093.716] FindNextFileW (in: hFindFile=0x381e40, lpFindFileData=0x31e47c | out: lpFindFileData=0x31e47c*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xfda27f60, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x62fa4a0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xf96b9c4c, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Windows", cAlternateFileName="")) returned 0 [0093.716] FindClose (in: hFindFile=0x381e40 | out: hFindFile=0x381e40) returned 1 [0093.717] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e704) returned 1 [0093.717] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e710) returned 1 [0093.717] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e744) returned 1 [0093.717] GetFullPathNameW (in: lpFileName="C:\\Users\\Default\\AppData\\Roaming\\Microsoft", nBufferLength=0x105, lpBuffer=0x31e24c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\Default\\AppData\\Roaming\\Microsoft", lpFilePart=0x0) returned 0x2a [0093.717] GetFullPathNameW (in: lpFileName="C:\\Users\\Default\\AppData\\Roaming\\Microsoft\\", nBufferLength=0x105, lpBuffer=0x31e220, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\Default\\AppData\\Roaming\\Microsoft\\", lpFilePart=0x0) returned 0x2b [0093.717] FindFirstFileW (in: lpFileName="C:\\Users\\Default\\AppData\\Roaming\\Microsoft\\*", lpFindFileData=0x31e46c | out: lpFindFileData=0x31e46c*(dwFileAttributes=0x2014, ftCreationTime.dwLowDateTime=0xfda27f60, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x6320600, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x160a67d7, ftLastWriteTime.dwHighDateTime=0x1cb8927, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x381e40 [0093.718] FindNextFileW (in: hFindFile=0x381e40, lpFindFileData=0x31e47c | out: lpFindFileData=0x31e47c*(dwFileAttributes=0x2014, ftCreationTime.dwLowDateTime=0xfda27f60, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x6320600, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x160a67d7, ftLastWriteTime.dwHighDateTime=0x1cb8927, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0093.718] FindNextFileW (in: hFindFile=0x381e40, lpFindFileData=0x31e47c | out: lpFindFileData=0x31e47c*(dwFileAttributes=0x2014, ftCreationTime.dwLowDateTime=0x6320600, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x6320600, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xea43994d, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Credentials", cAlternateFileName="CREDEN~1")) returned 1 [0093.718] FindNextFileW (in: hFindFile=0x381e40, lpFindFileData=0x31e47c | out: lpFindFileData=0x31e47c*(dwFileAttributes=0x2014, ftCreationTime.dwLowDateTime=0x6320600, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x6320600, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x160a67d7, ftLastWriteTime.dwHighDateTime=0x1cb8927, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Crypto", cAlternateFileName="")) returned 1 [0093.718] FindNextFileW (in: hFindFile=0x381e40, lpFindFileData=0x31e47c | out: lpFindFileData=0x31e47c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfda27f60, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfda27f60, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xfda27f60, ftLastWriteTime.dwHighDateTime=0x1ca0431, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Internet Explorer", cAlternateFileName="INTERN~1")) returned 1 [0093.718] FindNextFileW (in: hFindFile=0x381e40, lpFindFileData=0x31e47c | out: lpFindFileData=0x31e47c*(dwFileAttributes=0x2014, ftCreationTime.dwLowDateTime=0x62fa4a0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x642afa0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xf29f8e64, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Protect", cAlternateFileName="")) returned 1 [0093.718] FindNextFileW (in: hFindFile=0x381e40, lpFindFileData=0x31e47c | out: lpFindFileData=0x31e47c*(dwFileAttributes=0x2014, ftCreationTime.dwLowDateTime=0x62fa4a0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x62fa4a0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x96779c3, ftLastWriteTime.dwHighDateTime=0x1cb8927, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="SystemCertificates", cAlternateFileName="SYSTEM~1")) returned 1 [0093.718] FindNextFileW (in: hFindFile=0x381e40, lpFindFileData=0x31e47c | out: lpFindFileData=0x31e47c*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xfda27f60, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x62fa4a0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xf96b9c4c, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Windows", cAlternateFileName="")) returned 1 [0093.719] FindNextFileW (in: hFindFile=0x381e40, lpFindFileData=0x31e47c | out: lpFindFileData=0x31e47c*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0093.719] FindClose (in: hFindFile=0x381e40 | out: hFindFile=0x381e40) returned 1 [0093.719] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e704) returned 1 [0093.719] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e710) returned 1 [0093.719] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e6cc) returned 1 [0093.719] GetFullPathNameW (in: lpFileName="C:\\Users\\Default\\AppData\\Roaming\\Microsoft\\Credentials", nBufferLength=0x105, lpBuffer=0x31e1d4, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\Default\\AppData\\Roaming\\Microsoft\\Credentials", lpFilePart=0x0) returned 0x36 [0093.719] GetFullPathNameW (in: lpFileName="C:\\Users\\Default\\AppData\\Roaming\\Microsoft\\Credentials\\", nBufferLength=0x105, lpBuffer=0x31e1a8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\Default\\AppData\\Roaming\\Microsoft\\Credentials\\", lpFilePart=0x0) returned 0x37 [0093.720] FindFirstFileW (in: lpFileName="C:\\Users\\Default\\AppData\\Roaming\\Microsoft\\Credentials\\*", lpFindFileData=0x31e3f4 | out: lpFindFileData=0x31e3f4*(dwFileAttributes=0x2014, ftCreationTime.dwLowDateTime=0x6320600, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x6320600, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xea43994d, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x381e40 [0093.720] FindNextFileW (in: hFindFile=0x381e40, lpFindFileData=0x31e404 | out: lpFindFileData=0x31e404*(dwFileAttributes=0x2014, ftCreationTime.dwLowDateTime=0x6320600, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x6320600, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xea43994d, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0093.721] FindNextFileW (in: hFindFile=0x381e40, lpFindFileData=0x31e404 | out: lpFindFileData=0x31e404*(dwFileAttributes=0x2014, ftCreationTime.dwLowDateTime=0x6320600, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x6320600, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xea43994d, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 0 [0093.721] FindClose (in: hFindFile=0x381e40 | out: hFindFile=0x381e40) returned 1 [0093.721] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e68c) returned 1 [0093.721] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e698) returned 1 [0093.721] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e6cc) returned 1 [0093.721] GetFullPathNameW (in: lpFileName="C:\\Users\\Default\\AppData\\Roaming\\Microsoft\\Credentials", nBufferLength=0x105, lpBuffer=0x31e1d4, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\Default\\AppData\\Roaming\\Microsoft\\Credentials", lpFilePart=0x0) returned 0x36 [0093.721] GetFullPathNameW (in: lpFileName="C:\\Users\\Default\\AppData\\Roaming\\Microsoft\\Credentials\\", nBufferLength=0x105, lpBuffer=0x31e1a8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\Default\\AppData\\Roaming\\Microsoft\\Credentials\\", lpFilePart=0x0) returned 0x37 [0093.721] FindFirstFileW (in: lpFileName="C:\\Users\\Default\\AppData\\Roaming\\Microsoft\\Credentials\\*", lpFindFileData=0x31e3f4 | out: lpFindFileData=0x31e3f4*(dwFileAttributes=0x2014, ftCreationTime.dwLowDateTime=0x6320600, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x6320600, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xea43994d, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x381e40 [0093.721] FindNextFileW (in: hFindFile=0x381e40, lpFindFileData=0x31e404 | out: lpFindFileData=0x31e404*(dwFileAttributes=0x2014, ftCreationTime.dwLowDateTime=0x6320600, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x6320600, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xea43994d, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0093.721] FindNextFileW (in: hFindFile=0x381e40, lpFindFileData=0x31e404 | out: lpFindFileData=0x31e404*(dwFileAttributes=0x2014, ftCreationTime.dwLowDateTime=0x6320600, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x6320600, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xea43994d, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 0 [0093.721] FindClose (in: hFindFile=0x381e40 | out: hFindFile=0x381e40) returned 1 [0093.721] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e68c) returned 1 [0093.721] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e698) returned 1 [0093.721] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e6cc) returned 1 [0093.721] GetFullPathNameW (in: lpFileName="C:\\Users\\Default\\AppData\\Roaming\\Microsoft\\Crypto", nBufferLength=0x105, lpBuffer=0x31e1d4, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\Default\\AppData\\Roaming\\Microsoft\\Crypto", lpFilePart=0x0) returned 0x31 [0093.722] GetFullPathNameW (in: lpFileName="C:\\Users\\Default\\AppData\\Roaming\\Microsoft\\Crypto\\", nBufferLength=0x105, lpBuffer=0x31e1a8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\Default\\AppData\\Roaming\\Microsoft\\Crypto\\", lpFilePart=0x0) returned 0x32 [0093.722] FindFirstFileW (in: lpFileName="C:\\Users\\Default\\AppData\\Roaming\\Microsoft\\Crypto\\*", lpFindFileData=0x31e3f4 | out: lpFindFileData=0x31e3f4*(dwFileAttributes=0x2014, ftCreationTime.dwLowDateTime=0x6320600, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x6320600, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x160a67d7, ftLastWriteTime.dwHighDateTime=0x1cb8927, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x381e40 [0093.722] FindNextFileW (in: hFindFile=0x381e40, lpFindFileData=0x31e404 | out: lpFindFileData=0x31e404*(dwFileAttributes=0x2014, ftCreationTime.dwLowDateTime=0x6320600, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x6320600, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x160a67d7, ftLastWriteTime.dwHighDateTime=0x1cb8927, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0093.722] FindNextFileW (in: hFindFile=0x381e40, lpFindFileData=0x31e404 | out: lpFindFileData=0x31e404*(dwFileAttributes=0x2014, ftCreationTime.dwLowDateTime=0x6320600, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x6320600, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x5af83960, ftLastWriteTime.dwHighDateTime=0x1cb8930, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="RSA", cAlternateFileName="")) returned 1 [0093.722] FindNextFileW (in: hFindFile=0x381e40, lpFindFileData=0x31e404 | out: lpFindFileData=0x31e404*(dwFileAttributes=0x2014, ftCreationTime.dwLowDateTime=0x6320600, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x6320600, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x5af83960, ftLastWriteTime.dwHighDateTime=0x1cb8930, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="RSA", cAlternateFileName="")) returned 0 [0093.722] FindClose (in: hFindFile=0x381e40 | out: hFindFile=0x381e40) returned 1 [0093.722] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e68c) returned 1 [0093.722] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e698) returned 1 [0093.722] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e6cc) returned 1 [0093.722] GetFullPathNameW (in: lpFileName="C:\\Users\\Default\\AppData\\Roaming\\Microsoft\\Crypto", nBufferLength=0x105, lpBuffer=0x31e1d4, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\Default\\AppData\\Roaming\\Microsoft\\Crypto", lpFilePart=0x0) returned 0x31 [0093.722] GetFullPathNameW (in: lpFileName="C:\\Users\\Default\\AppData\\Roaming\\Microsoft\\Crypto\\", nBufferLength=0x105, lpBuffer=0x31e1a8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\Default\\AppData\\Roaming\\Microsoft\\Crypto\\", lpFilePart=0x0) returned 0x32 [0093.723] FindFirstFileW (in: lpFileName="C:\\Users\\Default\\AppData\\Roaming\\Microsoft\\Crypto\\*", lpFindFileData=0x31e3f4 | out: lpFindFileData=0x31e3f4*(dwFileAttributes=0x2014, ftCreationTime.dwLowDateTime=0x6320600, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x6320600, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x160a67d7, ftLastWriteTime.dwHighDateTime=0x1cb8927, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x381e40 [0093.723] FindNextFileW (in: hFindFile=0x381e40, lpFindFileData=0x31e404 | out: lpFindFileData=0x31e404*(dwFileAttributes=0x2014, ftCreationTime.dwLowDateTime=0x6320600, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x6320600, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x160a67d7, ftLastWriteTime.dwHighDateTime=0x1cb8927, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0093.723] FindNextFileW (in: hFindFile=0x381e40, lpFindFileData=0x31e404 | out: lpFindFileData=0x31e404*(dwFileAttributes=0x2014, ftCreationTime.dwLowDateTime=0x6320600, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x6320600, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x5af83960, ftLastWriteTime.dwHighDateTime=0x1cb8930, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="RSA", cAlternateFileName="")) returned 1 [0093.723] FindNextFileW (in: hFindFile=0x381e40, lpFindFileData=0x31e404 | out: lpFindFileData=0x31e404*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0093.723] FindClose (in: hFindFile=0x381e40 | out: hFindFile=0x381e40) returned 1 [0093.723] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e68c) returned 1 [0093.723] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e698) returned 1 [0093.723] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e654) returned 1 [0093.723] GetFullPathNameW (in: lpFileName="C:\\Users\\Default\\AppData\\Roaming\\Microsoft\\Crypto\\RSA", nBufferLength=0x105, lpBuffer=0x31e15c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\Default\\AppData\\Roaming\\Microsoft\\Crypto\\RSA", lpFilePart=0x0) returned 0x35 [0093.723] GetFullPathNameW (in: lpFileName="C:\\Users\\Default\\AppData\\Roaming\\Microsoft\\Crypto\\RSA\\", nBufferLength=0x105, lpBuffer=0x31e130, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\Default\\AppData\\Roaming\\Microsoft\\Crypto\\RSA\\", lpFilePart=0x0) returned 0x36 [0093.723] FindFirstFileW (in: lpFileName="C:\\Users\\Default\\AppData\\Roaming\\Microsoft\\Crypto\\RSA\\*", lpFindFileData=0x31e37c | out: lpFindFileData=0x31e37c*(dwFileAttributes=0x2014, ftCreationTime.dwLowDateTime=0x6320600, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x6320600, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x5af83960, ftLastWriteTime.dwHighDateTime=0x1cb8930, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x381e40 [0093.724] FindNextFileW (in: hFindFile=0x381e40, lpFindFileData=0x31e38c | out: lpFindFileData=0x31e38c*(dwFileAttributes=0x2014, ftCreationTime.dwLowDateTime=0x6320600, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x6320600, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x5af83960, ftLastWriteTime.dwHighDateTime=0x1cb8930, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0093.724] FindNextFileW (in: hFindFile=0x381e40, lpFindFileData=0x31e38c | out: lpFindFileData=0x31e38c*(dwFileAttributes=0x2014, ftCreationTime.dwLowDateTime=0x6320600, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x6320600, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x5af83960, ftLastWriteTime.dwHighDateTime=0x1cb8930, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 0 [0093.724] FindClose (in: hFindFile=0x381e40 | out: hFindFile=0x381e40) returned 1 [0093.724] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e614) returned 1 [0093.724] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e620) returned 1 [0093.724] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e654) returned 1 [0093.724] GetFullPathNameW (in: lpFileName="C:\\Users\\Default\\AppData\\Roaming\\Microsoft\\Crypto\\RSA", nBufferLength=0x105, lpBuffer=0x31e15c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\Default\\AppData\\Roaming\\Microsoft\\Crypto\\RSA", lpFilePart=0x0) returned 0x35 [0093.724] GetFullPathNameW (in: lpFileName="C:\\Users\\Default\\AppData\\Roaming\\Microsoft\\Crypto\\RSA\\", nBufferLength=0x105, lpBuffer=0x31e130, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\Default\\AppData\\Roaming\\Microsoft\\Crypto\\RSA\\", lpFilePart=0x0) returned 0x36 [0093.724] FindFirstFileW (in: lpFileName="C:\\Users\\Default\\AppData\\Roaming\\Microsoft\\Crypto\\RSA\\*", lpFindFileData=0x31e37c | out: lpFindFileData=0x31e37c*(dwFileAttributes=0x2014, ftCreationTime.dwLowDateTime=0x6320600, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x6320600, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x5af83960, ftLastWriteTime.dwHighDateTime=0x1cb8930, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x381e40 [0093.724] FindNextFileW (in: hFindFile=0x381e40, lpFindFileData=0x31e38c | out: lpFindFileData=0x31e38c*(dwFileAttributes=0x2014, ftCreationTime.dwLowDateTime=0x6320600, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x6320600, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x5af83960, ftLastWriteTime.dwHighDateTime=0x1cb8930, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0093.724] FindNextFileW (in: hFindFile=0x381e40, lpFindFileData=0x31e38c | out: lpFindFileData=0x31e38c*(dwFileAttributes=0x2014, ftCreationTime.dwLowDateTime=0x6320600, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x6320600, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x5af83960, ftLastWriteTime.dwHighDateTime=0x1cb8930, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 0 [0093.724] FindClose (in: hFindFile=0x381e40 | out: hFindFile=0x381e40) returned 1 [0093.725] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e614) returned 1 [0093.725] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e620) returned 1 [0093.725] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e6cc) returned 1 [0093.725] GetFullPathNameW (in: lpFileName="C:\\Users\\Default\\AppData\\Roaming\\Microsoft\\Internet Explorer", nBufferLength=0x105, lpBuffer=0x31e1d4, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\Default\\AppData\\Roaming\\Microsoft\\Internet Explorer", lpFilePart=0x0) returned 0x3c [0093.725] GetFullPathNameW (in: lpFileName="C:\\Users\\Default\\AppData\\Roaming\\Microsoft\\Internet Explorer\\", nBufferLength=0x105, lpBuffer=0x31e1a8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\Default\\AppData\\Roaming\\Microsoft\\Internet Explorer\\", lpFilePart=0x0) returned 0x3d [0093.726] FindFirstFileW (in: lpFileName="C:\\Users\\Default\\AppData\\Roaming\\Microsoft\\Internet Explorer\\*", lpFindFileData=0x31e3f4 | out: lpFindFileData=0x31e3f4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfda27f60, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfda27f60, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xfda27f60, ftLastWriteTime.dwHighDateTime=0x1ca0431, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x381e40 [0093.726] FindNextFileW (in: hFindFile=0x381e40, lpFindFileData=0x31e404 | out: lpFindFileData=0x31e404*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfda27f60, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfda27f60, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xfda27f60, ftLastWriteTime.dwHighDateTime=0x1ca0431, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0093.726] FindNextFileW (in: hFindFile=0x381e40, lpFindFileData=0x31e404 | out: lpFindFileData=0x31e404*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0xfda27f60, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x6451100, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xf96dfdac, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Quick Launch", cAlternateFileName="QUICKL~1")) returned 1 [0093.727] FindNextFileW (in: hFindFile=0x381e40, lpFindFileData=0x31e404 | out: lpFindFileData=0x31e404*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0xfda27f60, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x6451100, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xf96dfdac, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Quick Launch", cAlternateFileName="QUICKL~1")) returned 0 [0093.727] FindClose (in: hFindFile=0x381e40 | out: hFindFile=0x381e40) returned 1 [0093.727] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e68c) returned 1 [0093.727] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e698) returned 1 [0093.727] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e6cc) returned 1 [0093.727] GetFullPathNameW (in: lpFileName="C:\\Users\\Default\\AppData\\Roaming\\Microsoft\\Internet Explorer", nBufferLength=0x105, lpBuffer=0x31e1d4, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\Default\\AppData\\Roaming\\Microsoft\\Internet Explorer", lpFilePart=0x0) returned 0x3c [0093.727] GetFullPathNameW (in: lpFileName="C:\\Users\\Default\\AppData\\Roaming\\Microsoft\\Internet Explorer\\", nBufferLength=0x105, lpBuffer=0x31e1a8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\Default\\AppData\\Roaming\\Microsoft\\Internet Explorer\\", lpFilePart=0x0) returned 0x3d [0093.727] FindFirstFileW (in: lpFileName="C:\\Users\\Default\\AppData\\Roaming\\Microsoft\\Internet Explorer\\*", lpFindFileData=0x31e3f4 | out: lpFindFileData=0x31e3f4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfda27f60, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfda27f60, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xfda27f60, ftLastWriteTime.dwHighDateTime=0x1ca0431, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x381e40 [0093.727] FindNextFileW (in: hFindFile=0x381e40, lpFindFileData=0x31e404 | out: lpFindFileData=0x31e404*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfda27f60, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfda27f60, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xfda27f60, ftLastWriteTime.dwHighDateTime=0x1ca0431, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0093.727] FindNextFileW (in: hFindFile=0x381e40, lpFindFileData=0x31e404 | out: lpFindFileData=0x31e404*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0xfda27f60, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x6451100, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xf96dfdac, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Quick Launch", cAlternateFileName="QUICKL~1")) returned 1 [0093.727] FindNextFileW (in: hFindFile=0x381e40, lpFindFileData=0x31e404 | out: lpFindFileData=0x31e404*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0093.727] FindClose (in: hFindFile=0x381e40 | out: hFindFile=0x381e40) returned 1 [0093.727] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e68c) returned 1 [0093.728] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e698) returned 1 [0093.728] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e654) returned 1 [0093.728] GetFullPathNameW (in: lpFileName="C:\\Users\\Default\\AppData\\Roaming\\Microsoft\\Internet Explorer\\Quick Launch", nBufferLength=0x105, lpBuffer=0x31e15c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\Default\\AppData\\Roaming\\Microsoft\\Internet Explorer\\Quick Launch", lpFilePart=0x0) returned 0x49 [0093.728] GetFullPathNameW (in: lpFileName="C:\\Users\\Default\\AppData\\Roaming\\Microsoft\\Internet Explorer\\Quick Launch\\", nBufferLength=0x105, lpBuffer=0x31e130, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\Default\\AppData\\Roaming\\Microsoft\\Internet Explorer\\Quick Launch\\", lpFilePart=0x0) returned 0x4a [0093.728] FindFirstFileW (in: lpFileName="C:\\Users\\Default\\AppData\\Roaming\\Microsoft\\Internet Explorer\\Quick Launch\\*", lpFindFileData=0x31e37c | out: lpFindFileData=0x31e37c*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0xfda27f60, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x6451100, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xf96dfdac, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x381e40 [0093.733] FindNextFileW (in: hFindFile=0x381e40, lpFindFileData=0x31e38c | out: lpFindFileData=0x31e38c*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0xfda27f60, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x6451100, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xf96dfdac, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0093.733] FindNextFileW (in: hFindFile=0x381e40, lpFindFileData=0x31e38c | out: lpFindFileData=0x31e38c*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0x7de4960a, ftCreationTime.dwHighDateTime=0x1ca043e, ftLastAccessTime.dwLowDateTime=0x6451100, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x7e1692f0, ftLastWriteTime.dwHighDateTime=0x1ca043e, nFileSizeHigh=0x0, nFileSizeLow=0x92, dwReserved0=0x0, dwReserved1=0x0, cFileName="desktop.ini", cAlternateFileName="")) returned 1 [0093.733] FindNextFileW (in: hFindFile=0x381e40, lpFindFileData=0x31e38c | out: lpFindFileData=0x31e38c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7de234aa, ftCreationTime.dwHighDateTime=0x1ca043e, ftLastAccessTime.dwLowDateTime=0x6451100, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x7e11d030, ftLastWriteTime.dwHighDateTime=0x1ca043e, nFileSizeHigh=0x0, nFileSizeLow=0x122, dwReserved0=0x0, dwReserved1=0x0, cFileName="Shows Desktop.lnk", cAlternateFileName="SHOWSD~1.LNK")) returned 1 [0093.733] FindNextFileW (in: hFindFile=0x381e40, lpFindFileData=0x31e38c | out: lpFindFileData=0x31e38c*(dwFileAttributes=0x12, ftCreationTime.dwLowDateTime=0x62fa4a0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x6320600, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x119ccee, ftLastWriteTime.dwHighDateTime=0x1cb8927, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="User Pinned", cAlternateFileName="USERPI~1")) returned 1 [0093.734] FindNextFileW (in: hFindFile=0x381e40, lpFindFileData=0x31e38c | out: lpFindFileData=0x31e38c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7de6f76b, ftCreationTime.dwHighDateTime=0x1ca043e, ftLastAccessTime.dwLowDateTime=0x642afa0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x7e143190, ftLastWriteTime.dwHighDateTime=0x1ca043e, nFileSizeHigh=0x0, nFileSizeLow=0x110, dwReserved0=0x0, dwReserved1=0x0, cFileName="Window Switcher.lnk", cAlternateFileName="WINDOW~1.LNK")) returned 1 [0093.734] FindNextFileW (in: hFindFile=0x381e40, lpFindFileData=0x31e38c | out: lpFindFileData=0x31e38c*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0093.734] FindClose (in: hFindFile=0x381e40 | out: hFindFile=0x381e40) returned 1 [0093.734] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e614) returned 1 [0093.734] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e620) returned 1 [0093.734] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e654) returned 1 [0093.734] GetFullPathNameW (in: lpFileName="C:\\Users\\Default\\AppData\\Roaming\\Microsoft\\Internet Explorer\\Quick Launch", nBufferLength=0x105, lpBuffer=0x31e15c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\Default\\AppData\\Roaming\\Microsoft\\Internet Explorer\\Quick Launch", lpFilePart=0x0) returned 0x49 [0093.735] GetFullPathNameW (in: lpFileName="C:\\Users\\Default\\AppData\\Roaming\\Microsoft\\Internet Explorer\\Quick Launch\\", nBufferLength=0x105, lpBuffer=0x31e130, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\Default\\AppData\\Roaming\\Microsoft\\Internet Explorer\\Quick Launch\\", lpFilePart=0x0) returned 0x4a [0093.735] FindFirstFileW (in: lpFileName="C:\\Users\\Default\\AppData\\Roaming\\Microsoft\\Internet Explorer\\Quick Launch\\*", lpFindFileData=0x31e37c | out: lpFindFileData=0x31e37c*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0xfda27f60, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x6451100, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xf96dfdac, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x381e40 [0093.735] FindNextFileW (in: hFindFile=0x381e40, lpFindFileData=0x31e38c | out: lpFindFileData=0x31e38c*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0xfda27f60, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x6451100, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xf96dfdac, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0093.735] FindNextFileW (in: hFindFile=0x381e40, lpFindFileData=0x31e38c | out: lpFindFileData=0x31e38c*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0x7de4960a, ftCreationTime.dwHighDateTime=0x1ca043e, ftLastAccessTime.dwLowDateTime=0x6451100, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x7e1692f0, ftLastWriteTime.dwHighDateTime=0x1ca043e, nFileSizeHigh=0x0, nFileSizeLow=0x92, dwReserved0=0x0, dwReserved1=0x0, cFileName="desktop.ini", cAlternateFileName="")) returned 1 [0093.736] FindNextFileW (in: hFindFile=0x381e40, lpFindFileData=0x31e38c | out: lpFindFileData=0x31e38c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7de234aa, ftCreationTime.dwHighDateTime=0x1ca043e, ftLastAccessTime.dwLowDateTime=0x6451100, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x7e11d030, ftLastWriteTime.dwHighDateTime=0x1ca043e, nFileSizeHigh=0x0, nFileSizeLow=0x122, dwReserved0=0x0, dwReserved1=0x0, cFileName="Shows Desktop.lnk", cAlternateFileName="SHOWSD~1.LNK")) returned 1 [0093.736] FindNextFileW (in: hFindFile=0x381e40, lpFindFileData=0x31e38c | out: lpFindFileData=0x31e38c*(dwFileAttributes=0x12, ftCreationTime.dwLowDateTime=0x62fa4a0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x6320600, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x119ccee, ftLastWriteTime.dwHighDateTime=0x1cb8927, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="User Pinned", cAlternateFileName="USERPI~1")) returned 1 [0093.736] FindNextFileW (in: hFindFile=0x381e40, lpFindFileData=0x31e38c | out: lpFindFileData=0x31e38c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7de6f76b, ftCreationTime.dwHighDateTime=0x1ca043e, ftLastAccessTime.dwLowDateTime=0x642afa0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x7e143190, ftLastWriteTime.dwHighDateTime=0x1ca043e, nFileSizeHigh=0x0, nFileSizeLow=0x110, dwReserved0=0x0, dwReserved1=0x0, cFileName="Window Switcher.lnk", cAlternateFileName="WINDOW~1.LNK")) returned 1 [0093.736] FindNextFileW (in: hFindFile=0x381e40, lpFindFileData=0x31e38c | out: lpFindFileData=0x31e38c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7de6f76b, ftCreationTime.dwHighDateTime=0x1ca043e, ftLastAccessTime.dwLowDateTime=0x642afa0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x7e143190, ftLastWriteTime.dwHighDateTime=0x1ca043e, nFileSizeHigh=0x0, nFileSizeLow=0x110, dwReserved0=0x0, dwReserved1=0x0, cFileName="Window Switcher.lnk", cAlternateFileName="WINDOW~1.LNK")) returned 0 [0093.736] FindClose (in: hFindFile=0x381e40 | out: hFindFile=0x381e40) returned 1 [0093.737] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e614) returned 1 [0093.737] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e620) returned 1 [0093.737] GetFullPathNameW (in: lpFileName="C:\\Users\\Default\\AppData\\Roaming\\Microsoft\\Internet Explorer\\Quick Launch\\Shows Desktop.lnk", nBufferLength=0x105, lpBuffer=0x31e02c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\Default\\AppData\\Roaming\\Microsoft\\Internet Explorer\\Quick Launch\\Shows Desktop.lnk", lpFilePart=0x0) returned 0x5b [0093.737] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e520) returned 1 [0093.737] CreateFileW (lpFileName="C:\\Users\\Default\\AppData\\Roaming\\Microsoft\\Internet Explorer\\Quick Launch\\Shows Desktop.lnk" (normalized: "c:\\users\\default\\appdata\\roaming\\microsoft\\internet explorer\\quick launch\\shows desktop.lnk"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x178 [0093.738] GetFileType (hFile=0x178) returned 0x1 [0093.738] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e51c) returned 1 [0093.738] GetFileType (hFile=0x178) returned 0x1 [0093.738] GetFileSize (in: hFile=0x178, lpFileSizeHigh=0x31e628 | out: lpFileSizeHigh=0x31e628*=0x0) returned 0x122 [0093.738] ReadFile (in: hFile=0x178, lpBuffer=0x28083d0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x31e5d4, lpOverlapped=0x0 | out: lpBuffer=0x28083d0*, lpNumberOfBytesRead=0x31e5d4*=0x122, lpOverlapped=0x0) returned 1 [0093.739] CloseHandle (hObject=0x178) returned 1 [0093.783] GetFullPathNameW (in: lpFileName="C:\\Users\\Default\\AppData\\Roaming\\Microsoft\\Internet Explorer\\Quick Launch\\Shows Desktop.lnk", nBufferLength=0x105, lpBuffer=0x31e018, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\Default\\AppData\\Roaming\\Microsoft\\Internet Explorer\\Quick Launch\\Shows Desktop.lnk", lpFilePart=0x0) returned 0x5b [0093.783] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e50c) returned 1 [0093.784] CreateFileW (lpFileName="C:\\Users\\Default\\AppData\\Roaming\\Microsoft\\Internet Explorer\\Quick Launch\\Shows Desktop.lnk" (normalized: "c:\\users\\default\\appdata\\roaming\\microsoft\\internet explorer\\quick launch\\shows desktop.lnk"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x178 [0093.784] GetFileType (hFile=0x178) returned 0x1 [0093.785] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e508) returned 1 [0093.785] GetFileType (hFile=0x178) returned 0x1 [0093.787] GetFullPathNameW (in: lpFileName="C:\\Users\\Default\\AppData\\Roaming\\Microsoft\\Internet Explorer\\Quick Launch\\Shows Desktop.lnk", nBufferLength=0x105, lpBuffer=0x31e14c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\Default\\AppData\\Roaming\\Microsoft\\Internet Explorer\\Quick Launch\\Shows Desktop.lnk", lpFilePart=0x0) returned 0x5b [0093.787] GetFullPathNameW (in: lpFileName="C:\\Users\\Default\\AppData\\Roaming\\Microsoft\\Internet Explorer\\Quick Launch\\Shows Desktop.lnk", nBufferLength=0x105, lpBuffer=0x31e14c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\Default\\AppData\\Roaming\\Microsoft\\Internet Explorer\\Quick Launch\\Shows Desktop.lnk", lpFilePart=0x0) returned 0x5b [0093.787] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e5ac) returned 1 [0093.787] GetFileAttributesExW (in: lpFileName="C:\\Users\\Default\\AppData\\Roaming\\Microsoft\\Internet Explorer\\Quick Launch\\Shows Desktop.lnk" (normalized: "c:\\users\\default\\appdata\\roaming\\microsoft\\internet explorer\\quick launch\\shows desktop.lnk"), fInfoLevelId=0x0, lpFileInformation=0x31e628 | out: lpFileInformation=0x31e628*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7de234aa, ftCreationTime.dwHighDateTime=0x1ca043e, ftLastAccessTime.dwLowDateTime=0x6451100, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x1b570cc0, ftLastWriteTime.dwHighDateTime=0x1d6eb7f, nFileSizeHigh=0x0, nFileSizeLow=0x130)) returned 1 [0093.787] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e5a8) returned 1 [0093.787] MoveFileW (lpExistingFileName="C:\\Users\\Default\\AppData\\Roaming\\Microsoft\\Internet Explorer\\Quick Launch\\Shows Desktop.lnk" (normalized: "c:\\users\\default\\appdata\\roaming\\microsoft\\internet explorer\\quick launch\\shows desktop.lnk"), lpNewFileName="C:\\Users\\Default\\AppData\\Roaming\\Microsoft\\Internet Explorer\\Quick Launch\\Shows Desktop.lnk" (normalized: "c:\\users\\default\\appdata\\roaming\\microsoft\\internet explorer\\quick launch\\shows desktop.lnk")) returned 1 [0093.788] GetFullPathNameW (in: lpFileName="C:\\Users\\Default\\AppData\\Roaming\\Microsoft\\Internet Explorer\\Quick Launch\\Window Switcher.lnk", nBufferLength=0x105, lpBuffer=0x31e02c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\Default\\AppData\\Roaming\\Microsoft\\Internet Explorer\\Quick Launch\\Window Switcher.lnk", lpFilePart=0x0) returned 0x5d [0093.788] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e520) returned 1 [0093.788] CreateFileW (lpFileName="C:\\Users\\Default\\AppData\\Roaming\\Microsoft\\Internet Explorer\\Quick Launch\\Window Switcher.lnk" (normalized: "c:\\users\\default\\appdata\\roaming\\microsoft\\internet explorer\\quick launch\\window switcher.lnk"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x178 [0093.788] GetFileType (hFile=0x178) returned 0x1 [0093.788] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e51c) returned 1 [0093.788] GetFileType (hFile=0x178) returned 0x1 [0093.788] GetFileSize (in: hFile=0x178, lpFileSizeHigh=0x31e628 | out: lpFileSizeHigh=0x31e628*=0x0) returned 0x110 [0093.788] ReadFile (in: hFile=0x178, lpBuffer=0x265b594, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x31e5d4, lpOverlapped=0x0 | out: lpBuffer=0x265b594*, lpNumberOfBytesRead=0x31e5d4*=0x110, lpOverlapped=0x0) returned 1 [0093.789] CloseHandle (hObject=0x178) returned 1 [0093.802] GetFullPathNameW (in: lpFileName="C:\\Users\\Default\\AppData\\Roaming\\Microsoft\\Internet Explorer\\Quick Launch\\Window Switcher.lnk", nBufferLength=0x105, lpBuffer=0x31e018, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\Default\\AppData\\Roaming\\Microsoft\\Internet Explorer\\Quick Launch\\Window Switcher.lnk", lpFilePart=0x0) returned 0x5d [0093.802] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e50c) returned 1 [0093.802] CreateFileW (lpFileName="C:\\Users\\Default\\AppData\\Roaming\\Microsoft\\Internet Explorer\\Quick Launch\\Window Switcher.lnk" (normalized: "c:\\users\\default\\appdata\\roaming\\microsoft\\internet explorer\\quick launch\\window switcher.lnk"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x178 [0093.804] GetFileType (hFile=0x178) returned 0x1 [0093.804] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e508) returned 1 [0093.804] GetFileType (hFile=0x178) returned 0x1 [0093.805] GetFullPathNameW (in: lpFileName="C:\\Users\\Default\\AppData\\Roaming\\Microsoft\\Internet Explorer\\Quick Launch\\Window Switcher.lnk", nBufferLength=0x105, lpBuffer=0x31e14c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\Default\\AppData\\Roaming\\Microsoft\\Internet Explorer\\Quick Launch\\Window Switcher.lnk", lpFilePart=0x0) returned 0x5d [0093.805] GetFullPathNameW (in: lpFileName="C:\\Users\\Default\\AppData\\Roaming\\Microsoft\\Internet Explorer\\Quick Launch\\Window Switcher.lnk", nBufferLength=0x105, lpBuffer=0x31e14c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\Default\\AppData\\Roaming\\Microsoft\\Internet Explorer\\Quick Launch\\Window Switcher.lnk", lpFilePart=0x0) returned 0x5d [0093.805] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e5ac) returned 1 [0093.805] GetFileAttributesExW (in: lpFileName="C:\\Users\\Default\\AppData\\Roaming\\Microsoft\\Internet Explorer\\Quick Launch\\Window Switcher.lnk" (normalized: "c:\\users\\default\\appdata\\roaming\\microsoft\\internet explorer\\quick launch\\window switcher.lnk"), fInfoLevelId=0x0, lpFileInformation=0x31e628 | out: lpFileInformation=0x31e628*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7de6f76b, ftCreationTime.dwHighDateTime=0x1ca043e, ftLastAccessTime.dwLowDateTime=0x642afa0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x1b5bcf80, ftLastWriteTime.dwHighDateTime=0x1d6eb7f, nFileSizeHigh=0x0, nFileSizeLow=0x120)) returned 1 [0093.805] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e5a8) returned 1 [0093.805] MoveFileW (lpExistingFileName="C:\\Users\\Default\\AppData\\Roaming\\Microsoft\\Internet Explorer\\Quick Launch\\Window Switcher.lnk" (normalized: "c:\\users\\default\\appdata\\roaming\\microsoft\\internet explorer\\quick launch\\window switcher.lnk"), lpNewFileName="C:\\Users\\Default\\AppData\\Roaming\\Microsoft\\Internet Explorer\\Quick Launch\\Window Switcher.lnk" (normalized: "c:\\users\\default\\appdata\\roaming\\microsoft\\internet explorer\\quick launch\\window switcher.lnk")) returned 1 [0093.805] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e5dc) returned 1 [0093.805] GetFullPathNameW (in: lpFileName="C:\\Users\\Default\\AppData\\Roaming\\Microsoft\\Internet Explorer\\Quick Launch\\User Pinned", nBufferLength=0x105, lpBuffer=0x31e0e4, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\Default\\AppData\\Roaming\\Microsoft\\Internet Explorer\\Quick Launch\\User Pinned", lpFilePart=0x0) returned 0x55 [0093.805] GetFullPathNameW (in: lpFileName="C:\\Users\\Default\\AppData\\Roaming\\Microsoft\\Internet Explorer\\Quick Launch\\User Pinned\\", nBufferLength=0x105, lpBuffer=0x31e0b8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\Default\\AppData\\Roaming\\Microsoft\\Internet Explorer\\Quick Launch\\User Pinned\\", lpFilePart=0x0) returned 0x56 [0093.805] FindFirstFileW (in: lpFileName="C:\\Users\\Default\\AppData\\Roaming\\Microsoft\\Internet Explorer\\Quick Launch\\User Pinned\\*", lpFindFileData=0x31e304 | out: lpFindFileData=0x31e304*(dwFileAttributes=0x12, ftCreationTime.dwLowDateTime=0x62fa4a0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x6320600, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x119ccee, ftLastWriteTime.dwHighDateTime=0x1cb8927, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x381ec0 [0093.806] FindNextFileW (in: hFindFile=0x381ec0, lpFindFileData=0x31e314 | out: lpFindFileData=0x31e314*(dwFileAttributes=0x12, ftCreationTime.dwLowDateTime=0x62fa4a0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x6320600, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x119ccee, ftLastWriteTime.dwHighDateTime=0x1cb8927, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0093.806] FindNextFileW (in: hFindFile=0x381ec0, lpFindFileData=0x31e314 | out: lpFindFileData=0x31e314*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x6320600, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x6320600, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xf98cef90, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="ImplicitAppShortcuts", cAlternateFileName="IMPLIC~1")) returned 1 [0093.806] FindNextFileW (in: hFindFile=0x381ec0, lpFindFileData=0x31e314 | out: lpFindFileData=0x31e314*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x62fa4a0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x6477260, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x123526f, ftLastWriteTime.dwHighDateTime=0x1cb8927, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="TaskBar", cAlternateFileName="")) returned 1 [0093.806] FindNextFileW (in: hFindFile=0x381ec0, lpFindFileData=0x31e314 | out: lpFindFileData=0x31e314*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x62fa4a0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x6477260, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x123526f, ftLastWriteTime.dwHighDateTime=0x1cb8927, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="TaskBar", cAlternateFileName="")) returned 0 [0093.806] FindClose (in: hFindFile=0x381ec0 | out: hFindFile=0x381ec0) returned 1 [0093.806] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e59c) returned 1 [0093.806] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e5a8) returned 1 [0093.806] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e5dc) returned 1 [0093.806] GetFullPathNameW (in: lpFileName="C:\\Users\\Default\\AppData\\Roaming\\Microsoft\\Internet Explorer\\Quick Launch\\User Pinned", nBufferLength=0x105, lpBuffer=0x31e0e4, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\Default\\AppData\\Roaming\\Microsoft\\Internet Explorer\\Quick Launch\\User Pinned", lpFilePart=0x0) returned 0x55 [0093.806] GetFullPathNameW (in: lpFileName="C:\\Users\\Default\\AppData\\Roaming\\Microsoft\\Internet Explorer\\Quick Launch\\User Pinned\\", nBufferLength=0x105, lpBuffer=0x31e0b8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\Default\\AppData\\Roaming\\Microsoft\\Internet Explorer\\Quick Launch\\User Pinned\\", lpFilePart=0x0) returned 0x56 [0093.806] FindFirstFileW (in: lpFileName="C:\\Users\\Default\\AppData\\Roaming\\Microsoft\\Internet Explorer\\Quick Launch\\User Pinned\\*", lpFindFileData=0x31e304 | out: lpFindFileData=0x31e304*(dwFileAttributes=0x12, ftCreationTime.dwLowDateTime=0x62fa4a0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x6320600, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x119ccee, ftLastWriteTime.dwHighDateTime=0x1cb8927, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x381ec0 [0093.807] FindNextFileW (in: hFindFile=0x381ec0, lpFindFileData=0x31e314 | out: lpFindFileData=0x31e314*(dwFileAttributes=0x12, ftCreationTime.dwLowDateTime=0x62fa4a0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x6320600, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x119ccee, ftLastWriteTime.dwHighDateTime=0x1cb8927, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0093.807] FindNextFileW (in: hFindFile=0x381ec0, lpFindFileData=0x31e314 | out: lpFindFileData=0x31e314*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x6320600, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x6320600, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xf98cef90, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="ImplicitAppShortcuts", cAlternateFileName="IMPLIC~1")) returned 1 [0093.807] FindNextFileW (in: hFindFile=0x381ec0, lpFindFileData=0x31e314 | out: lpFindFileData=0x31e314*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x62fa4a0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x6477260, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x123526f, ftLastWriteTime.dwHighDateTime=0x1cb8927, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="TaskBar", cAlternateFileName="")) returned 1 [0093.807] FindNextFileW (in: hFindFile=0x381ec0, lpFindFileData=0x31e314 | out: lpFindFileData=0x31e314*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0093.807] FindClose (in: hFindFile=0x381ec0 | out: hFindFile=0x381ec0) returned 1 [0093.807] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e59c) returned 1 [0093.807] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e5a8) returned 1 [0093.807] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e564) returned 1 [0093.807] GetFullPathNameW (in: lpFileName="C:\\Users\\Default\\AppData\\Roaming\\Microsoft\\Internet Explorer\\Quick Launch\\User Pinned\\ImplicitAppShortcuts", nBufferLength=0x105, lpBuffer=0x31e06c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\Default\\AppData\\Roaming\\Microsoft\\Internet Explorer\\Quick Launch\\User Pinned\\ImplicitAppShortcuts", lpFilePart=0x0) returned 0x6a [0093.807] GetFullPathNameW (in: lpFileName="C:\\Users\\Default\\AppData\\Roaming\\Microsoft\\Internet Explorer\\Quick Launch\\User Pinned\\ImplicitAppShortcuts\\", nBufferLength=0x105, lpBuffer=0x31e040, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\Default\\AppData\\Roaming\\Microsoft\\Internet Explorer\\Quick Launch\\User Pinned\\ImplicitAppShortcuts\\", lpFilePart=0x0) returned 0x6b [0093.807] FindFirstFileW (in: lpFileName="C:\\Users\\Default\\AppData\\Roaming\\Microsoft\\Internet Explorer\\Quick Launch\\User Pinned\\ImplicitAppShortcuts\\*", lpFindFileData=0x31e28c | out: lpFindFileData=0x31e28c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x6320600, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x6320600, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xf98cef90, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x381ec0 [0093.807] FindNextFileW (in: hFindFile=0x381ec0, lpFindFileData=0x31e29c | out: lpFindFileData=0x31e29c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x6320600, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x6320600, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xf98cef90, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0093.808] FindNextFileW (in: hFindFile=0x381ec0, lpFindFileData=0x31e29c | out: lpFindFileData=0x31e29c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x6320600, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x6320600, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xf98cef90, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 0 [0093.808] FindClose (in: hFindFile=0x381ec0 | out: hFindFile=0x381ec0) returned 1 [0093.808] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e524) returned 1 [0093.808] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e530) returned 1 [0093.808] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e564) returned 1 [0093.808] GetFullPathNameW (in: lpFileName="C:\\Users\\Default\\AppData\\Roaming\\Microsoft\\Internet Explorer\\Quick Launch\\User Pinned\\ImplicitAppShortcuts", nBufferLength=0x105, lpBuffer=0x31e06c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\Default\\AppData\\Roaming\\Microsoft\\Internet Explorer\\Quick Launch\\User Pinned\\ImplicitAppShortcuts", lpFilePart=0x0) returned 0x6a [0093.808] GetFullPathNameW (in: lpFileName="C:\\Users\\Default\\AppData\\Roaming\\Microsoft\\Internet Explorer\\Quick Launch\\User Pinned\\ImplicitAppShortcuts\\", nBufferLength=0x105, lpBuffer=0x31e040, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\Default\\AppData\\Roaming\\Microsoft\\Internet Explorer\\Quick Launch\\User Pinned\\ImplicitAppShortcuts\\", lpFilePart=0x0) returned 0x6b [0093.808] FindFirstFileW (in: lpFileName="C:\\Users\\Default\\AppData\\Roaming\\Microsoft\\Internet Explorer\\Quick Launch\\User Pinned\\ImplicitAppShortcuts\\*", lpFindFileData=0x31e28c | out: lpFindFileData=0x31e28c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x6320600, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x6320600, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xf98cef90, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x381ec0 [0093.808] FindNextFileW (in: hFindFile=0x381ec0, lpFindFileData=0x31e29c | out: lpFindFileData=0x31e29c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x6320600, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x6320600, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xf98cef90, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0093.808] FindNextFileW (in: hFindFile=0x381ec0, lpFindFileData=0x31e29c | out: lpFindFileData=0x31e29c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x6320600, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x6320600, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xf98cef90, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 0 [0093.808] FindClose (in: hFindFile=0x381ec0 | out: hFindFile=0x381ec0) returned 1 [0093.808] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e524) returned 1 [0093.809] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e530) returned 1 [0093.809] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e564) returned 1 [0093.809] GetFullPathNameW (in: lpFileName="C:\\Users\\Default\\AppData\\Roaming\\Microsoft\\Internet Explorer\\Quick Launch\\User Pinned\\TaskBar", nBufferLength=0x105, lpBuffer=0x31e06c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\Default\\AppData\\Roaming\\Microsoft\\Internet Explorer\\Quick Launch\\User Pinned\\TaskBar", lpFilePart=0x0) returned 0x5d [0093.809] GetFullPathNameW (in: lpFileName="C:\\Users\\Default\\AppData\\Roaming\\Microsoft\\Internet Explorer\\Quick Launch\\User Pinned\\TaskBar\\", nBufferLength=0x105, lpBuffer=0x31e040, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\Default\\AppData\\Roaming\\Microsoft\\Internet Explorer\\Quick Launch\\User Pinned\\TaskBar\\", lpFilePart=0x0) returned 0x5e [0093.809] FindFirstFileW (in: lpFileName="C:\\Users\\Default\\AppData\\Roaming\\Microsoft\\Internet Explorer\\Quick Launch\\User Pinned\\TaskBar\\*", lpFindFileData=0x31e28c | out: lpFindFileData=0x31e28c*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x62fa4a0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x6477260, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x123526f, ftLastWriteTime.dwHighDateTime=0x1cb8927, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x381ec0 [0093.811] FindNextFileW (in: hFindFile=0x381ec0, lpFindFileData=0x31e29c | out: lpFindFileData=0x31e29c*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x62fa4a0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x6477260, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x123526f, ftLastWriteTime.dwHighDateTime=0x1cb8927, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0093.811] FindNextFileW (in: hFindFile=0x381ec0, lpFindFileData=0x31e29c | out: lpFindFileData=0x31e29c*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0x642afa0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x642afa0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x123526f, ftLastWriteTime.dwHighDateTime=0x1cb8927, nFileSizeHigh=0x0, nFileSizeLow=0xd3, dwReserved0=0x0, dwReserved1=0x0, cFileName="desktop.ini", cAlternateFileName="")) returned 1 [0093.811] FindNextFileW (in: hFindFile=0x381ec0, lpFindFileData=0x31e29c | out: lpFindFileData=0x31e29c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x642afa0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x642afa0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x921e7f, ftLastWriteTime.dwHighDateTime=0x1cb8927, nFileSizeHigh=0x0, nFileSizeLow=0x5a9, dwReserved0=0x0, dwReserved1=0x0, cFileName="Internet Explorer.lnk", cAlternateFileName="INTERN~1.LNK")) returned 1 [0093.811] FindNextFileW (in: hFindFile=0x381ec0, lpFindFileData=0x31e29c | out: lpFindFileData=0x31e29c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x642afa0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x642afa0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x7dfa026d, ftLastWriteTime.dwHighDateTime=0x1ca043e, nFileSizeHigh=0x0, nFileSizeLow=0x4cc, dwReserved0=0x0, dwReserved1=0x0, cFileName="Windows Explorer.lnk", cAlternateFileName="WINDOW~2.LNK")) returned 1 [0093.811] FindNextFileW (in: hFindFile=0x381ec0, lpFindFileData=0x31e29c | out: lpFindFileData=0x31e29c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x642afa0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x642afa0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x2e24b3, ftLastWriteTime.dwHighDateTime=0x1cb8927, nFileSizeHigh=0x0, nFileSizeLow=0x60b, dwReserved0=0x0, dwReserved1=0x0, cFileName="Windows Media Player.lnk", cAlternateFileName="WINDOW~1.LNK")) returned 1 [0093.811] FindNextFileW (in: hFindFile=0x381ec0, lpFindFileData=0x31e29c | out: lpFindFileData=0x31e29c*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0093.811] FindClose (in: hFindFile=0x381ec0 | out: hFindFile=0x381ec0) returned 1 [0093.812] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e524) returned 1 [0093.812] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e530) returned 1 [0093.812] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e564) returned 1 [0093.812] GetFullPathNameW (in: lpFileName="C:\\Users\\Default\\AppData\\Roaming\\Microsoft\\Internet Explorer\\Quick Launch\\User Pinned\\TaskBar", nBufferLength=0x105, lpBuffer=0x31e06c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\Default\\AppData\\Roaming\\Microsoft\\Internet Explorer\\Quick Launch\\User Pinned\\TaskBar", lpFilePart=0x0) returned 0x5d [0093.812] GetFullPathNameW (in: lpFileName="C:\\Users\\Default\\AppData\\Roaming\\Microsoft\\Internet Explorer\\Quick Launch\\User Pinned\\TaskBar\\", nBufferLength=0x105, lpBuffer=0x31e040, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\Default\\AppData\\Roaming\\Microsoft\\Internet Explorer\\Quick Launch\\User Pinned\\TaskBar\\", lpFilePart=0x0) returned 0x5e [0093.812] FindFirstFileW (in: lpFileName="C:\\Users\\Default\\AppData\\Roaming\\Microsoft\\Internet Explorer\\Quick Launch\\User Pinned\\TaskBar\\*", lpFindFileData=0x31e28c | out: lpFindFileData=0x31e28c*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x62fa4a0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x6477260, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x123526f, ftLastWriteTime.dwHighDateTime=0x1cb8927, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x381ec0 [0093.813] FindNextFileW (in: hFindFile=0x381ec0, lpFindFileData=0x31e29c | out: lpFindFileData=0x31e29c*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x62fa4a0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x6477260, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x123526f, ftLastWriteTime.dwHighDateTime=0x1cb8927, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0093.813] FindNextFileW (in: hFindFile=0x381ec0, lpFindFileData=0x31e29c | out: lpFindFileData=0x31e29c*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0x642afa0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x642afa0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x123526f, ftLastWriteTime.dwHighDateTime=0x1cb8927, nFileSizeHigh=0x0, nFileSizeLow=0xd3, dwReserved0=0x0, dwReserved1=0x0, cFileName="desktop.ini", cAlternateFileName="")) returned 1 [0093.813] FindNextFileW (in: hFindFile=0x381ec0, lpFindFileData=0x31e29c | out: lpFindFileData=0x31e29c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x642afa0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x642afa0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x921e7f, ftLastWriteTime.dwHighDateTime=0x1cb8927, nFileSizeHigh=0x0, nFileSizeLow=0x5a9, dwReserved0=0x0, dwReserved1=0x0, cFileName="Internet Explorer.lnk", cAlternateFileName="INTERN~1.LNK")) returned 1 [0093.813] FindNextFileW (in: hFindFile=0x381ec0, lpFindFileData=0x31e29c | out: lpFindFileData=0x31e29c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x642afa0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x642afa0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x7dfa026d, ftLastWriteTime.dwHighDateTime=0x1ca043e, nFileSizeHigh=0x0, nFileSizeLow=0x4cc, dwReserved0=0x0, dwReserved1=0x0, cFileName="Windows Explorer.lnk", cAlternateFileName="WINDOW~2.LNK")) returned 1 [0093.813] FindNextFileW (in: hFindFile=0x381ec0, lpFindFileData=0x31e29c | out: lpFindFileData=0x31e29c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x642afa0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x642afa0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x2e24b3, ftLastWriteTime.dwHighDateTime=0x1cb8927, nFileSizeHigh=0x0, nFileSizeLow=0x60b, dwReserved0=0x0, dwReserved1=0x0, cFileName="Windows Media Player.lnk", cAlternateFileName="WINDOW~1.LNK")) returned 1 [0093.813] FindNextFileW (in: hFindFile=0x381ec0, lpFindFileData=0x31e29c | out: lpFindFileData=0x31e29c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x642afa0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x642afa0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x2e24b3, ftLastWriteTime.dwHighDateTime=0x1cb8927, nFileSizeHigh=0x0, nFileSizeLow=0x60b, dwReserved0=0x0, dwReserved1=0x0, cFileName="Windows Media Player.lnk", cAlternateFileName="WINDOW~1.LNK")) returned 0 [0093.814] FindClose (in: hFindFile=0x381ec0 | out: hFindFile=0x381ec0) returned 1 [0093.814] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e524) returned 1 [0093.814] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e530) returned 1 [0093.814] GetFullPathNameW (in: lpFileName="C:\\Users\\Default\\AppData\\Roaming\\Microsoft\\Internet Explorer\\Quick Launch\\User Pinned\\TaskBar\\Internet Explorer.lnk", nBufferLength=0x105, lpBuffer=0x31df3c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\Default\\AppData\\Roaming\\Microsoft\\Internet Explorer\\Quick Launch\\User Pinned\\TaskBar\\Internet Explorer.lnk", lpFilePart=0x0) returned 0x73 [0093.814] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e430) returned 1 [0093.814] CreateFileW (lpFileName="C:\\Users\\Default\\AppData\\Roaming\\Microsoft\\Internet Explorer\\Quick Launch\\User Pinned\\TaskBar\\Internet Explorer.lnk" (normalized: "c:\\users\\default\\appdata\\roaming\\microsoft\\internet explorer\\quick launch\\user pinned\\taskbar\\internet explorer.lnk"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x178 [0093.815] GetFileType (hFile=0x178) returned 0x1 [0093.815] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e42c) returned 1 [0093.815] GetFileType (hFile=0x178) returned 0x1 [0093.815] GetFileSize (in: hFile=0x178, lpFileSizeHigh=0x31e538 | out: lpFileSizeHigh=0x31e538*=0x0) returned 0x5a9 [0093.815] ReadFile (in: hFile=0x178, lpBuffer=0x26b21c0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x31e4e4, lpOverlapped=0x0 | out: lpBuffer=0x26b21c0*, lpNumberOfBytesRead=0x31e4e4*=0x5a9, lpOverlapped=0x0) returned 1 [0093.817] CloseHandle (hObject=0x178) returned 1 [0093.856] GetFullPathNameW (in: lpFileName="C:\\Users\\Default\\AppData\\Roaming\\Microsoft\\Internet Explorer\\Quick Launch\\User Pinned\\TaskBar\\Internet Explorer.lnk", nBufferLength=0x105, lpBuffer=0x31df28, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\Default\\AppData\\Roaming\\Microsoft\\Internet Explorer\\Quick Launch\\User Pinned\\TaskBar\\Internet Explorer.lnk", lpFilePart=0x0) returned 0x73 [0093.856] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e41c) returned 1 [0093.856] CreateFileW (lpFileName="C:\\Users\\Default\\AppData\\Roaming\\Microsoft\\Internet Explorer\\Quick Launch\\User Pinned\\TaskBar\\Internet Explorer.lnk" (normalized: "c:\\users\\default\\appdata\\roaming\\microsoft\\internet explorer\\quick launch\\user pinned\\taskbar\\internet explorer.lnk"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x178 [0093.857] GetFileType (hFile=0x178) returned 0x1 [0093.857] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e418) returned 1 [0093.857] GetFileType (hFile=0x178) returned 0x1 [0093.857] WriteFile (in: hFile=0x178, lpBuffer=0x2701db0*, nNumberOfBytesToWrite=0x5b0, lpNumberOfBytesWritten=0x31e4ac, lpOverlapped=0x0 | out: lpBuffer=0x2701db0*, lpNumberOfBytesWritten=0x31e4ac*=0x5b0, lpOverlapped=0x0) returned 1 [0093.858] CloseHandle (hObject=0x178) returned 1 [0093.858] GetFullPathNameW (in: lpFileName="C:\\Users\\Default\\AppData\\Roaming\\Microsoft\\Internet Explorer\\Quick Launch\\User Pinned\\TaskBar\\Internet Explorer.lnk", nBufferLength=0x105, lpBuffer=0x31e05c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\Default\\AppData\\Roaming\\Microsoft\\Internet Explorer\\Quick Launch\\User Pinned\\TaskBar\\Internet Explorer.lnk", lpFilePart=0x0) returned 0x73 [0093.858] GetFullPathNameW (in: lpFileName="C:\\Users\\Default\\AppData\\Roaming\\Microsoft\\Internet Explorer\\Quick Launch\\User Pinned\\TaskBar\\Internet Explorer.lnk", nBufferLength=0x105, lpBuffer=0x31e05c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\Default\\AppData\\Roaming\\Microsoft\\Internet Explorer\\Quick Launch\\User Pinned\\TaskBar\\Internet Explorer.lnk", lpFilePart=0x0) returned 0x73 [0093.858] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e4bc) returned 1 [0093.858] GetFileAttributesExW (in: lpFileName="C:\\Users\\Default\\AppData\\Roaming\\Microsoft\\Internet Explorer\\Quick Launch\\User Pinned\\TaskBar\\Internet Explorer.lnk" (normalized: "c:\\users\\default\\appdata\\roaming\\microsoft\\internet explorer\\quick launch\\user pinned\\taskbar\\internet explorer.lnk"), fInfoLevelId=0x0, lpFileInformation=0x31e538 | out: lpFileInformation=0x31e538*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x642afa0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x642afa0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x1b62f3a0, ftLastWriteTime.dwHighDateTime=0x1d6eb7f, nFileSizeHigh=0x0, nFileSizeLow=0x5b0)) returned 1 [0093.858] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e4b8) returned 1 [0093.858] MoveFileW (lpExistingFileName="C:\\Users\\Default\\AppData\\Roaming\\Microsoft\\Internet Explorer\\Quick Launch\\User Pinned\\TaskBar\\Internet Explorer.lnk" (normalized: "c:\\users\\default\\appdata\\roaming\\microsoft\\internet explorer\\quick launch\\user pinned\\taskbar\\internet explorer.lnk"), lpNewFileName="C:\\Users\\Default\\AppData\\Roaming\\Microsoft\\Internet Explorer\\Quick Launch\\User Pinned\\TaskBar\\Internet Explorer.lnk" (normalized: "c:\\users\\default\\appdata\\roaming\\microsoft\\internet explorer\\quick launch\\user pinned\\taskbar\\internet explorer.lnk")) returned 1 [0093.859] GetFullPathNameW (in: lpFileName="C:\\Users\\Default\\AppData\\Roaming\\Microsoft\\Internet Explorer\\Quick Launch\\User Pinned\\TaskBar\\Windows Explorer.lnk", nBufferLength=0x105, lpBuffer=0x31df3c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\Default\\AppData\\Roaming\\Microsoft\\Internet Explorer\\Quick Launch\\User Pinned\\TaskBar\\Windows Explorer.lnk", lpFilePart=0x0) returned 0x72 [0093.859] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e430) returned 1 [0093.859] CreateFileW (lpFileName="C:\\Users\\Default\\AppData\\Roaming\\Microsoft\\Internet Explorer\\Quick Launch\\User Pinned\\TaskBar\\Windows Explorer.lnk" (normalized: "c:\\users\\default\\appdata\\roaming\\microsoft\\internet explorer\\quick launch\\user pinned\\taskbar\\windows explorer.lnk"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x178 [0093.859] GetFileType (hFile=0x178) returned 0x1 [0093.859] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e42c) returned 1 [0093.859] GetFileType (hFile=0x178) returned 0x1 [0093.859] GetFileSize (in: hFile=0x178, lpFileSizeHigh=0x31e538 | out: lpFileSizeHigh=0x31e538*=0x0) returned 0x4cc [0093.859] ReadFile (in: hFile=0x178, lpBuffer=0x270361c, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x31e4e4, lpOverlapped=0x0 | out: lpBuffer=0x270361c*, lpNumberOfBytesRead=0x31e4e4*=0x4cc, lpOverlapped=0x0) returned 1 [0093.861] CloseHandle (hObject=0x178) returned 1 [0093.875] GetFullPathNameW (in: lpFileName="C:\\Users\\Default\\AppData\\Roaming\\Microsoft\\Internet Explorer\\Quick Launch\\User Pinned\\TaskBar\\Windows Explorer.lnk", nBufferLength=0x105, lpBuffer=0x31df28, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\Default\\AppData\\Roaming\\Microsoft\\Internet Explorer\\Quick Launch\\User Pinned\\TaskBar\\Windows Explorer.lnk", lpFilePart=0x0) returned 0x72 [0093.875] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e41c) returned 1 [0093.875] CreateFileW (lpFileName="C:\\Users\\Default\\AppData\\Roaming\\Microsoft\\Internet Explorer\\Quick Launch\\User Pinned\\TaskBar\\Windows Explorer.lnk" (normalized: "c:\\users\\default\\appdata\\roaming\\microsoft\\internet explorer\\quick launch\\user pinned\\taskbar\\windows explorer.lnk"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x178 [0093.876] GetFileType (hFile=0x178) returned 0x1 [0093.876] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e418) returned 1 [0093.876] GetFileType (hFile=0x178) returned 0x1 [0093.876] WriteFile (in: hFile=0x178, lpBuffer=0x2752da8*, nNumberOfBytesToWrite=0x4d0, lpNumberOfBytesWritten=0x31e4ac, lpOverlapped=0x0 | out: lpBuffer=0x2752da8*, lpNumberOfBytesWritten=0x31e4ac*=0x4d0, lpOverlapped=0x0) returned 1 [0093.877] CloseHandle (hObject=0x178) returned 1 [0093.877] GetFullPathNameW (in: lpFileName="C:\\Users\\Default\\AppData\\Roaming\\Microsoft\\Internet Explorer\\Quick Launch\\User Pinned\\TaskBar\\Windows Explorer.lnk", nBufferLength=0x105, lpBuffer=0x31e05c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\Default\\AppData\\Roaming\\Microsoft\\Internet Explorer\\Quick Launch\\User Pinned\\TaskBar\\Windows Explorer.lnk", lpFilePart=0x0) returned 0x72 [0093.877] GetFullPathNameW (in: lpFileName="C:\\Users\\Default\\AppData\\Roaming\\Microsoft\\Internet Explorer\\Quick Launch\\User Pinned\\TaskBar\\Windows Explorer.lnk", nBufferLength=0x105, lpBuffer=0x31e05c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\Default\\AppData\\Roaming\\Microsoft\\Internet Explorer\\Quick Launch\\User Pinned\\TaskBar\\Windows Explorer.lnk", lpFilePart=0x0) returned 0x72 [0093.877] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e4bc) returned 1 [0093.877] GetFileAttributesExW (in: lpFileName="C:\\Users\\Default\\AppData\\Roaming\\Microsoft\\Internet Explorer\\Quick Launch\\User Pinned\\TaskBar\\Windows Explorer.lnk" (normalized: "c:\\users\\default\\appdata\\roaming\\microsoft\\internet explorer\\quick launch\\user pinned\\taskbar\\windows explorer.lnk"), fInfoLevelId=0x0, lpFileInformation=0x31e538 | out: lpFileInformation=0x31e538*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x642afa0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x642afa0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x1b655500, ftLastWriteTime.dwHighDateTime=0x1d6eb7f, nFileSizeHigh=0x0, nFileSizeLow=0x4d0)) returned 1 [0093.877] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e4b8) returned 1 [0093.877] MoveFileW (lpExistingFileName="C:\\Users\\Default\\AppData\\Roaming\\Microsoft\\Internet Explorer\\Quick Launch\\User Pinned\\TaskBar\\Windows Explorer.lnk" (normalized: "c:\\users\\default\\appdata\\roaming\\microsoft\\internet explorer\\quick launch\\user pinned\\taskbar\\windows explorer.lnk"), lpNewFileName="C:\\Users\\Default\\AppData\\Roaming\\Microsoft\\Internet Explorer\\Quick Launch\\User Pinned\\TaskBar\\Windows Explorer.lnk" (normalized: "c:\\users\\default\\appdata\\roaming\\microsoft\\internet explorer\\quick launch\\user pinned\\taskbar\\windows explorer.lnk")) returned 1 [0093.878] GetFullPathNameW (in: lpFileName="C:\\Users\\Default\\AppData\\Roaming\\Microsoft\\Internet Explorer\\Quick Launch\\User Pinned\\TaskBar\\Windows Media Player.lnk", nBufferLength=0x105, lpBuffer=0x31df3c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\Default\\AppData\\Roaming\\Microsoft\\Internet Explorer\\Quick Launch\\User Pinned\\TaskBar\\Windows Media Player.lnk", lpFilePart=0x0) returned 0x76 [0093.878] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e430) returned 1 [0093.878] CreateFileW (lpFileName="C:\\Users\\Default\\AppData\\Roaming\\Microsoft\\Internet Explorer\\Quick Launch\\User Pinned\\TaskBar\\Windows Media Player.lnk" (normalized: "c:\\users\\default\\appdata\\roaming\\microsoft\\internet explorer\\quick launch\\user pinned\\taskbar\\windows media player.lnk"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x178 [0093.898] GetFileType (hFile=0x178) returned 0x1 [0093.898] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e42c) returned 1 [0093.898] GetFileType (hFile=0x178) returned 0x1 [0093.898] GetFileSize (in: hFile=0x178, lpFileSizeHigh=0x31e538 | out: lpFileSizeHigh=0x31e538*=0x0) returned 0x60b [0093.898] ReadFile (in: hFile=0x178, lpBuffer=0x2754764, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x31e4e4, lpOverlapped=0x0 | out: lpBuffer=0x2754764*, lpNumberOfBytesRead=0x31e4e4*=0x60b, lpOverlapped=0x0) returned 1 [0093.901] CloseHandle (hObject=0x178) returned 1 [0093.915] GetFullPathNameW (in: lpFileName="C:\\Users\\Default\\AppData\\Roaming\\Microsoft\\Internet Explorer\\Quick Launch\\User Pinned\\TaskBar\\Windows Media Player.lnk", nBufferLength=0x105, lpBuffer=0x31df28, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\Default\\AppData\\Roaming\\Microsoft\\Internet Explorer\\Quick Launch\\User Pinned\\TaskBar\\Windows Media Player.lnk", lpFilePart=0x0) returned 0x76 [0093.915] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e41c) returned 1 [0093.915] CreateFileW (lpFileName="C:\\Users\\Default\\AppData\\Roaming\\Microsoft\\Internet Explorer\\Quick Launch\\User Pinned\\TaskBar\\Windows Media Player.lnk" (normalized: "c:\\users\\default\\appdata\\roaming\\microsoft\\internet explorer\\quick launch\\user pinned\\taskbar\\windows media player.lnk"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x178 [0093.916] GetFileType (hFile=0x178) returned 0x1 [0093.916] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e418) returned 1 [0093.916] GetFileType (hFile=0x178) returned 0x1 [0093.916] WriteFile (in: hFile=0x178, lpBuffer=0x27a4544*, nNumberOfBytesToWrite=0x610, lpNumberOfBytesWritten=0x31e4ac, lpOverlapped=0x0 | out: lpBuffer=0x27a4544*, lpNumberOfBytesWritten=0x31e4ac*=0x610, lpOverlapped=0x0) returned 1 [0093.917] CloseHandle (hObject=0x178) returned 1 [0093.917] GetFullPathNameW (in: lpFileName="C:\\Users\\Default\\AppData\\Roaming\\Microsoft\\Internet Explorer\\Quick Launch\\User Pinned\\TaskBar\\Windows Media Player.lnk", nBufferLength=0x105, lpBuffer=0x31e05c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\Default\\AppData\\Roaming\\Microsoft\\Internet Explorer\\Quick Launch\\User Pinned\\TaskBar\\Windows Media Player.lnk", lpFilePart=0x0) returned 0x76 [0093.917] GetFullPathNameW (in: lpFileName="C:\\Users\\Default\\AppData\\Roaming\\Microsoft\\Internet Explorer\\Quick Launch\\User Pinned\\TaskBar\\Windows Media Player.lnk", nBufferLength=0x105, lpBuffer=0x31e05c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\Default\\AppData\\Roaming\\Microsoft\\Internet Explorer\\Quick Launch\\User Pinned\\TaskBar\\Windows Media Player.lnk", lpFilePart=0x0) returned 0x76 [0093.917] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e4bc) returned 1 [0093.917] GetFileAttributesExW (in: lpFileName="C:\\Users\\Default\\AppData\\Roaming\\Microsoft\\Internet Explorer\\Quick Launch\\User Pinned\\TaskBar\\Windows Media Player.lnk" (normalized: "c:\\users\\default\\appdata\\roaming\\microsoft\\internet explorer\\quick launch\\user pinned\\taskbar\\windows media player.lnk"), fInfoLevelId=0x0, lpFileInformation=0x31e538 | out: lpFileInformation=0x31e538*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x642afa0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x642afa0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x1b6c7920, ftLastWriteTime.dwHighDateTime=0x1d6eb7f, nFileSizeHigh=0x0, nFileSizeLow=0x610)) returned 1 [0093.917] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e4b8) returned 1 [0093.917] MoveFileW (lpExistingFileName="C:\\Users\\Default\\AppData\\Roaming\\Microsoft\\Internet Explorer\\Quick Launch\\User Pinned\\TaskBar\\Windows Media Player.lnk" (normalized: "c:\\users\\default\\appdata\\roaming\\microsoft\\internet explorer\\quick launch\\user pinned\\taskbar\\windows media player.lnk"), lpNewFileName="C:\\Users\\Default\\AppData\\Roaming\\Microsoft\\Internet Explorer\\Quick Launch\\User Pinned\\TaskBar\\Windows Media Player.lnk" (normalized: "c:\\users\\default\\appdata\\roaming\\microsoft\\internet explorer\\quick launch\\user pinned\\taskbar\\windows media player.lnk")) returned 1 [0093.918] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e6cc) returned 1 [0093.918] GetFullPathNameW (in: lpFileName="C:\\Users\\Default\\AppData\\Roaming\\Microsoft\\Protect", nBufferLength=0x105, lpBuffer=0x31e1d4, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\Default\\AppData\\Roaming\\Microsoft\\Protect", lpFilePart=0x0) returned 0x32 [0093.918] GetFullPathNameW (in: lpFileName="C:\\Users\\Default\\AppData\\Roaming\\Microsoft\\Protect\\", nBufferLength=0x105, lpBuffer=0x31e1a8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\Default\\AppData\\Roaming\\Microsoft\\Protect\\", lpFilePart=0x0) returned 0x33 [0093.918] FindFirstFileW (in: lpFileName="C:\\Users\\Default\\AppData\\Roaming\\Microsoft\\Protect\\*", lpFindFileData=0x31e3f4 | out: lpFindFileData=0x31e3f4*(dwFileAttributes=0x2014, ftCreationTime.dwLowDateTime=0x62fa4a0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x642afa0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xf29f8e64, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x381d00 [0093.918] FindNextFileW (in: hFindFile=0x381d00, lpFindFileData=0x31e404 | out: lpFindFileData=0x31e404*(dwFileAttributes=0x2014, ftCreationTime.dwLowDateTime=0x62fa4a0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x642afa0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xf29f8e64, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0093.918] FindNextFileW (in: hFindFile=0x381d00, lpFindFileData=0x31e404 | out: lpFindFileData=0x31e404*(dwFileAttributes=0x2026, ftCreationTime.dwLowDateTime=0x642afa0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x642afa0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xf29f8e64, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x18, dwReserved0=0x0, dwReserved1=0x0, cFileName="CREDHIST", cAlternateFileName="")) returned 1 [0093.918] FindNextFileW (in: hFindFile=0x381d00, lpFindFileData=0x31e404 | out: lpFindFileData=0x31e404*(dwFileAttributes=0x2014, ftCreationTime.dwLowDateTime=0x62fa4a0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x642afa0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xf2c805c8, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="S-1-5-21-3111613574-2524581245-2586426736-500", cAlternateFileName="S-1-5-~1")) returned 1 [0093.919] FindNextFileW (in: hFindFile=0x381d00, lpFindFileData=0x31e404 | out: lpFindFileData=0x31e404*(dwFileAttributes=0x2014, ftCreationTime.dwLowDateTime=0x62fa4a0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x642afa0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xf2c805c8, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="S-1-5-21-3111613574-2524581245-2586426736-500", cAlternateFileName="S-1-5-~1")) returned 0 [0093.919] FindClose (in: hFindFile=0x381d00 | out: hFindFile=0x381d00) returned 1 [0093.919] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e68c) returned 1 [0093.919] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e698) returned 1 [0093.919] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e6cc) returned 1 [0093.919] GetFullPathNameW (in: lpFileName="C:\\Users\\Default\\AppData\\Roaming\\Microsoft\\Protect", nBufferLength=0x105, lpBuffer=0x31e1d4, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\Default\\AppData\\Roaming\\Microsoft\\Protect", lpFilePart=0x0) returned 0x32 [0093.919] GetFullPathNameW (in: lpFileName="C:\\Users\\Default\\AppData\\Roaming\\Microsoft\\Protect\\", nBufferLength=0x105, lpBuffer=0x31e1a8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\Default\\AppData\\Roaming\\Microsoft\\Protect\\", lpFilePart=0x0) returned 0x33 [0093.919] FindFirstFileW (in: lpFileName="C:\\Users\\Default\\AppData\\Roaming\\Microsoft\\Protect\\*", lpFindFileData=0x31e3f4 | out: lpFindFileData=0x31e3f4*(dwFileAttributes=0x2014, ftCreationTime.dwLowDateTime=0x62fa4a0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x642afa0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xf29f8e64, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x381d00 [0093.919] FindNextFileW (in: hFindFile=0x381d00, lpFindFileData=0x31e404 | out: lpFindFileData=0x31e404*(dwFileAttributes=0x2014, ftCreationTime.dwLowDateTime=0x62fa4a0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x642afa0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xf29f8e64, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0093.919] FindNextFileW (in: hFindFile=0x381d00, lpFindFileData=0x31e404 | out: lpFindFileData=0x31e404*(dwFileAttributes=0x2026, ftCreationTime.dwLowDateTime=0x642afa0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x642afa0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xf29f8e64, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x18, dwReserved0=0x0, dwReserved1=0x0, cFileName="CREDHIST", cAlternateFileName="")) returned 1 [0093.920] FindNextFileW (in: hFindFile=0x381d00, lpFindFileData=0x31e404 | out: lpFindFileData=0x31e404*(dwFileAttributes=0x2014, ftCreationTime.dwLowDateTime=0x62fa4a0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x642afa0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xf2c805c8, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="S-1-5-21-3111613574-2524581245-2586426736-500", cAlternateFileName="S-1-5-~1")) returned 1 [0093.920] FindNextFileW (in: hFindFile=0x381d00, lpFindFileData=0x31e404 | out: lpFindFileData=0x31e404*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0093.920] FindClose (in: hFindFile=0x381d00 | out: hFindFile=0x381d00) returned 1 [0093.920] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e68c) returned 1 [0093.920] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e698) returned 1 [0093.920] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e654) returned 1 [0093.920] GetFullPathNameW (in: lpFileName="C:\\Users\\Default\\AppData\\Roaming\\Microsoft\\Protect\\S-1-5-21-3111613574-2524581245-2586426736-500", nBufferLength=0x105, lpBuffer=0x31e15c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\Default\\AppData\\Roaming\\Microsoft\\Protect\\S-1-5-21-3111613574-2524581245-2586426736-500", lpFilePart=0x0) returned 0x60 [0093.920] GetFullPathNameW (in: lpFileName="C:\\Users\\Default\\AppData\\Roaming\\Microsoft\\Protect\\S-1-5-21-3111613574-2524581245-2586426736-500\\", nBufferLength=0x105, lpBuffer=0x31e130, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\Default\\AppData\\Roaming\\Microsoft\\Protect\\S-1-5-21-3111613574-2524581245-2586426736-500\\", lpFilePart=0x0) returned 0x61 [0093.920] FindFirstFileW (in: lpFileName="C:\\Users\\Default\\AppData\\Roaming\\Microsoft\\Protect\\S-1-5-21-3111613574-2524581245-2586426736-500\\*", lpFindFileData=0x31e37c | out: lpFindFileData=0x31e37c*(dwFileAttributes=0x2014, ftCreationTime.dwLowDateTime=0x62fa4a0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x642afa0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xf2c805c8, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x381d00 [0093.922] FindNextFileW (in: hFindFile=0x381d00, lpFindFileData=0x31e38c | out: lpFindFileData=0x31e38c*(dwFileAttributes=0x2014, ftCreationTime.dwLowDateTime=0x62fa4a0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x642afa0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xf2c805c8, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0093.922] FindNextFileW (in: hFindFile=0x381d00, lpFindFileData=0x31e38c | out: lpFindFileData=0x31e38c*(dwFileAttributes=0x2026, ftCreationTime.dwLowDateTime=0x642afa0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x642afa0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xf2b9bd87, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x1d4, dwReserved0=0x0, dwReserved1=0x0, cFileName="be5b4fbd-cb99-45f5-9462-5f896dd3a6b9", cAlternateFileName="BE5B4F~1")) returned 1 [0093.922] FindNextFileW (in: hFindFile=0x381d00, lpFindFileData=0x31e38c | out: lpFindFileData=0x31e38c*(dwFileAttributes=0x2026, ftCreationTime.dwLowDateTime=0x6404e40, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x6404e40, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xf2c805c8, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x18, dwReserved0=0x0, dwReserved1=0x0, cFileName="Preferred", cAlternateFileName="PREFER~1")) returned 1 [0093.922] FindNextFileW (in: hFindFile=0x381d00, lpFindFileData=0x31e38c | out: lpFindFileData=0x31e38c*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0093.922] FindClose (in: hFindFile=0x381d00 | out: hFindFile=0x381d00) returned 1 [0093.923] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e614) returned 1 [0093.923] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e620) returned 1 [0093.923] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e654) returned 1 [0093.923] GetFullPathNameW (in: lpFileName="C:\\Users\\Default\\AppData\\Roaming\\Microsoft\\Protect\\S-1-5-21-3111613574-2524581245-2586426736-500", nBufferLength=0x105, lpBuffer=0x31e15c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\Default\\AppData\\Roaming\\Microsoft\\Protect\\S-1-5-21-3111613574-2524581245-2586426736-500", lpFilePart=0x0) returned 0x60 [0093.923] GetFullPathNameW (in: lpFileName="C:\\Users\\Default\\AppData\\Roaming\\Microsoft\\Protect\\S-1-5-21-3111613574-2524581245-2586426736-500\\", nBufferLength=0x105, lpBuffer=0x31e130, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\Default\\AppData\\Roaming\\Microsoft\\Protect\\S-1-5-21-3111613574-2524581245-2586426736-500\\", lpFilePart=0x0) returned 0x61 [0093.923] FindFirstFileW (in: lpFileName="C:\\Users\\Default\\AppData\\Roaming\\Microsoft\\Protect\\S-1-5-21-3111613574-2524581245-2586426736-500\\*", lpFindFileData=0x31e37c | out: lpFindFileData=0x31e37c*(dwFileAttributes=0x2014, ftCreationTime.dwLowDateTime=0x62fa4a0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x642afa0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xf2c805c8, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x381d00 [0093.924] FindNextFileW (in: hFindFile=0x381d00, lpFindFileData=0x31e38c | out: lpFindFileData=0x31e38c*(dwFileAttributes=0x2014, ftCreationTime.dwLowDateTime=0x62fa4a0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x642afa0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xf2c805c8, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0093.924] FindNextFileW (in: hFindFile=0x381d00, lpFindFileData=0x31e38c | out: lpFindFileData=0x31e38c*(dwFileAttributes=0x2026, ftCreationTime.dwLowDateTime=0x642afa0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x642afa0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xf2b9bd87, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x1d4, dwReserved0=0x0, dwReserved1=0x0, cFileName="be5b4fbd-cb99-45f5-9462-5f896dd3a6b9", cAlternateFileName="BE5B4F~1")) returned 1 [0093.924] FindNextFileW (in: hFindFile=0x381d00, lpFindFileData=0x31e38c | out: lpFindFileData=0x31e38c*(dwFileAttributes=0x2026, ftCreationTime.dwLowDateTime=0x6404e40, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x6404e40, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xf2c805c8, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x18, dwReserved0=0x0, dwReserved1=0x0, cFileName="Preferred", cAlternateFileName="PREFER~1")) returned 1 [0093.924] FindNextFileW (in: hFindFile=0x381d00, lpFindFileData=0x31e38c | out: lpFindFileData=0x31e38c*(dwFileAttributes=0x2026, ftCreationTime.dwLowDateTime=0x6404e40, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x6404e40, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xf2c805c8, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x18, dwReserved0=0x0, dwReserved1=0x0, cFileName="Preferred", cAlternateFileName="PREFER~1")) returned 0 [0093.924] FindClose (in: hFindFile=0x381d00 | out: hFindFile=0x381d00) returned 1 [0093.925] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e614) returned 1 [0093.925] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e620) returned 1 [0093.925] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e6cc) returned 1 [0093.925] GetFullPathNameW (in: lpFileName="C:\\Users\\Default\\AppData\\Roaming\\Microsoft\\SystemCertificates", nBufferLength=0x105, lpBuffer=0x31e1d4, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\Default\\AppData\\Roaming\\Microsoft\\SystemCertificates", lpFilePart=0x0) returned 0x3d [0093.925] GetFullPathNameW (in: lpFileName="C:\\Users\\Default\\AppData\\Roaming\\Microsoft\\SystemCertificates\\", nBufferLength=0x105, lpBuffer=0x31e1a8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\Default\\AppData\\Roaming\\Microsoft\\SystemCertificates\\", lpFilePart=0x0) returned 0x3e [0093.925] FindFirstFileW (in: lpFileName="C:\\Users\\Default\\AppData\\Roaming\\Microsoft\\SystemCertificates\\*", lpFindFileData=0x31e3f4 | out: lpFindFileData=0x31e3f4*(dwFileAttributes=0x2014, ftCreationTime.dwLowDateTime=0x62fa4a0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x62fa4a0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x96779c3, ftLastWriteTime.dwHighDateTime=0x1cb8927, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x381d00 [0093.926] FindNextFileW (in: hFindFile=0x381d00, lpFindFileData=0x31e404 | out: lpFindFileData=0x31e404*(dwFileAttributes=0x2014, ftCreationTime.dwLowDateTime=0x62fa4a0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x62fa4a0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x96779c3, ftLastWriteTime.dwHighDateTime=0x1cb8927, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0093.926] FindNextFileW (in: hFindFile=0x381d00, lpFindFileData=0x31e404 | out: lpFindFileData=0x31e404*(dwFileAttributes=0x2014, ftCreationTime.dwLowDateTime=0x62fa4a0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x62fa4a0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x96779c3, ftLastWriteTime.dwHighDateTime=0x1cb8927, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="My", cAlternateFileName="")) returned 1 [0093.926] FindNextFileW (in: hFindFile=0x381d00, lpFindFileData=0x31e404 | out: lpFindFileData=0x31e404*(dwFileAttributes=0x2014, ftCreationTime.dwLowDateTime=0x62fa4a0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x62fa4a0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x96779c3, ftLastWriteTime.dwHighDateTime=0x1cb8927, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="My", cAlternateFileName="")) returned 0 [0093.926] FindClose (in: hFindFile=0x381d00 | out: hFindFile=0x381d00) returned 1 [0093.926] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e68c) returned 1 [0093.926] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e698) returned 1 [0093.926] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e6cc) returned 1 [0093.926] GetFullPathNameW (in: lpFileName="C:\\Users\\Default\\AppData\\Roaming\\Microsoft\\SystemCertificates", nBufferLength=0x105, lpBuffer=0x31e1d4, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\Default\\AppData\\Roaming\\Microsoft\\SystemCertificates", lpFilePart=0x0) returned 0x3d [0093.926] GetFullPathNameW (in: lpFileName="C:\\Users\\Default\\AppData\\Roaming\\Microsoft\\SystemCertificates\\", nBufferLength=0x105, lpBuffer=0x31e1a8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\Default\\AppData\\Roaming\\Microsoft\\SystemCertificates\\", lpFilePart=0x0) returned 0x3e [0093.926] FindFirstFileW (in: lpFileName="C:\\Users\\Default\\AppData\\Roaming\\Microsoft\\SystemCertificates\\*", lpFindFileData=0x31e3f4 | out: lpFindFileData=0x31e3f4*(dwFileAttributes=0x2014, ftCreationTime.dwLowDateTime=0x62fa4a0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x62fa4a0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x96779c3, ftLastWriteTime.dwHighDateTime=0x1cb8927, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x381d00 [0093.926] FindNextFileW (in: hFindFile=0x381d00, lpFindFileData=0x31e404 | out: lpFindFileData=0x31e404*(dwFileAttributes=0x2014, ftCreationTime.dwLowDateTime=0x62fa4a0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x62fa4a0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x96779c3, ftLastWriteTime.dwHighDateTime=0x1cb8927, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0093.927] FindNextFileW (in: hFindFile=0x381d00, lpFindFileData=0x31e404 | out: lpFindFileData=0x31e404*(dwFileAttributes=0x2014, ftCreationTime.dwLowDateTime=0x62fa4a0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x62fa4a0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x96779c3, ftLastWriteTime.dwHighDateTime=0x1cb8927, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="My", cAlternateFileName="")) returned 1 [0093.927] FindNextFileW (in: hFindFile=0x381d00, lpFindFileData=0x31e404 | out: lpFindFileData=0x31e404*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0093.927] FindClose (in: hFindFile=0x381d00 | out: hFindFile=0x381d00) returned 1 [0093.927] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e68c) returned 1 [0093.927] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e698) returned 1 [0093.927] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e654) returned 1 [0093.927] GetFullPathNameW (in: lpFileName="C:\\Users\\Default\\AppData\\Roaming\\Microsoft\\SystemCertificates\\My", nBufferLength=0x105, lpBuffer=0x31e15c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\Default\\AppData\\Roaming\\Microsoft\\SystemCertificates\\My", lpFilePart=0x0) returned 0x40 [0093.927] GetFullPathNameW (in: lpFileName="C:\\Users\\Default\\AppData\\Roaming\\Microsoft\\SystemCertificates\\My\\", nBufferLength=0x105, lpBuffer=0x31e130, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\Default\\AppData\\Roaming\\Microsoft\\SystemCertificates\\My\\", lpFilePart=0x0) returned 0x41 [0093.927] FindFirstFileW (in: lpFileName="C:\\Users\\Default\\AppData\\Roaming\\Microsoft\\SystemCertificates\\My\\*", lpFindFileData=0x31e37c | out: lpFindFileData=0x31e37c*(dwFileAttributes=0x2014, ftCreationTime.dwLowDateTime=0x62fa4a0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x62fa4a0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x96779c3, ftLastWriteTime.dwHighDateTime=0x1cb8927, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x381d00 [0093.927] FindNextFileW (in: hFindFile=0x381d00, lpFindFileData=0x31e38c | out: lpFindFileData=0x31e38c*(dwFileAttributes=0x2014, ftCreationTime.dwLowDateTime=0x62fa4a0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x62fa4a0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x96779c3, ftLastWriteTime.dwHighDateTime=0x1cb8927, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0093.928] FindNextFileW (in: hFindFile=0x381d00, lpFindFileData=0x31e38c | out: lpFindFileData=0x31e38c*(dwFileAttributes=0x2014, ftCreationTime.dwLowDateTime=0x62fa4a0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x62fa4a0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x96779c3, ftLastWriteTime.dwHighDateTime=0x1cb8927, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Certificates", cAlternateFileName="CERTIF~1")) returned 1 [0093.928] FindNextFileW (in: hFindFile=0x381d00, lpFindFileData=0x31e38c | out: lpFindFileData=0x31e38c*(dwFileAttributes=0x2014, ftCreationTime.dwLowDateTime=0x62fa4a0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x62fa4a0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x96779c3, ftLastWriteTime.dwHighDateTime=0x1cb8927, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="CRLs", cAlternateFileName="")) returned 1 [0093.928] FindNextFileW (in: hFindFile=0x381d00, lpFindFileData=0x31e38c | out: lpFindFileData=0x31e38c*(dwFileAttributes=0x2014, ftCreationTime.dwLowDateTime=0x62fa4a0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x62fa4a0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x96779c3, ftLastWriteTime.dwHighDateTime=0x1cb8927, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="CTLs", cAlternateFileName="")) returned 1 [0093.928] FindNextFileW (in: hFindFile=0x381d00, lpFindFileData=0x31e38c | out: lpFindFileData=0x31e38c*(dwFileAttributes=0x2014, ftCreationTime.dwLowDateTime=0x62fa4a0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x62fa4a0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x96779c3, ftLastWriteTime.dwHighDateTime=0x1cb8927, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="CTLs", cAlternateFileName="")) returned 0 [0093.928] FindClose (in: hFindFile=0x381d00 | out: hFindFile=0x381d00) returned 1 [0093.928] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e614) returned 1 [0093.928] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e620) returned 1 [0093.928] GetFullPathNameW (in: lpFileName="C:\\Users\\Default\\AppData\\Roaming\\Microsoft\\SystemCertificates\\My", nBufferLength=0x105, lpBuffer=0x31e15c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\Default\\AppData\\Roaming\\Microsoft\\SystemCertificates\\My", lpFilePart=0x0) returned 0x40 [0093.928] GetFullPathNameW (in: lpFileName="C:\\Users\\Default\\AppData\\Roaming\\Microsoft\\SystemCertificates\\My\\", nBufferLength=0x105, lpBuffer=0x31e130, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\Default\\AppData\\Roaming\\Microsoft\\SystemCertificates\\My\\", lpFilePart=0x0) returned 0x41 [0093.928] FindFirstFileW (in: lpFileName="C:\\Users\\Default\\AppData\\Roaming\\Microsoft\\SystemCertificates\\My\\*", lpFindFileData=0x31e37c | out: lpFindFileData=0x31e37c*(dwFileAttributes=0x2014, ftCreationTime.dwLowDateTime=0x62fa4a0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x62fa4a0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x96779c3, ftLastWriteTime.dwHighDateTime=0x1cb8927, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x381d00 [0093.928] FindNextFileW (in: hFindFile=0x381d00, lpFindFileData=0x31e38c | out: lpFindFileData=0x31e38c*(dwFileAttributes=0x2014, ftCreationTime.dwLowDateTime=0x62fa4a0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x62fa4a0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x96779c3, ftLastWriteTime.dwHighDateTime=0x1cb8927, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0093.929] FindNextFileW (in: hFindFile=0x381d00, lpFindFileData=0x31e38c | out: lpFindFileData=0x31e38c*(dwFileAttributes=0x2014, ftCreationTime.dwLowDateTime=0x62fa4a0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x62fa4a0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x96779c3, ftLastWriteTime.dwHighDateTime=0x1cb8927, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Certificates", cAlternateFileName="CERTIF~1")) returned 1 [0093.929] FindNextFileW (in: hFindFile=0x381d00, lpFindFileData=0x31e38c | out: lpFindFileData=0x31e38c*(dwFileAttributes=0x2014, ftCreationTime.dwLowDateTime=0x62fa4a0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x62fa4a0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x96779c3, ftLastWriteTime.dwHighDateTime=0x1cb8927, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="CRLs", cAlternateFileName="")) returned 1 [0093.929] FindNextFileW (in: hFindFile=0x381d00, lpFindFileData=0x31e38c | out: lpFindFileData=0x31e38c*(dwFileAttributes=0x2014, ftCreationTime.dwLowDateTime=0x62fa4a0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x62fa4a0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x96779c3, ftLastWriteTime.dwHighDateTime=0x1cb8927, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="CTLs", cAlternateFileName="")) returned 1 [0093.929] FindNextFileW (in: hFindFile=0x381d00, lpFindFileData=0x31e38c | out: lpFindFileData=0x31e38c*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0093.929] FindClose (in: hFindFile=0x381d00 | out: hFindFile=0x381d00) returned 1 [0093.929] GetFullPathNameW (in: lpFileName="C:\\Users\\Default\\AppData\\Roaming\\Microsoft\\SystemCertificates\\My\\Certificates", nBufferLength=0x105, lpBuffer=0x31e0e4, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\Default\\AppData\\Roaming\\Microsoft\\SystemCertificates\\My\\Certificates", lpFilePart=0x0) returned 0x4d [0093.929] GetFullPathNameW (in: lpFileName="C:\\Users\\Default\\AppData\\Roaming\\Microsoft\\SystemCertificates\\My\\Certificates\\", nBufferLength=0x105, lpBuffer=0x31e0b8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\Default\\AppData\\Roaming\\Microsoft\\SystemCertificates\\My\\Certificates\\", lpFilePart=0x0) returned 0x4e [0093.929] FindFirstFileW (in: lpFileName="C:\\Users\\Default\\AppData\\Roaming\\Microsoft\\SystemCertificates\\My\\Certificates\\*", lpFindFileData=0x31e304 | out: lpFindFileData=0x31e304*(dwFileAttributes=0x2014, ftCreationTime.dwLowDateTime=0x62fa4a0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x62fa4a0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x96779c3, ftLastWriteTime.dwHighDateTime=0x1cb8927, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x381d00 [0093.930] FindNextFileW (in: hFindFile=0x381d00, lpFindFileData=0x31e314 | out: lpFindFileData=0x31e314*(dwFileAttributes=0x2014, ftCreationTime.dwLowDateTime=0x62fa4a0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x62fa4a0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x96779c3, ftLastWriteTime.dwHighDateTime=0x1cb8927, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0093.930] FindNextFileW (in: hFindFile=0x381d00, lpFindFileData=0x31e314 | out: lpFindFileData=0x31e314*(dwFileAttributes=0x2014, ftCreationTime.dwLowDateTime=0x62fa4a0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x62fa4a0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x96779c3, ftLastWriteTime.dwHighDateTime=0x1cb8927, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 0 [0093.930] FindClose (in: hFindFile=0x381d00 | out: hFindFile=0x381d00) returned 1 [0093.930] GetFullPathNameW (in: lpFileName="C:\\Users\\Default\\AppData\\Roaming\\Microsoft\\SystemCertificates\\My\\Certificates", nBufferLength=0x105, lpBuffer=0x31e0e4, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\Default\\AppData\\Roaming\\Microsoft\\SystemCertificates\\My\\Certificates", lpFilePart=0x0) returned 0x4d [0093.930] GetFullPathNameW (in: lpFileName="C:\\Users\\Default\\AppData\\Roaming\\Microsoft\\SystemCertificates\\My\\Certificates\\", nBufferLength=0x105, lpBuffer=0x31e0b8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\Default\\AppData\\Roaming\\Microsoft\\SystemCertificates\\My\\Certificates\\", lpFilePart=0x0) returned 0x4e [0093.931] FindFirstFileW (in: lpFileName="C:\\Users\\Default\\AppData\\Roaming\\Microsoft\\SystemCertificates\\My\\Certificates\\*", lpFindFileData=0x31e304 | out: lpFindFileData=0x31e304*(dwFileAttributes=0x2014, ftCreationTime.dwLowDateTime=0x62fa4a0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x62fa4a0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x96779c3, ftLastWriteTime.dwHighDateTime=0x1cb8927, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x381d00 [0093.931] FindNextFileW (in: hFindFile=0x381d00, lpFindFileData=0x31e314 | out: lpFindFileData=0x31e314*(dwFileAttributes=0x2014, ftCreationTime.dwLowDateTime=0x62fa4a0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x62fa4a0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x96779c3, ftLastWriteTime.dwHighDateTime=0x1cb8927, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0093.931] FindNextFileW (in: hFindFile=0x381d00, lpFindFileData=0x31e314 | out: lpFindFileData=0x31e314*(dwFileAttributes=0x2014, ftCreationTime.dwLowDateTime=0x62fa4a0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x62fa4a0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x96779c3, ftLastWriteTime.dwHighDateTime=0x1cb8927, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 0 [0093.931] FindClose (in: hFindFile=0x381d00 | out: hFindFile=0x381d00) returned 1 [0093.931] GetFullPathNameW (in: lpFileName="C:\\Users\\Default\\AppData\\Roaming\\Microsoft\\SystemCertificates\\My\\CRLs", nBufferLength=0x105, lpBuffer=0x31e0e4, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\Default\\AppData\\Roaming\\Microsoft\\SystemCertificates\\My\\CRLs", lpFilePart=0x0) returned 0x45 [0093.931] GetFullPathNameW (in: lpFileName="C:\\Users\\Default\\AppData\\Roaming\\Microsoft\\SystemCertificates\\My\\CRLs\\", nBufferLength=0x105, lpBuffer=0x31e0b8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\Default\\AppData\\Roaming\\Microsoft\\SystemCertificates\\My\\CRLs\\", lpFilePart=0x0) returned 0x46 [0093.931] FindFirstFileW (in: lpFileName="C:\\Users\\Default\\AppData\\Roaming\\Microsoft\\SystemCertificates\\My\\CRLs\\*", lpFindFileData=0x31e304 | out: lpFindFileData=0x31e304*(dwFileAttributes=0x2014, ftCreationTime.dwLowDateTime=0x62fa4a0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x62fa4a0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x96779c3, ftLastWriteTime.dwHighDateTime=0x1cb8927, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x381d00 [0093.931] FindNextFileW (in: hFindFile=0x381d00, lpFindFileData=0x31e314 | out: lpFindFileData=0x31e314*(dwFileAttributes=0x2014, ftCreationTime.dwLowDateTime=0x62fa4a0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x62fa4a0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x96779c3, ftLastWriteTime.dwHighDateTime=0x1cb8927, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0093.932] FindNextFileW (in: hFindFile=0x381d00, lpFindFileData=0x31e314 | out: lpFindFileData=0x31e314*(dwFileAttributes=0x2014, ftCreationTime.dwLowDateTime=0x62fa4a0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x62fa4a0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x96779c3, ftLastWriteTime.dwHighDateTime=0x1cb8927, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 0 [0093.932] FindClose (in: hFindFile=0x381d00 | out: hFindFile=0x381d00) returned 1 [0093.932] GetFullPathNameW (in: lpFileName="C:\\Users\\Default\\AppData\\Roaming\\Microsoft\\SystemCertificates\\My\\CRLs", nBufferLength=0x105, lpBuffer=0x31e0e4, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\Default\\AppData\\Roaming\\Microsoft\\SystemCertificates\\My\\CRLs", lpFilePart=0x0) returned 0x45 [0093.932] GetFullPathNameW (in: lpFileName="C:\\Users\\Default\\AppData\\Roaming\\Microsoft\\SystemCertificates\\My\\CRLs\\", nBufferLength=0x105, lpBuffer=0x31e0b8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\Default\\AppData\\Roaming\\Microsoft\\SystemCertificates\\My\\CRLs\\", lpFilePart=0x0) returned 0x46 [0093.932] FindFirstFileW (in: lpFileName="C:\\Users\\Default\\AppData\\Roaming\\Microsoft\\SystemCertificates\\My\\CRLs\\*", lpFindFileData=0x31e304 | out: lpFindFileData=0x31e304*(dwFileAttributes=0x2014, ftCreationTime.dwLowDateTime=0x62fa4a0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x62fa4a0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x96779c3, ftLastWriteTime.dwHighDateTime=0x1cb8927, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x381d00 [0093.932] FindNextFileW (in: hFindFile=0x381d00, lpFindFileData=0x31e314 | out: lpFindFileData=0x31e314*(dwFileAttributes=0x2014, ftCreationTime.dwLowDateTime=0x62fa4a0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x62fa4a0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x96779c3, ftLastWriteTime.dwHighDateTime=0x1cb8927, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0093.932] FindNextFileW (in: hFindFile=0x381d00, lpFindFileData=0x31e314 | out: lpFindFileData=0x31e314*(dwFileAttributes=0x2014, ftCreationTime.dwLowDateTime=0x62fa4a0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x62fa4a0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x96779c3, ftLastWriteTime.dwHighDateTime=0x1cb8927, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 0 [0093.932] FindClose (in: hFindFile=0x381d00 | out: hFindFile=0x381d00) returned 1 [0093.932] GetFullPathNameW (in: lpFileName="C:\\Users\\Default\\AppData\\Roaming\\Microsoft\\SystemCertificates\\My\\CTLs", nBufferLength=0x105, lpBuffer=0x31e0e4, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\Default\\AppData\\Roaming\\Microsoft\\SystemCertificates\\My\\CTLs", lpFilePart=0x0) returned 0x45 [0093.932] GetFullPathNameW (in: lpFileName="C:\\Users\\Default\\AppData\\Roaming\\Microsoft\\SystemCertificates\\My\\CTLs\\", nBufferLength=0x105, lpBuffer=0x31e0b8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\Default\\AppData\\Roaming\\Microsoft\\SystemCertificates\\My\\CTLs\\", lpFilePart=0x0) returned 0x46 [0093.932] FindFirstFileW (in: lpFileName="C:\\Users\\Default\\AppData\\Roaming\\Microsoft\\SystemCertificates\\My\\CTLs\\*", lpFindFileData=0x31e304 | out: lpFindFileData=0x31e304*(dwFileAttributes=0x2014, ftCreationTime.dwLowDateTime=0x62fa4a0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x62fa4a0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x96779c3, ftLastWriteTime.dwHighDateTime=0x1cb8927, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x381d00 [0093.933] FindNextFileW (in: hFindFile=0x381d00, lpFindFileData=0x31e314 | out: lpFindFileData=0x31e314*(dwFileAttributes=0x2014, ftCreationTime.dwLowDateTime=0x62fa4a0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x62fa4a0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x96779c3, ftLastWriteTime.dwHighDateTime=0x1cb8927, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0093.933] FindNextFileW (in: hFindFile=0x381d00, lpFindFileData=0x31e314 | out: lpFindFileData=0x31e314*(dwFileAttributes=0x2014, ftCreationTime.dwLowDateTime=0x62fa4a0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x62fa4a0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x96779c3, ftLastWriteTime.dwHighDateTime=0x1cb8927, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 0 [0093.933] FindClose (in: hFindFile=0x381d00 | out: hFindFile=0x381d00) returned 1 [0093.933] GetFullPathNameW (in: lpFileName="C:\\Users\\Default\\AppData\\Roaming\\Microsoft\\SystemCertificates\\My\\CTLs", nBufferLength=0x105, lpBuffer=0x31e0e4, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\Default\\AppData\\Roaming\\Microsoft\\SystemCertificates\\My\\CTLs", lpFilePart=0x0) returned 0x45 [0093.933] GetFullPathNameW (in: lpFileName="C:\\Users\\Default\\AppData\\Roaming\\Microsoft\\SystemCertificates\\My\\CTLs\\", nBufferLength=0x105, lpBuffer=0x31e0b8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\Default\\AppData\\Roaming\\Microsoft\\SystemCertificates\\My\\CTLs\\", lpFilePart=0x0) returned 0x46 [0093.933] FindFirstFileW (in: lpFileName="C:\\Users\\Default\\AppData\\Roaming\\Microsoft\\SystemCertificates\\My\\CTLs\\*", lpFindFileData=0x31e304 | out: lpFindFileData=0x31e304*(dwFileAttributes=0x2014, ftCreationTime.dwLowDateTime=0x62fa4a0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x62fa4a0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x96779c3, ftLastWriteTime.dwHighDateTime=0x1cb8927, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x381d00 [0093.933] FindNextFileW (in: hFindFile=0x381d00, lpFindFileData=0x31e314 | out: lpFindFileData=0x31e314*(dwFileAttributes=0x2014, ftCreationTime.dwLowDateTime=0x62fa4a0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x62fa4a0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x96779c3, ftLastWriteTime.dwHighDateTime=0x1cb8927, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0093.933] FindNextFileW (in: hFindFile=0x381d00, lpFindFileData=0x31e314 | out: lpFindFileData=0x31e314*(dwFileAttributes=0x2014, ftCreationTime.dwLowDateTime=0x62fa4a0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x62fa4a0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x96779c3, ftLastWriteTime.dwHighDateTime=0x1cb8927, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 0 [0093.934] FindClose (in: hFindFile=0x381d00 | out: hFindFile=0x381d00) returned 1 [0093.934] GetFullPathNameW (in: lpFileName="C:\\Users\\Default\\AppData\\Roaming\\Microsoft\\Windows", nBufferLength=0x105, lpBuffer=0x31e1d4, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\Default\\AppData\\Roaming\\Microsoft\\Windows", lpFilePart=0x0) returned 0x32 [0093.934] GetFullPathNameW (in: lpFileName="C:\\Users\\Default\\AppData\\Roaming\\Microsoft\\Windows\\", nBufferLength=0x105, lpBuffer=0x31e1a8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\Default\\AppData\\Roaming\\Microsoft\\Windows\\", lpFilePart=0x0) returned 0x33 [0093.934] FindFirstFileW (in: lpFileName="C:\\Users\\Default\\AppData\\Roaming\\Microsoft\\Windows\\*", lpFindFileData=0x31e3f4 | out: lpFindFileData=0x31e3f4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xfda27f60, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x62fa4a0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xf96b9c4c, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x381d00 [0093.936] FindNextFileW (in: hFindFile=0x381d00, lpFindFileData=0x31e404 | out: lpFindFileData=0x31e404*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xfda27f60, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x62fa4a0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xf96b9c4c, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0093.936] FindNextFileW (in: hFindFile=0x381d00, lpFindFileData=0x31e404 | out: lpFindFileData=0x31e404*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0xfda27f60, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x642afa0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xfe7f4ba2, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Cookies", cAlternateFileName="")) returned 1 [0093.936] FindNextFileW (in: hFindFile=0x381d00, lpFindFileData=0x31e404 | out: lpFindFileData=0x31e404*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x62fa4a0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x62fa4a0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xedd0e6f6, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="IECompatCache", cAlternateFileName="IECOMP~1")) returned 1 [0093.936] FindNextFileW (in: hFindFile=0x381d00, lpFindFileData=0x31e404 | out: lpFindFileData=0x31e404*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0x62fa4a0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x642afa0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xfe9256a4, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="IETldCache", cAlternateFileName="IETLDC~1")) returned 1 [0093.936] FindNextFileW (in: hFindFile=0x381d00, lpFindFileData=0x31e404 | out: lpFindFileData=0x31e404*(dwFileAttributes=0x2011, ftCreationTime.dwLowDateTime=0x62fa4a0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x6404e40, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xd894d74c, ftLastWriteTime.dwHighDateTime=0x1cb892d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Libraries", cAlternateFileName="LIBRAR~1")) returned 1 [0093.937] FindNextFileW (in: hFindFile=0x381d00, lpFindFileData=0x31e404 | out: lpFindFileData=0x31e404*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xfda27f60, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfda27f60, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xaeeef71c, ftLastWriteTime.dwHighDateTime=0x1ca042b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Network Shortcuts", cAlternateFileName="NETWOR~1")) returned 1 [0093.937] FindNextFileW (in: hFindFile=0x381d00, lpFindFileData=0x31e404 | out: lpFindFileData=0x31e404*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xfda27f60, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfda27f60, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xb9c40b55, ftLastWriteTime.dwHighDateTime=0x1ca042b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Printer Shortcuts", cAlternateFileName="PRINTE~1")) returned 1 [0093.937] FindNextFileW (in: hFindFile=0x381d00, lpFindFileData=0x31e404 | out: lpFindFileData=0x31e404*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x62fa4a0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x62fa4a0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xedd0e6f6, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="PrivacIE", cAlternateFileName="")) returned 1 [0093.937] FindNextFileW (in: hFindFile=0x381d00, lpFindFileData=0x31e404 | out: lpFindFileData=0x31e404*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0xfda27f60, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x6404e40, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xd88b51cb, ftLastWriteTime.dwHighDateTime=0x1cb892d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Recent", cAlternateFileName="")) returned 1 [0093.937] FindNextFileW (in: hFindFile=0x381d00, lpFindFileData=0x31e404 | out: lpFindFileData=0x31e404*(dwFileAttributes=0x2011, ftCreationTime.dwLowDateTime=0xfda27f60, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x6404e40, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xf9b7c855, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="SendTo", cAlternateFileName="")) returned 1 [0093.937] FindNextFileW (in: hFindFile=0x381d00, lpFindFileData=0x31e404 | out: lpFindFileData=0x31e404*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0xfda27f60, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x63dece0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xd888f06b, ftLastWriteTime.dwHighDateTime=0x1cb892d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Start Menu", cAlternateFileName="STARTM~1")) returned 1 [0093.937] FindNextFileW (in: hFindFile=0x381d00, lpFindFileData=0x31e404 | out: lpFindFileData=0x31e404*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xfda4e0ba, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfda4e0ba, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xaef15879, ftLastWriteTime.dwHighDateTime=0x1ca042b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Templates", cAlternateFileName="TEMPLA~1")) returned 1 [0093.938] FindNextFileW (in: hFindFile=0x381d00, lpFindFileData=0x31e404 | out: lpFindFileData=0x31e404*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x62fa4a0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x6404e40, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xef632f84, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Themes", cAlternateFileName="")) returned 1 [0093.938] FindNextFileW (in: hFindFile=0x381d00, lpFindFileData=0x31e404 | out: lpFindFileData=0x31e404*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x62fa4a0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x6404e40, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xef632f84, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Themes", cAlternateFileName="")) returned 0 [0093.938] FindClose (in: hFindFile=0x381d00 | out: hFindFile=0x381d00) returned 1 [0093.938] GetFullPathNameW (in: lpFileName="C:\\Users\\Default\\AppData\\Roaming\\Microsoft\\Windows", nBufferLength=0x105, lpBuffer=0x31e1d4, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\Default\\AppData\\Roaming\\Microsoft\\Windows", lpFilePart=0x0) returned 0x32 [0093.939] GetFullPathNameW (in: lpFileName="C:\\Users\\Default\\AppData\\Roaming\\Microsoft\\Windows\\", nBufferLength=0x105, lpBuffer=0x31e1a8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\Default\\AppData\\Roaming\\Microsoft\\Windows\\", lpFilePart=0x0) returned 0x33 [0093.939] FindFirstFileW (in: lpFileName="C:\\Users\\Default\\AppData\\Roaming\\Microsoft\\Windows\\*", lpFindFileData=0x31e3f4 | out: lpFindFileData=0x31e3f4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xfda27f60, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x62fa4a0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xf96b9c4c, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x381d00 [0093.939] FindNextFileW (in: hFindFile=0x381d00, lpFindFileData=0x31e404 | out: lpFindFileData=0x31e404*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xfda27f60, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x62fa4a0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xf96b9c4c, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0093.939] FindNextFileW (in: hFindFile=0x381d00, lpFindFileData=0x31e404 | out: lpFindFileData=0x31e404*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0xfda27f60, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x642afa0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xfe7f4ba2, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Cookies", cAlternateFileName="")) returned 1 [0093.940] FindNextFileW (in: hFindFile=0x381d00, lpFindFileData=0x31e404 | out: lpFindFileData=0x31e404*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x62fa4a0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x62fa4a0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xedd0e6f6, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="IECompatCache", cAlternateFileName="IECOMP~1")) returned 1 [0093.940] FindNextFileW (in: hFindFile=0x381d00, lpFindFileData=0x31e404 | out: lpFindFileData=0x31e404*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0x62fa4a0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x642afa0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xfe9256a4, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="IETldCache", cAlternateFileName="IETLDC~1")) returned 1 [0093.940] FindNextFileW (in: hFindFile=0x381d00, lpFindFileData=0x31e404 | out: lpFindFileData=0x31e404*(dwFileAttributes=0x2011, ftCreationTime.dwLowDateTime=0x62fa4a0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x6404e40, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xd894d74c, ftLastWriteTime.dwHighDateTime=0x1cb892d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Libraries", cAlternateFileName="LIBRAR~1")) returned 1 [0093.940] FindNextFileW (in: hFindFile=0x381d00, lpFindFileData=0x31e404 | out: lpFindFileData=0x31e404*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xfda27f60, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfda27f60, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xaeeef71c, ftLastWriteTime.dwHighDateTime=0x1ca042b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Network Shortcuts", cAlternateFileName="NETWOR~1")) returned 1 [0093.940] FindNextFileW (in: hFindFile=0x381d00, lpFindFileData=0x31e404 | out: lpFindFileData=0x31e404*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xfda27f60, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfda27f60, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xb9c40b55, ftLastWriteTime.dwHighDateTime=0x1ca042b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Printer Shortcuts", cAlternateFileName="PRINTE~1")) returned 1 [0093.940] FindNextFileW (in: hFindFile=0x381d00, lpFindFileData=0x31e404 | out: lpFindFileData=0x31e404*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x62fa4a0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x62fa4a0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xedd0e6f6, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="PrivacIE", cAlternateFileName="")) returned 1 [0093.940] FindNextFileW (in: hFindFile=0x381d00, lpFindFileData=0x31e404 | out: lpFindFileData=0x31e404*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0xfda27f60, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x6404e40, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xd88b51cb, ftLastWriteTime.dwHighDateTime=0x1cb892d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Recent", cAlternateFileName="")) returned 1 [0093.940] FindNextFileW (in: hFindFile=0x381d00, lpFindFileData=0x31e404 | out: lpFindFileData=0x31e404*(dwFileAttributes=0x2011, ftCreationTime.dwLowDateTime=0xfda27f60, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x6404e40, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xf9b7c855, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="SendTo", cAlternateFileName="")) returned 1 [0093.940] FindNextFileW (in: hFindFile=0x381d00, lpFindFileData=0x31e404 | out: lpFindFileData=0x31e404*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0xfda27f60, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x63dece0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xd888f06b, ftLastWriteTime.dwHighDateTime=0x1cb892d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Start Menu", cAlternateFileName="STARTM~1")) returned 1 [0093.941] FindNextFileW (in: hFindFile=0x381d00, lpFindFileData=0x31e404 | out: lpFindFileData=0x31e404*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xfda4e0ba, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfda4e0ba, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xaef15879, ftLastWriteTime.dwHighDateTime=0x1ca042b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Templates", cAlternateFileName="TEMPLA~1")) returned 1 [0093.941] FindNextFileW (in: hFindFile=0x381d00, lpFindFileData=0x31e404 | out: lpFindFileData=0x31e404*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x62fa4a0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x6404e40, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xef632f84, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Themes", cAlternateFileName="")) returned 1 [0093.941] FindNextFileW (in: hFindFile=0x381d00, lpFindFileData=0x31e404 | out: lpFindFileData=0x31e404*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0093.941] FindClose (in: hFindFile=0x381d00 | out: hFindFile=0x381d00) returned 1 [0093.942] GetFullPathNameW (in: lpFileName="C:\\Users\\Default\\AppData\\Roaming\\Microsoft\\Windows\\Cookies", nBufferLength=0x105, lpBuffer=0x31e15c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\Default\\AppData\\Roaming\\Microsoft\\Windows\\Cookies", lpFilePart=0x0) returned 0x3a [0093.942] GetFullPathNameW (in: lpFileName="C:\\Users\\Default\\AppData\\Roaming\\Microsoft\\Windows\\Cookies\\", nBufferLength=0x105, lpBuffer=0x31e130, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\Default\\AppData\\Roaming\\Microsoft\\Windows\\Cookies\\", lpFilePart=0x0) returned 0x3b [0093.942] FindFirstFileW (in: lpFileName="C:\\Users\\Default\\AppData\\Roaming\\Microsoft\\Windows\\Cookies\\*", lpFindFileData=0x31e37c | out: lpFindFileData=0x31e37c*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0xfda27f60, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x642afa0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xfe7f4ba2, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x381d00 [0093.942] FindNextFileW (in: hFindFile=0x381d00, lpFindFileData=0x31e38c | out: lpFindFileData=0x31e38c*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0xfda27f60, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x642afa0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xfe7f4ba2, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0093.943] FindNextFileW (in: hFindFile=0x381d00, lpFindFileData=0x31e38c | out: lpFindFileData=0x31e38c*(dwFileAttributes=0x2026, ftCreationTime.dwLowDateTime=0x6404e40, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x6404e40, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xd021fb60, ftLastWriteTime.dwHighDateTime=0x1cb892e, nFileSizeHigh=0x0, nFileSizeLow=0x4000, dwReserved0=0x0, dwReserved1=0x0, cFileName="index.dat", cAlternateFileName="")) returned 1 [0093.943] FindNextFileW (in: hFindFile=0x381d00, lpFindFileData=0x31e38c | out: lpFindFileData=0x31e38c*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0093.943] FindClose (in: hFindFile=0x381d00 | out: hFindFile=0x381d00) returned 1 [0093.943] GetFullPathNameW (in: lpFileName="C:\\Users\\Default\\AppData\\Roaming\\Microsoft\\Windows\\Cookies", nBufferLength=0x105, lpBuffer=0x31e15c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\Default\\AppData\\Roaming\\Microsoft\\Windows\\Cookies", lpFilePart=0x0) returned 0x3a [0093.943] GetFullPathNameW (in: lpFileName="C:\\Users\\Default\\AppData\\Roaming\\Microsoft\\Windows\\Cookies\\", nBufferLength=0x105, lpBuffer=0x31e130, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\Default\\AppData\\Roaming\\Microsoft\\Windows\\Cookies\\", lpFilePart=0x0) returned 0x3b [0093.943] FindFirstFileW (in: lpFileName="C:\\Users\\Default\\AppData\\Roaming\\Microsoft\\Windows\\Cookies\\*", lpFindFileData=0x31e37c | out: lpFindFileData=0x31e37c*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0xfda27f60, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x642afa0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xfe7f4ba2, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x381d00 [0093.943] FindNextFileW (in: hFindFile=0x381d00, lpFindFileData=0x31e38c | out: lpFindFileData=0x31e38c*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0xfda27f60, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x642afa0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xfe7f4ba2, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0093.943] FindNextFileW (in: hFindFile=0x381d00, lpFindFileData=0x31e38c | out: lpFindFileData=0x31e38c*(dwFileAttributes=0x2026, ftCreationTime.dwLowDateTime=0x6404e40, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x6404e40, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xd021fb60, ftLastWriteTime.dwHighDateTime=0x1cb892e, nFileSizeHigh=0x0, nFileSizeLow=0x4000, dwReserved0=0x0, dwReserved1=0x0, cFileName="index.dat", cAlternateFileName="")) returned 1 [0093.944] FindNextFileW (in: hFindFile=0x381d00, lpFindFileData=0x31e38c | out: lpFindFileData=0x31e38c*(dwFileAttributes=0x2026, ftCreationTime.dwLowDateTime=0x6404e40, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x6404e40, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xd021fb60, ftLastWriteTime.dwHighDateTime=0x1cb892e, nFileSizeHigh=0x0, nFileSizeLow=0x4000, dwReserved0=0x0, dwReserved1=0x0, cFileName="index.dat", cAlternateFileName="")) returned 0 [0093.944] FindClose (in: hFindFile=0x381d00 | out: hFindFile=0x381d00) returned 1 [0093.944] GetFullPathNameW (in: lpFileName="C:\\Users\\Default\\AppData\\Roaming\\Microsoft\\Windows\\IECompatCache", nBufferLength=0x105, lpBuffer=0x31e15c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\Default\\AppData\\Roaming\\Microsoft\\Windows\\IECompatCache", lpFilePart=0x0) returned 0x40 [0093.944] GetFullPathNameW (in: lpFileName="C:\\Users\\Default\\AppData\\Roaming\\Microsoft\\Windows\\IECompatCache\\", nBufferLength=0x105, lpBuffer=0x31e130, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\Default\\AppData\\Roaming\\Microsoft\\Windows\\IECompatCache\\", lpFilePart=0x0) returned 0x41 [0093.944] FindFirstFileW (in: lpFileName="C:\\Users\\Default\\AppData\\Roaming\\Microsoft\\Windows\\IECompatCache\\*", lpFindFileData=0x31e37c | out: lpFindFileData=0x31e37c*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x62fa4a0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x62fa4a0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xedd0e6f6, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x381d00 [0093.945] FindNextFileW (in: hFindFile=0x381d00, lpFindFileData=0x31e38c | out: lpFindFileData=0x31e38c*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x62fa4a0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x62fa4a0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xedd0e6f6, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0093.945] FindNextFileW (in: hFindFile=0x381d00, lpFindFileData=0x31e38c | out: lpFindFileData=0x31e38c*(dwFileAttributes=0x2012, ftCreationTime.dwLowDateTime=0x62fa4a0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x62fa4a0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xedd0e6f6, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Low", cAlternateFileName="")) returned 1 [0093.945] FindNextFileW (in: hFindFile=0x381d00, lpFindFileData=0x31e38c | out: lpFindFileData=0x31e38c*(dwFileAttributes=0x2012, ftCreationTime.dwLowDateTime=0x62fa4a0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x62fa4a0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xedd0e6f6, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Low", cAlternateFileName="")) returned 0 [0093.945] FindClose (in: hFindFile=0x381d00 | out: hFindFile=0x381d00) returned 1 [0093.945] GetFullPathNameW (in: lpFileName="C:\\Users\\Default\\AppData\\Roaming\\Microsoft\\Windows\\IECompatCache", nBufferLength=0x105, lpBuffer=0x31e15c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\Default\\AppData\\Roaming\\Microsoft\\Windows\\IECompatCache", lpFilePart=0x0) returned 0x40 [0093.945] GetFullPathNameW (in: lpFileName="C:\\Users\\Default\\AppData\\Roaming\\Microsoft\\Windows\\IECompatCache\\", nBufferLength=0x105, lpBuffer=0x31e130, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\Default\\AppData\\Roaming\\Microsoft\\Windows\\IECompatCache\\", lpFilePart=0x0) returned 0x41 [0093.945] FindFirstFileW (in: lpFileName="C:\\Users\\Default\\AppData\\Roaming\\Microsoft\\Windows\\IECompatCache\\*", lpFindFileData=0x31e37c | out: lpFindFileData=0x31e37c*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x62fa4a0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x62fa4a0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xedd0e6f6, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x381d00 [0093.945] FindNextFileW (in: hFindFile=0x381d00, lpFindFileData=0x31e38c | out: lpFindFileData=0x31e38c*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x62fa4a0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x62fa4a0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xedd0e6f6, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0093.945] FindNextFileW (in: hFindFile=0x381d00, lpFindFileData=0x31e38c | out: lpFindFileData=0x31e38c*(dwFileAttributes=0x2012, ftCreationTime.dwLowDateTime=0x62fa4a0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x62fa4a0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xedd0e6f6, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Low", cAlternateFileName="")) returned 1 [0093.945] FindNextFileW (in: hFindFile=0x381d00, lpFindFileData=0x31e38c | out: lpFindFileData=0x31e38c*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0093.945] FindClose (in: hFindFile=0x381d00 | out: hFindFile=0x381d00) returned 1 [0093.945] GetFullPathNameW (in: lpFileName="C:\\Users\\Default\\AppData\\Roaming\\Microsoft\\Windows\\IECompatCache\\Low", nBufferLength=0x105, lpBuffer=0x31e0e4, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\Default\\AppData\\Roaming\\Microsoft\\Windows\\IECompatCache\\Low", lpFilePart=0x0) returned 0x44 [0093.945] GetFullPathNameW (in: lpFileName="C:\\Users\\Default\\AppData\\Roaming\\Microsoft\\Windows\\IECompatCache\\Low\\", nBufferLength=0x105, lpBuffer=0x31e0b8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\Default\\AppData\\Roaming\\Microsoft\\Windows\\IECompatCache\\Low\\", lpFilePart=0x0) returned 0x45 [0093.945] FindFirstFileW (in: lpFileName="C:\\Users\\Default\\AppData\\Roaming\\Microsoft\\Windows\\IECompatCache\\Low\\*", lpFindFileData=0x31e304 | out: lpFindFileData=0x31e304*(dwFileAttributes=0x2012, ftCreationTime.dwLowDateTime=0x62fa4a0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x62fa4a0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xedd0e6f6, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x381d00 [0093.945] FindNextFileW (in: hFindFile=0x381d00, lpFindFileData=0x31e314 | out: lpFindFileData=0x31e314*(dwFileAttributes=0x2012, ftCreationTime.dwLowDateTime=0x62fa4a0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x62fa4a0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xedd0e6f6, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0093.945] FindNextFileW (in: hFindFile=0x381d00, lpFindFileData=0x31e314 | out: lpFindFileData=0x31e314*(dwFileAttributes=0x2012, ftCreationTime.dwLowDateTime=0x62fa4a0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x62fa4a0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xedd0e6f6, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 0 [0093.946] FindClose (in: hFindFile=0x381d00 | out: hFindFile=0x381d00) returned 1 [0093.946] GetFullPathNameW (in: lpFileName="C:\\Users\\Default\\AppData\\Roaming\\Microsoft\\Windows\\IECompatCache\\Low", nBufferLength=0x105, lpBuffer=0x31e0e4, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\Default\\AppData\\Roaming\\Microsoft\\Windows\\IECompatCache\\Low", lpFilePart=0x0) returned 0x44 [0093.946] GetFullPathNameW (in: lpFileName="C:\\Users\\Default\\AppData\\Roaming\\Microsoft\\Windows\\IECompatCache\\Low\\", nBufferLength=0x105, lpBuffer=0x31e0b8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\Default\\AppData\\Roaming\\Microsoft\\Windows\\IECompatCache\\Low\\", lpFilePart=0x0) returned 0x45 [0093.946] FindFirstFileW (in: lpFileName="C:\\Users\\Default\\AppData\\Roaming\\Microsoft\\Windows\\IECompatCache\\Low\\*", lpFindFileData=0x31e304 | out: lpFindFileData=0x31e304*(dwFileAttributes=0x2012, ftCreationTime.dwLowDateTime=0x62fa4a0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x62fa4a0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xedd0e6f6, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x381d00 [0093.946] FindNextFileW (in: hFindFile=0x381d00, lpFindFileData=0x31e314 | out: lpFindFileData=0x31e314*(dwFileAttributes=0x2012, ftCreationTime.dwLowDateTime=0x62fa4a0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x62fa4a0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xedd0e6f6, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0093.946] FindNextFileW (in: hFindFile=0x381d00, lpFindFileData=0x31e314 | out: lpFindFileData=0x31e314*(dwFileAttributes=0x2012, ftCreationTime.dwLowDateTime=0x62fa4a0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x62fa4a0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xedd0e6f6, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 0 [0093.946] FindClose (in: hFindFile=0x381d00 | out: hFindFile=0x381d00) returned 1 [0093.946] GetFullPathNameW (in: lpFileName="C:\\Users\\Default\\AppData\\Roaming\\Microsoft\\Windows\\IETldCache", nBufferLength=0x105, lpBuffer=0x31e15c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\Default\\AppData\\Roaming\\Microsoft\\Windows\\IETldCache", lpFilePart=0x0) returned 0x3d [0093.946] GetFullPathNameW (in: lpFileName="C:\\Users\\Default\\AppData\\Roaming\\Microsoft\\Windows\\IETldCache\\", nBufferLength=0x105, lpBuffer=0x31e130, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\Default\\AppData\\Roaming\\Microsoft\\Windows\\IETldCache\\", lpFilePart=0x0) returned 0x3e [0093.946] FindFirstFileW (in: lpFileName="C:\\Users\\Default\\AppData\\Roaming\\Microsoft\\Windows\\IETldCache\\*", lpFindFileData=0x31e37c | out: lpFindFileData=0x31e37c*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0x62fa4a0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x642afa0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xfe9256a4, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x381d00 [0093.948] FindNextFileW (in: hFindFile=0x381d00, lpFindFileData=0x31e38c | out: lpFindFileData=0x31e38c*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0x62fa4a0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x642afa0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xfe9256a4, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0093.948] FindNextFileW (in: hFindFile=0x381d00, lpFindFileData=0x31e38c | out: lpFindFileData=0x31e38c*(dwFileAttributes=0x2026, ftCreationTime.dwLowDateTime=0x6404e40, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x6404e40, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xfe6c3ce0, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x3c000, dwReserved0=0x0, dwReserved1=0x0, cFileName="index.dat", cAlternateFileName="")) returned 1 [0093.948] FindNextFileW (in: hFindFile=0x381d00, lpFindFileData=0x31e38c | out: lpFindFileData=0x31e38c*(dwFileAttributes=0x2012, ftCreationTime.dwLowDateTime=0x62fa4a0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x62fa4a0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xedd0e6f6, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Low", cAlternateFileName="")) returned 1 [0093.948] FindNextFileW (in: hFindFile=0x381d00, lpFindFileData=0x31e38c | out: lpFindFileData=0x31e38c*(dwFileAttributes=0x2012, ftCreationTime.dwLowDateTime=0x62fa4a0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x62fa4a0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xedd0e6f6, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Low", cAlternateFileName="")) returned 0 [0093.948] FindClose (in: hFindFile=0x381d00 | out: hFindFile=0x381d00) returned 1 [0093.948] GetFullPathNameW (in: lpFileName="C:\\Users\\Default\\AppData\\Roaming\\Microsoft\\Windows\\IETldCache", nBufferLength=0x105, lpBuffer=0x31e15c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\Default\\AppData\\Roaming\\Microsoft\\Windows\\IETldCache", lpFilePart=0x0) returned 0x3d [0093.948] GetFullPathNameW (in: lpFileName="C:\\Users\\Default\\AppData\\Roaming\\Microsoft\\Windows\\IETldCache\\", nBufferLength=0x105, lpBuffer=0x31e130, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\Default\\AppData\\Roaming\\Microsoft\\Windows\\IETldCache\\", lpFilePart=0x0) returned 0x3e [0093.948] FindFirstFileW (in: lpFileName="C:\\Users\\Default\\AppData\\Roaming\\Microsoft\\Windows\\IETldCache\\*", lpFindFileData=0x31e37c | out: lpFindFileData=0x31e37c*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0x62fa4a0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x642afa0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xfe9256a4, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x381d00 [0093.948] FindNextFileW (in: hFindFile=0x381d00, lpFindFileData=0x31e38c | out: lpFindFileData=0x31e38c*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0x62fa4a0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x642afa0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xfe9256a4, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0093.948] FindNextFileW (in: hFindFile=0x381d00, lpFindFileData=0x31e38c | out: lpFindFileData=0x31e38c*(dwFileAttributes=0x2026, ftCreationTime.dwLowDateTime=0x6404e40, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x6404e40, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xfe6c3ce0, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x3c000, dwReserved0=0x0, dwReserved1=0x0, cFileName="index.dat", cAlternateFileName="")) returned 1 [0093.948] FindNextFileW (in: hFindFile=0x381d00, lpFindFileData=0x31e38c | out: lpFindFileData=0x31e38c*(dwFileAttributes=0x2012, ftCreationTime.dwLowDateTime=0x62fa4a0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x62fa4a0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xedd0e6f6, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Low", cAlternateFileName="")) returned 1 [0093.948] FindNextFileW (in: hFindFile=0x381d00, lpFindFileData=0x31e38c | out: lpFindFileData=0x31e38c*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0093.948] FindClose (in: hFindFile=0x381d00 | out: hFindFile=0x381d00) returned 1 [0093.949] GetFullPathNameW (in: lpFileName="C:\\Users\\Default\\AppData\\Roaming\\Microsoft\\Windows\\IETldCache\\Low", nBufferLength=0x105, lpBuffer=0x31e0e4, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\Default\\AppData\\Roaming\\Microsoft\\Windows\\IETldCache\\Low", lpFilePart=0x0) returned 0x41 [0093.949] GetFullPathNameW (in: lpFileName="C:\\Users\\Default\\AppData\\Roaming\\Microsoft\\Windows\\IETldCache\\Low\\", nBufferLength=0x105, lpBuffer=0x31e0b8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\Default\\AppData\\Roaming\\Microsoft\\Windows\\IETldCache\\Low\\", lpFilePart=0x0) returned 0x42 [0093.949] FindFirstFileW (in: lpFileName="C:\\Users\\Default\\AppData\\Roaming\\Microsoft\\Windows\\IETldCache\\Low\\*", lpFindFileData=0x31e304 | out: lpFindFileData=0x31e304*(dwFileAttributes=0x2012, ftCreationTime.dwLowDateTime=0x62fa4a0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x62fa4a0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xedd0e6f6, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x381d00 [0093.949] FindNextFileW (in: hFindFile=0x381d00, lpFindFileData=0x31e314 | out: lpFindFileData=0x31e314*(dwFileAttributes=0x2012, ftCreationTime.dwLowDateTime=0x62fa4a0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x62fa4a0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xedd0e6f6, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0093.949] FindNextFileW (in: hFindFile=0x381d00, lpFindFileData=0x31e314 | out: lpFindFileData=0x31e314*(dwFileAttributes=0x2012, ftCreationTime.dwLowDateTime=0x62fa4a0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x62fa4a0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xedd0e6f6, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 0 [0093.949] FindClose (in: hFindFile=0x381d00 | out: hFindFile=0x381d00) returned 1 [0093.949] GetFullPathNameW (in: lpFileName="C:\\Users\\Default\\AppData\\Roaming\\Microsoft\\Windows\\IETldCache\\Low", nBufferLength=0x105, lpBuffer=0x31e0e4, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\Default\\AppData\\Roaming\\Microsoft\\Windows\\IETldCache\\Low", lpFilePart=0x0) returned 0x41 [0093.949] GetFullPathNameW (in: lpFileName="C:\\Users\\Default\\AppData\\Roaming\\Microsoft\\Windows\\IETldCache\\Low\\", nBufferLength=0x105, lpBuffer=0x31e0b8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\Default\\AppData\\Roaming\\Microsoft\\Windows\\IETldCache\\Low\\", lpFilePart=0x0) returned 0x42 [0093.949] FindFirstFileW (in: lpFileName="C:\\Users\\Default\\AppData\\Roaming\\Microsoft\\Windows\\IETldCache\\Low\\*", lpFindFileData=0x31e304 | out: lpFindFileData=0x31e304*(dwFileAttributes=0x2012, ftCreationTime.dwLowDateTime=0x62fa4a0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x62fa4a0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xedd0e6f6, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x381d00 [0093.949] FindNextFileW (in: hFindFile=0x381d00, lpFindFileData=0x31e314 | out: lpFindFileData=0x31e314*(dwFileAttributes=0x2012, ftCreationTime.dwLowDateTime=0x62fa4a0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x62fa4a0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xedd0e6f6, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0093.949] FindNextFileW (in: hFindFile=0x381d00, lpFindFileData=0x31e314 | out: lpFindFileData=0x31e314*(dwFileAttributes=0x2012, ftCreationTime.dwLowDateTime=0x62fa4a0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x62fa4a0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xedd0e6f6, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 0 [0093.949] FindClose (in: hFindFile=0x381d00 | out: hFindFile=0x381d00) returned 1 [0093.949] GetFullPathNameW (in: lpFileName="C:\\Users\\Default\\AppData\\Roaming\\Microsoft\\Windows\\Libraries", nBufferLength=0x105, lpBuffer=0x31e15c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\Default\\AppData\\Roaming\\Microsoft\\Windows\\Libraries", lpFilePart=0x0) returned 0x3c [0093.949] GetFullPathNameW (in: lpFileName="C:\\Users\\Default\\AppData\\Roaming\\Microsoft\\Windows\\Libraries\\", nBufferLength=0x105, lpBuffer=0x31e130, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\Default\\AppData\\Roaming\\Microsoft\\Windows\\Libraries\\", lpFilePart=0x0) returned 0x3d [0093.949] FindFirstFileW (in: lpFileName="C:\\Users\\Default\\AppData\\Roaming\\Microsoft\\Windows\\Libraries\\*", lpFindFileData=0x31e37c | out: lpFindFileData=0x31e37c*(dwFileAttributes=0x2011, ftCreationTime.dwLowDateTime=0x62fa4a0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x6404e40, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xd894d74c, ftLastWriteTime.dwHighDateTime=0x1cb892d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x381d00 [0093.951] FindNextFileW (in: hFindFile=0x381d00, lpFindFileData=0x31e38c | out: lpFindFileData=0x31e38c*(dwFileAttributes=0x2011, ftCreationTime.dwLowDateTime=0x62fa4a0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x6404e40, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xd894d74c, ftLastWriteTime.dwHighDateTime=0x1cb892d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0093.951] FindNextFileW (in: hFindFile=0x381d00, lpFindFileData=0x31e38c | out: lpFindFileData=0x31e38c*(dwFileAttributes=0x2026, ftCreationTime.dwLowDateTime=0x6404e40, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x6404e40, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xd89275ec, ftLastWriteTime.dwHighDateTime=0x1cb892d, nFileSizeHigh=0x0, nFileSizeLow=0x112, dwReserved0=0x0, dwReserved1=0x0, cFileName="desktop.ini", cAlternateFileName="")) returned 1 [0093.951] FindNextFileW (in: hFindFile=0x381d00, lpFindFileData=0x31e38c | out: lpFindFileData=0x31e38c*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x6404e40, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x6404e40, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xd88b51cb, ftLastWriteTime.dwHighDateTime=0x1cb892d, nFileSizeHigh=0x0, nFileSizeLow=0xe03, dwReserved0=0x0, dwReserved1=0x0, cFileName="Documents.library-ms", cAlternateFileName="DOCUME~1.LIB")) returned 1 [0093.951] FindNextFileW (in: hFindFile=0x381d00, lpFindFileData=0x31e38c | out: lpFindFileData=0x31e38c*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x6404e40, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x6404e40, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xd89275ec, ftLastWriteTime.dwHighDateTime=0x1cb892d, nFileSizeHigh=0x0, nFileSizeLow=0xdd9, dwReserved0=0x0, dwReserved1=0x0, cFileName="Music.library-ms", cAlternateFileName="MUSIC~1.LIB")) returned 1 [0093.951] FindNextFileW (in: hFindFile=0x381d00, lpFindFileData=0x31e38c | out: lpFindFileData=0x31e38c*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x6404e40, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x6404e40, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xd88db32b, ftLastWriteTime.dwHighDateTime=0x1cb892d, nFileSizeHigh=0x0, nFileSizeLow=0xdfb, dwReserved0=0x0, dwReserved1=0x0, cFileName="Pictures.library-ms", cAlternateFileName="PICTUR~1.LIB")) returned 1 [0093.951] FindNextFileW (in: hFindFile=0x381d00, lpFindFileData=0x31e38c | out: lpFindFileData=0x31e38c*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x6404e40, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x6404e40, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xd89275ec, ftLastWriteTime.dwHighDateTime=0x1cb892d, nFileSizeHigh=0x0, nFileSizeLow=0xde6, dwReserved0=0x0, dwReserved1=0x0, cFileName="Videos.library-ms", cAlternateFileName="VIDEOS~1.LIB")) returned 1 [0093.951] FindNextFileW (in: hFindFile=0x381d00, lpFindFileData=0x31e38c | out: lpFindFileData=0x31e38c*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0093.951] FindClose (in: hFindFile=0x381d00 | out: hFindFile=0x381d00) returned 1 [0093.952] GetFullPathNameW (in: lpFileName="C:\\Users\\Default\\AppData\\Roaming\\Microsoft\\Windows\\Libraries", nBufferLength=0x105, lpBuffer=0x31e15c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\Default\\AppData\\Roaming\\Microsoft\\Windows\\Libraries", lpFilePart=0x0) returned 0x3c [0093.952] GetFullPathNameW (in: lpFileName="C:\\Users\\Default\\AppData\\Roaming\\Microsoft\\Windows\\Libraries\\", nBufferLength=0x105, lpBuffer=0x31e130, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\Default\\AppData\\Roaming\\Microsoft\\Windows\\Libraries\\", lpFilePart=0x0) returned 0x3d [0093.952] FindFirstFileW (in: lpFileName="C:\\Users\\Default\\AppData\\Roaming\\Microsoft\\Windows\\Libraries\\*", lpFindFileData=0x31e37c | out: lpFindFileData=0x31e37c*(dwFileAttributes=0x2011, ftCreationTime.dwLowDateTime=0x62fa4a0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x6404e40, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xd894d74c, ftLastWriteTime.dwHighDateTime=0x1cb892d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x381d00 [0093.953] FindNextFileW (in: hFindFile=0x381d00, lpFindFileData=0x31e38c | out: lpFindFileData=0x31e38c*(dwFileAttributes=0x2011, ftCreationTime.dwLowDateTime=0x62fa4a0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x6404e40, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xd894d74c, ftLastWriteTime.dwHighDateTime=0x1cb892d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0093.953] FindNextFileW (in: hFindFile=0x381d00, lpFindFileData=0x31e38c | out: lpFindFileData=0x31e38c*(dwFileAttributes=0x2026, ftCreationTime.dwLowDateTime=0x6404e40, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x6404e40, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xd89275ec, ftLastWriteTime.dwHighDateTime=0x1cb892d, nFileSizeHigh=0x0, nFileSizeLow=0x112, dwReserved0=0x0, dwReserved1=0x0, cFileName="desktop.ini", cAlternateFileName="")) returned 1 [0093.953] FindNextFileW (in: hFindFile=0x381d00, lpFindFileData=0x31e38c | out: lpFindFileData=0x31e38c*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x6404e40, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x6404e40, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xd88b51cb, ftLastWriteTime.dwHighDateTime=0x1cb892d, nFileSizeHigh=0x0, nFileSizeLow=0xe03, dwReserved0=0x0, dwReserved1=0x0, cFileName="Documents.library-ms", cAlternateFileName="DOCUME~1.LIB")) returned 1 [0093.953] FindNextFileW (in: hFindFile=0x381d00, lpFindFileData=0x31e38c | out: lpFindFileData=0x31e38c*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x6404e40, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x6404e40, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xd89275ec, ftLastWriteTime.dwHighDateTime=0x1cb892d, nFileSizeHigh=0x0, nFileSizeLow=0xdd9, dwReserved0=0x0, dwReserved1=0x0, cFileName="Music.library-ms", cAlternateFileName="MUSIC~1.LIB")) returned 1 [0093.953] FindNextFileW (in: hFindFile=0x381d00, lpFindFileData=0x31e38c | out: lpFindFileData=0x31e38c*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x6404e40, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x6404e40, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xd88db32b, ftLastWriteTime.dwHighDateTime=0x1cb892d, nFileSizeHigh=0x0, nFileSizeLow=0xdfb, dwReserved0=0x0, dwReserved1=0x0, cFileName="Pictures.library-ms", cAlternateFileName="PICTUR~1.LIB")) returned 1 [0093.953] FindNextFileW (in: hFindFile=0x381d00, lpFindFileData=0x31e38c | out: lpFindFileData=0x31e38c*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x6404e40, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x6404e40, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xd89275ec, ftLastWriteTime.dwHighDateTime=0x1cb892d, nFileSizeHigh=0x0, nFileSizeLow=0xde6, dwReserved0=0x0, dwReserved1=0x0, cFileName="Videos.library-ms", cAlternateFileName="VIDEOS~1.LIB")) returned 1 [0093.953] FindNextFileW (in: hFindFile=0x381d00, lpFindFileData=0x31e38c | out: lpFindFileData=0x31e38c*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x6404e40, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x6404e40, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xd89275ec, ftLastWriteTime.dwHighDateTime=0x1cb892d, nFileSizeHigh=0x0, nFileSizeLow=0xde6, dwReserved0=0x0, dwReserved1=0x0, cFileName="Videos.library-ms", cAlternateFileName="VIDEOS~1.LIB")) returned 0 [0093.953] FindClose (in: hFindFile=0x381d00 | out: hFindFile=0x381d00) returned 1 [0093.954] GetFullPathNameW (in: lpFileName="C:\\Users\\Default\\AppData\\Roaming\\Microsoft\\Windows\\Network Shortcuts", nBufferLength=0x105, lpBuffer=0x31e15c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\Default\\AppData\\Roaming\\Microsoft\\Windows\\Network Shortcuts", lpFilePart=0x0) returned 0x44 [0093.954] GetFullPathNameW (in: lpFileName="C:\\Users\\Default\\AppData\\Roaming\\Microsoft\\Windows\\Network Shortcuts\\", nBufferLength=0x105, lpBuffer=0x31e130, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\Default\\AppData\\Roaming\\Microsoft\\Windows\\Network Shortcuts\\", lpFilePart=0x0) returned 0x45 [0093.954] FindFirstFileW (in: lpFileName="C:\\Users\\Default\\AppData\\Roaming\\Microsoft\\Windows\\Network Shortcuts\\*", lpFindFileData=0x31e37c | out: lpFindFileData=0x31e37c*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xfda27f60, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfda27f60, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xaeeef71c, ftLastWriteTime.dwHighDateTime=0x1ca042b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x381d00 [0093.954] FindNextFileW (in: hFindFile=0x381d00, lpFindFileData=0x31e38c | out: lpFindFileData=0x31e38c*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xfda27f60, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfda27f60, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xaeeef71c, ftLastWriteTime.dwHighDateTime=0x1ca042b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0093.954] FindNextFileW (in: hFindFile=0x381d00, lpFindFileData=0x31e38c | out: lpFindFileData=0x31e38c*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xfda27f60, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfda27f60, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xaeeef71c, ftLastWriteTime.dwHighDateTime=0x1ca042b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 0 [0093.954] FindClose (in: hFindFile=0x381d00 | out: hFindFile=0x381d00) returned 1 [0093.954] GetFullPathNameW (in: lpFileName="C:\\Users\\Default\\AppData\\Roaming\\Microsoft\\Windows\\Network Shortcuts", nBufferLength=0x105, lpBuffer=0x31e15c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\Default\\AppData\\Roaming\\Microsoft\\Windows\\Network Shortcuts", lpFilePart=0x0) returned 0x44 [0093.954] GetFullPathNameW (in: lpFileName="C:\\Users\\Default\\AppData\\Roaming\\Microsoft\\Windows\\Network Shortcuts\\", nBufferLength=0x105, lpBuffer=0x31e130, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\Default\\AppData\\Roaming\\Microsoft\\Windows\\Network Shortcuts\\", lpFilePart=0x0) returned 0x45 [0093.954] FindFirstFileW (in: lpFileName="C:\\Users\\Default\\AppData\\Roaming\\Microsoft\\Windows\\Network Shortcuts\\*", lpFindFileData=0x31e37c | out: lpFindFileData=0x31e37c*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xfda27f60, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfda27f60, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xaeeef71c, ftLastWriteTime.dwHighDateTime=0x1ca042b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x381d00 [0093.955] FindNextFileW (in: hFindFile=0x381d00, lpFindFileData=0x31e38c | out: lpFindFileData=0x31e38c*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xfda27f60, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfda27f60, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xaeeef71c, ftLastWriteTime.dwHighDateTime=0x1ca042b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0093.955] FindNextFileW (in: hFindFile=0x381d00, lpFindFileData=0x31e38c | out: lpFindFileData=0x31e38c*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xfda27f60, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfda27f60, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xaeeef71c, ftLastWriteTime.dwHighDateTime=0x1ca042b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 0 [0093.955] FindClose (in: hFindFile=0x381d00 | out: hFindFile=0x381d00) returned 1 [0093.955] GetFullPathNameW (in: lpFileName="C:\\Users\\Default\\AppData\\Roaming\\Microsoft\\Windows\\Printer Shortcuts", nBufferLength=0x105, lpBuffer=0x31e15c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\Default\\AppData\\Roaming\\Microsoft\\Windows\\Printer Shortcuts", lpFilePart=0x0) returned 0x44 [0093.955] GetFullPathNameW (in: lpFileName="C:\\Users\\Default\\AppData\\Roaming\\Microsoft\\Windows\\Printer Shortcuts\\", nBufferLength=0x105, lpBuffer=0x31e130, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\Default\\AppData\\Roaming\\Microsoft\\Windows\\Printer Shortcuts\\", lpFilePart=0x0) returned 0x45 [0093.955] FindFirstFileW (in: lpFileName="C:\\Users\\Default\\AppData\\Roaming\\Microsoft\\Windows\\Printer Shortcuts\\*", lpFindFileData=0x31e37c | out: lpFindFileData=0x31e37c*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xfda27f60, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfda27f60, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xb9c40b55, ftLastWriteTime.dwHighDateTime=0x1ca042b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x381d00 [0093.955] FindNextFileW (in: hFindFile=0x381d00, lpFindFileData=0x31e38c | out: lpFindFileData=0x31e38c*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xfda27f60, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfda27f60, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xb9c40b55, ftLastWriteTime.dwHighDateTime=0x1ca042b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0093.955] FindNextFileW (in: hFindFile=0x381d00, lpFindFileData=0x31e38c | out: lpFindFileData=0x31e38c*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xfda27f60, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfda27f60, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xb9c40b55, ftLastWriteTime.dwHighDateTime=0x1ca042b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 0 [0093.955] FindClose (in: hFindFile=0x381d00 | out: hFindFile=0x381d00) returned 1 [0093.956] GetFullPathNameW (in: lpFileName="C:\\Users\\Default\\AppData\\Roaming\\Microsoft\\Windows\\Printer Shortcuts", nBufferLength=0x105, lpBuffer=0x31e15c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\Default\\AppData\\Roaming\\Microsoft\\Windows\\Printer Shortcuts", lpFilePart=0x0) returned 0x44 [0093.956] GetFullPathNameW (in: lpFileName="C:\\Users\\Default\\AppData\\Roaming\\Microsoft\\Windows\\Printer Shortcuts\\", nBufferLength=0x105, lpBuffer=0x31e130, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\Default\\AppData\\Roaming\\Microsoft\\Windows\\Printer Shortcuts\\", lpFilePart=0x0) returned 0x45 [0093.956] FindFirstFileW (in: lpFileName="C:\\Users\\Default\\AppData\\Roaming\\Microsoft\\Windows\\Printer Shortcuts\\*", lpFindFileData=0x31e37c | out: lpFindFileData=0x31e37c*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xfda27f60, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfda27f60, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xb9c40b55, ftLastWriteTime.dwHighDateTime=0x1ca042b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x381d00 [0093.957] FindNextFileW (in: hFindFile=0x381d00, lpFindFileData=0x31e38c | out: lpFindFileData=0x31e38c*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xfda27f60, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfda27f60, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xb9c40b55, ftLastWriteTime.dwHighDateTime=0x1ca042b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0093.957] FindNextFileW (in: hFindFile=0x381d00, lpFindFileData=0x31e38c | out: lpFindFileData=0x31e38c*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xfda27f60, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfda27f60, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xb9c40b55, ftLastWriteTime.dwHighDateTime=0x1ca042b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 0 [0093.957] FindClose (in: hFindFile=0x381d00 | out: hFindFile=0x381d00) returned 1 [0093.957] GetFullPathNameW (in: lpFileName="C:\\Users\\Default\\AppData\\Roaming\\Microsoft\\Windows\\PrivacIE", nBufferLength=0x105, lpBuffer=0x31e15c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\Default\\AppData\\Roaming\\Microsoft\\Windows\\PrivacIE", lpFilePart=0x0) returned 0x3b [0093.957] GetFullPathNameW (in: lpFileName="C:\\Users\\Default\\AppData\\Roaming\\Microsoft\\Windows\\PrivacIE\\", nBufferLength=0x105, lpBuffer=0x31e130, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\Default\\AppData\\Roaming\\Microsoft\\Windows\\PrivacIE\\", lpFilePart=0x0) returned 0x3c [0093.957] FindFirstFileW (in: lpFileName="C:\\Users\\Default\\AppData\\Roaming\\Microsoft\\Windows\\PrivacIE\\*", lpFindFileData=0x31e37c | out: lpFindFileData=0x31e37c*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x62fa4a0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x62fa4a0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xedd0e6f6, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x381d00 [0093.957] FindNextFileW (in: hFindFile=0x381d00, lpFindFileData=0x31e38c | out: lpFindFileData=0x31e38c*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x62fa4a0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x62fa4a0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xedd0e6f6, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0093.957] FindNextFileW (in: hFindFile=0x381d00, lpFindFileData=0x31e38c | out: lpFindFileData=0x31e38c*(dwFileAttributes=0x2012, ftCreationTime.dwLowDateTime=0x62fa4a0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x62fa4a0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xedd0e6f6, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Low", cAlternateFileName="")) returned 1 [0093.957] FindNextFileW (in: hFindFile=0x381d00, lpFindFileData=0x31e38c | out: lpFindFileData=0x31e38c*(dwFileAttributes=0x2012, ftCreationTime.dwLowDateTime=0x62fa4a0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x62fa4a0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xedd0e6f6, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Low", cAlternateFileName="")) returned 0 [0093.957] FindClose (in: hFindFile=0x381d00 | out: hFindFile=0x381d00) returned 1 [0093.957] GetFullPathNameW (in: lpFileName="C:\\Users\\Default\\AppData\\Roaming\\Microsoft\\Windows\\PrivacIE", nBufferLength=0x105, lpBuffer=0x31e15c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\Default\\AppData\\Roaming\\Microsoft\\Windows\\PrivacIE", lpFilePart=0x0) returned 0x3b [0093.957] GetFullPathNameW (in: lpFileName="C:\\Users\\Default\\AppData\\Roaming\\Microsoft\\Windows\\PrivacIE\\", nBufferLength=0x105, lpBuffer=0x31e130, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\Default\\AppData\\Roaming\\Microsoft\\Windows\\PrivacIE\\", lpFilePart=0x0) returned 0x3c [0093.957] FindFirstFileW (in: lpFileName="C:\\Users\\Default\\AppData\\Roaming\\Microsoft\\Windows\\PrivacIE\\*", lpFindFileData=0x31e37c | out: lpFindFileData=0x31e37c*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x62fa4a0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x62fa4a0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xedd0e6f6, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x381d00 [0093.957] FindNextFileW (in: hFindFile=0x381d00, lpFindFileData=0x31e38c | out: lpFindFileData=0x31e38c*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x62fa4a0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x62fa4a0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xedd0e6f6, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0093.958] FindNextFileW (in: hFindFile=0x381d00, lpFindFileData=0x31e38c | out: lpFindFileData=0x31e38c*(dwFileAttributes=0x2012, ftCreationTime.dwLowDateTime=0x62fa4a0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x62fa4a0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xedd0e6f6, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Low", cAlternateFileName="")) returned 1 [0093.958] FindNextFileW (in: hFindFile=0x381d00, lpFindFileData=0x31e38c | out: lpFindFileData=0x31e38c*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0093.958] FindClose (in: hFindFile=0x381d00 | out: hFindFile=0x381d00) returned 1 [0093.958] GetFullPathNameW (in: lpFileName="C:\\Users\\Default\\AppData\\Roaming\\Microsoft\\Windows\\PrivacIE\\Low", nBufferLength=0x105, lpBuffer=0x31e0e4, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\Default\\AppData\\Roaming\\Microsoft\\Windows\\PrivacIE\\Low", lpFilePart=0x0) returned 0x3f [0093.958] GetFullPathNameW (in: lpFileName="C:\\Users\\Default\\AppData\\Roaming\\Microsoft\\Windows\\PrivacIE\\Low\\", nBufferLength=0x105, lpBuffer=0x31e0b8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\Default\\AppData\\Roaming\\Microsoft\\Windows\\PrivacIE\\Low\\", lpFilePart=0x0) returned 0x40 [0093.958] FindFirstFileW (in: lpFileName="C:\\Users\\Default\\AppData\\Roaming\\Microsoft\\Windows\\PrivacIE\\Low\\*", lpFindFileData=0x31e304 | out: lpFindFileData=0x31e304*(dwFileAttributes=0x2012, ftCreationTime.dwLowDateTime=0x62fa4a0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x62fa4a0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xedd0e6f6, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x381d00 [0093.958] FindNextFileW (in: hFindFile=0x381d00, lpFindFileData=0x31e314 | out: lpFindFileData=0x31e314*(dwFileAttributes=0x2012, ftCreationTime.dwLowDateTime=0x62fa4a0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x62fa4a0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xedd0e6f6, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0093.958] FindNextFileW (in: hFindFile=0x381d00, lpFindFileData=0x31e314 | out: lpFindFileData=0x31e314*(dwFileAttributes=0x2012, ftCreationTime.dwLowDateTime=0x62fa4a0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x62fa4a0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xedd0e6f6, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 0 [0093.958] FindClose (in: hFindFile=0x381d00 | out: hFindFile=0x381d00) returned 1 [0093.958] GetFullPathNameW (in: lpFileName="C:\\Users\\Default\\AppData\\Roaming\\Microsoft\\Windows\\PrivacIE\\Low", nBufferLength=0x105, lpBuffer=0x31e0e4, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\Default\\AppData\\Roaming\\Microsoft\\Windows\\PrivacIE\\Low", lpFilePart=0x0) returned 0x3f [0093.958] GetFullPathNameW (in: lpFileName="C:\\Users\\Default\\AppData\\Roaming\\Microsoft\\Windows\\PrivacIE\\Low\\", nBufferLength=0x105, lpBuffer=0x31e0b8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\Default\\AppData\\Roaming\\Microsoft\\Windows\\PrivacIE\\Low\\", lpFilePart=0x0) returned 0x40 [0093.958] FindFirstFileW (in: lpFileName="C:\\Users\\Default\\AppData\\Roaming\\Microsoft\\Windows\\PrivacIE\\Low\\*", lpFindFileData=0x31e304 | out: lpFindFileData=0x31e304*(dwFileAttributes=0x2012, ftCreationTime.dwLowDateTime=0x62fa4a0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x62fa4a0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xedd0e6f6, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x381d00 [0093.958] FindNextFileW (in: hFindFile=0x381d00, lpFindFileData=0x31e314 | out: lpFindFileData=0x31e314*(dwFileAttributes=0x2012, ftCreationTime.dwLowDateTime=0x62fa4a0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x62fa4a0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xedd0e6f6, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0093.958] FindNextFileW (in: hFindFile=0x381d00, lpFindFileData=0x31e314 | out: lpFindFileData=0x31e314*(dwFileAttributes=0x2012, ftCreationTime.dwLowDateTime=0x62fa4a0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x62fa4a0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xedd0e6f6, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 0 [0093.959] FindClose (in: hFindFile=0x381d00 | out: hFindFile=0x381d00) returned 1 [0093.959] GetFullPathNameW (in: lpFileName="C:\\Users\\Default\\AppData\\Roaming\\Microsoft\\Windows\\Recent", nBufferLength=0x105, lpBuffer=0x31e15c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\Default\\AppData\\Roaming\\Microsoft\\Windows\\Recent", lpFilePart=0x0) returned 0x39 [0093.959] GetFullPathNameW (in: lpFileName="C:\\Users\\Default\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\", nBufferLength=0x105, lpBuffer=0x31e130, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\Default\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\", lpFilePart=0x0) returned 0x3a [0093.959] FindFirstFileW (in: lpFileName="C:\\Users\\Default\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\*", lpFindFileData=0x31e37c | out: lpFindFileData=0x31e37c*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0xfda27f60, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x6404e40, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xd88b51cb, ftLastWriteTime.dwHighDateTime=0x1cb892d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x381d00 [0093.960] FindNextFileW (in: hFindFile=0x381d00, lpFindFileData=0x31e38c | out: lpFindFileData=0x31e38c*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0xfda27f60, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x6404e40, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xd88b51cb, ftLastWriteTime.dwHighDateTime=0x1cb892d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0093.960] FindNextFileW (in: hFindFile=0x381d00, lpFindFileData=0x31e38c | out: lpFindFileData=0x31e38c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x62fa4a0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x6404e40, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x125b3d0, ftLastWriteTime.dwHighDateTime=0x1cb8927, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="AutomaticDestinations", cAlternateFileName="AUTOMA~1")) returned 1 [0093.960] FindNextFileW (in: hFindFile=0x381d00, lpFindFileData=0x31e38c | out: lpFindFileData=0x31e38c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x62fa4a0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x6404e40, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x15c7376, ftLastWriteTime.dwHighDateTime=0x1cb8927, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="CustomDestinations", cAlternateFileName="CUSTOM~1")) returned 1 [0093.960] FindNextFileW (in: hFindFile=0x381d00, lpFindFileData=0x31e38c | out: lpFindFileData=0x31e38c*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0x6404e40, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x6404e40, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xd88b51cb, ftLastWriteTime.dwHighDateTime=0x1cb892d, nFileSizeHigh=0x0, nFileSizeLow=0x1b0, dwReserved0=0x0, dwReserved1=0x0, cFileName="desktop.ini", cAlternateFileName="")) returned 1 [0093.960] FindNextFileW (in: hFindFile=0x381d00, lpFindFileData=0x31e38c | out: lpFindFileData=0x31e38c*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0093.960] FindClose (in: hFindFile=0x381d00 | out: hFindFile=0x381d00) returned 1 [0093.960] GetFullPathNameW (in: lpFileName="C:\\Users\\Default\\AppData\\Roaming\\Microsoft\\Windows\\Recent", nBufferLength=0x105, lpBuffer=0x31e15c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\Default\\AppData\\Roaming\\Microsoft\\Windows\\Recent", lpFilePart=0x0) returned 0x39 [0093.960] GetFullPathNameW (in: lpFileName="C:\\Users\\Default\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\", nBufferLength=0x105, lpBuffer=0x31e130, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\Default\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\", lpFilePart=0x0) returned 0x3a [0093.960] FindFirstFileW (in: lpFileName="C:\\Users\\Default\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\*", lpFindFileData=0x31e37c | out: lpFindFileData=0x31e37c*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0xfda27f60, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x6404e40, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xd88b51cb, ftLastWriteTime.dwHighDateTime=0x1cb892d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x381d00 [0093.960] FindNextFileW (in: hFindFile=0x381d00, lpFindFileData=0x31e38c | out: lpFindFileData=0x31e38c*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0xfda27f60, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x6404e40, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xd88b51cb, ftLastWriteTime.dwHighDateTime=0x1cb892d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0093.960] FindNextFileW (in: hFindFile=0x381d00, lpFindFileData=0x31e38c | out: lpFindFileData=0x31e38c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x62fa4a0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x6404e40, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x125b3d0, ftLastWriteTime.dwHighDateTime=0x1cb8927, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="AutomaticDestinations", cAlternateFileName="AUTOMA~1")) returned 1 [0093.960] FindNextFileW (in: hFindFile=0x381d00, lpFindFileData=0x31e38c | out: lpFindFileData=0x31e38c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x62fa4a0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x6404e40, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x15c7376, ftLastWriteTime.dwHighDateTime=0x1cb8927, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="CustomDestinations", cAlternateFileName="CUSTOM~1")) returned 1 [0093.960] FindNextFileW (in: hFindFile=0x381d00, lpFindFileData=0x31e38c | out: lpFindFileData=0x31e38c*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0x6404e40, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x6404e40, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xd88b51cb, ftLastWriteTime.dwHighDateTime=0x1cb892d, nFileSizeHigh=0x0, nFileSizeLow=0x1b0, dwReserved0=0x0, dwReserved1=0x0, cFileName="desktop.ini", cAlternateFileName="")) returned 1 [0093.960] FindNextFileW (in: hFindFile=0x381d00, lpFindFileData=0x31e38c | out: lpFindFileData=0x31e38c*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0x6404e40, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x6404e40, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xd88b51cb, ftLastWriteTime.dwHighDateTime=0x1cb892d, nFileSizeHigh=0x0, nFileSizeLow=0x1b0, dwReserved0=0x0, dwReserved1=0x0, cFileName="desktop.ini", cAlternateFileName="")) returned 0 [0093.960] FindClose (in: hFindFile=0x381d00 | out: hFindFile=0x381d00) returned 1 [0093.960] GetFullPathNameW (in: lpFileName="C:\\Users\\Default\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\AutomaticDestinations", nBufferLength=0x105, lpBuffer=0x31e0e4, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\Default\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\AutomaticDestinations", lpFilePart=0x0) returned 0x4f [0093.961] GetFullPathNameW (in: lpFileName="C:\\Users\\Default\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\AutomaticDestinations\\", nBufferLength=0x105, lpBuffer=0x31e0b8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\Default\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\AutomaticDestinations\\", lpFilePart=0x0) returned 0x50 [0093.961] FindFirstFileW (in: lpFileName="C:\\Users\\Default\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\AutomaticDestinations\\*", lpFindFileData=0x31e304 | out: lpFindFileData=0x31e304*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x62fa4a0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x6404e40, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x125b3d0, ftLastWriteTime.dwHighDateTime=0x1cb8927, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x381d00 [0093.961] FindNextFileW (in: hFindFile=0x381d00, lpFindFileData=0x31e314 | out: lpFindFileData=0x31e314*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x62fa4a0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x6404e40, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x125b3d0, ftLastWriteTime.dwHighDateTime=0x1cb8927, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0093.961] FindNextFileW (in: hFindFile=0x381d00, lpFindFileData=0x31e314 | out: lpFindFileData=0x31e314*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6404e40, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x6404e40, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x14bb620, ftLastWriteTime.dwHighDateTime=0x1cb8927, nFileSizeHigh=0x0, nFileSizeLow=0x1600, dwReserved0=0x0, dwReserved1=0x0, cFileName="1b4dd67f29cb1962.automaticDestinations-ms", cAlternateFileName="1B4DD6~1.AUT")) returned 1 [0093.961] FindNextFileW (in: hFindFile=0x381d00, lpFindFileData=0x31e314 | out: lpFindFileData=0x31e314*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0093.961] FindClose (in: hFindFile=0x381d00 | out: hFindFile=0x381d00) returned 1 [0093.961] GetFullPathNameW (in: lpFileName="C:\\Users\\Default\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\AutomaticDestinations", nBufferLength=0x105, lpBuffer=0x31e0e4, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\Default\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\AutomaticDestinations", lpFilePart=0x0) returned 0x4f [0093.961] GetFullPathNameW (in: lpFileName="C:\\Users\\Default\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\AutomaticDestinations\\", nBufferLength=0x105, lpBuffer=0x31e0b8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\Default\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\AutomaticDestinations\\", lpFilePart=0x0) returned 0x50 [0093.961] FindFirstFileW (in: lpFileName="C:\\Users\\Default\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\AutomaticDestinations\\*", lpFindFileData=0x31e304 | out: lpFindFileData=0x31e304*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x62fa4a0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x6404e40, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x125b3d0, ftLastWriteTime.dwHighDateTime=0x1cb8927, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x381d00 [0093.961] FindNextFileW (in: hFindFile=0x381d00, lpFindFileData=0x31e314 | out: lpFindFileData=0x31e314*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x62fa4a0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x6404e40, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x125b3d0, ftLastWriteTime.dwHighDateTime=0x1cb8927, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0093.961] FindNextFileW (in: hFindFile=0x381d00, lpFindFileData=0x31e314 | out: lpFindFileData=0x31e314*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6404e40, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x6404e40, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x14bb620, ftLastWriteTime.dwHighDateTime=0x1cb8927, nFileSizeHigh=0x0, nFileSizeLow=0x1600, dwReserved0=0x0, dwReserved1=0x0, cFileName="1b4dd67f29cb1962.automaticDestinations-ms", cAlternateFileName="1B4DD6~1.AUT")) returned 1 [0093.961] FindNextFileW (in: hFindFile=0x381d00, lpFindFileData=0x31e314 | out: lpFindFileData=0x31e314*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6404e40, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x6404e40, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x14bb620, ftLastWriteTime.dwHighDateTime=0x1cb8927, nFileSizeHigh=0x0, nFileSizeLow=0x1600, dwReserved0=0x0, dwReserved1=0x0, cFileName="1b4dd67f29cb1962.automaticDestinations-ms", cAlternateFileName="1B4DD6~1.AUT")) returned 0 [0093.961] FindClose (in: hFindFile=0x381d00 | out: hFindFile=0x381d00) returned 1 [0093.961] GetFullPathNameW (in: lpFileName="C:\\Users\\Default\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\CustomDestinations", nBufferLength=0x105, lpBuffer=0x31e0e4, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\Default\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\CustomDestinations", lpFilePart=0x0) returned 0x4c [0093.961] GetFullPathNameW (in: lpFileName="C:\\Users\\Default\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\CustomDestinations\\", nBufferLength=0x105, lpBuffer=0x31e0b8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\Default\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\CustomDestinations\\", lpFilePart=0x0) returned 0x4d [0093.961] FindFirstFileW (in: lpFileName="C:\\Users\\Default\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\CustomDestinations\\*", lpFindFileData=0x31e304 | out: lpFindFileData=0x31e304*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x62fa4a0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x6404e40, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x15c7376, ftLastWriteTime.dwHighDateTime=0x1cb8927, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x381d00 [0093.966] FindNextFileW (in: hFindFile=0x381d00, lpFindFileData=0x31e314 | out: lpFindFileData=0x31e314*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x62fa4a0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x6404e40, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x15c7376, ftLastWriteTime.dwHighDateTime=0x1cb8927, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0093.966] FindNextFileW (in: hFindFile=0x381d00, lpFindFileData=0x31e314 | out: lpFindFileData=0x31e314*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6404e40, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x6404e40, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x15c7376, ftLastWriteTime.dwHighDateTime=0x1cb8927, nFileSizeHigh=0x0, nFileSizeLow=0x18, dwReserved0=0x0, dwReserved1=0x0, cFileName="1b4dd67f29cb1962.customDestinations-ms", cAlternateFileName="1B4DD6~1.CUS")) returned 1 [0093.966] FindNextFileW (in: hFindFile=0x381d00, lpFindFileData=0x31e314 | out: lpFindFileData=0x31e314*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6404e40, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x6404e40, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xc67cc5, ftLastWriteTime.dwHighDateTime=0x1cb8927, nFileSizeHigh=0x0, nFileSizeLow=0x3c12, dwReserved0=0x0, dwReserved1=0x0, cFileName="5afe4de1b92fc382.customDestinations-ms", cAlternateFileName="5AFE4D~1.CUS")) returned 1 [0093.966] FindNextFileW (in: hFindFile=0x381d00, lpFindFileData=0x31e314 | out: lpFindFileData=0x31e314*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6404e40, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x6404e40, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x15c7376, ftLastWriteTime.dwHighDateTime=0x1cb8927, nFileSizeHigh=0x0, nFileSizeLow=0x18, dwReserved0=0x0, dwReserved1=0x0, cFileName="7e4dca80246863e3.customDestinations-ms", cAlternateFileName="7E4DCA~1.CUS")) returned 1 [0093.966] FindNextFileW (in: hFindFile=0x381d00, lpFindFileData=0x31e314 | out: lpFindFileData=0x31e314*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0093.966] FindClose (in: hFindFile=0x381d00 | out: hFindFile=0x381d00) returned 1 [0093.967] GetFullPathNameW (in: lpFileName="C:\\Users\\Default\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\CustomDestinations", nBufferLength=0x105, lpBuffer=0x31e0e4, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\Default\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\CustomDestinations", lpFilePart=0x0) returned 0x4c [0093.967] GetFullPathNameW (in: lpFileName="C:\\Users\\Default\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\CustomDestinations\\", nBufferLength=0x105, lpBuffer=0x31e0b8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\Default\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\CustomDestinations\\", lpFilePart=0x0) returned 0x4d [0093.967] FindFirstFileW (in: lpFileName="C:\\Users\\Default\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\CustomDestinations\\*", lpFindFileData=0x31e304 | out: lpFindFileData=0x31e304*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x62fa4a0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x6404e40, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x15c7376, ftLastWriteTime.dwHighDateTime=0x1cb8927, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x381d00 [0093.968] FindNextFileW (in: hFindFile=0x381d00, lpFindFileData=0x31e314 | out: lpFindFileData=0x31e314*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x62fa4a0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x6404e40, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x15c7376, ftLastWriteTime.dwHighDateTime=0x1cb8927, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0093.968] FindNextFileW (in: hFindFile=0x381d00, lpFindFileData=0x31e314 | out: lpFindFileData=0x31e314*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6404e40, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x6404e40, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x15c7376, ftLastWriteTime.dwHighDateTime=0x1cb8927, nFileSizeHigh=0x0, nFileSizeLow=0x18, dwReserved0=0x0, dwReserved1=0x0, cFileName="1b4dd67f29cb1962.customDestinations-ms", cAlternateFileName="1B4DD6~1.CUS")) returned 1 [0093.968] FindNextFileW (in: hFindFile=0x381d00, lpFindFileData=0x31e314 | out: lpFindFileData=0x31e314*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6404e40, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x6404e40, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xc67cc5, ftLastWriteTime.dwHighDateTime=0x1cb8927, nFileSizeHigh=0x0, nFileSizeLow=0x3c12, dwReserved0=0x0, dwReserved1=0x0, cFileName="5afe4de1b92fc382.customDestinations-ms", cAlternateFileName="5AFE4D~1.CUS")) returned 1 [0093.968] FindNextFileW (in: hFindFile=0x381d00, lpFindFileData=0x31e314 | out: lpFindFileData=0x31e314*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6404e40, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x6404e40, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x15c7376, ftLastWriteTime.dwHighDateTime=0x1cb8927, nFileSizeHigh=0x0, nFileSizeLow=0x18, dwReserved0=0x0, dwReserved1=0x0, cFileName="7e4dca80246863e3.customDestinations-ms", cAlternateFileName="7E4DCA~1.CUS")) returned 1 [0093.968] FindNextFileW (in: hFindFile=0x381d00, lpFindFileData=0x31e314 | out: lpFindFileData=0x31e314*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6404e40, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x6404e40, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x15c7376, ftLastWriteTime.dwHighDateTime=0x1cb8927, nFileSizeHigh=0x0, nFileSizeLow=0x18, dwReserved0=0x0, dwReserved1=0x0, cFileName="7e4dca80246863e3.customDestinations-ms", cAlternateFileName="7E4DCA~1.CUS")) returned 0 [0093.968] FindClose (in: hFindFile=0x381d00 | out: hFindFile=0x381d00) returned 1 [0093.969] GetFullPathNameW (in: lpFileName="C:\\Users\\Default\\AppData\\Roaming\\Microsoft\\Windows\\SendTo", nBufferLength=0x105, lpBuffer=0x31e15c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\Default\\AppData\\Roaming\\Microsoft\\Windows\\SendTo", lpFilePart=0x0) returned 0x39 [0093.969] GetFullPathNameW (in: lpFileName="C:\\Users\\Default\\AppData\\Roaming\\Microsoft\\Windows\\SendTo\\", nBufferLength=0x105, lpBuffer=0x31e130, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\Default\\AppData\\Roaming\\Microsoft\\Windows\\SendTo\\", lpFilePart=0x0) returned 0x3a [0093.969] FindFirstFileW (in: lpFileName="C:\\Users\\Default\\AppData\\Roaming\\Microsoft\\Windows\\SendTo\\*", lpFindFileData=0x31e37c | out: lpFindFileData=0x31e37c*(dwFileAttributes=0x2011, ftCreationTime.dwLowDateTime=0xfda27f60, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x6404e40, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xf9b7c855, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x381d00 [0093.970] FindNextFileW (in: hFindFile=0x381d00, lpFindFileData=0x31e38c | out: lpFindFileData=0x31e38c*(dwFileAttributes=0x2011, ftCreationTime.dwLowDateTime=0xfda27f60, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x6404e40, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xf9b7c855, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0093.970] FindNextFileW (in: hFindFile=0x381d00, lpFindFileData=0x31e38c | out: lpFindFileData=0x31e38c*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xeca9f1ef, ftCreationTime.dwHighDateTime=0x1ca042b, ftLastAccessTime.dwLowDateTime=0x6404e40, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x639ff80f, ftLastWriteTime.dwHighDateTime=0x1c9ea0c, nFileSizeHigh=0x0, nFileSizeLow=0x3, dwReserved0=0x0, dwReserved1=0x0, cFileName="Compressed (zipped) Folder.ZFSendToTarget", cAlternateFileName="COMPRE~1.ZFS")) returned 1 [0093.970] FindNextFileW (in: hFindFile=0x381d00, lpFindFileData=0x31e38c | out: lpFindFileData=0x31e38c*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x9c45a701, ftCreationTime.dwHighDateTime=0x1ca042b, ftLastAccessTime.dwLowDateTime=0x6404e40, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x3bb52ab9, ftLastWriteTime.dwHighDateTime=0x1c9ea0c, nFileSizeHigh=0x0, nFileSizeLow=0x7, dwReserved0=0x0, dwReserved1=0x0, cFileName="Desktop (create shortcut).DeskLink", cAlternateFileName="DESKTO~1.DES")) returned 1 [0093.970] FindNextFileW (in: hFindFile=0x381d00, lpFindFileData=0x31e38c | out: lpFindFileData=0x31e38c*(dwFileAttributes=0x2026, ftCreationTime.dwLowDateTime=0xec18bec6, ftCreationTime.dwHighDateTime=0x1ca042b, ftLastAccessTime.dwLowDateTime=0x63dece0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x3d828fa3, ftLastWriteTime.dwHighDateTime=0x1ca043f, nFileSizeHigh=0x0, nFileSizeLow=0x22e, dwReserved0=0x0, dwReserved1=0x0, cFileName="Desktop.ini", cAlternateFileName="")) returned 1 [0093.971] FindNextFileW (in: hFindFile=0x381d00, lpFindFileData=0x31e38c | out: lpFindFileData=0x31e38c*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x63dece0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x63dece0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xf9b7c855, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Documents.mydocs", cAlternateFileName="DOCUME~1.MYD")) returned 1 [0093.971] FindNextFileW (in: hFindFile=0x381d00, lpFindFileData=0x31e38c | out: lpFindFileData=0x31e38c*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x3d802e42, ftCreationTime.dwHighDateTime=0x1ca043f, ftLastAccessTime.dwLowDateTime=0x63dece0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x3d802e42, ftLastWriteTime.dwHighDateTime=0x1ca043f, nFileSizeHigh=0x0, nFileSizeLow=0x4d6, dwReserved0=0x0, dwReserved1=0x0, cFileName="Fax Recipient.lnk", cAlternateFileName="FAXREC~1.LNK")) returned 1 [0093.971] FindNextFileW (in: hFindFile=0x381d00, lpFindFileData=0x31e38c | out: lpFindFileData=0x31e38c*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x9c48085e, ftCreationTime.dwHighDateTime=0x1ca042b, ftLastAccessTime.dwLowDateTime=0x63dece0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x3bb9ed75, ftLastWriteTime.dwHighDateTime=0x1c9ea0c, nFileSizeHigh=0x0, nFileSizeLow=0x4, dwReserved0=0x0, dwReserved1=0x0, cFileName="Mail Recipient.MAPIMail", cAlternateFileName="MAILRE~1.MAP")) returned 1 [0093.971] FindNextFileW (in: hFindFile=0x381d00, lpFindFileData=0x31e38c | out: lpFindFileData=0x31e38c*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0093.971] FindClose (in: hFindFile=0x381d00 | out: hFindFile=0x381d00) returned 1 [0093.971] GetFullPathNameW (in: lpFileName="C:\\Users\\Default\\AppData\\Roaming\\Microsoft\\Windows\\SendTo", nBufferLength=0x105, lpBuffer=0x31e15c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\Default\\AppData\\Roaming\\Microsoft\\Windows\\SendTo", lpFilePart=0x0) returned 0x39 [0093.971] GetFullPathNameW (in: lpFileName="C:\\Users\\Default\\AppData\\Roaming\\Microsoft\\Windows\\SendTo\\", nBufferLength=0x105, lpBuffer=0x31e130, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\Default\\AppData\\Roaming\\Microsoft\\Windows\\SendTo\\", lpFilePart=0x0) returned 0x3a [0093.971] FindFirstFileW (in: lpFileName="C:\\Users\\Default\\AppData\\Roaming\\Microsoft\\Windows\\SendTo\\*", lpFindFileData=0x31e37c | out: lpFindFileData=0x31e37c*(dwFileAttributes=0x2011, ftCreationTime.dwLowDateTime=0xfda27f60, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x6404e40, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xf9b7c855, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x381d00 [0093.972] FindNextFileW (in: hFindFile=0x381d00, lpFindFileData=0x31e38c | out: lpFindFileData=0x31e38c*(dwFileAttributes=0x2011, ftCreationTime.dwLowDateTime=0xfda27f60, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x6404e40, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xf9b7c855, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0093.972] FindNextFileW (in: hFindFile=0x381d00, lpFindFileData=0x31e38c | out: lpFindFileData=0x31e38c*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xeca9f1ef, ftCreationTime.dwHighDateTime=0x1ca042b, ftLastAccessTime.dwLowDateTime=0x6404e40, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x639ff80f, ftLastWriteTime.dwHighDateTime=0x1c9ea0c, nFileSizeHigh=0x0, nFileSizeLow=0x3, dwReserved0=0x0, dwReserved1=0x0, cFileName="Compressed (zipped) Folder.ZFSendToTarget", cAlternateFileName="COMPRE~1.ZFS")) returned 1 [0093.972] FindNextFileW (in: hFindFile=0x381d00, lpFindFileData=0x31e38c | out: lpFindFileData=0x31e38c*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x9c45a701, ftCreationTime.dwHighDateTime=0x1ca042b, ftLastAccessTime.dwLowDateTime=0x6404e40, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x3bb52ab9, ftLastWriteTime.dwHighDateTime=0x1c9ea0c, nFileSizeHigh=0x0, nFileSizeLow=0x7, dwReserved0=0x0, dwReserved1=0x0, cFileName="Desktop (create shortcut).DeskLink", cAlternateFileName="DESKTO~1.DES")) returned 1 [0093.972] FindNextFileW (in: hFindFile=0x381d00, lpFindFileData=0x31e38c | out: lpFindFileData=0x31e38c*(dwFileAttributes=0x2026, ftCreationTime.dwLowDateTime=0xec18bec6, ftCreationTime.dwHighDateTime=0x1ca042b, ftLastAccessTime.dwLowDateTime=0x63dece0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x3d828fa3, ftLastWriteTime.dwHighDateTime=0x1ca043f, nFileSizeHigh=0x0, nFileSizeLow=0x22e, dwReserved0=0x0, dwReserved1=0x0, cFileName="Desktop.ini", cAlternateFileName="")) returned 1 [0093.972] FindNextFileW (in: hFindFile=0x381d00, lpFindFileData=0x31e38c | out: lpFindFileData=0x31e38c*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x63dece0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x63dece0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xf9b7c855, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Documents.mydocs", cAlternateFileName="DOCUME~1.MYD")) returned 1 [0093.972] FindNextFileW (in: hFindFile=0x381d00, lpFindFileData=0x31e38c | out: lpFindFileData=0x31e38c*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x3d802e42, ftCreationTime.dwHighDateTime=0x1ca043f, ftLastAccessTime.dwLowDateTime=0x63dece0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x3d802e42, ftLastWriteTime.dwHighDateTime=0x1ca043f, nFileSizeHigh=0x0, nFileSizeLow=0x4d6, dwReserved0=0x0, dwReserved1=0x0, cFileName="Fax Recipient.lnk", cAlternateFileName="FAXREC~1.LNK")) returned 1 [0093.972] FindNextFileW (in: hFindFile=0x381d00, lpFindFileData=0x31e38c | out: lpFindFileData=0x31e38c*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x9c48085e, ftCreationTime.dwHighDateTime=0x1ca042b, ftLastAccessTime.dwLowDateTime=0x63dece0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x3bb9ed75, ftLastWriteTime.dwHighDateTime=0x1c9ea0c, nFileSizeHigh=0x0, nFileSizeLow=0x4, dwReserved0=0x0, dwReserved1=0x0, cFileName="Mail Recipient.MAPIMail", cAlternateFileName="MAILRE~1.MAP")) returned 1 [0093.972] FindNextFileW (in: hFindFile=0x381d00, lpFindFileData=0x31e38c | out: lpFindFileData=0x31e38c*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x9c48085e, ftCreationTime.dwHighDateTime=0x1ca042b, ftLastAccessTime.dwLowDateTime=0x63dece0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x3bb9ed75, ftLastWriteTime.dwHighDateTime=0x1c9ea0c, nFileSizeHigh=0x0, nFileSizeLow=0x4, dwReserved0=0x0, dwReserved1=0x0, cFileName="Mail Recipient.MAPIMail", cAlternateFileName="MAILRE~1.MAP")) returned 0 [0093.972] FindClose (in: hFindFile=0x381d00 | out: hFindFile=0x381d00) returned 1 [0093.973] GetFullPathNameW (in: lpFileName="C:\\Users\\Default\\AppData\\Roaming\\Microsoft\\Windows\\SendTo\\Fax Recipient.lnk", nBufferLength=0x105, lpBuffer=0x31e02c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\Default\\AppData\\Roaming\\Microsoft\\Windows\\SendTo\\Fax Recipient.lnk", lpFilePart=0x0) returned 0x4b [0093.973] CreateFileW (lpFileName="C:\\Users\\Default\\AppData\\Roaming\\Microsoft\\Windows\\SendTo\\Fax Recipient.lnk" (normalized: "c:\\users\\default\\appdata\\roaming\\microsoft\\windows\\sendto\\fax recipient.lnk"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x178 [0093.978] GetFileType (hFile=0x178) returned 0x1 [0093.978] GetFileType (hFile=0x178) returned 0x1 [0093.978] GetFileSize (in: hFile=0x178, lpFileSizeHigh=0x31e628 | out: lpFileSizeHigh=0x31e628*=0x0) returned 0x4d6 [0093.978] ReadFile (in: hFile=0x178, lpBuffer=0x27ccacc, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x31e5d4, lpOverlapped=0x0 | out: lpBuffer=0x27ccacc*, lpNumberOfBytesRead=0x31e5d4*=0x4d6, lpOverlapped=0x0) returned 1 [0093.993] GetFullPathNameW (in: lpFileName="C:\\Users\\Default\\AppData\\Roaming\\Microsoft\\Windows\\SendTo\\Fax Recipient.lnk", nBufferLength=0x105, lpBuffer=0x31e018, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\Default\\AppData\\Roaming\\Microsoft\\Windows\\SendTo\\Fax Recipient.lnk", lpFilePart=0x0) returned 0x4b [0093.993] CreateFileW (lpFileName="C:\\Users\\Default\\AppData\\Roaming\\Microsoft\\Windows\\SendTo\\Fax Recipient.lnk" (normalized: "c:\\users\\default\\appdata\\roaming\\microsoft\\windows\\sendto\\fax recipient.lnk"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x178 [0093.994] GetFileType (hFile=0x178) returned 0x1 [0093.994] GetFileType (hFile=0x178) returned 0x1 [0093.994] WriteFile (in: hFile=0x178, lpBuffer=0x281c258*, nNumberOfBytesToWrite=0x4e0, lpNumberOfBytesWritten=0x31e59c, lpOverlapped=0x0 | out: lpBuffer=0x281c258*, lpNumberOfBytesWritten=0x31e59c*=0x4e0, lpOverlapped=0x0) returned 1 [0093.996] GetFullPathNameW (in: lpFileName="C:\\Users\\Default\\AppData\\Roaming\\Microsoft\\Windows\\SendTo\\Fax Recipient.lnk", nBufferLength=0x105, lpBuffer=0x31e14c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\Default\\AppData\\Roaming\\Microsoft\\Windows\\SendTo\\Fax Recipient.lnk", lpFilePart=0x0) returned 0x4b [0093.996] GetFullPathNameW (in: lpFileName="C:\\Users\\Default\\AppData\\Roaming\\Microsoft\\Windows\\SendTo\\Fax Recipient.lnk", nBufferLength=0x105, lpBuffer=0x31e14c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\Default\\AppData\\Roaming\\Microsoft\\Windows\\SendTo\\Fax Recipient.lnk", lpFilePart=0x0) returned 0x4b [0093.996] GetFileAttributesExW (in: lpFileName="C:\\Users\\Default\\AppData\\Roaming\\Microsoft\\Windows\\SendTo\\Fax Recipient.lnk" (normalized: "c:\\users\\default\\appdata\\roaming\\microsoft\\windows\\sendto\\fax recipient.lnk"), fInfoLevelId=0x0, lpFileInformation=0x31e628 | out: lpFileInformation=0x31e628*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x3d802e42, ftCreationTime.dwHighDateTime=0x1ca043f, ftLastAccessTime.dwLowDateTime=0x63dece0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x1b786000, ftLastWriteTime.dwHighDateTime=0x1d6eb7f, nFileSizeHigh=0x0, nFileSizeLow=0x4e0)) returned 1 [0093.996] MoveFileW (lpExistingFileName="C:\\Users\\Default\\AppData\\Roaming\\Microsoft\\Windows\\SendTo\\Fax Recipient.lnk" (normalized: "c:\\users\\default\\appdata\\roaming\\microsoft\\windows\\sendto\\fax recipient.lnk"), lpNewFileName="C:\\Users\\Default\\AppData\\Roaming\\Microsoft\\Windows\\SendTo\\Fax Recipient.lnk" (normalized: "c:\\users\\default\\appdata\\roaming\\microsoft\\windows\\sendto\\fax recipient.lnk")) returned 1 [0093.996] GetFullPathNameW (in: lpFileName="C:\\Users\\Default\\AppData\\Roaming\\Microsoft\\Windows\\Start Menu", nBufferLength=0x105, lpBuffer=0x31e15c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\Default\\AppData\\Roaming\\Microsoft\\Windows\\Start Menu", lpFilePart=0x0) returned 0x3d [0093.996] GetFullPathNameW (in: lpFileName="C:\\Users\\Default\\AppData\\Roaming\\Microsoft\\Windows\\Start Menu\\", nBufferLength=0x105, lpBuffer=0x31e130, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\Default\\AppData\\Roaming\\Microsoft\\Windows\\Start Menu\\", lpFilePart=0x0) returned 0x3e [0093.996] FindFirstFileW (in: lpFileName="C:\\Users\\Default\\AppData\\Roaming\\Microsoft\\Windows\\Start Menu\\*", lpFindFileData=0x31e37c | out: lpFindFileData=0x31e37c*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0xfda27f60, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x63dece0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xd888f06b, ftLastWriteTime.dwHighDateTime=0x1cb892d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x381b80 [0093.996] FindNextFileW (in: hFindFile=0x381b80, lpFindFileData=0x31e38c | out: lpFindFileData=0x31e38c*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0xfda27f60, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x63dece0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xd888f06b, ftLastWriteTime.dwHighDateTime=0x1cb892d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0093.996] FindNextFileW (in: hFindFile=0x381b80, lpFindFileData=0x31e38c | out: lpFindFileData=0x31e38c*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0x63dece0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x63dece0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xd888f06b, ftLastWriteTime.dwHighDateTime=0x1cb892d, nFileSizeHigh=0x0, nFileSizeLow=0xae, dwReserved0=0x0, dwReserved1=0x0, cFileName="desktop.ini", cAlternateFileName="")) returned 1 [0093.996] FindNextFileW (in: hFindFile=0x381b80, lpFindFileData=0x31e38c | out: lpFindFileData=0x31e38c*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0xfda27f60, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x6451100, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xd888f06b, ftLastWriteTime.dwHighDateTime=0x1cb892d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Programs", cAlternateFileName="")) returned 1 [0093.997] FindNextFileW (in: hFindFile=0x381b80, lpFindFileData=0x31e38c | out: lpFindFileData=0x31e38c*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0xfda27f60, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x6451100, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xd888f06b, ftLastWriteTime.dwHighDateTime=0x1cb892d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Programs", cAlternateFileName="")) returned 0 [0093.997] FindClose (in: hFindFile=0x381b80 | out: hFindFile=0x381b80) returned 1 [0093.997] GetFullPathNameW (in: lpFileName="C:\\Users\\Default\\AppData\\Roaming\\Microsoft\\Windows\\Start Menu", nBufferLength=0x105, lpBuffer=0x31e15c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\Default\\AppData\\Roaming\\Microsoft\\Windows\\Start Menu", lpFilePart=0x0) returned 0x3d [0093.997] GetFullPathNameW (in: lpFileName="C:\\Users\\Default\\AppData\\Roaming\\Microsoft\\Windows\\Start Menu\\", nBufferLength=0x105, lpBuffer=0x31e130, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\Default\\AppData\\Roaming\\Microsoft\\Windows\\Start Menu\\", lpFilePart=0x0) returned 0x3e [0093.997] FindFirstFileW (in: lpFileName="C:\\Users\\Default\\AppData\\Roaming\\Microsoft\\Windows\\Start Menu\\*", lpFindFileData=0x31e37c | out: lpFindFileData=0x31e37c*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0xfda27f60, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x63dece0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xd888f06b, ftLastWriteTime.dwHighDateTime=0x1cb892d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x381b80 [0093.997] FindNextFileW (in: hFindFile=0x381b80, lpFindFileData=0x31e38c | out: lpFindFileData=0x31e38c*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0xfda27f60, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x63dece0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xd888f06b, ftLastWriteTime.dwHighDateTime=0x1cb892d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0093.997] FindNextFileW (in: hFindFile=0x381b80, lpFindFileData=0x31e38c | out: lpFindFileData=0x31e38c*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0x63dece0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x63dece0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xd888f06b, ftLastWriteTime.dwHighDateTime=0x1cb892d, nFileSizeHigh=0x0, nFileSizeLow=0xae, dwReserved0=0x0, dwReserved1=0x0, cFileName="desktop.ini", cAlternateFileName="")) returned 1 [0093.997] FindNextFileW (in: hFindFile=0x381b80, lpFindFileData=0x31e38c | out: lpFindFileData=0x31e38c*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0xfda27f60, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x6451100, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xd888f06b, ftLastWriteTime.dwHighDateTime=0x1cb892d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Programs", cAlternateFileName="")) returned 1 [0093.997] FindNextFileW (in: hFindFile=0x381b80, lpFindFileData=0x31e38c | out: lpFindFileData=0x31e38c*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0093.997] FindClose (in: hFindFile=0x381b80 | out: hFindFile=0x381b80) returned 1 [0093.997] GetFullPathNameW (in: lpFileName="C:\\Users\\Default\\AppData\\Roaming\\Microsoft\\Windows\\Start Menu\\Programs", nBufferLength=0x105, lpBuffer=0x31e0e4, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\Default\\AppData\\Roaming\\Microsoft\\Windows\\Start Menu\\Programs", lpFilePart=0x0) returned 0x46 [0093.997] GetFullPathNameW (in: lpFileName="C:\\Users\\Default\\AppData\\Roaming\\Microsoft\\Windows\\Start Menu\\Programs\\", nBufferLength=0x105, lpBuffer=0x31e0b8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\Default\\AppData\\Roaming\\Microsoft\\Windows\\Start Menu\\Programs\\", lpFilePart=0x0) returned 0x47 [0093.997] FindFirstFileW (in: lpFileName="C:\\Users\\Default\\AppData\\Roaming\\Microsoft\\Windows\\Start Menu\\Programs\\*", lpFindFileData=0x31e304 | out: lpFindFileData=0x31e304*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0xfda27f60, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x6451100, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xd888f06b, ftLastWriteTime.dwHighDateTime=0x1cb892d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x381b80 [0093.999] FindNextFileW (in: hFindFile=0x381b80, lpFindFileData=0x31e314 | out: lpFindFileData=0x31e314*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0xfda27f60, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x6451100, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xd888f06b, ftLastWriteTime.dwHighDateTime=0x1cb892d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0093.999] FindNextFileW (in: hFindFile=0x381b80, lpFindFileData=0x31e314 | out: lpFindFileData=0x31e314*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0xfda27f60, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x63b8b80, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x2d76088a, ftLastWriteTime.dwHighDateTime=0x1ca043f, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Accessories", cAlternateFileName="ACCESS~1")) returned 1 [0093.999] FindNextFileW (in: hFindFile=0x381b80, lpFindFileData=0x31e314 | out: lpFindFileData=0x31e314*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x62fa4a0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x6392a20, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xd890148c, ftLastWriteTime.dwHighDateTime=0x1cb892d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Administrative Tools", cAlternateFileName="ADMINI~1")) returned 1 [0093.999] FindNextFileW (in: hFindFile=0x381b80, lpFindFileData=0x31e314 | out: lpFindFileData=0x31e314*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0x6451100, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x6451100, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xd888f06b, ftLastWriteTime.dwHighDateTime=0x1cb892d, nFileSizeHigh=0x0, nFileSizeLow=0x1dc, dwReserved0=0x0, dwReserved1=0x0, cFileName="desktop.ini", cAlternateFileName="")) returned 1 [0093.999] FindNextFileW (in: hFindFile=0x381b80, lpFindFileData=0x31e314 | out: lpFindFileData=0x31e314*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x642afa0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x642afa0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x921e7f, ftLastWriteTime.dwHighDateTime=0x1cb8927, nFileSizeHigh=0x0, nFileSizeLow=0x587, dwReserved0=0x0, dwReserved1=0x0, cFileName="Internet Explorer (64-bit).lnk", cAlternateFileName="INTERN~2.LNK")) returned 1 [0093.999] FindNextFileW (in: hFindFile=0x381b80, lpFindFileData=0x31e314 | out: lpFindFileData=0x31e314*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6392a20, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x6392a20, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x921e7f, ftLastWriteTime.dwHighDateTime=0x1cb8927, nFileSizeHigh=0x0, nFileSizeLow=0x5a9, dwReserved0=0x0, dwReserved1=0x0, cFileName="Internet Explorer.lnk", cAlternateFileName="INTERN~1.LNK")) returned 1 [0093.999] FindNextFileW (in: hFindFile=0x381b80, lpFindFileData=0x31e314 | out: lpFindFileData=0x31e314*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0xfda4e0ba, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x642afa0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x7e05e94e, ftLastWriteTime.dwHighDateTime=0x1ca043e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Maintenance", cAlternateFileName="MAINTE~1")) returned 1 [0093.999] FindNextFileW (in: hFindFile=0x381b80, lpFindFileData=0x31e314 | out: lpFindFileData=0x31e314*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x62fa4a0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x636c8c0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xd890148c, ftLastWriteTime.dwHighDateTime=0x1cb892d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Startup", cAlternateFileName="")) returned 1 [0093.999] FindNextFileW (in: hFindFile=0x381b80, lpFindFileData=0x31e314 | out: lpFindFileData=0x31e314*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x62fa4a0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x636c8c0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xd890148c, ftLastWriteTime.dwHighDateTime=0x1cb892d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Startup", cAlternateFileName="")) returned 0 [0093.999] FindClose (in: hFindFile=0x381b80 | out: hFindFile=0x381b80) returned 1 [0094.000] GetFullPathNameW (in: lpFileName="C:\\Users\\Default\\AppData\\Roaming\\Microsoft\\Windows\\Start Menu\\Programs", nBufferLength=0x105, lpBuffer=0x31e0e4, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\Default\\AppData\\Roaming\\Microsoft\\Windows\\Start Menu\\Programs", lpFilePart=0x0) returned 0x46 [0094.000] GetFullPathNameW (in: lpFileName="C:\\Users\\Default\\AppData\\Roaming\\Microsoft\\Windows\\Start Menu\\Programs\\", nBufferLength=0x105, lpBuffer=0x31e0b8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\Default\\AppData\\Roaming\\Microsoft\\Windows\\Start Menu\\Programs\\", lpFilePart=0x0) returned 0x47 [0094.000] FindFirstFileW (in: lpFileName="C:\\Users\\Default\\AppData\\Roaming\\Microsoft\\Windows\\Start Menu\\Programs\\*", lpFindFileData=0x31e304 | out: lpFindFileData=0x31e304*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0xfda27f60, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x6451100, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xd888f06b, ftLastWriteTime.dwHighDateTime=0x1cb892d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x381b80 [0094.001] FindNextFileW (in: hFindFile=0x381b80, lpFindFileData=0x31e314 | out: lpFindFileData=0x31e314*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0xfda27f60, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x6451100, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xd888f06b, ftLastWriteTime.dwHighDateTime=0x1cb892d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0094.001] FindNextFileW (in: hFindFile=0x381b80, lpFindFileData=0x31e314 | out: lpFindFileData=0x31e314*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0xfda27f60, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x63b8b80, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x2d76088a, ftLastWriteTime.dwHighDateTime=0x1ca043f, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Accessories", cAlternateFileName="ACCESS~1")) returned 1 [0094.001] FindNextFileW (in: hFindFile=0x381b80, lpFindFileData=0x31e314 | out: lpFindFileData=0x31e314*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x62fa4a0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x6392a20, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xd890148c, ftLastWriteTime.dwHighDateTime=0x1cb892d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Administrative Tools", cAlternateFileName="ADMINI~1")) returned 1 [0094.001] FindNextFileW (in: hFindFile=0x381b80, lpFindFileData=0x31e314 | out: lpFindFileData=0x31e314*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0x6451100, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x6451100, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xd888f06b, ftLastWriteTime.dwHighDateTime=0x1cb892d, nFileSizeHigh=0x0, nFileSizeLow=0x1dc, dwReserved0=0x0, dwReserved1=0x0, cFileName="desktop.ini", cAlternateFileName="")) returned 1 [0094.001] FindNextFileW (in: hFindFile=0x381b80, lpFindFileData=0x31e314 | out: lpFindFileData=0x31e314*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x642afa0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x642afa0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x921e7f, ftLastWriteTime.dwHighDateTime=0x1cb8927, nFileSizeHigh=0x0, nFileSizeLow=0x587, dwReserved0=0x0, dwReserved1=0x0, cFileName="Internet Explorer (64-bit).lnk", cAlternateFileName="INTERN~2.LNK")) returned 1 [0094.001] FindNextFileW (in: hFindFile=0x381b80, lpFindFileData=0x31e314 | out: lpFindFileData=0x31e314*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6392a20, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x6392a20, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x921e7f, ftLastWriteTime.dwHighDateTime=0x1cb8927, nFileSizeHigh=0x0, nFileSizeLow=0x5a9, dwReserved0=0x0, dwReserved1=0x0, cFileName="Internet Explorer.lnk", cAlternateFileName="INTERN~1.LNK")) returned 1 [0094.001] FindNextFileW (in: hFindFile=0x381b80, lpFindFileData=0x31e314 | out: lpFindFileData=0x31e314*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0xfda4e0ba, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x642afa0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x7e05e94e, ftLastWriteTime.dwHighDateTime=0x1ca043e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Maintenance", cAlternateFileName="MAINTE~1")) returned 1 [0094.001] FindNextFileW (in: hFindFile=0x381b80, lpFindFileData=0x31e314 | out: lpFindFileData=0x31e314*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x62fa4a0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x636c8c0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xd890148c, ftLastWriteTime.dwHighDateTime=0x1cb892d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Startup", cAlternateFileName="")) returned 1 [0094.001] FindNextFileW (in: hFindFile=0x381b80, lpFindFileData=0x31e314 | out: lpFindFileData=0x31e314*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0094.001] FindClose (in: hFindFile=0x381b80 | out: hFindFile=0x381b80) returned 1 [0094.002] GetFullPathNameW (in: lpFileName="C:\\Users\\Default\\AppData\\Roaming\\Microsoft\\Windows\\Start Menu\\Programs\\Internet Explorer (64-bit).lnk", nBufferLength=0x105, lpBuffer=0x31dfb4, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\Default\\AppData\\Roaming\\Microsoft\\Windows\\Start Menu\\Programs\\Internet Explorer (64-bit).lnk", lpFilePart=0x0) returned 0x65 [0094.002] CreateFileW (lpFileName="C:\\Users\\Default\\AppData\\Roaming\\Microsoft\\Windows\\Start Menu\\Programs\\Internet Explorer (64-bit).lnk" (normalized: "c:\\users\\default\\appdata\\roaming\\microsoft\\windows\\start menu\\programs\\internet explorer (64-bit).lnk"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x178 [0094.003] GetFileType (hFile=0x178) returned 0x1 [0094.003] GetFileType (hFile=0x178) returned 0x1 [0094.003] GetFileSize (in: hFile=0x178, lpFileSizeHigh=0x31e5b0 | out: lpFileSizeHigh=0x31e5b0*=0x0) returned 0x587 [0094.003] ReadFile (in: hFile=0x178, lpBuffer=0x2822734, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x31e55c, lpOverlapped=0x0 | out: lpBuffer=0x2822734*, lpNumberOfBytesRead=0x31e55c*=0x587, lpOverlapped=0x0) returned 1 [0094.044] GetFullPathNameW (in: lpFileName="C:\\Users\\Default\\AppData\\Roaming\\Microsoft\\Windows\\Start Menu\\Programs\\Internet Explorer (64-bit).lnk", nBufferLength=0x105, lpBuffer=0x31dfa0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\Default\\AppData\\Roaming\\Microsoft\\Windows\\Start Menu\\Programs\\Internet Explorer (64-bit).lnk", lpFilePart=0x0) returned 0x65 [0094.045] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e494) returned 1 [0094.045] CreateFileW (lpFileName="C:\\Users\\Default\\AppData\\Roaming\\Microsoft\\Windows\\Start Menu\\Programs\\Internet Explorer (64-bit).lnk" (normalized: "c:\\users\\default\\appdata\\roaming\\microsoft\\windows\\start menu\\programs\\internet explorer (64-bit).lnk"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x178 [0094.046] GetFileType (hFile=0x178) returned 0x1 [0094.046] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e490) returned 1 [0094.046] GetFileType (hFile=0x178) returned 0x1 [0094.046] WriteFile (in: hFile=0x178, lpBuffer=0x2673ebc*, nNumberOfBytesToWrite=0x590, lpNumberOfBytesWritten=0x31e524, lpOverlapped=0x0 | out: lpBuffer=0x2673ebc*, lpNumberOfBytesWritten=0x31e524*=0x590, lpOverlapped=0x0) returned 1 [0094.046] CloseHandle (hObject=0x178) returned 1 [0094.047] GetFullPathNameW (in: lpFileName="C:\\Users\\Default\\AppData\\Roaming\\Microsoft\\Windows\\Start Menu\\Programs\\Internet Explorer (64-bit).lnk", nBufferLength=0x105, lpBuffer=0x31e0d4, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\Default\\AppData\\Roaming\\Microsoft\\Windows\\Start Menu\\Programs\\Internet Explorer (64-bit).lnk", lpFilePart=0x0) returned 0x65 [0094.047] GetFullPathNameW (in: lpFileName="C:\\Users\\Default\\AppData\\Roaming\\Microsoft\\Windows\\Start Menu\\Programs\\Internet Explorer (64-bit).lnk", nBufferLength=0x105, lpBuffer=0x31e0d4, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\Default\\AppData\\Roaming\\Microsoft\\Windows\\Start Menu\\Programs\\Internet Explorer (64-bit).lnk", lpFilePart=0x0) returned 0x65 [0094.047] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e534) returned 1 [0094.047] GetFileAttributesExW (in: lpFileName="C:\\Users\\Default\\AppData\\Roaming\\Microsoft\\Windows\\Start Menu\\Programs\\Internet Explorer (64-bit).lnk" (normalized: "c:\\users\\default\\appdata\\roaming\\microsoft\\windows\\start menu\\programs\\internet explorer (64-bit).lnk"), fInfoLevelId=0x0, lpFileInformation=0x31e5b0 | out: lpFileInformation=0x31e5b0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x642afa0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x642afa0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x1b7f8420, ftLastWriteTime.dwHighDateTime=0x1d6eb7f, nFileSizeHigh=0x0, nFileSizeLow=0x590)) returned 1 [0094.047] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e530) returned 1 [0094.047] MoveFileW (lpExistingFileName="C:\\Users\\Default\\AppData\\Roaming\\Microsoft\\Windows\\Start Menu\\Programs\\Internet Explorer (64-bit).lnk" (normalized: "c:\\users\\default\\appdata\\roaming\\microsoft\\windows\\start menu\\programs\\internet explorer (64-bit).lnk"), lpNewFileName="C:\\Users\\Default\\AppData\\Roaming\\Microsoft\\Windows\\Start Menu\\Programs\\Internet Explorer (64-bit).lnk" (normalized: "c:\\users\\default\\appdata\\roaming\\microsoft\\windows\\start menu\\programs\\internet explorer (64-bit).lnk")) returned 1 [0094.047] GetFullPathNameW (in: lpFileName="C:\\Users\\Default\\AppData\\Roaming\\Microsoft\\Windows\\Start Menu\\Programs\\Internet Explorer.lnk", nBufferLength=0x105, lpBuffer=0x31dfb4, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\Default\\AppData\\Roaming\\Microsoft\\Windows\\Start Menu\\Programs\\Internet Explorer.lnk", lpFilePart=0x0) returned 0x5c [0094.047] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e4a8) returned 1 [0094.047] CreateFileW (lpFileName="C:\\Users\\Default\\AppData\\Roaming\\Microsoft\\Windows\\Start Menu\\Programs\\Internet Explorer.lnk" (normalized: "c:\\users\\default\\appdata\\roaming\\microsoft\\windows\\start menu\\programs\\internet explorer.lnk"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x178 [0094.047] GetFileType (hFile=0x178) returned 0x1 [0094.047] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e4a4) returned 1 [0094.048] GetFileType (hFile=0x178) returned 0x1 [0094.048] GetFileSize (in: hFile=0x178, lpFileSizeHigh=0x31e5b0 | out: lpFileSizeHigh=0x31e5b0*=0x0) returned 0x5a9 [0094.048] ReadFile (in: hFile=0x178, lpBuffer=0x26757a4, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x31e55c, lpOverlapped=0x0 | out: lpBuffer=0x26757a4*, lpNumberOfBytesRead=0x31e55c*=0x5a9, lpOverlapped=0x0) returned 1 [0094.049] CloseHandle (hObject=0x178) returned 1 [0094.062] GetFullPathNameW (in: lpFileName="C:\\Users\\Default\\AppData\\Roaming\\Microsoft\\Windows\\Start Menu\\Programs\\Internet Explorer.lnk", nBufferLength=0x105, lpBuffer=0x31dfa0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\Default\\AppData\\Roaming\\Microsoft\\Windows\\Start Menu\\Programs\\Internet Explorer.lnk", lpFilePart=0x0) returned 0x5c [0094.062] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e494) returned 1 [0094.062] CreateFileW (lpFileName="C:\\Users\\Default\\AppData\\Roaming\\Microsoft\\Windows\\Start Menu\\Programs\\Internet Explorer.lnk" (normalized: "c:\\users\\default\\appdata\\roaming\\microsoft\\windows\\start menu\\programs\\internet explorer.lnk"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x178 [0094.063] GetFileType (hFile=0x178) returned 0x1 [0094.063] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e490) returned 1 [0094.063] GetFileType (hFile=0x178) returned 0x1 [0094.064] WriteFile (in: hFile=0x178, lpBuffer=0x26c54c4*, nNumberOfBytesToWrite=0x5b0, lpNumberOfBytesWritten=0x31e524, lpOverlapped=0x0 | out: lpBuffer=0x26c54c4*, lpNumberOfBytesWritten=0x31e524*=0x5b0, lpOverlapped=0x0) returned 1 [0094.064] CloseHandle (hObject=0x178) returned 1 [0094.064] GetFullPathNameW (in: lpFileName="C:\\Users\\Default\\AppData\\Roaming\\Microsoft\\Windows\\Start Menu\\Programs\\Internet Explorer.lnk", nBufferLength=0x105, lpBuffer=0x31e0d4, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\Default\\AppData\\Roaming\\Microsoft\\Windows\\Start Menu\\Programs\\Internet Explorer.lnk", lpFilePart=0x0) returned 0x5c [0094.064] GetFullPathNameW (in: lpFileName="C:\\Users\\Default\\AppData\\Roaming\\Microsoft\\Windows\\Start Menu\\Programs\\Internet Explorer.lnk", nBufferLength=0x105, lpBuffer=0x31e0d4, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\Default\\AppData\\Roaming\\Microsoft\\Windows\\Start Menu\\Programs\\Internet Explorer.lnk", lpFilePart=0x0) returned 0x5c [0094.065] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e534) returned 1 [0094.065] GetFileAttributesExW (in: lpFileName="C:\\Users\\Default\\AppData\\Roaming\\Microsoft\\Windows\\Start Menu\\Programs\\Internet Explorer.lnk" (normalized: "c:\\users\\default\\appdata\\roaming\\microsoft\\windows\\start menu\\programs\\internet explorer.lnk"), fInfoLevelId=0x0, lpFileInformation=0x31e5b0 | out: lpFileInformation=0x31e5b0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6392a20, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x6392a20, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x1b81e580, ftLastWriteTime.dwHighDateTime=0x1d6eb7f, nFileSizeHigh=0x0, nFileSizeLow=0x5b0)) returned 1 [0094.065] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e530) returned 1 [0094.065] MoveFileW (lpExistingFileName="C:\\Users\\Default\\AppData\\Roaming\\Microsoft\\Windows\\Start Menu\\Programs\\Internet Explorer.lnk" (normalized: "c:\\users\\default\\appdata\\roaming\\microsoft\\windows\\start menu\\programs\\internet explorer.lnk"), lpNewFileName="C:\\Users\\Default\\AppData\\Roaming\\Microsoft\\Windows\\Start Menu\\Programs\\Internet Explorer.lnk" (normalized: "c:\\users\\default\\appdata\\roaming\\microsoft\\windows\\start menu\\programs\\internet explorer.lnk")) returned 1 [0094.065] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e564) returned 1 [0094.065] GetFullPathNameW (in: lpFileName="C:\\Users\\Default\\AppData\\Roaming\\Microsoft\\Windows\\Start Menu\\Programs\\Accessories", nBufferLength=0x105, lpBuffer=0x31e06c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\Default\\AppData\\Roaming\\Microsoft\\Windows\\Start Menu\\Programs\\Accessories", lpFilePart=0x0) returned 0x52 [0094.065] GetFullPathNameW (in: lpFileName="C:\\Users\\Default\\AppData\\Roaming\\Microsoft\\Windows\\Start Menu\\Programs\\Accessories\\", nBufferLength=0x105, lpBuffer=0x31e040, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\Default\\AppData\\Roaming\\Microsoft\\Windows\\Start Menu\\Programs\\Accessories\\", lpFilePart=0x0) returned 0x53 [0094.065] FindFirstFileW (in: lpFileName="C:\\Users\\Default\\AppData\\Roaming\\Microsoft\\Windows\\Start Menu\\Programs\\Accessories\\*", lpFindFileData=0x31e28c | out: lpFindFileData=0x31e28c*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0xfda27f60, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x63b8b80, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x2d76088a, ftLastWriteTime.dwHighDateTime=0x1ca043f, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x381ec0 [0094.067] FindNextFileW (in: hFindFile=0x381ec0, lpFindFileData=0x31e29c | out: lpFindFileData=0x31e29c*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0xfda27f60, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x63b8b80, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x2d76088a, ftLastWriteTime.dwHighDateTime=0x1ca043f, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0094.067] FindNextFileW (in: hFindFile=0x381ec0, lpFindFileData=0x31e29c | out: lpFindFileData=0x31e29c*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0xfda4e0ba, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x63dece0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x1b75a077, ftLastWriteTime.dwHighDateTime=0x1ca043f, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Accessibility", cAlternateFileName="ACCESS~1")) returned 1 [0094.068] FindNextFileW (in: hFindFile=0x381ec0, lpFindFileData=0x31e29c | out: lpFindFileData=0x31e29c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2a53d8cd, ftCreationTime.dwHighDateTime=0x1ca043f, ftLastAccessTime.dwLowDateTime=0x63b8b80, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x2a53d8cd, ftLastWriteTime.dwHighDateTime=0x1ca043f, nFileSizeHigh=0x0, nFileSizeLow=0x500, dwReserved0=0x0, dwReserved1=0x0, cFileName="Command Prompt.lnk", cAlternateFileName="COMMAN~1.LNK")) returned 1 [0094.068] FindNextFileW (in: hFindFile=0x381ec0, lpFindFileData=0x31e29c | out: lpFindFileData=0x31e29c*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0xec08153b, ftCreationTime.dwHighDateTime=0x1ca042b, ftLastAccessTime.dwLowDateTime=0x63b8b80, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x2d76088a, ftLastWriteTime.dwHighDateTime=0x1ca043f, nFileSizeHigh=0x0, nFileSizeLow=0x2a6, dwReserved0=0x0, dwReserved1=0x0, cFileName="Desktop.ini", cAlternateFileName="")) returned 1 [0094.068] FindNextFileW (in: hFindFile=0x381ec0, lpFindFileData=0x31e29c | out: lpFindFileData=0x31e29c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2d655ee8, ftCreationTime.dwHighDateTime=0x1ca043f, ftLastAccessTime.dwLowDateTime=0x63b8b80, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x2d73a72a, ftLastWriteTime.dwHighDateTime=0x1ca043f, nFileSizeHigh=0x0, nFileSizeLow=0x518, dwReserved0=0x0, dwReserved1=0x0, cFileName="Notepad.lnk", cAlternateFileName="")) returned 1 [0094.068] FindNextFileW (in: hFindFile=0x381ec0, lpFindFileData=0x31e29c | out: lpFindFileData=0x31e29c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7dcf29a8, ftCreationTime.dwHighDateTime=0x1ca043e, ftLastAccessTime.dwLowDateTime=0x63b8b80, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x7dfec52d, ftLastWriteTime.dwHighDateTime=0x1ca043e, nFileSizeHigh=0x0, nFileSizeLow=0x106, dwReserved0=0x0, dwReserved1=0x0, cFileName="Run.lnk", cAlternateFileName="")) returned 1 [0094.068] FindNextFileW (in: hFindFile=0x381ec0, lpFindFileData=0x31e29c | out: lpFindFileData=0x31e29c*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0xfda4e0ba, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x6451100, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x921e7f, ftLastWriteTime.dwHighDateTime=0x1cb8927, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="System Tools", cAlternateFileName="SYSTEM~1")) returned 1 [0094.068] FindNextFileW (in: hFindFile=0x381ec0, lpFindFileData=0x31e29c | out: lpFindFileData=0x31e29c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7dc80587, ftCreationTime.dwHighDateTime=0x1ca043e, ftLastAccessTime.dwLowDateTime=0x6392a20, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x7dfa026d, ftLastWriteTime.dwHighDateTime=0x1ca043e, nFileSizeHigh=0x0, nFileSizeLow=0x4cc, dwReserved0=0x0, dwReserved1=0x0, cFileName="Windows Explorer.lnk", cAlternateFileName="WINDOW~1.LNK")) returned 1 [0094.069] FindNextFileW (in: hFindFile=0x381ec0, lpFindFileData=0x31e29c | out: lpFindFileData=0x31e29c*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0094.069] FindClose (in: hFindFile=0x381ec0 | out: hFindFile=0x381ec0) returned 1 [0094.069] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e524) returned 1 [0094.069] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e530) returned 1 [0094.069] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e564) returned 1 [0094.069] GetFullPathNameW (in: lpFileName="C:\\Users\\Default\\AppData\\Roaming\\Microsoft\\Windows\\Start Menu\\Programs\\Accessories", nBufferLength=0x105, lpBuffer=0x31e06c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\Default\\AppData\\Roaming\\Microsoft\\Windows\\Start Menu\\Programs\\Accessories", lpFilePart=0x0) returned 0x52 [0094.069] GetFullPathNameW (in: lpFileName="C:\\Users\\Default\\AppData\\Roaming\\Microsoft\\Windows\\Start Menu\\Programs\\Accessories\\", nBufferLength=0x105, lpBuffer=0x31e040, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\Default\\AppData\\Roaming\\Microsoft\\Windows\\Start Menu\\Programs\\Accessories\\", lpFilePart=0x0) returned 0x53 [0094.070] FindFirstFileW (in: lpFileName="C:\\Users\\Default\\AppData\\Roaming\\Microsoft\\Windows\\Start Menu\\Programs\\Accessories\\*", lpFindFileData=0x31e28c | out: lpFindFileData=0x31e28c*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0xfda27f60, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x63b8b80, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x2d76088a, ftLastWriteTime.dwHighDateTime=0x1ca043f, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x381ec0 [0094.070] FindNextFileW (in: hFindFile=0x381ec0, lpFindFileData=0x31e29c | out: lpFindFileData=0x31e29c*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0xfda27f60, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x63b8b80, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x2d76088a, ftLastWriteTime.dwHighDateTime=0x1ca043f, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0094.070] FindNextFileW (in: hFindFile=0x381ec0, lpFindFileData=0x31e29c | out: lpFindFileData=0x31e29c*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0xfda4e0ba, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x63dece0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x1b75a077, ftLastWriteTime.dwHighDateTime=0x1ca043f, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Accessibility", cAlternateFileName="ACCESS~1")) returned 1 [0094.071] FindNextFileW (in: hFindFile=0x381ec0, lpFindFileData=0x31e29c | out: lpFindFileData=0x31e29c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2a53d8cd, ftCreationTime.dwHighDateTime=0x1ca043f, ftLastAccessTime.dwLowDateTime=0x63b8b80, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x2a53d8cd, ftLastWriteTime.dwHighDateTime=0x1ca043f, nFileSizeHigh=0x0, nFileSizeLow=0x500, dwReserved0=0x0, dwReserved1=0x0, cFileName="Command Prompt.lnk", cAlternateFileName="COMMAN~1.LNK")) returned 1 [0094.071] FindNextFileW (in: hFindFile=0x381ec0, lpFindFileData=0x31e29c | out: lpFindFileData=0x31e29c*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0xec08153b, ftCreationTime.dwHighDateTime=0x1ca042b, ftLastAccessTime.dwLowDateTime=0x63b8b80, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x2d76088a, ftLastWriteTime.dwHighDateTime=0x1ca043f, nFileSizeHigh=0x0, nFileSizeLow=0x2a6, dwReserved0=0x0, dwReserved1=0x0, cFileName="Desktop.ini", cAlternateFileName="")) returned 1 [0094.071] FindNextFileW (in: hFindFile=0x381ec0, lpFindFileData=0x31e29c | out: lpFindFileData=0x31e29c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2d655ee8, ftCreationTime.dwHighDateTime=0x1ca043f, ftLastAccessTime.dwLowDateTime=0x63b8b80, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x2d73a72a, ftLastWriteTime.dwHighDateTime=0x1ca043f, nFileSizeHigh=0x0, nFileSizeLow=0x518, dwReserved0=0x0, dwReserved1=0x0, cFileName="Notepad.lnk", cAlternateFileName="")) returned 1 [0094.071] FindNextFileW (in: hFindFile=0x381ec0, lpFindFileData=0x31e29c | out: lpFindFileData=0x31e29c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7dcf29a8, ftCreationTime.dwHighDateTime=0x1ca043e, ftLastAccessTime.dwLowDateTime=0x63b8b80, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x7dfec52d, ftLastWriteTime.dwHighDateTime=0x1ca043e, nFileSizeHigh=0x0, nFileSizeLow=0x106, dwReserved0=0x0, dwReserved1=0x0, cFileName="Run.lnk", cAlternateFileName="")) returned 1 [0094.071] FindNextFileW (in: hFindFile=0x381ec0, lpFindFileData=0x31e29c | out: lpFindFileData=0x31e29c*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0xfda4e0ba, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x6451100, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x921e7f, ftLastWriteTime.dwHighDateTime=0x1cb8927, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="System Tools", cAlternateFileName="SYSTEM~1")) returned 1 [0094.071] FindNextFileW (in: hFindFile=0x381ec0, lpFindFileData=0x31e29c | out: lpFindFileData=0x31e29c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7dc80587, ftCreationTime.dwHighDateTime=0x1ca043e, ftLastAccessTime.dwLowDateTime=0x6392a20, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x7dfa026d, ftLastWriteTime.dwHighDateTime=0x1ca043e, nFileSizeHigh=0x0, nFileSizeLow=0x4cc, dwReserved0=0x0, dwReserved1=0x0, cFileName="Windows Explorer.lnk", cAlternateFileName="WINDOW~1.LNK")) returned 1 [0094.071] FindNextFileW (in: hFindFile=0x381ec0, lpFindFileData=0x31e29c | out: lpFindFileData=0x31e29c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7dc80587, ftCreationTime.dwHighDateTime=0x1ca043e, ftLastAccessTime.dwLowDateTime=0x6392a20, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x7dfa026d, ftLastWriteTime.dwHighDateTime=0x1ca043e, nFileSizeHigh=0x0, nFileSizeLow=0x4cc, dwReserved0=0x0, dwReserved1=0x0, cFileName="Windows Explorer.lnk", cAlternateFileName="WINDOW~1.LNK")) returned 0 [0094.072] FindClose (in: hFindFile=0x381ec0 | out: hFindFile=0x381ec0) returned 1 [0094.072] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e524) returned 1 [0094.072] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e530) returned 1 [0094.072] GetFullPathNameW (in: lpFileName="C:\\Users\\Default\\AppData\\Roaming\\Microsoft\\Windows\\Start Menu\\Programs\\Accessories\\Command Prompt.lnk", nBufferLength=0x105, lpBuffer=0x31df3c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\Default\\AppData\\Roaming\\Microsoft\\Windows\\Start Menu\\Programs\\Accessories\\Command Prompt.lnk", lpFilePart=0x0) returned 0x65 [0094.072] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e430) returned 1 [0094.072] CreateFileW (lpFileName="C:\\Users\\Default\\AppData\\Roaming\\Microsoft\\Windows\\Start Menu\\Programs\\Accessories\\Command Prompt.lnk" (normalized: "c:\\users\\default\\appdata\\roaming\\microsoft\\windows\\start menu\\programs\\accessories\\command prompt.lnk"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x178 [0094.073] GetFileType (hFile=0x178) returned 0x1 [0094.073] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e42c) returned 1 [0094.073] GetFileType (hFile=0x178) returned 0x1 [0094.073] GetFileSize (in: hFile=0x178, lpFileSizeHigh=0x31e538 | out: lpFileSizeHigh=0x31e538*=0x0) returned 0x500 [0094.073] ReadFile (in: hFile=0x178, lpBuffer=0x26ca2d0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x31e4e4, lpOverlapped=0x0 | out: lpBuffer=0x26ca2d0*, lpNumberOfBytesRead=0x31e4e4*=0x500, lpOverlapped=0x0) returned 1 [0094.075] CloseHandle (hObject=0x178) returned 1 [0094.088] GetFullPathNameW (in: lpFileName="C:\\Users\\Default\\AppData\\Roaming\\Microsoft\\Windows\\Start Menu\\Programs\\Accessories\\Command Prompt.lnk", nBufferLength=0x105, lpBuffer=0x31df28, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\Default\\AppData\\Roaming\\Microsoft\\Windows\\Start Menu\\Programs\\Accessories\\Command Prompt.lnk", lpFilePart=0x0) returned 0x65 [0094.088] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e41c) returned 1 [0094.088] CreateFileW (lpFileName="C:\\Users\\Default\\AppData\\Roaming\\Microsoft\\Windows\\Start Menu\\Programs\\Accessories\\Command Prompt.lnk" (normalized: "c:\\users\\default\\appdata\\roaming\\microsoft\\windows\\start menu\\programs\\accessories\\command prompt.lnk"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x178 [0094.089] GetFileType (hFile=0x178) returned 0x1 [0094.089] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e418) returned 1 [0094.089] GetFileType (hFile=0x178) returned 0x1 [0094.089] WriteFile (in: hFile=0x178, lpBuffer=0x2719b88*, nNumberOfBytesToWrite=0x510, lpNumberOfBytesWritten=0x31e4ac, lpOverlapped=0x0 | out: lpBuffer=0x2719b88*, lpNumberOfBytesWritten=0x31e4ac*=0x510, lpOverlapped=0x0) returned 1 [0094.090] CloseHandle (hObject=0x178) returned 1 [0094.090] GetFullPathNameW (in: lpFileName="C:\\Users\\Default\\AppData\\Roaming\\Microsoft\\Windows\\Start Menu\\Programs\\Accessories\\Command Prompt.lnk", nBufferLength=0x105, lpBuffer=0x31e05c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\Default\\AppData\\Roaming\\Microsoft\\Windows\\Start Menu\\Programs\\Accessories\\Command Prompt.lnk", lpFilePart=0x0) returned 0x65 [0094.090] GetFullPathNameW (in: lpFileName="C:\\Users\\Default\\AppData\\Roaming\\Microsoft\\Windows\\Start Menu\\Programs\\Accessories\\Command Prompt.lnk", nBufferLength=0x105, lpBuffer=0x31e05c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\Default\\AppData\\Roaming\\Microsoft\\Windows\\Start Menu\\Programs\\Accessories\\Command Prompt.lnk", lpFilePart=0x0) returned 0x65 [0094.090] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e4bc) returned 1 [0094.090] GetFileAttributesExW (in: lpFileName="C:\\Users\\Default\\AppData\\Roaming\\Microsoft\\Windows\\Start Menu\\Programs\\Accessories\\Command Prompt.lnk" (normalized: "c:\\users\\default\\appdata\\roaming\\microsoft\\windows\\start menu\\programs\\accessories\\command prompt.lnk"), fInfoLevelId=0x0, lpFileInformation=0x31e538 | out: lpFileInformation=0x31e538*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2a53d8cd, ftCreationTime.dwHighDateTime=0x1ca043f, ftLastAccessTime.dwLowDateTime=0x63b8b80, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x1b86a840, ftLastWriteTime.dwHighDateTime=0x1d6eb7f, nFileSizeHigh=0x0, nFileSizeLow=0x510)) returned 1 [0094.090] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e4b8) returned 1 [0094.090] MoveFileW (lpExistingFileName="C:\\Users\\Default\\AppData\\Roaming\\Microsoft\\Windows\\Start Menu\\Programs\\Accessories\\Command Prompt.lnk" (normalized: "c:\\users\\default\\appdata\\roaming\\microsoft\\windows\\start menu\\programs\\accessories\\command prompt.lnk"), lpNewFileName="C:\\Users\\Default\\AppData\\Roaming\\Microsoft\\Windows\\Start Menu\\Programs\\Accessories\\Command Prompt.lnk" (normalized: "c:\\users\\default\\appdata\\roaming\\microsoft\\windows\\start menu\\programs\\accessories\\command prompt.lnk")) returned 1 [0094.091] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e430) returned 1 [0094.091] CreateFileW (lpFileName="C:\\Users\\Default\\AppData\\Roaming\\Microsoft\\Windows\\Start Menu\\Programs\\Accessories\\Notepad.lnk" (normalized: "c:\\users\\default\\appdata\\roaming\\microsoft\\windows\\start menu\\programs\\accessories\\notepad.lnk"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x178 [0094.092] GetFileType (hFile=0x178) returned 0x1 [0094.092] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e42c) returned 1 [0094.092] GetFileType (hFile=0x178) returned 0x1 [0094.092] GetFileSize (in: hFile=0x178, lpFileSizeHigh=0x31e538 | out: lpFileSizeHigh=0x31e538*=0x0) returned 0x518 [0094.092] ReadFile (in: hFile=0x178, lpBuffer=0x271b3e4, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x31e4e4, lpOverlapped=0x0 | out: lpBuffer=0x271b3e4*, lpNumberOfBytesRead=0x31e4e4*=0x518, lpOverlapped=0x0) returned 1 [0094.093] CloseHandle (hObject=0x178) returned 1 [0094.107] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e41c) returned 1 [0094.107] CreateFileW (lpFileName="C:\\Users\\Default\\AppData\\Roaming\\Microsoft\\Windows\\Start Menu\\Programs\\Accessories\\Notepad.lnk" (normalized: "c:\\users\\default\\appdata\\roaming\\microsoft\\windows\\start menu\\programs\\accessories\\notepad.lnk"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x178 [0094.108] GetFileType (hFile=0x178) returned 0x1 [0094.108] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e418) returned 1 [0094.108] GetFileType (hFile=0x178) returned 0x1 [0094.108] WriteFile (in: hFile=0x178, lpBuffer=0x276acc8*, nNumberOfBytesToWrite=0x520, lpNumberOfBytesWritten=0x31e4ac, lpOverlapped=0x0 | out: lpBuffer=0x276acc8*, lpNumberOfBytesWritten=0x31e4ac*=0x520, lpOverlapped=0x0) returned 1 [0094.109] CloseHandle (hObject=0x178) returned 1 [0094.109] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e4bc) returned 1 [0094.109] GetFileAttributesExW (in: lpFileName="C:\\Users\\Default\\AppData\\Roaming\\Microsoft\\Windows\\Start Menu\\Programs\\Accessories\\Notepad.lnk" (normalized: "c:\\users\\default\\appdata\\roaming\\microsoft\\windows\\start menu\\programs\\accessories\\notepad.lnk"), fInfoLevelId=0x0, lpFileInformation=0x31e538 | out: lpFileInformation=0x31e538*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2d655ee8, ftCreationTime.dwHighDateTime=0x1ca043f, ftLastAccessTime.dwLowDateTime=0x63b8b80, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x1b8909a0, ftLastWriteTime.dwHighDateTime=0x1d6eb7f, nFileSizeHigh=0x0, nFileSizeLow=0x520)) returned 1 [0094.109] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e4b8) returned 1 [0094.109] MoveFileW (lpExistingFileName="C:\\Users\\Default\\AppData\\Roaming\\Microsoft\\Windows\\Start Menu\\Programs\\Accessories\\Notepad.lnk" (normalized: "c:\\users\\default\\appdata\\roaming\\microsoft\\windows\\start menu\\programs\\accessories\\notepad.lnk"), lpNewFileName="C:\\Users\\Default\\AppData\\Roaming\\Microsoft\\Windows\\Start Menu\\Programs\\Accessories\\Notepad.lnk" (normalized: "c:\\users\\default\\appdata\\roaming\\microsoft\\windows\\start menu\\programs\\accessories\\notepad.lnk")) returned 1 [0094.109] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e430) returned 1 [0094.109] CreateFileW (lpFileName="C:\\Users\\Default\\AppData\\Roaming\\Microsoft\\Windows\\Start Menu\\Programs\\Accessories\\Run.lnk" (normalized: "c:\\users\\default\\appdata\\roaming\\microsoft\\windows\\start menu\\programs\\accessories\\run.lnk"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x178 [0094.112] GetFileType (hFile=0x178) returned 0x1 [0094.112] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e42c) returned 1 [0094.112] GetFileType (hFile=0x178) returned 0x1 [0094.112] GetFileSize (in: hFile=0x178, lpFileSizeHigh=0x31e538 | out: lpFileSizeHigh=0x31e538*=0x0) returned 0x106 [0094.112] ReadFile (in: hFile=0x178, lpBuffer=0x276c0d4, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x31e4e4, lpOverlapped=0x0 | out: lpBuffer=0x276c0d4*, lpNumberOfBytesRead=0x31e4e4*=0x106, lpOverlapped=0x0) returned 1 [0094.113] CloseHandle (hObject=0x178) returned 1 [0094.126] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e41c) returned 1 [0094.126] CreateFileW (lpFileName="C:\\Users\\Default\\AppData\\Roaming\\Microsoft\\Windows\\Start Menu\\Programs\\Accessories\\Run.lnk" (normalized: "c:\\users\\default\\appdata\\roaming\\microsoft\\windows\\start menu\\programs\\accessories\\run.lnk"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x178 [0094.127] GetFileType (hFile=0x178) returned 0x1 [0094.127] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e418) returned 1 [0094.127] GetFileType (hFile=0x178) returned 0x1 [0094.127] WriteFile (in: hFile=0x178, lpBuffer=0x27ba55c*, nNumberOfBytesToWrite=0x110, lpNumberOfBytesWritten=0x31e4ac, lpOverlapped=0x0 | out: lpBuffer=0x27ba55c*, lpNumberOfBytesWritten=0x31e4ac*=0x110, lpOverlapped=0x0) returned 1 [0094.128] CloseHandle (hObject=0x178) returned 1 [0094.128] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e4bc) returned 1 [0094.128] GetFileAttributesExW (in: lpFileName="C:\\Users\\Default\\AppData\\Roaming\\Microsoft\\Windows\\Start Menu\\Programs\\Accessories\\Run.lnk" (normalized: "c:\\users\\default\\appdata\\roaming\\microsoft\\windows\\start menu\\programs\\accessories\\run.lnk"), fInfoLevelId=0x0, lpFileInformation=0x31e538 | out: lpFileInformation=0x31e538*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7dcf29a8, ftCreationTime.dwHighDateTime=0x1ca043e, ftLastAccessTime.dwLowDateTime=0x63b8b80, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x1b8b6b00, ftLastWriteTime.dwHighDateTime=0x1d6eb7f, nFileSizeHigh=0x0, nFileSizeLow=0x110)) returned 1 [0094.128] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e4b8) returned 1 [0094.128] MoveFileW (lpExistingFileName="C:\\Users\\Default\\AppData\\Roaming\\Microsoft\\Windows\\Start Menu\\Programs\\Accessories\\Run.lnk" (normalized: "c:\\users\\default\\appdata\\roaming\\microsoft\\windows\\start menu\\programs\\accessories\\run.lnk"), lpNewFileName="C:\\Users\\Default\\AppData\\Roaming\\Microsoft\\Windows\\Start Menu\\Programs\\Accessories\\Run.lnk" (normalized: "c:\\users\\default\\appdata\\roaming\\microsoft\\windows\\start menu\\programs\\accessories\\run.lnk")) returned 1 [0094.128] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e430) returned 1 [0094.128] CreateFileW (lpFileName="C:\\Users\\Default\\AppData\\Roaming\\Microsoft\\Windows\\Start Menu\\Programs\\Accessories\\Windows Explorer.lnk" (normalized: "c:\\users\\default\\appdata\\roaming\\microsoft\\windows\\start menu\\programs\\accessories\\windows explorer.lnk"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x178 [0094.129] GetFileType (hFile=0x178) returned 0x1 [0094.129] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e42c) returned 1 [0094.129] GetFileType (hFile=0x178) returned 0x1 [0094.129] GetFileSize (in: hFile=0x178, lpFileSizeHigh=0x31e538 | out: lpFileSizeHigh=0x31e538*=0x0) returned 0x4cc [0094.129] ReadFile (in: hFile=0x178, lpBuffer=0x27bbd50, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x31e4e4, lpOverlapped=0x0 | out: lpBuffer=0x27bbd50*, lpNumberOfBytesRead=0x31e4e4*=0x4cc, lpOverlapped=0x0) returned 1 [0094.131] CloseHandle (hObject=0x178) returned 1 [0094.144] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e41c) returned 1 [0094.144] CreateFileW (lpFileName="C:\\Users\\Default\\AppData\\Roaming\\Microsoft\\Windows\\Start Menu\\Programs\\Accessories\\Windows Explorer.lnk" (normalized: "c:\\users\\default\\appdata\\roaming\\microsoft\\windows\\start menu\\programs\\accessories\\windows explorer.lnk"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x178 [0094.145] GetFileType (hFile=0x178) returned 0x1 [0094.145] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e418) returned 1 [0094.145] GetFileType (hFile=0x178) returned 0x1 [0094.145] WriteFile (in: hFile=0x178, lpBuffer=0x280b4c4*, nNumberOfBytesToWrite=0x4d0, lpNumberOfBytesWritten=0x31e4ac, lpOverlapped=0x0 | out: lpBuffer=0x280b4c4*, lpNumberOfBytesWritten=0x31e4ac*=0x4d0, lpOverlapped=0x0) returned 1 [0094.146] CloseHandle (hObject=0x178) returned 1 [0094.146] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e4bc) returned 1 [0094.146] GetFileAttributesExW (in: lpFileName="C:\\Users\\Default\\AppData\\Roaming\\Microsoft\\Windows\\Start Menu\\Programs\\Accessories\\Windows Explorer.lnk" (normalized: "c:\\users\\default\\appdata\\roaming\\microsoft\\windows\\start menu\\programs\\accessories\\windows explorer.lnk"), fInfoLevelId=0x0, lpFileInformation=0x31e538 | out: lpFileInformation=0x31e538*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7dc80587, ftCreationTime.dwHighDateTime=0x1ca043e, ftLastAccessTime.dwLowDateTime=0x6392a20, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x1b8dcc60, ftLastWriteTime.dwHighDateTime=0x1d6eb7f, nFileSizeHigh=0x0, nFileSizeLow=0x4d0)) returned 1 [0094.146] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e4b8) returned 1 [0094.146] MoveFileW (lpExistingFileName="C:\\Users\\Default\\AppData\\Roaming\\Microsoft\\Windows\\Start Menu\\Programs\\Accessories\\Windows Explorer.lnk" (normalized: "c:\\users\\default\\appdata\\roaming\\microsoft\\windows\\start menu\\programs\\accessories\\windows explorer.lnk"), lpNewFileName="C:\\Users\\Default\\AppData\\Roaming\\Microsoft\\Windows\\Start Menu\\Programs\\Accessories\\Windows Explorer.lnk" (normalized: "c:\\users\\default\\appdata\\roaming\\microsoft\\windows\\start menu\\programs\\accessories\\windows explorer.lnk")) returned 1 [0094.147] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e4ec) returned 1 [0094.152] FindNextFileW (in: hFindFile=0x382040, lpFindFileData=0x31e224 | out: lpFindFileData=0x31e224*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0xfda4e0ba, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x63dece0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x1b75a077, ftLastWriteTime.dwHighDateTime=0x1ca043f, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0094.153] FindNextFileW (in: hFindFile=0x382040, lpFindFileData=0x31e224 | out: lpFindFileData=0x31e224*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0xec0cd7f5, ftCreationTime.dwHighDateTime=0x1ca042b, ftLastAccessTime.dwLowDateTime=0x63dece0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x1b75a077, ftLastWriteTime.dwHighDateTime=0x1ca043f, nFileSizeHigh=0x0, nFileSizeLow=0x2c0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Desktop.ini", cAlternateFileName="")) returned 1 [0094.153] FindNextFileW (in: hFindFile=0x382040, lpFindFileData=0x31e224 | out: lpFindFileData=0x31e224*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1aadace0, ftCreationTime.dwHighDateTime=0x1ca043f, ftLastAccessTime.dwLowDateTime=0x63dece0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x1ab4d101, ftLastWriteTime.dwHighDateTime=0x1ca043f, nFileSizeHigh=0x0, nFileSizeLow=0x54e, dwReserved0=0x0, dwReserved1=0x0, cFileName="Ease of Access.lnk", cAlternateFileName="EASEOF~1.LNK")) returned 1 [0094.153] FindNextFileW (in: hFindFile=0x382040, lpFindFileData=0x31e224 | out: lpFindFileData=0x31e224*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1a911c5d, ftCreationTime.dwHighDateTime=0x1ca043f, ftLastAccessTime.dwLowDateTime=0x63b8b80, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x1a98407e, ftLastWriteTime.dwHighDateTime=0x1ca043f, nFileSizeHigh=0x0, nFileSizeLow=0x4ea, dwReserved0=0x0, dwReserved1=0x0, cFileName="Magnify.lnk", cAlternateFileName="")) returned 1 [0094.153] FindNextFileW (in: hFindFile=0x382040, lpFindFileData=0x31e224 | out: lpFindFileData=0x31e224*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1b733f17, ftCreationTime.dwHighDateTime=0x1ca043f, ftLastAccessTime.dwLowDateTime=0x63b8b80, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x1b733f17, ftLastWriteTime.dwHighDateTime=0x1ca043f, nFileSizeHigh=0x0, nFileSizeLow=0x4ee, dwReserved0=0x0, dwReserved1=0x0, cFileName="Narrator.lnk", cAlternateFileName="")) returned 1 [0094.153] FindNextFileW (in: hFindFile=0x382040, lpFindFileData=0x31e224 | out: lpFindFileData=0x31e224*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1a9f649f, ftCreationTime.dwHighDateTime=0x1ca043f, ftLastAccessTime.dwLowDateTime=0x63b8b80, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x1aa4275f, ftLastWriteTime.dwHighDateTime=0x1ca043f, nFileSizeHigh=0x0, nFileSizeLow=0x4e2, dwReserved0=0x0, dwReserved1=0x0, cFileName="On-Screen Keyboard.lnk", cAlternateFileName="ON-SCR~1.LNK")) returned 1 [0094.153] FindNextFileW (in: hFindFile=0x382040, lpFindFileData=0x31e224 | out: lpFindFileData=0x31e224*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0094.153] FindClose (in: hFindFile=0x382040 | out: hFindFile=0x382040) returned 1 [0094.154] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e4ac) returned 1 [0094.154] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e4b8) returned 1 [0094.154] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e4ec) returned 1 [0094.155] FindNextFileW (in: hFindFile=0x382040, lpFindFileData=0x31e224 | out: lpFindFileData=0x31e224*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0xfda4e0ba, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x63dece0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x1b75a077, ftLastWriteTime.dwHighDateTime=0x1ca043f, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0094.155] FindNextFileW (in: hFindFile=0x382040, lpFindFileData=0x31e224 | out: lpFindFileData=0x31e224*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0xec0cd7f5, ftCreationTime.dwHighDateTime=0x1ca042b, ftLastAccessTime.dwLowDateTime=0x63dece0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x1b75a077, ftLastWriteTime.dwHighDateTime=0x1ca043f, nFileSizeHigh=0x0, nFileSizeLow=0x2c0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Desktop.ini", cAlternateFileName="")) returned 1 [0094.155] FindNextFileW (in: hFindFile=0x382040, lpFindFileData=0x31e224 | out: lpFindFileData=0x31e224*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1aadace0, ftCreationTime.dwHighDateTime=0x1ca043f, ftLastAccessTime.dwLowDateTime=0x63dece0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x1ab4d101, ftLastWriteTime.dwHighDateTime=0x1ca043f, nFileSizeHigh=0x0, nFileSizeLow=0x54e, dwReserved0=0x0, dwReserved1=0x0, cFileName="Ease of Access.lnk", cAlternateFileName="EASEOF~1.LNK")) returned 1 [0094.155] FindNextFileW (in: hFindFile=0x382040, lpFindFileData=0x31e224 | out: lpFindFileData=0x31e224*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1a911c5d, ftCreationTime.dwHighDateTime=0x1ca043f, ftLastAccessTime.dwLowDateTime=0x63b8b80, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x1a98407e, ftLastWriteTime.dwHighDateTime=0x1ca043f, nFileSizeHigh=0x0, nFileSizeLow=0x4ea, dwReserved0=0x0, dwReserved1=0x0, cFileName="Magnify.lnk", cAlternateFileName="")) returned 1 [0094.155] FindNextFileW (in: hFindFile=0x382040, lpFindFileData=0x31e224 | out: lpFindFileData=0x31e224*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1b733f17, ftCreationTime.dwHighDateTime=0x1ca043f, ftLastAccessTime.dwLowDateTime=0x63b8b80, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x1b733f17, ftLastWriteTime.dwHighDateTime=0x1ca043f, nFileSizeHigh=0x0, nFileSizeLow=0x4ee, dwReserved0=0x0, dwReserved1=0x0, cFileName="Narrator.lnk", cAlternateFileName="")) returned 1 [0094.156] FindNextFileW (in: hFindFile=0x382040, lpFindFileData=0x31e224 | out: lpFindFileData=0x31e224*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1a9f649f, ftCreationTime.dwHighDateTime=0x1ca043f, ftLastAccessTime.dwLowDateTime=0x63b8b80, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x1aa4275f, ftLastWriteTime.dwHighDateTime=0x1ca043f, nFileSizeHigh=0x0, nFileSizeLow=0x4e2, dwReserved0=0x0, dwReserved1=0x0, cFileName="On-Screen Keyboard.lnk", cAlternateFileName="ON-SCR~1.LNK")) returned 1 [0094.156] FindNextFileW (in: hFindFile=0x382040, lpFindFileData=0x31e224 | out: lpFindFileData=0x31e224*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1a9f649f, ftCreationTime.dwHighDateTime=0x1ca043f, ftLastAccessTime.dwLowDateTime=0x63b8b80, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x1aa4275f, ftLastWriteTime.dwHighDateTime=0x1ca043f, nFileSizeHigh=0x0, nFileSizeLow=0x4e2, dwReserved0=0x0, dwReserved1=0x0, cFileName="On-Screen Keyboard.lnk", cAlternateFileName="ON-SCR~1.LNK")) returned 0 [0094.156] FindClose (in: hFindFile=0x382040 | out: hFindFile=0x382040) returned 1 [0094.157] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e4ac) returned 1 [0094.157] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e4b8) returned 1 [0094.157] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e3b8) returned 1 [0094.157] CreateFileW (lpFileName="C:\\Users\\Default\\AppData\\Roaming\\Microsoft\\Windows\\Start Menu\\Programs\\Accessories\\Accessibility\\Ease of Access.lnk" (normalized: "c:\\users\\default\\appdata\\roaming\\microsoft\\windows\\start menu\\programs\\accessories\\accessibility\\ease of access.lnk"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x178 [0094.158] GetFileType (hFile=0x178) returned 0x1 [0094.158] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e3b4) returned 1 [0094.158] GetFileType (hFile=0x178) returned 0x1 [0094.158] GetFileSize (in: hFile=0x178, lpFileSizeHigh=0x31e4c0 | out: lpFileSizeHigh=0x31e4c0*=0x0) returned 0x54e [0094.158] ReadFile (in: hFile=0x178, lpBuffer=0x281005c, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x31e46c, lpOverlapped=0x0 | out: lpBuffer=0x281005c*, lpNumberOfBytesRead=0x31e46c*=0x54e, lpOverlapped=0x0) returned 1 [0094.160] CloseHandle (hObject=0x178) returned 1 [0094.201] GetFullPathNameW (in: lpFileName="C:\\Users\\Default\\AppData\\Roaming\\Microsoft\\Windows\\Start Menu\\Programs\\Accessories\\Accessibility\\Ease of Access.lnk", nBufferLength=0x105, lpBuffer=0x31deb0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\Default\\AppData\\Roaming\\Microsoft\\Windows\\Start Menu\\Programs\\Accessories\\Accessibility\\Ease of Access.lnk", lpFilePart=0x0) returned 0x73 [0094.201] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e3a4) returned 1 [0094.201] CreateFileW (lpFileName="C:\\Users\\Default\\AppData\\Roaming\\Microsoft\\Windows\\Start Menu\\Programs\\Accessories\\Accessibility\\Ease of Access.lnk" (normalized: "c:\\users\\default\\appdata\\roaming\\microsoft\\windows\\start menu\\programs\\accessories\\accessibility\\ease of access.lnk"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x178 [0094.202] GetFileType (hFile=0x178) returned 0x1 [0094.202] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e3a0) returned 1 [0094.202] GetFileType (hFile=0x178) returned 0x1 [0094.202] WriteFile (in: hFile=0x178, lpBuffer=0x2661bcc*, nNumberOfBytesToWrite=0x550, lpNumberOfBytesWritten=0x31e434, lpOverlapped=0x0 | out: lpBuffer=0x2661bcc*, lpNumberOfBytesWritten=0x31e434*=0x550, lpOverlapped=0x0) returned 1 [0094.203] CloseHandle (hObject=0x178) returned 1 [0094.203] GetFullPathNameW (in: lpFileName="C:\\Users\\Default\\AppData\\Roaming\\Microsoft\\Windows\\Start Menu\\Programs\\Accessories\\Accessibility\\Ease of Access.lnk", nBufferLength=0x105, lpBuffer=0x31dfe4, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\Default\\AppData\\Roaming\\Microsoft\\Windows\\Start Menu\\Programs\\Accessories\\Accessibility\\Ease of Access.lnk", lpFilePart=0x0) returned 0x73 [0094.203] GetFullPathNameW (in: lpFileName="C:\\Users\\Default\\AppData\\Roaming\\Microsoft\\Windows\\Start Menu\\Programs\\Accessories\\Accessibility\\Ease of Access.lnk", nBufferLength=0x105, lpBuffer=0x31dfe4, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\Default\\AppData\\Roaming\\Microsoft\\Windows\\Start Menu\\Programs\\Accessories\\Accessibility\\Ease of Access.lnk", lpFilePart=0x0) returned 0x73 [0094.203] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e444) returned 1 [0094.203] GetFileAttributesExW (in: lpFileName="C:\\Users\\Default\\AppData\\Roaming\\Microsoft\\Windows\\Start Menu\\Programs\\Accessories\\Accessibility\\Ease of Access.lnk" (normalized: "c:\\users\\default\\appdata\\roaming\\microsoft\\windows\\start menu\\programs\\accessories\\accessibility\\ease of access.lnk"), fInfoLevelId=0x0, lpFileInformation=0x31e4c0 | out: lpFileInformation=0x31e4c0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1aadace0, ftCreationTime.dwHighDateTime=0x1ca043f, ftLastAccessTime.dwLowDateTime=0x63dece0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x1b9751e0, ftLastWriteTime.dwHighDateTime=0x1d6eb7f, nFileSizeHigh=0x0, nFileSizeLow=0x550)) returned 1 [0094.203] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e440) returned 1 [0094.203] MoveFileW (lpExistingFileName="C:\\Users\\Default\\AppData\\Roaming\\Microsoft\\Windows\\Start Menu\\Programs\\Accessories\\Accessibility\\Ease of Access.lnk" (normalized: "c:\\users\\default\\appdata\\roaming\\microsoft\\windows\\start menu\\programs\\accessories\\accessibility\\ease of access.lnk"), lpNewFileName="C:\\Users\\Default\\AppData\\Roaming\\Microsoft\\Windows\\Start Menu\\Programs\\Accessories\\Accessibility\\Ease of Access.lnk" (normalized: "c:\\users\\default\\appdata\\roaming\\microsoft\\windows\\start menu\\programs\\accessories\\accessibility\\ease of access.lnk")) returned 1 [0094.204] GetFullPathNameW (in: lpFileName="C:\\Users\\Default\\AppData\\Roaming\\Microsoft\\Windows\\Start Menu\\Programs\\Accessories\\Accessibility\\Magnify.lnk", nBufferLength=0x105, lpBuffer=0x31dec4, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\Default\\AppData\\Roaming\\Microsoft\\Windows\\Start Menu\\Programs\\Accessories\\Accessibility\\Magnify.lnk", lpFilePart=0x0) returned 0x6c [0094.204] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e3b8) returned 1 [0094.204] CreateFileW (lpFileName="C:\\Users\\Default\\AppData\\Roaming\\Microsoft\\Windows\\Start Menu\\Programs\\Accessories\\Accessibility\\Magnify.lnk" (normalized: "c:\\users\\default\\appdata\\roaming\\microsoft\\windows\\start menu\\programs\\accessories\\accessibility\\magnify.lnk"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x178 [0094.204] GetFileType (hFile=0x178) returned 0x1 [0094.204] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e3b4) returned 1 [0094.204] GetFileType (hFile=0x178) returned 0x1 [0094.204] GetFileSize (in: hFile=0x178, lpFileSizeHigh=0x31e4c0 | out: lpFileSizeHigh=0x31e4c0*=0x0) returned 0x4ea [0094.204] ReadFile (in: hFile=0x178, lpBuffer=0x2663438, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x31e46c, lpOverlapped=0x0 | out: lpBuffer=0x2663438*, lpNumberOfBytesRead=0x31e46c*=0x4ea, lpOverlapped=0x0) returned 1 [0094.206] CloseHandle (hObject=0x178) returned 1 [0094.219] GetFullPathNameW (in: lpFileName="C:\\Users\\Default\\AppData\\Roaming\\Microsoft\\Windows\\Start Menu\\Programs\\Accessories\\Accessibility\\Magnify.lnk", nBufferLength=0x105, lpBuffer=0x31deb0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\Default\\AppData\\Roaming\\Microsoft\\Windows\\Start Menu\\Programs\\Accessories\\Accessibility\\Magnify.lnk", lpFilePart=0x0) returned 0x6c [0094.219] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e3a4) returned 1 [0094.219] CreateFileW (lpFileName="C:\\Users\\Default\\AppData\\Roaming\\Microsoft\\Windows\\Start Menu\\Programs\\Accessories\\Accessibility\\Magnify.lnk" (normalized: "c:\\users\\default\\appdata\\roaming\\microsoft\\windows\\start menu\\programs\\accessories\\accessibility\\magnify.lnk"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x178 [0094.220] GetFileType (hFile=0x178) returned 0x1 [0094.220] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e3a0) returned 1 [0094.220] GetFileType (hFile=0x178) returned 0x1 [0094.220] WriteFile (in: hFile=0x178, lpBuffer=0x26b2da4*, nNumberOfBytesToWrite=0x4f0, lpNumberOfBytesWritten=0x31e434, lpOverlapped=0x0 | out: lpBuffer=0x26b2da4*, lpNumberOfBytesWritten=0x31e434*=0x4f0, lpOverlapped=0x0) returned 1 [0094.221] CloseHandle (hObject=0x178) returned 1 [0094.221] GetFullPathNameW (in: lpFileName="C:\\Users\\Default\\AppData\\Roaming\\Microsoft\\Windows\\Start Menu\\Programs\\Accessories\\Accessibility\\Magnify.lnk", nBufferLength=0x105, lpBuffer=0x31dfe4, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\Default\\AppData\\Roaming\\Microsoft\\Windows\\Start Menu\\Programs\\Accessories\\Accessibility\\Magnify.lnk", lpFilePart=0x0) returned 0x6c [0094.221] GetFullPathNameW (in: lpFileName="C:\\Users\\Default\\AppData\\Roaming\\Microsoft\\Windows\\Start Menu\\Programs\\Accessories\\Accessibility\\Magnify.lnk", nBufferLength=0x105, lpBuffer=0x31dfe4, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\Default\\AppData\\Roaming\\Microsoft\\Windows\\Start Menu\\Programs\\Accessories\\Accessibility\\Magnify.lnk", lpFilePart=0x0) returned 0x6c [0094.221] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e444) returned 1 [0094.221] GetFileAttributesExW (in: lpFileName="C:\\Users\\Default\\AppData\\Roaming\\Microsoft\\Windows\\Start Menu\\Programs\\Accessories\\Accessibility\\Magnify.lnk" (normalized: "c:\\users\\default\\appdata\\roaming\\microsoft\\windows\\start menu\\programs\\accessories\\accessibility\\magnify.lnk"), fInfoLevelId=0x0, lpFileInformation=0x31e4c0 | out: lpFileInformation=0x31e4c0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1a911c5d, ftCreationTime.dwHighDateTime=0x1ca043f, ftLastAccessTime.dwLowDateTime=0x63b8b80, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x1b99b340, ftLastWriteTime.dwHighDateTime=0x1d6eb7f, nFileSizeHigh=0x0, nFileSizeLow=0x4f0)) returned 1 [0094.221] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e440) returned 1 [0094.221] MoveFileW (lpExistingFileName="C:\\Users\\Default\\AppData\\Roaming\\Microsoft\\Windows\\Start Menu\\Programs\\Accessories\\Accessibility\\Magnify.lnk" (normalized: "c:\\users\\default\\appdata\\roaming\\microsoft\\windows\\start menu\\programs\\accessories\\accessibility\\magnify.lnk"), lpNewFileName="C:\\Users\\Default\\AppData\\Roaming\\Microsoft\\Windows\\Start Menu\\Programs\\Accessories\\Accessibility\\Magnify.lnk" (normalized: "c:\\users\\default\\appdata\\roaming\\microsoft\\windows\\start menu\\programs\\accessories\\accessibility\\magnify.lnk")) returned 1 [0094.221] GetFullPathNameW (in: lpFileName="C:\\Users\\Default\\AppData\\Roaming\\Microsoft\\Windows\\Start Menu\\Programs\\Accessories\\Accessibility\\Narrator.lnk", nBufferLength=0x105, lpBuffer=0x31dec4, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\Default\\AppData\\Roaming\\Microsoft\\Windows\\Start Menu\\Programs\\Accessories\\Accessibility\\Narrator.lnk", lpFilePart=0x0) returned 0x6d [0094.221] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e3b8) returned 1 [0094.221] CreateFileW (lpFileName="C:\\Users\\Default\\AppData\\Roaming\\Microsoft\\Windows\\Start Menu\\Programs\\Accessories\\Accessibility\\Narrator.lnk" (normalized: "c:\\users\\default\\appdata\\roaming\\microsoft\\windows\\start menu\\programs\\accessories\\accessibility\\narrator.lnk"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x178 [0094.222] GetFileType (hFile=0x178) returned 0x1 [0094.222] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e3b4) returned 1 [0094.222] GetFileType (hFile=0x178) returned 0x1 [0094.222] GetFileSize (in: hFile=0x178, lpFileSizeHigh=0x31e4c0 | out: lpFileSizeHigh=0x31e4c0*=0x0) returned 0x4ee [0094.222] ReadFile (in: hFile=0x178, lpBuffer=0x26b4600, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x31e46c, lpOverlapped=0x0 | out: lpBuffer=0x26b4600*, lpNumberOfBytesRead=0x31e46c*=0x4ee, lpOverlapped=0x0) returned 1 [0094.223] CloseHandle (hObject=0x178) returned 1 [0094.236] GetFullPathNameW (in: lpFileName="C:\\Users\\Default\\AppData\\Roaming\\Microsoft\\Windows\\Start Menu\\Programs\\Accessories\\Accessibility\\Narrator.lnk", nBufferLength=0x105, lpBuffer=0x31deb0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\Default\\AppData\\Roaming\\Microsoft\\Windows\\Start Menu\\Programs\\Accessories\\Accessibility\\Narrator.lnk", lpFilePart=0x0) returned 0x6d [0094.236] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e3a4) returned 1 [0094.236] CreateFileW (lpFileName="C:\\Users\\Default\\AppData\\Roaming\\Microsoft\\Windows\\Start Menu\\Programs\\Accessories\\Accessibility\\Narrator.lnk" (normalized: "c:\\users\\default\\appdata\\roaming\\microsoft\\windows\\start menu\\programs\\accessories\\accessibility\\narrator.lnk"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x178 [0094.237] GetFileType (hFile=0x178) returned 0x1 [0094.237] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e3a0) returned 1 [0094.237] GetFileType (hFile=0x178) returned 0x1 [0094.237] WriteFile (in: hFile=0x178, lpBuffer=0x2703e10*, nNumberOfBytesToWrite=0x4f0, lpNumberOfBytesWritten=0x31e434, lpOverlapped=0x0 | out: lpBuffer=0x2703e10*, lpNumberOfBytesWritten=0x31e434*=0x4f0, lpOverlapped=0x0) returned 1 [0094.238] CloseHandle (hObject=0x178) returned 1 [0094.238] GetFullPathNameW (in: lpFileName="C:\\Users\\Default\\AppData\\Roaming\\Microsoft\\Windows\\Start Menu\\Programs\\Accessories\\Accessibility\\Narrator.lnk", nBufferLength=0x105, lpBuffer=0x31dfe4, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\Default\\AppData\\Roaming\\Microsoft\\Windows\\Start Menu\\Programs\\Accessories\\Accessibility\\Narrator.lnk", lpFilePart=0x0) returned 0x6d [0094.238] GetFullPathNameW (in: lpFileName="C:\\Users\\Default\\AppData\\Roaming\\Microsoft\\Windows\\Start Menu\\Programs\\Accessories\\Accessibility\\Narrator.lnk", nBufferLength=0x105, lpBuffer=0x31dfe4, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\Default\\AppData\\Roaming\\Microsoft\\Windows\\Start Menu\\Programs\\Accessories\\Accessibility\\Narrator.lnk", lpFilePart=0x0) returned 0x6d [0094.238] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e444) returned 1 [0094.238] GetFileAttributesExW (in: lpFileName="C:\\Users\\Default\\AppData\\Roaming\\Microsoft\\Windows\\Start Menu\\Programs\\Accessories\\Accessibility\\Narrator.lnk" (normalized: "c:\\users\\default\\appdata\\roaming\\microsoft\\windows\\start menu\\programs\\accessories\\accessibility\\narrator.lnk"), fInfoLevelId=0x0, lpFileInformation=0x31e4c0 | out: lpFileInformation=0x31e4c0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1b733f17, ftCreationTime.dwHighDateTime=0x1ca043f, ftLastAccessTime.dwLowDateTime=0x63b8b80, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x1b9c14a0, ftLastWriteTime.dwHighDateTime=0x1d6eb7f, nFileSizeHigh=0x0, nFileSizeLow=0x4f0)) returned 1 [0094.238] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e440) returned 1 [0094.238] MoveFileW (lpExistingFileName="C:\\Users\\Default\\AppData\\Roaming\\Microsoft\\Windows\\Start Menu\\Programs\\Accessories\\Accessibility\\Narrator.lnk" (normalized: "c:\\users\\default\\appdata\\roaming\\microsoft\\windows\\start menu\\programs\\accessories\\accessibility\\narrator.lnk"), lpNewFileName="C:\\Users\\Default\\AppData\\Roaming\\Microsoft\\Windows\\Start Menu\\Programs\\Accessories\\Accessibility\\Narrator.lnk" (normalized: "c:\\users\\default\\appdata\\roaming\\microsoft\\windows\\start menu\\programs\\accessories\\accessibility\\narrator.lnk")) returned 1 [0094.239] GetFullPathNameW (in: lpFileName="C:\\Users\\Default\\AppData\\Roaming\\Microsoft\\Windows\\Start Menu\\Programs\\Accessories\\Accessibility\\On-Screen Keyboard.lnk", nBufferLength=0x105, lpBuffer=0x31dec4, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\Default\\AppData\\Roaming\\Microsoft\\Windows\\Start Menu\\Programs\\Accessories\\Accessibility\\On-Screen Keyboard.lnk", lpFilePart=0x0) returned 0x77 [0094.239] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e3b8) returned 1 [0094.239] CreateFileW (lpFileName="C:\\Users\\Default\\AppData\\Roaming\\Microsoft\\Windows\\Start Menu\\Programs\\Accessories\\Accessibility\\On-Screen Keyboard.lnk" (normalized: "c:\\users\\default\\appdata\\roaming\\microsoft\\windows\\start menu\\programs\\accessories\\accessibility\\on-screen keyboard.lnk"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x178 [0094.240] GetFileType (hFile=0x178) returned 0x1 [0094.240] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e3b4) returned 1 [0094.240] GetFileType (hFile=0x178) returned 0x1 [0094.240] GetFileSize (in: hFile=0x178, lpFileSizeHigh=0x31e4c0 | out: lpFileSizeHigh=0x31e4c0*=0x0) returned 0x4e2 [0094.240] ReadFile (in: hFile=0x178, lpBuffer=0x2705688, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x31e46c, lpOverlapped=0x0 | out: lpBuffer=0x2705688*, lpNumberOfBytesRead=0x31e46c*=0x4e2, lpOverlapped=0x0) returned 1 [0094.242] CloseHandle (hObject=0x178) returned 1 [0094.254] GetFullPathNameW (in: lpFileName="C:\\Users\\Default\\AppData\\Roaming\\Microsoft\\Windows\\Start Menu\\Programs\\Accessories\\Accessibility\\On-Screen Keyboard.lnk", nBufferLength=0x105, lpBuffer=0x31deb0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\Default\\AppData\\Roaming\\Microsoft\\Windows\\Start Menu\\Programs\\Accessories\\Accessibility\\On-Screen Keyboard.lnk", lpFilePart=0x0) returned 0x77 [0094.254] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e3a4) returned 1 [0094.255] CreateFileW (lpFileName="C:\\Users\\Default\\AppData\\Roaming\\Microsoft\\Windows\\Start Menu\\Programs\\Accessories\\Accessibility\\On-Screen Keyboard.lnk" (normalized: "c:\\users\\default\\appdata\\roaming\\microsoft\\windows\\start menu\\programs\\accessories\\accessibility\\on-screen keyboard.lnk"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x178 [0094.263] GetFileType (hFile=0x178) returned 0x1 [0094.263] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e3a0) returned 1 [0094.263] GetFileType (hFile=0x178) returned 0x1 [0094.263] WriteFile (in: hFile=0x178, lpBuffer=0x2754ecc*, nNumberOfBytesToWrite=0x4f0, lpNumberOfBytesWritten=0x31e434, lpOverlapped=0x0 | out: lpBuffer=0x2754ecc*, lpNumberOfBytesWritten=0x31e434*=0x4f0, lpOverlapped=0x0) returned 1 [0094.264] CloseHandle (hObject=0x178) returned 1 [0094.264] GetFullPathNameW (in: lpFileName="C:\\Users\\Default\\AppData\\Roaming\\Microsoft\\Windows\\Start Menu\\Programs\\Accessories\\Accessibility\\On-Screen Keyboard.lnk", nBufferLength=0x105, lpBuffer=0x31dfe4, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\Default\\AppData\\Roaming\\Microsoft\\Windows\\Start Menu\\Programs\\Accessories\\Accessibility\\On-Screen Keyboard.lnk", lpFilePart=0x0) returned 0x77 [0094.264] GetFullPathNameW (in: lpFileName="C:\\Users\\Default\\AppData\\Roaming\\Microsoft\\Windows\\Start Menu\\Programs\\Accessories\\Accessibility\\On-Screen Keyboard.lnk", nBufferLength=0x105, lpBuffer=0x31dfe4, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\Default\\AppData\\Roaming\\Microsoft\\Windows\\Start Menu\\Programs\\Accessories\\Accessibility\\On-Screen Keyboard.lnk", lpFilePart=0x0) returned 0x77 [0094.264] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e444) returned 1 [0094.264] GetFileAttributesExW (in: lpFileName="C:\\Users\\Default\\AppData\\Roaming\\Microsoft\\Windows\\Start Menu\\Programs\\Accessories\\Accessibility\\On-Screen Keyboard.lnk" (normalized: "c:\\users\\default\\appdata\\roaming\\microsoft\\windows\\start menu\\programs\\accessories\\accessibility\\on-screen keyboard.lnk"), fInfoLevelId=0x0, lpFileInformation=0x31e4c0 | out: lpFileInformation=0x31e4c0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1a9f649f, ftCreationTime.dwHighDateTime=0x1ca043f, ftLastAccessTime.dwLowDateTime=0x63b8b80, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x1ba0d760, ftLastWriteTime.dwHighDateTime=0x1d6eb7f, nFileSizeHigh=0x0, nFileSizeLow=0x4f0)) returned 1 [0094.264] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e440) returned 1 [0094.264] MoveFileW (lpExistingFileName="C:\\Users\\Default\\AppData\\Roaming\\Microsoft\\Windows\\Start Menu\\Programs\\Accessories\\Accessibility\\On-Screen Keyboard.lnk" (normalized: "c:\\users\\default\\appdata\\roaming\\microsoft\\windows\\start menu\\programs\\accessories\\accessibility\\on-screen keyboard.lnk"), lpNewFileName="C:\\Users\\Default\\AppData\\Roaming\\Microsoft\\Windows\\Start Menu\\Programs\\Accessories\\Accessibility\\On-Screen Keyboard.lnk" (normalized: "c:\\users\\default\\appdata\\roaming\\microsoft\\windows\\start menu\\programs\\accessories\\accessibility\\on-screen keyboard.lnk")) returned 1 [0094.264] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e4ec) returned 1 [0094.264] GetFullPathNameW (in: lpFileName="C:\\Users\\Default\\AppData\\Roaming\\Microsoft\\Windows\\Start Menu\\Programs\\Accessories\\System Tools", nBufferLength=0x105, lpBuffer=0x31dff4, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\Default\\AppData\\Roaming\\Microsoft\\Windows\\Start Menu\\Programs\\Accessories\\System Tools", lpFilePart=0x0) returned 0x5f [0094.264] GetFullPathNameW (in: lpFileName="C:\\Users\\Default\\AppData\\Roaming\\Microsoft\\Windows\\Start Menu\\Programs\\Accessories\\System Tools\\", nBufferLength=0x105, lpBuffer=0x31dfc8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\Default\\AppData\\Roaming\\Microsoft\\Windows\\Start Menu\\Programs\\Accessories\\System Tools\\", lpFilePart=0x0) returned 0x60 [0094.265] FindFirstFileW (in: lpFileName="C:\\Users\\Default\\AppData\\Roaming\\Microsoft\\Windows\\Start Menu\\Programs\\Accessories\\System Tools\\*", lpFindFileData=0x31e214 | out: lpFindFileData=0x31e214*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0xfda4e0ba, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x6451100, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x921e7f, ftLastWriteTime.dwHighDateTime=0x1cb8927, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x381e40 [0094.266] FindNextFileW (in: hFindFile=0x381e40, lpFindFileData=0x31e224 | out: lpFindFileData=0x31e224*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0xfda4e0ba, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x6451100, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x921e7f, ftLastWriteTime.dwHighDateTime=0x1cb8927, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0094.266] FindNextFileW (in: hFindFile=0x381e40, lpFindFileData=0x31e224 | out: lpFindFileData=0x31e224*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7ddd71ea, ftCreationTime.dwHighDateTime=0x1ca043e, ftLastAccessTime.dwLowDateTime=0x6392a20, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x7e0d0d6f, ftLastWriteTime.dwHighDateTime=0x1ca043e, nFileSizeHigh=0x0, nFileSizeLow=0x106, dwReserved0=0x0, dwReserved1=0x0, cFileName="computer.lnk", cAlternateFileName="")) returned 1 [0094.266] FindNextFileW (in: hFindFile=0x381e40, lpFindFileData=0x31e224 | out: lpFindFileData=0x31e224*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7dd8af29, ftCreationTime.dwHighDateTime=0x1ca043e, ftLastAccessTime.dwLowDateTime=0x6392a20, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x7e084aaf, ftLastWriteTime.dwHighDateTime=0x1ca043e, nFileSizeHigh=0x0, nFileSizeLow=0x106, dwReserved0=0x0, dwReserved1=0x0, cFileName="Control Panel.lnk", cAlternateFileName="CONTRO~1.LNK")) returned 1 [0094.266] FindNextFileW (in: hFindFile=0x381e40, lpFindFileData=0x31e224 | out: lpFindFileData=0x31e224*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0xec119aaf, ftCreationTime.dwHighDateTime=0x1ca042b, ftLastAccessTime.dwLowDateTime=0x6392a20, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x921e7f, ftLastWriteTime.dwHighDateTime=0x1cb8927, nFileSizeHigh=0x0, nFileSizeLow=0x2e2, dwReserved0=0x0, dwReserved1=0x0, cFileName="Desktop.ini", cAlternateFileName="")) returned 1 [0094.266] FindNextFileW (in: hFindFile=0x381e40, lpFindFileData=0x31e224 | out: lpFindFileData=0x31e224*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6392a20, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x6392a20, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x921e7f, ftLastWriteTime.dwHighDateTime=0x1cb8927, nFileSizeHigh=0x0, nFileSizeLow=0x5db, dwReserved0=0x0, dwReserved1=0x0, cFileName="Internet Explorer (No Add-ons).lnk", cAlternateFileName="INTERN~1.LNK")) returned 1 [0094.267] FindNextFileW (in: hFindFile=0x381e40, lpFindFileData=0x31e224 | out: lpFindFileData=0x31e224*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3d3d87bb, ftCreationTime.dwHighDateTime=0x1ca043f, ftLastAccessTime.dwLowDateTime=0x6451100, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x3d424a7b, ftLastWriteTime.dwHighDateTime=0x1ca043f, nFileSizeHigh=0x0, nFileSizeLow=0x51a, dwReserved0=0x0, dwReserved1=0x0, cFileName="Private Character Editor.lnk", cAlternateFileName="PRIVAT~1.LNK")) returned 1 [0094.267] FindNextFileW (in: hFindFile=0x381e40, lpFindFileData=0x31e224 | out: lpFindFileData=0x31e224*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0094.267] FindClose (in: hFindFile=0x381e40 | out: hFindFile=0x381e40) returned 1 [0094.267] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e4ac) returned 1 [0094.267] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e4b8) returned 1 [0094.267] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e4ec) returned 1 [0094.267] GetFullPathNameW (in: lpFileName="C:\\Users\\Default\\AppData\\Roaming\\Microsoft\\Windows\\Start Menu\\Programs\\Accessories\\System Tools", nBufferLength=0x105, lpBuffer=0x31dff4, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\Default\\AppData\\Roaming\\Microsoft\\Windows\\Start Menu\\Programs\\Accessories\\System Tools", lpFilePart=0x0) returned 0x5f [0094.267] GetFullPathNameW (in: lpFileName="C:\\Users\\Default\\AppData\\Roaming\\Microsoft\\Windows\\Start Menu\\Programs\\Accessories\\System Tools\\", nBufferLength=0x105, lpBuffer=0x31dfc8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\Default\\AppData\\Roaming\\Microsoft\\Windows\\Start Menu\\Programs\\Accessories\\System Tools\\", lpFilePart=0x0) returned 0x60 [0094.268] FindFirstFileW (in: lpFileName="C:\\Users\\Default\\AppData\\Roaming\\Microsoft\\Windows\\Start Menu\\Programs\\Accessories\\System Tools\\*", lpFindFileData=0x31e214 | out: lpFindFileData=0x31e214*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0xfda4e0ba, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x6451100, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x921e7f, ftLastWriteTime.dwHighDateTime=0x1cb8927, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x381e40 [0094.268] FindNextFileW (in: hFindFile=0x381e40, lpFindFileData=0x31e224 | out: lpFindFileData=0x31e224*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0xfda4e0ba, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x6451100, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x921e7f, ftLastWriteTime.dwHighDateTime=0x1cb8927, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0094.268] FindNextFileW (in: hFindFile=0x381e40, lpFindFileData=0x31e224 | out: lpFindFileData=0x31e224*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7ddd71ea, ftCreationTime.dwHighDateTime=0x1ca043e, ftLastAccessTime.dwLowDateTime=0x6392a20, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x7e0d0d6f, ftLastWriteTime.dwHighDateTime=0x1ca043e, nFileSizeHigh=0x0, nFileSizeLow=0x106, dwReserved0=0x0, dwReserved1=0x0, cFileName="computer.lnk", cAlternateFileName="")) returned 1 [0094.269] FindNextFileW (in: hFindFile=0x381e40, lpFindFileData=0x31e224 | out: lpFindFileData=0x31e224*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7dd8af29, ftCreationTime.dwHighDateTime=0x1ca043e, ftLastAccessTime.dwLowDateTime=0x6392a20, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x7e084aaf, ftLastWriteTime.dwHighDateTime=0x1ca043e, nFileSizeHigh=0x0, nFileSizeLow=0x106, dwReserved0=0x0, dwReserved1=0x0, cFileName="Control Panel.lnk", cAlternateFileName="CONTRO~1.LNK")) returned 1 [0094.269] FindNextFileW (in: hFindFile=0x381e40, lpFindFileData=0x31e224 | out: lpFindFileData=0x31e224*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0xec119aaf, ftCreationTime.dwHighDateTime=0x1ca042b, ftLastAccessTime.dwLowDateTime=0x6392a20, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x921e7f, ftLastWriteTime.dwHighDateTime=0x1cb8927, nFileSizeHigh=0x0, nFileSizeLow=0x2e2, dwReserved0=0x0, dwReserved1=0x0, cFileName="Desktop.ini", cAlternateFileName="")) returned 1 [0094.269] FindNextFileW (in: hFindFile=0x381e40, lpFindFileData=0x31e224 | out: lpFindFileData=0x31e224*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6392a20, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x6392a20, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x921e7f, ftLastWriteTime.dwHighDateTime=0x1cb8927, nFileSizeHigh=0x0, nFileSizeLow=0x5db, dwReserved0=0x0, dwReserved1=0x0, cFileName="Internet Explorer (No Add-ons).lnk", cAlternateFileName="INTERN~1.LNK")) returned 1 [0094.269] FindNextFileW (in: hFindFile=0x381e40, lpFindFileData=0x31e224 | out: lpFindFileData=0x31e224*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3d3d87bb, ftCreationTime.dwHighDateTime=0x1ca043f, ftLastAccessTime.dwLowDateTime=0x6451100, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x3d424a7b, ftLastWriteTime.dwHighDateTime=0x1ca043f, nFileSizeHigh=0x0, nFileSizeLow=0x51a, dwReserved0=0x0, dwReserved1=0x0, cFileName="Private Character Editor.lnk", cAlternateFileName="PRIVAT~1.LNK")) returned 1 [0094.269] FindNextFileW (in: hFindFile=0x381e40, lpFindFileData=0x31e224 | out: lpFindFileData=0x31e224*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3d3d87bb, ftCreationTime.dwHighDateTime=0x1ca043f, ftLastAccessTime.dwLowDateTime=0x6451100, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x3d424a7b, ftLastWriteTime.dwHighDateTime=0x1ca043f, nFileSizeHigh=0x0, nFileSizeLow=0x51a, dwReserved0=0x0, dwReserved1=0x0, cFileName="Private Character Editor.lnk", cAlternateFileName="PRIVAT~1.LNK")) returned 0 [0094.269] FindClose (in: hFindFile=0x381e40 | out: hFindFile=0x381e40) returned 1 [0094.270] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e4ac) returned 1 [0094.270] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e4b8) returned 1 [0094.270] GetFullPathNameW (in: lpFileName="C:\\Users\\Default\\AppData\\Roaming\\Microsoft\\Windows\\Start Menu\\Programs\\Accessories\\System Tools\\computer.lnk", nBufferLength=0x105, lpBuffer=0x31dec4, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\Default\\AppData\\Roaming\\Microsoft\\Windows\\Start Menu\\Programs\\Accessories\\System Tools\\computer.lnk", lpFilePart=0x0) returned 0x6c [0094.270] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e3b8) returned 1 [0094.270] CreateFileW (lpFileName="C:\\Users\\Default\\AppData\\Roaming\\Microsoft\\Windows\\Start Menu\\Programs\\Accessories\\System Tools\\computer.lnk" (normalized: "c:\\users\\default\\appdata\\roaming\\microsoft\\windows\\start menu\\programs\\accessories\\system tools\\computer.lnk"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x178 [0094.271] GetFileType (hFile=0x178) returned 0x1 [0094.271] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e3b4) returned 1 [0094.271] GetFileType (hFile=0x178) returned 0x1 [0094.271] GetFileSize (in: hFile=0x178, lpFileSizeHigh=0x31e4c0 | out: lpFileSizeHigh=0x31e4c0*=0x0) returned 0x106 [0094.271] ReadFile (in: hFile=0x178, lpBuffer=0x2759770, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x31e46c, lpOverlapped=0x0 | out: lpBuffer=0x2759770*, lpNumberOfBytesRead=0x31e46c*=0x106, lpOverlapped=0x0) returned 1 [0094.285] GetFullPathNameW (in: lpFileName="C:\\Users\\Default\\AppData\\Roaming\\Microsoft\\Windows\\Start Menu\\Programs\\Accessories\\System Tools\\computer.lnk", nBufferLength=0x105, lpBuffer=0x31deb0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\Default\\AppData\\Roaming\\Microsoft\\Windows\\Start Menu\\Programs\\Accessories\\System Tools\\computer.lnk", lpFilePart=0x0) returned 0x6c [0094.285] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e3a4) returned 1 [0094.285] CreateFileW (lpFileName="C:\\Users\\Default\\AppData\\Roaming\\Microsoft\\Windows\\Start Menu\\Programs\\Accessories\\System Tools\\computer.lnk" (normalized: "c:\\users\\default\\appdata\\roaming\\microsoft\\windows\\start menu\\programs\\accessories\\system tools\\computer.lnk"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x178 [0094.286] GetFileType (hFile=0x178) returned 0x1 [0094.286] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e3a0) returned 1 [0094.286] GetFileType (hFile=0x178) returned 0x1 [0094.286] WriteFile (in: hFile=0x178, lpBuffer=0x27a7c28*, nNumberOfBytesToWrite=0x110, lpNumberOfBytesWritten=0x31e434, lpOverlapped=0x0 | out: lpBuffer=0x27a7c28*, lpNumberOfBytesWritten=0x31e434*=0x110, lpOverlapped=0x0) returned 1 [0094.287] GetFullPathNameW (in: lpFileName="C:\\Users\\Default\\AppData\\Roaming\\Microsoft\\Windows\\Start Menu\\Programs\\Accessories\\System Tools\\computer.lnk", nBufferLength=0x105, lpBuffer=0x31dfe4, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\Default\\AppData\\Roaming\\Microsoft\\Windows\\Start Menu\\Programs\\Accessories\\System Tools\\computer.lnk", lpFilePart=0x0) returned 0x6c [0094.287] GetFullPathNameW (in: lpFileName="C:\\Users\\Default\\AppData\\Roaming\\Microsoft\\Windows\\Start Menu\\Programs\\Accessories\\System Tools\\computer.lnk", nBufferLength=0x105, lpBuffer=0x31dfe4, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\Default\\AppData\\Roaming\\Microsoft\\Windows\\Start Menu\\Programs\\Accessories\\System Tools\\computer.lnk", lpFilePart=0x0) returned 0x6c [0094.287] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e444) returned 1 [0094.287] GetFileAttributesExW (in: lpFileName="C:\\Users\\Default\\AppData\\Roaming\\Microsoft\\Windows\\Start Menu\\Programs\\Accessories\\System Tools\\computer.lnk" (normalized: "c:\\users\\default\\appdata\\roaming\\microsoft\\windows\\start menu\\programs\\accessories\\system tools\\computer.lnk"), fInfoLevelId=0x0, lpFileInformation=0x31e4c0 | out: lpFileInformation=0x31e4c0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7ddd71ea, ftCreationTime.dwHighDateTime=0x1ca043e, ftLastAccessTime.dwLowDateTime=0x6392a20, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x1ba59a20, ftLastWriteTime.dwHighDateTime=0x1d6eb7f, nFileSizeHigh=0x0, nFileSizeLow=0x110)) returned 1 [0094.288] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e440) returned 1 [0094.288] MoveFileW (lpExistingFileName="C:\\Users\\Default\\AppData\\Roaming\\Microsoft\\Windows\\Start Menu\\Programs\\Accessories\\System Tools\\computer.lnk" (normalized: "c:\\users\\default\\appdata\\roaming\\microsoft\\windows\\start menu\\programs\\accessories\\system tools\\computer.lnk"), lpNewFileName="C:\\Users\\Default\\AppData\\Roaming\\Microsoft\\Windows\\Start Menu\\Programs\\Accessories\\System Tools\\computer.lnk" (normalized: "c:\\users\\default\\appdata\\roaming\\microsoft\\windows\\start menu\\programs\\accessories\\system tools\\computer.lnk")) returned 1 [0094.288] GetFullPathNameW (in: lpFileName="C:\\Users\\Default\\AppData\\Roaming\\Microsoft\\Windows\\Start Menu\\Programs\\Accessories\\System Tools\\Control Panel.lnk", nBufferLength=0x105, lpBuffer=0x31dec4, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\Default\\AppData\\Roaming\\Microsoft\\Windows\\Start Menu\\Programs\\Accessories\\System Tools\\Control Panel.lnk", lpFilePart=0x0) returned 0x71 [0094.288] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e3b8) returned 1 [0094.288] CreateFileW (lpFileName="C:\\Users\\Default\\AppData\\Roaming\\Microsoft\\Windows\\Start Menu\\Programs\\Accessories\\System Tools\\Control Panel.lnk" (normalized: "c:\\users\\default\\appdata\\roaming\\microsoft\\windows\\start menu\\programs\\accessories\\system tools\\control panel.lnk"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x178 [0094.289] GetFileType (hFile=0x178) returned 0x1 [0094.289] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e3b4) returned 1 [0094.289] GetFileType (hFile=0x178) returned 0x1 [0094.289] GetFileSize (in: hFile=0x178, lpFileSizeHigh=0x31e4c0 | out: lpFileSizeHigh=0x31e4c0*=0x0) returned 0x106 [0094.289] ReadFile (in: hFile=0x178, lpBuffer=0x27a90ac, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x31e46c, lpOverlapped=0x0 | out: lpBuffer=0x27a90ac*, lpNumberOfBytesRead=0x31e46c*=0x106, lpOverlapped=0x0) returned 1 [0094.304] GetFullPathNameW (in: lpFileName="C:\\Users\\Default\\AppData\\Roaming\\Microsoft\\Windows\\Start Menu\\Programs\\Accessories\\System Tools\\Control Panel.lnk", nBufferLength=0x105, lpBuffer=0x31deb0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\Default\\AppData\\Roaming\\Microsoft\\Windows\\Start Menu\\Programs\\Accessories\\System Tools\\Control Panel.lnk", lpFilePart=0x0) returned 0x71 [0094.304] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e3a4) returned 1 [0094.304] CreateFileW (lpFileName="C:\\Users\\Default\\AppData\\Roaming\\Microsoft\\Windows\\Start Menu\\Programs\\Accessories\\System Tools\\Control Panel.lnk" (normalized: "c:\\users\\default\\appdata\\roaming\\microsoft\\windows\\start menu\\programs\\accessories\\system tools\\control panel.lnk"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x178 [0094.304] GetFileType (hFile=0x178) returned 0x1 [0094.304] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e3a0) returned 1 [0094.304] GetFileType (hFile=0x178) returned 0x1 [0094.305] WriteFile (in: hFile=0x178, lpBuffer=0x27f7574*, nNumberOfBytesToWrite=0x110, lpNumberOfBytesWritten=0x31e434, lpOverlapped=0x0 | out: lpBuffer=0x27f7574*, lpNumberOfBytesWritten=0x31e434*=0x110, lpOverlapped=0x0) returned 1 [0094.305] GetFullPathNameW (in: lpFileName="C:\\Users\\Default\\AppData\\Roaming\\Microsoft\\Windows\\Start Menu\\Programs\\Accessories\\System Tools\\Control Panel.lnk", nBufferLength=0x105, lpBuffer=0x31dfe4, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\Default\\AppData\\Roaming\\Microsoft\\Windows\\Start Menu\\Programs\\Accessories\\System Tools\\Control Panel.lnk", lpFilePart=0x0) returned 0x71 [0094.305] GetFullPathNameW (in: lpFileName="C:\\Users\\Default\\AppData\\Roaming\\Microsoft\\Windows\\Start Menu\\Programs\\Accessories\\System Tools\\Control Panel.lnk", nBufferLength=0x105, lpBuffer=0x31dfe4, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\Default\\AppData\\Roaming\\Microsoft\\Windows\\Start Menu\\Programs\\Accessories\\System Tools\\Control Panel.lnk", lpFilePart=0x0) returned 0x71 [0094.305] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e444) returned 1 [0094.305] GetFileAttributesExW (in: lpFileName="C:\\Users\\Default\\AppData\\Roaming\\Microsoft\\Windows\\Start Menu\\Programs\\Accessories\\System Tools\\Control Panel.lnk" (normalized: "c:\\users\\default\\appdata\\roaming\\microsoft\\windows\\start menu\\programs\\accessories\\system tools\\control panel.lnk"), fInfoLevelId=0x0, lpFileInformation=0x31e4c0 | out: lpFileInformation=0x31e4c0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7dd8af29, ftCreationTime.dwHighDateTime=0x1ca043e, ftLastAccessTime.dwLowDateTime=0x6392a20, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x1ba7fb80, ftLastWriteTime.dwHighDateTime=0x1d6eb7f, nFileSizeHigh=0x0, nFileSizeLow=0x110)) returned 1 [0094.306] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e440) returned 1 [0094.306] MoveFileW (lpExistingFileName="C:\\Users\\Default\\AppData\\Roaming\\Microsoft\\Windows\\Start Menu\\Programs\\Accessories\\System Tools\\Control Panel.lnk" (normalized: "c:\\users\\default\\appdata\\roaming\\microsoft\\windows\\start menu\\programs\\accessories\\system tools\\control panel.lnk"), lpNewFileName="C:\\Users\\Default\\AppData\\Roaming\\Microsoft\\Windows\\Start Menu\\Programs\\Accessories\\System Tools\\Control Panel.lnk" (normalized: "c:\\users\\default\\appdata\\roaming\\microsoft\\windows\\start menu\\programs\\accessories\\system tools\\control panel.lnk")) returned 1 [0094.306] GetFullPathNameW (in: lpFileName="C:\\Users\\Default\\AppData\\Roaming\\Microsoft\\Windows\\Start Menu\\Programs\\Accessories\\System Tools\\Internet Explorer (No Add-ons).lnk", nBufferLength=0x105, lpBuffer=0x31dec4, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\Default\\AppData\\Roaming\\Microsoft\\Windows\\Start Menu\\Programs\\Accessories\\System Tools\\Internet Explorer (No Add-ons).lnk", lpFilePart=0x0) returned 0x82 [0094.306] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e3b8) returned 1 [0094.306] CreateFileW (lpFileName="C:\\Users\\Default\\AppData\\Roaming\\Microsoft\\Windows\\Start Menu\\Programs\\Accessories\\System Tools\\Internet Explorer (No Add-ons).lnk" (normalized: "c:\\users\\default\\appdata\\roaming\\microsoft\\windows\\start menu\\programs\\accessories\\system tools\\internet explorer (no add-ons).lnk"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x178 [0094.306] GetFileType (hFile=0x178) returned 0x1 [0094.306] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e3b4) returned 1 [0094.306] GetFileType (hFile=0x178) returned 0x1 [0094.306] GetFileSize (in: hFile=0x178, lpFileSizeHigh=0x31e4c0 | out: lpFileSizeHigh=0x31e4c0*=0x0) returned 0x5db [0094.306] ReadFile (in: hFile=0x178, lpBuffer=0x27f8f3c, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x31e46c, lpOverlapped=0x0 | out: lpBuffer=0x27f8f3c*, lpNumberOfBytesRead=0x31e46c*=0x5db, lpOverlapped=0x0) returned 1 [0094.345] GetFullPathNameW (in: lpFileName="C:\\Users\\Default\\AppData\\Roaming\\Microsoft\\Windows\\Start Menu\\Programs\\Accessories\\System Tools\\Internet Explorer (No Add-ons).lnk", nBufferLength=0x105, lpBuffer=0x31deb0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\Default\\AppData\\Roaming\\Microsoft\\Windows\\Start Menu\\Programs\\Accessories\\System Tools\\Internet Explorer (No Add-ons).lnk", lpFilePart=0x0) returned 0x82 [0094.346] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e3a4) returned 1 [0094.346] CreateFileW (lpFileName="C:\\Users\\Default\\AppData\\Roaming\\Microsoft\\Windows\\Start Menu\\Programs\\Accessories\\System Tools\\Internet Explorer (No Add-ons).lnk" (normalized: "c:\\users\\default\\appdata\\roaming\\microsoft\\windows\\start menu\\programs\\accessories\\system tools\\internet explorer (no add-ons).lnk"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x178 [0094.346] GetFileType (hFile=0x178) returned 0x1 [0094.346] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e3a0) returned 1 [0094.346] GetFileType (hFile=0x178) returned 0x1 [0094.346] WriteFile (in: hFile=0x178, lpBuffer=0x264a770*, nNumberOfBytesToWrite=0x5e0, lpNumberOfBytesWritten=0x31e434, lpOverlapped=0x0 | out: lpBuffer=0x264a770*, lpNumberOfBytesWritten=0x31e434*=0x5e0, lpOverlapped=0x0) returned 1 [0094.347] CloseHandle (hObject=0x178) returned 1 [0094.347] GetFullPathNameW (in: lpFileName="C:\\Users\\Default\\AppData\\Roaming\\Microsoft\\Windows\\Start Menu\\Programs\\Accessories\\System Tools\\Internet Explorer (No Add-ons).lnk", nBufferLength=0x105, lpBuffer=0x31dfe4, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\Default\\AppData\\Roaming\\Microsoft\\Windows\\Start Menu\\Programs\\Accessories\\System Tools\\Internet Explorer (No Add-ons).lnk", lpFilePart=0x0) returned 0x82 [0094.347] GetFullPathNameW (in: lpFileName="C:\\Users\\Default\\AppData\\Roaming\\Microsoft\\Windows\\Start Menu\\Programs\\Accessories\\System Tools\\Internet Explorer (No Add-ons).lnk", nBufferLength=0x105, lpBuffer=0x31dfe4, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\Default\\AppData\\Roaming\\Microsoft\\Windows\\Start Menu\\Programs\\Accessories\\System Tools\\Internet Explorer (No Add-ons).lnk", lpFilePart=0x0) returned 0x82 [0094.347] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e444) returned 1 [0094.347] GetFileAttributesExW (in: lpFileName="C:\\Users\\Default\\AppData\\Roaming\\Microsoft\\Windows\\Start Menu\\Programs\\Accessories\\System Tools\\Internet Explorer (No Add-ons).lnk" (normalized: "c:\\users\\default\\appdata\\roaming\\microsoft\\windows\\start menu\\programs\\accessories\\system tools\\internet explorer (no add-ons).lnk"), fInfoLevelId=0x0, lpFileInformation=0x31e4c0 | out: lpFileInformation=0x31e4c0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6392a20, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x6392a20, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x1bacbe40, ftLastWriteTime.dwHighDateTime=0x1d6eb7f, nFileSizeHigh=0x0, nFileSizeLow=0x5e0)) returned 1 [0094.347] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e440) returned 1 [0094.348] MoveFileW (lpExistingFileName="C:\\Users\\Default\\AppData\\Roaming\\Microsoft\\Windows\\Start Menu\\Programs\\Accessories\\System Tools\\Internet Explorer (No Add-ons).lnk" (normalized: "c:\\users\\default\\appdata\\roaming\\microsoft\\windows\\start menu\\programs\\accessories\\system tools\\internet explorer (no add-ons).lnk"), lpNewFileName="C:\\Users\\Default\\AppData\\Roaming\\Microsoft\\Windows\\Start Menu\\Programs\\Accessories\\System Tools\\Internet Explorer (No Add-ons).lnk" (normalized: "c:\\users\\default\\appdata\\roaming\\microsoft\\windows\\start menu\\programs\\accessories\\system tools\\internet explorer (no add-ons).lnk")) returned 1 [0094.348] GetFullPathNameW (in: lpFileName="C:\\Users\\Default\\AppData\\Roaming\\Microsoft\\Windows\\Start Menu\\Programs\\Accessories\\System Tools\\Private Character Editor.lnk", nBufferLength=0x105, lpBuffer=0x31dec4, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\Default\\AppData\\Roaming\\Microsoft\\Windows\\Start Menu\\Programs\\Accessories\\System Tools\\Private Character Editor.lnk", lpFilePart=0x0) returned 0x7c [0094.348] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e3b8) returned 1 [0094.348] CreateFileW (lpFileName="C:\\Users\\Default\\AppData\\Roaming\\Microsoft\\Windows\\Start Menu\\Programs\\Accessories\\System Tools\\Private Character Editor.lnk" (normalized: "c:\\users\\default\\appdata\\roaming\\microsoft\\windows\\start menu\\programs\\accessories\\system tools\\private character editor.lnk"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x178 [0094.348] GetFileType (hFile=0x178) returned 0x1 [0094.348] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e3b4) returned 1 [0094.348] GetFileType (hFile=0x178) returned 0x1 [0094.348] GetFileSize (in: hFile=0x178, lpFileSizeHigh=0x31e4c0 | out: lpFileSizeHigh=0x31e4c0*=0x0) returned 0x51a [0094.348] ReadFile (in: hFile=0x178, lpBuffer=0x264c090, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x31e46c, lpOverlapped=0x0 | out: lpBuffer=0x264c090*, lpNumberOfBytesRead=0x31e46c*=0x51a, lpOverlapped=0x0) returned 1 [0094.350] CloseHandle (hObject=0x178) returned 1 [0094.362] GetFullPathNameW (in: lpFileName="C:\\Users\\Default\\AppData\\Roaming\\Microsoft\\Windows\\Start Menu\\Programs\\Accessories\\System Tools\\Private Character Editor.lnk", nBufferLength=0x105, lpBuffer=0x31deb0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\Default\\AppData\\Roaming\\Microsoft\\Windows\\Start Menu\\Programs\\Accessories\\System Tools\\Private Character Editor.lnk", lpFilePart=0x0) returned 0x7c [0094.362] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e3a4) returned 1 [0094.362] CreateFileW (lpFileName="C:\\Users\\Default\\AppData\\Roaming\\Microsoft\\Windows\\Start Menu\\Programs\\Accessories\\System Tools\\Private Character Editor.lnk" (normalized: "c:\\users\\default\\appdata\\roaming\\microsoft\\windows\\start menu\\programs\\accessories\\system tools\\private character editor.lnk"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x178 [0094.363] GetFileType (hFile=0x178) returned 0x1 [0094.363] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e3a0) returned 1 [0094.363] GetFileType (hFile=0x178) returned 0x1 [0094.366] GetFullPathNameW (in: lpFileName="C:\\Users\\Default\\AppData\\Roaming\\Microsoft\\Windows\\Start Menu\\Programs\\Accessories\\System Tools\\Private Character Editor.lnk", nBufferLength=0x105, lpBuffer=0x31dfe4, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\Default\\AppData\\Roaming\\Microsoft\\Windows\\Start Menu\\Programs\\Accessories\\System Tools\\Private Character Editor.lnk", lpFilePart=0x0) returned 0x7c [0094.366] GetFullPathNameW (in: lpFileName="C:\\Users\\Default\\AppData\\Roaming\\Microsoft\\Windows\\Start Menu\\Programs\\Accessories\\System Tools\\Private Character Editor.lnk", nBufferLength=0x105, lpBuffer=0x31dfe4, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\Default\\AppData\\Roaming\\Microsoft\\Windows\\Start Menu\\Programs\\Accessories\\System Tools\\Private Character Editor.lnk", lpFilePart=0x0) returned 0x7c [0094.366] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e444) returned 1 [0094.366] GetFileAttributesExW (in: lpFileName="C:\\Users\\Default\\AppData\\Roaming\\Microsoft\\Windows\\Start Menu\\Programs\\Accessories\\System Tools\\Private Character Editor.lnk" (normalized: "c:\\users\\default\\appdata\\roaming\\microsoft\\windows\\start menu\\programs\\accessories\\system tools\\private character editor.lnk"), fInfoLevelId=0x0, lpFileInformation=0x31e4c0 | out: lpFileInformation=0x31e4c0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3d3d87bb, ftCreationTime.dwHighDateTime=0x1ca043f, ftLastAccessTime.dwLowDateTime=0x6451100, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x1bb18100, ftLastWriteTime.dwHighDateTime=0x1d6eb7f, nFileSizeHigh=0x0, nFileSizeLow=0x520)) returned 1 [0094.366] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e440) returned 1 [0094.366] MoveFileW (lpExistingFileName="C:\\Users\\Default\\AppData\\Roaming\\Microsoft\\Windows\\Start Menu\\Programs\\Accessories\\System Tools\\Private Character Editor.lnk" (normalized: "c:\\users\\default\\appdata\\roaming\\microsoft\\windows\\start menu\\programs\\accessories\\system tools\\private character editor.lnk"), lpNewFileName="C:\\Users\\Default\\AppData\\Roaming\\Microsoft\\Windows\\Start Menu\\Programs\\Accessories\\System Tools\\Private Character Editor.lnk" (normalized: "c:\\users\\default\\appdata\\roaming\\microsoft\\windows\\start menu\\programs\\accessories\\system tools\\private character editor.lnk")) returned 1 [0094.366] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e564) returned 1 [0094.366] GetFullPathNameW (in: lpFileName="C:\\Users\\Default\\AppData\\Roaming\\Microsoft\\Windows\\Start Menu\\Programs\\Administrative Tools", nBufferLength=0x105, lpBuffer=0x31e06c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\Default\\AppData\\Roaming\\Microsoft\\Windows\\Start Menu\\Programs\\Administrative Tools", lpFilePart=0x0) returned 0x5b [0094.366] GetFullPathNameW (in: lpFileName="C:\\Users\\Default\\AppData\\Roaming\\Microsoft\\Windows\\Start Menu\\Programs\\Administrative Tools\\", nBufferLength=0x105, lpBuffer=0x31e040, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\Default\\AppData\\Roaming\\Microsoft\\Windows\\Start Menu\\Programs\\Administrative Tools\\", lpFilePart=0x0) returned 0x5c [0094.366] FindFirstFileW (in: lpFileName="C:\\Users\\Default\\AppData\\Roaming\\Microsoft\\Windows\\Start Menu\\Programs\\Administrative Tools\\*", lpFindFileData=0x31e28c | out: lpFindFileData=0x31e28c*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x62fa4a0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x6392a20, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xd890148c, ftLastWriteTime.dwHighDateTime=0x1cb892d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x381f80 [0094.367] FindNextFileW (in: hFindFile=0x381f80, lpFindFileData=0x31e29c | out: lpFindFileData=0x31e29c*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x62fa4a0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x6392a20, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xd890148c, ftLastWriteTime.dwHighDateTime=0x1cb892d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0094.367] FindNextFileW (in: hFindFile=0x381f80, lpFindFileData=0x31e29c | out: lpFindFileData=0x31e29c*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0x636c8c0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x636c8c0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xd890148c, ftLastWriteTime.dwHighDateTime=0x1cb892d, nFileSizeHigh=0x0, nFileSizeLow=0xae, dwReserved0=0x0, dwReserved1=0x0, cFileName="desktop.ini", cAlternateFileName="")) returned 1 [0094.367] FindNextFileW (in: hFindFile=0x381f80, lpFindFileData=0x31e29c | out: lpFindFileData=0x31e29c*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0094.367] FindClose (in: hFindFile=0x381f80 | out: hFindFile=0x381f80) returned 1 [0094.367] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e524) returned 1 [0094.367] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e530) returned 1 [0094.367] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e564) returned 1 [0094.367] GetFullPathNameW (in: lpFileName="C:\\Users\\Default\\AppData\\Roaming\\Microsoft\\Windows\\Start Menu\\Programs\\Administrative Tools", nBufferLength=0x105, lpBuffer=0x31e06c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\Default\\AppData\\Roaming\\Microsoft\\Windows\\Start Menu\\Programs\\Administrative Tools", lpFilePart=0x0) returned 0x5b [0094.367] GetFullPathNameW (in: lpFileName="C:\\Users\\Default\\AppData\\Roaming\\Microsoft\\Windows\\Start Menu\\Programs\\Administrative Tools\\", nBufferLength=0x105, lpBuffer=0x31e040, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\Default\\AppData\\Roaming\\Microsoft\\Windows\\Start Menu\\Programs\\Administrative Tools\\", lpFilePart=0x0) returned 0x5c [0094.367] FindFirstFileW (in: lpFileName="C:\\Users\\Default\\AppData\\Roaming\\Microsoft\\Windows\\Start Menu\\Programs\\Administrative Tools\\*", lpFindFileData=0x31e28c | out: lpFindFileData=0x31e28c*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x62fa4a0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x6392a20, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xd890148c, ftLastWriteTime.dwHighDateTime=0x1cb892d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x381f80 [0094.367] FindNextFileW (in: hFindFile=0x381f80, lpFindFileData=0x31e29c | out: lpFindFileData=0x31e29c*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x62fa4a0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x6392a20, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xd890148c, ftLastWriteTime.dwHighDateTime=0x1cb892d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0094.367] FindNextFileW (in: hFindFile=0x381f80, lpFindFileData=0x31e29c | out: lpFindFileData=0x31e29c*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0x636c8c0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x636c8c0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xd890148c, ftLastWriteTime.dwHighDateTime=0x1cb892d, nFileSizeHigh=0x0, nFileSizeLow=0xae, dwReserved0=0x0, dwReserved1=0x0, cFileName="desktop.ini", cAlternateFileName="")) returned 1 [0094.368] FindNextFileW (in: hFindFile=0x381f80, lpFindFileData=0x31e29c | out: lpFindFileData=0x31e29c*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0x636c8c0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x636c8c0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xd890148c, ftLastWriteTime.dwHighDateTime=0x1cb892d, nFileSizeHigh=0x0, nFileSizeLow=0xae, dwReserved0=0x0, dwReserved1=0x0, cFileName="desktop.ini", cAlternateFileName="")) returned 0 [0094.368] FindClose (in: hFindFile=0x381f80 | out: hFindFile=0x381f80) returned 1 [0094.368] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e524) returned 1 [0094.368] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e530) returned 1 [0094.368] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e564) returned 1 [0094.368] GetFullPathNameW (in: lpFileName="C:\\Users\\Default\\AppData\\Roaming\\Microsoft\\Windows\\Start Menu\\Programs\\Maintenance", nBufferLength=0x105, lpBuffer=0x31e06c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\Default\\AppData\\Roaming\\Microsoft\\Windows\\Start Menu\\Programs\\Maintenance", lpFilePart=0x0) returned 0x52 [0094.368] GetFullPathNameW (in: lpFileName="C:\\Users\\Default\\AppData\\Roaming\\Microsoft\\Windows\\Start Menu\\Programs\\Maintenance\\", nBufferLength=0x105, lpBuffer=0x31e040, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\Default\\AppData\\Roaming\\Microsoft\\Windows\\Start Menu\\Programs\\Maintenance\\", lpFilePart=0x0) returned 0x53 [0094.368] FindFirstFileW (in: lpFileName="C:\\Users\\Default\\AppData\\Roaming\\Microsoft\\Windows\\Start Menu\\Programs\\Maintenance\\*", lpFindFileData=0x31e28c | out: lpFindFileData=0x31e28c*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0xfda4e0ba, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x642afa0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x7e05e94e, ftLastWriteTime.dwHighDateTime=0x1ca043e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x381f80 [0094.368] FindNextFileW (in: hFindFile=0x381f80, lpFindFileData=0x31e29c | out: lpFindFileData=0x31e29c*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0xfda4e0ba, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x642afa0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x7e05e94e, ftLastWriteTime.dwHighDateTime=0x1ca043e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0094.368] FindNextFileW (in: hFindFile=0x381f80, lpFindFileData=0x31e29c | out: lpFindFileData=0x31e29c*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0xec165d69, ftCreationTime.dwHighDateTime=0x1ca042b, ftLastAccessTime.dwLowDateTime=0x642afa0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x7e05e94e, ftLastWriteTime.dwHighDateTime=0x1ca043e, nFileSizeHigh=0x0, nFileSizeLow=0x13e, dwReserved0=0x0, dwReserved1=0x0, cFileName="Desktop.ini", cAlternateFileName="")) returned 1 [0094.368] FindNextFileW (in: hFindFile=0x381f80, lpFindFileData=0x31e29c | out: lpFindFileData=0x31e29c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7dd3ec69, ftCreationTime.dwHighDateTime=0x1ca043e, ftLastAccessTime.dwLowDateTime=0x636c8c0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x7e0387ee, ftLastWriteTime.dwHighDateTime=0x1ca043e, nFileSizeHigh=0x0, nFileSizeLow=0x106, dwReserved0=0x0, dwReserved1=0x0, cFileName="Help.lnk", cAlternateFileName="")) returned 1 [0094.368] FindNextFileW (in: hFindFile=0x381f80, lpFindFileData=0x31e29c | out: lpFindFileData=0x31e29c*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0094.369] FindClose (in: hFindFile=0x381f80 | out: hFindFile=0x381f80) returned 1 [0094.369] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e524) returned 1 [0094.369] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e530) returned 1 [0094.369] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e564) returned 1 [0094.369] GetFullPathNameW (in: lpFileName="C:\\Users\\Default\\AppData\\Roaming\\Microsoft\\Windows\\Start Menu\\Programs\\Maintenance", nBufferLength=0x105, lpBuffer=0x31e06c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\Default\\AppData\\Roaming\\Microsoft\\Windows\\Start Menu\\Programs\\Maintenance", lpFilePart=0x0) returned 0x52 [0094.369] GetFullPathNameW (in: lpFileName="C:\\Users\\Default\\AppData\\Roaming\\Microsoft\\Windows\\Start Menu\\Programs\\Maintenance\\", nBufferLength=0x105, lpBuffer=0x31e040, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\Default\\AppData\\Roaming\\Microsoft\\Windows\\Start Menu\\Programs\\Maintenance\\", lpFilePart=0x0) returned 0x53 [0094.369] FindFirstFileW (in: lpFileName="C:\\Users\\Default\\AppData\\Roaming\\Microsoft\\Windows\\Start Menu\\Programs\\Maintenance\\*", lpFindFileData=0x31e28c | out: lpFindFileData=0x31e28c*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0xfda4e0ba, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x642afa0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x7e05e94e, ftLastWriteTime.dwHighDateTime=0x1ca043e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x381f80 [0094.370] FindNextFileW (in: hFindFile=0x381f80, lpFindFileData=0x31e29c | out: lpFindFileData=0x31e29c*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0xfda4e0ba, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x642afa0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x7e05e94e, ftLastWriteTime.dwHighDateTime=0x1ca043e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0094.370] FindNextFileW (in: hFindFile=0x381f80, lpFindFileData=0x31e29c | out: lpFindFileData=0x31e29c*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0xec165d69, ftCreationTime.dwHighDateTime=0x1ca042b, ftLastAccessTime.dwLowDateTime=0x642afa0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x7e05e94e, ftLastWriteTime.dwHighDateTime=0x1ca043e, nFileSizeHigh=0x0, nFileSizeLow=0x13e, dwReserved0=0x0, dwReserved1=0x0, cFileName="Desktop.ini", cAlternateFileName="")) returned 1 [0094.370] FindNextFileW (in: hFindFile=0x381f80, lpFindFileData=0x31e29c | out: lpFindFileData=0x31e29c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7dd3ec69, ftCreationTime.dwHighDateTime=0x1ca043e, ftLastAccessTime.dwLowDateTime=0x636c8c0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x7e0387ee, ftLastWriteTime.dwHighDateTime=0x1ca043e, nFileSizeHigh=0x0, nFileSizeLow=0x106, dwReserved0=0x0, dwReserved1=0x0, cFileName="Help.lnk", cAlternateFileName="")) returned 1 [0094.370] FindNextFileW (in: hFindFile=0x381f80, lpFindFileData=0x31e29c | out: lpFindFileData=0x31e29c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7dd3ec69, ftCreationTime.dwHighDateTime=0x1ca043e, ftLastAccessTime.dwLowDateTime=0x636c8c0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x7e0387ee, ftLastWriteTime.dwHighDateTime=0x1ca043e, nFileSizeHigh=0x0, nFileSizeLow=0x106, dwReserved0=0x0, dwReserved1=0x0, cFileName="Help.lnk", cAlternateFileName="")) returned 0 [0094.371] FindClose (in: hFindFile=0x381f80 | out: hFindFile=0x381f80) returned 1 [0094.371] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e524) returned 1 [0094.371] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e530) returned 1 [0094.371] GetFullPathNameW (in: lpFileName="C:\\Users\\Default\\AppData\\Roaming\\Microsoft\\Windows\\Start Menu\\Programs\\Maintenance\\Help.lnk", nBufferLength=0x105, lpBuffer=0x31df3c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\Default\\AppData\\Roaming\\Microsoft\\Windows\\Start Menu\\Programs\\Maintenance\\Help.lnk", lpFilePart=0x0) returned 0x5b [0094.371] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e430) returned 1 [0094.371] CreateFileW (lpFileName="C:\\Users\\Default\\AppData\\Roaming\\Microsoft\\Windows\\Start Menu\\Programs\\Maintenance\\Help.lnk" (normalized: "c:\\users\\default\\appdata\\roaming\\microsoft\\windows\\start menu\\programs\\maintenance\\help.lnk"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x178 [0094.371] GetFileType (hFile=0x178) returned 0x1 [0094.371] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e42c) returned 1 [0094.371] GetFileType (hFile=0x178) returned 0x1 [0094.371] GetFileSize (in: hFile=0x178, lpFileSizeHigh=0x31e538 | out: lpFileSizeHigh=0x31e538*=0x0) returned 0x106 [0094.371] ReadFile (in: hFile=0x178, lpBuffer=0x26a0e4c, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x31e4e4, lpOverlapped=0x0 | out: lpBuffer=0x26a0e4c*, lpNumberOfBytesRead=0x31e4e4*=0x106, lpOverlapped=0x0) returned 1 [0094.372] CloseHandle (hObject=0x178) returned 1 [0094.385] GetFullPathNameW (in: lpFileName="C:\\Users\\Default\\AppData\\Roaming\\Microsoft\\Windows\\Start Menu\\Programs\\Maintenance\\Help.lnk", nBufferLength=0x105, lpBuffer=0x31df28, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\Default\\AppData\\Roaming\\Microsoft\\Windows\\Start Menu\\Programs\\Maintenance\\Help.lnk", lpFilePart=0x0) returned 0x5b [0094.385] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e41c) returned 1 [0094.385] CreateFileW (lpFileName="C:\\Users\\Default\\AppData\\Roaming\\Microsoft\\Windows\\Start Menu\\Programs\\Maintenance\\Help.lnk" (normalized: "c:\\users\\default\\appdata\\roaming\\microsoft\\windows\\start menu\\programs\\maintenance\\help.lnk"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x178 [0094.386] GetFileType (hFile=0x178) returned 0x1 [0094.386] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e418) returned 1 [0094.386] GetFileType (hFile=0x178) returned 0x1 [0094.387] GetFullPathNameW (in: lpFileName="C:\\Users\\Default\\AppData\\Roaming\\Microsoft\\Windows\\Start Menu\\Programs\\Maintenance\\Help.lnk", nBufferLength=0x105, lpBuffer=0x31e05c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\Default\\AppData\\Roaming\\Microsoft\\Windows\\Start Menu\\Programs\\Maintenance\\Help.lnk", lpFilePart=0x0) returned 0x5b [0094.387] GetFullPathNameW (in: lpFileName="C:\\Users\\Default\\AppData\\Roaming\\Microsoft\\Windows\\Start Menu\\Programs\\Maintenance\\Help.lnk", nBufferLength=0x105, lpBuffer=0x31e05c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\Default\\AppData\\Roaming\\Microsoft\\Windows\\Start Menu\\Programs\\Maintenance\\Help.lnk", lpFilePart=0x0) returned 0x5b [0094.387] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e4bc) returned 1 [0094.387] GetFileAttributesExW (in: lpFileName="C:\\Users\\Default\\AppData\\Roaming\\Microsoft\\Windows\\Start Menu\\Programs\\Maintenance\\Help.lnk" (normalized: "c:\\users\\default\\appdata\\roaming\\microsoft\\windows\\start menu\\programs\\maintenance\\help.lnk"), fInfoLevelId=0x0, lpFileInformation=0x31e538 | out: lpFileInformation=0x31e538*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7dd3ec69, ftCreationTime.dwHighDateTime=0x1ca043e, ftLastAccessTime.dwLowDateTime=0x636c8c0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x1bb3e260, ftLastWriteTime.dwHighDateTime=0x1d6eb7f, nFileSizeHigh=0x0, nFileSizeLow=0x110)) returned 1 [0094.387] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e4b8) returned 1 [0094.387] MoveFileW (lpExistingFileName="C:\\Users\\Default\\AppData\\Roaming\\Microsoft\\Windows\\Start Menu\\Programs\\Maintenance\\Help.lnk" (normalized: "c:\\users\\default\\appdata\\roaming\\microsoft\\windows\\start menu\\programs\\maintenance\\help.lnk"), lpNewFileName="C:\\Users\\Default\\AppData\\Roaming\\Microsoft\\Windows\\Start Menu\\Programs\\Maintenance\\Help.lnk" (normalized: "c:\\users\\default\\appdata\\roaming\\microsoft\\windows\\start menu\\programs\\maintenance\\help.lnk")) returned 1 [0094.387] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e564) returned 1 [0094.388] GetFullPathNameW (in: lpFileName="C:\\Users\\Default\\AppData\\Roaming\\Microsoft\\Windows\\Start Menu\\Programs\\Startup", nBufferLength=0x105, lpBuffer=0x31e06c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\Default\\AppData\\Roaming\\Microsoft\\Windows\\Start Menu\\Programs\\Startup", lpFilePart=0x0) returned 0x4e [0094.388] GetFullPathNameW (in: lpFileName="C:\\Users\\Default\\AppData\\Roaming\\Microsoft\\Windows\\Start Menu\\Programs\\Startup\\", nBufferLength=0x105, lpBuffer=0x31e040, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\Default\\AppData\\Roaming\\Microsoft\\Windows\\Start Menu\\Programs\\Startup\\", lpFilePart=0x0) returned 0x4f [0094.388] FindFirstFileW (in: lpFileName="C:\\Users\\Default\\AppData\\Roaming\\Microsoft\\Windows\\Start Menu\\Programs\\Startup\\*", lpFindFileData=0x31e28c | out: lpFindFileData=0x31e28c*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x62fa4a0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x636c8c0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xd890148c, ftLastWriteTime.dwHighDateTime=0x1cb892d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x381e40 [0094.388] FindNextFileW (in: hFindFile=0x381e40, lpFindFileData=0x31e29c | out: lpFindFileData=0x31e29c*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x62fa4a0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x636c8c0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xd890148c, ftLastWriteTime.dwHighDateTime=0x1cb892d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0094.388] FindNextFileW (in: hFindFile=0x381e40, lpFindFileData=0x31e29c | out: lpFindFileData=0x31e29c*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0x636c8c0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x636c8c0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xd890148c, ftLastWriteTime.dwHighDateTime=0x1cb892d, nFileSizeHigh=0x0, nFileSizeLow=0xae, dwReserved0=0x0, dwReserved1=0x0, cFileName="desktop.ini", cAlternateFileName="")) returned 1 [0094.388] FindNextFileW (in: hFindFile=0x381e40, lpFindFileData=0x31e29c | out: lpFindFileData=0x31e29c*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0094.388] FindClose (in: hFindFile=0x381e40 | out: hFindFile=0x381e40) returned 1 [0094.388] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e524) returned 1 [0094.388] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e530) returned 1 [0094.388] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e564) returned 1 [0094.388] GetFullPathNameW (in: lpFileName="C:\\Users\\Default\\AppData\\Roaming\\Microsoft\\Windows\\Start Menu\\Programs\\Startup", nBufferLength=0x105, lpBuffer=0x31e06c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\Default\\AppData\\Roaming\\Microsoft\\Windows\\Start Menu\\Programs\\Startup", lpFilePart=0x0) returned 0x4e [0094.388] GetFullPathNameW (in: lpFileName="C:\\Users\\Default\\AppData\\Roaming\\Microsoft\\Windows\\Start Menu\\Programs\\Startup\\", nBufferLength=0x105, lpBuffer=0x31e040, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\Default\\AppData\\Roaming\\Microsoft\\Windows\\Start Menu\\Programs\\Startup\\", lpFilePart=0x0) returned 0x4f [0094.388] FindFirstFileW (in: lpFileName="C:\\Users\\Default\\AppData\\Roaming\\Microsoft\\Windows\\Start Menu\\Programs\\Startup\\*", lpFindFileData=0x31e28c | out: lpFindFileData=0x31e28c*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x62fa4a0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x636c8c0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xd890148c, ftLastWriteTime.dwHighDateTime=0x1cb892d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x381e40 [0094.389] FindNextFileW (in: hFindFile=0x381e40, lpFindFileData=0x31e29c | out: lpFindFileData=0x31e29c*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x62fa4a0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x636c8c0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xd890148c, ftLastWriteTime.dwHighDateTime=0x1cb892d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0094.389] FindNextFileW (in: hFindFile=0x381e40, lpFindFileData=0x31e29c | out: lpFindFileData=0x31e29c*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0x636c8c0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x636c8c0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xd890148c, ftLastWriteTime.dwHighDateTime=0x1cb892d, nFileSizeHigh=0x0, nFileSizeLow=0xae, dwReserved0=0x0, dwReserved1=0x0, cFileName="desktop.ini", cAlternateFileName="")) returned 1 [0094.389] FindNextFileW (in: hFindFile=0x381e40, lpFindFileData=0x31e29c | out: lpFindFileData=0x31e29c*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0x636c8c0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x636c8c0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xd890148c, ftLastWriteTime.dwHighDateTime=0x1cb892d, nFileSizeHigh=0x0, nFileSizeLow=0xae, dwReserved0=0x0, dwReserved1=0x0, cFileName="desktop.ini", cAlternateFileName="")) returned 0 [0094.389] FindClose (in: hFindFile=0x381e40 | out: hFindFile=0x381e40) returned 1 [0094.389] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e524) returned 1 [0094.389] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e530) returned 1 [0094.389] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e654) returned 1 [0094.389] GetFullPathNameW (in: lpFileName="C:\\Users\\Default\\AppData\\Roaming\\Microsoft\\Windows\\Templates", nBufferLength=0x105, lpBuffer=0x31e15c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\Default\\AppData\\Roaming\\Microsoft\\Windows\\Templates", lpFilePart=0x0) returned 0x3c [0094.389] GetFullPathNameW (in: lpFileName="C:\\Users\\Default\\AppData\\Roaming\\Microsoft\\Windows\\Templates\\", nBufferLength=0x105, lpBuffer=0x31e130, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\Default\\AppData\\Roaming\\Microsoft\\Windows\\Templates\\", lpFilePart=0x0) returned 0x3d [0094.389] FindFirstFileW (in: lpFileName="C:\\Users\\Default\\AppData\\Roaming\\Microsoft\\Windows\\Templates\\*", lpFindFileData=0x31e37c | out: lpFindFileData=0x31e37c*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xfda4e0ba, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfda4e0ba, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xaef15879, ftLastWriteTime.dwHighDateTime=0x1ca042b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x381e40 [0094.390] FindNextFileW (in: hFindFile=0x381e40, lpFindFileData=0x31e38c | out: lpFindFileData=0x31e38c*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xfda4e0ba, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfda4e0ba, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xaef15879, ftLastWriteTime.dwHighDateTime=0x1ca042b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0094.390] FindNextFileW (in: hFindFile=0x381e40, lpFindFileData=0x31e38c | out: lpFindFileData=0x31e38c*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xfda4e0ba, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfda4e0ba, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xaef15879, ftLastWriteTime.dwHighDateTime=0x1ca042b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 0 [0094.390] FindClose (in: hFindFile=0x381e40 | out: hFindFile=0x381e40) returned 1 [0094.390] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e614) returned 1 [0094.390] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e620) returned 1 [0094.390] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e654) returned 1 [0094.390] GetFullPathNameW (in: lpFileName="C:\\Users\\Default\\AppData\\Roaming\\Microsoft\\Windows\\Templates", nBufferLength=0x105, lpBuffer=0x31e15c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\Default\\AppData\\Roaming\\Microsoft\\Windows\\Templates", lpFilePart=0x0) returned 0x3c [0094.390] GetFullPathNameW (in: lpFileName="C:\\Users\\Default\\AppData\\Roaming\\Microsoft\\Windows\\Templates\\", nBufferLength=0x105, lpBuffer=0x31e130, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\Default\\AppData\\Roaming\\Microsoft\\Windows\\Templates\\", lpFilePart=0x0) returned 0x3d [0094.390] FindFirstFileW (in: lpFileName="C:\\Users\\Default\\AppData\\Roaming\\Microsoft\\Windows\\Templates\\*", lpFindFileData=0x31e37c | out: lpFindFileData=0x31e37c*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xfda4e0ba, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfda4e0ba, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xaef15879, ftLastWriteTime.dwHighDateTime=0x1ca042b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x381e40 [0094.390] FindNextFileW (in: hFindFile=0x381e40, lpFindFileData=0x31e38c | out: lpFindFileData=0x31e38c*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xfda4e0ba, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfda4e0ba, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xaef15879, ftLastWriteTime.dwHighDateTime=0x1ca042b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0094.390] FindNextFileW (in: hFindFile=0x381e40, lpFindFileData=0x31e38c | out: lpFindFileData=0x31e38c*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xfda4e0ba, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfda4e0ba, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xaef15879, ftLastWriteTime.dwHighDateTime=0x1ca042b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 0 [0094.390] FindClose (in: hFindFile=0x381e40 | out: hFindFile=0x381e40) returned 1 [0094.390] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e614) returned 1 [0094.391] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e620) returned 1 [0094.391] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e654) returned 1 [0094.391] GetFullPathNameW (in: lpFileName="C:\\Users\\Default\\AppData\\Roaming\\Microsoft\\Windows\\Themes", nBufferLength=0x105, lpBuffer=0x31e15c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\Default\\AppData\\Roaming\\Microsoft\\Windows\\Themes", lpFilePart=0x0) returned 0x39 [0094.391] GetFullPathNameW (in: lpFileName="C:\\Users\\Default\\AppData\\Roaming\\Microsoft\\Windows\\Themes\\", nBufferLength=0x105, lpBuffer=0x31e130, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\Default\\AppData\\Roaming\\Microsoft\\Windows\\Themes\\", lpFilePart=0x0) returned 0x3a [0094.391] FindFirstFileW (in: lpFileName="C:\\Users\\Default\\AppData\\Roaming\\Microsoft\\Windows\\Themes\\*", lpFindFileData=0x31e37c | out: lpFindFileData=0x31e37c*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x62fa4a0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x6404e40, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xef632f84, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x381e40 [0094.391] FindNextFileW (in: hFindFile=0x381e40, lpFindFileData=0x31e38c | out: lpFindFileData=0x31e38c*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x62fa4a0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x6404e40, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xef632f84, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0094.391] FindNextFileW (in: hFindFile=0x381e40, lpFindFileData=0x31e38c | out: lpFindFileData=0x31e38c*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x636c8c0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x636c8c0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xff982e02, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x9b944, dwReserved0=0x0, dwReserved1=0x0, cFileName="TranscodedWallpaper.jpg", cAlternateFileName="TRANSC~1.JPG")) returned 1 [0094.391] FindNextFileW (in: hFindFile=0x381e40, lpFindFileData=0x31e38c | out: lpFindFileData=0x31e38c*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0094.391] FindClose (in: hFindFile=0x381e40 | out: hFindFile=0x381e40) returned 1 [0094.391] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e614) returned 1 [0094.391] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e620) returned 1 [0094.391] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e654) returned 1 [0094.391] GetFullPathNameW (in: lpFileName="C:\\Users\\Default\\AppData\\Roaming\\Microsoft\\Windows\\Themes", nBufferLength=0x105, lpBuffer=0x31e15c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\Default\\AppData\\Roaming\\Microsoft\\Windows\\Themes", lpFilePart=0x0) returned 0x39 [0094.392] GetFullPathNameW (in: lpFileName="C:\\Users\\Default\\AppData\\Roaming\\Microsoft\\Windows\\Themes\\", nBufferLength=0x105, lpBuffer=0x31e130, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\Default\\AppData\\Roaming\\Microsoft\\Windows\\Themes\\", lpFilePart=0x0) returned 0x3a [0094.392] FindFirstFileW (in: lpFileName="C:\\Users\\Default\\AppData\\Roaming\\Microsoft\\Windows\\Themes\\*", lpFindFileData=0x31e37c | out: lpFindFileData=0x31e37c*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x62fa4a0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x6404e40, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xef632f84, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x381e40 [0094.392] FindNextFileW (in: hFindFile=0x381e40, lpFindFileData=0x31e38c | out: lpFindFileData=0x31e38c*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x62fa4a0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x6404e40, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xef632f84, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0094.392] FindNextFileW (in: hFindFile=0x381e40, lpFindFileData=0x31e38c | out: lpFindFileData=0x31e38c*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x636c8c0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x636c8c0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xff982e02, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x9b944, dwReserved0=0x0, dwReserved1=0x0, cFileName="TranscodedWallpaper.jpg", cAlternateFileName="TRANSC~1.JPG")) returned 1 [0094.392] FindNextFileW (in: hFindFile=0x381e40, lpFindFileData=0x31e38c | out: lpFindFileData=0x31e38c*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x636c8c0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x636c8c0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xff982e02, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x9b944, dwReserved0=0x0, dwReserved1=0x0, cFileName="TranscodedWallpaper.jpg", cAlternateFileName="TRANSC~1.JPG")) returned 0 [0094.392] FindClose (in: hFindFile=0x381e40 | out: hFindFile=0x381e40) returned 1 [0094.392] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e614) returned 1 [0094.392] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e620) returned 1 [0094.392] GetFullPathNameW (in: lpFileName="C:\\Users\\Default\\AppData\\Roaming\\Microsoft\\Windows\\Themes\\TranscodedWallpaper.jpg", nBufferLength=0x105, lpBuffer=0x31e02c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\Default\\AppData\\Roaming\\Microsoft\\Windows\\Themes\\TranscodedWallpaper.jpg", lpFilePart=0x0) returned 0x51 [0094.392] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e520) returned 1 [0094.392] CreateFileW (lpFileName="C:\\Users\\Default\\AppData\\Roaming\\Microsoft\\Windows\\Themes\\TranscodedWallpaper.jpg" (normalized: "c:\\users\\default\\appdata\\roaming\\microsoft\\windows\\themes\\transcodedwallpaper.jpg"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x178 [0094.392] GetFileType (hFile=0x178) returned 0x1 [0094.393] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e51c) returned 1 [0094.393] GetFileType (hFile=0x178) returned 0x1 [0094.393] GetFileSize (in: hFile=0x178, lpFileSizeHigh=0x31e628 | out: lpFileSizeHigh=0x31e628*=0x0) returned 0x9b944 [0094.393] ReadFile (in: hFile=0x178, lpBuffer=0x3771bf8, nNumberOfBytesToRead=0x9b944, lpNumberOfBytesRead=0x31e5d4, lpOverlapped=0x0 | out: lpBuffer=0x3771bf8*, lpNumberOfBytesRead=0x31e5d4*=0x9b944, lpOverlapped=0x0) returned 1 [0094.400] CloseHandle (hObject=0x178) returned 1 [0094.440] GetFullPathNameW (in: lpFileName="C:\\Users\\Default\\AppData\\Roaming\\Microsoft\\Windows\\Themes\\TranscodedWallpaper.jpg", nBufferLength=0x105, lpBuffer=0x31e018, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\Default\\AppData\\Roaming\\Microsoft\\Windows\\Themes\\TranscodedWallpaper.jpg", lpFilePart=0x0) returned 0x51 [0094.440] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e50c) returned 1 [0094.441] CreateFileW (lpFileName="C:\\Users\\Default\\AppData\\Roaming\\Microsoft\\Windows\\Themes\\TranscodedWallpaper.jpg" (normalized: "c:\\users\\default\\appdata\\roaming\\microsoft\\windows\\themes\\transcodedwallpaper.jpg"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x178 [0094.446] GetFileType (hFile=0x178) returned 0x1 [0094.446] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e508) returned 1 [0094.446] GetFileType (hFile=0x178) returned 0x1 [0094.446] WriteFile (in: hFile=0x178, lpBuffer=0x36194b0*, nNumberOfBytesToWrite=0x9b950, lpNumberOfBytesWritten=0x31e5c8, lpOverlapped=0x0 | out: lpBuffer=0x36194b0*, lpNumberOfBytesWritten=0x31e5c8*=0x9b950, lpOverlapped=0x0) returned 1 [0094.455] CloseHandle (hObject=0x178) returned 1 [0094.455] GetFullPathNameW (in: lpFileName="C:\\Users\\Default\\AppData\\Roaming\\Microsoft\\Windows\\Themes\\TranscodedWallpaper.jpg", nBufferLength=0x105, lpBuffer=0x31e14c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\Default\\AppData\\Roaming\\Microsoft\\Windows\\Themes\\TranscodedWallpaper.jpg", lpFilePart=0x0) returned 0x51 [0094.455] GetFullPathNameW (in: lpFileName="C:\\Users\\Default\\AppData\\Roaming\\Microsoft\\Windows\\Themes\\TranscodedWallpaper.jpg", nBufferLength=0x105, lpBuffer=0x31e14c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\Default\\AppData\\Roaming\\Microsoft\\Windows\\Themes\\TranscodedWallpaper.jpg", lpFilePart=0x0) returned 0x51 [0094.455] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e5ac) returned 1 [0094.455] GetFileAttributesExW (in: lpFileName="C:\\Users\\Default\\AppData\\Roaming\\Microsoft\\Windows\\Themes\\TranscodedWallpaper.jpg" (normalized: "c:\\users\\default\\appdata\\roaming\\microsoft\\windows\\themes\\transcodedwallpaper.jpg"), fInfoLevelId=0x0, lpFileInformation=0x31e628 | out: lpFileInformation=0x31e628*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x636c8c0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x636c8c0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x1bbd67e0, ftLastWriteTime.dwHighDateTime=0x1d6eb7f, nFileSizeHigh=0x0, nFileSizeLow=0x9b950)) returned 1 [0094.455] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e5a8) returned 1 [0094.455] MoveFileW (lpExistingFileName="C:\\Users\\Default\\AppData\\Roaming\\Microsoft\\Windows\\Themes\\TranscodedWallpaper.jpg" (normalized: "c:\\users\\default\\appdata\\roaming\\microsoft\\windows\\themes\\transcodedwallpaper.jpg"), lpNewFileName="C:\\Users\\Default\\AppData\\Roaming\\Microsoft\\Windows\\Themes\\TranscodedWallpaper.jpg" (normalized: "c:\\users\\default\\appdata\\roaming\\microsoft\\windows\\themes\\transcodedwallpaper.jpg")) returned 1 [0094.456] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e834) returned 1 [0094.456] GetFullPathNameW (in: lpFileName="C:\\Users\\Default\\Application Data", nBufferLength=0x105, lpBuffer=0x31e33c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\Default\\Application Data", lpFilePart=0x0) returned 0x21 [0094.456] GetFullPathNameW (in: lpFileName="C:\\Users\\Default\\Application Data\\", nBufferLength=0x105, lpBuffer=0x31e310, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\Default\\Application Data\\", lpFilePart=0x0) returned 0x22 [0094.456] FindFirstFileW (in: lpFileName="C:\\Users\\Default\\Application Data\\*", lpFindFileData=0x31e55c | out: lpFindFileData=0x31e55c*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0094.456] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e7f8) returned 1 [0094.457] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e834) returned 1 [0094.457] GetFullPathNameW (in: lpFileName="C:\\Users\\Default\\Contacts", nBufferLength=0x105, lpBuffer=0x31e33c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\Default\\Contacts", lpFilePart=0x0) returned 0x19 [0094.457] GetFullPathNameW (in: lpFileName="C:\\Users\\Default\\Contacts\\", nBufferLength=0x105, lpBuffer=0x31e310, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\Default\\Contacts\\", lpFilePart=0x0) returned 0x1a [0094.457] FindFirstFileW (in: lpFileName="C:\\Users\\Default\\Contacts\\*", lpFindFileData=0x31e55c | out: lpFindFileData=0x31e55c*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x62fa4a0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x6392a20, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xd888f06b, ftLastWriteTime.dwHighDateTime=0x1cb892d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x381fc0 [0094.458] FindNextFileW (in: hFindFile=0x381fc0, lpFindFileData=0x31e56c | out: lpFindFileData=0x31e56c*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x62fa4a0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x6392a20, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xd888f06b, ftLastWriteTime.dwHighDateTime=0x1cb892d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0094.458] FindNextFileW (in: hFindFile=0x381fc0, lpFindFileData=0x31e56c | out: lpFindFileData=0x31e56c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x636c8c0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x636c8c0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xf0fefd94, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x10b1e, dwReserved0=0x0, dwReserved1=0x0, cFileName="Administrator.contact", cAlternateFileName="ADMINI~1.CON")) returned 1 [0094.458] FindNextFileW (in: hFindFile=0x381fc0, lpFindFileData=0x31e56c | out: lpFindFileData=0x31e56c*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0x636c8c0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x636c8c0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xd888f06b, ftLastWriteTime.dwHighDateTime=0x1cb892d, nFileSizeHigh=0x0, nFileSizeLow=0x19c, dwReserved0=0x0, dwReserved1=0x0, cFileName="desktop.ini", cAlternateFileName="")) returned 1 [0094.458] FindNextFileW (in: hFindFile=0x381fc0, lpFindFileData=0x31e56c | out: lpFindFileData=0x31e56c*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0094.458] FindClose (in: hFindFile=0x381fc0 | out: hFindFile=0x381fc0) returned 1 [0094.458] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e7f4) returned 1 [0094.458] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e800) returned 1 [0094.458] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e834) returned 1 [0094.458] GetFullPathNameW (in: lpFileName="C:\\Users\\Default\\Contacts", nBufferLength=0x105, lpBuffer=0x31e33c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\Default\\Contacts", lpFilePart=0x0) returned 0x19 [0094.459] GetFullPathNameW (in: lpFileName="C:\\Users\\Default\\Contacts\\", nBufferLength=0x105, lpBuffer=0x31e310, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\Default\\Contacts\\", lpFilePart=0x0) returned 0x1a [0094.459] FindFirstFileW (in: lpFileName="C:\\Users\\Default\\Contacts\\*", lpFindFileData=0x31e55c | out: lpFindFileData=0x31e55c*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x62fa4a0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x6392a20, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xd888f06b, ftLastWriteTime.dwHighDateTime=0x1cb892d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x381fc0 [0094.459] FindNextFileW (in: hFindFile=0x381fc0, lpFindFileData=0x31e56c | out: lpFindFileData=0x31e56c*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x62fa4a0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x6392a20, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xd888f06b, ftLastWriteTime.dwHighDateTime=0x1cb892d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0094.459] FindNextFileW (in: hFindFile=0x381fc0, lpFindFileData=0x31e56c | out: lpFindFileData=0x31e56c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x636c8c0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x636c8c0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xf0fefd94, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x10b1e, dwReserved0=0x0, dwReserved1=0x0, cFileName="Administrator.contact", cAlternateFileName="ADMINI~1.CON")) returned 1 [0094.459] FindNextFileW (in: hFindFile=0x381fc0, lpFindFileData=0x31e56c | out: lpFindFileData=0x31e56c*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0x636c8c0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x636c8c0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xd888f06b, ftLastWriteTime.dwHighDateTime=0x1cb892d, nFileSizeHigh=0x0, nFileSizeLow=0x19c, dwReserved0=0x0, dwReserved1=0x0, cFileName="desktop.ini", cAlternateFileName="")) returned 1 [0094.459] FindNextFileW (in: hFindFile=0x381fc0, lpFindFileData=0x31e56c | out: lpFindFileData=0x31e56c*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0x636c8c0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x636c8c0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xd888f06b, ftLastWriteTime.dwHighDateTime=0x1cb892d, nFileSizeHigh=0x0, nFileSizeLow=0x19c, dwReserved0=0x0, dwReserved1=0x0, cFileName="desktop.ini", cAlternateFileName="")) returned 0 [0094.459] FindClose (in: hFindFile=0x381fc0 | out: hFindFile=0x381fc0) returned 1 [0094.459] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e7f4) returned 1 [0094.459] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e800) returned 1 [0094.459] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e834) returned 1 [0094.460] GetFullPathNameW (in: lpFileName="C:\\Users\\Default\\Cookies", nBufferLength=0x105, lpBuffer=0x31e33c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\Default\\Cookies", lpFilePart=0x0) returned 0x18 [0094.460] GetFullPathNameW (in: lpFileName="C:\\Users\\Default\\Cookies\\", nBufferLength=0x105, lpBuffer=0x31e310, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\Default\\Cookies\\", lpFilePart=0x0) returned 0x19 [0094.460] FindFirstFileW (in: lpFileName="C:\\Users\\Default\\Cookies\\*", lpFindFileData=0x31e55c | out: lpFindFileData=0x31e55c*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0094.460] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e7f8) returned 1 [0094.461] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e834) returned 1 [0094.461] GetFullPathNameW (in: lpFileName="C:\\Users\\Default\\Desktop", nBufferLength=0x105, lpBuffer=0x31e33c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\Default\\Desktop", lpFilePart=0x0) returned 0x18 [0094.461] GetFullPathNameW (in: lpFileName="C:\\Users\\Default\\Desktop\\", nBufferLength=0x105, lpBuffer=0x31e310, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\Default\\Desktop\\", lpFilePart=0x0) returned 0x19 [0094.461] FindFirstFileW (in: lpFileName="C:\\Users\\Default\\Desktop\\*", lpFindFileData=0x31e55c | out: lpFindFileData=0x31e55c*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0xfda4e0ba, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x636c8c0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xd8868f0a, ftLastWriteTime.dwHighDateTime=0x1cb892d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x381fc0 [0094.461] FindNextFileW (in: hFindFile=0x381fc0, lpFindFileData=0x31e56c | out: lpFindFileData=0x31e56c*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0xfda4e0ba, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x636c8c0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xd8868f0a, ftLastWriteTime.dwHighDateTime=0x1cb892d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0094.461] FindNextFileW (in: hFindFile=0x381fc0, lpFindFileData=0x31e56c | out: lpFindFileData=0x31e56c*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0x636c8c0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x636c8c0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xd8868f0a, ftLastWriteTime.dwHighDateTime=0x1cb892d, nFileSizeHigh=0x0, nFileSizeLow=0x11a, dwReserved0=0x0, dwReserved1=0x0, cFileName="desktop.ini", cAlternateFileName="")) returned 1 [0094.462] FindNextFileW (in: hFindFile=0x381fc0, lpFindFileData=0x31e56c | out: lpFindFileData=0x31e56c*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0094.462] FindClose (in: hFindFile=0x381fc0 | out: hFindFile=0x381fc0) returned 1 [0094.462] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e7f4) returned 1 [0094.462] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e800) returned 1 [0094.462] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e834) returned 1 [0094.462] GetFullPathNameW (in: lpFileName="C:\\Users\\Default\\Desktop", nBufferLength=0x105, lpBuffer=0x31e33c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\Default\\Desktop", lpFilePart=0x0) returned 0x18 [0094.462] GetFullPathNameW (in: lpFileName="C:\\Users\\Default\\Desktop\\", nBufferLength=0x105, lpBuffer=0x31e310, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\Default\\Desktop\\", lpFilePart=0x0) returned 0x19 [0094.462] FindFirstFileW (in: lpFileName="C:\\Users\\Default\\Desktop\\*", lpFindFileData=0x31e55c | out: lpFindFileData=0x31e55c*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0xfda4e0ba, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x636c8c0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xd8868f0a, ftLastWriteTime.dwHighDateTime=0x1cb892d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x381fc0 [0094.462] FindNextFileW (in: hFindFile=0x381fc0, lpFindFileData=0x31e56c | out: lpFindFileData=0x31e56c*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0xfda4e0ba, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x636c8c0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xd8868f0a, ftLastWriteTime.dwHighDateTime=0x1cb892d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0094.462] FindNextFileW (in: hFindFile=0x381fc0, lpFindFileData=0x31e56c | out: lpFindFileData=0x31e56c*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0x636c8c0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x636c8c0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xd8868f0a, ftLastWriteTime.dwHighDateTime=0x1cb892d, nFileSizeHigh=0x0, nFileSizeLow=0x11a, dwReserved0=0x0, dwReserved1=0x0, cFileName="desktop.ini", cAlternateFileName="")) returned 1 [0094.462] FindNextFileW (in: hFindFile=0x381fc0, lpFindFileData=0x31e56c | out: lpFindFileData=0x31e56c*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0x636c8c0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x636c8c0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xd8868f0a, ftLastWriteTime.dwHighDateTime=0x1cb892d, nFileSizeHigh=0x0, nFileSizeLow=0x11a, dwReserved0=0x0, dwReserved1=0x0, cFileName="desktop.ini", cAlternateFileName="")) returned 0 [0094.463] FindClose (in: hFindFile=0x381fc0 | out: hFindFile=0x381fc0) returned 1 [0094.463] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e7f4) returned 1 [0094.463] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e800) returned 1 [0094.463] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e834) returned 1 [0094.463] GetFullPathNameW (in: lpFileName="C:\\Users\\Default\\Documents", nBufferLength=0x105, lpBuffer=0x31e33c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\Default\\Documents", lpFilePart=0x0) returned 0x1a [0094.463] GetFullPathNameW (in: lpFileName="C:\\Users\\Default\\Documents\\", nBufferLength=0x105, lpBuffer=0x31e310, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\Default\\Documents\\", lpFilePart=0x0) returned 0x1b [0094.463] FindFirstFileW (in: lpFileName="C:\\Users\\Default\\Documents\\*", lpFindFileData=0x31e55c | out: lpFindFileData=0x31e55c*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0xfda9a36e, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x636c8c0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xd890148c, ftLastWriteTime.dwHighDateTime=0x1cb892d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x381fc0 [0094.464] FindNextFileW (in: hFindFile=0x381fc0, lpFindFileData=0x31e56c | out: lpFindFileData=0x31e56c*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0xfda9a36e, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x636c8c0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xd890148c, ftLastWriteTime.dwHighDateTime=0x1cb892d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0094.464] FindNextFileW (in: hFindFile=0x381fc0, lpFindFileData=0x31e56c | out: lpFindFileData=0x31e56c*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0x636c8c0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x636c8c0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xd890148c, ftLastWriteTime.dwHighDateTime=0x1cb892d, nFileSizeHigh=0x0, nFileSizeLow=0x192, dwReserved0=0x0, dwReserved1=0x0, cFileName="desktop.ini", cAlternateFileName="")) returned 1 [0094.464] FindNextFileW (in: hFindFile=0x381fc0, lpFindFileData=0x31e56c | out: lpFindFileData=0x31e56c*(dwFileAttributes=0x2416, ftCreationTime.dwLowDateTime=0x306b6cd1, ftCreationTime.dwHighDateTime=0x1ca0441, ftLastAccessTime.dwLowDateTime=0x306b6cd1, ftLastAccessTime.dwHighDateTime=0x1ca0441, ftLastWriteTime.dwLowDateTime=0x306b6cd1, ftLastWriteTime.dwHighDateTime=0x1ca0441, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="My Music", cAlternateFileName="MYMUSI~1")) returned 1 [0094.464] FindNextFileW (in: hFindFile=0x381fc0, lpFindFileData=0x31e56c | out: lpFindFileData=0x31e56c*(dwFileAttributes=0x2416, ftCreationTime.dwLowDateTime=0x306b6cd1, ftCreationTime.dwHighDateTime=0x1ca0441, ftLastAccessTime.dwLowDateTime=0x306b6cd1, ftLastAccessTime.dwHighDateTime=0x1ca0441, ftLastWriteTime.dwLowDateTime=0x306b6cd1, ftLastWriteTime.dwHighDateTime=0x1ca0441, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="My Pictures", cAlternateFileName="MYPICT~1")) returned 1 [0094.464] FindNextFileW (in: hFindFile=0x381fc0, lpFindFileData=0x31e56c | out: lpFindFileData=0x31e56c*(dwFileAttributes=0x2416, ftCreationTime.dwLowDateTime=0x306b6cd1, ftCreationTime.dwHighDateTime=0x1ca0441, ftLastAccessTime.dwLowDateTime=0x306b6cd1, ftLastAccessTime.dwHighDateTime=0x1ca0441, ftLastWriteTime.dwLowDateTime=0x306b6cd1, ftLastWriteTime.dwHighDateTime=0x1ca0441, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="My Videos", cAlternateFileName="MYVIDE~1")) returned 1 [0094.464] FindNextFileW (in: hFindFile=0x381fc0, lpFindFileData=0x31e56c | out: lpFindFileData=0x31e56c*(dwFileAttributes=0x2416, ftCreationTime.dwLowDateTime=0x306b6cd1, ftCreationTime.dwHighDateTime=0x1ca0441, ftLastAccessTime.dwLowDateTime=0x306b6cd1, ftLastAccessTime.dwHighDateTime=0x1ca0441, ftLastWriteTime.dwLowDateTime=0x306b6cd1, ftLastWriteTime.dwHighDateTime=0x1ca0441, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="My Videos", cAlternateFileName="MYVIDE~1")) returned 0 [0094.464] FindClose (in: hFindFile=0x381fc0 | out: hFindFile=0x381fc0) returned 1 [0094.465] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e7f4) returned 1 [0094.465] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e800) returned 1 [0094.465] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e834) returned 1 [0094.465] GetFullPathNameW (in: lpFileName="C:\\Users\\Default\\Documents", nBufferLength=0x105, lpBuffer=0x31e33c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\Default\\Documents", lpFilePart=0x0) returned 0x1a [0094.465] GetFullPathNameW (in: lpFileName="C:\\Users\\Default\\Documents\\", nBufferLength=0x105, lpBuffer=0x31e310, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\Default\\Documents\\", lpFilePart=0x0) returned 0x1b [0094.465] FindFirstFileW (in: lpFileName="C:\\Users\\Default\\Documents\\*", lpFindFileData=0x31e55c | out: lpFindFileData=0x31e55c*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0xfda9a36e, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x636c8c0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xd890148c, ftLastWriteTime.dwHighDateTime=0x1cb892d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x381fc0 [0094.466] FindNextFileW (in: hFindFile=0x381fc0, lpFindFileData=0x31e56c | out: lpFindFileData=0x31e56c*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0xfda9a36e, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x636c8c0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xd890148c, ftLastWriteTime.dwHighDateTime=0x1cb892d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0094.466] FindNextFileW (in: hFindFile=0x381fc0, lpFindFileData=0x31e56c | out: lpFindFileData=0x31e56c*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0x636c8c0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x636c8c0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xd890148c, ftLastWriteTime.dwHighDateTime=0x1cb892d, nFileSizeHigh=0x0, nFileSizeLow=0x192, dwReserved0=0x0, dwReserved1=0x0, cFileName="desktop.ini", cAlternateFileName="")) returned 1 [0094.466] FindNextFileW (in: hFindFile=0x381fc0, lpFindFileData=0x31e56c | out: lpFindFileData=0x31e56c*(dwFileAttributes=0x2416, ftCreationTime.dwLowDateTime=0x306b6cd1, ftCreationTime.dwHighDateTime=0x1ca0441, ftLastAccessTime.dwLowDateTime=0x306b6cd1, ftLastAccessTime.dwHighDateTime=0x1ca0441, ftLastWriteTime.dwLowDateTime=0x306b6cd1, ftLastWriteTime.dwHighDateTime=0x1ca0441, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="My Music", cAlternateFileName="MYMUSI~1")) returned 1 [0094.466] FindNextFileW (in: hFindFile=0x381fc0, lpFindFileData=0x31e56c | out: lpFindFileData=0x31e56c*(dwFileAttributes=0x2416, ftCreationTime.dwLowDateTime=0x306b6cd1, ftCreationTime.dwHighDateTime=0x1ca0441, ftLastAccessTime.dwLowDateTime=0x306b6cd1, ftLastAccessTime.dwHighDateTime=0x1ca0441, ftLastWriteTime.dwLowDateTime=0x306b6cd1, ftLastWriteTime.dwHighDateTime=0x1ca0441, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="My Pictures", cAlternateFileName="MYPICT~1")) returned 1 [0094.467] FindNextFileW (in: hFindFile=0x381fc0, lpFindFileData=0x31e56c | out: lpFindFileData=0x31e56c*(dwFileAttributes=0x2416, ftCreationTime.dwLowDateTime=0x306b6cd1, ftCreationTime.dwHighDateTime=0x1ca0441, ftLastAccessTime.dwLowDateTime=0x306b6cd1, ftLastAccessTime.dwHighDateTime=0x1ca0441, ftLastWriteTime.dwLowDateTime=0x306b6cd1, ftLastWriteTime.dwHighDateTime=0x1ca0441, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="My Videos", cAlternateFileName="MYVIDE~1")) returned 1 [0094.467] FindNextFileW (in: hFindFile=0x381fc0, lpFindFileData=0x31e56c | out: lpFindFileData=0x31e56c*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0094.467] FindClose (in: hFindFile=0x381fc0 | out: hFindFile=0x381fc0) returned 1 [0094.467] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e7f4) returned 1 [0094.467] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e800) returned 1 [0094.467] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e7bc) returned 1 [0094.467] GetFullPathNameW (in: lpFileName="C:\\Users\\Default\\Documents\\My Music", nBufferLength=0x105, lpBuffer=0x31e2c4, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\Default\\Documents\\My Music", lpFilePart=0x0) returned 0x23 [0094.468] GetFullPathNameW (in: lpFileName="C:\\Users\\Default\\Documents\\My Music\\", nBufferLength=0x105, lpBuffer=0x31e298, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\Default\\Documents\\My Music\\", lpFilePart=0x0) returned 0x24 [0094.468] FindFirstFileW (in: lpFileName="C:\\Users\\Default\\Documents\\My Music\\*", lpFindFileData=0x31e4e4 | out: lpFindFileData=0x31e4e4*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0094.470] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e780) returned 1 [0094.471] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e7bc) returned 1 [0094.471] GetFullPathNameW (in: lpFileName="C:\\Users\\Default\\Documents\\My Pictures", nBufferLength=0x105, lpBuffer=0x31e2c4, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\Default\\Documents\\My Pictures", lpFilePart=0x0) returned 0x26 [0094.471] GetFullPathNameW (in: lpFileName="C:\\Users\\Default\\Documents\\My Pictures\\", nBufferLength=0x105, lpBuffer=0x31e298, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\Default\\Documents\\My Pictures\\", lpFilePart=0x0) returned 0x27 [0094.471] FindFirstFileW (in: lpFileName="C:\\Users\\Default\\Documents\\My Pictures\\*", lpFindFileData=0x31e4e4 | out: lpFindFileData=0x31e4e4*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0094.482] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e780) returned 1 [0094.483] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e7bc) returned 1 [0094.483] GetFullPathNameW (in: lpFileName="C:\\Users\\Default\\Documents\\My Videos", nBufferLength=0x105, lpBuffer=0x31e2c4, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\Default\\Documents\\My Videos", lpFilePart=0x0) returned 0x24 [0094.483] GetFullPathNameW (in: lpFileName="C:\\Users\\Default\\Documents\\My Videos\\", nBufferLength=0x105, lpBuffer=0x31e298, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\Default\\Documents\\My Videos\\", lpFilePart=0x0) returned 0x25 [0094.483] FindFirstFileW (in: lpFileName="C:\\Users\\Default\\Documents\\My Videos\\*", lpFindFileData=0x31e4e4 | out: lpFindFileData=0x31e4e4*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0094.486] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e780) returned 1 [0094.487] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e834) returned 1 [0094.487] GetFullPathNameW (in: lpFileName="C:\\Users\\Default\\Downloads", nBufferLength=0x105, lpBuffer=0x31e33c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\Default\\Downloads", lpFilePart=0x0) returned 0x1a [0094.487] GetFullPathNameW (in: lpFileName="C:\\Users\\Default\\Downloads\\", nBufferLength=0x105, lpBuffer=0x31e310, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\Default\\Downloads\\", lpFilePart=0x0) returned 0x1b [0094.487] FindFirstFileW (in: lpFileName="C:\\Users\\Default\\Downloads\\*", lpFindFileData=0x31e55c | out: lpFindFileData=0x31e55c*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0xfda9a36e, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x636c8c0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xd88db32b, ftLastWriteTime.dwHighDateTime=0x1cb892d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x381fc0 [0094.487] FindNextFileW (in: hFindFile=0x381fc0, lpFindFileData=0x31e56c | out: lpFindFileData=0x31e56c*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0xfda9a36e, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x636c8c0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xd88db32b, ftLastWriteTime.dwHighDateTime=0x1cb892d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0094.487] FindNextFileW (in: hFindFile=0x381fc0, lpFindFileData=0x31e56c | out: lpFindFileData=0x31e56c*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0x636c8c0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x636c8c0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xd88db32b, ftLastWriteTime.dwHighDateTime=0x1cb892d, nFileSizeHigh=0x0, nFileSizeLow=0x11a, dwReserved0=0x0, dwReserved1=0x0, cFileName="desktop.ini", cAlternateFileName="")) returned 1 [0094.488] FindNextFileW (in: hFindFile=0x381fc0, lpFindFileData=0x31e56c | out: lpFindFileData=0x31e56c*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0094.488] FindClose (in: hFindFile=0x381fc0 | out: hFindFile=0x381fc0) returned 1 [0094.488] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e7f4) returned 1 [0094.488] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e800) returned 1 [0094.488] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e834) returned 1 [0094.488] GetFullPathNameW (in: lpFileName="C:\\Users\\Default\\Downloads", nBufferLength=0x105, lpBuffer=0x31e33c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\Default\\Downloads", lpFilePart=0x0) returned 0x1a [0094.488] GetFullPathNameW (in: lpFileName="C:\\Users\\Default\\Downloads\\", nBufferLength=0x105, lpBuffer=0x31e310, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\Default\\Downloads\\", lpFilePart=0x0) returned 0x1b [0094.488] FindFirstFileW (in: lpFileName="C:\\Users\\Default\\Downloads\\*", lpFindFileData=0x31e55c | out: lpFindFileData=0x31e55c*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0xfda9a36e, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x636c8c0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xd88db32b, ftLastWriteTime.dwHighDateTime=0x1cb892d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x381fc0 [0094.488] FindNextFileW (in: hFindFile=0x381fc0, lpFindFileData=0x31e56c | out: lpFindFileData=0x31e56c*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0xfda9a36e, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x636c8c0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xd88db32b, ftLastWriteTime.dwHighDateTime=0x1cb892d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0094.488] FindNextFileW (in: hFindFile=0x381fc0, lpFindFileData=0x31e56c | out: lpFindFileData=0x31e56c*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0x636c8c0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x636c8c0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xd88db32b, ftLastWriteTime.dwHighDateTime=0x1cb892d, nFileSizeHigh=0x0, nFileSizeLow=0x11a, dwReserved0=0x0, dwReserved1=0x0, cFileName="desktop.ini", cAlternateFileName="")) returned 1 [0094.488] FindNextFileW (in: hFindFile=0x381fc0, lpFindFileData=0x31e56c | out: lpFindFileData=0x31e56c*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0x636c8c0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x636c8c0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xd88db32b, ftLastWriteTime.dwHighDateTime=0x1cb892d, nFileSizeHigh=0x0, nFileSizeLow=0x11a, dwReserved0=0x0, dwReserved1=0x0, cFileName="desktop.ini", cAlternateFileName="")) returned 0 [0094.488] FindClose (in: hFindFile=0x381fc0 | out: hFindFile=0x381fc0) returned 1 [0094.489] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e7f4) returned 1 [0094.489] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e800) returned 1 [0094.489] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e834) returned 1 [0094.489] GetFullPathNameW (in: lpFileName="C:\\Users\\Default\\Favorites", nBufferLength=0x105, lpBuffer=0x31e33c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\Default\\Favorites", lpFilePart=0x0) returned 0x1a [0094.489] GetFullPathNameW (in: lpFileName="C:\\Users\\Default\\Favorites\\", nBufferLength=0x105, lpBuffer=0x31e310, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\Default\\Favorites\\", lpFilePart=0x0) returned 0x1b [0094.489] FindFirstFileW (in: lpFileName="C:\\Users\\Default\\Favorites\\*", lpFindFileData=0x31e55c | out: lpFindFileData=0x31e55c*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0xfda9a36e, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x636c8c0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xd888f06b, ftLastWriteTime.dwHighDateTime=0x1cb892d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x381fc0 [0094.492] FindNextFileW (in: hFindFile=0x381fc0, lpFindFileData=0x31e56c | out: lpFindFileData=0x31e56c*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0xfda9a36e, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x636c8c0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xd888f06b, ftLastWriteTime.dwHighDateTime=0x1cb892d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0094.492] FindNextFileW (in: hFindFile=0x381fc0, lpFindFileData=0x31e56c | out: lpFindFileData=0x31e56c*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0x636c8c0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x636c8c0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xd888f06b, ftLastWriteTime.dwHighDateTime=0x1cb892d, nFileSizeHigh=0x0, nFileSizeLow=0x192, dwReserved0=0x0, dwReserved1=0x0, cFileName="desktop.ini", cAlternateFileName="")) returned 1 [0094.492] FindNextFileW (in: hFindFile=0x381fc0, lpFindFileData=0x31e56c | out: lpFindFileData=0x31e56c*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x62fa4a0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x636c8c0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xfeffd5f0, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Links", cAlternateFileName="")) returned 1 [0094.492] FindNextFileW (in: hFindFile=0x381fc0, lpFindFileData=0x31e56c | out: lpFindFileData=0x31e56c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x62fa4a0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x636c8c0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xfe5472dd, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft Websites", cAlternateFileName="MICROS~1")) returned 1 [0094.492] FindNextFileW (in: hFindFile=0x381fc0, lpFindFileData=0x31e56c | out: lpFindFileData=0x31e56c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x62fa4a0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x636c8c0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xfe4d4ebc, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="MSN Websites", cAlternateFileName="MSNWEB~1")) returned 1 [0094.493] FindNextFileW (in: hFindFile=0x381fc0, lpFindFileData=0x31e56c | out: lpFindFileData=0x31e56c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x62fa4a0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x636c8c0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xfe5472dd, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Windows Live", cAlternateFileName="WINDOW~1")) returned 1 [0094.493] FindNextFileW (in: hFindFile=0x381fc0, lpFindFileData=0x31e56c | out: lpFindFileData=0x31e56c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x62fa4a0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x636c8c0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xfe5472dd, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Windows Live", cAlternateFileName="WINDOW~1")) returned 0 [0094.493] FindClose (in: hFindFile=0x381fc0 | out: hFindFile=0x381fc0) returned 1 [0094.493] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e7f4) returned 1 [0094.494] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e800) returned 1 [0094.494] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e834) returned 1 [0094.494] GetFullPathNameW (in: lpFileName="C:\\Users\\Default\\Favorites", nBufferLength=0x105, lpBuffer=0x31e33c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\Default\\Favorites", lpFilePart=0x0) returned 0x1a [0094.494] GetFullPathNameW (in: lpFileName="C:\\Users\\Default\\Favorites\\", nBufferLength=0x105, lpBuffer=0x31e310, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\Default\\Favorites\\", lpFilePart=0x0) returned 0x1b [0094.494] FindFirstFileW (in: lpFileName="C:\\Users\\Default\\Favorites\\*", lpFindFileData=0x31e55c | out: lpFindFileData=0x31e55c*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0xfda9a36e, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x636c8c0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xd888f06b, ftLastWriteTime.dwHighDateTime=0x1cb892d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x381fc0 [0094.494] FindNextFileW (in: hFindFile=0x381fc0, lpFindFileData=0x31e56c | out: lpFindFileData=0x31e56c*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0xfda9a36e, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x636c8c0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xd888f06b, ftLastWriteTime.dwHighDateTime=0x1cb892d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0094.495] FindNextFileW (in: hFindFile=0x381fc0, lpFindFileData=0x31e56c | out: lpFindFileData=0x31e56c*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0x636c8c0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x636c8c0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xd888f06b, ftLastWriteTime.dwHighDateTime=0x1cb892d, nFileSizeHigh=0x0, nFileSizeLow=0x192, dwReserved0=0x0, dwReserved1=0x0, cFileName="desktop.ini", cAlternateFileName="")) returned 1 [0094.495] FindNextFileW (in: hFindFile=0x381fc0, lpFindFileData=0x31e56c | out: lpFindFileData=0x31e56c*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x62fa4a0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x636c8c0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xfeffd5f0, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Links", cAlternateFileName="")) returned 1 [0094.495] FindNextFileW (in: hFindFile=0x381fc0, lpFindFileData=0x31e56c | out: lpFindFileData=0x31e56c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x62fa4a0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x636c8c0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xfe5472dd, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft Websites", cAlternateFileName="MICROS~1")) returned 1 [0094.495] FindNextFileW (in: hFindFile=0x381fc0, lpFindFileData=0x31e56c | out: lpFindFileData=0x31e56c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x62fa4a0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x636c8c0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xfe4d4ebc, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="MSN Websites", cAlternateFileName="MSNWEB~1")) returned 1 [0094.495] FindNextFileW (in: hFindFile=0x381fc0, lpFindFileData=0x31e56c | out: lpFindFileData=0x31e56c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x62fa4a0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x636c8c0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xfe5472dd, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Windows Live", cAlternateFileName="WINDOW~1")) returned 1 [0094.495] FindNextFileW (in: hFindFile=0x381fc0, lpFindFileData=0x31e56c | out: lpFindFileData=0x31e56c*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0094.495] FindClose (in: hFindFile=0x381fc0 | out: hFindFile=0x381fc0) returned 1 [0094.496] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e7f4) returned 1 [0094.496] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e800) returned 1 [0094.496] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e7bc) returned 1 [0094.496] GetFullPathNameW (in: lpFileName="C:\\Users\\Default\\Favorites\\Links", nBufferLength=0x105, lpBuffer=0x31e2c4, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\Default\\Favorites\\Links", lpFilePart=0x0) returned 0x20 [0094.496] GetFullPathNameW (in: lpFileName="C:\\Users\\Default\\Favorites\\Links\\", nBufferLength=0x105, lpBuffer=0x31e298, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\Default\\Favorites\\Links\\", lpFilePart=0x0) returned 0x21 [0094.496] FindFirstFileW (in: lpFileName="C:\\Users\\Default\\Favorites\\Links\\*", lpFindFileData=0x31e4e4 | out: lpFindFileData=0x31e4e4*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x62fa4a0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x636c8c0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xfeffd5f0, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x381fc0 [0094.497] FindNextFileW (in: hFindFile=0x381fc0, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x62fa4a0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x636c8c0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xfeffd5f0, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0094.497] FindNextFileW (in: hFindFile=0x381fc0, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0x636c8c0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x636c8c0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xfefb1330, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x50, dwReserved0=0x0, dwReserved1=0x0, cFileName="desktop.ini", cAlternateFileName="")) returned 1 [0094.497] FindNextFileW (in: hFindFile=0x381fc0, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x636c8c0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x636c8c0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xb11062, ftLastWriteTime.dwHighDateTime=0x1cb8927, nFileSizeHigh=0x0, nFileSizeLow=0xe2, dwReserved0=0x0, dwReserved1=0x0, cFileName="Web Slice Gallery.url", cAlternateFileName="WEBSLI~1.URL")) returned 1 [0094.497] FindNextFileW (in: hFindFile=0x381fc0, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0094.497] FindClose (in: hFindFile=0x381fc0 | out: hFindFile=0x381fc0) returned 1 [0094.497] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e77c) returned 1 [0094.497] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e788) returned 1 [0094.497] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e7bc) returned 1 [0094.498] GetFullPathNameW (in: lpFileName="C:\\Users\\Default\\Favorites\\Links", nBufferLength=0x105, lpBuffer=0x31e2c4, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\Default\\Favorites\\Links", lpFilePart=0x0) returned 0x20 [0094.498] GetFullPathNameW (in: lpFileName="C:\\Users\\Default\\Favorites\\Links\\", nBufferLength=0x105, lpBuffer=0x31e298, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\Default\\Favorites\\Links\\", lpFilePart=0x0) returned 0x21 [0094.498] FindFirstFileW (in: lpFileName="C:\\Users\\Default\\Favorites\\Links\\*", lpFindFileData=0x31e4e4 | out: lpFindFileData=0x31e4e4*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x62fa4a0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x636c8c0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xfeffd5f0, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x381fc0 [0094.498] FindNextFileW (in: hFindFile=0x381fc0, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x62fa4a0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x636c8c0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xfeffd5f0, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0094.498] FindNextFileW (in: hFindFile=0x381fc0, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0x636c8c0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x636c8c0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xfefb1330, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x50, dwReserved0=0x0, dwReserved1=0x0, cFileName="desktop.ini", cAlternateFileName="")) returned 1 [0094.498] FindNextFileW (in: hFindFile=0x381fc0, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x636c8c0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x636c8c0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xb11062, ftLastWriteTime.dwHighDateTime=0x1cb8927, nFileSizeHigh=0x0, nFileSizeLow=0xe2, dwReserved0=0x0, dwReserved1=0x0, cFileName="Web Slice Gallery.url", cAlternateFileName="WEBSLI~1.URL")) returned 1 [0094.498] FindNextFileW (in: hFindFile=0x381fc0, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x636c8c0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x636c8c0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xb11062, ftLastWriteTime.dwHighDateTime=0x1cb8927, nFileSizeHigh=0x0, nFileSizeLow=0xe2, dwReserved0=0x0, dwReserved1=0x0, cFileName="Web Slice Gallery.url", cAlternateFileName="WEBSLI~1.URL")) returned 0 [0094.498] FindClose (in: hFindFile=0x381fc0 | out: hFindFile=0x381fc0) returned 1 [0094.498] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e77c) returned 1 [0094.498] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e788) returned 1 [0094.498] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e7bc) returned 1 [0094.498] GetFullPathNameW (in: lpFileName="C:\\Users\\Default\\Favorites\\Microsoft Websites", nBufferLength=0x105, lpBuffer=0x31e2c4, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\Default\\Favorites\\Microsoft Websites", lpFilePart=0x0) returned 0x2d [0094.499] GetFullPathNameW (in: lpFileName="C:\\Users\\Default\\Favorites\\Microsoft Websites\\", nBufferLength=0x105, lpBuffer=0x31e298, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\Default\\Favorites\\Microsoft Websites\\", lpFilePart=0x0) returned 0x2e [0094.499] FindFirstFileW (in: lpFileName="C:\\Users\\Default\\Favorites\\Microsoft Websites\\*", lpFindFileData=0x31e4e4 | out: lpFindFileData=0x31e4e4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x62fa4a0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x636c8c0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xfe5472dd, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x381fc0 [0094.503] FindNextFileW (in: hFindFile=0x381fc0, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x62fa4a0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x636c8c0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xfe5472dd, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0094.504] FindNextFileW (in: hFindFile=0x381fc0, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x636c8c0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x636c8c0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xa066c0, ftLastWriteTime.dwHighDateTime=0x1cb8927, nFileSizeHigh=0x0, nFileSizeLow=0x85, dwReserved0=0x0, dwReserved1=0x0, cFileName="IE Add-on site.url", cAlternateFileName="IEADD-~1.URL")) returned 1 [0094.504] FindNextFileW (in: hFindFile=0x381fc0, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6346760, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x6346760, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xa066c0, ftLastWriteTime.dwHighDateTime=0x1cb8927, nFileSizeHigh=0x0, nFileSizeLow=0x85, dwReserved0=0x0, dwReserved1=0x0, cFileName="IE site on Microsoft.com.url", cAlternateFileName="IESITE~1.URL")) returned 1 [0094.504] FindNextFileW (in: hFindFile=0x381fc0, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6346760, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x6346760, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xa2c821, ftLastWriteTime.dwHighDateTime=0x1cb8927, nFileSizeHigh=0x0, nFileSizeLow=0x85, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft At Home.url", cAlternateFileName="MICROS~3.URL")) returned 1 [0094.504] FindNextFileW (in: hFindFile=0x381fc0, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6346760, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x6346760, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xa2c821, ftLastWriteTime.dwHighDateTime=0x1cb8927, nFileSizeHigh=0x0, nFileSizeLow=0x85, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft At Work.url", cAlternateFileName="MICROS~2.URL")) returned 1 [0094.504] FindNextFileW (in: hFindFile=0x381fc0, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6346760, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x6346760, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xa52981, ftLastWriteTime.dwHighDateTime=0x1cb8927, nFileSizeHigh=0x0, nFileSizeLow=0x86, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft Store.url", cAlternateFileName="MICROS~1.URL")) returned 1 [0094.504] FindNextFileW (in: hFindFile=0x381fc0, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0094.504] FindClose (in: hFindFile=0x381fc0 | out: hFindFile=0x381fc0) returned 1 [0094.505] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e77c) returned 1 [0094.505] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e788) returned 1 [0094.505] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e7bc) returned 1 [0094.505] GetFullPathNameW (in: lpFileName="C:\\Users\\Default\\Favorites\\Microsoft Websites", nBufferLength=0x105, lpBuffer=0x31e2c4, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\Default\\Favorites\\Microsoft Websites", lpFilePart=0x0) returned 0x2d [0094.505] GetFullPathNameW (in: lpFileName="C:\\Users\\Default\\Favorites\\Microsoft Websites\\", nBufferLength=0x105, lpBuffer=0x31e298, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\Default\\Favorites\\Microsoft Websites\\", lpFilePart=0x0) returned 0x2e [0094.505] FindFirstFileW (in: lpFileName="C:\\Users\\Default\\Favorites\\Microsoft Websites\\*", lpFindFileData=0x31e4e4 | out: lpFindFileData=0x31e4e4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x62fa4a0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x636c8c0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xfe5472dd, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x381fc0 [0094.506] FindNextFileW (in: hFindFile=0x381fc0, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x62fa4a0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x636c8c0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xfe5472dd, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0094.506] FindNextFileW (in: hFindFile=0x381fc0, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x636c8c0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x636c8c0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xa066c0, ftLastWriteTime.dwHighDateTime=0x1cb8927, nFileSizeHigh=0x0, nFileSizeLow=0x85, dwReserved0=0x0, dwReserved1=0x0, cFileName="IE Add-on site.url", cAlternateFileName="IEADD-~1.URL")) returned 1 [0094.506] FindNextFileW (in: hFindFile=0x381fc0, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6346760, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x6346760, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xa066c0, ftLastWriteTime.dwHighDateTime=0x1cb8927, nFileSizeHigh=0x0, nFileSizeLow=0x85, dwReserved0=0x0, dwReserved1=0x0, cFileName="IE site on Microsoft.com.url", cAlternateFileName="IESITE~1.URL")) returned 1 [0094.507] FindNextFileW (in: hFindFile=0x381fc0, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6346760, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x6346760, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xa2c821, ftLastWriteTime.dwHighDateTime=0x1cb8927, nFileSizeHigh=0x0, nFileSizeLow=0x85, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft At Home.url", cAlternateFileName="MICROS~3.URL")) returned 1 [0094.507] FindNextFileW (in: hFindFile=0x381fc0, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6346760, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x6346760, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xa2c821, ftLastWriteTime.dwHighDateTime=0x1cb8927, nFileSizeHigh=0x0, nFileSizeLow=0x85, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft At Work.url", cAlternateFileName="MICROS~2.URL")) returned 1 [0094.507] FindNextFileW (in: hFindFile=0x381fc0, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6346760, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x6346760, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xa52981, ftLastWriteTime.dwHighDateTime=0x1cb8927, nFileSizeHigh=0x0, nFileSizeLow=0x86, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft Store.url", cAlternateFileName="MICROS~1.URL")) returned 1 [0094.507] FindNextFileW (in: hFindFile=0x381fc0, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6346760, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x6346760, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xa52981, ftLastWriteTime.dwHighDateTime=0x1cb8927, nFileSizeHigh=0x0, nFileSizeLow=0x86, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft Store.url", cAlternateFileName="MICROS~1.URL")) returned 0 [0094.507] FindClose (in: hFindFile=0x381fc0 | out: hFindFile=0x381fc0) returned 1 [0094.508] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e77c) returned 1 [0094.508] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e788) returned 1 [0094.508] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e7bc) returned 1 [0094.508] GetFullPathNameW (in: lpFileName="C:\\Users\\Default\\Favorites\\MSN Websites", nBufferLength=0x105, lpBuffer=0x31e2c4, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\Default\\Favorites\\MSN Websites", lpFilePart=0x0) returned 0x27 [0094.508] GetFullPathNameW (in: lpFileName="C:\\Users\\Default\\Favorites\\MSN Websites\\", nBufferLength=0x105, lpBuffer=0x31e298, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\Default\\Favorites\\MSN Websites\\", lpFilePart=0x0) returned 0x28 [0094.508] FindFirstFileW (in: lpFileName="C:\\Users\\Default\\Favorites\\MSN Websites\\*", lpFindFileData=0x31e4e4 | out: lpFindFileData=0x31e4e4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x62fa4a0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x636c8c0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xfe4d4ebc, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x381fc0 [0094.510] FindNextFileW (in: hFindFile=0x381fc0, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x62fa4a0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x636c8c0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xfe4d4ebc, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0094.510] FindNextFileW (in: hFindFile=0x381fc0, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6346760, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x6346760, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xa2c821, ftLastWriteTime.dwHighDateTime=0x1cb8927, nFileSizeHigh=0x0, nFileSizeLow=0x85, dwReserved0=0x0, dwReserved1=0x0, cFileName="MSN Autos.url", cAlternateFileName="MSNAUT~1.URL")) returned 1 [0094.510] FindNextFileW (in: hFindFile=0x381fc0, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6346760, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x6346760, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xa2c821, ftLastWriteTime.dwHighDateTime=0x1cb8927, nFileSizeHigh=0x0, nFileSizeLow=0x85, dwReserved0=0x0, dwReserved1=0x0, cFileName="MSN Entertainment.url", cAlternateFileName="MSNENT~1.URL")) returned 1 [0094.510] FindNextFileW (in: hFindFile=0x381fc0, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6346760, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x6346760, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xa2c821, ftLastWriteTime.dwHighDateTime=0x1cb8927, nFileSizeHigh=0x0, nFileSizeLow=0x85, dwReserved0=0x0, dwReserved1=0x0, cFileName="MSN Money.url", cAlternateFileName="MSNMON~1.URL")) returned 1 [0094.510] FindNextFileW (in: hFindFile=0x381fc0, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6346760, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x6346760, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xa2c821, ftLastWriteTime.dwHighDateTime=0x1cb8927, nFileSizeHigh=0x0, nFileSizeLow=0x85, dwReserved0=0x0, dwReserved1=0x0, cFileName="MSN Sports.url", cAlternateFileName="MSNSPO~1.URL")) returned 1 [0094.510] FindNextFileW (in: hFindFile=0x381fc0, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6346760, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x6346760, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xa2c821, ftLastWriteTime.dwHighDateTime=0x1cb8927, nFileSizeHigh=0x0, nFileSizeLow=0x85, dwReserved0=0x0, dwReserved1=0x0, cFileName="MSN.url", cAlternateFileName="")) returned 1 [0094.510] FindNextFileW (in: hFindFile=0x381fc0, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6346760, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x6346760, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xa2c821, ftLastWriteTime.dwHighDateTime=0x1cb8927, nFileSizeHigh=0x0, nFileSizeLow=0x85, dwReserved0=0x0, dwReserved1=0x0, cFileName="MSNBC News.url", cAlternateFileName="MSNBCN~1.URL")) returned 1 [0094.511] FindNextFileW (in: hFindFile=0x381fc0, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0094.511] FindClose (in: hFindFile=0x381fc0 | out: hFindFile=0x381fc0) returned 1 [0094.511] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e77c) returned 1 [0094.511] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e788) returned 1 [0094.511] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e7bc) returned 1 [0094.511] GetFullPathNameW (in: lpFileName="C:\\Users\\Default\\Favorites\\MSN Websites", nBufferLength=0x105, lpBuffer=0x31e2c4, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\Default\\Favorites\\MSN Websites", lpFilePart=0x0) returned 0x27 [0094.511] GetFullPathNameW (in: lpFileName="C:\\Users\\Default\\Favorites\\MSN Websites\\", nBufferLength=0x105, lpBuffer=0x31e298, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\Default\\Favorites\\MSN Websites\\", lpFilePart=0x0) returned 0x28 [0094.511] FindFirstFileW (in: lpFileName="C:\\Users\\Default\\Favorites\\MSN Websites\\*", lpFindFileData=0x31e4e4 | out: lpFindFileData=0x31e4e4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x62fa4a0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x636c8c0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xfe4d4ebc, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x381fc0 [0094.512] FindNextFileW (in: hFindFile=0x381fc0, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x62fa4a0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x636c8c0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xfe4d4ebc, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0094.512] FindNextFileW (in: hFindFile=0x381fc0, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6346760, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x6346760, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xa2c821, ftLastWriteTime.dwHighDateTime=0x1cb8927, nFileSizeHigh=0x0, nFileSizeLow=0x85, dwReserved0=0x0, dwReserved1=0x0, cFileName="MSN Autos.url", cAlternateFileName="MSNAUT~1.URL")) returned 1 [0094.513] FindNextFileW (in: hFindFile=0x381fc0, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6346760, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x6346760, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xa2c821, ftLastWriteTime.dwHighDateTime=0x1cb8927, nFileSizeHigh=0x0, nFileSizeLow=0x85, dwReserved0=0x0, dwReserved1=0x0, cFileName="MSN Entertainment.url", cAlternateFileName="MSNENT~1.URL")) returned 1 [0094.513] FindNextFileW (in: hFindFile=0x381fc0, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6346760, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x6346760, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xa2c821, ftLastWriteTime.dwHighDateTime=0x1cb8927, nFileSizeHigh=0x0, nFileSizeLow=0x85, dwReserved0=0x0, dwReserved1=0x0, cFileName="MSN Money.url", cAlternateFileName="MSNMON~1.URL")) returned 1 [0094.513] FindNextFileW (in: hFindFile=0x381fc0, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6346760, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x6346760, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xa2c821, ftLastWriteTime.dwHighDateTime=0x1cb8927, nFileSizeHigh=0x0, nFileSizeLow=0x85, dwReserved0=0x0, dwReserved1=0x0, cFileName="MSN Sports.url", cAlternateFileName="MSNSPO~1.URL")) returned 1 [0094.513] FindNextFileW (in: hFindFile=0x381fc0, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6346760, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x6346760, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xa2c821, ftLastWriteTime.dwHighDateTime=0x1cb8927, nFileSizeHigh=0x0, nFileSizeLow=0x85, dwReserved0=0x0, dwReserved1=0x0, cFileName="MSN.url", cAlternateFileName="")) returned 1 [0094.513] FindNextFileW (in: hFindFile=0x381fc0, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6346760, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x6346760, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xa2c821, ftLastWriteTime.dwHighDateTime=0x1cb8927, nFileSizeHigh=0x0, nFileSizeLow=0x85, dwReserved0=0x0, dwReserved1=0x0, cFileName="MSNBC News.url", cAlternateFileName="MSNBCN~1.URL")) returned 1 [0094.513] FindNextFileW (in: hFindFile=0x381fc0, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6346760, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x6346760, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xa2c821, ftLastWriteTime.dwHighDateTime=0x1cb8927, nFileSizeHigh=0x0, nFileSizeLow=0x85, dwReserved0=0x0, dwReserved1=0x0, cFileName="MSNBC News.url", cAlternateFileName="MSNBCN~1.URL")) returned 0 [0094.513] FindClose (in: hFindFile=0x381fc0 | out: hFindFile=0x381fc0) returned 1 [0094.514] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e77c) returned 1 [0094.514] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e788) returned 1 [0094.514] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e7bc) returned 1 [0094.514] GetFullPathNameW (in: lpFileName="C:\\Users\\Default\\Favorites\\Windows Live", nBufferLength=0x105, lpBuffer=0x31e2c4, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\Default\\Favorites\\Windows Live", lpFilePart=0x0) returned 0x27 [0094.514] GetFullPathNameW (in: lpFileName="C:\\Users\\Default\\Favorites\\Windows Live\\", nBufferLength=0x105, lpBuffer=0x31e298, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\Default\\Favorites\\Windows Live\\", lpFilePart=0x0) returned 0x28 [0094.514] FindFirstFileW (in: lpFileName="C:\\Users\\Default\\Favorites\\Windows Live\\*", lpFindFileData=0x31e4e4 | out: lpFindFileData=0x31e4e4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x62fa4a0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x636c8c0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xfe5472dd, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x381fc0 [0094.516] FindNextFileW (in: hFindFile=0x381fc0, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x62fa4a0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x636c8c0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xfe5472dd, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0094.516] FindNextFileW (in: hFindFile=0x381fc0, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x636c8c0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x636c8c0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xa52981, ftLastWriteTime.dwHighDateTime=0x1cb8927, nFileSizeHigh=0x0, nFileSizeLow=0x85, dwReserved0=0x0, dwReserved1=0x0, cFileName="Get Windows Live.url", cAlternateFileName="GETWIN~1.URL")) returned 1 [0094.516] FindNextFileW (in: hFindFile=0x381fc0, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6346760, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x6346760, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xa52981, ftLastWriteTime.dwHighDateTime=0x1cb8927, nFileSizeHigh=0x0, nFileSizeLow=0x85, dwReserved0=0x0, dwReserved1=0x0, cFileName="Windows Live Gallery.url", cAlternateFileName="WINDOW~2.URL")) returned 1 [0094.516] FindNextFileW (in: hFindFile=0x381fc0, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6346760, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x6346760, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xa52981, ftLastWriteTime.dwHighDateTime=0x1cb8927, nFileSizeHigh=0x0, nFileSizeLow=0x85, dwReserved0=0x0, dwReserved1=0x0, cFileName="Windows Live Mail.url", cAlternateFileName="WINDOW~1.URL")) returned 1 [0094.516] FindNextFileW (in: hFindFile=0x381fc0, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x636c8c0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x636c8c0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xa52981, ftLastWriteTime.dwHighDateTime=0x1cb8927, nFileSizeHigh=0x0, nFileSizeLow=0x85, dwReserved0=0x0, dwReserved1=0x0, cFileName="Windows Live Spaces.url", cAlternateFileName="WINDOW~3.URL")) returned 1 [0094.517] FindNextFileW (in: hFindFile=0x381fc0, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0094.517] FindClose (in: hFindFile=0x381fc0 | out: hFindFile=0x381fc0) returned 1 [0094.517] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e77c) returned 1 [0094.517] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e788) returned 1 [0094.517] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e7bc) returned 1 [0094.517] GetFullPathNameW (in: lpFileName="C:\\Users\\Default\\Favorites\\Windows Live", nBufferLength=0x105, lpBuffer=0x31e2c4, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\Default\\Favorites\\Windows Live", lpFilePart=0x0) returned 0x27 [0094.517] GetFullPathNameW (in: lpFileName="C:\\Users\\Default\\Favorites\\Windows Live\\", nBufferLength=0x105, lpBuffer=0x31e298, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\Default\\Favorites\\Windows Live\\", lpFilePart=0x0) returned 0x28 [0094.518] FindFirstFileW (in: lpFileName="C:\\Users\\Default\\Favorites\\Windows Live\\*", lpFindFileData=0x31e4e4 | out: lpFindFileData=0x31e4e4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x62fa4a0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x636c8c0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xfe5472dd, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x381fc0 [0094.518] FindNextFileW (in: hFindFile=0x381fc0, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x62fa4a0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x636c8c0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xfe5472dd, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0094.518] FindNextFileW (in: hFindFile=0x381fc0, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x636c8c0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x636c8c0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xa52981, ftLastWriteTime.dwHighDateTime=0x1cb8927, nFileSizeHigh=0x0, nFileSizeLow=0x85, dwReserved0=0x0, dwReserved1=0x0, cFileName="Get Windows Live.url", cAlternateFileName="GETWIN~1.URL")) returned 1 [0094.519] FindNextFileW (in: hFindFile=0x381fc0, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6346760, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x6346760, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xa52981, ftLastWriteTime.dwHighDateTime=0x1cb8927, nFileSizeHigh=0x0, nFileSizeLow=0x85, dwReserved0=0x0, dwReserved1=0x0, cFileName="Windows Live Gallery.url", cAlternateFileName="WINDOW~2.URL")) returned 1 [0094.519] FindNextFileW (in: hFindFile=0x381fc0, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6346760, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x6346760, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xa52981, ftLastWriteTime.dwHighDateTime=0x1cb8927, nFileSizeHigh=0x0, nFileSizeLow=0x85, dwReserved0=0x0, dwReserved1=0x0, cFileName="Windows Live Mail.url", cAlternateFileName="WINDOW~1.URL")) returned 1 [0094.519] FindNextFileW (in: hFindFile=0x381fc0, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x636c8c0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x636c8c0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xa52981, ftLastWriteTime.dwHighDateTime=0x1cb8927, nFileSizeHigh=0x0, nFileSizeLow=0x85, dwReserved0=0x0, dwReserved1=0x0, cFileName="Windows Live Spaces.url", cAlternateFileName="WINDOW~3.URL")) returned 1 [0094.519] FindNextFileW (in: hFindFile=0x381fc0, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x636c8c0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x636c8c0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xa52981, ftLastWriteTime.dwHighDateTime=0x1cb8927, nFileSizeHigh=0x0, nFileSizeLow=0x85, dwReserved0=0x0, dwReserved1=0x0, cFileName="Windows Live Spaces.url", cAlternateFileName="WINDOW~3.URL")) returned 0 [0094.519] FindClose (in: hFindFile=0x381fc0 | out: hFindFile=0x381fc0) returned 1 [0094.520] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e77c) returned 1 [0094.520] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e788) returned 1 [0094.520] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e834) returned 1 [0094.520] GetFullPathNameW (in: lpFileName="C:\\Users\\Default\\Links", nBufferLength=0x105, lpBuffer=0x31e33c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\Default\\Links", lpFilePart=0x0) returned 0x16 [0094.520] GetFullPathNameW (in: lpFileName="C:\\Users\\Default\\Links\\", nBufferLength=0x105, lpBuffer=0x31e310, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\Default\\Links\\", lpFilePart=0x0) returned 0x17 [0094.520] FindFirstFileW (in: lpFileName="C:\\Users\\Default\\Links\\*", lpFindFileData=0x31e55c | out: lpFindFileData=0x31e55c*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0xfda9a36e, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x636c8c0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xd89738ac, ftLastWriteTime.dwHighDateTime=0x1cb892d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x381fc0 [0094.525] FindNextFileW (in: hFindFile=0x381fc0, lpFindFileData=0x31e56c | out: lpFindFileData=0x31e56c*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0xfda9a36e, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x636c8c0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xd89738ac, ftLastWriteTime.dwHighDateTime=0x1cb892d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0094.526] FindNextFileW (in: hFindFile=0x381fc0, lpFindFileData=0x31e56c | out: lpFindFileData=0x31e56c*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0x6346760, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x6346760, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xd89738ac, ftLastWriteTime.dwHighDateTime=0x1cb892d, nFileSizeHigh=0x0, nFileSizeLow=0x244, dwReserved0=0x0, dwReserved1=0x0, cFileName="desktop.ini", cAlternateFileName="")) returned 1 [0094.526] FindNextFileW (in: hFindFile=0x381fc0, lpFindFileData=0x31e56c | out: lpFindFileData=0x31e56c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x636c8c0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x636c8c0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xd89738ac, ftLastWriteTime.dwHighDateTime=0x1cb892d, nFileSizeHigh=0x0, nFileSizeLow=0x1d3, dwReserved0=0x0, dwReserved1=0x0, cFileName="Desktop.lnk", cAlternateFileName="")) returned 1 [0094.526] FindNextFileW (in: hFindFile=0x381fc0, lpFindFileData=0x31e56c | out: lpFindFileData=0x31e56c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6346760, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x6346760, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xd89738ac, ftLastWriteTime.dwHighDateTime=0x1cb892d, nFileSizeHigh=0x0, nFileSizeLow=0x37e, dwReserved0=0x0, dwReserved1=0x0, cFileName="Downloads.lnk", cAlternateFileName="DOWNLO~1.LNK")) returned 1 [0094.526] FindNextFileW (in: hFindFile=0x381fc0, lpFindFileData=0x31e56c | out: lpFindFileData=0x31e56c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x636c8c0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x636c8c0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xd89738ac, ftLastWriteTime.dwHighDateTime=0x1cb892d, nFileSizeHigh=0x0, nFileSizeLow=0x16b, dwReserved0=0x0, dwReserved1=0x0, cFileName="RecentPlaces.lnk", cAlternateFileName="RECENT~1.LNK")) returned 1 [0094.526] FindNextFileW (in: hFindFile=0x381fc0, lpFindFileData=0x31e56c | out: lpFindFileData=0x31e56c*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0094.526] FindClose (in: hFindFile=0x381fc0 | out: hFindFile=0x381fc0) returned 1 [0094.527] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e7f4) returned 1 [0094.527] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e800) returned 1 [0094.527] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e834) returned 1 [0094.527] GetFullPathNameW (in: lpFileName="C:\\Users\\Default\\Links", nBufferLength=0x105, lpBuffer=0x31e33c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\Default\\Links", lpFilePart=0x0) returned 0x16 [0094.527] GetFullPathNameW (in: lpFileName="C:\\Users\\Default\\Links\\", nBufferLength=0x105, lpBuffer=0x31e310, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\Default\\Links\\", lpFilePart=0x0) returned 0x17 [0094.527] FindFirstFileW (in: lpFileName="C:\\Users\\Default\\Links\\*", lpFindFileData=0x31e55c | out: lpFindFileData=0x31e55c*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0xfda9a36e, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x636c8c0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xd89738ac, ftLastWriteTime.dwHighDateTime=0x1cb892d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x381fc0 [0094.528] FindNextFileW (in: hFindFile=0x381fc0, lpFindFileData=0x31e56c | out: lpFindFileData=0x31e56c*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0xfda9a36e, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x636c8c0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xd89738ac, ftLastWriteTime.dwHighDateTime=0x1cb892d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0094.528] FindNextFileW (in: hFindFile=0x381fc0, lpFindFileData=0x31e56c | out: lpFindFileData=0x31e56c*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0x6346760, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x6346760, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xd89738ac, ftLastWriteTime.dwHighDateTime=0x1cb892d, nFileSizeHigh=0x0, nFileSizeLow=0x244, dwReserved0=0x0, dwReserved1=0x0, cFileName="desktop.ini", cAlternateFileName="")) returned 1 [0094.528] FindNextFileW (in: hFindFile=0x381fc0, lpFindFileData=0x31e56c | out: lpFindFileData=0x31e56c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x636c8c0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x636c8c0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xd89738ac, ftLastWriteTime.dwHighDateTime=0x1cb892d, nFileSizeHigh=0x0, nFileSizeLow=0x1d3, dwReserved0=0x0, dwReserved1=0x0, cFileName="Desktop.lnk", cAlternateFileName="")) returned 1 [0094.528] FindNextFileW (in: hFindFile=0x381fc0, lpFindFileData=0x31e56c | out: lpFindFileData=0x31e56c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6346760, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x6346760, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xd89738ac, ftLastWriteTime.dwHighDateTime=0x1cb892d, nFileSizeHigh=0x0, nFileSizeLow=0x37e, dwReserved0=0x0, dwReserved1=0x0, cFileName="Downloads.lnk", cAlternateFileName="DOWNLO~1.LNK")) returned 1 [0094.528] FindNextFileW (in: hFindFile=0x381fc0, lpFindFileData=0x31e56c | out: lpFindFileData=0x31e56c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x636c8c0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x636c8c0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xd89738ac, ftLastWriteTime.dwHighDateTime=0x1cb892d, nFileSizeHigh=0x0, nFileSizeLow=0x16b, dwReserved0=0x0, dwReserved1=0x0, cFileName="RecentPlaces.lnk", cAlternateFileName="RECENT~1.LNK")) returned 1 [0094.528] FindNextFileW (in: hFindFile=0x381fc0, lpFindFileData=0x31e56c | out: lpFindFileData=0x31e56c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x636c8c0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x636c8c0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xd89738ac, ftLastWriteTime.dwHighDateTime=0x1cb892d, nFileSizeHigh=0x0, nFileSizeLow=0x16b, dwReserved0=0x0, dwReserved1=0x0, cFileName="RecentPlaces.lnk", cAlternateFileName="RECENT~1.LNK")) returned 0 [0094.528] FindClose (in: hFindFile=0x381fc0 | out: hFindFile=0x381fc0) returned 1 [0094.529] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e7f4) returned 1 [0094.529] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e800) returned 1 [0094.529] GetFullPathNameW (in: lpFileName="C:\\Users\\Default\\Links\\Desktop.lnk", nBufferLength=0x105, lpBuffer=0x31e20c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\Default\\Links\\Desktop.lnk", lpFilePart=0x0) returned 0x22 [0094.529] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e700) returned 1 [0094.529] CreateFileW (lpFileName="C:\\Users\\Default\\Links\\Desktop.lnk" (normalized: "c:\\users\\default\\links\\desktop.lnk"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x178 [0094.530] GetFileType (hFile=0x178) returned 0x1 [0094.530] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e6fc) returned 1 [0094.530] GetFileType (hFile=0x178) returned 0x1 [0094.530] GetFileSize (in: hFile=0x178, lpFileSizeHigh=0x31e808 | out: lpFileSizeHigh=0x31e808*=0x0) returned 0x1d3 [0094.530] ReadFile (in: hFile=0x178, lpBuffer=0x264b8a0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x31e7b4, lpOverlapped=0x0 | out: lpBuffer=0x264b8a0*, lpNumberOfBytesRead=0x31e7b4*=0x1d3, lpOverlapped=0x0) returned 1 [0094.531] CloseHandle (hObject=0x178) returned 1 [0094.571] GetFullPathNameW (in: lpFileName="C:\\Users\\Default\\Links\\Desktop.lnk", nBufferLength=0x105, lpBuffer=0x31e1f8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\Default\\Links\\Desktop.lnk", lpFilePart=0x0) returned 0x22 [0094.571] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e6ec) returned 1 [0094.571] CreateFileW (lpFileName="C:\\Users\\Default\\Links\\Desktop.lnk" (normalized: "c:\\users\\default\\links\\desktop.lnk"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x178 [0094.572] GetFileType (hFile=0x178) returned 0x1 [0094.572] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e6e8) returned 1 [0094.572] GetFileType (hFile=0x178) returned 0x1 [0094.572] WriteFile (in: hFile=0x178, lpBuffer=0x269a3cc*, nNumberOfBytesToWrite=0x1e0, lpNumberOfBytesWritten=0x31e77c, lpOverlapped=0x0 | out: lpBuffer=0x269a3cc*, lpNumberOfBytesWritten=0x31e77c*=0x1e0, lpOverlapped=0x0) returned 1 [0094.574] GetFullPathNameW (in: lpFileName="C:\\Users\\Default\\Links\\Desktop.lnk", nBufferLength=0x105, lpBuffer=0x31e32c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\Default\\Links\\Desktop.lnk", lpFilePart=0x0) returned 0x22 [0094.574] GetFullPathNameW (in: lpFileName="C:\\Users\\Default\\Links\\Desktop.lnk", nBufferLength=0x105, lpBuffer=0x31e32c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\Default\\Links\\Desktop.lnk", lpFilePart=0x0) returned 0x22 [0094.574] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e78c) returned 1 [0094.574] GetFileAttributesExW (in: lpFileName="C:\\Users\\Default\\Links\\Desktop.lnk" (normalized: "c:\\users\\default\\links\\desktop.lnk"), fInfoLevelId=0x0, lpFileInformation=0x31e808 | out: lpFileInformation=0x31e808*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x636c8c0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x636c8c0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x1bd072e0, ftLastWriteTime.dwHighDateTime=0x1d6eb7f, nFileSizeHigh=0x0, nFileSizeLow=0x1e0)) returned 1 [0094.574] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e788) returned 1 [0094.574] MoveFileW (lpExistingFileName="C:\\Users\\Default\\Links\\Desktop.lnk" (normalized: "c:\\users\\default\\links\\desktop.lnk"), lpNewFileName="C:\\Users\\Default\\Links\\Desktop.lnk" (normalized: "c:\\users\\default\\links\\desktop.lnk")) returned 1 [0094.574] GetFullPathNameW (in: lpFileName="C:\\Users\\Default\\Links\\Downloads.lnk", nBufferLength=0x105, lpBuffer=0x31e20c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\Default\\Links\\Downloads.lnk", lpFilePart=0x0) returned 0x24 [0094.575] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e700) returned 1 [0094.575] CreateFileW (lpFileName="C:\\Users\\Default\\Links\\Downloads.lnk" (normalized: "c:\\users\\default\\links\\downloads.lnk"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x178 [0094.575] GetFileType (hFile=0x178) returned 0x1 [0094.575] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e6fc) returned 1 [0094.575] GetFileType (hFile=0x178) returned 0x1 [0094.575] GetFileSize (in: hFile=0x178, lpFileSizeHigh=0x31e808 | out: lpFileSizeHigh=0x31e808*=0x0) returned 0x37e [0094.575] ReadFile (in: hFile=0x178, lpBuffer=0x269b900, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x31e7b4, lpOverlapped=0x0 | out: lpBuffer=0x269b900*, lpNumberOfBytesRead=0x31e7b4*=0x37e, lpOverlapped=0x0) returned 1 [0094.589] GetFullPathNameW (in: lpFileName="C:\\Users\\Default\\Links\\Downloads.lnk", nBufferLength=0x105, lpBuffer=0x31e1f8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\Default\\Links\\Downloads.lnk", lpFilePart=0x0) returned 0x24 [0094.589] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e6ec) returned 1 [0094.589] CreateFileW (lpFileName="C:\\Users\\Default\\Links\\Downloads.lnk" (normalized: "c:\\users\\default\\links\\downloads.lnk"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x178 [0094.590] GetFileType (hFile=0x178) returned 0x1 [0094.590] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e6e8) returned 1 [0094.590] GetFileType (hFile=0x178) returned 0x1 [0094.590] WriteFile (in: hFile=0x178, lpBuffer=0x26ea950*, nNumberOfBytesToWrite=0x380, lpNumberOfBytesWritten=0x31e77c, lpOverlapped=0x0 | out: lpBuffer=0x26ea950*, lpNumberOfBytesWritten=0x31e77c*=0x380, lpOverlapped=0x0) returned 1 [0094.591] GetFullPathNameW (in: lpFileName="C:\\Users\\Default\\Links\\Downloads.lnk", nBufferLength=0x105, lpBuffer=0x31e32c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\Default\\Links\\Downloads.lnk", lpFilePart=0x0) returned 0x24 [0094.591] GetFullPathNameW (in: lpFileName="C:\\Users\\Default\\Links\\Downloads.lnk", nBufferLength=0x105, lpBuffer=0x31e32c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\Default\\Links\\Downloads.lnk", lpFilePart=0x0) returned 0x24 [0094.591] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e78c) returned 1 [0094.591] GetFileAttributesExW (in: lpFileName="C:\\Users\\Default\\Links\\Downloads.lnk" (normalized: "c:\\users\\default\\links\\downloads.lnk"), fInfoLevelId=0x0, lpFileInformation=0x31e808 | out: lpFileInformation=0x31e808*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6346760, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x6346760, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x1bd2d440, ftLastWriteTime.dwHighDateTime=0x1d6eb7f, nFileSizeHigh=0x0, nFileSizeLow=0x380)) returned 1 [0094.591] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e788) returned 1 [0094.592] MoveFileW (lpExistingFileName="C:\\Users\\Default\\Links\\Downloads.lnk" (normalized: "c:\\users\\default\\links\\downloads.lnk"), lpNewFileName="C:\\Users\\Default\\Links\\Downloads.lnk" (normalized: "c:\\users\\default\\links\\downloads.lnk")) returned 1 [0094.592] GetFullPathNameW (in: lpFileName="C:\\Users\\Default\\Links\\RecentPlaces.lnk", nBufferLength=0x105, lpBuffer=0x31e20c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\Default\\Links\\RecentPlaces.lnk", lpFilePart=0x0) returned 0x27 [0094.592] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e700) returned 1 [0094.592] CreateFileW (lpFileName="C:\\Users\\Default\\Links\\RecentPlaces.lnk" (normalized: "c:\\users\\default\\links\\recentplaces.lnk"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x178 [0094.592] GetFileType (hFile=0x178) returned 0x1 [0094.592] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e6fc) returned 1 [0094.592] GetFileType (hFile=0x178) returned 0x1 [0094.592] GetFileSize (in: hFile=0x178, lpFileSizeHigh=0x31e808 | out: lpFileSizeHigh=0x31e808*=0x0) returned 0x16b [0094.592] ReadFile (in: hFile=0x178, lpBuffer=0x26ebc84, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x31e7b4, lpOverlapped=0x0 | out: lpBuffer=0x26ebc84*, lpNumberOfBytesRead=0x31e7b4*=0x16b, lpOverlapped=0x0) returned 1 [0094.631] GetFullPathNameW (in: lpFileName="C:\\Users\\Default\\Links\\RecentPlaces.lnk", nBufferLength=0x105, lpBuffer=0x31e1f8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\Default\\Links\\RecentPlaces.lnk", lpFilePart=0x0) returned 0x27 [0094.631] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e6ec) returned 1 [0094.631] CreateFileW (lpFileName="C:\\Users\\Default\\Links\\RecentPlaces.lnk" (normalized: "c:\\users\\default\\links\\recentplaces.lnk"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x178 [0094.632] GetFileType (hFile=0x178) returned 0x1 [0094.632] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e6e8) returned 1 [0094.632] GetFileType (hFile=0x178) returned 0x1 [0094.632] WriteFile (in: hFile=0x178, lpBuffer=0x26422f4*, nNumberOfBytesToWrite=0x170, lpNumberOfBytesWritten=0x31e77c, lpOverlapped=0x0 | out: lpBuffer=0x26422f4*, lpNumberOfBytesWritten=0x31e77c*=0x170, lpOverlapped=0x0) returned 1 [0094.633] CloseHandle (hObject=0x178) returned 1 [0094.633] GetFullPathNameW (in: lpFileName="C:\\Users\\Default\\Links\\RecentPlaces.lnk", nBufferLength=0x105, lpBuffer=0x31e32c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\Default\\Links\\RecentPlaces.lnk", lpFilePart=0x0) returned 0x27 [0094.633] GetFullPathNameW (in: lpFileName="C:\\Users\\Default\\Links\\RecentPlaces.lnk", nBufferLength=0x105, lpBuffer=0x31e32c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\Default\\Links\\RecentPlaces.lnk", lpFilePart=0x0) returned 0x27 [0094.633] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e78c) returned 1 [0094.633] GetFileAttributesExW (in: lpFileName="C:\\Users\\Default\\Links\\RecentPlaces.lnk" (normalized: "c:\\users\\default\\links\\recentplaces.lnk"), fInfoLevelId=0x0, lpFileInformation=0x31e808 | out: lpFileInformation=0x31e808*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x636c8c0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x636c8c0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x1bd9f860, ftLastWriteTime.dwHighDateTime=0x1d6eb7f, nFileSizeHigh=0x0, nFileSizeLow=0x170)) returned 1 [0094.633] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e788) returned 1 [0094.633] MoveFileW (lpExistingFileName="C:\\Users\\Default\\Links\\RecentPlaces.lnk" (normalized: "c:\\users\\default\\links\\recentplaces.lnk"), lpNewFileName="C:\\Users\\Default\\Links\\RecentPlaces.lnk" (normalized: "c:\\users\\default\\links\\recentplaces.lnk")) returned 1 [0094.633] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e834) returned 1 [0094.633] GetFullPathNameW (in: lpFileName="C:\\Users\\Default\\Local Settings", nBufferLength=0x105, lpBuffer=0x31e33c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\Default\\Local Settings", lpFilePart=0x0) returned 0x1f [0094.633] GetFullPathNameW (in: lpFileName="C:\\Users\\Default\\Local Settings\\", nBufferLength=0x105, lpBuffer=0x31e310, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\Default\\Local Settings\\", lpFilePart=0x0) returned 0x20 [0094.633] FindFirstFileW (in: lpFileName="C:\\Users\\Default\\Local Settings\\*", lpFindFileData=0x31e55c | out: lpFindFileData=0x31e55c*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0094.634] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e7f8) returned 1 [0094.635] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e834) returned 1 [0094.635] GetFullPathNameW (in: lpFileName="C:\\Users\\Default\\Music", nBufferLength=0x105, lpBuffer=0x31e33c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\Default\\Music", lpFilePart=0x0) returned 0x16 [0094.635] GetFullPathNameW (in: lpFileName="C:\\Users\\Default\\Music\\", nBufferLength=0x105, lpBuffer=0x31e310, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\Default\\Music\\", lpFilePart=0x0) returned 0x17 [0094.635] FindFirstFileW (in: lpFileName="C:\\Users\\Default\\Music\\*", lpFindFileData=0x31e55c | out: lpFindFileData=0x31e55c*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0xfda9a36e, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x6346760, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xd888f06b, ftLastWriteTime.dwHighDateTime=0x1cb892d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x381e40 [0094.635] FindNextFileW (in: hFindFile=0x381e40, lpFindFileData=0x31e56c | out: lpFindFileData=0x31e56c*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0xfda9a36e, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x6346760, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xd888f06b, ftLastWriteTime.dwHighDateTime=0x1cb892d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0094.635] FindNextFileW (in: hFindFile=0x381e40, lpFindFileData=0x31e56c | out: lpFindFileData=0x31e56c*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0x6346760, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x6346760, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xd888f06b, ftLastWriteTime.dwHighDateTime=0x1cb892d, nFileSizeHigh=0x0, nFileSizeLow=0x1f8, dwReserved0=0x0, dwReserved1=0x0, cFileName="desktop.ini", cAlternateFileName="")) returned 1 [0094.635] FindNextFileW (in: hFindFile=0x381e40, lpFindFileData=0x31e56c | out: lpFindFileData=0x31e56c*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0094.635] FindClose (in: hFindFile=0x381e40 | out: hFindFile=0x381e40) returned 1 [0094.635] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e7f4) returned 1 [0094.636] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e800) returned 1 [0094.636] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e834) returned 1 [0094.636] GetFullPathNameW (in: lpFileName="C:\\Users\\Default\\Music", nBufferLength=0x105, lpBuffer=0x31e33c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\Default\\Music", lpFilePart=0x0) returned 0x16 [0094.636] GetFullPathNameW (in: lpFileName="C:\\Users\\Default\\Music\\", nBufferLength=0x105, lpBuffer=0x31e310, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\Default\\Music\\", lpFilePart=0x0) returned 0x17 [0094.636] FindFirstFileW (in: lpFileName="C:\\Users\\Default\\Music\\*", lpFindFileData=0x31e55c | out: lpFindFileData=0x31e55c*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0xfda9a36e, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x6346760, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xd888f06b, ftLastWriteTime.dwHighDateTime=0x1cb892d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x381e40 [0094.636] FindNextFileW (in: hFindFile=0x381e40, lpFindFileData=0x31e56c | out: lpFindFileData=0x31e56c*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0xfda9a36e, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x6346760, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xd888f06b, ftLastWriteTime.dwHighDateTime=0x1cb892d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0094.636] FindNextFileW (in: hFindFile=0x381e40, lpFindFileData=0x31e56c | out: lpFindFileData=0x31e56c*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0x6346760, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x6346760, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xd888f06b, ftLastWriteTime.dwHighDateTime=0x1cb892d, nFileSizeHigh=0x0, nFileSizeLow=0x1f8, dwReserved0=0x0, dwReserved1=0x0, cFileName="desktop.ini", cAlternateFileName="")) returned 1 [0094.636] FindNextFileW (in: hFindFile=0x381e40, lpFindFileData=0x31e56c | out: lpFindFileData=0x31e56c*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0x6346760, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x6346760, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xd888f06b, ftLastWriteTime.dwHighDateTime=0x1cb892d, nFileSizeHigh=0x0, nFileSizeLow=0x1f8, dwReserved0=0x0, dwReserved1=0x0, cFileName="desktop.ini", cAlternateFileName="")) returned 0 [0094.636] FindClose (in: hFindFile=0x381e40 | out: hFindFile=0x381e40) returned 1 [0094.636] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e7f4) returned 1 [0094.636] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e800) returned 1 [0094.636] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e834) returned 1 [0094.636] GetFullPathNameW (in: lpFileName="C:\\Users\\Default\\My Documents", nBufferLength=0x105, lpBuffer=0x31e33c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\Default\\My Documents", lpFilePart=0x0) returned 0x1d [0094.636] GetFullPathNameW (in: lpFileName="C:\\Users\\Default\\My Documents\\", nBufferLength=0x105, lpBuffer=0x31e310, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\Default\\My Documents\\", lpFilePart=0x0) returned 0x1e [0094.636] FindFirstFileW (in: lpFileName="C:\\Users\\Default\\My Documents\\*", lpFindFileData=0x31e55c | out: lpFindFileData=0x31e55c*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0094.637] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e7f8) returned 1 [0094.638] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e834) returned 1 [0094.638] GetFullPathNameW (in: lpFileName="C:\\Users\\Default\\NetHood", nBufferLength=0x105, lpBuffer=0x31e33c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\Default\\NetHood", lpFilePart=0x0) returned 0x18 [0094.638] GetFullPathNameW (in: lpFileName="C:\\Users\\Default\\NetHood\\", nBufferLength=0x105, lpBuffer=0x31e310, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\Default\\NetHood\\", lpFilePart=0x0) returned 0x19 [0094.638] FindFirstFileW (in: lpFileName="C:\\Users\\Default\\NetHood\\*", lpFindFileData=0x31e55c | out: lpFindFileData=0x31e55c*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0094.638] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e7f8) returned 1 [0094.639] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e834) returned 1 [0094.639] GetFullPathNameW (in: lpFileName="C:\\Users\\Default\\Pictures", nBufferLength=0x105, lpBuffer=0x31e33c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\Default\\Pictures", lpFilePart=0x0) returned 0x19 [0094.639] GetFullPathNameW (in: lpFileName="C:\\Users\\Default\\Pictures\\", nBufferLength=0x105, lpBuffer=0x31e310, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\Default\\Pictures\\", lpFilePart=0x0) returned 0x1a [0094.639] FindFirstFileW (in: lpFileName="C:\\Users\\Default\\Pictures\\*", lpFindFileData=0x31e55c | out: lpFindFileData=0x31e55c*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0xfdac04c8, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x6346760, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xd8868f0a, ftLastWriteTime.dwHighDateTime=0x1cb892d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x381e40 [0094.639] FindNextFileW (in: hFindFile=0x381e40, lpFindFileData=0x31e56c | out: lpFindFileData=0x31e56c*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0xfdac04c8, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x6346760, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xd8868f0a, ftLastWriteTime.dwHighDateTime=0x1cb892d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0094.640] FindNextFileW (in: hFindFile=0x381e40, lpFindFileData=0x31e56c | out: lpFindFileData=0x31e56c*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0x6346760, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x6346760, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xd8868f0a, ftLastWriteTime.dwHighDateTime=0x1cb892d, nFileSizeHigh=0x0, nFileSizeLow=0x1f8, dwReserved0=0x0, dwReserved1=0x0, cFileName="desktop.ini", cAlternateFileName="")) returned 1 [0094.640] FindNextFileW (in: hFindFile=0x381e40, lpFindFileData=0x31e56c | out: lpFindFileData=0x31e56c*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0094.640] FindClose (in: hFindFile=0x381e40 | out: hFindFile=0x381e40) returned 1 [0094.640] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e7f4) returned 1 [0094.640] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e800) returned 1 [0094.640] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e834) returned 1 [0094.640] GetFullPathNameW (in: lpFileName="C:\\Users\\Default\\Pictures", nBufferLength=0x105, lpBuffer=0x31e33c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\Default\\Pictures", lpFilePart=0x0) returned 0x19 [0094.640] GetFullPathNameW (in: lpFileName="C:\\Users\\Default\\Pictures\\", nBufferLength=0x105, lpBuffer=0x31e310, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\Default\\Pictures\\", lpFilePart=0x0) returned 0x1a [0094.640] FindFirstFileW (in: lpFileName="C:\\Users\\Default\\Pictures\\*", lpFindFileData=0x31e55c | out: lpFindFileData=0x31e55c*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0xfdac04c8, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x6346760, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xd8868f0a, ftLastWriteTime.dwHighDateTime=0x1cb892d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x381e40 [0094.640] FindNextFileW (in: hFindFile=0x381e40, lpFindFileData=0x31e56c | out: lpFindFileData=0x31e56c*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0xfdac04c8, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x6346760, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xd8868f0a, ftLastWriteTime.dwHighDateTime=0x1cb892d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0094.640] FindNextFileW (in: hFindFile=0x381e40, lpFindFileData=0x31e56c | out: lpFindFileData=0x31e56c*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0x6346760, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x6346760, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xd8868f0a, ftLastWriteTime.dwHighDateTime=0x1cb892d, nFileSizeHigh=0x0, nFileSizeLow=0x1f8, dwReserved0=0x0, dwReserved1=0x0, cFileName="desktop.ini", cAlternateFileName="")) returned 1 [0094.640] FindNextFileW (in: hFindFile=0x381e40, lpFindFileData=0x31e56c | out: lpFindFileData=0x31e56c*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0x6346760, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x6346760, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xd8868f0a, ftLastWriteTime.dwHighDateTime=0x1cb892d, nFileSizeHigh=0x0, nFileSizeLow=0x1f8, dwReserved0=0x0, dwReserved1=0x0, cFileName="desktop.ini", cAlternateFileName="")) returned 0 [0094.641] FindClose (in: hFindFile=0x381e40 | out: hFindFile=0x381e40) returned 1 [0094.641] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e7f4) returned 1 [0094.641] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e800) returned 1 [0094.641] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e834) returned 1 [0094.641] GetFullPathNameW (in: lpFileName="C:\\Users\\Default\\PrintHood", nBufferLength=0x105, lpBuffer=0x31e33c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\Default\\PrintHood", lpFilePart=0x0) returned 0x1a [0094.641] GetFullPathNameW (in: lpFileName="C:\\Users\\Default\\PrintHood\\", nBufferLength=0x105, lpBuffer=0x31e310, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\Default\\PrintHood\\", lpFilePart=0x0) returned 0x1b [0094.641] FindFirstFileW (in: lpFileName="C:\\Users\\Default\\PrintHood\\*", lpFindFileData=0x31e55c | out: lpFindFileData=0x31e55c*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0094.642] GetFullPathNameW (in: lpFileName="C:\\Users\\Default\\Recent", nBufferLength=0x105, lpBuffer=0x31e33c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\Default\\Recent", lpFilePart=0x0) returned 0x17 [0094.642] GetFullPathNameW (in: lpFileName="C:\\Users\\Default\\Recent\\", nBufferLength=0x105, lpBuffer=0x31e310, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\Default\\Recent\\", lpFilePart=0x0) returned 0x18 [0094.642] FindFirstFileW (in: lpFileName="C:\\Users\\Default\\Recent\\*", lpFindFileData=0x31e55c | out: lpFindFileData=0x31e55c*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0094.643] GetFullPathNameW (in: lpFileName="C:\\Users\\Default\\Saved Games", nBufferLength=0x105, lpBuffer=0x31e33c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\Default\\Saved Games", lpFilePart=0x0) returned 0x1c [0094.643] GetFullPathNameW (in: lpFileName="C:\\Users\\Default\\Saved Games\\", nBufferLength=0x105, lpBuffer=0x31e310, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\Default\\Saved Games\\", lpFilePart=0x0) returned 0x1d [0094.643] FindFirstFileW (in: lpFileName="C:\\Users\\Default\\Saved Games\\*", lpFindFileData=0x31e55c | out: lpFindFileData=0x31e55c*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0xfdac04c8, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x6346760, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xd894d74c, ftLastWriteTime.dwHighDateTime=0x1cb892d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x381e40 [0094.644] FindNextFileW (in: hFindFile=0x381e40, lpFindFileData=0x31e56c | out: lpFindFileData=0x31e56c*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0xfdac04c8, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x6346760, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xd894d74c, ftLastWriteTime.dwHighDateTime=0x1cb892d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0094.644] FindNextFileW (in: hFindFile=0x381e40, lpFindFileData=0x31e56c | out: lpFindFileData=0x31e56c*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0x6346760, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x6346760, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xd894d74c, ftLastWriteTime.dwHighDateTime=0x1cb892d, nFileSizeHigh=0x0, nFileSizeLow=0x11a, dwReserved0=0x0, dwReserved1=0x0, cFileName="desktop.ini", cAlternateFileName="")) returned 1 [0094.644] FindNextFileW (in: hFindFile=0x381e40, lpFindFileData=0x31e56c | out: lpFindFileData=0x31e56c*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0094.644] FindClose (in: hFindFile=0x381e40 | out: hFindFile=0x381e40) returned 1 [0094.644] GetFullPathNameW (in: lpFileName="C:\\Users\\Default\\Saved Games", nBufferLength=0x105, lpBuffer=0x31e33c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\Default\\Saved Games", lpFilePart=0x0) returned 0x1c [0094.644] GetFullPathNameW (in: lpFileName="C:\\Users\\Default\\Saved Games\\", nBufferLength=0x105, lpBuffer=0x31e310, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\Default\\Saved Games\\", lpFilePart=0x0) returned 0x1d [0094.644] FindFirstFileW (in: lpFileName="C:\\Users\\Default\\Saved Games\\*", lpFindFileData=0x31e55c | out: lpFindFileData=0x31e55c*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0xfdac04c8, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x6346760, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xd894d74c, ftLastWriteTime.dwHighDateTime=0x1cb892d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x381e40 [0094.645] FindNextFileW (in: hFindFile=0x381e40, lpFindFileData=0x31e56c | out: lpFindFileData=0x31e56c*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0xfdac04c8, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x6346760, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xd894d74c, ftLastWriteTime.dwHighDateTime=0x1cb892d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0094.645] FindNextFileW (in: hFindFile=0x381e40, lpFindFileData=0x31e56c | out: lpFindFileData=0x31e56c*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0x6346760, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x6346760, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xd894d74c, ftLastWriteTime.dwHighDateTime=0x1cb892d, nFileSizeHigh=0x0, nFileSizeLow=0x11a, dwReserved0=0x0, dwReserved1=0x0, cFileName="desktop.ini", cAlternateFileName="")) returned 1 [0094.645] FindNextFileW (in: hFindFile=0x381e40, lpFindFileData=0x31e56c | out: lpFindFileData=0x31e56c*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0x6346760, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x6346760, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xd894d74c, ftLastWriteTime.dwHighDateTime=0x1cb892d, nFileSizeHigh=0x0, nFileSizeLow=0x11a, dwReserved0=0x0, dwReserved1=0x0, cFileName="desktop.ini", cAlternateFileName="")) returned 0 [0094.645] FindClose (in: hFindFile=0x381e40 | out: hFindFile=0x381e40) returned 1 [0094.645] GetFullPathNameW (in: lpFileName="C:\\Users\\Default\\Searches", nBufferLength=0x105, lpBuffer=0x31e33c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\Default\\Searches", lpFilePart=0x0) returned 0x19 [0094.645] GetFullPathNameW (in: lpFileName="C:\\Users\\Default\\Searches\\", nBufferLength=0x105, lpBuffer=0x31e310, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\Default\\Searches\\", lpFilePart=0x0) returned 0x1a [0094.646] FindFirstFileW (in: lpFileName="C:\\Users\\Default\\Searches\\*", lpFindFileData=0x31e55c | out: lpFindFileData=0x31e55c*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x62fa4a0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x6346760, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xd88b51cb, ftLastWriteTime.dwHighDateTime=0x1cb892d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x381e40 [0094.647] FindNextFileW (in: hFindFile=0x381e40, lpFindFileData=0x31e56c | out: lpFindFileData=0x31e56c*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x62fa4a0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x6346760, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xd88b51cb, ftLastWriteTime.dwHighDateTime=0x1cb892d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0094.647] FindNextFileW (in: hFindFile=0x381e40, lpFindFileData=0x31e56c | out: lpFindFileData=0x31e56c*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0x6346760, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x6346760, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xd88b51cb, ftLastWriteTime.dwHighDateTime=0x1cb892d, nFileSizeHigh=0x0, nFileSizeLow=0x20c, dwReserved0=0x0, dwReserved1=0x0, cFileName="desktop.ini", cAlternateFileName="")) returned 1 [0094.648] FindNextFileW (in: hFindFile=0x381e40, lpFindFileData=0x31e56c | out: lpFindFileData=0x31e56c*(dwFileAttributes=0x23, ftCreationTime.dwLowDateTime=0x6346760, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x6346760, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xf99d9932, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0xf8, dwReserved0=0x0, dwReserved1=0x0, cFileName="Everywhere.search-ms", cAlternateFileName="EVERYW~1.SEA")) returned 1 [0094.648] FindNextFileW (in: hFindFile=0x381e40, lpFindFileData=0x31e56c | out: lpFindFileData=0x31e56c*(dwFileAttributes=0x23, ftCreationTime.dwLowDateTime=0x6320600, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x6320600, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xf99b37d1, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0xf8, dwReserved0=0x0, dwReserved1=0x0, cFileName="Indexed Locations.search-ms", cAlternateFileName="INDEXE~1.SEA")) returned 1 [0094.648] FindNextFileW (in: hFindFile=0x381e40, lpFindFileData=0x31e56c | out: lpFindFileData=0x31e56c*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0094.648] FindClose (in: hFindFile=0x381e40 | out: hFindFile=0x381e40) returned 1 [0094.649] GetFullPathNameW (in: lpFileName="C:\\Users\\Default\\Searches", nBufferLength=0x105, lpBuffer=0x31e33c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\Default\\Searches", lpFilePart=0x0) returned 0x19 [0094.649] GetFullPathNameW (in: lpFileName="C:\\Users\\Default\\Searches\\", nBufferLength=0x105, lpBuffer=0x31e310, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\Default\\Searches\\", lpFilePart=0x0) returned 0x1a [0094.649] FindFirstFileW (in: lpFileName="C:\\Users\\Default\\Searches\\*", lpFindFileData=0x31e55c | out: lpFindFileData=0x31e55c*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x62fa4a0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x6346760, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xd88b51cb, ftLastWriteTime.dwHighDateTime=0x1cb892d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x381e40 [0094.649] FindNextFileW (in: hFindFile=0x381e40, lpFindFileData=0x31e56c | out: lpFindFileData=0x31e56c*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x62fa4a0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x6346760, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xd88b51cb, ftLastWriteTime.dwHighDateTime=0x1cb892d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0094.650] FindNextFileW (in: hFindFile=0x381e40, lpFindFileData=0x31e56c | out: lpFindFileData=0x31e56c*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0x6346760, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x6346760, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xd88b51cb, ftLastWriteTime.dwHighDateTime=0x1cb892d, nFileSizeHigh=0x0, nFileSizeLow=0x20c, dwReserved0=0x0, dwReserved1=0x0, cFileName="desktop.ini", cAlternateFileName="")) returned 1 [0094.650] FindNextFileW (in: hFindFile=0x381e40, lpFindFileData=0x31e56c | out: lpFindFileData=0x31e56c*(dwFileAttributes=0x23, ftCreationTime.dwLowDateTime=0x6346760, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x6346760, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xf99d9932, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0xf8, dwReserved0=0x0, dwReserved1=0x0, cFileName="Everywhere.search-ms", cAlternateFileName="EVERYW~1.SEA")) returned 1 [0094.650] FindNextFileW (in: hFindFile=0x381e40, lpFindFileData=0x31e56c | out: lpFindFileData=0x31e56c*(dwFileAttributes=0x23, ftCreationTime.dwLowDateTime=0x6320600, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x6320600, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xf99b37d1, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0xf8, dwReserved0=0x0, dwReserved1=0x0, cFileName="Indexed Locations.search-ms", cAlternateFileName="INDEXE~1.SEA")) returned 1 [0094.650] FindNextFileW (in: hFindFile=0x381e40, lpFindFileData=0x31e56c | out: lpFindFileData=0x31e56c*(dwFileAttributes=0x23, ftCreationTime.dwLowDateTime=0x6320600, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x6320600, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xf99b37d1, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0xf8, dwReserved0=0x0, dwReserved1=0x0, cFileName="Indexed Locations.search-ms", cAlternateFileName="INDEXE~1.SEA")) returned 0 [0094.650] FindClose (in: hFindFile=0x381e40 | out: hFindFile=0x381e40) returned 1 [0094.651] GetFullPathNameW (in: lpFileName="C:\\Users\\Default\\SendTo", nBufferLength=0x105, lpBuffer=0x31e33c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\Default\\SendTo", lpFilePart=0x0) returned 0x17 [0094.651] GetFullPathNameW (in: lpFileName="C:\\Users\\Default\\SendTo\\", nBufferLength=0x105, lpBuffer=0x31e310, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\Default\\SendTo\\", lpFilePart=0x0) returned 0x18 [0094.651] FindFirstFileW (in: lpFileName="C:\\Users\\Default\\SendTo\\*", lpFindFileData=0x31e55c | out: lpFindFileData=0x31e55c*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0094.652] GetFullPathNameW (in: lpFileName="C:\\Users\\Default\\Start Menu", nBufferLength=0x105, lpBuffer=0x31e33c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\Default\\Start Menu", lpFilePart=0x0) returned 0x1b [0094.652] GetFullPathNameW (in: lpFileName="C:\\Users\\Default\\Start Menu\\", nBufferLength=0x105, lpBuffer=0x31e310, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\Default\\Start Menu\\", lpFilePart=0x0) returned 0x1c [0094.652] FindFirstFileW (in: lpFileName="C:\\Users\\Default\\Start Menu\\*", lpFindFileData=0x31e55c | out: lpFindFileData=0x31e55c*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0094.653] GetFullPathNameW (in: lpFileName="C:\\Users\\Default\\Templates", nBufferLength=0x105, lpBuffer=0x31e33c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\Default\\Templates", lpFilePart=0x0) returned 0x1a [0094.653] GetFullPathNameW (in: lpFileName="C:\\Users\\Default\\Templates\\", nBufferLength=0x105, lpBuffer=0x31e310, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\Default\\Templates\\", lpFilePart=0x0) returned 0x1b [0094.654] FindFirstFileW (in: lpFileName="C:\\Users\\Default\\Templates\\*", lpFindFileData=0x31e55c | out: lpFindFileData=0x31e55c*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0094.655] GetFullPathNameW (in: lpFileName="C:\\Users\\Default\\Videos", nBufferLength=0x105, lpBuffer=0x31e33c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\Default\\Videos", lpFilePart=0x0) returned 0x17 [0094.655] GetFullPathNameW (in: lpFileName="C:\\Users\\Default\\Videos\\", nBufferLength=0x105, lpBuffer=0x31e310, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\Default\\Videos\\", lpFilePart=0x0) returned 0x18 [0094.655] FindFirstFileW (in: lpFileName="C:\\Users\\Default\\Videos\\*", lpFindFileData=0x31e55c | out: lpFindFileData=0x31e55c*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0xfdac04c8, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x6320600, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xd8868f0a, ftLastWriteTime.dwHighDateTime=0x1cb892d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x381e40 [0094.656] FindNextFileW (in: hFindFile=0x381e40, lpFindFileData=0x31e56c | out: lpFindFileData=0x31e56c*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0xfdac04c8, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x6320600, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xd8868f0a, ftLastWriteTime.dwHighDateTime=0x1cb892d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0094.657] FindNextFileW (in: hFindFile=0x381e40, lpFindFileData=0x31e56c | out: lpFindFileData=0x31e56c*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0x6320600, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x6320600, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xd8868f0a, ftLastWriteTime.dwHighDateTime=0x1cb892d, nFileSizeHigh=0x0, nFileSizeLow=0x1f8, dwReserved0=0x0, dwReserved1=0x0, cFileName="desktop.ini", cAlternateFileName="")) returned 1 [0094.657] FindNextFileW (in: hFindFile=0x381e40, lpFindFileData=0x31e56c | out: lpFindFileData=0x31e56c*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0094.657] FindClose (in: hFindFile=0x381e40 | out: hFindFile=0x381e40) returned 1 [0094.657] GetFullPathNameW (in: lpFileName="C:\\Users\\Default\\Videos", nBufferLength=0x105, lpBuffer=0x31e33c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\Default\\Videos", lpFilePart=0x0) returned 0x17 [0094.657] GetFullPathNameW (in: lpFileName="C:\\Users\\Default\\Videos\\", nBufferLength=0x105, lpBuffer=0x31e310, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\Default\\Videos\\", lpFilePart=0x0) returned 0x18 [0094.657] FindFirstFileW (in: lpFileName="C:\\Users\\Default\\Videos\\*", lpFindFileData=0x31e55c | out: lpFindFileData=0x31e55c*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0xfdac04c8, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x6320600, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xd8868f0a, ftLastWriteTime.dwHighDateTime=0x1cb892d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x381e40 [0094.657] FindNextFileW (in: hFindFile=0x381e40, lpFindFileData=0x31e56c | out: lpFindFileData=0x31e56c*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0xfdac04c8, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x6320600, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xd8868f0a, ftLastWriteTime.dwHighDateTime=0x1cb892d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0094.657] FindNextFileW (in: hFindFile=0x381e40, lpFindFileData=0x31e56c | out: lpFindFileData=0x31e56c*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0x6320600, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x6320600, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xd8868f0a, ftLastWriteTime.dwHighDateTime=0x1cb892d, nFileSizeHigh=0x0, nFileSizeLow=0x1f8, dwReserved0=0x0, dwReserved1=0x0, cFileName="desktop.ini", cAlternateFileName="")) returned 1 [0094.658] FindNextFileW (in: hFindFile=0x381e40, lpFindFileData=0x31e56c | out: lpFindFileData=0x31e56c*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0x6320600, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x6320600, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xd8868f0a, ftLastWriteTime.dwHighDateTime=0x1cb892d, nFileSizeHigh=0x0, nFileSizeLow=0x1f8, dwReserved0=0x0, dwReserved1=0x0, cFileName="desktop.ini", cAlternateFileName="")) returned 0 [0094.658] FindClose (in: hFindFile=0x381e40 | out: hFindFile=0x381e40) returned 1 [0094.658] GetFullPathNameW (in: lpFileName="C:\\Users\\Default User", nBufferLength=0x105, lpBuffer=0x31e3b4, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\Default User", lpFilePart=0x0) returned 0x15 [0094.658] GetFullPathNameW (in: lpFileName="C:\\Users\\Default User\\", nBufferLength=0x105, lpBuffer=0x31e388, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\Default User\\", lpFilePart=0x0) returned 0x16 [0094.658] FindFirstFileW (in: lpFileName="C:\\Users\\Default User\\*", lpFindFileData=0x31e5d4 | out: lpFindFileData=0x31e5d4*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0094.659] GetFullPathNameW (in: lpFileName="C:\\Users\\Public", nBufferLength=0x105, lpBuffer=0x31e3b4, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\Public", lpFilePart=0x0) returned 0xf [0094.659] GetFullPathNameW (in: lpFileName="C:\\Users\\Public\\", nBufferLength=0x105, lpBuffer=0x31e388, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\Public\\", lpFilePart=0x0) returned 0x10 [0094.659] FindFirstFileW (in: lpFileName="C:\\Users\\Public\\*", lpFindFileData=0x31e5d4 | out: lpFindFileData=0x31e5d4*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0xfdac04c8, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x917fa2ee, ftLastAccessTime.dwHighDateTime=0x1cbf8eb, ftLastWriteTime.dwLowDateTime=0x917fa2ee, ftLastWriteTime.dwHighDateTime=0x1cbf8eb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x381e40 [0094.659] FindNextFileW (in: hFindFile=0x381e40, lpFindFileData=0x31e5e4 | out: lpFindFileData=0x31e5e4*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0xfdac04c8, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x917fa2ee, ftLastAccessTime.dwHighDateTime=0x1cbf8eb, ftLastWriteTime.dwLowDateTime=0x917fa2ee, ftLastWriteTime.dwHighDateTime=0x1cbf8eb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0094.659] FindNextFileW (in: hFindFile=0x381e40, lpFindFileData=0x31e5e4 | out: lpFindFileData=0x31e5e4*(dwFileAttributes=0x13, ftCreationTime.dwLowDateTime=0xfdae6622, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xb0a09a40, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0xb0a09a40, ftLastWriteTime.dwHighDateTime=0x1d2dda4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Desktop", cAlternateFileName="")) returned 1 [0094.660] FindNextFileW (in: hFindFile=0x381e40, lpFindFileData=0x31e5e4 | out: lpFindFileData=0x31e5e4*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0x286e4016, ftCreationTime.dwHighDateTime=0x1ca043f, ftLastAccessTime.dwLowDateTime=0x286e4016, ftLastAccessTime.dwHighDateTime=0x1ca043f, ftLastWriteTime.dwLowDateTime=0x28a4ffbc, ftLastWriteTime.dwHighDateTime=0x1ca043f, nFileSizeHigh=0x0, nFileSizeLow=0xae, dwReserved0=0x0, dwReserved1=0x0, cFileName="desktop.ini", cAlternateFileName="")) returned 1 [0094.660] FindNextFileW (in: hFindFile=0x381e40, lpFindFileData=0x31e5e4 | out: lpFindFileData=0x31e5e4*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0xfdae6622, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x3079b513, ftLastAccessTime.dwHighDateTime=0x1ca0441, ftLastWriteTime.dwLowDateTime=0x3079b513, ftLastWriteTime.dwHighDateTime=0x1ca0441, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Documents", cAlternateFileName="DOCUME~1")) returned 1 [0094.660] FindNextFileW (in: hFindFile=0x381e40, lpFindFileData=0x31e5e4 | out: lpFindFileData=0x31e5e4*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0xfdae6622, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x28351f0f, ftLastAccessTime.dwHighDateTime=0x1ca043f, ftLastWriteTime.dwLowDateTime=0x288d31f9, ftLastWriteTime.dwHighDateTime=0x1ca043f, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Downloads", cAlternateFileName="DOWNLO~1")) returned 1 [0094.660] FindNextFileW (in: hFindFile=0x381e40, lpFindFileData=0x31e5e4 | out: lpFindFileData=0x31e5e4*(dwFileAttributes=0x13, ftCreationTime.dwLowDateTime=0xfdae6622, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfdae6622, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xaee7d305, ftLastWriteTime.dwHighDateTime=0x1ca042b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Favorites", cAlternateFileName="FAVORI~1")) returned 1 [0094.660] FindNextFileW (in: hFindFile=0x381e40, lpFindFileData=0x31e5e4 | out: lpFindFileData=0x31e5e4*(dwFileAttributes=0x13, ftCreationTime.dwLowDateTime=0xfdb0c77c, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x28a29e5c, ftLastAccessTime.dwHighDateTime=0x1ca043f, ftLastWriteTime.dwLowDateTime=0x28a29e5c, ftLastWriteTime.dwHighDateTime=0x1ca043f, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Libraries", cAlternateFileName="LIBRAR~1")) returned 1 [0094.660] FindNextFileW (in: hFindFile=0x381e40, lpFindFileData=0x31e5e4 | out: lpFindFileData=0x31e5e4*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0xfdb0c77c, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x28305c4e, ftLastAccessTime.dwHighDateTime=0x1ca043f, ftLastWriteTime.dwLowDateTime=0x288ad099, ftLastWriteTime.dwHighDateTime=0x1ca043f, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Music", cAlternateFileName="")) returned 1 [0094.660] FindNextFileW (in: hFindFile=0x381e40, lpFindFileData=0x31e5e4 | out: lpFindFileData=0x31e5e4*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0xfdb0c77c, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x282dfaee, ftLastAccessTime.dwHighDateTime=0x1ca043f, ftLastWriteTime.dwLowDateTime=0x288ad099, ftLastWriteTime.dwHighDateTime=0x1ca043f, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Pictures", cAlternateFileName="")) returned 1 [0094.660] FindNextFileW (in: hFindFile=0x381e40, lpFindFileData=0x31e5e4 | out: lpFindFileData=0x31e5e4*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x917fa2ee, ftCreationTime.dwHighDateTime=0x1cbf8eb, ftLastAccessTime.dwLowDateTime=0xaa597fc2, ftLastAccessTime.dwHighDateTime=0x1cbf8eb, ftLastWriteTime.dwLowDateTime=0x917fa2ee, ftLastWriteTime.dwHighDateTime=0x1cbf8eb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Recorded TV", cAlternateFileName="RECORD~1")) returned 1 [0094.661] FindNextFileW (in: hFindFile=0x381e40, lpFindFileData=0x31e5e4 | out: lpFindFileData=0x31e5e4*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0xfdb0c77c, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x282dfaee, ftLastAccessTime.dwHighDateTime=0x1ca043f, ftLastWriteTime.dwLowDateTime=0x28886f39, ftLastWriteTime.dwHighDateTime=0x1ca043f, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Videos", cAlternateFileName="")) returned 1 [0094.661] FindNextFileW (in: hFindFile=0x381e40, lpFindFileData=0x31e5e4 | out: lpFindFileData=0x31e5e4*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0xfdb0c77c, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x282dfaee, ftLastAccessTime.dwHighDateTime=0x1ca043f, ftLastWriteTime.dwLowDateTime=0x28886f39, ftLastWriteTime.dwHighDateTime=0x1ca043f, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Videos", cAlternateFileName="")) returned 0 [0094.661] FindClose (in: hFindFile=0x381e40 | out: hFindFile=0x381e40) returned 1 [0094.661] GetFullPathNameW (in: lpFileName="C:\\Users\\Public", nBufferLength=0x105, lpBuffer=0x31e3b4, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\Public", lpFilePart=0x0) returned 0xf [0094.661] GetFullPathNameW (in: lpFileName="C:\\Users\\Public\\", nBufferLength=0x105, lpBuffer=0x31e388, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\Public\\", lpFilePart=0x0) returned 0x10 [0094.661] FindFirstFileW (in: lpFileName="C:\\Users\\Public\\*", lpFindFileData=0x31e5d4 | out: lpFindFileData=0x31e5d4*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0xfdac04c8, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x917fa2ee, ftLastAccessTime.dwHighDateTime=0x1cbf8eb, ftLastWriteTime.dwLowDateTime=0x917fa2ee, ftLastWriteTime.dwHighDateTime=0x1cbf8eb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x381e40 [0094.661] FindNextFileW (in: hFindFile=0x381e40, lpFindFileData=0x31e5e4 | out: lpFindFileData=0x31e5e4*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0xfdac04c8, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x917fa2ee, ftLastAccessTime.dwHighDateTime=0x1cbf8eb, ftLastWriteTime.dwLowDateTime=0x917fa2ee, ftLastWriteTime.dwHighDateTime=0x1cbf8eb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0094.661] FindNextFileW (in: hFindFile=0x381e40, lpFindFileData=0x31e5e4 | out: lpFindFileData=0x31e5e4*(dwFileAttributes=0x13, ftCreationTime.dwLowDateTime=0xfdae6622, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xb0a09a40, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0xb0a09a40, ftLastWriteTime.dwHighDateTime=0x1d2dda4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Desktop", cAlternateFileName="")) returned 1 [0094.662] FindNextFileW (in: hFindFile=0x381e40, lpFindFileData=0x31e5e4 | out: lpFindFileData=0x31e5e4*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0x286e4016, ftCreationTime.dwHighDateTime=0x1ca043f, ftLastAccessTime.dwLowDateTime=0x286e4016, ftLastAccessTime.dwHighDateTime=0x1ca043f, ftLastWriteTime.dwLowDateTime=0x28a4ffbc, ftLastWriteTime.dwHighDateTime=0x1ca043f, nFileSizeHigh=0x0, nFileSizeLow=0xae, dwReserved0=0x0, dwReserved1=0x0, cFileName="desktop.ini", cAlternateFileName="")) returned 1 [0094.662] FindNextFileW (in: hFindFile=0x381e40, lpFindFileData=0x31e5e4 | out: lpFindFileData=0x31e5e4*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0xfdae6622, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x3079b513, ftLastAccessTime.dwHighDateTime=0x1ca0441, ftLastWriteTime.dwLowDateTime=0x3079b513, ftLastWriteTime.dwHighDateTime=0x1ca0441, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Documents", cAlternateFileName="DOCUME~1")) returned 1 [0094.662] FindNextFileW (in: hFindFile=0x381e40, lpFindFileData=0x31e5e4 | out: lpFindFileData=0x31e5e4*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0xfdae6622, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x28351f0f, ftLastAccessTime.dwHighDateTime=0x1ca043f, ftLastWriteTime.dwLowDateTime=0x288d31f9, ftLastWriteTime.dwHighDateTime=0x1ca043f, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Downloads", cAlternateFileName="DOWNLO~1")) returned 1 [0094.662] FindNextFileW (in: hFindFile=0x381e40, lpFindFileData=0x31e5e4 | out: lpFindFileData=0x31e5e4*(dwFileAttributes=0x13, ftCreationTime.dwLowDateTime=0xfdae6622, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfdae6622, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xaee7d305, ftLastWriteTime.dwHighDateTime=0x1ca042b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Favorites", cAlternateFileName="FAVORI~1")) returned 1 [0094.662] FindNextFileW (in: hFindFile=0x381e40, lpFindFileData=0x31e5e4 | out: lpFindFileData=0x31e5e4*(dwFileAttributes=0x13, ftCreationTime.dwLowDateTime=0xfdb0c77c, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x28a29e5c, ftLastAccessTime.dwHighDateTime=0x1ca043f, ftLastWriteTime.dwLowDateTime=0x28a29e5c, ftLastWriteTime.dwHighDateTime=0x1ca043f, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Libraries", cAlternateFileName="LIBRAR~1")) returned 1 [0094.662] FindNextFileW (in: hFindFile=0x381e40, lpFindFileData=0x31e5e4 | out: lpFindFileData=0x31e5e4*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0xfdb0c77c, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x28305c4e, ftLastAccessTime.dwHighDateTime=0x1ca043f, ftLastWriteTime.dwLowDateTime=0x288ad099, ftLastWriteTime.dwHighDateTime=0x1ca043f, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Music", cAlternateFileName="")) returned 1 [0094.662] FindNextFileW (in: hFindFile=0x381e40, lpFindFileData=0x31e5e4 | out: lpFindFileData=0x31e5e4*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0xfdb0c77c, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x282dfaee, ftLastAccessTime.dwHighDateTime=0x1ca043f, ftLastWriteTime.dwLowDateTime=0x288ad099, ftLastWriteTime.dwHighDateTime=0x1ca043f, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Pictures", cAlternateFileName="")) returned 1 [0094.662] FindNextFileW (in: hFindFile=0x381e40, lpFindFileData=0x31e5e4 | out: lpFindFileData=0x31e5e4*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x917fa2ee, ftCreationTime.dwHighDateTime=0x1cbf8eb, ftLastAccessTime.dwLowDateTime=0xaa597fc2, ftLastAccessTime.dwHighDateTime=0x1cbf8eb, ftLastWriteTime.dwLowDateTime=0x917fa2ee, ftLastWriteTime.dwHighDateTime=0x1cbf8eb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Recorded TV", cAlternateFileName="RECORD~1")) returned 1 [0094.662] FindNextFileW (in: hFindFile=0x381e40, lpFindFileData=0x31e5e4 | out: lpFindFileData=0x31e5e4*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0xfdb0c77c, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x282dfaee, ftLastAccessTime.dwHighDateTime=0x1ca043f, ftLastWriteTime.dwLowDateTime=0x28886f39, ftLastWriteTime.dwHighDateTime=0x1ca043f, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Videos", cAlternateFileName="")) returned 1 [0094.663] FindNextFileW (in: hFindFile=0x381e40, lpFindFileData=0x31e5e4 | out: lpFindFileData=0x31e5e4*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0094.663] FindClose (in: hFindFile=0x381e40 | out: hFindFile=0x381e40) returned 1 [0094.663] GetFullPathNameW (in: lpFileName="C:\\Users\\Public\\Desktop", nBufferLength=0x105, lpBuffer=0x31e33c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\Public\\Desktop", lpFilePart=0x0) returned 0x17 [0094.663] GetFullPathNameW (in: lpFileName="C:\\Users\\Public\\Desktop\\", nBufferLength=0x105, lpBuffer=0x31e310, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\Public\\Desktop\\", lpFilePart=0x0) returned 0x18 [0094.663] FindFirstFileW (in: lpFileName="C:\\Users\\Public\\Desktop\\*", lpFindFileData=0x31e55c | out: lpFindFileData=0x31e55c*(dwFileAttributes=0x13, ftCreationTime.dwLowDateTime=0xfdae6622, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xb0a09a40, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0xb0a09a40, ftLastWriteTime.dwHighDateTime=0x1d2dda4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x381e40 [0094.663] FindNextFileW (in: hFindFile=0x381e40, lpFindFileData=0x31e56c | out: lpFindFileData=0x31e56c*(dwFileAttributes=0x13, ftCreationTime.dwLowDateTime=0xfdae6622, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xb0a09a40, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0xb0a09a40, ftLastWriteTime.dwHighDateTime=0x1d2dda4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0094.663] FindNextFileW (in: hFindFile=0x381e40, lpFindFileData=0x31e56c | out: lpFindFileData=0x31e56c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x83c279c0, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x83c279c0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x83c4db20, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x7e9, dwReserved0=0x0, dwReserved1=0x0, cFileName="Adobe Reader X.lnk", cAlternateFileName="ADOBER~1.LNK")) returned 1 [0094.663] FindNextFileW (in: hFindFile=0x381e40, lpFindFileData=0x31e56c | out: lpFindFileData=0x31e56c*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0x2826d6cd, ftCreationTime.dwHighDateTime=0x1ca043f, ftLastAccessTime.dwLowDateTime=0x2826d6cd, ftLastAccessTime.dwHighDateTime=0x1ca043f, ftLastWriteTime.dwLowDateTime=0x28860dd8, ftLastWriteTime.dwHighDateTime=0x1ca043f, nFileSizeHigh=0x0, nFileSizeLow=0xae, dwReserved0=0x0, dwReserved1=0x0, cFileName="desktop.ini", cAlternateFileName="")) returned 1 [0094.663] FindNextFileW (in: hFindFile=0x381e40, lpFindFileData=0x31e56c | out: lpFindFileData=0x31e56c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7df21ca0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x7df21ca0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x7df21ca0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x8d1, dwReserved0=0x0, dwReserved1=0x0, cFileName="Google Chrome.lnk", cAlternateFileName="GOOGLE~1.LNK")) returned 1 [0094.663] FindNextFileW (in: hFindFile=0x381e40, lpFindFileData=0x31e56c | out: lpFindFileData=0x31e56c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb0a09a40, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xb0a09a40, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0xb0a09a40, ftLastWriteTime.dwHighDateTime=0x1d2dda4, nFileSizeHigh=0x0, nFileSizeLow=0x485, dwReserved0=0x0, dwReserved1=0x0, cFileName="Mozilla Firefox.lnk", cAlternateFileName="MOZILL~1.LNK")) returned 1 [0094.664] FindNextFileW (in: hFindFile=0x381e40, lpFindFileData=0x31e56c | out: lpFindFileData=0x31e56c*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0094.664] FindClose (in: hFindFile=0x381e40 | out: hFindFile=0x381e40) returned 1 [0094.664] GetFullPathNameW (in: lpFileName="C:\\Users\\Public\\Desktop", nBufferLength=0x105, lpBuffer=0x31e33c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\Public\\Desktop", lpFilePart=0x0) returned 0x17 [0094.664] GetFullPathNameW (in: lpFileName="C:\\Users\\Public\\Desktop\\", nBufferLength=0x105, lpBuffer=0x31e310, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\Public\\Desktop\\", lpFilePart=0x0) returned 0x18 [0094.664] FindFirstFileW (in: lpFileName="C:\\Users\\Public\\Desktop\\*", lpFindFileData=0x31e55c | out: lpFindFileData=0x31e55c*(dwFileAttributes=0x13, ftCreationTime.dwLowDateTime=0xfdae6622, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xb0a09a40, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0xb0a09a40, ftLastWriteTime.dwHighDateTime=0x1d2dda4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x381e40 [0094.664] FindNextFileW (in: hFindFile=0x381e40, lpFindFileData=0x31e56c | out: lpFindFileData=0x31e56c*(dwFileAttributes=0x13, ftCreationTime.dwLowDateTime=0xfdae6622, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xb0a09a40, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0xb0a09a40, ftLastWriteTime.dwHighDateTime=0x1d2dda4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0094.664] FindNextFileW (in: hFindFile=0x381e40, lpFindFileData=0x31e56c | out: lpFindFileData=0x31e56c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x83c279c0, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x83c279c0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x83c4db20, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x7e9, dwReserved0=0x0, dwReserved1=0x0, cFileName="Adobe Reader X.lnk", cAlternateFileName="ADOBER~1.LNK")) returned 1 [0094.664] FindNextFileW (in: hFindFile=0x381e40, lpFindFileData=0x31e56c | out: lpFindFileData=0x31e56c*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0x2826d6cd, ftCreationTime.dwHighDateTime=0x1ca043f, ftLastAccessTime.dwLowDateTime=0x2826d6cd, ftLastAccessTime.dwHighDateTime=0x1ca043f, ftLastWriteTime.dwLowDateTime=0x28860dd8, ftLastWriteTime.dwHighDateTime=0x1ca043f, nFileSizeHigh=0x0, nFileSizeLow=0xae, dwReserved0=0x0, dwReserved1=0x0, cFileName="desktop.ini", cAlternateFileName="")) returned 1 [0094.664] FindNextFileW (in: hFindFile=0x381e40, lpFindFileData=0x31e56c | out: lpFindFileData=0x31e56c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7df21ca0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x7df21ca0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x7df21ca0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x8d1, dwReserved0=0x0, dwReserved1=0x0, cFileName="Google Chrome.lnk", cAlternateFileName="GOOGLE~1.LNK")) returned 1 [0094.664] FindNextFileW (in: hFindFile=0x381e40, lpFindFileData=0x31e56c | out: lpFindFileData=0x31e56c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb0a09a40, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xb0a09a40, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0xb0a09a40, ftLastWriteTime.dwHighDateTime=0x1d2dda4, nFileSizeHigh=0x0, nFileSizeLow=0x485, dwReserved0=0x0, dwReserved1=0x0, cFileName="Mozilla Firefox.lnk", cAlternateFileName="MOZILL~1.LNK")) returned 1 [0094.665] FindNextFileW (in: hFindFile=0x381e40, lpFindFileData=0x31e56c | out: lpFindFileData=0x31e56c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb0a09a40, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xb0a09a40, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0xb0a09a40, ftLastWriteTime.dwHighDateTime=0x1d2dda4, nFileSizeHigh=0x0, nFileSizeLow=0x485, dwReserved0=0x0, dwReserved1=0x0, cFileName="Mozilla Firefox.lnk", cAlternateFileName="MOZILL~1.LNK")) returned 0 [0094.665] FindClose (in: hFindFile=0x381e40 | out: hFindFile=0x381e40) returned 1 [0094.665] GetFullPathNameW (in: lpFileName="C:\\Users\\Public\\Desktop\\Adobe Reader X.lnk", nBufferLength=0x105, lpBuffer=0x31e20c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\Public\\Desktop\\Adobe Reader X.lnk", lpFilePart=0x0) returned 0x2a [0094.665] CreateFileW (lpFileName="C:\\Users\\Public\\Desktop\\Adobe Reader X.lnk" (normalized: "c:\\users\\public\\desktop\\adobe reader x.lnk"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x178 [0094.665] GetFileType (hFile=0x178) returned 0x1 [0094.665] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e6fc) returned 1 [0094.665] GetFileType (hFile=0x178) returned 0x1 [0094.665] GetFileSize (in: hFile=0x178, lpFileSizeHigh=0x31e808 | out: lpFileSizeHigh=0x31e808*=0x0) returned 0x7e9 [0094.665] ReadFile (in: hFile=0x178, lpBuffer=0x26508c4, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x31e7b4, lpOverlapped=0x0 | out: lpBuffer=0x26508c4*, lpNumberOfBytesRead=0x31e7b4*=0x7e9, lpOverlapped=0x0) returned 1 [0094.666] CloseHandle (hObject=0x178) returned 1 [0094.702] GetFullPathNameW (in: lpFileName="C:\\Users\\Public\\Desktop\\Adobe Reader X.lnk", nBufferLength=0x105, lpBuffer=0x31e1f8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\Public\\Desktop\\Adobe Reader X.lnk", lpFilePart=0x0) returned 0x2a [0094.702] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e6ec) returned 1 [0094.702] CreateFileW (lpFileName="C:\\Users\\Public\\Desktop\\Adobe Reader X.lnk" (normalized: "c:\\users\\public\\desktop\\adobe reader x.lnk"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x178 [0094.703] GetFileType (hFile=0x178) returned 0x1 [0094.703] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e6e8) returned 1 [0094.703] GetFileType (hFile=0x178) returned 0x1 [0094.703] WriteFile (in: hFile=0x178, lpBuffer=0x26a10bc*, nNumberOfBytesToWrite=0x7f0, lpNumberOfBytesWritten=0x31e77c, lpOverlapped=0x0 | out: lpBuffer=0x26a10bc*, lpNumberOfBytesWritten=0x31e77c*=0x7f0, lpOverlapped=0x0) returned 1 [0094.704] CloseHandle (hObject=0x178) returned 1 [0094.704] GetFullPathNameW (in: lpFileName="C:\\Users\\Public\\Desktop\\Adobe Reader X.lnk", nBufferLength=0x105, lpBuffer=0x31e32c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\Public\\Desktop\\Adobe Reader X.lnk", lpFilePart=0x0) returned 0x2a [0094.704] GetFullPathNameW (in: lpFileName="C:\\Users\\Public\\Desktop\\Adobe Reader X.lnk", nBufferLength=0x105, lpBuffer=0x31e32c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\Public\\Desktop\\Adobe Reader X.lnk", lpFilePart=0x0) returned 0x2a [0094.704] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e78c) returned 1 [0094.704] GetFileAttributesExW (in: lpFileName="C:\\Users\\Public\\Desktop\\Adobe Reader X.lnk" (normalized: "c:\\users\\public\\desktop\\adobe reader x.lnk"), fInfoLevelId=0x0, lpFileInformation=0x31e808 | out: lpFileInformation=0x31e808*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x83c279c0, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x83c279c0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x1be37de0, ftLastWriteTime.dwHighDateTime=0x1d6eb7f, nFileSizeHigh=0x0, nFileSizeLow=0x7f0)) returned 1 [0094.705] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e788) returned 1 [0094.705] MoveFileW (lpExistingFileName="C:\\Users\\Public\\Desktop\\Adobe Reader X.lnk" (normalized: "c:\\users\\public\\desktop\\adobe reader x.lnk"), lpNewFileName="C:\\Users\\Public\\Desktop\\Adobe Reader X.lnk" (normalized: "c:\\users\\public\\desktop\\adobe reader x.lnk")) returned 1 [0094.705] GetFullPathNameW (in: lpFileName="C:\\Users\\Public\\Desktop\\Google Chrome.lnk", nBufferLength=0x105, lpBuffer=0x31e20c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\Public\\Desktop\\Google Chrome.lnk", lpFilePart=0x0) returned 0x29 [0094.705] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e700) returned 1 [0094.705] CreateFileW (lpFileName="C:\\Users\\Public\\Desktop\\Google Chrome.lnk" (normalized: "c:\\users\\public\\desktop\\google chrome.lnk"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x178 [0094.705] GetFileType (hFile=0x178) returned 0x1 [0094.705] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e6fc) returned 1 [0094.705] GetFileType (hFile=0x178) returned 0x1 [0094.705] GetFileSize (in: hFile=0x178, lpFileSizeHigh=0x31e808 | out: lpFileSizeHigh=0x31e808*=0x0) returned 0x8d1 [0094.705] ReadFile (in: hFile=0x178, lpBuffer=0x26a2b8c, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x31e7b4, lpOverlapped=0x0 | out: lpBuffer=0x26a2b8c*, lpNumberOfBytesRead=0x31e7b4*=0x8d1, lpOverlapped=0x0) returned 1 [0094.706] CloseHandle (hObject=0x178) returned 1 [0094.719] GetFullPathNameW (in: lpFileName="C:\\Users\\Public\\Desktop\\Google Chrome.lnk", nBufferLength=0x105, lpBuffer=0x31e1f8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\Public\\Desktop\\Google Chrome.lnk", lpFilePart=0x0) returned 0x29 [0094.719] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e6ec) returned 1 [0094.719] CreateFileW (lpFileName="C:\\Users\\Public\\Desktop\\Google Chrome.lnk" (normalized: "c:\\users\\public\\desktop\\google chrome.lnk"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x178 [0094.720] GetFileType (hFile=0x178) returned 0x1 [0094.720] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e6e8) returned 1 [0094.720] GetFileType (hFile=0x178) returned 0x1 [0094.720] WriteFile (in: hFile=0x178, lpBuffer=0x26f36d8*, nNumberOfBytesToWrite=0x8e0, lpNumberOfBytesWritten=0x31e77c, lpOverlapped=0x0 | out: lpBuffer=0x26f36d8*, lpNumberOfBytesWritten=0x31e77c*=0x8e0, lpOverlapped=0x0) returned 1 [0094.721] CloseHandle (hObject=0x178) returned 1 [0094.721] GetFullPathNameW (in: lpFileName="C:\\Users\\Public\\Desktop\\Google Chrome.lnk", nBufferLength=0x105, lpBuffer=0x31e32c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\Public\\Desktop\\Google Chrome.lnk", lpFilePart=0x0) returned 0x29 [0094.721] GetFullPathNameW (in: lpFileName="C:\\Users\\Public\\Desktop\\Google Chrome.lnk", nBufferLength=0x105, lpBuffer=0x31e32c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\Public\\Desktop\\Google Chrome.lnk", lpFilePart=0x0) returned 0x29 [0094.721] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e78c) returned 1 [0094.721] GetFileAttributesExW (in: lpFileName="C:\\Users\\Public\\Desktop\\Google Chrome.lnk" (normalized: "c:\\users\\public\\desktop\\google chrome.lnk"), fInfoLevelId=0x0, lpFileInformation=0x31e808 | out: lpFileInformation=0x31e808*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7df21ca0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x7df21ca0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x1be5df40, ftLastWriteTime.dwHighDateTime=0x1d6eb7f, nFileSizeHigh=0x0, nFileSizeLow=0x8e0)) returned 1 [0094.721] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e788) returned 1 [0094.721] MoveFileW (lpExistingFileName="C:\\Users\\Public\\Desktop\\Google Chrome.lnk" (normalized: "c:\\users\\public\\desktop\\google chrome.lnk"), lpNewFileName="C:\\Users\\Public\\Desktop\\Google Chrome.lnk" (normalized: "c:\\users\\public\\desktop\\google chrome.lnk")) returned 1 [0094.722] GetFullPathNameW (in: lpFileName="C:\\Users\\Public\\Desktop\\Mozilla Firefox.lnk", nBufferLength=0x105, lpBuffer=0x31e20c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\Public\\Desktop\\Mozilla Firefox.lnk", lpFilePart=0x0) returned 0x2b [0094.722] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e700) returned 1 [0094.722] CreateFileW (lpFileName="C:\\Users\\Public\\Desktop\\Mozilla Firefox.lnk" (normalized: "c:\\users\\public\\desktop\\mozilla firefox.lnk"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x178 [0094.722] GetFileType (hFile=0x178) returned 0x1 [0094.722] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e6fc) returned 1 [0094.722] GetFileType (hFile=0x178) returned 0x1 [0094.722] GetFileSize (in: hFile=0x178, lpFileSizeHigh=0x31e808 | out: lpFileSizeHigh=0x31e808*=0x0) returned 0x485 [0094.722] ReadFile (in: hFile=0x178, lpBuffer=0x26f4d44, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x31e7b4, lpOverlapped=0x0 | out: lpBuffer=0x26f4d44*, lpNumberOfBytesRead=0x31e7b4*=0x485, lpOverlapped=0x0) returned 1 [0094.736] GetFullPathNameW (in: lpFileName="C:\\Users\\Public\\Desktop\\Mozilla Firefox.lnk", nBufferLength=0x105, lpBuffer=0x31e1f8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\Public\\Desktop\\Mozilla Firefox.lnk", lpFilePart=0x0) returned 0x2b [0094.736] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e6ec) returned 1 [0094.736] CreateFileW (lpFileName="C:\\Users\\Public\\Desktop\\Mozilla Firefox.lnk" (normalized: "c:\\users\\public\\desktop\\mozilla firefox.lnk"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x178 [0094.737] GetFileType (hFile=0x178) returned 0x1 [0094.737] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e6e8) returned 1 [0094.737] GetFileType (hFile=0x178) returned 0x1 [0094.737] WriteFile (in: hFile=0x178, lpBuffer=0x2744304*, nNumberOfBytesToWrite=0x490, lpNumberOfBytesWritten=0x31e77c, lpOverlapped=0x0 | out: lpBuffer=0x2744304*, lpNumberOfBytesWritten=0x31e77c*=0x490, lpOverlapped=0x0) returned 1 [0094.741] GetFullPathNameW (in: lpFileName="C:\\Users\\Public\\Desktop\\Mozilla Firefox.lnk", nBufferLength=0x105, lpBuffer=0x31e32c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\Public\\Desktop\\Mozilla Firefox.lnk", lpFilePart=0x0) returned 0x2b [0094.741] GetFullPathNameW (in: lpFileName="C:\\Users\\Public\\Desktop\\Mozilla Firefox.lnk", nBufferLength=0x105, lpBuffer=0x31e32c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\Public\\Desktop\\Mozilla Firefox.lnk", lpFilePart=0x0) returned 0x2b [0094.741] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e78c) returned 1 [0094.741] GetFileAttributesExW (in: lpFileName="C:\\Users\\Public\\Desktop\\Mozilla Firefox.lnk" (normalized: "c:\\users\\public\\desktop\\mozilla firefox.lnk"), fInfoLevelId=0x0, lpFileInformation=0x31e808 | out: lpFileInformation=0x31e808*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb0a09a40, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xb0a09a40, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0x1be840a0, ftLastWriteTime.dwHighDateTime=0x1d6eb7f, nFileSizeHigh=0x0, nFileSizeLow=0x490)) returned 1 [0094.741] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e788) returned 1 [0094.741] MoveFileW (lpExistingFileName="C:\\Users\\Public\\Desktop\\Mozilla Firefox.lnk" (normalized: "c:\\users\\public\\desktop\\mozilla firefox.lnk"), lpNewFileName="C:\\Users\\Public\\Desktop\\Mozilla Firefox.lnk" (normalized: "c:\\users\\public\\desktop\\mozilla firefox.lnk")) returned 1 [0094.742] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e834) returned 1 [0094.742] GetFullPathNameW (in: lpFileName="C:\\Users\\Public\\Documents", nBufferLength=0x105, lpBuffer=0x31e33c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\Public\\Documents", lpFilePart=0x0) returned 0x19 [0094.742] GetFullPathNameW (in: lpFileName="C:\\Users\\Public\\Documents\\", nBufferLength=0x105, lpBuffer=0x31e310, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\Public\\Documents\\", lpFilePart=0x0) returned 0x1a [0094.742] FindFirstFileW (in: lpFileName="C:\\Users\\Public\\Documents\\*", lpFindFileData=0x31e55c | out: lpFindFileData=0x31e55c*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0xfdae6622, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x3079b513, ftLastAccessTime.dwHighDateTime=0x1ca0441, ftLastWriteTime.dwLowDateTime=0x3079b513, ftLastWriteTime.dwHighDateTime=0x1ca0441, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x381f40 [0094.742] FindNextFileW (in: hFindFile=0x381f40, lpFindFileData=0x31e56c | out: lpFindFileData=0x31e56c*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0xfdae6622, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x3079b513, ftLastAccessTime.dwHighDateTime=0x1ca0441, ftLastWriteTime.dwLowDateTime=0x3079b513, ftLastWriteTime.dwHighDateTime=0x1ca0441, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0094.742] FindNextFileW (in: hFindFile=0x381f40, lpFindFileData=0x31e56c | out: lpFindFileData=0x31e56c*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0x28697d55, ftCreationTime.dwHighDateTime=0x1ca043f, ftLastAccessTime.dwLowDateTime=0x28697d55, ftLastAccessTime.dwHighDateTime=0x1ca043f, ftLastWriteTime.dwLowDateTime=0x28a4ffbc, ftLastWriteTime.dwHighDateTime=0x1ca043f, nFileSizeHigh=0x0, nFileSizeLow=0x116, dwReserved0=0x0, dwReserved1=0x0, cFileName="desktop.ini", cAlternateFileName="")) returned 1 [0094.742] FindNextFileW (in: hFindFile=0x381f40, lpFindFileData=0x31e56c | out: lpFindFileData=0x31e56c*(dwFileAttributes=0x2416, ftCreationTime.dwLowDateTime=0x3079b513, ftCreationTime.dwHighDateTime=0x1ca0441, ftLastAccessTime.dwLowDateTime=0x3079b513, ftLastAccessTime.dwHighDateTime=0x1ca0441, ftLastWriteTime.dwLowDateTime=0x3079b513, ftLastWriteTime.dwHighDateTime=0x1ca0441, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="My Music", cAlternateFileName="MYMUSI~1")) returned 1 [0094.742] FindNextFileW (in: hFindFile=0x381f40, lpFindFileData=0x31e56c | out: lpFindFileData=0x31e56c*(dwFileAttributes=0x2416, ftCreationTime.dwLowDateTime=0x3079b513, ftCreationTime.dwHighDateTime=0x1ca0441, ftLastAccessTime.dwLowDateTime=0x3079b513, ftLastAccessTime.dwHighDateTime=0x1ca0441, ftLastWriteTime.dwLowDateTime=0x3079b513, ftLastWriteTime.dwHighDateTime=0x1ca0441, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="My Pictures", cAlternateFileName="MYPICT~1")) returned 1 [0094.742] FindNextFileW (in: hFindFile=0x381f40, lpFindFileData=0x31e56c | out: lpFindFileData=0x31e56c*(dwFileAttributes=0x2416, ftCreationTime.dwLowDateTime=0x3079b513, ftCreationTime.dwHighDateTime=0x1ca0441, ftLastAccessTime.dwLowDateTime=0x3079b513, ftLastAccessTime.dwHighDateTime=0x1ca0441, ftLastWriteTime.dwLowDateTime=0x3079b513, ftLastWriteTime.dwHighDateTime=0x1ca0441, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="My Videos", cAlternateFileName="MYVIDE~1")) returned 1 [0094.743] FindNextFileW (in: hFindFile=0x381f40, lpFindFileData=0x31e56c | out: lpFindFileData=0x31e56c*(dwFileAttributes=0x2416, ftCreationTime.dwLowDateTime=0x3079b513, ftCreationTime.dwHighDateTime=0x1ca0441, ftLastAccessTime.dwLowDateTime=0x3079b513, ftLastAccessTime.dwHighDateTime=0x1ca0441, ftLastWriteTime.dwLowDateTime=0x3079b513, ftLastWriteTime.dwHighDateTime=0x1ca0441, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="My Videos", cAlternateFileName="MYVIDE~1")) returned 0 [0094.743] FindClose (in: hFindFile=0x381f40 | out: hFindFile=0x381f40) returned 1 [0094.743] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e7f4) returned 1 [0094.743] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e800) returned 1 [0094.743] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e834) returned 1 [0094.743] GetFullPathNameW (in: lpFileName="C:\\Users\\Public\\Documents", nBufferLength=0x105, lpBuffer=0x31e33c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\Public\\Documents", lpFilePart=0x0) returned 0x19 [0094.743] GetFullPathNameW (in: lpFileName="C:\\Users\\Public\\Documents\\", nBufferLength=0x105, lpBuffer=0x31e310, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\Public\\Documents\\", lpFilePart=0x0) returned 0x1a [0094.743] FindFirstFileW (in: lpFileName="C:\\Users\\Public\\Documents\\*", lpFindFileData=0x31e55c | out: lpFindFileData=0x31e55c*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0xfdae6622, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x3079b513, ftLastAccessTime.dwHighDateTime=0x1ca0441, ftLastWriteTime.dwLowDateTime=0x3079b513, ftLastWriteTime.dwHighDateTime=0x1ca0441, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x381f40 [0094.743] FindNextFileW (in: hFindFile=0x381f40, lpFindFileData=0x31e56c | out: lpFindFileData=0x31e56c*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0xfdae6622, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x3079b513, ftLastAccessTime.dwHighDateTime=0x1ca0441, ftLastWriteTime.dwLowDateTime=0x3079b513, ftLastWriteTime.dwHighDateTime=0x1ca0441, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0094.743] FindNextFileW (in: hFindFile=0x381f40, lpFindFileData=0x31e56c | out: lpFindFileData=0x31e56c*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0x28697d55, ftCreationTime.dwHighDateTime=0x1ca043f, ftLastAccessTime.dwLowDateTime=0x28697d55, ftLastAccessTime.dwHighDateTime=0x1ca043f, ftLastWriteTime.dwLowDateTime=0x28a4ffbc, ftLastWriteTime.dwHighDateTime=0x1ca043f, nFileSizeHigh=0x0, nFileSizeLow=0x116, dwReserved0=0x0, dwReserved1=0x0, cFileName="desktop.ini", cAlternateFileName="")) returned 1 [0094.743] FindNextFileW (in: hFindFile=0x381f40, lpFindFileData=0x31e56c | out: lpFindFileData=0x31e56c*(dwFileAttributes=0x2416, ftCreationTime.dwLowDateTime=0x3079b513, ftCreationTime.dwHighDateTime=0x1ca0441, ftLastAccessTime.dwLowDateTime=0x3079b513, ftLastAccessTime.dwHighDateTime=0x1ca0441, ftLastWriteTime.dwLowDateTime=0x3079b513, ftLastWriteTime.dwHighDateTime=0x1ca0441, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="My Music", cAlternateFileName="MYMUSI~1")) returned 1 [0094.743] FindNextFileW (in: hFindFile=0x381f40, lpFindFileData=0x31e56c | out: lpFindFileData=0x31e56c*(dwFileAttributes=0x2416, ftCreationTime.dwLowDateTime=0x3079b513, ftCreationTime.dwHighDateTime=0x1ca0441, ftLastAccessTime.dwLowDateTime=0x3079b513, ftLastAccessTime.dwHighDateTime=0x1ca0441, ftLastWriteTime.dwLowDateTime=0x3079b513, ftLastWriteTime.dwHighDateTime=0x1ca0441, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="My Pictures", cAlternateFileName="MYPICT~1")) returned 1 [0094.743] FindNextFileW (in: hFindFile=0x381f40, lpFindFileData=0x31e56c | out: lpFindFileData=0x31e56c*(dwFileAttributes=0x2416, ftCreationTime.dwLowDateTime=0x3079b513, ftCreationTime.dwHighDateTime=0x1ca0441, ftLastAccessTime.dwLowDateTime=0x3079b513, ftLastAccessTime.dwHighDateTime=0x1ca0441, ftLastWriteTime.dwLowDateTime=0x3079b513, ftLastWriteTime.dwHighDateTime=0x1ca0441, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="My Videos", cAlternateFileName="MYVIDE~1")) returned 1 [0094.744] FindNextFileW (in: hFindFile=0x381f40, lpFindFileData=0x31e56c | out: lpFindFileData=0x31e56c*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0094.744] FindClose (in: hFindFile=0x381f40 | out: hFindFile=0x381f40) returned 1 [0094.744] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e7f4) returned 1 [0094.744] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e800) returned 1 [0094.744] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e7bc) returned 1 [0094.744] GetFullPathNameW (in: lpFileName="C:\\Users\\Public\\Documents\\My Music", nBufferLength=0x105, lpBuffer=0x31e2c4, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\Public\\Documents\\My Music", lpFilePart=0x0) returned 0x22 [0094.744] GetFullPathNameW (in: lpFileName="C:\\Users\\Public\\Documents\\My Music\\", nBufferLength=0x105, lpBuffer=0x31e298, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\Public\\Documents\\My Music\\", lpFilePart=0x0) returned 0x23 [0094.744] FindFirstFileW (in: lpFileName="C:\\Users\\Public\\Documents\\My Music\\*", lpFindFileData=0x31e4e4 | out: lpFindFileData=0x31e4e4*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0094.744] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e780) returned 1 [0094.745] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e7bc) returned 1 [0094.745] GetFullPathNameW (in: lpFileName="C:\\Users\\Public\\Documents\\My Pictures", nBufferLength=0x105, lpBuffer=0x31e2c4, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\Public\\Documents\\My Pictures", lpFilePart=0x0) returned 0x25 [0094.745] GetFullPathNameW (in: lpFileName="C:\\Users\\Public\\Documents\\My Pictures\\", nBufferLength=0x105, lpBuffer=0x31e298, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\Public\\Documents\\My Pictures\\", lpFilePart=0x0) returned 0x26 [0094.745] FindFirstFileW (in: lpFileName="C:\\Users\\Public\\Documents\\My Pictures\\*", lpFindFileData=0x31e4e4 | out: lpFindFileData=0x31e4e4*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0094.745] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e780) returned 1 [0094.746] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e7bc) returned 1 [0094.747] GetFullPathNameW (in: lpFileName="C:\\Users\\Public\\Documents\\My Videos", nBufferLength=0x105, lpBuffer=0x31e2c4, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\Public\\Documents\\My Videos", lpFilePart=0x0) returned 0x23 [0094.747] GetFullPathNameW (in: lpFileName="C:\\Users\\Public\\Documents\\My Videos\\", nBufferLength=0x105, lpBuffer=0x31e298, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\Public\\Documents\\My Videos\\", lpFilePart=0x0) returned 0x24 [0094.747] FindFirstFileW (in: lpFileName="C:\\Users\\Public\\Documents\\My Videos\\*", lpFindFileData=0x31e4e4 | out: lpFindFileData=0x31e4e4*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0094.747] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e780) returned 1 [0094.748] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e834) returned 1 [0094.748] GetFullPathNameW (in: lpFileName="C:\\Users\\Public\\Downloads", nBufferLength=0x105, lpBuffer=0x31e33c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\Public\\Downloads", lpFilePart=0x0) returned 0x19 [0094.748] GetFullPathNameW (in: lpFileName="C:\\Users\\Public\\Downloads\\", nBufferLength=0x105, lpBuffer=0x31e310, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\Public\\Downloads\\", lpFilePart=0x0) returned 0x1a [0094.748] FindFirstFileW (in: lpFileName="C:\\Users\\Public\\Downloads\\*", lpFindFileData=0x31e55c | out: lpFindFileData=0x31e55c*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0xfdae6622, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x28351f0f, ftLastAccessTime.dwHighDateTime=0x1ca043f, ftLastWriteTime.dwLowDateTime=0x288d31f9, ftLastWriteTime.dwHighDateTime=0x1ca043f, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x381f40 [0094.748] FindNextFileW (in: hFindFile=0x381f40, lpFindFileData=0x31e56c | out: lpFindFileData=0x31e56c*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0xfdae6622, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x28351f0f, ftLastAccessTime.dwHighDateTime=0x1ca043f, ftLastWriteTime.dwLowDateTime=0x288d31f9, ftLastWriteTime.dwHighDateTime=0x1ca043f, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0094.749] FindNextFileW (in: hFindFile=0x381f40, lpFindFileData=0x31e56c | out: lpFindFileData=0x31e56c*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0x28351f0f, ftCreationTime.dwHighDateTime=0x1ca043f, ftLastAccessTime.dwLowDateTime=0x28351f0f, ftLastAccessTime.dwHighDateTime=0x1ca043f, ftLastWriteTime.dwLowDateTime=0x288d31f9, ftLastWriteTime.dwHighDateTime=0x1ca043f, nFileSizeHigh=0x0, nFileSizeLow=0xae, dwReserved0=0x0, dwReserved1=0x0, cFileName="desktop.ini", cAlternateFileName="")) returned 1 [0094.749] FindNextFileW (in: hFindFile=0x381f40, lpFindFileData=0x31e56c | out: lpFindFileData=0x31e56c*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0094.749] FindClose (in: hFindFile=0x381f40 | out: hFindFile=0x381f40) returned 1 [0094.749] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e7f4) returned 1 [0094.749] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e800) returned 1 [0094.749] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e834) returned 1 [0094.749] GetFullPathNameW (in: lpFileName="C:\\Users\\Public\\Downloads", nBufferLength=0x105, lpBuffer=0x31e33c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\Public\\Downloads", lpFilePart=0x0) returned 0x19 [0094.749] GetFullPathNameW (in: lpFileName="C:\\Users\\Public\\Downloads\\", nBufferLength=0x105, lpBuffer=0x31e310, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\Public\\Downloads\\", lpFilePart=0x0) returned 0x1a [0094.749] FindFirstFileW (in: lpFileName="C:\\Users\\Public\\Downloads\\*", lpFindFileData=0x31e55c | out: lpFindFileData=0x31e55c*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0xfdae6622, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x28351f0f, ftLastAccessTime.dwHighDateTime=0x1ca043f, ftLastWriteTime.dwLowDateTime=0x288d31f9, ftLastWriteTime.dwHighDateTime=0x1ca043f, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x381f40 [0094.749] FindNextFileW (in: hFindFile=0x381f40, lpFindFileData=0x31e56c | out: lpFindFileData=0x31e56c*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0xfdae6622, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x28351f0f, ftLastAccessTime.dwHighDateTime=0x1ca043f, ftLastWriteTime.dwLowDateTime=0x288d31f9, ftLastWriteTime.dwHighDateTime=0x1ca043f, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0094.749] FindNextFileW (in: hFindFile=0x381f40, lpFindFileData=0x31e56c | out: lpFindFileData=0x31e56c*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0x28351f0f, ftCreationTime.dwHighDateTime=0x1ca043f, ftLastAccessTime.dwLowDateTime=0x28351f0f, ftLastAccessTime.dwHighDateTime=0x1ca043f, ftLastWriteTime.dwLowDateTime=0x288d31f9, ftLastWriteTime.dwHighDateTime=0x1ca043f, nFileSizeHigh=0x0, nFileSizeLow=0xae, dwReserved0=0x0, dwReserved1=0x0, cFileName="desktop.ini", cAlternateFileName="")) returned 1 [0094.749] FindNextFileW (in: hFindFile=0x381f40, lpFindFileData=0x31e56c | out: lpFindFileData=0x31e56c*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0x28351f0f, ftCreationTime.dwHighDateTime=0x1ca043f, ftLastAccessTime.dwLowDateTime=0x28351f0f, ftLastAccessTime.dwHighDateTime=0x1ca043f, ftLastWriteTime.dwLowDateTime=0x288d31f9, ftLastWriteTime.dwHighDateTime=0x1ca043f, nFileSizeHigh=0x0, nFileSizeLow=0xae, dwReserved0=0x0, dwReserved1=0x0, cFileName="desktop.ini", cAlternateFileName="")) returned 0 [0094.750] FindClose (in: hFindFile=0x381f40 | out: hFindFile=0x381f40) returned 1 [0094.750] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e7f4) returned 1 [0094.750] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e800) returned 1 [0094.750] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e834) returned 1 [0094.750] GetFullPathNameW (in: lpFileName="C:\\Users\\Public\\Favorites", nBufferLength=0x105, lpBuffer=0x31e33c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\Public\\Favorites", lpFilePart=0x0) returned 0x19 [0094.750] GetFullPathNameW (in: lpFileName="C:\\Users\\Public\\Favorites\\", nBufferLength=0x105, lpBuffer=0x31e310, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\Public\\Favorites\\", lpFilePart=0x0) returned 0x1a [0094.750] FindFirstFileW (in: lpFileName="C:\\Users\\Public\\Favorites\\*", lpFindFileData=0x31e55c | out: lpFindFileData=0x31e55c*(dwFileAttributes=0x13, ftCreationTime.dwLowDateTime=0xfdae6622, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfdae6622, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xaee7d305, ftLastWriteTime.dwHighDateTime=0x1ca042b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x381f40 [0094.750] FindNextFileW (in: hFindFile=0x381f40, lpFindFileData=0x31e56c | out: lpFindFileData=0x31e56c*(dwFileAttributes=0x13, ftCreationTime.dwLowDateTime=0xfdae6622, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfdae6622, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xaee7d305, ftLastWriteTime.dwHighDateTime=0x1ca042b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0094.750] FindNextFileW (in: hFindFile=0x381f40, lpFindFileData=0x31e56c | out: lpFindFileData=0x31e56c*(dwFileAttributes=0x13, ftCreationTime.dwLowDateTime=0xfdae6622, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfdae6622, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xaee7d305, ftLastWriteTime.dwHighDateTime=0x1ca042b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 0 [0094.750] FindClose (in: hFindFile=0x381f40 | out: hFindFile=0x381f40) returned 1 [0094.750] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e7f4) returned 1 [0094.750] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e800) returned 1 [0094.751] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e834) returned 1 [0094.751] GetFullPathNameW (in: lpFileName="C:\\Users\\Public\\Favorites", nBufferLength=0x105, lpBuffer=0x31e33c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\Public\\Favorites", lpFilePart=0x0) returned 0x19 [0094.751] GetFullPathNameW (in: lpFileName="C:\\Users\\Public\\Favorites\\", nBufferLength=0x105, lpBuffer=0x31e310, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\Public\\Favorites\\", lpFilePart=0x0) returned 0x1a [0094.751] FindFirstFileW (in: lpFileName="C:\\Users\\Public\\Favorites\\*", lpFindFileData=0x31e55c | out: lpFindFileData=0x31e55c*(dwFileAttributes=0x13, ftCreationTime.dwLowDateTime=0xfdae6622, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfdae6622, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xaee7d305, ftLastWriteTime.dwHighDateTime=0x1ca042b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x381f40 [0094.751] FindNextFileW (in: hFindFile=0x381f40, lpFindFileData=0x31e56c | out: lpFindFileData=0x31e56c*(dwFileAttributes=0x13, ftCreationTime.dwLowDateTime=0xfdae6622, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfdae6622, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xaee7d305, ftLastWriteTime.dwHighDateTime=0x1ca042b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0094.751] FindNextFileW (in: hFindFile=0x381f40, lpFindFileData=0x31e56c | out: lpFindFileData=0x31e56c*(dwFileAttributes=0x13, ftCreationTime.dwLowDateTime=0xfdae6622, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfdae6622, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xaee7d305, ftLastWriteTime.dwHighDateTime=0x1ca042b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 0 [0094.751] FindClose (in: hFindFile=0x381f40 | out: hFindFile=0x381f40) returned 1 [0094.751] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e7f4) returned 1 [0094.751] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e800) returned 1 [0094.751] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e834) returned 1 [0094.751] GetFullPathNameW (in: lpFileName="C:\\Users\\Public\\Libraries", nBufferLength=0x105, lpBuffer=0x31e33c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\Public\\Libraries", lpFilePart=0x0) returned 0x19 [0094.751] GetFullPathNameW (in: lpFileName="C:\\Users\\Public\\Libraries\\", nBufferLength=0x105, lpBuffer=0x31e310, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\Public\\Libraries\\", lpFilePart=0x0) returned 0x1a [0094.751] FindFirstFileW (in: lpFileName="C:\\Users\\Public\\Libraries\\*", lpFindFileData=0x31e55c | out: lpFindFileData=0x31e55c*(dwFileAttributes=0x13, ftCreationTime.dwLowDateTime=0xfdb0c77c, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x28a29e5c, ftLastAccessTime.dwHighDateTime=0x1ca043f, ftLastWriteTime.dwLowDateTime=0x28a29e5c, ftLastWriteTime.dwHighDateTime=0x1ca043f, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x381f40 [0094.752] FindNextFileW (in: hFindFile=0x381f40, lpFindFileData=0x31e56c | out: lpFindFileData=0x31e56c*(dwFileAttributes=0x13, ftCreationTime.dwLowDateTime=0xfdb0c77c, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x28a29e5c, ftLastAccessTime.dwHighDateTime=0x1ca043f, ftLastWriteTime.dwLowDateTime=0x28a29e5c, ftLastWriteTime.dwHighDateTime=0x1ca043f, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0094.752] FindNextFileW (in: hFindFile=0x381f40, lpFindFileData=0x31e56c | out: lpFindFileData=0x31e56c*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0x2839e1d0, ftCreationTime.dwHighDateTime=0x1ca043f, ftLastAccessTime.dwLowDateTime=0x2839e1d0, ftLastAccessTime.dwHighDateTime=0x1ca043f, ftLastWriteTime.dwLowDateTime=0x288f9359, ftLastWriteTime.dwHighDateTime=0x1ca043f, nFileSizeHigh=0x0, nFileSizeLow=0x58, dwReserved0=0x0, dwReserved1=0x0, cFileName="desktop.ini", cAlternateFileName="")) returned 1 [0094.752] FindNextFileW (in: hFindFile=0x381f40, lpFindFileData=0x31e56c | out: lpFindFileData=0x31e56c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2837806f, ftCreationTime.dwHighDateTime=0x1ca043f, ftLastAccessTime.dwLowDateTime=0x289b7a3b, ftLastAccessTime.dwHighDateTime=0x1ca043f, ftLastWriteTime.dwLowDateTime=0x28a29e5c, ftLastWriteTime.dwHighDateTime=0x1ca043f, nFileSizeHigh=0x0, nFileSizeLow=0x36c, dwReserved0=0x0, dwReserved1=0x0, cFileName="RecordedTV.library-ms", cAlternateFileName="RECORD~1.LIB")) returned 1 [0094.752] FindNextFileW (in: hFindFile=0x381f40, lpFindFileData=0x31e56c | out: lpFindFileData=0x31e56c*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0094.752] FindClose (in: hFindFile=0x381f40 | out: hFindFile=0x381f40) returned 1 [0094.752] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e7f4) returned 1 [0094.752] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e800) returned 1 [0094.752] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e834) returned 1 [0094.752] GetFullPathNameW (in: lpFileName="C:\\Users\\Public\\Libraries", nBufferLength=0x105, lpBuffer=0x31e33c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\Public\\Libraries", lpFilePart=0x0) returned 0x19 [0094.752] GetFullPathNameW (in: lpFileName="C:\\Users\\Public\\Libraries\\", nBufferLength=0x105, lpBuffer=0x31e310, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\Public\\Libraries\\", lpFilePart=0x0) returned 0x1a [0094.752] FindFirstFileW (in: lpFileName="C:\\Users\\Public\\Libraries\\*", lpFindFileData=0x31e55c | out: lpFindFileData=0x31e55c*(dwFileAttributes=0x13, ftCreationTime.dwLowDateTime=0xfdb0c77c, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x28a29e5c, ftLastAccessTime.dwHighDateTime=0x1ca043f, ftLastWriteTime.dwLowDateTime=0x28a29e5c, ftLastWriteTime.dwHighDateTime=0x1ca043f, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x381f40 [0094.752] FindNextFileW (in: hFindFile=0x381f40, lpFindFileData=0x31e56c | out: lpFindFileData=0x31e56c*(dwFileAttributes=0x13, ftCreationTime.dwLowDateTime=0xfdb0c77c, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x28a29e5c, ftLastAccessTime.dwHighDateTime=0x1ca043f, ftLastWriteTime.dwLowDateTime=0x28a29e5c, ftLastWriteTime.dwHighDateTime=0x1ca043f, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0094.753] FindNextFileW (in: hFindFile=0x381f40, lpFindFileData=0x31e56c | out: lpFindFileData=0x31e56c*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0x2839e1d0, ftCreationTime.dwHighDateTime=0x1ca043f, ftLastAccessTime.dwLowDateTime=0x2839e1d0, ftLastAccessTime.dwHighDateTime=0x1ca043f, ftLastWriteTime.dwLowDateTime=0x288f9359, ftLastWriteTime.dwHighDateTime=0x1ca043f, nFileSizeHigh=0x0, nFileSizeLow=0x58, dwReserved0=0x0, dwReserved1=0x0, cFileName="desktop.ini", cAlternateFileName="")) returned 1 [0094.753] FindNextFileW (in: hFindFile=0x381f40, lpFindFileData=0x31e56c | out: lpFindFileData=0x31e56c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2837806f, ftCreationTime.dwHighDateTime=0x1ca043f, ftLastAccessTime.dwLowDateTime=0x289b7a3b, ftLastAccessTime.dwHighDateTime=0x1ca043f, ftLastWriteTime.dwLowDateTime=0x28a29e5c, ftLastWriteTime.dwHighDateTime=0x1ca043f, nFileSizeHigh=0x0, nFileSizeLow=0x36c, dwReserved0=0x0, dwReserved1=0x0, cFileName="RecordedTV.library-ms", cAlternateFileName="RECORD~1.LIB")) returned 1 [0094.753] FindNextFileW (in: hFindFile=0x381f40, lpFindFileData=0x31e56c | out: lpFindFileData=0x31e56c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2837806f, ftCreationTime.dwHighDateTime=0x1ca043f, ftLastAccessTime.dwLowDateTime=0x289b7a3b, ftLastAccessTime.dwHighDateTime=0x1ca043f, ftLastWriteTime.dwLowDateTime=0x28a29e5c, ftLastWriteTime.dwHighDateTime=0x1ca043f, nFileSizeHigh=0x0, nFileSizeLow=0x36c, dwReserved0=0x0, dwReserved1=0x0, cFileName="RecordedTV.library-ms", cAlternateFileName="RECORD~1.LIB")) returned 0 [0094.753] FindClose (in: hFindFile=0x381f40 | out: hFindFile=0x381f40) returned 1 [0094.753] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e7f4) returned 1 [0094.753] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e800) returned 1 [0094.753] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e834) returned 1 [0094.753] GetFullPathNameW (in: lpFileName="C:\\Users\\Public\\Music", nBufferLength=0x105, lpBuffer=0x31e33c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\Public\\Music", lpFilePart=0x0) returned 0x15 [0094.753] GetFullPathNameW (in: lpFileName="C:\\Users\\Public\\Music\\", nBufferLength=0x105, lpBuffer=0x31e310, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\Public\\Music\\", lpFilePart=0x0) returned 0x16 [0094.753] FindFirstFileW (in: lpFileName="C:\\Users\\Public\\Music\\*", lpFindFileData=0x31e55c | out: lpFindFileData=0x31e55c*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0xfdb0c77c, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x28305c4e, ftLastAccessTime.dwHighDateTime=0x1ca043f, ftLastWriteTime.dwLowDateTime=0x288ad099, ftLastWriteTime.dwHighDateTime=0x1ca043f, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x381f40 [0094.753] FindNextFileW (in: hFindFile=0x381f40, lpFindFileData=0x31e56c | out: lpFindFileData=0x31e56c*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0xfdb0c77c, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x28305c4e, ftLastAccessTime.dwHighDateTime=0x1ca043f, ftLastWriteTime.dwLowDateTime=0x288ad099, ftLastWriteTime.dwHighDateTime=0x1ca043f, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0094.754] FindNextFileW (in: hFindFile=0x381f40, lpFindFileData=0x31e56c | out: lpFindFileData=0x31e56c*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0x28305c4e, ftCreationTime.dwHighDateTime=0x1ca043f, ftLastAccessTime.dwLowDateTime=0x28305c4e, ftLastAccessTime.dwHighDateTime=0x1ca043f, ftLastWriteTime.dwLowDateTime=0x288ad099, ftLastWriteTime.dwHighDateTime=0x1ca043f, nFileSizeHigh=0x0, nFileSizeLow=0x17c, dwReserved0=0x0, dwReserved1=0x0, cFileName="desktop.ini", cAlternateFileName="")) returned 1 [0094.754] FindNextFileW (in: hFindFile=0x381f40, lpFindFileData=0x31e56c | out: lpFindFileData=0x31e56c*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x7fffaad0, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x8031a7b6, ftLastAccessTime.dwHighDateTime=0x1ca0444, ftLastWriteTime.dwLowDateTime=0x28a4ffbc, ftLastWriteTime.dwHighDateTime=0x1ca043f, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Sample Music", cAlternateFileName="SAMPLE~1")) returned 1 [0094.754] FindNextFileW (in: hFindFile=0x381f40, lpFindFileData=0x31e56c | out: lpFindFileData=0x31e56c*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x7fffaad0, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x8031a7b6, ftLastAccessTime.dwHighDateTime=0x1ca0444, ftLastWriteTime.dwLowDateTime=0x28a4ffbc, ftLastWriteTime.dwHighDateTime=0x1ca043f, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Sample Music", cAlternateFileName="SAMPLE~1")) returned 0 [0094.754] FindClose (in: hFindFile=0x381f40 | out: hFindFile=0x381f40) returned 1 [0094.754] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e7f4) returned 1 [0094.754] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e800) returned 1 [0094.754] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e834) returned 1 [0094.754] GetFullPathNameW (in: lpFileName="C:\\Users\\Public\\Music", nBufferLength=0x105, lpBuffer=0x31e33c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\Public\\Music", lpFilePart=0x0) returned 0x15 [0094.754] GetFullPathNameW (in: lpFileName="C:\\Users\\Public\\Music\\", nBufferLength=0x105, lpBuffer=0x31e310, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\Public\\Music\\", lpFilePart=0x0) returned 0x16 [0094.754] FindFirstFileW (in: lpFileName="C:\\Users\\Public\\Music\\*", lpFindFileData=0x31e55c | out: lpFindFileData=0x31e55c*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0xfdb0c77c, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x28305c4e, ftLastAccessTime.dwHighDateTime=0x1ca043f, ftLastWriteTime.dwLowDateTime=0x288ad099, ftLastWriteTime.dwHighDateTime=0x1ca043f, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x381f40 [0094.754] FindNextFileW (in: hFindFile=0x381f40, lpFindFileData=0x31e56c | out: lpFindFileData=0x31e56c*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0xfdb0c77c, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x28305c4e, ftLastAccessTime.dwHighDateTime=0x1ca043f, ftLastWriteTime.dwLowDateTime=0x288ad099, ftLastWriteTime.dwHighDateTime=0x1ca043f, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0094.755] FindNextFileW (in: hFindFile=0x381f40, lpFindFileData=0x31e56c | out: lpFindFileData=0x31e56c*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0x28305c4e, ftCreationTime.dwHighDateTime=0x1ca043f, ftLastAccessTime.dwLowDateTime=0x28305c4e, ftLastAccessTime.dwHighDateTime=0x1ca043f, ftLastWriteTime.dwLowDateTime=0x288ad099, ftLastWriteTime.dwHighDateTime=0x1ca043f, nFileSizeHigh=0x0, nFileSizeLow=0x17c, dwReserved0=0x0, dwReserved1=0x0, cFileName="desktop.ini", cAlternateFileName="")) returned 1 [0094.755] FindNextFileW (in: hFindFile=0x381f40, lpFindFileData=0x31e56c | out: lpFindFileData=0x31e56c*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x7fffaad0, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x8031a7b6, ftLastAccessTime.dwHighDateTime=0x1ca0444, ftLastWriteTime.dwLowDateTime=0x28a4ffbc, ftLastWriteTime.dwHighDateTime=0x1ca043f, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Sample Music", cAlternateFileName="SAMPLE~1")) returned 1 [0094.755] FindNextFileW (in: hFindFile=0x381f40, lpFindFileData=0x31e56c | out: lpFindFileData=0x31e56c*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0094.755] FindClose (in: hFindFile=0x381f40 | out: hFindFile=0x381f40) returned 1 [0094.755] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e7f4) returned 1 [0094.755] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e800) returned 1 [0094.755] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e7bc) returned 1 [0094.755] GetFullPathNameW (in: lpFileName="C:\\Users\\Public\\Music\\Sample Music", nBufferLength=0x105, lpBuffer=0x31e2c4, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\Public\\Music\\Sample Music", lpFilePart=0x0) returned 0x22 [0094.755] GetFullPathNameW (in: lpFileName="C:\\Users\\Public\\Music\\Sample Music\\", nBufferLength=0x105, lpBuffer=0x31e298, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\Public\\Music\\Sample Music\\", lpFilePart=0x0) returned 0x23 [0094.755] FindFirstFileW (in: lpFileName="C:\\Users\\Public\\Music\\Sample Music\\*", lpFindFileData=0x31e4e4 | out: lpFindFileData=0x31e4e4*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x7fffaad0, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x8031a7b6, ftLastAccessTime.dwHighDateTime=0x1ca0444, ftLastWriteTime.dwLowDateTime=0x28a4ffbc, ftLastWriteTime.dwHighDateTime=0x1ca043f, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x381f40 [0094.758] FindNextFileW (in: hFindFile=0x381f40, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x7fffaad0, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x8031a7b6, ftLastAccessTime.dwHighDateTime=0x1ca0444, ftLastWriteTime.dwLowDateTime=0x28a4ffbc, ftLastWriteTime.dwHighDateTime=0x1ca043f, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0094.758] FindNextFileW (in: hFindFile=0x381f40, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0x8031a7b6, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x7be84d57, ftLastAccessTime.dwHighDateTime=0x1ca0444, ftLastWriteTime.dwLowDateTime=0x28a4ffbc, ftLastWriteTime.dwHighDateTime=0x1ca043f, nFileSizeHigh=0x0, nFileSizeLow=0x24a, dwReserved0=0x0, dwReserved1=0x0, cFileName="desktop.ini", cAlternateFileName="")) returned 1 [0094.758] FindNextFileW (in: hFindFile=0x381f40, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8031a7b6, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x7be5ebf7, ftLastAccessTime.dwHighDateTime=0x1ca0444, ftLastWriteTime.dwLowDateTime=0x7be84d57, ftLastWriteTime.dwHighDateTime=0x1ca0444, nFileSizeHigh=0x0, nFileSizeLow=0x8064f1, dwReserved0=0x0, dwReserved1=0x0, cFileName="Kalimba.mp3", cAlternateFileName="")) returned 1 [0094.758] FindNextFileW (in: hFindFile=0x381f40, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8031a7b6, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x7be38a97, ftLastAccessTime.dwHighDateTime=0x1ca0444, ftLastWriteTime.dwLowDateTime=0x7be5ebf7, ftLastWriteTime.dwHighDateTime=0x1ca0444, nFileSizeHigh=0x0, nFileSizeLow=0x3ec5d2, dwReserved0=0x0, dwReserved1=0x0, cFileName="Maid with the Flaxen Hair.mp3", cAlternateFileName="MAIDWI~1.MP3")) returned 1 [0094.758] FindNextFileW (in: hFindFile=0x381f40, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x802f4656, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x7be38a97, ftLastAccessTime.dwHighDateTime=0x1ca0444, ftLastWriteTime.dwLowDateTime=0x7be38a97, ftLastWriteTime.dwHighDateTime=0x1ca0444, nFileSizeHigh=0x0, nFileSizeLow=0x49e459, dwReserved0=0x0, dwReserved1=0x0, cFileName="Sleep Away.mp3", cAlternateFileName="SLEEPA~1.MP3")) returned 1 [0094.758] FindNextFileW (in: hFindFile=0x381f40, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0094.758] FindClose (in: hFindFile=0x381f40 | out: hFindFile=0x381f40) returned 1 [0094.759] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e77c) returned 1 [0094.759] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e788) returned 1 [0094.759] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e7bc) returned 1 [0094.759] GetFullPathNameW (in: lpFileName="C:\\Users\\Public\\Music\\Sample Music", nBufferLength=0x105, lpBuffer=0x31e2c4, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\Public\\Music\\Sample Music", lpFilePart=0x0) returned 0x22 [0094.759] GetFullPathNameW (in: lpFileName="C:\\Users\\Public\\Music\\Sample Music\\", nBufferLength=0x105, lpBuffer=0x31e298, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\Public\\Music\\Sample Music\\", lpFilePart=0x0) returned 0x23 [0094.759] FindFirstFileW (in: lpFileName="C:\\Users\\Public\\Music\\Sample Music\\*", lpFindFileData=0x31e4e4 | out: lpFindFileData=0x31e4e4*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x7fffaad0, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x8031a7b6, ftLastAccessTime.dwHighDateTime=0x1ca0444, ftLastWriteTime.dwLowDateTime=0x28a4ffbc, ftLastWriteTime.dwHighDateTime=0x1ca043f, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x381f40 [0094.760] FindNextFileW (in: hFindFile=0x381f40, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x7fffaad0, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x8031a7b6, ftLastAccessTime.dwHighDateTime=0x1ca0444, ftLastWriteTime.dwLowDateTime=0x28a4ffbc, ftLastWriteTime.dwHighDateTime=0x1ca043f, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0094.760] FindNextFileW (in: hFindFile=0x381f40, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0x8031a7b6, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x7be84d57, ftLastAccessTime.dwHighDateTime=0x1ca0444, ftLastWriteTime.dwLowDateTime=0x28a4ffbc, ftLastWriteTime.dwHighDateTime=0x1ca043f, nFileSizeHigh=0x0, nFileSizeLow=0x24a, dwReserved0=0x0, dwReserved1=0x0, cFileName="desktop.ini", cAlternateFileName="")) returned 1 [0094.760] FindNextFileW (in: hFindFile=0x381f40, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8031a7b6, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x7be5ebf7, ftLastAccessTime.dwHighDateTime=0x1ca0444, ftLastWriteTime.dwLowDateTime=0x7be84d57, ftLastWriteTime.dwHighDateTime=0x1ca0444, nFileSizeHigh=0x0, nFileSizeLow=0x8064f1, dwReserved0=0x0, dwReserved1=0x0, cFileName="Kalimba.mp3", cAlternateFileName="")) returned 1 [0094.760] FindNextFileW (in: hFindFile=0x381f40, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8031a7b6, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x7be38a97, ftLastAccessTime.dwHighDateTime=0x1ca0444, ftLastWriteTime.dwLowDateTime=0x7be5ebf7, ftLastWriteTime.dwHighDateTime=0x1ca0444, nFileSizeHigh=0x0, nFileSizeLow=0x3ec5d2, dwReserved0=0x0, dwReserved1=0x0, cFileName="Maid with the Flaxen Hair.mp3", cAlternateFileName="MAIDWI~1.MP3")) returned 1 [0094.760] FindNextFileW (in: hFindFile=0x381f40, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x802f4656, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x7be38a97, ftLastAccessTime.dwHighDateTime=0x1ca0444, ftLastWriteTime.dwLowDateTime=0x7be38a97, ftLastWriteTime.dwHighDateTime=0x1ca0444, nFileSizeHigh=0x0, nFileSizeLow=0x49e459, dwReserved0=0x0, dwReserved1=0x0, cFileName="Sleep Away.mp3", cAlternateFileName="SLEEPA~1.MP3")) returned 1 [0094.760] FindNextFileW (in: hFindFile=0x381f40, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x802f4656, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x7be38a97, ftLastAccessTime.dwHighDateTime=0x1ca0444, ftLastWriteTime.dwLowDateTime=0x7be38a97, ftLastWriteTime.dwHighDateTime=0x1ca0444, nFileSizeHigh=0x0, nFileSizeLow=0x49e459, dwReserved0=0x0, dwReserved1=0x0, cFileName="Sleep Away.mp3", cAlternateFileName="SLEEPA~1.MP3")) returned 0 [0094.760] FindClose (in: hFindFile=0x381f40 | out: hFindFile=0x381f40) returned 1 [0094.761] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e77c) returned 1 [0094.761] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e788) returned 1 [0094.761] GetFullPathNameW (in: lpFileName="C:\\Users\\Public\\Music\\Sample Music\\Kalimba.mp3", nBufferLength=0x105, lpBuffer=0x31e194, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\Public\\Music\\Sample Music\\Kalimba.mp3", lpFilePart=0x0) returned 0x2e [0094.761] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e688) returned 1 [0094.761] CreateFileW (lpFileName="C:\\Users\\Public\\Music\\Sample Music\\Kalimba.mp3" (normalized: "c:\\users\\public\\music\\sample music\\kalimba.mp3"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x178 [0094.763] GetFileType (hFile=0x178) returned 0x1 [0094.763] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e684) returned 1 [0094.763] GetFileType (hFile=0x178) returned 0x1 [0094.763] GetFileSize (in: hFile=0x178, lpFileSizeHigh=0x31e790 | out: lpFileSizeHigh=0x31e790*=0x0) returned 0x8064f1 [0094.763] ReadFile (in: hFile=0x178, lpBuffer=0x3bdebc0, nNumberOfBytesToRead=0x8064f1, lpNumberOfBytesRead=0x31e73c, lpOverlapped=0x0 | out: lpBuffer=0x3bdebc0*, lpNumberOfBytesRead=0x31e73c*=0x8064f1, lpOverlapped=0x0) returned 1 [0094.981] CloseHandle (hObject=0x178) returned 1 [0096.394] GetFullPathNameW (in: lpFileName="C:\\Users\\Public\\Music\\Sample Music\\Kalimba.mp3", nBufferLength=0x105, lpBuffer=0x31e180, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\Public\\Music\\Sample Music\\Kalimba.mp3", lpFilePart=0x0) returned 0x2e [0096.394] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e674) returned 1 [0096.394] CreateFileW (lpFileName="C:\\Users\\Public\\Music\\Sample Music\\Kalimba.mp3" (normalized: "c:\\users\\public\\music\\sample music\\kalimba.mp3"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x178 [0096.397] GetFileType (hFile=0x178) returned 0x1 [0096.397] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e670) returned 1 [0096.397] GetFileType (hFile=0x178) returned 0x1 [0096.397] WriteFile (in: hFile=0x178, lpBuffer=0x9a3da18*, nNumberOfBytesToWrite=0x806500, lpNumberOfBytesWritten=0x31e730, lpOverlapped=0x0 | out: lpBuffer=0x9a3da18*, lpNumberOfBytesWritten=0x31e730*=0x806500, lpOverlapped=0x0) returned 1 [0096.604] CloseHandle (hObject=0x178) returned 1 [0096.604] GetFullPathNameW (in: lpFileName="C:\\Users\\Public\\Music\\Sample Music\\Kalimba.mp3", nBufferLength=0x105, lpBuffer=0x31e2b4, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\Public\\Music\\Sample Music\\Kalimba.mp3", lpFilePart=0x0) returned 0x2e [0096.605] GetFullPathNameW (in: lpFileName="C:\\Users\\Public\\Music\\Sample Music\\Kalimba.mp3", nBufferLength=0x105, lpBuffer=0x31e2b4, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\Public\\Music\\Sample Music\\Kalimba.mp3", lpFilePart=0x0) returned 0x2e [0096.605] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e714) returned 1 [0096.605] GetFileAttributesExW (in: lpFileName="C:\\Users\\Public\\Music\\Sample Music\\Kalimba.mp3" (normalized: "c:\\users\\public\\music\\sample music\\kalimba.mp3"), fInfoLevelId=0x0, lpFileInformation=0x31e790 | out: lpFileInformation=0x31e790*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8031a7b6, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x7be5ebf7, ftLastAccessTime.dwHighDateTime=0x1ca0444, ftLastWriteTime.dwLowDateTime=0x1d05e5a0, ftLastWriteTime.dwHighDateTime=0x1d6eb7f, nFileSizeHigh=0x0, nFileSizeLow=0x806500)) returned 1 [0096.605] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e710) returned 1 [0096.605] MoveFileW (lpExistingFileName="C:\\Users\\Public\\Music\\Sample Music\\Kalimba.mp3" (normalized: "c:\\users\\public\\music\\sample music\\kalimba.mp3"), lpNewFileName="C:\\Users\\Public\\Music\\Sample Music\\Kalimba.mp3" (normalized: "c:\\users\\public\\music\\sample music\\kalimba.mp3")) returned 1 [0096.605] GetFullPathNameW (in: lpFileName="C:\\Users\\Public\\Music\\Sample Music\\Maid with the Flaxen Hair.mp3", nBufferLength=0x105, lpBuffer=0x31e194, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\Public\\Music\\Sample Music\\Maid with the Flaxen Hair.mp3", lpFilePart=0x0) returned 0x40 [0096.605] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e688) returned 1 [0096.605] CreateFileW (lpFileName="C:\\Users\\Public\\Music\\Sample Music\\Maid with the Flaxen Hair.mp3" (normalized: "c:\\users\\public\\music\\sample music\\maid with the flaxen hair.mp3"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x178 [0096.605] GetFileType (hFile=0x178) returned 0x1 [0096.605] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e684) returned 1 [0096.606] GetFileType (hFile=0x178) returned 0x1 [0096.606] GetFileSize (in: hFile=0x178, lpFileSizeHigh=0x31e790 | out: lpFileSizeHigh=0x31e790*=0x0) returned 0x3ec5d2 [0096.609] ReadFile (in: hFile=0x178, lpBuffer=0x36194b0, nNumberOfBytesToRead=0x3ec5d2, lpNumberOfBytesRead=0x31e73c, lpOverlapped=0x0 | out: lpBuffer=0x36194b0*, lpNumberOfBytesRead=0x31e73c*=0x3ec5d2, lpOverlapped=0x0) returned 1 [0096.674] CloseHandle (hObject=0x178) returned 1 [0097.051] GetFullPathNameW (in: lpFileName="C:\\Users\\Public\\Music\\Sample Music\\Maid with the Flaxen Hair.mp3", nBufferLength=0x105, lpBuffer=0x31e180, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\Public\\Music\\Sample Music\\Maid with the Flaxen Hair.mp3", lpFilePart=0x0) returned 0x40 [0097.051] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e674) returned 1 [0097.051] CreateFileW (lpFileName="C:\\Users\\Public\\Music\\Sample Music\\Maid with the Flaxen Hair.mp3" (normalized: "c:\\users\\public\\music\\sample music\\maid with the flaxen hair.mp3"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x178 [0097.052] GetFileType (hFile=0x178) returned 0x1 [0097.052] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e670) returned 1 [0097.052] GetFileType (hFile=0x178) returned 0x1 [0097.052] WriteFile (in: hFile=0x178, lpBuffer=0x3a05aa0*, nNumberOfBytesToWrite=0x3ec5e0, lpNumberOfBytesWritten=0x31e730, lpOverlapped=0x0 | out: lpBuffer=0x3a05aa0*, lpNumberOfBytesWritten=0x31e730*=0x3ec5e0, lpOverlapped=0x0) returned 1 [0097.129] CloseHandle (hObject=0x178) returned 1 [0097.129] GetFullPathNameW (in: lpFileName="C:\\Users\\Public\\Music\\Sample Music\\Maid with the Flaxen Hair.mp3", nBufferLength=0x105, lpBuffer=0x31e2b4, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\Public\\Music\\Sample Music\\Maid with the Flaxen Hair.mp3", lpFilePart=0x0) returned 0x40 [0097.129] GetFullPathNameW (in: lpFileName="C:\\Users\\Public\\Music\\Sample Music\\Maid with the Flaxen Hair.mp3", nBufferLength=0x105, lpBuffer=0x31e2b4, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\Public\\Music\\Sample Music\\Maid with the Flaxen Hair.mp3", lpFilePart=0x0) returned 0x40 [0097.129] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e714) returned 1 [0097.129] GetFileAttributesExW (in: lpFileName="C:\\Users\\Public\\Music\\Sample Music\\Maid with the Flaxen Hair.mp3" (normalized: "c:\\users\\public\\music\\sample music\\maid with the flaxen hair.mp3"), fInfoLevelId=0x0, lpFileInformation=0x31e790 | out: lpFileInformation=0x31e790*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8031a7b6, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x7be38a97, ftLastAccessTime.dwHighDateTime=0x1ca0444, ftLastWriteTime.dwLowDateTime=0x1d56d460, ftLastWriteTime.dwHighDateTime=0x1d6eb7f, nFileSizeHigh=0x0, nFileSizeLow=0x3ec5e0)) returned 1 [0097.129] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e710) returned 1 [0097.129] MoveFileW (lpExistingFileName="C:\\Users\\Public\\Music\\Sample Music\\Maid with the Flaxen Hair.mp3" (normalized: "c:\\users\\public\\music\\sample music\\maid with the flaxen hair.mp3"), lpNewFileName="C:\\Users\\Public\\Music\\Sample Music\\Maid with the Flaxen Hair.mp3" (normalized: "c:\\users\\public\\music\\sample music\\maid with the flaxen hair.mp3")) returned 1 [0097.130] GetFullPathNameW (in: lpFileName="C:\\Users\\Public\\Music\\Sample Music\\Sleep Away.mp3", nBufferLength=0x105, lpBuffer=0x31e194, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\Public\\Music\\Sample Music\\Sleep Away.mp3", lpFilePart=0x0) returned 0x31 [0097.130] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e688) returned 1 [0097.130] CreateFileW (lpFileName="C:\\Users\\Public\\Music\\Sample Music\\Sleep Away.mp3" (normalized: "c:\\users\\public\\music\\sample music\\sleep away.mp3"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x178 [0097.130] GetFileType (hFile=0x178) returned 0x1 [0097.130] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e684) returned 1 [0097.130] GetFileType (hFile=0x178) returned 0x1 [0097.130] GetFileSize (in: hFile=0x178, lpFileSizeHigh=0x31e790 | out: lpFileSizeHigh=0x31e790*=0x0) returned 0x49e459 [0097.130] ReadFile (in: hFile=0x178, lpBuffer=0x3df20a0, nNumberOfBytesToRead=0x49e459, lpNumberOfBytesRead=0x31e73c, lpOverlapped=0x0 | out: lpBuffer=0x3df20a0*, lpNumberOfBytesRead=0x31e73c*=0x49e459, lpOverlapped=0x0) returned 1 [0097.241] CloseHandle (hObject=0x178) returned 1 [0097.477] GetFullPathNameW (in: lpFileName="C:\\Users\\Public\\Music\\Sample Music\\Sleep Away.mp3", nBufferLength=0x105, lpBuffer=0x31e180, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\Public\\Music\\Sample Music\\Sleep Away.mp3", lpFilePart=0x0) returned 0x31 [0097.477] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e674) returned 1 [0097.477] CreateFileW (lpFileName="C:\\Users\\Public\\Music\\Sample Music\\Sleep Away.mp3" (normalized: "c:\\users\\public\\music\\sample music\\sleep away.mp3"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x178 [0097.483] GetFileType (hFile=0x178) returned 0x1 [0097.483] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e670) returned 1 [0097.483] GetFileType (hFile=0x178) returned 0x1 [0097.483] WriteFile (in: hFile=0x178, lpBuffer=0x7761018*, nNumberOfBytesToWrite=0x49e460, lpNumberOfBytesWritten=0x31e730, lpOverlapped=0x0 | out: lpBuffer=0x7761018*, lpNumberOfBytesWritten=0x31e730*=0x49e460, lpOverlapped=0x0) returned 1 [0097.563] CloseHandle (hObject=0x178) returned 1 [0097.563] GetFullPathNameW (in: lpFileName="C:\\Users\\Public\\Music\\Sample Music\\Sleep Away.mp3", nBufferLength=0x105, lpBuffer=0x31e2b4, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\Public\\Music\\Sample Music\\Sleep Away.mp3", lpFilePart=0x0) returned 0x31 [0097.563] GetFullPathNameW (in: lpFileName="C:\\Users\\Public\\Music\\Sample Music\\Sleep Away.mp3", nBufferLength=0x105, lpBuffer=0x31e2b4, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\Public\\Music\\Sample Music\\Sleep Away.mp3", lpFilePart=0x0) returned 0x31 [0097.563] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e714) returned 1 [0097.563] GetFileAttributesExW (in: lpFileName="C:\\Users\\Public\\Music\\Sample Music\\Sleep Away.mp3" (normalized: "c:\\users\\public\\music\\sample music\\sleep away.mp3"), fInfoLevelId=0x0, lpFileInformation=0x31e790 | out: lpFileInformation=0x31e790*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x802f4656, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x7be38a97, ftLastAccessTime.dwHighDateTime=0x1ca0444, ftLastWriteTime.dwLowDateTime=0x1d997ae0, ftLastWriteTime.dwHighDateTime=0x1d6eb7f, nFileSizeHigh=0x0, nFileSizeLow=0x49e460)) returned 1 [0097.563] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e710) returned 1 [0097.563] MoveFileW (lpExistingFileName="C:\\Users\\Public\\Music\\Sample Music\\Sleep Away.mp3" (normalized: "c:\\users\\public\\music\\sample music\\sleep away.mp3"), lpNewFileName="C:\\Users\\Public\\Music\\Sample Music\\Sleep Away.mp3" (normalized: "c:\\users\\public\\music\\sample music\\sleep away.mp3")) returned 1 [0097.564] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e834) returned 1 [0097.564] GetFullPathNameW (in: lpFileName="C:\\Users\\Public\\Pictures", nBufferLength=0x105, lpBuffer=0x31e33c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\Public\\Pictures", lpFilePart=0x0) returned 0x18 [0097.564] GetFullPathNameW (in: lpFileName="C:\\Users\\Public\\Pictures\\", nBufferLength=0x105, lpBuffer=0x31e310, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\Public\\Pictures\\", lpFilePart=0x0) returned 0x19 [0097.564] FindFirstFileW (in: lpFileName="C:\\Users\\Public\\Pictures\\*", lpFindFileData=0x31e55c | out: lpFindFileData=0x31e55c*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0xfdb0c77c, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x282dfaee, ftLastAccessTime.dwHighDateTime=0x1ca043f, ftLastWriteTime.dwLowDateTime=0x288ad099, ftLastWriteTime.dwHighDateTime=0x1ca043f, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x381c40 [0097.564] FindNextFileW (in: hFindFile=0x381c40, lpFindFileData=0x31e56c | out: lpFindFileData=0x31e56c*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0xfdb0c77c, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x282dfaee, ftLastAccessTime.dwHighDateTime=0x1ca043f, ftLastWriteTime.dwLowDateTime=0x288ad099, ftLastWriteTime.dwHighDateTime=0x1ca043f, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0097.564] FindNextFileW (in: hFindFile=0x381c40, lpFindFileData=0x31e56c | out: lpFindFileData=0x31e56c*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0x282dfaee, ftCreationTime.dwHighDateTime=0x1ca043f, ftLastAccessTime.dwLowDateTime=0x282dfaee, ftLastAccessTime.dwHighDateTime=0x1ca043f, ftLastWriteTime.dwLowDateTime=0x288ad099, ftLastWriteTime.dwHighDateTime=0x1ca043f, nFileSizeHigh=0x0, nFileSizeLow=0x17c, dwReserved0=0x0, dwReserved1=0x0, cFileName="desktop.ini", cAlternateFileName="")) returned 1 [0097.564] FindNextFileW (in: hFindFile=0x381c40, lpFindFileData=0x31e56c | out: lpFindFileData=0x31e56c*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x7fffaad0, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x80340916, ftLastAccessTime.dwHighDateTime=0x1ca0444, ftLastWriteTime.dwLowDateTime=0x288d31f9, ftLastWriteTime.dwHighDateTime=0x1ca043f, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Sample Pictures", cAlternateFileName="SAMPLE~1")) returned 1 [0097.564] FindNextFileW (in: hFindFile=0x381c40, lpFindFileData=0x31e56c | out: lpFindFileData=0x31e56c*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x7fffaad0, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x80340916, ftLastAccessTime.dwHighDateTime=0x1ca0444, ftLastWriteTime.dwLowDateTime=0x288d31f9, ftLastWriteTime.dwHighDateTime=0x1ca043f, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Sample Pictures", cAlternateFileName="SAMPLE~1")) returned 0 [0097.564] FindClose (in: hFindFile=0x381c40 | out: hFindFile=0x381c40) returned 1 [0097.565] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e7f4) returned 1 [0097.565] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e800) returned 1 [0097.565] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e834) returned 1 [0097.565] GetFullPathNameW (in: lpFileName="C:\\Users\\Public\\Pictures", nBufferLength=0x105, lpBuffer=0x31e33c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\Public\\Pictures", lpFilePart=0x0) returned 0x18 [0097.565] GetFullPathNameW (in: lpFileName="C:\\Users\\Public\\Pictures\\", nBufferLength=0x105, lpBuffer=0x31e310, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\Public\\Pictures\\", lpFilePart=0x0) returned 0x19 [0097.565] FindFirstFileW (in: lpFileName="C:\\Users\\Public\\Pictures\\*", lpFindFileData=0x31e55c | out: lpFindFileData=0x31e55c*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0xfdb0c77c, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x282dfaee, ftLastAccessTime.dwHighDateTime=0x1ca043f, ftLastWriteTime.dwLowDateTime=0x288ad099, ftLastWriteTime.dwHighDateTime=0x1ca043f, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x381c40 [0097.565] FindNextFileW (in: hFindFile=0x381c40, lpFindFileData=0x31e56c | out: lpFindFileData=0x31e56c*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0xfdb0c77c, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x282dfaee, ftLastAccessTime.dwHighDateTime=0x1ca043f, ftLastWriteTime.dwLowDateTime=0x288ad099, ftLastWriteTime.dwHighDateTime=0x1ca043f, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0097.565] FindNextFileW (in: hFindFile=0x381c40, lpFindFileData=0x31e56c | out: lpFindFileData=0x31e56c*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0x282dfaee, ftCreationTime.dwHighDateTime=0x1ca043f, ftLastAccessTime.dwLowDateTime=0x282dfaee, ftLastAccessTime.dwHighDateTime=0x1ca043f, ftLastWriteTime.dwLowDateTime=0x288ad099, ftLastWriteTime.dwHighDateTime=0x1ca043f, nFileSizeHigh=0x0, nFileSizeLow=0x17c, dwReserved0=0x0, dwReserved1=0x0, cFileName="desktop.ini", cAlternateFileName="")) returned 1 [0097.565] FindNextFileW (in: hFindFile=0x381c40, lpFindFileData=0x31e56c | out: lpFindFileData=0x31e56c*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x7fffaad0, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x80340916, ftLastAccessTime.dwHighDateTime=0x1ca0444, ftLastWriteTime.dwLowDateTime=0x288d31f9, ftLastWriteTime.dwHighDateTime=0x1ca043f, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Sample Pictures", cAlternateFileName="SAMPLE~1")) returned 1 [0097.565] FindNextFileW (in: hFindFile=0x381c40, lpFindFileData=0x31e56c | out: lpFindFileData=0x31e56c*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0097.565] FindClose (in: hFindFile=0x381c40 | out: hFindFile=0x381c40) returned 1 [0097.565] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e7f4) returned 1 [0097.565] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e800) returned 1 [0097.566] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e7bc) returned 1 [0097.566] GetFullPathNameW (in: lpFileName="C:\\Users\\Public\\Pictures\\Sample Pictures", nBufferLength=0x105, lpBuffer=0x31e2c4, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\Public\\Pictures\\Sample Pictures", lpFilePart=0x0) returned 0x28 [0097.566] GetFullPathNameW (in: lpFileName="C:\\Users\\Public\\Pictures\\Sample Pictures\\", nBufferLength=0x105, lpBuffer=0x31e298, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\Public\\Pictures\\Sample Pictures\\", lpFilePart=0x0) returned 0x29 [0097.566] FindFirstFileW (in: lpFileName="C:\\Users\\Public\\Pictures\\Sample Pictures\\*", lpFindFileData=0x31e4e4 | out: lpFindFileData=0x31e4e4*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x7fffaad0, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x80340916, ftLastAccessTime.dwHighDateTime=0x1ca0444, ftLastWriteTime.dwLowDateTime=0x288d31f9, ftLastWriteTime.dwHighDateTime=0x1ca043f, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x381c40 [0097.575] FindNextFileW (in: hFindFile=0x381c40, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x7fffaad0, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x80340916, ftLastAccessTime.dwHighDateTime=0x1ca0444, ftLastWriteTime.dwLowDateTime=0x288d31f9, ftLastWriteTime.dwHighDateTime=0x1ca043f, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0097.575] FindNextFileW (in: hFindFile=0x381c40, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x80340916, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x7beaaeb8, ftLastAccessTime.dwHighDateTime=0x1ca0444, ftLastWriteTime.dwLowDateTime=0x7beaaeb8, ftLastWriteTime.dwHighDateTime=0x1ca0444, nFileSizeHigh=0x0, nFileSizeLow=0xd6b22, dwReserved0=0x0, dwReserved1=0x0, cFileName="Chrysanthemum.jpg", cAlternateFileName="CHRYSA~1.JPG")) returned 1 [0097.575] FindNextFileW (in: hFindFile=0x381c40, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8031a7b6, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x7be84d57, ftLastAccessTime.dwHighDateTime=0x1ca0444, ftLastWriteTime.dwLowDateTime=0x7be84d57, ftLastWriteTime.dwHighDateTime=0x1ca0444, nFileSizeHigh=0x0, nFileSizeLow=0xce875, dwReserved0=0x0, dwReserved1=0x0, cFileName="Desert.jpg", cAlternateFileName="")) returned 1 [0097.575] FindNextFileW (in: hFindFile=0x381c40, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0x80340916, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x7beaaeb8, ftLastAccessTime.dwHighDateTime=0x1ca0444, ftLastWriteTime.dwLowDateTime=0x288d31f9, ftLastWriteTime.dwHighDateTime=0x1ca043f, nFileSizeHigh=0x0, nFileSizeLow=0x460, dwReserved0=0x0, dwReserved1=0x0, cFileName="desktop.ini", cAlternateFileName="")) returned 1 [0097.575] FindNextFileW (in: hFindFile=0x381c40, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8031a7b6, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x7be84d57, ftLastAccessTime.dwHighDateTime=0x1ca0444, ftLastWriteTime.dwLowDateTime=0x7be84d57, ftLastWriteTime.dwHighDateTime=0x1ca0444, nFileSizeHigh=0x0, nFileSizeLow=0x91554, dwReserved0=0x0, dwReserved1=0x0, cFileName="Hydrangeas.jpg", cAlternateFileName="HYDRAN~1.JPG")) returned 1 [0097.576] FindNextFileW (in: hFindFile=0x381c40, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8031a7b6, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x7beaaeb8, ftLastAccessTime.dwHighDateTime=0x1ca0444, ftLastWriteTime.dwLowDateTime=0x7beaaeb8, ftLastWriteTime.dwHighDateTime=0x1ca0444, nFileSizeHigh=0x0, nFileSizeLow=0xbd616, dwReserved0=0x0, dwReserved1=0x0, cFileName="Jellyfish.jpg", cAlternateFileName="JELLYF~1.JPG")) returned 1 [0097.576] FindNextFileW (in: hFindFile=0x381c40, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8031a7b6, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x7be84d57, ftLastAccessTime.dwHighDateTime=0x1ca0444, ftLastWriteTime.dwLowDateTime=0x7be84d57, ftLastWriteTime.dwHighDateTime=0x1ca0444, nFileSizeHigh=0x0, nFileSizeLow=0xbea1f, dwReserved0=0x0, dwReserved1=0x0, cFileName="Koala.jpg", cAlternateFileName="")) returned 1 [0097.576] FindNextFileW (in: hFindFile=0x381c40, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x80340916, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x7beaaeb8, ftLastAccessTime.dwHighDateTime=0x1ca0444, ftLastWriteTime.dwLowDateTime=0x7beaaeb8, ftLastWriteTime.dwHighDateTime=0x1ca0444, nFileSizeHigh=0x0, nFileSizeLow=0x8907c, dwReserved0=0x0, dwReserved1=0x0, cFileName="Lighthouse.jpg", cAlternateFileName="LIGHTH~1.JPG")) returned 1 [0097.576] FindNextFileW (in: hFindFile=0x381c40, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8031a7b6, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x7be84d57, ftLastAccessTime.dwHighDateTime=0x1ca0444, ftLastWriteTime.dwLowDateTime=0x7beaaeb8, ftLastWriteTime.dwHighDateTime=0x1ca0444, nFileSizeHigh=0x0, nFileSizeLow=0xbde6b, dwReserved0=0x0, dwReserved1=0x0, cFileName="Penguins.jpg", cAlternateFileName="")) returned 1 [0097.576] FindNextFileW (in: hFindFile=0x381c40, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x80340916, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x7beaaeb8, ftLastAccessTime.dwHighDateTime=0x1ca0444, ftLastWriteTime.dwLowDateTime=0x7beaaeb8, ftLastWriteTime.dwHighDateTime=0x1ca0444, nFileSizeHigh=0x0, nFileSizeLow=0x97958, dwReserved0=0x0, dwReserved1=0x0, cFileName="Tulips.jpg", cAlternateFileName="")) returned 1 [0097.576] FindNextFileW (in: hFindFile=0x381c40, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0097.576] FindClose (in: hFindFile=0x381c40 | out: hFindFile=0x381c40) returned 1 [0097.577] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e77c) returned 1 [0097.577] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e788) returned 1 [0097.577] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e7bc) returned 1 [0097.577] GetFullPathNameW (in: lpFileName="C:\\Users\\Public\\Pictures\\Sample Pictures", nBufferLength=0x105, lpBuffer=0x31e2c4, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\Public\\Pictures\\Sample Pictures", lpFilePart=0x0) returned 0x28 [0097.577] GetFullPathNameW (in: lpFileName="C:\\Users\\Public\\Pictures\\Sample Pictures\\", nBufferLength=0x105, lpBuffer=0x31e298, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\Public\\Pictures\\Sample Pictures\\", lpFilePart=0x0) returned 0x29 [0097.577] FindFirstFileW (in: lpFileName="C:\\Users\\Public\\Pictures\\Sample Pictures\\*", lpFindFileData=0x31e4e4 | out: lpFindFileData=0x31e4e4*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x7fffaad0, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x80340916, ftLastAccessTime.dwHighDateTime=0x1ca0444, ftLastWriteTime.dwLowDateTime=0x288d31f9, ftLastWriteTime.dwHighDateTime=0x1ca043f, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x381c40 [0097.578] FindNextFileW (in: hFindFile=0x381c40, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x7fffaad0, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x80340916, ftLastAccessTime.dwHighDateTime=0x1ca0444, ftLastWriteTime.dwLowDateTime=0x288d31f9, ftLastWriteTime.dwHighDateTime=0x1ca043f, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0097.578] FindNextFileW (in: hFindFile=0x381c40, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x80340916, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x7beaaeb8, ftLastAccessTime.dwHighDateTime=0x1ca0444, ftLastWriteTime.dwLowDateTime=0x7beaaeb8, ftLastWriteTime.dwHighDateTime=0x1ca0444, nFileSizeHigh=0x0, nFileSizeLow=0xd6b22, dwReserved0=0x0, dwReserved1=0x0, cFileName="Chrysanthemum.jpg", cAlternateFileName="CHRYSA~1.JPG")) returned 1 [0097.578] FindNextFileW (in: hFindFile=0x381c40, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8031a7b6, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x7be84d57, ftLastAccessTime.dwHighDateTime=0x1ca0444, ftLastWriteTime.dwLowDateTime=0x7be84d57, ftLastWriteTime.dwHighDateTime=0x1ca0444, nFileSizeHigh=0x0, nFileSizeLow=0xce875, dwReserved0=0x0, dwReserved1=0x0, cFileName="Desert.jpg", cAlternateFileName="")) returned 1 [0097.578] FindNextFileW (in: hFindFile=0x381c40, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0x80340916, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x7beaaeb8, ftLastAccessTime.dwHighDateTime=0x1ca0444, ftLastWriteTime.dwLowDateTime=0x288d31f9, ftLastWriteTime.dwHighDateTime=0x1ca043f, nFileSizeHigh=0x0, nFileSizeLow=0x460, dwReserved0=0x0, dwReserved1=0x0, cFileName="desktop.ini", cAlternateFileName="")) returned 1 [0097.578] FindNextFileW (in: hFindFile=0x381c40, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8031a7b6, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x7be84d57, ftLastAccessTime.dwHighDateTime=0x1ca0444, ftLastWriteTime.dwLowDateTime=0x7be84d57, ftLastWriteTime.dwHighDateTime=0x1ca0444, nFileSizeHigh=0x0, nFileSizeLow=0x91554, dwReserved0=0x0, dwReserved1=0x0, cFileName="Hydrangeas.jpg", cAlternateFileName="HYDRAN~1.JPG")) returned 1 [0097.579] FindNextFileW (in: hFindFile=0x381c40, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8031a7b6, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x7beaaeb8, ftLastAccessTime.dwHighDateTime=0x1ca0444, ftLastWriteTime.dwLowDateTime=0x7beaaeb8, ftLastWriteTime.dwHighDateTime=0x1ca0444, nFileSizeHigh=0x0, nFileSizeLow=0xbd616, dwReserved0=0x0, dwReserved1=0x0, cFileName="Jellyfish.jpg", cAlternateFileName="JELLYF~1.JPG")) returned 1 [0097.579] FindNextFileW (in: hFindFile=0x381c40, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8031a7b6, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x7be84d57, ftLastAccessTime.dwHighDateTime=0x1ca0444, ftLastWriteTime.dwLowDateTime=0x7be84d57, ftLastWriteTime.dwHighDateTime=0x1ca0444, nFileSizeHigh=0x0, nFileSizeLow=0xbea1f, dwReserved0=0x0, dwReserved1=0x0, cFileName="Koala.jpg", cAlternateFileName="")) returned 1 [0097.579] FindNextFileW (in: hFindFile=0x381c40, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x80340916, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x7beaaeb8, ftLastAccessTime.dwHighDateTime=0x1ca0444, ftLastWriteTime.dwLowDateTime=0x7beaaeb8, ftLastWriteTime.dwHighDateTime=0x1ca0444, nFileSizeHigh=0x0, nFileSizeLow=0x8907c, dwReserved0=0x0, dwReserved1=0x0, cFileName="Lighthouse.jpg", cAlternateFileName="LIGHTH~1.JPG")) returned 1 [0097.579] FindNextFileW (in: hFindFile=0x381c40, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8031a7b6, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x7be84d57, ftLastAccessTime.dwHighDateTime=0x1ca0444, ftLastWriteTime.dwLowDateTime=0x7beaaeb8, ftLastWriteTime.dwHighDateTime=0x1ca0444, nFileSizeHigh=0x0, nFileSizeLow=0xbde6b, dwReserved0=0x0, dwReserved1=0x0, cFileName="Penguins.jpg", cAlternateFileName="")) returned 1 [0097.579] FindNextFileW (in: hFindFile=0x381c40, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x80340916, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x7beaaeb8, ftLastAccessTime.dwHighDateTime=0x1ca0444, ftLastWriteTime.dwLowDateTime=0x7beaaeb8, ftLastWriteTime.dwHighDateTime=0x1ca0444, nFileSizeHigh=0x0, nFileSizeLow=0x97958, dwReserved0=0x0, dwReserved1=0x0, cFileName="Tulips.jpg", cAlternateFileName="")) returned 1 [0097.579] FindNextFileW (in: hFindFile=0x381c40, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x80340916, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x7beaaeb8, ftLastAccessTime.dwHighDateTime=0x1ca0444, ftLastWriteTime.dwLowDateTime=0x7beaaeb8, ftLastWriteTime.dwHighDateTime=0x1ca0444, nFileSizeHigh=0x0, nFileSizeLow=0x97958, dwReserved0=0x0, dwReserved1=0x0, cFileName="Tulips.jpg", cAlternateFileName="")) returned 0 [0097.579] FindClose (in: hFindFile=0x381c40 | out: hFindFile=0x381c40) returned 1 [0097.580] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e77c) returned 1 [0097.580] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e788) returned 1 [0097.580] GetFullPathNameW (in: lpFileName="C:\\Users\\Public\\Pictures\\Sample Pictures\\Chrysanthemum.jpg", nBufferLength=0x105, lpBuffer=0x31e194, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\Public\\Pictures\\Sample Pictures\\Chrysanthemum.jpg", lpFilePart=0x0) returned 0x3a [0097.580] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e688) returned 1 [0097.580] CreateFileW (lpFileName="C:\\Users\\Public\\Pictures\\Sample Pictures\\Chrysanthemum.jpg" (normalized: "c:\\users\\public\\pictures\\sample pictures\\chrysanthemum.jpg"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x178 [0097.583] GetFileType (hFile=0x178) returned 0x1 [0097.583] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e684) returned 1 [0097.584] GetFileType (hFile=0x178) returned 0x1 [0097.584] GetFileSize (in: hFile=0x178, lpFileSizeHigh=0x31e790 | out: lpFileSizeHigh=0x31e790*=0x0) returned 0xd6b22 [0097.584] ReadFile (in: hFile=0x178, lpBuffer=0x3ab7920, nNumberOfBytesToRead=0xd6b22, lpNumberOfBytesRead=0x31e73c, lpOverlapped=0x0 | out: lpBuffer=0x3ab7920*, lpNumberOfBytesRead=0x31e73c*=0xd6b22, lpOverlapped=0x0) returned 1 [0097.591] CloseHandle (hObject=0x178) returned 1 [0097.661] GetFullPathNameW (in: lpFileName="C:\\Users\\Public\\Pictures\\Sample Pictures\\Chrysanthemum.jpg", nBufferLength=0x105, lpBuffer=0x31e180, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\Public\\Pictures\\Sample Pictures\\Chrysanthemum.jpg", lpFilePart=0x0) returned 0x3a [0097.661] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e674) returned 1 [0097.661] CreateFileW (lpFileName="C:\\Users\\Public\\Pictures\\Sample Pictures\\Chrysanthemum.jpg" (normalized: "c:\\users\\public\\pictures\\sample pictures\\chrysanthemum.jpg"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x178 [0097.669] GetFileType (hFile=0x178) returned 0x1 [0097.669] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e670) returned 1 [0097.669] GetFileType (hFile=0x178) returned 0x1 [0097.669] WriteFile (in: hFile=0x178, lpBuffer=0x443db78*, nNumberOfBytesToWrite=0xd6b30, lpNumberOfBytesWritten=0x31e730, lpOverlapped=0x0 | out: lpBuffer=0x443db78*, lpNumberOfBytesWritten=0x31e730*=0xd6b30, lpOverlapped=0x0) returned 1 [0097.682] CloseHandle (hObject=0x178) returned 1 [0097.682] GetFullPathNameW (in: lpFileName="C:\\Users\\Public\\Pictures\\Sample Pictures\\Chrysanthemum.jpg", nBufferLength=0x105, lpBuffer=0x31e2b4, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\Public\\Pictures\\Sample Pictures\\Chrysanthemum.jpg", lpFilePart=0x0) returned 0x3a [0097.683] GetFullPathNameW (in: lpFileName="C:\\Users\\Public\\Pictures\\Sample Pictures\\Chrysanthemum.jpg", nBufferLength=0x105, lpBuffer=0x31e2b4, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\Public\\Pictures\\Sample Pictures\\Chrysanthemum.jpg", lpFilePart=0x0) returned 0x3a [0097.683] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e714) returned 1 [0097.683] GetFileAttributesExW (in: lpFileName="C:\\Users\\Public\\Pictures\\Sample Pictures\\Chrysanthemum.jpg" (normalized: "c:\\users\\public\\pictures\\sample pictures\\chrysanthemum.jpg"), fInfoLevelId=0x0, lpFileInformation=0x31e790 | out: lpFileInformation=0x31e790*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x80340916, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x7beaaeb8, ftLastAccessTime.dwHighDateTime=0x1ca0444, ftLastWriteTime.dwLowDateTime=0x1daa2480, ftLastWriteTime.dwHighDateTime=0x1d6eb7f, nFileSizeHigh=0x0, nFileSizeLow=0xd6b30)) returned 1 [0097.683] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e710) returned 1 [0097.683] MoveFileW (lpExistingFileName="C:\\Users\\Public\\Pictures\\Sample Pictures\\Chrysanthemum.jpg" (normalized: "c:\\users\\public\\pictures\\sample pictures\\chrysanthemum.jpg"), lpNewFileName="C:\\Users\\Public\\Pictures\\Sample Pictures\\Chrysanthemum.jpg" (normalized: "c:\\users\\public\\pictures\\sample pictures\\chrysanthemum.jpg")) returned 1 [0097.683] GetFullPathNameW (in: lpFileName="C:\\Users\\Public\\Pictures\\Sample Pictures\\Desert.jpg", nBufferLength=0x105, lpBuffer=0x31e194, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\Public\\Pictures\\Sample Pictures\\Desert.jpg", lpFilePart=0x0) returned 0x33 [0097.683] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e688) returned 1 [0097.683] CreateFileW (lpFileName="C:\\Users\\Public\\Pictures\\Sample Pictures\\Desert.jpg" (normalized: "c:\\users\\public\\pictures\\sample pictures\\desert.jpg"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x178 [0097.683] GetFileType (hFile=0x178) returned 0x1 [0097.683] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e684) returned 1 [0097.683] GetFileType (hFile=0x178) returned 0x1 [0097.683] GetFileSize (in: hFile=0x178, lpFileSizeHigh=0x31e790 | out: lpFileSizeHigh=0x31e790*=0x0) returned 0xce875 [0097.684] ReadFile (in: hFile=0x178, lpBuffer=0x45146c8, nNumberOfBytesToRead=0xce875, lpNumberOfBytesRead=0x31e73c, lpOverlapped=0x0 | out: lpBuffer=0x45146c8*, lpNumberOfBytesRead=0x31e73c*=0xce875, lpOverlapped=0x0) returned 1 [0097.696] CloseHandle (hObject=0x178) returned 1 [0097.767] GetFullPathNameW (in: lpFileName="C:\\Users\\Public\\Pictures\\Sample Pictures\\Desert.jpg", nBufferLength=0x105, lpBuffer=0x31e180, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\Public\\Pictures\\Sample Pictures\\Desert.jpg", lpFilePart=0x0) returned 0x33 [0097.767] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e674) returned 1 [0097.768] CreateFileW (lpFileName="C:\\Users\\Public\\Pictures\\Sample Pictures\\Desert.jpg" (normalized: "c:\\users\\public\\pictures\\sample pictures\\desert.jpg"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x178 [0097.774] GetFileType (hFile=0x178) returned 0x1 [0097.774] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e670) returned 1 [0097.774] GetFileType (hFile=0x178) returned 0x1 [0097.774] WriteFile (in: hFile=0x178, lpBuffer=0x7d9c598*, nNumberOfBytesToWrite=0xce880, lpNumberOfBytesWritten=0x31e730, lpOverlapped=0x0 | out: lpBuffer=0x7d9c598*, lpNumberOfBytesWritten=0x31e730*=0xce880, lpOverlapped=0x0) returned 1 [0097.787] CloseHandle (hObject=0x178) returned 1 [0097.788] GetFullPathNameW (in: lpFileName="C:\\Users\\Public\\Pictures\\Sample Pictures\\Desert.jpg", nBufferLength=0x105, lpBuffer=0x31e2b4, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\Public\\Pictures\\Sample Pictures\\Desert.jpg", lpFilePart=0x0) returned 0x33 [0097.788] GetFullPathNameW (in: lpFileName="C:\\Users\\Public\\Pictures\\Sample Pictures\\Desert.jpg", nBufferLength=0x105, lpBuffer=0x31e2b4, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\Public\\Pictures\\Sample Pictures\\Desert.jpg", lpFilePart=0x0) returned 0x33 [0097.788] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e714) returned 1 [0097.788] GetFileAttributesExW (in: lpFileName="C:\\Users\\Public\\Pictures\\Sample Pictures\\Desert.jpg" (normalized: "c:\\users\\public\\pictures\\sample pictures\\desert.jpg"), fInfoLevelId=0x0, lpFileInformation=0x31e790 | out: lpFileInformation=0x31e790*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8031a7b6, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x7be84d57, ftLastAccessTime.dwHighDateTime=0x1ca0444, ftLastWriteTime.dwLowDateTime=0x1dbace20, ftLastWriteTime.dwHighDateTime=0x1d6eb7f, nFileSizeHigh=0x0, nFileSizeLow=0xce880)) returned 1 [0097.788] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e710) returned 1 [0097.788] MoveFileW (lpExistingFileName="C:\\Users\\Public\\Pictures\\Sample Pictures\\Desert.jpg" (normalized: "c:\\users\\public\\pictures\\sample pictures\\desert.jpg"), lpNewFileName="C:\\Users\\Public\\Pictures\\Sample Pictures\\Desert.jpg" (normalized: "c:\\users\\public\\pictures\\sample pictures\\desert.jpg")) returned 1 [0097.788] GetFullPathNameW (in: lpFileName="C:\\Users\\Public\\Pictures\\Sample Pictures\\Hydrangeas.jpg", nBufferLength=0x105, lpBuffer=0x31e194, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\Public\\Pictures\\Sample Pictures\\Hydrangeas.jpg", lpFilePart=0x0) returned 0x37 [0097.788] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e688) returned 1 [0097.788] CreateFileW (lpFileName="C:\\Users\\Public\\Pictures\\Sample Pictures\\Hydrangeas.jpg" (normalized: "c:\\users\\public\\pictures\\sample pictures\\hydrangeas.jpg"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x178 [0097.789] GetFileType (hFile=0x178) returned 0x1 [0097.789] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e684) returned 1 [0097.789] GetFileType (hFile=0x178) returned 0x1 [0097.789] GetFileSize (in: hFile=0x178, lpFileSizeHigh=0x31e790 | out: lpFileSizeHigh=0x31e790*=0x0) returned 0x91554 [0097.789] ReadFile (in: hFile=0x178, lpBuffer=0x3d3bae0, nNumberOfBytesToRead=0x91554, lpNumberOfBytesRead=0x31e73c, lpOverlapped=0x0 | out: lpBuffer=0x3d3bae0*, lpNumberOfBytesRead=0x31e73c*=0x91554, lpOverlapped=0x0) returned 1 [0097.796] CloseHandle (hObject=0x178) returned 1 [0097.831] GetFullPathNameW (in: lpFileName="C:\\Users\\Public\\Pictures\\Sample Pictures\\Hydrangeas.jpg", nBufferLength=0x105, lpBuffer=0x31e180, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\Public\\Pictures\\Sample Pictures\\Hydrangeas.jpg", lpFilePart=0x0) returned 0x37 [0097.831] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e674) returned 1 [0097.832] CreateFileW (lpFileName="C:\\Users\\Public\\Pictures\\Sample Pictures\\Hydrangeas.jpg" (normalized: "c:\\users\\public\\pictures\\sample pictures\\hydrangeas.jpg"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x178 [0097.836] GetFileType (hFile=0x178) returned 0x1 [0097.836] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e670) returned 1 [0097.836] GetFileType (hFile=0x178) returned 0x1 [0097.836] WriteFile (in: hFile=0x178, lpBuffer=0x80b03d8*, nNumberOfBytesToWrite=0x91560, lpNumberOfBytesWritten=0x31e730, lpOverlapped=0x0 | out: lpBuffer=0x80b03d8*, lpNumberOfBytesWritten=0x31e730*=0x91560, lpOverlapped=0x0) returned 1 [0097.861] CloseHandle (hObject=0x178) returned 1 [0097.861] GetFullPathNameW (in: lpFileName="C:\\Users\\Public\\Pictures\\Sample Pictures\\Hydrangeas.jpg", nBufferLength=0x105, lpBuffer=0x31e2b4, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\Public\\Pictures\\Sample Pictures\\Hydrangeas.jpg", lpFilePart=0x0) returned 0x37 [0097.861] GetFullPathNameW (in: lpFileName="C:\\Users\\Public\\Pictures\\Sample Pictures\\Hydrangeas.jpg", nBufferLength=0x105, lpBuffer=0x31e2b4, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\Public\\Pictures\\Sample Pictures\\Hydrangeas.jpg", lpFilePart=0x0) returned 0x37 [0097.861] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e714) returned 1 [0097.861] GetFileAttributesExW (in: lpFileName="C:\\Users\\Public\\Pictures\\Sample Pictures\\Hydrangeas.jpg" (normalized: "c:\\users\\public\\pictures\\sample pictures\\hydrangeas.jpg"), fInfoLevelId=0x0, lpFileInformation=0x31e790 | out: lpFileInformation=0x31e790*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8031a7b6, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x7be84d57, ftLastAccessTime.dwHighDateTime=0x1ca0444, ftLastWriteTime.dwLowDateTime=0x1dc6b500, ftLastWriteTime.dwHighDateTime=0x1d6eb7f, nFileSizeHigh=0x0, nFileSizeLow=0x91560)) returned 1 [0097.861] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e710) returned 1 [0097.861] MoveFileW (lpExistingFileName="C:\\Users\\Public\\Pictures\\Sample Pictures\\Hydrangeas.jpg" (normalized: "c:\\users\\public\\pictures\\sample pictures\\hydrangeas.jpg"), lpNewFileName="C:\\Users\\Public\\Pictures\\Sample Pictures\\Hydrangeas.jpg" (normalized: "c:\\users\\public\\pictures\\sample pictures\\hydrangeas.jpg")) returned 1 [0097.861] GetFullPathNameW (in: lpFileName="C:\\Users\\Public\\Pictures\\Sample Pictures\\Jellyfish.jpg", nBufferLength=0x105, lpBuffer=0x31e194, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\Public\\Pictures\\Sample Pictures\\Jellyfish.jpg", lpFilePart=0x0) returned 0x36 [0097.861] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e688) returned 1 [0097.861] CreateFileW (lpFileName="C:\\Users\\Public\\Pictures\\Sample Pictures\\Jellyfish.jpg" (normalized: "c:\\users\\public\\pictures\\sample pictures\\jellyfish.jpg"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x178 [0097.863] GetFileType (hFile=0x178) returned 0x1 [0097.863] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e684) returned 1 [0097.863] GetFileType (hFile=0x178) returned 0x1 [0097.863] GetFileSize (in: hFile=0x178, lpFileSizeHigh=0x31e790 | out: lpFileSizeHigh=0x31e790*=0x0) returned 0xbd616 [0097.864] ReadFile (in: hFile=0x178, lpBuffer=0x8141958, nNumberOfBytesToRead=0xbd616, lpNumberOfBytesRead=0x31e73c, lpOverlapped=0x0 | out: lpBuffer=0x8141958*, lpNumberOfBytesRead=0x31e73c*=0xbd616, lpOverlapped=0x0) returned 1 [0097.875] CloseHandle (hObject=0x178) returned 1 [0097.923] GetFullPathNameW (in: lpFileName="C:\\Users\\Public\\Pictures\\Sample Pictures\\Jellyfish.jpg", nBufferLength=0x105, lpBuffer=0x31e180, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\Public\\Pictures\\Sample Pictures\\Jellyfish.jpg", lpFilePart=0x0) returned 0x36 [0097.923] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e674) returned 1 [0097.923] CreateFileW (lpFileName="C:\\Users\\Public\\Pictures\\Sample Pictures\\Jellyfish.jpg" (normalized: "c:\\users\\public\\pictures\\sample pictures\\jellyfish.jpg"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x178 [0097.929] GetFileType (hFile=0x178) returned 0x1 [0097.929] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e670) returned 1 [0097.929] GetFileType (hFile=0x178) returned 0x1 [0097.929] WriteFile (in: hFile=0x178, lpBuffer=0x7a568b8*, nNumberOfBytesToWrite=0xbd620, lpNumberOfBytesWritten=0x31e730, lpOverlapped=0x0 | out: lpBuffer=0x7a568b8*, lpNumberOfBytesWritten=0x31e730*=0xbd620, lpOverlapped=0x0) returned 1 [0097.940] CloseHandle (hObject=0x178) returned 1 [0097.940] GetFullPathNameW (in: lpFileName="C:\\Users\\Public\\Pictures\\Sample Pictures\\Jellyfish.jpg", nBufferLength=0x105, lpBuffer=0x31e2b4, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\Public\\Pictures\\Sample Pictures\\Jellyfish.jpg", lpFilePart=0x0) returned 0x36 [0097.940] GetFullPathNameW (in: lpFileName="C:\\Users\\Public\\Pictures\\Sample Pictures\\Jellyfish.jpg", nBufferLength=0x105, lpBuffer=0x31e2b4, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\Public\\Pictures\\Sample Pictures\\Jellyfish.jpg", lpFilePart=0x0) returned 0x36 [0097.940] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e714) returned 1 [0097.940] GetFileAttributesExW (in: lpFileName="C:\\Users\\Public\\Pictures\\Sample Pictures\\Jellyfish.jpg" (normalized: "c:\\users\\public\\pictures\\sample pictures\\jellyfish.jpg"), fInfoLevelId=0x0, lpFileInformation=0x31e790 | out: lpFileInformation=0x31e790*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8031a7b6, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x7beaaeb8, ftLastAccessTime.dwHighDateTime=0x1ca0444, ftLastWriteTime.dwLowDateTime=0x1dd29be0, ftLastWriteTime.dwHighDateTime=0x1d6eb7f, nFileSizeHigh=0x0, nFileSizeLow=0xbd620)) returned 1 [0097.940] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e710) returned 1 [0097.940] MoveFileW (lpExistingFileName="C:\\Users\\Public\\Pictures\\Sample Pictures\\Jellyfish.jpg" (normalized: "c:\\users\\public\\pictures\\sample pictures\\jellyfish.jpg"), lpNewFileName="C:\\Users\\Public\\Pictures\\Sample Pictures\\Jellyfish.jpg" (normalized: "c:\\users\\public\\pictures\\sample pictures\\jellyfish.jpg")) returned 1 [0097.941] GetFullPathNameW (in: lpFileName="C:\\Users\\Public\\Pictures\\Sample Pictures\\Koala.jpg", nBufferLength=0x105, lpBuffer=0x31e194, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\Public\\Pictures\\Sample Pictures\\Koala.jpg", lpFilePart=0x0) returned 0x32 [0097.941] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e688) returned 1 [0097.941] CreateFileW (lpFileName="C:\\Users\\Public\\Pictures\\Sample Pictures\\Koala.jpg" (normalized: "c:\\users\\public\\pictures\\sample pictures\\koala.jpg"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x178 [0097.941] GetFileType (hFile=0x178) returned 0x1 [0097.941] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e684) returned 1 [0097.941] GetFileType (hFile=0x178) returned 0x1 [0097.941] GetFileSize (in: hFile=0x178, lpFileSizeHigh=0x31e790 | out: lpFileSizeHigh=0x31e790*=0x0) returned 0xbea1f [0097.946] ReadFile (in: hFile=0x178, lpBuffer=0x36194b0, nNumberOfBytesToRead=0xbea1f, lpNumberOfBytesRead=0x31e73c, lpOverlapped=0x0 | out: lpBuffer=0x36194b0*, lpNumberOfBytesRead=0x31e73c*=0xbea1f, lpOverlapped=0x0) returned 1 [0097.960] CloseHandle (hObject=0x178) returned 1 [0098.040] GetFullPathNameW (in: lpFileName="C:\\Users\\Public\\Pictures\\Sample Pictures\\Koala.jpg", nBufferLength=0x105, lpBuffer=0x31e180, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\Public\\Pictures\\Sample Pictures\\Koala.jpg", lpFilePart=0x0) returned 0x32 [0098.040] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e674) returned 1 [0098.041] CreateFileW (lpFileName="C:\\Users\\Public\\Pictures\\Sample Pictures\\Koala.jpg" (normalized: "c:\\users\\public\\pictures\\sample pictures\\koala.jpg"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x178 [0098.047] GetFileType (hFile=0x178) returned 0x1 [0098.047] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e670) returned 1 [0098.047] GetFileType (hFile=0x178) returned 0x1 [0098.047] WriteFile (in: hFile=0x178, lpBuffer=0x36d7ef0*, nNumberOfBytesToWrite=0xbea20, lpNumberOfBytesWritten=0x31e730, lpOverlapped=0x0 | out: lpBuffer=0x36d7ef0*, lpNumberOfBytesWritten=0x31e730*=0xbea20, lpOverlapped=0x0) returned 1 [0098.058] CloseHandle (hObject=0x178) returned 1 [0098.059] GetFullPathNameW (in: lpFileName="C:\\Users\\Public\\Pictures\\Sample Pictures\\Koala.jpg", nBufferLength=0x105, lpBuffer=0x31e2b4, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\Public\\Pictures\\Sample Pictures\\Koala.jpg", lpFilePart=0x0) returned 0x32 [0098.059] GetFullPathNameW (in: lpFileName="C:\\Users\\Public\\Pictures\\Sample Pictures\\Koala.jpg", nBufferLength=0x105, lpBuffer=0x31e2b4, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\Public\\Pictures\\Sample Pictures\\Koala.jpg", lpFilePart=0x0) returned 0x32 [0098.059] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e714) returned 1 [0098.059] GetFileAttributesExW (in: lpFileName="C:\\Users\\Public\\Pictures\\Sample Pictures\\Koala.jpg" (normalized: "c:\\users\\public\\pictures\\sample pictures\\koala.jpg"), fInfoLevelId=0x0, lpFileInformation=0x31e790 | out: lpFileInformation=0x31e790*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8031a7b6, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x7be84d57, ftLastAccessTime.dwHighDateTime=0x1ca0444, ftLastWriteTime.dwLowDateTime=0x1de34580, ftLastWriteTime.dwHighDateTime=0x1d6eb7f, nFileSizeHigh=0x0, nFileSizeLow=0xbea20)) returned 1 [0098.059] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e710) returned 1 [0098.059] MoveFileW (lpExistingFileName="C:\\Users\\Public\\Pictures\\Sample Pictures\\Koala.jpg" (normalized: "c:\\users\\public\\pictures\\sample pictures\\koala.jpg"), lpNewFileName="C:\\Users\\Public\\Pictures\\Sample Pictures\\Koala.jpg" (normalized: "c:\\users\\public\\pictures\\sample pictures\\koala.jpg")) returned 1 [0098.059] GetFullPathNameW (in: lpFileName="C:\\Users\\Public\\Pictures\\Sample Pictures\\Lighthouse.jpg", nBufferLength=0x105, lpBuffer=0x31e194, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\Public\\Pictures\\Sample Pictures\\Lighthouse.jpg", lpFilePart=0x0) returned 0x37 [0098.059] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e688) returned 1 [0098.059] CreateFileW (lpFileName="C:\\Users\\Public\\Pictures\\Sample Pictures\\Lighthouse.jpg" (normalized: "c:\\users\\public\\pictures\\sample pictures\\lighthouse.jpg"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x178 [0098.060] GetFileType (hFile=0x178) returned 0x1 [0098.060] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e684) returned 1 [0098.060] GetFileType (hFile=0x178) returned 0x1 [0098.060] GetFileSize (in: hFile=0x178, lpFileSizeHigh=0x31e790 | out: lpFileSizeHigh=0x31e790*=0x0) returned 0x8907c [0098.061] ReadFile (in: hFile=0x178, lpBuffer=0x3796930, nNumberOfBytesToRead=0x8907c, lpNumberOfBytesRead=0x31e73c, lpOverlapped=0x0 | out: lpBuffer=0x3796930*, lpNumberOfBytesRead=0x31e73c*=0x8907c, lpOverlapped=0x0) returned 1 [0098.067] CloseHandle (hObject=0x178) returned 1 [0098.133] GetFullPathNameW (in: lpFileName="C:\\Users\\Public\\Pictures\\Sample Pictures\\Lighthouse.jpg", nBufferLength=0x105, lpBuffer=0x31e180, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\Public\\Pictures\\Sample Pictures\\Lighthouse.jpg", lpFilePart=0x0) returned 0x37 [0098.133] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e674) returned 1 [0098.133] CreateFileW (lpFileName="C:\\Users\\Public\\Pictures\\Sample Pictures\\Lighthouse.jpg" (normalized: "c:\\users\\public\\pictures\\sample pictures\\lighthouse.jpg"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x178 [0098.138] GetFileType (hFile=0x178) returned 0x1 [0098.138] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e670) returned 1 [0098.138] GetFileType (hFile=0x178) returned 0x1 [0098.138] WriteFile (in: hFile=0x178, lpBuffer=0x36194b0*, nNumberOfBytesToWrite=0x89080, lpNumberOfBytesWritten=0x31e730, lpOverlapped=0x0 | out: lpBuffer=0x36194b0*, lpNumberOfBytesWritten=0x31e730*=0x89080, lpOverlapped=0x0) returned 1 [0098.147] CloseHandle (hObject=0x178) returned 1 [0098.147] GetFullPathNameW (in: lpFileName="C:\\Users\\Public\\Pictures\\Sample Pictures\\Lighthouse.jpg", nBufferLength=0x105, lpBuffer=0x31e2b4, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\Public\\Pictures\\Sample Pictures\\Lighthouse.jpg", lpFilePart=0x0) returned 0x37 [0098.147] GetFullPathNameW (in: lpFileName="C:\\Users\\Public\\Pictures\\Sample Pictures\\Lighthouse.jpg", nBufferLength=0x105, lpBuffer=0x31e2b4, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\Public\\Pictures\\Sample Pictures\\Lighthouse.jpg", lpFilePart=0x0) returned 0x37 [0098.148] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e714) returned 1 [0098.148] GetFileAttributesExW (in: lpFileName="C:\\Users\\Public\\Pictures\\Sample Pictures\\Lighthouse.jpg" (normalized: "c:\\users\\public\\pictures\\sample pictures\\lighthouse.jpg"), fInfoLevelId=0x0, lpFileInformation=0x31e790 | out: lpFileInformation=0x31e790*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x80340916, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x7beaaeb8, ftLastAccessTime.dwHighDateTime=0x1ca0444, ftLastWriteTime.dwLowDateTime=0x1df18dc0, ftLastWriteTime.dwHighDateTime=0x1d6eb7f, nFileSizeHigh=0x0, nFileSizeLow=0x89080)) returned 1 [0098.148] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e710) returned 1 [0098.148] MoveFileW (lpExistingFileName="C:\\Users\\Public\\Pictures\\Sample Pictures\\Lighthouse.jpg" (normalized: "c:\\users\\public\\pictures\\sample pictures\\lighthouse.jpg"), lpNewFileName="C:\\Users\\Public\\Pictures\\Sample Pictures\\Lighthouse.jpg" (normalized: "c:\\users\\public\\pictures\\sample pictures\\lighthouse.jpg")) returned 1 [0098.148] GetFullPathNameW (in: lpFileName="C:\\Users\\Public\\Pictures\\Sample Pictures\\Penguins.jpg", nBufferLength=0x105, lpBuffer=0x31e194, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\Public\\Pictures\\Sample Pictures\\Penguins.jpg", lpFilePart=0x0) returned 0x35 [0098.148] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e688) returned 1 [0098.148] CreateFileW (lpFileName="C:\\Users\\Public\\Pictures\\Sample Pictures\\Penguins.jpg" (normalized: "c:\\users\\public\\pictures\\sample pictures\\penguins.jpg"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x178 [0098.148] GetFileType (hFile=0x178) returned 0x1 [0098.148] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e684) returned 1 [0098.148] GetFileType (hFile=0x178) returned 0x1 [0098.148] GetFileSize (in: hFile=0x178, lpFileSizeHigh=0x31e790 | out: lpFileSizeHigh=0x31e790*=0x0) returned 0xbde6b [0098.149] ReadFile (in: hFile=0x178, lpBuffer=0x36a2550, nNumberOfBytesToRead=0xbde6b, lpNumberOfBytesRead=0x31e73c, lpOverlapped=0x0 | out: lpBuffer=0x36a2550*, lpNumberOfBytesRead=0x31e73c*=0xbde6b, lpOverlapped=0x0) returned 1 [0098.155] CloseHandle (hObject=0x178) returned 1 [0098.223] GetFullPathNameW (in: lpFileName="C:\\Users\\Public\\Pictures\\Sample Pictures\\Penguins.jpg", nBufferLength=0x105, lpBuffer=0x31e180, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\Public\\Pictures\\Sample Pictures\\Penguins.jpg", lpFilePart=0x0) returned 0x35 [0098.223] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e674) returned 1 [0098.223] CreateFileW (lpFileName="C:\\Users\\Public\\Pictures\\Sample Pictures\\Penguins.jpg" (normalized: "c:\\users\\public\\pictures\\sample pictures\\penguins.jpg"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x178 [0098.229] GetFileType (hFile=0x178) returned 0x1 [0098.229] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e670) returned 1 [0098.229] GetFileType (hFile=0x178) returned 0x1 [0098.229] WriteFile (in: hFile=0x178, lpBuffer=0x37603d8*, nNumberOfBytesToWrite=0xbde70, lpNumberOfBytesWritten=0x31e730, lpOverlapped=0x0 | out: lpBuffer=0x37603d8*, lpNumberOfBytesWritten=0x31e730*=0xbde70, lpOverlapped=0x0) returned 1 [0098.264] CloseHandle (hObject=0x178) returned 1 [0098.264] GetFullPathNameW (in: lpFileName="C:\\Users\\Public\\Pictures\\Sample Pictures\\Penguins.jpg", nBufferLength=0x105, lpBuffer=0x31e2b4, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\Public\\Pictures\\Sample Pictures\\Penguins.jpg", lpFilePart=0x0) returned 0x35 [0098.264] GetFullPathNameW (in: lpFileName="C:\\Users\\Public\\Pictures\\Sample Pictures\\Penguins.jpg", nBufferLength=0x105, lpBuffer=0x31e2b4, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\Public\\Pictures\\Sample Pictures\\Penguins.jpg", lpFilePart=0x0) returned 0x35 [0098.264] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e714) returned 1 [0098.264] GetFileAttributesExW (in: lpFileName="C:\\Users\\Public\\Pictures\\Sample Pictures\\Penguins.jpg" (normalized: "c:\\users\\public\\pictures\\sample pictures\\penguins.jpg"), fInfoLevelId=0x0, lpFileInformation=0x31e790 | out: lpFileInformation=0x31e790*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8031a7b6, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x7be84d57, ftLastAccessTime.dwHighDateTime=0x1ca0444, ftLastWriteTime.dwLowDateTime=0x1e023760, ftLastWriteTime.dwHighDateTime=0x1d6eb7f, nFileSizeHigh=0x0, nFileSizeLow=0xbde70)) returned 1 [0098.264] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e710) returned 1 [0098.264] MoveFileW (lpExistingFileName="C:\\Users\\Public\\Pictures\\Sample Pictures\\Penguins.jpg" (normalized: "c:\\users\\public\\pictures\\sample pictures\\penguins.jpg"), lpNewFileName="C:\\Users\\Public\\Pictures\\Sample Pictures\\Penguins.jpg" (normalized: "c:\\users\\public\\pictures\\sample pictures\\penguins.jpg")) returned 1 [0098.264] GetFullPathNameW (in: lpFileName="C:\\Users\\Public\\Pictures\\Sample Pictures\\Tulips.jpg", nBufferLength=0x105, lpBuffer=0x31e194, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\Public\\Pictures\\Sample Pictures\\Tulips.jpg", lpFilePart=0x0) returned 0x33 [0098.264] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e688) returned 1 [0098.265] CreateFileW (lpFileName="C:\\Users\\Public\\Pictures\\Sample Pictures\\Tulips.jpg" (normalized: "c:\\users\\public\\pictures\\sample pictures\\tulips.jpg"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x178 [0098.265] GetFileType (hFile=0x178) returned 0x1 [0098.265] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e684) returned 1 [0098.265] GetFileType (hFile=0x178) returned 0x1 [0098.265] GetFileSize (in: hFile=0x178, lpFileSizeHigh=0x31e790 | out: lpFileSizeHigh=0x31e790*=0x0) returned 0x97958 [0098.265] ReadFile (in: hFile=0x178, lpBuffer=0x381e268, nNumberOfBytesToRead=0x97958, lpNumberOfBytesRead=0x31e73c, lpOverlapped=0x0 | out: lpBuffer=0x381e268*, lpNumberOfBytesRead=0x31e73c*=0x97958, lpOverlapped=0x0) returned 1 [0098.271] CloseHandle (hObject=0x178) returned 1 [0098.329] GetFullPathNameW (in: lpFileName="C:\\Users\\Public\\Pictures\\Sample Pictures\\Tulips.jpg", nBufferLength=0x105, lpBuffer=0x31e180, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\Public\\Pictures\\Sample Pictures\\Tulips.jpg", lpFilePart=0x0) returned 0x33 [0098.329] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e674) returned 1 [0098.329] CreateFileW (lpFileName="C:\\Users\\Public\\Pictures\\Sample Pictures\\Tulips.jpg" (normalized: "c:\\users\\public\\pictures\\sample pictures\\tulips.jpg"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x178 [0098.334] GetFileType (hFile=0x178) returned 0x1 [0098.334] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e670) returned 1 [0098.334] GetFileType (hFile=0x178) returned 0x1 [0098.335] WriteFile (in: hFile=0x178, lpBuffer=0x38b5be0*, nNumberOfBytesToWrite=0x97960, lpNumberOfBytesWritten=0x31e730, lpOverlapped=0x0 | out: lpBuffer=0x38b5be0*, lpNumberOfBytesWritten=0x31e730*=0x97960, lpOverlapped=0x0) returned 1 [0098.344] CloseHandle (hObject=0x178) returned 1 [0098.344] GetFullPathNameW (in: lpFileName="C:\\Users\\Public\\Pictures\\Sample Pictures\\Tulips.jpg", nBufferLength=0x105, lpBuffer=0x31e2b4, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\Public\\Pictures\\Sample Pictures\\Tulips.jpg", lpFilePart=0x0) returned 0x33 [0098.344] GetFullPathNameW (in: lpFileName="C:\\Users\\Public\\Pictures\\Sample Pictures\\Tulips.jpg", nBufferLength=0x105, lpBuffer=0x31e2b4, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\Public\\Pictures\\Sample Pictures\\Tulips.jpg", lpFilePart=0x0) returned 0x33 [0098.344] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e714) returned 1 [0098.344] GetFileAttributesExW (in: lpFileName="C:\\Users\\Public\\Pictures\\Sample Pictures\\Tulips.jpg" (normalized: "c:\\users\\public\\pictures\\sample pictures\\tulips.jpg"), fInfoLevelId=0x0, lpFileInformation=0x31e790 | out: lpFileInformation=0x31e790*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x80340916, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x7beaaeb8, ftLastAccessTime.dwHighDateTime=0x1ca0444, ftLastWriteTime.dwLowDateTime=0x1e107fa0, ftLastWriteTime.dwHighDateTime=0x1d6eb7f, nFileSizeHigh=0x0, nFileSizeLow=0x97960)) returned 1 [0098.344] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e710) returned 1 [0098.344] MoveFileW (lpExistingFileName="C:\\Users\\Public\\Pictures\\Sample Pictures\\Tulips.jpg" (normalized: "c:\\users\\public\\pictures\\sample pictures\\tulips.jpg"), lpNewFileName="C:\\Users\\Public\\Pictures\\Sample Pictures\\Tulips.jpg" (normalized: "c:\\users\\public\\pictures\\sample pictures\\tulips.jpg")) returned 1 [0098.345] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e834) returned 1 [0098.345] GetFullPathNameW (in: lpFileName="C:\\Users\\Public\\Recorded TV", nBufferLength=0x105, lpBuffer=0x31e33c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\Public\\Recorded TV", lpFilePart=0x0) returned 0x1b [0098.345] GetFullPathNameW (in: lpFileName="C:\\Users\\Public\\Recorded TV\\", nBufferLength=0x105, lpBuffer=0x31e310, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\Public\\Recorded TV\\", lpFilePart=0x0) returned 0x1c [0098.345] FindFirstFileW (in: lpFileName="C:\\Users\\Public\\Recorded TV\\*", lpFindFileData=0x31e55c | out: lpFindFileData=0x31e55c*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x917fa2ee, ftCreationTime.dwHighDateTime=0x1cbf8eb, ftLastAccessTime.dwLowDateTime=0xaa597fc2, ftLastAccessTime.dwHighDateTime=0x1cbf8eb, ftLastWriteTime.dwLowDateTime=0x917fa2ee, ftLastWriteTime.dwHighDateTime=0x1cbf8eb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x381b40 [0098.345] FindNextFileW (in: hFindFile=0x381b40, lpFindFileData=0x31e56c | out: lpFindFileData=0x31e56c*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x917fa2ee, ftCreationTime.dwHighDateTime=0x1cbf8eb, ftLastAccessTime.dwLowDateTime=0xaa597fc2, ftLastAccessTime.dwHighDateTime=0x1cbf8eb, ftLastWriteTime.dwLowDateTime=0x917fa2ee, ftLastWriteTime.dwHighDateTime=0x1cbf8eb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0098.345] FindNextFileW (in: hFindFile=0x381b40, lpFindFileData=0x31e56c | out: lpFindFileData=0x31e56c*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0x917fa2ee, ftCreationTime.dwHighDateTime=0x1cbf8eb, ftLastAccessTime.dwLowDateTime=0x89e5e11e, ftLastAccessTime.dwHighDateTime=0x1cbf8eb, ftLastWriteTime.dwLowDateTime=0x89e5e11e, ftLastWriteTime.dwHighDateTime=0x1cbf8eb, nFileSizeHigh=0x0, nFileSizeLow=0x50, dwReserved0=0x0, dwReserved1=0x0, cFileName="desktop.ini", cAlternateFileName="")) returned 1 [0098.345] FindNextFileW (in: hFindFile=0x381b40, lpFindFileData=0x31e56c | out: lpFindFileData=0x31e56c*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x917fa2ee, ftCreationTime.dwHighDateTime=0x1cbf8eb, ftLastAccessTime.dwLowDateTime=0xaa597fc2, ftLastAccessTime.dwHighDateTime=0x1cbf8eb, ftLastWriteTime.dwLowDateTime=0x917fa2ee, ftLastWriteTime.dwHighDateTime=0x1cbf8eb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Sample Media", cAlternateFileName="SAMPLE~1")) returned 1 [0098.346] FindNextFileW (in: hFindFile=0x381b40, lpFindFileData=0x31e56c | out: lpFindFileData=0x31e56c*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x917fa2ee, ftCreationTime.dwHighDateTime=0x1cbf8eb, ftLastAccessTime.dwLowDateTime=0xaa597fc2, ftLastAccessTime.dwHighDateTime=0x1cbf8eb, ftLastWriteTime.dwLowDateTime=0x917fa2ee, ftLastWriteTime.dwHighDateTime=0x1cbf8eb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Sample Media", cAlternateFileName="SAMPLE~1")) returned 0 [0098.346] FindClose (in: hFindFile=0x381b40 | out: hFindFile=0x381b40) returned 1 [0098.346] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e7f4) returned 1 [0098.346] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e800) returned 1 [0098.346] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e834) returned 1 [0098.346] GetFullPathNameW (in: lpFileName="C:\\Users\\Public\\Recorded TV", nBufferLength=0x105, lpBuffer=0x31e33c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\Public\\Recorded TV", lpFilePart=0x0) returned 0x1b [0098.346] GetFullPathNameW (in: lpFileName="C:\\Users\\Public\\Recorded TV\\", nBufferLength=0x105, lpBuffer=0x31e310, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\Public\\Recorded TV\\", lpFilePart=0x0) returned 0x1c [0098.346] FindFirstFileW (in: lpFileName="C:\\Users\\Public\\Recorded TV\\*", lpFindFileData=0x31e55c | out: lpFindFileData=0x31e55c*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x917fa2ee, ftCreationTime.dwHighDateTime=0x1cbf8eb, ftLastAccessTime.dwLowDateTime=0xaa597fc2, ftLastAccessTime.dwHighDateTime=0x1cbf8eb, ftLastWriteTime.dwLowDateTime=0x917fa2ee, ftLastWriteTime.dwHighDateTime=0x1cbf8eb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x381b40 [0098.346] FindNextFileW (in: hFindFile=0x381b40, lpFindFileData=0x31e56c | out: lpFindFileData=0x31e56c*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x917fa2ee, ftCreationTime.dwHighDateTime=0x1cbf8eb, ftLastAccessTime.dwLowDateTime=0xaa597fc2, ftLastAccessTime.dwHighDateTime=0x1cbf8eb, ftLastWriteTime.dwLowDateTime=0x917fa2ee, ftLastWriteTime.dwHighDateTime=0x1cbf8eb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0098.346] FindNextFileW (in: hFindFile=0x381b40, lpFindFileData=0x31e56c | out: lpFindFileData=0x31e56c*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0x917fa2ee, ftCreationTime.dwHighDateTime=0x1cbf8eb, ftLastAccessTime.dwLowDateTime=0x89e5e11e, ftLastAccessTime.dwHighDateTime=0x1cbf8eb, ftLastWriteTime.dwLowDateTime=0x89e5e11e, ftLastWriteTime.dwHighDateTime=0x1cbf8eb, nFileSizeHigh=0x0, nFileSizeLow=0x50, dwReserved0=0x0, dwReserved1=0x0, cFileName="desktop.ini", cAlternateFileName="")) returned 1 [0098.346] FindNextFileW (in: hFindFile=0x381b40, lpFindFileData=0x31e56c | out: lpFindFileData=0x31e56c*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x917fa2ee, ftCreationTime.dwHighDateTime=0x1cbf8eb, ftLastAccessTime.dwLowDateTime=0xaa597fc2, ftLastAccessTime.dwHighDateTime=0x1cbf8eb, ftLastWriteTime.dwLowDateTime=0x917fa2ee, ftLastWriteTime.dwHighDateTime=0x1cbf8eb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Sample Media", cAlternateFileName="SAMPLE~1")) returned 1 [0098.347] FindNextFileW (in: hFindFile=0x381b40, lpFindFileData=0x31e56c | out: lpFindFileData=0x31e56c*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0098.347] FindClose (in: hFindFile=0x381b40 | out: hFindFile=0x381b40) returned 1 [0098.347] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e7f4) returned 1 [0098.347] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e800) returned 1 [0098.347] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e7bc) returned 1 [0098.347] GetFullPathNameW (in: lpFileName="C:\\Users\\Public\\Recorded TV\\Sample Media", nBufferLength=0x105, lpBuffer=0x31e2c4, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\Public\\Recorded TV\\Sample Media", lpFilePart=0x0) returned 0x28 [0098.347] GetFullPathNameW (in: lpFileName="C:\\Users\\Public\\Recorded TV\\Sample Media\\", nBufferLength=0x105, lpBuffer=0x31e298, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\Public\\Recorded TV\\Sample Media\\", lpFilePart=0x0) returned 0x29 [0098.347] FindFirstFileW (in: lpFileName="C:\\Users\\Public\\Recorded TV\\Sample Media\\*", lpFindFileData=0x31e4e4 | out: lpFindFileData=0x31e4e4*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x917fa2ee, ftCreationTime.dwHighDateTime=0x1cbf8eb, ftLastAccessTime.dwLowDateTime=0xaa597fc2, ftLastAccessTime.dwHighDateTime=0x1cbf8eb, ftLastWriteTime.dwLowDateTime=0x917fa2ee, ftLastWriteTime.dwHighDateTime=0x1cbf8eb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x381b40 [0098.347] FindNextFileW (in: hFindFile=0x381b40, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x917fa2ee, ftCreationTime.dwHighDateTime=0x1cbf8eb, ftLastAccessTime.dwLowDateTime=0xaa597fc2, ftLastAccessTime.dwHighDateTime=0x1cbf8eb, ftLastWriteTime.dwLowDateTime=0x917fa2ee, ftLastWriteTime.dwHighDateTime=0x1cbf8eb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0098.347] FindNextFileW (in: hFindFile=0x381b40, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0x917fa2ee, ftCreationTime.dwHighDateTime=0x1cbf8eb, ftLastAccessTime.dwLowDateTime=0x8a1f1b86, ftLastAccessTime.dwHighDateTime=0x1cbf8eb, ftLastWriteTime.dwLowDateTime=0x8a1f1b86, ftLastWriteTime.dwHighDateTime=0x1cbf8eb, nFileSizeHigh=0x0, nFileSizeLow=0xab, dwReserved0=0x0, dwReserved1=0x0, cFileName="desktop.ini", cAlternateFileName="")) returned 1 [0098.347] FindNextFileW (in: hFindFile=0x381b40, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x917fa2ee, ftCreationTime.dwHighDateTime=0x1cbf8eb, ftLastAccessTime.dwLowDateTime=0x8a1f1b86, ftLastAccessTime.dwHighDateTime=0x1cbf8eb, ftLastWriteTime.dwLowDateTime=0x8a1f1b86, ftLastWriteTime.dwHighDateTime=0x1cbf8eb, nFileSizeHigh=0x0, nFileSizeLow=0x940000, dwReserved0=0x0, dwReserved1=0x0, cFileName="win7_scenic-demoshort_raw.wtv", cAlternateFileName="WIN7_S~1.WTV")) returned 1 [0098.347] FindNextFileW (in: hFindFile=0x381b40, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0098.348] FindClose (in: hFindFile=0x381b40 | out: hFindFile=0x381b40) returned 1 [0098.348] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e77c) returned 1 [0098.348] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e788) returned 1 [0098.348] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e7bc) returned 1 [0098.348] GetFullPathNameW (in: lpFileName="C:\\Users\\Public\\Recorded TV\\Sample Media", nBufferLength=0x105, lpBuffer=0x31e2c4, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\Public\\Recorded TV\\Sample Media", lpFilePart=0x0) returned 0x28 [0098.348] GetFullPathNameW (in: lpFileName="C:\\Users\\Public\\Recorded TV\\Sample Media\\", nBufferLength=0x105, lpBuffer=0x31e298, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\Public\\Recorded TV\\Sample Media\\", lpFilePart=0x0) returned 0x29 [0098.348] FindFirstFileW (in: lpFileName="C:\\Users\\Public\\Recorded TV\\Sample Media\\*", lpFindFileData=0x31e4e4 | out: lpFindFileData=0x31e4e4*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x917fa2ee, ftCreationTime.dwHighDateTime=0x1cbf8eb, ftLastAccessTime.dwLowDateTime=0xaa597fc2, ftLastAccessTime.dwHighDateTime=0x1cbf8eb, ftLastWriteTime.dwLowDateTime=0x917fa2ee, ftLastWriteTime.dwHighDateTime=0x1cbf8eb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x381b40 [0098.348] FindNextFileW (in: hFindFile=0x381b40, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x917fa2ee, ftCreationTime.dwHighDateTime=0x1cbf8eb, ftLastAccessTime.dwLowDateTime=0xaa597fc2, ftLastAccessTime.dwHighDateTime=0x1cbf8eb, ftLastWriteTime.dwLowDateTime=0x917fa2ee, ftLastWriteTime.dwHighDateTime=0x1cbf8eb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0098.348] FindNextFileW (in: hFindFile=0x381b40, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0x917fa2ee, ftCreationTime.dwHighDateTime=0x1cbf8eb, ftLastAccessTime.dwLowDateTime=0x8a1f1b86, ftLastAccessTime.dwHighDateTime=0x1cbf8eb, ftLastWriteTime.dwLowDateTime=0x8a1f1b86, ftLastWriteTime.dwHighDateTime=0x1cbf8eb, nFileSizeHigh=0x0, nFileSizeLow=0xab, dwReserved0=0x0, dwReserved1=0x0, cFileName="desktop.ini", cAlternateFileName="")) returned 1 [0098.348] FindNextFileW (in: hFindFile=0x381b40, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x917fa2ee, ftCreationTime.dwHighDateTime=0x1cbf8eb, ftLastAccessTime.dwLowDateTime=0x8a1f1b86, ftLastAccessTime.dwHighDateTime=0x1cbf8eb, ftLastWriteTime.dwLowDateTime=0x8a1f1b86, ftLastWriteTime.dwHighDateTime=0x1cbf8eb, nFileSizeHigh=0x0, nFileSizeLow=0x940000, dwReserved0=0x0, dwReserved1=0x0, cFileName="win7_scenic-demoshort_raw.wtv", cAlternateFileName="WIN7_S~1.WTV")) returned 1 [0098.348] FindNextFileW (in: hFindFile=0x381b40, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x917fa2ee, ftCreationTime.dwHighDateTime=0x1cbf8eb, ftLastAccessTime.dwLowDateTime=0x8a1f1b86, ftLastAccessTime.dwHighDateTime=0x1cbf8eb, ftLastWriteTime.dwLowDateTime=0x8a1f1b86, ftLastWriteTime.dwHighDateTime=0x1cbf8eb, nFileSizeHigh=0x0, nFileSizeLow=0x940000, dwReserved0=0x0, dwReserved1=0x0, cFileName="win7_scenic-demoshort_raw.wtv", cAlternateFileName="WIN7_S~1.WTV")) returned 0 [0098.349] FindClose (in: hFindFile=0x381b40 | out: hFindFile=0x381b40) returned 1 [0098.349] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e77c) returned 1 [0098.349] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e788) returned 1 [0098.349] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e834) returned 1 [0098.349] GetFullPathNameW (in: lpFileName="C:\\Users\\Public\\Videos", nBufferLength=0x105, lpBuffer=0x31e33c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\Public\\Videos", lpFilePart=0x0) returned 0x16 [0098.349] GetFullPathNameW (in: lpFileName="C:\\Users\\Public\\Videos\\", nBufferLength=0x105, lpBuffer=0x31e310, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\Public\\Videos\\", lpFilePart=0x0) returned 0x17 [0098.349] FindFirstFileW (in: lpFileName="C:\\Users\\Public\\Videos\\*", lpFindFileData=0x31e55c | out: lpFindFileData=0x31e55c*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0xfdb0c77c, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x282dfaee, ftLastAccessTime.dwHighDateTime=0x1ca043f, ftLastWriteTime.dwLowDateTime=0x28886f39, ftLastWriteTime.dwHighDateTime=0x1ca043f, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x381b40 [0098.349] FindNextFileW (in: hFindFile=0x381b40, lpFindFileData=0x31e56c | out: lpFindFileData=0x31e56c*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0xfdb0c77c, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x282dfaee, ftLastAccessTime.dwHighDateTime=0x1ca043f, ftLastWriteTime.dwLowDateTime=0x28886f39, ftLastWriteTime.dwHighDateTime=0x1ca043f, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0098.349] FindNextFileW (in: hFindFile=0x381b40, lpFindFileData=0x31e56c | out: lpFindFileData=0x31e56c*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0x282dfaee, ftCreationTime.dwHighDateTime=0x1ca043f, ftLastAccessTime.dwLowDateTime=0x282dfaee, ftLastAccessTime.dwHighDateTime=0x1ca043f, ftLastWriteTime.dwLowDateTime=0x28886f39, ftLastWriteTime.dwHighDateTime=0x1ca043f, nFileSizeHigh=0x0, nFileSizeLow=0x17c, dwReserved0=0x0, dwReserved1=0x0, cFileName="desktop.ini", cAlternateFileName="")) returned 1 [0098.349] FindNextFileW (in: hFindFile=0x381b40, lpFindFileData=0x31e56c | out: lpFindFileData=0x31e56c*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x7fffaad0, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x802f4656, ftLastAccessTime.dwHighDateTime=0x1ca0444, ftLastWriteTime.dwLowDateTime=0x288d31f9, ftLastWriteTime.dwHighDateTime=0x1ca043f, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Sample Videos", cAlternateFileName="SAMPLE~1")) returned 1 [0098.349] FindNextFileW (in: hFindFile=0x381b40, lpFindFileData=0x31e56c | out: lpFindFileData=0x31e56c*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x7fffaad0, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x802f4656, ftLastAccessTime.dwHighDateTime=0x1ca0444, ftLastWriteTime.dwLowDateTime=0x288d31f9, ftLastWriteTime.dwHighDateTime=0x1ca043f, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Sample Videos", cAlternateFileName="SAMPLE~1")) returned 0 [0098.350] FindClose (in: hFindFile=0x381b40 | out: hFindFile=0x381b40) returned 1 [0098.350] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e7f4) returned 1 [0098.350] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e800) returned 1 [0098.350] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e834) returned 1 [0098.350] GetFullPathNameW (in: lpFileName="C:\\Users\\Public\\Videos", nBufferLength=0x105, lpBuffer=0x31e33c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\Public\\Videos", lpFilePart=0x0) returned 0x16 [0098.350] GetFullPathNameW (in: lpFileName="C:\\Users\\Public\\Videos\\", nBufferLength=0x105, lpBuffer=0x31e310, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\Public\\Videos\\", lpFilePart=0x0) returned 0x17 [0098.350] FindFirstFileW (in: lpFileName="C:\\Users\\Public\\Videos\\*", lpFindFileData=0x31e55c | out: lpFindFileData=0x31e55c*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0xfdb0c77c, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x282dfaee, ftLastAccessTime.dwHighDateTime=0x1ca043f, ftLastWriteTime.dwLowDateTime=0x28886f39, ftLastWriteTime.dwHighDateTime=0x1ca043f, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x381b40 [0098.350] FindNextFileW (in: hFindFile=0x381b40, lpFindFileData=0x31e56c | out: lpFindFileData=0x31e56c*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0xfdb0c77c, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x282dfaee, ftLastAccessTime.dwHighDateTime=0x1ca043f, ftLastWriteTime.dwLowDateTime=0x28886f39, ftLastWriteTime.dwHighDateTime=0x1ca043f, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0098.350] FindNextFileW (in: hFindFile=0x381b40, lpFindFileData=0x31e56c | out: lpFindFileData=0x31e56c*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0x282dfaee, ftCreationTime.dwHighDateTime=0x1ca043f, ftLastAccessTime.dwLowDateTime=0x282dfaee, ftLastAccessTime.dwHighDateTime=0x1ca043f, ftLastWriteTime.dwLowDateTime=0x28886f39, ftLastWriteTime.dwHighDateTime=0x1ca043f, nFileSizeHigh=0x0, nFileSizeLow=0x17c, dwReserved0=0x0, dwReserved1=0x0, cFileName="desktop.ini", cAlternateFileName="")) returned 1 [0098.350] FindNextFileW (in: hFindFile=0x381b40, lpFindFileData=0x31e56c | out: lpFindFileData=0x31e56c*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x7fffaad0, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x802f4656, ftLastAccessTime.dwHighDateTime=0x1ca0444, ftLastWriteTime.dwLowDateTime=0x288d31f9, ftLastWriteTime.dwHighDateTime=0x1ca043f, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Sample Videos", cAlternateFileName="SAMPLE~1")) returned 1 [0098.350] FindNextFileW (in: hFindFile=0x381b40, lpFindFileData=0x31e56c | out: lpFindFileData=0x31e56c*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0098.351] FindClose (in: hFindFile=0x381b40 | out: hFindFile=0x381b40) returned 1 [0098.351] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e7f4) returned 1 [0098.351] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e800) returned 1 [0098.351] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e7bc) returned 1 [0098.351] GetFullPathNameW (in: lpFileName="C:\\Users\\Public\\Videos\\Sample Videos", nBufferLength=0x105, lpBuffer=0x31e2c4, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\Public\\Videos\\Sample Videos", lpFilePart=0x0) returned 0x24 [0098.351] GetFullPathNameW (in: lpFileName="C:\\Users\\Public\\Videos\\Sample Videos\\", nBufferLength=0x105, lpBuffer=0x31e298, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\Public\\Videos\\Sample Videos\\", lpFilePart=0x0) returned 0x25 [0098.351] FindFirstFileW (in: lpFileName="C:\\Users\\Public\\Videos\\Sample Videos\\*", lpFindFileData=0x31e4e4 | out: lpFindFileData=0x31e4e4*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x7fffaad0, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x802f4656, ftLastAccessTime.dwHighDateTime=0x1ca0444, ftLastWriteTime.dwLowDateTime=0x288d31f9, ftLastWriteTime.dwHighDateTime=0x1ca043f, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x381b40 [0098.351] FindNextFileW (in: hFindFile=0x381b40, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x7fffaad0, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x802f4656, ftLastAccessTime.dwHighDateTime=0x1ca0444, ftLastWriteTime.dwLowDateTime=0x288d31f9, ftLastWriteTime.dwHighDateTime=0x1ca043f, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0098.351] FindNextFileW (in: hFindFile=0x381b40, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0x802f4656, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x7be12937, ftLastAccessTime.dwHighDateTime=0x1ca0444, ftLastWriteTime.dwLowDateTime=0x288d31f9, ftLastWriteTime.dwHighDateTime=0x1ca043f, nFileSizeHigh=0x0, nFileSizeLow=0x146, dwReserved0=0x0, dwReserved1=0x0, cFileName="desktop.ini", cAlternateFileName="")) returned 1 [0098.351] FindNextFileW (in: hFindFile=0x381b40, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x80282235, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x7bda0516, ftLastAccessTime.dwHighDateTime=0x1ca0444, ftLastWriteTime.dwLowDateTime=0x7be12937, ftLastWriteTime.dwHighDateTime=0x1ca0444, nFileSizeHigh=0x0, nFileSizeLow=0x1907b8a, dwReserved0=0x0, dwReserved1=0x0, cFileName="Wildlife.wmv", cAlternateFileName="")) returned 1 [0098.351] FindNextFileW (in: hFindFile=0x381b40, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0098.351] FindClose (in: hFindFile=0x381b40 | out: hFindFile=0x381b40) returned 1 [0098.352] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e77c) returned 1 [0098.352] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e788) returned 1 [0098.352] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e7bc) returned 1 [0098.352] GetFullPathNameW (in: lpFileName="C:\\Users\\Public\\Videos\\Sample Videos", nBufferLength=0x105, lpBuffer=0x31e2c4, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\Public\\Videos\\Sample Videos", lpFilePart=0x0) returned 0x24 [0098.352] GetFullPathNameW (in: lpFileName="C:\\Users\\Public\\Videos\\Sample Videos\\", nBufferLength=0x105, lpBuffer=0x31e298, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\Public\\Videos\\Sample Videos\\", lpFilePart=0x0) returned 0x25 [0098.352] FindFirstFileW (in: lpFileName="C:\\Users\\Public\\Videos\\Sample Videos\\*", lpFindFileData=0x31e4e4 | out: lpFindFileData=0x31e4e4*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x7fffaad0, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x802f4656, ftLastAccessTime.dwHighDateTime=0x1ca0444, ftLastWriteTime.dwLowDateTime=0x288d31f9, ftLastWriteTime.dwHighDateTime=0x1ca043f, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x381b40 [0098.352] FindNextFileW (in: hFindFile=0x381b40, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x7fffaad0, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x802f4656, ftLastAccessTime.dwHighDateTime=0x1ca0444, ftLastWriteTime.dwLowDateTime=0x288d31f9, ftLastWriteTime.dwHighDateTime=0x1ca043f, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0098.352] FindNextFileW (in: hFindFile=0x381b40, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0x802f4656, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x7be12937, ftLastAccessTime.dwHighDateTime=0x1ca0444, ftLastWriteTime.dwLowDateTime=0x288d31f9, ftLastWriteTime.dwHighDateTime=0x1ca043f, nFileSizeHigh=0x0, nFileSizeLow=0x146, dwReserved0=0x0, dwReserved1=0x0, cFileName="desktop.ini", cAlternateFileName="")) returned 1 [0098.352] FindNextFileW (in: hFindFile=0x381b40, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x80282235, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x7bda0516, ftLastAccessTime.dwHighDateTime=0x1ca0444, ftLastWriteTime.dwLowDateTime=0x7be12937, ftLastWriteTime.dwHighDateTime=0x1ca0444, nFileSizeHigh=0x0, nFileSizeLow=0x1907b8a, dwReserved0=0x0, dwReserved1=0x0, cFileName="Wildlife.wmv", cAlternateFileName="")) returned 1 [0098.352] FindNextFileW (in: hFindFile=0x381b40, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x80282235, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x7bda0516, ftLastAccessTime.dwHighDateTime=0x1ca0444, ftLastWriteTime.dwLowDateTime=0x7be12937, ftLastWriteTime.dwHighDateTime=0x1ca0444, nFileSizeHigh=0x0, nFileSizeLow=0x1907b8a, dwReserved0=0x0, dwReserved1=0x0, cFileName="Wildlife.wmv", cAlternateFileName="")) returned 0 [0098.352] FindClose (in: hFindFile=0x381b40 | out: hFindFile=0x381b40) returned 1 [0098.353] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e77c) returned 1 [0098.353] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e788) returned 1 [0098.353] GetFullPathNameW (in: lpFileName="C:\\Users\\Public\\Videos\\Sample Videos\\Wildlife.wmv", nBufferLength=0x105, lpBuffer=0x31e194, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\Public\\Videos\\Sample Videos\\Wildlife.wmv", lpFilePart=0x0) returned 0x31 [0098.353] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e688) returned 1 [0098.353] CreateFileW (lpFileName="C:\\Users\\Public\\Videos\\Sample Videos\\Wildlife.wmv" (normalized: "c:\\users\\public\\videos\\sample videos\\wildlife.wmv"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x178 [0098.353] GetFileType (hFile=0x178) returned 0x1 [0098.353] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e684) returned 1 [0098.353] GetFileType (hFile=0x178) returned 0x1 [0098.353] GetFileSize (in: hFile=0x178, lpFileSizeHigh=0x31e790 | out: lpFileSizeHigh=0x31e790*=0x0) returned 0x1907b8a [0098.363] ReadFile (in: hFile=0x178, lpBuffer=0x8a31018, nNumberOfBytesToRead=0x1907b8a, lpNumberOfBytesRead=0x31e73c, lpOverlapped=0x0 | out: lpBuffer=0x8a31018*, lpNumberOfBytesRead=0x31e73c*=0x1907b8a, lpOverlapped=0x0) returned 1 [0099.086] CloseHandle (hObject=0x178) returned 1 [0100.234] GetFullPathNameW (in: lpFileName="C:\\Users\\Public\\Videos\\Sample Videos\\Wildlife.wmv", nBufferLength=0x105, lpBuffer=0x31e180, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\Public\\Videos\\Sample Videos\\Wildlife.wmv", lpFilePart=0x0) returned 0x31 [0100.235] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e674) returned 1 [0100.235] CreateFileW (lpFileName="C:\\Users\\Public\\Videos\\Sample Videos\\Wildlife.wmv" (normalized: "c:\\users\\public\\videos\\sample videos\\wildlife.wmv"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x178 [0100.238] GetFileType (hFile=0x178) returned 0x1 [0100.238] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e670) returned 1 [0100.238] GetFileType (hFile=0x178) returned 0x1 [0100.238] WriteFile (in: hFile=0x178, lpBuffer=0x12a31018*, nNumberOfBytesToWrite=0x1907b90, lpNumberOfBytesWritten=0x31e730, lpOverlapped=0x0 | out: lpBuffer=0x12a31018*, lpNumberOfBytesWritten=0x31e730*=0x1907b90, lpOverlapped=0x0) returned 1 [0100.732] CloseHandle (hObject=0x178) returned 1 [0100.732] GetFullPathNameW (in: lpFileName="C:\\Users\\Public\\Videos\\Sample Videos\\Wildlife.wmv", nBufferLength=0x105, lpBuffer=0x31e2b4, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\Public\\Videos\\Sample Videos\\Wildlife.wmv", lpFilePart=0x0) returned 0x31 [0100.732] GetFullPathNameW (in: lpFileName="C:\\Users\\Public\\Videos\\Sample Videos\\Wildlife.wmv", nBufferLength=0x105, lpBuffer=0x31e2b4, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\Public\\Videos\\Sample Videos\\Wildlife.wmv", lpFilePart=0x0) returned 0x31 [0100.732] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e714) returned 1 [0100.732] GetFileAttributesExW (in: lpFileName="C:\\Users\\Public\\Videos\\Sample Videos\\Wildlife.wmv" (normalized: "c:\\users\\public\\videos\\sample videos\\wildlife.wmv"), fInfoLevelId=0x0, lpFileInformation=0x31e790 | out: lpFileInformation=0x31e790*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x80282235, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x7bda0516, ftLastAccessTime.dwHighDateTime=0x1ca0444, ftLastWriteTime.dwLowDateTime=0x1f7cb200, ftLastWriteTime.dwHighDateTime=0x1d6eb7f, nFileSizeHigh=0x0, nFileSizeLow=0x1907b90)) returned 1 [0100.733] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e710) returned 1 [0100.733] MoveFileW (lpExistingFileName="C:\\Users\\Public\\Videos\\Sample Videos\\Wildlife.wmv" (normalized: "c:\\users\\public\\videos\\sample videos\\wildlife.wmv"), lpNewFileName="C:\\Users\\Public\\Videos\\Sample Videos\\Wildlife.wmv" (normalized: "c:\\users\\public\\videos\\sample videos\\wildlife.wmv")) returned 1 [0100.733] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e924) returned 1 [0100.733] GetFullPathNameW (in: lpFileName="C:\\Windows", nBufferLength=0x105, lpBuffer=0x31e42c, lpFilePart=0x0 | out: lpBuffer="C:\\Windows", lpFilePart=0x0) returned 0xa [0100.733] GetFullPathNameW (in: lpFileName="C:\\Windows\\", nBufferLength=0x105, lpBuffer=0x31e400, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\", lpFilePart=0x0) returned 0xb [0100.733] FindFirstFileW (in: lpFileName="C:\\Windows\\*", lpFindFileData=0x31e64c | out: lpFindFileData=0x31e64c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfdb0c77c, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x2fb4a840, ftLastAccessTime.dwHighDateTime=0x1d4d57d, ftLastWriteTime.dwLowDateTime=0x2fb4a840, ftLastWriteTime.dwHighDateTime=0x1d4d57d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x381c40 [0100.733] FindNextFileW (in: hFindFile=0x381c40, lpFindFileData=0x31e65c | out: lpFindFileData=0x31e65c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfdb0c77c, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x2fb4a840, ftLastAccessTime.dwHighDateTime=0x1d4d57d, ftLastWriteTime.dwLowDateTime=0x2fb4a840, ftLastWriteTime.dwHighDateTime=0x1d4d57d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0100.734] FindNextFileW (in: hFindFile=0x381c40, lpFindFileData=0x31e65c | out: lpFindFileData=0x31e65c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x800b91b1, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x80b6f4c5, ftLastAccessTime.dwHighDateTime=0x1ca0444, ftLastWriteTime.dwLowDateTime=0x80b6f4c5, ftLastWriteTime.dwHighDateTime=0x1ca0444, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="addins", cAlternateFileName="")) returned 1 [0100.734] FindNextFileW (in: hFindFile=0x381c40, lpFindFileData=0x31e65c | out: lpFindFileData=0x31e65c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfdb0c77c, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfdb0c77c, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xfdb0c77c, ftLastWriteTime.dwHighDateTime=0x1ca0431, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="AppCompat", cAlternateFileName="APPCOM~1")) returned 1 [0100.734] FindNextFileW (in: hFindFile=0x381c40, lpFindFileData=0x31e65c | out: lpFindFileData=0x31e65c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfdb328d6, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x57087b83, ftLastAccessTime.dwHighDateTime=0x1cb892c, ftLastWriteTime.dwLowDateTime=0x57087b83, ftLastWriteTime.dwHighDateTime=0x1cb892c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="AppPatch", cAlternateFileName="")) returned 1 [0100.734] FindNextFileW (in: hFindFile=0x381c40, lpFindFileData=0x31e65c | out: lpFindFileData=0x31e65c*(dwFileAttributes=0x15, ftCreationTime.dwLowDateTime=0xfdb58a30, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xe968e7e0, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0xe968e7e0, ftLastWriteTime.dwHighDateTime=0x1d305f1, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="assembly", cAlternateFileName="")) returned 1 [0100.734] FindNextFileW (in: hFindFile=0x381c40, lpFindFileData=0x31e65c | out: lpFindFileData=0x31e65c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x97675415, ftCreationTime.dwHighDateTime=0x1cb892b, ftLastAccessTime.dwLowDateTime=0x97675415, ftLastAccessTime.dwHighDateTime=0x1cb892b, ftLastWriteTime.dwLowDateTime=0x977f21d7, ftLastWriteTime.dwHighDateTime=0x1cb892b, nFileSizeHigh=0x0, nFileSizeLow=0x11600, dwReserved0=0x0, dwReserved1=0x0, cFileName="bfsvc.exe", cAlternateFileName="")) returned 1 [0100.734] FindNextFileW (in: hFindFile=0x381c40, lpFindFileData=0x31e65c | out: lpFindFileData=0x31e65c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfde52538, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x80105472, ftLastAccessTime.dwHighDateTime=0x1ca0444, ftLastWriteTime.dwLowDateTime=0x80105472, ftLastWriteTime.dwHighDateTime=0x1ca0444, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Boot", cAlternateFileName="")) returned 1 [0100.734] FindNextFileW (in: hFindFile=0x381c40, lpFindFileData=0x31e65c | out: lpFindFileData=0x31e65c*(dwFileAttributes=0x24, ftCreationTime.dwLowDateTime=0x5562e640, ftCreationTime.dwHighDateTime=0x1ca0445, ftLastAccessTime.dwLowDateTime=0x5562e640, ftLastAccessTime.dwHighDateTime=0x1ca0445, ftLastWriteTime.dwLowDateTime=0xafd68640, ftLastWriteTime.dwHighDateTime=0x1d5e82a, nFileSizeHigh=0x0, nFileSizeLow=0x10800, dwReserved0=0x0, dwReserved1=0x0, cFileName="bootstat.dat", cAlternateFileName="")) returned 1 [0100.734] FindNextFileW (in: hFindFile=0x381c40, lpFindFileData=0x31e65c | out: lpFindFileData=0x31e65c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfe36132c, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x80105472, ftLastAccessTime.dwHighDateTime=0x1ca0444, ftLastWriteTime.dwLowDateTime=0x80105472, ftLastWriteTime.dwHighDateTime=0x1ca0444, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Branding", cAlternateFileName="")) returned 1 [0100.735] FindNextFileW (in: hFindFile=0x381c40, lpFindFileData=0x31e65c | out: lpFindFileData=0x31e65c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x98abb4cc, ftCreationTime.dwHighDateTime=0x1cbf8eb, ftLastAccessTime.dwLowDateTime=0x61766720, ftLastAccessTime.dwHighDateTime=0x1d2de2a, ftLastWriteTime.dwLowDateTime=0x61766720, ftLastWriteTime.dwHighDateTime=0x1d2de2a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="CSC", cAlternateFileName="")) returned 1 [0100.735] FindNextFileW (in: hFindFile=0x381c40, lpFindFileData=0x31e65c | out: lpFindFileData=0x31e65c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfe36132c, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x806ac8bc, ftLastAccessTime.dwHighDateTime=0x1ca0444, ftLastWriteTime.dwLowDateTime=0x806ac8bc, ftLastWriteTime.dwHighDateTime=0x1ca0444, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Cursors", cAlternateFileName="")) returned 1 [0100.735] FindNextFileW (in: hFindFile=0x381c40, lpFindFileData=0x31e65c | out: lpFindFileData=0x31e65c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf8a36d94, ftCreationTime.dwHighDateTime=0x1ca043d, ftLastAccessTime.dwLowDateTime=0x181cd0c0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x181cd0c0, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="debug", cAlternateFileName="")) returned 1 [0100.735] FindNextFileW (in: hFindFile=0x381c40, lpFindFileData=0x31e65c | out: lpFindFileData=0x31e65c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x800b91b1, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x800b91b1, ftLastAccessTime.dwHighDateTime=0x1ca0444, ftLastWriteTime.dwLowDateTime=0x800b91b1, ftLastWriteTime.dwHighDateTime=0x1ca0444, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="diagnostics", cAlternateFileName="DIAGNO~1")) returned 1 [0100.735] FindNextFileW (in: hFindFile=0x381c40, lpFindFileData=0x31e65c | out: lpFindFileData=0x31e65c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x3763cf0c, ftCreationTime.dwHighDateTime=0x1ca0445, ftLastAccessTime.dwLowDateTime=0xa9eeab22, ftLastAccessTime.dwHighDateTime=0x1cbf8e9, ftLastWriteTime.dwLowDateTime=0x3763cf0c, ftLastWriteTime.dwHighDateTime=0x1ca0445, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="DigitalLocker", cAlternateFileName="DIGITA~1")) returned 1 [0100.735] FindNextFileW (in: hFindFile=0x381c40, lpFindFileData=0x31e65c | out: lpFindFileData=0x31e65c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x80046d91, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x806ac8bc, ftLastAccessTime.dwHighDateTime=0x1ca0444, ftLastWriteTime.dwLowDateTime=0x806ac8bc, ftLastWriteTime.dwHighDateTime=0x1ca0444, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Downloaded Program Files", cAlternateFileName="DOWNLO~1")) returned 1 [0100.735] FindNextFileW (in: hFindFile=0x381c40, lpFindFileData=0x31e65c | out: lpFindFileData=0x31e65c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xffb94625, ftCreationTime.dwHighDateTime=0x1ca043d, ftLastAccessTime.dwLowDateTime=0xffb94625, ftLastAccessTime.dwHighDateTime=0x1ca043d, ftLastWriteTime.dwLowDateTime=0x7a349200, ftLastWriteTime.dwHighDateTime=0x1d2de2a, nFileSizeHigh=0x0, nFileSizeLow=0xae6, dwReserved0=0x0, dwReserved1=0x0, cFileName="DtcInstall.log", cAlternateFileName="DTCINS~1.LOG")) returned 1 [0100.736] FindNextFileW (in: hFindFile=0x381c40, lpFindFileData=0x31e65c | out: lpFindFileData=0x31e65c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x996cd9eb, ftCreationTime.dwHighDateTime=0x1cbf8eb, ftLastAccessTime.dwLowDateTime=0xa9fa1e6a, ftLastAccessTime.dwHighDateTime=0x1cbf8eb, ftLastWriteTime.dwLowDateTime=0x9cf49440, ftLastWriteTime.dwHighDateTime=0x1cbf8eb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="ehome", cAlternateFileName="")) returned 1 [0100.736] FindNextFileW (in: hFindFile=0x381c40, lpFindFileData=0x31e65c | out: lpFindFileData=0x31e65c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x3757e82b, ftCreationTime.dwHighDateTime=0x1ca0445, ftLastAccessTime.dwLowDateTime=0x23fb0799, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x1e423fe3, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="en-US", cAlternateFileName="")) returned 1 [0100.736] FindNextFileW (in: hFindFile=0x381c40, lpFindFileData=0x31e65c | out: lpFindFileData=0x31e65c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x90cd4312, ftCreationTime.dwHighDateTime=0x1cb892b, ftLastAccessTime.dwLowDateTime=0x90cd4312, ftLastAccessTime.dwHighDateTime=0x1cb892b, ftLastWriteTime.dwLowDateTime=0x90d6c893, ftLastWriteTime.dwHighDateTime=0x1cb892b, nFileSizeHigh=0x0, nFileSizeLow=0x2bd400, dwReserved0=0x0, dwReserved1=0x0, cFileName="explorer.exe", cAlternateFileName="")) returned 1 [0100.736] FindNextFileW (in: hFindFile=0x381c40, lpFindFileData=0x31e65c | out: lpFindFileData=0x31e65c*(dwFileAttributes=0x15, ftCreationTime.dwLowDateTime=0xfe387486, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x6d0f7050, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x6d0f7050, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Fonts", cAlternateFileName="")) returned 1 [0100.736] FindNextFileW (in: hFindFile=0x381c40, lpFindFileData=0x31e65c | out: lpFindFileData=0x31e65c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc0a7e9b0, ftCreationTime.dwHighDateTime=0x1ca0410, ftLastAccessTime.dwLowDateTime=0xc0a7e9b0, ftLastAccessTime.dwHighDateTime=0x1ca0410, ftLastWriteTime.dwLowDateTime=0xe2da8a60, ftLastWriteTime.dwHighDateTime=0x1ca0423, nFileSizeHigh=0x0, nFileSizeLow=0x3c00, dwReserved0=0x0, dwReserved1=0x0, cFileName="fveupdate.exe", cAlternateFileName="")) returned 1 [0100.736] FindNextFileW (in: hFindFile=0x381c40, lpFindFileData=0x31e65c | out: lpFindFileData=0x31e65c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfe387486, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xe9340f25, ftLastAccessTime.dwHighDateTime=0x1cbf8eb, ftLastWriteTime.dwLowDateTime=0xe9340f25, ftLastWriteTime.dwHighDateTime=0x1cbf8eb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Globalization", cAlternateFileName="GLOBAL~1")) returned 1 [0100.736] FindNextFileW (in: hFindFile=0x381c40, lpFindFileData=0x31e65c | out: lpFindFileData=0x31e65c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfe3f9894, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x1d967bdb, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x1d967bdb, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Help", cAlternateFileName="")) returned 1 [0100.736] FindNextFileW (in: hFindFile=0x381c40, lpFindFileData=0x31e65c | out: lpFindFileData=0x31e65c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x34a5a972, ftCreationTime.dwHighDateTime=0x1ca041a, ftLastAccessTime.dwLowDateTime=0x34a5a972, ftLastAccessTime.dwHighDateTime=0x1ca041a, ftLastWriteTime.dwLowDateTime=0xe391cc70, ftLastWriteTime.dwHighDateTime=0x1ca0423, nFileSizeHigh=0x0, nFileSizeLow=0xb3200, dwReserved0=0x0, dwReserved1=0x0, cFileName="HelpPane.exe", cAlternateFileName="")) returned 1 [0100.737] FindNextFileW (in: hFindFile=0x381c40, lpFindFileData=0x31e65c | out: lpFindFileData=0x31e65c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x16ca6ff3, ftCreationTime.dwHighDateTime=0x1ca041a, ftLastAccessTime.dwLowDateTime=0x16ca6ff3, ftLastAccessTime.dwHighDateTime=0x1ca041a, ftLastWriteTime.dwLowDateTime=0xe391cc70, ftLastWriteTime.dwHighDateTime=0x1ca0423, nFileSizeHigh=0x0, nFileSizeLow=0x4200, dwReserved0=0x0, dwReserved1=0x0, cFileName="hh.exe", cAlternateFileName="")) returned 1 [0100.737] FindNextFileW (in: hFindFile=0x381c40, lpFindFileData=0x31e65c | out: lpFindFileData=0x31e65c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfe445b48, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x3763cf0c, ftLastAccessTime.dwHighDateTime=0x1ca0445, ftLastWriteTime.dwLowDateTime=0x3763cf0c, ftLastWriteTime.dwHighDateTime=0x1ca0445, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="IME", cAlternateFileName="")) returned 1 [0100.737] FindNextFileW (in: hFindFile=0x381c40, lpFindFileData=0x31e65c | out: lpFindFileData=0x31e65c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfe50420a, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xefd5fc00, ftLastAccessTime.dwHighDateTime=0x1d4d596, ftLastWriteTime.dwLowDateTime=0xefd5fc00, ftLastWriteTime.dwHighDateTime=0x1d4d596, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="inf", cAlternateFileName="")) returned 1 [0100.737] FindNextFileW (in: hFindFile=0x381c40, lpFindFileData=0x31e65c | out: lpFindFileData=0x31e65c*(dwFileAttributes=0x16, ftCreationTime.dwLowDateTime=0x72a697c0, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0xeda8bc40, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0xeda8bc40, ftLastWriteTime.dwHighDateTime=0x1d305f1, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Installer", cAlternateFileName="INSTAL~1")) returned 1 [0100.737] FindNextFileW (in: hFindFile=0x381c40, lpFindFileData=0x31e65c | out: lpFindFileData=0x31e65c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfe60eb80, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x80b6f4c5, ftLastAccessTime.dwHighDateTime=0x1ca0444, ftLastWriteTime.dwLowDateTime=0x80b6f4c5, ftLastWriteTime.dwHighDateTime=0x1ca0444, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="L2Schemas", cAlternateFileName="L2SCHE~1")) returned 1 [0100.737] FindNextFileW (in: hFindFile=0x381c40, lpFindFileData=0x31e65c | out: lpFindFileData=0x31e65c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfe60eb80, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfe60eb80, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0x9a0a5fd1, ftLastWriteTime.dwHighDateTime=0x1ca042b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="LiveKernelReports", cAlternateFileName="LIVEKE~1")) returned 1 [0100.737] FindNextFileW (in: hFindFile=0x381c40, lpFindFileData=0x31e65c | out: lpFindFileData=0x31e65c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfe60eb80, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x6938ae40, ftLastAccessTime.dwHighDateTime=0x1d2fafa, ftLastWriteTime.dwLowDateTime=0x6938ae40, ftLastWriteTime.dwHighDateTime=0x1d2fafa, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Logs", cAlternateFileName="")) returned 1 [0100.737] FindNextFileW (in: hFindFile=0x381c40, lpFindFileData=0x31e65c | out: lpFindFileData=0x31e65c*(dwFileAttributes=0x15, ftCreationTime.dwLowDateTime=0xfe60eb80, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x8105822e, ftLastAccessTime.dwHighDateTime=0x1ca0444, ftLastWriteTime.dwLowDateTime=0x8105822e, ftLastWriteTime.dwHighDateTime=0x1ca0444, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Media", cAlternateFileName="")) returned 1 [0100.738] FindNextFileW (in: hFindFile=0x381c40, lpFindFileData=0x31e65c | out: lpFindFileData=0x31e65c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7f29dbd7, ftCreationTime.dwHighDateTime=0x1ca0417, ftLastAccessTime.dwLowDateTime=0x7f29dbd7, ftLastAccessTime.dwHighDateTime=0x1ca0417, ftLastWriteTime.dwLowDateTime=0x9d4aec0c, ftLastWriteTime.dwHighDateTime=0x1ca040e, nFileSizeHigh=0x0, nFileSizeLow=0xa87b, dwReserved0=0x0, dwReserved1=0x0, cFileName="mib.bin", cAlternateFileName="")) returned 1 [0100.738] FindNextFileW (in: hFindFile=0x381c40, lpFindFileData=0x31e65c | out: lpFindFileData=0x31e65c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfe6f339c, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xd0be0600, ftLastAccessTime.dwHighDateTime=0x1d4d596, ftLastWriteTime.dwLowDateTime=0xd0be0600, ftLastWriteTime.dwHighDateTime=0x1d4d596, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.NET", cAlternateFileName="MICROS~1.NET")) returned 1 [0100.738] FindNextFileW (in: hFindFile=0x381c40, lpFindFileData=0x31e65c | out: lpFindFileData=0x31e65c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x56a9ce00, ftCreationTime.dwHighDateTime=0x1d2e676, ftLastAccessTime.dwLowDateTime=0x56a9ce00, ftLastAccessTime.dwHighDateTime=0x1d2e676, ftLastWriteTime.dwLowDateTime=0x56a9ce00, ftLastWriteTime.dwHighDateTime=0x1d2e676, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Migration", cAlternateFileName="MIGRAT~1")) returned 1 [0100.738] FindNextFileW (in: hFindFile=0x381c40, lpFindFileData=0x31e65c | out: lpFindFileData=0x31e65c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfea5f2b2, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfea5f2b2, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0x9fcbcbb0, ftLastWriteTime.dwHighDateTime=0x1ca042b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="ModemLogs", cAlternateFileName="MODEML~1")) returned 1 [0100.738] FindNextFileW (in: hFindFile=0x381c40, lpFindFileData=0x31e65c | out: lpFindFileData=0x31e65c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc82fedc8, ftCreationTime.dwHighDateTime=0x1ca042b, ftLastAccessTime.dwLowDateTime=0xc82fedc8, ftLastAccessTime.dwHighDateTime=0x1ca042b, ftLastWriteTime.dwLowDateTime=0x2d6b0bf3, ftLastWriteTime.dwHighDateTime=0x1c9ea0b, nFileSizeHigh=0x0, nFileSizeLow=0x57d, dwReserved0=0x0, dwReserved1=0x0, cFileName="msdfmap.ini", cAlternateFileName="")) returned 1 [0100.738] FindNextFileW (in: hFindFile=0x381c40, lpFindFileData=0x31e65c | out: lpFindFileData=0x31e65c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8eb2c4cd, ftCreationTime.dwHighDateTime=0x1ca0415, ftLastAccessTime.dwLowDateTime=0x8eb2c4cd, ftLastAccessTime.dwHighDateTime=0x1ca0415, ftLastWriteTime.dwLowDateTime=0xeb804920, ftLastWriteTime.dwHighDateTime=0x1ca0423, nFileSizeHigh=0x0, nFileSizeLow=0x2f400, dwReserved0=0x0, dwReserved1=0x0, cFileName="notepad.exe", cAlternateFileName="")) returned 1 [0100.738] FindNextFileW (in: hFindFile=0x381c40, lpFindFileData=0x31e65c | out: lpFindFileData=0x31e65c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x800df312, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x810320ce, ftLastAccessTime.dwHighDateTime=0x1ca0444, ftLastWriteTime.dwLowDateTime=0x810320ce, ftLastWriteTime.dwHighDateTime=0x1ca0444, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Offline Web Pages", cAlternateFileName="OFFLIN~1")) returned 1 [0100.739] FindNextFileW (in: hFindFile=0x381c40, lpFindFileData=0x31e65c | out: lpFindFileData=0x31e65c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xb3172800, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0x281b0dc0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x281b0dc0, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Panther", cAlternateFileName="")) returned 1 [0100.739] FindNextFileW (in: hFindFile=0x381c40, lpFindFileData=0x31e65c | out: lpFindFileData=0x31e65c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x50ea0e30, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x50ea0e30, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x50ea0e30, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="PCHEALTH", cAlternateFileName="")) returned 1 [0100.739] FindNextFileW (in: hFindFile=0x381c40, lpFindFileData=0x31e65c | out: lpFindFileData=0x31e65c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x80046d91, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x80046d91, ftLastAccessTime.dwHighDateTime=0x1ca0444, ftLastWriteTime.dwLowDateTime=0x80046d91, ftLastWriteTime.dwHighDateTime=0x1ca0444, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Performance", cAlternateFileName="PERFOR~1")) returned 1 [0100.739] FindNextFileW (in: hFindFile=0x381c40, lpFindFileData=0x31e65c | out: lpFindFileData=0x31e65c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc4e1cc01, ftCreationTime.dwHighDateTime=0x1cb892e, ftLastAccessTime.dwLowDateTime=0xc4e1cc01, ftLastAccessTime.dwHighDateTime=0x1cb892e, ftLastWriteTime.dwLowDateTime=0x78374e00, ftLastWriteTime.dwHighDateTime=0x1d30596, nFileSizeHigh=0x0, nFileSizeLow=0x69ea, dwReserved0=0x0, dwReserved1=0x0, cFileName="PFRO.log", cAlternateFileName="")) returned 1 [0100.739] FindNextFileW (in: hFindFile=0x381c40, lpFindFileData=0x31e65c | out: lpFindFileData=0x31e65c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfea8540c, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfeaf781a, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xfeaf781a, ftLastWriteTime.dwHighDateTime=0x1ca0431, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="PLA", cAlternateFileName="")) returned 1 [0100.739] FindNextFileW (in: hFindFile=0x381c40, lpFindFileData=0x31e65c | out: lpFindFileData=0x31e65c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfeb1d974, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x94d2e7b9, ftLastAccessTime.dwHighDateTime=0x1cbf8eb, ftLastWriteTime.dwLowDateTime=0x94d2e7b9, ftLastWriteTime.dwHighDateTime=0x1cbf8eb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="PolicyDefinitions", cAlternateFileName="POLICY~1")) returned 1 [0100.739] FindNextFileW (in: hFindFile=0x381c40, lpFindFileData=0x31e65c | out: lpFindFileData=0x31e65c*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x6240bc00, ftCreationTime.dwHighDateTime=0x1d2de2a, ftLastAccessTime.dwLowDateTime=0xef82e560, ftLastAccessTime.dwHighDateTime=0x1d6eb7e, ftLastWriteTime.dwLowDateTime=0xef82e560, ftLastWriteTime.dwHighDateTime=0x1d6eb7e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Prefetch", cAlternateFileName="")) returned 1 [0100.739] FindNextFileW (in: hFindFile=0x381c40, lpFindFileData=0x31e65c | out: lpFindFileData=0x31e65c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xaf9a5c4e, ftCreationTime.dwHighDateTime=0x1cbf8eb, ftLastAccessTime.dwLowDateTime=0xaf9cbebd, ftLastAccessTime.dwHighDateTime=0x1cbf8eb, ftLastWriteTime.dwLowDateTime=0x5b155ccd, ftLastWriteTime.dwHighDateTime=0x1c9ea0a, nFileSizeHigh=0x0, nFileSizeLow=0xd12f, dwReserved0=0x0, dwReserved1=0x0, cFileName="Professional.xml", cAlternateFileName="PROFES~1.XML")) returned 1 [0100.740] FindNextFileW (in: hFindFile=0x381c40, lpFindFileData=0x31e65c | out: lpFindFileData=0x31e65c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x71a7c91c, ftCreationTime.dwHighDateTime=0x1ca0411, ftLastAccessTime.dwLowDateTime=0x71a7c91c, ftLastAccessTime.dwHighDateTime=0x1ca0411, ftLastWriteTime.dwLowDateTime=0xedf95f70, ftLastWriteTime.dwHighDateTime=0x1ca0423, nFileSizeHigh=0x0, nFileSizeLow=0x68400, dwReserved0=0x0, dwReserved1=0x0, cFileName="regedit.exe", cAlternateFileName="")) returned 1 [0100.740] FindNextFileW (in: hFindFile=0x381c40, lpFindFileData=0x31e65c | out: lpFindFileData=0x31e65c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfeb43ace, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xff1f57a0, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xff1f57a0, ftLastWriteTime.dwHighDateTime=0x1ca0431, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Registration", cAlternateFileName="REGIST~1")) returned 1 [0100.740] FindNextFileW (in: hFindFile=0x381c40, lpFindFileData=0x31e65c | out: lpFindFileData=0x31e65c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfeb69c28, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x2b041c20, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x2b041c20, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="rescache", cAlternateFileName="")) returned 1 [0100.740] FindNextFileW (in: hFindFile=0x381c40, lpFindFileData=0x31e65c | out: lpFindFileData=0x31e65c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfeb8fd82, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x80046d91, ftLastAccessTime.dwHighDateTime=0x1ca0444, ftLastWriteTime.dwLowDateTime=0x80046d91, ftLastWriteTime.dwHighDateTime=0x1ca0444, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Resources", cAlternateFileName="RESOUR~1")) returned 1 [0100.740] FindNextFileW (in: hFindFile=0x381c40, lpFindFileData=0x31e65c | out: lpFindFileData=0x31e65c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfebb5edc, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfebb5edc, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xcb547a92, ftLastWriteTime.dwHighDateTime=0x1ca042b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="SchCache", cAlternateFileName="")) returned 1 [0100.740] FindNextFileW (in: hFindFile=0x381c40, lpFindFileData=0x31e65c | out: lpFindFileData=0x31e65c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfebdc036, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x80046d91, ftLastAccessTime.dwHighDateTime=0x1ca0444, ftLastWriteTime.dwLowDateTime=0x80046d91, ftLastWriteTime.dwHighDateTime=0x1ca0444, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="schemas", cAlternateFileName="")) returned 1 [0100.740] FindNextFileW (in: hFindFile=0x381c40, lpFindFileData=0x31e65c | out: lpFindFileData=0x31e65c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfec02190, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x98abb4cc, ftLastAccessTime.dwHighDateTime=0x1cbf8eb, ftLastWriteTime.dwLowDateTime=0x98abb4cc, ftLastWriteTime.dwHighDateTime=0x1cbf8eb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="security", cAlternateFileName="")) returned 1 [0100.741] FindNextFileW (in: hFindFile=0x381c40, lpFindFileData=0x31e65c | out: lpFindFileData=0x31e65c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf484ebfa, ftCreationTime.dwHighDateTime=0x1ca043d, ftLastAccessTime.dwLowDateTime=0xf4be0d01, ftLastAccessTime.dwHighDateTime=0x1ca043d, ftLastWriteTime.dwLowDateTime=0xf4be0d01, ftLastWriteTime.dwHighDateTime=0x1ca043d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="ServiceProfiles", cAlternateFileName="SERVIC~2")) returned 1 [0100.741] FindNextFileW (in: hFindFile=0x381c40, lpFindFileData=0x31e65c | out: lpFindFileData=0x31e65c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfec4e444, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x1ea1accb, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x1ea1accb, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="servicing", cAlternateFileName="SERVIC~1")) returned 1 [0100.741] FindNextFileW (in: hFindFile=0x381c40, lpFindFileData=0x31e65c | out: lpFindFileData=0x31e65c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf627de2b, ftCreationTime.dwHighDateTime=0x1ca043d, ftLastAccessTime.dwLowDateTime=0xf62a3f8b, ftLastAccessTime.dwHighDateTime=0x1ca043d, ftLastWriteTime.dwLowDateTime=0xf62a3f8b, ftLastWriteTime.dwHighDateTime=0x1ca043d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Setup", cAlternateFileName="")) returned 1 [0100.741] FindNextFileW (in: hFindFile=0x381c40, lpFindFileData=0x31e65c | out: lpFindFileData=0x31e65c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2fb4a840, ftCreationTime.dwHighDateTime=0x1d4d57d, ftLastAccessTime.dwLowDateTime=0x2fb4a840, ftLastAccessTime.dwHighDateTime=0x1d4d57d, ftLastWriteTime.dwLowDateTime=0xb0760260, ftLastWriteTime.dwHighDateTime=0x1d5e82a, nFileSizeHigh=0x0, nFileSizeLow=0x102, dwReserved0=0x0, dwReserved1=0x0, cFileName="setupact.log", cAlternateFileName="")) returned 1 [0100.741] FindNextFileW (in: hFindFile=0x381c40, lpFindFileData=0x31e65c | out: lpFindFileData=0x31e65c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2fb4a840, ftCreationTime.dwHighDateTime=0x1d4d57d, ftLastAccessTime.dwLowDateTime=0x2fb4a840, ftLastAccessTime.dwHighDateTime=0x1d4d57d, ftLastWriteTime.dwLowDateTime=0x2fb4a840, ftLastWriteTime.dwHighDateTime=0x1d4d57d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="setuperr.log", cAlternateFileName="")) returned 1 [0100.741] FindNextFileW (in: hFindFile=0x381c40, lpFindFileData=0x31e65c | out: lpFindFileData=0x31e65c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x9968150d, ftCreationTime.dwHighDateTime=0x1cbf8eb, ftLastAccessTime.dwLowDateTime=0xaf52ba40, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0xaf52ba40, ftLastWriteTime.dwHighDateTime=0x1d305f1, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="ShellNew", cAlternateFileName="")) returned 1 [0100.741] FindNextFileW (in: hFindFile=0x381c40, lpFindFileData=0x31e65c | out: lpFindFileData=0x31e65c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x145b2540, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x2cafb6a0, ftLastAccessTime.dwHighDateTime=0x1d2e621, ftLastWriteTime.dwLowDateTime=0x2cafb6a0, ftLastWriteTime.dwHighDateTime=0x1d2e621, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="SoftwareDistribution", cAlternateFileName="SOFTWA~1")) returned 1 [0100.741] FindNextFileW (in: hFindFile=0x381c40, lpFindFileData=0x31e65c | out: lpFindFileData=0x31e65c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfec7459e, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x1d9da406, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x1d9da406, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Speech", cAlternateFileName="")) returned 1 [0100.742] FindNextFileW (in: hFindFile=0x381c40, lpFindFileData=0x31e65c | out: lpFindFileData=0x31e65c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x936ee880, ftCreationTime.dwHighDateTime=0x1cb892b, ftLastAccessTime.dwLowDateTime=0x936ee880, ftLastAccessTime.dwHighDateTime=0x1cb892b, ftLastWriteTime.dwLowDateTime=0x936ee880, ftLastWriteTime.dwHighDateTime=0x1cb892b, nFileSizeHigh=0x0, nFileSizeLow=0x10600, dwReserved0=0x0, dwReserved1=0x0, cFileName="splwow64.exe", cAlternateFileName="")) returned 1 [0100.742] FindNextFileW (in: hFindFile=0x381c40, lpFindFileData=0x31e65c | out: lpFindFileData=0x31e65c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf0aa2eb0, ftCreationTime.dwHighDateTime=0x1ca0443, ftLastAccessTime.dwLowDateTime=0xf0aa2eb0, ftLastAccessTime.dwHighDateTime=0x1ca0443, ftLastWriteTime.dwLowDateTime=0x5f19ab6d, ftLastWriteTime.dwHighDateTime=0x1c9ea0a, nFileSizeHigh=0x0, nFileSizeLow=0xbc49, dwReserved0=0x0, dwReserved1=0x0, cFileName="Starter.xml", cAlternateFileName="")) returned 1 [0100.742] FindNextFileW (in: hFindFile=0x381c40, lpFindFileData=0x31e65c | out: lpFindFileData=0x31e65c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfec7459e, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfec7459e, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xf404c84a, ftLastWriteTime.dwHighDateTime=0x1ca042b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="system", cAlternateFileName="")) returned 1 [0100.742] FindNextFileW (in: hFindFile=0x381c40, lpFindFileData=0x31e65c | out: lpFindFileData=0x31e65c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xadc7ce10, ftCreationTime.dwHighDateTime=0x1ca042b, ftLastAccessTime.dwLowDateTime=0xadc7ce10, ftLastAccessTime.dwHighDateTime=0x1ca042b, ftLastWriteTime.dwLowDateTime=0x8bb1d8db, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0xdb, dwReserved0=0x0, dwReserved1=0x0, cFileName="system.ini", cAlternateFileName="")) returned 1 [0100.742] FindNextFileW (in: hFindFile=0x381c40, lpFindFileData=0x31e65c | out: lpFindFileData=0x31e65c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfec9a6f8, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xefd85d60, ftLastAccessTime.dwHighDateTime=0x1d4d596, ftLastWriteTime.dwLowDateTime=0xefd85d60, ftLastWriteTime.dwHighDateTime=0x1d4d596, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="System32", cAlternateFileName="")) returned 1 [0100.742] FindNextFileW (in: hFindFile=0x381c40, lpFindFileData=0x31e65c | out: lpFindFileData=0x31e65c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xe13712, ftCreationTime.dwHighDateTime=0x1ca0432, ftLastAccessTime.dwLowDateTime=0xc893570, ftLastAccessTime.dwHighDateTime=0x1d35d06, ftLastWriteTime.dwLowDateTime=0xc893570, ftLastWriteTime.dwHighDateTime=0x1d35d06, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="SysWOW64", cAlternateFileName="")) returned 1 [0100.742] FindNextFileW (in: hFindFile=0x381c40, lpFindFileData=0x31e65c | out: lpFindFileData=0x31e65c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x12b00f8, ftCreationTime.dwHighDateTime=0x1ca0432, ftLastAccessTime.dwLowDateTime=0x8d561533, ftLastAccessTime.dwHighDateTime=0x1ca043f, ftLastWriteTime.dwLowDateTime=0x8d561533, ftLastWriteTime.dwHighDateTime=0x1ca043f, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="TAPI", cAlternateFileName="")) returned 1 [0100.742] FindNextFileW (in: hFindFile=0x381c40, lpFindFileData=0x31e65c | out: lpFindFileData=0x31e65c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x12b00f8, ftCreationTime.dwHighDateTime=0x1ca0432, ftLastAccessTime.dwLowDateTime=0xe3cd110, ftLastAccessTime.dwHighDateTime=0x1d35d06, ftLastWriteTime.dwLowDateTime=0xe3cd110, ftLastWriteTime.dwHighDateTime=0x1d35d06, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Tasks", cAlternateFileName="")) returned 1 [0100.743] FindNextFileW (in: hFindFile=0x381c40, lpFindFileData=0x31e65c | out: lpFindFileData=0x31e65c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x12d6252, ftCreationTime.dwHighDateTime=0x1ca0432, ftLastAccessTime.dwLowDateTime=0xd7782780, ftLastAccessTime.dwHighDateTime=0x1d5e82a, ftLastWriteTime.dwLowDateTime=0xd7782780, ftLastWriteTime.dwHighDateTime=0x1d5e82a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Temp", cAlternateFileName="")) returned 1 [0100.743] FindNextFileW (in: hFindFile=0x381c40, lpFindFileData=0x31e65c | out: lpFindFileData=0x31e65c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x12d6252, ftCreationTime.dwHighDateTime=0x1ca0432, ftLastAccessTime.dwLowDateTime=0x12d6252, ftLastAccessTime.dwHighDateTime=0x1ca0432, ftLastWriteTime.dwLowDateTime=0x9f16e414, ftLastWriteTime.dwHighDateTime=0x1ca042b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="tracing", cAlternateFileName="")) returned 1 [0100.743] FindNextFileW (in: hFindFile=0x381c40, lpFindFileData=0x31e65c | out: lpFindFileData=0x31e65c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7986cda0, ftCreationTime.dwHighDateTime=0x1d2de2a, ftLastAccessTime.dwLowDateTime=0x7986cda0, ftLastAccessTime.dwHighDateTime=0x1d2de2a, ftLastWriteTime.dwLowDateTime=0x7986cda0, ftLastWriteTime.dwHighDateTime=0x1d2de2a, nFileSizeHigh=0x0, nFileSizeLow=0x54b, dwReserved0=0x0, dwReserved1=0x0, cFileName="TSSysprep.log", cAlternateFileName="TSSYSP~1.LOG")) returned 1 [0100.743] FindNextFileW (in: hFindFile=0x381c40, lpFindFileData=0x31e65c | out: lpFindFileData=0x31e65c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2f64321c, ftCreationTime.dwHighDateTime=0x1c9ea14, ftLastAccessTime.dwLowDateTime=0x2f64321c, ftLastAccessTime.dwHighDateTime=0x1c9ea14, ftLastWriteTime.dwLowDateTime=0x2f64321c, ftLastWriteTime.dwHighDateTime=0x1c9ea14, nFileSizeHigh=0x0, nFileSizeLow=0x17240, dwReserved0=0x0, dwReserved1=0x0, cFileName="twain.dll", cAlternateFileName="")) returned 1 [0100.743] FindNextFileW (in: hFindFile=0x381c40, lpFindFileData=0x31e65c | out: lpFindFileData=0x31e65c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x800b91b1, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x80cc6128, ftLastAccessTime.dwHighDateTime=0x1ca0444, ftLastWriteTime.dwLowDateTime=0x80cc6128, ftLastWriteTime.dwHighDateTime=0x1ca0444, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="twain_32", cAlternateFileName="")) returned 1 [0100.743] FindNextFileW (in: hFindFile=0x381c40, lpFindFileData=0x31e65c | out: lpFindFileData=0x31e65c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb3bc54f7, ftCreationTime.dwHighDateTime=0x1cb892b, ftLastAccessTime.dwLowDateTime=0xb3bc54f7, ftLastAccessTime.dwHighDateTime=0x1cb892b, ftLastWriteTime.dwLowDateTime=0xb3bc54f7, ftLastWriteTime.dwHighDateTime=0x1cb892b, nFileSizeHigh=0x0, nFileSizeLow=0xc800, dwReserved0=0x0, dwReserved1=0x0, cFileName="twain_32.dll", cAlternateFileName="")) returned 1 [0100.743] FindNextFileW (in: hFindFile=0x381c40, lpFindFileData=0x31e65c | out: lpFindFileData=0x31e65c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe5193c78, ftCreationTime.dwHighDateTime=0x1ca040b, ftLastAccessTime.dwLowDateTime=0xe5193c78, ftLastAccessTime.dwHighDateTime=0x1ca040b, ftLastWriteTime.dwLowDateTime=0x2f66937c, ftLastWriteTime.dwHighDateTime=0x1c9ea14, nFileSizeHigh=0x0, nFileSizeLow=0xc210, dwReserved0=0x0, dwReserved1=0x0, cFileName="twunk_16.exe", cAlternateFileName="")) returned 1 [0100.743] FindNextFileW (in: hFindFile=0x381c40, lpFindFileData=0x31e65c | out: lpFindFileData=0x31e65c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x149c5632, ftCreationTime.dwHighDateTime=0x1ca0418, ftLastAccessTime.dwLowDateTime=0x149c5632, ftLastAccessTime.dwHighDateTime=0x1ca0418, ftLastWriteTime.dwLowDateTime=0x77d4a690, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x7a00, dwReserved0=0x0, dwReserved1=0x0, cFileName="twunk_32.exe", cAlternateFileName="")) returned 1 [0100.743] FindNextFileW (in: hFindFile=0x381c40, lpFindFileData=0x31e65c | out: lpFindFileData=0x31e65c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x89a56640, ftCreationTime.dwHighDateTime=0x1d305eb, ftLastAccessTime.dwLowDateTime=0x89a56640, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0xf1490400, ftLastWriteTime.dwHighDateTime=0x1d305eb, nFileSizeHigh=0x0, nFileSizeLow=0x27, dwReserved0=0x0, dwReserved1=0x0, cFileName="vbaddin.ini", cAlternateFileName="")) returned 1 [0100.744] FindNextFileW (in: hFindFile=0x381c40, lpFindFileData=0x31e65c | out: lpFindFileData=0x31e65c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x12d6252, ftCreationTime.dwHighDateTime=0x1ca0432, ftLastAccessTime.dwLowDateTime=0x12d6252, ftLastAccessTime.dwHighDateTime=0x1ca0432, ftLastWriteTime.dwLowDateTime=0x12d6252, ftLastWriteTime.dwHighDateTime=0x1ca0432, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Vss", cAlternateFileName="")) returned 1 [0100.744] FindNextFileW (in: hFindFile=0x381c40, lpFindFileData=0x31e65c | out: lpFindFileData=0x31e65c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x12fc3ac, ftCreationTime.dwHighDateTime=0x1ca0432, ftLastAccessTime.dwLowDateTime=0x80046d91, ftLastAccessTime.dwHighDateTime=0x1ca0444, ftLastWriteTime.dwLowDateTime=0x80046d91, ftLastWriteTime.dwHighDateTime=0x1ca0444, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Web", cAlternateFileName="")) returned 1 [0100.744] FindNextFileW (in: hFindFile=0x381c40, lpFindFileData=0x31e65c | out: lpFindFileData=0x31e65c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xadc7ce10, ftCreationTime.dwHighDateTime=0x1ca042b, ftLastAccessTime.dwLowDateTime=0xadc7ce10, ftLastAccessTime.dwHighDateTime=0x1ca042b, ftLastWriteTime.dwLowDateTime=0x249a330, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x1de, dwReserved0=0x0, dwReserved1=0x0, cFileName="win.ini", cAlternateFileName="")) returned 1 [0100.744] FindNextFileW (in: hFindFile=0x381c40, lpFindFileData=0x31e65c | out: lpFindFileData=0x31e65c*(dwFileAttributes=0x23, ftCreationTime.dwLowDateTime=0x2870a176, ftCreationTime.dwHighDateTime=0x1ca043f, ftLastAccessTime.dwLowDateTime=0x2870a176, ftLastAccessTime.dwHighDateTime=0x1ca043f, ftLastWriteTime.dwLowDateTime=0x28b347fe, ftLastWriteTime.dwHighDateTime=0x1ca043f, nFileSizeHigh=0x0, nFileSizeLow=0x2ed, dwReserved0=0x0, dwReserved1=0x0, cFileName="WindowsShell.Manifest", cAlternateFileName="WINDOW~1.MAN")) returned 1 [0100.744] FindNextFileW (in: hFindFile=0x381c40, lpFindFileData=0x31e65c | out: lpFindFileData=0x31e65c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x14519fc0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x14519fc0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x2c655760, ftLastWriteTime.dwHighDateTime=0x1d4d597, nFileSizeHigh=0x0, nFileSizeLow=0x1e51f, dwReserved0=0x0, dwReserved1=0x0, cFileName="WindowsUpdate.log", cAlternateFileName="WINDOW~1.LOG")) returned 1 [0100.744] FindNextFileW (in: hFindFile=0x381c40, lpFindFileData=0x31e65c | out: lpFindFileData=0x31e65c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc68ade7e, ftCreationTime.dwHighDateTime=0x1ca0417, ftLastAccessTime.dwLowDateTime=0xc68ade7e, ftLastAccessTime.dwHighDateTime=0x1ca0417, ftLastWriteTime.dwLowDateTime=0x795b1f80, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x2600, dwReserved0=0x0, dwReserved1=0x0, cFileName="winhlp32.exe", cAlternateFileName="")) returned 1 [0100.744] FindNextFileW (in: hFindFile=0x381c40, lpFindFileData=0x31e65c | out: lpFindFileData=0x31e65c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x12fc3ac, ftCreationTime.dwHighDateTime=0x1ca0432, ftLastAccessTime.dwLowDateTime=0xbbbe9b70, ftLastAccessTime.dwHighDateTime=0x1d2fab4, ftLastWriteTime.dwLowDateTime=0xbbbe9b70, ftLastWriteTime.dwHighDateTime=0x1d2fab4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="winsxs", cAlternateFileName="")) returned 1 [0100.745] FindNextFileW (in: hFindFile=0x381c40, lpFindFileData=0x31e65c | out: lpFindFileData=0x31e65c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x67827cf3, ftCreationTime.dwHighDateTime=0x1c9ea0d, ftLastAccessTime.dwLowDateTime=0x67827cf3, ftLastAccessTime.dwHighDateTime=0x1c9ea0d, ftLastWriteTime.dwLowDateTime=0x6784de51, ftLastWriteTime.dwHighDateTime=0x1c9ea0d, nFileSizeHigh=0x0, nFileSizeLow=0x4d4e0, dwReserved0=0x0, dwReserved1=0x0, cFileName="WMSysPr9.prx", cAlternateFileName="")) returned 1 [0100.745] FindNextFileW (in: hFindFile=0x381c40, lpFindFileData=0x31e65c | out: lpFindFileData=0x31e65c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x89802aba, ftCreationTime.dwHighDateTime=0x1ca0415, ftLastAccessTime.dwLowDateTime=0x89802aba, ftLastAccessTime.dwHighDateTime=0x1ca0415, ftLastWriteTime.dwLowDateTime=0xfeb14f80, ftLastWriteTime.dwHighDateTime=0x1ca0423, nFileSizeHigh=0x0, nFileSizeLow=0x2800, dwReserved0=0x0, dwReserved1=0x0, cFileName="write.exe", cAlternateFileName="")) returned 1 [0100.745] FindNextFileW (in: hFindFile=0x381c40, lpFindFileData=0x31e65c | out: lpFindFileData=0x31e65c*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0100.745] FindClose (in: hFindFile=0x381c40 | out: hFindFile=0x381c40) returned 1 [0100.745] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e8e4) returned 1 [0100.745] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e8f0) returned 1 [0100.745] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e924) returned 1 [0100.745] GetFullPathNameW (in: lpFileName="C:\\Windows", nBufferLength=0x105, lpBuffer=0x31e42c, lpFilePart=0x0 | out: lpBuffer="C:\\Windows", lpFilePart=0x0) returned 0xa [0100.745] GetFullPathNameW (in: lpFileName="C:\\Windows\\", nBufferLength=0x105, lpBuffer=0x31e400, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\", lpFilePart=0x0) returned 0xb [0100.745] FindFirstFileW (in: lpFileName="C:\\Windows\\*", lpFindFileData=0x31e64c | out: lpFindFileData=0x31e64c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfdb0c77c, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x2fb4a840, ftLastAccessTime.dwHighDateTime=0x1d4d57d, ftLastWriteTime.dwLowDateTime=0x2fb4a840, ftLastWriteTime.dwHighDateTime=0x1d4d57d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x381c40 [0100.745] FindNextFileW (in: hFindFile=0x381c40, lpFindFileData=0x31e65c | out: lpFindFileData=0x31e65c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfdb0c77c, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x2fb4a840, ftLastAccessTime.dwHighDateTime=0x1d4d57d, ftLastWriteTime.dwLowDateTime=0x2fb4a840, ftLastWriteTime.dwHighDateTime=0x1d4d57d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0100.746] FindNextFileW (in: hFindFile=0x381c40, lpFindFileData=0x31e65c | out: lpFindFileData=0x31e65c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x800b91b1, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x80b6f4c5, ftLastAccessTime.dwHighDateTime=0x1ca0444, ftLastWriteTime.dwLowDateTime=0x80b6f4c5, ftLastWriteTime.dwHighDateTime=0x1ca0444, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="addins", cAlternateFileName="")) returned 1 [0100.746] FindNextFileW (in: hFindFile=0x381c40, lpFindFileData=0x31e65c | out: lpFindFileData=0x31e65c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfdb0c77c, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfdb0c77c, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xfdb0c77c, ftLastWriteTime.dwHighDateTime=0x1ca0431, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="AppCompat", cAlternateFileName="APPCOM~1")) returned 1 [0100.746] FindNextFileW (in: hFindFile=0x381c40, lpFindFileData=0x31e65c | out: lpFindFileData=0x31e65c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfdb328d6, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x57087b83, ftLastAccessTime.dwHighDateTime=0x1cb892c, ftLastWriteTime.dwLowDateTime=0x57087b83, ftLastWriteTime.dwHighDateTime=0x1cb892c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="AppPatch", cAlternateFileName="")) returned 1 [0100.746] FindNextFileW (in: hFindFile=0x381c40, lpFindFileData=0x31e65c | out: lpFindFileData=0x31e65c*(dwFileAttributes=0x15, ftCreationTime.dwLowDateTime=0xfdb58a30, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xe968e7e0, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0xe968e7e0, ftLastWriteTime.dwHighDateTime=0x1d305f1, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="assembly", cAlternateFileName="")) returned 1 [0100.746] FindNextFileW (in: hFindFile=0x381c40, lpFindFileData=0x31e65c | out: lpFindFileData=0x31e65c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x97675415, ftCreationTime.dwHighDateTime=0x1cb892b, ftLastAccessTime.dwLowDateTime=0x97675415, ftLastAccessTime.dwHighDateTime=0x1cb892b, ftLastWriteTime.dwLowDateTime=0x977f21d7, ftLastWriteTime.dwHighDateTime=0x1cb892b, nFileSizeHigh=0x0, nFileSizeLow=0x11600, dwReserved0=0x0, dwReserved1=0x0, cFileName="bfsvc.exe", cAlternateFileName="")) returned 1 [0100.746] FindNextFileW (in: hFindFile=0x381c40, lpFindFileData=0x31e65c | out: lpFindFileData=0x31e65c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfde52538, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x80105472, ftLastAccessTime.dwHighDateTime=0x1ca0444, ftLastWriteTime.dwLowDateTime=0x80105472, ftLastWriteTime.dwHighDateTime=0x1ca0444, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Boot", cAlternateFileName="")) returned 1 [0100.746] FindNextFileW (in: hFindFile=0x381c40, lpFindFileData=0x31e65c | out: lpFindFileData=0x31e65c*(dwFileAttributes=0x24, ftCreationTime.dwLowDateTime=0x5562e640, ftCreationTime.dwHighDateTime=0x1ca0445, ftLastAccessTime.dwLowDateTime=0x5562e640, ftLastAccessTime.dwHighDateTime=0x1ca0445, ftLastWriteTime.dwLowDateTime=0xafd68640, ftLastWriteTime.dwHighDateTime=0x1d5e82a, nFileSizeHigh=0x0, nFileSizeLow=0x10800, dwReserved0=0x0, dwReserved1=0x0, cFileName="bootstat.dat", cAlternateFileName="")) returned 1 [0100.746] FindNextFileW (in: hFindFile=0x381c40, lpFindFileData=0x31e65c | out: lpFindFileData=0x31e65c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfe36132c, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x80105472, ftLastAccessTime.dwHighDateTime=0x1ca0444, ftLastWriteTime.dwLowDateTime=0x80105472, ftLastWriteTime.dwHighDateTime=0x1ca0444, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Branding", cAlternateFileName="")) returned 1 [0100.747] FindNextFileW (in: hFindFile=0x381c40, lpFindFileData=0x31e65c | out: lpFindFileData=0x31e65c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x98abb4cc, ftCreationTime.dwHighDateTime=0x1cbf8eb, ftLastAccessTime.dwLowDateTime=0x61766720, ftLastAccessTime.dwHighDateTime=0x1d2de2a, ftLastWriteTime.dwLowDateTime=0x61766720, ftLastWriteTime.dwHighDateTime=0x1d2de2a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="CSC", cAlternateFileName="")) returned 1 [0100.747] FindNextFileW (in: hFindFile=0x381c40, lpFindFileData=0x31e65c | out: lpFindFileData=0x31e65c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfe36132c, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x806ac8bc, ftLastAccessTime.dwHighDateTime=0x1ca0444, ftLastWriteTime.dwLowDateTime=0x806ac8bc, ftLastWriteTime.dwHighDateTime=0x1ca0444, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Cursors", cAlternateFileName="")) returned 1 [0100.747] FindNextFileW (in: hFindFile=0x381c40, lpFindFileData=0x31e65c | out: lpFindFileData=0x31e65c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf8a36d94, ftCreationTime.dwHighDateTime=0x1ca043d, ftLastAccessTime.dwLowDateTime=0x181cd0c0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x181cd0c0, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="debug", cAlternateFileName="")) returned 1 [0100.747] FindNextFileW (in: hFindFile=0x381c40, lpFindFileData=0x31e65c | out: lpFindFileData=0x31e65c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x800b91b1, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x800b91b1, ftLastAccessTime.dwHighDateTime=0x1ca0444, ftLastWriteTime.dwLowDateTime=0x800b91b1, ftLastWriteTime.dwHighDateTime=0x1ca0444, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="diagnostics", cAlternateFileName="DIAGNO~1")) returned 1 [0100.747] FindNextFileW (in: hFindFile=0x381c40, lpFindFileData=0x31e65c | out: lpFindFileData=0x31e65c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x3763cf0c, ftCreationTime.dwHighDateTime=0x1ca0445, ftLastAccessTime.dwLowDateTime=0xa9eeab22, ftLastAccessTime.dwHighDateTime=0x1cbf8e9, ftLastWriteTime.dwLowDateTime=0x3763cf0c, ftLastWriteTime.dwHighDateTime=0x1ca0445, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="DigitalLocker", cAlternateFileName="DIGITA~1")) returned 1 [0100.747] FindNextFileW (in: hFindFile=0x381c40, lpFindFileData=0x31e65c | out: lpFindFileData=0x31e65c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x80046d91, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x806ac8bc, ftLastAccessTime.dwHighDateTime=0x1ca0444, ftLastWriteTime.dwLowDateTime=0x806ac8bc, ftLastWriteTime.dwHighDateTime=0x1ca0444, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Downloaded Program Files", cAlternateFileName="DOWNLO~1")) returned 1 [0100.747] FindNextFileW (in: hFindFile=0x381c40, lpFindFileData=0x31e65c | out: lpFindFileData=0x31e65c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xffb94625, ftCreationTime.dwHighDateTime=0x1ca043d, ftLastAccessTime.dwLowDateTime=0xffb94625, ftLastAccessTime.dwHighDateTime=0x1ca043d, ftLastWriteTime.dwLowDateTime=0x7a349200, ftLastWriteTime.dwHighDateTime=0x1d2de2a, nFileSizeHigh=0x0, nFileSizeLow=0xae6, dwReserved0=0x0, dwReserved1=0x0, cFileName="DtcInstall.log", cAlternateFileName="DTCINS~1.LOG")) returned 1 [0100.747] FindNextFileW (in: hFindFile=0x381c40, lpFindFileData=0x31e65c | out: lpFindFileData=0x31e65c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x996cd9eb, ftCreationTime.dwHighDateTime=0x1cbf8eb, ftLastAccessTime.dwLowDateTime=0xa9fa1e6a, ftLastAccessTime.dwHighDateTime=0x1cbf8eb, ftLastWriteTime.dwLowDateTime=0x9cf49440, ftLastWriteTime.dwHighDateTime=0x1cbf8eb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="ehome", cAlternateFileName="")) returned 1 [0100.747] FindNextFileW (in: hFindFile=0x381c40, lpFindFileData=0x31e65c | out: lpFindFileData=0x31e65c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x3757e82b, ftCreationTime.dwHighDateTime=0x1ca0445, ftLastAccessTime.dwLowDateTime=0x23fb0799, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x1e423fe3, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="en-US", cAlternateFileName="")) returned 1 [0100.748] FindNextFileW (in: hFindFile=0x381c40, lpFindFileData=0x31e65c | out: lpFindFileData=0x31e65c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x90cd4312, ftCreationTime.dwHighDateTime=0x1cb892b, ftLastAccessTime.dwLowDateTime=0x90cd4312, ftLastAccessTime.dwHighDateTime=0x1cb892b, ftLastWriteTime.dwLowDateTime=0x90d6c893, ftLastWriteTime.dwHighDateTime=0x1cb892b, nFileSizeHigh=0x0, nFileSizeLow=0x2bd400, dwReserved0=0x0, dwReserved1=0x0, cFileName="explorer.exe", cAlternateFileName="")) returned 1 [0100.748] FindNextFileW (in: hFindFile=0x381c40, lpFindFileData=0x31e65c | out: lpFindFileData=0x31e65c*(dwFileAttributes=0x15, ftCreationTime.dwLowDateTime=0xfe387486, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x6d0f7050, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x6d0f7050, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Fonts", cAlternateFileName="")) returned 1 [0100.748] FindNextFileW (in: hFindFile=0x381c40, lpFindFileData=0x31e65c | out: lpFindFileData=0x31e65c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc0a7e9b0, ftCreationTime.dwHighDateTime=0x1ca0410, ftLastAccessTime.dwLowDateTime=0xc0a7e9b0, ftLastAccessTime.dwHighDateTime=0x1ca0410, ftLastWriteTime.dwLowDateTime=0xe2da8a60, ftLastWriteTime.dwHighDateTime=0x1ca0423, nFileSizeHigh=0x0, nFileSizeLow=0x3c00, dwReserved0=0x0, dwReserved1=0x0, cFileName="fveupdate.exe", cAlternateFileName="")) returned 1 [0100.748] FindNextFileW (in: hFindFile=0x381c40, lpFindFileData=0x31e65c | out: lpFindFileData=0x31e65c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfe387486, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xe9340f25, ftLastAccessTime.dwHighDateTime=0x1cbf8eb, ftLastWriteTime.dwLowDateTime=0xe9340f25, ftLastWriteTime.dwHighDateTime=0x1cbf8eb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Globalization", cAlternateFileName="GLOBAL~1")) returned 1 [0100.748] FindNextFileW (in: hFindFile=0x381c40, lpFindFileData=0x31e65c | out: lpFindFileData=0x31e65c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfe3f9894, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x1d967bdb, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x1d967bdb, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Help", cAlternateFileName="")) returned 1 [0100.748] FindNextFileW (in: hFindFile=0x381c40, lpFindFileData=0x31e65c | out: lpFindFileData=0x31e65c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x34a5a972, ftCreationTime.dwHighDateTime=0x1ca041a, ftLastAccessTime.dwLowDateTime=0x34a5a972, ftLastAccessTime.dwHighDateTime=0x1ca041a, ftLastWriteTime.dwLowDateTime=0xe391cc70, ftLastWriteTime.dwHighDateTime=0x1ca0423, nFileSizeHigh=0x0, nFileSizeLow=0xb3200, dwReserved0=0x0, dwReserved1=0x0, cFileName="HelpPane.exe", cAlternateFileName="")) returned 1 [0100.748] FindNextFileW (in: hFindFile=0x381c40, lpFindFileData=0x31e65c | out: lpFindFileData=0x31e65c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x16ca6ff3, ftCreationTime.dwHighDateTime=0x1ca041a, ftLastAccessTime.dwLowDateTime=0x16ca6ff3, ftLastAccessTime.dwHighDateTime=0x1ca041a, ftLastWriteTime.dwLowDateTime=0xe391cc70, ftLastWriteTime.dwHighDateTime=0x1ca0423, nFileSizeHigh=0x0, nFileSizeLow=0x4200, dwReserved0=0x0, dwReserved1=0x0, cFileName="hh.exe", cAlternateFileName="")) returned 1 [0100.748] FindNextFileW (in: hFindFile=0x381c40, lpFindFileData=0x31e65c | out: lpFindFileData=0x31e65c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfe445b48, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x3763cf0c, ftLastAccessTime.dwHighDateTime=0x1ca0445, ftLastWriteTime.dwLowDateTime=0x3763cf0c, ftLastWriteTime.dwHighDateTime=0x1ca0445, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="IME", cAlternateFileName="")) returned 1 [0100.749] FindNextFileW (in: hFindFile=0x381c40, lpFindFileData=0x31e65c | out: lpFindFileData=0x31e65c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfe50420a, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xefd5fc00, ftLastAccessTime.dwHighDateTime=0x1d4d596, ftLastWriteTime.dwLowDateTime=0xefd5fc00, ftLastWriteTime.dwHighDateTime=0x1d4d596, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="inf", cAlternateFileName="")) returned 1 [0100.749] FindNextFileW (in: hFindFile=0x381c40, lpFindFileData=0x31e65c | out: lpFindFileData=0x31e65c*(dwFileAttributes=0x16, ftCreationTime.dwLowDateTime=0x72a697c0, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0xeda8bc40, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0xeda8bc40, ftLastWriteTime.dwHighDateTime=0x1d305f1, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Installer", cAlternateFileName="INSTAL~1")) returned 1 [0100.749] FindNextFileW (in: hFindFile=0x381c40, lpFindFileData=0x31e65c | out: lpFindFileData=0x31e65c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfe60eb80, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x80b6f4c5, ftLastAccessTime.dwHighDateTime=0x1ca0444, ftLastWriteTime.dwLowDateTime=0x80b6f4c5, ftLastWriteTime.dwHighDateTime=0x1ca0444, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="L2Schemas", cAlternateFileName="L2SCHE~1")) returned 1 [0100.749] FindNextFileW (in: hFindFile=0x381c40, lpFindFileData=0x31e65c | out: lpFindFileData=0x31e65c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfe60eb80, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfe60eb80, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0x9a0a5fd1, ftLastWriteTime.dwHighDateTime=0x1ca042b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="LiveKernelReports", cAlternateFileName="LIVEKE~1")) returned 1 [0100.749] FindNextFileW (in: hFindFile=0x381c40, lpFindFileData=0x31e65c | out: lpFindFileData=0x31e65c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfe60eb80, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x6938ae40, ftLastAccessTime.dwHighDateTime=0x1d2fafa, ftLastWriteTime.dwLowDateTime=0x6938ae40, ftLastWriteTime.dwHighDateTime=0x1d2fafa, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Logs", cAlternateFileName="")) returned 1 [0100.749] FindNextFileW (in: hFindFile=0x381c40, lpFindFileData=0x31e65c | out: lpFindFileData=0x31e65c*(dwFileAttributes=0x15, ftCreationTime.dwLowDateTime=0xfe60eb80, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x8105822e, ftLastAccessTime.dwHighDateTime=0x1ca0444, ftLastWriteTime.dwLowDateTime=0x8105822e, ftLastWriteTime.dwHighDateTime=0x1ca0444, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Media", cAlternateFileName="")) returned 1 [0100.749] FindNextFileW (in: hFindFile=0x381c40, lpFindFileData=0x31e65c | out: lpFindFileData=0x31e65c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7f29dbd7, ftCreationTime.dwHighDateTime=0x1ca0417, ftLastAccessTime.dwLowDateTime=0x7f29dbd7, ftLastAccessTime.dwHighDateTime=0x1ca0417, ftLastWriteTime.dwLowDateTime=0x9d4aec0c, ftLastWriteTime.dwHighDateTime=0x1ca040e, nFileSizeHigh=0x0, nFileSizeLow=0xa87b, dwReserved0=0x0, dwReserved1=0x0, cFileName="mib.bin", cAlternateFileName="")) returned 1 [0100.749] FindNextFileW (in: hFindFile=0x381c40, lpFindFileData=0x31e65c | out: lpFindFileData=0x31e65c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfe6f339c, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xd0be0600, ftLastAccessTime.dwHighDateTime=0x1d4d596, ftLastWriteTime.dwLowDateTime=0xd0be0600, ftLastWriteTime.dwHighDateTime=0x1d4d596, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.NET", cAlternateFileName="MICROS~1.NET")) returned 1 [0100.749] FindNextFileW (in: hFindFile=0x381c40, lpFindFileData=0x31e65c | out: lpFindFileData=0x31e65c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x56a9ce00, ftCreationTime.dwHighDateTime=0x1d2e676, ftLastAccessTime.dwLowDateTime=0x56a9ce00, ftLastAccessTime.dwHighDateTime=0x1d2e676, ftLastWriteTime.dwLowDateTime=0x56a9ce00, ftLastWriteTime.dwHighDateTime=0x1d2e676, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Migration", cAlternateFileName="MIGRAT~1")) returned 1 [0100.750] FindNextFileW (in: hFindFile=0x381c40, lpFindFileData=0x31e65c | out: lpFindFileData=0x31e65c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfea5f2b2, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfea5f2b2, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0x9fcbcbb0, ftLastWriteTime.dwHighDateTime=0x1ca042b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="ModemLogs", cAlternateFileName="MODEML~1")) returned 1 [0100.750] FindNextFileW (in: hFindFile=0x381c40, lpFindFileData=0x31e65c | out: lpFindFileData=0x31e65c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc82fedc8, ftCreationTime.dwHighDateTime=0x1ca042b, ftLastAccessTime.dwLowDateTime=0xc82fedc8, ftLastAccessTime.dwHighDateTime=0x1ca042b, ftLastWriteTime.dwLowDateTime=0x2d6b0bf3, ftLastWriteTime.dwHighDateTime=0x1c9ea0b, nFileSizeHigh=0x0, nFileSizeLow=0x57d, dwReserved0=0x0, dwReserved1=0x0, cFileName="msdfmap.ini", cAlternateFileName="")) returned 1 [0100.750] FindNextFileW (in: hFindFile=0x381c40, lpFindFileData=0x31e65c | out: lpFindFileData=0x31e65c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8eb2c4cd, ftCreationTime.dwHighDateTime=0x1ca0415, ftLastAccessTime.dwLowDateTime=0x8eb2c4cd, ftLastAccessTime.dwHighDateTime=0x1ca0415, ftLastWriteTime.dwLowDateTime=0xeb804920, ftLastWriteTime.dwHighDateTime=0x1ca0423, nFileSizeHigh=0x0, nFileSizeLow=0x2f400, dwReserved0=0x0, dwReserved1=0x0, cFileName="notepad.exe", cAlternateFileName="")) returned 1 [0100.750] FindNextFileW (in: hFindFile=0x381c40, lpFindFileData=0x31e65c | out: lpFindFileData=0x31e65c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x800df312, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x810320ce, ftLastAccessTime.dwHighDateTime=0x1ca0444, ftLastWriteTime.dwLowDateTime=0x810320ce, ftLastWriteTime.dwHighDateTime=0x1ca0444, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Offline Web Pages", cAlternateFileName="OFFLIN~1")) returned 1 [0100.750] FindNextFileW (in: hFindFile=0x381c40, lpFindFileData=0x31e65c | out: lpFindFileData=0x31e65c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xb3172800, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0x281b0dc0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x281b0dc0, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Panther", cAlternateFileName="")) returned 1 [0100.750] FindNextFileW (in: hFindFile=0x381c40, lpFindFileData=0x31e65c | out: lpFindFileData=0x31e65c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x50ea0e30, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x50ea0e30, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x50ea0e30, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="PCHEALTH", cAlternateFileName="")) returned 1 [0100.750] FindNextFileW (in: hFindFile=0x381c40, lpFindFileData=0x31e65c | out: lpFindFileData=0x31e65c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x80046d91, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x80046d91, ftLastAccessTime.dwHighDateTime=0x1ca0444, ftLastWriteTime.dwLowDateTime=0x80046d91, ftLastWriteTime.dwHighDateTime=0x1ca0444, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Performance", cAlternateFileName="PERFOR~1")) returned 1 [0100.750] FindNextFileW (in: hFindFile=0x381c40, lpFindFileData=0x31e65c | out: lpFindFileData=0x31e65c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc4e1cc01, ftCreationTime.dwHighDateTime=0x1cb892e, ftLastAccessTime.dwLowDateTime=0xc4e1cc01, ftLastAccessTime.dwHighDateTime=0x1cb892e, ftLastWriteTime.dwLowDateTime=0x78374e00, ftLastWriteTime.dwHighDateTime=0x1d30596, nFileSizeHigh=0x0, nFileSizeLow=0x69ea, dwReserved0=0x0, dwReserved1=0x0, cFileName="PFRO.log", cAlternateFileName="")) returned 1 [0100.750] FindNextFileW (in: hFindFile=0x381c40, lpFindFileData=0x31e65c | out: lpFindFileData=0x31e65c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfea8540c, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfeaf781a, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xfeaf781a, ftLastWriteTime.dwHighDateTime=0x1ca0431, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="PLA", cAlternateFileName="")) returned 1 [0100.751] FindNextFileW (in: hFindFile=0x381c40, lpFindFileData=0x31e65c | out: lpFindFileData=0x31e65c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfeb1d974, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x94d2e7b9, ftLastAccessTime.dwHighDateTime=0x1cbf8eb, ftLastWriteTime.dwLowDateTime=0x94d2e7b9, ftLastWriteTime.dwHighDateTime=0x1cbf8eb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="PolicyDefinitions", cAlternateFileName="POLICY~1")) returned 1 [0100.751] FindNextFileW (in: hFindFile=0x381c40, lpFindFileData=0x31e65c | out: lpFindFileData=0x31e65c*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x6240bc00, ftCreationTime.dwHighDateTime=0x1d2de2a, ftLastAccessTime.dwLowDateTime=0xef82e560, ftLastAccessTime.dwHighDateTime=0x1d6eb7e, ftLastWriteTime.dwLowDateTime=0xef82e560, ftLastWriteTime.dwHighDateTime=0x1d6eb7e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Prefetch", cAlternateFileName="")) returned 1 [0100.751] FindNextFileW (in: hFindFile=0x381c40, lpFindFileData=0x31e65c | out: lpFindFileData=0x31e65c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xaf9a5c4e, ftCreationTime.dwHighDateTime=0x1cbf8eb, ftLastAccessTime.dwLowDateTime=0xaf9cbebd, ftLastAccessTime.dwHighDateTime=0x1cbf8eb, ftLastWriteTime.dwLowDateTime=0x5b155ccd, ftLastWriteTime.dwHighDateTime=0x1c9ea0a, nFileSizeHigh=0x0, nFileSizeLow=0xd12f, dwReserved0=0x0, dwReserved1=0x0, cFileName="Professional.xml", cAlternateFileName="PROFES~1.XML")) returned 1 [0100.751] FindNextFileW (in: hFindFile=0x381c40, lpFindFileData=0x31e65c | out: lpFindFileData=0x31e65c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x71a7c91c, ftCreationTime.dwHighDateTime=0x1ca0411, ftLastAccessTime.dwLowDateTime=0x71a7c91c, ftLastAccessTime.dwHighDateTime=0x1ca0411, ftLastWriteTime.dwLowDateTime=0xedf95f70, ftLastWriteTime.dwHighDateTime=0x1ca0423, nFileSizeHigh=0x0, nFileSizeLow=0x68400, dwReserved0=0x0, dwReserved1=0x0, cFileName="regedit.exe", cAlternateFileName="")) returned 1 [0100.751] FindNextFileW (in: hFindFile=0x381c40, lpFindFileData=0x31e65c | out: lpFindFileData=0x31e65c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfeb43ace, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xff1f57a0, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xff1f57a0, ftLastWriteTime.dwHighDateTime=0x1ca0431, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Registration", cAlternateFileName="REGIST~1")) returned 1 [0100.751] FindNextFileW (in: hFindFile=0x381c40, lpFindFileData=0x31e65c | out: lpFindFileData=0x31e65c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfeb69c28, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x2b041c20, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x2b041c20, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="rescache", cAlternateFileName="")) returned 1 [0100.751] FindNextFileW (in: hFindFile=0x381c40, lpFindFileData=0x31e65c | out: lpFindFileData=0x31e65c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfeb8fd82, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x80046d91, ftLastAccessTime.dwHighDateTime=0x1ca0444, ftLastWriteTime.dwLowDateTime=0x80046d91, ftLastWriteTime.dwHighDateTime=0x1ca0444, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Resources", cAlternateFileName="RESOUR~1")) returned 1 [0100.751] FindNextFileW (in: hFindFile=0x381c40, lpFindFileData=0x31e65c | out: lpFindFileData=0x31e65c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfebb5edc, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfebb5edc, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xcb547a92, ftLastWriteTime.dwHighDateTime=0x1ca042b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="SchCache", cAlternateFileName="")) returned 1 [0100.751] FindNextFileW (in: hFindFile=0x381c40, lpFindFileData=0x31e65c | out: lpFindFileData=0x31e65c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfebdc036, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x80046d91, ftLastAccessTime.dwHighDateTime=0x1ca0444, ftLastWriteTime.dwLowDateTime=0x80046d91, ftLastWriteTime.dwHighDateTime=0x1ca0444, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="schemas", cAlternateFileName="")) returned 1 [0100.752] FindNextFileW (in: hFindFile=0x381c40, lpFindFileData=0x31e65c | out: lpFindFileData=0x31e65c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfec02190, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x98abb4cc, ftLastAccessTime.dwHighDateTime=0x1cbf8eb, ftLastWriteTime.dwLowDateTime=0x98abb4cc, ftLastWriteTime.dwHighDateTime=0x1cbf8eb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="security", cAlternateFileName="")) returned 1 [0100.752] FindNextFileW (in: hFindFile=0x381c40, lpFindFileData=0x31e65c | out: lpFindFileData=0x31e65c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf484ebfa, ftCreationTime.dwHighDateTime=0x1ca043d, ftLastAccessTime.dwLowDateTime=0xf4be0d01, ftLastAccessTime.dwHighDateTime=0x1ca043d, ftLastWriteTime.dwLowDateTime=0xf4be0d01, ftLastWriteTime.dwHighDateTime=0x1ca043d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="ServiceProfiles", cAlternateFileName="SERVIC~2")) returned 1 [0100.752] FindNextFileW (in: hFindFile=0x381c40, lpFindFileData=0x31e65c | out: lpFindFileData=0x31e65c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfec4e444, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x1ea1accb, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x1ea1accb, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="servicing", cAlternateFileName="SERVIC~1")) returned 1 [0100.752] FindNextFileW (in: hFindFile=0x381c40, lpFindFileData=0x31e65c | out: lpFindFileData=0x31e65c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf627de2b, ftCreationTime.dwHighDateTime=0x1ca043d, ftLastAccessTime.dwLowDateTime=0xf62a3f8b, ftLastAccessTime.dwHighDateTime=0x1ca043d, ftLastWriteTime.dwLowDateTime=0xf62a3f8b, ftLastWriteTime.dwHighDateTime=0x1ca043d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Setup", cAlternateFileName="")) returned 1 [0100.752] FindNextFileW (in: hFindFile=0x381c40, lpFindFileData=0x31e65c | out: lpFindFileData=0x31e65c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2fb4a840, ftCreationTime.dwHighDateTime=0x1d4d57d, ftLastAccessTime.dwLowDateTime=0x2fb4a840, ftLastAccessTime.dwHighDateTime=0x1d4d57d, ftLastWriteTime.dwLowDateTime=0xb0760260, ftLastWriteTime.dwHighDateTime=0x1d5e82a, nFileSizeHigh=0x0, nFileSizeLow=0x102, dwReserved0=0x0, dwReserved1=0x0, cFileName="setupact.log", cAlternateFileName="")) returned 1 [0100.752] FindNextFileW (in: hFindFile=0x381c40, lpFindFileData=0x31e65c | out: lpFindFileData=0x31e65c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2fb4a840, ftCreationTime.dwHighDateTime=0x1d4d57d, ftLastAccessTime.dwLowDateTime=0x2fb4a840, ftLastAccessTime.dwHighDateTime=0x1d4d57d, ftLastWriteTime.dwLowDateTime=0x2fb4a840, ftLastWriteTime.dwHighDateTime=0x1d4d57d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="setuperr.log", cAlternateFileName="")) returned 1 [0100.752] FindNextFileW (in: hFindFile=0x381c40, lpFindFileData=0x31e65c | out: lpFindFileData=0x31e65c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x9968150d, ftCreationTime.dwHighDateTime=0x1cbf8eb, ftLastAccessTime.dwLowDateTime=0xaf52ba40, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0xaf52ba40, ftLastWriteTime.dwHighDateTime=0x1d305f1, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="ShellNew", cAlternateFileName="")) returned 1 [0100.752] FindNextFileW (in: hFindFile=0x381c40, lpFindFileData=0x31e65c | out: lpFindFileData=0x31e65c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x145b2540, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x2cafb6a0, ftLastAccessTime.dwHighDateTime=0x1d2e621, ftLastWriteTime.dwLowDateTime=0x2cafb6a0, ftLastWriteTime.dwHighDateTime=0x1d2e621, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="SoftwareDistribution", cAlternateFileName="SOFTWA~1")) returned 1 [0100.752] FindNextFileW (in: hFindFile=0x381c40, lpFindFileData=0x31e65c | out: lpFindFileData=0x31e65c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfec7459e, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x1d9da406, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x1d9da406, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Speech", cAlternateFileName="")) returned 1 [0100.752] FindNextFileW (in: hFindFile=0x381c40, lpFindFileData=0x31e65c | out: lpFindFileData=0x31e65c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x936ee880, ftCreationTime.dwHighDateTime=0x1cb892b, ftLastAccessTime.dwLowDateTime=0x936ee880, ftLastAccessTime.dwHighDateTime=0x1cb892b, ftLastWriteTime.dwLowDateTime=0x936ee880, ftLastWriteTime.dwHighDateTime=0x1cb892b, nFileSizeHigh=0x0, nFileSizeLow=0x10600, dwReserved0=0x0, dwReserved1=0x0, cFileName="splwow64.exe", cAlternateFileName="")) returned 1 [0100.753] FindNextFileW (in: hFindFile=0x381c40, lpFindFileData=0x31e65c | out: lpFindFileData=0x31e65c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf0aa2eb0, ftCreationTime.dwHighDateTime=0x1ca0443, ftLastAccessTime.dwLowDateTime=0xf0aa2eb0, ftLastAccessTime.dwHighDateTime=0x1ca0443, ftLastWriteTime.dwLowDateTime=0x5f19ab6d, ftLastWriteTime.dwHighDateTime=0x1c9ea0a, nFileSizeHigh=0x0, nFileSizeLow=0xbc49, dwReserved0=0x0, dwReserved1=0x0, cFileName="Starter.xml", cAlternateFileName="")) returned 1 [0100.753] FindNextFileW (in: hFindFile=0x381c40, lpFindFileData=0x31e65c | out: lpFindFileData=0x31e65c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfec7459e, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfec7459e, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xf404c84a, ftLastWriteTime.dwHighDateTime=0x1ca042b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="system", cAlternateFileName="")) returned 1 [0100.753] FindNextFileW (in: hFindFile=0x381c40, lpFindFileData=0x31e65c | out: lpFindFileData=0x31e65c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xadc7ce10, ftCreationTime.dwHighDateTime=0x1ca042b, ftLastAccessTime.dwLowDateTime=0xadc7ce10, ftLastAccessTime.dwHighDateTime=0x1ca042b, ftLastWriteTime.dwLowDateTime=0x8bb1d8db, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0xdb, dwReserved0=0x0, dwReserved1=0x0, cFileName="system.ini", cAlternateFileName="")) returned 1 [0100.753] FindNextFileW (in: hFindFile=0x381c40, lpFindFileData=0x31e65c | out: lpFindFileData=0x31e65c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfec9a6f8, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xefd85d60, ftLastAccessTime.dwHighDateTime=0x1d4d596, ftLastWriteTime.dwLowDateTime=0xefd85d60, ftLastWriteTime.dwHighDateTime=0x1d4d596, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="System32", cAlternateFileName="")) returned 1 [0100.753] FindNextFileW (in: hFindFile=0x381c40, lpFindFileData=0x31e65c | out: lpFindFileData=0x31e65c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xe13712, ftCreationTime.dwHighDateTime=0x1ca0432, ftLastAccessTime.dwLowDateTime=0xc893570, ftLastAccessTime.dwHighDateTime=0x1d35d06, ftLastWriteTime.dwLowDateTime=0xc893570, ftLastWriteTime.dwHighDateTime=0x1d35d06, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="SysWOW64", cAlternateFileName="")) returned 1 [0100.753] FindNextFileW (in: hFindFile=0x381c40, lpFindFileData=0x31e65c | out: lpFindFileData=0x31e65c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x12b00f8, ftCreationTime.dwHighDateTime=0x1ca0432, ftLastAccessTime.dwLowDateTime=0x8d561533, ftLastAccessTime.dwHighDateTime=0x1ca043f, ftLastWriteTime.dwLowDateTime=0x8d561533, ftLastWriteTime.dwHighDateTime=0x1ca043f, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="TAPI", cAlternateFileName="")) returned 1 [0100.753] FindNextFileW (in: hFindFile=0x381c40, lpFindFileData=0x31e65c | out: lpFindFileData=0x31e65c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x12b00f8, ftCreationTime.dwHighDateTime=0x1ca0432, ftLastAccessTime.dwLowDateTime=0xe3cd110, ftLastAccessTime.dwHighDateTime=0x1d35d06, ftLastWriteTime.dwLowDateTime=0xe3cd110, ftLastWriteTime.dwHighDateTime=0x1d35d06, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Tasks", cAlternateFileName="")) returned 1 [0100.753] FindNextFileW (in: hFindFile=0x381c40, lpFindFileData=0x31e65c | out: lpFindFileData=0x31e65c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x12d6252, ftCreationTime.dwHighDateTime=0x1ca0432, ftLastAccessTime.dwLowDateTime=0xd7782780, ftLastAccessTime.dwHighDateTime=0x1d5e82a, ftLastWriteTime.dwLowDateTime=0xd7782780, ftLastWriteTime.dwHighDateTime=0x1d5e82a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Temp", cAlternateFileName="")) returned 1 [0100.753] FindNextFileW (in: hFindFile=0x381c40, lpFindFileData=0x31e65c | out: lpFindFileData=0x31e65c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x12d6252, ftCreationTime.dwHighDateTime=0x1ca0432, ftLastAccessTime.dwLowDateTime=0x12d6252, ftLastAccessTime.dwHighDateTime=0x1ca0432, ftLastWriteTime.dwLowDateTime=0x9f16e414, ftLastWriteTime.dwHighDateTime=0x1ca042b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="tracing", cAlternateFileName="")) returned 1 [0100.753] FindNextFileW (in: hFindFile=0x381c40, lpFindFileData=0x31e65c | out: lpFindFileData=0x31e65c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7986cda0, ftCreationTime.dwHighDateTime=0x1d2de2a, ftLastAccessTime.dwLowDateTime=0x7986cda0, ftLastAccessTime.dwHighDateTime=0x1d2de2a, ftLastWriteTime.dwLowDateTime=0x7986cda0, ftLastWriteTime.dwHighDateTime=0x1d2de2a, nFileSizeHigh=0x0, nFileSizeLow=0x54b, dwReserved0=0x0, dwReserved1=0x0, cFileName="TSSysprep.log", cAlternateFileName="TSSYSP~1.LOG")) returned 1 [0100.754] FindNextFileW (in: hFindFile=0x381c40, lpFindFileData=0x31e65c | out: lpFindFileData=0x31e65c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2f64321c, ftCreationTime.dwHighDateTime=0x1c9ea14, ftLastAccessTime.dwLowDateTime=0x2f64321c, ftLastAccessTime.dwHighDateTime=0x1c9ea14, ftLastWriteTime.dwLowDateTime=0x2f64321c, ftLastWriteTime.dwHighDateTime=0x1c9ea14, nFileSizeHigh=0x0, nFileSizeLow=0x17240, dwReserved0=0x0, dwReserved1=0x0, cFileName="twain.dll", cAlternateFileName="")) returned 1 [0100.754] FindNextFileW (in: hFindFile=0x381c40, lpFindFileData=0x31e65c | out: lpFindFileData=0x31e65c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x800b91b1, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x80cc6128, ftLastAccessTime.dwHighDateTime=0x1ca0444, ftLastWriteTime.dwLowDateTime=0x80cc6128, ftLastWriteTime.dwHighDateTime=0x1ca0444, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="twain_32", cAlternateFileName="")) returned 1 [0100.754] FindNextFileW (in: hFindFile=0x381c40, lpFindFileData=0x31e65c | out: lpFindFileData=0x31e65c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb3bc54f7, ftCreationTime.dwHighDateTime=0x1cb892b, ftLastAccessTime.dwLowDateTime=0xb3bc54f7, ftLastAccessTime.dwHighDateTime=0x1cb892b, ftLastWriteTime.dwLowDateTime=0xb3bc54f7, ftLastWriteTime.dwHighDateTime=0x1cb892b, nFileSizeHigh=0x0, nFileSizeLow=0xc800, dwReserved0=0x0, dwReserved1=0x0, cFileName="twain_32.dll", cAlternateFileName="")) returned 1 [0100.754] FindNextFileW (in: hFindFile=0x381c40, lpFindFileData=0x31e65c | out: lpFindFileData=0x31e65c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe5193c78, ftCreationTime.dwHighDateTime=0x1ca040b, ftLastAccessTime.dwLowDateTime=0xe5193c78, ftLastAccessTime.dwHighDateTime=0x1ca040b, ftLastWriteTime.dwLowDateTime=0x2f66937c, ftLastWriteTime.dwHighDateTime=0x1c9ea14, nFileSizeHigh=0x0, nFileSizeLow=0xc210, dwReserved0=0x0, dwReserved1=0x0, cFileName="twunk_16.exe", cAlternateFileName="")) returned 1 [0100.754] FindNextFileW (in: hFindFile=0x381c40, lpFindFileData=0x31e65c | out: lpFindFileData=0x31e65c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x149c5632, ftCreationTime.dwHighDateTime=0x1ca0418, ftLastAccessTime.dwLowDateTime=0x149c5632, ftLastAccessTime.dwHighDateTime=0x1ca0418, ftLastWriteTime.dwLowDateTime=0x77d4a690, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x7a00, dwReserved0=0x0, dwReserved1=0x0, cFileName="twunk_32.exe", cAlternateFileName="")) returned 1 [0100.754] FindNextFileW (in: hFindFile=0x381c40, lpFindFileData=0x31e65c | out: lpFindFileData=0x31e65c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x89a56640, ftCreationTime.dwHighDateTime=0x1d305eb, ftLastAccessTime.dwLowDateTime=0x89a56640, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0xf1490400, ftLastWriteTime.dwHighDateTime=0x1d305eb, nFileSizeHigh=0x0, nFileSizeLow=0x27, dwReserved0=0x0, dwReserved1=0x0, cFileName="vbaddin.ini", cAlternateFileName="")) returned 1 [0100.754] FindNextFileW (in: hFindFile=0x381c40, lpFindFileData=0x31e65c | out: lpFindFileData=0x31e65c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x12d6252, ftCreationTime.dwHighDateTime=0x1ca0432, ftLastAccessTime.dwLowDateTime=0x12d6252, ftLastAccessTime.dwHighDateTime=0x1ca0432, ftLastWriteTime.dwLowDateTime=0x12d6252, ftLastWriteTime.dwHighDateTime=0x1ca0432, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Vss", cAlternateFileName="")) returned 1 [0100.754] FindNextFileW (in: hFindFile=0x381c40, lpFindFileData=0x31e65c | out: lpFindFileData=0x31e65c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x12fc3ac, ftCreationTime.dwHighDateTime=0x1ca0432, ftLastAccessTime.dwLowDateTime=0x80046d91, ftLastAccessTime.dwHighDateTime=0x1ca0444, ftLastWriteTime.dwLowDateTime=0x80046d91, ftLastWriteTime.dwHighDateTime=0x1ca0444, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Web", cAlternateFileName="")) returned 1 [0100.755] FindNextFileW (in: hFindFile=0x381c40, lpFindFileData=0x31e65c | out: lpFindFileData=0x31e65c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xadc7ce10, ftCreationTime.dwHighDateTime=0x1ca042b, ftLastAccessTime.dwLowDateTime=0xadc7ce10, ftLastAccessTime.dwHighDateTime=0x1ca042b, ftLastWriteTime.dwLowDateTime=0x249a330, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x1de, dwReserved0=0x0, dwReserved1=0x0, cFileName="win.ini", cAlternateFileName="")) returned 1 [0100.755] FindNextFileW (in: hFindFile=0x381c40, lpFindFileData=0x31e65c | out: lpFindFileData=0x31e65c*(dwFileAttributes=0x23, ftCreationTime.dwLowDateTime=0x2870a176, ftCreationTime.dwHighDateTime=0x1ca043f, ftLastAccessTime.dwLowDateTime=0x2870a176, ftLastAccessTime.dwHighDateTime=0x1ca043f, ftLastWriteTime.dwLowDateTime=0x28b347fe, ftLastWriteTime.dwHighDateTime=0x1ca043f, nFileSizeHigh=0x0, nFileSizeLow=0x2ed, dwReserved0=0x0, dwReserved1=0x0, cFileName="WindowsShell.Manifest", cAlternateFileName="WINDOW~1.MAN")) returned 1 [0100.755] FindNextFileW (in: hFindFile=0x381c40, lpFindFileData=0x31e65c | out: lpFindFileData=0x31e65c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x14519fc0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x14519fc0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x2c655760, ftLastWriteTime.dwHighDateTime=0x1d4d597, nFileSizeHigh=0x0, nFileSizeLow=0x1e51f, dwReserved0=0x0, dwReserved1=0x0, cFileName="WindowsUpdate.log", cAlternateFileName="WINDOW~1.LOG")) returned 1 [0100.755] FindNextFileW (in: hFindFile=0x381c40, lpFindFileData=0x31e65c | out: lpFindFileData=0x31e65c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc68ade7e, ftCreationTime.dwHighDateTime=0x1ca0417, ftLastAccessTime.dwLowDateTime=0xc68ade7e, ftLastAccessTime.dwHighDateTime=0x1ca0417, ftLastWriteTime.dwLowDateTime=0x795b1f80, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x2600, dwReserved0=0x0, dwReserved1=0x0, cFileName="winhlp32.exe", cAlternateFileName="")) returned 1 [0100.755] FindNextFileW (in: hFindFile=0x381c40, lpFindFileData=0x31e65c | out: lpFindFileData=0x31e65c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x12fc3ac, ftCreationTime.dwHighDateTime=0x1ca0432, ftLastAccessTime.dwLowDateTime=0xbbbe9b70, ftLastAccessTime.dwHighDateTime=0x1d2fab4, ftLastWriteTime.dwLowDateTime=0xbbbe9b70, ftLastWriteTime.dwHighDateTime=0x1d2fab4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="winsxs", cAlternateFileName="")) returned 1 [0100.755] FindNextFileW (in: hFindFile=0x381c40, lpFindFileData=0x31e65c | out: lpFindFileData=0x31e65c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x67827cf3, ftCreationTime.dwHighDateTime=0x1c9ea0d, ftLastAccessTime.dwLowDateTime=0x67827cf3, ftLastAccessTime.dwHighDateTime=0x1c9ea0d, ftLastWriteTime.dwLowDateTime=0x6784de51, ftLastWriteTime.dwHighDateTime=0x1c9ea0d, nFileSizeHigh=0x0, nFileSizeLow=0x4d4e0, dwReserved0=0x0, dwReserved1=0x0, cFileName="WMSysPr9.prx", cAlternateFileName="")) returned 1 [0100.755] FindNextFileW (in: hFindFile=0x381c40, lpFindFileData=0x31e65c | out: lpFindFileData=0x31e65c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x89802aba, ftCreationTime.dwHighDateTime=0x1ca0415, ftLastAccessTime.dwLowDateTime=0x89802aba, ftLastAccessTime.dwHighDateTime=0x1ca0415, ftLastWriteTime.dwLowDateTime=0xfeb14f80, ftLastWriteTime.dwHighDateTime=0x1ca0423, nFileSizeHigh=0x0, nFileSizeLow=0x2800, dwReserved0=0x0, dwReserved1=0x0, cFileName="write.exe", cAlternateFileName="")) returned 1 [0100.755] FindNextFileW (in: hFindFile=0x381c40, lpFindFileData=0x31e65c | out: lpFindFileData=0x31e65c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x89802aba, ftCreationTime.dwHighDateTime=0x1ca0415, ftLastAccessTime.dwLowDateTime=0x89802aba, ftLastAccessTime.dwHighDateTime=0x1ca0415, ftLastWriteTime.dwLowDateTime=0xfeb14f80, ftLastWriteTime.dwHighDateTime=0x1ca0423, nFileSizeHigh=0x0, nFileSizeLow=0x2800, dwReserved0=0x0, dwReserved1=0x0, cFileName="write.exe", cAlternateFileName="")) returned 0 [0100.755] FindClose (in: hFindFile=0x381c40 | out: hFindFile=0x381c40) returned 1 [0100.755] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e8e4) returned 1 [0100.756] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e8f0) returned 1 [0100.756] GetFullPathNameW (in: lpFileName="C:\\Windows\\Professional.xml", nBufferLength=0x105, lpBuffer=0x31e2fc, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\Professional.xml", lpFilePart=0x0) returned 0x1b [0100.756] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e7f0) returned 1 [0100.756] CreateFileW (lpFileName="C:\\Windows\\Professional.xml" (normalized: "c:\\windows\\professional.xml"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x178 [0100.757] GetFileType (hFile=0x178) returned 0x1 [0100.757] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e7ec) returned 1 [0100.757] GetFileType (hFile=0x178) returned 0x1 [0100.757] GetFileSize (in: hFile=0x178, lpFileSizeHigh=0x31e8f8 | out: lpFileSizeHigh=0x31e8f8*=0x0) returned 0xd12f [0100.757] ReadFile (in: hFile=0x178, lpBuffer=0x2634d44, nNumberOfBytesToRead=0xd12f, lpNumberOfBytesRead=0x31e8a4, lpOverlapped=0x0 | out: lpBuffer=0x2634d44*, lpNumberOfBytesRead=0x31e8a4*=0xd12f, lpOverlapped=0x0) returned 1 [0100.759] CloseHandle (hObject=0x178) returned 1 [0100.800] GetFullPathNameW (in: lpFileName="C:\\Windows\\Professional.xml", nBufferLength=0x105, lpBuffer=0x31e2e8, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\Professional.xml", lpFilePart=0x0) returned 0x1b [0100.800] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e7dc) returned 1 [0100.800] CreateFileW (lpFileName="C:\\Windows\\Professional.xml" (normalized: "c:\\windows\\professional.xml"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x178 [0100.801] GetFileType (hFile=0x178) returned 0x1 [0100.801] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e7d8) returned 1 [0100.801] GetFileType (hFile=0x178) returned 0x1 [0100.801] WriteFile (in: hFile=0x178, lpBuffer=0x26a94b8*, nNumberOfBytesToWrite=0xd130, lpNumberOfBytesWritten=0x31e898, lpOverlapped=0x0 | out: lpBuffer=0x26a94b8*, lpNumberOfBytesWritten=0x31e898*=0xd130, lpOverlapped=0x0) returned 1 [0100.803] CloseHandle (hObject=0x178) returned 1 [0100.803] GetFullPathNameW (in: lpFileName="C:\\Windows\\Professional.xml", nBufferLength=0x105, lpBuffer=0x31e41c, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\Professional.xml", lpFilePart=0x0) returned 0x1b [0100.803] GetFullPathNameW (in: lpFileName="C:\\Windows\\Professional.xml", nBufferLength=0x105, lpBuffer=0x31e41c, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\Professional.xml", lpFilePart=0x0) returned 0x1b [0100.803] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e87c) returned 1 [0100.803] GetFileAttributesExW (in: lpFileName="C:\\Windows\\Professional.xml" (normalized: "c:\\windows\\professional.xml"), fInfoLevelId=0x0, lpFileInformation=0x31e8f8 | out: lpFileInformation=0x31e8f8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xaf9a5c4e, ftCreationTime.dwHighDateTime=0x1cbf8eb, ftLastAccessTime.dwLowDateTime=0xaf9cbebd, ftLastAccessTime.dwHighDateTime=0x1cbf8eb, ftLastWriteTime.dwLowDateTime=0x1f863780, ftLastWriteTime.dwHighDateTime=0x1d6eb7f, nFileSizeHigh=0x0, nFileSizeLow=0xd130)) returned 1 [0100.803] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e878) returned 1 [0100.803] MoveFileW (lpExistingFileName="C:\\Windows\\Professional.xml" (normalized: "c:\\windows\\professional.xml"), lpNewFileName="C:\\Windows\\Professional.xml" (normalized: "c:\\windows\\professional.xml")) returned 1 [0100.803] GetFullPathNameW (in: lpFileName="C:\\Windows\\Starter.xml", nBufferLength=0x105, lpBuffer=0x31e2fc, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\Starter.xml", lpFilePart=0x0) returned 0x16 [0100.803] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e7f0) returned 1 [0100.803] CreateFileW (lpFileName="C:\\Windows\\Starter.xml" (normalized: "c:\\windows\\starter.xml"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x178 [0100.807] GetFileType (hFile=0x178) returned 0x1 [0100.807] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e7ec) returned 1 [0100.807] GetFileType (hFile=0x178) returned 0x1 [0100.807] GetFileSize (in: hFile=0x178, lpFileSizeHigh=0x31e8f8 | out: lpFileSizeHigh=0x31e8f8*=0x0) returned 0xbc49 [0100.807] ReadFile (in: hFile=0x178, lpBuffer=0x26b6880, nNumberOfBytesToRead=0xbc49, lpNumberOfBytesRead=0x31e8a4, lpOverlapped=0x0 | out: lpBuffer=0x26b6880*, lpNumberOfBytesRead=0x31e8a4*=0xbc49, lpOverlapped=0x0) returned 1 [0100.811] CloseHandle (hObject=0x178) returned 1 [0100.853] GetFullPathNameW (in: lpFileName="C:\\Windows\\Starter.xml", nBufferLength=0x105, lpBuffer=0x31e2e8, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\Starter.xml", lpFilePart=0x0) returned 0x16 [0100.853] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e7dc) returned 1 [0100.853] CreateFileW (lpFileName="C:\\Windows\\Starter.xml" (normalized: "c:\\windows\\starter.xml"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x178 [0100.878] GetFileType (hFile=0x178) returned 0x1 [0100.878] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e7d8) returned 1 [0100.878] GetFileType (hFile=0x178) returned 0x1 [0100.878] WriteFile (in: hFile=0x178, lpBuffer=0x2671670*, nNumberOfBytesToWrite=0xbc50, lpNumberOfBytesWritten=0x31e898, lpOverlapped=0x0 | out: lpBuffer=0x2671670*, lpNumberOfBytesWritten=0x31e898*=0xbc50, lpOverlapped=0x0) returned 1 [0100.880] CloseHandle (hObject=0x178) returned 1 [0100.880] GetFullPathNameW (in: lpFileName="C:\\Windows\\Starter.xml", nBufferLength=0x105, lpBuffer=0x31e41c, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\Starter.xml", lpFilePart=0x0) returned 0x16 [0100.880] GetFullPathNameW (in: lpFileName="C:\\Windows\\Starter.xml", nBufferLength=0x105, lpBuffer=0x31e41c, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\Starter.xml", lpFilePart=0x0) returned 0x16 [0100.880] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e87c) returned 1 [0100.880] GetFileAttributesExW (in: lpFileName="C:\\Windows\\Starter.xml" (normalized: "c:\\windows\\starter.xml"), fInfoLevelId=0x0, lpFileInformation=0x31e8f8 | out: lpFileInformation=0x31e8f8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf0aa2eb0, ftCreationTime.dwHighDateTime=0x1ca0443, ftLastAccessTime.dwLowDateTime=0xf0aa2eb0, ftLastAccessTime.dwHighDateTime=0x1ca0443, ftLastWriteTime.dwLowDateTime=0x1f921e60, ftLastWriteTime.dwHighDateTime=0x1d6eb7f, nFileSizeHigh=0x0, nFileSizeLow=0xbc50)) returned 1 [0100.880] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e878) returned 1 [0100.880] MoveFileW (lpExistingFileName="C:\\Windows\\Starter.xml" (normalized: "c:\\windows\\starter.xml"), lpNewFileName="C:\\Windows\\Starter.xml" (normalized: "c:\\windows\\starter.xml")) returned 1 [0100.881] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e8ac) returned 1 [0100.881] GetFullPathNameW (in: lpFileName="C:\\Windows\\addins", nBufferLength=0x105, lpBuffer=0x31e3b4, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\addins", lpFilePart=0x0) returned 0x11 [0100.881] GetFullPathNameW (in: lpFileName="C:\\Windows\\addins\\", nBufferLength=0x105, lpBuffer=0x31e388, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\addins\\", lpFilePart=0x0) returned 0x12 [0100.881] FindFirstFileW (in: lpFileName="C:\\Windows\\addins\\*", lpFindFileData=0x31e5d4 | out: lpFindFileData=0x31e5d4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x800b91b1, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x80b6f4c5, ftLastAccessTime.dwHighDateTime=0x1ca0444, ftLastWriteTime.dwLowDateTime=0x80b6f4c5, ftLastWriteTime.dwHighDateTime=0x1ca0444, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x381b40 [0100.881] FindNextFileW (in: hFindFile=0x381b40, lpFindFileData=0x31e5e4 | out: lpFindFileData=0x31e5e4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x800b91b1, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x80b6f4c5, ftLastAccessTime.dwHighDateTime=0x1ca0444, ftLastWriteTime.dwLowDateTime=0x80b6f4c5, ftLastWriteTime.dwHighDateTime=0x1ca0444, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0100.881] FindNextFileW (in: hFindFile=0x381b40, lpFindFileData=0x31e5e4 | out: lpFindFileData=0x31e5e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x38a84b7c, ftCreationTime.dwHighDateTime=0x1c9ea11, ftLastAccessTime.dwLowDateTime=0x38a84b7c, ftLastAccessTime.dwHighDateTime=0x1c9ea11, ftLastWriteTime.dwLowDateTime=0x38a84b7c, ftLastWriteTime.dwHighDateTime=0x1c9ea11, nFileSizeHigh=0x0, nFileSizeLow=0x322, dwReserved0=0x0, dwReserved1=0x0, cFileName="FXSEXT.ecf", cAlternateFileName="")) returned 1 [0100.881] FindNextFileW (in: hFindFile=0x381b40, lpFindFileData=0x31e5e4 | out: lpFindFileData=0x31e5e4*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0100.882] FindClose (in: hFindFile=0x381b40 | out: hFindFile=0x381b40) returned 1 [0100.882] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e86c) returned 1 [0100.882] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e878) returned 1 [0100.882] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e8ac) returned 1 [0100.882] GetFullPathNameW (in: lpFileName="C:\\Windows\\addins", nBufferLength=0x105, lpBuffer=0x31e3b4, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\addins", lpFilePart=0x0) returned 0x11 [0100.882] GetFullPathNameW (in: lpFileName="C:\\Windows\\addins\\", nBufferLength=0x105, lpBuffer=0x31e388, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\addins\\", lpFilePart=0x0) returned 0x12 [0100.882] FindFirstFileW (in: lpFileName="C:\\Windows\\addins\\*", lpFindFileData=0x31e5d4 | out: lpFindFileData=0x31e5d4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x800b91b1, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x80b6f4c5, ftLastAccessTime.dwHighDateTime=0x1ca0444, ftLastWriteTime.dwLowDateTime=0x80b6f4c5, ftLastWriteTime.dwHighDateTime=0x1ca0444, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x381b40 [0100.882] FindNextFileW (in: hFindFile=0x381b40, lpFindFileData=0x31e5e4 | out: lpFindFileData=0x31e5e4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x800b91b1, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x80b6f4c5, ftLastAccessTime.dwHighDateTime=0x1ca0444, ftLastWriteTime.dwLowDateTime=0x80b6f4c5, ftLastWriteTime.dwHighDateTime=0x1ca0444, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0100.882] FindNextFileW (in: hFindFile=0x381b40, lpFindFileData=0x31e5e4 | out: lpFindFileData=0x31e5e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x38a84b7c, ftCreationTime.dwHighDateTime=0x1c9ea11, ftLastAccessTime.dwLowDateTime=0x38a84b7c, ftLastAccessTime.dwHighDateTime=0x1c9ea11, ftLastWriteTime.dwLowDateTime=0x38a84b7c, ftLastWriteTime.dwHighDateTime=0x1c9ea11, nFileSizeHigh=0x0, nFileSizeLow=0x322, dwReserved0=0x0, dwReserved1=0x0, cFileName="FXSEXT.ecf", cAlternateFileName="")) returned 1 [0100.882] FindNextFileW (in: hFindFile=0x381b40, lpFindFileData=0x31e5e4 | out: lpFindFileData=0x31e5e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x38a84b7c, ftCreationTime.dwHighDateTime=0x1c9ea11, ftLastAccessTime.dwLowDateTime=0x38a84b7c, ftLastAccessTime.dwHighDateTime=0x1c9ea11, ftLastWriteTime.dwLowDateTime=0x38a84b7c, ftLastWriteTime.dwHighDateTime=0x1c9ea11, nFileSizeHigh=0x0, nFileSizeLow=0x322, dwReserved0=0x0, dwReserved1=0x0, cFileName="FXSEXT.ecf", cAlternateFileName="")) returned 0 [0100.882] FindClose (in: hFindFile=0x381b40 | out: hFindFile=0x381b40) returned 1 [0100.882] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e86c) returned 1 [0100.882] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e878) returned 1 [0100.883] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e8ac) returned 1 [0100.883] GetFullPathNameW (in: lpFileName="C:\\Windows\\AppCompat", nBufferLength=0x105, lpBuffer=0x31e3b4, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\AppCompat", lpFilePart=0x0) returned 0x14 [0100.883] GetFullPathNameW (in: lpFileName="C:\\Windows\\AppCompat\\", nBufferLength=0x105, lpBuffer=0x31e388, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\AppCompat\\", lpFilePart=0x0) returned 0x15 [0100.883] FindFirstFileW (in: lpFileName="C:\\Windows\\AppCompat\\*", lpFindFileData=0x31e5d4 | out: lpFindFileData=0x31e5d4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfdb0c77c, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfdb0c77c, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xfdb0c77c, ftLastWriteTime.dwHighDateTime=0x1ca0431, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x381b40 [0100.883] FindNextFileW (in: hFindFile=0x381b40, lpFindFileData=0x31e5e4 | out: lpFindFileData=0x31e5e4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfdb0c77c, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfdb0c77c, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xfdb0c77c, ftLastWriteTime.dwHighDateTime=0x1ca0431, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0100.883] FindNextFileW (in: hFindFile=0x381b40, lpFindFileData=0x31e5e4 | out: lpFindFileData=0x31e5e4*(dwFileAttributes=0x14, ftCreationTime.dwLowDateTime=0xfdb0c77c, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x2e3283f0, ftLastAccessTime.dwHighDateTime=0x1ca0441, ftLastWriteTime.dwLowDateTime=0x2e3283f0, ftLastWriteTime.dwHighDateTime=0x1ca0441, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Programs", cAlternateFileName="")) returned 1 [0100.883] FindNextFileW (in: hFindFile=0x381b40, lpFindFileData=0x31e5e4 | out: lpFindFileData=0x31e5e4*(dwFileAttributes=0x14, ftCreationTime.dwLowDateTime=0xfdb0c77c, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x2e3283f0, ftLastAccessTime.dwHighDateTime=0x1ca0441, ftLastWriteTime.dwLowDateTime=0x2e3283f0, ftLastWriteTime.dwHighDateTime=0x1ca0441, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Programs", cAlternateFileName="")) returned 0 [0100.883] FindClose (in: hFindFile=0x381b40 | out: hFindFile=0x381b40) returned 1 [0100.883] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e86c) returned 1 [0100.884] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e878) returned 1 [0100.884] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e8ac) returned 1 [0100.884] GetFullPathNameW (in: lpFileName="C:\\Windows\\AppCompat", nBufferLength=0x105, lpBuffer=0x31e3b4, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\AppCompat", lpFilePart=0x0) returned 0x14 [0100.884] GetFullPathNameW (in: lpFileName="C:\\Windows\\AppCompat\\", nBufferLength=0x105, lpBuffer=0x31e388, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\AppCompat\\", lpFilePart=0x0) returned 0x15 [0100.884] FindFirstFileW (in: lpFileName="C:\\Windows\\AppCompat\\*", lpFindFileData=0x31e5d4 | out: lpFindFileData=0x31e5d4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfdb0c77c, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfdb0c77c, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xfdb0c77c, ftLastWriteTime.dwHighDateTime=0x1ca0431, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x381b40 [0100.884] FindNextFileW (in: hFindFile=0x381b40, lpFindFileData=0x31e5e4 | out: lpFindFileData=0x31e5e4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfdb0c77c, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfdb0c77c, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xfdb0c77c, ftLastWriteTime.dwHighDateTime=0x1ca0431, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0100.884] FindNextFileW (in: hFindFile=0x381b40, lpFindFileData=0x31e5e4 | out: lpFindFileData=0x31e5e4*(dwFileAttributes=0x14, ftCreationTime.dwLowDateTime=0xfdb0c77c, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x2e3283f0, ftLastAccessTime.dwHighDateTime=0x1ca0441, ftLastWriteTime.dwLowDateTime=0x2e3283f0, ftLastWriteTime.dwHighDateTime=0x1ca0441, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Programs", cAlternateFileName="")) returned 1 [0100.884] FindNextFileW (in: hFindFile=0x381b40, lpFindFileData=0x31e5e4 | out: lpFindFileData=0x31e5e4*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0100.884] FindClose (in: hFindFile=0x381b40 | out: hFindFile=0x381b40) returned 1 [0100.884] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e86c) returned 1 [0100.884] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e878) returned 1 [0100.884] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e834) returned 1 [0100.884] GetFullPathNameW (in: lpFileName="C:\\Windows\\AppCompat\\Programs", nBufferLength=0x105, lpBuffer=0x31e33c, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\AppCompat\\Programs", lpFilePart=0x0) returned 0x1d [0100.884] GetFullPathNameW (in: lpFileName="C:\\Windows\\AppCompat\\Programs\\", nBufferLength=0x105, lpBuffer=0x31e310, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\AppCompat\\Programs\\", lpFilePart=0x0) returned 0x1e [0100.884] FindFirstFileW (in: lpFileName="C:\\Windows\\AppCompat\\Programs\\*", lpFindFileData=0x31e55c | out: lpFindFileData=0x31e55c*(dwFileAttributes=0x14, ftCreationTime.dwLowDateTime=0xfdb0c77c, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x2e3283f0, ftLastAccessTime.dwHighDateTime=0x1ca0441, ftLastWriteTime.dwLowDateTime=0x2e3283f0, ftLastWriteTime.dwHighDateTime=0x1ca0441, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x381b40 [0100.885] FindNextFileW (in: hFindFile=0x381b40, lpFindFileData=0x31e56c | out: lpFindFileData=0x31e56c*(dwFileAttributes=0x14, ftCreationTime.dwLowDateTime=0xfdb0c77c, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x2e3283f0, ftLastAccessTime.dwHighDateTime=0x1ca0441, ftLastWriteTime.dwLowDateTime=0x2e3283f0, ftLastWriteTime.dwHighDateTime=0x1ca0441, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0100.885] FindNextFileW (in: hFindFile=0x381b40, lpFindFileData=0x31e56c | out: lpFindFileData=0x31e56c*(dwFileAttributes=0x24, ftCreationTime.dwLowDateTime=0x2e3283f0, ftCreationTime.dwHighDateTime=0x1ca0441, ftLastAccessTime.dwLowDateTime=0x2e3283f0, ftLastAccessTime.dwHighDateTime=0x1ca0441, ftLastWriteTime.dwLowDateTime=0x3d9f7230, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x336a, dwReserved0=0x0, dwReserved1=0x0, cFileName="RecentFileCache.bcf", cAlternateFileName="RECENT~1.BCF")) returned 1 [0100.885] FindNextFileW (in: hFindFile=0x381b40, lpFindFileData=0x31e56c | out: lpFindFileData=0x31e56c*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0100.885] FindClose (in: hFindFile=0x381b40 | out: hFindFile=0x381b40) returned 1 [0100.885] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e7f4) returned 1 [0100.885] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e800) returned 1 [0100.885] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e834) returned 1 [0100.885] GetFullPathNameW (in: lpFileName="C:\\Windows\\AppCompat\\Programs", nBufferLength=0x105, lpBuffer=0x31e33c, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\AppCompat\\Programs", lpFilePart=0x0) returned 0x1d [0100.886] GetFullPathNameW (in: lpFileName="C:\\Windows\\AppCompat\\Programs\\", nBufferLength=0x105, lpBuffer=0x31e310, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\AppCompat\\Programs\\", lpFilePart=0x0) returned 0x1e [0100.886] FindFirstFileW (in: lpFileName="C:\\Windows\\AppCompat\\Programs\\*", lpFindFileData=0x31e55c | out: lpFindFileData=0x31e55c*(dwFileAttributes=0x14, ftCreationTime.dwLowDateTime=0xfdb0c77c, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x2e3283f0, ftLastAccessTime.dwHighDateTime=0x1ca0441, ftLastWriteTime.dwLowDateTime=0x2e3283f0, ftLastWriteTime.dwHighDateTime=0x1ca0441, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x381b40 [0100.886] FindNextFileW (in: hFindFile=0x381b40, lpFindFileData=0x31e56c | out: lpFindFileData=0x31e56c*(dwFileAttributes=0x14, ftCreationTime.dwLowDateTime=0xfdb0c77c, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x2e3283f0, ftLastAccessTime.dwHighDateTime=0x1ca0441, ftLastWriteTime.dwLowDateTime=0x2e3283f0, ftLastWriteTime.dwHighDateTime=0x1ca0441, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0100.886] FindNextFileW (in: hFindFile=0x381b40, lpFindFileData=0x31e56c | out: lpFindFileData=0x31e56c*(dwFileAttributes=0x24, ftCreationTime.dwLowDateTime=0x2e3283f0, ftCreationTime.dwHighDateTime=0x1ca0441, ftLastAccessTime.dwLowDateTime=0x2e3283f0, ftLastAccessTime.dwHighDateTime=0x1ca0441, ftLastWriteTime.dwLowDateTime=0x3d9f7230, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x336a, dwReserved0=0x0, dwReserved1=0x0, cFileName="RecentFileCache.bcf", cAlternateFileName="RECENT~1.BCF")) returned 1 [0100.886] FindNextFileW (in: hFindFile=0x381b40, lpFindFileData=0x31e56c | out: lpFindFileData=0x31e56c*(dwFileAttributes=0x24, ftCreationTime.dwLowDateTime=0x2e3283f0, ftCreationTime.dwHighDateTime=0x1ca0441, ftLastAccessTime.dwLowDateTime=0x2e3283f0, ftLastAccessTime.dwHighDateTime=0x1ca0441, ftLastWriteTime.dwLowDateTime=0x3d9f7230, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x336a, dwReserved0=0x0, dwReserved1=0x0, cFileName="RecentFileCache.bcf", cAlternateFileName="RECENT~1.BCF")) returned 0 [0100.886] FindClose (in: hFindFile=0x381b40 | out: hFindFile=0x381b40) returned 1 [0100.886] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e7f4) returned 1 [0100.886] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e800) returned 1 [0100.886] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e8ac) returned 1 [0100.886] GetFullPathNameW (in: lpFileName="C:\\Windows\\AppPatch", nBufferLength=0x105, lpBuffer=0x31e3b4, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\AppPatch", lpFilePart=0x0) returned 0x13 [0100.886] GetFullPathNameW (in: lpFileName="C:\\Windows\\AppPatch\\", nBufferLength=0x105, lpBuffer=0x31e388, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\AppPatch\\", lpFilePart=0x0) returned 0x14 [0100.886] FindFirstFileW (in: lpFileName="C:\\Windows\\AppPatch\\*", lpFindFileData=0x31e5d4 | out: lpFindFileData=0x31e5d4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfdb328d6, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x57087b83, ftLastAccessTime.dwHighDateTime=0x1cb892c, ftLastWriteTime.dwLowDateTime=0x57087b83, ftLastWriteTime.dwHighDateTime=0x1cb892c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x381b40 [0100.887] FindNextFileW (in: hFindFile=0x381b40, lpFindFileData=0x31e5e4 | out: lpFindFileData=0x31e5e4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfdb328d6, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x57087b83, ftLastAccessTime.dwHighDateTime=0x1cb892c, ftLastWriteTime.dwLowDateTime=0x57087b83, ftLastWriteTime.dwHighDateTime=0x1cb892c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0100.887] FindNextFileW (in: hFindFile=0x381b40, lpFindFileData=0x31e5e4 | out: lpFindFileData=0x31e5e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8ab3bc5e, ftCreationTime.dwHighDateTime=0x1cb892b, ftLastAccessTime.dwLowDateTime=0x8ab3bc5e, ftLastAccessTime.dwHighDateTime=0x1cb892b, ftLastWriteTime.dwLowDateTime=0x8ab87f1f, ftLastWriteTime.dwHighDateTime=0x1cb892b, nFileSizeHigh=0x0, nFileSizeLow=0x213200, dwReserved0=0x0, dwReserved1=0x0, cFileName="AcGenral.dll", cAlternateFileName="")) returned 1 [0100.887] FindNextFileW (in: hFindFile=0x381b40, lpFindFileData=0x31e5e4 | out: lpFindFileData=0x31e5e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x89ebc8c7, ftCreationTime.dwHighDateTime=0x1cb892b, ftLastAccessTime.dwLowDateTime=0x89ebc8c7, ftLastAccessTime.dwHighDateTime=0x1cb892b, ftLastWriteTime.dwLowDateTime=0x89f08b88, ftLastWriteTime.dwHighDateTime=0x1cb892b, nFileSizeHigh=0x0, nFileSizeLow=0x89400, dwReserved0=0x0, dwReserved1=0x0, cFileName="AcLayers.dll", cAlternateFileName="")) returned 1 [0100.887] FindNextFileW (in: hFindFile=0x381b40, lpFindFileData=0x31e5e4 | out: lpFindFileData=0x31e5e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x66f511ee, ftCreationTime.dwHighDateTime=0x1ca0411, ftLastAccessTime.dwLowDateTime=0x66f511ee, ftLastAccessTime.dwHighDateTime=0x1ca0411, ftLastWriteTime.dwLowDateTime=0xf11e1150, ftLastWriteTime.dwHighDateTime=0x1ca041e, nFileSizeHigh=0x0, nFileSizeLow=0xa00, dwReserved0=0x0, dwReserved1=0x0, cFileName="AcRes.dll", cAlternateFileName="")) returned 1 [0100.887] FindNextFileW (in: hFindFile=0x381b40, lpFindFileData=0x31e5e4 | out: lpFindFileData=0x31e5e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x761d0cd0, ftCreationTime.dwHighDateTime=0x1ca0411, ftLastAccessTime.dwLowDateTime=0x761d0cd0, ftLastAccessTime.dwHighDateTime=0x1ca0411, ftLastWriteTime.dwLowDateTime=0x7d3bb510, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x73c00, dwReserved0=0x0, dwReserved1=0x0, cFileName="AcSpecfc.dll", cAlternateFileName="")) returned 1 [0100.887] FindNextFileW (in: hFindFile=0x381b40, lpFindFileData=0x31e5e4 | out: lpFindFileData=0x31e5e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe234c5df, ftCreationTime.dwHighDateTime=0x1ca040f, ftLastAccessTime.dwLowDateTime=0xe234c5df, ftLastAccessTime.dwHighDateTime=0x1ca040f, ftLastWriteTime.dwLowDateTime=0x7d5cf8b0, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0xac00, dwReserved0=0x0, dwReserved1=0x0, cFileName="acwow64.dll", cAlternateFileName="")) returned 1 [0100.887] FindNextFileW (in: hFindFile=0x381b40, lpFindFileData=0x31e5e4 | out: lpFindFileData=0x31e5e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x678fcb0d, ftCreationTime.dwHighDateTime=0x1ca0411, ftLastAccessTime.dwLowDateTime=0x678fcb0d, ftLastAccessTime.dwHighDateTime=0x1ca0411, ftLastWriteTime.dwLowDateTime=0x7d6424a0, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x33c00, dwReserved0=0x0, dwReserved1=0x0, cFileName="AcXtrnal.dll", cAlternateFileName="")) returned 1 [0100.887] FindNextFileW (in: hFindFile=0x381b40, lpFindFileData=0x31e5e4 | out: lpFindFileData=0x31e5e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7828c580, ftCreationTime.dwHighDateTime=0x1ca0410, ftLastAccessTime.dwLowDateTime=0x7828c580, ftLastAccessTime.dwHighDateTime=0x1ca0410, ftLastWriteTime.dwLowDateTime=0x7e595a10, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0xa400, dwReserved0=0x0, dwReserved1=0x0, cFileName="apihex86.dll", cAlternateFileName="")) returned 1 [0100.887] FindNextFileW (in: hFindFile=0x381b40, lpFindFileData=0x31e5e4 | out: lpFindFileData=0x31e5e4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfdb328d6, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x571de7e6, ftLastAccessTime.dwHighDateTime=0x1cb892c, ftLastWriteTime.dwLowDateTime=0x571de7e6, ftLastWriteTime.dwHighDateTime=0x1cb892c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="AppPatch64", cAlternateFileName="APPPAT~1")) returned 1 [0100.888] FindNextFileW (in: hFindFile=0x381b40, lpFindFileData=0x31e5e4 | out: lpFindFileData=0x31e5e4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfdb58a30, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfdb58a30, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xfdb58a30, ftLastWriteTime.dwHighDateTime=0x1ca0431, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Custom", cAlternateFileName="")) returned 1 [0100.888] FindNextFileW (in: hFindFile=0x381b40, lpFindFileData=0x31e5e4 | out: lpFindFileData=0x31e5e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x89f08b88, ftCreationTime.dwHighDateTime=0x1cb892b, ftLastAccessTime.dwLowDateTime=0x89f08b88, ftLastAccessTime.dwHighDateTime=0x1cb892b, ftLastWriteTime.dwLowDateTime=0x89f2ece8, ftLastWriteTime.dwHighDateTime=0x1cb892b, nFileSizeHigh=0x0, nFileSizeLow=0x2504e, dwReserved0=0x0, dwReserved1=0x0, cFileName="drvmain.sdb", cAlternateFileName="")) returned 1 [0100.888] FindNextFileW (in: hFindFile=0x381b40, lpFindFileData=0x31e5e4 | out: lpFindFileData=0x31e5e4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x368b31d3, ftCreationTime.dwHighDateTime=0x1ca0445, ftLastAccessTime.dwLowDateTime=0x23fb0799, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x1d91b669, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="en-US", cAlternateFileName="")) returned 1 [0100.888] FindNextFileW (in: hFindFile=0x381b40, lpFindFileData=0x31e5e4 | out: lpFindFileData=0x31e5e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x89f2ece8, ftCreationTime.dwHighDateTime=0x1cb892b, ftLastAccessTime.dwLowDateTime=0x89f2ece8, ftLastAccessTime.dwHighDateTime=0x1cb892b, ftLastWriteTime.dwLowDateTime=0x8a11decc, ftLastWriteTime.dwHighDateTime=0x1cb892b, nFileSizeHigh=0x0, nFileSizeLow=0x1aeae2, dwReserved0=0x0, dwReserved1=0x0, cFileName="msimain.sdb", cAlternateFileName="")) returned 1 [0100.888] FindNextFileW (in: hFindFile=0x381b40, lpFindFileData=0x31e5e4 | out: lpFindFileData=0x31e5e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa7339606, ftCreationTime.dwHighDateTime=0x1cb892b, ftLastAccessTime.dwLowDateTime=0xa7339606, ftLastAccessTime.dwHighDateTime=0x1cb892b, ftLastWriteTime.dwLowDateTime=0xa7339606, ftLastWriteTime.dwHighDateTime=0x1cb892b, nFileSizeHigh=0x0, nFileSizeLow=0xaf82, dwReserved0=0x0, dwReserved1=0x0, cFileName="pcamain.sdb", cAlternateFileName="")) returned 1 [0100.888] FindNextFileW (in: hFindFile=0x381b40, lpFindFileData=0x31e5e4 | out: lpFindFileData=0x31e5e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8a11decc, ftCreationTime.dwHighDateTime=0x1cb892b, ftLastAccessTime.dwLowDateTime=0x8a11decc, ftLastAccessTime.dwHighDateTime=0x1cb892b, ftLastWriteTime.dwLowDateTime=0x8a1dc5ad, ftLastWriteTime.dwHighDateTime=0x1cb892b, nFileSizeHigh=0x0, nFileSizeLow=0x3e2f48, dwReserved0=0x0, dwReserved1=0x0, cFileName="sysmain.sdb", cAlternateFileName="")) returned 1 [0100.888] FindNextFileW (in: hFindFile=0x381b40, lpFindFileData=0x31e5e4 | out: lpFindFileData=0x31e5e4*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0100.888] FindClose (in: hFindFile=0x381b40 | out: hFindFile=0x381b40) returned 1 [0100.888] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e86c) returned 1 [0100.888] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e878) returned 1 [0100.888] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e8ac) returned 1 [0100.888] GetFullPathNameW (in: lpFileName="C:\\Windows\\AppPatch", nBufferLength=0x105, lpBuffer=0x31e3b4, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\AppPatch", lpFilePart=0x0) returned 0x13 [0100.888] GetFullPathNameW (in: lpFileName="C:\\Windows\\AppPatch\\", nBufferLength=0x105, lpBuffer=0x31e388, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\AppPatch\\", lpFilePart=0x0) returned 0x14 [0100.889] FindFirstFileW (in: lpFileName="C:\\Windows\\AppPatch\\*", lpFindFileData=0x31e5d4 | out: lpFindFileData=0x31e5d4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfdb328d6, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x57087b83, ftLastAccessTime.dwHighDateTime=0x1cb892c, ftLastWriteTime.dwLowDateTime=0x57087b83, ftLastWriteTime.dwHighDateTime=0x1cb892c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x381b40 [0100.889] FindNextFileW (in: hFindFile=0x381b40, lpFindFileData=0x31e5e4 | out: lpFindFileData=0x31e5e4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfdb328d6, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x57087b83, ftLastAccessTime.dwHighDateTime=0x1cb892c, ftLastWriteTime.dwLowDateTime=0x57087b83, ftLastWriteTime.dwHighDateTime=0x1cb892c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0100.889] FindNextFileW (in: hFindFile=0x381b40, lpFindFileData=0x31e5e4 | out: lpFindFileData=0x31e5e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8ab3bc5e, ftCreationTime.dwHighDateTime=0x1cb892b, ftLastAccessTime.dwLowDateTime=0x8ab3bc5e, ftLastAccessTime.dwHighDateTime=0x1cb892b, ftLastWriteTime.dwLowDateTime=0x8ab87f1f, ftLastWriteTime.dwHighDateTime=0x1cb892b, nFileSizeHigh=0x0, nFileSizeLow=0x213200, dwReserved0=0x0, dwReserved1=0x0, cFileName="AcGenral.dll", cAlternateFileName="")) returned 1 [0100.889] FindNextFileW (in: hFindFile=0x381b40, lpFindFileData=0x31e5e4 | out: lpFindFileData=0x31e5e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x89ebc8c7, ftCreationTime.dwHighDateTime=0x1cb892b, ftLastAccessTime.dwLowDateTime=0x89ebc8c7, ftLastAccessTime.dwHighDateTime=0x1cb892b, ftLastWriteTime.dwLowDateTime=0x89f08b88, ftLastWriteTime.dwHighDateTime=0x1cb892b, nFileSizeHigh=0x0, nFileSizeLow=0x89400, dwReserved0=0x0, dwReserved1=0x0, cFileName="AcLayers.dll", cAlternateFileName="")) returned 1 [0100.889] FindNextFileW (in: hFindFile=0x381b40, lpFindFileData=0x31e5e4 | out: lpFindFileData=0x31e5e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x66f511ee, ftCreationTime.dwHighDateTime=0x1ca0411, ftLastAccessTime.dwLowDateTime=0x66f511ee, ftLastAccessTime.dwHighDateTime=0x1ca0411, ftLastWriteTime.dwLowDateTime=0xf11e1150, ftLastWriteTime.dwHighDateTime=0x1ca041e, nFileSizeHigh=0x0, nFileSizeLow=0xa00, dwReserved0=0x0, dwReserved1=0x0, cFileName="AcRes.dll", cAlternateFileName="")) returned 1 [0100.889] FindNextFileW (in: hFindFile=0x381b40, lpFindFileData=0x31e5e4 | out: lpFindFileData=0x31e5e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x761d0cd0, ftCreationTime.dwHighDateTime=0x1ca0411, ftLastAccessTime.dwLowDateTime=0x761d0cd0, ftLastAccessTime.dwHighDateTime=0x1ca0411, ftLastWriteTime.dwLowDateTime=0x7d3bb510, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x73c00, dwReserved0=0x0, dwReserved1=0x0, cFileName="AcSpecfc.dll", cAlternateFileName="")) returned 1 [0100.889] FindNextFileW (in: hFindFile=0x381b40, lpFindFileData=0x31e5e4 | out: lpFindFileData=0x31e5e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe234c5df, ftCreationTime.dwHighDateTime=0x1ca040f, ftLastAccessTime.dwLowDateTime=0xe234c5df, ftLastAccessTime.dwHighDateTime=0x1ca040f, ftLastWriteTime.dwLowDateTime=0x7d5cf8b0, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0xac00, dwReserved0=0x0, dwReserved1=0x0, cFileName="acwow64.dll", cAlternateFileName="")) returned 1 [0100.889] FindNextFileW (in: hFindFile=0x381b40, lpFindFileData=0x31e5e4 | out: lpFindFileData=0x31e5e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x678fcb0d, ftCreationTime.dwHighDateTime=0x1ca0411, ftLastAccessTime.dwLowDateTime=0x678fcb0d, ftLastAccessTime.dwHighDateTime=0x1ca0411, ftLastWriteTime.dwLowDateTime=0x7d6424a0, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x33c00, dwReserved0=0x0, dwReserved1=0x0, cFileName="AcXtrnal.dll", cAlternateFileName="")) returned 1 [0100.889] FindNextFileW (in: hFindFile=0x381b40, lpFindFileData=0x31e5e4 | out: lpFindFileData=0x31e5e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7828c580, ftCreationTime.dwHighDateTime=0x1ca0410, ftLastAccessTime.dwLowDateTime=0x7828c580, ftLastAccessTime.dwHighDateTime=0x1ca0410, ftLastWriteTime.dwLowDateTime=0x7e595a10, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0xa400, dwReserved0=0x0, dwReserved1=0x0, cFileName="apihex86.dll", cAlternateFileName="")) returned 1 [0100.889] FindNextFileW (in: hFindFile=0x381b40, lpFindFileData=0x31e5e4 | out: lpFindFileData=0x31e5e4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfdb328d6, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x571de7e6, ftLastAccessTime.dwHighDateTime=0x1cb892c, ftLastWriteTime.dwLowDateTime=0x571de7e6, ftLastWriteTime.dwHighDateTime=0x1cb892c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="AppPatch64", cAlternateFileName="APPPAT~1")) returned 1 [0100.890] FindNextFileW (in: hFindFile=0x381b40, lpFindFileData=0x31e5e4 | out: lpFindFileData=0x31e5e4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfdb58a30, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfdb58a30, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xfdb58a30, ftLastWriteTime.dwHighDateTime=0x1ca0431, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Custom", cAlternateFileName="")) returned 1 [0100.890] FindNextFileW (in: hFindFile=0x381b40, lpFindFileData=0x31e5e4 | out: lpFindFileData=0x31e5e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x89f08b88, ftCreationTime.dwHighDateTime=0x1cb892b, ftLastAccessTime.dwLowDateTime=0x89f08b88, ftLastAccessTime.dwHighDateTime=0x1cb892b, ftLastWriteTime.dwLowDateTime=0x89f2ece8, ftLastWriteTime.dwHighDateTime=0x1cb892b, nFileSizeHigh=0x0, nFileSizeLow=0x2504e, dwReserved0=0x0, dwReserved1=0x0, cFileName="drvmain.sdb", cAlternateFileName="")) returned 1 [0100.890] FindNextFileW (in: hFindFile=0x381b40, lpFindFileData=0x31e5e4 | out: lpFindFileData=0x31e5e4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x368b31d3, ftCreationTime.dwHighDateTime=0x1ca0445, ftLastAccessTime.dwLowDateTime=0x23fb0799, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x1d91b669, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="en-US", cAlternateFileName="")) returned 1 [0100.890] FindNextFileW (in: hFindFile=0x381b40, lpFindFileData=0x31e5e4 | out: lpFindFileData=0x31e5e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x89f2ece8, ftCreationTime.dwHighDateTime=0x1cb892b, ftLastAccessTime.dwLowDateTime=0x89f2ece8, ftLastAccessTime.dwHighDateTime=0x1cb892b, ftLastWriteTime.dwLowDateTime=0x8a11decc, ftLastWriteTime.dwHighDateTime=0x1cb892b, nFileSizeHigh=0x0, nFileSizeLow=0x1aeae2, dwReserved0=0x0, dwReserved1=0x0, cFileName="msimain.sdb", cAlternateFileName="")) returned 1 [0100.890] FindNextFileW (in: hFindFile=0x381b40, lpFindFileData=0x31e5e4 | out: lpFindFileData=0x31e5e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa7339606, ftCreationTime.dwHighDateTime=0x1cb892b, ftLastAccessTime.dwLowDateTime=0xa7339606, ftLastAccessTime.dwHighDateTime=0x1cb892b, ftLastWriteTime.dwLowDateTime=0xa7339606, ftLastWriteTime.dwHighDateTime=0x1cb892b, nFileSizeHigh=0x0, nFileSizeLow=0xaf82, dwReserved0=0x0, dwReserved1=0x0, cFileName="pcamain.sdb", cAlternateFileName="")) returned 1 [0100.890] FindNextFileW (in: hFindFile=0x381b40, lpFindFileData=0x31e5e4 | out: lpFindFileData=0x31e5e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8a11decc, ftCreationTime.dwHighDateTime=0x1cb892b, ftLastAccessTime.dwLowDateTime=0x8a11decc, ftLastAccessTime.dwHighDateTime=0x1cb892b, ftLastWriteTime.dwLowDateTime=0x8a1dc5ad, ftLastWriteTime.dwHighDateTime=0x1cb892b, nFileSizeHigh=0x0, nFileSizeLow=0x3e2f48, dwReserved0=0x0, dwReserved1=0x0, cFileName="sysmain.sdb", cAlternateFileName="")) returned 1 [0100.890] FindNextFileW (in: hFindFile=0x381b40, lpFindFileData=0x31e5e4 | out: lpFindFileData=0x31e5e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8a11decc, ftCreationTime.dwHighDateTime=0x1cb892b, ftLastAccessTime.dwLowDateTime=0x8a11decc, ftLastAccessTime.dwHighDateTime=0x1cb892b, ftLastWriteTime.dwLowDateTime=0x8a1dc5ad, ftLastWriteTime.dwHighDateTime=0x1cb892b, nFileSizeHigh=0x0, nFileSizeLow=0x3e2f48, dwReserved0=0x0, dwReserved1=0x0, cFileName="sysmain.sdb", cAlternateFileName="")) returned 0 [0100.890] FindClose (in: hFindFile=0x381b40 | out: hFindFile=0x381b40) returned 1 [0100.890] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e86c) returned 1 [0100.890] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e878) returned 1 [0100.890] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e834) returned 1 [0100.890] GetFullPathNameW (in: lpFileName="C:\\Windows\\AppPatch\\AppPatch64", nBufferLength=0x105, lpBuffer=0x31e33c, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\AppPatch\\AppPatch64", lpFilePart=0x0) returned 0x1e [0100.891] GetFullPathNameW (in: lpFileName="C:\\Windows\\AppPatch\\AppPatch64\\", nBufferLength=0x105, lpBuffer=0x31e310, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\AppPatch\\AppPatch64\\", lpFilePart=0x0) returned 0x1f [0100.891] FindFirstFileW (in: lpFileName="C:\\Windows\\AppPatch\\AppPatch64\\*", lpFindFileData=0x31e55c | out: lpFindFileData=0x31e55c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfdb328d6, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x571de7e6, ftLastAccessTime.dwHighDateTime=0x1cb892c, ftLastWriteTime.dwLowDateTime=0x571de7e6, ftLastWriteTime.dwHighDateTime=0x1cb892c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x381b40 [0100.899] FindNextFileW (in: hFindFile=0x381b40, lpFindFileData=0x31e56c | out: lpFindFileData=0x31e56c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfdb328d6, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x571de7e6, ftLastAccessTime.dwHighDateTime=0x1cb892c, ftLastWriteTime.dwLowDateTime=0x571de7e6, ftLastWriteTime.dwHighDateTime=0x1cb892c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0100.899] FindNextFileW (in: hFindFile=0x381b40, lpFindFileData=0x31e56c | out: lpFindFileData=0x31e56c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4733d573, ftCreationTime.dwHighDateTime=0x1ca0413, ftLastAccessTime.dwLowDateTime=0x4733d573, ftLastAccessTime.dwHighDateTime=0x1ca0413, ftLastWriteTime.dwLowDateTime=0x2244a0, ftLastWriteTime.dwHighDateTime=0x1ca0424, nFileSizeHigh=0x0, nFileSizeLow=0x4b800, dwReserved0=0x0, dwReserved1=0x0, cFileName="AcGenral.dll", cAlternateFileName="")) returned 1 [0100.899] FindNextFileW (in: hFindFile=0x381b40, lpFindFileData=0x31e56c | out: lpFindFileData=0x31e56c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x83410e23, ftCreationTime.dwHighDateTime=0x1cb892b, ftLastAccessTime.dwLowDateTime=0x83410e23, ftLastAccessTime.dwHighDateTime=0x1cb892b, ftLastWriteTime.dwLowDateTime=0x83436f83, ftLastWriteTime.dwHighDateTime=0x1cb892b, nFileSizeHigh=0x0, nFileSizeLow=0x55800, dwReserved0=0x0, dwReserved1=0x0, cFileName="AcLayers.dll", cAlternateFileName="")) returned 1 [0100.899] FindNextFileW (in: hFindFile=0x381b40, lpFindFileData=0x31e56c | out: lpFindFileData=0x31e56c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x42a57971, ftCreationTime.dwHighDateTime=0x1ca0413, ftLastAccessTime.dwLowDateTime=0x42a57971, ftLastAccessTime.dwHighDateTime=0x1ca0413, ftLastWriteTime.dwLowDateTime=0x353060, ftLastWriteTime.dwHighDateTime=0x1ca0424, nFileSizeHigh=0x0, nFileSizeLow=0x1b200, dwReserved0=0x0, dwReserved1=0x0, cFileName="acspecfc.dll", cAlternateFileName="")) returned 1 [0100.899] FindNextFileW (in: hFindFile=0x381b40, lpFindFileData=0x31e56c | out: lpFindFileData=0x31e56c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x424fc85d, ftCreationTime.dwHighDateTime=0x1ca0413, ftLastAccessTime.dwLowDateTime=0x424fc85d, ftLastAccessTime.dwHighDateTime=0x1ca0413, ftLastWriteTime.dwLowDateTime=0x5dc700, ftLastWriteTime.dwHighDateTime=0x1ca0424, nFileSizeHigh=0x0, nFileSizeLow=0x21000, dwReserved0=0x0, dwReserved1=0x0, cFileName="AcXtrnal.dll", cAlternateFileName="")) returned 1 [0100.900] FindNextFileW (in: hFindFile=0x381b40, lpFindFileData=0x31e56c | out: lpFindFileData=0x31e56c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x23e69f36, ftCreationTime.dwHighDateTime=0x1ca0412, ftLastAccessTime.dwLowDateTime=0x23e69f36, ftLastAccessTime.dwHighDateTime=0x1ca0412, ftLastWriteTime.dwLowDateTime=0xf60f60, ftLastWriteTime.dwHighDateTime=0x1ca0424, nFileSizeHigh=0x0, nFileSizeLow=0xce00, dwReserved0=0x0, dwReserved1=0x0, cFileName="apihex64.dll", cAlternateFileName="")) returned 1 [0100.900] FindNextFileW (in: hFindFile=0x381b40, lpFindFileData=0x31e56c | out: lpFindFileData=0x31e56c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x83436f83, ftCreationTime.dwHighDateTime=0x1cb892b, ftLastAccessTime.dwLowDateTime=0x83436f83, ftLastAccessTime.dwHighDateTime=0x1cb892b, ftLastWriteTime.dwLowDateTime=0x83436f83, ftLastWriteTime.dwHighDateTime=0x1cb892b, nFileSizeHigh=0x0, nFileSizeLow=0x1e706, dwReserved0=0x0, dwReserved1=0x0, cFileName="sysmain.sdb", cAlternateFileName="")) returned 1 [0100.900] FindNextFileW (in: hFindFile=0x381b40, lpFindFileData=0x31e56c | out: lpFindFileData=0x31e56c*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0100.900] FindClose (in: hFindFile=0x381b40 | out: hFindFile=0x381b40) returned 1 [0100.901] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e7f4) returned 1 [0100.901] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e800) returned 1 [0100.901] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e834) returned 1 [0100.901] GetFullPathNameW (in: lpFileName="C:\\Windows\\AppPatch\\AppPatch64", nBufferLength=0x105, lpBuffer=0x31e33c, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\AppPatch\\AppPatch64", lpFilePart=0x0) returned 0x1e [0100.901] GetFullPathNameW (in: lpFileName="C:\\Windows\\AppPatch\\AppPatch64\\", nBufferLength=0x105, lpBuffer=0x31e310, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\AppPatch\\AppPatch64\\", lpFilePart=0x0) returned 0x1f [0100.901] FindFirstFileW (in: lpFileName="C:\\Windows\\AppPatch\\AppPatch64\\*", lpFindFileData=0x31e55c | out: lpFindFileData=0x31e55c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfdb328d6, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x571de7e6, ftLastAccessTime.dwHighDateTime=0x1cb892c, ftLastWriteTime.dwLowDateTime=0x571de7e6, ftLastWriteTime.dwHighDateTime=0x1cb892c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x381b40 [0100.902] FindNextFileW (in: hFindFile=0x381b40, lpFindFileData=0x31e56c | out: lpFindFileData=0x31e56c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfdb328d6, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x571de7e6, ftLastAccessTime.dwHighDateTime=0x1cb892c, ftLastWriteTime.dwLowDateTime=0x571de7e6, ftLastWriteTime.dwHighDateTime=0x1cb892c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0100.902] FindNextFileW (in: hFindFile=0x381b40, lpFindFileData=0x31e56c | out: lpFindFileData=0x31e56c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4733d573, ftCreationTime.dwHighDateTime=0x1ca0413, ftLastAccessTime.dwLowDateTime=0x4733d573, ftLastAccessTime.dwHighDateTime=0x1ca0413, ftLastWriteTime.dwLowDateTime=0x2244a0, ftLastWriteTime.dwHighDateTime=0x1ca0424, nFileSizeHigh=0x0, nFileSizeLow=0x4b800, dwReserved0=0x0, dwReserved1=0x0, cFileName="AcGenral.dll", cAlternateFileName="")) returned 1 [0100.902] FindNextFileW (in: hFindFile=0x381b40, lpFindFileData=0x31e56c | out: lpFindFileData=0x31e56c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x83410e23, ftCreationTime.dwHighDateTime=0x1cb892b, ftLastAccessTime.dwLowDateTime=0x83410e23, ftLastAccessTime.dwHighDateTime=0x1cb892b, ftLastWriteTime.dwLowDateTime=0x83436f83, ftLastWriteTime.dwHighDateTime=0x1cb892b, nFileSizeHigh=0x0, nFileSizeLow=0x55800, dwReserved0=0x0, dwReserved1=0x0, cFileName="AcLayers.dll", cAlternateFileName="")) returned 1 [0100.902] FindNextFileW (in: hFindFile=0x381b40, lpFindFileData=0x31e56c | out: lpFindFileData=0x31e56c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x42a57971, ftCreationTime.dwHighDateTime=0x1ca0413, ftLastAccessTime.dwLowDateTime=0x42a57971, ftLastAccessTime.dwHighDateTime=0x1ca0413, ftLastWriteTime.dwLowDateTime=0x353060, ftLastWriteTime.dwHighDateTime=0x1ca0424, nFileSizeHigh=0x0, nFileSizeLow=0x1b200, dwReserved0=0x0, dwReserved1=0x0, cFileName="acspecfc.dll", cAlternateFileName="")) returned 1 [0100.902] FindNextFileW (in: hFindFile=0x381b40, lpFindFileData=0x31e56c | out: lpFindFileData=0x31e56c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x424fc85d, ftCreationTime.dwHighDateTime=0x1ca0413, ftLastAccessTime.dwLowDateTime=0x424fc85d, ftLastAccessTime.dwHighDateTime=0x1ca0413, ftLastWriteTime.dwLowDateTime=0x5dc700, ftLastWriteTime.dwHighDateTime=0x1ca0424, nFileSizeHigh=0x0, nFileSizeLow=0x21000, dwReserved0=0x0, dwReserved1=0x0, cFileName="AcXtrnal.dll", cAlternateFileName="")) returned 1 [0100.902] FindNextFileW (in: hFindFile=0x381b40, lpFindFileData=0x31e56c | out: lpFindFileData=0x31e56c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x23e69f36, ftCreationTime.dwHighDateTime=0x1ca0412, ftLastAccessTime.dwLowDateTime=0x23e69f36, ftLastAccessTime.dwHighDateTime=0x1ca0412, ftLastWriteTime.dwLowDateTime=0xf60f60, ftLastWriteTime.dwHighDateTime=0x1ca0424, nFileSizeHigh=0x0, nFileSizeLow=0xce00, dwReserved0=0x0, dwReserved1=0x0, cFileName="apihex64.dll", cAlternateFileName="")) returned 1 [0100.902] FindNextFileW (in: hFindFile=0x381b40, lpFindFileData=0x31e56c | out: lpFindFileData=0x31e56c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x83436f83, ftCreationTime.dwHighDateTime=0x1cb892b, ftLastAccessTime.dwLowDateTime=0x83436f83, ftLastAccessTime.dwHighDateTime=0x1cb892b, ftLastWriteTime.dwLowDateTime=0x83436f83, ftLastWriteTime.dwHighDateTime=0x1cb892b, nFileSizeHigh=0x0, nFileSizeLow=0x1e706, dwReserved0=0x0, dwReserved1=0x0, cFileName="sysmain.sdb", cAlternateFileName="")) returned 1 [0100.902] FindNextFileW (in: hFindFile=0x381b40, lpFindFileData=0x31e56c | out: lpFindFileData=0x31e56c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x83436f83, ftCreationTime.dwHighDateTime=0x1cb892b, ftLastAccessTime.dwLowDateTime=0x83436f83, ftLastAccessTime.dwHighDateTime=0x1cb892b, ftLastWriteTime.dwLowDateTime=0x83436f83, ftLastWriteTime.dwHighDateTime=0x1cb892b, nFileSizeHigh=0x0, nFileSizeLow=0x1e706, dwReserved0=0x0, dwReserved1=0x0, cFileName="sysmain.sdb", cAlternateFileName="")) returned 0 [0100.903] FindClose (in: hFindFile=0x381b40 | out: hFindFile=0x381b40) returned 1 [0100.903] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e7f4) returned 1 [0100.903] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e800) returned 1 [0100.903] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e834) returned 1 [0100.903] GetFullPathNameW (in: lpFileName="C:\\Windows\\AppPatch\\Custom", nBufferLength=0x105, lpBuffer=0x31e33c, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\AppPatch\\Custom", lpFilePart=0x0) returned 0x1a [0100.903] GetFullPathNameW (in: lpFileName="C:\\Windows\\AppPatch\\Custom\\", nBufferLength=0x105, lpBuffer=0x31e310, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\AppPatch\\Custom\\", lpFilePart=0x0) returned 0x1b [0100.903] FindFirstFileW (in: lpFileName="C:\\Windows\\AppPatch\\Custom\\*", lpFindFileData=0x31e55c | out: lpFindFileData=0x31e55c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfdb58a30, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfdb58a30, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xfdb58a30, ftLastWriteTime.dwHighDateTime=0x1ca0431, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x381b40 [0100.904] FindNextFileW (in: hFindFile=0x381b40, lpFindFileData=0x31e56c | out: lpFindFileData=0x31e56c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfdb58a30, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfdb58a30, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xfdb58a30, ftLastWriteTime.dwHighDateTime=0x1ca0431, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0100.904] FindNextFileW (in: hFindFile=0x381b40, lpFindFileData=0x31e56c | out: lpFindFileData=0x31e56c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfdb58a30, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfdb58a30, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0x987a7ac9, ftLastWriteTime.dwHighDateTime=0x1ca042b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Custom64", cAlternateFileName="")) returned 1 [0100.904] FindNextFileW (in: hFindFile=0x381b40, lpFindFileData=0x31e56c | out: lpFindFileData=0x31e56c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfdb58a30, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfdb58a30, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0x987a7ac9, ftLastWriteTime.dwHighDateTime=0x1ca042b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Custom64", cAlternateFileName="")) returned 0 [0100.904] FindClose (in: hFindFile=0x381b40 | out: hFindFile=0x381b40) returned 1 [0100.904] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e7f4) returned 1 [0100.904] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e800) returned 1 [0100.904] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e834) returned 1 [0100.904] GetFullPathNameW (in: lpFileName="C:\\Windows\\AppPatch\\Custom", nBufferLength=0x105, lpBuffer=0x31e33c, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\AppPatch\\Custom", lpFilePart=0x0) returned 0x1a [0100.904] GetFullPathNameW (in: lpFileName="C:\\Windows\\AppPatch\\Custom\\", nBufferLength=0x105, lpBuffer=0x31e310, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\AppPatch\\Custom\\", lpFilePart=0x0) returned 0x1b [0100.904] FindFirstFileW (in: lpFileName="C:\\Windows\\AppPatch\\Custom\\*", lpFindFileData=0x31e55c | out: lpFindFileData=0x31e55c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfdb58a30, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfdb58a30, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xfdb58a30, ftLastWriteTime.dwHighDateTime=0x1ca0431, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x381b40 [0100.905] FindNextFileW (in: hFindFile=0x381b40, lpFindFileData=0x31e56c | out: lpFindFileData=0x31e56c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfdb58a30, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfdb58a30, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xfdb58a30, ftLastWriteTime.dwHighDateTime=0x1ca0431, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0100.905] FindNextFileW (in: hFindFile=0x381b40, lpFindFileData=0x31e56c | out: lpFindFileData=0x31e56c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfdb58a30, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfdb58a30, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0x987a7ac9, ftLastWriteTime.dwHighDateTime=0x1ca042b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Custom64", cAlternateFileName="")) returned 1 [0100.905] FindNextFileW (in: hFindFile=0x381b40, lpFindFileData=0x31e56c | out: lpFindFileData=0x31e56c*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0100.905] FindClose (in: hFindFile=0x381b40 | out: hFindFile=0x381b40) returned 1 [0100.905] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e7f4) returned 1 [0100.905] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e800) returned 1 [0100.905] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e7bc) returned 1 [0100.905] GetFullPathNameW (in: lpFileName="C:\\Windows\\AppPatch\\Custom\\Custom64", nBufferLength=0x105, lpBuffer=0x31e2c4, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\AppPatch\\Custom\\Custom64", lpFilePart=0x0) returned 0x23 [0100.905] GetFullPathNameW (in: lpFileName="C:\\Windows\\AppPatch\\Custom\\Custom64\\", nBufferLength=0x105, lpBuffer=0x31e298, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\AppPatch\\Custom\\Custom64\\", lpFilePart=0x0) returned 0x24 [0100.905] FindFirstFileW (in: lpFileName="C:\\Windows\\AppPatch\\Custom\\Custom64\\*", lpFindFileData=0x31e4e4 | out: lpFindFileData=0x31e4e4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfdb58a30, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfdb58a30, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0x987a7ac9, ftLastWriteTime.dwHighDateTime=0x1ca042b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x381b40 [0100.905] FindNextFileW (in: hFindFile=0x381b40, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfdb58a30, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfdb58a30, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0x987a7ac9, ftLastWriteTime.dwHighDateTime=0x1ca042b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0100.906] FindNextFileW (in: hFindFile=0x381b40, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfdb58a30, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfdb58a30, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0x987a7ac9, ftLastWriteTime.dwHighDateTime=0x1ca042b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 0 [0100.906] FindClose (in: hFindFile=0x381b40 | out: hFindFile=0x381b40) returned 1 [0100.906] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e77c) returned 1 [0100.906] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e788) returned 1 [0100.906] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e7bc) returned 1 [0100.906] GetFullPathNameW (in: lpFileName="C:\\Windows\\AppPatch\\Custom\\Custom64", nBufferLength=0x105, lpBuffer=0x31e2c4, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\AppPatch\\Custom\\Custom64", lpFilePart=0x0) returned 0x23 [0100.906] GetFullPathNameW (in: lpFileName="C:\\Windows\\AppPatch\\Custom\\Custom64\\", nBufferLength=0x105, lpBuffer=0x31e298, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\AppPatch\\Custom\\Custom64\\", lpFilePart=0x0) returned 0x24 [0100.906] FindFirstFileW (in: lpFileName="C:\\Windows\\AppPatch\\Custom\\Custom64\\*", lpFindFileData=0x31e4e4 | out: lpFindFileData=0x31e4e4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfdb58a30, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfdb58a30, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0x987a7ac9, ftLastWriteTime.dwHighDateTime=0x1ca042b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x381b40 [0100.906] FindNextFileW (in: hFindFile=0x381b40, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfdb58a30, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfdb58a30, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0x987a7ac9, ftLastWriteTime.dwHighDateTime=0x1ca042b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0100.906] FindNextFileW (in: hFindFile=0x381b40, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfdb58a30, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfdb58a30, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0x987a7ac9, ftLastWriteTime.dwHighDateTime=0x1ca042b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 0 [0100.906] FindClose (in: hFindFile=0x381b40 | out: hFindFile=0x381b40) returned 1 [0100.906] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e77c) returned 1 [0100.906] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e788) returned 1 [0100.906] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e834) returned 1 [0100.906] GetFullPathNameW (in: lpFileName="C:\\Windows\\AppPatch\\en-US", nBufferLength=0x105, lpBuffer=0x31e33c, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\AppPatch\\en-US", lpFilePart=0x0) returned 0x19 [0100.906] GetFullPathNameW (in: lpFileName="C:\\Windows\\AppPatch\\en-US\\", nBufferLength=0x105, lpBuffer=0x31e310, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\AppPatch\\en-US\\", lpFilePart=0x0) returned 0x1a [0100.907] FindFirstFileW (in: lpFileName="C:\\Windows\\AppPatch\\en-US\\*", lpFindFileData=0x31e55c | out: lpFindFileData=0x31e55c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x368b31d3, ftCreationTime.dwHighDateTime=0x1ca0445, ftLastAccessTime.dwLowDateTime=0x23fb0799, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x1d91b669, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x381b40 [0100.907] FindNextFileW (in: hFindFile=0x381b40, lpFindFileData=0x31e56c | out: lpFindFileData=0x31e56c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x368b31d3, ftCreationTime.dwHighDateTime=0x1ca0445, ftLastAccessTime.dwLowDateTime=0x23fb0799, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x1d91b669, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0100.907] FindNextFileW (in: hFindFile=0x381b40, lpFindFileData=0x31e56c | out: lpFindFileData=0x31e56c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc3080a8, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0xc60371c, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0xc3080a8, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x47600, dwReserved0=0x0, dwReserved1=0x0, cFileName="AcRes.dll.mui", cAlternateFileName="")) returned 1 [0100.907] FindNextFileW (in: hFindFile=0x381b40, lpFindFileData=0x31e56c | out: lpFindFileData=0x31e56c*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0100.907] FindClose (in: hFindFile=0x381b40 | out: hFindFile=0x381b40) returned 1 [0100.909] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e7f4) returned 1 [0100.909] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e800) returned 1 [0100.909] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e834) returned 1 [0100.909] GetFullPathNameW (in: lpFileName="C:\\Windows\\AppPatch\\en-US", nBufferLength=0x105, lpBuffer=0x31e33c, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\AppPatch\\en-US", lpFilePart=0x0) returned 0x19 [0100.909] GetFullPathNameW (in: lpFileName="C:\\Windows\\AppPatch\\en-US\\", nBufferLength=0x105, lpBuffer=0x31e310, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\AppPatch\\en-US\\", lpFilePart=0x0) returned 0x1a [0100.909] FindFirstFileW (in: lpFileName="C:\\Windows\\AppPatch\\en-US\\*", lpFindFileData=0x31e55c | out: lpFindFileData=0x31e55c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x368b31d3, ftCreationTime.dwHighDateTime=0x1ca0445, ftLastAccessTime.dwLowDateTime=0x23fb0799, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x1d91b669, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x381b40 [0100.909] FindNextFileW (in: hFindFile=0x381b40, lpFindFileData=0x31e56c | out: lpFindFileData=0x31e56c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x368b31d3, ftCreationTime.dwHighDateTime=0x1ca0445, ftLastAccessTime.dwLowDateTime=0x23fb0799, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x1d91b669, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0100.909] FindNextFileW (in: hFindFile=0x381b40, lpFindFileData=0x31e56c | out: lpFindFileData=0x31e56c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc3080a8, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0xc60371c, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0xc3080a8, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x47600, dwReserved0=0x0, dwReserved1=0x0, cFileName="AcRes.dll.mui", cAlternateFileName="")) returned 1 [0100.909] FindNextFileW (in: hFindFile=0x381b40, lpFindFileData=0x31e56c | out: lpFindFileData=0x31e56c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc3080a8, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0xc60371c, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0xc3080a8, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x47600, dwReserved0=0x0, dwReserved1=0x0, cFileName="AcRes.dll.mui", cAlternateFileName="")) returned 0 [0100.910] FindClose (in: hFindFile=0x381b40 | out: hFindFile=0x381b40) returned 1 [0100.910] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e7f4) returned 1 [0100.910] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e800) returned 1 [0100.910] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e8ac) returned 1 [0100.910] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly", nBufferLength=0x105, lpBuffer=0x31e3b4, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly", lpFilePart=0x0) returned 0x13 [0100.910] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\", nBufferLength=0x105, lpBuffer=0x31e388, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\", lpFilePart=0x0) returned 0x14 [0100.910] FindFirstFileW (in: lpFileName="C:\\Windows\\assembly\\*", lpFindFileData=0x31e5d4 | out: lpFindFileData=0x31e5d4*(dwFileAttributes=0x15, ftCreationTime.dwLowDateTime=0xfdb58a30, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xe968e7e0, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0xe968e7e0, ftLastWriteTime.dwHighDateTime=0x1d305f1, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x381b40 [0100.910] FindNextFileW (in: hFindFile=0x381b40, lpFindFileData=0x31e5e4 | out: lpFindFileData=0x31e5e4*(dwFileAttributes=0x15, ftCreationTime.dwLowDateTime=0xfdb58a30, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xe968e7e0, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0xe968e7e0, ftLastWriteTime.dwHighDateTime=0x1d305f1, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0100.910] FindNextFileW (in: hFindFile=0x381b40, lpFindFileData=0x31e5e4 | out: lpFindFileData=0x31e5e4*(dwFileAttributes=0x27, ftCreationTime.dwLowDateTime=0x3e0319f2, ftCreationTime.dwHighDateTime=0x1ca043f, ftLastAccessTime.dwLowDateTime=0x3e0319f2, ftLastAccessTime.dwHighDateTime=0x1ca043f, ftLastWriteTime.dwLowDateTime=0x3e0319f2, ftLastWriteTime.dwHighDateTime=0x1ca043f, nFileSizeHigh=0x0, nFileSizeLow=0xe3, dwReserved0=0x0, dwReserved1=0x0, cFileName="Desktop.ini", cAlternateFileName="")) returned 1 [0100.910] FindNextFileW (in: hFindFile=0x381b40, lpFindFileData=0x31e5e4 | out: lpFindFileData=0x31e5e4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x409ffc9f, ftCreationTime.dwHighDateTime=0x1ca043f, ftLastAccessTime.dwLowDateTime=0xa6699150, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xa6699150, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="GAC", cAlternateFileName="")) returned 1 [0100.910] FindNextFileW (in: hFindFile=0x381b40, lpFindFileData=0x31e5e4 | out: lpFindFileData=0x31e5e4*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0xfdb58a30, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xa69b8e30, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xa69b8e30, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="GAC_32", cAlternateFileName="")) returned 1 [0100.910] FindNextFileW (in: hFindFile=0x381b40, lpFindFileData=0x31e5e4 | out: lpFindFileData=0x31e5e4*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0xfdbf0f98, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xa683c070, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xa683c070, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="GAC_64", cAlternateFileName="")) returned 1 [0100.911] FindNextFileW (in: hFindFile=0x381b40, lpFindFileData=0x31e5e4 | out: lpFindFileData=0x31e5e4*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0xfdc89500, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xe968e7e0, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0xe968e7e0, ftLastWriteTime.dwHighDateTime=0x1d305f1, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="GAC_MSIL", cAlternateFileName="")) returned 1 [0100.911] FindNextFileW (in: hFindFile=0x381b40, lpFindFileData=0x31e5e4 | out: lpFindFileData=0x31e5e4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x3a37e882, ftCreationTime.dwHighDateTime=0x1ca043f, ftLastAccessTime.dwLowDateTime=0x4d32fbe0, ftLastAccessTime.dwHighDateTime=0x1d305ec, ftLastWriteTime.dwLowDateTime=0x4d32fbe0, ftLastWriteTime.dwHighDateTime=0x1d305ec, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="NativeImages_v2.0.50727_32", cAlternateFileName="NATIVE~2.507")) returned 1 [0100.911] FindNextFileW (in: hFindFile=0x381b40, lpFindFileData=0x31e5e4 | out: lpFindFileData=0x31e5e4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x3118c295, ftCreationTime.dwHighDateTime=0x1ca043f, ftLastAccessTime.dwLowDateTime=0x73e153e0, ftLastAccessTime.dwHighDateTime=0x1d305ec, ftLastWriteTime.dwLowDateTime=0x73e153e0, ftLastWriteTime.dwHighDateTime=0x1d305ec, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="NativeImages_v2.0.50727_64", cAlternateFileName="NATIVE~1.507")) returned 1 [0100.911] FindNextFileW (in: hFindFile=0x381b40, lpFindFileData=0x31e5e4 | out: lpFindFileData=0x31e5e4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd111920, ftCreationTime.dwHighDateTime=0x1d2e675, ftLastAccessTime.dwLowDateTime=0x57cefcc0, ftLastAccessTime.dwHighDateTime=0x1d305ec, ftLastWriteTime.dwLowDateTime=0x57cefcc0, ftLastWriteTime.dwHighDateTime=0x1d305ec, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="NativeImages_v4.0.30319_32", cAlternateFileName="NATIVE~2.303")) returned 1 [0100.911] FindNextFileW (in: hFindFile=0x381b40, lpFindFileData=0x31e5e4 | out: lpFindFileData=0x31e5e4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xe955f360, ftCreationTime.dwHighDateTime=0x1d2e675, ftLastAccessTime.dwLowDateTime=0x816401c0, ftLastAccessTime.dwHighDateTime=0x1d305ec, ftLastWriteTime.dwLowDateTime=0x816401c0, ftLastWriteTime.dwHighDateTime=0x1d305ec, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="NativeImages_v4.0.30319_64", cAlternateFileName="NATIVE~1.303")) returned 1 [0100.911] FindNextFileW (in: hFindFile=0x381b40, lpFindFileData=0x31e5e4 | out: lpFindFileData=0x31e5e4*(dwFileAttributes=0x23, ftCreationTime.dwLowDateTime=0x409ffc9f, ftCreationTime.dwHighDateTime=0x1ca043f, ftLastAccessTime.dwLowDateTime=0x409ffc9f, ftLastAccessTime.dwHighDateTime=0x1ca043f, ftLastWriteTime.dwLowDateTime=0xd997e500, ftLastWriteTime.dwHighDateTime=0x1d305f1, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="PublisherPolicy.tme", cAlternateFileName="PUBLIS~1.TME")) returned 1 [0100.911] FindNextFileW (in: hFindFile=0x381b40, lpFindFileData=0x31e5e4 | out: lpFindFileData=0x31e5e4*(dwFileAttributes=0x3, ftCreationTime.dwLowDateTime=0xd997e500, ftCreationTime.dwHighDateTime=0x1d305f1, ftLastAccessTime.dwLowDateTime=0xd997e500, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0xd997e500, ftLastWriteTime.dwHighDateTime=0x1d305f1, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="pubpol109.dat", cAlternateFileName="PUBPOL~2.DAT")) returned 1 [0100.911] FindNextFileW (in: hFindFile=0x381b40, lpFindFileData=0x31e5e4 | out: lpFindFileData=0x31e5e4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x3df4d1b0, ftCreationTime.dwHighDateTime=0x1ca043f, ftLastAccessTime.dwLowDateTime=0xe968e7e0, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0xe968e7e0, ftLastWriteTime.dwHighDateTime=0x1d305f1, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="temp", cAlternateFileName="")) returned 1 [0100.911] FindNextFileW (in: hFindFile=0x381b40, lpFindFileData=0x31e5e4 | out: lpFindFileData=0x31e5e4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x409415bd, ftCreationTime.dwHighDateTime=0x1ca043f, ftLastAccessTime.dwLowDateTime=0xe57ec500, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0xe968e7e0, ftLastWriteTime.dwHighDateTime=0x1d305f1, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="tmp", cAlternateFileName="")) returned 1 [0100.912] FindNextFileW (in: hFindFile=0x381b40, lpFindFileData=0x31e5e4 | out: lpFindFileData=0x31e5e4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x409415bd, ftCreationTime.dwHighDateTime=0x1ca043f, ftLastAccessTime.dwLowDateTime=0xe57ec500, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0xe968e7e0, ftLastWriteTime.dwHighDateTime=0x1d305f1, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="tmp", cAlternateFileName="")) returned 0 [0100.912] FindClose (in: hFindFile=0x381b40 | out: hFindFile=0x381b40) returned 1 [0100.912] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e86c) returned 1 [0100.912] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e878) returned 1 [0100.912] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e8ac) returned 1 [0100.912] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly", nBufferLength=0x105, lpBuffer=0x31e3b4, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly", lpFilePart=0x0) returned 0x13 [0100.912] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\", nBufferLength=0x105, lpBuffer=0x31e388, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\", lpFilePart=0x0) returned 0x14 [0100.912] FindFirstFileW (in: lpFileName="C:\\Windows\\assembly\\*", lpFindFileData=0x31e5d4 | out: lpFindFileData=0x31e5d4*(dwFileAttributes=0x15, ftCreationTime.dwLowDateTime=0xfdb58a30, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xe968e7e0, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0xe968e7e0, ftLastWriteTime.dwHighDateTime=0x1d305f1, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x381b40 [0100.912] FindNextFileW (in: hFindFile=0x381b40, lpFindFileData=0x31e5e4 | out: lpFindFileData=0x31e5e4*(dwFileAttributes=0x15, ftCreationTime.dwLowDateTime=0xfdb58a30, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xe968e7e0, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0xe968e7e0, ftLastWriteTime.dwHighDateTime=0x1d305f1, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0100.912] FindNextFileW (in: hFindFile=0x381b40, lpFindFileData=0x31e5e4 | out: lpFindFileData=0x31e5e4*(dwFileAttributes=0x27, ftCreationTime.dwLowDateTime=0x3e0319f2, ftCreationTime.dwHighDateTime=0x1ca043f, ftLastAccessTime.dwLowDateTime=0x3e0319f2, ftLastAccessTime.dwHighDateTime=0x1ca043f, ftLastWriteTime.dwLowDateTime=0x3e0319f2, ftLastWriteTime.dwHighDateTime=0x1ca043f, nFileSizeHigh=0x0, nFileSizeLow=0xe3, dwReserved0=0x0, dwReserved1=0x0, cFileName="Desktop.ini", cAlternateFileName="")) returned 1 [0100.912] FindNextFileW (in: hFindFile=0x381b40, lpFindFileData=0x31e5e4 | out: lpFindFileData=0x31e5e4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x409ffc9f, ftCreationTime.dwHighDateTime=0x1ca043f, ftLastAccessTime.dwLowDateTime=0xa6699150, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xa6699150, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="GAC", cAlternateFileName="")) returned 1 [0100.913] FindNextFileW (in: hFindFile=0x381b40, lpFindFileData=0x31e5e4 | out: lpFindFileData=0x31e5e4*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0xfdb58a30, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xa69b8e30, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xa69b8e30, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="GAC_32", cAlternateFileName="")) returned 1 [0100.913] FindNextFileW (in: hFindFile=0x381b40, lpFindFileData=0x31e5e4 | out: lpFindFileData=0x31e5e4*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0xfdbf0f98, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xa683c070, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xa683c070, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="GAC_64", cAlternateFileName="")) returned 1 [0100.913] FindNextFileW (in: hFindFile=0x381b40, lpFindFileData=0x31e5e4 | out: lpFindFileData=0x31e5e4*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0xfdc89500, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xe968e7e0, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0xe968e7e0, ftLastWriteTime.dwHighDateTime=0x1d305f1, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="GAC_MSIL", cAlternateFileName="")) returned 1 [0100.913] FindNextFileW (in: hFindFile=0x381b40, lpFindFileData=0x31e5e4 | out: lpFindFileData=0x31e5e4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x3a37e882, ftCreationTime.dwHighDateTime=0x1ca043f, ftLastAccessTime.dwLowDateTime=0x4d32fbe0, ftLastAccessTime.dwHighDateTime=0x1d305ec, ftLastWriteTime.dwLowDateTime=0x4d32fbe0, ftLastWriteTime.dwHighDateTime=0x1d305ec, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="NativeImages_v2.0.50727_32", cAlternateFileName="NATIVE~2.507")) returned 1 [0100.913] FindNextFileW (in: hFindFile=0x381b40, lpFindFileData=0x31e5e4 | out: lpFindFileData=0x31e5e4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x3118c295, ftCreationTime.dwHighDateTime=0x1ca043f, ftLastAccessTime.dwLowDateTime=0x73e153e0, ftLastAccessTime.dwHighDateTime=0x1d305ec, ftLastWriteTime.dwLowDateTime=0x73e153e0, ftLastWriteTime.dwHighDateTime=0x1d305ec, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="NativeImages_v2.0.50727_64", cAlternateFileName="NATIVE~1.507")) returned 1 [0100.913] FindNextFileW (in: hFindFile=0x381b40, lpFindFileData=0x31e5e4 | out: lpFindFileData=0x31e5e4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd111920, ftCreationTime.dwHighDateTime=0x1d2e675, ftLastAccessTime.dwLowDateTime=0x57cefcc0, ftLastAccessTime.dwHighDateTime=0x1d305ec, ftLastWriteTime.dwLowDateTime=0x57cefcc0, ftLastWriteTime.dwHighDateTime=0x1d305ec, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="NativeImages_v4.0.30319_32", cAlternateFileName="NATIVE~2.303")) returned 1 [0100.913] FindNextFileW (in: hFindFile=0x381b40, lpFindFileData=0x31e5e4 | out: lpFindFileData=0x31e5e4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xe955f360, ftCreationTime.dwHighDateTime=0x1d2e675, ftLastAccessTime.dwLowDateTime=0x816401c0, ftLastAccessTime.dwHighDateTime=0x1d305ec, ftLastWriteTime.dwLowDateTime=0x816401c0, ftLastWriteTime.dwHighDateTime=0x1d305ec, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="NativeImages_v4.0.30319_64", cAlternateFileName="NATIVE~1.303")) returned 1 [0100.913] FindNextFileW (in: hFindFile=0x381b40, lpFindFileData=0x31e5e4 | out: lpFindFileData=0x31e5e4*(dwFileAttributes=0x23, ftCreationTime.dwLowDateTime=0x409ffc9f, ftCreationTime.dwHighDateTime=0x1ca043f, ftLastAccessTime.dwLowDateTime=0x409ffc9f, ftLastAccessTime.dwHighDateTime=0x1ca043f, ftLastWriteTime.dwLowDateTime=0xd997e500, ftLastWriteTime.dwHighDateTime=0x1d305f1, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="PublisherPolicy.tme", cAlternateFileName="PUBLIS~1.TME")) returned 1 [0100.913] FindNextFileW (in: hFindFile=0x381b40, lpFindFileData=0x31e5e4 | out: lpFindFileData=0x31e5e4*(dwFileAttributes=0x3, ftCreationTime.dwLowDateTime=0xd997e500, ftCreationTime.dwHighDateTime=0x1d305f1, ftLastAccessTime.dwLowDateTime=0xd997e500, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0xd997e500, ftLastWriteTime.dwHighDateTime=0x1d305f1, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="pubpol109.dat", cAlternateFileName="PUBPOL~2.DAT")) returned 1 [0100.913] FindNextFileW (in: hFindFile=0x381b40, lpFindFileData=0x31e5e4 | out: lpFindFileData=0x31e5e4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x3df4d1b0, ftCreationTime.dwHighDateTime=0x1ca043f, ftLastAccessTime.dwLowDateTime=0xe968e7e0, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0xe968e7e0, ftLastWriteTime.dwHighDateTime=0x1d305f1, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="temp", cAlternateFileName="")) returned 1 [0100.913] FindNextFileW (in: hFindFile=0x381b40, lpFindFileData=0x31e5e4 | out: lpFindFileData=0x31e5e4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x409415bd, ftCreationTime.dwHighDateTime=0x1ca043f, ftLastAccessTime.dwLowDateTime=0xe57ec500, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0xe968e7e0, ftLastWriteTime.dwHighDateTime=0x1d305f1, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="tmp", cAlternateFileName="")) returned 1 [0100.913] FindNextFileW (in: hFindFile=0x381b40, lpFindFileData=0x31e5e4 | out: lpFindFileData=0x31e5e4*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0100.914] FindClose (in: hFindFile=0x381b40 | out: hFindFile=0x381b40) returned 1 [0100.914] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e86c) returned 1 [0100.914] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e878) returned 1 [0100.914] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e834) returned 1 [0100.914] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC", nBufferLength=0x105, lpBuffer=0x31e33c, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC", lpFilePart=0x0) returned 0x17 [0100.914] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC\\", nBufferLength=0x105, lpBuffer=0x31e310, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC\\", lpFilePart=0x0) returned 0x18 [0100.914] FindFirstFileW (in: lpFileName="C:\\Windows\\assembly\\GAC\\*", lpFindFileData=0x31e55c | out: lpFindFileData=0x31e55c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x409ffc9f, ftCreationTime.dwHighDateTime=0x1ca043f, ftLastAccessTime.dwLowDateTime=0xa6699150, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xa6699150, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x381b40 [0100.915] FindNextFileW (in: hFindFile=0x381b40, lpFindFileData=0x31e56c | out: lpFindFileData=0x31e56c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x409ffc9f, ftCreationTime.dwHighDateTime=0x1ca043f, ftLastAccessTime.dwLowDateTime=0xa6699150, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xa6699150, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0100.915] FindNextFileW (in: hFindFile=0x381b40, lpFindFileData=0x31e56c | out: lpFindFileData=0x31e56c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa60f1d10, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0xa60f1d10, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xa60f1d10, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="ADODB", cAlternateFileName="")) returned 1 [0100.915] FindNextFileW (in: hFindFile=0x381b40, lpFindFileData=0x31e56c | out: lpFindFileData=0x31e56c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa6699150, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0xa6699150, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xa6699150, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Extensibility", cAlternateFileName="EXTENS~1")) returned 1 [0100.915] FindNextFileW (in: hFindFile=0x381b40, lpFindFileData=0x31e56c | out: lpFindFileData=0x31e56c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x409ffc9f, ftCreationTime.dwHighDateTime=0x1ca043f, ftLastAccessTime.dwLowDateTime=0x40a98220, ftLastAccessTime.dwHighDateTime=0x1ca043f, ftLastWriteTime.dwLowDateTime=0x40a98220, ftLastWriteTime.dwHighDateTime=0x1ca043f, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.Ink", cAlternateFileName="MICROS~1.INK")) returned 1 [0100.915] FindNextFileW (in: hFindFile=0x381b40, lpFindFileData=0x31e56c | out: lpFindFileData=0x31e56c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa60cbbb0, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0xa60cbbb0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xa60cbbb0, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.mshtml", cAlternateFileName="MICROS~1.MSH")) returned 1 [0100.915] FindNextFileW (in: hFindFile=0x381b40, lpFindFileData=0x31e56c | out: lpFindFileData=0x31e56c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa5fc1210, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0xa5fc1210, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xa5fc1210, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.StdFormat", cAlternateFileName="MICROS~1.STD")) returned 1 [0100.915] FindNextFileW (in: hFindFile=0x381b40, lpFindFileData=0x31e56c | out: lpFindFileData=0x31e56c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa60cbbb0, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0xa60cbbb0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xa60cbbb0, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="MSDATASRC", cAlternateFileName="MSDATA~1")) returned 1 [0100.915] FindNextFileW (in: hFindFile=0x381b40, lpFindFileData=0x31e56c | out: lpFindFileData=0x31e56c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa60f1d10, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0xa60f1d10, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xa60f1d10, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="stdole", cAlternateFileName="")) returned 1 [0100.915] FindNextFileW (in: hFindFile=0x381b40, lpFindFileData=0x31e56c | out: lpFindFileData=0x31e56c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa60f1d10, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0xa60f1d10, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xa60f1d10, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="stdole", cAlternateFileName="")) returned 0 [0100.915] FindClose (in: hFindFile=0x381b40 | out: hFindFile=0x381b40) returned 1 [0100.916] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e7f4) returned 1 [0100.916] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e800) returned 1 [0100.916] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e834) returned 1 [0100.916] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC", nBufferLength=0x105, lpBuffer=0x31e33c, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC", lpFilePart=0x0) returned 0x17 [0100.916] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC\\", nBufferLength=0x105, lpBuffer=0x31e310, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC\\", lpFilePart=0x0) returned 0x18 [0100.916] FindFirstFileW (in: lpFileName="C:\\Windows\\assembly\\GAC\\*", lpFindFileData=0x31e55c | out: lpFindFileData=0x31e55c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x409ffc9f, ftCreationTime.dwHighDateTime=0x1ca043f, ftLastAccessTime.dwLowDateTime=0xa6699150, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xa6699150, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x381b40 [0100.917] FindNextFileW (in: hFindFile=0x381b40, lpFindFileData=0x31e56c | out: lpFindFileData=0x31e56c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x409ffc9f, ftCreationTime.dwHighDateTime=0x1ca043f, ftLastAccessTime.dwLowDateTime=0xa6699150, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xa6699150, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0100.917] FindNextFileW (in: hFindFile=0x381b40, lpFindFileData=0x31e56c | out: lpFindFileData=0x31e56c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa60f1d10, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0xa60f1d10, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xa60f1d10, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="ADODB", cAlternateFileName="")) returned 1 [0100.917] FindNextFileW (in: hFindFile=0x381b40, lpFindFileData=0x31e56c | out: lpFindFileData=0x31e56c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa6699150, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0xa6699150, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xa6699150, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Extensibility", cAlternateFileName="EXTENS~1")) returned 1 [0100.917] FindNextFileW (in: hFindFile=0x381b40, lpFindFileData=0x31e56c | out: lpFindFileData=0x31e56c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x409ffc9f, ftCreationTime.dwHighDateTime=0x1ca043f, ftLastAccessTime.dwLowDateTime=0x40a98220, ftLastAccessTime.dwHighDateTime=0x1ca043f, ftLastWriteTime.dwLowDateTime=0x40a98220, ftLastWriteTime.dwHighDateTime=0x1ca043f, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.Ink", cAlternateFileName="MICROS~1.INK")) returned 1 [0100.917] FindNextFileW (in: hFindFile=0x381b40, lpFindFileData=0x31e56c | out: lpFindFileData=0x31e56c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa60cbbb0, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0xa60cbbb0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xa60cbbb0, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.mshtml", cAlternateFileName="MICROS~1.MSH")) returned 1 [0100.917] FindNextFileW (in: hFindFile=0x381b40, lpFindFileData=0x31e56c | out: lpFindFileData=0x31e56c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa5fc1210, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0xa5fc1210, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xa5fc1210, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.StdFormat", cAlternateFileName="MICROS~1.STD")) returned 1 [0100.917] FindNextFileW (in: hFindFile=0x381b40, lpFindFileData=0x31e56c | out: lpFindFileData=0x31e56c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa60cbbb0, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0xa60cbbb0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xa60cbbb0, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="MSDATASRC", cAlternateFileName="MSDATA~1")) returned 1 [0100.917] FindNextFileW (in: hFindFile=0x381b40, lpFindFileData=0x31e56c | out: lpFindFileData=0x31e56c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa60f1d10, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0xa60f1d10, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xa60f1d10, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="stdole", cAlternateFileName="")) returned 1 [0100.917] FindNextFileW (in: hFindFile=0x381b40, lpFindFileData=0x31e56c | out: lpFindFileData=0x31e56c*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0100.917] FindClose (in: hFindFile=0x381b40 | out: hFindFile=0x381b40) returned 1 [0100.918] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e7f4) returned 1 [0100.918] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e800) returned 1 [0100.918] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e7bc) returned 1 [0100.918] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC\\ADODB", nBufferLength=0x105, lpBuffer=0x31e2c4, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC\\ADODB", lpFilePart=0x0) returned 0x1d [0100.918] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC\\ADODB\\", nBufferLength=0x105, lpBuffer=0x31e298, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC\\ADODB\\", lpFilePart=0x0) returned 0x1e [0100.918] FindFirstFileW (in: lpFileName="C:\\Windows\\assembly\\GAC\\ADODB\\*", lpFindFileData=0x31e4e4 | out: lpFindFileData=0x31e4e4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa60f1d10, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0xa60f1d10, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xa60f1d10, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x381b40 [0100.919] FindNextFileW (in: hFindFile=0x381b40, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa60f1d10, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0xa60f1d10, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xa60f1d10, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0100.919] FindNextFileW (in: hFindFile=0x381b40, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5eaf6290, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0xa60f1d10, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xa60f1d10, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="7.0.3300.0__b03f5f7f11d50a3a", cAlternateFileName="703300~1.0__")) returned 1 [0100.919] FindNextFileW (in: hFindFile=0x381b40, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5eaf6290, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0xa60f1d10, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xa60f1d10, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="7.0.3300.0__b03f5f7f11d50a3a", cAlternateFileName="703300~1.0__")) returned 0 [0100.919] FindClose (in: hFindFile=0x381b40 | out: hFindFile=0x381b40) returned 1 [0100.919] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e77c) returned 1 [0100.919] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e788) returned 1 [0100.919] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e7bc) returned 1 [0100.919] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC\\ADODB", nBufferLength=0x105, lpBuffer=0x31e2c4, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC\\ADODB", lpFilePart=0x0) returned 0x1d [0100.919] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC\\ADODB\\", nBufferLength=0x105, lpBuffer=0x31e298, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC\\ADODB\\", lpFilePart=0x0) returned 0x1e [0100.919] FindFirstFileW (in: lpFileName="C:\\Windows\\assembly\\GAC\\ADODB\\*", lpFindFileData=0x31e4e4 | out: lpFindFileData=0x31e4e4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa60f1d10, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0xa60f1d10, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xa60f1d10, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x381b40 [0100.920] FindNextFileW (in: hFindFile=0x381b40, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa60f1d10, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0xa60f1d10, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xa60f1d10, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0100.920] FindNextFileW (in: hFindFile=0x381b40, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5eaf6290, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0xa60f1d10, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xa60f1d10, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="7.0.3300.0__b03f5f7f11d50a3a", cAlternateFileName="703300~1.0__")) returned 1 [0100.920] FindNextFileW (in: hFindFile=0x381b40, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0100.920] FindClose (in: hFindFile=0x381b40 | out: hFindFile=0x381b40) returned 1 [0100.920] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e77c) returned 1 [0100.920] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e788) returned 1 [0100.920] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e744) returned 1 [0100.920] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC\\ADODB\\7.0.3300.0__b03f5f7f11d50a3a", nBufferLength=0x105, lpBuffer=0x31e24c, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC\\ADODB\\7.0.3300.0__b03f5f7f11d50a3a", lpFilePart=0x0) returned 0x3a [0100.920] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC\\ADODB\\7.0.3300.0__b03f5f7f11d50a3a\\", nBufferLength=0x105, lpBuffer=0x31e220, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC\\ADODB\\7.0.3300.0__b03f5f7f11d50a3a\\", lpFilePart=0x0) returned 0x3b [0100.920] FindFirstFileW (in: lpFileName="C:\\Windows\\assembly\\GAC\\ADODB\\7.0.3300.0__b03f5f7f11d50a3a\\*", lpFindFileData=0x31e46c | out: lpFindFileData=0x31e46c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5eaf6290, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0xa60f1d10, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xa60f1d10, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x381b40 [0100.921] FindNextFileW (in: hFindFile=0x381b40, lpFindFileData=0x31e47c | out: lpFindFileData=0x31e47c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5eaf6290, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0xa60f1d10, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xa60f1d10, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0100.921] FindNextFileW (in: hFindFile=0x381b40, lpFindFileData=0x31e47c | out: lpFindFileData=0x31e47c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5eaf6290, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x5eaf6290, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x5eaf6290, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x1b000, dwReserved0=0x0, dwReserved1=0x0, cFileName="adodb.dll", cAlternateFileName="")) returned 1 [0100.921] FindNextFileW (in: hFindFile=0x381b40, lpFindFileData=0x31e47c | out: lpFindFileData=0x31e47c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa60f1d10, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0xa60f1d10, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xa60f1d10, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0xc4, dwReserved0=0x0, dwReserved1=0x0, cFileName="__AssemblyInfo__.ini", cAlternateFileName="__ASSE~1.INI")) returned 1 [0100.921] FindNextFileW (in: hFindFile=0x381b40, lpFindFileData=0x31e47c | out: lpFindFileData=0x31e47c*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0100.921] FindClose (in: hFindFile=0x381b40 | out: hFindFile=0x381b40) returned 1 [0100.921] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e704) returned 1 [0100.921] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e710) returned 1 [0100.921] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e744) returned 1 [0100.921] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC\\ADODB\\7.0.3300.0__b03f5f7f11d50a3a", nBufferLength=0x105, lpBuffer=0x31e24c, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC\\ADODB\\7.0.3300.0__b03f5f7f11d50a3a", lpFilePart=0x0) returned 0x3a [0100.921] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC\\ADODB\\7.0.3300.0__b03f5f7f11d50a3a\\", nBufferLength=0x105, lpBuffer=0x31e220, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC\\ADODB\\7.0.3300.0__b03f5f7f11d50a3a\\", lpFilePart=0x0) returned 0x3b [0100.921] FindFirstFileW (in: lpFileName="C:\\Windows\\assembly\\GAC\\ADODB\\7.0.3300.0__b03f5f7f11d50a3a\\*", lpFindFileData=0x31e46c | out: lpFindFileData=0x31e46c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5eaf6290, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0xa60f1d10, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xa60f1d10, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x381b40 [0100.921] FindNextFileW (in: hFindFile=0x381b40, lpFindFileData=0x31e47c | out: lpFindFileData=0x31e47c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5eaf6290, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0xa60f1d10, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xa60f1d10, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0100.921] FindNextFileW (in: hFindFile=0x381b40, lpFindFileData=0x31e47c | out: lpFindFileData=0x31e47c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5eaf6290, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x5eaf6290, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x5eaf6290, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x1b000, dwReserved0=0x0, dwReserved1=0x0, cFileName="adodb.dll", cAlternateFileName="")) returned 1 [0100.922] FindNextFileW (in: hFindFile=0x381b40, lpFindFileData=0x31e47c | out: lpFindFileData=0x31e47c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa60f1d10, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0xa60f1d10, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xa60f1d10, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0xc4, dwReserved0=0x0, dwReserved1=0x0, cFileName="__AssemblyInfo__.ini", cAlternateFileName="__ASSE~1.INI")) returned 1 [0100.922] FindNextFileW (in: hFindFile=0x381b40, lpFindFileData=0x31e47c | out: lpFindFileData=0x31e47c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa60f1d10, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0xa60f1d10, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xa60f1d10, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0xc4, dwReserved0=0x0, dwReserved1=0x0, cFileName="__AssemblyInfo__.ini", cAlternateFileName="__ASSE~1.INI")) returned 0 [0100.922] FindClose (in: hFindFile=0x381b40 | out: hFindFile=0x381b40) returned 1 [0100.922] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e704) returned 1 [0100.922] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e710) returned 1 [0100.922] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e7bc) returned 1 [0100.922] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC\\Extensibility", nBufferLength=0x105, lpBuffer=0x31e2c4, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC\\Extensibility", lpFilePart=0x0) returned 0x25 [0100.922] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC\\Extensibility\\", nBufferLength=0x105, lpBuffer=0x31e298, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC\\Extensibility\\", lpFilePart=0x0) returned 0x26 [0100.922] FindFirstFileW (in: lpFileName="C:\\Windows\\assembly\\GAC\\Extensibility\\*", lpFindFileData=0x31e4e4 | out: lpFindFileData=0x31e4e4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa6699150, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0xa6699150, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xa6699150, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x381b40 [0100.923] FindNextFileW (in: hFindFile=0x381b40, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa6699150, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0xa6699150, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xa6699150, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0100.923] FindNextFileW (in: hFindFile=0x381b40, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x60b18b90, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0xa6699150, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xa6699150, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="7.0.3300.0__b03f5f7f11d50a3a", cAlternateFileName="703300~1.0__")) returned 1 [0100.923] FindNextFileW (in: hFindFile=0x381b40, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x60b18b90, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0xa6699150, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xa6699150, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="7.0.3300.0__b03f5f7f11d50a3a", cAlternateFileName="703300~1.0__")) returned 0 [0100.923] FindClose (in: hFindFile=0x381b40 | out: hFindFile=0x381b40) returned 1 [0100.923] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e77c) returned 1 [0100.923] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e788) returned 1 [0100.923] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e7bc) returned 1 [0100.923] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC\\Extensibility", nBufferLength=0x105, lpBuffer=0x31e2c4, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC\\Extensibility", lpFilePart=0x0) returned 0x25 [0100.923] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC\\Extensibility\\", nBufferLength=0x105, lpBuffer=0x31e298, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC\\Extensibility\\", lpFilePart=0x0) returned 0x26 [0100.923] FindFirstFileW (in: lpFileName="C:\\Windows\\assembly\\GAC\\Extensibility\\*", lpFindFileData=0x31e4e4 | out: lpFindFileData=0x31e4e4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa6699150, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0xa6699150, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xa6699150, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x381b40 [0100.923] FindNextFileW (in: hFindFile=0x381b40, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa6699150, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0xa6699150, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xa6699150, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0100.923] FindNextFileW (in: hFindFile=0x381b40, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x60b18b90, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0xa6699150, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xa6699150, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="7.0.3300.0__b03f5f7f11d50a3a", cAlternateFileName="703300~1.0__")) returned 1 [0100.923] FindNextFileW (in: hFindFile=0x381b40, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0100.923] FindClose (in: hFindFile=0x381b40 | out: hFindFile=0x381b40) returned 1 [0100.923] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e77c) returned 1 [0100.923] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e788) returned 1 [0100.923] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e744) returned 1 [0100.923] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC\\Extensibility\\7.0.3300.0__b03f5f7f11d50a3a", nBufferLength=0x105, lpBuffer=0x31e24c, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC\\Extensibility\\7.0.3300.0__b03f5f7f11d50a3a", lpFilePart=0x0) returned 0x42 [0100.924] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC\\Extensibility\\7.0.3300.0__b03f5f7f11d50a3a\\", nBufferLength=0x105, lpBuffer=0x31e220, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC\\Extensibility\\7.0.3300.0__b03f5f7f11d50a3a\\", lpFilePart=0x0) returned 0x43 [0100.924] FindFirstFileW (in: lpFileName="C:\\Windows\\assembly\\GAC\\Extensibility\\7.0.3300.0__b03f5f7f11d50a3a\\*", lpFindFileData=0x31e46c | out: lpFindFileData=0x31e46c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x60b18b90, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0xa6699150, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xa6699150, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x381b40 [0100.924] FindNextFileW (in: hFindFile=0x381b40, lpFindFileData=0x31e47c | out: lpFindFileData=0x31e47c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x60b18b90, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0xa6699150, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xa6699150, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0100.924] FindNextFileW (in: hFindFile=0x381b40, lpFindFileData=0x31e47c | out: lpFindFileData=0x31e47c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x60b18b90, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x60b18b90, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x60b18b90, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x1200, dwReserved0=0x0, dwReserved1=0x0, cFileName="extensibility.dll", cAlternateFileName="EXTENS~1.DLL")) returned 1 [0100.924] FindNextFileW (in: hFindFile=0x381b40, lpFindFileData=0x31e47c | out: lpFindFileData=0x31e47c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa6699150, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0xa6699150, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xa6699150, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0xcc, dwReserved0=0x0, dwReserved1=0x0, cFileName="__AssemblyInfo__.ini", cAlternateFileName="__ASSE~1.INI")) returned 1 [0100.924] FindNextFileW (in: hFindFile=0x381b40, lpFindFileData=0x31e47c | out: lpFindFileData=0x31e47c*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0100.924] FindClose (in: hFindFile=0x381b40 | out: hFindFile=0x381b40) returned 1 [0100.924] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e704) returned 1 [0100.924] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e710) returned 1 [0100.924] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e744) returned 1 [0100.924] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC\\Extensibility\\7.0.3300.0__b03f5f7f11d50a3a", nBufferLength=0x105, lpBuffer=0x31e24c, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC\\Extensibility\\7.0.3300.0__b03f5f7f11d50a3a", lpFilePart=0x0) returned 0x42 [0100.924] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC\\Extensibility\\7.0.3300.0__b03f5f7f11d50a3a\\", nBufferLength=0x105, lpBuffer=0x31e220, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC\\Extensibility\\7.0.3300.0__b03f5f7f11d50a3a\\", lpFilePart=0x0) returned 0x43 [0100.924] FindFirstFileW (in: lpFileName="C:\\Windows\\assembly\\GAC\\Extensibility\\7.0.3300.0__b03f5f7f11d50a3a\\*", lpFindFileData=0x31e46c | out: lpFindFileData=0x31e46c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x60b18b90, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0xa6699150, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xa6699150, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x381b40 [0100.924] FindNextFileW (in: hFindFile=0x381b40, lpFindFileData=0x31e47c | out: lpFindFileData=0x31e47c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x60b18b90, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0xa6699150, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xa6699150, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0100.924] FindNextFileW (in: hFindFile=0x381b40, lpFindFileData=0x31e47c | out: lpFindFileData=0x31e47c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x60b18b90, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x60b18b90, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x60b18b90, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x1200, dwReserved0=0x0, dwReserved1=0x0, cFileName="extensibility.dll", cAlternateFileName="EXTENS~1.DLL")) returned 1 [0100.924] FindNextFileW (in: hFindFile=0x381b40, lpFindFileData=0x31e47c | out: lpFindFileData=0x31e47c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa6699150, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0xa6699150, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xa6699150, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0xcc, dwReserved0=0x0, dwReserved1=0x0, cFileName="__AssemblyInfo__.ini", cAlternateFileName="__ASSE~1.INI")) returned 1 [0100.924] FindNextFileW (in: hFindFile=0x381b40, lpFindFileData=0x31e47c | out: lpFindFileData=0x31e47c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa6699150, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0xa6699150, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xa6699150, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0xcc, dwReserved0=0x0, dwReserved1=0x0, cFileName="__AssemblyInfo__.ini", cAlternateFileName="__ASSE~1.INI")) returned 0 [0100.924] FindClose (in: hFindFile=0x381b40 | out: hFindFile=0x381b40) returned 1 [0100.925] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e704) returned 1 [0100.925] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e710) returned 1 [0100.925] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e7bc) returned 1 [0100.925] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC\\Microsoft.Ink", nBufferLength=0x105, lpBuffer=0x31e2c4, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC\\Microsoft.Ink", lpFilePart=0x0) returned 0x25 [0100.925] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC\\Microsoft.Ink\\", nBufferLength=0x105, lpBuffer=0x31e298, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC\\Microsoft.Ink\\", lpFilePart=0x0) returned 0x26 [0100.925] FindFirstFileW (in: lpFileName="C:\\Windows\\assembly\\GAC\\Microsoft.Ink\\*", lpFindFileData=0x31e4e4 | out: lpFindFileData=0x31e4e4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x409ffc9f, ftCreationTime.dwHighDateTime=0x1ca043f, ftLastAccessTime.dwLowDateTime=0x40a98220, ftLastAccessTime.dwHighDateTime=0x1ca043f, ftLastWriteTime.dwLowDateTime=0x40a98220, ftLastWriteTime.dwHighDateTime=0x1ca043f, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x381b40 [0100.925] FindNextFileW (in: hFindFile=0x381b40, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x409ffc9f, ftCreationTime.dwHighDateTime=0x1ca043f, ftLastAccessTime.dwLowDateTime=0x40a98220, ftLastAccessTime.dwHighDateTime=0x1ca043f, ftLastWriteTime.dwLowDateTime=0x40a98220, ftLastWriteTime.dwHighDateTime=0x1ca043f, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0100.925] FindNextFileW (in: hFindFile=0x381b40, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x409415bd, ftCreationTime.dwHighDateTime=0x1ca043f, ftLastAccessTime.dwLowDateTime=0x409415bd, ftLastAccessTime.dwHighDateTime=0x1ca043f, ftLastWriteTime.dwLowDateTime=0x409415bd, ftLastWriteTime.dwHighDateTime=0x1ca043f, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="1.0.2201.0__31bf3856ad364e35", cAlternateFileName="102201~1.0__")) returned 1 [0100.925] FindNextFileW (in: hFindFile=0x381b40, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x40a720bf, ftCreationTime.dwHighDateTime=0x1ca043f, ftLastAccessTime.dwLowDateTime=0x40a98220, ftLastAccessTime.dwHighDateTime=0x1ca043f, ftLastWriteTime.dwLowDateTime=0x40a98220, ftLastWriteTime.dwHighDateTime=0x1ca043f, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="1.7.2600.2180__31bf3856ad364e35", cAlternateFileName="172600~1.218")) returned 1 [0100.925] FindNextFileW (in: hFindFile=0x381b40, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x40a720bf, ftCreationTime.dwHighDateTime=0x1ca043f, ftLastAccessTime.dwLowDateTime=0x40a98220, ftLastAccessTime.dwHighDateTime=0x1ca043f, ftLastWriteTime.dwLowDateTime=0x40a98220, ftLastWriteTime.dwHighDateTime=0x1ca043f, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="1.7.2600.2180__31bf3856ad364e35", cAlternateFileName="172600~1.218")) returned 0 [0100.925] FindClose (in: hFindFile=0x381b40 | out: hFindFile=0x381b40) returned 1 [0100.925] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e77c) returned 1 [0100.925] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e788) returned 1 [0100.925] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e7bc) returned 1 [0100.925] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC\\Microsoft.Ink", nBufferLength=0x105, lpBuffer=0x31e2c4, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC\\Microsoft.Ink", lpFilePart=0x0) returned 0x25 [0100.925] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC\\Microsoft.Ink\\", nBufferLength=0x105, lpBuffer=0x31e298, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC\\Microsoft.Ink\\", lpFilePart=0x0) returned 0x26 [0100.925] FindFirstFileW (in: lpFileName="C:\\Windows\\assembly\\GAC\\Microsoft.Ink\\*", lpFindFileData=0x31e4e4 | out: lpFindFileData=0x31e4e4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x409ffc9f, ftCreationTime.dwHighDateTime=0x1ca043f, ftLastAccessTime.dwLowDateTime=0x40a98220, ftLastAccessTime.dwHighDateTime=0x1ca043f, ftLastWriteTime.dwLowDateTime=0x40a98220, ftLastWriteTime.dwHighDateTime=0x1ca043f, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x381b40 [0100.925] FindNextFileW (in: hFindFile=0x381b40, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x409ffc9f, ftCreationTime.dwHighDateTime=0x1ca043f, ftLastAccessTime.dwLowDateTime=0x40a98220, ftLastAccessTime.dwHighDateTime=0x1ca043f, ftLastWriteTime.dwLowDateTime=0x40a98220, ftLastWriteTime.dwHighDateTime=0x1ca043f, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0100.926] FindNextFileW (in: hFindFile=0x381b40, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x409415bd, ftCreationTime.dwHighDateTime=0x1ca043f, ftLastAccessTime.dwLowDateTime=0x409415bd, ftLastAccessTime.dwHighDateTime=0x1ca043f, ftLastWriteTime.dwLowDateTime=0x409415bd, ftLastWriteTime.dwHighDateTime=0x1ca043f, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="1.0.2201.0__31bf3856ad364e35", cAlternateFileName="102201~1.0__")) returned 1 [0100.926] FindNextFileW (in: hFindFile=0x381b40, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x40a720bf, ftCreationTime.dwHighDateTime=0x1ca043f, ftLastAccessTime.dwLowDateTime=0x40a98220, ftLastAccessTime.dwHighDateTime=0x1ca043f, ftLastWriteTime.dwLowDateTime=0x40a98220, ftLastWriteTime.dwHighDateTime=0x1ca043f, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="1.7.2600.2180__31bf3856ad364e35", cAlternateFileName="172600~1.218")) returned 1 [0100.926] FindNextFileW (in: hFindFile=0x381b40, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0100.926] FindClose (in: hFindFile=0x381b40 | out: hFindFile=0x381b40) returned 1 [0100.926] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e77c) returned 1 [0100.926] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e788) returned 1 [0100.926] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e744) returned 1 [0100.926] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC\\Microsoft.Ink\\1.0.2201.0__31bf3856ad364e35", nBufferLength=0x105, lpBuffer=0x31e24c, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC\\Microsoft.Ink\\1.0.2201.0__31bf3856ad364e35", lpFilePart=0x0) returned 0x42 [0100.926] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC\\Microsoft.Ink\\1.0.2201.0__31bf3856ad364e35\\", nBufferLength=0x105, lpBuffer=0x31e220, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC\\Microsoft.Ink\\1.0.2201.0__31bf3856ad364e35\\", lpFilePart=0x0) returned 0x43 [0100.926] FindFirstFileW (in: lpFileName="C:\\Windows\\assembly\\GAC\\Microsoft.Ink\\1.0.2201.0__31bf3856ad364e35\\*", lpFindFileData=0x31e46c | out: lpFindFileData=0x31e46c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x409415bd, ftCreationTime.dwHighDateTime=0x1ca043f, ftLastAccessTime.dwLowDateTime=0x409415bd, ftLastAccessTime.dwHighDateTime=0x1ca043f, ftLastWriteTime.dwLowDateTime=0x409415bd, ftLastWriteTime.dwHighDateTime=0x1ca043f, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x381b40 [0100.926] FindNextFileW (in: hFindFile=0x381b40, lpFindFileData=0x31e47c | out: lpFindFileData=0x31e47c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x409415bd, ftCreationTime.dwHighDateTime=0x1ca043f, ftLastAccessTime.dwLowDateTime=0x409415bd, ftLastAccessTime.dwHighDateTime=0x1ca043f, ftLastWriteTime.dwLowDateTime=0x409415bd, ftLastWriteTime.dwHighDateTime=0x1ca043f, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0100.926] FindNextFileW (in: hFindFile=0x381b40, lpFindFileData=0x31e47c | out: lpFindFileData=0x31e47c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x409415bd, ftCreationTime.dwHighDateTime=0x1ca043f, ftLastAccessTime.dwLowDateTime=0x409415bd, ftLastAccessTime.dwHighDateTime=0x1ca043f, ftLastWriteTime.dwLowDateTime=0x409415bd, ftLastWriteTime.dwHighDateTime=0x1ca043f, nFileSizeHigh=0x0, nFileSizeLow=0x57000, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.Ink.dll", cAlternateFileName="MICROS~1.DLL")) returned 1 [0100.926] FindNextFileW (in: hFindFile=0x381b40, lpFindFileData=0x31e47c | out: lpFindFileData=0x31e47c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x409415bd, ftCreationTime.dwHighDateTime=0x1ca043f, ftLastAccessTime.dwLowDateTime=0x409415bd, ftLastAccessTime.dwHighDateTime=0x1ca043f, ftLastWriteTime.dwLowDateTime=0x409415bd, ftLastWriteTime.dwHighDateTime=0x1ca043f, nFileSizeHigh=0x0, nFileSizeLow=0x145, dwReserved0=0x0, dwReserved1=0x0, cFileName="__AssemblyInfo__.ini", cAlternateFileName="__ASSE~1.INI")) returned 1 [0100.926] FindNextFileW (in: hFindFile=0x381b40, lpFindFileData=0x31e47c | out: lpFindFileData=0x31e47c*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0100.926] FindClose (in: hFindFile=0x381b40 | out: hFindFile=0x381b40) returned 1 [0100.926] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e704) returned 1 [0100.926] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e710) returned 1 [0100.926] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e744) returned 1 [0100.926] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC\\Microsoft.Ink\\1.0.2201.0__31bf3856ad364e35", nBufferLength=0x105, lpBuffer=0x31e24c, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC\\Microsoft.Ink\\1.0.2201.0__31bf3856ad364e35", lpFilePart=0x0) returned 0x42 [0100.926] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC\\Microsoft.Ink\\1.0.2201.0__31bf3856ad364e35\\", nBufferLength=0x105, lpBuffer=0x31e220, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC\\Microsoft.Ink\\1.0.2201.0__31bf3856ad364e35\\", lpFilePart=0x0) returned 0x43 [0100.927] FindFirstFileW (in: lpFileName="C:\\Windows\\assembly\\GAC\\Microsoft.Ink\\1.0.2201.0__31bf3856ad364e35\\*", lpFindFileData=0x31e46c | out: lpFindFileData=0x31e46c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x409415bd, ftCreationTime.dwHighDateTime=0x1ca043f, ftLastAccessTime.dwLowDateTime=0x409415bd, ftLastAccessTime.dwHighDateTime=0x1ca043f, ftLastWriteTime.dwLowDateTime=0x409415bd, ftLastWriteTime.dwHighDateTime=0x1ca043f, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x381b40 [0100.927] FindNextFileW (in: hFindFile=0x381b40, lpFindFileData=0x31e47c | out: lpFindFileData=0x31e47c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x409415bd, ftCreationTime.dwHighDateTime=0x1ca043f, ftLastAccessTime.dwLowDateTime=0x409415bd, ftLastAccessTime.dwHighDateTime=0x1ca043f, ftLastWriteTime.dwLowDateTime=0x409415bd, ftLastWriteTime.dwHighDateTime=0x1ca043f, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0100.927] FindNextFileW (in: hFindFile=0x381b40, lpFindFileData=0x31e47c | out: lpFindFileData=0x31e47c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x409415bd, ftCreationTime.dwHighDateTime=0x1ca043f, ftLastAccessTime.dwLowDateTime=0x409415bd, ftLastAccessTime.dwHighDateTime=0x1ca043f, ftLastWriteTime.dwLowDateTime=0x409415bd, ftLastWriteTime.dwHighDateTime=0x1ca043f, nFileSizeHigh=0x0, nFileSizeLow=0x57000, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.Ink.dll", cAlternateFileName="MICROS~1.DLL")) returned 1 [0100.927] FindNextFileW (in: hFindFile=0x381b40, lpFindFileData=0x31e47c | out: lpFindFileData=0x31e47c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x409415bd, ftCreationTime.dwHighDateTime=0x1ca043f, ftLastAccessTime.dwLowDateTime=0x409415bd, ftLastAccessTime.dwHighDateTime=0x1ca043f, ftLastWriteTime.dwLowDateTime=0x409415bd, ftLastWriteTime.dwHighDateTime=0x1ca043f, nFileSizeHigh=0x0, nFileSizeLow=0x145, dwReserved0=0x0, dwReserved1=0x0, cFileName="__AssemblyInfo__.ini", cAlternateFileName="__ASSE~1.INI")) returned 1 [0100.927] FindNextFileW (in: hFindFile=0x381b40, lpFindFileData=0x31e47c | out: lpFindFileData=0x31e47c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x409415bd, ftCreationTime.dwHighDateTime=0x1ca043f, ftLastAccessTime.dwLowDateTime=0x409415bd, ftLastAccessTime.dwHighDateTime=0x1ca043f, ftLastWriteTime.dwLowDateTime=0x409415bd, ftLastWriteTime.dwHighDateTime=0x1ca043f, nFileSizeHigh=0x0, nFileSizeLow=0x145, dwReserved0=0x0, dwReserved1=0x0, cFileName="__AssemblyInfo__.ini", cAlternateFileName="__ASSE~1.INI")) returned 0 [0100.927] FindClose (in: hFindFile=0x381b40 | out: hFindFile=0x381b40) returned 1 [0100.927] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e704) returned 1 [0100.927] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e710) returned 1 [0100.927] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e744) returned 1 [0100.927] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC\\Microsoft.Ink\\1.7.2600.2180__31bf3856ad364e35", nBufferLength=0x105, lpBuffer=0x31e24c, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC\\Microsoft.Ink\\1.7.2600.2180__31bf3856ad364e35", lpFilePart=0x0) returned 0x45 [0100.927] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC\\Microsoft.Ink\\1.7.2600.2180__31bf3856ad364e35\\", nBufferLength=0x105, lpBuffer=0x31e220, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC\\Microsoft.Ink\\1.7.2600.2180__31bf3856ad364e35\\", lpFilePart=0x0) returned 0x46 [0100.927] FindFirstFileW (in: lpFileName="C:\\Windows\\assembly\\GAC\\Microsoft.Ink\\1.7.2600.2180__31bf3856ad364e35\\*", lpFindFileData=0x31e46c | out: lpFindFileData=0x31e46c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x40a720bf, ftCreationTime.dwHighDateTime=0x1ca043f, ftLastAccessTime.dwLowDateTime=0x40a98220, ftLastAccessTime.dwHighDateTime=0x1ca043f, ftLastWriteTime.dwLowDateTime=0x40a98220, ftLastWriteTime.dwHighDateTime=0x1ca043f, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x381b40 [0100.927] FindNextFileW (in: hFindFile=0x381b40, lpFindFileData=0x31e47c | out: lpFindFileData=0x31e47c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x40a720bf, ftCreationTime.dwHighDateTime=0x1ca043f, ftLastAccessTime.dwLowDateTime=0x40a98220, ftLastAccessTime.dwHighDateTime=0x1ca043f, ftLastWriteTime.dwLowDateTime=0x40a98220, ftLastWriteTime.dwHighDateTime=0x1ca043f, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0100.927] FindNextFileW (in: hFindFile=0x381b40, lpFindFileData=0x31e47c | out: lpFindFileData=0x31e47c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x40a720bf, ftCreationTime.dwHighDateTime=0x1ca043f, ftLastAccessTime.dwLowDateTime=0x40a720bf, ftLastAccessTime.dwHighDateTime=0x1ca043f, ftLastWriteTime.dwLowDateTime=0x40a98220, ftLastWriteTime.dwHighDateTime=0x1ca043f, nFileSizeHigh=0x0, nFileSizeLow=0x7e000, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.Ink.dll", cAlternateFileName="MICROS~1.DLL")) returned 1 [0100.927] FindNextFileW (in: hFindFile=0x381b40, lpFindFileData=0x31e47c | out: lpFindFileData=0x31e47c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x40a98220, ftCreationTime.dwHighDateTime=0x1ca043f, ftLastAccessTime.dwLowDateTime=0x40a98220, ftLastAccessTime.dwHighDateTime=0x1ca043f, ftLastWriteTime.dwLowDateTime=0x40a98220, ftLastWriteTime.dwHighDateTime=0x1ca043f, nFileSizeHigh=0x0, nFileSizeLow=0x148, dwReserved0=0x0, dwReserved1=0x0, cFileName="__AssemblyInfo__.ini", cAlternateFileName="__ASSE~1.INI")) returned 1 [0100.927] FindNextFileW (in: hFindFile=0x381b40, lpFindFileData=0x31e47c | out: lpFindFileData=0x31e47c*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0100.927] FindClose (in: hFindFile=0x381b40 | out: hFindFile=0x381b40) returned 1 [0100.927] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e704) returned 1 [0100.927] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e710) returned 1 [0100.928] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e744) returned 1 [0100.928] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC\\Microsoft.Ink\\1.7.2600.2180__31bf3856ad364e35", nBufferLength=0x105, lpBuffer=0x31e24c, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC\\Microsoft.Ink\\1.7.2600.2180__31bf3856ad364e35", lpFilePart=0x0) returned 0x45 [0100.928] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC\\Microsoft.Ink\\1.7.2600.2180__31bf3856ad364e35\\", nBufferLength=0x105, lpBuffer=0x31e220, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC\\Microsoft.Ink\\1.7.2600.2180__31bf3856ad364e35\\", lpFilePart=0x0) returned 0x46 [0100.928] FindFirstFileW (in: lpFileName="C:\\Windows\\assembly\\GAC\\Microsoft.Ink\\1.7.2600.2180__31bf3856ad364e35\\*", lpFindFileData=0x31e46c | out: lpFindFileData=0x31e46c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x40a720bf, ftCreationTime.dwHighDateTime=0x1ca043f, ftLastAccessTime.dwLowDateTime=0x40a98220, ftLastAccessTime.dwHighDateTime=0x1ca043f, ftLastWriteTime.dwLowDateTime=0x40a98220, ftLastWriteTime.dwHighDateTime=0x1ca043f, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x381b40 [0100.928] FindNextFileW (in: hFindFile=0x381b40, lpFindFileData=0x31e47c | out: lpFindFileData=0x31e47c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x40a720bf, ftCreationTime.dwHighDateTime=0x1ca043f, ftLastAccessTime.dwLowDateTime=0x40a98220, ftLastAccessTime.dwHighDateTime=0x1ca043f, ftLastWriteTime.dwLowDateTime=0x40a98220, ftLastWriteTime.dwHighDateTime=0x1ca043f, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0100.928] FindNextFileW (in: hFindFile=0x381b40, lpFindFileData=0x31e47c | out: lpFindFileData=0x31e47c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x40a720bf, ftCreationTime.dwHighDateTime=0x1ca043f, ftLastAccessTime.dwLowDateTime=0x40a720bf, ftLastAccessTime.dwHighDateTime=0x1ca043f, ftLastWriteTime.dwLowDateTime=0x40a98220, ftLastWriteTime.dwHighDateTime=0x1ca043f, nFileSizeHigh=0x0, nFileSizeLow=0x7e000, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.Ink.dll", cAlternateFileName="MICROS~1.DLL")) returned 1 [0100.928] FindNextFileW (in: hFindFile=0x381b40, lpFindFileData=0x31e47c | out: lpFindFileData=0x31e47c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x40a98220, ftCreationTime.dwHighDateTime=0x1ca043f, ftLastAccessTime.dwLowDateTime=0x40a98220, ftLastAccessTime.dwHighDateTime=0x1ca043f, ftLastWriteTime.dwLowDateTime=0x40a98220, ftLastWriteTime.dwHighDateTime=0x1ca043f, nFileSizeHigh=0x0, nFileSizeLow=0x148, dwReserved0=0x0, dwReserved1=0x0, cFileName="__AssemblyInfo__.ini", cAlternateFileName="__ASSE~1.INI")) returned 1 [0100.928] FindNextFileW (in: hFindFile=0x381b40, lpFindFileData=0x31e47c | out: lpFindFileData=0x31e47c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x40a98220, ftCreationTime.dwHighDateTime=0x1ca043f, ftLastAccessTime.dwLowDateTime=0x40a98220, ftLastAccessTime.dwHighDateTime=0x1ca043f, ftLastWriteTime.dwLowDateTime=0x40a98220, ftLastWriteTime.dwHighDateTime=0x1ca043f, nFileSizeHigh=0x0, nFileSizeLow=0x148, dwReserved0=0x0, dwReserved1=0x0, cFileName="__AssemblyInfo__.ini", cAlternateFileName="__ASSE~1.INI")) returned 0 [0100.928] FindClose (in: hFindFile=0x381b40 | out: hFindFile=0x381b40) returned 1 [0100.928] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e704) returned 1 [0100.928] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e710) returned 1 [0100.928] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e7bc) returned 1 [0100.928] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC\\Microsoft.mshtml", nBufferLength=0x105, lpBuffer=0x31e2c4, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC\\Microsoft.mshtml", lpFilePart=0x0) returned 0x28 [0100.928] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC\\Microsoft.mshtml\\", nBufferLength=0x105, lpBuffer=0x31e298, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC\\Microsoft.mshtml\\", lpFilePart=0x0) returned 0x29 [0100.928] FindFirstFileW (in: lpFileName="C:\\Windows\\assembly\\GAC\\Microsoft.mshtml\\*", lpFindFileData=0x31e4e4 | out: lpFindFileData=0x31e4e4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa60cbbb0, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0xa60cbbb0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xa60cbbb0, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x381b40 [0100.928] FindNextFileW (in: hFindFile=0x381b40, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa60cbbb0, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0xa60cbbb0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xa60cbbb0, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0100.928] FindNextFileW (in: hFindFile=0x381b40, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x69b68150, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0xa60cbbb0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xa60cbbb0, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="7.0.3300.0__b03f5f7f11d50a3a", cAlternateFileName="703300~1.0__")) returned 1 [0100.928] FindNextFileW (in: hFindFile=0x381b40, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x69b68150, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0xa60cbbb0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xa60cbbb0, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="7.0.3300.0__b03f5f7f11d50a3a", cAlternateFileName="703300~1.0__")) returned 0 [0100.929] FindClose (in: hFindFile=0x381b40 | out: hFindFile=0x381b40) returned 1 [0100.929] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e77c) returned 1 [0100.929] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e788) returned 1 [0100.929] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e7bc) returned 1 [0100.929] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC\\Microsoft.mshtml", nBufferLength=0x105, lpBuffer=0x31e2c4, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC\\Microsoft.mshtml", lpFilePart=0x0) returned 0x28 [0100.929] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC\\Microsoft.mshtml\\", nBufferLength=0x105, lpBuffer=0x31e298, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC\\Microsoft.mshtml\\", lpFilePart=0x0) returned 0x29 [0100.929] FindFirstFileW (in: lpFileName="C:\\Windows\\assembly\\GAC\\Microsoft.mshtml\\*", lpFindFileData=0x31e4e4 | out: lpFindFileData=0x31e4e4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa60cbbb0, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0xa60cbbb0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xa60cbbb0, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x381b40 [0100.929] FindNextFileW (in: hFindFile=0x381b40, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa60cbbb0, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0xa60cbbb0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xa60cbbb0, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0100.929] FindNextFileW (in: hFindFile=0x381b40, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x69b68150, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0xa60cbbb0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xa60cbbb0, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="7.0.3300.0__b03f5f7f11d50a3a", cAlternateFileName="703300~1.0__")) returned 1 [0100.929] FindNextFileW (in: hFindFile=0x381b40, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0100.929] FindClose (in: hFindFile=0x381b40 | out: hFindFile=0x381b40) returned 1 [0100.929] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e77c) returned 1 [0100.929] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e788) returned 1 [0100.929] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e744) returned 1 [0100.929] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC\\Microsoft.mshtml\\7.0.3300.0__b03f5f7f11d50a3a", nBufferLength=0x105, lpBuffer=0x31e24c, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC\\Microsoft.mshtml\\7.0.3300.0__b03f5f7f11d50a3a", lpFilePart=0x0) returned 0x45 [0100.929] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC\\Microsoft.mshtml\\7.0.3300.0__b03f5f7f11d50a3a\\", nBufferLength=0x105, lpBuffer=0x31e220, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC\\Microsoft.mshtml\\7.0.3300.0__b03f5f7f11d50a3a\\", lpFilePart=0x0) returned 0x46 [0100.929] FindFirstFileW (in: lpFileName="C:\\Windows\\assembly\\GAC\\Microsoft.mshtml\\7.0.3300.0__b03f5f7f11d50a3a\\*", lpFindFileData=0x31e46c | out: lpFindFileData=0x31e46c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x69b68150, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0xa60cbbb0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xa60cbbb0, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x381b40 [0100.930] FindNextFileW (in: hFindFile=0x381b40, lpFindFileData=0x31e47c | out: lpFindFileData=0x31e47c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x69b68150, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0xa60cbbb0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xa60cbbb0, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0100.930] FindNextFileW (in: hFindFile=0x381b40, lpFindFileData=0x31e47c | out: lpFindFileData=0x31e47c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x69b68150, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x69b68150, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x69c006d0, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x7a3000, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.mshtml.dll", cAlternateFileName="MICROS~1.DLL")) returned 1 [0100.930] FindNextFileW (in: hFindFile=0x381b40, lpFindFileData=0x31e47c | out: lpFindFileData=0x31e47c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa60cbbb0, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0xa60cbbb0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xa60cbbb0, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0xcf, dwReserved0=0x0, dwReserved1=0x0, cFileName="__AssemblyInfo__.ini", cAlternateFileName="__ASSE~1.INI")) returned 1 [0100.930] FindNextFileW (in: hFindFile=0x381b40, lpFindFileData=0x31e47c | out: lpFindFileData=0x31e47c*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0100.930] FindClose (in: hFindFile=0x381b40 | out: hFindFile=0x381b40) returned 1 [0100.930] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e704) returned 1 [0100.930] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e710) returned 1 [0100.930] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e744) returned 1 [0100.930] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC\\Microsoft.mshtml\\7.0.3300.0__b03f5f7f11d50a3a", nBufferLength=0x105, lpBuffer=0x31e24c, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC\\Microsoft.mshtml\\7.0.3300.0__b03f5f7f11d50a3a", lpFilePart=0x0) returned 0x45 [0100.930] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC\\Microsoft.mshtml\\7.0.3300.0__b03f5f7f11d50a3a\\", nBufferLength=0x105, lpBuffer=0x31e220, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC\\Microsoft.mshtml\\7.0.3300.0__b03f5f7f11d50a3a\\", lpFilePart=0x0) returned 0x46 [0100.930] FindFirstFileW (in: lpFileName="C:\\Windows\\assembly\\GAC\\Microsoft.mshtml\\7.0.3300.0__b03f5f7f11d50a3a\\*", lpFindFileData=0x31e46c | out: lpFindFileData=0x31e46c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x69b68150, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0xa60cbbb0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xa60cbbb0, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x381b40 [0100.931] FindNextFileW (in: hFindFile=0x381b40, lpFindFileData=0x31e47c | out: lpFindFileData=0x31e47c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x69b68150, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0xa60cbbb0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xa60cbbb0, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0100.931] FindNextFileW (in: hFindFile=0x381b40, lpFindFileData=0x31e47c | out: lpFindFileData=0x31e47c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x69b68150, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x69b68150, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x69c006d0, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x7a3000, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.mshtml.dll", cAlternateFileName="MICROS~1.DLL")) returned 1 [0100.931] FindNextFileW (in: hFindFile=0x381b40, lpFindFileData=0x31e47c | out: lpFindFileData=0x31e47c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa60cbbb0, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0xa60cbbb0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xa60cbbb0, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0xcf, dwReserved0=0x0, dwReserved1=0x0, cFileName="__AssemblyInfo__.ini", cAlternateFileName="__ASSE~1.INI")) returned 1 [0100.931] FindNextFileW (in: hFindFile=0x381b40, lpFindFileData=0x31e47c | out: lpFindFileData=0x31e47c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa60cbbb0, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0xa60cbbb0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xa60cbbb0, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0xcf, dwReserved0=0x0, dwReserved1=0x0, cFileName="__AssemblyInfo__.ini", cAlternateFileName="__ASSE~1.INI")) returned 0 [0100.931] FindClose (in: hFindFile=0x381b40 | out: hFindFile=0x381b40) returned 1 [0100.931] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e704) returned 1 [0100.931] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e710) returned 1 [0100.931] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e7bc) returned 1 [0100.931] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC\\Microsoft.StdFormat", nBufferLength=0x105, lpBuffer=0x31e2c4, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC\\Microsoft.StdFormat", lpFilePart=0x0) returned 0x2b [0100.931] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC\\Microsoft.StdFormat\\", nBufferLength=0x105, lpBuffer=0x31e298, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC\\Microsoft.StdFormat\\", lpFilePart=0x0) returned 0x2c [0100.931] FindFirstFileW (in: lpFileName="C:\\Windows\\assembly\\GAC\\Microsoft.StdFormat\\*", lpFindFileData=0x31e4e4 | out: lpFindFileData=0x31e4e4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa5fc1210, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0xa5fc1210, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xa5fc1210, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x381b40 [0100.932] FindNextFileW (in: hFindFile=0x381b40, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa5fc1210, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0xa5fc1210, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xa5fc1210, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0100.932] FindNextFileW (in: hFindFile=0x381b40, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x69c006d0, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0xa5f9b0b0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xa5f9b0b0, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="7.0.3300.0__b03f5f7f11d50a3a", cAlternateFileName="703300~1.0__")) returned 1 [0100.932] FindNextFileW (in: hFindFile=0x381b40, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x69c006d0, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0xa5f9b0b0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xa5f9b0b0, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="7.0.3300.0__b03f5f7f11d50a3a", cAlternateFileName="703300~1.0__")) returned 0 [0100.932] FindClose (in: hFindFile=0x381b40 | out: hFindFile=0x381b40) returned 1 [0100.932] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e77c) returned 1 [0100.932] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e788) returned 1 [0100.932] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e7bc) returned 1 [0100.932] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC\\Microsoft.StdFormat", nBufferLength=0x105, lpBuffer=0x31e2c4, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC\\Microsoft.StdFormat", lpFilePart=0x0) returned 0x2b [0100.932] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC\\Microsoft.StdFormat\\", nBufferLength=0x105, lpBuffer=0x31e298, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC\\Microsoft.StdFormat\\", lpFilePart=0x0) returned 0x2c [0100.932] FindFirstFileW (in: lpFileName="C:\\Windows\\assembly\\GAC\\Microsoft.StdFormat\\*", lpFindFileData=0x31e4e4 | out: lpFindFileData=0x31e4e4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa5fc1210, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0xa5fc1210, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xa5fc1210, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x381b40 [0100.932] FindNextFileW (in: hFindFile=0x381b40, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa5fc1210, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0xa5fc1210, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xa5fc1210, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0100.932] FindNextFileW (in: hFindFile=0x381b40, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x69c006d0, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0xa5f9b0b0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xa5f9b0b0, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="7.0.3300.0__b03f5f7f11d50a3a", cAlternateFileName="703300~1.0__")) returned 1 [0100.932] FindNextFileW (in: hFindFile=0x381b40, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0100.932] FindClose (in: hFindFile=0x381b40 | out: hFindFile=0x381b40) returned 1 [0100.933] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e77c) returned 1 [0100.933] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e788) returned 1 [0100.933] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e744) returned 1 [0100.933] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC\\Microsoft.StdFormat\\7.0.3300.0__b03f5f7f11d50a3a", nBufferLength=0x105, lpBuffer=0x31e24c, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC\\Microsoft.StdFormat\\7.0.3300.0__b03f5f7f11d50a3a", lpFilePart=0x0) returned 0x48 [0100.933] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC\\Microsoft.StdFormat\\7.0.3300.0__b03f5f7f11d50a3a\\", nBufferLength=0x105, lpBuffer=0x31e220, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC\\Microsoft.StdFormat\\7.0.3300.0__b03f5f7f11d50a3a\\", lpFilePart=0x0) returned 0x49 [0100.933] FindFirstFileW (in: lpFileName="C:\\Windows\\assembly\\GAC\\Microsoft.StdFormat\\7.0.3300.0__b03f5f7f11d50a3a\\*", lpFindFileData=0x31e46c | out: lpFindFileData=0x31e46c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x69c006d0, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0xa5f9b0b0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xa5f9b0b0, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x381b40 [0100.933] FindNextFileW (in: hFindFile=0x381b40, lpFindFileData=0x31e47c | out: lpFindFileData=0x31e47c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x69c006d0, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0xa5f9b0b0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xa5f9b0b0, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0100.933] FindNextFileW (in: hFindFile=0x381b40, lpFindFileData=0x31e47c | out: lpFindFileData=0x31e47c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x69c006d0, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x69c006d0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x69c006d0, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x3400, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.stdformat.dll", cAlternateFileName="MICROS~1.DLL")) returned 1 [0100.933] FindNextFileW (in: hFindFile=0x381b40, lpFindFileData=0x31e47c | out: lpFindFileData=0x31e47c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa5f9b0b0, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0xa5f9b0b0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xa5fc1210, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0xd2, dwReserved0=0x0, dwReserved1=0x0, cFileName="__AssemblyInfo__.ini", cAlternateFileName="__ASSE~1.INI")) returned 1 [0100.933] FindNextFileW (in: hFindFile=0x381b40, lpFindFileData=0x31e47c | out: lpFindFileData=0x31e47c*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0100.933] FindClose (in: hFindFile=0x381b40 | out: hFindFile=0x381b40) returned 1 [0100.933] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e704) returned 1 [0100.933] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e710) returned 1 [0100.933] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e744) returned 1 [0100.933] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC\\Microsoft.StdFormat\\7.0.3300.0__b03f5f7f11d50a3a", nBufferLength=0x105, lpBuffer=0x31e24c, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC\\Microsoft.StdFormat\\7.0.3300.0__b03f5f7f11d50a3a", lpFilePart=0x0) returned 0x48 [0100.933] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC\\Microsoft.StdFormat\\7.0.3300.0__b03f5f7f11d50a3a\\", nBufferLength=0x105, lpBuffer=0x31e220, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC\\Microsoft.StdFormat\\7.0.3300.0__b03f5f7f11d50a3a\\", lpFilePart=0x0) returned 0x49 [0100.933] FindFirstFileW (in: lpFileName="C:\\Windows\\assembly\\GAC\\Microsoft.StdFormat\\7.0.3300.0__b03f5f7f11d50a3a\\*", lpFindFileData=0x31e46c | out: lpFindFileData=0x31e46c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x69c006d0, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0xa5f9b0b0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xa5f9b0b0, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x381b40 [0100.933] FindNextFileW (in: hFindFile=0x381b40, lpFindFileData=0x31e47c | out: lpFindFileData=0x31e47c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x69c006d0, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0xa5f9b0b0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xa5f9b0b0, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0100.934] FindNextFileW (in: hFindFile=0x381b40, lpFindFileData=0x31e47c | out: lpFindFileData=0x31e47c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x69c006d0, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x69c006d0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x69c006d0, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x3400, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.stdformat.dll", cAlternateFileName="MICROS~1.DLL")) returned 1 [0100.934] FindNextFileW (in: hFindFile=0x381b40, lpFindFileData=0x31e47c | out: lpFindFileData=0x31e47c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa5f9b0b0, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0xa5f9b0b0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xa5fc1210, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0xd2, dwReserved0=0x0, dwReserved1=0x0, cFileName="__AssemblyInfo__.ini", cAlternateFileName="__ASSE~1.INI")) returned 1 [0100.934] FindNextFileW (in: hFindFile=0x381b40, lpFindFileData=0x31e47c | out: lpFindFileData=0x31e47c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa5f9b0b0, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0xa5f9b0b0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xa5fc1210, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0xd2, dwReserved0=0x0, dwReserved1=0x0, cFileName="__AssemblyInfo__.ini", cAlternateFileName="__ASSE~1.INI")) returned 0 [0100.934] FindClose (in: hFindFile=0x381b40 | out: hFindFile=0x381b40) returned 1 [0100.934] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e704) returned 1 [0100.934] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e710) returned 1 [0100.934] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e7bc) returned 1 [0100.934] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC\\MSDATASRC", nBufferLength=0x105, lpBuffer=0x31e2c4, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC\\MSDATASRC", lpFilePart=0x0) returned 0x21 [0100.934] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC\\MSDATASRC\\", nBufferLength=0x105, lpBuffer=0x31e298, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC\\MSDATASRC\\", lpFilePart=0x0) returned 0x22 [0100.934] FindFirstFileW (in: lpFileName="C:\\Windows\\assembly\\GAC\\MSDATASRC\\*", lpFindFileData=0x31e4e4 | out: lpFindFileData=0x31e4e4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa60cbbb0, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0xa60cbbb0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xa60cbbb0, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x381b40 [0100.934] FindNextFileW (in: hFindFile=0x381b40, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa60cbbb0, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0xa60cbbb0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xa60cbbb0, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0100.934] FindNextFileW (in: hFindFile=0x381b40, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x69dc9750, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0xa60cbbb0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xa60cbbb0, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="7.0.3300.0__b03f5f7f11d50a3a", cAlternateFileName="703300~1.0__")) returned 1 [0100.934] FindNextFileW (in: hFindFile=0x381b40, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x69dc9750, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0xa60cbbb0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xa60cbbb0, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="7.0.3300.0__b03f5f7f11d50a3a", cAlternateFileName="703300~1.0__")) returned 0 [0100.934] FindClose (in: hFindFile=0x381b40 | out: hFindFile=0x381b40) returned 1 [0100.934] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e77c) returned 1 [0100.934] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e788) returned 1 [0100.934] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e7bc) returned 1 [0100.934] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC\\MSDATASRC", nBufferLength=0x105, lpBuffer=0x31e2c4, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC\\MSDATASRC", lpFilePart=0x0) returned 0x21 [0100.934] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC\\MSDATASRC\\", nBufferLength=0x105, lpBuffer=0x31e298, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC\\MSDATASRC\\", lpFilePart=0x0) returned 0x22 [0100.934] FindFirstFileW (in: lpFileName="C:\\Windows\\assembly\\GAC\\MSDATASRC\\*", lpFindFileData=0x31e4e4 | out: lpFindFileData=0x31e4e4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa60cbbb0, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0xa60cbbb0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xa60cbbb0, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x381b40 [0100.935] FindNextFileW (in: hFindFile=0x381b40, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa60cbbb0, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0xa60cbbb0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xa60cbbb0, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0100.935] FindNextFileW (in: hFindFile=0x381b40, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x69dc9750, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0xa60cbbb0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xa60cbbb0, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="7.0.3300.0__b03f5f7f11d50a3a", cAlternateFileName="703300~1.0__")) returned 1 [0100.935] FindNextFileW (in: hFindFile=0x381b40, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0100.935] FindClose (in: hFindFile=0x381b40 | out: hFindFile=0x381b40) returned 1 [0100.935] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e77c) returned 1 [0100.935] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e788) returned 1 [0100.935] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e744) returned 1 [0100.935] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC\\MSDATASRC\\7.0.3300.0__b03f5f7f11d50a3a", nBufferLength=0x105, lpBuffer=0x31e24c, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC\\MSDATASRC\\7.0.3300.0__b03f5f7f11d50a3a", lpFilePart=0x0) returned 0x3e [0100.935] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC\\MSDATASRC\\7.0.3300.0__b03f5f7f11d50a3a\\", nBufferLength=0x105, lpBuffer=0x31e220, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC\\MSDATASRC\\7.0.3300.0__b03f5f7f11d50a3a\\", lpFilePart=0x0) returned 0x3f [0100.935] FindFirstFileW (in: lpFileName="C:\\Windows\\assembly\\GAC\\MSDATASRC\\7.0.3300.0__b03f5f7f11d50a3a\\*", lpFindFileData=0x31e46c | out: lpFindFileData=0x31e46c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x69dc9750, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0xa60cbbb0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xa60cbbb0, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x381b40 [0100.936] FindNextFileW (in: hFindFile=0x381b40, lpFindFileData=0x31e47c | out: lpFindFileData=0x31e47c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x69dc9750, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0xa60cbbb0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xa60cbbb0, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0100.936] FindNextFileW (in: hFindFile=0x381b40, lpFindFileData=0x31e47c | out: lpFindFileData=0x31e47c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x69dc9750, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x69dc9750, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x69dc9750, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x1000, dwReserved0=0x0, dwReserved1=0x0, cFileName="msdatasrc.dll", cAlternateFileName="MSDATA~1.DLL")) returned 1 [0100.936] FindNextFileW (in: hFindFile=0x381b40, lpFindFileData=0x31e47c | out: lpFindFileData=0x31e47c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa60cbbb0, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0xa60cbbb0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xa60cbbb0, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0xc8, dwReserved0=0x0, dwReserved1=0x0, cFileName="__AssemblyInfo__.ini", cAlternateFileName="__ASSE~1.INI")) returned 1 [0100.936] FindNextFileW (in: hFindFile=0x381b40, lpFindFileData=0x31e47c | out: lpFindFileData=0x31e47c*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0100.936] FindClose (in: hFindFile=0x381b40 | out: hFindFile=0x381b40) returned 1 [0100.936] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e704) returned 1 [0100.936] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e710) returned 1 [0100.936] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e744) returned 1 [0100.936] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC\\MSDATASRC\\7.0.3300.0__b03f5f7f11d50a3a", nBufferLength=0x105, lpBuffer=0x31e24c, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC\\MSDATASRC\\7.0.3300.0__b03f5f7f11d50a3a", lpFilePart=0x0) returned 0x3e [0100.936] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC\\MSDATASRC\\7.0.3300.0__b03f5f7f11d50a3a\\", nBufferLength=0x105, lpBuffer=0x31e220, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC\\MSDATASRC\\7.0.3300.0__b03f5f7f11d50a3a\\", lpFilePart=0x0) returned 0x3f [0100.936] FindFirstFileW (in: lpFileName="C:\\Windows\\assembly\\GAC\\MSDATASRC\\7.0.3300.0__b03f5f7f11d50a3a\\*", lpFindFileData=0x31e46c | out: lpFindFileData=0x31e46c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x69dc9750, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0xa60cbbb0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xa60cbbb0, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x381b40 [0100.936] FindNextFileW (in: hFindFile=0x381b40, lpFindFileData=0x31e47c | out: lpFindFileData=0x31e47c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x69dc9750, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0xa60cbbb0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xa60cbbb0, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0100.936] FindNextFileW (in: hFindFile=0x381b40, lpFindFileData=0x31e47c | out: lpFindFileData=0x31e47c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x69dc9750, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x69dc9750, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x69dc9750, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x1000, dwReserved0=0x0, dwReserved1=0x0, cFileName="msdatasrc.dll", cAlternateFileName="MSDATA~1.DLL")) returned 1 [0100.936] FindNextFileW (in: hFindFile=0x381b40, lpFindFileData=0x31e47c | out: lpFindFileData=0x31e47c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa60cbbb0, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0xa60cbbb0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xa60cbbb0, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0xc8, dwReserved0=0x0, dwReserved1=0x0, cFileName="__AssemblyInfo__.ini", cAlternateFileName="__ASSE~1.INI")) returned 1 [0100.936] FindNextFileW (in: hFindFile=0x381b40, lpFindFileData=0x31e47c | out: lpFindFileData=0x31e47c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa60cbbb0, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0xa60cbbb0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xa60cbbb0, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0xc8, dwReserved0=0x0, dwReserved1=0x0, cFileName="__AssemblyInfo__.ini", cAlternateFileName="__ASSE~1.INI")) returned 0 [0100.936] FindClose (in: hFindFile=0x381b40 | out: hFindFile=0x381b40) returned 1 [0100.936] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e704) returned 1 [0100.937] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e710) returned 1 [0100.937] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e7bc) returned 1 [0100.937] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC\\stdole", nBufferLength=0x105, lpBuffer=0x31e2c4, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC\\stdole", lpFilePart=0x0) returned 0x1e [0100.937] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC\\stdole\\", nBufferLength=0x105, lpBuffer=0x31e298, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC\\stdole\\", lpFilePart=0x0) returned 0x1f [0100.937] FindFirstFileW (in: lpFileName="C:\\Windows\\assembly\\GAC\\stdole\\*", lpFindFileData=0x31e4e4 | out: lpFindFileData=0x31e4e4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa60f1d10, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0xa60f1d10, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xa60f1d10, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x381b40 [0100.937] FindNextFileW (in: hFindFile=0x381b40, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa60f1d10, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0xa60f1d10, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xa60f1d10, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0100.937] FindNextFileW (in: hFindFile=0x381b40, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x6d3caa70, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0xa60f1d10, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xa60f1d10, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="7.0.3300.0__b03f5f7f11d50a3a", cAlternateFileName="703300~1.0__")) returned 1 [0100.938] FindNextFileW (in: hFindFile=0x381b40, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x6d3caa70, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0xa60f1d10, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xa60f1d10, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="7.0.3300.0__b03f5f7f11d50a3a", cAlternateFileName="703300~1.0__")) returned 0 [0100.938] FindClose (in: hFindFile=0x381b40 | out: hFindFile=0x381b40) returned 1 [0100.938] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e77c) returned 1 [0100.938] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e788) returned 1 [0100.938] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e7bc) returned 1 [0100.938] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC\\stdole", nBufferLength=0x105, lpBuffer=0x31e2c4, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC\\stdole", lpFilePart=0x0) returned 0x1e [0100.938] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC\\stdole\\", nBufferLength=0x105, lpBuffer=0x31e298, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC\\stdole\\", lpFilePart=0x0) returned 0x1f [0100.938] FindFirstFileW (in: lpFileName="C:\\Windows\\assembly\\GAC\\stdole\\*", lpFindFileData=0x31e4e4 | out: lpFindFileData=0x31e4e4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa60f1d10, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0xa60f1d10, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xa60f1d10, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x381b40 [0100.938] FindNextFileW (in: hFindFile=0x381b40, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa60f1d10, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0xa60f1d10, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xa60f1d10, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0100.938] FindNextFileW (in: hFindFile=0x381b40, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x6d3caa70, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0xa60f1d10, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xa60f1d10, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="7.0.3300.0__b03f5f7f11d50a3a", cAlternateFileName="703300~1.0__")) returned 1 [0100.938] FindNextFileW (in: hFindFile=0x381b40, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0100.938] FindClose (in: hFindFile=0x381b40 | out: hFindFile=0x381b40) returned 1 [0100.938] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e77c) returned 1 [0100.938] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e788) returned 1 [0100.938] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e744) returned 1 [0100.938] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC\\stdole\\7.0.3300.0__b03f5f7f11d50a3a", nBufferLength=0x105, lpBuffer=0x31e24c, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC\\stdole\\7.0.3300.0__b03f5f7f11d50a3a", lpFilePart=0x0) returned 0x3b [0100.938] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC\\stdole\\7.0.3300.0__b03f5f7f11d50a3a\\", nBufferLength=0x105, lpBuffer=0x31e220, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC\\stdole\\7.0.3300.0__b03f5f7f11d50a3a\\", lpFilePart=0x0) returned 0x3c [0100.938] FindFirstFileW (in: lpFileName="C:\\Windows\\assembly\\GAC\\stdole\\7.0.3300.0__b03f5f7f11d50a3a\\*", lpFindFileData=0x31e46c | out: lpFindFileData=0x31e46c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x6d3caa70, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0xa60f1d10, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xa60f1d10, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x381b40 [0100.939] FindNextFileW (in: hFindFile=0x381b40, lpFindFileData=0x31e47c | out: lpFindFileData=0x31e47c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x6d3caa70, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0xa60f1d10, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xa60f1d10, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0100.939] FindNextFileW (in: hFindFile=0x381b40, lpFindFileData=0x31e47c | out: lpFindFileData=0x31e47c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6d3caa70, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x6d3caa70, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x6d3caa70, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x4000, dwReserved0=0x0, dwReserved1=0x0, cFileName="stdole.dll", cAlternateFileName="")) returned 1 [0100.939] FindNextFileW (in: hFindFile=0x381b40, lpFindFileData=0x31e47c | out: lpFindFileData=0x31e47c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa60f1d10, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0xa60f1d10, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xa60f1d10, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0xc5, dwReserved0=0x0, dwReserved1=0x0, cFileName="__AssemblyInfo__.ini", cAlternateFileName="__ASSE~1.INI")) returned 1 [0100.939] FindNextFileW (in: hFindFile=0x381b40, lpFindFileData=0x31e47c | out: lpFindFileData=0x31e47c*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0100.939] FindClose (in: hFindFile=0x381b40 | out: hFindFile=0x381b40) returned 1 [0100.939] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e704) returned 1 [0100.939] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e710) returned 1 [0100.939] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e744) returned 1 [0100.939] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC\\stdole\\7.0.3300.0__b03f5f7f11d50a3a", nBufferLength=0x105, lpBuffer=0x31e24c, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC\\stdole\\7.0.3300.0__b03f5f7f11d50a3a", lpFilePart=0x0) returned 0x3b [0100.939] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC\\stdole\\7.0.3300.0__b03f5f7f11d50a3a\\", nBufferLength=0x105, lpBuffer=0x31e220, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC\\stdole\\7.0.3300.0__b03f5f7f11d50a3a\\", lpFilePart=0x0) returned 0x3c [0100.940] FindFirstFileW (in: lpFileName="C:\\Windows\\assembly\\GAC\\stdole\\7.0.3300.0__b03f5f7f11d50a3a\\*", lpFindFileData=0x31e46c | out: lpFindFileData=0x31e46c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x6d3caa70, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0xa60f1d10, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xa60f1d10, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x381b40 [0100.940] FindNextFileW (in: hFindFile=0x381b40, lpFindFileData=0x31e47c | out: lpFindFileData=0x31e47c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x6d3caa70, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0xa60f1d10, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xa60f1d10, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0100.940] FindNextFileW (in: hFindFile=0x381b40, lpFindFileData=0x31e47c | out: lpFindFileData=0x31e47c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6d3caa70, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x6d3caa70, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x6d3caa70, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x4000, dwReserved0=0x0, dwReserved1=0x0, cFileName="stdole.dll", cAlternateFileName="")) returned 1 [0100.940] FindNextFileW (in: hFindFile=0x381b40, lpFindFileData=0x31e47c | out: lpFindFileData=0x31e47c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa60f1d10, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0xa60f1d10, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xa60f1d10, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0xc5, dwReserved0=0x0, dwReserved1=0x0, cFileName="__AssemblyInfo__.ini", cAlternateFileName="__ASSE~1.INI")) returned 1 [0100.940] FindNextFileW (in: hFindFile=0x381b40, lpFindFileData=0x31e47c | out: lpFindFileData=0x31e47c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa60f1d10, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0xa60f1d10, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xa60f1d10, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0xc5, dwReserved0=0x0, dwReserved1=0x0, cFileName="__AssemblyInfo__.ini", cAlternateFileName="__ASSE~1.INI")) returned 0 [0100.940] FindClose (in: hFindFile=0x381b40 | out: hFindFile=0x381b40) returned 1 [0100.940] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e704) returned 1 [0100.940] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e710) returned 1 [0100.940] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e834) returned 1 [0100.940] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_32", nBufferLength=0x105, lpBuffer=0x31e33c, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_32", lpFilePart=0x0) returned 0x1a [0100.940] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_32\\", nBufferLength=0x105, lpBuffer=0x31e310, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_32\\", lpFilePart=0x0) returned 0x1b [0100.940] FindFirstFileW (in: lpFileName="C:\\Windows\\assembly\\GAC_32\\*", lpFindFileData=0x31e55c | out: lpFindFileData=0x31e55c*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0xfdb58a30, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xa69b8e30, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xa69b8e30, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x381b40 [0100.941] FindNextFileW (in: hFindFile=0x381b40, lpFindFileData=0x31e56c | out: lpFindFileData=0x31e56c*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0xfdb58a30, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xa69b8e30, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xa69b8e30, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0100.941] FindNextFileW (in: hFindFile=0x381b40, lpFindFileData=0x31e56c | out: lpFindFileData=0x31e56c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa21d9876, ftCreationTime.dwHighDateTime=0x1cbf8eb, ftLastAccessTime.dwLowDateTime=0xa21d9876, ftLastAccessTime.dwHighDateTime=0x1cbf8eb, ftLastWriteTime.dwLowDateTime=0xa21d9876, ftLastWriteTime.dwHighDateTime=0x1cbf8eb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="AuditPolicyGPManagedStubs.Interop", cAlternateFileName="AUDITP~1.INT")) returned 1 [0100.941] FindNextFileW (in: hFindFile=0x381b40, lpFindFileData=0x31e56c | out: lpFindFileData=0x31e56c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa21d9876, ftCreationTime.dwHighDateTime=0x1cbf8eb, ftLastAccessTime.dwLowDateTime=0xa21d9876, ftLastAccessTime.dwHighDateTime=0x1cbf8eb, ftLastWriteTime.dwLowDateTime=0xa21d9876, ftLastWriteTime.dwHighDateTime=0x1cbf8eb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="BDATunePIA", cAlternateFileName="BDATUN~1")) returned 1 [0100.941] FindNextFileW (in: hFindFile=0x381b40, lpFindFileData=0x31e56c | out: lpFindFileData=0x31e56c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfdb58a30, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfdb58a30, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xfdb58a30, ftLastWriteTime.dwHighDateTime=0x1ca0431, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="CustomMarshalers", cAlternateFileName="CUSTOM~1")) returned 1 [0100.941] FindNextFileW (in: hFindFile=0x381b40, lpFindFileData=0x31e56c | out: lpFindFileData=0x31e56c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa21ffae5, ftCreationTime.dwHighDateTime=0x1cbf8eb, ftLastAccessTime.dwLowDateTime=0xa21ffae5, ftLastAccessTime.dwHighDateTime=0x1cbf8eb, ftLastWriteTime.dwLowDateTime=0xa21ffae5, ftLastWriteTime.dwHighDateTime=0x1cbf8eb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="ehexthost32", cAlternateFileName="EHEXTH~1")) returned 1 [0100.941] FindNextFileW (in: hFindFile=0x381b40, lpFindFileData=0x31e56c | out: lpFindFileData=0x31e56c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfdb58a30, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfdb7eb8a, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xfdb7eb8a, ftLastWriteTime.dwHighDateTime=0x1ca0431, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="ISymWrapper", cAlternateFileName="ISYMWR~1")) returned 1 [0100.941] FindNextFileW (in: hFindFile=0x381b40, lpFindFileData=0x31e56c | out: lpFindFileData=0x31e56c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa21ffae5, ftCreationTime.dwHighDateTime=0x1cbf8eb, ftLastAccessTime.dwLowDateTime=0xa21ffae5, ftLastAccessTime.dwHighDateTime=0x1cbf8eb, ftLastWriteTime.dwLowDateTime=0xa21ffae5, ftLastWriteTime.dwHighDateTime=0x1cbf8eb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="mcstoredb", cAlternateFileName="MCSTOR~1")) returned 1 [0100.941] FindNextFileW (in: hFindFile=0x381b40, lpFindFileData=0x31e56c | out: lpFindFileData=0x31e56c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa2225d54, ftCreationTime.dwHighDateTime=0x1cbf8eb, ftLastAccessTime.dwLowDateTime=0xa2225d54, ftLastAccessTime.dwHighDateTime=0x1cbf8eb, ftLastWriteTime.dwLowDateTime=0xa2225d54, ftLastWriteTime.dwHighDateTime=0x1cbf8eb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.GroupPolicy.AdmTmplEditor", cAlternateFileName="MICROS~1.ADM")) returned 1 [0100.941] FindNextFileW (in: hFindFile=0x381b40, lpFindFileData=0x31e56c | out: lpFindFileData=0x31e56c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa2225d54, ftCreationTime.dwHighDateTime=0x1cbf8eb, ftLastAccessTime.dwLowDateTime=0xa2225d54, ftLastAccessTime.dwHighDateTime=0x1cbf8eb, ftLastWriteTime.dwLowDateTime=0xa2225d54, ftLastWriteTime.dwHighDateTime=0x1cbf8eb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.GroupPolicy.AdmTmplEditor.Resources", cAlternateFileName="MICROS~1.RES")) returned 1 [0100.941] FindNextFileW (in: hFindFile=0x381b40, lpFindFileData=0x31e56c | out: lpFindFileData=0x31e56c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa21ffae5, ftCreationTime.dwHighDateTime=0x1cbf8eb, ftLastAccessTime.dwLowDateTime=0xa21ffae5, ftLastAccessTime.dwHighDateTime=0x1cbf8eb, ftLastWriteTime.dwLowDateTime=0xa21ffae5, ftLastWriteTime.dwHighDateTime=0x1cbf8eb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.GroupPolicy.Interop", cAlternateFileName="MICROS~1.INT")) returned 1 [0100.941] FindNextFileW (in: hFindFile=0x381b40, lpFindFileData=0x31e56c | out: lpFindFileData=0x31e56c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x81a4fe61, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x81a4fe61, ftLastAccessTime.dwHighDateTime=0x1ca0444, ftLastWriteTime.dwLowDateTime=0x81a4fe61, ftLastWriteTime.dwHighDateTime=0x1ca0444, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.Ink", cAlternateFileName="MICROS~1.INK")) returned 1 [0100.942] FindClose (in: hFindFile=0x381b40 | out: hFindFile=0x381b40) returned 1 [0100.943] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e7f4) returned 1 [0100.943] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e800) returned 1 [0100.943] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e834) returned 1 [0100.943] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_32", nBufferLength=0x105, lpBuffer=0x31e33c, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_32", lpFilePart=0x0) returned 0x1a [0100.943] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_32\\", nBufferLength=0x105, lpBuffer=0x31e310, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_32\\", lpFilePart=0x0) returned 0x1b [0100.943] FindFirstFileW (in: lpFileName="C:\\Windows\\assembly\\GAC_32\\*", lpFindFileData=0x31e55c | out: lpFindFileData=0x31e55c*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0xfdb58a30, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xa69b8e30, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xa69b8e30, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x381b40 [0100.944] FindClose (in: hFindFile=0x381b40 | out: hFindFile=0x381b40) returned 1 [0100.944] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e7f4) returned 1 [0100.944] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e800) returned 1 [0100.944] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e7bc) returned 1 [0100.944] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_32\\AuditPolicyGPManagedStubs.Interop", nBufferLength=0x105, lpBuffer=0x31e2c4, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_32\\AuditPolicyGPManagedStubs.Interop", lpFilePart=0x0) returned 0x3c [0100.944] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_32\\AuditPolicyGPManagedStubs.Interop\\", nBufferLength=0x105, lpBuffer=0x31e298, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_32\\AuditPolicyGPManagedStubs.Interop\\", lpFilePart=0x0) returned 0x3d [0100.944] FindFirstFileW (in: lpFileName="C:\\Windows\\assembly\\GAC_32\\AuditPolicyGPManagedStubs.Interop\\*", lpFindFileData=0x31e4e4 | out: lpFindFileData=0x31e4e4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa21d9876, ftCreationTime.dwHighDateTime=0x1cbf8eb, ftLastAccessTime.dwLowDateTime=0xa21d9876, ftLastAccessTime.dwHighDateTime=0x1cbf8eb, ftLastWriteTime.dwLowDateTime=0xa21d9876, ftLastWriteTime.dwHighDateTime=0x1cbf8eb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x381b40 [0100.945] FindClose (in: hFindFile=0x381b40 | out: hFindFile=0x381b40) returned 1 [0100.945] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e77c) returned 1 [0100.945] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e788) returned 1 [0100.945] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e7bc) returned 1 [0100.946] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_32\\AuditPolicyGPManagedStubs.Interop", nBufferLength=0x105, lpBuffer=0x31e2c4, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_32\\AuditPolicyGPManagedStubs.Interop", lpFilePart=0x0) returned 0x3c [0100.946] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_32\\AuditPolicyGPManagedStubs.Interop\\", nBufferLength=0x105, lpBuffer=0x31e298, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_32\\AuditPolicyGPManagedStubs.Interop\\", lpFilePart=0x0) returned 0x3d [0100.946] FindFirstFileW (in: lpFileName="C:\\Windows\\assembly\\GAC_32\\AuditPolicyGPManagedStubs.Interop\\*", lpFindFileData=0x31e4e4 | out: lpFindFileData=0x31e4e4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa21d9876, ftCreationTime.dwHighDateTime=0x1cbf8eb, ftLastAccessTime.dwLowDateTime=0xa21d9876, ftLastAccessTime.dwHighDateTime=0x1cbf8eb, ftLastWriteTime.dwLowDateTime=0xa21d9876, ftLastWriteTime.dwHighDateTime=0x1cbf8eb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x381b40 [0100.946] FindClose (in: hFindFile=0x381b40 | out: hFindFile=0x381b40) returned 1 [0100.946] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e77c) returned 1 [0100.946] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e788) returned 1 [0100.946] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e744) returned 1 [0100.946] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_32\\AuditPolicyGPManagedStubs.Interop\\6.1.0.0__31bf3856ad364e35", nBufferLength=0x105, lpBuffer=0x31e24c, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_32\\AuditPolicyGPManagedStubs.Interop\\6.1.0.0__31bf3856ad364e35", lpFilePart=0x0) returned 0x56 [0100.946] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_32\\AuditPolicyGPManagedStubs.Interop\\6.1.0.0__31bf3856ad364e35\\", nBufferLength=0x105, lpBuffer=0x31e220, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_32\\AuditPolicyGPManagedStubs.Interop\\6.1.0.0__31bf3856ad364e35\\", lpFilePart=0x0) returned 0x57 [0100.946] FindFirstFileW (in: lpFileName="C:\\Windows\\assembly\\GAC_32\\AuditPolicyGPManagedStubs.Interop\\6.1.0.0__31bf3856ad364e35\\*", lpFindFileData=0x31e46c | out: lpFindFileData=0x31e46c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa21d9876, ftCreationTime.dwHighDateTime=0x1cbf8eb, ftLastAccessTime.dwLowDateTime=0xa21d9876, ftLastAccessTime.dwHighDateTime=0x1cbf8eb, ftLastWriteTime.dwLowDateTime=0xa21d9876, ftLastWriteTime.dwHighDateTime=0x1cbf8eb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x381b40 [0100.946] FindClose (in: hFindFile=0x381b40 | out: hFindFile=0x381b40) returned 1 [0100.946] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e704) returned 1 [0100.946] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e710) returned 1 [0100.946] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e744) returned 1 [0100.946] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_32\\AuditPolicyGPManagedStubs.Interop\\6.1.0.0__31bf3856ad364e35", nBufferLength=0x105, lpBuffer=0x31e24c, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_32\\AuditPolicyGPManagedStubs.Interop\\6.1.0.0__31bf3856ad364e35", lpFilePart=0x0) returned 0x56 [0100.946] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_32\\AuditPolicyGPManagedStubs.Interop\\6.1.0.0__31bf3856ad364e35\\", nBufferLength=0x105, lpBuffer=0x31e220, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_32\\AuditPolicyGPManagedStubs.Interop\\6.1.0.0__31bf3856ad364e35\\", lpFilePart=0x0) returned 0x57 [0100.946] FindFirstFileW (in: lpFileName="C:\\Windows\\assembly\\GAC_32\\AuditPolicyGPManagedStubs.Interop\\6.1.0.0__31bf3856ad364e35\\*", lpFindFileData=0x31e46c | out: lpFindFileData=0x31e46c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa21d9876, ftCreationTime.dwHighDateTime=0x1cbf8eb, ftLastAccessTime.dwLowDateTime=0xa21d9876, ftLastAccessTime.dwHighDateTime=0x1cbf8eb, ftLastWriteTime.dwLowDateTime=0xa21d9876, ftLastWriteTime.dwHighDateTime=0x1cbf8eb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x381b40 [0100.946] FindClose (in: hFindFile=0x381b40 | out: hFindFile=0x381b40) returned 1 [0100.947] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e704) returned 1 [0100.947] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e710) returned 1 [0100.947] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e7bc) returned 1 [0100.947] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_32\\BDATunePIA", nBufferLength=0x105, lpBuffer=0x31e2c4, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_32\\BDATunePIA", lpFilePart=0x0) returned 0x25 [0100.947] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_32\\BDATunePIA\\", nBufferLength=0x105, lpBuffer=0x31e298, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_32\\BDATunePIA\\", lpFilePart=0x0) returned 0x26 [0100.947] FindFirstFileW (in: lpFileName="C:\\Windows\\assembly\\GAC_32\\BDATunePIA\\*", lpFindFileData=0x31e4e4 | out: lpFindFileData=0x31e4e4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa21d9876, ftCreationTime.dwHighDateTime=0x1cbf8eb, ftLastAccessTime.dwLowDateTime=0xa21d9876, ftLastAccessTime.dwHighDateTime=0x1cbf8eb, ftLastWriteTime.dwLowDateTime=0xa21d9876, ftLastWriteTime.dwHighDateTime=0x1cbf8eb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x381b40 [0100.947] FindClose (in: hFindFile=0x381b40 | out: hFindFile=0x381b40) returned 1 [0100.947] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e77c) returned 1 [0100.947] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e788) returned 1 [0100.947] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e7bc) returned 1 [0100.947] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_32\\BDATunePIA", nBufferLength=0x105, lpBuffer=0x31e2c4, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_32\\BDATunePIA", lpFilePart=0x0) returned 0x25 [0100.947] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_32\\BDATunePIA\\", nBufferLength=0x105, lpBuffer=0x31e298, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_32\\BDATunePIA\\", lpFilePart=0x0) returned 0x26 [0100.947] FindFirstFileW (in: lpFileName="C:\\Windows\\assembly\\GAC_32\\BDATunePIA\\*", lpFindFileData=0x31e4e4 | out: lpFindFileData=0x31e4e4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa21d9876, ftCreationTime.dwHighDateTime=0x1cbf8eb, ftLastAccessTime.dwLowDateTime=0xa21d9876, ftLastAccessTime.dwHighDateTime=0x1cbf8eb, ftLastWriteTime.dwLowDateTime=0xa21d9876, ftLastWriteTime.dwHighDateTime=0x1cbf8eb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x381b40 [0100.947] FindClose (in: hFindFile=0x381b40 | out: hFindFile=0x381b40) returned 1 [0100.947] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e77c) returned 1 [0100.947] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e788) returned 1 [0100.947] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e744) returned 1 [0100.948] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_32\\BDATunePIA\\6.1.0.0__31bf3856ad364e35", nBufferLength=0x105, lpBuffer=0x31e24c, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_32\\BDATunePIA\\6.1.0.0__31bf3856ad364e35", lpFilePart=0x0) returned 0x3f [0100.948] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_32\\BDATunePIA\\6.1.0.0__31bf3856ad364e35\\", nBufferLength=0x105, lpBuffer=0x31e220, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_32\\BDATunePIA\\6.1.0.0__31bf3856ad364e35\\", lpFilePart=0x0) returned 0x40 [0100.948] FindFirstFileW (in: lpFileName="C:\\Windows\\assembly\\GAC_32\\BDATunePIA\\6.1.0.0__31bf3856ad364e35\\*", lpFindFileData=0x31e46c | out: lpFindFileData=0x31e46c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa21d9876, ftCreationTime.dwHighDateTime=0x1cbf8eb, ftLastAccessTime.dwLowDateTime=0xa21d9876, ftLastAccessTime.dwHighDateTime=0x1cbf8eb, ftLastWriteTime.dwLowDateTime=0xa21d9876, ftLastWriteTime.dwHighDateTime=0x1cbf8eb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x381b40 [0100.948] FindClose (in: hFindFile=0x381b40 | out: hFindFile=0x381b40) returned 1 [0100.948] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e704) returned 1 [0100.948] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e710) returned 1 [0100.948] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e744) returned 1 [0100.948] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_32\\BDATunePIA\\6.1.0.0__31bf3856ad364e35", nBufferLength=0x105, lpBuffer=0x31e24c, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_32\\BDATunePIA\\6.1.0.0__31bf3856ad364e35", lpFilePart=0x0) returned 0x3f [0100.948] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_32\\BDATunePIA\\6.1.0.0__31bf3856ad364e35\\", nBufferLength=0x105, lpBuffer=0x31e220, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_32\\BDATunePIA\\6.1.0.0__31bf3856ad364e35\\", lpFilePart=0x0) returned 0x40 [0100.948] FindFirstFileW (in: lpFileName="C:\\Windows\\assembly\\GAC_32\\BDATunePIA\\6.1.0.0__31bf3856ad364e35\\*", lpFindFileData=0x31e46c | out: lpFindFileData=0x31e46c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa21d9876, ftCreationTime.dwHighDateTime=0x1cbf8eb, ftLastAccessTime.dwLowDateTime=0xa21d9876, ftLastAccessTime.dwHighDateTime=0x1cbf8eb, ftLastWriteTime.dwLowDateTime=0xa21d9876, ftLastWriteTime.dwHighDateTime=0x1cbf8eb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x381b40 [0100.948] FindClose (in: hFindFile=0x381b40 | out: hFindFile=0x381b40) returned 1 [0100.948] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e704) returned 1 [0100.948] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e710) returned 1 [0100.949] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e7bc) returned 1 [0100.949] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_32\\CustomMarshalers", nBufferLength=0x105, lpBuffer=0x31e2c4, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_32\\CustomMarshalers", lpFilePart=0x0) returned 0x2b [0100.949] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_32\\CustomMarshalers\\", nBufferLength=0x105, lpBuffer=0x31e298, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_32\\CustomMarshalers\\", lpFilePart=0x0) returned 0x2c [0100.949] FindFirstFileW (in: lpFileName="C:\\Windows\\assembly\\GAC_32\\CustomMarshalers\\*", lpFindFileData=0x31e4e4 | out: lpFindFileData=0x31e4e4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfdb58a30, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfdb58a30, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xfdb58a30, ftLastWriteTime.dwHighDateTime=0x1ca0431, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x381b40 [0100.949] FindClose (in: hFindFile=0x381b40 | out: hFindFile=0x381b40) returned 1 [0100.949] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e77c) returned 1 [0100.949] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e788) returned 1 [0100.949] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e7bc) returned 1 [0100.949] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_32\\CustomMarshalers", nBufferLength=0x105, lpBuffer=0x31e2c4, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_32\\CustomMarshalers", lpFilePart=0x0) returned 0x2b [0100.949] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_32\\CustomMarshalers\\", nBufferLength=0x105, lpBuffer=0x31e298, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_32\\CustomMarshalers\\", lpFilePart=0x0) returned 0x2c [0100.949] FindFirstFileW (in: lpFileName="C:\\Windows\\assembly\\GAC_32\\CustomMarshalers\\*", lpFindFileData=0x31e4e4 | out: lpFindFileData=0x31e4e4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfdb58a30, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfdb58a30, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xfdb58a30, ftLastWriteTime.dwHighDateTime=0x1ca0431, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x381b40 [0100.949] FindClose (in: hFindFile=0x381b40 | out: hFindFile=0x381b40) returned 1 [0100.949] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e77c) returned 1 [0100.949] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e788) returned 1 [0100.949] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e744) returned 1 [0100.949] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_32\\CustomMarshalers\\2.0.0.0__b03f5f7f11d50a3a", nBufferLength=0x105, lpBuffer=0x31e24c, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_32\\CustomMarshalers\\2.0.0.0__b03f5f7f11d50a3a", lpFilePart=0x0) returned 0x45 [0100.949] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_32\\CustomMarshalers\\2.0.0.0__b03f5f7f11d50a3a\\", nBufferLength=0x105, lpBuffer=0x31e220, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_32\\CustomMarshalers\\2.0.0.0__b03f5f7f11d50a3a\\", lpFilePart=0x0) returned 0x46 [0100.950] FindFirstFileW (in: lpFileName="C:\\Windows\\assembly\\GAC_32\\CustomMarshalers\\2.0.0.0__b03f5f7f11d50a3a\\*", lpFindFileData=0x31e46c | out: lpFindFileData=0x31e46c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfdb58a30, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xbf7418c8, ftLastAccessTime.dwHighDateTime=0x1cb892c, ftLastWriteTime.dwLowDateTime=0xbf7418c8, ftLastWriteTime.dwHighDateTime=0x1cb892c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x381b40 [0100.950] FindClose (in: hFindFile=0x381b40 | out: hFindFile=0x381b40) returned 1 [0100.950] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e704) returned 1 [0100.950] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e710) returned 1 [0100.950] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e744) returned 1 [0100.950] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_32\\CustomMarshalers\\2.0.0.0__b03f5f7f11d50a3a", nBufferLength=0x105, lpBuffer=0x31e24c, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_32\\CustomMarshalers\\2.0.0.0__b03f5f7f11d50a3a", lpFilePart=0x0) returned 0x45 [0100.950] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_32\\CustomMarshalers\\2.0.0.0__b03f5f7f11d50a3a\\", nBufferLength=0x105, lpBuffer=0x31e220, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_32\\CustomMarshalers\\2.0.0.0__b03f5f7f11d50a3a\\", lpFilePart=0x0) returned 0x46 [0100.950] FindFirstFileW (in: lpFileName="C:\\Windows\\assembly\\GAC_32\\CustomMarshalers\\2.0.0.0__b03f5f7f11d50a3a\\*", lpFindFileData=0x31e46c | out: lpFindFileData=0x31e46c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfdb58a30, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xbf7418c8, ftLastAccessTime.dwHighDateTime=0x1cb892c, ftLastWriteTime.dwLowDateTime=0xbf7418c8, ftLastWriteTime.dwHighDateTime=0x1cb892c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x381b40 [0100.950] FindClose (in: hFindFile=0x381b40 | out: hFindFile=0x381b40) returned 1 [0100.950] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e704) returned 1 [0100.950] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e710) returned 1 [0100.950] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e7bc) returned 1 [0100.950] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_32\\ehexthost32", nBufferLength=0x105, lpBuffer=0x31e2c4, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_32\\ehexthost32", lpFilePart=0x0) returned 0x26 [0100.950] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_32\\ehexthost32\\", nBufferLength=0x105, lpBuffer=0x31e298, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_32\\ehexthost32\\", lpFilePart=0x0) returned 0x27 [0100.950] FindFirstFileW (in: lpFileName="C:\\Windows\\assembly\\GAC_32\\ehexthost32\\*", lpFindFileData=0x31e4e4 | out: lpFindFileData=0x31e4e4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa21ffae5, ftCreationTime.dwHighDateTime=0x1cbf8eb, ftLastAccessTime.dwLowDateTime=0xa21ffae5, ftLastAccessTime.dwHighDateTime=0x1cbf8eb, ftLastWriteTime.dwLowDateTime=0xa21ffae5, ftLastWriteTime.dwHighDateTime=0x1cbf8eb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x381b40 [0100.951] FindClose (in: hFindFile=0x381b40 | out: hFindFile=0x381b40) returned 1 [0100.951] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e77c) returned 1 [0100.951] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e788) returned 1 [0100.951] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e7bc) returned 1 [0100.951] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_32\\ehexthost32", nBufferLength=0x105, lpBuffer=0x31e2c4, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_32\\ehexthost32", lpFilePart=0x0) returned 0x26 [0100.951] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_32\\ehexthost32\\", nBufferLength=0x105, lpBuffer=0x31e298, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_32\\ehexthost32\\", lpFilePart=0x0) returned 0x27 [0100.951] FindFirstFileW (in: lpFileName="C:\\Windows\\assembly\\GAC_32\\ehexthost32\\*", lpFindFileData=0x31e4e4 | out: lpFindFileData=0x31e4e4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa21ffae5, ftCreationTime.dwHighDateTime=0x1cbf8eb, ftLastAccessTime.dwLowDateTime=0xa21ffae5, ftLastAccessTime.dwHighDateTime=0x1cbf8eb, ftLastWriteTime.dwLowDateTime=0xa21ffae5, ftLastWriteTime.dwHighDateTime=0x1cbf8eb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x381b40 [0100.951] FindClose (in: hFindFile=0x381b40 | out: hFindFile=0x381b40) returned 1 [0100.951] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e77c) returned 1 [0100.951] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e788) returned 1 [0100.951] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e744) returned 1 [0100.951] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_32\\ehexthost32\\6.1.0.0__31bf3856ad364e35", nBufferLength=0x105, lpBuffer=0x31e24c, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_32\\ehexthost32\\6.1.0.0__31bf3856ad364e35", lpFilePart=0x0) returned 0x40 [0100.951] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_32\\ehexthost32\\6.1.0.0__31bf3856ad364e35\\", nBufferLength=0x105, lpBuffer=0x31e220, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_32\\ehexthost32\\6.1.0.0__31bf3856ad364e35\\", lpFilePart=0x0) returned 0x41 [0100.951] FindFirstFileW (in: lpFileName="C:\\Windows\\assembly\\GAC_32\\ehexthost32\\6.1.0.0__31bf3856ad364e35\\*", lpFindFileData=0x31e46c | out: lpFindFileData=0x31e46c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa21ffae5, ftCreationTime.dwHighDateTime=0x1cbf8eb, ftLastAccessTime.dwLowDateTime=0xa21ffae5, ftLastAccessTime.dwHighDateTime=0x1cbf8eb, ftLastWriteTime.dwLowDateTime=0xa21ffae5, ftLastWriteTime.dwHighDateTime=0x1cbf8eb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x381b40 [0100.951] FindClose (in: hFindFile=0x381b40 | out: hFindFile=0x381b40) returned 1 [0100.951] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e704) returned 1 [0100.951] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e710) returned 1 [0100.951] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e744) returned 1 [0100.951] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_32\\ehexthost32\\6.1.0.0__31bf3856ad364e35", nBufferLength=0x105, lpBuffer=0x31e24c, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_32\\ehexthost32\\6.1.0.0__31bf3856ad364e35", lpFilePart=0x0) returned 0x40 [0100.952] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_32\\ehexthost32\\6.1.0.0__31bf3856ad364e35\\", nBufferLength=0x105, lpBuffer=0x31e220, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_32\\ehexthost32\\6.1.0.0__31bf3856ad364e35\\", lpFilePart=0x0) returned 0x41 [0100.952] FindFirstFileW (in: lpFileName="C:\\Windows\\assembly\\GAC_32\\ehexthost32\\6.1.0.0__31bf3856ad364e35\\*", lpFindFileData=0x31e46c | out: lpFindFileData=0x31e46c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa21ffae5, ftCreationTime.dwHighDateTime=0x1cbf8eb, ftLastAccessTime.dwLowDateTime=0xa21ffae5, ftLastAccessTime.dwHighDateTime=0x1cbf8eb, ftLastWriteTime.dwLowDateTime=0xa21ffae5, ftLastWriteTime.dwHighDateTime=0x1cbf8eb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x381b40 [0100.952] FindClose (in: hFindFile=0x381b40 | out: hFindFile=0x381b40) returned 1 [0100.952] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e704) returned 1 [0100.952] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e710) returned 1 [0100.952] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e7bc) returned 1 [0100.952] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_32\\ISymWrapper", nBufferLength=0x105, lpBuffer=0x31e2c4, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_32\\ISymWrapper", lpFilePart=0x0) returned 0x26 [0100.952] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_32\\ISymWrapper\\", nBufferLength=0x105, lpBuffer=0x31e298, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_32\\ISymWrapper\\", lpFilePart=0x0) returned 0x27 [0100.952] FindFirstFileW (in: lpFileName="C:\\Windows\\assembly\\GAC_32\\ISymWrapper\\*", lpFindFileData=0x31e4e4 | out: lpFindFileData=0x31e4e4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfdb58a30, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfdb7eb8a, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xfdb7eb8a, ftLastWriteTime.dwHighDateTime=0x1ca0431, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x381b40 [0100.952] FindClose (in: hFindFile=0x381b40 | out: hFindFile=0x381b40) returned 1 [0100.952] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e77c) returned 1 [0100.952] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e788) returned 1 [0100.952] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e7bc) returned 1 [0100.952] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_32\\ISymWrapper", nBufferLength=0x105, lpBuffer=0x31e2c4, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_32\\ISymWrapper", lpFilePart=0x0) returned 0x26 [0100.952] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_32\\ISymWrapper\\", nBufferLength=0x105, lpBuffer=0x31e298, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_32\\ISymWrapper\\", lpFilePart=0x0) returned 0x27 [0100.952] FindFirstFileW (in: lpFileName="C:\\Windows\\assembly\\GAC_32\\ISymWrapper\\*", lpFindFileData=0x31e4e4 | out: lpFindFileData=0x31e4e4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfdb58a30, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfdb7eb8a, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xfdb7eb8a, ftLastWriteTime.dwHighDateTime=0x1ca0431, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x381b40 [0100.953] FindClose (in: hFindFile=0x381b40 | out: hFindFile=0x381b40) returned 1 [0100.953] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e77c) returned 1 [0100.953] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e788) returned 1 [0100.953] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e744) returned 1 [0100.953] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_32\\ISymWrapper\\2.0.0.0__b03f5f7f11d50a3a", nBufferLength=0x105, lpBuffer=0x31e24c, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_32\\ISymWrapper\\2.0.0.0__b03f5f7f11d50a3a", lpFilePart=0x0) returned 0x40 [0100.953] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_32\\ISymWrapper\\2.0.0.0__b03f5f7f11d50a3a\\", nBufferLength=0x105, lpBuffer=0x31e220, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_32\\ISymWrapper\\2.0.0.0__b03f5f7f11d50a3a\\", lpFilePart=0x0) returned 0x41 [0100.953] FindFirstFileW (in: lpFileName="C:\\Windows\\assembly\\GAC_32\\ISymWrapper\\2.0.0.0__b03f5f7f11d50a3a\\*", lpFindFileData=0x31e46c | out: lpFindFileData=0x31e46c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfdb7eb8a, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xc13d20fd, ftLastAccessTime.dwHighDateTime=0x1cb892c, ftLastWriteTime.dwLowDateTime=0xc13d20fd, ftLastWriteTime.dwHighDateTime=0x1cb892c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x381b40 [0100.953] FindClose (in: hFindFile=0x381b40 | out: hFindFile=0x381b40) returned 1 [0100.953] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e704) returned 1 [0100.953] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e710) returned 1 [0100.953] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e744) returned 1 [0100.953] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_32\\ISymWrapper\\2.0.0.0__b03f5f7f11d50a3a", nBufferLength=0x105, lpBuffer=0x31e24c, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_32\\ISymWrapper\\2.0.0.0__b03f5f7f11d50a3a", lpFilePart=0x0) returned 0x40 [0100.953] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_32\\ISymWrapper\\2.0.0.0__b03f5f7f11d50a3a\\", nBufferLength=0x105, lpBuffer=0x31e220, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_32\\ISymWrapper\\2.0.0.0__b03f5f7f11d50a3a\\", lpFilePart=0x0) returned 0x41 [0100.953] FindFirstFileW (in: lpFileName="C:\\Windows\\assembly\\GAC_32\\ISymWrapper\\2.0.0.0__b03f5f7f11d50a3a\\*", lpFindFileData=0x31e46c | out: lpFindFileData=0x31e46c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfdb7eb8a, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xc13d20fd, ftLastAccessTime.dwHighDateTime=0x1cb892c, ftLastWriteTime.dwLowDateTime=0xc13d20fd, ftLastWriteTime.dwHighDateTime=0x1cb892c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x381b40 [0100.953] FindClose (in: hFindFile=0x381b40 | out: hFindFile=0x381b40) returned 1 [0100.953] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e704) returned 1 [0100.953] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e710) returned 1 [0100.953] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e7bc) returned 1 [0100.953] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_32\\mcstoredb", nBufferLength=0x105, lpBuffer=0x31e2c4, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_32\\mcstoredb", lpFilePart=0x0) returned 0x24 [0100.954] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_32\\mcstoredb\\", nBufferLength=0x105, lpBuffer=0x31e298, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_32\\mcstoredb\\", lpFilePart=0x0) returned 0x25 [0100.954] FindFirstFileW (in: lpFileName="C:\\Windows\\assembly\\GAC_32\\mcstoredb\\*", lpFindFileData=0x31e4e4 | out: lpFindFileData=0x31e4e4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa21ffae5, ftCreationTime.dwHighDateTime=0x1cbf8eb, ftLastAccessTime.dwLowDateTime=0xa21ffae5, ftLastAccessTime.dwHighDateTime=0x1cbf8eb, ftLastWriteTime.dwLowDateTime=0xa21ffae5, ftLastWriteTime.dwHighDateTime=0x1cbf8eb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x381b40 [0100.954] FindClose (in: hFindFile=0x381b40 | out: hFindFile=0x381b40) returned 1 [0100.954] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e77c) returned 1 [0100.954] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e788) returned 1 [0100.954] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e7bc) returned 1 [0100.954] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_32\\mcstoredb", nBufferLength=0x105, lpBuffer=0x31e2c4, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_32\\mcstoredb", lpFilePart=0x0) returned 0x24 [0100.954] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_32\\mcstoredb\\", nBufferLength=0x105, lpBuffer=0x31e298, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_32\\mcstoredb\\", lpFilePart=0x0) returned 0x25 [0100.954] FindFirstFileW (in: lpFileName="C:\\Windows\\assembly\\GAC_32\\mcstoredb\\*", lpFindFileData=0x31e4e4 | out: lpFindFileData=0x31e4e4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa21ffae5, ftCreationTime.dwHighDateTime=0x1cbf8eb, ftLastAccessTime.dwLowDateTime=0xa21ffae5, ftLastAccessTime.dwHighDateTime=0x1cbf8eb, ftLastWriteTime.dwLowDateTime=0xa21ffae5, ftLastWriteTime.dwHighDateTime=0x1cbf8eb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x381b40 [0100.954] FindClose (in: hFindFile=0x381b40 | out: hFindFile=0x381b40) returned 1 [0100.954] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e77c) returned 1 [0100.954] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e788) returned 1 [0100.954] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e744) returned 1 [0100.954] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_32\\mcstoredb\\6.1.0.0__31bf3856ad364e35", nBufferLength=0x105, lpBuffer=0x31e24c, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_32\\mcstoredb\\6.1.0.0__31bf3856ad364e35", lpFilePart=0x0) returned 0x3e [0100.954] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_32\\mcstoredb\\6.1.0.0__31bf3856ad364e35\\", nBufferLength=0x105, lpBuffer=0x31e220, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_32\\mcstoredb\\6.1.0.0__31bf3856ad364e35\\", lpFilePart=0x0) returned 0x3f [0100.954] FindFirstFileW (in: lpFileName="C:\\Windows\\assembly\\GAC_32\\mcstoredb\\6.1.0.0__31bf3856ad364e35\\*", lpFindFileData=0x31e46c | out: lpFindFileData=0x31e46c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa21ffae5, ftCreationTime.dwHighDateTime=0x1cbf8eb, ftLastAccessTime.dwLowDateTime=0xa21ffae5, ftLastAccessTime.dwHighDateTime=0x1cbf8eb, ftLastWriteTime.dwLowDateTime=0xa21ffae5, ftLastWriteTime.dwHighDateTime=0x1cbf8eb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x381b40 [0100.955] FindClose (in: hFindFile=0x381b40 | out: hFindFile=0x381b40) returned 1 [0100.955] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e704) returned 1 [0100.955] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e710) returned 1 [0100.955] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e744) returned 1 [0100.955] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_32\\mcstoredb\\6.1.0.0__31bf3856ad364e35", nBufferLength=0x105, lpBuffer=0x31e24c, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_32\\mcstoredb\\6.1.0.0__31bf3856ad364e35", lpFilePart=0x0) returned 0x3e [0100.955] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_32\\mcstoredb\\6.1.0.0__31bf3856ad364e35\\", nBufferLength=0x105, lpBuffer=0x31e220, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_32\\mcstoredb\\6.1.0.0__31bf3856ad364e35\\", lpFilePart=0x0) returned 0x3f [0100.955] FindFirstFileW (in: lpFileName="C:\\Windows\\assembly\\GAC_32\\mcstoredb\\6.1.0.0__31bf3856ad364e35\\*", lpFindFileData=0x31e46c | out: lpFindFileData=0x31e46c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa21ffae5, ftCreationTime.dwHighDateTime=0x1cbf8eb, ftLastAccessTime.dwLowDateTime=0xa21ffae5, ftLastAccessTime.dwHighDateTime=0x1cbf8eb, ftLastWriteTime.dwLowDateTime=0xa21ffae5, ftLastWriteTime.dwHighDateTime=0x1cbf8eb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x381b40 [0100.955] FindClose (in: hFindFile=0x381b40 | out: hFindFile=0x381b40) returned 1 [0100.955] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e704) returned 1 [0100.955] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e710) returned 1 [0100.955] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e7bc) returned 1 [0100.955] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_32\\Microsoft.GroupPolicy.AdmTmplEditor", nBufferLength=0x105, lpBuffer=0x31e2c4, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_32\\Microsoft.GroupPolicy.AdmTmplEditor", lpFilePart=0x0) returned 0x3e [0100.955] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_32\\Microsoft.GroupPolicy.AdmTmplEditor\\", nBufferLength=0x105, lpBuffer=0x31e298, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_32\\Microsoft.GroupPolicy.AdmTmplEditor\\", lpFilePart=0x0) returned 0x3f [0100.955] FindFirstFileW (in: lpFileName="C:\\Windows\\assembly\\GAC_32\\Microsoft.GroupPolicy.AdmTmplEditor\\*", lpFindFileData=0x31e4e4 | out: lpFindFileData=0x31e4e4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa2225d54, ftCreationTime.dwHighDateTime=0x1cbf8eb, ftLastAccessTime.dwLowDateTime=0xa2225d54, ftLastAccessTime.dwHighDateTime=0x1cbf8eb, ftLastWriteTime.dwLowDateTime=0xa2225d54, ftLastWriteTime.dwHighDateTime=0x1cbf8eb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x381b40 [0100.956] FindClose (in: hFindFile=0x381b40 | out: hFindFile=0x381b40) returned 1 [0100.956] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e77c) returned 1 [0100.956] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e788) returned 1 [0100.956] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e7bc) returned 1 [0100.956] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_32\\Microsoft.GroupPolicy.AdmTmplEditor", nBufferLength=0x105, lpBuffer=0x31e2c4, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_32\\Microsoft.GroupPolicy.AdmTmplEditor", lpFilePart=0x0) returned 0x3e [0100.956] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_32\\Microsoft.GroupPolicy.AdmTmplEditor\\", nBufferLength=0x105, lpBuffer=0x31e298, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_32\\Microsoft.GroupPolicy.AdmTmplEditor\\", lpFilePart=0x0) returned 0x3f [0100.956] FindFirstFileW (in: lpFileName="C:\\Windows\\assembly\\GAC_32\\Microsoft.GroupPolicy.AdmTmplEditor\\*", lpFindFileData=0x31e4e4 | out: lpFindFileData=0x31e4e4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa2225d54, ftCreationTime.dwHighDateTime=0x1cbf8eb, ftLastAccessTime.dwLowDateTime=0xa2225d54, ftLastAccessTime.dwHighDateTime=0x1cbf8eb, ftLastWriteTime.dwLowDateTime=0xa2225d54, ftLastWriteTime.dwHighDateTime=0x1cbf8eb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x381b40 [0100.956] FindClose (in: hFindFile=0x381b40 | out: hFindFile=0x381b40) returned 1 [0100.956] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e77c) returned 1 [0100.956] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e788) returned 1 [0100.956] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e744) returned 1 [0100.956] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_32\\Microsoft.GroupPolicy.AdmTmplEditor\\6.1.0.0__31bf3856ad364e35", nBufferLength=0x105, lpBuffer=0x31e24c, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_32\\Microsoft.GroupPolicy.AdmTmplEditor\\6.1.0.0__31bf3856ad364e35", lpFilePart=0x0) returned 0x58 [0100.956] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_32\\Microsoft.GroupPolicy.AdmTmplEditor\\6.1.0.0__31bf3856ad364e35\\", nBufferLength=0x105, lpBuffer=0x31e220, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_32\\Microsoft.GroupPolicy.AdmTmplEditor\\6.1.0.0__31bf3856ad364e35\\", lpFilePart=0x0) returned 0x59 [0100.956] FindFirstFileW (in: lpFileName="C:\\Windows\\assembly\\GAC_32\\Microsoft.GroupPolicy.AdmTmplEditor\\6.1.0.0__31bf3856ad364e35\\*", lpFindFileData=0x31e46c | out: lpFindFileData=0x31e46c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa2225d54, ftCreationTime.dwHighDateTime=0x1cbf8eb, ftLastAccessTime.dwLowDateTime=0xa2225d54, ftLastAccessTime.dwHighDateTime=0x1cbf8eb, ftLastWriteTime.dwLowDateTime=0xa2225d54, ftLastWriteTime.dwHighDateTime=0x1cbf8eb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x381b40 [0100.956] FindClose (in: hFindFile=0x381b40 | out: hFindFile=0x381b40) returned 1 [0100.956] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e704) returned 1 [0100.956] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e710) returned 1 [0100.956] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e744) returned 1 [0100.956] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_32\\Microsoft.GroupPolicy.AdmTmplEditor\\6.1.0.0__31bf3856ad364e35", nBufferLength=0x105, lpBuffer=0x31e24c, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_32\\Microsoft.GroupPolicy.AdmTmplEditor\\6.1.0.0__31bf3856ad364e35", lpFilePart=0x0) returned 0x58 [0100.957] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_32\\Microsoft.GroupPolicy.AdmTmplEditor\\6.1.0.0__31bf3856ad364e35\\", nBufferLength=0x105, lpBuffer=0x31e220, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_32\\Microsoft.GroupPolicy.AdmTmplEditor\\6.1.0.0__31bf3856ad364e35\\", lpFilePart=0x0) returned 0x59 [0100.957] FindFirstFileW (in: lpFileName="C:\\Windows\\assembly\\GAC_32\\Microsoft.GroupPolicy.AdmTmplEditor\\6.1.0.0__31bf3856ad364e35\\*", lpFindFileData=0x31e46c | out: lpFindFileData=0x31e46c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa2225d54, ftCreationTime.dwHighDateTime=0x1cbf8eb, ftLastAccessTime.dwLowDateTime=0xa2225d54, ftLastAccessTime.dwHighDateTime=0x1cbf8eb, ftLastWriteTime.dwLowDateTime=0xa2225d54, ftLastWriteTime.dwHighDateTime=0x1cbf8eb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x381b40 [0100.957] FindClose (in: hFindFile=0x381b40 | out: hFindFile=0x381b40) returned 1 [0100.957] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e704) returned 1 [0100.957] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e710) returned 1 [0100.957] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e7bc) returned 1 [0100.957] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_32\\Microsoft.GroupPolicy.AdmTmplEditor.Resources", nBufferLength=0x105, lpBuffer=0x31e2c4, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_32\\Microsoft.GroupPolicy.AdmTmplEditor.Resources", lpFilePart=0x0) returned 0x48 [0100.957] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_32\\Microsoft.GroupPolicy.AdmTmplEditor.Resources\\", nBufferLength=0x105, lpBuffer=0x31e298, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_32\\Microsoft.GroupPolicy.AdmTmplEditor.Resources\\", lpFilePart=0x0) returned 0x49 [0100.957] FindFirstFileW (in: lpFileName="C:\\Windows\\assembly\\GAC_32\\Microsoft.GroupPolicy.AdmTmplEditor.Resources\\*", lpFindFileData=0x31e4e4 | out: lpFindFileData=0x31e4e4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa2225d54, ftCreationTime.dwHighDateTime=0x1cbf8eb, ftLastAccessTime.dwLowDateTime=0xa2225d54, ftLastAccessTime.dwHighDateTime=0x1cbf8eb, ftLastWriteTime.dwLowDateTime=0xa2225d54, ftLastWriteTime.dwHighDateTime=0x1cbf8eb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x381b40 [0100.957] FindClose (in: hFindFile=0x381b40 | out: hFindFile=0x381b40) returned 1 [0100.957] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e77c) returned 1 [0100.957] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e788) returned 1 [0100.957] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e7bc) returned 1 [0100.957] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_32\\Microsoft.GroupPolicy.AdmTmplEditor.Resources", nBufferLength=0x105, lpBuffer=0x31e2c4, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_32\\Microsoft.GroupPolicy.AdmTmplEditor.Resources", lpFilePart=0x0) returned 0x48 [0100.957] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_32\\Microsoft.GroupPolicy.AdmTmplEditor.Resources\\", nBufferLength=0x105, lpBuffer=0x31e298, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_32\\Microsoft.GroupPolicy.AdmTmplEditor.Resources\\", lpFilePart=0x0) returned 0x49 [0100.957] FindFirstFileW (in: lpFileName="C:\\Windows\\assembly\\GAC_32\\Microsoft.GroupPolicy.AdmTmplEditor.Resources\\*", lpFindFileData=0x31e4e4 | out: lpFindFileData=0x31e4e4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa2225d54, ftCreationTime.dwHighDateTime=0x1cbf8eb, ftLastAccessTime.dwLowDateTime=0xa2225d54, ftLastAccessTime.dwHighDateTime=0x1cbf8eb, ftLastWriteTime.dwLowDateTime=0xa2225d54, ftLastWriteTime.dwHighDateTime=0x1cbf8eb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x381b40 [0100.958] FindClose (in: hFindFile=0x381b40 | out: hFindFile=0x381b40) returned 1 [0100.958] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e77c) returned 1 [0100.958] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_32\\Microsoft.GroupPolicy.AdmTmplEditor.Resources\\6.1.0.0_en_31bf3856ad364e35", nBufferLength=0x105, lpBuffer=0x31e24c, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_32\\Microsoft.GroupPolicy.AdmTmplEditor.Resources\\6.1.0.0_en_31bf3856ad364e35", lpFilePart=0x0) returned 0x64 [0100.958] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_32\\Microsoft.GroupPolicy.AdmTmplEditor.Resources\\6.1.0.0_en_31bf3856ad364e35\\", nBufferLength=0x105, lpBuffer=0x31e220, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_32\\Microsoft.GroupPolicy.AdmTmplEditor.Resources\\6.1.0.0_en_31bf3856ad364e35\\", lpFilePart=0x0) returned 0x65 [0100.958] FindFirstFileW (in: lpFileName="C:\\Windows\\assembly\\GAC_32\\Microsoft.GroupPolicy.AdmTmplEditor.Resources\\6.1.0.0_en_31bf3856ad364e35\\*", lpFindFileData=0x31e46c | out: lpFindFileData=0x31e46c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa2225d54, ftCreationTime.dwHighDateTime=0x1cbf8eb, ftLastAccessTime.dwLowDateTime=0xa2225d54, ftLastAccessTime.dwHighDateTime=0x1cbf8eb, ftLastWriteTime.dwLowDateTime=0xa2225d54, ftLastWriteTime.dwHighDateTime=0x1cbf8eb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x381b40 [0100.958] FindClose (in: hFindFile=0x381b40 | out: hFindFile=0x381b40) returned 1 [0100.958] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_32\\Microsoft.GroupPolicy.AdmTmplEditor.Resources\\6.1.0.0_en_31bf3856ad364e35", nBufferLength=0x105, lpBuffer=0x31e24c, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_32\\Microsoft.GroupPolicy.AdmTmplEditor.Resources\\6.1.0.0_en_31bf3856ad364e35", lpFilePart=0x0) returned 0x64 [0100.958] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_32\\Microsoft.GroupPolicy.AdmTmplEditor.Resources\\6.1.0.0_en_31bf3856ad364e35\\", nBufferLength=0x105, lpBuffer=0x31e220, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_32\\Microsoft.GroupPolicy.AdmTmplEditor.Resources\\6.1.0.0_en_31bf3856ad364e35\\", lpFilePart=0x0) returned 0x65 [0100.958] FindFirstFileW (in: lpFileName="C:\\Windows\\assembly\\GAC_32\\Microsoft.GroupPolicy.AdmTmplEditor.Resources\\6.1.0.0_en_31bf3856ad364e35\\*", lpFindFileData=0x31e46c | out: lpFindFileData=0x31e46c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa2225d54, ftCreationTime.dwHighDateTime=0x1cbf8eb, ftLastAccessTime.dwLowDateTime=0xa2225d54, ftLastAccessTime.dwHighDateTime=0x1cbf8eb, ftLastWriteTime.dwLowDateTime=0xa2225d54, ftLastWriteTime.dwHighDateTime=0x1cbf8eb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x381b40 [0100.958] FindClose (in: hFindFile=0x381b40 | out: hFindFile=0x381b40) returned 1 [0100.958] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_32\\Microsoft.GroupPolicy.Interop", nBufferLength=0x105, lpBuffer=0x31e2c4, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_32\\Microsoft.GroupPolicy.Interop", lpFilePart=0x0) returned 0x38 [0100.958] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_32\\Microsoft.GroupPolicy.Interop\\", nBufferLength=0x105, lpBuffer=0x31e298, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_32\\Microsoft.GroupPolicy.Interop\\", lpFilePart=0x0) returned 0x39 [0100.958] FindFirstFileW (in: lpFileName="C:\\Windows\\assembly\\GAC_32\\Microsoft.GroupPolicy.Interop\\*", lpFindFileData=0x31e4e4 | out: lpFindFileData=0x31e4e4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa21ffae5, ftCreationTime.dwHighDateTime=0x1cbf8eb, ftLastAccessTime.dwLowDateTime=0xa21ffae5, ftLastAccessTime.dwHighDateTime=0x1cbf8eb, ftLastWriteTime.dwLowDateTime=0xa21ffae5, ftLastWriteTime.dwHighDateTime=0x1cbf8eb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x381b40 [0100.959] FindClose (in: hFindFile=0x381b40 | out: hFindFile=0x381b40) returned 1 [0100.959] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_32\\Microsoft.GroupPolicy.Interop", nBufferLength=0x105, lpBuffer=0x31e2c4, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_32\\Microsoft.GroupPolicy.Interop", lpFilePart=0x0) returned 0x38 [0100.959] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_32\\Microsoft.GroupPolicy.Interop\\", nBufferLength=0x105, lpBuffer=0x31e298, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_32\\Microsoft.GroupPolicy.Interop\\", lpFilePart=0x0) returned 0x39 [0100.959] FindFirstFileW (in: lpFileName="C:\\Windows\\assembly\\GAC_32\\Microsoft.GroupPolicy.Interop\\*", lpFindFileData=0x31e4e4 | out: lpFindFileData=0x31e4e4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa21ffae5, ftCreationTime.dwHighDateTime=0x1cbf8eb, ftLastAccessTime.dwLowDateTime=0xa21ffae5, ftLastAccessTime.dwHighDateTime=0x1cbf8eb, ftLastWriteTime.dwLowDateTime=0xa21ffae5, ftLastWriteTime.dwHighDateTime=0x1cbf8eb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x381b40 [0100.959] FindClose (in: hFindFile=0x381b40 | out: hFindFile=0x381b40) returned 1 [0100.959] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_32\\Microsoft.GroupPolicy.Interop\\2.0.0.0__31bf3856ad364e35", nBufferLength=0x105, lpBuffer=0x31e24c, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_32\\Microsoft.GroupPolicy.Interop\\2.0.0.0__31bf3856ad364e35", lpFilePart=0x0) returned 0x52 [0100.959] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_32\\Microsoft.GroupPolicy.Interop\\2.0.0.0__31bf3856ad364e35\\", nBufferLength=0x105, lpBuffer=0x31e220, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_32\\Microsoft.GroupPolicy.Interop\\2.0.0.0__31bf3856ad364e35\\", lpFilePart=0x0) returned 0x53 [0100.959] FindFirstFileW (in: lpFileName="C:\\Windows\\assembly\\GAC_32\\Microsoft.GroupPolicy.Interop\\2.0.0.0__31bf3856ad364e35\\*", lpFindFileData=0x31e46c | out: lpFindFileData=0x31e46c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa21ffae5, ftCreationTime.dwHighDateTime=0x1cbf8eb, ftLastAccessTime.dwLowDateTime=0xa21ffae5, ftLastAccessTime.dwHighDateTime=0x1cbf8eb, ftLastWriteTime.dwLowDateTime=0xa21ffae5, ftLastWriteTime.dwHighDateTime=0x1cbf8eb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x381b40 [0100.959] FindClose (in: hFindFile=0x381b40 | out: hFindFile=0x381b40) returned 1 [0100.959] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_32\\Microsoft.GroupPolicy.Interop\\2.0.0.0__31bf3856ad364e35", nBufferLength=0x105, lpBuffer=0x31e24c, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_32\\Microsoft.GroupPolicy.Interop\\2.0.0.0__31bf3856ad364e35", lpFilePart=0x0) returned 0x52 [0100.959] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_32\\Microsoft.GroupPolicy.Interop\\2.0.0.0__31bf3856ad364e35\\", nBufferLength=0x105, lpBuffer=0x31e220, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_32\\Microsoft.GroupPolicy.Interop\\2.0.0.0__31bf3856ad364e35\\", lpFilePart=0x0) returned 0x53 [0100.959] FindFirstFileW (in: lpFileName="C:\\Windows\\assembly\\GAC_32\\Microsoft.GroupPolicy.Interop\\2.0.0.0__31bf3856ad364e35\\*", lpFindFileData=0x31e46c | out: lpFindFileData=0x31e46c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa21ffae5, ftCreationTime.dwHighDateTime=0x1cbf8eb, ftLastAccessTime.dwLowDateTime=0xa21ffae5, ftLastAccessTime.dwHighDateTime=0x1cbf8eb, ftLastWriteTime.dwLowDateTime=0xa21ffae5, ftLastWriteTime.dwHighDateTime=0x1cbf8eb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x381b40 [0100.960] FindClose (in: hFindFile=0x381b40 | out: hFindFile=0x381b40) returned 1 [0100.960] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_32\\Microsoft.Ink", nBufferLength=0x105, lpBuffer=0x31e2c4, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_32\\Microsoft.Ink", lpFilePart=0x0) returned 0x28 [0100.960] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_32\\Microsoft.Ink\\", nBufferLength=0x105, lpBuffer=0x31e298, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_32\\Microsoft.Ink\\", lpFilePart=0x0) returned 0x29 [0100.960] FindFirstFileW (in: lpFileName="C:\\Windows\\assembly\\GAC_32\\Microsoft.Ink\\*", lpFindFileData=0x31e4e4 | out: lpFindFileData=0x31e4e4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x81a4fe61, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x81a4fe61, ftLastAccessTime.dwHighDateTime=0x1ca0444, ftLastWriteTime.dwLowDateTime=0x81a4fe61, ftLastWriteTime.dwHighDateTime=0x1ca0444, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x381b40 [0100.960] FindClose (in: hFindFile=0x381b40 | out: hFindFile=0x381b40) returned 1 [0100.960] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_32\\Microsoft.Ink", nBufferLength=0x105, lpBuffer=0x31e2c4, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_32\\Microsoft.Ink", lpFilePart=0x0) returned 0x28 [0100.960] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_32\\Microsoft.Ink\\", nBufferLength=0x105, lpBuffer=0x31e298, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_32\\Microsoft.Ink\\", lpFilePart=0x0) returned 0x29 [0100.960] FindFirstFileW (in: lpFileName="C:\\Windows\\assembly\\GAC_32\\Microsoft.Ink\\*", lpFindFileData=0x31e4e4 | out: lpFindFileData=0x31e4e4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x81a4fe61, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x81a4fe61, ftLastAccessTime.dwHighDateTime=0x1ca0444, ftLastWriteTime.dwLowDateTime=0x81a4fe61, ftLastWriteTime.dwHighDateTime=0x1ca0444, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x381b40 [0100.960] FindClose (in: hFindFile=0x381b40 | out: hFindFile=0x381b40) returned 1 [0100.960] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_32\\Microsoft.Ink\\6.1.0.0__31bf3856ad364e35", nBufferLength=0x105, lpBuffer=0x31e24c, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_32\\Microsoft.Ink\\6.1.0.0__31bf3856ad364e35", lpFilePart=0x0) returned 0x42 [0100.960] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_32\\Microsoft.Ink\\6.1.0.0__31bf3856ad364e35\\", nBufferLength=0x105, lpBuffer=0x31e220, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_32\\Microsoft.Ink\\6.1.0.0__31bf3856ad364e35\\", lpFilePart=0x0) returned 0x43 [0100.960] FindFirstFileW (in: lpFileName="C:\\Windows\\assembly\\GAC_32\\Microsoft.Ink\\6.1.0.0__31bf3856ad364e35\\*", lpFindFileData=0x31e46c | out: lpFindFileData=0x31e46c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x81a4fe61, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x81a4fe61, ftLastAccessTime.dwHighDateTime=0x1ca0444, ftLastWriteTime.dwLowDateTime=0x81a4fe61, ftLastWriteTime.dwHighDateTime=0x1ca0444, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x381b40 [0100.961] FindClose (in: hFindFile=0x381b40 | out: hFindFile=0x381b40) returned 1 [0100.961] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_32\\Microsoft.Ink\\6.1.0.0__31bf3856ad364e35", nBufferLength=0x105, lpBuffer=0x31e24c, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_32\\Microsoft.Ink\\6.1.0.0__31bf3856ad364e35", lpFilePart=0x0) returned 0x42 [0100.961] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_32\\Microsoft.Ink\\6.1.0.0__31bf3856ad364e35\\", nBufferLength=0x105, lpBuffer=0x31e220, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_32\\Microsoft.Ink\\6.1.0.0__31bf3856ad364e35\\", lpFilePart=0x0) returned 0x43 [0100.961] FindFirstFileW (in: lpFileName="C:\\Windows\\assembly\\GAC_32\\Microsoft.Ink\\6.1.0.0__31bf3856ad364e35\\*", lpFindFileData=0x31e46c | out: lpFindFileData=0x31e46c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x81a4fe61, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x81a4fe61, ftLastAccessTime.dwHighDateTime=0x1ca0444, ftLastWriteTime.dwLowDateTime=0x81a4fe61, ftLastWriteTime.dwHighDateTime=0x1ca0444, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x381b40 [0100.961] FindClose (in: hFindFile=0x381b40 | out: hFindFile=0x381b40) returned 1 [0100.961] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_32\\Microsoft.Interop.Security.AzRoles", nBufferLength=0x105, lpBuffer=0x31e2c4, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_32\\Microsoft.Interop.Security.AzRoles", lpFilePart=0x0) returned 0x3d [0100.961] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_32\\Microsoft.Interop.Security.AzRoles\\", nBufferLength=0x105, lpBuffer=0x31e298, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_32\\Microsoft.Interop.Security.AzRoles\\", lpFilePart=0x0) returned 0x3e [0100.961] FindFirstFileW (in: lpFileName="C:\\Windows\\assembly\\GAC_32\\Microsoft.Interop.Security.AzRoles\\*", lpFindFileData=0x31e4e4 | out: lpFindFileData=0x31e4e4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfdb7eb8a, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfdb7eb8a, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xfdb7eb8a, ftLastWriteTime.dwHighDateTime=0x1ca0431, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x381b40 [0100.961] FindClose (in: hFindFile=0x381b40 | out: hFindFile=0x381b40) returned 1 [0100.961] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_32\\Microsoft.Interop.Security.AzRoles", nBufferLength=0x105, lpBuffer=0x31e2c4, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_32\\Microsoft.Interop.Security.AzRoles", lpFilePart=0x0) returned 0x3d [0100.961] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_32\\Microsoft.Interop.Security.AzRoles\\", nBufferLength=0x105, lpBuffer=0x31e298, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_32\\Microsoft.Interop.Security.AzRoles\\", lpFilePart=0x0) returned 0x3e [0100.961] FindFirstFileW (in: lpFileName="C:\\Windows\\assembly\\GAC_32\\Microsoft.Interop.Security.AzRoles\\*", lpFindFileData=0x31e4e4 | out: lpFindFileData=0x31e4e4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfdb7eb8a, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfdb7eb8a, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xfdb7eb8a, ftLastWriteTime.dwHighDateTime=0x1ca0431, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x381b40 [0100.962] FindClose (in: hFindFile=0x381b40 | out: hFindFile=0x381b40) returned 1 [0100.962] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_32\\Microsoft.Interop.Security.AzRoles\\2.0.0.0__31bf3856ad364e35", nBufferLength=0x105, lpBuffer=0x31e24c, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_32\\Microsoft.Interop.Security.AzRoles\\2.0.0.0__31bf3856ad364e35", lpFilePart=0x0) returned 0x57 [0100.962] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_32\\Microsoft.Interop.Security.AzRoles\\2.0.0.0__31bf3856ad364e35\\", nBufferLength=0x105, lpBuffer=0x31e220, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_32\\Microsoft.Interop.Security.AzRoles\\2.0.0.0__31bf3856ad364e35\\", lpFilePart=0x0) returned 0x58 [0100.962] FindFirstFileW (in: lpFileName="C:\\Windows\\assembly\\GAC_32\\Microsoft.Interop.Security.AzRoles\\2.0.0.0__31bf3856ad364e35\\*", lpFindFileData=0x31e46c | out: lpFindFileData=0x31e46c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfdb7eb8a, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfdb7eb8a, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xfdb7eb8a, ftLastWriteTime.dwHighDateTime=0x1ca0431, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x381b40 [0100.962] FindClose (in: hFindFile=0x381b40 | out: hFindFile=0x381b40) returned 1 [0100.962] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_32\\Microsoft.Interop.Security.AzRoles\\2.0.0.0__31bf3856ad364e35", nBufferLength=0x105, lpBuffer=0x31e24c, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_32\\Microsoft.Interop.Security.AzRoles\\2.0.0.0__31bf3856ad364e35", lpFilePart=0x0) returned 0x57 [0100.962] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_32\\Microsoft.Interop.Security.AzRoles\\2.0.0.0__31bf3856ad364e35\\", nBufferLength=0x105, lpBuffer=0x31e220, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_32\\Microsoft.Interop.Security.AzRoles\\2.0.0.0__31bf3856ad364e35\\", lpFilePart=0x0) returned 0x58 [0100.962] FindFirstFileW (in: lpFileName="C:\\Windows\\assembly\\GAC_32\\Microsoft.Interop.Security.AzRoles\\2.0.0.0__31bf3856ad364e35\\*", lpFindFileData=0x31e46c | out: lpFindFileData=0x31e46c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfdb7eb8a, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfdb7eb8a, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xfdb7eb8a, ftLastWriteTime.dwHighDateTime=0x1ca0431, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x381b40 [0100.962] FindClose (in: hFindFile=0x381b40 | out: hFindFile=0x381b40) returned 1 [0100.962] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_32\\Microsoft.Security.ApplicationId.PolicyManagement.PolicyEngineApi.Interop", nBufferLength=0x105, lpBuffer=0x31e2c4, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_32\\Microsoft.Security.ApplicationId.PolicyManagement.PolicyEngineApi.Interop", lpFilePart=0x0) returned 0x64 [0100.962] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_32\\Microsoft.Security.ApplicationId.PolicyManagement.PolicyEngineApi.Interop\\", nBufferLength=0x105, lpBuffer=0x31e298, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_32\\Microsoft.Security.ApplicationId.PolicyManagement.PolicyEngineApi.Interop\\", lpFilePart=0x0) returned 0x65 [0100.962] FindFirstFileW (in: lpFileName="C:\\Windows\\assembly\\GAC_32\\Microsoft.Security.ApplicationId.PolicyManagement.PolicyEngineApi.Interop\\*", lpFindFileData=0x31e4e4 | out: lpFindFileData=0x31e4e4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa2225d54, ftCreationTime.dwHighDateTime=0x1cbf8eb, ftLastAccessTime.dwLowDateTime=0xa2225d54, ftLastAccessTime.dwHighDateTime=0x1cbf8eb, ftLastWriteTime.dwLowDateTime=0xa2225d54, ftLastWriteTime.dwHighDateTime=0x1cbf8eb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x381b40 [0100.963] FindClose (in: hFindFile=0x381b40 | out: hFindFile=0x381b40) returned 1 [0100.963] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_32\\Microsoft.Security.ApplicationId.PolicyManagement.PolicyEngineApi.Interop", nBufferLength=0x105, lpBuffer=0x31e2c4, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_32\\Microsoft.Security.ApplicationId.PolicyManagement.PolicyEngineApi.Interop", lpFilePart=0x0) returned 0x64 [0100.963] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_32\\Microsoft.Security.ApplicationId.PolicyManagement.PolicyEngineApi.Interop\\", nBufferLength=0x105, lpBuffer=0x31e298, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_32\\Microsoft.Security.ApplicationId.PolicyManagement.PolicyEngineApi.Interop\\", lpFilePart=0x0) returned 0x65 [0100.963] FindFirstFileW (in: lpFileName="C:\\Windows\\assembly\\GAC_32\\Microsoft.Security.ApplicationId.PolicyManagement.PolicyEngineApi.Interop\\*", lpFindFileData=0x31e4e4 | out: lpFindFileData=0x31e4e4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa2225d54, ftCreationTime.dwHighDateTime=0x1cbf8eb, ftLastAccessTime.dwLowDateTime=0xa2225d54, ftLastAccessTime.dwHighDateTime=0x1cbf8eb, ftLastWriteTime.dwLowDateTime=0xa2225d54, ftLastWriteTime.dwHighDateTime=0x1cbf8eb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x381b40 [0100.963] FindClose (in: hFindFile=0x381b40 | out: hFindFile=0x381b40) returned 1 [0100.963] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_32\\Microsoft.Security.ApplicationId.PolicyManagement.PolicyEngineApi.Interop\\6.1.0.0__31bf3856ad364e35", nBufferLength=0x105, lpBuffer=0x31e24c, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_32\\Microsoft.Security.ApplicationId.PolicyManagement.PolicyEngineApi.Interop\\6.1.0.0__31bf3856ad364e35", lpFilePart=0x0) returned 0x7e [0100.963] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_32\\Microsoft.Security.ApplicationId.PolicyManagement.PolicyEngineApi.Interop\\6.1.0.0__31bf3856ad364e35\\", nBufferLength=0x105, lpBuffer=0x31e220, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_32\\Microsoft.Security.ApplicationId.PolicyManagement.PolicyEngineApi.Interop\\6.1.0.0__31bf3856ad364e35\\", lpFilePart=0x0) returned 0x7f [0100.963] FindFirstFileW (in: lpFileName="C:\\Windows\\assembly\\GAC_32\\Microsoft.Security.ApplicationId.PolicyManagement.PolicyEngineApi.Interop\\6.1.0.0__31bf3856ad364e35\\*", lpFindFileData=0x31e46c | out: lpFindFileData=0x31e46c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa2225d54, ftCreationTime.dwHighDateTime=0x1cbf8eb, ftLastAccessTime.dwLowDateTime=0xa2225d54, ftLastAccessTime.dwHighDateTime=0x1cbf8eb, ftLastWriteTime.dwLowDateTime=0xa2225d54, ftLastWriteTime.dwHighDateTime=0x1cbf8eb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x381b40 [0100.963] FindClose (in: hFindFile=0x381b40 | out: hFindFile=0x381b40) returned 1 [0100.963] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_32\\Microsoft.Security.ApplicationId.PolicyManagement.PolicyEngineApi.Interop\\6.1.0.0__31bf3856ad364e35", nBufferLength=0x105, lpBuffer=0x31e24c, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_32\\Microsoft.Security.ApplicationId.PolicyManagement.PolicyEngineApi.Interop\\6.1.0.0__31bf3856ad364e35", lpFilePart=0x0) returned 0x7e [0100.963] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_32\\Microsoft.Security.ApplicationId.PolicyManagement.PolicyEngineApi.Interop\\6.1.0.0__31bf3856ad364e35\\", nBufferLength=0x105, lpBuffer=0x31e220, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_32\\Microsoft.Security.ApplicationId.PolicyManagement.PolicyEngineApi.Interop\\6.1.0.0__31bf3856ad364e35\\", lpFilePart=0x0) returned 0x7f [0100.963] FindFirstFileW (in: lpFileName="C:\\Windows\\assembly\\GAC_32\\Microsoft.Security.ApplicationId.PolicyManagement.PolicyEngineApi.Interop\\6.1.0.0__31bf3856ad364e35\\*", lpFindFileData=0x31e46c | out: lpFindFileData=0x31e46c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa2225d54, ftCreationTime.dwHighDateTime=0x1cbf8eb, ftLastAccessTime.dwLowDateTime=0xa2225d54, ftLastAccessTime.dwHighDateTime=0x1cbf8eb, ftLastWriteTime.dwLowDateTime=0xa2225d54, ftLastWriteTime.dwHighDateTime=0x1cbf8eb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x381b40 [0100.964] FindClose (in: hFindFile=0x381b40 | out: hFindFile=0x381b40) returned 1 [0100.964] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_32\\Microsoft.Transactions.Bridge.Dtc", nBufferLength=0x105, lpBuffer=0x31e2c4, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_32\\Microsoft.Transactions.Bridge.Dtc", lpFilePart=0x0) returned 0x3c [0100.964] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_32\\Microsoft.Transactions.Bridge.Dtc\\", nBufferLength=0x105, lpBuffer=0x31e298, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_32\\Microsoft.Transactions.Bridge.Dtc\\", lpFilePart=0x0) returned 0x3d [0100.964] FindFirstFileW (in: lpFileName="C:\\Windows\\assembly\\GAC_32\\Microsoft.Transactions.Bridge.Dtc\\*", lpFindFileData=0x31e4e4 | out: lpFindFileData=0x31e4e4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x819dda40, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x819dda40, ftLastAccessTime.dwHighDateTime=0x1ca0444, ftLastWriteTime.dwLowDateTime=0x819dda40, ftLastWriteTime.dwHighDateTime=0x1ca0444, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x381b40 [0100.964] FindClose (in: hFindFile=0x381b40 | out: hFindFile=0x381b40) returned 1 [0100.964] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_32\\Microsoft.Transactions.Bridge.Dtc", nBufferLength=0x105, lpBuffer=0x31e2c4, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_32\\Microsoft.Transactions.Bridge.Dtc", lpFilePart=0x0) returned 0x3c [0100.964] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_32\\Microsoft.Transactions.Bridge.Dtc\\", nBufferLength=0x105, lpBuffer=0x31e298, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_32\\Microsoft.Transactions.Bridge.Dtc\\", lpFilePart=0x0) returned 0x3d [0100.964] FindFirstFileW (in: lpFileName="C:\\Windows\\assembly\\GAC_32\\Microsoft.Transactions.Bridge.Dtc\\*", lpFindFileData=0x31e4e4 | out: lpFindFileData=0x31e4e4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x819dda40, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x819dda40, ftLastAccessTime.dwHighDateTime=0x1ca0444, ftLastWriteTime.dwLowDateTime=0x819dda40, ftLastWriteTime.dwHighDateTime=0x1ca0444, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x381b40 [0100.964] FindClose (in: hFindFile=0x381b40 | out: hFindFile=0x381b40) returned 1 [0100.964] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_32\\Microsoft.Transactions.Bridge.Dtc\\3.0.0.0__b03f5f7f11d50a3a", nBufferLength=0x105, lpBuffer=0x31e24c, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_32\\Microsoft.Transactions.Bridge.Dtc\\3.0.0.0__b03f5f7f11d50a3a", lpFilePart=0x0) returned 0x56 [0100.964] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_32\\Microsoft.Transactions.Bridge.Dtc\\3.0.0.0__b03f5f7f11d50a3a\\", nBufferLength=0x105, lpBuffer=0x31e220, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_32\\Microsoft.Transactions.Bridge.Dtc\\3.0.0.0__b03f5f7f11d50a3a\\", lpFilePart=0x0) returned 0x57 [0100.964] FindFirstFileW (in: lpFileName="C:\\Windows\\assembly\\GAC_32\\Microsoft.Transactions.Bridge.Dtc\\3.0.0.0__b03f5f7f11d50a3a\\*", lpFindFileData=0x31e46c | out: lpFindFileData=0x31e46c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x819dda40, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0xc091bde9, ftLastAccessTime.dwHighDateTime=0x1cb892c, ftLastWriteTime.dwLowDateTime=0xc091bde9, ftLastWriteTime.dwHighDateTime=0x1cb892c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x381b40 [0100.965] FindClose (in: hFindFile=0x381b40 | out: hFindFile=0x381b40) returned 1 [0100.965] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_32\\Microsoft.Transactions.Bridge.Dtc\\3.0.0.0__b03f5f7f11d50a3a", nBufferLength=0x105, lpBuffer=0x31e24c, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_32\\Microsoft.Transactions.Bridge.Dtc\\3.0.0.0__b03f5f7f11d50a3a", lpFilePart=0x0) returned 0x56 [0100.965] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_32\\Microsoft.Transactions.Bridge.Dtc\\3.0.0.0__b03f5f7f11d50a3a\\", nBufferLength=0x105, lpBuffer=0x31e220, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_32\\Microsoft.Transactions.Bridge.Dtc\\3.0.0.0__b03f5f7f11d50a3a\\", lpFilePart=0x0) returned 0x57 [0100.965] FindFirstFileW (in: lpFileName="C:\\Windows\\assembly\\GAC_32\\Microsoft.Transactions.Bridge.Dtc\\3.0.0.0__b03f5f7f11d50a3a\\*", lpFindFileData=0x31e46c | out: lpFindFileData=0x31e46c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x819dda40, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0xc091bde9, ftLastAccessTime.dwHighDateTime=0x1cb892c, ftLastWriteTime.dwLowDateTime=0xc091bde9, ftLastWriteTime.dwHighDateTime=0x1cb892c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x381b40 [0100.965] FindClose (in: hFindFile=0x381b40 | out: hFindFile=0x381b40) returned 1 [0100.965] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_32\\Microsoft.VisualStudio.Tools.Applications.InteropAdapter", nBufferLength=0x105, lpBuffer=0x31e2c4, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_32\\Microsoft.VisualStudio.Tools.Applications.InteropAdapter", lpFilePart=0x0) returned 0x53 [0100.965] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_32\\Microsoft.VisualStudio.Tools.Applications.InteropAdapter\\", nBufferLength=0x105, lpBuffer=0x31e298, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_32\\Microsoft.VisualStudio.Tools.Applications.InteropAdapter\\", lpFilePart=0x0) returned 0x54 [0100.965] FindFirstFileW (in: lpFileName="C:\\Windows\\assembly\\GAC_32\\Microsoft.VisualStudio.Tools.Applications.InteropAdapter\\*", lpFindFileData=0x31e4e4 | out: lpFindFileData=0x31e4e4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa69b8e30, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0xa69b8e30, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xa69b8e30, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x381b40 [0100.966] FindClose (in: hFindFile=0x381b40 | out: hFindFile=0x381b40) returned 1 [0100.966] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_32\\Microsoft.VisualStudio.Tools.Applications.InteropAdapter", nBufferLength=0x105, lpBuffer=0x31e2c4, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_32\\Microsoft.VisualStudio.Tools.Applications.InteropAdapter", lpFilePart=0x0) returned 0x53 [0100.966] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_32\\Microsoft.VisualStudio.Tools.Applications.InteropAdapter\\", nBufferLength=0x105, lpBuffer=0x31e298, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_32\\Microsoft.VisualStudio.Tools.Applications.InteropAdapter\\", lpFilePart=0x0) returned 0x54 [0100.966] FindFirstFileW (in: lpFileName="C:\\Windows\\assembly\\GAC_32\\Microsoft.VisualStudio.Tools.Applications.InteropAdapter\\*", lpFindFileData=0x31e4e4 | out: lpFindFileData=0x31e4e4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa69b8e30, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0xa69b8e30, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xa69b8e30, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x381b40 [0100.966] FindClose (in: hFindFile=0x381b40 | out: hFindFile=0x381b40) returned 1 [0100.966] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_32\\Microsoft.VisualStudio.Tools.Applications.InteropAdapter\\8.0.0.0__b03f5f7f11d50a3a", nBufferLength=0x105, lpBuffer=0x31e24c, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_32\\Microsoft.VisualStudio.Tools.Applications.InteropAdapter\\8.0.0.0__b03f5f7f11d50a3a", lpFilePart=0x0) returned 0x6d [0100.966] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_32\\Microsoft.VisualStudio.Tools.Applications.InteropAdapter\\8.0.0.0__b03f5f7f11d50a3a\\", nBufferLength=0x105, lpBuffer=0x31e220, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_32\\Microsoft.VisualStudio.Tools.Applications.InteropAdapter\\8.0.0.0__b03f5f7f11d50a3a\\", lpFilePart=0x0) returned 0x6e [0100.966] FindFirstFileW (in: lpFileName="C:\\Windows\\assembly\\GAC_32\\Microsoft.VisualStudio.Tools.Applications.InteropAdapter\\8.0.0.0__b03f5f7f11d50a3a\\*", lpFindFileData=0x31e46c | out: lpFindFileData=0x31e46c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5266ea30, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x5266ea30, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x5266ea30, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x381b40 [0100.967] FindClose (in: hFindFile=0x381b40 | out: hFindFile=0x381b40) returned 1 [0100.967] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_32\\Microsoft.VisualStudio.Tools.Applications.InteropAdapter\\8.0.0.0__b03f5f7f11d50a3a", nBufferLength=0x105, lpBuffer=0x31e24c, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_32\\Microsoft.VisualStudio.Tools.Applications.InteropAdapter\\8.0.0.0__b03f5f7f11d50a3a", lpFilePart=0x0) returned 0x6d [0100.967] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_32\\Microsoft.VisualStudio.Tools.Applications.InteropAdapter\\8.0.0.0__b03f5f7f11d50a3a\\", nBufferLength=0x105, lpBuffer=0x31e220, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_32\\Microsoft.VisualStudio.Tools.Applications.InteropAdapter\\8.0.0.0__b03f5f7f11d50a3a\\", lpFilePart=0x0) returned 0x6e [0100.967] FindFirstFileW (in: lpFileName="C:\\Windows\\assembly\\GAC_32\\Microsoft.VisualStudio.Tools.Applications.InteropAdapter\\8.0.0.0__b03f5f7f11d50a3a\\*", lpFindFileData=0x31e46c | out: lpFindFileData=0x31e46c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5266ea30, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x5266ea30, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x5266ea30, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x381b40 [0100.967] FindClose (in: hFindFile=0x381b40 | out: hFindFile=0x381b40) returned 1 [0100.967] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_32\\Microsoft.Windows.Diagnosis.SDEngine", nBufferLength=0x105, lpBuffer=0x31e2c4, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_32\\Microsoft.Windows.Diagnosis.SDEngine", lpFilePart=0x0) returned 0x3f [0100.967] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_32\\Microsoft.Windows.Diagnosis.SDEngine\\", nBufferLength=0x105, lpBuffer=0x31e298, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_32\\Microsoft.Windows.Diagnosis.SDEngine\\", lpFilePart=0x0) returned 0x40 [0100.967] FindFirstFileW (in: lpFileName="C:\\Windows\\assembly\\GAC_32\\Microsoft.Windows.Diagnosis.SDEngine\\*", lpFindFileData=0x31e4e4 | out: lpFindFileData=0x31e4e4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x819b78df, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x819b78df, ftLastAccessTime.dwHighDateTime=0x1ca0444, ftLastWriteTime.dwLowDateTime=0x819b78df, ftLastWriteTime.dwHighDateTime=0x1ca0444, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x381b40 [0100.967] FindClose (in: hFindFile=0x381b40 | out: hFindFile=0x381b40) returned 1 [0100.968] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_32\\Microsoft.Windows.Diagnosis.SDEngine", nBufferLength=0x105, lpBuffer=0x31e2c4, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_32\\Microsoft.Windows.Diagnosis.SDEngine", lpFilePart=0x0) returned 0x3f [0100.968] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_32\\Microsoft.Windows.Diagnosis.SDEngine\\", nBufferLength=0x105, lpBuffer=0x31e298, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_32\\Microsoft.Windows.Diagnosis.SDEngine\\", lpFilePart=0x0) returned 0x40 [0100.968] FindFirstFileW (in: lpFileName="C:\\Windows\\assembly\\GAC_32\\Microsoft.Windows.Diagnosis.SDEngine\\*", lpFindFileData=0x31e4e4 | out: lpFindFileData=0x31e4e4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x819b78df, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x819b78df, ftLastAccessTime.dwHighDateTime=0x1ca0444, ftLastWriteTime.dwLowDateTime=0x819b78df, ftLastWriteTime.dwHighDateTime=0x1ca0444, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x381b40 [0100.968] FindClose (in: hFindFile=0x381b40 | out: hFindFile=0x381b40) returned 1 [0100.968] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_32\\Microsoft.Windows.Diagnosis.SDEngine\\6.1.0.0__31bf3856ad364e35", nBufferLength=0x105, lpBuffer=0x31e24c, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_32\\Microsoft.Windows.Diagnosis.SDEngine\\6.1.0.0__31bf3856ad364e35", lpFilePart=0x0) returned 0x59 [0100.968] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_32\\Microsoft.Windows.Diagnosis.SDEngine\\6.1.0.0__31bf3856ad364e35\\", nBufferLength=0x105, lpBuffer=0x31e220, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_32\\Microsoft.Windows.Diagnosis.SDEngine\\6.1.0.0__31bf3856ad364e35\\", lpFilePart=0x0) returned 0x5a [0100.968] FindFirstFileW (in: lpFileName="C:\\Windows\\assembly\\GAC_32\\Microsoft.Windows.Diagnosis.SDEngine\\6.1.0.0__31bf3856ad364e35\\*", lpFindFileData=0x31e46c | out: lpFindFileData=0x31e46c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x819b78df, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x819b78df, ftLastAccessTime.dwHighDateTime=0x1ca0444, ftLastWriteTime.dwLowDateTime=0x819b78df, ftLastWriteTime.dwHighDateTime=0x1ca0444, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x381b40 [0100.968] FindClose (in: hFindFile=0x381b40 | out: hFindFile=0x381b40) returned 1 [0100.968] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_32\\Microsoft.Windows.Diagnosis.SDEngine\\6.1.0.0__31bf3856ad364e35", nBufferLength=0x105, lpBuffer=0x31e24c, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_32\\Microsoft.Windows.Diagnosis.SDEngine\\6.1.0.0__31bf3856ad364e35", lpFilePart=0x0) returned 0x59 [0100.968] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_32\\Microsoft.Windows.Diagnosis.SDEngine\\6.1.0.0__31bf3856ad364e35\\", nBufferLength=0x105, lpBuffer=0x31e220, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_32\\Microsoft.Windows.Diagnosis.SDEngine\\6.1.0.0__31bf3856ad364e35\\", lpFilePart=0x0) returned 0x5a [0100.968] FindFirstFileW (in: lpFileName="C:\\Windows\\assembly\\GAC_32\\Microsoft.Windows.Diagnosis.SDEngine\\6.1.0.0__31bf3856ad364e35\\*", lpFindFileData=0x31e46c | out: lpFindFileData=0x31e46c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x819b78df, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x819b78df, ftLastAccessTime.dwHighDateTime=0x1ca0444, ftLastWriteTime.dwLowDateTime=0x819b78df, ftLastWriteTime.dwHighDateTime=0x1ca0444, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x381b40 [0100.968] FindClose (in: hFindFile=0x381b40 | out: hFindFile=0x381b40) returned 1 [0100.968] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_32\\MSBuild", nBufferLength=0x105, lpBuffer=0x31e2c4, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_32\\MSBuild", lpFilePart=0x0) returned 0x22 [0100.968] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_32\\MSBuild\\", nBufferLength=0x105, lpBuffer=0x31e298, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_32\\MSBuild\\", lpFilePart=0x0) returned 0x23 [0100.969] FindFirstFileW (in: lpFileName="C:\\Windows\\assembly\\GAC_32\\MSBuild\\*", lpFindFileData=0x31e4e4 | out: lpFindFileData=0x31e4e4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x81a29d00, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x81a29d00, ftLastAccessTime.dwHighDateTime=0x1ca0444, ftLastWriteTime.dwLowDateTime=0x81a29d00, ftLastWriteTime.dwHighDateTime=0x1ca0444, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x381b40 [0100.969] FindClose (in: hFindFile=0x381b40 | out: hFindFile=0x381b40) returned 1 [0100.969] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_32\\MSBuild", nBufferLength=0x105, lpBuffer=0x31e2c4, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_32\\MSBuild", lpFilePart=0x0) returned 0x22 [0100.969] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_32\\MSBuild\\", nBufferLength=0x105, lpBuffer=0x31e298, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_32\\MSBuild\\", lpFilePart=0x0) returned 0x23 [0100.969] FindFirstFileW (in: lpFileName="C:\\Windows\\assembly\\GAC_32\\MSBuild\\*", lpFindFileData=0x31e4e4 | out: lpFindFileData=0x31e4e4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x81a29d00, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x81a29d00, ftLastAccessTime.dwHighDateTime=0x1ca0444, ftLastWriteTime.dwLowDateTime=0x81a29d00, ftLastWriteTime.dwHighDateTime=0x1ca0444, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x381b40 [0100.969] FindClose (in: hFindFile=0x381b40 | out: hFindFile=0x381b40) returned 1 [0100.969] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_32\\MSBuild\\3.5.0.0__b03f5f7f11d50a3a", nBufferLength=0x105, lpBuffer=0x31e24c, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_32\\MSBuild\\3.5.0.0__b03f5f7f11d50a3a", lpFilePart=0x0) returned 0x3c [0100.969] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_32\\MSBuild\\3.5.0.0__b03f5f7f11d50a3a\\", nBufferLength=0x105, lpBuffer=0x31e220, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_32\\MSBuild\\3.5.0.0__b03f5f7f11d50a3a\\", lpFilePart=0x0) returned 0x3d [0100.969] FindFirstFileW (in: lpFileName="C:\\Windows\\assembly\\GAC_32\\MSBuild\\3.5.0.0__b03f5f7f11d50a3a\\*", lpFindFileData=0x31e46c | out: lpFindFileData=0x31e46c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x81a29d00, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x81a29d00, ftLastAccessTime.dwHighDateTime=0x1ca0444, ftLastWriteTime.dwLowDateTime=0x81a29d00, ftLastWriteTime.dwHighDateTime=0x1ca0444, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x381b40 [0100.969] FindClose (in: hFindFile=0x381b40 | out: hFindFile=0x381b40) returned 1 [0100.969] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_32\\MSBuild\\3.5.0.0__b03f5f7f11d50a3a", nBufferLength=0x105, lpBuffer=0x31e24c, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_32\\MSBuild\\3.5.0.0__b03f5f7f11d50a3a", lpFilePart=0x0) returned 0x3c [0100.970] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_32\\MSBuild\\3.5.0.0__b03f5f7f11d50a3a\\", nBufferLength=0x105, lpBuffer=0x31e220, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_32\\MSBuild\\3.5.0.0__b03f5f7f11d50a3a\\", lpFilePart=0x0) returned 0x3d [0100.970] FindFirstFileW (in: lpFileName="C:\\Windows\\assembly\\GAC_32\\MSBuild\\3.5.0.0__b03f5f7f11d50a3a\\*", lpFindFileData=0x31e46c | out: lpFindFileData=0x31e46c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x81a29d00, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x81a29d00, ftLastAccessTime.dwHighDateTime=0x1ca0444, ftLastWriteTime.dwLowDateTime=0x81a29d00, ftLastWriteTime.dwHighDateTime=0x1ca0444, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x381b40 [0100.970] FindClose (in: hFindFile=0x381b40 | out: hFindFile=0x381b40) returned 1 [0100.970] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_32\\mscorlib", nBufferLength=0x105, lpBuffer=0x31e2c4, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_32\\mscorlib", lpFilePart=0x0) returned 0x23 [0100.970] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_32\\mscorlib\\", nBufferLength=0x105, lpBuffer=0x31e298, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_32\\mscorlib\\", lpFilePart=0x0) returned 0x24 [0100.970] FindFirstFileW (in: lpFileName="C:\\Windows\\assembly\\GAC_32\\mscorlib\\*", lpFindFileData=0x31e4e4 | out: lpFindFileData=0x31e4e4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfdb7eb8a, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfdb7eb8a, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xfdb7eb8a, ftLastWriteTime.dwHighDateTime=0x1ca0431, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x381b40 [0100.970] FindClose (in: hFindFile=0x381b40 | out: hFindFile=0x381b40) returned 1 [0100.970] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_32\\mscorlib", nBufferLength=0x105, lpBuffer=0x31e2c4, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_32\\mscorlib", lpFilePart=0x0) returned 0x23 [0100.970] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_32\\mscorlib\\", nBufferLength=0x105, lpBuffer=0x31e298, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_32\\mscorlib\\", lpFilePart=0x0) returned 0x24 [0100.970] FindFirstFileW (in: lpFileName="C:\\Windows\\assembly\\GAC_32\\mscorlib\\*", lpFindFileData=0x31e4e4 | out: lpFindFileData=0x31e4e4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfdb7eb8a, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfdb7eb8a, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xfdb7eb8a, ftLastWriteTime.dwHighDateTime=0x1ca0431, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x381b40 [0100.970] FindClose (in: hFindFile=0x381b40 | out: hFindFile=0x381b40) returned 1 [0100.970] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_32\\mscorlib\\2.0.0.0__b77a5c561934e089", nBufferLength=0x105, lpBuffer=0x31e24c, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_32\\mscorlib\\2.0.0.0__b77a5c561934e089", lpFilePart=0x0) returned 0x3d [0100.970] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_32\\mscorlib\\2.0.0.0__b77a5c561934e089\\", nBufferLength=0x105, lpBuffer=0x31e220, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_32\\mscorlib\\2.0.0.0__b77a5c561934e089\\", lpFilePart=0x0) returned 0x3e [0100.971] FindFirstFileW (in: lpFileName="C:\\Windows\\assembly\\GAC_32\\mscorlib\\2.0.0.0__b77a5c561934e089\\*", lpFindFileData=0x31e46c | out: lpFindFileData=0x31e46c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfdb7eb8a, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xc03c0c5f, ftLastAccessTime.dwHighDateTime=0x1cb892c, ftLastWriteTime.dwLowDateTime=0xc03c0c5f, ftLastWriteTime.dwHighDateTime=0x1cb892c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x381b40 [0100.972] FindClose (in: hFindFile=0x381b40 | out: hFindFile=0x381b40) returned 1 [0100.973] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_32\\mscorlib\\2.0.0.0__b77a5c561934e089", nBufferLength=0x105, lpBuffer=0x31e24c, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_32\\mscorlib\\2.0.0.0__b77a5c561934e089", lpFilePart=0x0) returned 0x3d [0100.973] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_32\\mscorlib\\2.0.0.0__b77a5c561934e089\\", nBufferLength=0x105, lpBuffer=0x31e220, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_32\\mscorlib\\2.0.0.0__b77a5c561934e089\\", lpFilePart=0x0) returned 0x3e [0100.973] FindFirstFileW (in: lpFileName="C:\\Windows\\assembly\\GAC_32\\mscorlib\\2.0.0.0__b77a5c561934e089\\*", lpFindFileData=0x31e46c | out: lpFindFileData=0x31e46c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfdb7eb8a, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xc03c0c5f, ftLastAccessTime.dwHighDateTime=0x1cb892c, ftLastWriteTime.dwLowDateTime=0xc03c0c5f, ftLastWriteTime.dwHighDateTime=0x1cb892c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x381b40 [0100.974] FindClose (in: hFindFile=0x381b40 | out: hFindFile=0x381b40) returned 1 [0100.974] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_32\\napcrypt", nBufferLength=0x105, lpBuffer=0x31e2c4, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_32\\napcrypt", lpFilePart=0x0) returned 0x23 [0100.974] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_32\\napcrypt\\", nBufferLength=0x105, lpBuffer=0x31e298, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_32\\napcrypt\\", lpFilePart=0x0) returned 0x24 [0100.974] FindFirstFileW (in: lpFileName="C:\\Windows\\assembly\\GAC_32\\napcrypt\\*", lpFindFileData=0x31e4e4 | out: lpFindFileData=0x31e4e4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfdba4ce4, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfdba4ce4, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xfdba4ce4, ftLastWriteTime.dwHighDateTime=0x1ca0431, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x381b40 [0100.975] FindClose (in: hFindFile=0x381b40 | out: hFindFile=0x381b40) returned 1 [0100.975] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_32\\napcrypt", nBufferLength=0x105, lpBuffer=0x31e2c4, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_32\\napcrypt", lpFilePart=0x0) returned 0x23 [0100.975] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_32\\napcrypt\\", nBufferLength=0x105, lpBuffer=0x31e298, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_32\\napcrypt\\", lpFilePart=0x0) returned 0x24 [0100.975] FindFirstFileW (in: lpFileName="C:\\Windows\\assembly\\GAC_32\\napcrypt\\*", lpFindFileData=0x31e4e4 | out: lpFindFileData=0x31e4e4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfdba4ce4, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfdba4ce4, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xfdba4ce4, ftLastWriteTime.dwHighDateTime=0x1ca0431, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x381b40 [0100.975] FindClose (in: hFindFile=0x381b40 | out: hFindFile=0x381b40) returned 1 [0100.975] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_32\\napcrypt\\6.1.0.0__31bf3856ad364e35", nBufferLength=0x105, lpBuffer=0x31e24c, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_32\\napcrypt\\6.1.0.0__31bf3856ad364e35", lpFilePart=0x0) returned 0x3d [0100.975] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_32\\napcrypt\\6.1.0.0__31bf3856ad364e35\\", nBufferLength=0x105, lpBuffer=0x31e220, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_32\\napcrypt\\6.1.0.0__31bf3856ad364e35\\", lpFilePart=0x0) returned 0x3e [0100.975] FindFirstFileW (in: lpFileName="C:\\Windows\\assembly\\GAC_32\\napcrypt\\6.1.0.0__31bf3856ad364e35\\*", lpFindFileData=0x31e46c | out: lpFindFileData=0x31e46c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfdba4ce4, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xc120907a, ftLastAccessTime.dwHighDateTime=0x1cb892c, ftLastWriteTime.dwLowDateTime=0xc120907a, ftLastWriteTime.dwHighDateTime=0x1cb892c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x381b40 [0100.975] FindClose (in: hFindFile=0x381b40 | out: hFindFile=0x381b40) returned 1 [0101.116] CreateFileW (lpFileName="C:\\Windows\\assembly\\GAC_MSIL\\Microsoft.Security.ApplicationId.PolicyManagement.Cmdlets.Resources\\6.1.0.0_en_31bf3856ad364e35\\Microsoft.Security.ApplicationId.PolicyManagement.Cmdlets.dll-Help.xml" (normalized: "c:\\windows\\assembly\\gac_msil\\microsoft.security.applicationid.policymanagement.cmdlets.resources\\6.1.0.0_en_31bf3856ad364e35\\microsoft.security.applicationid.policymanagement.cmdlets.dll-help.xml"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x178 [0101.117] GetFileType (hFile=0x178) returned 0x1 [0101.117] GetFileType (hFile=0x178) returned 0x1 [0101.117] GetFileSize (in: hFile=0x178, lpFileSizeHigh=0x31e718 | out: lpFileSizeHigh=0x31e718*=0x0) returned 0x1405b [0101.117] ReadFile (in: hFile=0x178, lpBuffer=0x2787cd0, nNumberOfBytesToRead=0x1405b, lpNumberOfBytesRead=0x31e6c4, lpOverlapped=0x0 | out: lpBuffer=0x2787cd0*, lpNumberOfBytesRead=0x31e6c4*=0x1405b, lpOverlapped=0x0) returned 1 [0101.135] CreateFileW (lpFileName="C:\\Windows\\assembly\\GAC_MSIL\\Microsoft.Security.ApplicationId.PolicyManagement.Cmdlets.Resources\\6.1.0.0_en_31bf3856ad364e35\\Microsoft.Security.ApplicationId.PolicyManagement.Cmdlets.dll-Help.xml" (normalized: "c:\\windows\\assembly\\gac_msil\\microsoft.security.applicationid.policymanagement.cmdlets.resources\\6.1.0.0_en_31bf3856ad364e35\\microsoft.security.applicationid.policymanagement.cmdlets.dll-help.xml"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0xffffffff [0105.243] FindClose (in: hFindFile=0x381ec0 | out: hFindFile=0x381ec0) returned 1 [0105.245] FindClose (in: hFindFile=0x381ec0 | out: hFindFile=0x381ec0) returned 1 [0105.249] FindClose (in: hFindFile=0x381ec0 | out: hFindFile=0x381ec0) returned 1 [0105.250] FindClose (in: hFindFile=0x381ec0 | out: hFindFile=0x381ec0) returned 1 [0105.260] FindClose (in: hFindFile=0x381ec0 | out: hFindFile=0x381ec0) returned 1 [0105.262] FindClose (in: hFindFile=0x381ec0 | out: hFindFile=0x381ec0) returned 1 [0105.263] FindClose (in: hFindFile=0x381ec0 | out: hFindFile=0x381ec0) returned 1 [0105.263] FindClose (in: hFindFile=0x381ec0 | out: hFindFile=0x381ec0) returned 1 [0105.264] FindClose (in: hFindFile=0x381ec0 | out: hFindFile=0x381ec0) returned 1 [0105.265] FindClose (in: hFindFile=0x381ec0 | out: hFindFile=0x381ec0) returned 1 [0105.267] FindClose (in: hFindFile=0x381ec0 | out: hFindFile=0x381ec0) returned 1 [0105.267] FindClose (in: hFindFile=0x381ec0 | out: hFindFile=0x381ec0) returned 1 [0105.272] FindClose (in: hFindFile=0x381ec0 | out: hFindFile=0x381ec0) returned 1 [0105.273] FindClose (in: hFindFile=0x381ec0 | out: hFindFile=0x381ec0) returned 1 [0105.274] FindClose (in: hFindFile=0x381ec0 | out: hFindFile=0x381ec0) returned 1 [0105.277] FindClose (in: hFindFile=0x381ec0 | out: hFindFile=0x381ec0) returned 1 [0105.281] FindClose (in: hFindFile=0x381ec0 | out: hFindFile=0x381ec0) returned 1 [0105.282] FindClose (in: hFindFile=0x381ec0 | out: hFindFile=0x381ec0) returned 1 [0105.284] FindClose (in: hFindFile=0x381ec0 | out: hFindFile=0x381ec0) returned 1 [0105.285] FindClose (in: hFindFile=0x381ec0 | out: hFindFile=0x381ec0) returned 1 [0105.339] CreateFileW (lpFileName="C:\\Windows\\diagnostics\\index\\AeroDiagnostic.xml" (normalized: "c:\\windows\\diagnostics\\index\\aerodiagnostic.xml"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x178 [0105.341] GetFileType (hFile=0x178) returned 0x1 [0105.341] GetFileType (hFile=0x178) returned 0x1 [0105.341] GetFileSize (in: hFile=0x178, lpFileSizeHigh=0x31e808 | out: lpFileSizeHigh=0x31e808*=0x0) returned 0x7a7 [0105.341] ReadFile (in: hFile=0x178, lpBuffer=0x26c44f8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x31e7b4, lpOverlapped=0x0 | out: lpBuffer=0x26c44f8*, lpNumberOfBytesRead=0x31e7b4*=0x7a7, lpOverlapped=0x0) returned 1 [0105.358] CreateFileW (lpFileName="C:\\Windows\\diagnostics\\index\\AeroDiagnostic.xml" (normalized: "c:\\windows\\diagnostics\\index\\aerodiagnostic.xml"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0xffffffff [0105.447] CreateFileW (lpFileName="C:\\Windows\\ehome\\mcetuningoverrides.xml" (normalized: "c:\\windows\\ehome\\mcetuningoverrides.xml"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x178 [0105.448] GetFileType (hFile=0x178) returned 0x1 [0105.448] GetFileType (hFile=0x178) returned 0x1 [0105.448] GetFileSize (in: hFile=0x178, lpFileSizeHigh=0x31e880 | out: lpFileSizeHigh=0x31e880*=0x0) returned 0x478ff [0105.448] ReadFile (in: hFile=0x178, lpBuffer=0x3673070, nNumberOfBytesToRead=0x478ff, lpNumberOfBytesRead=0x31e82c, lpOverlapped=0x0 | out: lpBuffer=0x3673070*, lpNumberOfBytesRead=0x31e82c*=0x478ff, lpOverlapped=0x0) returned 1 [0105.482] CreateFileW (lpFileName="C:\\Windows\\ehome\\mcetuningoverrides.xml" (normalized: "c:\\windows\\ehome\\mcetuningoverrides.xml"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0xffffffff [0105.490] CreateFileW (lpFileName="C:\\Windows\\Fonts\\fms_metadata.xml" (normalized: "c:\\windows\\fonts\\fms_metadata.xml"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x178 [0105.491] GetFileType (hFile=0x178) returned 0x1 [0105.491] GetFileType (hFile=0x178) returned 0x1 [0105.491] GetFileSize (in: hFile=0x178, lpFileSizeHigh=0x31e880 | out: lpFileSizeHigh=0x31e880*=0x0) returned 0x11c20 [0105.491] ReadFile (in: hFile=0x178, lpBuffer=0x282b7c4, nNumberOfBytesToRead=0x11c20, lpNumberOfBytesRead=0x31e82c, lpOverlapped=0x0 | out: lpBuffer=0x282b7c4*, lpNumberOfBytesRead=0x31e82c*=0x11c20, lpOverlapped=0x0) returned 1 [0105.510] CreateFileW (lpFileName="C:\\Windows\\Fonts\\fms_metadata.xml" (normalized: "c:\\windows\\fonts\\fms_metadata.xml"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0xffffffff [0105.520] CreateFileW (lpFileName="C:\\Windows\\Globalization\\MCT\\MCT-AU\\Wallpaper\\AU-wp1.jpg" (normalized: "c:\\windows\\globalization\\mct\\mct-au\\wallpaper\\au-wp1.jpg"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x178 [0105.521] GetFileType (hFile=0x178) returned 0x1 [0105.521] GetFileType (hFile=0x178) returned 0x1 [0105.521] GetFileSize (in: hFile=0x178, lpFileSizeHigh=0x31e718 | out: lpFileSizeHigh=0x31e718*=0x0) returned 0xc1f01 [0105.522] ReadFile (in: hFile=0x178, lpBuffer=0x3843f30, nNumberOfBytesToRead=0xc1f01, lpNumberOfBytesRead=0x31e6c4, lpOverlapped=0x0 | out: lpBuffer=0x3843f30*, lpNumberOfBytesRead=0x31e6c4*=0xc1f01, lpOverlapped=0x0) returned 1 [0105.588] CreateFileW (lpFileName="C:\\Windows\\Globalization\\MCT\\MCT-AU\\Wallpaper\\AU-wp1.jpg" (normalized: "c:\\windows\\globalization\\mct\\mct-au\\wallpaper\\au-wp1.jpg"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0xffffffff [0105.594] CreateFileW (lpFileName="C:\\Windows\\Globalization\\MCT\\MCT-CA\\Wallpaper\\CA-wp1.jpg" (normalized: "c:\\windows\\globalization\\mct\\mct-ca\\wallpaper\\ca-wp1.jpg"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x178 [0105.596] GetFileType (hFile=0x178) returned 0x1 [0105.596] GetFileType (hFile=0x178) returned 0x1 [0105.596] GetFileSize (in: hFile=0x178, lpFileSizeHigh=0x31e718 | out: lpFileSizeHigh=0x31e718*=0x0) returned 0xcdba6 [0105.596] ReadFile (in: hFile=0x178, lpBuffer=0x3ccf9e0, nNumberOfBytesToRead=0xcdba6, lpNumberOfBytesRead=0x31e6c4, lpOverlapped=0x0 | out: lpBuffer=0x3ccf9e0*, lpNumberOfBytesRead=0x31e6c4*=0xcdba6, lpOverlapped=0x0) returned 1 [0105.682] CreateFileW (lpFileName="C:\\Windows\\Globalization\\MCT\\MCT-CA\\Wallpaper\\CA-wp1.jpg" (normalized: "c:\\windows\\globalization\\mct\\mct-ca\\wallpaper\\ca-wp1.jpg"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0xffffffff [0105.687] CreateFileW (lpFileName="C:\\Windows\\Globalization\\MCT\\MCT-GB\\Wallpaper\\GB-wp1.jpg" (normalized: "c:\\windows\\globalization\\mct\\mct-gb\\wallpaper\\gb-wp1.jpg"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x178 [0105.689] GetFileType (hFile=0x178) returned 0x1 [0105.689] GetFileType (hFile=0x178) returned 0x1 [0105.689] GetFileSize (in: hFile=0x178, lpFileSizeHigh=0x31e718 | out: lpFileSizeHigh=0x31e718*=0x0) returned 0x5a67b [0105.689] ReadFile (in: hFile=0x178, lpBuffer=0x41a2058, nNumberOfBytesToRead=0x5a67b, lpNumberOfBytesRead=0x31e6c4, lpOverlapped=0x0 | out: lpBuffer=0x41a2058*, lpNumberOfBytesRead=0x31e6c4*=0x5a67b, lpOverlapped=0x0) returned 1 [0105.728] CreateFileW (lpFileName="C:\\Windows\\Globalization\\MCT\\MCT-GB\\Wallpaper\\GB-wp1.jpg" (normalized: "c:\\windows\\globalization\\mct\\mct-gb\\wallpaper\\gb-wp1.jpg"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0xffffffff [0105.734] CreateFileW (lpFileName="C:\\Windows\\Globalization\\MCT\\MCT-US\\Wallpaper\\US-wp1.jpg" (normalized: "c:\\windows\\globalization\\mct\\mct-us\\wallpaper\\us-wp1.jpg"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x178 [0105.735] GetFileType (hFile=0x178) returned 0x1 [0105.735] GetFileType (hFile=0x178) returned 0x1 [0105.735] GetFileSize (in: hFile=0x178, lpFileSizeHigh=0x31e718 | out: lpFileSizeHigh=0x31e718*=0x0) returned 0xab683 [0105.735] ReadFile (in: hFile=0x178, lpBuffer=0x43c07b0, nNumberOfBytesToRead=0xab683, lpNumberOfBytesRead=0x31e6c4, lpOverlapped=0x0 | out: lpBuffer=0x43c07b0*, lpNumberOfBytesRead=0x31e6c4*=0xab683, lpOverlapped=0x0) returned 1 [0105.811] CreateFileW (lpFileName="C:\\Windows\\Globalization\\MCT\\MCT-US\\Wallpaper\\US-wp1.jpg" (normalized: "c:\\windows\\globalization\\mct\\mct-us\\wallpaper\\us-wp1.jpg"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0xffffffff [0105.823] CreateFileW (lpFileName="C:\\Windows\\Globalization\\MCT\\MCT-ZA\\Wallpaper\\ZA-wp1.jpg" (normalized: "c:\\windows\\globalization\\mct\\mct-za\\wallpaper\\za-wp1.jpg"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x178 [0105.826] GetFileType (hFile=0x178) returned 0x1 [0105.826] GetFileType (hFile=0x178) returned 0x1 [0105.826] GetFileSize (in: hFile=0x178, lpFileSizeHigh=0x31e718 | out: lpFileSizeHigh=0x31e718*=0x0) returned 0x9e2ec [0105.828] ReadFile (in: hFile=0x178, lpBuffer=0xa53af90, nNumberOfBytesToRead=0x9e2ec, lpNumberOfBytesRead=0x31e6c4, lpOverlapped=0x0 | out: lpBuffer=0xa53af90*, lpNumberOfBytesRead=0x31e6c4*=0x9e2ec, lpOverlapped=0x0) returned 1 [0105.898] CreateFileW (lpFileName="C:\\Windows\\Globalization\\MCT\\MCT-ZA\\Wallpaper\\ZA-wp1.jpg" (normalized: "c:\\windows\\globalization\\mct\\mct-za\\wallpaper\\za-wp1.jpg"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0xffffffff [0106.145] CreateFileW (lpFileName="C:\\Windows\\Installer\\$PatchCache$\\Managed\\00004109340000000100000000F01FEC\\CacheSize.txt" (normalized: "c:\\windows\\installer\\$patchcache$\\managed\\00004109340000000100000000f01fec\\cachesize.txt"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x178 [0106.146] GetFileType (hFile=0x178) returned 0x1 [0106.146] GetFileType (hFile=0x178) returned 0x1 [0106.146] GetFileSize (in: hFile=0x178, lpFileSizeHigh=0x31e718 | out: lpFileSizeHigh=0x31e718*=0x0) returned 0x7 [0106.146] ReadFile (in: hFile=0x178, lpBuffer=0x269bf90, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x31e6c4, lpOverlapped=0x0 | out: lpBuffer=0x269bf90*, lpNumberOfBytesRead=0x31e6c4*=0x7, lpOverlapped=0x0) returned 1 [0106.160] CreateFileW (lpFileName="C:\\Windows\\Installer\\$PatchCache$\\Managed\\00004109340000000100000000F01FEC\\CacheSize.txt" (normalized: "c:\\windows\\installer\\$patchcache$\\managed\\00004109340000000100000000f01fec\\cachesize.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0xffffffff [0106.161] CreateFileW (lpFileName="C:\\Windows\\Installer\\$PatchCache$\\Managed\\00004109340090400100000000F01FEC\\CacheSize.txt" (normalized: "c:\\windows\\installer\\$patchcache$\\managed\\00004109340090400100000000f01fec\\cachesize.txt"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x178 [0106.162] GetFileType (hFile=0x178) returned 0x1 [0106.162] GetFileType (hFile=0x178) returned 0x1 [0106.162] GetFileSize (in: hFile=0x178, lpFileSizeHigh=0x31e718 | out: lpFileSizeHigh=0x31e718*=0x0) returned 0x6 [0106.162] ReadFile (in: hFile=0x178, lpBuffer=0x26ec6e8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x31e6c4, lpOverlapped=0x0 | out: lpBuffer=0x26ec6e8*, lpNumberOfBytesRead=0x31e6c4*=0x6, lpOverlapped=0x0) returned 1 [0106.175] CreateFileW (lpFileName="C:\\Windows\\Installer\\$PatchCache$\\Managed\\00004109340090400100000000F01FEC\\CacheSize.txt" (normalized: "c:\\windows\\installer\\$patchcache$\\managed\\00004109340090400100000000f01fec\\cachesize.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0xffffffff [0106.177] CreateFileW (lpFileName="C:\\Windows\\Installer\\$PatchCache$\\Managed\\000041094B0090400100000000F01FEC\\CacheSize.txt" (normalized: "c:\\windows\\installer\\$patchcache$\\managed\\000041094b0090400100000000f01fec\\cachesize.txt"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x178 [0106.177] GetFileType (hFile=0x178) returned 0x1 [0106.177] GetFileType (hFile=0x178) returned 0x1 [0106.177] GetFileSize (in: hFile=0x178, lpFileSizeHigh=0x31e718 | out: lpFileSizeHigh=0x31e718*=0x0) returned 0x6 [0106.178] ReadFile (in: hFile=0x178, lpBuffer=0x2740068, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x31e6c4, lpOverlapped=0x0 | out: lpBuffer=0x2740068*, lpNumberOfBytesRead=0x31e6c4*=0x6, lpOverlapped=0x0) returned 1 [0106.191] CreateFileW (lpFileName="C:\\Windows\\Installer\\$PatchCache$\\Managed\\000041094B0090400100000000F01FEC\\CacheSize.txt" (normalized: "c:\\windows\\installer\\$patchcache$\\managed\\000041094b0090400100000000f01fec\\cachesize.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0xffffffff [0106.196] CreateFileW (lpFileName="C:\\Windows\\Installer\\$PatchCache$\\Managed\\00004109E60090400100000000F01FEC\\CacheSize.txt" (normalized: "c:\\windows\\installer\\$patchcache$\\managed\\00004109e60090400100000000f01fec\\cachesize.txt"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x178 [0106.196] GetFileType (hFile=0x178) returned 0x1 [0106.196] GetFileType (hFile=0x178) returned 0x1 [0106.196] GetFileSize (in: hFile=0x178, lpFileSizeHigh=0x31e718 | out: lpFileSizeHigh=0x31e718*=0x0) returned 0x6 [0106.196] ReadFile (in: hFile=0x178, lpBuffer=0x27a1c3c, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x31e6c4, lpOverlapped=0x0 | out: lpBuffer=0x27a1c3c*, lpNumberOfBytesRead=0x31e6c4*=0x6, lpOverlapped=0x0) returned 1 [0106.210] CreateFileW (lpFileName="C:\\Windows\\Installer\\$PatchCache$\\Managed\\00004109E60090400100000000F01FEC\\CacheSize.txt" (normalized: "c:\\windows\\installer\\$patchcache$\\managed\\00004109e60090400100000000f01fec\\cachesize.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0xffffffff [0106.211] CreateFileW (lpFileName="C:\\Windows\\Installer\\$PatchCache$\\Managed\\00004109F10090400100000000F01FEC\\CacheSize.txt" (normalized: "c:\\windows\\installer\\$patchcache$\\managed\\00004109f10090400100000000f01fec\\cachesize.txt"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x178 [0106.212] GetFileType (hFile=0x178) returned 0x1 [0106.212] GetFileType (hFile=0x178) returned 0x1 [0106.212] GetFileSize (in: hFile=0x178, lpFileSizeHigh=0x31e718 | out: lpFileSizeHigh=0x31e718*=0x0) returned 0x6 [0106.212] ReadFile (in: hFile=0x178, lpBuffer=0x27f2238, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x31e6c4, lpOverlapped=0x0 | out: lpBuffer=0x27f2238*, lpNumberOfBytesRead=0x31e6c4*=0x6, lpOverlapped=0x0) returned 1 [0106.226] CreateFileW (lpFileName="C:\\Windows\\Installer\\$PatchCache$\\Managed\\00004109F10090400100000000F01FEC\\CacheSize.txt" (normalized: "c:\\windows\\installer\\$patchcache$\\managed\\00004109f10090400100000000f01fec\\cachesize.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0xffffffff [0106.227] CreateFileW (lpFileName="C:\\Windows\\Installer\\$PatchCache$\\Managed\\00004109F100A0C00100000000F01FEC\\CacheSize.txt" (normalized: "c:\\windows\\installer\\$patchcache$\\managed\\00004109f100a0c00100000000f01fec\\cachesize.txt"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x178 [0106.228] GetFileType (hFile=0x178) returned 0x1 [0106.228] GetFileType (hFile=0x178) returned 0x1 [0106.228] GetFileSize (in: hFile=0x178, lpFileSizeHigh=0x31e718 | out: lpFileSizeHigh=0x31e718*=0x0) returned 0x6 [0106.228] ReadFile (in: hFile=0x178, lpBuffer=0x2842834, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x31e6c4, lpOverlapped=0x0 | out: lpBuffer=0x2842834*, lpNumberOfBytesRead=0x31e6c4*=0x6, lpOverlapped=0x0) returned 1 [0106.244] CreateFileW (lpFileName="C:\\Windows\\Installer\\$PatchCache$\\Managed\\00004109F100A0C00100000000F01FEC\\CacheSize.txt" (normalized: "c:\\windows\\installer\\$patchcache$\\managed\\00004109f100a0c00100000000f01fec\\cachesize.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0xffffffff [0106.245] CreateFileW (lpFileName="C:\\Windows\\Installer\\$PatchCache$\\Managed\\00004109F100C0400100000000F01FEC\\CacheSize.txt" (normalized: "c:\\windows\\installer\\$patchcache$\\managed\\00004109f100c0400100000000f01fec\\cachesize.txt"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x178 [0106.246] GetFileType (hFile=0x178) returned 0x1 [0106.246] GetFileType (hFile=0x178) returned 0x1 [0106.246] GetFileSize (in: hFile=0x178, lpFileSizeHigh=0x31e718 | out: lpFileSizeHigh=0x31e718*=0x0) returned 0x6 [0106.246] ReadFile (in: hFile=0x178, lpBuffer=0x26810bc, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x31e6c4, lpOverlapped=0x0 | out: lpBuffer=0x26810bc*, lpNumberOfBytesRead=0x31e6c4*=0x6, lpOverlapped=0x0) returned 1 [0106.274] CreateFileW (lpFileName="C:\\Windows\\Installer\\$PatchCache$\\Managed\\00004109F100C0400100000000F01FEC\\CacheSize.txt" (normalized: "c:\\windows\\installer\\$patchcache$\\managed\\00004109f100c0400100000000f01fec\\cachesize.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0xffffffff [0106.290] CreateFileW (lpFileName="C:\\Windows\\Installer\\$PatchCache$\\Managed\\00004119750000000100000000F01FEC\\CacheSize.txt" (normalized: "c:\\windows\\installer\\$patchcache$\\managed\\00004119750000000100000000f01fec\\cachesize.txt"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x178 [0106.290] GetFileType (hFile=0x178) returned 0x1 [0106.290] GetFileType (hFile=0x178) returned 0x1 [0106.290] GetFileSize (in: hFile=0x178, lpFileSizeHigh=0x31e718 | out: lpFileSizeHigh=0x31e718*=0x0) returned 0x7 [0106.290] ReadFile (in: hFile=0x178, lpBuffer=0x26ff74c, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x31e6c4, lpOverlapped=0x0 | out: lpBuffer=0x26ff74c*, lpNumberOfBytesRead=0x31e6c4*=0x7, lpOverlapped=0x0) returned 1 [0106.304] CreateFileW (lpFileName="C:\\Windows\\Installer\\$PatchCache$\\Managed\\00004119750000000100000000F01FEC\\CacheSize.txt" (normalized: "c:\\windows\\installer\\$patchcache$\\managed\\00004119750000000100000000f01fec\\cachesize.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0xffffffff [0106.306] CreateFileW (lpFileName="C:\\Windows\\Installer\\$PatchCache$\\Managed\\00004119B30000000100000000F01FEC\\CacheSize.txt" (normalized: "c:\\windows\\installer\\$patchcache$\\managed\\00004119b30000000100000000f01fec\\cachesize.txt"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x178 [0106.306] GetFileType (hFile=0x178) returned 0x1 [0106.306] GetFileType (hFile=0x178) returned 0x1 [0106.306] GetFileSize (in: hFile=0x178, lpFileSizeHigh=0x31e718 | out: lpFileSizeHigh=0x31e718*=0x0) returned 0x7 [0106.306] ReadFile (in: hFile=0x178, lpBuffer=0x274fd48, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x31e6c4, lpOverlapped=0x0 | out: lpBuffer=0x274fd48*, lpNumberOfBytesRead=0x31e6c4*=0x7, lpOverlapped=0x0) returned 1 [0106.320] CreateFileW (lpFileName="C:\\Windows\\Installer\\$PatchCache$\\Managed\\00004119B30000000100000000F01FEC\\CacheSize.txt" (normalized: "c:\\windows\\installer\\$patchcache$\\managed\\00004119b30000000100000000f01fec\\cachesize.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0xffffffff [0106.343] CreateFileW (lpFileName="C:\\Windows\\Media\\chimes.wav" (normalized: "c:\\windows\\media\\chimes.wav"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x178 [0106.344] GetFileType (hFile=0x178) returned 0x1 [0106.344] GetFileType (hFile=0x178) returned 0x1 [0106.344] GetFileSize (in: hFile=0x178, lpFileSizeHigh=0x31e880 | out: lpFileSizeHigh=0x31e880*=0x0) returned 0x34d2c [0106.344] ReadFile (in: hFile=0x178, lpBuffer=0x45c2b90, nNumberOfBytesToRead=0x34d2c, lpNumberOfBytesRead=0x31e82c, lpOverlapped=0x0 | out: lpBuffer=0x45c2b90*, lpNumberOfBytesRead=0x31e82c*=0x34d2c, lpOverlapped=0x0) returned 1 [0106.375] CreateFileW (lpFileName="C:\\Windows\\Media\\chimes.wav" (normalized: "c:\\windows\\media\\chimes.wav"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0xffffffff [0106.504] CreateFileW (lpFileName="C:\\Windows\\Microsoft.NET\\Framework\\v2.0.50727\\InstallCommon.sql" (normalized: "c:\\windows\\microsoft.net\\framework\\v2.0.50727\\installcommon.sql"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x178 [0106.505] GetFileType (hFile=0x178) returned 0x1 [0106.506] GetFileType (hFile=0x178) returned 0x1 [0106.506] GetFileSize (in: hFile=0x178, lpFileSizeHigh=0x31e790 | out: lpFileSizeHigh=0x31e790*=0x0) returned 0x601b [0106.506] ReadFile (in: hFile=0x178, lpBuffer=0x2800ac0, nNumberOfBytesToRead=0x601b, lpNumberOfBytesRead=0x31e73c, lpOverlapped=0x0 | out: lpBuffer=0x2800ac0*, lpNumberOfBytesRead=0x31e73c*=0x601b, lpOverlapped=0x0) returned 1 [0106.521] CreateFileW (lpFileName="C:\\Windows\\Microsoft.NET\\Framework\\v2.0.50727\\InstallCommon.sql" (normalized: "c:\\windows\\microsoft.net\\framework\\v2.0.50727\\installcommon.sql"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x178 [0106.522] GetFileType (hFile=0x178) returned 0x1 [0106.522] GetFileType (hFile=0x178) returned 0x1 [0106.522] WriteFile (in: hFile=0x178, lpBuffer=0x2671c20*, nNumberOfBytesToWrite=0x6020, lpNumberOfBytesWritten=0x31e730, lpOverlapped=0x0 | out: lpBuffer=0x2671c20*, lpNumberOfBytesWritten=0x31e730*=0x6020, lpOverlapped=0x0) returned 1 [0106.524] MoveFileW (lpExistingFileName="C:\\Windows\\Microsoft.NET\\Framework\\v2.0.50727\\InstallCommon.sql" (normalized: "c:\\windows\\microsoft.net\\framework\\v2.0.50727\\installcommon.sql"), lpNewFileName="C:\\Windows\\Microsoft.NET\\Framework\\v2.0.50727\\InstallCommon.sql" (normalized: "c:\\windows\\microsoft.net\\framework\\v2.0.50727\\installcommon.sql")) returned 1 [0106.524] CreateFileW (lpFileName="C:\\Windows\\Microsoft.NET\\Framework\\v2.0.50727\\InstallMembership.sql" (normalized: "c:\\windows\\microsoft.net\\framework\\v2.0.50727\\installmembership.sql"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x178 [0106.525] GetFileType (hFile=0x178) returned 0x1 [0106.526] GetFileType (hFile=0x178) returned 0x1 [0106.526] GetFileSize (in: hFile=0x178, lpFileSizeHigh=0x31e790 | out: lpFileSizeHigh=0x31e790*=0x0) returned 0xdb09 [0106.526] ReadFile (in: hFile=0x178, lpBuffer=0x2677fbc, nNumberOfBytesToRead=0xdb09, lpNumberOfBytesRead=0x31e73c, lpOverlapped=0x0 | out: lpBuffer=0x2677fbc*, lpNumberOfBytesRead=0x31e73c*=0xdb09, lpOverlapped=0x0) returned 1 [0106.542] CreateFileW (lpFileName="C:\\Windows\\Microsoft.NET\\Framework\\v2.0.50727\\InstallMembership.sql" (normalized: "c:\\windows\\microsoft.net\\framework\\v2.0.50727\\installmembership.sql"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x178 [0106.543] GetFileType (hFile=0x178) returned 0x1 [0106.543] GetFileType (hFile=0x178) returned 0x1 [0106.543] WriteFile (in: hFile=0x178, lpBuffer=0x26ee044*, nNumberOfBytesToWrite=0xdb10, lpNumberOfBytesWritten=0x31e730, lpOverlapped=0x0 | out: lpBuffer=0x26ee044*, lpNumberOfBytesWritten=0x31e730*=0xdb10, lpOverlapped=0x0) returned 1 [0106.545] MoveFileW (lpExistingFileName="C:\\Windows\\Microsoft.NET\\Framework\\v2.0.50727\\InstallMembership.sql" (normalized: "c:\\windows\\microsoft.net\\framework\\v2.0.50727\\installmembership.sql"), lpNewFileName="C:\\Windows\\Microsoft.NET\\Framework\\v2.0.50727\\InstallMembership.sql" (normalized: "c:\\windows\\microsoft.net\\framework\\v2.0.50727\\installmembership.sql")) returned 1 [0106.545] CreateFileW (lpFileName="C:\\Windows\\Microsoft.NET\\Framework\\v2.0.50727\\InstallPersistSqlState.sql" (normalized: "c:\\windows\\microsoft.net\\framework\\v2.0.50727\\installpersistsqlstate.sql"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x178 [0106.546] GetFileType (hFile=0x178) returned 0x1 [0106.546] GetFileType (hFile=0x178) returned 0x1 [0106.546] GetFileSize (in: hFile=0x178, lpFileSizeHigh=0x31e790 | out: lpFileSizeHigh=0x31e790*=0x0) returned 0xcc7b [0106.546] ReadFile (in: hFile=0x178, lpBuffer=0x26fbf08, nNumberOfBytesToRead=0xcc7b, lpNumberOfBytesRead=0x31e73c, lpOverlapped=0x0 | out: lpBuffer=0x26fbf08*, lpNumberOfBytesRead=0x31e73c*=0xcc7b, lpOverlapped=0x0) returned 1 [0106.562] CreateFileW (lpFileName="C:\\Windows\\Microsoft.NET\\Framework\\v2.0.50727\\InstallPersistSqlState.sql" (normalized: "c:\\windows\\microsoft.net\\framework\\v2.0.50727\\installpersistsqlstate.sql"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x178 [0106.563] GetFileType (hFile=0x178) returned 0x1 [0106.563] GetFileType (hFile=0x178) returned 0x1 [0106.563] WriteFile (in: hFile=0x178, lpBuffer=0x276f284*, nNumberOfBytesToWrite=0xcc80, lpNumberOfBytesWritten=0x31e730, lpOverlapped=0x0 | out: lpBuffer=0x276f284*, lpNumberOfBytesWritten=0x31e730*=0xcc80, lpOverlapped=0x0) returned 1 [0106.565] MoveFileW (lpExistingFileName="C:\\Windows\\Microsoft.NET\\Framework\\v2.0.50727\\InstallPersistSqlState.sql" (normalized: "c:\\windows\\microsoft.net\\framework\\v2.0.50727\\installpersistsqlstate.sql"), lpNewFileName="C:\\Windows\\Microsoft.NET\\Framework\\v2.0.50727\\InstallPersistSqlState.sql" (normalized: "c:\\windows\\microsoft.net\\framework\\v2.0.50727\\installpersistsqlstate.sql")) returned 1 [0106.565] CreateFileW (lpFileName="C:\\Windows\\Microsoft.NET\\Framework\\v2.0.50727\\InstallPersonalization.sql" (normalized: "c:\\windows\\microsoft.net\\framework\\v2.0.50727\\installpersonalization.sql"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x178 [0106.566] GetFileType (hFile=0x178) returned 0x1 [0106.566] GetFileType (hFile=0x178) returned 0x1 [0106.566] GetFileSize (in: hFile=0x178, lpFileSizeHigh=0x31e790 | out: lpFileSizeHigh=0x31e790*=0x0) returned 0x8886 [0106.566] ReadFile (in: hFile=0x178, lpBuffer=0x277c2e8, nNumberOfBytesToRead=0x8886, lpNumberOfBytesRead=0x31e73c, lpOverlapped=0x0 | out: lpBuffer=0x277c2e8*, lpNumberOfBytesRead=0x31e73c*=0x8886, lpOverlapped=0x0) returned 1 [0106.581] CreateFileW (lpFileName="C:\\Windows\\Microsoft.NET\\Framework\\v2.0.50727\\InstallPersonalization.sql" (normalized: "c:\\windows\\microsoft.net\\framework\\v2.0.50727\\installpersonalization.sql"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x178 [0106.582] GetFileType (hFile=0x178) returned 0x1 [0106.582] GetFileType (hFile=0x178) returned 0x1 [0106.582] WriteFile (in: hFile=0x178, lpBuffer=0x27f3ba0*, nNumberOfBytesToWrite=0x8890, lpNumberOfBytesWritten=0x31e730, lpOverlapped=0x0 | out: lpBuffer=0x27f3ba0*, lpNumberOfBytesWritten=0x31e730*=0x8890, lpOverlapped=0x0) returned 1 [0106.583] MoveFileW (lpExistingFileName="C:\\Windows\\Microsoft.NET\\Framework\\v2.0.50727\\InstallPersonalization.sql" (normalized: "c:\\windows\\microsoft.net\\framework\\v2.0.50727\\installpersonalization.sql"), lpNewFileName="C:\\Windows\\Microsoft.NET\\Framework\\v2.0.50727\\InstallPersonalization.sql" (normalized: "c:\\windows\\microsoft.net\\framework\\v2.0.50727\\installpersonalization.sql")) returned 1 [0106.584] CreateFileW (lpFileName="C:\\Windows\\Microsoft.NET\\Framework\\v2.0.50727\\InstallRoles.sql" (normalized: "c:\\windows\\microsoft.net\\framework\\v2.0.50727\\installroles.sql"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x178 [0106.585] GetFileType (hFile=0x178) returned 0x1 [0106.585] GetFileType (hFile=0x178) returned 0x1 [0106.585] GetFileSize (in: hFile=0x178, lpFileSizeHigh=0x31e790 | out: lpFileSizeHigh=0x31e790*=0x0) returned 0x85d8 [0106.585] ReadFile (in: hFile=0x178, lpBuffer=0x27fc804, nNumberOfBytesToRead=0x85d8, lpNumberOfBytesRead=0x31e73c, lpOverlapped=0x0 | out: lpBuffer=0x27fc804*, lpNumberOfBytesRead=0x31e73c*=0x85d8, lpOverlapped=0x0) returned 1 [0106.601] CreateFileW (lpFileName="C:\\Windows\\Microsoft.NET\\Framework\\v2.0.50727\\InstallRoles.sql" (normalized: "c:\\windows\\microsoft.net\\framework\\v2.0.50727\\installroles.sql"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x178 [0106.602] GetFileType (hFile=0x178) returned 0x1 [0106.602] GetFileType (hFile=0x178) returned 0x1 [0106.602] WriteFile (in: hFile=0x178, lpBuffer=0x26753a4*, nNumberOfBytesToWrite=0x85e0, lpNumberOfBytesWritten=0x31e730, lpOverlapped=0x0 | out: lpBuffer=0x26753a4*, lpNumberOfBytesWritten=0x31e730*=0x85e0, lpOverlapped=0x0) returned 1 [0106.603] MoveFileW (lpExistingFileName="C:\\Windows\\Microsoft.NET\\Framework\\v2.0.50727\\InstallRoles.sql" (normalized: "c:\\windows\\microsoft.net\\framework\\v2.0.50727\\installroles.sql"), lpNewFileName="C:\\Windows\\Microsoft.NET\\Framework\\v2.0.50727\\InstallRoles.sql" (normalized: "c:\\windows\\microsoft.net\\framework\\v2.0.50727\\installroles.sql")) returned 1 [0106.604] CreateFileW (lpFileName="C:\\Windows\\Microsoft.NET\\Framework\\v2.0.50727\\InstallSqlState.sql" (normalized: "c:\\windows\\microsoft.net\\framework\\v2.0.50727\\installsqlstate.sql"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x178 [0106.605] GetFileType (hFile=0x178) returned 0x1 [0106.605] GetFileType (hFile=0x178) returned 0x1 [0106.605] GetFileSize (in: hFile=0x178, lpFileSizeHigh=0x31e790 | out: lpFileSizeHigh=0x31e790*=0x0) returned 0xcba3 [0106.605] ReadFile (in: hFile=0x178, lpBuffer=0x267dcf8, nNumberOfBytesToRead=0xcba3, lpNumberOfBytesRead=0x31e73c, lpOverlapped=0x0 | out: lpBuffer=0x267dcf8*, lpNumberOfBytesRead=0x31e73c*=0xcba3, lpOverlapped=0x0) returned 1 [0106.622] CreateFileW (lpFileName="C:\\Windows\\Microsoft.NET\\Framework\\v2.0.50727\\InstallSqlState.sql" (normalized: "c:\\windows\\microsoft.net\\framework\\v2.0.50727\\installsqlstate.sql"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x178 [0106.623] GetFileType (hFile=0x178) returned 0x1 [0106.623] GetFileType (hFile=0x178) returned 0x1 [0106.623] WriteFile (in: hFile=0x178, lpBuffer=0x26f0f60*, nNumberOfBytesToWrite=0xcbb0, lpNumberOfBytesWritten=0x31e730, lpOverlapped=0x0 | out: lpBuffer=0x26f0f60*, lpNumberOfBytesWritten=0x31e730*=0xcbb0, lpOverlapped=0x0) returned 1 [0106.624] MoveFileW (lpExistingFileName="C:\\Windows\\Microsoft.NET\\Framework\\v2.0.50727\\InstallSqlState.sql" (normalized: "c:\\windows\\microsoft.net\\framework\\v2.0.50727\\installsqlstate.sql"), lpNewFileName="C:\\Windows\\Microsoft.NET\\Framework\\v2.0.50727\\InstallSqlState.sql" (normalized: "c:\\windows\\microsoft.net\\framework\\v2.0.50727\\installsqlstate.sql")) returned 1 [0106.624] CreateFileW (lpFileName="C:\\Windows\\Microsoft.NET\\Framework\\v2.0.50727\\InstallSqlStateTemplate.sql" (normalized: "c:\\windows\\microsoft.net\\framework\\v2.0.50727\\installsqlstatetemplate.sql"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x178 [0106.626] GetFileType (hFile=0x178) returned 0x1 [0106.626] GetFileType (hFile=0x178) returned 0x1 [0106.626] GetFileSize (in: hFile=0x178, lpFileSizeHigh=0x31e790 | out: lpFileSizeHigh=0x31e790*=0x0) returned 0xd28f [0106.626] ReadFile (in: hFile=0x178, lpBuffer=0x26fdeb4, nNumberOfBytesToRead=0xd28f, lpNumberOfBytesRead=0x31e73c, lpOverlapped=0x0 | out: lpBuffer=0x26fdeb4*, lpNumberOfBytesRead=0x31e73c*=0xd28f, lpOverlapped=0x0) returned 1 [0106.641] CreateFileW (lpFileName="C:\\Windows\\Microsoft.NET\\Framework\\v2.0.50727\\InstallSqlStateTemplate.sql" (normalized: "c:\\windows\\microsoft.net\\framework\\v2.0.50727\\installsqlstatetemplate.sql"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x178 [0106.643] GetFileType (hFile=0x178) returned 0x1 [0106.643] GetFileType (hFile=0x178) returned 0x1 [0106.643] WriteFile (in: hFile=0x178, lpBuffer=0x2772460*, nNumberOfBytesToWrite=0xd290, lpNumberOfBytesWritten=0x31e730, lpOverlapped=0x0 | out: lpBuffer=0x2772460*, lpNumberOfBytesWritten=0x31e730*=0xd290, lpOverlapped=0x0) returned 1 [0106.644] MoveFileW (lpExistingFileName="C:\\Windows\\Microsoft.NET\\Framework\\v2.0.50727\\InstallSqlStateTemplate.sql" (normalized: "c:\\windows\\microsoft.net\\framework\\v2.0.50727\\installsqlstatetemplate.sql"), lpNewFileName="C:\\Windows\\Microsoft.NET\\Framework\\v2.0.50727\\InstallSqlStateTemplate.sql" (normalized: "c:\\windows\\microsoft.net\\framework\\v2.0.50727\\installsqlstatetemplate.sql")) returned 1 [0106.645] CreateFileW (lpFileName="C:\\Windows\\Microsoft.NET\\Framework\\v2.0.50727\\InstallWebEventSqlProvider.sql" (normalized: "c:\\windows\\microsoft.net\\framework\\v2.0.50727\\installwebeventsqlprovider.sql"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x178 [0106.646] GetFileType (hFile=0x178) returned 0x1 [0106.646] GetFileType (hFile=0x178) returned 0x1 [0106.646] GetFileSize (in: hFile=0x178, lpFileSizeHigh=0x31e790 | out: lpFileSizeHigh=0x31e790*=0x0) returned 0x1939 [0106.646] ReadFile (in: hFile=0x178, lpBuffer=0x277fb14, nNumberOfBytesToRead=0x1939, lpNumberOfBytesRead=0x31e73c, lpOverlapped=0x0 | out: lpBuffer=0x277fb14*, lpNumberOfBytesRead=0x31e73c*=0x1939, lpOverlapped=0x0) returned 1 [0106.661] CreateFileW (lpFileName="C:\\Windows\\Microsoft.NET\\Framework\\v2.0.50727\\InstallWebEventSqlProvider.sql" (normalized: "c:\\windows\\microsoft.net\\framework\\v2.0.50727\\installwebeventsqlprovider.sql"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x178 [0106.662] GetFileType (hFile=0x178) returned 0x1 [0106.662] GetFileType (hFile=0x178) returned 0x1 [0106.662] WriteFile (in: hFile=0x178, lpBuffer=0x27d473c*, nNumberOfBytesToWrite=0x1940, lpNumberOfBytesWritten=0x31e730, lpOverlapped=0x0 | out: lpBuffer=0x27d473c*, lpNumberOfBytesWritten=0x31e730*=0x1940, lpOverlapped=0x0) returned 1 [0106.663] MoveFileW (lpExistingFileName="C:\\Windows\\Microsoft.NET\\Framework\\v2.0.50727\\InstallWebEventSqlProvider.sql" (normalized: "c:\\windows\\microsoft.net\\framework\\v2.0.50727\\installwebeventsqlprovider.sql"), lpNewFileName="C:\\Windows\\Microsoft.NET\\Framework\\v2.0.50727\\InstallWebEventSqlProvider.sql" (normalized: "c:\\windows\\microsoft.net\\framework\\v2.0.50727\\installwebeventsqlprovider.sql")) returned 1 [0106.663] CreateFileW (lpFileName="C:\\Windows\\Microsoft.NET\\Framework\\v2.0.50727\\UninstallCommon.sql" (normalized: "c:\\windows\\microsoft.net\\framework\\v2.0.50727\\uninstallcommon.sql"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x178 [0106.664] GetFileType (hFile=0x178) returned 0x1 [0106.664] GetFileType (hFile=0x178) returned 0x1 [0106.664] GetFileSize (in: hFile=0x178, lpFileSizeHigh=0x31e790 | out: lpFileSizeHigh=0x31e790*=0x0) returned 0xf32 [0106.665] ReadFile (in: hFile=0x178, lpBuffer=0x27d7dc4, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x31e73c, lpOverlapped=0x0 | out: lpBuffer=0x27d7dc4*, lpNumberOfBytesRead=0x31e73c*=0xf32, lpOverlapped=0x0) returned 1 [0106.679] CreateFileW (lpFileName="C:\\Windows\\Microsoft.NET\\Framework\\v2.0.50727\\UninstallCommon.sql" (normalized: "c:\\windows\\microsoft.net\\framework\\v2.0.50727\\uninstallcommon.sql"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x178 [0106.680] GetFileType (hFile=0x178) returned 0x1 [0106.680] GetFileType (hFile=0x178) returned 0x1 [0106.680] WriteFile (in: hFile=0x178, lpBuffer=0x282a924*, nNumberOfBytesToWrite=0xf40, lpNumberOfBytesWritten=0x31e704, lpOverlapped=0x0 | out: lpBuffer=0x282a924*, lpNumberOfBytesWritten=0x31e704*=0xf40, lpOverlapped=0x0) returned 1 [0106.680] MoveFileW (lpExistingFileName="C:\\Windows\\Microsoft.NET\\Framework\\v2.0.50727\\UninstallCommon.sql" (normalized: "c:\\windows\\microsoft.net\\framework\\v2.0.50727\\uninstallcommon.sql"), lpNewFileName="C:\\Windows\\Microsoft.NET\\Framework\\v2.0.50727\\UninstallCommon.sql" (normalized: "c:\\windows\\microsoft.net\\framework\\v2.0.50727\\uninstallcommon.sql")) returned 1 [0106.681] CreateFileW (lpFileName="C:\\Windows\\Microsoft.NET\\Framework\\v2.0.50727\\UninstallMembership.sql" (normalized: "c:\\windows\\microsoft.net\\framework\\v2.0.50727\\uninstallmembership.sql"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x178 [0106.682] GetFileType (hFile=0x178) returned 0x1 [0106.682] GetFileType (hFile=0x178) returned 0x1 [0106.682] GetFileSize (in: hFile=0x178, lpFileSizeHigh=0x31e790 | out: lpFileSizeHigh=0x31e790*=0x0) returned 0x1afd [0106.682] ReadFile (in: hFile=0x178, lpBuffer=0x282bb98, nNumberOfBytesToRead=0x1afd, lpNumberOfBytesRead=0x31e73c, lpOverlapped=0x0 | out: lpBuffer=0x282bb98*, lpNumberOfBytesRead=0x31e73c*=0x1afd, lpOverlapped=0x0) returned 1 [0106.698] CreateFileW (lpFileName="C:\\Windows\\Microsoft.NET\\Framework\\v2.0.50727\\UninstallMembership.sql" (normalized: "c:\\windows\\microsoft.net\\framework\\v2.0.50727\\uninstallmembership.sql"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x178 [0106.698] GetFileType (hFile=0x178) returned 0x1 [0106.699] GetFileType (hFile=0x178) returned 0x1 [0106.699] WriteFile (in: hFile=0x178, lpBuffer=0x2671c5c*, nNumberOfBytesToWrite=0x1b00, lpNumberOfBytesWritten=0x31e730, lpOverlapped=0x0 | out: lpBuffer=0x2671c5c*, lpNumberOfBytesWritten=0x31e730*=0x1b00, lpOverlapped=0x0) returned 1 [0106.699] MoveFileW (lpExistingFileName="C:\\Windows\\Microsoft.NET\\Framework\\v2.0.50727\\UninstallMembership.sql" (normalized: "c:\\windows\\microsoft.net\\framework\\v2.0.50727\\uninstallmembership.sql"), lpNewFileName="C:\\Windows\\Microsoft.NET\\Framework\\v2.0.50727\\UninstallMembership.sql" (normalized: "c:\\windows\\microsoft.net\\framework\\v2.0.50727\\uninstallmembership.sql")) returned 1 [0106.700] CreateFileW (lpFileName="C:\\Windows\\Microsoft.NET\\Framework\\v2.0.50727\\UninstallPersistSqlState.sql" (normalized: "c:\\windows\\microsoft.net\\framework\\v2.0.50727\\uninstallpersistsqlstate.sql"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x178 [0106.715] GetFileType (hFile=0x178) returned 0x1 [0106.715] GetFileType (hFile=0x178) returned 0x1 [0106.715] GetFileSize (in: hFile=0x178, lpFileSizeHigh=0x31e790 | out: lpFileSizeHigh=0x31e790*=0x0) returned 0x27d3 [0106.715] ReadFile (in: hFile=0x178, lpBuffer=0x2673b28, nNumberOfBytesToRead=0x27d3, lpNumberOfBytesRead=0x31e73c, lpOverlapped=0x0 | out: lpBuffer=0x2673b28*, lpNumberOfBytesRead=0x31e73c*=0x27d3, lpOverlapped=0x0) returned 1 [0106.735] CreateFileW (lpFileName="C:\\Windows\\Microsoft.NET\\Framework\\v2.0.50727\\UninstallPersistSqlState.sql" (normalized: "c:\\windows\\microsoft.net\\framework\\v2.0.50727\\uninstallpersistsqlstate.sql"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x178 [0106.736] GetFileType (hFile=0x178) returned 0x1 [0106.736] GetFileType (hFile=0x178) returned 0x1 [0106.736] WriteFile (in: hFile=0x178, lpBuffer=0x26cd1cc*, nNumberOfBytesToWrite=0x27e0, lpNumberOfBytesWritten=0x31e730, lpOverlapped=0x0 | out: lpBuffer=0x26cd1cc*, lpNumberOfBytesWritten=0x31e730*=0x27e0, lpOverlapped=0x0) returned 1 [0106.738] MoveFileW (lpExistingFileName="C:\\Windows\\Microsoft.NET\\Framework\\v2.0.50727\\UninstallPersistSqlState.sql" (normalized: "c:\\windows\\microsoft.net\\framework\\v2.0.50727\\uninstallpersistsqlstate.sql"), lpNewFileName="C:\\Windows\\Microsoft.NET\\Framework\\v2.0.50727\\UninstallPersistSqlState.sql" (normalized: "c:\\windows\\microsoft.net\\framework\\v2.0.50727\\uninstallpersistsqlstate.sql")) returned 1 [0106.738] CreateFileW (lpFileName="C:\\Windows\\Microsoft.NET\\Framework\\v2.0.50727\\UninstallPersonalization.sql" (normalized: "c:\\windows\\microsoft.net\\framework\\v2.0.50727\\uninstallpersonalization.sql"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x178 [0106.739] GetFileType (hFile=0x178) returned 0x1 [0106.739] GetFileType (hFile=0x178) returned 0x1 [0106.739] GetFileSize (in: hFile=0x178, lpFileSizeHigh=0x31e790 | out: lpFileSizeHigh=0x31e790*=0x0) returned 0x1d41 [0106.739] ReadFile (in: hFile=0x178, lpBuffer=0x26cfda8, nNumberOfBytesToRead=0x1d41, lpNumberOfBytesRead=0x31e73c, lpOverlapped=0x0 | out: lpBuffer=0x26cfda8*, lpNumberOfBytesRead=0x31e73c*=0x1d41, lpOverlapped=0x0) returned 1 [0106.760] CreateFileW (lpFileName="C:\\Windows\\Microsoft.NET\\Framework\\v2.0.50727\\UninstallPersonalization.sql" (normalized: "c:\\windows\\microsoft.net\\framework\\v2.0.50727\\uninstallpersonalization.sql"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x178 [0106.760] GetFileType (hFile=0x178) returned 0x1 [0106.760] GetFileType (hFile=0x178) returned 0x1 [0106.760] WriteFile (in: hFile=0x178, lpBuffer=0x2725e20*, nNumberOfBytesToWrite=0x1d50, lpNumberOfBytesWritten=0x31e730, lpOverlapped=0x0 | out: lpBuffer=0x2725e20*, lpNumberOfBytesWritten=0x31e730*=0x1d50, lpOverlapped=0x0) returned 1 [0106.761] MoveFileW (lpExistingFileName="C:\\Windows\\Microsoft.NET\\Framework\\v2.0.50727\\UninstallPersonalization.sql" (normalized: "c:\\windows\\microsoft.net\\framework\\v2.0.50727\\uninstallpersonalization.sql"), lpNewFileName="C:\\Windows\\Microsoft.NET\\Framework\\v2.0.50727\\UninstallPersonalization.sql" (normalized: "c:\\windows\\microsoft.net\\framework\\v2.0.50727\\uninstallpersonalization.sql")) returned 1 [0106.762] CreateFileW (lpFileName="C:\\Windows\\Microsoft.NET\\Framework\\v2.0.50727\\UninstallRoles.sql" (normalized: "c:\\windows\\microsoft.net\\framework\\v2.0.50727\\uninstallroles.sql"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x178 [0106.763] GetFileType (hFile=0x178) returned 0x1 [0106.763] GetFileType (hFile=0x178) returned 0x1 [0106.763] GetFileSize (in: hFile=0x178, lpFileSizeHigh=0x31e790 | out: lpFileSizeHigh=0x31e790*=0x0) returned 0x16ed [0106.763] ReadFile (in: hFile=0x178, lpBuffer=0x2727f5c, nNumberOfBytesToRead=0x16ed, lpNumberOfBytesRead=0x31e73c, lpOverlapped=0x0 | out: lpBuffer=0x2727f5c*, lpNumberOfBytesRead=0x31e73c*=0x16ed, lpOverlapped=0x0) returned 1 [0106.777] CreateFileW (lpFileName="C:\\Windows\\Microsoft.NET\\Framework\\v2.0.50727\\UninstallRoles.sql" (normalized: "c:\\windows\\microsoft.net\\framework\\v2.0.50727\\uninstallroles.sql"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x178 [0106.778] GetFileType (hFile=0x178) returned 0x1 [0106.778] GetFileType (hFile=0x178) returned 0x1 [0106.778] WriteFile (in: hFile=0x178, lpBuffer=0x277bff4*, nNumberOfBytesToWrite=0x16f0, lpNumberOfBytesWritten=0x31e730, lpOverlapped=0x0 | out: lpBuffer=0x277bff4*, lpNumberOfBytesWritten=0x31e730*=0x16f0, lpOverlapped=0x0) returned 1 [0106.779] MoveFileW (lpExistingFileName="C:\\Windows\\Microsoft.NET\\Framework\\v2.0.50727\\UninstallRoles.sql" (normalized: "c:\\windows\\microsoft.net\\framework\\v2.0.50727\\uninstallroles.sql"), lpNewFileName="C:\\Windows\\Microsoft.NET\\Framework\\v2.0.50727\\UninstallRoles.sql" (normalized: "c:\\windows\\microsoft.net\\framework\\v2.0.50727\\uninstallroles.sql")) returned 1 [0106.780] CreateFileW (lpFileName="C:\\Windows\\Microsoft.NET\\Framework\\v2.0.50727\\UninstallSqlState.sql" (normalized: "c:\\windows\\microsoft.net\\framework\\v2.0.50727\\uninstallsqlstate.sql"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x178 [0106.780] GetFileType (hFile=0x178) returned 0x1 [0106.781] GetFileType (hFile=0x178) returned 0x1 [0106.781] GetFileSize (in: hFile=0x178, lpFileSizeHigh=0x31e790 | out: lpFileSizeHigh=0x31e790*=0x0) returned 0x25db [0106.781] ReadFile (in: hFile=0x178, lpBuffer=0x277da70, nNumberOfBytesToRead=0x25db, lpNumberOfBytesRead=0x31e73c, lpOverlapped=0x0 | out: lpBuffer=0x277da70*, lpNumberOfBytesRead=0x31e73c*=0x25db, lpOverlapped=0x0) returned 1 [0106.794] CreateFileW (lpFileName="C:\\Windows\\Microsoft.NET\\Framework\\v2.0.50727\\UninstallSqlState.sql" (normalized: "c:\\windows\\microsoft.net\\framework\\v2.0.50727\\uninstallsqlstate.sql"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x178 [0106.795] GetFileType (hFile=0x178) returned 0x1 [0106.795] GetFileType (hFile=0x178) returned 0x1 [0106.795] WriteFile (in: hFile=0x178, lpBuffer=0x27d65b8*, nNumberOfBytesToWrite=0x25e0, lpNumberOfBytesWritten=0x31e730, lpOverlapped=0x0 | out: lpBuffer=0x27d65b8*, lpNumberOfBytesWritten=0x31e730*=0x25e0, lpOverlapped=0x0) returned 1 [0106.796] MoveFileW (lpExistingFileName="C:\\Windows\\Microsoft.NET\\Framework\\v2.0.50727\\UninstallSqlState.sql" (normalized: "c:\\windows\\microsoft.net\\framework\\v2.0.50727\\uninstallsqlstate.sql"), lpNewFileName="C:\\Windows\\Microsoft.NET\\Framework\\v2.0.50727\\UninstallSqlState.sql" (normalized: "c:\\windows\\microsoft.net\\framework\\v2.0.50727\\uninstallsqlstate.sql")) returned 1 [0106.797] CreateFileW (lpFileName="C:\\Windows\\Microsoft.NET\\Framework\\v2.0.50727\\UninstallSqlStateTemplate.sql" (normalized: "c:\\windows\\microsoft.net\\framework\\v2.0.50727\\uninstallsqlstatetemplate.sql"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x178 [0106.797] GetFileType (hFile=0x178) returned 0x1 [0106.798] GetFileType (hFile=0x178) returned 0x1 [0106.798] GetFileSize (in: hFile=0x178, lpFileSizeHigh=0x31e790 | out: lpFileSizeHigh=0x31e790*=0x0) returned 0x2e15 [0106.798] ReadFile (in: hFile=0x178, lpBuffer=0x27d8f54, nNumberOfBytesToRead=0x2e15, lpNumberOfBytesRead=0x31e73c, lpOverlapped=0x0 | out: lpBuffer=0x27d8f54*, lpNumberOfBytesRead=0x31e73c*=0x2e15, lpOverlapped=0x0) returned 1 [0106.812] CreateFileW (lpFileName="C:\\Windows\\Microsoft.NET\\Framework\\v2.0.50727\\UninstallSqlStateTemplate.sql" (normalized: "c:\\windows\\microsoft.net\\framework\\v2.0.50727\\uninstallsqlstatetemplate.sql"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x178 [0106.813] GetFileType (hFile=0x178) returned 0x1 [0106.813] GetFileType (hFile=0x178) returned 0x1 [0106.813] WriteFile (in: hFile=0x178, lpBuffer=0x28343dc*, nNumberOfBytesToWrite=0x2e20, lpNumberOfBytesWritten=0x31e730, lpOverlapped=0x0 | out: lpBuffer=0x28343dc*, lpNumberOfBytesWritten=0x31e730*=0x2e20, lpOverlapped=0x0) returned 1 [0106.814] MoveFileW (lpExistingFileName="C:\\Windows\\Microsoft.NET\\Framework\\v2.0.50727\\UninstallSqlStateTemplate.sql" (normalized: "c:\\windows\\microsoft.net\\framework\\v2.0.50727\\uninstallsqlstatetemplate.sql"), lpNewFileName="C:\\Windows\\Microsoft.NET\\Framework\\v2.0.50727\\UninstallSqlStateTemplate.sql" (normalized: "c:\\windows\\microsoft.net\\framework\\v2.0.50727\\uninstallsqlstatetemplate.sql")) returned 1 [0106.814] CreateFileW (lpFileName="C:\\Windows\\Microsoft.NET\\Framework\\v2.0.50727\\UninstallWebEventSqlProvider.sql" (normalized: "c:\\windows\\microsoft.net\\framework\\v2.0.50727\\uninstallwebeventsqlprovider.sql"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x178 [0106.822] GetFileType (hFile=0x178) returned 0x1 [0106.822] GetFileType (hFile=0x178) returned 0x1 [0106.822] GetFileSize (in: hFile=0x178, lpFileSizeHigh=0x31e790 | out: lpFileSizeHigh=0x31e790*=0x0) returned 0xbbe [0106.822] ReadFile (in: hFile=0x178, lpBuffer=0x28381d4, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x31e73c, lpOverlapped=0x0 | out: lpBuffer=0x28381d4*, lpNumberOfBytesRead=0x31e73c*=0xbbe, lpOverlapped=0x0) returned 1 [0106.838] CreateFileW (lpFileName="C:\\Windows\\Microsoft.NET\\Framework\\v2.0.50727\\UninstallWebEventSqlProvider.sql" (normalized: "c:\\windows\\microsoft.net\\framework\\v2.0.50727\\uninstallwebeventsqlprovider.sql"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x178 [0106.839] GetFileType (hFile=0x178) returned 0x1 [0106.839] GetFileType (hFile=0x178) returned 0x1 [0106.839] WriteFile (in: hFile=0x178, lpBuffer=0x2688c70*, nNumberOfBytesToWrite=0xbc0, lpNumberOfBytesWritten=0x31e704, lpOverlapped=0x0 | out: lpBuffer=0x2688c70*, lpNumberOfBytesWritten=0x31e704*=0xbc0, lpOverlapped=0x0) returned 1 [0106.840] MoveFileW (lpExistingFileName="C:\\Windows\\Microsoft.NET\\Framework\\v2.0.50727\\UninstallWebEventSqlProvider.sql" (normalized: "c:\\windows\\microsoft.net\\framework\\v2.0.50727\\uninstallwebeventsqlprovider.sql"), lpNewFileName="C:\\Windows\\Microsoft.NET\\Framework\\v2.0.50727\\UninstallWebEventSqlProvider.sql" (normalized: "c:\\windows\\microsoft.net\\framework\\v2.0.50727\\uninstallwebeventsqlprovider.sql")) returned 1 [0106.844] CreateFileW (lpFileName="C:\\Windows\\Microsoft.NET\\Framework\\v2.0.50727\\ASP.NETWebAdminFiles\\WebAdminHelp.aspx" (normalized: "c:\\windows\\microsoft.net\\framework\\v2.0.50727\\asp.netwebadminfiles\\webadminhelp.aspx"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x178 [0106.846] GetFileType (hFile=0x178) returned 0x1 [0106.846] GetFileType (hFile=0x178) returned 0x1 [0106.846] GetFileSize (in: hFile=0x178, lpFileSizeHigh=0x31e718 | out: lpFileSizeHigh=0x31e718*=0x0) returned 0x1a52 [0106.846] ReadFile (in: hFile=0x178, lpBuffer=0x268ff14, nNumberOfBytesToRead=0x1a52, lpNumberOfBytesRead=0x31e6c4, lpOverlapped=0x0 | out: lpBuffer=0x268ff14*, lpNumberOfBytesRead=0x31e6c4*=0x1a52, lpOverlapped=0x0) returned 1 [0106.860] CreateFileW (lpFileName="C:\\Windows\\Microsoft.NET\\Framework\\v2.0.50727\\ASP.NETWebAdminFiles\\WebAdminHelp.aspx" (normalized: "c:\\windows\\microsoft.net\\framework\\v2.0.50727\\asp.netwebadminfiles\\webadminhelp.aspx"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x178 [0106.861] GetFileType (hFile=0x178) returned 0x1 [0106.861] GetFileType (hFile=0x178) returned 0x1 [0106.861] WriteFile (in: hFile=0x178, lpBuffer=0x26e5238*, nNumberOfBytesToWrite=0x1a60, lpNumberOfBytesWritten=0x31e6b8, lpOverlapped=0x0 | out: lpBuffer=0x26e5238*, lpNumberOfBytesWritten=0x31e6b8*=0x1a60, lpOverlapped=0x0) returned 1 [0106.862] MoveFileW (lpExistingFileName="C:\\Windows\\Microsoft.NET\\Framework\\v2.0.50727\\ASP.NETWebAdminFiles\\WebAdminHelp.aspx" (normalized: "c:\\windows\\microsoft.net\\framework\\v2.0.50727\\asp.netwebadminfiles\\webadminhelp.aspx"), lpNewFileName="C:\\Windows\\Microsoft.NET\\Framework\\v2.0.50727\\ASP.NETWebAdminFiles\\WebAdminHelp.aspx" (normalized: "c:\\windows\\microsoft.net\\framework\\v2.0.50727\\asp.netwebadminfiles\\webadminhelp.aspx")) returned 1 [0106.862] CreateFileW (lpFileName="C:\\Windows\\Microsoft.NET\\Framework\\v2.0.50727\\ASP.NETWebAdminFiles\\WebAdminHelp_Application.aspx" (normalized: "c:\\windows\\microsoft.net\\framework\\v2.0.50727\\asp.netwebadminfiles\\webadminhelp_application.aspx"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x178 [0106.863] GetFileType (hFile=0x178) returned 0x1 [0106.863] GetFileType (hFile=0x178) returned 0x1 [0106.863] GetFileSize (in: hFile=0x178, lpFileSizeHigh=0x31e718 | out: lpFileSizeHigh=0x31e718*=0x0) returned 0x3503 [0106.863] ReadFile (in: hFile=0x178, lpBuffer=0x26e70e4, nNumberOfBytesToRead=0x3503, lpNumberOfBytesRead=0x31e6c4, lpOverlapped=0x0 | out: lpBuffer=0x26e70e4*, lpNumberOfBytesRead=0x31e6c4*=0x3503, lpOverlapped=0x0) returned 1 [0106.935] CreateFileW (lpFileName="C:\\Windows\\Microsoft.NET\\Framework\\v2.0.50727\\ASP.NETWebAdminFiles\\WebAdminHelp_Application.aspx" (normalized: "c:\\windows\\microsoft.net\\framework\\v2.0.50727\\asp.netwebadminfiles\\webadminhelp_application.aspx"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x178 [0106.936] GetFileType (hFile=0x178) returned 0x1 [0106.936] GetFileType (hFile=0x178) returned 0x1 [0106.936] WriteFile (in: hFile=0x178, lpBuffer=0x274481c*, nNumberOfBytesToWrite=0x3510, lpNumberOfBytesWritten=0x31e6b8, lpOverlapped=0x0 | out: lpBuffer=0x274481c*, lpNumberOfBytesWritten=0x31e6b8*=0x3510, lpOverlapped=0x0) returned 1 [0106.938] MoveFileW (lpExistingFileName="C:\\Windows\\Microsoft.NET\\Framework\\v2.0.50727\\ASP.NETWebAdminFiles\\WebAdminHelp_Application.aspx" (normalized: "c:\\windows\\microsoft.net\\framework\\v2.0.50727\\asp.netwebadminfiles\\webadminhelp_application.aspx"), lpNewFileName="C:\\Windows\\Microsoft.NET\\Framework\\v2.0.50727\\ASP.NETWebAdminFiles\\WebAdminHelp_Application.aspx" (normalized: "c:\\windows\\microsoft.net\\framework\\v2.0.50727\\asp.netwebadminfiles\\webadminhelp_application.aspx")) returned 1 [0106.938] CreateFileW (lpFileName="C:\\Windows\\Microsoft.NET\\Framework\\v2.0.50727\\ASP.NETWebAdminFiles\\WebAdminHelp_Internals.aspx" (normalized: "c:\\windows\\microsoft.net\\framework\\v2.0.50727\\asp.netwebadminfiles\\webadminhelp_internals.aspx"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x178 [0106.939] GetFileType (hFile=0x178) returned 0x1 [0106.939] GetFileType (hFile=0x178) returned 0x1 [0106.939] GetFileSize (in: hFile=0x178, lpFileSizeHigh=0x31e718 | out: lpFileSizeHigh=0x31e718*=0x0) returned 0xfec [0106.939] ReadFile (in: hFile=0x178, lpBuffer=0x27491c8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x31e6c4, lpOverlapped=0x0 | out: lpBuffer=0x27491c8*, lpNumberOfBytesRead=0x31e6c4*=0xfec, lpOverlapped=0x0) returned 1 [0106.954] CreateFileW (lpFileName="C:\\Windows\\Microsoft.NET\\Framework\\v2.0.50727\\ASP.NETWebAdminFiles\\WebAdminHelp_Internals.aspx" (normalized: "c:\\windows\\microsoft.net\\framework\\v2.0.50727\\asp.netwebadminfiles\\webadminhelp_internals.aspx"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x178 [0106.955] GetFileType (hFile=0x178) returned 0x1 [0106.955] GetFileType (hFile=0x178) returned 0x1 [0106.955] WriteFile (in: hFile=0x178, lpBuffer=0x279c0d8*, nNumberOfBytesToWrite=0xff0, lpNumberOfBytesWritten=0x31e68c, lpOverlapped=0x0 | out: lpBuffer=0x279c0d8*, lpNumberOfBytesWritten=0x31e68c*=0xff0, lpOverlapped=0x0) returned 1 [0106.957] MoveFileW (lpExistingFileName="C:\\Windows\\Microsoft.NET\\Framework\\v2.0.50727\\ASP.NETWebAdminFiles\\WebAdminHelp_Internals.aspx" (normalized: "c:\\windows\\microsoft.net\\framework\\v2.0.50727\\asp.netwebadminfiles\\webadminhelp_internals.aspx"), lpNewFileName="C:\\Windows\\Microsoft.NET\\Framework\\v2.0.50727\\ASP.NETWebAdminFiles\\WebAdminHelp_Internals.aspx" (normalized: "c:\\windows\\microsoft.net\\framework\\v2.0.50727\\asp.netwebadminfiles\\webadminhelp_internals.aspx")) returned 1 [0106.957] CreateFileW (lpFileName="C:\\Windows\\Microsoft.NET\\Framework\\v2.0.50727\\ASP.NETWebAdminFiles\\WebAdminHelp_Provider.aspx" (normalized: "c:\\windows\\microsoft.net\\framework\\v2.0.50727\\asp.netwebadminfiles\\webadminhelp_provider.aspx"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x178 [0106.958] GetFileType (hFile=0x178) returned 0x1 [0106.958] GetFileType (hFile=0x178) returned 0x1 [0106.958] GetFileSize (in: hFile=0x178, lpFileSizeHigh=0x31e718 | out: lpFileSizeHigh=0x31e718*=0x0) returned 0x1a2d [0106.958] ReadFile (in: hFile=0x178, lpBuffer=0x279d3fc, nNumberOfBytesToRead=0x1a2d, lpNumberOfBytesRead=0x31e6c4, lpOverlapped=0x0 | out: lpBuffer=0x279d3fc*, lpNumberOfBytesRead=0x31e6c4*=0x1a2d, lpOverlapped=0x0) returned 1 [0106.972] CreateFileW (lpFileName="C:\\Windows\\Microsoft.NET\\Framework\\v2.0.50727\\ASP.NETWebAdminFiles\\WebAdminHelp_Provider.aspx" (normalized: "c:\\windows\\microsoft.net\\framework\\v2.0.50727\\asp.netwebadminfiles\\webadminhelp_provider.aspx"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x178 [0106.973] GetFileType (hFile=0x178) returned 0x1 [0106.973] GetFileType (hFile=0x178) returned 0x1 [0106.973] WriteFile (in: hFile=0x178, lpBuffer=0x27f24d4*, nNumberOfBytesToWrite=0x1a30, lpNumberOfBytesWritten=0x31e6b8, lpOverlapped=0x0 | out: lpBuffer=0x27f24d4*, lpNumberOfBytesWritten=0x31e6b8*=0x1a30, lpOverlapped=0x0) returned 1 [0106.974] MoveFileW (lpExistingFileName="C:\\Windows\\Microsoft.NET\\Framework\\v2.0.50727\\ASP.NETWebAdminFiles\\WebAdminHelp_Provider.aspx" (normalized: "c:\\windows\\microsoft.net\\framework\\v2.0.50727\\asp.netwebadminfiles\\webadminhelp_provider.aspx"), lpNewFileName="C:\\Windows\\Microsoft.NET\\Framework\\v2.0.50727\\ASP.NETWebAdminFiles\\WebAdminHelp_Provider.aspx" (normalized: "c:\\windows\\microsoft.net\\framework\\v2.0.50727\\asp.netwebadminfiles\\webadminhelp_provider.aspx")) returned 1 [0106.975] CreateFileW (lpFileName="C:\\Windows\\Microsoft.NET\\Framework\\v2.0.50727\\ASP.NETWebAdminFiles\\WebAdminHelp_Security.aspx" (normalized: "c:\\windows\\microsoft.net\\framework\\v2.0.50727\\asp.netwebadminfiles\\webadminhelp_security.aspx"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x178 [0106.975] GetFileType (hFile=0x178) returned 0x1 [0106.975] GetFileType (hFile=0x178) returned 0x1 [0106.975] GetFileSize (in: hFile=0x178, lpFileSizeHigh=0x31e718 | out: lpFileSizeHigh=0x31e718*=0x0) returned 0x2943 [0106.975] ReadFile (in: hFile=0x178, lpBuffer=0x27f4388, nNumberOfBytesToRead=0x2943, lpNumberOfBytesRead=0x31e6c4, lpOverlapped=0x0 | out: lpBuffer=0x27f4388*, lpNumberOfBytesRead=0x31e6c4*=0x2943, lpOverlapped=0x0) returned 1 [0106.990] CreateFileW (lpFileName="C:\\Windows\\Microsoft.NET\\Framework\\v2.0.50727\\ASP.NETWebAdminFiles\\WebAdminHelp_Security.aspx" (normalized: "c:\\windows\\microsoft.net\\framework\\v2.0.50727\\asp.netwebadminfiles\\webadminhelp_security.aspx"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x178 [0106.991] GetFileType (hFile=0x178) returned 0x1 [0106.991] GetFileType (hFile=0x178) returned 0x1 [0106.991] WriteFile (in: hFile=0x178, lpBuffer=0x284e000*, nNumberOfBytesToWrite=0x2950, lpNumberOfBytesWritten=0x31e6b8, lpOverlapped=0x0 | out: lpBuffer=0x284e000*, lpNumberOfBytesWritten=0x31e6b8*=0x2950, lpOverlapped=0x0) returned 1 [0106.992] MoveFileW (lpExistingFileName="C:\\Windows\\Microsoft.NET\\Framework\\v2.0.50727\\ASP.NETWebAdminFiles\\WebAdminHelp_Security.aspx" (normalized: "c:\\windows\\microsoft.net\\framework\\v2.0.50727\\asp.netwebadminfiles\\webadminhelp_security.aspx"), lpNewFileName="C:\\Windows\\Microsoft.NET\\Framework\\v2.0.50727\\ASP.NETWebAdminFiles\\WebAdminHelp_Security.aspx" (normalized: "c:\\windows\\microsoft.net\\framework\\v2.0.50727\\asp.netwebadminfiles\\webadminhelp_security.aspx")) returned 1 [0107.026] CreateFileW (lpFileName="C:\\Windows\\Microsoft.NET\\Framework\\v2.0.50727\\CONFIG\\DefaultWsdlHelpGenerator.aspx" (normalized: "c:\\windows\\microsoft.net\\framework\\v2.0.50727\\config\\defaultwsdlhelpgenerator.aspx"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x178 [0107.028] GetFileType (hFile=0x178) returned 0x1 [0107.028] GetFileType (hFile=0x178) returned 0x1 [0107.028] GetFileSize (in: hFile=0x178, lpFileSizeHigh=0x31e718 | out: lpFileSizeHigh=0x31e718*=0x0) returned 0x11321 [0107.028] ReadFile (in: hFile=0x178, lpBuffer=0x268185c, nNumberOfBytesToRead=0x11321, lpNumberOfBytesRead=0x31e6c4, lpOverlapped=0x0 | out: lpBuffer=0x268185c*, lpNumberOfBytesRead=0x31e6c4*=0x11321, lpOverlapped=0x0) returned 1 [0107.044] CreateFileW (lpFileName="C:\\Windows\\Microsoft.NET\\Framework\\v2.0.50727\\CONFIG\\DefaultWsdlHelpGenerator.aspx" (normalized: "c:\\windows\\microsoft.net\\framework\\v2.0.50727\\config\\defaultwsdlhelpgenerator.aspx"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x178 [0107.046] GetFileType (hFile=0x178) returned 0x1 [0107.046] GetFileType (hFile=0x178) returned 0x1 [0107.046] WriteFile (in: hFile=0x178, lpBuffer=0x2702144*, nNumberOfBytesToWrite=0x11330, lpNumberOfBytesWritten=0x31e6b8, lpOverlapped=0x0 | out: lpBuffer=0x2702144*, lpNumberOfBytesWritten=0x31e6b8*=0x11330, lpOverlapped=0x0) returned 1 [0107.048] MoveFileW (lpExistingFileName="C:\\Windows\\Microsoft.NET\\Framework\\v2.0.50727\\CONFIG\\DefaultWsdlHelpGenerator.aspx" (normalized: "c:\\windows\\microsoft.net\\framework\\v2.0.50727\\config\\defaultwsdlhelpgenerator.aspx"), lpNewFileName="C:\\Windows\\Microsoft.NET\\Framework\\v2.0.50727\\CONFIG\\DefaultWsdlHelpGenerator.aspx" (normalized: "c:\\windows\\microsoft.net\\framework\\v2.0.50727\\config\\defaultwsdlhelpgenerator.aspx")) returned 1 [0107.054] CreateFileW (lpFileName="C:\\Windows\\Microsoft.NET\\Framework\\v2.0.50727\\RedistList\\FrameworkList.xml" (normalized: "c:\\windows\\microsoft.net\\framework\\v2.0.50727\\redistlist\\frameworklist.xml"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x178 [0107.056] GetFileType (hFile=0x178) returned 0x1 [0107.056] GetFileType (hFile=0x178) returned 0x1 [0107.056] GetFileSize (in: hFile=0x178, lpFileSizeHigh=0x31e718 | out: lpFileSizeHigh=0x31e718*=0x0) returned 0x2b87 [0107.056] ReadFile (in: hFile=0x178, lpBuffer=0x272099c, nNumberOfBytesToRead=0x2b87, lpNumberOfBytesRead=0x31e6c4, lpOverlapped=0x0 | out: lpBuffer=0x272099c*, lpNumberOfBytesRead=0x31e6c4*=0x2b87, lpOverlapped=0x0) returned 1 [0107.071] CreateFileW (lpFileName="C:\\Windows\\Microsoft.NET\\Framework\\v2.0.50727\\RedistList\\FrameworkList.xml" (normalized: "c:\\windows\\microsoft.net\\framework\\v2.0.50727\\redistlist\\frameworklist.xml"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0xffffffff [0107.072] CreateFileW (lpFileName="C:\\Windows\\Microsoft.NET\\Framework\\v2.0.50727\\SubsetList\\Client.xml" (normalized: "c:\\windows\\microsoft.net\\framework\\v2.0.50727\\subsetlist\\client.xml"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x178 [0107.072] GetFileType (hFile=0x178) returned 0x1 [0107.072] GetFileType (hFile=0x178) returned 0x1 [0107.072] GetFileSize (in: hFile=0x178, lpFileSizeHigh=0x31e718 | out: lpFileSizeHigh=0x31e718*=0x0) returned 0x1219 [0107.072] ReadFile (in: hFile=0x178, lpBuffer=0x277fa84, nNumberOfBytesToRead=0x1219, lpNumberOfBytesRead=0x31e6c4, lpOverlapped=0x0 | out: lpBuffer=0x277fa84*, lpNumberOfBytesRead=0x31e6c4*=0x1219, lpOverlapped=0x0) returned 1 [0107.086] CreateFileW (lpFileName="C:\\Windows\\Microsoft.NET\\Framework\\v2.0.50727\\SubsetList\\Client.xml" (normalized: "c:\\windows\\microsoft.net\\framework\\v2.0.50727\\subsetlist\\client.xml"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0xffffffff [0107.097] CreateFileW (lpFileName="C:\\Windows\\Microsoft.NET\\Framework\\v3.0\\Windows Workflow Foundation\\SQL\\en\\SqlPersistenceService_Logic.sql" (normalized: "c:\\windows\\microsoft.net\\framework\\v3.0\\windows workflow foundation\\sql\\en\\sqlpersistenceservice_logic.sql"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x178 [0107.098] GetFileType (hFile=0x178) returned 0x1 [0107.098] GetFileType (hFile=0x178) returned 0x1 [0107.098] GetFileSize (in: hFile=0x178, lpFileSizeHigh=0x31e628 | out: lpFileSizeHigh=0x31e628*=0x0) returned 0x5d5c [0107.098] ReadFile (in: hFile=0x178, lpBuffer=0x27e65f8, nNumberOfBytesToRead=0x5d5c, lpNumberOfBytesRead=0x31e5d4, lpOverlapped=0x0 | out: lpBuffer=0x27e65f8*, lpNumberOfBytesRead=0x31e5d4*=0x5d5c, lpOverlapped=0x0) returned 1 [0107.113] CreateFileW (lpFileName="C:\\Windows\\Microsoft.NET\\Framework\\v3.0\\Windows Workflow Foundation\\SQL\\en\\SqlPersistenceService_Logic.sql" (normalized: "c:\\windows\\microsoft.net\\framework\\v3.0\\windows workflow foundation\\sql\\en\\sqlpersistenceservice_logic.sql"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x178 [0107.114] GetFileType (hFile=0x178) returned 0x1 [0107.114] GetFileType (hFile=0x178) returned 0x1 [0107.114] WriteFile (in: hFile=0x178, lpBuffer=0x28506bc*, nNumberOfBytesToWrite=0x5d60, lpNumberOfBytesWritten=0x31e5c8, lpOverlapped=0x0 | out: lpBuffer=0x28506bc*, lpNumberOfBytesWritten=0x31e5c8*=0x5d60, lpOverlapped=0x0) returned 1 [0107.115] MoveFileW (lpExistingFileName="C:\\Windows\\Microsoft.NET\\Framework\\v3.0\\Windows Workflow Foundation\\SQL\\en\\SqlPersistenceService_Logic.sql" (normalized: "c:\\windows\\microsoft.net\\framework\\v3.0\\windows workflow foundation\\sql\\en\\sqlpersistenceservice_logic.sql"), lpNewFileName="C:\\Windows\\Microsoft.NET\\Framework\\v3.0\\Windows Workflow Foundation\\SQL\\en\\SqlPersistenceService_Logic.sql" (normalized: "c:\\windows\\microsoft.net\\framework\\v3.0\\windows workflow foundation\\sql\\en\\sqlpersistenceservice_logic.sql")) returned 1 [0107.115] CreateFileW (lpFileName="C:\\Windows\\Microsoft.NET\\Framework\\v3.0\\Windows Workflow Foundation\\SQL\\en\\SqlPersistenceService_Schema.sql" (normalized: "c:\\windows\\microsoft.net\\framework\\v3.0\\windows workflow foundation\\sql\\en\\sqlpersistenceservice_schema.sql"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x178 [0107.115] GetFileType (hFile=0x178) returned 0x1 [0107.115] GetFileType (hFile=0x178) returned 0x1 [0107.115] GetFileSize (in: hFile=0x178, lpFileSizeHigh=0x31e628 | out: lpFileSizeHigh=0x31e628*=0x0) returned 0x10c8 [0107.117] ReadFile (in: hFile=0x178, lpBuffer=0x264d0f4, nNumberOfBytesToRead=0x10c8, lpNumberOfBytesRead=0x31e5d4, lpOverlapped=0x0 | out: lpBuffer=0x264d0f4*, lpNumberOfBytesRead=0x31e5d4*=0x10c8, lpOverlapped=0x0) returned 1 [0107.131] CreateFileW (lpFileName="C:\\Windows\\Microsoft.NET\\Framework\\v3.0\\Windows Workflow Foundation\\SQL\\en\\SqlPersistenceService_Schema.sql" (normalized: "c:\\windows\\microsoft.net\\framework\\v3.0\\windows workflow foundation\\sql\\en\\sqlpersistenceservice_schema.sql"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x178 [0107.132] GetFileType (hFile=0x178) returned 0x1 [0107.132] GetFileType (hFile=0x178) returned 0x1 [0107.132] WriteFile (in: hFile=0x178, lpBuffer=0x269f444*, nNumberOfBytesToWrite=0x10d0, lpNumberOfBytesWritten=0x31e5c8, lpOverlapped=0x0 | out: lpBuffer=0x269f444*, lpNumberOfBytesWritten=0x31e5c8*=0x10d0, lpOverlapped=0x0) returned 1 [0107.133] MoveFileW (lpExistingFileName="C:\\Windows\\Microsoft.NET\\Framework\\v3.0\\Windows Workflow Foundation\\SQL\\en\\SqlPersistenceService_Schema.sql" (normalized: "c:\\windows\\microsoft.net\\framework\\v3.0\\windows workflow foundation\\sql\\en\\sqlpersistenceservice_schema.sql"), lpNewFileName="C:\\Windows\\Microsoft.NET\\Framework\\v3.0\\Windows Workflow Foundation\\SQL\\en\\SqlPersistenceService_Schema.sql" (normalized: "c:\\windows\\microsoft.net\\framework\\v3.0\\windows workflow foundation\\sql\\en\\sqlpersistenceservice_schema.sql")) returned 1 [0107.133] CreateFileW (lpFileName="C:\\Windows\\Microsoft.NET\\Framework\\v3.0\\Windows Workflow Foundation\\SQL\\en\\Tracking_Logic.sql" (normalized: "c:\\windows\\microsoft.net\\framework\\v3.0\\windows workflow foundation\\sql\\en\\tracking_logic.sql"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x178 [0107.134] GetFileType (hFile=0x178) returned 0x1 [0107.134] GetFileType (hFile=0x178) returned 0x1 [0107.134] GetFileSize (in: hFile=0x178, lpFileSizeHigh=0x31e628 | out: lpFileSizeHigh=0x31e628*=0x0) returned 0x5d2a4 [0107.135] ReadFile (in: hFile=0x178, lpBuffer=0x11c96a18, nNumberOfBytesToRead=0x5d2a4, lpNumberOfBytesRead=0x31e5d4, lpOverlapped=0x0 | out: lpBuffer=0x11c96a18*, lpNumberOfBytesRead=0x31e5d4*=0x5d2a4, lpOverlapped=0x0) returned 1 [0107.175] CreateFileW (lpFileName="C:\\Windows\\Microsoft.NET\\Framework\\v3.0\\Windows Workflow Foundation\\SQL\\en\\Tracking_Logic.sql" (normalized: "c:\\windows\\microsoft.net\\framework\\v3.0\\windows workflow foundation\\sql\\en\\tracking_logic.sql"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x178 [0107.178] GetFileType (hFile=0x178) returned 0x1 [0107.178] GetFileType (hFile=0x178) returned 0x1 [0107.178] WriteFile (in: hFile=0x178, lpBuffer=0x11e687b8*, nNumberOfBytesToWrite=0x5d2b0, lpNumberOfBytesWritten=0x31e5c8, lpOverlapped=0x0 | out: lpBuffer=0x11e687b8*, lpNumberOfBytesWritten=0x31e5c8*=0x5d2b0, lpOverlapped=0x0) returned 1 [0107.184] MoveFileW (lpExistingFileName="C:\\Windows\\Microsoft.NET\\Framework\\v3.0\\Windows Workflow Foundation\\SQL\\en\\Tracking_Logic.sql" (normalized: "c:\\windows\\microsoft.net\\framework\\v3.0\\windows workflow foundation\\sql\\en\\tracking_logic.sql"), lpNewFileName="C:\\Windows\\Microsoft.NET\\Framework\\v3.0\\Windows Workflow Foundation\\SQL\\en\\Tracking_Logic.sql" (normalized: "c:\\windows\\microsoft.net\\framework\\v3.0\\windows workflow foundation\\sql\\en\\tracking_logic.sql")) returned 1 [0107.184] CreateFileW (lpFileName="C:\\Windows\\Microsoft.NET\\Framework\\v3.0\\Windows Workflow Foundation\\SQL\\en\\Tracking_Schema.sql" (normalized: "c:\\windows\\microsoft.net\\framework\\v3.0\\windows workflow foundation\\sql\\en\\tracking_schema.sql"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x178 [0107.184] GetFileType (hFile=0x178) returned 0x1 [0107.184] GetFileType (hFile=0x178) returned 0x1 [0107.184] GetFileSize (in: hFile=0x178, lpFileSizeHigh=0x31e628 | out: lpFileSizeHigh=0x31e628*=0x0) returned 0xc66e [0107.184] ReadFile (in: hFile=0x178, lpBuffer=0x26edc44, nNumberOfBytesToRead=0xc66e, lpNumberOfBytesRead=0x31e5d4, lpOverlapped=0x0 | out: lpBuffer=0x26edc44*, lpNumberOfBytesRead=0x31e5d4*=0xc66e, lpOverlapped=0x0) returned 1 [0107.200] CreateFileW (lpFileName="C:\\Windows\\Microsoft.NET\\Framework\\v3.0\\Windows Workflow Foundation\\SQL\\en\\Tracking_Schema.sql" (normalized: "c:\\windows\\microsoft.net\\framework\\v3.0\\windows workflow foundation\\sql\\en\\tracking_schema.sql"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x178 [0107.201] GetFileType (hFile=0x178) returned 0x1 [0107.202] GetFileType (hFile=0x178) returned 0x1 [0107.202] WriteFile (in: hFile=0x178, lpBuffer=0x275fd90*, nNumberOfBytesToWrite=0xc670, lpNumberOfBytesWritten=0x31e5c8, lpOverlapped=0x0 | out: lpBuffer=0x275fd90*, lpNumberOfBytesWritten=0x31e5c8*=0xc670, lpOverlapped=0x0) returned 1 [0107.203] MoveFileW (lpExistingFileName="C:\\Windows\\Microsoft.NET\\Framework\\v3.0\\Windows Workflow Foundation\\SQL\\en\\Tracking_Schema.sql" (normalized: "c:\\windows\\microsoft.net\\framework\\v3.0\\windows workflow foundation\\sql\\en\\tracking_schema.sql"), lpNewFileName="C:\\Windows\\Microsoft.NET\\Framework\\v3.0\\Windows Workflow Foundation\\SQL\\en\\Tracking_Schema.sql" (normalized: "c:\\windows\\microsoft.net\\framework\\v3.0\\windows workflow foundation\\sql\\en\\tracking_schema.sql")) returned 1 [0107.213] CreateFileW (lpFileName="C:\\Windows\\Microsoft.NET\\Framework\\v3.5\\SQL\\EN\\DropSqlPersistenceProviderLogic.sql" (normalized: "c:\\windows\\microsoft.net\\framework\\v3.5\\sql\\en\\dropsqlpersistenceproviderlogic.sql"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x178 [0107.214] GetFileType (hFile=0x178) returned 0x1 [0107.214] GetFileType (hFile=0x178) returned 0x1 [0107.214] GetFileSize (in: hFile=0x178, lpFileSizeHigh=0x31e6a0 | out: lpFileSizeHigh=0x31e6a0*=0x0) returned 0x960 [0107.214] ReadFile (in: hFile=0x178, lpBuffer=0x27811a4, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x31e64c, lpOverlapped=0x0 | out: lpBuffer=0x27811a4*, lpNumberOfBytesRead=0x31e64c*=0x960, lpOverlapped=0x0) returned 1 [0107.228] CreateFileW (lpFileName="C:\\Windows\\Microsoft.NET\\Framework\\v3.5\\SQL\\EN\\DropSqlPersistenceProviderLogic.sql" (normalized: "c:\\windows\\microsoft.net\\framework\\v3.5\\sql\\en\\dropsqlpersistenceproviderlogic.sql"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0xffffffff [0107.297] CreateFileW (lpFileName="C:\\Windows\\Microsoft.NET\\Framework\\v4.0.30319\\InstallCommon.sql" (normalized: "c:\\windows\\microsoft.net\\framework\\v4.0.30319\\installcommon.sql"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x178 [0107.298] GetFileType (hFile=0x178) returned 0x1 [0107.298] GetFileType (hFile=0x178) returned 0x1 [0107.298] GetFileSize (in: hFile=0x178, lpFileSizeHigh=0x31e790 | out: lpFileSizeHigh=0x31e790*=0x0) returned 0x601b [0107.298] ReadFile (in: hFile=0x178, lpBuffer=0x28295f4, nNumberOfBytesToRead=0x601b, lpNumberOfBytesRead=0x31e73c, lpOverlapped=0x0 | out: lpBuffer=0x28295f4*, lpNumberOfBytesRead=0x31e73c*=0x601b, lpOverlapped=0x0) returned 1 [0107.315] CreateFileW (lpFileName="C:\\Windows\\Microsoft.NET\\Framework\\v4.0.30319\\InstallCommon.sql" (normalized: "c:\\windows\\microsoft.net\\framework\\v4.0.30319\\installcommon.sql"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x178 [0107.317] GetFileType (hFile=0x178) returned 0x1 [0107.317] GetFileType (hFile=0x178) returned 0x1 [0107.317] WriteFile (in: hFile=0x178, lpBuffer=0x26a86ac*, nNumberOfBytesToWrite=0x6020, lpNumberOfBytesWritten=0x31e730, lpOverlapped=0x0 | out: lpBuffer=0x26a86ac*, lpNumberOfBytesWritten=0x31e730*=0x6020, lpOverlapped=0x0) returned 1 [0107.318] MoveFileW (lpExistingFileName="C:\\Windows\\Microsoft.NET\\Framework\\v4.0.30319\\InstallCommon.sql" (normalized: "c:\\windows\\microsoft.net\\framework\\v4.0.30319\\installcommon.sql"), lpNewFileName="C:\\Windows\\Microsoft.NET\\Framework\\v4.0.30319\\InstallCommon.sql" (normalized: "c:\\windows\\microsoft.net\\framework\\v4.0.30319\\installcommon.sql")) returned 1 [0107.318] CreateFileW (lpFileName="C:\\Windows\\Microsoft.NET\\Framework\\v4.0.30319\\InstallMembership.sql" (normalized: "c:\\windows\\microsoft.net\\framework\\v4.0.30319\\installmembership.sql"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x178 [0107.319] GetFileType (hFile=0x178) returned 0x1 [0107.319] GetFileType (hFile=0x178) returned 0x1 [0107.319] GetFileSize (in: hFile=0x178, lpFileSizeHigh=0x31e790 | out: lpFileSizeHigh=0x31e790*=0x0) returned 0xdbb8 [0107.319] ReadFile (in: hFile=0x178, lpBuffer=0x26aea48, nNumberOfBytesToRead=0xdbb8, lpNumberOfBytesRead=0x31e73c, lpOverlapped=0x0 | out: lpBuffer=0x26aea48*, lpNumberOfBytesRead=0x31e73c*=0xdbb8, lpOverlapped=0x0) returned 1 [0107.336] CreateFileW (lpFileName="C:\\Windows\\Microsoft.NET\\Framework\\v4.0.30319\\InstallMembership.sql" (normalized: "c:\\windows\\microsoft.net\\framework\\v4.0.30319\\installmembership.sql"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x178 [0107.337] GetFileType (hFile=0x178) returned 0x1 [0107.337] GetFileType (hFile=0x178) returned 0x1 [0107.337] WriteFile (in: hFile=0x178, lpBuffer=0x2724cdc*, nNumberOfBytesToWrite=0xdbc0, lpNumberOfBytesWritten=0x31e730, lpOverlapped=0x0 | out: lpBuffer=0x2724cdc*, lpNumberOfBytesWritten=0x31e730*=0xdbc0, lpOverlapped=0x0) returned 1 [0107.339] MoveFileW (lpExistingFileName="C:\\Windows\\Microsoft.NET\\Framework\\v4.0.30319\\InstallMembership.sql" (normalized: "c:\\windows\\microsoft.net\\framework\\v4.0.30319\\installmembership.sql"), lpNewFileName="C:\\Windows\\Microsoft.NET\\Framework\\v4.0.30319\\InstallMembership.sql" (normalized: "c:\\windows\\microsoft.net\\framework\\v4.0.30319\\installmembership.sql")) returned 1 [0107.339] CreateFileW (lpFileName="C:\\Windows\\Microsoft.NET\\Framework\\v4.0.30319\\InstallPersistSqlState.sql" (normalized: "c:\\windows\\microsoft.net\\framework\\v4.0.30319\\installpersistsqlstate.sql"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x178 [0107.339] GetFileType (hFile=0x178) returned 0x1 [0107.340] GetFileType (hFile=0x178) returned 0x1 [0107.340] GetFileSize (in: hFile=0x178, lpFileSizeHigh=0x31e790 | out: lpFileSizeHigh=0x31e790*=0x0) returned 0xd577 [0107.340] ReadFile (in: hFile=0x178, lpBuffer=0x2732c50, nNumberOfBytesToRead=0xd577, lpNumberOfBytesRead=0x31e73c, lpOverlapped=0x0 | out: lpBuffer=0x2732c50*, lpNumberOfBytesRead=0x31e73c*=0xd577, lpOverlapped=0x0) returned 1 [0107.358] CreateFileW (lpFileName="C:\\Windows\\Microsoft.NET\\Framework\\v4.0.30319\\InstallPersistSqlState.sql" (normalized: "c:\\windows\\microsoft.net\\framework\\v4.0.30319\\installpersistsqlstate.sql"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x178 [0107.360] GetFileType (hFile=0x178) returned 0x1 [0107.360] GetFileType (hFile=0x178) returned 0x1 [0107.360] WriteFile (in: hFile=0x178, lpBuffer=0x27a7acc*, nNumberOfBytesToWrite=0xd580, lpNumberOfBytesWritten=0x31e730, lpOverlapped=0x0 | out: lpBuffer=0x27a7acc*, lpNumberOfBytesWritten=0x31e730*=0xd580, lpOverlapped=0x0) returned 1 [0107.362] MoveFileW (lpExistingFileName="C:\\Windows\\Microsoft.NET\\Framework\\v4.0.30319\\InstallPersistSqlState.sql" (normalized: "c:\\windows\\microsoft.net\\framework\\v4.0.30319\\installpersistsqlstate.sql"), lpNewFileName="C:\\Windows\\Microsoft.NET\\Framework\\v4.0.30319\\InstallPersistSqlState.sql" (normalized: "c:\\windows\\microsoft.net\\framework\\v4.0.30319\\installpersistsqlstate.sql")) returned 1 [0107.362] CreateFileW (lpFileName="C:\\Windows\\Microsoft.NET\\Framework\\v4.0.30319\\InstallPersonalization.sql" (normalized: "c:\\windows\\microsoft.net\\framework\\v4.0.30319\\installpersonalization.sql"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x178 [0107.362] GetFileType (hFile=0x178) returned 0x1 [0107.362] GetFileType (hFile=0x178) returned 0x1 [0107.362] GetFileSize (in: hFile=0x178, lpFileSizeHigh=0x31e790 | out: lpFileSizeHigh=0x31e790*=0x0) returned 0x8886 [0107.363] ReadFile (in: hFile=0x178, lpBuffer=0x27b5430, nNumberOfBytesToRead=0x8886, lpNumberOfBytesRead=0x31e73c, lpOverlapped=0x0 | out: lpBuffer=0x27b5430*, lpNumberOfBytesRead=0x31e73c*=0x8886, lpOverlapped=0x0) returned 1 [0107.379] CreateFileW (lpFileName="C:\\Windows\\Microsoft.NET\\Framework\\v4.0.30319\\InstallPersonalization.sql" (normalized: "c:\\windows\\microsoft.net\\framework\\v4.0.30319\\installpersonalization.sql"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x178 [0107.380] GetFileType (hFile=0x178) returned 0x1 [0107.380] GetFileType (hFile=0x178) returned 0x1 [0107.380] WriteFile (in: hFile=0x178, lpBuffer=0x282cce8*, nNumberOfBytesToWrite=0x8890, lpNumberOfBytesWritten=0x31e730, lpOverlapped=0x0 | out: lpBuffer=0x282cce8*, lpNumberOfBytesWritten=0x31e730*=0x8890, lpOverlapped=0x0) returned 1 [0107.381] MoveFileW (lpExistingFileName="C:\\Windows\\Microsoft.NET\\Framework\\v4.0.30319\\InstallPersonalization.sql" (normalized: "c:\\windows\\microsoft.net\\framework\\v4.0.30319\\installpersonalization.sql"), lpNewFileName="C:\\Windows\\Microsoft.NET\\Framework\\v4.0.30319\\InstallPersonalization.sql" (normalized: "c:\\windows\\microsoft.net\\framework\\v4.0.30319\\installpersonalization.sql")) returned 1 [0107.382] CreateFileW (lpFileName="C:\\Windows\\Microsoft.NET\\Framework\\v4.0.30319\\InstallRoles.sql" (normalized: "c:\\windows\\microsoft.net\\framework\\v4.0.30319\\installroles.sql"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x178 [0107.383] GetFileType (hFile=0x178) returned 0x1 [0107.383] GetFileType (hFile=0x178) returned 0x1 [0107.383] GetFileSize (in: hFile=0x178, lpFileSizeHigh=0x31e790 | out: lpFileSizeHigh=0x31e790*=0x0) returned 0x85d8 [0107.383] ReadFile (in: hFile=0x178, lpBuffer=0x283594c, nNumberOfBytesToRead=0x85d8, lpNumberOfBytesRead=0x31e73c, lpOverlapped=0x0 | out: lpBuffer=0x283594c*, lpNumberOfBytesRead=0x31e73c*=0x85d8, lpOverlapped=0x0) returned 1 [0107.400] CreateFileW (lpFileName="C:\\Windows\\Microsoft.NET\\Framework\\v4.0.30319\\InstallRoles.sql" (normalized: "c:\\windows\\microsoft.net\\framework\\v4.0.30319\\installroles.sql"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x178 [0107.401] GetFileType (hFile=0x178) returned 0x1 [0107.401] GetFileType (hFile=0x178) returned 0x1 [0107.401] WriteFile (in: hFile=0x178, lpBuffer=0x26ae920*, nNumberOfBytesToWrite=0x85e0, lpNumberOfBytesWritten=0x31e730, lpOverlapped=0x0 | out: lpBuffer=0x26ae920*, lpNumberOfBytesWritten=0x31e730*=0x85e0, lpOverlapped=0x0) returned 1 [0107.403] MoveFileW (lpExistingFileName="C:\\Windows\\Microsoft.NET\\Framework\\v4.0.30319\\InstallRoles.sql" (normalized: "c:\\windows\\microsoft.net\\framework\\v4.0.30319\\installroles.sql"), lpNewFileName="C:\\Windows\\Microsoft.NET\\Framework\\v4.0.30319\\InstallRoles.sql" (normalized: "c:\\windows\\microsoft.net\\framework\\v4.0.30319\\installroles.sql")) returned 1 [0107.403] CreateFileW (lpFileName="C:\\Windows\\Microsoft.NET\\Framework\\v4.0.30319\\InstallSqlState.sql" (normalized: "c:\\windows\\microsoft.net\\framework\\v4.0.30319\\installsqlstate.sql"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x178 [0107.404] GetFileType (hFile=0x178) returned 0x1 [0107.404] GetFileType (hFile=0x178) returned 0x1 [0107.404] GetFileSize (in: hFile=0x178, lpFileSizeHigh=0x31e790 | out: lpFileSizeHigh=0x31e790*=0x0) returned 0xd49b [0107.404] ReadFile (in: hFile=0x178, lpBuffer=0x26b7274, nNumberOfBytesToRead=0xd49b, lpNumberOfBytesRead=0x31e73c, lpOverlapped=0x0 | out: lpBuffer=0x26b7274*, lpNumberOfBytesRead=0x31e73c*=0xd49b, lpOverlapped=0x0) returned 1 [0107.421] CreateFileW (lpFileName="C:\\Windows\\Microsoft.NET\\Framework\\v4.0.30319\\InstallSqlState.sql" (normalized: "c:\\windows\\microsoft.net\\framework\\v4.0.30319\\installsqlstate.sql"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x178 [0107.422] GetFileType (hFile=0x178) returned 0x1 [0107.422] GetFileType (hFile=0x178) returned 0x1 [0107.422] WriteFile (in: hFile=0x178, lpBuffer=0x272bfac*, nNumberOfBytesToWrite=0xd4a0, lpNumberOfBytesWritten=0x31e730, lpOverlapped=0x0 | out: lpBuffer=0x272bfac*, lpNumberOfBytesWritten=0x31e730*=0xd4a0, lpOverlapped=0x0) returned 1 [0107.424] MoveFileW (lpExistingFileName="C:\\Windows\\Microsoft.NET\\Framework\\v4.0.30319\\InstallSqlState.sql" (normalized: "c:\\windows\\microsoft.net\\framework\\v4.0.30319\\installsqlstate.sql"), lpNewFileName="C:\\Windows\\Microsoft.NET\\Framework\\v4.0.30319\\InstallSqlState.sql" (normalized: "c:\\windows\\microsoft.net\\framework\\v4.0.30319\\installsqlstate.sql")) returned 1 [0107.424] CreateFileW (lpFileName="C:\\Windows\\Microsoft.NET\\Framework\\v4.0.30319\\InstallSqlStateTemplate.sql" (normalized: "c:\\windows\\microsoft.net\\framework\\v4.0.30319\\installsqlstatetemplate.sql"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x178 [0107.425] GetFileType (hFile=0x178) returned 0x1 [0107.425] GetFileType (hFile=0x178) returned 0x1 [0107.425] GetFileSize (in: hFile=0x178, lpFileSizeHigh=0x31e790 | out: lpFileSizeHigh=0x31e790*=0x0) returned 0xdba9 [0107.425] ReadFile (in: hFile=0x178, lpBuffer=0x27397f0, nNumberOfBytesToRead=0xdba9, lpNumberOfBytesRead=0x31e73c, lpOverlapped=0x0 | out: lpBuffer=0x27397f0*, lpNumberOfBytesRead=0x31e73c*=0xdba9, lpOverlapped=0x0) returned 1 [0107.441] CreateFileW (lpFileName="C:\\Windows\\Microsoft.NET\\Framework\\v4.0.30319\\InstallSqlStateTemplate.sql" (normalized: "c:\\windows\\microsoft.net\\framework\\v4.0.30319\\installsqlstatetemplate.sql"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x178 [0107.442] GetFileType (hFile=0x178) returned 0x1 [0107.442] GetFileType (hFile=0x178) returned 0x1 [0107.442] WriteFile (in: hFile=0x178, lpBuffer=0x27af8fc*, nNumberOfBytesToWrite=0xdbb0, lpNumberOfBytesWritten=0x31e730, lpOverlapped=0x0 | out: lpBuffer=0x27af8fc*, lpNumberOfBytesWritten=0x31e730*=0xdbb0, lpOverlapped=0x0) returned 1 [0107.444] MoveFileW (lpExistingFileName="C:\\Windows\\Microsoft.NET\\Framework\\v4.0.30319\\InstallSqlStateTemplate.sql" (normalized: "c:\\windows\\microsoft.net\\framework\\v4.0.30319\\installsqlstatetemplate.sql"), lpNewFileName="C:\\Windows\\Microsoft.NET\\Framework\\v4.0.30319\\InstallSqlStateTemplate.sql" (normalized: "c:\\windows\\microsoft.net\\framework\\v4.0.30319\\installsqlstatetemplate.sql")) returned 1 [0107.444] CreateFileW (lpFileName="C:\\Windows\\Microsoft.NET\\Framework\\v4.0.30319\\InstallWebEventSqlProvider.sql" (normalized: "c:\\windows\\microsoft.net\\framework\\v4.0.30319\\installwebeventsqlprovider.sql"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x178 [0107.445] GetFileType (hFile=0x178) returned 0x1 [0107.445] GetFileType (hFile=0x178) returned 0x1 [0107.445] GetFileSize (in: hFile=0x178, lpFileSizeHigh=0x31e790 | out: lpFileSizeHigh=0x31e790*=0x0) returned 0x1939 [0107.445] ReadFile (in: hFile=0x178, lpBuffer=0x27bd8ec, nNumberOfBytesToRead=0x1939, lpNumberOfBytesRead=0x31e73c, lpOverlapped=0x0 | out: lpBuffer=0x27bd8ec*, lpNumberOfBytesRead=0x31e73c*=0x1939, lpOverlapped=0x0) returned 1 [0107.460] CreateFileW (lpFileName="C:\\Windows\\Microsoft.NET\\Framework\\v4.0.30319\\InstallWebEventSqlProvider.sql" (normalized: "c:\\windows\\microsoft.net\\framework\\v4.0.30319\\installwebeventsqlprovider.sql"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x178 [0107.461] GetFileType (hFile=0x178) returned 0x1 [0107.461] GetFileType (hFile=0x178) returned 0x1 [0107.461] WriteFile (in: hFile=0x178, lpBuffer=0x2812514*, nNumberOfBytesToWrite=0x1940, lpNumberOfBytesWritten=0x31e730, lpOverlapped=0x0 | out: lpBuffer=0x2812514*, lpNumberOfBytesWritten=0x31e730*=0x1940, lpOverlapped=0x0) returned 1 [0107.465] MoveFileW (lpExistingFileName="C:\\Windows\\Microsoft.NET\\Framework\\v4.0.30319\\InstallWebEventSqlProvider.sql" (normalized: "c:\\windows\\microsoft.net\\framework\\v4.0.30319\\installwebeventsqlprovider.sql"), lpNewFileName="C:\\Windows\\Microsoft.NET\\Framework\\v4.0.30319\\InstallWebEventSqlProvider.sql" (normalized: "c:\\windows\\microsoft.net\\framework\\v4.0.30319\\installwebeventsqlprovider.sql")) returned 1 [0107.466] CreateFileW (lpFileName="C:\\Windows\\Microsoft.NET\\Framework\\v4.0.30319\\ThirdPartyNotices.txt" (normalized: "c:\\windows\\microsoft.net\\framework\\v4.0.30319\\thirdpartynotices.txt"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x178 [0107.467] GetFileType (hFile=0x178) returned 0x1 [0107.467] GetFileType (hFile=0x178) returned 0x1 [0107.467] GetFileSize (in: hFile=0x178, lpFileSizeHigh=0x31e790 | out: lpFileSizeHigh=0x31e790*=0x0) returned 0x4e9e [0107.467] ReadFile (in: hFile=0x178, lpBuffer=0x2815a3c, nNumberOfBytesToRead=0x4e9e, lpNumberOfBytesRead=0x31e73c, lpOverlapped=0x0 | out: lpBuffer=0x2815a3c*, lpNumberOfBytesRead=0x31e73c*=0x4e9e, lpOverlapped=0x0) returned 1 [0107.484] CreateFileW (lpFileName="C:\\Windows\\Microsoft.NET\\Framework\\v4.0.30319\\ThirdPartyNotices.txt" (normalized: "c:\\windows\\microsoft.net\\framework\\v4.0.30319\\thirdpartynotices.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x178 [0107.485] GetFileType (hFile=0x178) returned 0x1 [0107.485] GetFileType (hFile=0x178) returned 0x1 [0107.485] WriteFile (in: hFile=0x178, lpBuffer=0x2677a4c*, nNumberOfBytesToWrite=0x4ea0, lpNumberOfBytesWritten=0x31e730, lpOverlapped=0x0 | out: lpBuffer=0x2677a4c*, lpNumberOfBytesWritten=0x31e730*=0x4ea0, lpOverlapped=0x0) returned 1 [0107.487] MoveFileW (lpExistingFileName="C:\\Windows\\Microsoft.NET\\Framework\\v4.0.30319\\ThirdPartyNotices.txt" (normalized: "c:\\windows\\microsoft.net\\framework\\v4.0.30319\\thirdpartynotices.txt"), lpNewFileName="C:\\Windows\\Microsoft.NET\\Framework\\v4.0.30319\\ThirdPartyNotices.txt" (normalized: "c:\\windows\\microsoft.net\\framework\\v4.0.30319\\thirdpartynotices.txt")) returned 1 [0107.487] CreateFileW (lpFileName="C:\\Windows\\Microsoft.NET\\Framework\\v4.0.30319\\UninstallCommon.sql" (normalized: "c:\\windows\\microsoft.net\\framework\\v4.0.30319\\uninstallcommon.sql"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x178 [0107.488] GetFileType (hFile=0x178) returned 0x1 [0107.488] GetFileType (hFile=0x178) returned 0x1 [0107.488] GetFileSize (in: hFile=0x178, lpFileSizeHigh=0x31e790 | out: lpFileSizeHigh=0x31e790*=0x0) returned 0xf32 [0107.488] ReadFile (in: hFile=0x178, lpBuffer=0x267dbd8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x31e73c, lpOverlapped=0x0 | out: lpBuffer=0x267dbd8*, lpNumberOfBytesRead=0x31e73c*=0xf32, lpOverlapped=0x0) returned 1 [0107.502] CreateFileW (lpFileName="C:\\Windows\\Microsoft.NET\\Framework\\v4.0.30319\\UninstallCommon.sql" (normalized: "c:\\windows\\microsoft.net\\framework\\v4.0.30319\\uninstallcommon.sql"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x178 [0107.503] GetFileType (hFile=0x178) returned 0x1 [0107.503] GetFileType (hFile=0x178) returned 0x1 [0107.504] MoveFileW (lpExistingFileName="C:\\Windows\\Microsoft.NET\\Framework\\v4.0.30319\\UninstallCommon.sql" (normalized: "c:\\windows\\microsoft.net\\framework\\v4.0.30319\\uninstallcommon.sql"), lpNewFileName="C:\\Windows\\Microsoft.NET\\Framework\\v4.0.30319\\UninstallCommon.sql" (normalized: "c:\\windows\\microsoft.net\\framework\\v4.0.30319\\uninstallcommon.sql")) returned 1 [0107.505] CreateFileW (lpFileName="C:\\Windows\\Microsoft.NET\\Framework\\v4.0.30319\\UninstallMembership.sql" (normalized: "c:\\windows\\microsoft.net\\framework\\v4.0.30319\\uninstallmembership.sql"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x178 [0107.505] GetFileType (hFile=0x178) returned 0x1 [0107.506] GetFileType (hFile=0x178) returned 0x1 [0107.506] GetFileSize (in: hFile=0x178, lpFileSizeHigh=0x31e790 | out: lpFileSizeHigh=0x31e790*=0x0) returned 0x1afd [0107.506] ReadFile (in: hFile=0x178, lpBuffer=0x26d1b08, nNumberOfBytesToRead=0x1afd, lpNumberOfBytesRead=0x31e73c, lpOverlapped=0x0 | out: lpBuffer=0x26d1b08*, lpNumberOfBytesRead=0x31e73c*=0x1afd, lpOverlapped=0x0) returned 1 [0107.520] CreateFileW (lpFileName="C:\\Windows\\Microsoft.NET\\Framework\\v4.0.30319\\UninstallMembership.sql" (normalized: "c:\\windows\\microsoft.net\\framework\\v4.0.30319\\uninstallmembership.sql"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x178 [0107.521] GetFileType (hFile=0x178) returned 0x1 [0107.521] GetFileType (hFile=0x178) returned 0x1 [0107.521] WriteFile (in: hFile=0x178, lpBuffer=0x2726ff0*, nNumberOfBytesToWrite=0x1b00, lpNumberOfBytesWritten=0x31e730, lpOverlapped=0x0 | out: lpBuffer=0x2726ff0*, lpNumberOfBytesWritten=0x31e730*=0x1b00, lpOverlapped=0x0) returned 1 [0107.522] MoveFileW (lpExistingFileName="C:\\Windows\\Microsoft.NET\\Framework\\v4.0.30319\\UninstallMembership.sql" (normalized: "c:\\windows\\microsoft.net\\framework\\v4.0.30319\\uninstallmembership.sql"), lpNewFileName="C:\\Windows\\Microsoft.NET\\Framework\\v4.0.30319\\UninstallMembership.sql" (normalized: "c:\\windows\\microsoft.net\\framework\\v4.0.30319\\uninstallmembership.sql")) returned 1 [0107.522] CreateFileW (lpFileName="C:\\Windows\\Microsoft.NET\\Framework\\v4.0.30319\\UninstallPersistSqlState.sql" (normalized: "c:\\windows\\microsoft.net\\framework\\v4.0.30319\\uninstallpersistsqlstate.sql"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x178 [0107.522] GetFileType (hFile=0x178) returned 0x1 [0107.522] GetFileType (hFile=0x178) returned 0x1 [0107.522] GetFileSize (in: hFile=0x178, lpFileSizeHigh=0x31e790 | out: lpFileSizeHigh=0x31e790*=0x0) returned 0x27d3 [0107.523] ReadFile (in: hFile=0x178, lpBuffer=0x2728ebc, nNumberOfBytesToRead=0x27d3, lpNumberOfBytesRead=0x31e73c, lpOverlapped=0x0 | out: lpBuffer=0x2728ebc*, lpNumberOfBytesRead=0x31e73c*=0x27d3, lpOverlapped=0x0) returned 1 [0107.537] CreateFileW (lpFileName="C:\\Windows\\Microsoft.NET\\Framework\\v4.0.30319\\UninstallPersistSqlState.sql" (normalized: "c:\\windows\\microsoft.net\\framework\\v4.0.30319\\uninstallpersistsqlstate.sql"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x178 [0107.537] GetFileType (hFile=0x178) returned 0x1 [0107.538] GetFileType (hFile=0x178) returned 0x1 [0107.538] WriteFile (in: hFile=0x178, lpBuffer=0x2782404*, nNumberOfBytesToWrite=0x27e0, lpNumberOfBytesWritten=0x31e730, lpOverlapped=0x0 | out: lpBuffer=0x2782404*, lpNumberOfBytesWritten=0x31e730*=0x27e0, lpOverlapped=0x0) returned 1 [0107.539] MoveFileW (lpExistingFileName="C:\\Windows\\Microsoft.NET\\Framework\\v4.0.30319\\UninstallPersistSqlState.sql" (normalized: "c:\\windows\\microsoft.net\\framework\\v4.0.30319\\uninstallpersistsqlstate.sql"), lpNewFileName="C:\\Windows\\Microsoft.NET\\Framework\\v4.0.30319\\UninstallPersistSqlState.sql" (normalized: "c:\\windows\\microsoft.net\\framework\\v4.0.30319\\uninstallpersistsqlstate.sql")) returned 1 [0107.539] CreateFileW (lpFileName="C:\\Windows\\Microsoft.NET\\Framework\\v4.0.30319\\UninstallPersonalization.sql" (normalized: "c:\\windows\\microsoft.net\\framework\\v4.0.30319\\uninstallpersonalization.sql"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x178 [0107.540] GetFileType (hFile=0x178) returned 0x1 [0107.540] GetFileType (hFile=0x178) returned 0x1 [0107.540] GetFileSize (in: hFile=0x178, lpFileSizeHigh=0x31e790 | out: lpFileSizeHigh=0x31e790*=0x0) returned 0x1d41 [0107.540] ReadFile (in: hFile=0x178, lpBuffer=0x2784fe0, nNumberOfBytesToRead=0x1d41, lpNumberOfBytesRead=0x31e73c, lpOverlapped=0x0 | out: lpBuffer=0x2784fe0*, lpNumberOfBytesRead=0x31e73c*=0x1d41, lpOverlapped=0x0) returned 1 [0107.555] CreateFileW (lpFileName="C:\\Windows\\Microsoft.NET\\Framework\\v4.0.30319\\UninstallPersonalization.sql" (normalized: "c:\\windows\\microsoft.net\\framework\\v4.0.30319\\uninstallpersonalization.sql"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x178 [0107.555] GetFileType (hFile=0x178) returned 0x1 [0107.556] GetFileType (hFile=0x178) returned 0x1 [0107.556] WriteFile (in: hFile=0x178, lpBuffer=0x27db058*, nNumberOfBytesToWrite=0x1d50, lpNumberOfBytesWritten=0x31e730, lpOverlapped=0x0 | out: lpBuffer=0x27db058*, lpNumberOfBytesWritten=0x31e730*=0x1d50, lpOverlapped=0x0) returned 1 [0107.556] MoveFileW (lpExistingFileName="C:\\Windows\\Microsoft.NET\\Framework\\v4.0.30319\\UninstallPersonalization.sql" (normalized: "c:\\windows\\microsoft.net\\framework\\v4.0.30319\\uninstallpersonalization.sql"), lpNewFileName="C:\\Windows\\Microsoft.NET\\Framework\\v4.0.30319\\UninstallPersonalization.sql" (normalized: "c:\\windows\\microsoft.net\\framework\\v4.0.30319\\uninstallpersonalization.sql")) returned 1 [0107.557] CreateFileW (lpFileName="C:\\Windows\\Microsoft.NET\\Framework\\v4.0.30319\\UninstallRoles.sql" (normalized: "c:\\windows\\microsoft.net\\framework\\v4.0.30319\\uninstallroles.sql"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x178 [0107.558] GetFileType (hFile=0x178) returned 0x1 [0107.558] GetFileType (hFile=0x178) returned 0x1 [0107.558] GetFileSize (in: hFile=0x178, lpFileSizeHigh=0x31e790 | out: lpFileSizeHigh=0x31e790*=0x0) returned 0x16ed [0107.558] ReadFile (in: hFile=0x178, lpBuffer=0x27dd194, nNumberOfBytesToRead=0x16ed, lpNumberOfBytesRead=0x31e73c, lpOverlapped=0x0 | out: lpBuffer=0x27dd194*, lpNumberOfBytesRead=0x31e73c*=0x16ed, lpOverlapped=0x0) returned 1 [0107.581] CreateFileW (lpFileName="C:\\Windows\\Microsoft.NET\\Framework\\v4.0.30319\\UninstallRoles.sql" (normalized: "c:\\windows\\microsoft.net\\framework\\v4.0.30319\\uninstallroles.sql"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x178 [0107.582] GetFileType (hFile=0x178) returned 0x1 [0107.582] GetFileType (hFile=0x178) returned 0x1 [0107.582] WriteFile (in: hFile=0x178, lpBuffer=0x283122c*, nNumberOfBytesToWrite=0x16f0, lpNumberOfBytesWritten=0x31e730, lpOverlapped=0x0 | out: lpBuffer=0x283122c*, lpNumberOfBytesWritten=0x31e730*=0x16f0, lpOverlapped=0x0) returned 1 [0107.583] MoveFileW (lpExistingFileName="C:\\Windows\\Microsoft.NET\\Framework\\v4.0.30319\\UninstallRoles.sql" (normalized: "c:\\windows\\microsoft.net\\framework\\v4.0.30319\\uninstallroles.sql"), lpNewFileName="C:\\Windows\\Microsoft.NET\\Framework\\v4.0.30319\\UninstallRoles.sql" (normalized: "c:\\windows\\microsoft.net\\framework\\v4.0.30319\\uninstallroles.sql")) returned 1 [0107.583] CreateFileW (lpFileName="C:\\Windows\\Microsoft.NET\\Framework\\v4.0.30319\\UninstallSqlState.sql" (normalized: "c:\\windows\\microsoft.net\\framework\\v4.0.30319\\uninstallsqlstate.sql"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x178 [0107.584] GetFileType (hFile=0x178) returned 0x1 [0107.584] GetFileType (hFile=0x178) returned 0x1 [0107.584] GetFileSize (in: hFile=0x178, lpFileSizeHigh=0x31e790 | out: lpFileSizeHigh=0x31e790*=0x0) returned 0x25db [0107.584] ReadFile (in: hFile=0x178, lpBuffer=0x2832ca8, nNumberOfBytesToRead=0x25db, lpNumberOfBytesRead=0x31e73c, lpOverlapped=0x0 | out: lpBuffer=0x2832ca8*, lpNumberOfBytesRead=0x31e73c*=0x25db, lpOverlapped=0x0) returned 1 [0107.602] CreateFileW (lpFileName="C:\\Windows\\Microsoft.NET\\Framework\\v4.0.30319\\UninstallSqlState.sql" (normalized: "c:\\windows\\microsoft.net\\framework\\v4.0.30319\\uninstallsqlstate.sql"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x178 [0107.603] GetFileType (hFile=0x178) returned 0x1 [0107.603] GetFileType (hFile=0x178) returned 0x1 [0107.604] WriteFile (in: hFile=0x178, lpBuffer=0x2688f2c*, nNumberOfBytesToWrite=0x25e0, lpNumberOfBytesWritten=0x31e730, lpOverlapped=0x0 | out: lpBuffer=0x2688f2c*, lpNumberOfBytesWritten=0x31e730*=0x25e0, lpOverlapped=0x0) returned 1 [0107.605] MoveFileW (lpExistingFileName="C:\\Windows\\Microsoft.NET\\Framework\\v4.0.30319\\UninstallSqlState.sql" (normalized: "c:\\windows\\microsoft.net\\framework\\v4.0.30319\\uninstallsqlstate.sql"), lpNewFileName="C:\\Windows\\Microsoft.NET\\Framework\\v4.0.30319\\UninstallSqlState.sql" (normalized: "c:\\windows\\microsoft.net\\framework\\v4.0.30319\\uninstallsqlstate.sql")) returned 1 [0107.605] CreateFileW (lpFileName="C:\\Windows\\Microsoft.NET\\Framework\\v4.0.30319\\UninstallSqlStateTemplate.sql" (normalized: "c:\\windows\\microsoft.net\\framework\\v4.0.30319\\uninstallsqlstatetemplate.sql"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x178 [0107.606] GetFileType (hFile=0x178) returned 0x1 [0107.606] GetFileType (hFile=0x178) returned 0x1 [0107.606] GetFileSize (in: hFile=0x178, lpFileSizeHigh=0x31e790 | out: lpFileSizeHigh=0x31e790*=0x0) returned 0x2e15 [0107.606] ReadFile (in: hFile=0x178, lpBuffer=0x268b8c8, nNumberOfBytesToRead=0x2e15, lpNumberOfBytesRead=0x31e73c, lpOverlapped=0x0 | out: lpBuffer=0x268b8c8*, lpNumberOfBytesRead=0x31e73c*=0x2e15, lpOverlapped=0x0) returned 1 [0107.621] CreateFileW (lpFileName="C:\\Windows\\Microsoft.NET\\Framework\\v4.0.30319\\UninstallSqlStateTemplate.sql" (normalized: "c:\\windows\\microsoft.net\\framework\\v4.0.30319\\uninstallsqlstatetemplate.sql"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x178 [0107.622] GetFileType (hFile=0x178) returned 0x1 [0107.622] GetFileType (hFile=0x178) returned 0x1 [0107.623] WriteFile (in: hFile=0x178, lpBuffer=0x26e6eac*, nNumberOfBytesToWrite=0x2e20, lpNumberOfBytesWritten=0x31e730, lpOverlapped=0x0 | out: lpBuffer=0x26e6eac*, lpNumberOfBytesWritten=0x31e730*=0x2e20, lpOverlapped=0x0) returned 1 [0107.624] MoveFileW (lpExistingFileName="C:\\Windows\\Microsoft.NET\\Framework\\v4.0.30319\\UninstallSqlStateTemplate.sql" (normalized: "c:\\windows\\microsoft.net\\framework\\v4.0.30319\\uninstallsqlstatetemplate.sql"), lpNewFileName="C:\\Windows\\Microsoft.NET\\Framework\\v4.0.30319\\UninstallSqlStateTemplate.sql" (normalized: "c:\\windows\\microsoft.net\\framework\\v4.0.30319\\uninstallsqlstatetemplate.sql")) returned 1 [0107.624] CreateFileW (lpFileName="C:\\Windows\\Microsoft.NET\\Framework\\v4.0.30319\\UninstallWebEventSqlProvider.sql" (normalized: "c:\\windows\\microsoft.net\\framework\\v4.0.30319\\uninstallwebeventsqlprovider.sql"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x178 [0107.625] GetFileType (hFile=0x178) returned 0x1 [0107.625] GetFileType (hFile=0x178) returned 0x1 [0107.625] GetFileSize (in: hFile=0x178, lpFileSizeHigh=0x31e790 | out: lpFileSizeHigh=0x31e790*=0x0) returned 0xbbe [0107.625] ReadFile (in: hFile=0x178, lpBuffer=0x26eaca4, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x31e73c, lpOverlapped=0x0 | out: lpBuffer=0x26eaca4*, lpNumberOfBytesRead=0x31e73c*=0xbbe, lpOverlapped=0x0) returned 1 [0107.639] CreateFileW (lpFileName="C:\\Windows\\Microsoft.NET\\Framework\\v4.0.30319\\UninstallWebEventSqlProvider.sql" (normalized: "c:\\windows\\microsoft.net\\framework\\v4.0.30319\\uninstallwebeventsqlprovider.sql"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x178 [0107.640] GetFileType (hFile=0x178) returned 0x1 [0107.640] GetFileType (hFile=0x178) returned 0x1 [0107.641] MoveFileW (lpExistingFileName="C:\\Windows\\Microsoft.NET\\Framework\\v4.0.30319\\UninstallWebEventSqlProvider.sql" (normalized: "c:\\windows\\microsoft.net\\framework\\v4.0.30319\\uninstallwebeventsqlprovider.sql"), lpNewFileName="C:\\Windows\\Microsoft.NET\\Framework\\v4.0.30319\\UninstallWebEventSqlProvider.sql" (normalized: "c:\\windows\\microsoft.net\\framework\\v4.0.30319\\uninstallwebeventsqlprovider.sql")) returned 1 [0107.649] CreateFileW (lpFileName="C:\\Windows\\Microsoft.NET\\Framework\\v4.0.30319\\ASP.NETWebAdminFiles\\default.aspx" (normalized: "c:\\windows\\microsoft.net\\framework\\v4.0.30319\\asp.netwebadminfiles\\default.aspx"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x178 [0107.651] GetFileType (hFile=0x178) returned 0x1 [0107.652] GetFileType (hFile=0x178) returned 0x1 [0107.652] GetFileSize (in: hFile=0x178, lpFileSizeHigh=0x31e718 | out: lpFileSizeHigh=0x31e718*=0x0) returned 0x10fd [0107.652] ReadFile (in: hFile=0x178, lpBuffer=0x27482fc, nNumberOfBytesToRead=0x10fd, lpNumberOfBytesRead=0x31e6c4, lpOverlapped=0x0 | out: lpBuffer=0x27482fc*, lpNumberOfBytesRead=0x31e6c4*=0x10fd, lpOverlapped=0x0) returned 1 [0107.667] CreateFileW (lpFileName="C:\\Windows\\Microsoft.NET\\Framework\\v4.0.30319\\ASP.NETWebAdminFiles\\default.aspx" (normalized: "c:\\windows\\microsoft.net\\framework\\v4.0.30319\\asp.netwebadminfiles\\default.aspx"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x178 [0107.668] GetFileType (hFile=0x178) returned 0x1 [0107.668] GetFileType (hFile=0x178) returned 0x1 [0107.668] WriteFile (in: hFile=0x178, lpBuffer=0x279a5e4*, nNumberOfBytesToWrite=0x1100, lpNumberOfBytesWritten=0x31e6b8, lpOverlapped=0x0 | out: lpBuffer=0x279a5e4*, lpNumberOfBytesWritten=0x31e6b8*=0x1100, lpOverlapped=0x0) returned 1 [0107.669] MoveFileW (lpExistingFileName="C:\\Windows\\Microsoft.NET\\Framework\\v4.0.30319\\ASP.NETWebAdminFiles\\default.aspx" (normalized: "c:\\windows\\microsoft.net\\framework\\v4.0.30319\\asp.netwebadminfiles\\default.aspx"), lpNewFileName="C:\\Windows\\Microsoft.NET\\Framework\\v4.0.30319\\ASP.NETWebAdminFiles\\default.aspx" (normalized: "c:\\windows\\microsoft.net\\framework\\v4.0.30319\\asp.netwebadminfiles\\default.aspx")) returned 1 [0107.669] CreateFileW (lpFileName="C:\\Windows\\Microsoft.NET\\Framework\\v4.0.30319\\ASP.NETWebAdminFiles\\error.aspx" (normalized: "c:\\windows\\microsoft.net\\framework\\v4.0.30319\\asp.netwebadminfiles\\error.aspx"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x178 [0107.670] GetFileType (hFile=0x178) returned 0x1 [0107.670] GetFileType (hFile=0x178) returned 0x1 [0107.670] GetFileSize (in: hFile=0x178, lpFileSizeHigh=0x31e718 | out: lpFileSizeHigh=0x31e718*=0x0) returned 0x1a91 [0107.670] ReadFile (in: hFile=0x178, lpBuffer=0x279bab8, nNumberOfBytesToRead=0x1a91, lpNumberOfBytesRead=0x31e6c4, lpOverlapped=0x0 | out: lpBuffer=0x279bab8*, lpNumberOfBytesRead=0x31e6c4*=0x1a91, lpOverlapped=0x0) returned 1 [0107.684] CreateFileW (lpFileName="C:\\Windows\\Microsoft.NET\\Framework\\v4.0.30319\\ASP.NETWebAdminFiles\\error.aspx" (normalized: "c:\\windows\\microsoft.net\\framework\\v4.0.30319\\asp.netwebadminfiles\\error.aspx"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x178 [0107.685] GetFileType (hFile=0x178) returned 0x1 [0107.685] GetFileType (hFile=0x178) returned 0x1 [0107.685] WriteFile (in: hFile=0x178, lpBuffer=0x27f0dc0*, nNumberOfBytesToWrite=0x1aa0, lpNumberOfBytesWritten=0x31e6b8, lpOverlapped=0x0 | out: lpBuffer=0x27f0dc0*, lpNumberOfBytesWritten=0x31e6b8*=0x1aa0, lpOverlapped=0x0) returned 1 [0107.686] MoveFileW (lpExistingFileName="C:\\Windows\\Microsoft.NET\\Framework\\v4.0.30319\\ASP.NETWebAdminFiles\\error.aspx" (normalized: "c:\\windows\\microsoft.net\\framework\\v4.0.30319\\asp.netwebadminfiles\\error.aspx"), lpNewFileName="C:\\Windows\\Microsoft.NET\\Framework\\v4.0.30319\\ASP.NETWebAdminFiles\\error.aspx" (normalized: "c:\\windows\\microsoft.net\\framework\\v4.0.30319\\asp.netwebadminfiles\\error.aspx")) returned 1 [0107.686] CreateFileW (lpFileName="C:\\Windows\\Microsoft.NET\\Framework\\v4.0.30319\\ASP.NETWebAdminFiles\\home0.aspx" (normalized: "c:\\windows\\microsoft.net\\framework\\v4.0.30319\\asp.netwebadminfiles\\home0.aspx"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x178 [0107.687] GetFileType (hFile=0x178) returned 0x1 [0107.687] GetFileType (hFile=0x178) returned 0x1 [0107.687] GetFileSize (in: hFile=0x178, lpFileSizeHigh=0x31e718 | out: lpFileSizeHigh=0x31e718*=0x0) returned 0x551 [0107.687] ReadFile (in: hFile=0x178, lpBuffer=0x27f3184, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x31e6c4, lpOverlapped=0x0 | out: lpBuffer=0x27f3184*, lpNumberOfBytesRead=0x31e6c4*=0x551, lpOverlapped=0x0) returned 1 [0107.701] CreateFileW (lpFileName="C:\\Windows\\Microsoft.NET\\Framework\\v4.0.30319\\ASP.NETWebAdminFiles\\home0.aspx" (normalized: "c:\\windows\\microsoft.net\\framework\\v4.0.30319\\asp.netwebadminfiles\\home0.aspx"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x178 [0107.702] GetFileType (hFile=0x178) returned 0x1 [0107.702] GetFileType (hFile=0x178) returned 0x1 [0107.702] WriteFile (in: hFile=0x178, lpBuffer=0x2842b8c*, nNumberOfBytesToWrite=0x560, lpNumberOfBytesWritten=0x31e68c, lpOverlapped=0x0 | out: lpBuffer=0x2842b8c*, lpNumberOfBytesWritten=0x31e68c*=0x560, lpOverlapped=0x0) returned 1 [0107.703] MoveFileW (lpExistingFileName="C:\\Windows\\Microsoft.NET\\Framework\\v4.0.30319\\ASP.NETWebAdminFiles\\home0.aspx" (normalized: "c:\\windows\\microsoft.net\\framework\\v4.0.30319\\asp.netwebadminfiles\\home0.aspx"), lpNewFileName="C:\\Windows\\Microsoft.NET\\Framework\\v4.0.30319\\ASP.NETWebAdminFiles\\home0.aspx" (normalized: "c:\\windows\\microsoft.net\\framework\\v4.0.30319\\asp.netwebadminfiles\\home0.aspx")) returned 1 [0107.703] CreateFileW (lpFileName="C:\\Windows\\Microsoft.NET\\Framework\\v4.0.30319\\ASP.NETWebAdminFiles\\home1.aspx" (normalized: "c:\\windows\\microsoft.net\\framework\\v4.0.30319\\asp.netwebadminfiles\\home1.aspx"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x178 [0107.704] GetFileType (hFile=0x178) returned 0x1 [0107.704] GetFileType (hFile=0x178) returned 0x1 [0107.704] GetFileSize (in: hFile=0x178, lpFileSizeHigh=0x31e718 | out: lpFileSizeHigh=0x31e718*=0x0) returned 0x2e4 [0107.704] ReadFile (in: hFile=0x178, lpBuffer=0x2844118, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x31e6c4, lpOverlapped=0x0 | out: lpBuffer=0x2844118*, lpNumberOfBytesRead=0x31e6c4*=0x2e4, lpOverlapped=0x0) returned 1 [0107.720] CreateFileW (lpFileName="C:\\Windows\\Microsoft.NET\\Framework\\v4.0.30319\\ASP.NETWebAdminFiles\\home1.aspx" (normalized: "c:\\windows\\microsoft.net\\framework\\v4.0.30319\\asp.netwebadminfiles\\home1.aspx"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x178 [0107.721] GetFileType (hFile=0x178) returned 0x1 [0107.721] GetFileType (hFile=0x178) returned 0x1 [0107.721] MoveFileW (lpExistingFileName="C:\\Windows\\Microsoft.NET\\Framework\\v4.0.30319\\ASP.NETWebAdminFiles\\home1.aspx" (normalized: "c:\\windows\\microsoft.net\\framework\\v4.0.30319\\asp.netwebadminfiles\\home1.aspx"), lpNewFileName="C:\\Windows\\Microsoft.NET\\Framework\\v4.0.30319\\ASP.NETWebAdminFiles\\home1.aspx" (normalized: "c:\\windows\\microsoft.net\\framework\\v4.0.30319\\asp.netwebadminfiles\\home1.aspx")) returned 1 [0107.722] CreateFileW (lpFileName="C:\\Windows\\Microsoft.NET\\Framework\\v4.0.30319\\ASP.NETWebAdminFiles\\home2.aspx" (normalized: "c:\\windows\\microsoft.net\\framework\\v4.0.30319\\asp.netwebadminfiles\\home2.aspx"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x178 [0107.722] GetFileType (hFile=0x178) returned 0x1 [0107.723] GetFileType (hFile=0x178) returned 0x1 [0107.723] GetFileSize (in: hFile=0x178, lpFileSizeHigh=0x31e718 | out: lpFileSizeHigh=0x31e718*=0x0) returned 0x412 [0107.723] ReadFile (in: hFile=0x178, lpBuffer=0x2693780, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x31e6c4, lpOverlapped=0x0 | out: lpBuffer=0x2693780*, lpNumberOfBytesRead=0x31e6c4*=0x412, lpOverlapped=0x0) returned 1 [0107.737] CreateFileW (lpFileName="C:\\Windows\\Microsoft.NET\\Framework\\v4.0.30319\\ASP.NETWebAdminFiles\\home2.aspx" (normalized: "c:\\windows\\microsoft.net\\framework\\v4.0.30319\\asp.netwebadminfiles\\home2.aspx"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x178 [0107.737] GetFileType (hFile=0x178) returned 0x1 [0107.737] GetFileType (hFile=0x178) returned 0x1 [0107.737] WriteFile (in: hFile=0x178, lpBuffer=0x26e2ca4*, nNumberOfBytesToWrite=0x420, lpNumberOfBytesWritten=0x31e68c, lpOverlapped=0x0 | out: lpBuffer=0x26e2ca4*, lpNumberOfBytesWritten=0x31e68c*=0x420, lpOverlapped=0x0) returned 1 [0107.738] MoveFileW (lpExistingFileName="C:\\Windows\\Microsoft.NET\\Framework\\v4.0.30319\\ASP.NETWebAdminFiles\\home2.aspx" (normalized: "c:\\windows\\microsoft.net\\framework\\v4.0.30319\\asp.netwebadminfiles\\home2.aspx"), lpNewFileName="C:\\Windows\\Microsoft.NET\\Framework\\v4.0.30319\\ASP.NETWebAdminFiles\\home2.aspx" (normalized: "c:\\windows\\microsoft.net\\framework\\v4.0.30319\\asp.netwebadminfiles\\home2.aspx")) returned 1 [0107.739] CreateFileW (lpFileName="C:\\Windows\\Microsoft.NET\\Framework\\v4.0.30319\\ASP.NETWebAdminFiles\\WebAdminHelp.aspx" (normalized: "c:\\windows\\microsoft.net\\framework\\v4.0.30319\\asp.netwebadminfiles\\webadminhelp.aspx"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x178 [0107.739] GetFileType (hFile=0x178) returned 0x1 [0107.739] GetFileType (hFile=0x178) returned 0x1 [0107.739] GetFileSize (in: hFile=0x178, lpFileSizeHigh=0x31e718 | out: lpFileSizeHigh=0x31e718*=0x0) returned 0x1a52 [0107.739] ReadFile (in: hFile=0x178, lpBuffer=0x26e3fc8, nNumberOfBytesToRead=0x1a52, lpNumberOfBytesRead=0x31e6c4, lpOverlapped=0x0 | out: lpBuffer=0x26e3fc8*, lpNumberOfBytesRead=0x31e6c4*=0x1a52, lpOverlapped=0x0) returned 1 [0107.754] CreateFileW (lpFileName="C:\\Windows\\Microsoft.NET\\Framework\\v4.0.30319\\ASP.NETWebAdminFiles\\WebAdminHelp.aspx" (normalized: "c:\\windows\\microsoft.net\\framework\\v4.0.30319\\asp.netwebadminfiles\\webadminhelp.aspx"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x178 [0107.754] GetFileType (hFile=0x178) returned 0x1 [0107.754] GetFileType (hFile=0x178) returned 0x1 [0107.754] WriteFile (in: hFile=0x178, lpBuffer=0x2739190*, nNumberOfBytesToWrite=0x1a60, lpNumberOfBytesWritten=0x31e6b8, lpOverlapped=0x0 | out: lpBuffer=0x2739190*, lpNumberOfBytesWritten=0x31e6b8*=0x1a60, lpOverlapped=0x0) returned 1 [0107.755] MoveFileW (lpExistingFileName="C:\\Windows\\Microsoft.NET\\Framework\\v4.0.30319\\ASP.NETWebAdminFiles\\WebAdminHelp.aspx" (normalized: "c:\\windows\\microsoft.net\\framework\\v4.0.30319\\asp.netwebadminfiles\\webadminhelp.aspx"), lpNewFileName="C:\\Windows\\Microsoft.NET\\Framework\\v4.0.30319\\ASP.NETWebAdminFiles\\WebAdminHelp.aspx" (normalized: "c:\\windows\\microsoft.net\\framework\\v4.0.30319\\asp.netwebadminfiles\\webadminhelp.aspx")) returned 1 [0107.756] CreateFileW (lpFileName="C:\\Windows\\Microsoft.NET\\Framework\\v4.0.30319\\ASP.NETWebAdminFiles\\WebAdminHelp_Application.aspx" (normalized: "c:\\windows\\microsoft.net\\framework\\v4.0.30319\\asp.netwebadminfiles\\webadminhelp_application.aspx"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x178 [0107.756] GetFileType (hFile=0x178) returned 0x1 [0107.756] GetFileType (hFile=0x178) returned 0x1 [0107.756] GetFileSize (in: hFile=0x178, lpFileSizeHigh=0x31e718 | out: lpFileSizeHigh=0x31e718*=0x0) returned 0x3503 [0107.756] ReadFile (in: hFile=0x178, lpBuffer=0x273b03c, nNumberOfBytesToRead=0x3503, lpNumberOfBytesRead=0x31e6c4, lpOverlapped=0x0 | out: lpBuffer=0x273b03c*, lpNumberOfBytesRead=0x31e6c4*=0x3503, lpOverlapped=0x0) returned 1 [0107.771] CreateFileW (lpFileName="C:\\Windows\\Microsoft.NET\\Framework\\v4.0.30319\\ASP.NETWebAdminFiles\\WebAdminHelp_Application.aspx" (normalized: "c:\\windows\\microsoft.net\\framework\\v4.0.30319\\asp.netwebadminfiles\\webadminhelp_application.aspx"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x178 [0107.771] GetFileType (hFile=0x178) returned 0x1 [0107.771] GetFileType (hFile=0x178) returned 0x1 [0107.772] WriteFile (in: hFile=0x178, lpBuffer=0x2798774*, nNumberOfBytesToWrite=0x3510, lpNumberOfBytesWritten=0x31e6b8, lpOverlapped=0x0 | out: lpBuffer=0x2798774*, lpNumberOfBytesWritten=0x31e6b8*=0x3510, lpOverlapped=0x0) returned 1 [0107.773] MoveFileW (lpExistingFileName="C:\\Windows\\Microsoft.NET\\Framework\\v4.0.30319\\ASP.NETWebAdminFiles\\WebAdminHelp_Application.aspx" (normalized: "c:\\windows\\microsoft.net\\framework\\v4.0.30319\\asp.netwebadminfiles\\webadminhelp_application.aspx"), lpNewFileName="C:\\Windows\\Microsoft.NET\\Framework\\v4.0.30319\\ASP.NETWebAdminFiles\\WebAdminHelp_Application.aspx" (normalized: "c:\\windows\\microsoft.net\\framework\\v4.0.30319\\asp.netwebadminfiles\\webadminhelp_application.aspx")) returned 1 [0107.773] CreateFileW (lpFileName="C:\\Windows\\Microsoft.NET\\Framework\\v4.0.30319\\ASP.NETWebAdminFiles\\WebAdminHelp_Internals.aspx" (normalized: "c:\\windows\\microsoft.net\\framework\\v4.0.30319\\asp.netwebadminfiles\\webadminhelp_internals.aspx"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x178 [0107.774] GetFileType (hFile=0x178) returned 0x1 [0107.774] GetFileType (hFile=0x178) returned 0x1 [0107.774] GetFileSize (in: hFile=0x178, lpFileSizeHigh=0x31e718 | out: lpFileSizeHigh=0x31e718*=0x0) returned 0xfec [0107.774] ReadFile (in: hFile=0x178, lpBuffer=0x279d120, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x31e6c4, lpOverlapped=0x0 | out: lpBuffer=0x279d120*, lpNumberOfBytesRead=0x31e6c4*=0xfec, lpOverlapped=0x0) returned 1 [0107.788] CreateFileW (lpFileName="C:\\Windows\\Microsoft.NET\\Framework\\v4.0.30319\\ASP.NETWebAdminFiles\\WebAdminHelp_Internals.aspx" (normalized: "c:\\windows\\microsoft.net\\framework\\v4.0.30319\\asp.netwebadminfiles\\webadminhelp_internals.aspx"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x178 [0107.789] GetFileType (hFile=0x178) returned 0x1 [0107.789] GetFileType (hFile=0x178) returned 0x1 [0107.789] WriteFile (in: hFile=0x178, lpBuffer=0x27f0030*, nNumberOfBytesToWrite=0xff0, lpNumberOfBytesWritten=0x31e68c, lpOverlapped=0x0 | out: lpBuffer=0x27f0030*, lpNumberOfBytesWritten=0x31e68c*=0xff0, lpOverlapped=0x0) returned 1 [0107.790] MoveFileW (lpExistingFileName="C:\\Windows\\Microsoft.NET\\Framework\\v4.0.30319\\ASP.NETWebAdminFiles\\WebAdminHelp_Internals.aspx" (normalized: "c:\\windows\\microsoft.net\\framework\\v4.0.30319\\asp.netwebadminfiles\\webadminhelp_internals.aspx"), lpNewFileName="C:\\Windows\\Microsoft.NET\\Framework\\v4.0.30319\\ASP.NETWebAdminFiles\\WebAdminHelp_Internals.aspx" (normalized: "c:\\windows\\microsoft.net\\framework\\v4.0.30319\\asp.netwebadminfiles\\webadminhelp_internals.aspx")) returned 1 [0107.790] CreateFileW (lpFileName="C:\\Windows\\Microsoft.NET\\Framework\\v4.0.30319\\ASP.NETWebAdminFiles\\WebAdminHelp_Provider.aspx" (normalized: "c:\\windows\\microsoft.net\\framework\\v4.0.30319\\asp.netwebadminfiles\\webadminhelp_provider.aspx"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x178 [0107.791] GetFileType (hFile=0x178) returned 0x1 [0107.791] GetFileType (hFile=0x178) returned 0x1 [0107.791] GetFileSize (in: hFile=0x178, lpFileSizeHigh=0x31e718 | out: lpFileSizeHigh=0x31e718*=0x0) returned 0x1a2d [0107.791] ReadFile (in: hFile=0x178, lpBuffer=0x27f1354, nNumberOfBytesToRead=0x1a2d, lpNumberOfBytesRead=0x31e6c4, lpOverlapped=0x0 | out: lpBuffer=0x27f1354*, lpNumberOfBytesRead=0x31e6c4*=0x1a2d, lpOverlapped=0x0) returned 1 [0107.809] CreateFileW (lpFileName="C:\\Windows\\Microsoft.NET\\Framework\\v4.0.30319\\ASP.NETWebAdminFiles\\WebAdminHelp_Provider.aspx" (normalized: "c:\\windows\\microsoft.net\\framework\\v4.0.30319\\asp.netwebadminfiles\\webadminhelp_provider.aspx"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x178 [0107.809] GetFileType (hFile=0x178) returned 0x1 [0107.809] GetFileType (hFile=0x178) returned 0x1 [0107.809] WriteFile (in: hFile=0x178, lpBuffer=0x284642c*, nNumberOfBytesToWrite=0x1a30, lpNumberOfBytesWritten=0x31e6b8, lpOverlapped=0x0 | out: lpBuffer=0x284642c*, lpNumberOfBytesWritten=0x31e6b8*=0x1a30, lpOverlapped=0x0) returned 1 [0107.810] MoveFileW (lpExistingFileName="C:\\Windows\\Microsoft.NET\\Framework\\v4.0.30319\\ASP.NETWebAdminFiles\\WebAdminHelp_Provider.aspx" (normalized: "c:\\windows\\microsoft.net\\framework\\v4.0.30319\\asp.netwebadminfiles\\webadminhelp_provider.aspx"), lpNewFileName="C:\\Windows\\Microsoft.NET\\Framework\\v4.0.30319\\ASP.NETWebAdminFiles\\WebAdminHelp_Provider.aspx" (normalized: "c:\\windows\\microsoft.net\\framework\\v4.0.30319\\asp.netwebadminfiles\\webadminhelp_provider.aspx")) returned 1 [0107.811] CreateFileW (lpFileName="C:\\Windows\\Microsoft.NET\\Framework\\v4.0.30319\\ASP.NETWebAdminFiles\\WebAdminHelp_Security.aspx" (normalized: "c:\\windows\\microsoft.net\\framework\\v4.0.30319\\asp.netwebadminfiles\\webadminhelp_security.aspx"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x178 [0107.811] GetFileType (hFile=0x178) returned 0x1 [0107.811] GetFileType (hFile=0x178) returned 0x1 [0107.812] GetFileSize (in: hFile=0x178, lpFileSizeHigh=0x31e718 | out: lpFileSizeHigh=0x31e718*=0x0) returned 0x2943 [0107.812] ReadFile (in: hFile=0x178, lpBuffer=0x28482e0, nNumberOfBytesToRead=0x2943, lpNumberOfBytesRead=0x31e6c4, lpOverlapped=0x0 | out: lpBuffer=0x28482e0*, lpNumberOfBytesRead=0x31e6c4*=0x2943, lpOverlapped=0x0) returned 1 [0107.835] CreateFileW (lpFileName="C:\\Windows\\Microsoft.NET\\Framework\\v4.0.30319\\ASP.NETWebAdminFiles\\WebAdminHelp_Security.aspx" (normalized: "c:\\windows\\microsoft.net\\framework\\v4.0.30319\\asp.netwebadminfiles\\webadminhelp_security.aspx"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x178 [0107.836] GetFileType (hFile=0x178) returned 0x1 [0107.836] GetFileType (hFile=0x178) returned 0x1 [0107.836] WriteFile (in: hFile=0x178, lpBuffer=0x26a459c*, nNumberOfBytesToWrite=0x2950, lpNumberOfBytesWritten=0x31e6b8, lpOverlapped=0x0 | out: lpBuffer=0x26a459c*, lpNumberOfBytesWritten=0x31e6b8*=0x2950, lpOverlapped=0x0) returned 1 [0107.837] MoveFileW (lpExistingFileName="C:\\Windows\\Microsoft.NET\\Framework\\v4.0.30319\\ASP.NETWebAdminFiles\\WebAdminHelp_Security.aspx" (normalized: "c:\\windows\\microsoft.net\\framework\\v4.0.30319\\asp.netwebadminfiles\\webadminhelp_security.aspx"), lpNewFileName="C:\\Windows\\Microsoft.NET\\Framework\\v4.0.30319\\ASP.NETWebAdminFiles\\WebAdminHelp_Security.aspx" (normalized: "c:\\windows\\microsoft.net\\framework\\v4.0.30319\\asp.netwebadminfiles\\webadminhelp_security.aspx")) returned 1 [0107.838] CreateFileW (lpFileName="C:\\Windows\\Microsoft.NET\\Framework\\v4.0.30319\\ASP.NETWebAdminFiles\\WebAdminStyles.css" (normalized: "c:\\windows\\microsoft.net\\framework\\v4.0.30319\\asp.netwebadminfiles\\webadminstyles.css"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x178 [0107.838] GetFileType (hFile=0x178) returned 0x1 [0107.838] GetFileType (hFile=0x178) returned 0x1 [0107.838] GetFileSize (in: hFile=0x178, lpFileSizeHigh=0x31e718 | out: lpFileSizeHigh=0x31e718*=0x0) returned 0x343b [0107.838] ReadFile (in: hFile=0x178, lpBuffer=0x26a7388, nNumberOfBytesToRead=0x343b, lpNumberOfBytesRead=0x31e6c4, lpOverlapped=0x0 | out: lpBuffer=0x26a7388*, lpNumberOfBytesRead=0x31e6c4*=0x343b, lpOverlapped=0x0) returned 1 [0107.853] CreateFileW (lpFileName="C:\\Windows\\Microsoft.NET\\Framework\\v4.0.30319\\ASP.NETWebAdminFiles\\WebAdminStyles.css" (normalized: "c:\\windows\\microsoft.net\\framework\\v4.0.30319\\asp.netwebadminfiles\\webadminstyles.css"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x178 [0107.854] GetFileType (hFile=0x178) returned 0x1 [0107.854] GetFileType (hFile=0x178) returned 0x1 [0107.854] WriteFile (in: hFile=0x178, lpBuffer=0x270480c*, nNumberOfBytesToWrite=0x3440, lpNumberOfBytesWritten=0x31e6b8, lpOverlapped=0x0 | out: lpBuffer=0x270480c*, lpNumberOfBytesWritten=0x31e6b8*=0x3440, lpOverlapped=0x0) returned 1 [0107.855] MoveFileW (lpExistingFileName="C:\\Windows\\Microsoft.NET\\Framework\\v4.0.30319\\ASP.NETWebAdminFiles\\WebAdminStyles.css" (normalized: "c:\\windows\\microsoft.net\\framework\\v4.0.30319\\asp.netwebadminfiles\\webadminstyles.css"), lpNewFileName="C:\\Windows\\Microsoft.NET\\Framework\\v4.0.30319\\ASP.NETWebAdminFiles\\WebAdminStyles.css" (normalized: "c:\\windows\\microsoft.net\\framework\\v4.0.30319\\asp.netwebadminfiles\\webadminstyles.css")) returned 1 [0107.860] CreateFileW (lpFileName="C:\\Windows\\Microsoft.NET\\Framework\\v4.0.30319\\ASP.NETWebAdminFiles\\AppConfig\\AppConfigHome.aspx" (normalized: "c:\\windows\\microsoft.net\\framework\\v4.0.30319\\asp.netwebadminfiles\\appconfig\\appconfighome.aspx"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x178 [0107.861] GetFileType (hFile=0x178) returned 0x1 [0107.861] GetFileType (hFile=0x178) returned 0x1 [0107.861] GetFileSize (in: hFile=0x178, lpFileSizeHigh=0x31e6a0 | out: lpFileSizeHigh=0x31e6a0*=0x0) returned 0x2148 [0107.861] ReadFile (in: hFile=0x178, lpBuffer=0x270bf90, nNumberOfBytesToRead=0x2148, lpNumberOfBytesRead=0x31e64c, lpOverlapped=0x0 | out: lpBuffer=0x270bf90*, lpNumberOfBytesRead=0x31e64c*=0x2148, lpOverlapped=0x0) returned 1 [0107.876] CreateFileW (lpFileName="C:\\Windows\\Microsoft.NET\\Framework\\v4.0.30319\\ASP.NETWebAdminFiles\\AppConfig\\AppConfigHome.aspx" (normalized: "c:\\windows\\microsoft.net\\framework\\v4.0.30319\\asp.netwebadminfiles\\appconfig\\appconfighome.aspx"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x178 [0107.877] GetFileType (hFile=0x178) returned 0x1 [0107.877] GetFileType (hFile=0x178) returned 0x1 [0107.877] WriteFile (in: hFile=0x178, lpBuffer=0x2763404*, nNumberOfBytesToWrite=0x2150, lpNumberOfBytesWritten=0x31e640, lpOverlapped=0x0 | out: lpBuffer=0x2763404*, lpNumberOfBytesWritten=0x31e640*=0x2150, lpOverlapped=0x0) returned 1 [0107.878] MoveFileW (lpExistingFileName="C:\\Windows\\Microsoft.NET\\Framework\\v4.0.30319\\ASP.NETWebAdminFiles\\AppConfig\\AppConfigHome.aspx" (normalized: "c:\\windows\\microsoft.net\\framework\\v4.0.30319\\asp.netwebadminfiles\\appconfig\\appconfighome.aspx"), lpNewFileName="C:\\Windows\\Microsoft.NET\\Framework\\v4.0.30319\\ASP.NETWebAdminFiles\\AppConfig\\AppConfigHome.aspx" (normalized: "c:\\windows\\microsoft.net\\framework\\v4.0.30319\\asp.netwebadminfiles\\appconfig\\appconfighome.aspx")) returned 1 [0107.878] CreateFileW (lpFileName="C:\\Windows\\Microsoft.NET\\Framework\\v4.0.30319\\ASP.NETWebAdminFiles\\AppConfig\\CreateAppSetting.aspx" (normalized: "c:\\windows\\microsoft.net\\framework\\v4.0.30319\\asp.netwebadminfiles\\appconfig\\createappsetting.aspx"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x178 [0107.879] GetFileType (hFile=0x178) returned 0x1 [0107.879] GetFileType (hFile=0x178) returned 0x1 [0107.879] GetFileSize (in: hFile=0x178, lpFileSizeHigh=0x31e6a0 | out: lpFileSizeHigh=0x31e6a0*=0x0) returned 0xe55 [0107.879] ReadFile (in: hFile=0x178, lpBuffer=0x2766850, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x31e64c, lpOverlapped=0x0 | out: lpBuffer=0x2766850*, lpNumberOfBytesRead=0x31e64c*=0xe55, lpOverlapped=0x0) returned 1 [0107.894] CreateFileW (lpFileName="C:\\Windows\\Microsoft.NET\\Framework\\v4.0.30319\\ASP.NETWebAdminFiles\\AppConfig\\CreateAppSetting.aspx" (normalized: "c:\\windows\\microsoft.net\\framework\\v4.0.30319\\asp.netwebadminfiles\\appconfig\\createappsetting.aspx"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x178 [0107.895] GetFileType (hFile=0x178) returned 0x1 [0107.895] GetFileType (hFile=0x178) returned 0x1 [0107.895] WriteFile (in: hFile=0x178, lpBuffer=0x27b8f94*, nNumberOfBytesToWrite=0xe60, lpNumberOfBytesWritten=0x31e614, lpOverlapped=0x0 | out: lpBuffer=0x27b8f94*, lpNumberOfBytesWritten=0x31e614*=0xe60, lpOverlapped=0x0) returned 1 [0107.895] MoveFileW (lpExistingFileName="C:\\Windows\\Microsoft.NET\\Framework\\v4.0.30319\\ASP.NETWebAdminFiles\\AppConfig\\CreateAppSetting.aspx" (normalized: "c:\\windows\\microsoft.net\\framework\\v4.0.30319\\asp.netwebadminfiles\\appconfig\\createappsetting.aspx"), lpNewFileName="C:\\Windows\\Microsoft.NET\\Framework\\v4.0.30319\\ASP.NETWebAdminFiles\\AppConfig\\CreateAppSetting.aspx" (normalized: "c:\\windows\\microsoft.net\\framework\\v4.0.30319\\asp.netwebadminfiles\\appconfig\\createappsetting.aspx")) returned 1 [0107.896] CreateFileW (lpFileName="C:\\Windows\\Microsoft.NET\\Framework\\v4.0.30319\\ASP.NETWebAdminFiles\\AppConfig\\DebugAndTrace.aspx" (normalized: "c:\\windows\\microsoft.net\\framework\\v4.0.30319\\asp.netwebadminfiles\\appconfig\\debugandtrace.aspx"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x178 [0107.896] GetFileType (hFile=0x178) returned 0x1 [0107.897] GetFileType (hFile=0x178) returned 0x1 [0107.897] GetFileSize (in: hFile=0x178, lpFileSizeHigh=0x31e6a0 | out: lpFileSizeHigh=0x31e6a0*=0x0) returned 0x33b3 [0107.897] ReadFile (in: hFile=0x178, lpBuffer=0x27ba2bc, nNumberOfBytesToRead=0x33b3, lpNumberOfBytesRead=0x31e64c, lpOverlapped=0x0 | out: lpBuffer=0x27ba2bc*, lpNumberOfBytesRead=0x31e64c*=0x33b3, lpOverlapped=0x0) returned 1 [0107.911] CreateFileW (lpFileName="C:\\Windows\\Microsoft.NET\\Framework\\v4.0.30319\\ASP.NETWebAdminFiles\\AppConfig\\DebugAndTrace.aspx" (normalized: "c:\\windows\\microsoft.net\\framework\\v4.0.30319\\asp.netwebadminfiles\\appconfig\\debugandtrace.aspx"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x178 [0107.912] GetFileType (hFile=0x178) returned 0x1 [0107.912] GetFileType (hFile=0x178) returned 0x1 [0107.912] WriteFile (in: hFile=0x178, lpBuffer=0x2817364*, nNumberOfBytesToWrite=0x33c0, lpNumberOfBytesWritten=0x31e640, lpOverlapped=0x0 | out: lpBuffer=0x2817364*, lpNumberOfBytesWritten=0x31e640*=0x33c0, lpOverlapped=0x0) returned 1 [0107.913] MoveFileW (lpExistingFileName="C:\\Windows\\Microsoft.NET\\Framework\\v4.0.30319\\ASP.NETWebAdminFiles\\AppConfig\\DebugAndTrace.aspx" (normalized: "c:\\windows\\microsoft.net\\framework\\v4.0.30319\\asp.netwebadminfiles\\appconfig\\debugandtrace.aspx"), lpNewFileName="C:\\Windows\\Microsoft.NET\\Framework\\v4.0.30319\\ASP.NETWebAdminFiles\\AppConfig\\DebugAndTrace.aspx" (normalized: "c:\\windows\\microsoft.net\\framework\\v4.0.30319\\asp.netwebadminfiles\\appconfig\\debugandtrace.aspx")) returned 1 [0107.913] CreateFileW (lpFileName="C:\\Windows\\Microsoft.NET\\Framework\\v4.0.30319\\ASP.NETWebAdminFiles\\AppConfig\\DefineErrorPage.aspx" (normalized: "c:\\windows\\microsoft.net\\framework\\v4.0.30319\\asp.netwebadminfiles\\appconfig\\defineerrorpage.aspx"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x178 [0107.914] GetFileType (hFile=0x178) returned 0x1 [0107.914] GetFileType (hFile=0x178) returned 0x1 [0107.914] GetFileSize (in: hFile=0x178, lpFileSizeHigh=0x31e6a0 | out: lpFileSizeHigh=0x31e6a0*=0x0) returned 0x490a [0107.914] ReadFile (in: hFile=0x178, lpBuffer=0x281aba0, nNumberOfBytesToRead=0x490a, lpNumberOfBytesRead=0x31e64c, lpOverlapped=0x0 | out: lpBuffer=0x281aba0*, lpNumberOfBytesRead=0x31e64c*=0x490a, lpOverlapped=0x0) returned 1 [0107.931] CreateFileW (lpFileName="C:\\Windows\\Microsoft.NET\\Framework\\v4.0.30319\\ASP.NETWebAdminFiles\\AppConfig\\DefineErrorPage.aspx" (normalized: "c:\\windows\\microsoft.net\\framework\\v4.0.30319\\asp.netwebadminfiles\\appconfig\\defineerrorpage.aspx"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x178 [0107.931] GetFileType (hFile=0x178) returned 0x1 [0107.931] GetFileType (hFile=0x178) returned 0x1 [0107.932] WriteFile (in: hFile=0x178, lpBuffer=0x2680f1c*, nNumberOfBytesToWrite=0x4910, lpNumberOfBytesWritten=0x31e640, lpOverlapped=0x0 | out: lpBuffer=0x2680f1c*, lpNumberOfBytesWritten=0x31e640*=0x4910, lpOverlapped=0x0) returned 1 [0107.933] MoveFileW (lpExistingFileName="C:\\Windows\\Microsoft.NET\\Framework\\v4.0.30319\\ASP.NETWebAdminFiles\\AppConfig\\DefineErrorPage.aspx" (normalized: "c:\\windows\\microsoft.net\\framework\\v4.0.30319\\asp.netwebadminfiles\\appconfig\\defineerrorpage.aspx"), lpNewFileName="C:\\Windows\\Microsoft.NET\\Framework\\v4.0.30319\\ASP.NETWebAdminFiles\\AppConfig\\DefineErrorPage.aspx" (normalized: "c:\\windows\\microsoft.net\\framework\\v4.0.30319\\asp.netwebadminfiles\\appconfig\\defineerrorpage.aspx")) returned 1 [0107.933] CreateFileW (lpFileName="C:\\Windows\\Microsoft.NET\\Framework\\v4.0.30319\\ASP.NETWebAdminFiles\\AppConfig\\EditAppSetting.aspx" (normalized: "c:\\windows\\microsoft.net\\framework\\v4.0.30319\\asp.netwebadminfiles\\appconfig\\editappsetting.aspx"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x178 [0107.934] GetFileType (hFile=0x178) returned 0x1 [0107.934] GetFileType (hFile=0x178) returned 0x1 [0107.934] GetFileSize (in: hFile=0x178, lpFileSizeHigh=0x31e6a0 | out: lpFileSizeHigh=0x31e6a0*=0x0) returned 0x900 [0107.934] ReadFile (in: hFile=0x178, lpBuffer=0x26865c0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x31e64c, lpOverlapped=0x0 | out: lpBuffer=0x26865c0*, lpNumberOfBytesRead=0x31e64c*=0x900, lpOverlapped=0x0) returned 1 [0107.948] CreateFileW (lpFileName="C:\\Windows\\Microsoft.NET\\Framework\\v4.0.30319\\ASP.NETWebAdminFiles\\AppConfig\\EditAppSetting.aspx" (normalized: "c:\\windows\\microsoft.net\\framework\\v4.0.30319\\asp.netwebadminfiles\\appconfig\\editappsetting.aspx"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x178 [0107.949] GetFileType (hFile=0x178) returned 0x1 [0107.949] GetFileType (hFile=0x178) returned 0x1 [0107.949] WriteFile (in: hFile=0x178, lpBuffer=0x26d73cc*, nNumberOfBytesToWrite=0x910, lpNumberOfBytesWritten=0x31e614, lpOverlapped=0x0 | out: lpBuffer=0x26d73cc*, lpNumberOfBytesWritten=0x31e614*=0x910, lpOverlapped=0x0) returned 1 [0107.950] MoveFileW (lpExistingFileName="C:\\Windows\\Microsoft.NET\\Framework\\v4.0.30319\\ASP.NETWebAdminFiles\\AppConfig\\EditAppSetting.aspx" (normalized: "c:\\windows\\microsoft.net\\framework\\v4.0.30319\\asp.netwebadminfiles\\appconfig\\editappsetting.aspx"), lpNewFileName="C:\\Windows\\Microsoft.NET\\Framework\\v4.0.30319\\ASP.NETWebAdminFiles\\AppConfig\\EditAppSetting.aspx" (normalized: "c:\\windows\\microsoft.net\\framework\\v4.0.30319\\asp.netwebadminfiles\\appconfig\\editappsetting.aspx")) returned 1 [0107.950] CreateFileW (lpFileName="C:\\Windows\\Microsoft.NET\\Framework\\v4.0.30319\\ASP.NETWebAdminFiles\\AppConfig\\ManageAppSettings.aspx" (normalized: "c:\\windows\\microsoft.net\\framework\\v4.0.30319\\asp.netwebadminfiles\\appconfig\\manageappsettings.aspx"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x178 [0107.951] GetFileType (hFile=0x178) returned 0x1 [0107.951] GetFileType (hFile=0x178) returned 0x1 [0107.951] GetFileSize (in: hFile=0x178, lpFileSizeHigh=0x31e6a0 | out: lpFileSizeHigh=0x31e6a0*=0x0) returned 0x3b5c [0107.951] ReadFile (in: hFile=0x178, lpBuffer=0x26d86fc, nNumberOfBytesToRead=0x3b5c, lpNumberOfBytesRead=0x31e64c, lpOverlapped=0x0 | out: lpBuffer=0x26d86fc*, lpNumberOfBytesRead=0x31e64c*=0x3b5c, lpOverlapped=0x0) returned 1 [0107.966] CreateFileW (lpFileName="C:\\Windows\\Microsoft.NET\\Framework\\v4.0.30319\\ASP.NETWebAdminFiles\\AppConfig\\ManageAppSettings.aspx" (normalized: "c:\\windows\\microsoft.net\\framework\\v4.0.30319\\asp.netwebadminfiles\\appconfig\\manageappsettings.aspx"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x178 [0107.967] GetFileType (hFile=0x178) returned 0x1 [0107.967] GetFileType (hFile=0x178) returned 0x1 [0107.967] WriteFile (in: hFile=0x178, lpBuffer=0x2737dc0*, nNumberOfBytesToWrite=0x3b60, lpNumberOfBytesWritten=0x31e640, lpOverlapped=0x0 | out: lpBuffer=0x2737dc0*, lpNumberOfBytesWritten=0x31e640*=0x3b60, lpOverlapped=0x0) returned 1 [0107.968] MoveFileW (lpExistingFileName="C:\\Windows\\Microsoft.NET\\Framework\\v4.0.30319\\ASP.NETWebAdminFiles\\AppConfig\\ManageAppSettings.aspx" (normalized: "c:\\windows\\microsoft.net\\framework\\v4.0.30319\\asp.netwebadminfiles\\appconfig\\manageappsettings.aspx"), lpNewFileName="C:\\Windows\\Microsoft.NET\\Framework\\v4.0.30319\\ASP.NETWebAdminFiles\\AppConfig\\ManageAppSettings.aspx" (normalized: "c:\\windows\\microsoft.net\\framework\\v4.0.30319\\asp.netwebadminfiles\\appconfig\\manageappsettings.aspx")) returned 1 [0107.968] CreateFileW (lpFileName="C:\\Windows\\Microsoft.NET\\Framework\\v4.0.30319\\ASP.NETWebAdminFiles\\AppConfig\\SmtpSettings.aspx" (normalized: "c:\\windows\\microsoft.net\\framework\\v4.0.30319\\asp.netwebadminfiles\\appconfig\\smtpsettings.aspx"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x178 [0107.969] GetFileType (hFile=0x178) returned 0x1 [0107.969] GetFileType (hFile=0x178) returned 0x1 [0107.969] GetFileSize (in: hFile=0x178, lpFileSizeHigh=0x31e6a0 | out: lpFileSizeHigh=0x31e6a0*=0x0) returned 0x4792 [0107.969] ReadFile (in: hFile=0x178, lpBuffer=0x273bdb0, nNumberOfBytesToRead=0x4792, lpNumberOfBytesRead=0x31e64c, lpOverlapped=0x0 | out: lpBuffer=0x273bdb0*, lpNumberOfBytesRead=0x31e64c*=0x4792, lpOverlapped=0x0) returned 1 [0107.984] CreateFileW (lpFileName="C:\\Windows\\Microsoft.NET\\Framework\\v4.0.30319\\ASP.NETWebAdminFiles\\AppConfig\\SmtpSettings.aspx" (normalized: "c:\\windows\\microsoft.net\\framework\\v4.0.30319\\asp.netwebadminfiles\\appconfig\\smtpsettings.aspx"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x178 [0107.985] GetFileType (hFile=0x178) returned 0x1 [0107.985] GetFileType (hFile=0x178) returned 0x1 [0107.985] WriteFile (in: hFile=0x178, lpBuffer=0x279f1b8*, nNumberOfBytesToWrite=0x47a0, lpNumberOfBytesWritten=0x31e640, lpOverlapped=0x0 | out: lpBuffer=0x279f1b8*, lpNumberOfBytesWritten=0x31e640*=0x47a0, lpOverlapped=0x0) returned 1 [0107.986] MoveFileW (lpExistingFileName="C:\\Windows\\Microsoft.NET\\Framework\\v4.0.30319\\ASP.NETWebAdminFiles\\AppConfig\\SmtpSettings.aspx" (normalized: "c:\\windows\\microsoft.net\\framework\\v4.0.30319\\asp.netwebadminfiles\\appconfig\\smtpsettings.aspx"), lpNewFileName="C:\\Windows\\Microsoft.NET\\Framework\\v4.0.30319\\ASP.NETWebAdminFiles\\AppConfig\\SmtpSettings.aspx" (normalized: "c:\\windows\\microsoft.net\\framework\\v4.0.30319\\asp.netwebadminfiles\\appconfig\\smtpsettings.aspx")) returned 1 [0107.994] CreateFileW (lpFileName="C:\\Windows\\Microsoft.NET\\Framework\\v4.0.30319\\ASP.NETWebAdminFiles\\App_Data\\GroupedProviders.xml" (normalized: "c:\\windows\\microsoft.net\\framework\\v4.0.30319\\asp.netwebadminfiles\\app_data\\groupedproviders.xml"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x178 [0107.994] GetFileType (hFile=0x178) returned 0x1 [0107.994] GetFileType (hFile=0x178) returned 0x1 [0107.994] GetFileSize (in: hFile=0x178, lpFileSizeHigh=0x31e6a0 | out: lpFileSizeHigh=0x31e6a0*=0x0) returned 0x13d [0107.994] ReadFile (in: hFile=0x178, lpBuffer=0x27ad61c, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x31e64c, lpOverlapped=0x0 | out: lpBuffer=0x27ad61c*, lpNumberOfBytesRead=0x31e64c*=0x13d, lpOverlapped=0x0) returned 1 [0108.008] CreateFileW (lpFileName="C:\\Windows\\Microsoft.NET\\Framework\\v4.0.30319\\ASP.NETWebAdminFiles\\App_Data\\GroupedProviders.xml" (normalized: "c:\\windows\\microsoft.net\\framework\\v4.0.30319\\asp.netwebadminfiles\\app_data\\groupedproviders.xml"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x178 [0108.009] GetFileType (hFile=0x178) returned 0x1 [0108.009] GetFileType (hFile=0x178) returned 0x1 [0108.009] WriteFile (in: hFile=0x178, lpBuffer=0x27fbbb4*, nNumberOfBytesToWrite=0x140, lpNumberOfBytesWritten=0x31e614, lpOverlapped=0x0 | out: lpBuffer=0x27fbbb4*, lpNumberOfBytesWritten=0x31e614*=0x140, lpOverlapped=0x0) returned 1 [0108.010] MoveFileW (lpExistingFileName="C:\\Windows\\Microsoft.NET\\Framework\\v4.0.30319\\ASP.NETWebAdminFiles\\App_Data\\GroupedProviders.xml" (normalized: "c:\\windows\\microsoft.net\\framework\\v4.0.30319\\asp.netwebadminfiles\\app_data\\groupedproviders.xml"), lpNewFileName="C:\\Windows\\Microsoft.NET\\Framework\\v4.0.30319\\ASP.NETWebAdminFiles\\App_Data\\GroupedProviders.xml" (normalized: "c:\\windows\\microsoft.net\\framework\\v4.0.30319\\asp.netwebadminfiles\\app_data\\groupedproviders.xml")) returned 1 [0108.019] CreateFileW (lpFileName="C:\\Windows\\Microsoft.NET\\Framework\\v4.0.30319\\ASP.NETWebAdminFiles\\Images\\ASPdotNET_logo.jpg" (normalized: "c:\\windows\\microsoft.net\\framework\\v4.0.30319\\asp.netwebadminfiles\\images\\aspdotnet_logo.jpg"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x178 [0108.021] GetFileType (hFile=0x178) returned 0x1 [0108.021] GetFileType (hFile=0x178) returned 0x1 [0108.021] GetFileSize (in: hFile=0x178, lpFileSizeHigh=0x31e6a0 | out: lpFileSizeHigh=0x31e6a0*=0x0) returned 0x57e4 [0108.021] ReadFile (in: hFile=0x178, lpBuffer=0x280b9cc, nNumberOfBytesToRead=0x57e4, lpNumberOfBytesRead=0x31e64c, lpOverlapped=0x0 | out: lpBuffer=0x280b9cc*, lpNumberOfBytesRead=0x31e64c*=0x57e4, lpOverlapped=0x0) returned 1 [0108.038] CreateFileW (lpFileName="C:\\Windows\\Microsoft.NET\\Framework\\v4.0.30319\\ASP.NETWebAdminFiles\\Images\\ASPdotNET_logo.jpg" (normalized: "c:\\windows\\microsoft.net\\framework\\v4.0.30319\\asp.netwebadminfiles\\images\\aspdotnet_logo.jpg"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x178 [0108.039] GetFileType (hFile=0x178) returned 0x1 [0108.039] GetFileType (hFile=0x178) returned 0x1 [0108.039] WriteFile (in: hFile=0x178, lpBuffer=0x26795c0*, nNumberOfBytesToWrite=0x57f0, lpNumberOfBytesWritten=0x31e640, lpOverlapped=0x0 | out: lpBuffer=0x26795c0*, lpNumberOfBytesWritten=0x31e640*=0x57f0, lpOverlapped=0x0) returned 1 [0108.040] MoveFileW (lpExistingFileName="C:\\Windows\\Microsoft.NET\\Framework\\v4.0.30319\\ASP.NETWebAdminFiles\\Images\\ASPdotNET_logo.jpg" (normalized: "c:\\windows\\microsoft.net\\framework\\v4.0.30319\\asp.netwebadminfiles\\images\\aspdotnet_logo.jpg"), lpNewFileName="C:\\Windows\\Microsoft.NET\\Framework\\v4.0.30319\\ASP.NETWebAdminFiles\\Images\\ASPdotNET_logo.jpg" (normalized: "c:\\windows\\microsoft.net\\framework\\v4.0.30319\\asp.netwebadminfiles\\images\\aspdotnet_logo.jpg")) returned 1 [0108.041] CreateFileW (lpFileName="C:\\Windows\\Microsoft.NET\\Framework\\v4.0.30319\\ASP.NETWebAdminFiles\\Images\\darkBlue_GRAD.jpg" (normalized: "c:\\windows\\microsoft.net\\framework\\v4.0.30319\\asp.netwebadminfiles\\images\\darkblue_grad.jpg"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x178 [0108.042] GetFileType (hFile=0x178) returned 0x1 [0108.042] GetFileType (hFile=0x178) returned 0x1 [0108.042] GetFileSize (in: hFile=0x178, lpFileSizeHigh=0x31e6a0 | out: lpFileSizeHigh=0x31e6a0*=0x0) returned 0x2044 [0108.042] ReadFile (in: hFile=0x178, lpBuffer=0x267f23c, nNumberOfBytesToRead=0x2044, lpNumberOfBytesRead=0x31e64c, lpOverlapped=0x0 | out: lpBuffer=0x267f23c*, lpNumberOfBytesRead=0x31e64c*=0x2044, lpOverlapped=0x0) returned 1 [0108.057] CreateFileW (lpFileName="C:\\Windows\\Microsoft.NET\\Framework\\v4.0.30319\\ASP.NETWebAdminFiles\\Images\\darkBlue_GRAD.jpg" (normalized: "c:\\windows\\microsoft.net\\framework\\v4.0.30319\\asp.netwebadminfiles\\images\\darkblue_grad.jpg"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x178 [0108.057] GetFileType (hFile=0x178) returned 0x1 [0108.058] GetFileType (hFile=0x178) returned 0x1 [0108.058] WriteFile (in: hFile=0x178, lpBuffer=0x26d630c*, nNumberOfBytesToWrite=0x2050, lpNumberOfBytesWritten=0x31e640, lpOverlapped=0x0 | out: lpBuffer=0x26d630c*, lpNumberOfBytesWritten=0x31e640*=0x2050, lpOverlapped=0x0) returned 1 [0108.059] MoveFileW (lpExistingFileName="C:\\Windows\\Microsoft.NET\\Framework\\v4.0.30319\\ASP.NETWebAdminFiles\\Images\\darkBlue_GRAD.jpg" (normalized: "c:\\windows\\microsoft.net\\framework\\v4.0.30319\\asp.netwebadminfiles\\images\\darkblue_grad.jpg"), lpNewFileName="C:\\Windows\\Microsoft.NET\\Framework\\v4.0.30319\\ASP.NETWebAdminFiles\\Images\\darkBlue_GRAD.jpg" (normalized: "c:\\windows\\microsoft.net\\framework\\v4.0.30319\\asp.netwebadminfiles\\images\\darkblue_grad.jpg")) returned 1 [0108.059] CreateFileW (lpFileName="C:\\Windows\\Microsoft.NET\\Framework\\v4.0.30319\\ASP.NETWebAdminFiles\\Images\\help.jpg" (normalized: "c:\\windows\\microsoft.net\\framework\\v4.0.30319\\asp.netwebadminfiles\\images\\help.jpg"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x178 [0108.060] GetFileType (hFile=0x178) returned 0x1 [0108.060] GetFileType (hFile=0x178) returned 0x1 [0108.060] GetFileSize (in: hFile=0x178, lpFileSizeHigh=0x31e6a0 | out: lpFileSizeHigh=0x31e6a0*=0x0) returned 0x581 [0108.060] ReadFile (in: hFile=0x178, lpBuffer=0x26d8d90, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x31e64c, lpOverlapped=0x0 | out: lpBuffer=0x26d8d90*, lpNumberOfBytesRead=0x31e64c*=0x581, lpOverlapped=0x0) returned 1 [0108.074] CreateFileW (lpFileName="C:\\Windows\\Microsoft.NET\\Framework\\v4.0.30319\\ASP.NETWebAdminFiles\\Images\\help.jpg" (normalized: "c:\\windows\\microsoft.net\\framework\\v4.0.30319\\asp.netwebadminfiles\\images\\help.jpg"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x178 [0108.075] GetFileType (hFile=0x178) returned 0x1 [0108.075] GetFileType (hFile=0x178) returned 0x1 [0108.076] MoveFileW (lpExistingFileName="C:\\Windows\\Microsoft.NET\\Framework\\v4.0.30319\\ASP.NETWebAdminFiles\\Images\\help.jpg" (normalized: "c:\\windows\\microsoft.net\\framework\\v4.0.30319\\asp.netwebadminfiles\\images\\help.jpg"), lpNewFileName="C:\\Windows\\Microsoft.NET\\Framework\\v4.0.30319\\ASP.NETWebAdminFiles\\Images\\help.jpg" (normalized: "c:\\windows\\microsoft.net\\framework\\v4.0.30319\\asp.netwebadminfiles\\images\\help.jpg")) returned 1 [0108.076] CreateFileW (lpFileName="C:\\Windows\\Microsoft.NET\\Framework\\v4.0.30319\\ASP.NETWebAdminFiles\\Images\\security_watermark.jpg" (normalized: "c:\\windows\\microsoft.net\\framework\\v4.0.30319\\asp.netwebadminfiles\\images\\security_watermark.jpg"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x178 [0108.077] GetFileType (hFile=0x178) returned 0x1 [0108.077] GetFileType (hFile=0x178) returned 0x1 [0108.077] GetFileSize (in: hFile=0x178, lpFileSizeHigh=0x31e6a0 | out: lpFileSizeHigh=0x31e6a0*=0x0) returned 0x31 [0108.077] ReadFile (in: hFile=0x178, lpBuffer=0x2729c24, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x31e64c, lpOverlapped=0x0 | out: lpBuffer=0x2729c24*, lpNumberOfBytesRead=0x31e64c*=0x31, lpOverlapped=0x0) returned 1 [0108.091] CreateFileW (lpFileName="C:\\Windows\\Microsoft.NET\\Framework\\v4.0.30319\\ASP.NETWebAdminFiles\\Images\\security_watermark.jpg" (normalized: "c:\\windows\\microsoft.net\\framework\\v4.0.30319\\asp.netwebadminfiles\\images\\security_watermark.jpg"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x178 [0108.092] GetFileType (hFile=0x178) returned 0x1 [0108.092] GetFileType (hFile=0x178) returned 0x1 [0108.092] WriteFile (in: hFile=0x178, lpBuffer=0x2777d30*, nNumberOfBytesToWrite=0x40, lpNumberOfBytesWritten=0x31e614, lpOverlapped=0x0 | out: lpBuffer=0x2777d30*, lpNumberOfBytesWritten=0x31e614*=0x40, lpOverlapped=0x0) returned 1 [0108.093] MoveFileW (lpExistingFileName="C:\\Windows\\Microsoft.NET\\Framework\\v4.0.30319\\ASP.NETWebAdminFiles\\Images\\security_watermark.jpg" (normalized: "c:\\windows\\microsoft.net\\framework\\v4.0.30319\\asp.netwebadminfiles\\images\\security_watermark.jpg"), lpNewFileName="C:\\Windows\\Microsoft.NET\\Framework\\v4.0.30319\\ASP.NETWebAdminFiles\\Images\\security_watermark.jpg" (normalized: "c:\\windows\\microsoft.net\\framework\\v4.0.30319\\asp.netwebadminfiles\\images\\security_watermark.jpg")) returned 1 [0108.093] CreateFileW (lpFileName="C:\\Windows\\Microsoft.NET\\Framework\\v4.0.30319\\ASP.NETWebAdminFiles\\Images\\topGradRepeat.jpg" (normalized: "c:\\windows\\microsoft.net\\framework\\v4.0.30319\\asp.netwebadminfiles\\images\\topgradrepeat.jpg"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x178 [0108.094] GetFileType (hFile=0x178) returned 0x1 [0108.094] GetFileType (hFile=0x178) returned 0x1 [0108.094] GetFileSize (in: hFile=0x178, lpFileSizeHigh=0x31e6a0 | out: lpFileSizeHigh=0x31e6a0*=0x0) returned 0x21eb [0108.094] ReadFile (in: hFile=0x178, lpBuffer=0x277908c, nNumberOfBytesToRead=0x21eb, lpNumberOfBytesRead=0x31e64c, lpOverlapped=0x0 | out: lpBuffer=0x277908c*, lpNumberOfBytesRead=0x31e64c*=0x21eb, lpOverlapped=0x0) returned 1 [0108.109] CreateFileW (lpFileName="C:\\Windows\\Microsoft.NET\\Framework\\v4.0.30319\\ASP.NETWebAdminFiles\\Images\\topGradRepeat.jpg" (normalized: "c:\\windows\\microsoft.net\\framework\\v4.0.30319\\asp.netwebadminfiles\\images\\topgradrepeat.jpg"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x178 [0108.110] GetFileType (hFile=0x178) returned 0x1 [0108.110] GetFileType (hFile=0x178) returned 0x1 [0108.110] WriteFile (in: hFile=0x178, lpBuffer=0x27d0824*, nNumberOfBytesToWrite=0x21f0, lpNumberOfBytesWritten=0x31e640, lpOverlapped=0x0 | out: lpBuffer=0x27d0824*, lpNumberOfBytesWritten=0x31e640*=0x21f0, lpOverlapped=0x0) returned 1 [0108.111] MoveFileW (lpExistingFileName="C:\\Windows\\Microsoft.NET\\Framework\\v4.0.30319\\ASP.NETWebAdminFiles\\Images\\topGradRepeat.jpg" (normalized: "c:\\windows\\microsoft.net\\framework\\v4.0.30319\\asp.netwebadminfiles\\images\\topgradrepeat.jpg"), lpNewFileName="C:\\Windows\\Microsoft.NET\\Framework\\v4.0.30319\\ASP.NETWebAdminFiles\\Images\\topGradRepeat.jpg" (normalized: "c:\\windows\\microsoft.net\\framework\\v4.0.30319\\asp.netwebadminfiles\\images\\topgradrepeat.jpg")) returned 1 [0108.115] CreateFileW (lpFileName="C:\\Windows\\Microsoft.NET\\Framework\\v4.0.30319\\ASP.NETWebAdminFiles\\Providers\\chooseProviderManagement.aspx" (normalized: "c:\\windows\\microsoft.net\\framework\\v4.0.30319\\asp.netwebadminfiles\\providers\\chooseprovidermanagement.aspx"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x178 [0108.116] GetFileType (hFile=0x178) returned 0x1 [0108.116] GetFileType (hFile=0x178) returned 0x1 [0108.116] GetFileSize (in: hFile=0x178, lpFileSizeHigh=0x31e6a0 | out: lpFileSizeHigh=0x31e6a0*=0x0) returned 0x99e [0108.116] ReadFile (in: hFile=0x178, lpBuffer=0x27d66dc, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x31e64c, lpOverlapped=0x0 | out: lpBuffer=0x27d66dc*, lpNumberOfBytesRead=0x31e64c*=0x99e, lpOverlapped=0x0) returned 1 [0108.130] CreateFileW (lpFileName="C:\\Windows\\Microsoft.NET\\Framework\\v4.0.30319\\ASP.NETWebAdminFiles\\Providers\\chooseProviderManagement.aspx" (normalized: "c:\\windows\\microsoft.net\\framework\\v4.0.30319\\asp.netwebadminfiles\\providers\\chooseprovidermanagement.aspx"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x178 [0108.131] GetFileType (hFile=0x178) returned 0x1 [0108.131] GetFileType (hFile=0x178) returned 0x1 [0108.132] MoveFileW (lpExistingFileName="C:\\Windows\\Microsoft.NET\\Framework\\v4.0.30319\\ASP.NETWebAdminFiles\\Providers\\chooseProviderManagement.aspx" (normalized: "c:\\windows\\microsoft.net\\framework\\v4.0.30319\\asp.netwebadminfiles\\providers\\chooseprovidermanagement.aspx"), lpNewFileName="C:\\Windows\\Microsoft.NET\\Framework\\v4.0.30319\\ASP.NETWebAdminFiles\\Providers\\chooseProviderManagement.aspx" (normalized: "c:\\windows\\microsoft.net\\framework\\v4.0.30319\\asp.netwebadminfiles\\providers\\chooseprovidermanagement.aspx")) returned 1 [0108.132] CreateFileW (lpFileName="C:\\Windows\\Microsoft.NET\\Framework\\v4.0.30319\\ASP.NETWebAdminFiles\\Providers\\ManageConsolidatedProviders.aspx" (normalized: "c:\\windows\\microsoft.net\\framework\\v4.0.30319\\asp.netwebadminfiles\\providers\\manageconsolidatedproviders.aspx"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x178 [0108.133] GetFileType (hFile=0x178) returned 0x1 [0108.133] GetFileType (hFile=0x178) returned 0x1 [0108.133] GetFileSize (in: hFile=0x178, lpFileSizeHigh=0x31e6a0 | out: lpFileSizeHigh=0x31e6a0*=0x0) returned 0x3133 [0108.133] ReadFile (in: hFile=0x178, lpBuffer=0x28289f8, nNumberOfBytesToRead=0x3133, lpNumberOfBytesRead=0x31e64c, lpOverlapped=0x0 | out: lpBuffer=0x28289f8*, lpNumberOfBytesRead=0x31e64c*=0x3133, lpOverlapped=0x0) returned 1 [0108.150] CreateFileW (lpFileName="C:\\Windows\\Microsoft.NET\\Framework\\v4.0.30319\\ASP.NETWebAdminFiles\\Providers\\ManageConsolidatedProviders.aspx" (normalized: "c:\\windows\\microsoft.net\\framework\\v4.0.30319\\asp.netwebadminfiles\\providers\\manageconsolidatedproviders.aspx"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x178 [0108.151] GetFileType (hFile=0x178) returned 0x1 [0108.151] GetFileType (hFile=0x178) returned 0x1 [0108.151] WriteFile (in: hFile=0x178, lpBuffer=0x2678c98*, nNumberOfBytesToWrite=0x3140, lpNumberOfBytesWritten=0x31e640, lpOverlapped=0x0 | out: lpBuffer=0x2678c98*, lpNumberOfBytesWritten=0x31e640*=0x3140, lpOverlapped=0x0) returned 1 [0108.152] MoveFileW (lpExistingFileName="C:\\Windows\\Microsoft.NET\\Framework\\v4.0.30319\\ASP.NETWebAdminFiles\\Providers\\ManageConsolidatedProviders.aspx" (normalized: "c:\\windows\\microsoft.net\\framework\\v4.0.30319\\asp.netwebadminfiles\\providers\\manageconsolidatedproviders.aspx"), lpNewFileName="C:\\Windows\\Microsoft.NET\\Framework\\v4.0.30319\\ASP.NETWebAdminFiles\\Providers\\ManageConsolidatedProviders.aspx" (normalized: "c:\\windows\\microsoft.net\\framework\\v4.0.30319\\asp.netwebadminfiles\\providers\\manageconsolidatedproviders.aspx")) returned 1 [0108.152] CreateFileW (lpFileName="C:\\Windows\\Microsoft.NET\\Framework\\v4.0.30319\\ASP.NETWebAdminFiles\\Providers\\ManageProviders.aspx" (normalized: "c:\\windows\\microsoft.net\\framework\\v4.0.30319\\asp.netwebadminfiles\\providers\\manageproviders.aspx"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x178 [0108.153] GetFileType (hFile=0x178) returned 0x1 [0108.153] GetFileType (hFile=0x178) returned 0x1 [0108.153] GetFileSize (in: hFile=0x178, lpFileSizeHigh=0x31e6a0 | out: lpFileSizeHigh=0x31e6a0*=0x0) returned 0x25f1 [0108.153] ReadFile (in: hFile=0x178, lpBuffer=0x267c2c4, nNumberOfBytesToRead=0x25f1, lpNumberOfBytesRead=0x31e64c, lpOverlapped=0x0 | out: lpBuffer=0x267c2c4*, lpNumberOfBytesRead=0x31e64c*=0x25f1, lpOverlapped=0x0) returned 1 [0108.167] CreateFileW (lpFileName="C:\\Windows\\Microsoft.NET\\Framework\\v4.0.30319\\ASP.NETWebAdminFiles\\Providers\\ManageProviders.aspx" (normalized: "c:\\windows\\microsoft.net\\framework\\v4.0.30319\\asp.netwebadminfiles\\providers\\manageproviders.aspx"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x178 [0108.168] GetFileType (hFile=0x178) returned 0x1 [0108.168] GetFileType (hFile=0x178) returned 0x1 [0108.168] WriteFile (in: hFile=0x178, lpBuffer=0x26d5008*, nNumberOfBytesToWrite=0x2600, lpNumberOfBytesWritten=0x31e640, lpOverlapped=0x0 | out: lpBuffer=0x26d5008*, lpNumberOfBytesWritten=0x31e640*=0x2600, lpOverlapped=0x0) returned 1 [0108.169] MoveFileW (lpExistingFileName="C:\\Windows\\Microsoft.NET\\Framework\\v4.0.30319\\ASP.NETWebAdminFiles\\Providers\\ManageProviders.aspx" (normalized: "c:\\windows\\microsoft.net\\framework\\v4.0.30319\\asp.netwebadminfiles\\providers\\manageproviders.aspx"), lpNewFileName="C:\\Windows\\Microsoft.NET\\Framework\\v4.0.30319\\ASP.NETWebAdminFiles\\Providers\\ManageProviders.aspx" (normalized: "c:\\windows\\microsoft.net\\framework\\v4.0.30319\\asp.netwebadminfiles\\providers\\manageproviders.aspx")) returned 1 [0108.178] CreateFileW (lpFileName="C:\\Windows\\Microsoft.NET\\Framework\\v4.0.30319\\ASP.NETWebAdminFiles\\Security\\security.aspx" (normalized: "c:\\windows\\microsoft.net\\framework\\v4.0.30319\\asp.netwebadminfiles\\security\\security.aspx"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x178 [0108.178] GetFileType (hFile=0x178) returned 0x1 [0108.178] GetFileType (hFile=0x178) returned 0x1 [0108.179] GetFileSize (in: hFile=0x178, lpFileSizeHigh=0x31e6a0 | out: lpFileSizeHigh=0x31e6a0*=0x0) returned 0x27da [0108.179] ReadFile (in: hFile=0x178, lpBuffer=0x26de23c, nNumberOfBytesToRead=0x27da, lpNumberOfBytesRead=0x31e64c, lpOverlapped=0x0 | out: lpBuffer=0x26de23c*, lpNumberOfBytesRead=0x31e64c*=0x27da, lpOverlapped=0x0) returned 1 [0108.193] CreateFileW (lpFileName="C:\\Windows\\Microsoft.NET\\Framework\\v4.0.30319\\ASP.NETWebAdminFiles\\Security\\security.aspx" (normalized: "c:\\windows\\microsoft.net\\framework\\v4.0.30319\\asp.netwebadminfiles\\security\\security.aspx"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x178 [0108.194] GetFileType (hFile=0x178) returned 0x1 [0108.194] GetFileType (hFile=0x178) returned 0x1 [0108.194] WriteFile (in: hFile=0x178, lpBuffer=0x2737784*, nNumberOfBytesToWrite=0x27e0, lpNumberOfBytesWritten=0x31e640, lpOverlapped=0x0 | out: lpBuffer=0x2737784*, lpNumberOfBytesWritten=0x31e640*=0x27e0, lpOverlapped=0x0) returned 1 [0108.195] MoveFileW (lpExistingFileName="C:\\Windows\\Microsoft.NET\\Framework\\v4.0.30319\\ASP.NETWebAdminFiles\\Security\\security.aspx" (normalized: "c:\\windows\\microsoft.net\\framework\\v4.0.30319\\asp.netwebadminfiles\\security\\security.aspx"), lpNewFileName="C:\\Windows\\Microsoft.NET\\Framework\\v4.0.30319\\ASP.NETWebAdminFiles\\Security\\security.aspx" (normalized: "c:\\windows\\microsoft.net\\framework\\v4.0.30319\\asp.netwebadminfiles\\security\\security.aspx")) returned 1 [0108.195] CreateFileW (lpFileName="C:\\Windows\\Microsoft.NET\\Framework\\v4.0.30319\\ASP.NETWebAdminFiles\\Security\\security0.aspx" (normalized: "c:\\windows\\microsoft.net\\framework\\v4.0.30319\\asp.netwebadminfiles\\security\\security0.aspx"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x178 [0108.196] GetFileType (hFile=0x178) returned 0x1 [0108.196] GetFileType (hFile=0x178) returned 0x1 [0108.196] GetFileSize (in: hFile=0x178, lpFileSizeHigh=0x31e6a0 | out: lpFileSizeHigh=0x31e6a0*=0x0) returned 0x5a7 [0108.196] ReadFile (in: hFile=0x178, lpBuffer=0x273a94c, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x31e64c, lpOverlapped=0x0 | out: lpBuffer=0x273a94c*, lpNumberOfBytesRead=0x31e64c*=0x5a7, lpOverlapped=0x0) returned 1 [0108.210] CreateFileW (lpFileName="C:\\Windows\\Microsoft.NET\\Framework\\v4.0.30319\\ASP.NETWebAdminFiles\\Security\\security0.aspx" (normalized: "c:\\windows\\microsoft.net\\framework\\v4.0.30319\\asp.netwebadminfiles\\security\\security0.aspx"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x178 [0108.211] GetFileType (hFile=0x178) returned 0x1 [0108.211] GetFileType (hFile=0x178) returned 0x1 [0108.212] MoveFileW (lpExistingFileName="C:\\Windows\\Microsoft.NET\\Framework\\v4.0.30319\\ASP.NETWebAdminFiles\\Security\\security0.aspx" (normalized: "c:\\windows\\microsoft.net\\framework\\v4.0.30319\\asp.netwebadminfiles\\security\\security0.aspx"), lpNewFileName="C:\\Windows\\Microsoft.NET\\Framework\\v4.0.30319\\ASP.NETWebAdminFiles\\Security\\security0.aspx" (normalized: "c:\\windows\\microsoft.net\\framework\\v4.0.30319\\asp.netwebadminfiles\\security\\security0.aspx")) returned 1 [0108.212] CreateFileW (lpFileName="C:\\Windows\\Microsoft.NET\\Framework\\v4.0.30319\\ASP.NETWebAdminFiles\\Security\\setUpAuthentication.aspx" (normalized: "c:\\windows\\microsoft.net\\framework\\v4.0.30319\\asp.netwebadminfiles\\security\\setupauthentication.aspx"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x178 [0108.213] GetFileType (hFile=0x178) returned 0x1 [0108.213] GetFileType (hFile=0x178) returned 0x1 [0108.213] GetFileSize (in: hFile=0x178, lpFileSizeHigh=0x31e6a0 | out: lpFileSizeHigh=0x31e6a0*=0x0) returned 0xa04 [0108.213] ReadFile (in: hFile=0x178, lpBuffer=0x278c234, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x31e64c, lpOverlapped=0x0 | out: lpBuffer=0x278c234*, lpNumberOfBytesRead=0x31e64c*=0xa04, lpOverlapped=0x0) returned 1 [0108.227] CreateFileW (lpFileName="C:\\Windows\\Microsoft.NET\\Framework\\v4.0.30319\\ASP.NETWebAdminFiles\\Security\\setUpAuthentication.aspx" (normalized: "c:\\windows\\microsoft.net\\framework\\v4.0.30319\\asp.netwebadminfiles\\security\\setupauthentication.aspx"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x178 [0108.228] GetFileType (hFile=0x178) returned 0x1 [0108.228] GetFileType (hFile=0x178) returned 0x1 [0108.228] WriteFile (in: hFile=0x178, lpBuffer=0x27dd3f4*, nNumberOfBytesToWrite=0xa10, lpNumberOfBytesWritten=0x31e614, lpOverlapped=0x0 | out: lpBuffer=0x27dd3f4*, lpNumberOfBytesWritten=0x31e614*=0xa10, lpOverlapped=0x0) returned 1 [0108.229] MoveFileW (lpExistingFileName="C:\\Windows\\Microsoft.NET\\Framework\\v4.0.30319\\ASP.NETWebAdminFiles\\Security\\setUpAuthentication.aspx" (normalized: "c:\\windows\\microsoft.net\\framework\\v4.0.30319\\asp.netwebadminfiles\\security\\setupauthentication.aspx"), lpNewFileName="C:\\Windows\\Microsoft.NET\\Framework\\v4.0.30319\\ASP.NETWebAdminFiles\\Security\\setUpAuthentication.aspx" (normalized: "c:\\windows\\microsoft.net\\framework\\v4.0.30319\\asp.netwebadminfiles\\security\\setupauthentication.aspx")) returned 1 [0108.239] CreateFileW (lpFileName="C:\\Windows\\Microsoft.NET\\Framework\\v4.0.30319\\ASP.NETWebAdminFiles\\Security\\Permissions\\createPermission.aspx" (normalized: "c:\\windows\\microsoft.net\\framework\\v4.0.30319\\asp.netwebadminfiles\\security\\permissions\\createpermission.aspx"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x178 [0108.240] GetFileType (hFile=0x178) returned 0x1 [0108.240] GetFileType (hFile=0x178) returned 0x1 [0108.240] GetFileSize (in: hFile=0x178, lpFileSizeHigh=0x31e628 | out: lpFileSizeHigh=0x31e628*=0x0) returned 0x2b9a [0108.240] ReadFile (in: hFile=0x178, lpBuffer=0x27e3a04, nNumberOfBytesToRead=0x2b9a, lpNumberOfBytesRead=0x31e5d4, lpOverlapped=0x0 | out: lpBuffer=0x27e3a04*, lpNumberOfBytesRead=0x31e5d4*=0x2b9a, lpOverlapped=0x0) returned 1 [0108.270] CreateFileW (lpFileName="C:\\Windows\\Microsoft.NET\\Framework\\v4.0.30319\\ASP.NETWebAdminFiles\\Security\\Permissions\\createPermission.aspx" (normalized: "c:\\windows\\microsoft.net\\framework\\v4.0.30319\\asp.netwebadminfiles\\security\\permissions\\createpermission.aspx"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x178 [0108.270] GetFileType (hFile=0x178) returned 0x1 [0108.270] GetFileType (hFile=0x178) returned 0x1 [0108.271] WriteFile (in: hFile=0x178, lpBuffer=0x283e20c*, nNumberOfBytesToWrite=0x2ba0, lpNumberOfBytesWritten=0x31e5c8, lpOverlapped=0x0 | out: lpBuffer=0x283e20c*, lpNumberOfBytesWritten=0x31e5c8*=0x2ba0, lpOverlapped=0x0) returned 1 [0108.271] MoveFileW (lpExistingFileName="C:\\Windows\\Microsoft.NET\\Framework\\v4.0.30319\\ASP.NETWebAdminFiles\\Security\\Permissions\\createPermission.aspx" (normalized: "c:\\windows\\microsoft.net\\framework\\v4.0.30319\\asp.netwebadminfiles\\security\\permissions\\createpermission.aspx"), lpNewFileName="C:\\Windows\\Microsoft.NET\\Framework\\v4.0.30319\\ASP.NETWebAdminFiles\\Security\\Permissions\\createPermission.aspx" (normalized: "c:\\windows\\microsoft.net\\framework\\v4.0.30319\\asp.netwebadminfiles\\security\\permissions\\createpermission.aspx")) returned 1 [0108.272] CreateFileW (lpFileName="C:\\Windows\\Microsoft.NET\\Framework\\v4.0.30319\\ASP.NETWebAdminFiles\\Security\\Permissions\\managePermissions.aspx" (normalized: "c:\\windows\\microsoft.net\\framework\\v4.0.30319\\asp.netwebadminfiles\\security\\permissions\\managepermissions.aspx"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x178 [0108.272] GetFileType (hFile=0x178) returned 0x1 [0108.272] GetFileType (hFile=0x178) returned 0x1 [0108.272] GetFileSize (in: hFile=0x178, lpFileSizeHigh=0x31e628 | out: lpFileSizeHigh=0x31e628*=0x0) returned 0x54a4 [0108.273] ReadFile (in: hFile=0x178, lpBuffer=0x28412a0, nNumberOfBytesToRead=0x54a4, lpNumberOfBytesRead=0x31e5d4, lpOverlapped=0x0 | out: lpBuffer=0x28412a0*, lpNumberOfBytesRead=0x31e5d4*=0x54a4, lpOverlapped=0x0) returned 1 [0108.289] CreateFileW (lpFileName="C:\\Windows\\Microsoft.NET\\Framework\\v4.0.30319\\ASP.NETWebAdminFiles\\Security\\Permissions\\managePermissions.aspx" (normalized: "c:\\windows\\microsoft.net\\framework\\v4.0.30319\\asp.netwebadminfiles\\security\\permissions\\managepermissions.aspx"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x178 [0108.290] GetFileType (hFile=0x178) returned 0x1 [0108.290] GetFileType (hFile=0x178) returned 0x1 [0108.290] WriteFile (in: hFile=0x178, lpBuffer=0x26ab094*, nNumberOfBytesToWrite=0x54b0, lpNumberOfBytesWritten=0x31e5c8, lpOverlapped=0x0 | out: lpBuffer=0x26ab094*, lpNumberOfBytesWritten=0x31e5c8*=0x54b0, lpOverlapped=0x0) returned 1 [0108.291] MoveFileW (lpExistingFileName="C:\\Windows\\Microsoft.NET\\Framework\\v4.0.30319\\ASP.NETWebAdminFiles\\Security\\Permissions\\managePermissions.aspx" (normalized: "c:\\windows\\microsoft.net\\framework\\v4.0.30319\\asp.netwebadminfiles\\security\\permissions\\managepermissions.aspx"), lpNewFileName="C:\\Windows\\Microsoft.NET\\Framework\\v4.0.30319\\ASP.NETWebAdminFiles\\Security\\Permissions\\managePermissions.aspx" (normalized: "c:\\windows\\microsoft.net\\framework\\v4.0.30319\\asp.netwebadminfiles\\security\\permissions\\managepermissions.aspx")) returned 1 [0108.295] CreateFileW (lpFileName="C:\\Windows\\Microsoft.NET\\Framework\\v4.0.30319\\ASP.NETWebAdminFiles\\Security\\Roles\\manageAllRoles.aspx" (normalized: "c:\\windows\\microsoft.net\\framework\\v4.0.30319\\asp.netwebadminfiles\\security\\roles\\manageallroles.aspx"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x178 [0108.296] GetFileType (hFile=0x178) returned 0x1 [0108.296] GetFileType (hFile=0x178) returned 0x1 [0108.296] GetFileSize (in: hFile=0x178, lpFileSizeHigh=0x31e628 | out: lpFileSizeHigh=0x31e628*=0x0) returned 0x1c63 [0108.296] ReadFile (in: hFile=0x178, lpBuffer=0x26b595c, nNumberOfBytesToRead=0x1c63, lpNumberOfBytesRead=0x31e5d4, lpOverlapped=0x0 | out: lpBuffer=0x26b595c*, lpNumberOfBytesRead=0x31e5d4*=0x1c63, lpOverlapped=0x0) returned 1 [0108.311] CreateFileW (lpFileName="C:\\Windows\\Microsoft.NET\\Framework\\v4.0.30319\\ASP.NETWebAdminFiles\\Security\\Roles\\manageAllRoles.aspx" (normalized: "c:\\windows\\microsoft.net\\framework\\v4.0.30319\\asp.netwebadminfiles\\security\\roles\\manageallroles.aspx"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x178 [0108.312] GetFileType (hFile=0x178) returned 0x1 [0108.312] GetFileType (hFile=0x178) returned 0x1 [0108.312] WriteFile (in: hFile=0x178, lpBuffer=0x270b6d0*, nNumberOfBytesToWrite=0x1c70, lpNumberOfBytesWritten=0x31e5c8, lpOverlapped=0x0 | out: lpBuffer=0x270b6d0*, lpNumberOfBytesWritten=0x31e5c8*=0x1c70, lpOverlapped=0x0) returned 1 [0108.313] MoveFileW (lpExistingFileName="C:\\Windows\\Microsoft.NET\\Framework\\v4.0.30319\\ASP.NETWebAdminFiles\\Security\\Roles\\manageAllRoles.aspx" (normalized: "c:\\windows\\microsoft.net\\framework\\v4.0.30319\\asp.netwebadminfiles\\security\\roles\\manageallroles.aspx"), lpNewFileName="C:\\Windows\\Microsoft.NET\\Framework\\v4.0.30319\\ASP.NETWebAdminFiles\\Security\\Roles\\manageAllRoles.aspx" (normalized: "c:\\windows\\microsoft.net\\framework\\v4.0.30319\\asp.netwebadminfiles\\security\\roles\\manageallroles.aspx")) returned 1 [0108.313] CreateFileW (lpFileName="C:\\Windows\\Microsoft.NET\\Framework\\v4.0.30319\\ASP.NETWebAdminFiles\\Security\\Roles\\manageSingleRole.aspx" (normalized: "c:\\windows\\microsoft.net\\framework\\v4.0.30319\\asp.netwebadminfiles\\security\\roles\\managesinglerole.aspx"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x178 [0108.314] GetFileType (hFile=0x178) returned 0x1 [0108.314] GetFileType (hFile=0x178) returned 0x1 [0108.314] GetFileSize (in: hFile=0x178, lpFileSizeHigh=0x31e628 | out: lpFileSizeHigh=0x31e628*=0x0) returned 0x2739 [0108.314] ReadFile (in: hFile=0x178, lpBuffer=0x270d7ec, nNumberOfBytesToRead=0x2739, lpNumberOfBytesRead=0x31e5d4, lpOverlapped=0x0 | out: lpBuffer=0x270d7ec*, lpNumberOfBytesRead=0x31e5d4*=0x2739, lpOverlapped=0x0) returned 1 [0108.329] CreateFileW (lpFileName="C:\\Windows\\Microsoft.NET\\Framework\\v4.0.30319\\ASP.NETWebAdminFiles\\Security\\Roles\\manageSingleRole.aspx" (normalized: "c:\\windows\\microsoft.net\\framework\\v4.0.30319\\asp.netwebadminfiles\\security\\roles\\managesinglerole.aspx"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x178 [0108.329] GetFileType (hFile=0x178) returned 0x1 [0108.330] GetFileType (hFile=0x178) returned 0x1 [0108.330] WriteFile (in: hFile=0x178, lpBuffer=0x2766a14*, nNumberOfBytesToWrite=0x2740, lpNumberOfBytesWritten=0x31e5c8, lpOverlapped=0x0 | out: lpBuffer=0x2766a14*, lpNumberOfBytesWritten=0x31e5c8*=0x2740, lpOverlapped=0x0) returned 1 [0108.331] MoveFileW (lpExistingFileName="C:\\Windows\\Microsoft.NET\\Framework\\v4.0.30319\\ASP.NETWebAdminFiles\\Security\\Roles\\manageSingleRole.aspx" (normalized: "c:\\windows\\microsoft.net\\framework\\v4.0.30319\\asp.netwebadminfiles\\security\\roles\\managesinglerole.aspx"), lpNewFileName="C:\\Windows\\Microsoft.NET\\Framework\\v4.0.30319\\ASP.NETWebAdminFiles\\Security\\Roles\\manageSingleRole.aspx" (normalized: "c:\\windows\\microsoft.net\\framework\\v4.0.30319\\asp.netwebadminfiles\\security\\roles\\managesinglerole.aspx")) returned 1 [0108.334] CreateFileW (lpFileName="C:\\Windows\\Microsoft.NET\\Framework\\v4.0.30319\\ASP.NETWebAdminFiles\\Security\\Users\\addUser.aspx" (normalized: "c:\\windows\\microsoft.net\\framework\\v4.0.30319\\asp.netwebadminfiles\\security\\users\\adduser.aspx"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x178 [0108.335] GetFileType (hFile=0x178) returned 0x1 [0108.335] GetFileType (hFile=0x178) returned 0x1 [0108.335] GetFileSize (in: hFile=0x178, lpFileSizeHigh=0x31e628 | out: lpFileSizeHigh=0x31e628*=0x0) returned 0x150e [0108.335] ReadFile (in: hFile=0x178, lpBuffer=0x276eb68, nNumberOfBytesToRead=0x150e, lpNumberOfBytesRead=0x31e5d4, lpOverlapped=0x0 | out: lpBuffer=0x276eb68*, lpNumberOfBytesRead=0x31e5d4*=0x150e, lpOverlapped=0x0) returned 1 [0108.349] CreateFileW (lpFileName="C:\\Windows\\Microsoft.NET\\Framework\\v4.0.30319\\ASP.NETWebAdminFiles\\Security\\Users\\addUser.aspx" (normalized: "c:\\windows\\microsoft.net\\framework\\v4.0.30319\\asp.netwebadminfiles\\security\\users\\adduser.aspx"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x178 [0108.350] GetFileType (hFile=0x178) returned 0x1 [0108.350] GetFileType (hFile=0x178) returned 0x1 [0108.350] WriteFile (in: hFile=0x178, lpBuffer=0x27c22a0*, nNumberOfBytesToWrite=0x1510, lpNumberOfBytesWritten=0x31e5c8, lpOverlapped=0x0 | out: lpBuffer=0x27c22a0*, lpNumberOfBytesWritten=0x31e5c8*=0x1510, lpOverlapped=0x0) returned 1 [0108.351] MoveFileW (lpExistingFileName="C:\\Windows\\Microsoft.NET\\Framework\\v4.0.30319\\ASP.NETWebAdminFiles\\Security\\Users\\addUser.aspx" (normalized: "c:\\windows\\microsoft.net\\framework\\v4.0.30319\\asp.netwebadminfiles\\security\\users\\adduser.aspx"), lpNewFileName="C:\\Windows\\Microsoft.NET\\Framework\\v4.0.30319\\ASP.NETWebAdminFiles\\Security\\Users\\addUser.aspx" (normalized: "c:\\windows\\microsoft.net\\framework\\v4.0.30319\\asp.netwebadminfiles\\security\\users\\adduser.aspx")) returned 1 [0108.351] CreateFileW (lpFileName="C:\\Windows\\Microsoft.NET\\Framework\\v4.0.30319\\ASP.NETWebAdminFiles\\Security\\Users\\editUser.aspx" (normalized: "c:\\windows\\microsoft.net\\framework\\v4.0.30319\\asp.netwebadminfiles\\security\\users\\edituser.aspx"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x178 [0108.352] GetFileType (hFile=0x178) returned 0x1 [0108.352] GetFileType (hFile=0x178) returned 0x1 [0108.352] GetFileSize (in: hFile=0x178, lpFileSizeHigh=0x31e628 | out: lpFileSizeHigh=0x31e628*=0x0) returned 0x2f41 [0108.352] ReadFile (in: hFile=0x178, lpBuffer=0x27c3c0c, nNumberOfBytesToRead=0x2f41, lpNumberOfBytesRead=0x31e5d4, lpOverlapped=0x0 | out: lpBuffer=0x27c3c0c*, lpNumberOfBytesRead=0x31e5d4*=0x2f41, lpOverlapped=0x0) returned 1 [0108.367] CreateFileW (lpFileName="C:\\Windows\\Microsoft.NET\\Framework\\v4.0.30319\\ASP.NETWebAdminFiles\\Security\\Users\\editUser.aspx" (normalized: "c:\\windows\\microsoft.net\\framework\\v4.0.30319\\asp.netwebadminfiles\\security\\users\\edituser.aspx"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x178 [0108.368] GetFileType (hFile=0x178) returned 0x1 [0108.368] GetFileType (hFile=0x178) returned 0x1 [0108.368] WriteFile (in: hFile=0x178, lpBuffer=0x281f684*, nNumberOfBytesToWrite=0x2f50, lpNumberOfBytesWritten=0x31e5c8, lpOverlapped=0x0 | out: lpBuffer=0x281f684*, lpNumberOfBytesWritten=0x31e5c8*=0x2f50, lpOverlapped=0x0) returned 1 [0108.369] MoveFileW (lpExistingFileName="C:\\Windows\\Microsoft.NET\\Framework\\v4.0.30319\\ASP.NETWebAdminFiles\\Security\\Users\\editUser.aspx" (normalized: "c:\\windows\\microsoft.net\\framework\\v4.0.30319\\asp.netwebadminfiles\\security\\users\\edituser.aspx"), lpNewFileName="C:\\Windows\\Microsoft.NET\\Framework\\v4.0.30319\\ASP.NETWebAdminFiles\\Security\\Users\\editUser.aspx" (normalized: "c:\\windows\\microsoft.net\\framework\\v4.0.30319\\asp.netwebadminfiles\\security\\users\\edituser.aspx")) returned 1 [0108.369] CreateFileW (lpFileName="C:\\Windows\\Microsoft.NET\\Framework\\v4.0.30319\\ASP.NETWebAdminFiles\\Security\\Users\\findUsers.aspx" (normalized: "c:\\windows\\microsoft.net\\framework\\v4.0.30319\\asp.netwebadminfiles\\security\\users\\findusers.aspx"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x178 [0108.370] GetFileType (hFile=0x178) returned 0x1 [0108.370] GetFileType (hFile=0x178) returned 0x1 [0108.370] GetFileSize (in: hFile=0x178, lpFileSizeHigh=0x31e628 | out: lpFileSizeHigh=0x31e628*=0x0) returned 0x20ba [0108.370] ReadFile (in: hFile=0x178, lpBuffer=0x2822a38, nNumberOfBytesToRead=0x20ba, lpNumberOfBytesRead=0x31e5d4, lpOverlapped=0x0 | out: lpBuffer=0x2822a38*, lpNumberOfBytesRead=0x31e5d4*=0x20ba, lpOverlapped=0x0) returned 1 [0108.386] CreateFileW (lpFileName="C:\\Windows\\Microsoft.NET\\Framework\\v4.0.30319\\ASP.NETWebAdminFiles\\Security\\Users\\findUsers.aspx" (normalized: "c:\\windows\\microsoft.net\\framework\\v4.0.30319\\asp.netwebadminfiles\\security\\users\\findusers.aspx"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x178 [0108.387] GetFileType (hFile=0x178) returned 0x1 [0108.387] GetFileType (hFile=0x178) returned 0x1 [0108.387] WriteFile (in: hFile=0x178, lpBuffer=0x2676960*, nNumberOfBytesToWrite=0x20c0, lpNumberOfBytesWritten=0x31e5c8, lpOverlapped=0x0 | out: lpBuffer=0x2676960*, lpNumberOfBytesWritten=0x31e5c8*=0x20c0, lpOverlapped=0x0) returned 1 [0108.388] MoveFileW (lpExistingFileName="C:\\Windows\\Microsoft.NET\\Framework\\v4.0.30319\\ASP.NETWebAdminFiles\\Security\\Users\\findUsers.aspx" (normalized: "c:\\windows\\microsoft.net\\framework\\v4.0.30319\\asp.netwebadminfiles\\security\\users\\findusers.aspx"), lpNewFileName="C:\\Windows\\Microsoft.NET\\Framework\\v4.0.30319\\ASP.NETWebAdminFiles\\Security\\Users\\findUsers.aspx" (normalized: "c:\\windows\\microsoft.net\\framework\\v4.0.30319\\asp.netwebadminfiles\\security\\users\\findusers.aspx")) returned 1 [0108.388] CreateFileW (lpFileName="C:\\Windows\\Microsoft.NET\\Framework\\v4.0.30319\\ASP.NETWebAdminFiles\\Security\\Users\\manageUsers.aspx" (normalized: "c:\\windows\\microsoft.net\\framework\\v4.0.30319\\asp.netwebadminfiles\\security\\users\\manageusers.aspx"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x178 [0108.389] GetFileType (hFile=0x178) returned 0x1 [0108.389] GetFileType (hFile=0x178) returned 0x1 [0108.389] GetFileSize (in: hFile=0x178, lpFileSizeHigh=0x31e628 | out: lpFileSizeHigh=0x31e628*=0x0) returned 0x3da8 [0108.389] ReadFile (in: hFile=0x178, lpBuffer=0x2678e9c, nNumberOfBytesToRead=0x3da8, lpNumberOfBytesRead=0x31e5d4, lpOverlapped=0x0 | out: lpBuffer=0x2678e9c*, lpNumberOfBytesRead=0x31e5d4*=0x3da8, lpOverlapped=0x0) returned 1 [0108.403] CreateFileW (lpFileName="C:\\Windows\\Microsoft.NET\\Framework\\v4.0.30319\\ASP.NETWebAdminFiles\\Security\\Users\\manageUsers.aspx" (normalized: "c:\\windows\\microsoft.net\\framework\\v4.0.30319\\asp.netwebadminfiles\\security\\users\\manageusers.aspx"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x178 [0108.404] GetFileType (hFile=0x178) returned 0x1 [0108.404] GetFileType (hFile=0x178) returned 0x1 [0108.404] WriteFile (in: hFile=0x178, lpBuffer=0x26d924c*, nNumberOfBytesToWrite=0x3db0, lpNumberOfBytesWritten=0x31e5c8, lpOverlapped=0x0 | out: lpBuffer=0x26d924c*, lpNumberOfBytesWritten=0x31e5c8*=0x3db0, lpOverlapped=0x0) returned 1 [0108.405] MoveFileW (lpExistingFileName="C:\\Windows\\Microsoft.NET\\Framework\\v4.0.30319\\ASP.NETWebAdminFiles\\Security\\Users\\manageUsers.aspx" (normalized: "c:\\windows\\microsoft.net\\framework\\v4.0.30319\\asp.netwebadminfiles\\security\\users\\manageusers.aspx"), lpNewFileName="C:\\Windows\\Microsoft.NET\\Framework\\v4.0.30319\\ASP.NETWebAdminFiles\\Security\\Users\\manageUsers.aspx" (normalized: "c:\\windows\\microsoft.net\\framework\\v4.0.30319\\asp.netwebadminfiles\\security\\users\\manageusers.aspx")) returned 1 [0108.413] CreateFileW (lpFileName="C:\\Windows\\Microsoft.NET\\Framework\\v4.0.30319\\ASP.NETWebAdminFiles\\Security\\Wizard\\wizard.aspx" (normalized: "c:\\windows\\microsoft.net\\framework\\v4.0.30319\\asp.netwebadminfiles\\security\\wizard\\wizard.aspx"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x178 [0108.414] GetFileType (hFile=0x178) returned 0x1 [0108.414] GetFileType (hFile=0x178) returned 0x1 [0108.414] GetFileSize (in: hFile=0x178, lpFileSizeHigh=0x31e628 | out: lpFileSizeHigh=0x31e628*=0x0) returned 0x2ae9 [0108.414] ReadFile (in: hFile=0x178, lpBuffer=0x26e4c64, nNumberOfBytesToRead=0x2ae9, lpNumberOfBytesRead=0x31e5d4, lpOverlapped=0x0 | out: lpBuffer=0x26e4c64*, lpNumberOfBytesRead=0x31e5d4*=0x2ae9, lpOverlapped=0x0) returned 1 [0108.428] CreateFileW (lpFileName="C:\\Windows\\Microsoft.NET\\Framework\\v4.0.30319\\ASP.NETWebAdminFiles\\Security\\Wizard\\wizard.aspx" (normalized: "c:\\windows\\microsoft.net\\framework\\v4.0.30319\\asp.netwebadminfiles\\security\\wizard\\wizard.aspx"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x178 [0108.429] GetFileType (hFile=0x178) returned 0x1 [0108.429] GetFileType (hFile=0x178) returned 0x1 [0108.429] WriteFile (in: hFile=0x178, lpBuffer=0x273f0fc*, nNumberOfBytesToWrite=0x2af0, lpNumberOfBytesWritten=0x31e5c8, lpOverlapped=0x0 | out: lpBuffer=0x273f0fc*, lpNumberOfBytesWritten=0x31e5c8*=0x2af0, lpOverlapped=0x0) returned 1 [0108.430] MoveFileW (lpExistingFileName="C:\\Windows\\Microsoft.NET\\Framework\\v4.0.30319\\ASP.NETWebAdminFiles\\Security\\Wizard\\wizard.aspx" (normalized: "c:\\windows\\microsoft.net\\framework\\v4.0.30319\\asp.netwebadminfiles\\security\\wizard\\wizard.aspx"), lpNewFileName="C:\\Windows\\Microsoft.NET\\Framework\\v4.0.30319\\ASP.NETWebAdminFiles\\Security\\Wizard\\wizard.aspx" (normalized: "c:\\windows\\microsoft.net\\framework\\v4.0.30319\\asp.netwebadminfiles\\security\\wizard\\wizard.aspx")) returned 1 [0108.437] CreateFileW (lpFileName="C:\\Windows\\Microsoft.NET\\Framework\\v4.0.30319\\Config\\DefaultWsdlHelpGenerator.aspx" (normalized: "c:\\windows\\microsoft.net\\framework\\v4.0.30319\\config\\defaultwsdlhelpgenerator.aspx"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x178 [0108.438] GetFileType (hFile=0x178) returned 0x1 [0108.438] GetFileType (hFile=0x178) returned 0x1 [0108.438] GetFileSize (in: hFile=0x178, lpFileSizeHigh=0x31e718 | out: lpFileSizeHigh=0x31e718*=0x0) returned 0x1131a [0108.438] ReadFile (in: hFile=0x178, lpBuffer=0x274e868, nNumberOfBytesToRead=0x1131a, lpNumberOfBytesRead=0x31e6c4, lpOverlapped=0x0 | out: lpBuffer=0x274e868*, lpNumberOfBytesRead=0x31e6c4*=0x1131a, lpOverlapped=0x0) returned 1 [0108.455] CreateFileW (lpFileName="C:\\Windows\\Microsoft.NET\\Framework\\v4.0.30319\\Config\\DefaultWsdlHelpGenerator.aspx" (normalized: "c:\\windows\\microsoft.net\\framework\\v4.0.30319\\config\\defaultwsdlhelpgenerator.aspx"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x178 [0108.456] GetFileType (hFile=0x178) returned 0x1 [0108.456] GetFileType (hFile=0x178) returned 0x1 [0108.456] WriteFile (in: hFile=0x178, lpBuffer=0x27cefc4*, nNumberOfBytesToWrite=0x11320, lpNumberOfBytesWritten=0x31e6b8, lpOverlapped=0x0 | out: lpBuffer=0x27cefc4*, lpNumberOfBytesWritten=0x31e6b8*=0x11320, lpOverlapped=0x0) returned 1 [0108.457] MoveFileW (lpExistingFileName="C:\\Windows\\Microsoft.NET\\Framework\\v4.0.30319\\Config\\DefaultWsdlHelpGenerator.aspx" (normalized: "c:\\windows\\microsoft.net\\framework\\v4.0.30319\\config\\defaultwsdlhelpgenerator.aspx"), lpNewFileName="C:\\Windows\\Microsoft.NET\\Framework\\v4.0.30319\\Config\\DefaultWsdlHelpGenerator.aspx" (normalized: "c:\\windows\\microsoft.net\\framework\\v4.0.30319\\config\\defaultwsdlhelpgenerator.aspx")) returned 1 [0108.458] CreateFileW (lpFileName="C:\\Windows\\Microsoft.NET\\Framework\\v4.0.30319\\Config\\NetFx40_IIS_schema_update.xml" (normalized: "c:\\windows\\microsoft.net\\framework\\v4.0.30319\\config\\netfx40_iis_schema_update.xml"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x178 [0108.459] GetFileType (hFile=0x178) returned 0x1 [0108.459] GetFileType (hFile=0x178) returned 0x1 [0108.459] GetFileSize (in: hFile=0x178, lpFileSizeHigh=0x31e718 | out: lpFileSizeHigh=0x31e718*=0x0) returned 0xd75 [0108.459] ReadFile (in: hFile=0x178, lpBuffer=0x27e15f0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x31e6c4, lpOverlapped=0x0 | out: lpBuffer=0x27e15f0*, lpNumberOfBytesRead=0x31e6c4*=0xd75, lpOverlapped=0x0) returned 1 [0108.472] CreateFileW (lpFileName="C:\\Windows\\Microsoft.NET\\Framework\\v4.0.30319\\Config\\NetFx40_IIS_schema_update.xml" (normalized: "c:\\windows\\microsoft.net\\framework\\v4.0.30319\\config\\netfx40_iis_schema_update.xml"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x178 [0108.473] GetFileType (hFile=0x178) returned 0x1 [0108.473] GetFileType (hFile=0x178) returned 0x1 [0108.474] MoveFileW (lpExistingFileName="C:\\Windows\\Microsoft.NET\\Framework\\v4.0.30319\\Config\\NetFx40_IIS_schema_update.xml" (normalized: "c:\\windows\\microsoft.net\\framework\\v4.0.30319\\config\\netfx40_iis_schema_update.xml"), lpNewFileName="C:\\Windows\\Microsoft.NET\\Framework\\v4.0.30319\\Config\\NetFx40_IIS_schema_update.xml" (normalized: "c:\\windows\\microsoft.net\\framework\\v4.0.30319\\config\\netfx40_iis_schema_update.xml")) returned 1 [0108.474] CreateFileW (lpFileName="C:\\Windows\\Microsoft.NET\\Framework\\v4.0.30319\\Config\\NetFx45_IIS_schema_update.xml" (normalized: "c:\\windows\\microsoft.net\\framework\\v4.0.30319\\config\\netfx45_iis_schema_update.xml"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x178 [0108.475] GetFileType (hFile=0x178) returned 0x1 [0108.475] GetFileType (hFile=0x178) returned 0x1 [0108.475] GetFileSize (in: hFile=0x178, lpFileSizeHigh=0x31e718 | out: lpFileSizeHigh=0x31e718*=0x0) returned 0x813 [0108.475] ReadFile (in: hFile=0x178, lpBuffer=0x28353c8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x31e6c4, lpOverlapped=0x0 | out: lpBuffer=0x28353c8*, lpNumberOfBytesRead=0x31e6c4*=0x813, lpOverlapped=0x0) returned 1 [0108.490] CreateFileW (lpFileName="C:\\Windows\\Microsoft.NET\\Framework\\v4.0.30319\\Config\\NetFx45_IIS_schema_update.xml" (normalized: "c:\\windows\\microsoft.net\\framework\\v4.0.30319\\config\\netfx45_iis_schema_update.xml"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x178 [0108.491] GetFileType (hFile=0x178) returned 0x1 [0108.491] GetFileType (hFile=0x178) returned 0x1 [0108.491] WriteFile (in: hFile=0x178, lpBuffer=0x26834bc*, nNumberOfBytesToWrite=0x820, lpNumberOfBytesWritten=0x31e68c, lpOverlapped=0x0 | out: lpBuffer=0x26834bc*, lpNumberOfBytesWritten=0x31e68c*=0x820, lpOverlapped=0x0) returned 1 [0108.492] MoveFileW (lpExistingFileName="C:\\Windows\\Microsoft.NET\\Framework\\v4.0.30319\\Config\\NetFx45_IIS_schema_update.xml" (normalized: "c:\\windows\\microsoft.net\\framework\\v4.0.30319\\config\\netfx45_iis_schema_update.xml"), lpNewFileName="C:\\Windows\\Microsoft.NET\\Framework\\v4.0.30319\\Config\\NetFx45_IIS_schema_update.xml" (normalized: "c:\\windows\\microsoft.net\\framework\\v4.0.30319\\config\\netfx45_iis_schema_update.xml")) returned 1 [0108.511] CreateFileW (lpFileName="C:\\Windows\\Microsoft.NET\\Framework\\v4.0.30319\\SQL\\en\\DropSqlPersistenceProviderLogic.sql" (normalized: "c:\\windows\\microsoft.net\\framework\\v4.0.30319\\sql\\en\\dropsqlpersistenceproviderlogic.sql"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x178 [0108.512] GetFileType (hFile=0x178) returned 0x1 [0108.512] GetFileType (hFile=0x178) returned 0x1 [0108.512] GetFileSize (in: hFile=0x178, lpFileSizeHigh=0x31e6a0 | out: lpFileSizeHigh=0x31e6a0*=0x0) returned 0x4af [0108.512] ReadFile (in: hFile=0x178, lpBuffer=0x2698328, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x31e64c, lpOverlapped=0x0 | out: lpBuffer=0x2698328*, lpNumberOfBytesRead=0x31e64c*=0x4af, lpOverlapped=0x0) returned 1 [0108.526] CreateFileW (lpFileName="C:\\Windows\\Microsoft.NET\\Framework\\v4.0.30319\\SQL\\en\\DropSqlPersistenceProviderLogic.sql" (normalized: "c:\\windows\\microsoft.net\\framework\\v4.0.30319\\sql\\en\\dropsqlpersistenceproviderlogic.sql"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x178 [0108.526] GetFileType (hFile=0x178) returned 0x1 [0108.526] GetFileType (hFile=0x178) returned 0x1 [0108.527] WriteFile (in: hFile=0x178, lpBuffer=0x26e7b58*, nNumberOfBytesToWrite=0x4b0, lpNumberOfBytesWritten=0x31e614, lpOverlapped=0x0 | out: lpBuffer=0x26e7b58*, lpNumberOfBytesWritten=0x31e614*=0x4b0, lpOverlapped=0x0) returned 1 [0108.527] MoveFileW (lpExistingFileName="C:\\Windows\\Microsoft.NET\\Framework\\v4.0.30319\\SQL\\en\\DropSqlPersistenceProviderLogic.sql" (normalized: "c:\\windows\\microsoft.net\\framework\\v4.0.30319\\sql\\en\\dropsqlpersistenceproviderlogic.sql"), lpNewFileName="C:\\Windows\\Microsoft.NET\\Framework\\v4.0.30319\\SQL\\en\\DropSqlPersistenceProviderLogic.sql" (normalized: "c:\\windows\\microsoft.net\\framework\\v4.0.30319\\sql\\en\\dropsqlpersistenceproviderlogic.sql")) returned 1 [0108.528] CreateFileW (lpFileName="C:\\Windows\\Microsoft.NET\\Framework\\v4.0.30319\\SQL\\en\\DropSqlPersistenceProviderSchema.sql" (normalized: "c:\\windows\\microsoft.net\\framework\\v4.0.30319\\sql\\en\\dropsqlpersistenceproviderschema.sql"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x178 [0108.528] GetFileType (hFile=0x178) returned 0x1 [0108.528] GetFileType (hFile=0x178) returned 0x1 [0108.528] GetFileSize (in: hFile=0x178, lpFileSizeHigh=0x31e6a0 | out: lpFileSizeHigh=0x31e6a0*=0x0) returned 0x528 [0108.529] ReadFile (in: hFile=0x178, lpBuffer=0x26e93a4, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x31e64c, lpOverlapped=0x0 | out: lpBuffer=0x26e93a4*, lpNumberOfBytesRead=0x31e64c*=0x528, lpOverlapped=0x0) returned 1 [0108.542] CreateFileW (lpFileName="C:\\Windows\\Microsoft.NET\\Framework\\v4.0.30319\\SQL\\en\\DropSqlPersistenceProviderSchema.sql" (normalized: "c:\\windows\\microsoft.net\\framework\\v4.0.30319\\sql\\en\\dropsqlpersistenceproviderschema.sql"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x178 [0108.543] GetFileType (hFile=0x178) returned 0x1 [0108.543] GetFileType (hFile=0x178) returned 0x1 [0108.544] MoveFileW (lpExistingFileName="C:\\Windows\\Microsoft.NET\\Framework\\v4.0.30319\\SQL\\en\\DropSqlPersistenceProviderSchema.sql" (normalized: "c:\\windows\\microsoft.net\\framework\\v4.0.30319\\sql\\en\\dropsqlpersistenceproviderschema.sql"), lpNewFileName="C:\\Windows\\Microsoft.NET\\Framework\\v4.0.30319\\SQL\\en\\DropSqlPersistenceProviderSchema.sql" (normalized: "c:\\windows\\microsoft.net\\framework\\v4.0.30319\\sql\\en\\dropsqlpersistenceproviderschema.sql")) returned 1 [0108.544] CreateFileW (lpFileName="C:\\Windows\\Microsoft.NET\\Framework\\v4.0.30319\\SQL\\en\\DropSqlWorkflowInstanceStoreLogic.sql" (normalized: "c:\\windows\\microsoft.net\\framework\\v4.0.30319\\sql\\en\\dropsqlworkflowinstancestorelogic.sql"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x178 [0108.544] GetFileType (hFile=0x178) returned 0x1 [0108.544] GetFileType (hFile=0x178) returned 0x1 [0108.544] GetFileSize (in: hFile=0x178, lpFileSizeHigh=0x31e6a0 | out: lpFileSizeHigh=0x31e6a0*=0x0) returned 0x17b1 [0108.545] ReadFile (in: hFile=0x178, lpBuffer=0x273a01c, nNumberOfBytesToRead=0x17b1, lpNumberOfBytesRead=0x31e64c, lpOverlapped=0x0 | out: lpBuffer=0x273a01c*, lpNumberOfBytesRead=0x31e64c*=0x17b1, lpOverlapped=0x0) returned 1 [0108.558] CreateFileW (lpFileName="C:\\Windows\\Microsoft.NET\\Framework\\v4.0.30319\\SQL\\en\\DropSqlWorkflowInstanceStoreLogic.sql" (normalized: "c:\\windows\\microsoft.net\\framework\\v4.0.30319\\sql\\en\\dropsqlworkflowinstancestorelogic.sql"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x178 [0108.559] GetFileType (hFile=0x178) returned 0x1 [0108.559] GetFileType (hFile=0x178) returned 0x1 [0108.559] WriteFile (in: hFile=0x178, lpBuffer=0x278e4c4*, nNumberOfBytesToWrite=0x17c0, lpNumberOfBytesWritten=0x31e640, lpOverlapped=0x0 | out: lpBuffer=0x278e4c4*, lpNumberOfBytesWritten=0x31e640*=0x17c0, lpOverlapped=0x0) returned 1 [0108.560] MoveFileW (lpExistingFileName="C:\\Windows\\Microsoft.NET\\Framework\\v4.0.30319\\SQL\\en\\DropSqlWorkflowInstanceStoreLogic.sql" (normalized: "c:\\windows\\microsoft.net\\framework\\v4.0.30319\\sql\\en\\dropsqlworkflowinstancestorelogic.sql"), lpNewFileName="C:\\Windows\\Microsoft.NET\\Framework\\v4.0.30319\\SQL\\en\\DropSqlWorkflowInstanceStoreLogic.sql" (normalized: "c:\\windows\\microsoft.net\\framework\\v4.0.30319\\sql\\en\\dropsqlworkflowinstancestorelogic.sql")) returned 1 [0108.560] CreateFileW (lpFileName="C:\\Windows\\Microsoft.NET\\Framework\\v4.0.30319\\SQL\\en\\DropSqlWorkflowInstanceStoreSchema.sql" (normalized: "c:\\windows\\microsoft.net\\framework\\v4.0.30319\\sql\\en\\dropsqlworkflowinstancestoreschema.sql"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x178 [0108.561] GetFileType (hFile=0x178) returned 0x1 [0108.561] GetFileType (hFile=0x178) returned 0x1 [0108.561] GetFileSize (in: hFile=0x178, lpFileSizeHigh=0x31e6a0 | out: lpFileSizeHigh=0x31e6a0*=0x0) returned 0xeee [0108.561] ReadFile (in: hFile=0x178, lpBuffer=0x2791020, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x31e64c, lpOverlapped=0x0 | out: lpBuffer=0x2791020*, lpNumberOfBytesRead=0x31e64c*=0xeee, lpOverlapped=0x0) returned 1 [0108.576] CreateFileW (lpFileName="C:\\Windows\\Microsoft.NET\\Framework\\v4.0.30319\\SQL\\en\\DropSqlWorkflowInstanceStoreSchema.sql" (normalized: "c:\\windows\\microsoft.net\\framework\\v4.0.30319\\sql\\en\\dropsqlworkflowinstancestoreschema.sql"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x178 [0108.577] GetFileType (hFile=0x178) returned 0x1 [0108.577] GetFileType (hFile=0x178) returned 0x1 [0108.578] MoveFileW (lpExistingFileName="C:\\Windows\\Microsoft.NET\\Framework\\v4.0.30319\\SQL\\en\\DropSqlWorkflowInstanceStoreSchema.sql" (normalized: "c:\\windows\\microsoft.net\\framework\\v4.0.30319\\sql\\en\\dropsqlworkflowinstancestoreschema.sql"), lpNewFileName="C:\\Windows\\Microsoft.NET\\Framework\\v4.0.30319\\SQL\\en\\DropSqlWorkflowInstanceStoreSchema.sql" (normalized: "c:\\windows\\microsoft.net\\framework\\v4.0.30319\\sql\\en\\dropsqlworkflowinstancestoreschema.sql")) returned 1 [0108.578] CreateFileW (lpFileName="C:\\Windows\\Microsoft.NET\\Framework\\v4.0.30319\\SQL\\en\\SqlPersistenceProviderLogic.sql" (normalized: "c:\\windows\\microsoft.net\\framework\\v4.0.30319\\sql\\en\\sqlpersistenceproviderlogic.sql"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x178 [0108.579] GetFileType (hFile=0x178) returned 0x1 [0108.579] GetFileType (hFile=0x178) returned 0x1 [0108.579] GetFileSize (in: hFile=0x178, lpFileSizeHigh=0x31e6a0 | out: lpFileSizeHigh=0x31e6a0*=0x0) returned 0x1a58 [0108.579] ReadFile (in: hFile=0x178, lpBuffer=0x27e4d4c, nNumberOfBytesToRead=0x1a58, lpNumberOfBytesRead=0x31e64c, lpOverlapped=0x0 | out: lpBuffer=0x27e4d4c*, lpNumberOfBytesRead=0x31e64c*=0x1a58, lpOverlapped=0x0) returned 1 [0108.592] CreateFileW (lpFileName="C:\\Windows\\Microsoft.NET\\Framework\\v4.0.30319\\SQL\\en\\SqlPersistenceProviderLogic.sql" (normalized: "c:\\windows\\microsoft.net\\framework\\v4.0.30319\\sql\\en\\sqlpersistenceproviderlogic.sql"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x178 [0108.593] GetFileType (hFile=0x178) returned 0x1 [0108.593] GetFileType (hFile=0x178) returned 0x1 [0108.593] WriteFile (in: hFile=0x178, lpBuffer=0x2839f10*, nNumberOfBytesToWrite=0x1a60, lpNumberOfBytesWritten=0x31e640, lpOverlapped=0x0 | out: lpBuffer=0x2839f10*, lpNumberOfBytesWritten=0x31e640*=0x1a60, lpOverlapped=0x0) returned 1 [0108.594] MoveFileW (lpExistingFileName="C:\\Windows\\Microsoft.NET\\Framework\\v4.0.30319\\SQL\\en\\SqlPersistenceProviderLogic.sql" (normalized: "c:\\windows\\microsoft.net\\framework\\v4.0.30319\\sql\\en\\sqlpersistenceproviderlogic.sql"), lpNewFileName="C:\\Windows\\Microsoft.NET\\Framework\\v4.0.30319\\SQL\\en\\SqlPersistenceProviderLogic.sql" (normalized: "c:\\windows\\microsoft.net\\framework\\v4.0.30319\\sql\\en\\sqlpersistenceproviderlogic.sql")) returned 1 [0108.594] CreateFileW (lpFileName="C:\\Windows\\Microsoft.NET\\Framework\\v4.0.30319\\SQL\\en\\SqlPersistenceProviderSchema.sql" (normalized: "c:\\windows\\microsoft.net\\framework\\v4.0.30319\\sql\\en\\sqlpersistenceproviderschema.sql"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x178 [0108.595] GetFileType (hFile=0x178) returned 0x1 [0108.595] GetFileType (hFile=0x178) returned 0x1 [0108.595] GetFileSize (in: hFile=0x178, lpFileSizeHigh=0x31e6a0 | out: lpFileSizeHigh=0x31e6a0*=0x0) returned 0x860 [0108.595] ReadFile (in: hFile=0x178, lpBuffer=0x283c634, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x31e64c, lpOverlapped=0x0 | out: lpBuffer=0x283c634*, lpNumberOfBytesRead=0x31e64c*=0x860, lpOverlapped=0x0) returned 1 [0108.611] CreateFileW (lpFileName="C:\\Windows\\Microsoft.NET\\Framework\\v4.0.30319\\SQL\\en\\SqlPersistenceProviderSchema.sql" (normalized: "c:\\windows\\microsoft.net\\framework\\v4.0.30319\\sql\\en\\sqlpersistenceproviderschema.sql"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x178 [0108.612] GetFileType (hFile=0x178) returned 0x1 [0108.612] GetFileType (hFile=0x178) returned 0x1 [0108.612] WriteFile (in: hFile=0x178, lpBuffer=0x268c928*, nNumberOfBytesToWrite=0x870, lpNumberOfBytesWritten=0x31e614, lpOverlapped=0x0 | out: lpBuffer=0x268c928*, lpNumberOfBytesWritten=0x31e614*=0x870, lpOverlapped=0x0) returned 1 [0108.613] MoveFileW (lpExistingFileName="C:\\Windows\\Microsoft.NET\\Framework\\v4.0.30319\\SQL\\en\\SqlPersistenceProviderSchema.sql" (normalized: "c:\\windows\\microsoft.net\\framework\\v4.0.30319\\sql\\en\\sqlpersistenceproviderschema.sql"), lpNewFileName="C:\\Windows\\Microsoft.NET\\Framework\\v4.0.30319\\SQL\\en\\SqlPersistenceProviderSchema.sql" (normalized: "c:\\windows\\microsoft.net\\framework\\v4.0.30319\\sql\\en\\sqlpersistenceproviderschema.sql")) returned 1 [0108.613] CreateFileW (lpFileName="C:\\Windows\\Microsoft.NET\\Framework\\v4.0.30319\\SQL\\en\\SqlPersistenceService_Logic.sql" (normalized: "c:\\windows\\microsoft.net\\framework\\v4.0.30319\\sql\\en\\sqlpersistenceservice_logic.sql"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x178 [0108.613] GetFileType (hFile=0x178) returned 0x1 [0108.613] GetFileType (hFile=0x178) returned 0x1 [0108.613] GetFileSize (in: hFile=0x178, lpFileSizeHigh=0x31e6a0 | out: lpFileSizeHigh=0x31e6a0*=0x0) returned 0x5d5c [0108.613] ReadFile (in: hFile=0x178, lpBuffer=0x268dc1c, nNumberOfBytesToRead=0x5d5c, lpNumberOfBytesRead=0x31e64c, lpOverlapped=0x0 | out: lpBuffer=0x268dc1c*, lpNumberOfBytesRead=0x31e64c*=0x5d5c, lpOverlapped=0x0) returned 1 [0108.627] CreateFileW (lpFileName="C:\\Windows\\Microsoft.NET\\Framework\\v4.0.30319\\SQL\\en\\SqlPersistenceService_Logic.sql" (normalized: "c:\\windows\\microsoft.net\\framework\\v4.0.30319\\sql\\en\\sqlpersistenceservice_logic.sql"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x178 [0108.628] GetFileType (hFile=0x178) returned 0x1 [0108.628] GetFileType (hFile=0x178) returned 0x1 [0108.628] WriteFile (in: hFile=0x178, lpBuffer=0x26f7e3c*, nNumberOfBytesToWrite=0x5d60, lpNumberOfBytesWritten=0x31e640, lpOverlapped=0x0 | out: lpBuffer=0x26f7e3c*, lpNumberOfBytesWritten=0x31e640*=0x5d60, lpOverlapped=0x0) returned 1 [0108.629] MoveFileW (lpExistingFileName="C:\\Windows\\Microsoft.NET\\Framework\\v4.0.30319\\SQL\\en\\SqlPersistenceService_Logic.sql" (normalized: "c:\\windows\\microsoft.net\\framework\\v4.0.30319\\sql\\en\\sqlpersistenceservice_logic.sql"), lpNewFileName="C:\\Windows\\Microsoft.NET\\Framework\\v4.0.30319\\SQL\\en\\SqlPersistenceService_Logic.sql" (normalized: "c:\\windows\\microsoft.net\\framework\\v4.0.30319\\sql\\en\\sqlpersistenceservice_logic.sql")) returned 1 [0108.630] CreateFileW (lpFileName="C:\\Windows\\Microsoft.NET\\Framework\\v4.0.30319\\SQL\\en\\SqlPersistenceService_Schema.sql" (normalized: "c:\\windows\\microsoft.net\\framework\\v4.0.30319\\sql\\en\\sqlpersistenceservice_schema.sql"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x178 [0108.630] GetFileType (hFile=0x178) returned 0x1 [0108.630] GetFileType (hFile=0x178) returned 0x1 [0108.631] GetFileSize (in: hFile=0x178, lpFileSizeHigh=0x31e6a0 | out: lpFileSizeHigh=0x31e6a0*=0x0) returned 0x10c8 [0108.631] ReadFile (in: hFile=0x178, lpBuffer=0x26fdff4, nNumberOfBytesToRead=0x10c8, lpNumberOfBytesRead=0x31e64c, lpOverlapped=0x0 | out: lpBuffer=0x26fdff4*, lpNumberOfBytesRead=0x31e64c*=0x10c8, lpOverlapped=0x0) returned 1 [0108.644] CreateFileW (lpFileName="C:\\Windows\\Microsoft.NET\\Framework\\v4.0.30319\\SQL\\en\\SqlPersistenceService_Schema.sql" (normalized: "c:\\windows\\microsoft.net\\framework\\v4.0.30319\\sql\\en\\sqlpersistenceservice_schema.sql"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x178 [0108.645] GetFileType (hFile=0x178) returned 0x1 [0108.645] GetFileType (hFile=0x178) returned 0x1 [0108.645] WriteFile (in: hFile=0x178, lpBuffer=0x27501e8*, nNumberOfBytesToWrite=0x10d0, lpNumberOfBytesWritten=0x31e640, lpOverlapped=0x0 | out: lpBuffer=0x27501e8*, lpNumberOfBytesWritten=0x31e640*=0x10d0, lpOverlapped=0x0) returned 1 [0108.646] MoveFileW (lpExistingFileName="C:\\Windows\\Microsoft.NET\\Framework\\v4.0.30319\\SQL\\en\\SqlPersistenceService_Schema.sql" (normalized: "c:\\windows\\microsoft.net\\framework\\v4.0.30319\\sql\\en\\sqlpersistenceservice_schema.sql"), lpNewFileName="C:\\Windows\\Microsoft.NET\\Framework\\v4.0.30319\\SQL\\en\\SqlPersistenceService_Schema.sql" (normalized: "c:\\windows\\microsoft.net\\framework\\v4.0.30319\\sql\\en\\sqlpersistenceservice_schema.sql")) returned 1 [0108.646] CreateFileW (lpFileName="C:\\Windows\\Microsoft.NET\\Framework\\v4.0.30319\\SQL\\en\\SqlWorkflowInstanceStoreLogic.sql" (normalized: "c:\\windows\\microsoft.net\\framework\\v4.0.30319\\sql\\en\\sqlworkflowinstancestorelogic.sql"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x178 [0108.647] GetFileType (hFile=0x178) returned 0x1 [0108.647] GetFileType (hFile=0x178) returned 0x1 [0108.647] GetFileSize (in: hFile=0x178, lpFileSizeHigh=0x31e6a0 | out: lpFileSizeHigh=0x31e6a0*=0x0) returned 0xf89e [0108.647] ReadFile (in: hFile=0x178, lpBuffer=0x2751718, nNumberOfBytesToRead=0xf89e, lpNumberOfBytesRead=0x31e64c, lpOverlapped=0x0 | out: lpBuffer=0x2751718*, lpNumberOfBytesRead=0x31e64c*=0xf89e, lpOverlapped=0x0) returned 1 [0108.664] CreateFileW (lpFileName="C:\\Windows\\Microsoft.NET\\Framework\\v4.0.30319\\SQL\\en\\SqlWorkflowInstanceStoreLogic.sql" (normalized: "c:\\windows\\microsoft.net\\framework\\v4.0.30319\\sql\\en\\sqlworkflowinstancestorelogic.sql"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x178 [0108.665] GetFileType (hFile=0x178) returned 0x1 [0108.665] GetFileType (hFile=0x178) returned 0x1 [0108.665] WriteFile (in: hFile=0x178, lpBuffer=0x27ccef4*, nNumberOfBytesToWrite=0xf8a0, lpNumberOfBytesWritten=0x31e640, lpOverlapped=0x0 | out: lpBuffer=0x27ccef4*, lpNumberOfBytesWritten=0x31e640*=0xf8a0, lpOverlapped=0x0) returned 1 [0108.667] MoveFileW (lpExistingFileName="C:\\Windows\\Microsoft.NET\\Framework\\v4.0.30319\\SQL\\en\\SqlWorkflowInstanceStoreLogic.sql" (normalized: "c:\\windows\\microsoft.net\\framework\\v4.0.30319\\sql\\en\\sqlworkflowinstancestorelogic.sql"), lpNewFileName="C:\\Windows\\Microsoft.NET\\Framework\\v4.0.30319\\SQL\\en\\SqlWorkflowInstanceStoreLogic.sql" (normalized: "c:\\windows\\microsoft.net\\framework\\v4.0.30319\\sql\\en\\sqlworkflowinstancestorelogic.sql")) returned 1 [0108.667] CreateFileW (lpFileName="C:\\Windows\\Microsoft.NET\\Framework\\v4.0.30319\\SQL\\en\\SqlWorkflowInstanceStoreSchema.sql" (normalized: "c:\\windows\\microsoft.net\\framework\\v4.0.30319\\sql\\en\\sqlworkflowinstancestoreschema.sql"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x178 [0108.668] GetFileType (hFile=0x178) returned 0x1 [0108.668] GetFileType (hFile=0x178) returned 0x1 [0108.668] GetFileSize (in: hFile=0x178, lpFileSizeHigh=0x31e6a0 | out: lpFileSizeHigh=0x31e6a0*=0x0) returned 0x7088 [0108.668] ReadFile (in: hFile=0x178, lpBuffer=0x27dcc04, nNumberOfBytesToRead=0x7088, lpNumberOfBytesRead=0x31e64c, lpOverlapped=0x0 | out: lpBuffer=0x27dcc04*, lpNumberOfBytesRead=0x31e64c*=0x7088, lpOverlapped=0x0) returned 1 [0108.682] CreateFileW (lpFileName="C:\\Windows\\Microsoft.NET\\Framework\\v4.0.30319\\SQL\\en\\SqlWorkflowInstanceStoreSchema.sql" (normalized: "c:\\windows\\microsoft.net\\framework\\v4.0.30319\\sql\\en\\sqlworkflowinstancestoreschema.sql"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x178 [0108.683] GetFileType (hFile=0x178) returned 0x1 [0108.683] GetFileType (hFile=0x178) returned 0x1 [0108.683] WriteFile (in: hFile=0x178, lpBuffer=0x284ccb8*, nNumberOfBytesToWrite=0x7090, lpNumberOfBytesWritten=0x31e640, lpOverlapped=0x0 | out: lpBuffer=0x284ccb8*, lpNumberOfBytesWritten=0x31e640*=0x7090, lpOverlapped=0x0) returned 1 [0108.684] MoveFileW (lpExistingFileName="C:\\Windows\\Microsoft.NET\\Framework\\v4.0.30319\\SQL\\en\\SqlWorkflowInstanceStoreSchema.sql" (normalized: "c:\\windows\\microsoft.net\\framework\\v4.0.30319\\sql\\en\\sqlworkflowinstancestoreschema.sql"), lpNewFileName="C:\\Windows\\Microsoft.NET\\Framework\\v4.0.30319\\SQL\\en\\SqlWorkflowInstanceStoreSchema.sql" (normalized: "c:\\windows\\microsoft.net\\framework\\v4.0.30319\\sql\\en\\sqlworkflowinstancestoreschema.sql")) returned 1 [0108.685] CreateFileW (lpFileName="C:\\Windows\\Microsoft.NET\\Framework\\v4.0.30319\\SQL\\en\\SqlWorkflowInstanceStoreSchemaUpgrade.sql" (normalized: "c:\\windows\\microsoft.net\\framework\\v4.0.30319\\sql\\en\\sqlworkflowinstancestoreschemaupgrade.sql"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x178 [0108.685] GetFileType (hFile=0x178) returned 0x1 [0108.685] GetFileType (hFile=0x178) returned 0x1 [0108.685] GetFileSize (in: hFile=0x178, lpFileSizeHigh=0x31e6a0 | out: lpFileSizeHigh=0x31e6a0*=0x0) returned 0x137b9 [0108.685] ReadFile (in: hFile=0x178, lpBuffer=0x28541d8, nNumberOfBytesToRead=0x137b9, lpNumberOfBytesRead=0x31e64c, lpOverlapped=0x0 | out: lpBuffer=0x28541d8*, lpNumberOfBytesRead=0x31e64c*=0x137b9, lpOverlapped=0x0) returned 1 [0108.704] CreateFileW (lpFileName="C:\\Windows\\Microsoft.NET\\Framework\\v4.0.30319\\SQL\\en\\SqlWorkflowInstanceStoreSchemaUpgrade.sql" (normalized: "c:\\windows\\microsoft.net\\framework\\v4.0.30319\\sql\\en\\sqlworkflowinstancestoreschemaupgrade.sql"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x178 [0108.705] GetFileType (hFile=0x178) returned 0x1 [0108.705] GetFileType (hFile=0x178) returned 0x1 [0108.705] WriteFile (in: hFile=0x178, lpBuffer=0x26e1648*, nNumberOfBytesToWrite=0x137c0, lpNumberOfBytesWritten=0x31e640, lpOverlapped=0x0 | out: lpBuffer=0x26e1648*, lpNumberOfBytesWritten=0x31e640*=0x137c0, lpOverlapped=0x0) returned 1 [0108.707] MoveFileW (lpExistingFileName="C:\\Windows\\Microsoft.NET\\Framework\\v4.0.30319\\SQL\\en\\SqlWorkflowInstanceStoreSchemaUpgrade.sql" (normalized: "c:\\windows\\microsoft.net\\framework\\v4.0.30319\\sql\\en\\sqlworkflowinstancestoreschemaupgrade.sql"), lpNewFileName="C:\\Windows\\Microsoft.NET\\Framework\\v4.0.30319\\SQL\\en\\SqlWorkflowInstanceStoreSchemaUpgrade.sql" (normalized: "c:\\windows\\microsoft.net\\framework\\v4.0.30319\\sql\\en\\sqlworkflowinstancestoreschemaupgrade.sql")) returned 1 [0108.707] CreateFileW (lpFileName="C:\\Windows\\Microsoft.NET\\Framework\\v4.0.30319\\SQL\\en\\Tracking_Logic.sql" (normalized: "c:\\windows\\microsoft.net\\framework\\v4.0.30319\\sql\\en\\tracking_logic.sql"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x178 [0108.707] GetFileType (hFile=0x178) returned 0x1 [0108.707] GetFileType (hFile=0x178) returned 0x1 [0108.707] GetFileSize (in: hFile=0x178, lpFileSizeHigh=0x31e6a0 | out: lpFileSizeHigh=0x31e6a0*=0x0) returned 0x5d2a4 [0108.708] ReadFile (in: hFile=0x178, lpBuffer=0x11fb3188, nNumberOfBytesToRead=0x5d2a4, lpNumberOfBytesRead=0x31e64c, lpOverlapped=0x0 | out: lpBuffer=0x11fb3188*, lpNumberOfBytesRead=0x31e64c*=0x5d2a4, lpOverlapped=0x0) returned 1 [0108.754] CreateFileW (lpFileName="C:\\Windows\\Microsoft.NET\\Framework\\v4.0.30319\\SQL\\en\\Tracking_Logic.sql" (normalized: "c:\\windows\\microsoft.net\\framework\\v4.0.30319\\sql\\en\\tracking_logic.sql"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x178 [0108.758] GetFileType (hFile=0x178) returned 0x1 [0108.758] GetFileType (hFile=0x178) returned 0x1 [0108.758] WriteFile (in: hFile=0x178, lpBuffer=0x12184f28*, nNumberOfBytesToWrite=0x5d2b0, lpNumberOfBytesWritten=0x31e640, lpOverlapped=0x0 | out: lpBuffer=0x12184f28*, lpNumberOfBytesWritten=0x31e640*=0x5d2b0, lpOverlapped=0x0) returned 1 [0108.764] MoveFileW (lpExistingFileName="C:\\Windows\\Microsoft.NET\\Framework\\v4.0.30319\\SQL\\en\\Tracking_Logic.sql" (normalized: "c:\\windows\\microsoft.net\\framework\\v4.0.30319\\sql\\en\\tracking_logic.sql"), lpNewFileName="C:\\Windows\\Microsoft.NET\\Framework\\v4.0.30319\\SQL\\en\\Tracking_Logic.sql" (normalized: "c:\\windows\\microsoft.net\\framework\\v4.0.30319\\sql\\en\\tracking_logic.sql")) returned 1 [0108.764] CreateFileW (lpFileName="C:\\Windows\\Microsoft.NET\\Framework\\v4.0.30319\\SQL\\en\\Tracking_Schema.sql" (normalized: "c:\\windows\\microsoft.net\\framework\\v4.0.30319\\sql\\en\\tracking_schema.sql"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x178 [0108.764] GetFileType (hFile=0x178) returned 0x1 [0108.764] GetFileType (hFile=0x178) returned 0x1 [0108.764] GetFileSize (in: hFile=0x178, lpFileSizeHigh=0x31e6a0 | out: lpFileSizeHigh=0x31e6a0*=0x0) returned 0xc66e [0108.764] ReadFile (in: hFile=0x178, lpBuffer=0x2742580, nNumberOfBytesToRead=0xc66e, lpNumberOfBytesRead=0x31e64c, lpOverlapped=0x0 | out: lpBuffer=0x2742580*, lpNumberOfBytesRead=0x31e64c*=0xc66e, lpOverlapped=0x0) returned 1 [0108.781] CreateFileW (lpFileName="C:\\Windows\\Microsoft.NET\\Framework\\v4.0.30319\\SQL\\en\\Tracking_Schema.sql" (normalized: "c:\\windows\\microsoft.net\\framework\\v4.0.30319\\sql\\en\\tracking_schema.sql"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x178 [0108.782] GetFileType (hFile=0x178) returned 0x1 [0108.782] GetFileType (hFile=0x178) returned 0x1 [0108.782] WriteFile (in: hFile=0x178, lpBuffer=0x27b46cc*, nNumberOfBytesToWrite=0xc670, lpNumberOfBytesWritten=0x31e640, lpOverlapped=0x0 | out: lpBuffer=0x27b46cc*, lpNumberOfBytesWritten=0x31e640*=0xc670, lpOverlapped=0x0) returned 1 [0108.786] MoveFileW (lpExistingFileName="C:\\Windows\\Microsoft.NET\\Framework\\v4.0.30319\\SQL\\en\\Tracking_Schema.sql" (normalized: "c:\\windows\\microsoft.net\\framework\\v4.0.30319\\sql\\en\\tracking_schema.sql"), lpNewFileName="C:\\Windows\\Microsoft.NET\\Framework\\v4.0.30319\\SQL\\en\\Tracking_Schema.sql" (normalized: "c:\\windows\\microsoft.net\\framework\\v4.0.30319\\sql\\en\\tracking_schema.sql")) returned 1 [0108.806] CreateFileW (lpFileName="C:\\Windows\\Microsoft.NET\\Framework64\\v2.0.50727\\InstallCommon.sql" (normalized: "c:\\windows\\microsoft.net\\framework64\\v2.0.50727\\installcommon.sql"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x178 [0108.807] GetFileType (hFile=0x178) returned 0x1 [0108.807] GetFileType (hFile=0x178) returned 0x1 [0108.807] GetFileSize (in: hFile=0x178, lpFileSizeHigh=0x31e790 | out: lpFileSizeHigh=0x31e790*=0x0) returned 0x601b [0108.807] ReadFile (in: hFile=0x178, lpBuffer=0x27f88b8, nNumberOfBytesToRead=0x601b, lpNumberOfBytesRead=0x31e73c, lpOverlapped=0x0 | out: lpBuffer=0x27f88b8*, lpNumberOfBytesRead=0x31e73c*=0x601b, lpOverlapped=0x0) returned 1 [0108.822] CreateFileW (lpFileName="C:\\Windows\\Microsoft.NET\\Framework64\\v2.0.50727\\InstallCommon.sql" (normalized: "c:\\windows\\microsoft.net\\framework64\\v2.0.50727\\installcommon.sql"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x178 [0108.823] GetFileType (hFile=0x178) returned 0x1 [0108.823] GetFileType (hFile=0x178) returned 0x1 [0108.823] WriteFile (in: hFile=0x178, lpBuffer=0x2863740*, nNumberOfBytesToWrite=0x6020, lpNumberOfBytesWritten=0x31e730, lpOverlapped=0x0 | out: lpBuffer=0x2863740*, lpNumberOfBytesWritten=0x31e730*=0x6020, lpOverlapped=0x0) returned 1 [0108.824] MoveFileW (lpExistingFileName="C:\\Windows\\Microsoft.NET\\Framework64\\v2.0.50727\\InstallCommon.sql" (normalized: "c:\\windows\\microsoft.net\\framework64\\v2.0.50727\\installcommon.sql"), lpNewFileName="C:\\Windows\\Microsoft.NET\\Framework64\\v2.0.50727\\InstallCommon.sql" (normalized: "c:\\windows\\microsoft.net\\framework64\\v2.0.50727\\installcommon.sql")) returned 1 [0108.825] CreateFileW (lpFileName="C:\\Windows\\Microsoft.NET\\Framework64\\v2.0.50727\\InstallMembership.sql" (normalized: "c:\\windows\\microsoft.net\\framework64\\v2.0.50727\\installmembership.sql"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x178 [0108.825] GetFileType (hFile=0x178) returned 0x1 [0108.825] GetFileType (hFile=0x178) returned 0x1 [0108.825] GetFileSize (in: hFile=0x178, lpFileSizeHigh=0x31e790 | out: lpFileSizeHigh=0x31e790*=0x0) returned 0xdb09 [0108.825] ReadFile (in: hFile=0x178, lpBuffer=0x2869aec, nNumberOfBytesToRead=0xdb09, lpNumberOfBytesRead=0x31e73c, lpOverlapped=0x0 | out: lpBuffer=0x2869aec*, lpNumberOfBytesRead=0x31e73c*=0xdb09, lpOverlapped=0x0) returned 1 [0108.851] CreateFileW (lpFileName="C:\\Windows\\Microsoft.NET\\Framework64\\v2.0.50727\\InstallMembership.sql" (normalized: "c:\\windows\\microsoft.net\\framework64\\v2.0.50727\\installmembership.sql"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x178 [0108.852] GetFileType (hFile=0x178) returned 0x1 [0108.852] GetFileType (hFile=0x178) returned 0x1 [0108.852] WriteFile (in: hFile=0x178, lpBuffer=0x28dfa18*, nNumberOfBytesToWrite=0xdb10, lpNumberOfBytesWritten=0x31e730, lpOverlapped=0x0 | out: lpBuffer=0x28dfa18*, lpNumberOfBytesWritten=0x31e730*=0xdb10, lpOverlapped=0x0) returned 1 [0108.854] MoveFileW (lpExistingFileName="C:\\Windows\\Microsoft.NET\\Framework64\\v2.0.50727\\InstallMembership.sql" (normalized: "c:\\windows\\microsoft.net\\framework64\\v2.0.50727\\installmembership.sql"), lpNewFileName="C:\\Windows\\Microsoft.NET\\Framework64\\v2.0.50727\\InstallMembership.sql" (normalized: "c:\\windows\\microsoft.net\\framework64\\v2.0.50727\\installmembership.sql")) returned 1 [0108.854] CreateFileW (lpFileName="C:\\Windows\\Microsoft.NET\\Framework64\\v2.0.50727\\InstallPersistSqlState.sql" (normalized: "c:\\windows\\microsoft.net\\framework64\\v2.0.50727\\installpersistsqlstate.sql"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x178 [0108.855] GetFileType (hFile=0x178) returned 0x1 [0108.855] GetFileType (hFile=0x178) returned 0x1 [0108.855] GetFileSize (in: hFile=0x178, lpFileSizeHigh=0x31e790 | out: lpFileSizeHigh=0x31e790*=0x0) returned 0xcc7b [0108.861] ReadFile (in: hFile=0x178, lpBuffer=0x28ed8ec, nNumberOfBytesToRead=0xcc7b, lpNumberOfBytesRead=0x31e73c, lpOverlapped=0x0 | out: lpBuffer=0x28ed8ec*, lpNumberOfBytesRead=0x31e73c*=0xcc7b, lpOverlapped=0x0) returned 1 [0108.913] CreateFileW (lpFileName="C:\\Windows\\Microsoft.NET\\Framework64\\v2.0.50727\\InstallPersistSqlState.sql" (normalized: "c:\\windows\\microsoft.net\\framework64\\v2.0.50727\\installpersistsqlstate.sql"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x178 [0108.914] GetFileType (hFile=0x178) returned 0x1 [0108.914] GetFileType (hFile=0x178) returned 0x1 [0108.914] WriteFile (in: hFile=0x178, lpBuffer=0x269d6fc*, nNumberOfBytesToWrite=0xcc80, lpNumberOfBytesWritten=0x31e730, lpOverlapped=0x0 | out: lpBuffer=0x269d6fc*, lpNumberOfBytesWritten=0x31e730*=0xcc80, lpOverlapped=0x0) returned 1 [0108.915] MoveFileW (lpExistingFileName="C:\\Windows\\Microsoft.NET\\Framework64\\v2.0.50727\\InstallPersistSqlState.sql" (normalized: "c:\\windows\\microsoft.net\\framework64\\v2.0.50727\\installpersistsqlstate.sql"), lpNewFileName="C:\\Windows\\Microsoft.NET\\Framework64\\v2.0.50727\\InstallPersistSqlState.sql" (normalized: "c:\\windows\\microsoft.net\\framework64\\v2.0.50727\\installpersistsqlstate.sql")) returned 1 [0108.916] CreateFileW (lpFileName="C:\\Windows\\Microsoft.NET\\Framework64\\v2.0.50727\\InstallPersonalization.sql" (normalized: "c:\\windows\\microsoft.net\\framework64\\v2.0.50727\\installpersonalization.sql"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x178 [0108.916] GetFileType (hFile=0x178) returned 0x1 [0108.916] GetFileType (hFile=0x178) returned 0x1 [0108.916] GetFileSize (in: hFile=0x178, lpFileSizeHigh=0x31e790 | out: lpFileSizeHigh=0x31e790*=0x0) returned 0x8886 [0108.916] ReadFile (in: hFile=0x178, lpBuffer=0x26aa770, nNumberOfBytesToRead=0x8886, lpNumberOfBytesRead=0x31e73c, lpOverlapped=0x0 | out: lpBuffer=0x26aa770*, lpNumberOfBytesRead=0x31e73c*=0x8886, lpOverlapped=0x0) returned 1 [0108.938] CreateFileW (lpFileName="C:\\Windows\\Microsoft.NET\\Framework64\\v2.0.50727\\InstallPersonalization.sql" (normalized: "c:\\windows\\microsoft.net\\framework64\\v2.0.50727\\installpersonalization.sql"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x178 [0108.939] GetFileType (hFile=0x178) returned 0x1 [0108.939] GetFileType (hFile=0x178) returned 0x1 [0108.939] WriteFile (in: hFile=0x178, lpBuffer=0x2722184*, nNumberOfBytesToWrite=0x8890, lpNumberOfBytesWritten=0x31e730, lpOverlapped=0x0 | out: lpBuffer=0x2722184*, lpNumberOfBytesWritten=0x31e730*=0x8890, lpOverlapped=0x0) returned 1 [0108.940] MoveFileW (lpExistingFileName="C:\\Windows\\Microsoft.NET\\Framework64\\v2.0.50727\\InstallPersonalization.sql" (normalized: "c:\\windows\\microsoft.net\\framework64\\v2.0.50727\\installpersonalization.sql"), lpNewFileName="C:\\Windows\\Microsoft.NET\\Framework64\\v2.0.50727\\InstallPersonalization.sql" (normalized: "c:\\windows\\microsoft.net\\framework64\\v2.0.50727\\installpersonalization.sql")) returned 1 [0108.941] CreateFileW (lpFileName="C:\\Windows\\Microsoft.NET\\Framework64\\v2.0.50727\\InstallRoles.sql" (normalized: "c:\\windows\\microsoft.net\\framework64\\v2.0.50727\\installroles.sql"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x178 [0108.941] GetFileType (hFile=0x178) returned 0x1 [0108.941] GetFileType (hFile=0x178) returned 0x1 [0108.941] GetFileSize (in: hFile=0x178, lpFileSizeHigh=0x31e790 | out: lpFileSizeHigh=0x31e790*=0x0) returned 0x85d8 [0108.941] ReadFile (in: hFile=0x178, lpBuffer=0x272adf8, nNumberOfBytesToRead=0x85d8, lpNumberOfBytesRead=0x31e73c, lpOverlapped=0x0 | out: lpBuffer=0x272adf8*, lpNumberOfBytesRead=0x31e73c*=0x85d8, lpOverlapped=0x0) returned 1 [0108.957] CreateFileW (lpFileName="C:\\Windows\\Microsoft.NET\\Framework64\\v2.0.50727\\InstallRoles.sql" (normalized: "c:\\windows\\microsoft.net\\framework64\\v2.0.50727\\installroles.sql"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x178 [0108.958] GetFileType (hFile=0x178) returned 0x1 [0108.958] GetFileType (hFile=0x178) returned 0x1 [0108.958] WriteFile (in: hFile=0x178, lpBuffer=0x27a193c*, nNumberOfBytesToWrite=0x85e0, lpNumberOfBytesWritten=0x31e730, lpOverlapped=0x0 | out: lpBuffer=0x27a193c*, lpNumberOfBytesWritten=0x31e730*=0x85e0, lpOverlapped=0x0) returned 1 [0108.959] MoveFileW (lpExistingFileName="C:\\Windows\\Microsoft.NET\\Framework64\\v2.0.50727\\InstallRoles.sql" (normalized: "c:\\windows\\microsoft.net\\framework64\\v2.0.50727\\installroles.sql"), lpNewFileName="C:\\Windows\\Microsoft.NET\\Framework64\\v2.0.50727\\InstallRoles.sql" (normalized: "c:\\windows\\microsoft.net\\framework64\\v2.0.50727\\installroles.sql")) returned 1 [0108.959] CreateFileW (lpFileName="C:\\Windows\\Microsoft.NET\\Framework64\\v2.0.50727\\InstallSqlState.sql" (normalized: "c:\\windows\\microsoft.net\\framework64\\v2.0.50727\\installsqlstate.sql"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x178 [0108.960] GetFileType (hFile=0x178) returned 0x1 [0108.960] GetFileType (hFile=0x178) returned 0x1 [0108.960] GetFileSize (in: hFile=0x178, lpFileSizeHigh=0x31e790 | out: lpFileSizeHigh=0x31e790*=0x0) returned 0xcba3 [0108.960] ReadFile (in: hFile=0x178, lpBuffer=0x27aa2a0, nNumberOfBytesToRead=0xcba3, lpNumberOfBytesRead=0x31e73c, lpOverlapped=0x0 | out: lpBuffer=0x27aa2a0*, lpNumberOfBytesRead=0x31e73c*=0xcba3, lpOverlapped=0x0) returned 1 [0108.980] CreateFileW (lpFileName="C:\\Windows\\Microsoft.NET\\Framework64\\v2.0.50727\\InstallSqlState.sql" (normalized: "c:\\windows\\microsoft.net\\framework64\\v2.0.50727\\installsqlstate.sql"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x178 [0108.981] GetFileType (hFile=0x178) returned 0x1 [0108.981] GetFileType (hFile=0x178) returned 0x1 [0108.981] WriteFile (in: hFile=0x178, lpBuffer=0x281d3ac*, nNumberOfBytesToWrite=0xcbb0, lpNumberOfBytesWritten=0x31e730, lpOverlapped=0x0 | out: lpBuffer=0x281d3ac*, lpNumberOfBytesWritten=0x31e730*=0xcbb0, lpOverlapped=0x0) returned 1 [0108.982] MoveFileW (lpExistingFileName="C:\\Windows\\Microsoft.NET\\Framework64\\v2.0.50727\\InstallSqlState.sql" (normalized: "c:\\windows\\microsoft.net\\framework64\\v2.0.50727\\installsqlstate.sql"), lpNewFileName="C:\\Windows\\Microsoft.NET\\Framework64\\v2.0.50727\\InstallSqlState.sql" (normalized: "c:\\windows\\microsoft.net\\framework64\\v2.0.50727\\installsqlstate.sql")) returned 1 [0108.983] CreateFileW (lpFileName="C:\\Windows\\Microsoft.NET\\Framework64\\v2.0.50727\\InstallSqlStateTemplate.sql" (normalized: "c:\\windows\\microsoft.net\\framework64\\v2.0.50727\\installsqlstatetemplate.sql"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x178 [0108.983] GetFileType (hFile=0x178) returned 0x1 [0108.983] GetFileType (hFile=0x178) returned 0x1 [0108.983] GetFileSize (in: hFile=0x178, lpFileSizeHigh=0x31e790 | out: lpFileSizeHigh=0x31e790*=0x0) returned 0xd28f [0108.983] ReadFile (in: hFile=0x178, lpBuffer=0x282a310, nNumberOfBytesToRead=0xd28f, lpNumberOfBytesRead=0x31e73c, lpOverlapped=0x0 | out: lpBuffer=0x282a310*, lpNumberOfBytesRead=0x31e73c*=0xd28f, lpOverlapped=0x0) returned 1 [0109.001] CreateFileW (lpFileName="C:\\Windows\\Microsoft.NET\\Framework64\\v2.0.50727\\InstallSqlStateTemplate.sql" (normalized: "c:\\windows\\microsoft.net\\framework64\\v2.0.50727\\installsqlstatetemplate.sql"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x178 [0109.002] GetFileType (hFile=0x178) returned 0x1 [0109.002] GetFileType (hFile=0x178) returned 0x1 [0109.002] WriteFile (in: hFile=0x178, lpBuffer=0x265b030*, nNumberOfBytesToWrite=0xd290, lpNumberOfBytesWritten=0x31e730, lpOverlapped=0x0 | out: lpBuffer=0x265b030*, lpNumberOfBytesWritten=0x31e730*=0xd290, lpOverlapped=0x0) returned 1 [0109.004] MoveFileW (lpExistingFileName="C:\\Windows\\Microsoft.NET\\Framework64\\v2.0.50727\\InstallSqlStateTemplate.sql" (normalized: "c:\\windows\\microsoft.net\\framework64\\v2.0.50727\\installsqlstatetemplate.sql"), lpNewFileName="C:\\Windows\\Microsoft.NET\\Framework64\\v2.0.50727\\InstallSqlStateTemplate.sql" (normalized: "c:\\windows\\microsoft.net\\framework64\\v2.0.50727\\installsqlstatetemplate.sql")) returned 1 [0109.004] CreateFileW (lpFileName="C:\\Windows\\Microsoft.NET\\Framework64\\v2.0.50727\\InstallWebEventSqlProvider.sql" (normalized: "c:\\windows\\microsoft.net\\framework64\\v2.0.50727\\installwebeventsqlprovider.sql"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x178 [0109.005] GetFileType (hFile=0x178) returned 0x1 [0109.005] GetFileType (hFile=0x178) returned 0x1 [0109.005] GetFileSize (in: hFile=0x178, lpFileSizeHigh=0x31e790 | out: lpFileSizeHigh=0x31e790*=0x0) returned 0x1939 [0109.005] ReadFile (in: hFile=0x178, lpBuffer=0x26686f4, nNumberOfBytesToRead=0x1939, lpNumberOfBytesRead=0x31e73c, lpOverlapped=0x0 | out: lpBuffer=0x26686f4*, lpNumberOfBytesRead=0x31e73c*=0x1939, lpOverlapped=0x0) returned 1 [0109.019] CreateFileW (lpFileName="C:\\Windows\\Microsoft.NET\\Framework64\\v2.0.50727\\InstallWebEventSqlProvider.sql" (normalized: "c:\\windows\\microsoft.net\\framework64\\v2.0.50727\\installwebeventsqlprovider.sql"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x178 [0109.020] GetFileType (hFile=0x178) returned 0x1 [0109.020] GetFileType (hFile=0x178) returned 0x1 [0109.020] WriteFile (in: hFile=0x178, lpBuffer=0x26bd478*, nNumberOfBytesToWrite=0x1940, lpNumberOfBytesWritten=0x31e730, lpOverlapped=0x0 | out: lpBuffer=0x26bd478*, lpNumberOfBytesWritten=0x31e730*=0x1940, lpOverlapped=0x0) returned 1 [0109.021] MoveFileW (lpExistingFileName="C:\\Windows\\Microsoft.NET\\Framework64\\v2.0.50727\\InstallWebEventSqlProvider.sql" (normalized: "c:\\windows\\microsoft.net\\framework64\\v2.0.50727\\installwebeventsqlprovider.sql"), lpNewFileName="C:\\Windows\\Microsoft.NET\\Framework64\\v2.0.50727\\InstallWebEventSqlProvider.sql" (normalized: "c:\\windows\\microsoft.net\\framework64\\v2.0.50727\\installwebeventsqlprovider.sql")) returned 1 [0109.022] CreateFileW (lpFileName="C:\\Windows\\Microsoft.NET\\Framework64\\v2.0.50727\\UninstallCommon.sql" (normalized: "c:\\windows\\microsoft.net\\framework64\\v2.0.50727\\uninstallcommon.sql"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x178 [0109.022] GetFileType (hFile=0x178) returned 0x1 [0109.022] GetFileType (hFile=0x178) returned 0x1 [0109.022] GetFileSize (in: hFile=0x178, lpFileSizeHigh=0x31e790 | out: lpFileSizeHigh=0x31e790*=0x0) returned 0xf32 [0109.022] ReadFile (in: hFile=0x178, lpBuffer=0x26c0a98, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x31e73c, lpOverlapped=0x0 | out: lpBuffer=0x26c0a98*, lpNumberOfBytesRead=0x31e73c*=0xf32, lpOverlapped=0x0) returned 1 [0109.036] CreateFileW (lpFileName="C:\\Windows\\Microsoft.NET\\Framework64\\v2.0.50727\\UninstallCommon.sql" (normalized: "c:\\windows\\microsoft.net\\framework64\\v2.0.50727\\uninstallcommon.sql"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x178 [0109.037] GetFileType (hFile=0x178) returned 0x1 [0109.037] GetFileType (hFile=0x178) returned 0x1 [0109.037] WriteFile (in: hFile=0x178, lpBuffer=0x27135fc*, nNumberOfBytesToWrite=0xf40, lpNumberOfBytesWritten=0x31e704, lpOverlapped=0x0 | out: lpBuffer=0x27135fc*, lpNumberOfBytesWritten=0x31e704*=0xf40, lpOverlapped=0x0) returned 1 [0109.037] MoveFileW (lpExistingFileName="C:\\Windows\\Microsoft.NET\\Framework64\\v2.0.50727\\UninstallCommon.sql" (normalized: "c:\\windows\\microsoft.net\\framework64\\v2.0.50727\\uninstallcommon.sql"), lpNewFileName="C:\\Windows\\Microsoft.NET\\Framework64\\v2.0.50727\\UninstallCommon.sql" (normalized: "c:\\windows\\microsoft.net\\framework64\\v2.0.50727\\uninstallcommon.sql")) returned 1 [0109.038] CreateFileW (lpFileName="C:\\Windows\\Microsoft.NET\\Framework64\\v2.0.50727\\UninstallMembership.sql" (normalized: "c:\\windows\\microsoft.net\\framework64\\v2.0.50727\\uninstallmembership.sql"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x178 [0109.038] GetFileType (hFile=0x178) returned 0x1 [0109.038] GetFileType (hFile=0x178) returned 0x1 [0109.038] GetFileSize (in: hFile=0x178, lpFileSizeHigh=0x31e790 | out: lpFileSizeHigh=0x31e790*=0x0) returned 0x1afd [0109.038] ReadFile (in: hFile=0x178, lpBuffer=0x271487c, nNumberOfBytesToRead=0x1afd, lpNumberOfBytesRead=0x31e73c, lpOverlapped=0x0 | out: lpBuffer=0x271487c*, lpNumberOfBytesRead=0x31e73c*=0x1afd, lpOverlapped=0x0) returned 1 [0109.053] CreateFileW (lpFileName="C:\\Windows\\Microsoft.NET\\Framework64\\v2.0.50727\\UninstallMembership.sql" (normalized: "c:\\windows\\microsoft.net\\framework64\\v2.0.50727\\uninstallmembership.sql"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x178 [0109.053] GetFileType (hFile=0x178) returned 0x1 [0109.053] GetFileType (hFile=0x178) returned 0x1 [0109.053] WriteFile (in: hFile=0x178, lpBuffer=0x2769d64*, nNumberOfBytesToWrite=0x1b00, lpNumberOfBytesWritten=0x31e730, lpOverlapped=0x0 | out: lpBuffer=0x2769d64*, lpNumberOfBytesWritten=0x31e730*=0x1b00, lpOverlapped=0x0) returned 1 [0109.054] MoveFileW (lpExistingFileName="C:\\Windows\\Microsoft.NET\\Framework64\\v2.0.50727\\UninstallMembership.sql" (normalized: "c:\\windows\\microsoft.net\\framework64\\v2.0.50727\\uninstallmembership.sql"), lpNewFileName="C:\\Windows\\Microsoft.NET\\Framework64\\v2.0.50727\\UninstallMembership.sql" (normalized: "c:\\windows\\microsoft.net\\framework64\\v2.0.50727\\uninstallmembership.sql")) returned 1 [0109.055] CreateFileW (lpFileName="C:\\Windows\\Microsoft.NET\\Framework64\\v2.0.50727\\UninstallPersistSqlState.sql" (normalized: "c:\\windows\\microsoft.net\\framework64\\v2.0.50727\\uninstallpersistsqlstate.sql"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x178 [0109.055] GetFileType (hFile=0x178) returned 0x1 [0109.055] GetFileType (hFile=0x178) returned 0x1 [0109.055] GetFileSize (in: hFile=0x178, lpFileSizeHigh=0x31e790 | out: lpFileSizeHigh=0x31e790*=0x0) returned 0x27d3 [0109.055] ReadFile (in: hFile=0x178, lpBuffer=0x276bc40, nNumberOfBytesToRead=0x27d3, lpNumberOfBytesRead=0x31e73c, lpOverlapped=0x0 | out: lpBuffer=0x276bc40*, lpNumberOfBytesRead=0x31e73c*=0x27d3, lpOverlapped=0x0) returned 1 [0109.070] CreateFileW (lpFileName="C:\\Windows\\Microsoft.NET\\Framework64\\v2.0.50727\\UninstallPersistSqlState.sql" (normalized: "c:\\windows\\microsoft.net\\framework64\\v2.0.50727\\uninstallpersistsqlstate.sql"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x178 [0109.070] GetFileType (hFile=0x178) returned 0x1 [0109.071] GetFileType (hFile=0x178) returned 0x1 [0109.071] WriteFile (in: hFile=0x178, lpBuffer=0x27c5188*, nNumberOfBytesToWrite=0x27e0, lpNumberOfBytesWritten=0x31e730, lpOverlapped=0x0 | out: lpBuffer=0x27c5188*, lpNumberOfBytesWritten=0x31e730*=0x27e0, lpOverlapped=0x0) returned 1 [0109.071] MoveFileW (lpExistingFileName="C:\\Windows\\Microsoft.NET\\Framework64\\v2.0.50727\\UninstallPersistSqlState.sql" (normalized: "c:\\windows\\microsoft.net\\framework64\\v2.0.50727\\uninstallpersistsqlstate.sql"), lpNewFileName="C:\\Windows\\Microsoft.NET\\Framework64\\v2.0.50727\\UninstallPersistSqlState.sql" (normalized: "c:\\windows\\microsoft.net\\framework64\\v2.0.50727\\uninstallpersistsqlstate.sql")) returned 1 [0109.072] CreateFileW (lpFileName="C:\\Windows\\Microsoft.NET\\Framework64\\v2.0.50727\\UninstallPersonalization.sql" (normalized: "c:\\windows\\microsoft.net\\framework64\\v2.0.50727\\uninstallpersonalization.sql"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x178 [0109.072] GetFileType (hFile=0x178) returned 0x1 [0109.072] GetFileType (hFile=0x178) returned 0x1 [0109.072] GetFileSize (in: hFile=0x178, lpFileSizeHigh=0x31e790 | out: lpFileSizeHigh=0x31e790*=0x0) returned 0x1d41 [0109.072] ReadFile (in: hFile=0x178, lpBuffer=0x27c7d74, nNumberOfBytesToRead=0x1d41, lpNumberOfBytesRead=0x31e73c, lpOverlapped=0x0 | out: lpBuffer=0x27c7d74*, lpNumberOfBytesRead=0x31e73c*=0x1d41, lpOverlapped=0x0) returned 1 [0109.087] CreateFileW (lpFileName="C:\\Windows\\Microsoft.NET\\Framework64\\v2.0.50727\\UninstallPersonalization.sql" (normalized: "c:\\windows\\microsoft.net\\framework64\\v2.0.50727\\uninstallpersonalization.sql"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x178 [0109.087] GetFileType (hFile=0x178) returned 0x1 [0109.087] GetFileType (hFile=0x178) returned 0x1 [0109.088] WriteFile (in: hFile=0x178, lpBuffer=0x281ddec*, nNumberOfBytesToWrite=0x1d50, lpNumberOfBytesWritten=0x31e730, lpOverlapped=0x0 | out: lpBuffer=0x281ddec*, lpNumberOfBytesWritten=0x31e730*=0x1d50, lpOverlapped=0x0) returned 1 [0109.088] MoveFileW (lpExistingFileName="C:\\Windows\\Microsoft.NET\\Framework64\\v2.0.50727\\UninstallPersonalization.sql" (normalized: "c:\\windows\\microsoft.net\\framework64\\v2.0.50727\\uninstallpersonalization.sql"), lpNewFileName="C:\\Windows\\Microsoft.NET\\Framework64\\v2.0.50727\\UninstallPersonalization.sql" (normalized: "c:\\windows\\microsoft.net\\framework64\\v2.0.50727\\uninstallpersonalization.sql")) returned 1 [0109.089] CreateFileW (lpFileName="C:\\Windows\\Microsoft.NET\\Framework64\\v2.0.50727\\UninstallRoles.sql" (normalized: "c:\\windows\\microsoft.net\\framework64\\v2.0.50727\\uninstallroles.sql"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x178 [0109.089] GetFileType (hFile=0x178) returned 0x1 [0109.089] GetFileType (hFile=0x178) returned 0x1 [0109.089] GetFileSize (in: hFile=0x178, lpFileSizeHigh=0x31e790 | out: lpFileSizeHigh=0x31e790*=0x0) returned 0x16ed [0109.089] ReadFile (in: hFile=0x178, lpBuffer=0x281ff38, nNumberOfBytesToRead=0x16ed, lpNumberOfBytesRead=0x31e73c, lpOverlapped=0x0 | out: lpBuffer=0x281ff38*, lpNumberOfBytesRead=0x31e73c*=0x16ed, lpOverlapped=0x0) returned 1 [0109.105] CreateFileW (lpFileName="C:\\Windows\\Microsoft.NET\\Framework64\\v2.0.50727\\UninstallRoles.sql" (normalized: "c:\\windows\\microsoft.net\\framework64\\v2.0.50727\\uninstallroles.sql"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x178 [0109.106] GetFileType (hFile=0x178) returned 0x1 [0109.106] GetFileType (hFile=0x178) returned 0x1 [0109.106] WriteFile (in: hFile=0x178, lpBuffer=0x2675af0*, nNumberOfBytesToWrite=0x16f0, lpNumberOfBytesWritten=0x31e730, lpOverlapped=0x0 | out: lpBuffer=0x2675af0*, lpNumberOfBytesWritten=0x31e730*=0x16f0, lpOverlapped=0x0) returned 1 [0109.107] MoveFileW (lpExistingFileName="C:\\Windows\\Microsoft.NET\\Framework64\\v2.0.50727\\UninstallRoles.sql" (normalized: "c:\\windows\\microsoft.net\\framework64\\v2.0.50727\\uninstallroles.sql"), lpNewFileName="C:\\Windows\\Microsoft.NET\\Framework64\\v2.0.50727\\UninstallRoles.sql" (normalized: "c:\\windows\\microsoft.net\\framework64\\v2.0.50727\\uninstallroles.sql")) returned 1 [0109.107] CreateFileW (lpFileName="C:\\Windows\\Microsoft.NET\\Framework64\\v2.0.50727\\UninstallSqlState.sql" (normalized: "c:\\windows\\microsoft.net\\framework64\\v2.0.50727\\uninstallsqlstate.sql"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x178 [0109.108] GetFileType (hFile=0x178) returned 0x1 [0109.108] GetFileType (hFile=0x178) returned 0x1 [0109.108] GetFileSize (in: hFile=0x178, lpFileSizeHigh=0x31e790 | out: lpFileSizeHigh=0x31e790*=0x0) returned 0x25db [0109.108] ReadFile (in: hFile=0x178, lpBuffer=0x267757c, nNumberOfBytesToRead=0x25db, lpNumberOfBytesRead=0x31e73c, lpOverlapped=0x0 | out: lpBuffer=0x267757c*, lpNumberOfBytesRead=0x31e73c*=0x25db, lpOverlapped=0x0) returned 1 [0109.122] CreateFileW (lpFileName="C:\\Windows\\Microsoft.NET\\Framework64\\v2.0.50727\\UninstallSqlState.sql" (normalized: "c:\\windows\\microsoft.net\\framework64\\v2.0.50727\\uninstallsqlstate.sql"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x178 [0109.123] GetFileType (hFile=0x178) returned 0x1 [0109.123] GetFileType (hFile=0x178) returned 0x1 [0109.123] WriteFile (in: hFile=0x178, lpBuffer=0x26d0220*, nNumberOfBytesToWrite=0x25e0, lpNumberOfBytesWritten=0x31e730, lpOverlapped=0x0 | out: lpBuffer=0x26d0220*, lpNumberOfBytesWritten=0x31e730*=0x25e0, lpOverlapped=0x0) returned 1 [0109.124] MoveFileW (lpExistingFileName="C:\\Windows\\Microsoft.NET\\Framework64\\v2.0.50727\\UninstallSqlState.sql" (normalized: "c:\\windows\\microsoft.net\\framework64\\v2.0.50727\\uninstallsqlstate.sql"), lpNewFileName="C:\\Windows\\Microsoft.NET\\Framework64\\v2.0.50727\\UninstallSqlState.sql" (normalized: "c:\\windows\\microsoft.net\\framework64\\v2.0.50727\\uninstallsqlstate.sql")) returned 1 [0109.124] CreateFileW (lpFileName="C:\\Windows\\Microsoft.NET\\Framework64\\v2.0.50727\\UninstallSqlStateTemplate.sql" (normalized: "c:\\windows\\microsoft.net\\framework64\\v2.0.50727\\uninstallsqlstatetemplate.sql"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x178 [0109.125] GetFileType (hFile=0x178) returned 0x1 [0109.125] GetFileType (hFile=0x178) returned 0x1 [0109.125] GetFileSize (in: hFile=0x178, lpFileSizeHigh=0x31e790 | out: lpFileSizeHigh=0x31e790*=0x0) returned 0x2e15 [0109.125] ReadFile (in: hFile=0x178, lpBuffer=0x26d2bcc, nNumberOfBytesToRead=0x2e15, lpNumberOfBytesRead=0x31e73c, lpOverlapped=0x0 | out: lpBuffer=0x26d2bcc*, lpNumberOfBytesRead=0x31e73c*=0x2e15, lpOverlapped=0x0) returned 1 [0109.139] CreateFileW (lpFileName="C:\\Windows\\Microsoft.NET\\Framework64\\v2.0.50727\\UninstallSqlStateTemplate.sql" (normalized: "c:\\windows\\microsoft.net\\framework64\\v2.0.50727\\uninstallsqlstatetemplate.sql"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x178 [0109.140] GetFileType (hFile=0x178) returned 0x1 [0109.140] GetFileType (hFile=0x178) returned 0x1 [0109.140] WriteFile (in: hFile=0x178, lpBuffer=0x272e054*, nNumberOfBytesToWrite=0x2e20, lpNumberOfBytesWritten=0x31e730, lpOverlapped=0x0 | out: lpBuffer=0x272e054*, lpNumberOfBytesWritten=0x31e730*=0x2e20, lpOverlapped=0x0) returned 1 [0109.141] MoveFileW (lpExistingFileName="C:\\Windows\\Microsoft.NET\\Framework64\\v2.0.50727\\UninstallSqlStateTemplate.sql" (normalized: "c:\\windows\\microsoft.net\\framework64\\v2.0.50727\\uninstallsqlstatetemplate.sql"), lpNewFileName="C:\\Windows\\Microsoft.NET\\Framework64\\v2.0.50727\\UninstallSqlStateTemplate.sql" (normalized: "c:\\windows\\microsoft.net\\framework64\\v2.0.50727\\uninstallsqlstatetemplate.sql")) returned 1 [0109.141] CreateFileW (lpFileName="C:\\Windows\\Microsoft.NET\\Framework64\\v2.0.50727\\UninstallWebEventSqlProvider.sql" (normalized: "c:\\windows\\microsoft.net\\framework64\\v2.0.50727\\uninstallwebeventsqlprovider.sql"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x178 [0109.141] GetFileType (hFile=0x178) returned 0x1 [0109.141] GetFileType (hFile=0x178) returned 0x1 [0109.141] GetFileSize (in: hFile=0x178, lpFileSizeHigh=0x31e790 | out: lpFileSizeHigh=0x31e790*=0x0) returned 0xbbe [0109.142] ReadFile (in: hFile=0x178, lpBuffer=0x2731e5c, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x31e73c, lpOverlapped=0x0 | out: lpBuffer=0x2731e5c*, lpNumberOfBytesRead=0x31e73c*=0xbbe, lpOverlapped=0x0) returned 1 [0109.155] CreateFileW (lpFileName="C:\\Windows\\Microsoft.NET\\Framework64\\v2.0.50727\\UninstallWebEventSqlProvider.sql" (normalized: "c:\\windows\\microsoft.net\\framework64\\v2.0.50727\\uninstallwebeventsqlprovider.sql"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x178 [0109.156] GetFileType (hFile=0x178) returned 0x1 [0109.156] GetFileType (hFile=0x178) returned 0x1 [0109.157] MoveFileW (lpExistingFileName="C:\\Windows\\Microsoft.NET\\Framework64\\v2.0.50727\\UninstallWebEventSqlProvider.sql" (normalized: "c:\\windows\\microsoft.net\\framework64\\v2.0.50727\\uninstallwebeventsqlprovider.sql"), lpNewFileName="C:\\Windows\\Microsoft.NET\\Framework64\\v2.0.50727\\UninstallWebEventSqlProvider.sql" (normalized: "c:\\windows\\microsoft.net\\framework64\\v2.0.50727\\uninstallwebeventsqlprovider.sql")) returned 1 [0109.162] CreateFileW (lpFileName="C:\\Windows\\Microsoft.NET\\Framework64\\v2.0.50727\\ASP.NETWebAdminFiles\\default.aspx" (normalized: "c:\\windows\\microsoft.net\\framework64\\v2.0.50727\\asp.netwebadminfiles\\default.aspx"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x178 [0109.163] GetFileType (hFile=0x178) returned 0x1 [0109.163] GetFileType (hFile=0x178) returned 0x1 [0109.163] GetFileSize (in: hFile=0x178, lpFileSizeHigh=0x31e718 | out: lpFileSizeHigh=0x31e718*=0x0) returned 0x10fd [0109.164] ReadFile (in: hFile=0x178, lpBuffer=0x278ed04, nNumberOfBytesToRead=0x10fd, lpNumberOfBytesRead=0x31e6c4, lpOverlapped=0x0 | out: lpBuffer=0x278ed04*, lpNumberOfBytesRead=0x31e6c4*=0x10fd, lpOverlapped=0x0) returned 1 [0109.178] CreateFileW (lpFileName="C:\\Windows\\Microsoft.NET\\Framework64\\v2.0.50727\\ASP.NETWebAdminFiles\\default.aspx" (normalized: "c:\\windows\\microsoft.net\\framework64\\v2.0.50727\\asp.netwebadminfiles\\default.aspx"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x178 [0109.178] GetFileType (hFile=0x178) returned 0x1 [0109.179] GetFileType (hFile=0x178) returned 0x1 [0109.179] WriteFile (in: hFile=0x178, lpBuffer=0x27e0fec*, nNumberOfBytesToWrite=0x1100, lpNumberOfBytesWritten=0x31e6b8, lpOverlapped=0x0 | out: lpBuffer=0x27e0fec*, lpNumberOfBytesWritten=0x31e6b8*=0x1100, lpOverlapped=0x0) returned 1 [0109.179] MoveFileW (lpExistingFileName="C:\\Windows\\Microsoft.NET\\Framework64\\v2.0.50727\\ASP.NETWebAdminFiles\\default.aspx" (normalized: "c:\\windows\\microsoft.net\\framework64\\v2.0.50727\\asp.netwebadminfiles\\default.aspx"), lpNewFileName="C:\\Windows\\Microsoft.NET\\Framework64\\v2.0.50727\\ASP.NETWebAdminFiles\\default.aspx" (normalized: "c:\\windows\\microsoft.net\\framework64\\v2.0.50727\\asp.netwebadminfiles\\default.aspx")) returned 1 [0109.180] CreateFileW (lpFileName="C:\\Windows\\Microsoft.NET\\Framework64\\v2.0.50727\\ASP.NETWebAdminFiles\\error.aspx" (normalized: "c:\\windows\\microsoft.net\\framework64\\v2.0.50727\\asp.netwebadminfiles\\error.aspx"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x178 [0109.181] GetFileType (hFile=0x178) returned 0x1 [0109.181] GetFileType (hFile=0x178) returned 0x1 [0109.181] GetFileSize (in: hFile=0x178, lpFileSizeHigh=0x31e718 | out: lpFileSizeHigh=0x31e718*=0x0) returned 0x1a91 [0109.181] ReadFile (in: hFile=0x178, lpBuffer=0x27e24d0, nNumberOfBytesToRead=0x1a91, lpNumberOfBytesRead=0x31e6c4, lpOverlapped=0x0 | out: lpBuffer=0x27e24d0*, lpNumberOfBytesRead=0x31e6c4*=0x1a91, lpOverlapped=0x0) returned 1 [0109.194] CreateFileW (lpFileName="C:\\Windows\\Microsoft.NET\\Framework64\\v2.0.50727\\ASP.NETWebAdminFiles\\error.aspx" (normalized: "c:\\windows\\microsoft.net\\framework64\\v2.0.50727\\asp.netwebadminfiles\\error.aspx"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x178 [0109.195] GetFileType (hFile=0x178) returned 0x1 [0109.195] GetFileType (hFile=0x178) returned 0x1 [0109.195] WriteFile (in: hFile=0x178, lpBuffer=0x28377d8*, nNumberOfBytesToWrite=0x1aa0, lpNumberOfBytesWritten=0x31e6b8, lpOverlapped=0x0 | out: lpBuffer=0x28377d8*, lpNumberOfBytesWritten=0x31e6b8*=0x1aa0, lpOverlapped=0x0) returned 1 [0109.196] MoveFileW (lpExistingFileName="C:\\Windows\\Microsoft.NET\\Framework64\\v2.0.50727\\ASP.NETWebAdminFiles\\error.aspx" (normalized: "c:\\windows\\microsoft.net\\framework64\\v2.0.50727\\asp.netwebadminfiles\\error.aspx"), lpNewFileName="C:\\Windows\\Microsoft.NET\\Framework64\\v2.0.50727\\ASP.NETWebAdminFiles\\error.aspx" (normalized: "c:\\windows\\microsoft.net\\framework64\\v2.0.50727\\asp.netwebadminfiles\\error.aspx")) returned 1 [0109.196] CreateFileW (lpFileName="C:\\Windows\\Microsoft.NET\\Framework64\\v2.0.50727\\ASP.NETWebAdminFiles\\home0.aspx" (normalized: "c:\\windows\\microsoft.net\\framework64\\v2.0.50727\\asp.netwebadminfiles\\home0.aspx"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x178 [0109.196] GetFileType (hFile=0x178) returned 0x1 [0109.197] GetFileType (hFile=0x178) returned 0x1 [0109.197] GetFileSize (in: hFile=0x178, lpFileSizeHigh=0x31e718 | out: lpFileSizeHigh=0x31e718*=0x0) returned 0x551 [0109.197] ReadFile (in: hFile=0x178, lpBuffer=0x2839bac, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x31e6c4, lpOverlapped=0x0 | out: lpBuffer=0x2839bac*, lpNumberOfBytesRead=0x31e6c4*=0x551, lpOverlapped=0x0) returned 1 [0109.212] CreateFileW (lpFileName="C:\\Windows\\Microsoft.NET\\Framework64\\v2.0.50727\\ASP.NETWebAdminFiles\\home0.aspx" (normalized: "c:\\windows\\microsoft.net\\framework64\\v2.0.50727\\asp.netwebadminfiles\\home0.aspx"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x178 [0109.213] GetFileType (hFile=0x178) returned 0x1 [0109.213] GetFileType (hFile=0x178) returned 0x1 [0109.214] MoveFileW (lpExistingFileName="C:\\Windows\\Microsoft.NET\\Framework64\\v2.0.50727\\ASP.NETWebAdminFiles\\home0.aspx" (normalized: "c:\\windows\\microsoft.net\\framework64\\v2.0.50727\\asp.netwebadminfiles\\home0.aspx"), lpNewFileName="C:\\Windows\\Microsoft.NET\\Framework64\\v2.0.50727\\ASP.NETWebAdminFiles\\home0.aspx" (normalized: "c:\\windows\\microsoft.net\\framework64\\v2.0.50727\\asp.netwebadminfiles\\home0.aspx")) returned 1 [0109.214] CreateFileW (lpFileName="C:\\Windows\\Microsoft.NET\\Framework64\\v2.0.50727\\ASP.NETWebAdminFiles\\home1.aspx" (normalized: "c:\\windows\\microsoft.net\\framework64\\v2.0.50727\\asp.netwebadminfiles\\home1.aspx"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x178 [0109.215] GetFileType (hFile=0x178) returned 0x1 [0109.215] GetFileType (hFile=0x178) returned 0x1 [0109.215] GetFileSize (in: hFile=0x178, lpFileSizeHigh=0x31e718 | out: lpFileSizeHigh=0x31e718*=0x0) returned 0x2e4 [0109.215] ReadFile (in: hFile=0x178, lpBuffer=0x268f860, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x31e6c4, lpOverlapped=0x0 | out: lpBuffer=0x268f860*, lpNumberOfBytesRead=0x31e6c4*=0x2e4, lpOverlapped=0x0) returned 1 [0109.229] CreateFileW (lpFileName="C:\\Windows\\Microsoft.NET\\Framework64\\v2.0.50727\\ASP.NETWebAdminFiles\\home1.aspx" (normalized: "c:\\windows\\microsoft.net\\framework64\\v2.0.50727\\asp.netwebadminfiles\\home1.aspx"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x178 [0109.230] GetFileType (hFile=0x178) returned 0x1 [0109.230] GetFileType (hFile=0x178) returned 0x1 [0109.230] WriteFile (in: hFile=0x178, lpBuffer=0x26de794*, nNumberOfBytesToWrite=0x2f0, lpNumberOfBytesWritten=0x31e68c, lpOverlapped=0x0 | out: lpBuffer=0x26de794*, lpNumberOfBytesWritten=0x31e68c*=0x2f0, lpOverlapped=0x0) returned 1 [0109.231] MoveFileW (lpExistingFileName="C:\\Windows\\Microsoft.NET\\Framework64\\v2.0.50727\\ASP.NETWebAdminFiles\\home1.aspx" (normalized: "c:\\windows\\microsoft.net\\framework64\\v2.0.50727\\asp.netwebadminfiles\\home1.aspx"), lpNewFileName="C:\\Windows\\Microsoft.NET\\Framework64\\v2.0.50727\\ASP.NETWebAdminFiles\\home1.aspx" (normalized: "c:\\windows\\microsoft.net\\framework64\\v2.0.50727\\asp.netwebadminfiles\\home1.aspx")) returned 1 [0109.231] CreateFileW (lpFileName="C:\\Windows\\Microsoft.NET\\Framework64\\v2.0.50727\\ASP.NETWebAdminFiles\\home2.aspx" (normalized: "c:\\windows\\microsoft.net\\framework64\\v2.0.50727\\asp.netwebadminfiles\\home2.aspx"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x178 [0109.231] GetFileType (hFile=0x178) returned 0x1 [0109.231] GetFileType (hFile=0x178) returned 0x1 [0109.231] GetFileSize (in: hFile=0x178, lpFileSizeHigh=0x31e718 | out: lpFileSizeHigh=0x31e718*=0x0) returned 0x412 [0109.231] ReadFile (in: hFile=0x178, lpBuffer=0x26dfe5c, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x31e6c4, lpOverlapped=0x0 | out: lpBuffer=0x26dfe5c*, lpNumberOfBytesRead=0x31e6c4*=0x412, lpOverlapped=0x0) returned 1 [0109.245] CreateFileW (lpFileName="C:\\Windows\\Microsoft.NET\\Framework64\\v2.0.50727\\ASP.NETWebAdminFiles\\home2.aspx" (normalized: "c:\\windows\\microsoft.net\\framework64\\v2.0.50727\\asp.netwebadminfiles\\home2.aspx"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x178 [0109.246] GetFileType (hFile=0x178) returned 0x1 [0109.246] GetFileType (hFile=0x178) returned 0x1 [0109.246] WriteFile (in: hFile=0x178, lpBuffer=0x272f228*, nNumberOfBytesToWrite=0x420, lpNumberOfBytesWritten=0x31e68c, lpOverlapped=0x0 | out: lpBuffer=0x272f228*, lpNumberOfBytesWritten=0x31e68c*=0x420, lpOverlapped=0x0) returned 1 [0109.247] MoveFileW (lpExistingFileName="C:\\Windows\\Microsoft.NET\\Framework64\\v2.0.50727\\ASP.NETWebAdminFiles\\home2.aspx" (normalized: "c:\\windows\\microsoft.net\\framework64\\v2.0.50727\\asp.netwebadminfiles\\home2.aspx"), lpNewFileName="C:\\Windows\\Microsoft.NET\\Framework64\\v2.0.50727\\ASP.NETWebAdminFiles\\home2.aspx" (normalized: "c:\\windows\\microsoft.net\\framework64\\v2.0.50727\\asp.netwebadminfiles\\home2.aspx")) returned 1 [0109.247] CreateFileW (lpFileName="C:\\Windows\\Microsoft.NET\\Framework64\\v2.0.50727\\ASP.NETWebAdminFiles\\WebAdminHelp.aspx" (normalized: "c:\\windows\\microsoft.net\\framework64\\v2.0.50727\\asp.netwebadminfiles\\webadminhelp.aspx"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x178 [0109.247] GetFileType (hFile=0x178) returned 0x1 [0109.247] GetFileType (hFile=0x178) returned 0x1 [0109.247] GetFileSize (in: hFile=0x178, lpFileSizeHigh=0x31e718 | out: lpFileSizeHigh=0x31e718*=0x0) returned 0x1a52 [0109.247] ReadFile (in: hFile=0x178, lpBuffer=0x2730558, nNumberOfBytesToRead=0x1a52, lpNumberOfBytesRead=0x31e6c4, lpOverlapped=0x0 | out: lpBuffer=0x2730558*, lpNumberOfBytesRead=0x31e6c4*=0x1a52, lpOverlapped=0x0) returned 1 [0109.261] CreateFileW (lpFileName="C:\\Windows\\Microsoft.NET\\Framework64\\v2.0.50727\\ASP.NETWebAdminFiles\\WebAdminHelp.aspx" (normalized: "c:\\windows\\microsoft.net\\framework64\\v2.0.50727\\asp.netwebadminfiles\\webadminhelp.aspx"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x178 [0109.262] GetFileType (hFile=0x178) returned 0x1 [0109.262] GetFileType (hFile=0x178) returned 0x1 [0109.262] WriteFile (in: hFile=0x178, lpBuffer=0x2785720*, nNumberOfBytesToWrite=0x1a60, lpNumberOfBytesWritten=0x31e6b8, lpOverlapped=0x0 | out: lpBuffer=0x2785720*, lpNumberOfBytesWritten=0x31e6b8*=0x1a60, lpOverlapped=0x0) returned 1 [0109.277] MoveFileW (lpExistingFileName="C:\\Windows\\Microsoft.NET\\Framework64\\v2.0.50727\\ASP.NETWebAdminFiles\\WebAdminHelp.aspx" (normalized: "c:\\windows\\microsoft.net\\framework64\\v2.0.50727\\asp.netwebadminfiles\\webadminhelp.aspx"), lpNewFileName="C:\\Windows\\Microsoft.NET\\Framework64\\v2.0.50727\\ASP.NETWebAdminFiles\\WebAdminHelp.aspx" (normalized: "c:\\windows\\microsoft.net\\framework64\\v2.0.50727\\asp.netwebadminfiles\\webadminhelp.aspx")) returned 1 [0109.278] CreateFileW (lpFileName="C:\\Windows\\Microsoft.NET\\Framework64\\v2.0.50727\\ASP.NETWebAdminFiles\\WebAdminHelp_Application.aspx" (normalized: "c:\\windows\\microsoft.net\\framework64\\v2.0.50727\\asp.netwebadminfiles\\webadminhelp_application.aspx"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x178 [0109.278] GetFileType (hFile=0x178) returned 0x1 [0109.278] GetFileType (hFile=0x178) returned 0x1 [0109.278] GetFileSize (in: hFile=0x178, lpFileSizeHigh=0x31e718 | out: lpFileSizeHigh=0x31e718*=0x0) returned 0x3503 [0109.278] ReadFile (in: hFile=0x178, lpBuffer=0x27875dc, nNumberOfBytesToRead=0x3503, lpNumberOfBytesRead=0x31e6c4, lpOverlapped=0x0 | out: lpBuffer=0x27875dc*, lpNumberOfBytesRead=0x31e6c4*=0x3503, lpOverlapped=0x0) returned 1 [0109.292] CreateFileW (lpFileName="C:\\Windows\\Microsoft.NET\\Framework64\\v2.0.50727\\ASP.NETWebAdminFiles\\WebAdminHelp_Application.aspx" (normalized: "c:\\windows\\microsoft.net\\framework64\\v2.0.50727\\asp.netwebadminfiles\\webadminhelp_application.aspx"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x178 [0109.293] GetFileType (hFile=0x178) returned 0x1 [0109.293] GetFileType (hFile=0x178) returned 0x1 [0109.293] WriteFile (in: hFile=0x178, lpBuffer=0x27e4d14*, nNumberOfBytesToWrite=0x3510, lpNumberOfBytesWritten=0x31e6b8, lpOverlapped=0x0 | out: lpBuffer=0x27e4d14*, lpNumberOfBytesWritten=0x31e6b8*=0x3510, lpOverlapped=0x0) returned 1 [0109.294] MoveFileW (lpExistingFileName="C:\\Windows\\Microsoft.NET\\Framework64\\v2.0.50727\\ASP.NETWebAdminFiles\\WebAdminHelp_Application.aspx" (normalized: "c:\\windows\\microsoft.net\\framework64\\v2.0.50727\\asp.netwebadminfiles\\webadminhelp_application.aspx"), lpNewFileName="C:\\Windows\\Microsoft.NET\\Framework64\\v2.0.50727\\ASP.NETWebAdminFiles\\WebAdminHelp_Application.aspx" (normalized: "c:\\windows\\microsoft.net\\framework64\\v2.0.50727\\asp.netwebadminfiles\\webadminhelp_application.aspx")) returned 1 [0109.294] CreateFileW (lpFileName="C:\\Windows\\Microsoft.NET\\Framework64\\v2.0.50727\\ASP.NETWebAdminFiles\\WebAdminHelp_Internals.aspx" (normalized: "c:\\windows\\microsoft.net\\framework64\\v2.0.50727\\asp.netwebadminfiles\\webadminhelp_internals.aspx"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x178 [0109.294] GetFileType (hFile=0x178) returned 0x1 [0109.294] GetFileType (hFile=0x178) returned 0x1 [0109.294] GetFileSize (in: hFile=0x178, lpFileSizeHigh=0x31e718 | out: lpFileSizeHigh=0x31e718*=0x0) returned 0xfec [0109.294] ReadFile (in: hFile=0x178, lpBuffer=0x27e96d0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x31e6c4, lpOverlapped=0x0 | out: lpBuffer=0x27e96d0*, lpNumberOfBytesRead=0x31e6c4*=0xfec, lpOverlapped=0x0) returned 1 [0109.308] CreateFileW (lpFileName="C:\\Windows\\Microsoft.NET\\Framework64\\v2.0.50727\\ASP.NETWebAdminFiles\\WebAdminHelp_Internals.aspx" (normalized: "c:\\windows\\microsoft.net\\framework64\\v2.0.50727\\asp.netwebadminfiles\\webadminhelp_internals.aspx"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x178 [0109.309] GetFileType (hFile=0x178) returned 0x1 [0109.309] GetFileType (hFile=0x178) returned 0x1 [0109.309] WriteFile (in: hFile=0x178, lpBuffer=0x283c5e4*, nNumberOfBytesToWrite=0xff0, lpNumberOfBytesWritten=0x31e68c, lpOverlapped=0x0 | out: lpBuffer=0x283c5e4*, lpNumberOfBytesWritten=0x31e68c*=0xff0, lpOverlapped=0x0) returned 1 [0109.310] MoveFileW (lpExistingFileName="C:\\Windows\\Microsoft.NET\\Framework64\\v2.0.50727\\ASP.NETWebAdminFiles\\WebAdminHelp_Internals.aspx" (normalized: "c:\\windows\\microsoft.net\\framework64\\v2.0.50727\\asp.netwebadminfiles\\webadminhelp_internals.aspx"), lpNewFileName="C:\\Windows\\Microsoft.NET\\Framework64\\v2.0.50727\\ASP.NETWebAdminFiles\\WebAdminHelp_Internals.aspx" (normalized: "c:\\windows\\microsoft.net\\framework64\\v2.0.50727\\asp.netwebadminfiles\\webadminhelp_internals.aspx")) returned 1 [0109.310] CreateFileW (lpFileName="C:\\Windows\\Microsoft.NET\\Framework64\\v2.0.50727\\ASP.NETWebAdminFiles\\WebAdminHelp_Provider.aspx" (normalized: "c:\\windows\\microsoft.net\\framework64\\v2.0.50727\\asp.netwebadminfiles\\webadminhelp_provider.aspx"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x178 [0109.310] GetFileType (hFile=0x178) returned 0x1 [0109.310] GetFileType (hFile=0x178) returned 0x1 [0109.310] GetFileSize (in: hFile=0x178, lpFileSizeHigh=0x31e718 | out: lpFileSizeHigh=0x31e718*=0x0) returned 0x1a2d [0109.310] ReadFile (in: hFile=0x178, lpBuffer=0x283d914, nNumberOfBytesToRead=0x1a2d, lpNumberOfBytesRead=0x31e6c4, lpOverlapped=0x0 | out: lpBuffer=0x283d914*, lpNumberOfBytesRead=0x31e6c4*=0x1a2d, lpOverlapped=0x0) returned 1 [0109.326] CreateFileW (lpFileName="C:\\Windows\\Microsoft.NET\\Framework64\\v2.0.50727\\ASP.NETWebAdminFiles\\WebAdminHelp_Provider.aspx" (normalized: "c:\\windows\\microsoft.net\\framework64\\v2.0.50727\\asp.netwebadminfiles\\webadminhelp_provider.aspx"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x178 [0109.327] GetFileType (hFile=0x178) returned 0x1 [0109.327] GetFileType (hFile=0x178) returned 0x1 [0109.327] WriteFile (in: hFile=0x178, lpBuffer=0x2695370*, nNumberOfBytesToWrite=0x1a30, lpNumberOfBytesWritten=0x31e6b8, lpOverlapped=0x0 | out: lpBuffer=0x2695370*, lpNumberOfBytesWritten=0x31e6b8*=0x1a30, lpOverlapped=0x0) returned 1 [0109.328] MoveFileW (lpExistingFileName="C:\\Windows\\Microsoft.NET\\Framework64\\v2.0.50727\\ASP.NETWebAdminFiles\\WebAdminHelp_Provider.aspx" (normalized: "c:\\windows\\microsoft.net\\framework64\\v2.0.50727\\asp.netwebadminfiles\\webadminhelp_provider.aspx"), lpNewFileName="C:\\Windows\\Microsoft.NET\\Framework64\\v2.0.50727\\ASP.NETWebAdminFiles\\WebAdminHelp_Provider.aspx" (normalized: "c:\\windows\\microsoft.net\\framework64\\v2.0.50727\\asp.netwebadminfiles\\webadminhelp_provider.aspx")) returned 1 [0109.328] CreateFileW (lpFileName="C:\\Windows\\Microsoft.NET\\Framework64\\v2.0.50727\\ASP.NETWebAdminFiles\\WebAdminHelp_Security.aspx" (normalized: "c:\\windows\\microsoft.net\\framework64\\v2.0.50727\\asp.netwebadminfiles\\webadminhelp_security.aspx"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x178 [0109.329] GetFileType (hFile=0x178) returned 0x1 [0109.329] GetFileType (hFile=0x178) returned 0x1 [0109.329] GetFileSize (in: hFile=0x178, lpFileSizeHigh=0x31e718 | out: lpFileSizeHigh=0x31e718*=0x0) returned 0x2943 [0109.329] ReadFile (in: hFile=0x178, lpBuffer=0x2697234, nNumberOfBytesToRead=0x2943, lpNumberOfBytesRead=0x31e6c4, lpOverlapped=0x0 | out: lpBuffer=0x2697234*, lpNumberOfBytesRead=0x31e6c4*=0x2943, lpOverlapped=0x0) returned 1 [0109.345] CreateFileW (lpFileName="C:\\Windows\\Microsoft.NET\\Framework64\\v2.0.50727\\ASP.NETWebAdminFiles\\WebAdminHelp_Security.aspx" (normalized: "c:\\windows\\microsoft.net\\framework64\\v2.0.50727\\asp.netwebadminfiles\\webadminhelp_security.aspx"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x178 [0109.346] GetFileType (hFile=0x178) returned 0x1 [0109.346] GetFileType (hFile=0x178) returned 0x1 [0109.346] WriteFile (in: hFile=0x178, lpBuffer=0x26f1008*, nNumberOfBytesToWrite=0x2950, lpNumberOfBytesWritten=0x31e6b8, lpOverlapped=0x0 | out: lpBuffer=0x26f1008*, lpNumberOfBytesWritten=0x31e6b8*=0x2950, lpOverlapped=0x0) returned 1 [0109.347] MoveFileW (lpExistingFileName="C:\\Windows\\Microsoft.NET\\Framework64\\v2.0.50727\\ASP.NETWebAdminFiles\\WebAdminHelp_Security.aspx" (normalized: "c:\\windows\\microsoft.net\\framework64\\v2.0.50727\\asp.netwebadminfiles\\webadminhelp_security.aspx"), lpNewFileName="C:\\Windows\\Microsoft.NET\\Framework64\\v2.0.50727\\ASP.NETWebAdminFiles\\WebAdminHelp_Security.aspx" (normalized: "c:\\windows\\microsoft.net\\framework64\\v2.0.50727\\asp.netwebadminfiles\\webadminhelp_security.aspx")) returned 1 [0109.347] CreateFileW (lpFileName="C:\\Windows\\Microsoft.NET\\Framework64\\v2.0.50727\\ASP.NETWebAdminFiles\\WebAdminStyles.css" (normalized: "c:\\windows\\microsoft.net\\framework64\\v2.0.50727\\asp.netwebadminfiles\\webadminstyles.css"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x178 [0109.348] GetFileType (hFile=0x178) returned 0x1 [0109.348] GetFileType (hFile=0x178) returned 0x1 [0109.348] GetFileSize (in: hFile=0x178, lpFileSizeHigh=0x31e718 | out: lpFileSizeHigh=0x31e718*=0x0) returned 0x32a4 [0109.348] ReadFile (in: hFile=0x178, lpBuffer=0x26f3e04, nNumberOfBytesToRead=0x32a4, lpNumberOfBytesRead=0x31e6c4, lpOverlapped=0x0 | out: lpBuffer=0x26f3e04*, lpNumberOfBytesRead=0x31e6c4*=0x32a4, lpOverlapped=0x0) returned 1 [0109.362] CreateFileW (lpFileName="C:\\Windows\\Microsoft.NET\\Framework64\\v2.0.50727\\ASP.NETWebAdminFiles\\WebAdminStyles.css" (normalized: "c:\\windows\\microsoft.net\\framework64\\v2.0.50727\\asp.netwebadminfiles\\webadminstyles.css"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x178 [0109.363] GetFileType (hFile=0x178) returned 0x1 [0109.363] GetFileType (hFile=0x178) returned 0x1 [0109.363] WriteFile (in: hFile=0x178, lpBuffer=0x2750958*, nNumberOfBytesToWrite=0x32b0, lpNumberOfBytesWritten=0x31e6b8, lpOverlapped=0x0 | out: lpBuffer=0x2750958*, lpNumberOfBytesWritten=0x31e6b8*=0x32b0, lpOverlapped=0x0) returned 1 [0109.364] MoveFileW (lpExistingFileName="C:\\Windows\\Microsoft.NET\\Framework64\\v2.0.50727\\ASP.NETWebAdminFiles\\WebAdminStyles.css" (normalized: "c:\\windows\\microsoft.net\\framework64\\v2.0.50727\\asp.netwebadminfiles\\webadminstyles.css"), lpNewFileName="C:\\Windows\\Microsoft.NET\\Framework64\\v2.0.50727\\ASP.NETWebAdminFiles\\WebAdminStyles.css" (normalized: "c:\\windows\\microsoft.net\\framework64\\v2.0.50727\\asp.netwebadminfiles\\webadminstyles.css")) returned 1 [0109.367] CreateFileW (lpFileName="C:\\Windows\\Microsoft.NET\\Framework64\\v2.0.50727\\ASP.NETWebAdminFiles\\AppConfig\\AppConfigHome.aspx" (normalized: "c:\\windows\\microsoft.net\\framework64\\v2.0.50727\\asp.netwebadminfiles\\appconfig\\appconfighome.aspx"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x178 [0109.369] GetFileType (hFile=0x178) returned 0x1 [0109.369] GetFileType (hFile=0x178) returned 0x1 [0109.369] GetFileSize (in: hFile=0x178, lpFileSizeHigh=0x31e6a0 | out: lpFileSizeHigh=0x31e6a0*=0x0) returned 0x1fa4 [0109.369] ReadFile (in: hFile=0x178, lpBuffer=0x2758054, nNumberOfBytesToRead=0x1fa4, lpNumberOfBytesRead=0x31e64c, lpOverlapped=0x0 | out: lpBuffer=0x2758054*, lpNumberOfBytesRead=0x31e64c*=0x1fa4, lpOverlapped=0x0) returned 1 [0109.384] CreateFileW (lpFileName="C:\\Windows\\Microsoft.NET\\Framework64\\v2.0.50727\\ASP.NETWebAdminFiles\\AppConfig\\AppConfigHome.aspx" (normalized: "c:\\windows\\microsoft.net\\framework64\\v2.0.50727\\asp.netwebadminfiles\\appconfig\\appconfighome.aspx"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x178 [0109.385] GetFileType (hFile=0x178) returned 0x1 [0109.385] GetFileType (hFile=0x178) returned 0x1 [0109.385] WriteFile (in: hFile=0x178, lpBuffer=0x27aeca8*, nNumberOfBytesToWrite=0x1fb0, lpNumberOfBytesWritten=0x31e640, lpOverlapped=0x0 | out: lpBuffer=0x27aeca8*, lpNumberOfBytesWritten=0x31e640*=0x1fb0, lpOverlapped=0x0) returned 1 [0109.386] MoveFileW (lpExistingFileName="C:\\Windows\\Microsoft.NET\\Framework64\\v2.0.50727\\ASP.NETWebAdminFiles\\AppConfig\\AppConfigHome.aspx" (normalized: "c:\\windows\\microsoft.net\\framework64\\v2.0.50727\\asp.netwebadminfiles\\appconfig\\appconfighome.aspx"), lpNewFileName="C:\\Windows\\Microsoft.NET\\Framework64\\v2.0.50727\\ASP.NETWebAdminFiles\\AppConfig\\AppConfigHome.aspx" (normalized: "c:\\windows\\microsoft.net\\framework64\\v2.0.50727\\asp.netwebadminfiles\\appconfig\\appconfighome.aspx")) returned 1 [0109.386] CreateFileW (lpFileName="C:\\Windows\\Microsoft.NET\\Framework64\\v2.0.50727\\ASP.NETWebAdminFiles\\AppConfig\\CreateAppSetting.aspx" (normalized: "c:\\windows\\microsoft.net\\framework64\\v2.0.50727\\asp.netwebadminfiles\\appconfig\\createappsetting.aspx"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x178 [0109.387] GetFileType (hFile=0x178) returned 0x1 [0109.387] GetFileType (hFile=0x178) returned 0x1 [0109.387] GetFileSize (in: hFile=0x178, lpFileSizeHigh=0x31e6a0 | out: lpFileSizeHigh=0x31e6a0*=0x0) returned 0xe55 [0109.387] ReadFile (in: hFile=0x178, lpBuffer=0x27b1f64, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x31e64c, lpOverlapped=0x0 | out: lpBuffer=0x27b1f64*, lpNumberOfBytesRead=0x31e64c*=0xe55, lpOverlapped=0x0) returned 1 [0109.402] CreateFileW (lpFileName="C:\\Windows\\Microsoft.NET\\Framework64\\v2.0.50727\\ASP.NETWebAdminFiles\\AppConfig\\CreateAppSetting.aspx" (normalized: "c:\\windows\\microsoft.net\\framework64\\v2.0.50727\\asp.netwebadminfiles\\appconfig\\createappsetting.aspx"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x178 [0109.402] GetFileType (hFile=0x178) returned 0x1 [0109.403] GetFileType (hFile=0x178) returned 0x1 [0109.403] MoveFileW (lpExistingFileName="C:\\Windows\\Microsoft.NET\\Framework64\\v2.0.50727\\ASP.NETWebAdminFiles\\AppConfig\\CreateAppSetting.aspx" (normalized: "c:\\windows\\microsoft.net\\framework64\\v2.0.50727\\asp.netwebadminfiles\\appconfig\\createappsetting.aspx"), lpNewFileName="C:\\Windows\\Microsoft.NET\\Framework64\\v2.0.50727\\ASP.NETWebAdminFiles\\AppConfig\\CreateAppSetting.aspx" (normalized: "c:\\windows\\microsoft.net\\framework64\\v2.0.50727\\asp.netwebadminfiles\\appconfig\\createappsetting.aspx")) returned 1 [0109.404] CreateFileW (lpFileName="C:\\Windows\\Microsoft.NET\\Framework64\\v2.0.50727\\ASP.NETWebAdminFiles\\AppConfig\\DebugAndTrace.aspx" (normalized: "c:\\windows\\microsoft.net\\framework64\\v2.0.50727\\asp.netwebadminfiles\\appconfig\\debugandtrace.aspx"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x178 [0109.404] GetFileType (hFile=0x178) returned 0x1 [0109.404] GetFileType (hFile=0x178) returned 0x1 [0109.405] GetFileSize (in: hFile=0x178, lpFileSizeHigh=0x31e6a0 | out: lpFileSizeHigh=0x31e6a0*=0x0) returned 0x2fdd [0109.405] ReadFile (in: hFile=0x178, lpBuffer=0x28059e0, nNumberOfBytesToRead=0x2fdd, lpNumberOfBytesRead=0x31e64c, lpOverlapped=0x0 | out: lpBuffer=0x28059e0*, lpNumberOfBytesRead=0x31e64c*=0x2fdd, lpOverlapped=0x0) returned 1 [0109.421] CreateFileW (lpFileName="C:\\Windows\\Microsoft.NET\\Framework64\\v2.0.50727\\ASP.NETWebAdminFiles\\AppConfig\\DebugAndTrace.aspx" (normalized: "c:\\windows\\microsoft.net\\framework64\\v2.0.50727\\asp.netwebadminfiles\\appconfig\\debugandtrace.aspx"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x178 [0109.421] GetFileType (hFile=0x178) returned 0x1 [0109.422] GetFileType (hFile=0x178) returned 0x1 [0109.422] WriteFile (in: hFile=0x178, lpBuffer=0x26650d4*, nNumberOfBytesToWrite=0x2fe0, lpNumberOfBytesWritten=0x31e640, lpOverlapped=0x0 | out: lpBuffer=0x26650d4*, lpNumberOfBytesWritten=0x31e640*=0x2fe0, lpOverlapped=0x0) returned 1 [0109.423] MoveFileW (lpExistingFileName="C:\\Windows\\Microsoft.NET\\Framework64\\v2.0.50727\\ASP.NETWebAdminFiles\\AppConfig\\DebugAndTrace.aspx" (normalized: "c:\\windows\\microsoft.net\\framework64\\v2.0.50727\\asp.netwebadminfiles\\appconfig\\debugandtrace.aspx"), lpNewFileName="C:\\Windows\\Microsoft.NET\\Framework64\\v2.0.50727\\ASP.NETWebAdminFiles\\AppConfig\\DebugAndTrace.aspx" (normalized: "c:\\windows\\microsoft.net\\framework64\\v2.0.50727\\asp.netwebadminfiles\\appconfig\\debugandtrace.aspx")) returned 1 [0109.423] CreateFileW (lpFileName="C:\\Windows\\Microsoft.NET\\Framework64\\v2.0.50727\\ASP.NETWebAdminFiles\\AppConfig\\DefineErrorPage.aspx" (normalized: "c:\\windows\\microsoft.net\\framework64\\v2.0.50727\\asp.netwebadminfiles\\appconfig\\defineerrorpage.aspx"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x178 [0109.423] GetFileType (hFile=0x178) returned 0x1 [0109.423] GetFileType (hFile=0x178) returned 0x1 [0109.423] GetFileSize (in: hFile=0x178, lpFileSizeHigh=0x31e6a0 | out: lpFileSizeHigh=0x31e6a0*=0x0) returned 0x46fd [0109.423] ReadFile (in: hFile=0x178, lpBuffer=0x2668540, nNumberOfBytesToRead=0x46fd, lpNumberOfBytesRead=0x31e64c, lpOverlapped=0x0 | out: lpBuffer=0x2668540*, lpNumberOfBytesRead=0x31e64c*=0x46fd, lpOverlapped=0x0) returned 1 [0109.437] CreateFileW (lpFileName="C:\\Windows\\Microsoft.NET\\Framework64\\v2.0.50727\\ASP.NETWebAdminFiles\\AppConfig\\DefineErrorPage.aspx" (normalized: "c:\\windows\\microsoft.net\\framework64\\v2.0.50727\\asp.netwebadminfiles\\appconfig\\defineerrorpage.aspx"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x178 [0109.438] GetFileType (hFile=0x178) returned 0x1 [0109.438] GetFileType (hFile=0x178) returned 0x1 [0109.438] WriteFile (in: hFile=0x178, lpBuffer=0x26cb784*, nNumberOfBytesToWrite=0x4700, lpNumberOfBytesWritten=0x31e640, lpOverlapped=0x0 | out: lpBuffer=0x26cb784*, lpNumberOfBytesWritten=0x31e640*=0x4700, lpOverlapped=0x0) returned 1 [0109.439] MoveFileW (lpExistingFileName="C:\\Windows\\Microsoft.NET\\Framework64\\v2.0.50727\\ASP.NETWebAdminFiles\\AppConfig\\DefineErrorPage.aspx" (normalized: "c:\\windows\\microsoft.net\\framework64\\v2.0.50727\\asp.netwebadminfiles\\appconfig\\defineerrorpage.aspx"), lpNewFileName="C:\\Windows\\Microsoft.NET\\Framework64\\v2.0.50727\\ASP.NETWebAdminFiles\\AppConfig\\DefineErrorPage.aspx" (normalized: "c:\\windows\\microsoft.net\\framework64\\v2.0.50727\\asp.netwebadminfiles\\appconfig\\defineerrorpage.aspx")) returned 1 [0109.439] CreateFileW (lpFileName="C:\\Windows\\Microsoft.NET\\Framework64\\v2.0.50727\\ASP.NETWebAdminFiles\\AppConfig\\EditAppSetting.aspx" (normalized: "c:\\windows\\microsoft.net\\framework64\\v2.0.50727\\asp.netwebadminfiles\\appconfig\\editappsetting.aspx"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x178 [0109.440] GetFileType (hFile=0x178) returned 0x1 [0109.440] GetFileType (hFile=0x178) returned 0x1 [0109.440] GetFileSize (in: hFile=0x178, lpFileSizeHigh=0x31e6a0 | out: lpFileSizeHigh=0x31e6a0*=0x0) returned 0x900 [0109.440] ReadFile (in: hFile=0x178, lpBuffer=0x26d0c28, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x31e64c, lpOverlapped=0x0 | out: lpBuffer=0x26d0c28*, lpNumberOfBytesRead=0x31e64c*=0x900, lpOverlapped=0x0) returned 1 [0109.454] CreateFileW (lpFileName="C:\\Windows\\Microsoft.NET\\Framework64\\v2.0.50727\\ASP.NETWebAdminFiles\\AppConfig\\EditAppSetting.aspx" (normalized: "c:\\windows\\microsoft.net\\framework64\\v2.0.50727\\asp.netwebadminfiles\\appconfig\\editappsetting.aspx"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x178 [0109.455] GetFileType (hFile=0x178) returned 0x1 [0109.455] GetFileType (hFile=0x178) returned 0x1 [0109.455] WriteFile (in: hFile=0x178, lpBuffer=0x27218dc*, nNumberOfBytesToWrite=0x910, lpNumberOfBytesWritten=0x31e614, lpOverlapped=0x0 | out: lpBuffer=0x27218dc*, lpNumberOfBytesWritten=0x31e614*=0x910, lpOverlapped=0x0) returned 1 [0109.456] MoveFileW (lpExistingFileName="C:\\Windows\\Microsoft.NET\\Framework64\\v2.0.50727\\ASP.NETWebAdminFiles\\AppConfig\\EditAppSetting.aspx" (normalized: "c:\\windows\\microsoft.net\\framework64\\v2.0.50727\\asp.netwebadminfiles\\appconfig\\editappsetting.aspx"), lpNewFileName="C:\\Windows\\Microsoft.NET\\Framework64\\v2.0.50727\\ASP.NETWebAdminFiles\\AppConfig\\EditAppSetting.aspx" (normalized: "c:\\windows\\microsoft.net\\framework64\\v2.0.50727\\asp.netwebadminfiles\\appconfig\\editappsetting.aspx")) returned 1 [0109.456] CreateFileW (lpFileName="C:\\Windows\\Microsoft.NET\\Framework64\\v2.0.50727\\ASP.NETWebAdminFiles\\AppConfig\\ManageAppSettings.aspx" (normalized: "c:\\windows\\microsoft.net\\framework64\\v2.0.50727\\asp.netwebadminfiles\\appconfig\\manageappsettings.aspx"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x178 [0109.456] GetFileType (hFile=0x178) returned 0x1 [0109.456] GetFileType (hFile=0x178) returned 0x1 [0109.456] GetFileSize (in: hFile=0x178, lpFileSizeHigh=0x31e6a0 | out: lpFileSizeHigh=0x31e6a0*=0x0) returned 0x3b5c [0109.456] ReadFile (in: hFile=0x178, lpBuffer=0x2722c18, nNumberOfBytesToRead=0x3b5c, lpNumberOfBytesRead=0x31e64c, lpOverlapped=0x0 | out: lpBuffer=0x2722c18*, lpNumberOfBytesRead=0x31e64c*=0x3b5c, lpOverlapped=0x0) returned 1 [0109.470] CreateFileW (lpFileName="C:\\Windows\\Microsoft.NET\\Framework64\\v2.0.50727\\ASP.NETWebAdminFiles\\AppConfig\\ManageAppSettings.aspx" (normalized: "c:\\windows\\microsoft.net\\framework64\\v2.0.50727\\asp.netwebadminfiles\\appconfig\\manageappsettings.aspx"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x178 [0109.471] GetFileType (hFile=0x178) returned 0x1 [0109.471] GetFileType (hFile=0x178) returned 0x1 [0109.471] WriteFile (in: hFile=0x178, lpBuffer=0x27822dc*, nNumberOfBytesToWrite=0x3b60, lpNumberOfBytesWritten=0x31e640, lpOverlapped=0x0 | out: lpBuffer=0x27822dc*, lpNumberOfBytesWritten=0x31e640*=0x3b60, lpOverlapped=0x0) returned 1 [0109.472] MoveFileW (lpExistingFileName="C:\\Windows\\Microsoft.NET\\Framework64\\v2.0.50727\\ASP.NETWebAdminFiles\\AppConfig\\ManageAppSettings.aspx" (normalized: "c:\\windows\\microsoft.net\\framework64\\v2.0.50727\\asp.netwebadminfiles\\appconfig\\manageappsettings.aspx"), lpNewFileName="C:\\Windows\\Microsoft.NET\\Framework64\\v2.0.50727\\ASP.NETWebAdminFiles\\AppConfig\\ManageAppSettings.aspx" (normalized: "c:\\windows\\microsoft.net\\framework64\\v2.0.50727\\asp.netwebadminfiles\\appconfig\\manageappsettings.aspx")) returned 1 [0109.472] CreateFileW (lpFileName="C:\\Windows\\Microsoft.NET\\Framework64\\v2.0.50727\\ASP.NETWebAdminFiles\\AppConfig\\SmtpSettings.aspx" (normalized: "c:\\windows\\microsoft.net\\framework64\\v2.0.50727\\asp.netwebadminfiles\\appconfig\\smtpsettings.aspx"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x178 [0109.475] GetFileType (hFile=0x178) returned 0x1 [0109.475] GetFileType (hFile=0x178) returned 0x1 [0109.475] GetFileSize (in: hFile=0x178, lpFileSizeHigh=0x31e6a0 | out: lpFileSizeHigh=0x31e6a0*=0x0) returned 0x457b [0109.475] ReadFile (in: hFile=0x178, lpBuffer=0x27862dc, nNumberOfBytesToRead=0x457b, lpNumberOfBytesRead=0x31e64c, lpOverlapped=0x0 | out: lpBuffer=0x27862dc*, lpNumberOfBytesRead=0x31e64c*=0x457b, lpOverlapped=0x0) returned 1 [0109.489] CreateFileW (lpFileName="C:\\Windows\\Microsoft.NET\\Framework64\\v2.0.50727\\ASP.NETWebAdminFiles\\AppConfig\\SmtpSettings.aspx" (normalized: "c:\\windows\\microsoft.net\\framework64\\v2.0.50727\\asp.netwebadminfiles\\appconfig\\smtpsettings.aspx"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x178 [0109.490] GetFileType (hFile=0x178) returned 0x1 [0109.490] GetFileType (hFile=0x178) returned 0x1 [0109.490] WriteFile (in: hFile=0x178, lpBuffer=0x27e8c44*, nNumberOfBytesToWrite=0x4580, lpNumberOfBytesWritten=0x31e640, lpOverlapped=0x0 | out: lpBuffer=0x27e8c44*, lpNumberOfBytesWritten=0x31e640*=0x4580, lpOverlapped=0x0) returned 1 [0109.491] MoveFileW (lpExistingFileName="C:\\Windows\\Microsoft.NET\\Framework64\\v2.0.50727\\ASP.NETWebAdminFiles\\AppConfig\\SmtpSettings.aspx" (normalized: "c:\\windows\\microsoft.net\\framework64\\v2.0.50727\\asp.netwebadminfiles\\appconfig\\smtpsettings.aspx"), lpNewFileName="C:\\Windows\\Microsoft.NET\\Framework64\\v2.0.50727\\ASP.NETWebAdminFiles\\AppConfig\\SmtpSettings.aspx" (normalized: "c:\\windows\\microsoft.net\\framework64\\v2.0.50727\\asp.netwebadminfiles\\appconfig\\smtpsettings.aspx")) returned 1 [0109.498] CreateFileW (lpFileName="C:\\Windows\\Microsoft.NET\\Framework64\\v2.0.50727\\ASP.NETWebAdminFiles\\App_Data\\GroupedProviders.xml" (normalized: "c:\\windows\\microsoft.net\\framework64\\v2.0.50727\\asp.netwebadminfiles\\app_data\\groupedproviders.xml"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x178 [0109.499] GetFileType (hFile=0x178) returned 0x1 [0109.499] GetFileType (hFile=0x178) returned 0x1 [0109.499] GetFileSize (in: hFile=0x178, lpFileSizeHigh=0x31e6a0 | out: lpFileSizeHigh=0x31e6a0*=0x0) returned 0x13d [0109.499] ReadFile (in: hFile=0x178, lpBuffer=0x27f70d0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x31e64c, lpOverlapped=0x0 | out: lpBuffer=0x27f70d0*, lpNumberOfBytesRead=0x31e64c*=0x13d, lpOverlapped=0x0) returned 1 [0109.512] CreateFileW (lpFileName="C:\\Windows\\Microsoft.NET\\Framework64\\v2.0.50727\\ASP.NETWebAdminFiles\\App_Data\\GroupedProviders.xml" (normalized: "c:\\windows\\microsoft.net\\framework64\\v2.0.50727\\asp.netwebadminfiles\\app_data\\groupedproviders.xml"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x178 [0109.513] GetFileType (hFile=0x178) returned 0x1 [0109.513] GetFileType (hFile=0x178) returned 0x1 [0109.513] WriteFile (in: hFile=0x178, lpBuffer=0x284566c*, nNumberOfBytesToWrite=0x140, lpNumberOfBytesWritten=0x31e614, lpOverlapped=0x0 | out: lpBuffer=0x284566c*, lpNumberOfBytesWritten=0x31e614*=0x140, lpOverlapped=0x0) returned 1 [0109.514] MoveFileW (lpExistingFileName="C:\\Windows\\Microsoft.NET\\Framework64\\v2.0.50727\\ASP.NETWebAdminFiles\\App_Data\\GroupedProviders.xml" (normalized: "c:\\windows\\microsoft.net\\framework64\\v2.0.50727\\asp.netwebadminfiles\\app_data\\groupedproviders.xml"), lpNewFileName="C:\\Windows\\Microsoft.NET\\Framework64\\v2.0.50727\\ASP.NETWebAdminFiles\\App_Data\\GroupedProviders.xml" (normalized: "c:\\windows\\microsoft.net\\framework64\\v2.0.50727\\asp.netwebadminfiles\\app_data\\groupedproviders.xml")) returned 1 [0109.521] CreateFileW (lpFileName="C:\\Windows\\Microsoft.NET\\Framework64\\v2.0.50727\\ASP.NETWebAdminFiles\\Images\\ASPdotNET_logo.jpg" (normalized: "c:\\windows\\microsoft.net\\framework64\\v2.0.50727\\asp.netwebadminfiles\\images\\aspdotnet_logo.jpg"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x178 [0109.523] GetFileType (hFile=0x178) returned 0x1 [0109.523] GetFileType (hFile=0x178) returned 0x1 [0109.523] GetFileSize (in: hFile=0x178, lpFileSizeHigh=0x31e6a0 | out: lpFileSizeHigh=0x31e6a0*=0x0) returned 0x57e4 [0109.523] ReadFile (in: hFile=0x178, lpBuffer=0x2855c28, nNumberOfBytesToRead=0x57e4, lpNumberOfBytesRead=0x31e64c, lpOverlapped=0x0 | out: lpBuffer=0x2855c28*, lpNumberOfBytesRead=0x31e64c*=0x57e4, lpOverlapped=0x0) returned 1 [0109.539] CreateFileW (lpFileName="C:\\Windows\\Microsoft.NET\\Framework64\\v2.0.50727\\ASP.NETWebAdminFiles\\Images\\ASPdotNET_logo.jpg" (normalized: "c:\\windows\\microsoft.net\\framework64\\v2.0.50727\\asp.netwebadminfiles\\images\\aspdotnet_logo.jpg"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x178 [0109.540] GetFileType (hFile=0x178) returned 0x1 [0109.540] GetFileType (hFile=0x178) returned 0x1 [0109.540] WriteFile (in: hFile=0x178, lpBuffer=0x26bdb14*, nNumberOfBytesToWrite=0x57f0, lpNumberOfBytesWritten=0x31e640, lpOverlapped=0x0 | out: lpBuffer=0x26bdb14*, lpNumberOfBytesWritten=0x31e640*=0x57f0, lpOverlapped=0x0) returned 1 [0109.541] MoveFileW (lpExistingFileName="C:\\Windows\\Microsoft.NET\\Framework64\\v2.0.50727\\ASP.NETWebAdminFiles\\Images\\ASPdotNET_logo.jpg" (normalized: "c:\\windows\\microsoft.net\\framework64\\v2.0.50727\\asp.netwebadminfiles\\images\\aspdotnet_logo.jpg"), lpNewFileName="C:\\Windows\\Microsoft.NET\\Framework64\\v2.0.50727\\ASP.NETWebAdminFiles\\Images\\ASPdotNET_logo.jpg" (normalized: "c:\\windows\\microsoft.net\\framework64\\v2.0.50727\\asp.netwebadminfiles\\images\\aspdotnet_logo.jpg")) returned 1 [0109.541] CreateFileW (lpFileName="C:\\Windows\\Microsoft.NET\\Framework64\\v2.0.50727\\ASP.NETWebAdminFiles\\Images\\darkBlue_GRAD.jpg" (normalized: "c:\\windows\\microsoft.net\\framework64\\v2.0.50727\\asp.netwebadminfiles\\images\\darkblue_grad.jpg"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x178 [0109.542] GetFileType (hFile=0x178) returned 0x1 [0109.542] GetFileType (hFile=0x178) returned 0x1 [0109.542] GetFileSize (in: hFile=0x178, lpFileSizeHigh=0x31e6a0 | out: lpFileSizeHigh=0x31e6a0*=0x0) returned 0x2044 [0109.542] ReadFile (in: hFile=0x178, lpBuffer=0x26c37a0, nNumberOfBytesToRead=0x2044, lpNumberOfBytesRead=0x31e64c, lpOverlapped=0x0 | out: lpBuffer=0x26c37a0*, lpNumberOfBytesRead=0x31e64c*=0x2044, lpOverlapped=0x0) returned 1 [0109.557] CreateFileW (lpFileName="C:\\Windows\\Microsoft.NET\\Framework64\\v2.0.50727\\ASP.NETWebAdminFiles\\Images\\darkBlue_GRAD.jpg" (normalized: "c:\\windows\\microsoft.net\\framework64\\v2.0.50727\\asp.netwebadminfiles\\images\\darkblue_grad.jpg"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x178 [0109.558] GetFileType (hFile=0x178) returned 0x1 [0109.558] GetFileType (hFile=0x178) returned 0x1 [0109.558] WriteFile (in: hFile=0x178, lpBuffer=0x271a870*, nNumberOfBytesToWrite=0x2050, lpNumberOfBytesWritten=0x31e640, lpOverlapped=0x0 | out: lpBuffer=0x271a870*, lpNumberOfBytesWritten=0x31e640*=0x2050, lpOverlapped=0x0) returned 1 [0109.559] MoveFileW (lpExistingFileName="C:\\Windows\\Microsoft.NET\\Framework64\\v2.0.50727\\ASP.NETWebAdminFiles\\Images\\darkBlue_GRAD.jpg" (normalized: "c:\\windows\\microsoft.net\\framework64\\v2.0.50727\\asp.netwebadminfiles\\images\\darkblue_grad.jpg"), lpNewFileName="C:\\Windows\\Microsoft.NET\\Framework64\\v2.0.50727\\ASP.NETWebAdminFiles\\Images\\darkBlue_GRAD.jpg" (normalized: "c:\\windows\\microsoft.net\\framework64\\v2.0.50727\\asp.netwebadminfiles\\images\\darkblue_grad.jpg")) returned 1 [0109.559] CreateFileW (lpFileName="C:\\Windows\\Microsoft.NET\\Framework64\\v2.0.50727\\ASP.NETWebAdminFiles\\Images\\help.jpg" (normalized: "c:\\windows\\microsoft.net\\framework64\\v2.0.50727\\asp.netwebadminfiles\\images\\help.jpg"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x178 [0109.560] GetFileType (hFile=0x178) returned 0x1 [0109.560] GetFileType (hFile=0x178) returned 0x1 [0109.560] GetFileSize (in: hFile=0x178, lpFileSizeHigh=0x31e6a0 | out: lpFileSizeHigh=0x31e6a0*=0x0) returned 0x581 [0109.560] ReadFile (in: hFile=0x178, lpBuffer=0x271d304, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x31e64c, lpOverlapped=0x0 | out: lpBuffer=0x271d304*, lpNumberOfBytesRead=0x31e64c*=0x581, lpOverlapped=0x0) returned 1 [0109.574] CreateFileW (lpFileName="C:\\Windows\\Microsoft.NET\\Framework64\\v2.0.50727\\ASP.NETWebAdminFiles\\Images\\help.jpg" (normalized: "c:\\windows\\microsoft.net\\framework64\\v2.0.50727\\asp.netwebadminfiles\\images\\help.jpg"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x178 [0109.575] GetFileType (hFile=0x178) returned 0x1 [0109.575] GetFileType (hFile=0x178) returned 0x1 [0109.576] MoveFileW (lpExistingFileName="C:\\Windows\\Microsoft.NET\\Framework64\\v2.0.50727\\ASP.NETWebAdminFiles\\Images\\help.jpg" (normalized: "c:\\windows\\microsoft.net\\framework64\\v2.0.50727\\asp.netwebadminfiles\\images\\help.jpg"), lpNewFileName="C:\\Windows\\Microsoft.NET\\Framework64\\v2.0.50727\\ASP.NETWebAdminFiles\\Images\\help.jpg" (normalized: "c:\\windows\\microsoft.net\\framework64\\v2.0.50727\\asp.netwebadminfiles\\images\\help.jpg")) returned 1 [0109.576] CreateFileW (lpFileName="C:\\Windows\\Microsoft.NET\\Framework64\\v2.0.50727\\ASP.NETWebAdminFiles\\Images\\security_watermark.jpg" (normalized: "c:\\windows\\microsoft.net\\framework64\\v2.0.50727\\asp.netwebadminfiles\\images\\security_watermark.jpg"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x178 [0109.577] GetFileType (hFile=0x178) returned 0x1 [0109.577] GetFileType (hFile=0x178) returned 0x1 [0109.577] GetFileSize (in: hFile=0x178, lpFileSizeHigh=0x31e6a0 | out: lpFileSizeHigh=0x31e6a0*=0x0) returned 0x31 [0109.577] ReadFile (in: hFile=0x178, lpBuffer=0x276e1a8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x31e64c, lpOverlapped=0x0 | out: lpBuffer=0x276e1a8*, lpNumberOfBytesRead=0x31e64c*=0x31, lpOverlapped=0x0) returned 1 [0109.590] CreateFileW (lpFileName="C:\\Windows\\Microsoft.NET\\Framework64\\v2.0.50727\\ASP.NETWebAdminFiles\\Images\\security_watermark.jpg" (normalized: "c:\\windows\\microsoft.net\\framework64\\v2.0.50727\\asp.netwebadminfiles\\images\\security_watermark.jpg"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x178 [0109.591] GetFileType (hFile=0x178) returned 0x1 [0109.591] GetFileType (hFile=0x178) returned 0x1 [0109.591] WriteFile (in: hFile=0x178, lpBuffer=0x27bc2b8*, nNumberOfBytesToWrite=0x40, lpNumberOfBytesWritten=0x31e614, lpOverlapped=0x0 | out: lpBuffer=0x27bc2b8*, lpNumberOfBytesWritten=0x31e614*=0x40, lpOverlapped=0x0) returned 1 [0109.592] MoveFileW (lpExistingFileName="C:\\Windows\\Microsoft.NET\\Framework64\\v2.0.50727\\ASP.NETWebAdminFiles\\Images\\security_watermark.jpg" (normalized: "c:\\windows\\microsoft.net\\framework64\\v2.0.50727\\asp.netwebadminfiles\\images\\security_watermark.jpg"), lpNewFileName="C:\\Windows\\Microsoft.NET\\Framework64\\v2.0.50727\\ASP.NETWebAdminFiles\\Images\\security_watermark.jpg" (normalized: "c:\\windows\\microsoft.net\\framework64\\v2.0.50727\\asp.netwebadminfiles\\images\\security_watermark.jpg")) returned 1 [0109.592] CreateFileW (lpFileName="C:\\Windows\\Microsoft.NET\\Framework64\\v2.0.50727\\ASP.NETWebAdminFiles\\Images\\topGradRepeat.jpg" (normalized: "c:\\windows\\microsoft.net\\framework64\\v2.0.50727\\asp.netwebadminfiles\\images\\topgradrepeat.jpg"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x178 [0109.594] GetFileType (hFile=0x178) returned 0x1 [0109.594] GetFileType (hFile=0x178) returned 0x1 [0109.594] GetFileSize (in: hFile=0x178, lpFileSizeHigh=0x31e6a0 | out: lpFileSizeHigh=0x31e6a0*=0x0) returned 0x21eb [0109.594] ReadFile (in: hFile=0x178, lpBuffer=0x27bd620, nNumberOfBytesToRead=0x21eb, lpNumberOfBytesRead=0x31e64c, lpOverlapped=0x0 | out: lpBuffer=0x27bd620*, lpNumberOfBytesRead=0x31e64c*=0x21eb, lpOverlapped=0x0) returned 1 [0109.608] CreateFileW (lpFileName="C:\\Windows\\Microsoft.NET\\Framework64\\v2.0.50727\\ASP.NETWebAdminFiles\\Images\\topGradRepeat.jpg" (normalized: "c:\\windows\\microsoft.net\\framework64\\v2.0.50727\\asp.netwebadminfiles\\images\\topgradrepeat.jpg"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x178 [0109.609] GetFileType (hFile=0x178) returned 0x1 [0109.609] GetFileType (hFile=0x178) returned 0x1 [0109.609] WriteFile (in: hFile=0x178, lpBuffer=0x2814db8*, nNumberOfBytesToWrite=0x21f0, lpNumberOfBytesWritten=0x31e640, lpOverlapped=0x0 | out: lpBuffer=0x2814db8*, lpNumberOfBytesWritten=0x31e640*=0x21f0, lpOverlapped=0x0) returned 1 [0109.610] MoveFileW (lpExistingFileName="C:\\Windows\\Microsoft.NET\\Framework64\\v2.0.50727\\ASP.NETWebAdminFiles\\Images\\topGradRepeat.jpg" (normalized: "c:\\windows\\microsoft.net\\framework64\\v2.0.50727\\asp.netwebadminfiles\\images\\topgradrepeat.jpg"), lpNewFileName="C:\\Windows\\Microsoft.NET\\Framework64\\v2.0.50727\\ASP.NETWebAdminFiles\\Images\\topGradRepeat.jpg" (normalized: "c:\\windows\\microsoft.net\\framework64\\v2.0.50727\\asp.netwebadminfiles\\images\\topgradrepeat.jpg")) returned 1 [0109.614] CreateFileW (lpFileName="C:\\Windows\\Microsoft.NET\\Framework64\\v2.0.50727\\ASP.NETWebAdminFiles\\Providers\\chooseProviderManagement.aspx" (normalized: "c:\\windows\\microsoft.net\\framework64\\v2.0.50727\\asp.netwebadminfiles\\providers\\chooseprovidermanagement.aspx"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x178 [0109.615] GetFileType (hFile=0x178) returned 0x1 [0109.615] GetFileType (hFile=0x178) returned 0x1 [0109.615] GetFileSize (in: hFile=0x178, lpFileSizeHigh=0x31e6a0 | out: lpFileSizeHigh=0x31e6a0*=0x0) returned 0x99e [0109.615] ReadFile (in: hFile=0x178, lpBuffer=0x281ad38, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x31e64c, lpOverlapped=0x0 | out: lpBuffer=0x281ad38*, lpNumberOfBytesRead=0x31e64c*=0x99e, lpOverlapped=0x0) returned 1 [0109.631] CreateFileW (lpFileName="C:\\Windows\\Microsoft.NET\\Framework64\\v2.0.50727\\ASP.NETWebAdminFiles\\Providers\\chooseProviderManagement.aspx" (normalized: "c:\\windows\\microsoft.net\\framework64\\v2.0.50727\\asp.netwebadminfiles\\providers\\chooseprovidermanagement.aspx"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x178 [0109.632] GetFileType (hFile=0x178) returned 0x1 [0109.632] GetFileType (hFile=0x178) returned 0x1 [0109.633] MoveFileW (lpExistingFileName="C:\\Windows\\Microsoft.NET\\Framework64\\v2.0.50727\\ASP.NETWebAdminFiles\\Providers\\chooseProviderManagement.aspx" (normalized: "c:\\windows\\microsoft.net\\framework64\\v2.0.50727\\asp.netwebadminfiles\\providers\\chooseprovidermanagement.aspx"), lpNewFileName="C:\\Windows\\Microsoft.NET\\Framework64\\v2.0.50727\\ASP.NETWebAdminFiles\\Providers\\chooseProviderManagement.aspx" (normalized: "c:\\windows\\microsoft.net\\framework64\\v2.0.50727\\asp.netwebadminfiles\\providers\\chooseprovidermanagement.aspx")) returned 1 [0109.633] CreateFileW (lpFileName="C:\\Windows\\Microsoft.NET\\Framework64\\v2.0.50727\\ASP.NETWebAdminFiles\\Providers\\ManageConsolidatedProviders.aspx" (normalized: "c:\\windows\\microsoft.net\\framework64\\v2.0.50727\\asp.netwebadminfiles\\providers\\manageconsolidatedproviders.aspx"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x178 [0109.634] GetFileType (hFile=0x178) returned 0x1 [0109.634] GetFileType (hFile=0x178) returned 0x1 [0109.634] GetFileSize (in: hFile=0x178, lpFileSizeHigh=0x31e6a0 | out: lpFileSizeHigh=0x31e6a0*=0x0) returned 0x3133 [0109.634] ReadFile (in: hFile=0x178, lpBuffer=0x26672e4, nNumberOfBytesToRead=0x3133, lpNumberOfBytesRead=0x31e64c, lpOverlapped=0x0 | out: lpBuffer=0x26672e4*, lpNumberOfBytesRead=0x31e64c*=0x3133, lpOverlapped=0x0) returned 1 [0109.649] CreateFileW (lpFileName="C:\\Windows\\Microsoft.NET\\Framework64\\v2.0.50727\\ASP.NETWebAdminFiles\\Providers\\ManageConsolidatedProviders.aspx" (normalized: "c:\\windows\\microsoft.net\\framework64\\v2.0.50727\\asp.netwebadminfiles\\providers\\manageconsolidatedproviders.aspx"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x178 [0109.650] GetFileType (hFile=0x178) returned 0x1 [0109.650] GetFileType (hFile=0x178) returned 0x1 [0109.650] WriteFile (in: hFile=0x178, lpBuffer=0x26c3868*, nNumberOfBytesToWrite=0x3140, lpNumberOfBytesWritten=0x31e640, lpOverlapped=0x0 | out: lpBuffer=0x26c3868*, lpNumberOfBytesWritten=0x31e640*=0x3140, lpOverlapped=0x0) returned 1 [0109.651] MoveFileW (lpExistingFileName="C:\\Windows\\Microsoft.NET\\Framework64\\v2.0.50727\\ASP.NETWebAdminFiles\\Providers\\ManageConsolidatedProviders.aspx" (normalized: "c:\\windows\\microsoft.net\\framework64\\v2.0.50727\\asp.netwebadminfiles\\providers\\manageconsolidatedproviders.aspx"), lpNewFileName="C:\\Windows\\Microsoft.NET\\Framework64\\v2.0.50727\\ASP.NETWebAdminFiles\\Providers\\ManageConsolidatedProviders.aspx" (normalized: "c:\\windows\\microsoft.net\\framework64\\v2.0.50727\\asp.netwebadminfiles\\providers\\manageconsolidatedproviders.aspx")) returned 1 [0109.652] CreateFileW (lpFileName="C:\\Windows\\Microsoft.NET\\Framework64\\v2.0.50727\\ASP.NETWebAdminFiles\\Providers\\ManageProviders.aspx" (normalized: "c:\\windows\\microsoft.net\\framework64\\v2.0.50727\\asp.netwebadminfiles\\providers\\manageproviders.aspx"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x178 [0109.652] GetFileType (hFile=0x178) returned 0x1 [0109.652] GetFileType (hFile=0x178) returned 0x1 [0109.652] GetFileSize (in: hFile=0x178, lpFileSizeHigh=0x31e6a0 | out: lpFileSizeHigh=0x31e6a0*=0x0) returned 0x25f1 [0109.652] ReadFile (in: hFile=0x178, lpBuffer=0x26c6ea4, nNumberOfBytesToRead=0x25f1, lpNumberOfBytesRead=0x31e64c, lpOverlapped=0x0 | out: lpBuffer=0x26c6ea4*, lpNumberOfBytesRead=0x31e64c*=0x25f1, lpOverlapped=0x0) returned 1 [0109.666] CreateFileW (lpFileName="C:\\Windows\\Microsoft.NET\\Framework64\\v2.0.50727\\ASP.NETWebAdminFiles\\Providers\\ManageProviders.aspx" (normalized: "c:\\windows\\microsoft.net\\framework64\\v2.0.50727\\asp.netwebadminfiles\\providers\\manageproviders.aspx"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x178 [0109.667] GetFileType (hFile=0x178) returned 0x1 [0109.667] GetFileType (hFile=0x178) returned 0x1 [0109.667] WriteFile (in: hFile=0x178, lpBuffer=0x271fa8c*, nNumberOfBytesToWrite=0x2600, lpNumberOfBytesWritten=0x31e640, lpOverlapped=0x0 | out: lpBuffer=0x271fa8c*, lpNumberOfBytesWritten=0x31e640*=0x2600, lpOverlapped=0x0) returned 1 [0109.668] MoveFileW (lpExistingFileName="C:\\Windows\\Microsoft.NET\\Framework64\\v2.0.50727\\ASP.NETWebAdminFiles\\Providers\\ManageProviders.aspx" (normalized: "c:\\windows\\microsoft.net\\framework64\\v2.0.50727\\asp.netwebadminfiles\\providers\\manageproviders.aspx"), lpNewFileName="C:\\Windows\\Microsoft.NET\\Framework64\\v2.0.50727\\ASP.NETWebAdminFiles\\Providers\\ManageProviders.aspx" (normalized: "c:\\windows\\microsoft.net\\framework64\\v2.0.50727\\asp.netwebadminfiles\\providers\\manageproviders.aspx")) returned 1 [0109.676] CreateFileW (lpFileName="C:\\Windows\\Microsoft.NET\\Framework64\\v2.0.50727\\ASP.NETWebAdminFiles\\Security\\security.aspx" (normalized: "c:\\windows\\microsoft.net\\framework64\\v2.0.50727\\asp.netwebadminfiles\\security\\security.aspx"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x178 [0109.677] GetFileType (hFile=0x178) returned 0x1 [0109.677] GetFileType (hFile=0x178) returned 0x1 [0109.677] GetFileSize (in: hFile=0x178, lpFileSizeHigh=0x31e6a0 | out: lpFileSizeHigh=0x31e6a0*=0x0) returned 0x276e [0109.677] ReadFile (in: hFile=0x178, lpBuffer=0x2728e60, nNumberOfBytesToRead=0x276e, lpNumberOfBytesRead=0x31e64c, lpOverlapped=0x0 | out: lpBuffer=0x2728e60*, lpNumberOfBytesRead=0x31e64c*=0x276e, lpOverlapped=0x0) returned 1 [0109.691] CreateFileW (lpFileName="C:\\Windows\\Microsoft.NET\\Framework64\\v2.0.50727\\ASP.NETWebAdminFiles\\Security\\security.aspx" (normalized: "c:\\windows\\microsoft.net\\framework64\\v2.0.50727\\asp.netwebadminfiles\\security\\security.aspx"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x178 [0109.692] GetFileType (hFile=0x178) returned 0x1 [0109.692] GetFileType (hFile=0x178) returned 0x1 [0109.692] WriteFile (in: hFile=0x178, lpBuffer=0x2782178*, nNumberOfBytesToWrite=0x2770, lpNumberOfBytesWritten=0x31e640, lpOverlapped=0x0 | out: lpBuffer=0x2782178*, lpNumberOfBytesWritten=0x31e640*=0x2770, lpOverlapped=0x0) returned 1 [0109.693] MoveFileW (lpExistingFileName="C:\\Windows\\Microsoft.NET\\Framework64\\v2.0.50727\\ASP.NETWebAdminFiles\\Security\\security.aspx" (normalized: "c:\\windows\\microsoft.net\\framework64\\v2.0.50727\\asp.netwebadminfiles\\security\\security.aspx"), lpNewFileName="C:\\Windows\\Microsoft.NET\\Framework64\\v2.0.50727\\ASP.NETWebAdminFiles\\Security\\security.aspx" (normalized: "c:\\windows\\microsoft.net\\framework64\\v2.0.50727\\asp.netwebadminfiles\\security\\security.aspx")) returned 1 [0109.693] CreateFileW (lpFileName="C:\\Windows\\Microsoft.NET\\Framework64\\v2.0.50727\\ASP.NETWebAdminFiles\\Security\\security0.aspx" (normalized: "c:\\windows\\microsoft.net\\framework64\\v2.0.50727\\asp.netwebadminfiles\\security\\security0.aspx"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x178 [0109.694] GetFileType (hFile=0x178) returned 0x1 [0109.694] GetFileType (hFile=0x178) returned 0x1 [0109.694] GetFileSize (in: hFile=0x178, lpFileSizeHigh=0x31e6a0 | out: lpFileSizeHigh=0x31e6a0*=0x0) returned 0x5a7 [0109.694] ReadFile (in: hFile=0x178, lpBuffer=0x27852e0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x31e64c, lpOverlapped=0x0 | out: lpBuffer=0x27852e0*, lpNumberOfBytesRead=0x31e64c*=0x5a7, lpOverlapped=0x0) returned 1 [0109.708] CreateFileW (lpFileName="C:\\Windows\\Microsoft.NET\\Framework64\\v2.0.50727\\ASP.NETWebAdminFiles\\Security\\security0.aspx" (normalized: "c:\\windows\\microsoft.net\\framework64\\v2.0.50727\\asp.netwebadminfiles\\security\\security0.aspx"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x178 [0109.709] GetFileType (hFile=0x178) returned 0x1 [0109.709] GetFileType (hFile=0x178) returned 0x1 [0109.710] MoveFileW (lpExistingFileName="C:\\Windows\\Microsoft.NET\\Framework64\\v2.0.50727\\ASP.NETWebAdminFiles\\Security\\security0.aspx" (normalized: "c:\\windows\\microsoft.net\\framework64\\v2.0.50727\\asp.netwebadminfiles\\security\\security0.aspx"), lpNewFileName="C:\\Windows\\Microsoft.NET\\Framework64\\v2.0.50727\\ASP.NETWebAdminFiles\\Security\\security0.aspx" (normalized: "c:\\windows\\microsoft.net\\framework64\\v2.0.50727\\asp.netwebadminfiles\\security\\security0.aspx")) returned 1 [0109.710] CreateFileW (lpFileName="C:\\Windows\\Microsoft.NET\\Framework64\\v2.0.50727\\ASP.NETWebAdminFiles\\Security\\setUpAuthentication.aspx" (normalized: "c:\\windows\\microsoft.net\\framework64\\v2.0.50727\\asp.netwebadminfiles\\security\\setupauthentication.aspx"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x178 [0109.710] GetFileType (hFile=0x178) returned 0x1 [0109.710] GetFileType (hFile=0x178) returned 0x1 [0109.710] GetFileSize (in: hFile=0x178, lpFileSizeHigh=0x31e6a0 | out: lpFileSizeHigh=0x31e6a0*=0x0) returned 0xa04 [0109.710] ReadFile (in: hFile=0x178, lpBuffer=0x27d6bd8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x31e64c, lpOverlapped=0x0 | out: lpBuffer=0x27d6bd8*, lpNumberOfBytesRead=0x31e64c*=0xa04, lpOverlapped=0x0) returned 1 [0109.724] CreateFileW (lpFileName="C:\\Windows\\Microsoft.NET\\Framework64\\v2.0.50727\\ASP.NETWebAdminFiles\\Security\\setUpAuthentication.aspx" (normalized: "c:\\windows\\microsoft.net\\framework64\\v2.0.50727\\asp.netwebadminfiles\\security\\setupauthentication.aspx"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x178 [0109.725] GetFileType (hFile=0x178) returned 0x1 [0109.725] GetFileType (hFile=0x178) returned 0x1 [0109.725] WriteFile (in: hFile=0x178, lpBuffer=0x2827d9c*, nNumberOfBytesToWrite=0xa10, lpNumberOfBytesWritten=0x31e614, lpOverlapped=0x0 | out: lpBuffer=0x2827d9c*, lpNumberOfBytesWritten=0x31e614*=0xa10, lpOverlapped=0x0) returned 1 [0109.726] MoveFileW (lpExistingFileName="C:\\Windows\\Microsoft.NET\\Framework64\\v2.0.50727\\ASP.NETWebAdminFiles\\Security\\setUpAuthentication.aspx" (normalized: "c:\\windows\\microsoft.net\\framework64\\v2.0.50727\\asp.netwebadminfiles\\security\\setupauthentication.aspx"), lpNewFileName="C:\\Windows\\Microsoft.NET\\Framework64\\v2.0.50727\\ASP.NETWebAdminFiles\\Security\\setUpAuthentication.aspx" (normalized: "c:\\windows\\microsoft.net\\framework64\\v2.0.50727\\asp.netwebadminfiles\\security\\setupauthentication.aspx")) returned 1 [0109.733] CreateFileW (lpFileName="C:\\Windows\\Microsoft.NET\\Framework64\\v2.0.50727\\ASP.NETWebAdminFiles\\Security\\Permissions\\createPermission.aspx" (normalized: "c:\\windows\\microsoft.net\\framework64\\v2.0.50727\\asp.netwebadminfiles\\security\\permissions\\createpermission.aspx"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x178 [0109.735] GetFileType (hFile=0x178) returned 0x1 [0109.735] GetFileType (hFile=0x178) returned 0x1 [0109.735] GetFileSize (in: hFile=0x178, lpFileSizeHigh=0x31e628 | out: lpFileSizeHigh=0x31e628*=0x0) returned 0x2af8 [0109.735] ReadFile (in: hFile=0x178, lpBuffer=0x282e4e8, nNumberOfBytesToRead=0x2af8, lpNumberOfBytesRead=0x31e5d4, lpOverlapped=0x0 | out: lpBuffer=0x282e4e8*, lpNumberOfBytesRead=0x31e5d4*=0x2af8, lpOverlapped=0x0) returned 1 [0109.752] CreateFileW (lpFileName="C:\\Windows\\Microsoft.NET\\Framework64\\v2.0.50727\\ASP.NETWebAdminFiles\\Security\\Permissions\\createPermission.aspx" (normalized: "c:\\windows\\microsoft.net\\framework64\\v2.0.50727\\asp.netwebadminfiles\\security\\permissions\\createpermission.aspx"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x178 [0109.753] GetFileType (hFile=0x178) returned 0x1 [0109.753] GetFileType (hFile=0x178) returned 0x1 [0109.753] WriteFile (in: hFile=0x178, lpBuffer=0x268b0a0*, nNumberOfBytesToWrite=0x2b00, lpNumberOfBytesWritten=0x31e5c8, lpOverlapped=0x0 | out: lpBuffer=0x268b0a0*, lpNumberOfBytesWritten=0x31e5c8*=0x2b00, lpOverlapped=0x0) returned 1 [0109.754] MoveFileW (lpExistingFileName="C:\\Windows\\Microsoft.NET\\Framework64\\v2.0.50727\\ASP.NETWebAdminFiles\\Security\\Permissions\\createPermission.aspx" (normalized: "c:\\windows\\microsoft.net\\framework64\\v2.0.50727\\asp.netwebadminfiles\\security\\permissions\\createpermission.aspx"), lpNewFileName="C:\\Windows\\Microsoft.NET\\Framework64\\v2.0.50727\\ASP.NETWebAdminFiles\\Security\\Permissions\\createPermission.aspx" (normalized: "c:\\windows\\microsoft.net\\framework64\\v2.0.50727\\asp.netwebadminfiles\\security\\permissions\\createpermission.aspx")) returned 1 [0109.754] CreateFileW (lpFileName="C:\\Windows\\Microsoft.NET\\Framework64\\v2.0.50727\\ASP.NETWebAdminFiles\\Security\\Permissions\\managePermissions.aspx" (normalized: "c:\\windows\\microsoft.net\\framework64\\v2.0.50727\\asp.netwebadminfiles\\security\\permissions\\managepermissions.aspx"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x178 [0109.754] GetFileType (hFile=0x178) returned 0x1 [0109.754] GetFileType (hFile=0x178) returned 0x1 [0109.754] GetFileSize (in: hFile=0x178, lpFileSizeHigh=0x31e628 | out: lpFileSizeHigh=0x31e628*=0x0) returned 0x5463 [0109.754] ReadFile (in: hFile=0x178, lpBuffer=0x268e0a4, nNumberOfBytesToRead=0x5463, lpNumberOfBytesRead=0x31e5d4, lpOverlapped=0x0 | out: lpBuffer=0x268e0a4*, lpNumberOfBytesRead=0x31e5d4*=0x5463, lpOverlapped=0x0) returned 1 [0109.769] CreateFileW (lpFileName="C:\\Windows\\Microsoft.NET\\Framework64\\v2.0.50727\\ASP.NETWebAdminFiles\\Security\\Permissions\\managePermissions.aspx" (normalized: "c:\\windows\\microsoft.net\\framework64\\v2.0.50727\\asp.netwebadminfiles\\security\\permissions\\managepermissions.aspx"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x178 [0109.770] GetFileType (hFile=0x178) returned 0x1 [0109.770] GetFileType (hFile=0x178) returned 0x1 [0109.770] WriteFile (in: hFile=0x178, lpBuffer=0x26f5618*, nNumberOfBytesToWrite=0x5470, lpNumberOfBytesWritten=0x31e5c8, lpOverlapped=0x0 | out: lpBuffer=0x26f5618*, lpNumberOfBytesWritten=0x31e5c8*=0x5470, lpOverlapped=0x0) returned 1 [0109.771] MoveFileW (lpExistingFileName="C:\\Windows\\Microsoft.NET\\Framework64\\v2.0.50727\\ASP.NETWebAdminFiles\\Security\\Permissions\\managePermissions.aspx" (normalized: "c:\\windows\\microsoft.net\\framework64\\v2.0.50727\\asp.netwebadminfiles\\security\\permissions\\managepermissions.aspx"), lpNewFileName="C:\\Windows\\Microsoft.NET\\Framework64\\v2.0.50727\\ASP.NETWebAdminFiles\\Security\\Permissions\\managePermissions.aspx" (normalized: "c:\\windows\\microsoft.net\\framework64\\v2.0.50727\\asp.netwebadminfiles\\security\\permissions\\managepermissions.aspx")) returned 1 [0109.775] CreateFileW (lpFileName="C:\\Windows\\Microsoft.NET\\Framework64\\v2.0.50727\\ASP.NETWebAdminFiles\\Security\\Roles\\manageAllRoles.aspx" (normalized: "c:\\windows\\microsoft.net\\framework64\\v2.0.50727\\asp.netwebadminfiles\\security\\roles\\manageallroles.aspx"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x178 [0109.776] GetFileType (hFile=0x178) returned 0x1 [0109.776] GetFileType (hFile=0x178) returned 0x1 [0109.776] GetFileSize (in: hFile=0x178, lpFileSizeHigh=0x31e628 | out: lpFileSizeHigh=0x31e628*=0x0) returned 0x1c26 [0109.776] ReadFile (in: hFile=0x178, lpBuffer=0x26fffd0, nNumberOfBytesToRead=0x1c26, lpNumberOfBytesRead=0x31e5d4, lpOverlapped=0x0 | out: lpBuffer=0x26fffd0*, lpNumberOfBytesRead=0x31e5d4*=0x1c26, lpOverlapped=0x0) returned 1 [0109.790] CreateFileW (lpFileName="C:\\Windows\\Microsoft.NET\\Framework64\\v2.0.50727\\ASP.NETWebAdminFiles\\Security\\Roles\\manageAllRoles.aspx" (normalized: "c:\\windows\\microsoft.net\\framework64\\v2.0.50727\\asp.netwebadminfiles\\security\\roles\\manageallroles.aspx"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x178 [0109.791] GetFileType (hFile=0x178) returned 0x1 [0109.791] GetFileType (hFile=0x178) returned 0x1 [0109.791] WriteFile (in: hFile=0x178, lpBuffer=0x2755aa8*, nNumberOfBytesToWrite=0x1c30, lpNumberOfBytesWritten=0x31e5c8, lpOverlapped=0x0 | out: lpBuffer=0x2755aa8*, lpNumberOfBytesWritten=0x31e5c8*=0x1c30, lpOverlapped=0x0) returned 1 [0109.792] MoveFileW (lpExistingFileName="C:\\Windows\\Microsoft.NET\\Framework64\\v2.0.50727\\ASP.NETWebAdminFiles\\Security\\Roles\\manageAllRoles.aspx" (normalized: "c:\\windows\\microsoft.net\\framework64\\v2.0.50727\\asp.netwebadminfiles\\security\\roles\\manageallroles.aspx"), lpNewFileName="C:\\Windows\\Microsoft.NET\\Framework64\\v2.0.50727\\ASP.NETWebAdminFiles\\Security\\Roles\\manageAllRoles.aspx" (normalized: "c:\\windows\\microsoft.net\\framework64\\v2.0.50727\\asp.netwebadminfiles\\security\\roles\\manageallroles.aspx")) returned 1 [0109.793] CreateFileW (lpFileName="C:\\Windows\\Microsoft.NET\\Framework64\\v2.0.50727\\ASP.NETWebAdminFiles\\Security\\Roles\\manageSingleRole.aspx" (normalized: "c:\\windows\\microsoft.net\\framework64\\v2.0.50727\\asp.netwebadminfiles\\security\\roles\\managesinglerole.aspx"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x178 [0109.793] GetFileType (hFile=0x178) returned 0x1 [0109.793] GetFileType (hFile=0x178) returned 0x1 [0109.793] GetFileSize (in: hFile=0x178, lpFileSizeHigh=0x31e628 | out: lpFileSizeHigh=0x31e628*=0x0) returned 0x2536 [0109.793] ReadFile (in: hFile=0x178, lpBuffer=0x2757b94, nNumberOfBytesToRead=0x2536, lpNumberOfBytesRead=0x31e5d4, lpOverlapped=0x0 | out: lpBuffer=0x2757b94*, lpNumberOfBytesRead=0x31e5d4*=0x2536, lpOverlapped=0x0) returned 1 [0109.808] CreateFileW (lpFileName="C:\\Windows\\Microsoft.NET\\Framework64\\v2.0.50727\\ASP.NETWebAdminFiles\\Security\\Roles\\manageSingleRole.aspx" (normalized: "c:\\windows\\microsoft.net\\framework64\\v2.0.50727\\asp.netwebadminfiles\\security\\roles\\managesinglerole.aspx"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x178 [0109.809] GetFileType (hFile=0x178) returned 0x1 [0109.809] GetFileType (hFile=0x178) returned 0x1 [0109.809] WriteFile (in: hFile=0x178, lpBuffer=0x27b03bc*, nNumberOfBytesToWrite=0x2540, lpNumberOfBytesWritten=0x31e5c8, lpOverlapped=0x0 | out: lpBuffer=0x27b03bc*, lpNumberOfBytesWritten=0x31e5c8*=0x2540, lpOverlapped=0x0) returned 1 [0109.810] MoveFileW (lpExistingFileName="C:\\Windows\\Microsoft.NET\\Framework64\\v2.0.50727\\ASP.NETWebAdminFiles\\Security\\Roles\\manageSingleRole.aspx" (normalized: "c:\\windows\\microsoft.net\\framework64\\v2.0.50727\\asp.netwebadminfiles\\security\\roles\\managesinglerole.aspx"), lpNewFileName="C:\\Windows\\Microsoft.NET\\Framework64\\v2.0.50727\\ASP.NETWebAdminFiles\\Security\\Roles\\manageSingleRole.aspx" (normalized: "c:\\windows\\microsoft.net\\framework64\\v2.0.50727\\asp.netwebadminfiles\\security\\roles\\managesinglerole.aspx")) returned 1 [0109.814] CreateFileW (lpFileName="C:\\Windows\\Microsoft.NET\\Framework64\\v2.0.50727\\ASP.NETWebAdminFiles\\Security\\Users\\addUser.aspx" (normalized: "c:\\windows\\microsoft.net\\framework64\\v2.0.50727\\asp.netwebadminfiles\\security\\users\\adduser.aspx"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x178 [0109.815] GetFileType (hFile=0x178) returned 0x1 [0109.815] GetFileType (hFile=0x178) returned 0x1 [0109.815] GetFileSize (in: hFile=0x178, lpFileSizeHigh=0x31e628 | out: lpFileSizeHigh=0x31e628*=0x0) returned 0x14b4 [0109.815] ReadFile (in: hFile=0x178, lpBuffer=0x27b8460, nNumberOfBytesToRead=0x14b4, lpNumberOfBytesRead=0x31e5d4, lpOverlapped=0x0 | out: lpBuffer=0x27b8460*, lpNumberOfBytesRead=0x31e5d4*=0x14b4, lpOverlapped=0x0) returned 1 [0109.882] CreateFileW (lpFileName="C:\\Windows\\Microsoft.NET\\Framework64\\v2.0.50727\\ASP.NETWebAdminFiles\\Security\\Users\\addUser.aspx" (normalized: "c:\\windows\\microsoft.net\\framework64\\v2.0.50727\\asp.netwebadminfiles\\security\\users\\adduser.aspx"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x178 [0109.884] GetFileType (hFile=0x178) returned 0x1 [0109.884] GetFileType (hFile=0x178) returned 0x1 [0109.884] WriteFile (in: hFile=0x178, lpBuffer=0x280ba04*, nNumberOfBytesToWrite=0x14c0, lpNumberOfBytesWritten=0x31e5c8, lpOverlapped=0x0 | out: lpBuffer=0x280ba04*, lpNumberOfBytesWritten=0x31e5c8*=0x14c0, lpOverlapped=0x0) returned 1 [0109.885] MoveFileW (lpExistingFileName="C:\\Windows\\Microsoft.NET\\Framework64\\v2.0.50727\\ASP.NETWebAdminFiles\\Security\\Users\\addUser.aspx" (normalized: "c:\\windows\\microsoft.net\\framework64\\v2.0.50727\\asp.netwebadminfiles\\security\\users\\adduser.aspx"), lpNewFileName="C:\\Windows\\Microsoft.NET\\Framework64\\v2.0.50727\\ASP.NETWebAdminFiles\\Security\\Users\\addUser.aspx" (normalized: "c:\\windows\\microsoft.net\\framework64\\v2.0.50727\\asp.netwebadminfiles\\security\\users\\adduser.aspx")) returned 1 [0109.885] CreateFileW (lpFileName="C:\\Windows\\Microsoft.NET\\Framework64\\v2.0.50727\\ASP.NETWebAdminFiles\\Security\\Users\\editUser.aspx" (normalized: "c:\\windows\\microsoft.net\\framework64\\v2.0.50727\\asp.netwebadminfiles\\security\\users\\edituser.aspx"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x178 [0109.885] GetFileType (hFile=0x178) returned 0x1 [0109.885] GetFileType (hFile=0x178) returned 0x1 [0109.885] GetFileSize (in: hFile=0x178, lpFileSizeHigh=0x31e628 | out: lpFileSizeHigh=0x31e628*=0x0) returned 0x2ee6 [0109.885] ReadFile (in: hFile=0x178, lpBuffer=0x280d330, nNumberOfBytesToRead=0x2ee6, lpNumberOfBytesRead=0x31e5d4, lpOverlapped=0x0 | out: lpBuffer=0x280d330*, lpNumberOfBytesRead=0x31e5d4*=0x2ee6, lpOverlapped=0x0) returned 1 [0109.902] CreateFileW (lpFileName="C:\\Windows\\Microsoft.NET\\Framework64\\v2.0.50727\\ASP.NETWebAdminFiles\\Security\\Users\\editUser.aspx" (normalized: "c:\\windows\\microsoft.net\\framework64\\v2.0.50727\\asp.netwebadminfiles\\security\\users\\edituser.aspx"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x178 [0109.904] GetFileType (hFile=0x178) returned 0x1 [0109.904] GetFileType (hFile=0x178) returned 0x1 [0109.904] WriteFile (in: hFile=0x178, lpBuffer=0x266913c*, nNumberOfBytesToWrite=0x2ef0, lpNumberOfBytesWritten=0x31e5c8, lpOverlapped=0x0 | out: lpBuffer=0x266913c*, lpNumberOfBytesWritten=0x31e5c8*=0x2ef0, lpOverlapped=0x0) returned 1 [0109.905] MoveFileW (lpExistingFileName="C:\\Windows\\Microsoft.NET\\Framework64\\v2.0.50727\\ASP.NETWebAdminFiles\\Security\\Users\\editUser.aspx" (normalized: "c:\\windows\\microsoft.net\\framework64\\v2.0.50727\\asp.netwebadminfiles\\security\\users\\edituser.aspx"), lpNewFileName="C:\\Windows\\Microsoft.NET\\Framework64\\v2.0.50727\\ASP.NETWebAdminFiles\\Security\\Users\\editUser.aspx" (normalized: "c:\\windows\\microsoft.net\\framework64\\v2.0.50727\\asp.netwebadminfiles\\security\\users\\edituser.aspx")) returned 1 [0109.905] CreateFileW (lpFileName="C:\\Windows\\Microsoft.NET\\Framework64\\v2.0.50727\\ASP.NETWebAdminFiles\\Security\\Users\\findUsers.aspx" (normalized: "c:\\windows\\microsoft.net\\framework64\\v2.0.50727\\asp.netwebadminfiles\\security\\users\\findusers.aspx"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x178 [0109.906] GetFileType (hFile=0x178) returned 0x1 [0109.906] GetFileType (hFile=0x178) returned 0x1 [0109.906] GetFileSize (in: hFile=0x178, lpFileSizeHigh=0x31e628 | out: lpFileSizeHigh=0x31e628*=0x0) returned 0x1f2b [0109.906] ReadFile (in: hFile=0x178, lpBuffer=0x266c4a0, nNumberOfBytesToRead=0x1f2b, lpNumberOfBytesRead=0x31e5d4, lpOverlapped=0x0 | out: lpBuffer=0x266c4a0*, lpNumberOfBytesRead=0x31e5d4*=0x1f2b, lpOverlapped=0x0) returned 1 [0109.921] CreateFileW (lpFileName="C:\\Windows\\Microsoft.NET\\Framework64\\v2.0.50727\\ASP.NETWebAdminFiles\\Security\\Users\\findUsers.aspx" (normalized: "c:\\windows\\microsoft.net\\framework64\\v2.0.50727\\asp.netwebadminfiles\\security\\users\\findusers.aspx"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x178 [0109.922] GetFileType (hFile=0x178) returned 0x1 [0109.922] GetFileType (hFile=0x178) returned 0x1 [0109.922] WriteFile (in: hFile=0x178, lpBuffer=0x26c2fd4*, nNumberOfBytesToWrite=0x1f30, lpNumberOfBytesWritten=0x31e5c8, lpOverlapped=0x0 | out: lpBuffer=0x26c2fd4*, lpNumberOfBytesWritten=0x31e5c8*=0x1f30, lpOverlapped=0x0) returned 1 [0109.923] MoveFileW (lpExistingFileName="C:\\Windows\\Microsoft.NET\\Framework64\\v2.0.50727\\ASP.NETWebAdminFiles\\Security\\Users\\findUsers.aspx" (normalized: "c:\\windows\\microsoft.net\\framework64\\v2.0.50727\\asp.netwebadminfiles\\security\\users\\findusers.aspx"), lpNewFileName="C:\\Windows\\Microsoft.NET\\Framework64\\v2.0.50727\\ASP.NETWebAdminFiles\\Security\\Users\\findUsers.aspx" (normalized: "c:\\windows\\microsoft.net\\framework64\\v2.0.50727\\asp.netwebadminfiles\\security\\users\\findusers.aspx")) returned 1 [0109.924] CreateFileW (lpFileName="C:\\Windows\\Microsoft.NET\\Framework64\\v2.0.50727\\ASP.NETWebAdminFiles\\Security\\Users\\manageUsers.aspx" (normalized: "c:\\windows\\microsoft.net\\framework64\\v2.0.50727\\asp.netwebadminfiles\\security\\users\\manageusers.aspx"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x178 [0109.924] GetFileType (hFile=0x178) returned 0x1 [0109.924] GetFileType (hFile=0x178) returned 0x1 [0109.924] GetFileSize (in: hFile=0x178, lpFileSizeHigh=0x31e628 | out: lpFileSizeHigh=0x31e628*=0x0) returned 0x3b53 [0109.924] ReadFile (in: hFile=0x178, lpBuffer=0x26c5390, nNumberOfBytesToRead=0x3b53, lpNumberOfBytesRead=0x31e5d4, lpOverlapped=0x0 | out: lpBuffer=0x26c5390*, lpNumberOfBytesRead=0x31e5d4*=0x3b53, lpOverlapped=0x0) returned 1 [0109.939] CreateFileW (lpFileName="C:\\Windows\\Microsoft.NET\\Framework64\\v2.0.50727\\ASP.NETWebAdminFiles\\Security\\Users\\manageUsers.aspx" (normalized: "c:\\windows\\microsoft.net\\framework64\\v2.0.50727\\asp.netwebadminfiles\\security\\users\\manageusers.aspx"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x178 [0109.940] GetFileType (hFile=0x178) returned 0x1 [0109.940] GetFileType (hFile=0x178) returned 0x1 [0109.940] WriteFile (in: hFile=0x178, lpBuffer=0x2724a58*, nNumberOfBytesToWrite=0x3b60, lpNumberOfBytesWritten=0x31e5c8, lpOverlapped=0x0 | out: lpBuffer=0x2724a58*, lpNumberOfBytesWritten=0x31e5c8*=0x3b60, lpOverlapped=0x0) returned 1 [0109.942] MoveFileW (lpExistingFileName="C:\\Windows\\Microsoft.NET\\Framework64\\v2.0.50727\\ASP.NETWebAdminFiles\\Security\\Users\\manageUsers.aspx" (normalized: "c:\\windows\\microsoft.net\\framework64\\v2.0.50727\\asp.netwebadminfiles\\security\\users\\manageusers.aspx"), lpNewFileName="C:\\Windows\\Microsoft.NET\\Framework64\\v2.0.50727\\ASP.NETWebAdminFiles\\Security\\Users\\manageUsers.aspx" (normalized: "c:\\windows\\microsoft.net\\framework64\\v2.0.50727\\asp.netwebadminfiles\\security\\users\\manageusers.aspx")) returned 1 [0109.948] CreateFileW (lpFileName="C:\\Windows\\Microsoft.NET\\Framework64\\v2.0.50727\\ASP.NETWebAdminFiles\\Security\\Wizard\\wizard.aspx" (normalized: "c:\\windows\\microsoft.net\\framework64\\v2.0.50727\\asp.netwebadminfiles\\security\\wizard\\wizard.aspx"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x178 [0109.950] GetFileType (hFile=0x178) returned 0x1 [0109.950] GetFileType (hFile=0x178) returned 0x1 [0109.950] GetFileSize (in: hFile=0x178, lpFileSizeHigh=0x31e628 | out: lpFileSizeHigh=0x31e628*=0x0) returned 0x2ab2 [0109.950] ReadFile (in: hFile=0x178, lpBuffer=0x27303e0, nNumberOfBytesToRead=0x2ab2, lpNumberOfBytesRead=0x31e5d4, lpOverlapped=0x0 | out: lpBuffer=0x27303e0*, lpNumberOfBytesRead=0x31e5d4*=0x2ab2, lpOverlapped=0x0) returned 1 [0109.965] CreateFileW (lpFileName="C:\\Windows\\Microsoft.NET\\Framework64\\v2.0.50727\\ASP.NETWebAdminFiles\\Security\\Wizard\\wizard.aspx" (normalized: "c:\\windows\\microsoft.net\\framework64\\v2.0.50727\\asp.netwebadminfiles\\security\\wizard\\wizard.aspx"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x178 [0109.966] GetFileType (hFile=0x178) returned 0x1 [0109.966] GetFileType (hFile=0x178) returned 0x1 [0109.966] WriteFile (in: hFile=0x178, lpBuffer=0x278a788*, nNumberOfBytesToWrite=0x2ac0, lpNumberOfBytesWritten=0x31e5c8, lpOverlapped=0x0 | out: lpBuffer=0x278a788*, lpNumberOfBytesWritten=0x31e5c8*=0x2ac0, lpOverlapped=0x0) returned 1 [0109.967] MoveFileW (lpExistingFileName="C:\\Windows\\Microsoft.NET\\Framework64\\v2.0.50727\\ASP.NETWebAdminFiles\\Security\\Wizard\\wizard.aspx" (normalized: "c:\\windows\\microsoft.net\\framework64\\v2.0.50727\\asp.netwebadminfiles\\security\\wizard\\wizard.aspx"), lpNewFileName="C:\\Windows\\Microsoft.NET\\Framework64\\v2.0.50727\\ASP.NETWebAdminFiles\\Security\\Wizard\\wizard.aspx" (normalized: "c:\\windows\\microsoft.net\\framework64\\v2.0.50727\\asp.netwebadminfiles\\security\\wizard\\wizard.aspx")) returned 1 [0109.974] CreateFileW (lpFileName="C:\\Windows\\Microsoft.NET\\Framework64\\v2.0.50727\\CONFIG\\DefaultWsdlHelpGenerator.aspx" (normalized: "c:\\windows\\microsoft.net\\framework64\\v2.0.50727\\config\\defaultwsdlhelpgenerator.aspx"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x178 [0109.975] GetFileType (hFile=0x178) returned 0x1 [0109.975] GetFileType (hFile=0x178) returned 0x1 [0109.975] GetFileSize (in: hFile=0x178, lpFileSizeHigh=0x31e718 | out: lpFileSizeHigh=0x31e718*=0x0) returned 0x11321 [0109.975] ReadFile (in: hFile=0x178, lpBuffer=0x27974a0, nNumberOfBytesToRead=0x11321, lpNumberOfBytesRead=0x31e6c4, lpOverlapped=0x0 | out: lpBuffer=0x27974a0*, lpNumberOfBytesRead=0x31e6c4*=0x11321, lpOverlapped=0x0) returned 1 [0109.993] CreateFileW (lpFileName="C:\\Windows\\Microsoft.NET\\Framework64\\v2.0.50727\\CONFIG\\DefaultWsdlHelpGenerator.aspx" (normalized: "c:\\windows\\microsoft.net\\framework64\\v2.0.50727\\config\\defaultwsdlhelpgenerator.aspx"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x178 [0109.995] GetFileType (hFile=0x178) returned 0x1 [0109.995] GetFileType (hFile=0x178) returned 0x1 [0109.995] WriteFile (in: hFile=0x178, lpBuffer=0x2817c2c*, nNumberOfBytesToWrite=0x11330, lpNumberOfBytesWritten=0x31e6b8, lpOverlapped=0x0 | out: lpBuffer=0x2817c2c*, lpNumberOfBytesWritten=0x31e6b8*=0x11330, lpOverlapped=0x0) returned 1 [0109.997] MoveFileW (lpExistingFileName="C:\\Windows\\Microsoft.NET\\Framework64\\v2.0.50727\\CONFIG\\DefaultWsdlHelpGenerator.aspx" (normalized: "c:\\windows\\microsoft.net\\framework64\\v2.0.50727\\config\\defaultwsdlhelpgenerator.aspx"), lpNewFileName="C:\\Windows\\Microsoft.NET\\Framework64\\v2.0.50727\\CONFIG\\DefaultWsdlHelpGenerator.aspx" (normalized: "c:\\windows\\microsoft.net\\framework64\\v2.0.50727\\config\\defaultwsdlhelpgenerator.aspx")) returned 1 [0110.003] CreateFileW (lpFileName="C:\\Windows\\Microsoft.NET\\Framework64\\v2.0.50727\\RedistList\\FrameworkList.xml" (normalized: "c:\\windows\\microsoft.net\\framework64\\v2.0.50727\\redistlist\\frameworklist.xml"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x178 [0110.004] GetFileType (hFile=0x178) returned 0x1 [0110.004] GetFileType (hFile=0x178) returned 0x1 [0110.004] GetFileSize (in: hFile=0x178, lpFileSizeHigh=0x31e718 | out: lpFileSizeHigh=0x31e718*=0x0) returned 0x27d0 [0110.004] ReadFile (in: hFile=0x178, lpBuffer=0x283687c, nNumberOfBytesToRead=0x27d0, lpNumberOfBytesRead=0x31e6c4, lpOverlapped=0x0 | out: lpBuffer=0x283687c*, lpNumberOfBytesRead=0x31e6c4*=0x27d0, lpOverlapped=0x0) returned 1 [0110.020] CreateFileW (lpFileName="C:\\Windows\\Microsoft.NET\\Framework64\\v2.0.50727\\RedistList\\FrameworkList.xml" (normalized: "c:\\windows\\microsoft.net\\framework64\\v2.0.50727\\redistlist\\frameworklist.xml"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0xffffffff [0110.036] CreateFileW (lpFileName="C:\\Windows\\Microsoft.NET\\Framework64\\v3.5\\SQL\\EN\\DropSqlPersistenceProviderLogic.sql" (normalized: "c:\\windows\\microsoft.net\\framework64\\v3.5\\sql\\en\\dropsqlpersistenceproviderlogic.sql"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x178 [0110.036] GetFileType (hFile=0x178) returned 0x1 [0110.036] GetFileType (hFile=0x178) returned 0x1 [0110.036] GetFileSize (in: hFile=0x178, lpFileSizeHigh=0x31e6a0 | out: lpFileSizeHigh=0x31e6a0*=0x0) returned 0x960 [0110.036] ReadFile (in: hFile=0x178, lpBuffer=0x26b3844, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x31e64c, lpOverlapped=0x0 | out: lpBuffer=0x26b3844*, lpNumberOfBytesRead=0x31e64c*=0x960, lpOverlapped=0x0) returned 1 [0110.051] CreateFileW (lpFileName="C:\\Windows\\Microsoft.NET\\Framework64\\v3.5\\SQL\\EN\\DropSqlPersistenceProviderLogic.sql" (normalized: "c:\\windows\\microsoft.net\\framework64\\v3.5\\sql\\en\\dropsqlpersistenceproviderlogic.sql"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0xffffffff [0110.085] CreateFileW (lpFileName="C:\\Windows\\Microsoft.NET\\Framework64\\v4.0.30319\\InstallCommon.sql" (normalized: "c:\\windows\\microsoft.net\\framework64\\v4.0.30319\\installcommon.sql"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x178 [0110.086] GetFileType (hFile=0x178) returned 0x1 [0110.086] GetFileType (hFile=0x178) returned 0x1 [0110.086] GetFileSize (in: hFile=0x178, lpFileSizeHigh=0x31e790 | out: lpFileSizeHigh=0x31e790*=0x0) returned 0x601b [0110.086] ReadFile (in: hFile=0x178, lpBuffer=0x275c614, nNumberOfBytesToRead=0x601b, lpNumberOfBytesRead=0x31e73c, lpOverlapped=0x0 | out: lpBuffer=0x275c614*, lpNumberOfBytesRead=0x31e73c*=0x601b, lpOverlapped=0x0) returned 1 [0110.101] CreateFileW (lpFileName="C:\\Windows\\Microsoft.NET\\Framework64\\v4.0.30319\\InstallCommon.sql" (normalized: "c:\\windows\\microsoft.net\\framework64\\v4.0.30319\\installcommon.sql"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x178 [0110.102] GetFileType (hFile=0x178) returned 0x1 [0110.102] GetFileType (hFile=0x178) returned 0x1 [0110.102] WriteFile (in: hFile=0x178, lpBuffer=0x27c749c*, nNumberOfBytesToWrite=0x6020, lpNumberOfBytesWritten=0x31e730, lpOverlapped=0x0 | out: lpBuffer=0x27c749c*, lpNumberOfBytesWritten=0x31e730*=0x6020, lpOverlapped=0x0) returned 1 [0110.104] MoveFileW (lpExistingFileName="C:\\Windows\\Microsoft.NET\\Framework64\\v4.0.30319\\InstallCommon.sql" (normalized: "c:\\windows\\microsoft.net\\framework64\\v4.0.30319\\installcommon.sql"), lpNewFileName="C:\\Windows\\Microsoft.NET\\Framework64\\v4.0.30319\\InstallCommon.sql" (normalized: "c:\\windows\\microsoft.net\\framework64\\v4.0.30319\\installcommon.sql")) returned 1 [0110.104] CreateFileW (lpFileName="C:\\Windows\\Microsoft.NET\\Framework64\\v4.0.30319\\InstallMembership.sql" (normalized: "c:\\windows\\microsoft.net\\framework64\\v4.0.30319\\installmembership.sql"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x178 [0110.104] GetFileType (hFile=0x178) returned 0x1 [0110.104] GetFileType (hFile=0x178) returned 0x1 [0110.105] GetFileSize (in: hFile=0x178, lpFileSizeHigh=0x31e790 | out: lpFileSizeHigh=0x31e790*=0x0) returned 0xdbb8 [0110.105] ReadFile (in: hFile=0x178, lpBuffer=0x27cd848, nNumberOfBytesToRead=0xdbb8, lpNumberOfBytesRead=0x31e73c, lpOverlapped=0x0 | out: lpBuffer=0x27cd848*, lpNumberOfBytesRead=0x31e73c*=0xdbb8, lpOverlapped=0x0) returned 1 [0110.121] CreateFileW (lpFileName="C:\\Windows\\Microsoft.NET\\Framework64\\v4.0.30319\\InstallMembership.sql" (normalized: "c:\\windows\\microsoft.net\\framework64\\v4.0.30319\\installmembership.sql"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x178 [0110.123] GetFileType (hFile=0x178) returned 0x1 [0110.123] GetFileType (hFile=0x178) returned 0x1 [0110.123] WriteFile (in: hFile=0x178, lpBuffer=0x2843980*, nNumberOfBytesToWrite=0xdbc0, lpNumberOfBytesWritten=0x31e730, lpOverlapped=0x0 | out: lpBuffer=0x2843980*, lpNumberOfBytesWritten=0x31e730*=0xdbc0, lpOverlapped=0x0) returned 1 [0110.124] MoveFileW (lpExistingFileName="C:\\Windows\\Microsoft.NET\\Framework64\\v4.0.30319\\InstallMembership.sql" (normalized: "c:\\windows\\microsoft.net\\framework64\\v4.0.30319\\installmembership.sql"), lpNewFileName="C:\\Windows\\Microsoft.NET\\Framework64\\v4.0.30319\\InstallMembership.sql" (normalized: "c:\\windows\\microsoft.net\\framework64\\v4.0.30319\\installmembership.sql")) returned 1 [0110.125] CreateFileW (lpFileName="C:\\Windows\\Microsoft.NET\\Framework64\\v4.0.30319\\InstallPersistSqlState.sql" (normalized: "c:\\windows\\microsoft.net\\framework64\\v4.0.30319\\installpersistsqlstate.sql"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x178 [0110.125] GetFileType (hFile=0x178) returned 0x1 [0110.125] GetFileType (hFile=0x178) returned 0x1 [0110.125] GetFileSize (in: hFile=0x178, lpFileSizeHigh=0x31e790 | out: lpFileSizeHigh=0x31e790*=0x0) returned 0xd577 [0110.125] ReadFile (in: hFile=0x178, lpBuffer=0x2851904, nNumberOfBytesToRead=0xd577, lpNumberOfBytesRead=0x31e73c, lpOverlapped=0x0 | out: lpBuffer=0x2851904*, lpNumberOfBytesRead=0x31e73c*=0xd577, lpOverlapped=0x0) returned 1 [0110.143] CreateFileW (lpFileName="C:\\Windows\\Microsoft.NET\\Framework64\\v4.0.30319\\InstallPersistSqlState.sql" (normalized: "c:\\windows\\microsoft.net\\framework64\\v4.0.30319\\installpersistsqlstate.sql"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x178 [0110.144] GetFileType (hFile=0x178) returned 0x1 [0110.144] GetFileType (hFile=0x178) returned 0x1 [0110.144] WriteFile (in: hFile=0x178, lpBuffer=0x26d7924*, nNumberOfBytesToWrite=0xd580, lpNumberOfBytesWritten=0x31e730, lpOverlapped=0x0 | out: lpBuffer=0x26d7924*, lpNumberOfBytesWritten=0x31e730*=0xd580, lpOverlapped=0x0) returned 1 [0110.146] MoveFileW (lpExistingFileName="C:\\Windows\\Microsoft.NET\\Framework64\\v4.0.30319\\InstallPersistSqlState.sql" (normalized: "c:\\windows\\microsoft.net\\framework64\\v4.0.30319\\installpersistsqlstate.sql"), lpNewFileName="C:\\Windows\\Microsoft.NET\\Framework64\\v4.0.30319\\InstallPersistSqlState.sql" (normalized: "c:\\windows\\microsoft.net\\framework64\\v4.0.30319\\installpersistsqlstate.sql")) returned 1 [0110.146] CreateFileW (lpFileName="C:\\Windows\\Microsoft.NET\\Framework64\\v4.0.30319\\InstallPersonalization.sql" (normalized: "c:\\windows\\microsoft.net\\framework64\\v4.0.30319\\installpersonalization.sql"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x178 [0110.146] GetFileType (hFile=0x178) returned 0x1 [0110.146] GetFileType (hFile=0x178) returned 0x1 [0110.146] GetFileSize (in: hFile=0x178, lpFileSizeHigh=0x31e790 | out: lpFileSizeHigh=0x31e790*=0x0) returned 0x8886 [0110.147] ReadFile (in: hFile=0x178, lpBuffer=0x26e5298, nNumberOfBytesToRead=0x8886, lpNumberOfBytesRead=0x31e73c, lpOverlapped=0x0 | out: lpBuffer=0x26e5298*, lpNumberOfBytesRead=0x31e73c*=0x8886, lpOverlapped=0x0) returned 1 [0110.162] CreateFileW (lpFileName="C:\\Windows\\Microsoft.NET\\Framework64\\v4.0.30319\\InstallPersonalization.sql" (normalized: "c:\\windows\\microsoft.net\\framework64\\v4.0.30319\\installpersonalization.sql"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x178 [0110.163] GetFileType (hFile=0x178) returned 0x1 [0110.163] GetFileType (hFile=0x178) returned 0x1 [0110.163] WriteFile (in: hFile=0x178, lpBuffer=0x275ccac*, nNumberOfBytesToWrite=0x8890, lpNumberOfBytesWritten=0x31e730, lpOverlapped=0x0 | out: lpBuffer=0x275ccac*, lpNumberOfBytesWritten=0x31e730*=0x8890, lpOverlapped=0x0) returned 1 [0110.164] MoveFileW (lpExistingFileName="C:\\Windows\\Microsoft.NET\\Framework64\\v4.0.30319\\InstallPersonalization.sql" (normalized: "c:\\windows\\microsoft.net\\framework64\\v4.0.30319\\installpersonalization.sql"), lpNewFileName="C:\\Windows\\Microsoft.NET\\Framework64\\v4.0.30319\\InstallPersonalization.sql" (normalized: "c:\\windows\\microsoft.net\\framework64\\v4.0.30319\\installpersonalization.sql")) returned 1 [0110.164] CreateFileW (lpFileName="C:\\Windows\\Microsoft.NET\\Framework64\\v4.0.30319\\InstallRoles.sql" (normalized: "c:\\windows\\microsoft.net\\framework64\\v4.0.30319\\installroles.sql"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x178 [0110.165] GetFileType (hFile=0x178) returned 0x1 [0110.165] GetFileType (hFile=0x178) returned 0x1 [0110.165] GetFileSize (in: hFile=0x178, lpFileSizeHigh=0x31e790 | out: lpFileSizeHigh=0x31e790*=0x0) returned 0x85d8 [0110.165] ReadFile (in: hFile=0x178, lpBuffer=0x2765920, nNumberOfBytesToRead=0x85d8, lpNumberOfBytesRead=0x31e73c, lpOverlapped=0x0 | out: lpBuffer=0x2765920*, lpNumberOfBytesRead=0x31e73c*=0x85d8, lpOverlapped=0x0) returned 1 [0110.180] CreateFileW (lpFileName="C:\\Windows\\Microsoft.NET\\Framework64\\v4.0.30319\\InstallRoles.sql" (normalized: "c:\\windows\\microsoft.net\\framework64\\v4.0.30319\\installroles.sql"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x178 [0110.181] GetFileType (hFile=0x178) returned 0x1 [0110.181] GetFileType (hFile=0x178) returned 0x1 [0110.181] WriteFile (in: hFile=0x178, lpBuffer=0x27dc464*, nNumberOfBytesToWrite=0x85e0, lpNumberOfBytesWritten=0x31e730, lpOverlapped=0x0 | out: lpBuffer=0x27dc464*, lpNumberOfBytesWritten=0x31e730*=0x85e0, lpOverlapped=0x0) returned 1 [0110.183] MoveFileW (lpExistingFileName="C:\\Windows\\Microsoft.NET\\Framework64\\v4.0.30319\\InstallRoles.sql" (normalized: "c:\\windows\\microsoft.net\\framework64\\v4.0.30319\\installroles.sql"), lpNewFileName="C:\\Windows\\Microsoft.NET\\Framework64\\v4.0.30319\\InstallRoles.sql" (normalized: "c:\\windows\\microsoft.net\\framework64\\v4.0.30319\\installroles.sql")) returned 1 [0110.183] CreateFileW (lpFileName="C:\\Windows\\Microsoft.NET\\Framework64\\v4.0.30319\\InstallSqlState.sql" (normalized: "c:\\windows\\microsoft.net\\framework64\\v4.0.30319\\installsqlstate.sql"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x178 [0110.184] GetFileType (hFile=0x178) returned 0x1 [0110.184] GetFileType (hFile=0x178) returned 0x1 [0110.184] GetFileSize (in: hFile=0x178, lpFileSizeHigh=0x31e790 | out: lpFileSizeHigh=0x31e790*=0x0) returned 0xd49b [0110.184] ReadFile (in: hFile=0x178, lpBuffer=0x27e4dc8, nNumberOfBytesToRead=0xd49b, lpNumberOfBytesRead=0x31e73c, lpOverlapped=0x0 | out: lpBuffer=0x27e4dc8*, lpNumberOfBytesRead=0x31e73c*=0xd49b, lpOverlapped=0x0) returned 1 [0110.200] CreateFileW (lpFileName="C:\\Windows\\Microsoft.NET\\Framework64\\v4.0.30319\\InstallSqlState.sql" (normalized: "c:\\windows\\microsoft.net\\framework64\\v4.0.30319\\installsqlstate.sql"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x178 [0110.201] GetFileType (hFile=0x178) returned 0x1 [0110.201] GetFileType (hFile=0x178) returned 0x1 [0110.201] WriteFile (in: hFile=0x178, lpBuffer=0x28599a4*, nNumberOfBytesToWrite=0xd4a0, lpNumberOfBytesWritten=0x31e730, lpOverlapped=0x0 | out: lpBuffer=0x28599a4*, lpNumberOfBytesWritten=0x31e730*=0xd4a0, lpOverlapped=0x0) returned 1 [0110.203] MoveFileW (lpExistingFileName="C:\\Windows\\Microsoft.NET\\Framework64\\v4.0.30319\\InstallSqlState.sql" (normalized: "c:\\windows\\microsoft.net\\framework64\\v4.0.30319\\installsqlstate.sql"), lpNewFileName="C:\\Windows\\Microsoft.NET\\Framework64\\v4.0.30319\\InstallSqlState.sql" (normalized: "c:\\windows\\microsoft.net\\framework64\\v4.0.30319\\installsqlstate.sql")) returned 1 [0110.203] CreateFileW (lpFileName="C:\\Windows\\Microsoft.NET\\Framework64\\v4.0.30319\\InstallSqlStateTemplate.sql" (normalized: "c:\\windows\\microsoft.net\\framework64\\v4.0.30319\\installsqlstatetemplate.sql"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x178 [0110.203] GetFileType (hFile=0x178) returned 0x1 [0110.203] GetFileType (hFile=0x178) returned 0x1 [0110.203] GetFileSize (in: hFile=0x178, lpFileSizeHigh=0x31e790 | out: lpFileSizeHigh=0x31e790*=0x0) returned 0xdba9 [0110.204] ReadFile (in: hFile=0x178, lpBuffer=0x28671f8, nNumberOfBytesToRead=0xdba9, lpNumberOfBytesRead=0x31e73c, lpOverlapped=0x0 | out: lpBuffer=0x28671f8*, lpNumberOfBytesRead=0x31e73c*=0xdba9, lpOverlapped=0x0) returned 1 [0110.222] CreateFileW (lpFileName="C:\\Windows\\Microsoft.NET\\Framework64\\v4.0.30319\\InstallSqlStateTemplate.sql" (normalized: "c:\\windows\\microsoft.net\\framework64\\v4.0.30319\\installsqlstatetemplate.sql"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x178 [0110.223] GetFileType (hFile=0x178) returned 0x1 [0110.223] GetFileType (hFile=0x178) returned 0x1 [0110.223] WriteFile (in: hFile=0x178, lpBuffer=0x26d9100*, nNumberOfBytesToWrite=0xdbb0, lpNumberOfBytesWritten=0x31e730, lpOverlapped=0x0 | out: lpBuffer=0x26d9100*, lpNumberOfBytesWritten=0x31e730*=0xdbb0, lpOverlapped=0x0) returned 1 [0110.224] MoveFileW (lpExistingFileName="C:\\Windows\\Microsoft.NET\\Framework64\\v4.0.30319\\InstallSqlStateTemplate.sql" (normalized: "c:\\windows\\microsoft.net\\framework64\\v4.0.30319\\installsqlstatetemplate.sql"), lpNewFileName="C:\\Windows\\Microsoft.NET\\Framework64\\v4.0.30319\\InstallSqlStateTemplate.sql" (normalized: "c:\\windows\\microsoft.net\\framework64\\v4.0.30319\\installsqlstatetemplate.sql")) returned 1 [0110.225] CreateFileW (lpFileName="C:\\Windows\\Microsoft.NET\\Framework64\\v4.0.30319\\InstallWebEventSqlProvider.sql" (normalized: "c:\\windows\\microsoft.net\\framework64\\v4.0.30319\\installwebeventsqlprovider.sql"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x178 [0110.226] GetFileType (hFile=0x178) returned 0x1 [0110.226] GetFileType (hFile=0x178) returned 0x1 [0110.226] GetFileSize (in: hFile=0x178, lpFileSizeHigh=0x31e790 | out: lpFileSizeHigh=0x31e790*=0x0) returned 0x1939 [0110.226] ReadFile (in: hFile=0x178, lpBuffer=0x26e7100, nNumberOfBytesToRead=0x1939, lpNumberOfBytesRead=0x31e73c, lpOverlapped=0x0 | out: lpBuffer=0x26e7100*, lpNumberOfBytesRead=0x31e73c*=0x1939, lpOverlapped=0x0) returned 1 [0110.242] CreateFileW (lpFileName="C:\\Windows\\Microsoft.NET\\Framework64\\v4.0.30319\\InstallWebEventSqlProvider.sql" (normalized: "c:\\windows\\microsoft.net\\framework64\\v4.0.30319\\installwebeventsqlprovider.sql"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x178 [0110.243] GetFileType (hFile=0x178) returned 0x1 [0110.243] GetFileType (hFile=0x178) returned 0x1 [0110.243] WriteFile (in: hFile=0x178, lpBuffer=0x273be84*, nNumberOfBytesToWrite=0x1940, lpNumberOfBytesWritten=0x31e730, lpOverlapped=0x0 | out: lpBuffer=0x273be84*, lpNumberOfBytesWritten=0x31e730*=0x1940, lpOverlapped=0x0) returned 1 [0110.253] MoveFileW (lpExistingFileName="C:\\Windows\\Microsoft.NET\\Framework64\\v4.0.30319\\InstallWebEventSqlProvider.sql" (normalized: "c:\\windows\\microsoft.net\\framework64\\v4.0.30319\\installwebeventsqlprovider.sql"), lpNewFileName="C:\\Windows\\Microsoft.NET\\Framework64\\v4.0.30319\\InstallWebEventSqlProvider.sql" (normalized: "c:\\windows\\microsoft.net\\framework64\\v4.0.30319\\installwebeventsqlprovider.sql")) returned 1 [0110.254] CreateFileW (lpFileName="C:\\Windows\\Microsoft.NET\\Framework64\\v4.0.30319\\ThirdPartyNotices.txt" (normalized: "c:\\windows\\microsoft.net\\framework64\\v4.0.30319\\thirdpartynotices.txt"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x178 [0110.254] GetFileType (hFile=0x178) returned 0x1 [0110.254] GetFileType (hFile=0x178) returned 0x1 [0110.254] GetFileSize (in: hFile=0x178, lpFileSizeHigh=0x31e790 | out: lpFileSizeHigh=0x31e790*=0x0) returned 0x4e9e [0110.254] ReadFile (in: hFile=0x178, lpBuffer=0x273f3bc, nNumberOfBytesToRead=0x4e9e, lpNumberOfBytesRead=0x31e73c, lpOverlapped=0x0 | out: lpBuffer=0x273f3bc*, lpNumberOfBytesRead=0x31e73c*=0x4e9e, lpOverlapped=0x0) returned 1 [0110.288] CreateFileW (lpFileName="C:\\Windows\\Microsoft.NET\\Framework64\\v4.0.30319\\ThirdPartyNotices.txt" (normalized: "c:\\windows\\microsoft.net\\framework64\\v4.0.30319\\thirdpartynotices.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x178 [0110.289] GetFileType (hFile=0x178) returned 0x1 [0110.289] GetFileType (hFile=0x178) returned 0x1 [0110.289] WriteFile (in: hFile=0x178, lpBuffer=0x27a4ac4*, nNumberOfBytesToWrite=0x4ea0, lpNumberOfBytesWritten=0x31e730, lpOverlapped=0x0 | out: lpBuffer=0x27a4ac4*, lpNumberOfBytesWritten=0x31e730*=0x4ea0, lpOverlapped=0x0) returned 1 [0110.290] MoveFileW (lpExistingFileName="C:\\Windows\\Microsoft.NET\\Framework64\\v4.0.30319\\ThirdPartyNotices.txt" (normalized: "c:\\windows\\microsoft.net\\framework64\\v4.0.30319\\thirdpartynotices.txt"), lpNewFileName="C:\\Windows\\Microsoft.NET\\Framework64\\v4.0.30319\\ThirdPartyNotices.txt" (normalized: "c:\\windows\\microsoft.net\\framework64\\v4.0.30319\\thirdpartynotices.txt")) returned 1 [0110.291] CreateFileW (lpFileName="C:\\Windows\\Microsoft.NET\\Framework64\\v4.0.30319\\UninstallCommon.sql" (normalized: "c:\\windows\\microsoft.net\\framework64\\v4.0.30319\\uninstallcommon.sql"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x178 [0110.291] GetFileType (hFile=0x178) returned 0x1 [0110.291] GetFileType (hFile=0x178) returned 0x1 [0110.291] GetFileSize (in: hFile=0x178, lpFileSizeHigh=0x31e790 | out: lpFileSizeHigh=0x31e790*=0x0) returned 0xf32 [0110.291] ReadFile (in: hFile=0x178, lpBuffer=0x27aac60, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x31e73c, lpOverlapped=0x0 | out: lpBuffer=0x27aac60*, lpNumberOfBytesRead=0x31e73c*=0xf32, lpOverlapped=0x0) returned 1 [0110.305] CreateFileW (lpFileName="C:\\Windows\\Microsoft.NET\\Framework64\\v4.0.30319\\UninstallCommon.sql" (normalized: "c:\\windows\\microsoft.net\\framework64\\v4.0.30319\\uninstallcommon.sql"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x178 [0110.306] GetFileType (hFile=0x178) returned 0x1 [0110.306] GetFileType (hFile=0x178) returned 0x1 [0110.307] MoveFileW (lpExistingFileName="C:\\Windows\\Microsoft.NET\\Framework64\\v4.0.30319\\UninstallCommon.sql" (normalized: "c:\\windows\\microsoft.net\\framework64\\v4.0.30319\\uninstallcommon.sql"), lpNewFileName="C:\\Windows\\Microsoft.NET\\Framework64\\v4.0.30319\\UninstallCommon.sql" (normalized: "c:\\windows\\microsoft.net\\framework64\\v4.0.30319\\uninstallcommon.sql")) returned 1 [0110.308] CreateFileW (lpFileName="C:\\Windows\\Microsoft.NET\\Framework64\\v4.0.30319\\UninstallMembership.sql" (normalized: "c:\\windows\\microsoft.net\\framework64\\v4.0.30319\\uninstallmembership.sql"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x178 [0110.308] GetFileType (hFile=0x178) returned 0x1 [0110.308] GetFileType (hFile=0x178) returned 0x1 [0110.308] GetFileSize (in: hFile=0x178, lpFileSizeHigh=0x31e790 | out: lpFileSizeHigh=0x31e790*=0x0) returned 0x1afd [0110.308] ReadFile (in: hFile=0x178, lpBuffer=0x27fea44, nNumberOfBytesToRead=0x1afd, lpNumberOfBytesRead=0x31e73c, lpOverlapped=0x0 | out: lpBuffer=0x27fea44*, lpNumberOfBytesRead=0x31e73c*=0x1afd, lpOverlapped=0x0) returned 1 [0110.322] CreateFileW (lpFileName="C:\\Windows\\Microsoft.NET\\Framework64\\v4.0.30319\\UninstallMembership.sql" (normalized: "c:\\windows\\microsoft.net\\framework64\\v4.0.30319\\uninstallmembership.sql"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x178 [0110.323] GetFileType (hFile=0x178) returned 0x1 [0110.323] GetFileType (hFile=0x178) returned 0x1 [0110.323] WriteFile (in: hFile=0x178, lpBuffer=0x2853f2c*, nNumberOfBytesToWrite=0x1b00, lpNumberOfBytesWritten=0x31e730, lpOverlapped=0x0 | out: lpBuffer=0x2853f2c*, lpNumberOfBytesWritten=0x31e730*=0x1b00, lpOverlapped=0x0) returned 1 [0110.324] MoveFileW (lpExistingFileName="C:\\Windows\\Microsoft.NET\\Framework64\\v4.0.30319\\UninstallMembership.sql" (normalized: "c:\\windows\\microsoft.net\\framework64\\v4.0.30319\\uninstallmembership.sql"), lpNewFileName="C:\\Windows\\Microsoft.NET\\Framework64\\v4.0.30319\\UninstallMembership.sql" (normalized: "c:\\windows\\microsoft.net\\framework64\\v4.0.30319\\uninstallmembership.sql")) returned 1 [0110.325] CreateFileW (lpFileName="C:\\Windows\\Microsoft.NET\\Framework64\\v4.0.30319\\UninstallPersistSqlState.sql" (normalized: "c:\\windows\\microsoft.net\\framework64\\v4.0.30319\\uninstallpersistsqlstate.sql"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x178 [0110.325] GetFileType (hFile=0x178) returned 0x1 [0110.325] GetFileType (hFile=0x178) returned 0x1 [0110.325] GetFileSize (in: hFile=0x178, lpFileSizeHigh=0x31e790 | out: lpFileSizeHigh=0x31e790*=0x0) returned 0x27d3 [0110.325] ReadFile (in: hFile=0x178, lpBuffer=0x2855e08, nNumberOfBytesToRead=0x27d3, lpNumberOfBytesRead=0x31e73c, lpOverlapped=0x0 | out: lpBuffer=0x2855e08*, lpNumberOfBytesRead=0x31e73c*=0x27d3, lpOverlapped=0x0) returned 1 [0110.342] CreateFileW (lpFileName="C:\\Windows\\Microsoft.NET\\Framework64\\v4.0.30319\\UninstallPersistSqlState.sql" (normalized: "c:\\windows\\microsoft.net\\framework64\\v4.0.30319\\uninstallpersistsqlstate.sql"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x178 [0110.343] GetFileType (hFile=0x178) returned 0x1 [0110.343] GetFileType (hFile=0x178) returned 0x1 [0110.343] WriteFile (in: hFile=0x178, lpBuffer=0x26a3f98*, nNumberOfBytesToWrite=0x27e0, lpNumberOfBytesWritten=0x31e730, lpOverlapped=0x0 | out: lpBuffer=0x26a3f98*, lpNumberOfBytesWritten=0x31e730*=0x27e0, lpOverlapped=0x0) returned 1 [0110.344] MoveFileW (lpExistingFileName="C:\\Windows\\Microsoft.NET\\Framework64\\v4.0.30319\\UninstallPersistSqlState.sql" (normalized: "c:\\windows\\microsoft.net\\framework64\\v4.0.30319\\uninstallpersistsqlstate.sql"), lpNewFileName="C:\\Windows\\Microsoft.NET\\Framework64\\v4.0.30319\\UninstallPersistSqlState.sql" (normalized: "c:\\windows\\microsoft.net\\framework64\\v4.0.30319\\uninstallpersistsqlstate.sql")) returned 1 [0110.345] CreateFileW (lpFileName="C:\\Windows\\Microsoft.NET\\Framework64\\v4.0.30319\\UninstallPersonalization.sql" (normalized: "c:\\windows\\microsoft.net\\framework64\\v4.0.30319\\uninstallpersonalization.sql"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x178 [0110.345] GetFileType (hFile=0x178) returned 0x1 [0110.345] GetFileType (hFile=0x178) returned 0x1 [0110.345] GetFileSize (in: hFile=0x178, lpFileSizeHigh=0x31e790 | out: lpFileSizeHigh=0x31e790*=0x0) returned 0x1d41 [0110.345] ReadFile (in: hFile=0x178, lpBuffer=0x26a6b84, nNumberOfBytesToRead=0x1d41, lpNumberOfBytesRead=0x31e73c, lpOverlapped=0x0 | out: lpBuffer=0x26a6b84*, lpNumberOfBytesRead=0x31e73c*=0x1d41, lpOverlapped=0x0) returned 1 [0110.361] CreateFileW (lpFileName="C:\\Windows\\Microsoft.NET\\Framework64\\v4.0.30319\\UninstallPersonalization.sql" (normalized: "c:\\windows\\microsoft.net\\framework64\\v4.0.30319\\uninstallpersonalization.sql"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x178 [0110.362] GetFileType (hFile=0x178) returned 0x1 [0110.362] GetFileType (hFile=0x178) returned 0x1 [0110.362] WriteFile (in: hFile=0x178, lpBuffer=0x26fcd58*, nNumberOfBytesToWrite=0x1d50, lpNumberOfBytesWritten=0x31e730, lpOverlapped=0x0 | out: lpBuffer=0x26fcd58*, lpNumberOfBytesWritten=0x31e730*=0x1d50, lpOverlapped=0x0) returned 1 [0110.363] MoveFileW (lpExistingFileName="C:\\Windows\\Microsoft.NET\\Framework64\\v4.0.30319\\UninstallPersonalization.sql" (normalized: "c:\\windows\\microsoft.net\\framework64\\v4.0.30319\\uninstallpersonalization.sql"), lpNewFileName="C:\\Windows\\Microsoft.NET\\Framework64\\v4.0.30319\\UninstallPersonalization.sql" (normalized: "c:\\windows\\microsoft.net\\framework64\\v4.0.30319\\uninstallpersonalization.sql")) returned 1 [0110.364] CreateFileW (lpFileName="C:\\Windows\\Microsoft.NET\\Framework64\\v4.0.30319\\UninstallRoles.sql" (normalized: "c:\\windows\\microsoft.net\\framework64\\v4.0.30319\\uninstallroles.sql"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x178 [0110.364] GetFileType (hFile=0x178) returned 0x1 [0110.364] GetFileType (hFile=0x178) returned 0x1 [0110.364] GetFileSize (in: hFile=0x178, lpFileSizeHigh=0x31e790 | out: lpFileSizeHigh=0x31e790*=0x0) returned 0x16ed [0110.364] ReadFile (in: hFile=0x178, lpBuffer=0x26feea4, nNumberOfBytesToRead=0x16ed, lpNumberOfBytesRead=0x31e73c, lpOverlapped=0x0 | out: lpBuffer=0x26feea4*, lpNumberOfBytesRead=0x31e73c*=0x16ed, lpOverlapped=0x0) returned 1 [0110.379] CreateFileW (lpFileName="C:\\Windows\\Microsoft.NET\\Framework64\\v4.0.30319\\UninstallRoles.sql" (normalized: "c:\\windows\\microsoft.net\\framework64\\v4.0.30319\\uninstallroles.sql"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x178 [0110.380] GetFileType (hFile=0x178) returned 0x1 [0110.380] GetFileType (hFile=0x178) returned 0x1 [0110.380] WriteFile (in: hFile=0x178, lpBuffer=0x2752f3c*, nNumberOfBytesToWrite=0x16f0, lpNumberOfBytesWritten=0x31e730, lpOverlapped=0x0 | out: lpBuffer=0x2752f3c*, lpNumberOfBytesWritten=0x31e730*=0x16f0, lpOverlapped=0x0) returned 1 [0110.381] MoveFileW (lpExistingFileName="C:\\Windows\\Microsoft.NET\\Framework64\\v4.0.30319\\UninstallRoles.sql" (normalized: "c:\\windows\\microsoft.net\\framework64\\v4.0.30319\\uninstallroles.sql"), lpNewFileName="C:\\Windows\\Microsoft.NET\\Framework64\\v4.0.30319\\UninstallRoles.sql" (normalized: "c:\\windows\\microsoft.net\\framework64\\v4.0.30319\\uninstallroles.sql")) returned 1 [0110.381] CreateFileW (lpFileName="C:\\Windows\\Microsoft.NET\\Framework64\\v4.0.30319\\UninstallSqlState.sql" (normalized: "c:\\windows\\microsoft.net\\framework64\\v4.0.30319\\uninstallsqlstate.sql"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x178 [0110.382] GetFileType (hFile=0x178) returned 0x1 [0110.382] GetFileType (hFile=0x178) returned 0x1 [0110.382] GetFileSize (in: hFile=0x178, lpFileSizeHigh=0x31e790 | out: lpFileSizeHigh=0x31e790*=0x0) returned 0x25db [0110.382] ReadFile (in: hFile=0x178, lpBuffer=0x27549c8, nNumberOfBytesToRead=0x25db, lpNumberOfBytesRead=0x31e73c, lpOverlapped=0x0 | out: lpBuffer=0x27549c8*, lpNumberOfBytesRead=0x31e73c*=0x25db, lpOverlapped=0x0) returned 1 [0110.399] CreateFileW (lpFileName="C:\\Windows\\Microsoft.NET\\Framework64\\v4.0.30319\\UninstallSqlState.sql" (normalized: "c:\\windows\\microsoft.net\\framework64\\v4.0.30319\\uninstallsqlstate.sql"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x178 [0110.400] GetFileType (hFile=0x178) returned 0x1 [0110.400] GetFileType (hFile=0x178) returned 0x1 [0110.400] WriteFile (in: hFile=0x178, lpBuffer=0x27ad510*, nNumberOfBytesToWrite=0x25e0, lpNumberOfBytesWritten=0x31e730, lpOverlapped=0x0 | out: lpBuffer=0x27ad510*, lpNumberOfBytesWritten=0x31e730*=0x25e0, lpOverlapped=0x0) returned 1 [0110.401] MoveFileW (lpExistingFileName="C:\\Windows\\Microsoft.NET\\Framework64\\v4.0.30319\\UninstallSqlState.sql" (normalized: "c:\\windows\\microsoft.net\\framework64\\v4.0.30319\\uninstallsqlstate.sql"), lpNewFileName="C:\\Windows\\Microsoft.NET\\Framework64\\v4.0.30319\\UninstallSqlState.sql" (normalized: "c:\\windows\\microsoft.net\\framework64\\v4.0.30319\\uninstallsqlstate.sql")) returned 1 [0110.402] CreateFileW (lpFileName="C:\\Windows\\Microsoft.NET\\Framework64\\v4.0.30319\\UninstallSqlStateTemplate.sql" (normalized: "c:\\windows\\microsoft.net\\framework64\\v4.0.30319\\uninstallsqlstatetemplate.sql"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x178 [0110.402] GetFileType (hFile=0x178) returned 0x1 [0110.402] GetFileType (hFile=0x178) returned 0x1 [0110.402] GetFileSize (in: hFile=0x178, lpFileSizeHigh=0x31e790 | out: lpFileSizeHigh=0x31e790*=0x0) returned 0x2e15 [0110.402] ReadFile (in: hFile=0x178, lpBuffer=0x27afebc, nNumberOfBytesToRead=0x2e15, lpNumberOfBytesRead=0x31e73c, lpOverlapped=0x0 | out: lpBuffer=0x27afebc*, lpNumberOfBytesRead=0x31e73c*=0x2e15, lpOverlapped=0x0) returned 1 [0110.418] CreateFileW (lpFileName="C:\\Windows\\Microsoft.NET\\Framework64\\v4.0.30319\\UninstallSqlStateTemplate.sql" (normalized: "c:\\windows\\microsoft.net\\framework64\\v4.0.30319\\uninstallsqlstatetemplate.sql"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x178 [0110.419] GetFileType (hFile=0x178) returned 0x1 [0110.419] GetFileType (hFile=0x178) returned 0x1 [0110.419] WriteFile (in: hFile=0x178, lpBuffer=0x280b344*, nNumberOfBytesToWrite=0x2e20, lpNumberOfBytesWritten=0x31e730, lpOverlapped=0x0 | out: lpBuffer=0x280b344*, lpNumberOfBytesWritten=0x31e730*=0x2e20, lpOverlapped=0x0) returned 1 [0110.420] MoveFileW (lpExistingFileName="C:\\Windows\\Microsoft.NET\\Framework64\\v4.0.30319\\UninstallSqlStateTemplate.sql" (normalized: "c:\\windows\\microsoft.net\\framework64\\v4.0.30319\\uninstallsqlstatetemplate.sql"), lpNewFileName="C:\\Windows\\Microsoft.NET\\Framework64\\v4.0.30319\\UninstallSqlStateTemplate.sql" (normalized: "c:\\windows\\microsoft.net\\framework64\\v4.0.30319\\uninstallsqlstatetemplate.sql")) returned 1 [0110.420] CreateFileW (lpFileName="C:\\Windows\\Microsoft.NET\\Framework64\\v4.0.30319\\UninstallWebEventSqlProvider.sql" (normalized: "c:\\windows\\microsoft.net\\framework64\\v4.0.30319\\uninstallwebeventsqlprovider.sql"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x178 [0110.421] GetFileType (hFile=0x178) returned 0x1 [0110.421] GetFileType (hFile=0x178) returned 0x1 [0110.421] GetFileSize (in: hFile=0x178, lpFileSizeHigh=0x31e790 | out: lpFileSizeHigh=0x31e790*=0x0) returned 0xbbe [0110.421] ReadFile (in: hFile=0x178, lpBuffer=0x280f14c, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x31e73c, lpOverlapped=0x0 | out: lpBuffer=0x280f14c*, lpNumberOfBytesRead=0x31e73c*=0xbbe, lpOverlapped=0x0) returned 1 [0110.435] CreateFileW (lpFileName="C:\\Windows\\Microsoft.NET\\Framework64\\v4.0.30319\\UninstallWebEventSqlProvider.sql" (normalized: "c:\\windows\\microsoft.net\\framework64\\v4.0.30319\\uninstallwebeventsqlprovider.sql"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x178 [0110.436] GetFileType (hFile=0x178) returned 0x1 [0110.436] GetFileType (hFile=0x178) returned 0x1 [0110.437] MoveFileW (lpExistingFileName="C:\\Windows\\Microsoft.NET\\Framework64\\v4.0.30319\\UninstallWebEventSqlProvider.sql" (normalized: "c:\\windows\\microsoft.net\\framework64\\v4.0.30319\\uninstallwebeventsqlprovider.sql"), lpNewFileName="C:\\Windows\\Microsoft.NET\\Framework64\\v4.0.30319\\UninstallWebEventSqlProvider.sql" (normalized: "c:\\windows\\microsoft.net\\framework64\\v4.0.30319\\uninstallwebeventsqlprovider.sql")) returned 1 [0110.448] CreateFileW (lpFileName="C:\\Windows\\Microsoft.NET\\Framework64\\v4.0.30319\\ASP.NETWebAdminFiles\\default.aspx" (normalized: "c:\\windows\\microsoft.net\\framework64\\v4.0.30319\\asp.netwebadminfiles\\default.aspx"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x178 [0110.449] GetFileType (hFile=0x178) returned 0x1 [0110.449] GetFileType (hFile=0x178) returned 0x1 [0110.449] GetFileSize (in: hFile=0x178, lpFileSizeHigh=0x31e718 | out: lpFileSizeHigh=0x31e718*=0x0) returned 0x10fd [0110.449] ReadFile (in: hFile=0x178, lpBuffer=0x266a7a8, nNumberOfBytesToRead=0x10fd, lpNumberOfBytesRead=0x31e6c4, lpOverlapped=0x0 | out: lpBuffer=0x266a7a8*, lpNumberOfBytesRead=0x31e6c4*=0x10fd, lpOverlapped=0x0) returned 1 [0110.464] CreateFileW (lpFileName="C:\\Windows\\Microsoft.NET\\Framework64\\v4.0.30319\\ASP.NETWebAdminFiles\\default.aspx" (normalized: "c:\\windows\\microsoft.net\\framework64\\v4.0.30319\\asp.netwebadminfiles\\default.aspx"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x178 [0110.465] GetFileType (hFile=0x178) returned 0x1 [0110.465] GetFileType (hFile=0x178) returned 0x1 [0110.465] WriteFile (in: hFile=0x178, lpBuffer=0x26bcbec*, nNumberOfBytesToWrite=0x1100, lpNumberOfBytesWritten=0x31e6b8, lpOverlapped=0x0 | out: lpBuffer=0x26bcbec*, lpNumberOfBytesWritten=0x31e6b8*=0x1100, lpOverlapped=0x0) returned 1 [0110.466] MoveFileW (lpExistingFileName="C:\\Windows\\Microsoft.NET\\Framework64\\v4.0.30319\\ASP.NETWebAdminFiles\\default.aspx" (normalized: "c:\\windows\\microsoft.net\\framework64\\v4.0.30319\\asp.netwebadminfiles\\default.aspx"), lpNewFileName="C:\\Windows\\Microsoft.NET\\Framework64\\v4.0.30319\\ASP.NETWebAdminFiles\\default.aspx" (normalized: "c:\\windows\\microsoft.net\\framework64\\v4.0.30319\\asp.netwebadminfiles\\default.aspx")) returned 1 [0110.467] CreateFileW (lpFileName="C:\\Windows\\Microsoft.NET\\Framework64\\v4.0.30319\\ASP.NETWebAdminFiles\\error.aspx" (normalized: "c:\\windows\\microsoft.net\\framework64\\v4.0.30319\\asp.netwebadminfiles\\error.aspx"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x178 [0110.467] GetFileType (hFile=0x178) returned 0x1 [0110.467] GetFileType (hFile=0x178) returned 0x1 [0110.467] GetFileSize (in: hFile=0x178, lpFileSizeHigh=0x31e718 | out: lpFileSizeHigh=0x31e718*=0x0) returned 0x1a91 [0110.467] ReadFile (in: hFile=0x178, lpBuffer=0x26be0d0, nNumberOfBytesToRead=0x1a91, lpNumberOfBytesRead=0x31e6c4, lpOverlapped=0x0 | out: lpBuffer=0x26be0d0*, lpNumberOfBytesRead=0x31e6c4*=0x1a91, lpOverlapped=0x0) returned 1 [0110.482] CreateFileW (lpFileName="C:\\Windows\\Microsoft.NET\\Framework64\\v4.0.30319\\ASP.NETWebAdminFiles\\error.aspx" (normalized: "c:\\windows\\microsoft.net\\framework64\\v4.0.30319\\asp.netwebadminfiles\\error.aspx"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x178 [0110.483] GetFileType (hFile=0x178) returned 0x1 [0110.483] GetFileType (hFile=0x178) returned 0x1 [0110.483] WriteFile (in: hFile=0x178, lpBuffer=0x27133d8*, nNumberOfBytesToWrite=0x1aa0, lpNumberOfBytesWritten=0x31e6b8, lpOverlapped=0x0 | out: lpBuffer=0x27133d8*, lpNumberOfBytesWritten=0x31e6b8*=0x1aa0, lpOverlapped=0x0) returned 1 [0110.484] MoveFileW (lpExistingFileName="C:\\Windows\\Microsoft.NET\\Framework64\\v4.0.30319\\ASP.NETWebAdminFiles\\error.aspx" (normalized: "c:\\windows\\microsoft.net\\framework64\\v4.0.30319\\asp.netwebadminfiles\\error.aspx"), lpNewFileName="C:\\Windows\\Microsoft.NET\\Framework64\\v4.0.30319\\ASP.NETWebAdminFiles\\error.aspx" (normalized: "c:\\windows\\microsoft.net\\framework64\\v4.0.30319\\asp.netwebadminfiles\\error.aspx")) returned 1 [0110.484] CreateFileW (lpFileName="C:\\Windows\\Microsoft.NET\\Framework64\\v4.0.30319\\ASP.NETWebAdminFiles\\home0.aspx" (normalized: "c:\\windows\\microsoft.net\\framework64\\v4.0.30319\\asp.netwebadminfiles\\home0.aspx"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x178 [0110.484] GetFileType (hFile=0x178) returned 0x1 [0110.484] GetFileType (hFile=0x178) returned 0x1 [0110.484] GetFileSize (in: hFile=0x178, lpFileSizeHigh=0x31e718 | out: lpFileSizeHigh=0x31e718*=0x0) returned 0x551 [0110.484] ReadFile (in: hFile=0x178, lpBuffer=0x27157ac, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x31e6c4, lpOverlapped=0x0 | out: lpBuffer=0x27157ac*, lpNumberOfBytesRead=0x31e6c4*=0x551, lpOverlapped=0x0) returned 1 [0110.498] CreateFileW (lpFileName="C:\\Windows\\Microsoft.NET\\Framework64\\v4.0.30319\\ASP.NETWebAdminFiles\\home0.aspx" (normalized: "c:\\windows\\microsoft.net\\framework64\\v4.0.30319\\asp.netwebadminfiles\\home0.aspx"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x178 [0110.499] GetFileType (hFile=0x178) returned 0x1 [0110.499] GetFileType (hFile=0x178) returned 0x1 [0110.499] WriteFile (in: hFile=0x178, lpBuffer=0x27651b8*, nNumberOfBytesToWrite=0x560, lpNumberOfBytesWritten=0x31e68c, lpOverlapped=0x0 | out: lpBuffer=0x27651b8*, lpNumberOfBytesWritten=0x31e68c*=0x560, lpOverlapped=0x0) returned 1 [0110.500] MoveFileW (lpExistingFileName="C:\\Windows\\Microsoft.NET\\Framework64\\v4.0.30319\\ASP.NETWebAdminFiles\\home0.aspx" (normalized: "c:\\windows\\microsoft.net\\framework64\\v4.0.30319\\asp.netwebadminfiles\\home0.aspx"), lpNewFileName="C:\\Windows\\Microsoft.NET\\Framework64\\v4.0.30319\\ASP.NETWebAdminFiles\\home0.aspx" (normalized: "c:\\windows\\microsoft.net\\framework64\\v4.0.30319\\asp.netwebadminfiles\\home0.aspx")) returned 1 [0110.500] CreateFileW (lpFileName="C:\\Windows\\Microsoft.NET\\Framework64\\v4.0.30319\\ASP.NETWebAdminFiles\\home1.aspx" (normalized: "c:\\windows\\microsoft.net\\framework64\\v4.0.30319\\asp.netwebadminfiles\\home1.aspx"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x178 [0110.500] GetFileType (hFile=0x178) returned 0x1 [0110.501] GetFileType (hFile=0x178) returned 0x1 [0110.501] GetFileSize (in: hFile=0x178, lpFileSizeHigh=0x31e718 | out: lpFileSizeHigh=0x31e718*=0x0) returned 0x2e4 [0110.501] ReadFile (in: hFile=0x178, lpBuffer=0x2766750, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x31e6c4, lpOverlapped=0x0 | out: lpBuffer=0x2766750*, lpNumberOfBytesRead=0x31e6c4*=0x2e4, lpOverlapped=0x0) returned 1 [0110.515] CreateFileW (lpFileName="C:\\Windows\\Microsoft.NET\\Framework64\\v4.0.30319\\ASP.NETWebAdminFiles\\home1.aspx" (normalized: "c:\\windows\\microsoft.net\\framework64\\v4.0.30319\\asp.netwebadminfiles\\home1.aspx"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x178 [0110.516] GetFileType (hFile=0x178) returned 0x1 [0110.516] GetFileType (hFile=0x178) returned 0x1 [0110.517] MoveFileW (lpExistingFileName="C:\\Windows\\Microsoft.NET\\Framework64\\v4.0.30319\\ASP.NETWebAdminFiles\\home1.aspx" (normalized: "c:\\windows\\microsoft.net\\framework64\\v4.0.30319\\asp.netwebadminfiles\\home1.aspx"), lpNewFileName="C:\\Windows\\Microsoft.NET\\Framework64\\v4.0.30319\\ASP.NETWebAdminFiles\\home1.aspx" (normalized: "c:\\windows\\microsoft.net\\framework64\\v4.0.30319\\asp.netwebadminfiles\\home1.aspx")) returned 1 [0110.517] CreateFileW (lpFileName="C:\\Windows\\Microsoft.NET\\Framework64\\v4.0.30319\\ASP.NETWebAdminFiles\\home2.aspx" (normalized: "c:\\windows\\microsoft.net\\framework64\\v4.0.30319\\asp.netwebadminfiles\\home2.aspx"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x178 [0110.517] GetFileType (hFile=0x178) returned 0x1 [0110.517] GetFileType (hFile=0x178) returned 0x1 [0110.517] GetFileSize (in: hFile=0x178, lpFileSizeHigh=0x31e718 | out: lpFileSizeHigh=0x31e718*=0x0) returned 0x412 [0110.517] ReadFile (in: hFile=0x178, lpBuffer=0x27b6bf0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x31e6c4, lpOverlapped=0x0 | out: lpBuffer=0x27b6bf0*, lpNumberOfBytesRead=0x31e6c4*=0x412, lpOverlapped=0x0) returned 1 [0110.532] CreateFileW (lpFileName="C:\\Windows\\Microsoft.NET\\Framework64\\v4.0.30319\\ASP.NETWebAdminFiles\\home2.aspx" (normalized: "c:\\windows\\microsoft.net\\framework64\\v4.0.30319\\asp.netwebadminfiles\\home2.aspx"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x178 [0110.533] GetFileType (hFile=0x178) returned 0x1 [0110.533] GetFileType (hFile=0x178) returned 0x1 [0110.533] MoveFileW (lpExistingFileName="C:\\Windows\\Microsoft.NET\\Framework64\\v4.0.30319\\ASP.NETWebAdminFiles\\home2.aspx" (normalized: "c:\\windows\\microsoft.net\\framework64\\v4.0.30319\\asp.netwebadminfiles\\home2.aspx"), lpNewFileName="C:\\Windows\\Microsoft.NET\\Framework64\\v4.0.30319\\ASP.NETWebAdminFiles\\home2.aspx" (normalized: "c:\\windows\\microsoft.net\\framework64\\v4.0.30319\\asp.netwebadminfiles\\home2.aspx")) returned 1 [0110.534] CreateFileW (lpFileName="C:\\Windows\\Microsoft.NET\\Framework64\\v4.0.30319\\ASP.NETWebAdminFiles\\WebAdminHelp.aspx" (normalized: "c:\\windows\\microsoft.net\\framework64\\v4.0.30319\\asp.netwebadminfiles\\webadminhelp.aspx"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x178 [0110.534] GetFileType (hFile=0x178) returned 0x1 [0110.534] GetFileType (hFile=0x178) returned 0x1 [0110.534] GetFileSize (in: hFile=0x178, lpFileSizeHigh=0x31e718 | out: lpFileSizeHigh=0x31e718*=0x0) returned 0x1a52 [0110.534] ReadFile (in: hFile=0x178, lpBuffer=0x28072ec, nNumberOfBytesToRead=0x1a52, lpNumberOfBytesRead=0x31e6c4, lpOverlapped=0x0 | out: lpBuffer=0x28072ec*, lpNumberOfBytesRead=0x31e6c4*=0x1a52, lpOverlapped=0x0) returned 1 [0110.548] CreateFileW (lpFileName="C:\\Windows\\Microsoft.NET\\Framework64\\v4.0.30319\\ASP.NETWebAdminFiles\\WebAdminHelp.aspx" (normalized: "c:\\windows\\microsoft.net\\framework64\\v4.0.30319\\asp.netwebadminfiles\\webadminhelp.aspx"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x178 [0110.549] GetFileType (hFile=0x178) returned 0x1 [0110.549] GetFileType (hFile=0x178) returned 0x1 [0110.549] WriteFile (in: hFile=0x178, lpBuffer=0x285c4b4*, nNumberOfBytesToWrite=0x1a60, lpNumberOfBytesWritten=0x31e6b8, lpOverlapped=0x0 | out: lpBuffer=0x285c4b4*, lpNumberOfBytesWritten=0x31e6b8*=0x1a60, lpOverlapped=0x0) returned 1 [0110.550] MoveFileW (lpExistingFileName="C:\\Windows\\Microsoft.NET\\Framework64\\v4.0.30319\\ASP.NETWebAdminFiles\\WebAdminHelp.aspx" (normalized: "c:\\windows\\microsoft.net\\framework64\\v4.0.30319\\asp.netwebadminfiles\\webadminhelp.aspx"), lpNewFileName="C:\\Windows\\Microsoft.NET\\Framework64\\v4.0.30319\\ASP.NETWebAdminFiles\\WebAdminHelp.aspx" (normalized: "c:\\windows\\microsoft.net\\framework64\\v4.0.30319\\asp.netwebadminfiles\\webadminhelp.aspx")) returned 1 [0110.550] CreateFileW (lpFileName="C:\\Windows\\Microsoft.NET\\Framework64\\v4.0.30319\\ASP.NETWebAdminFiles\\WebAdminHelp_Application.aspx" (normalized: "c:\\windows\\microsoft.net\\framework64\\v4.0.30319\\asp.netwebadminfiles\\webadminhelp_application.aspx"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x178 [0110.550] GetFileType (hFile=0x178) returned 0x1 [0110.551] GetFileType (hFile=0x178) returned 0x1 [0110.551] GetFileSize (in: hFile=0x178, lpFileSizeHigh=0x31e718 | out: lpFileSizeHigh=0x31e718*=0x0) returned 0x3503 [0110.551] ReadFile (in: hFile=0x178, lpBuffer=0x285e370, nNumberOfBytesToRead=0x3503, lpNumberOfBytesRead=0x31e6c4, lpOverlapped=0x0 | out: lpBuffer=0x285e370*, lpNumberOfBytesRead=0x31e6c4*=0x3503, lpOverlapped=0x0) returned 1 [0110.567] CreateFileW (lpFileName="C:\\Windows\\Microsoft.NET\\Framework64\\v4.0.30319\\ASP.NETWebAdminFiles\\WebAdminHelp_Application.aspx" (normalized: "c:\\windows\\microsoft.net\\framework64\\v4.0.30319\\asp.netwebadminfiles\\webadminhelp_application.aspx"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x178 [0110.568] GetFileType (hFile=0x178) returned 0x1 [0110.568] GetFileType (hFile=0x178) returned 0x1 [0110.568] WriteFile (in: hFile=0x178, lpBuffer=0x26bffd0*, nNumberOfBytesToWrite=0x3510, lpNumberOfBytesWritten=0x31e6b8, lpOverlapped=0x0 | out: lpBuffer=0x26bffd0*, lpNumberOfBytesWritten=0x31e6b8*=0x3510, lpOverlapped=0x0) returned 1 [0110.569] MoveFileW (lpExistingFileName="C:\\Windows\\Microsoft.NET\\Framework64\\v4.0.30319\\ASP.NETWebAdminFiles\\WebAdminHelp_Application.aspx" (normalized: "c:\\windows\\microsoft.net\\framework64\\v4.0.30319\\asp.netwebadminfiles\\webadminhelp_application.aspx"), lpNewFileName="C:\\Windows\\Microsoft.NET\\Framework64\\v4.0.30319\\ASP.NETWebAdminFiles\\WebAdminHelp_Application.aspx" (normalized: "c:\\windows\\microsoft.net\\framework64\\v4.0.30319\\asp.netwebadminfiles\\webadminhelp_application.aspx")) returned 1 [0110.569] CreateFileW (lpFileName="C:\\Windows\\Microsoft.NET\\Framework64\\v4.0.30319\\ASP.NETWebAdminFiles\\WebAdminHelp_Internals.aspx" (normalized: "c:\\windows\\microsoft.net\\framework64\\v4.0.30319\\asp.netwebadminfiles\\webadminhelp_internals.aspx"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x178 [0110.569] GetFileType (hFile=0x178) returned 0x1 [0110.569] GetFileType (hFile=0x178) returned 0x1 [0110.569] GetFileSize (in: hFile=0x178, lpFileSizeHigh=0x31e718 | out: lpFileSizeHigh=0x31e718*=0x0) returned 0xfec [0110.570] ReadFile (in: hFile=0x178, lpBuffer=0x26c498c, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x31e6c4, lpOverlapped=0x0 | out: lpBuffer=0x26c498c*, lpNumberOfBytesRead=0x31e6c4*=0xfec, lpOverlapped=0x0) returned 1 [0110.584] CreateFileW (lpFileName="C:\\Windows\\Microsoft.NET\\Framework64\\v4.0.30319\\ASP.NETWebAdminFiles\\WebAdminHelp_Internals.aspx" (normalized: "c:\\windows\\microsoft.net\\framework64\\v4.0.30319\\asp.netwebadminfiles\\webadminhelp_internals.aspx"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x178 [0110.585] GetFileType (hFile=0x178) returned 0x1 [0110.585] GetFileType (hFile=0x178) returned 0x1 [0110.585] WriteFile (in: hFile=0x178, lpBuffer=0x27179fc*, nNumberOfBytesToWrite=0xff0, lpNumberOfBytesWritten=0x31e68c, lpOverlapped=0x0 | out: lpBuffer=0x27179fc*, lpNumberOfBytesWritten=0x31e68c*=0xff0, lpOverlapped=0x0) returned 1 [0110.586] MoveFileW (lpExistingFileName="C:\\Windows\\Microsoft.NET\\Framework64\\v4.0.30319\\ASP.NETWebAdminFiles\\WebAdminHelp_Internals.aspx" (normalized: "c:\\windows\\microsoft.net\\framework64\\v4.0.30319\\asp.netwebadminfiles\\webadminhelp_internals.aspx"), lpNewFileName="C:\\Windows\\Microsoft.NET\\Framework64\\v4.0.30319\\ASP.NETWebAdminFiles\\WebAdminHelp_Internals.aspx" (normalized: "c:\\windows\\microsoft.net\\framework64\\v4.0.30319\\asp.netwebadminfiles\\webadminhelp_internals.aspx")) returned 1 [0110.586] CreateFileW (lpFileName="C:\\Windows\\Microsoft.NET\\Framework64\\v4.0.30319\\ASP.NETWebAdminFiles\\WebAdminHelp_Provider.aspx" (normalized: "c:\\windows\\microsoft.net\\framework64\\v4.0.30319\\asp.netwebadminfiles\\webadminhelp_provider.aspx"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x178 [0110.586] GetFileType (hFile=0x178) returned 0x1 [0110.586] GetFileType (hFile=0x178) returned 0x1 [0110.586] GetFileSize (in: hFile=0x178, lpFileSizeHigh=0x31e718 | out: lpFileSizeHigh=0x31e718*=0x0) returned 0x1a2d [0110.586] ReadFile (in: hFile=0x178, lpBuffer=0x2718d2c, nNumberOfBytesToRead=0x1a2d, lpNumberOfBytesRead=0x31e6c4, lpOverlapped=0x0 | out: lpBuffer=0x2718d2c*, lpNumberOfBytesRead=0x31e6c4*=0x1a2d, lpOverlapped=0x0) returned 1 [0110.600] CreateFileW (lpFileName="C:\\Windows\\Microsoft.NET\\Framework64\\v4.0.30319\\ASP.NETWebAdminFiles\\WebAdminHelp_Provider.aspx" (normalized: "c:\\windows\\microsoft.net\\framework64\\v4.0.30319\\asp.netwebadminfiles\\webadminhelp_provider.aspx"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x178 [0110.601] GetFileType (hFile=0x178) returned 0x1 [0110.601] GetFileType (hFile=0x178) returned 0x1 [0110.601] WriteFile (in: hFile=0x178, lpBuffer=0x276de04*, nNumberOfBytesToWrite=0x1a30, lpNumberOfBytesWritten=0x31e6b8, lpOverlapped=0x0 | out: lpBuffer=0x276de04*, lpNumberOfBytesWritten=0x31e6b8*=0x1a30, lpOverlapped=0x0) returned 1 [0110.602] MoveFileW (lpExistingFileName="C:\\Windows\\Microsoft.NET\\Framework64\\v4.0.30319\\ASP.NETWebAdminFiles\\WebAdminHelp_Provider.aspx" (normalized: "c:\\windows\\microsoft.net\\framework64\\v4.0.30319\\asp.netwebadminfiles\\webadminhelp_provider.aspx"), lpNewFileName="C:\\Windows\\Microsoft.NET\\Framework64\\v4.0.30319\\ASP.NETWebAdminFiles\\WebAdminHelp_Provider.aspx" (normalized: "c:\\windows\\microsoft.net\\framework64\\v4.0.30319\\asp.netwebadminfiles\\webadminhelp_provider.aspx")) returned 1 [0110.602] CreateFileW (lpFileName="C:\\Windows\\Microsoft.NET\\Framework64\\v4.0.30319\\ASP.NETWebAdminFiles\\WebAdminHelp_Security.aspx" (normalized: "c:\\windows\\microsoft.net\\framework64\\v4.0.30319\\asp.netwebadminfiles\\webadminhelp_security.aspx"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x178 [0110.602] GetFileType (hFile=0x178) returned 0x1 [0110.602] GetFileType (hFile=0x178) returned 0x1 [0110.602] GetFileSize (in: hFile=0x178, lpFileSizeHigh=0x31e718 | out: lpFileSizeHigh=0x31e718*=0x0) returned 0x2943 [0110.602] ReadFile (in: hFile=0x178, lpBuffer=0x276fcc8, nNumberOfBytesToRead=0x2943, lpNumberOfBytesRead=0x31e6c4, lpOverlapped=0x0 | out: lpBuffer=0x276fcc8*, lpNumberOfBytesRead=0x31e6c4*=0x2943, lpOverlapped=0x0) returned 1 [0110.617] CreateFileW (lpFileName="C:\\Windows\\Microsoft.NET\\Framework64\\v4.0.30319\\ASP.NETWebAdminFiles\\WebAdminHelp_Security.aspx" (normalized: "c:\\windows\\microsoft.net\\framework64\\v4.0.30319\\asp.netwebadminfiles\\webadminhelp_security.aspx"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x178 [0110.617] GetFileType (hFile=0x178) returned 0x1 [0110.617] GetFileType (hFile=0x178) returned 0x1 [0110.617] WriteFile (in: hFile=0x178, lpBuffer=0x27c9940*, nNumberOfBytesToWrite=0x2950, lpNumberOfBytesWritten=0x31e6b8, lpOverlapped=0x0 | out: lpBuffer=0x27c9940*, lpNumberOfBytesWritten=0x31e6b8*=0x2950, lpOverlapped=0x0) returned 1 [0110.618] MoveFileW (lpExistingFileName="C:\\Windows\\Microsoft.NET\\Framework64\\v4.0.30319\\ASP.NETWebAdminFiles\\WebAdminHelp_Security.aspx" (normalized: "c:\\windows\\microsoft.net\\framework64\\v4.0.30319\\asp.netwebadminfiles\\webadminhelp_security.aspx"), lpNewFileName="C:\\Windows\\Microsoft.NET\\Framework64\\v4.0.30319\\ASP.NETWebAdminFiles\\WebAdminHelp_Security.aspx" (normalized: "c:\\windows\\microsoft.net\\framework64\\v4.0.30319\\asp.netwebadminfiles\\webadminhelp_security.aspx")) returned 1 [0110.619] CreateFileW (lpFileName="C:\\Windows\\Microsoft.NET\\Framework64\\v4.0.30319\\ASP.NETWebAdminFiles\\WebAdminStyles.css" (normalized: "c:\\windows\\microsoft.net\\framework64\\v4.0.30319\\asp.netwebadminfiles\\webadminstyles.css"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x178 [0110.619] GetFileType (hFile=0x178) returned 0x1 [0110.619] GetFileType (hFile=0x178) returned 0x1 [0110.619] GetFileSize (in: hFile=0x178, lpFileSizeHigh=0x31e718 | out: lpFileSizeHigh=0x31e718*=0x0) returned 0x343b [0110.619] ReadFile (in: hFile=0x178, lpBuffer=0x27cc73c, nNumberOfBytesToRead=0x343b, lpNumberOfBytesRead=0x31e6c4, lpOverlapped=0x0 | out: lpBuffer=0x27cc73c*, lpNumberOfBytesRead=0x31e6c4*=0x343b, lpOverlapped=0x0) returned 1 [0110.634] CreateFileW (lpFileName="C:\\Windows\\Microsoft.NET\\Framework64\\v4.0.30319\\ASP.NETWebAdminFiles\\WebAdminStyles.css" (normalized: "c:\\windows\\microsoft.net\\framework64\\v4.0.30319\\asp.netwebadminfiles\\webadminstyles.css"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x178 [0110.635] GetFileType (hFile=0x178) returned 0x1 [0110.635] GetFileType (hFile=0x178) returned 0x1 [0110.635] WriteFile (in: hFile=0x178, lpBuffer=0x2829a64*, nNumberOfBytesToWrite=0x3440, lpNumberOfBytesWritten=0x31e6b8, lpOverlapped=0x0 | out: lpBuffer=0x2829a64*, lpNumberOfBytesWritten=0x31e6b8*=0x3440, lpOverlapped=0x0) returned 1 [0110.636] MoveFileW (lpExistingFileName="C:\\Windows\\Microsoft.NET\\Framework64\\v4.0.30319\\ASP.NETWebAdminFiles\\WebAdminStyles.css" (normalized: "c:\\windows\\microsoft.net\\framework64\\v4.0.30319\\asp.netwebadminfiles\\webadminstyles.css"), lpNewFileName="C:\\Windows\\Microsoft.NET\\Framework64\\v4.0.30319\\ASP.NETWebAdminFiles\\WebAdminStyles.css" (normalized: "c:\\windows\\microsoft.net\\framework64\\v4.0.30319\\asp.netwebadminfiles\\webadminstyles.css")) returned 1 [0110.640] CreateFileW (lpFileName="C:\\Windows\\Microsoft.NET\\Framework64\\v4.0.30319\\ASP.NETWebAdminFiles\\AppConfig\\AppConfigHome.aspx" (normalized: "c:\\windows\\microsoft.net\\framework64\\v4.0.30319\\asp.netwebadminfiles\\appconfig\\appconfighome.aspx"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x178 [0110.641] GetFileType (hFile=0x178) returned 0x1 [0110.641] GetFileType (hFile=0x178) returned 0x1 [0110.641] GetFileSize (in: hFile=0x178, lpFileSizeHigh=0x31e6a0 | out: lpFileSizeHigh=0x31e6a0*=0x0) returned 0x2148 [0110.641] ReadFile (in: hFile=0x178, lpBuffer=0x28312f0, nNumberOfBytesToRead=0x2148, lpNumberOfBytesRead=0x31e64c, lpOverlapped=0x0 | out: lpBuffer=0x28312f0*, lpNumberOfBytesRead=0x31e64c*=0x2148, lpOverlapped=0x0) returned 1 [0110.660] CreateFileW (lpFileName="C:\\Windows\\Microsoft.NET\\Framework64\\v4.0.30319\\ASP.NETWebAdminFiles\\AppConfig\\AppConfigHome.aspx" (normalized: "c:\\windows\\microsoft.net\\framework64\\v4.0.30319\\asp.netwebadminfiles\\appconfig\\appconfighome.aspx"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x178 [0110.661] GetFileType (hFile=0x178) returned 0x1 [0110.661] GetFileType (hFile=0x178) returned 0x1 [0110.661] WriteFile (in: hFile=0x178, lpBuffer=0x2687c38*, nNumberOfBytesToWrite=0x2150, lpNumberOfBytesWritten=0x31e640, lpOverlapped=0x0 | out: lpBuffer=0x2687c38*, lpNumberOfBytesWritten=0x31e640*=0x2150, lpOverlapped=0x0) returned 1 [0110.662] MoveFileW (lpExistingFileName="C:\\Windows\\Microsoft.NET\\Framework64\\v4.0.30319\\ASP.NETWebAdminFiles\\AppConfig\\AppConfigHome.aspx" (normalized: "c:\\windows\\microsoft.net\\framework64\\v4.0.30319\\asp.netwebadminfiles\\appconfig\\appconfighome.aspx"), lpNewFileName="C:\\Windows\\Microsoft.NET\\Framework64\\v4.0.30319\\ASP.NETWebAdminFiles\\AppConfig\\AppConfigHome.aspx" (normalized: "c:\\windows\\microsoft.net\\framework64\\v4.0.30319\\asp.netwebadminfiles\\appconfig\\appconfighome.aspx")) returned 1 [0110.662] CreateFileW (lpFileName="C:\\Windows\\Microsoft.NET\\Framework64\\v4.0.30319\\ASP.NETWebAdminFiles\\AppConfig\\CreateAppSetting.aspx" (normalized: "c:\\windows\\microsoft.net\\framework64\\v4.0.30319\\asp.netwebadminfiles\\appconfig\\createappsetting.aspx"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x178 [0110.662] GetFileType (hFile=0x178) returned 0x1 [0110.662] GetFileType (hFile=0x178) returned 0x1 [0110.662] GetFileSize (in: hFile=0x178, lpFileSizeHigh=0x31e6a0 | out: lpFileSizeHigh=0x31e6a0*=0x0) returned 0xe55 [0110.662] ReadFile (in: hFile=0x178, lpBuffer=0x268b094, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x31e64c, lpOverlapped=0x0 | out: lpBuffer=0x268b094*, lpNumberOfBytesRead=0x31e64c*=0xe55, lpOverlapped=0x0) returned 1 [0110.676] CreateFileW (lpFileName="C:\\Windows\\Microsoft.NET\\Framework64\\v4.0.30319\\ASP.NETWebAdminFiles\\AppConfig\\CreateAppSetting.aspx" (normalized: "c:\\windows\\microsoft.net\\framework64\\v4.0.30319\\asp.netwebadminfiles\\appconfig\\createappsetting.aspx"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x178 [0110.677] GetFileType (hFile=0x178) returned 0x1 [0110.677] GetFileType (hFile=0x178) returned 0x1 [0110.677] WriteFile (in: hFile=0x178, lpBuffer=0x26dd938*, nNumberOfBytesToWrite=0xe60, lpNumberOfBytesWritten=0x31e614, lpOverlapped=0x0 | out: lpBuffer=0x26dd938*, lpNumberOfBytesWritten=0x31e614*=0xe60, lpOverlapped=0x0) returned 1 [0110.678] MoveFileW (lpExistingFileName="C:\\Windows\\Microsoft.NET\\Framework64\\v4.0.30319\\ASP.NETWebAdminFiles\\AppConfig\\CreateAppSetting.aspx" (normalized: "c:\\windows\\microsoft.net\\framework64\\v4.0.30319\\asp.netwebadminfiles\\appconfig\\createappsetting.aspx"), lpNewFileName="C:\\Windows\\Microsoft.NET\\Framework64\\v4.0.30319\\ASP.NETWebAdminFiles\\AppConfig\\CreateAppSetting.aspx" (normalized: "c:\\windows\\microsoft.net\\framework64\\v4.0.30319\\asp.netwebadminfiles\\appconfig\\createappsetting.aspx")) returned 1 [0110.678] CreateFileW (lpFileName="C:\\Windows\\Microsoft.NET\\Framework64\\v4.0.30319\\ASP.NETWebAdminFiles\\AppConfig\\DebugAndTrace.aspx" (normalized: "c:\\windows\\microsoft.net\\framework64\\v4.0.30319\\asp.netwebadminfiles\\appconfig\\debugandtrace.aspx"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x178 [0110.679] GetFileType (hFile=0x178) returned 0x1 [0110.679] GetFileType (hFile=0x178) returned 0x1 [0110.679] GetFileSize (in: hFile=0x178, lpFileSizeHigh=0x31e6a0 | out: lpFileSizeHigh=0x31e6a0*=0x0) returned 0x33b3 [0110.679] ReadFile (in: hFile=0x178, lpBuffer=0x26dec6c, nNumberOfBytesToRead=0x33b3, lpNumberOfBytesRead=0x31e64c, lpOverlapped=0x0 | out: lpBuffer=0x26dec6c*, lpNumberOfBytesRead=0x31e64c*=0x33b3, lpOverlapped=0x0) returned 1 [0110.693] CreateFileW (lpFileName="C:\\Windows\\Microsoft.NET\\Framework64\\v4.0.30319\\ASP.NETWebAdminFiles\\AppConfig\\DebugAndTrace.aspx" (normalized: "c:\\windows\\microsoft.net\\framework64\\v4.0.30319\\asp.netwebadminfiles\\appconfig\\debugandtrace.aspx"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x178 [0110.694] GetFileType (hFile=0x178) returned 0x1 [0110.694] GetFileType (hFile=0x178) returned 0x1 [0110.694] WriteFile (in: hFile=0x178, lpBuffer=0x273bd14*, nNumberOfBytesToWrite=0x33c0, lpNumberOfBytesWritten=0x31e640, lpOverlapped=0x0 | out: lpBuffer=0x273bd14*, lpNumberOfBytesWritten=0x31e640*=0x33c0, lpOverlapped=0x0) returned 1 [0110.695] MoveFileW (lpExistingFileName="C:\\Windows\\Microsoft.NET\\Framework64\\v4.0.30319\\ASP.NETWebAdminFiles\\AppConfig\\DebugAndTrace.aspx" (normalized: "c:\\windows\\microsoft.net\\framework64\\v4.0.30319\\asp.netwebadminfiles\\appconfig\\debugandtrace.aspx"), lpNewFileName="C:\\Windows\\Microsoft.NET\\Framework64\\v4.0.30319\\ASP.NETWebAdminFiles\\AppConfig\\DebugAndTrace.aspx" (normalized: "c:\\windows\\microsoft.net\\framework64\\v4.0.30319\\asp.netwebadminfiles\\appconfig\\debugandtrace.aspx")) returned 1 [0110.696] CreateFileW (lpFileName="C:\\Windows\\Microsoft.NET\\Framework64\\v4.0.30319\\ASP.NETWebAdminFiles\\AppConfig\\DefineErrorPage.aspx" (normalized: "c:\\windows\\microsoft.net\\framework64\\v4.0.30319\\asp.netwebadminfiles\\appconfig\\defineerrorpage.aspx"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x178 [0110.696] GetFileType (hFile=0x178) returned 0x1 [0110.696] GetFileType (hFile=0x178) returned 0x1 [0110.696] GetFileSize (in: hFile=0x178, lpFileSizeHigh=0x31e6a0 | out: lpFileSizeHigh=0x31e6a0*=0x0) returned 0x490a [0110.696] ReadFile (in: hFile=0x178, lpBuffer=0x273f560, nNumberOfBytesToRead=0x490a, lpNumberOfBytesRead=0x31e64c, lpOverlapped=0x0 | out: lpBuffer=0x273f560*, lpNumberOfBytesRead=0x31e64c*=0x490a, lpOverlapped=0x0) returned 1 [0110.710] CreateFileW (lpFileName="C:\\Windows\\Microsoft.NET\\Framework64\\v4.0.30319\\ASP.NETWebAdminFiles\\AppConfig\\DefineErrorPage.aspx" (normalized: "c:\\windows\\microsoft.net\\framework64\\v4.0.30319\\asp.netwebadminfiles\\appconfig\\defineerrorpage.aspx"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x178 [0110.711] GetFileType (hFile=0x178) returned 0x1 [0110.711] GetFileType (hFile=0x178) returned 0x1 [0110.711] WriteFile (in: hFile=0x178, lpBuffer=0x27a3098*, nNumberOfBytesToWrite=0x4910, lpNumberOfBytesWritten=0x31e640, lpOverlapped=0x0 | out: lpBuffer=0x27a3098*, lpNumberOfBytesWritten=0x31e640*=0x4910, lpOverlapped=0x0) returned 1 [0110.712] MoveFileW (lpExistingFileName="C:\\Windows\\Microsoft.NET\\Framework64\\v4.0.30319\\ASP.NETWebAdminFiles\\AppConfig\\DefineErrorPage.aspx" (normalized: "c:\\windows\\microsoft.net\\framework64\\v4.0.30319\\asp.netwebadminfiles\\appconfig\\defineerrorpage.aspx"), lpNewFileName="C:\\Windows\\Microsoft.NET\\Framework64\\v4.0.30319\\ASP.NETWebAdminFiles\\AppConfig\\DefineErrorPage.aspx" (normalized: "c:\\windows\\microsoft.net\\framework64\\v4.0.30319\\asp.netwebadminfiles\\appconfig\\defineerrorpage.aspx")) returned 1 [0110.713] CreateFileW (lpFileName="C:\\Windows\\Microsoft.NET\\Framework64\\v4.0.30319\\ASP.NETWebAdminFiles\\AppConfig\\EditAppSetting.aspx" (normalized: "c:\\windows\\microsoft.net\\framework64\\v4.0.30319\\asp.netwebadminfiles\\appconfig\\editappsetting.aspx"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x178 [0110.713] GetFileType (hFile=0x178) returned 0x1 [0110.713] GetFileType (hFile=0x178) returned 0x1 [0110.713] GetFileSize (in: hFile=0x178, lpFileSizeHigh=0x31e6a0 | out: lpFileSizeHigh=0x31e6a0*=0x0) returned 0x900 [0110.713] ReadFile (in: hFile=0x178, lpBuffer=0x27a874c, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x31e64c, lpOverlapped=0x0 | out: lpBuffer=0x27a874c*, lpNumberOfBytesRead=0x31e64c*=0x900, lpOverlapped=0x0) returned 1 [0110.727] CreateFileW (lpFileName="C:\\Windows\\Microsoft.NET\\Framework64\\v4.0.30319\\ASP.NETWebAdminFiles\\AppConfig\\EditAppSetting.aspx" (normalized: "c:\\windows\\microsoft.net\\framework64\\v4.0.30319\\asp.netwebadminfiles\\appconfig\\editappsetting.aspx"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x178 [0110.728] GetFileType (hFile=0x178) returned 0x1 [0110.728] GetFileType (hFile=0x178) returned 0x1 [0110.730] MoveFileW (lpExistingFileName="C:\\Windows\\Microsoft.NET\\Framework64\\v4.0.30319\\ASP.NETWebAdminFiles\\AppConfig\\EditAppSetting.aspx" (normalized: "c:\\windows\\microsoft.net\\framework64\\v4.0.30319\\asp.netwebadminfiles\\appconfig\\editappsetting.aspx"), lpNewFileName="C:\\Windows\\Microsoft.NET\\Framework64\\v4.0.30319\\ASP.NETWebAdminFiles\\AppConfig\\EditAppSetting.aspx" (normalized: "c:\\windows\\microsoft.net\\framework64\\v4.0.30319\\asp.netwebadminfiles\\appconfig\\editappsetting.aspx")) returned 1 [0110.730] CreateFileW (lpFileName="C:\\Windows\\Microsoft.NET\\Framework64\\v4.0.30319\\ASP.NETWebAdminFiles\\AppConfig\\ManageAppSettings.aspx" (normalized: "c:\\windows\\microsoft.net\\framework64\\v4.0.30319\\asp.netwebadminfiles\\appconfig\\manageappsettings.aspx"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x178 [0110.730] GetFileType (hFile=0x178) returned 0x1 [0110.730] GetFileType (hFile=0x178) returned 0x1 [0110.730] GetFileSize (in: hFile=0x178, lpFileSizeHigh=0x31e6a0 | out: lpFileSizeHigh=0x31e6a0*=0x0) returned 0x3b5c [0110.730] ReadFile (in: hFile=0x178, lpBuffer=0x27fa73c, nNumberOfBytesToRead=0x3b5c, lpNumberOfBytesRead=0x31e64c, lpOverlapped=0x0 | out: lpBuffer=0x27fa73c*, lpNumberOfBytesRead=0x31e64c*=0x3b5c, lpOverlapped=0x0) returned 1 [0110.745] CreateFileW (lpFileName="C:\\Windows\\Microsoft.NET\\Framework64\\v4.0.30319\\ASP.NETWebAdminFiles\\AppConfig\\ManageAppSettings.aspx" (normalized: "c:\\windows\\microsoft.net\\framework64\\v4.0.30319\\asp.netwebadminfiles\\appconfig\\manageappsettings.aspx"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x178 [0110.746] GetFileType (hFile=0x178) returned 0x1 [0110.746] GetFileType (hFile=0x178) returned 0x1 [0110.746] WriteFile (in: hFile=0x178, lpBuffer=0x2859e00*, nNumberOfBytesToWrite=0x3b60, lpNumberOfBytesWritten=0x31e640, lpOverlapped=0x0 | out: lpBuffer=0x2859e00*, lpNumberOfBytesWritten=0x31e640*=0x3b60, lpOverlapped=0x0) returned 1 [0110.747] MoveFileW (lpExistingFileName="C:\\Windows\\Microsoft.NET\\Framework64\\v4.0.30319\\ASP.NETWebAdminFiles\\AppConfig\\ManageAppSettings.aspx" (normalized: "c:\\windows\\microsoft.net\\framework64\\v4.0.30319\\asp.netwebadminfiles\\appconfig\\manageappsettings.aspx"), lpNewFileName="C:\\Windows\\Microsoft.NET\\Framework64\\v4.0.30319\\ASP.NETWebAdminFiles\\AppConfig\\ManageAppSettings.aspx" (normalized: "c:\\windows\\microsoft.net\\framework64\\v4.0.30319\\asp.netwebadminfiles\\appconfig\\manageappsettings.aspx")) returned 1 [0110.747] CreateFileW (lpFileName="C:\\Windows\\Microsoft.NET\\Framework64\\v4.0.30319\\ASP.NETWebAdminFiles\\AppConfig\\SmtpSettings.aspx" (normalized: "c:\\windows\\microsoft.net\\framework64\\v4.0.30319\\asp.netwebadminfiles\\appconfig\\smtpsettings.aspx"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x178 [0110.747] GetFileType (hFile=0x178) returned 0x1 [0110.747] GetFileType (hFile=0x178) returned 0x1 [0110.747] GetFileSize (in: hFile=0x178, lpFileSizeHigh=0x31e6a0 | out: lpFileSizeHigh=0x31e6a0*=0x0) returned 0x4792 [0110.747] ReadFile (in: hFile=0x178, lpBuffer=0x285de00, nNumberOfBytesToRead=0x4792, lpNumberOfBytesRead=0x31e64c, lpOverlapped=0x0 | out: lpBuffer=0x285de00*, lpNumberOfBytesRead=0x31e64c*=0x4792, lpOverlapped=0x0) returned 1 [0110.764] CreateFileW (lpFileName="C:\\Windows\\Microsoft.NET\\Framework64\\v4.0.30319\\ASP.NETWebAdminFiles\\AppConfig\\SmtpSettings.aspx" (normalized: "c:\\windows\\microsoft.net\\framework64\\v4.0.30319\\asp.netwebadminfiles\\appconfig\\smtpsettings.aspx"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x178 [0110.764] GetFileType (hFile=0x178) returned 0x1 [0110.764] GetFileType (hFile=0x178) returned 0x1 [0110.764] WriteFile (in: hFile=0x178, lpBuffer=0x26c3820*, nNumberOfBytesToWrite=0x47a0, lpNumberOfBytesWritten=0x31e640, lpOverlapped=0x0 | out: lpBuffer=0x26c3820*, lpNumberOfBytesWritten=0x31e640*=0x47a0, lpOverlapped=0x0) returned 1 [0110.765] MoveFileW (lpExistingFileName="C:\\Windows\\Microsoft.NET\\Framework64\\v4.0.30319\\ASP.NETWebAdminFiles\\AppConfig\\SmtpSettings.aspx" (normalized: "c:\\windows\\microsoft.net\\framework64\\v4.0.30319\\asp.netwebadminfiles\\appconfig\\smtpsettings.aspx"), lpNewFileName="C:\\Windows\\Microsoft.NET\\Framework64\\v4.0.30319\\ASP.NETWebAdminFiles\\AppConfig\\SmtpSettings.aspx" (normalized: "c:\\windows\\microsoft.net\\framework64\\v4.0.30319\\asp.netwebadminfiles\\appconfig\\smtpsettings.aspx")) returned 1 [0110.777] CreateFileW (lpFileName="C:\\Windows\\Microsoft.NET\\Framework64\\v4.0.30319\\ASP.NETWebAdminFiles\\App_Data\\GroupedProviders.xml" (normalized: "c:\\windows\\microsoft.net\\framework64\\v4.0.30319\\asp.netwebadminfiles\\app_data\\groupedproviders.xml"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x178 [0110.777] GetFileType (hFile=0x178) returned 0x1 [0110.777] GetFileType (hFile=0x178) returned 0x1 [0110.777] GetFileSize (in: hFile=0x178, lpFileSizeHigh=0x31e6a0 | out: lpFileSizeHigh=0x31e6a0*=0x0) returned 0x13d [0110.777] ReadFile (in: hFile=0x178, lpBuffer=0x26d1ecc, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x31e64c, lpOverlapped=0x0 | out: lpBuffer=0x26d1ecc*, lpNumberOfBytesRead=0x31e64c*=0x13d, lpOverlapped=0x0) returned 1 [0110.790] CreateFileW (lpFileName="C:\\Windows\\Microsoft.NET\\Framework64\\v4.0.30319\\ASP.NETWebAdminFiles\\App_Data\\GroupedProviders.xml" (normalized: "c:\\windows\\microsoft.net\\framework64\\v4.0.30319\\asp.netwebadminfiles\\app_data\\groupedproviders.xml"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x178 [0110.791] GetFileType (hFile=0x178) returned 0x1 [0110.791] GetFileType (hFile=0x178) returned 0x1 [0110.792] MoveFileW (lpExistingFileName="C:\\Windows\\Microsoft.NET\\Framework64\\v4.0.30319\\ASP.NETWebAdminFiles\\App_Data\\GroupedProviders.xml" (normalized: "c:\\windows\\microsoft.net\\framework64\\v4.0.30319\\asp.netwebadminfiles\\app_data\\groupedproviders.xml"), lpNewFileName="C:\\Windows\\Microsoft.NET\\Framework64\\v4.0.30319\\ASP.NETWebAdminFiles\\App_Data\\GroupedProviders.xml" (normalized: "c:\\windows\\microsoft.net\\framework64\\v4.0.30319\\asp.netwebadminfiles\\app_data\\groupedproviders.xml")) returned 1 [0110.799] CreateFileW (lpFileName="C:\\Windows\\Microsoft.NET\\Framework64\\v4.0.30319\\ASP.NETWebAdminFiles\\Images\\ASPdotNET_logo.jpg" (normalized: "c:\\windows\\microsoft.net\\framework64\\v4.0.30319\\asp.netwebadminfiles\\images\\aspdotnet_logo.jpg"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x178 [0110.800] GetFileType (hFile=0x178) returned 0x1 [0110.800] GetFileType (hFile=0x178) returned 0x1 [0110.800] GetFileSize (in: hFile=0x178, lpFileSizeHigh=0x31e6a0 | out: lpFileSizeHigh=0x31e6a0*=0x0) returned 0x57e4 [0110.800] ReadFile (in: hFile=0x178, lpBuffer=0x2730760, nNumberOfBytesToRead=0x57e4, lpNumberOfBytesRead=0x31e64c, lpOverlapped=0x0 | out: lpBuffer=0x2730760*, lpNumberOfBytesRead=0x31e64c*=0x57e4, lpOverlapped=0x0) returned 1 [0110.815] CreateFileW (lpFileName="C:\\Windows\\Microsoft.NET\\Framework64\\v4.0.30319\\ASP.NETWebAdminFiles\\Images\\ASPdotNET_logo.jpg" (normalized: "c:\\windows\\microsoft.net\\framework64\\v4.0.30319\\asp.netwebadminfiles\\images\\aspdotnet_logo.jpg"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x178 [0110.816] GetFileType (hFile=0x178) returned 0x1 [0110.816] GetFileType (hFile=0x178) returned 0x1 [0110.816] WriteFile (in: hFile=0x178, lpBuffer=0x2798cf4*, nNumberOfBytesToWrite=0x57f0, lpNumberOfBytesWritten=0x31e640, lpOverlapped=0x0 | out: lpBuffer=0x2798cf4*, lpNumberOfBytesWritten=0x31e640*=0x57f0, lpOverlapped=0x0) returned 1 [0110.817] MoveFileW (lpExistingFileName="C:\\Windows\\Microsoft.NET\\Framework64\\v4.0.30319\\ASP.NETWebAdminFiles\\Images\\ASPdotNET_logo.jpg" (normalized: "c:\\windows\\microsoft.net\\framework64\\v4.0.30319\\asp.netwebadminfiles\\images\\aspdotnet_logo.jpg"), lpNewFileName="C:\\Windows\\Microsoft.NET\\Framework64\\v4.0.30319\\ASP.NETWebAdminFiles\\Images\\ASPdotNET_logo.jpg" (normalized: "c:\\windows\\microsoft.net\\framework64\\v4.0.30319\\asp.netwebadminfiles\\images\\aspdotnet_logo.jpg")) returned 1 [0110.818] CreateFileW (lpFileName="C:\\Windows\\Microsoft.NET\\Framework64\\v4.0.30319\\ASP.NETWebAdminFiles\\Images\\darkBlue_GRAD.jpg" (normalized: "c:\\windows\\microsoft.net\\framework64\\v4.0.30319\\asp.netwebadminfiles\\images\\darkblue_grad.jpg"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x178 [0110.818] GetFileType (hFile=0x178) returned 0x1 [0110.818] GetFileType (hFile=0x178) returned 0x1 [0110.818] GetFileSize (in: hFile=0x178, lpFileSizeHigh=0x31e6a0 | out: lpFileSizeHigh=0x31e6a0*=0x0) returned 0x2044 [0110.818] ReadFile (in: hFile=0x178, lpBuffer=0x279e980, nNumberOfBytesToRead=0x2044, lpNumberOfBytesRead=0x31e64c, lpOverlapped=0x0 | out: lpBuffer=0x279e980*, lpNumberOfBytesRead=0x31e64c*=0x2044, lpOverlapped=0x0) returned 1 [0110.832] CreateFileW (lpFileName="C:\\Windows\\Microsoft.NET\\Framework64\\v4.0.30319\\ASP.NETWebAdminFiles\\Images\\darkBlue_GRAD.jpg" (normalized: "c:\\windows\\microsoft.net\\framework64\\v4.0.30319\\asp.netwebadminfiles\\images\\darkblue_grad.jpg"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x178 [0110.833] GetFileType (hFile=0x178) returned 0x1 [0110.833] GetFileType (hFile=0x178) returned 0x1 [0110.833] WriteFile (in: hFile=0x178, lpBuffer=0x27f58f4*, nNumberOfBytesToWrite=0x2050, lpNumberOfBytesWritten=0x31e640, lpOverlapped=0x0 | out: lpBuffer=0x27f58f4*, lpNumberOfBytesWritten=0x31e640*=0x2050, lpOverlapped=0x0) returned 1 [0110.834] MoveFileW (lpExistingFileName="C:\\Windows\\Microsoft.NET\\Framework64\\v4.0.30319\\ASP.NETWebAdminFiles\\Images\\darkBlue_GRAD.jpg" (normalized: "c:\\windows\\microsoft.net\\framework64\\v4.0.30319\\asp.netwebadminfiles\\images\\darkblue_grad.jpg"), lpNewFileName="C:\\Windows\\Microsoft.NET\\Framework64\\v4.0.30319\\ASP.NETWebAdminFiles\\Images\\darkBlue_GRAD.jpg" (normalized: "c:\\windows\\microsoft.net\\framework64\\v4.0.30319\\asp.netwebadminfiles\\images\\darkblue_grad.jpg")) returned 1 [0110.834] CreateFileW (lpFileName="C:\\Windows\\Microsoft.NET\\Framework64\\v4.0.30319\\ASP.NETWebAdminFiles\\Images\\help.jpg" (normalized: "c:\\windows\\microsoft.net\\framework64\\v4.0.30319\\asp.netwebadminfiles\\images\\help.jpg"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x178 [0110.834] GetFileType (hFile=0x178) returned 0x1 [0110.835] GetFileType (hFile=0x178) returned 0x1 [0110.835] GetFileSize (in: hFile=0x178, lpFileSizeHigh=0x31e6a0 | out: lpFileSizeHigh=0x31e6a0*=0x0) returned 0x581 [0110.835] ReadFile (in: hFile=0x178, lpBuffer=0x27f8388, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x31e64c, lpOverlapped=0x0 | out: lpBuffer=0x27f8388*, lpNumberOfBytesRead=0x31e64c*=0x581, lpOverlapped=0x0) returned 1 [0110.849] CreateFileW (lpFileName="C:\\Windows\\Microsoft.NET\\Framework64\\v4.0.30319\\ASP.NETWebAdminFiles\\Images\\help.jpg" (normalized: "c:\\windows\\microsoft.net\\framework64\\v4.0.30319\\asp.netwebadminfiles\\images\\help.jpg"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x178 [0110.850] GetFileType (hFile=0x178) returned 0x1 [0110.850] GetFileType (hFile=0x178) returned 0x1 [0110.851] MoveFileW (lpExistingFileName="C:\\Windows\\Microsoft.NET\\Framework64\\v4.0.30319\\ASP.NETWebAdminFiles\\Images\\help.jpg" (normalized: "c:\\windows\\microsoft.net\\framework64\\v4.0.30319\\asp.netwebadminfiles\\images\\help.jpg"), lpNewFileName="C:\\Windows\\Microsoft.NET\\Framework64\\v4.0.30319\\ASP.NETWebAdminFiles\\Images\\help.jpg" (normalized: "c:\\windows\\microsoft.net\\framework64\\v4.0.30319\\asp.netwebadminfiles\\images\\help.jpg")) returned 1 [0110.851] CreateFileW (lpFileName="C:\\Windows\\Microsoft.NET\\Framework64\\v4.0.30319\\ASP.NETWebAdminFiles\\Images\\security_watermark.jpg" (normalized: "c:\\windows\\microsoft.net\\framework64\\v4.0.30319\\asp.netwebadminfiles\\images\\security_watermark.jpg"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x178 [0110.851] GetFileType (hFile=0x178) returned 0x1 [0110.851] GetFileType (hFile=0x178) returned 0x1 [0110.851] GetFileSize (in: hFile=0x178, lpFileSizeHigh=0x31e6a0 | out: lpFileSizeHigh=0x31e6a0*=0x0) returned 0x31 [0110.851] ReadFile (in: hFile=0x178, lpBuffer=0x284922c, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x31e64c, lpOverlapped=0x0 | out: lpBuffer=0x284922c*, lpNumberOfBytesRead=0x31e64c*=0x31, lpOverlapped=0x0) returned 1 [0110.879] CreateFileW (lpFileName="C:\\Windows\\Microsoft.NET\\Framework64\\v4.0.30319\\ASP.NETWebAdminFiles\\Images\\security_watermark.jpg" (normalized: "c:\\windows\\microsoft.net\\framework64\\v4.0.30319\\asp.netwebadminfiles\\images\\security_watermark.jpg"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x178 [0110.880] GetFileType (hFile=0x178) returned 0x1 [0110.880] GetFileType (hFile=0x178) returned 0x1 [0110.880] WriteFile (in: hFile=0x178, lpBuffer=0x26936d8*, nNumberOfBytesToWrite=0x40, lpNumberOfBytesWritten=0x31e614, lpOverlapped=0x0 | out: lpBuffer=0x26936d8*, lpNumberOfBytesWritten=0x31e614*=0x40, lpOverlapped=0x0) returned 1 [0110.881] MoveFileW (lpExistingFileName="C:\\Windows\\Microsoft.NET\\Framework64\\v4.0.30319\\ASP.NETWebAdminFiles\\Images\\security_watermark.jpg" (normalized: "c:\\windows\\microsoft.net\\framework64\\v4.0.30319\\asp.netwebadminfiles\\images\\security_watermark.jpg"), lpNewFileName="C:\\Windows\\Microsoft.NET\\Framework64\\v4.0.30319\\ASP.NETWebAdminFiles\\Images\\security_watermark.jpg" (normalized: "c:\\windows\\microsoft.net\\framework64\\v4.0.30319\\asp.netwebadminfiles\\images\\security_watermark.jpg")) returned 1 [0110.881] CreateFileW (lpFileName="C:\\Windows\\Microsoft.NET\\Framework64\\v4.0.30319\\ASP.NETWebAdminFiles\\Images\\topGradRepeat.jpg" (normalized: "c:\\windows\\microsoft.net\\framework64\\v4.0.30319\\asp.netwebadminfiles\\images\\topgradrepeat.jpg"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x178 [0110.881] GetFileType (hFile=0x178) returned 0x1 [0110.881] GetFileType (hFile=0x178) returned 0x1 [0110.881] GetFileSize (in: hFile=0x178, lpFileSizeHigh=0x31e6a0 | out: lpFileSizeHigh=0x31e6a0*=0x0) returned 0x21eb [0110.881] ReadFile (in: hFile=0x178, lpBuffer=0x2694a40, nNumberOfBytesToRead=0x21eb, lpNumberOfBytesRead=0x31e64c, lpOverlapped=0x0 | out: lpBuffer=0x2694a40*, lpNumberOfBytesRead=0x31e64c*=0x21eb, lpOverlapped=0x0) returned 1 [0110.929] CreateFileW (lpFileName="C:\\Windows\\Microsoft.NET\\Framework64\\v4.0.30319\\ASP.NETWebAdminFiles\\Images\\topGradRepeat.jpg" (normalized: "c:\\windows\\microsoft.net\\framework64\\v4.0.30319\\asp.netwebadminfiles\\images\\topgradrepeat.jpg"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x178 [0110.930] GetFileType (hFile=0x178) returned 0x1 [0110.930] GetFileType (hFile=0x178) returned 0x1 [0110.930] WriteFile (in: hFile=0x178, lpBuffer=0x26ec334*, nNumberOfBytesToWrite=0x21f0, lpNumberOfBytesWritten=0x31e640, lpOverlapped=0x0 | out: lpBuffer=0x26ec334*, lpNumberOfBytesWritten=0x31e640*=0x21f0, lpOverlapped=0x0) returned 1 [0110.931] MoveFileW (lpExistingFileName="C:\\Windows\\Microsoft.NET\\Framework64\\v4.0.30319\\ASP.NETWebAdminFiles\\Images\\topGradRepeat.jpg" (normalized: "c:\\windows\\microsoft.net\\framework64\\v4.0.30319\\asp.netwebadminfiles\\images\\topgradrepeat.jpg"), lpNewFileName="C:\\Windows\\Microsoft.NET\\Framework64\\v4.0.30319\\ASP.NETWebAdminFiles\\Images\\topGradRepeat.jpg" (normalized: "c:\\windows\\microsoft.net\\framework64\\v4.0.30319\\asp.netwebadminfiles\\images\\topgradrepeat.jpg")) returned 1 [0110.935] CreateFileW (lpFileName="C:\\Windows\\Microsoft.NET\\Framework64\\v4.0.30319\\ASP.NETWebAdminFiles\\Providers\\chooseProviderManagement.aspx" (normalized: "c:\\windows\\microsoft.net\\framework64\\v4.0.30319\\asp.netwebadminfiles\\providers\\chooseprovidermanagement.aspx"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x178 [0110.936] GetFileType (hFile=0x178) returned 0x1 [0110.936] GetFileType (hFile=0x178) returned 0x1 [0110.936] GetFileSize (in: hFile=0x178, lpFileSizeHigh=0x31e6a0 | out: lpFileSizeHigh=0x31e6a0*=0x0) returned 0x99e [0110.936] ReadFile (in: hFile=0x178, lpBuffer=0x26f22b4, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x31e64c, lpOverlapped=0x0 | out: lpBuffer=0x26f22b4*, lpNumberOfBytesRead=0x31e64c*=0x99e, lpOverlapped=0x0) returned 1 [0110.951] CreateFileW (lpFileName="C:\\Windows\\Microsoft.NET\\Framework64\\v4.0.30319\\ASP.NETWebAdminFiles\\Providers\\chooseProviderManagement.aspx" (normalized: "c:\\windows\\microsoft.net\\framework64\\v4.0.30319\\asp.netwebadminfiles\\providers\\chooseprovidermanagement.aspx"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x178 [0110.952] GetFileType (hFile=0x178) returned 0x1 [0110.952] GetFileType (hFile=0x178) returned 0x1 [0110.953] MoveFileW (lpExistingFileName="C:\\Windows\\Microsoft.NET\\Framework64\\v4.0.30319\\ASP.NETWebAdminFiles\\Providers\\chooseProviderManagement.aspx" (normalized: "c:\\windows\\microsoft.net\\framework64\\v4.0.30319\\asp.netwebadminfiles\\providers\\chooseprovidermanagement.aspx"), lpNewFileName="C:\\Windows\\Microsoft.NET\\Framework64\\v4.0.30319\\ASP.NETWebAdminFiles\\Providers\\chooseProviderManagement.aspx" (normalized: "c:\\windows\\microsoft.net\\framework64\\v4.0.30319\\asp.netwebadminfiles\\providers\\chooseprovidermanagement.aspx")) returned 1 [0110.953] CreateFileW (lpFileName="C:\\Windows\\Microsoft.NET\\Framework64\\v4.0.30319\\ASP.NETWebAdminFiles\\Providers\\ManageConsolidatedProviders.aspx" (normalized: "c:\\windows\\microsoft.net\\framework64\\v4.0.30319\\asp.netwebadminfiles\\providers\\manageconsolidatedproviders.aspx"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x178 [0110.954] GetFileType (hFile=0x178) returned 0x1 [0110.954] GetFileType (hFile=0x178) returned 0x1 [0110.954] GetFileSize (in: hFile=0x178, lpFileSizeHigh=0x31e6a0 | out: lpFileSizeHigh=0x31e6a0*=0x0) returned 0x3133 [0110.954] ReadFile (in: hFile=0x178, lpBuffer=0x27445e0, nNumberOfBytesToRead=0x3133, lpNumberOfBytesRead=0x31e64c, lpOverlapped=0x0 | out: lpBuffer=0x27445e0*, lpNumberOfBytesRead=0x31e64c*=0x3133, lpOverlapped=0x0) returned 1 [0110.969] CreateFileW (lpFileName="C:\\Windows\\Microsoft.NET\\Framework64\\v4.0.30319\\ASP.NETWebAdminFiles\\Providers\\ManageConsolidatedProviders.aspx" (normalized: "c:\\windows\\microsoft.net\\framework64\\v4.0.30319\\asp.netwebadminfiles\\providers\\manageconsolidatedproviders.aspx"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x178 [0110.970] GetFileType (hFile=0x178) returned 0x1 [0110.970] GetFileType (hFile=0x178) returned 0x1 [0110.970] WriteFile (in: hFile=0x178, lpBuffer=0x27a0a08*, nNumberOfBytesToWrite=0x3140, lpNumberOfBytesWritten=0x31e640, lpOverlapped=0x0 | out: lpBuffer=0x27a0a08*, lpNumberOfBytesWritten=0x31e640*=0x3140, lpOverlapped=0x0) returned 1 [0110.971] MoveFileW (lpExistingFileName="C:\\Windows\\Microsoft.NET\\Framework64\\v4.0.30319\\ASP.NETWebAdminFiles\\Providers\\ManageConsolidatedProviders.aspx" (normalized: "c:\\windows\\microsoft.net\\framework64\\v4.0.30319\\asp.netwebadminfiles\\providers\\manageconsolidatedproviders.aspx"), lpNewFileName="C:\\Windows\\Microsoft.NET\\Framework64\\v4.0.30319\\ASP.NETWebAdminFiles\\Providers\\ManageConsolidatedProviders.aspx" (normalized: "c:\\windows\\microsoft.net\\framework64\\v4.0.30319\\asp.netwebadminfiles\\providers\\manageconsolidatedproviders.aspx")) returned 1 [0110.971] CreateFileW (lpFileName="C:\\Windows\\Microsoft.NET\\Framework64\\v4.0.30319\\ASP.NETWebAdminFiles\\Providers\\ManageProviders.aspx" (normalized: "c:\\windows\\microsoft.net\\framework64\\v4.0.30319\\asp.netwebadminfiles\\providers\\manageproviders.aspx"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x178 [0110.972] GetFileType (hFile=0x178) returned 0x1 [0110.972] GetFileType (hFile=0x178) returned 0x1 [0110.972] GetFileSize (in: hFile=0x178, lpFileSizeHigh=0x31e6a0 | out: lpFileSizeHigh=0x31e6a0*=0x0) returned 0x25f1 [0110.972] ReadFile (in: hFile=0x178, lpBuffer=0x27a4044, nNumberOfBytesToRead=0x25f1, lpNumberOfBytesRead=0x31e64c, lpOverlapped=0x0 | out: lpBuffer=0x27a4044*, lpNumberOfBytesRead=0x31e64c*=0x25f1, lpOverlapped=0x0) returned 1 [0110.986] CreateFileW (lpFileName="C:\\Windows\\Microsoft.NET\\Framework64\\v4.0.30319\\ASP.NETWebAdminFiles\\Providers\\ManageProviders.aspx" (normalized: "c:\\windows\\microsoft.net\\framework64\\v4.0.30319\\asp.netwebadminfiles\\providers\\manageproviders.aspx"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x178 [0110.987] GetFileType (hFile=0x178) returned 0x1 [0110.988] GetFileType (hFile=0x178) returned 0x1 [0110.988] WriteFile (in: hFile=0x178, lpBuffer=0x27fcc2c*, nNumberOfBytesToWrite=0x2600, lpNumberOfBytesWritten=0x31e640, lpOverlapped=0x0 | out: lpBuffer=0x27fcc2c*, lpNumberOfBytesWritten=0x31e640*=0x2600, lpOverlapped=0x0) returned 1 [0110.989] MoveFileW (lpExistingFileName="C:\\Windows\\Microsoft.NET\\Framework64\\v4.0.30319\\ASP.NETWebAdminFiles\\Providers\\ManageProviders.aspx" (normalized: "c:\\windows\\microsoft.net\\framework64\\v4.0.30319\\asp.netwebadminfiles\\providers\\manageproviders.aspx"), lpNewFileName="C:\\Windows\\Microsoft.NET\\Framework64\\v4.0.30319\\ASP.NETWebAdminFiles\\Providers\\ManageProviders.aspx" (normalized: "c:\\windows\\microsoft.net\\framework64\\v4.0.30319\\asp.netwebadminfiles\\providers\\manageproviders.aspx")) returned 1 [0110.996] CreateFileW (lpFileName="C:\\Windows\\Microsoft.NET\\Framework64\\v4.0.30319\\ASP.NETWebAdminFiles\\Security\\security.aspx" (normalized: "c:\\windows\\microsoft.net\\framework64\\v4.0.30319\\asp.netwebadminfiles\\security\\security.aspx"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x178 [0110.997] GetFileType (hFile=0x178) returned 0x1 [0110.997] GetFileType (hFile=0x178) returned 0x1 [0110.997] GetFileSize (in: hFile=0x178, lpFileSizeHigh=0x31e6a0 | out: lpFileSizeHigh=0x31e6a0*=0x0) returned 0x27da [0110.997] ReadFile (in: hFile=0x178, lpBuffer=0x2806000, nNumberOfBytesToRead=0x27da, lpNumberOfBytesRead=0x31e64c, lpOverlapped=0x0 | out: lpBuffer=0x2806000*, lpNumberOfBytesRead=0x31e64c*=0x27da, lpOverlapped=0x0) returned 1 [0111.012] CreateFileW (lpFileName="C:\\Windows\\Microsoft.NET\\Framework64\\v4.0.30319\\ASP.NETWebAdminFiles\\Security\\security.aspx" (normalized: "c:\\windows\\microsoft.net\\framework64\\v4.0.30319\\asp.netwebadminfiles\\security\\security.aspx"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x178 [0111.013] GetFileType (hFile=0x178) returned 0x1 [0111.013] GetFileType (hFile=0x178) returned 0x1 [0111.013] WriteFile (in: hFile=0x178, lpBuffer=0x285f548*, nNumberOfBytesToWrite=0x27e0, lpNumberOfBytesWritten=0x31e640, lpOverlapped=0x0 | out: lpBuffer=0x285f548*, lpNumberOfBytesWritten=0x31e640*=0x27e0, lpOverlapped=0x0) returned 1 [0111.014] MoveFileW (lpExistingFileName="C:\\Windows\\Microsoft.NET\\Framework64\\v4.0.30319\\ASP.NETWebAdminFiles\\Security\\security.aspx" (normalized: "c:\\windows\\microsoft.net\\framework64\\v4.0.30319\\asp.netwebadminfiles\\security\\security.aspx"), lpNewFileName="C:\\Windows\\Microsoft.NET\\Framework64\\v4.0.30319\\ASP.NETWebAdminFiles\\Security\\security.aspx" (normalized: "c:\\windows\\microsoft.net\\framework64\\v4.0.30319\\asp.netwebadminfiles\\security\\security.aspx")) returned 1 [0111.014] CreateFileW (lpFileName="C:\\Windows\\Microsoft.NET\\Framework64\\v4.0.30319\\ASP.NETWebAdminFiles\\Security\\security0.aspx" (normalized: "c:\\windows\\microsoft.net\\framework64\\v4.0.30319\\asp.netwebadminfiles\\security\\security0.aspx"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x178 [0111.014] GetFileType (hFile=0x178) returned 0x1 [0111.015] GetFileType (hFile=0x178) returned 0x1 [0111.015] GetFileSize (in: hFile=0x178, lpFileSizeHigh=0x31e6a0 | out: lpFileSizeHigh=0x31e6a0*=0x0) returned 0x5a7 [0111.015] ReadFile (in: hFile=0x178, lpBuffer=0x2862720, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x31e64c, lpOverlapped=0x0 | out: lpBuffer=0x2862720*, lpNumberOfBytesRead=0x31e64c*=0x5a7, lpOverlapped=0x0) returned 1 [0111.031] CreateFileW (lpFileName="C:\\Windows\\Microsoft.NET\\Framework64\\v4.0.30319\\ASP.NETWebAdminFiles\\Security\\security0.aspx" (normalized: "c:\\windows\\microsoft.net\\framework64\\v4.0.30319\\asp.netwebadminfiles\\security\\security0.aspx"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x178 [0111.032] GetFileType (hFile=0x178) returned 0x1 [0111.032] GetFileType (hFile=0x178) returned 0x1 [0111.033] MoveFileW (lpExistingFileName="C:\\Windows\\Microsoft.NET\\Framework64\\v4.0.30319\\ASP.NETWebAdminFiles\\Security\\security0.aspx" (normalized: "c:\\windows\\microsoft.net\\framework64\\v4.0.30319\\asp.netwebadminfiles\\security\\security0.aspx"), lpNewFileName="C:\\Windows\\Microsoft.NET\\Framework64\\v4.0.30319\\ASP.NETWebAdminFiles\\Security\\security0.aspx" (normalized: "c:\\windows\\microsoft.net\\framework64\\v4.0.30319\\asp.netwebadminfiles\\security\\security0.aspx")) returned 1 [0111.033] CreateFileW (lpFileName="C:\\Windows\\Microsoft.NET\\Framework64\\v4.0.30319\\ASP.NETWebAdminFiles\\Security\\setUpAuthentication.aspx" (normalized: "c:\\windows\\microsoft.net\\framework64\\v4.0.30319\\asp.netwebadminfiles\\security\\setupauthentication.aspx"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x178 [0111.033] GetFileType (hFile=0x178) returned 0x1 [0111.033] GetFileType (hFile=0x178) returned 0x1 [0111.034] GetFileSize (in: hFile=0x178, lpFileSizeHigh=0x31e6a0 | out: lpFileSizeHigh=0x31e6a0*=0x0) returned 0xa04 [0111.034] ReadFile (in: hFile=0x178, lpBuffer=0x26b3910, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x31e64c, lpOverlapped=0x0 | out: lpBuffer=0x26b3910*, lpNumberOfBytesRead=0x31e64c*=0xa04, lpOverlapped=0x0) returned 1 [0111.050] CreateFileW (lpFileName="C:\\Windows\\Microsoft.NET\\Framework64\\v4.0.30319\\ASP.NETWebAdminFiles\\Security\\setUpAuthentication.aspx" (normalized: "c:\\windows\\microsoft.net\\framework64\\v4.0.30319\\asp.netwebadminfiles\\security\\setupauthentication.aspx"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x178 [0111.051] GetFileType (hFile=0x178) returned 0x1 [0111.051] GetFileType (hFile=0x178) returned 0x1 [0111.051] WriteFile (in: hFile=0x178, lpBuffer=0x2704c30*, nNumberOfBytesToWrite=0xa10, lpNumberOfBytesWritten=0x31e614, lpOverlapped=0x0 | out: lpBuffer=0x2704c30*, lpNumberOfBytesWritten=0x31e614*=0xa10, lpOverlapped=0x0) returned 1 [0111.052] MoveFileW (lpExistingFileName="C:\\Windows\\Microsoft.NET\\Framework64\\v4.0.30319\\ASP.NETWebAdminFiles\\Security\\setUpAuthentication.aspx" (normalized: "c:\\windows\\microsoft.net\\framework64\\v4.0.30319\\asp.netwebadminfiles\\security\\setupauthentication.aspx"), lpNewFileName="C:\\Windows\\Microsoft.NET\\Framework64\\v4.0.30319\\ASP.NETWebAdminFiles\\Security\\setUpAuthentication.aspx" (normalized: "c:\\windows\\microsoft.net\\framework64\\v4.0.30319\\asp.netwebadminfiles\\security\\setupauthentication.aspx")) returned 1 [0111.059] CreateFileW (lpFileName="C:\\Windows\\Microsoft.NET\\Framework64\\v4.0.30319\\ASP.NETWebAdminFiles\\Security\\Permissions\\createPermission.aspx" (normalized: "c:\\windows\\microsoft.net\\framework64\\v4.0.30319\\asp.netwebadminfiles\\security\\permissions\\createpermission.aspx"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x178 [0111.060] GetFileType (hFile=0x178) returned 0x1 [0111.060] GetFileType (hFile=0x178) returned 0x1 [0111.060] GetFileSize (in: hFile=0x178, lpFileSizeHigh=0x31e628 | out: lpFileSizeHigh=0x31e628*=0x0) returned 0x2b9a [0111.060] ReadFile (in: hFile=0x178, lpBuffer=0x270b37c, nNumberOfBytesToRead=0x2b9a, lpNumberOfBytesRead=0x31e5d4, lpOverlapped=0x0 | out: lpBuffer=0x270b37c*, lpNumberOfBytesRead=0x31e5d4*=0x2b9a, lpOverlapped=0x0) returned 1 [0111.074] CreateFileW (lpFileName="C:\\Windows\\Microsoft.NET\\Framework64\\v4.0.30319\\ASP.NETWebAdminFiles\\Security\\Permissions\\createPermission.aspx" (normalized: "c:\\windows\\microsoft.net\\framework64\\v4.0.30319\\asp.netwebadminfiles\\security\\permissions\\createpermission.aspx"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x178 [0111.075] GetFileType (hFile=0x178) returned 0x1 [0111.075] GetFileType (hFile=0x178) returned 0x1 [0111.075] WriteFile (in: hFile=0x178, lpBuffer=0x2765b84*, nNumberOfBytesToWrite=0x2ba0, lpNumberOfBytesWritten=0x31e5c8, lpOverlapped=0x0 | out: lpBuffer=0x2765b84*, lpNumberOfBytesWritten=0x31e5c8*=0x2ba0, lpOverlapped=0x0) returned 1 [0111.076] MoveFileW (lpExistingFileName="C:\\Windows\\Microsoft.NET\\Framework64\\v4.0.30319\\ASP.NETWebAdminFiles\\Security\\Permissions\\createPermission.aspx" (normalized: "c:\\windows\\microsoft.net\\framework64\\v4.0.30319\\asp.netwebadminfiles\\security\\permissions\\createpermission.aspx"), lpNewFileName="C:\\Windows\\Microsoft.NET\\Framework64\\v4.0.30319\\ASP.NETWebAdminFiles\\Security\\Permissions\\createPermission.aspx" (normalized: "c:\\windows\\microsoft.net\\framework64\\v4.0.30319\\asp.netwebadminfiles\\security\\permissions\\createpermission.aspx")) returned 1 [0111.076] CreateFileW (lpFileName="C:\\Windows\\Microsoft.NET\\Framework64\\v4.0.30319\\ASP.NETWebAdminFiles\\Security\\Permissions\\managePermissions.aspx" (normalized: "c:\\windows\\microsoft.net\\framework64\\v4.0.30319\\asp.netwebadminfiles\\security\\permissions\\managepermissions.aspx"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x178 [0111.076] GetFileType (hFile=0x178) returned 0x1 [0111.076] GetFileType (hFile=0x178) returned 0x1 [0111.077] GetFileSize (in: hFile=0x178, lpFileSizeHigh=0x31e628 | out: lpFileSizeHigh=0x31e628*=0x0) returned 0x54a4 [0111.077] ReadFile (in: hFile=0x178, lpBuffer=0x2768c28, nNumberOfBytesToRead=0x54a4, lpNumberOfBytesRead=0x31e5d4, lpOverlapped=0x0 | out: lpBuffer=0x2768c28*, lpNumberOfBytesRead=0x31e5d4*=0x54a4, lpOverlapped=0x0) returned 1 [0111.092] CreateFileW (lpFileName="C:\\Windows\\Microsoft.NET\\Framework64\\v4.0.30319\\ASP.NETWebAdminFiles\\Security\\Permissions\\managePermissions.aspx" (normalized: "c:\\windows\\microsoft.net\\framework64\\v4.0.30319\\asp.netwebadminfiles\\security\\permissions\\managepermissions.aspx"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x178 [0111.093] GetFileType (hFile=0x178) returned 0x1 [0111.093] GetFileType (hFile=0x178) returned 0x1 [0111.093] WriteFile (in: hFile=0x178, lpBuffer=0x27d017c*, nNumberOfBytesToWrite=0x54b0, lpNumberOfBytesWritten=0x31e5c8, lpOverlapped=0x0 | out: lpBuffer=0x27d017c*, lpNumberOfBytesWritten=0x31e5c8*=0x54b0, lpOverlapped=0x0) returned 1 [0111.094] MoveFileW (lpExistingFileName="C:\\Windows\\Microsoft.NET\\Framework64\\v4.0.30319\\ASP.NETWebAdminFiles\\Security\\Permissions\\managePermissions.aspx" (normalized: "c:\\windows\\microsoft.net\\framework64\\v4.0.30319\\asp.netwebadminfiles\\security\\permissions\\managepermissions.aspx"), lpNewFileName="C:\\Windows\\Microsoft.NET\\Framework64\\v4.0.30319\\ASP.NETWebAdminFiles\\Security\\Permissions\\managePermissions.aspx" (normalized: "c:\\windows\\microsoft.net\\framework64\\v4.0.30319\\asp.netwebadminfiles\\security\\permissions\\managepermissions.aspx")) returned 1 [0111.099] CreateFileW (lpFileName="C:\\Windows\\Microsoft.NET\\Framework64\\v4.0.30319\\ASP.NETWebAdminFiles\\Security\\Roles\\manageAllRoles.aspx" (normalized: "c:\\windows\\microsoft.net\\framework64\\v4.0.30319\\asp.netwebadminfiles\\security\\roles\\manageallroles.aspx"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x178 [0111.100] GetFileType (hFile=0x178) returned 0x1 [0111.100] GetFileType (hFile=0x178) returned 0x1 [0111.100] GetFileSize (in: hFile=0x178, lpFileSizeHigh=0x31e628 | out: lpFileSizeHigh=0x31e628*=0x0) returned 0x1c63 [0111.100] ReadFile (in: hFile=0x178, lpBuffer=0x27dab74, nNumberOfBytesToRead=0x1c63, lpNumberOfBytesRead=0x31e5d4, lpOverlapped=0x0 | out: lpBuffer=0x27dab74*, lpNumberOfBytesRead=0x31e5d4*=0x1c63, lpOverlapped=0x0) returned 1 [0111.115] CreateFileW (lpFileName="C:\\Windows\\Microsoft.NET\\Framework64\\v4.0.30319\\ASP.NETWebAdminFiles\\Security\\Roles\\manageAllRoles.aspx" (normalized: "c:\\windows\\microsoft.net\\framework64\\v4.0.30319\\asp.netwebadminfiles\\security\\roles\\manageallroles.aspx"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x178 [0111.116] GetFileType (hFile=0x178) returned 0x1 [0111.116] GetFileType (hFile=0x178) returned 0x1 [0111.116] WriteFile (in: hFile=0x178, lpBuffer=0x283078c*, nNumberOfBytesToWrite=0x1c70, lpNumberOfBytesWritten=0x31e5c8, lpOverlapped=0x0 | out: lpBuffer=0x283078c*, lpNumberOfBytesWritten=0x31e5c8*=0x1c70, lpOverlapped=0x0) returned 1 [0111.117] MoveFileW (lpExistingFileName="C:\\Windows\\Microsoft.NET\\Framework64\\v4.0.30319\\ASP.NETWebAdminFiles\\Security\\Roles\\manageAllRoles.aspx" (normalized: "c:\\windows\\microsoft.net\\framework64\\v4.0.30319\\asp.netwebadminfiles\\security\\roles\\manageallroles.aspx"), lpNewFileName="C:\\Windows\\Microsoft.NET\\Framework64\\v4.0.30319\\ASP.NETWebAdminFiles\\Security\\Roles\\manageAllRoles.aspx" (normalized: "c:\\windows\\microsoft.net\\framework64\\v4.0.30319\\asp.netwebadminfiles\\security\\roles\\manageallroles.aspx")) returned 1 [0111.117] CreateFileW (lpFileName="C:\\Windows\\Microsoft.NET\\Framework64\\v4.0.30319\\ASP.NETWebAdminFiles\\Security\\Roles\\manageSingleRole.aspx" (normalized: "c:\\windows\\microsoft.net\\framework64\\v4.0.30319\\asp.netwebadminfiles\\security\\roles\\managesinglerole.aspx"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x178 [0111.117] GetFileType (hFile=0x178) returned 0x1 [0111.117] GetFileType (hFile=0x178) returned 0x1 [0111.117] GetFileSize (in: hFile=0x178, lpFileSizeHigh=0x31e628 | out: lpFileSizeHigh=0x31e628*=0x0) returned 0x2739 [0111.118] ReadFile (in: hFile=0x178, lpBuffer=0x28328b8, nNumberOfBytesToRead=0x2739, lpNumberOfBytesRead=0x31e5d4, lpOverlapped=0x0 | out: lpBuffer=0x28328b8*, lpNumberOfBytesRead=0x31e5d4*=0x2739, lpOverlapped=0x0) returned 1 [0111.135] CreateFileW (lpFileName="C:\\Windows\\Microsoft.NET\\Framework64\\v4.0.30319\\ASP.NETWebAdminFiles\\Security\\Roles\\manageSingleRole.aspx" (normalized: "c:\\windows\\microsoft.net\\framework64\\v4.0.30319\\asp.netwebadminfiles\\security\\roles\\managesinglerole.aspx"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x178 [0111.136] GetFileType (hFile=0x178) returned 0x1 [0111.136] GetFileType (hFile=0x178) returned 0x1 [0111.136] WriteFile (in: hFile=0x178, lpBuffer=0x268dfb0*, nNumberOfBytesToWrite=0x2740, lpNumberOfBytesWritten=0x31e5c8, lpOverlapped=0x0 | out: lpBuffer=0x268dfb0*, lpNumberOfBytesWritten=0x31e5c8*=0x2740, lpOverlapped=0x0) returned 1 [0111.137] MoveFileW (lpExistingFileName="C:\\Windows\\Microsoft.NET\\Framework64\\v4.0.30319\\ASP.NETWebAdminFiles\\Security\\Roles\\manageSingleRole.aspx" (normalized: "c:\\windows\\microsoft.net\\framework64\\v4.0.30319\\asp.netwebadminfiles\\security\\roles\\managesinglerole.aspx"), lpNewFileName="C:\\Windows\\Microsoft.NET\\Framework64\\v4.0.30319\\ASP.NETWebAdminFiles\\Security\\Roles\\manageSingleRole.aspx" (normalized: "c:\\windows\\microsoft.net\\framework64\\v4.0.30319\\asp.netwebadminfiles\\security\\roles\\managesinglerole.aspx")) returned 1 [0111.141] CreateFileW (lpFileName="C:\\Windows\\Microsoft.NET\\Framework64\\v4.0.30319\\ASP.NETWebAdminFiles\\Security\\Users\\addUser.aspx" (normalized: "c:\\windows\\microsoft.net\\framework64\\v4.0.30319\\asp.netwebadminfiles\\security\\users\\adduser.aspx"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x178 [0111.142] GetFileType (hFile=0x178) returned 0x1 [0111.142] GetFileType (hFile=0x178) returned 0x1 [0111.142] GetFileSize (in: hFile=0x178, lpFileSizeHigh=0x31e628 | out: lpFileSizeHigh=0x31e628*=0x0) returned 0x150e [0111.142] ReadFile (in: hFile=0x178, lpBuffer=0x2696254, nNumberOfBytesToRead=0x150e, lpNumberOfBytesRead=0x31e5d4, lpOverlapped=0x0 | out: lpBuffer=0x2696254*, lpNumberOfBytesRead=0x31e5d4*=0x150e, lpOverlapped=0x0) returned 1 [0111.160] CreateFileW (lpFileName="C:\\Windows\\Microsoft.NET\\Framework64\\v4.0.30319\\ASP.NETWebAdminFiles\\Security\\Users\\addUser.aspx" (normalized: "c:\\windows\\microsoft.net\\framework64\\v4.0.30319\\asp.netwebadminfiles\\security\\users\\adduser.aspx"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x178 [0111.161] GetFileType (hFile=0x178) returned 0x1 [0111.161] GetFileType (hFile=0x178) returned 0x1 [0111.161] WriteFile (in: hFile=0x178, lpBuffer=0x26e9ae8*, nNumberOfBytesToWrite=0x1510, lpNumberOfBytesWritten=0x31e5c8, lpOverlapped=0x0 | out: lpBuffer=0x26e9ae8*, lpNumberOfBytesWritten=0x31e5c8*=0x1510, lpOverlapped=0x0) returned 1 [0111.162] MoveFileW (lpExistingFileName="C:\\Windows\\Microsoft.NET\\Framework64\\v4.0.30319\\ASP.NETWebAdminFiles\\Security\\Users\\addUser.aspx" (normalized: "c:\\windows\\microsoft.net\\framework64\\v4.0.30319\\asp.netwebadminfiles\\security\\users\\adduser.aspx"), lpNewFileName="C:\\Windows\\Microsoft.NET\\Framework64\\v4.0.30319\\ASP.NETWebAdminFiles\\Security\\Users\\addUser.aspx" (normalized: "c:\\windows\\microsoft.net\\framework64\\v4.0.30319\\asp.netwebadminfiles\\security\\users\\adduser.aspx")) returned 1 [0111.162] CreateFileW (lpFileName="C:\\Windows\\Microsoft.NET\\Framework64\\v4.0.30319\\ASP.NETWebAdminFiles\\Security\\Users\\editUser.aspx" (normalized: "c:\\windows\\microsoft.net\\framework64\\v4.0.30319\\asp.netwebadminfiles\\security\\users\\edituser.aspx"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x178 [0111.162] GetFileType (hFile=0x178) returned 0x1 [0111.162] GetFileType (hFile=0x178) returned 0x1 [0111.162] GetFileSize (in: hFile=0x178, lpFileSizeHigh=0x31e628 | out: lpFileSizeHigh=0x31e628*=0x0) returned 0x2f41 [0111.162] ReadFile (in: hFile=0x178, lpBuffer=0x26eb464, nNumberOfBytesToRead=0x2f41, lpNumberOfBytesRead=0x31e5d4, lpOverlapped=0x0 | out: lpBuffer=0x26eb464*, lpNumberOfBytesRead=0x31e5d4*=0x2f41, lpOverlapped=0x0) returned 1 [0111.180] CreateFileW (lpFileName="C:\\Windows\\Microsoft.NET\\Framework64\\v4.0.30319\\ASP.NETWebAdminFiles\\Security\\Users\\editUser.aspx" (normalized: "c:\\windows\\microsoft.net\\framework64\\v4.0.30319\\asp.netwebadminfiles\\security\\users\\edituser.aspx"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x178 [0111.181] GetFileType (hFile=0x178) returned 0x1 [0111.181] GetFileType (hFile=0x178) returned 0x1 [0111.181] WriteFile (in: hFile=0x178, lpBuffer=0x2746edc*, nNumberOfBytesToWrite=0x2f50, lpNumberOfBytesWritten=0x31e5c8, lpOverlapped=0x0 | out: lpBuffer=0x2746edc*, lpNumberOfBytesWritten=0x31e5c8*=0x2f50, lpOverlapped=0x0) returned 1 [0111.182] MoveFileW (lpExistingFileName="C:\\Windows\\Microsoft.NET\\Framework64\\v4.0.30319\\ASP.NETWebAdminFiles\\Security\\Users\\editUser.aspx" (normalized: "c:\\windows\\microsoft.net\\framework64\\v4.0.30319\\asp.netwebadminfiles\\security\\users\\edituser.aspx"), lpNewFileName="C:\\Windows\\Microsoft.NET\\Framework64\\v4.0.30319\\ASP.NETWebAdminFiles\\Security\\Users\\editUser.aspx" (normalized: "c:\\windows\\microsoft.net\\framework64\\v4.0.30319\\asp.netwebadminfiles\\security\\users\\edituser.aspx")) returned 1 [0111.183] CreateFileW (lpFileName="C:\\Windows\\Microsoft.NET\\Framework64\\v4.0.30319\\ASP.NETWebAdminFiles\\Security\\Users\\findUsers.aspx" (normalized: "c:\\windows\\microsoft.net\\framework64\\v4.0.30319\\asp.netwebadminfiles\\security\\users\\findusers.aspx"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x178 [0111.183] GetFileType (hFile=0x178) returned 0x1 [0111.184] GetFileType (hFile=0x178) returned 0x1 [0111.184] GetFileSize (in: hFile=0x178, lpFileSizeHigh=0x31e628 | out: lpFileSizeHigh=0x31e628*=0x0) returned 0x20ba [0111.184] ReadFile (in: hFile=0x178, lpBuffer=0x274a2a0, nNumberOfBytesToRead=0x20ba, lpNumberOfBytesRead=0x31e5d4, lpOverlapped=0x0 | out: lpBuffer=0x274a2a0*, lpNumberOfBytesRead=0x31e5d4*=0x20ba, lpOverlapped=0x0) returned 1 [0111.263] CreateFileW (lpFileName="C:\\Windows\\Microsoft.NET\\Framework64\\v4.0.30319\\ASP.NETWebAdminFiles\\Security\\Users\\findUsers.aspx" (normalized: "c:\\windows\\microsoft.net\\framework64\\v4.0.30319\\asp.netwebadminfiles\\security\\users\\findusers.aspx"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x178 [0111.264] GetFileType (hFile=0x178) returned 0x1 [0111.264] GetFileType (hFile=0x178) returned 0x1 [0111.264] WriteFile (in: hFile=0x178, lpBuffer=0x27a1448*, nNumberOfBytesToWrite=0x20c0, lpNumberOfBytesWritten=0x31e5c8, lpOverlapped=0x0 | out: lpBuffer=0x27a1448*, lpNumberOfBytesWritten=0x31e5c8*=0x20c0, lpOverlapped=0x0) returned 1 [0111.265] MoveFileW (lpExistingFileName="C:\\Windows\\Microsoft.NET\\Framework64\\v4.0.30319\\ASP.NETWebAdminFiles\\Security\\Users\\findUsers.aspx" (normalized: "c:\\windows\\microsoft.net\\framework64\\v4.0.30319\\asp.netwebadminfiles\\security\\users\\findusers.aspx"), lpNewFileName="C:\\Windows\\Microsoft.NET\\Framework64\\v4.0.30319\\ASP.NETWebAdminFiles\\Security\\Users\\findUsers.aspx" (normalized: "c:\\windows\\microsoft.net\\framework64\\v4.0.30319\\asp.netwebadminfiles\\security\\users\\findusers.aspx")) returned 1 [0111.265] CreateFileW (lpFileName="C:\\Windows\\Microsoft.NET\\Framework64\\v4.0.30319\\ASP.NETWebAdminFiles\\Security\\Users\\manageUsers.aspx" (normalized: "c:\\windows\\microsoft.net\\framework64\\v4.0.30319\\asp.netwebadminfiles\\security\\users\\manageusers.aspx"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x178 [0111.265] GetFileType (hFile=0x178) returned 0x1 [0111.265] GetFileType (hFile=0x178) returned 0x1 [0111.266] GetFileSize (in: hFile=0x178, lpFileSizeHigh=0x31e628 | out: lpFileSizeHigh=0x31e628*=0x0) returned 0x3da8 [0111.266] ReadFile (in: hFile=0x178, lpBuffer=0x27a3994, nNumberOfBytesToRead=0x3da8, lpNumberOfBytesRead=0x31e5d4, lpOverlapped=0x0 | out: lpBuffer=0x27a3994*, lpNumberOfBytesRead=0x31e5d4*=0x3da8, lpOverlapped=0x0) returned 1 [0111.312] CreateFileW (lpFileName="C:\\Windows\\Microsoft.NET\\Framework64\\v4.0.30319\\ASP.NETWebAdminFiles\\Security\\Users\\manageUsers.aspx" (normalized: "c:\\windows\\microsoft.net\\framework64\\v4.0.30319\\asp.netwebadminfiles\\security\\users\\manageusers.aspx"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x178 [0111.313] GetFileType (hFile=0x178) returned 0x1 [0111.313] GetFileType (hFile=0x178) returned 0x1 [0111.313] WriteFile (in: hFile=0x178, lpBuffer=0x2803be8*, nNumberOfBytesToWrite=0x3db0, lpNumberOfBytesWritten=0x31e5c8, lpOverlapped=0x0 | out: lpBuffer=0x2803be8*, lpNumberOfBytesWritten=0x31e5c8*=0x3db0, lpOverlapped=0x0) returned 1 [0111.314] MoveFileW (lpExistingFileName="C:\\Windows\\Microsoft.NET\\Framework64\\v4.0.30319\\ASP.NETWebAdminFiles\\Security\\Users\\manageUsers.aspx" (normalized: "c:\\windows\\microsoft.net\\framework64\\v4.0.30319\\asp.netwebadminfiles\\security\\users\\manageusers.aspx"), lpNewFileName="C:\\Windows\\Microsoft.NET\\Framework64\\v4.0.30319\\ASP.NETWebAdminFiles\\Security\\Users\\manageUsers.aspx" (normalized: "c:\\windows\\microsoft.net\\framework64\\v4.0.30319\\asp.netwebadminfiles\\security\\users\\manageusers.aspx")) returned 1 [0111.358] CreateFileW (lpFileName="C:\\Windows\\Microsoft.NET\\Framework64\\v4.0.30319\\ASP.NETWebAdminFiles\\Security\\Wizard\\wizard.aspx" (normalized: "c:\\windows\\microsoft.net\\framework64\\v4.0.30319\\asp.netwebadminfiles\\security\\wizard\\wizard.aspx"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x178 [0111.359] GetFileType (hFile=0x178) returned 0x1 [0111.359] GetFileType (hFile=0x178) returned 0x1 [0111.359] GetFileSize (in: hFile=0x178, lpFileSizeHigh=0x31e628 | out: lpFileSizeHigh=0x31e628*=0x0) returned 0x2ae9 [0111.359] ReadFile (in: hFile=0x178, lpBuffer=0x280f7c0, nNumberOfBytesToRead=0x2ae9, lpNumberOfBytesRead=0x31e5d4, lpOverlapped=0x0 | out: lpBuffer=0x280f7c0*, lpNumberOfBytesRead=0x31e5d4*=0x2ae9, lpOverlapped=0x0) returned 1 [0111.386] CreateFileW (lpFileName="C:\\Windows\\Microsoft.NET\\Framework64\\v4.0.30319\\ASP.NETWebAdminFiles\\Security\\Wizard\\wizard.aspx" (normalized: "c:\\windows\\microsoft.net\\framework64\\v4.0.30319\\asp.netwebadminfiles\\security\\wizard\\wizard.aspx"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x178 [0111.387] GetFileType (hFile=0x178) returned 0x1 [0111.387] GetFileType (hFile=0x178) returned 0x1 [0111.387] WriteFile (in: hFile=0x178, lpBuffer=0x266f04c*, nNumberOfBytesToWrite=0x2af0, lpNumberOfBytesWritten=0x31e5c8, lpOverlapped=0x0 | out: lpBuffer=0x266f04c*, lpNumberOfBytesWritten=0x31e5c8*=0x2af0, lpOverlapped=0x0) returned 1 [0111.388] MoveFileW (lpExistingFileName="C:\\Windows\\Microsoft.NET\\Framework64\\v4.0.30319\\ASP.NETWebAdminFiles\\Security\\Wizard\\wizard.aspx" (normalized: "c:\\windows\\microsoft.net\\framework64\\v4.0.30319\\asp.netwebadminfiles\\security\\wizard\\wizard.aspx"), lpNewFileName="C:\\Windows\\Microsoft.NET\\Framework64\\v4.0.30319\\ASP.NETWebAdminFiles\\Security\\Wizard\\wizard.aspx" (normalized: "c:\\windows\\microsoft.net\\framework64\\v4.0.30319\\asp.netwebadminfiles\\security\\wizard\\wizard.aspx")) returned 1 [0111.522] CreateFileW (lpFileName="C:\\Windows\\Microsoft.NET\\Framework64\\v4.0.30319\\Config\\DefaultWsdlHelpGenerator.aspx" (normalized: "c:\\windows\\microsoft.net\\framework64\\v4.0.30319\\config\\defaultwsdlhelpgenerator.aspx"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x178 [0111.522] GetFileType (hFile=0x178) returned 0x1 [0111.522] GetFileType (hFile=0x178) returned 0x1 [0111.523] GetFileSize (in: hFile=0x178, lpFileSizeHigh=0x31e718 | out: lpFileSizeHigh=0x31e718*=0x0) returned 0x1131a [0111.523] ReadFile (in: hFile=0x178, lpBuffer=0x267eac8, nNumberOfBytesToRead=0x1131a, lpNumberOfBytesRead=0x31e6c4, lpOverlapped=0x0 | out: lpBuffer=0x267eac8*, lpNumberOfBytesRead=0x31e6c4*=0x1131a, lpOverlapped=0x0) returned 1 [0111.540] CreateFileW (lpFileName="C:\\Windows\\Microsoft.NET\\Framework64\\v4.0.30319\\Config\\DefaultWsdlHelpGenerator.aspx" (normalized: "c:\\windows\\microsoft.net\\framework64\\v4.0.30319\\config\\defaultwsdlhelpgenerator.aspx"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x178 [0111.541] GetFileType (hFile=0x178) returned 0x1 [0111.541] GetFileType (hFile=0x178) returned 0x1 [0111.541] WriteFile (in: hFile=0x178, lpBuffer=0x26ff380*, nNumberOfBytesToWrite=0x11320, lpNumberOfBytesWritten=0x31e6b8, lpOverlapped=0x0 | out: lpBuffer=0x26ff380*, lpNumberOfBytesWritten=0x31e6b8*=0x11320, lpOverlapped=0x0) returned 1 [0111.543] MoveFileW (lpExistingFileName="C:\\Windows\\Microsoft.NET\\Framework64\\v4.0.30319\\Config\\DefaultWsdlHelpGenerator.aspx" (normalized: "c:\\windows\\microsoft.net\\framework64\\v4.0.30319\\config\\defaultwsdlhelpgenerator.aspx"), lpNewFileName="C:\\Windows\\Microsoft.NET\\Framework64\\v4.0.30319\\Config\\DefaultWsdlHelpGenerator.aspx" (normalized: "c:\\windows\\microsoft.net\\framework64\\v4.0.30319\\config\\defaultwsdlhelpgenerator.aspx")) returned 1 [0111.544] CreateFileW (lpFileName="C:\\Windows\\Microsoft.NET\\Framework64\\v4.0.30319\\Config\\NetFx40_IIS_schema_update.xml" (normalized: "c:\\windows\\microsoft.net\\framework64\\v4.0.30319\\config\\netfx40_iis_schema_update.xml"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x178 [0111.544] GetFileType (hFile=0x178) returned 0x1 [0111.544] GetFileType (hFile=0x178) returned 0x1 [0111.544] GetFileSize (in: hFile=0x178, lpFileSizeHigh=0x31e718 | out: lpFileSizeHigh=0x31e718*=0x0) returned 0xd75 [0111.544] ReadFile (in: hFile=0x178, lpBuffer=0x27119bc, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x31e6c4, lpOverlapped=0x0 | out: lpBuffer=0x27119bc*, lpNumberOfBytesRead=0x31e6c4*=0xd75, lpOverlapped=0x0) returned 1 [0111.558] CreateFileW (lpFileName="C:\\Windows\\Microsoft.NET\\Framework64\\v4.0.30319\\Config\\NetFx40_IIS_schema_update.xml" (normalized: "c:\\windows\\microsoft.net\\framework64\\v4.0.30319\\config\\netfx40_iis_schema_update.xml"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x178 [0111.559] GetFileType (hFile=0x178) returned 0x1 [0111.559] GetFileType (hFile=0x178) returned 0x1 [0111.560] MoveFileW (lpExistingFileName="C:\\Windows\\Microsoft.NET\\Framework64\\v4.0.30319\\Config\\NetFx40_IIS_schema_update.xml" (normalized: "c:\\windows\\microsoft.net\\framework64\\v4.0.30319\\config\\netfx40_iis_schema_update.xml"), lpNewFileName="C:\\Windows\\Microsoft.NET\\Framework64\\v4.0.30319\\Config\\NetFx40_IIS_schema_update.xml" (normalized: "c:\\windows\\microsoft.net\\framework64\\v4.0.30319\\config\\netfx40_iis_schema_update.xml")) returned 1 [0111.561] CreateFileW (lpFileName="C:\\Windows\\Microsoft.NET\\Framework64\\v4.0.30319\\Config\\NetFx45_IIS_schema_update.xml" (normalized: "c:\\windows\\microsoft.net\\framework64\\v4.0.30319\\config\\netfx45_iis_schema_update.xml"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x178 [0111.561] GetFileType (hFile=0x178) returned 0x1 [0111.561] GetFileType (hFile=0x178) returned 0x1 [0111.561] GetFileSize (in: hFile=0x178, lpFileSizeHigh=0x31e718 | out: lpFileSizeHigh=0x31e718*=0x0) returned 0x813 [0111.561] ReadFile (in: hFile=0x178, lpBuffer=0x27657a4, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x31e6c4, lpOverlapped=0x0 | out: lpBuffer=0x27657a4*, lpNumberOfBytesRead=0x31e6c4*=0x813, lpOverlapped=0x0) returned 1 [0111.606] CreateFileW (lpFileName="C:\\Windows\\Microsoft.NET\\Framework64\\v4.0.30319\\Config\\NetFx45_IIS_schema_update.xml" (normalized: "c:\\windows\\microsoft.net\\framework64\\v4.0.30319\\config\\netfx45_iis_schema_update.xml"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x178 [0111.607] GetFileType (hFile=0x178) returned 0x1 [0111.607] GetFileType (hFile=0x178) returned 0x1 [0111.607] MoveFileW (lpExistingFileName="C:\\Windows\\Microsoft.NET\\Framework64\\v4.0.30319\\Config\\NetFx45_IIS_schema_update.xml" (normalized: "c:\\windows\\microsoft.net\\framework64\\v4.0.30319\\config\\netfx45_iis_schema_update.xml"), lpNewFileName="C:\\Windows\\Microsoft.NET\\Framework64\\v4.0.30319\\Config\\NetFx45_IIS_schema_update.xml" (normalized: "c:\\windows\\microsoft.net\\framework64\\v4.0.30319\\config\\netfx45_iis_schema_update.xml")) returned 1 [0111.757] CreateFileW (lpFileName="C:\\Windows\\Microsoft.NET\\Framework64\\v4.0.30319\\SetupCache\\v4.6.00081\\DHtmlHeader.html" (normalized: "c:\\windows\\microsoft.net\\framework64\\v4.0.30319\\setupcache\\v4.6.00081\\dhtmlheader.html"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x178 [0111.758] GetFileType (hFile=0x178) returned 0x1 [0111.758] GetFileType (hFile=0x178) returned 0x1 [0111.758] GetFileSize (in: hFile=0x178, lpFileSizeHigh=0x31e6a0 | out: lpFileSizeHigh=0x31e6a0*=0x0) returned 0x3ef6 [0111.758] ReadFile (in: hFile=0x178, lpBuffer=0x27d0e20, nNumberOfBytesToRead=0x3ef6, lpNumberOfBytesRead=0x31e64c, lpOverlapped=0x0 | out: lpBuffer=0x27d0e20*, lpNumberOfBytesRead=0x31e64c*=0x3ef6, lpOverlapped=0x0) returned 1 [0111.773] CreateFileW (lpFileName="C:\\Windows\\Microsoft.NET\\Framework64\\v4.0.30319\\SetupCache\\v4.6.00081\\DHtmlHeader.html" (normalized: "c:\\windows\\microsoft.net\\framework64\\v4.0.30319\\setupcache\\v4.6.00081\\dhtmlheader.html"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x178 [0111.775] GetFileType (hFile=0x178) returned 0x1 [0111.775] GetFileType (hFile=0x178) returned 0x1 [0111.775] WriteFile (in: hFile=0x178, lpBuffer=0x2831708*, nNumberOfBytesToWrite=0x3f00, lpNumberOfBytesWritten=0x31e640, lpOverlapped=0x0 | out: lpBuffer=0x2831708*, lpNumberOfBytesWritten=0x31e640*=0x3f00, lpOverlapped=0x0) returned 1 [0111.776] MoveFileW (lpExistingFileName="C:\\Windows\\Microsoft.NET\\Framework64\\v4.0.30319\\SetupCache\\v4.6.00081\\DHtmlHeader.html" (normalized: "c:\\windows\\microsoft.net\\framework64\\v4.0.30319\\setupcache\\v4.6.00081\\dhtmlheader.html"), lpNewFileName="C:\\Windows\\Microsoft.NET\\Framework64\\v4.0.30319\\SetupCache\\v4.6.00081\\DHtmlHeader.html" (normalized: "c:\\windows\\microsoft.net\\framework64\\v4.0.30319\\setupcache\\v4.6.00081\\dhtmlheader.html")) returned 1 [0111.776] CreateFileW (lpFileName="C:\\Windows\\Microsoft.NET\\Framework64\\v4.0.30319\\SetupCache\\v4.6.00081\\header.bmp" (normalized: "c:\\windows\\microsoft.net\\framework64\\v4.0.30319\\setupcache\\v4.6.00081\\header.bmp"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x178 [0111.777] GetFileType (hFile=0x178) returned 0x1 [0111.777] GetFileType (hFile=0x178) returned 0x1 [0111.777] GetFileSize (in: hFile=0x178, lpFileSizeHigh=0x31e6a0 | out: lpFileSizeHigh=0x31e6a0*=0x0) returned 0x25bc [0111.777] ReadFile (in: hFile=0x178, lpBuffer=0x2835a34, nNumberOfBytesToRead=0x25bc, lpNumberOfBytesRead=0x31e64c, lpOverlapped=0x0 | out: lpBuffer=0x2835a34*, lpNumberOfBytesRead=0x31e64c*=0x25bc, lpOverlapped=0x0) returned 1 [0111.794] CreateFileW (lpFileName="C:\\Windows\\Microsoft.NET\\Framework64\\v4.0.30319\\SetupCache\\v4.6.00081\\header.bmp" (normalized: "c:\\windows\\microsoft.net\\framework64\\v4.0.30319\\setupcache\\v4.6.00081\\header.bmp"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x178 [0111.795] GetFileType (hFile=0x178) returned 0x1 [0111.795] GetFileType (hFile=0x178) returned 0x1 [0111.795] WriteFile (in: hFile=0x178, lpBuffer=0x2687fdc*, nNumberOfBytesToWrite=0x25c0, lpNumberOfBytesWritten=0x31e640, lpOverlapped=0x0 | out: lpBuffer=0x2687fdc*, lpNumberOfBytesWritten=0x31e640*=0x25c0, lpOverlapped=0x0) returned 1 [0111.796] MoveFileW (lpExistingFileName="C:\\Windows\\Microsoft.NET\\Framework64\\v4.0.30319\\SetupCache\\v4.6.00081\\header.bmp" (normalized: "c:\\windows\\microsoft.net\\framework64\\v4.0.30319\\setupcache\\v4.6.00081\\header.bmp"), lpNewFileName="C:\\Windows\\Microsoft.NET\\Framework64\\v4.0.30319\\SetupCache\\v4.6.00081\\header.bmp" (normalized: "c:\\windows\\microsoft.net\\framework64\\v4.0.30319\\setupcache\\v4.6.00081\\header.bmp")) returned 1 [0111.796] CreateFileW (lpFileName="C:\\Windows\\Microsoft.NET\\Framework64\\v4.0.30319\\SetupCache\\v4.6.00081\\ParameterInfo.xml" (normalized: "c:\\windows\\microsoft.net\\framework64\\v4.0.30319\\setupcache\\v4.6.00081\\parameterinfo.xml"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x178 [0111.797] GetFileType (hFile=0x178) returned 0x1 [0111.797] GetFileType (hFile=0x178) returned 0x1 [0111.797] GetFileSize (in: hFile=0x178, lpFileSizeHigh=0x31e6a0 | out: lpFileSizeHigh=0x31e6a0*=0x0) returned 0x12936c [0111.799] ReadFile (in: hFile=0x178, lpBuffer=0x12314a38, nNumberOfBytesToRead=0x12936c, lpNumberOfBytesRead=0x31e64c, lpOverlapped=0x0 | out: lpBuffer=0x12314a38*, lpNumberOfBytesRead=0x31e64c*=0x12936c, lpOverlapped=0x0) returned 1 [0111.955] CreateFileW (lpFileName="C:\\Windows\\Microsoft.NET\\Framework64\\v4.0.30319\\SetupCache\\v4.6.00081\\ParameterInfo.xml" (normalized: "c:\\windows\\microsoft.net\\framework64\\v4.0.30319\\setupcache\\v4.6.00081\\parameterinfo.xml"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x178 [0111.958] GetFileType (hFile=0x178) returned 0x1 [0111.958] GetFileType (hFile=0x178) returned 0x1 [0111.958] WriteFile (in: hFile=0x178, lpBuffer=0x128e2ba0*, nNumberOfBytesToWrite=0x129370, lpNumberOfBytesWritten=0x31e640, lpOverlapped=0x0 | out: lpBuffer=0x128e2ba0*, lpNumberOfBytesWritten=0x31e640*=0x129370, lpOverlapped=0x0) returned 1 [0111.993] MoveFileW (lpExistingFileName="C:\\Windows\\Microsoft.NET\\Framework64\\v4.0.30319\\SetupCache\\v4.6.00081\\ParameterInfo.xml" (normalized: "c:\\windows\\microsoft.net\\framework64\\v4.0.30319\\setupcache\\v4.6.00081\\parameterinfo.xml"), lpNewFileName="C:\\Windows\\Microsoft.NET\\Framework64\\v4.0.30319\\SetupCache\\v4.6.00081\\ParameterInfo.xml" (normalized: "c:\\windows\\microsoft.net\\framework64\\v4.0.30319\\setupcache\\v4.6.00081\\parameterinfo.xml")) returned 1 [0111.993] CreateFileW (lpFileName="C:\\Windows\\Microsoft.NET\\Framework64\\v4.0.30319\\SetupCache\\v4.6.00081\\SplashScreen.bmp" (normalized: "c:\\windows\\microsoft.net\\framework64\\v4.0.30319\\setupcache\\v4.6.00081\\splashscreen.bmp"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x178 [0111.994] GetFileType (hFile=0x178) returned 0x1 [0111.994] GetFileType (hFile=0x178) returned 0x1 [0111.994] GetFileSize (in: hFile=0x178, lpFileSizeHigh=0x31e6a0 | out: lpFileSizeHigh=0x31e6a0*=0x0) returned 0x1d4f8 [0111.994] ReadFile (in: hFile=0x178, lpBuffer=0x12a0bf30, nNumberOfBytesToRead=0x1d4f8, lpNumberOfBytesRead=0x31e64c, lpOverlapped=0x0 | out: lpBuffer=0x12a0bf30*, lpNumberOfBytesRead=0x31e64c*=0x1d4f8, lpOverlapped=0x0) returned 1 [0112.026] CreateFileW (lpFileName="C:\\Windows\\Microsoft.NET\\Framework64\\v4.0.30319\\SetupCache\\v4.6.00081\\SplashScreen.bmp" (normalized: "c:\\windows\\microsoft.net\\framework64\\v4.0.30319\\setupcache\\v4.6.00081\\splashscreen.bmp"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x178 [0112.028] GetFileType (hFile=0x178) returned 0x1 [0112.028] GetFileType (hFile=0x178) returned 0x1 [0112.028] WriteFile (in: hFile=0x178, lpBuffer=0x143adfe8*, nNumberOfBytesToWrite=0x1d500, lpNumberOfBytesWritten=0x31e640, lpOverlapped=0x0 | out: lpBuffer=0x143adfe8*, lpNumberOfBytesWritten=0x31e640*=0x1d500, lpOverlapped=0x0) returned 1 [0112.030] MoveFileW (lpExistingFileName="C:\\Windows\\Microsoft.NET\\Framework64\\v4.0.30319\\SetupCache\\v4.6.00081\\SplashScreen.bmp" (normalized: "c:\\windows\\microsoft.net\\framework64\\v4.0.30319\\setupcache\\v4.6.00081\\splashscreen.bmp"), lpNewFileName="C:\\Windows\\Microsoft.NET\\Framework64\\v4.0.30319\\SetupCache\\v4.6.00081\\SplashScreen.bmp" (normalized: "c:\\windows\\microsoft.net\\framework64\\v4.0.30319\\setupcache\\v4.6.00081\\splashscreen.bmp")) returned 1 [0112.030] CreateFileW (lpFileName="C:\\Windows\\Microsoft.NET\\Framework64\\v4.0.30319\\SetupCache\\v4.6.00081\\Strings.xml" (normalized: "c:\\windows\\microsoft.net\\framework64\\v4.0.30319\\setupcache\\v4.6.00081\\strings.xml"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x178 [0112.031] GetFileType (hFile=0x178) returned 0x1 [0112.031] GetFileType (hFile=0x178) returned 0x1 [0112.031] GetFileSize (in: hFile=0x178, lpFileSizeHigh=0x31e6a0 | out: lpFileSizeHigh=0x31e6a0*=0x0) returned 0x3704 [0112.031] ReadFile (in: hFile=0x178, lpBuffer=0x2724fd0, nNumberOfBytesToRead=0x3704, lpNumberOfBytesRead=0x31e64c, lpOverlapped=0x0 | out: lpBuffer=0x2724fd0*, lpNumberOfBytesRead=0x31e64c*=0x3704, lpOverlapped=0x0) returned 1 [0112.054] CreateFileW (lpFileName="C:\\Windows\\Microsoft.NET\\Framework64\\v4.0.30319\\SetupCache\\v4.6.00081\\Strings.xml" (normalized: "c:\\windows\\microsoft.net\\framework64\\v4.0.30319\\setupcache\\v4.6.00081\\strings.xml"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x178 [0112.056] GetFileType (hFile=0x178) returned 0x1 [0112.056] GetFileType (hFile=0x178) returned 0x1 [0112.056] WriteFile (in: hFile=0x178, lpBuffer=0x2783104*, nNumberOfBytesToWrite=0x3710, lpNumberOfBytesWritten=0x31e640, lpOverlapped=0x0 | out: lpBuffer=0x2783104*, lpNumberOfBytesWritten=0x31e640*=0x3710, lpOverlapped=0x0) returned 1 [0112.057] MoveFileW (lpExistingFileName="C:\\Windows\\Microsoft.NET\\Framework64\\v4.0.30319\\SetupCache\\v4.6.00081\\Strings.xml" (normalized: "c:\\windows\\microsoft.net\\framework64\\v4.0.30319\\setupcache\\v4.6.00081\\strings.xml"), lpNewFileName="C:\\Windows\\Microsoft.NET\\Framework64\\v4.0.30319\\SetupCache\\v4.6.00081\\Strings.xml" (normalized: "c:\\windows\\microsoft.net\\framework64\\v4.0.30319\\setupcache\\v4.6.00081\\strings.xml")) returned 1 [0112.057] CreateFileW (lpFileName="C:\\Windows\\Microsoft.NET\\Framework64\\v4.0.30319\\SetupCache\\v4.6.00081\\UiInfo.xml" (normalized: "c:\\windows\\microsoft.net\\framework64\\v4.0.30319\\setupcache\\v4.6.00081\\uiinfo.xml"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x178 [0112.058] GetFileType (hFile=0x178) returned 0x1 [0112.058] GetFileType (hFile=0x178) returned 0x1 [0112.058] GetFileSize (in: hFile=0x178, lpFileSizeHigh=0x31e6a0 | out: lpFileSizeHigh=0x31e6a0*=0x0) returned 0x111d0 [0112.058] ReadFile (in: hFile=0x178, lpBuffer=0x2786bf8, nNumberOfBytesToRead=0x111d0, lpNumberOfBytesRead=0x31e64c, lpOverlapped=0x0 | out: lpBuffer=0x2786bf8*, lpNumberOfBytesRead=0x31e64c*=0x111d0, lpOverlapped=0x0) returned 1 [0112.079] CreateFileW (lpFileName="C:\\Windows\\Microsoft.NET\\Framework64\\v4.0.30319\\SetupCache\\v4.6.00081\\UiInfo.xml" (normalized: "c:\\windows\\microsoft.net\\framework64\\v4.0.30319\\setupcache\\v4.6.00081\\uiinfo.xml"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x178 [0112.081] GetFileType (hFile=0x178) returned 0x1 [0112.081] GetFileType (hFile=0x178) returned 0x1 [0112.081] WriteFile (in: hFile=0x178, lpBuffer=0x2806f90*, nNumberOfBytesToWrite=0x111e0, lpNumberOfBytesWritten=0x31e640, lpOverlapped=0x0 | out: lpBuffer=0x2806f90*, lpNumberOfBytesWritten=0x31e640*=0x111e0, lpOverlapped=0x0) returned 1 [0112.082] MoveFileW (lpExistingFileName="C:\\Windows\\Microsoft.NET\\Framework64\\v4.0.30319\\SetupCache\\v4.6.00081\\UiInfo.xml" (normalized: "c:\\windows\\microsoft.net\\framework64\\v4.0.30319\\setupcache\\v4.6.00081\\uiinfo.xml"), lpNewFileName="C:\\Windows\\Microsoft.NET\\Framework64\\v4.0.30319\\SetupCache\\v4.6.00081\\UiInfo.xml" (normalized: "c:\\windows\\microsoft.net\\framework64\\v4.0.30319\\setupcache\\v4.6.00081\\uiinfo.xml")) returned 1 [0112.083] CreateFileW (lpFileName="C:\\Windows\\Microsoft.NET\\Framework64\\v4.0.30319\\SetupCache\\v4.6.00081\\watermark.bmp" (normalized: "c:\\windows\\microsoft.net\\framework64\\v4.0.30319\\setupcache\\v4.6.00081\\watermark.bmp"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x178 [0112.083] GetFileType (hFile=0x178) returned 0x1 [0112.083] GetFileType (hFile=0x178) returned 0x1 [0112.083] GetFileSize (in: hFile=0x178, lpFileSizeHigh=0x31e6a0 | out: lpFileSizeHigh=0x31e6a0*=0x0) returned 0x19688 [0112.083] ReadFile (in: hFile=0x178, lpBuffer=0x143ed8c8, nNumberOfBytesToRead=0x19688, lpNumberOfBytesRead=0x31e64c, lpOverlapped=0x0 | out: lpBuffer=0x143ed8c8*, lpNumberOfBytesRead=0x31e64c*=0x19688, lpOverlapped=0x0) returned 1 [0112.111] CreateFileW (lpFileName="C:\\Windows\\Microsoft.NET\\Framework64\\v4.0.30319\\SetupCache\\v4.6.00081\\watermark.bmp" (normalized: "c:\\windows\\microsoft.net\\framework64\\v4.0.30319\\setupcache\\v4.6.00081\\watermark.bmp"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x178 [0112.113] GetFileType (hFile=0x178) returned 0x1 [0112.113] GetFileType (hFile=0x178) returned 0x1 [0112.113] WriteFile (in: hFile=0x178, lpBuffer=0x1446c9d0*, nNumberOfBytesToWrite=0x19690, lpNumberOfBytesWritten=0x31e640, lpOverlapped=0x0 | out: lpBuffer=0x1446c9d0*, lpNumberOfBytesWritten=0x31e640*=0x19690, lpOverlapped=0x0) returned 1 [0112.115] MoveFileW (lpExistingFileName="C:\\Windows\\Microsoft.NET\\Framework64\\v4.0.30319\\SetupCache\\v4.6.00081\\watermark.bmp" (normalized: "c:\\windows\\microsoft.net\\framework64\\v4.0.30319\\setupcache\\v4.6.00081\\watermark.bmp"), lpNewFileName="C:\\Windows\\Microsoft.NET\\Framework64\\v4.0.30319\\SetupCache\\v4.6.00081\\watermark.bmp" (normalized: "c:\\windows\\microsoft.net\\framework64\\v4.0.30319\\setupcache\\v4.6.00081\\watermark.bmp")) returned 1 [0112.116] CreateFileW (lpFileName="C:\\Windows\\Microsoft.NET\\Framework64\\v4.0.30319\\SetupCache\\v4.6.00081\\1025\\eula.rtf" (normalized: "c:\\windows\\microsoft.net\\framework64\\v4.0.30319\\setupcache\\v4.6.00081\\1025\\eula.rtf"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x178 [0112.116] GetFileType (hFile=0x178) returned 0x1 [0112.116] GetFileType (hFile=0x178) returned 0x1 [0112.116] GetFileSize (in: hFile=0x178, lpFileSizeHigh=0x31e628 | out: lpFileSizeHigh=0x31e628*=0x0) returned 0x1e64f [0112.117] ReadFile (in: hFile=0x178, lpBuffer=0x14486080, nNumberOfBytesToRead=0x1e64f, lpNumberOfBytesRead=0x31e5d4, lpOverlapped=0x0 | out: lpBuffer=0x14486080*, lpNumberOfBytesRead=0x31e5d4*=0x1e64f, lpOverlapped=0x0) returned 1 [0112.148] CreateFileW (lpFileName="C:\\Windows\\Microsoft.NET\\Framework64\\v4.0.30319\\SetupCache\\v4.6.00081\\1025\\eula.rtf" (normalized: "c:\\windows\\microsoft.net\\framework64\\v4.0.30319\\setupcache\\v4.6.00081\\1025\\eula.rtf"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x178 [0112.150] GetFileType (hFile=0x178) returned 0x1 [0112.150] GetFileType (hFile=0x178) returned 0x1 [0112.150] WriteFile (in: hFile=0x178, lpBuffer=0x1451e050*, nNumberOfBytesToWrite=0x1e650, lpNumberOfBytesWritten=0x31e5c8, lpOverlapped=0x0 | out: lpBuffer=0x1451e050*, lpNumberOfBytesWritten=0x31e5c8*=0x1e650, lpOverlapped=0x0) returned 1 [0112.152] MoveFileW (lpExistingFileName="C:\\Windows\\Microsoft.NET\\Framework64\\v4.0.30319\\SetupCache\\v4.6.00081\\1025\\eula.rtf" (normalized: "c:\\windows\\microsoft.net\\framework64\\v4.0.30319\\setupcache\\v4.6.00081\\1025\\eula.rtf"), lpNewFileName="C:\\Windows\\Microsoft.NET\\Framework64\\v4.0.30319\\SetupCache\\v4.6.00081\\1025\\eula.rtf" (normalized: "c:\\windows\\microsoft.net\\framework64\\v4.0.30319\\setupcache\\v4.6.00081\\1025\\eula.rtf")) returned 1 [0112.152] CreateFileW (lpFileName="C:\\Windows\\Microsoft.NET\\Framework64\\v4.0.30319\\SetupCache\\v4.6.00081\\1025\\LocalizedData.xml" (normalized: "c:\\windows\\microsoft.net\\framework64\\v4.0.30319\\setupcache\\v4.6.00081\\1025\\localizeddata.xml"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x178 [0112.153] GetFileType (hFile=0x178) returned 0x1 [0112.153] GetFileType (hFile=0x178) returned 0x1 [0112.153] GetFileSize (in: hFile=0x178, lpFileSizeHigh=0x31e628 | out: lpFileSizeHigh=0x31e628*=0x0) returned 0x13166 [0112.153] ReadFile (in: hFile=0x178, lpBuffer=0x26b2994, nNumberOfBytesToRead=0x13166, lpNumberOfBytesRead=0x31e5d4, lpOverlapped=0x0 | out: lpBuffer=0x26b2994*, lpNumberOfBytesRead=0x31e5d4*=0x13166, lpOverlapped=0x0) returned 1 [0112.173] CreateFileW (lpFileName="C:\\Windows\\Microsoft.NET\\Framework64\\v4.0.30319\\SetupCache\\v4.6.00081\\1025\\LocalizedData.xml" (normalized: "c:\\windows\\microsoft.net\\framework64\\v4.0.30319\\setupcache\\v4.6.00081\\1025\\localizeddata.xml"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x178 [0112.175] GetFileType (hFile=0x178) returned 0x1 [0112.175] GetFileType (hFile=0x178) returned 0x1 [0112.175] WriteFile (in: hFile=0x178, lpBuffer=0x2738d3c*, nNumberOfBytesToWrite=0x13170, lpNumberOfBytesWritten=0x31e5c8, lpOverlapped=0x0 | out: lpBuffer=0x2738d3c*, lpNumberOfBytesWritten=0x31e5c8*=0x13170, lpOverlapped=0x0) returned 1 [0112.177] MoveFileW (lpExistingFileName="C:\\Windows\\Microsoft.NET\\Framework64\\v4.0.30319\\SetupCache\\v4.6.00081\\1025\\LocalizedData.xml" (normalized: "c:\\windows\\microsoft.net\\framework64\\v4.0.30319\\setupcache\\v4.6.00081\\1025\\localizeddata.xml"), lpNewFileName="C:\\Windows\\Microsoft.NET\\Framework64\\v4.0.30319\\SetupCache\\v4.6.00081\\1025\\LocalizedData.xml" (normalized: "c:\\windows\\microsoft.net\\framework64\\v4.0.30319\\setupcache\\v4.6.00081\\1025\\localizeddata.xml")) returned 1 [0112.177] CreateFileW (lpFileName="C:\\Windows\\Microsoft.NET\\Framework64\\v4.0.30319\\SetupCache\\v4.6.00081\\1028\\eula.rtf" (normalized: "c:\\windows\\microsoft.net\\framework64\\v4.0.30319\\setupcache\\v4.6.00081\\1028\\eula.rtf"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x178 [0112.177] GetFileType (hFile=0x178) returned 0x1 [0112.177] GetFileType (hFile=0x178) returned 0x1 [0112.177] GetFileSize (in: hFile=0x178, lpFileSizeHigh=0x31e628 | out: lpFileSizeHigh=0x31e628*=0x0) returned 0x27227 [0112.178] ReadFile (in: hFile=0x178, lpBuffer=0x145629a0, nNumberOfBytesToRead=0x27227, lpNumberOfBytesRead=0x31e5d4, lpOverlapped=0x0 | out: lpBuffer=0x145629a0*, lpNumberOfBytesRead=0x31e5d4*=0x27227, lpOverlapped=0x0) returned 1 [0112.221] CreateFileW (lpFileName="C:\\Windows\\Microsoft.NET\\Framework64\\v4.0.30319\\SetupCache\\v4.6.00081\\1028\\eula.rtf" (normalized: "c:\\windows\\microsoft.net\\framework64\\v4.0.30319\\setupcache\\v4.6.00081\\1028\\eula.rtf"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x178 [0112.223] GetFileType (hFile=0x178) returned 0x1 [0112.223] GetFileType (hFile=0x178) returned 0x1 [0112.223] WriteFile (in: hFile=0x178, lpBuffer=0x146264c8*, nNumberOfBytesToWrite=0x27230, lpNumberOfBytesWritten=0x31e5c8, lpOverlapped=0x0 | out: lpBuffer=0x146264c8*, lpNumberOfBytesWritten=0x31e5c8*=0x27230, lpOverlapped=0x0) returned 1 [0112.225] MoveFileW (lpExistingFileName="C:\\Windows\\Microsoft.NET\\Framework64\\v4.0.30319\\SetupCache\\v4.6.00081\\1028\\eula.rtf" (normalized: "c:\\windows\\microsoft.net\\framework64\\v4.0.30319\\setupcache\\v4.6.00081\\1028\\eula.rtf"), lpNewFileName="C:\\Windows\\Microsoft.NET\\Framework64\\v4.0.30319\\SetupCache\\v4.6.00081\\1028\\eula.rtf" (normalized: "c:\\windows\\microsoft.net\\framework64\\v4.0.30319\\setupcache\\v4.6.00081\\1028\\eula.rtf")) returned 1 [0112.226] CreateFileW (lpFileName="C:\\Windows\\Microsoft.NET\\Framework64\\v4.0.30319\\SetupCache\\v4.6.00081\\1028\\LocalizedData.xml" (normalized: "c:\\windows\\microsoft.net\\framework64\\v4.0.30319\\setupcache\\v4.6.00081\\1028\\localizeddata.xml"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x178 [0112.226] GetFileType (hFile=0x178) returned 0x1 [0112.226] GetFileType (hFile=0x178) returned 0x1 [0112.226] GetFileSize (in: hFile=0x178, lpFileSizeHigh=0x31e628 | out: lpFileSizeHigh=0x31e628*=0x0) returned 0x107aa [0112.226] ReadFile (in: hFile=0x178, lpBuffer=0x279b800, nNumberOfBytesToRead=0x107aa, lpNumberOfBytesRead=0x31e5d4, lpOverlapped=0x0 | out: lpBuffer=0x279b800*, lpNumberOfBytesRead=0x31e5d4*=0x107aa, lpOverlapped=0x0) returned 1 [0112.244] CreateFileW (lpFileName="C:\\Windows\\Microsoft.NET\\Framework64\\v4.0.30319\\SetupCache\\v4.6.00081\\1028\\LocalizedData.xml" (normalized: "c:\\windows\\microsoft.net\\framework64\\v4.0.30319\\setupcache\\v4.6.00081\\1028\\localizeddata.xml"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x178 [0112.246] GetFileType (hFile=0x178) returned 0x1 [0112.246] GetFileType (hFile=0x178) returned 0x1 [0112.246] WriteFile (in: hFile=0x178, lpBuffer=0x2819d0c*, nNumberOfBytesToWrite=0x107b0, lpNumberOfBytesWritten=0x31e5c8, lpOverlapped=0x0 | out: lpBuffer=0x2819d0c*, lpNumberOfBytesWritten=0x31e5c8*=0x107b0, lpOverlapped=0x0) returned 1 [0112.247] MoveFileW (lpExistingFileName="C:\\Windows\\Microsoft.NET\\Framework64\\v4.0.30319\\SetupCache\\v4.6.00081\\1028\\LocalizedData.xml" (normalized: "c:\\windows\\microsoft.net\\framework64\\v4.0.30319\\setupcache\\v4.6.00081\\1028\\localizeddata.xml"), lpNewFileName="C:\\Windows\\Microsoft.NET\\Framework64\\v4.0.30319\\SetupCache\\v4.6.00081\\1028\\LocalizedData.xml" (normalized: "c:\\windows\\microsoft.net\\framework64\\v4.0.30319\\setupcache\\v4.6.00081\\1028\\localizeddata.xml")) returned 1 [0112.248] CreateFileW (lpFileName="C:\\Windows\\Microsoft.NET\\Framework64\\v4.0.30319\\SetupCache\\v4.6.00081\\1029\\eula.rtf" (normalized: "c:\\windows\\microsoft.net\\framework64\\v4.0.30319\\setupcache\\v4.6.00081\\1029\\eula.rtf"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x178 [0112.248] GetFileType (hFile=0x178) returned 0x1 [0112.248] GetFileType (hFile=0x178) returned 0x1 [0112.248] GetFileSize (in: hFile=0x178, lpFileSizeHigh=0x31e628 | out: lpFileSizeHigh=0x31e628*=0x0) returned 0x204fc [0112.248] ReadFile (in: hFile=0x178, lpBuffer=0x1466e678, nNumberOfBytesToRead=0x204fc, lpNumberOfBytesRead=0x31e5d4, lpOverlapped=0x0 | out: lpBuffer=0x1466e678*, lpNumberOfBytesRead=0x31e5d4*=0x204fc, lpOverlapped=0x0) returned 1 [0112.285] CreateFileW (lpFileName="C:\\Windows\\Microsoft.NET\\Framework64\\v4.0.30319\\SetupCache\\v4.6.00081\\1029\\eula.rtf" (normalized: "c:\\windows\\microsoft.net\\framework64\\v4.0.30319\\setupcache\\v4.6.00081\\1029\\eula.rtf"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x178 [0112.286] GetFileType (hFile=0x178) returned 0x1 [0112.286] GetFileType (hFile=0x178) returned 0x1 [0112.286] WriteFile (in: hFile=0x178, lpBuffer=0x1470ffb0*, nNumberOfBytesToWrite=0x20500, lpNumberOfBytesWritten=0x31e5c8, lpOverlapped=0x0 | out: lpBuffer=0x1470ffb0*, lpNumberOfBytesWritten=0x31e5c8*=0x20500, lpOverlapped=0x0) returned 1 [0112.289] MoveFileW (lpExistingFileName="C:\\Windows\\Microsoft.NET\\Framework64\\v4.0.30319\\SetupCache\\v4.6.00081\\1029\\eula.rtf" (normalized: "c:\\windows\\microsoft.net\\framework64\\v4.0.30319\\setupcache\\v4.6.00081\\1029\\eula.rtf"), lpNewFileName="C:\\Windows\\Microsoft.NET\\Framework64\\v4.0.30319\\SetupCache\\v4.6.00081\\1029\\eula.rtf" (normalized: "c:\\windows\\microsoft.net\\framework64\\v4.0.30319\\setupcache\\v4.6.00081\\1029\\eula.rtf")) returned 1 [0112.289] CreateFileW (lpFileName="C:\\Windows\\Microsoft.NET\\Framework64\\v4.0.30319\\SetupCache\\v4.6.00081\\1029\\LocalizedData.xml" (normalized: "c:\\windows\\microsoft.net\\framework64\\v4.0.30319\\setupcache\\v4.6.00081\\1029\\localizeddata.xml"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x178 [0112.289] GetFileType (hFile=0x178) returned 0x1 [0112.289] GetFileType (hFile=0x178) returned 0x1 [0112.289] GetFileSize (in: hFile=0x178, lpFileSizeHigh=0x31e628 | out: lpFileSizeHigh=0x31e628*=0x0) returned 0x14740 [0112.290] ReadFile (in: hFile=0x178, lpBuffer=0x2679dec, nNumberOfBytesToRead=0x14740, lpNumberOfBytesRead=0x31e5d4, lpOverlapped=0x0 | out: lpBuffer=0x2679dec*, lpNumberOfBytesRead=0x31e5d4*=0x14740, lpOverlapped=0x0) returned 1 [0112.309] CreateFileW (lpFileName="C:\\Windows\\Microsoft.NET\\Framework64\\v4.0.30319\\SetupCache\\v4.6.00081\\1029\\LocalizedData.xml" (normalized: "c:\\windows\\microsoft.net\\framework64\\v4.0.30319\\setupcache\\v4.6.00081\\1029\\localizeddata.xml"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x178 [0112.310] GetFileType (hFile=0x178) returned 0x1 [0112.310] GetFileType (hFile=0x178) returned 0x1 [0112.310] WriteFile (in: hFile=0x178, lpBuffer=0x2704330*, nNumberOfBytesToWrite=0x14750, lpNumberOfBytesWritten=0x31e5c8, lpOverlapped=0x0 | out: lpBuffer=0x2704330*, lpNumberOfBytesWritten=0x31e5c8*=0x14750, lpOverlapped=0x0) returned 1 [0112.315] MoveFileW (lpExistingFileName="C:\\Windows\\Microsoft.NET\\Framework64\\v4.0.30319\\SetupCache\\v4.6.00081\\1029\\LocalizedData.xml" (normalized: "c:\\windows\\microsoft.net\\framework64\\v4.0.30319\\setupcache\\v4.6.00081\\1029\\localizeddata.xml"), lpNewFileName="C:\\Windows\\Microsoft.NET\\Framework64\\v4.0.30319\\SetupCache\\v4.6.00081\\1029\\LocalizedData.xml" (normalized: "c:\\windows\\microsoft.net\\framework64\\v4.0.30319\\setupcache\\v4.6.00081\\1029\\localizeddata.xml")) returned 1 [0112.316] CreateFileW (lpFileName="C:\\Windows\\Microsoft.NET\\Framework64\\v4.0.30319\\SetupCache\\v4.6.00081\\1030\\eula.rtf" (normalized: "c:\\windows\\microsoft.net\\framework64\\v4.0.30319\\setupcache\\v4.6.00081\\1030\\eula.rtf"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x178 [0112.316] GetFileType (hFile=0x178) returned 0x1 [0112.316] GetFileType (hFile=0x178) returned 0x1 [0112.316] GetFileSize (in: hFile=0x178, lpFileSizeHigh=0x31e628 | out: lpFileSizeHigh=0x31e628*=0x0) returned 0x20235 [0112.317] ReadFile (in: hFile=0x178, lpBuffer=0x14759370, nNumberOfBytesToRead=0x20235, lpNumberOfBytesRead=0x31e5d4, lpOverlapped=0x0 | out: lpBuffer=0x14759370*, lpNumberOfBytesRead=0x31e5d4*=0x20235, lpOverlapped=0x0) returned 1 [0112.346] CreateFileW (lpFileName="C:\\Windows\\Microsoft.NET\\Framework64\\v4.0.30319\\SetupCache\\v4.6.00081\\1030\\eula.rtf" (normalized: "c:\\windows\\microsoft.net\\framework64\\v4.0.30319\\setupcache\\v4.6.00081\\1030\\eula.rtf"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x178 [0112.347] GetFileType (hFile=0x178) returned 0x1 [0112.347] GetFileType (hFile=0x178) returned 0x1 [0112.348] WriteFile (in: hFile=0x178, lpBuffer=0x147f9ee8*, nNumberOfBytesToWrite=0x20240, lpNumberOfBytesWritten=0x31e5c8, lpOverlapped=0x0 | out: lpBuffer=0x147f9ee8*, lpNumberOfBytesWritten=0x31e5c8*=0x20240, lpOverlapped=0x0) returned 1 [0112.350] MoveFileW (lpExistingFileName="C:\\Windows\\Microsoft.NET\\Framework64\\v4.0.30319\\SetupCache\\v4.6.00081\\1030\\eula.rtf" (normalized: "c:\\windows\\microsoft.net\\framework64\\v4.0.30319\\setupcache\\v4.6.00081\\1030\\eula.rtf"), lpNewFileName="C:\\Windows\\Microsoft.NET\\Framework64\\v4.0.30319\\SetupCache\\v4.6.00081\\1030\\eula.rtf" (normalized: "c:\\windows\\microsoft.net\\framework64\\v4.0.30319\\setupcache\\v4.6.00081\\1030\\eula.rtf")) returned 1 [0112.350] CreateFileW (lpFileName="C:\\Windows\\Microsoft.NET\\Framework64\\v4.0.30319\\SetupCache\\v4.6.00081\\1030\\LocalizedData.xml" (normalized: "c:\\windows\\microsoft.net\\framework64\\v4.0.30319\\setupcache\\v4.6.00081\\1030\\localizeddata.xml"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x178 [0112.350] GetFileType (hFile=0x178) returned 0x1 [0112.350] GetFileType (hFile=0x178) returned 0x1 [0112.350] GetFileSize (in: hFile=0x178, lpFileSizeHigh=0x31e628 | out: lpFileSizeHigh=0x31e628*=0x0) returned 0x13e36 [0112.351] ReadFile (in: hFile=0x178, lpBuffer=0x27683d4, nNumberOfBytesToRead=0x13e36, lpNumberOfBytesRead=0x31e5d4, lpOverlapped=0x0 | out: lpBuffer=0x27683d4*, lpNumberOfBytesRead=0x31e5d4*=0x13e36, lpOverlapped=0x0) returned 1 [0112.369] CreateFileW (lpFileName="C:\\Windows\\Microsoft.NET\\Framework64\\v4.0.30319\\SetupCache\\v4.6.00081\\1030\\LocalizedData.xml" (normalized: "c:\\windows\\microsoft.net\\framework64\\v4.0.30319\\setupcache\\v4.6.00081\\1030\\localizeddata.xml"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x178 [0112.370] GetFileType (hFile=0x178) returned 0x1 [0112.371] GetFileType (hFile=0x178) returned 0x1 [0112.371] WriteFile (in: hFile=0x178, lpBuffer=0x27f0c90*, nNumberOfBytesToWrite=0x13e40, lpNumberOfBytesWritten=0x31e5c8, lpOverlapped=0x0 | out: lpBuffer=0x27f0c90*, lpNumberOfBytesWritten=0x31e5c8*=0x13e40, lpOverlapped=0x0) returned 1 [0112.372] MoveFileW (lpExistingFileName="C:\\Windows\\Microsoft.NET\\Framework64\\v4.0.30319\\SetupCache\\v4.6.00081\\1030\\LocalizedData.xml" (normalized: "c:\\windows\\microsoft.net\\framework64\\v4.0.30319\\setupcache\\v4.6.00081\\1030\\localizeddata.xml"), lpNewFileName="C:\\Windows\\Microsoft.NET\\Framework64\\v4.0.30319\\SetupCache\\v4.6.00081\\1030\\LocalizedData.xml" (normalized: "c:\\windows\\microsoft.net\\framework64\\v4.0.30319\\setupcache\\v4.6.00081\\1030\\localizeddata.xml")) returned 1 [0112.373] CreateFileW (lpFileName="C:\\Windows\\Microsoft.NET\\Framework64\\v4.0.30319\\SetupCache\\v4.6.00081\\1031\\eula.rtf" (normalized: "c:\\windows\\microsoft.net\\framework64\\v4.0.30319\\setupcache\\v4.6.00081\\1031\\eula.rtf"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x178 [0112.374] GetFileType (hFile=0x178) returned 0x1 [0112.374] GetFileType (hFile=0x178) returned 0x1 [0112.374] GetFileSize (in: hFile=0x178, lpFileSizeHigh=0x31e628 | out: lpFileSizeHigh=0x31e628*=0x0) returned 0x1b252 [0112.374] ReadFile (in: hFile=0x178, lpBuffer=0x14841dc8, nNumberOfBytesToRead=0x1b252, lpNumberOfBytesRead=0x31e5d4, lpOverlapped=0x0 | out: lpBuffer=0x14841dc8*, lpNumberOfBytesRead=0x31e5d4*=0x1b252, lpOverlapped=0x0) returned 1 [0112.399] CreateFileW (lpFileName="C:\\Windows\\Microsoft.NET\\Framework64\\v4.0.30319\\SetupCache\\v4.6.00081\\1031\\eula.rtf" (normalized: "c:\\windows\\microsoft.net\\framework64\\v4.0.30319\\setupcache\\v4.6.00081\\1031\\eula.rtf"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x178 [0112.401] GetFileType (hFile=0x178) returned 0x1 [0112.401] GetFileType (hFile=0x178) returned 0x1 [0112.401] WriteFile (in: hFile=0x178, lpBuffer=0x148c99d8*, nNumberOfBytesToWrite=0x1b260, lpNumberOfBytesWritten=0x31e5c8, lpOverlapped=0x0 | out: lpBuffer=0x148c99d8*, lpNumberOfBytesWritten=0x31e5c8*=0x1b260, lpOverlapped=0x0) returned 1 [0112.403] MoveFileW (lpExistingFileName="C:\\Windows\\Microsoft.NET\\Framework64\\v4.0.30319\\SetupCache\\v4.6.00081\\1031\\eula.rtf" (normalized: "c:\\windows\\microsoft.net\\framework64\\v4.0.30319\\setupcache\\v4.6.00081\\1031\\eula.rtf"), lpNewFileName="C:\\Windows\\Microsoft.NET\\Framework64\\v4.0.30319\\SetupCache\\v4.6.00081\\1031\\eula.rtf" (normalized: "c:\\windows\\microsoft.net\\framework64\\v4.0.30319\\setupcache\\v4.6.00081\\1031\\eula.rtf")) returned 1 [0112.405] CreateFileW (lpFileName="C:\\Windows\\Microsoft.NET\\Framework64\\v4.0.30319\\SetupCache\\v4.6.00081\\1031\\LocalizedData.xml" (normalized: "c:\\windows\\microsoft.net\\framework64\\v4.0.30319\\setupcache\\v4.6.00081\\1031\\localizeddata.xml"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x178 [0112.405] GetFileType (hFile=0x178) returned 0x1 [0112.405] GetFileType (hFile=0x178) returned 0x1 [0112.405] GetFileSize (in: hFile=0x178, lpFileSizeHigh=0x31e628 | out: lpFileSizeHigh=0x31e628*=0x0) returned 0x14f40 [0112.405] ReadFile (in: hFile=0x178, lpBuffer=0x45f78d8, nNumberOfBytesToRead=0x14f40, lpNumberOfBytesRead=0x31e5d4, lpOverlapped=0x0 | out: lpBuffer=0x45f78d8*, lpNumberOfBytesRead=0x31e5d4*=0x14f40, lpOverlapped=0x0) returned 1 [0112.429] CreateFileW (lpFileName="C:\\Windows\\Microsoft.NET\\Framework64\\v4.0.30319\\SetupCache\\v4.6.00081\\1031\\LocalizedData.xml" (normalized: "c:\\windows\\microsoft.net\\framework64\\v4.0.30319\\setupcache\\v4.6.00081\\1031\\localizeddata.xml"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x178 [0112.430] GetFileType (hFile=0x178) returned 0x1 [0112.430] GetFileType (hFile=0x178) returned 0x1 [0112.430] WriteFile (in: hFile=0x178, lpBuffer=0x149389b8*, nNumberOfBytesToWrite=0x14f50, lpNumberOfBytesWritten=0x31e5c8, lpOverlapped=0x0 | out: lpBuffer=0x149389b8*, lpNumberOfBytesWritten=0x31e5c8*=0x14f50, lpOverlapped=0x0) returned 1 [0112.432] MoveFileW (lpExistingFileName="C:\\Windows\\Microsoft.NET\\Framework64\\v4.0.30319\\SetupCache\\v4.6.00081\\1031\\LocalizedData.xml" (normalized: "c:\\windows\\microsoft.net\\framework64\\v4.0.30319\\setupcache\\v4.6.00081\\1031\\localizeddata.xml"), lpNewFileName="C:\\Windows\\Microsoft.NET\\Framework64\\v4.0.30319\\SetupCache\\v4.6.00081\\1031\\LocalizedData.xml" (normalized: "c:\\windows\\microsoft.net\\framework64\\v4.0.30319\\setupcache\\v4.6.00081\\1031\\localizeddata.xml")) returned 1 [0112.433] CreateFileW (lpFileName="C:\\Windows\\Microsoft.NET\\Framework64\\v4.0.30319\\SetupCache\\v4.6.00081\\1032\\eula.rtf" (normalized: "c:\\windows\\microsoft.net\\framework64\\v4.0.30319\\setupcache\\v4.6.00081\\1032\\eula.rtf"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x178 [0112.433] GetFileType (hFile=0x178) returned 0x1 [0112.433] GetFileType (hFile=0x178) returned 0x1 [0112.433] GetFileSize (in: hFile=0x178, lpFileSizeHigh=0x31e628 | out: lpFileSizeHigh=0x31e628*=0x0) returned 0x22ad9 [0112.433] ReadFile (in: hFile=0x178, lpBuffer=0x1494d928, nNumberOfBytesToRead=0x22ad9, lpNumberOfBytesRead=0x31e5d4, lpOverlapped=0x0 | out: lpBuffer=0x1494d928*, lpNumberOfBytesRead=0x31e5d4*=0x22ad9, lpOverlapped=0x0) returned 1 [0112.461] CreateFileW (lpFileName="C:\\Windows\\Microsoft.NET\\Framework64\\v4.0.30319\\SetupCache\\v4.6.00081\\1032\\eula.rtf" (normalized: "c:\\windows\\microsoft.net\\framework64\\v4.0.30319\\setupcache\\v4.6.00081\\1032\\eula.rtf"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x178 [0112.462] GetFileType (hFile=0x178) returned 0x1 [0112.462] GetFileType (hFile=0x178) returned 0x1 [0112.462] WriteFile (in: hFile=0x178, lpBuffer=0x149fafc0*, nNumberOfBytesToWrite=0x22ae0, lpNumberOfBytesWritten=0x31e5c8, lpOverlapped=0x0 | out: lpBuffer=0x149fafc0*, lpNumberOfBytesWritten=0x31e5c8*=0x22ae0, lpOverlapped=0x0) returned 1 [0112.465] MoveFileW (lpExistingFileName="C:\\Windows\\Microsoft.NET\\Framework64\\v4.0.30319\\SetupCache\\v4.6.00081\\1032\\eula.rtf" (normalized: "c:\\windows\\microsoft.net\\framework64\\v4.0.30319\\setupcache\\v4.6.00081\\1032\\eula.rtf"), lpNewFileName="C:\\Windows\\Microsoft.NET\\Framework64\\v4.0.30319\\SetupCache\\v4.6.00081\\1032\\eula.rtf" (normalized: "c:\\windows\\microsoft.net\\framework64\\v4.0.30319\\setupcache\\v4.6.00081\\1032\\eula.rtf")) returned 1 [0112.465] CreateFileW (lpFileName="C:\\Windows\\Microsoft.NET\\Framework64\\v4.0.30319\\SetupCache\\v4.6.00081\\1032\\LocalizedData.xml" (normalized: "c:\\windows\\microsoft.net\\framework64\\v4.0.30319\\setupcache\\v4.6.00081\\1032\\localizeddata.xml"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x178 [0112.465] GetFileType (hFile=0x178) returned 0x1 [0112.465] GetFileType (hFile=0x178) returned 0x1 [0112.465] GetFileSize (in: hFile=0x178, lpFileSizeHigh=0x31e628 | out: lpFileSizeHigh=0x31e628*=0x0) returned 0x156ee [0112.465] ReadFile (in: hFile=0x178, lpBuffer=0x6b91018, nNumberOfBytesToRead=0x156ee, lpNumberOfBytesRead=0x31e5d4, lpOverlapped=0x0 | out: lpBuffer=0x6b91018*, lpNumberOfBytesRead=0x31e5d4*=0x156ee, lpOverlapped=0x0) returned 1 [0112.486] CreateFileW (lpFileName="C:\\Windows\\Microsoft.NET\\Framework64\\v4.0.30319\\SetupCache\\v4.6.00081\\1032\\LocalizedData.xml" (normalized: "c:\\windows\\microsoft.net\\framework64\\v4.0.30319\\setupcache\\v4.6.00081\\1032\\localizeddata.xml"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x178 [0112.487] GetFileType (hFile=0x178) returned 0x1 [0112.487] GetFileType (hFile=0x178) returned 0x1 [0112.487] WriteFile (in: hFile=0x178, lpBuffer=0x6bfc308*, nNumberOfBytesToWrite=0x156f0, lpNumberOfBytesWritten=0x31e5c8, lpOverlapped=0x0 | out: lpBuffer=0x6bfc308*, lpNumberOfBytesWritten=0x31e5c8*=0x156f0, lpOverlapped=0x0) returned 1 [0112.489] MoveFileW (lpExistingFileName="C:\\Windows\\Microsoft.NET\\Framework64\\v4.0.30319\\SetupCache\\v4.6.00081\\1032\\LocalizedData.xml" (normalized: "c:\\windows\\microsoft.net\\framework64\\v4.0.30319\\setupcache\\v4.6.00081\\1032\\localizeddata.xml"), lpNewFileName="C:\\Windows\\Microsoft.NET\\Framework64\\v4.0.30319\\SetupCache\\v4.6.00081\\1032\\LocalizedData.xml" (normalized: "c:\\windows\\microsoft.net\\framework64\\v4.0.30319\\setupcache\\v4.6.00081\\1032\\localizeddata.xml")) returned 1 [0112.490] CreateFileW (lpFileName="C:\\Windows\\Microsoft.NET\\Framework64\\v4.0.30319\\SetupCache\\v4.6.00081\\1033\\eula.rtf" (normalized: "c:\\windows\\microsoft.net\\framework64\\v4.0.30319\\setupcache\\v4.6.00081\\1033\\eula.rtf"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x178 [0112.490] GetFileType (hFile=0x178) returned 0x1 [0112.490] GetFileType (hFile=0x178) returned 0x1 [0112.490] GetFileSize (in: hFile=0x178, lpFileSizeHigh=0x31e628 | out: lpFileSizeHigh=0x31e628*=0x0) returned 0x1f53a [0112.491] ReadFile (in: hFile=0x178, lpBuffer=0x6c11a18, nNumberOfBytesToRead=0x1f53a, lpNumberOfBytesRead=0x31e5d4, lpOverlapped=0x0 | out: lpBuffer=0x6c11a18*, lpNumberOfBytesRead=0x31e5d4*=0x1f53a, lpOverlapped=0x0) returned 1 [0112.517] CreateFileW (lpFileName="C:\\Windows\\Microsoft.NET\\Framework64\\v4.0.30319\\SetupCache\\v4.6.00081\\1033\\eula.rtf" (normalized: "c:\\windows\\microsoft.net\\framework64\\v4.0.30319\\setupcache\\v4.6.00081\\1033\\eula.rtf"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x178 [0112.519] GetFileType (hFile=0x178) returned 0x1 [0112.519] GetFileType (hFile=0x178) returned 0x1 [0112.519] WriteFile (in: hFile=0x178, lpBuffer=0x6cae490*, nNumberOfBytesToWrite=0x1f540, lpNumberOfBytesWritten=0x31e5c8, lpOverlapped=0x0 | out: lpBuffer=0x6cae490*, lpNumberOfBytesWritten=0x31e5c8*=0x1f540, lpOverlapped=0x0) returned 1 [0112.523] MoveFileW (lpExistingFileName="C:\\Windows\\Microsoft.NET\\Framework64\\v4.0.30319\\SetupCache\\v4.6.00081\\1033\\eula.rtf" (normalized: "c:\\windows\\microsoft.net\\framework64\\v4.0.30319\\setupcache\\v4.6.00081\\1033\\eula.rtf"), lpNewFileName="C:\\Windows\\Microsoft.NET\\Framework64\\v4.0.30319\\SetupCache\\v4.6.00081\\1033\\eula.rtf" (normalized: "c:\\windows\\microsoft.net\\framework64\\v4.0.30319\\setupcache\\v4.6.00081\\1033\\eula.rtf")) returned 1 [0112.523] CreateFileW (lpFileName="C:\\Windows\\Microsoft.NET\\Framework64\\v4.0.30319\\SetupCache\\v4.6.00081\\1033\\LocalizedData.xml" (normalized: "c:\\windows\\microsoft.net\\framework64\\v4.0.30319\\setupcache\\v4.6.00081\\1033\\localizeddata.xml"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x178 [0112.523] GetFileType (hFile=0x178) returned 0x1 [0112.523] GetFileType (hFile=0x178) returned 0x1 [0112.523] GetFileSize (in: hFile=0x178, lpFileSizeHigh=0x31e628 | out: lpFileSizeHigh=0x31e628*=0x0) returned 0x13d18 [0112.523] ReadFile (in: hFile=0x178, lpBuffer=0x278d3e0, nNumberOfBytesToRead=0x13d18, lpNumberOfBytesRead=0x31e5d4, lpOverlapped=0x0 | out: lpBuffer=0x278d3e0*, lpNumberOfBytesRead=0x31e5d4*=0x13d18, lpOverlapped=0x0) returned 1 [0112.542] CreateFileW (lpFileName="C:\\Windows\\Microsoft.NET\\Framework64\\v4.0.30319\\SetupCache\\v4.6.00081\\1033\\LocalizedData.xml" (normalized: "c:\\windows\\microsoft.net\\framework64\\v4.0.30319\\setupcache\\v4.6.00081\\1033\\localizeddata.xml"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x178 [0112.543] GetFileType (hFile=0x178) returned 0x1 [0112.543] GetFileType (hFile=0x178) returned 0x1 [0112.543] WriteFile (in: hFile=0x178, lpBuffer=0x2815938*, nNumberOfBytesToWrite=0x13d20, lpNumberOfBytesWritten=0x31e5c8, lpOverlapped=0x0 | out: lpBuffer=0x2815938*, lpNumberOfBytesWritten=0x31e5c8*=0x13d20, lpOverlapped=0x0) returned 1 [0112.545] MoveFileW (lpExistingFileName="C:\\Windows\\Microsoft.NET\\Framework64\\v4.0.30319\\SetupCache\\v4.6.00081\\1033\\LocalizedData.xml" (normalized: "c:\\windows\\microsoft.net\\framework64\\v4.0.30319\\setupcache\\v4.6.00081\\1033\\localizeddata.xml"), lpNewFileName="C:\\Windows\\Microsoft.NET\\Framework64\\v4.0.30319\\SetupCache\\v4.6.00081\\1033\\LocalizedData.xml" (normalized: "c:\\windows\\microsoft.net\\framework64\\v4.0.30319\\setupcache\\v4.6.00081\\1033\\localizeddata.xml")) returned 1 [0112.545] CreateFileW (lpFileName="C:\\Windows\\Microsoft.NET\\Framework64\\v4.0.30319\\SetupCache\\v4.6.00081\\1035\\eula.rtf" (normalized: "c:\\windows\\microsoft.net\\framework64\\v4.0.30319\\setupcache\\v4.6.00081\\1035\\eula.rtf"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x178 [0112.545] GetFileType (hFile=0x178) returned 0x1 [0112.545] GetFileType (hFile=0x178) returned 0x1 [0112.545] GetFileSize (in: hFile=0x178, lpFileSizeHigh=0x31e628 | out: lpFileSizeHigh=0x31e628*=0x0) returned 0x2181f [0112.546] ReadFile (in: hFile=0x178, lpBuffer=0x6cf5430, nNumberOfBytesToRead=0x2181f, lpNumberOfBytesRead=0x31e5d4, lpOverlapped=0x0 | out: lpBuffer=0x6cf5430*, lpNumberOfBytesRead=0x31e5d4*=0x2181f, lpOverlapped=0x0) returned 1 [0112.587] CreateFileW (lpFileName="C:\\Windows\\Microsoft.NET\\Framework64\\v4.0.30319\\SetupCache\\v4.6.00081\\1035\\eula.rtf" (normalized: "c:\\windows\\microsoft.net\\framework64\\v4.0.30319\\setupcache\\v4.6.00081\\1035\\eula.rtf"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x178 [0112.589] GetFileType (hFile=0x178) returned 0x1 [0112.589] GetFileType (hFile=0x178) returned 0x1 [0112.589] WriteFile (in: hFile=0x178, lpBuffer=0x6d9cd10*, nNumberOfBytesToWrite=0x21820, lpNumberOfBytesWritten=0x31e5c8, lpOverlapped=0x0 | out: lpBuffer=0x6d9cd10*, lpNumberOfBytesWritten=0x31e5c8*=0x21820, lpOverlapped=0x0) returned 1 [0112.592] MoveFileW (lpExistingFileName="C:\\Windows\\Microsoft.NET\\Framework64\\v4.0.30319\\SetupCache\\v4.6.00081\\1035\\eula.rtf" (normalized: "c:\\windows\\microsoft.net\\framework64\\v4.0.30319\\setupcache\\v4.6.00081\\1035\\eula.rtf"), lpNewFileName="C:\\Windows\\Microsoft.NET\\Framework64\\v4.0.30319\\SetupCache\\v4.6.00081\\1035\\eula.rtf" (normalized: "c:\\windows\\microsoft.net\\framework64\\v4.0.30319\\setupcache\\v4.6.00081\\1035\\eula.rtf")) returned 1 [0112.592] CreateFileW (lpFileName="C:\\Windows\\Microsoft.NET\\Framework64\\v4.0.30319\\SetupCache\\v4.6.00081\\1035\\LocalizedData.xml" (normalized: "c:\\windows\\microsoft.net\\framework64\\v4.0.30319\\setupcache\\v4.6.00081\\1035\\localizeddata.xml"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x178 [0112.592] GetFileType (hFile=0x178) returned 0x1 [0112.592] GetFileType (hFile=0x178) returned 0x1 [0112.592] GetFileSize (in: hFile=0x178, lpFileSizeHigh=0x31e628 | out: lpFileSizeHigh=0x31e628*=0x0) returned 0x14044 [0112.592] ReadFile (in: hFile=0x178, lpBuffer=0x2678fdc, nNumberOfBytesToRead=0x14044, lpNumberOfBytesRead=0x31e5d4, lpOverlapped=0x0 | out: lpBuffer=0x2678fdc*, lpNumberOfBytesRead=0x31e5d4*=0x14044, lpOverlapped=0x0) returned 1 [0112.611] CreateFileW (lpFileName="C:\\Windows\\Microsoft.NET\\Framework64\\v4.0.30319\\SetupCache\\v4.6.00081\\1035\\LocalizedData.xml" (normalized: "c:\\windows\\microsoft.net\\framework64\\v4.0.30319\\setupcache\\v4.6.00081\\1035\\localizeddata.xml"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x178 [0112.612] GetFileType (hFile=0x178) returned 0x1 [0112.612] GetFileType (hFile=0x178) returned 0x1 [0112.612] WriteFile (in: hFile=0x178, lpBuffer=0x2702020*, nNumberOfBytesToWrite=0x14050, lpNumberOfBytesWritten=0x31e5c8, lpOverlapped=0x0 | out: lpBuffer=0x2702020*, lpNumberOfBytesWritten=0x31e5c8*=0x14050, lpOverlapped=0x0) returned 1 [0112.614] MoveFileW (lpExistingFileName="C:\\Windows\\Microsoft.NET\\Framework64\\v4.0.30319\\SetupCache\\v4.6.00081\\1035\\LocalizedData.xml" (normalized: "c:\\windows\\microsoft.net\\framework64\\v4.0.30319\\setupcache\\v4.6.00081\\1035\\localizeddata.xml"), lpNewFileName="C:\\Windows\\Microsoft.NET\\Framework64\\v4.0.30319\\SetupCache\\v4.6.00081\\1035\\LocalizedData.xml" (normalized: "c:\\windows\\microsoft.net\\framework64\\v4.0.30319\\setupcache\\v4.6.00081\\1035\\localizeddata.xml")) returned 1 [0112.614] CreateFileW (lpFileName="C:\\Windows\\Microsoft.NET\\Framework64\\v4.0.30319\\SetupCache\\v4.6.00081\\1036\\eula.rtf" (normalized: "c:\\windows\\microsoft.net\\framework64\\v4.0.30319\\setupcache\\v4.6.00081\\1036\\eula.rtf"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x178 [0112.615] GetFileType (hFile=0x178) returned 0x1 [0112.615] GetFileType (hFile=0x178) returned 0x1 [0112.615] GetFileSize (in: hFile=0x178, lpFileSizeHigh=0x31e628 | out: lpFileSizeHigh=0x31e628*=0x0) returned 0x26318 [0112.616] ReadFile (in: hFile=0x178, lpBuffer=0x6de65f0, nNumberOfBytesToRead=0x26318, lpNumberOfBytesRead=0x31e5d4, lpOverlapped=0x0 | out: lpBuffer=0x6de65f0*, lpNumberOfBytesRead=0x31e5d4*=0x26318, lpOverlapped=0x0) returned 1 [0112.645] CreateFileW (lpFileName="C:\\Windows\\Microsoft.NET\\Framework64\\v4.0.30319\\SetupCache\\v4.6.00081\\1036\\eula.rtf" (normalized: "c:\\windows\\microsoft.net\\framework64\\v4.0.30319\\setupcache\\v4.6.00081\\1036\\eula.rtf"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x178 [0112.647] GetFileType (hFile=0x178) returned 0x1 [0112.647] GetFileType (hFile=0x178) returned 0x1 [0112.647] WriteFile (in: hFile=0x178, lpBuffer=0x6ea55c8*, nNumberOfBytesToWrite=0x26320, lpNumberOfBytesWritten=0x31e5c8, lpOverlapped=0x0 | out: lpBuffer=0x6ea55c8*, lpNumberOfBytesWritten=0x31e5c8*=0x26320, lpOverlapped=0x0) returned 1 [0112.650] MoveFileW (lpExistingFileName="C:\\Windows\\Microsoft.NET\\Framework64\\v4.0.30319\\SetupCache\\v4.6.00081\\1036\\eula.rtf" (normalized: "c:\\windows\\microsoft.net\\framework64\\v4.0.30319\\setupcache\\v4.6.00081\\1036\\eula.rtf"), lpNewFileName="C:\\Windows\\Microsoft.NET\\Framework64\\v4.0.30319\\SetupCache\\v4.6.00081\\1036\\eula.rtf" (normalized: "c:\\windows\\microsoft.net\\framework64\\v4.0.30319\\setupcache\\v4.6.00081\\1036\\eula.rtf")) returned 1 [0112.650] CreateFileW (lpFileName="C:\\Windows\\Microsoft.NET\\Framework64\\v4.0.30319\\SetupCache\\v4.6.00081\\1036\\LocalizedData.xml" (normalized: "c:\\windows\\microsoft.net\\framework64\\v4.0.30319\\setupcache\\v4.6.00081\\1036\\localizeddata.xml"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x178 [0112.651] GetFileType (hFile=0x178) returned 0x1 [0112.651] GetFileType (hFile=0x178) returned 0x1 [0112.651] GetFileSize (in: hFile=0x178, lpFileSizeHigh=0x31e628 | out: lpFileSizeHigh=0x31e628*=0x0) returned 0x14f02 [0112.651] ReadFile (in: hFile=0x178, lpBuffer=0x6ecb908, nNumberOfBytesToRead=0x14f02, lpNumberOfBytesRead=0x31e5d4, lpOverlapped=0x0 | out: lpBuffer=0x6ecb908*, lpNumberOfBytesRead=0x31e5d4*=0x14f02, lpOverlapped=0x0) returned 1 [0112.676] CreateFileW (lpFileName="C:\\Windows\\Microsoft.NET\\Framework64\\v4.0.30319\\SetupCache\\v4.6.00081\\1036\\LocalizedData.xml" (normalized: "c:\\windows\\microsoft.net\\framework64\\v4.0.30319\\setupcache\\v4.6.00081\\1036\\localizeddata.xml"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x178 [0112.677] GetFileType (hFile=0x178) returned 0x1 [0112.678] GetFileType (hFile=0x178) returned 0x1 [0112.678] WriteFile (in: hFile=0x178, lpBuffer=0x6f34488*, nNumberOfBytesToWrite=0x14f10, lpNumberOfBytesWritten=0x31e5c8, lpOverlapped=0x0 | out: lpBuffer=0x6f34488*, lpNumberOfBytesWritten=0x31e5c8*=0x14f10, lpOverlapped=0x0) returned 1 [0112.680] MoveFileW (lpExistingFileName="C:\\Windows\\Microsoft.NET\\Framework64\\v4.0.30319\\SetupCache\\v4.6.00081\\1036\\LocalizedData.xml" (normalized: "c:\\windows\\microsoft.net\\framework64\\v4.0.30319\\setupcache\\v4.6.00081\\1036\\localizeddata.xml"), lpNewFileName="C:\\Windows\\Microsoft.NET\\Framework64\\v4.0.30319\\SetupCache\\v4.6.00081\\1036\\LocalizedData.xml" (normalized: "c:\\windows\\microsoft.net\\framework64\\v4.0.30319\\setupcache\\v4.6.00081\\1036\\localizeddata.xml")) returned 1 [0112.680] CreateFileW (lpFileName="C:\\Windows\\Microsoft.NET\\Framework64\\v4.0.30319\\SetupCache\\v4.6.00081\\1037\\eula.rtf" (normalized: "c:\\windows\\microsoft.net\\framework64\\v4.0.30319\\setupcache\\v4.6.00081\\1037\\eula.rtf"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x178 [0112.680] GetFileType (hFile=0x178) returned 0x1 [0112.680] GetFileType (hFile=0x178) returned 0x1 [0112.680] GetFileSize (in: hFile=0x178, lpFileSizeHigh=0x31e628 | out: lpFileSizeHigh=0x31e628*=0x0) returned 0x23bd8 [0112.681] ReadFile (in: hFile=0x178, lpBuffer=0x6f493b8, nNumberOfBytesToRead=0x23bd8, lpNumberOfBytesRead=0x31e5d4, lpOverlapped=0x0 | out: lpBuffer=0x6f493b8*, lpNumberOfBytesRead=0x31e5d4*=0x23bd8, lpOverlapped=0x0) returned 1 [0112.709] CreateFileW (lpFileName="C:\\Windows\\Microsoft.NET\\Framework64\\v4.0.30319\\SetupCache\\v4.6.00081\\1037\\eula.rtf" (normalized: "c:\\windows\\microsoft.net\\framework64\\v4.0.30319\\setupcache\\v4.6.00081\\1037\\eula.rtf"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x178 [0112.713] GetFileType (hFile=0x178) returned 0x1 [0112.713] GetFileType (hFile=0x178) returned 0x1 [0112.713] WriteFile (in: hFile=0x178, lpBuffer=0x6ffbf50*, nNumberOfBytesToWrite=0x23be0, lpNumberOfBytesWritten=0x31e5c8, lpOverlapped=0x0 | out: lpBuffer=0x6ffbf50*, lpNumberOfBytesWritten=0x31e5c8*=0x23be0, lpOverlapped=0x0) returned 1 [0112.715] MoveFileW (lpExistingFileName="C:\\Windows\\Microsoft.NET\\Framework64\\v4.0.30319\\SetupCache\\v4.6.00081\\1037\\eula.rtf" (normalized: "c:\\windows\\microsoft.net\\framework64\\v4.0.30319\\setupcache\\v4.6.00081\\1037\\eula.rtf"), lpNewFileName="C:\\Windows\\Microsoft.NET\\Framework64\\v4.0.30319\\SetupCache\\v4.6.00081\\1037\\eula.rtf" (normalized: "c:\\windows\\microsoft.net\\framework64\\v4.0.30319\\setupcache\\v4.6.00081\\1037\\eula.rtf")) returned 1 [0112.716] CreateFileW (lpFileName="C:\\Windows\\Microsoft.NET\\Framework64\\v4.0.30319\\SetupCache\\v4.6.00081\\1037\\LocalizedData.xml" (normalized: "c:\\windows\\microsoft.net\\framework64\\v4.0.30319\\setupcache\\v4.6.00081\\1037\\localizeddata.xml"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x178 [0112.716] GetFileType (hFile=0x178) returned 0x1 [0112.716] GetFileType (hFile=0x178) returned 0x1 [0112.716] GetFileSize (in: hFile=0x178, lpFileSizeHigh=0x31e628 | out: lpFileSizeHigh=0x31e628*=0x0) returned 0x12b7c [0112.716] ReadFile (in: hFile=0x178, lpBuffer=0x2802108, nNumberOfBytesToRead=0x12b7c, lpNumberOfBytesRead=0x31e5d4, lpOverlapped=0x0 | out: lpBuffer=0x2802108*, lpNumberOfBytesRead=0x31e5d4*=0x12b7c, lpOverlapped=0x0) returned 1 [0112.738] CreateFileW (lpFileName="C:\\Windows\\Microsoft.NET\\Framework64\\v4.0.30319\\SetupCache\\v4.6.00081\\1037\\LocalizedData.xml" (normalized: "c:\\windows\\microsoft.net\\framework64\\v4.0.30319\\setupcache\\v4.6.00081\\1037\\localizeddata.xml"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x178 [0112.739] GetFileType (hFile=0x178) returned 0x1 [0112.739] GetFileType (hFile=0x178) returned 0x1 [0112.739] WriteFile (in: hFile=0x178, lpBuffer=0x269eeec*, nNumberOfBytesToWrite=0x12b80, lpNumberOfBytesWritten=0x31e5c8, lpOverlapped=0x0 | out: lpBuffer=0x269eeec*, lpNumberOfBytesWritten=0x31e5c8*=0x12b80, lpOverlapped=0x0) returned 1 [0112.741] MoveFileW (lpExistingFileName="C:\\Windows\\Microsoft.NET\\Framework64\\v4.0.30319\\SetupCache\\v4.6.00081\\1037\\LocalizedData.xml" (normalized: "c:\\windows\\microsoft.net\\framework64\\v4.0.30319\\setupcache\\v4.6.00081\\1037\\localizeddata.xml"), lpNewFileName="C:\\Windows\\Microsoft.NET\\Framework64\\v4.0.30319\\SetupCache\\v4.6.00081\\1037\\LocalizedData.xml" (normalized: "c:\\windows\\microsoft.net\\framework64\\v4.0.30319\\setupcache\\v4.6.00081\\1037\\localizeddata.xml")) returned 1 [0112.742] CreateFileW (lpFileName="C:\\Windows\\Microsoft.NET\\Framework64\\v4.0.30319\\SetupCache\\v4.6.00081\\1038\\eula.rtf" (normalized: "c:\\windows\\microsoft.net\\framework64\\v4.0.30319\\setupcache\\v4.6.00081\\1038\\eula.rtf"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x178 [0112.743] GetFileType (hFile=0x178) returned 0x1 [0112.743] GetFileType (hFile=0x178) returned 0x1 [0112.743] GetFileSize (in: hFile=0x178, lpFileSizeHigh=0x31e628 | out: lpFileSizeHigh=0x31e628*=0x0) returned 0x26ad4 [0112.743] ReadFile (in: hFile=0x178, lpBuffer=0x7045250, nNumberOfBytesToRead=0x26ad4, lpNumberOfBytesRead=0x31e5d4, lpOverlapped=0x0 | out: lpBuffer=0x7045250*, lpNumberOfBytesRead=0x31e5d4*=0x26ad4, lpOverlapped=0x0) returned 1 [0112.773] CreateFileW (lpFileName="C:\\Windows\\Microsoft.NET\\Framework64\\v4.0.30319\\SetupCache\\v4.6.00081\\1038\\eula.rtf" (normalized: "c:\\windows\\microsoft.net\\framework64\\v4.0.30319\\setupcache\\v4.6.00081\\1038\\eula.rtf"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x178 [0112.775] GetFileType (hFile=0x178) returned 0x1 [0112.775] GetFileType (hFile=0x178) returned 0x1 [0112.775] WriteFile (in: hFile=0x178, lpBuffer=0x71068e0*, nNumberOfBytesToWrite=0x26ae0, lpNumberOfBytesWritten=0x31e5c8, lpOverlapped=0x0 | out: lpBuffer=0x71068e0*, lpNumberOfBytesWritten=0x31e5c8*=0x26ae0, lpOverlapped=0x0) returned 1 [0112.778] MoveFileW (lpExistingFileName="C:\\Windows\\Microsoft.NET\\Framework64\\v4.0.30319\\SetupCache\\v4.6.00081\\1038\\eula.rtf" (normalized: "c:\\windows\\microsoft.net\\framework64\\v4.0.30319\\setupcache\\v4.6.00081\\1038\\eula.rtf"), lpNewFileName="C:\\Windows\\Microsoft.NET\\Framework64\\v4.0.30319\\SetupCache\\v4.6.00081\\1038\\eula.rtf" (normalized: "c:\\windows\\microsoft.net\\framework64\\v4.0.30319\\setupcache\\v4.6.00081\\1038\\eula.rtf")) returned 1 [0112.779] CreateFileW (lpFileName="C:\\Windows\\Microsoft.NET\\Framework64\\v4.0.30319\\SetupCache\\v4.6.00081\\1038\\LocalizedData.xml" (normalized: "c:\\windows\\microsoft.net\\framework64\\v4.0.30319\\setupcache\\v4.6.00081\\1038\\localizeddata.xml"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x178 [0112.779] GetFileType (hFile=0x178) returned 0x1 [0112.779] GetFileType (hFile=0x178) returned 0x1 [0112.779] GetFileSize (in: hFile=0x178, lpFileSizeHigh=0x31e628 | out: lpFileSizeHigh=0x31e628*=0x0) returned 0x14a66 [0112.779] ReadFile (in: hFile=0x178, lpBuffer=0x270151c, nNumberOfBytesToRead=0x14a66, lpNumberOfBytesRead=0x31e5d4, lpOverlapped=0x0 | out: lpBuffer=0x270151c*, lpNumberOfBytesRead=0x31e5d4*=0x14a66, lpOverlapped=0x0) returned 1 [0112.797] CreateFileW (lpFileName="C:\\Windows\\Microsoft.NET\\Framework64\\v4.0.30319\\SetupCache\\v4.6.00081\\1038\\LocalizedData.xml" (normalized: "c:\\windows\\microsoft.net\\framework64\\v4.0.30319\\setupcache\\v4.6.00081\\1038\\localizeddata.xml"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x178 [0112.799] GetFileType (hFile=0x178) returned 0x1 [0112.799] GetFileType (hFile=0x178) returned 0x1 [0112.799] WriteFile (in: hFile=0x178, lpBuffer=0x278c268*, nNumberOfBytesToWrite=0x14a70, lpNumberOfBytesWritten=0x31e5c8, lpOverlapped=0x0 | out: lpBuffer=0x278c268*, lpNumberOfBytesWritten=0x31e5c8*=0x14a70, lpOverlapped=0x0) returned 1 [0112.801] MoveFileW (lpExistingFileName="C:\\Windows\\Microsoft.NET\\Framework64\\v4.0.30319\\SetupCache\\v4.6.00081\\1038\\LocalizedData.xml" (normalized: "c:\\windows\\microsoft.net\\framework64\\v4.0.30319\\setupcache\\v4.6.00081\\1038\\localizeddata.xml"), lpNewFileName="C:\\Windows\\Microsoft.NET\\Framework64\\v4.0.30319\\SetupCache\\v4.6.00081\\1038\\LocalizedData.xml" (normalized: "c:\\windows\\microsoft.net\\framework64\\v4.0.30319\\setupcache\\v4.6.00081\\1038\\localizeddata.xml")) returned 1 [0112.802] CreateFileW (lpFileName="C:\\Windows\\Microsoft.NET\\Framework64\\v4.0.30319\\SetupCache\\v4.6.00081\\1040\\eula.rtf" (normalized: "c:\\windows\\microsoft.net\\framework64\\v4.0.30319\\setupcache\\v4.6.00081\\1040\\eula.rtf"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x178 [0112.803] GetFileType (hFile=0x178) returned 0x1 [0112.803] GetFileType (hFile=0x178) returned 0x1 [0112.803] GetFileSize (in: hFile=0x178, lpFileSizeHigh=0x31e628 | out: lpFileSizeHigh=0x31e628*=0x0) returned 0x23f4b [0112.803] ReadFile (in: hFile=0x178, lpBuffer=0x71568c0, nNumberOfBytesToRead=0x23f4b, lpNumberOfBytesRead=0x31e5d4, lpOverlapped=0x0 | out: lpBuffer=0x71568c0*, lpNumberOfBytesRead=0x31e5d4*=0x23f4b, lpOverlapped=0x0) returned 1 [0113.090] CreateFileW (lpFileName="C:\\Windows\\Microsoft.NET\\Framework64\\v4.0.30319\\SetupCache\\v4.6.00081\\1040\\eula.rtf" (normalized: "c:\\windows\\microsoft.net\\framework64\\v4.0.30319\\setupcache\\v4.6.00081\\1040\\eula.rtf"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x178 [0113.090] GetFileType (hFile=0x178) returned 0x1 [0113.090] GetFileType (hFile=0x178) returned 0x1 [0113.091] WriteFile (in: hFile=0x178, lpBuffer=0x717a828*, nNumberOfBytesToWrite=0x23f50, lpNumberOfBytesWritten=0x31e5c8, lpOverlapped=0x0 | out: lpBuffer=0x717a828*, lpNumberOfBytesWritten=0x31e5c8*=0x23f50, lpOverlapped=0x0) returned 1 [0113.093] MoveFileW (lpExistingFileName="C:\\Windows\\Microsoft.NET\\Framework64\\v4.0.30319\\SetupCache\\v4.6.00081\\1040\\eula.rtf" (normalized: "c:\\windows\\microsoft.net\\framework64\\v4.0.30319\\setupcache\\v4.6.00081\\1040\\eula.rtf"), lpNewFileName="C:\\Windows\\Microsoft.NET\\Framework64\\v4.0.30319\\SetupCache\\v4.6.00081\\1040\\eula.rtf" (normalized: "c:\\windows\\microsoft.net\\framework64\\v4.0.30319\\setupcache\\v4.6.00081\\1040\\eula.rtf")) returned 1 [0113.094] CreateFileW (lpFileName="C:\\Windows\\Microsoft.NET\\Framework64\\v4.0.30319\\SetupCache\\v4.6.00081\\1040\\LocalizedData.xml" (normalized: "c:\\windows\\microsoft.net\\framework64\\v4.0.30319\\setupcache\\v4.6.00081\\1040\\localizeddata.xml"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x178 [0113.094] GetFileType (hFile=0x178) returned 0x1 [0113.094] GetFileType (hFile=0x178) returned 0x1 [0113.095] GetFileSize (in: hFile=0x178, lpFileSizeHigh=0x31e628 | out: lpFileSizeHigh=0x31e628*=0x0) returned 0x146dc [0113.095] ReadFile (in: hFile=0x178, lpBuffer=0x268c748, nNumberOfBytesToRead=0x146dc, lpNumberOfBytesRead=0x31e5d4, lpOverlapped=0x0 | out: lpBuffer=0x268c748*, lpNumberOfBytesRead=0x31e5d4*=0x146dc, lpOverlapped=0x0) returned 1 [0113.134] CreateFileW (lpFileName="C:\\Windows\\Microsoft.NET\\Framework64\\v4.0.30319\\SetupCache\\v4.6.00081\\1040\\LocalizedData.xml" (normalized: "c:\\windows\\microsoft.net\\framework64\\v4.0.30319\\setupcache\\v4.6.00081\\1040\\localizeddata.xml"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x178 [0113.136] GetFileType (hFile=0x178) returned 0x1 [0113.136] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e508) returned 1 [0113.136] GetFileType (hFile=0x178) returned 0x1 [0113.136] WriteFile (in: hFile=0x178, lpBuffer=0x2729a50*, nNumberOfBytesToWrite=0x146e0, lpNumberOfBytesWritten=0x31e5c8, lpOverlapped=0x0 | out: lpBuffer=0x2729a50*, lpNumberOfBytesWritten=0x31e5c8*=0x146e0, lpOverlapped=0x0) returned 1 [0113.137] CloseHandle (hObject=0x178) returned 1 [0113.138] GetFullPathNameW (in: lpFileName="C:\\Windows\\Microsoft.NET\\Framework64\\v4.0.30319\\SetupCache\\v4.6.00081\\1040\\LocalizedData.xml", nBufferLength=0x105, lpBuffer=0x31e14c, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\Microsoft.NET\\Framework64\\v4.0.30319\\SetupCache\\v4.6.00081\\1040\\LocalizedData.xml", lpFilePart=0x0) returned 0x5c [0113.138] GetFullPathNameW (in: lpFileName="C:\\Windows\\Microsoft.NET\\Framework64\\v4.0.30319\\SetupCache\\v4.6.00081\\1040\\LocalizedData.xml", nBufferLength=0x105, lpBuffer=0x31e14c, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\Microsoft.NET\\Framework64\\v4.0.30319\\SetupCache\\v4.6.00081\\1040\\LocalizedData.xml", lpFilePart=0x0) returned 0x5c [0113.138] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e5ac) returned 1 [0113.138] GetFileAttributesExW (in: lpFileName="C:\\Windows\\Microsoft.NET\\Framework64\\v4.0.30319\\SetupCache\\v4.6.00081\\1040\\LocalizedData.xml" (normalized: "c:\\windows\\microsoft.net\\framework64\\v4.0.30319\\setupcache\\v4.6.00081\\1040\\localizeddata.xml"), fInfoLevelId=0x0, lpFileInformation=0x31e628 | out: lpFileInformation=0x31e628*(dwFileAttributes=0x820, ftCreationTime.dwLowDateTime=0x29ab2a00, ftCreationTime.dwHighDateTime=0x1d0ab24, ftLastAccessTime.dwLowDateTime=0x5d5487e0, ftLastAccessTime.dwHighDateTime=0x1d2e676, ftLastWriteTime.dwLowDateTime=0x26deb5c0, ftLastWriteTime.dwHighDateTime=0x1d6eb7f, nFileSizeHigh=0x0, nFileSizeLow=0x146e0)) returned 1 [0113.138] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e5a8) returned 1 [0113.138] MoveFileW (lpExistingFileName="C:\\Windows\\Microsoft.NET\\Framework64\\v4.0.30319\\SetupCache\\v4.6.00081\\1040\\LocalizedData.xml" (normalized: "c:\\windows\\microsoft.net\\framework64\\v4.0.30319\\setupcache\\v4.6.00081\\1040\\localizeddata.xml"), lpNewFileName="C:\\Windows\\Microsoft.NET\\Framework64\\v4.0.30319\\SetupCache\\v4.6.00081\\1040\\LocalizedData.xml" (normalized: "c:\\windows\\microsoft.net\\framework64\\v4.0.30319\\setupcache\\v4.6.00081\\1040\\localizeddata.xml")) returned 1 [0113.138] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e654) returned 1 [0113.138] GetFullPathNameW (in: lpFileName="C:\\Windows\\Microsoft.NET\\Framework64\\v4.0.30319\\SetupCache\\v4.6.00081\\1041", nBufferLength=0x105, lpBuffer=0x31e15c, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\Microsoft.NET\\Framework64\\v4.0.30319\\SetupCache\\v4.6.00081\\1041", lpFilePart=0x0) returned 0x4a [0113.138] GetFullPathNameW (in: lpFileName="C:\\Windows\\Microsoft.NET\\Framework64\\v4.0.30319\\SetupCache\\v4.6.00081\\1041\\", nBufferLength=0x105, lpBuffer=0x31e130, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\Microsoft.NET\\Framework64\\v4.0.30319\\SetupCache\\v4.6.00081\\1041\\", lpFilePart=0x0) returned 0x4b [0113.138] FindFirstFileW (in: lpFileName="C:\\Windows\\Microsoft.NET\\Framework64\\v4.0.30319\\SetupCache\\v4.6.00081\\1041\\*", lpFindFileData=0x31e37c | out: lpFindFileData=0x31e37c*(dwFileAttributes=0x810, ftCreationTime.dwLowDateTime=0x59209a60, ftCreationTime.dwHighDateTime=0x1d2e676, ftLastAccessTime.dwLowDateTime=0x5d5487e0, ftLastAccessTime.dwHighDateTime=0x1d2e676, ftLastWriteTime.dwLowDateTime=0x5d5487e0, ftLastWriteTime.dwHighDateTime=0x1d2e676, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x381c40 [0113.139] FindNextFileW (in: hFindFile=0x381c40, lpFindFileData=0x31e38c | out: lpFindFileData=0x31e38c*(dwFileAttributes=0x810, ftCreationTime.dwLowDateTime=0x59209a60, ftCreationTime.dwHighDateTime=0x1d2e676, ftLastAccessTime.dwLowDateTime=0x5d5487e0, ftLastAccessTime.dwHighDateTime=0x1d2e676, ftLastWriteTime.dwLowDateTime=0x5d5487e0, ftLastWriteTime.dwHighDateTime=0x1d2e676, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0113.139] FindNextFileW (in: hFindFile=0x381c40, lpFindFileData=0x31e38c | out: lpFindFileData=0x31e38c*(dwFileAttributes=0x820, ftCreationTime.dwLowDateTime=0xcd7cbf00, ftCreationTime.dwHighDateTime=0x1d09f02, ftLastAccessTime.dwLowDateTime=0x5922fbc0, ftLastAccessTime.dwHighDateTime=0x1d2e676, ftLastWriteTime.dwLowDateTime=0xcd7cbf00, ftLastWriteTime.dwHighDateTime=0x1d09f02, nFileSizeHigh=0x0, nFileSizeLow=0x25fe0, dwReserved0=0x0, dwReserved1=0x0, cFileName="eula.rtf", cAlternateFileName="")) returned 1 [0113.139] FindNextFileW (in: hFindFile=0x381c40, lpFindFileData=0x31e38c | out: lpFindFileData=0x31e38c*(dwFileAttributes=0x820, ftCreationTime.dwLowDateTime=0x29ab2a00, ftCreationTime.dwHighDateTime=0x1d0ab24, ftLastAccessTime.dwLowDateTime=0x5d5487e0, ftLastAccessTime.dwHighDateTime=0x1d2e676, ftLastWriteTime.dwLowDateTime=0x29ab2a00, ftLastWriteTime.dwHighDateTime=0x1d0ab24, nFileSizeHigh=0x0, nFileSizeLow=0x11e0e, dwReserved0=0x0, dwReserved1=0x0, cFileName="LocalizedData.xml", cAlternateFileName="LOCALI~1.XML")) returned 1 [0113.139] FindNextFileW (in: hFindFile=0x381c40, lpFindFileData=0x31e38c | out: lpFindFileData=0x31e38c*(dwFileAttributes=0x820, ftCreationTime.dwLowDateTime=0x852ae700, ftCreationTime.dwHighDateTime=0x1d0ab27, ftLastAccessTime.dwLowDateTime=0x5d4fc520, ftLastAccessTime.dwHighDateTime=0x1d2e676, ftLastWriteTime.dwLowDateTime=0x852ae700, ftLastWriteTime.dwHighDateTime=0x1d0ab27, nFileSizeHigh=0x0, nFileSizeLow=0x6958, dwReserved0=0x0, dwReserved1=0x0, cFileName="SetupResources.dll", cAlternateFileName="SETUPR~1.DLL")) returned 1 [0113.139] FindNextFileW (in: hFindFile=0x381c40, lpFindFileData=0x31e38c | out: lpFindFileData=0x31e38c*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0113.139] FindClose (in: hFindFile=0x381c40 | out: hFindFile=0x381c40) returned 1 [0113.139] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e614) returned 1 [0113.139] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e620) returned 1 [0113.139] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e654) returned 1 [0113.140] GetFullPathNameW (in: lpFileName="C:\\Windows\\Microsoft.NET\\Framework64\\v4.0.30319\\SetupCache\\v4.6.00081\\1041", nBufferLength=0x105, lpBuffer=0x31e15c, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\Microsoft.NET\\Framework64\\v4.0.30319\\SetupCache\\v4.6.00081\\1041", lpFilePart=0x0) returned 0x4a [0113.140] GetFullPathNameW (in: lpFileName="C:\\Windows\\Microsoft.NET\\Framework64\\v4.0.30319\\SetupCache\\v4.6.00081\\1041\\", nBufferLength=0x105, lpBuffer=0x31e130, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\Microsoft.NET\\Framework64\\v4.0.30319\\SetupCache\\v4.6.00081\\1041\\", lpFilePart=0x0) returned 0x4b [0113.140] FindFirstFileW (in: lpFileName="C:\\Windows\\Microsoft.NET\\Framework64\\v4.0.30319\\SetupCache\\v4.6.00081\\1041\\*", lpFindFileData=0x31e37c | out: lpFindFileData=0x31e37c*(dwFileAttributes=0x810, ftCreationTime.dwLowDateTime=0x59209a60, ftCreationTime.dwHighDateTime=0x1d2e676, ftLastAccessTime.dwLowDateTime=0x5d5487e0, ftLastAccessTime.dwHighDateTime=0x1d2e676, ftLastWriteTime.dwLowDateTime=0x5d5487e0, ftLastWriteTime.dwHighDateTime=0x1d2e676, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x381c40 [0113.140] FindNextFileW (in: hFindFile=0x381c40, lpFindFileData=0x31e38c | out: lpFindFileData=0x31e38c*(dwFileAttributes=0x810, ftCreationTime.dwLowDateTime=0x59209a60, ftCreationTime.dwHighDateTime=0x1d2e676, ftLastAccessTime.dwLowDateTime=0x5d5487e0, ftLastAccessTime.dwHighDateTime=0x1d2e676, ftLastWriteTime.dwLowDateTime=0x5d5487e0, ftLastWriteTime.dwHighDateTime=0x1d2e676, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0113.140] FindNextFileW (in: hFindFile=0x381c40, lpFindFileData=0x31e38c | out: lpFindFileData=0x31e38c*(dwFileAttributes=0x820, ftCreationTime.dwLowDateTime=0xcd7cbf00, ftCreationTime.dwHighDateTime=0x1d09f02, ftLastAccessTime.dwLowDateTime=0x5922fbc0, ftLastAccessTime.dwHighDateTime=0x1d2e676, ftLastWriteTime.dwLowDateTime=0xcd7cbf00, ftLastWriteTime.dwHighDateTime=0x1d09f02, nFileSizeHigh=0x0, nFileSizeLow=0x25fe0, dwReserved0=0x0, dwReserved1=0x0, cFileName="eula.rtf", cAlternateFileName="")) returned 1 [0113.140] FindNextFileW (in: hFindFile=0x381c40, lpFindFileData=0x31e38c | out: lpFindFileData=0x31e38c*(dwFileAttributes=0x820, ftCreationTime.dwLowDateTime=0x29ab2a00, ftCreationTime.dwHighDateTime=0x1d0ab24, ftLastAccessTime.dwLowDateTime=0x5d5487e0, ftLastAccessTime.dwHighDateTime=0x1d2e676, ftLastWriteTime.dwLowDateTime=0x29ab2a00, ftLastWriteTime.dwHighDateTime=0x1d0ab24, nFileSizeHigh=0x0, nFileSizeLow=0x11e0e, dwReserved0=0x0, dwReserved1=0x0, cFileName="LocalizedData.xml", cAlternateFileName="LOCALI~1.XML")) returned 1 [0113.140] FindNextFileW (in: hFindFile=0x381c40, lpFindFileData=0x31e38c | out: lpFindFileData=0x31e38c*(dwFileAttributes=0x820, ftCreationTime.dwLowDateTime=0x852ae700, ftCreationTime.dwHighDateTime=0x1d0ab27, ftLastAccessTime.dwLowDateTime=0x5d4fc520, ftLastAccessTime.dwHighDateTime=0x1d2e676, ftLastWriteTime.dwLowDateTime=0x852ae700, ftLastWriteTime.dwHighDateTime=0x1d0ab27, nFileSizeHigh=0x0, nFileSizeLow=0x6958, dwReserved0=0x0, dwReserved1=0x0, cFileName="SetupResources.dll", cAlternateFileName="SETUPR~1.DLL")) returned 1 [0113.140] FindNextFileW (in: hFindFile=0x381c40, lpFindFileData=0x31e38c | out: lpFindFileData=0x31e38c*(dwFileAttributes=0x820, ftCreationTime.dwLowDateTime=0x852ae700, ftCreationTime.dwHighDateTime=0x1d0ab27, ftLastAccessTime.dwLowDateTime=0x5d4fc520, ftLastAccessTime.dwHighDateTime=0x1d2e676, ftLastWriteTime.dwLowDateTime=0x852ae700, ftLastWriteTime.dwHighDateTime=0x1d0ab27, nFileSizeHigh=0x0, nFileSizeLow=0x6958, dwReserved0=0x0, dwReserved1=0x0, cFileName="SetupResources.dll", cAlternateFileName="SETUPR~1.DLL")) returned 0 [0113.141] FindClose (in: hFindFile=0x381c40 | out: hFindFile=0x381c40) returned 1 [0113.141] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e614) returned 1 [0113.141] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e620) returned 1 [0113.141] GetFullPathNameW (in: lpFileName="C:\\Windows\\Microsoft.NET\\Framework64\\v4.0.30319\\SetupCache\\v4.6.00081\\1041\\eula.rtf", nBufferLength=0x105, lpBuffer=0x31e02c, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\Microsoft.NET\\Framework64\\v4.0.30319\\SetupCache\\v4.6.00081\\1041\\eula.rtf", lpFilePart=0x0) returned 0x53 [0113.141] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e520) returned 1 [0113.141] CreateFileW (lpFileName="C:\\Windows\\Microsoft.NET\\Framework64\\v4.0.30319\\SetupCache\\v4.6.00081\\1041\\eula.rtf" (normalized: "c:\\windows\\microsoft.net\\framework64\\v4.0.30319\\setupcache\\v4.6.00081\\1041\\eula.rtf"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x178 [0113.142] GetFileType (hFile=0x178) returned 0x1 [0113.142] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e51c) returned 1 [0113.142] GetFileType (hFile=0x178) returned 0x1 [0113.142] GetFileSize (in: hFile=0x178, lpFileSizeHigh=0x31e628 | out: lpFileSizeHigh=0x31e628*=0x0) returned 0x25fe0 [0113.142] ReadFile (in: hFile=0x178, lpBuffer=0x6bb9dd8, nNumberOfBytesToRead=0x25fe0, lpNumberOfBytesRead=0x31e5d4, lpOverlapped=0x0 | out: lpBuffer=0x6bb9dd8*, lpNumberOfBytesRead=0x31e5d4*=0x25fe0, lpOverlapped=0x0) returned 1 [0113.146] CloseHandle (hObject=0x178) returned 1 [0113.174] GetFullPathNameW (in: lpFileName="C:\\Windows\\Microsoft.NET\\Framework64\\v4.0.30319\\SetupCache\\v4.6.00081\\1041\\eula.rtf", nBufferLength=0x105, lpBuffer=0x31e018, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\Microsoft.NET\\Framework64\\v4.0.30319\\SetupCache\\v4.6.00081\\1041\\eula.rtf", lpFilePart=0x0) returned 0x53 [0113.174] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e50c) returned 1 [0113.174] CreateFileW (lpFileName="C:\\Windows\\Microsoft.NET\\Framework64\\v4.0.30319\\SetupCache\\v4.6.00081\\1041\\eula.rtf" (normalized: "c:\\windows\\microsoft.net\\framework64\\v4.0.30319\\setupcache\\v4.6.00081\\1041\\eula.rtf"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x178 [0113.176] GetFileType (hFile=0x178) returned 0x1 [0113.176] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e508) returned 1 [0113.176] GetFileType (hFile=0x178) returned 0x1 [0113.176] WriteFile (in: hFile=0x178, lpBuffer=0x6c77db8*, nNumberOfBytesToWrite=0x25ff0, lpNumberOfBytesWritten=0x31e5c8, lpOverlapped=0x0 | out: lpBuffer=0x6c77db8*, lpNumberOfBytesWritten=0x31e5c8*=0x25ff0, lpOverlapped=0x0) returned 1 [0113.179] CloseHandle (hObject=0x178) returned 1 [0113.179] GetFullPathNameW (in: lpFileName="C:\\Windows\\Microsoft.NET\\Framework64\\v4.0.30319\\SetupCache\\v4.6.00081\\1041\\eula.rtf", nBufferLength=0x105, lpBuffer=0x31e14c, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\Microsoft.NET\\Framework64\\v4.0.30319\\SetupCache\\v4.6.00081\\1041\\eula.rtf", lpFilePart=0x0) returned 0x53 [0113.179] GetFullPathNameW (in: lpFileName="C:\\Windows\\Microsoft.NET\\Framework64\\v4.0.30319\\SetupCache\\v4.6.00081\\1041\\eula.rtf", nBufferLength=0x105, lpBuffer=0x31e14c, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\Microsoft.NET\\Framework64\\v4.0.30319\\SetupCache\\v4.6.00081\\1041\\eula.rtf", lpFilePart=0x0) returned 0x53 [0113.179] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e5ac) returned 1 [0113.179] GetFileAttributesExW (in: lpFileName="C:\\Windows\\Microsoft.NET\\Framework64\\v4.0.30319\\SetupCache\\v4.6.00081\\1041\\eula.rtf" (normalized: "c:\\windows\\microsoft.net\\framework64\\v4.0.30319\\setupcache\\v4.6.00081\\1041\\eula.rtf"), fInfoLevelId=0x0, lpFileInformation=0x31e628 | out: lpFileInformation=0x31e628*(dwFileAttributes=0x820, ftCreationTime.dwLowDateTime=0xcd7cbf00, ftCreationTime.dwHighDateTime=0x1d09f02, ftLastAccessTime.dwLowDateTime=0x5922fbc0, ftLastAccessTime.dwHighDateTime=0x1d2e676, ftLastWriteTime.dwLowDateTime=0x26e5d9e0, ftLastWriteTime.dwHighDateTime=0x1d6eb7f, nFileSizeHigh=0x0, nFileSizeLow=0x25ff0)) returned 1 [0113.179] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e5a8) returned 1 [0113.179] MoveFileW (lpExistingFileName="C:\\Windows\\Microsoft.NET\\Framework64\\v4.0.30319\\SetupCache\\v4.6.00081\\1041\\eula.rtf" (normalized: "c:\\windows\\microsoft.net\\framework64\\v4.0.30319\\setupcache\\v4.6.00081\\1041\\eula.rtf"), lpNewFileName="C:\\Windows\\Microsoft.NET\\Framework64\\v4.0.30319\\SetupCache\\v4.6.00081\\1041\\eula.rtf" (normalized: "c:\\windows\\microsoft.net\\framework64\\v4.0.30319\\setupcache\\v4.6.00081\\1041\\eula.rtf")) returned 1 [0113.180] GetFullPathNameW (in: lpFileName="C:\\Windows\\Microsoft.NET\\Framework64\\v4.0.30319\\SetupCache\\v4.6.00081\\1041\\LocalizedData.xml", nBufferLength=0x105, lpBuffer=0x31e02c, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\Microsoft.NET\\Framework64\\v4.0.30319\\SetupCache\\v4.6.00081\\1041\\LocalizedData.xml", lpFilePart=0x0) returned 0x5c [0113.180] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e520) returned 1 [0113.180] CreateFileW (lpFileName="C:\\Windows\\Microsoft.NET\\Framework64\\v4.0.30319\\SetupCache\\v4.6.00081\\1041\\LocalizedData.xml" (normalized: "c:\\windows\\microsoft.net\\framework64\\v4.0.30319\\setupcache\\v4.6.00081\\1041\\localizeddata.xml"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x178 [0113.180] GetFileType (hFile=0x178) returned 0x1 [0113.180] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e51c) returned 1 [0113.180] GetFileType (hFile=0x178) returned 0x1 [0113.180] GetFileSize (in: hFile=0x178, lpFileSizeHigh=0x31e628 | out: lpFileSizeHigh=0x31e628*=0x0) returned 0x11e0e [0113.180] ReadFile (in: hFile=0x178, lpBuffer=0x278dac0, nNumberOfBytesToRead=0x11e0e, lpNumberOfBytesRead=0x31e5d4, lpOverlapped=0x0 | out: lpBuffer=0x278dac0*, lpNumberOfBytesRead=0x31e5d4*=0x11e0e, lpOverlapped=0x0) returned 1 [0113.189] CloseHandle (hObject=0x178) returned 1 [0113.204] GetFullPathNameW (in: lpFileName="C:\\Windows\\Microsoft.NET\\Framework64\\v4.0.30319\\SetupCache\\v4.6.00081\\1041\\LocalizedData.xml", nBufferLength=0x105, lpBuffer=0x31e018, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\Microsoft.NET\\Framework64\\v4.0.30319\\SetupCache\\v4.6.00081\\1041\\LocalizedData.xml", lpFilePart=0x0) returned 0x5c [0113.204] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e50c) returned 1 [0113.205] CreateFileW (lpFileName="C:\\Windows\\Microsoft.NET\\Framework64\\v4.0.30319\\SetupCache\\v4.6.00081\\1041\\LocalizedData.xml" (normalized: "c:\\windows\\microsoft.net\\framework64\\v4.0.30319\\setupcache\\v4.6.00081\\1041\\localizeddata.xml"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x178 [0113.206] GetFileType (hFile=0x178) returned 0x1 [0113.206] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e508) returned 1 [0113.206] GetFileType (hFile=0x178) returned 0x1 [0113.206] WriteFile (in: hFile=0x178, lpBuffer=0x2813e68*, nNumberOfBytesToWrite=0x11e10, lpNumberOfBytesWritten=0x31e5c8, lpOverlapped=0x0 | out: lpBuffer=0x2813e68*, lpNumberOfBytesWritten=0x31e5c8*=0x11e10, lpOverlapped=0x0) returned 1 [0113.208] CloseHandle (hObject=0x178) returned 1 [0113.208] GetFullPathNameW (in: lpFileName="C:\\Windows\\Microsoft.NET\\Framework64\\v4.0.30319\\SetupCache\\v4.6.00081\\1041\\LocalizedData.xml", nBufferLength=0x105, lpBuffer=0x31e14c, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\Microsoft.NET\\Framework64\\v4.0.30319\\SetupCache\\v4.6.00081\\1041\\LocalizedData.xml", lpFilePart=0x0) returned 0x5c [0113.208] GetFullPathNameW (in: lpFileName="C:\\Windows\\Microsoft.NET\\Framework64\\v4.0.30319\\SetupCache\\v4.6.00081\\1041\\LocalizedData.xml", nBufferLength=0x105, lpBuffer=0x31e14c, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\Microsoft.NET\\Framework64\\v4.0.30319\\SetupCache\\v4.6.00081\\1041\\LocalizedData.xml", lpFilePart=0x0) returned 0x5c [0113.208] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e5ac) returned 1 [0113.208] GetFileAttributesExW (in: lpFileName="C:\\Windows\\Microsoft.NET\\Framework64\\v4.0.30319\\SetupCache\\v4.6.00081\\1041\\LocalizedData.xml" (normalized: "c:\\windows\\microsoft.net\\framework64\\v4.0.30319\\setupcache\\v4.6.00081\\1041\\localizeddata.xml"), fInfoLevelId=0x0, lpFileInformation=0x31e628 | out: lpFileInformation=0x31e628*(dwFileAttributes=0x820, ftCreationTime.dwLowDateTime=0x29ab2a00, ftCreationTime.dwHighDateTime=0x1d0ab24, ftLastAccessTime.dwLowDateTime=0x5d5487e0, ftLastAccessTime.dwHighDateTime=0x1d2e676, ftLastWriteTime.dwLowDateTime=0x26e83b40, ftLastWriteTime.dwHighDateTime=0x1d6eb7f, nFileSizeHigh=0x0, nFileSizeLow=0x11e10)) returned 1 [0113.208] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e5a8) returned 1 [0113.208] MoveFileW (lpExistingFileName="C:\\Windows\\Microsoft.NET\\Framework64\\v4.0.30319\\SetupCache\\v4.6.00081\\1041\\LocalizedData.xml" (normalized: "c:\\windows\\microsoft.net\\framework64\\v4.0.30319\\setupcache\\v4.6.00081\\1041\\localizeddata.xml"), lpNewFileName="C:\\Windows\\Microsoft.NET\\Framework64\\v4.0.30319\\SetupCache\\v4.6.00081\\1041\\LocalizedData.xml" (normalized: "c:\\windows\\microsoft.net\\framework64\\v4.0.30319\\setupcache\\v4.6.00081\\1041\\localizeddata.xml")) returned 1 [0113.208] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e654) returned 1 [0113.208] GetFullPathNameW (in: lpFileName="C:\\Windows\\Microsoft.NET\\Framework64\\v4.0.30319\\SetupCache\\v4.6.00081\\1042", nBufferLength=0x105, lpBuffer=0x31e15c, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\Microsoft.NET\\Framework64\\v4.0.30319\\SetupCache\\v4.6.00081\\1042", lpFilePart=0x0) returned 0x4a [0113.208] GetFullPathNameW (in: lpFileName="C:\\Windows\\Microsoft.NET\\Framework64\\v4.0.30319\\SetupCache\\v4.6.00081\\1042\\", nBufferLength=0x105, lpBuffer=0x31e130, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\Microsoft.NET\\Framework64\\v4.0.30319\\SetupCache\\v4.6.00081\\1042\\", lpFilePart=0x0) returned 0x4b [0113.208] FindFirstFileW (in: lpFileName="C:\\Windows\\Microsoft.NET\\Framework64\\v4.0.30319\\SetupCache\\v4.6.00081\\1042\\*", lpFindFileData=0x31e37c | out: lpFindFileData=0x31e37c*(dwFileAttributes=0x810, ftCreationTime.dwLowDateTime=0x5922fbc0, ftCreationTime.dwHighDateTime=0x1d2e676, ftLastAccessTime.dwLowDateTime=0x5d5487e0, ftLastAccessTime.dwHighDateTime=0x1d2e676, ftLastWriteTime.dwLowDateTime=0x5d5487e0, ftLastWriteTime.dwHighDateTime=0x1d2e676, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x381b80 [0113.209] FindNextFileW (in: hFindFile=0x381b80, lpFindFileData=0x31e38c | out: lpFindFileData=0x31e38c*(dwFileAttributes=0x810, ftCreationTime.dwLowDateTime=0x5922fbc0, ftCreationTime.dwHighDateTime=0x1d2e676, ftLastAccessTime.dwLowDateTime=0x5d5487e0, ftLastAccessTime.dwHighDateTime=0x1d2e676, ftLastWriteTime.dwLowDateTime=0x5d5487e0, ftLastWriteTime.dwHighDateTime=0x1d2e676, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0113.209] FindNextFileW (in: hFindFile=0x381b80, lpFindFileData=0x31e38c | out: lpFindFileData=0x31e38c*(dwFileAttributes=0x820, ftCreationTime.dwLowDateTime=0xcd7cbf00, ftCreationTime.dwHighDateTime=0x1d09f02, ftLastAccessTime.dwLowDateTime=0x5922fbc0, ftLastAccessTime.dwHighDateTime=0x1d2e676, ftLastWriteTime.dwLowDateTime=0xcd7cbf00, ftLastWriteTime.dwHighDateTime=0x1d09f02, nFileSizeHigh=0x0, nFileSizeLow=0x3f568, dwReserved0=0x0, dwReserved1=0x0, cFileName="eula.rtf", cAlternateFileName="")) returned 1 [0113.209] FindNextFileW (in: hFindFile=0x381b80, lpFindFileData=0x31e38c | out: lpFindFileData=0x31e38c*(dwFileAttributes=0x820, ftCreationTime.dwLowDateTime=0x29ab2a00, ftCreationTime.dwHighDateTime=0x1d0ab24, ftLastAccessTime.dwLowDateTime=0x5d5487e0, ftLastAccessTime.dwHighDateTime=0x1d2e676, ftLastWriteTime.dwLowDateTime=0x29ab2a00, ftLastWriteTime.dwHighDateTime=0x1d0ab24, nFileSizeHigh=0x0, nFileSizeLow=0x117a2, dwReserved0=0x0, dwReserved1=0x0, cFileName="LocalizedData.xml", cAlternateFileName="LOCALI~1.XML")) returned 1 [0113.209] FindNextFileW (in: hFindFile=0x381b80, lpFindFileData=0x31e38c | out: lpFindFileData=0x31e38c*(dwFileAttributes=0x820, ftCreationTime.dwLowDateTime=0x852ae700, ftCreationTime.dwHighDateTime=0x1d0ab27, ftLastAccessTime.dwLowDateTime=0x5d4fc520, ftLastAccessTime.dwHighDateTime=0x1d2e676, ftLastWriteTime.dwLowDateTime=0x852ae700, ftLastWriteTime.dwHighDateTime=0x1d0ab27, nFileSizeHigh=0x0, nFileSizeLow=0x6758, dwReserved0=0x0, dwReserved1=0x0, cFileName="SetupResources.dll", cAlternateFileName="SETUPR~1.DLL")) returned 1 [0113.209] FindNextFileW (in: hFindFile=0x381b80, lpFindFileData=0x31e38c | out: lpFindFileData=0x31e38c*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0113.210] FindClose (in: hFindFile=0x381b80 | out: hFindFile=0x381b80) returned 1 [0113.210] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e614) returned 1 [0113.210] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e620) returned 1 [0113.210] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e654) returned 1 [0113.210] GetFullPathNameW (in: lpFileName="C:\\Windows\\Microsoft.NET\\Framework64\\v4.0.30319\\SetupCache\\v4.6.00081\\1042", nBufferLength=0x105, lpBuffer=0x31e15c, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\Microsoft.NET\\Framework64\\v4.0.30319\\SetupCache\\v4.6.00081\\1042", lpFilePart=0x0) returned 0x4a [0113.210] GetFullPathNameW (in: lpFileName="C:\\Windows\\Microsoft.NET\\Framework64\\v4.0.30319\\SetupCache\\v4.6.00081\\1042\\", nBufferLength=0x105, lpBuffer=0x31e130, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\Microsoft.NET\\Framework64\\v4.0.30319\\SetupCache\\v4.6.00081\\1042\\", lpFilePart=0x0) returned 0x4b [0113.210] FindFirstFileW (in: lpFileName="C:\\Windows\\Microsoft.NET\\Framework64\\v4.0.30319\\SetupCache\\v4.6.00081\\1042\\*", lpFindFileData=0x31e37c | out: lpFindFileData=0x31e37c*(dwFileAttributes=0x810, ftCreationTime.dwLowDateTime=0x5922fbc0, ftCreationTime.dwHighDateTime=0x1d2e676, ftLastAccessTime.dwLowDateTime=0x5d5487e0, ftLastAccessTime.dwHighDateTime=0x1d2e676, ftLastWriteTime.dwLowDateTime=0x5d5487e0, ftLastWriteTime.dwHighDateTime=0x1d2e676, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x381b80 [0113.210] FindNextFileW (in: hFindFile=0x381b80, lpFindFileData=0x31e38c | out: lpFindFileData=0x31e38c*(dwFileAttributes=0x810, ftCreationTime.dwLowDateTime=0x5922fbc0, ftCreationTime.dwHighDateTime=0x1d2e676, ftLastAccessTime.dwLowDateTime=0x5d5487e0, ftLastAccessTime.dwHighDateTime=0x1d2e676, ftLastWriteTime.dwLowDateTime=0x5d5487e0, ftLastWriteTime.dwHighDateTime=0x1d2e676, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0113.210] FindNextFileW (in: hFindFile=0x381b80, lpFindFileData=0x31e38c | out: lpFindFileData=0x31e38c*(dwFileAttributes=0x820, ftCreationTime.dwLowDateTime=0xcd7cbf00, ftCreationTime.dwHighDateTime=0x1d09f02, ftLastAccessTime.dwLowDateTime=0x5922fbc0, ftLastAccessTime.dwHighDateTime=0x1d2e676, ftLastWriteTime.dwLowDateTime=0xcd7cbf00, ftLastWriteTime.dwHighDateTime=0x1d09f02, nFileSizeHigh=0x0, nFileSizeLow=0x3f568, dwReserved0=0x0, dwReserved1=0x0, cFileName="eula.rtf", cAlternateFileName="")) returned 1 [0113.210] FindNextFileW (in: hFindFile=0x381b80, lpFindFileData=0x31e38c | out: lpFindFileData=0x31e38c*(dwFileAttributes=0x820, ftCreationTime.dwLowDateTime=0x29ab2a00, ftCreationTime.dwHighDateTime=0x1d0ab24, ftLastAccessTime.dwLowDateTime=0x5d5487e0, ftLastAccessTime.dwHighDateTime=0x1d2e676, ftLastWriteTime.dwLowDateTime=0x29ab2a00, ftLastWriteTime.dwHighDateTime=0x1d0ab24, nFileSizeHigh=0x0, nFileSizeLow=0x117a2, dwReserved0=0x0, dwReserved1=0x0, cFileName="LocalizedData.xml", cAlternateFileName="LOCALI~1.XML")) returned 1 [0113.210] FindNextFileW (in: hFindFile=0x381b80, lpFindFileData=0x31e38c | out: lpFindFileData=0x31e38c*(dwFileAttributes=0x820, ftCreationTime.dwLowDateTime=0x852ae700, ftCreationTime.dwHighDateTime=0x1d0ab27, ftLastAccessTime.dwLowDateTime=0x5d4fc520, ftLastAccessTime.dwHighDateTime=0x1d2e676, ftLastWriteTime.dwLowDateTime=0x852ae700, ftLastWriteTime.dwHighDateTime=0x1d0ab27, nFileSizeHigh=0x0, nFileSizeLow=0x6758, dwReserved0=0x0, dwReserved1=0x0, cFileName="SetupResources.dll", cAlternateFileName="SETUPR~1.DLL")) returned 1 [0113.211] FindNextFileW (in: hFindFile=0x381b80, lpFindFileData=0x31e38c | out: lpFindFileData=0x31e38c*(dwFileAttributes=0x820, ftCreationTime.dwLowDateTime=0x852ae700, ftCreationTime.dwHighDateTime=0x1d0ab27, ftLastAccessTime.dwLowDateTime=0x5d4fc520, ftLastAccessTime.dwHighDateTime=0x1d2e676, ftLastWriteTime.dwLowDateTime=0x852ae700, ftLastWriteTime.dwHighDateTime=0x1d0ab27, nFileSizeHigh=0x0, nFileSizeLow=0x6758, dwReserved0=0x0, dwReserved1=0x0, cFileName="SetupResources.dll", cAlternateFileName="SETUPR~1.DLL")) returned 0 [0113.211] FindClose (in: hFindFile=0x381b80 | out: hFindFile=0x381b80) returned 1 [0113.211] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e614) returned 1 [0113.211] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e620) returned 1 [0113.211] GetFullPathNameW (in: lpFileName="C:\\Windows\\Microsoft.NET\\Framework64\\v4.0.30319\\SetupCache\\v4.6.00081\\1042\\eula.rtf", nBufferLength=0x105, lpBuffer=0x31e02c, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\Microsoft.NET\\Framework64\\v4.0.30319\\SetupCache\\v4.6.00081\\1042\\eula.rtf", lpFilePart=0x0) returned 0x53 [0113.211] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e520) returned 1 [0113.211] CreateFileW (lpFileName="C:\\Windows\\Microsoft.NET\\Framework64\\v4.0.30319\\SetupCache\\v4.6.00081\\1042\\eula.rtf" (normalized: "c:\\windows\\microsoft.net\\framework64\\v4.0.30319\\setupcache\\v4.6.00081\\1042\\eula.rtf"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x178 [0113.211] GetFileType (hFile=0x178) returned 0x1 [0113.211] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e51c) returned 1 [0113.211] GetFileType (hFile=0x178) returned 0x1 [0113.211] GetFileSize (in: hFile=0x178, lpFileSizeHigh=0x31e628 | out: lpFileSizeHigh=0x31e628*=0x0) returned 0x3f568 [0113.213] ReadFile (in: hFile=0x178, lpBuffer=0x6c9ddc8, nNumberOfBytesToRead=0x3f568, lpNumberOfBytesRead=0x31e5d4, lpOverlapped=0x0 | out: lpBuffer=0x6c9ddc8*, lpNumberOfBytesRead=0x31e5d4*=0x3f568, lpOverlapped=0x0) returned 1 [0113.227] CloseHandle (hObject=0x178) returned 1 [0113.251] GetFullPathNameW (in: lpFileName="C:\\Windows\\Microsoft.NET\\Framework64\\v4.0.30319\\SetupCache\\v4.6.00081\\1042\\eula.rtf", nBufferLength=0x105, lpBuffer=0x31e018, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\Microsoft.NET\\Framework64\\v4.0.30319\\SetupCache\\v4.6.00081\\1042\\eula.rtf", lpFilePart=0x0) returned 0x53 [0113.251] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e50c) returned 1 [0113.251] CreateFileW (lpFileName="C:\\Windows\\Microsoft.NET\\Framework64\\v4.0.30319\\SetupCache\\v4.6.00081\\1042\\eula.rtf" (normalized: "c:\\windows\\microsoft.net\\framework64\\v4.0.30319\\setupcache\\v4.6.00081\\1042\\eula.rtf"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x178 [0113.254] GetFileType (hFile=0x178) returned 0x1 [0113.254] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e508) returned 1 [0113.254] GetFileType (hFile=0x178) returned 0x1 [0113.254] WriteFile (in: hFile=0x178, lpBuffer=0x6dda930*, nNumberOfBytesToWrite=0x3f570, lpNumberOfBytesWritten=0x31e5c8, lpOverlapped=0x0 | out: lpBuffer=0x6dda930*, lpNumberOfBytesWritten=0x31e5c8*=0x3f570, lpOverlapped=0x0) returned 1 [0113.258] CloseHandle (hObject=0x178) returned 1 [0113.258] GetFullPathNameW (in: lpFileName="C:\\Windows\\Microsoft.NET\\Framework64\\v4.0.30319\\SetupCache\\v4.6.00081\\1042\\eula.rtf", nBufferLength=0x105, lpBuffer=0x31e14c, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\Microsoft.NET\\Framework64\\v4.0.30319\\SetupCache\\v4.6.00081\\1042\\eula.rtf", lpFilePart=0x0) returned 0x53 [0113.258] GetFullPathNameW (in: lpFileName="C:\\Windows\\Microsoft.NET\\Framework64\\v4.0.30319\\SetupCache\\v4.6.00081\\1042\\eula.rtf", nBufferLength=0x105, lpBuffer=0x31e14c, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\Microsoft.NET\\Framework64\\v4.0.30319\\SetupCache\\v4.6.00081\\1042\\eula.rtf", lpFilePart=0x0) returned 0x53 [0113.258] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e5ac) returned 1 [0113.258] GetFileAttributesExW (in: lpFileName="C:\\Windows\\Microsoft.NET\\Framework64\\v4.0.30319\\SetupCache\\v4.6.00081\\1042\\eula.rtf" (normalized: "c:\\windows\\microsoft.net\\framework64\\v4.0.30319\\setupcache\\v4.6.00081\\1042\\eula.rtf"), fInfoLevelId=0x0, lpFileInformation=0x31e628 | out: lpFileInformation=0x31e628*(dwFileAttributes=0x820, ftCreationTime.dwLowDateTime=0xcd7cbf00, ftCreationTime.dwHighDateTime=0x1d09f02, ftLastAccessTime.dwLowDateTime=0x5922fbc0, ftLastAccessTime.dwHighDateTime=0x1d2e676, ftLastWriteTime.dwLowDateTime=0x26f1c0c0, ftLastWriteTime.dwHighDateTime=0x1d6eb7f, nFileSizeHigh=0x0, nFileSizeLow=0x3f570)) returned 1 [0113.258] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e5a8) returned 1 [0113.258] MoveFileW (lpExistingFileName="C:\\Windows\\Microsoft.NET\\Framework64\\v4.0.30319\\SetupCache\\v4.6.00081\\1042\\eula.rtf" (normalized: "c:\\windows\\microsoft.net\\framework64\\v4.0.30319\\setupcache\\v4.6.00081\\1042\\eula.rtf"), lpNewFileName="C:\\Windows\\Microsoft.NET\\Framework64\\v4.0.30319\\SetupCache\\v4.6.00081\\1042\\eula.rtf" (normalized: "c:\\windows\\microsoft.net\\framework64\\v4.0.30319\\setupcache\\v4.6.00081\\1042\\eula.rtf")) returned 1 [0113.259] GetFullPathNameW (in: lpFileName="C:\\Windows\\Microsoft.NET\\Framework64\\v4.0.30319\\SetupCache\\v4.6.00081\\1042\\LocalizedData.xml", nBufferLength=0x105, lpBuffer=0x31e02c, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\Microsoft.NET\\Framework64\\v4.0.30319\\SetupCache\\v4.6.00081\\1042\\LocalizedData.xml", lpFilePart=0x0) returned 0x5c [0113.259] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e520) returned 1 [0113.259] CreateFileW (lpFileName="C:\\Windows\\Microsoft.NET\\Framework64\\v4.0.30319\\SetupCache\\v4.6.00081\\1042\\LocalizedData.xml" (normalized: "c:\\windows\\microsoft.net\\framework64\\v4.0.30319\\setupcache\\v4.6.00081\\1042\\localizeddata.xml"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x178 [0113.259] GetFileType (hFile=0x178) returned 0x1 [0113.259] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e51c) returned 1 [0113.259] GetFileType (hFile=0x178) returned 0x1 [0113.259] GetFileSize (in: hFile=0x178, lpFileSizeHigh=0x31e628 | out: lpFileSizeHigh=0x31e628*=0x0) returned 0x117a2 [0113.260] ReadFile (in: hFile=0x178, lpBuffer=0x28755c8, nNumberOfBytesToRead=0x117a2, lpNumberOfBytesRead=0x31e5d4, lpOverlapped=0x0 | out: lpBuffer=0x28755c8*, lpNumberOfBytesRead=0x31e5d4*=0x117a2, lpOverlapped=0x0) returned 1 [0113.262] CloseHandle (hObject=0x178) returned 1 [0113.298] GetFullPathNameW (in: lpFileName="C:\\Windows\\Microsoft.NET\\Framework64\\v4.0.30319\\SetupCache\\v4.6.00081\\1042\\LocalizedData.xml", nBufferLength=0x105, lpBuffer=0x31e018, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\Microsoft.NET\\Framework64\\v4.0.30319\\SetupCache\\v4.6.00081\\1042\\LocalizedData.xml", lpFilePart=0x0) returned 0x5c [0113.298] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e50c) returned 1 [0113.298] CreateFileW (lpFileName="C:\\Windows\\Microsoft.NET\\Framework64\\v4.0.30319\\SetupCache\\v4.6.00081\\1042\\LocalizedData.xml" (normalized: "c:\\windows\\microsoft.net\\framework64\\v4.0.30319\\setupcache\\v4.6.00081\\1042\\localizeddata.xml"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x178 [0113.300] GetFileType (hFile=0x178) returned 0x1 [0113.300] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e508) returned 1 [0113.300] GetFileType (hFile=0x178) returned 0x1 [0113.300] WriteFile (in: hFile=0x178, lpBuffer=0x28f6ad4*, nNumberOfBytesToWrite=0x117b0, lpNumberOfBytesWritten=0x31e5c8, lpOverlapped=0x0 | out: lpBuffer=0x28f6ad4*, lpNumberOfBytesWritten=0x31e5c8*=0x117b0, lpOverlapped=0x0) returned 1 [0113.301] CloseHandle (hObject=0x178) returned 1 [0113.301] GetFullPathNameW (in: lpFileName="C:\\Windows\\Microsoft.NET\\Framework64\\v4.0.30319\\SetupCache\\v4.6.00081\\1042\\LocalizedData.xml", nBufferLength=0x105, lpBuffer=0x31e14c, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\Microsoft.NET\\Framework64\\v4.0.30319\\SetupCache\\v4.6.00081\\1042\\LocalizedData.xml", lpFilePart=0x0) returned 0x5c [0113.301] GetFullPathNameW (in: lpFileName="C:\\Windows\\Microsoft.NET\\Framework64\\v4.0.30319\\SetupCache\\v4.6.00081\\1042\\LocalizedData.xml", nBufferLength=0x105, lpBuffer=0x31e14c, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\Microsoft.NET\\Framework64\\v4.0.30319\\SetupCache\\v4.6.00081\\1042\\LocalizedData.xml", lpFilePart=0x0) returned 0x5c [0113.302] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e5ac) returned 1 [0113.302] GetFileAttributesExW (in: lpFileName="C:\\Windows\\Microsoft.NET\\Framework64\\v4.0.30319\\SetupCache\\v4.6.00081\\1042\\LocalizedData.xml" (normalized: "c:\\windows\\microsoft.net\\framework64\\v4.0.30319\\setupcache\\v4.6.00081\\1042\\localizeddata.xml"), fInfoLevelId=0x0, lpFileInformation=0x31e628 | out: lpFileInformation=0x31e628*(dwFileAttributes=0x820, ftCreationTime.dwLowDateTime=0x29ab2a00, ftCreationTime.dwHighDateTime=0x1d0ab24, ftLastAccessTime.dwLowDateTime=0x5d5487e0, ftLastAccessTime.dwHighDateTime=0x1d2e676, ftLastWriteTime.dwLowDateTime=0x26f68380, ftLastWriteTime.dwHighDateTime=0x1d6eb7f, nFileSizeHigh=0x0, nFileSizeLow=0x117b0)) returned 1 [0113.302] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e5a8) returned 1 [0113.302] MoveFileW (lpExistingFileName="C:\\Windows\\Microsoft.NET\\Framework64\\v4.0.30319\\SetupCache\\v4.6.00081\\1042\\LocalizedData.xml" (normalized: "c:\\windows\\microsoft.net\\framework64\\v4.0.30319\\setupcache\\v4.6.00081\\1042\\localizeddata.xml"), lpNewFileName="C:\\Windows\\Microsoft.NET\\Framework64\\v4.0.30319\\SetupCache\\v4.6.00081\\1042\\LocalizedData.xml" (normalized: "c:\\windows\\microsoft.net\\framework64\\v4.0.30319\\setupcache\\v4.6.00081\\1042\\localizeddata.xml")) returned 1 [0113.302] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e654) returned 1 [0113.302] GetFullPathNameW (in: lpFileName="C:\\Windows\\Microsoft.NET\\Framework64\\v4.0.30319\\SetupCache\\v4.6.00081\\1043", nBufferLength=0x105, lpBuffer=0x31e15c, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\Microsoft.NET\\Framework64\\v4.0.30319\\SetupCache\\v4.6.00081\\1043", lpFilePart=0x0) returned 0x4a [0113.302] GetFullPathNameW (in: lpFileName="C:\\Windows\\Microsoft.NET\\Framework64\\v4.0.30319\\SetupCache\\v4.6.00081\\1043\\", nBufferLength=0x105, lpBuffer=0x31e130, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\Microsoft.NET\\Framework64\\v4.0.30319\\SetupCache\\v4.6.00081\\1043\\", lpFilePart=0x0) returned 0x4b [0113.302] FindFirstFileW (in: lpFileName="C:\\Windows\\Microsoft.NET\\Framework64\\v4.0.30319\\SetupCache\\v4.6.00081\\1043\\*", lpFindFileData=0x31e37c | out: lpFindFileData=0x31e37c*(dwFileAttributes=0x810, ftCreationTime.dwLowDateTime=0x5922fbc0, ftCreationTime.dwHighDateTime=0x1d2e676, ftLastAccessTime.dwLowDateTime=0x5d5487e0, ftLastAccessTime.dwHighDateTime=0x1d2e676, ftLastWriteTime.dwLowDateTime=0x5d5487e0, ftLastWriteTime.dwHighDateTime=0x1d2e676, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x381e80 [0113.303] FindNextFileW (in: hFindFile=0x381e80, lpFindFileData=0x31e38c | out: lpFindFileData=0x31e38c*(dwFileAttributes=0x810, ftCreationTime.dwLowDateTime=0x5922fbc0, ftCreationTime.dwHighDateTime=0x1d2e676, ftLastAccessTime.dwLowDateTime=0x5d5487e0, ftLastAccessTime.dwHighDateTime=0x1d2e676, ftLastWriteTime.dwLowDateTime=0x5d5487e0, ftLastWriteTime.dwHighDateTime=0x1d2e676, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0113.303] FindNextFileW (in: hFindFile=0x381e80, lpFindFileData=0x31e38c | out: lpFindFileData=0x31e38c*(dwFileAttributes=0x820, ftCreationTime.dwLowDateTime=0xcd7cbf00, ftCreationTime.dwHighDateTime=0x1d09f02, ftLastAccessTime.dwLowDateTime=0x5922fbc0, ftLastAccessTime.dwHighDateTime=0x1d2e676, ftLastWriteTime.dwLowDateTime=0xcd7cbf00, ftLastWriteTime.dwHighDateTime=0x1d09f02, nFileSizeHigh=0x0, nFileSizeLow=0x21a54, dwReserved0=0x0, dwReserved1=0x0, cFileName="eula.rtf", cAlternateFileName="")) returned 1 [0113.303] FindNextFileW (in: hFindFile=0x381e80, lpFindFileData=0x31e38c | out: lpFindFileData=0x31e38c*(dwFileAttributes=0x820, ftCreationTime.dwLowDateTime=0x29ab2a00, ftCreationTime.dwHighDateTime=0x1d0ab24, ftLastAccessTime.dwLowDateTime=0x5d5487e0, ftLastAccessTime.dwHighDateTime=0x1d2e676, ftLastWriteTime.dwLowDateTime=0x29ab2a00, ftLastWriteTime.dwHighDateTime=0x1d0ab24, nFileSizeHigh=0x0, nFileSizeLow=0x14552, dwReserved0=0x0, dwReserved1=0x0, cFileName="LocalizedData.xml", cAlternateFileName="LOCALI~1.XML")) returned 1 [0113.303] FindNextFileW (in: hFindFile=0x381e80, lpFindFileData=0x31e38c | out: lpFindFileData=0x31e38c*(dwFileAttributes=0x820, ftCreationTime.dwLowDateTime=0x852ae700, ftCreationTime.dwHighDateTime=0x1d0ab27, ftLastAccessTime.dwLowDateTime=0x5d4fc520, ftLastAccessTime.dwHighDateTime=0x1d2e676, ftLastWriteTime.dwLowDateTime=0x852ae700, ftLastWriteTime.dwHighDateTime=0x1d0ab27, nFileSizeHigh=0x0, nFileSizeLow=0x7958, dwReserved0=0x0, dwReserved1=0x0, cFileName="SetupResources.dll", cAlternateFileName="SETUPR~1.DLL")) returned 1 [0113.303] FindNextFileW (in: hFindFile=0x381e80, lpFindFileData=0x31e38c | out: lpFindFileData=0x31e38c*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0113.303] FindClose (in: hFindFile=0x381e80 | out: hFindFile=0x381e80) returned 1 [0113.303] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e614) returned 1 [0113.303] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e620) returned 1 [0113.304] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e654) returned 1 [0113.304] GetFullPathNameW (in: lpFileName="C:\\Windows\\Microsoft.NET\\Framework64\\v4.0.30319\\SetupCache\\v4.6.00081\\1043", nBufferLength=0x105, lpBuffer=0x31e15c, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\Microsoft.NET\\Framework64\\v4.0.30319\\SetupCache\\v4.6.00081\\1043", lpFilePart=0x0) returned 0x4a [0113.304] GetFullPathNameW (in: lpFileName="C:\\Windows\\Microsoft.NET\\Framework64\\v4.0.30319\\SetupCache\\v4.6.00081\\1043\\", nBufferLength=0x105, lpBuffer=0x31e130, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\Microsoft.NET\\Framework64\\v4.0.30319\\SetupCache\\v4.6.00081\\1043\\", lpFilePart=0x0) returned 0x4b [0113.304] FindFirstFileW (in: lpFileName="C:\\Windows\\Microsoft.NET\\Framework64\\v4.0.30319\\SetupCache\\v4.6.00081\\1043\\*", lpFindFileData=0x31e37c | out: lpFindFileData=0x31e37c*(dwFileAttributes=0x810, ftCreationTime.dwLowDateTime=0x5922fbc0, ftCreationTime.dwHighDateTime=0x1d2e676, ftLastAccessTime.dwLowDateTime=0x5d5487e0, ftLastAccessTime.dwHighDateTime=0x1d2e676, ftLastWriteTime.dwLowDateTime=0x5d5487e0, ftLastWriteTime.dwHighDateTime=0x1d2e676, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x381e80 [0113.304] FindNextFileW (in: hFindFile=0x381e80, lpFindFileData=0x31e38c | out: lpFindFileData=0x31e38c*(dwFileAttributes=0x810, ftCreationTime.dwLowDateTime=0x5922fbc0, ftCreationTime.dwHighDateTime=0x1d2e676, ftLastAccessTime.dwLowDateTime=0x5d5487e0, ftLastAccessTime.dwHighDateTime=0x1d2e676, ftLastWriteTime.dwLowDateTime=0x5d5487e0, ftLastWriteTime.dwHighDateTime=0x1d2e676, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0113.304] FindNextFileW (in: hFindFile=0x381e80, lpFindFileData=0x31e38c | out: lpFindFileData=0x31e38c*(dwFileAttributes=0x820, ftCreationTime.dwLowDateTime=0xcd7cbf00, ftCreationTime.dwHighDateTime=0x1d09f02, ftLastAccessTime.dwLowDateTime=0x5922fbc0, ftLastAccessTime.dwHighDateTime=0x1d2e676, ftLastWriteTime.dwLowDateTime=0xcd7cbf00, ftLastWriteTime.dwHighDateTime=0x1d09f02, nFileSizeHigh=0x0, nFileSizeLow=0x21a54, dwReserved0=0x0, dwReserved1=0x0, cFileName="eula.rtf", cAlternateFileName="")) returned 1 [0113.304] FindNextFileW (in: hFindFile=0x381e80, lpFindFileData=0x31e38c | out: lpFindFileData=0x31e38c*(dwFileAttributes=0x820, ftCreationTime.dwLowDateTime=0x29ab2a00, ftCreationTime.dwHighDateTime=0x1d0ab24, ftLastAccessTime.dwLowDateTime=0x5d5487e0, ftLastAccessTime.dwHighDateTime=0x1d2e676, ftLastWriteTime.dwLowDateTime=0x29ab2a00, ftLastWriteTime.dwHighDateTime=0x1d0ab24, nFileSizeHigh=0x0, nFileSizeLow=0x14552, dwReserved0=0x0, dwReserved1=0x0, cFileName="LocalizedData.xml", cAlternateFileName="LOCALI~1.XML")) returned 1 [0113.304] FindNextFileW (in: hFindFile=0x381e80, lpFindFileData=0x31e38c | out: lpFindFileData=0x31e38c*(dwFileAttributes=0x820, ftCreationTime.dwLowDateTime=0x852ae700, ftCreationTime.dwHighDateTime=0x1d0ab27, ftLastAccessTime.dwLowDateTime=0x5d4fc520, ftLastAccessTime.dwHighDateTime=0x1d2e676, ftLastWriteTime.dwLowDateTime=0x852ae700, ftLastWriteTime.dwHighDateTime=0x1d0ab27, nFileSizeHigh=0x0, nFileSizeLow=0x7958, dwReserved0=0x0, dwReserved1=0x0, cFileName="SetupResources.dll", cAlternateFileName="SETUPR~1.DLL")) returned 1 [0113.304] FindNextFileW (in: hFindFile=0x381e80, lpFindFileData=0x31e38c | out: lpFindFileData=0x31e38c*(dwFileAttributes=0x820, ftCreationTime.dwLowDateTime=0x852ae700, ftCreationTime.dwHighDateTime=0x1d0ab27, ftLastAccessTime.dwLowDateTime=0x5d4fc520, ftLastAccessTime.dwHighDateTime=0x1d2e676, ftLastWriteTime.dwLowDateTime=0x852ae700, ftLastWriteTime.dwHighDateTime=0x1d0ab27, nFileSizeHigh=0x0, nFileSizeLow=0x7958, dwReserved0=0x0, dwReserved1=0x0, cFileName="SetupResources.dll", cAlternateFileName="SETUPR~1.DLL")) returned 0 [0113.305] FindClose (in: hFindFile=0x381e80 | out: hFindFile=0x381e80) returned 1 [0113.305] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e614) returned 1 [0113.305] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e620) returned 1 [0113.305] GetFullPathNameW (in: lpFileName="C:\\Windows\\Microsoft.NET\\Framework64\\v4.0.30319\\SetupCache\\v4.6.00081\\1043\\eula.rtf", nBufferLength=0x105, lpBuffer=0x31e02c, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\Microsoft.NET\\Framework64\\v4.0.30319\\SetupCache\\v4.6.00081\\1043\\eula.rtf", lpFilePart=0x0) returned 0x53 [0113.305] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e520) returned 1 [0113.305] CreateFileW (lpFileName="C:\\Windows\\Microsoft.NET\\Framework64\\v4.0.30319\\SetupCache\\v4.6.00081\\1043\\eula.rtf" (normalized: "c:\\windows\\microsoft.net\\framework64\\v4.0.30319\\setupcache\\v4.6.00081\\1043\\eula.rtf"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x178 [0113.306] GetFileType (hFile=0x178) returned 0x1 [0113.306] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e51c) returned 1 [0113.306] GetFileType (hFile=0x178) returned 0x1 [0113.306] GetFileSize (in: hFile=0x178, lpFileSizeHigh=0x31e628 | out: lpFileSizeHigh=0x31e628*=0x0) returned 0x21a54 [0113.307] ReadFile (in: hFile=0x178, lpBuffer=0x6e3ce20, nNumberOfBytesToRead=0x21a54, lpNumberOfBytesRead=0x31e5d4, lpOverlapped=0x0 | out: lpBuffer=0x6e3ce20*, lpNumberOfBytesRead=0x31e5d4*=0x21a54, lpOverlapped=0x0) returned 1 [0113.310] CloseHandle (hObject=0x178) returned 1 [0113.411] GetFullPathNameW (in: lpFileName="C:\\Windows\\Microsoft.NET\\Framework64\\v4.0.30319\\SetupCache\\v4.6.00081\\1043\\eula.rtf", nBufferLength=0x105, lpBuffer=0x31e018, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\Microsoft.NET\\Framework64\\v4.0.30319\\SetupCache\\v4.6.00081\\1043\\eula.rtf", lpFilePart=0x0) returned 0x53 [0113.411] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e50c) returned 1 [0113.411] CreateFileW (lpFileName="C:\\Windows\\Microsoft.NET\\Framework64\\v4.0.30319\\SetupCache\\v4.6.00081\\1043\\eula.rtf" (normalized: "c:\\windows\\microsoft.net\\framework64\\v4.0.30319\\setupcache\\v4.6.00081\\1043\\eula.rtf"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x178 [0113.413] GetFileType (hFile=0x178) returned 0x1 [0113.413] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e508) returned 1 [0113.413] GetFileType (hFile=0x178) returned 0x1 [0113.414] WriteFile (in: hFile=0x178, lpBuffer=0x6c179b8*, nNumberOfBytesToWrite=0x21a60, lpNumberOfBytesWritten=0x31e5c8, lpOverlapped=0x0 | out: lpBuffer=0x6c179b8*, lpNumberOfBytesWritten=0x31e5c8*=0x21a60, lpOverlapped=0x0) returned 1 [0113.416] CloseHandle (hObject=0x178) returned 1 [0113.416] GetFullPathNameW (in: lpFileName="C:\\Windows\\Microsoft.NET\\Framework64\\v4.0.30319\\SetupCache\\v4.6.00081\\1043\\eula.rtf", nBufferLength=0x105, lpBuffer=0x31e14c, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\Microsoft.NET\\Framework64\\v4.0.30319\\SetupCache\\v4.6.00081\\1043\\eula.rtf", lpFilePart=0x0) returned 0x53 [0113.416] GetFullPathNameW (in: lpFileName="C:\\Windows\\Microsoft.NET\\Framework64\\v4.0.30319\\SetupCache\\v4.6.00081\\1043\\eula.rtf", nBufferLength=0x105, lpBuffer=0x31e14c, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\Microsoft.NET\\Framework64\\v4.0.30319\\SetupCache\\v4.6.00081\\1043\\eula.rtf", lpFilePart=0x0) returned 0x53 [0113.416] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e5ac) returned 1 [0113.416] GetFileAttributesExW (in: lpFileName="C:\\Windows\\Microsoft.NET\\Framework64\\v4.0.30319\\SetupCache\\v4.6.00081\\1043\\eula.rtf" (normalized: "c:\\windows\\microsoft.net\\framework64\\v4.0.30319\\setupcache\\v4.6.00081\\1043\\eula.rtf"), fInfoLevelId=0x0, lpFileInformation=0x31e628 | out: lpFileInformation=0x31e628*(dwFileAttributes=0x820, ftCreationTime.dwLowDateTime=0xcd7cbf00, ftCreationTime.dwHighDateTime=0x1d09f02, ftLastAccessTime.dwLowDateTime=0x5922fbc0, ftLastAccessTime.dwHighDateTime=0x1d2e676, ftLastWriteTime.dwLowDateTime=0x27098e80, ftLastWriteTime.dwHighDateTime=0x1d6eb7f, nFileSizeHigh=0x0, nFileSizeLow=0x21a60)) returned 1 [0113.416] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e5a8) returned 1 [0113.416] MoveFileW (lpExistingFileName="C:\\Windows\\Microsoft.NET\\Framework64\\v4.0.30319\\SetupCache\\v4.6.00081\\1043\\eula.rtf" (normalized: "c:\\windows\\microsoft.net\\framework64\\v4.0.30319\\setupcache\\v4.6.00081\\1043\\eula.rtf"), lpNewFileName="C:\\Windows\\Microsoft.NET\\Framework64\\v4.0.30319\\SetupCache\\v4.6.00081\\1043\\eula.rtf" (normalized: "c:\\windows\\microsoft.net\\framework64\\v4.0.30319\\setupcache\\v4.6.00081\\1043\\eula.rtf")) returned 1 [0113.417] GetFullPathNameW (in: lpFileName="C:\\Windows\\Microsoft.NET\\Framework64\\v4.0.30319\\SetupCache\\v4.6.00081\\1043\\LocalizedData.xml", nBufferLength=0x105, lpBuffer=0x31e02c, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\Microsoft.NET\\Framework64\\v4.0.30319\\SetupCache\\v4.6.00081\\1043\\LocalizedData.xml", lpFilePart=0x0) returned 0x5c [0113.417] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e520) returned 1 [0113.417] CreateFileW (lpFileName="C:\\Windows\\Microsoft.NET\\Framework64\\v4.0.30319\\SetupCache\\v4.6.00081\\1043\\LocalizedData.xml" (normalized: "c:\\windows\\microsoft.net\\framework64\\v4.0.30319\\setupcache\\v4.6.00081\\1043\\localizeddata.xml"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x178 [0113.418] GetFileType (hFile=0x178) returned 0x1 [0113.418] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e51c) returned 1 [0113.418] GetFileType (hFile=0x178) returned 0x1 [0113.418] GetFileSize (in: hFile=0x178, lpFileSizeHigh=0x31e628 | out: lpFileSizeHigh=0x31e628*=0x0) returned 0x14552 [0113.418] ReadFile (in: hFile=0x178, lpBuffer=0x263db60, nNumberOfBytesToRead=0x14552, lpNumberOfBytesRead=0x31e5d4, lpOverlapped=0x0 | out: lpBuffer=0x263db60*, lpNumberOfBytesRead=0x31e5d4*=0x14552, lpOverlapped=0x0) returned 1 [0113.421] CloseHandle (hObject=0x178) returned 1 [0113.437] GetFullPathNameW (in: lpFileName="C:\\Windows\\Microsoft.NET\\Framework64\\v4.0.30319\\SetupCache\\v4.6.00081\\1043\\LocalizedData.xml", nBufferLength=0x105, lpBuffer=0x31e018, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\Microsoft.NET\\Framework64\\v4.0.30319\\SetupCache\\v4.6.00081\\1043\\LocalizedData.xml", lpFilePart=0x0) returned 0x5c [0113.437] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e50c) returned 1 [0113.437] CreateFileW (lpFileName="C:\\Windows\\Microsoft.NET\\Framework64\\v4.0.30319\\SetupCache\\v4.6.00081\\1043\\LocalizedData.xml" (normalized: "c:\\windows\\microsoft.net\\framework64\\v4.0.30319\\setupcache\\v4.6.00081\\1043\\localizeddata.xml"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x178 [0113.438] GetFileType (hFile=0x178) returned 0x1 [0113.438] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e508) returned 1 [0113.438] GetFileType (hFile=0x178) returned 0x1 [0113.438] WriteFile (in: hFile=0x178, lpBuffer=0x26c7ad8*, nNumberOfBytesToWrite=0x14560, lpNumberOfBytesWritten=0x31e5c8, lpOverlapped=0x0 | out: lpBuffer=0x26c7ad8*, lpNumberOfBytesWritten=0x31e5c8*=0x14560, lpOverlapped=0x0) returned 1 [0113.440] CloseHandle (hObject=0x178) returned 1 [0113.440] GetFullPathNameW (in: lpFileName="C:\\Windows\\Microsoft.NET\\Framework64\\v4.0.30319\\SetupCache\\v4.6.00081\\1043\\LocalizedData.xml", nBufferLength=0x105, lpBuffer=0x31e14c, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\Microsoft.NET\\Framework64\\v4.0.30319\\SetupCache\\v4.6.00081\\1043\\LocalizedData.xml", lpFilePart=0x0) returned 0x5c [0113.440] GetFullPathNameW (in: lpFileName="C:\\Windows\\Microsoft.NET\\Framework64\\v4.0.30319\\SetupCache\\v4.6.00081\\1043\\LocalizedData.xml", nBufferLength=0x105, lpBuffer=0x31e14c, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\Microsoft.NET\\Framework64\\v4.0.30319\\SetupCache\\v4.6.00081\\1043\\LocalizedData.xml", lpFilePart=0x0) returned 0x5c [0113.440] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e5ac) returned 1 [0113.440] GetFileAttributesExW (in: lpFileName="C:\\Windows\\Microsoft.NET\\Framework64\\v4.0.30319\\SetupCache\\v4.6.00081\\1043\\LocalizedData.xml" (normalized: "c:\\windows\\microsoft.net\\framework64\\v4.0.30319\\setupcache\\v4.6.00081\\1043\\localizeddata.xml"), fInfoLevelId=0x0, lpFileInformation=0x31e628 | out: lpFileInformation=0x31e628*(dwFileAttributes=0x820, ftCreationTime.dwLowDateTime=0x29ab2a00, ftCreationTime.dwHighDateTime=0x1d0ab24, ftLastAccessTime.dwLowDateTime=0x5d5487e0, ftLastAccessTime.dwHighDateTime=0x1d2e676, ftLastWriteTime.dwLowDateTime=0x270befe0, ftLastWriteTime.dwHighDateTime=0x1d6eb7f, nFileSizeHigh=0x0, nFileSizeLow=0x14560)) returned 1 [0113.440] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e5a8) returned 1 [0113.440] MoveFileW (lpExistingFileName="C:\\Windows\\Microsoft.NET\\Framework64\\v4.0.30319\\SetupCache\\v4.6.00081\\1043\\LocalizedData.xml" (normalized: "c:\\windows\\microsoft.net\\framework64\\v4.0.30319\\setupcache\\v4.6.00081\\1043\\localizeddata.xml"), lpNewFileName="C:\\Windows\\Microsoft.NET\\Framework64\\v4.0.30319\\SetupCache\\v4.6.00081\\1043\\LocalizedData.xml" (normalized: "c:\\windows\\microsoft.net\\framework64\\v4.0.30319\\setupcache\\v4.6.00081\\1043\\localizeddata.xml")) returned 1 [0113.441] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e654) returned 1 [0113.441] GetFullPathNameW (in: lpFileName="C:\\Windows\\Microsoft.NET\\Framework64\\v4.0.30319\\SetupCache\\v4.6.00081\\1044", nBufferLength=0x105, lpBuffer=0x31e15c, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\Microsoft.NET\\Framework64\\v4.0.30319\\SetupCache\\v4.6.00081\\1044", lpFilePart=0x0) returned 0x4a [0113.441] GetFullPathNameW (in: lpFileName="C:\\Windows\\Microsoft.NET\\Framework64\\v4.0.30319\\SetupCache\\v4.6.00081\\1044\\", nBufferLength=0x105, lpBuffer=0x31e130, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\Microsoft.NET\\Framework64\\v4.0.30319\\SetupCache\\v4.6.00081\\1044\\", lpFilePart=0x0) returned 0x4b [0113.441] FindFirstFileW (in: lpFileName="C:\\Windows\\Microsoft.NET\\Framework64\\v4.0.30319\\SetupCache\\v4.6.00081\\1044\\*", lpFindFileData=0x31e37c | out: lpFindFileData=0x31e37c*(dwFileAttributes=0x810, ftCreationTime.dwLowDateTime=0x5922fbc0, ftCreationTime.dwHighDateTime=0x1d2e676, ftLastAccessTime.dwLowDateTime=0x5d5487e0, ftLastAccessTime.dwHighDateTime=0x1d2e676, ftLastWriteTime.dwLowDateTime=0x5d5487e0, ftLastWriteTime.dwHighDateTime=0x1d2e676, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x381e00 [0113.441] FindNextFileW (in: hFindFile=0x381e00, lpFindFileData=0x31e38c | out: lpFindFileData=0x31e38c*(dwFileAttributes=0x810, ftCreationTime.dwLowDateTime=0x5922fbc0, ftCreationTime.dwHighDateTime=0x1d2e676, ftLastAccessTime.dwLowDateTime=0x5d5487e0, ftLastAccessTime.dwHighDateTime=0x1d2e676, ftLastWriteTime.dwLowDateTime=0x5d5487e0, ftLastWriteTime.dwHighDateTime=0x1d2e676, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0113.441] FindNextFileW (in: hFindFile=0x381e00, lpFindFileData=0x31e38c | out: lpFindFileData=0x31e38c*(dwFileAttributes=0x820, ftCreationTime.dwLowDateTime=0xcd7cbf00, ftCreationTime.dwHighDateTime=0x1d09f02, ftLastAccessTime.dwLowDateTime=0x5922fbc0, ftLastAccessTime.dwHighDateTime=0x1d2e676, ftLastWriteTime.dwLowDateTime=0xcd7cbf00, ftLastWriteTime.dwHighDateTime=0x1d09f02, nFileSizeHigh=0x0, nFileSizeLow=0x24398, dwReserved0=0x0, dwReserved1=0x0, cFileName="eula.rtf", cAlternateFileName="")) returned 1 [0113.441] FindNextFileW (in: hFindFile=0x381e00, lpFindFileData=0x31e38c | out: lpFindFileData=0x31e38c*(dwFileAttributes=0x820, ftCreationTime.dwLowDateTime=0x29ab2a00, ftCreationTime.dwHighDateTime=0x1d0ab24, ftLastAccessTime.dwLowDateTime=0x5d5487e0, ftLastAccessTime.dwHighDateTime=0x1d2e676, ftLastWriteTime.dwLowDateTime=0x29ab2a00, ftLastWriteTime.dwHighDateTime=0x1d0ab24, nFileSizeHigh=0x0, nFileSizeLow=0x14376, dwReserved0=0x0, dwReserved1=0x0, cFileName="LocalizedData.xml", cAlternateFileName="LOCALI~1.XML")) returned 1 [0113.442] FindNextFileW (in: hFindFile=0x381e00, lpFindFileData=0x31e38c | out: lpFindFileData=0x31e38c*(dwFileAttributes=0x820, ftCreationTime.dwLowDateTime=0x852ae700, ftCreationTime.dwHighDateTime=0x1d0ab27, ftLastAccessTime.dwLowDateTime=0x5d522680, ftLastAccessTime.dwHighDateTime=0x1d2e676, ftLastWriteTime.dwLowDateTime=0x852ae700, ftLastWriteTime.dwHighDateTime=0x1d0ab27, nFileSizeHigh=0x0, nFileSizeLow=0x7358, dwReserved0=0x0, dwReserved1=0x0, cFileName="SetupResources.dll", cAlternateFileName="SETUPR~1.DLL")) returned 1 [0113.442] FindNextFileW (in: hFindFile=0x381e00, lpFindFileData=0x31e38c | out: lpFindFileData=0x31e38c*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0113.442] FindClose (in: hFindFile=0x381e00 | out: hFindFile=0x381e00) returned 1 [0113.442] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e614) returned 1 [0113.442] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e620) returned 1 [0113.442] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e654) returned 1 [0113.442] GetFullPathNameW (in: lpFileName="C:\\Windows\\Microsoft.NET\\Framework64\\v4.0.30319\\SetupCache\\v4.6.00081\\1044", nBufferLength=0x105, lpBuffer=0x31e15c, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\Microsoft.NET\\Framework64\\v4.0.30319\\SetupCache\\v4.6.00081\\1044", lpFilePart=0x0) returned 0x4a [0113.442] GetFullPathNameW (in: lpFileName="C:\\Windows\\Microsoft.NET\\Framework64\\v4.0.30319\\SetupCache\\v4.6.00081\\1044\\", nBufferLength=0x105, lpBuffer=0x31e130, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\Microsoft.NET\\Framework64\\v4.0.30319\\SetupCache\\v4.6.00081\\1044\\", lpFilePart=0x0) returned 0x4b [0113.442] FindFirstFileW (in: lpFileName="C:\\Windows\\Microsoft.NET\\Framework64\\v4.0.30319\\SetupCache\\v4.6.00081\\1044\\*", lpFindFileData=0x31e37c | out: lpFindFileData=0x31e37c*(dwFileAttributes=0x810, ftCreationTime.dwLowDateTime=0x5922fbc0, ftCreationTime.dwHighDateTime=0x1d2e676, ftLastAccessTime.dwLowDateTime=0x5d5487e0, ftLastAccessTime.dwHighDateTime=0x1d2e676, ftLastWriteTime.dwLowDateTime=0x5d5487e0, ftLastWriteTime.dwHighDateTime=0x1d2e676, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x381e00 [0113.442] FindNextFileW (in: hFindFile=0x381e00, lpFindFileData=0x31e38c | out: lpFindFileData=0x31e38c*(dwFileAttributes=0x810, ftCreationTime.dwLowDateTime=0x5922fbc0, ftCreationTime.dwHighDateTime=0x1d2e676, ftLastAccessTime.dwLowDateTime=0x5d5487e0, ftLastAccessTime.dwHighDateTime=0x1d2e676, ftLastWriteTime.dwLowDateTime=0x5d5487e0, ftLastWriteTime.dwHighDateTime=0x1d2e676, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0113.442] FindNextFileW (in: hFindFile=0x381e00, lpFindFileData=0x31e38c | out: lpFindFileData=0x31e38c*(dwFileAttributes=0x820, ftCreationTime.dwLowDateTime=0xcd7cbf00, ftCreationTime.dwHighDateTime=0x1d09f02, ftLastAccessTime.dwLowDateTime=0x5922fbc0, ftLastAccessTime.dwHighDateTime=0x1d2e676, ftLastWriteTime.dwLowDateTime=0xcd7cbf00, ftLastWriteTime.dwHighDateTime=0x1d09f02, nFileSizeHigh=0x0, nFileSizeLow=0x24398, dwReserved0=0x0, dwReserved1=0x0, cFileName="eula.rtf", cAlternateFileName="")) returned 1 [0113.443] FindNextFileW (in: hFindFile=0x381e00, lpFindFileData=0x31e38c | out: lpFindFileData=0x31e38c*(dwFileAttributes=0x820, ftCreationTime.dwLowDateTime=0x29ab2a00, ftCreationTime.dwHighDateTime=0x1d0ab24, ftLastAccessTime.dwLowDateTime=0x5d5487e0, ftLastAccessTime.dwHighDateTime=0x1d2e676, ftLastWriteTime.dwLowDateTime=0x29ab2a00, ftLastWriteTime.dwHighDateTime=0x1d0ab24, nFileSizeHigh=0x0, nFileSizeLow=0x14376, dwReserved0=0x0, dwReserved1=0x0, cFileName="LocalizedData.xml", cAlternateFileName="LOCALI~1.XML")) returned 1 [0113.443] FindNextFileW (in: hFindFile=0x381e00, lpFindFileData=0x31e38c | out: lpFindFileData=0x31e38c*(dwFileAttributes=0x820, ftCreationTime.dwLowDateTime=0x852ae700, ftCreationTime.dwHighDateTime=0x1d0ab27, ftLastAccessTime.dwLowDateTime=0x5d522680, ftLastAccessTime.dwHighDateTime=0x1d2e676, ftLastWriteTime.dwLowDateTime=0x852ae700, ftLastWriteTime.dwHighDateTime=0x1d0ab27, nFileSizeHigh=0x0, nFileSizeLow=0x7358, dwReserved0=0x0, dwReserved1=0x0, cFileName="SetupResources.dll", cAlternateFileName="SETUPR~1.DLL")) returned 1 [0113.443] FindNextFileW (in: hFindFile=0x381e00, lpFindFileData=0x31e38c | out: lpFindFileData=0x31e38c*(dwFileAttributes=0x820, ftCreationTime.dwLowDateTime=0x852ae700, ftCreationTime.dwHighDateTime=0x1d0ab27, ftLastAccessTime.dwLowDateTime=0x5d522680, ftLastAccessTime.dwHighDateTime=0x1d2e676, ftLastWriteTime.dwLowDateTime=0x852ae700, ftLastWriteTime.dwHighDateTime=0x1d0ab27, nFileSizeHigh=0x0, nFileSizeLow=0x7358, dwReserved0=0x0, dwReserved1=0x0, cFileName="SetupResources.dll", cAlternateFileName="SETUPR~1.DLL")) returned 0 [0113.443] FindClose (in: hFindFile=0x381e00 | out: hFindFile=0x381e00) returned 1 [0113.443] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e614) returned 1 [0113.443] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e620) returned 1 [0113.443] GetFullPathNameW (in: lpFileName="C:\\Windows\\Microsoft.NET\\Framework64\\v4.0.30319\\SetupCache\\v4.6.00081\\1044\\eula.rtf", nBufferLength=0x105, lpBuffer=0x31e02c, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\Microsoft.NET\\Framework64\\v4.0.30319\\SetupCache\\v4.6.00081\\1044\\eula.rtf", lpFilePart=0x0) returned 0x53 [0113.443] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e520) returned 1 [0113.443] CreateFileW (lpFileName="C:\\Windows\\Microsoft.NET\\Framework64\\v4.0.30319\\SetupCache\\v4.6.00081\\1044\\eula.rtf" (normalized: "c:\\windows\\microsoft.net\\framework64\\v4.0.30319\\setupcache\\v4.6.00081\\1044\\eula.rtf"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x178 [0113.443] GetFileType (hFile=0x178) returned 0x1 [0113.443] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e51c) returned 1 [0113.443] GetFileType (hFile=0x178) returned 0x1 [0113.444] GetFileSize (in: hFile=0x178, lpFileSizeHigh=0x31e628 | out: lpFileSizeHigh=0x31e628*=0x0) returned 0x24398 [0113.444] ReadFile (in: hFile=0x178, lpBuffer=0x6c61ef8, nNumberOfBytesToRead=0x24398, lpNumberOfBytesRead=0x31e5d4, lpOverlapped=0x0 | out: lpBuffer=0x6c61ef8*, lpNumberOfBytesRead=0x31e5d4*=0x24398, lpOverlapped=0x0) returned 1 [0113.451] CloseHandle (hObject=0x178) returned 1 [0113.468] GetFullPathNameW (in: lpFileName="C:\\Windows\\Microsoft.NET\\Framework64\\v4.0.30319\\SetupCache\\v4.6.00081\\1044\\eula.rtf", nBufferLength=0x105, lpBuffer=0x31e018, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\Microsoft.NET\\Framework64\\v4.0.30319\\SetupCache\\v4.6.00081\\1044\\eula.rtf", lpFilePart=0x0) returned 0x53 [0113.468] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e50c) returned 1 [0113.468] CreateFileW (lpFileName="C:\\Windows\\Microsoft.NET\\Framework64\\v4.0.30319\\SetupCache\\v4.6.00081\\1044\\eula.rtf" (normalized: "c:\\windows\\microsoft.net\\framework64\\v4.0.30319\\setupcache\\v4.6.00081\\1044\\eula.rtf"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x178 [0113.470] GetFileType (hFile=0x178) returned 0x1 [0113.470] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e508) returned 1 [0113.470] GetFileType (hFile=0x178) returned 0x1 [0113.470] WriteFile (in: hFile=0x178, lpBuffer=0x6d17150*, nNumberOfBytesToWrite=0x243a0, lpNumberOfBytesWritten=0x31e5c8, lpOverlapped=0x0 | out: lpBuffer=0x6d17150*, lpNumberOfBytesWritten=0x31e5c8*=0x243a0, lpOverlapped=0x0) returned 1 [0113.472] CloseHandle (hObject=0x178) returned 1 [0113.473] GetFullPathNameW (in: lpFileName="C:\\Windows\\Microsoft.NET\\Framework64\\v4.0.30319\\SetupCache\\v4.6.00081\\1044\\eula.rtf", nBufferLength=0x105, lpBuffer=0x31e14c, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\Microsoft.NET\\Framework64\\v4.0.30319\\SetupCache\\v4.6.00081\\1044\\eula.rtf", lpFilePart=0x0) returned 0x53 [0113.473] GetFullPathNameW (in: lpFileName="C:\\Windows\\Microsoft.NET\\Framework64\\v4.0.30319\\SetupCache\\v4.6.00081\\1044\\eula.rtf", nBufferLength=0x105, lpBuffer=0x31e14c, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\Microsoft.NET\\Framework64\\v4.0.30319\\SetupCache\\v4.6.00081\\1044\\eula.rtf", lpFilePart=0x0) returned 0x53 [0113.473] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e5ac) returned 1 [0113.473] GetFileAttributesExW (in: lpFileName="C:\\Windows\\Microsoft.NET\\Framework64\\v4.0.30319\\SetupCache\\v4.6.00081\\1044\\eula.rtf" (normalized: "c:\\windows\\microsoft.net\\framework64\\v4.0.30319\\setupcache\\v4.6.00081\\1044\\eula.rtf"), fInfoLevelId=0x0, lpFileInformation=0x31e628 | out: lpFileInformation=0x31e628*(dwFileAttributes=0x820, ftCreationTime.dwLowDateTime=0xcd7cbf00, ftCreationTime.dwHighDateTime=0x1d09f02, ftLastAccessTime.dwLowDateTime=0x5922fbc0, ftLastAccessTime.dwHighDateTime=0x1d2e676, ftLastWriteTime.dwLowDateTime=0x2710b2a0, ftLastWriteTime.dwHighDateTime=0x1d6eb7f, nFileSizeHigh=0x0, nFileSizeLow=0x243a0)) returned 1 [0113.473] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e5a8) returned 1 [0113.473] MoveFileW (lpExistingFileName="C:\\Windows\\Microsoft.NET\\Framework64\\v4.0.30319\\SetupCache\\v4.6.00081\\1044\\eula.rtf" (normalized: "c:\\windows\\microsoft.net\\framework64\\v4.0.30319\\setupcache\\v4.6.00081\\1044\\eula.rtf"), lpNewFileName="C:\\Windows\\Microsoft.NET\\Framework64\\v4.0.30319\\SetupCache\\v4.6.00081\\1044\\eula.rtf" (normalized: "c:\\windows\\microsoft.net\\framework64\\v4.0.30319\\setupcache\\v4.6.00081\\1044\\eula.rtf")) returned 1 [0113.473] GetFullPathNameW (in: lpFileName="C:\\Windows\\Microsoft.NET\\Framework64\\v4.0.30319\\SetupCache\\v4.6.00081\\1044\\LocalizedData.xml", nBufferLength=0x105, lpBuffer=0x31e02c, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\Microsoft.NET\\Framework64\\v4.0.30319\\SetupCache\\v4.6.00081\\1044\\LocalizedData.xml", lpFilePart=0x0) returned 0x5c [0113.473] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e520) returned 1 [0113.473] CreateFileW (lpFileName="C:\\Windows\\Microsoft.NET\\Framework64\\v4.0.30319\\SetupCache\\v4.6.00081\\1044\\LocalizedData.xml" (normalized: "c:\\windows\\microsoft.net\\framework64\\v4.0.30319\\setupcache\\v4.6.00081\\1044\\localizeddata.xml"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x178 [0113.473] GetFileType (hFile=0x178) returned 0x1 [0113.473] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e51c) returned 1 [0113.474] GetFileType (hFile=0x178) returned 0x1 [0113.474] GetFileSize (in: hFile=0x178, lpFileSizeHigh=0x31e628 | out: lpFileSizeHigh=0x31e628*=0x0) returned 0x14376 [0113.474] ReadFile (in: hFile=0x178, lpBuffer=0x272b988, nNumberOfBytesToRead=0x14376, lpNumberOfBytesRead=0x31e5d4, lpOverlapped=0x0 | out: lpBuffer=0x272b988*, lpNumberOfBytesRead=0x31e5d4*=0x14376, lpOverlapped=0x0) returned 1 [0113.481] CloseHandle (hObject=0x178) returned 1 [0113.526] GetFullPathNameW (in: lpFileName="C:\\Windows\\Microsoft.NET\\Framework64\\v4.0.30319\\SetupCache\\v4.6.00081\\1044\\LocalizedData.xml", nBufferLength=0x105, lpBuffer=0x31e018, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\Microsoft.NET\\Framework64\\v4.0.30319\\SetupCache\\v4.6.00081\\1044\\LocalizedData.xml", lpFilePart=0x0) returned 0x5c [0113.526] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e50c) returned 1 [0113.526] CreateFileW (lpFileName="C:\\Windows\\Microsoft.NET\\Framework64\\v4.0.30319\\SetupCache\\v4.6.00081\\1044\\LocalizedData.xml" (normalized: "c:\\windows\\microsoft.net\\framework64\\v4.0.30319\\setupcache\\v4.6.00081\\1044\\localizeddata.xml"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x178 [0113.528] GetFileType (hFile=0x178) returned 0x1 [0113.528] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e508) returned 1 [0113.528] GetFileType (hFile=0x178) returned 0x1 [0113.528] WriteFile (in: hFile=0x178, lpBuffer=0x27b5204*, nNumberOfBytesToWrite=0x14380, lpNumberOfBytesWritten=0x31e5c8, lpOverlapped=0x0 | out: lpBuffer=0x27b5204*, lpNumberOfBytesWritten=0x31e5c8*=0x14380, lpOverlapped=0x0) returned 1 [0113.530] CloseHandle (hObject=0x178) returned 1 [0113.530] GetFullPathNameW (in: lpFileName="C:\\Windows\\Microsoft.NET\\Framework64\\v4.0.30319\\SetupCache\\v4.6.00081\\1044\\LocalizedData.xml", nBufferLength=0x105, lpBuffer=0x31e14c, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\Microsoft.NET\\Framework64\\v4.0.30319\\SetupCache\\v4.6.00081\\1044\\LocalizedData.xml", lpFilePart=0x0) returned 0x5c [0113.530] GetFullPathNameW (in: lpFileName="C:\\Windows\\Microsoft.NET\\Framework64\\v4.0.30319\\SetupCache\\v4.6.00081\\1044\\LocalizedData.xml", nBufferLength=0x105, lpBuffer=0x31e14c, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\Microsoft.NET\\Framework64\\v4.0.30319\\SetupCache\\v4.6.00081\\1044\\LocalizedData.xml", lpFilePart=0x0) returned 0x5c [0113.530] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e5ac) returned 1 [0113.530] GetFileAttributesExW (in: lpFileName="C:\\Windows\\Microsoft.NET\\Framework64\\v4.0.30319\\SetupCache\\v4.6.00081\\1044\\LocalizedData.xml" (normalized: "c:\\windows\\microsoft.net\\framework64\\v4.0.30319\\setupcache\\v4.6.00081\\1044\\localizeddata.xml"), fInfoLevelId=0x0, lpFileInformation=0x31e628 | out: lpFileInformation=0x31e628*(dwFileAttributes=0x820, ftCreationTime.dwLowDateTime=0x29ab2a00, ftCreationTime.dwHighDateTime=0x1d0ab24, ftLastAccessTime.dwLowDateTime=0x5d5487e0, ftLastAccessTime.dwHighDateTime=0x1d2e676, ftLastWriteTime.dwLowDateTime=0x271a3820, ftLastWriteTime.dwHighDateTime=0x1d6eb7f, nFileSizeHigh=0x0, nFileSizeLow=0x14380)) returned 1 [0113.530] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e5a8) returned 1 [0113.530] MoveFileW (lpExistingFileName="C:\\Windows\\Microsoft.NET\\Framework64\\v4.0.30319\\SetupCache\\v4.6.00081\\1044\\LocalizedData.xml" (normalized: "c:\\windows\\microsoft.net\\framework64\\v4.0.30319\\setupcache\\v4.6.00081\\1044\\localizeddata.xml"), lpNewFileName="C:\\Windows\\Microsoft.NET\\Framework64\\v4.0.30319\\SetupCache\\v4.6.00081\\1044\\LocalizedData.xml" (normalized: "c:\\windows\\microsoft.net\\framework64\\v4.0.30319\\setupcache\\v4.6.00081\\1044\\localizeddata.xml")) returned 1 [0113.530] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e654) returned 1 [0113.530] GetFullPathNameW (in: lpFileName="C:\\Windows\\Microsoft.NET\\Framework64\\v4.0.30319\\SetupCache\\v4.6.00081\\1045", nBufferLength=0x105, lpBuffer=0x31e15c, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\Microsoft.NET\\Framework64\\v4.0.30319\\SetupCache\\v4.6.00081\\1045", lpFilePart=0x0) returned 0x4a [0113.530] GetFullPathNameW (in: lpFileName="C:\\Windows\\Microsoft.NET\\Framework64\\v4.0.30319\\SetupCache\\v4.6.00081\\1045\\", nBufferLength=0x105, lpBuffer=0x31e130, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\Microsoft.NET\\Framework64\\v4.0.30319\\SetupCache\\v4.6.00081\\1045\\", lpFilePart=0x0) returned 0x4b [0113.531] FindFirstFileW (in: lpFileName="C:\\Windows\\Microsoft.NET\\Framework64\\v4.0.30319\\SetupCache\\v4.6.00081\\1045\\*", lpFindFileData=0x31e37c | out: lpFindFileData=0x31e37c*(dwFileAttributes=0x810, ftCreationTime.dwLowDateTime=0x5922fbc0, ftCreationTime.dwHighDateTime=0x1d2e676, ftLastAccessTime.dwLowDateTime=0x5d5487e0, ftLastAccessTime.dwHighDateTime=0x1d2e676, ftLastWriteTime.dwLowDateTime=0x5d5487e0, ftLastWriteTime.dwHighDateTime=0x1d2e676, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x381fc0 [0113.531] FindNextFileW (in: hFindFile=0x381fc0, lpFindFileData=0x31e38c | out: lpFindFileData=0x31e38c*(dwFileAttributes=0x810, ftCreationTime.dwLowDateTime=0x5922fbc0, ftCreationTime.dwHighDateTime=0x1d2e676, ftLastAccessTime.dwLowDateTime=0x5d5487e0, ftLastAccessTime.dwHighDateTime=0x1d2e676, ftLastWriteTime.dwLowDateTime=0x5d5487e0, ftLastWriteTime.dwHighDateTime=0x1d2e676, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0113.531] FindNextFileW (in: hFindFile=0x381fc0, lpFindFileData=0x31e38c | out: lpFindFileData=0x31e38c*(dwFileAttributes=0x820, ftCreationTime.dwLowDateTime=0xcd7cbf00, ftCreationTime.dwHighDateTime=0x1d09f02, ftLastAccessTime.dwLowDateTime=0x5922fbc0, ftLastAccessTime.dwHighDateTime=0x1d2e676, ftLastWriteTime.dwLowDateTime=0xcd7cbf00, ftLastWriteTime.dwHighDateTime=0x1d09f02, nFileSizeHigh=0x0, nFileSizeLow=0x25053, dwReserved0=0x0, dwReserved1=0x0, cFileName="eula.rtf", cAlternateFileName="")) returned 1 [0113.531] FindNextFileW (in: hFindFile=0x381fc0, lpFindFileData=0x31e38c | out: lpFindFileData=0x31e38c*(dwFileAttributes=0x820, ftCreationTime.dwLowDateTime=0x29ab2a00, ftCreationTime.dwHighDateTime=0x1d0ab24, ftLastAccessTime.dwLowDateTime=0x5d5487e0, ftLastAccessTime.dwHighDateTime=0x1d2e676, ftLastWriteTime.dwLowDateTime=0x29ab2a00, ftLastWriteTime.dwHighDateTime=0x1d0ab24, nFileSizeHigh=0x0, nFileSizeLow=0x14e3a, dwReserved0=0x0, dwReserved1=0x0, cFileName="LocalizedData.xml", cAlternateFileName="LOCALI~1.XML")) returned 1 [0113.531] FindNextFileW (in: hFindFile=0x381fc0, lpFindFileData=0x31e38c | out: lpFindFileData=0x31e38c*(dwFileAttributes=0x820, ftCreationTime.dwLowDateTime=0x852ae700, ftCreationTime.dwHighDateTime=0x1d0ab27, ftLastAccessTime.dwLowDateTime=0x5d522680, ftLastAccessTime.dwHighDateTime=0x1d2e676, ftLastWriteTime.dwLowDateTime=0x852ae700, ftLastWriteTime.dwHighDateTime=0x1d0ab27, nFileSizeHigh=0x0, nFileSizeLow=0x7750, dwReserved0=0x0, dwReserved1=0x0, cFileName="SetupResources.dll", cAlternateFileName="SETUPR~1.DLL")) returned 1 [0113.531] FindNextFileW (in: hFindFile=0x381fc0, lpFindFileData=0x31e38c | out: lpFindFileData=0x31e38c*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0113.531] FindClose (in: hFindFile=0x381fc0 | out: hFindFile=0x381fc0) returned 1 [0113.531] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e614) returned 1 [0113.531] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e620) returned 1 [0113.531] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e654) returned 1 [0113.531] GetFullPathNameW (in: lpFileName="C:\\Windows\\Microsoft.NET\\Framework64\\v4.0.30319\\SetupCache\\v4.6.00081\\1045", nBufferLength=0x105, lpBuffer=0x31e15c, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\Microsoft.NET\\Framework64\\v4.0.30319\\SetupCache\\v4.6.00081\\1045", lpFilePart=0x0) returned 0x4a [0113.532] GetFullPathNameW (in: lpFileName="C:\\Windows\\Microsoft.NET\\Framework64\\v4.0.30319\\SetupCache\\v4.6.00081\\1045\\", nBufferLength=0x105, lpBuffer=0x31e130, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\Microsoft.NET\\Framework64\\v4.0.30319\\SetupCache\\v4.6.00081\\1045\\", lpFilePart=0x0) returned 0x4b [0113.532] FindFirstFileW (in: lpFileName="C:\\Windows\\Microsoft.NET\\Framework64\\v4.0.30319\\SetupCache\\v4.6.00081\\1045\\*", lpFindFileData=0x31e37c | out: lpFindFileData=0x31e37c*(dwFileAttributes=0x810, ftCreationTime.dwLowDateTime=0x5922fbc0, ftCreationTime.dwHighDateTime=0x1d2e676, ftLastAccessTime.dwLowDateTime=0x5d5487e0, ftLastAccessTime.dwHighDateTime=0x1d2e676, ftLastWriteTime.dwLowDateTime=0x5d5487e0, ftLastWriteTime.dwHighDateTime=0x1d2e676, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x381fc0 [0113.532] FindNextFileW (in: hFindFile=0x381fc0, lpFindFileData=0x31e38c | out: lpFindFileData=0x31e38c*(dwFileAttributes=0x810, ftCreationTime.dwLowDateTime=0x5922fbc0, ftCreationTime.dwHighDateTime=0x1d2e676, ftLastAccessTime.dwLowDateTime=0x5d5487e0, ftLastAccessTime.dwHighDateTime=0x1d2e676, ftLastWriteTime.dwLowDateTime=0x5d5487e0, ftLastWriteTime.dwHighDateTime=0x1d2e676, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0113.532] FindNextFileW (in: hFindFile=0x381fc0, lpFindFileData=0x31e38c | out: lpFindFileData=0x31e38c*(dwFileAttributes=0x820, ftCreationTime.dwLowDateTime=0xcd7cbf00, ftCreationTime.dwHighDateTime=0x1d09f02, ftLastAccessTime.dwLowDateTime=0x5922fbc0, ftLastAccessTime.dwHighDateTime=0x1d2e676, ftLastWriteTime.dwLowDateTime=0xcd7cbf00, ftLastWriteTime.dwHighDateTime=0x1d09f02, nFileSizeHigh=0x0, nFileSizeLow=0x25053, dwReserved0=0x0, dwReserved1=0x0, cFileName="eula.rtf", cAlternateFileName="")) returned 1 [0113.532] FindNextFileW (in: hFindFile=0x381fc0, lpFindFileData=0x31e38c | out: lpFindFileData=0x31e38c*(dwFileAttributes=0x820, ftCreationTime.dwLowDateTime=0x29ab2a00, ftCreationTime.dwHighDateTime=0x1d0ab24, ftLastAccessTime.dwLowDateTime=0x5d5487e0, ftLastAccessTime.dwHighDateTime=0x1d2e676, ftLastWriteTime.dwLowDateTime=0x29ab2a00, ftLastWriteTime.dwHighDateTime=0x1d0ab24, nFileSizeHigh=0x0, nFileSizeLow=0x14e3a, dwReserved0=0x0, dwReserved1=0x0, cFileName="LocalizedData.xml", cAlternateFileName="LOCALI~1.XML")) returned 1 [0113.532] FindNextFileW (in: hFindFile=0x381fc0, lpFindFileData=0x31e38c | out: lpFindFileData=0x31e38c*(dwFileAttributes=0x820, ftCreationTime.dwLowDateTime=0x852ae700, ftCreationTime.dwHighDateTime=0x1d0ab27, ftLastAccessTime.dwLowDateTime=0x5d522680, ftLastAccessTime.dwHighDateTime=0x1d2e676, ftLastWriteTime.dwLowDateTime=0x852ae700, ftLastWriteTime.dwHighDateTime=0x1d0ab27, nFileSizeHigh=0x0, nFileSizeLow=0x7750, dwReserved0=0x0, dwReserved1=0x0, cFileName="SetupResources.dll", cAlternateFileName="SETUPR~1.DLL")) returned 1 [0113.532] FindNextFileW (in: hFindFile=0x381fc0, lpFindFileData=0x31e38c | out: lpFindFileData=0x31e38c*(dwFileAttributes=0x820, ftCreationTime.dwLowDateTime=0x852ae700, ftCreationTime.dwHighDateTime=0x1d0ab27, ftLastAccessTime.dwLowDateTime=0x5d522680, ftLastAccessTime.dwHighDateTime=0x1d2e676, ftLastWriteTime.dwLowDateTime=0x852ae700, ftLastWriteTime.dwHighDateTime=0x1d0ab27, nFileSizeHigh=0x0, nFileSizeLow=0x7750, dwReserved0=0x0, dwReserved1=0x0, cFileName="SetupResources.dll", cAlternateFileName="SETUPR~1.DLL")) returned 0 [0113.532] FindClose (in: hFindFile=0x381fc0 | out: hFindFile=0x381fc0) returned 1 [0113.532] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e614) returned 1 [0113.533] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e620) returned 1 [0113.533] GetFullPathNameW (in: lpFileName="C:\\Windows\\Microsoft.NET\\Framework64\\v4.0.30319\\SetupCache\\v4.6.00081\\1045\\eula.rtf", nBufferLength=0x105, lpBuffer=0x31e02c, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\Microsoft.NET\\Framework64\\v4.0.30319\\SetupCache\\v4.6.00081\\1045\\eula.rtf", lpFilePart=0x0) returned 0x53 [0113.533] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e520) returned 1 [0113.533] CreateFileW (lpFileName="C:\\Windows\\Microsoft.NET\\Framework64\\v4.0.30319\\SetupCache\\v4.6.00081\\1045\\eula.rtf" (normalized: "c:\\windows\\microsoft.net\\framework64\\v4.0.30319\\setupcache\\v4.6.00081\\1045\\eula.rtf"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x178 [0113.533] GetFileType (hFile=0x178) returned 0x1 [0113.533] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e51c) returned 1 [0113.533] GetFileType (hFile=0x178) returned 0x1 [0113.533] GetFileSize (in: hFile=0x178, lpFileSizeHigh=0x31e628 | out: lpFileSizeHigh=0x31e628*=0x0) returned 0x25053 [0113.534] ReadFile (in: hFile=0x178, lpBuffer=0x6d63c10, nNumberOfBytesToRead=0x25053, lpNumberOfBytesRead=0x31e5d4, lpOverlapped=0x0 | out: lpBuffer=0x6d63c10*, lpNumberOfBytesRead=0x31e5d4*=0x25053, lpOverlapped=0x0) returned 1 [0113.556] GetFullPathNameW (in: lpFileName="C:\\Windows\\Microsoft.NET\\Framework64\\v4.0.30319\\SetupCache\\v4.6.00081\\1045\\eula.rtf", nBufferLength=0x105, lpBuffer=0x31e018, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\Microsoft.NET\\Framework64\\v4.0.30319\\SetupCache\\v4.6.00081\\1045\\eula.rtf", lpFilePart=0x0) returned 0x53 [0113.556] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e50c) returned 1 [0113.556] CreateFileW (lpFileName="C:\\Windows\\Microsoft.NET\\Framework64\\v4.0.30319\\SetupCache\\v4.6.00081\\1045\\eula.rtf" (normalized: "c:\\windows\\microsoft.net\\framework64\\v4.0.30319\\setupcache\\v4.6.00081\\1045\\eula.rtf"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x178 [0113.558] GetFileType (hFile=0x178) returned 0x1 [0113.558] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e508) returned 1 [0113.558] GetFileType (hFile=0x178) returned 0x1 [0113.558] WriteFile (in: hFile=0x178, lpBuffer=0x36194b0*, nNumberOfBytesToWrite=0x25060, lpNumberOfBytesWritten=0x31e5c8, lpOverlapped=0x0 | out: lpBuffer=0x36194b0*, lpNumberOfBytesWritten=0x31e5c8*=0x25060, lpOverlapped=0x0) returned 1 [0113.561] GetFullPathNameW (in: lpFileName="C:\\Windows\\Microsoft.NET\\Framework64\\v4.0.30319\\SetupCache\\v4.6.00081\\1045\\eula.rtf", nBufferLength=0x105, lpBuffer=0x31e14c, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\Microsoft.NET\\Framework64\\v4.0.30319\\SetupCache\\v4.6.00081\\1045\\eula.rtf", lpFilePart=0x0) returned 0x53 [0113.561] GetFullPathNameW (in: lpFileName="C:\\Windows\\Microsoft.NET\\Framework64\\v4.0.30319\\SetupCache\\v4.6.00081\\1045\\eula.rtf", nBufferLength=0x105, lpBuffer=0x31e14c, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\Microsoft.NET\\Framework64\\v4.0.30319\\SetupCache\\v4.6.00081\\1045\\eula.rtf", lpFilePart=0x0) returned 0x53 [0113.561] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e5ac) returned 1 [0113.561] GetFileAttributesExW (in: lpFileName="C:\\Windows\\Microsoft.NET\\Framework64\\v4.0.30319\\SetupCache\\v4.6.00081\\1045\\eula.rtf" (normalized: "c:\\windows\\microsoft.net\\framework64\\v4.0.30319\\setupcache\\v4.6.00081\\1045\\eula.rtf"), fInfoLevelId=0x0, lpFileInformation=0x31e628 | out: lpFileInformation=0x31e628*(dwFileAttributes=0x820, ftCreationTime.dwLowDateTime=0xcd7cbf00, ftCreationTime.dwHighDateTime=0x1d09f02, ftLastAccessTime.dwLowDateTime=0x5922fbc0, ftLastAccessTime.dwHighDateTime=0x1d2e676, ftLastWriteTime.dwLowDateTime=0x271efae0, ftLastWriteTime.dwHighDateTime=0x1d6eb7f, nFileSizeHigh=0x0, nFileSizeLow=0x25060)) returned 1 [0113.561] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e5a8) returned 1 [0113.561] MoveFileW (lpExistingFileName="C:\\Windows\\Microsoft.NET\\Framework64\\v4.0.30319\\SetupCache\\v4.6.00081\\1045\\eula.rtf" (normalized: "c:\\windows\\microsoft.net\\framework64\\v4.0.30319\\setupcache\\v4.6.00081\\1045\\eula.rtf"), lpNewFileName="C:\\Windows\\Microsoft.NET\\Framework64\\v4.0.30319\\SetupCache\\v4.6.00081\\1045\\eula.rtf" (normalized: "c:\\windows\\microsoft.net\\framework64\\v4.0.30319\\setupcache\\v4.6.00081\\1045\\eula.rtf")) returned 1 [0113.562] GetFullPathNameW (in: lpFileName="C:\\Windows\\Microsoft.NET\\Framework64\\v4.0.30319\\SetupCache\\v4.6.00081\\1045\\LocalizedData.xml", nBufferLength=0x105, lpBuffer=0x31e02c, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\Microsoft.NET\\Framework64\\v4.0.30319\\SetupCache\\v4.6.00081\\1045\\LocalizedData.xml", lpFilePart=0x0) returned 0x5c [0113.562] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e520) returned 1 [0113.562] CreateFileW (lpFileName="C:\\Windows\\Microsoft.NET\\Framework64\\v4.0.30319\\SetupCache\\v4.6.00081\\1045\\LocalizedData.xml" (normalized: "c:\\windows\\microsoft.net\\framework64\\v4.0.30319\\setupcache\\v4.6.00081\\1045\\localizeddata.xml"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x178 [0113.562] GetFileType (hFile=0x178) returned 0x1 [0113.562] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e51c) returned 1 [0113.562] GetFileType (hFile=0x178) returned 0x1 [0113.562] GetFileSize (in: hFile=0x178, lpFileSizeHigh=0x31e628 | out: lpFileSizeHigh=0x31e628*=0x0) returned 0x14e3a [0113.563] ReadFile (in: hFile=0x178, lpBuffer=0x6e1ce20, nNumberOfBytesToRead=0x14e3a, lpNumberOfBytesRead=0x31e5d4, lpOverlapped=0x0 | out: lpBuffer=0x6e1ce20*, lpNumberOfBytesRead=0x31e5d4*=0x14e3a, lpOverlapped=0x0) returned 1 [0113.596] GetFullPathNameW (in: lpFileName="C:\\Windows\\Microsoft.NET\\Framework64\\v4.0.30319\\SetupCache\\v4.6.00081\\1045\\LocalizedData.xml", nBufferLength=0x105, lpBuffer=0x31e018, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\Microsoft.NET\\Framework64\\v4.0.30319\\SetupCache\\v4.6.00081\\1045\\LocalizedData.xml", lpFilePart=0x0) returned 0x5c [0113.597] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e50c) returned 1 [0113.597] CreateFileW (lpFileName="C:\\Windows\\Microsoft.NET\\Framework64\\v4.0.30319\\SetupCache\\v4.6.00081\\1045\\LocalizedData.xml" (normalized: "c:\\windows\\microsoft.net\\framework64\\v4.0.30319\\setupcache\\v4.6.00081\\1045\\localizeddata.xml"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x178 [0113.598] GetFileType (hFile=0x178) returned 0x1 [0113.598] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e508) returned 1 [0113.598] GetFileType (hFile=0x178) returned 0x1 [0113.598] WriteFile (in: hFile=0x178, lpBuffer=0x36194b0*, nNumberOfBytesToWrite=0x14e40, lpNumberOfBytesWritten=0x31e5c8, lpOverlapped=0x0 | out: lpBuffer=0x36194b0*, lpNumberOfBytesWritten=0x31e5c8*=0x14e40, lpOverlapped=0x0) returned 1 [0113.600] GetFullPathNameW (in: lpFileName="C:\\Windows\\Microsoft.NET\\Framework64\\v4.0.30319\\SetupCache\\v4.6.00081\\1045\\LocalizedData.xml", nBufferLength=0x105, lpBuffer=0x31e14c, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\Microsoft.NET\\Framework64\\v4.0.30319\\SetupCache\\v4.6.00081\\1045\\LocalizedData.xml", lpFilePart=0x0) returned 0x5c [0113.600] GetFullPathNameW (in: lpFileName="C:\\Windows\\Microsoft.NET\\Framework64\\v4.0.30319\\SetupCache\\v4.6.00081\\1045\\LocalizedData.xml", nBufferLength=0x105, lpBuffer=0x31e14c, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\Microsoft.NET\\Framework64\\v4.0.30319\\SetupCache\\v4.6.00081\\1045\\LocalizedData.xml", lpFilePart=0x0) returned 0x5c [0113.600] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e5ac) returned 1 [0113.601] GetFileAttributesExW (in: lpFileName="C:\\Windows\\Microsoft.NET\\Framework64\\v4.0.30319\\SetupCache\\v4.6.00081\\1045\\LocalizedData.xml" (normalized: "c:\\windows\\microsoft.net\\framework64\\v4.0.30319\\setupcache\\v4.6.00081\\1045\\localizeddata.xml"), fInfoLevelId=0x0, lpFileInformation=0x31e628 | out: lpFileInformation=0x31e628*(dwFileAttributes=0x820, ftCreationTime.dwLowDateTime=0x29ab2a00, ftCreationTime.dwHighDateTime=0x1d0ab24, ftLastAccessTime.dwLowDateTime=0x5d5487e0, ftLastAccessTime.dwHighDateTime=0x1d2e676, ftLastWriteTime.dwLowDateTime=0x27261f00, ftLastWriteTime.dwHighDateTime=0x1d6eb7f, nFileSizeHigh=0x0, nFileSizeLow=0x14e40)) returned 1 [0113.601] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e5a8) returned 1 [0113.601] MoveFileW (lpExistingFileName="C:\\Windows\\Microsoft.NET\\Framework64\\v4.0.30319\\SetupCache\\v4.6.00081\\1045\\LocalizedData.xml" (normalized: "c:\\windows\\microsoft.net\\framework64\\v4.0.30319\\setupcache\\v4.6.00081\\1045\\localizeddata.xml"), lpNewFileName="C:\\Windows\\Microsoft.NET\\Framework64\\v4.0.30319\\SetupCache\\v4.6.00081\\1045\\LocalizedData.xml" (normalized: "c:\\windows\\microsoft.net\\framework64\\v4.0.30319\\setupcache\\v4.6.00081\\1045\\localizeddata.xml")) returned 1 [0113.601] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e654) returned 1 [0113.601] GetFullPathNameW (in: lpFileName="C:\\Windows\\Microsoft.NET\\Framework64\\v4.0.30319\\SetupCache\\v4.6.00081\\1046", nBufferLength=0x105, lpBuffer=0x31e15c, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\Microsoft.NET\\Framework64\\v4.0.30319\\SetupCache\\v4.6.00081\\1046", lpFilePart=0x0) returned 0x4a [0113.601] GetFullPathNameW (in: lpFileName="C:\\Windows\\Microsoft.NET\\Framework64\\v4.0.30319\\SetupCache\\v4.6.00081\\1046\\", nBufferLength=0x105, lpBuffer=0x31e130, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\Microsoft.NET\\Framework64\\v4.0.30319\\SetupCache\\v4.6.00081\\1046\\", lpFilePart=0x0) returned 0x4b [0113.601] FindFirstFileW (in: lpFileName="C:\\Windows\\Microsoft.NET\\Framework64\\v4.0.30319\\SetupCache\\v4.6.00081\\1046\\*", lpFindFileData=0x31e37c | out: lpFindFileData=0x31e37c*(dwFileAttributes=0x810, ftCreationTime.dwLowDateTime=0x5922fbc0, ftCreationTime.dwHighDateTime=0x1d2e676, ftLastAccessTime.dwLowDateTime=0x5d5487e0, ftLastAccessTime.dwHighDateTime=0x1d2e676, ftLastWriteTime.dwLowDateTime=0x5d5487e0, ftLastWriteTime.dwHighDateTime=0x1d2e676, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x381dc0 [0113.601] FindNextFileW (in: hFindFile=0x381dc0, lpFindFileData=0x31e38c | out: lpFindFileData=0x31e38c*(dwFileAttributes=0x810, ftCreationTime.dwLowDateTime=0x5922fbc0, ftCreationTime.dwHighDateTime=0x1d2e676, ftLastAccessTime.dwLowDateTime=0x5d5487e0, ftLastAccessTime.dwHighDateTime=0x1d2e676, ftLastWriteTime.dwLowDateTime=0x5d5487e0, ftLastWriteTime.dwHighDateTime=0x1d2e676, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0113.602] FindNextFileW (in: hFindFile=0x381dc0, lpFindFileData=0x31e38c | out: lpFindFileData=0x31e38c*(dwFileAttributes=0x820, ftCreationTime.dwLowDateTime=0xcd7cbf00, ftCreationTime.dwHighDateTime=0x1d09f02, ftLastAccessTime.dwLowDateTime=0x5922fbc0, ftLastAccessTime.dwHighDateTime=0x1d2e676, ftLastWriteTime.dwLowDateTime=0xcd7cbf00, ftLastWriteTime.dwHighDateTime=0x1d09f02, nFileSizeHigh=0x0, nFileSizeLow=0x2180a, dwReserved0=0x0, dwReserved1=0x0, cFileName="eula.rtf", cAlternateFileName="")) returned 1 [0113.602] FindNextFileW (in: hFindFile=0x381dc0, lpFindFileData=0x31e38c | out: lpFindFileData=0x31e38c*(dwFileAttributes=0x820, ftCreationTime.dwLowDateTime=0x29ab2a00, ftCreationTime.dwHighDateTime=0x1d0ab24, ftLastAccessTime.dwLowDateTime=0x5d5487e0, ftLastAccessTime.dwHighDateTime=0x1d2e676, ftLastWriteTime.dwLowDateTime=0x29ab2a00, ftLastWriteTime.dwHighDateTime=0x1d0ab24, nFileSizeHigh=0x0, nFileSizeLow=0x14258, dwReserved0=0x0, dwReserved1=0x0, cFileName="LocalizedData.xml", cAlternateFileName="LOCALI~1.XML")) returned 1 [0113.602] FindNextFileW (in: hFindFile=0x381dc0, lpFindFileData=0x31e38c | out: lpFindFileData=0x31e38c*(dwFileAttributes=0x820, ftCreationTime.dwLowDateTime=0x852ae700, ftCreationTime.dwHighDateTime=0x1d0ab27, ftLastAccessTime.dwLowDateTime=0x5d522680, ftLastAccessTime.dwHighDateTime=0x1d2e676, ftLastWriteTime.dwLowDateTime=0x852ae700, ftLastWriteTime.dwHighDateTime=0x1d0ab27, nFileSizeHigh=0x0, nFileSizeLow=0x7558, dwReserved0=0x0, dwReserved1=0x0, cFileName="SetupResources.dll", cAlternateFileName="SETUPR~1.DLL")) returned 1 [0113.602] FindNextFileW (in: hFindFile=0x381dc0, lpFindFileData=0x31e38c | out: lpFindFileData=0x31e38c*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0113.602] FindClose (in: hFindFile=0x381dc0 | out: hFindFile=0x381dc0) returned 1 [0113.602] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e614) returned 1 [0113.602] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e620) returned 1 [0113.602] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e654) returned 1 [0113.602] GetFullPathNameW (in: lpFileName="C:\\Windows\\Microsoft.NET\\Framework64\\v4.0.30319\\SetupCache\\v4.6.00081\\1046", nBufferLength=0x105, lpBuffer=0x31e15c, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\Microsoft.NET\\Framework64\\v4.0.30319\\SetupCache\\v4.6.00081\\1046", lpFilePart=0x0) returned 0x4a [0113.602] GetFullPathNameW (in: lpFileName="C:\\Windows\\Microsoft.NET\\Framework64\\v4.0.30319\\SetupCache\\v4.6.00081\\1046\\", nBufferLength=0x105, lpBuffer=0x31e130, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\Microsoft.NET\\Framework64\\v4.0.30319\\SetupCache\\v4.6.00081\\1046\\", lpFilePart=0x0) returned 0x4b [0113.602] FindFirstFileW (in: lpFileName="C:\\Windows\\Microsoft.NET\\Framework64\\v4.0.30319\\SetupCache\\v4.6.00081\\1046\\*", lpFindFileData=0x31e37c | out: lpFindFileData=0x31e37c*(dwFileAttributes=0x810, ftCreationTime.dwLowDateTime=0x5922fbc0, ftCreationTime.dwHighDateTime=0x1d2e676, ftLastAccessTime.dwLowDateTime=0x5d5487e0, ftLastAccessTime.dwHighDateTime=0x1d2e676, ftLastWriteTime.dwLowDateTime=0x5d5487e0, ftLastWriteTime.dwHighDateTime=0x1d2e676, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x381dc0 [0113.602] FindNextFileW (in: hFindFile=0x381dc0, lpFindFileData=0x31e38c | out: lpFindFileData=0x31e38c*(dwFileAttributes=0x810, ftCreationTime.dwLowDateTime=0x5922fbc0, ftCreationTime.dwHighDateTime=0x1d2e676, ftLastAccessTime.dwLowDateTime=0x5d5487e0, ftLastAccessTime.dwHighDateTime=0x1d2e676, ftLastWriteTime.dwLowDateTime=0x5d5487e0, ftLastWriteTime.dwHighDateTime=0x1d2e676, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0113.603] FindNextFileW (in: hFindFile=0x381dc0, lpFindFileData=0x31e38c | out: lpFindFileData=0x31e38c*(dwFileAttributes=0x820, ftCreationTime.dwLowDateTime=0xcd7cbf00, ftCreationTime.dwHighDateTime=0x1d09f02, ftLastAccessTime.dwLowDateTime=0x5922fbc0, ftLastAccessTime.dwHighDateTime=0x1d2e676, ftLastWriteTime.dwLowDateTime=0xcd7cbf00, ftLastWriteTime.dwHighDateTime=0x1d09f02, nFileSizeHigh=0x0, nFileSizeLow=0x2180a, dwReserved0=0x0, dwReserved1=0x0, cFileName="eula.rtf", cAlternateFileName="")) returned 1 [0113.603] FindNextFileW (in: hFindFile=0x381dc0, lpFindFileData=0x31e38c | out: lpFindFileData=0x31e38c*(dwFileAttributes=0x820, ftCreationTime.dwLowDateTime=0x29ab2a00, ftCreationTime.dwHighDateTime=0x1d0ab24, ftLastAccessTime.dwLowDateTime=0x5d5487e0, ftLastAccessTime.dwHighDateTime=0x1d2e676, ftLastWriteTime.dwLowDateTime=0x29ab2a00, ftLastWriteTime.dwHighDateTime=0x1d0ab24, nFileSizeHigh=0x0, nFileSizeLow=0x14258, dwReserved0=0x0, dwReserved1=0x0, cFileName="LocalizedData.xml", cAlternateFileName="LOCALI~1.XML")) returned 1 [0113.603] FindNextFileW (in: hFindFile=0x381dc0, lpFindFileData=0x31e38c | out: lpFindFileData=0x31e38c*(dwFileAttributes=0x820, ftCreationTime.dwLowDateTime=0x852ae700, ftCreationTime.dwHighDateTime=0x1d0ab27, ftLastAccessTime.dwLowDateTime=0x5d522680, ftLastAccessTime.dwHighDateTime=0x1d2e676, ftLastWriteTime.dwLowDateTime=0x852ae700, ftLastWriteTime.dwHighDateTime=0x1d0ab27, nFileSizeHigh=0x0, nFileSizeLow=0x7558, dwReserved0=0x0, dwReserved1=0x0, cFileName="SetupResources.dll", cAlternateFileName="SETUPR~1.DLL")) returned 1 [0113.603] FindNextFileW (in: hFindFile=0x381dc0, lpFindFileData=0x31e38c | out: lpFindFileData=0x31e38c*(dwFileAttributes=0x820, ftCreationTime.dwLowDateTime=0x852ae700, ftCreationTime.dwHighDateTime=0x1d0ab27, ftLastAccessTime.dwLowDateTime=0x5d522680, ftLastAccessTime.dwHighDateTime=0x1d2e676, ftLastWriteTime.dwLowDateTime=0x852ae700, ftLastWriteTime.dwHighDateTime=0x1d0ab27, nFileSizeHigh=0x0, nFileSizeLow=0x7558, dwReserved0=0x0, dwReserved1=0x0, cFileName="SetupResources.dll", cAlternateFileName="SETUPR~1.DLL")) returned 0 [0113.603] FindClose (in: hFindFile=0x381dc0 | out: hFindFile=0x381dc0) returned 1 [0113.603] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e614) returned 1 [0113.603] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e620) returned 1 [0113.603] GetFullPathNameW (in: lpFileName="C:\\Windows\\Microsoft.NET\\Framework64\\v4.0.30319\\SetupCache\\v4.6.00081\\1046\\eula.rtf", nBufferLength=0x105, lpBuffer=0x31e02c, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\Microsoft.NET\\Framework64\\v4.0.30319\\SetupCache\\v4.6.00081\\1046\\eula.rtf", lpFilePart=0x0) returned 0x53 [0113.603] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e520) returned 1 [0113.603] CreateFileW (lpFileName="C:\\Windows\\Microsoft.NET\\Framework64\\v4.0.30319\\SetupCache\\v4.6.00081\\1046\\eula.rtf" (normalized: "c:\\windows\\microsoft.net\\framework64\\v4.0.30319\\setupcache\\v4.6.00081\\1046\\eula.rtf"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x178 [0113.604] GetFileType (hFile=0x178) returned 0x1 [0113.604] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e51c) returned 1 [0113.604] GetFileType (hFile=0x178) returned 0x1 [0113.604] GetFileSize (in: hFile=0x178, lpFileSizeHigh=0x31e628 | out: lpFileSizeHigh=0x31e628*=0x0) returned 0x2180a [0113.604] ReadFile (in: hFile=0x178, lpBuffer=0x362e310, nNumberOfBytesToRead=0x2180a, lpNumberOfBytesRead=0x31e5d4, lpOverlapped=0x0 | out: lpBuffer=0x362e310*, lpNumberOfBytesRead=0x31e5d4*=0x2180a, lpOverlapped=0x0) returned 1 [0113.633] GetFullPathNameW (in: lpFileName="C:\\Windows\\Microsoft.NET\\Framework64\\v4.0.30319\\SetupCache\\v4.6.00081\\1046\\eula.rtf", nBufferLength=0x105, lpBuffer=0x31e018, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\Microsoft.NET\\Framework64\\v4.0.30319\\SetupCache\\v4.6.00081\\1046\\eula.rtf", lpFilePart=0x0) returned 0x53 [0113.633] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e50c) returned 1 [0113.633] CreateFileW (lpFileName="C:\\Windows\\Microsoft.NET\\Framework64\\v4.0.30319\\SetupCache\\v4.6.00081\\1046\\eula.rtf" (normalized: "c:\\windows\\microsoft.net\\framework64\\v4.0.30319\\setupcache\\v4.6.00081\\1046\\eula.rtf"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x178 [0113.635] GetFileType (hFile=0x178) returned 0x1 [0113.635] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e508) returned 1 [0113.635] GetFileType (hFile=0x178) returned 0x1 [0113.635] WriteFile (in: hFile=0x178, lpBuffer=0x6c17078*, nNumberOfBytesToWrite=0x21810, lpNumberOfBytesWritten=0x31e5c8, lpOverlapped=0x0 | out: lpBuffer=0x6c17078*, lpNumberOfBytesWritten=0x31e5c8*=0x21810, lpOverlapped=0x0) returned 1 [0113.638] GetFullPathNameW (in: lpFileName="C:\\Windows\\Microsoft.NET\\Framework64\\v4.0.30319\\SetupCache\\v4.6.00081\\1046\\eula.rtf", nBufferLength=0x105, lpBuffer=0x31e14c, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\Microsoft.NET\\Framework64\\v4.0.30319\\SetupCache\\v4.6.00081\\1046\\eula.rtf", lpFilePart=0x0) returned 0x53 [0113.638] GetFullPathNameW (in: lpFileName="C:\\Windows\\Microsoft.NET\\Framework64\\v4.0.30319\\SetupCache\\v4.6.00081\\1046\\eula.rtf", nBufferLength=0x105, lpBuffer=0x31e14c, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\Microsoft.NET\\Framework64\\v4.0.30319\\SetupCache\\v4.6.00081\\1046\\eula.rtf", lpFilePart=0x0) returned 0x53 [0113.638] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e5ac) returned 1 [0113.638] GetFileAttributesExW (in: lpFileName="C:\\Windows\\Microsoft.NET\\Framework64\\v4.0.30319\\SetupCache\\v4.6.00081\\1046\\eula.rtf" (normalized: "c:\\windows\\microsoft.net\\framework64\\v4.0.30319\\setupcache\\v4.6.00081\\1046\\eula.rtf"), fInfoLevelId=0x0, lpFileInformation=0x31e628 | out: lpFileInformation=0x31e628*(dwFileAttributes=0x820, ftCreationTime.dwLowDateTime=0xcd7cbf00, ftCreationTime.dwHighDateTime=0x1d09f02, ftLastAccessTime.dwLowDateTime=0x5922fbc0, ftLastAccessTime.dwHighDateTime=0x1d2e676, ftLastWriteTime.dwLowDateTime=0x272ae1c0, ftLastWriteTime.dwHighDateTime=0x1d6eb7f, nFileSizeHigh=0x0, nFileSizeLow=0x21810)) returned 1 [0113.638] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e5a8) returned 1 [0113.638] MoveFileW (lpExistingFileName="C:\\Windows\\Microsoft.NET\\Framework64\\v4.0.30319\\SetupCache\\v4.6.00081\\1046\\eula.rtf" (normalized: "c:\\windows\\microsoft.net\\framework64\\v4.0.30319\\setupcache\\v4.6.00081\\1046\\eula.rtf"), lpNewFileName="C:\\Windows\\Microsoft.NET\\Framework64\\v4.0.30319\\SetupCache\\v4.6.00081\\1046\\eula.rtf" (normalized: "c:\\windows\\microsoft.net\\framework64\\v4.0.30319\\setupcache\\v4.6.00081\\1046\\eula.rtf")) returned 1 [0113.638] GetFullPathNameW (in: lpFileName="C:\\Windows\\Microsoft.NET\\Framework64\\v4.0.30319\\SetupCache\\v4.6.00081\\1046\\LocalizedData.xml", nBufferLength=0x105, lpBuffer=0x31e02c, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\Microsoft.NET\\Framework64\\v4.0.30319\\SetupCache\\v4.6.00081\\1046\\LocalizedData.xml", lpFilePart=0x0) returned 0x5c [0113.638] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e520) returned 1 [0113.638] CreateFileW (lpFileName="C:\\Windows\\Microsoft.NET\\Framework64\\v4.0.30319\\SetupCache\\v4.6.00081\\1046\\LocalizedData.xml" (normalized: "c:\\windows\\microsoft.net\\framework64\\v4.0.30319\\setupcache\\v4.6.00081\\1046\\localizeddata.xml"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x178 [0113.638] GetFileType (hFile=0x178) returned 0x1 [0113.638] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e51c) returned 1 [0113.638] GetFileType (hFile=0x178) returned 0x1 [0113.638] GetFileSize (in: hFile=0x178, lpFileSizeHigh=0x31e628 | out: lpFileSizeHigh=0x31e628*=0x0) returned 0x14258 [0113.639] ReadFile (in: hFile=0x178, lpBuffer=0x2695368, nNumberOfBytesToRead=0x14258, lpNumberOfBytesRead=0x31e5d4, lpOverlapped=0x0 | out: lpBuffer=0x2695368*, lpNumberOfBytesRead=0x31e5d4*=0x14258, lpOverlapped=0x0) returned 1 [0113.662] GetFullPathNameW (in: lpFileName="C:\\Windows\\Microsoft.NET\\Framework64\\v4.0.30319\\SetupCache\\v4.6.00081\\1046\\LocalizedData.xml", nBufferLength=0x105, lpBuffer=0x31e018, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\Microsoft.NET\\Framework64\\v4.0.30319\\SetupCache\\v4.6.00081\\1046\\LocalizedData.xml", lpFilePart=0x0) returned 0x5c [0113.662] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e50c) returned 1 [0113.662] CreateFileW (lpFileName="C:\\Windows\\Microsoft.NET\\Framework64\\v4.0.30319\\SetupCache\\v4.6.00081\\1046\\LocalizedData.xml" (normalized: "c:\\windows\\microsoft.net\\framework64\\v4.0.30319\\setupcache\\v4.6.00081\\1046\\localizeddata.xml"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x178 [0113.663] GetFileType (hFile=0x178) returned 0x1 [0113.664] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e508) returned 1 [0113.664] GetFileType (hFile=0x178) returned 0x1 [0113.664] WriteFile (in: hFile=0x178, lpBuffer=0x271e880*, nNumberOfBytesToWrite=0x14260, lpNumberOfBytesWritten=0x31e5c8, lpOverlapped=0x0 | out: lpBuffer=0x271e880*, lpNumberOfBytesWritten=0x31e5c8*=0x14260, lpOverlapped=0x0) returned 1 [0113.665] GetFullPathNameW (in: lpFileName="C:\\Windows\\Microsoft.NET\\Framework64\\v4.0.30319\\SetupCache\\v4.6.00081\\1046\\LocalizedData.xml", nBufferLength=0x105, lpBuffer=0x31e14c, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\Microsoft.NET\\Framework64\\v4.0.30319\\SetupCache\\v4.6.00081\\1046\\LocalizedData.xml", lpFilePart=0x0) returned 0x5c [0113.665] GetFullPathNameW (in: lpFileName="C:\\Windows\\Microsoft.NET\\Framework64\\v4.0.30319\\SetupCache\\v4.6.00081\\1046\\LocalizedData.xml", nBufferLength=0x105, lpBuffer=0x31e14c, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\Microsoft.NET\\Framework64\\v4.0.30319\\SetupCache\\v4.6.00081\\1046\\LocalizedData.xml", lpFilePart=0x0) returned 0x5c [0113.666] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e5ac) returned 1 [0113.666] GetFileAttributesExW (in: lpFileName="C:\\Windows\\Microsoft.NET\\Framework64\\v4.0.30319\\SetupCache\\v4.6.00081\\1046\\LocalizedData.xml" (normalized: "c:\\windows\\microsoft.net\\framework64\\v4.0.30319\\setupcache\\v4.6.00081\\1046\\localizeddata.xml"), fInfoLevelId=0x0, lpFileInformation=0x31e628 | out: lpFileInformation=0x31e628*(dwFileAttributes=0x820, ftCreationTime.dwLowDateTime=0x29ab2a00, ftCreationTime.dwHighDateTime=0x1d0ab24, ftLastAccessTime.dwLowDateTime=0x5d5487e0, ftLastAccessTime.dwHighDateTime=0x1d2e676, ftLastWriteTime.dwLowDateTime=0x272fa480, ftLastWriteTime.dwHighDateTime=0x1d6eb7f, nFileSizeHigh=0x0, nFileSizeLow=0x14260)) returned 1 [0113.666] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e5a8) returned 1 [0113.666] MoveFileW (lpExistingFileName="C:\\Windows\\Microsoft.NET\\Framework64\\v4.0.30319\\SetupCache\\v4.6.00081\\1046\\LocalizedData.xml" (normalized: "c:\\windows\\microsoft.net\\framework64\\v4.0.30319\\setupcache\\v4.6.00081\\1046\\localizeddata.xml"), lpNewFileName="C:\\Windows\\Microsoft.NET\\Framework64\\v4.0.30319\\SetupCache\\v4.6.00081\\1046\\LocalizedData.xml" (normalized: "c:\\windows\\microsoft.net\\framework64\\v4.0.30319\\setupcache\\v4.6.00081\\1046\\localizeddata.xml")) returned 1 [0113.666] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e654) returned 1 [0113.666] GetFullPathNameW (in: lpFileName="C:\\Windows\\Microsoft.NET\\Framework64\\v4.0.30319\\SetupCache\\v4.6.00081\\1049", nBufferLength=0x105, lpBuffer=0x31e15c, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\Microsoft.NET\\Framework64\\v4.0.30319\\SetupCache\\v4.6.00081\\1049", lpFilePart=0x0) returned 0x4a [0113.666] GetFullPathNameW (in: lpFileName="C:\\Windows\\Microsoft.NET\\Framework64\\v4.0.30319\\SetupCache\\v4.6.00081\\1049\\", nBufferLength=0x105, lpBuffer=0x31e130, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\Microsoft.NET\\Framework64\\v4.0.30319\\SetupCache\\v4.6.00081\\1049\\", lpFilePart=0x0) returned 0x4b [0113.666] FindFirstFileW (in: lpFileName="C:\\Windows\\Microsoft.NET\\Framework64\\v4.0.30319\\SetupCache\\v4.6.00081\\1049\\*", lpFindFileData=0x31e37c | out: lpFindFileData=0x31e37c*(dwFileAttributes=0x810, ftCreationTime.dwLowDateTime=0x5922fbc0, ftCreationTime.dwHighDateTime=0x1d2e676, ftLastAccessTime.dwLowDateTime=0x5d56e940, ftLastAccessTime.dwHighDateTime=0x1d2e676, ftLastWriteTime.dwLowDateTime=0x5d56e940, ftLastWriteTime.dwHighDateTime=0x1d2e676, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x381cc0 [0113.666] FindNextFileW (in: hFindFile=0x381cc0, lpFindFileData=0x31e38c | out: lpFindFileData=0x31e38c*(dwFileAttributes=0x810, ftCreationTime.dwLowDateTime=0x5922fbc0, ftCreationTime.dwHighDateTime=0x1d2e676, ftLastAccessTime.dwLowDateTime=0x5d56e940, ftLastAccessTime.dwHighDateTime=0x1d2e676, ftLastWriteTime.dwLowDateTime=0x5d56e940, ftLastWriteTime.dwHighDateTime=0x1d2e676, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0113.667] FindNextFileW (in: hFindFile=0x381cc0, lpFindFileData=0x31e38c | out: lpFindFileData=0x31e38c*(dwFileAttributes=0x820, ftCreationTime.dwLowDateTime=0xcd7cbf00, ftCreationTime.dwHighDateTime=0x1d09f02, ftLastAccessTime.dwLowDateTime=0x5922fbc0, ftLastAccessTime.dwHighDateTime=0x1d2e676, ftLastWriteTime.dwLowDateTime=0xcd7cbf00, ftLastWriteTime.dwHighDateTime=0x1d09f02, nFileSizeHigh=0x0, nFileSizeLow=0x2e145, dwReserved0=0x0, dwReserved1=0x0, cFileName="eula.rtf", cAlternateFileName="")) returned 1 [0113.667] FindNextFileW (in: hFindFile=0x381cc0, lpFindFileData=0x31e38c | out: lpFindFileData=0x31e38c*(dwFileAttributes=0x820, ftCreationTime.dwLowDateTime=0x29ab2a00, ftCreationTime.dwHighDateTime=0x1d0ab24, ftLastAccessTime.dwLowDateTime=0x5d56e940, ftLastAccessTime.dwHighDateTime=0x1d2e676, ftLastWriteTime.dwLowDateTime=0x29ab2a00, ftLastWriteTime.dwHighDateTime=0x1d0ab24, nFileSizeHigh=0x0, nFileSizeLow=0x14892, dwReserved0=0x0, dwReserved1=0x0, cFileName="LocalizedData.xml", cAlternateFileName="LOCALI~1.XML")) returned 1 [0113.667] FindNextFileW (in: hFindFile=0x381cc0, lpFindFileData=0x31e38c | out: lpFindFileData=0x31e38c*(dwFileAttributes=0x820, ftCreationTime.dwLowDateTime=0x852ae700, ftCreationTime.dwHighDateTime=0x1d0ab27, ftLastAccessTime.dwLowDateTime=0x5d522680, ftLastAccessTime.dwHighDateTime=0x1d2e676, ftLastWriteTime.dwLowDateTime=0x852ae700, ftLastWriteTime.dwHighDateTime=0x1d0ab27, nFileSizeHigh=0x0, nFileSizeLow=0x7758, dwReserved0=0x0, dwReserved1=0x0, cFileName="SetupResources.dll", cAlternateFileName="SETUPR~1.DLL")) returned 1 [0113.667] FindNextFileW (in: hFindFile=0x381cc0, lpFindFileData=0x31e38c | out: lpFindFileData=0x31e38c*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0113.667] FindClose (in: hFindFile=0x381cc0 | out: hFindFile=0x381cc0) returned 1 [0113.667] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e614) returned 1 [0113.667] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e620) returned 1 [0113.667] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e654) returned 1 [0113.667] GetFullPathNameW (in: lpFileName="C:\\Windows\\Microsoft.NET\\Framework64\\v4.0.30319\\SetupCache\\v4.6.00081\\1049", nBufferLength=0x105, lpBuffer=0x31e15c, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\Microsoft.NET\\Framework64\\v4.0.30319\\SetupCache\\v4.6.00081\\1049", lpFilePart=0x0) returned 0x4a [0113.667] GetFullPathNameW (in: lpFileName="C:\\Windows\\Microsoft.NET\\Framework64\\v4.0.30319\\SetupCache\\v4.6.00081\\1049\\", nBufferLength=0x105, lpBuffer=0x31e130, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\Microsoft.NET\\Framework64\\v4.0.30319\\SetupCache\\v4.6.00081\\1049\\", lpFilePart=0x0) returned 0x4b [0113.667] FindFirstFileW (in: lpFileName="C:\\Windows\\Microsoft.NET\\Framework64\\v4.0.30319\\SetupCache\\v4.6.00081\\1049\\*", lpFindFileData=0x31e37c | out: lpFindFileData=0x31e37c*(dwFileAttributes=0x810, ftCreationTime.dwLowDateTime=0x5922fbc0, ftCreationTime.dwHighDateTime=0x1d2e676, ftLastAccessTime.dwLowDateTime=0x5d56e940, ftLastAccessTime.dwHighDateTime=0x1d2e676, ftLastWriteTime.dwLowDateTime=0x5d56e940, ftLastWriteTime.dwHighDateTime=0x1d2e676, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x381cc0 [0113.667] FindNextFileW (in: hFindFile=0x381cc0, lpFindFileData=0x31e38c | out: lpFindFileData=0x31e38c*(dwFileAttributes=0x810, ftCreationTime.dwLowDateTime=0x5922fbc0, ftCreationTime.dwHighDateTime=0x1d2e676, ftLastAccessTime.dwLowDateTime=0x5d56e940, ftLastAccessTime.dwHighDateTime=0x1d2e676, ftLastWriteTime.dwLowDateTime=0x5d56e940, ftLastWriteTime.dwHighDateTime=0x1d2e676, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0113.668] FindNextFileW (in: hFindFile=0x381cc0, lpFindFileData=0x31e38c | out: lpFindFileData=0x31e38c*(dwFileAttributes=0x820, ftCreationTime.dwLowDateTime=0xcd7cbf00, ftCreationTime.dwHighDateTime=0x1d09f02, ftLastAccessTime.dwLowDateTime=0x5922fbc0, ftLastAccessTime.dwHighDateTime=0x1d2e676, ftLastWriteTime.dwLowDateTime=0xcd7cbf00, ftLastWriteTime.dwHighDateTime=0x1d09f02, nFileSizeHigh=0x0, nFileSizeLow=0x2e145, dwReserved0=0x0, dwReserved1=0x0, cFileName="eula.rtf", cAlternateFileName="")) returned 1 [0113.668] FindNextFileW (in: hFindFile=0x381cc0, lpFindFileData=0x31e38c | out: lpFindFileData=0x31e38c*(dwFileAttributes=0x820, ftCreationTime.dwLowDateTime=0x29ab2a00, ftCreationTime.dwHighDateTime=0x1d0ab24, ftLastAccessTime.dwLowDateTime=0x5d56e940, ftLastAccessTime.dwHighDateTime=0x1d2e676, ftLastWriteTime.dwLowDateTime=0x29ab2a00, ftLastWriteTime.dwHighDateTime=0x1d0ab24, nFileSizeHigh=0x0, nFileSizeLow=0x14892, dwReserved0=0x0, dwReserved1=0x0, cFileName="LocalizedData.xml", cAlternateFileName="LOCALI~1.XML")) returned 1 [0113.668] FindNextFileW (in: hFindFile=0x381cc0, lpFindFileData=0x31e38c | out: lpFindFileData=0x31e38c*(dwFileAttributes=0x820, ftCreationTime.dwLowDateTime=0x852ae700, ftCreationTime.dwHighDateTime=0x1d0ab27, ftLastAccessTime.dwLowDateTime=0x5d522680, ftLastAccessTime.dwHighDateTime=0x1d2e676, ftLastWriteTime.dwLowDateTime=0x852ae700, ftLastWriteTime.dwHighDateTime=0x1d0ab27, nFileSizeHigh=0x0, nFileSizeLow=0x7758, dwReserved0=0x0, dwReserved1=0x0, cFileName="SetupResources.dll", cAlternateFileName="SETUPR~1.DLL")) returned 1 [0113.668] FindNextFileW (in: hFindFile=0x381cc0, lpFindFileData=0x31e38c | out: lpFindFileData=0x31e38c*(dwFileAttributes=0x820, ftCreationTime.dwLowDateTime=0x852ae700, ftCreationTime.dwHighDateTime=0x1d0ab27, ftLastAccessTime.dwLowDateTime=0x5d522680, ftLastAccessTime.dwHighDateTime=0x1d2e676, ftLastWriteTime.dwLowDateTime=0x852ae700, ftLastWriteTime.dwHighDateTime=0x1d0ab27, nFileSizeHigh=0x0, nFileSizeLow=0x7758, dwReserved0=0x0, dwReserved1=0x0, cFileName="SetupResources.dll", cAlternateFileName="SETUPR~1.DLL")) returned 0 [0113.668] FindClose (in: hFindFile=0x381cc0 | out: hFindFile=0x381cc0) returned 1 [0113.668] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e614) returned 1 [0113.668] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e620) returned 1 [0113.668] GetFullPathNameW (in: lpFileName="C:\\Windows\\Microsoft.NET\\Framework64\\v4.0.30319\\SetupCache\\v4.6.00081\\1049\\eula.rtf", nBufferLength=0x105, lpBuffer=0x31e02c, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\Microsoft.NET\\Framework64\\v4.0.30319\\SetupCache\\v4.6.00081\\1049\\eula.rtf", lpFilePart=0x0) returned 0x53 [0113.668] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e520) returned 1 [0113.668] CreateFileW (lpFileName="C:\\Windows\\Microsoft.NET\\Framework64\\v4.0.30319\\SetupCache\\v4.6.00081\\1049\\eula.rtf" (normalized: "c:\\windows\\microsoft.net\\framework64\\v4.0.30319\\setupcache\\v4.6.00081\\1049\\eula.rtf"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x178 [0113.669] GetFileType (hFile=0x178) returned 0x1 [0113.669] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e51c) returned 1 [0113.669] GetFileType (hFile=0x178) returned 0x1 [0113.669] GetFileSize (in: hFile=0x178, lpFileSizeHigh=0x31e628 | out: lpFileSizeHigh=0x31e628*=0x0) returned 0x2e145 [0113.669] ReadFile (in: hFile=0x178, lpBuffer=0x6c60d68, nNumberOfBytesToRead=0x2e145, lpNumberOfBytesRead=0x31e5d4, lpOverlapped=0x0 | out: lpBuffer=0x6c60d68*, lpNumberOfBytesRead=0x31e5d4*=0x2e145, lpOverlapped=0x0) returned 1 [0113.710] GetFullPathNameW (in: lpFileName="C:\\Windows\\Microsoft.NET\\Framework64\\v4.0.30319\\SetupCache\\v4.6.00081\\1049\\eula.rtf", nBufferLength=0x105, lpBuffer=0x31e018, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\Microsoft.NET\\Framework64\\v4.0.30319\\SetupCache\\v4.6.00081\\1049\\eula.rtf", lpFilePart=0x0) returned 0x53 [0113.710] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e50c) returned 1 [0113.710] CreateFileW (lpFileName="C:\\Windows\\Microsoft.NET\\Framework64\\v4.0.30319\\SetupCache\\v4.6.00081\\1049\\eula.rtf" (normalized: "c:\\windows\\microsoft.net\\framework64\\v4.0.30319\\setupcache\\v4.6.00081\\1049\\eula.rtf"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x178 [0113.712] GetFileType (hFile=0x178) returned 0x1 [0113.712] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e508) returned 1 [0113.712] GetFileType (hFile=0x178) returned 0x1 [0113.712] WriteFile (in: hFile=0x178, lpBuffer=0x6d47430*, nNumberOfBytesToWrite=0x2e150, lpNumberOfBytesWritten=0x31e5c8, lpOverlapped=0x0 | out: lpBuffer=0x6d47430*, lpNumberOfBytesWritten=0x31e5c8*=0x2e150, lpOverlapped=0x0) returned 1 [0113.715] GetFullPathNameW (in: lpFileName="C:\\Windows\\Microsoft.NET\\Framework64\\v4.0.30319\\SetupCache\\v4.6.00081\\1049\\eula.rtf", nBufferLength=0x105, lpBuffer=0x31e14c, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\Microsoft.NET\\Framework64\\v4.0.30319\\SetupCache\\v4.6.00081\\1049\\eula.rtf", lpFilePart=0x0) returned 0x53 [0113.715] GetFullPathNameW (in: lpFileName="C:\\Windows\\Microsoft.NET\\Framework64\\v4.0.30319\\SetupCache\\v4.6.00081\\1049\\eula.rtf", nBufferLength=0x105, lpBuffer=0x31e14c, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\Microsoft.NET\\Framework64\\v4.0.30319\\SetupCache\\v4.6.00081\\1049\\eula.rtf", lpFilePart=0x0) returned 0x53 [0113.715] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e5ac) returned 1 [0113.715] GetFileAttributesExW (in: lpFileName="C:\\Windows\\Microsoft.NET\\Framework64\\v4.0.30319\\SetupCache\\v4.6.00081\\1049\\eula.rtf" (normalized: "c:\\windows\\microsoft.net\\framework64\\v4.0.30319\\setupcache\\v4.6.00081\\1049\\eula.rtf"), fInfoLevelId=0x0, lpFileInformation=0x31e628 | out: lpFileInformation=0x31e628*(dwFileAttributes=0x820, ftCreationTime.dwLowDateTime=0xcd7cbf00, ftCreationTime.dwHighDateTime=0x1d09f02, ftLastAccessTime.dwLowDateTime=0x5922fbc0, ftLastAccessTime.dwHighDateTime=0x1d2e676, ftLastWriteTime.dwLowDateTime=0x2736c8a0, ftLastWriteTime.dwHighDateTime=0x1d6eb7f, nFileSizeHigh=0x0, nFileSizeLow=0x2e150)) returned 1 [0113.715] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e5a8) returned 1 [0113.715] MoveFileW (lpExistingFileName="C:\\Windows\\Microsoft.NET\\Framework64\\v4.0.30319\\SetupCache\\v4.6.00081\\1049\\eula.rtf" (normalized: "c:\\windows\\microsoft.net\\framework64\\v4.0.30319\\setupcache\\v4.6.00081\\1049\\eula.rtf"), lpNewFileName="C:\\Windows\\Microsoft.NET\\Framework64\\v4.0.30319\\SetupCache\\v4.6.00081\\1049\\eula.rtf" (normalized: "c:\\windows\\microsoft.net\\framework64\\v4.0.30319\\setupcache\\v4.6.00081\\1049\\eula.rtf")) returned 1 [0113.715] GetFullPathNameW (in: lpFileName="C:\\Windows\\Microsoft.NET\\Framework64\\v4.0.30319\\SetupCache\\v4.6.00081\\1049\\LocalizedData.xml", nBufferLength=0x105, lpBuffer=0x31e02c, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\Microsoft.NET\\Framework64\\v4.0.30319\\SetupCache\\v4.6.00081\\1049\\LocalizedData.xml", lpFilePart=0x0) returned 0x5c [0113.715] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e520) returned 1 [0113.715] CreateFileW (lpFileName="C:\\Windows\\Microsoft.NET\\Framework64\\v4.0.30319\\SetupCache\\v4.6.00081\\1049\\LocalizedData.xml" (normalized: "c:\\windows\\microsoft.net\\framework64\\v4.0.30319\\setupcache\\v4.6.00081\\1049\\localizeddata.xml"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x178 [0113.716] GetFileType (hFile=0x178) returned 0x1 [0113.716] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e51c) returned 1 [0113.716] GetFileType (hFile=0x178) returned 0x1 [0113.716] GetFileSize (in: hFile=0x178, lpFileSizeHigh=0x31e628 | out: lpFileSizeHigh=0x31e628*=0x0) returned 0x14892 [0113.716] ReadFile (in: hFile=0x178, lpBuffer=0x2782434, nNumberOfBytesToRead=0x14892, lpNumberOfBytesRead=0x31e5d4, lpOverlapped=0x0 | out: lpBuffer=0x2782434*, lpNumberOfBytesRead=0x31e5d4*=0x14892, lpOverlapped=0x0) returned 1 [0113.734] GetFullPathNameW (in: lpFileName="C:\\Windows\\Microsoft.NET\\Framework64\\v4.0.30319\\SetupCache\\v4.6.00081\\1049\\LocalizedData.xml", nBufferLength=0x105, lpBuffer=0x31e018, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\Microsoft.NET\\Framework64\\v4.0.30319\\SetupCache\\v4.6.00081\\1049\\LocalizedData.xml", lpFilePart=0x0) returned 0x5c [0113.734] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e50c) returned 1 [0113.735] CreateFileW (lpFileName="C:\\Windows\\Microsoft.NET\\Framework64\\v4.0.30319\\SetupCache\\v4.6.00081\\1049\\LocalizedData.xml" (normalized: "c:\\windows\\microsoft.net\\framework64\\v4.0.30319\\setupcache\\v4.6.00081\\1049\\localizeddata.xml"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x178 [0113.736] GetFileType (hFile=0x178) returned 0x1 [0113.736] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e508) returned 1 [0113.736] GetFileType (hFile=0x178) returned 0x1 [0113.736] WriteFile (in: hFile=0x178, lpBuffer=0x280cc10*, nNumberOfBytesToWrite=0x148a0, lpNumberOfBytesWritten=0x31e5c8, lpOverlapped=0x0 | out: lpBuffer=0x280cc10*, lpNumberOfBytesWritten=0x31e5c8*=0x148a0, lpOverlapped=0x0) returned 1 [0113.738] GetFullPathNameW (in: lpFileName="C:\\Windows\\Microsoft.NET\\Framework64\\v4.0.30319\\SetupCache\\v4.6.00081\\1049\\LocalizedData.xml", nBufferLength=0x105, lpBuffer=0x31e14c, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\Microsoft.NET\\Framework64\\v4.0.30319\\SetupCache\\v4.6.00081\\1049\\LocalizedData.xml", lpFilePart=0x0) returned 0x5c [0113.738] GetFullPathNameW (in: lpFileName="C:\\Windows\\Microsoft.NET\\Framework64\\v4.0.30319\\SetupCache\\v4.6.00081\\1049\\LocalizedData.xml", nBufferLength=0x105, lpBuffer=0x31e14c, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\Microsoft.NET\\Framework64\\v4.0.30319\\SetupCache\\v4.6.00081\\1049\\LocalizedData.xml", lpFilePart=0x0) returned 0x5c [0113.738] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e5ac) returned 1 [0113.738] GetFileAttributesExW (in: lpFileName="C:\\Windows\\Microsoft.NET\\Framework64\\v4.0.30319\\SetupCache\\v4.6.00081\\1049\\LocalizedData.xml" (normalized: "c:\\windows\\microsoft.net\\framework64\\v4.0.30319\\setupcache\\v4.6.00081\\1049\\localizeddata.xml"), fInfoLevelId=0x0, lpFileInformation=0x31e628 | out: lpFileInformation=0x31e628*(dwFileAttributes=0x820, ftCreationTime.dwLowDateTime=0x29ab2a00, ftCreationTime.dwHighDateTime=0x1d0ab24, ftLastAccessTime.dwLowDateTime=0x5d56e940, ftLastAccessTime.dwHighDateTime=0x1d2e676, ftLastWriteTime.dwLowDateTime=0x27392a00, ftLastWriteTime.dwHighDateTime=0x1d6eb7f, nFileSizeHigh=0x0, nFileSizeLow=0x148a0)) returned 1 [0113.738] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e5a8) returned 1 [0113.738] MoveFileW (lpExistingFileName="C:\\Windows\\Microsoft.NET\\Framework64\\v4.0.30319\\SetupCache\\v4.6.00081\\1049\\LocalizedData.xml" (normalized: "c:\\windows\\microsoft.net\\framework64\\v4.0.30319\\setupcache\\v4.6.00081\\1049\\localizeddata.xml"), lpNewFileName="C:\\Windows\\Microsoft.NET\\Framework64\\v4.0.30319\\SetupCache\\v4.6.00081\\1049\\LocalizedData.xml" (normalized: "c:\\windows\\microsoft.net\\framework64\\v4.0.30319\\setupcache\\v4.6.00081\\1049\\localizeddata.xml")) returned 1 [0113.738] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e654) returned 1 [0113.738] GetFullPathNameW (in: lpFileName="C:\\Windows\\Microsoft.NET\\Framework64\\v4.0.30319\\SetupCache\\v4.6.00081\\1053", nBufferLength=0x105, lpBuffer=0x31e15c, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\Microsoft.NET\\Framework64\\v4.0.30319\\SetupCache\\v4.6.00081\\1053", lpFilePart=0x0) returned 0x4a [0113.739] GetFullPathNameW (in: lpFileName="C:\\Windows\\Microsoft.NET\\Framework64\\v4.0.30319\\SetupCache\\v4.6.00081\\1053\\", nBufferLength=0x105, lpBuffer=0x31e130, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\Microsoft.NET\\Framework64\\v4.0.30319\\SetupCache\\v4.6.00081\\1053\\", lpFilePart=0x0) returned 0x4b [0113.739] FindFirstFileW (in: lpFileName="C:\\Windows\\Microsoft.NET\\Framework64\\v4.0.30319\\SetupCache\\v4.6.00081\\1053\\*", lpFindFileData=0x31e37c | out: lpFindFileData=0x31e37c*(dwFileAttributes=0x810, ftCreationTime.dwLowDateTime=0x5922fbc0, ftCreationTime.dwHighDateTime=0x1d2e676, ftLastAccessTime.dwLowDateTime=0x5d56e940, ftLastAccessTime.dwHighDateTime=0x1d2e676, ftLastWriteTime.dwLowDateTime=0x5d56e940, ftLastWriteTime.dwHighDateTime=0x1d2e676, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x381d40 [0113.739] FindNextFileW (in: hFindFile=0x381d40, lpFindFileData=0x31e38c | out: lpFindFileData=0x31e38c*(dwFileAttributes=0x810, ftCreationTime.dwLowDateTime=0x5922fbc0, ftCreationTime.dwHighDateTime=0x1d2e676, ftLastAccessTime.dwLowDateTime=0x5d56e940, ftLastAccessTime.dwHighDateTime=0x1d2e676, ftLastWriteTime.dwLowDateTime=0x5d56e940, ftLastWriteTime.dwHighDateTime=0x1d2e676, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0113.739] FindNextFileW (in: hFindFile=0x381d40, lpFindFileData=0x31e38c | out: lpFindFileData=0x31e38c*(dwFileAttributes=0x820, ftCreationTime.dwLowDateTime=0xcd7cbf00, ftCreationTime.dwHighDateTime=0x1d09f02, ftLastAccessTime.dwLowDateTime=0x5922fbc0, ftLastAccessTime.dwHighDateTime=0x1d2e676, ftLastWriteTime.dwLowDateTime=0xcd7cbf00, ftLastWriteTime.dwHighDateTime=0x1d09f02, nFileSizeHigh=0x0, nFileSizeLow=0x246f4, dwReserved0=0x0, dwReserved1=0x0, cFileName="eula.rtf", cAlternateFileName="")) returned 1 [0113.739] FindNextFileW (in: hFindFile=0x381d40, lpFindFileData=0x31e38c | out: lpFindFileData=0x31e38c*(dwFileAttributes=0x820, ftCreationTime.dwLowDateTime=0x29ab2a00, ftCreationTime.dwHighDateTime=0x1d0ab24, ftLastAccessTime.dwLowDateTime=0x5d56e940, ftLastAccessTime.dwHighDateTime=0x1d2e676, ftLastWriteTime.dwLowDateTime=0x29ab2a00, ftLastWriteTime.dwHighDateTime=0x1d0ab24, nFileSizeHigh=0x0, nFileSizeLow=0x13e0a, dwReserved0=0x0, dwReserved1=0x0, cFileName="LocalizedData.xml", cAlternateFileName="LOCALI~1.XML")) returned 1 [0113.739] FindNextFileW (in: hFindFile=0x381d40, lpFindFileData=0x31e38c | out: lpFindFileData=0x31e38c*(dwFileAttributes=0x820, ftCreationTime.dwLowDateTime=0x852ae700, ftCreationTime.dwHighDateTime=0x1d0ab27, ftLastAccessTime.dwLowDateTime=0x5d522680, ftLastAccessTime.dwHighDateTime=0x1d2e676, ftLastWriteTime.dwLowDateTime=0x852ae700, ftLastWriteTime.dwHighDateTime=0x1d0ab27, nFileSizeHigh=0x0, nFileSizeLow=0x7358, dwReserved0=0x0, dwReserved1=0x0, cFileName="SetupResources.dll", cAlternateFileName="SETUPR~1.DLL")) returned 1 [0113.739] FindNextFileW (in: hFindFile=0x381d40, lpFindFileData=0x31e38c | out: lpFindFileData=0x31e38c*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0113.739] FindClose (in: hFindFile=0x381d40 | out: hFindFile=0x381d40) returned 1 [0113.740] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e614) returned 1 [0113.740] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e620) returned 1 [0113.740] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e654) returned 1 [0113.740] GetFullPathNameW (in: lpFileName="C:\\Windows\\Microsoft.NET\\Framework64\\v4.0.30319\\SetupCache\\v4.6.00081\\1053", nBufferLength=0x105, lpBuffer=0x31e15c, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\Microsoft.NET\\Framework64\\v4.0.30319\\SetupCache\\v4.6.00081\\1053", lpFilePart=0x0) returned 0x4a [0113.740] GetFullPathNameW (in: lpFileName="C:\\Windows\\Microsoft.NET\\Framework64\\v4.0.30319\\SetupCache\\v4.6.00081\\1053\\", nBufferLength=0x105, lpBuffer=0x31e130, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\Microsoft.NET\\Framework64\\v4.0.30319\\SetupCache\\v4.6.00081\\1053\\", lpFilePart=0x0) returned 0x4b [0113.740] FindFirstFileW (in: lpFileName="C:\\Windows\\Microsoft.NET\\Framework64\\v4.0.30319\\SetupCache\\v4.6.00081\\1053\\*", lpFindFileData=0x31e37c | out: lpFindFileData=0x31e37c*(dwFileAttributes=0x810, ftCreationTime.dwLowDateTime=0x5922fbc0, ftCreationTime.dwHighDateTime=0x1d2e676, ftLastAccessTime.dwLowDateTime=0x5d56e940, ftLastAccessTime.dwHighDateTime=0x1d2e676, ftLastWriteTime.dwLowDateTime=0x5d56e940, ftLastWriteTime.dwHighDateTime=0x1d2e676, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x381d40 [0113.740] FindNextFileW (in: hFindFile=0x381d40, lpFindFileData=0x31e38c | out: lpFindFileData=0x31e38c*(dwFileAttributes=0x810, ftCreationTime.dwLowDateTime=0x5922fbc0, ftCreationTime.dwHighDateTime=0x1d2e676, ftLastAccessTime.dwLowDateTime=0x5d56e940, ftLastAccessTime.dwHighDateTime=0x1d2e676, ftLastWriteTime.dwLowDateTime=0x5d56e940, ftLastWriteTime.dwHighDateTime=0x1d2e676, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0113.740] FindNextFileW (in: hFindFile=0x381d40, lpFindFileData=0x31e38c | out: lpFindFileData=0x31e38c*(dwFileAttributes=0x820, ftCreationTime.dwLowDateTime=0xcd7cbf00, ftCreationTime.dwHighDateTime=0x1d09f02, ftLastAccessTime.dwLowDateTime=0x5922fbc0, ftLastAccessTime.dwHighDateTime=0x1d2e676, ftLastWriteTime.dwLowDateTime=0xcd7cbf00, ftLastWriteTime.dwHighDateTime=0x1d09f02, nFileSizeHigh=0x0, nFileSizeLow=0x246f4, dwReserved0=0x0, dwReserved1=0x0, cFileName="eula.rtf", cAlternateFileName="")) returned 1 [0113.740] FindNextFileW (in: hFindFile=0x381d40, lpFindFileData=0x31e38c | out: lpFindFileData=0x31e38c*(dwFileAttributes=0x820, ftCreationTime.dwLowDateTime=0x29ab2a00, ftCreationTime.dwHighDateTime=0x1d0ab24, ftLastAccessTime.dwLowDateTime=0x5d56e940, ftLastAccessTime.dwHighDateTime=0x1d2e676, ftLastWriteTime.dwLowDateTime=0x29ab2a00, ftLastWriteTime.dwHighDateTime=0x1d0ab24, nFileSizeHigh=0x0, nFileSizeLow=0x13e0a, dwReserved0=0x0, dwReserved1=0x0, cFileName="LocalizedData.xml", cAlternateFileName="LOCALI~1.XML")) returned 1 [0113.741] FindNextFileW (in: hFindFile=0x381d40, lpFindFileData=0x31e38c | out: lpFindFileData=0x31e38c*(dwFileAttributes=0x820, ftCreationTime.dwLowDateTime=0x852ae700, ftCreationTime.dwHighDateTime=0x1d0ab27, ftLastAccessTime.dwLowDateTime=0x5d522680, ftLastAccessTime.dwHighDateTime=0x1d2e676, ftLastWriteTime.dwLowDateTime=0x852ae700, ftLastWriteTime.dwHighDateTime=0x1d0ab27, nFileSizeHigh=0x0, nFileSizeLow=0x7358, dwReserved0=0x0, dwReserved1=0x0, cFileName="SetupResources.dll", cAlternateFileName="SETUPR~1.DLL")) returned 1 [0113.741] FindNextFileW (in: hFindFile=0x381d40, lpFindFileData=0x31e38c | out: lpFindFileData=0x31e38c*(dwFileAttributes=0x820, ftCreationTime.dwLowDateTime=0x852ae700, ftCreationTime.dwHighDateTime=0x1d0ab27, ftLastAccessTime.dwLowDateTime=0x5d522680, ftLastAccessTime.dwHighDateTime=0x1d2e676, ftLastWriteTime.dwLowDateTime=0x852ae700, ftLastWriteTime.dwHighDateTime=0x1d0ab27, nFileSizeHigh=0x0, nFileSizeLow=0x7358, dwReserved0=0x0, dwReserved1=0x0, cFileName="SetupResources.dll", cAlternateFileName="SETUPR~1.DLL")) returned 0 [0113.741] FindClose (in: hFindFile=0x381d40 | out: hFindFile=0x381d40) returned 1 [0113.741] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e614) returned 1 [0113.741] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e620) returned 1 [0113.741] GetFullPathNameW (in: lpFileName="C:\\Windows\\Microsoft.NET\\Framework64\\v4.0.30319\\SetupCache\\v4.6.00081\\1053\\eula.rtf", nBufferLength=0x105, lpBuffer=0x31e02c, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\Microsoft.NET\\Framework64\\v4.0.30319\\SetupCache\\v4.6.00081\\1053\\eula.rtf", lpFilePart=0x0) returned 0x53 [0113.741] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e520) returned 1 [0113.741] CreateFileW (lpFileName="C:\\Windows\\Microsoft.NET\\Framework64\\v4.0.30319\\SetupCache\\v4.6.00081\\1053\\eula.rtf" (normalized: "c:\\windows\\microsoft.net\\framework64\\v4.0.30319\\setupcache\\v4.6.00081\\1053\\eula.rtf"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x178 [0113.741] GetFileType (hFile=0x178) returned 0x1 [0113.741] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e51c) returned 1 [0113.741] GetFileType (hFile=0x178) returned 0x1 [0113.741] GetFileSize (in: hFile=0x178, lpFileSizeHigh=0x31e628 | out: lpFileSizeHigh=0x31e628*=0x0) returned 0x246f4 [0113.741] ReadFile (in: hFile=0x178, lpBuffer=0x6d9e6e0, nNumberOfBytesToRead=0x246f4, lpNumberOfBytesRead=0x31e5d4, lpOverlapped=0x0 | out: lpBuffer=0x6d9e6e0*, lpNumberOfBytesRead=0x31e5d4*=0x246f4, lpOverlapped=0x0) returned 1 [0113.790] GetFullPathNameW (in: lpFileName="C:\\Windows\\Microsoft.NET\\Framework64\\v4.0.30319\\SetupCache\\v4.6.00081\\1053\\eula.rtf", nBufferLength=0x105, lpBuffer=0x31e018, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\Microsoft.NET\\Framework64\\v4.0.30319\\SetupCache\\v4.6.00081\\1053\\eula.rtf", lpFilePart=0x0) returned 0x53 [0113.790] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e50c) returned 1 [0113.790] CreateFileW (lpFileName="C:\\Windows\\Microsoft.NET\\Framework64\\v4.0.30319\\SetupCache\\v4.6.00081\\1053\\eula.rtf" (normalized: "c:\\windows\\microsoft.net\\framework64\\v4.0.30319\\setupcache\\v4.6.00081\\1053\\eula.rtf"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x178 [0113.792] GetFileType (hFile=0x178) returned 0x1 [0113.792] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e508) returned 1 [0113.792] GetFileType (hFile=0x178) returned 0x1 [0113.792] WriteFile (in: hFile=0x178, lpBuffer=0x36dac50*, nNumberOfBytesToWrite=0x24700, lpNumberOfBytesWritten=0x31e5c8, lpOverlapped=0x0 | out: lpBuffer=0x36dac50*, lpNumberOfBytesWritten=0x31e5c8*=0x24700, lpOverlapped=0x0) returned 1 [0113.795] GetFullPathNameW (in: lpFileName="C:\\Windows\\Microsoft.NET\\Framework64\\v4.0.30319\\SetupCache\\v4.6.00081\\1053\\eula.rtf", nBufferLength=0x105, lpBuffer=0x31e14c, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\Microsoft.NET\\Framework64\\v4.0.30319\\SetupCache\\v4.6.00081\\1053\\eula.rtf", lpFilePart=0x0) returned 0x53 [0113.795] GetFullPathNameW (in: lpFileName="C:\\Windows\\Microsoft.NET\\Framework64\\v4.0.30319\\SetupCache\\v4.6.00081\\1053\\eula.rtf", nBufferLength=0x105, lpBuffer=0x31e14c, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\Microsoft.NET\\Framework64\\v4.0.30319\\SetupCache\\v4.6.00081\\1053\\eula.rtf", lpFilePart=0x0) returned 0x53 [0113.795] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e5ac) returned 1 [0113.795] GetFileAttributesExW (in: lpFileName="C:\\Windows\\Microsoft.NET\\Framework64\\v4.0.30319\\SetupCache\\v4.6.00081\\1053\\eula.rtf" (normalized: "c:\\windows\\microsoft.net\\framework64\\v4.0.30319\\setupcache\\v4.6.00081\\1053\\eula.rtf"), fInfoLevelId=0x0, lpFileInformation=0x31e628 | out: lpFileInformation=0x31e628*(dwFileAttributes=0x820, ftCreationTime.dwLowDateTime=0xcd7cbf00, ftCreationTime.dwHighDateTime=0x1d09f02, ftLastAccessTime.dwLowDateTime=0x5922fbc0, ftLastAccessTime.dwHighDateTime=0x1d2e676, ftLastWriteTime.dwLowDateTime=0x2742af80, ftLastWriteTime.dwHighDateTime=0x1d6eb7f, nFileSizeHigh=0x0, nFileSizeLow=0x24700)) returned 1 [0113.795] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e5a8) returned 1 [0113.795] MoveFileW (lpExistingFileName="C:\\Windows\\Microsoft.NET\\Framework64\\v4.0.30319\\SetupCache\\v4.6.00081\\1053\\eula.rtf" (normalized: "c:\\windows\\microsoft.net\\framework64\\v4.0.30319\\setupcache\\v4.6.00081\\1053\\eula.rtf"), lpNewFileName="C:\\Windows\\Microsoft.NET\\Framework64\\v4.0.30319\\SetupCache\\v4.6.00081\\1053\\eula.rtf" (normalized: "c:\\windows\\microsoft.net\\framework64\\v4.0.30319\\setupcache\\v4.6.00081\\1053\\eula.rtf")) returned 1 [0113.795] GetFullPathNameW (in: lpFileName="C:\\Windows\\Microsoft.NET\\Framework64\\v4.0.30319\\SetupCache\\v4.6.00081\\1053\\LocalizedData.xml", nBufferLength=0x105, lpBuffer=0x31e02c, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\Microsoft.NET\\Framework64\\v4.0.30319\\SetupCache\\v4.6.00081\\1053\\LocalizedData.xml", lpFilePart=0x0) returned 0x5c [0113.795] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e520) returned 1 [0113.795] CreateFileW (lpFileName="C:\\Windows\\Microsoft.NET\\Framework64\\v4.0.30319\\SetupCache\\v4.6.00081\\1053\\LocalizedData.xml" (normalized: "c:\\windows\\microsoft.net\\framework64\\v4.0.30319\\setupcache\\v4.6.00081\\1053\\localizeddata.xml"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x178 [0113.796] GetFileType (hFile=0x178) returned 0x1 [0113.796] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e51c) returned 1 [0113.796] GetFileType (hFile=0x178) returned 0x1 [0113.796] GetFileSize (in: hFile=0x178, lpFileSizeHigh=0x31e628 | out: lpFileSizeHigh=0x31e628*=0x0) returned 0x13e0a [0113.796] ReadFile (in: hFile=0x178, lpBuffer=0x2670e00, nNumberOfBytesToRead=0x13e0a, lpNumberOfBytesRead=0x31e5d4, lpOverlapped=0x0 | out: lpBuffer=0x2670e00*, lpNumberOfBytesRead=0x31e5d4*=0x13e0a, lpOverlapped=0x0) returned 1 [0113.846] GetFullPathNameW (in: lpFileName="C:\\Windows\\Microsoft.NET\\Framework64\\v4.0.30319\\SetupCache\\v4.6.00081\\1053\\LocalizedData.xml", nBufferLength=0x105, lpBuffer=0x31e018, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\Microsoft.NET\\Framework64\\v4.0.30319\\SetupCache\\v4.6.00081\\1053\\LocalizedData.xml", lpFilePart=0x0) returned 0x5c [0113.846] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e50c) returned 1 [0113.846] CreateFileW (lpFileName="C:\\Windows\\Microsoft.NET\\Framework64\\v4.0.30319\\SetupCache\\v4.6.00081\\1053\\LocalizedData.xml" (normalized: "c:\\windows\\microsoft.net\\framework64\\v4.0.30319\\setupcache\\v4.6.00081\\1053\\localizeddata.xml"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x178 [0113.847] GetFileType (hFile=0x178) returned 0x1 [0113.847] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e508) returned 1 [0113.847] GetFileType (hFile=0x178) returned 0x1 [0113.847] WriteFile (in: hFile=0x178, lpBuffer=0x26652d4*, nNumberOfBytesToWrite=0x13e10, lpNumberOfBytesWritten=0x31e5c8, lpOverlapped=0x0 | out: lpBuffer=0x26652d4*, lpNumberOfBytesWritten=0x31e5c8*=0x13e10, lpOverlapped=0x0) returned 1 [0113.849] GetFullPathNameW (in: lpFileName="C:\\Windows\\Microsoft.NET\\Framework64\\v4.0.30319\\SetupCache\\v4.6.00081\\1053\\LocalizedData.xml", nBufferLength=0x105, lpBuffer=0x31e14c, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\Microsoft.NET\\Framework64\\v4.0.30319\\SetupCache\\v4.6.00081\\1053\\LocalizedData.xml", lpFilePart=0x0) returned 0x5c [0113.849] GetFullPathNameW (in: lpFileName="C:\\Windows\\Microsoft.NET\\Framework64\\v4.0.30319\\SetupCache\\v4.6.00081\\1053\\LocalizedData.xml", nBufferLength=0x105, lpBuffer=0x31e14c, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\Microsoft.NET\\Framework64\\v4.0.30319\\SetupCache\\v4.6.00081\\1053\\LocalizedData.xml", lpFilePart=0x0) returned 0x5c [0113.850] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e5ac) returned 1 [0113.850] GetFileAttributesExW (in: lpFileName="C:\\Windows\\Microsoft.NET\\Framework64\\v4.0.30319\\SetupCache\\v4.6.00081\\1053\\LocalizedData.xml" (normalized: "c:\\windows\\microsoft.net\\framework64\\v4.0.30319\\setupcache\\v4.6.00081\\1053\\localizeddata.xml"), fInfoLevelId=0x0, lpFileInformation=0x31e628 | out: lpFileInformation=0x31e628*(dwFileAttributes=0x820, ftCreationTime.dwLowDateTime=0x29ab2a00, ftCreationTime.dwHighDateTime=0x1d0ab24, ftLastAccessTime.dwLowDateTime=0x5d56e940, ftLastAccessTime.dwHighDateTime=0x1d2e676, ftLastWriteTime.dwLowDateTime=0x274c3500, ftLastWriteTime.dwHighDateTime=0x1d6eb7f, nFileSizeHigh=0x0, nFileSizeLow=0x13e10)) returned 1 [0113.850] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e5a8) returned 1 [0113.850] MoveFileW (lpExistingFileName="C:\\Windows\\Microsoft.NET\\Framework64\\v4.0.30319\\SetupCache\\v4.6.00081\\1053\\LocalizedData.xml" (normalized: "c:\\windows\\microsoft.net\\framework64\\v4.0.30319\\setupcache\\v4.6.00081\\1053\\localizeddata.xml"), lpNewFileName="C:\\Windows\\Microsoft.NET\\Framework64\\v4.0.30319\\SetupCache\\v4.6.00081\\1053\\LocalizedData.xml" (normalized: "c:\\windows\\microsoft.net\\framework64\\v4.0.30319\\setupcache\\v4.6.00081\\1053\\localizeddata.xml")) returned 1 [0113.850] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e654) returned 1 [0113.850] GetFullPathNameW (in: lpFileName="C:\\Windows\\Microsoft.NET\\Framework64\\v4.0.30319\\SetupCache\\v4.6.00081\\1055", nBufferLength=0x105, lpBuffer=0x31e15c, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\Microsoft.NET\\Framework64\\v4.0.30319\\SetupCache\\v4.6.00081\\1055", lpFilePart=0x0) returned 0x4a [0113.850] GetFullPathNameW (in: lpFileName="C:\\Windows\\Microsoft.NET\\Framework64\\v4.0.30319\\SetupCache\\v4.6.00081\\1055\\", nBufferLength=0x105, lpBuffer=0x31e130, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\Microsoft.NET\\Framework64\\v4.0.30319\\SetupCache\\v4.6.00081\\1055\\", lpFilePart=0x0) returned 0x4b [0113.850] FindFirstFileW (in: lpFileName="C:\\Windows\\Microsoft.NET\\Framework64\\v4.0.30319\\SetupCache\\v4.6.00081\\1055\\*", lpFindFileData=0x31e37c | out: lpFindFileData=0x31e37c*(dwFileAttributes=0x810, ftCreationTime.dwLowDateTime=0x5922fbc0, ftCreationTime.dwHighDateTime=0x1d2e676, ftLastAccessTime.dwLowDateTime=0x5d56e940, ftLastAccessTime.dwHighDateTime=0x1d2e676, ftLastWriteTime.dwLowDateTime=0x5d56e940, ftLastWriteTime.dwHighDateTime=0x1d2e676, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x381d40 [0113.851] FindNextFileW (in: hFindFile=0x381d40, lpFindFileData=0x31e38c | out: lpFindFileData=0x31e38c*(dwFileAttributes=0x810, ftCreationTime.dwLowDateTime=0x5922fbc0, ftCreationTime.dwHighDateTime=0x1d2e676, ftLastAccessTime.dwLowDateTime=0x5d56e940, ftLastAccessTime.dwHighDateTime=0x1d2e676, ftLastWriteTime.dwLowDateTime=0x5d56e940, ftLastWriteTime.dwHighDateTime=0x1d2e676, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0113.851] FindNextFileW (in: hFindFile=0x381d40, lpFindFileData=0x31e38c | out: lpFindFileData=0x31e38c*(dwFileAttributes=0x820, ftCreationTime.dwLowDateTime=0xcd7cbf00, ftCreationTime.dwHighDateTime=0x1d09f02, ftLastAccessTime.dwLowDateTime=0x5922fbc0, ftLastAccessTime.dwHighDateTime=0x1d2e676, ftLastWriteTime.dwLowDateTime=0xcd7cbf00, ftLastWriteTime.dwHighDateTime=0x1d09f02, nFileSizeHigh=0x0, nFileSizeLow=0x2238b, dwReserved0=0x0, dwReserved1=0x0, cFileName="eula.rtf", cAlternateFileName="")) returned 1 [0113.851] FindNextFileW (in: hFindFile=0x381d40, lpFindFileData=0x31e38c | out: lpFindFileData=0x31e38c*(dwFileAttributes=0x820, ftCreationTime.dwLowDateTime=0x29ab2a00, ftCreationTime.dwHighDateTime=0x1d0ab24, ftLastAccessTime.dwLowDateTime=0x5d56e940, ftLastAccessTime.dwHighDateTime=0x1d2e676, ftLastWriteTime.dwLowDateTime=0x29ab2a00, ftLastWriteTime.dwHighDateTime=0x1d0ab24, nFileSizeHigh=0x0, nFileSizeLow=0x13dec, dwReserved0=0x0, dwReserved1=0x0, cFileName="LocalizedData.xml", cAlternateFileName="LOCALI~1.XML")) returned 1 [0113.851] FindNextFileW (in: hFindFile=0x381d40, lpFindFileData=0x31e38c | out: lpFindFileData=0x31e38c*(dwFileAttributes=0x820, ftCreationTime.dwLowDateTime=0x852ae700, ftCreationTime.dwHighDateTime=0x1d0ab27, ftLastAccessTime.dwLowDateTime=0x5d522680, ftLastAccessTime.dwHighDateTime=0x1d2e676, ftLastWriteTime.dwLowDateTime=0x852ae700, ftLastWriteTime.dwHighDateTime=0x1d0ab27, nFileSizeHigh=0x0, nFileSizeLow=0x7550, dwReserved0=0x0, dwReserved1=0x0, cFileName="SetupResources.dll", cAlternateFileName="SETUPR~1.DLL")) returned 1 [0113.851] FindNextFileW (in: hFindFile=0x381d40, lpFindFileData=0x31e38c | out: lpFindFileData=0x31e38c*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0113.851] FindClose (in: hFindFile=0x381d40 | out: hFindFile=0x381d40) returned 1 [0113.851] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e614) returned 1 [0113.851] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e620) returned 1 [0113.851] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e654) returned 1 [0113.852] GetFullPathNameW (in: lpFileName="C:\\Windows\\Microsoft.NET\\Framework64\\v4.0.30319\\SetupCache\\v4.6.00081\\1055", nBufferLength=0x105, lpBuffer=0x31e15c, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\Microsoft.NET\\Framework64\\v4.0.30319\\SetupCache\\v4.6.00081\\1055", lpFilePart=0x0) returned 0x4a [0113.852] GetFullPathNameW (in: lpFileName="C:\\Windows\\Microsoft.NET\\Framework64\\v4.0.30319\\SetupCache\\v4.6.00081\\1055\\", nBufferLength=0x105, lpBuffer=0x31e130, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\Microsoft.NET\\Framework64\\v4.0.30319\\SetupCache\\v4.6.00081\\1055\\", lpFilePart=0x0) returned 0x4b [0113.852] FindFirstFileW (in: lpFileName="C:\\Windows\\Microsoft.NET\\Framework64\\v4.0.30319\\SetupCache\\v4.6.00081\\1055\\*", lpFindFileData=0x31e37c | out: lpFindFileData=0x31e37c*(dwFileAttributes=0x810, ftCreationTime.dwLowDateTime=0x5922fbc0, ftCreationTime.dwHighDateTime=0x1d2e676, ftLastAccessTime.dwLowDateTime=0x5d56e940, ftLastAccessTime.dwHighDateTime=0x1d2e676, ftLastWriteTime.dwLowDateTime=0x5d56e940, ftLastWriteTime.dwHighDateTime=0x1d2e676, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x381d40 [0113.852] FindNextFileW (in: hFindFile=0x381d40, lpFindFileData=0x31e38c | out: lpFindFileData=0x31e38c*(dwFileAttributes=0x810, ftCreationTime.dwLowDateTime=0x5922fbc0, ftCreationTime.dwHighDateTime=0x1d2e676, ftLastAccessTime.dwLowDateTime=0x5d56e940, ftLastAccessTime.dwHighDateTime=0x1d2e676, ftLastWriteTime.dwLowDateTime=0x5d56e940, ftLastWriteTime.dwHighDateTime=0x1d2e676, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0113.852] FindNextFileW (in: hFindFile=0x381d40, lpFindFileData=0x31e38c | out: lpFindFileData=0x31e38c*(dwFileAttributes=0x820, ftCreationTime.dwLowDateTime=0xcd7cbf00, ftCreationTime.dwHighDateTime=0x1d09f02, ftLastAccessTime.dwLowDateTime=0x5922fbc0, ftLastAccessTime.dwHighDateTime=0x1d2e676, ftLastWriteTime.dwLowDateTime=0xcd7cbf00, ftLastWriteTime.dwHighDateTime=0x1d09f02, nFileSizeHigh=0x0, nFileSizeLow=0x2238b, dwReserved0=0x0, dwReserved1=0x0, cFileName="eula.rtf", cAlternateFileName="")) returned 1 [0113.852] FindNextFileW (in: hFindFile=0x381d40, lpFindFileData=0x31e38c | out: lpFindFileData=0x31e38c*(dwFileAttributes=0x820, ftCreationTime.dwLowDateTime=0x29ab2a00, ftCreationTime.dwHighDateTime=0x1d0ab24, ftLastAccessTime.dwLowDateTime=0x5d56e940, ftLastAccessTime.dwHighDateTime=0x1d2e676, ftLastWriteTime.dwLowDateTime=0x29ab2a00, ftLastWriteTime.dwHighDateTime=0x1d0ab24, nFileSizeHigh=0x0, nFileSizeLow=0x13dec, dwReserved0=0x0, dwReserved1=0x0, cFileName="LocalizedData.xml", cAlternateFileName="LOCALI~1.XML")) returned 1 [0113.852] FindNextFileW (in: hFindFile=0x381d40, lpFindFileData=0x31e38c | out: lpFindFileData=0x31e38c*(dwFileAttributes=0x820, ftCreationTime.dwLowDateTime=0x852ae700, ftCreationTime.dwHighDateTime=0x1d0ab27, ftLastAccessTime.dwLowDateTime=0x5d522680, ftLastAccessTime.dwHighDateTime=0x1d2e676, ftLastWriteTime.dwLowDateTime=0x852ae700, ftLastWriteTime.dwHighDateTime=0x1d0ab27, nFileSizeHigh=0x0, nFileSizeLow=0x7550, dwReserved0=0x0, dwReserved1=0x0, cFileName="SetupResources.dll", cAlternateFileName="SETUPR~1.DLL")) returned 1 [0113.852] FindNextFileW (in: hFindFile=0x381d40, lpFindFileData=0x31e38c | out: lpFindFileData=0x31e38c*(dwFileAttributes=0x820, ftCreationTime.dwLowDateTime=0x852ae700, ftCreationTime.dwHighDateTime=0x1d0ab27, ftLastAccessTime.dwLowDateTime=0x5d522680, ftLastAccessTime.dwHighDateTime=0x1d2e676, ftLastWriteTime.dwLowDateTime=0x852ae700, ftLastWriteTime.dwHighDateTime=0x1d0ab27, nFileSizeHigh=0x0, nFileSizeLow=0x7550, dwReserved0=0x0, dwReserved1=0x0, cFileName="SetupResources.dll", cAlternateFileName="SETUPR~1.DLL")) returned 0 [0113.853] FindClose (in: hFindFile=0x381d40 | out: hFindFile=0x381d40) returned 1 [0113.853] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e614) returned 1 [0113.853] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e620) returned 1 [0113.853] GetFullPathNameW (in: lpFileName="C:\\Windows\\Microsoft.NET\\Framework64\\v4.0.30319\\SetupCache\\v4.6.00081\\1055\\eula.rtf", nBufferLength=0x105, lpBuffer=0x31e02c, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\Microsoft.NET\\Framework64\\v4.0.30319\\SetupCache\\v4.6.00081\\1055\\eula.rtf", lpFilePart=0x0) returned 0x53 [0113.853] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e520) returned 1 [0113.853] CreateFileW (lpFileName="C:\\Windows\\Microsoft.NET\\Framework64\\v4.0.30319\\SetupCache\\v4.6.00081\\1055\\eula.rtf" (normalized: "c:\\windows\\microsoft.net\\framework64\\v4.0.30319\\setupcache\\v4.6.00081\\1055\\eula.rtf"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x178 [0113.853] GetFileType (hFile=0x178) returned 0x1 [0113.854] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e51c) returned 1 [0113.854] GetFileType (hFile=0x178) returned 0x1 [0113.854] GetFileSize (in: hFile=0x178, lpFileSizeHigh=0x31e628 | out: lpFileSizeHigh=0x31e628*=0x0) returned 0x2238b [0113.854] ReadFile (in: hFile=0x178, lpBuffer=0x36410d0, nNumberOfBytesToRead=0x2238b, lpNumberOfBytesRead=0x31e5d4, lpOverlapped=0x0 | out: lpBuffer=0x36410d0*, lpNumberOfBytesRead=0x31e5d4*=0x2238b, lpOverlapped=0x0) returned 1 [0113.892] GetFullPathNameW (in: lpFileName="C:\\Windows\\Microsoft.NET\\Framework64\\v4.0.30319\\SetupCache\\v4.6.00081\\1055\\eula.rtf", nBufferLength=0x105, lpBuffer=0x31e018, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\Microsoft.NET\\Framework64\\v4.0.30319\\SetupCache\\v4.6.00081\\1055\\eula.rtf", lpFilePart=0x0) returned 0x53 [0113.892] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e50c) returned 1 [0113.892] CreateFileW (lpFileName="C:\\Windows\\Microsoft.NET\\Framework64\\v4.0.30319\\SetupCache\\v4.6.00081\\1055\\eula.rtf" (normalized: "c:\\windows\\microsoft.net\\framework64\\v4.0.30319\\setupcache\\v4.6.00081\\1055\\eula.rtf"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x178 [0113.894] GetFileType (hFile=0x178) returned 0x1 [0113.894] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e508) returned 1 [0113.894] GetFileType (hFile=0x178) returned 0x1 [0113.894] WriteFile (in: hFile=0x178, lpBuffer=0x36ec2d8*, nNumberOfBytesToWrite=0x22390, lpNumberOfBytesWritten=0x31e5c8, lpOverlapped=0x0 | out: lpBuffer=0x36ec2d8*, lpNumberOfBytesWritten=0x31e5c8*=0x22390, lpOverlapped=0x0) returned 1 [0113.898] GetFullPathNameW (in: lpFileName="C:\\Windows\\Microsoft.NET\\Framework64\\v4.0.30319\\SetupCache\\v4.6.00081\\1055\\eula.rtf", nBufferLength=0x105, lpBuffer=0x31e14c, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\Microsoft.NET\\Framework64\\v4.0.30319\\SetupCache\\v4.6.00081\\1055\\eula.rtf", lpFilePart=0x0) returned 0x53 [0113.898] GetFullPathNameW (in: lpFileName="C:\\Windows\\Microsoft.NET\\Framework64\\v4.0.30319\\SetupCache\\v4.6.00081\\1055\\eula.rtf", nBufferLength=0x105, lpBuffer=0x31e14c, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\Microsoft.NET\\Framework64\\v4.0.30319\\SetupCache\\v4.6.00081\\1055\\eula.rtf", lpFilePart=0x0) returned 0x53 [0113.898] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e5ac) returned 1 [0113.898] GetFileAttributesExW (in: lpFileName="C:\\Windows\\Microsoft.NET\\Framework64\\v4.0.30319\\SetupCache\\v4.6.00081\\1055\\eula.rtf" (normalized: "c:\\windows\\microsoft.net\\framework64\\v4.0.30319\\setupcache\\v4.6.00081\\1055\\eula.rtf"), fInfoLevelId=0x0, lpFileInformation=0x31e628 | out: lpFileInformation=0x31e628*(dwFileAttributes=0x820, ftCreationTime.dwLowDateTime=0xcd7cbf00, ftCreationTime.dwHighDateTime=0x1d09f02, ftLastAccessTime.dwLowDateTime=0x5922fbc0, ftLastAccessTime.dwHighDateTime=0x1d2e676, ftLastWriteTime.dwLowDateTime=0x27535920, ftLastWriteTime.dwHighDateTime=0x1d6eb7f, nFileSizeHigh=0x0, nFileSizeLow=0x22390)) returned 1 [0113.899] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e5a8) returned 1 [0113.899] MoveFileW (lpExistingFileName="C:\\Windows\\Microsoft.NET\\Framework64\\v4.0.30319\\SetupCache\\v4.6.00081\\1055\\eula.rtf" (normalized: "c:\\windows\\microsoft.net\\framework64\\v4.0.30319\\setupcache\\v4.6.00081\\1055\\eula.rtf"), lpNewFileName="C:\\Windows\\Microsoft.NET\\Framework64\\v4.0.30319\\SetupCache\\v4.6.00081\\1055\\eula.rtf" (normalized: "c:\\windows\\microsoft.net\\framework64\\v4.0.30319\\setupcache\\v4.6.00081\\1055\\eula.rtf")) returned 1 [0113.899] GetFullPathNameW (in: lpFileName="C:\\Windows\\Microsoft.NET\\Framework64\\v4.0.30319\\SetupCache\\v4.6.00081\\1055\\LocalizedData.xml", nBufferLength=0x105, lpBuffer=0x31e02c, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\Microsoft.NET\\Framework64\\v4.0.30319\\SetupCache\\v4.6.00081\\1055\\LocalizedData.xml", lpFilePart=0x0) returned 0x5c [0113.899] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e520) returned 1 [0113.899] CreateFileW (lpFileName="C:\\Windows\\Microsoft.NET\\Framework64\\v4.0.30319\\SetupCache\\v4.6.00081\\1055\\LocalizedData.xml" (normalized: "c:\\windows\\microsoft.net\\framework64\\v4.0.30319\\setupcache\\v4.6.00081\\1055\\localizeddata.xml"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x178 [0113.899] GetFileType (hFile=0x178) returned 0x1 [0113.899] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e51c) returned 1 [0113.899] GetFileType (hFile=0x178) returned 0x1 [0113.899] GetFileSize (in: hFile=0x178, lpFileSizeHigh=0x31e628 | out: lpFileSizeHigh=0x31e628*=0x0) returned 0x13dec [0113.899] ReadFile (in: hFile=0x178, lpBuffer=0x26c8b90, nNumberOfBytesToRead=0x13dec, lpNumberOfBytesRead=0x31e5d4, lpOverlapped=0x0 | out: lpBuffer=0x26c8b90*, lpNumberOfBytesRead=0x31e5d4*=0x13dec, lpOverlapped=0x0) returned 1 [0113.921] GetFullPathNameW (in: lpFileName="C:\\Windows\\Microsoft.NET\\Framework64\\v4.0.30319\\SetupCache\\v4.6.00081\\1055\\LocalizedData.xml", nBufferLength=0x105, lpBuffer=0x31e018, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\Microsoft.NET\\Framework64\\v4.0.30319\\SetupCache\\v4.6.00081\\1055\\LocalizedData.xml", lpFilePart=0x0) returned 0x5c [0113.921] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e50c) returned 1 [0113.921] CreateFileW (lpFileName="C:\\Windows\\Microsoft.NET\\Framework64\\v4.0.30319\\SetupCache\\v4.6.00081\\1055\\LocalizedData.xml" (normalized: "c:\\windows\\microsoft.net\\framework64\\v4.0.30319\\setupcache\\v4.6.00081\\1055\\localizeddata.xml"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x178 [0113.923] GetFileType (hFile=0x178) returned 0x1 [0113.923] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e508) returned 1 [0113.923] GetFileType (hFile=0x178) returned 0x1 [0113.923] WriteFile (in: hFile=0x178, lpBuffer=0x2751358*, nNumberOfBytesToWrite=0x13df0, lpNumberOfBytesWritten=0x31e5c8, lpOverlapped=0x0 | out: lpBuffer=0x2751358*, lpNumberOfBytesWritten=0x31e5c8*=0x13df0, lpOverlapped=0x0) returned 1 [0113.925] GetFullPathNameW (in: lpFileName="C:\\Windows\\Microsoft.NET\\Framework64\\v4.0.30319\\SetupCache\\v4.6.00081\\1055\\LocalizedData.xml", nBufferLength=0x105, lpBuffer=0x31e14c, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\Microsoft.NET\\Framework64\\v4.0.30319\\SetupCache\\v4.6.00081\\1055\\LocalizedData.xml", lpFilePart=0x0) returned 0x5c [0113.925] GetFullPathNameW (in: lpFileName="C:\\Windows\\Microsoft.NET\\Framework64\\v4.0.30319\\SetupCache\\v4.6.00081\\1055\\LocalizedData.xml", nBufferLength=0x105, lpBuffer=0x31e14c, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\Microsoft.NET\\Framework64\\v4.0.30319\\SetupCache\\v4.6.00081\\1055\\LocalizedData.xml", lpFilePart=0x0) returned 0x5c [0113.925] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e5ac) returned 1 [0113.925] GetFileAttributesExW (in: lpFileName="C:\\Windows\\Microsoft.NET\\Framework64\\v4.0.30319\\SetupCache\\v4.6.00081\\1055\\LocalizedData.xml" (normalized: "c:\\windows\\microsoft.net\\framework64\\v4.0.30319\\setupcache\\v4.6.00081\\1055\\localizeddata.xml"), fInfoLevelId=0x0, lpFileInformation=0x31e628 | out: lpFileInformation=0x31e628*(dwFileAttributes=0x820, ftCreationTime.dwLowDateTime=0x29ab2a00, ftCreationTime.dwHighDateTime=0x1d0ab24, ftLastAccessTime.dwLowDateTime=0x5d56e940, ftLastAccessTime.dwHighDateTime=0x1d2e676, ftLastWriteTime.dwLowDateTime=0x2755ba80, ftLastWriteTime.dwHighDateTime=0x1d6eb7f, nFileSizeHigh=0x0, nFileSizeLow=0x13df0)) returned 1 [0113.925] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e5a8) returned 1 [0113.925] MoveFileW (lpExistingFileName="C:\\Windows\\Microsoft.NET\\Framework64\\v4.0.30319\\SetupCache\\v4.6.00081\\1055\\LocalizedData.xml" (normalized: "c:\\windows\\microsoft.net\\framework64\\v4.0.30319\\setupcache\\v4.6.00081\\1055\\localizeddata.xml"), lpNewFileName="C:\\Windows\\Microsoft.NET\\Framework64\\v4.0.30319\\SetupCache\\v4.6.00081\\1055\\LocalizedData.xml" (normalized: "c:\\windows\\microsoft.net\\framework64\\v4.0.30319\\setupcache\\v4.6.00081\\1055\\localizeddata.xml")) returned 1 [0113.925] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e654) returned 1 [0113.925] GetFullPathNameW (in: lpFileName="C:\\Windows\\Microsoft.NET\\Framework64\\v4.0.30319\\SetupCache\\v4.6.00081\\2052", nBufferLength=0x105, lpBuffer=0x31e15c, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\Microsoft.NET\\Framework64\\v4.0.30319\\SetupCache\\v4.6.00081\\2052", lpFilePart=0x0) returned 0x4a [0113.925] GetFullPathNameW (in: lpFileName="C:\\Windows\\Microsoft.NET\\Framework64\\v4.0.30319\\SetupCache\\v4.6.00081\\2052\\", nBufferLength=0x105, lpBuffer=0x31e130, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\Microsoft.NET\\Framework64\\v4.0.30319\\SetupCache\\v4.6.00081\\2052\\", lpFilePart=0x0) returned 0x4b [0113.926] FindFirstFileW (in: lpFileName="C:\\Windows\\Microsoft.NET\\Framework64\\v4.0.30319\\SetupCache\\v4.6.00081\\2052\\*", lpFindFileData=0x31e37c | out: lpFindFileData=0x31e37c*(dwFileAttributes=0x810, ftCreationTime.dwLowDateTime=0x5922fbc0, ftCreationTime.dwHighDateTime=0x1d2e676, ftLastAccessTime.dwLowDateTime=0x5d522680, ftLastAccessTime.dwHighDateTime=0x1d2e676, ftLastWriteTime.dwLowDateTime=0x5d522680, ftLastWriteTime.dwHighDateTime=0x1d2e676, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x381cc0 [0113.926] FindNextFileW (in: hFindFile=0x381cc0, lpFindFileData=0x31e38c | out: lpFindFileData=0x31e38c*(dwFileAttributes=0x810, ftCreationTime.dwLowDateTime=0x5922fbc0, ftCreationTime.dwHighDateTime=0x1d2e676, ftLastAccessTime.dwLowDateTime=0x5d522680, ftLastAccessTime.dwHighDateTime=0x1d2e676, ftLastWriteTime.dwLowDateTime=0x5d522680, ftLastWriteTime.dwHighDateTime=0x1d2e676, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0113.926] FindNextFileW (in: hFindFile=0x381cc0, lpFindFileData=0x31e38c | out: lpFindFileData=0x31e38c*(dwFileAttributes=0x820, ftCreationTime.dwLowDateTime=0xcd7cbf00, ftCreationTime.dwHighDateTime=0x1d09f02, ftLastAccessTime.dwLowDateTime=0x5922fbc0, ftLastAccessTime.dwHighDateTime=0x1d2e676, ftLastWriteTime.dwLowDateTime=0xcd7cbf00, ftLastWriteTime.dwHighDateTime=0x1d09f02, nFileSizeHigh=0x0, nFileSizeLow=0x23b61, dwReserved0=0x0, dwReserved1=0x0, cFileName="eula.rtf", cAlternateFileName="")) returned 1 [0113.926] FindNextFileW (in: hFindFile=0x381cc0, lpFindFileData=0x31e38c | out: lpFindFileData=0x31e38c*(dwFileAttributes=0x820, ftCreationTime.dwLowDateTime=0x29ab2a00, ftCreationTime.dwHighDateTime=0x1d0ab24, ftLastAccessTime.dwLowDateTime=0x5d522680, ftLastAccessTime.dwHighDateTime=0x1d2e676, ftLastWriteTime.dwLowDateTime=0x29ab2a00, ftLastWriteTime.dwHighDateTime=0x1d0ab24, nFileSizeHigh=0x0, nFileSizeLow=0x10776, dwReserved0=0x0, dwReserved1=0x0, cFileName="LocalizedData.xml", cAlternateFileName="LOCALI~1.XML")) returned 1 [0113.926] FindNextFileW (in: hFindFile=0x381cc0, lpFindFileData=0x31e38c | out: lpFindFileData=0x31e38c*(dwFileAttributes=0x820, ftCreationTime.dwLowDateTime=0x852ae700, ftCreationTime.dwHighDateTime=0x1d0ab27, ftLastAccessTime.dwLowDateTime=0x5d4d63c0, ftLastAccessTime.dwHighDateTime=0x1d2e676, ftLastWriteTime.dwLowDateTime=0x852ae700, ftLastWriteTime.dwHighDateTime=0x1d0ab27, nFileSizeHigh=0x0, nFileSizeLow=0x6358, dwReserved0=0x0, dwReserved1=0x0, cFileName="SetupResources.dll", cAlternateFileName="SETUPR~1.DLL")) returned 1 [0113.926] FindNextFileW (in: hFindFile=0x381cc0, lpFindFileData=0x31e38c | out: lpFindFileData=0x31e38c*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0113.926] FindClose (in: hFindFile=0x381cc0 | out: hFindFile=0x381cc0) returned 1 [0113.926] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e614) returned 1 [0113.926] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e620) returned 1 [0113.926] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e654) returned 1 [0113.926] GetFullPathNameW (in: lpFileName="C:\\Windows\\Microsoft.NET\\Framework64\\v4.0.30319\\SetupCache\\v4.6.00081\\2052", nBufferLength=0x105, lpBuffer=0x31e15c, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\Microsoft.NET\\Framework64\\v4.0.30319\\SetupCache\\v4.6.00081\\2052", lpFilePart=0x0) returned 0x4a [0113.927] GetFullPathNameW (in: lpFileName="C:\\Windows\\Microsoft.NET\\Framework64\\v4.0.30319\\SetupCache\\v4.6.00081\\2052\\", nBufferLength=0x105, lpBuffer=0x31e130, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\Microsoft.NET\\Framework64\\v4.0.30319\\SetupCache\\v4.6.00081\\2052\\", lpFilePart=0x0) returned 0x4b [0113.927] FindFirstFileW (in: lpFileName="C:\\Windows\\Microsoft.NET\\Framework64\\v4.0.30319\\SetupCache\\v4.6.00081\\2052\\*", lpFindFileData=0x31e37c | out: lpFindFileData=0x31e37c*(dwFileAttributes=0x810, ftCreationTime.dwLowDateTime=0x5922fbc0, ftCreationTime.dwHighDateTime=0x1d2e676, ftLastAccessTime.dwLowDateTime=0x5d522680, ftLastAccessTime.dwHighDateTime=0x1d2e676, ftLastWriteTime.dwLowDateTime=0x5d522680, ftLastWriteTime.dwHighDateTime=0x1d2e676, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x381cc0 [0113.927] FindNextFileW (in: hFindFile=0x381cc0, lpFindFileData=0x31e38c | out: lpFindFileData=0x31e38c*(dwFileAttributes=0x810, ftCreationTime.dwLowDateTime=0x5922fbc0, ftCreationTime.dwHighDateTime=0x1d2e676, ftLastAccessTime.dwLowDateTime=0x5d522680, ftLastAccessTime.dwHighDateTime=0x1d2e676, ftLastWriteTime.dwLowDateTime=0x5d522680, ftLastWriteTime.dwHighDateTime=0x1d2e676, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0113.927] FindNextFileW (in: hFindFile=0x381cc0, lpFindFileData=0x31e38c | out: lpFindFileData=0x31e38c*(dwFileAttributes=0x820, ftCreationTime.dwLowDateTime=0xcd7cbf00, ftCreationTime.dwHighDateTime=0x1d09f02, ftLastAccessTime.dwLowDateTime=0x5922fbc0, ftLastAccessTime.dwHighDateTime=0x1d2e676, ftLastWriteTime.dwLowDateTime=0xcd7cbf00, ftLastWriteTime.dwHighDateTime=0x1d09f02, nFileSizeHigh=0x0, nFileSizeLow=0x23b61, dwReserved0=0x0, dwReserved1=0x0, cFileName="eula.rtf", cAlternateFileName="")) returned 1 [0113.927] FindNextFileW (in: hFindFile=0x381cc0, lpFindFileData=0x31e38c | out: lpFindFileData=0x31e38c*(dwFileAttributes=0x820, ftCreationTime.dwLowDateTime=0x29ab2a00, ftCreationTime.dwHighDateTime=0x1d0ab24, ftLastAccessTime.dwLowDateTime=0x5d522680, ftLastAccessTime.dwHighDateTime=0x1d2e676, ftLastWriteTime.dwLowDateTime=0x29ab2a00, ftLastWriteTime.dwHighDateTime=0x1d0ab24, nFileSizeHigh=0x0, nFileSizeLow=0x10776, dwReserved0=0x0, dwReserved1=0x0, cFileName="LocalizedData.xml", cAlternateFileName="LOCALI~1.XML")) returned 1 [0113.927] FindNextFileW (in: hFindFile=0x381cc0, lpFindFileData=0x31e38c | out: lpFindFileData=0x31e38c*(dwFileAttributes=0x820, ftCreationTime.dwLowDateTime=0x852ae700, ftCreationTime.dwHighDateTime=0x1d0ab27, ftLastAccessTime.dwLowDateTime=0x5d4d63c0, ftLastAccessTime.dwHighDateTime=0x1d2e676, ftLastWriteTime.dwLowDateTime=0x852ae700, ftLastWriteTime.dwHighDateTime=0x1d0ab27, nFileSizeHigh=0x0, nFileSizeLow=0x6358, dwReserved0=0x0, dwReserved1=0x0, cFileName="SetupResources.dll", cAlternateFileName="SETUPR~1.DLL")) returned 1 [0113.927] FindNextFileW (in: hFindFile=0x381cc0, lpFindFileData=0x31e38c | out: lpFindFileData=0x31e38c*(dwFileAttributes=0x820, ftCreationTime.dwLowDateTime=0x852ae700, ftCreationTime.dwHighDateTime=0x1d0ab27, ftLastAccessTime.dwLowDateTime=0x5d4d63c0, ftLastAccessTime.dwHighDateTime=0x1d2e676, ftLastWriteTime.dwLowDateTime=0x852ae700, ftLastWriteTime.dwHighDateTime=0x1d0ab27, nFileSizeHigh=0x0, nFileSizeLow=0x6358, dwReserved0=0x0, dwReserved1=0x0, cFileName="SetupResources.dll", cAlternateFileName="SETUPR~1.DLL")) returned 0 [0113.928] FindClose (in: hFindFile=0x381cc0 | out: hFindFile=0x381cc0) returned 1 [0113.928] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e614) returned 1 [0113.928] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e620) returned 1 [0113.928] GetFullPathNameW (in: lpFileName="C:\\Windows\\Microsoft.NET\\Framework64\\v4.0.30319\\SetupCache\\v4.6.00081\\2052\\eula.rtf", nBufferLength=0x105, lpBuffer=0x31e02c, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\Microsoft.NET\\Framework64\\v4.0.30319\\SetupCache\\v4.6.00081\\2052\\eula.rtf", lpFilePart=0x0) returned 0x53 [0113.928] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e520) returned 1 [0113.928] CreateFileW (lpFileName="C:\\Windows\\Microsoft.NET\\Framework64\\v4.0.30319\\SetupCache\\v4.6.00081\\2052\\eula.rtf" (normalized: "c:\\windows\\microsoft.net\\framework64\\v4.0.30319\\setupcache\\v4.6.00081\\2052\\eula.rtf"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x178 [0113.928] GetFileType (hFile=0x178) returned 0x1 [0113.928] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e51c) returned 1 [0113.928] GetFileType (hFile=0x178) returned 0x1 [0113.928] GetFileSize (in: hFile=0x178, lpFileSizeHigh=0x31e628 | out: lpFileSizeHigh=0x31e628*=0x0) returned 0x23b61 [0113.928] ReadFile (in: hFile=0x178, lpBuffer=0x3736268, nNumberOfBytesToRead=0x23b61, lpNumberOfBytesRead=0x31e5d4, lpOverlapped=0x0 | out: lpBuffer=0x3736268*, lpNumberOfBytesRead=0x31e5d4*=0x23b61, lpOverlapped=0x0) returned 1 [0113.954] GetFullPathNameW (in: lpFileName="C:\\Windows\\Microsoft.NET\\Framework64\\v4.0.30319\\SetupCache\\v4.6.00081\\2052\\eula.rtf", nBufferLength=0x105, lpBuffer=0x31e018, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\Microsoft.NET\\Framework64\\v4.0.30319\\SetupCache\\v4.6.00081\\2052\\eula.rtf", lpFilePart=0x0) returned 0x53 [0113.954] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e50c) returned 1 [0113.954] CreateFileW (lpFileName="C:\\Windows\\Microsoft.NET\\Framework64\\v4.0.30319\\SetupCache\\v4.6.00081\\2052\\eula.rtf" (normalized: "c:\\windows\\microsoft.net\\framework64\\v4.0.30319\\setupcache\\v4.6.00081\\2052\\eula.rtf"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x178 [0113.956] GetFileType (hFile=0x178) returned 0x1 [0113.956] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e508) returned 1 [0113.956] GetFileType (hFile=0x178) returned 0x1 [0113.956] WriteFile (in: hFile=0x178, lpBuffer=0x37e8bc8*, nNumberOfBytesToWrite=0x23b70, lpNumberOfBytesWritten=0x31e5c8, lpOverlapped=0x0 | out: lpBuffer=0x37e8bc8*, lpNumberOfBytesWritten=0x31e5c8*=0x23b70, lpOverlapped=0x0) returned 1 [0113.959] GetFullPathNameW (in: lpFileName="C:\\Windows\\Microsoft.NET\\Framework64\\v4.0.30319\\SetupCache\\v4.6.00081\\2052\\eula.rtf", nBufferLength=0x105, lpBuffer=0x31e14c, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\Microsoft.NET\\Framework64\\v4.0.30319\\SetupCache\\v4.6.00081\\2052\\eula.rtf", lpFilePart=0x0) returned 0x53 [0113.959] GetFullPathNameW (in: lpFileName="C:\\Windows\\Microsoft.NET\\Framework64\\v4.0.30319\\SetupCache\\v4.6.00081\\2052\\eula.rtf", nBufferLength=0x105, lpBuffer=0x31e14c, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\Microsoft.NET\\Framework64\\v4.0.30319\\SetupCache\\v4.6.00081\\2052\\eula.rtf", lpFilePart=0x0) returned 0x53 [0113.959] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e5ac) returned 1 [0113.959] GetFileAttributesExW (in: lpFileName="C:\\Windows\\Microsoft.NET\\Framework64\\v4.0.30319\\SetupCache\\v4.6.00081\\2052\\eula.rtf" (normalized: "c:\\windows\\microsoft.net\\framework64\\v4.0.30319\\setupcache\\v4.6.00081\\2052\\eula.rtf"), fInfoLevelId=0x0, lpFileInformation=0x31e628 | out: lpFileInformation=0x31e628*(dwFileAttributes=0x820, ftCreationTime.dwLowDateTime=0xcd7cbf00, ftCreationTime.dwHighDateTime=0x1d09f02, ftLastAccessTime.dwLowDateTime=0x5922fbc0, ftLastAccessTime.dwHighDateTime=0x1d2e676, ftLastWriteTime.dwLowDateTime=0x275cdea0, ftLastWriteTime.dwHighDateTime=0x1d6eb7f, nFileSizeHigh=0x0, nFileSizeLow=0x23b70)) returned 1 [0113.959] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e5a8) returned 1 [0113.959] MoveFileW (lpExistingFileName="C:\\Windows\\Microsoft.NET\\Framework64\\v4.0.30319\\SetupCache\\v4.6.00081\\2052\\eula.rtf" (normalized: "c:\\windows\\microsoft.net\\framework64\\v4.0.30319\\setupcache\\v4.6.00081\\2052\\eula.rtf"), lpNewFileName="C:\\Windows\\Microsoft.NET\\Framework64\\v4.0.30319\\SetupCache\\v4.6.00081\\2052\\eula.rtf" (normalized: "c:\\windows\\microsoft.net\\framework64\\v4.0.30319\\setupcache\\v4.6.00081\\2052\\eula.rtf")) returned 1 [0113.959] GetFullPathNameW (in: lpFileName="C:\\Windows\\Microsoft.NET\\Framework64\\v4.0.30319\\SetupCache\\v4.6.00081\\2052\\LocalizedData.xml", nBufferLength=0x105, lpBuffer=0x31e02c, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\Microsoft.NET\\Framework64\\v4.0.30319\\SetupCache\\v4.6.00081\\2052\\LocalizedData.xml", lpFilePart=0x0) returned 0x5c [0113.960] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e520) returned 1 [0113.960] CreateFileW (lpFileName="C:\\Windows\\Microsoft.NET\\Framework64\\v4.0.30319\\SetupCache\\v4.6.00081\\2052\\LocalizedData.xml" (normalized: "c:\\windows\\microsoft.net\\framework64\\v4.0.30319\\setupcache\\v4.6.00081\\2052\\localizeddata.xml"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x178 [0113.960] GetFileType (hFile=0x178) returned 0x1 [0113.960] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e51c) returned 1 [0113.960] GetFileType (hFile=0x178) returned 0x1 [0113.960] GetFileSize (in: hFile=0x178, lpFileSizeHigh=0x31e628 | out: lpFileSizeHigh=0x31e628*=0x0) returned 0x10776 [0113.960] ReadFile (in: hFile=0x178, lpBuffer=0x27b4aa0, nNumberOfBytesToRead=0x10776, lpNumberOfBytesRead=0x31e5d4, lpOverlapped=0x0 | out: lpBuffer=0x27b4aa0*, lpNumberOfBytesRead=0x31e5d4*=0x10776, lpOverlapped=0x0) returned 1 [0113.984] GetFullPathNameW (in: lpFileName="C:\\Windows\\Microsoft.NET\\Framework64\\v4.0.30319\\SetupCache\\v4.6.00081\\2052\\LocalizedData.xml", nBufferLength=0x105, lpBuffer=0x31e018, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\Microsoft.NET\\Framework64\\v4.0.30319\\SetupCache\\v4.6.00081\\2052\\LocalizedData.xml", lpFilePart=0x0) returned 0x5c [0113.984] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e50c) returned 1 [0113.984] CreateFileW (lpFileName="C:\\Windows\\Microsoft.NET\\Framework64\\v4.0.30319\\SetupCache\\v4.6.00081\\2052\\LocalizedData.xml" (normalized: "c:\\windows\\microsoft.net\\framework64\\v4.0.30319\\setupcache\\v4.6.00081\\2052\\localizeddata.xml"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x178 [0113.986] GetFileType (hFile=0x178) returned 0x1 [0113.986] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e508) returned 1 [0113.986] GetFileType (hFile=0x178) returned 0x1 [0113.986] WriteFile (in: hFile=0x178, lpBuffer=0x2832f1c*, nNumberOfBytesToWrite=0x10780, lpNumberOfBytesWritten=0x31e5c8, lpOverlapped=0x0 | out: lpBuffer=0x2832f1c*, lpNumberOfBytesWritten=0x31e5c8*=0x10780, lpOverlapped=0x0) returned 1 [0113.987] GetFullPathNameW (in: lpFileName="C:\\Windows\\Microsoft.NET\\Framework64\\v4.0.30319\\SetupCache\\v4.6.00081\\2052\\LocalizedData.xml", nBufferLength=0x105, lpBuffer=0x31e14c, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\Microsoft.NET\\Framework64\\v4.0.30319\\SetupCache\\v4.6.00081\\2052\\LocalizedData.xml", lpFilePart=0x0) returned 0x5c [0113.987] GetFullPathNameW (in: lpFileName="C:\\Windows\\Microsoft.NET\\Framework64\\v4.0.30319\\SetupCache\\v4.6.00081\\2052\\LocalizedData.xml", nBufferLength=0x105, lpBuffer=0x31e14c, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\Microsoft.NET\\Framework64\\v4.0.30319\\SetupCache\\v4.6.00081\\2052\\LocalizedData.xml", lpFilePart=0x0) returned 0x5c [0113.988] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e5ac) returned 1 [0113.988] GetFileAttributesExW (in: lpFileName="C:\\Windows\\Microsoft.NET\\Framework64\\v4.0.30319\\SetupCache\\v4.6.00081\\2052\\LocalizedData.xml" (normalized: "c:\\windows\\microsoft.net\\framework64\\v4.0.30319\\setupcache\\v4.6.00081\\2052\\localizeddata.xml"), fInfoLevelId=0x0, lpFileInformation=0x31e628 | out: lpFileInformation=0x31e628*(dwFileAttributes=0x820, ftCreationTime.dwLowDateTime=0x29ab2a00, ftCreationTime.dwHighDateTime=0x1d0ab24, ftLastAccessTime.dwLowDateTime=0x5d522680, ftLastAccessTime.dwHighDateTime=0x1d2e676, ftLastWriteTime.dwLowDateTime=0x275f4000, ftLastWriteTime.dwHighDateTime=0x1d6eb7f, nFileSizeHigh=0x0, nFileSizeLow=0x10780)) returned 1 [0113.988] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e5a8) returned 1 [0113.988] MoveFileW (lpExistingFileName="C:\\Windows\\Microsoft.NET\\Framework64\\v4.0.30319\\SetupCache\\v4.6.00081\\2052\\LocalizedData.xml" (normalized: "c:\\windows\\microsoft.net\\framework64\\v4.0.30319\\setupcache\\v4.6.00081\\2052\\localizeddata.xml"), lpNewFileName="C:\\Windows\\Microsoft.NET\\Framework64\\v4.0.30319\\SetupCache\\v4.6.00081\\2052\\LocalizedData.xml" (normalized: "c:\\windows\\microsoft.net\\framework64\\v4.0.30319\\setupcache\\v4.6.00081\\2052\\localizeddata.xml")) returned 1 [0113.988] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e654) returned 1 [0113.988] GetFullPathNameW (in: lpFileName="C:\\Windows\\Microsoft.NET\\Framework64\\v4.0.30319\\SetupCache\\v4.6.00081\\2070", nBufferLength=0x105, lpBuffer=0x31e15c, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\Microsoft.NET\\Framework64\\v4.0.30319\\SetupCache\\v4.6.00081\\2070", lpFilePart=0x0) returned 0x4a [0113.988] GetFullPathNameW (in: lpFileName="C:\\Windows\\Microsoft.NET\\Framework64\\v4.0.30319\\SetupCache\\v4.6.00081\\2070\\", nBufferLength=0x105, lpBuffer=0x31e130, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\Microsoft.NET\\Framework64\\v4.0.30319\\SetupCache\\v4.6.00081\\2070\\", lpFilePart=0x0) returned 0x4b [0113.988] FindFirstFileW (in: lpFileName="C:\\Windows\\Microsoft.NET\\Framework64\\v4.0.30319\\SetupCache\\v4.6.00081\\2070\\*", lpFindFileData=0x31e37c | out: lpFindFileData=0x31e37c*(dwFileAttributes=0x810, ftCreationTime.dwLowDateTime=0x5922fbc0, ftCreationTime.dwHighDateTime=0x1d2e676, ftLastAccessTime.dwLowDateTime=0x5d56e940, ftLastAccessTime.dwHighDateTime=0x1d2e676, ftLastWriteTime.dwLowDateTime=0x5d56e940, ftLastWriteTime.dwHighDateTime=0x1d2e676, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x381dc0 [0113.988] FindNextFileW (in: hFindFile=0x381dc0, lpFindFileData=0x31e38c | out: lpFindFileData=0x31e38c*(dwFileAttributes=0x810, ftCreationTime.dwLowDateTime=0x5922fbc0, ftCreationTime.dwHighDateTime=0x1d2e676, ftLastAccessTime.dwLowDateTime=0x5d56e940, ftLastAccessTime.dwHighDateTime=0x1d2e676, ftLastWriteTime.dwLowDateTime=0x5d56e940, ftLastWriteTime.dwHighDateTime=0x1d2e676, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0113.989] FindNextFileW (in: hFindFile=0x381dc0, lpFindFileData=0x31e38c | out: lpFindFileData=0x31e38c*(dwFileAttributes=0x820, ftCreationTime.dwLowDateTime=0xcd7cbf00, ftCreationTime.dwHighDateTime=0x1d09f02, ftLastAccessTime.dwLowDateTime=0x59255d20, ftLastAccessTime.dwHighDateTime=0x1d2e676, ftLastWriteTime.dwLowDateTime=0xcd7cbf00, ftLastWriteTime.dwHighDateTime=0x1d09f02, nFileSizeHigh=0x0, nFileSizeLow=0x240ce, dwReserved0=0x0, dwReserved1=0x0, cFileName="eula.rtf", cAlternateFileName="")) returned 1 [0113.989] FindNextFileW (in: hFindFile=0x381dc0, lpFindFileData=0x31e38c | out: lpFindFileData=0x31e38c*(dwFileAttributes=0x820, ftCreationTime.dwLowDateTime=0x29ab2a00, ftCreationTime.dwHighDateTime=0x1d0ab24, ftLastAccessTime.dwLowDateTime=0x5d56e940, ftLastAccessTime.dwHighDateTime=0x1d2e676, ftLastWriteTime.dwLowDateTime=0x29ab2a00, ftLastWriteTime.dwHighDateTime=0x1d0ab24, nFileSizeHigh=0x0, nFileSizeLow=0x148d6, dwReserved0=0x0, dwReserved1=0x0, cFileName="LocalizedData.xml", cAlternateFileName="LOCALI~1.XML")) returned 1 [0113.989] FindNextFileW (in: hFindFile=0x381dc0, lpFindFileData=0x31e38c | out: lpFindFileData=0x31e38c*(dwFileAttributes=0x820, ftCreationTime.dwLowDateTime=0x852ae700, ftCreationTime.dwHighDateTime=0x1d0ab27, ftLastAccessTime.dwLowDateTime=0x5d522680, ftLastAccessTime.dwHighDateTime=0x1d2e676, ftLastWriteTime.dwLowDateTime=0x852ae700, ftLastWriteTime.dwHighDateTime=0x1d0ab27, nFileSizeHigh=0x0, nFileSizeLow=0x7758, dwReserved0=0x0, dwReserved1=0x0, cFileName="SetupResources.dll", cAlternateFileName="SETUPR~1.DLL")) returned 1 [0113.989] FindNextFileW (in: hFindFile=0x381dc0, lpFindFileData=0x31e38c | out: lpFindFileData=0x31e38c*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0113.989] FindClose (in: hFindFile=0x381dc0 | out: hFindFile=0x381dc0) returned 1 [0113.989] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e614) returned 1 [0113.989] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e620) returned 1 [0113.989] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e654) returned 1 [0113.990] GetFullPathNameW (in: lpFileName="C:\\Windows\\Microsoft.NET\\Framework64\\v4.0.30319\\SetupCache\\v4.6.00081\\2070", nBufferLength=0x105, lpBuffer=0x31e15c, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\Microsoft.NET\\Framework64\\v4.0.30319\\SetupCache\\v4.6.00081\\2070", lpFilePart=0x0) returned 0x4a [0113.990] GetFullPathNameW (in: lpFileName="C:\\Windows\\Microsoft.NET\\Framework64\\v4.0.30319\\SetupCache\\v4.6.00081\\2070\\", nBufferLength=0x105, lpBuffer=0x31e130, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\Microsoft.NET\\Framework64\\v4.0.30319\\SetupCache\\v4.6.00081\\2070\\", lpFilePart=0x0) returned 0x4b [0113.990] FindFirstFileW (in: lpFileName="C:\\Windows\\Microsoft.NET\\Framework64\\v4.0.30319\\SetupCache\\v4.6.00081\\2070\\*", lpFindFileData=0x31e37c | out: lpFindFileData=0x31e37c*(dwFileAttributes=0x810, ftCreationTime.dwLowDateTime=0x5922fbc0, ftCreationTime.dwHighDateTime=0x1d2e676, ftLastAccessTime.dwLowDateTime=0x5d56e940, ftLastAccessTime.dwHighDateTime=0x1d2e676, ftLastWriteTime.dwLowDateTime=0x5d56e940, ftLastWriteTime.dwHighDateTime=0x1d2e676, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x381dc0 [0113.990] FindNextFileW (in: hFindFile=0x381dc0, lpFindFileData=0x31e38c | out: lpFindFileData=0x31e38c*(dwFileAttributes=0x810, ftCreationTime.dwLowDateTime=0x5922fbc0, ftCreationTime.dwHighDateTime=0x1d2e676, ftLastAccessTime.dwLowDateTime=0x5d56e940, ftLastAccessTime.dwHighDateTime=0x1d2e676, ftLastWriteTime.dwLowDateTime=0x5d56e940, ftLastWriteTime.dwHighDateTime=0x1d2e676, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0113.990] FindNextFileW (in: hFindFile=0x381dc0, lpFindFileData=0x31e38c | out: lpFindFileData=0x31e38c*(dwFileAttributes=0x820, ftCreationTime.dwLowDateTime=0xcd7cbf00, ftCreationTime.dwHighDateTime=0x1d09f02, ftLastAccessTime.dwLowDateTime=0x59255d20, ftLastAccessTime.dwHighDateTime=0x1d2e676, ftLastWriteTime.dwLowDateTime=0xcd7cbf00, ftLastWriteTime.dwHighDateTime=0x1d09f02, nFileSizeHigh=0x0, nFileSizeLow=0x240ce, dwReserved0=0x0, dwReserved1=0x0, cFileName="eula.rtf", cAlternateFileName="")) returned 1 [0113.990] FindNextFileW (in: hFindFile=0x381dc0, lpFindFileData=0x31e38c | out: lpFindFileData=0x31e38c*(dwFileAttributes=0x820, ftCreationTime.dwLowDateTime=0x29ab2a00, ftCreationTime.dwHighDateTime=0x1d0ab24, ftLastAccessTime.dwLowDateTime=0x5d56e940, ftLastAccessTime.dwHighDateTime=0x1d2e676, ftLastWriteTime.dwLowDateTime=0x29ab2a00, ftLastWriteTime.dwHighDateTime=0x1d0ab24, nFileSizeHigh=0x0, nFileSizeLow=0x148d6, dwReserved0=0x0, dwReserved1=0x0, cFileName="LocalizedData.xml", cAlternateFileName="LOCALI~1.XML")) returned 1 [0113.990] FindNextFileW (in: hFindFile=0x381dc0, lpFindFileData=0x31e38c | out: lpFindFileData=0x31e38c*(dwFileAttributes=0x820, ftCreationTime.dwLowDateTime=0x852ae700, ftCreationTime.dwHighDateTime=0x1d0ab27, ftLastAccessTime.dwLowDateTime=0x5d522680, ftLastAccessTime.dwHighDateTime=0x1d2e676, ftLastWriteTime.dwLowDateTime=0x852ae700, ftLastWriteTime.dwHighDateTime=0x1d0ab27, nFileSizeHigh=0x0, nFileSizeLow=0x7758, dwReserved0=0x0, dwReserved1=0x0, cFileName="SetupResources.dll", cAlternateFileName="SETUPR~1.DLL")) returned 1 [0113.990] FindNextFileW (in: hFindFile=0x381dc0, lpFindFileData=0x31e38c | out: lpFindFileData=0x31e38c*(dwFileAttributes=0x820, ftCreationTime.dwLowDateTime=0x852ae700, ftCreationTime.dwHighDateTime=0x1d0ab27, ftLastAccessTime.dwLowDateTime=0x5d522680, ftLastAccessTime.dwHighDateTime=0x1d2e676, ftLastWriteTime.dwLowDateTime=0x852ae700, ftLastWriteTime.dwHighDateTime=0x1d0ab27, nFileSizeHigh=0x0, nFileSizeLow=0x7758, dwReserved0=0x0, dwReserved1=0x0, cFileName="SetupResources.dll", cAlternateFileName="SETUPR~1.DLL")) returned 0 [0113.990] FindClose (in: hFindFile=0x381dc0 | out: hFindFile=0x381dc0) returned 1 [0113.990] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e614) returned 1 [0113.991] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e620) returned 1 [0113.991] GetFullPathNameW (in: lpFileName="C:\\Windows\\Microsoft.NET\\Framework64\\v4.0.30319\\SetupCache\\v4.6.00081\\2070\\eula.rtf", nBufferLength=0x105, lpBuffer=0x31e02c, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\Microsoft.NET\\Framework64\\v4.0.30319\\SetupCache\\v4.6.00081\\2070\\eula.rtf", lpFilePart=0x0) returned 0x53 [0113.991] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e520) returned 1 [0113.991] CreateFileW (lpFileName="C:\\Windows\\Microsoft.NET\\Framework64\\v4.0.30319\\SetupCache\\v4.6.00081\\2070\\eula.rtf" (normalized: "c:\\windows\\microsoft.net\\framework64\\v4.0.30319\\setupcache\\v4.6.00081\\2070\\eula.rtf"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x178 [0113.991] GetFileType (hFile=0x178) returned 0x1 [0113.991] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e51c) returned 1 [0113.991] GetFileType (hFile=0x178) returned 0x1 [0113.991] GetFileSize (in: hFile=0x178, lpFileSizeHigh=0x31e628 | out: lpFileSizeHigh=0x31e628*=0x0) returned 0x240ce [0113.992] ReadFile (in: hFile=0x178, lpBuffer=0x382d658, nNumberOfBytesToRead=0x240ce, lpNumberOfBytesRead=0x31e5d4, lpOverlapped=0x0 | out: lpBuffer=0x382d658*, lpNumberOfBytesRead=0x31e5d4*=0x240ce, lpOverlapped=0x0) returned 1 [0114.020] GetFullPathNameW (in: lpFileName="C:\\Windows\\Microsoft.NET\\Framework64\\v4.0.30319\\SetupCache\\v4.6.00081\\2070\\eula.rtf", nBufferLength=0x105, lpBuffer=0x31e018, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\Microsoft.NET\\Framework64\\v4.0.30319\\SetupCache\\v4.6.00081\\2070\\eula.rtf", lpFilePart=0x0) returned 0x53 [0114.020] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e50c) returned 1 [0114.021] CreateFileW (lpFileName="C:\\Windows\\Microsoft.NET\\Framework64\\v4.0.30319\\SetupCache\\v4.6.00081\\2070\\eula.rtf" (normalized: "c:\\windows\\microsoft.net\\framework64\\v4.0.30319\\setupcache\\v4.6.00081\\2070\\eula.rtf"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x178 [0114.022] GetFileType (hFile=0x178) returned 0x1 [0114.022] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e508) returned 1 [0114.023] GetFileType (hFile=0x178) returned 0x1 [0114.023] WriteFile (in: hFile=0x178, lpBuffer=0x38e1aa8*, nNumberOfBytesToWrite=0x240d0, lpNumberOfBytesWritten=0x31e5c8, lpOverlapped=0x0 | out: lpBuffer=0x38e1aa8*, lpNumberOfBytesWritten=0x31e5c8*=0x240d0, lpOverlapped=0x0) returned 1 [0114.039] GetFullPathNameW (in: lpFileName="C:\\Windows\\Microsoft.NET\\Framework64\\v4.0.30319\\SetupCache\\v4.6.00081\\2070\\eula.rtf", nBufferLength=0x105, lpBuffer=0x31e14c, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\Microsoft.NET\\Framework64\\v4.0.30319\\SetupCache\\v4.6.00081\\2070\\eula.rtf", lpFilePart=0x0) returned 0x53 [0114.039] GetFullPathNameW (in: lpFileName="C:\\Windows\\Microsoft.NET\\Framework64\\v4.0.30319\\SetupCache\\v4.6.00081\\2070\\eula.rtf", nBufferLength=0x105, lpBuffer=0x31e14c, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\Microsoft.NET\\Framework64\\v4.0.30319\\SetupCache\\v4.6.00081\\2070\\eula.rtf", lpFilePart=0x0) returned 0x53 [0114.039] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e5ac) returned 1 [0114.039] GetFileAttributesExW (in: lpFileName="C:\\Windows\\Microsoft.NET\\Framework64\\v4.0.30319\\SetupCache\\v4.6.00081\\2070\\eula.rtf" (normalized: "c:\\windows\\microsoft.net\\framework64\\v4.0.30319\\setupcache\\v4.6.00081\\2070\\eula.rtf"), fInfoLevelId=0x0, lpFileInformation=0x31e628 | out: lpFileInformation=0x31e628*(dwFileAttributes=0x820, ftCreationTime.dwLowDateTime=0xcd7cbf00, ftCreationTime.dwHighDateTime=0x1d09f02, ftLastAccessTime.dwLowDateTime=0x59255d20, ftLastAccessTime.dwHighDateTime=0x1d2e676, ftLastWriteTime.dwLowDateTime=0x2768c580, ftLastWriteTime.dwHighDateTime=0x1d6eb7f, nFileSizeHigh=0x0, nFileSizeLow=0x240d0)) returned 1 [0114.039] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e5a8) returned 1 [0114.039] MoveFileW (lpExistingFileName="C:\\Windows\\Microsoft.NET\\Framework64\\v4.0.30319\\SetupCache\\v4.6.00081\\2070\\eula.rtf" (normalized: "c:\\windows\\microsoft.net\\framework64\\v4.0.30319\\setupcache\\v4.6.00081\\2070\\eula.rtf"), lpNewFileName="C:\\Windows\\Microsoft.NET\\Framework64\\v4.0.30319\\SetupCache\\v4.6.00081\\2070\\eula.rtf" (normalized: "c:\\windows\\microsoft.net\\framework64\\v4.0.30319\\setupcache\\v4.6.00081\\2070\\eula.rtf")) returned 1 [0114.039] GetFullPathNameW (in: lpFileName="C:\\Windows\\Microsoft.NET\\Framework64\\v4.0.30319\\SetupCache\\v4.6.00081\\2070\\LocalizedData.xml", nBufferLength=0x105, lpBuffer=0x31e02c, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\Microsoft.NET\\Framework64\\v4.0.30319\\SetupCache\\v4.6.00081\\2070\\LocalizedData.xml", lpFilePart=0x0) returned 0x5c [0114.039] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e520) returned 1 [0114.039] CreateFileW (lpFileName="C:\\Windows\\Microsoft.NET\\Framework64\\v4.0.30319\\SetupCache\\v4.6.00081\\2070\\LocalizedData.xml" (normalized: "c:\\windows\\microsoft.net\\framework64\\v4.0.30319\\setupcache\\v4.6.00081\\2070\\localizeddata.xml"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x178 [0114.040] GetFileType (hFile=0x178) returned 0x1 [0114.040] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e51c) returned 1 [0114.040] GetFileType (hFile=0x178) returned 0x1 [0114.040] GetFileSize (in: hFile=0x178, lpFileSizeHigh=0x31e628 | out: lpFileSizeHigh=0x31e628*=0x0) returned 0x148d6 [0114.040] ReadFile (in: hFile=0x178, lpBuffer=0x2892fe8, nNumberOfBytesToRead=0x148d6, lpNumberOfBytesRead=0x31e5d4, lpOverlapped=0x0 | out: lpBuffer=0x2892fe8*, lpNumberOfBytesRead=0x31e5d4*=0x148d6, lpOverlapped=0x0) returned 1 [0114.071] GetFullPathNameW (in: lpFileName="C:\\Windows\\Microsoft.NET\\Framework64\\v4.0.30319\\SetupCache\\v4.6.00081\\2070\\LocalizedData.xml", nBufferLength=0x105, lpBuffer=0x31e018, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\Microsoft.NET\\Framework64\\v4.0.30319\\SetupCache\\v4.6.00081\\2070\\LocalizedData.xml", lpFilePart=0x0) returned 0x5c [0114.071] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e50c) returned 1 [0114.071] CreateFileW (lpFileName="C:\\Windows\\Microsoft.NET\\Framework64\\v4.0.30319\\SetupCache\\v4.6.00081\\2070\\LocalizedData.xml" (normalized: "c:\\windows\\microsoft.net\\framework64\\v4.0.30319\\setupcache\\v4.6.00081\\2070\\localizeddata.xml"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x178 [0114.072] GetFileType (hFile=0x178) returned 0x1 [0114.072] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e508) returned 1 [0114.072] GetFileType (hFile=0x178) returned 0x1 [0114.072] WriteFile (in: hFile=0x178, lpBuffer=0x26cb000*, nNumberOfBytesToWrite=0x148e0, lpNumberOfBytesWritten=0x31e5c8, lpOverlapped=0x0 | out: lpBuffer=0x26cb000*, lpNumberOfBytesWritten=0x31e5c8*=0x148e0, lpOverlapped=0x0) returned 1 [0114.074] GetFullPathNameW (in: lpFileName="C:\\Windows\\Microsoft.NET\\Framework64\\v4.0.30319\\SetupCache\\v4.6.00081\\2070\\LocalizedData.xml", nBufferLength=0x105, lpBuffer=0x31e14c, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\Microsoft.NET\\Framework64\\v4.0.30319\\SetupCache\\v4.6.00081\\2070\\LocalizedData.xml", lpFilePart=0x0) returned 0x5c [0114.074] GetFullPathNameW (in: lpFileName="C:\\Windows\\Microsoft.NET\\Framework64\\v4.0.30319\\SetupCache\\v4.6.00081\\2070\\LocalizedData.xml", nBufferLength=0x105, lpBuffer=0x31e14c, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\Microsoft.NET\\Framework64\\v4.0.30319\\SetupCache\\v4.6.00081\\2070\\LocalizedData.xml", lpFilePart=0x0) returned 0x5c [0114.074] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e5ac) returned 1 [0114.074] GetFileAttributesExW (in: lpFileName="C:\\Windows\\Microsoft.NET\\Framework64\\v4.0.30319\\SetupCache\\v4.6.00081\\2070\\LocalizedData.xml" (normalized: "c:\\windows\\microsoft.net\\framework64\\v4.0.30319\\setupcache\\v4.6.00081\\2070\\localizeddata.xml"), fInfoLevelId=0x0, lpFileInformation=0x31e628 | out: lpFileInformation=0x31e628*(dwFileAttributes=0x820, ftCreationTime.dwLowDateTime=0x29ab2a00, ftCreationTime.dwHighDateTime=0x1d0ab24, ftLastAccessTime.dwLowDateTime=0x5d56e940, ftLastAccessTime.dwHighDateTime=0x1d2e676, ftLastWriteTime.dwLowDateTime=0x276d8840, ftLastWriteTime.dwHighDateTime=0x1d6eb7f, nFileSizeHigh=0x0, nFileSizeLow=0x148e0)) returned 1 [0114.074] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e5a8) returned 1 [0114.074] MoveFileW (lpExistingFileName="C:\\Windows\\Microsoft.NET\\Framework64\\v4.0.30319\\SetupCache\\v4.6.00081\\2070\\LocalizedData.xml" (normalized: "c:\\windows\\microsoft.net\\framework64\\v4.0.30319\\setupcache\\v4.6.00081\\2070\\localizeddata.xml"), lpNewFileName="C:\\Windows\\Microsoft.NET\\Framework64\\v4.0.30319\\SetupCache\\v4.6.00081\\2070\\LocalizedData.xml" (normalized: "c:\\windows\\microsoft.net\\framework64\\v4.0.30319\\setupcache\\v4.6.00081\\2070\\localizeddata.xml")) returned 1 [0114.075] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e654) returned 1 [0114.075] GetFullPathNameW (in: lpFileName="C:\\Windows\\Microsoft.NET\\Framework64\\v4.0.30319\\SetupCache\\v4.6.00081\\3082", nBufferLength=0x105, lpBuffer=0x31e15c, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\Microsoft.NET\\Framework64\\v4.0.30319\\SetupCache\\v4.6.00081\\3082", lpFilePart=0x0) returned 0x4a [0114.075] GetFullPathNameW (in: lpFileName="C:\\Windows\\Microsoft.NET\\Framework64\\v4.0.30319\\SetupCache\\v4.6.00081\\3082\\", nBufferLength=0x105, lpBuffer=0x31e130, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\Microsoft.NET\\Framework64\\v4.0.30319\\SetupCache\\v4.6.00081\\3082\\", lpFilePart=0x0) returned 0x4b [0114.075] FindFirstFileW (in: lpFileName="C:\\Windows\\Microsoft.NET\\Framework64\\v4.0.30319\\SetupCache\\v4.6.00081\\3082\\*", lpFindFileData=0x31e37c | out: lpFindFileData=0x31e37c*(dwFileAttributes=0x810, ftCreationTime.dwLowDateTime=0x59255d20, ftCreationTime.dwHighDateTime=0x1d2e676, ftLastAccessTime.dwLowDateTime=0x5d5487e0, ftLastAccessTime.dwHighDateTime=0x1d2e676, ftLastWriteTime.dwLowDateTime=0x5d5487e0, ftLastWriteTime.dwHighDateTime=0x1d2e676, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x381e80 [0114.075] FindNextFileW (in: hFindFile=0x381e80, lpFindFileData=0x31e38c | out: lpFindFileData=0x31e38c*(dwFileAttributes=0x810, ftCreationTime.dwLowDateTime=0x59255d20, ftCreationTime.dwHighDateTime=0x1d2e676, ftLastAccessTime.dwLowDateTime=0x5d5487e0, ftLastAccessTime.dwHighDateTime=0x1d2e676, ftLastWriteTime.dwLowDateTime=0x5d5487e0, ftLastWriteTime.dwHighDateTime=0x1d2e676, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0114.075] FindNextFileW (in: hFindFile=0x381e80, lpFindFileData=0x31e38c | out: lpFindFileData=0x31e38c*(dwFileAttributes=0x820, ftCreationTime.dwLowDateTime=0xcd7cbf00, ftCreationTime.dwHighDateTime=0x1d09f02, ftLastAccessTime.dwLowDateTime=0x59255d20, ftLastAccessTime.dwHighDateTime=0x1d2e676, ftLastWriteTime.dwLowDateTime=0xcd7cbf00, ftLastWriteTime.dwHighDateTime=0x1d09f02, nFileSizeHigh=0x0, nFileSizeLow=0x1fb5b, dwReserved0=0x0, dwReserved1=0x0, cFileName="eula.rtf", cAlternateFileName="")) returned 1 [0114.075] FindNextFileW (in: hFindFile=0x381e80, lpFindFileData=0x31e38c | out: lpFindFileData=0x31e38c*(dwFileAttributes=0x820, ftCreationTime.dwLowDateTime=0x29ab2a00, ftCreationTime.dwHighDateTime=0x1d0ab24, ftLastAccessTime.dwLowDateTime=0x5d5487e0, ftLastAccessTime.dwHighDateTime=0x1d2e676, ftLastWriteTime.dwLowDateTime=0x29ab2a00, ftLastWriteTime.dwHighDateTime=0x1d0ab24, nFileSizeHigh=0x0, nFileSizeLow=0x14614, dwReserved0=0x0, dwReserved1=0x0, cFileName="LocalizedData.xml", cAlternateFileName="LOCALI~1.XML")) returned 1 [0114.075] FindNextFileW (in: hFindFile=0x381e80, lpFindFileData=0x31e38c | out: lpFindFileData=0x31e38c*(dwFileAttributes=0x820, ftCreationTime.dwLowDateTime=0x852ae700, ftCreationTime.dwHighDateTime=0x1d0ab27, ftLastAccessTime.dwLowDateTime=0x5d4fc520, ftLastAccessTime.dwHighDateTime=0x1d2e676, ftLastWriteTime.dwLowDateTime=0x852ae700, ftLastWriteTime.dwHighDateTime=0x1d0ab27, nFileSizeHigh=0x0, nFileSizeLow=0x7758, dwReserved0=0x0, dwReserved1=0x0, cFileName="SetupResources.dll", cAlternateFileName="SETUPR~1.DLL")) returned 1 [0114.075] FindNextFileW (in: hFindFile=0x381e80, lpFindFileData=0x31e38c | out: lpFindFileData=0x31e38c*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0114.075] FindClose (in: hFindFile=0x381e80 | out: hFindFile=0x381e80) returned 1 [0114.075] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e614) returned 1 [0114.075] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e620) returned 1 [0114.075] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e654) returned 1 [0114.075] GetFullPathNameW (in: lpFileName="C:\\Windows\\Microsoft.NET\\Framework64\\v4.0.30319\\SetupCache\\v4.6.00081\\3082", nBufferLength=0x105, lpBuffer=0x31e15c, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\Microsoft.NET\\Framework64\\v4.0.30319\\SetupCache\\v4.6.00081\\3082", lpFilePart=0x0) returned 0x4a [0114.075] GetFullPathNameW (in: lpFileName="C:\\Windows\\Microsoft.NET\\Framework64\\v4.0.30319\\SetupCache\\v4.6.00081\\3082\\", nBufferLength=0x105, lpBuffer=0x31e130, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\Microsoft.NET\\Framework64\\v4.0.30319\\SetupCache\\v4.6.00081\\3082\\", lpFilePart=0x0) returned 0x4b [0114.076] FindFirstFileW (in: lpFileName="C:\\Windows\\Microsoft.NET\\Framework64\\v4.0.30319\\SetupCache\\v4.6.00081\\3082\\*", lpFindFileData=0x31e37c | out: lpFindFileData=0x31e37c*(dwFileAttributes=0x810, ftCreationTime.dwLowDateTime=0x59255d20, ftCreationTime.dwHighDateTime=0x1d2e676, ftLastAccessTime.dwLowDateTime=0x5d5487e0, ftLastAccessTime.dwHighDateTime=0x1d2e676, ftLastWriteTime.dwLowDateTime=0x5d5487e0, ftLastWriteTime.dwHighDateTime=0x1d2e676, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x381e80 [0114.076] FindNextFileW (in: hFindFile=0x381e80, lpFindFileData=0x31e38c | out: lpFindFileData=0x31e38c*(dwFileAttributes=0x810, ftCreationTime.dwLowDateTime=0x59255d20, ftCreationTime.dwHighDateTime=0x1d2e676, ftLastAccessTime.dwLowDateTime=0x5d5487e0, ftLastAccessTime.dwHighDateTime=0x1d2e676, ftLastWriteTime.dwLowDateTime=0x5d5487e0, ftLastWriteTime.dwHighDateTime=0x1d2e676, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0114.076] FindNextFileW (in: hFindFile=0x381e80, lpFindFileData=0x31e38c | out: lpFindFileData=0x31e38c*(dwFileAttributes=0x820, ftCreationTime.dwLowDateTime=0xcd7cbf00, ftCreationTime.dwHighDateTime=0x1d09f02, ftLastAccessTime.dwLowDateTime=0x59255d20, ftLastAccessTime.dwHighDateTime=0x1d2e676, ftLastWriteTime.dwLowDateTime=0xcd7cbf00, ftLastWriteTime.dwHighDateTime=0x1d09f02, nFileSizeHigh=0x0, nFileSizeLow=0x1fb5b, dwReserved0=0x0, dwReserved1=0x0, cFileName="eula.rtf", cAlternateFileName="")) returned 1 [0114.076] FindNextFileW (in: hFindFile=0x381e80, lpFindFileData=0x31e38c | out: lpFindFileData=0x31e38c*(dwFileAttributes=0x820, ftCreationTime.dwLowDateTime=0x29ab2a00, ftCreationTime.dwHighDateTime=0x1d0ab24, ftLastAccessTime.dwLowDateTime=0x5d5487e0, ftLastAccessTime.dwHighDateTime=0x1d2e676, ftLastWriteTime.dwLowDateTime=0x29ab2a00, ftLastWriteTime.dwHighDateTime=0x1d0ab24, nFileSizeHigh=0x0, nFileSizeLow=0x14614, dwReserved0=0x0, dwReserved1=0x0, cFileName="LocalizedData.xml", cAlternateFileName="LOCALI~1.XML")) returned 1 [0114.076] FindNextFileW (in: hFindFile=0x381e80, lpFindFileData=0x31e38c | out: lpFindFileData=0x31e38c*(dwFileAttributes=0x820, ftCreationTime.dwLowDateTime=0x852ae700, ftCreationTime.dwHighDateTime=0x1d0ab27, ftLastAccessTime.dwLowDateTime=0x5d4fc520, ftLastAccessTime.dwHighDateTime=0x1d2e676, ftLastWriteTime.dwLowDateTime=0x852ae700, ftLastWriteTime.dwHighDateTime=0x1d0ab27, nFileSizeHigh=0x0, nFileSizeLow=0x7758, dwReserved0=0x0, dwReserved1=0x0, cFileName="SetupResources.dll", cAlternateFileName="SETUPR~1.DLL")) returned 1 [0114.076] FindNextFileW (in: hFindFile=0x381e80, lpFindFileData=0x31e38c | out: lpFindFileData=0x31e38c*(dwFileAttributes=0x820, ftCreationTime.dwLowDateTime=0x852ae700, ftCreationTime.dwHighDateTime=0x1d0ab27, ftLastAccessTime.dwLowDateTime=0x5d4fc520, ftLastAccessTime.dwHighDateTime=0x1d2e676, ftLastWriteTime.dwLowDateTime=0x852ae700, ftLastWriteTime.dwHighDateTime=0x1d0ab27, nFileSizeHigh=0x0, nFileSizeLow=0x7758, dwReserved0=0x0, dwReserved1=0x0, cFileName="SetupResources.dll", cAlternateFileName="SETUPR~1.DLL")) returned 0 [0114.076] FindClose (in: hFindFile=0x381e80 | out: hFindFile=0x381e80) returned 1 [0114.076] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e614) returned 1 [0114.076] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e620) returned 1 [0114.076] GetFullPathNameW (in: lpFileName="C:\\Windows\\Microsoft.NET\\Framework64\\v4.0.30319\\SetupCache\\v4.6.00081\\3082\\eula.rtf", nBufferLength=0x105, lpBuffer=0x31e02c, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\Microsoft.NET\\Framework64\\v4.0.30319\\SetupCache\\v4.6.00081\\3082\\eula.rtf", lpFilePart=0x0) returned 0x53 [0114.076] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e520) returned 1 [0114.076] CreateFileW (lpFileName="C:\\Windows\\Microsoft.NET\\Framework64\\v4.0.30319\\SetupCache\\v4.6.00081\\3082\\eula.rtf" (normalized: "c:\\windows\\microsoft.net\\framework64\\v4.0.30319\\setupcache\\v4.6.00081\\3082\\eula.rtf"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x178 [0114.076] GetFileType (hFile=0x178) returned 0x1 [0114.076] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e51c) returned 1 [0114.076] GetFileType (hFile=0x178) returned 0x1 [0114.076] GetFileSize (in: hFile=0x178, lpFileSizeHigh=0x31e628 | out: lpFileSizeHigh=0x31e628*=0x0) returned 0x1fb5b [0114.078] ReadFile (in: hFile=0x178, lpBuffer=0x36194b0, nNumberOfBytesToRead=0x1fb5b, lpNumberOfBytesRead=0x31e5d4, lpOverlapped=0x0 | out: lpBuffer=0x36194b0*, lpNumberOfBytesRead=0x31e5d4*=0x1fb5b, lpOverlapped=0x0) returned 1 [0114.111] GetFullPathNameW (in: lpFileName="C:\\Windows\\Microsoft.NET\\Framework64\\v4.0.30319\\SetupCache\\v4.6.00081\\3082\\eula.rtf", nBufferLength=0x105, lpBuffer=0x31e018, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\Microsoft.NET\\Framework64\\v4.0.30319\\SetupCache\\v4.6.00081\\3082\\eula.rtf", lpFilePart=0x0) returned 0x53 [0114.111] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e50c) returned 1 [0114.111] CreateFileW (lpFileName="C:\\Windows\\Microsoft.NET\\Framework64\\v4.0.30319\\SetupCache\\v4.6.00081\\3082\\eula.rtf" (normalized: "c:\\windows\\microsoft.net\\framework64\\v4.0.30319\\setupcache\\v4.6.00081\\3082\\eula.rtf"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x178 [0114.113] GetFileType (hFile=0x178) returned 0x1 [0114.113] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e508) returned 1 [0114.113] GetFileType (hFile=0x178) returned 0x1 [0114.113] WriteFile (in: hFile=0x178, lpBuffer=0x36b7dc8*, nNumberOfBytesToWrite=0x1fb60, lpNumberOfBytesWritten=0x31e5c8, lpOverlapped=0x0 | out: lpBuffer=0x36b7dc8*, lpNumberOfBytesWritten=0x31e5c8*=0x1fb60, lpOverlapped=0x0) returned 1 [0114.115] GetFullPathNameW (in: lpFileName="C:\\Windows\\Microsoft.NET\\Framework64\\v4.0.30319\\SetupCache\\v4.6.00081\\3082\\eula.rtf", nBufferLength=0x105, lpBuffer=0x31e14c, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\Microsoft.NET\\Framework64\\v4.0.30319\\SetupCache\\v4.6.00081\\3082\\eula.rtf", lpFilePart=0x0) returned 0x53 [0114.115] GetFullPathNameW (in: lpFileName="C:\\Windows\\Microsoft.NET\\Framework64\\v4.0.30319\\SetupCache\\v4.6.00081\\3082\\eula.rtf", nBufferLength=0x105, lpBuffer=0x31e14c, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\Microsoft.NET\\Framework64\\v4.0.30319\\SetupCache\\v4.6.00081\\3082\\eula.rtf", lpFilePart=0x0) returned 0x53 [0114.115] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e5ac) returned 1 [0114.115] GetFileAttributesExW (in: lpFileName="C:\\Windows\\Microsoft.NET\\Framework64\\v4.0.30319\\SetupCache\\v4.6.00081\\3082\\eula.rtf" (normalized: "c:\\windows\\microsoft.net\\framework64\\v4.0.30319\\setupcache\\v4.6.00081\\3082\\eula.rtf"), fInfoLevelId=0x0, lpFileInformation=0x31e628 | out: lpFileInformation=0x31e628*(dwFileAttributes=0x820, ftCreationTime.dwLowDateTime=0xcd7cbf00, ftCreationTime.dwHighDateTime=0x1d09f02, ftLastAccessTime.dwLowDateTime=0x59255d20, ftLastAccessTime.dwHighDateTime=0x1d2e676, ftLastWriteTime.dwLowDateTime=0x2774ac60, ftLastWriteTime.dwHighDateTime=0x1d6eb7f, nFileSizeHigh=0x0, nFileSizeLow=0x1fb60)) returned 1 [0114.115] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e5a8) returned 1 [0114.115] MoveFileW (lpExistingFileName="C:\\Windows\\Microsoft.NET\\Framework64\\v4.0.30319\\SetupCache\\v4.6.00081\\3082\\eula.rtf" (normalized: "c:\\windows\\microsoft.net\\framework64\\v4.0.30319\\setupcache\\v4.6.00081\\3082\\eula.rtf"), lpNewFileName="C:\\Windows\\Microsoft.NET\\Framework64\\v4.0.30319\\SetupCache\\v4.6.00081\\3082\\eula.rtf" (normalized: "c:\\windows\\microsoft.net\\framework64\\v4.0.30319\\setupcache\\v4.6.00081\\3082\\eula.rtf")) returned 1 [0114.116] GetFullPathNameW (in: lpFileName="C:\\Windows\\Microsoft.NET\\Framework64\\v4.0.30319\\SetupCache\\v4.6.00081\\3082\\LocalizedData.xml", nBufferLength=0x105, lpBuffer=0x31e02c, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\Microsoft.NET\\Framework64\\v4.0.30319\\SetupCache\\v4.6.00081\\3082\\LocalizedData.xml", lpFilePart=0x0) returned 0x5c [0114.116] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e520) returned 1 [0114.116] CreateFileW (lpFileName="C:\\Windows\\Microsoft.NET\\Framework64\\v4.0.30319\\SetupCache\\v4.6.00081\\3082\\LocalizedData.xml" (normalized: "c:\\windows\\microsoft.net\\framework64\\v4.0.30319\\setupcache\\v4.6.00081\\3082\\localizeddata.xml"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x178 [0114.116] GetFileType (hFile=0x178) returned 0x1 [0114.116] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e51c) returned 1 [0114.116] GetFileType (hFile=0x178) returned 0x1 [0114.116] GetFileSize (in: hFile=0x178, lpFileSizeHigh=0x31e628 | out: lpFileSizeHigh=0x31e628*=0x0) returned 0x14614 [0114.116] ReadFile (in: hFile=0x178, lpBuffer=0x268a338, nNumberOfBytesToRead=0x14614, lpNumberOfBytesRead=0x31e5d4, lpOverlapped=0x0 | out: lpBuffer=0x268a338*, lpNumberOfBytesRead=0x31e5d4*=0x14614, lpOverlapped=0x0) returned 1 [0114.140] GetFullPathNameW (in: lpFileName="C:\\Windows\\Microsoft.NET\\Framework64\\v4.0.30319\\SetupCache\\v4.6.00081\\3082\\LocalizedData.xml", nBufferLength=0x105, lpBuffer=0x31e018, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\Microsoft.NET\\Framework64\\v4.0.30319\\SetupCache\\v4.6.00081\\3082\\LocalizedData.xml", lpFilePart=0x0) returned 0x5c [0114.140] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e50c) returned 1 [0114.140] CreateFileW (lpFileName="C:\\Windows\\Microsoft.NET\\Framework64\\v4.0.30319\\SetupCache\\v4.6.00081\\3082\\LocalizedData.xml" (normalized: "c:\\windows\\microsoft.net\\framework64\\v4.0.30319\\setupcache\\v4.6.00081\\3082\\localizeddata.xml"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x178 [0114.141] GetFileType (hFile=0x178) returned 0x1 [0114.142] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e508) returned 1 [0114.142] GetFileType (hFile=0x178) returned 0x1 [0114.142] WriteFile (in: hFile=0x178, lpBuffer=0x2714390*, nNumberOfBytesToWrite=0x14620, lpNumberOfBytesWritten=0x31e5c8, lpOverlapped=0x0 | out: lpBuffer=0x2714390*, lpNumberOfBytesWritten=0x31e5c8*=0x14620, lpOverlapped=0x0) returned 1 [0114.143] GetFullPathNameW (in: lpFileName="C:\\Windows\\Microsoft.NET\\Framework64\\v4.0.30319\\SetupCache\\v4.6.00081\\3082\\LocalizedData.xml", nBufferLength=0x105, lpBuffer=0x31e14c, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\Microsoft.NET\\Framework64\\v4.0.30319\\SetupCache\\v4.6.00081\\3082\\LocalizedData.xml", lpFilePart=0x0) returned 0x5c [0114.143] GetFullPathNameW (in: lpFileName="C:\\Windows\\Microsoft.NET\\Framework64\\v4.0.30319\\SetupCache\\v4.6.00081\\3082\\LocalizedData.xml", nBufferLength=0x105, lpBuffer=0x31e14c, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\Microsoft.NET\\Framework64\\v4.0.30319\\SetupCache\\v4.6.00081\\3082\\LocalizedData.xml", lpFilePart=0x0) returned 0x5c [0114.143] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e5ac) returned 1 [0114.144] GetFileAttributesExW (in: lpFileName="C:\\Windows\\Microsoft.NET\\Framework64\\v4.0.30319\\SetupCache\\v4.6.00081\\3082\\LocalizedData.xml" (normalized: "c:\\windows\\microsoft.net\\framework64\\v4.0.30319\\setupcache\\v4.6.00081\\3082\\localizeddata.xml"), fInfoLevelId=0x0, lpFileInformation=0x31e628 | out: lpFileInformation=0x31e628*(dwFileAttributes=0x820, ftCreationTime.dwLowDateTime=0x29ab2a00, ftCreationTime.dwHighDateTime=0x1d0ab24, ftLastAccessTime.dwLowDateTime=0x5d5487e0, ftLastAccessTime.dwHighDateTime=0x1d2e676, ftLastWriteTime.dwLowDateTime=0x27770dc0, ftLastWriteTime.dwHighDateTime=0x1d6eb7f, nFileSizeHigh=0x0, nFileSizeLow=0x14620)) returned 1 [0114.144] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e5a8) returned 1 [0114.144] MoveFileW (lpExistingFileName="C:\\Windows\\Microsoft.NET\\Framework64\\v4.0.30319\\SetupCache\\v4.6.00081\\3082\\LocalizedData.xml" (normalized: "c:\\windows\\microsoft.net\\framework64\\v4.0.30319\\setupcache\\v4.6.00081\\3082\\localizeddata.xml"), lpNewFileName="C:\\Windows\\Microsoft.NET\\Framework64\\v4.0.30319\\SetupCache\\v4.6.00081\\3082\\LocalizedData.xml" (normalized: "c:\\windows\\microsoft.net\\framework64\\v4.0.30319\\setupcache\\v4.6.00081\\3082\\localizeddata.xml")) returned 1 [0114.144] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e654) returned 1 [0114.144] GetFullPathNameW (in: lpFileName="C:\\Windows\\Microsoft.NET\\Framework64\\v4.0.30319\\SetupCache\\v4.6.00081\\Graphics", nBufferLength=0x105, lpBuffer=0x31e15c, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\Microsoft.NET\\Framework64\\v4.0.30319\\SetupCache\\v4.6.00081\\Graphics", lpFilePart=0x0) returned 0x4e [0114.144] GetFullPathNameW (in: lpFileName="C:\\Windows\\Microsoft.NET\\Framework64\\v4.0.30319\\SetupCache\\v4.6.00081\\Graphics\\", nBufferLength=0x105, lpBuffer=0x31e130, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\Microsoft.NET\\Framework64\\v4.0.30319\\SetupCache\\v4.6.00081\\Graphics\\", lpFilePart=0x0) returned 0x4f [0114.144] FindFirstFileW (in: lpFileName="C:\\Windows\\Microsoft.NET\\Framework64\\v4.0.30319\\SetupCache\\v4.6.00081\\Graphics\\*", lpFindFileData=0x31e37c | out: lpFindFileData=0x31e37c*(dwFileAttributes=0x810, ftCreationTime.dwLowDateTime=0x5d56e940, ftCreationTime.dwHighDateTime=0x1d2e676, ftLastAccessTime.dwLowDateTime=0x5d5e0d60, ftLastAccessTime.dwHighDateTime=0x1d2e676, ftLastWriteTime.dwLowDateTime=0x5d5e0d60, ftLastWriteTime.dwHighDateTime=0x1d2e676, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x381e80 [0114.146] FindNextFileW (in: hFindFile=0x381e80, lpFindFileData=0x31e38c | out: lpFindFileData=0x31e38c*(dwFileAttributes=0x810, ftCreationTime.dwLowDateTime=0x5d56e940, ftCreationTime.dwHighDateTime=0x1d2e676, ftLastAccessTime.dwLowDateTime=0x5d5e0d60, ftLastAccessTime.dwHighDateTime=0x1d2e676, ftLastWriteTime.dwLowDateTime=0x5d5e0d60, ftLastWriteTime.dwHighDateTime=0x1d2e676, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0114.146] FindNextFileW (in: hFindFile=0x381e80, lpFindFileData=0x31e38c | out: lpFindFileData=0x31e38c*(dwFileAttributes=0x820, ftCreationTime.dwLowDateTime=0x50eae000, ftCreationTime.dwHighDateTime=0x1d09f04, ftLastAccessTime.dwLowDateTime=0x5d56e940, ftLastAccessTime.dwHighDateTime=0x1d2e676, ftLastWriteTime.dwLowDateTime=0x50eae000, ftLastWriteTime.dwHighDateTime=0x1d09f04, nFileSizeHigh=0x0, nFileSizeLow=0x1ecb4, dwReserved0=0x0, dwReserved1=0x0, cFileName="Print.ico", cAlternateFileName="")) returned 1 [0114.146] FindNextFileW (in: hFindFile=0x381e80, lpFindFileData=0x31e38c | out: lpFindFileData=0x31e38c*(dwFileAttributes=0x820, ftCreationTime.dwLowDateTime=0x50eae000, ftCreationTime.dwHighDateTime=0x1d09f04, ftLastAccessTime.dwLowDateTime=0x5d56e940, ftLastAccessTime.dwHighDateTime=0x1d2e676, ftLastWriteTime.dwLowDateTime=0x50eae000, ftLastWriteTime.dwHighDateTime=0x1d09f04, nFileSizeHigh=0x0, nFileSizeLow=0x2321d, dwReserved0=0x0, dwReserved1=0x0, cFileName="Rotate1.ico", cAlternateFileName="")) returned 1 [0114.146] FindNextFileW (in: hFindFile=0x381e80, lpFindFileData=0x31e38c | out: lpFindFileData=0x31e38c*(dwFileAttributes=0x820, ftCreationTime.dwLowDateTime=0x50eae000, ftCreationTime.dwHighDateTime=0x1d09f04, ftLastAccessTime.dwLowDateTime=0x5d56e940, ftLastAccessTime.dwHighDateTime=0x1d2e676, ftLastWriteTime.dwLowDateTime=0x50eae000, ftLastWriteTime.dwHighDateTime=0x1d09f04, nFileSizeHigh=0x0, nFileSizeLow=0x2323c, dwReserved0=0x0, dwReserved1=0x0, cFileName="Rotate10.ico", cAlternateFileName="")) returned 1 [0114.146] FindNextFileW (in: hFindFile=0x381e80, lpFindFileData=0x31e38c | out: lpFindFileData=0x31e38c*(dwFileAttributes=0x820, ftCreationTime.dwLowDateTime=0x50eae000, ftCreationTime.dwHighDateTime=0x1d09f04, ftLastAccessTime.dwLowDateTime=0x5d56e940, ftLastAccessTime.dwHighDateTime=0x1d2e676, ftLastWriteTime.dwLowDateTime=0x50eae000, ftLastWriteTime.dwHighDateTime=0x1d09f04, nFileSizeHigh=0x0, nFileSizeLow=0x232ee, dwReserved0=0x0, dwReserved1=0x0, cFileName="Rotate2.ico", cAlternateFileName="")) returned 1 [0114.146] FindNextFileW (in: hFindFile=0x381e80, lpFindFileData=0x31e38c | out: lpFindFileData=0x31e38c*(dwFileAttributes=0x820, ftCreationTime.dwLowDateTime=0x50eae000, ftCreationTime.dwHighDateTime=0x1d09f04, ftLastAccessTime.dwLowDateTime=0x5d56e940, ftLastAccessTime.dwHighDateTime=0x1d2e676, ftLastWriteTime.dwLowDateTime=0x50eae000, ftLastWriteTime.dwHighDateTime=0x1d09f04, nFileSizeHigh=0x0, nFileSizeLow=0x23317, dwReserved0=0x0, dwReserved1=0x0, cFileName="Rotate3.ico", cAlternateFileName="")) returned 1 [0114.146] FindNextFileW (in: hFindFile=0x381e80, lpFindFileData=0x31e38c | out: lpFindFileData=0x31e38c*(dwFileAttributes=0x820, ftCreationTime.dwLowDateTime=0x50eae000, ftCreationTime.dwHighDateTime=0x1d09f04, ftLastAccessTime.dwLowDateTime=0x5d594aa0, ftLastAccessTime.dwHighDateTime=0x1d2e676, ftLastWriteTime.dwLowDateTime=0x50eae000, ftLastWriteTime.dwHighDateTime=0x1d09f04, nFileSizeHigh=0x0, nFileSizeLow=0x232a1, dwReserved0=0x0, dwReserved1=0x0, cFileName="Rotate4.ico", cAlternateFileName="")) returned 1 [0114.146] FindNextFileW (in: hFindFile=0x381e80, lpFindFileData=0x31e38c | out: lpFindFileData=0x31e38c*(dwFileAttributes=0x820, ftCreationTime.dwLowDateTime=0x50eae000, ftCreationTime.dwHighDateTime=0x1d09f04, ftLastAccessTime.dwLowDateTime=0x5d594aa0, ftLastAccessTime.dwHighDateTime=0x1d2e676, ftLastWriteTime.dwLowDateTime=0x50eae000, ftLastWriteTime.dwHighDateTime=0x1d09f04, nFileSizeHigh=0x0, nFileSizeLow=0x231ff, dwReserved0=0x0, dwReserved1=0x0, cFileName="Rotate5.ico", cAlternateFileName="")) returned 1 [0114.146] FindNextFileW (in: hFindFile=0x381e80, lpFindFileData=0x31e38c | out: lpFindFileData=0x31e38c*(dwFileAttributes=0x820, ftCreationTime.dwLowDateTime=0x50eae000, ftCreationTime.dwHighDateTime=0x1d09f04, ftLastAccessTime.dwLowDateTime=0x5d594aa0, ftLastAccessTime.dwHighDateTime=0x1d2e676, ftLastWriteTime.dwLowDateTime=0x50eae000, ftLastWriteTime.dwHighDateTime=0x1d09f04, nFileSizeHigh=0x0, nFileSizeLow=0x23209, dwReserved0=0x0, dwReserved1=0x0, cFileName="Rotate6.ico", cAlternateFileName="")) returned 1 [0114.146] FindNextFileW (in: hFindFile=0x381e80, lpFindFileData=0x31e38c | out: lpFindFileData=0x31e38c*(dwFileAttributes=0x820, ftCreationTime.dwLowDateTime=0x50eae000, ftCreationTime.dwHighDateTime=0x1d09f04, ftLastAccessTime.dwLowDateTime=0x5d594aa0, ftLastAccessTime.dwHighDateTime=0x1d2e676, ftLastWriteTime.dwLowDateTime=0x50eae000, ftLastWriteTime.dwHighDateTime=0x1d09f04, nFileSizeHigh=0x0, nFileSizeLow=0x232d4, dwReserved0=0x0, dwReserved1=0x0, cFileName="Rotate7.ico", cAlternateFileName="")) returned 1 [0114.146] FindNextFileW (in: hFindFile=0x381e80, lpFindFileData=0x31e38c | out: lpFindFileData=0x31e38c*(dwFileAttributes=0x820, ftCreationTime.dwLowDateTime=0x50eae000, ftCreationTime.dwHighDateTime=0x1d09f04, ftLastAccessTime.dwLowDateTime=0x5d594aa0, ftLastAccessTime.dwHighDateTime=0x1d2e676, ftLastWriteTime.dwLowDateTime=0x50eae000, ftLastWriteTime.dwHighDateTime=0x1d09f04, nFileSizeHigh=0x0, nFileSizeLow=0x231db, dwReserved0=0x0, dwReserved1=0x0, cFileName="Rotate8.ico", cAlternateFileName="")) returned 1 [0114.146] FindNextFileW (in: hFindFile=0x381e80, lpFindFileData=0x31e38c | out: lpFindFileData=0x31e38c*(dwFileAttributes=0x820, ftCreationTime.dwLowDateTime=0x50eae000, ftCreationTime.dwHighDateTime=0x1d09f04, ftLastAccessTime.dwLowDateTime=0x5d594aa0, ftLastAccessTime.dwHighDateTime=0x1d2e676, ftLastWriteTime.dwLowDateTime=0x50eae000, ftLastWriteTime.dwHighDateTime=0x1d09f04, nFileSizeHigh=0x0, nFileSizeLow=0x232c0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Rotate9.ico", cAlternateFileName="")) returned 1 [0114.146] FindNextFileW (in: hFindFile=0x381e80, lpFindFileData=0x31e38c | out: lpFindFileData=0x31e38c*(dwFileAttributes=0x820, ftCreationTime.dwLowDateTime=0x50eae000, ftCreationTime.dwHighDateTime=0x1d09f04, ftLastAccessTime.dwLowDateTime=0x5d594aa0, ftLastAccessTime.dwHighDateTime=0x1d2e676, ftLastWriteTime.dwLowDateTime=0x50eae000, ftLastWriteTime.dwHighDateTime=0x1d09f04, nFileSizeHigh=0x0, nFileSizeLow=0x1ee54, dwReserved0=0x0, dwReserved1=0x0, cFileName="Save.ico", cAlternateFileName="")) returned 1 [0114.146] FindNextFileW (in: hFindFile=0x381e80, lpFindFileData=0x31e38c | out: lpFindFileData=0x31e38c*(dwFileAttributes=0x820, ftCreationTime.dwLowDateTime=0x50eae000, ftCreationTime.dwHighDateTime=0x1d09f04, ftLastAccessTime.dwLowDateTime=0x5d5bac00, ftLastAccessTime.dwHighDateTime=0x1d2e676, ftLastWriteTime.dwLowDateTime=0x50eae000, ftLastWriteTime.dwHighDateTime=0x1d09f04, nFileSizeHigh=0x0, nFileSizeLow=0x1ed26, dwReserved0=0x0, dwReserved1=0x0, cFileName="Setup.ico", cAlternateFileName="")) returned 1 [0114.146] FindNextFileW (in: hFindFile=0x381e80, lpFindFileData=0x31e38c | out: lpFindFileData=0x31e38c*(dwFileAttributes=0x820, ftCreationTime.dwLowDateTime=0x50eae000, ftCreationTime.dwHighDateTime=0x1d09f04, ftLastAccessTime.dwLowDateTime=0x5d5bac00, ftLastAccessTime.dwHighDateTime=0x1d2e676, ftLastWriteTime.dwLowDateTime=0x50eae000, ftLastWriteTime.dwHighDateTime=0x1d09f04, nFileSizeHigh=0x0, nFileSizeLow=0x2e6f7, dwReserved0=0x0, dwReserved1=0x0, cFileName="stop.ico", cAlternateFileName="")) returned 1 [0114.146] FindNextFileW (in: hFindFile=0x381e80, lpFindFileData=0x31e38c | out: lpFindFileData=0x31e38c*(dwFileAttributes=0x820, ftCreationTime.dwLowDateTime=0x50eae000, ftCreationTime.dwHighDateTime=0x1d09f04, ftLastAccessTime.dwLowDateTime=0x5d5e0d60, ftLastAccessTime.dwHighDateTime=0x1d2e676, ftLastWriteTime.dwLowDateTime=0x50eae000, ftLastWriteTime.dwHighDateTime=0x1d09f04, nFileSizeHigh=0x0, nFileSizeLow=0x21479, dwReserved0=0x0, dwReserved1=0x0, cFileName="SysReqMet.ico", cAlternateFileName="SYSREQ~1.ICO")) returned 1 [0114.146] FindNextFileW (in: hFindFile=0x381e80, lpFindFileData=0x31e38c | out: lpFindFileData=0x31e38c*(dwFileAttributes=0x820, ftCreationTime.dwLowDateTime=0x50eae000, ftCreationTime.dwHighDateTime=0x1d09f04, ftLastAccessTime.dwLowDateTime=0x5d5e0d60, ftLastAccessTime.dwHighDateTime=0x1d2e676, ftLastWriteTime.dwLowDateTime=0x50eae000, ftLastWriteTime.dwHighDateTime=0x1d09f04, nFileSizeHigh=0x0, nFileSizeLow=0x23276, dwReserved0=0x0, dwReserved1=0x0, cFileName="SysReqNotMet.ico", cAlternateFileName="SYSREQ~2.ICO")) returned 1 [0114.146] FindNextFileW (in: hFindFile=0x381e80, lpFindFileData=0x31e38c | out: lpFindFileData=0x31e38c*(dwFileAttributes=0x820, ftCreationTime.dwLowDateTime=0x50eae000, ftCreationTime.dwHighDateTime=0x1d09f04, ftLastAccessTime.dwLowDateTime=0x5d5e0d60, ftLastAccessTime.dwHighDateTime=0x1d2e676, ftLastWriteTime.dwLowDateTime=0x50eae000, ftLastWriteTime.dwHighDateTime=0x1d09f04, nFileSizeHigh=0x0, nFileSizeLow=0x30aad, dwReserved0=0x0, dwReserved1=0x0, cFileName="warn.ico", cAlternateFileName="")) returned 1 [0114.146] FindNextFileW (in: hFindFile=0x381e80, lpFindFileData=0x31e38c | out: lpFindFileData=0x31e38c*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0114.146] FindClose (in: hFindFile=0x381e80 | out: hFindFile=0x381e80) returned 1 [0114.147] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e614) returned 1 [0114.147] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e620) returned 1 [0114.147] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e654) returned 1 [0114.147] GetFullPathNameW (in: lpFileName="C:\\Windows\\Microsoft.NET\\Framework64\\v4.0.30319\\SetupCache\\v4.6.00081\\Graphics", nBufferLength=0x105, lpBuffer=0x31e15c, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\Microsoft.NET\\Framework64\\v4.0.30319\\SetupCache\\v4.6.00081\\Graphics", lpFilePart=0x0) returned 0x4e [0114.147] GetFullPathNameW (in: lpFileName="C:\\Windows\\Microsoft.NET\\Framework64\\v4.0.30319\\SetupCache\\v4.6.00081\\Graphics\\", nBufferLength=0x105, lpBuffer=0x31e130, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\Microsoft.NET\\Framework64\\v4.0.30319\\SetupCache\\v4.6.00081\\Graphics\\", lpFilePart=0x0) returned 0x4f [0114.147] FindFirstFileW (in: lpFileName="C:\\Windows\\Microsoft.NET\\Framework64\\v4.0.30319\\SetupCache\\v4.6.00081\\Graphics\\*", lpFindFileData=0x31e37c | out: lpFindFileData=0x31e37c*(dwFileAttributes=0x810, ftCreationTime.dwLowDateTime=0x5d56e940, ftCreationTime.dwHighDateTime=0x1d2e676, ftLastAccessTime.dwLowDateTime=0x5d5e0d60, ftLastAccessTime.dwHighDateTime=0x1d2e676, ftLastWriteTime.dwLowDateTime=0x5d5e0d60, ftLastWriteTime.dwHighDateTime=0x1d2e676, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x381e80 [0114.148] FindNextFileW (in: hFindFile=0x381e80, lpFindFileData=0x31e38c | out: lpFindFileData=0x31e38c*(dwFileAttributes=0x810, ftCreationTime.dwLowDateTime=0x5d56e940, ftCreationTime.dwHighDateTime=0x1d2e676, ftLastAccessTime.dwLowDateTime=0x5d5e0d60, ftLastAccessTime.dwHighDateTime=0x1d2e676, ftLastWriteTime.dwLowDateTime=0x5d5e0d60, ftLastWriteTime.dwHighDateTime=0x1d2e676, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0114.148] FindNextFileW (in: hFindFile=0x381e80, lpFindFileData=0x31e38c | out: lpFindFileData=0x31e38c*(dwFileAttributes=0x820, ftCreationTime.dwLowDateTime=0x50eae000, ftCreationTime.dwHighDateTime=0x1d09f04, ftLastAccessTime.dwLowDateTime=0x5d56e940, ftLastAccessTime.dwHighDateTime=0x1d2e676, ftLastWriteTime.dwLowDateTime=0x50eae000, ftLastWriteTime.dwHighDateTime=0x1d09f04, nFileSizeHigh=0x0, nFileSizeLow=0x1ecb4, dwReserved0=0x0, dwReserved1=0x0, cFileName="Print.ico", cAlternateFileName="")) returned 1 [0114.148] FindNextFileW (in: hFindFile=0x381e80, lpFindFileData=0x31e38c | out: lpFindFileData=0x31e38c*(dwFileAttributes=0x820, ftCreationTime.dwLowDateTime=0x50eae000, ftCreationTime.dwHighDateTime=0x1d09f04, ftLastAccessTime.dwLowDateTime=0x5d56e940, ftLastAccessTime.dwHighDateTime=0x1d2e676, ftLastWriteTime.dwLowDateTime=0x50eae000, ftLastWriteTime.dwHighDateTime=0x1d09f04, nFileSizeHigh=0x0, nFileSizeLow=0x2321d, dwReserved0=0x0, dwReserved1=0x0, cFileName="Rotate1.ico", cAlternateFileName="")) returned 1 [0114.148] FindNextFileW (in: hFindFile=0x381e80, lpFindFileData=0x31e38c | out: lpFindFileData=0x31e38c*(dwFileAttributes=0x820, ftCreationTime.dwLowDateTime=0x50eae000, ftCreationTime.dwHighDateTime=0x1d09f04, ftLastAccessTime.dwLowDateTime=0x5d56e940, ftLastAccessTime.dwHighDateTime=0x1d2e676, ftLastWriteTime.dwLowDateTime=0x50eae000, ftLastWriteTime.dwHighDateTime=0x1d09f04, nFileSizeHigh=0x0, nFileSizeLow=0x2323c, dwReserved0=0x0, dwReserved1=0x0, cFileName="Rotate10.ico", cAlternateFileName="")) returned 1 [0114.148] FindNextFileW (in: hFindFile=0x381e80, lpFindFileData=0x31e38c | out: lpFindFileData=0x31e38c*(dwFileAttributes=0x820, ftCreationTime.dwLowDateTime=0x50eae000, ftCreationTime.dwHighDateTime=0x1d09f04, ftLastAccessTime.dwLowDateTime=0x5d56e940, ftLastAccessTime.dwHighDateTime=0x1d2e676, ftLastWriteTime.dwLowDateTime=0x50eae000, ftLastWriteTime.dwHighDateTime=0x1d09f04, nFileSizeHigh=0x0, nFileSizeLow=0x232ee, dwReserved0=0x0, dwReserved1=0x0, cFileName="Rotate2.ico", cAlternateFileName="")) returned 1 [0114.148] FindNextFileW (in: hFindFile=0x381e80, lpFindFileData=0x31e38c | out: lpFindFileData=0x31e38c*(dwFileAttributes=0x820, ftCreationTime.dwLowDateTime=0x50eae000, ftCreationTime.dwHighDateTime=0x1d09f04, ftLastAccessTime.dwLowDateTime=0x5d56e940, ftLastAccessTime.dwHighDateTime=0x1d2e676, ftLastWriteTime.dwLowDateTime=0x50eae000, ftLastWriteTime.dwHighDateTime=0x1d09f04, nFileSizeHigh=0x0, nFileSizeLow=0x23317, dwReserved0=0x0, dwReserved1=0x0, cFileName="Rotate3.ico", cAlternateFileName="")) returned 1 [0114.148] FindNextFileW (in: hFindFile=0x381e80, lpFindFileData=0x31e38c | out: lpFindFileData=0x31e38c*(dwFileAttributes=0x820, ftCreationTime.dwLowDateTime=0x50eae000, ftCreationTime.dwHighDateTime=0x1d09f04, ftLastAccessTime.dwLowDateTime=0x5d594aa0, ftLastAccessTime.dwHighDateTime=0x1d2e676, ftLastWriteTime.dwLowDateTime=0x50eae000, ftLastWriteTime.dwHighDateTime=0x1d09f04, nFileSizeHigh=0x0, nFileSizeLow=0x232a1, dwReserved0=0x0, dwReserved1=0x0, cFileName="Rotate4.ico", cAlternateFileName="")) returned 1 [0114.148] FindNextFileW (in: hFindFile=0x381e80, lpFindFileData=0x31e38c | out: lpFindFileData=0x31e38c*(dwFileAttributes=0x820, ftCreationTime.dwLowDateTime=0x50eae000, ftCreationTime.dwHighDateTime=0x1d09f04, ftLastAccessTime.dwLowDateTime=0x5d594aa0, ftLastAccessTime.dwHighDateTime=0x1d2e676, ftLastWriteTime.dwLowDateTime=0x50eae000, ftLastWriteTime.dwHighDateTime=0x1d09f04, nFileSizeHigh=0x0, nFileSizeLow=0x231ff, dwReserved0=0x0, dwReserved1=0x0, cFileName="Rotate5.ico", cAlternateFileName="")) returned 1 [0114.148] FindNextFileW (in: hFindFile=0x381e80, lpFindFileData=0x31e38c | out: lpFindFileData=0x31e38c*(dwFileAttributes=0x820, ftCreationTime.dwLowDateTime=0x50eae000, ftCreationTime.dwHighDateTime=0x1d09f04, ftLastAccessTime.dwLowDateTime=0x5d594aa0, ftLastAccessTime.dwHighDateTime=0x1d2e676, ftLastWriteTime.dwLowDateTime=0x50eae000, ftLastWriteTime.dwHighDateTime=0x1d09f04, nFileSizeHigh=0x0, nFileSizeLow=0x23209, dwReserved0=0x0, dwReserved1=0x0, cFileName="Rotate6.ico", cAlternateFileName="")) returned 1 [0114.148] FindNextFileW (in: hFindFile=0x381e80, lpFindFileData=0x31e38c | out: lpFindFileData=0x31e38c*(dwFileAttributes=0x820, ftCreationTime.dwLowDateTime=0x50eae000, ftCreationTime.dwHighDateTime=0x1d09f04, ftLastAccessTime.dwLowDateTime=0x5d594aa0, ftLastAccessTime.dwHighDateTime=0x1d2e676, ftLastWriteTime.dwLowDateTime=0x50eae000, ftLastWriteTime.dwHighDateTime=0x1d09f04, nFileSizeHigh=0x0, nFileSizeLow=0x232d4, dwReserved0=0x0, dwReserved1=0x0, cFileName="Rotate7.ico", cAlternateFileName="")) returned 1 [0114.149] FindNextFileW (in: hFindFile=0x381e80, lpFindFileData=0x31e38c | out: lpFindFileData=0x31e38c*(dwFileAttributes=0x820, ftCreationTime.dwLowDateTime=0x50eae000, ftCreationTime.dwHighDateTime=0x1d09f04, ftLastAccessTime.dwLowDateTime=0x5d594aa0, ftLastAccessTime.dwHighDateTime=0x1d2e676, ftLastWriteTime.dwLowDateTime=0x50eae000, ftLastWriteTime.dwHighDateTime=0x1d09f04, nFileSizeHigh=0x0, nFileSizeLow=0x231db, dwReserved0=0x0, dwReserved1=0x0, cFileName="Rotate8.ico", cAlternateFileName="")) returned 1 [0114.149] FindNextFileW (in: hFindFile=0x381e80, lpFindFileData=0x31e38c | out: lpFindFileData=0x31e38c*(dwFileAttributes=0x820, ftCreationTime.dwLowDateTime=0x50eae000, ftCreationTime.dwHighDateTime=0x1d09f04, ftLastAccessTime.dwLowDateTime=0x5d594aa0, ftLastAccessTime.dwHighDateTime=0x1d2e676, ftLastWriteTime.dwLowDateTime=0x50eae000, ftLastWriteTime.dwHighDateTime=0x1d09f04, nFileSizeHigh=0x0, nFileSizeLow=0x232c0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Rotate9.ico", cAlternateFileName="")) returned 1 [0114.149] FindNextFileW (in: hFindFile=0x381e80, lpFindFileData=0x31e38c | out: lpFindFileData=0x31e38c*(dwFileAttributes=0x820, ftCreationTime.dwLowDateTime=0x50eae000, ftCreationTime.dwHighDateTime=0x1d09f04, ftLastAccessTime.dwLowDateTime=0x5d594aa0, ftLastAccessTime.dwHighDateTime=0x1d2e676, ftLastWriteTime.dwLowDateTime=0x50eae000, ftLastWriteTime.dwHighDateTime=0x1d09f04, nFileSizeHigh=0x0, nFileSizeLow=0x1ee54, dwReserved0=0x0, dwReserved1=0x0, cFileName="Save.ico", cAlternateFileName="")) returned 1 [0114.149] FindNextFileW (in: hFindFile=0x381e80, lpFindFileData=0x31e38c | out: lpFindFileData=0x31e38c*(dwFileAttributes=0x820, ftCreationTime.dwLowDateTime=0x50eae000, ftCreationTime.dwHighDateTime=0x1d09f04, ftLastAccessTime.dwLowDateTime=0x5d5bac00, ftLastAccessTime.dwHighDateTime=0x1d2e676, ftLastWriteTime.dwLowDateTime=0x50eae000, ftLastWriteTime.dwHighDateTime=0x1d09f04, nFileSizeHigh=0x0, nFileSizeLow=0x1ed26, dwReserved0=0x0, dwReserved1=0x0, cFileName="Setup.ico", cAlternateFileName="")) returned 1 [0114.149] FindNextFileW (in: hFindFile=0x381e80, lpFindFileData=0x31e38c | out: lpFindFileData=0x31e38c*(dwFileAttributes=0x820, ftCreationTime.dwLowDateTime=0x50eae000, ftCreationTime.dwHighDateTime=0x1d09f04, ftLastAccessTime.dwLowDateTime=0x5d5bac00, ftLastAccessTime.dwHighDateTime=0x1d2e676, ftLastWriteTime.dwLowDateTime=0x50eae000, ftLastWriteTime.dwHighDateTime=0x1d09f04, nFileSizeHigh=0x0, nFileSizeLow=0x2e6f7, dwReserved0=0x0, dwReserved1=0x0, cFileName="stop.ico", cAlternateFileName="")) returned 1 [0114.149] FindNextFileW (in: hFindFile=0x381e80, lpFindFileData=0x31e38c | out: lpFindFileData=0x31e38c*(dwFileAttributes=0x820, ftCreationTime.dwLowDateTime=0x50eae000, ftCreationTime.dwHighDateTime=0x1d09f04, ftLastAccessTime.dwLowDateTime=0x5d5e0d60, ftLastAccessTime.dwHighDateTime=0x1d2e676, ftLastWriteTime.dwLowDateTime=0x50eae000, ftLastWriteTime.dwHighDateTime=0x1d09f04, nFileSizeHigh=0x0, nFileSizeLow=0x21479, dwReserved0=0x0, dwReserved1=0x0, cFileName="SysReqMet.ico", cAlternateFileName="SYSREQ~1.ICO")) returned 1 [0114.149] FindNextFileW (in: hFindFile=0x381e80, lpFindFileData=0x31e38c | out: lpFindFileData=0x31e38c*(dwFileAttributes=0x820, ftCreationTime.dwLowDateTime=0x50eae000, ftCreationTime.dwHighDateTime=0x1d09f04, ftLastAccessTime.dwLowDateTime=0x5d5e0d60, ftLastAccessTime.dwHighDateTime=0x1d2e676, ftLastWriteTime.dwLowDateTime=0x50eae000, ftLastWriteTime.dwHighDateTime=0x1d09f04, nFileSizeHigh=0x0, nFileSizeLow=0x23276, dwReserved0=0x0, dwReserved1=0x0, cFileName="SysReqNotMet.ico", cAlternateFileName="SYSREQ~2.ICO")) returned 1 [0114.149] FindNextFileW (in: hFindFile=0x381e80, lpFindFileData=0x31e38c | out: lpFindFileData=0x31e38c*(dwFileAttributes=0x820, ftCreationTime.dwLowDateTime=0x50eae000, ftCreationTime.dwHighDateTime=0x1d09f04, ftLastAccessTime.dwLowDateTime=0x5d5e0d60, ftLastAccessTime.dwHighDateTime=0x1d2e676, ftLastWriteTime.dwLowDateTime=0x50eae000, ftLastWriteTime.dwHighDateTime=0x1d09f04, nFileSizeHigh=0x0, nFileSizeLow=0x30aad, dwReserved0=0x0, dwReserved1=0x0, cFileName="warn.ico", cAlternateFileName="")) returned 1 [0114.149] FindNextFileW (in: hFindFile=0x381e80, lpFindFileData=0x31e38c | out: lpFindFileData=0x31e38c*(dwFileAttributes=0x820, ftCreationTime.dwLowDateTime=0x50eae000, ftCreationTime.dwHighDateTime=0x1d09f04, ftLastAccessTime.dwLowDateTime=0x5d5e0d60, ftLastAccessTime.dwHighDateTime=0x1d2e676, ftLastWriteTime.dwLowDateTime=0x50eae000, ftLastWriteTime.dwHighDateTime=0x1d09f04, nFileSizeHigh=0x0, nFileSizeLow=0x30aad, dwReserved0=0x0, dwReserved1=0x0, cFileName="warn.ico", cAlternateFileName="")) returned 0 [0114.149] FindClose (in: hFindFile=0x381e80 | out: hFindFile=0x381e80) returned 1 [0114.150] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e614) returned 1 [0114.150] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e620) returned 1 [0114.150] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e744) returned 1 [0114.150] GetFullPathNameW (in: lpFileName="C:\\Windows\\Microsoft.NET\\Framework64\\v4.0.30319\\SQL", nBufferLength=0x105, lpBuffer=0x31e24c, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\Microsoft.NET\\Framework64\\v4.0.30319\\SQL", lpFilePart=0x0) returned 0x33 [0114.150] GetFullPathNameW (in: lpFileName="C:\\Windows\\Microsoft.NET\\Framework64\\v4.0.30319\\SQL\\", nBufferLength=0x105, lpBuffer=0x31e220, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\Microsoft.NET\\Framework64\\v4.0.30319\\SQL\\", lpFilePart=0x0) returned 0x34 [0114.150] FindFirstFileW (in: lpFileName="C:\\Windows\\Microsoft.NET\\Framework64\\v4.0.30319\\SQL\\*", lpFindFileData=0x31e46c | out: lpFindFileData=0x31e46c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8ab69340, ftCreationTime.dwHighDateTime=0x1d2e621, ftLastAccessTime.dwLowDateTime=0x8ab69340, ftLastAccessTime.dwHighDateTime=0x1d2e621, ftLastWriteTime.dwLowDateTime=0x8ab69340, ftLastWriteTime.dwHighDateTime=0x1d2e621, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x381e80 [0114.150] FindNextFileW (in: hFindFile=0x381e80, lpFindFileData=0x31e47c | out: lpFindFileData=0x31e47c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8ab69340, ftCreationTime.dwHighDateTime=0x1d2e621, ftLastAccessTime.dwLowDateTime=0x8ab69340, ftLastAccessTime.dwHighDateTime=0x1d2e621, ftLastWriteTime.dwLowDateTime=0x8ab69340, ftLastWriteTime.dwHighDateTime=0x1d2e621, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0114.150] FindNextFileW (in: hFindFile=0x381e80, lpFindFileData=0x31e47c | out: lpFindFileData=0x31e47c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8ab69340, ftCreationTime.dwHighDateTime=0x1d2e621, ftLastAccessTime.dwLowDateTime=0xd153d520, ftLastAccessTime.dwHighDateTime=0x1d2e675, ftLastWriteTime.dwLowDateTime=0xd153d520, ftLastWriteTime.dwHighDateTime=0x1d2e675, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="en", cAlternateFileName="")) returned 1 [0114.150] FindNextFileW (in: hFindFile=0x381e80, lpFindFileData=0x31e47c | out: lpFindFileData=0x31e47c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8ab69340, ftCreationTime.dwHighDateTime=0x1d2e621, ftLastAccessTime.dwLowDateTime=0xd153d520, ftLastAccessTime.dwHighDateTime=0x1d2e675, ftLastWriteTime.dwLowDateTime=0xd153d520, ftLastWriteTime.dwHighDateTime=0x1d2e675, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="en", cAlternateFileName="")) returned 0 [0114.150] FindClose (in: hFindFile=0x381e80 | out: hFindFile=0x381e80) returned 1 [0114.151] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e704) returned 1 [0114.151] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e710) returned 1 [0114.151] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e744) returned 1 [0114.151] GetFullPathNameW (in: lpFileName="C:\\Windows\\Microsoft.NET\\Framework64\\v4.0.30319\\SQL", nBufferLength=0x105, lpBuffer=0x31e24c, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\Microsoft.NET\\Framework64\\v4.0.30319\\SQL", lpFilePart=0x0) returned 0x33 [0114.151] GetFullPathNameW (in: lpFileName="C:\\Windows\\Microsoft.NET\\Framework64\\v4.0.30319\\SQL\\", nBufferLength=0x105, lpBuffer=0x31e220, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\Microsoft.NET\\Framework64\\v4.0.30319\\SQL\\", lpFilePart=0x0) returned 0x34 [0114.151] FindFirstFileW (in: lpFileName="C:\\Windows\\Microsoft.NET\\Framework64\\v4.0.30319\\SQL\\*", lpFindFileData=0x31e46c | out: lpFindFileData=0x31e46c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8ab69340, ftCreationTime.dwHighDateTime=0x1d2e621, ftLastAccessTime.dwLowDateTime=0x8ab69340, ftLastAccessTime.dwHighDateTime=0x1d2e621, ftLastWriteTime.dwLowDateTime=0x8ab69340, ftLastWriteTime.dwHighDateTime=0x1d2e621, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x381e80 [0114.151] FindNextFileW (in: hFindFile=0x381e80, lpFindFileData=0x31e47c | out: lpFindFileData=0x31e47c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8ab69340, ftCreationTime.dwHighDateTime=0x1d2e621, ftLastAccessTime.dwLowDateTime=0x8ab69340, ftLastAccessTime.dwHighDateTime=0x1d2e621, ftLastWriteTime.dwLowDateTime=0x8ab69340, ftLastWriteTime.dwHighDateTime=0x1d2e621, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0114.151] FindNextFileW (in: hFindFile=0x381e80, lpFindFileData=0x31e47c | out: lpFindFileData=0x31e47c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8ab69340, ftCreationTime.dwHighDateTime=0x1d2e621, ftLastAccessTime.dwLowDateTime=0xd153d520, ftLastAccessTime.dwHighDateTime=0x1d2e675, ftLastWriteTime.dwLowDateTime=0xd153d520, ftLastWriteTime.dwHighDateTime=0x1d2e675, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="en", cAlternateFileName="")) returned 1 [0114.151] FindNextFileW (in: hFindFile=0x381e80, lpFindFileData=0x31e47c | out: lpFindFileData=0x31e47c*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0114.151] FindClose (in: hFindFile=0x381e80 | out: hFindFile=0x381e80) returned 1 [0114.151] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e704) returned 1 [0114.151] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e710) returned 1 [0114.151] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e6cc) returned 1 [0114.151] GetFullPathNameW (in: lpFileName="C:\\Windows\\Microsoft.NET\\Framework64\\v4.0.30319\\SQL\\en", nBufferLength=0x105, lpBuffer=0x31e1d4, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\Microsoft.NET\\Framework64\\v4.0.30319\\SQL\\en", lpFilePart=0x0) returned 0x36 [0114.151] GetFullPathNameW (in: lpFileName="C:\\Windows\\Microsoft.NET\\Framework64\\v4.0.30319\\SQL\\en\\", nBufferLength=0x105, lpBuffer=0x31e1a8, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\Microsoft.NET\\Framework64\\v4.0.30319\\SQL\\en\\", lpFilePart=0x0) returned 0x37 [0114.151] FindFirstFileW (in: lpFileName="C:\\Windows\\Microsoft.NET\\Framework64\\v4.0.30319\\SQL\\en\\*", lpFindFileData=0x31e3f4 | out: lpFindFileData=0x31e3f4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8ab69340, ftCreationTime.dwHighDateTime=0x1d2e621, ftLastAccessTime.dwLowDateTime=0xd153d520, ftLastAccessTime.dwHighDateTime=0x1d2e675, ftLastWriteTime.dwLowDateTime=0xd153d520, ftLastWriteTime.dwHighDateTime=0x1d2e675, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x381e80 [0114.159] FindNextFileW (in: hFindFile=0x381e80, lpFindFileData=0x31e404 | out: lpFindFileData=0x31e404*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8ab69340, ftCreationTime.dwHighDateTime=0x1d2e621, ftLastAccessTime.dwLowDateTime=0xd153d520, ftLastAccessTime.dwHighDateTime=0x1d2e675, ftLastWriteTime.dwLowDateTime=0xd153d520, ftLastWriteTime.dwHighDateTime=0x1d2e675, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0114.159] FindNextFileW (in: hFindFile=0x381e80, lpFindFileData=0x31e404 | out: lpFindFileData=0x31e404*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7e3e4400, ftCreationTime.dwHighDateTime=0x1cac5db, ftLastAccessTime.dwLowDateTime=0x9ec73840, ftLastAccessTime.dwHighDateTime=0x1d2e675, ftLastWriteTime.dwLowDateTime=0x7e3e4400, ftLastWriteTime.dwHighDateTime=0x1cac5db, nFileSizeHigh=0x0, nFileSizeLow=0x4af, dwReserved0=0x0, dwReserved1=0x0, cFileName="DropSqlPersistenceProviderLogic.sql", cAlternateFileName="DROPSQ~3.SQL")) returned 1 [0114.159] FindNextFileW (in: hFindFile=0x381e80, lpFindFileData=0x31e404 | out: lpFindFileData=0x31e404*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7e3e4400, ftCreationTime.dwHighDateTime=0x1cac5db, ftLastAccessTime.dwLowDateTime=0x9ec73840, ftLastAccessTime.dwHighDateTime=0x1d2e675, ftLastWriteTime.dwLowDateTime=0x7e3e4400, ftLastWriteTime.dwHighDateTime=0x1cac5db, nFileSizeHigh=0x0, nFileSizeLow=0x528, dwReserved0=0x0, dwReserved1=0x0, cFileName="DropSqlPersistenceProviderSchema.sql", cAlternateFileName="DROPSQ~4.SQL")) returned 1 [0114.159] FindNextFileW (in: hFindFile=0x381e80, lpFindFileData=0x31e404 | out: lpFindFileData=0x31e404*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1eee8200, ftCreationTime.dwHighDateTime=0x1cd0c40, ftLastAccessTime.dwLowDateTime=0xcf4363e0, ftLastAccessTime.dwHighDateTime=0x1d2e675, ftLastWriteTime.dwLowDateTime=0x1eee8200, ftLastWriteTime.dwHighDateTime=0x1cd0c40, nFileSizeHigh=0x0, nFileSizeLow=0x17b1, dwReserved0=0x0, dwReserved1=0x0, cFileName="DropSqlWorkflowInstanceStoreLogic.sql", cAlternateFileName="DROPSQ~1.SQL")) returned 1 [0114.159] FindNextFileW (in: hFindFile=0x381e80, lpFindFileData=0x31e404 | out: lpFindFileData=0x31e404*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1eee8200, ftCreationTime.dwHighDateTime=0x1cd0c40, ftLastAccessTime.dwLowDateTime=0xcf45c540, ftLastAccessTime.dwHighDateTime=0x1d2e675, ftLastWriteTime.dwLowDateTime=0x1eee8200, ftLastWriteTime.dwHighDateTime=0x1cd0c40, nFileSizeHigh=0x0, nFileSizeLow=0xeee, dwReserved0=0x0, dwReserved1=0x0, cFileName="DropSqlWorkflowInstanceStoreSchema.sql", cAlternateFileName="DROPSQ~2.SQL")) returned 1 [0114.159] FindNextFileW (in: hFindFile=0x381e80, lpFindFileData=0x31e404 | out: lpFindFileData=0x31e404*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7e3e4400, ftCreationTime.dwHighDateTime=0x1cac5db, ftLastAccessTime.dwLowDateTime=0x9f09dec0, ftLastAccessTime.dwHighDateTime=0x1d2e675, ftLastWriteTime.dwLowDateTime=0x7e3e4400, ftLastWriteTime.dwHighDateTime=0x1cac5db, nFileSizeHigh=0x0, nFileSizeLow=0x1a58, dwReserved0=0x0, dwReserved1=0x0, cFileName="SqlPersistenceProviderLogic.sql", cAlternateFileName="SQLPER~1.SQL")) returned 1 [0114.160] FindNextFileW (in: hFindFile=0x381e80, lpFindFileData=0x31e404 | out: lpFindFileData=0x31e404*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7e3e4400, ftCreationTime.dwHighDateTime=0x1cac5db, ftLastAccessTime.dwLowDateTime=0x9f09dec0, ftLastAccessTime.dwHighDateTime=0x1d2e675, ftLastWriteTime.dwLowDateTime=0x7e3e4400, ftLastWriteTime.dwHighDateTime=0x1cac5db, nFileSizeHigh=0x0, nFileSizeLow=0x860, dwReserved0=0x0, dwReserved1=0x0, cFileName="SqlPersistenceProviderSchema.sql", cAlternateFileName="SQLPER~2.SQL")) returned 1 [0114.160] FindNextFileW (in: hFindFile=0x381e80, lpFindFileData=0x31e404 | out: lpFindFileData=0x31e404*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xacbc1f00, ftCreationTime.dwHighDateTime=0x1cac5db, ftLastAccessTime.dwLowDateTime=0x9f09dec0, ftLastAccessTime.dwHighDateTime=0x1d2e675, ftLastWriteTime.dwLowDateTime=0xacbc1f00, ftLastWriteTime.dwHighDateTime=0x1cac5db, nFileSizeHigh=0x0, nFileSizeLow=0x5d5c, dwReserved0=0x0, dwReserved1=0x0, cFileName="SqlPersistenceService_Logic.sql", cAlternateFileName="SQLPER~3.SQL")) returned 1 [0114.160] FindNextFileW (in: hFindFile=0x381e80, lpFindFileData=0x31e404 | out: lpFindFileData=0x31e404*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xacbc1f00, ftCreationTime.dwHighDateTime=0x1cac5db, ftLastAccessTime.dwLowDateTime=0x9f0c4020, ftLastAccessTime.dwHighDateTime=0x1d2e675, ftLastWriteTime.dwLowDateTime=0xacbc1f00, ftLastWriteTime.dwHighDateTime=0x1cac5db, nFileSizeHigh=0x0, nFileSizeLow=0x10c8, dwReserved0=0x0, dwReserved1=0x0, cFileName="SqlPersistenceService_Schema.sql", cAlternateFileName="SQLPER~4.SQL")) returned 1 [0114.160] FindNextFileW (in: hFindFile=0x381e80, lpFindFileData=0x31e404 | out: lpFindFileData=0x31e404*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1eee8200, ftCreationTime.dwHighDateTime=0x1cd0c40, ftLastAccessTime.dwLowDateTime=0xd15173c0, ftLastAccessTime.dwHighDateTime=0x1d2e675, ftLastWriteTime.dwLowDateTime=0x1eee8200, ftLastWriteTime.dwHighDateTime=0x1cd0c40, nFileSizeHigh=0x0, nFileSizeLow=0xf89e, dwReserved0=0x0, dwReserved1=0x0, cFileName="SqlWorkflowInstanceStoreLogic.sql", cAlternateFileName="SQLWOR~1.SQL")) returned 1 [0114.160] FindNextFileW (in: hFindFile=0x381e80, lpFindFileData=0x31e404 | out: lpFindFileData=0x31e404*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1eee8200, ftCreationTime.dwHighDateTime=0x1cd0c40, ftLastAccessTime.dwLowDateTime=0xd153d520, ftLastAccessTime.dwHighDateTime=0x1d2e675, ftLastWriteTime.dwLowDateTime=0x1eee8200, ftLastWriteTime.dwHighDateTime=0x1cd0c40, nFileSizeHigh=0x0, nFileSizeLow=0x7088, dwReserved0=0x0, dwReserved1=0x0, cFileName="SqlWorkflowInstanceStoreSchema.sql", cAlternateFileName="SQLWOR~2.SQL")) returned 1 [0114.160] FindNextFileW (in: hFindFile=0x381e80, lpFindFileData=0x31e404 | out: lpFindFileData=0x31e404*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe105fd00, ftCreationTime.dwHighDateTime=0x1cd5d08, ftLastAccessTime.dwLowDateTime=0xd153d520, ftLastAccessTime.dwHighDateTime=0x1d2e675, ftLastWriteTime.dwLowDateTime=0xe105fd00, ftLastWriteTime.dwHighDateTime=0x1cd5d08, nFileSizeHigh=0x0, nFileSizeLow=0x137b9, dwReserved0=0x0, dwReserved1=0x0, cFileName="SqlWorkflowInstanceStoreSchemaUpgrade.sql", cAlternateFileName="SQLWOR~3.SQL")) returned 1 [0114.160] FindNextFileW (in: hFindFile=0x381e80, lpFindFileData=0x31e404 | out: lpFindFileData=0x31e404*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xacbc1f00, ftCreationTime.dwHighDateTime=0x1cac5db, ftLastAccessTime.dwLowDateTime=0x9f1f4b20, ftLastAccessTime.dwHighDateTime=0x1d2e675, ftLastWriteTime.dwLowDateTime=0xacbc1f00, ftLastWriteTime.dwHighDateTime=0x1cac5db, nFileSizeHigh=0x0, nFileSizeLow=0x5d2a4, dwReserved0=0x0, dwReserved1=0x0, cFileName="Tracking_Logic.sql", cAlternateFileName="TRACKI~1.SQL")) returned 1 [0114.160] FindNextFileW (in: hFindFile=0x381e80, lpFindFileData=0x31e404 | out: lpFindFileData=0x31e404*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xacbc1f00, ftCreationTime.dwHighDateTime=0x1cac5db, ftLastAccessTime.dwLowDateTime=0x9f21ac80, ftLastAccessTime.dwHighDateTime=0x1d2e675, ftLastWriteTime.dwLowDateTime=0xacbc1f00, ftLastWriteTime.dwHighDateTime=0x1cac5db, nFileSizeHigh=0x0, nFileSizeLow=0xc66e, dwReserved0=0x0, dwReserved1=0x0, cFileName="Tracking_Schema.sql", cAlternateFileName="TRACKI~2.SQL")) returned 1 [0114.160] FindNextFileW (in: hFindFile=0x381e80, lpFindFileData=0x31e404 | out: lpFindFileData=0x31e404*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0114.160] FindClose (in: hFindFile=0x381e80 | out: hFindFile=0x381e80) returned 1 [0114.161] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e68c) returned 1 [0114.161] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e698) returned 1 [0114.161] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e6cc) returned 1 [0114.161] GetFullPathNameW (in: lpFileName="C:\\Windows\\Microsoft.NET\\Framework64\\v4.0.30319\\SQL\\en", nBufferLength=0x105, lpBuffer=0x31e1d4, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\Microsoft.NET\\Framework64\\v4.0.30319\\SQL\\en", lpFilePart=0x0) returned 0x36 [0114.161] GetFullPathNameW (in: lpFileName="C:\\Windows\\Microsoft.NET\\Framework64\\v4.0.30319\\SQL\\en\\", nBufferLength=0x105, lpBuffer=0x31e1a8, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\Microsoft.NET\\Framework64\\v4.0.30319\\SQL\\en\\", lpFilePart=0x0) returned 0x37 [0114.161] FindFirstFileW (in: lpFileName="C:\\Windows\\Microsoft.NET\\Framework64\\v4.0.30319\\SQL\\en\\*", lpFindFileData=0x31e3f4 | out: lpFindFileData=0x31e3f4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8ab69340, ftCreationTime.dwHighDateTime=0x1d2e621, ftLastAccessTime.dwLowDateTime=0xd153d520, ftLastAccessTime.dwHighDateTime=0x1d2e675, ftLastWriteTime.dwLowDateTime=0xd153d520, ftLastWriteTime.dwHighDateTime=0x1d2e675, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x381e80 [0114.162] FindNextFileW (in: hFindFile=0x381e80, lpFindFileData=0x31e404 | out: lpFindFileData=0x31e404*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8ab69340, ftCreationTime.dwHighDateTime=0x1d2e621, ftLastAccessTime.dwLowDateTime=0xd153d520, ftLastAccessTime.dwHighDateTime=0x1d2e675, ftLastWriteTime.dwLowDateTime=0xd153d520, ftLastWriteTime.dwHighDateTime=0x1d2e675, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0114.162] FindNextFileW (in: hFindFile=0x381e80, lpFindFileData=0x31e404 | out: lpFindFileData=0x31e404*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7e3e4400, ftCreationTime.dwHighDateTime=0x1cac5db, ftLastAccessTime.dwLowDateTime=0x9ec73840, ftLastAccessTime.dwHighDateTime=0x1d2e675, ftLastWriteTime.dwLowDateTime=0x7e3e4400, ftLastWriteTime.dwHighDateTime=0x1cac5db, nFileSizeHigh=0x0, nFileSizeLow=0x4af, dwReserved0=0x0, dwReserved1=0x0, cFileName="DropSqlPersistenceProviderLogic.sql", cAlternateFileName="DROPSQ~3.SQL")) returned 1 [0114.162] FindNextFileW (in: hFindFile=0x381e80, lpFindFileData=0x31e404 | out: lpFindFileData=0x31e404*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7e3e4400, ftCreationTime.dwHighDateTime=0x1cac5db, ftLastAccessTime.dwLowDateTime=0x9ec73840, ftLastAccessTime.dwHighDateTime=0x1d2e675, ftLastWriteTime.dwLowDateTime=0x7e3e4400, ftLastWriteTime.dwHighDateTime=0x1cac5db, nFileSizeHigh=0x0, nFileSizeLow=0x528, dwReserved0=0x0, dwReserved1=0x0, cFileName="DropSqlPersistenceProviderSchema.sql", cAlternateFileName="DROPSQ~4.SQL")) returned 1 [0114.162] FindNextFileW (in: hFindFile=0x381e80, lpFindFileData=0x31e404 | out: lpFindFileData=0x31e404*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1eee8200, ftCreationTime.dwHighDateTime=0x1cd0c40, ftLastAccessTime.dwLowDateTime=0xcf4363e0, ftLastAccessTime.dwHighDateTime=0x1d2e675, ftLastWriteTime.dwLowDateTime=0x1eee8200, ftLastWriteTime.dwHighDateTime=0x1cd0c40, nFileSizeHigh=0x0, nFileSizeLow=0x17b1, dwReserved0=0x0, dwReserved1=0x0, cFileName="DropSqlWorkflowInstanceStoreLogic.sql", cAlternateFileName="DROPSQ~1.SQL")) returned 1 [0114.162] FindNextFileW (in: hFindFile=0x381e80, lpFindFileData=0x31e404 | out: lpFindFileData=0x31e404*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1eee8200, ftCreationTime.dwHighDateTime=0x1cd0c40, ftLastAccessTime.dwLowDateTime=0xcf45c540, ftLastAccessTime.dwHighDateTime=0x1d2e675, ftLastWriteTime.dwLowDateTime=0x1eee8200, ftLastWriteTime.dwHighDateTime=0x1cd0c40, nFileSizeHigh=0x0, nFileSizeLow=0xeee, dwReserved0=0x0, dwReserved1=0x0, cFileName="DropSqlWorkflowInstanceStoreSchema.sql", cAlternateFileName="DROPSQ~2.SQL")) returned 1 [0114.162] FindNextFileW (in: hFindFile=0x381e80, lpFindFileData=0x31e404 | out: lpFindFileData=0x31e404*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7e3e4400, ftCreationTime.dwHighDateTime=0x1cac5db, ftLastAccessTime.dwLowDateTime=0x9f09dec0, ftLastAccessTime.dwHighDateTime=0x1d2e675, ftLastWriteTime.dwLowDateTime=0x7e3e4400, ftLastWriteTime.dwHighDateTime=0x1cac5db, nFileSizeHigh=0x0, nFileSizeLow=0x1a58, dwReserved0=0x0, dwReserved1=0x0, cFileName="SqlPersistenceProviderLogic.sql", cAlternateFileName="SQLPER~1.SQL")) returned 1 [0114.162] FindNextFileW (in: hFindFile=0x381e80, lpFindFileData=0x31e404 | out: lpFindFileData=0x31e404*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7e3e4400, ftCreationTime.dwHighDateTime=0x1cac5db, ftLastAccessTime.dwLowDateTime=0x9f09dec0, ftLastAccessTime.dwHighDateTime=0x1d2e675, ftLastWriteTime.dwLowDateTime=0x7e3e4400, ftLastWriteTime.dwHighDateTime=0x1cac5db, nFileSizeHigh=0x0, nFileSizeLow=0x860, dwReserved0=0x0, dwReserved1=0x0, cFileName="SqlPersistenceProviderSchema.sql", cAlternateFileName="SQLPER~2.SQL")) returned 1 [0114.162] FindNextFileW (in: hFindFile=0x381e80, lpFindFileData=0x31e404 | out: lpFindFileData=0x31e404*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xacbc1f00, ftCreationTime.dwHighDateTime=0x1cac5db, ftLastAccessTime.dwLowDateTime=0x9f09dec0, ftLastAccessTime.dwHighDateTime=0x1d2e675, ftLastWriteTime.dwLowDateTime=0xacbc1f00, ftLastWriteTime.dwHighDateTime=0x1cac5db, nFileSizeHigh=0x0, nFileSizeLow=0x5d5c, dwReserved0=0x0, dwReserved1=0x0, cFileName="SqlPersistenceService_Logic.sql", cAlternateFileName="SQLPER~3.SQL")) returned 1 [0114.162] FindNextFileW (in: hFindFile=0x381e80, lpFindFileData=0x31e404 | out: lpFindFileData=0x31e404*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xacbc1f00, ftCreationTime.dwHighDateTime=0x1cac5db, ftLastAccessTime.dwLowDateTime=0x9f0c4020, ftLastAccessTime.dwHighDateTime=0x1d2e675, ftLastWriteTime.dwLowDateTime=0xacbc1f00, ftLastWriteTime.dwHighDateTime=0x1cac5db, nFileSizeHigh=0x0, nFileSizeLow=0x10c8, dwReserved0=0x0, dwReserved1=0x0, cFileName="SqlPersistenceService_Schema.sql", cAlternateFileName="SQLPER~4.SQL")) returned 1 [0114.162] FindNextFileW (in: hFindFile=0x381e80, lpFindFileData=0x31e404 | out: lpFindFileData=0x31e404*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1eee8200, ftCreationTime.dwHighDateTime=0x1cd0c40, ftLastAccessTime.dwLowDateTime=0xd15173c0, ftLastAccessTime.dwHighDateTime=0x1d2e675, ftLastWriteTime.dwLowDateTime=0x1eee8200, ftLastWriteTime.dwHighDateTime=0x1cd0c40, nFileSizeHigh=0x0, nFileSizeLow=0xf89e, dwReserved0=0x0, dwReserved1=0x0, cFileName="SqlWorkflowInstanceStoreLogic.sql", cAlternateFileName="SQLWOR~1.SQL")) returned 1 [0114.162] FindNextFileW (in: hFindFile=0x381e80, lpFindFileData=0x31e404 | out: lpFindFileData=0x31e404*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1eee8200, ftCreationTime.dwHighDateTime=0x1cd0c40, ftLastAccessTime.dwLowDateTime=0xd153d520, ftLastAccessTime.dwHighDateTime=0x1d2e675, ftLastWriteTime.dwLowDateTime=0x1eee8200, ftLastWriteTime.dwHighDateTime=0x1cd0c40, nFileSizeHigh=0x0, nFileSizeLow=0x7088, dwReserved0=0x0, dwReserved1=0x0, cFileName="SqlWorkflowInstanceStoreSchema.sql", cAlternateFileName="SQLWOR~2.SQL")) returned 1 [0114.162] FindNextFileW (in: hFindFile=0x381e80, lpFindFileData=0x31e404 | out: lpFindFileData=0x31e404*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe105fd00, ftCreationTime.dwHighDateTime=0x1cd5d08, ftLastAccessTime.dwLowDateTime=0xd153d520, ftLastAccessTime.dwHighDateTime=0x1d2e675, ftLastWriteTime.dwLowDateTime=0xe105fd00, ftLastWriteTime.dwHighDateTime=0x1cd5d08, nFileSizeHigh=0x0, nFileSizeLow=0x137b9, dwReserved0=0x0, dwReserved1=0x0, cFileName="SqlWorkflowInstanceStoreSchemaUpgrade.sql", cAlternateFileName="SQLWOR~3.SQL")) returned 1 [0114.162] FindNextFileW (in: hFindFile=0x381e80, lpFindFileData=0x31e404 | out: lpFindFileData=0x31e404*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xacbc1f00, ftCreationTime.dwHighDateTime=0x1cac5db, ftLastAccessTime.dwLowDateTime=0x9f1f4b20, ftLastAccessTime.dwHighDateTime=0x1d2e675, ftLastWriteTime.dwLowDateTime=0xacbc1f00, ftLastWriteTime.dwHighDateTime=0x1cac5db, nFileSizeHigh=0x0, nFileSizeLow=0x5d2a4, dwReserved0=0x0, dwReserved1=0x0, cFileName="Tracking_Logic.sql", cAlternateFileName="TRACKI~1.SQL")) returned 1 [0114.162] FindNextFileW (in: hFindFile=0x381e80, lpFindFileData=0x31e404 | out: lpFindFileData=0x31e404*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xacbc1f00, ftCreationTime.dwHighDateTime=0x1cac5db, ftLastAccessTime.dwLowDateTime=0x9f21ac80, ftLastAccessTime.dwHighDateTime=0x1d2e675, ftLastWriteTime.dwLowDateTime=0xacbc1f00, ftLastWriteTime.dwHighDateTime=0x1cac5db, nFileSizeHigh=0x0, nFileSizeLow=0xc66e, dwReserved0=0x0, dwReserved1=0x0, cFileName="Tracking_Schema.sql", cAlternateFileName="TRACKI~2.SQL")) returned 1 [0114.162] FindNextFileW (in: hFindFile=0x381e80, lpFindFileData=0x31e404 | out: lpFindFileData=0x31e404*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xacbc1f00, ftCreationTime.dwHighDateTime=0x1cac5db, ftLastAccessTime.dwLowDateTime=0x9f21ac80, ftLastAccessTime.dwHighDateTime=0x1d2e675, ftLastWriteTime.dwLowDateTime=0xacbc1f00, ftLastWriteTime.dwHighDateTime=0x1cac5db, nFileSizeHigh=0x0, nFileSizeLow=0xc66e, dwReserved0=0x0, dwReserved1=0x0, cFileName="Tracking_Schema.sql", cAlternateFileName="TRACKI~2.SQL")) returned 0 [0114.162] FindClose (in: hFindFile=0x381e80 | out: hFindFile=0x381e80) returned 1 [0114.163] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e68c) returned 1 [0114.163] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e698) returned 1 [0114.163] GetFullPathNameW (in: lpFileName="C:\\Windows\\Microsoft.NET\\Framework64\\v4.0.30319\\SQL\\en\\DropSqlPersistenceProviderLogic.sql", nBufferLength=0x105, lpBuffer=0x31e0a4, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\Microsoft.NET\\Framework64\\v4.0.30319\\SQL\\en\\DropSqlPersistenceProviderLogic.sql", lpFilePart=0x0) returned 0x5a [0114.163] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e598) returned 1 [0114.163] CreateFileW (lpFileName="C:\\Windows\\Microsoft.NET\\Framework64\\v4.0.30319\\SQL\\en\\DropSqlPersistenceProviderLogic.sql" (normalized: "c:\\windows\\microsoft.net\\framework64\\v4.0.30319\\sql\\en\\dropsqlpersistenceproviderlogic.sql"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x178 [0114.164] GetFileType (hFile=0x178) returned 0x1 [0114.164] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e594) returned 1 [0114.164] GetFileType (hFile=0x178) returned 0x1 [0114.164] GetFileSize (in: hFile=0x178, lpFileSizeHigh=0x31e6a0 | out: lpFileSizeHigh=0x31e6a0*=0x0) returned 0x4af [0114.164] ReadFile (in: hFile=0x178, lpBuffer=0x2734d20, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x31e64c, lpOverlapped=0x0 | out: lpBuffer=0x2734d20*, lpNumberOfBytesRead=0x31e64c*=0x4af, lpOverlapped=0x0) returned 1 [0114.215] GetFullPathNameW (in: lpFileName="C:\\Windows\\Microsoft.NET\\Framework64\\v4.0.30319\\SQL\\en\\DropSqlPersistenceProviderLogic.sql", nBufferLength=0x105, lpBuffer=0x31e090, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\Microsoft.NET\\Framework64\\v4.0.30319\\SQL\\en\\DropSqlPersistenceProviderLogic.sql", lpFilePart=0x0) returned 0x5a [0114.215] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e584) returned 1 [0114.215] CreateFileW (lpFileName="C:\\Windows\\Microsoft.NET\\Framework64\\v4.0.30319\\SQL\\en\\DropSqlPersistenceProviderLogic.sql" (normalized: "c:\\windows\\microsoft.net\\framework64\\v4.0.30319\\sql\\en\\dropsqlpersistenceproviderlogic.sql"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x178 [0114.216] GetFileType (hFile=0x178) returned 0x1 [0114.216] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e580) returned 1 [0114.216] GetFileType (hFile=0x178) returned 0x1 [0114.217] GetFullPathNameW (in: lpFileName="C:\\Windows\\Microsoft.NET\\Framework64\\v4.0.30319\\SQL\\en\\DropSqlPersistenceProviderLogic.sql", nBufferLength=0x105, lpBuffer=0x31e1c4, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\Microsoft.NET\\Framework64\\v4.0.30319\\SQL\\en\\DropSqlPersistenceProviderLogic.sql", lpFilePart=0x0) returned 0x5a [0114.217] GetFullPathNameW (in: lpFileName="C:\\Windows\\Microsoft.NET\\Framework64\\v4.0.30319\\SQL\\en\\DropSqlPersistenceProviderLogic.sql", nBufferLength=0x105, lpBuffer=0x31e1c4, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\Microsoft.NET\\Framework64\\v4.0.30319\\SQL\\en\\DropSqlPersistenceProviderLogic.sql", lpFilePart=0x0) returned 0x5a [0114.217] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e624) returned 1 [0114.217] GetFileAttributesExW (in: lpFileName="C:\\Windows\\Microsoft.NET\\Framework64\\v4.0.30319\\SQL\\en\\DropSqlPersistenceProviderLogic.sql" (normalized: "c:\\windows\\microsoft.net\\framework64\\v4.0.30319\\sql\\en\\dropsqlpersistenceproviderlogic.sql"), fInfoLevelId=0x0, lpFileInformation=0x31e6a0 | out: lpFileInformation=0x31e6a0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7e3e4400, ftCreationTime.dwHighDateTime=0x1cac5db, ftLastAccessTime.dwLowDateTime=0x9ec73840, ftLastAccessTime.dwHighDateTime=0x1d2e675, ftLastWriteTime.dwLowDateTime=0x2782f4a0, ftLastWriteTime.dwHighDateTime=0x1d6eb7f, nFileSizeHigh=0x0, nFileSizeLow=0x4b0)) returned 1 [0114.217] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e620) returned 1 [0114.217] MoveFileW (lpExistingFileName="C:\\Windows\\Microsoft.NET\\Framework64\\v4.0.30319\\SQL\\en\\DropSqlPersistenceProviderLogic.sql" (normalized: "c:\\windows\\microsoft.net\\framework64\\v4.0.30319\\sql\\en\\dropsqlpersistenceproviderlogic.sql"), lpNewFileName="C:\\Windows\\Microsoft.NET\\Framework64\\v4.0.30319\\SQL\\en\\DropSqlPersistenceProviderLogic.sql" (normalized: "c:\\windows\\microsoft.net\\framework64\\v4.0.30319\\sql\\en\\dropsqlpersistenceproviderlogic.sql")) returned 1 [0114.217] GetFullPathNameW (in: lpFileName="C:\\Windows\\Microsoft.NET\\Framework64\\v4.0.30319\\SQL\\en\\DropSqlPersistenceProviderSchema.sql", nBufferLength=0x105, lpBuffer=0x31e0a4, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\Microsoft.NET\\Framework64\\v4.0.30319\\SQL\\en\\DropSqlPersistenceProviderSchema.sql", lpFilePart=0x0) returned 0x5b [0114.217] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e598) returned 1 [0114.217] CreateFileW (lpFileName="C:\\Windows\\Microsoft.NET\\Framework64\\v4.0.30319\\SQL\\en\\DropSqlPersistenceProviderSchema.sql" (normalized: "c:\\windows\\microsoft.net\\framework64\\v4.0.30319\\sql\\en\\dropsqlpersistenceproviderschema.sql"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x178 [0114.218] GetFileType (hFile=0x178) returned 0x1 [0114.218] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e594) returned 1 [0114.218] GetFileType (hFile=0x178) returned 0x1 [0114.218] GetFileSize (in: hFile=0x178, lpFileSizeHigh=0x31e6a0 | out: lpFileSizeHigh=0x31e6a0*=0x0) returned 0x528 [0114.218] ReadFile (in: hFile=0x178, lpBuffer=0x2785c50, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x31e64c, lpOverlapped=0x0 | out: lpBuffer=0x2785c50*, lpNumberOfBytesRead=0x31e64c*=0x528, lpOverlapped=0x0) returned 1 [0114.240] GetFullPathNameW (in: lpFileName="C:\\Windows\\Microsoft.NET\\Framework64\\v4.0.30319\\SQL\\en\\DropSqlPersistenceProviderSchema.sql", nBufferLength=0x105, lpBuffer=0x31e090, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\Microsoft.NET\\Framework64\\v4.0.30319\\SQL\\en\\DropSqlPersistenceProviderSchema.sql", lpFilePart=0x0) returned 0x5b [0114.240] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e584) returned 1 [0114.241] CreateFileW (lpFileName="C:\\Windows\\Microsoft.NET\\Framework64\\v4.0.30319\\SQL\\en\\DropSqlPersistenceProviderSchema.sql" (normalized: "c:\\windows\\microsoft.net\\framework64\\v4.0.30319\\sql\\en\\dropsqlpersistenceproviderschema.sql"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x178 [0114.241] GetFileType (hFile=0x178) returned 0x1 [0114.241] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e580) returned 1 [0114.241] GetFileType (hFile=0x178) returned 0x1 [0114.242] WriteFile (in: hFile=0x178, lpBuffer=0x27d55b0*, nNumberOfBytesToWrite=0x530, lpNumberOfBytesWritten=0x31e614, lpOverlapped=0x0 | out: lpBuffer=0x27d55b0*, lpNumberOfBytesWritten=0x31e614*=0x530, lpOverlapped=0x0) returned 1 [0114.242] GetFullPathNameW (in: lpFileName="C:\\Windows\\Microsoft.NET\\Framework64\\v4.0.30319\\SQL\\en\\DropSqlPersistenceProviderSchema.sql", nBufferLength=0x105, lpBuffer=0x31e1c4, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\Microsoft.NET\\Framework64\\v4.0.30319\\SQL\\en\\DropSqlPersistenceProviderSchema.sql", lpFilePart=0x0) returned 0x5b [0114.242] GetFullPathNameW (in: lpFileName="C:\\Windows\\Microsoft.NET\\Framework64\\v4.0.30319\\SQL\\en\\DropSqlPersistenceProviderSchema.sql", nBufferLength=0x105, lpBuffer=0x31e1c4, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\Microsoft.NET\\Framework64\\v4.0.30319\\SQL\\en\\DropSqlPersistenceProviderSchema.sql", lpFilePart=0x0) returned 0x5b [0114.243] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e624) returned 1 [0114.243] GetFileAttributesExW (in: lpFileName="C:\\Windows\\Microsoft.NET\\Framework64\\v4.0.30319\\SQL\\en\\DropSqlPersistenceProviderSchema.sql" (normalized: "c:\\windows\\microsoft.net\\framework64\\v4.0.30319\\sql\\en\\dropsqlpersistenceproviderschema.sql"), fInfoLevelId=0x0, lpFileInformation=0x31e6a0 | out: lpFileInformation=0x31e6a0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7e3e4400, ftCreationTime.dwHighDateTime=0x1cac5db, ftLastAccessTime.dwLowDateTime=0x9ec73840, ftLastAccessTime.dwHighDateTime=0x1d2e675, ftLastWriteTime.dwLowDateTime=0x2787b760, ftLastWriteTime.dwHighDateTime=0x1d6eb7f, nFileSizeHigh=0x0, nFileSizeLow=0x530)) returned 1 [0114.243] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e620) returned 1 [0114.243] MoveFileW (lpExistingFileName="C:\\Windows\\Microsoft.NET\\Framework64\\v4.0.30319\\SQL\\en\\DropSqlPersistenceProviderSchema.sql" (normalized: "c:\\windows\\microsoft.net\\framework64\\v4.0.30319\\sql\\en\\dropsqlpersistenceproviderschema.sql"), lpNewFileName="C:\\Windows\\Microsoft.NET\\Framework64\\v4.0.30319\\SQL\\en\\DropSqlPersistenceProviderSchema.sql" (normalized: "c:\\windows\\microsoft.net\\framework64\\v4.0.30319\\sql\\en\\dropsqlpersistenceproviderschema.sql")) returned 1 [0114.243] GetFullPathNameW (in: lpFileName="C:\\Windows\\Microsoft.NET\\Framework64\\v4.0.30319\\SQL\\en\\DropSqlWorkflowInstanceStoreLogic.sql", nBufferLength=0x105, lpBuffer=0x31e0a4, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\Microsoft.NET\\Framework64\\v4.0.30319\\SQL\\en\\DropSqlWorkflowInstanceStoreLogic.sql", lpFilePart=0x0) returned 0x5c [0114.243] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e598) returned 1 [0114.243] CreateFileW (lpFileName="C:\\Windows\\Microsoft.NET\\Framework64\\v4.0.30319\\SQL\\en\\DropSqlWorkflowInstanceStoreLogic.sql" (normalized: "c:\\windows\\microsoft.net\\framework64\\v4.0.30319\\sql\\en\\dropsqlworkflowinstancestorelogic.sql"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x178 [0114.243] GetFileType (hFile=0x178) returned 0x1 [0114.243] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e594) returned 1 [0114.243] GetFileType (hFile=0x178) returned 0x1 [0114.243] GetFileSize (in: hFile=0x178, lpFileSizeHigh=0x31e6a0 | out: lpFileSizeHigh=0x31e6a0*=0x0) returned 0x17b1 [0114.243] ReadFile (in: hFile=0x178, lpBuffer=0x27d68d8, nNumberOfBytesToRead=0x17b1, lpNumberOfBytesRead=0x31e64c, lpOverlapped=0x0 | out: lpBuffer=0x27d68d8*, lpNumberOfBytesRead=0x31e64c*=0x17b1, lpOverlapped=0x0) returned 1 [0114.264] GetFullPathNameW (in: lpFileName="C:\\Windows\\Microsoft.NET\\Framework64\\v4.0.30319\\SQL\\en\\DropSqlWorkflowInstanceStoreLogic.sql", nBufferLength=0x105, lpBuffer=0x31e090, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\Microsoft.NET\\Framework64\\v4.0.30319\\SQL\\en\\DropSqlWorkflowInstanceStoreLogic.sql", lpFilePart=0x0) returned 0x5c [0114.264] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e584) returned 1 [0114.264] CreateFileW (lpFileName="C:\\Windows\\Microsoft.NET\\Framework64\\v4.0.30319\\SQL\\en\\DropSqlWorkflowInstanceStoreLogic.sql" (normalized: "c:\\windows\\microsoft.net\\framework64\\v4.0.30319\\sql\\en\\dropsqlworkflowinstancestorelogic.sql"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x178 [0114.265] GetFileType (hFile=0x178) returned 0x1 [0114.265] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e580) returned 1 [0114.265] GetFileType (hFile=0x178) returned 0x1 [0114.265] WriteFile (in: hFile=0x178, lpBuffer=0x282ad80*, nNumberOfBytesToWrite=0x17c0, lpNumberOfBytesWritten=0x31e640, lpOverlapped=0x0 | out: lpBuffer=0x282ad80*, lpNumberOfBytesWritten=0x31e640*=0x17c0, lpOverlapped=0x0) returned 1 [0114.266] GetFullPathNameW (in: lpFileName="C:\\Windows\\Microsoft.NET\\Framework64\\v4.0.30319\\SQL\\en\\DropSqlWorkflowInstanceStoreLogic.sql", nBufferLength=0x105, lpBuffer=0x31e1c4, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\Microsoft.NET\\Framework64\\v4.0.30319\\SQL\\en\\DropSqlWorkflowInstanceStoreLogic.sql", lpFilePart=0x0) returned 0x5c [0114.266] GetFullPathNameW (in: lpFileName="C:\\Windows\\Microsoft.NET\\Framework64\\v4.0.30319\\SQL\\en\\DropSqlWorkflowInstanceStoreLogic.sql", nBufferLength=0x105, lpBuffer=0x31e1c4, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\Microsoft.NET\\Framework64\\v4.0.30319\\SQL\\en\\DropSqlWorkflowInstanceStoreLogic.sql", lpFilePart=0x0) returned 0x5c [0114.266] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e624) returned 1 [0114.266] GetFileAttributesExW (in: lpFileName="C:\\Windows\\Microsoft.NET\\Framework64\\v4.0.30319\\SQL\\en\\DropSqlWorkflowInstanceStoreLogic.sql" (normalized: "c:\\windows\\microsoft.net\\framework64\\v4.0.30319\\sql\\en\\dropsqlworkflowinstancestorelogic.sql"), fInfoLevelId=0x0, lpFileInformation=0x31e6a0 | out: lpFileInformation=0x31e6a0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1eee8200, ftCreationTime.dwHighDateTime=0x1cd0c40, ftLastAccessTime.dwLowDateTime=0xcf4363e0, ftLastAccessTime.dwHighDateTime=0x1d2e675, ftLastWriteTime.dwLowDateTime=0x278a18c0, ftLastWriteTime.dwHighDateTime=0x1d6eb7f, nFileSizeHigh=0x0, nFileSizeLow=0x17c0)) returned 1 [0114.266] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e620) returned 1 [0114.266] MoveFileW (lpExistingFileName="C:\\Windows\\Microsoft.NET\\Framework64\\v4.0.30319\\SQL\\en\\DropSqlWorkflowInstanceStoreLogic.sql" (normalized: "c:\\windows\\microsoft.net\\framework64\\v4.0.30319\\sql\\en\\dropsqlworkflowinstancestorelogic.sql"), lpNewFileName="C:\\Windows\\Microsoft.NET\\Framework64\\v4.0.30319\\SQL\\en\\DropSqlWorkflowInstanceStoreLogic.sql" (normalized: "c:\\windows\\microsoft.net\\framework64\\v4.0.30319\\sql\\en\\dropsqlworkflowinstancestorelogic.sql")) returned 1 [0114.267] GetFullPathNameW (in: lpFileName="C:\\Windows\\Microsoft.NET\\Framework64\\v4.0.30319\\SQL\\en\\DropSqlWorkflowInstanceStoreSchema.sql", nBufferLength=0x105, lpBuffer=0x31e0a4, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\Microsoft.NET\\Framework64\\v4.0.30319\\SQL\\en\\DropSqlWorkflowInstanceStoreSchema.sql", lpFilePart=0x0) returned 0x5d [0114.267] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e598) returned 1 [0114.267] CreateFileW (lpFileName="C:\\Windows\\Microsoft.NET\\Framework64\\v4.0.30319\\SQL\\en\\DropSqlWorkflowInstanceStoreSchema.sql" (normalized: "c:\\windows\\microsoft.net\\framework64\\v4.0.30319\\sql\\en\\dropsqlworkflowinstancestoreschema.sql"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x178 [0114.267] GetFileType (hFile=0x178) returned 0x1 [0114.267] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e594) returned 1 [0114.267] GetFileType (hFile=0x178) returned 0x1 [0114.267] GetFileSize (in: hFile=0x178, lpFileSizeHigh=0x31e6a0 | out: lpFileSizeHigh=0x31e6a0*=0x0) returned 0xeee [0114.267] ReadFile (in: hFile=0x178, lpBuffer=0x282d8ec, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x31e64c, lpOverlapped=0x0 | out: lpBuffer=0x282d8ec*, lpNumberOfBytesRead=0x31e64c*=0xeee, lpOverlapped=0x0) returned 1 [0114.290] GetFullPathNameW (in: lpFileName="C:\\Windows\\Microsoft.NET\\Framework64\\v4.0.30319\\SQL\\en\\DropSqlWorkflowInstanceStoreSchema.sql", nBufferLength=0x105, lpBuffer=0x31e090, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\Microsoft.NET\\Framework64\\v4.0.30319\\SQL\\en\\DropSqlWorkflowInstanceStoreSchema.sql", lpFilePart=0x0) returned 0x5d [0114.290] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e584) returned 1 [0114.290] CreateFileW (lpFileName="C:\\Windows\\Microsoft.NET\\Framework64\\v4.0.30319\\SQL\\en\\DropSqlWorkflowInstanceStoreSchema.sql" (normalized: "c:\\windows\\microsoft.net\\framework64\\v4.0.30319\\sql\\en\\dropsqlworkflowinstancestoreschema.sql"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x178 [0114.291] GetFileType (hFile=0x178) returned 0x1 [0114.291] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e580) returned 1 [0114.291] GetFileType (hFile=0x178) returned 0x1 [0114.292] GetFullPathNameW (in: lpFileName="C:\\Windows\\Microsoft.NET\\Framework64\\v4.0.30319\\SQL\\en\\DropSqlWorkflowInstanceStoreSchema.sql", nBufferLength=0x105, lpBuffer=0x31e1c4, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\Microsoft.NET\\Framework64\\v4.0.30319\\SQL\\en\\DropSqlWorkflowInstanceStoreSchema.sql", lpFilePart=0x0) returned 0x5d [0114.292] GetFullPathNameW (in: lpFileName="C:\\Windows\\Microsoft.NET\\Framework64\\v4.0.30319\\SQL\\en\\DropSqlWorkflowInstanceStoreSchema.sql", nBufferLength=0x105, lpBuffer=0x31e1c4, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\Microsoft.NET\\Framework64\\v4.0.30319\\SQL\\en\\DropSqlWorkflowInstanceStoreSchema.sql", lpFilePart=0x0) returned 0x5d [0114.292] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e624) returned 1 [0114.292] GetFileAttributesExW (in: lpFileName="C:\\Windows\\Microsoft.NET\\Framework64\\v4.0.30319\\SQL\\en\\DropSqlWorkflowInstanceStoreSchema.sql" (normalized: "c:\\windows\\microsoft.net\\framework64\\v4.0.30319\\sql\\en\\dropsqlworkflowinstancestoreschema.sql"), fInfoLevelId=0x0, lpFileInformation=0x31e6a0 | out: lpFileInformation=0x31e6a0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1eee8200, ftCreationTime.dwHighDateTime=0x1cd0c40, ftLastAccessTime.dwLowDateTime=0xcf45c540, ftLastAccessTime.dwHighDateTime=0x1d2e675, ftLastWriteTime.dwLowDateTime=0x278edb80, ftLastWriteTime.dwHighDateTime=0x1d6eb7f, nFileSizeHigh=0x0, nFileSizeLow=0xef0)) returned 1 [0114.292] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e620) returned 1 [0114.293] MoveFileW (lpExistingFileName="C:\\Windows\\Microsoft.NET\\Framework64\\v4.0.30319\\SQL\\en\\DropSqlWorkflowInstanceStoreSchema.sql" (normalized: "c:\\windows\\microsoft.net\\framework64\\v4.0.30319\\sql\\en\\dropsqlworkflowinstancestoreschema.sql"), lpNewFileName="C:\\Windows\\Microsoft.NET\\Framework64\\v4.0.30319\\SQL\\en\\DropSqlWorkflowInstanceStoreSchema.sql" (normalized: "c:\\windows\\microsoft.net\\framework64\\v4.0.30319\\sql\\en\\dropsqlworkflowinstancestoreschema.sql")) returned 1 [0114.293] GetFullPathNameW (in: lpFileName="C:\\Windows\\Microsoft.NET\\Framework64\\v4.0.30319\\SQL\\en\\SqlPersistenceProviderLogic.sql", nBufferLength=0x105, lpBuffer=0x31e0a4, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\Microsoft.NET\\Framework64\\v4.0.30319\\SQL\\en\\SqlPersistenceProviderLogic.sql", lpFilePart=0x0) returned 0x56 [0114.293] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e598) returned 1 [0114.293] CreateFileW (lpFileName="C:\\Windows\\Microsoft.NET\\Framework64\\v4.0.30319\\SQL\\en\\SqlPersistenceProviderLogic.sql" (normalized: "c:\\windows\\microsoft.net\\framework64\\v4.0.30319\\sql\\en\\sqlpersistenceproviderlogic.sql"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x178 [0114.293] GetFileType (hFile=0x178) returned 0x1 [0114.293] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e594) returned 1 [0114.293] GetFileType (hFile=0x178) returned 0x1 [0114.293] GetFileSize (in: hFile=0x178, lpFileSizeHigh=0x31e6a0 | out: lpFileSizeHigh=0x31e6a0*=0x0) returned 0x1a58 [0114.293] ReadFile (in: hFile=0x178, lpBuffer=0x2683534, nNumberOfBytesToRead=0x1a58, lpNumberOfBytesRead=0x31e64c, lpOverlapped=0x0 | out: lpBuffer=0x2683534*, lpNumberOfBytesRead=0x31e64c*=0x1a58, lpOverlapped=0x0) returned 1 [0114.309] GetFullPathNameW (in: lpFileName="C:\\Windows\\Microsoft.NET\\Framework64\\v4.0.30319\\SQL\\en\\SqlPersistenceProviderLogic.sql", nBufferLength=0x105, lpBuffer=0x31e090, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\Microsoft.NET\\Framework64\\v4.0.30319\\SQL\\en\\SqlPersistenceProviderLogic.sql", lpFilePart=0x0) returned 0x56 [0114.309] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e584) returned 1 [0114.309] CreateFileW (lpFileName="C:\\Windows\\Microsoft.NET\\Framework64\\v4.0.30319\\SQL\\en\\SqlPersistenceProviderLogic.sql" (normalized: "c:\\windows\\microsoft.net\\framework64\\v4.0.30319\\sql\\en\\sqlpersistenceproviderlogic.sql"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x178 [0114.310] GetFileType (hFile=0x178) returned 0x1 [0114.310] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e580) returned 1 [0114.310] GetFileType (hFile=0x178) returned 0x1 [0114.310] WriteFile (in: hFile=0x178, lpBuffer=0x26d8854*, nNumberOfBytesToWrite=0x1a60, lpNumberOfBytesWritten=0x31e640, lpOverlapped=0x0 | out: lpBuffer=0x26d8854*, lpNumberOfBytesWritten=0x31e640*=0x1a60, lpOverlapped=0x0) returned 1 [0114.314] GetFullPathNameW (in: lpFileName="C:\\Windows\\Microsoft.NET\\Framework64\\v4.0.30319\\SQL\\en\\SqlPersistenceProviderLogic.sql", nBufferLength=0x105, lpBuffer=0x31e1c4, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\Microsoft.NET\\Framework64\\v4.0.30319\\SQL\\en\\SqlPersistenceProviderLogic.sql", lpFilePart=0x0) returned 0x56 [0114.314] GetFullPathNameW (in: lpFileName="C:\\Windows\\Microsoft.NET\\Framework64\\v4.0.30319\\SQL\\en\\SqlPersistenceProviderLogic.sql", nBufferLength=0x105, lpBuffer=0x31e1c4, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\Microsoft.NET\\Framework64\\v4.0.30319\\SQL\\en\\SqlPersistenceProviderLogic.sql", lpFilePart=0x0) returned 0x56 [0114.314] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e624) returned 1 [0114.314] GetFileAttributesExW (in: lpFileName="C:\\Windows\\Microsoft.NET\\Framework64\\v4.0.30319\\SQL\\en\\SqlPersistenceProviderLogic.sql" (normalized: "c:\\windows\\microsoft.net\\framework64\\v4.0.30319\\sql\\en\\sqlpersistenceproviderlogic.sql"), fInfoLevelId=0x0, lpFileInformation=0x31e6a0 | out: lpFileInformation=0x31e6a0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7e3e4400, ftCreationTime.dwHighDateTime=0x1cac5db, ftLastAccessTime.dwLowDateTime=0x9f09dec0, ftLastAccessTime.dwHighDateTime=0x1d2e675, ftLastWriteTime.dwLowDateTime=0x27913ce0, ftLastWriteTime.dwHighDateTime=0x1d6eb7f, nFileSizeHigh=0x0, nFileSizeLow=0x1a60)) returned 1 [0114.314] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e620) returned 1 [0114.314] MoveFileW (lpExistingFileName="C:\\Windows\\Microsoft.NET\\Framework64\\v4.0.30319\\SQL\\en\\SqlPersistenceProviderLogic.sql" (normalized: "c:\\windows\\microsoft.net\\framework64\\v4.0.30319\\sql\\en\\sqlpersistenceproviderlogic.sql"), lpNewFileName="C:\\Windows\\Microsoft.NET\\Framework64\\v4.0.30319\\SQL\\en\\SqlPersistenceProviderLogic.sql" (normalized: "c:\\windows\\microsoft.net\\framework64\\v4.0.30319\\sql\\en\\sqlpersistenceproviderlogic.sql")) returned 1 [0114.315] GetFullPathNameW (in: lpFileName="C:\\Windows\\Microsoft.NET\\Framework64\\v4.0.30319\\SQL\\en\\SqlPersistenceProviderSchema.sql", nBufferLength=0x105, lpBuffer=0x31e0a4, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\Microsoft.NET\\Framework64\\v4.0.30319\\SQL\\en\\SqlPersistenceProviderSchema.sql", lpFilePart=0x0) returned 0x57 [0114.315] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e598) returned 1 [0114.315] CreateFileW (lpFileName="C:\\Windows\\Microsoft.NET\\Framework64\\v4.0.30319\\SQL\\en\\SqlPersistenceProviderSchema.sql" (normalized: "c:\\windows\\microsoft.net\\framework64\\v4.0.30319\\sql\\en\\sqlpersistenceproviderschema.sql"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x178 [0114.315] GetFileType (hFile=0x178) returned 0x1 [0114.315] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e594) returned 1 [0114.315] GetFileType (hFile=0x178) returned 0x1 [0114.315] GetFileSize (in: hFile=0x178, lpFileSizeHigh=0x31e6a0 | out: lpFileSizeHigh=0x31e6a0*=0x0) returned 0x860 [0114.315] ReadFile (in: hFile=0x178, lpBuffer=0x26daf88, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x31e64c, lpOverlapped=0x0 | out: lpBuffer=0x26daf88*, lpNumberOfBytesRead=0x31e64c*=0x860, lpOverlapped=0x0) returned 1 [0114.330] GetFullPathNameW (in: lpFileName="C:\\Windows\\Microsoft.NET\\Framework64\\v4.0.30319\\SQL\\en\\SqlPersistenceProviderSchema.sql", nBufferLength=0x105, lpBuffer=0x31e090, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\Microsoft.NET\\Framework64\\v4.0.30319\\SQL\\en\\SqlPersistenceProviderSchema.sql", lpFilePart=0x0) returned 0x57 [0114.330] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e584) returned 1 [0114.330] CreateFileW (lpFileName="C:\\Windows\\Microsoft.NET\\Framework64\\v4.0.30319\\SQL\\en\\SqlPersistenceProviderSchema.sql" (normalized: "c:\\windows\\microsoft.net\\framework64\\v4.0.30319\\sql\\en\\sqlpersistenceproviderschema.sql"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x178 [0114.331] GetFileType (hFile=0x178) returned 0x1 [0114.331] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e580) returned 1 [0114.331] GetFileType (hFile=0x178) returned 0x1 [0114.332] GetFullPathNameW (in: lpFileName="C:\\Windows\\Microsoft.NET\\Framework64\\v4.0.30319\\SQL\\en\\SqlPersistenceProviderSchema.sql", nBufferLength=0x105, lpBuffer=0x31e1c4, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\Microsoft.NET\\Framework64\\v4.0.30319\\SQL\\en\\SqlPersistenceProviderSchema.sql", lpFilePart=0x0) returned 0x57 [0114.332] GetFullPathNameW (in: lpFileName="C:\\Windows\\Microsoft.NET\\Framework64\\v4.0.30319\\SQL\\en\\SqlPersistenceProviderSchema.sql", nBufferLength=0x105, lpBuffer=0x31e1c4, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\Microsoft.NET\\Framework64\\v4.0.30319\\SQL\\en\\SqlPersistenceProviderSchema.sql", lpFilePart=0x0) returned 0x57 [0114.332] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e624) returned 1 [0114.332] GetFileAttributesExW (in: lpFileName="C:\\Windows\\Microsoft.NET\\Framework64\\v4.0.30319\\SQL\\en\\SqlPersistenceProviderSchema.sql" (normalized: "c:\\windows\\microsoft.net\\framework64\\v4.0.30319\\sql\\en\\sqlpersistenceproviderschema.sql"), fInfoLevelId=0x0, lpFileInformation=0x31e6a0 | out: lpFileInformation=0x31e6a0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7e3e4400, ftCreationTime.dwHighDateTime=0x1cac5db, ftLastAccessTime.dwLowDateTime=0x9f09dec0, ftLastAccessTime.dwHighDateTime=0x1d2e675, ftLastWriteTime.dwLowDateTime=0x27939e40, ftLastWriteTime.dwHighDateTime=0x1d6eb7f, nFileSizeHigh=0x0, nFileSizeLow=0x870)) returned 1 [0114.332] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e620) returned 1 [0114.332] MoveFileW (lpExistingFileName="C:\\Windows\\Microsoft.NET\\Framework64\\v4.0.30319\\SQL\\en\\SqlPersistenceProviderSchema.sql" (normalized: "c:\\windows\\microsoft.net\\framework64\\v4.0.30319\\sql\\en\\sqlpersistenceproviderschema.sql"), lpNewFileName="C:\\Windows\\Microsoft.NET\\Framework64\\v4.0.30319\\SQL\\en\\SqlPersistenceProviderSchema.sql" (normalized: "c:\\windows\\microsoft.net\\framework64\\v4.0.30319\\sql\\en\\sqlpersistenceproviderschema.sql")) returned 1 [0114.333] GetFullPathNameW (in: lpFileName="C:\\Windows\\Microsoft.NET\\Framework64\\v4.0.30319\\SQL\\en\\SqlPersistenceService_Logic.sql", nBufferLength=0x105, lpBuffer=0x31e0a4, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\Microsoft.NET\\Framework64\\v4.0.30319\\SQL\\en\\SqlPersistenceService_Logic.sql", lpFilePart=0x0) returned 0x56 [0114.333] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e598) returned 1 [0114.333] CreateFileW (lpFileName="C:\\Windows\\Microsoft.NET\\Framework64\\v4.0.30319\\SQL\\en\\SqlPersistenceService_Logic.sql" (normalized: "c:\\windows\\microsoft.net\\framework64\\v4.0.30319\\sql\\en\\sqlpersistenceservice_logic.sql"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x178 [0114.333] GetFileType (hFile=0x178) returned 0x1 [0114.333] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e594) returned 1 [0114.333] GetFileType (hFile=0x178) returned 0x1 [0114.333] GetFileSize (in: hFile=0x178, lpFileSizeHigh=0x31e6a0 | out: lpFileSizeHigh=0x31e6a0*=0x0) returned 0x5d5c [0114.333] ReadFile (in: hFile=0x178, lpBuffer=0x272cc20, nNumberOfBytesToRead=0x5d5c, lpNumberOfBytesRead=0x31e64c, lpOverlapped=0x0 | out: lpBuffer=0x272cc20*, lpNumberOfBytesRead=0x31e64c*=0x5d5c, lpOverlapped=0x0) returned 1 [0114.352] GetFullPathNameW (in: lpFileName="C:\\Windows\\Microsoft.NET\\Framework64\\v4.0.30319\\SQL\\en\\SqlPersistenceService_Logic.sql", nBufferLength=0x105, lpBuffer=0x31e090, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\Microsoft.NET\\Framework64\\v4.0.30319\\SQL\\en\\SqlPersistenceService_Logic.sql", lpFilePart=0x0) returned 0x56 [0114.352] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e584) returned 1 [0114.352] CreateFileW (lpFileName="C:\\Windows\\Microsoft.NET\\Framework64\\v4.0.30319\\SQL\\en\\SqlPersistenceService_Logic.sql" (normalized: "c:\\windows\\microsoft.net\\framework64\\v4.0.30319\\sql\\en\\sqlpersistenceservice_logic.sql"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x178 [0114.353] GetFileType (hFile=0x178) returned 0x1 [0114.353] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e580) returned 1 [0114.353] GetFileType (hFile=0x178) returned 0x1 [0114.353] WriteFile (in: hFile=0x178, lpBuffer=0x2796ce4*, nNumberOfBytesToWrite=0x5d60, lpNumberOfBytesWritten=0x31e640, lpOverlapped=0x0 | out: lpBuffer=0x2796ce4*, lpNumberOfBytesWritten=0x31e640*=0x5d60, lpOverlapped=0x0) returned 1 [0114.358] GetFullPathNameW (in: lpFileName="C:\\Windows\\Microsoft.NET\\Framework64\\v4.0.30319\\SQL\\en\\SqlPersistenceService_Logic.sql", nBufferLength=0x105, lpBuffer=0x31e1c4, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\Microsoft.NET\\Framework64\\v4.0.30319\\SQL\\en\\SqlPersistenceService_Logic.sql", lpFilePart=0x0) returned 0x56 [0114.358] GetFullPathNameW (in: lpFileName="C:\\Windows\\Microsoft.NET\\Framework64\\v4.0.30319\\SQL\\en\\SqlPersistenceService_Logic.sql", nBufferLength=0x105, lpBuffer=0x31e1c4, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\Microsoft.NET\\Framework64\\v4.0.30319\\SQL\\en\\SqlPersistenceService_Logic.sql", lpFilePart=0x0) returned 0x56 [0114.358] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e624) returned 1 [0114.358] GetFileAttributesExW (in: lpFileName="C:\\Windows\\Microsoft.NET\\Framework64\\v4.0.30319\\SQL\\en\\SqlPersistenceService_Logic.sql" (normalized: "c:\\windows\\microsoft.net\\framework64\\v4.0.30319\\sql\\en\\sqlpersistenceservice_logic.sql"), fInfoLevelId=0x0, lpFileInformation=0x31e6a0 | out: lpFileInformation=0x31e6a0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xacbc1f00, ftCreationTime.dwHighDateTime=0x1cac5db, ftLastAccessTime.dwLowDateTime=0x9f09dec0, ftLastAccessTime.dwHighDateTime=0x1d2e675, ftLastWriteTime.dwLowDateTime=0x27986100, ftLastWriteTime.dwHighDateTime=0x1d6eb7f, nFileSizeHigh=0x0, nFileSizeLow=0x5d60)) returned 1 [0114.358] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e620) returned 1 [0114.358] MoveFileW (lpExistingFileName="C:\\Windows\\Microsoft.NET\\Framework64\\v4.0.30319\\SQL\\en\\SqlPersistenceService_Logic.sql" (normalized: "c:\\windows\\microsoft.net\\framework64\\v4.0.30319\\sql\\en\\sqlpersistenceservice_logic.sql"), lpNewFileName="C:\\Windows\\Microsoft.NET\\Framework64\\v4.0.30319\\SQL\\en\\SqlPersistenceService_Logic.sql" (normalized: "c:\\windows\\microsoft.net\\framework64\\v4.0.30319\\sql\\en\\sqlpersistenceservice_logic.sql")) returned 1 [0114.359] GetFullPathNameW (in: lpFileName="C:\\Windows\\Microsoft.NET\\Framework64\\v4.0.30319\\SQL\\en\\SqlPersistenceService_Schema.sql", nBufferLength=0x105, lpBuffer=0x31e0a4, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\Microsoft.NET\\Framework64\\v4.0.30319\\SQL\\en\\SqlPersistenceService_Schema.sql", lpFilePart=0x0) returned 0x57 [0114.359] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e598) returned 1 [0114.359] CreateFileW (lpFileName="C:\\Windows\\Microsoft.NET\\Framework64\\v4.0.30319\\SQL\\en\\SqlPersistenceService_Schema.sql" (normalized: "c:\\windows\\microsoft.net\\framework64\\v4.0.30319\\sql\\en\\sqlpersistenceservice_schema.sql"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x178 [0114.359] GetFileType (hFile=0x178) returned 0x1 [0114.359] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e594) returned 1 [0114.359] GetFileType (hFile=0x178) returned 0x1 [0114.359] GetFileSize (in: hFile=0x178, lpFileSizeHigh=0x31e6a0 | out: lpFileSizeHigh=0x31e6a0*=0x0) returned 0x10c8 [0114.359] ReadFile (in: hFile=0x178, lpBuffer=0x279ceac, nNumberOfBytesToRead=0x10c8, lpNumberOfBytesRead=0x31e64c, lpOverlapped=0x0 | out: lpBuffer=0x279ceac*, lpNumberOfBytesRead=0x31e64c*=0x10c8, lpOverlapped=0x0) returned 1 [0114.376] GetFullPathNameW (in: lpFileName="C:\\Windows\\Microsoft.NET\\Framework64\\v4.0.30319\\SQL\\en\\SqlPersistenceService_Schema.sql", nBufferLength=0x105, lpBuffer=0x31e090, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\Microsoft.NET\\Framework64\\v4.0.30319\\SQL\\en\\SqlPersistenceService_Schema.sql", lpFilePart=0x0) returned 0x57 [0114.376] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e584) returned 1 [0114.376] CreateFileW (lpFileName="C:\\Windows\\Microsoft.NET\\Framework64\\v4.0.30319\\SQL\\en\\SqlPersistenceService_Schema.sql" (normalized: "c:\\windows\\microsoft.net\\framework64\\v4.0.30319\\sql\\en\\sqlpersistenceservice_schema.sql"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x178 [0114.377] GetFileType (hFile=0x178) returned 0x1 [0114.377] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e580) returned 1 [0114.377] GetFileType (hFile=0x178) returned 0x1 [0114.377] WriteFile (in: hFile=0x178, lpBuffer=0x27ef0a0*, nNumberOfBytesToWrite=0x10d0, lpNumberOfBytesWritten=0x31e640, lpOverlapped=0x0 | out: lpBuffer=0x27ef0a0*, lpNumberOfBytesWritten=0x31e640*=0x10d0, lpOverlapped=0x0) returned 1 [0114.378] GetFullPathNameW (in: lpFileName="C:\\Windows\\Microsoft.NET\\Framework64\\v4.0.30319\\SQL\\en\\SqlPersistenceService_Schema.sql", nBufferLength=0x105, lpBuffer=0x31e1c4, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\Microsoft.NET\\Framework64\\v4.0.30319\\SQL\\en\\SqlPersistenceService_Schema.sql", lpFilePart=0x0) returned 0x57 [0114.378] GetFullPathNameW (in: lpFileName="C:\\Windows\\Microsoft.NET\\Framework64\\v4.0.30319\\SQL\\en\\SqlPersistenceService_Schema.sql", nBufferLength=0x105, lpBuffer=0x31e1c4, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\Microsoft.NET\\Framework64\\v4.0.30319\\SQL\\en\\SqlPersistenceService_Schema.sql", lpFilePart=0x0) returned 0x57 [0114.379] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e624) returned 1 [0114.379] GetFileAttributesExW (in: lpFileName="C:\\Windows\\Microsoft.NET\\Framework64\\v4.0.30319\\SQL\\en\\SqlPersistenceService_Schema.sql" (normalized: "c:\\windows\\microsoft.net\\framework64\\v4.0.30319\\sql\\en\\sqlpersistenceservice_schema.sql"), fInfoLevelId=0x0, lpFileInformation=0x31e6a0 | out: lpFileInformation=0x31e6a0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xacbc1f00, ftCreationTime.dwHighDateTime=0x1cac5db, ftLastAccessTime.dwLowDateTime=0x9f0c4020, ftLastAccessTime.dwHighDateTime=0x1d2e675, ftLastWriteTime.dwLowDateTime=0x279ac260, ftLastWriteTime.dwHighDateTime=0x1d6eb7f, nFileSizeHigh=0x0, nFileSizeLow=0x10d0)) returned 1 [0114.379] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e620) returned 1 [0114.379] MoveFileW (lpExistingFileName="C:\\Windows\\Microsoft.NET\\Framework64\\v4.0.30319\\SQL\\en\\SqlPersistenceService_Schema.sql" (normalized: "c:\\windows\\microsoft.net\\framework64\\v4.0.30319\\sql\\en\\sqlpersistenceservice_schema.sql"), lpNewFileName="C:\\Windows\\Microsoft.NET\\Framework64\\v4.0.30319\\SQL\\en\\SqlPersistenceService_Schema.sql" (normalized: "c:\\windows\\microsoft.net\\framework64\\v4.0.30319\\sql\\en\\sqlpersistenceservice_schema.sql")) returned 1 [0114.379] GetFullPathNameW (in: lpFileName="C:\\Windows\\Microsoft.NET\\Framework64\\v4.0.30319\\SQL\\en\\SqlWorkflowInstanceStoreLogic.sql", nBufferLength=0x105, lpBuffer=0x31e0a4, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\Microsoft.NET\\Framework64\\v4.0.30319\\SQL\\en\\SqlWorkflowInstanceStoreLogic.sql", lpFilePart=0x0) returned 0x58 [0114.379] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e598) returned 1 [0114.379] CreateFileW (lpFileName="C:\\Windows\\Microsoft.NET\\Framework64\\v4.0.30319\\SQL\\en\\SqlWorkflowInstanceStoreLogic.sql" (normalized: "c:\\windows\\microsoft.net\\framework64\\v4.0.30319\\sql\\en\\sqlworkflowinstancestorelogic.sql"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x178 [0114.379] GetFileType (hFile=0x178) returned 0x1 [0114.379] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e594) returned 1 [0114.379] GetFileType (hFile=0x178) returned 0x1 [0114.379] GetFileSize (in: hFile=0x178, lpFileSizeHigh=0x31e6a0 | out: lpFileSizeHigh=0x31e6a0*=0x0) returned 0xf89e [0114.380] ReadFile (in: hFile=0x178, lpBuffer=0x27f05e0, nNumberOfBytesToRead=0xf89e, lpNumberOfBytesRead=0x31e64c, lpOverlapped=0x0 | out: lpBuffer=0x27f05e0*, lpNumberOfBytesRead=0x31e64c*=0xf89e, lpOverlapped=0x0) returned 1 [0114.402] GetFullPathNameW (in: lpFileName="C:\\Windows\\Microsoft.NET\\Framework64\\v4.0.30319\\SQL\\en\\SqlWorkflowInstanceStoreLogic.sql", nBufferLength=0x105, lpBuffer=0x31e090, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\Microsoft.NET\\Framework64\\v4.0.30319\\SQL\\en\\SqlWorkflowInstanceStoreLogic.sql", lpFilePart=0x0) returned 0x58 [0114.402] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e584) returned 1 [0114.402] CreateFileW (lpFileName="C:\\Windows\\Microsoft.NET\\Framework64\\v4.0.30319\\SQL\\en\\SqlWorkflowInstanceStoreLogic.sql" (normalized: "c:\\windows\\microsoft.net\\framework64\\v4.0.30319\\sql\\en\\sqlworkflowinstancestorelogic.sql"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x178 [0114.403] GetFileType (hFile=0x178) returned 0x1 [0114.403] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e580) returned 1 [0114.404] GetFileType (hFile=0x178) returned 0x1 [0114.404] WriteFile (in: hFile=0x178, lpBuffer=0x267d8f8*, nNumberOfBytesToWrite=0xf8a0, lpNumberOfBytesWritten=0x31e640, lpOverlapped=0x0 | out: lpBuffer=0x267d8f8*, lpNumberOfBytesWritten=0x31e640*=0xf8a0, lpOverlapped=0x0) returned 1 [0114.405] GetFullPathNameW (in: lpFileName="C:\\Windows\\Microsoft.NET\\Framework64\\v4.0.30319\\SQL\\en\\SqlWorkflowInstanceStoreLogic.sql", nBufferLength=0x105, lpBuffer=0x31e1c4, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\Microsoft.NET\\Framework64\\v4.0.30319\\SQL\\en\\SqlWorkflowInstanceStoreLogic.sql", lpFilePart=0x0) returned 0x58 [0114.405] GetFullPathNameW (in: lpFileName="C:\\Windows\\Microsoft.NET\\Framework64\\v4.0.30319\\SQL\\en\\SqlWorkflowInstanceStoreLogic.sql", nBufferLength=0x105, lpBuffer=0x31e1c4, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\Microsoft.NET\\Framework64\\v4.0.30319\\SQL\\en\\SqlWorkflowInstanceStoreLogic.sql", lpFilePart=0x0) returned 0x58 [0114.405] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e624) returned 1 [0114.405] GetFileAttributesExW (in: lpFileName="C:\\Windows\\Microsoft.NET\\Framework64\\v4.0.30319\\SQL\\en\\SqlWorkflowInstanceStoreLogic.sql" (normalized: "c:\\windows\\microsoft.net\\framework64\\v4.0.30319\\sql\\en\\sqlworkflowinstancestorelogic.sql"), fInfoLevelId=0x0, lpFileInformation=0x31e6a0 | out: lpFileInformation=0x31e6a0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1eee8200, ftCreationTime.dwHighDateTime=0x1cd0c40, ftLastAccessTime.dwLowDateTime=0xd15173c0, ftLastAccessTime.dwHighDateTime=0x1d2e675, ftLastWriteTime.dwLowDateTime=0x279f8520, ftLastWriteTime.dwHighDateTime=0x1d6eb7f, nFileSizeHigh=0x0, nFileSizeLow=0xf8a0)) returned 1 [0114.405] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e620) returned 1 [0114.405] MoveFileW (lpExistingFileName="C:\\Windows\\Microsoft.NET\\Framework64\\v4.0.30319\\SQL\\en\\SqlWorkflowInstanceStoreLogic.sql" (normalized: "c:\\windows\\microsoft.net\\framework64\\v4.0.30319\\sql\\en\\sqlworkflowinstancestorelogic.sql"), lpNewFileName="C:\\Windows\\Microsoft.NET\\Framework64\\v4.0.30319\\SQL\\en\\SqlWorkflowInstanceStoreLogic.sql" (normalized: "c:\\windows\\microsoft.net\\framework64\\v4.0.30319\\sql\\en\\sqlworkflowinstancestorelogic.sql")) returned 1 [0114.406] GetFullPathNameW (in: lpFileName="C:\\Windows\\Microsoft.NET\\Framework64\\v4.0.30319\\SQL\\en\\SqlWorkflowInstanceStoreSchema.sql", nBufferLength=0x105, lpBuffer=0x31e0a4, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\Microsoft.NET\\Framework64\\v4.0.30319\\SQL\\en\\SqlWorkflowInstanceStoreSchema.sql", lpFilePart=0x0) returned 0x59 [0114.406] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e598) returned 1 [0114.406] CreateFileW (lpFileName="C:\\Windows\\Microsoft.NET\\Framework64\\v4.0.30319\\SQL\\en\\SqlWorkflowInstanceStoreSchema.sql" (normalized: "c:\\windows\\microsoft.net\\framework64\\v4.0.30319\\sql\\en\\sqlworkflowinstancestoreschema.sql"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x178 [0114.406] GetFileType (hFile=0x178) returned 0x1 [0114.406] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e594) returned 1 [0114.406] GetFileType (hFile=0x178) returned 0x1 [0114.406] GetFileSize (in: hFile=0x178, lpFileSizeHigh=0x31e6a0 | out: lpFileSizeHigh=0x31e6a0*=0x0) returned 0x7088 [0114.406] ReadFile (in: hFile=0x178, lpBuffer=0x268d618, nNumberOfBytesToRead=0x7088, lpNumberOfBytesRead=0x31e64c, lpOverlapped=0x0 | out: lpBuffer=0x268d618*, lpNumberOfBytesRead=0x31e64c*=0x7088, lpOverlapped=0x0) returned 1 [0114.460] GetFullPathNameW (in: lpFileName="C:\\Windows\\Microsoft.NET\\Framework64\\v4.0.30319\\SQL\\en\\SqlWorkflowInstanceStoreSchema.sql", nBufferLength=0x105, lpBuffer=0x31e090, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\Microsoft.NET\\Framework64\\v4.0.30319\\SQL\\en\\SqlWorkflowInstanceStoreSchema.sql", lpFilePart=0x0) returned 0x59 [0114.460] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e584) returned 1 [0114.460] CreateFileW (lpFileName="C:\\Windows\\Microsoft.NET\\Framework64\\v4.0.30319\\SQL\\en\\SqlWorkflowInstanceStoreSchema.sql" (normalized: "c:\\windows\\microsoft.net\\framework64\\v4.0.30319\\sql\\en\\sqlworkflowinstancestoreschema.sql"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x178 [0114.461] GetFileType (hFile=0x178) returned 0x1 [0114.461] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e580) returned 1 [0114.461] GetFileType (hFile=0x178) returned 0x1 [0114.461] WriteFile (in: hFile=0x178, lpBuffer=0x26fd828*, nNumberOfBytesToWrite=0x7090, lpNumberOfBytesWritten=0x31e640, lpOverlapped=0x0 | out: lpBuffer=0x26fd828*, lpNumberOfBytesWritten=0x31e640*=0x7090, lpOverlapped=0x0) returned 1 [0114.462] CloseHandle (hObject=0x178) returned 1 [0114.462] GetFullPathNameW (in: lpFileName="C:\\Windows\\Microsoft.NET\\Framework64\\v4.0.30319\\SQL\\en\\SqlWorkflowInstanceStoreSchema.sql", nBufferLength=0x105, lpBuffer=0x31e1c4, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\Microsoft.NET\\Framework64\\v4.0.30319\\SQL\\en\\SqlWorkflowInstanceStoreSchema.sql", lpFilePart=0x0) returned 0x59 [0114.462] GetFullPathNameW (in: lpFileName="C:\\Windows\\Microsoft.NET\\Framework64\\v4.0.30319\\SQL\\en\\SqlWorkflowInstanceStoreSchema.sql", nBufferLength=0x105, lpBuffer=0x31e1c4, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\Microsoft.NET\\Framework64\\v4.0.30319\\SQL\\en\\SqlWorkflowInstanceStoreSchema.sql", lpFilePart=0x0) returned 0x59 [0114.462] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e624) returned 1 [0114.462] GetFileAttributesExW (in: lpFileName="C:\\Windows\\Microsoft.NET\\Framework64\\v4.0.30319\\SQL\\en\\SqlWorkflowInstanceStoreSchema.sql" (normalized: "c:\\windows\\microsoft.net\\framework64\\v4.0.30319\\sql\\en\\sqlworkflowinstancestoreschema.sql"), fInfoLevelId=0x0, lpFileInformation=0x31e6a0 | out: lpFileInformation=0x31e6a0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1eee8200, ftCreationTime.dwHighDateTime=0x1cd0c40, ftLastAccessTime.dwLowDateTime=0xd153d520, ftLastAccessTime.dwHighDateTime=0x1d2e675, ftLastWriteTime.dwLowDateTime=0x27a90aa0, ftLastWriteTime.dwHighDateTime=0x1d6eb7f, nFileSizeHigh=0x0, nFileSizeLow=0x7090)) returned 1 [0114.463] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e620) returned 1 [0114.463] MoveFileW (lpExistingFileName="C:\\Windows\\Microsoft.NET\\Framework64\\v4.0.30319\\SQL\\en\\SqlWorkflowInstanceStoreSchema.sql" (normalized: "c:\\windows\\microsoft.net\\framework64\\v4.0.30319\\sql\\en\\sqlworkflowinstancestoreschema.sql"), lpNewFileName="C:\\Windows\\Microsoft.NET\\Framework64\\v4.0.30319\\SQL\\en\\SqlWorkflowInstanceStoreSchema.sql" (normalized: "c:\\windows\\microsoft.net\\framework64\\v4.0.30319\\sql\\en\\sqlworkflowinstancestoreschema.sql")) returned 1 [0114.463] GetFullPathNameW (in: lpFileName="C:\\Windows\\Microsoft.NET\\Framework64\\v4.0.30319\\SQL\\en\\SqlWorkflowInstanceStoreSchemaUpgrade.sql", nBufferLength=0x105, lpBuffer=0x31e0a4, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\Microsoft.NET\\Framework64\\v4.0.30319\\SQL\\en\\SqlWorkflowInstanceStoreSchemaUpgrade.sql", lpFilePart=0x0) returned 0x60 [0114.463] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e598) returned 1 [0114.463] CreateFileW (lpFileName="C:\\Windows\\Microsoft.NET\\Framework64\\v4.0.30319\\SQL\\en\\SqlWorkflowInstanceStoreSchemaUpgrade.sql" (normalized: "c:\\windows\\microsoft.net\\framework64\\v4.0.30319\\sql\\en\\sqlworkflowinstancestoreschemaupgrade.sql"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x178 [0114.463] GetFileType (hFile=0x178) returned 0x1 [0114.464] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e594) returned 1 [0114.464] GetFileType (hFile=0x178) returned 0x1 [0114.464] GetFileSize (in: hFile=0x178, lpFileSizeHigh=0x31e6a0 | out: lpFileSizeHigh=0x31e6a0*=0x0) returned 0x137b9 [0114.464] ReadFile (in: hFile=0x178, lpBuffer=0x2704d58, nNumberOfBytesToRead=0x137b9, lpNumberOfBytesRead=0x31e64c, lpOverlapped=0x0 | out: lpBuffer=0x2704d58*, lpNumberOfBytesRead=0x31e64c*=0x137b9, lpOverlapped=0x0) returned 1 [0114.465] CloseHandle (hObject=0x178) returned 1 [0114.481] GetFullPathNameW (in: lpFileName="C:\\Windows\\Microsoft.NET\\Framework64\\v4.0.30319\\SQL\\en\\SqlWorkflowInstanceStoreSchemaUpgrade.sql", nBufferLength=0x105, lpBuffer=0x31e090, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\Microsoft.NET\\Framework64\\v4.0.30319\\SQL\\en\\SqlWorkflowInstanceStoreSchemaUpgrade.sql", lpFilePart=0x0) returned 0x60 [0114.481] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e584) returned 1 [0114.481] CreateFileW (lpFileName="C:\\Windows\\Microsoft.NET\\Framework64\\v4.0.30319\\SQL\\en\\SqlWorkflowInstanceStoreSchemaUpgrade.sql" (normalized: "c:\\windows\\microsoft.net\\framework64\\v4.0.30319\\sql\\en\\sqlworkflowinstancestoreschemaupgrade.sql"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x178 [0114.483] GetFileType (hFile=0x178) returned 0x1 [0114.483] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e580) returned 1 [0114.483] GetFileType (hFile=0x178) returned 0x1 [0114.483] WriteFile (in: hFile=0x178, lpBuffer=0x278c294*, nNumberOfBytesToWrite=0x137c0, lpNumberOfBytesWritten=0x31e640, lpOverlapped=0x0 | out: lpBuffer=0x278c294*, lpNumberOfBytesWritten=0x31e640*=0x137c0, lpOverlapped=0x0) returned 1 [0114.485] CloseHandle (hObject=0x178) returned 1 [0114.485] GetFullPathNameW (in: lpFileName="C:\\Windows\\Microsoft.NET\\Framework64\\v4.0.30319\\SQL\\en\\SqlWorkflowInstanceStoreSchemaUpgrade.sql", nBufferLength=0x105, lpBuffer=0x31e1c4, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\Microsoft.NET\\Framework64\\v4.0.30319\\SQL\\en\\SqlWorkflowInstanceStoreSchemaUpgrade.sql", lpFilePart=0x0) returned 0x60 [0114.485] GetFullPathNameW (in: lpFileName="C:\\Windows\\Microsoft.NET\\Framework64\\v4.0.30319\\SQL\\en\\SqlWorkflowInstanceStoreSchemaUpgrade.sql", nBufferLength=0x105, lpBuffer=0x31e1c4, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\Microsoft.NET\\Framework64\\v4.0.30319\\SQL\\en\\SqlWorkflowInstanceStoreSchemaUpgrade.sql", lpFilePart=0x0) returned 0x60 [0114.485] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e624) returned 1 [0114.485] GetFileAttributesExW (in: lpFileName="C:\\Windows\\Microsoft.NET\\Framework64\\v4.0.30319\\SQL\\en\\SqlWorkflowInstanceStoreSchemaUpgrade.sql" (normalized: "c:\\windows\\microsoft.net\\framework64\\v4.0.30319\\sql\\en\\sqlworkflowinstancestoreschemaupgrade.sql"), fInfoLevelId=0x0, lpFileInformation=0x31e6a0 | out: lpFileInformation=0x31e6a0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe105fd00, ftCreationTime.dwHighDateTime=0x1cd5d08, ftLastAccessTime.dwLowDateTime=0xd153d520, ftLastAccessTime.dwHighDateTime=0x1d2e675, ftLastWriteTime.dwLowDateTime=0x27ab6c00, ftLastWriteTime.dwHighDateTime=0x1d6eb7f, nFileSizeHigh=0x0, nFileSizeLow=0x137c0)) returned 1 [0114.485] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e620) returned 1 [0114.485] MoveFileW (lpExistingFileName="C:\\Windows\\Microsoft.NET\\Framework64\\v4.0.30319\\SQL\\en\\SqlWorkflowInstanceStoreSchemaUpgrade.sql" (normalized: "c:\\windows\\microsoft.net\\framework64\\v4.0.30319\\sql\\en\\sqlworkflowinstancestoreschemaupgrade.sql"), lpNewFileName="C:\\Windows\\Microsoft.NET\\Framework64\\v4.0.30319\\SQL\\en\\SqlWorkflowInstanceStoreSchemaUpgrade.sql" (normalized: "c:\\windows\\microsoft.net\\framework64\\v4.0.30319\\sql\\en\\sqlworkflowinstancestoreschemaupgrade.sql")) returned 1 [0114.485] GetFullPathNameW (in: lpFileName="C:\\Windows\\Microsoft.NET\\Framework64\\v4.0.30319\\SQL\\en\\Tracking_Logic.sql", nBufferLength=0x105, lpBuffer=0x31e0a4, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\Microsoft.NET\\Framework64\\v4.0.30319\\SQL\\en\\Tracking_Logic.sql", lpFilePart=0x0) returned 0x49 [0114.485] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e598) returned 1 [0114.485] CreateFileW (lpFileName="C:\\Windows\\Microsoft.NET\\Framework64\\v4.0.30319\\SQL\\en\\Tracking_Logic.sql" (normalized: "c:\\windows\\microsoft.net\\framework64\\v4.0.30319\\sql\\en\\tracking_logic.sql"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x178 [0114.485] GetFileType (hFile=0x178) returned 0x1 [0114.486] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e594) returned 1 [0114.486] GetFileType (hFile=0x178) returned 0x1 [0114.486] GetFileSize (in: hFile=0x178, lpFileSizeHigh=0x31e6a0 | out: lpFileSizeHigh=0x31e6a0*=0x0) returned 0x5d2a4 [0114.486] ReadFile (in: hFile=0x178, lpBuffer=0x3746648, nNumberOfBytesToRead=0x5d2a4, lpNumberOfBytesRead=0x31e64c, lpOverlapped=0x0 | out: lpBuffer=0x3746648*, lpNumberOfBytesRead=0x31e64c*=0x5d2a4, lpOverlapped=0x0) returned 1 [0114.497] CloseHandle (hObject=0x178) returned 1 [0114.533] GetFullPathNameW (in: lpFileName="C:\\Windows\\Microsoft.NET\\Framework64\\v4.0.30319\\SQL\\en\\Tracking_Logic.sql", nBufferLength=0x105, lpBuffer=0x31e090, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\Microsoft.NET\\Framework64\\v4.0.30319\\SQL\\en\\Tracking_Logic.sql", lpFilePart=0x0) returned 0x49 [0114.533] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e584) returned 1 [0114.533] CreateFileW (lpFileName="C:\\Windows\\Microsoft.NET\\Framework64\\v4.0.30319\\SQL\\en\\Tracking_Logic.sql" (normalized: "c:\\windows\\microsoft.net\\framework64\\v4.0.30319\\sql\\en\\tracking_logic.sql"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x178 [0114.536] GetFileType (hFile=0x178) returned 0x1 [0114.536] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e580) returned 1 [0114.537] GetFileType (hFile=0x178) returned 0x1 [0114.537] WriteFile (in: hFile=0x178, lpBuffer=0x39183e8*, nNumberOfBytesToWrite=0x5d2b0, lpNumberOfBytesWritten=0x31e640, lpOverlapped=0x0 | out: lpBuffer=0x39183e8*, lpNumberOfBytesWritten=0x31e640*=0x5d2b0, lpOverlapped=0x0) returned 1 [0114.543] CloseHandle (hObject=0x178) returned 1 [0114.543] GetFullPathNameW (in: lpFileName="C:\\Windows\\Microsoft.NET\\Framework64\\v4.0.30319\\SQL\\en\\Tracking_Logic.sql", nBufferLength=0x105, lpBuffer=0x31e1c4, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\Microsoft.NET\\Framework64\\v4.0.30319\\SQL\\en\\Tracking_Logic.sql", lpFilePart=0x0) returned 0x49 [0114.544] GetFullPathNameW (in: lpFileName="C:\\Windows\\Microsoft.NET\\Framework64\\v4.0.30319\\SQL\\en\\Tracking_Logic.sql", nBufferLength=0x105, lpBuffer=0x31e1c4, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\Microsoft.NET\\Framework64\\v4.0.30319\\SQL\\en\\Tracking_Logic.sql", lpFilePart=0x0) returned 0x49 [0114.544] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e624) returned 1 [0114.544] GetFileAttributesExW (in: lpFileName="C:\\Windows\\Microsoft.NET\\Framework64\\v4.0.30319\\SQL\\en\\Tracking_Logic.sql" (normalized: "c:\\windows\\microsoft.net\\framework64\\v4.0.30319\\sql\\en\\tracking_logic.sql"), fInfoLevelId=0x0, lpFileInformation=0x31e6a0 | out: lpFileInformation=0x31e6a0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xacbc1f00, ftCreationTime.dwHighDateTime=0x1cac5db, ftLastAccessTime.dwLowDateTime=0x9f1f4b20, ftLastAccessTime.dwHighDateTime=0x1d2e675, ftLastWriteTime.dwLowDateTime=0x27b4f180, ftLastWriteTime.dwHighDateTime=0x1d6eb7f, nFileSizeHigh=0x0, nFileSizeLow=0x5d2b0)) returned 1 [0114.544] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e620) returned 1 [0114.544] MoveFileW (lpExistingFileName="C:\\Windows\\Microsoft.NET\\Framework64\\v4.0.30319\\SQL\\en\\Tracking_Logic.sql" (normalized: "c:\\windows\\microsoft.net\\framework64\\v4.0.30319\\sql\\en\\tracking_logic.sql"), lpNewFileName="C:\\Windows\\Microsoft.NET\\Framework64\\v4.0.30319\\SQL\\en\\Tracking_Logic.sql" (normalized: "c:\\windows\\microsoft.net\\framework64\\v4.0.30319\\sql\\en\\tracking_logic.sql")) returned 1 [0114.544] GetFullPathNameW (in: lpFileName="C:\\Windows\\Microsoft.NET\\Framework64\\v4.0.30319\\SQL\\en\\Tracking_Schema.sql", nBufferLength=0x105, lpBuffer=0x31e0a4, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\Microsoft.NET\\Framework64\\v4.0.30319\\SQL\\en\\Tracking_Schema.sql", lpFilePart=0x0) returned 0x4a [0114.544] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e598) returned 1 [0114.544] CreateFileW (lpFileName="C:\\Windows\\Microsoft.NET\\Framework64\\v4.0.30319\\SQL\\en\\Tracking_Schema.sql" (normalized: "c:\\windows\\microsoft.net\\framework64\\v4.0.30319\\sql\\en\\tracking_schema.sql"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x178 [0114.544] GetFileType (hFile=0x178) returned 0x1 [0114.544] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e594) returned 1 [0114.544] GetFileType (hFile=0x178) returned 0x1 [0114.544] GetFileSize (in: hFile=0x178, lpFileSizeHigh=0x31e6a0 | out: lpFileSizeHigh=0x31e6a0*=0x0) returned 0xc66e [0114.545] ReadFile (in: hFile=0x178, lpBuffer=0x27ed090, nNumberOfBytesToRead=0xc66e, lpNumberOfBytesRead=0x31e64c, lpOverlapped=0x0 | out: lpBuffer=0x27ed090*, lpNumberOfBytesRead=0x31e64c*=0xc66e, lpOverlapped=0x0) returned 1 [0114.546] CloseHandle (hObject=0x178) returned 1 [0114.564] GetFullPathNameW (in: lpFileName="C:\\Windows\\Microsoft.NET\\Framework64\\v4.0.30319\\SQL\\en\\Tracking_Schema.sql", nBufferLength=0x105, lpBuffer=0x31e090, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\Microsoft.NET\\Framework64\\v4.0.30319\\SQL\\en\\Tracking_Schema.sql", lpFilePart=0x0) returned 0x4a [0114.564] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e584) returned 1 [0114.564] CreateFileW (lpFileName="C:\\Windows\\Microsoft.NET\\Framework64\\v4.0.30319\\SQL\\en\\Tracking_Schema.sql" (normalized: "c:\\windows\\microsoft.net\\framework64\\v4.0.30319\\sql\\en\\tracking_schema.sql"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x178 [0114.565] GetFileType (hFile=0x178) returned 0x1 [0114.565] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e580) returned 1 [0114.565] GetFileType (hFile=0x178) returned 0x1 [0114.565] WriteFile (in: hFile=0x178, lpBuffer=0x26613d4*, nNumberOfBytesToWrite=0xc670, lpNumberOfBytesWritten=0x31e640, lpOverlapped=0x0 | out: lpBuffer=0x26613d4*, lpNumberOfBytesWritten=0x31e640*=0xc670, lpOverlapped=0x0) returned 1 [0114.568] CloseHandle (hObject=0x178) returned 1 [0114.568] GetFullPathNameW (in: lpFileName="C:\\Windows\\Microsoft.NET\\Framework64\\v4.0.30319\\SQL\\en\\Tracking_Schema.sql", nBufferLength=0x105, lpBuffer=0x31e1c4, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\Microsoft.NET\\Framework64\\v4.0.30319\\SQL\\en\\Tracking_Schema.sql", lpFilePart=0x0) returned 0x4a [0114.568] GetFullPathNameW (in: lpFileName="C:\\Windows\\Microsoft.NET\\Framework64\\v4.0.30319\\SQL\\en\\Tracking_Schema.sql", nBufferLength=0x105, lpBuffer=0x31e1c4, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\Microsoft.NET\\Framework64\\v4.0.30319\\SQL\\en\\Tracking_Schema.sql", lpFilePart=0x0) returned 0x4a [0114.568] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e624) returned 1 [0114.568] GetFileAttributesExW (in: lpFileName="C:\\Windows\\Microsoft.NET\\Framework64\\v4.0.30319\\SQL\\en\\Tracking_Schema.sql" (normalized: "c:\\windows\\microsoft.net\\framework64\\v4.0.30319\\sql\\en\\tracking_schema.sql"), fInfoLevelId=0x0, lpFileInformation=0x31e6a0 | out: lpFileInformation=0x31e6a0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xacbc1f00, ftCreationTime.dwHighDateTime=0x1cac5db, ftLastAccessTime.dwLowDateTime=0x9f21ac80, ftLastAccessTime.dwHighDateTime=0x1d2e675, ftLastWriteTime.dwLowDateTime=0x27b9b440, ftLastWriteTime.dwHighDateTime=0x1d6eb7f, nFileSizeHigh=0x0, nFileSizeLow=0xc670)) returned 1 [0114.568] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e620) returned 1 [0114.568] MoveFileW (lpExistingFileName="C:\\Windows\\Microsoft.NET\\Framework64\\v4.0.30319\\SQL\\en\\Tracking_Schema.sql" (normalized: "c:\\windows\\microsoft.net\\framework64\\v4.0.30319\\sql\\en\\tracking_schema.sql"), lpNewFileName="C:\\Windows\\Microsoft.NET\\Framework64\\v4.0.30319\\SQL\\en\\Tracking_Schema.sql" (normalized: "c:\\windows\\microsoft.net\\framework64\\v4.0.30319\\sql\\en\\tracking_schema.sql")) returned 1 [0114.568] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e744) returned 1 [0114.568] GetFullPathNameW (in: lpFileName="C:\\Windows\\Microsoft.NET\\Framework64\\v4.0.30319\\Temporary ASP.NET Files", nBufferLength=0x105, lpBuffer=0x31e24c, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\Microsoft.NET\\Framework64\\v4.0.30319\\Temporary ASP.NET Files", lpFilePart=0x0) returned 0x47 [0114.568] GetFullPathNameW (in: lpFileName="C:\\Windows\\Microsoft.NET\\Framework64\\v4.0.30319\\Temporary ASP.NET Files\\", nBufferLength=0x105, lpBuffer=0x31e220, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\Microsoft.NET\\Framework64\\v4.0.30319\\Temporary ASP.NET Files\\", lpFilePart=0x0) returned 0x48 [0114.568] FindFirstFileW (in: lpFileName="C:\\Windows\\Microsoft.NET\\Framework64\\v4.0.30319\\Temporary ASP.NET Files\\*", lpFindFileData=0x31e46c | out: lpFindFileData=0x31e46c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa7898780, ftCreationTime.dwHighDateTime=0x1d2e675, ftLastAccessTime.dwLowDateTime=0xa7898780, ftLastAccessTime.dwHighDateTime=0x1d2e675, ftLastWriteTime.dwLowDateTime=0xa7898780, ftLastWriteTime.dwHighDateTime=0x1d2e675, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x381b80 [0114.569] FindNextFileW (in: hFindFile=0x381b80, lpFindFileData=0x31e47c | out: lpFindFileData=0x31e47c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa7898780, ftCreationTime.dwHighDateTime=0x1d2e675, ftLastAccessTime.dwLowDateTime=0xa7898780, ftLastAccessTime.dwHighDateTime=0x1d2e675, ftLastWriteTime.dwLowDateTime=0xa7898780, ftLastWriteTime.dwHighDateTime=0x1d2e675, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0114.569] FindNextFileW (in: hFindFile=0x381b80, lpFindFileData=0x31e47c | out: lpFindFileData=0x31e47c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa7898780, ftCreationTime.dwHighDateTime=0x1d2e675, ftLastAccessTime.dwLowDateTime=0xa7898780, ftLastAccessTime.dwHighDateTime=0x1d2e675, ftLastWriteTime.dwLowDateTime=0xa7898780, ftLastWriteTime.dwHighDateTime=0x1d2e675, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 0 [0114.569] FindClose (in: hFindFile=0x381b80 | out: hFindFile=0x381b80) returned 1 [0114.569] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e704) returned 1 [0114.569] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e710) returned 1 [0114.569] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e744) returned 1 [0114.569] GetFullPathNameW (in: lpFileName="C:\\Windows\\Microsoft.NET\\Framework64\\v4.0.30319\\Temporary ASP.NET Files", nBufferLength=0x105, lpBuffer=0x31e24c, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\Microsoft.NET\\Framework64\\v4.0.30319\\Temporary ASP.NET Files", lpFilePart=0x0) returned 0x47 [0114.569] GetFullPathNameW (in: lpFileName="C:\\Windows\\Microsoft.NET\\Framework64\\v4.0.30319\\Temporary ASP.NET Files\\", nBufferLength=0x105, lpBuffer=0x31e220, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\Microsoft.NET\\Framework64\\v4.0.30319\\Temporary ASP.NET Files\\", lpFilePart=0x0) returned 0x48 [0114.569] FindFirstFileW (in: lpFileName="C:\\Windows\\Microsoft.NET\\Framework64\\v4.0.30319\\Temporary ASP.NET Files\\*", lpFindFileData=0x31e46c | out: lpFindFileData=0x31e46c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa7898780, ftCreationTime.dwHighDateTime=0x1d2e675, ftLastAccessTime.dwLowDateTime=0xa7898780, ftLastAccessTime.dwHighDateTime=0x1d2e675, ftLastWriteTime.dwLowDateTime=0xa7898780, ftLastWriteTime.dwHighDateTime=0x1d2e675, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x381b80 [0114.569] FindNextFileW (in: hFindFile=0x381b80, lpFindFileData=0x31e47c | out: lpFindFileData=0x31e47c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa7898780, ftCreationTime.dwHighDateTime=0x1d2e675, ftLastAccessTime.dwLowDateTime=0xa7898780, ftLastAccessTime.dwHighDateTime=0x1d2e675, ftLastWriteTime.dwLowDateTime=0xa7898780, ftLastWriteTime.dwHighDateTime=0x1d2e675, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0114.570] FindNextFileW (in: hFindFile=0x381b80, lpFindFileData=0x31e47c | out: lpFindFileData=0x31e47c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa7898780, ftCreationTime.dwHighDateTime=0x1d2e675, ftLastAccessTime.dwLowDateTime=0xa7898780, ftLastAccessTime.dwHighDateTime=0x1d2e675, ftLastWriteTime.dwLowDateTime=0xa7898780, ftLastWriteTime.dwHighDateTime=0x1d2e675, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 0 [0114.570] FindClose (in: hFindFile=0x381b80 | out: hFindFile=0x381b80) returned 1 [0114.570] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e704) returned 1 [0114.570] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e710) returned 1 [0114.570] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e744) returned 1 [0114.570] GetFullPathNameW (in: lpFileName="C:\\Windows\\Microsoft.NET\\Framework64\\v4.0.30319\\WPF", nBufferLength=0x105, lpBuffer=0x31e24c, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\Microsoft.NET\\Framework64\\v4.0.30319\\WPF", lpFilePart=0x0) returned 0x33 [0114.570] GetFullPathNameW (in: lpFileName="C:\\Windows\\Microsoft.NET\\Framework64\\v4.0.30319\\WPF\\", nBufferLength=0x105, lpBuffer=0x31e220, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\Microsoft.NET\\Framework64\\v4.0.30319\\WPF\\", lpFilePart=0x0) returned 0x34 [0114.570] FindFirstFileW (in: lpFileName="C:\\Windows\\Microsoft.NET\\Framework64\\v4.0.30319\\WPF\\*", lpFindFileData=0x31e46c | out: lpFindFileData=0x31e46c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8abdb760, ftCreationTime.dwHighDateTime=0x1d2e621, ftLastAccessTime.dwLowDateTime=0x6b8e7fa0, ftLastAccessTime.dwHighDateTime=0x1d2e676, ftLastWriteTime.dwLowDateTime=0x6b8e7fa0, ftLastWriteTime.dwHighDateTime=0x1d2e676, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x381b80 [0114.579] FindNextFileW (in: hFindFile=0x381b80, lpFindFileData=0x31e47c | out: lpFindFileData=0x31e47c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8abdb760, ftCreationTime.dwHighDateTime=0x1d2e621, ftLastAccessTime.dwLowDateTime=0x6b8e7fa0, ftLastAccessTime.dwHighDateTime=0x1d2e676, ftLastWriteTime.dwLowDateTime=0x6b8e7fa0, ftLastWriteTime.dwHighDateTime=0x1d2e676, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0114.585] FindNextFileW (in: hFindFile=0x381b80, lpFindFileData=0x31e47c | out: lpFindFileData=0x31e47c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5f355da0, ftCreationTime.dwHighDateTime=0x1d2e676, ftLastAccessTime.dwLowDateTime=0x5f355da0, ftLastAccessTime.dwHighDateTime=0x1d2e676, ftLastWriteTime.dwLowDateTime=0x5f355da0, ftLastWriteTime.dwHighDateTime=0x1d2e676, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="en-US", cAlternateFileName="")) returned 1 [0114.585] FindNextFileW (in: hFindFile=0x381b80, lpFindFileData=0x31e47c | out: lpFindFileData=0x31e47c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8abdb760, ftCreationTime.dwHighDateTime=0x1d2e621, ftLastAccessTime.dwLowDateTime=0xcf5ff460, ftLastAccessTime.dwHighDateTime=0x1d2e675, ftLastWriteTime.dwLowDateTime=0xcf5ff460, ftLastWriteTime.dwHighDateTime=0x1d2e675, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Fonts", cAlternateFileName="")) returned 1 [0114.586] FindNextFileW (in: hFindFile=0x381b80, lpFindFileData=0x31e47c | out: lpFindFileData=0x31e47c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x82c97e00, ftCreationTime.dwHighDateTime=0x1d0aa90, ftLastAccessTime.dwLowDateTime=0x5d4b0260, ftLastAccessTime.dwHighDateTime=0x1d2e676, ftLastWriteTime.dwLowDateTime=0x82c97e00, ftLastWriteTime.dwHighDateTime=0x1d0aa90, nFileSizeHigh=0x0, nFileSizeLow=0x44a8, dwReserved0=0x0, dwReserved1=0x0, cFileName="NaturalLanguage6.dll", cAlternateFileName="NATURA~1.DLL")) returned 1 [0114.586] FindNextFileW (in: hFindFile=0x381b80, lpFindFileData=0x31e47c | out: lpFindFileData=0x31e47c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x82c97e00, ftCreationTime.dwHighDateTime=0x1d0aa90, ftLastAccessTime.dwLowDateTime=0x5d7a9de0, ftLastAccessTime.dwHighDateTime=0x1d2e676, ftLastWriteTime.dwLowDateTime=0x82c97e00, ftLastWriteTime.dwHighDateTime=0x1d0aa90, nFileSizeHigh=0x0, nFileSizeLow=0x44a8, dwReserved0=0x0, dwReserved1=0x0, cFileName="NlsData0009.dll", cAlternateFileName="NLSDAT~1.DLL")) returned 1 [0114.586] FindNextFileW (in: hFindFile=0x381b80, lpFindFileData=0x31e47c | out: lpFindFileData=0x31e47c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x82c97e00, ftCreationTime.dwHighDateTime=0x1d0aa90, ftLastAccessTime.dwLowDateTime=0x5d7f60a0, ftLastAccessTime.dwHighDateTime=0x1d2e676, ftLastWriteTime.dwLowDateTime=0x82c97e00, ftLastWriteTime.dwHighDateTime=0x1d0aa90, nFileSizeHigh=0x0, nFileSizeLow=0x44a8, dwReserved0=0x0, dwReserved1=0x0, cFileName="NlsLexicons0009.dll", cAlternateFileName="NLSLEX~1.DLL")) returned 1 [0114.586] FindNextFileW (in: hFindFile=0x381b80, lpFindFileData=0x31e47c | out: lpFindFileData=0x31e47c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x82c97e00, ftCreationTime.dwHighDateTime=0x1d0aa90, ftLastAccessTime.dwLowDateTime=0x5daefc20, ftLastAccessTime.dwHighDateTime=0x1d2e676, ftLastWriteTime.dwLowDateTime=0x82c97e00, ftLastWriteTime.dwHighDateTime=0x1d0aa90, nFileSizeHigh=0x0, nFileSizeLow=0x16498, dwReserved0=0x0, dwReserved1=0x0, cFileName="PenIMC.dll", cAlternateFileName="")) returned 1 [0114.586] FindNextFileW (in: hFindFile=0x381b80, lpFindFileData=0x31e47c | out: lpFindFileData=0x31e47c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xef914800, ftCreationTime.dwHighDateTime=0x1d0aa91, ftLastAccessTime.dwLowDateTime=0x5dc20720, ftLastAccessTime.dwHighDateTime=0x1d2e676, ftLastWriteTime.dwLowDateTime=0xef914800, ftLastWriteTime.dwHighDateTime=0x1d0aa91, nFileSizeHigh=0x0, nFileSizeLow=0x92f78, dwReserved0=0x0, dwReserved1=0x0, cFileName="PresentationBuildTasks.dll", cAlternateFileName="PRC6D0~1.DLL")) returned 1 [0114.586] FindNextFileW (in: hFindFile=0x381b80, lpFindFileData=0x31e47c | out: lpFindFileData=0x31e47c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x82c97e00, ftCreationTime.dwHighDateTime=0x1d0aa90, ftLastAccessTime.dwLowDateTime=0x5df8c6c0, ftLastAccessTime.dwHighDateTime=0x1d2e676, ftLastWriteTime.dwLowDateTime=0x82c97e00, ftLastWriteTime.dwHighDateTime=0x1d0aa90, nFileSizeHigh=0x0, nFileSizeLow=0x34d4c0, dwReserved0=0x0, dwReserved1=0x0, cFileName="PresentationCore.dll", cAlternateFileName="PRESEN~1.DLL")) returned 1 [0114.586] FindNextFileW (in: hFindFile=0x381b80, lpFindFileData=0x31e47c | out: lpFindFileData=0x31e47c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xef914800, ftCreationTime.dwHighDateTime=0x1d0aa91, ftLastAccessTime.dwLowDateTime=0x5ef9db40, ftLastAccessTime.dwHighDateTime=0x1d2e676, ftLastWriteTime.dwLowDateTime=0xef914800, ftLastWriteTime.dwHighDateTime=0x1d0aa91, nFileSizeHigh=0x0, nFileSizeLow=0x6300, dwReserved0=0x0, dwReserved1=0x0, cFileName="PresentationFramework-SystemCore.dll", cAlternateFileName="PR9D54~1.DLL")) returned 1 [0114.586] FindNextFileW (in: hFindFile=0x381b80, lpFindFileData=0x31e47c | out: lpFindFileData=0x31e47c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xef914800, ftCreationTime.dwHighDateTime=0x1d0aa91, ftLastAccessTime.dwLowDateTime=0x5efe9e00, ftLastAccessTime.dwHighDateTime=0x1d2e676, ftLastWriteTime.dwLowDateTime=0xef914800, ftLastWriteTime.dwHighDateTime=0x1d0aa91, nFileSizeHigh=0x0, nFileSizeLow=0x5d00, dwReserved0=0x0, dwReserved1=0x0, cFileName="PresentationFramework-SystemData.dll", cAlternateFileName="PR017B~1.DLL")) returned 1 [0114.586] FindNextFileW (in: hFindFile=0x381b80, lpFindFileData=0x31e47c | out: lpFindFileData=0x31e47c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xef914800, ftCreationTime.dwHighDateTime=0x1d0aa91, ftLastAccessTime.dwLowDateTime=0x5f05c220, ftLastAccessTime.dwHighDateTime=0x1d2e676, ftLastWriteTime.dwLowDateTime=0xef914800, ftLastWriteTime.dwHighDateTime=0x1d0aa91, nFileSizeHigh=0x0, nFileSizeLow=0x5f10, dwReserved0=0x0, dwReserved1=0x0, cFileName="PresentationFramework-SystemDrawing.dll", cAlternateFileName="PR7DE9~1.DLL")) returned 1 [0114.586] FindNextFileW (in: hFindFile=0x381b80, lpFindFileData=0x31e47c | out: lpFindFileData=0x31e47c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xef914800, ftCreationTime.dwHighDateTime=0x1d0aa91, ftLastAccessTime.dwLowDateTime=0x5f0a84e0, ftLastAccessTime.dwHighDateTime=0x1d2e676, ftLastWriteTime.dwLowDateTime=0xef914800, ftLastWriteTime.dwHighDateTime=0x1d0aa91, nFileSizeHigh=0x0, nFileSizeLow=0x6100, dwReserved0=0x0, dwReserved1=0x0, cFileName="PresentationFramework-SystemXml.dll", cAlternateFileName="PR3E50~1.DLL")) returned 1 [0114.586] FindNextFileW (in: hFindFile=0x381b80, lpFindFileData=0x31e47c | out: lpFindFileData=0x31e47c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xef914800, ftCreationTime.dwHighDateTime=0x1d0aa91, ftLastAccessTime.dwLowDateTime=0x5f0f47a0, ftLastAccessTime.dwHighDateTime=0x1d2e676, ftLastWriteTime.dwLowDateTime=0xef914800, ftLastWriteTime.dwHighDateTime=0x1d0aa91, nFileSizeHigh=0x0, nFileSizeLow=0x5910, dwReserved0=0x0, dwReserved1=0x0, cFileName="PresentationFramework-SystemXmlLinq.dll", cAlternateFileName="PRDB31~1.DLL")) returned 1 [0114.586] FindNextFileW (in: hFindFile=0x381b80, lpFindFileData=0x31e47c | out: lpFindFileData=0x31e47c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xef914800, ftCreationTime.dwHighDateTime=0x1d0aa91, ftLastAccessTime.dwLowDateTime=0x5e722ce0, ftLastAccessTime.dwHighDateTime=0x1d2e676, ftLastWriteTime.dwLowDateTime=0xef914800, ftLastWriteTime.dwHighDateTime=0x1d0aa91, nFileSizeHigh=0x0, nFileSizeLow=0x3cd88, dwReserved0=0x0, dwReserved1=0x0, cFileName="PresentationFramework.Aero.dll", cAlternateFileName="PRESEN~2.DLL")) returned 1 [0114.586] FindNextFileW (in: hFindFile=0x381b80, lpFindFileData=0x31e47c | out: lpFindFileData=0x31e47c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xef914800, ftCreationTime.dwHighDateTime=0x1d0aa91, ftLastAccessTime.dwLowDateTime=0x5e795100, ftLastAccessTime.dwHighDateTime=0x1d2e676, ftLastWriteTime.dwLowDateTime=0xef914800, ftLastWriteTime.dwHighDateTime=0x1d0aa91, nFileSizeHigh=0x0, nFileSizeLow=0x2b998, dwReserved0=0x0, dwReserved1=0x0, cFileName="PresentationFramework.AeroLite.dll", cAlternateFileName="PR3D8D~1.DLL")) returned 1 [0114.586] FindNextFileW (in: hFindFile=0x381b80, lpFindFileData=0x31e47c | out: lpFindFileData=0x31e47c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xef914800, ftCreationTime.dwHighDateTime=0x1d0aa91, ftLastAccessTime.dwLowDateTime=0x5e807520, ftLastAccessTime.dwHighDateTime=0x1d2e676, ftLastWriteTime.dwLowDateTime=0xef914800, ftLastWriteTime.dwHighDateTime=0x1d0aa91, nFileSizeHigh=0x0, nFileSizeLow=0x2c798, dwReserved0=0x0, dwReserved1=0x0, cFileName="PresentationFramework.Classic.dll", cAlternateFileName="PRESEN~3.DLL")) returned 1 [0114.586] FindNextFileW (in: hFindFile=0x381b80, lpFindFileData=0x31e47c | out: lpFindFileData=0x31e47c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xef914800, ftCreationTime.dwHighDateTime=0x1d0aa91, ftLastAccessTime.dwLowDateTime=0x5ec0ba40, ftLastAccessTime.dwHighDateTime=0x1d2e676, ftLastWriteTime.dwLowDateTime=0xef914800, ftLastWriteTime.dwHighDateTime=0x1d0aa91, nFileSizeHigh=0x0, nFileSizeLow=0x5ce970, dwReserved0=0x0, dwReserved1=0x0, cFileName="PresentationFramework.dll", cAlternateFileName="PR81A8~1.DLL")) returned 1 [0114.586] FindNextFileW (in: hFindFile=0x381b80, lpFindFileData=0x31e47c | out: lpFindFileData=0x31e47c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xef914800, ftCreationTime.dwHighDateTime=0x1d0aa91, ftLastAccessTime.dwLowDateTime=0x5e8537e0, ftLastAccessTime.dwHighDateTime=0x1d2e676, ftLastWriteTime.dwLowDateTime=0xef914800, ftLastWriteTime.dwHighDateTime=0x1d0aa91, nFileSizeHigh=0x0, nFileSizeLow=0x76788, dwReserved0=0x0, dwReserved1=0x0, cFileName="PresentationFramework.Luna.dll", cAlternateFileName="PRESEN~4.DLL")) returned 1 [0114.587] FindNextFileW (in: hFindFile=0x381b80, lpFindFileData=0x31e47c | out: lpFindFileData=0x31e47c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xef914800, ftCreationTime.dwHighDateTime=0x1d0aa91, ftLastAccessTime.dwLowDateTime=0x5e89faa0, ftLastAccessTime.dwHighDateTime=0x1d2e676, ftLastWriteTime.dwLowDateTime=0xef914800, ftLastWriteTime.dwHighDateTime=0x1d0aa91, nFileSizeHigh=0x0, nFileSizeLow=0x33190, dwReserved0=0x0, dwReserved1=0x0, cFileName="PresentationFramework.Royale.dll", cAlternateFileName="PRBAF3~1.DLL")) returned 1 [0114.587] FindNextFileW (in: hFindFile=0x381b80, lpFindFileData=0x31e47c | out: lpFindFileData=0x31e47c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x82c97e00, ftCreationTime.dwHighDateTime=0x1d0aa90, ftLastAccessTime.dwLowDateTime=0x5f32fc40, ftLastAccessTime.dwHighDateTime=0x1d2e676, ftLastWriteTime.dwLowDateTime=0x82c97e00, ftLastWriteTime.dwHighDateTime=0x1d0aa90, nFileSizeHigh=0x0, nFileSizeLow=0x386d8, dwReserved0=0x0, dwReserved1=0x0, cFileName="PresentationHost_v0400.dll", cAlternateFileName="PRDE02~1.DLL")) returned 1 [0114.587] FindNextFileW (in: hFindFile=0x381b80, lpFindFileData=0x31e47c | out: lpFindFileData=0x31e47c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x82c97e00, ftCreationTime.dwHighDateTime=0x1d0aa90, ftLastAccessTime.dwLowDateTime=0x5f3ee320, ftLastAccessTime.dwHighDateTime=0x1d2e676, ftLastWriteTime.dwLowDateTime=0x82c97e00, ftLastWriteTime.dwHighDateTime=0x1d0aa90, nFileSizeHigh=0x0, nFileSizeLow=0x1054e0, dwReserved0=0x0, dwReserved1=0x0, cFileName="PresentationNative_v0400.dll", cAlternateFileName="PR8A07~1.DLL")) returned 1 [0114.587] FindNextFileW (in: hFindFile=0x381b80, lpFindFileData=0x31e47c | out: lpFindFileData=0x31e47c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xef914800, ftCreationTime.dwHighDateTime=0x1d0aa91, ftLastAccessTime.dwLowDateTime=0x5f43a5e0, ftLastAccessTime.dwHighDateTime=0x1d2e676, ftLastWriteTime.dwLowDateTime=0xef914800, ftLastWriteTime.dwHighDateTime=0x1d0aa91, nFileSizeHigh=0x0, nFileSizeLow=0xce4b8, dwReserved0=0x0, dwReserved1=0x0, cFileName="PresentationUI.dll", cAlternateFileName="PRC066~1.DLL")) returned 1 [0114.587] FindNextFileW (in: hFindFile=0x381b80, lpFindFileData=0x31e47c | out: lpFindFileData=0x31e47c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xef914800, ftCreationTime.dwHighDateTime=0x1d0aa91, ftLastAccessTime.dwLowDateTime=0x5f51ee20, ftLastAccessTime.dwHighDateTime=0x1d2e676, ftLastWriteTime.dwLowDateTime=0xef914800, ftLastWriteTime.dwHighDateTime=0x1d0aa91, nFileSizeHigh=0x0, nFileSizeLow=0x8f158, dwReserved0=0x0, dwReserved1=0x0, cFileName="ReachFramework.dll", cAlternateFileName="REACHF~1.DLL")) returned 1 [0114.587] FindNextFileW (in: hFindFile=0x381b80, lpFindFileData=0x31e47c | out: lpFindFileData=0x31e47c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x82c97e00, ftCreationTime.dwHighDateTime=0x1d0aa90, ftLastAccessTime.dwLowDateTime=0x62d0f320, ftLastAccessTime.dwHighDateTime=0x1d2e676, ftLastWriteTime.dwLowDateTime=0x82c97e00, ftLastWriteTime.dwHighDateTime=0x1d0aa90, nFileSizeHigh=0x0, nFileSizeLow=0x594c0, dwReserved0=0x0, dwReserved1=0x0, cFileName="System.Printing.dll", cAlternateFileName="SYSTEM~2.DLL")) returned 1 [0114.587] FindNextFileW (in: hFindFile=0x381b80, lpFindFileData=0x31e47c | out: lpFindFileData=0x31e47c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xef914800, ftCreationTime.dwHighDateTime=0x1d0aa91, ftLastAccessTime.dwLowDateTime=0x6183b2a0, ftLastAccessTime.dwHighDateTime=0x1d2e676, ftLastWriteTime.dwLowDateTime=0xef914800, ftLastWriteTime.dwHighDateTime=0x1d0aa91, nFileSizeHigh=0x0, nFileSizeLow=0xa6950, dwReserved0=0x0, dwReserved1=0x0, cFileName="System.Speech.dll", cAlternateFileName="SYSTEM~1.DLL")) returned 1 [0114.587] FindNextFileW (in: hFindFile=0x381b80, lpFindFileData=0x31e47c | out: lpFindFileData=0x31e47c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xef914800, ftCreationTime.dwHighDateTime=0x1d0aa91, ftLastAccessTime.dwLowDateTime=0x6ae7df60, ftLastAccessTime.dwHighDateTime=0x1d2e676, ftLastWriteTime.dwLowDateTime=0xef914800, ftLastWriteTime.dwHighDateTime=0x1d0aa91, nFileSizeHigh=0x0, nFileSizeLow=0xb5f98, dwReserved0=0x0, dwReserved1=0x0, cFileName="System.Windows.Controls.Ribbon.dll", cAlternateFileName="SY9516~1.DLL")) returned 1 [0114.587] FindNextFileW (in: hFindFile=0x381b80, lpFindFileData=0x31e47c | out: lpFindFileData=0x31e47c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xef914800, ftCreationTime.dwHighDateTime=0x1d0aa91, ftLastAccessTime.dwLowDateTime=0x6b1c3da0, ftLastAccessTime.dwHighDateTime=0x1d2e676, ftLastWriteTime.dwLowDateTime=0xef914800, ftLastWriteTime.dwHighDateTime=0x1d0aa91, nFileSizeHigh=0x0, nFileSizeLow=0x109a8, dwReserved0=0x0, dwReserved1=0x0, cFileName="System.Windows.Input.Manipulations.dll", cAlternateFileName="SYSTEM~3.DLL")) returned 1 [0114.587] FindNextFileW (in: hFindFile=0x381b80, lpFindFileData=0x31e47c | out: lpFindFileData=0x31e47c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xef914800, ftCreationTime.dwHighDateTime=0x1d0aa91, ftLastAccessTime.dwLowDateTime=0x6b210060, ftLastAccessTime.dwHighDateTime=0x1d2e676, ftLastWriteTime.dwLowDateTime=0xef914800, ftLastWriteTime.dwHighDateTime=0x1d0aa91, nFileSizeHigh=0x0, nFileSizeLow=0x7190, dwReserved0=0x0, dwReserved1=0x0, cFileName="System.Windows.Presentation.dll", cAlternateFileName="SYSTEM~4.DLL")) returned 1 [0114.587] FindNextFileW (in: hFindFile=0x381b80, lpFindFileData=0x31e47c | out: lpFindFileData=0x31e47c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xef914800, ftCreationTime.dwHighDateTime=0x1d0aa91, ftLastAccessTime.dwLowDateTime=0x6b44b500, ftLastAccessTime.dwHighDateTime=0x1d2e676, ftLastWriteTime.dwLowDateTime=0xef914800, ftLastWriteTime.dwHighDateTime=0x1d0aa91, nFileSizeHigh=0x0, nFileSizeLow=0x2b768, dwReserved0=0x0, dwReserved1=0x0, cFileName="UIAutomationClient.dll", cAlternateFileName="UIAUTO~1.DLL")) returned 1 [0114.587] FindNextFileW (in: hFindFile=0x381b80, lpFindFileData=0x31e47c | out: lpFindFileData=0x31e47c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xef914800, ftCreationTime.dwHighDateTime=0x1d0aa91, ftLastAccessTime.dwLowDateTime=0x6b4bd920, ftLastAccessTime.dwHighDateTime=0x1d2e676, ftLastWriteTime.dwLowDateTime=0xef914800, ftLastWriteTime.dwHighDateTime=0x1d0aa91, nFileSizeHigh=0x0, nFileSizeLow=0x581a0, dwReserved0=0x0, dwReserved1=0x0, cFileName="UIAutomationClientsideProviders.dll", cAlternateFileName="UIAUTO~2.DLL")) returned 1 [0114.587] FindNextFileW (in: hFindFile=0x381b80, lpFindFileData=0x31e47c | out: lpFindFileData=0x31e47c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xef914800, ftCreationTime.dwHighDateTime=0x1d0aa91, ftLastAccessTime.dwLowDateTime=0x6b509be0, ftLastAccessTime.dwHighDateTime=0x1d2e676, ftLastWriteTime.dwLowDateTime=0xef914800, ftLastWriteTime.dwHighDateTime=0x1d0aa91, nFileSizeHigh=0x0, nFileSizeLow=0xc170, dwReserved0=0x0, dwReserved1=0x0, cFileName="UIAutomationProvider.dll", cAlternateFileName="UIAUTO~3.DLL")) returned 1 [0114.587] FindNextFileW (in: hFindFile=0x381b80, lpFindFileData=0x31e47c | out: lpFindFileData=0x31e47c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xef914800, ftCreationTime.dwHighDateTime=0x1d0aa91, ftLastAccessTime.dwLowDateTime=0x6b52fd40, ftLastAccessTime.dwHighDateTime=0x1d2e676, ftLastWriteTime.dwLowDateTime=0xef914800, ftLastWriteTime.dwHighDateTime=0x1d0aa91, nFileSizeHigh=0x0, nFileSizeLow=0x19d60, dwReserved0=0x0, dwReserved1=0x0, cFileName="UIAutomationTypes.dll", cAlternateFileName="UIAUTO~4.DLL")) returned 1 [0114.587] FindNextFileW (in: hFindFile=0x381b80, lpFindFileData=0x31e47c | out: lpFindFileData=0x31e47c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xef914800, ftCreationTime.dwHighDateTime=0x1d0aa91, ftLastAccessTime.dwLowDateTime=0x6b6f8dc0, ftLastAccessTime.dwHighDateTime=0x1d2e676, ftLastWriteTime.dwLowDateTime=0xef914800, ftLastWriteTime.dwHighDateTime=0x1d0aa91, nFileSizeHigh=0x0, nFileSizeLow=0x130548, dwReserved0=0x0, dwReserved1=0x0, cFileName="WindowsBase.dll", cAlternateFileName="WINDOW~1.DLL")) returned 1 [0114.587] FindNextFileW (in: hFindFile=0x381b80, lpFindFileData=0x31e47c | out: lpFindFileData=0x31e47c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xef914800, ftCreationTime.dwHighDateTime=0x1d0aa91, ftLastAccessTime.dwLowDateTime=0x6b791340, ftLastAccessTime.dwHighDateTime=0x1d2e676, ftLastWriteTime.dwLowDateTime=0xef914800, ftLastWriteTime.dwHighDateTime=0x1d0aa91, nFileSizeHigh=0x0, nFileSizeLow=0x19580, dwReserved0=0x0, dwReserved1=0x0, cFileName="WindowsFormsIntegration.dll", cAlternateFileName="WINDOW~2.DLL")) returned 1 [0114.588] FindNextFileW (in: hFindFile=0x381b80, lpFindFileData=0x31e47c | out: lpFindFileData=0x31e47c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x82c97e00, ftCreationTime.dwHighDateTime=0x1d0aa90, ftLastAccessTime.dwLowDateTime=0x6b90e100, ftLastAccessTime.dwHighDateTime=0x1d2e676, ftLastWriteTime.dwLowDateTime=0x82c97e00, ftLastWriteTime.dwHighDateTime=0x1d0aa90, nFileSizeHigh=0x0, nFileSizeLow=0x20c6b0, dwReserved0=0x0, dwReserved1=0x0, cFileName="wpfgfx_v0400.dll", cAlternateFileName="WPFGFX~1.DLL")) returned 1 [0114.588] FindNextFileW (in: hFindFile=0x381b80, lpFindFileData=0x31e47c | out: lpFindFileData=0x31e47c*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0114.588] FindClose (in: hFindFile=0x381b80 | out: hFindFile=0x381b80) returned 1 [0114.588] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e704) returned 1 [0114.588] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e710) returned 1 [0114.588] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e744) returned 1 [0114.588] GetFullPathNameW (in: lpFileName="C:\\Windows\\Microsoft.NET\\Framework64\\v4.0.30319\\WPF", nBufferLength=0x105, lpBuffer=0x31e24c, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\Microsoft.NET\\Framework64\\v4.0.30319\\WPF", lpFilePart=0x0) returned 0x33 [0114.588] GetFullPathNameW (in: lpFileName="C:\\Windows\\Microsoft.NET\\Framework64\\v4.0.30319\\WPF\\", nBufferLength=0x105, lpBuffer=0x31e220, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\Microsoft.NET\\Framework64\\v4.0.30319\\WPF\\", lpFilePart=0x0) returned 0x34 [0114.589] FindFirstFileW (in: lpFileName="C:\\Windows\\Microsoft.NET\\Framework64\\v4.0.30319\\WPF\\*", lpFindFileData=0x31e46c | out: lpFindFileData=0x31e46c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8abdb760, ftCreationTime.dwHighDateTime=0x1d2e621, ftLastAccessTime.dwLowDateTime=0x6b8e7fa0, ftLastAccessTime.dwHighDateTime=0x1d2e676, ftLastWriteTime.dwLowDateTime=0x6b8e7fa0, ftLastWriteTime.dwHighDateTime=0x1d2e676, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x381b80 [0114.589] FindNextFileW (in: hFindFile=0x381b80, lpFindFileData=0x31e47c | out: lpFindFileData=0x31e47c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8abdb760, ftCreationTime.dwHighDateTime=0x1d2e621, ftLastAccessTime.dwLowDateTime=0x6b8e7fa0, ftLastAccessTime.dwHighDateTime=0x1d2e676, ftLastWriteTime.dwLowDateTime=0x6b8e7fa0, ftLastWriteTime.dwHighDateTime=0x1d2e676, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0114.589] FindNextFileW (in: hFindFile=0x381b80, lpFindFileData=0x31e47c | out: lpFindFileData=0x31e47c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5f355da0, ftCreationTime.dwHighDateTime=0x1d2e676, ftLastAccessTime.dwLowDateTime=0x5f355da0, ftLastAccessTime.dwHighDateTime=0x1d2e676, ftLastWriteTime.dwLowDateTime=0x5f355da0, ftLastWriteTime.dwHighDateTime=0x1d2e676, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="en-US", cAlternateFileName="")) returned 1 [0114.589] FindNextFileW (in: hFindFile=0x381b80, lpFindFileData=0x31e47c | out: lpFindFileData=0x31e47c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8abdb760, ftCreationTime.dwHighDateTime=0x1d2e621, ftLastAccessTime.dwLowDateTime=0xcf5ff460, ftLastAccessTime.dwHighDateTime=0x1d2e675, ftLastWriteTime.dwLowDateTime=0xcf5ff460, ftLastWriteTime.dwHighDateTime=0x1d2e675, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Fonts", cAlternateFileName="")) returned 1 [0114.590] FindNextFileW (in: hFindFile=0x381b80, lpFindFileData=0x31e47c | out: lpFindFileData=0x31e47c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x82c97e00, ftCreationTime.dwHighDateTime=0x1d0aa90, ftLastAccessTime.dwLowDateTime=0x5d4b0260, ftLastAccessTime.dwHighDateTime=0x1d2e676, ftLastWriteTime.dwLowDateTime=0x82c97e00, ftLastWriteTime.dwHighDateTime=0x1d0aa90, nFileSizeHigh=0x0, nFileSizeLow=0x44a8, dwReserved0=0x0, dwReserved1=0x0, cFileName="NaturalLanguage6.dll", cAlternateFileName="NATURA~1.DLL")) returned 1 [0114.590] FindNextFileW (in: hFindFile=0x381b80, lpFindFileData=0x31e47c | out: lpFindFileData=0x31e47c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x82c97e00, ftCreationTime.dwHighDateTime=0x1d0aa90, ftLastAccessTime.dwLowDateTime=0x5d7a9de0, ftLastAccessTime.dwHighDateTime=0x1d2e676, ftLastWriteTime.dwLowDateTime=0x82c97e00, ftLastWriteTime.dwHighDateTime=0x1d0aa90, nFileSizeHigh=0x0, nFileSizeLow=0x44a8, dwReserved0=0x0, dwReserved1=0x0, cFileName="NlsData0009.dll", cAlternateFileName="NLSDAT~1.DLL")) returned 1 [0114.590] FindNextFileW (in: hFindFile=0x381b80, lpFindFileData=0x31e47c | out: lpFindFileData=0x31e47c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x82c97e00, ftCreationTime.dwHighDateTime=0x1d0aa90, ftLastAccessTime.dwLowDateTime=0x5d7f60a0, ftLastAccessTime.dwHighDateTime=0x1d2e676, ftLastWriteTime.dwLowDateTime=0x82c97e00, ftLastWriteTime.dwHighDateTime=0x1d0aa90, nFileSizeHigh=0x0, nFileSizeLow=0x44a8, dwReserved0=0x0, dwReserved1=0x0, cFileName="NlsLexicons0009.dll", cAlternateFileName="NLSLEX~1.DLL")) returned 1 [0114.590] FindNextFileW (in: hFindFile=0x381b80, lpFindFileData=0x31e47c | out: lpFindFileData=0x31e47c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x82c97e00, ftCreationTime.dwHighDateTime=0x1d0aa90, ftLastAccessTime.dwLowDateTime=0x5daefc20, ftLastAccessTime.dwHighDateTime=0x1d2e676, ftLastWriteTime.dwLowDateTime=0x82c97e00, ftLastWriteTime.dwHighDateTime=0x1d0aa90, nFileSizeHigh=0x0, nFileSizeLow=0x16498, dwReserved0=0x0, dwReserved1=0x0, cFileName="PenIMC.dll", cAlternateFileName="")) returned 1 [0114.590] FindNextFileW (in: hFindFile=0x381b80, lpFindFileData=0x31e47c | out: lpFindFileData=0x31e47c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xef914800, ftCreationTime.dwHighDateTime=0x1d0aa91, ftLastAccessTime.dwLowDateTime=0x5dc20720, ftLastAccessTime.dwHighDateTime=0x1d2e676, ftLastWriteTime.dwLowDateTime=0xef914800, ftLastWriteTime.dwHighDateTime=0x1d0aa91, nFileSizeHigh=0x0, nFileSizeLow=0x92f78, dwReserved0=0x0, dwReserved1=0x0, cFileName="PresentationBuildTasks.dll", cAlternateFileName="PRC6D0~1.DLL")) returned 1 [0114.590] FindNextFileW (in: hFindFile=0x381b80, lpFindFileData=0x31e47c | out: lpFindFileData=0x31e47c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x82c97e00, ftCreationTime.dwHighDateTime=0x1d0aa90, ftLastAccessTime.dwLowDateTime=0x5df8c6c0, ftLastAccessTime.dwHighDateTime=0x1d2e676, ftLastWriteTime.dwLowDateTime=0x82c97e00, ftLastWriteTime.dwHighDateTime=0x1d0aa90, nFileSizeHigh=0x0, nFileSizeLow=0x34d4c0, dwReserved0=0x0, dwReserved1=0x0, cFileName="PresentationCore.dll", cAlternateFileName="PRESEN~1.DLL")) returned 1 [0114.590] FindNextFileW (in: hFindFile=0x381b80, lpFindFileData=0x31e47c | out: lpFindFileData=0x31e47c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xef914800, ftCreationTime.dwHighDateTime=0x1d0aa91, ftLastAccessTime.dwLowDateTime=0x5ef9db40, ftLastAccessTime.dwHighDateTime=0x1d2e676, ftLastWriteTime.dwLowDateTime=0xef914800, ftLastWriteTime.dwHighDateTime=0x1d0aa91, nFileSizeHigh=0x0, nFileSizeLow=0x6300, dwReserved0=0x0, dwReserved1=0x0, cFileName="PresentationFramework-SystemCore.dll", cAlternateFileName="PR9D54~1.DLL")) returned 1 [0114.590] FindNextFileW (in: hFindFile=0x381b80, lpFindFileData=0x31e47c | out: lpFindFileData=0x31e47c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xef914800, ftCreationTime.dwHighDateTime=0x1d0aa91, ftLastAccessTime.dwLowDateTime=0x5efe9e00, ftLastAccessTime.dwHighDateTime=0x1d2e676, ftLastWriteTime.dwLowDateTime=0xef914800, ftLastWriteTime.dwHighDateTime=0x1d0aa91, nFileSizeHigh=0x0, nFileSizeLow=0x5d00, dwReserved0=0x0, dwReserved1=0x0, cFileName="PresentationFramework-SystemData.dll", cAlternateFileName="PR017B~1.DLL")) returned 1 [0114.590] FindNextFileW (in: hFindFile=0x381b80, lpFindFileData=0x31e47c | out: lpFindFileData=0x31e47c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xef914800, ftCreationTime.dwHighDateTime=0x1d0aa91, ftLastAccessTime.dwLowDateTime=0x5f05c220, ftLastAccessTime.dwHighDateTime=0x1d2e676, ftLastWriteTime.dwLowDateTime=0xef914800, ftLastWriteTime.dwHighDateTime=0x1d0aa91, nFileSizeHigh=0x0, nFileSizeLow=0x5f10, dwReserved0=0x0, dwReserved1=0x0, cFileName="PresentationFramework-SystemDrawing.dll", cAlternateFileName="PR7DE9~1.DLL")) returned 1 [0114.590] FindNextFileW (in: hFindFile=0x381b80, lpFindFileData=0x31e47c | out: lpFindFileData=0x31e47c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xef914800, ftCreationTime.dwHighDateTime=0x1d0aa91, ftLastAccessTime.dwLowDateTime=0x5f0a84e0, ftLastAccessTime.dwHighDateTime=0x1d2e676, ftLastWriteTime.dwLowDateTime=0xef914800, ftLastWriteTime.dwHighDateTime=0x1d0aa91, nFileSizeHigh=0x0, nFileSizeLow=0x6100, dwReserved0=0x0, dwReserved1=0x0, cFileName="PresentationFramework-SystemXml.dll", cAlternateFileName="PR3E50~1.DLL")) returned 1 [0114.590] FindNextFileW (in: hFindFile=0x381b80, lpFindFileData=0x31e47c | out: lpFindFileData=0x31e47c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xef914800, ftCreationTime.dwHighDateTime=0x1d0aa91, ftLastAccessTime.dwLowDateTime=0x5f0f47a0, ftLastAccessTime.dwHighDateTime=0x1d2e676, ftLastWriteTime.dwLowDateTime=0xef914800, ftLastWriteTime.dwHighDateTime=0x1d0aa91, nFileSizeHigh=0x0, nFileSizeLow=0x5910, dwReserved0=0x0, dwReserved1=0x0, cFileName="PresentationFramework-SystemXmlLinq.dll", cAlternateFileName="PRDB31~1.DLL")) returned 1 [0114.590] FindNextFileW (in: hFindFile=0x381b80, lpFindFileData=0x31e47c | out: lpFindFileData=0x31e47c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xef914800, ftCreationTime.dwHighDateTime=0x1d0aa91, ftLastAccessTime.dwLowDateTime=0x5e722ce0, ftLastAccessTime.dwHighDateTime=0x1d2e676, ftLastWriteTime.dwLowDateTime=0xef914800, ftLastWriteTime.dwHighDateTime=0x1d0aa91, nFileSizeHigh=0x0, nFileSizeLow=0x3cd88, dwReserved0=0x0, dwReserved1=0x0, cFileName="PresentationFramework.Aero.dll", cAlternateFileName="PRESEN~2.DLL")) returned 1 [0114.590] FindNextFileW (in: hFindFile=0x381b80, lpFindFileData=0x31e47c | out: lpFindFileData=0x31e47c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xef914800, ftCreationTime.dwHighDateTime=0x1d0aa91, ftLastAccessTime.dwLowDateTime=0x5e795100, ftLastAccessTime.dwHighDateTime=0x1d2e676, ftLastWriteTime.dwLowDateTime=0xef914800, ftLastWriteTime.dwHighDateTime=0x1d0aa91, nFileSizeHigh=0x0, nFileSizeLow=0x2b998, dwReserved0=0x0, dwReserved1=0x0, cFileName="PresentationFramework.AeroLite.dll", cAlternateFileName="PR3D8D~1.DLL")) returned 1 [0114.590] FindNextFileW (in: hFindFile=0x381b80, lpFindFileData=0x31e47c | out: lpFindFileData=0x31e47c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xef914800, ftCreationTime.dwHighDateTime=0x1d0aa91, ftLastAccessTime.dwLowDateTime=0x5e807520, ftLastAccessTime.dwHighDateTime=0x1d2e676, ftLastWriteTime.dwLowDateTime=0xef914800, ftLastWriteTime.dwHighDateTime=0x1d0aa91, nFileSizeHigh=0x0, nFileSizeLow=0x2c798, dwReserved0=0x0, dwReserved1=0x0, cFileName="PresentationFramework.Classic.dll", cAlternateFileName="PRESEN~3.DLL")) returned 1 [0114.590] FindNextFileW (in: hFindFile=0x381b80, lpFindFileData=0x31e47c | out: lpFindFileData=0x31e47c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xef914800, ftCreationTime.dwHighDateTime=0x1d0aa91, ftLastAccessTime.dwLowDateTime=0x5ec0ba40, ftLastAccessTime.dwHighDateTime=0x1d2e676, ftLastWriteTime.dwLowDateTime=0xef914800, ftLastWriteTime.dwHighDateTime=0x1d0aa91, nFileSizeHigh=0x0, nFileSizeLow=0x5ce970, dwReserved0=0x0, dwReserved1=0x0, cFileName="PresentationFramework.dll", cAlternateFileName="PR81A8~1.DLL")) returned 1 [0114.590] FindNextFileW (in: hFindFile=0x381b80, lpFindFileData=0x31e47c | out: lpFindFileData=0x31e47c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xef914800, ftCreationTime.dwHighDateTime=0x1d0aa91, ftLastAccessTime.dwLowDateTime=0x5e8537e0, ftLastAccessTime.dwHighDateTime=0x1d2e676, ftLastWriteTime.dwLowDateTime=0xef914800, ftLastWriteTime.dwHighDateTime=0x1d0aa91, nFileSizeHigh=0x0, nFileSizeLow=0x76788, dwReserved0=0x0, dwReserved1=0x0, cFileName="PresentationFramework.Luna.dll", cAlternateFileName="PRESEN~4.DLL")) returned 1 [0114.590] FindNextFileW (in: hFindFile=0x381b80, lpFindFileData=0x31e47c | out: lpFindFileData=0x31e47c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xef914800, ftCreationTime.dwHighDateTime=0x1d0aa91, ftLastAccessTime.dwLowDateTime=0x5e89faa0, ftLastAccessTime.dwHighDateTime=0x1d2e676, ftLastWriteTime.dwLowDateTime=0xef914800, ftLastWriteTime.dwHighDateTime=0x1d0aa91, nFileSizeHigh=0x0, nFileSizeLow=0x33190, dwReserved0=0x0, dwReserved1=0x0, cFileName="PresentationFramework.Royale.dll", cAlternateFileName="PRBAF3~1.DLL")) returned 1 [0114.591] FindNextFileW (in: hFindFile=0x381b80, lpFindFileData=0x31e47c | out: lpFindFileData=0x31e47c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x82c97e00, ftCreationTime.dwHighDateTime=0x1d0aa90, ftLastAccessTime.dwLowDateTime=0x5f32fc40, ftLastAccessTime.dwHighDateTime=0x1d2e676, ftLastWriteTime.dwLowDateTime=0x82c97e00, ftLastWriteTime.dwHighDateTime=0x1d0aa90, nFileSizeHigh=0x0, nFileSizeLow=0x386d8, dwReserved0=0x0, dwReserved1=0x0, cFileName="PresentationHost_v0400.dll", cAlternateFileName="PRDE02~1.DLL")) returned 1 [0114.591] FindNextFileW (in: hFindFile=0x381b80, lpFindFileData=0x31e47c | out: lpFindFileData=0x31e47c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x82c97e00, ftCreationTime.dwHighDateTime=0x1d0aa90, ftLastAccessTime.dwLowDateTime=0x5f3ee320, ftLastAccessTime.dwHighDateTime=0x1d2e676, ftLastWriteTime.dwLowDateTime=0x82c97e00, ftLastWriteTime.dwHighDateTime=0x1d0aa90, nFileSizeHigh=0x0, nFileSizeLow=0x1054e0, dwReserved0=0x0, dwReserved1=0x0, cFileName="PresentationNative_v0400.dll", cAlternateFileName="PR8A07~1.DLL")) returned 1 [0114.591] FindNextFileW (in: hFindFile=0x381b80, lpFindFileData=0x31e47c | out: lpFindFileData=0x31e47c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xef914800, ftCreationTime.dwHighDateTime=0x1d0aa91, ftLastAccessTime.dwLowDateTime=0x5f43a5e0, ftLastAccessTime.dwHighDateTime=0x1d2e676, ftLastWriteTime.dwLowDateTime=0xef914800, ftLastWriteTime.dwHighDateTime=0x1d0aa91, nFileSizeHigh=0x0, nFileSizeLow=0xce4b8, dwReserved0=0x0, dwReserved1=0x0, cFileName="PresentationUI.dll", cAlternateFileName="PRC066~1.DLL")) returned 1 [0114.591] FindNextFileW (in: hFindFile=0x381b80, lpFindFileData=0x31e47c | out: lpFindFileData=0x31e47c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xef914800, ftCreationTime.dwHighDateTime=0x1d0aa91, ftLastAccessTime.dwLowDateTime=0x5f51ee20, ftLastAccessTime.dwHighDateTime=0x1d2e676, ftLastWriteTime.dwLowDateTime=0xef914800, ftLastWriteTime.dwHighDateTime=0x1d0aa91, nFileSizeHigh=0x0, nFileSizeLow=0x8f158, dwReserved0=0x0, dwReserved1=0x0, cFileName="ReachFramework.dll", cAlternateFileName="REACHF~1.DLL")) returned 1 [0114.591] FindNextFileW (in: hFindFile=0x381b80, lpFindFileData=0x31e47c | out: lpFindFileData=0x31e47c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x82c97e00, ftCreationTime.dwHighDateTime=0x1d0aa90, ftLastAccessTime.dwLowDateTime=0x62d0f320, ftLastAccessTime.dwHighDateTime=0x1d2e676, ftLastWriteTime.dwLowDateTime=0x82c97e00, ftLastWriteTime.dwHighDateTime=0x1d0aa90, nFileSizeHigh=0x0, nFileSizeLow=0x594c0, dwReserved0=0x0, dwReserved1=0x0, cFileName="System.Printing.dll", cAlternateFileName="SYSTEM~2.DLL")) returned 1 [0114.591] FindNextFileW (in: hFindFile=0x381b80, lpFindFileData=0x31e47c | out: lpFindFileData=0x31e47c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xef914800, ftCreationTime.dwHighDateTime=0x1d0aa91, ftLastAccessTime.dwLowDateTime=0x6183b2a0, ftLastAccessTime.dwHighDateTime=0x1d2e676, ftLastWriteTime.dwLowDateTime=0xef914800, ftLastWriteTime.dwHighDateTime=0x1d0aa91, nFileSizeHigh=0x0, nFileSizeLow=0xa6950, dwReserved0=0x0, dwReserved1=0x0, cFileName="System.Speech.dll", cAlternateFileName="SYSTEM~1.DLL")) returned 1 [0114.591] FindNextFileW (in: hFindFile=0x381b80, lpFindFileData=0x31e47c | out: lpFindFileData=0x31e47c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xef914800, ftCreationTime.dwHighDateTime=0x1d0aa91, ftLastAccessTime.dwLowDateTime=0x6ae7df60, ftLastAccessTime.dwHighDateTime=0x1d2e676, ftLastWriteTime.dwLowDateTime=0xef914800, ftLastWriteTime.dwHighDateTime=0x1d0aa91, nFileSizeHigh=0x0, nFileSizeLow=0xb5f98, dwReserved0=0x0, dwReserved1=0x0, cFileName="System.Windows.Controls.Ribbon.dll", cAlternateFileName="SY9516~1.DLL")) returned 1 [0114.591] FindNextFileW (in: hFindFile=0x381b80, lpFindFileData=0x31e47c | out: lpFindFileData=0x31e47c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xef914800, ftCreationTime.dwHighDateTime=0x1d0aa91, ftLastAccessTime.dwLowDateTime=0x6b1c3da0, ftLastAccessTime.dwHighDateTime=0x1d2e676, ftLastWriteTime.dwLowDateTime=0xef914800, ftLastWriteTime.dwHighDateTime=0x1d0aa91, nFileSizeHigh=0x0, nFileSizeLow=0x109a8, dwReserved0=0x0, dwReserved1=0x0, cFileName="System.Windows.Input.Manipulations.dll", cAlternateFileName="SYSTEM~3.DLL")) returned 1 [0114.591] FindNextFileW (in: hFindFile=0x381b80, lpFindFileData=0x31e47c | out: lpFindFileData=0x31e47c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xef914800, ftCreationTime.dwHighDateTime=0x1d0aa91, ftLastAccessTime.dwLowDateTime=0x6b210060, ftLastAccessTime.dwHighDateTime=0x1d2e676, ftLastWriteTime.dwLowDateTime=0xef914800, ftLastWriteTime.dwHighDateTime=0x1d0aa91, nFileSizeHigh=0x0, nFileSizeLow=0x7190, dwReserved0=0x0, dwReserved1=0x0, cFileName="System.Windows.Presentation.dll", cAlternateFileName="SYSTEM~4.DLL")) returned 1 [0114.591] FindNextFileW (in: hFindFile=0x381b80, lpFindFileData=0x31e47c | out: lpFindFileData=0x31e47c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xef914800, ftCreationTime.dwHighDateTime=0x1d0aa91, ftLastAccessTime.dwLowDateTime=0x6b44b500, ftLastAccessTime.dwHighDateTime=0x1d2e676, ftLastWriteTime.dwLowDateTime=0xef914800, ftLastWriteTime.dwHighDateTime=0x1d0aa91, nFileSizeHigh=0x0, nFileSizeLow=0x2b768, dwReserved0=0x0, dwReserved1=0x0, cFileName="UIAutomationClient.dll", cAlternateFileName="UIAUTO~1.DLL")) returned 1 [0114.591] FindNextFileW (in: hFindFile=0x381b80, lpFindFileData=0x31e47c | out: lpFindFileData=0x31e47c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xef914800, ftCreationTime.dwHighDateTime=0x1d0aa91, ftLastAccessTime.dwLowDateTime=0x6b4bd920, ftLastAccessTime.dwHighDateTime=0x1d2e676, ftLastWriteTime.dwLowDateTime=0xef914800, ftLastWriteTime.dwHighDateTime=0x1d0aa91, nFileSizeHigh=0x0, nFileSizeLow=0x581a0, dwReserved0=0x0, dwReserved1=0x0, cFileName="UIAutomationClientsideProviders.dll", cAlternateFileName="UIAUTO~2.DLL")) returned 1 [0114.591] FindNextFileW (in: hFindFile=0x381b80, lpFindFileData=0x31e47c | out: lpFindFileData=0x31e47c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xef914800, ftCreationTime.dwHighDateTime=0x1d0aa91, ftLastAccessTime.dwLowDateTime=0x6b509be0, ftLastAccessTime.dwHighDateTime=0x1d2e676, ftLastWriteTime.dwLowDateTime=0xef914800, ftLastWriteTime.dwHighDateTime=0x1d0aa91, nFileSizeHigh=0x0, nFileSizeLow=0xc170, dwReserved0=0x0, dwReserved1=0x0, cFileName="UIAutomationProvider.dll", cAlternateFileName="UIAUTO~3.DLL")) returned 1 [0114.591] FindNextFileW (in: hFindFile=0x381b80, lpFindFileData=0x31e47c | out: lpFindFileData=0x31e47c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xef914800, ftCreationTime.dwHighDateTime=0x1d0aa91, ftLastAccessTime.dwLowDateTime=0x6b52fd40, ftLastAccessTime.dwHighDateTime=0x1d2e676, ftLastWriteTime.dwLowDateTime=0xef914800, ftLastWriteTime.dwHighDateTime=0x1d0aa91, nFileSizeHigh=0x0, nFileSizeLow=0x19d60, dwReserved0=0x0, dwReserved1=0x0, cFileName="UIAutomationTypes.dll", cAlternateFileName="UIAUTO~4.DLL")) returned 1 [0114.591] FindNextFileW (in: hFindFile=0x381b80, lpFindFileData=0x31e47c | out: lpFindFileData=0x31e47c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xef914800, ftCreationTime.dwHighDateTime=0x1d0aa91, ftLastAccessTime.dwLowDateTime=0x6b6f8dc0, ftLastAccessTime.dwHighDateTime=0x1d2e676, ftLastWriteTime.dwLowDateTime=0xef914800, ftLastWriteTime.dwHighDateTime=0x1d0aa91, nFileSizeHigh=0x0, nFileSizeLow=0x130548, dwReserved0=0x0, dwReserved1=0x0, cFileName="WindowsBase.dll", cAlternateFileName="WINDOW~1.DLL")) returned 1 [0114.591] FindNextFileW (in: hFindFile=0x381b80, lpFindFileData=0x31e47c | out: lpFindFileData=0x31e47c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xef914800, ftCreationTime.dwHighDateTime=0x1d0aa91, ftLastAccessTime.dwLowDateTime=0x6b791340, ftLastAccessTime.dwHighDateTime=0x1d2e676, ftLastWriteTime.dwLowDateTime=0xef914800, ftLastWriteTime.dwHighDateTime=0x1d0aa91, nFileSizeHigh=0x0, nFileSizeLow=0x19580, dwReserved0=0x0, dwReserved1=0x0, cFileName="WindowsFormsIntegration.dll", cAlternateFileName="WINDOW~2.DLL")) returned 1 [0114.591] FindNextFileW (in: hFindFile=0x381b80, lpFindFileData=0x31e47c | out: lpFindFileData=0x31e47c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x82c97e00, ftCreationTime.dwHighDateTime=0x1d0aa90, ftLastAccessTime.dwLowDateTime=0x6b90e100, ftLastAccessTime.dwHighDateTime=0x1d2e676, ftLastWriteTime.dwLowDateTime=0x82c97e00, ftLastWriteTime.dwHighDateTime=0x1d0aa90, nFileSizeHigh=0x0, nFileSizeLow=0x20c6b0, dwReserved0=0x0, dwReserved1=0x0, cFileName="wpfgfx_v0400.dll", cAlternateFileName="WPFGFX~1.DLL")) returned 1 [0114.591] FindNextFileW (in: hFindFile=0x381b80, lpFindFileData=0x31e47c | out: lpFindFileData=0x31e47c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x82c97e00, ftCreationTime.dwHighDateTime=0x1d0aa90, ftLastAccessTime.dwLowDateTime=0x6b90e100, ftLastAccessTime.dwHighDateTime=0x1d2e676, ftLastWriteTime.dwLowDateTime=0x82c97e00, ftLastWriteTime.dwHighDateTime=0x1d0aa90, nFileSizeHigh=0x0, nFileSizeLow=0x20c6b0, dwReserved0=0x0, dwReserved1=0x0, cFileName="wpfgfx_v0400.dll", cAlternateFileName="WPFGFX~1.DLL")) returned 0 [0114.592] FindClose (in: hFindFile=0x381b80 | out: hFindFile=0x381b80) returned 1 [0114.592] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e704) returned 1 [0114.592] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e710) returned 1 [0114.592] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e6cc) returned 1 [0114.592] GetFullPathNameW (in: lpFileName="C:\\Windows\\Microsoft.NET\\Framework64\\v4.0.30319\\WPF\\en-US", nBufferLength=0x105, lpBuffer=0x31e1d4, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\Microsoft.NET\\Framework64\\v4.0.30319\\WPF\\en-US", lpFilePart=0x0) returned 0x39 [0114.592] GetFullPathNameW (in: lpFileName="C:\\Windows\\Microsoft.NET\\Framework64\\v4.0.30319\\WPF\\en-US\\", nBufferLength=0x105, lpBuffer=0x31e1a8, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\Microsoft.NET\\Framework64\\v4.0.30319\\WPF\\en-US\\", lpFilePart=0x0) returned 0x3a [0114.592] FindFirstFileW (in: lpFileName="C:\\Windows\\Microsoft.NET\\Framework64\\v4.0.30319\\WPF\\en-US\\*", lpFindFileData=0x31e3f4 | out: lpFindFileData=0x31e3f4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5f355da0, ftCreationTime.dwHighDateTime=0x1d2e676, ftLastAccessTime.dwLowDateTime=0x5f355da0, ftLastAccessTime.dwHighDateTime=0x1d2e676, ftLastWriteTime.dwLowDateTime=0x5f355da0, ftLastWriteTime.dwHighDateTime=0x1d2e676, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x381b80 [0114.597] FindNextFileW (in: hFindFile=0x381b80, lpFindFileData=0x31e404 | out: lpFindFileData=0x31e404*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5f355da0, ftCreationTime.dwHighDateTime=0x1d2e676, ftLastAccessTime.dwLowDateTime=0x5f355da0, ftLastAccessTime.dwHighDateTime=0x1d2e676, ftLastWriteTime.dwLowDateTime=0x5f355da0, ftLastWriteTime.dwHighDateTime=0x1d2e676, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0114.597] FindNextFileW (in: hFindFile=0x381b80, lpFindFileData=0x31e404 | out: lpFindFileData=0x31e404*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x82c97e00, ftCreationTime.dwHighDateTime=0x1d0aa90, ftLastAccessTime.dwLowDateTime=0x5f355da0, ftLastAccessTime.dwHighDateTime=0x1d2e676, ftLastWriteTime.dwLowDateTime=0x82c97e00, ftLastWriteTime.dwHighDateTime=0x1d0aa90, nFileSizeHigh=0x0, nFileSizeLow=0x14ae8, dwReserved0=0x0, dwReserved1=0x0, cFileName="PresentationHost_v0400.dll.mui", cAlternateFileName="PRESEN~1.MUI")) returned 1 [0114.597] FindNextFileW (in: hFindFile=0x381b80, lpFindFileData=0x31e404 | out: lpFindFileData=0x31e404*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0114.597] FindClose (in: hFindFile=0x381b80 | out: hFindFile=0x381b80) returned 1 [0114.597] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e68c) returned 1 [0114.597] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e698) returned 1 [0114.597] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e6cc) returned 1 [0114.597] GetFullPathNameW (in: lpFileName="C:\\Windows\\Microsoft.NET\\Framework64\\v4.0.30319\\WPF\\en-US", nBufferLength=0x105, lpBuffer=0x31e1d4, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\Microsoft.NET\\Framework64\\v4.0.30319\\WPF\\en-US", lpFilePart=0x0) returned 0x39 [0114.597] GetFullPathNameW (in: lpFileName="C:\\Windows\\Microsoft.NET\\Framework64\\v4.0.30319\\WPF\\en-US\\", nBufferLength=0x105, lpBuffer=0x31e1a8, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\Microsoft.NET\\Framework64\\v4.0.30319\\WPF\\en-US\\", lpFilePart=0x0) returned 0x3a [0114.597] FindFirstFileW (in: lpFileName="C:\\Windows\\Microsoft.NET\\Framework64\\v4.0.30319\\WPF\\en-US\\*", lpFindFileData=0x31e3f4 | out: lpFindFileData=0x31e3f4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5f355da0, ftCreationTime.dwHighDateTime=0x1d2e676, ftLastAccessTime.dwLowDateTime=0x5f355da0, ftLastAccessTime.dwHighDateTime=0x1d2e676, ftLastWriteTime.dwLowDateTime=0x5f355da0, ftLastWriteTime.dwHighDateTime=0x1d2e676, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x381b80 [0114.598] FindNextFileW (in: hFindFile=0x381b80, lpFindFileData=0x31e404 | out: lpFindFileData=0x31e404*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5f355da0, ftCreationTime.dwHighDateTime=0x1d2e676, ftLastAccessTime.dwLowDateTime=0x5f355da0, ftLastAccessTime.dwHighDateTime=0x1d2e676, ftLastWriteTime.dwLowDateTime=0x5f355da0, ftLastWriteTime.dwHighDateTime=0x1d2e676, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0114.598] FindNextFileW (in: hFindFile=0x381b80, lpFindFileData=0x31e404 | out: lpFindFileData=0x31e404*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x82c97e00, ftCreationTime.dwHighDateTime=0x1d0aa90, ftLastAccessTime.dwLowDateTime=0x5f355da0, ftLastAccessTime.dwHighDateTime=0x1d2e676, ftLastWriteTime.dwLowDateTime=0x82c97e00, ftLastWriteTime.dwHighDateTime=0x1d0aa90, nFileSizeHigh=0x0, nFileSizeLow=0x14ae8, dwReserved0=0x0, dwReserved1=0x0, cFileName="PresentationHost_v0400.dll.mui", cAlternateFileName="PRESEN~1.MUI")) returned 1 [0114.598] FindNextFileW (in: hFindFile=0x381b80, lpFindFileData=0x31e404 | out: lpFindFileData=0x31e404*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x82c97e00, ftCreationTime.dwHighDateTime=0x1d0aa90, ftLastAccessTime.dwLowDateTime=0x5f355da0, ftLastAccessTime.dwHighDateTime=0x1d2e676, ftLastWriteTime.dwLowDateTime=0x82c97e00, ftLastWriteTime.dwHighDateTime=0x1d0aa90, nFileSizeHigh=0x0, nFileSizeLow=0x14ae8, dwReserved0=0x0, dwReserved1=0x0, cFileName="PresentationHost_v0400.dll.mui", cAlternateFileName="PRESEN~1.MUI")) returned 0 [0114.598] FindClose (in: hFindFile=0x381b80 | out: hFindFile=0x381b80) returned 1 [0114.598] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e68c) returned 1 [0114.598] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e698) returned 1 [0114.598] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e6cc) returned 1 [0114.598] GetFullPathNameW (in: lpFileName="C:\\Windows\\Microsoft.NET\\Framework64\\v4.0.30319\\WPF\\Fonts", nBufferLength=0x105, lpBuffer=0x31e1d4, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\Microsoft.NET\\Framework64\\v4.0.30319\\WPF\\Fonts", lpFilePart=0x0) returned 0x39 [0114.598] GetFullPathNameW (in: lpFileName="C:\\Windows\\Microsoft.NET\\Framework64\\v4.0.30319\\WPF\\Fonts\\", nBufferLength=0x105, lpBuffer=0x31e1a8, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\Microsoft.NET\\Framework64\\v4.0.30319\\WPF\\Fonts\\", lpFilePart=0x0) returned 0x3a [0114.598] FindFirstFileW (in: lpFileName="C:\\Windows\\Microsoft.NET\\Framework64\\v4.0.30319\\WPF\\Fonts\\*", lpFindFileData=0x31e3f4 | out: lpFindFileData=0x31e3f4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8abdb760, ftCreationTime.dwHighDateTime=0x1d2e621, ftLastAccessTime.dwLowDateTime=0xcf5ff460, ftLastAccessTime.dwHighDateTime=0x1d2e675, ftLastWriteTime.dwLowDateTime=0xcf5ff460, ftLastWriteTime.dwHighDateTime=0x1d2e675, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x381b80 [0114.608] FindNextFileW (in: hFindFile=0x381b80, lpFindFileData=0x31e404 | out: lpFindFileData=0x31e404*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8abdb760, ftCreationTime.dwHighDateTime=0x1d2e621, ftLastAccessTime.dwLowDateTime=0xcf5ff460, ftLastAccessTime.dwHighDateTime=0x1d2e675, ftLastWriteTime.dwLowDateTime=0xcf5ff460, ftLastWriteTime.dwHighDateTime=0x1d2e675, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0114.608] FindNextFileW (in: hFindFile=0x381b80, lpFindFileData=0x31e404 | out: lpFindFileData=0x31e404*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6d154900, ftCreationTime.dwHighDateTime=0x1ca29a3, ftLastAccessTime.dwLowDateTime=0x8abdb760, ftLastAccessTime.dwHighDateTime=0x1d2e621, ftLastWriteTime.dwLowDateTime=0x6d154900, ftLastWriteTime.dwHighDateTime=0x1ca29a3, nFileSizeHigh=0x0, nFileSizeLow=0x65b8, dwReserved0=0x0, dwReserved1=0x0, cFileName="GlobalMonospace.CompositeFont", cAlternateFileName="GLOBAL~1.COM")) returned 1 [0114.608] FindNextFileW (in: hFindFile=0x381b80, lpFindFileData=0x31e404 | out: lpFindFileData=0x31e404*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6d154900, ftCreationTime.dwHighDateTime=0x1ca29a3, ftLastAccessTime.dwLowDateTime=0x8abdb760, ftLastAccessTime.dwHighDateTime=0x1d2e621, ftLastWriteTime.dwLowDateTime=0x6d154900, ftLastWriteTime.dwHighDateTime=0x1ca29a3, nFileSizeHigh=0x0, nFileSizeLow=0x6779, dwReserved0=0x0, dwReserved1=0x0, cFileName="GlobalSansSerif.CompositeFont", cAlternateFileName="GLOBAL~2.COM")) returned 1 [0114.608] FindNextFileW (in: hFindFile=0x381b80, lpFindFileData=0x31e404 | out: lpFindFileData=0x31e404*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6d154900, ftCreationTime.dwHighDateTime=0x1ca29a3, ftLastAccessTime.dwLowDateTime=0x8abdb760, ftLastAccessTime.dwHighDateTime=0x1d2e621, ftLastWriteTime.dwLowDateTime=0x6d154900, ftLastWriteTime.dwHighDateTime=0x1ca29a3, nFileSizeHigh=0x0, nFileSizeLow=0x7453, dwReserved0=0x0, dwReserved1=0x0, cFileName="GlobalSerif.CompositeFont", cAlternateFileName="GLOBAL~3.COM")) returned 1 [0114.608] FindNextFileW (in: hFindFile=0x381b80, lpFindFileData=0x31e404 | out: lpFindFileData=0x31e404*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x72b2d100, ftCreationTime.dwHighDateTime=0x1cd433d, ftLastAccessTime.dwLowDateTime=0xcf5ff460, ftLastAccessTime.dwHighDateTime=0x1d2e675, ftLastWriteTime.dwLowDateTime=0x72b2d100, ftLastWriteTime.dwHighDateTime=0x1cd433d, nFileSizeHigh=0x0, nFileSizeLow=0xda3b, dwReserved0=0x0, dwReserved1=0x0, cFileName="GlobalUserInterface.CompositeFont", cAlternateFileName="GLOBAL~4.COM")) returned 1 [0114.608] FindNextFileW (in: hFindFile=0x381b80, lpFindFileData=0x31e404 | out: lpFindFileData=0x31e404*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0114.608] FindClose (in: hFindFile=0x381b80 | out: hFindFile=0x381b80) returned 1 [0114.609] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e68c) returned 1 [0114.609] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e698) returned 1 [0114.609] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e6cc) returned 1 [0114.609] GetFullPathNameW (in: lpFileName="C:\\Windows\\Microsoft.NET\\Framework64\\v4.0.30319\\WPF\\Fonts", nBufferLength=0x105, lpBuffer=0x31e1d4, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\Microsoft.NET\\Framework64\\v4.0.30319\\WPF\\Fonts", lpFilePart=0x0) returned 0x39 [0114.609] GetFullPathNameW (in: lpFileName="C:\\Windows\\Microsoft.NET\\Framework64\\v4.0.30319\\WPF\\Fonts\\", nBufferLength=0x105, lpBuffer=0x31e1a8, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\Microsoft.NET\\Framework64\\v4.0.30319\\WPF\\Fonts\\", lpFilePart=0x0) returned 0x3a [0114.609] FindFirstFileW (in: lpFileName="C:\\Windows\\Microsoft.NET\\Framework64\\v4.0.30319\\WPF\\Fonts\\*", lpFindFileData=0x31e3f4 | out: lpFindFileData=0x31e3f4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8abdb760, ftCreationTime.dwHighDateTime=0x1d2e621, ftLastAccessTime.dwLowDateTime=0xcf5ff460, ftLastAccessTime.dwHighDateTime=0x1d2e675, ftLastWriteTime.dwLowDateTime=0xcf5ff460, ftLastWriteTime.dwHighDateTime=0x1d2e675, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x381b80 [0114.610] FindNextFileW (in: hFindFile=0x381b80, lpFindFileData=0x31e404 | out: lpFindFileData=0x31e404*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8abdb760, ftCreationTime.dwHighDateTime=0x1d2e621, ftLastAccessTime.dwLowDateTime=0xcf5ff460, ftLastAccessTime.dwHighDateTime=0x1d2e675, ftLastWriteTime.dwLowDateTime=0xcf5ff460, ftLastWriteTime.dwHighDateTime=0x1d2e675, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0114.610] FindNextFileW (in: hFindFile=0x381b80, lpFindFileData=0x31e404 | out: lpFindFileData=0x31e404*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6d154900, ftCreationTime.dwHighDateTime=0x1ca29a3, ftLastAccessTime.dwLowDateTime=0x8abdb760, ftLastAccessTime.dwHighDateTime=0x1d2e621, ftLastWriteTime.dwLowDateTime=0x6d154900, ftLastWriteTime.dwHighDateTime=0x1ca29a3, nFileSizeHigh=0x0, nFileSizeLow=0x65b8, dwReserved0=0x0, dwReserved1=0x0, cFileName="GlobalMonospace.CompositeFont", cAlternateFileName="GLOBAL~1.COM")) returned 1 [0114.610] FindNextFileW (in: hFindFile=0x381b80, lpFindFileData=0x31e404 | out: lpFindFileData=0x31e404*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6d154900, ftCreationTime.dwHighDateTime=0x1ca29a3, ftLastAccessTime.dwLowDateTime=0x8abdb760, ftLastAccessTime.dwHighDateTime=0x1d2e621, ftLastWriteTime.dwLowDateTime=0x6d154900, ftLastWriteTime.dwHighDateTime=0x1ca29a3, nFileSizeHigh=0x0, nFileSizeLow=0x6779, dwReserved0=0x0, dwReserved1=0x0, cFileName="GlobalSansSerif.CompositeFont", cAlternateFileName="GLOBAL~2.COM")) returned 1 [0114.610] FindNextFileW (in: hFindFile=0x381b80, lpFindFileData=0x31e404 | out: lpFindFileData=0x31e404*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6d154900, ftCreationTime.dwHighDateTime=0x1ca29a3, ftLastAccessTime.dwLowDateTime=0x8abdb760, ftLastAccessTime.dwHighDateTime=0x1d2e621, ftLastWriteTime.dwLowDateTime=0x6d154900, ftLastWriteTime.dwHighDateTime=0x1ca29a3, nFileSizeHigh=0x0, nFileSizeLow=0x7453, dwReserved0=0x0, dwReserved1=0x0, cFileName="GlobalSerif.CompositeFont", cAlternateFileName="GLOBAL~3.COM")) returned 1 [0114.610] FindNextFileW (in: hFindFile=0x381b80, lpFindFileData=0x31e404 | out: lpFindFileData=0x31e404*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x72b2d100, ftCreationTime.dwHighDateTime=0x1cd433d, ftLastAccessTime.dwLowDateTime=0xcf5ff460, ftLastAccessTime.dwHighDateTime=0x1d2e675, ftLastWriteTime.dwLowDateTime=0x72b2d100, ftLastWriteTime.dwHighDateTime=0x1cd433d, nFileSizeHigh=0x0, nFileSizeLow=0xda3b, dwReserved0=0x0, dwReserved1=0x0, cFileName="GlobalUserInterface.CompositeFont", cAlternateFileName="GLOBAL~4.COM")) returned 1 [0114.610] FindNextFileW (in: hFindFile=0x381b80, lpFindFileData=0x31e404 | out: lpFindFileData=0x31e404*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x72b2d100, ftCreationTime.dwHighDateTime=0x1cd433d, ftLastAccessTime.dwLowDateTime=0xcf5ff460, ftLastAccessTime.dwHighDateTime=0x1d2e675, ftLastWriteTime.dwLowDateTime=0x72b2d100, ftLastWriteTime.dwHighDateTime=0x1cd433d, nFileSizeHigh=0x0, nFileSizeLow=0xda3b, dwReserved0=0x0, dwReserved1=0x0, cFileName="GlobalUserInterface.CompositeFont", cAlternateFileName="GLOBAL~4.COM")) returned 0 [0114.610] FindClose (in: hFindFile=0x381b80 | out: hFindFile=0x381b80) returned 1 [0114.611] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e68c) returned 1 [0114.611] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e698) returned 1 [0114.611] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e8ac) returned 1 [0114.611] GetFullPathNameW (in: lpFileName="C:\\Windows\\Migration", nBufferLength=0x105, lpBuffer=0x31e3b4, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\Migration", lpFilePart=0x0) returned 0x14 [0114.611] GetFullPathNameW (in: lpFileName="C:\\Windows\\Migration\\", nBufferLength=0x105, lpBuffer=0x31e388, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\Migration\\", lpFilePart=0x0) returned 0x15 [0114.611] FindFirstFileW (in: lpFileName="C:\\Windows\\Migration\\*", lpFindFileData=0x31e5d4 | out: lpFindFileData=0x31e5d4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x56a9ce00, ftCreationTime.dwHighDateTime=0x1d2e676, ftLastAccessTime.dwLowDateTime=0x56a9ce00, ftLastAccessTime.dwHighDateTime=0x1d2e676, ftLastWriteTime.dwLowDateTime=0x56a9ce00, ftLastWriteTime.dwHighDateTime=0x1d2e676, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x381b80 [0114.611] FindNextFileW (in: hFindFile=0x381b80, lpFindFileData=0x31e5e4 | out: lpFindFileData=0x31e5e4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x56a9ce00, ftCreationTime.dwHighDateTime=0x1d2e676, ftLastAccessTime.dwLowDateTime=0x56a9ce00, ftLastAccessTime.dwHighDateTime=0x1d2e676, ftLastWriteTime.dwLowDateTime=0x56a9ce00, ftLastWriteTime.dwHighDateTime=0x1d2e676, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0114.612] FindNextFileW (in: hFindFile=0x381b80, lpFindFileData=0x31e5e4 | out: lpFindFileData=0x31e5e4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x56a9ce00, ftCreationTime.dwHighDateTime=0x1d2e676, ftLastAccessTime.dwLowDateTime=0x5d5e0d60, ftLastAccessTime.dwHighDateTime=0x1d2e676, ftLastWriteTime.dwLowDateTime=0x5d5e0d60, ftLastWriteTime.dwHighDateTime=0x1d2e676, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="WTR", cAlternateFileName="")) returned 1 [0114.612] FindNextFileW (in: hFindFile=0x381b80, lpFindFileData=0x31e5e4 | out: lpFindFileData=0x31e5e4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x56a9ce00, ftCreationTime.dwHighDateTime=0x1d2e676, ftLastAccessTime.dwLowDateTime=0x5d5e0d60, ftLastAccessTime.dwHighDateTime=0x1d2e676, ftLastWriteTime.dwLowDateTime=0x5d5e0d60, ftLastWriteTime.dwHighDateTime=0x1d2e676, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="WTR", cAlternateFileName="")) returned 0 [0114.612] FindClose (in: hFindFile=0x381b80 | out: hFindFile=0x381b80) returned 1 [0114.612] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e86c) returned 1 [0114.612] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e878) returned 1 [0114.612] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e8ac) returned 1 [0114.612] GetFullPathNameW (in: lpFileName="C:\\Windows\\Migration", nBufferLength=0x105, lpBuffer=0x31e3b4, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\Migration", lpFilePart=0x0) returned 0x14 [0114.612] GetFullPathNameW (in: lpFileName="C:\\Windows\\Migration\\", nBufferLength=0x105, lpBuffer=0x31e388, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\Migration\\", lpFilePart=0x0) returned 0x15 [0114.612] FindFirstFileW (in: lpFileName="C:\\Windows\\Migration\\*", lpFindFileData=0x31e5d4 | out: lpFindFileData=0x31e5d4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x56a9ce00, ftCreationTime.dwHighDateTime=0x1d2e676, ftLastAccessTime.dwLowDateTime=0x56a9ce00, ftLastAccessTime.dwHighDateTime=0x1d2e676, ftLastWriteTime.dwLowDateTime=0x56a9ce00, ftLastWriteTime.dwHighDateTime=0x1d2e676, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x381b80 [0114.612] FindNextFileW (in: hFindFile=0x381b80, lpFindFileData=0x31e5e4 | out: lpFindFileData=0x31e5e4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x56a9ce00, ftCreationTime.dwHighDateTime=0x1d2e676, ftLastAccessTime.dwLowDateTime=0x56a9ce00, ftLastAccessTime.dwHighDateTime=0x1d2e676, ftLastWriteTime.dwLowDateTime=0x56a9ce00, ftLastWriteTime.dwHighDateTime=0x1d2e676, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0114.612] FindNextFileW (in: hFindFile=0x381b80, lpFindFileData=0x31e5e4 | out: lpFindFileData=0x31e5e4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x56a9ce00, ftCreationTime.dwHighDateTime=0x1d2e676, ftLastAccessTime.dwLowDateTime=0x5d5e0d60, ftLastAccessTime.dwHighDateTime=0x1d2e676, ftLastWriteTime.dwLowDateTime=0x5d5e0d60, ftLastWriteTime.dwHighDateTime=0x1d2e676, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="WTR", cAlternateFileName="")) returned 1 [0114.612] FindNextFileW (in: hFindFile=0x381b80, lpFindFileData=0x31e5e4 | out: lpFindFileData=0x31e5e4*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0114.612] FindClose (in: hFindFile=0x381b80 | out: hFindFile=0x381b80) returned 1 [0114.612] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e86c) returned 1 [0114.612] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e878) returned 1 [0114.612] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e834) returned 1 [0114.612] GetFullPathNameW (in: lpFileName="C:\\Windows\\Migration\\WTR", nBufferLength=0x105, lpBuffer=0x31e33c, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\Migration\\WTR", lpFilePart=0x0) returned 0x18 [0114.613] GetFullPathNameW (in: lpFileName="C:\\Windows\\Migration\\WTR\\", nBufferLength=0x105, lpBuffer=0x31e310, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\Migration\\WTR\\", lpFilePart=0x0) returned 0x19 [0114.613] FindFirstFileW (in: lpFileName="C:\\Windows\\Migration\\WTR\\*", lpFindFileData=0x31e55c | out: lpFindFileData=0x31e55c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x56a9ce00, ftCreationTime.dwHighDateTime=0x1d2e676, ftLastAccessTime.dwLowDateTime=0x5d5e0d60, ftLastAccessTime.dwHighDateTime=0x1d2e676, ftLastWriteTime.dwLowDateTime=0x5d5e0d60, ftLastWriteTime.dwHighDateTime=0x1d2e676, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x381b80 [0114.613] FindNextFileW (in: hFindFile=0x381b80, lpFindFileData=0x31e56c | out: lpFindFileData=0x31e56c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x56a9ce00, ftCreationTime.dwHighDateTime=0x1d2e676, ftLastAccessTime.dwLowDateTime=0x5d5e0d60, ftLastAccessTime.dwHighDateTime=0x1d2e676, ftLastWriteTime.dwLowDateTime=0x5d5e0d60, ftLastWriteTime.dwHighDateTime=0x1d2e676, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0114.613] FindNextFileW (in: hFindFile=0x381b80, lpFindFileData=0x31e56c | out: lpFindFileData=0x31e56c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x56482500, ftCreationTime.dwHighDateTime=0x1d09444, ftLastAccessTime.dwLowDateTime=0x5d5e0d60, ftLastAccessTime.dwHighDateTime=0x1d2e676, ftLastWriteTime.dwLowDateTime=0x56482500, ftLastWriteTime.dwHighDateTime=0x1d09444, nFileSizeHigh=0x0, nFileSizeLow=0x883, dwReserved0=0x0, dwReserved1=0x0, cFileName="netfx45_upgradecleanup.inf", cAlternateFileName="NETFX4~1.INF")) returned 1 [0114.613] FindNextFileW (in: hFindFile=0x381b80, lpFindFileData=0x31e56c | out: lpFindFileData=0x31e56c*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0114.613] FindClose (in: hFindFile=0x381b80 | out: hFindFile=0x381b80) returned 1 [0114.613] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e7f4) returned 1 [0114.613] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e800) returned 1 [0114.613] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e834) returned 1 [0114.613] GetFullPathNameW (in: lpFileName="C:\\Windows\\Migration\\WTR", nBufferLength=0x105, lpBuffer=0x31e33c, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\Migration\\WTR", lpFilePart=0x0) returned 0x18 [0114.613] GetFullPathNameW (in: lpFileName="C:\\Windows\\Migration\\WTR\\", nBufferLength=0x105, lpBuffer=0x31e310, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\Migration\\WTR\\", lpFilePart=0x0) returned 0x19 [0114.613] FindFirstFileW (in: lpFileName="C:\\Windows\\Migration\\WTR\\*", lpFindFileData=0x31e55c | out: lpFindFileData=0x31e55c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x56a9ce00, ftCreationTime.dwHighDateTime=0x1d2e676, ftLastAccessTime.dwLowDateTime=0x5d5e0d60, ftLastAccessTime.dwHighDateTime=0x1d2e676, ftLastWriteTime.dwLowDateTime=0x5d5e0d60, ftLastWriteTime.dwHighDateTime=0x1d2e676, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x381b80 [0114.614] FindNextFileW (in: hFindFile=0x381b80, lpFindFileData=0x31e56c | out: lpFindFileData=0x31e56c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x56a9ce00, ftCreationTime.dwHighDateTime=0x1d2e676, ftLastAccessTime.dwLowDateTime=0x5d5e0d60, ftLastAccessTime.dwHighDateTime=0x1d2e676, ftLastWriteTime.dwLowDateTime=0x5d5e0d60, ftLastWriteTime.dwHighDateTime=0x1d2e676, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0114.614] FindNextFileW (in: hFindFile=0x381b80, lpFindFileData=0x31e56c | out: lpFindFileData=0x31e56c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x56482500, ftCreationTime.dwHighDateTime=0x1d09444, ftLastAccessTime.dwLowDateTime=0x5d5e0d60, ftLastAccessTime.dwHighDateTime=0x1d2e676, ftLastWriteTime.dwLowDateTime=0x56482500, ftLastWriteTime.dwHighDateTime=0x1d09444, nFileSizeHigh=0x0, nFileSizeLow=0x883, dwReserved0=0x0, dwReserved1=0x0, cFileName="netfx45_upgradecleanup.inf", cAlternateFileName="NETFX4~1.INF")) returned 1 [0114.614] FindNextFileW (in: hFindFile=0x381b80, lpFindFileData=0x31e56c | out: lpFindFileData=0x31e56c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x56482500, ftCreationTime.dwHighDateTime=0x1d09444, ftLastAccessTime.dwLowDateTime=0x5d5e0d60, ftLastAccessTime.dwHighDateTime=0x1d2e676, ftLastWriteTime.dwLowDateTime=0x56482500, ftLastWriteTime.dwHighDateTime=0x1d09444, nFileSizeHigh=0x0, nFileSizeLow=0x883, dwReserved0=0x0, dwReserved1=0x0, cFileName="netfx45_upgradecleanup.inf", cAlternateFileName="NETFX4~1.INF")) returned 0 [0114.614] FindClose (in: hFindFile=0x381b80 | out: hFindFile=0x381b80) returned 1 [0114.614] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e7f4) returned 1 [0114.614] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e800) returned 1 [0114.614] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e8ac) returned 1 [0114.614] GetFullPathNameW (in: lpFileName="C:\\Windows\\ModemLogs", nBufferLength=0x105, lpBuffer=0x31e3b4, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\ModemLogs", lpFilePart=0x0) returned 0x14 [0114.614] GetFullPathNameW (in: lpFileName="C:\\Windows\\ModemLogs\\", nBufferLength=0x105, lpBuffer=0x31e388, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\ModemLogs\\", lpFilePart=0x0) returned 0x15 [0114.614] FindFirstFileW (in: lpFileName="C:\\Windows\\ModemLogs\\*", lpFindFileData=0x31e5d4 | out: lpFindFileData=0x31e5d4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfea5f2b2, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfea5f2b2, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0x9fcbcbb0, ftLastWriteTime.dwHighDateTime=0x1ca042b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x381b80 [0114.614] FindNextFileW (in: hFindFile=0x381b80, lpFindFileData=0x31e5e4 | out: lpFindFileData=0x31e5e4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfea5f2b2, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfea5f2b2, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0x9fcbcbb0, ftLastWriteTime.dwHighDateTime=0x1ca042b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0114.614] FindNextFileW (in: hFindFile=0x381b80, lpFindFileData=0x31e5e4 | out: lpFindFileData=0x31e5e4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfea5f2b2, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfea5f2b2, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0x9fcbcbb0, ftLastWriteTime.dwHighDateTime=0x1ca042b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 0 [0114.614] FindClose (in: hFindFile=0x381b80 | out: hFindFile=0x381b80) returned 1 [0114.614] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e86c) returned 1 [0114.615] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e878) returned 1 [0114.615] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e8ac) returned 1 [0114.615] GetFullPathNameW (in: lpFileName="C:\\Windows\\ModemLogs", nBufferLength=0x105, lpBuffer=0x31e3b4, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\ModemLogs", lpFilePart=0x0) returned 0x14 [0114.615] GetFullPathNameW (in: lpFileName="C:\\Windows\\ModemLogs\\", nBufferLength=0x105, lpBuffer=0x31e388, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\ModemLogs\\", lpFilePart=0x0) returned 0x15 [0114.615] FindFirstFileW (in: lpFileName="C:\\Windows\\ModemLogs\\*", lpFindFileData=0x31e5d4 | out: lpFindFileData=0x31e5d4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfea5f2b2, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfea5f2b2, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0x9fcbcbb0, ftLastWriteTime.dwHighDateTime=0x1ca042b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x381b80 [0114.615] FindNextFileW (in: hFindFile=0x381b80, lpFindFileData=0x31e5e4 | out: lpFindFileData=0x31e5e4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfea5f2b2, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfea5f2b2, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0x9fcbcbb0, ftLastWriteTime.dwHighDateTime=0x1ca042b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0114.615] FindNextFileW (in: hFindFile=0x381b80, lpFindFileData=0x31e5e4 | out: lpFindFileData=0x31e5e4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfea5f2b2, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfea5f2b2, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0x9fcbcbb0, ftLastWriteTime.dwHighDateTime=0x1ca042b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 0 [0114.615] FindClose (in: hFindFile=0x381b80 | out: hFindFile=0x381b80) returned 1 [0114.615] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e86c) returned 1 [0114.615] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e878) returned 1 [0114.615] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e8ac) returned 1 [0114.615] GetFullPathNameW (in: lpFileName="C:\\Windows\\Offline Web Pages", nBufferLength=0x105, lpBuffer=0x31e3b4, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\Offline Web Pages", lpFilePart=0x0) returned 0x1c [0114.615] GetFullPathNameW (in: lpFileName="C:\\Windows\\Offline Web Pages\\", nBufferLength=0x105, lpBuffer=0x31e388, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\Offline Web Pages\\", lpFilePart=0x0) returned 0x1d [0114.615] FindFirstFileW (in: lpFileName="C:\\Windows\\Offline Web Pages\\*", lpFindFileData=0x31e5d4 | out: lpFindFileData=0x31e5d4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x800df312, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x810320ce, ftLastAccessTime.dwHighDateTime=0x1ca0444, ftLastWriteTime.dwLowDateTime=0x810320ce, ftLastWriteTime.dwHighDateTime=0x1ca0444, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x381b80 [0114.615] FindNextFileW (in: hFindFile=0x381b80, lpFindFileData=0x31e5e4 | out: lpFindFileData=0x31e5e4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x800df312, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x810320ce, ftLastAccessTime.dwHighDateTime=0x1ca0444, ftLastWriteTime.dwLowDateTime=0x810320ce, ftLastWriteTime.dwHighDateTime=0x1ca0444, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0114.615] FindNextFileW (in: hFindFile=0x381b80, lpFindFileData=0x31e5e4 | out: lpFindFileData=0x31e5e4*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0x810320ce, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x7c28927f, ftLastAccessTime.dwHighDateTime=0x1ca0444, ftLastWriteTime.dwLowDateTime=0x7c28927f, ftLastWriteTime.dwHighDateTime=0x1ca0444, nFileSizeHigh=0x0, nFileSizeLow=0x41, dwReserved0=0x0, dwReserved1=0x0, cFileName="desktop.ini", cAlternateFileName="")) returned 1 [0114.615] FindNextFileW (in: hFindFile=0x381b80, lpFindFileData=0x31e5e4 | out: lpFindFileData=0x31e5e4*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0114.616] FindClose (in: hFindFile=0x381b80 | out: hFindFile=0x381b80) returned 1 [0114.616] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e86c) returned 1 [0114.616] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e878) returned 1 [0114.616] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e8ac) returned 1 [0114.616] GetFullPathNameW (in: lpFileName="C:\\Windows\\Offline Web Pages", nBufferLength=0x105, lpBuffer=0x31e3b4, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\Offline Web Pages", lpFilePart=0x0) returned 0x1c [0114.616] GetFullPathNameW (in: lpFileName="C:\\Windows\\Offline Web Pages\\", nBufferLength=0x105, lpBuffer=0x31e388, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\Offline Web Pages\\", lpFilePart=0x0) returned 0x1d [0114.616] FindFirstFileW (in: lpFileName="C:\\Windows\\Offline Web Pages\\*", lpFindFileData=0x31e5d4 | out: lpFindFileData=0x31e5d4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x800df312, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x810320ce, ftLastAccessTime.dwHighDateTime=0x1ca0444, ftLastWriteTime.dwLowDateTime=0x810320ce, ftLastWriteTime.dwHighDateTime=0x1ca0444, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x381b80 [0114.616] FindNextFileW (in: hFindFile=0x381b80, lpFindFileData=0x31e5e4 | out: lpFindFileData=0x31e5e4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x800df312, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x810320ce, ftLastAccessTime.dwHighDateTime=0x1ca0444, ftLastWriteTime.dwLowDateTime=0x810320ce, ftLastWriteTime.dwHighDateTime=0x1ca0444, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0114.616] FindNextFileW (in: hFindFile=0x381b80, lpFindFileData=0x31e5e4 | out: lpFindFileData=0x31e5e4*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0x810320ce, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x7c28927f, ftLastAccessTime.dwHighDateTime=0x1ca0444, ftLastWriteTime.dwLowDateTime=0x7c28927f, ftLastWriteTime.dwHighDateTime=0x1ca0444, nFileSizeHigh=0x0, nFileSizeLow=0x41, dwReserved0=0x0, dwReserved1=0x0, cFileName="desktop.ini", cAlternateFileName="")) returned 1 [0114.616] FindNextFileW (in: hFindFile=0x381b80, lpFindFileData=0x31e5e4 | out: lpFindFileData=0x31e5e4*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0x810320ce, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x7c28927f, ftLastAccessTime.dwHighDateTime=0x1ca0444, ftLastWriteTime.dwLowDateTime=0x7c28927f, ftLastWriteTime.dwHighDateTime=0x1ca0444, nFileSizeHigh=0x0, nFileSizeLow=0x41, dwReserved0=0x0, dwReserved1=0x0, cFileName="desktop.ini", cAlternateFileName="")) returned 0 [0114.616] FindClose (in: hFindFile=0x381b80 | out: hFindFile=0x381b80) returned 1 [0114.616] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e86c) returned 1 [0114.616] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e878) returned 1 [0114.616] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e8ac) returned 1 [0114.616] GetFullPathNameW (in: lpFileName="C:\\Windows\\Panther", nBufferLength=0x105, lpBuffer=0x31e3b4, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\Panther", lpFilePart=0x0) returned 0x12 [0114.616] GetFullPathNameW (in: lpFileName="C:\\Windows\\Panther\\", nBufferLength=0x105, lpBuffer=0x31e388, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\Panther\\", lpFilePart=0x0) returned 0x13 [0114.616] FindFirstFileW (in: lpFileName="C:\\Windows\\Panther\\*", lpFindFileData=0x31e5d4 | out: lpFindFileData=0x31e5d4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xb3172800, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0x281b0dc0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x281b0dc0, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x381b80 [0114.622] FindNextFileW (in: hFindFile=0x381b80, lpFindFileData=0x31e5e4 | out: lpFindFileData=0x31e5e4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xb3172800, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0x281b0dc0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x281b0dc0, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0114.622] FindNextFileW (in: hFindFile=0x381b80, lpFindFileData=0x31e5e4 | out: lpFindFileData=0x31e5e4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x83e28960, ftCreationTime.dwHighDateTime=0x1d2de2a, ftLastAccessTime.dwLowDateTime=0x10d9ce80, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x10d9ce80, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="actionqueue", cAlternateFileName="ACTION~1")) returned 1 [0114.622] FindNextFileW (in: hFindFile=0x381b80, lpFindFileData=0x31e5e4 | out: lpFindFileData=0x31e5e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb3172800, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xb3172800, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xabfc8d80, ftLastWriteTime.dwHighDateTime=0x1d2de32, nFileSizeHigh=0x0, nFileSizeLow=0x945f, dwReserved0=0x0, dwReserved1=0x0, cFileName="cbs.log", cAlternateFileName="")) returned 1 [0114.622] FindNextFileW (in: hFindFile=0x381b80, lpFindFileData=0x31e5e4 | out: lpFindFileData=0x31e5e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb3172800, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xb3172800, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xab47a500, ftLastWriteTime.dwHighDateTime=0x1d2de32, nFileSizeHigh=0x0, nFileSizeLow=0xa170, dwReserved0=0x0, dwReserved1=0x0, cFileName="cbs_unattend.log", cAlternateFileName="CBS_UN~1.LOG")) returned 1 [0114.622] FindNextFileW (in: hFindFile=0x381b80, lpFindFileData=0x31e5e4 | out: lpFindFileData=0x31e5e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb3172800, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xb3172800, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xb30b4120, ftLastWriteTime.dwHighDateTime=0x1d2de32, nFileSizeHigh=0x0, nFileSizeLow=0x44, dwReserved0=0x0, dwReserved1=0x0, cFileName="Contents0.dir", cAlternateFileName="CONTEN~1.DIR")) returned 1 [0114.622] FindNextFileW (in: hFindFile=0x381b80, lpFindFileData=0x31e5e4 | out: lpFindFileData=0x31e5e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x70aa320, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x70aa320, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x70aa320, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x44, dwReserved0=0x0, dwReserved1=0x0, cFileName="Contents1.dir", cAlternateFileName="CONTEN~2.DIR")) returned 1 [0114.622] FindNextFileW (in: hFindFile=0x381b80, lpFindFileData=0x31e5e4 | out: lpFindFileData=0x31e5e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7a49fe60, ftCreationTime.dwHighDateTime=0x1d2de2a, ftLastAccessTime.dwLowDateTime=0x7a49fe60, ftLastAccessTime.dwHighDateTime=0x1d2de2a, ftLastWriteTime.dwLowDateTime=0x7a49fe60, ftLastWriteTime.dwHighDateTime=0x1d2de2a, nFileSizeHigh=0x0, nFileSizeLow=0x217, dwReserved0=0x0, dwReserved1=0x0, cFileName="DDACLSys.log", cAlternateFileName="")) returned 1 [0114.622] FindNextFileW (in: hFindFile=0x381b80, lpFindFileData=0x31e5e4 | out: lpFindFileData=0x31e5e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb3172800, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xb3172800, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0x70d0480, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x1a65, dwReserved0=0x0, dwReserved1=0x0, cFileName="diagerr.xml", cAlternateFileName="")) returned 1 [0114.622] FindNextFileW (in: hFindFile=0x381b80, lpFindFileData=0x31e5e4 | out: lpFindFileData=0x31e5e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb3172800, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xb3172800, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0x70d0480, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x2ace, dwReserved0=0x0, dwReserved1=0x0, cFileName="diagwrn.xml", cAlternateFileName="")) returned 1 [0114.622] FindNextFileW (in: hFindFile=0x381b80, lpFindFileData=0x31e5e4 | out: lpFindFileData=0x31e5e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb3172800, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xb3172800, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xb30b4120, ftLastWriteTime.dwHighDateTime=0x1d2de32, nFileSizeHigh=0x0, nFileSizeLow=0x70b2, dwReserved0=0x0, dwReserved1=0x0, cFileName="MainQueueOnline0.que", cAlternateFileName="MAINQU~1.QUE")) returned 1 [0114.622] FindNextFileW (in: hFindFile=0x381b80, lpFindFileData=0x31e5e4 | out: lpFindFileData=0x31e5e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x70aa320, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x70aa320, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x70aa320, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x6b9c, dwReserved0=0x0, dwReserved1=0x0, cFileName="MainQueueOnline1.que", cAlternateFileName="MAINQU~2.QUE")) returned 1 [0114.622] FindNextFileW (in: hFindFile=0x381b80, lpFindFileData=0x31e5e4 | out: lpFindFileData=0x31e5e4*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x568bd8e0, ftCreationTime.dwHighDateTime=0x1d2de2a, ftLastAccessTime.dwLowDateTime=0x568bd8e0, ftLastAccessTime.dwHighDateTime=0x1d2de2a, ftLastWriteTime.dwLowDateTime=0x281b0dc0, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x2d000, dwReserved0=0x0, dwReserved1=0x0, cFileName="setup.etl", cAlternateFileName="")) returned 1 [0114.622] FindNextFileW (in: hFindFile=0x381b80, lpFindFileData=0x31e5e4 | out: lpFindFileData=0x31e5e4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xb3172800, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0x60481880, ftLastAccessTime.dwHighDateTime=0x1d2de2a, ftLastWriteTime.dwLowDateTime=0x60481880, ftLastWriteTime.dwHighDateTime=0x1d2de2a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="setup.exe", cAlternateFileName="")) returned 1 [0114.622] FindNextFileW (in: hFindFile=0x381b80, lpFindFileData=0x31e5e4 | out: lpFindFileData=0x31e5e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb3172800, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xb3172800, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0x70d0480, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0xc4865, dwReserved0=0x0, dwReserved1=0x0, cFileName="setupact.log", cAlternateFileName="")) returned 1 [0114.622] FindNextFileW (in: hFindFile=0x381b80, lpFindFileData=0x31e5e4 | out: lpFindFileData=0x31e5e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb3172800, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xb3172800, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0x38b254e0, ftLastWriteTime.dwHighDateTime=0x1d2de32, nFileSizeHigh=0x0, nFileSizeLow=0x24b, dwReserved0=0x0, dwReserved1=0x0, cFileName="setuperr.log", cAlternateFileName="")) returned 1 [0114.622] FindNextFileW (in: hFindFile=0x381b80, lpFindFileData=0x31e5e4 | out: lpFindFileData=0x31e5e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb3172800, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xb3172800, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0x83cd1d00, ftLastWriteTime.dwHighDateTime=0x1d2de2a, nFileSizeHigh=0x0, nFileSizeLow=0x58900, dwReserved0=0x0, dwReserved1=0x0, cFileName="setupinfo", cAlternateFileName="SETUPI~1")) returned 1 [0114.622] FindNextFileW (in: hFindFile=0x381b80, lpFindFileData=0x31e5e4 | out: lpFindFileData=0x31e5e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb3198960, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0x6ebb140, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x11154140, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x1b0a, dwReserved0=0x0, dwReserved1=0x0, cFileName="unattend.xml", cAlternateFileName="")) returned 1 [0114.622] FindNextFileW (in: hFindFile=0x381b80, lpFindFileData=0x31e5e4 | out: lpFindFileData=0x31e5e4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5f5a0f00, ftCreationTime.dwHighDateTime=0x1d2de2a, ftLastAccessTime.dwLowDateTime=0x5f639480, ftLastAccessTime.dwHighDateTime=0x1d2de2a, ftLastWriteTime.dwLowDateTime=0x5f639480, ftLastWriteTime.dwHighDateTime=0x1d2de2a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="UnattendGC", cAlternateFileName="UNATTE~1")) returned 1 [0114.622] FindNextFileW (in: hFindFile=0x381b80, lpFindFileData=0x31e5e4 | out: lpFindFileData=0x31e5e4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5f5a0f00, ftCreationTime.dwHighDateTime=0x1d2de2a, ftLastAccessTime.dwLowDateTime=0x5f639480, ftLastAccessTime.dwHighDateTime=0x1d2de2a, ftLastWriteTime.dwLowDateTime=0x5f639480, ftLastWriteTime.dwHighDateTime=0x1d2de2a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="UnattendGC", cAlternateFileName="UNATTE~1")) returned 0 [0114.622] FindClose (in: hFindFile=0x381b80 | out: hFindFile=0x381b80) returned 1 [0114.623] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e86c) returned 1 [0114.623] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e878) returned 1 [0114.623] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e8ac) returned 1 [0114.623] GetFullPathNameW (in: lpFileName="C:\\Windows\\Panther", nBufferLength=0x105, lpBuffer=0x31e3b4, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\Panther", lpFilePart=0x0) returned 0x12 [0114.623] GetFullPathNameW (in: lpFileName="C:\\Windows\\Panther\\", nBufferLength=0x105, lpBuffer=0x31e388, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\Panther\\", lpFilePart=0x0) returned 0x13 [0114.623] FindFirstFileW (in: lpFileName="C:\\Windows\\Panther\\*", lpFindFileData=0x31e5d4 | out: lpFindFileData=0x31e5d4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xb3172800, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0x281b0dc0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x281b0dc0, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x381b80 [0114.624] FindNextFileW (in: hFindFile=0x381b80, lpFindFileData=0x31e5e4 | out: lpFindFileData=0x31e5e4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xb3172800, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0x281b0dc0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x281b0dc0, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0114.624] FindNextFileW (in: hFindFile=0x381b80, lpFindFileData=0x31e5e4 | out: lpFindFileData=0x31e5e4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x83e28960, ftCreationTime.dwHighDateTime=0x1d2de2a, ftLastAccessTime.dwLowDateTime=0x10d9ce80, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x10d9ce80, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="actionqueue", cAlternateFileName="ACTION~1")) returned 1 [0114.624] FindNextFileW (in: hFindFile=0x381b80, lpFindFileData=0x31e5e4 | out: lpFindFileData=0x31e5e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb3172800, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xb3172800, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xabfc8d80, ftLastWriteTime.dwHighDateTime=0x1d2de32, nFileSizeHigh=0x0, nFileSizeLow=0x945f, dwReserved0=0x0, dwReserved1=0x0, cFileName="cbs.log", cAlternateFileName="")) returned 1 [0114.624] FindNextFileW (in: hFindFile=0x381b80, lpFindFileData=0x31e5e4 | out: lpFindFileData=0x31e5e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb3172800, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xb3172800, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xab47a500, ftLastWriteTime.dwHighDateTime=0x1d2de32, nFileSizeHigh=0x0, nFileSizeLow=0xa170, dwReserved0=0x0, dwReserved1=0x0, cFileName="cbs_unattend.log", cAlternateFileName="CBS_UN~1.LOG")) returned 1 [0114.624] FindNextFileW (in: hFindFile=0x381b80, lpFindFileData=0x31e5e4 | out: lpFindFileData=0x31e5e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb3172800, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xb3172800, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xb30b4120, ftLastWriteTime.dwHighDateTime=0x1d2de32, nFileSizeHigh=0x0, nFileSizeLow=0x44, dwReserved0=0x0, dwReserved1=0x0, cFileName="Contents0.dir", cAlternateFileName="CONTEN~1.DIR")) returned 1 [0114.625] FindNextFileW (in: hFindFile=0x381b80, lpFindFileData=0x31e5e4 | out: lpFindFileData=0x31e5e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x70aa320, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x70aa320, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x70aa320, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x44, dwReserved0=0x0, dwReserved1=0x0, cFileName="Contents1.dir", cAlternateFileName="CONTEN~2.DIR")) returned 1 [0114.625] FindNextFileW (in: hFindFile=0x381b80, lpFindFileData=0x31e5e4 | out: lpFindFileData=0x31e5e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7a49fe60, ftCreationTime.dwHighDateTime=0x1d2de2a, ftLastAccessTime.dwLowDateTime=0x7a49fe60, ftLastAccessTime.dwHighDateTime=0x1d2de2a, ftLastWriteTime.dwLowDateTime=0x7a49fe60, ftLastWriteTime.dwHighDateTime=0x1d2de2a, nFileSizeHigh=0x0, nFileSizeLow=0x217, dwReserved0=0x0, dwReserved1=0x0, cFileName="DDACLSys.log", cAlternateFileName="")) returned 1 [0114.625] FindNextFileW (in: hFindFile=0x381b80, lpFindFileData=0x31e5e4 | out: lpFindFileData=0x31e5e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb3172800, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xb3172800, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0x70d0480, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x1a65, dwReserved0=0x0, dwReserved1=0x0, cFileName="diagerr.xml", cAlternateFileName="")) returned 1 [0114.625] FindNextFileW (in: hFindFile=0x381b80, lpFindFileData=0x31e5e4 | out: lpFindFileData=0x31e5e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb3172800, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xb3172800, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0x70d0480, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x2ace, dwReserved0=0x0, dwReserved1=0x0, cFileName="diagwrn.xml", cAlternateFileName="")) returned 1 [0114.625] FindNextFileW (in: hFindFile=0x381b80, lpFindFileData=0x31e5e4 | out: lpFindFileData=0x31e5e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb3172800, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xb3172800, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xb30b4120, ftLastWriteTime.dwHighDateTime=0x1d2de32, nFileSizeHigh=0x0, nFileSizeLow=0x70b2, dwReserved0=0x0, dwReserved1=0x0, cFileName="MainQueueOnline0.que", cAlternateFileName="MAINQU~1.QUE")) returned 1 [0114.625] FindNextFileW (in: hFindFile=0x381b80, lpFindFileData=0x31e5e4 | out: lpFindFileData=0x31e5e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x70aa320, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x70aa320, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x70aa320, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x6b9c, dwReserved0=0x0, dwReserved1=0x0, cFileName="MainQueueOnline1.que", cAlternateFileName="MAINQU~2.QUE")) returned 1 [0114.625] FindNextFileW (in: hFindFile=0x381b80, lpFindFileData=0x31e5e4 | out: lpFindFileData=0x31e5e4*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x568bd8e0, ftCreationTime.dwHighDateTime=0x1d2de2a, ftLastAccessTime.dwLowDateTime=0x568bd8e0, ftLastAccessTime.dwHighDateTime=0x1d2de2a, ftLastWriteTime.dwLowDateTime=0x281b0dc0, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x2d000, dwReserved0=0x0, dwReserved1=0x0, cFileName="setup.etl", cAlternateFileName="")) returned 1 [0114.625] FindNextFileW (in: hFindFile=0x381b80, lpFindFileData=0x31e5e4 | out: lpFindFileData=0x31e5e4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xb3172800, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0x60481880, ftLastAccessTime.dwHighDateTime=0x1d2de2a, ftLastWriteTime.dwLowDateTime=0x60481880, ftLastWriteTime.dwHighDateTime=0x1d2de2a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="setup.exe", cAlternateFileName="")) returned 1 [0114.625] FindNextFileW (in: hFindFile=0x381b80, lpFindFileData=0x31e5e4 | out: lpFindFileData=0x31e5e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb3172800, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xb3172800, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0x70d0480, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0xc4865, dwReserved0=0x0, dwReserved1=0x0, cFileName="setupact.log", cAlternateFileName="")) returned 1 [0114.625] FindNextFileW (in: hFindFile=0x381b80, lpFindFileData=0x31e5e4 | out: lpFindFileData=0x31e5e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb3172800, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xb3172800, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0x38b254e0, ftLastWriteTime.dwHighDateTime=0x1d2de32, nFileSizeHigh=0x0, nFileSizeLow=0x24b, dwReserved0=0x0, dwReserved1=0x0, cFileName="setuperr.log", cAlternateFileName="")) returned 1 [0114.625] FindNextFileW (in: hFindFile=0x381b80, lpFindFileData=0x31e5e4 | out: lpFindFileData=0x31e5e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb3172800, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xb3172800, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0x83cd1d00, ftLastWriteTime.dwHighDateTime=0x1d2de2a, nFileSizeHigh=0x0, nFileSizeLow=0x58900, dwReserved0=0x0, dwReserved1=0x0, cFileName="setupinfo", cAlternateFileName="SETUPI~1")) returned 1 [0114.625] FindNextFileW (in: hFindFile=0x381b80, lpFindFileData=0x31e5e4 | out: lpFindFileData=0x31e5e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb3198960, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0x6ebb140, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x11154140, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x1b0a, dwReserved0=0x0, dwReserved1=0x0, cFileName="unattend.xml", cAlternateFileName="")) returned 1 [0114.625] FindNextFileW (in: hFindFile=0x381b80, lpFindFileData=0x31e5e4 | out: lpFindFileData=0x31e5e4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5f5a0f00, ftCreationTime.dwHighDateTime=0x1d2de2a, ftLastAccessTime.dwLowDateTime=0x5f639480, ftLastAccessTime.dwHighDateTime=0x1d2de2a, ftLastWriteTime.dwLowDateTime=0x5f639480, ftLastWriteTime.dwHighDateTime=0x1d2de2a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="UnattendGC", cAlternateFileName="UNATTE~1")) returned 1 [0114.625] FindNextFileW (in: hFindFile=0x381b80, lpFindFileData=0x31e5e4 | out: lpFindFileData=0x31e5e4*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0114.625] FindClose (in: hFindFile=0x381b80 | out: hFindFile=0x381b80) returned 1 [0114.626] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e86c) returned 1 [0114.626] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e878) returned 1 [0114.626] GetFullPathNameW (in: lpFileName="C:\\Windows\\Panther\\diagerr.xml", nBufferLength=0x105, lpBuffer=0x31e284, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\Panther\\diagerr.xml", lpFilePart=0x0) returned 0x1e [0114.626] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e778) returned 1 [0114.626] CreateFileW (lpFileName="C:\\Windows\\Panther\\diagerr.xml" (normalized: "c:\\windows\\panther\\diagerr.xml"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x178 [0114.628] GetFileType (hFile=0x178) returned 0x1 [0114.628] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e774) returned 1 [0114.628] GetFileType (hFile=0x178) returned 0x1 [0114.628] GetFileSize (in: hFile=0x178, lpFileSizeHigh=0x31e880 | out: lpFileSizeHigh=0x31e880*=0x0) returned 0x1a65 [0114.628] ReadFile (in: hFile=0x178, lpBuffer=0x26837e0, nNumberOfBytesToRead=0x1a65, lpNumberOfBytesRead=0x31e82c, lpOverlapped=0x0 | out: lpBuffer=0x26837e0*, lpNumberOfBytesRead=0x31e82c*=0x1a65, lpOverlapped=0x0) returned 1 [0114.644] GetFullPathNameW (in: lpFileName="C:\\Windows\\Panther\\diagerr.xml", nBufferLength=0x105, lpBuffer=0x31e270, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\Panther\\diagerr.xml", lpFilePart=0x0) returned 0x1e [0114.644] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e764) returned 1 [0114.644] CreateFileW (lpFileName="C:\\Windows\\Panther\\diagerr.xml" (normalized: "c:\\windows\\panther\\diagerr.xml"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x178 [0114.645] GetFileType (hFile=0x178) returned 0x1 [0114.645] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e760) returned 1 [0114.645] GetFileType (hFile=0x178) returned 0x1 [0114.645] WriteFile (in: hFile=0x178, lpBuffer=0x26d8b54*, nNumberOfBytesToWrite=0x1a70, lpNumberOfBytesWritten=0x31e820, lpOverlapped=0x0 | out: lpBuffer=0x26d8b54*, lpNumberOfBytesWritten=0x31e820*=0x1a70, lpOverlapped=0x0) returned 1 [0114.646] GetFullPathNameW (in: lpFileName="C:\\Windows\\Panther\\diagerr.xml", nBufferLength=0x105, lpBuffer=0x31e3a4, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\Panther\\diagerr.xml", lpFilePart=0x0) returned 0x1e [0114.646] GetFullPathNameW (in: lpFileName="C:\\Windows\\Panther\\diagerr.xml", nBufferLength=0x105, lpBuffer=0x31e3a4, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\Panther\\diagerr.xml", lpFilePart=0x0) returned 0x1e [0114.647] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e804) returned 1 [0114.647] GetFileAttributesExW (in: lpFileName="C:\\Windows\\Panther\\diagerr.xml" (normalized: "c:\\windows\\panther\\diagerr.xml"), fInfoLevelId=0x0, lpFileInformation=0x31e880 | out: lpFileInformation=0x31e880*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb3172800, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xb3172800, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0x27c59b20, ftLastWriteTime.dwHighDateTime=0x1d6eb7f, nFileSizeHigh=0x0, nFileSizeLow=0x1a70)) returned 1 [0114.647] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e800) returned 1 [0114.647] MoveFileW (lpExistingFileName="C:\\Windows\\Panther\\diagerr.xml" (normalized: "c:\\windows\\panther\\diagerr.xml"), lpNewFileName="C:\\Windows\\Panther\\diagerr.xml" (normalized: "c:\\windows\\panther\\diagerr.xml")) returned 1 [0114.647] GetFullPathNameW (in: lpFileName="C:\\Windows\\Panther\\diagwrn.xml", nBufferLength=0x105, lpBuffer=0x31e284, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\Panther\\diagwrn.xml", lpFilePart=0x0) returned 0x1e [0114.647] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e778) returned 1 [0114.647] CreateFileW (lpFileName="C:\\Windows\\Panther\\diagwrn.xml" (normalized: "c:\\windows\\panther\\diagwrn.xml"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x178 [0114.648] GetFileType (hFile=0x178) returned 0x1 [0114.648] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e774) returned 1 [0114.648] GetFileType (hFile=0x178) returned 0x1 [0114.648] GetFileSize (in: hFile=0x178, lpFileSizeHigh=0x31e880 | out: lpFileSizeHigh=0x31e880*=0x0) returned 0x2ace [0114.648] ReadFile (in: hFile=0x178, lpBuffer=0x26da818, nNumberOfBytesToRead=0x2ace, lpNumberOfBytesRead=0x31e82c, lpOverlapped=0x0 | out: lpBuffer=0x26da818*, lpNumberOfBytesRead=0x31e82c*=0x2ace, lpOverlapped=0x0) returned 1 [0114.665] GetFullPathNameW (in: lpFileName="C:\\Windows\\Panther\\diagwrn.xml", nBufferLength=0x105, lpBuffer=0x31e270, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\Panther\\diagwrn.xml", lpFilePart=0x0) returned 0x1e [0114.665] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e764) returned 1 [0114.665] CreateFileW (lpFileName="C:\\Windows\\Panther\\diagwrn.xml" (normalized: "c:\\windows\\panther\\diagwrn.xml"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x178 [0114.666] GetFileType (hFile=0x178) returned 0x1 [0114.666] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e760) returned 1 [0114.666] GetFileType (hFile=0x178) returned 0x1 [0114.667] WriteFile (in: hFile=0x178, lpBuffer=0x2734c10*, nNumberOfBytesToWrite=0x2ad0, lpNumberOfBytesWritten=0x31e820, lpOverlapped=0x0 | out: lpBuffer=0x2734c10*, lpNumberOfBytesWritten=0x31e820*=0x2ad0, lpOverlapped=0x0) returned 1 [0114.667] GetFullPathNameW (in: lpFileName="C:\\Windows\\Panther\\diagwrn.xml", nBufferLength=0x105, lpBuffer=0x31e3a4, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\Panther\\diagwrn.xml", lpFilePart=0x0) returned 0x1e [0114.667] GetFullPathNameW (in: lpFileName="C:\\Windows\\Panther\\diagwrn.xml", nBufferLength=0x105, lpBuffer=0x31e3a4, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\Panther\\diagwrn.xml", lpFilePart=0x0) returned 0x1e [0114.668] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e804) returned 1 [0114.668] GetFileAttributesExW (in: lpFileName="C:\\Windows\\Panther\\diagwrn.xml" (normalized: "c:\\windows\\panther\\diagwrn.xml"), fInfoLevelId=0x0, lpFileInformation=0x31e880 | out: lpFileInformation=0x31e880*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb3172800, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xb3172800, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0x27c7fc80, ftLastWriteTime.dwHighDateTime=0x1d6eb7f, nFileSizeHigh=0x0, nFileSizeLow=0x2ad0)) returned 1 [0114.668] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e800) returned 1 [0114.668] MoveFileW (lpExistingFileName="C:\\Windows\\Panther\\diagwrn.xml" (normalized: "c:\\windows\\panther\\diagwrn.xml"), lpNewFileName="C:\\Windows\\Panther\\diagwrn.xml" (normalized: "c:\\windows\\panther\\diagwrn.xml")) returned 1 [0114.668] GetFullPathNameW (in: lpFileName="C:\\Windows\\Panther\\unattend.xml", nBufferLength=0x105, lpBuffer=0x31e284, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\Panther\\unattend.xml", lpFilePart=0x0) returned 0x1f [0114.668] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e778) returned 1 [0114.668] CreateFileW (lpFileName="C:\\Windows\\Panther\\unattend.xml" (normalized: "c:\\windows\\panther\\unattend.xml"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x178 [0114.668] GetFileType (hFile=0x178) returned 0x1 [0114.668] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e774) returned 1 [0114.668] GetFileType (hFile=0x178) returned 0x1 [0114.668] GetFileSize (in: hFile=0x178, lpFileSizeHigh=0x31e880 | out: lpFileSizeHigh=0x31e880*=0x0) returned 0x1b0a [0114.668] ReadFile (in: hFile=0x178, lpBuffer=0x27379b0, nNumberOfBytesToRead=0x1b0a, lpNumberOfBytesRead=0x31e82c, lpOverlapped=0x0 | out: lpBuffer=0x27379b0*, lpNumberOfBytesRead=0x31e82c*=0x1b0a, lpOverlapped=0x0) returned 1 [0114.686] GetFullPathNameW (in: lpFileName="C:\\Windows\\Panther\\unattend.xml", nBufferLength=0x105, lpBuffer=0x31e270, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\Panther\\unattend.xml", lpFilePart=0x0) returned 0x1f [0114.686] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e764) returned 1 [0114.686] CreateFileW (lpFileName="C:\\Windows\\Panther\\unattend.xml" (normalized: "c:\\windows\\panther\\unattend.xml"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x178 [0114.687] GetFileType (hFile=0x178) returned 0x1 [0114.687] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e760) returned 1 [0114.687] GetFileType (hFile=0x178) returned 0x1 [0114.687] WriteFile (in: hFile=0x178, lpBuffer=0x278cee8*, nNumberOfBytesToWrite=0x1b10, lpNumberOfBytesWritten=0x31e820, lpOverlapped=0x0 | out: lpBuffer=0x278cee8*, lpNumberOfBytesWritten=0x31e820*=0x1b10, lpOverlapped=0x0) returned 1 [0114.688] GetFullPathNameW (in: lpFileName="C:\\Windows\\Panther\\unattend.xml", nBufferLength=0x105, lpBuffer=0x31e3a4, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\Panther\\unattend.xml", lpFilePart=0x0) returned 0x1f [0114.688] GetFullPathNameW (in: lpFileName="C:\\Windows\\Panther\\unattend.xml", nBufferLength=0x105, lpBuffer=0x31e3a4, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\Panther\\unattend.xml", lpFilePart=0x0) returned 0x1f [0114.688] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e804) returned 1 [0114.688] GetFileAttributesExW (in: lpFileName="C:\\Windows\\Panther\\unattend.xml" (normalized: "c:\\windows\\panther\\unattend.xml"), fInfoLevelId=0x0, lpFileInformation=0x31e880 | out: lpFileInformation=0x31e880*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb3198960, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0x6ebb140, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x27ca5de0, ftLastWriteTime.dwHighDateTime=0x1d6eb7f, nFileSizeHigh=0x0, nFileSizeLow=0x1b10)) returned 1 [0114.688] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e800) returned 1 [0114.688] MoveFileW (lpExistingFileName="C:\\Windows\\Panther\\unattend.xml" (normalized: "c:\\windows\\panther\\unattend.xml"), lpNewFileName="C:\\Windows\\Panther\\unattend.xml" (normalized: "c:\\windows\\panther\\unattend.xml")) returned 1 [0114.689] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e834) returned 1 [0114.689] GetFullPathNameW (in: lpFileName="C:\\Windows\\Panther\\actionqueue", nBufferLength=0x105, lpBuffer=0x31e33c, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\Panther\\actionqueue", lpFilePart=0x0) returned 0x1e [0114.689] GetFullPathNameW (in: lpFileName="C:\\Windows\\Panther\\actionqueue\\", nBufferLength=0x105, lpBuffer=0x31e310, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\Panther\\actionqueue\\", lpFilePart=0x0) returned 0x1f [0114.689] FindFirstFileW (in: lpFileName="C:\\Windows\\Panther\\actionqueue\\*", lpFindFileData=0x31e55c | out: lpFindFileData=0x31e55c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x83e28960, ftCreationTime.dwHighDateTime=0x1d2de2a, ftLastAccessTime.dwLowDateTime=0x10d9ce80, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x10d9ce80, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x381ec0 [0114.689] FindNextFileW (in: hFindFile=0x381ec0, lpFindFileData=0x31e56c | out: lpFindFileData=0x31e56c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x83e28960, ftCreationTime.dwHighDateTime=0x1d2de2a, ftLastAccessTime.dwLowDateTime=0x10d9ce80, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x10d9ce80, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0114.689] FindNextFileW (in: hFindFile=0x381ec0, lpFindFileData=0x31e56c | out: lpFindFileData=0x31e56c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x10d9ce80, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x10d9ce80, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x10d9ce80, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x222, dwReserved0=0x0, dwReserved1=0x0, cFileName="oobeSystem.uaq", cAlternateFileName="OOBESY~1.UAQ")) returned 1 [0114.689] FindNextFileW (in: hFindFile=0x381ec0, lpFindFileData=0x31e56c | out: lpFindFileData=0x31e56c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8429f2a0, ftCreationTime.dwHighDateTime=0x1d2de2a, ftLastAccessTime.dwLowDateTime=0x8429f2a0, ftLastAccessTime.dwHighDateTime=0x1d2de2a, ftLastWriteTime.dwLowDateTime=0x842c5400, ftLastWriteTime.dwHighDateTime=0x1d2de2a, nFileSizeHigh=0x0, nFileSizeLow=0x3f7, dwReserved0=0x0, dwReserved1=0x0, cFileName="specialize.uaq", cAlternateFileName="SPECIA~1.UAQ")) returned 1 [0114.689] FindNextFileW (in: hFindFile=0x381ec0, lpFindFileData=0x31e56c | out: lpFindFileData=0x31e56c*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0114.689] FindClose (in: hFindFile=0x381ec0 | out: hFindFile=0x381ec0) returned 1 [0114.689] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e7f4) returned 1 [0114.689] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e800) returned 1 [0114.689] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e834) returned 1 [0114.689] GetFullPathNameW (in: lpFileName="C:\\Windows\\Panther\\actionqueue", nBufferLength=0x105, lpBuffer=0x31e33c, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\Panther\\actionqueue", lpFilePart=0x0) returned 0x1e [0114.689] GetFullPathNameW (in: lpFileName="C:\\Windows\\Panther\\actionqueue\\", nBufferLength=0x105, lpBuffer=0x31e310, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\Panther\\actionqueue\\", lpFilePart=0x0) returned 0x1f [0114.689] FindFirstFileW (in: lpFileName="C:\\Windows\\Panther\\actionqueue\\*", lpFindFileData=0x31e55c | out: lpFindFileData=0x31e55c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x83e28960, ftCreationTime.dwHighDateTime=0x1d2de2a, ftLastAccessTime.dwLowDateTime=0x10d9ce80, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x10d9ce80, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x381ec0 [0114.690] FindNextFileW (in: hFindFile=0x381ec0, lpFindFileData=0x31e56c | out: lpFindFileData=0x31e56c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x83e28960, ftCreationTime.dwHighDateTime=0x1d2de2a, ftLastAccessTime.dwLowDateTime=0x10d9ce80, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x10d9ce80, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0114.690] FindNextFileW (in: hFindFile=0x381ec0, lpFindFileData=0x31e56c | out: lpFindFileData=0x31e56c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x10d9ce80, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x10d9ce80, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x10d9ce80, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x222, dwReserved0=0x0, dwReserved1=0x0, cFileName="oobeSystem.uaq", cAlternateFileName="OOBESY~1.UAQ")) returned 1 [0114.690] FindNextFileW (in: hFindFile=0x381ec0, lpFindFileData=0x31e56c | out: lpFindFileData=0x31e56c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8429f2a0, ftCreationTime.dwHighDateTime=0x1d2de2a, ftLastAccessTime.dwLowDateTime=0x8429f2a0, ftLastAccessTime.dwHighDateTime=0x1d2de2a, ftLastWriteTime.dwLowDateTime=0x842c5400, ftLastWriteTime.dwHighDateTime=0x1d2de2a, nFileSizeHigh=0x0, nFileSizeLow=0x3f7, dwReserved0=0x0, dwReserved1=0x0, cFileName="specialize.uaq", cAlternateFileName="SPECIA~1.UAQ")) returned 1 [0114.690] FindNextFileW (in: hFindFile=0x381ec0, lpFindFileData=0x31e56c | out: lpFindFileData=0x31e56c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8429f2a0, ftCreationTime.dwHighDateTime=0x1d2de2a, ftLastAccessTime.dwLowDateTime=0x8429f2a0, ftLastAccessTime.dwHighDateTime=0x1d2de2a, ftLastWriteTime.dwLowDateTime=0x842c5400, ftLastWriteTime.dwHighDateTime=0x1d2de2a, nFileSizeHigh=0x0, nFileSizeLow=0x3f7, dwReserved0=0x0, dwReserved1=0x0, cFileName="specialize.uaq", cAlternateFileName="SPECIA~1.UAQ")) returned 0 [0114.690] FindClose (in: hFindFile=0x381ec0 | out: hFindFile=0x381ec0) returned 1 [0114.690] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e7f4) returned 1 [0114.690] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e800) returned 1 [0114.690] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e834) returned 1 [0114.690] GetFullPathNameW (in: lpFileName="C:\\Windows\\Panther\\setup.exe", nBufferLength=0x105, lpBuffer=0x31e33c, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\Panther\\setup.exe", lpFilePart=0x0) returned 0x1c [0114.690] GetFullPathNameW (in: lpFileName="C:\\Windows\\Panther\\setup.exe\\", nBufferLength=0x105, lpBuffer=0x31e310, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\Panther\\setup.exe\\", lpFilePart=0x0) returned 0x1d [0114.690] FindFirstFileW (in: lpFileName="C:\\Windows\\Panther\\setup.exe\\*", lpFindFileData=0x31e55c | out: lpFindFileData=0x31e55c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xb3172800, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0x60481880, ftLastAccessTime.dwHighDateTime=0x1d2de2a, ftLastWriteTime.dwLowDateTime=0x60481880, ftLastWriteTime.dwHighDateTime=0x1d2de2a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x381ec0 [0114.690] FindNextFileW (in: hFindFile=0x381ec0, lpFindFileData=0x31e56c | out: lpFindFileData=0x31e56c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xb3172800, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0x60481880, ftLastAccessTime.dwHighDateTime=0x1d2de2a, ftLastWriteTime.dwLowDateTime=0x60481880, ftLastWriteTime.dwHighDateTime=0x1d2de2a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0114.690] FindNextFileW (in: hFindFile=0x381ec0, lpFindFileData=0x31e56c | out: lpFindFileData=0x31e56c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xb3172800, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0x60481880, ftLastAccessTime.dwHighDateTime=0x1d2de2a, ftLastWriteTime.dwLowDateTime=0x60481880, ftLastWriteTime.dwHighDateTime=0x1d2de2a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 0 [0114.690] FindClose (in: hFindFile=0x381ec0 | out: hFindFile=0x381ec0) returned 1 [0114.690] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e7f4) returned 1 [0114.690] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e800) returned 1 [0114.691] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e834) returned 1 [0114.691] GetFullPathNameW (in: lpFileName="C:\\Windows\\Panther\\setup.exe", nBufferLength=0x105, lpBuffer=0x31e33c, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\Panther\\setup.exe", lpFilePart=0x0) returned 0x1c [0114.691] GetFullPathNameW (in: lpFileName="C:\\Windows\\Panther\\setup.exe\\", nBufferLength=0x105, lpBuffer=0x31e310, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\Panther\\setup.exe\\", lpFilePart=0x0) returned 0x1d [0114.691] FindFirstFileW (in: lpFileName="C:\\Windows\\Panther\\setup.exe\\*", lpFindFileData=0x31e55c | out: lpFindFileData=0x31e55c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xb3172800, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0x60481880, ftLastAccessTime.dwHighDateTime=0x1d2de2a, ftLastWriteTime.dwLowDateTime=0x60481880, ftLastWriteTime.dwHighDateTime=0x1d2de2a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x381ec0 [0114.691] FindNextFileW (in: hFindFile=0x381ec0, lpFindFileData=0x31e56c | out: lpFindFileData=0x31e56c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xb3172800, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0x60481880, ftLastAccessTime.dwHighDateTime=0x1d2de2a, ftLastWriteTime.dwLowDateTime=0x60481880, ftLastWriteTime.dwHighDateTime=0x1d2de2a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0114.691] FindNextFileW (in: hFindFile=0x381ec0, lpFindFileData=0x31e56c | out: lpFindFileData=0x31e56c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xb3172800, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0x60481880, ftLastAccessTime.dwHighDateTime=0x1d2de2a, ftLastWriteTime.dwLowDateTime=0x60481880, ftLastWriteTime.dwHighDateTime=0x1d2de2a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 0 [0114.691] FindClose (in: hFindFile=0x381ec0 | out: hFindFile=0x381ec0) returned 1 [0114.691] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e7f4) returned 1 [0114.691] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e800) returned 1 [0114.691] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e834) returned 1 [0114.691] GetFullPathNameW (in: lpFileName="C:\\Windows\\Panther\\UnattendGC", nBufferLength=0x105, lpBuffer=0x31e33c, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\Panther\\UnattendGC", lpFilePart=0x0) returned 0x1d [0114.691] GetFullPathNameW (in: lpFileName="C:\\Windows\\Panther\\UnattendGC\\", nBufferLength=0x105, lpBuffer=0x31e310, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\Panther\\UnattendGC\\", lpFilePart=0x0) returned 0x1e [0114.691] FindFirstFileW (in: lpFileName="C:\\Windows\\Panther\\UnattendGC\\*", lpFindFileData=0x31e55c | out: lpFindFileData=0x31e55c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5f5a0f00, ftCreationTime.dwHighDateTime=0x1d2de2a, ftLastAccessTime.dwLowDateTime=0x5f639480, ftLastAccessTime.dwHighDateTime=0x1d2de2a, ftLastWriteTime.dwLowDateTime=0x5f639480, ftLastWriteTime.dwHighDateTime=0x1d2de2a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x381ec0 [0114.691] FindNextFileW (in: hFindFile=0x381ec0, lpFindFileData=0x31e56c | out: lpFindFileData=0x31e56c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5f5a0f00, ftCreationTime.dwHighDateTime=0x1d2de2a, ftLastAccessTime.dwLowDateTime=0x5f639480, ftLastAccessTime.dwHighDateTime=0x1d2de2a, ftLastWriteTime.dwLowDateTime=0x5f639480, ftLastWriteTime.dwHighDateTime=0x1d2de2a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0114.691] FindNextFileW (in: hFindFile=0x381ec0, lpFindFileData=0x31e56c | out: lpFindFileData=0x31e56c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5f639480, ftCreationTime.dwHighDateTime=0x1d2de2a, ftLastAccessTime.dwLowDateTime=0x5f639480, ftLastAccessTime.dwHighDateTime=0x1d2de2a, ftLastWriteTime.dwLowDateTime=0x28249340, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0xee5, dwReserved0=0x0, dwReserved1=0x0, cFileName="diagerr.xml", cAlternateFileName="")) returned 1 [0114.691] FindNextFileW (in: hFindFile=0x381ec0, lpFindFileData=0x31e56c | out: lpFindFileData=0x31e56c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5f639480, ftCreationTime.dwHighDateTime=0x1d2de2a, ftLastAccessTime.dwLowDateTime=0x5f639480, ftLastAccessTime.dwHighDateTime=0x1d2de2a, ftLastWriteTime.dwLowDateTime=0x28249340, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x129d, dwReserved0=0x0, dwReserved1=0x0, cFileName="diagwrn.xml", cAlternateFileName="")) returned 1 [0114.691] FindNextFileW (in: hFindFile=0x381ec0, lpFindFileData=0x31e56c | out: lpFindFileData=0x31e56c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5f639480, ftCreationTime.dwHighDateTime=0x1d2de2a, ftLastAccessTime.dwLowDateTime=0x5f639480, ftLastAccessTime.dwHighDateTime=0x1d2de2a, ftLastWriteTime.dwLowDateTime=0x28249340, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x5dc1, dwReserved0=0x0, dwReserved1=0x0, cFileName="setupact.log", cAlternateFileName="")) returned 1 [0114.692] FindNextFileW (in: hFindFile=0x381ec0, lpFindFileData=0x31e56c | out: lpFindFileData=0x31e56c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5f639480, ftCreationTime.dwHighDateTime=0x1d2de2a, ftLastAccessTime.dwLowDateTime=0x5f639480, ftLastAccessTime.dwHighDateTime=0x1d2de2a, ftLastWriteTime.dwLowDateTime=0x5f639480, ftLastWriteTime.dwHighDateTime=0x1d2de2a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="setuperr.log", cAlternateFileName="")) returned 1 [0114.692] FindNextFileW (in: hFindFile=0x381ec0, lpFindFileData=0x31e56c | out: lpFindFileData=0x31e56c*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0114.692] FindClose (in: hFindFile=0x381ec0 | out: hFindFile=0x381ec0) returned 1 [0114.692] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e7f4) returned 1 [0114.692] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e800) returned 1 [0114.692] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e834) returned 1 [0114.692] GetFullPathNameW (in: lpFileName="C:\\Windows\\Panther\\UnattendGC", nBufferLength=0x105, lpBuffer=0x31e33c, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\Panther\\UnattendGC", lpFilePart=0x0) returned 0x1d [0114.692] GetFullPathNameW (in: lpFileName="C:\\Windows\\Panther\\UnattendGC\\", nBufferLength=0x105, lpBuffer=0x31e310, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\Panther\\UnattendGC\\", lpFilePart=0x0) returned 0x1e [0114.692] FindFirstFileW (in: lpFileName="C:\\Windows\\Panther\\UnattendGC\\*", lpFindFileData=0x31e55c | out: lpFindFileData=0x31e55c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5f5a0f00, ftCreationTime.dwHighDateTime=0x1d2de2a, ftLastAccessTime.dwLowDateTime=0x5f639480, ftLastAccessTime.dwHighDateTime=0x1d2de2a, ftLastWriteTime.dwLowDateTime=0x5f639480, ftLastWriteTime.dwHighDateTime=0x1d2de2a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x381ec0 [0114.692] FindNextFileW (in: hFindFile=0x381ec0, lpFindFileData=0x31e56c | out: lpFindFileData=0x31e56c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5f5a0f00, ftCreationTime.dwHighDateTime=0x1d2de2a, ftLastAccessTime.dwLowDateTime=0x5f639480, ftLastAccessTime.dwHighDateTime=0x1d2de2a, ftLastWriteTime.dwLowDateTime=0x5f639480, ftLastWriteTime.dwHighDateTime=0x1d2de2a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0114.692] FindClose (in: hFindFile=0x381ec0 | out: hFindFile=0x381ec0) returned 1 [0114.692] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e7f4) returned 1 [0114.692] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e800) returned 1 [0114.692] GetFullPathNameW (in: lpFileName="C:\\Windows\\Panther\\UnattendGC\\diagerr.xml", nBufferLength=0x105, lpBuffer=0x31e20c, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\Panther\\UnattendGC\\diagerr.xml", lpFilePart=0x0) returned 0x29 [0114.692] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e700) returned 1 [0114.692] CreateFileW (lpFileName="C:\\Windows\\Panther\\UnattendGC\\diagerr.xml" (normalized: "c:\\windows\\panther\\unattendgc\\diagerr.xml"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x178 [0114.693] GetFileType (hFile=0x178) returned 0x1 [0114.693] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e6fc) returned 1 [0114.693] GetFileType (hFile=0x178) returned 0x1 [0114.693] GetFileSize (in: hFile=0x178, lpFileSizeHigh=0x31e808 | out: lpFileSizeHigh=0x31e808*=0x0) returned 0xee5 [0114.693] ReadFile (in: hFile=0x178, lpBuffer=0x27932fc, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x31e7b4, lpOverlapped=0x0 | out: lpBuffer=0x27932fc*, lpNumberOfBytesRead=0x31e7b4*=0xee5, lpOverlapped=0x0) returned 1 [0114.708] GetFullPathNameW (in: lpFileName="C:\\Windows\\Panther\\UnattendGC\\diagerr.xml", nBufferLength=0x105, lpBuffer=0x31e1f8, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\Panther\\UnattendGC\\diagerr.xml", lpFilePart=0x0) returned 0x29 [0114.708] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e6ec) returned 1 [0114.708] CreateFileW (lpFileName="C:\\Windows\\Panther\\UnattendGC\\diagerr.xml" (normalized: "c:\\windows\\panther\\unattendgc\\diagerr.xml"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x178 [0114.709] GetFileType (hFile=0x178) returned 0x1 [0114.709] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e6e8) returned 1 [0114.709] GetFileType (hFile=0x178) returned 0x1 [0114.711] GetFullPathNameW (in: lpFileName="C:\\Windows\\Panther\\UnattendGC\\diagerr.xml", nBufferLength=0x105, lpBuffer=0x31e32c, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\Panther\\UnattendGC\\diagerr.xml", lpFilePart=0x0) returned 0x29 [0114.711] GetFullPathNameW (in: lpFileName="C:\\Windows\\Panther\\UnattendGC\\diagerr.xml", nBufferLength=0x105, lpBuffer=0x31e32c, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\Panther\\UnattendGC\\diagerr.xml", lpFilePart=0x0) returned 0x29 [0114.711] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e78c) returned 1 [0114.711] GetFileAttributesExW (in: lpFileName="C:\\Windows\\Panther\\UnattendGC\\diagerr.xml" (normalized: "c:\\windows\\panther\\unattendgc\\diagerr.xml"), fInfoLevelId=0x0, lpFileInformation=0x31e808 | out: lpFileInformation=0x31e808*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5f639480, ftCreationTime.dwHighDateTime=0x1d2de2a, ftLastAccessTime.dwLowDateTime=0x5f639480, ftLastAccessTime.dwHighDateTime=0x1d2de2a, ftLastWriteTime.dwLowDateTime=0x27cf20a0, ftLastWriteTime.dwHighDateTime=0x1d6eb7f, nFileSizeHigh=0x0, nFileSizeLow=0xef0)) returned 1 [0114.711] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e788) returned 1 [0114.711] MoveFileW (lpExistingFileName="C:\\Windows\\Panther\\UnattendGC\\diagerr.xml" (normalized: "c:\\windows\\panther\\unattendgc\\diagerr.xml"), lpNewFileName="C:\\Windows\\Panther\\UnattendGC\\diagerr.xml" (normalized: "c:\\windows\\panther\\unattendgc\\diagerr.xml")) returned 1 [0114.712] GetFullPathNameW (in: lpFileName="C:\\Windows\\Panther\\UnattendGC\\diagwrn.xml", nBufferLength=0x105, lpBuffer=0x31e20c, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\Panther\\UnattendGC\\diagwrn.xml", lpFilePart=0x0) returned 0x29 [0114.712] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e700) returned 1 [0114.712] CreateFileW (lpFileName="C:\\Windows\\Panther\\UnattendGC\\diagwrn.xml" (normalized: "c:\\windows\\panther\\unattendgc\\diagwrn.xml"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x178 [0114.712] GetFileType (hFile=0x178) returned 0x1 [0114.712] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e6fc) returned 1 [0114.712] GetFileType (hFile=0x178) returned 0x1 [0114.712] GetFileSize (in: hFile=0x178, lpFileSizeHigh=0x31e808 | out: lpFileSizeHigh=0x31e808*=0x0) returned 0x129d [0114.712] ReadFile (in: hFile=0x178, lpBuffer=0x27e6e4c, nNumberOfBytesToRead=0x129d, lpNumberOfBytesRead=0x31e7b4, lpOverlapped=0x0 | out: lpBuffer=0x27e6e4c*, lpNumberOfBytesRead=0x31e7b4*=0x129d, lpOverlapped=0x0) returned 1 [0114.729] GetFullPathNameW (in: lpFileName="C:\\Windows\\Panther\\UnattendGC\\diagwrn.xml", nBufferLength=0x105, lpBuffer=0x31e1f8, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\Panther\\UnattendGC\\diagwrn.xml", lpFilePart=0x0) returned 0x29 [0114.729] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e6ec) returned 1 [0114.729] CreateFileW (lpFileName="C:\\Windows\\Panther\\UnattendGC\\diagwrn.xml" (normalized: "c:\\windows\\panther\\unattendgc\\diagwrn.xml"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x178 [0114.730] GetFileType (hFile=0x178) returned 0x1 [0114.730] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e6e8) returned 1 [0114.730] GetFileType (hFile=0x178) returned 0x1 [0114.730] WriteFile (in: hFile=0x178, lpBuffer=0x2839954*, nNumberOfBytesToWrite=0x12a0, lpNumberOfBytesWritten=0x31e7a8, lpOverlapped=0x0 | out: lpBuffer=0x2839954*, lpNumberOfBytesWritten=0x31e7a8*=0x12a0, lpOverlapped=0x0) returned 1 [0114.731] GetFullPathNameW (in: lpFileName="C:\\Windows\\Panther\\UnattendGC\\diagwrn.xml", nBufferLength=0x105, lpBuffer=0x31e32c, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\Panther\\UnattendGC\\diagwrn.xml", lpFilePart=0x0) returned 0x29 [0114.731] GetFullPathNameW (in: lpFileName="C:\\Windows\\Panther\\UnattendGC\\diagwrn.xml", nBufferLength=0x105, lpBuffer=0x31e32c, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\Panther\\UnattendGC\\diagwrn.xml", lpFilePart=0x0) returned 0x29 [0114.731] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e78c) returned 1 [0114.732] GetFileAttributesExW (in: lpFileName="C:\\Windows\\Panther\\UnattendGC\\diagwrn.xml" (normalized: "c:\\windows\\panther\\unattendgc\\diagwrn.xml"), fInfoLevelId=0x0, lpFileInformation=0x31e808 | out: lpFileInformation=0x31e808*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5f639480, ftCreationTime.dwHighDateTime=0x1d2de2a, ftLastAccessTime.dwLowDateTime=0x5f639480, ftLastAccessTime.dwHighDateTime=0x1d2de2a, ftLastWriteTime.dwLowDateTime=0x27d18200, ftLastWriteTime.dwHighDateTime=0x1d6eb7f, nFileSizeHigh=0x0, nFileSizeLow=0x12a0)) returned 1 [0114.732] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e788) returned 1 [0114.732] MoveFileW (lpExistingFileName="C:\\Windows\\Panther\\UnattendGC\\diagwrn.xml" (normalized: "c:\\windows\\panther\\unattendgc\\diagwrn.xml"), lpNewFileName="C:\\Windows\\Panther\\UnattendGC\\diagwrn.xml" (normalized: "c:\\windows\\panther\\unattendgc\\diagwrn.xml")) returned 1 [0114.732] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e8ac) returned 1 [0114.732] GetFullPathNameW (in: lpFileName="C:\\Windows\\PCHEALTH", nBufferLength=0x105, lpBuffer=0x31e3b4, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\PCHEALTH", lpFilePart=0x0) returned 0x13 [0114.732] GetFullPathNameW (in: lpFileName="C:\\Windows\\PCHEALTH\\", nBufferLength=0x105, lpBuffer=0x31e388, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\PCHEALTH\\", lpFilePart=0x0) returned 0x14 [0114.732] FindFirstFileW (in: lpFileName="C:\\Windows\\PCHEALTH\\*", lpFindFileData=0x31e5d4 | out: lpFindFileData=0x31e5d4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x50ea0e30, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x50ea0e30, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x50ea0e30, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x381fc0 [0114.733] FindClose (in: hFindFile=0x381fc0 | out: hFindFile=0x381fc0) returned 1 [0114.733] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e86c) returned 1 [0114.733] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e878) returned 1 [0114.733] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e8ac) returned 1 [0114.733] GetFullPathNameW (in: lpFileName="C:\\Windows\\PCHEALTH", nBufferLength=0x105, lpBuffer=0x31e3b4, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\PCHEALTH", lpFilePart=0x0) returned 0x13 [0114.733] GetFullPathNameW (in: lpFileName="C:\\Windows\\PCHEALTH\\", nBufferLength=0x105, lpBuffer=0x31e388, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\PCHEALTH\\", lpFilePart=0x0) returned 0x14 [0114.733] FindFirstFileW (in: lpFileName="C:\\Windows\\PCHEALTH\\*", lpFindFileData=0x31e5d4 | out: lpFindFileData=0x31e5d4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x50ea0e30, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x50ea0e30, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x50ea0e30, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x381fc0 [0114.733] FindClose (in: hFindFile=0x381fc0 | out: hFindFile=0x381fc0) returned 1 [0114.733] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e86c) returned 1 [0114.733] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e878) returned 1 [0114.733] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e834) returned 1 [0114.733] GetFullPathNameW (in: lpFileName="C:\\Windows\\PCHEALTH\\ERRORREP", nBufferLength=0x105, lpBuffer=0x31e33c, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\PCHEALTH\\ERRORREP", lpFilePart=0x0) returned 0x1c [0114.733] GetFullPathNameW (in: lpFileName="C:\\Windows\\PCHEALTH\\ERRORREP\\", nBufferLength=0x105, lpBuffer=0x31e310, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\PCHEALTH\\ERRORREP\\", lpFilePart=0x0) returned 0x1d [0114.733] FindFirstFileW (in: lpFileName="C:\\Windows\\PCHEALTH\\ERRORREP\\*", lpFindFileData=0x31e55c | out: lpFindFileData=0x31e55c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x50ea0e30, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x50ea0e30, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x50ea0e30, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x381fc0 [0114.734] FindClose (in: hFindFile=0x381fc0 | out: hFindFile=0x381fc0) returned 1 [0114.734] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e7f4) returned 1 [0114.734] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e800) returned 1 [0114.734] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e834) returned 1 [0114.734] GetFullPathNameW (in: lpFileName="C:\\Windows\\PCHEALTH\\ERRORREP", nBufferLength=0x105, lpBuffer=0x31e33c, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\PCHEALTH\\ERRORREP", lpFilePart=0x0) returned 0x1c [0114.734] GetFullPathNameW (in: lpFileName="C:\\Windows\\PCHEALTH\\ERRORREP\\", nBufferLength=0x105, lpBuffer=0x31e310, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\PCHEALTH\\ERRORREP\\", lpFilePart=0x0) returned 0x1d [0114.734] FindFirstFileW (in: lpFileName="C:\\Windows\\PCHEALTH\\ERRORREP\\*", lpFindFileData=0x31e55c | out: lpFindFileData=0x31e55c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x50ea0e30, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x50ea0e30, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x50ea0e30, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x381fc0 [0114.734] FindClose (in: hFindFile=0x381fc0 | out: hFindFile=0x381fc0) returned 1 [0114.734] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e7f4) returned 1 [0114.734] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e800) returned 1 [0114.734] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e7bc) returned 1 [0114.734] GetFullPathNameW (in: lpFileName="C:\\Windows\\PCHEALTH\\ERRORREP\\QHEADLES", nBufferLength=0x105, lpBuffer=0x31e2c4, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\PCHEALTH\\ERRORREP\\QHEADLES", lpFilePart=0x0) returned 0x25 [0114.734] GetFullPathNameW (in: lpFileName="C:\\Windows\\PCHEALTH\\ERRORREP\\QHEADLES\\", nBufferLength=0x105, lpBuffer=0x31e298, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\PCHEALTH\\ERRORREP\\QHEADLES\\", lpFilePart=0x0) returned 0x26 [0114.734] FindFirstFileW (in: lpFileName="C:\\Windows\\PCHEALTH\\ERRORREP\\QHEADLES\\*", lpFindFileData=0x31e4e4 | out: lpFindFileData=0x31e4e4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x50ea0e30, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x50ea0e30, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x50ea0e30, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x381fc0 [0114.735] FindClose (in: hFindFile=0x381fc0 | out: hFindFile=0x381fc0) returned 1 [0114.735] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e77c) returned 1 [0114.735] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e788) returned 1 [0114.735] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e7bc) returned 1 [0114.735] GetFullPathNameW (in: lpFileName="C:\\Windows\\PCHEALTH\\ERRORREP\\QHEADLES", nBufferLength=0x105, lpBuffer=0x31e2c4, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\PCHEALTH\\ERRORREP\\QHEADLES", lpFilePart=0x0) returned 0x25 [0114.735] GetFullPathNameW (in: lpFileName="C:\\Windows\\PCHEALTH\\ERRORREP\\QHEADLES\\", nBufferLength=0x105, lpBuffer=0x31e298, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\PCHEALTH\\ERRORREP\\QHEADLES\\", lpFilePart=0x0) returned 0x26 [0114.735] FindFirstFileW (in: lpFileName="C:\\Windows\\PCHEALTH\\ERRORREP\\QHEADLES\\*", lpFindFileData=0x31e4e4 | out: lpFindFileData=0x31e4e4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x50ea0e30, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x50ea0e30, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x50ea0e30, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x381fc0 [0114.735] FindClose (in: hFindFile=0x381fc0 | out: hFindFile=0x381fc0) returned 1 [0114.735] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e77c) returned 1 [0114.735] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e788) returned 1 [0114.735] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e7bc) returned 1 [0114.735] GetFullPathNameW (in: lpFileName="C:\\Windows\\PCHEALTH\\ERRORREP\\QSIGNOFF", nBufferLength=0x105, lpBuffer=0x31e2c4, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\PCHEALTH\\ERRORREP\\QSIGNOFF", lpFilePart=0x0) returned 0x25 [0114.735] GetFullPathNameW (in: lpFileName="C:\\Windows\\PCHEALTH\\ERRORREP\\QSIGNOFF\\", nBufferLength=0x105, lpBuffer=0x31e298, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\PCHEALTH\\ERRORREP\\QSIGNOFF\\", lpFilePart=0x0) returned 0x26 [0114.735] FindFirstFileW (in: lpFileName="C:\\Windows\\PCHEALTH\\ERRORREP\\QSIGNOFF\\*", lpFindFileData=0x31e4e4 | out: lpFindFileData=0x31e4e4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x50ea0e30, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x50ea0e30, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x50ea0e30, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x381fc0 [0114.735] FindClose (in: hFindFile=0x381fc0 | out: hFindFile=0x381fc0) returned 1 [0114.735] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e77c) returned 1 [0114.735] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e788) returned 1 [0114.735] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e7bc) returned 1 [0114.736] GetFullPathNameW (in: lpFileName="C:\\Windows\\PCHEALTH\\ERRORREP\\QSIGNOFF", nBufferLength=0x105, lpBuffer=0x31e2c4, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\PCHEALTH\\ERRORREP\\QSIGNOFF", lpFilePart=0x0) returned 0x25 [0114.736] GetFullPathNameW (in: lpFileName="C:\\Windows\\PCHEALTH\\ERRORREP\\QSIGNOFF\\", nBufferLength=0x105, lpBuffer=0x31e298, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\PCHEALTH\\ERRORREP\\QSIGNOFF\\", lpFilePart=0x0) returned 0x26 [0114.736] FindFirstFileW (in: lpFileName="C:\\Windows\\PCHEALTH\\ERRORREP\\QSIGNOFF\\*", lpFindFileData=0x31e4e4 | out: lpFindFileData=0x31e4e4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x50ea0e30, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x50ea0e30, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x50ea0e30, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x381fc0 [0114.736] FindClose (in: hFindFile=0x381fc0 | out: hFindFile=0x381fc0) returned 1 [0114.736] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e77c) returned 1 [0114.736] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e788) returned 1 [0114.736] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e8ac) returned 1 [0114.736] GetFullPathNameW (in: lpFileName="C:\\Windows\\Performance", nBufferLength=0x105, lpBuffer=0x31e3b4, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\Performance", lpFilePart=0x0) returned 0x16 [0114.736] GetFullPathNameW (in: lpFileName="C:\\Windows\\Performance\\", nBufferLength=0x105, lpBuffer=0x31e388, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\Performance\\", lpFilePart=0x0) returned 0x17 [0114.736] FindFirstFileW (in: lpFileName="C:\\Windows\\Performance\\*", lpFindFileData=0x31e5d4 | out: lpFindFileData=0x31e5d4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x80046d91, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x80046d91, ftLastAccessTime.dwHighDateTime=0x1ca0444, ftLastWriteTime.dwLowDateTime=0x80046d91, ftLastWriteTime.dwHighDateTime=0x1ca0444, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x381fc0 [0114.736] FindClose (in: hFindFile=0x381fc0 | out: hFindFile=0x381fc0) returned 1 [0114.736] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e86c) returned 1 [0114.736] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e878) returned 1 [0114.736] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e8ac) returned 1 [0114.736] GetFullPathNameW (in: lpFileName="C:\\Windows\\Performance", nBufferLength=0x105, lpBuffer=0x31e3b4, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\Performance", lpFilePart=0x0) returned 0x16 [0114.736] GetFullPathNameW (in: lpFileName="C:\\Windows\\Performance\\", nBufferLength=0x105, lpBuffer=0x31e388, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\Performance\\", lpFilePart=0x0) returned 0x17 [0114.736] FindFirstFileW (in: lpFileName="C:\\Windows\\Performance\\*", lpFindFileData=0x31e5d4 | out: lpFindFileData=0x31e5d4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x80046d91, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x80046d91, ftLastAccessTime.dwHighDateTime=0x1ca0444, ftLastWriteTime.dwLowDateTime=0x80046d91, ftLastWriteTime.dwHighDateTime=0x1ca0444, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x381fc0 [0114.737] FindClose (in: hFindFile=0x381fc0 | out: hFindFile=0x381fc0) returned 1 [0114.737] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e86c) returned 1 [0114.737] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e878) returned 1 [0114.737] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e834) returned 1 [0114.737] GetFullPathNameW (in: lpFileName="C:\\Windows\\Performance\\WinSAT", nBufferLength=0x105, lpBuffer=0x31e33c, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\Performance\\WinSAT", lpFilePart=0x0) returned 0x1d [0114.737] GetFullPathNameW (in: lpFileName="C:\\Windows\\Performance\\WinSAT\\", nBufferLength=0x105, lpBuffer=0x31e310, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\Performance\\WinSAT\\", lpFilePart=0x0) returned 0x1e [0114.737] FindFirstFileW (in: lpFileName="C:\\Windows\\Performance\\WinSAT\\*", lpFindFileData=0x31e55c | out: lpFindFileData=0x31e55c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x80046d91, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x20ab1416, ftLastAccessTime.dwHighDateTime=0x1ca0441, ftLastWriteTime.dwLowDateTime=0x20ab1416, ftLastWriteTime.dwHighDateTime=0x1ca0441, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x381fc0 [0114.737] FindClose (in: hFindFile=0x381fc0 | out: hFindFile=0x381fc0) returned 1 [0114.737] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e7f4) returned 1 [0114.737] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e800) returned 1 [0114.737] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e834) returned 1 [0114.737] GetFullPathNameW (in: lpFileName="C:\\Windows\\Performance\\WinSAT", nBufferLength=0x105, lpBuffer=0x31e33c, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\Performance\\WinSAT", lpFilePart=0x0) returned 0x1d [0114.737] GetFullPathNameW (in: lpFileName="C:\\Windows\\Performance\\WinSAT\\", nBufferLength=0x105, lpBuffer=0x31e310, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\Performance\\WinSAT\\", lpFilePart=0x0) returned 0x1e [0114.737] FindFirstFileW (in: lpFileName="C:\\Windows\\Performance\\WinSAT\\*", lpFindFileData=0x31e55c | out: lpFindFileData=0x31e55c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x80046d91, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x20ab1416, ftLastAccessTime.dwHighDateTime=0x1ca0441, ftLastWriteTime.dwLowDateTime=0x20ab1416, ftLastWriteTime.dwHighDateTime=0x1ca0441, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x381fc0 [0114.737] FindClose (in: hFindFile=0x381fc0 | out: hFindFile=0x381fc0) returned 1 [0114.737] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e7f4) returned 1 [0114.737] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e800) returned 1 [0114.737] GetFullPathNameW (in: lpFileName="C:\\Windows\\Performance\\WinSAT\\Clip_1080_5sec_10mbps_h264.mp4", nBufferLength=0x105, lpBuffer=0x31e20c, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\Performance\\WinSAT\\Clip_1080_5sec_10mbps_h264.mp4", lpFilePart=0x0) returned 0x3c [0114.738] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e700) returned 1 [0114.738] CreateFileW (lpFileName="C:\\Windows\\Performance\\WinSAT\\Clip_1080_5sec_10mbps_h264.mp4" (normalized: "c:\\windows\\performance\\winsat\\clip_1080_5sec_10mbps_h264.mp4"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x178 [0114.738] GetFileType (hFile=0x178) returned 0x1 [0114.738] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e6fc) returned 1 [0114.738] GetFileType (hFile=0x178) returned 0x1 [0114.739] GetFileSize (in: hFile=0x178, lpFileSizeHigh=0x31e808 | out: lpFileSizeHigh=0x31e808*=0x0) returned 0x5e96c6 [0114.739] ReadFile (in: hFile=0x178, lpBuffer=0x3632190, nNumberOfBytesToRead=0x5e96c6, lpNumberOfBytesRead=0x31e7b4, lpOverlapped=0x0 | out: lpBuffer=0x3632190*, lpNumberOfBytesRead=0x31e7b4*=0x5e96c6, lpOverlapped=0x0) returned 1 [0115.436] GetFullPathNameW (in: lpFileName="C:\\Windows\\Performance\\WinSAT\\Clip_1080_5sec_10mbps_h264.mp4", nBufferLength=0x105, lpBuffer=0x31e1f8, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\Performance\\WinSAT\\Clip_1080_5sec_10mbps_h264.mp4", lpFilePart=0x0) returned 0x3c [0115.436] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e6ec) returned 1 [0115.436] CreateFileW (lpFileName="C:\\Windows\\Performance\\WinSAT\\Clip_1080_5sec_10mbps_h264.mp4" (normalized: "c:\\windows\\performance\\winsat\\clip_1080_5sec_10mbps_h264.mp4"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0xffffffff [0115.437] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31d528) returned 1 [0115.437] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e8ac) returned 1 [0115.438] GetFullPathNameW (in: lpFileName="C:\\Windows\\PLA", nBufferLength=0x105, lpBuffer=0x31e3b4, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\PLA", lpFilePart=0x0) returned 0xe [0115.438] GetFullPathNameW (in: lpFileName="C:\\Windows\\PLA\\", nBufferLength=0x105, lpBuffer=0x31e388, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\PLA\\", lpFilePart=0x0) returned 0xf [0115.438] FindFirstFileW (in: lpFileName="C:\\Windows\\PLA\\*", lpFindFileData=0x31e5d4 | out: lpFindFileData=0x31e5d4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfea8540c, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfeaf781a, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xfeaf781a, ftLastWriteTime.dwHighDateTime=0x1ca0431, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x381b40 [0115.439] FindClose (in: hFindFile=0x381b40 | out: hFindFile=0x381b40) returned 1 [0115.439] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e86c) returned 1 [0115.439] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e878) returned 1 [0115.440] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e8ac) returned 1 [0115.440] GetFullPathNameW (in: lpFileName="C:\\Windows\\PLA", nBufferLength=0x105, lpBuffer=0x31e3b4, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\PLA", lpFilePart=0x0) returned 0xe [0115.440] GetFullPathNameW (in: lpFileName="C:\\Windows\\PLA\\", nBufferLength=0x105, lpBuffer=0x31e388, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\PLA\\", lpFilePart=0x0) returned 0xf [0115.440] FindFirstFileW (in: lpFileName="C:\\Windows\\PLA\\*", lpFindFileData=0x31e5d4 | out: lpFindFileData=0x31e5d4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfea8540c, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfeaf781a, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xfeaf781a, ftLastWriteTime.dwHighDateTime=0x1ca0431, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x381b40 [0115.441] FindClose (in: hFindFile=0x381b40 | out: hFindFile=0x381b40) returned 1 [0115.441] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e86c) returned 1 [0115.441] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e878) returned 1 [0115.441] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e834) returned 1 [0115.441] GetFullPathNameW (in: lpFileName="C:\\Windows\\PLA\\Reports", nBufferLength=0x105, lpBuffer=0x31e33c, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\PLA\\Reports", lpFilePart=0x0) returned 0x16 [0115.441] GetFullPathNameW (in: lpFileName="C:\\Windows\\PLA\\Reports\\", nBufferLength=0x105, lpBuffer=0x31e310, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\PLA\\Reports\\", lpFilePart=0x0) returned 0x17 [0115.441] FindFirstFileW (in: lpFileName="C:\\Windows\\PLA\\Reports\\*", lpFindFileData=0x31e55c | out: lpFindFileData=0x31e55c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfea8540c, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x1da26978, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x1da26978, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x381b40 [0115.444] FindClose (in: hFindFile=0x381b40 | out: hFindFile=0x381b40) returned 1 [0115.444] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e7f4) returned 1 [0115.444] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e800) returned 1 [0115.444] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e834) returned 1 [0115.444] GetFullPathNameW (in: lpFileName="C:\\Windows\\PLA\\Reports", nBufferLength=0x105, lpBuffer=0x31e33c, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\PLA\\Reports", lpFilePart=0x0) returned 0x16 [0115.444] GetFullPathNameW (in: lpFileName="C:\\Windows\\PLA\\Reports\\", nBufferLength=0x105, lpBuffer=0x31e310, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\PLA\\Reports\\", lpFilePart=0x0) returned 0x17 [0115.445] FindFirstFileW (in: lpFileName="C:\\Windows\\PLA\\Reports\\*", lpFindFileData=0x31e55c | out: lpFindFileData=0x31e55c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfea8540c, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x1da26978, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x1da26978, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x381b40 [0115.447] FindClose (in: hFindFile=0x381b40 | out: hFindFile=0x381b40) returned 1 [0115.448] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e7f4) returned 1 [0115.448] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e800) returned 1 [0115.448] GetFullPathNameW (in: lpFileName="C:\\Windows\\PLA\\Reports\\Report.System.Common.xml", nBufferLength=0x105, lpBuffer=0x31e20c, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\PLA\\Reports\\Report.System.Common.xml", lpFilePart=0x0) returned 0x2f [0115.448] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e700) returned 1 [0115.448] CreateFileW (lpFileName="C:\\Windows\\PLA\\Reports\\Report.System.Common.xml" (normalized: "c:\\windows\\pla\\reports\\report.system.common.xml"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x178 [0115.449] GetFileType (hFile=0x178) returned 0x1 [0115.449] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e6fc) returned 1 [0115.449] GetFileType (hFile=0x178) returned 0x1 [0115.449] GetFileSize (in: hFile=0x178, lpFileSizeHigh=0x31e808 | out: lpFileSizeHigh=0x31e808*=0x0) returned 0x787 [0115.449] ReadFile (in: hFile=0x178, lpBuffer=0x265ac4c, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x31e7b4, lpOverlapped=0x0 | out: lpBuffer=0x265ac4c*, lpNumberOfBytesRead=0x31e7b4*=0x787, lpOverlapped=0x0) returned 1 [0115.483] CloseHandle (hObject=0x178) returned 1 [0115.523] GetFullPathNameW (in: lpFileName="C:\\Windows\\PLA\\Reports\\Report.System.Common.xml", nBufferLength=0x105, lpBuffer=0x31e1f8, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\PLA\\Reports\\Report.System.Common.xml", lpFilePart=0x0) returned 0x2f [0115.523] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e6ec) returned 1 [0115.523] CreateFileW (lpFileName="C:\\Windows\\PLA\\Reports\\Report.System.Common.xml" (normalized: "c:\\windows\\pla\\reports\\report.system.common.xml"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0xffffffff [0115.525] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31d528) returned 1 [0115.525] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e834) returned 1 [0115.525] GetFullPathNameW (in: lpFileName="C:\\Windows\\PLA\\Rules", nBufferLength=0x105, lpBuffer=0x31e33c, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\PLA\\Rules", lpFilePart=0x0) returned 0x14 [0115.525] GetFullPathNameW (in: lpFileName="C:\\Windows\\PLA\\Rules\\", nBufferLength=0x105, lpBuffer=0x31e310, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\PLA\\Rules\\", lpFilePart=0x0) returned 0x15 [0115.525] FindFirstFileW (in: lpFileName="C:\\Windows\\PLA\\Rules\\*", lpFindFileData=0x31e55c | out: lpFindFileData=0x31e55c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfeaab566, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x1da26978, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x1da26978, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x381b80 [0115.527] FindNextFileW (in: hFindFile=0x381b80, lpFindFileData=0x31e56c | out: lpFindFileData=0x31e56c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfeaab566, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x1da26978, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x1da26978, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0115.527] FindNextFileW (in: hFindFile=0x381b80, lpFindFileData=0x31e56c | out: lpFindFileData=0x31e56c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1da26978, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x21ca67c6, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x1da26978, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="en-US", cAlternateFileName="")) returned 1 [0115.527] FindNextFileW (in: hFindFile=0x381b80, lpFindFileData=0x31e56c | out: lpFindFileData=0x31e56c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd9bd44cf, ftCreationTime.dwHighDateTime=0x1ca03fe, ftLastAccessTime.dwLowDateTime=0xd9bd44cf, ftLastAccessTime.dwHighDateTime=0x1ca03fe, ftLastWriteTime.dwLowDateTime=0xc230085b, ftLastWriteTime.dwHighDateTime=0x1c9ea0c, nFileSizeHigh=0x0, nFileSizeLow=0xbf3, dwReserved0=0x0, dwReserved1=0x0, cFileName="Rules.System.Common.xml", cAlternateFileName="")) returned 1 [0115.527] FindNextFileW (in: hFindFile=0x381b80, lpFindFileData=0x31e56c | out: lpFindFileData=0x31e56c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd9bd44cf, ftCreationTime.dwHighDateTime=0x1ca03fe, ftLastAccessTime.dwLowDateTime=0xd9bd44cf, ftLastAccessTime.dwHighDateTime=0x1ca03fe, ftLastWriteTime.dwLowDateTime=0xc23269b9, ftLastWriteTime.dwHighDateTime=0x1c9ea0c, nFileSizeHigh=0x0, nFileSizeLow=0x4642c, dwReserved0=0x0, dwReserved1=0x0, cFileName="Rules.System.Configuration.xml", cAlternateFileName="")) returned 1 [0115.527] FindNextFileW (in: hFindFile=0x381b80, lpFindFileData=0x31e56c | out: lpFindFileData=0x31e56c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd9bfa62c, ftCreationTime.dwHighDateTime=0x1ca03fe, ftLastAccessTime.dwLowDateTime=0xd9bfa62c, ftLastAccessTime.dwHighDateTime=0x1ca03fe, ftLastWriteTime.dwLowDateTime=0xc234cb17, ftLastWriteTime.dwHighDateTime=0x1c9ea0c, nFileSizeHigh=0x0, nFileSizeLow=0x233b, dwReserved0=0x0, dwReserved1=0x0, cFileName="Rules.System.CPU.xml", cAlternateFileName="")) returned 1 [0115.527] FindNextFileW (in: hFindFile=0x381b80, lpFindFileData=0x31e56c | out: lpFindFileData=0x31e56c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd9bae372, ftCreationTime.dwHighDateTime=0x1ca03fe, ftLastAccessTime.dwLowDateTime=0xd9bae372, ftLastAccessTime.dwHighDateTime=0x1ca03fe, ftLastWriteTime.dwLowDateTime=0xc2372c75, ftLastWriteTime.dwHighDateTime=0x1c9ea0c, nFileSizeHigh=0x0, nFileSizeLow=0x2b2fb, dwReserved0=0x0, dwReserved1=0x0, cFileName="Rules.System.Diagnostics.xml", cAlternateFileName="")) returned 1 [0115.527] FindNextFileW (in: hFindFile=0x381b80, lpFindFileData=0x31e56c | out: lpFindFileData=0x31e56c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd9bfa62c, ftCreationTime.dwHighDateTime=0x1ca03fe, ftLastAccessTime.dwLowDateTime=0xd9bfa62c, ftLastAccessTime.dwHighDateTime=0x1ca03fe, ftLastWriteTime.dwLowDateTime=0xc2372c75, ftLastWriteTime.dwHighDateTime=0x1c9ea0c, nFileSizeHigh=0x0, nFileSizeLow=0x191d, dwReserved0=0x0, dwReserved1=0x0, cFileName="Rules.System.Disk.xml", cAlternateFileName="")) returned 1 [0115.528] FindNextFileW (in: hFindFile=0x381b80, lpFindFileData=0x31e56c | out: lpFindFileData=0x31e56c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd9bfa62c, ftCreationTime.dwHighDateTime=0x1ca03fe, ftLastAccessTime.dwLowDateTime=0xd9bfa62c, ftLastAccessTime.dwHighDateTime=0x1ca03fe, ftLastWriteTime.dwLowDateTime=0xc2398dd3, ftLastWriteTime.dwHighDateTime=0x1c9ea0c, nFileSizeHigh=0x0, nFileSizeLow=0x1bd9, dwReserved0=0x0, dwReserved1=0x0, cFileName="Rules.System.Finale.xml", cAlternateFileName="")) returned 1 [0115.528] FindNextFileW (in: hFindFile=0x381b80, lpFindFileData=0x31e56c | out: lpFindFileData=0x31e56c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd9bfa62c, ftCreationTime.dwHighDateTime=0x1ca03fe, ftLastAccessTime.dwLowDateTime=0xd9bfa62c, ftLastAccessTime.dwHighDateTime=0x1ca03fe, ftLastWriteTime.dwLowDateTime=0xc2398dd3, ftLastWriteTime.dwHighDateTime=0x1c9ea0c, nFileSizeHigh=0x0, nFileSizeLow=0x3273, dwReserved0=0x0, dwReserved1=0x0, cFileName="Rules.System.Memory.xml", cAlternateFileName="")) returned 1 [0115.528] FindNextFileW (in: hFindFile=0x381b80, lpFindFileData=0x31e56c | out: lpFindFileData=0x31e56c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4f54b41c, ftCreationTime.dwHighDateTime=0x1ca0405, ftLastAccessTime.dwLowDateTime=0x4f54b41c, ftLastAccessTime.dwHighDateTime=0x1ca0405, ftLastWriteTime.dwLowDateTime=0x4a04f96b, ftLastWriteTime.dwHighDateTime=0x1c9ea0b, nFileSizeHigh=0x0, nFileSizeLow=0xdfc6, dwReserved0=0x0, dwReserved1=0x0, cFileName="Rules.System.NetDiagFramework.xml", cAlternateFileName="")) returned 1 [0115.528] FindNextFileW (in: hFindFile=0x381b80, lpFindFileData=0x31e56c | out: lpFindFileData=0x31e56c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x72a06b20, ftCreationTime.dwHighDateTime=0x1ca0405, ftLastAccessTime.dwLowDateTime=0x72a06b20, ftLastAccessTime.dwHighDateTime=0x1ca0405, ftLastWriteTime.dwLowDateTime=0x1f7627cd, ftLastWriteTime.dwHighDateTime=0x1c9ea0b, nFileSizeHigh=0x0, nFileSizeLow=0x189, dwReserved0=0x0, dwReserved1=0x0, cFileName="Rules.System.NetTrace.xml", cAlternateFileName="")) returned 1 [0115.528] FindNextFileW (in: hFindFile=0x381b80, lpFindFileData=0x31e56c | out: lpFindFileData=0x31e56c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd9c20789, ftCreationTime.dwHighDateTime=0x1ca03fe, ftLastAccessTime.dwLowDateTime=0xd9c20789, ftLastAccessTime.dwHighDateTime=0x1ca03fe, ftLastWriteTime.dwLowDateTime=0xc23bef31, ftLastWriteTime.dwHighDateTime=0x1c9ea0c, nFileSizeHigh=0x0, nFileSizeLow=0xd82, dwReserved0=0x0, dwReserved1=0x0, cFileName="Rules.System.Network.xml", cAlternateFileName="")) returned 1 [0115.528] FindNextFileW (in: hFindFile=0x381b80, lpFindFileData=0x31e56c | out: lpFindFileData=0x31e56c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd9c20789, ftCreationTime.dwHighDateTime=0x1ca03fe, ftLastAccessTime.dwLowDateTime=0xd9c20789, ftLastAccessTime.dwHighDateTime=0x1ca03fe, ftLastWriteTime.dwLowDateTime=0xc240b1ed, ftLastWriteTime.dwHighDateTime=0x1c9ea0c, nFileSizeHigh=0x0, nFileSizeLow=0xd6a, dwReserved0=0x0, dwReserved1=0x0, cFileName="Rules.System.Performance.xml", cAlternateFileName="")) returned 1 [0115.528] FindNextFileW (in: hFindFile=0x381b80, lpFindFileData=0x31e56c | out: lpFindFileData=0x31e56c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd9c20789, ftCreationTime.dwHighDateTime=0x1ca03fe, ftLastAccessTime.dwLowDateTime=0xd9c20789, ftLastAccessTime.dwHighDateTime=0x1ca03fe, ftLastWriteTime.dwLowDateTime=0xc24c98c3, ftLastWriteTime.dwHighDateTime=0x1c9ea0c, nFileSizeHigh=0x0, nFileSizeLow=0x4879, dwReserved0=0x0, dwReserved1=0x0, cFileName="Rules.System.Summary.xml", cAlternateFileName="")) returned 1 [0115.528] FindNextFileW (in: hFindFile=0x381b80, lpFindFileData=0x31e56c | out: lpFindFileData=0x31e56c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4f571579, ftCreationTime.dwHighDateTime=0x1ca0405, ftLastAccessTime.dwLowDateTime=0x4f571579, ftLastAccessTime.dwHighDateTime=0x1ca0405, ftLastWriteTime.dwLowDateTime=0x4a0e7ee3, ftLastWriteTime.dwHighDateTime=0x1c9ea0b, nFileSizeHigh=0x0, nFileSizeLow=0x9fc6, dwReserved0=0x0, dwReserved1=0x0, cFileName="Rules.System.Wired.xml", cAlternateFileName="")) returned 1 [0115.528] FindNextFileW (in: hFindFile=0x381b80, lpFindFileData=0x31e56c | out: lpFindFileData=0x31e56c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x47e4717c, ftCreationTime.dwHighDateTime=0x1ca0405, ftLastAccessTime.dwLowDateTime=0x47e4717c, ftLastAccessTime.dwHighDateTime=0x1ca0405, ftLastWriteTime.dwLowDateTime=0xda16f635, ftLastWriteTime.dwHighDateTime=0x1c9ea0e, nFileSizeHigh=0x0, nFileSizeLow=0x270b4, dwReserved0=0x0, dwReserved1=0x0, cFileName="Rules.System.Wireless.xml", cAlternateFileName="")) returned 1 [0115.529] FindNextFileW (in: hFindFile=0x381b80, lpFindFileData=0x31e56c | out: lpFindFileData=0x31e56c*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0115.529] FindClose (in: hFindFile=0x381b80 | out: hFindFile=0x381b80) returned 1 [0115.529] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e7f4) returned 1 [0115.529] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e800) returned 1 [0115.529] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e834) returned 1 [0115.529] GetFullPathNameW (in: lpFileName="C:\\Windows\\PLA\\Rules", nBufferLength=0x105, lpBuffer=0x31e33c, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\PLA\\Rules", lpFilePart=0x0) returned 0x14 [0115.530] GetFullPathNameW (in: lpFileName="C:\\Windows\\PLA\\Rules\\", nBufferLength=0x105, lpBuffer=0x31e310, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\PLA\\Rules\\", lpFilePart=0x0) returned 0x15 [0115.530] FindFirstFileW (in: lpFileName="C:\\Windows\\PLA\\Rules\\*", lpFindFileData=0x31e55c | out: lpFindFileData=0x31e55c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfeaab566, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x1da26978, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x1da26978, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x381b80 [0115.531] FindNextFileW (in: hFindFile=0x381b80, lpFindFileData=0x31e56c | out: lpFindFileData=0x31e56c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfeaab566, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x1da26978, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x1da26978, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0115.531] FindNextFileW (in: hFindFile=0x381b80, lpFindFileData=0x31e56c | out: lpFindFileData=0x31e56c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1da26978, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x21ca67c6, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x1da26978, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="en-US", cAlternateFileName="")) returned 1 [0115.531] FindNextFileW (in: hFindFile=0x381b80, lpFindFileData=0x31e56c | out: lpFindFileData=0x31e56c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd9bd44cf, ftCreationTime.dwHighDateTime=0x1ca03fe, ftLastAccessTime.dwLowDateTime=0xd9bd44cf, ftLastAccessTime.dwHighDateTime=0x1ca03fe, ftLastWriteTime.dwLowDateTime=0xc230085b, ftLastWriteTime.dwHighDateTime=0x1c9ea0c, nFileSizeHigh=0x0, nFileSizeLow=0xbf3, dwReserved0=0x0, dwReserved1=0x0, cFileName="Rules.System.Common.xml", cAlternateFileName="")) returned 1 [0115.531] FindNextFileW (in: hFindFile=0x381b80, lpFindFileData=0x31e56c | out: lpFindFileData=0x31e56c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd9bd44cf, ftCreationTime.dwHighDateTime=0x1ca03fe, ftLastAccessTime.dwLowDateTime=0xd9bd44cf, ftLastAccessTime.dwHighDateTime=0x1ca03fe, ftLastWriteTime.dwLowDateTime=0xc23269b9, ftLastWriteTime.dwHighDateTime=0x1c9ea0c, nFileSizeHigh=0x0, nFileSizeLow=0x4642c, dwReserved0=0x0, dwReserved1=0x0, cFileName="Rules.System.Configuration.xml", cAlternateFileName="")) returned 1 [0115.531] FindNextFileW (in: hFindFile=0x381b80, lpFindFileData=0x31e56c | out: lpFindFileData=0x31e56c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd9bfa62c, ftCreationTime.dwHighDateTime=0x1ca03fe, ftLastAccessTime.dwLowDateTime=0xd9bfa62c, ftLastAccessTime.dwHighDateTime=0x1ca03fe, ftLastWriteTime.dwLowDateTime=0xc234cb17, ftLastWriteTime.dwHighDateTime=0x1c9ea0c, nFileSizeHigh=0x0, nFileSizeLow=0x233b, dwReserved0=0x0, dwReserved1=0x0, cFileName="Rules.System.CPU.xml", cAlternateFileName="")) returned 1 [0115.531] FindNextFileW (in: hFindFile=0x381b80, lpFindFileData=0x31e56c | out: lpFindFileData=0x31e56c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd9bae372, ftCreationTime.dwHighDateTime=0x1ca03fe, ftLastAccessTime.dwLowDateTime=0xd9bae372, ftLastAccessTime.dwHighDateTime=0x1ca03fe, ftLastWriteTime.dwLowDateTime=0xc2372c75, ftLastWriteTime.dwHighDateTime=0x1c9ea0c, nFileSizeHigh=0x0, nFileSizeLow=0x2b2fb, dwReserved0=0x0, dwReserved1=0x0, cFileName="Rules.System.Diagnostics.xml", cAlternateFileName="")) returned 1 [0115.531] FindNextFileW (in: hFindFile=0x381b80, lpFindFileData=0x31e56c | out: lpFindFileData=0x31e56c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd9bfa62c, ftCreationTime.dwHighDateTime=0x1ca03fe, ftLastAccessTime.dwLowDateTime=0xd9bfa62c, ftLastAccessTime.dwHighDateTime=0x1ca03fe, ftLastWriteTime.dwLowDateTime=0xc2372c75, ftLastWriteTime.dwHighDateTime=0x1c9ea0c, nFileSizeHigh=0x0, nFileSizeLow=0x191d, dwReserved0=0x0, dwReserved1=0x0, cFileName="Rules.System.Disk.xml", cAlternateFileName="")) returned 1 [0115.531] FindNextFileW (in: hFindFile=0x381b80, lpFindFileData=0x31e56c | out: lpFindFileData=0x31e56c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd9bfa62c, ftCreationTime.dwHighDateTime=0x1ca03fe, ftLastAccessTime.dwLowDateTime=0xd9bfa62c, ftLastAccessTime.dwHighDateTime=0x1ca03fe, ftLastWriteTime.dwLowDateTime=0xc2398dd3, ftLastWriteTime.dwHighDateTime=0x1c9ea0c, nFileSizeHigh=0x0, nFileSizeLow=0x1bd9, dwReserved0=0x0, dwReserved1=0x0, cFileName="Rules.System.Finale.xml", cAlternateFileName="")) returned 1 [0115.532] FindNextFileW (in: hFindFile=0x381b80, lpFindFileData=0x31e56c | out: lpFindFileData=0x31e56c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd9bfa62c, ftCreationTime.dwHighDateTime=0x1ca03fe, ftLastAccessTime.dwLowDateTime=0xd9bfa62c, ftLastAccessTime.dwHighDateTime=0x1ca03fe, ftLastWriteTime.dwLowDateTime=0xc2398dd3, ftLastWriteTime.dwHighDateTime=0x1c9ea0c, nFileSizeHigh=0x0, nFileSizeLow=0x3273, dwReserved0=0x0, dwReserved1=0x0, cFileName="Rules.System.Memory.xml", cAlternateFileName="")) returned 1 [0115.532] FindNextFileW (in: hFindFile=0x381b80, lpFindFileData=0x31e56c | out: lpFindFileData=0x31e56c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4f54b41c, ftCreationTime.dwHighDateTime=0x1ca0405, ftLastAccessTime.dwLowDateTime=0x4f54b41c, ftLastAccessTime.dwHighDateTime=0x1ca0405, ftLastWriteTime.dwLowDateTime=0x4a04f96b, ftLastWriteTime.dwHighDateTime=0x1c9ea0b, nFileSizeHigh=0x0, nFileSizeLow=0xdfc6, dwReserved0=0x0, dwReserved1=0x0, cFileName="Rules.System.NetDiagFramework.xml", cAlternateFileName="")) returned 1 [0115.532] FindNextFileW (in: hFindFile=0x381b80, lpFindFileData=0x31e56c | out: lpFindFileData=0x31e56c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x72a06b20, ftCreationTime.dwHighDateTime=0x1ca0405, ftLastAccessTime.dwLowDateTime=0x72a06b20, ftLastAccessTime.dwHighDateTime=0x1ca0405, ftLastWriteTime.dwLowDateTime=0x1f7627cd, ftLastWriteTime.dwHighDateTime=0x1c9ea0b, nFileSizeHigh=0x0, nFileSizeLow=0x189, dwReserved0=0x0, dwReserved1=0x0, cFileName="Rules.System.NetTrace.xml", cAlternateFileName="")) returned 1 [0115.532] FindNextFileW (in: hFindFile=0x381b80, lpFindFileData=0x31e56c | out: lpFindFileData=0x31e56c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd9c20789, ftCreationTime.dwHighDateTime=0x1ca03fe, ftLastAccessTime.dwLowDateTime=0xd9c20789, ftLastAccessTime.dwHighDateTime=0x1ca03fe, ftLastWriteTime.dwLowDateTime=0xc23bef31, ftLastWriteTime.dwHighDateTime=0x1c9ea0c, nFileSizeHigh=0x0, nFileSizeLow=0xd82, dwReserved0=0x0, dwReserved1=0x0, cFileName="Rules.System.Network.xml", cAlternateFileName="")) returned 1 [0115.532] FindNextFileW (in: hFindFile=0x381b80, lpFindFileData=0x31e56c | out: lpFindFileData=0x31e56c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd9c20789, ftCreationTime.dwHighDateTime=0x1ca03fe, ftLastAccessTime.dwLowDateTime=0xd9c20789, ftLastAccessTime.dwHighDateTime=0x1ca03fe, ftLastWriteTime.dwLowDateTime=0xc240b1ed, ftLastWriteTime.dwHighDateTime=0x1c9ea0c, nFileSizeHigh=0x0, nFileSizeLow=0xd6a, dwReserved0=0x0, dwReserved1=0x0, cFileName="Rules.System.Performance.xml", cAlternateFileName="")) returned 1 [0115.532] FindNextFileW (in: hFindFile=0x381b80, lpFindFileData=0x31e56c | out: lpFindFileData=0x31e56c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd9c20789, ftCreationTime.dwHighDateTime=0x1ca03fe, ftLastAccessTime.dwLowDateTime=0xd9c20789, ftLastAccessTime.dwHighDateTime=0x1ca03fe, ftLastWriteTime.dwLowDateTime=0xc24c98c3, ftLastWriteTime.dwHighDateTime=0x1c9ea0c, nFileSizeHigh=0x0, nFileSizeLow=0x4879, dwReserved0=0x0, dwReserved1=0x0, cFileName="Rules.System.Summary.xml", cAlternateFileName="")) returned 1 [0115.532] FindNextFileW (in: hFindFile=0x381b80, lpFindFileData=0x31e56c | out: lpFindFileData=0x31e56c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4f571579, ftCreationTime.dwHighDateTime=0x1ca0405, ftLastAccessTime.dwLowDateTime=0x4f571579, ftLastAccessTime.dwHighDateTime=0x1ca0405, ftLastWriteTime.dwLowDateTime=0x4a0e7ee3, ftLastWriteTime.dwHighDateTime=0x1c9ea0b, nFileSizeHigh=0x0, nFileSizeLow=0x9fc6, dwReserved0=0x0, dwReserved1=0x0, cFileName="Rules.System.Wired.xml", cAlternateFileName="")) returned 1 [0115.533] FindNextFileW (in: hFindFile=0x381b80, lpFindFileData=0x31e56c | out: lpFindFileData=0x31e56c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x47e4717c, ftCreationTime.dwHighDateTime=0x1ca0405, ftLastAccessTime.dwLowDateTime=0x47e4717c, ftLastAccessTime.dwHighDateTime=0x1ca0405, ftLastWriteTime.dwLowDateTime=0xda16f635, ftLastWriteTime.dwHighDateTime=0x1c9ea0e, nFileSizeHigh=0x0, nFileSizeLow=0x270b4, dwReserved0=0x0, dwReserved1=0x0, cFileName="Rules.System.Wireless.xml", cAlternateFileName="")) returned 1 [0115.533] FindNextFileW (in: hFindFile=0x381b80, lpFindFileData=0x31e56c | out: lpFindFileData=0x31e56c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x47e4717c, ftCreationTime.dwHighDateTime=0x1ca0405, ftLastAccessTime.dwLowDateTime=0x47e4717c, ftLastAccessTime.dwHighDateTime=0x1ca0405, ftLastWriteTime.dwLowDateTime=0xda16f635, ftLastWriteTime.dwHighDateTime=0x1c9ea0e, nFileSizeHigh=0x0, nFileSizeLow=0x270b4, dwReserved0=0x0, dwReserved1=0x0, cFileName="Rules.System.Wireless.xml", cAlternateFileName="")) returned 0 [0115.533] FindClose (in: hFindFile=0x381b80 | out: hFindFile=0x381b80) returned 1 [0115.534] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e7f4) returned 1 [0115.534] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e800) returned 1 [0115.534] GetFullPathNameW (in: lpFileName="C:\\Windows\\PLA\\Rules\\Rules.System.Common.xml", nBufferLength=0x105, lpBuffer=0x31e20c, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\PLA\\Rules\\Rules.System.Common.xml", lpFilePart=0x0) returned 0x2c [0115.534] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e700) returned 1 [0115.534] CreateFileW (lpFileName="C:\\Windows\\PLA\\Rules\\Rules.System.Common.xml" (normalized: "c:\\windows\\pla\\rules\\rules.system.common.xml"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x178 [0115.536] GetFileType (hFile=0x178) returned 0x1 [0115.536] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e6fc) returned 1 [0115.536] GetFileType (hFile=0x178) returned 0x1 [0115.536] GetFileSize (in: hFile=0x178, lpFileSizeHigh=0x31e808 | out: lpFileSizeHigh=0x31e808*=0x0) returned 0xbf3 [0115.536] ReadFile (in: hFile=0x178, lpBuffer=0x26b09cc, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x31e7b4, lpOverlapped=0x0 | out: lpBuffer=0x26b09cc*, lpNumberOfBytesRead=0x31e7b4*=0xbf3, lpOverlapped=0x0) returned 1 [0115.578] CloseHandle (hObject=0x178) returned 1 [0115.591] GetFullPathNameW (in: lpFileName="C:\\Windows\\PLA\\Rules\\Rules.System.Common.xml", nBufferLength=0x105, lpBuffer=0x31e1f8, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\PLA\\Rules\\Rules.System.Common.xml", lpFilePart=0x0) returned 0x2c [0115.591] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e6ec) returned 1 [0115.591] CreateFileW (lpFileName="C:\\Windows\\PLA\\Rules\\Rules.System.Common.xml" (normalized: "c:\\windows\\pla\\rules\\rules.system.common.xml"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0xffffffff [0115.592] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31d528) returned 1 [0115.592] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e834) returned 1 [0115.592] GetFullPathNameW (in: lpFileName="C:\\Windows\\PLA\\System", nBufferLength=0x105, lpBuffer=0x31e33c, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\PLA\\System", lpFilePart=0x0) returned 0x15 [0115.592] GetFullPathNameW (in: lpFileName="C:\\Windows\\PLA\\System\\", nBufferLength=0x105, lpBuffer=0x31e310, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\PLA\\System\\", lpFilePart=0x0) returned 0x16 [0115.592] FindFirstFileW (in: lpFileName="C:\\Windows\\PLA\\System\\*", lpFindFileData=0x31e55c | out: lpFindFileData=0x31e55c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfeaf781a, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xff1f57a0, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xff1f57a0, ftLastWriteTime.dwHighDateTime=0x1ca0431, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x381ec0 [0115.593] FindNextFileW (in: hFindFile=0x381ec0, lpFindFileData=0x31e56c | out: lpFindFileData=0x31e56c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfeaf781a, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xff1f57a0, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xff1f57a0, ftLastWriteTime.dwHighDateTime=0x1ca0431, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0115.593] FindNextFileW (in: hFindFile=0x381ec0, lpFindFileData=0x31e56c | out: lpFindFileData=0x31e56c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xbbf10a57, ftCreationTime.dwHighDateTime=0x1ca042b, ftLastAccessTime.dwLowDateTime=0xbbf10a57, ftLastAccessTime.dwHighDateTime=0x1ca042b, ftLastWriteTime.dwLowDateTime=0xc221c027, ftLastWriteTime.dwHighDateTime=0x1c9ea0c, nFileSizeHigh=0x0, nFileSizeLow=0x34e5, dwReserved0=0x0, dwReserved1=0x0, cFileName="System Diagnostics.xml", cAlternateFileName="SYSTEM~1.XML")) returned 1 [0115.594] FindNextFileW (in: hFindFile=0x381ec0, lpFindFileData=0x31e56c | out: lpFindFileData=0x31e56c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xbbeea8fa, ftCreationTime.dwHighDateTime=0x1ca042b, ftLastAccessTime.dwLowDateTime=0xbbeea8fa, ftLastAccessTime.dwHighDateTime=0x1ca042b, ftLastWriteTime.dwLowDateTime=0xc221c027, ftLastWriteTime.dwHighDateTime=0x1c9ea0c, nFileSizeHigh=0x0, nFileSizeLow=0x12e1, dwReserved0=0x0, dwReserved1=0x0, cFileName="System Performance.xml", cAlternateFileName="SYSTEM~2.XML")) returned 1 [0115.594] FindNextFileW (in: hFindFile=0x381ec0, lpFindFileData=0x31e56c | out: lpFindFileData=0x31e56c*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0115.594] FindClose (in: hFindFile=0x381ec0 | out: hFindFile=0x381ec0) returned 1 [0115.594] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e7f4) returned 1 [0115.594] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e800) returned 1 [0115.594] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e834) returned 1 [0115.594] GetFullPathNameW (in: lpFileName="C:\\Windows\\PLA\\System", nBufferLength=0x105, lpBuffer=0x31e33c, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\PLA\\System", lpFilePart=0x0) returned 0x15 [0115.594] GetFullPathNameW (in: lpFileName="C:\\Windows\\PLA\\System\\", nBufferLength=0x105, lpBuffer=0x31e310, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\PLA\\System\\", lpFilePart=0x0) returned 0x16 [0115.594] FindFirstFileW (in: lpFileName="C:\\Windows\\PLA\\System\\*", lpFindFileData=0x31e55c | out: lpFindFileData=0x31e55c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfeaf781a, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xff1f57a0, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xff1f57a0, ftLastWriteTime.dwHighDateTime=0x1ca0431, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x381ec0 [0115.594] FindNextFileW (in: hFindFile=0x381ec0, lpFindFileData=0x31e56c | out: lpFindFileData=0x31e56c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfeaf781a, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xff1f57a0, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xff1f57a0, ftLastWriteTime.dwHighDateTime=0x1ca0431, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0115.594] FindNextFileW (in: hFindFile=0x381ec0, lpFindFileData=0x31e56c | out: lpFindFileData=0x31e56c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xbbf10a57, ftCreationTime.dwHighDateTime=0x1ca042b, ftLastAccessTime.dwLowDateTime=0xbbf10a57, ftLastAccessTime.dwHighDateTime=0x1ca042b, ftLastWriteTime.dwLowDateTime=0xc221c027, ftLastWriteTime.dwHighDateTime=0x1c9ea0c, nFileSizeHigh=0x0, nFileSizeLow=0x34e5, dwReserved0=0x0, dwReserved1=0x0, cFileName="System Diagnostics.xml", cAlternateFileName="SYSTEM~1.XML")) returned 1 [0115.595] FindNextFileW (in: hFindFile=0x381ec0, lpFindFileData=0x31e56c | out: lpFindFileData=0x31e56c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xbbeea8fa, ftCreationTime.dwHighDateTime=0x1ca042b, ftLastAccessTime.dwLowDateTime=0xbbeea8fa, ftLastAccessTime.dwHighDateTime=0x1ca042b, ftLastWriteTime.dwLowDateTime=0xc221c027, ftLastWriteTime.dwHighDateTime=0x1c9ea0c, nFileSizeHigh=0x0, nFileSizeLow=0x12e1, dwReserved0=0x0, dwReserved1=0x0, cFileName="System Performance.xml", cAlternateFileName="SYSTEM~2.XML")) returned 1 [0115.595] FindNextFileW (in: hFindFile=0x381ec0, lpFindFileData=0x31e56c | out: lpFindFileData=0x31e56c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xbbeea8fa, ftCreationTime.dwHighDateTime=0x1ca042b, ftLastAccessTime.dwLowDateTime=0xbbeea8fa, ftLastAccessTime.dwHighDateTime=0x1ca042b, ftLastWriteTime.dwLowDateTime=0xc221c027, ftLastWriteTime.dwHighDateTime=0x1c9ea0c, nFileSizeHigh=0x0, nFileSizeLow=0x12e1, dwReserved0=0x0, dwReserved1=0x0, cFileName="System Performance.xml", cAlternateFileName="SYSTEM~2.XML")) returned 0 [0115.595] FindClose (in: hFindFile=0x381ec0 | out: hFindFile=0x381ec0) returned 1 [0115.595] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e7f4) returned 1 [0115.595] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e800) returned 1 [0115.595] GetFullPathNameW (in: lpFileName="C:\\Windows\\PLA\\System\\System Diagnostics.xml", nBufferLength=0x105, lpBuffer=0x31e20c, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\PLA\\System\\System Diagnostics.xml", lpFilePart=0x0) returned 0x2c [0115.595] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e700) returned 1 [0115.595] CreateFileW (lpFileName="C:\\Windows\\PLA\\System\\System Diagnostics.xml" (normalized: "c:\\windows\\pla\\system\\system diagnostics.xml"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x178 [0115.596] GetFileType (hFile=0x178) returned 0x1 [0115.596] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e6fc) returned 1 [0115.596] GetFileType (hFile=0x178) returned 0x1 [0115.596] GetFileSize (in: hFile=0x178, lpFileSizeHigh=0x31e808 | out: lpFileSizeHigh=0x31e808*=0x0) returned 0x34e5 [0115.596] ReadFile (in: hFile=0x178, lpBuffer=0x2703c90, nNumberOfBytesToRead=0x34e5, lpNumberOfBytesRead=0x31e7b4, lpOverlapped=0x0 | out: lpBuffer=0x2703c90*, lpNumberOfBytesRead=0x31e7b4*=0x34e5, lpOverlapped=0x0) returned 1 [0115.659] CloseHandle (hObject=0x178) returned 1 [0115.673] GetFullPathNameW (in: lpFileName="C:\\Windows\\PLA\\System\\System Diagnostics.xml", nBufferLength=0x105, lpBuffer=0x31e1f8, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\PLA\\System\\System Diagnostics.xml", lpFilePart=0x0) returned 0x2c [0115.673] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e6ec) returned 1 [0115.673] CreateFileW (lpFileName="C:\\Windows\\PLA\\System\\System Diagnostics.xml" (normalized: "c:\\windows\\pla\\system\\system diagnostics.xml"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0xffffffff [0115.674] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31d528) returned 1 [0115.674] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e834) returned 1 [0115.674] GetFullPathNameW (in: lpFileName="C:\\Windows\\PLA\\Templates", nBufferLength=0x105, lpBuffer=0x31e33c, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\PLA\\Templates", lpFilePart=0x0) returned 0x18 [0115.675] GetFullPathNameW (in: lpFileName="C:\\Windows\\PLA\\Templates\\", nBufferLength=0x105, lpBuffer=0x31e310, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\PLA\\Templates\\", lpFilePart=0x0) returned 0x19 [0115.675] FindFirstFileW (in: lpFileName="C:\\Windows\\PLA\\Templates\\*", lpFindFileData=0x31e55c | out: lpFindFileData=0x31e55c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfeaf781a, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfeaf781a, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xbbbcac59, ftLastWriteTime.dwHighDateTime=0x1ca042b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x381dc0 [0115.675] FindNextFileW (in: hFindFile=0x381dc0, lpFindFileData=0x31e56c | out: lpFindFileData=0x31e56c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfeaf781a, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfeaf781a, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xbbbcac59, ftLastWriteTime.dwHighDateTime=0x1ca042b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0115.675] FindNextFileW (in: hFindFile=0x381dc0, lpFindFileData=0x31e56c | out: lpFindFileData=0x31e56c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfeaf781a, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfeaf781a, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xbbbcac59, ftLastWriteTime.dwHighDateTime=0x1ca042b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 0 [0115.675] FindClose (in: hFindFile=0x381dc0 | out: hFindFile=0x381dc0) returned 1 [0115.675] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e7f4) returned 1 [0115.675] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e800) returned 1 [0115.675] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e834) returned 1 [0115.675] GetFullPathNameW (in: lpFileName="C:\\Windows\\PLA\\Templates", nBufferLength=0x105, lpBuffer=0x31e33c, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\PLA\\Templates", lpFilePart=0x0) returned 0x18 [0115.675] GetFullPathNameW (in: lpFileName="C:\\Windows\\PLA\\Templates\\", nBufferLength=0x105, lpBuffer=0x31e310, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\PLA\\Templates\\", lpFilePart=0x0) returned 0x19 [0115.675] FindFirstFileW (in: lpFileName="C:\\Windows\\PLA\\Templates\\*", lpFindFileData=0x31e55c | out: lpFindFileData=0x31e55c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfeaf781a, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfeaf781a, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xbbbcac59, ftLastWriteTime.dwHighDateTime=0x1ca042b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x381dc0 [0115.676] FindNextFileW (in: hFindFile=0x381dc0, lpFindFileData=0x31e56c | out: lpFindFileData=0x31e56c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfeaf781a, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfeaf781a, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xbbbcac59, ftLastWriteTime.dwHighDateTime=0x1ca042b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0115.676] FindNextFileW (in: hFindFile=0x381dc0, lpFindFileData=0x31e56c | out: lpFindFileData=0x31e56c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfeaf781a, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfeaf781a, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xbbbcac59, ftLastWriteTime.dwHighDateTime=0x1ca042b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 0 [0115.676] FindClose (in: hFindFile=0x381dc0 | out: hFindFile=0x381dc0) returned 1 [0115.676] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e7f4) returned 1 [0115.676] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e800) returned 1 [0115.676] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e8ac) returned 1 [0115.676] GetFullPathNameW (in: lpFileName="C:\\Windows\\PolicyDefinitions", nBufferLength=0x105, lpBuffer=0x31e3b4, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\PolicyDefinitions", lpFilePart=0x0) returned 0x1c [0115.676] GetFullPathNameW (in: lpFileName="C:\\Windows\\PolicyDefinitions\\", nBufferLength=0x105, lpBuffer=0x31e388, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\PolicyDefinitions\\", lpFilePart=0x0) returned 0x1d [0115.676] FindFirstFileW (in: lpFileName="C:\\Windows\\PolicyDefinitions\\*", lpFindFileData=0x31e5d4 | out: lpFindFileData=0x31e5d4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfeb1d974, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x94d2e7b9, ftLastAccessTime.dwHighDateTime=0x1cbf8eb, ftLastWriteTime.dwLowDateTime=0x94d2e7b9, ftLastWriteTime.dwHighDateTime=0x1cbf8eb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x381dc0 [0115.678] FindNextFileW (in: hFindFile=0x381dc0, lpFindFileData=0x31e5e4 | out: lpFindFileData=0x31e5e4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfeb1d974, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x94d2e7b9, ftLastAccessTime.dwHighDateTime=0x1cbf8eb, ftLastWriteTime.dwLowDateTime=0x94d2e7b9, ftLastWriteTime.dwHighDateTime=0x1cbf8eb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0115.679] FindNextFileW (in: hFindFile=0x381dc0, lpFindFileData=0x31e5e4 | out: lpFindFileData=0x31e5e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xfffd3add, ftCreationTime.dwHighDateTime=0x1c9ea0e, ftLastAccessTime.dwLowDateTime=0xfffd3add, ftLastAccessTime.dwHighDateTime=0x1c9ea0e, ftLastWriteTime.dwLowDateTime=0xfffd3add, ftLastWriteTime.dwHighDateTime=0x1c9ea0e, nFileSizeHigh=0x0, nFileSizeLow=0x126d, dwReserved0=0x0, dwReserved1=0x0, cFileName="ActiveXInstallService.admx", cAlternateFileName="")) returned 1 [0115.679] FindNextFileW (in: hFindFile=0x381dc0, lpFindFileData=0x31e5e4 | out: lpFindFileData=0x31e5e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9aa71af8, ftCreationTime.dwHighDateTime=0x1ca0403, ftLastAccessTime.dwLowDateTime=0x9aa71af8, ftLastAccessTime.dwHighDateTime=0x1ca0403, ftLastWriteTime.dwLowDateTime=0x914e1e75, ftLastWriteTime.dwHighDateTime=0x1c9ea0d, nFileSizeHigh=0x0, nFileSizeLow=0x126a, dwReserved0=0x0, dwReserved1=0x0, cFileName="AddRemovePrograms.admx", cAlternateFileName="")) returned 1 [0115.679] FindNextFileW (in: hFindFile=0x381dc0, lpFindFileData=0x31e5e4 | out: lpFindFileData=0x31e5e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x55a27ba1, ftCreationTime.dwHighDateTime=0x1c9ea0a, ftLastAccessTime.dwLowDateTime=0x55a27ba1, ftLastAccessTime.dwHighDateTime=0x1c9ea0a, ftLastWriteTime.dwLowDateTime=0x55a27ba1, ftLastWriteTime.dwHighDateTime=0x1c9ea0a, nFileSizeHigh=0x0, nFileSizeLow=0x1511, dwReserved0=0x0, dwReserved1=0x0, cFileName="AppCompat.admx", cAlternateFileName="")) returned 1 [0115.679] FindNextFileW (in: hFindFile=0x381dc0, lpFindFileData=0x31e5e4 | out: lpFindFileData=0x31e5e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2617569b, ftCreationTime.dwHighDateTime=0x1c9ea0b, ftLastAccessTime.dwLowDateTime=0x2617569b, ftLastAccessTime.dwHighDateTime=0x1c9ea0b, ftLastWriteTime.dwLowDateTime=0x2617569b, ftLastWriteTime.dwHighDateTime=0x1c9ea0b, nFileSizeHigh=0x0, nFileSizeLow=0x174d, dwReserved0=0x0, dwReserved1=0x0, cFileName="AttachmentManager.admx", cAlternateFileName="")) returned 1 [0115.679] FindNextFileW (in: hFindFile=0x381dc0, lpFindFileData=0x31e5e4 | out: lpFindFileData=0x31e5e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9152e131, ftCreationTime.dwHighDateTime=0x1c9ea0d, ftLastAccessTime.dwLowDateTime=0x9152e131, ftLastAccessTime.dwHighDateTime=0x1c9ea0d, ftLastWriteTime.dwLowDateTime=0x9152e131, ftLastWriteTime.dwHighDateTime=0x1c9ea0d, nFileSizeHigh=0x0, nFileSizeLow=0xd3f, dwReserved0=0x0, dwReserved1=0x0, cFileName="AutoPlay.admx", cAlternateFileName="")) returned 1 [0115.679] FindNextFileW (in: hFindFile=0x381dc0, lpFindFileData=0x31e5e4 | out: lpFindFileData=0x31e5e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6275f691, ftCreationTime.dwHighDateTime=0x1c9ea0d, ftLastAccessTime.dwLowDateTime=0x6275f691, ftLastAccessTime.dwHighDateTime=0x1c9ea0d, ftLastWriteTime.dwLowDateTime=0x6275f691, ftLastWriteTime.dwHighDateTime=0x1c9ea0d, nFileSizeHigh=0x0, nFileSizeLow=0xb98, dwReserved0=0x0, dwReserved1=0x0, cFileName="Biometrics.admx", cAlternateFileName="")) returned 1 [0115.679] FindNextFileW (in: hFindFile=0x381dc0, lpFindFileData=0x31e5e4 | out: lpFindFileData=0x31e5e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x78de957d, ftCreationTime.dwHighDateTime=0x1c9ea0d, ftLastAccessTime.dwLowDateTime=0x78de957d, ftLastAccessTime.dwHighDateTime=0x1c9ea0d, ftLastWriteTime.dwLowDateTime=0x79213bc5, ftLastWriteTime.dwHighDateTime=0x1c9ea0d, nFileSizeHigh=0x0, nFileSizeLow=0xc01d, dwReserved0=0x0, dwReserved1=0x0, cFileName="Bits.admx", cAlternateFileName="")) returned 1 [0115.680] FindNextFileW (in: hFindFile=0x381dc0, lpFindFileData=0x31e5e4 | out: lpFindFileData=0x31e5e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xaf1f686f, ftCreationTime.dwHighDateTime=0x1c9ea0e, ftLastAccessTime.dwLowDateTime=0xaf1f686f, ftLastAccessTime.dwHighDateTime=0x1c9ea0e, ftLastWriteTime.dwLowDateTime=0xaf1f686f, ftLastWriteTime.dwHighDateTime=0x1c9ea0e, nFileSizeHigh=0x0, nFileSizeLow=0x6d5, dwReserved0=0x0, dwReserved1=0x0, cFileName="CEIPEnable.admx", cAlternateFileName="")) returned 1 [0115.680] FindNextFileW (in: hFindFile=0x381dc0, lpFindFileData=0x31e5e4 | out: lpFindFileData=0x31e5e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x829accef, ftCreationTime.dwHighDateTime=0x1c9ea0d, ftLastAccessTime.dwLowDateTime=0x829accef, ftLastAccessTime.dwHighDateTime=0x1c9ea0d, ftLastWriteTime.dwLowDateTime=0x829accef, ftLastWriteTime.dwHighDateTime=0x1c9ea0d, nFileSizeHigh=0x0, nFileSizeLow=0x551, dwReserved0=0x0, dwReserved1=0x0, cFileName="CipherSuiteOrder.admx", cAlternateFileName="")) returned 1 [0115.680] FindNextFileW (in: hFindFile=0x381dc0, lpFindFileData=0x31e5e4 | out: lpFindFileData=0x31e5e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x14a55b2b, ftCreationTime.dwHighDateTime=0x1c9ea0c, ftLastAccessTime.dwLowDateTime=0x14a55b2b, ftLastAccessTime.dwHighDateTime=0x1c9ea0c, ftLastWriteTime.dwLowDateTime=0x14a55b2b, ftLastWriteTime.dwHighDateTime=0x1c9ea0c, nFileSizeHigh=0x0, nFileSizeLow=0x531, dwReserved0=0x0, dwReserved1=0x0, cFileName="COM.admx", cAlternateFileName="")) returned 1 [0115.680] FindNextFileW (in: hFindFile=0x381dc0, lpFindFileData=0x31e5e4 | out: lpFindFileData=0x31e5e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x109f2d0f, ftCreationTime.dwHighDateTime=0x1ca0403, ftLastAccessTime.dwLowDateTime=0x109f2d0f, ftLastAccessTime.dwHighDateTime=0x1ca0403, ftLastWriteTime.dwLowDateTime=0xf88010b1, ftLastWriteTime.dwHighDateTime=0x1c9ea0b, nFileSizeHigh=0x0, nFileSizeLow=0x368f, dwReserved0=0x0, dwReserved1=0x0, cFileName="Conf.admx", cAlternateFileName="")) returned 1 [0115.680] FindNextFileW (in: hFindFile=0x381dc0, lpFindFileData=0x31e5e4 | out: lpFindFileData=0x31e5e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9aa71af8, ftCreationTime.dwHighDateTime=0x1ca0403, ftLastAccessTime.dwLowDateTime=0x9aa71af8, ftLastAccessTime.dwHighDateTime=0x1ca0403, ftLastWriteTime.dwLowDateTime=0x915a054b, ftLastWriteTime.dwHighDateTime=0x1c9ea0d, nFileSizeHigh=0x0, nFileSizeLow=0xa28, dwReserved0=0x0, dwReserved1=0x0, cFileName="ControlPanel.admx", cAlternateFileName="")) returned 1 [0115.680] FindNextFileW (in: hFindFile=0x381dc0, lpFindFileData=0x31e5e4 | out: lpFindFileData=0x31e5e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9aa97c55, ftCreationTime.dwHighDateTime=0x1ca0403, ftLastAccessTime.dwLowDateTime=0x9aa97c55, ftLastAccessTime.dwHighDateTime=0x1ca0403, ftLastWriteTime.dwLowDateTime=0x915ec807, ftLastWriteTime.dwHighDateTime=0x1c9ea0d, nFileSizeHigh=0x0, nFileSizeLow=0x2773, dwReserved0=0x0, dwReserved1=0x0, cFileName="ControlPanelDisplay.admx", cAlternateFileName="")) returned 1 [0115.680] FindNextFileW (in: hFindFile=0x381dc0, lpFindFileData=0x31e5e4 | out: lpFindFileData=0x31e5e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9a8f4d56, ftCreationTime.dwHighDateTime=0x1ca0403, ftLastAccessTime.dwLowDateTime=0x9a8f4d56, ftLastAccessTime.dwHighDateTime=0x1ca0403, ftLastWriteTime.dwLowDateTime=0x91612965, ftLastWriteTime.dwHighDateTime=0x1c9ea0d, nFileSizeHigh=0x0, nFileSizeLow=0x50d, dwReserved0=0x0, dwReserved1=0x0, cFileName="Cpls.admx", cAlternateFileName="")) returned 1 [0115.680] FindNextFileW (in: hFindFile=0x381dc0, lpFindFileData=0x31e5e4 | out: lpFindFileData=0x31e5e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9a941010, ftCreationTime.dwHighDateTime=0x1ca0403, ftLastAccessTime.dwLowDateTime=0x9a941010, ftLastAccessTime.dwHighDateTime=0x1ca0403, ftLastWriteTime.dwLowDateTime=0x91684d7f, ftLastWriteTime.dwHighDateTime=0x1c9ea0d, nFileSizeHigh=0x0, nFileSizeLow=0x78d, dwReserved0=0x0, dwReserved1=0x0, cFileName="CredentialProviders.admx", cAlternateFileName="")) returned 1 [0115.680] FindNextFileW (in: hFindFile=0x381dc0, lpFindFileData=0x31e5e4 | out: lpFindFileData=0x31e5e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8d7431d9, ftCreationTime.dwHighDateTime=0x1c9ea0e, ftLastAccessTime.dwLowDateTime=0x8d7431d9, ftLastAccessTime.dwHighDateTime=0x1c9ea0e, ftLastWriteTime.dwLowDateTime=0x8d7431d9, ftLastWriteTime.dwHighDateTime=0x1c9ea0e, nFileSizeHigh=0x0, nFileSizeLow=0x2a1b, dwReserved0=0x0, dwReserved1=0x0, cFileName="CredSsp.admx", cAlternateFileName="")) returned 1 [0115.681] FindNextFileW (in: hFindFile=0x381dc0, lpFindFileData=0x31e5e4 | out: lpFindFileData=0x31e5e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9a941010, ftCreationTime.dwHighDateTime=0x1ca0403, ftLastAccessTime.dwLowDateTime=0x9a941010, ftLastAccessTime.dwHighDateTime=0x1ca0403, ftLastWriteTime.dwLowDateTime=0x9189a0a3, ftLastWriteTime.dwHighDateTime=0x1c9ea0d, nFileSizeHigh=0x0, nFileSizeLow=0x6d2, dwReserved0=0x0, dwReserved1=0x0, cFileName="CredUI.admx", cAlternateFileName="")) returned 1 [0115.681] FindNextFileW (in: hFindFile=0x381dc0, lpFindFileData=0x31e5e4 | out: lpFindFileData=0x31e5e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x12ca4751, ftCreationTime.dwHighDateTime=0x1c9ea0f, ftLastAccessTime.dwLowDateTime=0x12ca4751, ftLastAccessTime.dwHighDateTime=0x1c9ea0f, ftLastWriteTime.dwLowDateTime=0x12ca4751, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x85d, dwReserved0=0x0, dwReserved1=0x0, cFileName="CtrlAltDel.admx", cAlternateFileName="")) returned 1 [0115.681] FindNextFileW (in: hFindFile=0x381dc0, lpFindFileData=0x31e5e4 | out: lpFindFileData=0x31e5e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1a913da1, ftCreationTime.dwHighDateTime=0x1ca0404, ftLastAccessTime.dwLowDateTime=0x1a913da1, ftLastAccessTime.dwHighDateTime=0x1ca0404, ftLastWriteTime.dwLowDateTime=0x14aa1de7, ftLastWriteTime.dwHighDateTime=0x1c9ea0c, nFileSizeHigh=0x0, nFileSizeLow=0x985, dwReserved0=0x0, dwReserved1=0x0, cFileName="DCOM.admx", cAlternateFileName="")) returned 1 [0115.681] FindNextFileW (in: hFindFile=0x381dc0, lpFindFileData=0x31e5e4 | out: lpFindFileData=0x31e5e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9aa97c55, ftCreationTime.dwHighDateTime=0x1ca0403, ftLastAccessTime.dwLowDateTime=0x9aa97c55, ftLastAccessTime.dwHighDateTime=0x1ca0403, ftLastWriteTime.dwLowDateTime=0x918e635f, ftLastWriteTime.dwHighDateTime=0x1c9ea0d, nFileSizeHigh=0x0, nFileSizeLow=0x3508, dwReserved0=0x0, dwReserved1=0x0, cFileName="Desktop.admx", cAlternateFileName="")) returned 1 [0115.681] FindNextFileW (in: hFindFile=0x381dc0, lpFindFileData=0x31e5e4 | out: lpFindFileData=0x31e5e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x862e4e1d, ftCreationTime.dwHighDateTime=0x1c9ea0f, ftLastAccessTime.dwLowDateTime=0x862e4e1d, ftLastAccessTime.dwHighDateTime=0x1c9ea0f, ftLastWriteTime.dwLowDateTime=0x8630af7b, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x4877, dwReserved0=0x0, dwReserved1=0x0, cFileName="DeviceInstallation.admx", cAlternateFileName="")) returned 1 [0115.681] FindNextFileW (in: hFindFile=0x381dc0, lpFindFileData=0x31e5e4 | out: lpFindFileData=0x31e5e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1b9701dd, ftCreationTime.dwHighDateTime=0x1c9ea0d, ftLastAccessTime.dwLowDateTime=0x1b9701dd, ftLastAccessTime.dwHighDateTime=0x1c9ea0d, ftLastWriteTime.dwLowDateTime=0x1b9701dd, ftLastWriteTime.dwHighDateTime=0x1c9ea0d, nFileSizeHigh=0x0, nFileSizeLow=0x957, dwReserved0=0x0, dwReserved1=0x0, cFileName="DeviceRedirection.admx", cAlternateFileName="")) returned 1 [0115.681] FindNextFileW (in: hFindFile=0x381dc0, lpFindFileData=0x31e5e4 | out: lpFindFileData=0x31e5e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x564e650f, ftCreationTime.dwHighDateTime=0x1c9ea0e, ftLastAccessTime.dwLowDateTime=0x564e650f, ftLastAccessTime.dwHighDateTime=0x1c9ea0e, ftLastWriteTime.dwLowDateTime=0x564e650f, ftLastWriteTime.dwHighDateTime=0x1c9ea0e, nFileSizeHigh=0x0, nFileSizeLow=0x445, dwReserved0=0x0, dwReserved1=0x0, cFileName="DFS.admx", cAlternateFileName="")) returned 1 [0115.681] FindNextFileW (in: hFindFile=0x381dc0, lpFindFileData=0x31e5e4 | out: lpFindFileData=0x31e5e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x52b1d501, ftCreationTime.dwHighDateTime=0x1c9ea0b, ftLastAccessTime.dwLowDateTime=0x52b1d501, ftLastAccessTime.dwHighDateTime=0x1c9ea0b, ftLastWriteTime.dwLowDateTime=0x52b1d501, ftLastWriteTime.dwHighDateTime=0x1c9ea0b, nFileSizeHigh=0x0, nFileSizeLow=0x7c8, dwReserved0=0x0, dwReserved1=0x0, cFileName="DigitalLocker.admx", cAlternateFileName="")) returned 1 [0115.681] FindNextFileW (in: hFindFile=0x381dc0, lpFindFileData=0x31e5e4 | out: lpFindFileData=0x31e5e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4da20011, ftCreationTime.dwHighDateTime=0x1c9ea0d, ftLastAccessTime.dwLowDateTime=0x4da20011, ftLastAccessTime.dwHighDateTime=0x1c9ea0d, ftLastWriteTime.dwLowDateTime=0x4da20011, ftLastWriteTime.dwHighDateTime=0x1c9ea0d, nFileSizeHigh=0x0, nFileSizeLow=0xbda, dwReserved0=0x0, dwReserved1=0x0, cFileName="DiskDiagnostic.admx", cAlternateFileName="")) returned 1 [0115.681] FindNextFileW (in: hFindFile=0x381dc0, lpFindFileData=0x31e5e4 | out: lpFindFileData=0x31e5e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8dbb2445, ftCreationTime.dwHighDateTime=0x1c9ea0f, ftLastAccessTime.dwLowDateTime=0x8dbb2445, ftLastAccessTime.dwHighDateTime=0x1c9ea0f, ftLastWriteTime.dwLowDateTime=0x8dbb2445, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0xac6, dwReserved0=0x0, dwReserved1=0x0, cFileName="DiskNVCache.admx", cAlternateFileName="")) returned 1 [0115.682] FindNextFileW (in: hFindFile=0x381dc0, lpFindFileData=0x31e5e4 | out: lpFindFileData=0x31e5e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7945dd77, ftCreationTime.dwHighDateTime=0x1c9ea0b, ftLastAccessTime.dwLowDateTime=0x7945dd77, ftLastAccessTime.dwHighDateTime=0x1c9ea0b, ftLastWriteTime.dwLowDateTime=0x79483ed5, ftLastWriteTime.dwHighDateTime=0x1c9ea0b, nFileSizeHigh=0x0, nFileSizeLow=0x17eb, dwReserved0=0x0, dwReserved1=0x0, cFileName="DiskQuota.admx", cAlternateFileName="")) returned 1 [0115.682] FindNextFileW (in: hFindFile=0x381dc0, lpFindFileData=0x31e5e4 | out: lpFindFileData=0x31e5e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9c4bae79, ftCreationTime.dwHighDateTime=0x1c9ea0d, ftLastAccessTime.dwLowDateTime=0x9c4bae79, ftLastAccessTime.dwHighDateTime=0x1c9ea0d, ftLastWriteTime.dwLowDateTime=0x9c4bae79, ftLastWriteTime.dwHighDateTime=0x1c9ea0d, nFileSizeHigh=0x0, nFileSizeLow=0x3dd, dwReserved0=0x0, dwReserved1=0x0, cFileName="DistributedLinkTracking.admx", cAlternateFileName="")) returned 1 [0115.682] FindNextFileW (in: hFindFile=0x381dc0, lpFindFileData=0x31e5e4 | out: lpFindFileData=0x31e5e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x54c9df37, ftCreationTime.dwHighDateTime=0x1c9ea0a, ftLastAccessTime.dwLowDateTime=0x54c9df37, ftLastAccessTime.dwHighDateTime=0x1c9ea0a, ftLastWriteTime.dwLowDateTime=0x54c9df37, ftLastWriteTime.dwHighDateTime=0x1c9ea0a, nFileSizeHigh=0x0, nFileSizeLow=0x2832, dwReserved0=0x0, dwReserved1=0x0, cFileName="DnsClient.admx", cAlternateFileName="")) returned 1 [0115.682] FindNextFileW (in: hFindFile=0x381dc0, lpFindFileData=0x31e5e4 | out: lpFindFileData=0x31e5e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9324f691, ftCreationTime.dwHighDateTime=0x1c9ea0e, ftLastAccessTime.dwLowDateTime=0x9324f691, ftLastAccessTime.dwHighDateTime=0x1c9ea0e, ftLastWriteTime.dwLowDateTime=0x9324f691, ftLastWriteTime.dwHighDateTime=0x1c9ea0e, nFileSizeHigh=0x0, nFileSizeLow=0x1de8, dwReserved0=0x0, dwReserved1=0x0, cFileName="DWM.admx", cAlternateFileName="")) returned 1 [0115.682] FindNextFileW (in: hFindFile=0x381dc0, lpFindFileData=0x31e5e4 | out: lpFindFileData=0x31e5e4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x3757e82b, ftCreationTime.dwHighDateTime=0x1ca0445, ftLastAccessTime.dwLowDateTime=0x95b0aa0c, ftLastAccessTime.dwHighDateTime=0x1cbf8eb, ftLastWriteTime.dwLowDateTime=0x95b0aa0c, ftLastWriteTime.dwHighDateTime=0x1cbf8eb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="en-US", cAlternateFileName="")) returned 1 [0115.682] FindNextFileW (in: hFindFile=0x381dc0, lpFindFileData=0x31e5e4 | out: lpFindFileData=0x31e5e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9a98d2ca, ftCreationTime.dwHighDateTime=0x1ca0403, ftLastAccessTime.dwLowDateTime=0x9a98d2ca, ftLastAccessTime.dwHighDateTime=0x1ca0403, ftLastWriteTime.dwLowDateTime=0x9193261b, ftLastWriteTime.dwHighDateTime=0x1c9ea0d, nFileSizeHigh=0x0, nFileSizeLow=0x3c2, dwReserved0=0x0, dwReserved1=0x0, cFileName="EncryptFilesonMove.admx", cAlternateFileName="")) returned 1 [0115.683] FindNextFileW (in: hFindFile=0x381dc0, lpFindFileData=0x31e5e4 | out: lpFindFileData=0x31e5e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa0d89837, ftCreationTime.dwHighDateTime=0x1c9ea0b, ftLastAccessTime.dwLowDateTime=0xa0d89837, ftLastAccessTime.dwHighDateTime=0x1c9ea0b, ftLastWriteTime.dwLowDateTime=0xa0d89837, ftLastWriteTime.dwHighDateTime=0x1c9ea0b, nFileSizeHigh=0x0, nFileSizeLow=0x13e9, dwReserved0=0x0, dwReserved1=0x0, cFileName="EnhancedStorage.admx", cAlternateFileName="")) returned 1 [0115.683] FindNextFileW (in: hFindFile=0x381dc0, lpFindFileData=0x31e5e4 | out: lpFindFileData=0x31e5e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xaa5f0dcd, ftCreationTime.dwHighDateTime=0x1c9ea0e, ftLastAccessTime.dwLowDateTime=0xaa5f0dcd, ftLastAccessTime.dwHighDateTime=0x1c9ea0e, ftLastWriteTime.dwLowDateTime=0xaa5f0dcd, ftLastWriteTime.dwHighDateTime=0x1c9ea0e, nFileSizeHigh=0x0, nFileSizeLow=0x54e9, dwReserved0=0x0, dwReserved1=0x0, cFileName="ErrorReporting.admx", cAlternateFileName="")) returned 1 [0115.683] FindNextFileW (in: hFindFile=0x381dc0, lpFindFileData=0x31e5e4 | out: lpFindFileData=0x31e5e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xeb94d87b, ftCreationTime.dwHighDateTime=0x1c9ea0d, ftLastAccessTime.dwLowDateTime=0xeb94d87b, ftLastAccessTime.dwHighDateTime=0x1c9ea0d, ftLastWriteTime.dwLowDateTime=0xeb94d87b, ftLastWriteTime.dwHighDateTime=0x1c9ea0d, nFileSizeHigh=0x0, nFileSizeLow=0x7cc, dwReserved0=0x0, dwReserved1=0x0, cFileName="EventForwarding.admx", cAlternateFileName="")) returned 1 [0115.683] FindNextFileW (in: hFindFile=0x381dc0, lpFindFileData=0x31e5e4 | out: lpFindFileData=0x31e5e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xee6f9c35, ftCreationTime.dwHighDateTime=0x1c9ea0d, ftLastAccessTime.dwLowDateTime=0xee6f9c35, ftLastAccessTime.dwHighDateTime=0x1c9ea0d, ftLastWriteTime.dwLowDateTime=0xee71fd93, ftLastWriteTime.dwHighDateTime=0x1c9ea0d, nFileSizeHigh=0x0, nFileSizeLow=0x308d, dwReserved0=0x0, dwReserved1=0x0, cFileName="EventLog.admx", cAlternateFileName="")) returned 1 [0115.683] FindNextFileW (in: hFindFile=0x381dc0, lpFindFileData=0x31e5e4 | out: lpFindFileData=0x31e5e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x28b071a3, ftCreationTime.dwHighDateTime=0x1c9ea0e, ftLastAccessTime.dwLowDateTime=0x28b071a3, ftLastAccessTime.dwHighDateTime=0x1c9ea0e, ftLastWriteTime.dwLowDateTime=0x28b2d301, ftLastWriteTime.dwHighDateTime=0x1c9ea0e, nFileSizeHigh=0x0, nFileSizeLow=0x9e0, dwReserved0=0x0, dwReserved1=0x0, cFileName="EventViewer.admx", cAlternateFileName="")) returned 1 [0115.683] FindNextFileW (in: hFindFile=0x381dc0, lpFindFileData=0x31e5e4 | out: lpFindFileData=0x31e5e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9a98d2ca, ftCreationTime.dwHighDateTime=0x1ca0403, ftLastAccessTime.dwLowDateTime=0x9a98d2ca, ftLastAccessTime.dwHighDateTime=0x1ca0403, ftLastWriteTime.dwLowDateTime=0x9197e8d7, ftLastWriteTime.dwHighDateTime=0x1c9ea0d, nFileSizeHigh=0x0, nFileSizeLow=0xefc, dwReserved0=0x0, dwReserved1=0x0, cFileName="Explorer.admx", cAlternateFileName="")) returned 1 [0115.683] FindNextFileW (in: hFindFile=0x381dc0, lpFindFileData=0x31e5e4 | out: lpFindFileData=0x31e5e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4c845c01, ftCreationTime.dwHighDateTime=0x1c9ea0d, ftLastAccessTime.dwLowDateTime=0x4c845c01, ftLastAccessTime.dwHighDateTime=0x1c9ea0d, ftLastWriteTime.dwLowDateTime=0x4c86bd5f, ftLastWriteTime.dwHighDateTime=0x1c9ea0d, nFileSizeHigh=0x0, nFileSizeLow=0x85d, dwReserved0=0x0, dwReserved1=0x0, cFileName="FileRecovery.admx", cAlternateFileName="")) returned 1 [0115.683] FindNextFileW (in: hFindFile=0x381dc0, lpFindFileData=0x31e5e4 | out: lpFindFileData=0x31e5e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x71094f0a, ftCreationTime.dwHighDateTime=0x1ca03fd, ftLastAccessTime.dwLowDateTime=0x71094f0a, ftLastAccessTime.dwHighDateTime=0x1ca03fd, ftLastWriteTime.dwLowDateTime=0x79568709, ftLastWriteTime.dwHighDateTime=0x1c9ea0b, nFileSizeHigh=0x0, nFileSizeLow=0x181c, dwReserved0=0x0, dwReserved1=0x0, cFileName="FileSys.admx", cAlternateFileName="")) returned 1 [0115.683] FindNextFileW (in: hFindFile=0x381dc0, lpFindFileData=0x31e5e4 | out: lpFindFileData=0x31e5e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x66654f7b, ftCreationTime.dwHighDateTime=0x1c9ea0c, ftLastAccessTime.dwLowDateTime=0x66654f7b, ftLastAccessTime.dwHighDateTime=0x1c9ea0c, ftLastWriteTime.dwLowDateTime=0x66654f7b, ftLastWriteTime.dwHighDateTime=0x1c9ea0c, nFileSizeHigh=0x0, nFileSizeLow=0x926, dwReserved0=0x0, dwReserved1=0x0, cFileName="FolderRedirection.admx", cAlternateFileName="")) returned 1 [0115.683] FindNextFileW (in: hFindFile=0x381dc0, lpFindFileData=0x31e5e4 | out: lpFindFileData=0x31e5e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9a9b3427, ftCreationTime.dwHighDateTime=0x1ca0403, ftLastAccessTime.dwLowDateTime=0x9a9b3427, ftLastAccessTime.dwHighDateTime=0x1ca0403, ftLastWriteTime.dwLowDateTime=0x9197e8d7, ftLastWriteTime.dwHighDateTime=0x1c9ea0d, nFileSizeHigh=0x0, nFileSizeLow=0x5ed, dwReserved0=0x0, dwReserved1=0x0, cFileName="FramePanes.admx", cAlternateFileName="")) returned 1 [0115.683] FindNextFileW (in: hFindFile=0x381dc0, lpFindFileData=0x31e5e4 | out: lpFindFileData=0x31e5e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4f2f8463, ftCreationTime.dwHighDateTime=0x1c9ea0d, ftLastAccessTime.dwLowDateTime=0x4f2f8463, ftLastAccessTime.dwHighDateTime=0x1c9ea0d, ftLastWriteTime.dwLowDateTime=0x4f2f8463, ftLastWriteTime.dwHighDateTime=0x1c9ea0d, nFileSizeHigh=0x0, nFileSizeLow=0x8b5, dwReserved0=0x0, dwReserved1=0x0, cFileName="fthsvc.admx", cAlternateFileName="")) returned 1 [0115.684] FindNextFileW (in: hFindFile=0x381dc0, lpFindFileData=0x31e5e4 | out: lpFindFileData=0x31e5e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa7394e20, ftCreationTime.dwHighDateTime=0x1ca0403, ftLastAccessTime.dwLowDateTime=0xa7394e20, ftLastAccessTime.dwHighDateTime=0x1ca0403, ftLastWriteTime.dwLowDateTime=0x6412b047, ftLastWriteTime.dwHighDateTime=0x1c9ea0b, nFileSizeHigh=0x0, nFileSizeLow=0x8d0, dwReserved0=0x0, dwReserved1=0x0, cFileName="GameExplorer.admx", cAlternateFileName="")) returned 1 [0115.684] FindNextFileW (in: hFindFile=0x381dc0, lpFindFileData=0x31e5e4 | out: lpFindFileData=0x31e5e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd7075dcf, ftCreationTime.dwHighDateTime=0x1c9ea0f, ftLastAccessTime.dwLowDateTime=0xd7075dcf, ftLastAccessTime.dwHighDateTime=0x1c9ea0f, ftLastWriteTime.dwLowDateTime=0xd7075dcf, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x68b0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Globalization.admx", cAlternateFileName="")) returned 1 [0115.684] FindNextFileW (in: hFindFile=0x381dc0, lpFindFileData=0x31e5e4 | out: lpFindFileData=0x31e5e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x10a3efc9, ftCreationTime.dwHighDateTime=0x1ca0403, ftLastAccessTime.dwLowDateTime=0x10a3efc9, ftLastAccessTime.dwHighDateTime=0x1ca0403, ftLastWriteTime.dwLowDateTime=0xf8b46ec5, ftLastWriteTime.dwHighDateTime=0x1c9ea0b, nFileSizeHigh=0x0, nFileSizeLow=0x5bd3, dwReserved0=0x0, dwReserved1=0x0, cFileName="GroupPolicy.admx", cAlternateFileName="")) returned 1 [0115.684] FindNextFileW (in: hFindFile=0x381dc0, lpFindFileData=0x31e5e4 | out: lpFindFileData=0x31e5e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb2abb51d, ftCreationTime.dwHighDateTime=0x1c9ea0b, ftLastAccessTime.dwLowDateTime=0xb2abb51d, ftLastAccessTime.dwHighDateTime=0x1c9ea0b, ftLastWriteTime.dwLowDateTime=0xb2abb51d, ftLastWriteTime.dwHighDateTime=0x1c9ea0b, nFileSizeHigh=0x0, nFileSizeLow=0xa57, dwReserved0=0x0, dwReserved1=0x0, cFileName="Help.admx", cAlternateFileName="")) returned 1 [0115.684] FindNextFileW (in: hFindFile=0x381dc0, lpFindFileData=0x31e5e4 | out: lpFindFileData=0x31e5e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa572dcf9, ftCreationTime.dwHighDateTime=0x1c9ea0b, ftLastAccessTime.dwLowDateTime=0xa572dcf9, ftLastAccessTime.dwHighDateTime=0x1c9ea0b, ftLastWriteTime.dwLowDateTime=0xa572dcf9, ftLastWriteTime.dwHighDateTime=0x1c9ea0b, nFileSizeHigh=0x0, nFileSizeLow=0xb0e, dwReserved0=0x0, dwReserved1=0x0, cFileName="HelpAndSupport.admx", cAlternateFileName="")) returned 1 [0115.684] FindNextFileW (in: hFindFile=0x381dc0, lpFindFileData=0x31e5e4 | out: lpFindFileData=0x31e5e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3c8e3dbb, ftCreationTime.dwHighDateTime=0x1c9ea0b, ftLastAccessTime.dwLowDateTime=0x3c8e3dbb, ftLastAccessTime.dwHighDateTime=0x1c9ea0b, ftLastWriteTime.dwLowDateTime=0x3c8e3dbb, ftLastWriteTime.dwHighDateTime=0x1c9ea0b, nFileSizeHigh=0x0, nFileSizeLow=0x6a5, dwReserved0=0x0, dwReserved1=0x0, cFileName="HotStart.admx", cAlternateFileName="")) returned 1 [0115.684] FindNextFileW (in: hFindFile=0x381dc0, lpFindFileData=0x31e5e4 | out: lpFindFileData=0x31e5e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x30c3818b, ftCreationTime.dwHighDateTime=0x1c9ea0c, ftLastAccessTime.dwLowDateTime=0x30c3818b, ftLastAccessTime.dwHighDateTime=0x1c9ea0c, ftLastWriteTime.dwLowDateTime=0x30c5e2e9, ftLastWriteTime.dwHighDateTime=0x1c9ea0c, nFileSizeHigh=0x0, nFileSizeLow=0x8061, dwReserved0=0x0, dwReserved1=0x0, cFileName="ICM.admx", cAlternateFileName="")) returned 1 [0115.684] FindNextFileW (in: hFindFile=0x381dc0, lpFindFileData=0x31e5e4 | out: lpFindFileData=0x31e5e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x171c2579, ftCreationTime.dwHighDateTime=0x1c9ea0c, ftLastAccessTime.dwLowDateTime=0x171c2579, ftLastAccessTime.dwHighDateTime=0x1c9ea0c, ftLastWriteTime.dwLowDateTime=0x171e86d7, ftLastWriteTime.dwHighDateTime=0x1c9ea0c, nFileSizeHigh=0x0, nFileSizeLow=0x4db, dwReserved0=0x0, dwReserved1=0x0, cFileName="IIS.admx", cAlternateFileName="")) returned 1 [0115.684] FindNextFileW (in: hFindFile=0x381dc0, lpFindFileData=0x31e5e4 | out: lpFindFileData=0x31e5e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa2a9f680, ftCreationTime.dwHighDateTime=0x1cb892b, ftLastAccessTime.dwLowDateTime=0xa2a9f680, ftLastAccessTime.dwHighDateTime=0x1cb892b, ftLastWriteTime.dwLowDateTime=0xa2aeb941, ftLastWriteTime.dwHighDateTime=0x1cb892b, nFileSizeHigh=0x0, nFileSizeLow=0x2ef48a, dwReserved0=0x0, dwReserved1=0x0, cFileName="inetres.admx", cAlternateFileName="")) returned 1 [0115.684] FindNextFileW (in: hFindFile=0x381dc0, lpFindFileData=0x31e5e4 | out: lpFindFileData=0x31e5e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8f0ac50b, ftCreationTime.dwHighDateTime=0x1c9ea0f, ftLastAccessTime.dwLowDateTime=0x8f0ac50b, ftLastAccessTime.dwHighDateTime=0x1c9ea0f, ftLastWriteTime.dwLowDateTime=0x8f0ac50b, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x6fb, dwReserved0=0x0, dwReserved1=0x0, cFileName="InkWatson.admx", cAlternateFileName="")) returned 1 [0115.684] FindNextFileW (in: hFindFile=0x381dc0, lpFindFileData=0x31e5e4 | out: lpFindFileData=0x31e5e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x90a8f2ef, ftCreationTime.dwHighDateTime=0x1c9ea0f, ftLastAccessTime.dwLowDateTime=0x90a8f2ef, ftLastAccessTime.dwHighDateTime=0x1c9ea0f, ftLastWriteTime.dwLowDateTime=0x90a8f2ef, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0xcff, dwReserved0=0x0, dwReserved1=0x0, cFileName="InputPersonalization.admx", cAlternateFileName="")) returned 1 [0115.684] FindNextFileW (in: hFindFile=0x381dc0, lpFindFileData=0x31e5e4 | out: lpFindFileData=0x31e5e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc3c2c601, ftCreationTime.dwHighDateTime=0x1c9ea0b, ftLastAccessTime.dwLowDateTime=0xc3c2c601, ftLastAccessTime.dwHighDateTime=0x1c9ea0b, ftLastWriteTime.dwLowDateTime=0xc3c2c601, ftLastWriteTime.dwHighDateTime=0x1c9ea0b, nFileSizeHigh=0x0, nFileSizeLow=0x1ad4, dwReserved0=0x0, dwReserved1=0x0, cFileName="iSCSI.admx", cAlternateFileName="")) returned 1 [0115.684] FindNextFileW (in: hFindFile=0x381dc0, lpFindFileData=0x31e5e4 | out: lpFindFileData=0x31e5e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x91dc79e5, ftCreationTime.dwHighDateTime=0x1c9ea0e, ftLastAccessTime.dwLowDateTime=0x91dc79e5, ftLastAccessTime.dwHighDateTime=0x1c9ea0e, ftLastWriteTime.dwLowDateTime=0x91dedb43, ftLastWriteTime.dwHighDateTime=0x1c9ea0e, nFileSizeHigh=0x0, nFileSizeLow=0xe7d, dwReserved0=0x0, dwReserved1=0x0, cFileName="Kerberos.admx", cAlternateFileName="")) returned 1 [0115.684] FindNextFileW (in: hFindFile=0x381dc0, lpFindFileData=0x31e5e4 | out: lpFindFileData=0x31e5e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc1b35413, ftCreationTime.dwHighDateTime=0x1c9ea0e, ftLastAccessTime.dwLowDateTime=0xc1b35413, ftLastAccessTime.dwHighDateTime=0x1c9ea0e, ftLastWriteTime.dwLowDateTime=0xc1b35413, ftLastWriteTime.dwHighDateTime=0x1c9ea0e, nFileSizeHigh=0x0, nFileSizeLow=0x778, dwReserved0=0x0, dwReserved1=0x0, cFileName="LanmanServer.admx", cAlternateFileName="")) returned 1 [0115.684] FindNextFileW (in: hFindFile=0x381dc0, lpFindFileData=0x31e5e4 | out: lpFindFileData=0x31e5e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x53ce8be1, ftCreationTime.dwHighDateTime=0x1c9ea0d, ftLastAccessTime.dwLowDateTime=0x53ce8be1, ftLastAccessTime.dwHighDateTime=0x1c9ea0d, ftLastWriteTime.dwLowDateTime=0x53ce8be1, ftLastWriteTime.dwHighDateTime=0x1c9ea0d, nFileSizeHigh=0x0, nFileSizeLow=0x89d, dwReserved0=0x0, dwReserved1=0x0, cFileName="LeakDiagnostic.admx", cAlternateFileName="")) returned 1 [0115.684] FindNextFileW (in: hFindFile=0x381dc0, lpFindFileData=0x31e5e4 | out: lpFindFileData=0x31e5e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x87ce5661, ftCreationTime.dwHighDateTime=0x1c9ea0b, ftLastAccessTime.dwLowDateTime=0x87ce5661, ftLastAccessTime.dwHighDateTime=0x1c9ea0b, ftLastWriteTime.dwLowDateTime=0x87ce5661, ftLastWriteTime.dwHighDateTime=0x1c9ea0b, nFileSizeHigh=0x0, nFileSizeLow=0xe61, dwReserved0=0x0, dwReserved1=0x0, cFileName="LinkLayerTopologyDiscovery.admx", cAlternateFileName="")) returned 1 [0115.684] FindNextFileW (in: hFindFile=0x381dc0, lpFindFileData=0x31e5e4 | out: lpFindFileData=0x31e5e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x25d25157, ftCreationTime.dwHighDateTime=0x1ca0403, ftLastAccessTime.dwLowDateTime=0x25d25157, ftLastAccessTime.dwHighDateTime=0x1ca0403, ftLastWriteTime.dwLowDateTime=0x30d8edd9, ftLastWriteTime.dwHighDateTime=0x1c9ea0c, nFileSizeHigh=0x0, nFileSizeLow=0x1bda, dwReserved0=0x0, dwReserved1=0x0, cFileName="Logon.admx", cAlternateFileName="")) returned 1 [0115.684] FindNextFileW (in: hFindFile=0x381dc0, lpFindFileData=0x31e5e4 | out: lpFindFileData=0x31e5e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9d1cb031, ftCreationTime.dwHighDateTime=0x1c9ea0e, ftLastAccessTime.dwLowDateTime=0x9d1cb031, ftLastAccessTime.dwHighDateTime=0x1c9ea0e, ftLastWriteTime.dwLowDateTime=0x9d1f118f, ftLastWriteTime.dwHighDateTime=0x1c9ea0e, nFileSizeHigh=0x0, nFileSizeLow=0x6fa, dwReserved0=0x0, dwReserved1=0x0, cFileName="MediaCenter.admx", cAlternateFileName="")) returned 1 [0115.685] FindNextFileW (in: hFindFile=0x381dc0, lpFindFileData=0x31e5e4 | out: lpFindFileData=0x31e5e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7440f1c7, ftCreationTime.dwHighDateTime=0x1c9ea0a, ftLastAccessTime.dwLowDateTime=0x7440f1c7, ftLastAccessTime.dwHighDateTime=0x1c9ea0a, ftLastWriteTime.dwLowDateTime=0x74435325, ftLastWriteTime.dwHighDateTime=0x1c9ea0a, nFileSizeHigh=0x0, nFileSizeLow=0xdfc, dwReserved0=0x0, dwReserved1=0x0, cFileName="MMC.admx", cAlternateFileName="")) returned 1 [0115.685] FindNextFileW (in: hFindFile=0x381dc0, lpFindFileData=0x31e5e4 | out: lpFindFileData=0x31e5e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x10a3efc9, ftCreationTime.dwHighDateTime=0x1ca0403, ftLastAccessTime.dwLowDateTime=0x10a3efc9, ftLastAccessTime.dwHighDateTime=0x1ca0403, ftLastWriteTime.dwLowDateTime=0xf8d3608b, ftLastWriteTime.dwHighDateTime=0x1c9ea0b, nFileSizeHigh=0x0, nFileSizeLow=0xde60, dwReserved0=0x0, dwReserved1=0x0, cFileName="MMCSnapins.admx", cAlternateFileName="")) returned 1 [0115.685] FindNextFileW (in: hFindFile=0x381dc0, lpFindFileData=0x31e5e4 | out: lpFindFileData=0x31e5e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3c4df8d1, ftCreationTime.dwHighDateTime=0x1c9ea0b, ftLastAccessTime.dwLowDateTime=0x3c4df8d1, ftLastAccessTime.dwHighDateTime=0x1c9ea0b, ftLastWriteTime.dwLowDateTime=0x3c505a2f, ftLastWriteTime.dwHighDateTime=0x1c9ea0b, nFileSizeHigh=0x0, nFileSizeLow=0x762, dwReserved0=0x0, dwReserved1=0x0, cFileName="MobilePCMobilityCenter.admx", cAlternateFileName="")) returned 1 [0115.686] FindNextFileW (in: hFindFile=0x381dc0, lpFindFileData=0x31e5e4 | out: lpFindFileData=0x31e5e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3d563093, ftCreationTime.dwHighDateTime=0x1c9ea0b, ftLastAccessTime.dwLowDateTime=0x3d563093, ftLastAccessTime.dwHighDateTime=0x1c9ea0b, ftLastWriteTime.dwLowDateTime=0x3d563093, ftLastWriteTime.dwHighDateTime=0x1c9ea0b, nFileSizeHigh=0x0, nFileSizeLow=0x7c2, dwReserved0=0x0, dwReserved1=0x0, cFileName="MobilePCPresentationSettings.admx", cAlternateFileName="")) returned 1 [0115.686] FindNextFileW (in: hFindFile=0x381dc0, lpFindFileData=0x31e5e4 | out: lpFindFileData=0x31e5e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x91bcd1, ftCreationTime.dwHighDateTime=0x1c9ea0d, ftLastAccessTime.dwLowDateTime=0x91bcd1, ftLastAccessTime.dwHighDateTime=0x1c9ea0d, ftLastWriteTime.dwLowDateTime=0x941e2f, ftLastWriteTime.dwHighDateTime=0x1c9ea0d, nFileSizeHigh=0x0, nFileSizeLow=0xe2a, dwReserved0=0x0, dwReserved1=0x0, cFileName="MSDT.admx", cAlternateFileName="")) returned 1 [0115.686] FindNextFileW (in: hFindFile=0x381dc0, lpFindFileData=0x31e5e4 | out: lpFindFileData=0x31e5e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x51f73d2d, ftCreationTime.dwHighDateTime=0x1c9ea0d, ftLastAccessTime.dwLowDateTime=0x51f73d2d, ftLastAccessTime.dwHighDateTime=0x1c9ea0d, ftLastWriteTime.dwLowDateTime=0x51f73d2d, ftLastWriteTime.dwHighDateTime=0x1c9ea0d, nFileSizeHigh=0x0, nFileSizeLow=0x863, dwReserved0=0x0, dwReserved1=0x0, cFileName="Msi-FileRecovery.admx", cAlternateFileName="")) returned 1 [0115.686] FindNextFileW (in: hFindFile=0x381dc0, lpFindFileData=0x31e5e4 | out: lpFindFileData=0x31e5e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb274f5ab, ftCreationTime.dwHighDateTime=0x1c9ea0b, ftLastAccessTime.dwLowDateTime=0xb274f5ab, ftLastAccessTime.dwHighDateTime=0x1c9ea0b, ftLastWriteTime.dwLowDateTime=0xb274f5ab, ftLastWriteTime.dwHighDateTime=0x1c9ea0b, nFileSizeHigh=0x0, nFileSizeLow=0x4052, dwReserved0=0x0, dwReserved1=0x0, cFileName="MSI.admx", cAlternateFileName="")) returned 1 [0115.686] FindNextFileW (in: hFindFile=0x381dc0, lpFindFileData=0x31e5e4 | out: lpFindFileData=0x31e5e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xdf979897, ftCreationTime.dwHighDateTime=0x1c9ea0a, ftLastAccessTime.dwLowDateTime=0xdf979897, ftLastAccessTime.dwHighDateTime=0x1c9ea0a, ftLastWriteTime.dwLowDateTime=0xdf979897, ftLastWriteTime.dwHighDateTime=0x1c9ea0a, nFileSizeHigh=0x0, nFileSizeLow=0xe1f, dwReserved0=0x0, dwReserved1=0x0, cFileName="NCSI.admx", cAlternateFileName="")) returned 1 [0115.686] FindNextFileW (in: hFindFile=0x381dc0, lpFindFileData=0x31e5e4 | out: lpFindFileData=0x31e5e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb8a36c41, ftCreationTime.dwHighDateTime=0x1c9ea0c, ftLastAccessTime.dwLowDateTime=0xb8a36c41, ftLastAccessTime.dwHighDateTime=0x1c9ea0c, ftLastWriteTime.dwLowDateTime=0xb8a36c41, ftLastWriteTime.dwHighDateTime=0x1c9ea0c, nFileSizeHigh=0x0, nFileSizeLow=0x454a, dwReserved0=0x0, dwReserved1=0x0, cFileName="Netlogon.admx", cAlternateFileName="")) returned 1 [0115.686] FindNextFileW (in: hFindFile=0x381dc0, lpFindFileData=0x31e5e4 | out: lpFindFileData=0x31e5e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5f20cf87, ftCreationTime.dwHighDateTime=0x1c9ea0a, ftLastAccessTime.dwLowDateTime=0x5f20cf87, ftLastAccessTime.dwHighDateTime=0x1c9ea0a, ftLastWriteTime.dwLowDateTime=0x5f20cf87, ftLastWriteTime.dwHighDateTime=0x1c9ea0a, nFileSizeHigh=0x0, nFileSizeLow=0x4280, dwReserved0=0x0, dwReserved1=0x0, cFileName="NetworkConnections.admx", cAlternateFileName="")) returned 1 [0115.686] FindNextFileW (in: hFindFile=0x381dc0, lpFindFileData=0x31e5e4 | out: lpFindFileData=0x31e5e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5df11e1d, ftCreationTime.dwHighDateTime=0x1c9ea0d, ftLastAccessTime.dwLowDateTime=0x5df11e1d, ftLastAccessTime.dwHighDateTime=0x1c9ea0d, ftLastWriteTime.dwLowDateTime=0x5df11e1d, ftLastWriteTime.dwHighDateTime=0x1c9ea0d, nFileSizeHigh=0x0, nFileSizeLow=0x98b, dwReserved0=0x0, dwReserved1=0x0, cFileName="NetworkProjection.admx", cAlternateFileName="")) returned 1 [0115.686] FindNextFileW (in: hFindFile=0x381dc0, lpFindFileData=0x31e5e4 | out: lpFindFileData=0x31e5e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9c6a29a7, ftCreationTime.dwHighDateTime=0x1c9ea0e, ftLastAccessTime.dwLowDateTime=0x9c6a29a7, ftLastAccessTime.dwHighDateTime=0x1c9ea0e, ftLastWriteTime.dwLowDateTime=0x9c6a29a7, ftLastWriteTime.dwHighDateTime=0x1c9ea0e, nFileSizeHigh=0x0, nFileSizeLow=0x63a1, dwReserved0=0x0, dwReserved1=0x0, cFileName="OfflineFiles.admx", cAlternateFileName="")) returned 1 [0115.686] FindNextFileW (in: hFindFile=0x381dc0, lpFindFileData=0x31e5e4 | out: lpFindFileData=0x31e5e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x970f8cbf, ftCreationTime.dwHighDateTime=0x1c9ea0d, ftLastAccessTime.dwLowDateTime=0x970f8cbf, ftLastAccessTime.dwHighDateTime=0x1c9ea0d, ftLastWriteTime.dwLowDateTime=0x970f8cbf, ftLastWriteTime.dwHighDateTime=0x1c9ea0d, nFileSizeHigh=0x0, nFileSizeLow=0x2132, dwReserved0=0x0, dwReserved1=0x0, cFileName="P2P-pnrp.admx", cAlternateFileName="")) returned 1 [0115.686] FindNextFileW (in: hFindFile=0x381dc0, lpFindFileData=0x31e5e4 | out: lpFindFileData=0x31e5e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4e54fd33, ftCreationTime.dwHighDateTime=0x1c9ea0c, ftLastAccessTime.dwLowDateTime=0x4e54fd33, ftLastAccessTime.dwHighDateTime=0x1c9ea0c, ftLastWriteTime.dwLowDateTime=0x4e575e91, ftLastWriteTime.dwHighDateTime=0x1c9ea0c, nFileSizeHigh=0x0, nFileSizeLow=0x565, dwReserved0=0x0, dwReserved1=0x0, cFileName="ParentalControls.admx", cAlternateFileName="")) returned 1 [0115.686] FindNextFileW (in: hFindFile=0x381dc0, lpFindFileData=0x31e5e4 | out: lpFindFileData=0x31e5e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x94353f9d, ftCreationTime.dwHighDateTime=0x1c9ea0c, ftLastAccessTime.dwLowDateTime=0x94353f9d, ftLastAccessTime.dwHighDateTime=0x1c9ea0c, ftLastWriteTime.dwLowDateTime=0x94353f9d, ftLastWriteTime.dwHighDateTime=0x1c9ea0c, nFileSizeHigh=0x0, nFileSizeLow=0x236f, dwReserved0=0x0, dwReserved1=0x0, cFileName="pca.admx", cAlternateFileName="")) returned 1 [0115.686] FindNextFileW (in: hFindFile=0x381dc0, lpFindFileData=0x31e5e4 | out: lpFindFileData=0x31e5e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xeac0fecd, ftCreationTime.dwHighDateTime=0x1c9ea0d, ftLastAccessTime.dwLowDateTime=0xeac0fecd, ftLastAccessTime.dwHighDateTime=0x1c9ea0d, ftLastWriteTime.dwLowDateTime=0xeac0fecd, ftLastWriteTime.dwHighDateTime=0x1c9ea0d, nFileSizeHigh=0x0, nFileSizeLow=0xe40, dwReserved0=0x0, dwReserved1=0x0, cFileName="PeerToPeerCaching.admx", cAlternateFileName="")) returned 1 [0115.686] FindNextFileW (in: hFindFile=0x381dc0, lpFindFileData=0x31e5e4 | out: lpFindFileData=0x31e5e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x932e0571, ftCreationTime.dwHighDateTime=0x1c9ea0f, ftLastAccessTime.dwLowDateTime=0x932e0571, ftLastAccessTime.dwHighDateTime=0x1c9ea0f, ftLastWriteTime.dwLowDateTime=0x932e0571, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x6ed, dwReserved0=0x0, dwReserved1=0x0, cFileName="PenTraining.admx", cAlternateFileName="")) returned 1 [0115.686] FindNextFileW (in: hFindFile=0x381dc0, lpFindFileData=0x31e5e4 | out: lpFindFileData=0x31e5e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb5fb926d, ftCreationTime.dwHighDateTime=0x1c9ea0a, ftLastAccessTime.dwLowDateTime=0xb5fb926d, ftLastAccessTime.dwHighDateTime=0x1c9ea0a, ftLastWriteTime.dwLowDateTime=0xb5fb926d, ftLastWriteTime.dwHighDateTime=0x1c9ea0a, nFileSizeHigh=0x0, nFileSizeLow=0x8f4, dwReserved0=0x0, dwReserved1=0x0, cFileName="PerfCenterCPL.admx", cAlternateFileName="")) returned 1 [0115.687] FindNextFileW (in: hFindFile=0x381dc0, lpFindFileData=0x31e5e4 | out: lpFindFileData=0x31e5e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7ed1134d, ftCreationTime.dwHighDateTime=0x1c9ea0f, ftLastAccessTime.dwLowDateTime=0x7ed1134d, ftLastAccessTime.dwHighDateTime=0x1c9ea0f, ftLastWriteTime.dwLowDateTime=0x7ed1134d, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x1d83, dwReserved0=0x0, dwReserved1=0x0, cFileName="PerformanceDiagnostics.admx", cAlternateFileName="")) returned 1 [0115.687] FindNextFileW (in: hFindFile=0x381dc0, lpFindFileData=0x31e5e4 | out: lpFindFileData=0x31e5e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7f85fb35, ftCreationTime.dwHighDateTime=0x1c9ea0f, ftLastAccessTime.dwLowDateTime=0x7f85fb35, ftLastAccessTime.dwHighDateTime=0x1c9ea0f, ftLastWriteTime.dwLowDateTime=0x7f85fb35, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x793, dwReserved0=0x0, dwReserved1=0x0, cFileName="PerformancePerftrack.admx", cAlternateFileName="")) returned 1 [0115.687] FindNextFileW (in: hFindFile=0x381dc0, lpFindFileData=0x31e5e4 | out: lpFindFileData=0x31e5e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8b60ea5f, ftCreationTime.dwHighDateTime=0x1c9ea0f, ftLastAccessTime.dwLowDateTime=0x8b60ea5f, ftLastAccessTime.dwHighDateTime=0x1c9ea0f, ftLastWriteTime.dwLowDateTime=0x8b60ea5f, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x8c7e, dwReserved0=0x0, dwReserved1=0x0, cFileName="Power.admx", cAlternateFileName="")) returned 1 [0115.687] FindNextFileW (in: hFindFile=0x381dc0, lpFindFileData=0x31e5e4 | out: lpFindFileData=0x31e5e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4775ead9, ftCreationTime.dwHighDateTime=0x1c9ea0c, ftLastAccessTime.dwLowDateTime=0x4775ead9, ftLastAccessTime.dwHighDateTime=0x1c9ea0c, ftLastWriteTime.dwLowDateTime=0x47784c37, ftLastWriteTime.dwHighDateTime=0x1c9ea0c, nFileSizeHigh=0x0, nFileSizeLow=0x1af5, dwReserved0=0x0, dwReserved1=0x0, cFileName="PreviousVersions.admx", cAlternateFileName="")) returned 1 [0115.687] FindNextFileW (in: hFindFile=0x381dc0, lpFindFileData=0x31e5e4 | out: lpFindFileData=0x31e5e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf61faab2, ftCreationTime.dwHighDateTime=0x1ca040f, ftLastAccessTime.dwLowDateTime=0xf61faab2, ftLastAccessTime.dwHighDateTime=0x1ca040f, ftLastWriteTime.dwLowDateTime=0x97d708ff, ftLastWriteTime.dwHighDateTime=0x1c9ea0e, nFileSizeHigh=0x0, nFileSizeLow=0x7866, dwReserved0=0x0, dwReserved1=0x0, cFileName="Printing.admx", cAlternateFileName="")) returned 1 [0115.687] FindNextFileW (in: hFindFile=0x381dc0, lpFindFileData=0x31e5e4 | out: lpFindFileData=0x31e5e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9aabddb2, ftCreationTime.dwHighDateTime=0x1ca0403, ftLastAccessTime.dwLowDateTime=0x9aabddb2, ftLastAccessTime.dwHighDateTime=0x1ca0403, ftLastWriteTime.dwLowDateTime=0x91ad5525, ftLastWriteTime.dwHighDateTime=0x1c9ea0d, nFileSizeHigh=0x0, nFileSizeLow=0xca7, dwReserved0=0x0, dwReserved1=0x0, cFileName="Programs.admx", cAlternateFileName="")) returned 1 [0115.687] FindNextFileW (in: hFindFile=0x381dc0, lpFindFileData=0x31e5e4 | out: lpFindFileData=0x31e5e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x700eee9, ftCreationTime.dwHighDateTime=0x1c9ea0d, ftLastAccessTime.dwLowDateTime=0x700eee9, ftLastAccessTime.dwHighDateTime=0x1c9ea0d, ftLastWriteTime.dwLowDateTime=0x7035047, ftLastWriteTime.dwHighDateTime=0x1c9ea0d, nFileSizeHigh=0x0, nFileSizeLow=0x33c9, dwReserved0=0x0, dwReserved1=0x0, cFileName="QOS.admx", cAlternateFileName="")) returned 1 [0115.687] FindNextFileW (in: hFindFile=0x381dc0, lpFindFileData=0x31e5e4 | out: lpFindFileData=0x31e5e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8bf941df, ftCreationTime.dwHighDateTime=0x1c9ea0f, ftLastAccessTime.dwLowDateTime=0x8bf941df, ftLastAccessTime.dwHighDateTime=0x1c9ea0f, ftLastWriteTime.dwLowDateTime=0x8bf941df, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x4f9, dwReserved0=0x0, dwReserved1=0x0, cFileName="RacWmiProv.admx", cAlternateFileName="")) returned 1 [0115.687] FindNextFileW (in: hFindFile=0x381dc0, lpFindFileData=0x31e5e4 | out: lpFindFileData=0x31e5e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x53a151e7, ftCreationTime.dwHighDateTime=0x1c9ea0d, ftLastAccessTime.dwLowDateTime=0x53a151e7, ftLastAccessTime.dwHighDateTime=0x1c9ea0d, ftLastWriteTime.dwLowDateTime=0x53a151e7, ftLastWriteTime.dwHighDateTime=0x1c9ea0d, nFileSizeHigh=0x0, nFileSizeLow=0x7b4, dwReserved0=0x0, dwReserved1=0x0, cFileName="Radar.admx", cAlternateFileName="")) returned 1 [0115.687] FindNextFileW (in: hFindFile=0x381dc0, lpFindFileData=0x31e5e4 | out: lpFindFileData=0x31e5e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x665db4c9, ftCreationTime.dwHighDateTime=0x1c9ea0d, ftLastAccessTime.dwLowDateTime=0x665db4c9, ftLastAccessTime.dwHighDateTime=0x1c9ea0d, ftLastWriteTime.dwLowDateTime=0x66601627, ftLastWriteTime.dwHighDateTime=0x1c9ea0d, nFileSizeHigh=0x0, nFileSizeLow=0x4d4, dwReserved0=0x0, dwReserved1=0x0, cFileName="ReAgent.admx", cAlternateFileName="")) returned 1 [0115.687] FindNextFileW (in: hFindFile=0x381dc0, lpFindFileData=0x31e5e4 | out: lpFindFileData=0x31e5e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xfc63bf, ftCreationTime.dwHighDateTime=0x1c9ea0e, ftLastAccessTime.dwLowDateTime=0xfc63bf, ftLastAccessTime.dwHighDateTime=0x1c9ea0e, ftLastWriteTime.dwLowDateTime=0xfc63bf, ftLastWriteTime.dwHighDateTime=0x1c9ea0e, nFileSizeHigh=0x0, nFileSizeLow=0xe8a, dwReserved0=0x0, dwReserved1=0x0, cFileName="Reliability.admx", cAlternateFileName="")) returned 1 [0115.687] FindNextFileW (in: hFindFile=0x381dc0, lpFindFileData=0x31e5e4 | out: lpFindFileData=0x31e5e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4ac2799b, ftCreationTime.dwHighDateTime=0x1c9ea0d, ftLastAccessTime.dwLowDateTime=0x4ac2799b, ftLastAccessTime.dwHighDateTime=0x1c9ea0d, ftLastWriteTime.dwLowDateTime=0x4ac2799b, ftLastWriteTime.dwHighDateTime=0x1c9ea0d, nFileSizeHigh=0x0, nFileSizeLow=0x1bee, dwReserved0=0x0, dwReserved1=0x0, cFileName="RemoteAssistance.admx", cAlternateFileName="")) returned 1 [0115.687] FindNextFileW (in: hFindFile=0x381dc0, lpFindFileData=0x31e5e4 | out: lpFindFileData=0x31e5e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x73d121eb, ftCreationTime.dwHighDateTime=0x1c9ea0f, ftLastAccessTime.dwLowDateTime=0x73d121eb, ftLastAccessTime.dwHighDateTime=0x1c9ea0f, ftLastWriteTime.dwLowDateTime=0x73d38349, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x5ae4, dwReserved0=0x0, dwReserved1=0x0, cFileName="RemovableStorage.admx", cAlternateFileName="")) returned 1 [0115.687] FindNextFileW (in: hFindFile=0x381dc0, lpFindFileData=0x31e5e4 | out: lpFindFileData=0x31e5e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9146fa5b, ftCreationTime.dwHighDateTime=0x1c9ea0d, ftLastAccessTime.dwLowDateTime=0x9146fa5b, ftLastAccessTime.dwHighDateTime=0x1c9ea0d, ftLastWriteTime.dwLowDateTime=0x9146fa5b, ftLastWriteTime.dwHighDateTime=0x1c9ea0d, nFileSizeHigh=0x0, nFileSizeLow=0x1894, dwReserved0=0x0, dwReserved1=0x0, cFileName="RPC.admx", cAlternateFileName="")) returned 1 [0115.687] FindNextFileW (in: hFindFile=0x381dc0, lpFindFileData=0x31e5e4 | out: lpFindFileData=0x31e5e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x10a8b283, ftCreationTime.dwHighDateTime=0x1ca0403, ftLastAccessTime.dwLowDateTime=0x10a8b283, ftLastAccessTime.dwHighDateTime=0x1ca0403, ftLastWriteTime.dwLowDateTime=0xf92911c3, ftLastWriteTime.dwHighDateTime=0x1c9ea0b, nFileSizeHigh=0x0, nFileSizeLow=0x1b4f, dwReserved0=0x0, dwReserved1=0x0, cFileName="Scripts.admx", cAlternateFileName="")) returned 1 [0115.687] FindNextFileW (in: hFindFile=0x381dc0, lpFindFileData=0x31e5e4 | out: lpFindFileData=0x31e5e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xcbabfae3, ftCreationTime.dwHighDateTime=0x1c9ea0c, ftLastAccessTime.dwLowDateTime=0xcbabfae3, ftLastAccessTime.dwHighDateTime=0x1c9ea0c, ftLastWriteTime.dwLowDateTime=0xcbae5c41, ftLastWriteTime.dwHighDateTime=0x1c9ea0c, nFileSizeHigh=0x0, nFileSizeLow=0x9d7, dwReserved0=0x0, dwReserved1=0x0, cFileName="sdiageng.admx", cAlternateFileName="")) returned 1 [0115.688] FindNextFileW (in: hFindFile=0x381dc0, lpFindFileData=0x31e5e4 | out: lpFindFileData=0x31e5e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe837a027, ftCreationTime.dwHighDateTime=0x1c9ea0c, ftLastAccessTime.dwLowDateTime=0xe837a027, ftLastAccessTime.dwHighDateTime=0x1c9ea0c, ftLastWriteTime.dwLowDateTime=0xe837a027, ftLastWriteTime.dwHighDateTime=0x1c9ea0c, nFileSizeHigh=0x0, nFileSizeLow=0x7eb, dwReserved0=0x0, dwReserved1=0x0, cFileName="sdiagschd.admx", cAlternateFileName="")) returned 1 [0115.688] FindNextFileW (in: hFindFile=0x381dc0, lpFindFileData=0x31e5e4 | out: lpFindFileData=0x31e5e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xcd738d35, ftCreationTime.dwHighDateTime=0x1c9ea0a, ftLastAccessTime.dwLowDateTime=0xcd738d35, ftLastAccessTime.dwHighDateTime=0x1c9ea0a, ftLastWriteTime.dwLowDateTime=0xcd738d35, ftLastWriteTime.dwHighDateTime=0x1c9ea0a, nFileSizeHigh=0x0, nFileSizeLow=0xab6a, dwReserved0=0x0, dwReserved1=0x0, cFileName="Search.admx", cAlternateFileName="")) returned 1 [0115.688] FindNextFileW (in: hFindFile=0x381dc0, lpFindFileData=0x31e5e4 | out: lpFindFileData=0x31e5e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8f4de1eb, ftCreationTime.dwHighDateTime=0x1c9ea0e, ftLastAccessTime.dwLowDateTime=0x8f4de1eb, ftLastAccessTime.dwHighDateTime=0x1c9ea0e, ftLastWriteTime.dwLowDateTime=0x8f4de1eb, ftLastWriteTime.dwHighDateTime=0x1c9ea0e, nFileSizeHigh=0x0, nFileSizeLow=0x55a, dwReserved0=0x0, dwReserved1=0x0, cFileName="Securitycenter.admx", cAlternateFileName="")) returned 1 [0115.688] FindNextFileW (in: hFindFile=0x381dc0, lpFindFileData=0x31e5e4 | out: lpFindFileData=0x31e5e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc9a5fe07, ftCreationTime.dwHighDateTime=0x1c9ea0a, ftLastAccessTime.dwLowDateTime=0xc9a5fe07, ftLastAccessTime.dwHighDateTime=0x1c9ea0a, ftLastWriteTime.dwLowDateTime=0xc9a85f65, ftLastWriteTime.dwHighDateTime=0x1c9ea0a, nFileSizeHigh=0x0, nFileSizeLow=0xf30, dwReserved0=0x0, dwReserved1=0x0, cFileName="Sensors.admx", cAlternateFileName="")) returned 1 [0115.688] FindNextFileW (in: hFindFile=0x381dc0, lpFindFileData=0x31e5e4 | out: lpFindFileData=0x31e5e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1c94c6f7, ftCreationTime.dwHighDateTime=0x1c9ea0f, ftLastAccessTime.dwLowDateTime=0x1c94c6f7, ftLastAccessTime.dwHighDateTime=0x1c9ea0f, ftLastWriteTime.dwLowDateTime=0x1c94c6f7, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x634, dwReserved0=0x0, dwReserved1=0x0, cFileName="Setup.admx", cAlternateFileName="")) returned 1 [0115.688] FindNextFileW (in: hFindFile=0x381dc0, lpFindFileData=0x31e5e4 | out: lpFindFileData=0x31e5e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x90dd5103, ftCreationTime.dwHighDateTime=0x1c9ea0f, ftLastAccessTime.dwLowDateTime=0x90dd5103, ftLastAccessTime.dwHighDateTime=0x1c9ea0f, ftLastWriteTime.dwLowDateTime=0x90dd5103, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x4a3, dwReserved0=0x0, dwReserved1=0x0, cFileName="ShapeCollector.admx", cAlternateFileName="")) returned 1 [0115.688] FindNextFileW (in: hFindFile=0x381dc0, lpFindFileData=0x31e5e4 | out: lpFindFileData=0x31e5e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa519dd33, ftCreationTime.dwHighDateTime=0x1c9ea0d, ftLastAccessTime.dwLowDateTime=0xa519dd33, ftLastAccessTime.dwHighDateTime=0x1c9ea0d, ftLastWriteTime.dwLowDateTime=0xa519dd33, ftLastWriteTime.dwHighDateTime=0x1c9ea0d, nFileSizeHigh=0x0, nFileSizeLow=0x662, dwReserved0=0x0, dwReserved1=0x0, cFileName="SharedFolders.admx", cAlternateFileName="")) returned 1 [0115.688] FindNextFileW (in: hFindFile=0x381dc0, lpFindFileData=0x31e5e4 | out: lpFindFileData=0x31e5e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9a9d9584, ftCreationTime.dwHighDateTime=0x1ca0403, ftLastAccessTime.dwLowDateTime=0x9a9d9584, ftLastAccessTime.dwHighDateTime=0x1ca0403, ftLastWriteTime.dwLowDateTime=0x91b6da9d, ftLastWriteTime.dwHighDateTime=0x1c9ea0d, nFileSizeHigh=0x0, nFileSizeLow=0x7c1, dwReserved0=0x0, dwReserved1=0x0, cFileName="Sharing.admx", cAlternateFileName="")) returned 1 [0115.688] FindNextFileW (in: hFindFile=0x381dc0, lpFindFileData=0x31e5e4 | out: lpFindFileData=0x31e5e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9aae3f0f, ftCreationTime.dwHighDateTime=0x1ca0403, ftLastAccessTime.dwLowDateTime=0x9aae3f0f, ftLastAccessTime.dwHighDateTime=0x1ca0403, ftLastWriteTime.dwLowDateTime=0x91bdfeb7, ftLastWriteTime.dwHighDateTime=0x1c9ea0d, nFileSizeHigh=0x0, nFileSizeLow=0xd8a, dwReserved0=0x0, dwReserved1=0x0, cFileName="Shell-CommandPrompt-RegEditTools.admx", cAlternateFileName="")) returned 1 [0115.688] FindNextFileW (in: hFindFile=0x381dc0, lpFindFileData=0x31e5e4 | out: lpFindFileData=0x31e5e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9a9d9584, ftCreationTime.dwHighDateTime=0x1ca0403, ftLastAccessTime.dwLowDateTime=0x9a9d9584, ftLastAccessTime.dwHighDateTime=0x1ca0403, ftLastWriteTime.dwLowDateTime=0x91c522d1, ftLastWriteTime.dwHighDateTime=0x1c9ea0d, nFileSizeHigh=0x0, nFileSizeLow=0x485, dwReserved0=0x0, dwReserved1=0x0, cFileName="ShellWelcomeCenter.admx", cAlternateFileName="")) returned 1 [0115.689] FindNextFileW (in: hFindFile=0x381dc0, lpFindFileData=0x31e5e4 | out: lpFindFileData=0x31e5e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x436266d5, ftCreationTime.dwHighDateTime=0x1c9ea0e, ftLastAccessTime.dwLowDateTime=0x436266d5, ftLastAccessTime.dwHighDateTime=0x1c9ea0e, ftLastWriteTime.dwLowDateTime=0x4364c833, ftLastWriteTime.dwHighDateTime=0x1c9ea0e, nFileSizeHigh=0x0, nFileSizeLow=0x13af, dwReserved0=0x0, dwReserved1=0x0, cFileName="Sidebar.admx", cAlternateFileName="")) returned 1 [0115.689] FindNextFileW (in: hFindFile=0x381dc0, lpFindFileData=0x31e5e4 | out: lpFindFileData=0x31e5e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x73769d91, ftCreationTime.dwHighDateTime=0x1c9ea0a, ftLastAccessTime.dwLowDateTime=0x73769d91, ftLastAccessTime.dwHighDateTime=0x1c9ea0a, ftLastWriteTime.dwLowDateTime=0x73769d91, ftLastWriteTime.dwHighDateTime=0x1c9ea0a, nFileSizeHigh=0x0, nFileSizeLow=0x1ce5, dwReserved0=0x0, dwReserved1=0x0, cFileName="Sideshow.admx", cAlternateFileName="")) returned 1 [0115.689] FindNextFileW (in: hFindFile=0x381dc0, lpFindFileData=0x31e5e4 | out: lpFindFileData=0x31e5e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xea1eab3d, ftCreationTime.dwHighDateTime=0x1c9ea0e, ftLastAccessTime.dwLowDateTime=0xea1eab3d, ftLastAccessTime.dwHighDateTime=0x1c9ea0e, ftLastWriteTime.dwLowDateTime=0xea1eab3d, ftLastWriteTime.dwHighDateTime=0x1c9ea0e, nFileSizeHigh=0x0, nFileSizeLow=0x25db, dwReserved0=0x0, dwReserved1=0x0, cFileName="Smartcard.admx", cAlternateFileName="")) returned 1 [0115.689] FindNextFileW (in: hFindFile=0x381dc0, lpFindFileData=0x31e5e4 | out: lpFindFileData=0x31e5e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x74926741, ftCreationTime.dwHighDateTime=0x1c9ea0e, ftLastAccessTime.dwLowDateTime=0x74926741, ftLastAccessTime.dwHighDateTime=0x1c9ea0e, ftLastWriteTime.dwLowDateTime=0x74926741, ftLastWriteTime.dwHighDateTime=0x1c9ea0e, nFileSizeHigh=0x0, nFileSizeLow=0x903, dwReserved0=0x0, dwReserved1=0x0, cFileName="Snmp.admx", cAlternateFileName="")) returned 1 [0115.689] FindNextFileW (in: hFindFile=0x381dc0, lpFindFileData=0x31e5e4 | out: lpFindFileData=0x31e5e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5142a879, ftCreationTime.dwHighDateTime=0x1ca0409, ftLastAccessTime.dwLowDateTime=0x5142a879, ftLastAccessTime.dwHighDateTime=0x1ca0409, ftLastWriteTime.dwLowDateTime=0x9d2172ed, ftLastWriteTime.dwHighDateTime=0x1c9ea0e, nFileSizeHigh=0x0, nFileSizeLow=0x797, dwReserved0=0x0, dwReserved1=0x0, cFileName="SoundRec.admx", cAlternateFileName="")) returned 1 [0115.689] FindNextFileW (in: hFindFile=0x381dc0, lpFindFileData=0x31e5e4 | out: lpFindFileData=0x31e5e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9a9ff6e1, ftCreationTime.dwHighDateTime=0x1ca0403, ftLastAccessTime.dwLowDateTime=0x9a9ff6e1, ftLastAccessTime.dwHighDateTime=0x1ca0403, ftLastWriteTime.dwLowDateTime=0x91d82dc1, ftLastWriteTime.dwHighDateTime=0x1c9ea0d, nFileSizeHigh=0x0, nFileSizeLow=0x643f, dwReserved0=0x0, dwReserved1=0x0, cFileName="StartMenu.admx", cAlternateFileName="")) returned 1 [0115.689] FindNextFileW (in: hFindFile=0x381dc0, lpFindFileData=0x31e5e4 | out: lpFindFileData=0x31e5e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9e30cec9, ftCreationTime.dwHighDateTime=0x1c9ea0e, ftLastAccessTime.dwLowDateTime=0x9e30cec9, ftLastAccessTime.dwHighDateTime=0x1c9ea0e, ftLastWriteTime.dwLowDateTime=0x9e333027, ftLastWriteTime.dwHighDateTime=0x1c9ea0e, nFileSizeHigh=0x0, nFileSizeLow=0xb11, dwReserved0=0x0, dwReserved1=0x0, cFileName="SystemResourceManager.admx", cAlternateFileName="")) returned 1 [0115.689] FindNextFileW (in: hFindFile=0x381dc0, lpFindFileData=0x31e5e4 | out: lpFindFileData=0x31e5e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9acde689, ftCreationTime.dwHighDateTime=0x1c9ea0f, ftLastAccessTime.dwLowDateTime=0x9acde689, ftLastAccessTime.dwHighDateTime=0x1c9ea0f, ftLastWriteTime.dwLowDateTime=0x9acde689, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x6b4, dwReserved0=0x0, dwReserved1=0x0, cFileName="SystemRestore.admx", cAlternateFileName="")) returned 1 [0115.689] FindNextFileW (in: hFindFile=0x381dc0, lpFindFileData=0x31e5e4 | out: lpFindFileData=0x31e5e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x99977737, ftCreationTime.dwHighDateTime=0x1c9ea0c, ftLastAccessTime.dwLowDateTime=0x99977737, ftLastAccessTime.dwHighDateTime=0x1c9ea0c, ftLastWriteTime.dwLowDateTime=0x99977737, ftLastWriteTime.dwHighDateTime=0x1c9ea0c, nFileSizeHigh=0x0, nFileSizeLow=0x31c1, dwReserved0=0x0, dwReserved1=0x0, cFileName="TabletPCInputPanel.admx", cAlternateFileName="")) returned 1 [0115.689] FindNextFileW (in: hFindFile=0x381dc0, lpFindFileData=0x31e5e4 | out: lpFindFileData=0x31e5e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x92f021e5, ftCreationTime.dwHighDateTime=0x1c9ea0f, ftLastAccessTime.dwLowDateTime=0x92f021e5, ftLastAccessTime.dwHighDateTime=0x1c9ea0f, ftLastWriteTime.dwLowDateTime=0x92f021e5, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x3019, dwReserved0=0x0, dwReserved1=0x0, cFileName="TabletShell.admx", cAlternateFileName="")) returned 1 [0115.689] FindNextFileW (in: hFindFile=0x381dc0, lpFindFileData=0x31e5e4 | out: lpFindFileData=0x31e5e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9a9ff6e1, ftCreationTime.dwHighDateTime=0x1ca0403, ftLastAccessTime.dwLowDateTime=0x9a9ff6e1, ftLastAccessTime.dwHighDateTime=0x1ca0403, ftLastWriteTime.dwLowDateTime=0x91da8f1f, ftLastWriteTime.dwHighDateTime=0x1c9ea0d, nFileSizeHigh=0x0, nFileSizeLow=0x2495, dwReserved0=0x0, dwReserved1=0x0, cFileName="Taskbar.admx", cAlternateFileName="")) returned 1 [0115.689] FindNextFileW (in: hFindFile=0x381dc0, lpFindFileData=0x31e5e4 | out: lpFindFileData=0x31e5e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2a5824ff, ftCreationTime.dwHighDateTime=0x1c9ea0e, ftLastAccessTime.dwLowDateTime=0x2a5824ff, ftLastAccessTime.dwHighDateTime=0x1c9ea0e, ftLastWriteTime.dwLowDateTime=0x2a5824ff, ftLastWriteTime.dwHighDateTime=0x1c9ea0e, nFileSizeHigh=0x0, nFileSizeLow=0x1590, dwReserved0=0x0, dwReserved1=0x0, cFileName="TaskScheduler.admx", cAlternateFileName="")) returned 1 [0115.689] FindNextFileW (in: hFindFile=0x381dc0, lpFindFileData=0x31e5e4 | out: lpFindFileData=0x31e5e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf8ed18fd, ftCreationTime.dwHighDateTime=0x1c9ea0c, ftLastAccessTime.dwLowDateTime=0xf8ed18fd, ftLastAccessTime.dwHighDateTime=0x1c9ea0c, ftLastWriteTime.dwLowDateTime=0xf8ed18fd, ftLastWriteTime.dwHighDateTime=0x1c9ea0c, nFileSizeHigh=0x0, nFileSizeLow=0x274b, dwReserved0=0x0, dwReserved1=0x0, cFileName="tcpip.admx", cAlternateFileName="")) returned 1 [0115.689] FindNextFileW (in: hFindFile=0x381dc0, lpFindFileData=0x31e5e4 | out: lpFindFileData=0x31e5e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa2aeb941, ftCreationTime.dwHighDateTime=0x1cb892b, ftLastAccessTime.dwLowDateTime=0xa2aeb941, ftLastAccessTime.dwHighDateTime=0x1cb892b, ftLastWriteTime.dwLowDateTime=0xa2b11aa1, ftLastWriteTime.dwHighDateTime=0x1cb892b, nFileSizeHigh=0x0, nFileSizeLow=0x144ac, dwReserved0=0x0, dwReserved1=0x0, cFileName="TerminalServer.admx", cAlternateFileName="")) returned 1 [0115.689] FindNextFileW (in: hFindFile=0x381dc0, lpFindFileData=0x31e5e4 | out: lpFindFileData=0x31e5e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9aa2583e, ftCreationTime.dwHighDateTime=0x1ca0403, ftLastAccessTime.dwLowDateTime=0x9aa2583e, ftLastAccessTime.dwHighDateTime=0x1ca0403, ftLastWriteTime.dwLowDateTime=0x91dcf07d, ftLastWriteTime.dwHighDateTime=0x1c9ea0d, nFileSizeHigh=0x0, nFileSizeLow=0x930, dwReserved0=0x0, dwReserved1=0x0, cFileName="Thumbnails.admx", cAlternateFileName="")) returned 1 [0115.689] FindNextFileW (in: hFindFile=0x381dc0, lpFindFileData=0x31e5e4 | out: lpFindFileData=0x31e5e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x40683abd, ftCreationTime.dwHighDateTime=0x1c9ea0f, ftLastAccessTime.dwLowDateTime=0x40683abd, ftLastAccessTime.dwHighDateTime=0x1c9ea0f, ftLastWriteTime.dwLowDateTime=0x40683abd, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0xaa6, dwReserved0=0x0, dwReserved1=0x0, cFileName="TouchInput.admx", cAlternateFileName="")) returned 1 [0115.689] FindNextFileW (in: hFindFile=0x381dc0, lpFindFileData=0x31e5e4 | out: lpFindFileData=0x31e5e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb9f0937, ftCreationTime.dwHighDateTime=0x1c9ea0f, ftLastAccessTime.dwLowDateTime=0xb9f0937, ftLastAccessTime.dwHighDateTime=0x1c9ea0f, ftLastWriteTime.dwLowDateTime=0xb9f0937, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0xd51, dwReserved0=0x0, dwReserved1=0x0, cFileName="TPM.admx", cAlternateFileName="")) returned 1 [0115.689] FindNextFileW (in: hFindFile=0x381dc0, lpFindFileData=0x31e5e4 | out: lpFindFileData=0x31e5e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9a92645b, ftCreationTime.dwHighDateTime=0x1c9ea0f, ftLastAccessTime.dwLowDateTime=0x9a92645b, ftLastAccessTime.dwHighDateTime=0x1c9ea0f, ftLastWriteTime.dwLowDateTime=0x9a92645b, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x1fa5, dwReserved0=0x0, dwReserved1=0x0, cFileName="UserDataBackup.admx", cAlternateFileName="")) returned 1 [0115.690] FindNextFileW (in: hFindFile=0x381dc0, lpFindFileData=0x31e5e4 | out: lpFindFileData=0x31e5e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xfb9eeee1, ftCreationTime.dwHighDateTime=0x1c9ea0d, ftLastAccessTime.dwLowDateTime=0xfb9eeee1, ftLastAccessTime.dwHighDateTime=0x1c9ea0d, ftLastWriteTime.dwLowDateTime=0xfba1503f, ftLastWriteTime.dwHighDateTime=0x1c9ea0d, nFileSizeHigh=0x0, nFileSizeLow=0x3aad, dwReserved0=0x0, dwReserved1=0x0, cFileName="UserProfiles.admx", cAlternateFileName="")) returned 1 [0115.690] FindNextFileW (in: hFindFile=0x381dc0, lpFindFileData=0x31e5e4 | out: lpFindFileData=0x31e5e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb3c9aa09, ftCreationTime.dwHighDateTime=0x1ca03fd, ftLastAccessTime.dwLowDateTime=0xb3c9aa09, ftLastAccessTime.dwHighDateTime=0x1ca03fd, ftLastWriteTime.dwLowDateTime=0xb9f0937, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x9e6a, dwReserved0=0x0, dwReserved1=0x0, cFileName="VolumeEncryption.admx", cAlternateFileName="")) returned 1 [0115.690] FindNextFileW (in: hFindFile=0x381dc0, lpFindFileData=0x31e5e4 | out: lpFindFileData=0x31e5e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x60f97a3, ftCreationTime.dwHighDateTime=0x1c9ea0f, ftLastAccessTime.dwLowDateTime=0x60f97a3, ftLastAccessTime.dwHighDateTime=0x1c9ea0f, ftLastWriteTime.dwLowDateTime=0x611f901, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x1885, dwReserved0=0x0, dwReserved1=0x0, cFileName="W32Time.admx", cAlternateFileName="")) returned 1 [0115.690] FindNextFileW (in: hFindFile=0x381dc0, lpFindFileData=0x31e5e4 | out: lpFindFileData=0x31e5e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf7b7a741, ftCreationTime.dwHighDateTime=0x1c9ea0c, ftLastAccessTime.dwLowDateTime=0xf7b7a741, ftLastAccessTime.dwHighDateTime=0x1c9ea0c, ftLastWriteTime.dwLowDateTime=0xf7b7a741, ftLastWriteTime.dwHighDateTime=0x1c9ea0c, nFileSizeHigh=0x0, nFileSizeLow=0x9d0, dwReserved0=0x0, dwReserved1=0x0, cFileName="WDI.admx", cAlternateFileName="")) returned 1 [0115.690] FindNextFileW (in: hFindFile=0x381dc0, lpFindFileData=0x31e5e4 | out: lpFindFileData=0x31e5e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x62b89cd9, ftCreationTime.dwHighDateTime=0x1c9ea0d, ftLastAccessTime.dwLowDateTime=0x62b89cd9, ftLastAccessTime.dwHighDateTime=0x1c9ea0d, ftLastWriteTime.dwLowDateTime=0x62b89cd9, ftLastWriteTime.dwHighDateTime=0x1c9ea0d, nFileSizeHigh=0x0, nFileSizeLow=0x6e8, dwReserved0=0x0, dwReserved1=0x0, cFileName="WinCal.admx", cAlternateFileName="")) returned 1 [0115.690] FindNextFileW (in: hFindFile=0x381dc0, lpFindFileData=0x31e5e4 | out: lpFindFileData=0x31e5e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf94cc645, ftCreationTime.dwHighDateTime=0x1c9ea0b, ftLastAccessTime.dwLowDateTime=0xf94cc645, ftLastAccessTime.dwHighDateTime=0x1c9ea0b, ftLastWriteTime.dwLowDateTime=0xf94f27a3, ftLastWriteTime.dwHighDateTime=0x1c9ea0b, nFileSizeHigh=0x0, nFileSizeLow=0x38c4, dwReserved0=0x0, dwReserved1=0x0, cFileName="Windows.admx", cAlternateFileName="")) returned 1 [0115.690] FindNextFileW (in: hFindFile=0x381dc0, lpFindFileData=0x31e5e4 | out: lpFindFileData=0x31e5e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9aae3f0f, ftCreationTime.dwHighDateTime=0x1ca0403, ftLastAccessTime.dwLowDateTime=0x9aae3f0f, ftLastAccessTime.dwHighDateTime=0x1ca0403, ftLastWriteTime.dwLowDateTime=0x91e675f5, ftLastWriteTime.dwHighDateTime=0x1c9ea0d, nFileSizeHigh=0x0, nFileSizeLow=0x4f1, dwReserved0=0x0, dwReserved1=0x0, cFileName="WindowsAnytimeUpgrade.admx", cAlternateFileName="")) returned 1 [0115.690] FindNextFileW (in: hFindFile=0x381dc0, lpFindFileData=0x31e5e4 | out: lpFindFileData=0x31e5e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x93e7b015, ftCreationTime.dwHighDateTime=0x1c9ea0f, ftLastAccessTime.dwLowDateTime=0x93e7b015, ftLastAccessTime.dwHighDateTime=0x1c9ea0f, ftLastWriteTime.dwLowDateTime=0x93e7b015, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0xe76, dwReserved0=0x0, dwReserved1=0x0, cFileName="WindowsBackup.admx", cAlternateFileName="")) returned 1 [0115.691] FindNextFileW (in: hFindFile=0x381dc0, lpFindFileData=0x31e5e4 | out: lpFindFileData=0x31e5e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x757314f5, ftCreationTime.dwHighDateTime=0x1c9ea0c, ftLastAccessTime.dwLowDateTime=0x757314f5, ftLastAccessTime.dwHighDateTime=0x1c9ea0c, ftLastWriteTime.dwLowDateTime=0x757314f5, ftLastWriteTime.dwHighDateTime=0x1c9ea0c, nFileSizeHigh=0x0, nFileSizeLow=0x7e8, dwReserved0=0x0, dwReserved1=0x0, cFileName="WindowsColorSystem.admx", cAlternateFileName="")) returned 1 [0115.691] FindNextFileW (in: hFindFile=0x381dc0, lpFindFileData=0x31e5e4 | out: lpFindFileData=0x31e5e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9c137ad9, ftCreationTime.dwHighDateTime=0x1c9ea0b, ftLastAccessTime.dwLowDateTime=0x9c137ad9, ftLastAccessTime.dwHighDateTime=0x1c9ea0b, ftLastWriteTime.dwLowDateTime=0x9c137ad9, ftLastWriteTime.dwHighDateTime=0x1c9ea0b, nFileSizeHigh=0x0, nFileSizeLow=0xff5, dwReserved0=0x0, dwReserved1=0x0, cFileName="WindowsConnectNow.admx", cAlternateFileName="")) returned 1 [0115.691] FindNextFileW (in: hFindFile=0x381dc0, lpFindFileData=0x31e5e4 | out: lpFindFileData=0x31e5e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1cfd831f, ftCreationTime.dwHighDateTime=0x1c9ea0f, ftLastAccessTime.dwLowDateTime=0x1cfd831f, ftLastAccessTime.dwHighDateTime=0x1c9ea0f, ftLastWriteTime.dwLowDateTime=0x1cfd831f, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x13fb, dwReserved0=0x0, dwReserved1=0x0, cFileName="WindowsDefender.admx", cAlternateFileName="")) returned 1 [0115.691] FindNextFileW (in: hFindFile=0x381dc0, lpFindFileData=0x31e5e4 | out: lpFindFileData=0x31e5e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9ab0a06c, ftCreationTime.dwHighDateTime=0x1ca0403, ftLastAccessTime.dwLowDateTime=0x9ab0a06c, ftLastAccessTime.dwHighDateTime=0x1ca0403, ftLastWriteTime.dwLowDateTime=0x91eb38b1, ftLastWriteTime.dwHighDateTime=0x1c9ea0d, nFileSizeHigh=0x0, nFileSizeLow=0x8c66, dwReserved0=0x0, dwReserved1=0x0, cFileName="WindowsExplorer.admx", cAlternateFileName="")) returned 1 [0115.691] FindNextFileW (in: hFindFile=0x381dc0, lpFindFileData=0x31e5e4 | out: lpFindFileData=0x31e5e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa5b60a3f, ftCreationTime.dwHighDateTime=0x1c9ea0f, ftLastAccessTime.dwLowDateTime=0xa5b60a3f, ftLastAccessTime.dwHighDateTime=0x1c9ea0f, ftLastWriteTime.dwLowDateTime=0xa5b60a3f, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0xbb8, dwReserved0=0x0, dwReserved1=0x0, cFileName="WindowsFileProtection.admx", cAlternateFileName="")) returned 1 [0115.691] FindNextFileW (in: hFindFile=0x381dc0, lpFindFileData=0x31e5e4 | out: lpFindFileData=0x31e5e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x71fb36ff, ftCreationTime.dwHighDateTime=0x1c9ea0c, ftLastAccessTime.dwLowDateTime=0x71fb36ff, ftLastAccessTime.dwHighDateTime=0x1c9ea0c, ftLastWriteTime.dwLowDateTime=0x71fb36ff, ftLastWriteTime.dwHighDateTime=0x1c9ea0c, nFileSizeHigh=0x0, nFileSizeLow=0x698b, dwReserved0=0x0, dwReserved1=0x0, cFileName="WindowsFirewall.admx", cAlternateFileName="")) returned 1 [0115.691] FindNextFileW (in: hFindFile=0x381dc0, lpFindFileData=0x31e5e4 | out: lpFindFileData=0x31e5e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7721ec6b, ftCreationTime.dwHighDateTime=0x1c9ea0c, ftLastAccessTime.dwLowDateTime=0x7721ec6b, ftLastAccessTime.dwHighDateTime=0x1c9ea0c, ftLastWriteTime.dwLowDateTime=0x7721ec6b, ftLastWriteTime.dwHighDateTime=0x1c9ea0c, nFileSizeHigh=0x0, nFileSizeLow=0xacf, dwReserved0=0x0, dwReserved1=0x0, cFileName="WindowsMail.admx", cAlternateFileName="")) returned 1 [0115.691] FindNextFileW (in: hFindFile=0x381dc0, lpFindFileData=0x31e5e4 | out: lpFindFileData=0x31e5e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x514509d6, ftCreationTime.dwHighDateTime=0x1ca0409, ftLastAccessTime.dwLowDateTime=0x514509d6, ftLastAccessTime.dwHighDateTime=0x1ca0409, ftLastWriteTime.dwLowDateTime=0x9d23d44b, ftLastWriteTime.dwHighDateTime=0x1c9ea0e, nFileSizeHigh=0x0, nFileSizeLow=0x4e6, dwReserved0=0x0, dwReserved1=0x0, cFileName="WindowsMediaDRM.admx", cAlternateFileName="")) returned 1 [0115.691] FindNextFileW (in: hFindFile=0x381dc0, lpFindFileData=0x31e5e4 | out: lpFindFileData=0x31e5e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x51476b33, ftCreationTime.dwHighDateTime=0x1ca0409, ftLastAccessTime.dwLowDateTime=0x51476b33, ftLastAccessTime.dwHighDateTime=0x1ca0409, ftLastWriteTime.dwLowDateTime=0x9d2af865, ftLastWriteTime.dwHighDateTime=0x1c9ea0e, nFileSizeHigh=0x0, nFileSizeLow=0x59be, dwReserved0=0x0, dwReserved1=0x0, cFileName="WindowsMediaPlayer.admx", cAlternateFileName="")) returned 1 [0115.691] FindNextFileW (in: hFindFile=0x381dc0, lpFindFileData=0x31e5e4 | out: lpFindFileData=0x31e5e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x25d25157, ftCreationTime.dwHighDateTime=0x1ca0403, ftLastAccessTime.dwLowDateTime=0x25d25157, ftLastAccessTime.dwHighDateTime=0x1ca0403, ftLastWriteTime.dwLowDateTime=0x31088931, ftLastWriteTime.dwHighDateTime=0x1c9ea0c, nFileSizeHigh=0x0, nFileSizeLow=0xb57, dwReserved0=0x0, dwReserved1=0x0, cFileName="WindowsMessenger.admx", cAlternateFileName="")) returned 1 [0115.691] FindNextFileW (in: hFindFile=0x381dc0, lpFindFileData=0x31e5e4 | out: lpFindFileData=0x31e5e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x109a6a55, ftCreationTime.dwHighDateTime=0x1ca0403, ftLastAccessTime.dwLowDateTime=0x109a6a55, ftLastAccessTime.dwHighDateTime=0x1ca0403, ftLastWriteTime.dwLowDateTime=0xf9564bbd, ftLastWriteTime.dwHighDateTime=0x1c9ea0b, nFileSizeHigh=0x0, nFileSizeLow=0x1c23, dwReserved0=0x0, dwReserved1=0x0, cFileName="WindowsProducts.admx", cAlternateFileName="")) returned 1 [0115.691] FindNextFileW (in: hFindFile=0x381dc0, lpFindFileData=0x31e5e4 | out: lpFindFileData=0x31e5e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb231479f, ftCreationTime.dwHighDateTime=0x1ca040c, ftLastAccessTime.dwLowDateTime=0xb231479f, ftLastAccessTime.dwHighDateTime=0x1ca040c, ftLastWriteTime.dwLowDateTime=0x8ba1a5e1, ftLastWriteTime.dwHighDateTime=0x1c9ea0e, nFileSizeHigh=0x0, nFileSizeLow=0x2696, dwReserved0=0x0, dwReserved1=0x0, cFileName="WindowsRemoteManagement.admx", cAlternateFileName="")) returned 1 [0115.691] FindNextFileW (in: hFindFile=0x381dc0, lpFindFileData=0x31e5e4 | out: lpFindFileData=0x31e5e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb231479f, ftCreationTime.dwHighDateTime=0x1ca040c, ftLastAccessTime.dwLowDateTime=0xb231479f, ftLastAccessTime.dwHighDateTime=0x1ca040c, ftLastWriteTime.dwLowDateTime=0x8ba1a5e1, ftLastWriteTime.dwHighDateTime=0x1c9ea0e, nFileSizeHigh=0x0, nFileSizeLow=0x10f2, dwReserved0=0x0, dwReserved1=0x0, cFileName="WindowsRemoteShell.admx", cAlternateFileName="")) returned 1 [0115.691] FindNextFileW (in: hFindFile=0x381dc0, lpFindFileData=0x31e5e4 | out: lpFindFileData=0x31e5e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5098dd9b, ftCreationTime.dwHighDateTime=0x1c9ea0e, ftLastAccessTime.dwLowDateTime=0x5098dd9b, ftLastAccessTime.dwHighDateTime=0x1c9ea0e, ftLastWriteTime.dwLowDateTime=0x5098dd9b, ftLastWriteTime.dwHighDateTime=0x1c9ea0e, nFileSizeHigh=0x0, nFileSizeLow=0x4b48, dwReserved0=0x0, dwReserved1=0x0, cFileName="WindowsUpdate.admx", cAlternateFileName="")) returned 1 [0115.691] FindNextFileW (in: hFindFile=0x381dc0, lpFindFileData=0x31e5e4 | out: lpFindFileData=0x31e5e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb088e4e9, ftCreationTime.dwHighDateTime=0x1ca0402, ftLastAccessTime.dwLowDateTime=0xb088e4e9, ftLastAccessTime.dwHighDateTime=0x1ca0402, ftLastWriteTime.dwLowDateTime=0x12daf0e3, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x7a3, dwReserved0=0x0, dwReserved1=0x0, cFileName="WinInit.admx", cAlternateFileName="")) returned 1 [0115.691] FindNextFileW (in: hFindFile=0x381dc0, lpFindFileData=0x31e5e4 | out: lpFindFileData=0x31e5e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb08b4646, ftCreationTime.dwHighDateTime=0x1ca0402, ftLastAccessTime.dwLowDateTime=0xb08b4646, ftLastAccessTime.dwHighDateTime=0x1ca0402, ftLastWriteTime.dwLowDateTime=0x12dfb39f, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x1475, dwReserved0=0x0, dwReserved1=0x0, cFileName="WinLogon.admx", cAlternateFileName="")) returned 1 [0115.691] FindNextFileW (in: hFindFile=0x381dc0, lpFindFileData=0x31e5e4 | out: lpFindFileData=0x31e5e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf7ff86dd, ftCreationTime.dwHighDateTime=0x1c9ea0b, ftLastAccessTime.dwLowDateTime=0xf7ff86dd, ftLastAccessTime.dwHighDateTime=0x1c9ea0b, ftLastWriteTime.dwLowDateTime=0xf801e83b, ftLastWriteTime.dwHighDateTime=0x1c9ea0b, nFileSizeHigh=0x0, nFileSizeLow=0x53e, dwReserved0=0x0, dwReserved1=0x0, cFileName="Winsrv.admx", cAlternateFileName="")) returned 1 [0115.691] FindNextFileW (in: hFindFile=0x381dc0, lpFindFileData=0x31e5e4 | out: lpFindFileData=0x31e5e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9aa4b99b, ftCreationTime.dwHighDateTime=0x1ca0403, ftLastAccessTime.dwLowDateTime=0x9aa4b99b, ftLastAccessTime.dwHighDateTime=0x1ca0403, ftLastWriteTime.dwLowDateTime=0x91eb38b1, ftLastWriteTime.dwHighDateTime=0x1c9ea0d, nFileSizeHigh=0x0, nFileSizeLow=0x57e, dwReserved0=0x0, dwReserved1=0x0, cFileName="WordWheel.admx", cAlternateFileName="")) returned 1 [0115.691] FindNextFileW (in: hFindFile=0x381dc0, lpFindFileData=0x31e5e4 | out: lpFindFileData=0x31e5e4*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0115.691] FindClose (in: hFindFile=0x381dc0 | out: hFindFile=0x381dc0) returned 1 [0115.692] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e86c) returned 1 [0115.692] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e878) returned 1 [0115.692] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e8ac) returned 1 [0115.692] GetFullPathNameW (in: lpFileName="C:\\Windows\\PolicyDefinitions", nBufferLength=0x105, lpBuffer=0x31e3b4, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\PolicyDefinitions", lpFilePart=0x0) returned 0x1c [0115.692] GetFullPathNameW (in: lpFileName="C:\\Windows\\PolicyDefinitions\\", nBufferLength=0x105, lpBuffer=0x31e388, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\PolicyDefinitions\\", lpFilePart=0x0) returned 0x1d [0115.692] FindFirstFileW (in: lpFileName="C:\\Windows\\PolicyDefinitions\\*", lpFindFileData=0x31e5d4 | out: lpFindFileData=0x31e5d4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfeb1d974, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x94d2e7b9, ftLastAccessTime.dwHighDateTime=0x1cbf8eb, ftLastWriteTime.dwLowDateTime=0x94d2e7b9, ftLastWriteTime.dwHighDateTime=0x1cbf8eb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x381dc0 [0115.693] FindNextFileW (in: hFindFile=0x381dc0, lpFindFileData=0x31e5e4 | out: lpFindFileData=0x31e5e4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfeb1d974, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x94d2e7b9, ftLastAccessTime.dwHighDateTime=0x1cbf8eb, ftLastWriteTime.dwLowDateTime=0x94d2e7b9, ftLastWriteTime.dwHighDateTime=0x1cbf8eb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0115.693] FindNextFileW (in: hFindFile=0x381dc0, lpFindFileData=0x31e5e4 | out: lpFindFileData=0x31e5e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xfffd3add, ftCreationTime.dwHighDateTime=0x1c9ea0e, ftLastAccessTime.dwLowDateTime=0xfffd3add, ftLastAccessTime.dwHighDateTime=0x1c9ea0e, ftLastWriteTime.dwLowDateTime=0xfffd3add, ftLastWriteTime.dwHighDateTime=0x1c9ea0e, nFileSizeHigh=0x0, nFileSizeLow=0x126d, dwReserved0=0x0, dwReserved1=0x0, cFileName="ActiveXInstallService.admx", cAlternateFileName="")) returned 1 [0115.693] FindNextFileW (in: hFindFile=0x381dc0, lpFindFileData=0x31e5e4 | out: lpFindFileData=0x31e5e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9aa71af8, ftCreationTime.dwHighDateTime=0x1ca0403, ftLastAccessTime.dwLowDateTime=0x9aa71af8, ftLastAccessTime.dwHighDateTime=0x1ca0403, ftLastWriteTime.dwLowDateTime=0x914e1e75, ftLastWriteTime.dwHighDateTime=0x1c9ea0d, nFileSizeHigh=0x0, nFileSizeLow=0x126a, dwReserved0=0x0, dwReserved1=0x0, cFileName="AddRemovePrograms.admx", cAlternateFileName="")) returned 1 [0115.693] FindNextFileW (in: hFindFile=0x381dc0, lpFindFileData=0x31e5e4 | out: lpFindFileData=0x31e5e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x55a27ba1, ftCreationTime.dwHighDateTime=0x1c9ea0a, ftLastAccessTime.dwLowDateTime=0x55a27ba1, ftLastAccessTime.dwHighDateTime=0x1c9ea0a, ftLastWriteTime.dwLowDateTime=0x55a27ba1, ftLastWriteTime.dwHighDateTime=0x1c9ea0a, nFileSizeHigh=0x0, nFileSizeLow=0x1511, dwReserved0=0x0, dwReserved1=0x0, cFileName="AppCompat.admx", cAlternateFileName="")) returned 1 [0115.693] FindNextFileW (in: hFindFile=0x381dc0, lpFindFileData=0x31e5e4 | out: lpFindFileData=0x31e5e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2617569b, ftCreationTime.dwHighDateTime=0x1c9ea0b, ftLastAccessTime.dwLowDateTime=0x2617569b, ftLastAccessTime.dwHighDateTime=0x1c9ea0b, ftLastWriteTime.dwLowDateTime=0x2617569b, ftLastWriteTime.dwHighDateTime=0x1c9ea0b, nFileSizeHigh=0x0, nFileSizeLow=0x174d, dwReserved0=0x0, dwReserved1=0x0, cFileName="AttachmentManager.admx", cAlternateFileName="")) returned 1 [0115.693] FindNextFileW (in: hFindFile=0x381dc0, lpFindFileData=0x31e5e4 | out: lpFindFileData=0x31e5e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9152e131, ftCreationTime.dwHighDateTime=0x1c9ea0d, ftLastAccessTime.dwLowDateTime=0x9152e131, ftLastAccessTime.dwHighDateTime=0x1c9ea0d, ftLastWriteTime.dwLowDateTime=0x9152e131, ftLastWriteTime.dwHighDateTime=0x1c9ea0d, nFileSizeHigh=0x0, nFileSizeLow=0xd3f, dwReserved0=0x0, dwReserved1=0x0, cFileName="AutoPlay.admx", cAlternateFileName="")) returned 1 [0115.693] FindNextFileW (in: hFindFile=0x381dc0, lpFindFileData=0x31e5e4 | out: lpFindFileData=0x31e5e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6275f691, ftCreationTime.dwHighDateTime=0x1c9ea0d, ftLastAccessTime.dwLowDateTime=0x6275f691, ftLastAccessTime.dwHighDateTime=0x1c9ea0d, ftLastWriteTime.dwLowDateTime=0x6275f691, ftLastWriteTime.dwHighDateTime=0x1c9ea0d, nFileSizeHigh=0x0, nFileSizeLow=0xb98, dwReserved0=0x0, dwReserved1=0x0, cFileName="Biometrics.admx", cAlternateFileName="")) returned 1 [0115.694] FindNextFileW (in: hFindFile=0x381dc0, lpFindFileData=0x31e5e4 | out: lpFindFileData=0x31e5e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x78de957d, ftCreationTime.dwHighDateTime=0x1c9ea0d, ftLastAccessTime.dwLowDateTime=0x78de957d, ftLastAccessTime.dwHighDateTime=0x1c9ea0d, ftLastWriteTime.dwLowDateTime=0x79213bc5, ftLastWriteTime.dwHighDateTime=0x1c9ea0d, nFileSizeHigh=0x0, nFileSizeLow=0xc01d, dwReserved0=0x0, dwReserved1=0x0, cFileName="Bits.admx", cAlternateFileName="")) returned 1 [0115.694] FindNextFileW (in: hFindFile=0x381dc0, lpFindFileData=0x31e5e4 | out: lpFindFileData=0x31e5e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xaf1f686f, ftCreationTime.dwHighDateTime=0x1c9ea0e, ftLastAccessTime.dwLowDateTime=0xaf1f686f, ftLastAccessTime.dwHighDateTime=0x1c9ea0e, ftLastWriteTime.dwLowDateTime=0xaf1f686f, ftLastWriteTime.dwHighDateTime=0x1c9ea0e, nFileSizeHigh=0x0, nFileSizeLow=0x6d5, dwReserved0=0x0, dwReserved1=0x0, cFileName="CEIPEnable.admx", cAlternateFileName="")) returned 1 [0115.694] FindNextFileW (in: hFindFile=0x381dc0, lpFindFileData=0x31e5e4 | out: lpFindFileData=0x31e5e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x829accef, ftCreationTime.dwHighDateTime=0x1c9ea0d, ftLastAccessTime.dwLowDateTime=0x829accef, ftLastAccessTime.dwHighDateTime=0x1c9ea0d, ftLastWriteTime.dwLowDateTime=0x829accef, ftLastWriteTime.dwHighDateTime=0x1c9ea0d, nFileSizeHigh=0x0, nFileSizeLow=0x551, dwReserved0=0x0, dwReserved1=0x0, cFileName="CipherSuiteOrder.admx", cAlternateFileName="")) returned 1 [0115.694] FindNextFileW (in: hFindFile=0x381dc0, lpFindFileData=0x31e5e4 | out: lpFindFileData=0x31e5e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x14a55b2b, ftCreationTime.dwHighDateTime=0x1c9ea0c, ftLastAccessTime.dwLowDateTime=0x14a55b2b, ftLastAccessTime.dwHighDateTime=0x1c9ea0c, ftLastWriteTime.dwLowDateTime=0x14a55b2b, ftLastWriteTime.dwHighDateTime=0x1c9ea0c, nFileSizeHigh=0x0, nFileSizeLow=0x531, dwReserved0=0x0, dwReserved1=0x0, cFileName="COM.admx", cAlternateFileName="")) returned 1 [0115.694] FindNextFileW (in: hFindFile=0x381dc0, lpFindFileData=0x31e5e4 | out: lpFindFileData=0x31e5e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x109f2d0f, ftCreationTime.dwHighDateTime=0x1ca0403, ftLastAccessTime.dwLowDateTime=0x109f2d0f, ftLastAccessTime.dwHighDateTime=0x1ca0403, ftLastWriteTime.dwLowDateTime=0xf88010b1, ftLastWriteTime.dwHighDateTime=0x1c9ea0b, nFileSizeHigh=0x0, nFileSizeLow=0x368f, dwReserved0=0x0, dwReserved1=0x0, cFileName="Conf.admx", cAlternateFileName="")) returned 1 [0115.694] FindNextFileW (in: hFindFile=0x381dc0, lpFindFileData=0x31e5e4 | out: lpFindFileData=0x31e5e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9aa71af8, ftCreationTime.dwHighDateTime=0x1ca0403, ftLastAccessTime.dwLowDateTime=0x9aa71af8, ftLastAccessTime.dwHighDateTime=0x1ca0403, ftLastWriteTime.dwLowDateTime=0x915a054b, ftLastWriteTime.dwHighDateTime=0x1c9ea0d, nFileSizeHigh=0x0, nFileSizeLow=0xa28, dwReserved0=0x0, dwReserved1=0x0, cFileName="ControlPanel.admx", cAlternateFileName="")) returned 1 [0115.694] FindNextFileW (in: hFindFile=0x381dc0, lpFindFileData=0x31e5e4 | out: lpFindFileData=0x31e5e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9aa97c55, ftCreationTime.dwHighDateTime=0x1ca0403, ftLastAccessTime.dwLowDateTime=0x9aa97c55, ftLastAccessTime.dwHighDateTime=0x1ca0403, ftLastWriteTime.dwLowDateTime=0x915ec807, ftLastWriteTime.dwHighDateTime=0x1c9ea0d, nFileSizeHigh=0x0, nFileSizeLow=0x2773, dwReserved0=0x0, dwReserved1=0x0, cFileName="ControlPanelDisplay.admx", cAlternateFileName="")) returned 1 [0115.694] FindNextFileW (in: hFindFile=0x381dc0, lpFindFileData=0x31e5e4 | out: lpFindFileData=0x31e5e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9a8f4d56, ftCreationTime.dwHighDateTime=0x1ca0403, ftLastAccessTime.dwLowDateTime=0x9a8f4d56, ftLastAccessTime.dwHighDateTime=0x1ca0403, ftLastWriteTime.dwLowDateTime=0x91612965, ftLastWriteTime.dwHighDateTime=0x1c9ea0d, nFileSizeHigh=0x0, nFileSizeLow=0x50d, dwReserved0=0x0, dwReserved1=0x0, cFileName="Cpls.admx", cAlternateFileName="")) returned 1 [0115.694] FindNextFileW (in: hFindFile=0x381dc0, lpFindFileData=0x31e5e4 | out: lpFindFileData=0x31e5e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9a941010, ftCreationTime.dwHighDateTime=0x1ca0403, ftLastAccessTime.dwLowDateTime=0x9a941010, ftLastAccessTime.dwHighDateTime=0x1ca0403, ftLastWriteTime.dwLowDateTime=0x91684d7f, ftLastWriteTime.dwHighDateTime=0x1c9ea0d, nFileSizeHigh=0x0, nFileSizeLow=0x78d, dwReserved0=0x0, dwReserved1=0x0, cFileName="CredentialProviders.admx", cAlternateFileName="")) returned 1 [0115.694] FindNextFileW (in: hFindFile=0x381dc0, lpFindFileData=0x31e5e4 | out: lpFindFileData=0x31e5e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8d7431d9, ftCreationTime.dwHighDateTime=0x1c9ea0e, ftLastAccessTime.dwLowDateTime=0x8d7431d9, ftLastAccessTime.dwHighDateTime=0x1c9ea0e, ftLastWriteTime.dwLowDateTime=0x8d7431d9, ftLastWriteTime.dwHighDateTime=0x1c9ea0e, nFileSizeHigh=0x0, nFileSizeLow=0x2a1b, dwReserved0=0x0, dwReserved1=0x0, cFileName="CredSsp.admx", cAlternateFileName="")) returned 1 [0115.694] FindNextFileW (in: hFindFile=0x381dc0, lpFindFileData=0x31e5e4 | out: lpFindFileData=0x31e5e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9a941010, ftCreationTime.dwHighDateTime=0x1ca0403, ftLastAccessTime.dwLowDateTime=0x9a941010, ftLastAccessTime.dwHighDateTime=0x1ca0403, ftLastWriteTime.dwLowDateTime=0x9189a0a3, ftLastWriteTime.dwHighDateTime=0x1c9ea0d, nFileSizeHigh=0x0, nFileSizeLow=0x6d2, dwReserved0=0x0, dwReserved1=0x0, cFileName="CredUI.admx", cAlternateFileName="")) returned 1 [0115.694] FindNextFileW (in: hFindFile=0x381dc0, lpFindFileData=0x31e5e4 | out: lpFindFileData=0x31e5e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x12ca4751, ftCreationTime.dwHighDateTime=0x1c9ea0f, ftLastAccessTime.dwLowDateTime=0x12ca4751, ftLastAccessTime.dwHighDateTime=0x1c9ea0f, ftLastWriteTime.dwLowDateTime=0x12ca4751, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x85d, dwReserved0=0x0, dwReserved1=0x0, cFileName="CtrlAltDel.admx", cAlternateFileName="")) returned 1 [0115.694] FindNextFileW (in: hFindFile=0x381dc0, lpFindFileData=0x31e5e4 | out: lpFindFileData=0x31e5e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1a913da1, ftCreationTime.dwHighDateTime=0x1ca0404, ftLastAccessTime.dwLowDateTime=0x1a913da1, ftLastAccessTime.dwHighDateTime=0x1ca0404, ftLastWriteTime.dwLowDateTime=0x14aa1de7, ftLastWriteTime.dwHighDateTime=0x1c9ea0c, nFileSizeHigh=0x0, nFileSizeLow=0x985, dwReserved0=0x0, dwReserved1=0x0, cFileName="DCOM.admx", cAlternateFileName="")) returned 1 [0115.694] FindNextFileW (in: hFindFile=0x381dc0, lpFindFileData=0x31e5e4 | out: lpFindFileData=0x31e5e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9aa97c55, ftCreationTime.dwHighDateTime=0x1ca0403, ftLastAccessTime.dwLowDateTime=0x9aa97c55, ftLastAccessTime.dwHighDateTime=0x1ca0403, ftLastWriteTime.dwLowDateTime=0x918e635f, ftLastWriteTime.dwHighDateTime=0x1c9ea0d, nFileSizeHigh=0x0, nFileSizeLow=0x3508, dwReserved0=0x0, dwReserved1=0x0, cFileName="Desktop.admx", cAlternateFileName="")) returned 1 [0115.694] FindNextFileW (in: hFindFile=0x381dc0, lpFindFileData=0x31e5e4 | out: lpFindFileData=0x31e5e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x862e4e1d, ftCreationTime.dwHighDateTime=0x1c9ea0f, ftLastAccessTime.dwLowDateTime=0x862e4e1d, ftLastAccessTime.dwHighDateTime=0x1c9ea0f, ftLastWriteTime.dwLowDateTime=0x8630af7b, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x4877, dwReserved0=0x0, dwReserved1=0x0, cFileName="DeviceInstallation.admx", cAlternateFileName="")) returned 1 [0115.694] FindNextFileW (in: hFindFile=0x381dc0, lpFindFileData=0x31e5e4 | out: lpFindFileData=0x31e5e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1b9701dd, ftCreationTime.dwHighDateTime=0x1c9ea0d, ftLastAccessTime.dwLowDateTime=0x1b9701dd, ftLastAccessTime.dwHighDateTime=0x1c9ea0d, ftLastWriteTime.dwLowDateTime=0x1b9701dd, ftLastWriteTime.dwHighDateTime=0x1c9ea0d, nFileSizeHigh=0x0, nFileSizeLow=0x957, dwReserved0=0x0, dwReserved1=0x0, cFileName="DeviceRedirection.admx", cAlternateFileName="")) returned 1 [0115.694] FindNextFileW (in: hFindFile=0x381dc0, lpFindFileData=0x31e5e4 | out: lpFindFileData=0x31e5e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x564e650f, ftCreationTime.dwHighDateTime=0x1c9ea0e, ftLastAccessTime.dwLowDateTime=0x564e650f, ftLastAccessTime.dwHighDateTime=0x1c9ea0e, ftLastWriteTime.dwLowDateTime=0x564e650f, ftLastWriteTime.dwHighDateTime=0x1c9ea0e, nFileSizeHigh=0x0, nFileSizeLow=0x445, dwReserved0=0x0, dwReserved1=0x0, cFileName="DFS.admx", cAlternateFileName="")) returned 1 [0115.694] FindNextFileW (in: hFindFile=0x381dc0, lpFindFileData=0x31e5e4 | out: lpFindFileData=0x31e5e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x52b1d501, ftCreationTime.dwHighDateTime=0x1c9ea0b, ftLastAccessTime.dwLowDateTime=0x52b1d501, ftLastAccessTime.dwHighDateTime=0x1c9ea0b, ftLastWriteTime.dwLowDateTime=0x52b1d501, ftLastWriteTime.dwHighDateTime=0x1c9ea0b, nFileSizeHigh=0x0, nFileSizeLow=0x7c8, dwReserved0=0x0, dwReserved1=0x0, cFileName="DigitalLocker.admx", cAlternateFileName="")) returned 1 [0115.694] FindNextFileW (in: hFindFile=0x381dc0, lpFindFileData=0x31e5e4 | out: lpFindFileData=0x31e5e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4da20011, ftCreationTime.dwHighDateTime=0x1c9ea0d, ftLastAccessTime.dwLowDateTime=0x4da20011, ftLastAccessTime.dwHighDateTime=0x1c9ea0d, ftLastWriteTime.dwLowDateTime=0x4da20011, ftLastWriteTime.dwHighDateTime=0x1c9ea0d, nFileSizeHigh=0x0, nFileSizeLow=0xbda, dwReserved0=0x0, dwReserved1=0x0, cFileName="DiskDiagnostic.admx", cAlternateFileName="")) returned 1 [0115.694] FindNextFileW (in: hFindFile=0x381dc0, lpFindFileData=0x31e5e4 | out: lpFindFileData=0x31e5e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8dbb2445, ftCreationTime.dwHighDateTime=0x1c9ea0f, ftLastAccessTime.dwLowDateTime=0x8dbb2445, ftLastAccessTime.dwHighDateTime=0x1c9ea0f, ftLastWriteTime.dwLowDateTime=0x8dbb2445, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0xac6, dwReserved0=0x0, dwReserved1=0x0, cFileName="DiskNVCache.admx", cAlternateFileName="")) returned 1 [0115.694] FindNextFileW (in: hFindFile=0x381dc0, lpFindFileData=0x31e5e4 | out: lpFindFileData=0x31e5e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7945dd77, ftCreationTime.dwHighDateTime=0x1c9ea0b, ftLastAccessTime.dwLowDateTime=0x7945dd77, ftLastAccessTime.dwHighDateTime=0x1c9ea0b, ftLastWriteTime.dwLowDateTime=0x79483ed5, ftLastWriteTime.dwHighDateTime=0x1c9ea0b, nFileSizeHigh=0x0, nFileSizeLow=0x17eb, dwReserved0=0x0, dwReserved1=0x0, cFileName="DiskQuota.admx", cAlternateFileName="")) returned 1 [0115.694] FindNextFileW (in: hFindFile=0x381dc0, lpFindFileData=0x31e5e4 | out: lpFindFileData=0x31e5e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9c4bae79, ftCreationTime.dwHighDateTime=0x1c9ea0d, ftLastAccessTime.dwLowDateTime=0x9c4bae79, ftLastAccessTime.dwHighDateTime=0x1c9ea0d, ftLastWriteTime.dwLowDateTime=0x9c4bae79, ftLastWriteTime.dwHighDateTime=0x1c9ea0d, nFileSizeHigh=0x0, nFileSizeLow=0x3dd, dwReserved0=0x0, dwReserved1=0x0, cFileName="DistributedLinkTracking.admx", cAlternateFileName="")) returned 1 [0115.694] FindNextFileW (in: hFindFile=0x381dc0, lpFindFileData=0x31e5e4 | out: lpFindFileData=0x31e5e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x54c9df37, ftCreationTime.dwHighDateTime=0x1c9ea0a, ftLastAccessTime.dwLowDateTime=0x54c9df37, ftLastAccessTime.dwHighDateTime=0x1c9ea0a, ftLastWriteTime.dwLowDateTime=0x54c9df37, ftLastWriteTime.dwHighDateTime=0x1c9ea0a, nFileSizeHigh=0x0, nFileSizeLow=0x2832, dwReserved0=0x0, dwReserved1=0x0, cFileName="DnsClient.admx", cAlternateFileName="")) returned 1 [0115.694] FindNextFileW (in: hFindFile=0x381dc0, lpFindFileData=0x31e5e4 | out: lpFindFileData=0x31e5e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9324f691, ftCreationTime.dwHighDateTime=0x1c9ea0e, ftLastAccessTime.dwLowDateTime=0x9324f691, ftLastAccessTime.dwHighDateTime=0x1c9ea0e, ftLastWriteTime.dwLowDateTime=0x9324f691, ftLastWriteTime.dwHighDateTime=0x1c9ea0e, nFileSizeHigh=0x0, nFileSizeLow=0x1de8, dwReserved0=0x0, dwReserved1=0x0, cFileName="DWM.admx", cAlternateFileName="")) returned 1 [0115.695] FindNextFileW (in: hFindFile=0x381dc0, lpFindFileData=0x31e5e4 | out: lpFindFileData=0x31e5e4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x3757e82b, ftCreationTime.dwHighDateTime=0x1ca0445, ftLastAccessTime.dwLowDateTime=0x95b0aa0c, ftLastAccessTime.dwHighDateTime=0x1cbf8eb, ftLastWriteTime.dwLowDateTime=0x95b0aa0c, ftLastWriteTime.dwHighDateTime=0x1cbf8eb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="en-US", cAlternateFileName="")) returned 1 [0115.695] FindNextFileW (in: hFindFile=0x381dc0, lpFindFileData=0x31e5e4 | out: lpFindFileData=0x31e5e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9a98d2ca, ftCreationTime.dwHighDateTime=0x1ca0403, ftLastAccessTime.dwLowDateTime=0x9a98d2ca, ftLastAccessTime.dwHighDateTime=0x1ca0403, ftLastWriteTime.dwLowDateTime=0x9193261b, ftLastWriteTime.dwHighDateTime=0x1c9ea0d, nFileSizeHigh=0x0, nFileSizeLow=0x3c2, dwReserved0=0x0, dwReserved1=0x0, cFileName="EncryptFilesonMove.admx", cAlternateFileName="")) returned 1 [0115.695] FindNextFileW (in: hFindFile=0x381dc0, lpFindFileData=0x31e5e4 | out: lpFindFileData=0x31e5e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa0d89837, ftCreationTime.dwHighDateTime=0x1c9ea0b, ftLastAccessTime.dwLowDateTime=0xa0d89837, ftLastAccessTime.dwHighDateTime=0x1c9ea0b, ftLastWriteTime.dwLowDateTime=0xa0d89837, ftLastWriteTime.dwHighDateTime=0x1c9ea0b, nFileSizeHigh=0x0, nFileSizeLow=0x13e9, dwReserved0=0x0, dwReserved1=0x0, cFileName="EnhancedStorage.admx", cAlternateFileName="")) returned 1 [0115.695] FindNextFileW (in: hFindFile=0x381dc0, lpFindFileData=0x31e5e4 | out: lpFindFileData=0x31e5e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xaa5f0dcd, ftCreationTime.dwHighDateTime=0x1c9ea0e, ftLastAccessTime.dwLowDateTime=0xaa5f0dcd, ftLastAccessTime.dwHighDateTime=0x1c9ea0e, ftLastWriteTime.dwLowDateTime=0xaa5f0dcd, ftLastWriteTime.dwHighDateTime=0x1c9ea0e, nFileSizeHigh=0x0, nFileSizeLow=0x54e9, dwReserved0=0x0, dwReserved1=0x0, cFileName="ErrorReporting.admx", cAlternateFileName="")) returned 1 [0115.695] FindNextFileW (in: hFindFile=0x381dc0, lpFindFileData=0x31e5e4 | out: lpFindFileData=0x31e5e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xeb94d87b, ftCreationTime.dwHighDateTime=0x1c9ea0d, ftLastAccessTime.dwLowDateTime=0xeb94d87b, ftLastAccessTime.dwHighDateTime=0x1c9ea0d, ftLastWriteTime.dwLowDateTime=0xeb94d87b, ftLastWriteTime.dwHighDateTime=0x1c9ea0d, nFileSizeHigh=0x0, nFileSizeLow=0x7cc, dwReserved0=0x0, dwReserved1=0x0, cFileName="EventForwarding.admx", cAlternateFileName="")) returned 1 [0115.695] FindNextFileW (in: hFindFile=0x381dc0, lpFindFileData=0x31e5e4 | out: lpFindFileData=0x31e5e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xee6f9c35, ftCreationTime.dwHighDateTime=0x1c9ea0d, ftLastAccessTime.dwLowDateTime=0xee6f9c35, ftLastAccessTime.dwHighDateTime=0x1c9ea0d, ftLastWriteTime.dwLowDateTime=0xee71fd93, ftLastWriteTime.dwHighDateTime=0x1c9ea0d, nFileSizeHigh=0x0, nFileSizeLow=0x308d, dwReserved0=0x0, dwReserved1=0x0, cFileName="EventLog.admx", cAlternateFileName="")) returned 1 [0115.695] FindNextFileW (in: hFindFile=0x381dc0, lpFindFileData=0x31e5e4 | out: lpFindFileData=0x31e5e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x28b071a3, ftCreationTime.dwHighDateTime=0x1c9ea0e, ftLastAccessTime.dwLowDateTime=0x28b071a3, ftLastAccessTime.dwHighDateTime=0x1c9ea0e, ftLastWriteTime.dwLowDateTime=0x28b2d301, ftLastWriteTime.dwHighDateTime=0x1c9ea0e, nFileSizeHigh=0x0, nFileSizeLow=0x9e0, dwReserved0=0x0, dwReserved1=0x0, cFileName="EventViewer.admx", cAlternateFileName="")) returned 1 [0115.695] FindNextFileW (in: hFindFile=0x381dc0, lpFindFileData=0x31e5e4 | out: lpFindFileData=0x31e5e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9a98d2ca, ftCreationTime.dwHighDateTime=0x1ca0403, ftLastAccessTime.dwLowDateTime=0x9a98d2ca, ftLastAccessTime.dwHighDateTime=0x1ca0403, ftLastWriteTime.dwLowDateTime=0x9197e8d7, ftLastWriteTime.dwHighDateTime=0x1c9ea0d, nFileSizeHigh=0x0, nFileSizeLow=0xefc, dwReserved0=0x0, dwReserved1=0x0, cFileName="Explorer.admx", cAlternateFileName="")) returned 1 [0115.695] FindNextFileW (in: hFindFile=0x381dc0, lpFindFileData=0x31e5e4 | out: lpFindFileData=0x31e5e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4c845c01, ftCreationTime.dwHighDateTime=0x1c9ea0d, ftLastAccessTime.dwLowDateTime=0x4c845c01, ftLastAccessTime.dwHighDateTime=0x1c9ea0d, ftLastWriteTime.dwLowDateTime=0x4c86bd5f, ftLastWriteTime.dwHighDateTime=0x1c9ea0d, nFileSizeHigh=0x0, nFileSizeLow=0x85d, dwReserved0=0x0, dwReserved1=0x0, cFileName="FileRecovery.admx", cAlternateFileName="")) returned 1 [0115.695] FindNextFileW (in: hFindFile=0x381dc0, lpFindFileData=0x31e5e4 | out: lpFindFileData=0x31e5e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x71094f0a, ftCreationTime.dwHighDateTime=0x1ca03fd, ftLastAccessTime.dwLowDateTime=0x71094f0a, ftLastAccessTime.dwHighDateTime=0x1ca03fd, ftLastWriteTime.dwLowDateTime=0x79568709, ftLastWriteTime.dwHighDateTime=0x1c9ea0b, nFileSizeHigh=0x0, nFileSizeLow=0x181c, dwReserved0=0x0, dwReserved1=0x0, cFileName="FileSys.admx", cAlternateFileName="")) returned 1 [0115.695] FindNextFileW (in: hFindFile=0x381dc0, lpFindFileData=0x31e5e4 | out: lpFindFileData=0x31e5e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x66654f7b, ftCreationTime.dwHighDateTime=0x1c9ea0c, ftLastAccessTime.dwLowDateTime=0x66654f7b, ftLastAccessTime.dwHighDateTime=0x1c9ea0c, ftLastWriteTime.dwLowDateTime=0x66654f7b, ftLastWriteTime.dwHighDateTime=0x1c9ea0c, nFileSizeHigh=0x0, nFileSizeLow=0x926, dwReserved0=0x0, dwReserved1=0x0, cFileName="FolderRedirection.admx", cAlternateFileName="")) returned 1 [0115.695] FindNextFileW (in: hFindFile=0x381dc0, lpFindFileData=0x31e5e4 | out: lpFindFileData=0x31e5e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9a9b3427, ftCreationTime.dwHighDateTime=0x1ca0403, ftLastAccessTime.dwLowDateTime=0x9a9b3427, ftLastAccessTime.dwHighDateTime=0x1ca0403, ftLastWriteTime.dwLowDateTime=0x9197e8d7, ftLastWriteTime.dwHighDateTime=0x1c9ea0d, nFileSizeHigh=0x0, nFileSizeLow=0x5ed, dwReserved0=0x0, dwReserved1=0x0, cFileName="FramePanes.admx", cAlternateFileName="")) returned 1 [0115.695] FindNextFileW (in: hFindFile=0x381dc0, lpFindFileData=0x31e5e4 | out: lpFindFileData=0x31e5e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4f2f8463, ftCreationTime.dwHighDateTime=0x1c9ea0d, ftLastAccessTime.dwLowDateTime=0x4f2f8463, ftLastAccessTime.dwHighDateTime=0x1c9ea0d, ftLastWriteTime.dwLowDateTime=0x4f2f8463, ftLastWriteTime.dwHighDateTime=0x1c9ea0d, nFileSizeHigh=0x0, nFileSizeLow=0x8b5, dwReserved0=0x0, dwReserved1=0x0, cFileName="fthsvc.admx", cAlternateFileName="")) returned 1 [0115.695] FindNextFileW (in: hFindFile=0x381dc0, lpFindFileData=0x31e5e4 | out: lpFindFileData=0x31e5e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa7394e20, ftCreationTime.dwHighDateTime=0x1ca0403, ftLastAccessTime.dwLowDateTime=0xa7394e20, ftLastAccessTime.dwHighDateTime=0x1ca0403, ftLastWriteTime.dwLowDateTime=0x6412b047, ftLastWriteTime.dwHighDateTime=0x1c9ea0b, nFileSizeHigh=0x0, nFileSizeLow=0x8d0, dwReserved0=0x0, dwReserved1=0x0, cFileName="GameExplorer.admx", cAlternateFileName="")) returned 1 [0115.695] FindNextFileW (in: hFindFile=0x381dc0, lpFindFileData=0x31e5e4 | out: lpFindFileData=0x31e5e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd7075dcf, ftCreationTime.dwHighDateTime=0x1c9ea0f, ftLastAccessTime.dwLowDateTime=0xd7075dcf, ftLastAccessTime.dwHighDateTime=0x1c9ea0f, ftLastWriteTime.dwLowDateTime=0xd7075dcf, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x68b0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Globalization.admx", cAlternateFileName="")) returned 1 [0115.695] FindNextFileW (in: hFindFile=0x381dc0, lpFindFileData=0x31e5e4 | out: lpFindFileData=0x31e5e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x10a3efc9, ftCreationTime.dwHighDateTime=0x1ca0403, ftLastAccessTime.dwLowDateTime=0x10a3efc9, ftLastAccessTime.dwHighDateTime=0x1ca0403, ftLastWriteTime.dwLowDateTime=0xf8b46ec5, ftLastWriteTime.dwHighDateTime=0x1c9ea0b, nFileSizeHigh=0x0, nFileSizeLow=0x5bd3, dwReserved0=0x0, dwReserved1=0x0, cFileName="GroupPolicy.admx", cAlternateFileName="")) returned 1 [0115.695] FindNextFileW (in: hFindFile=0x381dc0, lpFindFileData=0x31e5e4 | out: lpFindFileData=0x31e5e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb2abb51d, ftCreationTime.dwHighDateTime=0x1c9ea0b, ftLastAccessTime.dwLowDateTime=0xb2abb51d, ftLastAccessTime.dwHighDateTime=0x1c9ea0b, ftLastWriteTime.dwLowDateTime=0xb2abb51d, ftLastWriteTime.dwHighDateTime=0x1c9ea0b, nFileSizeHigh=0x0, nFileSizeLow=0xa57, dwReserved0=0x0, dwReserved1=0x0, cFileName="Help.admx", cAlternateFileName="")) returned 1 [0115.695] FindNextFileW (in: hFindFile=0x381dc0, lpFindFileData=0x31e5e4 | out: lpFindFileData=0x31e5e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa572dcf9, ftCreationTime.dwHighDateTime=0x1c9ea0b, ftLastAccessTime.dwLowDateTime=0xa572dcf9, ftLastAccessTime.dwHighDateTime=0x1c9ea0b, ftLastWriteTime.dwLowDateTime=0xa572dcf9, ftLastWriteTime.dwHighDateTime=0x1c9ea0b, nFileSizeHigh=0x0, nFileSizeLow=0xb0e, dwReserved0=0x0, dwReserved1=0x0, cFileName="HelpAndSupport.admx", cAlternateFileName="")) returned 1 [0115.695] FindNextFileW (in: hFindFile=0x381dc0, lpFindFileData=0x31e5e4 | out: lpFindFileData=0x31e5e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3c8e3dbb, ftCreationTime.dwHighDateTime=0x1c9ea0b, ftLastAccessTime.dwLowDateTime=0x3c8e3dbb, ftLastAccessTime.dwHighDateTime=0x1c9ea0b, ftLastWriteTime.dwLowDateTime=0x3c8e3dbb, ftLastWriteTime.dwHighDateTime=0x1c9ea0b, nFileSizeHigh=0x0, nFileSizeLow=0x6a5, dwReserved0=0x0, dwReserved1=0x0, cFileName="HotStart.admx", cAlternateFileName="")) returned 1 [0115.695] FindNextFileW (in: hFindFile=0x381dc0, lpFindFileData=0x31e5e4 | out: lpFindFileData=0x31e5e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x30c3818b, ftCreationTime.dwHighDateTime=0x1c9ea0c, ftLastAccessTime.dwLowDateTime=0x30c3818b, ftLastAccessTime.dwHighDateTime=0x1c9ea0c, ftLastWriteTime.dwLowDateTime=0x30c5e2e9, ftLastWriteTime.dwHighDateTime=0x1c9ea0c, nFileSizeHigh=0x0, nFileSizeLow=0x8061, dwReserved0=0x0, dwReserved1=0x0, cFileName="ICM.admx", cAlternateFileName="")) returned 1 [0115.695] FindNextFileW (in: hFindFile=0x381dc0, lpFindFileData=0x31e5e4 | out: lpFindFileData=0x31e5e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x171c2579, ftCreationTime.dwHighDateTime=0x1c9ea0c, ftLastAccessTime.dwLowDateTime=0x171c2579, ftLastAccessTime.dwHighDateTime=0x1c9ea0c, ftLastWriteTime.dwLowDateTime=0x171e86d7, ftLastWriteTime.dwHighDateTime=0x1c9ea0c, nFileSizeHigh=0x0, nFileSizeLow=0x4db, dwReserved0=0x0, dwReserved1=0x0, cFileName="IIS.admx", cAlternateFileName="")) returned 1 [0115.696] FindClose (in: hFindFile=0x381dc0 | out: hFindFile=0x381dc0) returned 1 [0115.697] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e86c) returned 1 [0115.697] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e878) returned 1 [0115.697] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e834) returned 1 [0115.697] GetFullPathNameW (in: lpFileName="C:\\Windows\\PolicyDefinitions\\en-US", nBufferLength=0x105, lpBuffer=0x31e33c, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\PolicyDefinitions\\en-US", lpFilePart=0x0) returned 0x22 [0115.697] GetFullPathNameW (in: lpFileName="C:\\Windows\\PolicyDefinitions\\en-US\\", nBufferLength=0x105, lpBuffer=0x31e310, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\PolicyDefinitions\\en-US\\", lpFilePart=0x0) returned 0x23 [0115.697] FindFirstFileW (in: lpFileName="C:\\Windows\\PolicyDefinitions\\en-US\\*", lpFindFileData=0x31e55c | out: lpFindFileData=0x31e55c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x3757e82b, ftCreationTime.dwHighDateTime=0x1ca0445, ftLastAccessTime.dwLowDateTime=0x95b0aa0c, ftLastAccessTime.dwHighDateTime=0x1cbf8eb, ftLastWriteTime.dwLowDateTime=0x95b0aa0c, ftLastWriteTime.dwHighDateTime=0x1cbf8eb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x381dc0 [0115.704] FindClose (in: hFindFile=0x381dc0 | out: hFindFile=0x381dc0) returned 1 [0115.705] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e7f4) returned 1 [0115.705] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e800) returned 1 [0115.705] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e834) returned 1 [0115.705] GetFullPathNameW (in: lpFileName="C:\\Windows\\PolicyDefinitions\\en-US", nBufferLength=0x105, lpBuffer=0x31e33c, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\PolicyDefinitions\\en-US", lpFilePart=0x0) returned 0x22 [0115.705] GetFullPathNameW (in: lpFileName="C:\\Windows\\PolicyDefinitions\\en-US\\", nBufferLength=0x105, lpBuffer=0x31e310, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\PolicyDefinitions\\en-US\\", lpFilePart=0x0) returned 0x23 [0115.705] FindFirstFileW (in: lpFileName="C:\\Windows\\PolicyDefinitions\\en-US\\*", lpFindFileData=0x31e55c | out: lpFindFileData=0x31e55c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x3757e82b, ftCreationTime.dwHighDateTime=0x1ca0445, ftLastAccessTime.dwLowDateTime=0x95b0aa0c, ftLastAccessTime.dwHighDateTime=0x1cbf8eb, ftLastWriteTime.dwLowDateTime=0x95b0aa0c, ftLastWriteTime.dwHighDateTime=0x1cbf8eb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x381dc0 [0115.706] FindClose (in: hFindFile=0x381dc0 | out: hFindFile=0x381dc0) returned 1 [0115.707] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e7f4) returned 1 [0115.707] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e800) returned 1 [0115.707] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e8ac) returned 1 [0115.707] GetFullPathNameW (in: lpFileName="C:\\Windows\\Prefetch", nBufferLength=0x105, lpBuffer=0x31e3b4, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\Prefetch", lpFilePart=0x0) returned 0x13 [0115.707] GetFullPathNameW (in: lpFileName="C:\\Windows\\Prefetch\\", nBufferLength=0x105, lpBuffer=0x31e388, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\Prefetch\\", lpFilePart=0x0) returned 0x14 [0115.707] FindFirstFileW (in: lpFileName="C:\\Windows\\Prefetch\\*", lpFindFileData=0x31e5d4 | out: lpFindFileData=0x31e5d4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x6240bc00, ftCreationTime.dwHighDateTime=0x1d2de2a, ftLastAccessTime.dwLowDateTime=0xef82e560, ftLastAccessTime.dwHighDateTime=0x1d6eb7e, ftLastWriteTime.dwLowDateTime=0xef82e560, ftLastWriteTime.dwHighDateTime=0x1d6eb7e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x381dc0 [0115.708] FindClose (in: hFindFile=0x381dc0 | out: hFindFile=0x381dc0) returned 1 [0115.708] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e86c) returned 1 [0115.708] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e878) returned 1 [0115.708] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e8ac) returned 1 [0115.708] GetFullPathNameW (in: lpFileName="C:\\Windows\\Prefetch", nBufferLength=0x105, lpBuffer=0x31e3b4, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\Prefetch", lpFilePart=0x0) returned 0x13 [0115.708] GetFullPathNameW (in: lpFileName="C:\\Windows\\Prefetch\\", nBufferLength=0x105, lpBuffer=0x31e388, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\Prefetch\\", lpFilePart=0x0) returned 0x14 [0115.708] FindFirstFileW (in: lpFileName="C:\\Windows\\Prefetch\\*", lpFindFileData=0x31e5d4 | out: lpFindFileData=0x31e5d4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x6240bc00, ftCreationTime.dwHighDateTime=0x1d2de2a, ftLastAccessTime.dwLowDateTime=0xef82e560, ftLastAccessTime.dwHighDateTime=0x1d6eb7e, ftLastWriteTime.dwLowDateTime=0xef82e560, ftLastWriteTime.dwHighDateTime=0x1d6eb7e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x381dc0 [0115.709] FindClose (in: hFindFile=0x381dc0 | out: hFindFile=0x381dc0) returned 1 [0115.709] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e86c) returned 1 [0115.709] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e878) returned 1 [0115.709] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e834) returned 1 [0115.709] GetFullPathNameW (in: lpFileName="C:\\Windows\\Prefetch\\ReadyBoot", nBufferLength=0x105, lpBuffer=0x31e33c, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\Prefetch\\ReadyBoot", lpFilePart=0x0) returned 0x1d [0115.709] GetFullPathNameW (in: lpFileName="C:\\Windows\\Prefetch\\ReadyBoot\\", nBufferLength=0x105, lpBuffer=0x31e310, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\Prefetch\\ReadyBoot\\", lpFilePart=0x0) returned 0x1e [0115.709] FindFirstFileW (in: lpFileName="C:\\Windows\\Prefetch\\ReadyBoot\\*", lpFindFileData=0x31e55c | out: lpFindFileData=0x31e55c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x6240bc00, ftCreationTime.dwHighDateTime=0x1d2de2a, ftLastAccessTime.dwLowDateTime=0xd13d4e40, ftLastAccessTime.dwHighDateTime=0x1d5e82a, ftLastWriteTime.dwLowDateTime=0xd13d4e40, ftLastWriteTime.dwHighDateTime=0x1d5e82a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x381dc0 [0115.709] FindClose (in: hFindFile=0x381dc0 | out: hFindFile=0x381dc0) returned 1 [0115.709] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e7f4) returned 1 [0115.709] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e800) returned 1 [0115.709] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e834) returned 1 [0115.709] GetFullPathNameW (in: lpFileName="C:\\Windows\\Prefetch\\ReadyBoot", nBufferLength=0x105, lpBuffer=0x31e33c, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\Prefetch\\ReadyBoot", lpFilePart=0x0) returned 0x1d [0115.709] GetFullPathNameW (in: lpFileName="C:\\Windows\\Prefetch\\ReadyBoot\\", nBufferLength=0x105, lpBuffer=0x31e310, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\Prefetch\\ReadyBoot\\", lpFilePart=0x0) returned 0x1e [0115.709] FindFirstFileW (in: lpFileName="C:\\Windows\\Prefetch\\ReadyBoot\\*", lpFindFileData=0x31e55c | out: lpFindFileData=0x31e55c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x6240bc00, ftCreationTime.dwHighDateTime=0x1d2de2a, ftLastAccessTime.dwLowDateTime=0xd13d4e40, ftLastAccessTime.dwHighDateTime=0x1d5e82a, ftLastWriteTime.dwLowDateTime=0xd13d4e40, ftLastWriteTime.dwHighDateTime=0x1d5e82a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x381dc0 [0115.710] FindClose (in: hFindFile=0x381dc0 | out: hFindFile=0x381dc0) returned 1 [0115.710] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e7f4) returned 1 [0115.710] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e800) returned 1 [0115.710] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e8ac) returned 1 [0115.710] GetFullPathNameW (in: lpFileName="C:\\Windows\\Registration", nBufferLength=0x105, lpBuffer=0x31e3b4, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\Registration", lpFilePart=0x0) returned 0x17 [0115.710] GetFullPathNameW (in: lpFileName="C:\\Windows\\Registration\\", nBufferLength=0x105, lpBuffer=0x31e388, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\Registration\\", lpFilePart=0x0) returned 0x18 [0115.710] FindFirstFileW (in: lpFileName="C:\\Windows\\Registration\\*", lpFindFileData=0x31e5d4 | out: lpFindFileData=0x31e5d4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfeb43ace, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xff1f57a0, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xff1f57a0, ftLastWriteTime.dwHighDateTime=0x1ca0431, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x381dc0 [0115.710] FindClose (in: hFindFile=0x381dc0 | out: hFindFile=0x381dc0) returned 1 [0115.710] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e86c) returned 1 [0115.710] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e878) returned 1 [0115.710] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e8ac) returned 1 [0115.710] GetFullPathNameW (in: lpFileName="C:\\Windows\\Registration", nBufferLength=0x105, lpBuffer=0x31e3b4, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\Registration", lpFilePart=0x0) returned 0x17 [0115.710] GetFullPathNameW (in: lpFileName="C:\\Windows\\Registration\\", nBufferLength=0x105, lpBuffer=0x31e388, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\Registration\\", lpFilePart=0x0) returned 0x18 [0115.710] FindFirstFileW (in: lpFileName="C:\\Windows\\Registration\\*", lpFindFileData=0x31e5d4 | out: lpFindFileData=0x31e5d4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfeb43ace, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xff1f57a0, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xff1f57a0, ftLastWriteTime.dwHighDateTime=0x1ca0431, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x381dc0 [0115.710] FindClose (in: hFindFile=0x381dc0 | out: hFindFile=0x381dc0) returned 1 [0115.710] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e86c) returned 1 [0115.711] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e878) returned 1 [0115.711] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e834) returned 1 [0115.711] GetFullPathNameW (in: lpFileName="C:\\Windows\\Registration\\CRMLog", nBufferLength=0x105, lpBuffer=0x31e33c, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\Registration\\CRMLog", lpFilePart=0x0) returned 0x1e [0115.711] GetFullPathNameW (in: lpFileName="C:\\Windows\\Registration\\CRMLog\\", nBufferLength=0x105, lpBuffer=0x31e310, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\Registration\\CRMLog\\", lpFilePart=0x0) returned 0x1f [0115.711] FindFirstFileW (in: lpFileName="C:\\Windows\\Registration\\CRMLog\\*", lpFindFileData=0x31e55c | out: lpFindFileData=0x31e55c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfeb69c28, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfeb69c28, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xa35dd730, ftLastWriteTime.dwHighDateTime=0x1ca042b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x381dc0 [0115.711] FindClose (in: hFindFile=0x381dc0 | out: hFindFile=0x381dc0) returned 1 [0115.712] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e7f4) returned 1 [0115.712] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e800) returned 1 [0115.712] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e834) returned 1 [0115.712] GetFullPathNameW (in: lpFileName="C:\\Windows\\Registration\\CRMLog", nBufferLength=0x105, lpBuffer=0x31e33c, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\Registration\\CRMLog", lpFilePart=0x0) returned 0x1e [0115.712] GetFullPathNameW (in: lpFileName="C:\\Windows\\Registration\\CRMLog\\", nBufferLength=0x105, lpBuffer=0x31e310, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\Registration\\CRMLog\\", lpFilePart=0x0) returned 0x1f [0115.712] FindFirstFileW (in: lpFileName="C:\\Windows\\Registration\\CRMLog\\*", lpFindFileData=0x31e55c | out: lpFindFileData=0x31e55c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfeb69c28, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfeb69c28, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xa35dd730, ftLastWriteTime.dwHighDateTime=0x1ca042b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x381dc0 [0115.712] FindClose (in: hFindFile=0x381dc0 | out: hFindFile=0x381dc0) returned 1 [0115.712] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e7f4) returned 1 [0115.712] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e800) returned 1 [0115.712] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e8ac) returned 1 [0115.712] GetFullPathNameW (in: lpFileName="C:\\Windows\\rescache", nBufferLength=0x105, lpBuffer=0x31e3b4, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\rescache", lpFilePart=0x0) returned 0x13 [0115.712] GetFullPathNameW (in: lpFileName="C:\\Windows\\rescache\\", nBufferLength=0x105, lpBuffer=0x31e388, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\rescache\\", lpFilePart=0x0) returned 0x14 [0115.712] FindFirstFileW (in: lpFileName="C:\\Windows\\rescache\\*", lpFindFileData=0x31e5d4 | out: lpFindFileData=0x31e5d4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfeb69c28, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x2b041c20, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x2b041c20, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x381dc0 [0115.713] FindClose (in: hFindFile=0x381dc0 | out: hFindFile=0x381dc0) returned 1 [0115.713] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e86c) returned 1 [0115.713] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e878) returned 1 [0115.713] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e8ac) returned 1 [0115.713] GetFullPathNameW (in: lpFileName="C:\\Windows\\rescache", nBufferLength=0x105, lpBuffer=0x31e3b4, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\rescache", lpFilePart=0x0) returned 0x13 [0115.713] GetFullPathNameW (in: lpFileName="C:\\Windows\\rescache\\", nBufferLength=0x105, lpBuffer=0x31e388, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\rescache\\", lpFilePart=0x0) returned 0x14 [0115.713] FindFirstFileW (in: lpFileName="C:\\Windows\\rescache\\*", lpFindFileData=0x31e5d4 | out: lpFindFileData=0x31e5d4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfeb69c28, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x2b041c20, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x2b041c20, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x381dc0 [0115.713] FindClose (in: hFindFile=0x381dc0 | out: hFindFile=0x381dc0) returned 1 [0115.713] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e86c) returned 1 [0115.713] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e878) returned 1 [0115.713] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e834) returned 1 [0115.713] GetFullPathNameW (in: lpFileName="C:\\Windows\\rescache\\rc0002", nBufferLength=0x105, lpBuffer=0x31e33c, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\rescache\\rc0002", lpFilePart=0x0) returned 0x1a [0115.713] GetFullPathNameW (in: lpFileName="C:\\Windows\\rescache\\rc0002\\", nBufferLength=0x105, lpBuffer=0x31e310, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\rescache\\rc0002\\", lpFilePart=0x0) returned 0x1b [0115.713] FindFirstFileW (in: lpFileName="C:\\Windows\\rescache\\rc0002\\*", lpFindFileData=0x31e55c | out: lpFindFileData=0x31e55c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x195bc900, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x1981df00, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x1981df00, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x381dc0 [0115.713] FindClose (in: hFindFile=0x381dc0 | out: hFindFile=0x381dc0) returned 1 [0115.713] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e7f4) returned 1 [0115.713] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e800) returned 1 [0115.714] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e834) returned 1 [0115.714] GetFullPathNameW (in: lpFileName="C:\\Windows\\rescache\\rc0002", nBufferLength=0x105, lpBuffer=0x31e33c, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\rescache\\rc0002", lpFilePart=0x0) returned 0x1a [0115.714] GetFullPathNameW (in: lpFileName="C:\\Windows\\rescache\\rc0002\\", nBufferLength=0x105, lpBuffer=0x31e310, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\rescache\\rc0002\\", lpFilePart=0x0) returned 0x1b [0115.714] FindFirstFileW (in: lpFileName="C:\\Windows\\rescache\\rc0002\\*", lpFindFileData=0x31e55c | out: lpFindFileData=0x31e55c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x195bc900, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x1981df00, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x1981df00, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x381dc0 [0115.714] FindClose (in: hFindFile=0x381dc0 | out: hFindFile=0x381dc0) returned 1 [0115.714] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e7f4) returned 1 [0115.714] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e800) returned 1 [0115.714] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e834) returned 1 [0115.714] GetFullPathNameW (in: lpFileName="C:\\Windows\\rescache\\rc0003", nBufferLength=0x105, lpBuffer=0x31e33c, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\rescache\\rc0003", lpFilePart=0x0) returned 0x1a [0115.714] GetFullPathNameW (in: lpFileName="C:\\Windows\\rescache\\rc0003\\", nBufferLength=0x105, lpBuffer=0x31e310, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\rescache\\rc0003\\", lpFilePart=0x0) returned 0x1b [0115.714] FindFirstFileW (in: lpFileName="C:\\Windows\\rescache\\rc0003\\*", lpFindFileData=0x31e55c | out: lpFindFileData=0x31e55c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x2ac899c0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x2afcf800, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x2afcf800, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x381dc0 [0115.714] FindClose (in: hFindFile=0x381dc0 | out: hFindFile=0x381dc0) returned 1 [0115.714] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e7f4) returned 1 [0115.714] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e800) returned 1 [0115.714] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e834) returned 1 [0115.714] GetFullPathNameW (in: lpFileName="C:\\Windows\\rescache\\rc0003", nBufferLength=0x105, lpBuffer=0x31e33c, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\rescache\\rc0003", lpFilePart=0x0) returned 0x1a [0115.714] GetFullPathNameW (in: lpFileName="C:\\Windows\\rescache\\rc0003\\", nBufferLength=0x105, lpBuffer=0x31e310, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\rescache\\rc0003\\", lpFilePart=0x0) returned 0x1b [0115.714] FindFirstFileW (in: lpFileName="C:\\Windows\\rescache\\rc0003\\*", lpFindFileData=0x31e55c | out: lpFindFileData=0x31e55c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x2ac899c0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x2afcf800, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x2afcf800, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x381dc0 [0115.715] FindClose (in: hFindFile=0x381dc0 | out: hFindFile=0x381dc0) returned 1 [0115.715] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e7f4) returned 1 [0115.715] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e800) returned 1 [0115.715] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e8ac) returned 1 [0115.715] GetFullPathNameW (in: lpFileName="C:\\Windows\\Resources", nBufferLength=0x105, lpBuffer=0x31e3b4, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\Resources", lpFilePart=0x0) returned 0x14 [0115.715] GetFullPathNameW (in: lpFileName="C:\\Windows\\Resources\\", nBufferLength=0x105, lpBuffer=0x31e388, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\Resources\\", lpFilePart=0x0) returned 0x15 [0115.715] FindFirstFileW (in: lpFileName="C:\\Windows\\Resources\\*", lpFindFileData=0x31e5d4 | out: lpFindFileData=0x31e5d4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfeb8fd82, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x80046d91, ftLastAccessTime.dwHighDateTime=0x1ca0444, ftLastWriteTime.dwLowDateTime=0x80046d91, ftLastWriteTime.dwHighDateTime=0x1ca0444, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x381dc0 [0115.715] FindClose (in: hFindFile=0x381dc0 | out: hFindFile=0x381dc0) returned 1 [0115.715] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e86c) returned 1 [0115.715] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e878) returned 1 [0115.715] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e8ac) returned 1 [0115.715] GetFullPathNameW (in: lpFileName="C:\\Windows\\Resources", nBufferLength=0x105, lpBuffer=0x31e3b4, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\Resources", lpFilePart=0x0) returned 0x14 [0115.715] GetFullPathNameW (in: lpFileName="C:\\Windows\\Resources\\", nBufferLength=0x105, lpBuffer=0x31e388, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\Resources\\", lpFilePart=0x0) returned 0x15 [0115.715] FindFirstFileW (in: lpFileName="C:\\Windows\\Resources\\*", lpFindFileData=0x31e5d4 | out: lpFindFileData=0x31e5d4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfeb8fd82, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x80046d91, ftLastAccessTime.dwHighDateTime=0x1ca0444, ftLastWriteTime.dwLowDateTime=0x80046d91, ftLastWriteTime.dwHighDateTime=0x1ca0444, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x381dc0 [0115.715] FindClose (in: hFindFile=0x381dc0 | out: hFindFile=0x381dc0) returned 1 [0115.715] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e86c) returned 1 [0115.715] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e878) returned 1 [0115.715] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e834) returned 1 [0115.716] GetFullPathNameW (in: lpFileName="C:\\Windows\\Resources\\Ease of Access Themes", nBufferLength=0x105, lpBuffer=0x31e33c, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\Resources\\Ease of Access Themes", lpFilePart=0x0) returned 0x2a [0115.716] GetFullPathNameW (in: lpFileName="C:\\Windows\\Resources\\Ease of Access Themes\\", nBufferLength=0x105, lpBuffer=0x31e310, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\Resources\\Ease of Access Themes\\", lpFilePart=0x0) returned 0x2b [0115.716] FindFirstFileW (in: lpFileName="C:\\Windows\\Resources\\Ease of Access Themes\\*", lpFindFileData=0x31e55c | out: lpFindFileData=0x31e55c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfebb5edc, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xff21b8fa, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xff21b8fa, ftLastWriteTime.dwHighDateTime=0x1ca0431, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x381dc0 [0115.780] FindClose (in: hFindFile=0x381dc0 | out: hFindFile=0x381dc0) returned 1 [0115.781] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e7f4) returned 1 [0115.781] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e800) returned 1 [0115.781] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e834) returned 1 [0115.781] GetFullPathNameW (in: lpFileName="C:\\Windows\\Resources\\Ease of Access Themes", nBufferLength=0x105, lpBuffer=0x31e33c, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\Resources\\Ease of Access Themes", lpFilePart=0x0) returned 0x2a [0115.781] GetFullPathNameW (in: lpFileName="C:\\Windows\\Resources\\Ease of Access Themes\\", nBufferLength=0x105, lpBuffer=0x31e310, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\Resources\\Ease of Access Themes\\", lpFilePart=0x0) returned 0x2b [0115.781] FindFirstFileW (in: lpFileName="C:\\Windows\\Resources\\Ease of Access Themes\\*", lpFindFileData=0x31e55c | out: lpFindFileData=0x31e55c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfebb5edc, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xff21b8fa, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xff21b8fa, ftLastWriteTime.dwHighDateTime=0x1ca0431, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x381dc0 [0115.782] FindClose (in: hFindFile=0x381dc0 | out: hFindFile=0x381dc0) returned 1 [0115.782] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e7f4) returned 1 [0115.782] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e800) returned 1 [0115.782] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e834) returned 1 [0115.783] GetFullPathNameW (in: lpFileName="C:\\Windows\\Resources\\Themes", nBufferLength=0x105, lpBuffer=0x31e33c, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\Resources\\Themes", lpFilePart=0x0) returned 0x1b [0115.783] GetFullPathNameW (in: lpFileName="C:\\Windows\\Resources\\Themes\\", nBufferLength=0x105, lpBuffer=0x31e310, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\Resources\\Themes\\", lpFilePart=0x0) returned 0x1c [0115.783] FindFirstFileW (in: lpFileName="C:\\Windows\\Resources\\Themes\\*", lpFindFileData=0x31e55c | out: lpFindFileData=0x31e55c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x80046d91, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x91cbf0ce, ftLastAccessTime.dwHighDateTime=0x1cbf8eb, ftLastWriteTime.dwLowDateTime=0x91cbf0ce, ftLastWriteTime.dwHighDateTime=0x1cbf8eb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x381dc0 [0115.783] FindClose (in: hFindFile=0x381dc0 | out: hFindFile=0x381dc0) returned 1 [0115.783] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e7f4) returned 1 [0115.783] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e800) returned 1 [0115.783] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e834) returned 1 [0115.783] GetFullPathNameW (in: lpFileName="C:\\Windows\\Resources\\Themes", nBufferLength=0x105, lpBuffer=0x31e33c, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\Resources\\Themes", lpFilePart=0x0) returned 0x1b [0115.783] GetFullPathNameW (in: lpFileName="C:\\Windows\\Resources\\Themes\\", nBufferLength=0x105, lpBuffer=0x31e310, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\Resources\\Themes\\", lpFilePart=0x0) returned 0x1c [0115.783] FindFirstFileW (in: lpFileName="C:\\Windows\\Resources\\Themes\\*", lpFindFileData=0x31e55c | out: lpFindFileData=0x31e55c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x80046d91, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x91cbf0ce, ftLastAccessTime.dwHighDateTime=0x1cbf8eb, ftLastWriteTime.dwLowDateTime=0x91cbf0ce, ftLastWriteTime.dwHighDateTime=0x1cbf8eb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x381dc0 [0115.783] FindClose (in: hFindFile=0x381dc0 | out: hFindFile=0x381dc0) returned 1 [0115.783] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e7f4) returned 1 [0115.783] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e800) returned 1 [0115.784] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e7bc) returned 1 [0115.784] GetFullPathNameW (in: lpFileName="C:\\Windows\\Resources\\Themes\\Aero", nBufferLength=0x105, lpBuffer=0x31e2c4, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\Resources\\Themes\\Aero", lpFilePart=0x0) returned 0x20 [0115.784] GetFullPathNameW (in: lpFileName="C:\\Windows\\Resources\\Themes\\Aero\\", nBufferLength=0x105, lpBuffer=0x31e298, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\Resources\\Themes\\Aero\\", lpFilePart=0x0) returned 0x21 [0115.784] FindFirstFileW (in: lpFileName="C:\\Windows\\Resources\\Themes\\Aero\\*", lpFindFileData=0x31e4e4 | out: lpFindFileData=0x31e4e4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x80046d91, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x57276d67, ftLastAccessTime.dwHighDateTime=0x1cb892c, ftLastWriteTime.dwLowDateTime=0x57276d67, ftLastWriteTime.dwHighDateTime=0x1cb892c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x381dc0 [0115.784] FindClose (in: hFindFile=0x381dc0 | out: hFindFile=0x381dc0) returned 1 [0115.784] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e77c) returned 1 [0115.784] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e788) returned 1 [0115.784] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e7bc) returned 1 [0115.784] GetFullPathNameW (in: lpFileName="C:\\Windows\\Resources\\Themes\\Aero", nBufferLength=0x105, lpBuffer=0x31e2c4, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\Resources\\Themes\\Aero", lpFilePart=0x0) returned 0x20 [0115.784] GetFullPathNameW (in: lpFileName="C:\\Windows\\Resources\\Themes\\Aero\\", nBufferLength=0x105, lpBuffer=0x31e298, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\Resources\\Themes\\Aero\\", lpFilePart=0x0) returned 0x21 [0115.784] FindFirstFileW (in: lpFileName="C:\\Windows\\Resources\\Themes\\Aero\\*", lpFindFileData=0x31e4e4 | out: lpFindFileData=0x31e4e4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x80046d91, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x57276d67, ftLastAccessTime.dwHighDateTime=0x1cb892c, ftLastWriteTime.dwLowDateTime=0x57276d67, ftLastWriteTime.dwHighDateTime=0x1cb892c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x381dc0 [0115.784] FindClose (in: hFindFile=0x381dc0 | out: hFindFile=0x381dc0) returned 1 [0115.784] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e77c) returned 1 [0115.784] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e788) returned 1 [0115.784] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e744) returned 1 [0115.784] GetFullPathNameW (in: lpFileName="C:\\Windows\\Resources\\Themes\\Aero\\en-US", nBufferLength=0x105, lpBuffer=0x31e24c, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\Resources\\Themes\\Aero\\en-US", lpFilePart=0x0) returned 0x26 [0115.784] GetFullPathNameW (in: lpFileName="C:\\Windows\\Resources\\Themes\\Aero\\en-US\\", nBufferLength=0x105, lpBuffer=0x31e220, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\Resources\\Themes\\Aero\\en-US\\", lpFilePart=0x0) returned 0x27 [0115.784] FindFirstFileW (in: lpFileName="C:\\Windows\\Resources\\Themes\\Aero\\en-US\\*", lpFindFileData=0x31e46c | out: lpFindFileData=0x31e46c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x36a560f6, ftCreationTime.dwHighDateTime=0x1ca0445, ftLastAccessTime.dwLowDateTime=0x23fb0799, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x1d9da406, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x381dc0 [0115.785] FindClose (in: hFindFile=0x381dc0 | out: hFindFile=0x381dc0) returned 1 [0115.785] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e704) returned 1 [0115.785] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e710) returned 1 [0115.785] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e744) returned 1 [0115.785] GetFullPathNameW (in: lpFileName="C:\\Windows\\Resources\\Themes\\Aero\\en-US", nBufferLength=0x105, lpBuffer=0x31e24c, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\Resources\\Themes\\Aero\\en-US", lpFilePart=0x0) returned 0x26 [0115.785] GetFullPathNameW (in: lpFileName="C:\\Windows\\Resources\\Themes\\Aero\\en-US\\", nBufferLength=0x105, lpBuffer=0x31e220, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\Resources\\Themes\\Aero\\en-US\\", lpFilePart=0x0) returned 0x27 [0115.785] FindFirstFileW (in: lpFileName="C:\\Windows\\Resources\\Themes\\Aero\\en-US\\*", lpFindFileData=0x31e46c | out: lpFindFileData=0x31e46c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x36a560f6, ftCreationTime.dwHighDateTime=0x1ca0445, ftLastAccessTime.dwLowDateTime=0x23fb0799, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x1d9da406, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x381dc0 [0115.785] FindClose (in: hFindFile=0x381dc0 | out: hFindFile=0x381dc0) returned 1 [0115.785] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e704) returned 1 [0115.785] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e710) returned 1 [0115.785] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e744) returned 1 [0115.785] GetFullPathNameW (in: lpFileName="C:\\Windows\\Resources\\Themes\\Aero\\Shell", nBufferLength=0x105, lpBuffer=0x31e24c, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\Resources\\Themes\\Aero\\Shell", lpFilePart=0x0) returned 0x26 [0115.785] GetFullPathNameW (in: lpFileName="C:\\Windows\\Resources\\Themes\\Aero\\Shell\\", nBufferLength=0x105, lpBuffer=0x31e220, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\Resources\\Themes\\Aero\\Shell\\", lpFilePart=0x0) returned 0x27 [0115.785] FindFirstFileW (in: lpFileName="C:\\Windows\\Resources\\Themes\\Aero\\Shell\\*", lpFindFileData=0x31e46c | out: lpFindFileData=0x31e46c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x80046d91, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x80046d91, ftLastAccessTime.dwHighDateTime=0x1ca0444, ftLastWriteTime.dwLowDateTime=0x80046d91, ftLastWriteTime.dwHighDateTime=0x1ca0444, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x381dc0 [0115.785] FindClose (in: hFindFile=0x381dc0 | out: hFindFile=0x381dc0) returned 1 [0115.786] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e704) returned 1 [0115.786] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e710) returned 1 [0115.786] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e744) returned 1 [0115.786] GetFullPathNameW (in: lpFileName="C:\\Windows\\Resources\\Themes\\Aero\\Shell", nBufferLength=0x105, lpBuffer=0x31e24c, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\Resources\\Themes\\Aero\\Shell", lpFilePart=0x0) returned 0x26 [0115.786] GetFullPathNameW (in: lpFileName="C:\\Windows\\Resources\\Themes\\Aero\\Shell\\", nBufferLength=0x105, lpBuffer=0x31e220, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\Resources\\Themes\\Aero\\Shell\\", lpFilePart=0x0) returned 0x27 [0115.786] FindFirstFileW (in: lpFileName="C:\\Windows\\Resources\\Themes\\Aero\\Shell\\*", lpFindFileData=0x31e46c | out: lpFindFileData=0x31e46c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x80046d91, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x80046d91, ftLastAccessTime.dwHighDateTime=0x1ca0444, ftLastWriteTime.dwLowDateTime=0x80046d91, ftLastWriteTime.dwHighDateTime=0x1ca0444, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x381dc0 [0115.786] FindClose (in: hFindFile=0x381dc0 | out: hFindFile=0x381dc0) returned 1 [0115.786] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e704) returned 1 [0115.786] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e710) returned 1 [0115.786] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e6cc) returned 1 [0115.786] GetFullPathNameW (in: lpFileName="C:\\Windows\\Resources\\Themes\\Aero\\Shell\\NormalColor", nBufferLength=0x105, lpBuffer=0x31e1d4, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\Resources\\Themes\\Aero\\Shell\\NormalColor", lpFilePart=0x0) returned 0x32 [0115.786] GetFullPathNameW (in: lpFileName="C:\\Windows\\Resources\\Themes\\Aero\\Shell\\NormalColor\\", nBufferLength=0x105, lpBuffer=0x31e1a8, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\Resources\\Themes\\Aero\\Shell\\NormalColor\\", lpFilePart=0x0) returned 0x33 [0115.786] FindFirstFileW (in: lpFileName="C:\\Windows\\Resources\\Themes\\Aero\\Shell\\NormalColor\\*", lpFindFileData=0x31e3f4 | out: lpFindFileData=0x31e3f4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x80046d91, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x36a560f6, ftLastAccessTime.dwHighDateTime=0x1ca0445, ftLastWriteTime.dwLowDateTime=0x36a560f6, ftLastWriteTime.dwHighDateTime=0x1ca0445, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x381dc0 [0115.786] FindClose (in: hFindFile=0x381dc0 | out: hFindFile=0x381dc0) returned 1 [0115.786] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e68c) returned 1 [0115.786] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e698) returned 1 [0115.786] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e6cc) returned 1 [0115.786] GetFullPathNameW (in: lpFileName="C:\\Windows\\Resources\\Themes\\Aero\\Shell\\NormalColor", nBufferLength=0x105, lpBuffer=0x31e1d4, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\Resources\\Themes\\Aero\\Shell\\NormalColor", lpFilePart=0x0) returned 0x32 [0115.786] GetFullPathNameW (in: lpFileName="C:\\Windows\\Resources\\Themes\\Aero\\Shell\\NormalColor\\", nBufferLength=0x105, lpBuffer=0x31e1a8, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\Resources\\Themes\\Aero\\Shell\\NormalColor\\", lpFilePart=0x0) returned 0x33 [0115.787] FindFirstFileW (in: lpFileName="C:\\Windows\\Resources\\Themes\\Aero\\Shell\\NormalColor\\*", lpFindFileData=0x31e3f4 | out: lpFindFileData=0x31e3f4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x80046d91, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x36a560f6, ftLastAccessTime.dwHighDateTime=0x1ca0445, ftLastWriteTime.dwLowDateTime=0x36a560f6, ftLastWriteTime.dwHighDateTime=0x1ca0445, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x381dc0 [0115.787] FindClose (in: hFindFile=0x381dc0 | out: hFindFile=0x381dc0) returned 1 [0115.787] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e68c) returned 1 [0115.787] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e698) returned 1 [0115.787] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e654) returned 1 [0115.787] GetFullPathNameW (in: lpFileName="C:\\Windows\\Resources\\Themes\\Aero\\Shell\\NormalColor\\en-US", nBufferLength=0x105, lpBuffer=0x31e15c, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\Resources\\Themes\\Aero\\Shell\\NormalColor\\en-US", lpFilePart=0x0) returned 0x38 [0115.787] GetFullPathNameW (in: lpFileName="C:\\Windows\\Resources\\Themes\\Aero\\Shell\\NormalColor\\en-US\\", nBufferLength=0x105, lpBuffer=0x31e130, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\Resources\\Themes\\Aero\\Shell\\NormalColor\\en-US\\", lpFilePart=0x0) returned 0x39 [0115.787] FindFirstFileW (in: lpFileName="C:\\Windows\\Resources\\Themes\\Aero\\Shell\\NormalColor\\en-US\\*", lpFindFileData=0x31e37c | out: lpFindFileData=0x31e37c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x36a560f6, ftCreationTime.dwHighDateTime=0x1ca0445, ftLastAccessTime.dwLowDateTime=0x23fb0799, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x1d9da406, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x381dc0 [0115.787] FindClose (in: hFindFile=0x381dc0 | out: hFindFile=0x381dc0) returned 1 [0115.787] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e614) returned 1 [0115.787] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e620) returned 1 [0115.787] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e654) returned 1 [0115.787] GetFullPathNameW (in: lpFileName="C:\\Windows\\Resources\\Themes\\Aero\\Shell\\NormalColor\\en-US", nBufferLength=0x105, lpBuffer=0x31e15c, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\Resources\\Themes\\Aero\\Shell\\NormalColor\\en-US", lpFilePart=0x0) returned 0x38 [0115.787] GetFullPathNameW (in: lpFileName="C:\\Windows\\Resources\\Themes\\Aero\\Shell\\NormalColor\\en-US\\", nBufferLength=0x105, lpBuffer=0x31e130, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\Resources\\Themes\\Aero\\Shell\\NormalColor\\en-US\\", lpFilePart=0x0) returned 0x39 [0115.787] FindFirstFileW (in: lpFileName="C:\\Windows\\Resources\\Themes\\Aero\\Shell\\NormalColor\\en-US\\*", lpFindFileData=0x31e37c | out: lpFindFileData=0x31e37c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x36a560f6, ftCreationTime.dwHighDateTime=0x1ca0445, ftLastAccessTime.dwLowDateTime=0x23fb0799, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x1d9da406, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x381dc0 [0115.787] FindClose (in: hFindFile=0x381dc0 | out: hFindFile=0x381dc0) returned 1 [0115.787] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e614) returned 1 [0115.788] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e620) returned 1 [0115.788] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e8ac) returned 1 [0115.788] GetFullPathNameW (in: lpFileName="C:\\Windows\\SchCache", nBufferLength=0x105, lpBuffer=0x31e3b4, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\SchCache", lpFilePart=0x0) returned 0x13 [0115.788] GetFullPathNameW (in: lpFileName="C:\\Windows\\SchCache\\", nBufferLength=0x105, lpBuffer=0x31e388, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\SchCache\\", lpFilePart=0x0) returned 0x14 [0115.788] FindFirstFileW (in: lpFileName="C:\\Windows\\SchCache\\*", lpFindFileData=0x31e5d4 | out: lpFindFileData=0x31e5d4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfebb5edc, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfebb5edc, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xcb547a92, ftLastWriteTime.dwHighDateTime=0x1ca042b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x381dc0 [0115.788] FindClose (in: hFindFile=0x381dc0 | out: hFindFile=0x381dc0) returned 1 [0115.788] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e86c) returned 1 [0115.788] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e878) returned 1 [0115.788] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e8ac) returned 1 [0115.788] GetFullPathNameW (in: lpFileName="C:\\Windows\\SchCache", nBufferLength=0x105, lpBuffer=0x31e3b4, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\SchCache", lpFilePart=0x0) returned 0x13 [0115.788] GetFullPathNameW (in: lpFileName="C:\\Windows\\SchCache\\", nBufferLength=0x105, lpBuffer=0x31e388, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\SchCache\\", lpFilePart=0x0) returned 0x14 [0115.788] FindFirstFileW (in: lpFileName="C:\\Windows\\SchCache\\*", lpFindFileData=0x31e5d4 | out: lpFindFileData=0x31e5d4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfebb5edc, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfebb5edc, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xcb547a92, ftLastWriteTime.dwHighDateTime=0x1ca042b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x381dc0 [0115.788] FindClose (in: hFindFile=0x381dc0 | out: hFindFile=0x381dc0) returned 1 [0115.788] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e86c) returned 1 [0115.788] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e878) returned 1 [0115.788] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e8ac) returned 1 [0115.788] GetFullPathNameW (in: lpFileName="C:\\Windows\\schemas", nBufferLength=0x105, lpBuffer=0x31e3b4, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\schemas", lpFilePart=0x0) returned 0x12 [0115.788] GetFullPathNameW (in: lpFileName="C:\\Windows\\schemas\\", nBufferLength=0x105, lpBuffer=0x31e388, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\schemas\\", lpFilePart=0x0) returned 0x13 [0115.789] FindFirstFileW (in: lpFileName="C:\\Windows\\schemas\\*", lpFindFileData=0x31e5d4 | out: lpFindFileData=0x31e5d4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfebdc036, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x80046d91, ftLastAccessTime.dwHighDateTime=0x1ca0444, ftLastWriteTime.dwLowDateTime=0x80046d91, ftLastWriteTime.dwHighDateTime=0x1ca0444, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x381dc0 [0115.790] FindClose (in: hFindFile=0x381dc0 | out: hFindFile=0x381dc0) returned 1 [0115.791] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e86c) returned 1 [0115.791] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e878) returned 1 [0115.791] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e8ac) returned 1 [0115.791] GetFullPathNameW (in: lpFileName="C:\\Windows\\schemas", nBufferLength=0x105, lpBuffer=0x31e3b4, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\schemas", lpFilePart=0x0) returned 0x12 [0115.791] GetFullPathNameW (in: lpFileName="C:\\Windows\\schemas\\", nBufferLength=0x105, lpBuffer=0x31e388, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\schemas\\", lpFilePart=0x0) returned 0x13 [0115.791] FindFirstFileW (in: lpFileName="C:\\Windows\\schemas\\*", lpFindFileData=0x31e5d4 | out: lpFindFileData=0x31e5d4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfebdc036, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x80046d91, ftLastAccessTime.dwHighDateTime=0x1ca0444, ftLastWriteTime.dwLowDateTime=0x80046d91, ftLastWriteTime.dwHighDateTime=0x1ca0444, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x381dc0 [0115.792] FindClose (in: hFindFile=0x381dc0 | out: hFindFile=0x381dc0) returned 1 [0115.792] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e86c) returned 1 [0115.792] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e878) returned 1 [0115.792] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e834) returned 1 [0115.792] GetFullPathNameW (in: lpFileName="C:\\Windows\\schemas\\AvailableNetwork", nBufferLength=0x105, lpBuffer=0x31e33c, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\schemas\\AvailableNetwork", lpFilePart=0x0) returned 0x23 [0115.792] GetFullPathNameW (in: lpFileName="C:\\Windows\\schemas\\AvailableNetwork\\", nBufferLength=0x105, lpBuffer=0x31e310, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\schemas\\AvailableNetwork\\", lpFilePart=0x0) returned 0x24 [0115.792] FindFirstFileW (in: lpFileName="C:\\Windows\\schemas\\AvailableNetwork\\*", lpFindFileData=0x31e55c | out: lpFindFileData=0x31e55c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfebdc036, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xff1f57a0, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xff1f57a0, ftLastWriteTime.dwHighDateTime=0x1ca0431, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x381dc0 [0115.796] FindClose (in: hFindFile=0x381dc0 | out: hFindFile=0x381dc0) returned 1 [0115.796] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e7f4) returned 1 [0115.796] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e800) returned 1 [0115.796] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e834) returned 1 [0115.796] GetFullPathNameW (in: lpFileName="C:\\Windows\\schemas\\AvailableNetwork", nBufferLength=0x105, lpBuffer=0x31e33c, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\schemas\\AvailableNetwork", lpFilePart=0x0) returned 0x23 [0115.796] GetFullPathNameW (in: lpFileName="C:\\Windows\\schemas\\AvailableNetwork\\", nBufferLength=0x105, lpBuffer=0x31e310, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\schemas\\AvailableNetwork\\", lpFilePart=0x0) returned 0x24 [0115.796] FindFirstFileW (in: lpFileName="C:\\Windows\\schemas\\AvailableNetwork\\*", lpFindFileData=0x31e55c | out: lpFindFileData=0x31e55c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfebdc036, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xff1f57a0, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xff1f57a0, ftLastWriteTime.dwHighDateTime=0x1ca0431, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x381dc0 [0115.796] FindClose (in: hFindFile=0x381dc0 | out: hFindFile=0x381dc0) returned 1 [0115.796] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e7f4) returned 1 [0115.797] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e800) returned 1 [0115.797] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e834) returned 1 [0115.797] GetFullPathNameW (in: lpFileName="C:\\Windows\\schemas\\EAPHost", nBufferLength=0x105, lpBuffer=0x31e33c, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\schemas\\EAPHost", lpFilePart=0x0) returned 0x1a [0115.797] GetFullPathNameW (in: lpFileName="C:\\Windows\\schemas\\EAPHost\\", nBufferLength=0x105, lpBuffer=0x31e310, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\schemas\\EAPHost\\", lpFilePart=0x0) returned 0x1b [0115.797] FindFirstFileW (in: lpFileName="C:\\Windows\\schemas\\EAPHost\\*", lpFindFileData=0x31e55c | out: lpFindFileData=0x31e55c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfec02190, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xff241a54, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xff241a54, ftLastWriteTime.dwHighDateTime=0x1ca0431, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x381dc0 [0115.891] FindClose (in: hFindFile=0x381dc0 | out: hFindFile=0x381dc0) returned 1 [0115.891] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e7f4) returned 1 [0115.891] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e800) returned 1 [0115.891] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e834) returned 1 [0115.891] GetFullPathNameW (in: lpFileName="C:\\Windows\\schemas\\EAPHost", nBufferLength=0x105, lpBuffer=0x31e33c, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\schemas\\EAPHost", lpFilePart=0x0) returned 0x1a [0115.892] GetFullPathNameW (in: lpFileName="C:\\Windows\\schemas\\EAPHost\\", nBufferLength=0x105, lpBuffer=0x31e310, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\schemas\\EAPHost\\", lpFilePart=0x0) returned 0x1b [0115.892] FindFirstFileW (in: lpFileName="C:\\Windows\\schemas\\EAPHost\\*", lpFindFileData=0x31e55c | out: lpFindFileData=0x31e55c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfec02190, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xff241a54, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xff241a54, ftLastWriteTime.dwHighDateTime=0x1ca0431, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x381dc0 [0115.892] FindClose (in: hFindFile=0x381dc0 | out: hFindFile=0x381dc0) returned 1 [0115.893] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e7f4) returned 1 [0115.893] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e800) returned 1 [0115.893] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e834) returned 1 [0115.893] GetFullPathNameW (in: lpFileName="C:\\Windows\\schemas\\EAPMethods", nBufferLength=0x105, lpBuffer=0x31e33c, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\schemas\\EAPMethods", lpFilePart=0x0) returned 0x1d [0115.893] GetFullPathNameW (in: lpFileName="C:\\Windows\\schemas\\EAPMethods\\", nBufferLength=0x105, lpBuffer=0x31e310, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\schemas\\EAPMethods\\", lpFilePart=0x0) returned 0x1e [0115.893] FindFirstFileW (in: lpFileName="C:\\Windows\\schemas\\EAPMethods\\*", lpFindFileData=0x31e55c | out: lpFindFileData=0x31e55c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfec02190, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xff241a54, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xff241a54, ftLastWriteTime.dwHighDateTime=0x1ca0431, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x381dc0 [0115.922] FindClose (in: hFindFile=0x381dc0 | out: hFindFile=0x381dc0) returned 1 [0115.922] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e7f4) returned 1 [0115.922] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e800) returned 1 [0115.922] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e834) returned 1 [0115.922] GetFullPathNameW (in: lpFileName="C:\\Windows\\schemas\\EAPMethods", nBufferLength=0x105, lpBuffer=0x31e33c, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\schemas\\EAPMethods", lpFilePart=0x0) returned 0x1d [0115.922] GetFullPathNameW (in: lpFileName="C:\\Windows\\schemas\\EAPMethods\\", nBufferLength=0x105, lpBuffer=0x31e310, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\schemas\\EAPMethods\\", lpFilePart=0x0) returned 0x1e [0115.922] FindFirstFileW (in: lpFileName="C:\\Windows\\schemas\\EAPMethods\\*", lpFindFileData=0x31e55c | out: lpFindFileData=0x31e55c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfec02190, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xff241a54, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xff241a54, ftLastWriteTime.dwHighDateTime=0x1ca0431, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x381dc0 [0115.923] FindClose (in: hFindFile=0x381dc0 | out: hFindFile=0x381dc0) returned 1 [0115.924] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e7f4) returned 1 [0115.924] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e800) returned 1 [0115.924] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e834) returned 1 [0115.924] GetFullPathNameW (in: lpFileName="C:\\Windows\\schemas\\TSWorkSpace", nBufferLength=0x105, lpBuffer=0x31e33c, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\schemas\\TSWorkSpace", lpFilePart=0x0) returned 0x1e [0115.924] GetFullPathNameW (in: lpFileName="C:\\Windows\\schemas\\TSWorkSpace\\", nBufferLength=0x105, lpBuffer=0x31e310, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\schemas\\TSWorkSpace\\", lpFilePart=0x0) returned 0x1f [0115.924] FindFirstFileW (in: lpFileName="C:\\Windows\\schemas\\TSWorkSpace\\*", lpFindFileData=0x31e55c | out: lpFindFileData=0x31e55c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfec02190, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xff21b8fa, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xff21b8fa, ftLastWriteTime.dwHighDateTime=0x1ca0431, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x381dc0 [0115.924] FindClose (in: hFindFile=0x381dc0 | out: hFindFile=0x381dc0) returned 1 [0115.924] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e7f4) returned 1 [0115.924] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e800) returned 1 [0115.924] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e834) returned 1 [0115.925] GetFullPathNameW (in: lpFileName="C:\\Windows\\schemas\\TSWorkSpace", nBufferLength=0x105, lpBuffer=0x31e33c, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\schemas\\TSWorkSpace", lpFilePart=0x0) returned 0x1e [0115.925] GetFullPathNameW (in: lpFileName="C:\\Windows\\schemas\\TSWorkSpace\\", nBufferLength=0x105, lpBuffer=0x31e310, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\schemas\\TSWorkSpace\\", lpFilePart=0x0) returned 0x1f [0115.925] FindFirstFileW (in: lpFileName="C:\\Windows\\schemas\\TSWorkSpace\\*", lpFindFileData=0x31e55c | out: lpFindFileData=0x31e55c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfec02190, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xff21b8fa, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xff21b8fa, ftLastWriteTime.dwHighDateTime=0x1ca0431, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x381dc0 [0115.925] FindClose (in: hFindFile=0x381dc0 | out: hFindFile=0x381dc0) returned 1 [0115.925] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e7f4) returned 1 [0115.925] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e800) returned 1 [0115.925] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e834) returned 1 [0115.925] GetFullPathNameW (in: lpFileName="C:\\Windows\\schemas\\WCN", nBufferLength=0x105, lpBuffer=0x31e33c, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\schemas\\WCN", lpFilePart=0x0) returned 0x16 [0115.925] GetFullPathNameW (in: lpFileName="C:\\Windows\\schemas\\WCN\\", nBufferLength=0x105, lpBuffer=0x31e310, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\schemas\\WCN\\", lpFilePart=0x0) returned 0x17 [0115.925] FindFirstFileW (in: lpFileName="C:\\Windows\\schemas\\WCN\\*", lpFindFileData=0x31e55c | out: lpFindFileData=0x31e55c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x80046d91, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x8068675c, ftLastAccessTime.dwHighDateTime=0x1ca0444, ftLastWriteTime.dwLowDateTime=0x8068675c, ftLastWriteTime.dwHighDateTime=0x1ca0444, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x381dc0 [0115.925] FindClose (in: hFindFile=0x381dc0 | out: hFindFile=0x381dc0) returned 1 [0115.925] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e7f4) returned 1 [0115.925] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e800) returned 1 [0115.925] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e834) returned 1 [0115.925] GetFullPathNameW (in: lpFileName="C:\\Windows\\schemas\\WCN", nBufferLength=0x105, lpBuffer=0x31e33c, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\schemas\\WCN", lpFilePart=0x0) returned 0x16 [0115.925] GetFullPathNameW (in: lpFileName="C:\\Windows\\schemas\\WCN\\", nBufferLength=0x105, lpBuffer=0x31e310, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\schemas\\WCN\\", lpFilePart=0x0) returned 0x17 [0115.925] FindFirstFileW (in: lpFileName="C:\\Windows\\schemas\\WCN\\*", lpFindFileData=0x31e55c | out: lpFindFileData=0x31e55c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x80046d91, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x8068675c, ftLastAccessTime.dwHighDateTime=0x1ca0444, ftLastWriteTime.dwLowDateTime=0x8068675c, ftLastWriteTime.dwHighDateTime=0x1ca0444, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x381dc0 [0115.926] FindClose (in: hFindFile=0x381dc0 | out: hFindFile=0x381dc0) returned 1 [0115.926] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e7f4) returned 1 [0115.926] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e800) returned 1 [0115.926] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e8ac) returned 1 [0115.926] GetFullPathNameW (in: lpFileName="C:\\Windows\\security", nBufferLength=0x105, lpBuffer=0x31e3b4, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\security", lpFilePart=0x0) returned 0x13 [0115.926] GetFullPathNameW (in: lpFileName="C:\\Windows\\security\\", nBufferLength=0x105, lpBuffer=0x31e388, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\security\\", lpFilePart=0x0) returned 0x14 [0115.926] FindFirstFileW (in: lpFileName="C:\\Windows\\security\\*", lpFindFileData=0x31e5d4 | out: lpFindFileData=0x31e5d4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfec02190, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x98abb4cc, ftLastAccessTime.dwHighDateTime=0x1cbf8eb, ftLastWriteTime.dwLowDateTime=0x98abb4cc, ftLastWriteTime.dwHighDateTime=0x1cbf8eb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x381dc0 [0115.927] FindClose (in: hFindFile=0x381dc0 | out: hFindFile=0x381dc0) returned 1 [0115.927] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e86c) returned 1 [0115.927] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e878) returned 1 [0115.927] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e8ac) returned 1 [0115.927] GetFullPathNameW (in: lpFileName="C:\\Windows\\security", nBufferLength=0x105, lpBuffer=0x31e3b4, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\security", lpFilePart=0x0) returned 0x13 [0115.928] GetFullPathNameW (in: lpFileName="C:\\Windows\\security\\", nBufferLength=0x105, lpBuffer=0x31e388, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\security\\", lpFilePart=0x0) returned 0x14 [0115.928] FindFirstFileW (in: lpFileName="C:\\Windows\\security\\*", lpFindFileData=0x31e5d4 | out: lpFindFileData=0x31e5d4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfec02190, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x98abb4cc, ftLastAccessTime.dwHighDateTime=0x1cbf8eb, ftLastWriteTime.dwLowDateTime=0x98abb4cc, ftLastWriteTime.dwHighDateTime=0x1cbf8eb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x381dc0 [0115.928] FindClose (in: hFindFile=0x381dc0 | out: hFindFile=0x381dc0) returned 1 [0115.929] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e86c) returned 1 [0115.929] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e878) returned 1 [0115.929] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e834) returned 1 [0115.929] GetFullPathNameW (in: lpFileName="C:\\Windows\\security\\ApplicationId", nBufferLength=0x105, lpBuffer=0x31e33c, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\security\\ApplicationId", lpFilePart=0x0) returned 0x21 [0115.929] GetFullPathNameW (in: lpFileName="C:\\Windows\\security\\ApplicationId\\", nBufferLength=0x105, lpBuffer=0x31e310, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\security\\ApplicationId\\", lpFilePart=0x0) returned 0x22 [0115.929] FindFirstFileW (in: lpFileName="C:\\Windows\\security\\ApplicationId\\*", lpFindFileData=0x31e55c | out: lpFindFileData=0x31e55c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x98abb4cc, ftCreationTime.dwHighDateTime=0x1cbf8eb, ftLastAccessTime.dwLowDateTime=0xaa30f663, ftLastAccessTime.dwHighDateTime=0x1cbf8eb, ftLastWriteTime.dwLowDateTime=0x98abb4cc, ftLastWriteTime.dwHighDateTime=0x1cbf8eb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x381dc0 [0115.930] FindClose (in: hFindFile=0x381dc0 | out: hFindFile=0x381dc0) returned 1 [0115.930] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e7f4) returned 1 [0115.930] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e800) returned 1 [0115.930] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e834) returned 1 [0115.930] GetFullPathNameW (in: lpFileName="C:\\Windows\\security\\ApplicationId", nBufferLength=0x105, lpBuffer=0x31e33c, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\security\\ApplicationId", lpFilePart=0x0) returned 0x21 [0115.930] GetFullPathNameW (in: lpFileName="C:\\Windows\\security\\ApplicationId\\", nBufferLength=0x105, lpBuffer=0x31e310, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\security\\ApplicationId\\", lpFilePart=0x0) returned 0x22 [0115.930] FindFirstFileW (in: lpFileName="C:\\Windows\\security\\ApplicationId\\*", lpFindFileData=0x31e55c | out: lpFindFileData=0x31e55c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x98abb4cc, ftCreationTime.dwHighDateTime=0x1cbf8eb, ftLastAccessTime.dwLowDateTime=0xaa30f663, ftLastAccessTime.dwHighDateTime=0x1cbf8eb, ftLastWriteTime.dwLowDateTime=0x98abb4cc, ftLastWriteTime.dwHighDateTime=0x1cbf8eb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x381dc0 [0115.930] FindClose (in: hFindFile=0x381dc0 | out: hFindFile=0x381dc0) returned 1 [0115.930] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e7f4) returned 1 [0115.930] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e800) returned 1 [0115.930] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e7bc) returned 1 [0115.931] GetFullPathNameW (in: lpFileName="C:\\Windows\\security\\ApplicationId\\PolicyManagement", nBufferLength=0x105, lpBuffer=0x31e2c4, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\security\\ApplicationId\\PolicyManagement", lpFilePart=0x0) returned 0x32 [0115.931] GetFullPathNameW (in: lpFileName="C:\\Windows\\security\\ApplicationId\\PolicyManagement\\", nBufferLength=0x105, lpBuffer=0x31e298, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\security\\ApplicationId\\PolicyManagement\\", lpFilePart=0x0) returned 0x33 [0115.931] FindFirstFileW (in: lpFileName="C:\\Windows\\security\\ApplicationId\\PolicyManagement\\*", lpFindFileData=0x31e4e4 | out: lpFindFileData=0x31e4e4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x98abb4cc, ftCreationTime.dwHighDateTime=0x1cbf8eb, ftLastAccessTime.dwLowDateTime=0xaa3358d2, ftLastAccessTime.dwHighDateTime=0x1cbf8eb, ftLastWriteTime.dwLowDateTime=0x98abb4cc, ftLastWriteTime.dwHighDateTime=0x1cbf8eb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x381dc0 [0115.931] FindClose (in: hFindFile=0x381dc0 | out: hFindFile=0x381dc0) returned 1 [0115.931] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e77c) returned 1 [0115.931] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e788) returned 1 [0115.931] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e7bc) returned 1 [0115.931] GetFullPathNameW (in: lpFileName="C:\\Windows\\security\\ApplicationId\\PolicyManagement", nBufferLength=0x105, lpBuffer=0x31e2c4, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\security\\ApplicationId\\PolicyManagement", lpFilePart=0x0) returned 0x32 [0115.931] GetFullPathNameW (in: lpFileName="C:\\Windows\\security\\ApplicationId\\PolicyManagement\\", nBufferLength=0x105, lpBuffer=0x31e298, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\security\\ApplicationId\\PolicyManagement\\", lpFilePart=0x0) returned 0x33 [0115.931] FindFirstFileW (in: lpFileName="C:\\Windows\\security\\ApplicationId\\PolicyManagement\\*", lpFindFileData=0x31e4e4 | out: lpFindFileData=0x31e4e4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x98abb4cc, ftCreationTime.dwHighDateTime=0x1cbf8eb, ftLastAccessTime.dwLowDateTime=0xaa3358d2, ftLastAccessTime.dwHighDateTime=0x1cbf8eb, ftLastWriteTime.dwLowDateTime=0x98abb4cc, ftLastWriteTime.dwHighDateTime=0x1cbf8eb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x381dc0 [0115.931] FindClose (in: hFindFile=0x381dc0 | out: hFindFile=0x381dc0) returned 1 [0115.931] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e77c) returned 1 [0115.931] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e788) returned 1 [0115.931] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e834) returned 1 [0115.931] GetFullPathNameW (in: lpFileName="C:\\Windows\\security\\audit", nBufferLength=0x105, lpBuffer=0x31e33c, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\security\\audit", lpFilePart=0x0) returned 0x19 [0115.931] GetFullPathNameW (in: lpFileName="C:\\Windows\\security\\audit\\", nBufferLength=0x105, lpBuffer=0x31e310, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\security\\audit\\", lpFilePart=0x0) returned 0x1a [0115.931] FindFirstFileW (in: lpFileName="C:\\Windows\\security\\audit\\*", lpFindFileData=0x31e55c | out: lpFindFileData=0x31e55c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfec282ea, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfec282ea, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xcfd48e66, ftLastWriteTime.dwHighDateTime=0x1ca042b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x381dc0 [0115.932] FindClose (in: hFindFile=0x381dc0 | out: hFindFile=0x381dc0) returned 1 [0115.932] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e7f4) returned 1 [0115.932] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e800) returned 1 [0115.932] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e834) returned 1 [0115.932] GetFullPathNameW (in: lpFileName="C:\\Windows\\security\\audit", nBufferLength=0x105, lpBuffer=0x31e33c, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\security\\audit", lpFilePart=0x0) returned 0x19 [0115.932] GetFullPathNameW (in: lpFileName="C:\\Windows\\security\\audit\\", nBufferLength=0x105, lpBuffer=0x31e310, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\security\\audit\\", lpFilePart=0x0) returned 0x1a [0115.932] FindFirstFileW (in: lpFileName="C:\\Windows\\security\\audit\\*", lpFindFileData=0x31e55c | out: lpFindFileData=0x31e55c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfec282ea, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfec282ea, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xcfd48e66, ftLastWriteTime.dwHighDateTime=0x1ca042b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x381dc0 [0115.932] FindClose (in: hFindFile=0x381dc0 | out: hFindFile=0x381dc0) returned 1 [0115.932] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e7f4) returned 1 [0115.932] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e800) returned 1 [0115.932] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e834) returned 1 [0115.932] GetFullPathNameW (in: lpFileName="C:\\Windows\\security\\database", nBufferLength=0x105, lpBuffer=0x31e33c, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\security\\database", lpFilePart=0x0) returned 0x1c [0115.932] GetFullPathNameW (in: lpFileName="C:\\Windows\\security\\database\\", nBufferLength=0x105, lpBuffer=0x31e310, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\security\\database\\", lpFilePart=0x0) returned 0x1d [0115.932] FindFirstFileW (in: lpFileName="C:\\Windows\\security\\database\\*", lpFindFileData=0x31e55c | out: lpFindFileData=0x31e55c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfec282ea, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x8095640, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x8095640, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x381dc0 [0115.935] FindClose (in: hFindFile=0x381dc0 | out: hFindFile=0x381dc0) returned 1 [0115.936] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e7f4) returned 1 [0115.936] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e800) returned 1 [0115.936] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e834) returned 1 [0115.936] GetFullPathNameW (in: lpFileName="C:\\Windows\\security\\database", nBufferLength=0x105, lpBuffer=0x31e33c, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\security\\database", lpFilePart=0x0) returned 0x1c [0115.936] GetFullPathNameW (in: lpFileName="C:\\Windows\\security\\database\\", nBufferLength=0x105, lpBuffer=0x31e310, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\security\\database\\", lpFilePart=0x0) returned 0x1d [0115.936] FindFirstFileW (in: lpFileName="C:\\Windows\\security\\database\\*", lpFindFileData=0x31e55c | out: lpFindFileData=0x31e55c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfec282ea, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x8095640, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x8095640, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x381dc0 [0115.937] FindClose (in: hFindFile=0x381dc0 | out: hFindFile=0x381dc0) returned 1 [0115.937] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e7f4) returned 1 [0115.937] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e800) returned 1 [0115.937] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e834) returned 1 [0115.937] GetFullPathNameW (in: lpFileName="C:\\Windows\\security\\logs", nBufferLength=0x105, lpBuffer=0x31e33c, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\security\\logs", lpFilePart=0x0) returned 0x18 [0115.937] GetFullPathNameW (in: lpFileName="C:\\Windows\\security\\logs\\", nBufferLength=0x105, lpBuffer=0x31e310, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\security\\logs\\", lpFilePart=0x0) returned 0x19 [0115.937] FindFirstFileW (in: lpFileName="C:\\Windows\\security\\logs\\*", lpFindFileData=0x31e55c | out: lpFindFileData=0x31e55c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfec282ea, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xc8065d1d, ftLastAccessTime.dwHighDateTime=0x1cb892e, ftLastWriteTime.dwLowDateTime=0xc8065d1d, ftLastWriteTime.dwHighDateTime=0x1cb892e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x381dc0 [0115.938] FindClose (in: hFindFile=0x381dc0 | out: hFindFile=0x381dc0) returned 1 [0115.938] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e7f4) returned 1 [0115.938] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e800) returned 1 [0115.938] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e834) returned 1 [0115.938] GetFullPathNameW (in: lpFileName="C:\\Windows\\security\\logs", nBufferLength=0x105, lpBuffer=0x31e33c, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\security\\logs", lpFilePart=0x0) returned 0x18 [0115.938] GetFullPathNameW (in: lpFileName="C:\\Windows\\security\\logs\\", nBufferLength=0x105, lpBuffer=0x31e310, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\security\\logs\\", lpFilePart=0x0) returned 0x19 [0115.938] FindFirstFileW (in: lpFileName="C:\\Windows\\security\\logs\\*", lpFindFileData=0x31e55c | out: lpFindFileData=0x31e55c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfec282ea, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xc8065d1d, ftLastAccessTime.dwHighDateTime=0x1cb892e, ftLastWriteTime.dwLowDateTime=0xc8065d1d, ftLastWriteTime.dwHighDateTime=0x1cb892e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x381dc0 [0115.938] FindClose (in: hFindFile=0x381dc0 | out: hFindFile=0x381dc0) returned 1 [0115.938] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e7f4) returned 1 [0115.938] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e800) returned 1 [0115.938] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e834) returned 1 [0115.938] GetFullPathNameW (in: lpFileName="C:\\Windows\\security\\templates", nBufferLength=0x105, lpBuffer=0x31e33c, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\security\\templates", lpFilePart=0x0) returned 0x1d [0115.938] GetFullPathNameW (in: lpFileName="C:\\Windows\\security\\templates\\", nBufferLength=0x105, lpBuffer=0x31e310, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\security\\templates\\", lpFilePart=0x0) returned 0x1e [0115.938] FindFirstFileW (in: lpFileName="C:\\Windows\\security\\templates\\*", lpFindFileData=0x31e55c | out: lpFindFileData=0x31e55c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfec282ea, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfec282ea, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0x9bbdf94c, ftLastWriteTime.dwHighDateTime=0x1ca042b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x381dc0 [0115.939] FindClose (in: hFindFile=0x381dc0 | out: hFindFile=0x381dc0) returned 1 [0115.939] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e7f4) returned 1 [0115.939] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e800) returned 1 [0115.939] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e834) returned 1 [0115.939] GetFullPathNameW (in: lpFileName="C:\\Windows\\security\\templates", nBufferLength=0x105, lpBuffer=0x31e33c, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\security\\templates", lpFilePart=0x0) returned 0x1d [0115.939] GetFullPathNameW (in: lpFileName="C:\\Windows\\security\\templates\\", nBufferLength=0x105, lpBuffer=0x31e310, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\security\\templates\\", lpFilePart=0x0) returned 0x1e [0115.939] FindFirstFileW (in: lpFileName="C:\\Windows\\security\\templates\\*", lpFindFileData=0x31e55c | out: lpFindFileData=0x31e55c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfec282ea, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfec282ea, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0x9bbdf94c, ftLastWriteTime.dwHighDateTime=0x1ca042b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x381dc0 [0115.939] FindClose (in: hFindFile=0x381dc0 | out: hFindFile=0x381dc0) returned 1 [0115.939] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e7f4) returned 1 [0115.939] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e800) returned 1 [0115.939] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e8ac) returned 1 [0115.939] GetFullPathNameW (in: lpFileName="C:\\Windows\\ServiceProfiles", nBufferLength=0x105, lpBuffer=0x31e3b4, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\ServiceProfiles", lpFilePart=0x0) returned 0x1a [0115.939] GetFullPathNameW (in: lpFileName="C:\\Windows\\ServiceProfiles\\", nBufferLength=0x105, lpBuffer=0x31e388, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\ServiceProfiles\\", lpFilePart=0x0) returned 0x1b [0115.939] FindFirstFileW (in: lpFileName="C:\\Windows\\ServiceProfiles\\*", lpFindFileData=0x31e5d4 | out: lpFindFileData=0x31e5d4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf484ebfa, ftCreationTime.dwHighDateTime=0x1ca043d, ftLastAccessTime.dwLowDateTime=0xf4be0d01, ftLastAccessTime.dwHighDateTime=0x1ca043d, ftLastWriteTime.dwLowDateTime=0xf4be0d01, ftLastWriteTime.dwHighDateTime=0x1ca043d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x381dc0 [0115.939] FindClose (in: hFindFile=0x381dc0 | out: hFindFile=0x381dc0) returned 1 [0115.939] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e86c) returned 1 [0115.939] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e878) returned 1 [0115.939] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e8ac) returned 1 [0115.939] GetFullPathNameW (in: lpFileName="C:\\Windows\\ServiceProfiles", nBufferLength=0x105, lpBuffer=0x31e3b4, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\ServiceProfiles", lpFilePart=0x0) returned 0x1a [0115.939] GetFullPathNameW (in: lpFileName="C:\\Windows\\ServiceProfiles\\", nBufferLength=0x105, lpBuffer=0x31e388, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\ServiceProfiles\\", lpFilePart=0x0) returned 0x1b [0115.940] FindFirstFileW (in: lpFileName="C:\\Windows\\ServiceProfiles\\*", lpFindFileData=0x31e5d4 | out: lpFindFileData=0x31e5d4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf484ebfa, ftCreationTime.dwHighDateTime=0x1ca043d, ftLastAccessTime.dwLowDateTime=0xf4be0d01, ftLastAccessTime.dwHighDateTime=0x1ca043d, ftLastWriteTime.dwLowDateTime=0xf4be0d01, ftLastWriteTime.dwHighDateTime=0x1ca043d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x381dc0 [0115.940] FindClose (in: hFindFile=0x381dc0 | out: hFindFile=0x381dc0) returned 1 [0115.940] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e86c) returned 1 [0115.940] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e878) returned 1 [0115.940] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e834) returned 1 [0115.940] GetFullPathNameW (in: lpFileName="C:\\Windows\\ServiceProfiles\\LocalService", nBufferLength=0x105, lpBuffer=0x31e33c, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\ServiceProfiles\\LocalService", lpFilePart=0x0) returned 0x27 [0115.940] GetFullPathNameW (in: lpFileName="C:\\Windows\\ServiceProfiles\\LocalService\\", nBufferLength=0x105, lpBuffer=0x31e310, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\ServiceProfiles\\LocalService\\", lpFilePart=0x0) returned 0x28 [0115.940] FindFirstFileW (in: lpFileName="C:\\Windows\\ServiceProfiles\\LocalService\\*", lpFindFileData=0x31e55c | out: lpFindFileData=0x31e55c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf4be0d01, ftCreationTime.dwHighDateTime=0x1ca043d, ftLastAccessTime.dwLowDateTime=0xc27c1cba, ftLastAccessTime.dwHighDateTime=0x1ca0451, ftLastWriteTime.dwLowDateTime=0xc27c1cba, ftLastWriteTime.dwHighDateTime=0x1ca0451, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x381dc0 [0115.940] FindClose (in: hFindFile=0x381dc0 | out: hFindFile=0x381dc0) returned 1 [0115.940] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e7f4) returned 1 [0115.940] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e800) returned 1 [0115.940] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e834) returned 1 [0115.940] GetFullPathNameW (in: lpFileName="C:\\Windows\\ServiceProfiles\\LocalService", nBufferLength=0x105, lpBuffer=0x31e33c, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\ServiceProfiles\\LocalService", lpFilePart=0x0) returned 0x27 [0115.940] GetFullPathNameW (in: lpFileName="C:\\Windows\\ServiceProfiles\\LocalService\\", nBufferLength=0x105, lpBuffer=0x31e310, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\ServiceProfiles\\LocalService\\", lpFilePart=0x0) returned 0x28 [0115.940] FindFirstFileW (in: lpFileName="C:\\Windows\\ServiceProfiles\\LocalService\\*", lpFindFileData=0x31e55c | out: lpFindFileData=0x31e55c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf4be0d01, ftCreationTime.dwHighDateTime=0x1ca043d, ftLastAccessTime.dwLowDateTime=0xc27c1cba, ftLastAccessTime.dwHighDateTime=0x1ca0451, ftLastWriteTime.dwLowDateTime=0xc27c1cba, ftLastWriteTime.dwHighDateTime=0x1ca0451, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x381dc0 [0115.940] FindClose (in: hFindFile=0x381dc0 | out: hFindFile=0x381dc0) returned 1 [0115.940] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e7f4) returned 1 [0115.941] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e800) returned 1 [0115.941] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e7bc) returned 1 [0115.941] GetFullPathNameW (in: lpFileName="C:\\Windows\\ServiceProfiles\\LocalService\\AppData", nBufferLength=0x105, lpBuffer=0x31e2c4, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\ServiceProfiles\\LocalService\\AppData", lpFilePart=0x0) returned 0x2f [0115.941] GetFullPathNameW (in: lpFileName="C:\\Windows\\ServiceProfiles\\LocalService\\AppData\\", nBufferLength=0x105, lpBuffer=0x31e298, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\ServiceProfiles\\LocalService\\AppData\\", lpFilePart=0x0) returned 0x30 [0115.941] FindFirstFileW (in: lpFileName="C:\\Windows\\ServiceProfiles\\LocalService\\AppData\\*", lpFindFileData=0x31e4e4 | out: lpFindFileData=0x31e4e4*(dwFileAttributes=0x2012, ftCreationTime.dwLowDateTime=0xf4be0d01, ftCreationTime.dwHighDateTime=0x1ca043d, ftLastAccessTime.dwLowDateTime=0xf4c06e61, ftLastAccessTime.dwHighDateTime=0x1ca043d, ftLastWriteTime.dwLowDateTime=0xf4c06e61, ftLastWriteTime.dwHighDateTime=0x1ca043d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x381dc0 [0115.941] FindClose (in: hFindFile=0x381dc0 | out: hFindFile=0x381dc0) returned 1 [0115.941] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e77c) returned 1 [0115.941] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e788) returned 1 [0115.941] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e7bc) returned 1 [0115.941] GetFullPathNameW (in: lpFileName="C:\\Windows\\ServiceProfiles\\LocalService\\AppData", nBufferLength=0x105, lpBuffer=0x31e2c4, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\ServiceProfiles\\LocalService\\AppData", lpFilePart=0x0) returned 0x2f [0115.941] GetFullPathNameW (in: lpFileName="C:\\Windows\\ServiceProfiles\\LocalService\\AppData\\", nBufferLength=0x105, lpBuffer=0x31e298, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\ServiceProfiles\\LocalService\\AppData\\", lpFilePart=0x0) returned 0x30 [0115.941] FindFirstFileW (in: lpFileName="C:\\Windows\\ServiceProfiles\\LocalService\\AppData\\*", lpFindFileData=0x31e4e4 | out: lpFindFileData=0x31e4e4*(dwFileAttributes=0x2012, ftCreationTime.dwLowDateTime=0xf4be0d01, ftCreationTime.dwHighDateTime=0x1ca043d, ftLastAccessTime.dwLowDateTime=0xf4c06e61, ftLastAccessTime.dwHighDateTime=0x1ca043d, ftLastWriteTime.dwLowDateTime=0xf4c06e61, ftLastWriteTime.dwHighDateTime=0x1ca043d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x381dc0 [0115.941] FindClose (in: hFindFile=0x381dc0 | out: hFindFile=0x381dc0) returned 1 [0115.941] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e77c) returned 1 [0115.941] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e788) returned 1 [0115.941] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e744) returned 1 [0115.941] GetFullPathNameW (in: lpFileName="C:\\Windows\\ServiceProfiles\\LocalService\\AppData\\Local", nBufferLength=0x105, lpBuffer=0x31e24c, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\ServiceProfiles\\LocalService\\AppData\\Local", lpFilePart=0x0) returned 0x35 [0115.941] GetFullPathNameW (in: lpFileName="C:\\Windows\\ServiceProfiles\\LocalService\\AppData\\Local\\", nBufferLength=0x105, lpBuffer=0x31e220, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\ServiceProfiles\\LocalService\\AppData\\Local\\", lpFilePart=0x0) returned 0x36 [0115.941] FindFirstFileW (in: lpFileName="C:\\Windows\\ServiceProfiles\\LocalService\\AppData\\Local\\*", lpFindFileData=0x31e46c | out: lpFindFileData=0x31e46c*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xf4be0d01, ftCreationTime.dwHighDateTime=0x1ca043d, ftLastAccessTime.dwLowDateTime=0xb0146a00, ftLastAccessTime.dwHighDateTime=0x1d5e82a, ftLastWriteTime.dwLowDateTime=0xb0146a00, ftLastWriteTime.dwHighDateTime=0x1d5e82a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x381dc0 [0115.942] FindClose (in: hFindFile=0x381dc0 | out: hFindFile=0x381dc0) returned 1 [0115.942] GetFullPathNameW (in: lpFileName="C:\\Windows\\ServiceProfiles\\LocalService\\AppData\\Local", nBufferLength=0x105, lpBuffer=0x31e24c, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\ServiceProfiles\\LocalService\\AppData\\Local", lpFilePart=0x0) returned 0x35 [0115.942] GetFullPathNameW (in: lpFileName="C:\\Windows\\ServiceProfiles\\LocalService\\AppData\\Local\\", nBufferLength=0x105, lpBuffer=0x31e220, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\ServiceProfiles\\LocalService\\AppData\\Local\\", lpFilePart=0x0) returned 0x36 [0115.942] FindFirstFileW (in: lpFileName="C:\\Windows\\ServiceProfiles\\LocalService\\AppData\\Local\\*", lpFindFileData=0x31e46c | out: lpFindFileData=0x31e46c*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xf4be0d01, ftCreationTime.dwHighDateTime=0x1ca043d, ftLastAccessTime.dwLowDateTime=0xb0146a00, ftLastAccessTime.dwHighDateTime=0x1d5e82a, ftLastWriteTime.dwLowDateTime=0xb0146a00, ftLastWriteTime.dwHighDateTime=0x1d5e82a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x381dc0 [0115.942] FindClose (in: hFindFile=0x381dc0 | out: hFindFile=0x381dc0) returned 1 [0115.942] GetFullPathNameW (in: lpFileName="C:\\Windows\\ServiceProfiles\\LocalService\\AppData\\Local\\Microsoft", nBufferLength=0x105, lpBuffer=0x31e1d4, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\ServiceProfiles\\LocalService\\AppData\\Local\\Microsoft", lpFilePart=0x0) returned 0x3f [0115.942] GetFullPathNameW (in: lpFileName="C:\\Windows\\ServiceProfiles\\LocalService\\AppData\\Local\\Microsoft\\", nBufferLength=0x105, lpBuffer=0x31e1a8, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\ServiceProfiles\\LocalService\\AppData\\Local\\Microsoft\\", lpFilePart=0x0) returned 0x40 [0115.942] FindFirstFileW (in: lpFileName="C:\\Windows\\ServiceProfiles\\LocalService\\AppData\\Local\\Microsoft\\*", lpFindFileData=0x31e3f4 | out: lpFindFileData=0x31e3f4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xf4be0d01, ftCreationTime.dwHighDateTime=0x1ca043d, ftLastAccessTime.dwLowDateTime=0xf4be0d01, ftLastAccessTime.dwHighDateTime=0x1ca043d, ftLastWriteTime.dwLowDateTime=0xf4be0d01, ftLastWriteTime.dwHighDateTime=0x1ca043d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x381dc0 [0115.942] FindClose (in: hFindFile=0x381dc0 | out: hFindFile=0x381dc0) returned 1 [0115.942] GetFullPathNameW (in: lpFileName="C:\\Windows\\ServiceProfiles\\LocalService\\AppData\\Local\\Microsoft", nBufferLength=0x105, lpBuffer=0x31e1d4, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\ServiceProfiles\\LocalService\\AppData\\Local\\Microsoft", lpFilePart=0x0) returned 0x3f [0115.942] GetFullPathNameW (in: lpFileName="C:\\Windows\\ServiceProfiles\\LocalService\\AppData\\Local\\Microsoft\\", nBufferLength=0x105, lpBuffer=0x31e1a8, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\ServiceProfiles\\LocalService\\AppData\\Local\\Microsoft\\", lpFilePart=0x0) returned 0x40 [0115.942] FindFirstFileW (in: lpFileName="C:\\Windows\\ServiceProfiles\\LocalService\\AppData\\Local\\Microsoft\\*", lpFindFileData=0x31e3f4 | out: lpFindFileData=0x31e3f4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xf4be0d01, ftCreationTime.dwHighDateTime=0x1ca043d, ftLastAccessTime.dwLowDateTime=0xf4be0d01, ftLastAccessTime.dwHighDateTime=0x1ca043d, ftLastWriteTime.dwLowDateTime=0xf4be0d01, ftLastWriteTime.dwHighDateTime=0x1ca043d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x381dc0 [0115.942] FindClose (in: hFindFile=0x381dc0 | out: hFindFile=0x381dc0) returned 1 [0115.942] GetFullPathNameW (in: lpFileName="C:\\Windows\\ServiceProfiles\\LocalService\\AppData\\Local\\Microsoft\\Windows", nBufferLength=0x105, lpBuffer=0x31e15c, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\ServiceProfiles\\LocalService\\AppData\\Local\\Microsoft\\Windows", lpFilePart=0x0) returned 0x47 [0115.943] GetFullPathNameW (in: lpFileName="C:\\Windows\\ServiceProfiles\\LocalService\\AppData\\Local\\Microsoft\\Windows\\", nBufferLength=0x105, lpBuffer=0x31e130, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\ServiceProfiles\\LocalService\\AppData\\Local\\Microsoft\\Windows\\", lpFilePart=0x0) returned 0x48 [0115.943] FindFirstFileW (in: lpFileName="C:\\Windows\\ServiceProfiles\\LocalService\\AppData\\Local\\Microsoft\\Windows\\*", lpFindFileData=0x31e37c | out: lpFindFileData=0x31e37c*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xf4be0d01, ftCreationTime.dwHighDateTime=0x1ca043d, ftLastAccessTime.dwLowDateTime=0x76b97149, ftLastAccessTime.dwHighDateTime=0x1ca0441, ftLastWriteTime.dwLowDateTime=0x76b97149, ftLastWriteTime.dwHighDateTime=0x1ca0441, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x381dc0 [0115.943] FindClose (in: hFindFile=0x381dc0 | out: hFindFile=0x381dc0) returned 1 [0115.943] GetFullPathNameW (in: lpFileName="C:\\Windows\\ServiceProfiles\\LocalService\\AppData\\Local\\Microsoft\\Windows", nBufferLength=0x105, lpBuffer=0x31e15c, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\ServiceProfiles\\LocalService\\AppData\\Local\\Microsoft\\Windows", lpFilePart=0x0) returned 0x47 [0115.943] GetFullPathNameW (in: lpFileName="C:\\Windows\\ServiceProfiles\\LocalService\\AppData\\Local\\Microsoft\\Windows\\", nBufferLength=0x105, lpBuffer=0x31e130, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\ServiceProfiles\\LocalService\\AppData\\Local\\Microsoft\\Windows\\", lpFilePart=0x0) returned 0x48 [0115.943] FindFirstFileW (in: lpFileName="C:\\Windows\\ServiceProfiles\\LocalService\\AppData\\Local\\Microsoft\\Windows\\*", lpFindFileData=0x31e37c | out: lpFindFileData=0x31e37c*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xf4be0d01, ftCreationTime.dwHighDateTime=0x1ca043d, ftLastAccessTime.dwLowDateTime=0x76b97149, ftLastAccessTime.dwHighDateTime=0x1ca0441, ftLastWriteTime.dwLowDateTime=0x76b97149, ftLastWriteTime.dwHighDateTime=0x1ca0441, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x381dc0 [0115.943] FindClose (in: hFindFile=0x381dc0 | out: hFindFile=0x381dc0) returned 1 [0115.943] GetFullPathNameW (in: lpFileName="C:\\Windows\\ServiceProfiles\\LocalService\\AppData\\Local\\Microsoft\\Windows\\GameExplorer", nBufferLength=0x105, lpBuffer=0x31e0e4, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\ServiceProfiles\\LocalService\\AppData\\Local\\Microsoft\\Windows\\GameExplorer", lpFilePart=0x0) returned 0x54 [0115.943] GetFullPathNameW (in: lpFileName="C:\\Windows\\ServiceProfiles\\LocalService\\AppData\\Local\\Microsoft\\Windows\\GameExplorer\\", nBufferLength=0x105, lpBuffer=0x31e0b8, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\ServiceProfiles\\LocalService\\AppData\\Local\\Microsoft\\Windows\\GameExplorer\\", lpFilePart=0x0) returned 0x55 [0115.943] FindFirstFileW (in: lpFileName="C:\\Windows\\ServiceProfiles\\LocalService\\AppData\\Local\\Microsoft\\Windows\\GameExplorer\\*", lpFindFileData=0x31e304 | out: lpFindFileData=0x31e304*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xf4be0d01, ftCreationTime.dwHighDateTime=0x1ca043d, ftLastAccessTime.dwLowDateTime=0xf4be0d01, ftLastAccessTime.dwHighDateTime=0x1ca043d, ftLastWriteTime.dwLowDateTime=0xf4be0d01, ftLastWriteTime.dwHighDateTime=0x1ca043d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x381dc0 [0115.943] FindClose (in: hFindFile=0x381dc0 | out: hFindFile=0x381dc0) returned 1 [0115.943] GetFullPathNameW (in: lpFileName="C:\\Windows\\ServiceProfiles\\LocalService\\AppData\\Local\\Microsoft\\Windows\\GameExplorer", nBufferLength=0x105, lpBuffer=0x31e0e4, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\ServiceProfiles\\LocalService\\AppData\\Local\\Microsoft\\Windows\\GameExplorer", lpFilePart=0x0) returned 0x54 [0115.943] GetFullPathNameW (in: lpFileName="C:\\Windows\\ServiceProfiles\\LocalService\\AppData\\Local\\Microsoft\\Windows\\GameExplorer\\", nBufferLength=0x105, lpBuffer=0x31e0b8, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\ServiceProfiles\\LocalService\\AppData\\Local\\Microsoft\\Windows\\GameExplorer\\", lpFilePart=0x0) returned 0x55 [0115.944] FindFirstFileW (in: lpFileName="C:\\Windows\\ServiceProfiles\\LocalService\\AppData\\Local\\Microsoft\\Windows\\GameExplorer\\*", lpFindFileData=0x31e304 | out: lpFindFileData=0x31e304*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xf4be0d01, ftCreationTime.dwHighDateTime=0x1ca043d, ftLastAccessTime.dwLowDateTime=0xf4be0d01, ftLastAccessTime.dwHighDateTime=0x1ca043d, ftLastWriteTime.dwLowDateTime=0xf4be0d01, ftLastWriteTime.dwHighDateTime=0x1ca043d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x381dc0 [0115.944] FindClose (in: hFindFile=0x381dc0 | out: hFindFile=0x381dc0) returned 1 [0115.944] GetFullPathNameW (in: lpFileName="C:\\Windows\\ServiceProfiles\\LocalService\\AppData\\Local\\Microsoft\\Windows\\History", nBufferLength=0x105, lpBuffer=0x31e0e4, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\ServiceProfiles\\LocalService\\AppData\\Local\\Microsoft\\Windows\\History", lpFilePart=0x0) returned 0x4f [0115.944] GetFullPathNameW (in: lpFileName="C:\\Windows\\ServiceProfiles\\LocalService\\AppData\\Local\\Microsoft\\Windows\\History\\", nBufferLength=0x105, lpBuffer=0x31e0b8, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\ServiceProfiles\\LocalService\\AppData\\Local\\Microsoft\\Windows\\History\\", lpFilePart=0x0) returned 0x50 [0115.944] FindFirstFileW (in: lpFileName="C:\\Windows\\ServiceProfiles\\LocalService\\AppData\\Local\\Microsoft\\Windows\\History\\*", lpFindFileData=0x31e304 | out: lpFindFileData=0x31e304*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0xf4be0d01, ftCreationTime.dwHighDateTime=0x1ca043d, ftLastAccessTime.dwLowDateTime=0x5175f5c0, ftLastAccessTime.dwHighDateTime=0x1d2fafe, ftLastWriteTime.dwLowDateTime=0x5175f5c0, ftLastWriteTime.dwHighDateTime=0x1d2fafe, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x381dc0 [0115.944] FindClose (in: hFindFile=0x381dc0 | out: hFindFile=0x381dc0) returned 1 [0115.944] GetFullPathNameW (in: lpFileName="C:\\Windows\\ServiceProfiles\\LocalService\\AppData\\Local\\Microsoft\\Windows\\History", nBufferLength=0x105, lpBuffer=0x31e0e4, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\ServiceProfiles\\LocalService\\AppData\\Local\\Microsoft\\Windows\\History", lpFilePart=0x0) returned 0x4f [0115.944] GetFullPathNameW (in: lpFileName="C:\\Windows\\ServiceProfiles\\LocalService\\AppData\\Local\\Microsoft\\Windows\\History\\", nBufferLength=0x105, lpBuffer=0x31e0b8, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\ServiceProfiles\\LocalService\\AppData\\Local\\Microsoft\\Windows\\History\\", lpFilePart=0x0) returned 0x50 [0115.944] FindFirstFileW (in: lpFileName="C:\\Windows\\ServiceProfiles\\LocalService\\AppData\\Local\\Microsoft\\Windows\\History\\*", lpFindFileData=0x31e304 | out: lpFindFileData=0x31e304*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0xf4be0d01, ftCreationTime.dwHighDateTime=0x1ca043d, ftLastAccessTime.dwLowDateTime=0x5175f5c0, ftLastAccessTime.dwHighDateTime=0x1d2fafe, ftLastWriteTime.dwLowDateTime=0x5175f5c0, ftLastWriteTime.dwHighDateTime=0x1d2fafe, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x381dc0 [0115.944] FindClose (in: hFindFile=0x381dc0 | out: hFindFile=0x381dc0) returned 1 [0115.944] GetFullPathNameW (in: lpFileName="C:\\Windows\\ServiceProfiles\\LocalService\\AppData\\Local\\Microsoft\\Windows\\History\\History.IE5", nBufferLength=0x105, lpBuffer=0x31e06c, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\ServiceProfiles\\LocalService\\AppData\\Local\\Microsoft\\Windows\\History\\History.IE5", lpFilePart=0x0) returned 0x5b [0115.944] GetFullPathNameW (in: lpFileName="C:\\Windows\\ServiceProfiles\\LocalService\\AppData\\Local\\Microsoft\\Windows\\History\\History.IE5\\", nBufferLength=0x105, lpBuffer=0x31e040, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\ServiceProfiles\\LocalService\\AppData\\Local\\Microsoft\\Windows\\History\\History.IE5\\", lpFilePart=0x0) returned 0x5c [0115.944] FindFirstFileW (in: lpFileName="C:\\Windows\\ServiceProfiles\\LocalService\\AppData\\Local\\Microsoft\\Windows\\History\\History.IE5\\*", lpFindFileData=0x31e28c | out: lpFindFileData=0x31e28c*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0x5175f5c0, ftCreationTime.dwHighDateTime=0x1d2fafe, ftLastAccessTime.dwLowDateTime=0x517ab880, ftLastAccessTime.dwHighDateTime=0x1d2fafe, ftLastWriteTime.dwLowDateTime=0x517ab880, ftLastWriteTime.dwHighDateTime=0x1d2fafe, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x381dc0 [0115.944] FindClose (in: hFindFile=0x381dc0 | out: hFindFile=0x381dc0) returned 1 [0115.945] GetFullPathNameW (in: lpFileName="C:\\Windows\\ServiceProfiles\\LocalService\\AppData\\Local\\Microsoft\\Windows\\History\\History.IE5", nBufferLength=0x105, lpBuffer=0x31e06c, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\ServiceProfiles\\LocalService\\AppData\\Local\\Microsoft\\Windows\\History\\History.IE5", lpFilePart=0x0) returned 0x5b [0115.945] GetFullPathNameW (in: lpFileName="C:\\Windows\\ServiceProfiles\\LocalService\\AppData\\Local\\Microsoft\\Windows\\History\\History.IE5\\", nBufferLength=0x105, lpBuffer=0x31e040, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\ServiceProfiles\\LocalService\\AppData\\Local\\Microsoft\\Windows\\History\\History.IE5\\", lpFilePart=0x0) returned 0x5c [0115.945] FindFirstFileW (in: lpFileName="C:\\Windows\\ServiceProfiles\\LocalService\\AppData\\Local\\Microsoft\\Windows\\History\\History.IE5\\*", lpFindFileData=0x31e28c | out: lpFindFileData=0x31e28c*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0x5175f5c0, ftCreationTime.dwHighDateTime=0x1d2fafe, ftLastAccessTime.dwLowDateTime=0x517ab880, ftLastAccessTime.dwHighDateTime=0x1d2fafe, ftLastWriteTime.dwLowDateTime=0x517ab880, ftLastWriteTime.dwHighDateTime=0x1d2fafe, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x381dc0 [0115.945] FindClose (in: hFindFile=0x381dc0 | out: hFindFile=0x381dc0) returned 1 [0115.945] GetFullPathNameW (in: lpFileName="C:\\Windows\\ServiceProfiles\\LocalService\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files", nBufferLength=0x105, lpBuffer=0x31e0e4, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\ServiceProfiles\\LocalService\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files", lpFilePart=0x0) returned 0x60 [0115.945] GetFullPathNameW (in: lpFileName="C:\\Windows\\ServiceProfiles\\LocalService\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\", nBufferLength=0x105, lpBuffer=0x31e0b8, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\ServiceProfiles\\LocalService\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\", lpFilePart=0x0) returned 0x61 [0115.945] FindFirstFileW (in: lpFileName="C:\\Windows\\ServiceProfiles\\LocalService\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\*", lpFindFileData=0x31e304 | out: lpFindFileData=0x31e304*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0xf4be0d01, ftCreationTime.dwHighDateTime=0x1ca043d, ftLastAccessTime.dwLowDateTime=0x51739460, ftLastAccessTime.dwHighDateTime=0x1d2fafe, ftLastWriteTime.dwLowDateTime=0x51739460, ftLastWriteTime.dwHighDateTime=0x1d2fafe, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x381dc0 [0115.945] FindClose (in: hFindFile=0x381dc0 | out: hFindFile=0x381dc0) returned 1 [0115.945] GetFullPathNameW (in: lpFileName="C:\\Windows\\ServiceProfiles\\LocalService\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files", nBufferLength=0x105, lpBuffer=0x31e0e4, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\ServiceProfiles\\LocalService\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files", lpFilePart=0x0) returned 0x60 [0115.945] GetFullPathNameW (in: lpFileName="C:\\Windows\\ServiceProfiles\\LocalService\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\", nBufferLength=0x105, lpBuffer=0x31e0b8, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\ServiceProfiles\\LocalService\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\", lpFilePart=0x0) returned 0x61 [0115.945] FindFirstFileW (in: lpFileName="C:\\Windows\\ServiceProfiles\\LocalService\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\*", lpFindFileData=0x31e304 | out: lpFindFileData=0x31e304*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0xf4be0d01, ftCreationTime.dwHighDateTime=0x1ca043d, ftLastAccessTime.dwLowDateTime=0x51739460, ftLastAccessTime.dwHighDateTime=0x1d2fafe, ftLastWriteTime.dwLowDateTime=0x51739460, ftLastWriteTime.dwHighDateTime=0x1d2fafe, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x381dc0 [0115.945] FindClose (in: hFindFile=0x381dc0 | out: hFindFile=0x381dc0) returned 1 [0115.945] GetFullPathNameW (in: lpFileName="C:\\Windows\\ServiceProfiles\\LocalService\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Content.IE5", nBufferLength=0x105, lpBuffer=0x31e06c, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\ServiceProfiles\\LocalService\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Content.IE5", lpFilePart=0x0) returned 0x6c [0115.945] GetFullPathNameW (in: lpFileName="C:\\Windows\\ServiceProfiles\\LocalService\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Content.IE5\\", nBufferLength=0x105, lpBuffer=0x31e040, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\ServiceProfiles\\LocalService\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Content.IE5\\", lpFilePart=0x0) returned 0x6d [0115.945] FindFirstFileW (in: lpFileName="C:\\Windows\\ServiceProfiles\\LocalService\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Content.IE5\\*", lpFindFileData=0x31e28c | out: lpFindFileData=0x31e28c*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0x51739460, ftCreationTime.dwHighDateTime=0x1d2fafe, ftLastAccessTime.dwLowDateTime=0x51785720, ftLastAccessTime.dwHighDateTime=0x1d2fafe, ftLastWriteTime.dwLowDateTime=0x51785720, ftLastWriteTime.dwHighDateTime=0x1d2fafe, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x381dc0 [0115.946] FindClose (in: hFindFile=0x381dc0 | out: hFindFile=0x381dc0) returned 1 [0115.946] GetFullPathNameW (in: lpFileName="C:\\Windows\\ServiceProfiles\\LocalService\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Content.IE5", nBufferLength=0x105, lpBuffer=0x31e06c, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\ServiceProfiles\\LocalService\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Content.IE5", lpFilePart=0x0) returned 0x6c [0115.946] GetFullPathNameW (in: lpFileName="C:\\Windows\\ServiceProfiles\\LocalService\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Content.IE5\\", nBufferLength=0x105, lpBuffer=0x31e040, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\ServiceProfiles\\LocalService\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Content.IE5\\", lpFilePart=0x0) returned 0x6d [0115.946] FindFirstFileW (in: lpFileName="C:\\Windows\\ServiceProfiles\\LocalService\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Content.IE5\\*", lpFindFileData=0x31e28c | out: lpFindFileData=0x31e28c*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0x51739460, ftCreationTime.dwHighDateTime=0x1d2fafe, ftLastAccessTime.dwLowDateTime=0x51785720, ftLastAccessTime.dwHighDateTime=0x1d2fafe, ftLastWriteTime.dwLowDateTime=0x51785720, ftLastWriteTime.dwHighDateTime=0x1d2fafe, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x381dc0 [0115.946] FindClose (in: hFindFile=0x381dc0 | out: hFindFile=0x381dc0) returned 1 [0115.946] GetFullPathNameW (in: lpFileName="C:\\Windows\\ServiceProfiles\\LocalService\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Content.IE5\\7HGJ4N77", nBufferLength=0x105, lpBuffer=0x31dff4, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\ServiceProfiles\\LocalService\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Content.IE5\\7HGJ4N77", lpFilePart=0x0) returned 0x75 [0115.946] GetFullPathNameW (in: lpFileName="C:\\Windows\\ServiceProfiles\\LocalService\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Content.IE5\\7HGJ4N77\\", nBufferLength=0x105, lpBuffer=0x31dfc8, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\ServiceProfiles\\LocalService\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Content.IE5\\7HGJ4N77\\", lpFilePart=0x0) returned 0x76 [0115.946] FindFirstFileW (in: lpFileName="C:\\Windows\\ServiceProfiles\\LocalService\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Content.IE5\\7HGJ4N77\\*", lpFindFileData=0x31e214 | out: lpFindFileData=0x31e214*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0x51785720, ftCreationTime.dwHighDateTime=0x1d2fafe, ftLastAccessTime.dwLowDateTime=0x51785720, ftLastAccessTime.dwHighDateTime=0x1d2fafe, ftLastWriteTime.dwLowDateTime=0x51785720, ftLastWriteTime.dwHighDateTime=0x1d2fafe, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x381dc0 [0115.947] FindClose (in: hFindFile=0x381dc0 | out: hFindFile=0x381dc0) returned 1 [0115.947] GetFullPathNameW (in: lpFileName="C:\\Windows\\ServiceProfiles\\LocalService\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Content.IE5\\7HGJ4N77", nBufferLength=0x105, lpBuffer=0x31dff4, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\ServiceProfiles\\LocalService\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Content.IE5\\7HGJ4N77", lpFilePart=0x0) returned 0x75 [0115.947] GetFullPathNameW (in: lpFileName="C:\\Windows\\ServiceProfiles\\LocalService\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Content.IE5\\7HGJ4N77\\", nBufferLength=0x105, lpBuffer=0x31dfc8, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\ServiceProfiles\\LocalService\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Content.IE5\\7HGJ4N77\\", lpFilePart=0x0) returned 0x76 [0115.947] FindFirstFileW (in: lpFileName="C:\\Windows\\ServiceProfiles\\LocalService\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Content.IE5\\7HGJ4N77\\*", lpFindFileData=0x31e214 | out: lpFindFileData=0x31e214*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0x51785720, ftCreationTime.dwHighDateTime=0x1d2fafe, ftLastAccessTime.dwLowDateTime=0x51785720, ftLastAccessTime.dwHighDateTime=0x1d2fafe, ftLastWriteTime.dwLowDateTime=0x51785720, ftLastWriteTime.dwHighDateTime=0x1d2fafe, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x381dc0 [0115.947] FindClose (in: hFindFile=0x381dc0 | out: hFindFile=0x381dc0) returned 1 [0115.948] GetFullPathNameW (in: lpFileName="C:\\Windows\\ServiceProfiles\\LocalService\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Content.IE5\\K7H3E31J", nBufferLength=0x105, lpBuffer=0x31dff4, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\ServiceProfiles\\LocalService\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Content.IE5\\K7H3E31J", lpFilePart=0x0) returned 0x75 [0115.948] GetFullPathNameW (in: lpFileName="C:\\Windows\\ServiceProfiles\\LocalService\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Content.IE5\\K7H3E31J\\", nBufferLength=0x105, lpBuffer=0x31dfc8, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\ServiceProfiles\\LocalService\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Content.IE5\\K7H3E31J\\", lpFilePart=0x0) returned 0x76 [0115.948] FindFirstFileW (in: lpFileName="C:\\Windows\\ServiceProfiles\\LocalService\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Content.IE5\\K7H3E31J\\*", lpFindFileData=0x31e214 | out: lpFindFileData=0x31e214*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0x51785720, ftCreationTime.dwHighDateTime=0x1d2fafe, ftLastAccessTime.dwLowDateTime=0x51785720, ftLastAccessTime.dwHighDateTime=0x1d2fafe, ftLastWriteTime.dwLowDateTime=0x51785720, ftLastWriteTime.dwHighDateTime=0x1d2fafe, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x381dc0 [0115.948] FindClose (in: hFindFile=0x381dc0 | out: hFindFile=0x381dc0) returned 1 [0115.948] GetFullPathNameW (in: lpFileName="C:\\Windows\\ServiceProfiles\\LocalService\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Content.IE5\\K7H3E31J", nBufferLength=0x105, lpBuffer=0x31dff4, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\ServiceProfiles\\LocalService\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Content.IE5\\K7H3E31J", lpFilePart=0x0) returned 0x75 [0115.949] GetFullPathNameW (in: lpFileName="C:\\Windows\\ServiceProfiles\\LocalService\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Content.IE5\\K7H3E31J\\", nBufferLength=0x105, lpBuffer=0x31dfc8, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\ServiceProfiles\\LocalService\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Content.IE5\\K7H3E31J\\", lpFilePart=0x0) returned 0x76 [0115.949] FindFirstFileW (in: lpFileName="C:\\Windows\\ServiceProfiles\\LocalService\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Content.IE5\\K7H3E31J\\*", lpFindFileData=0x31e214 | out: lpFindFileData=0x31e214*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0x51785720, ftCreationTime.dwHighDateTime=0x1d2fafe, ftLastAccessTime.dwLowDateTime=0x51785720, ftLastAccessTime.dwHighDateTime=0x1d2fafe, ftLastWriteTime.dwLowDateTime=0x51785720, ftLastWriteTime.dwHighDateTime=0x1d2fafe, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x381dc0 [0115.949] FindClose (in: hFindFile=0x381dc0 | out: hFindFile=0x381dc0) returned 1 [0115.949] GetFullPathNameW (in: lpFileName="C:\\Windows\\ServiceProfiles\\LocalService\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Content.IE5\\SP12H0OS", nBufferLength=0x105, lpBuffer=0x31dff4, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\ServiceProfiles\\LocalService\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Content.IE5\\SP12H0OS", lpFilePart=0x0) returned 0x75 [0115.949] GetFullPathNameW (in: lpFileName="C:\\Windows\\ServiceProfiles\\LocalService\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Content.IE5\\SP12H0OS\\", nBufferLength=0x105, lpBuffer=0x31dfc8, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\ServiceProfiles\\LocalService\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Content.IE5\\SP12H0OS\\", lpFilePart=0x0) returned 0x76 [0115.949] FindFirstFileW (in: lpFileName="C:\\Windows\\ServiceProfiles\\LocalService\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Content.IE5\\SP12H0OS\\*", lpFindFileData=0x31e214 | out: lpFindFileData=0x31e214*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0x51785720, ftCreationTime.dwHighDateTime=0x1d2fafe, ftLastAccessTime.dwLowDateTime=0x51785720, ftLastAccessTime.dwHighDateTime=0x1d2fafe, ftLastWriteTime.dwLowDateTime=0x51785720, ftLastWriteTime.dwHighDateTime=0x1d2fafe, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x381dc0 [0115.950] FindClose (in: hFindFile=0x381dc0 | out: hFindFile=0x381dc0) returned 1 [0115.950] GetFullPathNameW (in: lpFileName="C:\\Windows\\ServiceProfiles\\LocalService\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Content.IE5\\SP12H0OS", nBufferLength=0x105, lpBuffer=0x31dff4, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\ServiceProfiles\\LocalService\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Content.IE5\\SP12H0OS", lpFilePart=0x0) returned 0x75 [0115.950] GetFullPathNameW (in: lpFileName="C:\\Windows\\ServiceProfiles\\LocalService\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Content.IE5\\SP12H0OS\\", nBufferLength=0x105, lpBuffer=0x31dfc8, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\ServiceProfiles\\LocalService\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Content.IE5\\SP12H0OS\\", lpFilePart=0x0) returned 0x76 [0115.950] FindFirstFileW (in: lpFileName="C:\\Windows\\ServiceProfiles\\LocalService\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Content.IE5\\SP12H0OS\\*", lpFindFileData=0x31e214 | out: lpFindFileData=0x31e214*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0x51785720, ftCreationTime.dwHighDateTime=0x1d2fafe, ftLastAccessTime.dwLowDateTime=0x51785720, ftLastAccessTime.dwHighDateTime=0x1d2fafe, ftLastWriteTime.dwLowDateTime=0x51785720, ftLastWriteTime.dwHighDateTime=0x1d2fafe, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x381dc0 [0115.950] FindClose (in: hFindFile=0x381dc0 | out: hFindFile=0x381dc0) returned 1 [0115.950] GetFullPathNameW (in: lpFileName="C:\\Windows\\ServiceProfiles\\LocalService\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Content.IE5\\VD699IQD", nBufferLength=0x105, lpBuffer=0x31dff4, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\ServiceProfiles\\LocalService\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Content.IE5\\VD699IQD", lpFilePart=0x0) returned 0x75 [0115.950] GetFullPathNameW (in: lpFileName="C:\\Windows\\ServiceProfiles\\LocalService\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Content.IE5\\VD699IQD\\", nBufferLength=0x105, lpBuffer=0x31dfc8, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\ServiceProfiles\\LocalService\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Content.IE5\\VD699IQD\\", lpFilePart=0x0) returned 0x76 [0115.950] FindFirstFileW (in: lpFileName="C:\\Windows\\ServiceProfiles\\LocalService\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Content.IE5\\VD699IQD\\*", lpFindFileData=0x31e214 | out: lpFindFileData=0x31e214*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0x51785720, ftCreationTime.dwHighDateTime=0x1d2fafe, ftLastAccessTime.dwLowDateTime=0x51785720, ftLastAccessTime.dwHighDateTime=0x1d2fafe, ftLastWriteTime.dwLowDateTime=0x51785720, ftLastWriteTime.dwHighDateTime=0x1d2fafe, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x381dc0 [0115.950] FindClose (in: hFindFile=0x381dc0 | out: hFindFile=0x381dc0) returned 1 [0115.950] GetFullPathNameW (in: lpFileName="C:\\Windows\\ServiceProfiles\\LocalService\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Content.IE5\\VD699IQD", nBufferLength=0x105, lpBuffer=0x31dff4, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\ServiceProfiles\\LocalService\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Content.IE5\\VD699IQD", lpFilePart=0x0) returned 0x75 [0115.951] GetFullPathNameW (in: lpFileName="C:\\Windows\\ServiceProfiles\\LocalService\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Content.IE5\\VD699IQD\\", nBufferLength=0x105, lpBuffer=0x31dfc8, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\ServiceProfiles\\LocalService\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Content.IE5\\VD699IQD\\", lpFilePart=0x0) returned 0x76 [0115.951] FindFirstFileW (in: lpFileName="C:\\Windows\\ServiceProfiles\\LocalService\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Content.IE5\\VD699IQD\\*", lpFindFileData=0x31e214 | out: lpFindFileData=0x31e214*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0x51785720, ftCreationTime.dwHighDateTime=0x1d2fafe, ftLastAccessTime.dwLowDateTime=0x51785720, ftLastAccessTime.dwHighDateTime=0x1d2fafe, ftLastWriteTime.dwLowDateTime=0x51785720, ftLastWriteTime.dwHighDateTime=0x1d2fafe, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x381dc0 [0115.951] FindClose (in: hFindFile=0x381dc0 | out: hFindFile=0x381dc0) returned 1 [0115.951] GetFullPathNameW (in: lpFileName="C:\\Windows\\ServiceProfiles\\LocalService\\AppData\\Local\\Temp", nBufferLength=0x105, lpBuffer=0x31e1d4, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\ServiceProfiles\\LocalService\\AppData\\Local\\Temp", lpFilePart=0x0) returned 0x3a [0115.951] GetFullPathNameW (in: lpFileName="C:\\Windows\\ServiceProfiles\\LocalService\\AppData\\Local\\Temp\\", nBufferLength=0x105, lpBuffer=0x31e1a8, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\ServiceProfiles\\LocalService\\AppData\\Local\\Temp\\", lpFilePart=0x0) returned 0x3b [0115.951] FindFirstFileW (in: lpFileName="C:\\Windows\\ServiceProfiles\\LocalService\\AppData\\Local\\Temp\\*", lpFindFileData=0x31e3f4 | out: lpFindFileData=0x31e3f4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xf4c06e61, ftCreationTime.dwHighDateTime=0x1ca043d, ftLastAccessTime.dwLowDateTime=0xf4c06e61, ftLastAccessTime.dwHighDateTime=0x1ca043d, ftLastWriteTime.dwLowDateTime=0xf4c06e61, ftLastWriteTime.dwHighDateTime=0x1ca043d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x381dc0 [0115.951] FindClose (in: hFindFile=0x381dc0 | out: hFindFile=0x381dc0) returned 1 [0115.951] GetFullPathNameW (in: lpFileName="C:\\Windows\\ServiceProfiles\\LocalService\\AppData\\Local\\Temp", nBufferLength=0x105, lpBuffer=0x31e1d4, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\ServiceProfiles\\LocalService\\AppData\\Local\\Temp", lpFilePart=0x0) returned 0x3a [0115.951] GetFullPathNameW (in: lpFileName="C:\\Windows\\ServiceProfiles\\LocalService\\AppData\\Local\\Temp\\", nBufferLength=0x105, lpBuffer=0x31e1a8, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\ServiceProfiles\\LocalService\\AppData\\Local\\Temp\\", lpFilePart=0x0) returned 0x3b [0115.951] FindFirstFileW (in: lpFileName="C:\\Windows\\ServiceProfiles\\LocalService\\AppData\\Local\\Temp\\*", lpFindFileData=0x31e3f4 | out: lpFindFileData=0x31e3f4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xf4c06e61, ftCreationTime.dwHighDateTime=0x1ca043d, ftLastAccessTime.dwLowDateTime=0xf4c06e61, ftLastAccessTime.dwHighDateTime=0x1ca043d, ftLastWriteTime.dwLowDateTime=0xf4c06e61, ftLastWriteTime.dwHighDateTime=0x1ca043d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x381dc0 [0115.951] FindClose (in: hFindFile=0x381dc0 | out: hFindFile=0x381dc0) returned 1 [0115.951] GetFullPathNameW (in: lpFileName="C:\\Windows\\ServiceProfiles\\LocalService\\AppData\\Roaming", nBufferLength=0x105, lpBuffer=0x31e24c, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\ServiceProfiles\\LocalService\\AppData\\Roaming", lpFilePart=0x0) returned 0x37 [0115.951] GetFullPathNameW (in: lpFileName="C:\\Windows\\ServiceProfiles\\LocalService\\AppData\\Roaming\\", nBufferLength=0x105, lpBuffer=0x31e220, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\ServiceProfiles\\LocalService\\AppData\\Roaming\\", lpFilePart=0x0) returned 0x38 [0115.952] FindFirstFileW (in: lpFileName="C:\\Windows\\ServiceProfiles\\LocalService\\AppData\\Roaming\\*", lpFindFileData=0x31e46c | out: lpFindFileData=0x31e46c*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xf4c06e61, ftCreationTime.dwHighDateTime=0x1ca043d, ftLastAccessTime.dwLowDateTime=0xf4c06e61, ftLastAccessTime.dwHighDateTime=0x1ca043d, ftLastWriteTime.dwLowDateTime=0xf4c06e61, ftLastWriteTime.dwHighDateTime=0x1ca043d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x381dc0 [0115.952] FindClose (in: hFindFile=0x381dc0 | out: hFindFile=0x381dc0) returned 1 [0115.952] GetFullPathNameW (in: lpFileName="C:\\Windows\\ServiceProfiles\\LocalService\\AppData\\Roaming", nBufferLength=0x105, lpBuffer=0x31e24c, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\ServiceProfiles\\LocalService\\AppData\\Roaming", lpFilePart=0x0) returned 0x37 [0115.952] GetFullPathNameW (in: lpFileName="C:\\Windows\\ServiceProfiles\\LocalService\\AppData\\Roaming\\", nBufferLength=0x105, lpBuffer=0x31e220, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\ServiceProfiles\\LocalService\\AppData\\Roaming\\", lpFilePart=0x0) returned 0x38 [0115.952] FindFirstFileW (in: lpFileName="C:\\Windows\\ServiceProfiles\\LocalService\\AppData\\Roaming\\*", lpFindFileData=0x31e46c | out: lpFindFileData=0x31e46c*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xf4c06e61, ftCreationTime.dwHighDateTime=0x1ca043d, ftLastAccessTime.dwLowDateTime=0xf4c06e61, ftLastAccessTime.dwHighDateTime=0x1ca043d, ftLastWriteTime.dwLowDateTime=0xf4c06e61, ftLastWriteTime.dwHighDateTime=0x1ca043d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x381dc0 [0115.952] FindClose (in: hFindFile=0x381dc0 | out: hFindFile=0x381dc0) returned 1 [0115.952] GetFullPathNameW (in: lpFileName="C:\\Windows\\ServiceProfiles\\LocalService\\AppData\\Roaming\\Microsoft", nBufferLength=0x105, lpBuffer=0x31e1d4, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\ServiceProfiles\\LocalService\\AppData\\Roaming\\Microsoft", lpFilePart=0x0) returned 0x41 [0115.952] GetFullPathNameW (in: lpFileName="C:\\Windows\\ServiceProfiles\\LocalService\\AppData\\Roaming\\Microsoft\\", nBufferLength=0x105, lpBuffer=0x31e1a8, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\ServiceProfiles\\LocalService\\AppData\\Roaming\\Microsoft\\", lpFilePart=0x0) returned 0x42 [0115.952] FindFirstFileW (in: lpFileName="C:\\Windows\\ServiceProfiles\\LocalService\\AppData\\Roaming\\Microsoft\\*", lpFindFileData=0x31e3f4 | out: lpFindFileData=0x31e3f4*(dwFileAttributes=0x2014, ftCreationTime.dwLowDateTime=0xf4c06e61, ftCreationTime.dwHighDateTime=0x1ca043d, ftLastAccessTime.dwLowDateTime=0xf4c06e61, ftLastAccessTime.dwHighDateTime=0x1ca043d, ftLastWriteTime.dwLowDateTime=0xf4c06e61, ftLastWriteTime.dwHighDateTime=0x1ca043d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x381dc0 [0115.952] FindClose (in: hFindFile=0x381dc0 | out: hFindFile=0x381dc0) returned 1 [0115.952] GetFullPathNameW (in: lpFileName="C:\\Windows\\ServiceProfiles\\LocalService\\AppData\\Roaming\\Microsoft", nBufferLength=0x105, lpBuffer=0x31e1d4, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\ServiceProfiles\\LocalService\\AppData\\Roaming\\Microsoft", lpFilePart=0x0) returned 0x41 [0115.952] GetFullPathNameW (in: lpFileName="C:\\Windows\\ServiceProfiles\\LocalService\\AppData\\Roaming\\Microsoft\\", nBufferLength=0x105, lpBuffer=0x31e1a8, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\ServiceProfiles\\LocalService\\AppData\\Roaming\\Microsoft\\", lpFilePart=0x0) returned 0x42 [0115.952] FindFirstFileW (in: lpFileName="C:\\Windows\\ServiceProfiles\\LocalService\\AppData\\Roaming\\Microsoft\\*", lpFindFileData=0x31e3f4 | out: lpFindFileData=0x31e3f4*(dwFileAttributes=0x2014, ftCreationTime.dwLowDateTime=0xf4c06e61, ftCreationTime.dwHighDateTime=0x1ca043d, ftLastAccessTime.dwLowDateTime=0xf4c06e61, ftLastAccessTime.dwHighDateTime=0x1ca043d, ftLastWriteTime.dwLowDateTime=0xf4c06e61, ftLastWriteTime.dwHighDateTime=0x1ca043d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x381dc0 [0115.952] FindClose (in: hFindFile=0x381dc0 | out: hFindFile=0x381dc0) returned 1 [0115.952] GetFullPathNameW (in: lpFileName="C:\\Windows\\ServiceProfiles\\LocalService\\AppData\\Roaming\\Microsoft\\Internet Explorer", nBufferLength=0x105, lpBuffer=0x31e15c, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\ServiceProfiles\\LocalService\\AppData\\Roaming\\Microsoft\\Internet Explorer", lpFilePart=0x0) returned 0x53 [0115.953] GetFullPathNameW (in: lpFileName="C:\\Windows\\ServiceProfiles\\LocalService\\AppData\\Roaming\\Microsoft\\Internet Explorer\\", nBufferLength=0x105, lpBuffer=0x31e130, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\ServiceProfiles\\LocalService\\AppData\\Roaming\\Microsoft\\Internet Explorer\\", lpFilePart=0x0) returned 0x54 [0115.953] FindFirstFileW (in: lpFileName="C:\\Windows\\ServiceProfiles\\LocalService\\AppData\\Roaming\\Microsoft\\Internet Explorer\\*", lpFindFileData=0x31e37c | out: lpFindFileData=0x31e37c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf4c06e61, ftCreationTime.dwHighDateTime=0x1ca043d, ftLastAccessTime.dwLowDateTime=0xf4c06e61, ftLastAccessTime.dwHighDateTime=0x1ca043d, ftLastWriteTime.dwLowDateTime=0xf4c06e61, ftLastWriteTime.dwHighDateTime=0x1ca043d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x381dc0 [0115.953] FindClose (in: hFindFile=0x381dc0 | out: hFindFile=0x381dc0) returned 1 [0115.953] GetFullPathNameW (in: lpFileName="C:\\Windows\\ServiceProfiles\\LocalService\\AppData\\Roaming\\Microsoft\\Internet Explorer", nBufferLength=0x105, lpBuffer=0x31e15c, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\ServiceProfiles\\LocalService\\AppData\\Roaming\\Microsoft\\Internet Explorer", lpFilePart=0x0) returned 0x53 [0115.953] GetFullPathNameW (in: lpFileName="C:\\Windows\\ServiceProfiles\\LocalService\\AppData\\Roaming\\Microsoft\\Internet Explorer\\", nBufferLength=0x105, lpBuffer=0x31e130, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\ServiceProfiles\\LocalService\\AppData\\Roaming\\Microsoft\\Internet Explorer\\", lpFilePart=0x0) returned 0x54 [0115.953] FindFirstFileW (in: lpFileName="C:\\Windows\\ServiceProfiles\\LocalService\\AppData\\Roaming\\Microsoft\\Internet Explorer\\*", lpFindFileData=0x31e37c | out: lpFindFileData=0x31e37c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf4c06e61, ftCreationTime.dwHighDateTime=0x1ca043d, ftLastAccessTime.dwLowDateTime=0xf4c06e61, ftLastAccessTime.dwHighDateTime=0x1ca043d, ftLastWriteTime.dwLowDateTime=0xf4c06e61, ftLastWriteTime.dwHighDateTime=0x1ca043d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x381dc0 [0115.953] FindClose (in: hFindFile=0x381dc0 | out: hFindFile=0x381dc0) returned 1 [0115.953] GetFullPathNameW (in: lpFileName="C:\\Windows\\ServiceProfiles\\LocalService\\AppData\\Roaming\\Microsoft\\Internet Explorer\\Quick Launch", nBufferLength=0x105, lpBuffer=0x31e0e4, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\ServiceProfiles\\LocalService\\AppData\\Roaming\\Microsoft\\Internet Explorer\\Quick Launch", lpFilePart=0x0) returned 0x60 [0115.953] GetFullPathNameW (in: lpFileName="C:\\Windows\\ServiceProfiles\\LocalService\\AppData\\Roaming\\Microsoft\\Internet Explorer\\Quick Launch\\", nBufferLength=0x105, lpBuffer=0x31e0b8, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\ServiceProfiles\\LocalService\\AppData\\Roaming\\Microsoft\\Internet Explorer\\Quick Launch\\", lpFilePart=0x0) returned 0x61 [0115.953] FindFirstFileW (in: lpFileName="C:\\Windows\\ServiceProfiles\\LocalService\\AppData\\Roaming\\Microsoft\\Internet Explorer\\Quick Launch\\*", lpFindFileData=0x31e304 | out: lpFindFileData=0x31e304*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf4c06e61, ftCreationTime.dwHighDateTime=0x1ca043d, ftLastAccessTime.dwLowDateTime=0xf4c06e61, ftLastAccessTime.dwHighDateTime=0x1ca043d, ftLastWriteTime.dwLowDateTime=0xf4c06e61, ftLastWriteTime.dwHighDateTime=0x1ca043d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x381dc0 [0115.953] FindClose (in: hFindFile=0x381dc0 | out: hFindFile=0x381dc0) returned 1 [0115.953] GetFullPathNameW (in: lpFileName="C:\\Windows\\ServiceProfiles\\LocalService\\AppData\\Roaming\\Microsoft\\Internet Explorer\\Quick Launch", nBufferLength=0x105, lpBuffer=0x31e0e4, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\ServiceProfiles\\LocalService\\AppData\\Roaming\\Microsoft\\Internet Explorer\\Quick Launch", lpFilePart=0x0) returned 0x60 [0115.953] GetFullPathNameW (in: lpFileName="C:\\Windows\\ServiceProfiles\\LocalService\\AppData\\Roaming\\Microsoft\\Internet Explorer\\Quick Launch\\", nBufferLength=0x105, lpBuffer=0x31e0b8, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\ServiceProfiles\\LocalService\\AppData\\Roaming\\Microsoft\\Internet Explorer\\Quick Launch\\", lpFilePart=0x0) returned 0x61 [0115.954] FindFirstFileW (in: lpFileName="C:\\Windows\\ServiceProfiles\\LocalService\\AppData\\Roaming\\Microsoft\\Internet Explorer\\Quick Launch\\*", lpFindFileData=0x31e304 | out: lpFindFileData=0x31e304*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf4c06e61, ftCreationTime.dwHighDateTime=0x1ca043d, ftLastAccessTime.dwLowDateTime=0xf4c06e61, ftLastAccessTime.dwHighDateTime=0x1ca043d, ftLastWriteTime.dwLowDateTime=0xf4c06e61, ftLastWriteTime.dwHighDateTime=0x1ca043d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x381dc0 [0115.954] FindClose (in: hFindFile=0x381dc0 | out: hFindFile=0x381dc0) returned 1 [0115.954] GetFullPathNameW (in: lpFileName="C:\\Windows\\ServiceProfiles\\LocalService\\AppData\\Roaming\\Microsoft\\Windows", nBufferLength=0x105, lpBuffer=0x31e15c, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\ServiceProfiles\\LocalService\\AppData\\Roaming\\Microsoft\\Windows", lpFilePart=0x0) returned 0x49 [0115.954] GetFullPathNameW (in: lpFileName="C:\\Windows\\ServiceProfiles\\LocalService\\AppData\\Roaming\\Microsoft\\Windows\\", nBufferLength=0x105, lpBuffer=0x31e130, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\ServiceProfiles\\LocalService\\AppData\\Roaming\\Microsoft\\Windows\\", lpFilePart=0x0) returned 0x4a [0115.954] FindFirstFileW (in: lpFileName="C:\\Windows\\ServiceProfiles\\LocalService\\AppData\\Roaming\\Microsoft\\Windows\\*", lpFindFileData=0x31e37c | out: lpFindFileData=0x31e37c*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xf4c06e61, ftCreationTime.dwHighDateTime=0x1ca043d, ftLastAccessTime.dwLowDateTime=0xf4c06e61, ftLastAccessTime.dwHighDateTime=0x1ca043d, ftLastWriteTime.dwLowDateTime=0xf4c06e61, ftLastWriteTime.dwHighDateTime=0x1ca043d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x381dc0 [0115.954] FindClose (in: hFindFile=0x381dc0 | out: hFindFile=0x381dc0) returned 1 [0115.954] GetFullPathNameW (in: lpFileName="C:\\Windows\\ServiceProfiles\\LocalService\\AppData\\Roaming\\Microsoft\\Windows", nBufferLength=0x105, lpBuffer=0x31e15c, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\ServiceProfiles\\LocalService\\AppData\\Roaming\\Microsoft\\Windows", lpFilePart=0x0) returned 0x49 [0115.954] GetFullPathNameW (in: lpFileName="C:\\Windows\\ServiceProfiles\\LocalService\\AppData\\Roaming\\Microsoft\\Windows\\", nBufferLength=0x105, lpBuffer=0x31e130, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\ServiceProfiles\\LocalService\\AppData\\Roaming\\Microsoft\\Windows\\", lpFilePart=0x0) returned 0x4a [0115.954] FindFirstFileW (in: lpFileName="C:\\Windows\\ServiceProfiles\\LocalService\\AppData\\Roaming\\Microsoft\\Windows\\*", lpFindFileData=0x31e37c | out: lpFindFileData=0x31e37c*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xf4c06e61, ftCreationTime.dwHighDateTime=0x1ca043d, ftLastAccessTime.dwLowDateTime=0xf4c06e61, ftLastAccessTime.dwHighDateTime=0x1ca043d, ftLastWriteTime.dwLowDateTime=0xf4c06e61, ftLastWriteTime.dwHighDateTime=0x1ca043d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x381dc0 [0115.954] FindClose (in: hFindFile=0x381dc0 | out: hFindFile=0x381dc0) returned 1 [0115.954] GetFullPathNameW (in: lpFileName="C:\\Windows\\ServiceProfiles\\LocalService\\AppData\\Roaming\\Microsoft\\Windows\\Cookies", nBufferLength=0x105, lpBuffer=0x31e0e4, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\ServiceProfiles\\LocalService\\AppData\\Roaming\\Microsoft\\Windows\\Cookies", lpFilePart=0x0) returned 0x51 [0115.954] GetFullPathNameW (in: lpFileName="C:\\Windows\\ServiceProfiles\\LocalService\\AppData\\Roaming\\Microsoft\\Windows\\Cookies\\", nBufferLength=0x105, lpBuffer=0x31e0b8, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\ServiceProfiles\\LocalService\\AppData\\Roaming\\Microsoft\\Windows\\Cookies\\", lpFilePart=0x0) returned 0x52 [0115.954] FindFirstFileW (in: lpFileName="C:\\Windows\\ServiceProfiles\\LocalService\\AppData\\Roaming\\Microsoft\\Windows\\Cookies\\*", lpFindFileData=0x31e304 | out: lpFindFileData=0x31e304*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0xf4c06e61, ftCreationTime.dwHighDateTime=0x1ca043d, ftLastAccessTime.dwLowDateTime=0x51785720, ftLastAccessTime.dwHighDateTime=0x1d2fafe, ftLastWriteTime.dwLowDateTime=0x51785720, ftLastWriteTime.dwHighDateTime=0x1d2fafe, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x381dc0 [0115.955] FindClose (in: hFindFile=0x381dc0 | out: hFindFile=0x381dc0) returned 1 [0115.955] GetFullPathNameW (in: lpFileName="C:\\Windows\\ServiceProfiles\\LocalService\\AppData\\Roaming\\Microsoft\\Windows\\Cookies", nBufferLength=0x105, lpBuffer=0x31e0e4, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\ServiceProfiles\\LocalService\\AppData\\Roaming\\Microsoft\\Windows\\Cookies", lpFilePart=0x0) returned 0x51 [0115.955] GetFullPathNameW (in: lpFileName="C:\\Windows\\ServiceProfiles\\LocalService\\AppData\\Roaming\\Microsoft\\Windows\\Cookies\\", nBufferLength=0x105, lpBuffer=0x31e0b8, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\ServiceProfiles\\LocalService\\AppData\\Roaming\\Microsoft\\Windows\\Cookies\\", lpFilePart=0x0) returned 0x52 [0115.955] FindFirstFileW (in: lpFileName="C:\\Windows\\ServiceProfiles\\LocalService\\AppData\\Roaming\\Microsoft\\Windows\\Cookies\\*", lpFindFileData=0x31e304 | out: lpFindFileData=0x31e304*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0xf4c06e61, ftCreationTime.dwHighDateTime=0x1ca043d, ftLastAccessTime.dwLowDateTime=0x51785720, ftLastAccessTime.dwHighDateTime=0x1d2fafe, ftLastWriteTime.dwLowDateTime=0x51785720, ftLastWriteTime.dwHighDateTime=0x1d2fafe, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x381dc0 [0115.955] FindClose (in: hFindFile=0x381dc0 | out: hFindFile=0x381dc0) returned 1 [0115.955] GetFullPathNameW (in: lpFileName="C:\\Windows\\ServiceProfiles\\LocalService\\AppData\\Roaming\\Microsoft\\Windows\\Network Shortcuts", nBufferLength=0x105, lpBuffer=0x31e0e4, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\ServiceProfiles\\LocalService\\AppData\\Roaming\\Microsoft\\Windows\\Network Shortcuts", lpFilePart=0x0) returned 0x5b [0115.955] GetFullPathNameW (in: lpFileName="C:\\Windows\\ServiceProfiles\\LocalService\\AppData\\Roaming\\Microsoft\\Windows\\Network Shortcuts\\", nBufferLength=0x105, lpBuffer=0x31e0b8, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\ServiceProfiles\\LocalService\\AppData\\Roaming\\Microsoft\\Windows\\Network Shortcuts\\", lpFilePart=0x0) returned 0x5c [0115.955] FindFirstFileW (in: lpFileName="C:\\Windows\\ServiceProfiles\\LocalService\\AppData\\Roaming\\Microsoft\\Windows\\Network Shortcuts\\*", lpFindFileData=0x31e304 | out: lpFindFileData=0x31e304*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xf4c06e61, ftCreationTime.dwHighDateTime=0x1ca043d, ftLastAccessTime.dwLowDateTime=0xf4c06e61, ftLastAccessTime.dwHighDateTime=0x1ca043d, ftLastWriteTime.dwLowDateTime=0xf4c06e61, ftLastWriteTime.dwHighDateTime=0x1ca043d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x381dc0 [0115.956] FindClose (in: hFindFile=0x381dc0 | out: hFindFile=0x381dc0) returned 1 [0115.956] GetFullPathNameW (in: lpFileName="C:\\Windows\\ServiceProfiles\\LocalService\\AppData\\Roaming\\Microsoft\\Windows\\Network Shortcuts", nBufferLength=0x105, lpBuffer=0x31e0e4, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\ServiceProfiles\\LocalService\\AppData\\Roaming\\Microsoft\\Windows\\Network Shortcuts", lpFilePart=0x0) returned 0x5b [0115.956] GetFullPathNameW (in: lpFileName="C:\\Windows\\ServiceProfiles\\LocalService\\AppData\\Roaming\\Microsoft\\Windows\\Network Shortcuts\\", nBufferLength=0x105, lpBuffer=0x31e0b8, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\ServiceProfiles\\LocalService\\AppData\\Roaming\\Microsoft\\Windows\\Network Shortcuts\\", lpFilePart=0x0) returned 0x5c [0115.956] FindFirstFileW (in: lpFileName="C:\\Windows\\ServiceProfiles\\LocalService\\AppData\\Roaming\\Microsoft\\Windows\\Network Shortcuts\\*", lpFindFileData=0x31e304 | out: lpFindFileData=0x31e304*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xf4c06e61, ftCreationTime.dwHighDateTime=0x1ca043d, ftLastAccessTime.dwLowDateTime=0xf4c06e61, ftLastAccessTime.dwHighDateTime=0x1ca043d, ftLastWriteTime.dwLowDateTime=0xf4c06e61, ftLastWriteTime.dwHighDateTime=0x1ca043d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x381dc0 [0115.956] FindClose (in: hFindFile=0x381dc0 | out: hFindFile=0x381dc0) returned 1 [0115.956] GetFullPathNameW (in: lpFileName="C:\\Windows\\ServiceProfiles\\LocalService\\AppData\\Roaming\\Microsoft\\Windows\\Printer Shortcuts", nBufferLength=0x105, lpBuffer=0x31e0e4, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\ServiceProfiles\\LocalService\\AppData\\Roaming\\Microsoft\\Windows\\Printer Shortcuts", lpFilePart=0x0) returned 0x5b [0115.956] GetFullPathNameW (in: lpFileName="C:\\Windows\\ServiceProfiles\\LocalService\\AppData\\Roaming\\Microsoft\\Windows\\Printer Shortcuts\\", nBufferLength=0x105, lpBuffer=0x31e0b8, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\ServiceProfiles\\LocalService\\AppData\\Roaming\\Microsoft\\Windows\\Printer Shortcuts\\", lpFilePart=0x0) returned 0x5c [0115.956] FindFirstFileW (in: lpFileName="C:\\Windows\\ServiceProfiles\\LocalService\\AppData\\Roaming\\Microsoft\\Windows\\Printer Shortcuts\\*", lpFindFileData=0x31e304 | out: lpFindFileData=0x31e304*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xf4c06e61, ftCreationTime.dwHighDateTime=0x1ca043d, ftLastAccessTime.dwLowDateTime=0xf4c06e61, ftLastAccessTime.dwHighDateTime=0x1ca043d, ftLastWriteTime.dwLowDateTime=0xf4c06e61, ftLastWriteTime.dwHighDateTime=0x1ca043d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x381dc0 [0115.956] FindClose (in: hFindFile=0x381dc0 | out: hFindFile=0x381dc0) returned 1 [0115.956] GetFullPathNameW (in: lpFileName="C:\\Windows\\ServiceProfiles\\LocalService\\AppData\\Roaming\\Microsoft\\Windows\\Printer Shortcuts", nBufferLength=0x105, lpBuffer=0x31e0e4, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\ServiceProfiles\\LocalService\\AppData\\Roaming\\Microsoft\\Windows\\Printer Shortcuts", lpFilePart=0x0) returned 0x5b [0115.957] GetFullPathNameW (in: lpFileName="C:\\Windows\\ServiceProfiles\\LocalService\\AppData\\Roaming\\Microsoft\\Windows\\Printer Shortcuts\\", nBufferLength=0x105, lpBuffer=0x31e0b8, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\ServiceProfiles\\LocalService\\AppData\\Roaming\\Microsoft\\Windows\\Printer Shortcuts\\", lpFilePart=0x0) returned 0x5c [0115.957] FindFirstFileW (in: lpFileName="C:\\Windows\\ServiceProfiles\\LocalService\\AppData\\Roaming\\Microsoft\\Windows\\Printer Shortcuts\\*", lpFindFileData=0x31e304 | out: lpFindFileData=0x31e304*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xf4c06e61, ftCreationTime.dwHighDateTime=0x1ca043d, ftLastAccessTime.dwLowDateTime=0xf4c06e61, ftLastAccessTime.dwHighDateTime=0x1ca043d, ftLastWriteTime.dwLowDateTime=0xf4c06e61, ftLastWriteTime.dwHighDateTime=0x1ca043d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x381dc0 [0115.957] FindClose (in: hFindFile=0x381dc0 | out: hFindFile=0x381dc0) returned 1 [0115.957] GetFullPathNameW (in: lpFileName="C:\\Windows\\ServiceProfiles\\LocalService\\AppData\\Roaming\\Microsoft\\Windows\\Recent", nBufferLength=0x105, lpBuffer=0x31e0e4, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\ServiceProfiles\\LocalService\\AppData\\Roaming\\Microsoft\\Windows\\Recent", lpFilePart=0x0) returned 0x50 [0115.957] GetFullPathNameW (in: lpFileName="C:\\Windows\\ServiceProfiles\\LocalService\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\", nBufferLength=0x105, lpBuffer=0x31e0b8, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\ServiceProfiles\\LocalService\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\", lpFilePart=0x0) returned 0x51 [0115.957] FindFirstFileW (in: lpFileName="C:\\Windows\\ServiceProfiles\\LocalService\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\*", lpFindFileData=0x31e304 | out: lpFindFileData=0x31e304*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0xf4c06e61, ftCreationTime.dwHighDateTime=0x1ca043d, ftLastAccessTime.dwLowDateTime=0xf4c06e61, ftLastAccessTime.dwHighDateTime=0x1ca043d, ftLastWriteTime.dwLowDateTime=0xf4c06e61, ftLastWriteTime.dwHighDateTime=0x1ca043d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x381dc0 [0115.957] FindClose (in: hFindFile=0x381dc0 | out: hFindFile=0x381dc0) returned 1 [0116.037] CreateFileW (lpFileName="C:\\Windows\\servicing\\Editions\\EditionMatrix.xml" (normalized: "c:\\windows\\servicing\\editions\\editionmatrix.xml"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x178 [0116.038] GetFileType (hFile=0x178) returned 0x1 [0116.038] GetFileType (hFile=0x178) returned 0x1 [0116.038] GetFileSize (in: hFile=0x178, lpFileSizeHigh=0x31e808 | out: lpFileSizeHigh=0x31e808*=0x0) returned 0x13b5 [0116.038] ReadFile (in: hFile=0x178, lpBuffer=0x26a6afc, nNumberOfBytesToRead=0x13b5, lpNumberOfBytesRead=0x31e7b4, lpOverlapped=0x0 | out: lpBuffer=0x26a6afc*, lpNumberOfBytesRead=0x31e7b4*=0x13b5, lpOverlapped=0x0) returned 1 [0116.098] CreateFileW (lpFileName="C:\\Windows\\servicing\\Editions\\EditionMatrix.xml" (normalized: "c:\\windows\\servicing\\editions\\editionmatrix.xml"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0xffffffff [0116.432] CreateFileW (lpFileName="C:\\Windows\\servicing\\Sessions\\1556_2012250.back.xml" (normalized: "c:\\windows\\servicing\\sessions\\1556_2012250.back.xml"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x178 [0116.433] GetFileType (hFile=0x178) returned 0x1 [0116.433] GetFileType (hFile=0x178) returned 0x1 [0116.433] GetFileSize (in: hFile=0x178, lpFileSizeHigh=0x31e808 | out: lpFileSizeHigh=0x31e808*=0x0) returned 0x3ba [0116.433] ReadFile (in: hFile=0x178, lpBuffer=0x27c99b8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x31e7b4, lpOverlapped=0x0 | out: lpBuffer=0x27c99b8*, lpNumberOfBytesRead=0x31e7b4*=0x3ba, lpOverlapped=0x0) returned 1 [0116.460] CreateFileW (lpFileName="C:\\Windows\\servicing\\Sessions\\1556_2012250.back.xml" (normalized: "c:\\windows\\servicing\\sessions\\1556_2012250.back.xml"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0xffffffff [0116.623] CreateFileW (lpFileName="C:\\Windows\\System32\\license.rtf" (normalized: "c:\\windows\\system32\\license.rtf"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x178 [0116.633] GetFileType (hFile=0x178) returned 0x1 [0116.633] GetFileType (hFile=0x178) returned 0x1 [0116.633] GetFileSize (in: hFile=0x178, lpFileSizeHigh=0x31e880 | out: lpFileSizeHigh=0x31e880*=0x0) returned 0x1dced [0116.633] ReadFile (in: hFile=0x178, lpBuffer=0x4204f68, nNumberOfBytesToRead=0x1dced, lpNumberOfBytesRead=0x31e82c, lpOverlapped=0x0 | out: lpBuffer=0x4204f68*, lpNumberOfBytesRead=0x31e82c*=0x1dced, lpOverlapped=0x0) returned 1 [0116.685] CreateFileW (lpFileName="C:\\Windows\\System32\\license.rtf" (normalized: "c:\\windows\\system32\\license.rtf"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x178 [0116.686] GetFileType (hFile=0x178) returned 0x1 [0116.686] GetFileType (hFile=0x178) returned 0x1 [0116.686] WriteFile (in: hFile=0x178, lpBuffer=0x429a058*, nNumberOfBytesToWrite=0x1dcf0, lpNumberOfBytesWritten=0x31e820, lpOverlapped=0x0 | out: lpBuffer=0x429a058*, lpNumberOfBytesWritten=0x31e820*=0x1dcf0, lpOverlapped=0x0) returned 1 [0116.689] MoveFileW (lpExistingFileName="C:\\Windows\\System32\\license.rtf" (normalized: "c:\\windows\\system32\\license.rtf"), lpNewFileName="C:\\Windows\\System32\\license.rtf" (normalized: "c:\\windows\\system32\\license.rtf")) returned 1 [0116.689] CreateFileW (lpFileName="C:\\Windows\\System32\\locationnotificationsview.xml" (normalized: "c:\\windows\\system32\\locationnotificationsview.xml"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x178 [0116.690] GetFileType (hFile=0x178) returned 0x1 [0116.690] GetFileType (hFile=0x178) returned 0x1 [0116.690] GetFileSize (in: hFile=0x178, lpFileSizeHigh=0x31e880 | out: lpFileSizeHigh=0x31e880*=0x0) returned 0xaa7 [0116.690] ReadFile (in: hFile=0x178, lpBuffer=0x27bb7dc, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x31e82c, lpOverlapped=0x0 | out: lpBuffer=0x27bb7dc*, lpNumberOfBytesRead=0x31e82c*=0xaa7, lpOverlapped=0x0) returned 1 [0116.714] CreateFileW (lpFileName="C:\\Windows\\System32\\locationnotificationsview.xml" (normalized: "c:\\windows\\system32\\locationnotificationsview.xml"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0xffffffff [0116.715] FindNextFileW (in: hFindFile=0x381b80, lpFindFileData=0x31e5e4 | out: lpFindFileData=0x31e5e4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xe13712, ftCreationTime.dwHighDateTime=0x1ca0432, ftLastAccessTime.dwLowDateTime=0xc893570, ftLastAccessTime.dwHighDateTime=0x1d35d06, ftLastWriteTime.dwLowDateTime=0xc893570, ftLastWriteTime.dwHighDateTime=0x1d35d06, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0116.715] FindNextFileW (in: hFindFile=0x381b80, lpFindFileData=0x31e5e4 | out: lpFindFileData=0x31e5e4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1e9f4a12, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x229791ec, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x1e9f4a12, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="0409", cAlternateFileName="")) returned 1 [0116.716] FindNextFileW (in: hFindFile=0x381b80, lpFindFileData=0x31e5e4 | out: lpFindFileData=0x31e5e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc8cc6e3c, ftCreationTime.dwHighDateTime=0x1c9ea10, ftLastAccessTime.dwLowDateTime=0xc8cc6e3c, ftLastAccessTime.dwHighDateTime=0x1c9ea10, ftLastWriteTime.dwLowDateTime=0xc8cecf9c, ftLastWriteTime.dwHighDateTime=0x1c9ea10, nFileSizeHigh=0x0, nFileSizeLow=0x867, dwReserved0=0x0, dwReserved1=0x0, cFileName="12520437.cpx", cAlternateFileName="")) returned 1 [0116.716] FindNextFileW (in: hFindFile=0x381b80, lpFindFileData=0x31e5e4 | out: lpFindFileData=0x31e5e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4c98834, ftCreationTime.dwHighDateTime=0x1ca040b, ftLastAccessTime.dwLowDateTime=0x4c98834, ftLastAccessTime.dwHighDateTime=0x1ca040b, ftLastWriteTime.dwLowDateTime=0xc8d130fc, ftLastWriteTime.dwHighDateTime=0x1c9ea10, nFileSizeHigh=0x0, nFileSizeLow=0x8b9, dwReserved0=0x0, dwReserved1=0x0, cFileName="12520850.cpx", cAlternateFileName="")) returned 1 [0116.716] FindNextFileW (in: hFindFile=0x381b80, lpFindFileData=0x31e5e4 | out: lpFindFileData=0x31e5e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8699fd85, ftCreationTime.dwHighDateTime=0x1cb892b, ftLastAccessTime.dwLowDateTime=0x8699fd85, ftLastAccessTime.dwHighDateTime=0x1cb892b, ftLastWriteTime.dwLowDateTime=0x869c5ee6, ftLastWriteTime.dwHighDateTime=0x1cb892b, nFileSizeHigh=0x0, nFileSizeLow=0x20200, dwReserved0=0x0, dwReserved1=0x0, cFileName="aaclient.dll", cAlternateFileName="")) returned 1 [0116.716] FindNextFileW (in: hFindFile=0x381b80, lpFindFileData=0x31e5e4 | out: lpFindFileData=0x31e5e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x93cbbe2a, ftCreationTime.dwHighDateTime=0x1cb892b, ftLastAccessTime.dwLowDateTime=0x93cbbe2a, ftLastAccessTime.dwHighDateTime=0x1cb892b, ftLastWriteTime.dwLowDateTime=0x93d080eb, ftLastWriteTime.dwHighDateTime=0x1cb892b, nFileSizeHigh=0x0, nFileSizeLow=0x38e200, dwReserved0=0x0, dwReserved1=0x0, cFileName="accessibilitycpl.dll", cAlternateFileName="")) returned 1 [0116.716] FindNextFileW (in: hFindFile=0x381b80, lpFindFileData=0x31e5e4 | out: lpFindFileData=0x31e5e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x89c04678, ftCreationTime.dwHighDateTime=0x1ca0413, ftLastAccessTime.dwLowDateTime=0x89c04678, ftLastAccessTime.dwHighDateTime=0x1ca0413, ftLastWriteTime.dwLowDateTime=0xf0e28ef0, ftLastWriteTime.dwHighDateTime=0x1ca041e, nFileSizeHigh=0x0, nFileSizeLow=0x9a00, dwReserved0=0x0, dwReserved1=0x0, cFileName="ACCTRES.dll", cAlternateFileName="")) returned 1 [0116.716] FindNextFileW (in: hFindFile=0x381b80, lpFindFileData=0x31e5e4 | out: lpFindFileData=0x31e5e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x10f51da3, ftCreationTime.dwHighDateTime=0x1ca0412, ftLastAccessTime.dwLowDateTime=0x10f51da3, ftLastAccessTime.dwHighDateTime=0x1ca0412, ftLastWriteTime.dwLowDateTime=0x7d217650, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x1e00, dwReserved0=0x0, dwReserved1=0x0, cFileName="acledit.dll", cAlternateFileName="")) returned 1 [0116.716] FindNextFileW (in: hFindFile=0x381b80, lpFindFileData=0x31e5e4 | out: lpFindFileData=0x31e5e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7d698b07, ftCreationTime.dwHighDateTime=0x1ca0413, ftLastAccessTime.dwLowDateTime=0x7d698b07, ftLastAccessTime.dwHighDateTime=0x1ca0413, ftLastWriteTime.dwLowDateTime=0x7d217650, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x1ea00, dwReserved0=0x0, dwReserved1=0x0, cFileName="aclui.dll", cAlternateFileName="")) returned 1 [0116.716] FindNextFileW (in: hFindFile=0x381b80, lpFindFileData=0x31e5e4 | out: lpFindFileData=0x31e5e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9d3bd2e0, ftCreationTime.dwHighDateTime=0x1cb892b, ftLastAccessTime.dwLowDateTime=0x9d3bd2e0, ftLastAccessTime.dwHighDateTime=0x1cb892b, ftLastWriteTime.dwLowDateTime=0x9d3bd2e0, ftLastWriteTime.dwHighDateTime=0x1cb892b, nFileSizeHigh=0x0, nFileSizeLow=0xb200, dwReserved0=0x0, dwReserved1=0x0, cFileName="acppage.dll", cAlternateFileName="")) returned 1 [0116.716] FindNextFileW (in: hFindFile=0x381b80, lpFindFileData=0x31e5e4 | out: lpFindFileData=0x31e5e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb3c37918, ftCreationTime.dwHighDateTime=0x1cb892b, ftLastAccessTime.dwLowDateTime=0xb3c37918, ftLastAccessTime.dwHighDateTime=0x1cb892b, ftLastWriteTime.dwLowDateTime=0xb3c5da79, ftLastWriteTime.dwHighDateTime=0x1cb892b, nFileSizeHigh=0x0, nFileSizeLow=0xb5c00, dwReserved0=0x0, dwReserved1=0x0, cFileName="ActionCenter.dll", cAlternateFileName="")) returned 1 [0116.717] FindNextFileW (in: hFindFile=0x381b80, lpFindFileData=0x31e5e4 | out: lpFindFileData=0x31e5e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb3c5da79, ftCreationTime.dwHighDateTime=0x1cb892b, ftLastAccessTime.dwLowDateTime=0xb3c5da79, ftLastAccessTime.dwHighDateTime=0x1cb892b, ftLastWriteTime.dwLowDateTime=0xb3c5da79, ftLastWriteTime.dwHighDateTime=0x1cb892b, nFileSizeHigh=0x0, nFileSizeLow=0x83400, dwReserved0=0x0, dwReserved1=0x0, cFileName="ActionCenterCPL.dll", cAlternateFileName="")) returned 1 [0116.717] FindNextFileW (in: hFindFile=0x381b80, lpFindFileData=0x31e5e4 | out: lpFindFileData=0x31e5e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9adf355b, ftCreationTime.dwHighDateTime=0x1cb892b, ftLastAccessTime.dwLowDateTime=0x9adf355b, ftLastAccessTime.dwHighDateTime=0x1cb892b, ftLastWriteTime.dwLowDateTime=0x9ae196bb, ftLastWriteTime.dwHighDateTime=0x1cb892b, nFileSizeHigh=0x0, nFileSizeLow=0x31800, dwReserved0=0x0, dwReserved1=0x0, cFileName="activeds.dll", cAlternateFileName="")) returned 1 [0116.717] FindNextFileW (in: hFindFile=0x381b80, lpFindFileData=0x31e5e4 | out: lpFindFileData=0x31e5e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xedc36d00, ftCreationTime.dwHighDateTime=0x1ca0412, ftLastAccessTime.dwLowDateTime=0xedc36d00, ftLastAccessTime.dwHighDateTime=0x1ca0412, ftLastWriteTime.dwLowDateTime=0xedb524c6, ftLastWriteTime.dwHighDateTime=0x1ca0412, nFileSizeHigh=0x0, nFileSizeLow=0x1b400, dwReserved0=0x0, dwReserved1=0x0, cFileName="activeds.tlb", cAlternateFileName="")) returned 1 [0116.717] FindNextFileW (in: hFindFile=0x381b80, lpFindFileData=0x31e5e4 | out: lpFindFileData=0x31e5e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8a81bf79, ftCreationTime.dwHighDateTime=0x1cb892b, ftLastAccessTime.dwLowDateTime=0x8a81bf79, ftLastAccessTime.dwHighDateTime=0x1cb892b, ftLastWriteTime.dwLowDateTime=0x8a8420d9, ftLastWriteTime.dwHighDateTime=0x1cb892b, nFileSizeHigh=0x0, nFileSizeLow=0x4ba00, dwReserved0=0x0, dwReserved1=0x0, cFileName="actxprxy.dll", cAlternateFileName="")) returned 1 [0116.717] FindNextFileW (in: hFindFile=0x381b80, lpFindFileData=0x31e5e4 | out: lpFindFileData=0x31e5e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x554a4ec2, ftCreationTime.dwHighDateTime=0x1ca0413, ftLastAccessTime.dwLowDateTime=0x554a4ec2, ftLastAccessTime.dwHighDateTime=0x1ca0413, ftLastWriteTime.dwLowDateTime=0x65268bd0, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x9800, dwReserved0=0x0, dwReserved1=0x0, cFileName="AdapterTroubleshooter.exe", cAlternateFileName="")) returned 1 [0116.717] FindNextFileW (in: hFindFile=0x381b80, lpFindFileData=0x31e5e4 | out: lpFindFileData=0x31e5e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa343f8c0, ftCreationTime.dwHighDateTime=0x1ca0413, ftLastAccessTime.dwLowDateTime=0xa343f8c0, ftLastAccessTime.dwHighDateTime=0x1ca0413, ftLastWriteTime.dwLowDateTime=0x7d856840, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x11e00, dwReserved0=0x0, dwReserved1=0x0, cFileName="admparse.dll", cAlternateFileName="")) returned 1 [0116.717] FindNextFileW (in: hFindFile=0x381b80, lpFindFileData=0x31e5e4 | out: lpFindFileData=0x31e5e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb1c6129e, ftCreationTime.dwHighDateTime=0x1cb892b, ftLastAccessTime.dwLowDateTime=0xb1c6129e, ftLastAccessTime.dwHighDateTime=0x1cb892b, ftLastWriteTime.dwLowDateTime=0xb1c873fe, ftLastWriteTime.dwHighDateTime=0x1cb892b, nFileSizeHigh=0x0, nFileSizeLow=0x6b000, dwReserved0=0x0, dwReserved1=0x0, cFileName="AdmTmpl.dll", cAlternateFileName="")) returned 1 [0116.717] FindNextFileW (in: hFindFile=0x381b80, lpFindFileData=0x31e5e4 | out: lpFindFileData=0x31e5e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe2f573ca, ftCreationTime.dwHighDateTime=0x1ca0412, ftLastAccessTime.dwLowDateTime=0xe2f573ca, ftLastAccessTime.dwHighDateTime=0x1ca0412, ftLastWriteTime.dwLowDateTime=0x7dbea0b0, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0xc200, dwReserved0=0x0, dwReserved1=0x0, cFileName="adprovider.dll", cAlternateFileName="")) returned 1 [0116.717] FindNextFileW (in: hFindFile=0x381b80, lpFindFileData=0x31e5e4 | out: lpFindFileData=0x31e5e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8b68a4f3, ftCreationTime.dwHighDateTime=0x1cb892b, ftLastAccessTime.dwLowDateTime=0x8b68a4f3, ftLastAccessTime.dwHighDateTime=0x1cb892b, ftLastWriteTime.dwLowDateTime=0x8b68a4f3, ftLastWriteTime.dwHighDateTime=0x1cb892b, nFileSizeHigh=0x0, nFileSizeLow=0x2da00, dwReserved0=0x0, dwReserved1=0x0, cFileName="adsldp.dll", cAlternateFileName="")) returned 1 [0116.718] FindNextFileW (in: hFindFile=0x381b80, lpFindFileData=0x31e5e4 | out: lpFindFileData=0x31e5e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf9f1b122, ftCreationTime.dwHighDateTime=0x1ca0412, ftLastAccessTime.dwLowDateTime=0xf9f1b122, ftLastAccessTime.dwHighDateTime=0x1ca0412, ftLastWriteTime.dwLowDateTime=0x7dccd180, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x31800, dwReserved0=0x0, dwReserved1=0x0, cFileName="adsldpc.dll", cAlternateFileName="")) returned 1 [0116.718] FindNextFileW (in: hFindFile=0x381b80, lpFindFileData=0x31e5e4 | out: lpFindFileData=0x31e5e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf66b897d, ftCreationTime.dwHighDateTime=0x1ca0412, ftLastAccessTime.dwLowDateTime=0xf66b897d, ftLastAccessTime.dwHighDateTime=0x1ca0412, ftLastWriteTime.dwLowDateTime=0x7dccd180, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x12e00, dwReserved0=0x0, dwReserved1=0x0, cFileName="adsmsext.dll", cAlternateFileName="")) returned 1 [0116.718] FindNextFileW (in: hFindFile=0x381b80, lpFindFileData=0x31e5e4 | out: lpFindFileData=0x31e5e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xfad634c2, ftCreationTime.dwHighDateTime=0x1ca0412, ftLastAccessTime.dwLowDateTime=0xfad634c2, ftLastAccessTime.dwHighDateTime=0x1ca0412, ftLastWriteTime.dwLowDateTime=0x7dcf4280, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x3fa00, dwReserved0=0x0, dwReserved1=0x0, cFileName="adsnt.dll", cAlternateFileName="")) returned 1 [0116.718] FindNextFileW (in: hFindFile=0x381b80, lpFindFileData=0x31e5e4 | out: lpFindFileData=0x31e5e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2fc81ff4, ftCreationTime.dwHighDateTime=0x1ca040f, ftLastAccessTime.dwLowDateTime=0x2fc81ff4, ftLastAccessTime.dwHighDateTime=0x1ca040f, ftLastWriteTime.dwLowDateTime=0xf1def050, ftLastWriteTime.dwHighDateTime=0x1ca041e, nFileSizeHigh=0x0, nFileSizeLow=0xa6200, dwReserved0=0x0, dwReserved1=0x0, cFileName="adtschema.dll", cAlternateFileName="")) returned 1 [0116.718] FindNextFileW (in: hFindFile=0x381b80, lpFindFileData=0x31e5e4 | out: lpFindFileData=0x31e5e4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xe13712, ftCreationTime.dwHighDateTime=0x1ca0432, ftLastAccessTime.dwLowDateTime=0x8cdedaf6, ftLastAccessTime.dwHighDateTime=0x1cb892c, ftLastWriteTime.dwLowDateTime=0x8cdedaf6, ftLastWriteTime.dwHighDateTime=0x1cb892c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="AdvancedInstallers", cAlternateFileName="ADVANC~1")) returned 1 [0116.718] FindNextFileW (in: hFindFile=0x381b80, lpFindFileData=0x31e5e4 | out: lpFindFileData=0x31e5e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9b0c6f80, ftCreationTime.dwHighDateTime=0x1cb892b, ftLastAccessTime.dwLowDateTime=0x9b0c6f80, ftLastAccessTime.dwHighDateTime=0x1cb892b, ftLastWriteTime.dwLowDateTime=0x9b0ed0e0, ftLastWriteTime.dwHighDateTime=0x1cb892b, nFileSizeHigh=0x0, nFileSizeLow=0x9c600, dwReserved0=0x0, dwReserved1=0x0, cFileName="advapi32.dll", cAlternateFileName="")) returned 1 [0116.718] FindNextFileW (in: hFindFile=0x381b80, lpFindFileData=0x31e5e4 | out: lpFindFileData=0x31e5e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa0777c0d, ftCreationTime.dwHighDateTime=0x1ca0413, ftLastAccessTime.dwLowDateTime=0xa0777c0d, ftLastAccessTime.dwHighDateTime=0x1ca0413, ftLastWriteTime.dwLowDateTime=0x7de49f40, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x1ee00, dwReserved0=0x0, dwReserved1=0x0, cFileName="advpack.dll", cAlternateFileName="")) returned 1 [0116.718] FindNextFileW (in: hFindFile=0x381b80, lpFindFileData=0x31e5e4 | out: lpFindFileData=0x31e5e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5e862c71, ftCreationTime.dwHighDateTime=0x1ca040f, ftLastAccessTime.dwLowDateTime=0x5e862c71, ftLastAccessTime.dwHighDateTime=0x1ca040f, ftLastWriteTime.dwLowDateTime=0x7de71040, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x1a00, dwReserved0=0x0, dwReserved1=0x0, cFileName="aecache.dll", cAlternateFileName="")) returned 1 [0116.718] FindNextFileW (in: hFindFile=0x381b80, lpFindFileData=0x31e5e4 | out: lpFindFileData=0x31e5e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x79c6f412, ftCreationTime.dwHighDateTime=0x1ca0410, ftLastAccessTime.dwLowDateTime=0x79c6f412, ftLastAccessTime.dwHighDateTime=0x1ca0410, ftLastWriteTime.dwLowDateTime=0xf1f20320, ftLastWriteTime.dwHighDateTime=0x1ca041e, nFileSizeHigh=0x0, nFileSizeLow=0x5a00, dwReserved0=0x0, dwReserved1=0x0, cFileName="aeevts.dll", cAlternateFileName="")) returned 1 [0116.719] FindNextFileW (in: hFindFile=0x381b80, lpFindFileData=0x31e5e4 | out: lpFindFileData=0x31e5e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2994413f, ftCreationTime.dwHighDateTime=0x1ca0413, ftLastAccessTime.dwLowDateTime=0x2994413f, ftLastAccessTime.dwHighDateTime=0x1ca0413, ftLastWriteTime.dwLowDateTime=0x7e0609f0, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0xb600, dwReserved0=0x0, dwReserved1=0x0, cFileName="AltTab.dll", cAlternateFileName="")) returned 1 [0116.719] FindNextFileW (in: hFindFile=0x381b80, lpFindFileData=0x31e5e4 | out: lpFindFileData=0x31e5e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x74a8a79f, ftCreationTime.dwHighDateTime=0x1ca03fd, ftLastAccessTime.dwLowDateTime=0x74a8a79f, ftLastAccessTime.dwHighDateTime=0x1ca03fd, ftLastWriteTime.dwLowDateTime=0x74803050, ftLastWriteTime.dwHighDateTime=0x1ca03fd, nFileSizeHigh=0x0, nFileSizeLow=0x4800, dwReserved0=0x0, dwReserved1=0x0, cFileName="amcompat.tlb", cAlternateFileName="")) returned 1 [0116.719] FindNextFileW (in: hFindFile=0x381b80, lpFindFileData=0x31e5e4 | out: lpFindFileData=0x31e5e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8a29ac8e, ftCreationTime.dwHighDateTime=0x1cb892b, ftLastAccessTime.dwLowDateTime=0x8a29ac8e, ftLastAccessTime.dwHighDateTime=0x1cb892b, ftLastWriteTime.dwLowDateTime=0x8a29ac8e, ftLastWriteTime.dwHighDateTime=0x1cb892b, nFileSizeHigh=0x0, nFileSizeLow=0x11400, dwReserved0=0x0, dwReserved1=0x0, cFileName="amstream.dll", cAlternateFileName="")) returned 1 [0116.719] FindNextFileW (in: hFindFile=0x381b80, lpFindFileData=0x31e5e4 | out: lpFindFileData=0x31e5e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x76fcd8be, ftCreationTime.dwHighDateTime=0x1ca0410, ftLastAccessTime.dwLowDateTime=0x76fcd8be, ftLastAccessTime.dwHighDateTime=0x1ca0410, ftLastWriteTime.dwLowDateTime=0x7e0853e0, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x5e00, dwReserved0=0x0, dwReserved1=0x0, cFileName="amxread.dll", cAlternateFileName="")) returned 1 [0116.719] FindNextFileW (in: hFindFile=0x381b80, lpFindFileData=0x31e5e4 | out: lpFindFileData=0x31e5e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd41bceeb, ftCreationTime.dwHighDateTime=0x1ca0417, ftLastAccessTime.dwLowDateTime=0xd41bceeb, ftLastAccessTime.dwHighDateTime=0x1ca0417, ftLastWriteTime.dwLowDateTime=0x7e4d7330, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x1a8c00, dwReserved0=0x0, dwReserved1=0x0, cFileName="apds.dll", cAlternateFileName="")) returned 1 [0116.719] FindNextFileW (in: hFindFile=0x381b80, lpFindFileData=0x31e5e4 | out: lpFindFileData=0x31e5e4*(dwFileAttributes=0x22, ftCreationTime.dwLowDateTime=0x2cf21dc5, ftCreationTime.dwHighDateTime=0x1ca040f, ftLastAccessTime.dwLowDateTime=0x2cf21dc5, ftLastAccessTime.dwHighDateTime=0x1ca040f, ftLastWriteTime.dwLowDateTime=0xf25ab000, ftLastWriteTime.dwHighDateTime=0x1ca041e, nFileSizeHigh=0x0, nFileSizeLow=0xc00, dwReserved0=0x0, dwReserved1=0x0, cFileName="api-ms-win-core-console-l1-1-0.dll", cAlternateFileName="")) returned 1 [0116.719] FindNextFileW (in: hFindFile=0x381b80, lpFindFileData=0x31e5e4 | out: lpFindFileData=0x31e5e4*(dwFileAttributes=0x22, ftCreationTime.dwLowDateTime=0x2cefbc66, ftCreationTime.dwHighDateTime=0x1ca040f, ftLastAccessTime.dwLowDateTime=0x2cefbc66, ftLastAccessTime.dwHighDateTime=0x1ca040f, ftLastWriteTime.dwLowDateTime=0xf25ab000, ftLastWriteTime.dwHighDateTime=0x1ca041e, nFileSizeHigh=0x0, nFileSizeLow=0xc00, dwReserved0=0x0, dwReserved1=0x0, cFileName="api-ms-win-core-datetime-l1-1-0.dll", cAlternateFileName="")) returned 1 [0116.719] FindNextFileW (in: hFindFile=0x381b80, lpFindFileData=0x31e5e4 | out: lpFindFileData=0x31e5e4*(dwFileAttributes=0x22, ftCreationTime.dwLowDateTime=0x2cd32bf2, ftCreationTime.dwHighDateTime=0x1ca040f, ftLastAccessTime.dwLowDateTime=0x2cd32bf2, ftLastAccessTime.dwHighDateTime=0x1ca040f, ftLastWriteTime.dwLowDateTime=0xf25ab000, ftLastWriteTime.dwHighDateTime=0x1ca041e, nFileSizeHigh=0x0, nFileSizeLow=0xc00, dwReserved0=0x0, dwReserved1=0x0, cFileName="api-ms-win-core-debug-l1-1-0.dll", cAlternateFileName="")) returned 1 [0116.720] FindNextFileW (in: hFindFile=0x381b80, lpFindFileData=0x31e5e4 | out: lpFindFileData=0x31e5e4*(dwFileAttributes=0x22, ftCreationTime.dwLowDateTime=0x2cf941e2, ftCreationTime.dwHighDateTime=0x1ca040f, ftLastAccessTime.dwLowDateTime=0x2cf941e2, ftLastAccessTime.dwHighDateTime=0x1ca040f, ftLastWriteTime.dwLowDateTime=0xf25ab000, ftLastWriteTime.dwHighDateTime=0x1ca041e, nFileSizeHigh=0x0, nFileSizeLow=0xc00, dwReserved0=0x0, dwReserved1=0x0, cFileName="api-ms-win-core-delayload-l1-1-0.dll", cAlternateFileName="")) returned 1 [0116.720] FindNextFileW (in: hFindFile=0x381b80, lpFindFileData=0x31e5e4 | out: lpFindFileData=0x31e5e4*(dwFileAttributes=0x22, ftCreationTime.dwLowDateTime=0x2ccc07d5, ftCreationTime.dwHighDateTime=0x1ca040f, ftLastAccessTime.dwLowDateTime=0x2ccc07d5, ftLastAccessTime.dwHighDateTime=0x1ca040f, ftLastWriteTime.dwLowDateTime=0xf25ab000, ftLastWriteTime.dwHighDateTime=0x1ca041e, nFileSizeHigh=0x0, nFileSizeLow=0xc00, dwReserved0=0x0, dwReserved1=0x0, cFileName="api-ms-win-core-errorhandling-l1-1-0.dll", cAlternateFileName="")) returned 1 [0116.720] FindNextFileW (in: hFindFile=0x381b80, lpFindFileData=0x31e5e4 | out: lpFindFileData=0x31e5e4*(dwFileAttributes=0x22, ftCreationTime.dwLowDateTime=0x2cd7eeb0, ftCreationTime.dwHighDateTime=0x1ca040f, ftLastAccessTime.dwLowDateTime=0x2cd7eeb0, ftLastAccessTime.dwHighDateTime=0x1ca040f, ftLastWriteTime.dwLowDateTime=0xf25ab000, ftLastWriteTime.dwHighDateTime=0x1ca041e, nFileSizeHigh=0x0, nFileSizeLow=0xc00, dwReserved0=0x0, dwReserved1=0x0, cFileName="api-ms-win-core-fibers-l1-1-0.dll", cAlternateFileName="")) returned 1 [0116.720] FindNextFileW (in: hFindFile=0x381b80, lpFindFileData=0x31e5e4 | out: lpFindFileData=0x31e5e4*(dwFileAttributes=0x22, ftCreationTime.dwLowDateTime=0x2d1f57d2, ftCreationTime.dwHighDateTime=0x1ca040f, ftLastAccessTime.dwLowDateTime=0x2d1f57d2, ftLastAccessTime.dwHighDateTime=0x1ca040f, ftLastWriteTime.dwLowDateTime=0xf25ab000, ftLastWriteTime.dwHighDateTime=0x1ca041e, nFileSizeHigh=0x0, nFileSizeLow=0x1400, dwReserved0=0x0, dwReserved1=0x0, cFileName="api-ms-win-core-file-l1-1-0.dll", cAlternateFileName="")) returned 1 [0116.720] FindNextFileW (in: hFindFile=0x381b80, lpFindFileData=0x31e5e4 | out: lpFindFileData=0x31e5e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb8491bf0, ftCreationTime.dwHighDateTime=0x1d2fab4, ftLastAccessTime.dwLowDateTime=0xb8491bf0, ftLastAccessTime.dwHighDateTime=0x1d2fab4, ftLastWriteTime.dwLowDateTime=0xd8c9b158, ftLastWriteTime.dwHighDateTime=0x1d0c15a, nFileSizeHigh=0x0, nFileSizeLow=0x2d60, dwReserved0=0x0, dwReserved1=0x0, cFileName="api-ms-win-core-file-l1-2-0.dll", cAlternateFileName="")) returned 1 [0116.720] FindNextFileW (in: hFindFile=0x381b80, lpFindFileData=0x31e5e4 | out: lpFindFileData=0x31e5e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb859c590, ftCreationTime.dwHighDateTime=0x1d2fab4, ftLastAccessTime.dwLowDateTime=0xb859c590, ftLastAccessTime.dwHighDateTime=0x1d2fab4, ftLastWriteTime.dwLowDateTime=0xd8c9b158, ftLastWriteTime.dwHighDateTime=0x1d0c15a, nFileSizeHigh=0x0, nFileSizeLow=0x2d60, dwReserved0=0x0, dwReserved1=0x0, cFileName="api-ms-win-core-file-l2-1-0.dll", cAlternateFileName="")) returned 1 [0116.720] FindNextFileW (in: hFindFile=0x381b80, lpFindFileData=0x31e5e4 | out: lpFindFileData=0x31e5e4*(dwFileAttributes=0x22, ftCreationTime.dwLowDateTime=0x2cfe04a0, ftCreationTime.dwHighDateTime=0x1ca040f, ftLastAccessTime.dwLowDateTime=0x2cfe04a0, ftLastAccessTime.dwHighDateTime=0x1ca040f, ftLastWriteTime.dwLowDateTime=0xf25ab000, ftLastWriteTime.dwHighDateTime=0x1ca041e, nFileSizeHigh=0x0, nFileSizeLow=0xc00, dwReserved0=0x0, dwReserved1=0x0, cFileName="api-ms-win-core-handle-l1-1-0.dll", cAlternateFileName="")) returned 1 [0116.720] FindNextFileW (in: hFindFile=0x381b80, lpFindFileData=0x31e5e4 | out: lpFindFileData=0x31e5e4*(dwFileAttributes=0x22, ftCreationTime.dwLowDateTime=0x2d0c4cda, ftCreationTime.dwHighDateTime=0x1ca040f, ftLastAccessTime.dwLowDateTime=0x2d0c4cda, ftLastAccessTime.dwHighDateTime=0x1ca040f, ftLastWriteTime.dwLowDateTime=0xf25ab000, ftLastWriteTime.dwHighDateTime=0x1ca041e, nFileSizeHigh=0x0, nFileSizeLow=0xe00, dwReserved0=0x0, dwReserved1=0x0, cFileName="api-ms-win-core-heap-l1-1-0.dll", cAlternateFileName="")) returned 1 [0116.720] FindNextFileW (in: hFindFile=0x381b80, lpFindFileData=0x31e5e4 | out: lpFindFileData=0x31e5e4*(dwFileAttributes=0x22, ftCreationTime.dwLowDateTime=0x2d078a1c, ftCreationTime.dwHighDateTime=0x1ca040f, ftLastAccessTime.dwLowDateTime=0x2d078a1c, ftLastAccessTime.dwHighDateTime=0x1ca040f, ftLastWriteTime.dwLowDateTime=0xf25ab000, ftLastWriteTime.dwHighDateTime=0x1ca041e, nFileSizeHigh=0x0, nFileSizeLow=0xe00, dwReserved0=0x0, dwReserved1=0x0, cFileName="api-ms-win-core-interlocked-l1-1-0.dll", cAlternateFileName="")) returned 1 [0116.721] FindNextFileW (in: hFindFile=0x381b80, lpFindFileData=0x31e5e4 | out: lpFindFileData=0x31e5e4*(dwFileAttributes=0x22, ftCreationTime.dwLowDateTime=0x2cce6934, ftCreationTime.dwHighDateTime=0x1ca040f, ftLastAccessTime.dwLowDateTime=0x2cce6934, ftLastAccessTime.dwHighDateTime=0x1ca040f, ftLastWriteTime.dwLowDateTime=0xf25ab000, ftLastWriteTime.dwHighDateTime=0x1ca041e, nFileSizeHigh=0x0, nFileSizeLow=0xc00, dwReserved0=0x0, dwReserved1=0x0, cFileName="api-ms-win-core-io-l1-1-0.dll", cAlternateFileName="")) returned 1 [0116.721] FindNextFileW (in: hFindFile=0x381b80, lpFindFileData=0x31e5e4 | out: lpFindFileData=0x31e5e4*(dwFileAttributes=0x22, ftCreationTime.dwLowDateTime=0x2cf941e2, ftCreationTime.dwHighDateTime=0x1ca040f, ftLastAccessTime.dwLowDateTime=0x2cf941e2, ftLastAccessTime.dwHighDateTime=0x1ca040f, ftLastWriteTime.dwLowDateTime=0xf25ab000, ftLastWriteTime.dwHighDateTime=0x1ca041e, nFileSizeHigh=0x0, nFileSizeLow=0xe00, dwReserved0=0x0, dwReserved1=0x0, cFileName="api-ms-win-core-libraryloader-l1-1-0.dll", cAlternateFileName="")) returned 1 [0116.721] FindNextFileW (in: hFindFile=0x381b80, lpFindFileData=0x31e5e4 | out: lpFindFileData=0x31e5e4*(dwFileAttributes=0x22, ftCreationTime.dwLowDateTime=0x2cce6934, ftCreationTime.dwHighDateTime=0x1ca040f, ftLastAccessTime.dwLowDateTime=0x2cce6934, ftLastAccessTime.dwHighDateTime=0x1ca040f, ftLastWriteTime.dwLowDateTime=0xf25ab000, ftLastWriteTime.dwHighDateTime=0x1ca041e, nFileSizeHigh=0x0, nFileSizeLow=0x1000, dwReserved0=0x0, dwReserved1=0x0, cFileName="api-ms-win-core-localization-l1-1-0.dll", cAlternateFileName="")) returned 1 [0116.721] FindNextFileW (in: hFindFile=0x381b80, lpFindFileData=0x31e5e4 | out: lpFindFileData=0x31e5e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb85502d0, ftCreationTime.dwHighDateTime=0x1d2fab4, ftLastAccessTime.dwLowDateTime=0xb85502d0, ftLastAccessTime.dwHighDateTime=0x1d2fab4, ftLastWriteTime.dwLowDateTime=0xd8cc12b9, ftLastWriteTime.dwHighDateTime=0x1d0c15a, nFileSizeHigh=0x0, nFileSizeLow=0x3760, dwReserved0=0x0, dwReserved1=0x0, cFileName="api-ms-win-core-localization-l1-2-0.dll", cAlternateFileName="")) returned 1 [0116.721] FindNextFileW (in: hFindFile=0x381b80, lpFindFileData=0x31e5e4 | out: lpFindFileData=0x31e5e4*(dwFileAttributes=0x22, ftCreationTime.dwLowDateTime=0x2cf941e2, ftCreationTime.dwHighDateTime=0x1ca040f, ftLastAccessTime.dwLowDateTime=0x2cf941e2, ftLastAccessTime.dwHighDateTime=0x1ca040f, ftLastWriteTime.dwLowDateTime=0xf25ab000, ftLastWriteTime.dwHighDateTime=0x1ca041e, nFileSizeHigh=0x0, nFileSizeLow=0x1000, dwReserved0=0x0, dwReserved1=0x0, cFileName="api-ms-win-core-localregistry-l1-1-0.dll", cAlternateFileName="")) returned 1 [0116.721] FindNextFileW (in: hFindFile=0x381b80, lpFindFileData=0x31e5e4 | out: lpFindFileData=0x31e5e4*(dwFileAttributes=0x22, ftCreationTime.dwLowDateTime=0x2d0eae39, ftCreationTime.dwHighDateTime=0x1ca040f, ftLastAccessTime.dwLowDateTime=0x2d0eae39, ftLastAccessTime.dwHighDateTime=0x1ca040f, ftLastWriteTime.dwLowDateTime=0xf25ab000, ftLastWriteTime.dwHighDateTime=0x1ca041e, nFileSizeHigh=0x0, nFileSizeLow=0xe00, dwReserved0=0x0, dwReserved1=0x0, cFileName="api-ms-win-core-memory-l1-1-0.dll", cAlternateFileName="")) returned 1 [0116.721] FindNextFileW (in: hFindFile=0x381b80, lpFindFileData=0x31e5e4 | out: lpFindFileData=0x31e5e4*(dwFileAttributes=0x22, ftCreationTime.dwLowDateTime=0x2d1833b5, ftCreationTime.dwHighDateTime=0x1ca040f, ftLastAccessTime.dwLowDateTime=0x2d1833b5, ftLastAccessTime.dwHighDateTime=0x1ca040f, ftLastWriteTime.dwLowDateTime=0xf25ab000, ftLastWriteTime.dwHighDateTime=0x1ca041e, nFileSizeHigh=0x0, nFileSizeLow=0x1000, dwReserved0=0x0, dwReserved1=0x0, cFileName="api-ms-win-core-misc-l1-1-0.dll", cAlternateFileName="")) returned 1 [0116.721] FindNextFileW (in: hFindFile=0x381b80, lpFindFileData=0x31e5e4 | out: lpFindFileData=0x31e5e4*(dwFileAttributes=0x22, ftCreationTime.dwLowDateTime=0x2d15d256, ftCreationTime.dwHighDateTime=0x1ca040f, ftLastAccessTime.dwLowDateTime=0x2d15d256, ftLastAccessTime.dwHighDateTime=0x1ca040f, ftLastWriteTime.dwLowDateTime=0xf25d2100, ftLastWriteTime.dwHighDateTime=0x1ca041e, nFileSizeHigh=0x0, nFileSizeLow=0xe00, dwReserved0=0x0, dwReserved1=0x0, cFileName="api-ms-win-core-namedpipe-l1-1-0.dll", cAlternateFileName="")) returned 1 [0116.721] FindNextFileW (in: hFindFile=0x381b80, lpFindFileData=0x31e5e4 | out: lpFindFileData=0x31e5e4*(dwFileAttributes=0x22, ftCreationTime.dwLowDateTime=0x2d1f57d2, ftCreationTime.dwHighDateTime=0x1ca040f, ftLastAccessTime.dwLowDateTime=0x2d1f57d2, ftLastAccessTime.dwHighDateTime=0x1ca040f, ftLastWriteTime.dwLowDateTime=0xf25d2100, ftLastWriteTime.dwHighDateTime=0x1ca041e, nFileSizeHigh=0x0, nFileSizeLow=0xe00, dwReserved0=0x0, dwReserved1=0x0, cFileName="api-ms-win-core-processenvironment-l1-1-0.dll", cAlternateFileName="")) returned 1 [0116.721] FindNextFileW (in: hFindFile=0x381b80, lpFindFileData=0x31e5e4 | out: lpFindFileData=0x31e5e4*(dwFileAttributes=0x22, ftCreationTime.dwLowDateTime=0x2d15d256, ftCreationTime.dwHighDateTime=0x1ca040f, ftLastAccessTime.dwLowDateTime=0x2d15d256, ftLastAccessTime.dwHighDateTime=0x1ca040f, ftLastWriteTime.dwLowDateTime=0xf25d2100, ftLastWriteTime.dwHighDateTime=0x1ca041e, nFileSizeHigh=0x0, nFileSizeLow=0x1200, dwReserved0=0x0, dwReserved1=0x0, cFileName="api-ms-win-core-processthreads-l1-1-0.dll", cAlternateFileName="")) returned 1 [0116.722] FindNextFileW (in: hFindFile=0x381b80, lpFindFileData=0x31e5e4 | out: lpFindFileData=0x31e5e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb8491bf0, ftCreationTime.dwHighDateTime=0x1d2fab4, ftLastAccessTime.dwLowDateTime=0xb8491bf0, ftLastAccessTime.dwHighDateTime=0x1d2fab4, ftLastWriteTime.dwLowDateTime=0xd8cc12b9, ftLastWriteTime.dwHighDateTime=0x1d0c15a, nFileSizeHigh=0x0, nFileSizeLow=0x2f60, dwReserved0=0x0, dwReserved1=0x0, cFileName="api-ms-win-core-processthreads-l1-1-1.dll", cAlternateFileName="")) returned 1 [0116.722] FindNextFileW (in: hFindFile=0x381b80, lpFindFileData=0x31e5e4 | out: lpFindFileData=0x31e5e4*(dwFileAttributes=0x22, ftCreationTime.dwLowDateTime=0x2d1370f7, ftCreationTime.dwHighDateTime=0x1ca040f, ftLastAccessTime.dwLowDateTime=0x2d1370f7, ftLastAccessTime.dwHighDateTime=0x1ca040f, ftLastWriteTime.dwLowDateTime=0xf25d2100, ftLastWriteTime.dwHighDateTime=0x1ca041e, nFileSizeHigh=0x0, nFileSizeLow=0xc00, dwReserved0=0x0, dwReserved1=0x0, cFileName="api-ms-win-core-profile-l1-1-0.dll", cAlternateFileName="")) returned 1 [0116.722] FindNextFileW (in: hFindFile=0x381b80, lpFindFileData=0x31e5e4 | out: lpFindFileData=0x31e5e4*(dwFileAttributes=0x22, ftCreationTime.dwLowDateTime=0x2d0c4cda, ftCreationTime.dwHighDateTime=0x1ca040f, ftLastAccessTime.dwLowDateTime=0x2d0c4cda, ftLastAccessTime.dwHighDateTime=0x1ca040f, ftLastWriteTime.dwLowDateTime=0xf25d2100, ftLastWriteTime.dwHighDateTime=0x1ca041e, nFileSizeHigh=0x0, nFileSizeLow=0xc00, dwReserved0=0x0, dwReserved1=0x0, cFileName="api-ms-win-core-rtlsupport-l1-1-0.dll", cAlternateFileName="")) returned 1 [0116.722] FindNextFileW (in: hFindFile=0x381b80, lpFindFileData=0x31e5e4 | out: lpFindFileData=0x31e5e4*(dwFileAttributes=0x22, ftCreationTime.dwLowDateTime=0x2d1cf673, ftCreationTime.dwHighDateTime=0x1ca040f, ftLastAccessTime.dwLowDateTime=0x2d1cf673, ftLastAccessTime.dwHighDateTime=0x1ca040f, ftLastWriteTime.dwLowDateTime=0xf25d2100, ftLastWriteTime.dwHighDateTime=0x1ca041e, nFileSizeHigh=0x0, nFileSizeLow=0xc00, dwReserved0=0x0, dwReserved1=0x0, cFileName="api-ms-win-core-string-l1-1-0.dll", cAlternateFileName="")) returned 1 [0116.722] FindNextFileW (in: hFindFile=0x381b80, lpFindFileData=0x31e5e4 | out: lpFindFileData=0x31e5e4*(dwFileAttributes=0x22, ftCreationTime.dwLowDateTime=0x2d241a90, ftCreationTime.dwHighDateTime=0x1ca040f, ftLastAccessTime.dwLowDateTime=0x2d241a90, ftLastAccessTime.dwHighDateTime=0x1ca040f, ftLastWriteTime.dwLowDateTime=0xf25d2100, ftLastWriteTime.dwHighDateTime=0x1ca041e, nFileSizeHigh=0x0, nFileSizeLow=0x1000, dwReserved0=0x0, dwReserved1=0x0, cFileName="api-ms-win-core-synch-l1-1-0.dll", cAlternateFileName="")) returned 1 [0116.722] FindNextFileW (in: hFindFile=0x381b80, lpFindFileData=0x31e5e4 | out: lpFindFileData=0x31e5e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb8576430, ftCreationTime.dwHighDateTime=0x1d2fab4, ftLastAccessTime.dwLowDateTime=0xb8576430, ftLastAccessTime.dwHighDateTime=0x1d2fab4, ftLastWriteTime.dwLowDateTime=0xd8cc12b9, ftLastWriteTime.dwHighDateTime=0x1d0c15a, nFileSizeHigh=0x0, nFileSizeLow=0x2f60, dwReserved0=0x0, dwReserved1=0x0, cFileName="api-ms-win-core-synch-l1-2-0.dll", cAlternateFileName="")) returned 1 [0116.722] FindNextFileW (in: hFindFile=0x381b80, lpFindFileData=0x31e5e4 | out: lpFindFileData=0x31e5e4*(dwFileAttributes=0x22, ftCreationTime.dwLowDateTime=0x2d1f57d2, ftCreationTime.dwHighDateTime=0x1ca040f, ftLastAccessTime.dwLowDateTime=0x2d1f57d2, ftLastAccessTime.dwHighDateTime=0x1ca040f, ftLastWriteTime.dwLowDateTime=0xf25d2100, ftLastWriteTime.dwHighDateTime=0x1ca041e, nFileSizeHigh=0x0, nFileSizeLow=0x1000, dwReserved0=0x0, dwReserved1=0x0, cFileName="api-ms-win-core-sysinfo-l1-1-0.dll", cAlternateFileName="")) returned 1 [0116.722] FindNextFileW (in: hFindFile=0x381b80, lpFindFileData=0x31e5e4 | out: lpFindFileData=0x31e5e4*(dwFileAttributes=0x22, ftCreationTime.dwLowDateTime=0x2d267bef, ftCreationTime.dwHighDateTime=0x1ca040f, ftLastAccessTime.dwLowDateTime=0x2d267bef, ftLastAccessTime.dwHighDateTime=0x1ca040f, ftLastWriteTime.dwLowDateTime=0x2d265d70, ftLastWriteTime.dwHighDateTime=0x1ca040f, nFileSizeHigh=0x0, nFileSizeLow=0x1200, dwReserved0=0x0, dwReserved1=0x0, cFileName="api-ms-win-core-threadpool-l1-1-0.dll", cAlternateFileName="")) returned 1 [0116.722] FindNextFileW (in: hFindFile=0x381b80, lpFindFileData=0x31e5e4 | out: lpFindFileData=0x31e5e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb859c590, ftCreationTime.dwHighDateTime=0x1d2fab4, ftLastAccessTime.dwLowDateTime=0xb859c590, ftLastAccessTime.dwHighDateTime=0x1d2fab4, ftLastWriteTime.dwLowDateTime=0xd8cc12b9, ftLastWriteTime.dwHighDateTime=0x1d0c15a, nFileSizeHigh=0x0, nFileSizeLow=0x2d60, dwReserved0=0x0, dwReserved1=0x0, cFileName="api-ms-win-core-timezone-l1-1-0.dll", cAlternateFileName="")) returned 1 [0116.723] FindNextFileW (in: hFindFile=0x381b80, lpFindFileData=0x31e5e4 | out: lpFindFileData=0x31e5e4*(dwFileAttributes=0x22, ftCreationTime.dwLowDateTime=0x2d21b931, ftCreationTime.dwHighDateTime=0x1ca040f, ftLastAccessTime.dwLowDateTime=0x2d21b931, ftLastAccessTime.dwHighDateTime=0x1ca040f, ftLastWriteTime.dwLowDateTime=0x2d21a280, ftLastWriteTime.dwHighDateTime=0x1ca040f, nFileSizeHigh=0x0, nFileSizeLow=0xc00, dwReserved0=0x0, dwReserved1=0x0, cFileName="api-ms-win-core-util-l1-1-0.dll", cAlternateFileName="")) returned 1 [0116.723] FindNextFileW (in: hFindFile=0x381b80, lpFindFileData=0x31e5e4 | out: lpFindFileData=0x31e5e4*(dwFileAttributes=0x22, ftCreationTime.dwLowDateTime=0x2d9fe1dc, ftCreationTime.dwHighDateTime=0x1ca040f, ftLastAccessTime.dwLowDateTime=0x2d9fe1dc, ftLastAccessTime.dwHighDateTime=0x1ca040f, ftLastWriteTime.dwLowDateTime=0x2d9fd330, ftLastWriteTime.dwHighDateTime=0x1ca040f, nFileSizeHigh=0x0, nFileSizeLow=0xe00, dwReserved0=0x0, dwReserved1=0x0, cFileName="api-ms-win-core-xstate-l1-1-0.dll", cAlternateFileName="")) returned 1 [0116.723] FindNextFileW (in: hFindFile=0x381b80, lpFindFileData=0x31e5e4 | out: lpFindFileData=0x31e5e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb84ddeb0, ftCreationTime.dwHighDateTime=0x1d2fab4, ftLastAccessTime.dwLowDateTime=0xb84ddeb0, ftLastAccessTime.dwHighDateTime=0x1d2fab4, ftLastWriteTime.dwLowDateTime=0xd8cc12b9, ftLastWriteTime.dwHighDateTime=0x1d0c15a, nFileSizeHigh=0x0, nFileSizeLow=0x2d60, dwReserved0=0x0, dwReserved1=0x0, cFileName="api-ms-win-core-xstate-l2-1-0.dll", cAlternateFileName="")) returned 1 [0116.723] FindNextFileW (in: hFindFile=0x381b80, lpFindFileData=0x31e5e4 | out: lpFindFileData=0x31e5e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb8576430, ftCreationTime.dwHighDateTime=0x1d2fab4, ftLastAccessTime.dwLowDateTime=0xb8576430, ftLastAccessTime.dwHighDateTime=0x1d2fab4, ftLastWriteTime.dwLowDateTime=0xd8cc12b9, ftLastWriteTime.dwHighDateTime=0x1d0c15a, nFileSizeHigh=0x0, nFileSizeLow=0x3160, dwReserved0=0x0, dwReserved1=0x0, cFileName="api-ms-win-crt-conio-l1-1-0.dll", cAlternateFileName="")) returned 1 [0116.723] FindNextFileW (in: hFindFile=0x381b80, lpFindFileData=0x31e5e4 | out: lpFindFileData=0x31e5e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb852a170, ftCreationTime.dwHighDateTime=0x1d2fab4, ftLastAccessTime.dwLowDateTime=0xb852a170, ftLastAccessTime.dwHighDateTime=0x1d2fab4, ftLastWriteTime.dwLowDateTime=0xd8ce741a, ftLastWriteTime.dwHighDateTime=0x1d0c15a, nFileSizeHigh=0x0, nFileSizeLow=0x3d60, dwReserved0=0x0, dwReserved1=0x0, cFileName="api-ms-win-crt-convert-l1-1-0.dll", cAlternateFileName="")) returned 1 [0116.723] FindNextFileW (in: hFindFile=0x381b80, lpFindFileData=0x31e5e4 | out: lpFindFileData=0x31e5e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb8504010, ftCreationTime.dwHighDateTime=0x1d2fab4, ftLastAccessTime.dwLowDateTime=0xb8504010, ftLastAccessTime.dwHighDateTime=0x1d2fab4, ftLastWriteTime.dwLowDateTime=0xd8ce741a, ftLastWriteTime.dwHighDateTime=0x1d0c15a, nFileSizeHigh=0x0, nFileSizeLow=0x2f60, dwReserved0=0x0, dwReserved1=0x0, cFileName="api-ms-win-crt-environment-l1-1-0.dll", cAlternateFileName="")) returned 1 [0116.723] FindNextFileW (in: hFindFile=0x381b80, lpFindFileData=0x31e5e4 | out: lpFindFileData=0x31e5e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb852a170, ftCreationTime.dwHighDateTime=0x1d2fab4, ftLastAccessTime.dwLowDateTime=0xb852a170, ftLastAccessTime.dwHighDateTime=0x1d2fab4, ftLastWriteTime.dwLowDateTime=0xd8ce741a, ftLastWriteTime.dwHighDateTime=0x1d0c15a, nFileSizeHigh=0x0, nFileSizeLow=0x3560, dwReserved0=0x0, dwReserved1=0x0, cFileName="api-ms-win-crt-filesystem-l1-1-0.dll", cAlternateFileName="")) returned 1 [0116.723] FindNextFileW (in: hFindFile=0x381b80, lpFindFileData=0x31e5e4 | out: lpFindFileData=0x31e5e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb8491bf0, ftCreationTime.dwHighDateTime=0x1d2fab4, ftLastAccessTime.dwLowDateTime=0xb8491bf0, ftLastAccessTime.dwHighDateTime=0x1d2fab4, ftLastWriteTime.dwLowDateTime=0xd8ce741a, ftLastWriteTime.dwHighDateTime=0x1d0c15a, nFileSizeHigh=0x0, nFileSizeLow=0x3160, dwReserved0=0x0, dwReserved1=0x0, cFileName="api-ms-win-crt-heap-l1-1-0.dll", cAlternateFileName="")) returned 1 [0116.723] FindNextFileW (in: hFindFile=0x381b80, lpFindFileData=0x31e5e4 | out: lpFindFileData=0x31e5e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb8491bf0, ftCreationTime.dwHighDateTime=0x1d2fab4, ftLastAccessTime.dwLowDateTime=0xb8491bf0, ftLastAccessTime.dwHighDateTime=0x1d2fab4, ftLastWriteTime.dwLowDateTime=0xd8ce741a, ftLastWriteTime.dwHighDateTime=0x1d0c15a, nFileSizeHigh=0x0, nFileSizeLow=0x2f60, dwReserved0=0x0, dwReserved1=0x0, cFileName="api-ms-win-crt-locale-l1-1-0.dll", cAlternateFileName="")) returned 1 [0116.724] FindNextFileW (in: hFindFile=0x381b80, lpFindFileData=0x31e5e4 | out: lpFindFileData=0x31e5e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb846ba90, ftCreationTime.dwHighDateTime=0x1d2fab4, ftLastAccessTime.dwLowDateTime=0xb846ba90, ftLastAccessTime.dwHighDateTime=0x1d2fab4, ftLastWriteTime.dwLowDateTime=0xd8d0d57b, ftLastWriteTime.dwHighDateTime=0x1d0c15a, nFileSizeHigh=0x0, nFileSizeLow=0x5760, dwReserved0=0x0, dwReserved1=0x0, cFileName="api-ms-win-crt-math-l1-1-0.dll", cAlternateFileName="")) returned 1 [0116.724] FindNextFileW (in: hFindFile=0x381b80, lpFindFileData=0x31e5e4 | out: lpFindFileData=0x31e5e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb8445930, ftCreationTime.dwHighDateTime=0x1d2fab4, ftLastAccessTime.dwLowDateTime=0xb8445930, ftLastAccessTime.dwHighDateTime=0x1d2fab4, ftLastWriteTime.dwLowDateTime=0xd8d0d57b, ftLastWriteTime.dwHighDateTime=0x1d0c15a, nFileSizeHigh=0x0, nFileSizeLow=0x4d60, dwReserved0=0x0, dwReserved1=0x0, cFileName="api-ms-win-crt-multibyte-l1-1-0.dll", cAlternateFileName="")) returned 1 [0116.724] FindNextFileW (in: hFindFile=0x381b80, lpFindFileData=0x31e5e4 | out: lpFindFileData=0x31e5e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb8125c50, ftCreationTime.dwHighDateTime=0x1d2fab4, ftLastAccessTime.dwLowDateTime=0xb8125c50, ftLastAccessTime.dwHighDateTime=0x1d2fab4, ftLastWriteTime.dwLowDateTime=0xd8d0d57b, ftLastWriteTime.dwHighDateTime=0x1d0c15a, nFileSizeHigh=0x0, nFileSizeLow=0x10360, dwReserved0=0x0, dwReserved1=0x0, cFileName="api-ms-win-crt-private-l1-1-0.dll", cAlternateFileName="")) returned 1 [0116.724] FindNextFileW (in: hFindFile=0x381b80, lpFindFileData=0x31e5e4 | out: lpFindFileData=0x31e5e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb84ddeb0, ftCreationTime.dwHighDateTime=0x1d2fab4, ftLastAccessTime.dwLowDateTime=0xb84ddeb0, ftLastAccessTime.dwHighDateTime=0x1d2fab4, ftLastWriteTime.dwLowDateTime=0xd8d336dc, ftLastWriteTime.dwHighDateTime=0x1d0c15a, nFileSizeHigh=0x0, nFileSizeLow=0x3160, dwReserved0=0x0, dwReserved1=0x0, cFileName="api-ms-win-crt-process-l1-1-0.dll", cAlternateFileName="")) returned 1 [0116.724] FindNextFileW (in: hFindFile=0x381b80, lpFindFileData=0x31e5e4 | out: lpFindFileData=0x31e5e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb84b7d50, ftCreationTime.dwHighDateTime=0x1d2fab4, ftLastAccessTime.dwLowDateTime=0xb84b7d50, ftLastAccessTime.dwHighDateTime=0x1d2fab4, ftLastWriteTime.dwLowDateTime=0xd8d336dc, ftLastWriteTime.dwHighDateTime=0x1d0c15a, nFileSizeHigh=0x0, nFileSizeLow=0x3f60, dwReserved0=0x0, dwReserved1=0x0, cFileName="api-ms-win-crt-runtime-l1-1-0.dll", cAlternateFileName="")) returned 1 [0116.724] FindNextFileW (in: hFindFile=0x381b80, lpFindFileData=0x31e5e4 | out: lpFindFileData=0x31e5e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb84ddeb0, ftCreationTime.dwHighDateTime=0x1d2fab4, ftLastAccessTime.dwLowDateTime=0xb84ddeb0, ftLastAccessTime.dwHighDateTime=0x1d2fab4, ftLastWriteTime.dwLowDateTime=0xd8d336dc, ftLastWriteTime.dwHighDateTime=0x1d0c15a, nFileSizeHigh=0x0, nFileSizeLow=0x4560, dwReserved0=0x0, dwReserved1=0x0, cFileName="api-ms-win-crt-stdio-l1-1-0.dll", cAlternateFileName="")) returned 1 [0116.724] FindNextFileW (in: hFindFile=0x381b80, lpFindFileData=0x31e5e4 | out: lpFindFileData=0x31e5e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb85502d0, ftCreationTime.dwHighDateTime=0x1d2fab4, ftLastAccessTime.dwLowDateTime=0xb85502d0, ftLastAccessTime.dwHighDateTime=0x1d2fab4, ftLastWriteTime.dwLowDateTime=0xd8d336dc, ftLastWriteTime.dwHighDateTime=0x1d0c15a, nFileSizeHigh=0x0, nFileSizeLow=0x4560, dwReserved0=0x0, dwReserved1=0x0, cFileName="api-ms-win-crt-string-l1-1-0.dll", cAlternateFileName="")) returned 1 [0116.724] FindNextFileW (in: hFindFile=0x381b80, lpFindFileData=0x31e5e4 | out: lpFindFileData=0x31e5e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb84ddeb0, ftCreationTime.dwHighDateTime=0x1d2fab4, ftLastAccessTime.dwLowDateTime=0xb84ddeb0, ftLastAccessTime.dwHighDateTime=0x1d2fab4, ftLastWriteTime.dwLowDateTime=0xd8d5983d, ftLastWriteTime.dwHighDateTime=0x1d0c15a, nFileSizeHigh=0x0, nFileSizeLow=0x3760, dwReserved0=0x0, dwReserved1=0x0, cFileName="api-ms-win-crt-time-l1-1-0.dll", cAlternateFileName="")) returned 1 [0116.724] FindNextFileW (in: hFindFile=0x381b80, lpFindFileData=0x31e5e4 | out: lpFindFileData=0x31e5e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb8576430, ftCreationTime.dwHighDateTime=0x1d2fab4, ftLastAccessTime.dwLowDateTime=0xb8576430, ftLastAccessTime.dwHighDateTime=0x1d2fab4, ftLastWriteTime.dwLowDateTime=0xd8d5983d, ftLastWriteTime.dwHighDateTime=0x1d0c15a, nFileSizeHigh=0x0, nFileSizeLow=0x2f60, dwReserved0=0x0, dwReserved1=0x0, cFileName="api-ms-win-crt-utility-l1-1-0.dll", cAlternateFileName="")) returned 1 [0116.725] FindNextFileW (in: hFindFile=0x381b80, lpFindFileData=0x31e5e4 | out: lpFindFileData=0x31e5e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb8504010, ftCreationTime.dwHighDateTime=0x1d2fab4, ftLastAccessTime.dwLowDateTime=0xb8504010, ftLastAccessTime.dwHighDateTime=0x1d2fab4, ftLastWriteTime.dwLowDateTime=0xd8d5983d, ftLastWriteTime.dwHighDateTime=0x1d0c15a, nFileSizeHigh=0x0, nFileSizeLow=0x2d60, dwReserved0=0x0, dwReserved1=0x0, cFileName="api-ms-win-eventing-provider-l1-1-0.dll", cAlternateFileName="")) returned 1 [0116.725] FindNextFileW (in: hFindFile=0x381b80, lpFindFileData=0x31e5e4 | out: lpFindFileData=0x31e5e4*(dwFileAttributes=0x22, ftCreationTime.dwLowDateTime=0x2d1833b5, ftCreationTime.dwHighDateTime=0x1ca040f, ftLastAccessTime.dwLowDateTime=0x2d1833b5, ftLastAccessTime.dwHighDateTime=0x1ca040f, ftLastWriteTime.dwLowDateTime=0x2d1a7690, ftLastWriteTime.dwHighDateTime=0x1ca040f, nFileSizeHigh=0x0, nFileSizeLow=0x1800, dwReserved0=0x0, dwReserved1=0x0, cFileName="api-ms-win-security-base-l1-1-0.dll", cAlternateFileName="")) returned 1 [0116.725] FindNextFileW (in: hFindFile=0x381b80, lpFindFileData=0x31e5e4 | out: lpFindFileData=0x31e5e4*(dwFileAttributes=0x22, ftCreationTime.dwLowDateTime=0x4f381b9f, ftCreationTime.dwHighDateTime=0x1ca040f, ftLastAccessTime.dwLowDateTime=0x4f381b9f, ftLastAccessTime.dwHighDateTime=0x1ca040f, ftLastWriteTime.dwLowDateTime=0x4f37fbd0, ftLastWriteTime.dwHighDateTime=0x1ca040f, nFileSizeHigh=0x0, nFileSizeLow=0xe00, dwReserved0=0x0, dwReserved1=0x0, cFileName="api-ms-win-security-lsalookup-l1-1-0.dll", cAlternateFileName="")) returned 1 [0116.725] FindNextFileW (in: hFindFile=0x381b80, lpFindFileData=0x31e5e4 | out: lpFindFileData=0x31e5e4*(dwFileAttributes=0x22, ftCreationTime.dwLowDateTime=0x4f3a7cfe, ftCreationTime.dwHighDateTime=0x1ca040f, ftLastAccessTime.dwLowDateTime=0x4f3a7cfe, ftLastAccessTime.dwHighDateTime=0x1ca040f, ftLastWriteTime.dwLowDateTime=0x4f3a6cd0, ftLastWriteTime.dwHighDateTime=0x1ca040f, nFileSizeHigh=0x0, nFileSizeLow=0xc00, dwReserved0=0x0, dwReserved1=0x0, cFileName="api-ms-win-security-sddl-l1-1-0.dll", cAlternateFileName="")) returned 1 [0116.725] FindNextFileW (in: hFindFile=0x381b80, lpFindFileData=0x31e5e4 | out: lpFindFileData=0x31e5e4*(dwFileAttributes=0x22, ftCreationTime.dwLowDateTime=0x2d15d256, ftCreationTime.dwHighDateTime=0x1ca040f, ftLastAccessTime.dwLowDateTime=0x2d15d256, ftLastAccessTime.dwHighDateTime=0x1ca040f, ftLastWriteTime.dwLowDateTime=0xf25d2100, ftLastWriteTime.dwHighDateTime=0x1ca041e, nFileSizeHigh=0x0, nFileSizeLow=0xa00, dwReserved0=0x0, dwReserved1=0x0, cFileName="api-ms-win-service-core-l1-1-0.dll", cAlternateFileName="")) returned 1 [0116.725] FindNextFileW (in: hFindFile=0x381b80, lpFindFileData=0x31e5e4 | out: lpFindFileData=0x31e5e4*(dwFileAttributes=0x22, ftCreationTime.dwLowDateTime=0x2d1370f7, ftCreationTime.dwHighDateTime=0x1ca040f, ftLastAccessTime.dwLowDateTime=0x2d1370f7, ftLastAccessTime.dwHighDateTime=0x1ca040f, ftLastWriteTime.dwLowDateTime=0xf25d2100, ftLastWriteTime.dwHighDateTime=0x1ca041e, nFileSizeHigh=0x0, nFileSizeLow=0xa00, dwReserved0=0x0, dwReserved1=0x0, cFileName="api-ms-win-service-management-l1-1-0.dll", cAlternateFileName="")) returned 1 [0116.725] FindNextFileW (in: hFindFile=0x381b80, lpFindFileData=0x31e5e4 | out: lpFindFileData=0x31e5e4*(dwFileAttributes=0x22, ftCreationTime.dwLowDateTime=0x2d09eb7b, ftCreationTime.dwHighDateTime=0x1ca040f, ftLastAccessTime.dwLowDateTime=0x2d09eb7b, ftLastAccessTime.dwHighDateTime=0x1ca040f, ftLastWriteTime.dwLowDateTime=0xf25d2100, ftLastWriteTime.dwHighDateTime=0x1ca041e, nFileSizeHigh=0x0, nFileSizeLow=0xa00, dwReserved0=0x0, dwReserved1=0x0, cFileName="api-ms-win-service-management-l2-1-0.dll", cAlternateFileName="")) returned 1 [0116.725] FindNextFileW (in: hFindFile=0x381b80, lpFindFileData=0x31e5e4 | out: lpFindFileData=0x31e5e4*(dwFileAttributes=0x22, ftCreationTime.dwLowDateTime=0x2d267bef, ftCreationTime.dwHighDateTime=0x1ca040f, ftLastAccessTime.dwLowDateTime=0x2d267bef, ftLastAccessTime.dwHighDateTime=0x1ca040f, ftLastWriteTime.dwLowDateTime=0xf25d2100, ftLastWriteTime.dwHighDateTime=0x1ca041e, nFileSizeHigh=0x0, nFileSizeLow=0xe00, dwReserved0=0x0, dwReserved1=0x0, cFileName="api-ms-win-service-winsvc-l1-1-0.dll", cAlternateFileName="")) returned 1 [0116.725] FindNextFileW (in: hFindFile=0x381b80, lpFindFileData=0x31e5e4 | out: lpFindFileData=0x31e5e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7821a163, ftCreationTime.dwHighDateTime=0x1ca0410, ftLastAccessTime.dwLowDateTime=0x7821a163, ftLastAccessTime.dwHighDateTime=0x1ca0410, ftLastWriteTime.dwLowDateTime=0x7e595a10, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x3c00, dwReserved0=0x0, dwReserved1=0x0, cFileName="apilogen.dll", cAlternateFileName="")) returned 1 [0116.725] FindNextFileW (in: hFindFile=0x381b80, lpFindFileData=0x31e5e4 | out: lpFindFileData=0x31e5e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc1f2f92c, ftCreationTime.dwHighDateTime=0x1ca0417, ftLastAccessTime.dwLowDateTime=0xc1f2f92c, ftLastAccessTime.dwHighDateTime=0x1ca0417, ftLastWriteTime.dwLowDateTime=0x7e595a10, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x36000, dwReserved0=0x0, dwReserved1=0x0, cFileName="apircl.dll", cAlternateFileName="")) returned 1 [0116.726] FindNextFileW (in: hFindFile=0x381b80, lpFindFileData=0x31e5e4 | out: lpFindFileData=0x31e5e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2de74afe, ftCreationTime.dwHighDateTime=0x1ca040f, ftLastAccessTime.dwLowDateTime=0x2de74afe, ftLastAccessTime.dwHighDateTime=0x1ca040f, ftLastWriteTime.dwLowDateTime=0xf261dbf0, ftLastWriteTime.dwHighDateTime=0x1ca041e, nFileSizeHigh=0x0, nFileSizeLow=0x1a00, dwReserved0=0x0, dwReserved1=0x0, cFileName="apisetschema.dll", cAlternateFileName="")) returned 1 [0116.726] FindNextFileW (in: hFindFile=0x381b80, lpFindFileData=0x31e5e4 | out: lpFindFileData=0x31e5e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x92c3856c, ftCreationTime.dwHighDateTime=0x1cb892b, ftLastAccessTime.dwLowDateTime=0x92c3856c, ftLastAccessTime.dwHighDateTime=0x1cb892b, ftLastWriteTime.dwLowDateTime=0x92c5e6cc, ftLastWriteTime.dwHighDateTime=0x1cb892b, nFileSizeHigh=0x0, nFileSizeLow=0x48400, dwReserved0=0x0, dwReserved1=0x0, cFileName="apphelp.dll", cAlternateFileName="")) returned 1 [0116.726] FindNextFileW (in: hFindFile=0x381b80, lpFindFileData=0x31e5e4 | out: lpFindFileData=0x31e5e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7a4c40da, ftCreationTime.dwHighDateTime=0x1ca0410, ftLastAccessTime.dwLowDateTime=0x7a4c40da, ftLastAccessTime.dwHighDateTime=0x1ca0410, ftLastWriteTime.dwLowDateTime=0x7e595a10, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x7400, dwReserved0=0x0, dwReserved1=0x0, cFileName="Apphlpdm.dll", cAlternateFileName="")) returned 1 [0116.726] FindNextFileW (in: hFindFile=0x381b80, lpFindFileData=0x31e5e4 | out: lpFindFileData=0x31e5e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xcc6b7842, ftCreationTime.dwHighDateTime=0x1ca0412, ftLastAccessTime.dwLowDateTime=0xcc6b7842, ftLastAccessTime.dwHighDateTime=0x1ca0412, ftLastWriteTime.dwLowDateTime=0x7e608600, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0xc600, dwReserved0=0x0, dwReserved1=0x0, cFileName="appidapi.dll", cAlternateFileName="")) returned 1 [0116.726] FindNextFileW (in: hFindFile=0x381b80, lpFindFileData=0x31e5e4 | out: lpFindFileData=0x31e5e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd29cc968, ftCreationTime.dwHighDateTime=0x1ca0412, ftLastAccessTime.dwLowDateTime=0xd29cc968, ftLastAccessTime.dwHighDateTime=0x1ca0412, ftLastWriteTime.dwLowDateTime=0x7e6540f0, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x31a00, dwReserved0=0x0, dwReserved1=0x0, cFileName="AppIdPolicyEngineApi.dll", cAlternateFileName="")) returned 1 [0116.726] FindNextFileW (in: hFindFile=0x381b80, lpFindFileData=0x31e5e4 | out: lpFindFileData=0x31e5e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x98006f9, ftCreationTime.dwHighDateTime=0x1ca0413, ftLastAccessTime.dwLowDateTime=0x98006f9, ftLastAccessTime.dwHighDateTime=0x1ca0413, ftLastWriteTime.dwLowDateTime=0x7e6c6ce0, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x24800, dwReserved0=0x0, dwReserved1=0x0, cFileName="appmgmts.dll", cAlternateFileName="")) returned 1 [0116.726] FindNextFileW (in: hFindFile=0x381b80, lpFindFileData=0x31e5e4 | out: lpFindFileData=0x31e5e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb1c14fdd, ftCreationTime.dwHighDateTime=0x1cb892b, ftLastAccessTime.dwLowDateTime=0xb1c14fdd, ftLastAccessTime.dwHighDateTime=0x1cb892b, ftLastWriteTime.dwLowDateTime=0xb1c6129e, ftLastWriteTime.dwHighDateTime=0x1cb892b, nFileSizeHigh=0x0, nFileSizeLow=0x53000, dwReserved0=0x0, dwReserved1=0x0, cFileName="appmgr.dll", cAlternateFileName="")) returned 1 [0116.727] FindNextFileW (in: hFindFile=0x381b80, lpFindFileData=0x31e5e4 | out: lpFindFileData=0x31e5e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8f6f58ca, ftCreationTime.dwHighDateTime=0x1cb892b, ftLastAccessTime.dwLowDateTime=0x8f6f58ca, ftLastAccessTime.dwHighDateTime=0x1cb892b, ftLastWriteTime.dwLowDateTime=0x8f6f58ca, ftLastWriteTime.dwHighDateTime=0x1cb892b, nFileSizeHigh=0x0, nFileSizeLow=0x9e800, dwReserved0=0x0, dwReserved1=0x0, cFileName="appwiz.cpl", cAlternateFileName="")) returned 1 [0116.727] FindNextFileW (in: hFindFile=0x381b80, lpFindFileData=0x31e5e4 | out: lpFindFileData=0x31e5e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc81f8794, ftCreationTime.dwHighDateTime=0x1ca0417, ftLastAccessTime.dwLowDateTime=0xc81f8794, ftLastAccessTime.dwHighDateTime=0x1ca0417, ftLastWriteTime.dwLowDateTime=0x7e6eb6d0, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x30e00, dwReserved0=0x0, dwReserved1=0x0, cFileName="apss.dll", cAlternateFileName="")) returned 1 [0116.727] FindNextFileW (in: hFindFile=0x381b80, lpFindFileData=0x31e5e4 | out: lpFindFileData=0x31e5e4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xe3986c, ftCreationTime.dwHighDateTime=0x1ca0432, ftLastAccessTime.dwLowDateTime=0x248a328, ftLastAccessTime.dwHighDateTime=0x1ca0432, ftLastWriteTime.dwLowDateTime=0x248a328, ftLastWriteTime.dwHighDateTime=0x1ca0432, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="ar-SA", cAlternateFileName="")) returned 1 [0116.727] FindNextFileW (in: hFindFile=0x381b80, lpFindFileData=0x31e5e4 | out: lpFindFileData=0x31e5e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5bf02cff, ftCreationTime.dwHighDateTime=0x1ca0415, ftLastAccessTime.dwLowDateTime=0x5bf02cff, ftLastAccessTime.dwHighDateTime=0x1ca0415, ftLastWriteTime.dwLowDateTime=0x656df510, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x5200, dwReserved0=0x0, dwReserved1=0x0, cFileName="ARP.EXE", cAlternateFileName="")) returned 1 [0116.727] FindNextFileW (in: hFindFile=0x381b80, lpFindFileData=0x31e5e4 | out: lpFindFileData=0x31e5e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x31c9efbc, ftCreationTime.dwHighDateTime=0x1ca0417, ftLastAccessTime.dwLowDateTime=0x31c9efbc, ftLastAccessTime.dwHighDateTime=0x1ca0417, ftLastWriteTime.dwLowDateTime=0xf2a6d430, ftLastWriteTime.dwHighDateTime=0x1ca041e, nFileSizeHigh=0x0, nFileSizeLow=0x800, dwReserved0=0x0, dwReserved1=0x0, cFileName="asferror.dll", cAlternateFileName="")) returned 1 [0116.727] FindNextFileW (in: hFindFile=0x381b80, lpFindFileData=0x31e5e4 | out: lpFindFileData=0x31e5e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xef914800, ftCreationTime.dwHighDateTime=0x1d0aa91, ftLastAccessTime.dwLowDateTime=0x57090500, ftLastAccessTime.dwHighDateTime=0x1d2e676, ftLastWriteTime.dwLowDateTime=0xef914800, ftLastWriteTime.dwHighDateTime=0x1d0aa91, nFileSizeHigh=0x0, nFileSizeLow=0x6cc0, dwReserved0=0x0, dwReserved1=0x0, cFileName="aspnet_counters.dll", cAlternateFileName="ASPNET~1.DLL")) returned 1 [0116.727] FindNextFileW (in: hFindFile=0x381b80, lpFindFileData=0x31e5e4 | out: lpFindFileData=0x31e5e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x84e661b3, ftCreationTime.dwHighDateTime=0x1cb892b, ftLastAccessTime.dwLowDateTime=0x84e661b3, ftLastAccessTime.dwHighDateTime=0x1cb892b, ftLastWriteTime.dwLowDateTime=0x84e661b3, ftLastWriteTime.dwHighDateTime=0x1cb892b, nFileSizeHigh=0x0, nFileSizeLow=0x10800, dwReserved0=0x0, dwReserved1=0x0, cFileName="asycfilt.dll", cAlternateFileName="")) returned 1 [0116.727] FindNextFileW (in: hFindFile=0x381b80, lpFindFileData=0x31e5e4 | out: lpFindFileData=0x31e5e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe9839a69, ftCreationTime.dwHighDateTime=0x1ca0412, ftLastAccessTime.dwLowDateTime=0xe9839a69, ftLastAccessTime.dwHighDateTime=0x1ca0412, ftLastWriteTime.dwLowDateTime=0x658ceec0, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x5e00, dwReserved0=0x0, dwReserved1=0x0, cFileName="at.exe", cAlternateFileName="")) returned 1 [0116.727] FindNextFileW (in: hFindFile=0x381b80, lpFindFileData=0x31e5e4 | out: lpFindFileData=0x31e5e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xfaedcb3c, ftCreationTime.dwHighDateTime=0x1ca0417, ftLastAccessTime.dwLowDateTime=0xfaedcb3c, ftLastAccessTime.dwHighDateTime=0x1ca0417, ftLastWriteTime.dwLowDateTime=0x658f38b0, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x7200, dwReserved0=0x0, dwReserved1=0x0, cFileName="AtBroker.exe", cAlternateFileName="")) returned 1 [0116.728] FindNextFileW (in: hFindFile=0x381b80, lpFindFileData=0x31e5e4 | out: lpFindFileData=0x31e5e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2d2b74b, ftCreationTime.dwHighDateTime=0x1ca0418, ftLastAccessTime.dwLowDateTime=0x2d2b74b, ftLastAccessTime.dwHighDateTime=0x1ca0418, ftLastWriteTime.dwLowDateTime=0x805466c0, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x11200, dwReserved0=0x0, dwReserved1=0x0, cFileName="atl.dll", cAlternateFileName="")) returned 1 [0116.728] FindNextFileW (in: hFindFile=0x381b80, lpFindFileData=0x31e5e4 | out: lpFindFileData=0x31e5e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4b0b4600, ftCreationTime.dwHighDateTime=0x1cc2787, ftLastAccessTime.dwLowDateTime=0xcc438260, ftLastAccessTime.dwHighDateTime=0x1d2e620, ftLastWriteTime.dwLowDateTime=0x4b0b4600, ftLastWriteTime.dwHighDateTime=0x1cc2787, nFileSizeHigh=0x0, nFileSizeLow=0x21b48, dwReserved0=0x0, dwReserved1=0x0, cFileName="atl100.dll", cAlternateFileName="")) returned 1 [0116.728] FindNextFileW (in: hFindFile=0x381b80, lpFindFileData=0x31e5e4 | out: lpFindFileData=0x31e5e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x29b8ce00, ftCreationTime.dwHighDateTime=0x1ce64f7, ftLastAccessTime.dwLowDateTime=0xef797c80, ftLastAccessTime.dwHighDateTime=0x1d2e620, ftLastWriteTime.dwLowDateTime=0x29b8ce00, ftLastWriteTime.dwHighDateTime=0x1ce64f7, nFileSizeHigh=0x0, nFileSizeLow=0x28248, dwReserved0=0x0, dwReserved1=0x0, cFileName="atl110.dll", cAlternateFileName="")) returned 1 [0116.728] FindNextFileW (in: hFindFile=0x381b80, lpFindFileData=0x31e5e4 | out: lpFindFileData=0x31e5e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9363019e, ftCreationTime.dwHighDateTime=0x1cb892b, ftLastAccessTime.dwLowDateTime=0x9363019e, ftLastAccessTime.dwHighDateTime=0x1cb892b, ftLastWriteTime.dwLowDateTime=0x936562fe, ftLastWriteTime.dwHighDateTime=0x1cb892b, nFileSizeHigh=0x0, nFileSizeLow=0x47e00, dwReserved0=0x0, dwReserved1=0x0, cFileName="atmfd.dll", cAlternateFileName="")) returned 1 [0116.728] FindNextFileW (in: hFindFile=0x381b80, lpFindFileData=0x31e5e4 | out: lpFindFileData=0x31e5e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9360a03e, ftCreationTime.dwHighDateTime=0x1cb892b, ftLastAccessTime.dwLowDateTime=0x9360a03e, ftLastAccessTime.dwHighDateTime=0x1cb892b, ftLastWriteTime.dwLowDateTime=0x9363019e, ftLastWriteTime.dwHighDateTime=0x1cb892b, nFileSizeHigh=0x0, nFileSizeLow=0x8600, dwReserved0=0x0, dwReserved1=0x0, cFileName="atmlib.dll", cAlternateFileName="")) returned 1 [0116.728] FindNextFileW (in: hFindFile=0x381b80, lpFindFileData=0x31e5e4 | out: lpFindFileData=0x31e5e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xbf3c4130, ftCreationTime.dwHighDateTime=0x1ca040f, ftLastAccessTime.dwLowDateTime=0xbf3c4130, ftLastAccessTime.dwHighDateTime=0x1ca040f, ftLastWriteTime.dwLowDateTime=0x658f38b0, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x4000, dwReserved0=0x0, dwReserved1=0x0, cFileName="attrib.exe", cAlternateFileName="")) returned 1 [0116.728] FindNextFileW (in: hFindFile=0x381b80, lpFindFileData=0x31e5e4 | out: lpFindFileData=0x31e5e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb4204ec3, ftCreationTime.dwHighDateTime=0x1cb892b, ftLastAccessTime.dwLowDateTime=0xb4204ec3, ftLastAccessTime.dwHighDateTime=0x1cb892b, ftLastWriteTime.dwLowDateTime=0xb4204ec3, ftLastWriteTime.dwHighDateTime=0x1cb892b, nFileSizeHigh=0x0, nFileSizeLow=0x3b800, dwReserved0=0x0, dwReserved1=0x0, cFileName="audiodev.dll", cAlternateFileName="")) returned 1 [0116.728] FindNextFileW (in: hFindFile=0x381b80, lpFindFileData=0x31e5e4 | out: lpFindFileData=0x31e5e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x78f79a81, ftCreationTime.dwHighDateTime=0x1ca0416, ftLastAccessTime.dwLowDateTime=0x78f79a81, ftLastAccessTime.dwHighDateTime=0x1ca0416, ftLastWriteTime.dwLowDateTime=0x80675280, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x5b800, dwReserved0=0x0, dwReserved1=0x0, cFileName="AudioEng.dll", cAlternateFileName="")) returned 1 [0116.728] FindNextFileW (in: hFindFile=0x381b80, lpFindFileData=0x31e5e4 | out: lpFindFileData=0x31e5e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xce47270e, ftCreationTime.dwHighDateTime=0x1ca041b, ftLastAccessTime.dwLowDateTime=0xce47270e, ftLastAccessTime.dwHighDateTime=0x1ca041b, ftLastWriteTime.dwLowDateTime=0xad59f9a0, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x6c200, dwReserved0=0x0, dwReserved1=0x0, cFileName="AUDIOKSE.dll", cAlternateFileName="")) returned 1 [0116.728] FindNextFileW (in: hFindFile=0x381b80, lpFindFileData=0x31e5e4 | out: lpFindFileData=0x31e5e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x87266eb6, ftCreationTime.dwHighDateTime=0x1cb892b, ftLastAccessTime.dwLowDateTime=0x87266eb6, ftLastAccessTime.dwHighDateTime=0x1cb892b, ftLastWriteTime.dwLowDateTime=0x87266eb6, ftLastWriteTime.dwHighDateTime=0x1cb892b, nFileSizeHigh=0x0, nFileSizeLow=0x2fc00, dwReserved0=0x0, dwReserved1=0x0, cFileName="AudioSes.dll", cAlternateFileName="")) returned 1 [0116.729] FindNextFileW (in: hFindFile=0x381b80, lpFindFileData=0x31e5e4 | out: lpFindFileData=0x31e5e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x68ceb7bb, ftCreationTime.dwHighDateTime=0x1ca0412, ftLastAccessTime.dwLowDateTime=0x68ceb7bb, ftLastAccessTime.dwHighDateTime=0x1ca0412, ftLastWriteTime.dwLowDateTime=0x80733960, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x35000, dwReserved0=0x0, dwReserved1=0x0, cFileName="AuditNativeSnapIn.dll", cAlternateFileName="")) returned 1 [0116.729] FindNextFileW (in: hFindFile=0x381b80, lpFindFileData=0x31e5e4 | out: lpFindFileData=0x31e5e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x735a0a8d, ftCreationTime.dwHighDateTime=0x1ca0412, ftLastAccessTime.dwLowDateTime=0x735a0a8d, ftLastAccessTime.dwHighDateTime=0x1ca0412, ftLastWriteTime.dwLowDateTime=0x65a00190, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0xc400, dwReserved0=0x0, dwReserved1=0x0, cFileName="auditpol.exe", cAlternateFileName="")) returned 1 [0116.729] FindNextFileW (in: hFindFile=0x381b80, lpFindFileData=0x31e5e4 | out: lpFindFileData=0x31e5e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6a1010d4, ftCreationTime.dwHighDateTime=0x1ca0412, ftLastAccessTime.dwLowDateTime=0x6a1010d4, ftLastAccessTime.dwHighDateTime=0x1ca0412, ftLastWriteTime.dwLowDateTime=0x80733960, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0xd800, dwReserved0=0x0, dwReserved1=0x0, cFileName="AuditPolicyGPInterop.dll", cAlternateFileName="")) returned 1 [0116.729] FindNextFileW (in: hFindFile=0x381b80, lpFindFileData=0x31e5e4 | out: lpFindFileData=0x31e5e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6732ea88, ftCreationTime.dwHighDateTime=0x1ca0412, ftLastAccessTime.dwLowDateTime=0x6732ea88, ftLastAccessTime.dwHighDateTime=0x1ca0412, ftLastWriteTime.dwLowDateTime=0xf6ab4570, ftLastWriteTime.dwHighDateTime=0x1ca041e, nFileSizeHigh=0x0, nFileSizeLow=0x17400, dwReserved0=0x0, dwReserved1=0x0, cFileName="auditpolmsg.dll", cAlternateFileName="")) returned 1 [0116.729] FindNextFileW (in: hFindFile=0x381b80, lpFindFileData=0x31e5e4 | out: lpFindFileData=0x31e5e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb08b31c, ftCreationTime.dwHighDateTime=0x1ca0415, ftLastAccessTime.dwLowDateTime=0xb08b31c, ftLastAccessTime.dwHighDateTime=0x1ca0415, ftLastWriteTime.dwLowDateTime=0x808b0720, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x51a00, dwReserved0=0x0, dwReserved1=0x0, cFileName="authfwcfg.dll", cAlternateFileName="")) returned 1 [0116.729] FindNextFileW (in: hFindFile=0x381b80, lpFindFileData=0x31e5e4 | out: lpFindFileData=0x31e5e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9a14413, ftCreationTime.dwHighDateTime=0x1ca0415, ftLastAccessTime.dwLowDateTime=0x9a14413, ftLastAccessTime.dwHighDateTime=0x1ca0415, ftLastWriteTime.dwLowDateTime=0x808fe920, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x48a00, dwReserved0=0x0, dwReserved1=0x0, cFileName="AuthFWGP.dll", cAlternateFileName="")) returned 1 [0116.729] FindNextFileW (in: hFindFile=0x381b80, lpFindFileData=0x31e5e4 | out: lpFindFileData=0x31e5e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9aed7d9c, ftCreationTime.dwHighDateTime=0x1cb892b, ftLastAccessTime.dwLowDateTime=0x9aed7d9c, ftLastAccessTime.dwHighDateTime=0x1cb892b, ftLastWriteTime.dwLowDateTime=0x9af4a1bd, ftLastWriteTime.dwHighDateTime=0x1cb892b, nFileSizeHigh=0x0, nFileSizeLow=0x4d5000, dwReserved0=0x0, dwReserved1=0x0, cFileName="AuthFWSnapin.dll", cAlternateFileName="")) returned 1 [0116.729] FindNextFileW (in: hFindFile=0x381b80, lpFindFileData=0x31e5e4 | out: lpFindFileData=0x31e5e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd0eeeaef, ftCreationTime.dwHighDateTime=0x1ca0406, ftLastAccessTime.dwLowDateTime=0xcd1a5500, ftLastAccessTime.dwHighDateTime=0x1ca0420, ftLastWriteTime.dwLowDateTime=0x3931bcc5, ftLastWriteTime.dwHighDateTime=0x1ca0421, nFileSizeHigh=0x0, nFileSizeLow=0x1f000, dwReserved0=0x0, dwReserved1=0x0, cFileName="AuthFWWizFwk.dll", cAlternateFileName="")) returned 1 [0116.729] FindNextFileW (in: hFindFile=0x381b80, lpFindFileData=0x31e5e4 | out: lpFindFileData=0x31e5e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8acdeb81, ftCreationTime.dwHighDateTime=0x1cb892b, ftLastAccessTime.dwLowDateTime=0x8acdeb81, ftLastAccessTime.dwHighDateTime=0x1cb892b, ftLastWriteTime.dwLowDateTime=0x8ad04ce2, ftLastWriteTime.dwHighDateTime=0x1cb892b, nFileSizeHigh=0x0, nFileSizeLow=0x1b5800, dwReserved0=0x0, dwReserved1=0x0, cFileName="authui.dll", cAlternateFileName="")) returned 1 [0116.729] FindNextFileW (in: hFindFile=0x381b80, lpFindFileData=0x31e5e4 | out: lpFindFileData=0x31e5e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x714738cc, ftCreationTime.dwHighDateTime=0x1ca0412, ftLastAccessTime.dwLowDateTime=0x714738cc, ftLastAccessTime.dwHighDateTime=0x1ca0412, ftLastWriteTime.dwLowDateTime=0x80ac71d0, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x18200, dwReserved0=0x0, dwReserved1=0x0, cFileName="authz.dll", cAlternateFileName="")) returned 1 [0116.729] FindNextFileW (in: hFindFile=0x381b80, lpFindFileData=0x31e5e4 | out: lpFindFileData=0x31e5e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x85d92e0f, ftCreationTime.dwHighDateTime=0x1cb892b, ftLastAccessTime.dwLowDateTime=0x85d92e0f, ftLastAccessTime.dwHighDateTime=0x1cb892b, ftLastWriteTime.dwLowDateTime=0x85f5be93, ftLastWriteTime.dwHighDateTime=0x1cb892b, nFileSizeHigh=0x0, nFileSizeLow=0xa3200, dwReserved0=0x0, dwReserved1=0x0, cFileName="autochk.exe", cAlternateFileName="")) returned 1 [0116.729] FindNextFileW (in: hFindFile=0x381b80, lpFindFileData=0x31e5e4 | out: lpFindFileData=0x31e5e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8332c5e1, ftCreationTime.dwHighDateTime=0x1cb892b, ftLastAccessTime.dwLowDateTime=0x8332c5e1, ftLastAccessTime.dwHighDateTime=0x1cb892b, ftLastWriteTime.dwLowDateTime=0x83352741, ftLastWriteTime.dwHighDateTime=0x1cb892b, nFileSizeHigh=0x0, nFileSizeLow=0xa5e00, dwReserved0=0x0, dwReserved1=0x0, cFileName="autoconv.exe", cAlternateFileName="")) returned 1 [0116.729] FindNextFileW (in: hFindFile=0x381b80, lpFindFileData=0x31e5e4 | out: lpFindFileData=0x31e5e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x85cae5ce, ftCreationTime.dwHighDateTime=0x1cb892b, ftLastAccessTime.dwLowDateTime=0x85cae5ce, ftLastAccessTime.dwHighDateTime=0x1cb892b, ftLastWriteTime.dwLowDateTime=0x85cd472e, ftLastWriteTime.dwHighDateTime=0x1cb892b, nFileSizeHigh=0x0, nFileSizeLow=0xa0e00, dwReserved0=0x0, dwReserved1=0x0, cFileName="autofmt.exe", cAlternateFileName="")) returned 1 [0116.730] FindNextFileW (in: hFindFile=0x381b80, lpFindFileData=0x31e5e4 | out: lpFindFileData=0x31e5e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8a9bee9c, ftCreationTime.dwHighDateTime=0x1cb892b, ftLastAccessTime.dwLowDateTime=0x8a9bee9c, ftLastAccessTime.dwHighDateTime=0x1cb892b, ftLastWriteTime.dwLowDateTime=0x8a9bee9c, ftLastWriteTime.dwHighDateTime=0x1cb892b, nFileSizeHigh=0x0, nFileSizeLow=0x23e00, dwReserved0=0x0, dwReserved1=0x0, cFileName="autoplay.dll", cAlternateFileName="")) returned 1 [0116.730] FindNextFileW (in: hFindFile=0x381b80, lpFindFileData=0x31e5e4 | out: lpFindFileData=0x31e5e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xfdc3f99b, ftCreationTime.dwHighDateTime=0x1ca0413, ftLastAccessTime.dwLowDateTime=0xfdc3f99b, ftLastAccessTime.dwHighDateTime=0x1ca0413, ftLastWriteTime.dwLowDateTime=0x80b12cc0, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x1d400, dwReserved0=0x0, dwReserved1=0x0, cFileName="AuxiliaryDisplayApi.dll", cAlternateFileName="")) returned 1 [0116.730] FindNextFileW (in: hFindFile=0x381b80, lpFindFileData=0x31e5e4 | out: lpFindFileData=0x31e5e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb67a8ae8, ftCreationTime.dwHighDateTime=0x1cb892b, ftLastAccessTime.dwLowDateTime=0xb67a8ae8, ftLastAccessTime.dwHighDateTime=0x1cb892b, ftLastWriteTime.dwLowDateTime=0xb67cec49, ftLastWriteTime.dwHighDateTime=0x1cb892b, nFileSizeHigh=0x0, nFileSizeLow=0xa2800, dwReserved0=0x0, dwReserved1=0x0, cFileName="AuxiliaryDisplayCpl.dll", cAlternateFileName="")) returned 1 [0116.730] FindNextFileW (in: hFindFile=0x381b80, lpFindFileData=0x31e5e4 | out: lpFindFileData=0x31e5e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8898fb50, ftCreationTime.dwHighDateTime=0x1ca0416, ftLastAccessTime.dwLowDateTime=0x8898fb50, ftLastAccessTime.dwHighDateTime=0x1ca0416, ftLastWriteTime.dwLowDateTime=0x80c1ce90, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0xfe00, dwReserved0=0x0, dwReserved1=0x0, cFileName="avicap32.dll", cAlternateFileName="")) returned 1 [0116.730] FindNextFileW (in: hFindFile=0x381b80, lpFindFileData=0x31e5e4 | out: lpFindFileData=0x31e5e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9b15f501, ftCreationTime.dwHighDateTime=0x1cb892b, ftLastAccessTime.dwLowDateTime=0x9b15f501, ftLastAccessTime.dwHighDateTime=0x1cb892b, ftLastWriteTime.dwLowDateTime=0x9b185661, ftLastWriteTime.dwHighDateTime=0x1cb892b, nFileSizeHigh=0x0, nFileSizeLow=0x16600, dwReserved0=0x0, dwReserved1=0x0, cFileName="avifil32.dll", cAlternateFileName="")) returned 1 [0116.730] FindNextFileW (in: hFindFile=0x381b80, lpFindFileData=0x31e5e4 | out: lpFindFileData=0x31e5e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb761c16, ftCreationTime.dwHighDateTime=0x1ca0417, ftLastAccessTime.dwLowDateTime=0xb761c16, ftLastAccessTime.dwHighDateTime=0x1ca0417, ftLastWriteTime.dwLowDateTime=0x80d75260, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x3800, dwReserved0=0x0, dwReserved1=0x0, cFileName="avrt.dll", cAlternateFileName="")) returned 1 [0116.730] FindNextFileW (in: hFindFile=0x381b80, lpFindFileData=0x31e5e4 | out: lpFindFileData=0x31e5e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1533a9b1, ftCreationTime.dwHighDateTime=0x1ca0403, ftLastAccessTime.dwLowDateTime=0x1533a9b1, ftLastAccessTime.dwHighDateTime=0x1ca0403, ftLastWriteTime.dwLowDateTime=0x5df3f69c, ftLastWriteTime.dwHighDateTime=0x1c9ea11, nFileSizeHigh=0x0, nFileSizeLow=0xa273, dwReserved0=0x0, dwReserved1=0x0, cFileName="azman.msc", cAlternateFileName="")) returned 1 [0116.730] FindNextFileW (in: hFindFile=0x381b80, lpFindFileData=0x31e5e4 | out: lpFindFileData=0x31e5e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x849c970b, ftCreationTime.dwHighDateTime=0x1cb892b, ftLastAccessTime.dwLowDateTime=0x849c970b, ftLastAccessTime.dwHighDateTime=0x1cb892b, ftLastWriteTime.dwLowDateTime=0x849ef86b, ftLastWriteTime.dwHighDateTime=0x1cb892b, nFileSizeHigh=0x0, nFileSizeLow=0xba400, dwReserved0=0x0, dwReserved1=0x0, cFileName="azroles.dll", cAlternateFileName="")) returned 1 [0116.730] FindNextFileW (in: hFindFile=0x381b80, lpFindFileData=0x31e5e4 | out: lpFindFileData=0x31e5e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8ba1c5fa, ftCreationTime.dwHighDateTime=0x1cb892b, ftLastAccessTime.dwLowDateTime=0x8ba1c5fa, ftLastAccessTime.dwHighDateTime=0x1cb892b, ftLastWriteTime.dwLowDateTime=0x8ba4275a, ftLastWriteTime.dwHighDateTime=0x1cb892b, nFileSizeHigh=0x0, nFileSizeLow=0x4cc00, dwReserved0=0x0, dwReserved1=0x0, cFileName="azroleui.dll", cAlternateFileName="")) returned 1 [0116.730] FindNextFileW (in: hFindFile=0x381b80, lpFindFileData=0x31e5e4 | out: lpFindFileData=0x31e5e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x849a35ab, ftCreationTime.dwHighDateTime=0x1cb892b, ftLastAccessTime.dwLowDateTime=0x849a35ab, ftLastAccessTime.dwHighDateTime=0x1cb892b, ftLastWriteTime.dwLowDateTime=0x849c970b, ftLastWriteTime.dwHighDateTime=0x1cb892b, nFileSizeHigh=0x0, nFileSizeLow=0x6e00, dwReserved0=0x0, dwReserved1=0x0, cFileName="AzSqlExt.dll", cAlternateFileName="")) returned 1 [0116.730] FindNextFileW (in: hFindFile=0x381b80, lpFindFileData=0x31e5e4 | out: lpFindFileData=0x31e5e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9afe273e, ftCreationTime.dwHighDateTime=0x1cb892b, ftLastAccessTime.dwLowDateTime=0x9afe273e, ftLastAccessTime.dwHighDateTime=0x1cb892b, ftLastWriteTime.dwLowDateTime=0x9afe273e, ftLastWriteTime.dwHighDateTime=0x1cb892b, nFileSizeHigh=0x0, nFileSizeLow=0x23580, dwReserved0=0x0, dwReserved1=0x0, cFileName="basecsp.dll", cAlternateFileName="")) returned 1 [0116.730] FindNextFileW (in: hFindFile=0x381b80, lpFindFileData=0x31e5e4 | out: lpFindFileData=0x31e5e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x86b8ef69, ftCreationTime.dwHighDateTime=0x1cb892b, ftLastAccessTime.dwLowDateTime=0x86b8ef69, ftLastAccessTime.dwHighDateTime=0x1cb892b, ftLastWriteTime.dwLowDateTime=0x86bb50c9, ftLastWriteTime.dwHighDateTime=0x1cb892b, nFileSizeHigh=0x0, nFileSizeLow=0xb4e00, dwReserved0=0x0, dwReserved1=0x0, cFileName="batmeter.dll", cAlternateFileName="")) returned 1 [0116.730] FindNextFileW (in: hFindFile=0x381b80, lpFindFileData=0x31e5e4 | out: lpFindFileData=0x31e5e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x40b43e34, ftCreationTime.dwHighDateTime=0x1ca0412, ftLastAccessTime.dwLowDateTime=0x40b43e34, ftLastAccessTime.dwHighDateTime=0x1ca0412, ftLastWriteTime.dwLowDateTime=0xff749c50, ftLastWriteTime.dwHighDateTime=0x1ca041f, nFileSizeHigh=0x0, nFileSizeLow=0x13c00, dwReserved0=0x0, dwReserved1=0x0, cFileName="bcrypt.dll", cAlternateFileName="")) returned 1 [0116.730] FindNextFileW (in: hFindFile=0x381b80, lpFindFileData=0x31e5e4 | out: lpFindFileData=0x31e5e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x46f17635, ftCreationTime.dwHighDateTime=0x1ca0412, ftLastAccessTime.dwLowDateTime=0x46f17635, ftLastAccessTime.dwHighDateTime=0x1ca0412, ftLastWriteTime.dwLowDateTime=0xea1f1abe, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x3cf50, dwReserved0=0x0, dwReserved1=0x0, cFileName="bcryptprimitives.dll", cAlternateFileName="")) returned 1 [0116.730] FindNextFileW (in: hFindFile=0x381b80, lpFindFileData=0x31e5e4 | out: lpFindFileData=0x31e5e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xfa6d4c3e, ftCreationTime.dwHighDateTime=0x1ca0416, ftLastAccessTime.dwLowDateTime=0xfa6d4c3e, ftLastAccessTime.dwHighDateTime=0x1ca0416, ftLastWriteTime.dwLowDateTime=0x6459c5f0, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x12200, dwReserved0=0x0, dwReserved1=0x0, cFileName="bdaplgin.ax", cAlternateFileName="")) returned 1 [0116.730] FindNextFileW (in: hFindFile=0x381b80, lpFindFileData=0x31e5e4 | out: lpFindFileData=0x31e5e4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xe3986c, ftCreationTime.dwHighDateTime=0x1ca0432, ftLastAccessTime.dwLowDateTime=0x24d65dc, ftLastAccessTime.dwHighDateTime=0x1ca0432, ftLastWriteTime.dwLowDateTime=0x24d65dc, ftLastWriteTime.dwHighDateTime=0x1ca0432, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="bg-BG", cAlternateFileName="")) returned 1 [0116.730] FindNextFileW (in: hFindFile=0x381b80, lpFindFileData=0x31e5e4 | out: lpFindFileData=0x31e5e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x943ab875, ftCreationTime.dwHighDateTime=0x1ca0418, ftLastAccessTime.dwLowDateTime=0x943ab875, ftLastAccessTime.dwHighDateTime=0x1ca0418, ftLastWriteTime.dwLowDateTime=0x81bbbef0, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x8600, dwReserved0=0x0, dwReserved1=0x0, cFileName="bidispl.dll", cAlternateFileName="")) returned 1 [0116.731] FindNextFileW (in: hFindFile=0x381b80, lpFindFileData=0x31e5e4 | out: lpFindFileData=0x31e5e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd6b6860f, ftCreationTime.dwHighDateTime=0x1ca0412, ftLastAccessTime.dwLowDateTime=0xd6b6860f, ftLastAccessTime.dwHighDateTime=0x1ca0412, ftLastWriteTime.dwLowDateTime=0x81ced1c0, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x29e00, dwReserved0=0x0, dwReserved1=0x0, cFileName="BioCredProv.dll", cAlternateFileName="")) returned 1 [0116.731] FindNextFileW (in: hFindFile=0x381b80, lpFindFileData=0x31e5e4 | out: lpFindFileData=0x31e5e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8e5d9a8a, ftCreationTime.dwHighDateTime=0x1cb892b, ftLastAccessTime.dwLowDateTime=0x8e5d9a8a, ftLastAccessTime.dwHighDateTime=0x1cb892b, ftLastWriteTime.dwLowDateTime=0x8e5d9a8a, ftLastWriteTime.dwHighDateTime=0x1cb892b, nFileSizeHigh=0x0, nFileSizeLow=0x2d800, dwReserved0=0x0, dwReserved1=0x0, cFileName="bitsadmin.exe", cAlternateFileName="")) returned 1 [0116.731] FindNextFileW (in: hFindFile=0x381b80, lpFindFileData=0x31e5e4 | out: lpFindFileData=0x31e5e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8a972bdb, ftCreationTime.dwHighDateTime=0x1cb892b, ftLastAccessTime.dwLowDateTime=0x8a972bdb, ftLastAccessTime.dwHighDateTime=0x1cb892b, ftLastWriteTime.dwLowDateTime=0x8a972bdb, ftLastWriteTime.dwHighDateTime=0x1cb892b, nFileSizeHigh=0x0, nFileSizeLow=0x4c00, dwReserved0=0x0, dwReserved1=0x0, cFileName="bitsperf.dll", cAlternateFileName="")) returned 1 [0116.731] FindNextFileW (in: hFindFile=0x381b80, lpFindFileData=0x31e5e4 | out: lpFindFileData=0x31e5e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc757d6b0, ftCreationTime.dwHighDateTime=0x1ca0411, ftLastAccessTime.dwLowDateTime=0xc757d6b0, ftLastAccessTime.dwHighDateTime=0x1ca0411, ftLastWriteTime.dwLowDateTime=0x81d5fdb0, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x2a00, dwReserved0=0x0, dwReserved1=0x0, cFileName="bitsprx2.dll", cAlternateFileName="")) returned 1 [0116.731] FindNextFileW (in: hFindFile=0x381b80, lpFindFileData=0x31e5e4 | out: lpFindFileData=0x31e5e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc74befd5, ftCreationTime.dwHighDateTime=0x1ca0411, ftLastAccessTime.dwLowDateTime=0xc74befd5, ftLastAccessTime.dwHighDateTime=0x1ca0411, ftLastWriteTime.dwLowDateTime=0x81d847a0, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x2800, dwReserved0=0x0, dwReserved1=0x0, cFileName="bitsprx3.dll", cAlternateFileName="")) returned 1 [0116.731] FindNextFileW (in: hFindFile=0x381b80, lpFindFileData=0x31e5e4 | out: lpFindFileData=0x31e5e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc7afe96b, ftCreationTime.dwHighDateTime=0x1ca0411, ftLastAccessTime.dwLowDateTime=0xc7afe96b, ftLastAccessTime.dwHighDateTime=0x1ca0411, ftLastWriteTime.dwLowDateTime=0x81d847a0, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x2400, dwReserved0=0x0, dwReserved1=0x0, cFileName="bitsprx4.dll", cAlternateFileName="")) returned 1 [0116.731] FindNextFileW (in: hFindFile=0x381b80, lpFindFileData=0x31e5e4 | out: lpFindFileData=0x31e5e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc89b9128, ftCreationTime.dwHighDateTime=0x1ca0411, ftLastAccessTime.dwLowDateTime=0xc89b9128, ftLastAccessTime.dwHighDateTime=0x1ca0411, ftLastWriteTime.dwLowDateTime=0x81dab8a0, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x4800, dwReserved0=0x0, dwReserved1=0x0, cFileName="bitsprx5.dll", cAlternateFileName="")) returned 1 [0116.731] FindNextFileW (in: hFindFile=0x381b80, lpFindFileData=0x31e5e4 | out: lpFindFileData=0x31e5e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc91e7c91, ftCreationTime.dwHighDateTime=0x1ca0411, ftLastAccessTime.dwLowDateTime=0xc91e7c91, ftLastAccessTime.dwHighDateTime=0x1ca0411, ftLastWriteTime.dwLowDateTime=0x81dd29a0, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x2800, dwReserved0=0x0, dwReserved1=0x0, cFileName="bitsprx6.dll", cAlternateFileName="")) returned 1 [0116.731] FindNextFileW (in: hFindFile=0x381b80, lpFindFileData=0x31e5e4 | out: lpFindFileData=0x31e5e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb4251183, ftCreationTime.dwHighDateTime=0x1cb892b, ftLastAccessTime.dwLowDateTime=0xb4251183, ftLastAccessTime.dwHighDateTime=0x1cb892b, ftLastWriteTime.dwLowDateTime=0xb4251183, ftLastWriteTime.dwHighDateTime=0x1cb892b, nFileSizeHigh=0x0, nFileSizeLow=0xb5800, dwReserved0=0x0, dwReserved1=0x0, cFileName="blackbox.dll", cAlternateFileName="")) returned 1 [0116.731] FindNextFileW (in: hFindFile=0x381b80, lpFindFileData=0x31e5e4 | out: lpFindFileData=0x31e5e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa522d5bc, ftCreationTime.dwHighDateTime=0x1c9ea14, ftLastAccessTime.dwLowDateTime=0xa522d5bc, ftLastAccessTime.dwHighDateTime=0x1c9ea14, ftLastWriteTime.dwLowDateTime=0xa527987c, ftLastWriteTime.dwHighDateTime=0x1c9ea14, nFileSizeHigh=0x0, nFileSizeLow=0x306000, dwReserved0=0x0, dwReserved1=0x0, cFileName="boot.sdi", cAlternateFileName="")) returned 1 [0116.731] FindNextFileW (in: hFindFile=0x381b80, lpFindFileData=0x31e5e4 | out: lpFindFileData=0x31e5e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x18ce22d7, ftCreationTime.dwHighDateTime=0x1ca0412, ftLastAccessTime.dwLowDateTime=0x18ce22d7, ftLastAccessTime.dwHighDateTime=0x1ca0412, ftLastWriteTime.dwLowDateTime=0x661e0b30, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x13e00, dwReserved0=0x0, dwReserved1=0x0, cFileName="bootcfg.exe", cAlternateFileName="")) returned 1 [0116.731] FindNextFileW (in: hFindFile=0x381b80, lpFindFileData=0x31e5e4 | out: lpFindFileData=0x31e5e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x325b7bbf, ftCreationTime.dwHighDateTime=0x1ca040f, ftLastAccessTime.dwLowDateTime=0x325b7bbf, ftLastAccessTime.dwHighDateTime=0x1ca040f, ftLastWriteTime.dwLowDateTime=0x14b259e0, ftLastWriteTime.dwHighDateTime=0x1ca0422, nFileSizeHigh=0x0, nFileSizeLow=0x5450, dwReserved0=0x0, dwReserved1=0x0, cFileName="BOOTVID.DLL", cAlternateFileName="")) returned 1 [0116.731] FindNextFileW (in: hFindFile=0x381b80, lpFindFileData=0x31e5e4 | out: lpFindFileData=0x31e5e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa480373c, ftCreationTime.dwHighDateTime=0x1c9ea12, ftLastAccessTime.dwLowDateTime=0xa480373c, ftLastAccessTime.dwHighDateTime=0x1c9ea12, ftLastWriteTime.dwLowDateTime=0xa480373c, ftLastWriteTime.dwHighDateTime=0x1c9ea12, nFileSizeHigh=0x0, nFileSizeLow=0x59c8, dwReserved0=0x0, dwReserved1=0x0, cFileName="bopomofo.uce", cAlternateFileName="")) returned 1 [0116.731] FindNextFileW (in: hFindFile=0x381b80, lpFindFileData=0x31e5e4 | out: lpFindFileData=0x31e5e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9d4c7c82, ftCreationTime.dwHighDateTime=0x1cb892b, ftLastAccessTime.dwLowDateTime=0x9d4c7c82, ftLastAccessTime.dwHighDateTime=0x1cb892b, ftLastWriteTime.dwLowDateTime=0x9d4edde3, ftLastWriteTime.dwHighDateTime=0x1cb892b, nFileSizeHigh=0x0, nFileSizeLow=0xa400, dwReserved0=0x0, dwReserved1=0x0, cFileName="browcli.dll", cAlternateFileName="")) returned 1 [0116.731] FindNextFileW (in: hFindFile=0x381b80, lpFindFileData=0x31e5e4 | out: lpFindFileData=0x31e5e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8a679055, ftCreationTime.dwHighDateTime=0x1cb892b, ftLastAccessTime.dwLowDateTime=0x8a679055, ftLastAccessTime.dwHighDateTime=0x1cb892b, ftLastWriteTime.dwLowDateTime=0x8a679055, ftLastWriteTime.dwHighDateTime=0x1cb892b, nFileSizeHigh=0x0, nFileSizeLow=0x2a00, dwReserved0=0x0, dwReserved1=0x0, cFileName="browseui.dll", cAlternateFileName="")) returned 1 [0116.731] FindNextFileW (in: hFindFile=0x381b80, lpFindFileData=0x31e5e4 | out: lpFindFileData=0x31e5e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8455446, ftCreationTime.dwHighDateTime=0x1cb892b, ftLastAccessTime.dwLowDateTime=0xa8455446, ftLastAccessTime.dwHighDateTime=0x1cb892b, ftLastWriteTime.dwLowDateTime=0xa847b5a6, ftLastWriteTime.dwHighDateTime=0x1cb892b, nFileSizeHigh=0x0, nFileSizeLow=0xa9200, dwReserved0=0x0, dwReserved1=0x0, cFileName="bthprops.cpl", cAlternateFileName="")) returned 1 [0116.731] FindNextFileW (in: hFindFile=0x381b80, lpFindFileData=0x31e5e4 | out: lpFindFileData=0x31e5e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd7d8d73d, ftCreationTime.dwHighDateTime=0x1ca0414, ftLastAccessTime.dwLowDateTime=0xd7d8d73d, ftLastAccessTime.dwHighDateTime=0x1ca0414, ftLastWriteTime.dwLowDateTime=0x663849f0, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x8a00, dwReserved0=0x0, dwReserved1=0x0, cFileName="bthudtask.exe", cAlternateFileName="")) returned 1 [0116.731] FindNextFileW (in: hFindFile=0x381b80, lpFindFileData=0x31e5e4 | out: lpFindFileData=0x31e5e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf03c839e, ftCreationTime.dwHighDateTime=0x1ca0414, ftLastAccessTime.dwLowDateTime=0xf03c839e, ftLastAccessTime.dwHighDateTime=0x1ca0414, ftLastWriteTime.dwLowDateTime=0x827c9df0, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x10400, dwReserved0=0x0, dwReserved1=0x0, cFileName="btpanui.dll", cAlternateFileName="")) returned 1 [0116.731] FindNextFileW (in: hFindFile=0x381b80, lpFindFileData=0x31e5e4 | out: lpFindFileData=0x31e5e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb31a7765, ftCreationTime.dwHighDateTime=0x1cb892b, ftLastAccessTime.dwLowDateTime=0xb31a7765, ftLastAccessTime.dwHighDateTime=0x1cb892b, ftLastWriteTime.dwLowDateTime=0xb3265e46, ftLastWriteTime.dwHighDateTime=0x1cb892b, nFileSizeHigh=0x0, nFileSizeLow=0xd6800, dwReserved0=0x0, dwReserved1=0x0, cFileName="Bubbles.scr", cAlternateFileName="")) returned 1 [0116.732] FindNextFileW (in: hFindFile=0x381b80, lpFindFileData=0x31e5e4 | out: lpFindFileData=0x31e5e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8a34e9a7, ftCreationTime.dwHighDateTime=0x1ca0413, ftLastAccessTime.dwLowDateTime=0x8a34e9a7, ftLastAccessTime.dwHighDateTime=0x1ca0413, ftLastWriteTime.dwLowDateTime=0x827c9df0, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0xfa00, dwReserved0=0x0, dwReserved1=0x0, cFileName="BWContextHandler.dll", cAlternateFileName="")) returned 1 [0116.732] FindNextFileW (in: hFindFile=0x381b80, lpFindFileData=0x31e5e4 | out: lpFindFileData=0x31e5e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8731ad6b, ftCreationTime.dwHighDateTime=0x1ca0413, ftLastAccessTime.dwLowDateTime=0x8731ad6b, ftLastAccessTime.dwHighDateTime=0x1ca0413, ftLastWriteTime.dwLowDateTime=0x827ee7e0, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x2a00, dwReserved0=0x0, dwReserved1=0x0, cFileName="BWUnpairElevated.dll", cAlternateFileName="")) returned 1 [0116.732] FindNextFileW (in: hFindFile=0x381b80, lpFindFileData=0x31e5e4 | out: lpFindFileData=0x31e5e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8a2e6f4f, ftCreationTime.dwHighDateTime=0x1cb892b, ftLastAccessTime.dwLowDateTime=0x8a2e6f4f, ftLastAccessTime.dwHighDateTime=0x1cb892b, ftLastWriteTime.dwLowDateTime=0x8a30d0af, ftLastWriteTime.dwHighDateTime=0x1cb892b, nFileSizeHigh=0x0, nFileSizeLow=0x11e00, dwReserved0=0x0, dwReserved1=0x0, cFileName="cabinet.dll", cAlternateFileName="")) returned 1 [0116.732] FindNextFileW (in: hFindFile=0x381b80, lpFindFileData=0x31e5e4 | out: lpFindFileData=0x31e5e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8a2c0def, ftCreationTime.dwHighDateTime=0x1cb892b, ftLastAccessTime.dwLowDateTime=0x8a2c0def, ftLastAccessTime.dwHighDateTime=0x1cb892b, ftLastWriteTime.dwLowDateTime=0x8a2c0def, ftLastWriteTime.dwHighDateTime=0x1cb892b, nFileSizeHigh=0x0, nFileSizeLow=0x20600, dwReserved0=0x0, dwReserved1=0x0, cFileName="cabview.dll", cAlternateFileName="")) returned 1 [0116.732] FindNextFileW (in: hFindFile=0x381b80, lpFindFileData=0x31e5e4 | out: lpFindFileData=0x31e5e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc9639a6c, ftCreationTime.dwHighDateTime=0x1ca040f, ftLastAccessTime.dwLowDateTime=0xc9639a6c, ftLastAccessTime.dwHighDateTime=0x1ca040f, ftLastWriteTime.dwLowDateTime=0x663abaf0, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x6400, dwReserved0=0x0, dwReserved1=0x0, cFileName="cacls.exe", cAlternateFileName="")) returned 1 [0116.732] FindNextFileW (in: hFindFile=0x381b80, lpFindFileData=0x31e5e4 | out: lpFindFileData=0x31e5e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb34a12ea, ftCreationTime.dwHighDateTime=0x1cb892b, ftLastAccessTime.dwLowDateTime=0xb34a12ea, ftLastAccessTime.dwHighDateTime=0x1cb892b, ftLastWriteTime.dwLowDateTime=0xb34ed5ab, ftLastWriteTime.dwHighDateTime=0x1cb892b, nFileSizeHigh=0x0, nFileSizeLow=0xbd800, dwReserved0=0x0, dwReserved1=0x0, cFileName="calc.exe", cAlternateFileName="")) returned 1 [0116.732] FindNextFileW (in: hFindFile=0x381b80, lpFindFileData=0x31e5e4 | out: lpFindFileData=0x31e5e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe154e3d9, ftCreationTime.dwHighDateTime=0x1ca0412, ftLastAccessTime.dwLowDateTime=0xe154e3d9, ftLastAccessTime.dwHighDateTime=0x1ca0412, ftLastWriteTime.dwLowDateTime=0x829926a0, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0xbc00, dwReserved0=0x0, dwReserved1=0x0, cFileName="capiprovider.dll", cAlternateFileName="")) returned 1 [0116.732] FindNextFileW (in: hFindFile=0x381b80, lpFindFileData=0x31e5e4 | out: lpFindFileData=0x31e5e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3f291a9a, ftCreationTime.dwHighDateTime=0x1ca0412, ftLastAccessTime.dwLowDateTime=0x3f291a9a, ftLastAccessTime.dwHighDateTime=0x1ca0412, ftLastWriteTime.dwLowDateTime=0x829b97a0, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x4e00, dwReserved0=0x0, dwReserved1=0x0, cFileName="capisp.dll", cAlternateFileName="")) returned 1 [0116.732] FindNextFileW (in: hFindFile=0x381b80, lpFindFileData=0x31e5e4 | out: lpFindFileData=0x31e5e4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xe3986c, ftCreationTime.dwHighDateTime=0x1ca0432, ftLastAccessTime.dwLowDateTime=0xe3986c, ftLastAccessTime.dwHighDateTime=0x1ca0432, ftLastWriteTime.dwLowDateTime=0xc4c8bad2, ftLastWriteTime.dwHighDateTime=0x1ca042b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="catroot", cAlternateFileName="")) returned 1 [0116.732] FindNextFileW (in: hFindFile=0x381b80, lpFindFileData=0x31e5e4 | out: lpFindFileData=0x31e5e4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xe5f9c6, ftCreationTime.dwHighDateTime=0x1ca0432, ftLastAccessTime.dwLowDateTime=0xe5f9c6, ftLastAccessTime.dwHighDateTime=0x1ca0432, ftLastWriteTime.dwLowDateTime=0xc4c8bad2, ftLastWriteTime.dwHighDateTime=0x1ca042b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="catroot2", cAlternateFileName="")) returned 1 [0116.732] FindNextFileW (in: hFindFile=0x381b80, lpFindFileData=0x31e5e4 | out: lpFindFileData=0x31e5e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xdf27d7f7, ftCreationTime.dwHighDateTime=0x1ca0413, ftLastAccessTime.dwLowDateTime=0xdf27d7f7, ftLastAccessTime.dwHighDateTime=0x1ca0413, ftLastWriteTime.dwLowDateTime=0x82a50d80, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x6da00, dwReserved0=0x0, dwReserved1=0x0, cFileName="catsrv.dll", cAlternateFileName="")) returned 1 [0116.732] FindNextFileW (in: hFindFile=0x381b80, lpFindFileData=0x31e5e4 | out: lpFindFileData=0x31e5e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd26f844f, ftCreationTime.dwHighDateTime=0x1ca0413, ftLastAccessTime.dwLowDateTime=0xd26f844f, ftLastAccessTime.dwHighDateTime=0x1ca0413, ftLastWriteTime.dwLowDateTime=0x82a50d80, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x5e00, dwReserved0=0x0, dwReserved1=0x0, cFileName="catsrvps.dll", cAlternateFileName="")) returned 1 [0116.732] FindNextFileW (in: hFindFile=0x381b80, lpFindFileData=0x31e5e4 | out: lpFindFileData=0x31e5e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe18df9b5, ftCreationTime.dwHighDateTime=0x1ca0413, ftLastAccessTime.dwLowDateTime=0xe18df9b5, ftLastAccessTime.dwHighDateTime=0x1ca0413, ftLastWriteTime.dwLowDateTime=0x82a50d80, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x77200, dwReserved0=0x0, dwReserved1=0x0, cFileName="catsrvut.dll", cAlternateFileName="")) returned 1 [0116.732] FindNextFileW (in: hFindFile=0x381b80, lpFindFileData=0x31e5e4 | out: lpFindFileData=0x31e5e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb3ca9d39, ftCreationTime.dwHighDateTime=0x1cb892b, ftLastAccessTime.dwLowDateTime=0xb3ca9d39, ftLastAccessTime.dwHighDateTime=0x1cb892b, ftLastWriteTime.dwLowDateTime=0xb3ccfe99, ftLastWriteTime.dwHighDateTime=0x1cb892b, nFileSizeHigh=0x0, nFileSizeLow=0x10400, dwReserved0=0x0, dwReserved1=0x0, cFileName="cca.dll", cAlternateFileName="")) returned 1 [0116.732] FindNextFileW (in: hFindFile=0x381b80, lpFindFileData=0x31e5e4 | out: lpFindFileData=0x31e5e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8ebf32f5, ftCreationTime.dwHighDateTime=0x1cb892b, ftLastAccessTime.dwLowDateTime=0x8ebf32f5, ftLastAccessTime.dwHighDateTime=0x1cb892b, ftLastWriteTime.dwLowDateTime=0x8ec19456, ftLastWriteTime.dwHighDateTime=0x1cb892b, nFileSizeHigh=0x0, nFileSizeLow=0xc4a00, dwReserved0=0x0, dwReserved1=0x0, cFileName="cdosys.dll", cAlternateFileName="")) returned 1 [0116.732] FindNextFileW (in: hFindFile=0x381b80, lpFindFileData=0x31e5e4 | out: lpFindFileData=0x31e5e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3cedc67e, ftCreationTime.dwHighDateTime=0x1ca0413, ftLastAccessTime.dwLowDateTime=0x3cedc67e, ftLastAccessTime.dwHighDateTime=0x1ca0413, ftLastWriteTime.dwLowDateTime=0x3cc08c71, ftLastWriteTime.dwHighDateTime=0x1ca0413, nFileSizeHigh=0x0, nFileSizeLow=0xd800, dwReserved0=0x0, dwReserved1=0x0, cFileName="cero.rs", cAlternateFileName="")) returned 1 [0116.732] FindNextFileW (in: hFindFile=0x381b80, lpFindFileData=0x31e5e4 | out: lpFindFileData=0x31e5e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x92e99b70, ftCreationTime.dwHighDateTime=0x1cb892b, ftLastAccessTime.dwLowDateTime=0x92e99b70, ftLastAccessTime.dwHighDateTime=0x1cb892b, ftLastWriteTime.dwLowDateTime=0x92ebfcd0, ftLastWriteTime.dwHighDateTime=0x1cb892b, nFileSizeHigh=0x0, nFileSizeLow=0x53800, dwReserved0=0x0, dwReserved1=0x0, cFileName="certcli.dll", cAlternateFileName="")) returned 1 [0116.733] FindNextFileW (in: hFindFile=0x381b80, lpFindFileData=0x31e5e4 | out: lpFindFileData=0x31e5e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3b996d79, ftCreationTime.dwHighDateTime=0x1ca0412, ftLastAccessTime.dwLowDateTime=0x3b996d79, ftLastAccessTime.dwHighDateTime=0x1ca0412, ftLastWriteTime.dwLowDateTime=0x82dbd4f0, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x1e000, dwReserved0=0x0, dwReserved1=0x0, cFileName="certCredProvider.dll", cAlternateFileName="")) returned 1 [0116.733] FindNextFileW (in: hFindFile=0x381b80, lpFindFileData=0x31e5e4 | out: lpFindFileData=0x31e5e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4e1331d6, ftCreationTime.dwHighDateTime=0x1ca0412, ftLastAccessTime.dwLowDateTime=0x4e1331d6, ftLastAccessTime.dwHighDateTime=0x1ca0412, ftLastWriteTime.dwLowDateTime=0x82e08fe0, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0xa800, dwReserved0=0x0, dwReserved1=0x0, cFileName="certenc.dll", cAlternateFileName="")) returned 1 [0116.733] FindNextFileW (in: hFindFile=0x381b80, lpFindFileData=0x31e5e4 | out: lpFindFileData=0x31e5e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9b374845, ftCreationTime.dwHighDateTime=0x1cb892b, ftLastAccessTime.dwLowDateTime=0x9b374845, ftLastAccessTime.dwHighDateTime=0x1cb892b, ftLastWriteTime.dwLowDateTime=0x9b39a9a5, ftLastWriteTime.dwHighDateTime=0x1cb892b, nFileSizeHigh=0x0, nFileSizeLow=0x145c00, dwReserved0=0x0, dwReserved1=0x0, cFileName="CertEnroll.dll", cAlternateFileName="")) returned 1 [0116.733] FindNextFileW (in: hFindFile=0x381b80, lpFindFileData=0x31e5e4 | out: lpFindFileData=0x31e5e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x55694ba1, ftCreationTime.dwHighDateTime=0x1ca0412, ftLastAccessTime.dwLowDateTime=0x55694ba1, ftLastAccessTime.dwHighDateTime=0x1ca0412, ftLastWriteTime.dwLowDateTime=0x66763d50, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x10600, dwReserved0=0x0, dwReserved1=0x0, cFileName="CertEnrollCtrl.exe", cAlternateFileName="")) returned 1 [0116.733] FindNextFileW (in: hFindFile=0x381b80, lpFindFileData=0x31e5e4 | out: lpFindFileData=0x31e5e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x587d3176, ftCreationTime.dwHighDateTime=0x1ca0412, ftLastAccessTime.dwLowDateTime=0x587d3176, ftLastAccessTime.dwHighDateTime=0x1ca0412, ftLastWriteTime.dwLowDateTime=0x82e08fe0, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x42600, dwReserved0=0x0, dwReserved1=0x0, cFileName="CertEnrollUI.dll", cAlternateFileName="")) returned 1 [0116.733] FindNextFileW (in: hFindFile=0x381b80, lpFindFileData=0x31e5e4 | out: lpFindFileData=0x31e5e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x83483244, ftCreationTime.dwHighDateTime=0x1cb892b, ftLastAccessTime.dwLowDateTime=0x83483244, ftLastAccessTime.dwHighDateTime=0x1cb892b, ftLastWriteTime.dwLowDateTime=0x834a93a4, ftLastWriteTime.dwHighDateTime=0x1cb892b, nFileSizeHigh=0x0, nFileSizeLow=0x17bc00, dwReserved0=0x0, dwReserved1=0x0, cFileName="certmgr.dll", cAlternateFileName="")) returned 1 [0116.733] FindNextFileW (in: hFindFile=0x381b80, lpFindFileData=0x31e5e4 | out: lpFindFileData=0x31e5e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x934e0c77, ftCreationTime.dwHighDateTime=0x1ca0403, ftLastAccessTime.dwLowDateTime=0x934e0c77, ftLastAccessTime.dwHighDateTime=0x1ca0403, ftLastWriteTime.dwLowDateTime=0x8605bc7c, ftLastWriteTime.dwHighDateTime=0x1c9ea13, nFileSizeHigh=0x0, nFileSizeLow=0xf65e, dwReserved0=0x0, dwReserved1=0x0, cFileName="certmgr.msc", cAlternateFileName="")) returned 1 [0116.733] FindNextFileW (in: hFindFile=0x381b80, lpFindFileData=0x31e5e4 | out: lpFindFileData=0x31e5e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x92abb7a9, ftCreationTime.dwHighDateTime=0x1cb892b, ftLastAccessTime.dwLowDateTime=0x92abb7a9, ftLastAccessTime.dwHighDateTime=0x1cb892b, ftLastWriteTime.dwLowDateTime=0x92abb7a9, ftLastWriteTime.dwHighDateTime=0x1cb892b, nFileSizeHigh=0x0, nFileSizeLow=0xfe00, dwReserved0=0x0, dwReserved1=0x0, cFileName="CertPolEng.dll", cAlternateFileName="")) returned 1 [0116.733] FindNextFileW (in: hFindFile=0x381b80, lpFindFileData=0x31e5e4 | out: lpFindFileData=0x31e5e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5332c54f, ftCreationTime.dwHighDateTime=0x1ca0412, ftLastAccessTime.dwLowDateTime=0x5332c54f, ftLastAccessTime.dwHighDateTime=0x1ca0412, ftLastWriteTime.dwLowDateTime=0x667af840, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x40400, dwReserved0=0x0, dwReserved1=0x0, cFileName="certreq.exe", cAlternateFileName="")) returned 1 [0116.733] FindNextFileW (in: hFindFile=0x381b80, lpFindFileData=0x31e5e4 | out: lpFindFileData=0x31e5e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x62050ed5, ftCreationTime.dwHighDateTime=0x1ca0412, ftLastAccessTime.dwLowDateTime=0x62050ed5, ftLastAccessTime.dwHighDateTime=0x1ca0412, ftLastWriteTime.dwLowDateTime=0x66a5d8d0, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0xd9400, dwReserved0=0x0, dwReserved1=0x0, cFileName="certutil.exe", cAlternateFileName="")) returned 1 [0116.733] FindNextFileW (in: hFindFile=0x381b80, lpFindFileData=0x31e5e4 | out: lpFindFileData=0x31e5e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf69d5a18, ftCreationTime.dwHighDateTime=0x1ca0416, ftLastAccessTime.dwLowDateTime=0xf69d5a18, ftLastAccessTime.dwHighDateTime=0x1ca0416, ftLastWriteTime.dwLowDateTime=0x83683670, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x33600, dwReserved0=0x0, dwReserved1=0x0, cFileName="cewmdm.dll", cAlternateFileName="")) returned 1 [0116.733] FindNextFileW (in: hFindFile=0x381b80, lpFindFileData=0x31e5e4 | out: lpFindFileData=0x31e5e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x582c16a8, ftCreationTime.dwHighDateTime=0x1ca0416, ftLastAccessTime.dwLowDateTime=0x582c16a8, ftLastAccessTime.dwHighDateTime=0x1ca0416, ftLastWriteTime.dwLowDateTime=0x83683670, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0xbe00, dwReserved0=0x0, dwReserved1=0x0, cFileName="cfgbkend.dll", cAlternateFileName="")) returned 1 [0116.733] FindNextFileW (in: hFindFile=0x381b80, lpFindFileData=0x31e5e4 | out: lpFindFileData=0x31e5e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8f01d97d, ftCreationTime.dwHighDateTime=0x1cb892b, ftLastAccessTime.dwLowDateTime=0x8f01d97d, ftLastAccessTime.dwHighDateTime=0x1cb892b, ftLastWriteTime.dwLowDateTime=0x8f01d97d, ftLastWriteTime.dwHighDateTime=0x1cb892b, nFileSizeHigh=0x0, nFileSizeLow=0x23a00, dwReserved0=0x0, dwReserved1=0x0, cFileName="cfgmgr32.dll", cAlternateFileName="")) returned 1 [0116.733] FindNextFileW (in: hFindFile=0x381b80, lpFindFileData=0x31e5e4 | out: lpFindFileData=0x31e5e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x55eea375, ftCreationTime.dwHighDateTime=0x1ca0411, ftLastAccessTime.dwLowDateTime=0x55eea375, ftLastAccessTime.dwHighDateTime=0x1ca0411, ftLastWriteTime.dwLowDateTime=0x49868390, ftLastWriteTime.dwHighDateTime=0x1ca041f, nFileSizeHigh=0x0, nFileSizeLow=0x1ec00, dwReserved0=0x0, dwReserved1=0x0, cFileName="chajei.ime", cAlternateFileName="")) returned 1 [0116.733] FindNextFileW (in: hFindFile=0x381b80, lpFindFileData=0x31e5e4 | out: lpFindFileData=0x31e5e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6d6430a2, ftCreationTime.dwHighDateTime=0x1ca0413, ftLastAccessTime.dwLowDateTime=0x6d6430a2, ftLastAccessTime.dwHighDateTime=0x1ca0413, ftLastWriteTime.dwLowDateTime=0x66aa93c0, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x25e00, dwReserved0=0x0, dwReserved1=0x0, cFileName="charmap.exe", cAlternateFileName="")) returned 1 [0116.733] FindNextFileW (in: hFindFile=0x381b80, lpFindFileData=0x31e5e4 | out: lpFindFileData=0x31e5e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc0df3280, ftCreationTime.dwHighDateTime=0x1ca040f, ftLastAccessTime.dwLowDateTime=0xc0df3280, ftLastAccessTime.dwHighDateTime=0x1ca040f, ftLastWriteTime.dwLowDateTime=0xc0e16d20, ftLastWriteTime.dwHighDateTime=0x1ca040f, nFileSizeHigh=0x0, nFileSizeLow=0x2e00, dwReserved0=0x0, dwReserved1=0x0, cFileName="chcp.com", cAlternateFileName="")) returned 1 [0116.733] FindNextFileW (in: hFindFile=0x381b80, lpFindFileData=0x31e5e4 | out: lpFindFileData=0x31e5e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc24dc5a6, ftCreationTime.dwHighDateTime=0x1ca040f, ftLastAccessTime.dwLowDateTime=0xc24dc5a6, ftLastAccessTime.dwHighDateTime=0x1ca040f, ftLastWriteTime.dwLowDateTime=0x671340a0, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x4000, dwReserved0=0x0, dwReserved1=0x0, cFileName="chkdsk.exe", cAlternateFileName="")) returned 1 [0116.733] FindNextFileW (in: hFindFile=0x381b80, lpFindFileData=0x31e5e4 | out: lpFindFileData=0x31e5e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc1fa75a9, ftCreationTime.dwHighDateTime=0x1ca040f, ftLastAccessTime.dwLowDateTime=0xc1fa75a9, ftLastAccessTime.dwHighDateTime=0x1ca040f, ftLastWriteTime.dwLowDateTime=0x6715b1a0, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x4200, dwReserved0=0x0, dwReserved1=0x0, cFileName="chkntfs.exe", cAlternateFileName="")) returned 1 [0116.734] FindNextFileW (in: hFindFile=0x381b80, lpFindFileData=0x31e5e4 | out: lpFindFileData=0x31e5e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xcdacf27f, ftCreationTime.dwHighDateTime=0x1ca040f, ftLastAccessTime.dwLowDateTime=0xcdacf27f, ftLastAccessTime.dwHighDateTime=0x1ca040f, ftLastWriteTime.dwLowDateTime=0x671a6c90, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x7400, dwReserved0=0x0, dwReserved1=0x0, cFileName="choice.exe", cAlternateFileName="")) returned 1 [0116.734] FindNextFileW (in: hFindFile=0x381b80, lpFindFileData=0x31e5e4 | out: lpFindFileData=0x31e5e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa78861e5, ftCreationTime.dwHighDateTime=0x1ca0417, ftLastAccessTime.dwLowDateTime=0xa78861e5, ftLastAccessTime.dwHighDateTime=0x1ca0417, ftLastWriteTime.dwLowDateTime=0x975560e0, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x198400, dwReserved0=0x0, dwReserved1=0x0, cFileName="chsbrkr.dll", cAlternateFileName="")) returned 1 [0116.734] FindNextFileW (in: hFindFile=0x381b80, lpFindFileData=0x31e5e4 | out: lpFindFileData=0x31e5e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa83625fc, ftCreationTime.dwHighDateTime=0x1ca0417, ftLastAccessTime.dwLowDateTime=0xa83625fc, ftLastAccessTime.dwHighDateTime=0x1ca0417, ftLastWriteTime.dwLowDateTime=0x975560e0, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x5d2000, dwReserved0=0x0, dwReserved1=0x0, cFileName="chtbrkr.dll", cAlternateFileName="")) returned 1 [0116.734] FindNextFileW (in: hFindFile=0x381b80, lpFindFileData=0x31e5e4 | out: lpFindFileData=0x31e5e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4bf222e7, ftCreationTime.dwHighDateTime=0x1ca0411, ftLastAccessTime.dwLowDateTime=0x4bf222e7, ftLastAccessTime.dwHighDateTime=0x1ca0411, ftLastWriteTime.dwLowDateTime=0x83f24e00, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x2a00, dwReserved0=0x0, dwReserved1=0x0, cFileName="CHxReadingStringIME.dll", cAlternateFileName="")) returned 1 [0116.734] FindNextFileW (in: hFindFile=0x381b80, lpFindFileData=0x31e5e4 | out: lpFindFileData=0x31e5e4*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xc23aa496, ftCreationTime.dwHighDateTime=0x1ca0411, ftLastAccessTime.dwLowDateTime=0xc23aa496, ftLastAccessTime.dwHighDateTime=0x1ca0411, ftLastWriteTime.dwLowDateTime=0x83fbc3e0, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x2a200, dwReserved0=0x0, dwReserved1=0x0, cFileName="cic.dll", cAlternateFileName="")) returned 1 [0116.734] FindNextFileW (in: hFindFile=0x381b80, lpFindFileData=0x31e5e4 | out: lpFindFileData=0x31e5e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x560d9548, ftCreationTime.dwHighDateTime=0x1ca0411, ftLastAccessTime.dwLowDateTime=0x560d9548, ftLastAccessTime.dwHighDateTime=0x1ca0411, ftLastWriteTime.dwLowDateTime=0x4aab5480, ftLastWriteTime.dwHighDateTime=0x1ca041f, nFileSizeHigh=0x0, nFileSizeLow=0x1ec00, dwReserved0=0x0, dwReserved1=0x0, cFileName="cintlgnt.ime", cAlternateFileName="")) returned 1 [0116.734] FindNextFileW (in: hFindFile=0x381b80, lpFindFileData=0x31e5e4 | out: lpFindFileData=0x31e5e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc65b9b72, ftCreationTime.dwHighDateTime=0x1ca040f, ftLastAccessTime.dwLowDateTime=0xc65b9b72, ftLastAccessTime.dwHighDateTime=0x1ca040f, ftLastWriteTime.dwLowDateTime=0x671f2780, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x9200, dwReserved0=0x0, dwReserved1=0x0, cFileName="cipher.exe", cAlternateFileName="")) returned 1 [0116.734] FindNextFileW (in: hFindFile=0x381b80, lpFindFileData=0x31e5e4 | out: lpFindFileData=0x31e5e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc8a9ef7a, ftCreationTime.dwHighDateTime=0x1ca040f, ftLastAccessTime.dwLowDateTime=0xc8a9ef7a, ftLastAccessTime.dwHighDateTime=0x1ca040f, ftLastWriteTime.dwLowDateTime=0x8426a470, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x3600, dwReserved0=0x0, dwReserved1=0x0, cFileName="clb.dll", cAlternateFileName="")) returned 1 [0116.734] FindNextFileW (in: hFindFile=0x381b80, lpFindFileData=0x31e5e4 | out: lpFindFileData=0x31e5e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe661614e, ftCreationTime.dwHighDateTime=0x1ca0413, ftLastAccessTime.dwLowDateTime=0xe661614e, ftLastAccessTime.dwHighDateTime=0x1ca0413, ftLastWriteTime.dwLowDateTime=0x8426a470, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x7f800, dwReserved0=0x0, dwReserved1=0x0, cFileName="clbcatq.dll", cAlternateFileName="")) returned 1 [0116.734] FindNextFileW (in: hFindFile=0x381b80, lpFindFileData=0x31e5e4 | out: lpFindFileData=0x31e5e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4776b7f1, ftCreationTime.dwHighDateTime=0x1ca0413, ftLastAccessTime.dwLowDateTime=0x4776b7f1, ftLastAccessTime.dwHighDateTime=0x1ca0413, ftLastWriteTime.dwLowDateTime=0x67265370, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x33e00, dwReserved0=0x0, dwReserved1=0x0, cFileName="cleanmgr.exe", cAlternateFileName="")) returned 1 [0116.734] FindNextFileW (in: hFindFile=0x381b80, lpFindFileData=0x31e5e4 | out: lpFindFileData=0x31e5e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x35259713, ftCreationTime.dwHighDateTime=0x1ca040f, ftLastAccessTime.dwLowDateTime=0x35259713, ftLastAccessTime.dwHighDateTime=0x1ca040f, ftLastWriteTime.dwLowDateTime=0x8426a470, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0xe600, dwReserved0=0x0, dwReserved1=0x0, cFileName="clfsw32.dll", cAlternateFileName="")) returned 1 [0116.734] FindNextFileW (in: hFindFile=0x381b80, lpFindFileData=0x31e5e4 | out: lpFindFileData=0x31e5e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xbee174b6, ftCreationTime.dwHighDateTime=0x1ca0417, ftLastAccessTime.dwLowDateTime=0xbee174b6, ftLastAccessTime.dwHighDateTime=0x1ca0417, ftLastWriteTime.dwLowDateTime=0x842b5f60, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x15000, dwReserved0=0x0, dwReserved1=0x0, cFileName="cliconfg.dll", cAlternateFileName="")) returned 1 [0116.734] FindNextFileW (in: hFindFile=0x381b80, lpFindFileData=0x31e5e4 | out: lpFindFileData=0x31e5e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb9aa1387, ftCreationTime.dwHighDateTime=0x1ca0417, ftLastAccessTime.dwLowDateTime=0xb9aa1387, ftLastAccessTime.dwHighDateTime=0x1ca0417, ftLastWriteTime.dwLowDateTime=0x67265370, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0xb000, dwReserved0=0x0, dwReserved1=0x0, cFileName="cliconfg.exe", cAlternateFileName="")) returned 1 [0116.734] FindNextFileW (in: hFindFile=0x381b80, lpFindFileData=0x31e5e4 | out: lpFindFileData=0x31e5e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xbb69954b, ftCreationTime.dwHighDateTime=0x1ca0417, ftLastAccessTime.dwLowDateTime=0xbb69954b, ftLastAccessTime.dwHighDateTime=0x1ca0417, ftLastWriteTime.dwLowDateTime=0xbb600fcf, ftLastWriteTime.dwHighDateTime=0x1ca0417, nFileSizeHigh=0x0, nFileSizeLow=0xa000, dwReserved0=0x0, dwReserved1=0x0, cFileName="cliconfg.rll", cAlternateFileName="")) returned 1 [0116.734] FindNextFileW (in: hFindFile=0x381b80, lpFindFileData=0x31e5e4 | out: lpFindFileData=0x31e5e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xcdda2c8c, ftCreationTime.dwHighDateTime=0x1ca040f, ftLastAccessTime.dwLowDateTime=0xcdda2c8c, ftLastAccessTime.dwHighDateTime=0x1ca040f, ftLastWriteTime.dwLowDateTime=0x6728c470, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x6600, dwReserved0=0x0, dwReserved1=0x0, cFileName="clip.exe", cAlternateFileName="")) returned 1 [0116.734] FindNextFileW (in: hFindFile=0x381b80, lpFindFileData=0x31e5e4 | out: lpFindFileData=0x31e5e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x92bec2ab, ftCreationTime.dwHighDateTime=0x1cb892b, ftLastAccessTime.dwLowDateTime=0x92bec2ab, ftLastAccessTime.dwHighDateTime=0x1cb892b, ftLastWriteTime.dwLowDateTime=0x92c1240c, ftLastWriteTime.dwHighDateTime=0x1cb892b, nFileSizeHigh=0x0, nFileSizeLow=0x38600, dwReserved0=0x0, dwReserved1=0x0, cFileName="clusapi.dll", cAlternateFileName="")) returned 1 [0116.734] FindNextFileW (in: hFindFile=0x381b80, lpFindFileData=0x31e5e4 | out: lpFindFileData=0x31e5e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x38fecc6d, ftCreationTime.dwHighDateTime=0x1ca0415, ftLastAccessTime.dwLowDateTime=0x38fecc6d, ftLastAccessTime.dwHighDateTime=0x1ca0415, ftLastWriteTime.dwLowDateTime=0x845fdce0, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x9000, dwReserved0=0x0, dwReserved1=0x0, cFileName="cmcfg32.dll", cAlternateFileName="")) returned 1 [0116.735] FindNextFileW (in: hFindFile=0x381b80, lpFindFileData=0x31e5e4 | out: lpFindFileData=0x31e5e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8bdd4861, ftCreationTime.dwHighDateTime=0x1cb892b, ftLastAccessTime.dwLowDateTime=0x8bdd4861, ftLastAccessTime.dwHighDateTime=0x1cb892b, ftLastWriteTime.dwLowDateTime=0x8bdd4861, ftLastWriteTime.dwHighDateTime=0x1cb892b, nFileSizeHigh=0x0, nFileSizeLow=0x49e00, dwReserved0=0x0, dwReserved1=0x0, cFileName="cmd.exe", cAlternateFileName="")) returned 1 [0116.735] FindNextFileW (in: hFindFile=0x381b80, lpFindFileData=0x31e5e4 | out: lpFindFileData=0x31e5e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3a9a99a0, ftCreationTime.dwHighDateTime=0x1ca0415, ftLastAccessTime.dwLowDateTime=0x3a9a99a0, ftLastAccessTime.dwHighDateTime=0x1ca0415, ftLastWriteTime.dwLowDateTime=0x8466e1c0, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x76400, dwReserved0=0x0, dwReserved1=0x0, cFileName="cmdial32.dll", cAlternateFileName="")) returned 1 [0116.735] FindNextFileW (in: hFindFile=0x381b80, lpFindFileData=0x31e5e4 | out: lpFindFileData=0x31e5e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x684e2db1, ftCreationTime.dwHighDateTime=0x1ca0412, ftLastAccessTime.dwLowDateTime=0x684e2db1, ftLastAccessTime.dwHighDateTime=0x1ca0412, ftLastWriteTime.dwLowDateTime=0x678cb660, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x3600, dwReserved0=0x0, dwReserved1=0x0, cFileName="cmdkey.exe", cAlternateFileName="")) returned 1 [0116.735] FindNextFileW (in: hFindFile=0x381b80, lpFindFileData=0x31e5e4 | out: lpFindFileData=0x31e5e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x44c4543b, ftCreationTime.dwHighDateTime=0x1ca0415, ftLastAccessTime.dwLowDateTime=0x44c4543b, ftLastAccessTime.dwHighDateTime=0x1ca0415, ftLastWriteTime.dwLowDateTime=0x67917150, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x11c00, dwReserved0=0x0, dwReserved1=0x0, cFileName="cmdl32.exe", cAlternateFileName="")) returned 1 [0116.735] FindNextFileW (in: hFindFile=0x381b80, lpFindFileData=0x31e5e4 | out: lpFindFileData=0x31e5e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xfe6d2724, ftCreationTime.dwHighDateTime=0x1ca040f, ftLastAccessTime.dwLowDateTime=0xfe6d2724, ftLastAccessTime.dwHighDateTime=0x1ca040f, ftLastWriteTime.dwLowDateTime=0x8466e1c0, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0xfc00, dwReserved0=0x0, dwReserved1=0x0, cFileName="cmicryptinstall.dll", cAlternateFileName="")) returned 1 [0116.735] FindNextFileW (in: hFindFile=0x381b80, lpFindFileData=0x31e5e4 | out: lpFindFileData=0x31e5e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x74bcbee, ftCreationTime.dwHighDateTime=0x1ca0415, ftLastAccessTime.dwLowDateTime=0x74bcbee, ftLastAccessTime.dwHighDateTime=0x1ca0415, ftLastWriteTime.dwLowDateTime=0x8466e1c0, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x10c00, dwReserved0=0x0, dwReserved1=0x0, cFileName="cmifw.dll", cAlternateFileName="")) returned 1 [0116.735] FindNextFileW (in: hFindFile=0x381b80, lpFindFileData=0x31e5e4 | out: lpFindFileData=0x31e5e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8f457, ftCreationTime.dwHighDateTime=0x1ca0410, ftLastAccessTime.dwLowDateTime=0x8f457, ftLastAccessTime.dwHighDateTime=0x1ca0410, ftLastWriteTime.dwLowDateTime=0x8466e1c0, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x4a600, dwReserved0=0x0, dwReserved1=0x0, cFileName="cmipnpinstall.dll", cAlternateFileName="")) returned 1 [0116.735] FindNextFileW (in: hFindFile=0x381b80, lpFindFileData=0x31e5e4 | out: lpFindFileData=0x31e5e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x38f08433, ftCreationTime.dwHighDateTime=0x1ca0415, ftLastAccessTime.dwLowDateTime=0x38f08433, ftLastAccessTime.dwHighDateTime=0x1ca0415, ftLastWriteTime.dwLowDateTime=0x846bc3c0, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x8600, dwReserved0=0x0, dwReserved1=0x0, cFileName="cmlua.dll", cAlternateFileName="")) returned 1 [0116.736] FindNextFileW (in: hFindFile=0x381b80, lpFindFileData=0x31e5e4 | out: lpFindFileData=0x31e5e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5888f72d, ftCreationTime.dwHighDateTime=0x1ca0415, ftLastAccessTime.dwLowDateTime=0x5888f72d, ftLastAccessTime.dwHighDateTime=0x1ca0415, ftLastWriteTime.dwLowDateTime=0x6793e250, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0xa800, dwReserved0=0x0, dwReserved1=0x0, cFileName="cmmon32.exe", cAlternateFileName="")) returned 1 [0116.736] FindNextFileW (in: hFindFile=0x381b80, lpFindFileData=0x31e5e4 | out: lpFindFileData=0x31e5e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x391b5ce1, ftCreationTime.dwHighDateTime=0x1ca0415, ftLastAccessTime.dwLowDateTime=0x391b5ce1, ftLastAccessTime.dwHighDateTime=0x1ca0415, ftLastWriteTime.dwLowDateTime=0x8477aaa0, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x6600, dwReserved0=0x0, dwReserved1=0x0, cFileName="cmpbk32.dll", cAlternateFileName="")) returned 1 [0116.736] FindNextFileW (in: hFindFile=0x381b80, lpFindFileData=0x31e5e4 | out: lpFindFileData=0x31e5e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x937acf61, ftCreationTime.dwHighDateTime=0x1cb892b, ftLastAccessTime.dwLowDateTime=0x937acf61, ftLastAccessTime.dwHighDateTime=0x1cb892b, ftLastWriteTime.dwLowDateTime=0x937d30c1, ftLastWriteTime.dwHighDateTime=0x1cb892b, nFileSizeHigh=0x0, nFileSizeLow=0x14c00, dwReserved0=0x0, dwReserved1=0x0, cFileName="cmstp.exe", cAlternateFileName="")) returned 1 [0116.736] FindNextFileW (in: hFindFile=0x381b80, lpFindFileData=0x31e5e4 | out: lpFindFileData=0x31e5e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3af76f19, ftCreationTime.dwHighDateTime=0x1ca0415, ftLastAccessTime.dwLowDateTime=0x3af76f19, ftLastAccessTime.dwHighDateTime=0x1ca0415, ftLastWriteTime.dwLowDateTime=0x8479f490, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x3c00, dwReserved0=0x0, dwReserved1=0x0, cFileName="cmstplua.dll", cAlternateFileName="")) returned 1 [0116.736] FindNextFileW (in: hFindFile=0x381b80, lpFindFileData=0x31e5e4 | out: lpFindFileData=0x31e5e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3930c938, ftCreationTime.dwHighDateTime=0x1ca0415, ftLastAccessTime.dwLowDateTime=0x3930c938, ftLastAccessTime.dwHighDateTime=0x1ca0415, ftLastWriteTime.dwLowDateTime=0x8479f490, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0xb800, dwReserved0=0x0, dwReserved1=0x0, cFileName="cmutil.dll", cAlternateFileName="")) returned 1 [0116.736] FindNextFileW (in: hFindFile=0x381b80, lpFindFileData=0x31e5e4 | out: lpFindFileData=0x31e5e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3edf5019, ftCreationTime.dwHighDateTime=0x1ca0412, ftLastAccessTime.dwLowDateTime=0x3edf5019, ftLastAccessTime.dwHighDateTime=0x1ca0412, ftLastWriteTime.dwLowDateTime=0x85c00920, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x3000, dwReserved0=0x0, dwReserved1=0x0, cFileName="cngaudit.dll", cAlternateFileName="")) returned 1 [0116.736] FindNextFileW (in: hFindFile=0x381b80, lpFindFileData=0x31e5e4 | out: lpFindFileData=0x31e5e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe13d1623, ftCreationTime.dwHighDateTime=0x1ca0412, ftLastAccessTime.dwLowDateTime=0xe13d1623, ftLastAccessTime.dwHighDateTime=0x1ca0412, ftLastWriteTime.dwLowDateTime=0x85c27a20, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0xc800, dwReserved0=0x0, dwReserved1=0x0, cFileName="cngprovider.dll", cAlternateFileName="")) returned 1 [0116.736] FindNextFileW (in: hFindFile=0x381b80, lpFindFileData=0x31e5e4 | out: lpFindFileData=0x31e5e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xbc8530d4, ftCreationTime.dwHighDateTime=0x1ca040f, ftLastAccessTime.dwLowDateTime=0xbc8530d4, ftLastAccessTime.dwHighDateTime=0x1ca040f, ftLastWriteTime.dwLowDateTime=0x863252f0, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x8000, dwReserved0=0x0, dwReserved1=0x0, cFileName="cnvfat.dll", cAlternateFileName="")) returned 1 [0116.736] FindNextFileW (in: hFindFile=0x381b80, lpFindFileData=0x31e5e4 | out: lpFindFileData=0x31e5e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd2a3e279, ftCreationTime.dwHighDateTime=0x1ca0413, ftLastAccessTime.dwLowDateTime=0xd2a3e279, ftLastAccessTime.dwHighDateTime=0x1ca0413, ftLastWriteTime.dwLowDateTime=0x86397ee0, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0xf800, dwReserved0=0x0, dwReserved1=0x0, cFileName="colbact.dll", cAlternateFileName="")) returned 1 [0116.736] FindNextFileW (in: hFindFile=0x381b80, lpFindFileData=0x31e5e4 | out: lpFindFileData=0x31e5e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x21891310, ftCreationTime.dwHighDateTime=0x1ca0417, ftLastAccessTime.dwLowDateTime=0x21891310, ftLastAccessTime.dwHighDateTime=0x1ca0417, ftLastWriteTime.dwLowDateTime=0x86397ee0, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x25800, dwReserved0=0x0, dwReserved1=0x0, cFileName="COLORCNV.DLL", cAlternateFileName="")) returned 1 [0116.736] FindNextFileW (in: hFindFile=0x381b80, lpFindFileData=0x31e5e4 | out: lpFindFileData=0x31e5e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x306ea9d6, ftCreationTime.dwHighDateTime=0x1ca0411, ftLastAccessTime.dwLowDateTime=0x306ea9d6, ftLastAccessTime.dwHighDateTime=0x1ca0411, ftLastWriteTime.dwLowDateTime=0x67989d40, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x15000, dwReserved0=0x0, dwReserved1=0x0, cFileName="colorcpl.exe", cAlternateFileName="")) returned 1 [0116.736] FindNextFileW (in: hFindFile=0x381b80, lpFindFileData=0x31e5e4 | out: lpFindFileData=0x31e5e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3357b6fd, ftCreationTime.dwHighDateTime=0x1ca0411, ftLastAccessTime.dwLowDateTime=0x3357b6fd, ftLastAccessTime.dwHighDateTime=0x1ca0411, ftLastWriteTime.dwLowDateTime=0x86397ee0, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x94000, dwReserved0=0x0, dwReserved1=0x0, cFileName="colorui.dll", cAlternateFileName="")) returned 1 [0116.736] FindNextFileW (in: hFindFile=0x381b80, lpFindFileData=0x31e5e4 | out: lpFindFileData=0x31e5e4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xe5f9c6, ftCreationTime.dwHighDateTime=0x1ca0432, ftLastAccessTime.dwLowDateTime=0x1e470555, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x1e470555, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="com", cAlternateFileName="")) returned 1 [0116.736] FindNextFileW (in: hFindFile=0x381b80, lpFindFileData=0x31e5e4 | out: lpFindFileData=0x31e5e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc3830bb4, ftCreationTime.dwHighDateTime=0x1ca0413, ftLastAccessTime.dwLowDateTime=0xc3830bb4, ftLastAccessTime.dwHighDateTime=0x1ca0413, ftLastWriteTime.dwLowDateTime=0x8640aad0, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x1c00, dwReserved0=0x0, dwReserved1=0x0, cFileName="comcat.dll", cAlternateFileName="")) returned 1 [0116.736] FindNextFileW (in: hFindFile=0x381b80, lpFindFileData=0x31e5e4 | out: lpFindFileData=0x31e5e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x87ba0407, ftCreationTime.dwHighDateTime=0x1cb892b, ftLastAccessTime.dwLowDateTime=0x87ba0407, ftLastAccessTime.dwHighDateTime=0x1cb892b, ftLastWriteTime.dwLowDateTime=0x87bc6567, ftLastWriteTime.dwHighDateTime=0x1cb892b, nFileSizeHigh=0x0, nFileSizeLow=0x81800, dwReserved0=0x0, dwReserved1=0x0, cFileName="comctl32.dll", cAlternateFileName="")) returned 1 [0116.736] FindNextFileW (in: hFindFile=0x381b80, lpFindFileData=0x31e5e4 | out: lpFindFileData=0x31e5e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x831d597f, ftCreationTime.dwHighDateTime=0x1cb892b, ftLastAccessTime.dwLowDateTime=0x831d597f, ftLastAccessTime.dwHighDateTime=0x1cb892b, ftLastWriteTime.dwLowDateTime=0x831fbadf, ftLastWriteTime.dwHighDateTime=0x1cb892b, nFileSizeHigh=0x0, nFileSizeLow=0x76a00, dwReserved0=0x0, dwReserved1=0x0, cFileName="comdlg32.dll", cAlternateFileName="")) returned 1 [0116.736] FindNextFileW (in: hFindFile=0x381b80, lpFindFileData=0x31e5e4 | out: lpFindFileData=0x31e5e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7fe628e6, ftCreationTime.dwHighDateTime=0x1ca0405, ftLastAccessTime.dwLowDateTime=0x7fe628e6, ftLastAccessTime.dwHighDateTime=0x1ca0405, ftLastWriteTime.dwLowDateTime=0xe51584fc, ftLastWriteTime.dwHighDateTime=0x1c9ea10, nFileSizeHigh=0x0, nFileSizeLow=0x1e4d6, dwReserved0=0x0, dwReserved1=0x0, cFileName="comexp.msc", cAlternateFileName="")) returned 1 [0116.736] FindNextFileW (in: hFindFile=0x381b80, lpFindFileData=0x31e5e4 | out: lpFindFileData=0x31e5e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc2ed4183, ftCreationTime.dwHighDateTime=0x1ca040f, ftLastAccessTime.dwLowDateTime=0xc2ed4183, ftLastAccessTime.dwHighDateTime=0x1ca040f, ftLastWriteTime.dwLowDateTime=0x679ae730, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x5000, dwReserved0=0x0, dwReserved1=0x0, cFileName="comp.exe", cAlternateFileName="")) returned 1 [0116.737] FindNextFileW (in: hFindFile=0x381b80, lpFindFileData=0x31e5e4 | out: lpFindFileData=0x31e5e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc29eb444, ftCreationTime.dwHighDateTime=0x1ca040f, ftLastAccessTime.dwLowDateTime=0xc29eb444, ftLastAccessTime.dwHighDateTime=0x1ca040f, ftLastWriteTime.dwLowDateTime=0x679ae730, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x4800, dwReserved0=0x0, dwReserved1=0x0, cFileName="compact.exe", cAlternateFileName="")) returned 1 [0116.737] FindNextFileW (in: hFindFile=0x381b80, lpFindFileData=0x31e5e4 | out: lpFindFileData=0x31e5e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x15314852, ftCreationTime.dwHighDateTime=0x1ca0403, ftLastAccessTime.dwLowDateTime=0x15314852, ftLastAccessTime.dwHighDateTime=0x1ca0403, ftLastWriteTime.dwLowDateTime=0x5dffdd7c, ftLastWriteTime.dwHighDateTime=0x1c9ea11, nFileSizeHigh=0x0, nFileSizeLow=0x1ba68, dwReserved0=0x0, dwReserved1=0x0, cFileName="compmgmt.msc", cAlternateFileName="")) returned 1 [0116.737] FindNextFileW (in: hFindFile=0x381b80, lpFindFileData=0x31e5e4 | out: lpFindFileData=0x31e5e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x54e040d9, ftCreationTime.dwHighDateTime=0x1ca0405, ftLastAccessTime.dwLowDateTime=0x54e040d9, ftLastAccessTime.dwHighDateTime=0x1ca0405, ftLastWriteTime.dwLowDateTime=0xa7e211c, ftLastWriteTime.dwHighDateTime=0x1c9ea12, nFileSizeHigh=0x0, nFileSizeLow=0x6c90, dwReserved0=0x0, dwReserved1=0x0, cFileName="compobj.dll", cAlternateFileName="")) returned 1 [0116.743] FindClose (in: hFindFile=0x381b80 | out: hFindFile=0x381b80) returned 1 [0116.743] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e86c) returned 1 [0116.743] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e878) returned 1 [0116.743] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e8ac) returned 1 [0116.743] GetFullPathNameW (in: lpFileName="C:\\Windows\\SysWOW64", nBufferLength=0x105, lpBuffer=0x31e3b4, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\SysWOW64", lpFilePart=0x0) returned 0x13 [0116.743] GetFullPathNameW (in: lpFileName="C:\\Windows\\SysWOW64\\", nBufferLength=0x105, lpBuffer=0x31e388, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\SysWOW64\\", lpFilePart=0x0) returned 0x14 [0116.743] FindFirstFileW (in: lpFileName="C:\\Windows\\SysWOW64\\*", lpFindFileData=0x31e5d4 | out: lpFindFileData=0x31e5d4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xe13712, ftCreationTime.dwHighDateTime=0x1ca0432, ftLastAccessTime.dwLowDateTime=0xc893570, ftLastAccessTime.dwHighDateTime=0x1d35d06, ftLastWriteTime.dwLowDateTime=0xc893570, ftLastWriteTime.dwHighDateTime=0x1d35d06, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x381b80 [0116.748] FindClose (in: hFindFile=0x381b80 | out: hFindFile=0x381b80) returned 1 [0116.749] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e86c) returned 1 [0116.749] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e878) returned 1 [0116.749] GetFullPathNameW (in: lpFileName="C:\\Windows\\SysWOW64\\license.rtf", nBufferLength=0x105, lpBuffer=0x31e284, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\SysWOW64\\license.rtf", lpFilePart=0x0) returned 0x1f [0116.749] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e778) returned 1 [0116.749] CreateFileW (lpFileName="C:\\Windows\\SysWOW64\\license.rtf" (normalized: "c:\\windows\\syswow64\\license.rtf"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x178 [0116.749] GetFileType (hFile=0x178) returned 0x1 [0116.749] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e774) returned 1 [0116.749] GetFileType (hFile=0x178) returned 0x1 [0116.749] GetFileSize (in: hFile=0x178, lpFileSizeHigh=0x31e880 | out: lpFileSizeHigh=0x31e880*=0x0) returned 0x1dcf0 [0116.750] ReadFile (in: hFile=0x178, lpBuffer=0x42b7d68, nNumberOfBytesToRead=0x1dcf0, lpNumberOfBytesRead=0x31e82c, lpOverlapped=0x0 | out: lpBuffer=0x42b7d68*, lpNumberOfBytesRead=0x31e82c*=0x1dcf0, lpOverlapped=0x0) returned 1 [0116.772] GetFullPathNameW (in: lpFileName="C:\\Windows\\SysWOW64\\license.rtf", nBufferLength=0x105, lpBuffer=0x31e270, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\SysWOW64\\license.rtf", lpFilePart=0x0) returned 0x1f [0116.772] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e764) returned 1 [0116.772] CreateFileW (lpFileName="C:\\Windows\\SysWOW64\\license.rtf" (normalized: "c:\\windows\\syswow64\\license.rtf"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x178 [0116.774] GetFileType (hFile=0x178) returned 0x1 [0116.774] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e760) returned 1 [0116.774] GetFileType (hFile=0x178) returned 0x1 [0116.774] WriteFile (in: hFile=0x178, lpBuffer=0x434ce98*, nNumberOfBytesToWrite=0x1dd00, lpNumberOfBytesWritten=0x31e820, lpOverlapped=0x0 | out: lpBuffer=0x434ce98*, lpNumberOfBytesWritten=0x31e820*=0x1dd00, lpOverlapped=0x0) returned 1 [0116.777] GetFullPathNameW (in: lpFileName="C:\\Windows\\SysWOW64\\license.rtf", nBufferLength=0x105, lpBuffer=0x31e3a4, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\SysWOW64\\license.rtf", lpFilePart=0x0) returned 0x1f [0116.777] GetFullPathNameW (in: lpFileName="C:\\Windows\\SysWOW64\\license.rtf", nBufferLength=0x105, lpBuffer=0x31e3a4, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\SysWOW64\\license.rtf", lpFilePart=0x0) returned 0x1f [0116.777] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e804) returned 1 [0116.777] GetFileAttributesExW (in: lpFileName="C:\\Windows\\SysWOW64\\license.rtf" (normalized: "c:\\windows\\syswow64\\license.rtf"), fInfoLevelId=0x0, lpFileInformation=0x31e880 | out: lpFileInformation=0x31e880*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x290e3a40, ftCreationTime.dwHighDateTime=0x1ca0440, ftLastAccessTime.dwLowDateTime=0x290e3a40, ftLastAccessTime.dwHighDateTime=0x1ca0440, ftLastWriteTime.dwLowDateTime=0x29095620, ftLastWriteTime.dwHighDateTime=0x1d6eb7f, nFileSizeHigh=0x0, nFileSizeLow=0x1dd00)) returned 1 [0116.777] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e800) returned 1 [0116.777] MoveFileW (lpExistingFileName="C:\\Windows\\SysWOW64\\license.rtf" (normalized: "c:\\windows\\syswow64\\license.rtf"), lpNewFileName="C:\\Windows\\SysWOW64\\license.rtf" (normalized: "c:\\windows\\syswow64\\license.rtf")) returned 1 [0116.777] GetFullPathNameW (in: lpFileName="C:\\Windows\\SysWOW64\\locationnotificationsview.xml", nBufferLength=0x105, lpBuffer=0x31e284, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\SysWOW64\\locationnotificationsview.xml", lpFilePart=0x0) returned 0x31 [0116.777] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e778) returned 1 [0116.777] CreateFileW (lpFileName="C:\\Windows\\SysWOW64\\locationnotificationsview.xml" (normalized: "c:\\windows\\syswow64\\locationnotificationsview.xml"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x178 [0116.777] GetFileType (hFile=0x178) returned 0x1 [0116.777] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e774) returned 1 [0116.777] GetFileType (hFile=0x178) returned 0x1 [0116.778] GetFileSize (in: hFile=0x178, lpFileSizeHigh=0x31e880 | out: lpFileSizeHigh=0x31e880*=0x0) returned 0xaa7 [0116.778] ReadFile (in: hFile=0x178, lpBuffer=0x279857c, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x31e82c, lpOverlapped=0x0 | out: lpBuffer=0x279857c*, lpNumberOfBytesRead=0x31e82c*=0xaa7, lpOverlapped=0x0) returned 1 [0116.806] GetFullPathNameW (in: lpFileName="C:\\Windows\\SysWOW64\\locationnotificationsview.xml", nBufferLength=0x105, lpBuffer=0x31e270, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\SysWOW64\\locationnotificationsview.xml", lpFilePart=0x0) returned 0x31 [0116.806] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e764) returned 1 [0116.806] CreateFileW (lpFileName="C:\\Windows\\SysWOW64\\locationnotificationsview.xml" (normalized: "c:\\windows\\syswow64\\locationnotificationsview.xml"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0xffffffff [0116.808] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31d5a0) returned 1 [0116.808] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e8ac) returned 1 [0116.808] GetFullPathNameW (in: lpFileName="C:\\Windows\\TAPI", nBufferLength=0x105, lpBuffer=0x31e3b4, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\TAPI", lpFilePart=0x0) returned 0xf [0116.808] GetFullPathNameW (in: lpFileName="C:\\Windows\\TAPI\\", nBufferLength=0x105, lpBuffer=0x31e388, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\TAPI\\", lpFilePart=0x0) returned 0x10 [0116.808] FindFirstFileW (in: lpFileName="C:\\Windows\\TAPI\\*", lpFindFileData=0x31e5d4 | out: lpFindFileData=0x31e5d4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x12b00f8, ftCreationTime.dwHighDateTime=0x1ca0432, ftLastAccessTime.dwLowDateTime=0x8d561533, ftLastAccessTime.dwHighDateTime=0x1ca043f, ftLastWriteTime.dwLowDateTime=0x8d561533, ftLastWriteTime.dwHighDateTime=0x1ca043f, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x381ec0 [0116.809] FindClose (in: hFindFile=0x381ec0 | out: hFindFile=0x381ec0) returned 1 [0116.809] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e86c) returned 1 [0116.809] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e878) returned 1 [0116.809] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e8ac) returned 1 [0116.809] GetFullPathNameW (in: lpFileName="C:\\Windows\\TAPI", nBufferLength=0x105, lpBuffer=0x31e3b4, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\TAPI", lpFilePart=0x0) returned 0xf [0116.809] GetFullPathNameW (in: lpFileName="C:\\Windows\\TAPI\\", nBufferLength=0x105, lpBuffer=0x31e388, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\TAPI\\", lpFilePart=0x0) returned 0x10 [0116.809] FindFirstFileW (in: lpFileName="C:\\Windows\\TAPI\\*", lpFindFileData=0x31e5d4 | out: lpFindFileData=0x31e5d4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x12b00f8, ftCreationTime.dwHighDateTime=0x1ca0432, ftLastAccessTime.dwLowDateTime=0x8d561533, ftLastAccessTime.dwHighDateTime=0x1ca043f, ftLastWriteTime.dwLowDateTime=0x8d561533, ftLastWriteTime.dwHighDateTime=0x1ca043f, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x381ec0 [0116.809] FindClose (in: hFindFile=0x381ec0 | out: hFindFile=0x381ec0) returned 1 [0116.809] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e86c) returned 1 [0116.809] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e878) returned 1 [0116.809] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e8ac) returned 1 [0116.810] GetFullPathNameW (in: lpFileName="C:\\Windows\\Tasks", nBufferLength=0x105, lpBuffer=0x31e3b4, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\Tasks", lpFilePart=0x0) returned 0x10 [0116.810] GetFullPathNameW (in: lpFileName="C:\\Windows\\Tasks\\", nBufferLength=0x105, lpBuffer=0x31e388, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\Tasks\\", lpFilePart=0x0) returned 0x11 [0116.810] FindFirstFileW (in: lpFileName="C:\\Windows\\Tasks\\*", lpFindFileData=0x31e5d4 | out: lpFindFileData=0x31e5d4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x12b00f8, ftCreationTime.dwHighDateTime=0x1ca0432, ftLastAccessTime.dwLowDateTime=0xe3cd110, ftLastAccessTime.dwHighDateTime=0x1d35d06, ftLastWriteTime.dwLowDateTime=0xe3cd110, ftLastWriteTime.dwHighDateTime=0x1d35d06, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x381ec0 [0116.810] FindClose (in: hFindFile=0x381ec0 | out: hFindFile=0x381ec0) returned 1 [0116.810] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e86c) returned 1 [0116.810] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e878) returned 1 [0116.810] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e8ac) returned 1 [0116.810] GetFullPathNameW (in: lpFileName="C:\\Windows\\Tasks", nBufferLength=0x105, lpBuffer=0x31e3b4, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\Tasks", lpFilePart=0x0) returned 0x10 [0116.810] GetFullPathNameW (in: lpFileName="C:\\Windows\\Tasks\\", nBufferLength=0x105, lpBuffer=0x31e388, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\Tasks\\", lpFilePart=0x0) returned 0x11 [0116.810] FindFirstFileW (in: lpFileName="C:\\Windows\\Tasks\\*", lpFindFileData=0x31e5d4 | out: lpFindFileData=0x31e5d4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x12b00f8, ftCreationTime.dwHighDateTime=0x1ca0432, ftLastAccessTime.dwLowDateTime=0xe3cd110, ftLastAccessTime.dwHighDateTime=0x1d35d06, ftLastWriteTime.dwLowDateTime=0xe3cd110, ftLastWriteTime.dwHighDateTime=0x1d35d06, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x381ec0 [0116.810] FindClose (in: hFindFile=0x381ec0 | out: hFindFile=0x381ec0) returned 1 [0116.810] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e86c) returned 1 [0116.810] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e878) returned 1 [0116.810] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e8ac) returned 1 [0116.810] GetFullPathNameW (in: lpFileName="C:\\Windows\\Temp", nBufferLength=0x105, lpBuffer=0x31e3b4, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\Temp", lpFilePart=0x0) returned 0xf [0116.810] GetFullPathNameW (in: lpFileName="C:\\Windows\\Temp\\", nBufferLength=0x105, lpBuffer=0x31e388, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\Temp\\", lpFilePart=0x0) returned 0x10 [0116.810] FindFirstFileW (in: lpFileName="C:\\Windows\\Temp\\*", lpFindFileData=0x31e5d4 | out: lpFindFileData=0x31e5d4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x12d6252, ftCreationTime.dwHighDateTime=0x1ca0432, ftLastAccessTime.dwLowDateTime=0xd7782780, ftLastAccessTime.dwHighDateTime=0x1d5e82a, ftLastWriteTime.dwLowDateTime=0xd7782780, ftLastWriteTime.dwHighDateTime=0x1d5e82a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x381ec0 [0116.811] FindClose (in: hFindFile=0x381ec0 | out: hFindFile=0x381ec0) returned 1 [0116.811] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e86c) returned 1 [0116.811] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e878) returned 1 [0116.811] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e8ac) returned 1 [0116.811] GetFullPathNameW (in: lpFileName="C:\\Windows\\Temp", nBufferLength=0x105, lpBuffer=0x31e3b4, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\Temp", lpFilePart=0x0) returned 0xf [0116.811] GetFullPathNameW (in: lpFileName="C:\\Windows\\Temp\\", nBufferLength=0x105, lpBuffer=0x31e388, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\Temp\\", lpFilePart=0x0) returned 0x10 [0116.811] FindFirstFileW (in: lpFileName="C:\\Windows\\Temp\\*", lpFindFileData=0x31e5d4 | out: lpFindFileData=0x31e5d4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x12d6252, ftCreationTime.dwHighDateTime=0x1ca0432, ftLastAccessTime.dwLowDateTime=0xd7782780, ftLastAccessTime.dwHighDateTime=0x1d5e82a, ftLastWriteTime.dwLowDateTime=0xd7782780, ftLastWriteTime.dwHighDateTime=0x1d5e82a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x381ec0 [0116.811] FindClose (in: hFindFile=0x381ec0 | out: hFindFile=0x381ec0) returned 1 [0116.811] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e86c) returned 1 [0116.811] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e878) returned 1 [0116.811] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e834) returned 1 [0116.811] GetFullPathNameW (in: lpFileName="C:\\Windows\\Temp\\Crashpad", nBufferLength=0x105, lpBuffer=0x31e33c, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\Temp\\Crashpad", lpFilePart=0x0) returned 0x18 [0116.811] GetFullPathNameW (in: lpFileName="C:\\Windows\\Temp\\Crashpad\\", nBufferLength=0x105, lpBuffer=0x31e310, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\Temp\\Crashpad\\", lpFilePart=0x0) returned 0x19 [0116.811] FindFirstFileW (in: lpFileName="C:\\Windows\\Temp\\Crashpad\\*", lpFindFileData=0x31e55c | out: lpFindFileData=0x31e55c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7aa9d740, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x7aa9d740, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x7aa9d740, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x381ec0 [0116.812] FindClose (in: hFindFile=0x381ec0 | out: hFindFile=0x381ec0) returned 1 [0116.812] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e7f4) returned 1 [0116.812] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e800) returned 1 [0116.812] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e834) returned 1 [0116.812] GetFullPathNameW (in: lpFileName="C:\\Windows\\Temp\\Crashpad", nBufferLength=0x105, lpBuffer=0x31e33c, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\Temp\\Crashpad", lpFilePart=0x0) returned 0x18 [0116.812] GetFullPathNameW (in: lpFileName="C:\\Windows\\Temp\\Crashpad\\", nBufferLength=0x105, lpBuffer=0x31e310, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\Temp\\Crashpad\\", lpFilePart=0x0) returned 0x19 [0116.812] FindFirstFileW (in: lpFileName="C:\\Windows\\Temp\\Crashpad\\*", lpFindFileData=0x31e55c | out: lpFindFileData=0x31e55c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7aa9d740, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x7aa9d740, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x7aa9d740, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x381ec0 [0116.812] FindClose (in: hFindFile=0x381ec0 | out: hFindFile=0x381ec0) returned 1 [0116.812] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e7f4) returned 1 [0116.812] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e800) returned 1 [0116.812] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e7bc) returned 1 [0116.812] GetFullPathNameW (in: lpFileName="C:\\Windows\\Temp\\Crashpad\\reports", nBufferLength=0x105, lpBuffer=0x31e2c4, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\Temp\\Crashpad\\reports", lpFilePart=0x0) returned 0x20 [0116.812] GetFullPathNameW (in: lpFileName="C:\\Windows\\Temp\\Crashpad\\reports\\", nBufferLength=0x105, lpBuffer=0x31e298, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\Temp\\Crashpad\\reports\\", lpFilePart=0x0) returned 0x21 [0116.812] FindFirstFileW (in: lpFileName="C:\\Windows\\Temp\\Crashpad\\reports\\*", lpFindFileData=0x31e4e4 | out: lpFindFileData=0x31e4e4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7aa9d740, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x7aa9d740, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x7aa9d740, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x381ec0 [0116.813] FindClose (in: hFindFile=0x381ec0 | out: hFindFile=0x381ec0) returned 1 [0116.813] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e77c) returned 1 [0116.813] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e788) returned 1 [0116.813] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e7bc) returned 1 [0116.813] GetFullPathNameW (in: lpFileName="C:\\Windows\\Temp\\Crashpad\\reports", nBufferLength=0x105, lpBuffer=0x31e2c4, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\Temp\\Crashpad\\reports", lpFilePart=0x0) returned 0x20 [0116.813] GetFullPathNameW (in: lpFileName="C:\\Windows\\Temp\\Crashpad\\reports\\", nBufferLength=0x105, lpBuffer=0x31e298, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\Temp\\Crashpad\\reports\\", lpFilePart=0x0) returned 0x21 [0116.813] FindFirstFileW (in: lpFileName="C:\\Windows\\Temp\\Crashpad\\reports\\*", lpFindFileData=0x31e4e4 | out: lpFindFileData=0x31e4e4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7aa9d740, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x7aa9d740, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x7aa9d740, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x381ec0 [0116.813] FindClose (in: hFindFile=0x381ec0 | out: hFindFile=0x381ec0) returned 1 [0116.813] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e77c) returned 1 [0116.813] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e788) returned 1 [0116.813] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e834) returned 1 [0116.814] GetFullPathNameW (in: lpFileName="C:\\Windows\\Temp\\MPInstrumentation", nBufferLength=0x105, lpBuffer=0x31e33c, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\Temp\\MPInstrumentation", lpFilePart=0x0) returned 0x21 [0116.814] GetFullPathNameW (in: lpFileName="C:\\Windows\\Temp\\MPInstrumentation\\", nBufferLength=0x105, lpBuffer=0x31e310, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\Temp\\MPInstrumentation\\", lpFilePart=0x0) returned 0x22 [0116.814] FindFirstFileW (in: lpFileName="C:\\Windows\\Temp\\MPInstrumentation\\*", lpFindFileData=0x31e55c | out: lpFindFileData=0x31e55c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x13161a60, ftCreationTime.dwHighDateTime=0x1d4ae2d, ftLastAccessTime.dwLowDateTime=0x13187bc0, ftLastAccessTime.dwHighDateTime=0x1d4ae2d, ftLastWriteTime.dwLowDateTime=0x1326c400, ftLastWriteTime.dwHighDateTime=0x1d4ae2d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x381ec0 [0116.822] FindClose (in: hFindFile=0x381ec0 | out: hFindFile=0x381ec0) returned 1 [0116.822] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e7f4) returned 1 [0116.822] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e800) returned 1 [0116.822] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e834) returned 1 [0116.822] GetFullPathNameW (in: lpFileName="C:\\Windows\\Temp\\MPInstrumentation", nBufferLength=0x105, lpBuffer=0x31e33c, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\Temp\\MPInstrumentation", lpFilePart=0x0) returned 0x21 [0116.822] GetFullPathNameW (in: lpFileName="C:\\Windows\\Temp\\MPInstrumentation\\", nBufferLength=0x105, lpBuffer=0x31e310, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\Temp\\MPInstrumentation\\", lpFilePart=0x0) returned 0x22 [0116.822] FindFirstFileW (in: lpFileName="C:\\Windows\\Temp\\MPInstrumentation\\*", lpFindFileData=0x31e55c | out: lpFindFileData=0x31e55c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x13161a60, ftCreationTime.dwHighDateTime=0x1d4ae2d, ftLastAccessTime.dwLowDateTime=0x13187bc0, ftLastAccessTime.dwHighDateTime=0x1d4ae2d, ftLastWriteTime.dwLowDateTime=0x1326c400, ftLastWriteTime.dwHighDateTime=0x1d4ae2d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x381ec0 [0116.822] FindClose (in: hFindFile=0x381ec0 | out: hFindFile=0x381ec0) returned 1 [0116.822] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e7f4) returned 1 [0116.822] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e800) returned 1 [0116.822] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e8ac) returned 1 [0116.822] GetFullPathNameW (in: lpFileName="C:\\Windows\\tracing", nBufferLength=0x105, lpBuffer=0x31e3b4, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\tracing", lpFilePart=0x0) returned 0x12 [0116.822] GetFullPathNameW (in: lpFileName="C:\\Windows\\tracing\\", nBufferLength=0x105, lpBuffer=0x31e388, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\tracing\\", lpFilePart=0x0) returned 0x13 [0116.822] FindFirstFileW (in: lpFileName="C:\\Windows\\tracing\\*", lpFindFileData=0x31e5d4 | out: lpFindFileData=0x31e5d4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x12d6252, ftCreationTime.dwHighDateTime=0x1ca0432, ftLastAccessTime.dwLowDateTime=0x12d6252, ftLastAccessTime.dwHighDateTime=0x1ca0432, ftLastWriteTime.dwLowDateTime=0x9f16e414, ftLastWriteTime.dwHighDateTime=0x1ca042b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x381ec0 [0116.822] FindClose (in: hFindFile=0x381ec0 | out: hFindFile=0x381ec0) returned 1 [0116.822] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e86c) returned 1 [0116.823] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e878) returned 1 [0116.823] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e8ac) returned 1 [0116.823] GetFullPathNameW (in: lpFileName="C:\\Windows\\tracing", nBufferLength=0x105, lpBuffer=0x31e3b4, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\tracing", lpFilePart=0x0) returned 0x12 [0116.823] GetFullPathNameW (in: lpFileName="C:\\Windows\\tracing\\", nBufferLength=0x105, lpBuffer=0x31e388, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\tracing\\", lpFilePart=0x0) returned 0x13 [0116.823] FindFirstFileW (in: lpFileName="C:\\Windows\\tracing\\*", lpFindFileData=0x31e5d4 | out: lpFindFileData=0x31e5d4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x12d6252, ftCreationTime.dwHighDateTime=0x1ca0432, ftLastAccessTime.dwLowDateTime=0x12d6252, ftLastAccessTime.dwHighDateTime=0x1ca0432, ftLastWriteTime.dwLowDateTime=0x9f16e414, ftLastWriteTime.dwHighDateTime=0x1ca042b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x381ec0 [0116.823] FindClose (in: hFindFile=0x381ec0 | out: hFindFile=0x381ec0) returned 1 [0116.823] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e86c) returned 1 [0116.823] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e878) returned 1 [0116.823] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e8ac) returned 1 [0116.823] GetFullPathNameW (in: lpFileName="C:\\Windows\\twain_32", nBufferLength=0x105, lpBuffer=0x31e3b4, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\twain_32", lpFilePart=0x0) returned 0x13 [0116.823] GetFullPathNameW (in: lpFileName="C:\\Windows\\twain_32\\", nBufferLength=0x105, lpBuffer=0x31e388, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\twain_32\\", lpFilePart=0x0) returned 0x14 [0116.823] FindFirstFileW (in: lpFileName="C:\\Windows\\twain_32\\*", lpFindFileData=0x31e5d4 | out: lpFindFileData=0x31e5d4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x800b91b1, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x80cc6128, ftLastAccessTime.dwHighDateTime=0x1ca0444, ftLastWriteTime.dwLowDateTime=0x80cc6128, ftLastWriteTime.dwHighDateTime=0x1ca0444, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x381ec0 [0116.823] FindClose (in: hFindFile=0x381ec0 | out: hFindFile=0x381ec0) returned 1 [0116.823] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e86c) returned 1 [0116.823] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e878) returned 1 [0116.823] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e8ac) returned 1 [0116.823] GetFullPathNameW (in: lpFileName="C:\\Windows\\twain_32", nBufferLength=0x105, lpBuffer=0x31e3b4, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\twain_32", lpFilePart=0x0) returned 0x13 [0116.823] GetFullPathNameW (in: lpFileName="C:\\Windows\\twain_32\\", nBufferLength=0x105, lpBuffer=0x31e388, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\twain_32\\", lpFilePart=0x0) returned 0x14 [0116.823] FindFirstFileW (in: lpFileName="C:\\Windows\\twain_32\\*", lpFindFileData=0x31e5d4 | out: lpFindFileData=0x31e5d4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x800b91b1, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x80cc6128, ftLastAccessTime.dwHighDateTime=0x1ca0444, ftLastWriteTime.dwLowDateTime=0x80cc6128, ftLastWriteTime.dwHighDateTime=0x1ca0444, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x381ec0 [0116.824] FindClose (in: hFindFile=0x381ec0 | out: hFindFile=0x381ec0) returned 1 [0116.824] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e86c) returned 1 [0116.824] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e878) returned 1 [0116.824] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e8ac) returned 1 [0116.824] GetFullPathNameW (in: lpFileName="C:\\Windows\\Vss", nBufferLength=0x105, lpBuffer=0x31e3b4, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\Vss", lpFilePart=0x0) returned 0xe [0116.824] GetFullPathNameW (in: lpFileName="C:\\Windows\\Vss\\", nBufferLength=0x105, lpBuffer=0x31e388, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\Vss\\", lpFilePart=0x0) returned 0xf [0116.824] FindFirstFileW (in: lpFileName="C:\\Windows\\Vss\\*", lpFindFileData=0x31e5d4 | out: lpFindFileData=0x31e5d4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x12d6252, ftCreationTime.dwHighDateTime=0x1ca0432, ftLastAccessTime.dwLowDateTime=0x12d6252, ftLastAccessTime.dwHighDateTime=0x1ca0432, ftLastWriteTime.dwLowDateTime=0x12d6252, ftLastWriteTime.dwHighDateTime=0x1ca0432, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x381ec0 [0116.825] FindClose (in: hFindFile=0x381ec0 | out: hFindFile=0x381ec0) returned 1 [0116.825] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e86c) returned 1 [0116.825] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e878) returned 1 [0116.825] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e8ac) returned 1 [0116.825] GetFullPathNameW (in: lpFileName="C:\\Windows\\Vss", nBufferLength=0x105, lpBuffer=0x31e3b4, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\Vss", lpFilePart=0x0) returned 0xe [0116.825] GetFullPathNameW (in: lpFileName="C:\\Windows\\Vss\\", nBufferLength=0x105, lpBuffer=0x31e388, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\Vss\\", lpFilePart=0x0) returned 0xf [0116.825] FindFirstFileW (in: lpFileName="C:\\Windows\\Vss\\*", lpFindFileData=0x31e5d4 | out: lpFindFileData=0x31e5d4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x12d6252, ftCreationTime.dwHighDateTime=0x1ca0432, ftLastAccessTime.dwLowDateTime=0x12d6252, ftLastAccessTime.dwHighDateTime=0x1ca0432, ftLastWriteTime.dwLowDateTime=0x12d6252, ftLastWriteTime.dwHighDateTime=0x1ca0432, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x381ec0 [0116.825] FindClose (in: hFindFile=0x381ec0 | out: hFindFile=0x381ec0) returned 1 [0116.825] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e86c) returned 1 [0116.825] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e878) returned 1 [0116.825] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e834) returned 1 [0116.825] GetFullPathNameW (in: lpFileName="C:\\Windows\\Vss\\Writers", nBufferLength=0x105, lpBuffer=0x31e33c, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\Vss\\Writers", lpFilePart=0x0) returned 0x16 [0116.825] GetFullPathNameW (in: lpFileName="C:\\Windows\\Vss\\Writers\\", nBufferLength=0x105, lpBuffer=0x31e310, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\Vss\\Writers\\", lpFilePart=0x0) returned 0x17 [0116.825] FindFirstFileW (in: lpFileName="C:\\Windows\\Vss\\Writers\\*", lpFindFileData=0x31e55c | out: lpFindFileData=0x31e55c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x12d6252, ftCreationTime.dwHighDateTime=0x1ca0432, ftLastAccessTime.dwLowDateTime=0x12fc3ac, ftLastAccessTime.dwHighDateTime=0x1ca0432, ftLastWriteTime.dwLowDateTime=0x12fc3ac, ftLastWriteTime.dwHighDateTime=0x1ca0432, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x381ec0 [0116.826] FindClose (in: hFindFile=0x381ec0 | out: hFindFile=0x381ec0) returned 1 [0116.826] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e7f4) returned 1 [0116.826] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e800) returned 1 [0116.826] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e834) returned 1 [0116.826] GetFullPathNameW (in: lpFileName="C:\\Windows\\Vss\\Writers", nBufferLength=0x105, lpBuffer=0x31e33c, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\Vss\\Writers", lpFilePart=0x0) returned 0x16 [0116.826] GetFullPathNameW (in: lpFileName="C:\\Windows\\Vss\\Writers\\", nBufferLength=0x105, lpBuffer=0x31e310, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\Vss\\Writers\\", lpFilePart=0x0) returned 0x17 [0116.826] FindFirstFileW (in: lpFileName="C:\\Windows\\Vss\\Writers\\*", lpFindFileData=0x31e55c | out: lpFindFileData=0x31e55c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x12d6252, ftCreationTime.dwHighDateTime=0x1ca0432, ftLastAccessTime.dwLowDateTime=0x12fc3ac, ftLastAccessTime.dwHighDateTime=0x1ca0432, ftLastWriteTime.dwLowDateTime=0x12fc3ac, ftLastWriteTime.dwHighDateTime=0x1ca0432, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x381ec0 [0116.826] FindClose (in: hFindFile=0x381ec0 | out: hFindFile=0x381ec0) returned 1 [0116.826] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e7f4) returned 1 [0116.826] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e800) returned 1 [0116.826] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e7bc) returned 1 [0116.826] GetFullPathNameW (in: lpFileName="C:\\Windows\\Vss\\Writers\\Application", nBufferLength=0x105, lpBuffer=0x31e2c4, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\Vss\\Writers\\Application", lpFilePart=0x0) returned 0x22 [0116.826] GetFullPathNameW (in: lpFileName="C:\\Windows\\Vss\\Writers\\Application\\", nBufferLength=0x105, lpBuffer=0x31e298, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\Vss\\Writers\\Application\\", lpFilePart=0x0) returned 0x23 [0116.826] FindFirstFileW (in: lpFileName="C:\\Windows\\Vss\\Writers\\Application\\*", lpFindFileData=0x31e4e4 | out: lpFindFileData=0x31e4e4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x12fc3ac, ftCreationTime.dwHighDateTime=0x1ca0432, ftLastAccessTime.dwLowDateTime=0x12fc3ac, ftLastAccessTime.dwHighDateTime=0x1ca0432, ftLastWriteTime.dwLowDateTime=0xa8ce54b5, ftLastWriteTime.dwHighDateTime=0x1ca042b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x381ec0 [0116.826] FindClose (in: hFindFile=0x381ec0 | out: hFindFile=0x381ec0) returned 1 [0116.826] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e77c) returned 1 [0116.826] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e788) returned 1 [0116.826] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e7bc) returned 1 [0116.827] GetFullPathNameW (in: lpFileName="C:\\Windows\\Vss\\Writers\\Application", nBufferLength=0x105, lpBuffer=0x31e2c4, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\Vss\\Writers\\Application", lpFilePart=0x0) returned 0x22 [0116.827] GetFullPathNameW (in: lpFileName="C:\\Windows\\Vss\\Writers\\Application\\", nBufferLength=0x105, lpBuffer=0x31e298, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\Vss\\Writers\\Application\\", lpFilePart=0x0) returned 0x23 [0116.827] FindFirstFileW (in: lpFileName="C:\\Windows\\Vss\\Writers\\Application\\*", lpFindFileData=0x31e4e4 | out: lpFindFileData=0x31e4e4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x12fc3ac, ftCreationTime.dwHighDateTime=0x1ca0432, ftLastAccessTime.dwLowDateTime=0x12fc3ac, ftLastAccessTime.dwHighDateTime=0x1ca0432, ftLastWriteTime.dwLowDateTime=0xa8ce54b5, ftLastWriteTime.dwHighDateTime=0x1ca042b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x381ec0 [0116.827] FindClose (in: hFindFile=0x381ec0 | out: hFindFile=0x381ec0) returned 1 [0116.827] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e77c) returned 1 [0116.827] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e788) returned 1 [0116.827] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e7bc) returned 1 [0116.827] GetFullPathNameW (in: lpFileName="C:\\Windows\\Vss\\Writers\\System", nBufferLength=0x105, lpBuffer=0x31e2c4, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\Vss\\Writers\\System", lpFilePart=0x0) returned 0x1d [0116.827] GetFullPathNameW (in: lpFileName="C:\\Windows\\Vss\\Writers\\System\\", nBufferLength=0x105, lpBuffer=0x31e298, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\Vss\\Writers\\System\\", lpFilePart=0x0) returned 0x1e [0116.827] FindFirstFileW (in: lpFileName="C:\\Windows\\Vss\\Writers\\System\\*", lpFindFileData=0x31e4e4 | out: lpFindFileData=0x31e4e4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x12fc3ac, ftCreationTime.dwHighDateTime=0x1ca0432, ftLastAccessTime.dwLowDateTime=0x4460464, ftLastAccessTime.dwHighDateTime=0x1ca0432, ftLastWriteTime.dwLowDateTime=0x4460464, ftLastWriteTime.dwHighDateTime=0x1ca0432, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x381ec0 [0116.838] FindClose (in: hFindFile=0x381ec0 | out: hFindFile=0x381ec0) returned 1 [0116.838] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e77c) returned 1 [0116.838] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e788) returned 1 [0116.838] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e7bc) returned 1 [0116.838] GetFullPathNameW (in: lpFileName="C:\\Windows\\Vss\\Writers\\System", nBufferLength=0x105, lpBuffer=0x31e2c4, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\Vss\\Writers\\System", lpFilePart=0x0) returned 0x1d [0116.839] GetFullPathNameW (in: lpFileName="C:\\Windows\\Vss\\Writers\\System\\", nBufferLength=0x105, lpBuffer=0x31e298, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\Vss\\Writers\\System\\", lpFilePart=0x0) returned 0x1e [0116.839] FindFirstFileW (in: lpFileName="C:\\Windows\\Vss\\Writers\\System\\*", lpFindFileData=0x31e4e4 | out: lpFindFileData=0x31e4e4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x12fc3ac, ftCreationTime.dwHighDateTime=0x1ca0432, ftLastAccessTime.dwLowDateTime=0x4460464, ftLastAccessTime.dwHighDateTime=0x1ca0432, ftLastWriteTime.dwLowDateTime=0x4460464, ftLastWriteTime.dwHighDateTime=0x1ca0432, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x381ec0 [0116.839] FindClose (in: hFindFile=0x381ec0 | out: hFindFile=0x381ec0) returned 1 [0116.840] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e77c) returned 1 [0116.840] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e788) returned 1 [0116.840] GetFullPathNameW (in: lpFileName="C:\\Windows\\Vss\\Writers\\System\\0bada1de-01a9-4625-8278-69e735f39dd2.xml", nBufferLength=0x105, lpBuffer=0x31e194, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\Vss\\Writers\\System\\0bada1de-01a9-4625-8278-69e735f39dd2.xml", lpFilePart=0x0) returned 0x46 [0116.840] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e688) returned 1 [0116.840] CreateFileW (lpFileName="C:\\Windows\\Vss\\Writers\\System\\0bada1de-01a9-4625-8278-69e735f39dd2.xml" (normalized: "c:\\windows\\vss\\writers\\system\\0bada1de-01a9-4625-8278-69e735f39dd2.xml"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x178 [0116.841] GetFileType (hFile=0x178) returned 0x1 [0116.841] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e684) returned 1 [0116.841] GetFileType (hFile=0x178) returned 0x1 [0116.842] GetFileSize (in: hFile=0x178, lpFileSizeHigh=0x31e790 | out: lpFileSizeHigh=0x31e790*=0x0) returned 0x1938 [0116.842] ReadFile (in: hFile=0x178, lpBuffer=0x27f7f08, nNumberOfBytesToRead=0x1938, lpNumberOfBytesRead=0x31e73c, lpOverlapped=0x0 | out: lpBuffer=0x27f7f08*, lpNumberOfBytesRead=0x31e73c*=0x1938, lpOverlapped=0x0) returned 1 [0116.859] GetFullPathNameW (in: lpFileName="C:\\Windows\\Vss\\Writers\\System\\0bada1de-01a9-4625-8278-69e735f39dd2.xml", nBufferLength=0x105, lpBuffer=0x31e180, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\Vss\\Writers\\System\\0bada1de-01a9-4625-8278-69e735f39dd2.xml", lpFilePart=0x0) returned 0x46 [0116.859] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e674) returned 1 [0116.859] CreateFileW (lpFileName="C:\\Windows\\Vss\\Writers\\System\\0bada1de-01a9-4625-8278-69e735f39dd2.xml" (normalized: "c:\\windows\\vss\\writers\\system\\0bada1de-01a9-4625-8278-69e735f39dd2.xml"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x178 [0116.860] GetFileType (hFile=0x178) returned 0x1 [0116.860] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e670) returned 1 [0116.860] GetFileType (hFile=0x178) returned 0x1 [0116.860] WriteFile (in: hFile=0x178, lpBuffer=0x26758f0*, nNumberOfBytesToWrite=0x1940, lpNumberOfBytesWritten=0x31e730, lpOverlapped=0x0 | out: lpBuffer=0x26758f0*, lpNumberOfBytesWritten=0x31e730*=0x1940, lpOverlapped=0x0) returned 1 [0116.861] GetFullPathNameW (in: lpFileName="C:\\Windows\\Vss\\Writers\\System\\0bada1de-01a9-4625-8278-69e735f39dd2.xml", nBufferLength=0x105, lpBuffer=0x31e2b4, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\Vss\\Writers\\System\\0bada1de-01a9-4625-8278-69e735f39dd2.xml", lpFilePart=0x0) returned 0x46 [0116.861] GetFullPathNameW (in: lpFileName="C:\\Windows\\Vss\\Writers\\System\\0bada1de-01a9-4625-8278-69e735f39dd2.xml", nBufferLength=0x105, lpBuffer=0x31e2b4, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\Vss\\Writers\\System\\0bada1de-01a9-4625-8278-69e735f39dd2.xml", lpFilePart=0x0) returned 0x46 [0116.861] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e714) returned 1 [0116.861] GetFileAttributesExW (in: lpFileName="C:\\Windows\\Vss\\Writers\\System\\0bada1de-01a9-4625-8278-69e735f39dd2.xml" (normalized: "c:\\windows\\vss\\writers\\system\\0bada1de-01a9-4625-8278-69e735f39dd2.xml"), fInfoLevelId=0x0, lpFileInformation=0x31e790 | out: lpFileInformation=0x31e790*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x96191dc9, ftCreationTime.dwHighDateTime=0x1ca042b, ftLastAccessTime.dwLowDateTime=0x96191dc9, ftLastAccessTime.dwHighDateTime=0x1ca042b, ftLastWriteTime.dwLowDateTime=0x29179e60, ftLastWriteTime.dwHighDateTime=0x1d6eb7f, nFileSizeHigh=0x0, nFileSizeLow=0x1940)) returned 1 [0116.861] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e710) returned 1 [0116.861] MoveFileW (lpExistingFileName="C:\\Windows\\Vss\\Writers\\System\\0bada1de-01a9-4625-8278-69e735f39dd2.xml" (normalized: "c:\\windows\\vss\\writers\\system\\0bada1de-01a9-4625-8278-69e735f39dd2.xml"), lpNewFileName="C:\\Windows\\Vss\\Writers\\System\\0bada1de-01a9-4625-8278-69e735f39dd2.xml" (normalized: "c:\\windows\\vss\\writers\\system\\0bada1de-01a9-4625-8278-69e735f39dd2.xml")) returned 1 [0116.862] GetFullPathNameW (in: lpFileName="C:\\Windows\\Vss\\Writers\\System\\75DFB225-E2E4-4d39-9AC9-FFAFF65DDF06.xml", nBufferLength=0x105, lpBuffer=0x31e194, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\Vss\\Writers\\System\\75DFB225-E2E4-4d39-9AC9-FFAFF65DDF06.xml", lpFilePart=0x0) returned 0x46 [0116.862] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e688) returned 1 [0116.862] CreateFileW (lpFileName="C:\\Windows\\Vss\\Writers\\System\\75DFB225-E2E4-4d39-9AC9-FFAFF65DDF06.xml" (normalized: "c:\\windows\\vss\\writers\\system\\75dfb225-e2e4-4d39-9ac9-ffaff65ddf06.xml"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x178 [0116.862] GetFileType (hFile=0x178) returned 0x1 [0116.862] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e684) returned 1 [0116.862] GetFileType (hFile=0x178) returned 0x1 [0116.862] GetFileSize (in: hFile=0x178, lpFileSizeHigh=0x31e790 | out: lpFileSizeHigh=0x31e790*=0x0) returned 0xad8 [0116.863] ReadFile (in: hFile=0x178, lpBuffer=0x2678120, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x31e73c, lpOverlapped=0x0 | out: lpBuffer=0x2678120*, lpNumberOfBytesRead=0x31e73c*=0xad8, lpOverlapped=0x0) returned 1 [0116.897] GetFullPathNameW (in: lpFileName="C:\\Windows\\Vss\\Writers\\System\\75DFB225-E2E4-4d39-9AC9-FFAFF65DDF06.xml", nBufferLength=0x105, lpBuffer=0x31e180, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\Vss\\Writers\\System\\75DFB225-E2E4-4d39-9AC9-FFAFF65DDF06.xml", lpFilePart=0x0) returned 0x46 [0116.897] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e674) returned 1 [0116.897] CreateFileW (lpFileName="C:\\Windows\\Vss\\Writers\\System\\75DFB225-E2E4-4d39-9AC9-FFAFF65DDF06.xml" (normalized: "c:\\windows\\vss\\writers\\system\\75dfb225-e2e4-4d39-9ac9-ffaff65ddf06.xml"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x178 [0116.898] GetFileType (hFile=0x178) returned 0x1 [0116.898] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e670) returned 1 [0116.898] GetFileType (hFile=0x178) returned 0x1 [0116.898] WriteFile (in: hFile=0x178, lpBuffer=0x26c982c*, nNumberOfBytesToWrite=0xae0, lpNumberOfBytesWritten=0x31e704, lpOverlapped=0x0 | out: lpBuffer=0x26c982c*, lpNumberOfBytesWritten=0x31e704*=0xae0, lpOverlapped=0x0) returned 1 [0116.905] GetFullPathNameW (in: lpFileName="C:\\Windows\\Vss\\Writers\\System\\75DFB225-E2E4-4d39-9AC9-FFAFF65DDF06.xml", nBufferLength=0x105, lpBuffer=0x31e2b4, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\Vss\\Writers\\System\\75DFB225-E2E4-4d39-9AC9-FFAFF65DDF06.xml", lpFilePart=0x0) returned 0x46 [0116.905] GetFullPathNameW (in: lpFileName="C:\\Windows\\Vss\\Writers\\System\\75DFB225-E2E4-4d39-9AC9-FFAFF65DDF06.xml", nBufferLength=0x105, lpBuffer=0x31e2b4, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\Vss\\Writers\\System\\75DFB225-E2E4-4d39-9AC9-FFAFF65DDF06.xml", lpFilePart=0x0) returned 0x46 [0116.905] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e714) returned 1 [0116.905] GetFileAttributesExW (in: lpFileName="C:\\Windows\\Vss\\Writers\\System\\75DFB225-E2E4-4d39-9AC9-FFAFF65DDF06.xml" (normalized: "c:\\windows\\vss\\writers\\system\\75dfb225-e2e4-4d39-9ac9-ffaff65ddf06.xml"), fInfoLevelId=0x0, lpFileInformation=0x31e790 | out: lpFileInformation=0x31e790*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8d3176f, ftCreationTime.dwHighDateTime=0x1ca042b, ftLastAccessTime.dwLowDateTime=0xa8d3176f, ftLastAccessTime.dwHighDateTime=0x1ca042b, ftLastWriteTime.dwLowDateTime=0x291c6120, ftLastWriteTime.dwHighDateTime=0x1d6eb7f, nFileSizeHigh=0x0, nFileSizeLow=0xae0)) returned 1 [0116.906] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e710) returned 1 [0116.906] MoveFileW (lpExistingFileName="C:\\Windows\\Vss\\Writers\\System\\75DFB225-E2E4-4d39-9AC9-FFAFF65DDF06.xml" (normalized: "c:\\windows\\vss\\writers\\system\\75dfb225-e2e4-4d39-9ac9-ffaff65ddf06.xml"), lpNewFileName="C:\\Windows\\Vss\\Writers\\System\\75DFB225-E2E4-4d39-9AC9-FFAFF65DDF06.xml" (normalized: "c:\\windows\\vss\\writers\\system\\75dfb225-e2e4-4d39-9ac9-ffaff65ddf06.xml")) returned 1 [0116.906] GetFullPathNameW (in: lpFileName="C:\\Windows\\Vss\\Writers\\System\\D61D61C8-D73A-4EEE-8CDD-F6F9786B7124.xml", nBufferLength=0x105, lpBuffer=0x31e194, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\Vss\\Writers\\System\\D61D61C8-D73A-4EEE-8CDD-F6F9786B7124.xml", lpFilePart=0x0) returned 0x46 [0116.906] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e688) returned 1 [0116.906] CreateFileW (lpFileName="C:\\Windows\\Vss\\Writers\\System\\D61D61C8-D73A-4EEE-8CDD-F6F9786B7124.xml" (normalized: "c:\\windows\\vss\\writers\\system\\d61d61c8-d73a-4eee-8cdd-f6f9786b7124.xml"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x178 [0116.906] GetFileType (hFile=0x178) returned 0x1 [0116.906] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e684) returned 1 [0116.906] GetFileType (hFile=0x178) returned 0x1 [0116.907] GetFileSize (in: hFile=0x178, lpFileSizeHigh=0x31e790 | out: lpFileSizeHigh=0x31e790*=0x0) returned 0xc74 [0116.907] ReadFile (in: hFile=0x178, lpBuffer=0x26cb760, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x31e73c, lpOverlapped=0x0 | out: lpBuffer=0x26cb760*, lpNumberOfBytesRead=0x31e73c*=0xc74, lpOverlapped=0x0) returned 1 [0116.925] GetFullPathNameW (in: lpFileName="C:\\Windows\\Vss\\Writers\\System\\D61D61C8-D73A-4EEE-8CDD-F6F9786B7124.xml", nBufferLength=0x105, lpBuffer=0x31e180, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\Vss\\Writers\\System\\D61D61C8-D73A-4EEE-8CDD-F6F9786B7124.xml", lpFilePart=0x0) returned 0x46 [0116.925] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e674) returned 1 [0116.925] CreateFileW (lpFileName="C:\\Windows\\Vss\\Writers\\System\\D61D61C8-D73A-4EEE-8CDD-F6F9786B7124.xml" (normalized: "c:\\windows\\vss\\writers\\system\\d61d61c8-d73a-4eee-8cdd-f6f9786b7124.xml"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x178 [0116.926] GetFileType (hFile=0x178) returned 0x1 [0116.926] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e670) returned 1 [0116.926] GetFileType (hFile=0x178) returned 0x1 [0116.926] WriteFile (in: hFile=0x178, lpBuffer=0x271d534*, nNumberOfBytesToWrite=0xc80, lpNumberOfBytesWritten=0x31e704, lpOverlapped=0x0 | out: lpBuffer=0x271d534*, lpNumberOfBytesWritten=0x31e704*=0xc80, lpOverlapped=0x0) returned 1 [0116.927] GetFullPathNameW (in: lpFileName="C:\\Windows\\Vss\\Writers\\System\\D61D61C8-D73A-4EEE-8CDD-F6F9786B7124.xml", nBufferLength=0x105, lpBuffer=0x31e2b4, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\Vss\\Writers\\System\\D61D61C8-D73A-4EEE-8CDD-F6F9786B7124.xml", lpFilePart=0x0) returned 0x46 [0116.927] GetFullPathNameW (in: lpFileName="C:\\Windows\\Vss\\Writers\\System\\D61D61C8-D73A-4EEE-8CDD-F6F9786B7124.xml", nBufferLength=0x105, lpBuffer=0x31e2b4, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\Vss\\Writers\\System\\D61D61C8-D73A-4EEE-8CDD-F6F9786B7124.xml", lpFilePart=0x0) returned 0x46 [0116.927] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e714) returned 1 [0116.927] GetFileAttributesExW (in: lpFileName="C:\\Windows\\Vss\\Writers\\System\\D61D61C8-D73A-4EEE-8CDD-F6F9786B7124.xml" (normalized: "c:\\windows\\vss\\writers\\system\\d61d61c8-d73a-4eee-8cdd-f6f9786b7124.xml"), fInfoLevelId=0x0, lpFileInformation=0x31e790 | out: lpFileInformation=0x31e790*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9dc743db, ftCreationTime.dwHighDateTime=0x1ca042b, ftLastAccessTime.dwLowDateTime=0x9dc743db, ftLastAccessTime.dwHighDateTime=0x1ca042b, ftLastWriteTime.dwLowDateTime=0x292123e0, ftLastWriteTime.dwHighDateTime=0x1d6eb7f, nFileSizeHigh=0x0, nFileSizeLow=0xc80)) returned 1 [0116.927] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e710) returned 1 [0116.927] MoveFileW (lpExistingFileName="C:\\Windows\\Vss\\Writers\\System\\D61D61C8-D73A-4EEE-8CDD-F6F9786B7124.xml" (normalized: "c:\\windows\\vss\\writers\\system\\d61d61c8-d73a-4eee-8cdd-f6f9786b7124.xml"), lpNewFileName="C:\\Windows\\Vss\\Writers\\System\\D61D61C8-D73A-4EEE-8CDD-F6F9786B7124.xml" (normalized: "c:\\windows\\vss\\writers\\system\\d61d61c8-d73a-4eee-8cdd-f6f9786b7124.xml")) returned 1 [0116.927] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e8ac) returned 1 [0116.927] GetFullPathNameW (in: lpFileName="C:\\Windows\\Web", nBufferLength=0x105, lpBuffer=0x31e3b4, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\Web", lpFilePart=0x0) returned 0xe [0116.927] GetFullPathNameW (in: lpFileName="C:\\Windows\\Web\\", nBufferLength=0x105, lpBuffer=0x31e388, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\Web\\", lpFilePart=0x0) returned 0xf [0116.927] FindFirstFileW (in: lpFileName="C:\\Windows\\Web\\*", lpFindFileData=0x31e5d4 | out: lpFindFileData=0x31e5d4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x12fc3ac, ftCreationTime.dwHighDateTime=0x1ca0432, ftLastAccessTime.dwLowDateTime=0x80046d91, ftLastAccessTime.dwHighDateTime=0x1ca0444, ftLastWriteTime.dwLowDateTime=0x80046d91, ftLastWriteTime.dwHighDateTime=0x1ca0444, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x381f80 [0116.936] FindClose (in: hFindFile=0x381f80 | out: hFindFile=0x381f80) returned 1 [0116.936] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e86c) returned 1 [0116.936] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e878) returned 1 [0116.936] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e8ac) returned 1 [0116.936] GetFullPathNameW (in: lpFileName="C:\\Windows\\Web", nBufferLength=0x105, lpBuffer=0x31e3b4, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\Web", lpFilePart=0x0) returned 0xe [0116.936] GetFullPathNameW (in: lpFileName="C:\\Windows\\Web\\", nBufferLength=0x105, lpBuffer=0x31e388, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\Web\\", lpFilePart=0x0) returned 0xf [0116.936] FindFirstFileW (in: lpFileName="C:\\Windows\\Web\\*", lpFindFileData=0x31e5d4 | out: lpFindFileData=0x31e5d4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x12fc3ac, ftCreationTime.dwHighDateTime=0x1ca0432, ftLastAccessTime.dwLowDateTime=0x80046d91, ftLastAccessTime.dwHighDateTime=0x1ca0444, ftLastWriteTime.dwLowDateTime=0x80046d91, ftLastWriteTime.dwHighDateTime=0x1ca0444, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x381f80 [0116.936] FindClose (in: hFindFile=0x381f80 | out: hFindFile=0x381f80) returned 1 [0116.936] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e86c) returned 1 [0116.936] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e878) returned 1 [0116.936] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e834) returned 1 [0116.936] GetFullPathNameW (in: lpFileName="C:\\Windows\\Web\\Wallpaper", nBufferLength=0x105, lpBuffer=0x31e33c, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\Web\\Wallpaper", lpFilePart=0x0) returned 0x18 [0116.936] GetFullPathNameW (in: lpFileName="C:\\Windows\\Web\\Wallpaper\\", nBufferLength=0x105, lpBuffer=0x31e310, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\Web\\Wallpaper\\", lpFilePart=0x0) returned 0x19 [0116.936] FindFirstFileW (in: lpFileName="C:\\Windows\\Web\\Wallpaper\\*", lpFindFileData=0x31e55c | out: lpFindFileData=0x31e55c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x80046d91, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x937461fc, ftLastAccessTime.dwHighDateTime=0x1cbf8eb, ftLastWriteTime.dwLowDateTime=0x937461fc, ftLastWriteTime.dwHighDateTime=0x1cbf8eb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x381f80 [0116.941] FindClose (in: hFindFile=0x381f80 | out: hFindFile=0x381f80) returned 1 [0116.941] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e7f4) returned 1 [0116.941] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e800) returned 1 [0116.941] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e834) returned 1 [0116.941] GetFullPathNameW (in: lpFileName="C:\\Windows\\Web\\Wallpaper", nBufferLength=0x105, lpBuffer=0x31e33c, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\Web\\Wallpaper", lpFilePart=0x0) returned 0x18 [0116.941] GetFullPathNameW (in: lpFileName="C:\\Windows\\Web\\Wallpaper\\", nBufferLength=0x105, lpBuffer=0x31e310, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\Web\\Wallpaper\\", lpFilePart=0x0) returned 0x19 [0116.941] FindFirstFileW (in: lpFileName="C:\\Windows\\Web\\Wallpaper\\*", lpFindFileData=0x31e55c | out: lpFindFileData=0x31e55c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x80046d91, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x937461fc, ftLastAccessTime.dwHighDateTime=0x1cbf8eb, ftLastWriteTime.dwLowDateTime=0x937461fc, ftLastWriteTime.dwHighDateTime=0x1cbf8eb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x381f80 [0116.942] FindClose (in: hFindFile=0x381f80 | out: hFindFile=0x381f80) returned 1 [0116.943] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e7f4) returned 1 [0116.943] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e800) returned 1 [0116.943] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e7bc) returned 1 [0116.943] GetFullPathNameW (in: lpFileName="C:\\Windows\\Web\\Wallpaper\\Architecture", nBufferLength=0x105, lpBuffer=0x31e2c4, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\Web\\Wallpaper\\Architecture", lpFilePart=0x0) returned 0x25 [0116.943] GetFullPathNameW (in: lpFileName="C:\\Windows\\Web\\Wallpaper\\Architecture\\", nBufferLength=0x105, lpBuffer=0x31e298, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\Web\\Wallpaper\\Architecture\\", lpFilePart=0x0) returned 0x26 [0116.943] FindFirstFileW (in: lpFileName="C:\\Windows\\Web\\Wallpaper\\Architecture\\*", lpFindFileData=0x31e4e4 | out: lpFindFileData=0x31e4e4*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x92b801bb, ftCreationTime.dwHighDateTime=0x1cbf8eb, ftLastAccessTime.dwLowDateTime=0xaab67eab, ftLastAccessTime.dwHighDateTime=0x1cbf8eb, ftLastWriteTime.dwLowDateTime=0x931e8a60, ftLastWriteTime.dwHighDateTime=0x1cbf8eb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x381f80 [0116.950] FindClose (in: hFindFile=0x381f80 | out: hFindFile=0x381f80) returned 1 [0116.951] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e77c) returned 1 [0116.951] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e788) returned 1 [0116.951] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e7bc) returned 1 [0116.951] GetFullPathNameW (in: lpFileName="C:\\Windows\\Web\\Wallpaper\\Architecture", nBufferLength=0x105, lpBuffer=0x31e2c4, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\Web\\Wallpaper\\Architecture", lpFilePart=0x0) returned 0x25 [0116.951] GetFullPathNameW (in: lpFileName="C:\\Windows\\Web\\Wallpaper\\Architecture\\", nBufferLength=0x105, lpBuffer=0x31e298, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\Web\\Wallpaper\\Architecture\\", lpFilePart=0x0) returned 0x26 [0116.951] FindFirstFileW (in: lpFileName="C:\\Windows\\Web\\Wallpaper\\Architecture\\*", lpFindFileData=0x31e4e4 | out: lpFindFileData=0x31e4e4*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x92b801bb, ftCreationTime.dwHighDateTime=0x1cbf8eb, ftLastAccessTime.dwLowDateTime=0xaab67eab, ftLastAccessTime.dwHighDateTime=0x1cbf8eb, ftLastWriteTime.dwLowDateTime=0x931e8a60, ftLastWriteTime.dwHighDateTime=0x1cbf8eb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x381f80 [0116.952] FindClose (in: hFindFile=0x381f80 | out: hFindFile=0x381f80) returned 1 [0116.952] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e77c) returned 1 [0116.952] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e788) returned 1 [0116.952] GetFullPathNameW (in: lpFileName="C:\\Windows\\Web\\Wallpaper\\Architecture\\img13.jpg", nBufferLength=0x105, lpBuffer=0x31e194, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\Web\\Wallpaper\\Architecture\\img13.jpg", lpFilePart=0x0) returned 0x2f [0116.952] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e688) returned 1 [0116.952] CreateFileW (lpFileName="C:\\Windows\\Web\\Wallpaper\\Architecture\\img13.jpg" (normalized: "c:\\windows\\web\\wallpaper\\architecture\\img13.jpg"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x178 [0116.954] GetFileType (hFile=0x178) returned 0x1 [0116.954] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e684) returned 1 [0116.954] GetFileType (hFile=0x178) returned 0x1 [0116.954] GetFileSize (in: hFile=0x178, lpFileSizeHigh=0x31e790 | out: lpFileSizeHigh=0x31e790*=0x0) returned 0x12cadc [0116.954] ReadFile (in: hFile=0x178, lpBuffer=0x436abb8, nNumberOfBytesToRead=0x12cadc, lpNumberOfBytesRead=0x31e73c, lpOverlapped=0x0 | out: lpBuffer=0x436abb8*, lpNumberOfBytesRead=0x31e73c*=0x12cadc, lpOverlapped=0x0) returned 1 [0117.101] GetFullPathNameW (in: lpFileName="C:\\Windows\\Web\\Wallpaper\\Architecture\\img13.jpg", nBufferLength=0x105, lpBuffer=0x31e180, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\Web\\Wallpaper\\Architecture\\img13.jpg", lpFilePart=0x0) returned 0x2f [0117.101] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e674) returned 1 [0117.101] CreateFileW (lpFileName="C:\\Windows\\Web\\Wallpaper\\Architecture\\img13.jpg" (normalized: "c:\\windows\\web\\wallpaper\\architecture\\img13.jpg"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0xffffffff [0117.102] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31d4b0) returned 1 [0117.102] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e7bc) returned 1 [0117.103] GetFullPathNameW (in: lpFileName="C:\\Windows\\Web\\Wallpaper\\Characters", nBufferLength=0x105, lpBuffer=0x31e2c4, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\Web\\Wallpaper\\Characters", lpFilePart=0x0) returned 0x23 [0117.103] GetFullPathNameW (in: lpFileName="C:\\Windows\\Web\\Wallpaper\\Characters\\", nBufferLength=0x105, lpBuffer=0x31e298, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\Web\\Wallpaper\\Characters\\", lpFilePart=0x0) returned 0x24 [0117.103] FindFirstFileW (in: lpFileName="C:\\Windows\\Web\\Wallpaper\\Characters\\*", lpFindFileData=0x31e4e4 | out: lpFindFileData=0x31e4e4*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x92432a7c, ftCreationTime.dwHighDateTime=0x1cbf8eb, ftLastAccessTime.dwLowDateTime=0xaab41c3c, ftLastAccessTime.dwHighDateTime=0x1cbf8eb, ftLastWriteTime.dwLowDateTime=0x92b801bb, ftLastWriteTime.dwHighDateTime=0x1cbf8eb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x381e00 [0117.106] FindClose (in: hFindFile=0x381e00 | out: hFindFile=0x381e00) returned 1 [0117.106] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e77c) returned 1 [0117.106] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e788) returned 1 [0117.106] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e7bc) returned 1 [0117.106] GetFullPathNameW (in: lpFileName="C:\\Windows\\Web\\Wallpaper\\Characters", nBufferLength=0x105, lpBuffer=0x31e2c4, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\Web\\Wallpaper\\Characters", lpFilePart=0x0) returned 0x23 [0117.106] GetFullPathNameW (in: lpFileName="C:\\Windows\\Web\\Wallpaper\\Characters\\", nBufferLength=0x105, lpBuffer=0x31e298, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\Web\\Wallpaper\\Characters\\", lpFilePart=0x0) returned 0x24 [0117.106] FindFirstFileW (in: lpFileName="C:\\Windows\\Web\\Wallpaper\\Characters\\*", lpFindFileData=0x31e4e4 | out: lpFindFileData=0x31e4e4*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x92432a7c, ftCreationTime.dwHighDateTime=0x1cbf8eb, ftLastAccessTime.dwLowDateTime=0xaab41c3c, ftLastAccessTime.dwHighDateTime=0x1cbf8eb, ftLastWriteTime.dwLowDateTime=0x92b801bb, ftLastWriteTime.dwHighDateTime=0x1cbf8eb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x381e00 [0117.108] FindClose (in: hFindFile=0x381e00 | out: hFindFile=0x381e00) returned 1 [0117.109] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e77c) returned 1 [0117.109] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e788) returned 1 [0117.109] GetFullPathNameW (in: lpFileName="C:\\Windows\\Web\\Wallpaper\\Characters\\img19.jpg", nBufferLength=0x105, lpBuffer=0x31e194, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\Web\\Wallpaper\\Characters\\img19.jpg", lpFilePart=0x0) returned 0x2d [0117.109] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e688) returned 1 [0117.109] CreateFileW (lpFileName="C:\\Windows\\Web\\Wallpaper\\Characters\\img19.jpg" (normalized: "c:\\windows\\web\\wallpaper\\characters\\img19.jpg"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x178 [0117.110] GetFileType (hFile=0x178) returned 0x1 [0117.110] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e684) returned 1 [0117.110] GetFileType (hFile=0x178) returned 0x1 [0117.110] GetFileSize (in: hFile=0x178, lpFileSizeHigh=0x31e790 | out: lpFileSizeHigh=0x31e790*=0x0) returned 0x16794f [0117.113] ReadFile (in: hFile=0x178, lpBuffer=0x6cbdb18, nNumberOfBytesToRead=0x16794f, lpNumberOfBytesRead=0x31e73c, lpOverlapped=0x0 | out: lpBuffer=0x6cbdb18*, lpNumberOfBytesRead=0x31e73c*=0x16794f, lpOverlapped=0x0) returned 1 [0117.358] GetFullPathNameW (in: lpFileName="C:\\Windows\\Web\\Wallpaper\\Characters\\img19.jpg", nBufferLength=0x105, lpBuffer=0x31e180, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\Web\\Wallpaper\\Characters\\img19.jpg", lpFilePart=0x0) returned 0x2d [0117.358] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e674) returned 1 [0117.358] CreateFileW (lpFileName="C:\\Windows\\Web\\Wallpaper\\Characters\\img19.jpg" (normalized: "c:\\windows\\web\\wallpaper\\characters\\img19.jpg"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0xffffffff [0117.360] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31d4b0) returned 1 [0117.360] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e7bc) returned 1 [0117.360] GetFullPathNameW (in: lpFileName="C:\\Windows\\Web\\Wallpaper\\Landscapes", nBufferLength=0x105, lpBuffer=0x31e2c4, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\Web\\Wallpaper\\Landscapes", lpFilePart=0x0) returned 0x23 [0117.360] GetFullPathNameW (in: lpFileName="C:\\Windows\\Web\\Wallpaper\\Landscapes\\", nBufferLength=0x105, lpBuffer=0x31e298, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\Web\\Wallpaper\\Landscapes\\", lpFilePart=0x0) returned 0x24 [0117.360] FindFirstFileW (in: lpFileName="C:\\Windows\\Web\\Wallpaper\\Landscapes\\*", lpFindFileData=0x31e4e4 | out: lpFindFileData=0x31e4e4*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x931e8a60, ftCreationTime.dwHighDateTime=0x1cbf8eb, ftLastAccessTime.dwLowDateTime=0xaab41c3c, ftLastAccessTime.dwHighDateTime=0x1cbf8eb, ftLastWriteTime.dwLowDateTime=0x936f9d1e, ftLastWriteTime.dwHighDateTime=0x1cbf8eb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x381cc0 [0117.365] FindNextFileW (in: hFindFile=0x381cc0, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x931e8a60, ftCreationTime.dwHighDateTime=0x1cbf8eb, ftLastAccessTime.dwLowDateTime=0xaab41c3c, ftLastAccessTime.dwHighDateTime=0x1cbf8eb, ftLastWriteTime.dwLowDateTime=0x936f9d1e, ftLastWriteTime.dwHighDateTime=0x1cbf8eb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0117.365] FindNextFileW (in: hFindFile=0x381cc0, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0x936f9d1e, ftCreationTime.dwHighDateTime=0x1cbf8eb, ftLastAccessTime.dwLowDateTime=0x8a2fcc8f, ftLastAccessTime.dwHighDateTime=0x1cbf8eb, ftLastWriteTime.dwLowDateTime=0x8a2fcc8f, ftLastWriteTime.dwHighDateTime=0x1cbf8eb, nFileSizeHigh=0x0, nFileSizeLow=0x51, dwReserved0=0x0, dwReserved1=0x0, cFileName="Desktop.ini", cAlternateFileName="")) returned 1 [0117.365] FindNextFileW (in: hFindFile=0x381cc0, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb6c9f842, ftCreationTime.dwHighDateTime=0x1ca0403, ftLastAccessTime.dwLowDateTime=0xb6c9f842, ftLastAccessTime.dwHighDateTime=0x1ca0403, ftLastWriteTime.dwLowDateTime=0x2ac99bbf, ftLastWriteTime.dwHighDateTime=0x1c9ebde, nFileSizeHigh=0x0, nFileSizeLow=0x1742a6, dwReserved0=0x0, dwReserved1=0x0, cFileName="img10.jpg", cAlternateFileName="")) returned 1 [0117.365] FindNextFileW (in: hFindFile=0x381cc0, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb6d37db6, ftCreationTime.dwHighDateTime=0x1ca0403, ftLastAccessTime.dwLowDateTime=0xb6d37db6, ftLastAccessTime.dwHighDateTime=0x1ca0403, ftLastWriteTime.dwLowDateTime=0x2ace5e77, ftLastWriteTime.dwHighDateTime=0x1c9ebde, nFileSizeHigh=0x0, nFileSizeLow=0x151c99, dwReserved0=0x0, dwReserved1=0x0, cFileName="img11.jpg", cAlternateFileName="")) returned 1 [0117.365] FindNextFileW (in: hFindFile=0x381cc0, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb6daa1cd, ftCreationTime.dwHighDateTime=0x1ca0403, ftLastAccessTime.dwLowDateTime=0xb6daa1cd, ftLastAccessTime.dwHighDateTime=0x1ca0403, ftLastWriteTime.dwLowDateTime=0x2ad5828b, ftLastWriteTime.dwHighDateTime=0x1c9ebde, nFileSizeHigh=0x0, nFileSizeLow=0x179ed4, dwReserved0=0x0, dwReserved1=0x0, cFileName="img12.jpg", cAlternateFileName="")) returned 1 [0117.365] FindNextFileW (in: hFindFile=0x381cc0, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb79dd197, ftCreationTime.dwHighDateTime=0x1ca0403, ftLastAccessTime.dwLowDateTime=0xb79dd197, ftLastAccessTime.dwHighDateTime=0x1ca0403, ftLastWriteTime.dwLowDateTime=0x8f74e4fb, ftLastWriteTime.dwHighDateTime=0x1c9ea0c, nFileSizeHigh=0x0, nFileSizeLow=0x12916d, dwReserved0=0x0, dwReserved1=0x0, cFileName="img7.jpg", cAlternateFileName="")) returned 1 [0117.365] FindNextFileW (in: hFindFile=0x381cc0, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb7a4f5ae, ftCreationTime.dwHighDateTime=0x1ca0403, ftLastAccessTime.dwLowDateTime=0xb7a4f5ae, ftLastAccessTime.dwHighDateTime=0x1ca0403, ftLastWriteTime.dwLowDateTime=0x2ae16957, ftLastWriteTime.dwHighDateTime=0x1c9ebde, nFileSizeHigh=0x0, nFileSizeLow=0xacf7f, dwReserved0=0x0, dwReserved1=0x0, cFileName="img8.jpg", cAlternateFileName="")) returned 1 [0117.366] FindNextFileW (in: hFindFile=0x381cc0, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb7ac19c5, ftCreationTime.dwHighDateTime=0x1ca0403, ftLastAccessTime.dwLowDateTime=0xb7ac19c5, ftLastAccessTime.dwHighDateTime=0x1ca0403, ftLastWriteTime.dwLowDateTime=0x2ae88d6b, ftLastWriteTime.dwHighDateTime=0x1c9ebde, nFileSizeHigh=0x0, nFileSizeLow=0x11a5b6, dwReserved0=0x0, dwReserved1=0x0, cFileName="img9.jpg", cAlternateFileName="")) returned 1 [0117.366] FindNextFileW (in: hFindFile=0x381cc0, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0117.366] FindClose (in: hFindFile=0x381cc0 | out: hFindFile=0x381cc0) returned 1 [0117.366] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e77c) returned 1 [0117.366] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e788) returned 1 [0117.366] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e7bc) returned 1 [0117.366] GetFullPathNameW (in: lpFileName="C:\\Windows\\Web\\Wallpaper\\Landscapes", nBufferLength=0x105, lpBuffer=0x31e2c4, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\Web\\Wallpaper\\Landscapes", lpFilePart=0x0) returned 0x23 [0117.367] GetFullPathNameW (in: lpFileName="C:\\Windows\\Web\\Wallpaper\\Landscapes\\", nBufferLength=0x105, lpBuffer=0x31e298, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\Web\\Wallpaper\\Landscapes\\", lpFilePart=0x0) returned 0x24 [0117.367] FindFirstFileW (in: lpFileName="C:\\Windows\\Web\\Wallpaper\\Landscapes\\*", lpFindFileData=0x31e4e4 | out: lpFindFileData=0x31e4e4*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x931e8a60, ftCreationTime.dwHighDateTime=0x1cbf8eb, ftLastAccessTime.dwLowDateTime=0xaab41c3c, ftLastAccessTime.dwHighDateTime=0x1cbf8eb, ftLastWriteTime.dwLowDateTime=0x936f9d1e, ftLastWriteTime.dwHighDateTime=0x1cbf8eb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x381cc0 [0117.367] FindNextFileW (in: hFindFile=0x381cc0, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x931e8a60, ftCreationTime.dwHighDateTime=0x1cbf8eb, ftLastAccessTime.dwLowDateTime=0xaab41c3c, ftLastAccessTime.dwHighDateTime=0x1cbf8eb, ftLastWriteTime.dwLowDateTime=0x936f9d1e, ftLastWriteTime.dwHighDateTime=0x1cbf8eb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0117.368] FindNextFileW (in: hFindFile=0x381cc0, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0x936f9d1e, ftCreationTime.dwHighDateTime=0x1cbf8eb, ftLastAccessTime.dwLowDateTime=0x8a2fcc8f, ftLastAccessTime.dwHighDateTime=0x1cbf8eb, ftLastWriteTime.dwLowDateTime=0x8a2fcc8f, ftLastWriteTime.dwHighDateTime=0x1cbf8eb, nFileSizeHigh=0x0, nFileSizeLow=0x51, dwReserved0=0x0, dwReserved1=0x0, cFileName="Desktop.ini", cAlternateFileName="")) returned 1 [0117.368] FindNextFileW (in: hFindFile=0x381cc0, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb6c9f842, ftCreationTime.dwHighDateTime=0x1ca0403, ftLastAccessTime.dwLowDateTime=0xb6c9f842, ftLastAccessTime.dwHighDateTime=0x1ca0403, ftLastWriteTime.dwLowDateTime=0x2ac99bbf, ftLastWriteTime.dwHighDateTime=0x1c9ebde, nFileSizeHigh=0x0, nFileSizeLow=0x1742a6, dwReserved0=0x0, dwReserved1=0x0, cFileName="img10.jpg", cAlternateFileName="")) returned 1 [0117.368] FindNextFileW (in: hFindFile=0x381cc0, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb6d37db6, ftCreationTime.dwHighDateTime=0x1ca0403, ftLastAccessTime.dwLowDateTime=0xb6d37db6, ftLastAccessTime.dwHighDateTime=0x1ca0403, ftLastWriteTime.dwLowDateTime=0x2ace5e77, ftLastWriteTime.dwHighDateTime=0x1c9ebde, nFileSizeHigh=0x0, nFileSizeLow=0x151c99, dwReserved0=0x0, dwReserved1=0x0, cFileName="img11.jpg", cAlternateFileName="")) returned 1 [0117.368] FindNextFileW (in: hFindFile=0x381cc0, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb6daa1cd, ftCreationTime.dwHighDateTime=0x1ca0403, ftLastAccessTime.dwLowDateTime=0xb6daa1cd, ftLastAccessTime.dwHighDateTime=0x1ca0403, ftLastWriteTime.dwLowDateTime=0x2ad5828b, ftLastWriteTime.dwHighDateTime=0x1c9ebde, nFileSizeHigh=0x0, nFileSizeLow=0x179ed4, dwReserved0=0x0, dwReserved1=0x0, cFileName="img12.jpg", cAlternateFileName="")) returned 1 [0117.368] FindNextFileW (in: hFindFile=0x381cc0, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb79dd197, ftCreationTime.dwHighDateTime=0x1ca0403, ftLastAccessTime.dwLowDateTime=0xb79dd197, ftLastAccessTime.dwHighDateTime=0x1ca0403, ftLastWriteTime.dwLowDateTime=0x8f74e4fb, ftLastWriteTime.dwHighDateTime=0x1c9ea0c, nFileSizeHigh=0x0, nFileSizeLow=0x12916d, dwReserved0=0x0, dwReserved1=0x0, cFileName="img7.jpg", cAlternateFileName="")) returned 1 [0117.368] FindNextFileW (in: hFindFile=0x381cc0, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb7a4f5ae, ftCreationTime.dwHighDateTime=0x1ca0403, ftLastAccessTime.dwLowDateTime=0xb7a4f5ae, ftLastAccessTime.dwHighDateTime=0x1ca0403, ftLastWriteTime.dwLowDateTime=0x2ae16957, ftLastWriteTime.dwHighDateTime=0x1c9ebde, nFileSizeHigh=0x0, nFileSizeLow=0xacf7f, dwReserved0=0x0, dwReserved1=0x0, cFileName="img8.jpg", cAlternateFileName="")) returned 1 [0117.368] FindNextFileW (in: hFindFile=0x381cc0, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb7ac19c5, ftCreationTime.dwHighDateTime=0x1ca0403, ftLastAccessTime.dwLowDateTime=0xb7ac19c5, ftLastAccessTime.dwHighDateTime=0x1ca0403, ftLastWriteTime.dwLowDateTime=0x2ae88d6b, ftLastWriteTime.dwHighDateTime=0x1c9ebde, nFileSizeHigh=0x0, nFileSizeLow=0x11a5b6, dwReserved0=0x0, dwReserved1=0x0, cFileName="img9.jpg", cAlternateFileName="")) returned 1 [0117.369] FindNextFileW (in: hFindFile=0x381cc0, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb7ac19c5, ftCreationTime.dwHighDateTime=0x1ca0403, ftLastAccessTime.dwLowDateTime=0xb7ac19c5, ftLastAccessTime.dwHighDateTime=0x1ca0403, ftLastWriteTime.dwLowDateTime=0x2ae88d6b, ftLastWriteTime.dwHighDateTime=0x1c9ebde, nFileSizeHigh=0x0, nFileSizeLow=0x11a5b6, dwReserved0=0x0, dwReserved1=0x0, cFileName="img9.jpg", cAlternateFileName="")) returned 0 [0117.369] FindClose (in: hFindFile=0x381cc0 | out: hFindFile=0x381cc0) returned 1 [0117.369] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e77c) returned 1 [0117.369] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e788) returned 1 [0117.369] GetFullPathNameW (in: lpFileName="C:\\Windows\\Web\\Wallpaper\\Landscapes\\img10.jpg", nBufferLength=0x105, lpBuffer=0x31e194, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\Web\\Wallpaper\\Landscapes\\img10.jpg", lpFilePart=0x0) returned 0x2d [0117.369] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e688) returned 1 [0117.369] CreateFileW (lpFileName="C:\\Windows\\Web\\Wallpaper\\Landscapes\\img10.jpg" (normalized: "c:\\windows\\web\\wallpaper\\landscapes\\img10.jpg"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x178 [0117.371] GetFileType (hFile=0x178) returned 0x1 [0117.371] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e684) returned 1 [0117.371] GetFileType (hFile=0x178) returned 0x1 [0117.371] GetFileSize (in: hFile=0x178, lpFileSizeHigh=0x31e790 | out: lpFileSizeHigh=0x31e790*=0x0) returned 0x1742a6 [0117.374] ReadFile (in: hFile=0x178, lpBuffer=0x752b358, nNumberOfBytesToRead=0x1742a6, lpNumberOfBytesRead=0x31e73c, lpOverlapped=0x0 | out: lpBuffer=0x752b358*, lpNumberOfBytesRead=0x31e73c*=0x1742a6, lpOverlapped=0x0) returned 1 [0117.448] CloseHandle (hObject=0x178) returned 1 [0117.653] GetFullPathNameW (in: lpFileName="C:\\Windows\\Web\\Wallpaper\\Landscapes\\img10.jpg", nBufferLength=0x105, lpBuffer=0x31e180, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\Web\\Wallpaper\\Landscapes\\img10.jpg", lpFilePart=0x0) returned 0x2d [0117.653] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e674) returned 1 [0117.653] CreateFileW (lpFileName="C:\\Windows\\Web\\Wallpaper\\Landscapes\\img10.jpg" (normalized: "c:\\windows\\web\\wallpaper\\landscapes\\img10.jpg"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0xffffffff [0117.654] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31d4b0) returned 1 [0117.655] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e7bc) returned 1 [0117.655] GetFullPathNameW (in: lpFileName="C:\\Windows\\Web\\Wallpaper\\Nature", nBufferLength=0x105, lpBuffer=0x31e2c4, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\Web\\Wallpaper\\Nature", lpFilePart=0x0) returned 0x1f [0117.655] GetFullPathNameW (in: lpFileName="C:\\Windows\\Web\\Wallpaper\\Nature\\", nBufferLength=0x105, lpBuffer=0x31e298, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\Web\\Wallpaper\\Nature\\", lpFilePart=0x0) returned 0x20 [0117.655] FindFirstFileW (in: lpFileName="C:\\Windows\\Web\\Wallpaper\\Nature\\*", lpFindFileData=0x31e4e4 | out: lpFindFileData=0x31e4e4*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x91cbf0ce, ftCreationTime.dwHighDateTime=0x1cbf8eb, ftLastAccessTime.dwLowDateTime=0xaaacf4ef, ftLastAccessTime.dwHighDateTime=0x1cbf8eb, ftLastWriteTime.dwLowDateTime=0x92301704, ftLastWriteTime.dwHighDateTime=0x1cbf8eb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x381ec0 [0117.660] FindNextFileW (in: hFindFile=0x381ec0, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x91cbf0ce, ftCreationTime.dwHighDateTime=0x1cbf8eb, ftLastAccessTime.dwLowDateTime=0xaaacf4ef, ftLastAccessTime.dwHighDateTime=0x1cbf8eb, ftLastWriteTime.dwLowDateTime=0x92301704, ftLastWriteTime.dwHighDateTime=0x1cbf8eb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0117.660] FindNextFileW (in: hFindFile=0x381ec0, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0x92301704, ftCreationTime.dwHighDateTime=0x1cbf8eb, ftLastAccessTime.dwLowDateTime=0x8a2b07b1, ftLastAccessTime.dwHighDateTime=0x1cbf8eb, ftLastWriteTime.dwLowDateTime=0x8a2b07b1, ftLastWriteTime.dwHighDateTime=0x1cbf8eb, nFileSizeHigh=0x0, nFileSizeLow=0x51, dwReserved0=0x0, dwReserved1=0x0, cFileName="Desktop.ini", cAlternateFileName="")) returned 1 [0117.660] FindNextFileW (in: hFindFile=0x381ec0, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb6c072ce, ftCreationTime.dwHighDateTime=0x1ca0403, ftLastAccessTime.dwLowDateTime=0xb6c072ce, ftLastAccessTime.dwHighDateTime=0x1ca0403, ftLastWriteTime.dwLowDateTime=0x8ea10b4d, ftLastWriteTime.dwHighDateTime=0x1c9ea0c, nFileSizeHigh=0x0, nFileSizeLow=0x15bf5c, dwReserved0=0x0, dwReserved1=0x0, cFileName="img1.jpg", cAlternateFileName="")) returned 1 [0117.660] FindNextFileW (in: hFindFile=0x381ec0, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb71fa956, ftCreationTime.dwHighDateTime=0x1ca0403, ftLastAccessTime.dwLowDateTime=0xb71fa956, ftLastAccessTime.dwHighDateTime=0x1ca0403, ftLastWriteTime.dwLowDateTime=0x8ed0a6a5, ftLastWriteTime.dwHighDateTime=0x1c9ea0c, nFileSizeHigh=0x0, nFileSizeLow=0x142962, dwReserved0=0x0, dwReserved1=0x0, cFileName="img2.jpg", cAlternateFileName="")) returned 1 [0117.660] FindNextFileW (in: hFindFile=0x381ec0, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb77097b0, ftCreationTime.dwHighDateTime=0x1ca0403, ftLastAccessTime.dwLowDateTime=0xb77097b0, ftLastAccessTime.dwHighDateTime=0x1ca0403, ftLastWriteTime.dwLowDateTime=0x8f4ecf1b, ftLastWriteTime.dwHighDateTime=0x1c9ea0c, nFileSizeHigh=0x0, nFileSizeLow=0x168724, dwReserved0=0x0, dwReserved1=0x0, cFileName="img3.jpg", cAlternateFileName="")) returned 1 [0117.660] FindNextFileW (in: hFindFile=0x381ec0, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb7886552, ftCreationTime.dwHighDateTime=0x1ca0403, ftLastAccessTime.dwLowDateTime=0xb7886552, ftLastAccessTime.dwHighDateTime=0x1ca0403, ftLastWriteTime.dwLowDateTime=0x8f643b69, ftLastWriteTime.dwHighDateTime=0x1c9ea0c, nFileSizeHigh=0x0, nFileSizeLow=0x1765ef, dwReserved0=0x0, dwReserved1=0x0, cFileName="img4.jpg", cAlternateFileName="")) returned 1 [0117.660] FindNextFileW (in: hFindFile=0x381ec0, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb78d280c, ftCreationTime.dwHighDateTime=0x1ca0403, ftLastAccessTime.dwLowDateTime=0xb78d280c, ftLastAccessTime.dwHighDateTime=0x1ca0403, ftLastWriteTime.dwLowDateTime=0x8f6b5f83, ftLastWriteTime.dwHighDateTime=0x1c9ea0c, nFileSizeHigh=0x0, nFileSizeLow=0x1203cf, dwReserved0=0x0, dwReserved1=0x0, cFileName="img5.jpg", cAlternateFileName="")) returned 1 [0117.661] FindNextFileW (in: hFindFile=0x381ec0, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb796ad80, ftCreationTime.dwHighDateTime=0x1ca0403, ftLastAccessTime.dwLowDateTime=0xb796ad80, ftLastAccessTime.dwHighDateTime=0x1ca0403, ftLastWriteTime.dwLowDateTime=0x8f70223f, ftLastWriteTime.dwHighDateTime=0x1c9ea0c, nFileSizeHigh=0x0, nFileSizeLow=0xe9ce0, dwReserved0=0x0, dwReserved1=0x0, cFileName="img6.jpg", cAlternateFileName="")) returned 1 [0117.661] FindNextFileW (in: hFindFile=0x381ec0, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0117.661] FindClose (in: hFindFile=0x381ec0 | out: hFindFile=0x381ec0) returned 1 [0117.661] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e77c) returned 1 [0117.661] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e788) returned 1 [0117.661] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e7bc) returned 1 [0117.662] GetFullPathNameW (in: lpFileName="C:\\Windows\\Web\\Wallpaper\\Nature", nBufferLength=0x105, lpBuffer=0x31e2c4, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\Web\\Wallpaper\\Nature", lpFilePart=0x0) returned 0x1f [0117.662] GetFullPathNameW (in: lpFileName="C:\\Windows\\Web\\Wallpaper\\Nature\\", nBufferLength=0x105, lpBuffer=0x31e298, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\Web\\Wallpaper\\Nature\\", lpFilePart=0x0) returned 0x20 [0117.662] FindFirstFileW (in: lpFileName="C:\\Windows\\Web\\Wallpaper\\Nature\\*", lpFindFileData=0x31e4e4 | out: lpFindFileData=0x31e4e4*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x91cbf0ce, ftCreationTime.dwHighDateTime=0x1cbf8eb, ftLastAccessTime.dwLowDateTime=0xaaacf4ef, ftLastAccessTime.dwHighDateTime=0x1cbf8eb, ftLastWriteTime.dwLowDateTime=0x92301704, ftLastWriteTime.dwHighDateTime=0x1cbf8eb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x381ec0 [0117.662] FindNextFileW (in: hFindFile=0x381ec0, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x91cbf0ce, ftCreationTime.dwHighDateTime=0x1cbf8eb, ftLastAccessTime.dwLowDateTime=0xaaacf4ef, ftLastAccessTime.dwHighDateTime=0x1cbf8eb, ftLastWriteTime.dwLowDateTime=0x92301704, ftLastWriteTime.dwHighDateTime=0x1cbf8eb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0117.663] FindNextFileW (in: hFindFile=0x381ec0, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0x92301704, ftCreationTime.dwHighDateTime=0x1cbf8eb, ftLastAccessTime.dwLowDateTime=0x8a2b07b1, ftLastAccessTime.dwHighDateTime=0x1cbf8eb, ftLastWriteTime.dwLowDateTime=0x8a2b07b1, ftLastWriteTime.dwHighDateTime=0x1cbf8eb, nFileSizeHigh=0x0, nFileSizeLow=0x51, dwReserved0=0x0, dwReserved1=0x0, cFileName="Desktop.ini", cAlternateFileName="")) returned 1 [0117.663] FindNextFileW (in: hFindFile=0x381ec0, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb6c072ce, ftCreationTime.dwHighDateTime=0x1ca0403, ftLastAccessTime.dwLowDateTime=0xb6c072ce, ftLastAccessTime.dwHighDateTime=0x1ca0403, ftLastWriteTime.dwLowDateTime=0x8ea10b4d, ftLastWriteTime.dwHighDateTime=0x1c9ea0c, nFileSizeHigh=0x0, nFileSizeLow=0x15bf5c, dwReserved0=0x0, dwReserved1=0x0, cFileName="img1.jpg", cAlternateFileName="")) returned 1 [0117.663] FindNextFileW (in: hFindFile=0x381ec0, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb71fa956, ftCreationTime.dwHighDateTime=0x1ca0403, ftLastAccessTime.dwLowDateTime=0xb71fa956, ftLastAccessTime.dwHighDateTime=0x1ca0403, ftLastWriteTime.dwLowDateTime=0x8ed0a6a5, ftLastWriteTime.dwHighDateTime=0x1c9ea0c, nFileSizeHigh=0x0, nFileSizeLow=0x142962, dwReserved0=0x0, dwReserved1=0x0, cFileName="img2.jpg", cAlternateFileName="")) returned 1 [0117.663] FindNextFileW (in: hFindFile=0x381ec0, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb77097b0, ftCreationTime.dwHighDateTime=0x1ca0403, ftLastAccessTime.dwLowDateTime=0xb77097b0, ftLastAccessTime.dwHighDateTime=0x1ca0403, ftLastWriteTime.dwLowDateTime=0x8f4ecf1b, ftLastWriteTime.dwHighDateTime=0x1c9ea0c, nFileSizeHigh=0x0, nFileSizeLow=0x168724, dwReserved0=0x0, dwReserved1=0x0, cFileName="img3.jpg", cAlternateFileName="")) returned 1 [0117.663] FindNextFileW (in: hFindFile=0x381ec0, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb7886552, ftCreationTime.dwHighDateTime=0x1ca0403, ftLastAccessTime.dwLowDateTime=0xb7886552, ftLastAccessTime.dwHighDateTime=0x1ca0403, ftLastWriteTime.dwLowDateTime=0x8f643b69, ftLastWriteTime.dwHighDateTime=0x1c9ea0c, nFileSizeHigh=0x0, nFileSizeLow=0x1765ef, dwReserved0=0x0, dwReserved1=0x0, cFileName="img4.jpg", cAlternateFileName="")) returned 1 [0117.663] FindNextFileW (in: hFindFile=0x381ec0, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb78d280c, ftCreationTime.dwHighDateTime=0x1ca0403, ftLastAccessTime.dwLowDateTime=0xb78d280c, ftLastAccessTime.dwHighDateTime=0x1ca0403, ftLastWriteTime.dwLowDateTime=0x8f6b5f83, ftLastWriteTime.dwHighDateTime=0x1c9ea0c, nFileSizeHigh=0x0, nFileSizeLow=0x1203cf, dwReserved0=0x0, dwReserved1=0x0, cFileName="img5.jpg", cAlternateFileName="")) returned 1 [0117.663] FindNextFileW (in: hFindFile=0x381ec0, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb796ad80, ftCreationTime.dwHighDateTime=0x1ca0403, ftLastAccessTime.dwLowDateTime=0xb796ad80, ftLastAccessTime.dwHighDateTime=0x1ca0403, ftLastWriteTime.dwLowDateTime=0x8f70223f, ftLastWriteTime.dwHighDateTime=0x1c9ea0c, nFileSizeHigh=0x0, nFileSizeLow=0xe9ce0, dwReserved0=0x0, dwReserved1=0x0, cFileName="img6.jpg", cAlternateFileName="")) returned 1 [0117.663] FindNextFileW (in: hFindFile=0x381ec0, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb796ad80, ftCreationTime.dwHighDateTime=0x1ca0403, ftLastAccessTime.dwLowDateTime=0xb796ad80, ftLastAccessTime.dwHighDateTime=0x1ca0403, ftLastWriteTime.dwLowDateTime=0x8f70223f, ftLastWriteTime.dwHighDateTime=0x1c9ea0c, nFileSizeHigh=0x0, nFileSizeLow=0xe9ce0, dwReserved0=0x0, dwReserved1=0x0, cFileName="img6.jpg", cAlternateFileName="")) returned 0 [0117.663] FindClose (in: hFindFile=0x381ec0 | out: hFindFile=0x381ec0) returned 1 [0117.664] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e77c) returned 1 [0117.664] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e788) returned 1 [0117.664] GetFullPathNameW (in: lpFileName="C:\\Windows\\Web\\Wallpaper\\Nature\\img1.jpg", nBufferLength=0x105, lpBuffer=0x31e194, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\Web\\Wallpaper\\Nature\\img1.jpg", lpFilePart=0x0) returned 0x28 [0117.664] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e688) returned 1 [0117.664] CreateFileW (lpFileName="C:\\Windows\\Web\\Wallpaper\\Nature\\img1.jpg" (normalized: "c:\\windows\\web\\wallpaper\\nature\\img1.jpg"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x178 [0117.665] GetFileType (hFile=0x178) returned 0x1 [0117.666] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e684) returned 1 [0117.666] GetFileType (hFile=0x178) returned 0x1 [0117.666] GetFileSize (in: hFile=0x178, lpFileSizeHigh=0x31e790 | out: lpFileSizeHigh=0x31e790*=0x0) returned 0x15bf5c [0117.669] ReadFile (in: hFile=0x178, lpBuffer=0x6d052e8, nNumberOfBytesToRead=0x15bf5c, lpNumberOfBytesRead=0x31e73c, lpOverlapped=0x0 | out: lpBuffer=0x6d052e8*, lpNumberOfBytesRead=0x31e73c*=0x15bf5c, lpOverlapped=0x0) returned 1 [0117.730] CloseHandle (hObject=0x178) returned 1 [0117.826] GetFullPathNameW (in: lpFileName="C:\\Windows\\Web\\Wallpaper\\Nature\\img1.jpg", nBufferLength=0x105, lpBuffer=0x31e180, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\Web\\Wallpaper\\Nature\\img1.jpg", lpFilePart=0x0) returned 0x28 [0117.826] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e674) returned 1 [0117.826] CreateFileW (lpFileName="C:\\Windows\\Web\\Wallpaper\\Nature\\img1.jpg" (normalized: "c:\\windows\\web\\wallpaper\\nature\\img1.jpg"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0xffffffff [0117.827] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31d4b0) returned 1 [0117.827] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e7bc) returned 1 [0117.827] GetFullPathNameW (in: lpFileName="C:\\Windows\\Web\\Wallpaper\\Scenes", nBufferLength=0x105, lpBuffer=0x31e2c4, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\Web\\Wallpaper\\Scenes", lpFilePart=0x0) returned 0x1f [0117.827] GetFullPathNameW (in: lpFileName="C:\\Windows\\Web\\Wallpaper\\Scenes\\", nBufferLength=0x105, lpBuffer=0x31e298, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\Web\\Wallpaper\\Scenes\\", lpFilePart=0x0) returned 0x20 [0117.828] FindFirstFileW (in: lpFileName="C:\\Windows\\Web\\Wallpaper\\Scenes\\*", lpFindFileData=0x31e4e4 | out: lpFindFileData=0x31e4e4*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x937461fc, ftCreationTime.dwHighDateTime=0x1cbf8eb, ftLastAccessTime.dwLowDateTime=0xaa86cdff, ftLastAccessTime.dwHighDateTime=0x1cbf8eb, ftLastWriteTime.dwLowDateTime=0x93cefe76, ftLastWriteTime.dwHighDateTime=0x1cbf8eb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x381d40 [0117.829] FindNextFileW (in: hFindFile=0x381d40, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x937461fc, ftCreationTime.dwHighDateTime=0x1cbf8eb, ftLastAccessTime.dwLowDateTime=0xaa86cdff, ftLastAccessTime.dwHighDateTime=0x1cbf8eb, ftLastWriteTime.dwLowDateTime=0x93cefe76, ftLastWriteTime.dwHighDateTime=0x1cbf8eb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0117.829] FindNextFileW (in: hFindFile=0x381d40, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0x93cefe76, ftCreationTime.dwHighDateTime=0x1cbf8eb, ftLastAccessTime.dwLowDateTime=0x8a2fcc8f, ftLastAccessTime.dwHighDateTime=0x1cbf8eb, ftLastWriteTime.dwLowDateTime=0x8a2fcc8f, ftLastWriteTime.dwHighDateTime=0x1cbf8eb, nFileSizeHigh=0x0, nFileSizeLow=0x51, dwReserved0=0x0, dwReserved1=0x0, cFileName="Desktop.ini", cAlternateFileName="")) returned 1 [0117.830] FindNextFileW (in: hFindFile=0x381d40, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb73e9b0f, ftCreationTime.dwHighDateTime=0x1ca0403, ftLastAccessTime.dwLowDateTime=0xb73e9b0f, ftLastAccessTime.dwHighDateTime=0x1ca0403, ftLastWriteTime.dwLowDateTime=0x8f2657dd, ftLastWriteTime.dwHighDateTime=0x1c9ea0c, nFileSizeHigh=0x0, nFileSizeLow=0x1bba15, dwReserved0=0x0, dwReserved1=0x0, cFileName="img25.jpg", cAlternateFileName="")) returned 1 [0117.830] FindNextFileW (in: hFindFile=0x381d40, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb745bf26, ftCreationTime.dwHighDateTime=0x1ca0403, ftLastAccessTime.dwLowDateTime=0xb745bf26, ftLastAccessTime.dwHighDateTime=0x1ca0403, ftLastWriteTime.dwLowDateTime=0x8f2fdd55, ftLastWriteTime.dwHighDateTime=0x1c9ea0c, nFileSizeHigh=0x0, nFileSizeLow=0x1a0444, dwReserved0=0x0, dwReserved1=0x0, cFileName="img26.jpg", cAlternateFileName="")) returned 1 [0117.830] FindNextFileW (in: hFindFile=0x381d40, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb74ce33d, ftCreationTime.dwHighDateTime=0x1ca0403, ftLastAccessTime.dwLowDateTime=0xb74ce33d, ftLastAccessTime.dwHighDateTime=0x1ca0403, ftLastWriteTime.dwLowDateTime=0x8f3962cd, ftLastWriteTime.dwHighDateTime=0x1c9ea0c, nFileSizeHigh=0x0, nFileSizeLow=0x1f7fa6, dwReserved0=0x0, dwReserved1=0x0, cFileName="img27.jpg", cAlternateFileName="")) returned 1 [0117.830] FindNextFileW (in: hFindFile=0x381d40, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb75fee25, ftCreationTime.dwHighDateTime=0x1ca0403, ftLastAccessTime.dwLowDateTime=0xb75fee25, ftLastAccessTime.dwHighDateTime=0x1ca0403, ftLastWriteTime.dwLowDateTime=0x8f47ab01, ftLastWriteTime.dwHighDateTime=0x1c9ea0c, nFileSizeHigh=0x0, nFileSizeLow=0xf170a, dwReserved0=0x0, dwReserved1=0x0, cFileName="img28.jpg", cAlternateFileName="")) returned 1 [0117.830] FindNextFileW (in: hFindFile=0x381d40, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb767123c, ftCreationTime.dwHighDateTime=0x1ca0403, ftLastAccessTime.dwLowDateTime=0xb767123c, ftLastAccessTime.dwHighDateTime=0x1ca0403, ftLastWriteTime.dwLowDateTime=0x8f4a0c5f, ftLastWriteTime.dwHighDateTime=0x1c9ea0c, nFileSizeHigh=0x0, nFileSizeLow=0x151faf, dwReserved0=0x0, dwReserved1=0x0, cFileName="img29.jpg", cAlternateFileName="")) returned 1 [0117.830] FindNextFileW (in: hFindFile=0x381d40, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb77c7e81, ftCreationTime.dwHighDateTime=0x1ca0403, ftLastAccessTime.dwLowDateTime=0xb77c7e81, ftLastAccessTime.dwHighDateTime=0x1ca0403, ftLastWriteTime.dwLowDateTime=0x8f585493, ftLastWriteTime.dwHighDateTime=0x1c9ea0c, nFileSizeHigh=0x0, nFileSizeLow=0x12e427, dwReserved0=0x0, dwReserved1=0x0, cFileName="img30.jpg", cAlternateFileName="")) returned 1 [0117.830] FindNextFileW (in: hFindFile=0x381d40, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0117.830] FindClose (in: hFindFile=0x381d40 | out: hFindFile=0x381d40) returned 1 [0117.831] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e77c) returned 1 [0117.831] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e788) returned 1 [0117.831] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e7bc) returned 1 [0117.831] GetFullPathNameW (in: lpFileName="C:\\Windows\\Web\\Wallpaper\\Scenes", nBufferLength=0x105, lpBuffer=0x31e2c4, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\Web\\Wallpaper\\Scenes", lpFilePart=0x0) returned 0x1f [0117.831] GetFullPathNameW (in: lpFileName="C:\\Windows\\Web\\Wallpaper\\Scenes\\", nBufferLength=0x105, lpBuffer=0x31e298, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\Web\\Wallpaper\\Scenes\\", lpFilePart=0x0) returned 0x20 [0117.831] FindFirstFileW (in: lpFileName="C:\\Windows\\Web\\Wallpaper\\Scenes\\*", lpFindFileData=0x31e4e4 | out: lpFindFileData=0x31e4e4*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x937461fc, ftCreationTime.dwHighDateTime=0x1cbf8eb, ftLastAccessTime.dwLowDateTime=0xaa86cdff, ftLastAccessTime.dwHighDateTime=0x1cbf8eb, ftLastWriteTime.dwLowDateTime=0x93cefe76, ftLastWriteTime.dwHighDateTime=0x1cbf8eb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x381d40 [0117.832] FindNextFileW (in: hFindFile=0x381d40, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x937461fc, ftCreationTime.dwHighDateTime=0x1cbf8eb, ftLastAccessTime.dwLowDateTime=0xaa86cdff, ftLastAccessTime.dwHighDateTime=0x1cbf8eb, ftLastWriteTime.dwLowDateTime=0x93cefe76, ftLastWriteTime.dwHighDateTime=0x1cbf8eb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0117.832] FindNextFileW (in: hFindFile=0x381d40, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0x93cefe76, ftCreationTime.dwHighDateTime=0x1cbf8eb, ftLastAccessTime.dwLowDateTime=0x8a2fcc8f, ftLastAccessTime.dwHighDateTime=0x1cbf8eb, ftLastWriteTime.dwLowDateTime=0x8a2fcc8f, ftLastWriteTime.dwHighDateTime=0x1cbf8eb, nFileSizeHigh=0x0, nFileSizeLow=0x51, dwReserved0=0x0, dwReserved1=0x0, cFileName="Desktop.ini", cAlternateFileName="")) returned 1 [0117.832] FindNextFileW (in: hFindFile=0x381d40, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb73e9b0f, ftCreationTime.dwHighDateTime=0x1ca0403, ftLastAccessTime.dwLowDateTime=0xb73e9b0f, ftLastAccessTime.dwHighDateTime=0x1ca0403, ftLastWriteTime.dwLowDateTime=0x8f2657dd, ftLastWriteTime.dwHighDateTime=0x1c9ea0c, nFileSizeHigh=0x0, nFileSizeLow=0x1bba15, dwReserved0=0x0, dwReserved1=0x0, cFileName="img25.jpg", cAlternateFileName="")) returned 1 [0117.832] FindNextFileW (in: hFindFile=0x381d40, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb745bf26, ftCreationTime.dwHighDateTime=0x1ca0403, ftLastAccessTime.dwLowDateTime=0xb745bf26, ftLastAccessTime.dwHighDateTime=0x1ca0403, ftLastWriteTime.dwLowDateTime=0x8f2fdd55, ftLastWriteTime.dwHighDateTime=0x1c9ea0c, nFileSizeHigh=0x0, nFileSizeLow=0x1a0444, dwReserved0=0x0, dwReserved1=0x0, cFileName="img26.jpg", cAlternateFileName="")) returned 1 [0117.832] FindNextFileW (in: hFindFile=0x381d40, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb74ce33d, ftCreationTime.dwHighDateTime=0x1ca0403, ftLastAccessTime.dwLowDateTime=0xb74ce33d, ftLastAccessTime.dwHighDateTime=0x1ca0403, ftLastWriteTime.dwLowDateTime=0x8f3962cd, ftLastWriteTime.dwHighDateTime=0x1c9ea0c, nFileSizeHigh=0x0, nFileSizeLow=0x1f7fa6, dwReserved0=0x0, dwReserved1=0x0, cFileName="img27.jpg", cAlternateFileName="")) returned 1 [0117.832] FindNextFileW (in: hFindFile=0x381d40, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb75fee25, ftCreationTime.dwHighDateTime=0x1ca0403, ftLastAccessTime.dwLowDateTime=0xb75fee25, ftLastAccessTime.dwHighDateTime=0x1ca0403, ftLastWriteTime.dwLowDateTime=0x8f47ab01, ftLastWriteTime.dwHighDateTime=0x1c9ea0c, nFileSizeHigh=0x0, nFileSizeLow=0xf170a, dwReserved0=0x0, dwReserved1=0x0, cFileName="img28.jpg", cAlternateFileName="")) returned 1 [0117.832] FindNextFileW (in: hFindFile=0x381d40, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb767123c, ftCreationTime.dwHighDateTime=0x1ca0403, ftLastAccessTime.dwLowDateTime=0xb767123c, ftLastAccessTime.dwHighDateTime=0x1ca0403, ftLastWriteTime.dwLowDateTime=0x8f4a0c5f, ftLastWriteTime.dwHighDateTime=0x1c9ea0c, nFileSizeHigh=0x0, nFileSizeLow=0x151faf, dwReserved0=0x0, dwReserved1=0x0, cFileName="img29.jpg", cAlternateFileName="")) returned 1 [0117.833] FindNextFileW (in: hFindFile=0x381d40, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb77c7e81, ftCreationTime.dwHighDateTime=0x1ca0403, ftLastAccessTime.dwLowDateTime=0xb77c7e81, ftLastAccessTime.dwHighDateTime=0x1ca0403, ftLastWriteTime.dwLowDateTime=0x8f585493, ftLastWriteTime.dwHighDateTime=0x1c9ea0c, nFileSizeHigh=0x0, nFileSizeLow=0x12e427, dwReserved0=0x0, dwReserved1=0x0, cFileName="img30.jpg", cAlternateFileName="")) returned 1 [0117.833] FindNextFileW (in: hFindFile=0x381d40, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb77c7e81, ftCreationTime.dwHighDateTime=0x1ca0403, ftLastAccessTime.dwLowDateTime=0xb77c7e81, ftLastAccessTime.dwHighDateTime=0x1ca0403, ftLastWriteTime.dwLowDateTime=0x8f585493, ftLastWriteTime.dwHighDateTime=0x1c9ea0c, nFileSizeHigh=0x0, nFileSizeLow=0x12e427, dwReserved0=0x0, dwReserved1=0x0, cFileName="img30.jpg", cAlternateFileName="")) returned 0 [0117.833] FindClose (in: hFindFile=0x381d40 | out: hFindFile=0x381d40) returned 1 [0117.833] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e77c) returned 1 [0117.833] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e788) returned 1 [0117.833] GetFullPathNameW (in: lpFileName="C:\\Windows\\Web\\Wallpaper\\Scenes\\img25.jpg", nBufferLength=0x105, lpBuffer=0x31e194, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\Web\\Wallpaper\\Scenes\\img25.jpg", lpFilePart=0x0) returned 0x29 [0117.834] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e688) returned 1 [0117.834] CreateFileW (lpFileName="C:\\Windows\\Web\\Wallpaper\\Scenes\\img25.jpg" (normalized: "c:\\windows\\web\\wallpaper\\scenes\\img25.jpg"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x178 [0117.840] GetFileType (hFile=0x178) returned 0x1 [0117.840] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e684) returned 1 [0117.840] GetFileType (hFile=0x178) returned 0x1 [0117.840] GetFileSize (in: hFile=0x178, lpFileSizeHigh=0x31e790 | out: lpFileSizeHigh=0x31e790*=0x0) returned 0x1bba15 [0117.887] ReadFile (in: hFile=0x178, lpBuffer=0x36194b0, nNumberOfBytesToRead=0x1bba15, lpNumberOfBytesRead=0x31e73c, lpOverlapped=0x0 | out: lpBuffer=0x36194b0*, lpNumberOfBytesRead=0x31e73c*=0x1bba15, lpOverlapped=0x0) returned 1 [0117.919] CloseHandle (hObject=0x178) returned 1 [0118.067] GetFullPathNameW (in: lpFileName="C:\\Windows\\Web\\Wallpaper\\Scenes\\img25.jpg", nBufferLength=0x105, lpBuffer=0x31e180, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\Web\\Wallpaper\\Scenes\\img25.jpg", lpFilePart=0x0) returned 0x29 [0118.067] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e674) returned 1 [0118.067] CreateFileW (lpFileName="C:\\Windows\\Web\\Wallpaper\\Scenes\\img25.jpg" (normalized: "c:\\windows\\web\\wallpaper\\scenes\\img25.jpg"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0xffffffff [0118.068] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31d4b0) returned 1 [0118.068] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e7bc) returned 1 [0118.069] GetFullPathNameW (in: lpFileName="C:\\Windows\\Web\\Wallpaper\\Windows", nBufferLength=0x105, lpBuffer=0x31e2c4, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\Web\\Wallpaper\\Windows", lpFilePart=0x0) returned 0x20 [0118.069] GetFullPathNameW (in: lpFileName="C:\\Windows\\Web\\Wallpaper\\Windows\\", nBufferLength=0x105, lpBuffer=0x31e298, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\Web\\Wallpaper\\Windows\\", lpFilePart=0x0) returned 0x21 [0118.069] FindFirstFileW (in: lpFileName="C:\\Windows\\Web\\Wallpaper\\Windows\\*", lpFindFileData=0x31e4e4 | out: lpFindFileData=0x31e4e4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x80046d91, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0xaa86cdff, ftLastAccessTime.dwHighDateTime=0x1cbf8eb, ftLastWriteTime.dwLowDateTime=0x93daeaa1, ftLastWriteTime.dwHighDateTime=0x1cbf8eb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x381d40 [0118.069] FindNextFileW (in: hFindFile=0x381d40, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x80046d91, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0xaa86cdff, ftLastAccessTime.dwHighDateTime=0x1cbf8eb, ftLastWriteTime.dwLowDateTime=0x93daeaa1, ftLastWriteTime.dwHighDateTime=0x1cbf8eb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0118.069] FindNextFileW (in: hFindFile=0x381d40, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x302d6005, ftCreationTime.dwHighDateTime=0x1c9ea49, ftLastAccessTime.dwLowDateTime=0x302d6005, ftLastAccessTime.dwHighDateTime=0x1c9ea49, ftLastWriteTime.dwLowDateTime=0x302fc165, ftLastWriteTime.dwHighDateTime=0x1c9ea49, nFileSizeHigh=0x0, nFileSizeLow=0x9cfab, dwReserved0=0x0, dwReserved1=0x0, cFileName="img0.jpg", cAlternateFileName="")) returned 1 [0118.069] FindNextFileW (in: hFindFile=0x381d40, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0118.069] FindClose (in: hFindFile=0x381d40 | out: hFindFile=0x381d40) returned 1 [0118.069] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e77c) returned 1 [0118.069] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e788) returned 1 [0118.069] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e7bc) returned 1 [0118.069] GetFullPathNameW (in: lpFileName="C:\\Windows\\Web\\Wallpaper\\Windows", nBufferLength=0x105, lpBuffer=0x31e2c4, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\Web\\Wallpaper\\Windows", lpFilePart=0x0) returned 0x20 [0118.070] GetFullPathNameW (in: lpFileName="C:\\Windows\\Web\\Wallpaper\\Windows\\", nBufferLength=0x105, lpBuffer=0x31e298, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\Web\\Wallpaper\\Windows\\", lpFilePart=0x0) returned 0x21 [0118.070] FindFirstFileW (in: lpFileName="C:\\Windows\\Web\\Wallpaper\\Windows\\*", lpFindFileData=0x31e4e4 | out: lpFindFileData=0x31e4e4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x80046d91, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0xaa86cdff, ftLastAccessTime.dwHighDateTime=0x1cbf8eb, ftLastWriteTime.dwLowDateTime=0x93daeaa1, ftLastWriteTime.dwHighDateTime=0x1cbf8eb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x381d40 [0118.070] FindNextFileW (in: hFindFile=0x381d40, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x80046d91, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0xaa86cdff, ftLastAccessTime.dwHighDateTime=0x1cbf8eb, ftLastWriteTime.dwLowDateTime=0x93daeaa1, ftLastWriteTime.dwHighDateTime=0x1cbf8eb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0118.070] FindNextFileW (in: hFindFile=0x381d40, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x302d6005, ftCreationTime.dwHighDateTime=0x1c9ea49, ftLastAccessTime.dwLowDateTime=0x302d6005, ftLastAccessTime.dwHighDateTime=0x1c9ea49, ftLastWriteTime.dwLowDateTime=0x302fc165, ftLastWriteTime.dwHighDateTime=0x1c9ea49, nFileSizeHigh=0x0, nFileSizeLow=0x9cfab, dwReserved0=0x0, dwReserved1=0x0, cFileName="img0.jpg", cAlternateFileName="")) returned 1 [0118.070] FindNextFileW (in: hFindFile=0x381d40, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x302d6005, ftCreationTime.dwHighDateTime=0x1c9ea49, ftLastAccessTime.dwLowDateTime=0x302d6005, ftLastAccessTime.dwHighDateTime=0x1c9ea49, ftLastWriteTime.dwLowDateTime=0x302fc165, ftLastWriteTime.dwHighDateTime=0x1c9ea49, nFileSizeHigh=0x0, nFileSizeLow=0x9cfab, dwReserved0=0x0, dwReserved1=0x0, cFileName="img0.jpg", cAlternateFileName="")) returned 0 [0118.070] FindClose (in: hFindFile=0x381d40 | out: hFindFile=0x381d40) returned 1 [0118.070] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e77c) returned 1 [0118.070] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e788) returned 1 [0118.070] GetFullPathNameW (in: lpFileName="C:\\Windows\\Web\\Wallpaper\\Windows\\img0.jpg", nBufferLength=0x105, lpBuffer=0x31e194, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\Web\\Wallpaper\\Windows\\img0.jpg", lpFilePart=0x0) returned 0x29 [0118.070] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e688) returned 1 [0118.070] CreateFileW (lpFileName="C:\\Windows\\Web\\Wallpaper\\Windows\\img0.jpg" (normalized: "c:\\windows\\web\\wallpaper\\windows\\img0.jpg"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x178 [0118.071] GetFileType (hFile=0x178) returned 0x1 [0118.071] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e684) returned 1 [0118.071] GetFileType (hFile=0x178) returned 0x1 [0118.071] GetFileSize (in: hFile=0x178, lpFileSizeHigh=0x31e790 | out: lpFileSizeHigh=0x31e790*=0x0) returned 0x9cfab [0118.071] ReadFile (in: hFile=0x178, lpBuffer=0x37d4ee8, nNumberOfBytesToRead=0x9cfab, lpNumberOfBytesRead=0x31e73c, lpOverlapped=0x0 | out: lpBuffer=0x37d4ee8*, lpNumberOfBytesRead=0x31e73c*=0x9cfab, lpOverlapped=0x0) returned 1 [0118.078] CloseHandle (hObject=0x178) returned 1 [0118.119] GetFullPathNameW (in: lpFileName="C:\\Windows\\Web\\Wallpaper\\Windows\\img0.jpg", nBufferLength=0x105, lpBuffer=0x31e180, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\Web\\Wallpaper\\Windows\\img0.jpg", lpFilePart=0x0) returned 0x29 [0118.119] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e674) returned 1 [0118.119] CreateFileW (lpFileName="C:\\Windows\\Web\\Wallpaper\\Windows\\img0.jpg" (normalized: "c:\\windows\\web\\wallpaper\\windows\\img0.jpg"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0xffffffff [0118.120] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31d4b0) returned 1 [0118.120] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e8ac) returned 1 [0118.120] GetFullPathNameW (in: lpFileName="C:\\Windows\\winsxs", nBufferLength=0x105, lpBuffer=0x31e3b4, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\winsxs", lpFilePart=0x0) returned 0x11 [0118.120] GetFullPathNameW (in: lpFileName="C:\\Windows\\winsxs\\", nBufferLength=0x105, lpBuffer=0x31e388, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\winsxs\\", lpFilePart=0x0) returned 0x12 [0118.120] FindFirstFileW (in: lpFileName="C:\\Windows\\winsxs\\*", lpFindFileData=0x31e5d4 | out: lpFindFileData=0x31e5d4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x12fc3ac, ftCreationTime.dwHighDateTime=0x1ca0432, ftLastAccessTime.dwLowDateTime=0xbbbe9b70, ftLastAccessTime.dwHighDateTime=0x1d2fab4, ftLastWriteTime.dwLowDateTime=0xbbbe9b70, ftLastWriteTime.dwHighDateTime=0x1d2fab4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x381b80 [0118.124] FindNextFileW (in: hFindFile=0x381b80, lpFindFileData=0x31e5e4 | out: lpFindFileData=0x31e5e4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x12fc3ac, ftCreationTime.dwHighDateTime=0x1ca0432, ftLastAccessTime.dwLowDateTime=0xbbbe9b70, ftLastAccessTime.dwHighDateTime=0x1d2fab4, ftLastWriteTime.dwLowDateTime=0xbbbe9b70, ftLastWriteTime.dwHighDateTime=0x1d2fab4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0118.300] FindNextFileW (in: hFindFile=0x381b80, lpFindFileData=0x31e5e4 | out: lpFindFileData=0x31e5e4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd2fc3fb, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0xd2fc3fb, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0xd2fc3fb, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="amd64_1394.inf.resources_31bf3856ad364e35_6.1.7600.16385_en-us_beafdf583b909e3f", cAlternateFileName="AMEDF5~1.163")) returned 1 [0118.300] FindNextFileW (in: hFindFile=0x381b80, lpFindFileData=0x31e5e4 | out: lpFindFileData=0x31e5e4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x340512f, ftCreationTime.dwHighDateTime=0x1cb892a, ftLastAccessTime.dwLowDateTime=0x83e2ebb5, ftLastAccessTime.dwHighDateTime=0x1cb892b, ftLastWriteTime.dwLowDateTime=0x83e2ebb5, ftLastWriteTime.dwHighDateTime=0x1cb892b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="amd64_1394.inf_31bf3856ad364e35_6.1.7601.17514_none_59555c0e1c877c53", cAlternateFileName="AME602~1.175")) returned 1 [0118.300] FindNextFileW (in: hFindFile=0x381b80, lpFindFileData=0x31e5e4 | out: lpFindFileData=0x31e5e4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xcd51c85, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0xcd51c85, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0xcd51c85, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="amd64_61883.inf.resources_31bf3856ad364e35_6.1.7600.16385_en-us_91f21dbac7469950", cAlternateFileName="AMDD85~1.163")) returned 1 [0118.300] FindNextFileW (in: hFindFile=0x381b80, lpFindFileData=0x31e5e4 | out: lpFindFileData=0x31e5e4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x19349e5b, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x19349e5b, ftLastAccessTime.dwHighDateTime=0x1ca0444, ftLastWriteTime.dwLowDateTime=0x19349e5b, ftLastWriteTime.dwHighDateTime=0x1ca0444, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="amd64_61883.inf_31bf3856ad364e35_6.1.7600.16385_none_85f254c73905f86e", cAlternateFileName="AM829B~1.163")) returned 1 [0118.300] FindNextFileW (in: hFindFile=0x381b80, lpFindFileData=0x31e5e4 | out: lpFindFileData=0x31e5e4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd3226b4, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0xd3226b4, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0xd3226b4, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="amd64_acpi.inf.resources_31bf3856ad364e35_6.1.7600.16385_en-us_0fa7d070e2960b75", cAlternateFileName="AM46C2~1.163")) returned 1 [0118.300] FindNextFileW (in: hFindFile=0x381b80, lpFindFileData=0x31e5e4 | out: lpFindFileData=0x31e5e4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x3b031dc, ftCreationTime.dwHighDateTime=0x1cb892a, ftLastAccessTime.dwLowDateTime=0x83e54d16, ftLastAccessTime.dwHighDateTime=0x1cb892b, ftLastWriteTime.dwLowDateTime=0x83e54d16, ftLastWriteTime.dwHighDateTime=0x1cb892b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="amd64_acpi.inf_31bf3856ad364e35_6.1.7601.17514_none_80aec972e4a75989", cAlternateFileName="AM2755~1.175")) returned 1 [0118.300] FindNextFileW (in: hFindFile=0x381b80, lpFindFileData=0x31e5e4 | out: lpFindFileData=0x31e5e4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd2fc3fb, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0xd2fc3fb, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0xd2fc3fb, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="amd64_acpipmi.inf.resources_31bf3856ad364e35_6.1.7600.16385_en-us_ac73b2c5fc356f15", cAlternateFileName="AM38AB~1.163")) returned 1 [0118.300] FindNextFileW (in: hFindFile=0x381b80, lpFindFileData=0x31e5e4 | out: lpFindFileData=0x31e5e4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x83e08a55, ftCreationTime.dwHighDateTime=0x1cb892b, ftLastAccessTime.dwLowDateTime=0x83e08a55, ftLastAccessTime.dwHighDateTime=0x1cb892b, ftLastWriteTime.dwLowDateTime=0x83e08a55, ftLastWriteTime.dwHighDateTime=0x1cb892b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="amd64_acpipmi.inf_31bf3856ad364e35_6.1.7601.17514_none_05a4bc65d71b80df", cAlternateFileName="AMB100~1.175")) returned 1 [0118.301] FindNextFileW (in: hFindFile=0x381b80, lpFindFileData=0x31e5e4 | out: lpFindFileData=0x31e5e4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xb47a4516, ftCreationTime.dwHighDateTime=0x1cb892a, ftLastAccessTime.dwLowDateTime=0xb017398c, ftLastAccessTime.dwHighDateTime=0x1cb892b, ftLastWriteTime.dwLowDateTime=0xb017398c, ftLastWriteTime.dwHighDateTime=0x1cb892b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="amd64_addinprocess32_b77a5c561934e089_6.1.7601.17514_none_df35b5ac03866e22", cAlternateFileName="AMC8EF~1.175")) returned 1 [0118.301] FindNextFileW (in: hFindFile=0x381b80, lpFindFileData=0x31e5e4 | out: lpFindFileData=0x31e5e4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd3226b4, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0xd3226b4, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0xd3226b4, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="amd64_adp94xx.inf.resources_31bf3856ad364e35_6.1.7600.16385_en-us_7d4dd7ec25670124", cAlternateFileName="AMEDFD~1.163")) returned 1 [0118.301] FindNextFileW (in: hFindFile=0x381b80, lpFindFileData=0x31e5e4 | out: lpFindFileData=0x31e5e4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1a35b2f9, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x1a35b2f9, ftLastAccessTime.dwHighDateTime=0x1ca0444, ftLastWriteTime.dwLowDateTime=0x1a35b2f9, ftLastWriteTime.dwHighDateTime=0x1ca0444, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="amd64_adp94xx.inf_31bf3856ad364e35_6.1.7600.16385_none_5de621becad4e4ec", cAlternateFileName="AMC2EA~1.163")) returned 1 [0118.301] FindNextFileW (in: hFindFile=0x381b80, lpFindFileData=0x31e5e4 | out: lpFindFileData=0x31e5e4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd3226b4, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0xd3226b4, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0xd3226b4, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="amd64_adpahci.inf.resources_31bf3856ad364e35_6.1.7600.16385_en-us_88af6947356320a2", cAlternateFileName="AMA1C7~1.163")) returned 1 [0118.301] FindNextFileW (in: hFindFile=0x381b80, lpFindFileData=0x31e5e4 | out: lpFindFileData=0x31e5e4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1a35b2f9, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x1a35b2f9, ftLastAccessTime.dwHighDateTime=0x1ca0444, ftLastWriteTime.dwLowDateTime=0x1a35b2f9, ftLastWriteTime.dwHighDateTime=0x1ca0444, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="amd64_adpahci.inf_31bf3856ad364e35_6.1.7600.16385_none_c03269cd9f4f5ed2", cAlternateFileName="AM432C~1.163")) returned 1 [0118.301] FindNextFileW (in: hFindFile=0x381b80, lpFindFileData=0x31e5e4 | out: lpFindFileData=0x31e5e4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd3226b4, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0xd3226b4, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0xd3226b4, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="amd64_adpu320.inf.resources_31bf3856ad364e35_6.1.7600.16385_en-us_6a45a05a6afc0a79", cAlternateFileName="AM15FC~1.163")) returned 1 [0118.301] FindNextFileW (in: hFindFile=0x381b80, lpFindFileData=0x31e5e4 | out: lpFindFileData=0x31e5e4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1a35b2f9, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x1a35b2f9, ftLastAccessTime.dwHighDateTime=0x1ca0444, ftLastWriteTime.dwLowDateTime=0x1a35b2f9, ftLastWriteTime.dwHighDateTime=0x1ca0444, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="amd64_adpu320.inf_31bf3856ad364e35_6.1.7600.16385_none_f4a210f475e000bb", cAlternateFileName="AM5E9E~1.163")) returned 1 [0118.301] FindNextFileW (in: hFindFile=0x381b80, lpFindFileData=0x31e5e4 | out: lpFindFileData=0x31e5e4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1b404d17, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x1b404d17, ftLastAccessTime.dwHighDateTime=0x1ca0444, ftLastWriteTime.dwLowDateTime=0x1b404d17, ftLastWriteTime.dwHighDateTime=0x1ca0444, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="amd64_af9035bda.inf_31bf3856ad364e35_6.1.7600.16385_none_63dceacb39391445", cAlternateFileName="AMD1D0~1.163")) returned 1 [0118.301] FindNextFileW (in: hFindFile=0x381b80, lpFindFileData=0x31e5e4 | out: lpFindFileData=0x31e5e4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd3226b4, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0xd3226b4, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0xd3226b4, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="amd64_agp.inf.resources_31bf3856ad364e35_6.1.7600.16385_en-us_c1d2a33730aa56a6", cAlternateFileName="AMBAD5~1.163")) returned 1 [0118.304] FindNextFileW (in: hFindFile=0x381b80, lpFindFileData=0x31e5e4 | out: lpFindFileData=0x31e5e4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1a35b2f9, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x1a35b2f9, ftLastAccessTime.dwHighDateTime=0x1ca0444, ftLastWriteTime.dwLowDateTime=0x1a35b2f9, ftLastWriteTime.dwHighDateTime=0x1ca0444, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="amd64_agp.inf_31bf3856ad364e35_6.1.7600.16385_none_c7f512edfa7ccbd0", cAlternateFileName="AME174~1.163")) returned 1 [0118.304] FindNextFileW (in: hFindFile=0x381b80, lpFindFileData=0x31e5e4 | out: lpFindFileData=0x31e5e4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd3226b4, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0xd3226b4, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0xd3226b4, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="amd64_amdsata.inf.resources_31bf3856ad364e35_6.1.7600.16385_en-us_9c21da54655fab3d", cAlternateFileName="AM5AD9~1.163")) returned 1 [0118.304] FindNextFileW (in: hFindFile=0x381b80, lpFindFileData=0x31e5e4 | out: lpFindFileData=0x31e5e4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x83e54d16, ftCreationTime.dwHighDateTime=0x1cb892b, ftLastAccessTime.dwLowDateTime=0x83e54d16, ftLastAccessTime.dwHighDateTime=0x1cb892b, ftLastWriteTime.dwLowDateTime=0x83e54d16, ftLastWriteTime.dwHighDateTime=0x1cb892b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="amd64_amdsata.inf_31bf3856ad364e35_6.1.7601.17514_none_aa92dcaf988a9119", cAlternateFileName="AMD1FC~1.175")) returned 1 [0118.304] FindNextFileW (in: hFindFile=0x381b80, lpFindFileData=0x31e5e4 | out: lpFindFileData=0x31e5e4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd3226b4, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0xd3226b4, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0xd3226b4, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="amd64_amdsbs.inf.resources_31bf3856ad364e35_6.1.7600.16385_en-us_267caec07f213aec", cAlternateFileName="AM8DAF~1.163")) returned 1 [0118.304] FindNextFileW (in: hFindFile=0x381b80, lpFindFileData=0x31e5e4 | out: lpFindFileData=0x31e5e4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1a335198, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x1a35b2f9, ftLastAccessTime.dwHighDateTime=0x1ca0444, ftLastWriteTime.dwLowDateTime=0x1a35b2f9, ftLastWriteTime.dwHighDateTime=0x1ca0444, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="amd64_amdsbs.inf_31bf3856ad364e35_6.1.7600.16385_none_c192282a2ed13c70", cAlternateFileName="AMA76F~1.163")) returned 1 [0118.305] FindNextFileW (in: hFindFile=0x381b80, lpFindFileData=0x31e5e4 | out: lpFindFileData=0x31e5e4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1b3debb7, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x1b3debb7, ftLastAccessTime.dwHighDateTime=0x1ca0444, ftLastWriteTime.dwLowDateTime=0x1b3debb7, ftLastWriteTime.dwHighDateTime=0x1ca0444, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="amd64_angel264.inf_31bf3856ad364e35_6.1.7600.16385_none_9421cee72a5bb5c5", cAlternateFileName="AMC215~1.163")) returned 1 [0118.305] FindNextFileW (in: hFindFile=0x381b80, lpFindFileData=0x31e5e4 | out: lpFindFileData=0x31e5e4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1b3debb7, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x1b3debb7, ftLastAccessTime.dwHighDateTime=0x1ca0444, ftLastWriteTime.dwLowDateTime=0x1b3debb7, ftLastWriteTime.dwHighDateTime=0x1ca0444, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="amd64_angel64.inf_31bf3856ad364e35_6.1.7600.16385_none_56f2fed0f57bbc5f", cAlternateFileName="AM2597~1.163")) returned 1 [0118.305] FindNextFileW (in: hFindFile=0x381b80, lpFindFileData=0x31e5e4 | out: lpFindFileData=0x31e5e4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1b3debb7, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x1b3debb7, ftLastAccessTime.dwHighDateTime=0x1ca0444, ftLastWriteTime.dwLowDateTime=0x1b3debb7, ftLastWriteTime.dwHighDateTime=0x1ca0444, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="amd64_angelu64.inf_31bf3856ad364e35_6.1.7600.16385_none_450d9d3ea6565bb0", cAlternateFileName="AME972~1.163")) returned 1 [0118.305] FindNextFileW (in: hFindFile=0x381b80, lpFindFileData=0x31e5e4 | out: lpFindFileData=0x31e5e4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd3226b4, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0xd3226b4, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0xd3226b4, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="amd64_arc.inf.resources_31bf3856ad364e35_6.1.7600.16385_en-us_0d84bbf86bc07c16", cAlternateFileName="AMA571~1.163")) returned 1 [0118.305] FindNextFileW (in: hFindFile=0x381b80, lpFindFileData=0x31e5e4 | out: lpFindFileData=0x31e5e4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1a35b2f9, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x1a35b2f9, ftLastAccessTime.dwHighDateTime=0x1ca0444, ftLastWriteTime.dwLowDateTime=0x1a35b2f9, ftLastWriteTime.dwHighDateTime=0x1ca0444, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="amd64_arc.inf_31bf3856ad364e35_6.1.7600.16385_none_7bd52eeae18aa940", cAlternateFileName="AMB2BD~1.163")) returned 1 [0118.305] FindNextFileW (in: hFindFile=0x381b80, lpFindFileData=0x31e5e4 | out: lpFindFileData=0x31e5e4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd3226b4, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0xd3226b4, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0xd3226b4, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="amd64_arcsas.inf.resources_31bf3856ad364e35_6.1.7600.16385_en-us_ae7fa716cfd0da1f", cAlternateFileName="AM7F97~1.163")) returned 1 [0118.305] FindNextFileW (in: hFindFile=0x381b80, lpFindFileData=0x31e5e4 | out: lpFindFileData=0x31e5e4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1a35b2f9, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x1a35b2f9, ftLastAccessTime.dwHighDateTime=0x1ca0444, ftLastWriteTime.dwLowDateTime=0x1a35b2f9, ftLastWriteTime.dwHighDateTime=0x1ca0444, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="amd64_arcsas.inf_31bf3856ad364e35_6.1.7600.16385_none_76ecda49a2a75845", cAlternateFileName="AM0E14~1.163")) returned 1 [0118.305] FindNextFileW (in: hFindFile=0x381b80, lpFindFileData=0x31e5e4 | out: lpFindFileData=0x31e5e4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa5856f6, ftCreationTime.dwHighDateTime=0x1ca0432, ftLastAccessTime.dwLowDateTime=0xa5856f6, ftLastAccessTime.dwHighDateTime=0x1ca0432, ftLastWriteTime.dwLowDateTime=0xa5856f6, ftLastWriteTime.dwHighDateTime=0x1ca0432, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="amd64_aspnet_compiler_b03f5f7f11d50a3a_6.1.7600.16385_none_a5a135380060b978", cAlternateFileName="AMD64_~1.163")) returned 1 [0118.306] FindNextFileW (in: hFindFile=0x381b80, lpFindFileData=0x31e5e4 | out: lpFindFileData=0x31e5e4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa5856f6, ftCreationTime.dwHighDateTime=0x1ca0432, ftLastAccessTime.dwLowDateTime=0xa5856f6, ftLastAccessTime.dwHighDateTime=0x1ca0432, ftLastWriteTime.dwLowDateTime=0xa5856f6, ftLastWriteTime.dwHighDateTime=0x1ca0432, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="amd64_aspnet_regbrowsers_b03f5f7f11d50a3a_6.1.7600.16385_none_96421d40c0e2903e", cAlternateFileName="AMD64_~2.163")) returned 1 [0118.306] FindNextFileW (in: hFindFile=0x381b80, lpFindFileData=0x31e5e4 | out: lpFindFileData=0x31e5e4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa5856f6, ftCreationTime.dwHighDateTime=0x1ca0432, ftLastAccessTime.dwLowDateTime=0xa5856f6, ftLastAccessTime.dwHighDateTime=0x1ca0432, ftLastWriteTime.dwLowDateTime=0xa5856f6, ftLastWriteTime.dwHighDateTime=0x1ca0432, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="amd64_aspnet_regsql_b03f5f7f11d50a3a_6.1.7600.16385_none_dcb42ec76404494f", cAlternateFileName="AMD64_~3.163")) returned 1 [0118.306] FindNextFileW (in: hFindFile=0x381b80, lpFindFileData=0x31e5e4 | out: lpFindFileData=0x31e5e4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xcd77f3e, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0xcd77f3e, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0xcd77f3e, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="amd64_atiilhag.inf.resources_31bf3856ad364e35_6.1.7600.16385_en-us_a84b3670179ab5eb", cAlternateFileName="AM8C56~1.163")) returned 1 [0118.308] FindNextFileW (in: hFindFile=0x381b80, lpFindFileData=0x31e5e4 | out: lpFindFileData=0x31e5e4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x29c123c, ftCreationTime.dwHighDateTime=0x1cb892a, ftLastAccessTime.dwLowDateTime=0x83de28f5, ftLastAccessTime.dwHighDateTime=0x1cb892b, ftLastWriteTime.dwLowDateTime=0x83de28f5, ftLastWriteTime.dwHighDateTime=0x1cb892b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="amd64_atiilhag.inf_31bf3856ad364e35_6.1.7601.17514_none_03c46b205be81dfd", cAlternateFileName="AMF73E~1.175")) returned 1 [0118.308] FindNextFileW (in: hFindFile=0x381b80, lpFindFileData=0x31e5e4 | out: lpFindFileData=0x31e5e4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1b36c796, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x1b36c796, ftLastAccessTime.dwHighDateTime=0x1ca0444, ftLastWriteTime.dwLowDateTime=0x1b36c796, ftLastWriteTime.dwHighDateTime=0x1ca0444, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="amd64_atiriol6.inf_31bf3856ad364e35_6.1.7600.16385_none_a909ad21d26d5bd0", cAlternateFileName="AM9081~1.163")) returned 1 [0118.309] FindNextFileW (in: hFindFile=0x381b80, lpFindFileData=0x31e5e4 | out: lpFindFileData=0x31e5e4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x28107551, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x28107551, ftLastAccessTime.dwHighDateTime=0x1ca0444, ftLastWriteTime.dwLowDateTime=0x28107551, ftLastWriteTime.dwHighDateTime=0x1ca0444, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="amd64_auditpolicygpmanagedstubs.interop_31bf3856ad364e35_6.1.7600.16385_none_7dea25c08325286d", cAlternateFileName="AM4F55~1.163")) returned 1 [0118.309] FindNextFileW (in: hFindFile=0x381b80, lpFindFileData=0x31e5e4 | out: lpFindFileData=0x31e5e4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xcd77f3e, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0xcd77f3e, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0xcd77f3e, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="amd64_avc.inf.resources_31bf3856ad364e35_6.1.7600.16385_en-us_700d963de350befa", cAlternateFileName="AM4DFC~1.163")) returned 1 [0118.309] FindNextFileW (in: hFindFile=0x381b80, lpFindFileData=0x31e5e4 | out: lpFindFileData=0x31e5e4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1936ffbb, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x1936ffbb, ftLastAccessTime.dwHighDateTime=0x1ca0444, ftLastWriteTime.dwLowDateTime=0x1936ffbb, ftLastWriteTime.dwHighDateTime=0x1ca0444, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="amd64_avc.inf_31bf3856ad364e35_6.1.7600.16385_none_084e3f0eabcf1e24", cAlternateFileName="AMA8B5~1.163")) returned 1 [0118.309] FindNextFileW (in: hFindFile=0x381b80, lpFindFileData=0x31e5e4 | out: lpFindFileData=0x31e5e4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1b36c796, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x1b36c796, ftLastAccessTime.dwHighDateTime=0x1ca0444, ftLastWriteTime.dwLowDateTime=0x1b36c796, ftLastWriteTime.dwHighDateTime=0x1ca0444, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="amd64_averfx2hbh826d_noaverir_x64.inf_31bf3856ad364e35_6.1.7600.16385_none_3cfa3158fd5ab28e", cAlternateFileName="AM9BB4~1.163")) returned 1 [0118.309] FindNextFileW (in: hFindFile=0x381b80, lpFindFileData=0x31e5e4 | out: lpFindFileData=0x31e5e4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1b36c796, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x1b36c796, ftLastAccessTime.dwHighDateTime=0x1ca0444, ftLastWriteTime.dwLowDateTime=0x1b36c796, ftLastWriteTime.dwHighDateTime=0x1ca0444, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="amd64_averfx2hbtv_x64.inf_31bf3856ad364e35_6.1.7600.16385_none_2973b7e011e9c731", cAlternateFileName="AM5715~1.163")) returned 1 [0118.309] FindNextFileW (in: hFindFile=0x381b80, lpFindFileData=0x31e5e4 | out: lpFindFileData=0x31e5e4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1b36c796, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x1b36c796, ftLastAccessTime.dwHighDateTime=0x1ca0444, ftLastWriteTime.dwLowDateTime=0x1b36c796, ftLastWriteTime.dwHighDateTime=0x1ca0444, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="amd64_averfx2swtv_noavin_x64.inf_31bf3856ad364e35_6.1.7600.16385_none_d09f0e4b6533fbdf", cAlternateFileName="AMB39F~1.163")) returned 1 [0118.309] FindNextFileW (in: hFindFile=0x381b80, lpFindFileData=0x31e5e4 | out: lpFindFileData=0x31e5e4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1b36c796, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x1b36c796, ftLastAccessTime.dwHighDateTime=0x1ca0444, ftLastWriteTime.dwLowDateTime=0x1b36c796, ftLastWriteTime.dwHighDateTime=0x1ca0444, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="amd64_averfx2swtv_x64.inf_31bf3856ad364e35_6.1.7600.16385_none_fedee0b0e2af1d43", cAlternateFileName="AM50B9~1.163")) returned 1 [0118.309] FindNextFileW (in: hFindFile=0x381b80, lpFindFileData=0x31e5e4 | out: lpFindFileData=0x31e5e4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1b36c796, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x1b36c796, ftLastAccessTime.dwHighDateTime=0x1ca0444, ftLastWriteTime.dwLowDateTime=0x1b36c796, ftLastWriteTime.dwHighDateTime=0x1ca0444, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="amd64_averhbh826_noaverir_x64.inf_31bf3856ad364e35_6.1.7600.16385_none_627d53d0cd5664c2", cAlternateFileName="AM22F1~1.163")) returned 1 [0118.309] FindNextFileW (in: hFindFile=0x381b80, lpFindFileData=0x31e5e4 | out: lpFindFileData=0x31e5e4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xcd05713, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0xcd05713, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0xcd05713, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="amd64_avmx64c.inf.resources_31bf3856ad364e35_6.1.7600.16385_en-us_84e4d7e8642d499b", cAlternateFileName="AM9F0C~1.163")) returned 1 [0118.310] FindNextFileW (in: hFindFile=0x381b80, lpFindFileData=0x31e5e4 | out: lpFindFileData=0x31e5e4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x185e6282, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x185e6282, ftLastAccessTime.dwHighDateTime=0x1ca0444, ftLastWriteTime.dwLowDateTime=0x185e6282, ftLastWriteTime.dwHighDateTime=0x1ca0444, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="amd64_avmx64c.inf_31bf3856ad364e35_6.1.7600.16385_none_1b289ccdd9a4634d", cAlternateFileName="AM18D6~1.163")) returned 1 [0118.310] FindNextFileW (in: hFindFile=0x381b80, lpFindFileData=0x31e5e4 | out: lpFindFileData=0x31e5e4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd34896d, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0xd34896d, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0xd34896d, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="amd64_battery.inf.resources_31bf3856ad364e35_6.1.7601.17514_en-us_c317c225509402e3", cAlternateFileName="AM59BE~1.175")) returned 1 [0118.310] FindNextFileW (in: hFindFile=0x381b80, lpFindFileData=0x31e5e4 | out: lpFindFileData=0x31e5e4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1b346636, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x1b346636, ftLastAccessTime.dwHighDateTime=0x1ca0444, ftLastWriteTime.dwLowDateTime=0x1b346636, ftLastWriteTime.dwHighDateTime=0x1ca0444, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="amd64_battery.inf_31bf3856ad364e35_6.1.7600.16385_none_721c84936d812c57", cAlternateFileName="AM511B~1.163")) returned 1 [0118.310] FindNextFileW (in: hFindFile=0x381b80, lpFindFileData=0x31e5e4 | out: lpFindFileData=0x31e5e4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xcd51c85, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0xcd51c85, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0xcd51c85, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="amd64_bda.inf.resources_31bf3856ad364e35_6.1.7600.16385_en-us_906a43fee8d8369b", cAlternateFileName="AMEE60~1.163")) returned 1 [0118.314] FindNextFileW (in: hFindFile=0x381b80, lpFindFileData=0x31e5e4 | out: lpFindFileData=0x31e5e4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x19323cfb, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x19349e5b, ftLastAccessTime.dwHighDateTime=0x1ca0444, ftLastWriteTime.dwLowDateTime=0x19349e5b, ftLastWriteTime.dwHighDateTime=0x1ca0444, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="amd64_bda.inf_31bf3856ad364e35_6.1.7600.16385_none_5e69a2a6daa14883", cAlternateFileName="AMCF93~1.163")) returned 1 [0118.314] FindNextFileW (in: hFindFile=0x381b80, lpFindFileData=0x31e5e4 | out: lpFindFileData=0x31e5e4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa584bcf4, ftCreationTime.dwHighDateTime=0x1cb892b, ftLastAccessTime.dwLowDateTime=0xa584bcf4, ftLastAccessTime.dwHighDateTime=0x1cb892b, ftLastWriteTime.dwLowDateTime=0xa584bcf4, ftLastWriteTime.dwHighDateTime=0x1cb892b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="amd64_bdatunepia_31bf3856ad364e35_6.1.7601.17514_none_c81348afa0c88995", cAlternateFileName="AM96EE~1.175")) returned 1 [0118.314] FindNextFileW (in: hFindFile=0x381b80, lpFindFileData=0x31e5e4 | out: lpFindFileData=0x31e5e4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd34896d, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0xd34896d, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0xd34896d, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="amd64_blbdrive.inf.resources_31bf3856ad364e35_6.1.7600.16385_en-us_53dd38a4cf5b020e", cAlternateFileName="AM8D58~1.163")) returned 1 [0118.314] FindNextFileW (in: hFindFile=0x381b80, lpFindFileData=0x31e5e4 | out: lpFindFileData=0x31e5e4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1b3204d6, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x1b3204d6, ftLastAccessTime.dwHighDateTime=0x1ca0444, ftLastWriteTime.dwLowDateTime=0x1b3204d6, ftLastWriteTime.dwHighDateTime=0x1ca0444, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="amd64_blbdrive.inf_31bf3856ad364e35_6.1.7600.16385_none_e96898ffe0d97c7e", cAlternateFileName="AMCC81~1.163")) returned 1 [0118.314] FindNextFileW (in: hFindFile=0x381b80, lpFindFileData=0x31e5e4 | out: lpFindFileData=0x31e5e4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd36ec26, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0xd36ec26, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0xd36ec26, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="amd64_brmfcmdm.inf.resources_31bf3856ad364e35_6.1.7600.16385_en-us_628b3dbdafeb4174", cAlternateFileName="AMDEE0~1.163")) returned 1 [0118.314] FindNextFileW (in: hFindFile=0x381b80, lpFindFileData=0x31e5e4 | out: lpFindFileData=0x31e5e4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1bdb0689, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x1bdb0689, ftLastAccessTime.dwHighDateTime=0x1ca0444, ftLastWriteTime.dwLowDateTime=0x1bdb0689, ftLastWriteTime.dwHighDateTime=0x1ca0444, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="amd64_brmfcmdm.inf_31bf3856ad364e35_6.1.7600.16385_none_d5714398a0c68fde", cAlternateFileName="AM69B4~1.163")) returned 1 [0118.314] FindNextFileW (in: hFindFile=0x381b80, lpFindFileData=0x31e5e4 | out: lpFindFileData=0x31e5e4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xcd05713, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0xcd05713, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0xcd05713, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="amd64_brmfcmf.inf.resources_31bf3856ad364e35_6.1.7600.16385_en-us_e68db482264e806b", cAlternateFileName="AM636A~1.163")) returned 1 [0118.315] FindNextFileW (in: hFindFile=0x381b80, lpFindFileData=0x31e5e4 | out: lpFindFileData=0x31e5e4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1860c3e3, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x18632543, ftLastAccessTime.dwHighDateTime=0x1ca0444, ftLastWriteTime.dwLowDateTime=0x18632543, ftLastWriteTime.dwHighDateTime=0x1ca0444, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="amd64_brmfcmf.inf_31bf3856ad364e35_6.1.7600.16385_none_6f8740b92fea8e01", cAlternateFileName="AMEBB3~1.163")) returned 1 [0118.315] FindNextFileW (in: hFindFile=0x381b80, lpFindFileData=0x31e5e4 | out: lpFindFileData=0x31e5e4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd2fc3fb, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0xd2fc3fb, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0xd2fc3fb, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="amd64_brmfcsto.inf.resources_31bf3856ad364e35_6.1.7600.16385_en-us_bd552b3f3855af60", cAlternateFileName="AMD20F~1.163")) returned 1 [0118.315] FindNextFileW (in: hFindFile=0x381b80, lpFindFileData=0x31e5e4 | out: lpFindFileData=0x31e5e4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1a276ab7, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x1a276ab7, ftLastAccessTime.dwHighDateTime=0x1ca0444, ftLastWriteTime.dwLowDateTime=0x1a276ab7, ftLastWriteTime.dwHighDateTime=0x1ca0444, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="amd64_brmfcsto.inf_31bf3856ad364e35_6.1.7600.16385_none_7fe64f7a6167bcf6", cAlternateFileName="AM99EE~1.163")) returned 1 [0118.315] FindNextFileW (in: hFindFile=0x381b80, lpFindFileData=0x31e5e4 | out: lpFindFileData=0x31e5e4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd2fc3fb, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0xd2fc3fb, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0xd2fc3fb, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="amd64_brmfcumd.inf.resources_31bf3856ad364e35_6.1.7600.16385_en-us_ce61ed8f7bb6c5c2", cAlternateFileName="AM0330~1.163")) returned 1 [0118.315] FindNextFileW (in: hFindFile=0x381b80, lpFindFileData=0x31e5e4 | out: lpFindFileData=0x31e5e4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1a276ab7, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x1a2c2d77, ftLastAccessTime.dwHighDateTime=0x1ca0444, ftLastWriteTime.dwLowDateTime=0x1a2c2d77, ftLastWriteTime.dwHighDateTime=0x1ca0444, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="amd64_brmfcumd.inf_31bf3856ad364e35_6.1.7600.16385_none_82533c9760ae3cbc", cAlternateFileName="AM5011~1.163")) returned 1 [0118.315] FindNextFileW (in: hFindFile=0x381b80, lpFindFileData=0x31e5e4 | out: lpFindFileData=0x31e5e4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xcd05713, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0xcd05713, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0xcd05713, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="amd64_brmfcwia.inf.resources_31bf3856ad364e35_6.1.7600.16385_en-us_d1399622ab7095d9", cAlternateFileName="AME1EA~1.163")) returned 1 [0118.315] FindNextFileW (in: hFindFile=0x381b80, lpFindFileData=0x31e5e4 | out: lpFindFileData=0x31e5e4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x18632543, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x186586a3, ftLastAccessTime.dwHighDateTime=0x1ca0444, ftLastWriteTime.dwLowDateTime=0x186586a3, ftLastWriteTime.dwHighDateTime=0x1ca0444, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="amd64_brmfcwia.inf_31bf3856ad364e35_6.1.7600.16385_none_11493a3982b640b7", cAlternateFileName="AM3A1A~1.163")) returned 1 [0118.315] FindNextFileW (in: hFindFile=0x381b80, lpFindFileData=0x31e5e4 | out: lpFindFileData=0x31e5e4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xcd05713, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0xcd05713, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0xcd05713, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="amd64_brmfport.inf.resources_31bf3856ad364e35_6.1.7600.16385_en-us_a68604fbf8306080", cAlternateFileName="AMF32F~1.163")) returned 1 [0118.315] FindNextFileW (in: hFindFile=0x381b80, lpFindFileData=0x31e5e4 | out: lpFindFileData=0x31e5e4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x186586a3, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x186586a3, ftLastAccessTime.dwHighDateTime=0x1ca0444, ftLastWriteTime.dwLowDateTime=0x186586a3, ftLastWriteTime.dwHighDateTime=0x1ca0444, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="amd64_brmfport.inf_31bf3856ad364e35_6.1.7600.16385_none_b12cd02afc885a74", cAlternateFileName="AM4E85~1.163")) returned 1 [0118.318] FindNextFileW (in: hFindFile=0x381b80, lpFindFileData=0x31e5e4 | out: lpFindFileData=0x31e5e4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xe8c117d, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0xe8c117d, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0xe8c117d, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="amd64_bth-user.resources_31bf3856ad364e35_6.1.7600.16385_en-us_c2af6879929e9727", cAlternateFileName="AM7410~1.163")) returned 1 [0118.318] FindNextFileW (in: hFindFile=0x381b80, lpFindFileData=0x31e5e4 | out: lpFindFileData=0x31e5e4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xcd77f3e, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0xcd9e1f7, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0xcd9e1f7, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="amd64_bth.inf.resources_31bf3856ad364e35_6.1.7600.16385_en-us_b480a3379367dfd4", cAlternateFileName="AMB3E2~2.163")) returned 1 [0118.318] FindNextFileW (in: hFindFile=0x381b80, lpFindFileData=0x31e5e4 | out: lpFindFileData=0x31e5e4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x2af1d3e, ftCreationTime.dwHighDateTime=0x1cb892a, ftLastAccessTime.dwLowDateTime=0x83de28f5, ftLastAccessTime.dwHighDateTime=0x1cb892b, ftLastWriteTime.dwLowDateTime=0x83de28f5, ftLastWriteTime.dwHighDateTime=0x1cb892b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="amd64_bth.inf_31bf3856ad364e35_6.1.7601.17514_none_d06ac9aad230c1d6", cAlternateFileName="AME1F2~1.175")) returned 1 [0118.318] FindNextFileW (in: hFindFile=0x381b80, lpFindFileData=0x31e5e4 | out: lpFindFileData=0x31e5e4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x10b7ebde, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x10b7ebde, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x10b7ebde, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="amd64_bthmtpenum.inf.resources_31bf3856ad364e35_6.1.7600.16385_en-us_151d393a7965b2e8", cAlternateFileName="AM6B4A~1.163")) returned 1 [0118.318] FindNextFileW (in: hFindFile=0x381b80, lpFindFileData=0x31e5e4 | out: lpFindFileData=0x31e5e4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x23207a9f, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x23207a9f, ftLastAccessTime.dwHighDateTime=0x1ca0444, ftLastWriteTime.dwLowDateTime=0x23207a9f, ftLastWriteTime.dwHighDateTime=0x1ca0444, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="amd64_bthmtpenum.inf_31bf3856ad364e35_6.1.7600.16385_none_5becb46fada2de96", cAlternateFileName="AMD6DC~1.163")) returned 1 [0118.318] FindNextFileW (in: hFindFile=0x381b80, lpFindFileData=0x31e5e4 | out: lpFindFileData=0x31e5e4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xcd51c85, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0xcd51c85, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0xcd51c85, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="amd64_bthpan.inf.resources_31bf3856ad364e35_6.1.7600.16385_en-us_b9b457911a7a4781", cAlternateFileName="AMED15~1.163")) returned 1 [0118.318] FindNextFileW (in: hFindFile=0x381b80, lpFindFileData=0x31e5e4 | out: lpFindFileData=0x31e5e4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x19323cfb, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x19323cfb, ftLastAccessTime.dwHighDateTime=0x1ca0444, ftLastWriteTime.dwLowDateTime=0x19323cfb, ftLastWriteTime.dwHighDateTime=0x1ca0444, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="amd64_bthpan.inf_31bf3856ad364e35_6.1.7600.16385_none_e94e249f879c1b47", cAlternateFileName="AMB132~2.163")) returned 1 [0118.318] FindNextFileW (in: hFindFile=0x381b80, lpFindFileData=0x31e5e4 | out: lpFindFileData=0x31e5e4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xcd51c85, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0xcd51c85, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0xcd51c85, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="amd64_bthprint.inf.resources_31bf3856ad364e35_6.1.7600.16385_en-us_93dfd9dabe50a1bf", cAlternateFileName="AMA7AD~1.163")) returned 1 [0118.318] FindNextFileW (in: hFindFile=0x381b80, lpFindFileData=0x31e5e4 | out: lpFindFileData=0x31e5e4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x19323cfb, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x19323cfb, ftLastAccessTime.dwHighDateTime=0x1ca0444, ftLastWriteTime.dwLowDateTime=0x19323cfb, ftLastWriteTime.dwHighDateTime=0x1ca0444, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="amd64_bthprint.inf_31bf3856ad364e35_6.1.7600.16385_none_48d7a2fc59db271f", cAlternateFileName="AM4535~1.163")) returned 1 [0118.318] FindNextFileW (in: hFindFile=0x381b80, lpFindFileData=0x31e5e4 | out: lpFindFileData=0x31e5e4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xcd51c85, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0xcd51c85, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0xcd51c85, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="amd64_bthspp.inf.resources_31bf3856ad364e35_6.1.7600.16385_en-us_f435be2af5ccbe69", cAlternateFileName="AMCB28~2.163")) returned 1 [0118.318] FindNextFileW (in: hFindFile=0x381b80, lpFindFileData=0x31e5e4 | out: lpFindFileData=0x31e5e4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x19323cfb, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x19323cfb, ftLastAccessTime.dwHighDateTime=0x1ca0444, ftLastWriteTime.dwLowDateTime=0x19323cfb, ftLastWriteTime.dwHighDateTime=0x1ca0444, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="amd64_bthspp.inf_31bf3856ad364e35_6.1.7600.16385_none_99316f46cd92a1e5", cAlternateFileName="AM3C93~1.163")) returned 1 [0118.319] FindNextFileW (in: hFindFile=0x381b80, lpFindFileData=0x31e5e4 | out: lpFindFileData=0x31e5e4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x4e857479, ftCreationTime.dwHighDateTime=0x1cb892a, ftLastAccessTime.dwLowDateTime=0x94c81007, ftLastAccessTime.dwHighDateTime=0x1cb892b, ftLastWriteTime.dwLowDateTime=0x94c81007, ftLastWriteTime.dwHighDateTime=0x1cb892b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="amd64_caspol_b03f5f7f11d50a3a_6.1.7601.17514_none_f885d1129806720d", cAlternateFileName="AM94E6~1.175")) returned 1 [0118.319] FindNextFileW (in: hFindFile=0x381b80, lpFindFileData=0x31e5e4 | out: lpFindFileData=0x31e5e4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd3226b4, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0xd3226b4, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0xd3226b4, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="amd64_cdrom.inf.resources_31bf3856ad364e35_6.1.7600.16385_en-us_94afbf297141c911", cAlternateFileName="AMCA93~1.163")) returned 1 [0118.319] FindNextFileW (in: hFindFile=0x381b80, lpFindFileData=0x31e5e4 | out: lpFindFileData=0x31e5e4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x83e54d16, ftCreationTime.dwHighDateTime=0x1cb892b, ftLastAccessTime.dwLowDateTime=0x83e54d16, ftLastAccessTime.dwHighDateTime=0x1cb892b, ftLastWriteTime.dwLowDateTime=0x83e54d16, ftLastWriteTime.dwHighDateTime=0x1cb892b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="amd64_cdrom.inf_31bf3856ad364e35_6.1.7601.17514_none_bdcf6151ba66f48b", cAlternateFileName="AM0B7D~1.175")) returned 1 [0118.319] FindNextFileW (in: hFindFile=0x381b80, lpFindFileData=0x31e5e4 | out: lpFindFileData=0x31e5e4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xcd51c85, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0xcd51c85, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0xcd51c85, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="amd64_circlass.inf.resources_31bf3856ad364e35_6.1.7600.16385_en-us_b4ec6091a219beae", cAlternateFileName="AMFD70~1.163")) returned 1 [0118.319] FindNextFileW (in: hFindFile=0x381b80, lpFindFileData=0x31e5e4 | out: lpFindFileData=0x31e5e4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x19323cfb, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x19323cfb, ftLastAccessTime.dwHighDateTime=0x1ca0444, ftLastWriteTime.dwLowDateTime=0x19323cfb, ftLastWriteTime.dwHighDateTime=0x1ca0444, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="amd64_circlass.inf_31bf3856ad364e35_6.1.7600.16385_none_fd65696e44277672", cAlternateFileName="AMA2F1~1.163")) returned 1 [0118.322] FindNextFileW (in: hFindFile=0x381b80, lpFindFileData=0x31e5e4 | out: lpFindFileData=0x31e5e4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xcd77f3e, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0xcd77f3e, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0xcd77f3e, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="amd64_compositebus.inf.resources_31bf3856ad364e35_6.1.7600.16385_en-us_f6f2bd35efd4e8c7", cAlternateFileName="AMB574~1.163")) returned 1 [0118.322] FindNextFileW (in: hFindFile=0x381b80, lpFindFileData=0x31e5e4 | out: lpFindFileData=0x31e5e4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x83dbc795, ftCreationTime.dwHighDateTime=0x1cb892b, ftLastAccessTime.dwLowDateTime=0x83dbc795, ftLastAccessTime.dwHighDateTime=0x1cb892b, ftLastWriteTime.dwLowDateTime=0x83dbc795, ftLastWriteTime.dwHighDateTime=0x1cb892b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="amd64_compositebus.inf_31bf3856ad364e35_6.1.7601.17514_none_177ed93b056892f1", cAlternateFileName="AMD16D~1.175")) returned 1 [0118.322] FindNextFileW (in: hFindFile=0x381b80, lpFindFileData=0x31e5e4 | out: lpFindFileData=0x31e5e4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd3226b4, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0xd3226b4, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0xd3226b4, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="amd64_cpu.inf.resources_31bf3856ad364e35_6.1.7600.16385_en-us_53476b155eec25b4", cAlternateFileName="AM3B8B~1.163")) returned 1 [0118.322] FindNextFileW (in: hFindFile=0x381b80, lpFindFileData=0x31e5e4 | out: lpFindFileData=0x31e5e4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1a35b2f9, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x1a381459, ftLastAccessTime.dwHighDateTime=0x1ca0444, ftLastWriteTime.dwLowDateTime=0x1a381459, ftLastWriteTime.dwHighDateTime=0x1ca0444, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="amd64_cpu.inf_31bf3856ad364e35_6.1.7600.16385_none_b93f4c460912265a", cAlternateFileName="AM45CD~1.163")) returned 1 [0118.322] FindNextFileW (in: hFindFile=0x381b80, lpFindFileData=0x31e5e4 | out: lpFindFileData=0x31e5e4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xcd51c85, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0xcd51c85, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0xcd51c85, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="amd64_crcdisk.inf.resources_31bf3856ad364e35_6.1.7600.16385_en-us_b101c5afe5ce5e39", cAlternateFileName="AM3630~1.163")) returned 1 [0118.322] FindNextFileW (in: hFindFile=0x381b80, lpFindFileData=0x31e5e4 | out: lpFindFileData=0x31e5e4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x19349e5b, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x19349e5b, ftLastAccessTime.dwHighDateTime=0x1ca0444, ftLastWriteTime.dwLowDateTime=0x19349e5b, ftLastWriteTime.dwHighDateTime=0x1ca0444, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="amd64_crcdisk.inf_31bf3856ad364e35_6.1.7600.16385_none_f380113d62574061", cAlternateFileName="AM0643~1.163")) returned 1 [0118.322] FindNextFileW (in: hFindFile=0x381b80, lpFindFileData=0x31e5e4 | out: lpFindFileData=0x31e5e4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x893ba2f3, ftCreationTime.dwHighDateTime=0x1cb892b, ftLastAccessTime.dwLowDateTime=0x893ba2f3, ftLastAccessTime.dwHighDateTime=0x1cb892b, ftLastWriteTime.dwLowDateTime=0x893ba2f3, ftLastWriteTime.dwHighDateTime=0x1cb892b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="amd64_custommarshalers_b03f5f7f11d50a3a_6.1.7601.17514_none_feee409b39e33eea", cAlternateFileName="AM20B0~1.175")) returned 1 [0118.322] FindNextFileW (in: hFindFile=0x381b80, lpFindFileData=0x31e5e4 | out: lpFindFileData=0x31e5e4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1b36c796, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x1b3928f6, ftLastAccessTime.dwHighDateTime=0x1ca0444, ftLastWriteTime.dwLowDateTime=0x1b3928f6, ftLastWriteTime.dwHighDateTime=0x1ca0444, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="amd64_cxfalcon_ibv64.inf_31bf3856ad364e35_6.1.7600.16385_none_a242cda757046042", cAlternateFileName="AM01D9~1.163")) returned 1 [0118.322] FindNextFileW (in: hFindFile=0x381b80, lpFindFileData=0x31e5e4 | out: lpFindFileData=0x31e5e4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1b3928f6, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x1b3928f6, ftLastAccessTime.dwHighDateTime=0x1ca0444, ftLastWriteTime.dwLowDateTime=0x1b3928f6, ftLastWriteTime.dwHighDateTime=0x1ca0444, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="amd64_cxfalpal_ibv64.inf_31bf3856ad364e35_6.1.7600.16385_none_db4796019d20adcb", cAlternateFileName="AM0C2A~1.163")) returned 1 [0118.322] FindNextFileW (in: hFindFile=0x381b80, lpFindFileData=0x31e5e4 | out: lpFindFileData=0x31e5e4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1b3928f6, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x1b3b8a57, ftLastAccessTime.dwHighDateTime=0x1ca0444, ftLastWriteTime.dwLowDateTime=0x1b3b8a57, ftLastWriteTime.dwHighDateTime=0x1ca0444, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="amd64_cxraptor_fm1216mk5_ibv64.inf_31bf3856ad364e35_6.1.7600.16385_none_6fc613b717a25720", cAlternateFileName="AM26EE~1.163")) returned 1 [0118.322] FindNextFileW (in: hFindFile=0x381b80, lpFindFileData=0x31e5e4 | out: lpFindFileData=0x31e5e4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1b3b8a57, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x1b3b8a57, ftLastAccessTime.dwHighDateTime=0x1ca0444, ftLastWriteTime.dwLowDateTime=0x1b3b8a57, ftLastWriteTime.dwHighDateTime=0x1ca0444, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="amd64_cxraptor_fm1236mk5_ibv64.inf_31bf3856ad364e35_6.1.7600.16385_none_a0e6031d536a7892", cAlternateFileName="AM762D~1.163")) returned 1 [0118.322] FindNextFileW (in: hFindFile=0x381b80, lpFindFileData=0x31e5e4 | out: lpFindFileData=0x31e5e4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1b3928f6, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x1b3928f6, ftLastAccessTime.dwHighDateTime=0x1ca0444, ftLastWriteTime.dwLowDateTime=0x1b3928f6, ftLastWriteTime.dwHighDateTime=0x1ca0444, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="amd64_cxraptor_philipstuv1236d_ibv64.inf_31bf3856ad364e35_6.1.7600.16385_none_a8ba31d06eb5b68e", cAlternateFileName="AMBB12~1.163")) returned 1 [0118.322] FindNextFileW (in: hFindFile=0x381b80, lpFindFileData=0x31e5e4 | out: lpFindFileData=0x31e5e4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd34896d, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0xd34896d, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0xd34896d, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="amd64_dc21x4vm.inf.resources_31bf3856ad364e35_6.1.7600.16385_en-us_e113013d55269361", cAlternateFileName="AM46EC~1.163")) returned 1 [0118.322] FindNextFileW (in: hFindFile=0x381b80, lpFindFileData=0x31e5e4 | out: lpFindFileData=0x31e5e4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1b346636, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x1b346636, ftLastAccessTime.dwHighDateTime=0x1ca0444, ftLastWriteTime.dwLowDateTime=0x1b346636, ftLastWriteTime.dwHighDateTime=0x1ca0444, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="amd64_dc21x4vm.inf_31bf3856ad364e35_6.1.7600.16385_none_8a8756a57a292631", cAlternateFileName="AM5F01~1.163")) returned 1 [0118.323] FindNextFileW (in: hFindFile=0x381b80, lpFindFileData=0x31e5e4 | out: lpFindFileData=0x31e5e4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xaf3368b, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0xaf3368b, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0xaf3368b, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="amd64_ddores.resources_31bf3856ad364e35_6.1.7600.16385_en-us_b860e3728a94f310", cAlternateFileName="AM0FE2~1.163")) returned 1 [0118.323] FindNextFileW (in: hFindFile=0x381b80, lpFindFileData=0x31e5e4 | out: lpFindFileData=0x31e5e4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf9c07df, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0xf9c07df, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0xf9c07df, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="amd64_desktop_shell-gettingstarted.resources_31bf3856ad364e35_6.1.7600.16385_en-us_985b8b2af38a6a1a", cAlternateFileName="AMECE2~1.163")) returned 1 [0118.325] FindNextFileW (in: hFindFile=0x381b80, lpFindFileData=0x31e5e4 | out: lpFindFileData=0x31e5e4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xaffd0a69, ftCreationTime.dwHighDateTime=0x1cb892b, ftLastAccessTime.dwLowDateTime=0xaffd0a69, ftLastAccessTime.dwHighDateTime=0x1cb892b, ftLastWriteTime.dwLowDateTime=0xaffd0a69, ftLastWriteTime.dwHighDateTime=0x1cb892b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="amd64_desktop_shell-gettingstarted_31bf3856ad364e35_6.1.7601.17514_none_5d1e01379f4d67ed", cAlternateFileName="AM39C6~1.175")) returned 1 [0118.325] FindNextFileW (in: hFindFile=0x381b80, lpFindFileData=0x31e5e4 | out: lpFindFileData=0x31e5e4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x12af4a59, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x12af4a59, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x12af4a59, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="amd64_desktop_shell-search-srchadmin.resources_31bf3856ad364e35_7.0.7600.16385_en-us_805a99c7c2e587d5", cAlternateFileName="AM15C6~1.163")) returned 1 [0118.325] FindNextFileW (in: hFindFile=0x381b80, lpFindFileData=0x31e5e4 | out: lpFindFileData=0x31e5e4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xb5f79f39, ftCreationTime.dwHighDateTime=0x1cb892b, ftLastAccessTime.dwLowDateTime=0xb5f79f39, ftLastAccessTime.dwHighDateTime=0x1cb892b, ftLastWriteTime.dwLowDateTime=0xb5f79f39, ftLastWriteTime.dwHighDateTime=0x1cb892b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="amd64_desktop_shell-search-srchadmin_31bf3856ad364e35_7.0.7601.17514_none_a9f0ab75af7a5b5c", cAlternateFileName="AM48C1~1.175")) returned 1 [0118.325] FindNextFileW (in: hFindFile=0x381b80, lpFindFileData=0x31e5e4 | out: lpFindFileData=0x31e5e4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x9626d23, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x9626d23, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x9626d23, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="amd64_devicepairingproxy.resources_31bf3856ad364e35_6.1.7600.16385_en-us_dccc313b2f493e49", cAlternateFileName="AM32AD~1.163")) returned 1 [0118.325] FindNextFileW (in: hFindFile=0x381b80, lpFindFileData=0x31e5e4 | out: lpFindFileData=0x31e5e4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa5ab850, ftCreationTime.dwHighDateTime=0x1ca0432, ftLastAccessTime.dwLowDateTime=0xa5ab850, ftLastAccessTime.dwHighDateTime=0x1ca0432, ftLastWriteTime.dwLowDateTime=0xa5ab850, ftLastWriteTime.dwHighDateTime=0x1ca0432, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="amd64_devicepairingproxy_31bf3856ad364e35_6.1.7600.16385_none_8c6303bb2f83ca68", cAlternateFileName="AME845~1.163")) returned 1 [0118.325] FindNextFileW (in: hFindFile=0x381b80, lpFindFileData=0x31e5e4 | out: lpFindFileData=0x31e5e4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd2fc3fb, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0xd2fc3fb, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0xd2fc3fb, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="amd64_digitalmediadevice.inf.resources_31bf3856ad364e35_6.1.7600.16385_en-us_ffd83a48de3b881c", cAlternateFileName="AM904C~1.163")) returned 1 [0118.325] FindNextFileW (in: hFindFile=0x381b80, lpFindFileData=0x31e5e4 | out: lpFindFileData=0x31e5e4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1a276ab7, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x1a276ab7, ftLastAccessTime.dwHighDateTime=0x1ca0444, ftLastWriteTime.dwLowDateTime=0x1a276ab7, ftLastWriteTime.dwHighDateTime=0x1ca0444, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="amd64_digitalmediadevice.inf_31bf3856ad364e35_6.1.7600.16385_none_e15a2bcac4c4abc6", cAlternateFileName="AM072E~1.163")) returned 1 [0118.325] FindNextFileW (in: hFindFile=0x381b80, lpFindFileData=0x31e5e4 | out: lpFindFileData=0x31e5e4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd3226b4, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0xd3226b4, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0xd3226b4, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="amd64_disk.inf.resources_31bf3856ad364e35_6.1.7600.16385_en-us_626b9448fd63c9a1", cAlternateFileName="AM5431~1.163")) returned 1 [0118.325] FindNextFileW (in: hFindFile=0x381b80, lpFindFileData=0x31e5e4 | out: lpFindFileData=0x31e5e4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1a35b2f9, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x1a35b2f9, ftLastAccessTime.dwHighDateTime=0x1ca0444, ftLastWriteTime.dwLowDateTime=0x1a35b2f9, ftLastWriteTime.dwHighDateTime=0x1ca0444, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="amd64_disk.inf_31bf3856ad364e35_6.1.7600.16385_none_55bb738b8ddd8a01", cAlternateFileName="AM3380~1.163")) returned 1 [0118.325] FindNextFileW (in: hFindFile=0x381b80, lpFindFileData=0x31e5e4 | out: lpFindFileData=0x31e5e4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xcd05713, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0xcd05713, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0xcd05713, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="amd64_display.inf.resources_31bf3856ad364e35_6.1.7600.16385_en-us_8bb90e0956a02ab0", cAlternateFileName="AM3BC3~1.163")) returned 1 [0118.325] FindNextFileW (in: hFindFile=0x381b80, lpFindFileData=0x31e5e4 | out: lpFindFileData=0x31e5e4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1860c3e3, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x1860c3e3, ftLastAccessTime.dwHighDateTime=0x1ca0444, ftLastWriteTime.dwLowDateTime=0x1860c3e3, ftLastWriteTime.dwHighDateTime=0x1ca0444, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="amd64_display.inf_31bf3856ad364e35_6.1.7600.16385_none_dc4a31b0e7fffb2c", cAlternateFileName="AMD7B5~1.163")) returned 1 [0118.325] FindNextFileW (in: hFindFile=0x381b80, lpFindFileData=0x31e5e4 | out: lpFindFileData=0x31e5e4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xcd05713, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0xcd05713, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0xcd05713, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="amd64_divacx64.inf.resources_31bf3856ad364e35_6.1.7600.16385_en-us_a66ddcaa051c22f1", cAlternateFileName="AMC7A3~1.163")) returned 1 [0118.326] FindNextFileW (in: hFindFile=0x381b80, lpFindFileData=0x31e5e4 | out: lpFindFileData=0x31e5e4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x185c0122, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x185e6282, ftLastAccessTime.dwHighDateTime=0x1ca0444, ftLastWriteTime.dwLowDateTime=0x185e6282, ftLastWriteTime.dwHighDateTime=0x1ca0444, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="amd64_divacx64.inf_31bf3856ad364e35_6.1.7600.16385_none_cf37cc4c5bc25dc7", cAlternateFileName="AM1AD9~1.163")) returned 1 [0118.326] FindNextFileW (in: hFindFile=0x381b80, lpFindFileData=0x31e5e4 | out: lpFindFileData=0x31e5e4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xcd05713, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0xcd05713, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0xcd05713, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="amd64_dot4.inf.resources_31bf3856ad364e35_6.1.7600.16385_en-us_836ad24e2754808b", cAlternateFileName="AMF9C6~1.163")) returned 1 [0118.326] FindNextFileW (in: hFindFile=0x381b80, lpFindFileData=0x31e5e4 | out: lpFindFileData=0x31e5e4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1860c3e3, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x1860c3e3, ftLastAccessTime.dwHighDateTime=0x1ca0444, ftLastWriteTime.dwLowDateTime=0x1860c3e3, ftLastWriteTime.dwHighDateTime=0x1ca0444, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="amd64_dot4.inf_31bf3856ad364e35_6.1.7600.16385_none_3868f74cf5b51f17", cAlternateFileName="AMF851~1.163")) returned 1 [0118.329] FindNextFileW (in: hFindFile=0x381b80, lpFindFileData=0x31e5e4 | out: lpFindFileData=0x31e5e4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xcd05713, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0xcd05713, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0xcd05713, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="amd64_dot4prt.inf.resources_31bf3856ad364e35_6.1.7600.16385_en-us_e4de75d2183603a9", cAlternateFileName="AM0B7F~1.163")) returned 1 [0118.329] FindNextFileW (in: hFindFile=0x381b80, lpFindFileData=0x31e5e4 | out: lpFindFileData=0x31e5e4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x83d96634, ftCreationTime.dwHighDateTime=0x1cb892b, ftLastAccessTime.dwLowDateTime=0x83d96634, ftLastAccessTime.dwHighDateTime=0x1cb892b, ftLastWriteTime.dwLowDateTime=0x83d96634, ftLastWriteTime.dwHighDateTime=0x1cb892b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="amd64_dot4prt.inf_31bf3856ad364e35_6.1.7601.17514_none_cb6128e5835622ff", cAlternateFileName="AM4979~1.175")) returned 1 [0118.329] FindNextFileW (in: hFindFile=0x381b80, lpFindFileData=0x31e5e4 | out: lpFindFileData=0x31e5e4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8f24d2c, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x8f24d2c, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x8f24d2c, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="amd64_ds-ui-ext.resources_31bf3856ad364e35_6.1.7600.16385_en-us_7a2b039113f0c5bf", cAlternateFileName="AMDC47~1.163")) returned 1 [0118.329] FindNextFileW (in: hFindFile=0x381b80, lpFindFileData=0x31e5e4 | out: lpFindFileData=0x31e5e4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7e19d5d3, ftCreationTime.dwHighDateTime=0x1cb892a, ftLastAccessTime.dwLowDateTime=0x8909a60d, ftLastAccessTime.dwHighDateTime=0x1cb892b, ftLastWriteTime.dwLowDateTime=0x8909a60d, ftLastWriteTime.dwHighDateTime=0x1cb892b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="amd64_ds-ui-ext_31bf3856ad364e35_6.1.7601.17514_none_ce73310d1634318a", cAlternateFileName="AM7FCD~1.175")) returned 1 [0118.329] FindNextFileW (in: hFindFile=0x381b80, lpFindFileData=0x31e5e4 | out: lpFindFileData=0x31e5e4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa5ab850, ftCreationTime.dwHighDateTime=0x1ca0432, ftLastAccessTime.dwLowDateTime=0xa5ab850, ftLastAccessTime.dwHighDateTime=0x1ca0432, ftLastWriteTime.dwLowDateTime=0xa5ab850, ftLastWriteTime.dwHighDateTime=0x1ca0432, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="amd64_eaime-traceproviders_31bf3856ad364e35_6.1.7600.16385_none_4707e1890fa7a633", cAlternateFileName="AM3938~1.163")) returned 1 [0118.329] FindNextFileW (in: hFindFile=0x381b80, lpFindFileData=0x31e5e4 | out: lpFindFileData=0x31e5e4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xcd51c85, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0xcd51c85, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0xcd51c85, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="amd64_eaphost.inf.resources_31bf3856ad364e35_6.1.7600.16385_en-us_4ab1a2db304ee8a6", cAlternateFileName="AM17F6~1.163")) returned 1 [0118.329] FindNextFileW (in: hFindFile=0x381b80, lpFindFileData=0x31e5e4 | out: lpFindFileData=0x31e5e4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x19323cfb, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x19323cfb, ftLastAccessTime.dwHighDateTime=0x1ca0444, ftLastWriteTime.dwLowDateTime=0x19323cfb, ftLastWriteTime.dwHighDateTime=0x1ca0444, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="amd64_eaphost.inf_31bf3856ad364e35_6.1.7600.16385_none_8a6d7605895cd38e", cAlternateFileName="AMA3B9~1.163")) returned 1 [0118.329] FindNextFileW (in: hFindFile=0x381b80, lpFindFileData=0x31e5e4 | out: lpFindFileData=0x31e5e4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa57ffa34, ftCreationTime.dwHighDateTime=0x1cb892b, ftLastAccessTime.dwLowDateTime=0xa57ffa34, ftLastAccessTime.dwHighDateTime=0x1cb892b, ftLastWriteTime.dwLowDateTime=0xa57ffa34, ftLastWriteTime.dwHighDateTime=0x1cb892b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="amd64_ehome-bdatunepia_31bf3856ad364e35_6.1.7601.17514_none_4bcd40fd63f3f7b4", cAlternateFileName="AMCBDD~1.175")) returned 1 [0118.329] FindNextFileW (in: hFindFile=0x381b80, lpFindFileData=0x31e5e4 | out: lpFindFileData=0x31e5e4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa5825b94, ftCreationTime.dwHighDateTime=0x1cb892b, ftLastAccessTime.dwLowDateTime=0xa5825b94, ftLastAccessTime.dwHighDateTime=0x1cb892b, ftLastWriteTime.dwLowDateTime=0xa5825b94, ftLastWriteTime.dwHighDateTime=0x1cb892b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="amd64_ehome-mcstoredb_31bf3856ad364e35_6.1.7601.17514_none_e0c92ff471b6c7a2", cAlternateFileName="AMF287~1.175")) returned 1 [0118.329] FindNextFileW (in: hFindFile=0x381b80, lpFindFileData=0x31e5e4 | out: lpFindFileData=0x31e5e4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd2d6142, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0xd2d6142, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0xd2d6142, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="amd64_ehstorcertdrv.inf.resources_31bf3856ad364e35_6.1.7600.16385_en-us_4e590de0dff9747b", cAlternateFileName="AM8290~1.163")) returned 1 [0118.329] FindNextFileW (in: hFindFile=0x381b80, lpFindFileData=0x31e5e4 | out: lpFindFileData=0x31e5e4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1a250957, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x1a276ab7, ftLastAccessTime.dwHighDateTime=0x1ca0444, ftLastWriteTime.dwLowDateTime=0x1a276ab7, ftLastWriteTime.dwHighDateTime=0x1ca0444, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="amd64_ehstorcertdrv.inf_31bf3856ad364e35_6.1.7600.16385_none_36454688d51936c3", cAlternateFileName="AM0F27~1.163")) returned 1 [0118.329] FindNextFileW (in: hFindFile=0x381b80, lpFindFileData=0x31e5e4 | out: lpFindFileData=0x31e5e4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xcd51c85, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0xcd51c85, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0xcd51c85, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="amd64_ehstorpwddrv.inf.resources_31bf3856ad364e35_6.1.7600.16385_en-us_12e7bee29382e514", cAlternateFileName="AM5D02~1.163")) returned 1 [0118.329] FindNextFileW (in: hFindFile=0x381b80, lpFindFileData=0x31e5e4 | out: lpFindFileData=0x31e5e4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x19349e5b, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x19349e5b, ftLastAccessTime.dwHighDateTime=0x1ca0444, ftLastWriteTime.dwLowDateTime=0x19349e5b, ftLastWriteTime.dwHighDateTime=0x1ca0444, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="amd64_ehstorpwddrv.inf_31bf3856ad364e35_6.1.7600.16385_none_374102068836e81a", cAlternateFileName="AMC7DF~1.163")) returned 1 [0118.329] FindNextFileW (in: hFindFile=0x381b80, lpFindFileData=0x31e5e4 | out: lpFindFileData=0x31e5e4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd3226b4, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0xd3226b4, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0xd3226b4, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="amd64_elxstor.inf.resources_31bf3856ad364e35_6.1.7600.16385_en-us_d0e3ff40cc51f97b", cAlternateFileName="AM9CC7~1.163")) returned 1 [0118.329] FindNextFileW (in: hFindFile=0x381b80, lpFindFileData=0x31e5e4 | out: lpFindFileData=0x31e5e4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1a35b2f9, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x1a35b2f9, ftLastAccessTime.dwHighDateTime=0x1ca0444, ftLastWriteTime.dwLowDateTime=0x1a35b2f9, ftLastWriteTime.dwHighDateTime=0x1ca0444, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="amd64_elxstor.inf_31bf3856ad364e35_6.1.7600.16385_none_08826a22cb03ca5f", cAlternateFileName="AM2E7B~2.163")) returned 1 [0118.329] FindNextFileW (in: hFindFile=0x381b80, lpFindFileData=0x31e5e4 | out: lpFindFileData=0x31e5e4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xb65b93b, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0xb65b93b, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0xb65b93b, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="amd64_eventviewersettings.resources_31bf3856ad364e35_6.1.7600.16385_en-us_f326e41ead956612", cAlternateFileName="AMCC43~1.163")) returned 1 [0118.335] FindNextFileW (in: hFindFile=0x381b80, lpFindFileData=0x31e5e4 | out: lpFindFileData=0x31e5e4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa5ab850, ftCreationTime.dwHighDateTime=0x1ca0432, ftLastAccessTime.dwLowDateTime=0xa5d19aa, ftLastAccessTime.dwHighDateTime=0x1ca0432, ftLastWriteTime.dwLowDateTime=0xa5d19aa, ftLastWriteTime.dwHighDateTime=0x1ca0432, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="amd64_eventviewersettings_31bf3856ad364e35_6.1.7600.16385_none_50ecc9ae1d642aa9", cAlternateFileName="AM9576~1.163")) returned 1 [0118.335] FindNextFileW (in: hFindFile=0x381b80, lpFindFileData=0x31e5e4 | out: lpFindFileData=0x31e5e4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xcd05713, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0xcd05713, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0xcd05713, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="amd64_faxca003.inf.resources_31bf3856ad364e35_6.1.7600.16385_en-us_0413befd11e4487a", cAlternateFileName="AM6645~1.163")) returned 1 [0118.335] FindNextFileW (in: hFindFile=0x381b80, lpFindFileData=0x31e5e4 | out: lpFindFileData=0x31e5e4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x186586a3, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x186586a3, ftLastAccessTime.dwHighDateTime=0x1ca0444, ftLastWriteTime.dwLowDateTime=0x186586a3, ftLastWriteTime.dwHighDateTime=0x1ca0444, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="amd64_faxca003.inf_31bf3856ad364e35_6.1.7600.16385_none_8f99fd41b27fdd58", cAlternateFileName="AM9F57~1.163")) returned 1 [0118.335] FindNextFileW (in: hFindFile=0x381b80, lpFindFileData=0x31e5e4 | out: lpFindFileData=0x31e5e4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xcd05713, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0xcd05713, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0xcd05713, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="amd64_faxcn001.inf.resources_31bf3856ad364e35_6.1.7600.16385_en-us_1e3474e874c099f5", cAlternateFileName="AM2EE7~1.163")) returned 1 [0118.335] FindNextFileW (in: hFindFile=0x381b80, lpFindFileData=0x31e5e4 | out: lpFindFileData=0x31e5e4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x186586a3, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x186586a3, ftLastAccessTime.dwHighDateTime=0x1ca0444, ftLastWriteTime.dwLowDateTime=0x186586a3, ftLastWriteTime.dwHighDateTime=0x1ca0444, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="amd64_faxcn001.inf_31bf3856ad364e35_6.1.7600.16385_none_a46fb88aa3f10979", cAlternateFileName="AM05FA~1.163")) returned 1 [0118.335] FindNextFileW (in: hFindFile=0x381b80, lpFindFileData=0x31e5e4 | out: lpFindFileData=0x31e5e4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xcd05713, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0xcd05713, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0xcd05713, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="amd64_faxcn002.inf.resources_31bf3856ad364e35_6.1.7600.16385_en-us_61eba2329e3531de", cAlternateFileName="AM401B~1.163")) returned 1 [0118.335] FindNextFileW (in: hFindFile=0x381b80, lpFindFileData=0x31e5e4 | out: lpFindFileData=0x31e5e4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x186586a3, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x186586a3, ftLastAccessTime.dwHighDateTime=0x1ca0444, ftLastWriteTime.dwLowDateTime=0x186586a3, ftLastWriteTime.dwHighDateTime=0x1ca0444, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="amd64_faxcn002.inf_31bf3856ad364e35_6.1.7600.16385_none_a4f8cabfbd0f45e2", cAlternateFileName="AMBC52~1.163")) returned 1 [0118.335] FindNextFileW (in: hFindFile=0x381b80, lpFindFileData=0x31e5e4 | out: lpFindFileData=0x31e5e4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd34896d, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0xd34896d, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0xd34896d, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="amd64_fdc.inf.resources_31bf3856ad364e35_6.1.7600.16385_en-us_69c2fe3ad41d613d", cAlternateFileName="AM7AB8~1.163")) returned 1 [0118.335] FindNextFileW (in: hFindFile=0x381b80, lpFindFileData=0x31e5e4 | out: lpFindFileData=0x31e5e4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1b3204d6, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x1b3204d6, ftLastAccessTime.dwHighDateTime=0x1ca0444, ftLastWriteTime.dwLowDateTime=0x1b3204d6, ftLastWriteTime.dwHighDateTime=0x1ca0444, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="amd64_fdc.inf_31bf3856ad364e35_6.1.7600.16385_none_5d86a514fa18ed1d", cAlternateFileName="AMBCBF~1.163")) returned 1 [0118.335] FindNextFileW (in: hFindFile=0x381b80, lpFindFileData=0x31e5e4 | out: lpFindFileData=0x31e5e4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa5f4dbd, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0xa5f4dbd, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0xa5f4dbd, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="amd64_fdphost.resources_31bf3856ad364e35_6.1.7600.16385_en-us_64eea25c6b939cd5", cAlternateFileName="AM4D37~1.163")) returned 1 [0118.335] FindNextFileW (in: hFindFile=0x381b80, lpFindFileData=0x31e5e4 | out: lpFindFileData=0x31e5e4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa5d19aa, ftCreationTime.dwHighDateTime=0x1ca0432, ftLastAccessTime.dwLowDateTime=0xa5d19aa, ftLastAccessTime.dwHighDateTime=0x1ca0432, ftLastWriteTime.dwLowDateTime=0xa5d19aa, ftLastWriteTime.dwHighDateTime=0x1ca0432, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="amd64_fdphost_31bf3856ad364e35_6.1.7600.16385_none_d78d3591881d5b04", cAlternateFileName="AM35FC~1.163")) returned 1 [0118.335] FindNextFileW (in: hFindFile=0x381b80, lpFindFileData=0x31e5e4 | out: lpFindFileData=0x31e5e4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x91fdf335, ftCreationTime.dwHighDateTime=0x1cb892b, ftLastAccessTime.dwLowDateTime=0x91fdf335, ftLastAccessTime.dwHighDateTime=0x1cb892b, ftLastWriteTime.dwLowDateTime=0x91fdf335, ftLastWriteTime.dwHighDateTime=0x1cb892b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="amd64_fdproxy_31bf3856ad364e35_6.1.7601.17514_none_d98c575f8530e950", cAlternateFileName="AMD814~1.175")) returned 1 [0118.335] FindNextFileW (in: hFindFile=0x381b80, lpFindFileData=0x31e5e4 | out: lpFindFileData=0x31e5e4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x95b44f8, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x95b44f8, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x95b44f8, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="amd64_fdrespub.resources_31bf3856ad364e35_6.1.7600.16385_en-us_b4ee55ea213abf40", cAlternateFileName="AM438C~1.163")) returned 1 [0118.336] FindNextFileW (in: hFindFile=0x381b80, lpFindFileData=0x31e5e4 | out: lpFindFileData=0x31e5e4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa5d19aa, ftCreationTime.dwHighDateTime=0x1ca0432, ftLastAccessTime.dwLowDateTime=0xa5d19aa, ftLastAccessTime.dwHighDateTime=0x1ca0432, ftLastWriteTime.dwLowDateTime=0xa5d19aa, ftLastWriteTime.dwHighDateTime=0x1ca0432, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="amd64_fdrespub_31bf3856ad364e35_6.1.7600.16385_none_db693263d81e166b", cAlternateFileName="AMCD88~1.163")) returned 1 [0118.336] FindNextFileW (in: hFindFile=0x381b80, lpFindFileData=0x31e5e4 | out: lpFindFileData=0x31e5e4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa5d19aa, ftCreationTime.dwHighDateTime=0x1ca0432, ftLastAccessTime.dwLowDateTime=0xa5d19aa, ftLastAccessTime.dwHighDateTime=0x1ca0432, ftLastWriteTime.dwLowDateTime=0xa5d19aa, ftLastWriteTime.dwHighDateTime=0x1ca0432, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="amd64_fdssdp_31bf3856ad364e35_6.1.7600.16385_none_96d2e43e8def6808", cAlternateFileName="AM0808~1.163")) returned 1 [0118.336] FindNextFileW (in: hFindFile=0x381b80, lpFindFileData=0x31e5e4 | out: lpFindFileData=0x31e5e4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa5d19aa, ftCreationTime.dwHighDateTime=0x1ca0432, ftLastAccessTime.dwLowDateTime=0xa5d19aa, ftLastAccessTime.dwHighDateTime=0x1ca0432, ftLastWriteTime.dwLowDateTime=0xa5d19aa, ftLastWriteTime.dwHighDateTime=0x1ca0432, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="amd64_fdwnet_31bf3856ad364e35_6.1.7600.16385_none_971d9ecc8dc2c18a", cAlternateFileName="AMEBD1~1.163")) returned 1 [0118.339] FindNextFileW (in: hFindFile=0x381b80, lpFindFileData=0x31e5e4 | out: lpFindFileData=0x31e5e4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa5d19aa, ftCreationTime.dwHighDateTime=0x1ca0432, ftLastAccessTime.dwLowDateTime=0xa5f7b04, ftLastAccessTime.dwHighDateTime=0x1ca0432, ftLastWriteTime.dwLowDateTime=0xa5f7b04, ftLastWriteTime.dwHighDateTime=0x1ca0432, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="amd64_fdwsd_31bf3856ad364e35_6.1.7600.16385_none_d99d751adbd6df3c", cAlternateFileName="AM2077~1.163")) returned 1 [0118.339] FindNextFileW (in: hFindFile=0x381b80, lpFindFileData=0x31e5e4 | out: lpFindFileData=0x31e5e4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd34896d, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0xd34896d, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0xd34896d, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="amd64_flpydisk.inf.resources_31bf3856ad364e35_6.1.7600.16385_en-us_6ff932451b6f31d6", cAlternateFileName="AM592F~1.163")) returned 1 [0118.339] FindNextFileW (in: hFindFile=0x381b80, lpFindFileData=0x31e5e4 | out: lpFindFileData=0x31e5e4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1b3204d6, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x1b3204d6, ftLastAccessTime.dwHighDateTime=0x1ca0444, ftLastWriteTime.dwLowDateTime=0x1b3204d6, ftLastWriteTime.dwHighDateTime=0x1ca0444, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="amd64_flpydisk.inf_31bf3856ad364e35_6.1.7600.16385_none_42ff01d4942cc5ea", cAlternateFileName="AM5ADD~1.163")) returned 1 [0118.339] FindNextFileW (in: hFindFile=0x381b80, lpFindFileData=0x31e5e4 | out: lpFindFileData=0x31e5e4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xbf73f50, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0xbf73f50, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0xbf73f50, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="amd64_fundisc.resources_31bf3856ad364e35_6.1.7600.16385_en-us_3a2c653dd66a2461", cAlternateFileName="AM077B~1.163")) returned 1 [0118.339] FindNextFileW (in: hFindFile=0x381b80, lpFindFileData=0x31e5e4 | out: lpFindFileData=0x31e5e4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa5d19aa, ftCreationTime.dwHighDateTime=0x1ca0432, ftLastAccessTime.dwLowDateTime=0xa5f7b04, ftLastAccessTime.dwHighDateTime=0x1ca0432, ftLastWriteTime.dwLowDateTime=0xa5f7b04, ftLastWriteTime.dwHighDateTime=0x1ca0432, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="amd64_fundisc_31bf3856ad364e35_6.1.7600.16385_none_d7d9607f549396fc", cAlternateFileName="AMB02E~1.163")) returned 1 [0118.339] FindNextFileW (in: hFindFile=0x381b80, lpFindFileData=0x31e5e4 | out: lpFindFileData=0x31e5e4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xcd77f3e, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0xcd77f3e, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0xcd77f3e, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="amd64_gameport.inf.resources_31bf3856ad364e35_6.1.7600.16385_en-us_cf695fd87f2f785b", cAlternateFileName="AMC784~1.163")) returned 1 [0118.339] FindNextFileW (in: hFindFile=0x381b80, lpFindFileData=0x31e5e4 | out: lpFindFileData=0x31e5e4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x19349e5b, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x19349e5b, ftLastAccessTime.dwHighDateTime=0x1ca0444, ftLastWriteTime.dwLowDateTime=0x19349e5b, ftLastWriteTime.dwHighDateTime=0x1ca0444, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="amd64_gameport.inf_31bf3856ad364e35_6.1.7600.16385_none_32f188a073c09ceb", cAlternateFileName="AM4AB9~1.163")) returned 1 [0118.339] FindNextFileW (in: hFindFile=0x381b80, lpFindFileData=0x31e5e4 | out: lpFindFileData=0x31e5e4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd3226b4, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0xd3226b4, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0xd3226b4, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="amd64_hal.inf.resources_31bf3856ad364e35_6.1.7600.16385_en-us_997f9822c7490adb", cAlternateFileName="AMEDA3~1.163")) returned 1 [0118.339] FindNextFileW (in: hFindFile=0x381b80, lpFindFileData=0x31e5e4 | out: lpFindFileData=0x31e5e4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1a381459, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x1a381459, ftLastAccessTime.dwHighDateTime=0x1ca0444, ftLastWriteTime.dwLowDateTime=0x1a381459, ftLastWriteTime.dwHighDateTime=0x1ca0444, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="amd64_hal.inf_31bf3856ad364e35_6.1.7600.16385_none_5f1101d221a06a37", cAlternateFileName="AME986~2.163")) returned 1 [0118.339] FindNextFileW (in: hFindFile=0x381b80, lpFindFileData=0x31e5e4 | out: lpFindFileData=0x31e5e4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1b3b8a57, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x1b3debb7, ftLastAccessTime.dwHighDateTime=0x1ca0444, ftLastWriteTime.dwLowDateTime=0x1b3debb7, ftLastWriteTime.dwHighDateTime=0x1ca0444, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="amd64_hcw72b64.inf_31bf3856ad364e35_6.1.7600.16385_none_b2017fc4229ff517", cAlternateFileName="AMBEC5~1.163")) returned 1 [0118.340] FindNextFileW (in: hFindFile=0x381b80, lpFindFileData=0x31e5e4 | out: lpFindFileData=0x31e5e4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1b3b8a57, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x1b3b8a57, ftLastAccessTime.dwHighDateTime=0x1ca0444, ftLastWriteTime.dwLowDateTime=0x1b3b8a57, ftLastWriteTime.dwHighDateTime=0x1ca0444, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="amd64_hcw85b64.inf_31bf3856ad364e35_6.1.7600.16385_none_61287d00f82bbdeb", cAlternateFileName="AMA12F~1.163")) returned 1 [0118.340] FindNextFileW (in: hFindFile=0x381b80, lpFindFileData=0x31e5e4 | out: lpFindFileData=0x31e5e4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1b3b8a57, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x1b3b8a57, ftLastAccessTime.dwHighDateTime=0x1ca0444, ftLastWriteTime.dwLowDateTime=0x1b3b8a57, ftLastWriteTime.dwHighDateTime=0x1ca0444, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="amd64_hcw85c64.inf_31bf3856ad364e35_6.1.7600.16385_none_0446c109eabcdb24", cAlternateFileName="AMFEFB~1.163")) returned 1 [0118.340] FindNextFileW (in: hFindFile=0x381b80, lpFindFileData=0x31e5e4 | out: lpFindFileData=0x31e5e4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd2fc3fb, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0xd2fc3fb, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0xd2fc3fb, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="amd64_hdaudbus.inf.resources_31bf3856ad364e35_6.1.7600.16385_en-us_3b19711aab08d8c6", cAlternateFileName="AM06A6~1.163")) returned 1 [0118.340] FindNextFileW (in: hFindFile=0x381b80, lpFindFileData=0x31e5e4 | out: lpFindFileData=0x31e5e4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x83e08a55, ftCreationTime.dwHighDateTime=0x1cb892b, ftLastAccessTime.dwLowDateTime=0x83e2ebb5, ftLastAccessTime.dwHighDateTime=0x1cb892b, ftLastWriteTime.dwLowDateTime=0x83e2ebb5, ftLastWriteTime.dwHighDateTime=0x1cb892b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="amd64_hdaudbus.inf_31bf3856ad364e35_6.1.7601.17514_none_d54798509d26ab2a", cAlternateFileName="AM5FDB~1.175")) returned 1 [0118.340] FindNextFileW (in: hFindFile=0x381b80, lpFindFileData=0x31e5e4 | out: lpFindFileData=0x31e5e4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xcd05713, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0xcd05713, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0xcd05713, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="amd64_hdaudio.inf.resources_31bf3856ad364e35_6.1.7600.16385_en-us_3d93f9c745c96174", cAlternateFileName="AMD9AE~1.163")) returned 1 [0118.340] FindNextFileW (in: hFindFile=0x381b80, lpFindFileData=0x31e5e4 | out: lpFindFileData=0x31e5e4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x83d96634, ftCreationTime.dwHighDateTime=0x1cb892b, ftLastAccessTime.dwLowDateTime=0x83d96634, ftLastAccessTime.dwHighDateTime=0x1cb892b, ftLastWriteTime.dwLowDateTime=0x83d96634, ftLastWriteTime.dwHighDateTime=0x1cb892b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="amd64_hdaudio.inf_31bf3856ad364e35_6.1.7601.17514_none_73863b3e7e0f937c", cAlternateFileName="AM010B~1.175")) returned 1 [0118.342] FindNextFileW (in: hFindFile=0x381b80, lpFindFileData=0x31e5e4 | out: lpFindFileData=0x31e5e4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xcd77f3e, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0xcd77f3e, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0xcd77f3e, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="amd64_hdaudss.inf.resources_31bf3856ad364e35_6.1.7600.16385_en-us_f9a7fe929c4cabea", cAlternateFileName="AMBBEF~1.163")) returned 1 [0118.342] FindNextFileW (in: hFindFile=0x381b80, lpFindFileData=0x31e5e4 | out: lpFindFileData=0x31e5e4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1936ffbb, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x1936ffbb, ftLastAccessTime.dwHighDateTime=0x1ca0444, ftLastWriteTime.dwLowDateTime=0x1936ffbb, ftLastWriteTime.dwHighDateTime=0x1ca0444, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="amd64_hdaudss.inf_31bf3856ad364e35_6.1.7600.16385_none_862f23a0728bb558", cAlternateFileName="AM5163~1.163")) returned 1 [0118.342] FindNextFileW (in: hFindFile=0x381b80, lpFindFileData=0x31e5e4 | out: lpFindFileData=0x31e5e4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8ed87ba, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x8ed87ba, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x8ed87ba, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="amd64_hid-user.resources_31bf3856ad364e35_6.1.7600.16385_en-us_c19781a304e374a4", cAlternateFileName="AMEF93~1.163")) returned 1 [0118.342] FindNextFileW (in: hFindFile=0x381b80, lpFindFileData=0x31e5e4 | out: lpFindFileData=0x31e5e4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xcd51c85, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0xcd51c85, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0xcd51c85, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="amd64_hidbth.inf.resources_31bf3856ad364e35_6.1.7600.16385_en-us_28b108408ceeabcb", cAlternateFileName="AM82A1~1.163")) returned 1 [0118.342] FindNextFileW (in: hFindFile=0x381b80, lpFindFileData=0x31e5e4 | out: lpFindFileData=0x31e5e4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x19323cfb, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x19323cfb, ftLastAccessTime.dwHighDateTime=0x1ca0444, ftLastWriteTime.dwLowDateTime=0x19323cfb, ftLastWriteTime.dwHighDateTime=0x1ca0444, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="amd64_hidbth.inf_31bf3856ad364e35_6.1.7600.16385_none_7f07aed06f24a51d", cAlternateFileName="AM67EE~1.163")) returned 1 [0118.342] FindNextFileW (in: hFindFile=0x381b80, lpFindFileData=0x31e5e4 | out: lpFindFileData=0x31e5e4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd34896d, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0xd34896d, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0xd34896d, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="amd64_hiddigi.inf.resources_31bf3856ad364e35_6.1.7600.16385_en-us_92e1a6f8f023c71c", cAlternateFileName="AM65E6~1.163")) returned 1 [0118.343] FindNextFileW (in: hFindFile=0x381b80, lpFindFileData=0x31e5e4 | out: lpFindFileData=0x31e5e4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1a3a75b9, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x1a3a75b9, ftLastAccessTime.dwHighDateTime=0x1ca0444, ftLastWriteTime.dwLowDateTime=0x1a3a75b9, ftLastWriteTime.dwHighDateTime=0x1ca0444, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="amd64_hiddigi.inf_31bf3856ad364e35_6.1.7600.16385_none_f15136385f8cfd0e", cAlternateFileName="AM567F~1.163")) returned 1 [0118.343] FindNextFileW (in: hFindFile=0x381b80, lpFindFileData=0x31e5e4 | out: lpFindFileData=0x31e5e4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xcd51c85, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0xcd51c85, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0xcd51c85, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="amd64_hidir.inf.resources_31bf3856ad364e35_6.1.7600.16385_en-us_5f11bd8e937f12d0", cAlternateFileName="AM440F~1.163")) returned 1 [0118.343] FindNextFileW (in: hFindFile=0x381b80, lpFindFileData=0x31e5e4 | out: lpFindFileData=0x31e5e4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x19323cfb, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x19323cfb, ftLastAccessTime.dwHighDateTime=0x1ca0444, ftLastWriteTime.dwLowDateTime=0x19323cfb, ftLastWriteTime.dwHighDateTime=0x1ca0444, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="amd64_hidir.inf_31bf3856ad364e35_6.1.7600.16385_none_e446612e3cec9306", cAlternateFileName="AM0E3A~1.163")) returned 1 [0118.343] FindNextFileW (in: hFindFile=0x381b80, lpFindFileData=0x31e5e4 | out: lpFindFileData=0x31e5e4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xcd51c85, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0xcd51c85, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0xcd51c85, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="amd64_hidirkbd.inf.resources_31bf3856ad364e35_6.1.7600.16385_en-us_f1064c24e72045eb", cAlternateFileName="AMD50E~1.163")) returned 1 [0118.343] FindNextFileW (in: hFindFile=0x381b80, lpFindFileData=0x31e5e4 | out: lpFindFileData=0x31e5e4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x19323cfb, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x19323cfb, ftLastAccessTime.dwHighDateTime=0x1ca0444, ftLastWriteTime.dwLowDateTime=0x19323cfb, ftLastWriteTime.dwHighDateTime=0x1ca0444, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="amd64_hidirkbd.inf_31bf3856ad364e35_6.1.7600.16385_none_0a5398b9d5cdc5e1", cAlternateFileName="AM0244~1.163")) returned 1 [0118.343] FindNextFileW (in: hFindFile=0x381b80, lpFindFileData=0x31e5e4 | out: lpFindFileData=0x31e5e4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd34896d, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0xd34896d, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0xd34896d, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="amd64_hidserv.inf.resources_31bf3856ad364e35_6.1.7600.16385_en-us_822df6c95f3afba7", cAlternateFileName="AM2303~1.163")) returned 1 [0118.343] FindNextFileW (in: hFindFile=0x381b80, lpFindFileData=0x31e5e4 | out: lpFindFileData=0x31e5e4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1a381459, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x1a3a75b9, ftLastAccessTime.dwHighDateTime=0x1ca0444, ftLastWriteTime.dwLowDateTime=0x1a3a75b9, ftLastWriteTime.dwHighDateTime=0x1ca0444, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="amd64_hidserv.inf_31bf3856ad364e35_6.1.7600.16385_none_a5cbab96e62548af", cAlternateFileName="AM879D~1.163")) returned 1 [0118.343] FindNextFileW (in: hFindFile=0x381b80, lpFindFileData=0x31e5e4 | out: lpFindFileData=0x31e5e4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xcd05713, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0xcd05713, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0xcd05713, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="amd64_hpoa1nd.inf.resources_31bf3856ad364e35_6.1.7600.16385_en-us_0dfe4d5831bdb1ef", cAlternateFileName="AM407A~2.163")) returned 1 [0118.343] FindNextFileW (in: hFindFile=0x381b80, lpFindFileData=0x31e5e4 | out: lpFindFileData=0x31e5e4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x186586a3, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x186586a3, ftLastAccessTime.dwHighDateTime=0x1ca0444, ftLastWriteTime.dwLowDateTime=0x186586a3, ftLastWriteTime.dwHighDateTime=0x1ca0444, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="amd64_hpoa1nd.inf_31bf3856ad364e35_6.1.7600.16385_none_7c44203a0475c81b", cAlternateFileName="AM8E87~1.163")) returned 1 [0118.343] FindNextFileW (in: hFindFile=0x381b80, lpFindFileData=0x31e5e4 | out: lpFindFileData=0x31e5e4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xcd05713, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0xcd2b9cc, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0xcd2b9cc, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="amd64_hpoa1sd.inf.resources_31bf3856ad364e35_6.1.7600.16385_en-us_09171f50c732058c", cAlternateFileName="AM5509~1.163")) returned 1 [0118.346] FindNextFileW (in: hFindFile=0x381b80, lpFindFileData=0x31e5e4 | out: lpFindFileData=0x31e5e4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x186586a3, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x186586a3, ftLastAccessTime.dwHighDateTime=0x1ca0444, ftLastWriteTime.dwLowDateTime=0x186586a3, ftLastWriteTime.dwHighDateTime=0x1ca0444, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="amd64_hpoa1sd.inf_31bf3856ad364e35_6.1.7600.16385_none_abdb7466c14b5a38", cAlternateFileName="AM34E1~1.163")) returned 1 [0118.346] FindNextFileW (in: hFindFile=0x381b80, lpFindFileData=0x31e5e4 | out: lpFindFileData=0x31e5e4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xcd2b9cc, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0xcd2b9cc, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0xcd2b9cc, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="amd64_hpoa1so.inf.resources_31bf3856ad364e35_6.1.7600.16385_en-us_693571c6bf1b4671", cAlternateFileName="AM8F28~1.163")) returned 1 [0118.346] FindNextFileW (in: hFindFile=0x381b80, lpFindFileData=0x31e5e4 | out: lpFindFileData=0x31e5e4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x186586a3, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x1867e803, ftLastAccessTime.dwHighDateTime=0x1ca0444, ftLastWriteTime.dwLowDateTime=0x1867e803, ftLastWriteTime.dwHighDateTime=0x1ca0444, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="amd64_hpoa1so.inf_31bf3856ad364e35_6.1.7600.16385_none_9f729ae40a99fd9d", cAlternateFileName="AM4D1F~1.163")) returned 1 [0118.346] FindNextFileW (in: hFindFile=0x381b80, lpFindFileData=0x31e5e4 | out: lpFindFileData=0x31e5e4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xcd2b9cc, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0xcd2b9cc, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0xcd2b9cc, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="amd64_hpoa1ss.inf.resources_31bf3856ad364e35_6.1.7600.16385_en-us_2f0fb6afeab5e9ad", cAlternateFileName="AM8624~1.163")) returned 1 [0118.346] FindNextFileW (in: hFindFile=0x381b80, lpFindFileData=0x31e5e4 | out: lpFindFileData=0x31e5e4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1867e803, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x1867e803, ftLastAccessTime.dwHighDateTime=0x1ca0444, ftLastWriteTime.dwLowDateTime=0x1867e803, ftLastWriteTime.dwHighDateTime=0x1ca0444, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="amd64_hpoa1ss.inf_31bf3856ad364e35_6.1.7600.16385_none_551deeb482597ed9", cAlternateFileName="AMBD49~1.163")) returned 1 [0118.346] FindNextFileW (in: hFindFile=0x381b80, lpFindFileData=0x31e5e4 | out: lpFindFileData=0x31e5e4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd3226b4, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0xd3226b4, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0xd3226b4, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="amd64_hpsamd.inf.resources_31bf3856ad364e35_6.1.7600.16385_en-us_5f5368c8396a16e7", cAlternateFileName="AMD00C~1.163")) returned 1 [0118.346] FindNextFileW (in: hFindFile=0x381b80, lpFindFileData=0x31e5e4 | out: lpFindFileData=0x31e5e4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x83e54d16, ftCreationTime.dwHighDateTime=0x1cb892b, ftLastAccessTime.dwLowDateTime=0x83e54d16, ftLastAccessTime.dwHighDateTime=0x1cb892b, ftLastWriteTime.dwLowDateTime=0x83e54d16, ftLastWriteTime.dwHighDateTime=0x1cb892b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="amd64_hpsamd.inf_31bf3856ad364e35_6.1.7601.17514_none_5b5cf553a3ff2443", cAlternateFileName="AMA957~1.175")) returned 1 [0118.346] FindNextFileW (in: hFindFile=0x381b80, lpFindFileData=0x31e5e4 | out: lpFindFileData=0x31e5e4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd3226b4, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0xd3226b4, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0xd3226b4, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="amd64_iastorv.inf.resources_31bf3856ad364e35_6.1.7600.16385_en-us_44e8ed1a9baece6e", cAlternateFileName="AMA6D6~1.163")) returned 1 [0118.346] FindNextFileW (in: hFindFile=0x381b80, lpFindFileData=0x31e5e4 | out: lpFindFileData=0x31e5e4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x83e2ebb5, ftCreationTime.dwHighDateTime=0x1cb892b, ftLastAccessTime.dwLowDateTime=0x83e54d16, ftLastAccessTime.dwHighDateTime=0x1cb892b, ftLastWriteTime.dwLowDateTime=0x83e54d16, ftLastWriteTime.dwHighDateTime=0x1cb892b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="amd64_iastorv.inf_31bf3856ad364e35_6.1.7601.17514_none_0d3757e79e6784d0", cAlternateFileName="AM8C03~2.175")) returned 1 [0118.346] FindNextFileW (in: hFindFile=0x381b80, lpFindFileData=0x31e5e4 | out: lpFindFileData=0x31e5e4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xcd77f3e, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0xcd77f3e, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0xcd77f3e, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="amd64_igdlh.inf.resources_31bf3856ad364e35_6.1.7600.16385_en-us_a63b6645efb676c8", cAlternateFileName="AM076A~1.163")) returned 1 [0118.346] FindNextFileW (in: hFindFile=0x381b80, lpFindFileData=0x31e5e4 | out: lpFindFileData=0x31e5e4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1a22a7f6, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x1a22a7f6, ftLastAccessTime.dwHighDateTime=0x1ca0444, ftLastWriteTime.dwLowDateTime=0x1a22a7f6, ftLastWriteTime.dwHighDateTime=0x1ca0444, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="amd64_igdlh.inf_31bf3856ad364e35_6.1.7600.16385_none_f3e7064ea3c09a9a", cAlternateFileName="AM8EA7~1.163")) returned 1 [0118.346] FindNextFileW (in: hFindFile=0x381b80, lpFindFileData=0x31e5e4 | out: lpFindFileData=0x31e5e4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd3226b4, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0xd3226b4, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0xd3226b4, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="amd64_iirsp.inf.resources_31bf3856ad364e35_6.1.7600.16385_en-us_a258cf424b77be5b", cAlternateFileName="AM205A~1.163")) returned 1 [0118.346] FindNextFileW (in: hFindFile=0x381b80, lpFindFileData=0x31e5e4 | out: lpFindFileData=0x31e5e4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1a35b2f9, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x1a35b2f9, ftLastAccessTime.dwHighDateTime=0x1ca0444, ftLastWriteTime.dwLowDateTime=0x1a35b2f9, ftLastWriteTime.dwHighDateTime=0x1ca0444, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="amd64_iirsp.inf_31bf3856ad364e35_6.1.7600.16385_none_02496439a3048835", cAlternateFileName="AMEBD2~1.163")) returned 1 [0120.724] FindClose (in: hFindFile=0x381b80 | out: hFindFile=0x381b80) returned 1 [0120.724] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e86c) returned 1 [0120.724] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e878) returned 1 [0120.724] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e8ac) returned 1 [0120.724] GetFullPathNameW (in: lpFileName="C:\\Windows\\winsxs", nBufferLength=0x105, lpBuffer=0x31e3b4, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\winsxs", lpFilePart=0x0) returned 0x11 [0120.724] GetFullPathNameW (in: lpFileName="C:\\Windows\\winsxs\\", nBufferLength=0x105, lpBuffer=0x31e388, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\winsxs\\", lpFilePart=0x0) returned 0x12 [0120.724] FindFirstFileW (in: lpFileName="C:\\Windows\\winsxs\\*", lpFindFileData=0x31e5d4 | out: lpFindFileData=0x31e5d4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x12fc3ac, ftCreationTime.dwHighDateTime=0x1ca0432, ftLastAccessTime.dwLowDateTime=0xbbbe9b70, ftLastAccessTime.dwHighDateTime=0x1d2fab4, ftLastWriteTime.dwLowDateTime=0xbbbe9b70, ftLastWriteTime.dwHighDateTime=0x1d2fab4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x381b80 [0121.020] FindClose (in: hFindFile=0x381b80 | out: hFindFile=0x381b80) returned 1 [0121.020] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e86c) returned 1 [0121.020] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e878) returned 1 [0121.020] GetFullPathNameW (in: lpFileName="C:\\Windows\\winsxs\\reboot.xml", nBufferLength=0x105, lpBuffer=0x31e284, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\winsxs\\reboot.xml", lpFilePart=0x0) returned 0x1c [0121.020] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e778) returned 1 [0121.020] CreateFileW (lpFileName="C:\\Windows\\winsxs\\reboot.xml" (normalized: "c:\\windows\\winsxs\\reboot.xml"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x178 [0121.022] GetFileType (hFile=0x178) returned 0x1 [0121.022] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e774) returned 1 [0121.022] GetFileType (hFile=0x178) returned 0x1 [0121.022] GetFileSize (in: hFile=0x178, lpFileSizeHigh=0x31e880 | out: lpFileSizeHigh=0x31e880*=0x0) returned 0xcd [0121.022] ReadFile (in: hFile=0x178, lpBuffer=0x28fff00, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x31e82c, lpOverlapped=0x0 | out: lpBuffer=0x28fff00*, lpNumberOfBytesRead=0x31e82c*=0xcd, lpOverlapped=0x0) returned 1 [0121.060] GetFullPathNameW (in: lpFileName="C:\\Windows\\winsxs\\reboot.xml", nBufferLength=0x105, lpBuffer=0x31e270, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\winsxs\\reboot.xml", lpFilePart=0x0) returned 0x1c [0121.060] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e764) returned 1 [0121.060] CreateFileW (lpFileName="C:\\Windows\\winsxs\\reboot.xml" (normalized: "c:\\windows\\winsxs\\reboot.xml"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0xffffffff [0121.061] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31d5a0) returned 1 [0121.061] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e99c) returned 1 [0121.061] GetFullPathNameW (in: lpFileName="D:\\", nBufferLength=0x105, lpBuffer=0x31e4a4, lpFilePart=0x0 | out: lpBuffer="D:\\", lpFilePart=0x0) returned 0x3 [0121.061] GetFullPathNameW (in: lpFileName="D:\\", nBufferLength=0x105, lpBuffer=0x31e478, lpFilePart=0x0 | out: lpBuffer="D:\\", lpFilePart=0x0) returned 0x3 [0121.061] FindFirstFileW (in: lpFileName="D:\\*", lpFindFileData=0x31e6c4 | out: lpFindFileData=0x31e6c4*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0121.061] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e960) returned 1 [0121.063] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e99c) returned 1 [0121.063] GetFullPathNameW (in: lpFileName="E:\\", nBufferLength=0x105, lpBuffer=0x31e4a4, lpFilePart=0x0 | out: lpBuffer="E:\\", lpFilePart=0x0) returned 0x3 [0121.063] GetFullPathNameW (in: lpFileName="E:\\", nBufferLength=0x105, lpBuffer=0x31e478, lpFilePart=0x0 | out: lpBuffer="E:\\", lpFilePart=0x0) returned 0x3 [0121.063] FindFirstFileW (in: lpFileName="E:\\*", lpFindFileData=0x31e6c4 | out: lpFindFileData=0x31e6c4*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0121.063] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e960) returned 1 [0121.064] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e99c) returned 1 [0121.064] GetFullPathNameW (in: lpFileName="F:\\", nBufferLength=0x105, lpBuffer=0x31e4a4, lpFilePart=0x0 | out: lpBuffer="F:\\", lpFilePart=0x0) returned 0x3 [0121.064] GetFullPathNameW (in: lpFileName="F:\\", nBufferLength=0x105, lpBuffer=0x31e478, lpFilePart=0x0 | out: lpBuffer="F:\\", lpFilePart=0x0) returned 0x3 [0121.064] FindFirstFileW (in: lpFileName="F:\\*", lpFindFileData=0x31e6c4 | out: lpFindFileData=0x31e6c4*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0121.064] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e960) returned 1 [0121.065] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e99c) returned 1 [0121.065] GetFullPathNameW (in: lpFileName="G:\\", nBufferLength=0x105, lpBuffer=0x31e4a4, lpFilePart=0x0 | out: lpBuffer="G:\\", lpFilePart=0x0) returned 0x3 [0121.065] GetFullPathNameW (in: lpFileName="G:\\", nBufferLength=0x105, lpBuffer=0x31e478, lpFilePart=0x0 | out: lpBuffer="G:\\", lpFilePart=0x0) returned 0x3 [0121.065] FindFirstFileW (in: lpFileName="G:\\*", lpFindFileData=0x31e6c4 | out: lpFindFileData=0x31e6c4*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0121.065] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e960) returned 1 [0121.066] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e99c) returned 1 [0121.066] GetFullPathNameW (in: lpFileName="Z:\\", nBufferLength=0x105, lpBuffer=0x31e4a4, lpFilePart=0x0 | out: lpBuffer="Z:\\", lpFilePart=0x0) returned 0x3 [0121.066] GetFullPathNameW (in: lpFileName="Z:\\", nBufferLength=0x105, lpBuffer=0x31e478, lpFilePart=0x0 | out: lpBuffer="Z:\\", lpFilePart=0x0) returned 0x3 [0121.066] FindFirstFileW (in: lpFileName="Z:\\*", lpFindFileData=0x31e6c4 | out: lpFindFileData=0x31e6c4*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0121.066] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e960) returned 1 [0121.067] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e99c) returned 1 [0121.067] GetFullPathNameW (in: lpFileName="A:\\", nBufferLength=0x105, lpBuffer=0x31e4a4, lpFilePart=0x0 | out: lpBuffer="A:\\", lpFilePart=0x0) returned 0x3 [0121.067] GetFullPathNameW (in: lpFileName="A:\\", nBufferLength=0x105, lpBuffer=0x31e478, lpFilePart=0x0 | out: lpBuffer="A:\\", lpFilePart=0x0) returned 0x3 [0121.067] FindFirstFileW (in: lpFileName="A:\\*", lpFindFileData=0x31e6c4 | out: lpFindFileData=0x31e6c4*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0121.067] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e960) returned 1 [0121.083] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e99c) returned 1 [0121.083] GetFullPathNameW (in: lpFileName="C:\\", nBufferLength=0x105, lpBuffer=0x31e4a4, lpFilePart=0x0 | out: lpBuffer="C:\\", lpFilePart=0x0) returned 0x3 [0121.083] GetFullPathNameW (in: lpFileName="C:\\", nBufferLength=0x105, lpBuffer=0x31e478, lpFilePart=0x0 | out: lpBuffer="C:\\", lpFilePart=0x0) returned 0x3 [0121.083] FindFirstFileW (in: lpFileName="C:\\*", lpFindFileData=0x31e6c4 | out: lpFindFileData=0x31e6c4*(dwFileAttributes=0x16, ftCreationTime.dwLowDateTime=0xd29f5adc, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x2dfdd420, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x2dfdd420, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="$Recycle.Bin", cAlternateFileName="")) returned 0x381cc0 [0121.084] FindNextFileW (in: hFindFile=0x381cc0, lpFindFileData=0x31e6d4 | out: lpFindFileData=0x31e6d4*(dwFileAttributes=0x16, ftCreationTime.dwLowDateTime=0xac015040, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac30ebc0, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xac30ebc0, ftLastWriteTime.dwHighDateTime=0x1d2de32, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Boot", cAlternateFileName="")) returned 1 [0121.084] FindNextFileW (in: hFindFile=0x381cc0, lpFindFileData=0x31e6d4 | out: lpFindFileData=0x31e6d4*(dwFileAttributes=0x27, ftCreationTime.dwLowDateTime=0xac0f9880, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac0f9880, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0x84a3bb2c, ftLastWriteTime.dwHighDateTime=0x1cb892b, nFileSizeHigh=0x0, nFileSizeLow=0x5db2a, dwReserved0=0x0, dwReserved1=0x0, cFileName="bootmgr", cAlternateFileName="")) returned 1 [0121.084] FindNextFileW (in: hFindFile=0x381cc0, lpFindFileData=0x31e6d4 | out: lpFindFileData=0x31e6d4*(dwFileAttributes=0x27, ftCreationTime.dwLowDateTime=0xac54a060, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac54a060, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xac54a060, ftLastWriteTime.dwHighDateTime=0x1d2de32, nFileSizeHigh=0x0, nFileSizeLow=0x2000, dwReserved0=0x0, dwReserved1=0x0, cFileName="BOOTSECT.BAK", cAlternateFileName="")) returned 1 [0121.084] FindNextFileW (in: hFindFile=0x381cc0, lpFindFileData=0x31e6d4 | out: lpFindFileData=0x31e6d4*(dwFileAttributes=0x16, ftCreationTime.dwLowDateTime=0xcd4f5c20, ftCreationTime.dwHighDateTime=0x1d305eb, ftLastAccessTime.dwLowDateTime=0xc182c7c0, ftLastAccessTime.dwHighDateTime=0x1d3373b, ftLastWriteTime.dwLowDateTime=0xc182c7c0, ftLastWriteTime.dwHighDateTime=0x1d3373b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Config.Msi", cAlternateFileName="")) returned 1 [0121.084] FindNextFileW (in: hFindFile=0x381cc0, lpFindFileData=0x31e6d4 | out: lpFindFileData=0x31e6d4*(dwFileAttributes=0x2416, ftCreationTime.dwLowDateTime=0x307290f2, ftCreationTime.dwHighDateTime=0x1ca0441, ftLastAccessTime.dwLowDateTime=0x307290f2, ftLastAccessTime.dwHighDateTime=0x1ca0441, ftLastWriteTime.dwLowDateTime=0x307290f2, ftLastWriteTime.dwHighDateTime=0x1ca0441, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Documents and Settings", cAlternateFileName="DOCUME~1")) returned 1 [0121.084] FindNextFileW (in: hFindFile=0x381cc0, lpFindFileData=0x31e6d4 | out: lpFindFileData=0x31e6d4*(dwFileAttributes=0x2026, ftCreationTime.dwLowDateTime=0x56257dc0, ftCreationTime.dwHighDateTime=0x1d2de2a, ftLastAccessTime.dwLowDateTime=0x56257dc0, ftLastAccessTime.dwHighDateTime=0x1d2de2a, ftLastWriteTime.dwLowDateTime=0xae99ef60, ftLastWriteTime.dwHighDateTime=0x1d5e82a, nFileSizeHigh=0x0, nFileSizeLow=0x5ff9d000, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="hiberfil.sys", cAlternateFileName="")) returned 1 [0121.084] FindNextFileW (in: hFindFile=0x381cc0, lpFindFileData=0x31e6d4 | out: lpFindFileData=0x31e6d4*(dwFileAttributes=0x2013, ftCreationTime.dwLowDateTime=0xe7b42810, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xe7b42810, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xe7b42810, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="MSOCache", cAlternateFileName="")) returned 1 [0121.085] FindNextFileW (in: hFindFile=0x381cc0, lpFindFileData=0x31e6d4 | out: lpFindFileData=0x31e6d4*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0x563d4b80, ftCreationTime.dwHighDateTime=0x1d2de2a, ftLastAccessTime.dwLowDateTime=0x563d4b80, ftLastAccessTime.dwHighDateTime=0x1d2de2a, ftLastWriteTime.dwLowDateTime=0xaece4da0, ftLastWriteTime.dwHighDateTime=0x1d5e82a, nFileSizeHigh=0x0, nFileSizeLow=0x7ff7c000, dwReserved0=0x0, dwReserved1=0x0, cFileName="pagefile.sys", cAlternateFileName="")) returned 1 [0121.085] FindNextFileW (in: hFindFile=0x381cc0, lpFindFileData=0x31e6d4 | out: lpFindFileData=0x31e6d4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd72e458, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd72e458, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xfd72e458, ftLastWriteTime.dwHighDateTime=0x1ca0431, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="PerfLogs", cAlternateFileName="")) returned 1 [0121.085] FindNextFileW (in: hFindFile=0x381cc0, lpFindFileData=0x31e6d4 | out: lpFindFileData=0x31e6d4*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0xfd72e458, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xdde29c40, ftLastAccessTime.dwHighDateTime=0x1d5e82a, ftLastWriteTime.dwLowDateTime=0xdde29c40, ftLastWriteTime.dwHighDateTime=0x1d5e82a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Program Files", cAlternateFileName="PROGRA~1")) returned 1 [0121.085] FindNextFileW (in: hFindFile=0x381cc0, lpFindFileData=0x31e6d4 | out: lpFindFileData=0x31e6d4*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0xfd8ab1dc, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x10f11a30, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x10f11a30, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Program Files (x86)", cAlternateFileName="PROGRA~2")) returned 1 [0121.085] FindNextFileW (in: hFindFile=0x381cc0, lpFindFileData=0x31e6d4 | out: lpFindFileData=0x31e6d4*(dwFileAttributes=0x2012, ftCreationTime.dwLowDateTime=0xfd943744, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x803771e0, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x803771e0, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="ProgramData", cAlternateFileName="PROGRA~3")) returned 1 [0121.085] FindNextFileW (in: hFindFile=0x381cc0, lpFindFileData=0x31e6d4 | out: lpFindFileData=0x31e6d4*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0x27c09980, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x27cc8060, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x27cc8060, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Recovery", cAlternateFileName="")) returned 1 [0121.085] FindNextFileW (in: hFindFile=0x381cc0, lpFindFileData=0x31e6d4 | out: lpFindFileData=0x31e6d4*(dwFileAttributes=0x16, ftCreationTime.dwLowDateTime=0x56231c60, ftCreationTime.dwHighDateTime=0x1d2de2a, ftLastAccessTime.dwLowDateTime=0xa1602bc0, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0xa1602bc0, ftLastWriteTime.dwHighDateTime=0x1d305f1, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="System Volume Information", cAlternateFileName="SYSTEM~1")) returned 1 [0121.086] FindNextFileW (in: hFindFile=0x381cc0, lpFindFileData=0x31e6d4 | out: lpFindFileData=0x31e6d4*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0xfda01e06, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x28c670c0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x28c670c0, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Users", cAlternateFileName="")) returned 1 [0121.086] FindNextFileW (in: hFindFile=0x381cc0, lpFindFileData=0x31e6d4 | out: lpFindFileData=0x31e6d4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfdb0c77c, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x2fb4a840, ftLastAccessTime.dwHighDateTime=0x1d4d57d, ftLastWriteTime.dwLowDateTime=0x2fb4a840, ftLastWriteTime.dwHighDateTime=0x1d4d57d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Windows", cAlternateFileName="")) returned 1 [0121.086] FindNextFileW (in: hFindFile=0x381cc0, lpFindFileData=0x31e6d4 | out: lpFindFileData=0x31e6d4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfdb0c77c, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x2fb4a840, ftLastAccessTime.dwHighDateTime=0x1d4d57d, ftLastWriteTime.dwLowDateTime=0x2fb4a840, ftLastWriteTime.dwHighDateTime=0x1d4d57d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Windows", cAlternateFileName="")) returned 0 [0121.086] FindClose (in: hFindFile=0x381cc0 | out: hFindFile=0x381cc0) returned 1 [0121.086] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e95c) returned 1 [0121.086] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e968) returned 1 [0121.086] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e99c) returned 1 [0121.086] GetFullPathNameW (in: lpFileName="C:\\", nBufferLength=0x105, lpBuffer=0x31e4a4, lpFilePart=0x0 | out: lpBuffer="C:\\", lpFilePart=0x0) returned 0x3 [0121.086] GetFullPathNameW (in: lpFileName="C:\\", nBufferLength=0x105, lpBuffer=0x31e478, lpFilePart=0x0 | out: lpBuffer="C:\\", lpFilePart=0x0) returned 0x3 [0121.086] FindFirstFileW (in: lpFileName="C:\\*", lpFindFileData=0x31e6c4 | out: lpFindFileData=0x31e6c4*(dwFileAttributes=0x16, ftCreationTime.dwLowDateTime=0xd29f5adc, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x2dfdd420, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x2dfdd420, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="$Recycle.Bin", cAlternateFileName="")) returned 0x381cc0 [0121.086] FindNextFileW (in: hFindFile=0x381cc0, lpFindFileData=0x31e6d4 | out: lpFindFileData=0x31e6d4*(dwFileAttributes=0x16, ftCreationTime.dwLowDateTime=0xac015040, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac30ebc0, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xac30ebc0, ftLastWriteTime.dwHighDateTime=0x1d2de32, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Boot", cAlternateFileName="")) returned 1 [0121.086] FindNextFileW (in: hFindFile=0x381cc0, lpFindFileData=0x31e6d4 | out: lpFindFileData=0x31e6d4*(dwFileAttributes=0x27, ftCreationTime.dwLowDateTime=0xac0f9880, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac0f9880, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0x84a3bb2c, ftLastWriteTime.dwHighDateTime=0x1cb892b, nFileSizeHigh=0x0, nFileSizeLow=0x5db2a, dwReserved0=0x0, dwReserved1=0x0, cFileName="bootmgr", cAlternateFileName="")) returned 1 [0121.087] FindNextFileW (in: hFindFile=0x381cc0, lpFindFileData=0x31e6d4 | out: lpFindFileData=0x31e6d4*(dwFileAttributes=0x27, ftCreationTime.dwLowDateTime=0xac54a060, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac54a060, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xac54a060, ftLastWriteTime.dwHighDateTime=0x1d2de32, nFileSizeHigh=0x0, nFileSizeLow=0x2000, dwReserved0=0x0, dwReserved1=0x0, cFileName="BOOTSECT.BAK", cAlternateFileName="")) returned 1 [0121.087] FindNextFileW (in: hFindFile=0x381cc0, lpFindFileData=0x31e6d4 | out: lpFindFileData=0x31e6d4*(dwFileAttributes=0x16, ftCreationTime.dwLowDateTime=0xcd4f5c20, ftCreationTime.dwHighDateTime=0x1d305eb, ftLastAccessTime.dwLowDateTime=0xc182c7c0, ftLastAccessTime.dwHighDateTime=0x1d3373b, ftLastWriteTime.dwLowDateTime=0xc182c7c0, ftLastWriteTime.dwHighDateTime=0x1d3373b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Config.Msi", cAlternateFileName="")) returned 1 [0121.087] FindNextFileW (in: hFindFile=0x381cc0, lpFindFileData=0x31e6d4 | out: lpFindFileData=0x31e6d4*(dwFileAttributes=0x2416, ftCreationTime.dwLowDateTime=0x307290f2, ftCreationTime.dwHighDateTime=0x1ca0441, ftLastAccessTime.dwLowDateTime=0x307290f2, ftLastAccessTime.dwHighDateTime=0x1ca0441, ftLastWriteTime.dwLowDateTime=0x307290f2, ftLastWriteTime.dwHighDateTime=0x1ca0441, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Documents and Settings", cAlternateFileName="DOCUME~1")) returned 1 [0121.087] FindNextFileW (in: hFindFile=0x381cc0, lpFindFileData=0x31e6d4 | out: lpFindFileData=0x31e6d4*(dwFileAttributes=0x2026, ftCreationTime.dwLowDateTime=0x56257dc0, ftCreationTime.dwHighDateTime=0x1d2de2a, ftLastAccessTime.dwLowDateTime=0x56257dc0, ftLastAccessTime.dwHighDateTime=0x1d2de2a, ftLastWriteTime.dwLowDateTime=0xae99ef60, ftLastWriteTime.dwHighDateTime=0x1d5e82a, nFileSizeHigh=0x0, nFileSizeLow=0x5ff9d000, dwReserved0=0x0, dwReserved1=0x0, cFileName="hiberfil.sys", cAlternateFileName="")) returned 1 [0121.087] FindNextFileW (in: hFindFile=0x381cc0, lpFindFileData=0x31e6d4 | out: lpFindFileData=0x31e6d4*(dwFileAttributes=0x2013, ftCreationTime.dwLowDateTime=0xe7b42810, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xe7b42810, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xe7b42810, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="MSOCache", cAlternateFileName="")) returned 1 [0121.087] FindNextFileW (in: hFindFile=0x381cc0, lpFindFileData=0x31e6d4 | out: lpFindFileData=0x31e6d4*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0x563d4b80, ftCreationTime.dwHighDateTime=0x1d2de2a, ftLastAccessTime.dwLowDateTime=0x563d4b80, ftLastAccessTime.dwHighDateTime=0x1d2de2a, ftLastWriteTime.dwLowDateTime=0xaece4da0, ftLastWriteTime.dwHighDateTime=0x1d5e82a, nFileSizeHigh=0x0, nFileSizeLow=0x7ff7c000, dwReserved0=0x0, dwReserved1=0x0, cFileName="pagefile.sys", cAlternateFileName="")) returned 1 [0121.088] FindNextFileW (in: hFindFile=0x381cc0, lpFindFileData=0x31e6d4 | out: lpFindFileData=0x31e6d4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd72e458, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd72e458, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xfd72e458, ftLastWriteTime.dwHighDateTime=0x1ca0431, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="PerfLogs", cAlternateFileName="")) returned 1 [0121.088] FindNextFileW (in: hFindFile=0x381cc0, lpFindFileData=0x31e6d4 | out: lpFindFileData=0x31e6d4*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0xfd72e458, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xdde29c40, ftLastAccessTime.dwHighDateTime=0x1d5e82a, ftLastWriteTime.dwLowDateTime=0xdde29c40, ftLastWriteTime.dwHighDateTime=0x1d5e82a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Program Files", cAlternateFileName="PROGRA~1")) returned 1 [0121.088] FindNextFileW (in: hFindFile=0x381cc0, lpFindFileData=0x31e6d4 | out: lpFindFileData=0x31e6d4*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0xfd8ab1dc, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x10f11a30, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x10f11a30, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Program Files (x86)", cAlternateFileName="PROGRA~2")) returned 1 [0121.088] FindNextFileW (in: hFindFile=0x381cc0, lpFindFileData=0x31e6d4 | out: lpFindFileData=0x31e6d4*(dwFileAttributes=0x2012, ftCreationTime.dwLowDateTime=0xfd943744, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x803771e0, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x803771e0, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="ProgramData", cAlternateFileName="PROGRA~3")) returned 1 [0121.088] FindNextFileW (in: hFindFile=0x381cc0, lpFindFileData=0x31e6d4 | out: lpFindFileData=0x31e6d4*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0x27c09980, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x27cc8060, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x27cc8060, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Recovery", cAlternateFileName="")) returned 1 [0121.088] FindNextFileW (in: hFindFile=0x381cc0, lpFindFileData=0x31e6d4 | out: lpFindFileData=0x31e6d4*(dwFileAttributes=0x16, ftCreationTime.dwLowDateTime=0x56231c60, ftCreationTime.dwHighDateTime=0x1d2de2a, ftLastAccessTime.dwLowDateTime=0xa1602bc0, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0xa1602bc0, ftLastWriteTime.dwHighDateTime=0x1d305f1, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="System Volume Information", cAlternateFileName="SYSTEM~1")) returned 1 [0121.088] FindNextFileW (in: hFindFile=0x381cc0, lpFindFileData=0x31e6d4 | out: lpFindFileData=0x31e6d4*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0xfda01e06, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x28c670c0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x28c670c0, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Users", cAlternateFileName="")) returned 1 [0121.088] FindNextFileW (in: hFindFile=0x381cc0, lpFindFileData=0x31e6d4 | out: lpFindFileData=0x31e6d4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfdb0c77c, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x2fb4a840, ftLastAccessTime.dwHighDateTime=0x1d4d57d, ftLastWriteTime.dwLowDateTime=0x2fb4a840, ftLastWriteTime.dwHighDateTime=0x1d4d57d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Windows", cAlternateFileName="")) returned 1 [0121.088] FindNextFileW (in: hFindFile=0x381cc0, lpFindFileData=0x31e6d4 | out: lpFindFileData=0x31e6d4*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0121.089] FindClose (in: hFindFile=0x381cc0 | out: hFindFile=0x381cc0) returned 1 [0121.089] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e95c) returned 1 [0121.089] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e968) returned 1 [0121.089] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e924) returned 1 [0121.089] GetFullPathNameW (in: lpFileName="C:\\$Recycle.Bin", nBufferLength=0x105, lpBuffer=0x31e42c, lpFilePart=0x0 | out: lpBuffer="C:\\$Recycle.Bin", lpFilePart=0x0) returned 0xf [0121.089] GetFullPathNameW (in: lpFileName="C:\\$Recycle.Bin\\", nBufferLength=0x105, lpBuffer=0x31e400, lpFilePart=0x0 | out: lpBuffer="C:\\$Recycle.Bin\\", lpFilePart=0x0) returned 0x10 [0121.089] FindFirstFileW (in: lpFileName="C:\\$Recycle.Bin\\*", lpFindFileData=0x31e64c | out: lpFindFileData=0x31e64c*(dwFileAttributes=0x16, ftCreationTime.dwLowDateTime=0xd29f5adc, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x2dfdd420, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x2dfdd420, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x381cc0 [0121.089] FindNextFileW (in: hFindFile=0x381cc0, lpFindFileData=0x31e65c | out: lpFindFileData=0x31e65c*(dwFileAttributes=0x16, ftCreationTime.dwLowDateTime=0xd29f5adc, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x2dfdd420, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x2dfdd420, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0121.089] FindNextFileW (in: hFindFile=0x381cc0, lpFindFileData=0x31e65c | out: lpFindFileData=0x31e65c*(dwFileAttributes=0x16, ftCreationTime.dwLowDateTime=0x2dfdd420, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0xb63e4b00, ftLastAccessTime.dwHighDateTime=0x1d337f4, ftLastWriteTime.dwLowDateTime=0xb63e4b00, ftLastWriteTime.dwHighDateTime=0x1d337f4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="S-1-5-21-3388679973-3930757225-3770151564-1000", cAlternateFileName="S-1-5-~1")) returned 1 [0121.089] FindNextFileW (in: hFindFile=0x381cc0, lpFindFileData=0x31e65c | out: lpFindFileData=0x31e65c*(dwFileAttributes=0x16, ftCreationTime.dwLowDateTime=0x2dfdd420, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0xb63e4b00, ftLastAccessTime.dwHighDateTime=0x1d337f4, ftLastWriteTime.dwLowDateTime=0xb63e4b00, ftLastWriteTime.dwHighDateTime=0x1d337f4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="S-1-5-21-3388679973-3930757225-3770151564-1000", cAlternateFileName="S-1-5-~1")) returned 0 [0121.089] FindClose (in: hFindFile=0x381cc0 | out: hFindFile=0x381cc0) returned 1 [0121.089] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e8e4) returned 1 [0121.090] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e8f0) returned 1 [0121.090] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e924) returned 1 [0121.090] GetFullPathNameW (in: lpFileName="C:\\$Recycle.Bin", nBufferLength=0x105, lpBuffer=0x31e42c, lpFilePart=0x0 | out: lpBuffer="C:\\$Recycle.Bin", lpFilePart=0x0) returned 0xf [0121.090] GetFullPathNameW (in: lpFileName="C:\\$Recycle.Bin\\", nBufferLength=0x105, lpBuffer=0x31e400, lpFilePart=0x0 | out: lpBuffer="C:\\$Recycle.Bin\\", lpFilePart=0x0) returned 0x10 [0121.090] FindFirstFileW (in: lpFileName="C:\\$Recycle.Bin\\*", lpFindFileData=0x31e64c | out: lpFindFileData=0x31e64c*(dwFileAttributes=0x16, ftCreationTime.dwLowDateTime=0xd29f5adc, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x2dfdd420, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x2dfdd420, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x381cc0 [0121.090] FindNextFileW (in: hFindFile=0x381cc0, lpFindFileData=0x31e65c | out: lpFindFileData=0x31e65c*(dwFileAttributes=0x16, ftCreationTime.dwLowDateTime=0xd29f5adc, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x2dfdd420, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x2dfdd420, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0121.090] FindNextFileW (in: hFindFile=0x381cc0, lpFindFileData=0x31e65c | out: lpFindFileData=0x31e65c*(dwFileAttributes=0x16, ftCreationTime.dwLowDateTime=0x2dfdd420, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0xb63e4b00, ftLastAccessTime.dwHighDateTime=0x1d337f4, ftLastWriteTime.dwLowDateTime=0xb63e4b00, ftLastWriteTime.dwHighDateTime=0x1d337f4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="S-1-5-21-3388679973-3930757225-3770151564-1000", cAlternateFileName="S-1-5-~1")) returned 1 [0121.090] FindNextFileW (in: hFindFile=0x381cc0, lpFindFileData=0x31e65c | out: lpFindFileData=0x31e65c*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0121.090] FindClose (in: hFindFile=0x381cc0 | out: hFindFile=0x381cc0) returned 1 [0121.090] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e8e4) returned 1 [0121.090] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e8f0) returned 1 [0121.090] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e8ac) returned 1 [0121.090] GetFullPathNameW (in: lpFileName="C:\\$Recycle.Bin\\S-1-5-21-3388679973-3930757225-3770151564-1000", nBufferLength=0x105, lpBuffer=0x31e3b4, lpFilePart=0x0 | out: lpBuffer="C:\\$Recycle.Bin\\S-1-5-21-3388679973-3930757225-3770151564-1000", lpFilePart=0x0) returned 0x3e [0121.090] GetFullPathNameW (in: lpFileName="C:\\$Recycle.Bin\\S-1-5-21-3388679973-3930757225-3770151564-1000\\", nBufferLength=0x105, lpBuffer=0x31e388, lpFilePart=0x0 | out: lpBuffer="C:\\$Recycle.Bin\\S-1-5-21-3388679973-3930757225-3770151564-1000\\", lpFilePart=0x0) returned 0x3f [0121.091] FindFirstFileW (in: lpFileName="C:\\$Recycle.Bin\\S-1-5-21-3388679973-3930757225-3770151564-1000\\*", lpFindFileData=0x31e5d4 | out: lpFindFileData=0x31e5d4*(dwFileAttributes=0x16, ftCreationTime.dwLowDateTime=0x2dfdd420, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0xb63e4b00, ftLastAccessTime.dwHighDateTime=0x1d337f4, ftLastWriteTime.dwLowDateTime=0xb63e4b00, ftLastWriteTime.dwHighDateTime=0x1d337f4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x381cc0 [0121.091] FindNextFileW (in: hFindFile=0x381cc0, lpFindFileData=0x31e5e4 | out: lpFindFileData=0x31e5e4*(dwFileAttributes=0x16, ftCreationTime.dwLowDateTime=0x2dfdd420, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0xb63e4b00, ftLastAccessTime.dwHighDateTime=0x1d337f4, ftLastWriteTime.dwLowDateTime=0xb63e4b00, ftLastWriteTime.dwHighDateTime=0x1d337f4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0121.091] FindNextFileW (in: hFindFile=0x381cc0, lpFindFileData=0x31e5e4 | out: lpFindFileData=0x31e5e4*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0x2dfdd420, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x2dfdd420, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x2dfdd420, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x81, dwReserved0=0x0, dwReserved1=0x0, cFileName="desktop.ini", cAlternateFileName="")) returned 1 [0121.091] FindNextFileW (in: hFindFile=0x381cc0, lpFindFileData=0x31e5e4 | out: lpFindFileData=0x31e5e4*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0121.091] FindClose (in: hFindFile=0x381cc0 | out: hFindFile=0x381cc0) returned 1 [0121.091] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e86c) returned 1 [0121.091] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e878) returned 1 [0121.091] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e8ac) returned 1 [0121.091] GetFullPathNameW (in: lpFileName="C:\\$Recycle.Bin\\S-1-5-21-3388679973-3930757225-3770151564-1000", nBufferLength=0x105, lpBuffer=0x31e3b4, lpFilePart=0x0 | out: lpBuffer="C:\\$Recycle.Bin\\S-1-5-21-3388679973-3930757225-3770151564-1000", lpFilePart=0x0) returned 0x3e [0121.091] GetFullPathNameW (in: lpFileName="C:\\$Recycle.Bin\\S-1-5-21-3388679973-3930757225-3770151564-1000\\", nBufferLength=0x105, lpBuffer=0x31e388, lpFilePart=0x0 | out: lpBuffer="C:\\$Recycle.Bin\\S-1-5-21-3388679973-3930757225-3770151564-1000\\", lpFilePart=0x0) returned 0x3f [0121.091] FindFirstFileW (in: lpFileName="C:\\$Recycle.Bin\\S-1-5-21-3388679973-3930757225-3770151564-1000\\*", lpFindFileData=0x31e5d4 | out: lpFindFileData=0x31e5d4*(dwFileAttributes=0x16, ftCreationTime.dwLowDateTime=0x2dfdd420, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0xb63e4b00, ftLastAccessTime.dwHighDateTime=0x1d337f4, ftLastWriteTime.dwLowDateTime=0xb63e4b00, ftLastWriteTime.dwHighDateTime=0x1d337f4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x381cc0 [0121.092] FindNextFileW (in: hFindFile=0x381cc0, lpFindFileData=0x31e5e4 | out: lpFindFileData=0x31e5e4*(dwFileAttributes=0x16, ftCreationTime.dwLowDateTime=0x2dfdd420, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0xb63e4b00, ftLastAccessTime.dwHighDateTime=0x1d337f4, ftLastWriteTime.dwLowDateTime=0xb63e4b00, ftLastWriteTime.dwHighDateTime=0x1d337f4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0121.092] FindNextFileW (in: hFindFile=0x381cc0, lpFindFileData=0x31e5e4 | out: lpFindFileData=0x31e5e4*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0x2dfdd420, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x2dfdd420, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x2dfdd420, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x81, dwReserved0=0x0, dwReserved1=0x0, cFileName="desktop.ini", cAlternateFileName="")) returned 1 [0121.092] FindNextFileW (in: hFindFile=0x381cc0, lpFindFileData=0x31e5e4 | out: lpFindFileData=0x31e5e4*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0x2dfdd420, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x2dfdd420, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x2dfdd420, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x81, dwReserved0=0x0, dwReserved1=0x0, cFileName="desktop.ini", cAlternateFileName="")) returned 0 [0121.092] FindClose (in: hFindFile=0x381cc0 | out: hFindFile=0x381cc0) returned 1 [0121.092] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e86c) returned 1 [0121.092] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e878) returned 1 [0121.092] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e924) returned 1 [0121.092] GetFullPathNameW (in: lpFileName="C:\\Boot", nBufferLength=0x105, lpBuffer=0x31e42c, lpFilePart=0x0 | out: lpBuffer="C:\\Boot", lpFilePart=0x0) returned 0x7 [0121.092] GetFullPathNameW (in: lpFileName="C:\\Boot\\", nBufferLength=0x105, lpBuffer=0x31e400, lpFilePart=0x0 | out: lpBuffer="C:\\Boot\\", lpFilePart=0x0) returned 0x8 [0121.092] FindFirstFileW (in: lpFileName="C:\\Boot\\*", lpFindFileData=0x31e64c | out: lpFindFileData=0x31e64c*(dwFileAttributes=0x16, ftCreationTime.dwLowDateTime=0xac015040, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac30ebc0, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xac30ebc0, ftLastWriteTime.dwHighDateTime=0x1d2de32, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x381cc0 [0121.092] FindNextFileW (in: hFindFile=0x381cc0, lpFindFileData=0x31e65c | out: lpFindFileData=0x31e65c*(dwFileAttributes=0x16, ftCreationTime.dwLowDateTime=0xac015040, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac30ebc0, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xac30ebc0, ftLastWriteTime.dwHighDateTime=0x1d2de32, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0121.093] FindNextFileW (in: hFindFile=0x381cc0, lpFindFileData=0x31e65c | out: lpFindFileData=0x31e65c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xac2e8a60, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0x90cd45e0, ftLastAccessTime.dwHighDateTime=0x1d5e82a, ftLastWriteTime.dwLowDateTime=0x90cd45e0, ftLastWriteTime.dwHighDateTime=0x1d5e82a, nFileSizeHigh=0x0, nFileSizeLow=0x6000, dwReserved0=0x0, dwReserved1=0x0, cFileName="BCD", cAlternateFileName="")) returned 1 [0121.093] FindNextFileW (in: hFindFile=0x381cc0, lpFindFileData=0x31e65c | out: lpFindFileData=0x31e65c*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0xac2e8a60, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac2e8a60, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0x9098e7a0, ftLastWriteTime.dwHighDateTime=0x1d5e82a, nFileSizeHigh=0x0, nFileSizeLow=0x5400, dwReserved0=0x0, dwReserved1=0x0, cFileName="BCD.LOG", cAlternateFileName="")) returned 1 [0121.093] FindNextFileW (in: hFindFile=0x381cc0, lpFindFileData=0x31e65c | out: lpFindFileData=0x31e65c*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0xac30ebc0, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac30ebc0, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xac30ebc0, ftLastWriteTime.dwHighDateTime=0x1d2de32, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="BCD.LOG1", cAlternateFileName="BCD~1.LOG")) returned 1 [0121.093] FindNextFileW (in: hFindFile=0x381cc0, lpFindFileData=0x31e65c | out: lpFindFileData=0x31e65c*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0xac30ebc0, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac30ebc0, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xac30ebc0, ftLastWriteTime.dwHighDateTime=0x1d2de32, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="BCD.LOG2", cAlternateFileName="BCD~2.LOG")) returned 1 [0121.093] FindNextFileW (in: hFindFile=0x381cc0, lpFindFileData=0x31e65c | out: lpFindFileData=0x31e65c*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0xac0f9880, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac0f9880, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xac0f9880, ftLastWriteTime.dwHighDateTime=0x1d2de32, nFileSizeHigh=0x0, nFileSizeLow=0x10000, dwReserved0=0x0, dwReserved1=0x0, cFileName="BOOTSTAT.DAT", cAlternateFileName="")) returned 1 [0121.093] FindNextFileW (in: hFindFile=0x381cc0, lpFindFileData=0x31e65c | out: lpFindFileData=0x31e65c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac015040, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac015040, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xac015040, ftLastWriteTime.dwHighDateTime=0x1d2de32, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="cs-CZ", cAlternateFileName="")) returned 1 [0121.093] FindNextFileW (in: hFindFile=0x381cc0, lpFindFileData=0x31e65c | out: lpFindFileData=0x31e65c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac015040, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac03b1a0, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xac03b1a0, ftLastWriteTime.dwHighDateTime=0x1d2de32, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="da-DK", cAlternateFileName="")) returned 1 [0121.093] FindNextFileW (in: hFindFile=0x381cc0, lpFindFileData=0x31e65c | out: lpFindFileData=0x31e65c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac03b1a0, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac03b1a0, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xac03b1a0, ftLastWriteTime.dwHighDateTime=0x1d2de32, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="de-DE", cAlternateFileName="")) returned 1 [0121.094] FindNextFileW (in: hFindFile=0x381cc0, lpFindFileData=0x31e65c | out: lpFindFileData=0x31e65c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac03b1a0, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac03b1a0, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xac03b1a0, ftLastWriteTime.dwHighDateTime=0x1d2de32, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="el-GR", cAlternateFileName="")) returned 1 [0121.094] FindNextFileW (in: hFindFile=0x381cc0, lpFindFileData=0x31e65c | out: lpFindFileData=0x31e65c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac03b1a0, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac03b1a0, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xac03b1a0, ftLastWriteTime.dwHighDateTime=0x1d2de32, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="en-US", cAlternateFileName="")) returned 1 [0121.094] FindNextFileW (in: hFindFile=0x381cc0, lpFindFileData=0x31e65c | out: lpFindFileData=0x31e65c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac03b1a0, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac061300, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xac061300, ftLastWriteTime.dwHighDateTime=0x1d2de32, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="es-ES", cAlternateFileName="")) returned 1 [0121.094] FindNextFileW (in: hFindFile=0x381cc0, lpFindFileData=0x31e65c | out: lpFindFileData=0x31e65c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac061300, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac061300, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xac061300, ftLastWriteTime.dwHighDateTime=0x1d2de32, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="fi-FI", cAlternateFileName="")) returned 1 [0121.094] FindNextFileW (in: hFindFile=0x381cc0, lpFindFileData=0x31e65c | out: lpFindFileData=0x31e65c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac0f9880, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac276640, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xac276640, ftLastWriteTime.dwHighDateTime=0x1d2de32, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Fonts", cAlternateFileName="")) returned 1 [0121.094] FindNextFileW (in: hFindFile=0x381cc0, lpFindFileData=0x31e65c | out: lpFindFileData=0x31e65c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac061300, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac061300, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xac061300, ftLastWriteTime.dwHighDateTime=0x1d2de32, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="fr-FR", cAlternateFileName="")) returned 1 [0121.094] FindNextFileW (in: hFindFile=0x381cc0, lpFindFileData=0x31e65c | out: lpFindFileData=0x31e65c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac061300, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac061300, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xac061300, ftLastWriteTime.dwHighDateTime=0x1d2de32, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="hu-HU", cAlternateFileName="")) returned 1 [0121.095] FindNextFileW (in: hFindFile=0x381cc0, lpFindFileData=0x31e65c | out: lpFindFileData=0x31e65c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac061300, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac061300, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xac061300, ftLastWriteTime.dwHighDateTime=0x1d2de32, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="it-IT", cAlternateFileName="")) returned 1 [0121.095] FindNextFileW (in: hFindFile=0x381cc0, lpFindFileData=0x31e65c | out: lpFindFileData=0x31e65c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac087460, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac087460, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xac087460, ftLastWriteTime.dwHighDateTime=0x1d2de32, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="ja-JP", cAlternateFileName="")) returned 1 [0121.095] FindNextFileW (in: hFindFile=0x381cc0, lpFindFileData=0x31e65c | out: lpFindFileData=0x31e65c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac087460, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac087460, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xac087460, ftLastWriteTime.dwHighDateTime=0x1d2de32, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="ko-KR", cAlternateFileName="")) returned 1 [0121.095] FindNextFileW (in: hFindFile=0x381cc0, lpFindFileData=0x31e65c | out: lpFindFileData=0x31e65c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xac087460, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac087460, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0x8bc7dbfe, ftLastWriteTime.dwHighDateTime=0x1cb892b, nFileSizeHigh=0x0, nFileSizeLow=0x76980, dwReserved0=0x0, dwReserved1=0x0, cFileName="memtest.exe", cAlternateFileName="")) returned 1 [0121.095] FindNextFileW (in: hFindFile=0x381cc0, lpFindFileData=0x31e65c | out: lpFindFileData=0x31e65c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac087460, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac0ad5c0, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xac0ad5c0, ftLastWriteTime.dwHighDateTime=0x1d2de32, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="nb-NO", cAlternateFileName="")) returned 1 [0121.095] FindNextFileW (in: hFindFile=0x381cc0, lpFindFileData=0x31e65c | out: lpFindFileData=0x31e65c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac0ad5c0, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac0ad5c0, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xac0ad5c0, ftLastWriteTime.dwHighDateTime=0x1d2de32, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="nl-NL", cAlternateFileName="")) returned 1 [0121.095] FindNextFileW (in: hFindFile=0x381cc0, lpFindFileData=0x31e65c | out: lpFindFileData=0x31e65c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac0ad5c0, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac0ad5c0, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xac0ad5c0, ftLastWriteTime.dwHighDateTime=0x1d2de32, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="pl-PL", cAlternateFileName="")) returned 1 [0121.095] FindNextFileW (in: hFindFile=0x381cc0, lpFindFileData=0x31e65c | out: lpFindFileData=0x31e65c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac0ad5c0, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac0ad5c0, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xac0ad5c0, ftLastWriteTime.dwHighDateTime=0x1d2de32, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="pt-BR", cAlternateFileName="")) returned 1 [0121.096] FindNextFileW (in: hFindFile=0x381cc0, lpFindFileData=0x31e65c | out: lpFindFileData=0x31e65c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac0d3720, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac0d3720, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xac0d3720, ftLastWriteTime.dwHighDateTime=0x1d2de32, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="pt-PT", cAlternateFileName="")) returned 1 [0121.096] FindNextFileW (in: hFindFile=0x381cc0, lpFindFileData=0x31e65c | out: lpFindFileData=0x31e65c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac0d3720, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac0d3720, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xac0d3720, ftLastWriteTime.dwHighDateTime=0x1d2de32, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="ru-RU", cAlternateFileName="")) returned 1 [0121.096] FindNextFileW (in: hFindFile=0x381cc0, lpFindFileData=0x31e65c | out: lpFindFileData=0x31e65c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac0d3720, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac0d3720, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xac0d3720, ftLastWriteTime.dwHighDateTime=0x1d2de32, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="sv-SE", cAlternateFileName="")) returned 1 [0121.096] FindNextFileW (in: hFindFile=0x381cc0, lpFindFileData=0x31e65c | out: lpFindFileData=0x31e65c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac0d3720, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac0d3720, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xac0d3720, ftLastWriteTime.dwHighDateTime=0x1d2de32, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="tr-TR", cAlternateFileName="")) returned 1 [0121.096] FindNextFileW (in: hFindFile=0x381cc0, lpFindFileData=0x31e65c | out: lpFindFileData=0x31e65c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac0d3720, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac0d3720, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xac0d3720, ftLastWriteTime.dwHighDateTime=0x1d2de32, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="zh-CN", cAlternateFileName="")) returned 1 [0121.096] FindNextFileW (in: hFindFile=0x381cc0, lpFindFileData=0x31e65c | out: lpFindFileData=0x31e65c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac0f9880, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac0f9880, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xac0f9880, ftLastWriteTime.dwHighDateTime=0x1d2de32, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="zh-HK", cAlternateFileName="")) returned 1 [0121.096] FindNextFileW (in: hFindFile=0x381cc0, lpFindFileData=0x31e65c | out: lpFindFileData=0x31e65c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac0f9880, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac0f9880, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xac0f9880, ftLastWriteTime.dwHighDateTime=0x1d2de32, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="zh-TW", cAlternateFileName="")) returned 1 [0121.096] FindNextFileW (in: hFindFile=0x381cc0, lpFindFileData=0x31e65c | out: lpFindFileData=0x31e65c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac0f9880, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac0f9880, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xac0f9880, ftLastWriteTime.dwHighDateTime=0x1d2de32, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="zh-TW", cAlternateFileName="")) returned 0 [0121.097] FindClose (in: hFindFile=0x381cc0 | out: hFindFile=0x381cc0) returned 1 [0121.097] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e8e4) returned 1 [0121.097] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e8f0) returned 1 [0121.097] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e924) returned 1 [0121.097] GetFullPathNameW (in: lpFileName="C:\\Boot", nBufferLength=0x105, lpBuffer=0x31e42c, lpFilePart=0x0 | out: lpBuffer="C:\\Boot", lpFilePart=0x0) returned 0x7 [0121.097] GetFullPathNameW (in: lpFileName="C:\\Boot\\", nBufferLength=0x105, lpBuffer=0x31e400, lpFilePart=0x0 | out: lpBuffer="C:\\Boot\\", lpFilePart=0x0) returned 0x8 [0121.097] FindFirstFileW (in: lpFileName="C:\\Boot\\*", lpFindFileData=0x31e64c | out: lpFindFileData=0x31e64c*(dwFileAttributes=0x16, ftCreationTime.dwLowDateTime=0xac015040, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac30ebc0, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xac30ebc0, ftLastWriteTime.dwHighDateTime=0x1d2de32, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x381cc0 [0121.097] FindNextFileW (in: hFindFile=0x381cc0, lpFindFileData=0x31e65c | out: lpFindFileData=0x31e65c*(dwFileAttributes=0x16, ftCreationTime.dwLowDateTime=0xac015040, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac30ebc0, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xac30ebc0, ftLastWriteTime.dwHighDateTime=0x1d2de32, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0121.097] FindNextFileW (in: hFindFile=0x381cc0, lpFindFileData=0x31e65c | out: lpFindFileData=0x31e65c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xac2e8a60, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0x90cd45e0, ftLastAccessTime.dwHighDateTime=0x1d5e82a, ftLastWriteTime.dwLowDateTime=0x90cd45e0, ftLastWriteTime.dwHighDateTime=0x1d5e82a, nFileSizeHigh=0x0, nFileSizeLow=0x6000, dwReserved0=0x0, dwReserved1=0x0, cFileName="BCD", cAlternateFileName="")) returned 1 [0121.097] FindNextFileW (in: hFindFile=0x381cc0, lpFindFileData=0x31e65c | out: lpFindFileData=0x31e65c*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0xac2e8a60, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac2e8a60, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0x9098e7a0, ftLastWriteTime.dwHighDateTime=0x1d5e82a, nFileSizeHigh=0x0, nFileSizeLow=0x5400, dwReserved0=0x0, dwReserved1=0x0, cFileName="BCD.LOG", cAlternateFileName="")) returned 1 [0121.097] FindNextFileW (in: hFindFile=0x381cc0, lpFindFileData=0x31e65c | out: lpFindFileData=0x31e65c*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0xac30ebc0, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac30ebc0, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xac30ebc0, ftLastWriteTime.dwHighDateTime=0x1d2de32, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="BCD.LOG1", cAlternateFileName="BCD~1.LOG")) returned 1 [0121.098] FindNextFileW (in: hFindFile=0x381cc0, lpFindFileData=0x31e65c | out: lpFindFileData=0x31e65c*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0xac30ebc0, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac30ebc0, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xac30ebc0, ftLastWriteTime.dwHighDateTime=0x1d2de32, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="BCD.LOG2", cAlternateFileName="BCD~2.LOG")) returned 1 [0121.098] FindNextFileW (in: hFindFile=0x381cc0, lpFindFileData=0x31e65c | out: lpFindFileData=0x31e65c*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0xac0f9880, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac0f9880, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xac0f9880, ftLastWriteTime.dwHighDateTime=0x1d2de32, nFileSizeHigh=0x0, nFileSizeLow=0x10000, dwReserved0=0x0, dwReserved1=0x0, cFileName="BOOTSTAT.DAT", cAlternateFileName="")) returned 1 [0121.098] FindNextFileW (in: hFindFile=0x381cc0, lpFindFileData=0x31e65c | out: lpFindFileData=0x31e65c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac015040, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac015040, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xac015040, ftLastWriteTime.dwHighDateTime=0x1d2de32, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="cs-CZ", cAlternateFileName="")) returned 1 [0121.098] FindNextFileW (in: hFindFile=0x381cc0, lpFindFileData=0x31e65c | out: lpFindFileData=0x31e65c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac015040, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac03b1a0, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xac03b1a0, ftLastWriteTime.dwHighDateTime=0x1d2de32, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="da-DK", cAlternateFileName="")) returned 1 [0121.098] FindNextFileW (in: hFindFile=0x381cc0, lpFindFileData=0x31e65c | out: lpFindFileData=0x31e65c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac03b1a0, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac03b1a0, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xac03b1a0, ftLastWriteTime.dwHighDateTime=0x1d2de32, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="de-DE", cAlternateFileName="")) returned 1 [0121.098] FindNextFileW (in: hFindFile=0x381cc0, lpFindFileData=0x31e65c | out: lpFindFileData=0x31e65c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac03b1a0, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac03b1a0, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xac03b1a0, ftLastWriteTime.dwHighDateTime=0x1d2de32, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="el-GR", cAlternateFileName="")) returned 1 [0121.098] FindNextFileW (in: hFindFile=0x381cc0, lpFindFileData=0x31e65c | out: lpFindFileData=0x31e65c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac03b1a0, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac03b1a0, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xac03b1a0, ftLastWriteTime.dwHighDateTime=0x1d2de32, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="en-US", cAlternateFileName="")) returned 1 [0121.098] FindNextFileW (in: hFindFile=0x381cc0, lpFindFileData=0x31e65c | out: lpFindFileData=0x31e65c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac03b1a0, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac061300, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xac061300, ftLastWriteTime.dwHighDateTime=0x1d2de32, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="es-ES", cAlternateFileName="")) returned 1 [0121.098] FindNextFileW (in: hFindFile=0x381cc0, lpFindFileData=0x31e65c | out: lpFindFileData=0x31e65c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac061300, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac061300, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xac061300, ftLastWriteTime.dwHighDateTime=0x1d2de32, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="fi-FI", cAlternateFileName="")) returned 1 [0121.099] FindNextFileW (in: hFindFile=0x381cc0, lpFindFileData=0x31e65c | out: lpFindFileData=0x31e65c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac0f9880, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac276640, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xac276640, ftLastWriteTime.dwHighDateTime=0x1d2de32, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Fonts", cAlternateFileName="")) returned 1 [0121.099] FindNextFileW (in: hFindFile=0x381cc0, lpFindFileData=0x31e65c | out: lpFindFileData=0x31e65c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac061300, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac061300, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xac061300, ftLastWriteTime.dwHighDateTime=0x1d2de32, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="fr-FR", cAlternateFileName="")) returned 1 [0121.099] FindNextFileW (in: hFindFile=0x381cc0, lpFindFileData=0x31e65c | out: lpFindFileData=0x31e65c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac061300, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac061300, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xac061300, ftLastWriteTime.dwHighDateTime=0x1d2de32, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="hu-HU", cAlternateFileName="")) returned 1 [0121.099] FindNextFileW (in: hFindFile=0x381cc0, lpFindFileData=0x31e65c | out: lpFindFileData=0x31e65c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac061300, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac061300, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xac061300, ftLastWriteTime.dwHighDateTime=0x1d2de32, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="it-IT", cAlternateFileName="")) returned 1 [0121.099] FindNextFileW (in: hFindFile=0x381cc0, lpFindFileData=0x31e65c | out: lpFindFileData=0x31e65c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac087460, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac087460, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xac087460, ftLastWriteTime.dwHighDateTime=0x1d2de32, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="ja-JP", cAlternateFileName="")) returned 1 [0121.099] FindNextFileW (in: hFindFile=0x381cc0, lpFindFileData=0x31e65c | out: lpFindFileData=0x31e65c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac087460, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac087460, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xac087460, ftLastWriteTime.dwHighDateTime=0x1d2de32, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="ko-KR", cAlternateFileName="")) returned 1 [0121.099] FindNextFileW (in: hFindFile=0x381cc0, lpFindFileData=0x31e65c | out: lpFindFileData=0x31e65c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xac087460, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac087460, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0x8bc7dbfe, ftLastWriteTime.dwHighDateTime=0x1cb892b, nFileSizeHigh=0x0, nFileSizeLow=0x76980, dwReserved0=0x0, dwReserved1=0x0, cFileName="memtest.exe", cAlternateFileName="")) returned 1 [0121.099] FindNextFileW (in: hFindFile=0x381cc0, lpFindFileData=0x31e65c | out: lpFindFileData=0x31e65c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac087460, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac0ad5c0, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xac0ad5c0, ftLastWriteTime.dwHighDateTime=0x1d2de32, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="nb-NO", cAlternateFileName="")) returned 1 [0121.099] FindNextFileW (in: hFindFile=0x381cc0, lpFindFileData=0x31e65c | out: lpFindFileData=0x31e65c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac0ad5c0, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac0ad5c0, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xac0ad5c0, ftLastWriteTime.dwHighDateTime=0x1d2de32, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="nl-NL", cAlternateFileName="")) returned 1 [0121.100] FindNextFileW (in: hFindFile=0x381cc0, lpFindFileData=0x31e65c | out: lpFindFileData=0x31e65c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac0ad5c0, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac0ad5c0, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xac0ad5c0, ftLastWriteTime.dwHighDateTime=0x1d2de32, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="pl-PL", cAlternateFileName="")) returned 1 [0121.100] FindNextFileW (in: hFindFile=0x381cc0, lpFindFileData=0x31e65c | out: lpFindFileData=0x31e65c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac0ad5c0, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac0ad5c0, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xac0ad5c0, ftLastWriteTime.dwHighDateTime=0x1d2de32, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="pt-BR", cAlternateFileName="")) returned 1 [0121.100] FindNextFileW (in: hFindFile=0x381cc0, lpFindFileData=0x31e65c | out: lpFindFileData=0x31e65c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac0d3720, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac0d3720, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xac0d3720, ftLastWriteTime.dwHighDateTime=0x1d2de32, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="pt-PT", cAlternateFileName="")) returned 1 [0121.100] FindNextFileW (in: hFindFile=0x381cc0, lpFindFileData=0x31e65c | out: lpFindFileData=0x31e65c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac0d3720, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac0d3720, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xac0d3720, ftLastWriteTime.dwHighDateTime=0x1d2de32, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="ru-RU", cAlternateFileName="")) returned 1 [0121.100] FindNextFileW (in: hFindFile=0x381cc0, lpFindFileData=0x31e65c | out: lpFindFileData=0x31e65c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac0d3720, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac0d3720, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xac0d3720, ftLastWriteTime.dwHighDateTime=0x1d2de32, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="sv-SE", cAlternateFileName="")) returned 1 [0121.100] FindNextFileW (in: hFindFile=0x381cc0, lpFindFileData=0x31e65c | out: lpFindFileData=0x31e65c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac0d3720, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac0d3720, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xac0d3720, ftLastWriteTime.dwHighDateTime=0x1d2de32, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="tr-TR", cAlternateFileName="")) returned 1 [0121.100] FindNextFileW (in: hFindFile=0x381cc0, lpFindFileData=0x31e65c | out: lpFindFileData=0x31e65c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac0d3720, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac0d3720, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xac0d3720, ftLastWriteTime.dwHighDateTime=0x1d2de32, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="zh-CN", cAlternateFileName="")) returned 1 [0121.100] FindNextFileW (in: hFindFile=0x381cc0, lpFindFileData=0x31e65c | out: lpFindFileData=0x31e65c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac0f9880, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac0f9880, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xac0f9880, ftLastWriteTime.dwHighDateTime=0x1d2de32, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="zh-HK", cAlternateFileName="")) returned 1 [0121.100] FindNextFileW (in: hFindFile=0x381cc0, lpFindFileData=0x31e65c | out: lpFindFileData=0x31e65c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac0f9880, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac0f9880, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xac0f9880, ftLastWriteTime.dwHighDateTime=0x1d2de32, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="zh-TW", cAlternateFileName="")) returned 1 [0121.101] FindNextFileW (in: hFindFile=0x381cc0, lpFindFileData=0x31e65c | out: lpFindFileData=0x31e65c*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0121.101] FindClose (in: hFindFile=0x381cc0 | out: hFindFile=0x381cc0) returned 1 [0121.101] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e8e4) returned 1 [0121.101] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e8f0) returned 1 [0121.101] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e8ac) returned 1 [0121.101] GetFullPathNameW (in: lpFileName="C:\\Boot\\cs-CZ", nBufferLength=0x105, lpBuffer=0x31e3b4, lpFilePart=0x0 | out: lpBuffer="C:\\Boot\\cs-CZ", lpFilePart=0x0) returned 0xd [0121.101] GetFullPathNameW (in: lpFileName="C:\\Boot\\cs-CZ\\", nBufferLength=0x105, lpBuffer=0x31e388, lpFilePart=0x0 | out: lpBuffer="C:\\Boot\\cs-CZ\\", lpFilePart=0x0) returned 0xe [0121.101] FindFirstFileW (in: lpFileName="C:\\Boot\\cs-CZ\\*", lpFindFileData=0x31e5d4 | out: lpFindFileData=0x31e5d4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac015040, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac015040, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xac015040, ftLastWriteTime.dwHighDateTime=0x1d2de32, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x381cc0 [0121.101] FindNextFileW (in: hFindFile=0x381cc0, lpFindFileData=0x31e5e4 | out: lpFindFileData=0x31e5e4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac015040, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac015040, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xac015040, ftLastWriteTime.dwHighDateTime=0x1d2de32, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0121.101] FindNextFileW (in: hFindFile=0x381cc0, lpFindFileData=0x31e5e4 | out: lpFindFileData=0x31e5e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xac015040, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac015040, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xe88a2888, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x15c50, dwReserved0=0x0, dwReserved1=0x0, cFileName="bootmgr.exe.mui", cAlternateFileName="BOOTMG~1.MUI")) returned 1 [0121.101] FindNextFileW (in: hFindFile=0x381cc0, lpFindFileData=0x31e5e4 | out: lpFindFileData=0x31e5e4*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0121.102] FindClose (in: hFindFile=0x381cc0 | out: hFindFile=0x381cc0) returned 1 [0121.102] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e86c) returned 1 [0121.102] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e878) returned 1 [0121.102] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e8ac) returned 1 [0121.102] GetFullPathNameW (in: lpFileName="C:\\Boot\\cs-CZ", nBufferLength=0x105, lpBuffer=0x31e3b4, lpFilePart=0x0 | out: lpBuffer="C:\\Boot\\cs-CZ", lpFilePart=0x0) returned 0xd [0121.102] GetFullPathNameW (in: lpFileName="C:\\Boot\\cs-CZ\\", nBufferLength=0x105, lpBuffer=0x31e388, lpFilePart=0x0 | out: lpBuffer="C:\\Boot\\cs-CZ\\", lpFilePart=0x0) returned 0xe [0121.102] FindFirstFileW (in: lpFileName="C:\\Boot\\cs-CZ\\*", lpFindFileData=0x31e5d4 | out: lpFindFileData=0x31e5d4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac015040, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac015040, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xac015040, ftLastWriteTime.dwHighDateTime=0x1d2de32, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x381cc0 [0121.102] FindNextFileW (in: hFindFile=0x381cc0, lpFindFileData=0x31e5e4 | out: lpFindFileData=0x31e5e4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac015040, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac015040, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xac015040, ftLastWriteTime.dwHighDateTime=0x1d2de32, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0121.102] FindNextFileW (in: hFindFile=0x381cc0, lpFindFileData=0x31e5e4 | out: lpFindFileData=0x31e5e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xac015040, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac015040, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xe88a2888, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x15c50, dwReserved0=0x0, dwReserved1=0x0, cFileName="bootmgr.exe.mui", cAlternateFileName="BOOTMG~1.MUI")) returned 1 [0121.102] FindNextFileW (in: hFindFile=0x381cc0, lpFindFileData=0x31e5e4 | out: lpFindFileData=0x31e5e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xac015040, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac015040, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xe88a2888, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x15c50, dwReserved0=0x0, dwReserved1=0x0, cFileName="bootmgr.exe.mui", cAlternateFileName="BOOTMG~1.MUI")) returned 0 [0121.102] FindClose (in: hFindFile=0x381cc0 | out: hFindFile=0x381cc0) returned 1 [0121.102] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e86c) returned 1 [0121.103] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e878) returned 1 [0121.103] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e8ac) returned 1 [0121.103] GetFullPathNameW (in: lpFileName="C:\\Boot\\da-DK", nBufferLength=0x105, lpBuffer=0x31e3b4, lpFilePart=0x0 | out: lpBuffer="C:\\Boot\\da-DK", lpFilePart=0x0) returned 0xd [0121.103] GetFullPathNameW (in: lpFileName="C:\\Boot\\da-DK\\", nBufferLength=0x105, lpBuffer=0x31e388, lpFilePart=0x0 | out: lpBuffer="C:\\Boot\\da-DK\\", lpFilePart=0x0) returned 0xe [0121.103] FindFirstFileW (in: lpFileName="C:\\Boot\\da-DK\\*", lpFindFileData=0x31e5d4 | out: lpFindFileData=0x31e5d4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac015040, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac03b1a0, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xac03b1a0, ftLastWriteTime.dwHighDateTime=0x1d2de32, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x381cc0 [0121.103] FindNextFileW (in: hFindFile=0x381cc0, lpFindFileData=0x31e5e4 | out: lpFindFileData=0x31e5e4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac015040, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac03b1a0, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xac03b1a0, ftLastWriteTime.dwHighDateTime=0x1d2de32, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0121.103] FindNextFileW (in: hFindFile=0x381cc0, lpFindFileData=0x31e5e4 | out: lpFindFileData=0x31e5e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xac03b1a0, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac03b1a0, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xe868d5aa, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x15640, dwReserved0=0x0, dwReserved1=0x0, cFileName="bootmgr.exe.mui", cAlternateFileName="BOOTMG~1.MUI")) returned 1 [0121.104] FindNextFileW (in: hFindFile=0x381cc0, lpFindFileData=0x31e5e4 | out: lpFindFileData=0x31e5e4*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0121.104] FindClose (in: hFindFile=0x381cc0 | out: hFindFile=0x381cc0) returned 1 [0121.104] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e86c) returned 1 [0121.104] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e878) returned 1 [0121.104] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e8ac) returned 1 [0121.104] GetFullPathNameW (in: lpFileName="C:\\Boot\\da-DK", nBufferLength=0x105, lpBuffer=0x31e3b4, lpFilePart=0x0 | out: lpBuffer="C:\\Boot\\da-DK", lpFilePart=0x0) returned 0xd [0121.104] GetFullPathNameW (in: lpFileName="C:\\Boot\\da-DK\\", nBufferLength=0x105, lpBuffer=0x31e388, lpFilePart=0x0 | out: lpBuffer="C:\\Boot\\da-DK\\", lpFilePart=0x0) returned 0xe [0121.104] FindFirstFileW (in: lpFileName="C:\\Boot\\da-DK\\*", lpFindFileData=0x31e5d4 | out: lpFindFileData=0x31e5d4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac015040, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac03b1a0, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xac03b1a0, ftLastWriteTime.dwHighDateTime=0x1d2de32, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x381cc0 [0121.104] FindNextFileW (in: hFindFile=0x381cc0, lpFindFileData=0x31e5e4 | out: lpFindFileData=0x31e5e4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac015040, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac03b1a0, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xac03b1a0, ftLastWriteTime.dwHighDateTime=0x1d2de32, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0121.104] FindNextFileW (in: hFindFile=0x381cc0, lpFindFileData=0x31e5e4 | out: lpFindFileData=0x31e5e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xac03b1a0, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac03b1a0, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xe868d5aa, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x15640, dwReserved0=0x0, dwReserved1=0x0, cFileName="bootmgr.exe.mui", cAlternateFileName="BOOTMG~1.MUI")) returned 1 [0121.104] FindNextFileW (in: hFindFile=0x381cc0, lpFindFileData=0x31e5e4 | out: lpFindFileData=0x31e5e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xac03b1a0, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac03b1a0, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xe868d5aa, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x15640, dwReserved0=0x0, dwReserved1=0x0, cFileName="bootmgr.exe.mui", cAlternateFileName="BOOTMG~1.MUI")) returned 0 [0121.104] FindClose (in: hFindFile=0x381cc0 | out: hFindFile=0x381cc0) returned 1 [0121.104] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e86c) returned 1 [0121.105] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e878) returned 1 [0121.105] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e8ac) returned 1 [0121.105] GetFullPathNameW (in: lpFileName="C:\\Boot\\de-DE", nBufferLength=0x105, lpBuffer=0x31e3b4, lpFilePart=0x0 | out: lpBuffer="C:\\Boot\\de-DE", lpFilePart=0x0) returned 0xd [0121.105] GetFullPathNameW (in: lpFileName="C:\\Boot\\de-DE\\", nBufferLength=0x105, lpBuffer=0x31e388, lpFilePart=0x0 | out: lpBuffer="C:\\Boot\\de-DE\\", lpFilePart=0x0) returned 0xe [0121.105] FindFirstFileW (in: lpFileName="C:\\Boot\\de-DE\\*", lpFindFileData=0x31e5d4 | out: lpFindFileData=0x31e5d4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac03b1a0, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac03b1a0, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xac03b1a0, ftLastWriteTime.dwHighDateTime=0x1d2de32, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x381cc0 [0121.105] FindNextFileW (in: hFindFile=0x381cc0, lpFindFileData=0x31e5e4 | out: lpFindFileData=0x31e5e4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac03b1a0, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac03b1a0, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xac03b1a0, ftLastWriteTime.dwHighDateTime=0x1d2de32, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0121.105] FindNextFileW (in: hFindFile=0x381cc0, lpFindFileData=0x31e5e4 | out: lpFindFileData=0x31e5e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xac03b1a0, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac03b1a0, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xe8132526, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x16640, dwReserved0=0x0, dwReserved1=0x0, cFileName="bootmgr.exe.mui", cAlternateFileName="BOOTMG~1.MUI")) returned 1 [0121.105] FindNextFileW (in: hFindFile=0x381cc0, lpFindFileData=0x31e5e4 | out: lpFindFileData=0x31e5e4*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0121.105] FindClose (in: hFindFile=0x381cc0 | out: hFindFile=0x381cc0) returned 1 [0121.105] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e86c) returned 1 [0121.105] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e878) returned 1 [0121.105] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e8ac) returned 1 [0121.106] GetFullPathNameW (in: lpFileName="C:\\Boot\\de-DE", nBufferLength=0x105, lpBuffer=0x31e3b4, lpFilePart=0x0 | out: lpBuffer="C:\\Boot\\de-DE", lpFilePart=0x0) returned 0xd [0121.106] GetFullPathNameW (in: lpFileName="C:\\Boot\\de-DE\\", nBufferLength=0x105, lpBuffer=0x31e388, lpFilePart=0x0 | out: lpBuffer="C:\\Boot\\de-DE\\", lpFilePart=0x0) returned 0xe [0121.106] FindFirstFileW (in: lpFileName="C:\\Boot\\de-DE\\*", lpFindFileData=0x31e5d4 | out: lpFindFileData=0x31e5d4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac03b1a0, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac03b1a0, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xac03b1a0, ftLastWriteTime.dwHighDateTime=0x1d2de32, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x381cc0 [0121.106] FindNextFileW (in: hFindFile=0x381cc0, lpFindFileData=0x31e5e4 | out: lpFindFileData=0x31e5e4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac03b1a0, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac03b1a0, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xac03b1a0, ftLastWriteTime.dwHighDateTime=0x1d2de32, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0121.106] FindNextFileW (in: hFindFile=0x381cc0, lpFindFileData=0x31e5e4 | out: lpFindFileData=0x31e5e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xac03b1a0, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac03b1a0, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xe8132526, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x16640, dwReserved0=0x0, dwReserved1=0x0, cFileName="bootmgr.exe.mui", cAlternateFileName="BOOTMG~1.MUI")) returned 1 [0121.106] FindNextFileW (in: hFindFile=0x381cc0, lpFindFileData=0x31e5e4 | out: lpFindFileData=0x31e5e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xac03b1a0, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac03b1a0, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xe8132526, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x16640, dwReserved0=0x0, dwReserved1=0x0, cFileName="bootmgr.exe.mui", cAlternateFileName="BOOTMG~1.MUI")) returned 0 [0121.106] FindClose (in: hFindFile=0x381cc0 | out: hFindFile=0x381cc0) returned 1 [0121.106] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e86c) returned 1 [0121.106] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e878) returned 1 [0121.106] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e8ac) returned 1 [0121.106] GetFullPathNameW (in: lpFileName="C:\\Boot\\el-GR", nBufferLength=0x105, lpBuffer=0x31e3b4, lpFilePart=0x0 | out: lpBuffer="C:\\Boot\\el-GR", lpFilePart=0x0) returned 0xd [0121.106] GetFullPathNameW (in: lpFileName="C:\\Boot\\el-GR\\", nBufferLength=0x105, lpBuffer=0x31e388, lpFilePart=0x0 | out: lpBuffer="C:\\Boot\\el-GR\\", lpFilePart=0x0) returned 0xe [0121.106] FindFirstFileW (in: lpFileName="C:\\Boot\\el-GR\\*", lpFindFileData=0x31e5d4 | out: lpFindFileData=0x31e5d4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac03b1a0, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac03b1a0, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xac03b1a0, ftLastWriteTime.dwHighDateTime=0x1d2de32, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x381cc0 [0121.107] FindNextFileW (in: hFindFile=0x381cc0, lpFindFileData=0x31e5e4 | out: lpFindFileData=0x31e5e4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac03b1a0, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac03b1a0, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xac03b1a0, ftLastWriteTime.dwHighDateTime=0x1d2de32, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0121.107] FindNextFileW (in: hFindFile=0x381cc0, lpFindFileData=0x31e5e4 | out: lpFindFileData=0x31e5e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xac03b1a0, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac03b1a0, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xea239054, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x17250, dwReserved0=0x0, dwReserved1=0x0, cFileName="bootmgr.exe.mui", cAlternateFileName="BOOTMG~1.MUI")) returned 1 [0121.107] FindNextFileW (in: hFindFile=0x381cc0, lpFindFileData=0x31e5e4 | out: lpFindFileData=0x31e5e4*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0121.107] FindClose (in: hFindFile=0x381cc0 | out: hFindFile=0x381cc0) returned 1 [0121.107] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e86c) returned 1 [0121.107] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e878) returned 1 [0121.107] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e8ac) returned 1 [0121.107] GetFullPathNameW (in: lpFileName="C:\\Boot\\el-GR", nBufferLength=0x105, lpBuffer=0x31e3b4, lpFilePart=0x0 | out: lpBuffer="C:\\Boot\\el-GR", lpFilePart=0x0) returned 0xd [0121.107] GetFullPathNameW (in: lpFileName="C:\\Boot\\el-GR\\", nBufferLength=0x105, lpBuffer=0x31e388, lpFilePart=0x0 | out: lpBuffer="C:\\Boot\\el-GR\\", lpFilePart=0x0) returned 0xe [0121.107] FindFirstFileW (in: lpFileName="C:\\Boot\\el-GR\\*", lpFindFileData=0x31e5d4 | out: lpFindFileData=0x31e5d4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac03b1a0, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac03b1a0, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xac03b1a0, ftLastWriteTime.dwHighDateTime=0x1d2de32, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x381cc0 [0121.107] FindNextFileW (in: hFindFile=0x381cc0, lpFindFileData=0x31e5e4 | out: lpFindFileData=0x31e5e4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac03b1a0, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac03b1a0, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xac03b1a0, ftLastWriteTime.dwHighDateTime=0x1d2de32, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0121.108] FindNextFileW (in: hFindFile=0x381cc0, lpFindFileData=0x31e5e4 | out: lpFindFileData=0x31e5e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xac03b1a0, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac03b1a0, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xea239054, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x17250, dwReserved0=0x0, dwReserved1=0x0, cFileName="bootmgr.exe.mui", cAlternateFileName="BOOTMG~1.MUI")) returned 1 [0121.108] FindNextFileW (in: hFindFile=0x381cc0, lpFindFileData=0x31e5e4 | out: lpFindFileData=0x31e5e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xac03b1a0, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac03b1a0, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xea239054, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x17250, dwReserved0=0x0, dwReserved1=0x0, cFileName="bootmgr.exe.mui", cAlternateFileName="BOOTMG~1.MUI")) returned 0 [0121.108] FindClose (in: hFindFile=0x381cc0 | out: hFindFile=0x381cc0) returned 1 [0121.108] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e86c) returned 1 [0121.108] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e878) returned 1 [0121.108] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e8ac) returned 1 [0121.108] GetFullPathNameW (in: lpFileName="C:\\Boot\\en-US", nBufferLength=0x105, lpBuffer=0x31e3b4, lpFilePart=0x0 | out: lpBuffer="C:\\Boot\\en-US", lpFilePart=0x0) returned 0xd [0121.108] GetFullPathNameW (in: lpFileName="C:\\Boot\\en-US\\", nBufferLength=0x105, lpBuffer=0x31e388, lpFilePart=0x0 | out: lpBuffer="C:\\Boot\\en-US\\", lpFilePart=0x0) returned 0xe [0121.108] FindFirstFileW (in: lpFileName="C:\\Boot\\en-US\\*", lpFindFileData=0x31e5d4 | out: lpFindFileData=0x31e5d4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac03b1a0, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac03b1a0, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xac03b1a0, ftLastWriteTime.dwHighDateTime=0x1d2de32, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x381cc0 [0121.108] FindNextFileW (in: hFindFile=0x381cc0, lpFindFileData=0x31e5e4 | out: lpFindFileData=0x31e5e4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac03b1a0, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac03b1a0, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xac03b1a0, ftLastWriteTime.dwHighDateTime=0x1d2de32, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0121.108] FindNextFileW (in: hFindFile=0x381cc0, lpFindFileData=0x31e5e4 | out: lpFindFileData=0x31e5e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xac03b1a0, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac03b1a0, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xe8216d3c, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x14c40, dwReserved0=0x0, dwReserved1=0x0, cFileName="bootmgr.exe.mui", cAlternateFileName="BOOTMG~1.MUI")) returned 1 [0121.109] FindNextFileW (in: hFindFile=0x381cc0, lpFindFileData=0x31e5e4 | out: lpFindFileData=0x31e5e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xac03b1a0, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac03b1a0, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xc3080a8, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0xaa50, dwReserved0=0x0, dwReserved1=0x0, cFileName="memtest.exe.mui", cAlternateFileName="MEMTES~1.MUI")) returned 1 [0121.109] FindNextFileW (in: hFindFile=0x381cc0, lpFindFileData=0x31e5e4 | out: lpFindFileData=0x31e5e4*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0121.109] FindClose (in: hFindFile=0x381cc0 | out: hFindFile=0x381cc0) returned 1 [0121.109] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e86c) returned 1 [0121.109] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e878) returned 1 [0121.109] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e8ac) returned 1 [0121.109] GetFullPathNameW (in: lpFileName="C:\\Boot\\en-US", nBufferLength=0x105, lpBuffer=0x31e3b4, lpFilePart=0x0 | out: lpBuffer="C:\\Boot\\en-US", lpFilePart=0x0) returned 0xd [0121.109] GetFullPathNameW (in: lpFileName="C:\\Boot\\en-US\\", nBufferLength=0x105, lpBuffer=0x31e388, lpFilePart=0x0 | out: lpBuffer="C:\\Boot\\en-US\\", lpFilePart=0x0) returned 0xe [0121.109] FindFirstFileW (in: lpFileName="C:\\Boot\\en-US\\*", lpFindFileData=0x31e5d4 | out: lpFindFileData=0x31e5d4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac03b1a0, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac03b1a0, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xac03b1a0, ftLastWriteTime.dwHighDateTime=0x1d2de32, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x381cc0 [0121.109] FindNextFileW (in: hFindFile=0x381cc0, lpFindFileData=0x31e5e4 | out: lpFindFileData=0x31e5e4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac03b1a0, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac03b1a0, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xac03b1a0, ftLastWriteTime.dwHighDateTime=0x1d2de32, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0121.109] FindNextFileW (in: hFindFile=0x381cc0, lpFindFileData=0x31e5e4 | out: lpFindFileData=0x31e5e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xac03b1a0, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac03b1a0, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xe8216d3c, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x14c40, dwReserved0=0x0, dwReserved1=0x0, cFileName="bootmgr.exe.mui", cAlternateFileName="BOOTMG~1.MUI")) returned 1 [0121.109] FindNextFileW (in: hFindFile=0x381cc0, lpFindFileData=0x31e5e4 | out: lpFindFileData=0x31e5e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xac03b1a0, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac03b1a0, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xc3080a8, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0xaa50, dwReserved0=0x0, dwReserved1=0x0, cFileName="memtest.exe.mui", cAlternateFileName="MEMTES~1.MUI")) returned 1 [0121.110] FindNextFileW (in: hFindFile=0x381cc0, lpFindFileData=0x31e5e4 | out: lpFindFileData=0x31e5e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xac03b1a0, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac03b1a0, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xc3080a8, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0xaa50, dwReserved0=0x0, dwReserved1=0x0, cFileName="memtest.exe.mui", cAlternateFileName="MEMTES~1.MUI")) returned 0 [0121.110] FindClose (in: hFindFile=0x381cc0 | out: hFindFile=0x381cc0) returned 1 [0121.110] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e86c) returned 1 [0121.110] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e878) returned 1 [0121.110] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e8ac) returned 1 [0121.110] GetFullPathNameW (in: lpFileName="C:\\Boot\\es-ES", nBufferLength=0x105, lpBuffer=0x31e3b4, lpFilePart=0x0 | out: lpBuffer="C:\\Boot\\es-ES", lpFilePart=0x0) returned 0xd [0121.110] GetFullPathNameW (in: lpFileName="C:\\Boot\\es-ES\\", nBufferLength=0x105, lpBuffer=0x31e388, lpFilePart=0x0 | out: lpBuffer="C:\\Boot\\es-ES\\", lpFilePart=0x0) returned 0xe [0121.110] FindFirstFileW (in: lpFileName="C:\\Boot\\es-ES\\*", lpFindFileData=0x31e5d4 | out: lpFindFileData=0x31e5d4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac03b1a0, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac061300, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xac061300, ftLastWriteTime.dwHighDateTime=0x1d2de32, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x381cc0 [0121.110] FindNextFileW (in: hFindFile=0x381cc0, lpFindFileData=0x31e5e4 | out: lpFindFileData=0x31e5e4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac03b1a0, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac061300, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xac061300, ftLastWriteTime.dwHighDateTime=0x1d2de32, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0121.110] FindNextFileW (in: hFindFile=0x381cc0, lpFindFileData=0x31e5e4 | out: lpFindFileData=0x31e5e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xac061300, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac061300, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xe84ea6d7, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x16050, dwReserved0=0x0, dwReserved1=0x0, cFileName="bootmgr.exe.mui", cAlternateFileName="BOOTMG~1.MUI")) returned 1 [0121.110] FindNextFileW (in: hFindFile=0x381cc0, lpFindFileData=0x31e5e4 | out: lpFindFileData=0x31e5e4*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0121.110] FindClose (in: hFindFile=0x381cc0 | out: hFindFile=0x381cc0) returned 1 [0121.111] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e86c) returned 1 [0121.111] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e878) returned 1 [0121.111] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e8ac) returned 1 [0121.111] GetFullPathNameW (in: lpFileName="C:\\Boot\\es-ES", nBufferLength=0x105, lpBuffer=0x31e3b4, lpFilePart=0x0 | out: lpBuffer="C:\\Boot\\es-ES", lpFilePart=0x0) returned 0xd [0121.111] GetFullPathNameW (in: lpFileName="C:\\Boot\\es-ES\\", nBufferLength=0x105, lpBuffer=0x31e388, lpFilePart=0x0 | out: lpBuffer="C:\\Boot\\es-ES\\", lpFilePart=0x0) returned 0xe [0121.111] FindFirstFileW (in: lpFileName="C:\\Boot\\es-ES\\*", lpFindFileData=0x31e5d4 | out: lpFindFileData=0x31e5d4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac03b1a0, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac061300, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xac061300, ftLastWriteTime.dwHighDateTime=0x1d2de32, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x381cc0 [0121.111] FindNextFileW (in: hFindFile=0x381cc0, lpFindFileData=0x31e5e4 | out: lpFindFileData=0x31e5e4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac03b1a0, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac061300, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xac061300, ftLastWriteTime.dwHighDateTime=0x1d2de32, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0121.111] FindNextFileW (in: hFindFile=0x381cc0, lpFindFileData=0x31e5e4 | out: lpFindFileData=0x31e5e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xac061300, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac061300, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xe84ea6d7, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x16050, dwReserved0=0x0, dwReserved1=0x0, cFileName="bootmgr.exe.mui", cAlternateFileName="BOOTMG~1.MUI")) returned 1 [0121.111] FindNextFileW (in: hFindFile=0x381cc0, lpFindFileData=0x31e5e4 | out: lpFindFileData=0x31e5e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xac061300, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac061300, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xe84ea6d7, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x16050, dwReserved0=0x0, dwReserved1=0x0, cFileName="bootmgr.exe.mui", cAlternateFileName="BOOTMG~1.MUI")) returned 0 [0121.111] FindClose (in: hFindFile=0x381cc0 | out: hFindFile=0x381cc0) returned 1 [0121.111] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e86c) returned 1 [0121.111] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e878) returned 1 [0121.111] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e8ac) returned 1 [0121.111] GetFullPathNameW (in: lpFileName="C:\\Boot\\fi-FI", nBufferLength=0x105, lpBuffer=0x31e3b4, lpFilePart=0x0 | out: lpBuffer="C:\\Boot\\fi-FI", lpFilePart=0x0) returned 0xd [0121.111] GetFullPathNameW (in: lpFileName="C:\\Boot\\fi-FI\\", nBufferLength=0x105, lpBuffer=0x31e388, lpFilePart=0x0 | out: lpBuffer="C:\\Boot\\fi-FI\\", lpFilePart=0x0) returned 0xe [0121.111] FindFirstFileW (in: lpFileName="C:\\Boot\\fi-FI\\*", lpFindFileData=0x31e5d4 | out: lpFindFileData=0x31e5d4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac061300, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac061300, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xac061300, ftLastWriteTime.dwHighDateTime=0x1d2de32, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x381cc0 [0121.112] FindNextFileW (in: hFindFile=0x381cc0, lpFindFileData=0x31e5e4 | out: lpFindFileData=0x31e5e4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac061300, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac061300, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xac061300, ftLastWriteTime.dwHighDateTime=0x1d2de32, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0121.112] FindNextFileW (in: hFindFile=0x381cc0, lpFindFileData=0x31e5e4 | out: lpFindFileData=0x31e5e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xac061300, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac061300, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xe836d95d, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x15c40, dwReserved0=0x0, dwReserved1=0x0, cFileName="bootmgr.exe.mui", cAlternateFileName="BOOTMG~1.MUI")) returned 1 [0121.112] FindNextFileW (in: hFindFile=0x381cc0, lpFindFileData=0x31e5e4 | out: lpFindFileData=0x31e5e4*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0121.112] FindClose (in: hFindFile=0x381cc0 | out: hFindFile=0x381cc0) returned 1 [0121.112] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e86c) returned 1 [0121.112] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e878) returned 1 [0121.112] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e8ac) returned 1 [0121.112] GetFullPathNameW (in: lpFileName="C:\\Boot\\fi-FI", nBufferLength=0x105, lpBuffer=0x31e3b4, lpFilePart=0x0 | out: lpBuffer="C:\\Boot\\fi-FI", lpFilePart=0x0) returned 0xd [0121.112] GetFullPathNameW (in: lpFileName="C:\\Boot\\fi-FI\\", nBufferLength=0x105, lpBuffer=0x31e388, lpFilePart=0x0 | out: lpBuffer="C:\\Boot\\fi-FI\\", lpFilePart=0x0) returned 0xe [0121.112] FindFirstFileW (in: lpFileName="C:\\Boot\\fi-FI\\*", lpFindFileData=0x31e5d4 | out: lpFindFileData=0x31e5d4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac061300, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac061300, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xac061300, ftLastWriteTime.dwHighDateTime=0x1d2de32, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x381cc0 [0121.112] FindNextFileW (in: hFindFile=0x381cc0, lpFindFileData=0x31e5e4 | out: lpFindFileData=0x31e5e4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac061300, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac061300, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xac061300, ftLastWriteTime.dwHighDateTime=0x1d2de32, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0121.112] FindNextFileW (in: hFindFile=0x381cc0, lpFindFileData=0x31e5e4 | out: lpFindFileData=0x31e5e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xac061300, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac061300, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xe836d95d, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x15c40, dwReserved0=0x0, dwReserved1=0x0, cFileName="bootmgr.exe.mui", cAlternateFileName="BOOTMG~1.MUI")) returned 1 [0121.112] FindNextFileW (in: hFindFile=0x381cc0, lpFindFileData=0x31e5e4 | out: lpFindFileData=0x31e5e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xac061300, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac061300, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xe836d95d, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x15c40, dwReserved0=0x0, dwReserved1=0x0, cFileName="bootmgr.exe.mui", cAlternateFileName="BOOTMG~1.MUI")) returned 0 [0121.113] FindClose (in: hFindFile=0x381cc0 | out: hFindFile=0x381cc0) returned 1 [0121.113] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e86c) returned 1 [0121.113] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e878) returned 1 [0121.113] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e8ac) returned 1 [0121.113] GetFullPathNameW (in: lpFileName="C:\\Boot\\Fonts", nBufferLength=0x105, lpBuffer=0x31e3b4, lpFilePart=0x0 | out: lpBuffer="C:\\Boot\\Fonts", lpFilePart=0x0) returned 0xd [0121.113] GetFullPathNameW (in: lpFileName="C:\\Boot\\Fonts\\", nBufferLength=0x105, lpBuffer=0x31e388, lpFilePart=0x0 | out: lpBuffer="C:\\Boot\\Fonts\\", lpFilePart=0x0) returned 0xe [0121.113] FindFirstFileW (in: lpFileName="C:\\Boot\\Fonts\\*", lpFindFileData=0x31e5d4 | out: lpFindFileData=0x31e5d4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac0f9880, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac276640, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xac276640, ftLastWriteTime.dwHighDateTime=0x1d2de32, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x381cc0 [0121.113] FindNextFileW (in: hFindFile=0x381cc0, lpFindFileData=0x31e5e4 | out: lpFindFileData=0x31e5e4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac0f9880, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac276640, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xac276640, ftLastWriteTime.dwHighDateTime=0x1d2de32, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0121.113] FindNextFileW (in: hFindFile=0x381cc0, lpFindFileData=0x31e5e4 | out: lpFindFileData=0x31e5e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xac0f9880, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac0f9880, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0x64c5ad69, ftLastWriteTime.dwHighDateTime=0x1c9ea0a, nFileSizeHigh=0x0, nFileSizeLow=0x385e00, dwReserved0=0x0, dwReserved1=0x0, cFileName="chs_boot.ttf", cAlternateFileName="")) returned 1 [0121.113] FindNextFileW (in: hFindFile=0x381cc0, lpFindFileData=0x31e5e4 | out: lpFindFileData=0x31e5e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xac191e00, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac191e00, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0x6505f253, ftLastWriteTime.dwHighDateTime=0x1c9ea0a, nFileSizeHigh=0x0, nFileSizeLow=0x3b27a4, dwReserved0=0x0, dwReserved1=0x0, cFileName="cht_boot.ttf", cAlternateFileName="")) returned 1 [0121.113] FindNextFileW (in: hFindFile=0x381cc0, lpFindFileData=0x31e5e4 | out: lpFindFileData=0x31e5e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xac204220, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac204220, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0x65274577, ftLastWriteTime.dwHighDateTime=0x1c9ea0a, nFileSizeHigh=0x0, nFileSizeLow=0x1e46e4, dwReserved0=0x0, dwReserved1=0x0, cFileName="jpn_boot.ttf", cAlternateFileName="")) returned 1 [0121.113] FindNextFileW (in: hFindFile=0x381cc0, lpFindFileData=0x31e5e4 | out: lpFindFileData=0x31e5e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xac22a380, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac22a380, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0x6530caef, ftLastWriteTime.dwHighDateTime=0x1c9ea0a, nFileSizeHigh=0x0, nFileSizeLow=0x242f20, dwReserved0=0x0, dwReserved1=0x0, cFileName="kor_boot.ttf", cAlternateFileName="")) returned 1 [0121.113] FindNextFileW (in: hFindFile=0x381cc0, lpFindFileData=0x31e5e4 | out: lpFindFileData=0x31e5e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xac276640, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac276640, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0x65332c4d, ftLastWriteTime.dwHighDateTime=0x1c9ea0a, nFileSizeHigh=0x0, nFileSizeLow=0xb95c, dwReserved0=0x0, dwReserved1=0x0, cFileName="wgl4_boot.ttf", cAlternateFileName="WGL4_B~1.TTF")) returned 1 [0121.113] FindNextFileW (in: hFindFile=0x381cc0, lpFindFileData=0x31e5e4 | out: lpFindFileData=0x31e5e4*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0121.113] FindClose (in: hFindFile=0x381cc0 | out: hFindFile=0x381cc0) returned 1 [0121.114] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e86c) returned 1 [0121.114] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e878) returned 1 [0121.114] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e8ac) returned 1 [0121.114] GetFullPathNameW (in: lpFileName="C:\\Boot\\Fonts", nBufferLength=0x105, lpBuffer=0x31e3b4, lpFilePart=0x0 | out: lpBuffer="C:\\Boot\\Fonts", lpFilePart=0x0) returned 0xd [0121.114] GetFullPathNameW (in: lpFileName="C:\\Boot\\Fonts\\", nBufferLength=0x105, lpBuffer=0x31e388, lpFilePart=0x0 | out: lpBuffer="C:\\Boot\\Fonts\\", lpFilePart=0x0) returned 0xe [0121.114] FindFirstFileW (in: lpFileName="C:\\Boot\\Fonts\\*", lpFindFileData=0x31e5d4 | out: lpFindFileData=0x31e5d4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac0f9880, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac276640, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xac276640, ftLastWriteTime.dwHighDateTime=0x1d2de32, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x381cc0 [0121.114] FindNextFileW (in: hFindFile=0x381cc0, lpFindFileData=0x31e5e4 | out: lpFindFileData=0x31e5e4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac0f9880, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac276640, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xac276640, ftLastWriteTime.dwHighDateTime=0x1d2de32, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0121.114] FindNextFileW (in: hFindFile=0x381cc0, lpFindFileData=0x31e5e4 | out: lpFindFileData=0x31e5e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xac0f9880, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac0f9880, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0x64c5ad69, ftLastWriteTime.dwHighDateTime=0x1c9ea0a, nFileSizeHigh=0x0, nFileSizeLow=0x385e00, dwReserved0=0x0, dwReserved1=0x0, cFileName="chs_boot.ttf", cAlternateFileName="")) returned 1 [0121.114] FindNextFileW (in: hFindFile=0x381cc0, lpFindFileData=0x31e5e4 | out: lpFindFileData=0x31e5e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xac191e00, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac191e00, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0x6505f253, ftLastWriteTime.dwHighDateTime=0x1c9ea0a, nFileSizeHigh=0x0, nFileSizeLow=0x3b27a4, dwReserved0=0x0, dwReserved1=0x0, cFileName="cht_boot.ttf", cAlternateFileName="")) returned 1 [0121.114] FindNextFileW (in: hFindFile=0x381cc0, lpFindFileData=0x31e5e4 | out: lpFindFileData=0x31e5e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xac204220, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac204220, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0x65274577, ftLastWriteTime.dwHighDateTime=0x1c9ea0a, nFileSizeHigh=0x0, nFileSizeLow=0x1e46e4, dwReserved0=0x0, dwReserved1=0x0, cFileName="jpn_boot.ttf", cAlternateFileName="")) returned 1 [0121.114] FindNextFileW (in: hFindFile=0x381cc0, lpFindFileData=0x31e5e4 | out: lpFindFileData=0x31e5e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xac22a380, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac22a380, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0x6530caef, ftLastWriteTime.dwHighDateTime=0x1c9ea0a, nFileSizeHigh=0x0, nFileSizeLow=0x242f20, dwReserved0=0x0, dwReserved1=0x0, cFileName="kor_boot.ttf", cAlternateFileName="")) returned 1 [0121.114] FindNextFileW (in: hFindFile=0x381cc0, lpFindFileData=0x31e5e4 | out: lpFindFileData=0x31e5e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xac276640, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac276640, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0x65332c4d, ftLastWriteTime.dwHighDateTime=0x1c9ea0a, nFileSizeHigh=0x0, nFileSizeLow=0xb95c, dwReserved0=0x0, dwReserved1=0x0, cFileName="wgl4_boot.ttf", cAlternateFileName="WGL4_B~1.TTF")) returned 1 [0121.114] FindNextFileW (in: hFindFile=0x381cc0, lpFindFileData=0x31e5e4 | out: lpFindFileData=0x31e5e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xac276640, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac276640, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0x65332c4d, ftLastWriteTime.dwHighDateTime=0x1c9ea0a, nFileSizeHigh=0x0, nFileSizeLow=0xb95c, dwReserved0=0x0, dwReserved1=0x0, cFileName="wgl4_boot.ttf", cAlternateFileName="WGL4_B~1.TTF")) returned 0 [0121.115] FindClose (in: hFindFile=0x381cc0 | out: hFindFile=0x381cc0) returned 1 [0121.115] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e86c) returned 1 [0121.115] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e878) returned 1 [0121.115] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e8ac) returned 1 [0121.115] GetFullPathNameW (in: lpFileName="C:\\Boot\\fr-FR", nBufferLength=0x105, lpBuffer=0x31e3b4, lpFilePart=0x0 | out: lpBuffer="C:\\Boot\\fr-FR", lpFilePart=0x0) returned 0xd [0121.115] GetFullPathNameW (in: lpFileName="C:\\Boot\\fr-FR\\", nBufferLength=0x105, lpBuffer=0x31e388, lpFilePart=0x0 | out: lpBuffer="C:\\Boot\\fr-FR\\", lpFilePart=0x0) returned 0xe [0121.115] FindFirstFileW (in: lpFileName="C:\\Boot\\fr-FR\\*", lpFindFileData=0x31e5d4 | out: lpFindFileData=0x31e5d4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac061300, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac061300, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xac061300, ftLastWriteTime.dwHighDateTime=0x1d2de32, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x381cc0 [0121.115] FindNextFileW (in: hFindFile=0x381cc0, lpFindFileData=0x31e5e4 | out: lpFindFileData=0x31e5e4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac061300, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac061300, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xac061300, ftLastWriteTime.dwHighDateTime=0x1d2de32, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0121.115] FindNextFileW (in: hFindFile=0x381cc0, lpFindFileData=0x31e5e4 | out: lpFindFileData=0x31e5e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xac061300, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac061300, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xe86b3703, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x16c40, dwReserved0=0x0, dwReserved1=0x0, cFileName="bootmgr.exe.mui", cAlternateFileName="BOOTMG~1.MUI")) returned 1 [0121.115] FindNextFileW (in: hFindFile=0x381cc0, lpFindFileData=0x31e5e4 | out: lpFindFileData=0x31e5e4*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0121.115] FindClose (in: hFindFile=0x381cc0 | out: hFindFile=0x381cc0) returned 1 [0121.115] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e86c) returned 1 [0121.115] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e878) returned 1 [0121.115] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e8ac) returned 1 [0121.115] GetFullPathNameW (in: lpFileName="C:\\Boot\\fr-FR", nBufferLength=0x105, lpBuffer=0x31e3b4, lpFilePart=0x0 | out: lpBuffer="C:\\Boot\\fr-FR", lpFilePart=0x0) returned 0xd [0121.115] GetFullPathNameW (in: lpFileName="C:\\Boot\\fr-FR\\", nBufferLength=0x105, lpBuffer=0x31e388, lpFilePart=0x0 | out: lpBuffer="C:\\Boot\\fr-FR\\", lpFilePart=0x0) returned 0xe [0121.115] FindFirstFileW (in: lpFileName="C:\\Boot\\fr-FR\\*", lpFindFileData=0x31e5d4 | out: lpFindFileData=0x31e5d4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac061300, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac061300, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xac061300, ftLastWriteTime.dwHighDateTime=0x1d2de32, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x381cc0 [0121.116] FindNextFileW (in: hFindFile=0x381cc0, lpFindFileData=0x31e5e4 | out: lpFindFileData=0x31e5e4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac061300, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac061300, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xac061300, ftLastWriteTime.dwHighDateTime=0x1d2de32, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0121.116] FindNextFileW (in: hFindFile=0x381cc0, lpFindFileData=0x31e5e4 | out: lpFindFileData=0x31e5e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xac061300, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac061300, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xe86b3703, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x16c40, dwReserved0=0x0, dwReserved1=0x0, cFileName="bootmgr.exe.mui", cAlternateFileName="BOOTMG~1.MUI")) returned 1 [0121.116] FindNextFileW (in: hFindFile=0x381cc0, lpFindFileData=0x31e5e4 | out: lpFindFileData=0x31e5e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xac061300, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac061300, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xe86b3703, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x16c40, dwReserved0=0x0, dwReserved1=0x0, cFileName="bootmgr.exe.mui", cAlternateFileName="BOOTMG~1.MUI")) returned 0 [0121.116] FindClose (in: hFindFile=0x381cc0 | out: hFindFile=0x381cc0) returned 1 [0121.116] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e86c) returned 1 [0121.116] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e878) returned 1 [0121.116] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e8ac) returned 1 [0121.116] GetFullPathNameW (in: lpFileName="C:\\Boot\\hu-HU", nBufferLength=0x105, lpBuffer=0x31e3b4, lpFilePart=0x0 | out: lpBuffer="C:\\Boot\\hu-HU", lpFilePart=0x0) returned 0xd [0121.116] GetFullPathNameW (in: lpFileName="C:\\Boot\\hu-HU\\", nBufferLength=0x105, lpBuffer=0x31e388, lpFilePart=0x0 | out: lpBuffer="C:\\Boot\\hu-HU\\", lpFilePart=0x0) returned 0xe [0121.116] FindFirstFileW (in: lpFileName="C:\\Boot\\hu-HU\\*", lpFindFileData=0x31e5d4 | out: lpFindFileData=0x31e5d4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac061300, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac061300, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xac061300, ftLastWriteTime.dwHighDateTime=0x1d2de32, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x381cc0 [0121.116] FindNextFileW (in: hFindFile=0x381cc0, lpFindFileData=0x31e5e4 | out: lpFindFileData=0x31e5e4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac061300, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac061300, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xac061300, ftLastWriteTime.dwHighDateTime=0x1d2de32, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0121.116] FindNextFileW (in: hFindFile=0x381cc0, lpFindFileData=0x31e5e4 | out: lpFindFileData=0x31e5e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xac061300, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac061300, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xe817e7d8, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x16240, dwReserved0=0x0, dwReserved1=0x0, cFileName="bootmgr.exe.mui", cAlternateFileName="BOOTMG~1.MUI")) returned 1 [0121.117] FindNextFileW (in: hFindFile=0x381cc0, lpFindFileData=0x31e5e4 | out: lpFindFileData=0x31e5e4*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0121.117] FindClose (in: hFindFile=0x381cc0 | out: hFindFile=0x381cc0) returned 1 [0121.117] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e86c) returned 1 [0121.117] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e878) returned 1 [0121.117] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e8ac) returned 1 [0121.117] GetFullPathNameW (in: lpFileName="C:\\Boot\\hu-HU", nBufferLength=0x105, lpBuffer=0x31e3b4, lpFilePart=0x0 | out: lpBuffer="C:\\Boot\\hu-HU", lpFilePart=0x0) returned 0xd [0121.117] GetFullPathNameW (in: lpFileName="C:\\Boot\\hu-HU\\", nBufferLength=0x105, lpBuffer=0x31e388, lpFilePart=0x0 | out: lpBuffer="C:\\Boot\\hu-HU\\", lpFilePart=0x0) returned 0xe [0121.117] FindFirstFileW (in: lpFileName="C:\\Boot\\hu-HU\\*", lpFindFileData=0x31e5d4 | out: lpFindFileData=0x31e5d4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac061300, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac061300, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xac061300, ftLastWriteTime.dwHighDateTime=0x1d2de32, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x381cc0 [0121.117] FindNextFileW (in: hFindFile=0x381cc0, lpFindFileData=0x31e5e4 | out: lpFindFileData=0x31e5e4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac061300, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac061300, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xac061300, ftLastWriteTime.dwHighDateTime=0x1d2de32, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0121.117] FindNextFileW (in: hFindFile=0x381cc0, lpFindFileData=0x31e5e4 | out: lpFindFileData=0x31e5e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xac061300, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac061300, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xe817e7d8, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x16240, dwReserved0=0x0, dwReserved1=0x0, cFileName="bootmgr.exe.mui", cAlternateFileName="BOOTMG~1.MUI")) returned 1 [0121.117] FindNextFileW (in: hFindFile=0x381cc0, lpFindFileData=0x31e5e4 | out: lpFindFileData=0x31e5e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xac061300, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac061300, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xe817e7d8, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x16240, dwReserved0=0x0, dwReserved1=0x0, cFileName="bootmgr.exe.mui", cAlternateFileName="BOOTMG~1.MUI")) returned 0 [0121.117] FindClose (in: hFindFile=0x381cc0 | out: hFindFile=0x381cc0) returned 1 [0121.117] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e86c) returned 1 [0121.117] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e878) returned 1 [0121.117] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e8ac) returned 1 [0121.117] GetFullPathNameW (in: lpFileName="C:\\Boot\\it-IT", nBufferLength=0x105, lpBuffer=0x31e3b4, lpFilePart=0x0 | out: lpBuffer="C:\\Boot\\it-IT", lpFilePart=0x0) returned 0xd [0121.117] GetFullPathNameW (in: lpFileName="C:\\Boot\\it-IT\\", nBufferLength=0x105, lpBuffer=0x31e388, lpFilePart=0x0 | out: lpBuffer="C:\\Boot\\it-IT\\", lpFilePart=0x0) returned 0xe [0121.117] FindFirstFileW (in: lpFileName="C:\\Boot\\it-IT\\*", lpFindFileData=0x31e5d4 | out: lpFindFileData=0x31e5d4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac061300, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac061300, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xac061300, ftLastWriteTime.dwHighDateTime=0x1d2de32, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x381cc0 [0121.118] FindNextFileW (in: hFindFile=0x381cc0, lpFindFileData=0x31e5e4 | out: lpFindFileData=0x31e5e4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac061300, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac061300, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xac061300, ftLastWriteTime.dwHighDateTime=0x1d2de32, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0121.118] FindNextFileW (in: hFindFile=0x381cc0, lpFindFileData=0x31e5e4 | out: lpFindFileData=0x31e5e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xac061300, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac061300, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xe9e80ea3, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x16250, dwReserved0=0x0, dwReserved1=0x0, cFileName="bootmgr.exe.mui", cAlternateFileName="BOOTMG~1.MUI")) returned 1 [0121.118] FindNextFileW (in: hFindFile=0x381cc0, lpFindFileData=0x31e5e4 | out: lpFindFileData=0x31e5e4*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0121.118] FindClose (in: hFindFile=0x381cc0 | out: hFindFile=0x381cc0) returned 1 [0121.118] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e86c) returned 1 [0121.118] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e878) returned 1 [0121.118] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e8ac) returned 1 [0121.118] GetFullPathNameW (in: lpFileName="C:\\Boot\\it-IT", nBufferLength=0x105, lpBuffer=0x31e3b4, lpFilePart=0x0 | out: lpBuffer="C:\\Boot\\it-IT", lpFilePart=0x0) returned 0xd [0121.118] GetFullPathNameW (in: lpFileName="C:\\Boot\\it-IT\\", nBufferLength=0x105, lpBuffer=0x31e388, lpFilePart=0x0 | out: lpBuffer="C:\\Boot\\it-IT\\", lpFilePart=0x0) returned 0xe [0121.118] FindFirstFileW (in: lpFileName="C:\\Boot\\it-IT\\*", lpFindFileData=0x31e5d4 | out: lpFindFileData=0x31e5d4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac061300, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac061300, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xac061300, ftLastWriteTime.dwHighDateTime=0x1d2de32, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x381cc0 [0121.119] FindNextFileW (in: hFindFile=0x381cc0, lpFindFileData=0x31e5e4 | out: lpFindFileData=0x31e5e4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac061300, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac061300, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xac061300, ftLastWriteTime.dwHighDateTime=0x1d2de32, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0121.119] FindNextFileW (in: hFindFile=0x381cc0, lpFindFileData=0x31e5e4 | out: lpFindFileData=0x31e5e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xac061300, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac061300, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xe9e80ea3, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x16250, dwReserved0=0x0, dwReserved1=0x0, cFileName="bootmgr.exe.mui", cAlternateFileName="BOOTMG~1.MUI")) returned 1 [0121.119] FindNextFileW (in: hFindFile=0x381cc0, lpFindFileData=0x31e5e4 | out: lpFindFileData=0x31e5e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xac061300, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac061300, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xe9e80ea3, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x16250, dwReserved0=0x0, dwReserved1=0x0, cFileName="bootmgr.exe.mui", cAlternateFileName="BOOTMG~1.MUI")) returned 0 [0121.119] FindClose (in: hFindFile=0x381cc0 | out: hFindFile=0x381cc0) returned 1 [0121.119] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e86c) returned 1 [0121.119] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e878) returned 1 [0121.119] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e8ac) returned 1 [0121.119] GetFullPathNameW (in: lpFileName="C:\\Boot\\ja-JP", nBufferLength=0x105, lpBuffer=0x31e3b4, lpFilePart=0x0 | out: lpBuffer="C:\\Boot\\ja-JP", lpFilePart=0x0) returned 0xd [0121.119] GetFullPathNameW (in: lpFileName="C:\\Boot\\ja-JP\\", nBufferLength=0x105, lpBuffer=0x31e388, lpFilePart=0x0 | out: lpBuffer="C:\\Boot\\ja-JP\\", lpFilePart=0x0) returned 0xe [0121.119] FindFirstFileW (in: lpFileName="C:\\Boot\\ja-JP\\*", lpFindFileData=0x31e5d4 | out: lpFindFileData=0x31e5d4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac087460, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac087460, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xac087460, ftLastWriteTime.dwHighDateTime=0x1d2de32, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x381cc0 [0121.119] FindNextFileW (in: hFindFile=0x381cc0, lpFindFileData=0x31e5e4 | out: lpFindFileData=0x31e5e4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac087460, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac087460, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xac087460, ftLastWriteTime.dwHighDateTime=0x1d2de32, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0121.119] FindNextFileW (in: hFindFile=0x381cc0, lpFindFileData=0x31e5e4 | out: lpFindFileData=0x31e5e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xac087460, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac087460, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xe8216d3c, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x12a40, dwReserved0=0x0, dwReserved1=0x0, cFileName="bootmgr.exe.mui", cAlternateFileName="BOOTMG~1.MUI")) returned 1 [0121.119] FindNextFileW (in: hFindFile=0x381cc0, lpFindFileData=0x31e5e4 | out: lpFindFileData=0x31e5e4*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0121.119] FindClose (in: hFindFile=0x381cc0 | out: hFindFile=0x381cc0) returned 1 [0121.119] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e86c) returned 1 [0121.119] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e878) returned 1 [0121.119] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e8ac) returned 1 [0121.120] GetFullPathNameW (in: lpFileName="C:\\Boot\\ja-JP", nBufferLength=0x105, lpBuffer=0x31e3b4, lpFilePart=0x0 | out: lpBuffer="C:\\Boot\\ja-JP", lpFilePart=0x0) returned 0xd [0121.120] GetFullPathNameW (in: lpFileName="C:\\Boot\\ja-JP\\", nBufferLength=0x105, lpBuffer=0x31e388, lpFilePart=0x0 | out: lpBuffer="C:\\Boot\\ja-JP\\", lpFilePart=0x0) returned 0xe [0121.120] FindFirstFileW (in: lpFileName="C:\\Boot\\ja-JP\\*", lpFindFileData=0x31e5d4 | out: lpFindFileData=0x31e5d4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac087460, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac087460, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xac087460, ftLastWriteTime.dwHighDateTime=0x1d2de32, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x381cc0 [0121.120] FindNextFileW (in: hFindFile=0x381cc0, lpFindFileData=0x31e5e4 | out: lpFindFileData=0x31e5e4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac087460, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac087460, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xac087460, ftLastWriteTime.dwHighDateTime=0x1d2de32, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0121.120] FindNextFileW (in: hFindFile=0x381cc0, lpFindFileData=0x31e5e4 | out: lpFindFileData=0x31e5e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xac087460, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac087460, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xe8216d3c, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x12a40, dwReserved0=0x0, dwReserved1=0x0, cFileName="bootmgr.exe.mui", cAlternateFileName="BOOTMG~1.MUI")) returned 1 [0121.120] FindNextFileW (in: hFindFile=0x381cc0, lpFindFileData=0x31e5e4 | out: lpFindFileData=0x31e5e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xac087460, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac087460, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xe8216d3c, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x12a40, dwReserved0=0x0, dwReserved1=0x0, cFileName="bootmgr.exe.mui", cAlternateFileName="BOOTMG~1.MUI")) returned 0 [0121.120] FindClose (in: hFindFile=0x381cc0 | out: hFindFile=0x381cc0) returned 1 [0121.120] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e86c) returned 1 [0121.120] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e878) returned 1 [0121.120] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e8ac) returned 1 [0121.120] GetFullPathNameW (in: lpFileName="C:\\Boot\\ko-KR", nBufferLength=0x105, lpBuffer=0x31e3b4, lpFilePart=0x0 | out: lpBuffer="C:\\Boot\\ko-KR", lpFilePart=0x0) returned 0xd [0121.120] GetFullPathNameW (in: lpFileName="C:\\Boot\\ko-KR\\", nBufferLength=0x105, lpBuffer=0x31e388, lpFilePart=0x0 | out: lpBuffer="C:\\Boot\\ko-KR\\", lpFilePart=0x0) returned 0xe [0121.120] FindFirstFileW (in: lpFileName="C:\\Boot\\ko-KR\\*", lpFindFileData=0x31e5d4 | out: lpFindFileData=0x31e5d4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac087460, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac087460, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xac087460, ftLastWriteTime.dwHighDateTime=0x1d2de32, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x381cc0 [0121.120] FindNextFileW (in: hFindFile=0x381cc0, lpFindFileData=0x31e5e4 | out: lpFindFileData=0x31e5e4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac087460, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac087460, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xac087460, ftLastWriteTime.dwHighDateTime=0x1d2de32, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0121.120] FindNextFileW (in: hFindFile=0x381cc0, lpFindFileData=0x31e5e4 | out: lpFindFileData=0x31e5e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xac087460, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac087460, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xe8510830, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x12650, dwReserved0=0x0, dwReserved1=0x0, cFileName="bootmgr.exe.mui", cAlternateFileName="BOOTMG~1.MUI")) returned 1 [0121.120] FindNextFileW (in: hFindFile=0x381cc0, lpFindFileData=0x31e5e4 | out: lpFindFileData=0x31e5e4*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0121.120] FindClose (in: hFindFile=0x381cc0 | out: hFindFile=0x381cc0) returned 1 [0121.120] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e86c) returned 1 [0121.120] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e878) returned 1 [0121.120] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e8ac) returned 1 [0121.121] GetFullPathNameW (in: lpFileName="C:\\Boot\\ko-KR", nBufferLength=0x105, lpBuffer=0x31e3b4, lpFilePart=0x0 | out: lpBuffer="C:\\Boot\\ko-KR", lpFilePart=0x0) returned 0xd [0121.121] GetFullPathNameW (in: lpFileName="C:\\Boot\\ko-KR\\", nBufferLength=0x105, lpBuffer=0x31e388, lpFilePart=0x0 | out: lpBuffer="C:\\Boot\\ko-KR\\", lpFilePart=0x0) returned 0xe [0121.121] FindFirstFileW (in: lpFileName="C:\\Boot\\ko-KR\\*", lpFindFileData=0x31e5d4 | out: lpFindFileData=0x31e5d4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac087460, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac087460, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xac087460, ftLastWriteTime.dwHighDateTime=0x1d2de32, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x381cc0 [0121.121] FindNextFileW (in: hFindFile=0x381cc0, lpFindFileData=0x31e5e4 | out: lpFindFileData=0x31e5e4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac087460, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac087460, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xac087460, ftLastWriteTime.dwHighDateTime=0x1d2de32, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0121.121] FindNextFileW (in: hFindFile=0x381cc0, lpFindFileData=0x31e5e4 | out: lpFindFileData=0x31e5e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xac087460, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac087460, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xe8510830, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x12650, dwReserved0=0x0, dwReserved1=0x0, cFileName="bootmgr.exe.mui", cAlternateFileName="BOOTMG~1.MUI")) returned 1 [0121.121] FindNextFileW (in: hFindFile=0x381cc0, lpFindFileData=0x31e5e4 | out: lpFindFileData=0x31e5e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xac087460, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac087460, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xe8510830, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x12650, dwReserved0=0x0, dwReserved1=0x0, cFileName="bootmgr.exe.mui", cAlternateFileName="BOOTMG~1.MUI")) returned 0 [0121.121] FindClose (in: hFindFile=0x381cc0 | out: hFindFile=0x381cc0) returned 1 [0121.121] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e86c) returned 1 [0121.121] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e878) returned 1 [0121.121] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e8ac) returned 1 [0121.121] GetFullPathNameW (in: lpFileName="C:\\Boot\\nb-NO", nBufferLength=0x105, lpBuffer=0x31e3b4, lpFilePart=0x0 | out: lpBuffer="C:\\Boot\\nb-NO", lpFilePart=0x0) returned 0xd [0121.121] GetFullPathNameW (in: lpFileName="C:\\Boot\\nb-NO\\", nBufferLength=0x105, lpBuffer=0x31e388, lpFilePart=0x0 | out: lpBuffer="C:\\Boot\\nb-NO\\", lpFilePart=0x0) returned 0xe [0121.121] FindFirstFileW (in: lpFileName="C:\\Boot\\nb-NO\\*", lpFindFileData=0x31e5d4 | out: lpFindFileData=0x31e5d4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac087460, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac0ad5c0, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xac0ad5c0, ftLastWriteTime.dwHighDateTime=0x1d2de32, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x381cc0 [0121.121] FindNextFileW (in: hFindFile=0x381cc0, lpFindFileData=0x31e5e4 | out: lpFindFileData=0x31e5e4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac087460, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac0ad5c0, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xac0ad5c0, ftLastWriteTime.dwHighDateTime=0x1d2de32, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0121.121] FindNextFileW (in: hFindFile=0x381cc0, lpFindFileData=0x31e5e4 | out: lpFindFileData=0x31e5e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xac0ad5c0, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac0ad5c0, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xea212efb, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x15850, dwReserved0=0x0, dwReserved1=0x0, cFileName="bootmgr.exe.mui", cAlternateFileName="BOOTMG~1.MUI")) returned 1 [0121.121] FindNextFileW (in: hFindFile=0x381cc0, lpFindFileData=0x31e5e4 | out: lpFindFileData=0x31e5e4*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0121.121] FindClose (in: hFindFile=0x381cc0 | out: hFindFile=0x381cc0) returned 1 [0121.121] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e86c) returned 1 [0121.121] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e878) returned 1 [0121.122] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e8ac) returned 1 [0121.122] GetFullPathNameW (in: lpFileName="C:\\Boot\\nb-NO", nBufferLength=0x105, lpBuffer=0x31e3b4, lpFilePart=0x0 | out: lpBuffer="C:\\Boot\\nb-NO", lpFilePart=0x0) returned 0xd [0121.122] GetFullPathNameW (in: lpFileName="C:\\Boot\\nb-NO\\", nBufferLength=0x105, lpBuffer=0x31e388, lpFilePart=0x0 | out: lpBuffer="C:\\Boot\\nb-NO\\", lpFilePart=0x0) returned 0xe [0121.122] FindFirstFileW (in: lpFileName="C:\\Boot\\nb-NO\\*", lpFindFileData=0x31e5d4 | out: lpFindFileData=0x31e5d4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac087460, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac0ad5c0, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xac0ad5c0, ftLastWriteTime.dwHighDateTime=0x1d2de32, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x381cc0 [0121.122] FindNextFileW (in: hFindFile=0x381cc0, lpFindFileData=0x31e5e4 | out: lpFindFileData=0x31e5e4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac087460, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac0ad5c0, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xac0ad5c0, ftLastWriteTime.dwHighDateTime=0x1d2de32, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0121.122] FindNextFileW (in: hFindFile=0x381cc0, lpFindFileData=0x31e5e4 | out: lpFindFileData=0x31e5e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xac0ad5c0, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac0ad5c0, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xea212efb, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x15850, dwReserved0=0x0, dwReserved1=0x0, cFileName="bootmgr.exe.mui", cAlternateFileName="BOOTMG~1.MUI")) returned 1 [0121.122] FindNextFileW (in: hFindFile=0x381cc0, lpFindFileData=0x31e5e4 | out: lpFindFileData=0x31e5e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xac0ad5c0, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac0ad5c0, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xea212efb, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x15850, dwReserved0=0x0, dwReserved1=0x0, cFileName="bootmgr.exe.mui", cAlternateFileName="BOOTMG~1.MUI")) returned 0 [0121.122] FindClose (in: hFindFile=0x381cc0 | out: hFindFile=0x381cc0) returned 1 [0121.122] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e86c) returned 1 [0121.122] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e878) returned 1 [0121.122] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e8ac) returned 1 [0121.122] GetFullPathNameW (in: lpFileName="C:\\Boot\\nl-NL", nBufferLength=0x105, lpBuffer=0x31e3b4, lpFilePart=0x0 | out: lpBuffer="C:\\Boot\\nl-NL", lpFilePart=0x0) returned 0xd [0121.122] GetFullPathNameW (in: lpFileName="C:\\Boot\\nl-NL\\", nBufferLength=0x105, lpBuffer=0x31e388, lpFilePart=0x0 | out: lpBuffer="C:\\Boot\\nl-NL\\", lpFilePart=0x0) returned 0xe [0121.122] FindFirstFileW (in: lpFileName="C:\\Boot\\nl-NL\\*", lpFindFileData=0x31e5d4 | out: lpFindFileData=0x31e5d4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac0ad5c0, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac0ad5c0, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xac0ad5c0, ftLastWriteTime.dwHighDateTime=0x1d2de32, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x381cc0 [0121.122] FindNextFileW (in: hFindFile=0x381cc0, lpFindFileData=0x31e5e4 | out: lpFindFileData=0x31e5e4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac0ad5c0, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac0ad5c0, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xac0ad5c0, ftLastWriteTime.dwHighDateTime=0x1d2de32, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0121.122] FindNextFileW (in: hFindFile=0x381cc0, lpFindFileData=0x31e5e4 | out: lpFindFileData=0x31e5e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xac0ad5c0, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac0ad5c0, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xe84c457e, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x16250, dwReserved0=0x0, dwReserved1=0x0, cFileName="bootmgr.exe.mui", cAlternateFileName="BOOTMG~1.MUI")) returned 1 [0121.122] FindNextFileW (in: hFindFile=0x381cc0, lpFindFileData=0x31e5e4 | out: lpFindFileData=0x31e5e4*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0121.123] FindClose (in: hFindFile=0x381cc0 | out: hFindFile=0x381cc0) returned 1 [0121.123] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e86c) returned 1 [0121.123] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e878) returned 1 [0121.123] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e8ac) returned 1 [0121.123] GetFullPathNameW (in: lpFileName="C:\\Boot\\nl-NL", nBufferLength=0x105, lpBuffer=0x31e3b4, lpFilePart=0x0 | out: lpBuffer="C:\\Boot\\nl-NL", lpFilePart=0x0) returned 0xd [0121.123] GetFullPathNameW (in: lpFileName="C:\\Boot\\nl-NL\\", nBufferLength=0x105, lpBuffer=0x31e388, lpFilePart=0x0 | out: lpBuffer="C:\\Boot\\nl-NL\\", lpFilePart=0x0) returned 0xe [0121.123] FindFirstFileW (in: lpFileName="C:\\Boot\\nl-NL\\*", lpFindFileData=0x31e5d4 | out: lpFindFileData=0x31e5d4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac0ad5c0, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac0ad5c0, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xac0ad5c0, ftLastWriteTime.dwHighDateTime=0x1d2de32, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x381cc0 [0121.123] FindNextFileW (in: hFindFile=0x381cc0, lpFindFileData=0x31e5e4 | out: lpFindFileData=0x31e5e4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac0ad5c0, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac0ad5c0, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xac0ad5c0, ftLastWriteTime.dwHighDateTime=0x1d2de32, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0121.123] FindNextFileW (in: hFindFile=0x381cc0, lpFindFileData=0x31e5e4 | out: lpFindFileData=0x31e5e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xac0ad5c0, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac0ad5c0, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xe84c457e, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x16250, dwReserved0=0x0, dwReserved1=0x0, cFileName="bootmgr.exe.mui", cAlternateFileName="BOOTMG~1.MUI")) returned 1 [0121.123] FindNextFileW (in: hFindFile=0x381cc0, lpFindFileData=0x31e5e4 | out: lpFindFileData=0x31e5e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xac0ad5c0, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac0ad5c0, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xe84c457e, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x16250, dwReserved0=0x0, dwReserved1=0x0, cFileName="bootmgr.exe.mui", cAlternateFileName="BOOTMG~1.MUI")) returned 0 [0121.123] FindClose (in: hFindFile=0x381cc0 | out: hFindFile=0x381cc0) returned 1 [0121.123] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e86c) returned 1 [0121.123] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e878) returned 1 [0121.123] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e8ac) returned 1 [0121.123] GetFullPathNameW (in: lpFileName="C:\\Boot\\pl-PL", nBufferLength=0x105, lpBuffer=0x31e3b4, lpFilePart=0x0 | out: lpBuffer="C:\\Boot\\pl-PL", lpFilePart=0x0) returned 0xd [0121.123] GetFullPathNameW (in: lpFileName="C:\\Boot\\pl-PL\\", nBufferLength=0x105, lpBuffer=0x31e388, lpFilePart=0x0 | out: lpBuffer="C:\\Boot\\pl-PL\\", lpFilePart=0x0) returned 0xe [0121.123] FindFirstFileW (in: lpFileName="C:\\Boot\\pl-PL\\*", lpFindFileData=0x31e5d4 | out: lpFindFileData=0x31e5d4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac0ad5c0, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac0ad5c0, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xac0ad5c0, ftLastWriteTime.dwHighDateTime=0x1d2de32, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x381cc0 [0121.124] FindNextFileW (in: hFindFile=0x381cc0, lpFindFileData=0x31e5e4 | out: lpFindFileData=0x31e5e4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac0ad5c0, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac0ad5c0, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xac0ad5c0, ftLastWriteTime.dwHighDateTime=0x1d2de32, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0121.124] FindNextFileW (in: hFindFile=0x381cc0, lpFindFileData=0x31e5e4 | out: lpFindFileData=0x31e5e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xac0ad5c0, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac0ad5c0, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xe9e5ad4a, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x16250, dwReserved0=0x0, dwReserved1=0x0, cFileName="bootmgr.exe.mui", cAlternateFileName="BOOTMG~1.MUI")) returned 1 [0121.124] FindNextFileW (in: hFindFile=0x381cc0, lpFindFileData=0x31e5e4 | out: lpFindFileData=0x31e5e4*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0121.124] FindClose (in: hFindFile=0x381cc0 | out: hFindFile=0x381cc0) returned 1 [0121.124] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e86c) returned 1 [0121.124] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e878) returned 1 [0121.124] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e8ac) returned 1 [0121.124] GetFullPathNameW (in: lpFileName="C:\\Boot\\pl-PL", nBufferLength=0x105, lpBuffer=0x31e3b4, lpFilePart=0x0 | out: lpBuffer="C:\\Boot\\pl-PL", lpFilePart=0x0) returned 0xd [0121.124] GetFullPathNameW (in: lpFileName="C:\\Boot\\pl-PL\\", nBufferLength=0x105, lpBuffer=0x31e388, lpFilePart=0x0 | out: lpBuffer="C:\\Boot\\pl-PL\\", lpFilePart=0x0) returned 0xe [0121.124] FindFirstFileW (in: lpFileName="C:\\Boot\\pl-PL\\*", lpFindFileData=0x31e5d4 | out: lpFindFileData=0x31e5d4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac0ad5c0, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac0ad5c0, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xac0ad5c0, ftLastWriteTime.dwHighDateTime=0x1d2de32, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x381cc0 [0121.124] FindNextFileW (in: hFindFile=0x381cc0, lpFindFileData=0x31e5e4 | out: lpFindFileData=0x31e5e4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac0ad5c0, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac0ad5c0, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xac0ad5c0, ftLastWriteTime.dwHighDateTime=0x1d2de32, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0121.124] FindNextFileW (in: hFindFile=0x381cc0, lpFindFileData=0x31e5e4 | out: lpFindFileData=0x31e5e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xac0ad5c0, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac0ad5c0, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xe9e5ad4a, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x16250, dwReserved0=0x0, dwReserved1=0x0, cFileName="bootmgr.exe.mui", cAlternateFileName="BOOTMG~1.MUI")) returned 1 [0121.124] FindNextFileW (in: hFindFile=0x381cc0, lpFindFileData=0x31e5e4 | out: lpFindFileData=0x31e5e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xac0ad5c0, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac0ad5c0, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xe9e5ad4a, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x16250, dwReserved0=0x0, dwReserved1=0x0, cFileName="bootmgr.exe.mui", cAlternateFileName="BOOTMG~1.MUI")) returned 0 [0121.124] FindClose (in: hFindFile=0x381cc0 | out: hFindFile=0x381cc0) returned 1 [0121.124] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e86c) returned 1 [0121.124] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e878) returned 1 [0121.124] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e8ac) returned 1 [0121.124] GetFullPathNameW (in: lpFileName="C:\\Boot\\pt-BR", nBufferLength=0x105, lpBuffer=0x31e3b4, lpFilePart=0x0 | out: lpBuffer="C:\\Boot\\pt-BR", lpFilePart=0x0) returned 0xd [0121.124] GetFullPathNameW (in: lpFileName="C:\\Boot\\pt-BR\\", nBufferLength=0x105, lpBuffer=0x31e388, lpFilePart=0x0 | out: lpBuffer="C:\\Boot\\pt-BR\\", lpFilePart=0x0) returned 0xe [0121.124] FindFirstFileW (in: lpFileName="C:\\Boot\\pt-BR\\*", lpFindFileData=0x31e5d4 | out: lpFindFileData=0x31e5d4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac0ad5c0, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac0ad5c0, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xac0ad5c0, ftLastWriteTime.dwHighDateTime=0x1d2de32, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x381cc0 [0121.125] FindNextFileW (in: hFindFile=0x381cc0, lpFindFileData=0x31e5e4 | out: lpFindFileData=0x31e5e4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac0ad5c0, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac0ad5c0, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xac0ad5c0, ftLastWriteTime.dwHighDateTime=0x1d2de32, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0121.125] FindNextFileW (in: hFindFile=0x381cc0, lpFindFileData=0x31e5e4 | out: lpFindFileData=0x31e5e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xac0ad5c0, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac0ad5c0, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xe83b9c0f, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x16040, dwReserved0=0x0, dwReserved1=0x0, cFileName="bootmgr.exe.mui", cAlternateFileName="BOOTMG~1.MUI")) returned 1 [0121.125] FindNextFileW (in: hFindFile=0x381cc0, lpFindFileData=0x31e5e4 | out: lpFindFileData=0x31e5e4*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0121.125] FindClose (in: hFindFile=0x381cc0 | out: hFindFile=0x381cc0) returned 1 [0121.125] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e86c) returned 1 [0121.125] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e878) returned 1 [0121.125] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e8ac) returned 1 [0121.125] GetFullPathNameW (in: lpFileName="C:\\Boot\\pt-BR", nBufferLength=0x105, lpBuffer=0x31e3b4, lpFilePart=0x0 | out: lpBuffer="C:\\Boot\\pt-BR", lpFilePart=0x0) returned 0xd [0121.125] GetFullPathNameW (in: lpFileName="C:\\Boot\\pt-BR\\", nBufferLength=0x105, lpBuffer=0x31e388, lpFilePart=0x0 | out: lpBuffer="C:\\Boot\\pt-BR\\", lpFilePart=0x0) returned 0xe [0121.125] FindFirstFileW (in: lpFileName="C:\\Boot\\pt-BR\\*", lpFindFileData=0x31e5d4 | out: lpFindFileData=0x31e5d4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac0ad5c0, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac0ad5c0, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xac0ad5c0, ftLastWriteTime.dwHighDateTime=0x1d2de32, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x381cc0 [0121.125] FindNextFileW (in: hFindFile=0x381cc0, lpFindFileData=0x31e5e4 | out: lpFindFileData=0x31e5e4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac0ad5c0, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac0ad5c0, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xac0ad5c0, ftLastWriteTime.dwHighDateTime=0x1d2de32, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0121.125] FindNextFileW (in: hFindFile=0x381cc0, lpFindFileData=0x31e5e4 | out: lpFindFileData=0x31e5e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xac0ad5c0, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac0ad5c0, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xe83b9c0f, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x16040, dwReserved0=0x0, dwReserved1=0x0, cFileName="bootmgr.exe.mui", cAlternateFileName="BOOTMG~1.MUI")) returned 1 [0121.125] FindNextFileW (in: hFindFile=0x381cc0, lpFindFileData=0x31e5e4 | out: lpFindFileData=0x31e5e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xac0ad5c0, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac0ad5c0, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xe83b9c0f, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x16040, dwReserved0=0x0, dwReserved1=0x0, cFileName="bootmgr.exe.mui", cAlternateFileName="BOOTMG~1.MUI")) returned 0 [0121.125] FindClose (in: hFindFile=0x381cc0 | out: hFindFile=0x381cc0) returned 1 [0121.125] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e86c) returned 1 [0121.125] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e878) returned 1 [0121.125] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e8ac) returned 1 [0121.125] GetFullPathNameW (in: lpFileName="C:\\Boot\\pt-PT", nBufferLength=0x105, lpBuffer=0x31e3b4, lpFilePart=0x0 | out: lpBuffer="C:\\Boot\\pt-PT", lpFilePart=0x0) returned 0xd [0121.125] GetFullPathNameW (in: lpFileName="C:\\Boot\\pt-PT\\", nBufferLength=0x105, lpBuffer=0x31e388, lpFilePart=0x0 | out: lpBuffer="C:\\Boot\\pt-PT\\", lpFilePart=0x0) returned 0xe [0121.125] FindFirstFileW (in: lpFileName="C:\\Boot\\pt-PT\\*", lpFindFileData=0x31e5d4 | out: lpFindFileData=0x31e5d4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac0d3720, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac0d3720, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xac0d3720, ftLastWriteTime.dwHighDateTime=0x1d2de32, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x381cc0 [0121.126] FindNextFileW (in: hFindFile=0x381cc0, lpFindFileData=0x31e5e4 | out: lpFindFileData=0x31e5e4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac0d3720, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac0d3720, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xac0d3720, ftLastWriteTime.dwHighDateTime=0x1d2de32, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0121.126] FindNextFileW (in: hFindFile=0x381cc0, lpFindFileData=0x31e5e4 | out: lpFindFileData=0x31e5e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xac0d3720, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac0d3720, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xe823ce95, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x15e40, dwReserved0=0x0, dwReserved1=0x0, cFileName="bootmgr.exe.mui", cAlternateFileName="BOOTMG~1.MUI")) returned 1 [0121.126] FindNextFileW (in: hFindFile=0x381cc0, lpFindFileData=0x31e5e4 | out: lpFindFileData=0x31e5e4*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0121.126] FindClose (in: hFindFile=0x381cc0 | out: hFindFile=0x381cc0) returned 1 [0121.126] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e86c) returned 1 [0121.126] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e878) returned 1 [0121.126] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e8ac) returned 1 [0121.126] GetFullPathNameW (in: lpFileName="C:\\Boot\\pt-PT", nBufferLength=0x105, lpBuffer=0x31e3b4, lpFilePart=0x0 | out: lpBuffer="C:\\Boot\\pt-PT", lpFilePart=0x0) returned 0xd [0121.126] GetFullPathNameW (in: lpFileName="C:\\Boot\\pt-PT\\", nBufferLength=0x105, lpBuffer=0x31e388, lpFilePart=0x0 | out: lpBuffer="C:\\Boot\\pt-PT\\", lpFilePart=0x0) returned 0xe [0121.126] FindFirstFileW (in: lpFileName="C:\\Boot\\pt-PT\\*", lpFindFileData=0x31e5d4 | out: lpFindFileData=0x31e5d4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac0d3720, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac0d3720, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xac0d3720, ftLastWriteTime.dwHighDateTime=0x1d2de32, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x381cc0 [0121.126] FindNextFileW (in: hFindFile=0x381cc0, lpFindFileData=0x31e5e4 | out: lpFindFileData=0x31e5e4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac0d3720, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac0d3720, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xac0d3720, ftLastWriteTime.dwHighDateTime=0x1d2de32, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0121.126] FindNextFileW (in: hFindFile=0x381cc0, lpFindFileData=0x31e5e4 | out: lpFindFileData=0x31e5e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xac0d3720, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac0d3720, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xe823ce95, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x15e40, dwReserved0=0x0, dwReserved1=0x0, cFileName="bootmgr.exe.mui", cAlternateFileName="BOOTMG~1.MUI")) returned 1 [0121.126] FindNextFileW (in: hFindFile=0x381cc0, lpFindFileData=0x31e5e4 | out: lpFindFileData=0x31e5e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xac0d3720, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac0d3720, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xe823ce95, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x15e40, dwReserved0=0x0, dwReserved1=0x0, cFileName="bootmgr.exe.mui", cAlternateFileName="BOOTMG~1.MUI")) returned 0 [0121.126] FindClose (in: hFindFile=0x381cc0 | out: hFindFile=0x381cc0) returned 1 [0121.126] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e86c) returned 1 [0121.126] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e878) returned 1 [0121.126] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e8ac) returned 1 [0121.127] GetFullPathNameW (in: lpFileName="C:\\Boot\\ru-RU", nBufferLength=0x105, lpBuffer=0x31e3b4, lpFilePart=0x0 | out: lpBuffer="C:\\Boot\\ru-RU", lpFilePart=0x0) returned 0xd [0121.127] GetFullPathNameW (in: lpFileName="C:\\Boot\\ru-RU\\", nBufferLength=0x105, lpBuffer=0x31e388, lpFilePart=0x0 | out: lpBuffer="C:\\Boot\\ru-RU\\", lpFilePart=0x0) returned 0xe [0121.127] FindFirstFileW (in: lpFileName="C:\\Boot\\ru-RU\\*", lpFindFileData=0x31e5d4 | out: lpFindFileData=0x31e5d4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac0d3720, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac0d3720, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xac0d3720, ftLastWriteTime.dwHighDateTime=0x1d2de32, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x381cc0 [0121.127] FindNextFileW (in: hFindFile=0x381cc0, lpFindFileData=0x31e5e4 | out: lpFindFileData=0x31e5e4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac0d3720, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac0d3720, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xac0d3720, ftLastWriteTime.dwHighDateTime=0x1d2de32, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0121.127] FindNextFileW (in: hFindFile=0x381cc0, lpFindFileData=0x31e5e4 | out: lpFindFileData=0x31e5e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xac0d3720, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac0d3720, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xe88a2888, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x16050, dwReserved0=0x0, dwReserved1=0x0, cFileName="bootmgr.exe.mui", cAlternateFileName="BOOTMG~1.MUI")) returned 1 [0121.127] FindNextFileW (in: hFindFile=0x381cc0, lpFindFileData=0x31e5e4 | out: lpFindFileData=0x31e5e4*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0121.127] FindClose (in: hFindFile=0x381cc0 | out: hFindFile=0x381cc0) returned 1 [0121.127] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e86c) returned 1 [0121.127] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e878) returned 1 [0121.127] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e8ac) returned 1 [0121.127] GetFullPathNameW (in: lpFileName="C:\\Boot\\ru-RU", nBufferLength=0x105, lpBuffer=0x31e3b4, lpFilePart=0x0 | out: lpBuffer="C:\\Boot\\ru-RU", lpFilePart=0x0) returned 0xd [0121.127] GetFullPathNameW (in: lpFileName="C:\\Boot\\ru-RU\\", nBufferLength=0x105, lpBuffer=0x31e388, lpFilePart=0x0 | out: lpBuffer="C:\\Boot\\ru-RU\\", lpFilePart=0x0) returned 0xe [0121.127] FindFirstFileW (in: lpFileName="C:\\Boot\\ru-RU\\*", lpFindFileData=0x31e5d4 | out: lpFindFileData=0x31e5d4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac0d3720, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac0d3720, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xac0d3720, ftLastWriteTime.dwHighDateTime=0x1d2de32, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x381cc0 [0121.127] FindNextFileW (in: hFindFile=0x381cc0, lpFindFileData=0x31e5e4 | out: lpFindFileData=0x31e5e4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac0d3720, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac0d3720, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xac0d3720, ftLastWriteTime.dwHighDateTime=0x1d2de32, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0121.127] FindNextFileW (in: hFindFile=0x381cc0, lpFindFileData=0x31e5e4 | out: lpFindFileData=0x31e5e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xac0d3720, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac0d3720, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xe88a2888, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x16050, dwReserved0=0x0, dwReserved1=0x0, cFileName="bootmgr.exe.mui", cAlternateFileName="BOOTMG~1.MUI")) returned 1 [0121.127] FindNextFileW (in: hFindFile=0x381cc0, lpFindFileData=0x31e5e4 | out: lpFindFileData=0x31e5e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xac0d3720, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac0d3720, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xe88a2888, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x16050, dwReserved0=0x0, dwReserved1=0x0, cFileName="bootmgr.exe.mui", cAlternateFileName="BOOTMG~1.MUI")) returned 0 [0121.127] FindClose (in: hFindFile=0x381cc0 | out: hFindFile=0x381cc0) returned 1 [0121.128] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e86c) returned 1 [0121.128] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e878) returned 1 [0121.128] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e8ac) returned 1 [0121.128] GetFullPathNameW (in: lpFileName="C:\\Boot\\sv-SE", nBufferLength=0x105, lpBuffer=0x31e3b4, lpFilePart=0x0 | out: lpBuffer="C:\\Boot\\sv-SE", lpFilePart=0x0) returned 0xd [0121.128] GetFullPathNameW (in: lpFileName="C:\\Boot\\sv-SE\\", nBufferLength=0x105, lpBuffer=0x31e388, lpFilePart=0x0 | out: lpBuffer="C:\\Boot\\sv-SE\\", lpFilePart=0x0) returned 0xe [0121.128] FindFirstFileW (in: lpFileName="C:\\Boot\\sv-SE\\*", lpFindFileData=0x31e5d4 | out: lpFindFileData=0x31e5d4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac0d3720, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac0d3720, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xac0d3720, ftLastWriteTime.dwHighDateTime=0x1d2de32, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x381cc0 [0121.128] FindNextFileW (in: hFindFile=0x381cc0, lpFindFileData=0x31e5e4 | out: lpFindFileData=0x31e5e4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac0d3720, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac0d3720, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xac0d3720, ftLastWriteTime.dwHighDateTime=0x1d2de32, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0121.128] FindNextFileW (in: hFindFile=0x381cc0, lpFindFileData=0x31e5e4 | out: lpFindFileData=0x31e5e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xac0d3720, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac0d3720, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xe868d5aa, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x15640, dwReserved0=0x0, dwReserved1=0x0, cFileName="bootmgr.exe.mui", cAlternateFileName="BOOTMG~1.MUI")) returned 1 [0121.128] FindNextFileW (in: hFindFile=0x381cc0, lpFindFileData=0x31e5e4 | out: lpFindFileData=0x31e5e4*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0121.128] FindClose (in: hFindFile=0x381cc0 | out: hFindFile=0x381cc0) returned 1 [0121.128] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e86c) returned 1 [0121.128] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e878) returned 1 [0121.128] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e8ac) returned 1 [0121.128] GetFullPathNameW (in: lpFileName="C:\\Boot\\sv-SE", nBufferLength=0x105, lpBuffer=0x31e3b4, lpFilePart=0x0 | out: lpBuffer="C:\\Boot\\sv-SE", lpFilePart=0x0) returned 0xd [0121.128] GetFullPathNameW (in: lpFileName="C:\\Boot\\sv-SE\\", nBufferLength=0x105, lpBuffer=0x31e388, lpFilePart=0x0 | out: lpBuffer="C:\\Boot\\sv-SE\\", lpFilePart=0x0) returned 0xe [0121.128] FindFirstFileW (in: lpFileName="C:\\Boot\\sv-SE\\*", lpFindFileData=0x31e5d4 | out: lpFindFileData=0x31e5d4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac0d3720, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac0d3720, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xac0d3720, ftLastWriteTime.dwHighDateTime=0x1d2de32, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x381cc0 [0121.128] FindNextFileW (in: hFindFile=0x381cc0, lpFindFileData=0x31e5e4 | out: lpFindFileData=0x31e5e4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac0d3720, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac0d3720, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xac0d3720, ftLastWriteTime.dwHighDateTime=0x1d2de32, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0121.128] FindNextFileW (in: hFindFile=0x381cc0, lpFindFileData=0x31e5e4 | out: lpFindFileData=0x31e5e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xac0d3720, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac0d3720, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xe868d5aa, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x15640, dwReserved0=0x0, dwReserved1=0x0, cFileName="bootmgr.exe.mui", cAlternateFileName="BOOTMG~1.MUI")) returned 1 [0121.128] FindNextFileW (in: hFindFile=0x381cc0, lpFindFileData=0x31e5e4 | out: lpFindFileData=0x31e5e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xac0d3720, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac0d3720, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xe868d5aa, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x15640, dwReserved0=0x0, dwReserved1=0x0, cFileName="bootmgr.exe.mui", cAlternateFileName="BOOTMG~1.MUI")) returned 0 [0121.128] FindClose (in: hFindFile=0x381cc0 | out: hFindFile=0x381cc0) returned 1 [0121.129] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e86c) returned 1 [0121.129] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e878) returned 1 [0121.129] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e8ac) returned 1 [0121.129] GetFullPathNameW (in: lpFileName="C:\\Boot\\tr-TR", nBufferLength=0x105, lpBuffer=0x31e3b4, lpFilePart=0x0 | out: lpBuffer="C:\\Boot\\tr-TR", lpFilePart=0x0) returned 0xd [0121.129] GetFullPathNameW (in: lpFileName="C:\\Boot\\tr-TR\\", nBufferLength=0x105, lpBuffer=0x31e388, lpFilePart=0x0 | out: lpBuffer="C:\\Boot\\tr-TR\\", lpFilePart=0x0) returned 0xe [0121.129] FindFirstFileW (in: lpFileName="C:\\Boot\\tr-TR\\*", lpFindFileData=0x31e5d4 | out: lpFindFileData=0x31e5d4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac0d3720, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac0d3720, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xac0d3720, ftLastWriteTime.dwHighDateTime=0x1d2de32, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x381cc0 [0121.129] FindNextFileW (in: hFindFile=0x381cc0, lpFindFileData=0x31e5e4 | out: lpFindFileData=0x31e5e4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac0d3720, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac0d3720, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xac0d3720, ftLastWriteTime.dwHighDateTime=0x1d2de32, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0121.129] FindNextFileW (in: hFindFile=0x381cc0, lpFindFileData=0x31e5e4 | out: lpFindFileData=0x31e5e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xac0d3720, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac0d3720, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xe8393ab6, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x15440, dwReserved0=0x0, dwReserved1=0x0, cFileName="bootmgr.exe.mui", cAlternateFileName="BOOTMG~1.MUI")) returned 1 [0121.129] FindNextFileW (in: hFindFile=0x381cc0, lpFindFileData=0x31e5e4 | out: lpFindFileData=0x31e5e4*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0121.129] FindClose (in: hFindFile=0x381cc0 | out: hFindFile=0x381cc0) returned 1 [0121.129] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e86c) returned 1 [0121.129] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e878) returned 1 [0121.129] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e8ac) returned 1 [0121.129] GetFullPathNameW (in: lpFileName="C:\\Boot\\tr-TR", nBufferLength=0x105, lpBuffer=0x31e3b4, lpFilePart=0x0 | out: lpBuffer="C:\\Boot\\tr-TR", lpFilePart=0x0) returned 0xd [0121.129] GetFullPathNameW (in: lpFileName="C:\\Boot\\tr-TR\\", nBufferLength=0x105, lpBuffer=0x31e388, lpFilePart=0x0 | out: lpBuffer="C:\\Boot\\tr-TR\\", lpFilePart=0x0) returned 0xe [0121.129] FindFirstFileW (in: lpFileName="C:\\Boot\\tr-TR\\*", lpFindFileData=0x31e5d4 | out: lpFindFileData=0x31e5d4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac0d3720, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac0d3720, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xac0d3720, ftLastWriteTime.dwHighDateTime=0x1d2de32, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x381cc0 [0121.129] FindNextFileW (in: hFindFile=0x381cc0, lpFindFileData=0x31e5e4 | out: lpFindFileData=0x31e5e4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac0d3720, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac0d3720, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xac0d3720, ftLastWriteTime.dwHighDateTime=0x1d2de32, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0121.129] FindNextFileW (in: hFindFile=0x381cc0, lpFindFileData=0x31e5e4 | out: lpFindFileData=0x31e5e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xac0d3720, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac0d3720, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xe8393ab6, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x15440, dwReserved0=0x0, dwReserved1=0x0, cFileName="bootmgr.exe.mui", cAlternateFileName="BOOTMG~1.MUI")) returned 1 [0121.129] FindNextFileW (in: hFindFile=0x381cc0, lpFindFileData=0x31e5e4 | out: lpFindFileData=0x31e5e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xac0d3720, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac0d3720, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xe8393ab6, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x15440, dwReserved0=0x0, dwReserved1=0x0, cFileName="bootmgr.exe.mui", cAlternateFileName="BOOTMG~1.MUI")) returned 0 [0121.129] FindClose (in: hFindFile=0x381cc0 | out: hFindFile=0x381cc0) returned 1 [0121.130] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e86c) returned 1 [0121.130] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e878) returned 1 [0121.130] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e8ac) returned 1 [0121.130] GetFullPathNameW (in: lpFileName="C:\\Boot\\zh-CN", nBufferLength=0x105, lpBuffer=0x31e3b4, lpFilePart=0x0 | out: lpBuffer="C:\\Boot\\zh-CN", lpFilePart=0x0) returned 0xd [0121.130] GetFullPathNameW (in: lpFileName="C:\\Boot\\zh-CN\\", nBufferLength=0x105, lpBuffer=0x31e388, lpFilePart=0x0 | out: lpBuffer="C:\\Boot\\zh-CN\\", lpFilePart=0x0) returned 0xe [0121.130] FindFirstFileW (in: lpFileName="C:\\Boot\\zh-CN\\*", lpFindFileData=0x31e5d4 | out: lpFindFileData=0x31e5d4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac0d3720, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac0d3720, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xac0d3720, ftLastWriteTime.dwHighDateTime=0x1d2de32, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x381cc0 [0121.130] FindNextFileW (in: hFindFile=0x381cc0, lpFindFileData=0x31e5e4 | out: lpFindFileData=0x31e5e4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac0d3720, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac0d3720, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xac0d3720, ftLastWriteTime.dwHighDateTime=0x1d2de32, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0121.130] FindNextFileW (in: hFindFile=0x381cc0, lpFindFileData=0x31e5e4 | out: lpFindFileData=0x31e5e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xac0d3720, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac0d3720, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xe8725b0e, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x11440, dwReserved0=0x0, dwReserved1=0x0, cFileName="bootmgr.exe.mui", cAlternateFileName="BOOTMG~1.MUI")) returned 1 [0121.130] FindNextFileW (in: hFindFile=0x381cc0, lpFindFileData=0x31e5e4 | out: lpFindFileData=0x31e5e4*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0121.130] FindClose (in: hFindFile=0x381cc0 | out: hFindFile=0x381cc0) returned 1 [0121.130] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e86c) returned 1 [0121.130] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e878) returned 1 [0121.130] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e8ac) returned 1 [0121.130] GetFullPathNameW (in: lpFileName="C:\\Boot\\zh-CN", nBufferLength=0x105, lpBuffer=0x31e3b4, lpFilePart=0x0 | out: lpBuffer="C:\\Boot\\zh-CN", lpFilePart=0x0) returned 0xd [0121.130] GetFullPathNameW (in: lpFileName="C:\\Boot\\zh-CN\\", nBufferLength=0x105, lpBuffer=0x31e388, lpFilePart=0x0 | out: lpBuffer="C:\\Boot\\zh-CN\\", lpFilePart=0x0) returned 0xe [0121.130] FindFirstFileW (in: lpFileName="C:\\Boot\\zh-CN\\*", lpFindFileData=0x31e5d4 | out: lpFindFileData=0x31e5d4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac0d3720, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac0d3720, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xac0d3720, ftLastWriteTime.dwHighDateTime=0x1d2de32, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x381cc0 [0121.131] FindClose (in: hFindFile=0x381cc0 | out: hFindFile=0x381cc0) returned 1 [0121.131] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e86c) returned 1 [0121.131] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e878) returned 1 [0121.131] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e8ac) returned 1 [0121.131] GetFullPathNameW (in: lpFileName="C:\\Boot\\zh-HK", nBufferLength=0x105, lpBuffer=0x31e3b4, lpFilePart=0x0 | out: lpBuffer="C:\\Boot\\zh-HK", lpFilePart=0x0) returned 0xd [0121.131] GetFullPathNameW (in: lpFileName="C:\\Boot\\zh-HK\\", nBufferLength=0x105, lpBuffer=0x31e388, lpFilePart=0x0 | out: lpBuffer="C:\\Boot\\zh-HK\\", lpFilePart=0x0) returned 0xe [0121.131] FindFirstFileW (in: lpFileName="C:\\Boot\\zh-HK\\*", lpFindFileData=0x31e5d4 | out: lpFindFileData=0x31e5d4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac0f9880, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac0f9880, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xac0f9880, ftLastWriteTime.dwHighDateTime=0x1d2de32, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x381cc0 [0121.132] FindClose (in: hFindFile=0x381cc0 | out: hFindFile=0x381cc0) returned 1 [0121.132] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e86c) returned 1 [0121.132] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e878) returned 1 [0121.132] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e8ac) returned 1 [0121.132] GetFullPathNameW (in: lpFileName="C:\\Boot\\zh-HK", nBufferLength=0x105, lpBuffer=0x31e3b4, lpFilePart=0x0 | out: lpBuffer="C:\\Boot\\zh-HK", lpFilePart=0x0) returned 0xd [0121.132] GetFullPathNameW (in: lpFileName="C:\\Boot\\zh-HK\\", nBufferLength=0x105, lpBuffer=0x31e388, lpFilePart=0x0 | out: lpBuffer="C:\\Boot\\zh-HK\\", lpFilePart=0x0) returned 0xe [0121.132] FindFirstFileW (in: lpFileName="C:\\Boot\\zh-HK\\*", lpFindFileData=0x31e5d4 | out: lpFindFileData=0x31e5d4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac0f9880, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac0f9880, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xac0f9880, ftLastWriteTime.dwHighDateTime=0x1d2de32, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x381cc0 [0121.132] FindClose (in: hFindFile=0x381cc0 | out: hFindFile=0x381cc0) returned 1 [0121.132] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e86c) returned 1 [0121.132] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e878) returned 1 [0121.132] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e8ac) returned 1 [0121.132] GetFullPathNameW (in: lpFileName="C:\\Boot\\zh-TW", nBufferLength=0x105, lpBuffer=0x31e3b4, lpFilePart=0x0 | out: lpBuffer="C:\\Boot\\zh-TW", lpFilePart=0x0) returned 0xd [0121.132] GetFullPathNameW (in: lpFileName="C:\\Boot\\zh-TW\\", nBufferLength=0x105, lpBuffer=0x31e388, lpFilePart=0x0 | out: lpBuffer="C:\\Boot\\zh-TW\\", lpFilePart=0x0) returned 0xe [0121.132] FindFirstFileW (in: lpFileName="C:\\Boot\\zh-TW\\*", lpFindFileData=0x31e5d4 | out: lpFindFileData=0x31e5d4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac0f9880, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac0f9880, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xac0f9880, ftLastWriteTime.dwHighDateTime=0x1d2de32, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x381cc0 [0121.132] FindClose (in: hFindFile=0x381cc0 | out: hFindFile=0x381cc0) returned 1 [0121.132] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e86c) returned 1 [0121.133] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e878) returned 1 [0121.133] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e8ac) returned 1 [0121.133] GetFullPathNameW (in: lpFileName="C:\\Boot\\zh-TW", nBufferLength=0x105, lpBuffer=0x31e3b4, lpFilePart=0x0 | out: lpBuffer="C:\\Boot\\zh-TW", lpFilePart=0x0) returned 0xd [0121.133] GetFullPathNameW (in: lpFileName="C:\\Boot\\zh-TW\\", nBufferLength=0x105, lpBuffer=0x31e388, lpFilePart=0x0 | out: lpBuffer="C:\\Boot\\zh-TW\\", lpFilePart=0x0) returned 0xe [0121.133] FindFirstFileW (in: lpFileName="C:\\Boot\\zh-TW\\*", lpFindFileData=0x31e5d4 | out: lpFindFileData=0x31e5d4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac0f9880, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac0f9880, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xac0f9880, ftLastWriteTime.dwHighDateTime=0x1d2de32, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x381cc0 [0121.133] FindClose (in: hFindFile=0x381cc0 | out: hFindFile=0x381cc0) returned 1 [0121.133] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e86c) returned 1 [0121.133] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e878) returned 1 [0121.133] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e924) returned 1 [0121.133] GetFullPathNameW (in: lpFileName="C:\\Config.Msi", nBufferLength=0x105, lpBuffer=0x31e42c, lpFilePart=0x0 | out: lpBuffer="C:\\Config.Msi", lpFilePart=0x0) returned 0xd [0121.133] GetFullPathNameW (in: lpFileName="C:\\Config.Msi\\", nBufferLength=0x105, lpBuffer=0x31e400, lpFilePart=0x0 | out: lpBuffer="C:\\Config.Msi\\", lpFilePart=0x0) returned 0xe [0121.133] FindFirstFileW (in: lpFileName="C:\\Config.Msi\\*", lpFindFileData=0x31e64c | out: lpFindFileData=0x31e64c*(dwFileAttributes=0x16, ftCreationTime.dwLowDateTime=0xcd4f5c20, ftCreationTime.dwHighDateTime=0x1d305eb, ftLastAccessTime.dwLowDateTime=0xc182c7c0, ftLastAccessTime.dwHighDateTime=0x1d3373b, ftLastWriteTime.dwLowDateTime=0xc182c7c0, ftLastWriteTime.dwHighDateTime=0x1d3373b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x381cc0 [0121.133] FindClose (in: hFindFile=0x381cc0 | out: hFindFile=0x381cc0) returned 1 [0121.137] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e8e4) returned 1 [0121.137] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e8f0) returned 1 [0121.137] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e924) returned 1 [0121.137] GetFullPathNameW (in: lpFileName="C:\\Config.Msi", nBufferLength=0x105, lpBuffer=0x31e42c, lpFilePart=0x0 | out: lpBuffer="C:\\Config.Msi", lpFilePart=0x0) returned 0xd [0121.137] GetFullPathNameW (in: lpFileName="C:\\Config.Msi\\", nBufferLength=0x105, lpBuffer=0x31e400, lpFilePart=0x0 | out: lpBuffer="C:\\Config.Msi\\", lpFilePart=0x0) returned 0xe [0121.137] FindFirstFileW (in: lpFileName="C:\\Config.Msi\\*", lpFindFileData=0x31e64c | out: lpFindFileData=0x31e64c*(dwFileAttributes=0x16, ftCreationTime.dwLowDateTime=0xcd4f5c20, ftCreationTime.dwHighDateTime=0x1d305eb, ftLastAccessTime.dwLowDateTime=0xc182c7c0, ftLastAccessTime.dwHighDateTime=0x1d3373b, ftLastWriteTime.dwLowDateTime=0xc182c7c0, ftLastWriteTime.dwHighDateTime=0x1d3373b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x381cc0 [0121.137] FindClose (in: hFindFile=0x381cc0 | out: hFindFile=0x381cc0) returned 1 [0121.137] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e8e4) returned 1 [0121.137] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e8f0) returned 1 [0121.137] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e924) returned 1 [0121.137] GetFullPathNameW (in: lpFileName="C:\\Documents and Settings", nBufferLength=0x105, lpBuffer=0x31e42c, lpFilePart=0x0 | out: lpBuffer="C:\\Documents and Settings", lpFilePart=0x0) returned 0x19 [0121.137] GetFullPathNameW (in: lpFileName="C:\\Documents and Settings\\", nBufferLength=0x105, lpBuffer=0x31e400, lpFilePart=0x0 | out: lpBuffer="C:\\Documents and Settings\\", lpFilePart=0x0) returned 0x1a [0121.137] FindFirstFileW (in: lpFileName="C:\\Documents and Settings\\*", lpFindFileData=0x31e64c | out: lpFindFileData=0x31e64c*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0121.138] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e8e8) returned 1 [0121.139] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e924) returned 1 [0121.139] GetFullPathNameW (in: lpFileName="C:\\MSOCache", nBufferLength=0x105, lpBuffer=0x31e42c, lpFilePart=0x0 | out: lpBuffer="C:\\MSOCache", lpFilePart=0x0) returned 0xb [0121.139] GetFullPathNameW (in: lpFileName="C:\\MSOCache\\", nBufferLength=0x105, lpBuffer=0x31e400, lpFilePart=0x0 | out: lpBuffer="C:\\MSOCache\\", lpFilePart=0x0) returned 0xc [0121.139] FindFirstFileW (in: lpFileName="C:\\MSOCache\\*", lpFindFileData=0x31e64c | out: lpFindFileData=0x31e64c*(dwFileAttributes=0x2013, ftCreationTime.dwLowDateTime=0xe7b42810, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xe7b42810, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xe7b42810, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x381cc0 [0121.139] FindClose (in: hFindFile=0x381cc0 | out: hFindFile=0x381cc0) returned 1 [0121.139] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e8e4) returned 1 [0121.139] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e8f0) returned 1 [0121.139] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e924) returned 1 [0121.139] GetFullPathNameW (in: lpFileName="C:\\MSOCache", nBufferLength=0x105, lpBuffer=0x31e42c, lpFilePart=0x0 | out: lpBuffer="C:\\MSOCache", lpFilePart=0x0) returned 0xb [0121.139] GetFullPathNameW (in: lpFileName="C:\\MSOCache\\", nBufferLength=0x105, lpBuffer=0x31e400, lpFilePart=0x0 | out: lpBuffer="C:\\MSOCache\\", lpFilePart=0x0) returned 0xc [0121.139] FindFirstFileW (in: lpFileName="C:\\MSOCache\\*", lpFindFileData=0x31e64c | out: lpFindFileData=0x31e64c*(dwFileAttributes=0x2013, ftCreationTime.dwLowDateTime=0xe7b42810, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xe7b42810, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xe7b42810, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x381cc0 [0121.139] FindClose (in: hFindFile=0x381cc0 | out: hFindFile=0x381cc0) returned 1 [0121.139] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e8e4) returned 1 [0121.139] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e8f0) returned 1 [0121.139] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e8ac) returned 1 [0121.139] GetFullPathNameW (in: lpFileName="C:\\MSOCache\\All Users", nBufferLength=0x105, lpBuffer=0x31e3b4, lpFilePart=0x0 | out: lpBuffer="C:\\MSOCache\\All Users", lpFilePart=0x0) returned 0x15 [0121.140] GetFullPathNameW (in: lpFileName="C:\\MSOCache\\All Users\\", nBufferLength=0x105, lpBuffer=0x31e388, lpFilePart=0x0 | out: lpBuffer="C:\\MSOCache\\All Users\\", lpFilePart=0x0) returned 0x16 [0121.140] FindFirstFileW (in: lpFileName="C:\\MSOCache\\All Users\\*", lpFindFileData=0x31e5d4 | out: lpFindFileData=0x31e5d4*(dwFileAttributes=0x2011, ftCreationTime.dwLowDateTime=0xe7b42810, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xa5cd3a40, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0xa5cd3a40, ftLastWriteTime.dwHighDateTime=0x1d305f1, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x381cc0 [0121.140] FindClose (in: hFindFile=0x381cc0 | out: hFindFile=0x381cc0) returned 1 [0121.140] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e86c) returned 1 [0121.140] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e878) returned 1 [0121.140] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e8ac) returned 1 [0121.140] GetFullPathNameW (in: lpFileName="C:\\MSOCache\\All Users", nBufferLength=0x105, lpBuffer=0x31e3b4, lpFilePart=0x0 | out: lpBuffer="C:\\MSOCache\\All Users", lpFilePart=0x0) returned 0x15 [0121.140] GetFullPathNameW (in: lpFileName="C:\\MSOCache\\All Users\\", nBufferLength=0x105, lpBuffer=0x31e388, lpFilePart=0x0 | out: lpBuffer="C:\\MSOCache\\All Users\\", lpFilePart=0x0) returned 0x16 [0121.140] FindFirstFileW (in: lpFileName="C:\\MSOCache\\All Users\\*", lpFindFileData=0x31e5d4 | out: lpFindFileData=0x31e5d4*(dwFileAttributes=0x2011, ftCreationTime.dwLowDateTime=0xe7b42810, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xa5cd3a40, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0xa5cd3a40, ftLastWriteTime.dwHighDateTime=0x1d305f1, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x381cc0 [0121.140] FindClose (in: hFindFile=0x381cc0 | out: hFindFile=0x381cc0) returned 1 [0121.140] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e86c) returned 1 [0121.140] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e878) returned 1 [0121.140] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e834) returned 1 [0121.141] GetFullPathNameW (in: lpFileName="C:\\MSOCache\\All Users\\{90140000-0016-0409-1000-0000000FF1CE}-C", nBufferLength=0x105, lpBuffer=0x31e33c, lpFilePart=0x0 | out: lpBuffer="C:\\MSOCache\\All Users\\{90140000-0016-0409-1000-0000000FF1CE}-C", lpFilePart=0x0) returned 0x3e [0121.141] GetFullPathNameW (in: lpFileName="C:\\MSOCache\\All Users\\{90140000-0016-0409-1000-0000000FF1CE}-C\\", nBufferLength=0x105, lpBuffer=0x31e310, lpFilePart=0x0 | out: lpBuffer="C:\\MSOCache\\All Users\\{90140000-0016-0409-1000-0000000FF1CE}-C\\", lpFilePart=0x0) returned 0x3f [0121.141] FindFirstFileW (in: lpFileName="C:\\MSOCache\\All Users\\{90140000-0016-0409-1000-0000000FF1CE}-C\\*", lpFindFileData=0x31e55c | out: lpFindFileData=0x31e55c*(dwFileAttributes=0x2011, ftCreationTime.dwLowDateTime=0xecdfa490, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xee38cbf0, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xee38cbf0, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x381cc0 [0121.141] FindClose (in: hFindFile=0x381cc0 | out: hFindFile=0x381cc0) returned 1 [0121.141] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e7f4) returned 1 [0121.141] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e800) returned 1 [0121.141] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e834) returned 1 [0121.141] GetFullPathNameW (in: lpFileName="C:\\MSOCache\\All Users\\{90140000-0016-0409-1000-0000000FF1CE}-C", nBufferLength=0x105, lpBuffer=0x31e33c, lpFilePart=0x0 | out: lpBuffer="C:\\MSOCache\\All Users\\{90140000-0016-0409-1000-0000000FF1CE}-C", lpFilePart=0x0) returned 0x3e [0121.141] GetFullPathNameW (in: lpFileName="C:\\MSOCache\\All Users\\{90140000-0016-0409-1000-0000000FF1CE}-C\\", nBufferLength=0x105, lpBuffer=0x31e310, lpFilePart=0x0 | out: lpBuffer="C:\\MSOCache\\All Users\\{90140000-0016-0409-1000-0000000FF1CE}-C\\", lpFilePart=0x0) returned 0x3f [0121.141] FindFirstFileW (in: lpFileName="C:\\MSOCache\\All Users\\{90140000-0016-0409-1000-0000000FF1CE}-C\\*", lpFindFileData=0x31e55c | out: lpFindFileData=0x31e55c*(dwFileAttributes=0x2011, ftCreationTime.dwLowDateTime=0xecdfa490, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xee38cbf0, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xee38cbf0, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x381cc0 [0121.141] FindClose (in: hFindFile=0x381cc0 | out: hFindFile=0x381cc0) returned 1 [0121.141] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e7f4) returned 1 [0121.141] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e800) returned 1 [0121.144] GetFullPathNameW (in: lpFileName="C:\\MSOCache\\All Users\\{90140000-0016-0409-1000-0000000FF1CE}-C\\ExcelMUI.xml", nBufferLength=0x105, lpBuffer=0x31e1fc, lpFilePart=0x0 | out: lpBuffer="C:\\MSOCache\\All Users\\{90140000-0016-0409-1000-0000000FF1CE}-C\\ExcelMUI.xml", lpFilePart=0x0) returned 0x4b [0121.144] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e6f0) returned 1 [0121.144] CreateFileW (lpFileName="C:\\MSOCache\\All Users\\{90140000-0016-0409-1000-0000000FF1CE}-C\\ExcelMUI.xml" (normalized: "c:\\msocache\\all users\\{90140000-0016-0409-1000-0000000ff1ce}-c\\excelmui.xml"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x178 [0121.144] GetFileType (hFile=0x178) returned 0x1 [0121.144] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e6ec) returned 1 [0121.144] GetFileType (hFile=0x178) returned 0x1 [0121.144] GetFileSize (in: hFile=0x178, lpFileSizeHigh=0x31e7f8 | out: lpFileSizeHigh=0x31e7f8*=0x0) returned 0x620 [0121.144] ReadFile (in: hFile=0x178, lpBuffer=0x297554c, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x31e7a4, lpOverlapped=0x0 | out: lpBuffer=0x297554c*, lpNumberOfBytesRead=0x31e7a4*=0x620, lpOverlapped=0x0) returned 1 [0121.157] GetFullPathNameW (in: lpFileName="C:\\MSOCache\\All Users\\{90140000-0016-0409-1000-0000000FF1CE}-C\\ExcelMUI.xml", nBufferLength=0x105, lpBuffer=0x31e1e8, lpFilePart=0x0 | out: lpBuffer="C:\\MSOCache\\All Users\\{90140000-0016-0409-1000-0000000FF1CE}-C\\ExcelMUI.xml", lpFilePart=0x0) returned 0x4b [0121.157] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e6dc) returned 1 [0121.157] CreateFileW (lpFileName="C:\\MSOCache\\All Users\\{90140000-0016-0409-1000-0000000FF1CE}-C\\ExcelMUI.xml" (normalized: "c:\\msocache\\all users\\{90140000-0016-0409-1000-0000000ff1ce}-c\\excelmui.xml"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x178 [0121.158] GetFileType (hFile=0x178) returned 0x1 [0121.158] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e6d8) returned 1 [0121.158] GetFileType (hFile=0x178) returned 0x1 [0121.158] WriteFile (in: hFile=0x178, lpBuffer=0x29780cc*, nNumberOfBytesToWrite=0x620, lpNumberOfBytesWritten=0x31e76c, lpOverlapped=0x0 | out: lpBuffer=0x29780cc*, lpNumberOfBytesWritten=0x31e76c*=0x620, lpOverlapped=0x0) returned 1 [0121.159] CloseHandle (hObject=0x178) returned 1 [0121.160] GetFullPathNameW (in: lpFileName="C:\\MSOCache\\All Users\\{90140000-0016-0409-1000-0000000FF1CE}-C\\ExcelMUI.xml", nBufferLength=0x105, lpBuffer=0x31e31c, lpFilePart=0x0 | out: lpBuffer="C:\\MSOCache\\All Users\\{90140000-0016-0409-1000-0000000FF1CE}-C\\ExcelMUI.xml", lpFilePart=0x0) returned 0x4b [0121.160] GetFullPathNameW (in: lpFileName="C:\\MSOCache\\All Users\\{90140000-0016-0409-1000-0000000FF1CE}-C\\ExcelMUI.xml.[neftet@tutanota.com].boom", nBufferLength=0x105, lpBuffer=0x31e31c, lpFilePart=0x0 | out: lpBuffer="C:\\MSOCache\\All Users\\{90140000-0016-0409-1000-0000000FF1CE}-C\\ExcelMUI.xml.[neftet@tutanota.com].boom", lpFilePart=0x0) returned 0x66 [0121.160] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e77c) returned 1 [0121.160] GetFileAttributesExW (in: lpFileName="C:\\MSOCache\\All Users\\{90140000-0016-0409-1000-0000000FF1CE}-C\\ExcelMUI.xml" (normalized: "c:\\msocache\\all users\\{90140000-0016-0409-1000-0000000ff1ce}-c\\excelmui.xml"), fInfoLevelId=0x0, lpFileInformation=0x31e7f8 | out: lpFileInformation=0x31e7f8*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x43f88c00, ftCreationTime.dwHighDateTime=0x1cad04a, ftLastAccessTime.dwLowDateTime=0x43f88c00, ftLastAccessTime.dwHighDateTime=0x1cad04a, ftLastWriteTime.dwLowDateTime=0x2ba63880, ftLastWriteTime.dwHighDateTime=0x1d6eb7f, nFileSizeHigh=0x0, nFileSizeLow=0x620)) returned 1 [0121.160] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e778) returned 1 [0121.161] MoveFileW (lpExistingFileName="C:\\MSOCache\\All Users\\{90140000-0016-0409-1000-0000000FF1CE}-C\\ExcelMUI.xml" (normalized: "c:\\msocache\\all users\\{90140000-0016-0409-1000-0000000ff1ce}-c\\excelmui.xml"), lpNewFileName="C:\\MSOCache\\All Users\\{90140000-0016-0409-1000-0000000FF1CE}-C\\ExcelMUI.xml.[neftet@tutanota.com].boom" (normalized: "c:\\msocache\\all users\\{90140000-0016-0409-1000-0000000ff1ce}-c\\excelmui.xml.[neftet@tutanota.com].boom")) returned 1 [0121.163] GetFullPathNameW (in: lpFileName="C:\\MSOCache\\All Users\\{90140000-0016-0409-1000-0000000FF1CE}-C\\Setup.xml", nBufferLength=0x105, lpBuffer=0x31e1fc, lpFilePart=0x0 | out: lpBuffer="C:\\MSOCache\\All Users\\{90140000-0016-0409-1000-0000000FF1CE}-C\\Setup.xml", lpFilePart=0x0) returned 0x48 [0121.163] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e6f0) returned 1 [0121.163] CreateFileW (lpFileName="C:\\MSOCache\\All Users\\{90140000-0016-0409-1000-0000000FF1CE}-C\\Setup.xml" (normalized: "c:\\msocache\\all users\\{90140000-0016-0409-1000-0000000ff1ce}-c\\setup.xml"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x178 [0121.163] GetFileType (hFile=0x178) returned 0x1 [0121.163] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e6ec) returned 1 [0121.163] GetFileType (hFile=0x178) returned 0x1 [0121.163] GetFileSize (in: hFile=0x178, lpFileSizeHigh=0x31e7f8 | out: lpFileSizeHigh=0x31e7f8*=0x0) returned 0x900 [0121.163] ReadFile (in: hFile=0x178, lpBuffer=0x2979ee4, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x31e7a4, lpOverlapped=0x0 | out: lpBuffer=0x2979ee4*, lpNumberOfBytesRead=0x31e7a4*=0x900, lpOverlapped=0x0) returned 1 [0121.164] CloseHandle (hObject=0x178) returned 1 [0121.164] GetFullPathNameW (in: lpFileName="C:\\MSOCache\\All Users\\{90140000-0016-0409-1000-0000000FF1CE}-C\\Setup.xml", nBufferLength=0x105, lpBuffer=0x31e1e8, lpFilePart=0x0 | out: lpBuffer="C:\\MSOCache\\All Users\\{90140000-0016-0409-1000-0000000FF1CE}-C\\Setup.xml", lpFilePart=0x0) returned 0x48 [0121.164] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e6dc) returned 1 [0121.164] CreateFileW (lpFileName="C:\\MSOCache\\All Users\\{90140000-0016-0409-1000-0000000FF1CE}-C\\Setup.xml" (normalized: "c:\\msocache\\all users\\{90140000-0016-0409-1000-0000000ff1ce}-c\\setup.xml"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x178 [0121.165] GetFileType (hFile=0x178) returned 0x1 [0121.165] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e6d8) returned 1 [0121.165] GetFileType (hFile=0x178) returned 0x1 [0121.165] WriteFile (in: hFile=0x178, lpBuffer=0x297cd38*, nNumberOfBytesToWrite=0x900, lpNumberOfBytesWritten=0x31e76c, lpOverlapped=0x0 | out: lpBuffer=0x297cd38*, lpNumberOfBytesWritten=0x31e76c*=0x900, lpOverlapped=0x0) returned 1 [0121.166] CloseHandle (hObject=0x178) returned 1 [0121.167] GetFullPathNameW (in: lpFileName="C:\\MSOCache\\All Users\\{90140000-0016-0409-1000-0000000FF1CE}-C\\Setup.xml", nBufferLength=0x105, lpBuffer=0x31e31c, lpFilePart=0x0 | out: lpBuffer="C:\\MSOCache\\All Users\\{90140000-0016-0409-1000-0000000FF1CE}-C\\Setup.xml", lpFilePart=0x0) returned 0x48 [0121.167] GetFullPathNameW (in: lpFileName="C:\\MSOCache\\All Users\\{90140000-0016-0409-1000-0000000FF1CE}-C\\Setup.xml.[neftet@tutanota.com].boom", nBufferLength=0x105, lpBuffer=0x31e31c, lpFilePart=0x0 | out: lpBuffer="C:\\MSOCache\\All Users\\{90140000-0016-0409-1000-0000000FF1CE}-C\\Setup.xml.[neftet@tutanota.com].boom", lpFilePart=0x0) returned 0x63 [0121.167] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e77c) returned 1 [0121.167] GetFileAttributesExW (in: lpFileName="C:\\MSOCache\\All Users\\{90140000-0016-0409-1000-0000000FF1CE}-C\\Setup.xml" (normalized: "c:\\msocache\\all users\\{90140000-0016-0409-1000-0000000ff1ce}-c\\setup.xml"), fInfoLevelId=0x0, lpFileInformation=0x31e7f8 | out: lpFileInformation=0x31e7f8*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x43f88c00, ftCreationTime.dwHighDateTime=0x1cad04a, ftLastAccessTime.dwLowDateTime=0x43f88c00, ftLastAccessTime.dwHighDateTime=0x1cad04a, ftLastWriteTime.dwLowDateTime=0x2ba899e0, ftLastWriteTime.dwHighDateTime=0x1d6eb7f, nFileSizeHigh=0x0, nFileSizeLow=0x900)) returned 1 [0121.167] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e778) returned 1 [0121.167] MoveFileW (lpExistingFileName="C:\\MSOCache\\All Users\\{90140000-0016-0409-1000-0000000FF1CE}-C\\Setup.xml" (normalized: "c:\\msocache\\all users\\{90140000-0016-0409-1000-0000000ff1ce}-c\\setup.xml"), lpNewFileName="C:\\MSOCache\\All Users\\{90140000-0016-0409-1000-0000000FF1CE}-C\\Setup.xml.[neftet@tutanota.com].boom" (normalized: "c:\\msocache\\all users\\{90140000-0016-0409-1000-0000000ff1ce}-c\\setup.xml.[neftet@tutanota.com].boom")) returned 1 [0121.167] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e834) returned 1 [0121.167] GetFullPathNameW (in: lpFileName="C:\\MSOCache\\All Users\\{90140000-0018-0409-1000-0000000FF1CE}-C", nBufferLength=0x105, lpBuffer=0x31e33c, lpFilePart=0x0 | out: lpBuffer="C:\\MSOCache\\All Users\\{90140000-0018-0409-1000-0000000FF1CE}-C", lpFilePart=0x0) returned 0x3e [0121.167] GetFullPathNameW (in: lpFileName="C:\\MSOCache\\All Users\\{90140000-0018-0409-1000-0000000FF1CE}-C\\", nBufferLength=0x105, lpBuffer=0x31e310, lpFilePart=0x0 | out: lpBuffer="C:\\MSOCache\\All Users\\{90140000-0018-0409-1000-0000000FF1CE}-C\\", lpFilePart=0x0) returned 0x3f [0121.168] FindFirstFileW (in: lpFileName="C:\\MSOCache\\All Users\\{90140000-0018-0409-1000-0000000FF1CE}-C\\*", lpFindFileData=0x31e55c | out: lpFindFileData=0x31e55c*(dwFileAttributes=0x2011, ftCreationTime.dwLowDateTime=0xe8729610, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xecdfa490, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xecdfa490, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x381cc0 [0121.168] FindNextFileW (in: hFindFile=0x381cc0, lpFindFileData=0x31e56c | out: lpFindFileData=0x31e56c*(dwFileAttributes=0x2011, ftCreationTime.dwLowDateTime=0xe8729610, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xecdfa490, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xecdfa490, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0121.168] FindNextFileW (in: hFindFile=0x381cc0, lpFindFileData=0x31e56c | out: lpFindFileData=0x31e56c*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x3e02ab00, ftCreationTime.dwHighDateTime=0x1cad04a, ftLastAccessTime.dwLowDateTime=0x3e02ab00, ftLastAccessTime.dwHighDateTime=0x1cad04a, ftLastWriteTime.dwLowDateTime=0xe874f770, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x263400, dwReserved0=0x0, dwReserved1=0x0, cFileName="PowerPointMUI.msi", cAlternateFileName="POWERP~1.MSI")) returned 1 [0121.168] FindNextFileW (in: hFindFile=0x381cc0, lpFindFileData=0x31e56c | out: lpFindFileData=0x31e56c*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x4529b900, ftCreationTime.dwHighDateTime=0x1cad04a, ftLastAccessTime.dwLowDateTime=0x4529b900, ftLastAccessTime.dwHighDateTime=0x1cad04a, ftLastWriteTime.dwLowDateTime=0xf6aaddc0, ftLastWriteTime.dwHighDateTime=0x1d6eb7e, nFileSizeHigh=0x0, nFileSizeLow=0x5b0, dwReserved0=0x0, dwReserved1=0x0, cFileName="PowerPointMUI.xml", cAlternateFileName="POWERP~1.XML")) returned 1 [0121.168] FindNextFileW (in: hFindFile=0x381cc0, lpFindFileData=0x31e56c | out: lpFindFileData=0x31e56c*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x2d523500, ftCreationTime.dwHighDateTime=0x1cad04a, ftLastAccessTime.dwLowDateTime=0x2d523500, ftLastAccessTime.dwHighDateTime=0x1cad04a, ftLastWriteTime.dwLowDateTime=0xe8b079d0, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x431a290, dwReserved0=0x0, dwReserved1=0x0, cFileName="PptLR.cab", cAlternateFileName="")) returned 1 [0121.168] FindNextFileW (in: hFindFile=0x381cc0, lpFindFileData=0x31e56c | out: lpFindFileData=0x31e56c*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x43f88c00, ftCreationTime.dwHighDateTime=0x1cad04a, ftLastAccessTime.dwLowDateTime=0x43f88c00, ftLastAccessTime.dwHighDateTime=0x1cad04a, ftLastWriteTime.dwLowDateTime=0xf6b46340, ftLastWriteTime.dwHighDateTime=0x1d6eb7e, nFileSizeHigh=0x0, nFileSizeLow=0x760, dwReserved0=0x0, dwReserved1=0x0, cFileName="Setup.xml", cAlternateFileName="")) returned 1 [0121.168] FindNextFileW (in: hFindFile=0x381cc0, lpFindFileData=0x31e56c | out: lpFindFileData=0x31e56c*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0121.168] FindClose (in: hFindFile=0x381cc0 | out: hFindFile=0x381cc0) returned 1 [0121.168] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e7f4) returned 1 [0121.168] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e800) returned 1 [0121.168] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e834) returned 1 [0121.169] GetFullPathNameW (in: lpFileName="C:\\MSOCache\\All Users\\{90140000-0018-0409-1000-0000000FF1CE}-C", nBufferLength=0x105, lpBuffer=0x31e33c, lpFilePart=0x0 | out: lpBuffer="C:\\MSOCache\\All Users\\{90140000-0018-0409-1000-0000000FF1CE}-C", lpFilePart=0x0) returned 0x3e [0121.169] GetFullPathNameW (in: lpFileName="C:\\MSOCache\\All Users\\{90140000-0018-0409-1000-0000000FF1CE}-C\\", nBufferLength=0x105, lpBuffer=0x31e310, lpFilePart=0x0 | out: lpBuffer="C:\\MSOCache\\All Users\\{90140000-0018-0409-1000-0000000FF1CE}-C\\", lpFilePart=0x0) returned 0x3f [0121.169] FindFirstFileW (in: lpFileName="C:\\MSOCache\\All Users\\{90140000-0018-0409-1000-0000000FF1CE}-C\\*", lpFindFileData=0x31e55c | out: lpFindFileData=0x31e55c*(dwFileAttributes=0x2011, ftCreationTime.dwLowDateTime=0xe8729610, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xecdfa490, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xecdfa490, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x381cc0 [0121.169] FindNextFileW (in: hFindFile=0x381cc0, lpFindFileData=0x31e56c | out: lpFindFileData=0x31e56c*(dwFileAttributes=0x2011, ftCreationTime.dwLowDateTime=0xe8729610, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xecdfa490, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xecdfa490, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0121.169] FindNextFileW (in: hFindFile=0x381cc0, lpFindFileData=0x31e56c | out: lpFindFileData=0x31e56c*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x3e02ab00, ftCreationTime.dwHighDateTime=0x1cad04a, ftLastAccessTime.dwLowDateTime=0x3e02ab00, ftLastAccessTime.dwHighDateTime=0x1cad04a, ftLastWriteTime.dwLowDateTime=0xe874f770, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x263400, dwReserved0=0x0, dwReserved1=0x0, cFileName="PowerPointMUI.msi", cAlternateFileName="POWERP~1.MSI")) returned 1 [0121.169] FindNextFileW (in: hFindFile=0x381cc0, lpFindFileData=0x31e56c | out: lpFindFileData=0x31e56c*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x4529b900, ftCreationTime.dwHighDateTime=0x1cad04a, ftLastAccessTime.dwLowDateTime=0x4529b900, ftLastAccessTime.dwHighDateTime=0x1cad04a, ftLastWriteTime.dwLowDateTime=0xf6aaddc0, ftLastWriteTime.dwHighDateTime=0x1d6eb7e, nFileSizeHigh=0x0, nFileSizeLow=0x5b0, dwReserved0=0x0, dwReserved1=0x0, cFileName="PowerPointMUI.xml", cAlternateFileName="POWERP~1.XML")) returned 1 [0121.169] FindNextFileW (in: hFindFile=0x381cc0, lpFindFileData=0x31e56c | out: lpFindFileData=0x31e56c*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x2d523500, ftCreationTime.dwHighDateTime=0x1cad04a, ftLastAccessTime.dwLowDateTime=0x2d523500, ftLastAccessTime.dwHighDateTime=0x1cad04a, ftLastWriteTime.dwLowDateTime=0xe8b079d0, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x431a290, dwReserved0=0x0, dwReserved1=0x0, cFileName="PptLR.cab", cAlternateFileName="")) returned 1 [0121.169] FindNextFileW (in: hFindFile=0x381cc0, lpFindFileData=0x31e56c | out: lpFindFileData=0x31e56c*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x43f88c00, ftCreationTime.dwHighDateTime=0x1cad04a, ftLastAccessTime.dwLowDateTime=0x43f88c00, ftLastAccessTime.dwHighDateTime=0x1cad04a, ftLastWriteTime.dwLowDateTime=0xf6b46340, ftLastWriteTime.dwHighDateTime=0x1d6eb7e, nFileSizeHigh=0x0, nFileSizeLow=0x760, dwReserved0=0x0, dwReserved1=0x0, cFileName="Setup.xml", cAlternateFileName="")) returned 1 [0121.169] FindNextFileW (in: hFindFile=0x381cc0, lpFindFileData=0x31e56c | out: lpFindFileData=0x31e56c*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x43f88c00, ftCreationTime.dwHighDateTime=0x1cad04a, ftLastAccessTime.dwLowDateTime=0x43f88c00, ftLastAccessTime.dwHighDateTime=0x1cad04a, ftLastWriteTime.dwLowDateTime=0xf6b46340, ftLastWriteTime.dwHighDateTime=0x1d6eb7e, nFileSizeHigh=0x0, nFileSizeLow=0x760, dwReserved0=0x0, dwReserved1=0x0, cFileName="Setup.xml", cAlternateFileName="")) returned 0 [0121.170] FindClose (in: hFindFile=0x381cc0 | out: hFindFile=0x381cc0) returned 1 [0121.170] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e7f4) returned 1 [0121.170] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e800) returned 1 [0121.170] GetFullPathNameW (in: lpFileName="C:\\MSOCache\\All Users\\{90140000-0018-0409-1000-0000000FF1CE}-C\\PowerPointMUI.xml", nBufferLength=0x105, lpBuffer=0x31e1fc, lpFilePart=0x0 | out: lpBuffer="C:\\MSOCache\\All Users\\{90140000-0018-0409-1000-0000000FF1CE}-C\\PowerPointMUI.xml", lpFilePart=0x0) returned 0x50 [0121.170] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e6f0) returned 1 [0121.170] CreateFileW (lpFileName="C:\\MSOCache\\All Users\\{90140000-0018-0409-1000-0000000FF1CE}-C\\PowerPointMUI.xml" (normalized: "c:\\msocache\\all users\\{90140000-0018-0409-1000-0000000ff1ce}-c\\powerpointmui.xml"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x178 [0121.170] GetFileType (hFile=0x178) returned 0x1 [0121.170] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e6ec) returned 1 [0121.170] GetFileType (hFile=0x178) returned 0x1 [0121.170] GetFileSize (in: hFile=0x178, lpFileSizeHigh=0x31e7f8 | out: lpFileSizeHigh=0x31e7f8*=0x0) returned 0x5b0 [0121.170] ReadFile (in: hFile=0x178, lpBuffer=0x2980a90, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x31e7a4, lpOverlapped=0x0 | out: lpBuffer=0x2980a90*, lpNumberOfBytesRead=0x31e7a4*=0x5b0, lpOverlapped=0x0) returned 1 [0121.171] CloseHandle (hObject=0x178) returned 1 [0121.171] GetFullPathNameW (in: lpFileName="C:\\MSOCache\\All Users\\{90140000-0018-0409-1000-0000000FF1CE}-C\\PowerPointMUI.xml", nBufferLength=0x105, lpBuffer=0x31e1e8, lpFilePart=0x0 | out: lpBuffer="C:\\MSOCache\\All Users\\{90140000-0018-0409-1000-0000000FF1CE}-C\\PowerPointMUI.xml", lpFilePart=0x0) returned 0x50 [0121.171] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e6dc) returned 1 [0121.171] CreateFileW (lpFileName="C:\\MSOCache\\All Users\\{90140000-0018-0409-1000-0000000FF1CE}-C\\PowerPointMUI.xml" (normalized: "c:\\msocache\\all users\\{90140000-0018-0409-1000-0000000ff1ce}-c\\powerpointmui.xml"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x178 [0121.172] GetFileType (hFile=0x178) returned 0x1 [0121.172] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e6d8) returned 1 [0121.172] GetFileType (hFile=0x178) returned 0x1 [0121.172] WriteFile (in: hFile=0x178, lpBuffer=0x29835b4*, nNumberOfBytesToWrite=0x5b0, lpNumberOfBytesWritten=0x31e76c, lpOverlapped=0x0 | out: lpBuffer=0x29835b4*, lpNumberOfBytesWritten=0x31e76c*=0x5b0, lpOverlapped=0x0) returned 1 [0121.173] CloseHandle (hObject=0x178) returned 1 [0121.173] GetFullPathNameW (in: lpFileName="C:\\MSOCache\\All Users\\{90140000-0018-0409-1000-0000000FF1CE}-C\\PowerPointMUI.xml", nBufferLength=0x105, lpBuffer=0x31e31c, lpFilePart=0x0 | out: lpBuffer="C:\\MSOCache\\All Users\\{90140000-0018-0409-1000-0000000FF1CE}-C\\PowerPointMUI.xml", lpFilePart=0x0) returned 0x50 [0121.173] GetFullPathNameW (in: lpFileName="C:\\MSOCache\\All Users\\{90140000-0018-0409-1000-0000000FF1CE}-C\\PowerPointMUI.xml.[neftet@tutanota.com].boom", nBufferLength=0x105, lpBuffer=0x31e31c, lpFilePart=0x0 | out: lpBuffer="C:\\MSOCache\\All Users\\{90140000-0018-0409-1000-0000000FF1CE}-C\\PowerPointMUI.xml.[neftet@tutanota.com].boom", lpFilePart=0x0) returned 0x6b [0121.173] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e77c) returned 1 [0121.173] GetFileAttributesExW (in: lpFileName="C:\\MSOCache\\All Users\\{90140000-0018-0409-1000-0000000FF1CE}-C\\PowerPointMUI.xml" (normalized: "c:\\msocache\\all users\\{90140000-0018-0409-1000-0000000ff1ce}-c\\powerpointmui.xml"), fInfoLevelId=0x0, lpFileInformation=0x31e7f8 | out: lpFileInformation=0x31e7f8*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x4529b900, ftCreationTime.dwHighDateTime=0x1cad04a, ftLastAccessTime.dwLowDateTime=0x4529b900, ftLastAccessTime.dwHighDateTime=0x1cad04a, ftLastWriteTime.dwLowDateTime=0x2ba899e0, ftLastWriteTime.dwHighDateTime=0x1d6eb7f, nFileSizeHigh=0x0, nFileSizeLow=0x5b0)) returned 1 [0121.173] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e778) returned 1 [0121.173] MoveFileW (lpExistingFileName="C:\\MSOCache\\All Users\\{90140000-0018-0409-1000-0000000FF1CE}-C\\PowerPointMUI.xml" (normalized: "c:\\msocache\\all users\\{90140000-0018-0409-1000-0000000ff1ce}-c\\powerpointmui.xml"), lpNewFileName="C:\\MSOCache\\All Users\\{90140000-0018-0409-1000-0000000FF1CE}-C\\PowerPointMUI.xml.[neftet@tutanota.com].boom" (normalized: "c:\\msocache\\all users\\{90140000-0018-0409-1000-0000000ff1ce}-c\\powerpointmui.xml.[neftet@tutanota.com].boom")) returned 1 [0121.174] GetFullPathNameW (in: lpFileName="C:\\MSOCache\\All Users\\{90140000-0018-0409-1000-0000000FF1CE}-C\\Setup.xml", nBufferLength=0x105, lpBuffer=0x31e1fc, lpFilePart=0x0 | out: lpBuffer="C:\\MSOCache\\All Users\\{90140000-0018-0409-1000-0000000FF1CE}-C\\Setup.xml", lpFilePart=0x0) returned 0x48 [0121.174] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e6f0) returned 1 [0121.174] CreateFileW (lpFileName="C:\\MSOCache\\All Users\\{90140000-0018-0409-1000-0000000FF1CE}-C\\Setup.xml" (normalized: "c:\\msocache\\all users\\{90140000-0018-0409-1000-0000000ff1ce}-c\\setup.xml"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x178 [0121.174] GetFileType (hFile=0x178) returned 0x1 [0121.174] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e6ec) returned 1 [0121.174] GetFileType (hFile=0x178) returned 0x1 [0121.174] GetFileSize (in: hFile=0x178, lpFileSizeHigh=0x31e7f8 | out: lpFileSizeHigh=0x31e7f8*=0x0) returned 0x760 [0121.174] ReadFile (in: hFile=0x178, lpBuffer=0x2985260, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x31e7a4, lpOverlapped=0x0 | out: lpBuffer=0x2985260*, lpNumberOfBytesRead=0x31e7a4*=0x760, lpOverlapped=0x0) returned 1 [0121.175] CloseHandle (hObject=0x178) returned 1 [0121.175] GetFullPathNameW (in: lpFileName="C:\\MSOCache\\All Users\\{90140000-0018-0409-1000-0000000FF1CE}-C\\Setup.xml", nBufferLength=0x105, lpBuffer=0x31e1e8, lpFilePart=0x0 | out: lpBuffer="C:\\MSOCache\\All Users\\{90140000-0018-0409-1000-0000000FF1CE}-C\\Setup.xml", lpFilePart=0x0) returned 0x48 [0121.175] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e6dc) returned 1 [0121.175] CreateFileW (lpFileName="C:\\MSOCache\\All Users\\{90140000-0018-0409-1000-0000000FF1CE}-C\\Setup.xml" (normalized: "c:\\msocache\\all users\\{90140000-0018-0409-1000-0000000ff1ce}-c\\setup.xml"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x178 [0121.176] GetFileType (hFile=0x178) returned 0x1 [0121.176] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e6d8) returned 1 [0121.176] GetFileType (hFile=0x178) returned 0x1 [0121.176] WriteFile (in: hFile=0x178, lpBuffer=0x2987f14*, nNumberOfBytesToWrite=0x760, lpNumberOfBytesWritten=0x31e76c, lpOverlapped=0x0 | out: lpBuffer=0x2987f14*, lpNumberOfBytesWritten=0x31e76c*=0x760, lpOverlapped=0x0) returned 1 [0121.177] CloseHandle (hObject=0x178) returned 1 [0121.177] GetFullPathNameW (in: lpFileName="C:\\MSOCache\\All Users\\{90140000-0018-0409-1000-0000000FF1CE}-C\\Setup.xml", nBufferLength=0x105, lpBuffer=0x31e31c, lpFilePart=0x0 | out: lpBuffer="C:\\MSOCache\\All Users\\{90140000-0018-0409-1000-0000000FF1CE}-C\\Setup.xml", lpFilePart=0x0) returned 0x48 [0121.177] GetFullPathNameW (in: lpFileName="C:\\MSOCache\\All Users\\{90140000-0018-0409-1000-0000000FF1CE}-C\\Setup.xml.[neftet@tutanota.com].boom", nBufferLength=0x105, lpBuffer=0x31e31c, lpFilePart=0x0 | out: lpBuffer="C:\\MSOCache\\All Users\\{90140000-0018-0409-1000-0000000FF1CE}-C\\Setup.xml.[neftet@tutanota.com].boom", lpFilePart=0x0) returned 0x63 [0121.177] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e77c) returned 1 [0121.177] GetFileAttributesExW (in: lpFileName="C:\\MSOCache\\All Users\\{90140000-0018-0409-1000-0000000FF1CE}-C\\Setup.xml" (normalized: "c:\\msocache\\all users\\{90140000-0018-0409-1000-0000000ff1ce}-c\\setup.xml"), fInfoLevelId=0x0, lpFileInformation=0x31e7f8 | out: lpFileInformation=0x31e7f8*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x43f88c00, ftCreationTime.dwHighDateTime=0x1cad04a, ftLastAccessTime.dwLowDateTime=0x43f88c00, ftLastAccessTime.dwHighDateTime=0x1cad04a, ftLastWriteTime.dwLowDateTime=0x2ba899e0, ftLastWriteTime.dwHighDateTime=0x1d6eb7f, nFileSizeHigh=0x0, nFileSizeLow=0x760)) returned 1 [0121.177] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e778) returned 1 [0121.177] MoveFileW (lpExistingFileName="C:\\MSOCache\\All Users\\{90140000-0018-0409-1000-0000000FF1CE}-C\\Setup.xml" (normalized: "c:\\msocache\\all users\\{90140000-0018-0409-1000-0000000ff1ce}-c\\setup.xml"), lpNewFileName="C:\\MSOCache\\All Users\\{90140000-0018-0409-1000-0000000FF1CE}-C\\Setup.xml.[neftet@tutanota.com].boom" (normalized: "c:\\msocache\\all users\\{90140000-0018-0409-1000-0000000ff1ce}-c\\setup.xml.[neftet@tutanota.com].boom")) returned 1 [0121.178] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e834) returned 1 [0121.178] GetFullPathNameW (in: lpFileName="C:\\MSOCache\\All Users\\{90140000-0019-0409-1000-0000000FF1CE}-C", nBufferLength=0x105, lpBuffer=0x31e33c, lpFilePart=0x0 | out: lpBuffer="C:\\MSOCache\\All Users\\{90140000-0019-0409-1000-0000000FF1CE}-C", lpFilePart=0x0) returned 0x3e [0121.178] GetFullPathNameW (in: lpFileName="C:\\MSOCache\\All Users\\{90140000-0019-0409-1000-0000000FF1CE}-C\\", nBufferLength=0x105, lpBuffer=0x31e310, lpFilePart=0x0 | out: lpBuffer="C:\\MSOCache\\All Users\\{90140000-0019-0409-1000-0000000FF1CE}-C\\", lpFilePart=0x0) returned 0x3f [0121.178] FindFirstFileW (in: lpFileName="C:\\MSOCache\\All Users\\{90140000-0019-0409-1000-0000000FF1CE}-C\\*", lpFindFileData=0x31e55c | out: lpFindFileData=0x31e55c*(dwFileAttributes=0x2011, ftCreationTime.dwLowDateTime=0xfc3e6570, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xfc8a9170, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xfc8a9170, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x381cc0 [0121.178] FindNextFileW (in: hFindFile=0x381cc0, lpFindFileData=0x31e56c | out: lpFindFileData=0x31e56c*(dwFileAttributes=0x2011, ftCreationTime.dwLowDateTime=0xfc3e6570, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xfc8a9170, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xfc8a9170, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0121.178] FindNextFileW (in: hFindFile=0x381cc0, lpFindFileData=0x31e56c | out: lpFindFileData=0x31e56c*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x3e02ab00, ftCreationTime.dwHighDateTime=0x1cad04a, ftLastAccessTime.dwLowDateTime=0x3e02ab00, ftLastAccessTime.dwHighDateTime=0x1cad04a, ftLastWriteTime.dwLowDateTime=0xfc40b730, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x265c00, dwReserved0=0x0, dwReserved1=0x0, cFileName="PublisherMUI.msi", cAlternateFileName="PUBLIS~1.MSI")) returned 1 [0121.178] FindNextFileW (in: hFindFile=0x381cc0, lpFindFileData=0x31e56c | out: lpFindFileData=0x31e56c*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x4529b900, ftCreationTime.dwHighDateTime=0x1cad04a, ftLastAccessTime.dwLowDateTime=0x4529b900, ftLastAccessTime.dwHighDateTime=0x1cad04a, ftLastWriteTime.dwLowDateTime=0xf6bde8c0, ftLastWriteTime.dwHighDateTime=0x1d6eb7e, nFileSizeHigh=0x0, nFileSizeLow=0x5b0, dwReserved0=0x0, dwReserved1=0x0, cFileName="PublisherMUI.xml", cAlternateFileName="PUBLIS~1.XML")) returned 1 [0121.179] FindNextFileW (in: hFindFile=0x381cc0, lpFindFileData=0x31e56c | out: lpFindFileData=0x31e56c*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x3cd17e00, ftCreationTime.dwHighDateTime=0x1cad04a, ftLastAccessTime.dwLowDateTime=0x3cd17e00, ftLastAccessTime.dwHighDateTime=0x1cad04a, ftLastWriteTime.dwLowDateTime=0xfc47e320, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x97f3f4, dwReserved0=0x0, dwReserved1=0x0, cFileName="PubLR.cab", cAlternateFileName="")) returned 1 [0121.179] FindNextFileW (in: hFindFile=0x381cc0, lpFindFileData=0x31e56c | out: lpFindFileData=0x31e56c*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x43f88c00, ftCreationTime.dwHighDateTime=0x1cad04a, ftLastAccessTime.dwLowDateTime=0x43f88c00, ftLastAccessTime.dwHighDateTime=0x1cad04a, ftLastWriteTime.dwLowDateTime=0xf6c76e40, ftLastWriteTime.dwHighDateTime=0x1d6eb7e, nFileSizeHigh=0x0, nFileSizeLow=0x650, dwReserved0=0x0, dwReserved1=0x0, cFileName="Setup.xml", cAlternateFileName="")) returned 1 [0121.179] FindNextFileW (in: hFindFile=0x381cc0, lpFindFileData=0x31e56c | out: lpFindFileData=0x31e56c*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0121.179] FindClose (in: hFindFile=0x381cc0 | out: hFindFile=0x381cc0) returned 1 [0121.179] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e7f4) returned 1 [0121.179] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e800) returned 1 [0121.179] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e834) returned 1 [0121.179] GetFullPathNameW (in: lpFileName="C:\\MSOCache\\All Users\\{90140000-0019-0409-1000-0000000FF1CE}-C", nBufferLength=0x105, lpBuffer=0x31e33c, lpFilePart=0x0 | out: lpBuffer="C:\\MSOCache\\All Users\\{90140000-0019-0409-1000-0000000FF1CE}-C", lpFilePart=0x0) returned 0x3e [0121.179] GetFullPathNameW (in: lpFileName="C:\\MSOCache\\All Users\\{90140000-0019-0409-1000-0000000FF1CE}-C\\", nBufferLength=0x105, lpBuffer=0x31e310, lpFilePart=0x0 | out: lpBuffer="C:\\MSOCache\\All Users\\{90140000-0019-0409-1000-0000000FF1CE}-C\\", lpFilePart=0x0) returned 0x3f [0121.179] FindFirstFileW (in: lpFileName="C:\\MSOCache\\All Users\\{90140000-0019-0409-1000-0000000FF1CE}-C\\*", lpFindFileData=0x31e55c | out: lpFindFileData=0x31e55c*(dwFileAttributes=0x2011, ftCreationTime.dwLowDateTime=0xfc3e6570, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xfc8a9170, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xfc8a9170, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x381cc0 [0121.179] FindNextFileW (in: hFindFile=0x381cc0, lpFindFileData=0x31e56c | out: lpFindFileData=0x31e56c*(dwFileAttributes=0x2011, ftCreationTime.dwLowDateTime=0xfc3e6570, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xfc8a9170, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xfc8a9170, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0121.179] FindNextFileW (in: hFindFile=0x381cc0, lpFindFileData=0x31e56c | out: lpFindFileData=0x31e56c*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x3e02ab00, ftCreationTime.dwHighDateTime=0x1cad04a, ftLastAccessTime.dwLowDateTime=0x3e02ab00, ftLastAccessTime.dwHighDateTime=0x1cad04a, ftLastWriteTime.dwLowDateTime=0xfc40b730, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x265c00, dwReserved0=0x0, dwReserved1=0x0, cFileName="PublisherMUI.msi", cAlternateFileName="PUBLIS~1.MSI")) returned 1 [0121.180] FindNextFileW (in: hFindFile=0x381cc0, lpFindFileData=0x31e56c | out: lpFindFileData=0x31e56c*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x4529b900, ftCreationTime.dwHighDateTime=0x1cad04a, ftLastAccessTime.dwLowDateTime=0x4529b900, ftLastAccessTime.dwHighDateTime=0x1cad04a, ftLastWriteTime.dwLowDateTime=0xf6bde8c0, ftLastWriteTime.dwHighDateTime=0x1d6eb7e, nFileSizeHigh=0x0, nFileSizeLow=0x5b0, dwReserved0=0x0, dwReserved1=0x0, cFileName="PublisherMUI.xml", cAlternateFileName="PUBLIS~1.XML")) returned 1 [0121.180] FindNextFileW (in: hFindFile=0x381cc0, lpFindFileData=0x31e56c | out: lpFindFileData=0x31e56c*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x3cd17e00, ftCreationTime.dwHighDateTime=0x1cad04a, ftLastAccessTime.dwLowDateTime=0x3cd17e00, ftLastAccessTime.dwHighDateTime=0x1cad04a, ftLastWriteTime.dwLowDateTime=0xfc47e320, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x97f3f4, dwReserved0=0x0, dwReserved1=0x0, cFileName="PubLR.cab", cAlternateFileName="")) returned 1 [0121.180] FindNextFileW (in: hFindFile=0x381cc0, lpFindFileData=0x31e56c | out: lpFindFileData=0x31e56c*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x43f88c00, ftCreationTime.dwHighDateTime=0x1cad04a, ftLastAccessTime.dwLowDateTime=0x43f88c00, ftLastAccessTime.dwHighDateTime=0x1cad04a, ftLastWriteTime.dwLowDateTime=0xf6c76e40, ftLastWriteTime.dwHighDateTime=0x1d6eb7e, nFileSizeHigh=0x0, nFileSizeLow=0x650, dwReserved0=0x0, dwReserved1=0x0, cFileName="Setup.xml", cAlternateFileName="")) returned 1 [0121.180] FindNextFileW (in: hFindFile=0x381cc0, lpFindFileData=0x31e56c | out: lpFindFileData=0x31e56c*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x43f88c00, ftCreationTime.dwHighDateTime=0x1cad04a, ftLastAccessTime.dwLowDateTime=0x43f88c00, ftLastAccessTime.dwHighDateTime=0x1cad04a, ftLastWriteTime.dwLowDateTime=0xf6c76e40, ftLastWriteTime.dwHighDateTime=0x1d6eb7e, nFileSizeHigh=0x0, nFileSizeLow=0x650, dwReserved0=0x0, dwReserved1=0x0, cFileName="Setup.xml", cAlternateFileName="")) returned 0 [0121.180] FindClose (in: hFindFile=0x381cc0 | out: hFindFile=0x381cc0) returned 1 [0121.180] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e7f4) returned 1 [0121.180] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e800) returned 1 [0121.180] GetFullPathNameW (in: lpFileName="C:\\MSOCache\\All Users\\{90140000-0019-0409-1000-0000000FF1CE}-C\\PublisherMUI.xml", nBufferLength=0x105, lpBuffer=0x31e1fc, lpFilePart=0x0 | out: lpBuffer="C:\\MSOCache\\All Users\\{90140000-0019-0409-1000-0000000FF1CE}-C\\PublisherMUI.xml", lpFilePart=0x0) returned 0x4f [0121.180] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e6f0) returned 1 [0121.180] CreateFileW (lpFileName="C:\\MSOCache\\All Users\\{90140000-0019-0409-1000-0000000FF1CE}-C\\PublisherMUI.xml" (normalized: "c:\\msocache\\all users\\{90140000-0019-0409-1000-0000000ff1ce}-c\\publishermui.xml"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x178 [0121.180] GetFileType (hFile=0x178) returned 0x1 [0121.180] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e6ec) returned 1 [0121.180] GetFileType (hFile=0x178) returned 0x1 [0121.180] GetFileSize (in: hFile=0x178, lpFileSizeHigh=0x31e7f8 | out: lpFileSizeHigh=0x31e7f8*=0x0) returned 0x5b0 [0121.181] ReadFile (in: hFile=0x178, lpBuffer=0x298bc48, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x31e7a4, lpOverlapped=0x0 | out: lpBuffer=0x298bc48*, lpNumberOfBytesRead=0x31e7a4*=0x5b0, lpOverlapped=0x0) returned 1 [0121.182] CloseHandle (hObject=0x178) returned 1 [0121.182] GetFullPathNameW (in: lpFileName="C:\\MSOCache\\All Users\\{90140000-0019-0409-1000-0000000FF1CE}-C\\PublisherMUI.xml", nBufferLength=0x105, lpBuffer=0x31e1e8, lpFilePart=0x0 | out: lpBuffer="C:\\MSOCache\\All Users\\{90140000-0019-0409-1000-0000000FF1CE}-C\\PublisherMUI.xml", lpFilePart=0x0) returned 0x4f [0121.182] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e6dc) returned 1 [0121.182] CreateFileW (lpFileName="C:\\MSOCache\\All Users\\{90140000-0019-0409-1000-0000000FF1CE}-C\\PublisherMUI.xml" (normalized: "c:\\msocache\\all users\\{90140000-0019-0409-1000-0000000ff1ce}-c\\publishermui.xml"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x178 [0121.183] GetFileType (hFile=0x178) returned 0x1 [0121.183] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e6d8) returned 1 [0121.183] GetFileType (hFile=0x178) returned 0x1 [0121.183] WriteFile (in: hFile=0x178, lpBuffer=0x298e768*, nNumberOfBytesToWrite=0x5b0, lpNumberOfBytesWritten=0x31e76c, lpOverlapped=0x0 | out: lpBuffer=0x298e768*, lpNumberOfBytesWritten=0x31e76c*=0x5b0, lpOverlapped=0x0) returned 1 [0121.184] CloseHandle (hObject=0x178) returned 1 [0121.184] GetFullPathNameW (in: lpFileName="C:\\MSOCache\\All Users\\{90140000-0019-0409-1000-0000000FF1CE}-C\\PublisherMUI.xml", nBufferLength=0x105, lpBuffer=0x31e31c, lpFilePart=0x0 | out: lpBuffer="C:\\MSOCache\\All Users\\{90140000-0019-0409-1000-0000000FF1CE}-C\\PublisherMUI.xml", lpFilePart=0x0) returned 0x4f [0121.184] GetFullPathNameW (in: lpFileName="C:\\MSOCache\\All Users\\{90140000-0019-0409-1000-0000000FF1CE}-C\\PublisherMUI.xml.[neftet@tutanota.com].boom", nBufferLength=0x105, lpBuffer=0x31e31c, lpFilePart=0x0 | out: lpBuffer="C:\\MSOCache\\All Users\\{90140000-0019-0409-1000-0000000FF1CE}-C\\PublisherMUI.xml.[neftet@tutanota.com].boom", lpFilePart=0x0) returned 0x6a [0121.184] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e77c) returned 1 [0121.184] GetFileAttributesExW (in: lpFileName="C:\\MSOCache\\All Users\\{90140000-0019-0409-1000-0000000FF1CE}-C\\PublisherMUI.xml" (normalized: "c:\\msocache\\all users\\{90140000-0019-0409-1000-0000000ff1ce}-c\\publishermui.xml"), fInfoLevelId=0x0, lpFileInformation=0x31e7f8 | out: lpFileInformation=0x31e7f8*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x4529b900, ftCreationTime.dwHighDateTime=0x1cad04a, ftLastAccessTime.dwLowDateTime=0x4529b900, ftLastAccessTime.dwHighDateTime=0x1cad04a, ftLastWriteTime.dwLowDateTime=0x2baafb40, ftLastWriteTime.dwHighDateTime=0x1d6eb7f, nFileSizeHigh=0x0, nFileSizeLow=0x5b0)) returned 1 [0121.184] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e778) returned 1 [0121.184] MoveFileW (lpExistingFileName="C:\\MSOCache\\All Users\\{90140000-0019-0409-1000-0000000FF1CE}-C\\PublisherMUI.xml" (normalized: "c:\\msocache\\all users\\{90140000-0019-0409-1000-0000000ff1ce}-c\\publishermui.xml"), lpNewFileName="C:\\MSOCache\\All Users\\{90140000-0019-0409-1000-0000000FF1CE}-C\\PublisherMUI.xml.[neftet@tutanota.com].boom" (normalized: "c:\\msocache\\all users\\{90140000-0019-0409-1000-0000000ff1ce}-c\\publishermui.xml.[neftet@tutanota.com].boom")) returned 1 [0121.185] GetFullPathNameW (in: lpFileName="C:\\MSOCache\\All Users\\{90140000-0019-0409-1000-0000000FF1CE}-C\\Setup.xml", nBufferLength=0x105, lpBuffer=0x31e1fc, lpFilePart=0x0 | out: lpBuffer="C:\\MSOCache\\All Users\\{90140000-0019-0409-1000-0000000FF1CE}-C\\Setup.xml", lpFilePart=0x0) returned 0x48 [0121.185] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e6f0) returned 1 [0121.185] CreateFileW (lpFileName="C:\\MSOCache\\All Users\\{90140000-0019-0409-1000-0000000FF1CE}-C\\Setup.xml" (normalized: "c:\\msocache\\all users\\{90140000-0019-0409-1000-0000000ff1ce}-c\\setup.xml"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x178 [0121.185] GetFileType (hFile=0x178) returned 0x1 [0121.185] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e6ec) returned 1 [0121.185] GetFileType (hFile=0x178) returned 0x1 [0121.185] GetFileSize (in: hFile=0x178, lpFileSizeHigh=0x31e7f8 | out: lpFileSizeHigh=0x31e7f8*=0x0) returned 0x650 [0121.185] ReadFile (in: hFile=0x178, lpBuffer=0x2990300, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x31e7a4, lpOverlapped=0x0 | out: lpBuffer=0x2990300*, lpNumberOfBytesRead=0x31e7a4*=0x650, lpOverlapped=0x0) returned 1 [0121.186] CloseHandle (hObject=0x178) returned 1 [0121.186] GetFullPathNameW (in: lpFileName="C:\\MSOCache\\All Users\\{90140000-0019-0409-1000-0000000FF1CE}-C\\Setup.xml", nBufferLength=0x105, lpBuffer=0x31e1e8, lpFilePart=0x0 | out: lpBuffer="C:\\MSOCache\\All Users\\{90140000-0019-0409-1000-0000000FF1CE}-C\\Setup.xml", lpFilePart=0x0) returned 0x48 [0121.186] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e6dc) returned 1 [0121.186] CreateFileW (lpFileName="C:\\MSOCache\\All Users\\{90140000-0019-0409-1000-0000000FF1CE}-C\\Setup.xml" (normalized: "c:\\msocache\\all users\\{90140000-0019-0409-1000-0000000ff1ce}-c\\setup.xml"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x178 [0121.187] GetFileType (hFile=0x178) returned 0x1 [0121.187] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e6d8) returned 1 [0121.187] GetFileType (hFile=0x178) returned 0x1 [0121.187] WriteFile (in: hFile=0x178, lpBuffer=0x2992ea4*, nNumberOfBytesToWrite=0x650, lpNumberOfBytesWritten=0x31e76c, lpOverlapped=0x0 | out: lpBuffer=0x2992ea4*, lpNumberOfBytesWritten=0x31e76c*=0x650, lpOverlapped=0x0) returned 1 [0121.188] CloseHandle (hObject=0x178) returned 1 [0121.188] GetFullPathNameW (in: lpFileName="C:\\MSOCache\\All Users\\{90140000-0019-0409-1000-0000000FF1CE}-C\\Setup.xml", nBufferLength=0x105, lpBuffer=0x31e31c, lpFilePart=0x0 | out: lpBuffer="C:\\MSOCache\\All Users\\{90140000-0019-0409-1000-0000000FF1CE}-C\\Setup.xml", lpFilePart=0x0) returned 0x48 [0121.188] GetFullPathNameW (in: lpFileName="C:\\MSOCache\\All Users\\{90140000-0019-0409-1000-0000000FF1CE}-C\\Setup.xml.[neftet@tutanota.com].boom", nBufferLength=0x105, lpBuffer=0x31e31c, lpFilePart=0x0 | out: lpBuffer="C:\\MSOCache\\All Users\\{90140000-0019-0409-1000-0000000FF1CE}-C\\Setup.xml.[neftet@tutanota.com].boom", lpFilePart=0x0) returned 0x63 [0121.188] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e77c) returned 1 [0121.188] GetFileAttributesExW (in: lpFileName="C:\\MSOCache\\All Users\\{90140000-0019-0409-1000-0000000FF1CE}-C\\Setup.xml" (normalized: "c:\\msocache\\all users\\{90140000-0019-0409-1000-0000000ff1ce}-c\\setup.xml"), fInfoLevelId=0x0, lpFileInformation=0x31e7f8 | out: lpFileInformation=0x31e7f8*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x43f88c00, ftCreationTime.dwHighDateTime=0x1cad04a, ftLastAccessTime.dwLowDateTime=0x43f88c00, ftLastAccessTime.dwHighDateTime=0x1cad04a, ftLastWriteTime.dwLowDateTime=0x2baafb40, ftLastWriteTime.dwHighDateTime=0x1d6eb7f, nFileSizeHigh=0x0, nFileSizeLow=0x650)) returned 1 [0121.188] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e778) returned 1 [0121.188] MoveFileW (lpExistingFileName="C:\\MSOCache\\All Users\\{90140000-0019-0409-1000-0000000FF1CE}-C\\Setup.xml" (normalized: "c:\\msocache\\all users\\{90140000-0019-0409-1000-0000000ff1ce}-c\\setup.xml"), lpNewFileName="C:\\MSOCache\\All Users\\{90140000-0019-0409-1000-0000000FF1CE}-C\\Setup.xml.[neftet@tutanota.com].boom" (normalized: "c:\\msocache\\all users\\{90140000-0019-0409-1000-0000000ff1ce}-c\\setup.xml.[neftet@tutanota.com].boom")) returned 1 [0121.189] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e834) returned 1 [0121.189] GetFullPathNameW (in: lpFileName="C:\\MSOCache\\All Users\\{90140000-001A-0409-1000-0000000FF1CE}-C", nBufferLength=0x105, lpBuffer=0x31e33c, lpFilePart=0x0 | out: lpBuffer="C:\\MSOCache\\All Users\\{90140000-001A-0409-1000-0000000FF1CE}-C", lpFilePart=0x0) returned 0x3e [0121.189] GetFullPathNameW (in: lpFileName="C:\\MSOCache\\All Users\\{90140000-001A-0409-1000-0000000FF1CE}-C\\", nBufferLength=0x105, lpBuffer=0x31e310, lpFilePart=0x0 | out: lpBuffer="C:\\MSOCache\\All Users\\{90140000-001A-0409-1000-0000000FF1CE}-C\\", lpFilePart=0x0) returned 0x3f [0121.189] FindFirstFileW (in: lpFileName="C:\\MSOCache\\All Users\\{90140000-001A-0409-1000-0000000FF1CE}-C\\*", lpFindFileData=0x31e55c | out: lpFindFileData=0x31e55c*(dwFileAttributes=0x2011, ftCreationTime.dwLowDateTime=0xee829690, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xf00dbad0, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xf00dbad0, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x381cc0 [0121.189] FindNextFileW (in: hFindFile=0x381cc0, lpFindFileData=0x31e56c | out: lpFindFileData=0x31e56c*(dwFileAttributes=0x2011, ftCreationTime.dwLowDateTime=0xee829690, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xf00dbad0, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xf00dbad0, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0121.189] FindNextFileW (in: hFindFile=0x381cc0, lpFindFileData=0x31e56c | out: lpFindFileData=0x31e56c*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x3a6f2400, ftCreationTime.dwHighDateTime=0x1cad04a, ftLastAccessTime.dwLowDateTime=0x3a6f2400, ftLastAccessTime.dwHighDateTime=0x1cad04a, ftLastWriteTime.dwLowDateTime=0xeebe0180, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0xe21fcc, dwReserved0=0x0, dwReserved1=0x0, cFileName="OutlkLR.cab", cAlternateFileName="")) returned 1 [0121.190] FindNextFileW (in: hFindFile=0x381cc0, lpFindFileData=0x31e56c | out: lpFindFileData=0x31e56c*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x3e02ab00, ftCreationTime.dwHighDateTime=0x1cad04a, ftLastAccessTime.dwLowDateTime=0x3e02ab00, ftLastAccessTime.dwHighDateTime=0x1cad04a, ftLastWriteTime.dwLowDateTime=0xee827f20, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x2bba00, dwReserved0=0x0, dwReserved1=0x0, cFileName="OutlookMUI.msi", cAlternateFileName="OUTLOO~1.MSI")) returned 1 [0121.190] FindNextFileW (in: hFindFile=0x381cc0, lpFindFileData=0x31e56c | out: lpFindFileData=0x31e56c*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x43f88c00, ftCreationTime.dwHighDateTime=0x1cad04a, ftLastAccessTime.dwLowDateTime=0x43f88c00, ftLastAccessTime.dwHighDateTime=0x1cad04a, ftLastWriteTime.dwLowDateTime=0xf6ce9260, ftLastWriteTime.dwHighDateTime=0x1d6eb7e, nFileSizeHigh=0x0, nFileSizeLow=0xc80, dwReserved0=0x0, dwReserved1=0x0, cFileName="OutlookMUI.xml", cAlternateFileName="OUTLOO~1.XML")) returned 1 [0121.190] FindNextFileW (in: hFindFile=0x381cc0, lpFindFileData=0x31e56c | out: lpFindFileData=0x31e56c*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x43f88c00, ftCreationTime.dwHighDateTime=0x1cad04a, ftLastAccessTime.dwLowDateTime=0x43f88c00, ftLastAccessTime.dwHighDateTime=0x1cad04a, ftLastWriteTime.dwLowDateTime=0xf6d5b680, ftLastWriteTime.dwHighDateTime=0x1d6eb7e, nFileSizeHigh=0x0, nFileSizeLow=0x1070, dwReserved0=0x0, dwReserved1=0x0, cFileName="Setup.xml", cAlternateFileName="")) returned 1 [0121.190] FindNextFileW (in: hFindFile=0x381cc0, lpFindFileData=0x31e56c | out: lpFindFileData=0x31e56c*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0121.190] FindClose (in: hFindFile=0x381cc0 | out: hFindFile=0x381cc0) returned 1 [0121.190] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e7f4) returned 1 [0121.190] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e800) returned 1 [0121.190] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e834) returned 1 [0121.190] GetFullPathNameW (in: lpFileName="C:\\MSOCache\\All Users\\{90140000-001A-0409-1000-0000000FF1CE}-C", nBufferLength=0x105, lpBuffer=0x31e33c, lpFilePart=0x0 | out: lpBuffer="C:\\MSOCache\\All Users\\{90140000-001A-0409-1000-0000000FF1CE}-C", lpFilePart=0x0) returned 0x3e [0121.190] GetFullPathNameW (in: lpFileName="C:\\MSOCache\\All Users\\{90140000-001A-0409-1000-0000000FF1CE}-C\\", nBufferLength=0x105, lpBuffer=0x31e310, lpFilePart=0x0 | out: lpBuffer="C:\\MSOCache\\All Users\\{90140000-001A-0409-1000-0000000FF1CE}-C\\", lpFilePart=0x0) returned 0x3f [0121.190] FindFirstFileW (in: lpFileName="C:\\MSOCache\\All Users\\{90140000-001A-0409-1000-0000000FF1CE}-C\\*", lpFindFileData=0x31e55c | out: lpFindFileData=0x31e55c*(dwFileAttributes=0x2011, ftCreationTime.dwLowDateTime=0xee829690, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xf00dbad0, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xf00dbad0, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x381cc0 [0121.190] FindNextFileW (in: hFindFile=0x381cc0, lpFindFileData=0x31e56c | out: lpFindFileData=0x31e56c*(dwFileAttributes=0x2011, ftCreationTime.dwLowDateTime=0xee829690, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xf00dbad0, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xf00dbad0, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0121.191] FindNextFileW (in: hFindFile=0x381cc0, lpFindFileData=0x31e56c | out: lpFindFileData=0x31e56c*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x3a6f2400, ftCreationTime.dwHighDateTime=0x1cad04a, ftLastAccessTime.dwLowDateTime=0x3a6f2400, ftLastAccessTime.dwHighDateTime=0x1cad04a, ftLastWriteTime.dwLowDateTime=0xeebe0180, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0xe21fcc, dwReserved0=0x0, dwReserved1=0x0, cFileName="OutlkLR.cab", cAlternateFileName="")) returned 1 [0121.191] FindNextFileW (in: hFindFile=0x381cc0, lpFindFileData=0x31e56c | out: lpFindFileData=0x31e56c*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x3e02ab00, ftCreationTime.dwHighDateTime=0x1cad04a, ftLastAccessTime.dwLowDateTime=0x3e02ab00, ftLastAccessTime.dwHighDateTime=0x1cad04a, ftLastWriteTime.dwLowDateTime=0xee827f20, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x2bba00, dwReserved0=0x0, dwReserved1=0x0, cFileName="OutlookMUI.msi", cAlternateFileName="OUTLOO~1.MSI")) returned 1 [0121.191] FindNextFileW (in: hFindFile=0x381cc0, lpFindFileData=0x31e56c | out: lpFindFileData=0x31e56c*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x43f88c00, ftCreationTime.dwHighDateTime=0x1cad04a, ftLastAccessTime.dwLowDateTime=0x43f88c00, ftLastAccessTime.dwHighDateTime=0x1cad04a, ftLastWriteTime.dwLowDateTime=0xf6ce9260, ftLastWriteTime.dwHighDateTime=0x1d6eb7e, nFileSizeHigh=0x0, nFileSizeLow=0xc80, dwReserved0=0x0, dwReserved1=0x0, cFileName="OutlookMUI.xml", cAlternateFileName="OUTLOO~1.XML")) returned 1 [0121.191] FindNextFileW (in: hFindFile=0x381cc0, lpFindFileData=0x31e56c | out: lpFindFileData=0x31e56c*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x43f88c00, ftCreationTime.dwHighDateTime=0x1cad04a, ftLastAccessTime.dwLowDateTime=0x43f88c00, ftLastAccessTime.dwHighDateTime=0x1cad04a, ftLastWriteTime.dwLowDateTime=0xf6d5b680, ftLastWriteTime.dwHighDateTime=0x1d6eb7e, nFileSizeHigh=0x0, nFileSizeLow=0x1070, dwReserved0=0x0, dwReserved1=0x0, cFileName="Setup.xml", cAlternateFileName="")) returned 1 [0121.191] FindNextFileW (in: hFindFile=0x381cc0, lpFindFileData=0x31e56c | out: lpFindFileData=0x31e56c*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x43f88c00, ftCreationTime.dwHighDateTime=0x1cad04a, ftLastAccessTime.dwLowDateTime=0x43f88c00, ftLastAccessTime.dwHighDateTime=0x1cad04a, ftLastWriteTime.dwLowDateTime=0xf6d5b680, ftLastWriteTime.dwHighDateTime=0x1d6eb7e, nFileSizeHigh=0x0, nFileSizeLow=0x1070, dwReserved0=0x0, dwReserved1=0x0, cFileName="Setup.xml", cAlternateFileName="")) returned 0 [0121.191] FindClose (in: hFindFile=0x381cc0 | out: hFindFile=0x381cc0) returned 1 [0121.191] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e7f4) returned 1 [0121.191] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e800) returned 1 [0121.191] GetFullPathNameW (in: lpFileName="C:\\MSOCache\\All Users\\{90140000-001A-0409-1000-0000000FF1CE}-C\\OutlookMUI.xml", nBufferLength=0x105, lpBuffer=0x31e1fc, lpFilePart=0x0 | out: lpBuffer="C:\\MSOCache\\All Users\\{90140000-001A-0409-1000-0000000FF1CE}-C\\OutlookMUI.xml", lpFilePart=0x0) returned 0x4d [0121.191] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e6f0) returned 1 [0121.192] CreateFileW (lpFileName="C:\\MSOCache\\All Users\\{90140000-001A-0409-1000-0000000FF1CE}-C\\OutlookMUI.xml" (normalized: "c:\\msocache\\all users\\{90140000-001a-0409-1000-0000000ff1ce}-c\\outlookmui.xml"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x178 [0121.192] GetFileType (hFile=0x178) returned 0x1 [0121.192] GetFileType (hFile=0x178) returned 0x1 [0121.192] GetFileSize (in: hFile=0x178, lpFileSizeHigh=0x31e7f8 | out: lpFileSizeHigh=0x31e7f8*=0x0) returned 0xc80 [0121.192] ReadFile (in: hFile=0x178, lpBuffer=0x29972a0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x31e7a4, lpOverlapped=0x0 | out: lpBuffer=0x29972a0*, lpNumberOfBytesRead=0x31e7a4*=0xc80, lpOverlapped=0x0) returned 1 [0121.192] CloseHandle (hObject=0x178) returned 1 [0121.193] GetFullPathNameW (in: lpFileName="C:\\MSOCache\\All Users\\{90140000-001A-0409-1000-0000000FF1CE}-C\\OutlookMUI.xml", nBufferLength=0x105, lpBuffer=0x31e1e8, lpFilePart=0x0 | out: lpBuffer="C:\\MSOCache\\All Users\\{90140000-001A-0409-1000-0000000FF1CE}-C\\OutlookMUI.xml", lpFilePart=0x0) returned 0x4d [0121.193] CreateFileW (lpFileName="C:\\MSOCache\\All Users\\{90140000-001A-0409-1000-0000000FF1CE}-C\\OutlookMUI.xml" (normalized: "c:\\msocache\\all users\\{90140000-001a-0409-1000-0000000ff1ce}-c\\outlookmui.xml"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x178 [0121.196] GetFileType (hFile=0x178) returned 0x1 [0121.196] GetFileType (hFile=0x178) returned 0x1 [0121.196] WriteFile (in: hFile=0x178, lpBuffer=0x299a488*, nNumberOfBytesToWrite=0xc80, lpNumberOfBytesWritten=0x31e76c, lpOverlapped=0x0 | out: lpBuffer=0x299a488*, lpNumberOfBytesWritten=0x31e76c*=0xc80, lpOverlapped=0x0) returned 1 [0121.197] CloseHandle (hObject=0x178) returned 1 [0121.197] GetFullPathNameW (in: lpFileName="C:\\MSOCache\\All Users\\{90140000-001A-0409-1000-0000000FF1CE}-C\\OutlookMUI.xml", nBufferLength=0x105, lpBuffer=0x31e31c, lpFilePart=0x0 | out: lpBuffer="C:\\MSOCache\\All Users\\{90140000-001A-0409-1000-0000000FF1CE}-C\\OutlookMUI.xml", lpFilePart=0x0) returned 0x4d [0121.197] GetFullPathNameW (in: lpFileName="C:\\MSOCache\\All Users\\{90140000-001A-0409-1000-0000000FF1CE}-C\\OutlookMUI.xml.[neftet@tutanota.com].boom", nBufferLength=0x105, lpBuffer=0x31e31c, lpFilePart=0x0 | out: lpBuffer="C:\\MSOCache\\All Users\\{90140000-001A-0409-1000-0000000FF1CE}-C\\OutlookMUI.xml.[neftet@tutanota.com].boom", lpFilePart=0x0) returned 0x68 [0121.197] GetFileAttributesExW (in: lpFileName="C:\\MSOCache\\All Users\\{90140000-001A-0409-1000-0000000FF1CE}-C\\OutlookMUI.xml" (normalized: "c:\\msocache\\all users\\{90140000-001a-0409-1000-0000000ff1ce}-c\\outlookmui.xml"), fInfoLevelId=0x0, lpFileInformation=0x31e7f8 | out: lpFileInformation=0x31e7f8*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x43f88c00, ftCreationTime.dwHighDateTime=0x1cad04a, ftLastAccessTime.dwLowDateTime=0x43f88c00, ftLastAccessTime.dwHighDateTime=0x1cad04a, ftLastWriteTime.dwLowDateTime=0x2bad5ca0, ftLastWriteTime.dwHighDateTime=0x1d6eb7f, nFileSizeHigh=0x0, nFileSizeLow=0xc80)) returned 1 [0121.197] MoveFileW (lpExistingFileName="C:\\MSOCache\\All Users\\{90140000-001A-0409-1000-0000000FF1CE}-C\\OutlookMUI.xml" (normalized: "c:\\msocache\\all users\\{90140000-001a-0409-1000-0000000ff1ce}-c\\outlookmui.xml"), lpNewFileName="C:\\MSOCache\\All Users\\{90140000-001A-0409-1000-0000000FF1CE}-C\\OutlookMUI.xml.[neftet@tutanota.com].boom" (normalized: "c:\\msocache\\all users\\{90140000-001a-0409-1000-0000000ff1ce}-c\\outlookmui.xml.[neftet@tutanota.com].boom")) returned 1 [0121.198] GetFullPathNameW (in: lpFileName="C:\\MSOCache\\All Users\\{90140000-001A-0409-1000-0000000FF1CE}-C\\Setup.xml", nBufferLength=0x105, lpBuffer=0x31e1fc, lpFilePart=0x0 | out: lpBuffer="C:\\MSOCache\\All Users\\{90140000-001A-0409-1000-0000000FF1CE}-C\\Setup.xml", lpFilePart=0x0) returned 0x48 [0121.198] CreateFileW (lpFileName="C:\\MSOCache\\All Users\\{90140000-001A-0409-1000-0000000FF1CE}-C\\Setup.xml" (normalized: "c:\\msocache\\all users\\{90140000-001a-0409-1000-0000000ff1ce}-c\\setup.xml"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x178 [0121.198] GetFileType (hFile=0x178) returned 0x1 [0121.198] GetFileType (hFile=0x178) returned 0x1 [0121.198] GetFileSize (in: hFile=0x178, lpFileSizeHigh=0x31e7f8 | out: lpFileSizeHigh=0x31e7f8*=0x0) returned 0x1070 [0121.198] ReadFile (in: hFile=0x178, lpBuffer=0x299b9a0, nNumberOfBytesToRead=0x1070, lpNumberOfBytesRead=0x31e7a4, lpOverlapped=0x0 | out: lpBuffer=0x299b9a0*, lpNumberOfBytesRead=0x31e7a4*=0x1070, lpOverlapped=0x0) returned 1 [0121.199] CloseHandle (hObject=0x178) returned 1 [0121.199] GetFullPathNameW (in: lpFileName="C:\\MSOCache\\All Users\\{90140000-001A-0409-1000-0000000FF1CE}-C\\Setup.xml", nBufferLength=0x105, lpBuffer=0x31e1e8, lpFilePart=0x0 | out: lpBuffer="C:\\MSOCache\\All Users\\{90140000-001A-0409-1000-0000000FF1CE}-C\\Setup.xml", lpFilePart=0x0) returned 0x48 [0121.199] CreateFileW (lpFileName="C:\\MSOCache\\All Users\\{90140000-001A-0409-1000-0000000FF1CE}-C\\Setup.xml" (normalized: "c:\\msocache\\all users\\{90140000-001a-0409-1000-0000000ff1ce}-c\\setup.xml"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x178 [0121.200] GetFileType (hFile=0x178) returned 0x1 [0121.200] GetFileType (hFile=0x178) returned 0x1 [0121.200] WriteFile (in: hFile=0x178, lpBuffer=0x299ce24*, nNumberOfBytesToWrite=0x1070, lpNumberOfBytesWritten=0x31e798, lpOverlapped=0x0 | out: lpBuffer=0x299ce24*, lpNumberOfBytesWritten=0x31e798*=0x1070, lpOverlapped=0x0) returned 1 [0121.201] CloseHandle (hObject=0x178) returned 1 [0121.201] GetFullPathNameW (in: lpFileName="C:\\MSOCache\\All Users\\{90140000-001A-0409-1000-0000000FF1CE}-C\\Setup.xml", nBufferLength=0x105, lpBuffer=0x31e31c, lpFilePart=0x0 | out: lpBuffer="C:\\MSOCache\\All Users\\{90140000-001A-0409-1000-0000000FF1CE}-C\\Setup.xml", lpFilePart=0x0) returned 0x48 [0121.201] GetFullPathNameW (in: lpFileName="C:\\MSOCache\\All Users\\{90140000-001A-0409-1000-0000000FF1CE}-C\\Setup.xml.[neftet@tutanota.com].boom", nBufferLength=0x105, lpBuffer=0x31e31c, lpFilePart=0x0 | out: lpBuffer="C:\\MSOCache\\All Users\\{90140000-001A-0409-1000-0000000FF1CE}-C\\Setup.xml.[neftet@tutanota.com].boom", lpFilePart=0x0) returned 0x63 [0121.201] GetFileAttributesExW (in: lpFileName="C:\\MSOCache\\All Users\\{90140000-001A-0409-1000-0000000FF1CE}-C\\Setup.xml" (normalized: "c:\\msocache\\all users\\{90140000-001a-0409-1000-0000000ff1ce}-c\\setup.xml"), fInfoLevelId=0x0, lpFileInformation=0x31e7f8 | out: lpFileInformation=0x31e7f8*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x43f88c00, ftCreationTime.dwHighDateTime=0x1cad04a, ftLastAccessTime.dwLowDateTime=0x43f88c00, ftLastAccessTime.dwHighDateTime=0x1cad04a, ftLastWriteTime.dwLowDateTime=0x2bad5ca0, ftLastWriteTime.dwHighDateTime=0x1d6eb7f, nFileSizeHigh=0x0, nFileSizeLow=0x1070)) returned 1 [0121.201] MoveFileW (lpExistingFileName="C:\\MSOCache\\All Users\\{90140000-001A-0409-1000-0000000FF1CE}-C\\Setup.xml" (normalized: "c:\\msocache\\all users\\{90140000-001a-0409-1000-0000000ff1ce}-c\\setup.xml"), lpNewFileName="C:\\MSOCache\\All Users\\{90140000-001A-0409-1000-0000000FF1CE}-C\\Setup.xml.[neftet@tutanota.com].boom" (normalized: "c:\\msocache\\all users\\{90140000-001a-0409-1000-0000000ff1ce}-c\\setup.xml.[neftet@tutanota.com].boom")) returned 1 [0121.202] GetFullPathNameW (in: lpFileName="C:\\MSOCache\\All Users\\{90140000-001B-0409-1000-0000000FF1CE}-C", nBufferLength=0x105, lpBuffer=0x31e33c, lpFilePart=0x0 | out: lpBuffer="C:\\MSOCache\\All Users\\{90140000-001B-0409-1000-0000000FF1CE}-C", lpFilePart=0x0) returned 0x3e [0121.202] GetFullPathNameW (in: lpFileName="C:\\MSOCache\\All Users\\{90140000-001B-0409-1000-0000000FF1CE}-C\\", nBufferLength=0x105, lpBuffer=0x31e310, lpFilePart=0x0 | out: lpBuffer="C:\\MSOCache\\All Users\\{90140000-001B-0409-1000-0000000FF1CE}-C\\", lpFilePart=0x0) returned 0x3f [0121.202] FindFirstFileW (in: lpFileName="C:\\MSOCache\\All Users\\{90140000-001B-0409-1000-0000000FF1CE}-C\\*", lpFindFileData=0x31e55c | out: lpFindFileData=0x31e55c*(dwFileAttributes=0x2011, ftCreationTime.dwLowDateTime=0xfc8a9170, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xfe076d70, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xfe076d70, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x381cc0 [0121.202] FindNextFileW (in: hFindFile=0x381cc0, lpFindFileData=0x31e56c | out: lpFindFileData=0x31e56c*(dwFileAttributes=0x2011, ftCreationTime.dwLowDateTime=0xfc8a9170, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xfe076d70, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xfe076d70, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0121.202] FindNextFileW (in: hFindFile=0x381cc0, lpFindFileData=0x31e56c | out: lpFindFileData=0x31e56c*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x43f88c00, ftCreationTime.dwHighDateTime=0x1cad04a, ftLastAccessTime.dwLowDateTime=0x43f88c00, ftLastAccessTime.dwHighDateTime=0x1cad04a, ftLastWriteTime.dwLowDateTime=0xf6dcdaa0, ftLastWriteTime.dwHighDateTime=0x1d6eb7e, nFileSizeHigh=0x0, nFileSizeLow=0x980, dwReserved0=0x0, dwReserved1=0x0, cFileName="Setup.xml", cAlternateFileName="")) returned 1 [0121.203] FindNextFileW (in: hFindFile=0x381cc0, lpFindFileData=0x31e56c | out: lpFindFileData=0x31e56c*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x2fb48f00, ftCreationTime.dwHighDateTime=0x1cad04a, ftLastAccessTime.dwLowDateTime=0x2fb48f00, ftLastAccessTime.dwHighDateTime=0x1cad04a, ftLastWriteTime.dwLowDateTime=0xfc967850, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x29c6dbd, dwReserved0=0x0, dwReserved1=0x0, cFileName="WordLR.cab", cAlternateFileName="")) returned 1 [0121.203] FindNextFileW (in: hFindFile=0x381cc0, lpFindFileData=0x31e56c | out: lpFindFileData=0x31e56c*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x3e02ab00, ftCreationTime.dwHighDateTime=0x1cad04a, ftLastAccessTime.dwLowDateTime=0x3e02ab00, ftLastAccessTime.dwHighDateTime=0x1cad04a, ftLastWriteTime.dwLowDateTime=0xfc8a9170, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x267e00, dwReserved0=0x0, dwReserved1=0x0, cFileName="WordMUI.msi", cAlternateFileName="")) returned 1 [0121.203] FindNextFileW (in: hFindFile=0x381cc0, lpFindFileData=0x31e56c | out: lpFindFileData=0x31e56c*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x43f88c00, ftCreationTime.dwHighDateTime=0x1cad04a, ftLastAccessTime.dwLowDateTime=0x43f88c00, ftLastAccessTime.dwHighDateTime=0x1cad04a, ftLastWriteTime.dwLowDateTime=0xf6e66020, ftLastWriteTime.dwHighDateTime=0x1d6eb7e, nFileSizeHigh=0x0, nFileSizeLow=0x710, dwReserved0=0x0, dwReserved1=0x0, cFileName="WordMUI.xml", cAlternateFileName="")) returned 1 [0121.203] FindNextFileW (in: hFindFile=0x381cc0, lpFindFileData=0x31e56c | out: lpFindFileData=0x31e56c*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0121.203] FindClose (in: hFindFile=0x381cc0 | out: hFindFile=0x381cc0) returned 1 [0121.203] GetFullPathNameW (in: lpFileName="C:\\MSOCache\\All Users\\{90140000-001B-0409-1000-0000000FF1CE}-C", nBufferLength=0x105, lpBuffer=0x31e33c, lpFilePart=0x0 | out: lpBuffer="C:\\MSOCache\\All Users\\{90140000-001B-0409-1000-0000000FF1CE}-C", lpFilePart=0x0) returned 0x3e [0121.203] GetFullPathNameW (in: lpFileName="C:\\MSOCache\\All Users\\{90140000-001B-0409-1000-0000000FF1CE}-C\\", nBufferLength=0x105, lpBuffer=0x31e310, lpFilePart=0x0 | out: lpBuffer="C:\\MSOCache\\All Users\\{90140000-001B-0409-1000-0000000FF1CE}-C\\", lpFilePart=0x0) returned 0x3f [0121.203] FindFirstFileW (in: lpFileName="C:\\MSOCache\\All Users\\{90140000-001B-0409-1000-0000000FF1CE}-C\\*", lpFindFileData=0x31e55c | out: lpFindFileData=0x31e55c*(dwFileAttributes=0x2011, ftCreationTime.dwLowDateTime=0xfc8a9170, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xfe076d70, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xfe076d70, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x381cc0 [0121.203] FindNextFileW (in: hFindFile=0x381cc0, lpFindFileData=0x31e56c | out: lpFindFileData=0x31e56c*(dwFileAttributes=0x2011, ftCreationTime.dwLowDateTime=0xfc8a9170, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xfe076d70, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xfe076d70, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0121.204] FindNextFileW (in: hFindFile=0x381cc0, lpFindFileData=0x31e56c | out: lpFindFileData=0x31e56c*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x43f88c00, ftCreationTime.dwHighDateTime=0x1cad04a, ftLastAccessTime.dwLowDateTime=0x43f88c00, ftLastAccessTime.dwHighDateTime=0x1cad04a, ftLastWriteTime.dwLowDateTime=0xf6dcdaa0, ftLastWriteTime.dwHighDateTime=0x1d6eb7e, nFileSizeHigh=0x0, nFileSizeLow=0x980, dwReserved0=0x0, dwReserved1=0x0, cFileName="Setup.xml", cAlternateFileName="")) returned 1 [0121.204] FindNextFileW (in: hFindFile=0x381cc0, lpFindFileData=0x31e56c | out: lpFindFileData=0x31e56c*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x2fb48f00, ftCreationTime.dwHighDateTime=0x1cad04a, ftLastAccessTime.dwLowDateTime=0x2fb48f00, ftLastAccessTime.dwHighDateTime=0x1cad04a, ftLastWriteTime.dwLowDateTime=0xfc967850, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x29c6dbd, dwReserved0=0x0, dwReserved1=0x0, cFileName="WordLR.cab", cAlternateFileName="")) returned 1 [0121.204] FindNextFileW (in: hFindFile=0x381cc0, lpFindFileData=0x31e56c | out: lpFindFileData=0x31e56c*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x3e02ab00, ftCreationTime.dwHighDateTime=0x1cad04a, ftLastAccessTime.dwLowDateTime=0x3e02ab00, ftLastAccessTime.dwHighDateTime=0x1cad04a, ftLastWriteTime.dwLowDateTime=0xfc8a9170, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x267e00, dwReserved0=0x0, dwReserved1=0x0, cFileName="WordMUI.msi", cAlternateFileName="")) returned 1 [0121.204] FindNextFileW (in: hFindFile=0x381cc0, lpFindFileData=0x31e56c | out: lpFindFileData=0x31e56c*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x43f88c00, ftCreationTime.dwHighDateTime=0x1cad04a, ftLastAccessTime.dwLowDateTime=0x43f88c00, ftLastAccessTime.dwHighDateTime=0x1cad04a, ftLastWriteTime.dwLowDateTime=0xf6e66020, ftLastWriteTime.dwHighDateTime=0x1d6eb7e, nFileSizeHigh=0x0, nFileSizeLow=0x710, dwReserved0=0x0, dwReserved1=0x0, cFileName="WordMUI.xml", cAlternateFileName="")) returned 1 [0121.204] FindNextFileW (in: hFindFile=0x381cc0, lpFindFileData=0x31e56c | out: lpFindFileData=0x31e56c*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x43f88c00, ftCreationTime.dwHighDateTime=0x1cad04a, ftLastAccessTime.dwLowDateTime=0x43f88c00, ftLastAccessTime.dwHighDateTime=0x1cad04a, ftLastWriteTime.dwLowDateTime=0xf6e66020, ftLastWriteTime.dwHighDateTime=0x1d6eb7e, nFileSizeHigh=0x0, nFileSizeLow=0x710, dwReserved0=0x0, dwReserved1=0x0, cFileName="WordMUI.xml", cAlternateFileName="")) returned 0 [0121.204] FindClose (in: hFindFile=0x381cc0 | out: hFindFile=0x381cc0) returned 1 [0121.204] GetFullPathNameW (in: lpFileName="C:\\MSOCache\\All Users\\{90140000-001B-0409-1000-0000000FF1CE}-C\\Setup.xml", nBufferLength=0x105, lpBuffer=0x31e1fc, lpFilePart=0x0 | out: lpBuffer="C:\\MSOCache\\All Users\\{90140000-001B-0409-1000-0000000FF1CE}-C\\Setup.xml", lpFilePart=0x0) returned 0x48 [0121.204] CreateFileW (lpFileName="C:\\MSOCache\\All Users\\{90140000-001B-0409-1000-0000000FF1CE}-C\\Setup.xml" (normalized: "c:\\msocache\\all users\\{90140000-001b-0409-1000-0000000ff1ce}-c\\setup.xml"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x178 [0121.204] GetFileType (hFile=0x178) returned 0x1 [0121.204] GetFileType (hFile=0x178) returned 0x1 [0121.205] GetFileSize (in: hFile=0x178, lpFileSizeHigh=0x31e7f8 | out: lpFileSizeHigh=0x31e7f8*=0x0) returned 0x980 [0121.205] ReadFile (in: hFile=0x178, lpBuffer=0x29a1f94, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x31e7a4, lpOverlapped=0x0 | out: lpBuffer=0x29a1f94*, lpNumberOfBytesRead=0x31e7a4*=0x980, lpOverlapped=0x0) returned 1 [0121.205] CloseHandle (hObject=0x178) returned 1 [0121.206] GetFullPathNameW (in: lpFileName="C:\\MSOCache\\All Users\\{90140000-001B-0409-1000-0000000FF1CE}-C\\Setup.xml", nBufferLength=0x105, lpBuffer=0x31e1e8, lpFilePart=0x0 | out: lpBuffer="C:\\MSOCache\\All Users\\{90140000-001B-0409-1000-0000000FF1CE}-C\\Setup.xml", lpFilePart=0x0) returned 0x48 [0121.206] CreateFileW (lpFileName="C:\\MSOCache\\All Users\\{90140000-001B-0409-1000-0000000FF1CE}-C\\Setup.xml" (normalized: "c:\\msocache\\all users\\{90140000-001b-0409-1000-0000000ff1ce}-c\\setup.xml"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x178 [0121.206] GetFileType (hFile=0x178) returned 0x1 [0121.206] GetFileType (hFile=0x178) returned 0x1 [0121.207] WriteFile (in: hFile=0x178, lpBuffer=0x29a4e68*, nNumberOfBytesToWrite=0x980, lpNumberOfBytesWritten=0x31e76c, lpOverlapped=0x0 | out: lpBuffer=0x29a4e68*, lpNumberOfBytesWritten=0x31e76c*=0x980, lpOverlapped=0x0) returned 1 [0121.208] GetFullPathNameW (in: lpFileName="C:\\MSOCache\\All Users\\{90140000-001B-0409-1000-0000000FF1CE}-C\\Setup.xml", nBufferLength=0x105, lpBuffer=0x31e31c, lpFilePart=0x0 | out: lpBuffer="C:\\MSOCache\\All Users\\{90140000-001B-0409-1000-0000000FF1CE}-C\\Setup.xml", lpFilePart=0x0) returned 0x48 [0121.208] GetFullPathNameW (in: lpFileName="C:\\MSOCache\\All Users\\{90140000-001B-0409-1000-0000000FF1CE}-C\\Setup.xml.[neftet@tutanota.com].boom", nBufferLength=0x105, lpBuffer=0x31e31c, lpFilePart=0x0 | out: lpBuffer="C:\\MSOCache\\All Users\\{90140000-001B-0409-1000-0000000FF1CE}-C\\Setup.xml.[neftet@tutanota.com].boom", lpFilePart=0x0) returned 0x63 [0121.208] GetFileAttributesExW (in: lpFileName="C:\\MSOCache\\All Users\\{90140000-001B-0409-1000-0000000FF1CE}-C\\Setup.xml" (normalized: "c:\\msocache\\all users\\{90140000-001b-0409-1000-0000000ff1ce}-c\\setup.xml"), fInfoLevelId=0x0, lpFileInformation=0x31e7f8 | out: lpFileInformation=0x31e7f8*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x43f88c00, ftCreationTime.dwHighDateTime=0x1cad04a, ftLastAccessTime.dwLowDateTime=0x43f88c00, ftLastAccessTime.dwHighDateTime=0x1cad04a, ftLastWriteTime.dwLowDateTime=0x2bad5ca0, ftLastWriteTime.dwHighDateTime=0x1d6eb7f, nFileSizeHigh=0x0, nFileSizeLow=0x980)) returned 1 [0121.209] MoveFileW (lpExistingFileName="C:\\MSOCache\\All Users\\{90140000-001B-0409-1000-0000000FF1CE}-C\\Setup.xml" (normalized: "c:\\msocache\\all users\\{90140000-001b-0409-1000-0000000ff1ce}-c\\setup.xml"), lpNewFileName="C:\\MSOCache\\All Users\\{90140000-001B-0409-1000-0000000FF1CE}-C\\Setup.xml.[neftet@tutanota.com].boom" (normalized: "c:\\msocache\\all users\\{90140000-001b-0409-1000-0000000ff1ce}-c\\setup.xml.[neftet@tutanota.com].boom")) returned 1 [0121.211] GetFullPathNameW (in: lpFileName="C:\\MSOCache\\All Users\\{90140000-001B-0409-1000-0000000FF1CE}-C\\WordMUI.xml", nBufferLength=0x105, lpBuffer=0x31e1fc, lpFilePart=0x0 | out: lpBuffer="C:\\MSOCache\\All Users\\{90140000-001B-0409-1000-0000000FF1CE}-C\\WordMUI.xml", lpFilePart=0x0) returned 0x4a [0121.211] CreateFileW (lpFileName="C:\\MSOCache\\All Users\\{90140000-001B-0409-1000-0000000FF1CE}-C\\WordMUI.xml" (normalized: "c:\\msocache\\all users\\{90140000-001b-0409-1000-0000000ff1ce}-c\\wordmui.xml"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x178 [0121.211] GetFileType (hFile=0x178) returned 0x1 [0121.211] GetFileType (hFile=0x178) returned 0x1 [0121.211] GetFileSize (in: hFile=0x178, lpFileSizeHigh=0x31e7f8 | out: lpFileSizeHigh=0x31e7f8*=0x0) returned 0x710 [0121.211] ReadFile (in: hFile=0x178, lpBuffer=0x29a6ab4, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x31e7a4, lpOverlapped=0x0 | out: lpBuffer=0x29a6ab4*, lpNumberOfBytesRead=0x31e7a4*=0x710, lpOverlapped=0x0) returned 1 [0121.212] CloseHandle (hObject=0x178) returned 1 [0121.212] GetFullPathNameW (in: lpFileName="C:\\MSOCache\\All Users\\{90140000-001B-0409-1000-0000000FF1CE}-C\\WordMUI.xml", nBufferLength=0x105, lpBuffer=0x31e1e8, lpFilePart=0x0 | out: lpBuffer="C:\\MSOCache\\All Users\\{90140000-001B-0409-1000-0000000FF1CE}-C\\WordMUI.xml", lpFilePart=0x0) returned 0x4a [0121.212] CreateFileW (lpFileName="C:\\MSOCache\\All Users\\{90140000-001B-0409-1000-0000000FF1CE}-C\\WordMUI.xml" (normalized: "c:\\msocache\\all users\\{90140000-001b-0409-1000-0000000ff1ce}-c\\wordmui.xml"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x178 [0121.213] GetFileType (hFile=0x178) returned 0x1 [0121.213] GetFileType (hFile=0x178) returned 0x1 [0121.213] WriteFile (in: hFile=0x178, lpBuffer=0x29a9720*, nNumberOfBytesToWrite=0x710, lpNumberOfBytesWritten=0x31e76c, lpOverlapped=0x0 | out: lpBuffer=0x29a9720*, lpNumberOfBytesWritten=0x31e76c*=0x710, lpOverlapped=0x0) returned 1 [0121.214] GetFullPathNameW (in: lpFileName="C:\\MSOCache\\All Users\\{90140000-001B-0409-1000-0000000FF1CE}-C\\WordMUI.xml", nBufferLength=0x105, lpBuffer=0x31e31c, lpFilePart=0x0 | out: lpBuffer="C:\\MSOCache\\All Users\\{90140000-001B-0409-1000-0000000FF1CE}-C\\WordMUI.xml", lpFilePart=0x0) returned 0x4a [0121.214] GetFullPathNameW (in: lpFileName="C:\\MSOCache\\All Users\\{90140000-001B-0409-1000-0000000FF1CE}-C\\WordMUI.xml.[neftet@tutanota.com].boom", nBufferLength=0x105, lpBuffer=0x31e31c, lpFilePart=0x0 | out: lpBuffer="C:\\MSOCache\\All Users\\{90140000-001B-0409-1000-0000000FF1CE}-C\\WordMUI.xml.[neftet@tutanota.com].boom", lpFilePart=0x0) returned 0x65 [0121.214] GetFileAttributesExW (in: lpFileName="C:\\MSOCache\\All Users\\{90140000-001B-0409-1000-0000000FF1CE}-C\\WordMUI.xml" (normalized: "c:\\msocache\\all users\\{90140000-001b-0409-1000-0000000ff1ce}-c\\wordmui.xml"), fInfoLevelId=0x0, lpFileInformation=0x31e7f8 | out: lpFileInformation=0x31e7f8*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x43f88c00, ftCreationTime.dwHighDateTime=0x1cad04a, ftLastAccessTime.dwLowDateTime=0x43f88c00, ftLastAccessTime.dwHighDateTime=0x1cad04a, ftLastWriteTime.dwLowDateTime=0x2bafbe00, ftLastWriteTime.dwHighDateTime=0x1d6eb7f, nFileSizeHigh=0x0, nFileSizeLow=0x710)) returned 1 [0121.214] MoveFileW (lpExistingFileName="C:\\MSOCache\\All Users\\{90140000-001B-0409-1000-0000000FF1CE}-C\\WordMUI.xml" (normalized: "c:\\msocache\\all users\\{90140000-001b-0409-1000-0000000ff1ce}-c\\wordmui.xml"), lpNewFileName="C:\\MSOCache\\All Users\\{90140000-001B-0409-1000-0000000FF1CE}-C\\WordMUI.xml.[neftet@tutanota.com].boom" (normalized: "c:\\msocache\\all users\\{90140000-001b-0409-1000-0000000ff1ce}-c\\wordmui.xml.[neftet@tutanota.com].boom")) returned 1 [0121.215] GetFullPathNameW (in: lpFileName="C:\\MSOCache\\All Users\\{90140000-002C-0409-1000-0000000FF1CE}-C", nBufferLength=0x105, lpBuffer=0x31e33c, lpFilePart=0x0 | out: lpBuffer="C:\\MSOCache\\All Users\\{90140000-002C-0409-1000-0000000FF1CE}-C", lpFilePart=0x0) returned 0x3e [0121.215] GetFullPathNameW (in: lpFileName="C:\\MSOCache\\All Users\\{90140000-002C-0409-1000-0000000FF1CE}-C\\", nBufferLength=0x105, lpBuffer=0x31e310, lpFilePart=0x0 | out: lpBuffer="C:\\MSOCache\\All Users\\{90140000-002C-0409-1000-0000000FF1CE}-C\\", lpFilePart=0x0) returned 0x3f [0121.215] FindFirstFileW (in: lpFileName="C:\\MSOCache\\All Users\\{90140000-002C-0409-1000-0000000FF1CE}-C\\*", lpFindFileData=0x31e55c | out: lpFindFileData=0x31e55c*(dwFileAttributes=0x2011, ftCreationTime.dwLowDateTime=0xf00dbad0, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xf58c8770, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xf58c8770, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x381cc0 [0121.215] FindNextFileW (in: hFindFile=0x381cc0, lpFindFileData=0x31e56c | out: lpFindFileData=0x31e56c*(dwFileAttributes=0x2011, ftCreationTime.dwLowDateTime=0xf00dbad0, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xf58c8770, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xf58c8770, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0121.215] FindNextFileW (in: hFindFile=0x381cc0, lpFindFileData=0x31e56c | out: lpFindFileData=0x31e56c*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xf01c0310, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xf07b3a10, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xf07b3a10, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Proof.en", cAlternateFileName="")) returned 1 [0121.215] FindNextFileW (in: hFindFile=0x381cc0, lpFindFileData=0x31e56c | out: lpFindFileData=0x31e56c*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xf4d53d90, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xf4f690d0, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xf4f690d0, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Proof.es", cAlternateFileName="")) returned 1 [0121.215] FindNextFileW (in: hFindFile=0x381cc0, lpFindFileData=0x31e56c | out: lpFindFileData=0x31e56c*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xf2bda830, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xf30772d0, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xf30772d0, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Proof.fr", cAlternateFileName="")) returned 1 [0121.215] FindNextFileW (in: hFindFile=0x381cc0, lpFindFileData=0x31e56c | out: lpFindFileData=0x31e56c*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x40650500, ftCreationTime.dwHighDateTime=0x1cad04a, ftLastAccessTime.dwLowDateTime=0x40650500, ftLastAccessTime.dwHighDateTime=0x1cad04a, ftLastWriteTime.dwLowDateTime=0xf0126df0, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0xd4200, dwReserved0=0x0, dwReserved1=0x0, cFileName="Proofing.msi", cAlternateFileName="")) returned 1 [0121.215] FindNextFileW (in: hFindFile=0x381cc0, lpFindFileData=0x31e56c | out: lpFindFileData=0x31e56c*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x4529b900, ftCreationTime.dwHighDateTime=0x1cad04a, ftLastAccessTime.dwLowDateTime=0x4529b900, ftLastAccessTime.dwHighDateTime=0x1cad04a, ftLastWriteTime.dwLowDateTime=0xf6e8c180, ftLastWriteTime.dwHighDateTime=0x1d6eb7e, nFileSizeHigh=0x0, nFileSizeLow=0x330, dwReserved0=0x0, dwReserved1=0x0, cFileName="Proofing.xml", cAlternateFileName="")) returned 1 [0121.216] FindNextFileW (in: hFindFile=0x381cc0, lpFindFileData=0x31e56c | out: lpFindFileData=0x31e56c*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x42c75f00, ftCreationTime.dwHighDateTime=0x1cad04a, ftLastAccessTime.dwLowDateTime=0x42c75f00, ftLastAccessTime.dwHighDateTime=0x1cad04a, ftLastWriteTime.dwLowDateTime=0xf6f24700, ftLastWriteTime.dwHighDateTime=0x1d6eb7e, nFileSizeHigh=0x0, nFileSizeLow=0x1700, dwReserved0=0x0, dwReserved1=0x0, cFileName="Setup.xml", cAlternateFileName="")) returned 1 [0121.216] FindNextFileW (in: hFindFile=0x381cc0, lpFindFileData=0x31e56c | out: lpFindFileData=0x31e56c*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0121.216] FindClose (in: hFindFile=0x381cc0 | out: hFindFile=0x381cc0) returned 1 [0121.216] GetFullPathNameW (in: lpFileName="C:\\MSOCache\\All Users\\{90140000-002C-0409-1000-0000000FF1CE}-C", nBufferLength=0x105, lpBuffer=0x31e33c, lpFilePart=0x0 | out: lpBuffer="C:\\MSOCache\\All Users\\{90140000-002C-0409-1000-0000000FF1CE}-C", lpFilePart=0x0) returned 0x3e [0121.216] GetFullPathNameW (in: lpFileName="C:\\MSOCache\\All Users\\{90140000-002C-0409-1000-0000000FF1CE}-C\\", nBufferLength=0x105, lpBuffer=0x31e310, lpFilePart=0x0 | out: lpBuffer="C:\\MSOCache\\All Users\\{90140000-002C-0409-1000-0000000FF1CE}-C\\", lpFilePart=0x0) returned 0x3f [0121.216] FindFirstFileW (in: lpFileName="C:\\MSOCache\\All Users\\{90140000-002C-0409-1000-0000000FF1CE}-C\\*", lpFindFileData=0x31e55c | out: lpFindFileData=0x31e55c*(dwFileAttributes=0x2011, ftCreationTime.dwLowDateTime=0xf00dbad0, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xf58c8770, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xf58c8770, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x381cc0 [0121.216] FindNextFileW (in: hFindFile=0x381cc0, lpFindFileData=0x31e56c | out: lpFindFileData=0x31e56c*(dwFileAttributes=0x2011, ftCreationTime.dwLowDateTime=0xf00dbad0, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xf58c8770, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xf58c8770, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0121.216] FindNextFileW (in: hFindFile=0x381cc0, lpFindFileData=0x31e56c | out: lpFindFileData=0x31e56c*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xf01c0310, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xf07b3a10, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xf07b3a10, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Proof.en", cAlternateFileName="")) returned 1 [0121.216] FindNextFileW (in: hFindFile=0x381cc0, lpFindFileData=0x31e56c | out: lpFindFileData=0x31e56c*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xf4d53d90, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xf4f690d0, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xf4f690d0, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Proof.es", cAlternateFileName="")) returned 1 [0121.216] FindNextFileW (in: hFindFile=0x381cc0, lpFindFileData=0x31e56c | out: lpFindFileData=0x31e56c*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xf2bda830, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xf30772d0, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xf30772d0, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Proof.fr", cAlternateFileName="")) returned 1 [0121.216] FindNextFileW (in: hFindFile=0x381cc0, lpFindFileData=0x31e56c | out: lpFindFileData=0x31e56c*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x40650500, ftCreationTime.dwHighDateTime=0x1cad04a, ftLastAccessTime.dwLowDateTime=0x40650500, ftLastAccessTime.dwHighDateTime=0x1cad04a, ftLastWriteTime.dwLowDateTime=0xf0126df0, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0xd4200, dwReserved0=0x0, dwReserved1=0x0, cFileName="Proofing.msi", cAlternateFileName="")) returned 1 [0121.217] FindNextFileW (in: hFindFile=0x381cc0, lpFindFileData=0x31e56c | out: lpFindFileData=0x31e56c*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x4529b900, ftCreationTime.dwHighDateTime=0x1cad04a, ftLastAccessTime.dwLowDateTime=0x4529b900, ftLastAccessTime.dwHighDateTime=0x1cad04a, ftLastWriteTime.dwLowDateTime=0xf6e8c180, ftLastWriteTime.dwHighDateTime=0x1d6eb7e, nFileSizeHigh=0x0, nFileSizeLow=0x330, dwReserved0=0x0, dwReserved1=0x0, cFileName="Proofing.xml", cAlternateFileName="")) returned 1 [0121.217] FindNextFileW (in: hFindFile=0x381cc0, lpFindFileData=0x31e56c | out: lpFindFileData=0x31e56c*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x42c75f00, ftCreationTime.dwHighDateTime=0x1cad04a, ftLastAccessTime.dwLowDateTime=0x42c75f00, ftLastAccessTime.dwHighDateTime=0x1cad04a, ftLastWriteTime.dwLowDateTime=0xf6f24700, ftLastWriteTime.dwHighDateTime=0x1d6eb7e, nFileSizeHigh=0x0, nFileSizeLow=0x1700, dwReserved0=0x0, dwReserved1=0x0, cFileName="Setup.xml", cAlternateFileName="")) returned 1 [0121.217] FindNextFileW (in: hFindFile=0x381cc0, lpFindFileData=0x31e56c | out: lpFindFileData=0x31e56c*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x42c75f00, ftCreationTime.dwHighDateTime=0x1cad04a, ftLastAccessTime.dwLowDateTime=0x42c75f00, ftLastAccessTime.dwHighDateTime=0x1cad04a, ftLastWriteTime.dwLowDateTime=0xf6f24700, ftLastWriteTime.dwHighDateTime=0x1d6eb7e, nFileSizeHigh=0x0, nFileSizeLow=0x1700, dwReserved0=0x0, dwReserved1=0x0, cFileName="Setup.xml", cAlternateFileName="")) returned 0 [0121.217] FindClose (in: hFindFile=0x381cc0 | out: hFindFile=0x381cc0) returned 1 [0121.217] GetFullPathNameW (in: lpFileName="C:\\MSOCache\\All Users\\{90140000-002C-0409-1000-0000000FF1CE}-C\\Proofing.xml", nBufferLength=0x105, lpBuffer=0x31e1fc, lpFilePart=0x0 | out: lpBuffer="C:\\MSOCache\\All Users\\{90140000-002C-0409-1000-0000000FF1CE}-C\\Proofing.xml", lpFilePart=0x0) returned 0x4b [0121.217] CreateFileW (lpFileName="C:\\MSOCache\\All Users\\{90140000-002C-0409-1000-0000000FF1CE}-C\\Proofing.xml" (normalized: "c:\\msocache\\all users\\{90140000-002c-0409-1000-0000000ff1ce}-c\\proofing.xml"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x178 [0121.217] GetFileType (hFile=0x178) returned 0x1 [0121.217] GetFileType (hFile=0x178) returned 0x1 [0121.217] GetFileSize (in: hFile=0x178, lpFileSizeHigh=0x31e7f8 | out: lpFileSizeHigh=0x31e7f8*=0x0) returned 0x330 [0121.217] ReadFile (in: hFile=0x178, lpBuffer=0x29ad70c, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x31e7a4, lpOverlapped=0x0 | out: lpBuffer=0x29ad70c*, lpNumberOfBytesRead=0x31e7a4*=0x330, lpOverlapped=0x0) returned 1 [0121.218] CloseHandle (hObject=0x178) returned 1 [0121.218] GetFullPathNameW (in: lpFileName="C:\\MSOCache\\All Users\\{90140000-002C-0409-1000-0000000FF1CE}-C\\Proofing.xml", nBufferLength=0x105, lpBuffer=0x31e1e8, lpFilePart=0x0 | out: lpBuffer="C:\\MSOCache\\All Users\\{90140000-002C-0409-1000-0000000FF1CE}-C\\Proofing.xml", lpFilePart=0x0) returned 0x4b [0121.218] CreateFileW (lpFileName="C:\\MSOCache\\All Users\\{90140000-002C-0409-1000-0000000FF1CE}-C\\Proofing.xml" (normalized: "c:\\msocache\\all users\\{90140000-002c-0409-1000-0000000ff1ce}-c\\proofing.xml"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x178 [0121.219] GetFileType (hFile=0x178) returned 0x1 [0121.219] GetFileType (hFile=0x178) returned 0x1 [0121.219] WriteFile (in: hFile=0x178, lpBuffer=0x29aff9c*, nNumberOfBytesToWrite=0x330, lpNumberOfBytesWritten=0x31e76c, lpOverlapped=0x0 | out: lpBuffer=0x29aff9c*, lpNumberOfBytesWritten=0x31e76c*=0x330, lpOverlapped=0x0) returned 1 [0121.220] GetFullPathNameW (in: lpFileName="C:\\MSOCache\\All Users\\{90140000-002C-0409-1000-0000000FF1CE}-C\\Proofing.xml", nBufferLength=0x105, lpBuffer=0x31e31c, lpFilePart=0x0 | out: lpBuffer="C:\\MSOCache\\All Users\\{90140000-002C-0409-1000-0000000FF1CE}-C\\Proofing.xml", lpFilePart=0x0) returned 0x4b [0121.220] GetFullPathNameW (in: lpFileName="C:\\MSOCache\\All Users\\{90140000-002C-0409-1000-0000000FF1CE}-C\\Proofing.xml.[neftet@tutanota.com].boom", nBufferLength=0x105, lpBuffer=0x31e31c, lpFilePart=0x0 | out: lpBuffer="C:\\MSOCache\\All Users\\{90140000-002C-0409-1000-0000000FF1CE}-C\\Proofing.xml.[neftet@tutanota.com].boom", lpFilePart=0x0) returned 0x66 [0121.220] GetFileAttributesExW (in: lpFileName="C:\\MSOCache\\All Users\\{90140000-002C-0409-1000-0000000FF1CE}-C\\Proofing.xml" (normalized: "c:\\msocache\\all users\\{90140000-002c-0409-1000-0000000ff1ce}-c\\proofing.xml"), fInfoLevelId=0x0, lpFileInformation=0x31e7f8 | out: lpFileInformation=0x31e7f8*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x4529b900, ftCreationTime.dwHighDateTime=0x1cad04a, ftLastAccessTime.dwLowDateTime=0x4529b900, ftLastAccessTime.dwHighDateTime=0x1cad04a, ftLastWriteTime.dwLowDateTime=0x2bafbe00, ftLastWriteTime.dwHighDateTime=0x1d6eb7f, nFileSizeHigh=0x0, nFileSizeLow=0x330)) returned 1 [0121.220] MoveFileW (lpExistingFileName="C:\\MSOCache\\All Users\\{90140000-002C-0409-1000-0000000FF1CE}-C\\Proofing.xml" (normalized: "c:\\msocache\\all users\\{90140000-002c-0409-1000-0000000ff1ce}-c\\proofing.xml"), lpNewFileName="C:\\MSOCache\\All Users\\{90140000-002C-0409-1000-0000000FF1CE}-C\\Proofing.xml.[neftet@tutanota.com].boom" (normalized: "c:\\msocache\\all users\\{90140000-002c-0409-1000-0000000ff1ce}-c\\proofing.xml.[neftet@tutanota.com].boom")) returned 1 [0121.221] GetFullPathNameW (in: lpFileName="C:\\MSOCache\\All Users\\{90140000-002C-0409-1000-0000000FF1CE}-C\\Setup.xml", nBufferLength=0x105, lpBuffer=0x31e1fc, lpFilePart=0x0 | out: lpBuffer="C:\\MSOCache\\All Users\\{90140000-002C-0409-1000-0000000FF1CE}-C\\Setup.xml", lpFilePart=0x0) returned 0x48 [0121.221] CreateFileW (lpFileName="C:\\MSOCache\\All Users\\{90140000-002C-0409-1000-0000000FF1CE}-C\\Setup.xml" (normalized: "c:\\msocache\\all users\\{90140000-002c-0409-1000-0000000ff1ce}-c\\setup.xml"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x178 [0121.221] GetFileType (hFile=0x178) returned 0x1 [0121.221] GetFileType (hFile=0x178) returned 0x1 [0121.221] GetFileSize (in: hFile=0x178, lpFileSizeHigh=0x31e7f8 | out: lpFileSizeHigh=0x31e7f8*=0x0) returned 0x1700 [0121.221] ReadFile (in: hFile=0x178, lpBuffer=0x29b14a8, nNumberOfBytesToRead=0x1700, lpNumberOfBytesRead=0x31e7a4, lpOverlapped=0x0 | out: lpBuffer=0x29b14a8*, lpNumberOfBytesRead=0x31e7a4*=0x1700, lpOverlapped=0x0) returned 1 [0121.222] GetFullPathNameW (in: lpFileName="C:\\MSOCache\\All Users\\{90140000-002C-0409-1000-0000000FF1CE}-C\\Setup.xml", nBufferLength=0x105, lpBuffer=0x31e1e8, lpFilePart=0x0 | out: lpBuffer="C:\\MSOCache\\All Users\\{90140000-002C-0409-1000-0000000FF1CE}-C\\Setup.xml", lpFilePart=0x0) returned 0x48 [0121.222] CreateFileW (lpFileName="C:\\MSOCache\\All Users\\{90140000-002C-0409-1000-0000000FF1CE}-C\\Setup.xml" (normalized: "c:\\msocache\\all users\\{90140000-002c-0409-1000-0000000ff1ce}-c\\setup.xml"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x178 [0121.223] GetFileType (hFile=0x178) returned 0x1 [0121.223] GetFileType (hFile=0x178) returned 0x1 [0121.223] WriteFile (in: hFile=0x178, lpBuffer=0x29b2fbc*, nNumberOfBytesToWrite=0x1700, lpNumberOfBytesWritten=0x31e798, lpOverlapped=0x0 | out: lpBuffer=0x29b2fbc*, lpNumberOfBytesWritten=0x31e798*=0x1700, lpOverlapped=0x0) returned 1 [0121.224] GetFullPathNameW (in: lpFileName="C:\\MSOCache\\All Users\\{90140000-002C-0409-1000-0000000FF1CE}-C\\Setup.xml", nBufferLength=0x105, lpBuffer=0x31e31c, lpFilePart=0x0 | out: lpBuffer="C:\\MSOCache\\All Users\\{90140000-002C-0409-1000-0000000FF1CE}-C\\Setup.xml", lpFilePart=0x0) returned 0x48 [0121.224] GetFullPathNameW (in: lpFileName="C:\\MSOCache\\All Users\\{90140000-002C-0409-1000-0000000FF1CE}-C\\Setup.xml.[neftet@tutanota.com].boom", nBufferLength=0x105, lpBuffer=0x31e31c, lpFilePart=0x0 | out: lpBuffer="C:\\MSOCache\\All Users\\{90140000-002C-0409-1000-0000000FF1CE}-C\\Setup.xml.[neftet@tutanota.com].boom", lpFilePart=0x0) returned 0x63 [0121.224] GetFileAttributesExW (in: lpFileName="C:\\MSOCache\\All Users\\{90140000-002C-0409-1000-0000000FF1CE}-C\\Setup.xml" (normalized: "c:\\msocache\\all users\\{90140000-002c-0409-1000-0000000ff1ce}-c\\setup.xml"), fInfoLevelId=0x0, lpFileInformation=0x31e7f8 | out: lpFileInformation=0x31e7f8*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x42c75f00, ftCreationTime.dwHighDateTime=0x1cad04a, ftLastAccessTime.dwLowDateTime=0x42c75f00, ftLastAccessTime.dwHighDateTime=0x1cad04a, ftLastWriteTime.dwLowDateTime=0x2bafbe00, ftLastWriteTime.dwHighDateTime=0x1d6eb7f, nFileSizeHigh=0x0, nFileSizeLow=0x1700)) returned 1 [0121.224] MoveFileW (lpExistingFileName="C:\\MSOCache\\All Users\\{90140000-002C-0409-1000-0000000FF1CE}-C\\Setup.xml" (normalized: "c:\\msocache\\all users\\{90140000-002c-0409-1000-0000000ff1ce}-c\\setup.xml"), lpNewFileName="C:\\MSOCache\\All Users\\{90140000-002C-0409-1000-0000000FF1CE}-C\\Setup.xml.[neftet@tutanota.com].boom" (normalized: "c:\\msocache\\all users\\{90140000-002c-0409-1000-0000000ff1ce}-c\\setup.xml.[neftet@tutanota.com].boom")) returned 1 [0121.225] GetFullPathNameW (in: lpFileName="C:\\MSOCache\\All Users\\{90140000-002C-0409-1000-0000000FF1CE}-C\\Proof.en", nBufferLength=0x105, lpBuffer=0x31e2c4, lpFilePart=0x0 | out: lpBuffer="C:\\MSOCache\\All Users\\{90140000-002C-0409-1000-0000000FF1CE}-C\\Proof.en", lpFilePart=0x0) returned 0x47 [0121.225] GetFullPathNameW (in: lpFileName="C:\\MSOCache\\All Users\\{90140000-002C-0409-1000-0000000FF1CE}-C\\Proof.en\\", nBufferLength=0x105, lpBuffer=0x31e298, lpFilePart=0x0 | out: lpBuffer="C:\\MSOCache\\All Users\\{90140000-002C-0409-1000-0000000FF1CE}-C\\Proof.en\\", lpFilePart=0x0) returned 0x48 [0121.225] FindFirstFileW (in: lpFileName="C:\\MSOCache\\All Users\\{90140000-002C-0409-1000-0000000FF1CE}-C\\Proof.en\\*", lpFindFileData=0x31e4e4 | out: lpFindFileData=0x31e4e4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xf01c0310, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xf07b3a10, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xf07b3a10, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x381cc0 [0121.225] FindNextFileW (in: hFindFile=0x381cc0, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xf01c0310, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xf07b3a10, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xf07b3a10, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0121.225] FindNextFileW (in: hFindFile=0x381cc0, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x219b4a00, ftCreationTime.dwHighDateTime=0x1cad01b, ftLastAccessTime.dwLowDateTime=0x219b4a00, ftLastAccessTime.dwHighDateTime=0x1cad01b, ftLastWriteTime.dwLowDateTime=0xf07b1ad0, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0xaf35ed, dwReserved0=0x0, dwReserved1=0x0, cFileName="Proof.cab", cAlternateFileName="")) returned 1 [0121.225] FindNextFileW (in: hFindFile=0x381cc0, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x4db6cb00, ftCreationTime.dwHighDateTime=0x1cad01b, ftLastAccessTime.dwLowDateTime=0x4db6cb00, ftLastAccessTime.dwHighDateTime=0x1cad01b, ftLastWriteTime.dwLowDateTime=0xf020c5d0, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0xd5c00, dwReserved0=0x0, dwReserved1=0x0, cFileName="Proof.msi", cAlternateFileName="")) returned 1 [0121.225] FindNextFileW (in: hFindFile=0x381cc0, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xa38b7300, ftCreationTime.dwHighDateTime=0x1cad01b, ftLastAccessTime.dwLowDateTime=0xa38b7300, ftLastAccessTime.dwHighDateTime=0x1cad01b, ftLastWriteTime.dwLowDateTime=0xf6f4a860, ftLastWriteTime.dwHighDateTime=0x1d6eb7e, nFileSizeHigh=0x0, nFileSizeLow=0x550, dwReserved0=0x0, dwReserved1=0x0, cFileName="Proof.xml", cAlternateFileName="")) returned 1 [0121.225] FindNextFileW (in: hFindFile=0x381cc0, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0121.226] FindClose (in: hFindFile=0x381cc0 | out: hFindFile=0x381cc0) returned 1 [0121.226] GetFullPathNameW (in: lpFileName="C:\\MSOCache\\All Users\\{90140000-002C-0409-1000-0000000FF1CE}-C\\Proof.en", nBufferLength=0x105, lpBuffer=0x31e2c4, lpFilePart=0x0 | out: lpBuffer="C:\\MSOCache\\All Users\\{90140000-002C-0409-1000-0000000FF1CE}-C\\Proof.en", lpFilePart=0x0) returned 0x47 [0121.226] GetFullPathNameW (in: lpFileName="C:\\MSOCache\\All Users\\{90140000-002C-0409-1000-0000000FF1CE}-C\\Proof.en\\", nBufferLength=0x105, lpBuffer=0x31e298, lpFilePart=0x0 | out: lpBuffer="C:\\MSOCache\\All Users\\{90140000-002C-0409-1000-0000000FF1CE}-C\\Proof.en\\", lpFilePart=0x0) returned 0x48 [0121.226] FindFirstFileW (in: lpFileName="C:\\MSOCache\\All Users\\{90140000-002C-0409-1000-0000000FF1CE}-C\\Proof.en\\*", lpFindFileData=0x31e4e4 | out: lpFindFileData=0x31e4e4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xf01c0310, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xf07b3a10, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xf07b3a10, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x381cc0 [0121.226] FindNextFileW (in: hFindFile=0x381cc0, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xf01c0310, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xf07b3a10, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xf07b3a10, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0121.226] FindNextFileW (in: hFindFile=0x381cc0, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x219b4a00, ftCreationTime.dwHighDateTime=0x1cad01b, ftLastAccessTime.dwLowDateTime=0x219b4a00, ftLastAccessTime.dwHighDateTime=0x1cad01b, ftLastWriteTime.dwLowDateTime=0xf07b1ad0, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0xaf35ed, dwReserved0=0x0, dwReserved1=0x0, cFileName="Proof.cab", cAlternateFileName="")) returned 1 [0121.226] FindNextFileW (in: hFindFile=0x381cc0, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x4db6cb00, ftCreationTime.dwHighDateTime=0x1cad01b, ftLastAccessTime.dwLowDateTime=0x4db6cb00, ftLastAccessTime.dwHighDateTime=0x1cad01b, ftLastWriteTime.dwLowDateTime=0xf020c5d0, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0xd5c00, dwReserved0=0x0, dwReserved1=0x0, cFileName="Proof.msi", cAlternateFileName="")) returned 1 [0121.226] FindNextFileW (in: hFindFile=0x381cc0, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xa38b7300, ftCreationTime.dwHighDateTime=0x1cad01b, ftLastAccessTime.dwLowDateTime=0xa38b7300, ftLastAccessTime.dwHighDateTime=0x1cad01b, ftLastWriteTime.dwLowDateTime=0xf6f4a860, ftLastWriteTime.dwHighDateTime=0x1d6eb7e, nFileSizeHigh=0x0, nFileSizeLow=0x550, dwReserved0=0x0, dwReserved1=0x0, cFileName="Proof.xml", cAlternateFileName="")) returned 1 [0121.226] FindNextFileW (in: hFindFile=0x381cc0, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xa38b7300, ftCreationTime.dwHighDateTime=0x1cad01b, ftLastAccessTime.dwLowDateTime=0xa38b7300, ftLastAccessTime.dwHighDateTime=0x1cad01b, ftLastWriteTime.dwLowDateTime=0xf6f4a860, ftLastWriteTime.dwHighDateTime=0x1d6eb7e, nFileSizeHigh=0x0, nFileSizeLow=0x550, dwReserved0=0x0, dwReserved1=0x0, cFileName="Proof.xml", cAlternateFileName="")) returned 0 [0121.227] FindClose (in: hFindFile=0x381cc0 | out: hFindFile=0x381cc0) returned 1 [0121.227] GetFullPathNameW (in: lpFileName="C:\\MSOCache\\All Users\\{90140000-002C-0409-1000-0000000FF1CE}-C\\Proof.en\\Proof.xml", nBufferLength=0x105, lpBuffer=0x31e184, lpFilePart=0x0 | out: lpBuffer="C:\\MSOCache\\All Users\\{90140000-002C-0409-1000-0000000FF1CE}-C\\Proof.en\\Proof.xml", lpFilePart=0x0) returned 0x51 [0121.227] CreateFileW (lpFileName="C:\\MSOCache\\All Users\\{90140000-002C-0409-1000-0000000FF1CE}-C\\Proof.en\\Proof.xml" (normalized: "c:\\msocache\\all users\\{90140000-002c-0409-1000-0000000ff1ce}-c\\proof.en\\proof.xml"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x178 [0121.227] GetFileType (hFile=0x178) returned 0x1 [0121.227] GetFileType (hFile=0x178) returned 0x1 [0121.227] GetFileSize (in: hFile=0x178, lpFileSizeHigh=0x31e780 | out: lpFileSizeHigh=0x31e780*=0x0) returned 0x550 [0121.227] ReadFile (in: hFile=0x178, lpBuffer=0x29b82e8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x31e72c, lpOverlapped=0x0 | out: lpBuffer=0x29b82e8*, lpNumberOfBytesRead=0x31e72c*=0x550, lpOverlapped=0x0) returned 1 [0121.228] CloseHandle (hObject=0x178) returned 1 [0121.228] GetFullPathNameW (in: lpFileName="C:\\MSOCache\\All Users\\{90140000-002C-0409-1000-0000000FF1CE}-C\\Proof.en\\Proof.xml", nBufferLength=0x105, lpBuffer=0x31e170, lpFilePart=0x0 | out: lpBuffer="C:\\MSOCache\\All Users\\{90140000-002C-0409-1000-0000000FF1CE}-C\\Proof.en\\Proof.xml", lpFilePart=0x0) returned 0x51 [0121.228] CreateFileW (lpFileName="C:\\MSOCache\\All Users\\{90140000-002C-0409-1000-0000000FF1CE}-C\\Proof.en\\Proof.xml" (normalized: "c:\\msocache\\all users\\{90140000-002c-0409-1000-0000000ff1ce}-c\\proof.en\\proof.xml"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x178 [0121.229] GetFileType (hFile=0x178) returned 0x1 [0121.229] GetFileType (hFile=0x178) returned 0x1 [0121.229] WriteFile (in: hFile=0x178, lpBuffer=0x29bad9c*, nNumberOfBytesToWrite=0x550, lpNumberOfBytesWritten=0x31e6f4, lpOverlapped=0x0 | out: lpBuffer=0x29bad9c*, lpNumberOfBytesWritten=0x31e6f4*=0x550, lpOverlapped=0x0) returned 1 [0121.230] GetFullPathNameW (in: lpFileName="C:\\MSOCache\\All Users\\{90140000-002C-0409-1000-0000000FF1CE}-C\\Proof.en\\Proof.xml", nBufferLength=0x105, lpBuffer=0x31e2a4, lpFilePart=0x0 | out: lpBuffer="C:\\MSOCache\\All Users\\{90140000-002C-0409-1000-0000000FF1CE}-C\\Proof.en\\Proof.xml", lpFilePart=0x0) returned 0x51 [0121.230] GetFullPathNameW (in: lpFileName="C:\\MSOCache\\All Users\\{90140000-002C-0409-1000-0000000FF1CE}-C\\Proof.en\\Proof.xml.[neftet@tutanota.com].boom", nBufferLength=0x105, lpBuffer=0x31e2a4, lpFilePart=0x0 | out: lpBuffer="C:\\MSOCache\\All Users\\{90140000-002C-0409-1000-0000000FF1CE}-C\\Proof.en\\Proof.xml.[neftet@tutanota.com].boom", lpFilePart=0x0) returned 0x6c [0121.230] GetFileAttributesExW (in: lpFileName="C:\\MSOCache\\All Users\\{90140000-002C-0409-1000-0000000FF1CE}-C\\Proof.en\\Proof.xml" (normalized: "c:\\msocache\\all users\\{90140000-002c-0409-1000-0000000ff1ce}-c\\proof.en\\proof.xml"), fInfoLevelId=0x0, lpFileInformation=0x31e780 | out: lpFileInformation=0x31e780*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xa38b7300, ftCreationTime.dwHighDateTime=0x1cad01b, ftLastAccessTime.dwLowDateTime=0xa38b7300, ftLastAccessTime.dwHighDateTime=0x1cad01b, ftLastWriteTime.dwLowDateTime=0x2bb21f60, ftLastWriteTime.dwHighDateTime=0x1d6eb7f, nFileSizeHigh=0x0, nFileSizeLow=0x550)) returned 1 [0121.230] MoveFileW (lpExistingFileName="C:\\MSOCache\\All Users\\{90140000-002C-0409-1000-0000000FF1CE}-C\\Proof.en\\Proof.xml" (normalized: "c:\\msocache\\all users\\{90140000-002c-0409-1000-0000000ff1ce}-c\\proof.en\\proof.xml"), lpNewFileName="C:\\MSOCache\\All Users\\{90140000-002C-0409-1000-0000000FF1CE}-C\\Proof.en\\Proof.xml.[neftet@tutanota.com].boom" (normalized: "c:\\msocache\\all users\\{90140000-002c-0409-1000-0000000ff1ce}-c\\proof.en\\proof.xml.[neftet@tutanota.com].boom")) returned 1 [0121.231] GetFullPathNameW (in: lpFileName="C:\\MSOCache\\All Users\\{90140000-002C-0409-1000-0000000FF1CE}-C\\Proof.es", nBufferLength=0x105, lpBuffer=0x31e2c4, lpFilePart=0x0 | out: lpBuffer="C:\\MSOCache\\All Users\\{90140000-002C-0409-1000-0000000FF1CE}-C\\Proof.es", lpFilePart=0x0) returned 0x47 [0121.231] GetFullPathNameW (in: lpFileName="C:\\MSOCache\\All Users\\{90140000-002C-0409-1000-0000000FF1CE}-C\\Proof.es\\", nBufferLength=0x105, lpBuffer=0x31e298, lpFilePart=0x0 | out: lpBuffer="C:\\MSOCache\\All Users\\{90140000-002C-0409-1000-0000000FF1CE}-C\\Proof.es\\", lpFilePart=0x0) returned 0x48 [0121.231] FindFirstFileW (in: lpFileName="C:\\MSOCache\\All Users\\{90140000-002C-0409-1000-0000000FF1CE}-C\\Proof.es\\*", lpFindFileData=0x31e4e4 | out: lpFindFileData=0x31e4e4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xf4d53d90, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xf4f690d0, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xf4f690d0, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x381cc0 [0121.231] FindNextFileW (in: hFindFile=0x381cc0, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xf4d53d90, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xf4f690d0, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xf4f690d0, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0121.231] FindNextFileW (in: hFindFile=0x381cc0, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x3ba05100, ftCreationTime.dwHighDateTime=0x1cad04a, ftLastAccessTime.dwLowDateTime=0x3ba05100, ftLastAccessTime.dwHighDateTime=0x1cad04a, ftLastWriteTime.dwLowDateTime=0xf4f690d0, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0xd02aea, dwReserved0=0x0, dwReserved1=0x0, cFileName="Proof.cab", cAlternateFileName="")) returned 1 [0121.231] FindNextFileW (in: hFindFile=0x381cc0, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x3f33d800, ftCreationTime.dwHighDateTime=0x1cad04a, ftLastAccessTime.dwLowDateTime=0x3f33d800, ftLastAccessTime.dwHighDateTime=0x1cad04a, ftLastWriteTime.dwLowDateTime=0xf4e5c7f0, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0xd7200, dwReserved0=0x0, dwReserved1=0x0, cFileName="Proof.msi", cAlternateFileName="")) returned 1 [0121.231] FindNextFileW (in: hFindFile=0x381cc0, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x43f88c00, ftCreationTime.dwHighDateTime=0x1cad04a, ftLastAccessTime.dwLowDateTime=0x43f88c00, ftLastAccessTime.dwHighDateTime=0x1cad04a, ftLastWriteTime.dwLowDateTime=0xf6f709c0, ftLastWriteTime.dwHighDateTime=0x1d6eb7e, nFileSizeHigh=0x0, nFileSizeLow=0x5c0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Proof.xml", cAlternateFileName="")) returned 1 [0121.231] FindNextFileW (in: hFindFile=0x381cc0, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0121.232] FindClose (in: hFindFile=0x381cc0 | out: hFindFile=0x381cc0) returned 1 [0121.232] GetFullPathNameW (in: lpFileName="C:\\MSOCache\\All Users\\{90140000-002C-0409-1000-0000000FF1CE}-C\\Proof.es", nBufferLength=0x105, lpBuffer=0x31e2c4, lpFilePart=0x0 | out: lpBuffer="C:\\MSOCache\\All Users\\{90140000-002C-0409-1000-0000000FF1CE}-C\\Proof.es", lpFilePart=0x0) returned 0x47 [0121.232] GetFullPathNameW (in: lpFileName="C:\\MSOCache\\All Users\\{90140000-002C-0409-1000-0000000FF1CE}-C\\Proof.es\\", nBufferLength=0x105, lpBuffer=0x31e298, lpFilePart=0x0 | out: lpBuffer="C:\\MSOCache\\All Users\\{90140000-002C-0409-1000-0000000FF1CE}-C\\Proof.es\\", lpFilePart=0x0) returned 0x48 [0121.232] FindFirstFileW (in: lpFileName="C:\\MSOCache\\All Users\\{90140000-002C-0409-1000-0000000FF1CE}-C\\Proof.es\\*", lpFindFileData=0x31e4e4 | out: lpFindFileData=0x31e4e4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xf4d53d90, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xf4f690d0, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xf4f690d0, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x381cc0 [0121.232] FindNextFileW (in: hFindFile=0x381cc0, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xf4d53d90, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xf4f690d0, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xf4f690d0, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0121.232] FindNextFileW (in: hFindFile=0x381cc0, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x3ba05100, ftCreationTime.dwHighDateTime=0x1cad04a, ftLastAccessTime.dwLowDateTime=0x3ba05100, ftLastAccessTime.dwHighDateTime=0x1cad04a, ftLastWriteTime.dwLowDateTime=0xf4f690d0, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0xd02aea, dwReserved0=0x0, dwReserved1=0x0, cFileName="Proof.cab", cAlternateFileName="")) returned 1 [0121.232] FindNextFileW (in: hFindFile=0x381cc0, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x3f33d800, ftCreationTime.dwHighDateTime=0x1cad04a, ftLastAccessTime.dwLowDateTime=0x3f33d800, ftLastAccessTime.dwHighDateTime=0x1cad04a, ftLastWriteTime.dwLowDateTime=0xf4e5c7f0, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0xd7200, dwReserved0=0x0, dwReserved1=0x0, cFileName="Proof.msi", cAlternateFileName="")) returned 1 [0121.232] FindNextFileW (in: hFindFile=0x381cc0, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x43f88c00, ftCreationTime.dwHighDateTime=0x1cad04a, ftLastAccessTime.dwLowDateTime=0x43f88c00, ftLastAccessTime.dwHighDateTime=0x1cad04a, ftLastWriteTime.dwLowDateTime=0xf6f709c0, ftLastWriteTime.dwHighDateTime=0x1d6eb7e, nFileSizeHigh=0x0, nFileSizeLow=0x5c0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Proof.xml", cAlternateFileName="")) returned 1 [0121.232] FindNextFileW (in: hFindFile=0x381cc0, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x43f88c00, ftCreationTime.dwHighDateTime=0x1cad04a, ftLastAccessTime.dwLowDateTime=0x43f88c00, ftLastAccessTime.dwHighDateTime=0x1cad04a, ftLastWriteTime.dwLowDateTime=0xf6f709c0, ftLastWriteTime.dwHighDateTime=0x1d6eb7e, nFileSizeHigh=0x0, nFileSizeLow=0x5c0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Proof.xml", cAlternateFileName="")) returned 0 [0121.232] FindClose (in: hFindFile=0x381cc0 | out: hFindFile=0x381cc0) returned 1 [0121.233] GetFullPathNameW (in: lpFileName="C:\\MSOCache\\All Users\\{90140000-002C-0409-1000-0000000FF1CE}-C\\Proof.es\\Proof.xml", nBufferLength=0x105, lpBuffer=0x31e184, lpFilePart=0x0 | out: lpBuffer="C:\\MSOCache\\All Users\\{90140000-002C-0409-1000-0000000FF1CE}-C\\Proof.es\\Proof.xml", lpFilePart=0x0) returned 0x51 [0121.233] CreateFileW (lpFileName="C:\\MSOCache\\All Users\\{90140000-002C-0409-1000-0000000FF1CE}-C\\Proof.es\\Proof.xml" (normalized: "c:\\msocache\\all users\\{90140000-002c-0409-1000-0000000ff1ce}-c\\proof.es\\proof.xml"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x178 [0121.233] GetFileType (hFile=0x178) returned 0x1 [0121.233] GetFileType (hFile=0x178) returned 0x1 [0121.233] GetFileSize (in: hFile=0x178, lpFileSizeHigh=0x31e780 | out: lpFileSizeHigh=0x31e780*=0x0) returned 0x5c0 [0121.233] ReadFile (in: hFile=0x178, lpBuffer=0x29be93c, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x31e72c, lpOverlapped=0x0 | out: lpBuffer=0x29be93c*, lpNumberOfBytesRead=0x31e72c*=0x5c0, lpOverlapped=0x0) returned 1 [0121.234] CloseHandle (hObject=0x178) returned 1 [0121.234] GetFullPathNameW (in: lpFileName="C:\\MSOCache\\All Users\\{90140000-002C-0409-1000-0000000FF1CE}-C\\Proof.es\\Proof.xml", nBufferLength=0x105, lpBuffer=0x31e170, lpFilePart=0x0 | out: lpBuffer="C:\\MSOCache\\All Users\\{90140000-002C-0409-1000-0000000FF1CE}-C\\Proof.es\\Proof.xml", lpFilePart=0x0) returned 0x51 [0121.234] CreateFileW (lpFileName="C:\\MSOCache\\All Users\\{90140000-002C-0409-1000-0000000FF1CE}-C\\Proof.es\\Proof.xml" (normalized: "c:\\msocache\\all users\\{90140000-002c-0409-1000-0000000ff1ce}-c\\proof.es\\proof.xml"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x178 [0121.235] GetFileType (hFile=0x178) returned 0x1 [0121.235] GetFileType (hFile=0x178) returned 0x1 [0121.235] WriteFile (in: hFile=0x178, lpBuffer=0x29c1460*, nNumberOfBytesToWrite=0x5c0, lpNumberOfBytesWritten=0x31e6f4, lpOverlapped=0x0 | out: lpBuffer=0x29c1460*, lpNumberOfBytesWritten=0x31e6f4*=0x5c0, lpOverlapped=0x0) returned 1 [0121.236] GetFullPathNameW (in: lpFileName="C:\\MSOCache\\All Users\\{90140000-002C-0409-1000-0000000FF1CE}-C\\Proof.es\\Proof.xml", nBufferLength=0x105, lpBuffer=0x31e2a4, lpFilePart=0x0 | out: lpBuffer="C:\\MSOCache\\All Users\\{90140000-002C-0409-1000-0000000FF1CE}-C\\Proof.es\\Proof.xml", lpFilePart=0x0) returned 0x51 [0121.236] GetFullPathNameW (in: lpFileName="C:\\MSOCache\\All Users\\{90140000-002C-0409-1000-0000000FF1CE}-C\\Proof.es\\Proof.xml.[neftet@tutanota.com].boom", nBufferLength=0x105, lpBuffer=0x31e2a4, lpFilePart=0x0 | out: lpBuffer="C:\\MSOCache\\All Users\\{90140000-002C-0409-1000-0000000FF1CE}-C\\Proof.es\\Proof.xml.[neftet@tutanota.com].boom", lpFilePart=0x0) returned 0x6c [0121.236] GetFileAttributesExW (in: lpFileName="C:\\MSOCache\\All Users\\{90140000-002C-0409-1000-0000000FF1CE}-C\\Proof.es\\Proof.xml" (normalized: "c:\\msocache\\all users\\{90140000-002c-0409-1000-0000000ff1ce}-c\\proof.es\\proof.xml"), fInfoLevelId=0x0, lpFileInformation=0x31e780 | out: lpFileInformation=0x31e780*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x43f88c00, ftCreationTime.dwHighDateTime=0x1cad04a, ftLastAccessTime.dwLowDateTime=0x43f88c00, ftLastAccessTime.dwHighDateTime=0x1cad04a, ftLastWriteTime.dwLowDateTime=0x2bb21f60, ftLastWriteTime.dwHighDateTime=0x1d6eb7f, nFileSizeHigh=0x0, nFileSizeLow=0x5c0)) returned 1 [0121.236] MoveFileW (lpExistingFileName="C:\\MSOCache\\All Users\\{90140000-002C-0409-1000-0000000FF1CE}-C\\Proof.es\\Proof.xml" (normalized: "c:\\msocache\\all users\\{90140000-002c-0409-1000-0000000ff1ce}-c\\proof.es\\proof.xml"), lpNewFileName="C:\\MSOCache\\All Users\\{90140000-002C-0409-1000-0000000FF1CE}-C\\Proof.es\\Proof.xml.[neftet@tutanota.com].boom" (normalized: "c:\\msocache\\all users\\{90140000-002c-0409-1000-0000000ff1ce}-c\\proof.es\\proof.xml.[neftet@tutanota.com].boom")) returned 1 [0121.236] GetFullPathNameW (in: lpFileName="C:\\MSOCache\\All Users\\{90140000-002C-0409-1000-0000000FF1CE}-C\\Proof.fr", nBufferLength=0x105, lpBuffer=0x31e2c4, lpFilePart=0x0 | out: lpBuffer="C:\\MSOCache\\All Users\\{90140000-002C-0409-1000-0000000FF1CE}-C\\Proof.fr", lpFilePart=0x0) returned 0x47 [0121.236] GetFullPathNameW (in: lpFileName="C:\\MSOCache\\All Users\\{90140000-002C-0409-1000-0000000FF1CE}-C\\Proof.fr\\", nBufferLength=0x105, lpBuffer=0x31e298, lpFilePart=0x0 | out: lpBuffer="C:\\MSOCache\\All Users\\{90140000-002C-0409-1000-0000000FF1CE}-C\\Proof.fr\\", lpFilePart=0x0) returned 0x48 [0121.236] FindFirstFileW (in: lpFileName="C:\\MSOCache\\All Users\\{90140000-002C-0409-1000-0000000FF1CE}-C\\Proof.fr\\*", lpFindFileData=0x31e4e4 | out: lpFindFileData=0x31e4e4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xf2bda830, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xf30772d0, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xf30772d0, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x381cc0 [0121.237] FindNextFileW (in: hFindFile=0x381cc0, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xf2bda830, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xf30772d0, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xf30772d0, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0121.237] FindNextFileW (in: hFindFile=0x381cc0, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x35aa7000, ftCreationTime.dwHighDateTime=0x1cad04a, ftLastAccessTime.dwLowDateTime=0x35aa7000, ftLastAccessTime.dwHighDateTime=0x1cad04a, ftLastWriteTime.dwLowDateTime=0xf3076b00, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x1416b54, dwReserved0=0x0, dwReserved1=0x0, cFileName="Proof.cab", cAlternateFileName="")) returned 1 [0121.237] FindNextFileW (in: hFindFile=0x381cc0, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x3f33d800, ftCreationTime.dwHighDateTime=0x1cad04a, ftLastAccessTime.dwLowDateTime=0x3f33d800, ftLastAccessTime.dwHighDateTime=0x1cad04a, ftLastWriteTime.dwLowDateTime=0xf2e3b660, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0xd8400, dwReserved0=0x0, dwReserved1=0x0, cFileName="Proof.msi", cAlternateFileName="")) returned 1 [0121.237] FindNextFileW (in: hFindFile=0x381cc0, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x43f88c00, ftCreationTime.dwHighDateTime=0x1cad04a, ftLastAccessTime.dwLowDateTime=0x43f88c00, ftLastAccessTime.dwHighDateTime=0x1cad04a, ftLastWriteTime.dwLowDateTime=0xf6fbcc80, ftLastWriteTime.dwHighDateTime=0x1d6eb7e, nFileSizeHigh=0x0, nFileSizeLow=0x5c0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Proof.xml", cAlternateFileName="")) returned 1 [0121.237] FindNextFileW (in: hFindFile=0x381cc0, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0121.237] FindClose (in: hFindFile=0x381cc0 | out: hFindFile=0x381cc0) returned 1 [0121.237] GetFullPathNameW (in: lpFileName="C:\\MSOCache\\All Users\\{90140000-002C-0409-1000-0000000FF1CE}-C\\Proof.fr", nBufferLength=0x105, lpBuffer=0x31e2c4, lpFilePart=0x0 | out: lpBuffer="C:\\MSOCache\\All Users\\{90140000-002C-0409-1000-0000000FF1CE}-C\\Proof.fr", lpFilePart=0x0) returned 0x47 [0121.237] GetFullPathNameW (in: lpFileName="C:\\MSOCache\\All Users\\{90140000-002C-0409-1000-0000000FF1CE}-C\\Proof.fr\\", nBufferLength=0x105, lpBuffer=0x31e298, lpFilePart=0x0 | out: lpBuffer="C:\\MSOCache\\All Users\\{90140000-002C-0409-1000-0000000FF1CE}-C\\Proof.fr\\", lpFilePart=0x0) returned 0x48 [0121.237] FindFirstFileW (in: lpFileName="C:\\MSOCache\\All Users\\{90140000-002C-0409-1000-0000000FF1CE}-C\\Proof.fr\\*", lpFindFileData=0x31e4e4 | out: lpFindFileData=0x31e4e4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xf2bda830, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xf30772d0, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xf30772d0, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x381cc0 [0121.237] FindNextFileW (in: hFindFile=0x381cc0, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xf2bda830, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xf30772d0, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xf30772d0, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0121.238] FindNextFileW (in: hFindFile=0x381cc0, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x35aa7000, ftCreationTime.dwHighDateTime=0x1cad04a, ftLastAccessTime.dwLowDateTime=0x35aa7000, ftLastAccessTime.dwHighDateTime=0x1cad04a, ftLastWriteTime.dwLowDateTime=0xf3076b00, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x1416b54, dwReserved0=0x0, dwReserved1=0x0, cFileName="Proof.cab", cAlternateFileName="")) returned 1 [0121.238] FindNextFileW (in: hFindFile=0x381cc0, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x3f33d800, ftCreationTime.dwHighDateTime=0x1cad04a, ftLastAccessTime.dwLowDateTime=0x3f33d800, ftLastAccessTime.dwHighDateTime=0x1cad04a, ftLastWriteTime.dwLowDateTime=0xf2e3b660, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0xd8400, dwReserved0=0x0, dwReserved1=0x0, cFileName="Proof.msi", cAlternateFileName="")) returned 1 [0121.238] FindNextFileW (in: hFindFile=0x381cc0, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x43f88c00, ftCreationTime.dwHighDateTime=0x1cad04a, ftLastAccessTime.dwLowDateTime=0x43f88c00, ftLastAccessTime.dwHighDateTime=0x1cad04a, ftLastWriteTime.dwLowDateTime=0xf6fbcc80, ftLastWriteTime.dwHighDateTime=0x1d6eb7e, nFileSizeHigh=0x0, nFileSizeLow=0x5c0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Proof.xml", cAlternateFileName="")) returned 1 [0121.238] FindNextFileW (in: hFindFile=0x381cc0, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x43f88c00, ftCreationTime.dwHighDateTime=0x1cad04a, ftLastAccessTime.dwLowDateTime=0x43f88c00, ftLastAccessTime.dwHighDateTime=0x1cad04a, ftLastWriteTime.dwLowDateTime=0xf6fbcc80, ftLastWriteTime.dwHighDateTime=0x1d6eb7e, nFileSizeHigh=0x0, nFileSizeLow=0x5c0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Proof.xml", cAlternateFileName="")) returned 0 [0121.238] FindClose (in: hFindFile=0x381cc0 | out: hFindFile=0x381cc0) returned 1 [0121.238] GetFullPathNameW (in: lpFileName="C:\\MSOCache\\All Users\\{90140000-002C-0409-1000-0000000FF1CE}-C\\Proof.fr\\Proof.xml", nBufferLength=0x105, lpBuffer=0x31e184, lpFilePart=0x0 | out: lpBuffer="C:\\MSOCache\\All Users\\{90140000-002C-0409-1000-0000000FF1CE}-C\\Proof.fr\\Proof.xml", lpFilePart=0x0) returned 0x51 [0121.238] CreateFileW (lpFileName="C:\\MSOCache\\All Users\\{90140000-002C-0409-1000-0000000FF1CE}-C\\Proof.fr\\Proof.xml" (normalized: "c:\\msocache\\all users\\{90140000-002c-0409-1000-0000000ff1ce}-c\\proof.fr\\proof.xml"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x178 [0121.238] GetFileType (hFile=0x178) returned 0x1 [0121.238] GetFileType (hFile=0x178) returned 0x1 [0121.238] GetFileSize (in: hFile=0x178, lpFileSizeHigh=0x31e780 | out: lpFileSizeHigh=0x31e780*=0x0) returned 0x5c0 [0121.238] ReadFile (in: hFile=0x178, lpBuffer=0x29c5000, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x31e72c, lpOverlapped=0x0 | out: lpBuffer=0x29c5000*, lpNumberOfBytesRead=0x31e72c*=0x5c0, lpOverlapped=0x0) returned 1 [0121.239] CloseHandle (hObject=0x178) returned 1 [0121.239] GetFullPathNameW (in: lpFileName="C:\\MSOCache\\All Users\\{90140000-002C-0409-1000-0000000FF1CE}-C\\Proof.fr\\Proof.xml", nBufferLength=0x105, lpBuffer=0x31e170, lpFilePart=0x0 | out: lpBuffer="C:\\MSOCache\\All Users\\{90140000-002C-0409-1000-0000000FF1CE}-C\\Proof.fr\\Proof.xml", lpFilePart=0x0) returned 0x51 [0121.239] CreateFileW (lpFileName="C:\\MSOCache\\All Users\\{90140000-002C-0409-1000-0000000FF1CE}-C\\Proof.fr\\Proof.xml" (normalized: "c:\\msocache\\all users\\{90140000-002c-0409-1000-0000000ff1ce}-c\\proof.fr\\proof.xml"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x178 [0121.240] GetFileType (hFile=0x178) returned 0x1 [0121.240] GetFileType (hFile=0x178) returned 0x1 [0121.240] WriteFile (in: hFile=0x178, lpBuffer=0x29c7b24*, nNumberOfBytesToWrite=0x5c0, lpNumberOfBytesWritten=0x31e6f4, lpOverlapped=0x0 | out: lpBuffer=0x29c7b24*, lpNumberOfBytesWritten=0x31e6f4*=0x5c0, lpOverlapped=0x0) returned 1 [0121.241] GetFullPathNameW (in: lpFileName="C:\\MSOCache\\All Users\\{90140000-002C-0409-1000-0000000FF1CE}-C\\Proof.fr\\Proof.xml", nBufferLength=0x105, lpBuffer=0x31e2a4, lpFilePart=0x0 | out: lpBuffer="C:\\MSOCache\\All Users\\{90140000-002C-0409-1000-0000000FF1CE}-C\\Proof.fr\\Proof.xml", lpFilePart=0x0) returned 0x51 [0121.241] GetFullPathNameW (in: lpFileName="C:\\MSOCache\\All Users\\{90140000-002C-0409-1000-0000000FF1CE}-C\\Proof.fr\\Proof.xml.[neftet@tutanota.com].boom", nBufferLength=0x105, lpBuffer=0x31e2a4, lpFilePart=0x0 | out: lpBuffer="C:\\MSOCache\\All Users\\{90140000-002C-0409-1000-0000000FF1CE}-C\\Proof.fr\\Proof.xml.[neftet@tutanota.com].boom", lpFilePart=0x0) returned 0x6c [0121.241] GetFileAttributesExW (in: lpFileName="C:\\MSOCache\\All Users\\{90140000-002C-0409-1000-0000000FF1CE}-C\\Proof.fr\\Proof.xml" (normalized: "c:\\msocache\\all users\\{90140000-002c-0409-1000-0000000ff1ce}-c\\proof.fr\\proof.xml"), fInfoLevelId=0x0, lpFileInformation=0x31e780 | out: lpFileInformation=0x31e780*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x43f88c00, ftCreationTime.dwHighDateTime=0x1cad04a, ftLastAccessTime.dwLowDateTime=0x43f88c00, ftLastAccessTime.dwHighDateTime=0x1cad04a, ftLastWriteTime.dwLowDateTime=0x2bb21f60, ftLastWriteTime.dwHighDateTime=0x1d6eb7f, nFileSizeHigh=0x0, nFileSizeLow=0x5c0)) returned 1 [0121.241] MoveFileW (lpExistingFileName="C:\\MSOCache\\All Users\\{90140000-002C-0409-1000-0000000FF1CE}-C\\Proof.fr\\Proof.xml" (normalized: "c:\\msocache\\all users\\{90140000-002c-0409-1000-0000000ff1ce}-c\\proof.fr\\proof.xml"), lpNewFileName="C:\\MSOCache\\All Users\\{90140000-002C-0409-1000-0000000FF1CE}-C\\Proof.fr\\Proof.xml.[neftet@tutanota.com].boom" (normalized: "c:\\msocache\\all users\\{90140000-002c-0409-1000-0000000ff1ce}-c\\proof.fr\\proof.xml.[neftet@tutanota.com].boom")) returned 1 [0121.242] GetFullPathNameW (in: lpFileName="C:\\MSOCache\\All Users\\{90140000-0043-0409-1000-0000000FF1CE}-C", nBufferLength=0x105, lpBuffer=0x31e33c, lpFilePart=0x0 | out: lpBuffer="C:\\MSOCache\\All Users\\{90140000-0043-0409-1000-0000000FF1CE}-C", lpFilePart=0x0) returned 0x3e [0121.242] GetFullPathNameW (in: lpFileName="C:\\MSOCache\\All Users\\{90140000-0043-0409-1000-0000000FF1CE}-C\\", nBufferLength=0x105, lpBuffer=0x31e310, lpFilePart=0x0 | out: lpBuffer="C:\\MSOCache\\All Users\\{90140000-0043-0409-1000-0000000FF1CE}-C\\", lpFilePart=0x0) returned 0x3f [0121.242] FindFirstFileW (in: lpFileName="C:\\MSOCache\\All Users\\{90140000-0043-0409-1000-0000000FF1CE}-C\\*", lpFindFileData=0x31e55c | out: lpFindFileData=0x31e55c*(dwFileAttributes=0x2011, ftCreationTime.dwLowDateTime=0xfc138cb0, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xfc3e6570, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xfc3e6570, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x381cc0 [0121.242] FindNextFileW (in: hFindFile=0x381cc0, lpFindFileData=0x31e56c | out: lpFindFileData=0x31e56c*(dwFileAttributes=0x2011, ftCreationTime.dwLowDateTime=0xfc138cb0, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xfc3e6570, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xfc3e6570, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0121.242] FindNextFileW (in: hFindFile=0x381cc0, lpFindFileData=0x31e56c | out: lpFindFileData=0x31e56c*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x3f33d800, ftCreationTime.dwHighDateTime=0x1cad04a, ftLastAccessTime.dwLowDateTime=0x3f33d800, ftLastAccessTime.dwHighDateTime=0x1cad04a, ftLastWriteTime.dwLowDateTime=0xfc138cb0, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0xd5600, dwReserved0=0x0, dwReserved1=0x0, cFileName="Office32MUI.msi", cAlternateFileName="OFFICE~1.MSI")) returned 1 [0121.242] FindNextFileW (in: hFindFile=0x381cc0, lpFindFileData=0x31e56c | out: lpFindFileData=0x31e56c*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x4529b900, ftCreationTime.dwHighDateTime=0x1cad04a, ftLastAccessTime.dwLowDateTime=0x4529b900, ftLastAccessTime.dwHighDateTime=0x1cad04a, ftLastWriteTime.dwLowDateTime=0xf6fe2de0, ftLastWriteTime.dwHighDateTime=0x1d6eb7e, nFileSizeHigh=0x0, nFileSizeLow=0x570, dwReserved0=0x0, dwReserved1=0x0, cFileName="Office32MUI.xml", cAlternateFileName="OFFICE~1.XML")) returned 1 [0121.243] FindNextFileW (in: hFindFile=0x381cc0, lpFindFileData=0x31e56c | out: lpFindFileData=0x31e56c*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x3e02ab00, ftCreationTime.dwHighDateTime=0x1cad04a, ftLastAccessTime.dwLowDateTime=0x3e02ab00, ftLastAccessTime.dwHighDateTime=0x1cad04a, ftLastWriteTime.dwLowDateTime=0xfc301560, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x2cb13b, dwReserved0=0x0, dwReserved1=0x0, cFileName="OWOW32LR.cab", cAlternateFileName="")) returned 1 [0121.243] FindNextFileW (in: hFindFile=0x381cc0, lpFindFileData=0x31e56c | out: lpFindFileData=0x31e56c*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x43f88c00, ftCreationTime.dwHighDateTime=0x1cad04a, ftLastAccessTime.dwLowDateTime=0x43f88c00, ftLastAccessTime.dwHighDateTime=0x1cad04a, ftLastWriteTime.dwLowDateTime=0xf702f0a0, ftLastWriteTime.dwHighDateTime=0x1d6eb7e, nFileSizeHigh=0x0, nFileSizeLow=0x940, dwReserved0=0x0, dwReserved1=0x0, cFileName="Setup.xml", cAlternateFileName="")) returned 1 [0121.243] FindNextFileW (in: hFindFile=0x381cc0, lpFindFileData=0x31e56c | out: lpFindFileData=0x31e56c*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0121.243] FindClose (in: hFindFile=0x381cc0 | out: hFindFile=0x381cc0) returned 1 [0121.243] GetFullPathNameW (in: lpFileName="C:\\MSOCache\\All Users\\{90140000-0043-0409-1000-0000000FF1CE}-C", nBufferLength=0x105, lpBuffer=0x31e33c, lpFilePart=0x0 | out: lpBuffer="C:\\MSOCache\\All Users\\{90140000-0043-0409-1000-0000000FF1CE}-C", lpFilePart=0x0) returned 0x3e [0121.243] GetFullPathNameW (in: lpFileName="C:\\MSOCache\\All Users\\{90140000-0043-0409-1000-0000000FF1CE}-C\\", nBufferLength=0x105, lpBuffer=0x31e310, lpFilePart=0x0 | out: lpBuffer="C:\\MSOCache\\All Users\\{90140000-0043-0409-1000-0000000FF1CE}-C\\", lpFilePart=0x0) returned 0x3f [0121.243] FindFirstFileW (in: lpFileName="C:\\MSOCache\\All Users\\{90140000-0043-0409-1000-0000000FF1CE}-C\\*", lpFindFileData=0x31e55c | out: lpFindFileData=0x31e55c*(dwFileAttributes=0x2011, ftCreationTime.dwLowDateTime=0xfc138cb0, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xfc3e6570, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xfc3e6570, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x381cc0 [0121.243] FindNextFileW (in: hFindFile=0x381cc0, lpFindFileData=0x31e56c | out: lpFindFileData=0x31e56c*(dwFileAttributes=0x2011, ftCreationTime.dwLowDateTime=0xfc138cb0, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xfc3e6570, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xfc3e6570, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0121.243] FindNextFileW (in: hFindFile=0x381cc0, lpFindFileData=0x31e56c | out: lpFindFileData=0x31e56c*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x3f33d800, ftCreationTime.dwHighDateTime=0x1cad04a, ftLastAccessTime.dwLowDateTime=0x3f33d800, ftLastAccessTime.dwHighDateTime=0x1cad04a, ftLastWriteTime.dwLowDateTime=0xfc138cb0, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0xd5600, dwReserved0=0x0, dwReserved1=0x0, cFileName="Office32MUI.msi", cAlternateFileName="OFFICE~1.MSI")) returned 1 [0121.244] FindNextFileW (in: hFindFile=0x381cc0, lpFindFileData=0x31e56c | out: lpFindFileData=0x31e56c*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x4529b900, ftCreationTime.dwHighDateTime=0x1cad04a, ftLastAccessTime.dwLowDateTime=0x4529b900, ftLastAccessTime.dwHighDateTime=0x1cad04a, ftLastWriteTime.dwLowDateTime=0xf6fe2de0, ftLastWriteTime.dwHighDateTime=0x1d6eb7e, nFileSizeHigh=0x0, nFileSizeLow=0x570, dwReserved0=0x0, dwReserved1=0x0, cFileName="Office32MUI.xml", cAlternateFileName="OFFICE~1.XML")) returned 1 [0121.244] FindNextFileW (in: hFindFile=0x381cc0, lpFindFileData=0x31e56c | out: lpFindFileData=0x31e56c*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x3e02ab00, ftCreationTime.dwHighDateTime=0x1cad04a, ftLastAccessTime.dwLowDateTime=0x3e02ab00, ftLastAccessTime.dwHighDateTime=0x1cad04a, ftLastWriteTime.dwLowDateTime=0xfc301560, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x2cb13b, dwReserved0=0x0, dwReserved1=0x0, cFileName="OWOW32LR.cab", cAlternateFileName="")) returned 1 [0121.244] FindNextFileW (in: hFindFile=0x381cc0, lpFindFileData=0x31e56c | out: lpFindFileData=0x31e56c*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x43f88c00, ftCreationTime.dwHighDateTime=0x1cad04a, ftLastAccessTime.dwLowDateTime=0x43f88c00, ftLastAccessTime.dwHighDateTime=0x1cad04a, ftLastWriteTime.dwLowDateTime=0xf702f0a0, ftLastWriteTime.dwHighDateTime=0x1d6eb7e, nFileSizeHigh=0x0, nFileSizeLow=0x940, dwReserved0=0x0, dwReserved1=0x0, cFileName="Setup.xml", cAlternateFileName="")) returned 1 [0121.244] FindNextFileW (in: hFindFile=0x381cc0, lpFindFileData=0x31e56c | out: lpFindFileData=0x31e56c*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x43f88c00, ftCreationTime.dwHighDateTime=0x1cad04a, ftLastAccessTime.dwLowDateTime=0x43f88c00, ftLastAccessTime.dwHighDateTime=0x1cad04a, ftLastWriteTime.dwLowDateTime=0xf702f0a0, ftLastWriteTime.dwHighDateTime=0x1d6eb7e, nFileSizeHigh=0x0, nFileSizeLow=0x940, dwReserved0=0x0, dwReserved1=0x0, cFileName="Setup.xml", cAlternateFileName="")) returned 0 [0121.244] FindClose (in: hFindFile=0x381cc0 | out: hFindFile=0x381cc0) returned 1 [0121.244] GetFullPathNameW (in: lpFileName="C:\\MSOCache\\All Users\\{90140000-0043-0409-1000-0000000FF1CE}-C\\Office32MUI.xml", nBufferLength=0x105, lpBuffer=0x31e1fc, lpFilePart=0x0 | out: lpBuffer="C:\\MSOCache\\All Users\\{90140000-0043-0409-1000-0000000FF1CE}-C\\Office32MUI.xml", lpFilePart=0x0) returned 0x4e [0121.244] CreateFileW (lpFileName="C:\\MSOCache\\All Users\\{90140000-0043-0409-1000-0000000FF1CE}-C\\Office32MUI.xml" (normalized: "c:\\msocache\\all users\\{90140000-0043-0409-1000-0000000ff1ce}-c\\office32mui.xml"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x178 [0121.244] GetFileType (hFile=0x178) returned 0x1 [0121.244] GetFileType (hFile=0x178) returned 0x1 [0121.244] GetFileSize (in: hFile=0x178, lpFileSizeHigh=0x31e7f8 | out: lpFileSizeHigh=0x31e7f8*=0x0) returned 0x570 [0121.244] ReadFile (in: hFile=0x178, lpBuffer=0x29cb85c, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x31e7a4, lpOverlapped=0x0 | out: lpBuffer=0x29cb85c*, lpNumberOfBytesRead=0x31e7a4*=0x570, lpOverlapped=0x0) returned 1 [0121.245] CloseHandle (hObject=0x178) returned 1 [0121.245] GetFullPathNameW (in: lpFileName="C:\\MSOCache\\All Users\\{90140000-0043-0409-1000-0000000FF1CE}-C\\Office32MUI.xml", nBufferLength=0x105, lpBuffer=0x31e1e8, lpFilePart=0x0 | out: lpBuffer="C:\\MSOCache\\All Users\\{90140000-0043-0409-1000-0000000FF1CE}-C\\Office32MUI.xml", lpFilePart=0x0) returned 0x4e [0121.245] CreateFileW (lpFileName="C:\\MSOCache\\All Users\\{90140000-0043-0409-1000-0000000FF1CE}-C\\Office32MUI.xml" (normalized: "c:\\msocache\\all users\\{90140000-0043-0409-1000-0000000ff1ce}-c\\office32mui.xml"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x178 [0121.246] GetFileType (hFile=0x178) returned 0x1 [0121.246] GetFileType (hFile=0x178) returned 0x1 [0121.246] WriteFile (in: hFile=0x178, lpBuffer=0x29ce338*, nNumberOfBytesToWrite=0x570, lpNumberOfBytesWritten=0x31e76c, lpOverlapped=0x0 | out: lpBuffer=0x29ce338*, lpNumberOfBytesWritten=0x31e76c*=0x570, lpOverlapped=0x0) returned 1 [0121.247] GetFullPathNameW (in: lpFileName="C:\\MSOCache\\All Users\\{90140000-0043-0409-1000-0000000FF1CE}-C\\Office32MUI.xml", nBufferLength=0x105, lpBuffer=0x31e31c, lpFilePart=0x0 | out: lpBuffer="C:\\MSOCache\\All Users\\{90140000-0043-0409-1000-0000000FF1CE}-C\\Office32MUI.xml", lpFilePart=0x0) returned 0x4e [0121.247] GetFullPathNameW (in: lpFileName="C:\\MSOCache\\All Users\\{90140000-0043-0409-1000-0000000FF1CE}-C\\Office32MUI.xml.[neftet@tutanota.com].boom", nBufferLength=0x105, lpBuffer=0x31e31c, lpFilePart=0x0 | out: lpBuffer="C:\\MSOCache\\All Users\\{90140000-0043-0409-1000-0000000FF1CE}-C\\Office32MUI.xml.[neftet@tutanota.com].boom", lpFilePart=0x0) returned 0x69 [0121.247] GetFileAttributesExW (in: lpFileName="C:\\MSOCache\\All Users\\{90140000-0043-0409-1000-0000000FF1CE}-C\\Office32MUI.xml" (normalized: "c:\\msocache\\all users\\{90140000-0043-0409-1000-0000000ff1ce}-c\\office32mui.xml"), fInfoLevelId=0x0, lpFileInformation=0x31e7f8 | out: lpFileInformation=0x31e7f8*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x4529b900, ftCreationTime.dwHighDateTime=0x1cad04a, ftLastAccessTime.dwLowDateTime=0x4529b900, ftLastAccessTime.dwHighDateTime=0x1cad04a, ftLastWriteTime.dwLowDateTime=0x2bb480c0, ftLastWriteTime.dwHighDateTime=0x1d6eb7f, nFileSizeHigh=0x0, nFileSizeLow=0x570)) returned 1 [0121.247] MoveFileW (lpExistingFileName="C:\\MSOCache\\All Users\\{90140000-0043-0409-1000-0000000FF1CE}-C\\Office32MUI.xml" (normalized: "c:\\msocache\\all users\\{90140000-0043-0409-1000-0000000ff1ce}-c\\office32mui.xml"), lpNewFileName="C:\\MSOCache\\All Users\\{90140000-0043-0409-1000-0000000FF1CE}-C\\Office32MUI.xml.[neftet@tutanota.com].boom" (normalized: "c:\\msocache\\all users\\{90140000-0043-0409-1000-0000000ff1ce}-c\\office32mui.xml.[neftet@tutanota.com].boom")) returned 1 [0121.248] GetFullPathNameW (in: lpFileName="C:\\MSOCache\\All Users\\{90140000-0043-0409-1000-0000000FF1CE}-C\\Setup.xml", nBufferLength=0x105, lpBuffer=0x31e1fc, lpFilePart=0x0 | out: lpBuffer="C:\\MSOCache\\All Users\\{90140000-0043-0409-1000-0000000FF1CE}-C\\Setup.xml", lpFilePart=0x0) returned 0x48 [0121.248] CreateFileW (lpFileName="C:\\MSOCache\\All Users\\{90140000-0043-0409-1000-0000000FF1CE}-C\\Setup.xml" (normalized: "c:\\msocache\\all users\\{90140000-0043-0409-1000-0000000ff1ce}-c\\setup.xml"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x178 [0121.248] GetFileType (hFile=0x178) returned 0x1 [0121.248] GetFileType (hFile=0x178) returned 0x1 [0121.248] GetFileSize (in: hFile=0x178, lpFileSizeHigh=0x31e7f8 | out: lpFileSizeHigh=0x31e7f8*=0x0) returned 0x940 [0121.248] ReadFile (in: hFile=0x178, lpBuffer=0x29d01b8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x31e7a4, lpOverlapped=0x0 | out: lpBuffer=0x29d01b8*, lpNumberOfBytesRead=0x31e7a4*=0x940, lpOverlapped=0x0) returned 1 [0121.249] CloseHandle (hObject=0x178) returned 1 [0121.249] GetFullPathNameW (in: lpFileName="C:\\MSOCache\\All Users\\{90140000-0043-0409-1000-0000000FF1CE}-C\\Setup.xml", nBufferLength=0x105, lpBuffer=0x31e1e8, lpFilePart=0x0 | out: lpBuffer="C:\\MSOCache\\All Users\\{90140000-0043-0409-1000-0000000FF1CE}-C\\Setup.xml", lpFilePart=0x0) returned 0x48 [0121.249] CreateFileW (lpFileName="C:\\MSOCache\\All Users\\{90140000-0043-0409-1000-0000000FF1CE}-C\\Setup.xml" (normalized: "c:\\msocache\\all users\\{90140000-0043-0409-1000-0000000ff1ce}-c\\setup.xml"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x178 [0121.250] GetFileType (hFile=0x178) returned 0x1 [0121.250] GetFileType (hFile=0x178) returned 0x1 [0121.250] WriteFile (in: hFile=0x178, lpBuffer=0x29d304c*, nNumberOfBytesToWrite=0x940, lpNumberOfBytesWritten=0x31e76c, lpOverlapped=0x0 | out: lpBuffer=0x29d304c*, lpNumberOfBytesWritten=0x31e76c*=0x940, lpOverlapped=0x0) returned 1 [0121.251] GetFullPathNameW (in: lpFileName="C:\\MSOCache\\All Users\\{90140000-0043-0409-1000-0000000FF1CE}-C\\Setup.xml", nBufferLength=0x105, lpBuffer=0x31e31c, lpFilePart=0x0 | out: lpBuffer="C:\\MSOCache\\All Users\\{90140000-0043-0409-1000-0000000FF1CE}-C\\Setup.xml", lpFilePart=0x0) returned 0x48 [0121.251] GetFullPathNameW (in: lpFileName="C:\\MSOCache\\All Users\\{90140000-0043-0409-1000-0000000FF1CE}-C\\Setup.xml.[neftet@tutanota.com].boom", nBufferLength=0x105, lpBuffer=0x31e31c, lpFilePart=0x0 | out: lpBuffer="C:\\MSOCache\\All Users\\{90140000-0043-0409-1000-0000000FF1CE}-C\\Setup.xml.[neftet@tutanota.com].boom", lpFilePart=0x0) returned 0x63 [0121.251] GetFileAttributesExW (in: lpFileName="C:\\MSOCache\\All Users\\{90140000-0043-0409-1000-0000000FF1CE}-C\\Setup.xml" (normalized: "c:\\msocache\\all users\\{90140000-0043-0409-1000-0000000ff1ce}-c\\setup.xml"), fInfoLevelId=0x0, lpFileInformation=0x31e7f8 | out: lpFileInformation=0x31e7f8*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x43f88c00, ftCreationTime.dwHighDateTime=0x1cad04a, ftLastAccessTime.dwLowDateTime=0x43f88c00, ftLastAccessTime.dwHighDateTime=0x1cad04a, ftLastWriteTime.dwLowDateTime=0x2bb480c0, ftLastWriteTime.dwHighDateTime=0x1d6eb7f, nFileSizeHigh=0x0, nFileSizeLow=0x940)) returned 1 [0121.251] MoveFileW (lpExistingFileName="C:\\MSOCache\\All Users\\{90140000-0043-0409-1000-0000000FF1CE}-C\\Setup.xml" (normalized: "c:\\msocache\\all users\\{90140000-0043-0409-1000-0000000ff1ce}-c\\setup.xml"), lpNewFileName="C:\\MSOCache\\All Users\\{90140000-0043-0409-1000-0000000FF1CE}-C\\Setup.xml.[neftet@tutanota.com].boom" (normalized: "c:\\msocache\\all users\\{90140000-0043-0409-1000-0000000ff1ce}-c\\setup.xml.[neftet@tutanota.com].boom")) returned 1 [0121.252] GetFullPathNameW (in: lpFileName="C:\\MSOCache\\All Users\\{90140000-0044-0409-1000-0000000FF1CE}-C", nBufferLength=0x105, lpBuffer=0x31e33c, lpFilePart=0x0 | out: lpBuffer="C:\\MSOCache\\All Users\\{90140000-0044-0409-1000-0000000FF1CE}-C", lpFilePart=0x0) returned 0x3e [0121.252] GetFullPathNameW (in: lpFileName="C:\\MSOCache\\All Users\\{90140000-0044-0409-1000-0000000FF1CE}-C\\", nBufferLength=0x105, lpBuffer=0x31e310, lpFilePart=0x0 | out: lpBuffer="C:\\MSOCache\\All Users\\{90140000-0044-0409-1000-0000000FF1CE}-C\\", lpFilePart=0x0) returned 0x3f [0121.252] FindFirstFileW (in: lpFileName="C:\\MSOCache\\All Users\\{90140000-0044-0409-1000-0000000FF1CE}-C\\*", lpFindFileData=0x31e55c | out: lpFindFileData=0x31e55c*(dwFileAttributes=0x2011, ftCreationTime.dwLowDateTime=0xf6e34d70, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xfa13c510, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xfa13c510, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x381cc0 [0121.252] FindNextFileW (in: hFindFile=0x381cc0, lpFindFileData=0x31e56c | out: lpFindFileData=0x31e56c*(dwFileAttributes=0x2011, ftCreationTime.dwLowDateTime=0xf6e34d70, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xfa13c510, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xfa13c510, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0121.252] FindNextFileW (in: hFindFile=0x381cc0, lpFindFileData=0x31e56c | out: lpFindFileData=0x31e56c*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xbd907a00, ftCreationTime.dwHighDateTime=0x1cad04a, ftLastAccessTime.dwLowDateTime=0xbd907a00, ftLastAccessTime.dwHighDateTime=0x1cad04a, ftLastWriteTime.dwLowDateTime=0xf79111d0, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x1200204, dwReserved0=0x0, dwReserved1=0x0, cFileName="InfLR.cab", cAlternateFileName="")) returned 1 [0121.252] FindNextFileW (in: hFindFile=0x381cc0, lpFindFileData=0x31e56c | out: lpFindFileData=0x31e56c*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xbd907a00, ftCreationTime.dwHighDateTime=0x1cad04a, ftLastAccessTime.dwLowDateTime=0xbd907a00, ftLastAccessTime.dwHighDateTime=0x1cad04a, ftLastWriteTime.dwLowDateTime=0xf6e58f90, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x2fac00, dwReserved0=0x0, dwReserved1=0x0, cFileName="InfoPathMUI.msi", cAlternateFileName="INFOPA~1.MSI")) returned 1 [0121.252] FindNextFileW (in: hFindFile=0x381cc0, lpFindFileData=0x31e56c | out: lpFindFileData=0x31e56c*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xbec1a700, ftCreationTime.dwHighDateTime=0x1cad04a, ftLastAccessTime.dwLowDateTime=0xbec1a700, ftLastAccessTime.dwHighDateTime=0x1cad04a, ftLastWriteTime.dwLowDateTime=0xf71138e0, ftLastWriteTime.dwHighDateTime=0x1d6eb7e, nFileSizeHigh=0x0, nFileSizeLow=0x4d0, dwReserved0=0x0, dwReserved1=0x0, cFileName="InfoPathMUI.xml", cAlternateFileName="INFOPA~1.XML")) returned 1 [0121.252] FindNextFileW (in: hFindFile=0x381cc0, lpFindFileData=0x31e56c | out: lpFindFileData=0x31e56c*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xbec1a700, ftCreationTime.dwHighDateTime=0x1cad04a, ftLastAccessTime.dwLowDateTime=0xbec1a700, ftLastAccessTime.dwHighDateTime=0x1cad04a, ftLastWriteTime.dwLowDateTime=0xf7139a40, ftLastWriteTime.dwHighDateTime=0x1d6eb7e, nFileSizeHigh=0x0, nFileSizeLow=0x740, dwReserved0=0x0, dwReserved1=0x0, cFileName="Setup.xml", cAlternateFileName="")) returned 1 [0121.252] FindNextFileW (in: hFindFile=0x381cc0, lpFindFileData=0x31e56c | out: lpFindFileData=0x31e56c*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0121.252] FindClose (in: hFindFile=0x381cc0 | out: hFindFile=0x381cc0) returned 1 [0121.252] GetFullPathNameW (in: lpFileName="C:\\MSOCache\\All Users\\{90140000-0044-0409-1000-0000000FF1CE}-C", nBufferLength=0x105, lpBuffer=0x31e33c, lpFilePart=0x0 | out: lpBuffer="C:\\MSOCache\\All Users\\{90140000-0044-0409-1000-0000000FF1CE}-C", lpFilePart=0x0) returned 0x3e [0121.253] GetFullPathNameW (in: lpFileName="C:\\MSOCache\\All Users\\{90140000-0044-0409-1000-0000000FF1CE}-C\\", nBufferLength=0x105, lpBuffer=0x31e310, lpFilePart=0x0 | out: lpBuffer="C:\\MSOCache\\All Users\\{90140000-0044-0409-1000-0000000FF1CE}-C\\", lpFilePart=0x0) returned 0x3f [0121.253] FindFirstFileW (in: lpFileName="C:\\MSOCache\\All Users\\{90140000-0044-0409-1000-0000000FF1CE}-C\\*", lpFindFileData=0x31e55c | out: lpFindFileData=0x31e55c*(dwFileAttributes=0x2011, ftCreationTime.dwLowDateTime=0xf6e34d70, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xfa13c510, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xfa13c510, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x381cc0 [0121.253] FindNextFileW (in: hFindFile=0x381cc0, lpFindFileData=0x31e56c | out: lpFindFileData=0x31e56c*(dwFileAttributes=0x2011, ftCreationTime.dwLowDateTime=0xf6e34d70, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xfa13c510, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xfa13c510, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0121.253] FindNextFileW (in: hFindFile=0x381cc0, lpFindFileData=0x31e56c | out: lpFindFileData=0x31e56c*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xbd907a00, ftCreationTime.dwHighDateTime=0x1cad04a, ftLastAccessTime.dwLowDateTime=0xbd907a00, ftLastAccessTime.dwHighDateTime=0x1cad04a, ftLastWriteTime.dwLowDateTime=0xf79111d0, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x1200204, dwReserved0=0x0, dwReserved1=0x0, cFileName="InfLR.cab", cAlternateFileName="")) returned 1 [0121.253] FindNextFileW (in: hFindFile=0x381cc0, lpFindFileData=0x31e56c | out: lpFindFileData=0x31e56c*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xbd907a00, ftCreationTime.dwHighDateTime=0x1cad04a, ftLastAccessTime.dwLowDateTime=0xbd907a00, ftLastAccessTime.dwHighDateTime=0x1cad04a, ftLastWriteTime.dwLowDateTime=0xf6e58f90, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x2fac00, dwReserved0=0x0, dwReserved1=0x0, cFileName="InfoPathMUI.msi", cAlternateFileName="INFOPA~1.MSI")) returned 1 [0121.253] FindNextFileW (in: hFindFile=0x381cc0, lpFindFileData=0x31e56c | out: lpFindFileData=0x31e56c*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xbec1a700, ftCreationTime.dwHighDateTime=0x1cad04a, ftLastAccessTime.dwLowDateTime=0xbec1a700, ftLastAccessTime.dwHighDateTime=0x1cad04a, ftLastWriteTime.dwLowDateTime=0xf71138e0, ftLastWriteTime.dwHighDateTime=0x1d6eb7e, nFileSizeHigh=0x0, nFileSizeLow=0x4d0, dwReserved0=0x0, dwReserved1=0x0, cFileName="InfoPathMUI.xml", cAlternateFileName="INFOPA~1.XML")) returned 1 [0121.253] FindNextFileW (in: hFindFile=0x381cc0, lpFindFileData=0x31e56c | out: lpFindFileData=0x31e56c*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xbec1a700, ftCreationTime.dwHighDateTime=0x1cad04a, ftLastAccessTime.dwLowDateTime=0xbec1a700, ftLastAccessTime.dwHighDateTime=0x1cad04a, ftLastWriteTime.dwLowDateTime=0xf7139a40, ftLastWriteTime.dwHighDateTime=0x1d6eb7e, nFileSizeHigh=0x0, nFileSizeLow=0x740, dwReserved0=0x0, dwReserved1=0x0, cFileName="Setup.xml", cAlternateFileName="")) returned 1 [0121.253] FindNextFileW (in: hFindFile=0x381cc0, lpFindFileData=0x31e56c | out: lpFindFileData=0x31e56c*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xbec1a700, ftCreationTime.dwHighDateTime=0x1cad04a, ftLastAccessTime.dwLowDateTime=0xbec1a700, ftLastAccessTime.dwHighDateTime=0x1cad04a, ftLastWriteTime.dwLowDateTime=0xf7139a40, ftLastWriteTime.dwHighDateTime=0x1d6eb7e, nFileSizeHigh=0x0, nFileSizeLow=0x740, dwReserved0=0x0, dwReserved1=0x0, cFileName="Setup.xml", cAlternateFileName="")) returned 0 [0121.253] FindClose (in: hFindFile=0x381cc0 | out: hFindFile=0x381cc0) returned 1 [0121.253] GetFullPathNameW (in: lpFileName="C:\\MSOCache\\All Users\\{90140000-0044-0409-1000-0000000FF1CE}-C\\InfoPathMUI.xml", nBufferLength=0x105, lpBuffer=0x31e1fc, lpFilePart=0x0 | out: lpBuffer="C:\\MSOCache\\All Users\\{90140000-0044-0409-1000-0000000FF1CE}-C\\InfoPathMUI.xml", lpFilePart=0x0) returned 0x4e [0121.253] CreateFileW (lpFileName="C:\\MSOCache\\All Users\\{90140000-0044-0409-1000-0000000FF1CE}-C\\InfoPathMUI.xml" (normalized: "c:\\msocache\\all users\\{90140000-0044-0409-1000-0000000ff1ce}-c\\infopathmui.xml"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x178 [0121.254] GetFileType (hFile=0x178) returned 0x1 [0121.254] GetFileType (hFile=0x178) returned 0x1 [0121.254] GetFileSize (in: hFile=0x178, lpFileSizeHigh=0x31e7f8 | out: lpFileSizeHigh=0x31e7f8*=0x0) returned 0x4d0 [0121.254] ReadFile (in: hFile=0x178, lpBuffer=0x29d6ca4, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x31e7a4, lpOverlapped=0x0 | out: lpBuffer=0x29d6ca4*, lpNumberOfBytesRead=0x31e7a4*=0x4d0, lpOverlapped=0x0) returned 1 [0121.254] CloseHandle (hObject=0x178) returned 1 [0121.255] GetFullPathNameW (in: lpFileName="C:\\MSOCache\\All Users\\{90140000-0044-0409-1000-0000000FF1CE}-C\\InfoPathMUI.xml", nBufferLength=0x105, lpBuffer=0x31e1e8, lpFilePart=0x0 | out: lpBuffer="C:\\MSOCache\\All Users\\{90140000-0044-0409-1000-0000000FF1CE}-C\\InfoPathMUI.xml", lpFilePart=0x0) returned 0x4e [0121.255] CreateFileW (lpFileName="C:\\MSOCache\\All Users\\{90140000-0044-0409-1000-0000000FF1CE}-C\\InfoPathMUI.xml" (normalized: "c:\\msocache\\all users\\{90140000-0044-0409-1000-0000000ff1ce}-c\\infopathmui.xml"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x178 [0121.255] GetFileType (hFile=0x178) returned 0x1 [0121.255] GetFileType (hFile=0x178) returned 0x1 [0121.255] WriteFile (in: hFile=0x178, lpBuffer=0x29d96e0*, nNumberOfBytesToWrite=0x4d0, lpNumberOfBytesWritten=0x31e76c, lpOverlapped=0x0 | out: lpBuffer=0x29d96e0*, lpNumberOfBytesWritten=0x31e76c*=0x4d0, lpOverlapped=0x0) returned 1 [0121.256] GetFullPathNameW (in: lpFileName="C:\\MSOCache\\All Users\\{90140000-0044-0409-1000-0000000FF1CE}-C\\InfoPathMUI.xml", nBufferLength=0x105, lpBuffer=0x31e31c, lpFilePart=0x0 | out: lpBuffer="C:\\MSOCache\\All Users\\{90140000-0044-0409-1000-0000000FF1CE}-C\\InfoPathMUI.xml", lpFilePart=0x0) returned 0x4e [0121.256] GetFullPathNameW (in: lpFileName="C:\\MSOCache\\All Users\\{90140000-0044-0409-1000-0000000FF1CE}-C\\InfoPathMUI.xml.[neftet@tutanota.com].boom", nBufferLength=0x105, lpBuffer=0x31e31c, lpFilePart=0x0 | out: lpBuffer="C:\\MSOCache\\All Users\\{90140000-0044-0409-1000-0000000FF1CE}-C\\InfoPathMUI.xml.[neftet@tutanota.com].boom", lpFilePart=0x0) returned 0x69 [0121.256] GetFileAttributesExW (in: lpFileName="C:\\MSOCache\\All Users\\{90140000-0044-0409-1000-0000000FF1CE}-C\\InfoPathMUI.xml" (normalized: "c:\\msocache\\all users\\{90140000-0044-0409-1000-0000000ff1ce}-c\\infopathmui.xml"), fInfoLevelId=0x0, lpFileInformation=0x31e7f8 | out: lpFileInformation=0x31e7f8*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xbec1a700, ftCreationTime.dwHighDateTime=0x1cad04a, ftLastAccessTime.dwLowDateTime=0xbec1a700, ftLastAccessTime.dwHighDateTime=0x1cad04a, ftLastWriteTime.dwLowDateTime=0x2bb480c0, ftLastWriteTime.dwHighDateTime=0x1d6eb7f, nFileSizeHigh=0x0, nFileSizeLow=0x4d0)) returned 1 [0121.257] MoveFileW (lpExistingFileName="C:\\MSOCache\\All Users\\{90140000-0044-0409-1000-0000000FF1CE}-C\\InfoPathMUI.xml" (normalized: "c:\\msocache\\all users\\{90140000-0044-0409-1000-0000000ff1ce}-c\\infopathmui.xml"), lpNewFileName="C:\\MSOCache\\All Users\\{90140000-0044-0409-1000-0000000FF1CE}-C\\InfoPathMUI.xml.[neftet@tutanota.com].boom" (normalized: "c:\\msocache\\all users\\{90140000-0044-0409-1000-0000000ff1ce}-c\\infopathmui.xml.[neftet@tutanota.com].boom")) returned 1 [0121.257] GetFullPathNameW (in: lpFileName="C:\\MSOCache\\All Users\\{90140000-0044-0409-1000-0000000FF1CE}-C\\Setup.xml", nBufferLength=0x105, lpBuffer=0x31e1fc, lpFilePart=0x0 | out: lpBuffer="C:\\MSOCache\\All Users\\{90140000-0044-0409-1000-0000000FF1CE}-C\\Setup.xml", lpFilePart=0x0) returned 0x48 [0121.257] CreateFileW (lpFileName="C:\\MSOCache\\All Users\\{90140000-0044-0409-1000-0000000FF1CE}-C\\Setup.xml" (normalized: "c:\\msocache\\all users\\{90140000-0044-0409-1000-0000000ff1ce}-c\\setup.xml"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x178 [0121.257] GetFileType (hFile=0x178) returned 0x1 [0121.257] GetFileType (hFile=0x178) returned 0x1 [0121.257] GetFileSize (in: hFile=0x178, lpFileSizeHigh=0x31e7f8 | out: lpFileSizeHigh=0x31e7f8*=0x0) returned 0x740 [0121.257] ReadFile (in: hFile=0x178, lpBuffer=0x29db348, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x31e7a4, lpOverlapped=0x0 | out: lpBuffer=0x29db348*, lpNumberOfBytesRead=0x31e7a4*=0x740, lpOverlapped=0x0) returned 1 [0121.258] CloseHandle (hObject=0x178) returned 1 [0121.258] GetFullPathNameW (in: lpFileName="C:\\MSOCache\\All Users\\{90140000-0044-0409-1000-0000000FF1CE}-C\\Setup.xml", nBufferLength=0x105, lpBuffer=0x31e1e8, lpFilePart=0x0 | out: lpBuffer="C:\\MSOCache\\All Users\\{90140000-0044-0409-1000-0000000FF1CE}-C\\Setup.xml", lpFilePart=0x0) returned 0x48 [0121.258] CreateFileW (lpFileName="C:\\MSOCache\\All Users\\{90140000-0044-0409-1000-0000000FF1CE}-C\\Setup.xml" (normalized: "c:\\msocache\\all users\\{90140000-0044-0409-1000-0000000ff1ce}-c\\setup.xml"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x178 [0121.262] GetFileType (hFile=0x178) returned 0x1 [0121.262] GetFileType (hFile=0x178) returned 0x1 [0121.262] WriteFile (in: hFile=0x178, lpBuffer=0x29ddfdc*, nNumberOfBytesToWrite=0x740, lpNumberOfBytesWritten=0x31e76c, lpOverlapped=0x0 | out: lpBuffer=0x29ddfdc*, lpNumberOfBytesWritten=0x31e76c*=0x740, lpOverlapped=0x0) returned 1 [0121.263] GetFullPathNameW (in: lpFileName="C:\\MSOCache\\All Users\\{90140000-0044-0409-1000-0000000FF1CE}-C\\Setup.xml", nBufferLength=0x105, lpBuffer=0x31e31c, lpFilePart=0x0 | out: lpBuffer="C:\\MSOCache\\All Users\\{90140000-0044-0409-1000-0000000FF1CE}-C\\Setup.xml", lpFilePart=0x0) returned 0x48 [0121.263] GetFullPathNameW (in: lpFileName="C:\\MSOCache\\All Users\\{90140000-0044-0409-1000-0000000FF1CE}-C\\Setup.xml.[neftet@tutanota.com].boom", nBufferLength=0x105, lpBuffer=0x31e31c, lpFilePart=0x0 | out: lpBuffer="C:\\MSOCache\\All Users\\{90140000-0044-0409-1000-0000000FF1CE}-C\\Setup.xml.[neftet@tutanota.com].boom", lpFilePart=0x0) returned 0x63 [0121.263] GetFileAttributesExW (in: lpFileName="C:\\MSOCache\\All Users\\{90140000-0044-0409-1000-0000000FF1CE}-C\\Setup.xml" (normalized: "c:\\msocache\\all users\\{90140000-0044-0409-1000-0000000ff1ce}-c\\setup.xml"), fInfoLevelId=0x0, lpFileInformation=0x31e7f8 | out: lpFileInformation=0x31e7f8*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xbec1a700, ftCreationTime.dwHighDateTime=0x1cad04a, ftLastAccessTime.dwLowDateTime=0xbec1a700, ftLastAccessTime.dwHighDateTime=0x1cad04a, ftLastWriteTime.dwLowDateTime=0x2bb6e220, ftLastWriteTime.dwHighDateTime=0x1d6eb7f, nFileSizeHigh=0x0, nFileSizeLow=0x740)) returned 1 [0121.263] MoveFileW (lpExistingFileName="C:\\MSOCache\\All Users\\{90140000-0044-0409-1000-0000000FF1CE}-C\\Setup.xml" (normalized: "c:\\msocache\\all users\\{90140000-0044-0409-1000-0000000ff1ce}-c\\setup.xml"), lpNewFileName="C:\\MSOCache\\All Users\\{90140000-0044-0409-1000-0000000FF1CE}-C\\Setup.xml.[neftet@tutanota.com].boom" (normalized: "c:\\msocache\\all users\\{90140000-0044-0409-1000-0000000ff1ce}-c\\setup.xml.[neftet@tutanota.com].boom")) returned 1 [0121.264] GetFullPathNameW (in: lpFileName="C:\\MSOCache\\All Users\\{90140000-0054-0409-1000-0000000FF1CE}-C", nBufferLength=0x105, lpBuffer=0x31e33c, lpFilePart=0x0 | out: lpBuffer="C:\\MSOCache\\All Users\\{90140000-0054-0409-1000-0000000FF1CE}-C", lpFilePart=0x0) returned 0x3e [0121.264] GetFullPathNameW (in: lpFileName="C:\\MSOCache\\All Users\\{90140000-0054-0409-1000-0000000FF1CE}-C\\", nBufferLength=0x105, lpBuffer=0x31e310, lpFilePart=0x0 | out: lpBuffer="C:\\MSOCache\\All Users\\{90140000-0054-0409-1000-0000000FF1CE}-C\\", lpFilePart=0x0) returned 0x3f [0121.264] FindFirstFileW (in: lpFileName="C:\\MSOCache\\All Users\\{90140000-0054-0409-1000-0000000FF1CE}-C\\*", lpFindFileData=0x31e55c | out: lpFindFileData=0x31e55c*(dwFileAttributes=0x2011, ftCreationTime.dwLowDateTime=0x435769e0, ftCreationTime.dwHighDateTime=0x1d305eb, ftLastAccessTime.dwLowDateTime=0x43bdc500, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0x43bdc500, ftLastWriteTime.dwHighDateTime=0x1d305eb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x381cc0 [0121.264] FindNextFileW (in: hFindFile=0x381cc0, lpFindFileData=0x31e56c | out: lpFindFileData=0x31e56c*(dwFileAttributes=0x2011, ftCreationTime.dwLowDateTime=0x435769e0, ftCreationTime.dwHighDateTime=0x1d305eb, ftLastAccessTime.dwLowDateTime=0x43bdc500, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0x43bdc500, ftLastWriteTime.dwHighDateTime=0x1d305eb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0121.264] FindNextFileW (in: hFindFile=0x381cc0, lpFindFileData=0x31e56c | out: lpFindFileData=0x31e56c*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x5f356eb0, ftCreationTime.dwHighDateTime=0x1cbe576, ftLastAccessTime.dwLowDateTime=0x5f356eb0, ftLastAccessTime.dwHighDateTime=0x1cbe576, ftLastWriteTime.dwLowDateTime=0xf7185d00, ftLastWriteTime.dwHighDateTime=0x1d6eb7e, nFileSizeHigh=0x0, nFileSizeLow=0x1870, dwReserved0=0x0, dwReserved1=0x0, cFileName="Setup.xml", cAlternateFileName="")) returned 1 [0121.264] FindNextFileW (in: hFindFile=0x381cc0, lpFindFileData=0x31e56c | out: lpFindFileData=0x31e56c*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x7fb9f9e0, ftCreationTime.dwHighDateTime=0x1cbe575, ftLastAccessTime.dwLowDateTime=0x7fb9f9e0, ftLastAccessTime.dwHighDateTime=0x1cbe575, ftLastWriteTime.dwLowDateTime=0x437179c0, ftLastWriteTime.dwHighDateTime=0x1d305eb, nFileSizeHigh=0x0, nFileSizeLow=0x30780dd, dwReserved0=0x0, dwReserved1=0x0, cFileName="VisioLR.cab", cAlternateFileName="")) returned 1 [0121.264] FindNextFileW (in: hFindFile=0x381cc0, lpFindFileData=0x31e56c | out: lpFindFileData=0x31e56c*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x272b1e70, ftCreationTime.dwHighDateTime=0x1cbe576, ftLastAccessTime.dwLowDateTime=0x272b1e70, ftLastAccessTime.dwHighDateTime=0x1cbe576, ftLastWriteTime.dwLowDateTime=0x435c1d00, ftLastWriteTime.dwHighDateTime=0x1d305eb, nFileSizeHigh=0x0, nFileSizeLow=0x2ab000, dwReserved0=0x0, dwReserved1=0x0, cFileName="VisioMUI.msi", cAlternateFileName="")) returned 1 [0121.265] FindNextFileW (in: hFindFile=0x381cc0, lpFindFileData=0x31e56c | out: lpFindFileData=0x31e56c*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x5f0a8e20, ftCreationTime.dwHighDateTime=0x1cbe576, ftLastAccessTime.dwLowDateTime=0x5f0a8e20, ftLastAccessTime.dwHighDateTime=0x1cbe576, ftLastWriteTime.dwLowDateTime=0xf71abe60, ftLastWriteTime.dwHighDateTime=0x1d6eb7e, nFileSizeHigh=0x0, nFileSizeLow=0x2520, dwReserved0=0x0, dwReserved1=0x0, cFileName="VisioMUI.xml", cAlternateFileName="")) returned 1 [0121.265] FindNextFileW (in: hFindFile=0x381cc0, lpFindFileData=0x31e56c | out: lpFindFileData=0x31e56c*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0121.265] FindClose (in: hFindFile=0x381cc0 | out: hFindFile=0x381cc0) returned 1 [0121.265] GetFullPathNameW (in: lpFileName="C:\\MSOCache\\All Users\\{90140000-0054-0409-1000-0000000FF1CE}-C", nBufferLength=0x105, lpBuffer=0x31e33c, lpFilePart=0x0 | out: lpBuffer="C:\\MSOCache\\All Users\\{90140000-0054-0409-1000-0000000FF1CE}-C", lpFilePart=0x0) returned 0x3e [0121.265] FindNextFileW (in: hFindFile=0x381cc0, lpFindFileData=0x31e56c | out: lpFindFileData=0x31e56c*(dwFileAttributes=0x2011, ftCreationTime.dwLowDateTime=0x435769e0, ftCreationTime.dwHighDateTime=0x1d305eb, ftLastAccessTime.dwLowDateTime=0x43bdc500, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0x43bdc500, ftLastWriteTime.dwHighDateTime=0x1d305eb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0121.265] FindNextFileW (in: hFindFile=0x381cc0, lpFindFileData=0x31e56c | out: lpFindFileData=0x31e56c*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x5f356eb0, ftCreationTime.dwHighDateTime=0x1cbe576, ftLastAccessTime.dwLowDateTime=0x5f356eb0, ftLastAccessTime.dwHighDateTime=0x1cbe576, ftLastWriteTime.dwLowDateTime=0xf7185d00, ftLastWriteTime.dwHighDateTime=0x1d6eb7e, nFileSizeHigh=0x0, nFileSizeLow=0x1870, dwReserved0=0x0, dwReserved1=0x0, cFileName="Setup.xml", cAlternateFileName="")) returned 1 [0121.266] FindNextFileW (in: hFindFile=0x381cc0, lpFindFileData=0x31e56c | out: lpFindFileData=0x31e56c*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x7fb9f9e0, ftCreationTime.dwHighDateTime=0x1cbe575, ftLastAccessTime.dwLowDateTime=0x7fb9f9e0, ftLastAccessTime.dwHighDateTime=0x1cbe575, ftLastWriteTime.dwLowDateTime=0x437179c0, ftLastWriteTime.dwHighDateTime=0x1d305eb, nFileSizeHigh=0x0, nFileSizeLow=0x30780dd, dwReserved0=0x0, dwReserved1=0x0, cFileName="VisioLR.cab", cAlternateFileName="")) returned 1 [0121.266] FindNextFileW (in: hFindFile=0x381cc0, lpFindFileData=0x31e56c | out: lpFindFileData=0x31e56c*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x272b1e70, ftCreationTime.dwHighDateTime=0x1cbe576, ftLastAccessTime.dwLowDateTime=0x272b1e70, ftLastAccessTime.dwHighDateTime=0x1cbe576, ftLastWriteTime.dwLowDateTime=0x435c1d00, ftLastWriteTime.dwHighDateTime=0x1d305eb, nFileSizeHigh=0x0, nFileSizeLow=0x2ab000, dwReserved0=0x0, dwReserved1=0x0, cFileName="VisioMUI.msi", cAlternateFileName="")) returned 1 [0121.266] FindNextFileW (in: hFindFile=0x381cc0, lpFindFileData=0x31e56c | out: lpFindFileData=0x31e56c*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x5f0a8e20, ftCreationTime.dwHighDateTime=0x1cbe576, ftLastAccessTime.dwLowDateTime=0x5f0a8e20, ftLastAccessTime.dwHighDateTime=0x1cbe576, ftLastWriteTime.dwLowDateTime=0xf71abe60, ftLastWriteTime.dwHighDateTime=0x1d6eb7e, nFileSizeHigh=0x0, nFileSizeLow=0x2520, dwReserved0=0x0, dwReserved1=0x0, cFileName="VisioMUI.xml", cAlternateFileName="")) returned 1 [0121.266] FindNextFileW (in: hFindFile=0x381cc0, lpFindFileData=0x31e56c | out: lpFindFileData=0x31e56c*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x5f0a8e20, ftCreationTime.dwHighDateTime=0x1cbe576, ftLastAccessTime.dwLowDateTime=0x5f0a8e20, ftLastAccessTime.dwHighDateTime=0x1cbe576, ftLastWriteTime.dwLowDateTime=0xf71abe60, ftLastWriteTime.dwHighDateTime=0x1d6eb7e, nFileSizeHigh=0x0, nFileSizeLow=0x2520, dwReserved0=0x0, dwReserved1=0x0, cFileName="VisioMUI.xml", cAlternateFileName="")) returned 0 [0121.266] CreateFileW (lpFileName="C:\\MSOCache\\All Users\\{90140000-0054-0409-1000-0000000FF1CE}-C\\Setup.xml" (normalized: "c:\\msocache\\all users\\{90140000-0054-0409-1000-0000000ff1ce}-c\\setup.xml"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x178 [0121.266] GetFileType (hFile=0x178) returned 0x1 [0121.266] GetFileType (hFile=0x178) returned 0x1 [0121.266] GetFileSize (in: hFile=0x178, lpFileSizeHigh=0x31e7f8 | out: lpFileSizeHigh=0x31e7f8*=0x0) returned 0x1870 [0121.266] ReadFile (in: hFile=0x178, lpBuffer=0x29e1640, nNumberOfBytesToRead=0x1870, lpNumberOfBytesRead=0x31e7a4, lpOverlapped=0x0 | out: lpBuffer=0x29e1640*, lpNumberOfBytesRead=0x31e7a4*=0x1870, lpOverlapped=0x0) returned 1 [0121.267] CreateFileW (lpFileName="C:\\MSOCache\\All Users\\{90140000-0054-0409-1000-0000000FF1CE}-C\\Setup.xml" (normalized: "c:\\msocache\\all users\\{90140000-0054-0409-1000-0000000ff1ce}-c\\setup.xml"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x178 [0121.268] GetFileType (hFile=0x178) returned 0x1 [0121.268] GetFileType (hFile=0x178) returned 0x1 [0121.268] WriteFile (in: hFile=0x178, lpBuffer=0x29e32c4*, nNumberOfBytesToWrite=0x1870, lpNumberOfBytesWritten=0x31e798, lpOverlapped=0x0 | out: lpBuffer=0x29e32c4*, lpNumberOfBytesWritten=0x31e798*=0x1870, lpOverlapped=0x0) returned 1 [0121.269] MoveFileW (lpExistingFileName="C:\\MSOCache\\All Users\\{90140000-0054-0409-1000-0000000FF1CE}-C\\Setup.xml" (normalized: "c:\\msocache\\all users\\{90140000-0054-0409-1000-0000000ff1ce}-c\\setup.xml"), lpNewFileName="C:\\MSOCache\\All Users\\{90140000-0054-0409-1000-0000000FF1CE}-C\\Setup.xml.[neftet@tutanota.com].boom" (normalized: "c:\\msocache\\all users\\{90140000-0054-0409-1000-0000000ff1ce}-c\\setup.xml.[neftet@tutanota.com].boom")) returned 1 [0121.272] CreateFileW (lpFileName="C:\\MSOCache\\All Users\\{90140000-0054-0409-1000-0000000FF1CE}-C\\VisioMUI.xml" (normalized: "c:\\msocache\\all users\\{90140000-0054-0409-1000-0000000ff1ce}-c\\visiomui.xml"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x178 [0121.272] GetFileType (hFile=0x178) returned 0x1 [0121.272] GetFileType (hFile=0x178) returned 0x1 [0121.272] GetFileSize (in: hFile=0x178, lpFileSizeHigh=0x31e7f8 | out: lpFileSizeHigh=0x31e7f8*=0x0) returned 0x2520 [0121.272] ReadFile (in: hFile=0x178, lpBuffer=0x29e619c, nNumberOfBytesToRead=0x2520, lpNumberOfBytesRead=0x31e7a4, lpOverlapped=0x0 | out: lpBuffer=0x29e619c*, lpNumberOfBytesRead=0x31e7a4*=0x2520, lpOverlapped=0x0) returned 1 [0121.273] CreateFileW (lpFileName="C:\\MSOCache\\All Users\\{90140000-0054-0409-1000-0000000FF1CE}-C\\VisioMUI.xml" (normalized: "c:\\msocache\\all users\\{90140000-0054-0409-1000-0000000ff1ce}-c\\visiomui.xml"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x178 [0121.274] GetFileType (hFile=0x178) returned 0x1 [0121.274] GetFileType (hFile=0x178) returned 0x1 [0121.274] WriteFile (in: hFile=0x178, lpBuffer=0x29e8ad0*, nNumberOfBytesToWrite=0x2520, lpNumberOfBytesWritten=0x31e798, lpOverlapped=0x0 | out: lpBuffer=0x29e8ad0*, lpNumberOfBytesWritten=0x31e798*=0x2520, lpOverlapped=0x0) returned 1 [0121.283] MoveFileW (lpExistingFileName="C:\\MSOCache\\All Users\\{90140000-0054-0409-1000-0000000FF1CE}-C\\VisioMUI.xml" (normalized: "c:\\msocache\\all users\\{90140000-0054-0409-1000-0000000ff1ce}-c\\visiomui.xml"), lpNewFileName="C:\\MSOCache\\All Users\\{90140000-0054-0409-1000-0000000FF1CE}-C\\VisioMUI.xml.[neftet@tutanota.com].boom" (normalized: "c:\\msocache\\all users\\{90140000-0054-0409-1000-0000000ff1ce}-c\\visiomui.xml.[neftet@tutanota.com].boom")) returned 1 [0121.283] FindNextFileW (in: hFindFile=0x381cc0, lpFindFileData=0x31e56c | out: lpFindFileData=0x31e56c*(dwFileAttributes=0x2011, ftCreationTime.dwLowDateTime=0xf58ee8d0, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xf6e0ec10, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xf6e0ec10, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0121.283] FindNextFileW (in: hFindFile=0x381cc0, lpFindFileData=0x31e56c | out: lpFindFileData=0x31e56c*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x3e02ab00, ftCreationTime.dwHighDateTime=0x1cad04a, ftLastAccessTime.dwLowDateTime=0x3e02ab00, ftLastAccessTime.dwHighDateTime=0x1cad04a, ftLastWriteTime.dwLowDateTime=0xf5914a30, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x263400, dwReserved0=0x0, dwReserved1=0x0, cFileName="OneNoteMUI.msi", cAlternateFileName="ONENOT~1.MSI")) returned 1 [0121.283] FindNextFileW (in: hFindFile=0x381cc0, lpFindFileData=0x31e56c | out: lpFindFileData=0x31e56c*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x43f88c00, ftCreationTime.dwHighDateTime=0x1cad04a, ftLastAccessTime.dwLowDateTime=0x43f88c00, ftLastAccessTime.dwHighDateTime=0x1cad04a, ftLastWriteTime.dwLowDateTime=0xf71f8120, ftLastWriteTime.dwHighDateTime=0x1d6eb7e, nFileSizeHigh=0x0, nFileSizeLow=0x650, dwReserved0=0x0, dwReserved1=0x0, cFileName="OneNoteMUI.xml", cAlternateFileName="ONENOT~1.XML")) returned 1 [0121.283] FindNextFileW (in: hFindFile=0x381cc0, lpFindFileData=0x31e56c | out: lpFindFileData=0x31e56c*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x36db9d00, ftCreationTime.dwHighDateTime=0x1cad04a, ftLastAccessTime.dwLowDateTime=0x36db9d00, ftLastAccessTime.dwHighDateTime=0x1cad04a, ftLastWriteTime.dwLowDateTime=0xf5e95540, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x10a5df8, dwReserved0=0x0, dwReserved1=0x0, cFileName="OnoteLR.cab", cAlternateFileName="")) returned 1 [0121.284] FindNextFileW (in: hFindFile=0x381cc0, lpFindFileData=0x31e56c | out: lpFindFileData=0x31e56c*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x43f88c00, ftCreationTime.dwHighDateTime=0x1cad04a, ftLastAccessTime.dwLowDateTime=0x43f88c00, ftLastAccessTime.dwHighDateTime=0x1cad04a, ftLastWriteTime.dwLowDateTime=0xf721e280, ftLastWriteTime.dwHighDateTime=0x1d6eb7e, nFileSizeHigh=0x0, nFileSizeLow=0x7d0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Setup.xml", cAlternateFileName="")) returned 1 [0121.284] FindNextFileW (in: hFindFile=0x381cc0, lpFindFileData=0x31e56c | out: lpFindFileData=0x31e56c*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0121.284] FindNextFileW (in: hFindFile=0x381cc0, lpFindFileData=0x31e56c | out: lpFindFileData=0x31e56c*(dwFileAttributes=0x2011, ftCreationTime.dwLowDateTime=0xf58ee8d0, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xf6e0ec10, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xf6e0ec10, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0121.284] FindNextFileW (in: hFindFile=0x381cc0, lpFindFileData=0x31e56c | out: lpFindFileData=0x31e56c*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x3e02ab00, ftCreationTime.dwHighDateTime=0x1cad04a, ftLastAccessTime.dwLowDateTime=0x3e02ab00, ftLastAccessTime.dwHighDateTime=0x1cad04a, ftLastWriteTime.dwLowDateTime=0xf5914a30, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x263400, dwReserved0=0x0, dwReserved1=0x0, cFileName="OneNoteMUI.msi", cAlternateFileName="ONENOT~1.MSI")) returned 1 [0121.284] FindNextFileW (in: hFindFile=0x381cc0, lpFindFileData=0x31e56c | out: lpFindFileData=0x31e56c*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x43f88c00, ftCreationTime.dwHighDateTime=0x1cad04a, ftLastAccessTime.dwLowDateTime=0x43f88c00, ftLastAccessTime.dwHighDateTime=0x1cad04a, ftLastWriteTime.dwLowDateTime=0xf71f8120, ftLastWriteTime.dwHighDateTime=0x1d6eb7e, nFileSizeHigh=0x0, nFileSizeLow=0x650, dwReserved0=0x0, dwReserved1=0x0, cFileName="OneNoteMUI.xml", cAlternateFileName="ONENOT~1.XML")) returned 1 [0121.284] FindNextFileW (in: hFindFile=0x381cc0, lpFindFileData=0x31e56c | out: lpFindFileData=0x31e56c*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x36db9d00, ftCreationTime.dwHighDateTime=0x1cad04a, ftLastAccessTime.dwLowDateTime=0x36db9d00, ftLastAccessTime.dwHighDateTime=0x1cad04a, ftLastWriteTime.dwLowDateTime=0xf5e95540, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x10a5df8, dwReserved0=0x0, dwReserved1=0x0, cFileName="OnoteLR.cab", cAlternateFileName="")) returned 1 [0121.284] FindNextFileW (in: hFindFile=0x381cc0, lpFindFileData=0x31e56c | out: lpFindFileData=0x31e56c*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x43f88c00, ftCreationTime.dwHighDateTime=0x1cad04a, ftLastAccessTime.dwLowDateTime=0x43f88c00, ftLastAccessTime.dwHighDateTime=0x1cad04a, ftLastWriteTime.dwLowDateTime=0xf721e280, ftLastWriteTime.dwHighDateTime=0x1d6eb7e, nFileSizeHigh=0x0, nFileSizeLow=0x7d0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Setup.xml", cAlternateFileName="")) returned 1 [0121.284] FindNextFileW (in: hFindFile=0x381cc0, lpFindFileData=0x31e56c | out: lpFindFileData=0x31e56c*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x43f88c00, ftCreationTime.dwHighDateTime=0x1cad04a, ftLastAccessTime.dwLowDateTime=0x43f88c00, ftLastAccessTime.dwHighDateTime=0x1cad04a, ftLastWriteTime.dwLowDateTime=0xf721e280, ftLastWriteTime.dwHighDateTime=0x1d6eb7e, nFileSizeHigh=0x0, nFileSizeLow=0x7d0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Setup.xml", cAlternateFileName="")) returned 0 [0121.284] CreateFileW (lpFileName="C:\\MSOCache\\All Users\\{90140000-00A1-0409-1000-0000000FF1CE}-C\\OneNoteMUI.xml" (normalized: "c:\\msocache\\all users\\{90140000-00a1-0409-1000-0000000ff1ce}-c\\onenotemui.xml"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x178 [0121.285] GetFileType (hFile=0x178) returned 0x1 [0121.285] GetFileType (hFile=0x178) returned 0x1 [0121.285] GetFileSize (in: hFile=0x178, lpFileSizeHigh=0x31e7f8 | out: lpFileSizeHigh=0x31e7f8*=0x0) returned 0x650 [0121.285] ReadFile (in: hFile=0x178, lpBuffer=0x29eeef8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x31e7a4, lpOverlapped=0x0 | out: lpBuffer=0x29eeef8*, lpNumberOfBytesRead=0x31e7a4*=0x650, lpOverlapped=0x0) returned 1 [0121.285] CloseHandle (hObject=0x178) returned 1 [0121.286] CreateFileW (lpFileName="C:\\MSOCache\\All Users\\{90140000-00A1-0409-1000-0000000FF1CE}-C\\OneNoteMUI.xml" (normalized: "c:\\msocache\\all users\\{90140000-00a1-0409-1000-0000000ff1ce}-c\\onenotemui.xml"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x178 [0121.287] GetFileType (hFile=0x178) returned 0x1 [0121.287] GetFileType (hFile=0x178) returned 0x1 [0121.287] WriteFile (in: hFile=0x178, lpBuffer=0x29f1ab0*, nNumberOfBytesToWrite=0x650, lpNumberOfBytesWritten=0x31e76c, lpOverlapped=0x0 | out: lpBuffer=0x29f1ab0*, lpNumberOfBytesWritten=0x31e76c*=0x650, lpOverlapped=0x0) returned 1 [0121.288] MoveFileW (lpExistingFileName="C:\\MSOCache\\All Users\\{90140000-00A1-0409-1000-0000000FF1CE}-C\\OneNoteMUI.xml" (normalized: "c:\\msocache\\all users\\{90140000-00a1-0409-1000-0000000ff1ce}-c\\onenotemui.xml"), lpNewFileName="C:\\MSOCache\\All Users\\{90140000-00A1-0409-1000-0000000FF1CE}-C\\OneNoteMUI.xml.[neftet@tutanota.com].boom" (normalized: "c:\\msocache\\all users\\{90140000-00a1-0409-1000-0000000ff1ce}-c\\onenotemui.xml.[neftet@tutanota.com].boom")) returned 1 [0121.288] CreateFileW (lpFileName="C:\\MSOCache\\All Users\\{90140000-00A1-0409-1000-0000000FF1CE}-C\\Setup.xml" (normalized: "c:\\msocache\\all users\\{90140000-00a1-0409-1000-0000000ff1ce}-c\\setup.xml"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x178 [0121.288] GetFileType (hFile=0x178) returned 0x1 [0121.288] GetFileType (hFile=0x178) returned 0x1 [0121.288] GetFileSize (in: hFile=0x178, lpFileSizeHigh=0x31e7f8 | out: lpFileSizeHigh=0x31e7f8*=0x0) returned 0x7d0 [0121.288] ReadFile (in: hFile=0x178, lpBuffer=0x29f37bc, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x31e7a4, lpOverlapped=0x0 | out: lpBuffer=0x29f37bc*, lpNumberOfBytesRead=0x31e7a4*=0x7d0, lpOverlapped=0x0) returned 1 [0121.289] CloseHandle (hObject=0x178) returned 1 [0121.289] CreateFileW (lpFileName="C:\\MSOCache\\All Users\\{90140000-00A1-0409-1000-0000000FF1CE}-C\\Setup.xml" (normalized: "c:\\msocache\\all users\\{90140000-00a1-0409-1000-0000000ff1ce}-c\\setup.xml"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x178 [0121.290] GetFileType (hFile=0x178) returned 0x1 [0121.290] GetFileType (hFile=0x178) returned 0x1 [0121.290] WriteFile (in: hFile=0x178, lpBuffer=0x29f64e0*, nNumberOfBytesToWrite=0x7d0, lpNumberOfBytesWritten=0x31e76c, lpOverlapped=0x0 | out: lpBuffer=0x29f64e0*, lpNumberOfBytesWritten=0x31e76c*=0x7d0, lpOverlapped=0x0) returned 1 [0121.291] MoveFileW (lpExistingFileName="C:\\MSOCache\\All Users\\{90140000-00A1-0409-1000-0000000FF1CE}-C\\Setup.xml" (normalized: "c:\\msocache\\all users\\{90140000-00a1-0409-1000-0000000ff1ce}-c\\setup.xml"), lpNewFileName="C:\\MSOCache\\All Users\\{90140000-00A1-0409-1000-0000000FF1CE}-C\\Setup.xml.[neftet@tutanota.com].boom" (normalized: "c:\\msocache\\all users\\{90140000-00a1-0409-1000-0000000ff1ce}-c\\setup.xml.[neftet@tutanota.com].boom")) returned 1 [0121.292] FindNextFileW (in: hFindFile=0x381cc0, lpFindFileData=0x31e56c | out: lpFindFileData=0x31e56c*(dwFileAttributes=0x2011, ftCreationTime.dwLowDateTime=0xa5b30b20, ftCreationTime.dwHighDateTime=0x1d305f1, ftLastAccessTime.dwLowDateTime=0xa5bc90a0, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0xa5bc90a0, ftLastWriteTime.dwHighDateTime=0x1d305f1, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0121.292] FindNextFileW (in: hFindFile=0x381cc0, lpFindFileData=0x31e56c | out: lpFindFileData=0x31e56c*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x308ae9f0, ftCreationTime.dwHighDateTime=0x1cbe56c, ftLastAccessTime.dwLowDateTime=0x308ae9f0, ftLastAccessTime.dwHighDateTime=0x1cbe56c, ftLastWriteTime.dwLowDateTime=0xa5b55ce0, ftLastWriteTime.dwHighDateTime=0x1d305f1, nFileSizeHigh=0x0, nFileSizeLow=0x265400, dwReserved0=0x0, dwReserved1=0x0, cFileName="ProjectMUI.msi", cAlternateFileName="PROJEC~1.MSI")) returned 1 [0121.292] FindNextFileW (in: hFindFile=0x381cc0, lpFindFileData=0x31e56c | out: lpFindFileData=0x31e56c*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x30a2b7b0, ftCreationTime.dwHighDateTime=0x1cbe56c, ftLastAccessTime.dwLowDateTime=0x30a2b7b0, ftLastAccessTime.dwHighDateTime=0x1cbe56c, ftLastWriteTime.dwLowDateTime=0xf72b6800, ftLastWriteTime.dwHighDateTime=0x1d6eb7e, nFileSizeHigh=0x0, nFileSizeLow=0x5b0, dwReserved0=0x0, dwReserved1=0x0, cFileName="ProjectMUI.xml", cAlternateFileName="PROJEC~1.XML")) returned 1 [0121.292] FindNextFileW (in: hFindFile=0x381cc0, lpFindFileData=0x31e56c | out: lpFindFileData=0x31e56c*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x30306de0, ftCreationTime.dwHighDateTime=0x1cbe56c, ftLastAccessTime.dwLowDateTime=0x30306de0, ftLastAccessTime.dwHighDateTime=0x1cbe56c, ftLastWriteTime.dwLowDateTime=0xa5b7cde0, ftLastWriteTime.dwHighDateTime=0x1d305f1, nFileSizeHigh=0x0, nFileSizeLow=0x7e1dcd, dwReserved0=0x0, dwReserved1=0x0, cFileName="ProjLR.cab", cAlternateFileName="")) returned 1 [0121.292] FindNextFileW (in: hFindFile=0x381cc0, lpFindFileData=0x31e56c | out: lpFindFileData=0x31e56c*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x309dfcc0, ftCreationTime.dwHighDateTime=0x1cbe56c, ftLastAccessTime.dwLowDateTime=0x309dfcc0, ftLastAccessTime.dwHighDateTime=0x1cbe56c, ftLastWriteTime.dwLowDateTime=0xf7302ac0, ftLastWriteTime.dwHighDateTime=0x1d6eb7e, nFileSizeHigh=0x0, nFileSizeLow=0x760, dwReserved0=0x0, dwReserved1=0x0, cFileName="Setup.xml", cAlternateFileName="")) returned 1 [0121.292] FindNextFileW (in: hFindFile=0x381cc0, lpFindFileData=0x31e56c | out: lpFindFileData=0x31e56c*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0121.293] FindNextFileW (in: hFindFile=0x381cc0, lpFindFileData=0x31e56c | out: lpFindFileData=0x31e56c*(dwFileAttributes=0x2011, ftCreationTime.dwLowDateTime=0xa5b30b20, ftCreationTime.dwHighDateTime=0x1d305f1, ftLastAccessTime.dwLowDateTime=0xa5bc90a0, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0xa5bc90a0, ftLastWriteTime.dwHighDateTime=0x1d305f1, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0121.293] FindNextFileW (in: hFindFile=0x381cc0, lpFindFileData=0x31e56c | out: lpFindFileData=0x31e56c*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x308ae9f0, ftCreationTime.dwHighDateTime=0x1cbe56c, ftLastAccessTime.dwLowDateTime=0x308ae9f0, ftLastAccessTime.dwHighDateTime=0x1cbe56c, ftLastWriteTime.dwLowDateTime=0xa5b55ce0, ftLastWriteTime.dwHighDateTime=0x1d305f1, nFileSizeHigh=0x0, nFileSizeLow=0x265400, dwReserved0=0x0, dwReserved1=0x0, cFileName="ProjectMUI.msi", cAlternateFileName="PROJEC~1.MSI")) returned 1 [0121.293] FindNextFileW (in: hFindFile=0x381cc0, lpFindFileData=0x31e56c | out: lpFindFileData=0x31e56c*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x30a2b7b0, ftCreationTime.dwHighDateTime=0x1cbe56c, ftLastAccessTime.dwLowDateTime=0x30a2b7b0, ftLastAccessTime.dwHighDateTime=0x1cbe56c, ftLastWriteTime.dwLowDateTime=0xf72b6800, ftLastWriteTime.dwHighDateTime=0x1d6eb7e, nFileSizeHigh=0x0, nFileSizeLow=0x5b0, dwReserved0=0x0, dwReserved1=0x0, cFileName="ProjectMUI.xml", cAlternateFileName="PROJEC~1.XML")) returned 1 [0121.293] FindNextFileW (in: hFindFile=0x381cc0, lpFindFileData=0x31e56c | out: lpFindFileData=0x31e56c*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x30306de0, ftCreationTime.dwHighDateTime=0x1cbe56c, ftLastAccessTime.dwLowDateTime=0x30306de0, ftLastAccessTime.dwHighDateTime=0x1cbe56c, ftLastWriteTime.dwLowDateTime=0xa5b7cde0, ftLastWriteTime.dwHighDateTime=0x1d305f1, nFileSizeHigh=0x0, nFileSizeLow=0x7e1dcd, dwReserved0=0x0, dwReserved1=0x0, cFileName="ProjLR.cab", cAlternateFileName="")) returned 1 [0121.293] FindNextFileW (in: hFindFile=0x381cc0, lpFindFileData=0x31e56c | out: lpFindFileData=0x31e56c*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x309dfcc0, ftCreationTime.dwHighDateTime=0x1cbe56c, ftLastAccessTime.dwLowDateTime=0x309dfcc0, ftLastAccessTime.dwHighDateTime=0x1cbe56c, ftLastWriteTime.dwLowDateTime=0xf7302ac0, ftLastWriteTime.dwHighDateTime=0x1d6eb7e, nFileSizeHigh=0x0, nFileSizeLow=0x760, dwReserved0=0x0, dwReserved1=0x0, cFileName="Setup.xml", cAlternateFileName="")) returned 1 [0121.293] FindNextFileW (in: hFindFile=0x381cc0, lpFindFileData=0x31e56c | out: lpFindFileData=0x31e56c*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x309dfcc0, ftCreationTime.dwHighDateTime=0x1cbe56c, ftLastAccessTime.dwLowDateTime=0x309dfcc0, ftLastAccessTime.dwHighDateTime=0x1cbe56c, ftLastWriteTime.dwLowDateTime=0xf7302ac0, ftLastWriteTime.dwHighDateTime=0x1d6eb7e, nFileSizeHigh=0x0, nFileSizeLow=0x760, dwReserved0=0x0, dwReserved1=0x0, cFileName="Setup.xml", cAlternateFileName="")) returned 0 [0121.293] CreateFileW (lpFileName="C:\\MSOCache\\All Users\\{90140000-00B4-0409-1000-0000000FF1CE}-C\\ProjectMUI.xml" (normalized: "c:\\msocache\\all users\\{90140000-00b4-0409-1000-0000000ff1ce}-c\\projectmui.xml"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x178 [0121.293] GetFileType (hFile=0x178) returned 0x1 [0121.293] GetFileType (hFile=0x178) returned 0x1 [0121.293] GetFileSize (in: hFile=0x178, lpFileSizeHigh=0x31e7f8 | out: lpFileSizeHigh=0x31e7f8*=0x0) returned 0x5b0 [0121.294] ReadFile (in: hFile=0x178, lpBuffer=0x29fa1e4, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x31e7a4, lpOverlapped=0x0 | out: lpBuffer=0x29fa1e4*, lpNumberOfBytesRead=0x31e7a4*=0x5b0, lpOverlapped=0x0) returned 1 [0121.294] CloseHandle (hObject=0x178) returned 1 [0121.295] CreateFileW (lpFileName="C:\\MSOCache\\All Users\\{90140000-00B4-0409-1000-0000000FF1CE}-C\\ProjectMUI.xml" (normalized: "c:\\msocache\\all users\\{90140000-00b4-0409-1000-0000000ff1ce}-c\\projectmui.xml"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x178 [0121.295] GetFileType (hFile=0x178) returned 0x1 [0121.295] GetFileType (hFile=0x178) returned 0x1 [0121.295] WriteFile (in: hFile=0x178, lpBuffer=0x29fccfc*, nNumberOfBytesToWrite=0x5b0, lpNumberOfBytesWritten=0x31e76c, lpOverlapped=0x0 | out: lpBuffer=0x29fccfc*, lpNumberOfBytesWritten=0x31e76c*=0x5b0, lpOverlapped=0x0) returned 1 [0121.296] MoveFileW (lpExistingFileName="C:\\MSOCache\\All Users\\{90140000-00B4-0409-1000-0000000FF1CE}-C\\ProjectMUI.xml" (normalized: "c:\\msocache\\all users\\{90140000-00b4-0409-1000-0000000ff1ce}-c\\projectmui.xml"), lpNewFileName="C:\\MSOCache\\All Users\\{90140000-00B4-0409-1000-0000000FF1CE}-C\\ProjectMUI.xml.[neftet@tutanota.com].boom" (normalized: "c:\\msocache\\all users\\{90140000-00b4-0409-1000-0000000ff1ce}-c\\projectmui.xml.[neftet@tutanota.com].boom")) returned 1 [0121.297] CreateFileW (lpFileName="C:\\MSOCache\\All Users\\{90140000-00B4-0409-1000-0000000FF1CE}-C\\Setup.xml" (normalized: "c:\\msocache\\all users\\{90140000-00b4-0409-1000-0000000ff1ce}-c\\setup.xml"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x178 [0121.297] GetFileType (hFile=0x178) returned 0x1 [0121.297] GetFileType (hFile=0x178) returned 0x1 [0121.297] GetFileSize (in: hFile=0x178, lpFileSizeHigh=0x31e7f8 | out: lpFileSizeHigh=0x31e7f8*=0x0) returned 0x760 [0121.297] ReadFile (in: hFile=0x178, lpBuffer=0x29fe998, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x31e7a4, lpOverlapped=0x0 | out: lpBuffer=0x29fe998*, lpNumberOfBytesRead=0x31e7a4*=0x760, lpOverlapped=0x0) returned 1 [0121.298] CloseHandle (hObject=0x178) returned 1 [0121.298] CreateFileW (lpFileName="C:\\MSOCache\\All Users\\{90140000-00B4-0409-1000-0000000FF1CE}-C\\Setup.xml" (normalized: "c:\\msocache\\all users\\{90140000-00b4-0409-1000-0000000ff1ce}-c\\setup.xml"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x178 [0121.299] GetFileType (hFile=0x178) returned 0x1 [0121.299] GetFileType (hFile=0x178) returned 0x1 [0121.299] WriteFile (in: hFile=0x178, lpBuffer=0x2a0164c*, nNumberOfBytesToWrite=0x760, lpNumberOfBytesWritten=0x31e76c, lpOverlapped=0x0 | out: lpBuffer=0x2a0164c*, lpNumberOfBytesWritten=0x31e76c*=0x760, lpOverlapped=0x0) returned 1 [0121.300] MoveFileW (lpExistingFileName="C:\\MSOCache\\All Users\\{90140000-00B4-0409-1000-0000000FF1CE}-C\\Setup.xml" (normalized: "c:\\msocache\\all users\\{90140000-00b4-0409-1000-0000000ff1ce}-c\\setup.xml"), lpNewFileName="C:\\MSOCache\\All Users\\{90140000-00B4-0409-1000-0000000FF1CE}-C\\Setup.xml.[neftet@tutanota.com].boom" (normalized: "c:\\msocache\\all users\\{90140000-00b4-0409-1000-0000000ff1ce}-c\\setup.xml.[neftet@tutanota.com].boom")) returned 1 [0121.301] FindNextFileW (in: hFindFile=0x381cc0, lpFindFileData=0x31e56c | out: lpFindFileData=0x31e56c*(dwFileAttributes=0x2011, ftCreationTime.dwLowDateTime=0xee38cbf0, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xee803530, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xee803530, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0121.301] FindNextFileW (in: hFindFile=0x381cc0, lpFindFileData=0x31e56c | out: lpFindFileData=0x31e56c*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xbd907a00, ftCreationTime.dwHighDateTime=0x1cad04a, ftLastAccessTime.dwLowDateTime=0xbd907a00, ftLastAccessTime.dwHighDateTime=0x1cad04a, ftLastWriteTime.dwLowDateTime=0xee4bb7b0, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x3e7e1f, dwReserved0=0x0, dwReserved1=0x0, cFileName="GrooveLR.cab", cAlternateFileName="")) returned 1 [0121.301] FindNextFileW (in: hFindFile=0x381cc0, lpFindFileData=0x31e56c | out: lpFindFileData=0x31e56c*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xbd907a00, ftCreationTime.dwHighDateTime=0x1cad04a, ftLastAccessTime.dwLowDateTime=0xbd907a00, ftLastAccessTime.dwHighDateTime=0x1cad04a, ftLastWriteTime.dwLowDateTime=0xee3b15e0, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x264400, dwReserved0=0x0, dwReserved1=0x0, cFileName="GrooveMUI.msi", cAlternateFileName="GROOVE~1.MSI")) returned 1 [0121.301] FindNextFileW (in: hFindFile=0x381cc0, lpFindFileData=0x31e56c | out: lpFindFileData=0x31e56c*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xbec1a700, ftCreationTime.dwHighDateTime=0x1cad04a, ftLastAccessTime.dwLowDateTime=0xbec1a700, ftLastAccessTime.dwHighDateTime=0x1cad04a, ftLastWriteTime.dwLowDateTime=0xf7328c20, ftLastWriteTime.dwHighDateTime=0x1d6eb7e, nFileSizeHigh=0x0, nFileSizeLow=0x3a0, dwReserved0=0x0, dwReserved1=0x0, cFileName="GrooveMUI.xml", cAlternateFileName="GROOVE~1.XML")) returned 1 [0121.301] FindNextFileW (in: hFindFile=0x381cc0, lpFindFileData=0x31e56c | out: lpFindFileData=0x31e56c*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xbec1a700, ftCreationTime.dwHighDateTime=0x1cad04a, ftLastAccessTime.dwLowDateTime=0xbec1a700, ftLastAccessTime.dwHighDateTime=0x1cad04a, ftLastWriteTime.dwLowDateTime=0xf7374ee0, ftLastWriteTime.dwHighDateTime=0x1d6eb7e, nFileSizeHigh=0x0, nFileSizeLow=0x5b0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Setup.xml", cAlternateFileName="")) returned 1 [0121.301] FindNextFileW (in: hFindFile=0x381cc0, lpFindFileData=0x31e56c | out: lpFindFileData=0x31e56c*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0121.301] FindNextFileW (in: hFindFile=0x381cc0, lpFindFileData=0x31e56c | out: lpFindFileData=0x31e56c*(dwFileAttributes=0x2011, ftCreationTime.dwLowDateTime=0xee38cbf0, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xee803530, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xee803530, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0121.301] FindNextFileW (in: hFindFile=0x381cc0, lpFindFileData=0x31e56c | out: lpFindFileData=0x31e56c*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xbd907a00, ftCreationTime.dwHighDateTime=0x1cad04a, ftLastAccessTime.dwLowDateTime=0xbd907a00, ftLastAccessTime.dwHighDateTime=0x1cad04a, ftLastWriteTime.dwLowDateTime=0xee4bb7b0, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x3e7e1f, dwReserved0=0x0, dwReserved1=0x0, cFileName="GrooveLR.cab", cAlternateFileName="")) returned 1 [0121.301] FindNextFileW (in: hFindFile=0x381cc0, lpFindFileData=0x31e56c | out: lpFindFileData=0x31e56c*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xbd907a00, ftCreationTime.dwHighDateTime=0x1cad04a, ftLastAccessTime.dwLowDateTime=0xbd907a00, ftLastAccessTime.dwHighDateTime=0x1cad04a, ftLastWriteTime.dwLowDateTime=0xee3b15e0, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x264400, dwReserved0=0x0, dwReserved1=0x0, cFileName="GrooveMUI.msi", cAlternateFileName="GROOVE~1.MSI")) returned 1 [0121.302] FindNextFileW (in: hFindFile=0x381cc0, lpFindFileData=0x31e56c | out: lpFindFileData=0x31e56c*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xbec1a700, ftCreationTime.dwHighDateTime=0x1cad04a, ftLastAccessTime.dwLowDateTime=0xbec1a700, ftLastAccessTime.dwHighDateTime=0x1cad04a, ftLastWriteTime.dwLowDateTime=0xf7328c20, ftLastWriteTime.dwHighDateTime=0x1d6eb7e, nFileSizeHigh=0x0, nFileSizeLow=0x3a0, dwReserved0=0x0, dwReserved1=0x0, cFileName="GrooveMUI.xml", cAlternateFileName="GROOVE~1.XML")) returned 1 [0121.302] FindNextFileW (in: hFindFile=0x381cc0, lpFindFileData=0x31e56c | out: lpFindFileData=0x31e56c*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xbec1a700, ftCreationTime.dwHighDateTime=0x1cad04a, ftLastAccessTime.dwLowDateTime=0xbec1a700, ftLastAccessTime.dwHighDateTime=0x1cad04a, ftLastWriteTime.dwLowDateTime=0xf7374ee0, ftLastWriteTime.dwHighDateTime=0x1d6eb7e, nFileSizeHigh=0x0, nFileSizeLow=0x5b0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Setup.xml", cAlternateFileName="")) returned 1 [0121.302] FindNextFileW (in: hFindFile=0x381cc0, lpFindFileData=0x31e56c | out: lpFindFileData=0x31e56c*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xbec1a700, ftCreationTime.dwHighDateTime=0x1cad04a, ftLastAccessTime.dwLowDateTime=0xbec1a700, ftLastAccessTime.dwHighDateTime=0x1cad04a, ftLastWriteTime.dwLowDateTime=0xf7374ee0, ftLastWriteTime.dwHighDateTime=0x1d6eb7e, nFileSizeHigh=0x0, nFileSizeLow=0x5b0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Setup.xml", cAlternateFileName="")) returned 0 [0121.302] CreateFileW (lpFileName="C:\\MSOCache\\All Users\\{90140000-00BA-0409-1000-0000000FF1CE}-C\\GrooveMUI.xml" (normalized: "c:\\msocache\\all users\\{90140000-00ba-0409-1000-0000000ff1ce}-c\\groovemui.xml"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x178 [0121.302] GetFileType (hFile=0x178) returned 0x1 [0121.302] GetFileType (hFile=0x178) returned 0x1 [0121.302] GetFileSize (in: hFile=0x178, lpFileSizeHigh=0x31e7f8 | out: lpFileSizeHigh=0x31e7f8*=0x0) returned 0x3a0 [0121.302] ReadFile (in: hFile=0x178, lpBuffer=0x2a0515c, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x31e7a4, lpOverlapped=0x0 | out: lpBuffer=0x2a0515c*, lpNumberOfBytesRead=0x31e7a4*=0x3a0, lpOverlapped=0x0) returned 1 [0121.303] CloseHandle (hObject=0x178) returned 1 [0121.303] CreateFileW (lpFileName="C:\\MSOCache\\All Users\\{90140000-00BA-0409-1000-0000000FF1CE}-C\\GrooveMUI.xml" (normalized: "c:\\msocache\\all users\\{90140000-00ba-0409-1000-0000000ff1ce}-c\\groovemui.xml"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x178 [0121.304] GetFileType (hFile=0x178) returned 0x1 [0121.304] GetFileType (hFile=0x178) returned 0x1 [0121.304] WriteFile (in: hFile=0x178, lpBuffer=0x2a07a60*, nNumberOfBytesToWrite=0x3a0, lpNumberOfBytesWritten=0x31e76c, lpOverlapped=0x0 | out: lpBuffer=0x2a07a60*, lpNumberOfBytesWritten=0x31e76c*=0x3a0, lpOverlapped=0x0) returned 1 [0121.305] MoveFileW (lpExistingFileName="C:\\MSOCache\\All Users\\{90140000-00BA-0409-1000-0000000FF1CE}-C\\GrooveMUI.xml" (normalized: "c:\\msocache\\all users\\{90140000-00ba-0409-1000-0000000ff1ce}-c\\groovemui.xml"), lpNewFileName="C:\\MSOCache\\All Users\\{90140000-00BA-0409-1000-0000000FF1CE}-C\\GrooveMUI.xml.[neftet@tutanota.com].boom" (normalized: "c:\\msocache\\all users\\{90140000-00ba-0409-1000-0000000ff1ce}-c\\groovemui.xml.[neftet@tutanota.com].boom")) returned 1 [0121.305] CreateFileW (lpFileName="C:\\MSOCache\\All Users\\{90140000-00BA-0409-1000-0000000FF1CE}-C\\Setup.xml" (normalized: "c:\\msocache\\all users\\{90140000-00ba-0409-1000-0000000ff1ce}-c\\setup.xml"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x178 [0121.305] GetFileType (hFile=0x178) returned 0x1 [0121.306] GetFileType (hFile=0x178) returned 0x1 [0121.306] GetFileSize (in: hFile=0x178, lpFileSizeHigh=0x31e7f8 | out: lpFileSizeHigh=0x31e7f8*=0x0) returned 0x5b0 [0121.306] ReadFile (in: hFile=0x178, lpBuffer=0x2a0952c, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x31e7a4, lpOverlapped=0x0 | out: lpBuffer=0x2a0952c*, lpNumberOfBytesRead=0x31e7a4*=0x5b0, lpOverlapped=0x0) returned 1 [0121.306] CloseHandle (hObject=0x178) returned 1 [0121.307] CreateFileW (lpFileName="C:\\MSOCache\\All Users\\{90140000-00BA-0409-1000-0000000FF1CE}-C\\Setup.xml" (normalized: "c:\\msocache\\all users\\{90140000-00ba-0409-1000-0000000ff1ce}-c\\setup.xml"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x178 [0121.307] GetFileType (hFile=0x178) returned 0x1 [0121.307] GetFileType (hFile=0x178) returned 0x1 [0121.308] WriteFile (in: hFile=0x178, lpBuffer=0x2a0c030*, nNumberOfBytesToWrite=0x5b0, lpNumberOfBytesWritten=0x31e76c, lpOverlapped=0x0 | out: lpBuffer=0x2a0c030*, lpNumberOfBytesWritten=0x31e76c*=0x5b0, lpOverlapped=0x0) returned 1 [0121.308] MoveFileW (lpExistingFileName="C:\\MSOCache\\All Users\\{90140000-00BA-0409-1000-0000000FF1CE}-C\\Setup.xml" (normalized: "c:\\msocache\\all users\\{90140000-00ba-0409-1000-0000000ff1ce}-c\\setup.xml"), lpNewFileName="C:\\MSOCache\\All Users\\{90140000-00BA-0409-1000-0000000FF1CE}-C\\Setup.xml.[neftet@tutanota.com].boom" (normalized: "c:\\msocache\\all users\\{90140000-00ba-0409-1000-0000000ff1ce}-c\\setup.xml.[neftet@tutanota.com].boom")) returned 1 [0121.309] FindNextFileW (in: hFindFile=0x381cc0, lpFindFileData=0x31e56c | out: lpFindFileData=0x31e56c*(dwFileAttributes=0x2011, ftCreationTime.dwLowDateTime=0xe7b68970, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xe8729610, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xe8729610, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0121.309] FindNextFileW (in: hFindFile=0x381cc0, lpFindFileData=0x31e56c | out: lpFindFileData=0x31e56c*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe8691090, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xe8691090, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xe8691090, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="1033", cAlternateFileName="")) returned 1 [0121.309] FindNextFileW (in: hFindFile=0x381cc0, lpFindFileData=0x31e56c | out: lpFindFileData=0x31e56c*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x11e8ef00, ftCreationTime.dwHighDateTime=0x1cacdea, ftLastAccessTime.dwLowDateTime=0x11e8ef00, ftLastAccessTime.dwHighDateTime=0x1cacdea, ftLastWriteTime.dwLowDateTime=0xf740d460, ftLastWriteTime.dwHighDateTime=0x1d6eb7e, nFileSizeHigh=0x0, nFileSizeLow=0x91980, dwReserved0=0x0, dwReserved1=0x0, cFileName="branding.xml", cAlternateFileName="")) returned 1 [0121.309] FindNextFileW (in: hFindFile=0x381cc0, lpFindFileData=0x31e56c | out: lpFindFileData=0x31e56c*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xa26c9d00, ftCreationTime.dwHighDateTime=0x1cac9ae, ftLastAccessTime.dwLowDateTime=0xa26c9d00, ftLastAccessTime.dwHighDateTime=0x1cac9ae, ftLastWriteTime.dwLowDateTime=0xe85142d0, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0xccb88, dwReserved0=0x0, dwReserved1=0x0, cFileName="DW20.EXE", cAlternateFileName="")) returned 1 [0121.309] FindNextFileW (in: hFindFile=0x381cc0, lpFindFileData=0x31e56c | out: lpFindFileData=0x31e56c*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xabf60500, ftCreationTime.dwHighDateTime=0x1cac9ae, ftLastAccessTime.dwLowDateTime=0xabf60500, ftLastAccessTime.dwHighDateTime=0x1cac9ae, ftLastWriteTime.dwLowDateTime=0xe85ab8b0, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x80760, dwReserved0=0x0, dwReserved1=0x0, cFileName="dwdcw20.dll", cAlternateFileName="")) returned 1 [0121.309] FindNextFileW (in: hFindFile=0x381cc0, lpFindFileData=0x31e56c | out: lpFindFileData=0x31e56c*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xabf60500, ftCreationTime.dwHighDateTime=0x1cac9ae, ftLastAccessTime.dwLowDateTime=0xabf60500, ftLastAccessTime.dwHighDateTime=0x1cac9ae, ftLastWriteTime.dwLowDateTime=0xe85f73a0, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x7eda0, dwReserved0=0x0, dwReserved1=0x0, cFileName="dwtrig20.exe", cAlternateFileName="")) returned 1 [0121.310] FindNextFileW (in: hFindFile=0x381cc0, lpFindFileData=0x31e56c | out: lpFindFileData=0x31e56c*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x8d646800, ftCreationTime.dwHighDateTime=0x1cacc53, ftLastAccessTime.dwLowDateTime=0x8d646800, ftLastAccessTime.dwHighDateTime=0x1cacc53, ftLastWriteTime.dwLowDateTime=0xe8728670, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x741, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.VC90.CRT.manifest", cAlternateFileName="MICROS~1.MAN")) returned 1 [0121.310] FindNextFileW (in: hFindFile=0x381cc0, lpFindFileData=0x31e56c | out: lpFindFileData=0x31e56c*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x8c333b00, ftCreationTime.dwHighDateTime=0x1cacc53, ftLastAccessTime.dwLowDateTime=0x8c333b00, ftLastAccessTime.dwHighDateTime=0x1cacc53, ftLastWriteTime.dwLowDateTime=0xe86b5a80, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0xa0200, dwReserved0=0x0, dwReserved1=0x0, cFileName="msvcr90.dll", cAlternateFileName="")) returned 1 [0121.310] FindNextFileW (in: hFindFile=0x381cc0, lpFindFileData=0x31e56c | out: lpFindFileData=0x31e56c*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x3ba05100, ftCreationTime.dwHighDateTime=0x1cad04a, ftLastAccessTime.dwLowDateTime=0x3ba05100, ftLastAccessTime.dwHighDateTime=0x1cad04a, ftLastWriteTime.dwLowDateTime=0xe7e3b3f0, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0xd79282, dwReserved0=0x0, dwReserved1=0x0, cFileName="OfficeLR.cab", cAlternateFileName="")) returned 1 [0121.310] FindNextFileW (in: hFindFile=0x381cc0, lpFindFileData=0x31e56c | out: lpFindFileData=0x31e56c*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x3cd17e00, ftCreationTime.dwHighDateTime=0x1cad04a, ftLastAccessTime.dwLowDateTime=0x3cd17e00, ftLastAccessTime.dwHighDateTime=0x1cad04a, ftLastWriteTime.dwLowDateTime=0xe7c4ba40, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x387e00, dwReserved0=0x0, dwReserved1=0x0, cFileName="OfficeMUI.msi", cAlternateFileName="OFFICE~2.MSI")) returned 1 [0121.310] FindNextFileW (in: hFindFile=0x381cc0, lpFindFileData=0x31e56c | out: lpFindFileData=0x31e56c*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x43f88c00, ftCreationTime.dwHighDateTime=0x1cad04a, ftLastAccessTime.dwLowDateTime=0x43f88c00, ftLastAccessTime.dwHighDateTime=0x1cad04a, ftLastWriteTime.dwLowDateTime=0xf747f880, ftLastWriteTime.dwHighDateTime=0x1d6eb7e, nFileSizeHigh=0x0, nFileSizeLow=0x15c0, dwReserved0=0x0, dwReserved1=0x0, cFileName="OfficeMUI.xml", cAlternateFileName="OFFICE~2.XML")) returned 1 [0121.310] FindNextFileW (in: hFindFile=0x381cc0, lpFindFileData=0x31e56c | out: lpFindFileData=0x31e56c*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x3f33d800, ftCreationTime.dwHighDateTime=0x1cad04a, ftLastAccessTime.dwLowDateTime=0x3f33d800, ftLastAccessTime.dwHighDateTime=0x1cad04a, ftLastWriteTime.dwLowDateTime=0xe7b68970, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0xd4200, dwReserved0=0x0, dwReserved1=0x0, cFileName="OfficeMUISet.msi", cAlternateFileName="OFFICE~1.MSI")) returned 1 [0121.310] FindNextFileW (in: hFindFile=0x381cc0, lpFindFileData=0x31e56c | out: lpFindFileData=0x31e56c*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x4529b900, ftCreationTime.dwHighDateTime=0x1cad04a, ftLastAccessTime.dwLowDateTime=0x4529b900, ftLastAccessTime.dwHighDateTime=0x1cad04a, ftLastWriteTime.dwLowDateTime=0xf74f1ca0, ftLastWriteTime.dwHighDateTime=0x1d6eb7e, nFileSizeHigh=0x0, nFileSizeLow=0x340, dwReserved0=0x0, dwReserved1=0x0, cFileName="OfficeMUISet.xml", cAlternateFileName="OFFICE~1.XML")) returned 1 [0121.310] FindNextFileW (in: hFindFile=0x381cc0, lpFindFileData=0x31e56c | out: lpFindFileData=0x31e56c*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xc8b16200, ftCreationTime.dwHighDateTime=0x1cac190, ftLastAccessTime.dwLowDateTime=0xc8b16200, ftLastAccessTime.dwHighDateTime=0x1cac190, ftLastWriteTime.dwLowDateTime=0xe8728670, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x2ed80, dwReserved0=0x0, dwReserved1=0x0, cFileName="osetupui.dll", cAlternateFileName="")) returned 1 [0121.310] FindNextFileW (in: hFindFile=0x381cc0, lpFindFileData=0x31e56c | out: lpFindFileData=0x31e56c*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x77cbb000, ftCreationTime.dwHighDateTime=0x1cac57a, ftLastAccessTime.dwLowDateTime=0x77cbb000, ftLastAccessTime.dwHighDateTime=0x1cac57a, ftLastWriteTime.dwLowDateTime=0xe8728670, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x6a3b, dwReserved0=0x0, dwReserved1=0x0, cFileName="pss10r.chm", cAlternateFileName="")) returned 1 [0121.310] FindNextFileW (in: hFindFile=0x381cc0, lpFindFileData=0x31e56c | out: lpFindFileData=0x31e56c*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x7cab9f00, ftCreationTime.dwHighDateTime=0x1cac8ad, ftLastAccessTime.dwLowDateTime=0x7cab9f00, ftLastAccessTime.dwHighDateTime=0x1cac8ad, ftLastWriteTime.dwLowDateTime=0xe8728670, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x10676, dwReserved0=0x0, dwReserved1=0x0, cFileName="setup.chm", cAlternateFileName="")) returned 1 [0121.310] FindNextFileW (in: hFindFile=0x381cc0, lpFindFileData=0x31e56c | out: lpFindFileData=0x31e56c*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x42c75f00, ftCreationTime.dwHighDateTime=0x1cad04a, ftLastAccessTime.dwLowDateTime=0x42c75f00, ftLastAccessTime.dwHighDateTime=0x1cad04a, ftLastWriteTime.dwLowDateTime=0xf7517e00, ftLastWriteTime.dwHighDateTime=0x1d6eb7e, nFileSizeHigh=0x0, nFileSizeLow=0x2490, dwReserved0=0x0, dwReserved1=0x0, cFileName="Setup.xml", cAlternateFileName="")) returned 1 [0121.310] FindNextFileW (in: hFindFile=0x381cc0, lpFindFileData=0x31e56c | out: lpFindFileData=0x31e56c*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x131a1c00, ftCreationTime.dwHighDateTime=0x1cacdea, ftLastAccessTime.dwLowDateTime=0x131a1c00, ftLastAccessTime.dwHighDateTime=0x1cacdea, ftLastWriteTime.dwLowDateTime=0xe84c60d0, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0xe00, dwReserved0=0x0, dwReserved1=0x0, cFileName="ShellUI.MST", cAlternateFileName="")) returned 1 [0121.311] FindNextFileW (in: hFindFile=0x381cc0, lpFindFileData=0x31e56c | out: lpFindFileData=0x31e56c*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0121.311] FindNextFileW (in: hFindFile=0x381cc0, lpFindFileData=0x31e56c | out: lpFindFileData=0x31e56c*(dwFileAttributes=0x2011, ftCreationTime.dwLowDateTime=0xe7b68970, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xe8729610, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xe8729610, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0121.311] FindNextFileW (in: hFindFile=0x381cc0, lpFindFileData=0x31e56c | out: lpFindFileData=0x31e56c*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe8691090, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xe8691090, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xe8691090, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="1033", cAlternateFileName="")) returned 1 [0121.311] FindNextFileW (in: hFindFile=0x381cc0, lpFindFileData=0x31e56c | out: lpFindFileData=0x31e56c*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x11e8ef00, ftCreationTime.dwHighDateTime=0x1cacdea, ftLastAccessTime.dwLowDateTime=0x11e8ef00, ftLastAccessTime.dwHighDateTime=0x1cacdea, ftLastWriteTime.dwLowDateTime=0xf740d460, ftLastWriteTime.dwHighDateTime=0x1d6eb7e, nFileSizeHigh=0x0, nFileSizeLow=0x91980, dwReserved0=0x0, dwReserved1=0x0, cFileName="branding.xml", cAlternateFileName="")) returned 1 [0121.311] FindNextFileW (in: hFindFile=0x381cc0, lpFindFileData=0x31e56c | out: lpFindFileData=0x31e56c*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xa26c9d00, ftCreationTime.dwHighDateTime=0x1cac9ae, ftLastAccessTime.dwLowDateTime=0xa26c9d00, ftLastAccessTime.dwHighDateTime=0x1cac9ae, ftLastWriteTime.dwLowDateTime=0xe85142d0, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0xccb88, dwReserved0=0x0, dwReserved1=0x0, cFileName="DW20.EXE", cAlternateFileName="")) returned 1 [0121.311] FindNextFileW (in: hFindFile=0x381cc0, lpFindFileData=0x31e56c | out: lpFindFileData=0x31e56c*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xabf60500, ftCreationTime.dwHighDateTime=0x1cac9ae, ftLastAccessTime.dwLowDateTime=0xabf60500, ftLastAccessTime.dwHighDateTime=0x1cac9ae, ftLastWriteTime.dwLowDateTime=0xe85ab8b0, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x80760, dwReserved0=0x0, dwReserved1=0x0, cFileName="dwdcw20.dll", cAlternateFileName="")) returned 1 [0121.311] FindNextFileW (in: hFindFile=0x381cc0, lpFindFileData=0x31e56c | out: lpFindFileData=0x31e56c*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xabf60500, ftCreationTime.dwHighDateTime=0x1cac9ae, ftLastAccessTime.dwLowDateTime=0xabf60500, ftLastAccessTime.dwHighDateTime=0x1cac9ae, ftLastWriteTime.dwLowDateTime=0xe85f73a0, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x7eda0, dwReserved0=0x0, dwReserved1=0x0, cFileName="dwtrig20.exe", cAlternateFileName="")) returned 1 [0121.311] FindNextFileW (in: hFindFile=0x381cc0, lpFindFileData=0x31e56c | out: lpFindFileData=0x31e56c*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x8d646800, ftCreationTime.dwHighDateTime=0x1cacc53, ftLastAccessTime.dwLowDateTime=0x8d646800, ftLastAccessTime.dwHighDateTime=0x1cacc53, ftLastWriteTime.dwLowDateTime=0xe8728670, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x741, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.VC90.CRT.manifest", cAlternateFileName="MICROS~1.MAN")) returned 1 [0121.311] FindNextFileW (in: hFindFile=0x381cc0, lpFindFileData=0x31e56c | out: lpFindFileData=0x31e56c*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x8c333b00, ftCreationTime.dwHighDateTime=0x1cacc53, ftLastAccessTime.dwLowDateTime=0x8c333b00, ftLastAccessTime.dwHighDateTime=0x1cacc53, ftLastWriteTime.dwLowDateTime=0xe86b5a80, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0xa0200, dwReserved0=0x0, dwReserved1=0x0, cFileName="msvcr90.dll", cAlternateFileName="")) returned 1 [0121.311] FindNextFileW (in: hFindFile=0x381cc0, lpFindFileData=0x31e56c | out: lpFindFileData=0x31e56c*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x3ba05100, ftCreationTime.dwHighDateTime=0x1cad04a, ftLastAccessTime.dwLowDateTime=0x3ba05100, ftLastAccessTime.dwHighDateTime=0x1cad04a, ftLastWriteTime.dwLowDateTime=0xe7e3b3f0, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0xd79282, dwReserved0=0x0, dwReserved1=0x0, cFileName="OfficeLR.cab", cAlternateFileName="")) returned 1 [0121.312] FindNextFileW (in: hFindFile=0x381cc0, lpFindFileData=0x31e56c | out: lpFindFileData=0x31e56c*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x3cd17e00, ftCreationTime.dwHighDateTime=0x1cad04a, ftLastAccessTime.dwLowDateTime=0x3cd17e00, ftLastAccessTime.dwHighDateTime=0x1cad04a, ftLastWriteTime.dwLowDateTime=0xe7c4ba40, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x387e00, dwReserved0=0x0, dwReserved1=0x0, cFileName="OfficeMUI.msi", cAlternateFileName="OFFICE~2.MSI")) returned 1 [0121.312] FindNextFileW (in: hFindFile=0x381cc0, lpFindFileData=0x31e56c | out: lpFindFileData=0x31e56c*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x43f88c00, ftCreationTime.dwHighDateTime=0x1cad04a, ftLastAccessTime.dwLowDateTime=0x43f88c00, ftLastAccessTime.dwHighDateTime=0x1cad04a, ftLastWriteTime.dwLowDateTime=0xf747f880, ftLastWriteTime.dwHighDateTime=0x1d6eb7e, nFileSizeHigh=0x0, nFileSizeLow=0x15c0, dwReserved0=0x0, dwReserved1=0x0, cFileName="OfficeMUI.xml", cAlternateFileName="OFFICE~2.XML")) returned 1 [0121.312] FindNextFileW (in: hFindFile=0x381cc0, lpFindFileData=0x31e56c | out: lpFindFileData=0x31e56c*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x3f33d800, ftCreationTime.dwHighDateTime=0x1cad04a, ftLastAccessTime.dwLowDateTime=0x3f33d800, ftLastAccessTime.dwHighDateTime=0x1cad04a, ftLastWriteTime.dwLowDateTime=0xe7b68970, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0xd4200, dwReserved0=0x0, dwReserved1=0x0, cFileName="OfficeMUISet.msi", cAlternateFileName="OFFICE~1.MSI")) returned 1 [0121.312] FindNextFileW (in: hFindFile=0x381cc0, lpFindFileData=0x31e56c | out: lpFindFileData=0x31e56c*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x4529b900, ftCreationTime.dwHighDateTime=0x1cad04a, ftLastAccessTime.dwLowDateTime=0x4529b900, ftLastAccessTime.dwHighDateTime=0x1cad04a, ftLastWriteTime.dwLowDateTime=0xf74f1ca0, ftLastWriteTime.dwHighDateTime=0x1d6eb7e, nFileSizeHigh=0x0, nFileSizeLow=0x340, dwReserved0=0x0, dwReserved1=0x0, cFileName="OfficeMUISet.xml", cAlternateFileName="OFFICE~1.XML")) returned 1 [0121.312] FindNextFileW (in: hFindFile=0x381cc0, lpFindFileData=0x31e56c | out: lpFindFileData=0x31e56c*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xc8b16200, ftCreationTime.dwHighDateTime=0x1cac190, ftLastAccessTime.dwLowDateTime=0xc8b16200, ftLastAccessTime.dwHighDateTime=0x1cac190, ftLastWriteTime.dwLowDateTime=0xe8728670, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x2ed80, dwReserved0=0x0, dwReserved1=0x0, cFileName="osetupui.dll", cAlternateFileName="")) returned 1 [0121.312] FindNextFileW (in: hFindFile=0x381cc0, lpFindFileData=0x31e56c | out: lpFindFileData=0x31e56c*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x77cbb000, ftCreationTime.dwHighDateTime=0x1cac57a, ftLastAccessTime.dwLowDateTime=0x77cbb000, ftLastAccessTime.dwHighDateTime=0x1cac57a, ftLastWriteTime.dwLowDateTime=0xe8728670, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x6a3b, dwReserved0=0x0, dwReserved1=0x0, cFileName="pss10r.chm", cAlternateFileName="")) returned 1 [0121.312] FindNextFileW (in: hFindFile=0x381cc0, lpFindFileData=0x31e56c | out: lpFindFileData=0x31e56c*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x7cab9f00, ftCreationTime.dwHighDateTime=0x1cac8ad, ftLastAccessTime.dwLowDateTime=0x7cab9f00, ftLastAccessTime.dwHighDateTime=0x1cac8ad, ftLastWriteTime.dwLowDateTime=0xe8728670, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x10676, dwReserved0=0x0, dwReserved1=0x0, cFileName="setup.chm", cAlternateFileName="")) returned 1 [0121.312] FindNextFileW (in: hFindFile=0x381cc0, lpFindFileData=0x31e56c | out: lpFindFileData=0x31e56c*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x42c75f00, ftCreationTime.dwHighDateTime=0x1cad04a, ftLastAccessTime.dwLowDateTime=0x42c75f00, ftLastAccessTime.dwHighDateTime=0x1cad04a, ftLastWriteTime.dwLowDateTime=0xf7517e00, ftLastWriteTime.dwHighDateTime=0x1d6eb7e, nFileSizeHigh=0x0, nFileSizeLow=0x2490, dwReserved0=0x0, dwReserved1=0x0, cFileName="Setup.xml", cAlternateFileName="")) returned 1 [0121.312] FindNextFileW (in: hFindFile=0x381cc0, lpFindFileData=0x31e56c | out: lpFindFileData=0x31e56c*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x131a1c00, ftCreationTime.dwHighDateTime=0x1cacdea, ftLastAccessTime.dwLowDateTime=0x131a1c00, ftLastAccessTime.dwHighDateTime=0x1cacdea, ftLastWriteTime.dwLowDateTime=0xe84c60d0, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0xe00, dwReserved0=0x0, dwReserved1=0x0, cFileName="ShellUI.MST", cAlternateFileName="")) returned 1 [0121.312] FindNextFileW (in: hFindFile=0x381cc0, lpFindFileData=0x31e56c | out: lpFindFileData=0x31e56c*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x131a1c00, ftCreationTime.dwHighDateTime=0x1cacdea, ftLastAccessTime.dwLowDateTime=0x131a1c00, ftLastAccessTime.dwHighDateTime=0x1cacdea, ftLastWriteTime.dwLowDateTime=0xe84c60d0, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0xe00, dwReserved0=0x0, dwReserved1=0x0, cFileName="ShellUI.MST", cAlternateFileName="")) returned 0 [0121.312] CreateFileW (lpFileName="C:\\MSOCache\\All Users\\{90140000-0115-0409-1000-0000000FF1CE}-C\\branding.xml" (normalized: "c:\\msocache\\all users\\{90140000-0115-0409-1000-0000000ff1ce}-c\\branding.xml"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x178 [0121.312] GetFileType (hFile=0x178) returned 0x1 [0121.312] GetFileType (hFile=0x178) returned 0x1 [0121.312] GetFileSize (in: hFile=0x178, lpFileSizeHigh=0x31e7f8 | out: lpFileSizeHigh=0x31e7f8*=0x0) returned 0x91980 [0121.312] ReadFile (in: hFile=0x178, lpBuffer=0x36194b0, nNumberOfBytesToRead=0x91980, lpNumberOfBytesRead=0x31e7a4, lpOverlapped=0x0 | out: lpBuffer=0x36194b0*, lpNumberOfBytesRead=0x31e7a4*=0x91980, lpOverlapped=0x0) returned 1 [0121.341] CreateFileW (lpFileName="C:\\MSOCache\\All Users\\{90140000-0115-0409-1000-0000000FF1CE}-C\\branding.xml" (normalized: "c:\\msocache\\all users\\{90140000-0115-0409-1000-0000000ff1ce}-c\\branding.xml"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x178 [0121.346] GetFileType (hFile=0x178) returned 0x1 [0121.346] GetFileType (hFile=0x178) returned 0x1 [0121.346] WriteFile (in: hFile=0x178, lpBuffer=0x36aae50*, nNumberOfBytesToWrite=0x91980, lpNumberOfBytesWritten=0x31e798, lpOverlapped=0x0 | out: lpBuffer=0x36aae50*, lpNumberOfBytesWritten=0x31e798*=0x91980, lpOverlapped=0x0) returned 1 [0121.355] MoveFileW (lpExistingFileName="C:\\MSOCache\\All Users\\{90140000-0115-0409-1000-0000000FF1CE}-C\\branding.xml" (normalized: "c:\\msocache\\all users\\{90140000-0115-0409-1000-0000000ff1ce}-c\\branding.xml"), lpNewFileName="C:\\MSOCache\\All Users\\{90140000-0115-0409-1000-0000000FF1CE}-C\\branding.xml.[neftet@tutanota.com].boom" (normalized: "c:\\msocache\\all users\\{90140000-0115-0409-1000-0000000ff1ce}-c\\branding.xml.[neftet@tutanota.com].boom")) returned 1 [0121.355] CreateFileW (lpFileName="C:\\MSOCache\\All Users\\{90140000-0115-0409-1000-0000000FF1CE}-C\\OfficeMUI.xml" (normalized: "c:\\msocache\\all users\\{90140000-0115-0409-1000-0000000ff1ce}-c\\officemui.xml"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x178 [0121.356] GetFileType (hFile=0x178) returned 0x1 [0121.356] GetFileType (hFile=0x178) returned 0x1 [0121.356] GetFileSize (in: hFile=0x178, lpFileSizeHigh=0x31e7f8 | out: lpFileSizeHigh=0x31e7f8*=0x0) returned 0x15c0 [0121.356] ReadFile (in: hFile=0x178, lpBuffer=0x2a13ed0, nNumberOfBytesToRead=0x15c0, lpNumberOfBytesRead=0x31e7a4, lpOverlapped=0x0 | out: lpBuffer=0x2a13ed0*, lpNumberOfBytesRead=0x31e7a4*=0x15c0, lpOverlapped=0x0) returned 1 [0121.357] CreateFileW (lpFileName="C:\\MSOCache\\All Users\\{90140000-0115-0409-1000-0000000FF1CE}-C\\OfficeMUI.xml" (normalized: "c:\\msocache\\all users\\{90140000-0115-0409-1000-0000000ff1ce}-c\\officemui.xml"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x178 [0121.357] GetFileType (hFile=0x178) returned 0x1 [0121.357] GetFileType (hFile=0x178) returned 0x1 [0121.357] WriteFile (in: hFile=0x178, lpBuffer=0x2a158a4*, nNumberOfBytesToWrite=0x15c0, lpNumberOfBytesWritten=0x31e798, lpOverlapped=0x0 | out: lpBuffer=0x2a158a4*, lpNumberOfBytesWritten=0x31e798*=0x15c0, lpOverlapped=0x0) returned 1 [0121.358] MoveFileW (lpExistingFileName="C:\\MSOCache\\All Users\\{90140000-0115-0409-1000-0000000FF1CE}-C\\OfficeMUI.xml" (normalized: "c:\\msocache\\all users\\{90140000-0115-0409-1000-0000000ff1ce}-c\\officemui.xml"), lpNewFileName="C:\\MSOCache\\All Users\\{90140000-0115-0409-1000-0000000FF1CE}-C\\OfficeMUI.xml.[neftet@tutanota.com].boom" (normalized: "c:\\msocache\\all users\\{90140000-0115-0409-1000-0000000ff1ce}-c\\officemui.xml.[neftet@tutanota.com].boom")) returned 1 [0121.359] CreateFileW (lpFileName="C:\\MSOCache\\All Users\\{90140000-0115-0409-1000-0000000FF1CE}-C\\OfficeMUISet.xml" (normalized: "c:\\msocache\\all users\\{90140000-0115-0409-1000-0000000ff1ce}-c\\officemuiset.xml"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x178 [0121.359] GetFileType (hFile=0x178) returned 0x1 [0121.359] GetFileType (hFile=0x178) returned 0x1 [0121.359] GetFileSize (in: hFile=0x178, lpFileSizeHigh=0x31e7f8 | out: lpFileSizeHigh=0x31e7f8*=0x0) returned 0x340 [0121.359] ReadFile (in: hFile=0x178, lpBuffer=0x2a18838, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x31e7a4, lpOverlapped=0x0 | out: lpBuffer=0x2a18838*, lpNumberOfBytesRead=0x31e7a4*=0x340, lpOverlapped=0x0) returned 1 [0121.360] CreateFileW (lpFileName="C:\\MSOCache\\All Users\\{90140000-0115-0409-1000-0000000FF1CE}-C\\OfficeMUISet.xml" (normalized: "c:\\msocache\\all users\\{90140000-0115-0409-1000-0000000ff1ce}-c\\officemuiset.xml"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x178 [0121.361] GetFileType (hFile=0x178) returned 0x1 [0121.361] GetFileType (hFile=0x178) returned 0x1 [0121.361] WriteFile (in: hFile=0x178, lpBuffer=0x2a1b0e8*, nNumberOfBytesToWrite=0x340, lpNumberOfBytesWritten=0x31e76c, lpOverlapped=0x0 | out: lpBuffer=0x2a1b0e8*, lpNumberOfBytesWritten=0x31e76c*=0x340, lpOverlapped=0x0) returned 1 [0121.362] MoveFileW (lpExistingFileName="C:\\MSOCache\\All Users\\{90140000-0115-0409-1000-0000000FF1CE}-C\\OfficeMUISet.xml" (normalized: "c:\\msocache\\all users\\{90140000-0115-0409-1000-0000000ff1ce}-c\\officemuiset.xml"), lpNewFileName="C:\\MSOCache\\All Users\\{90140000-0115-0409-1000-0000000FF1CE}-C\\OfficeMUISet.xml.[neftet@tutanota.com].boom" (normalized: "c:\\msocache\\all users\\{90140000-0115-0409-1000-0000000ff1ce}-c\\officemuiset.xml.[neftet@tutanota.com].boom")) returned 1 [0121.362] CreateFileW (lpFileName="C:\\MSOCache\\All Users\\{90140000-0115-0409-1000-0000000FF1CE}-C\\Setup.xml" (normalized: "c:\\msocache\\all users\\{90140000-0115-0409-1000-0000000ff1ce}-c\\setup.xml"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x178 [0121.362] GetFileType (hFile=0x178) returned 0x1 [0121.362] GetFileType (hFile=0x178) returned 0x1 [0121.362] GetFileSize (in: hFile=0x178, lpFileSizeHigh=0x31e7f8 | out: lpFileSizeHigh=0x31e7f8*=0x0) returned 0x2490 [0121.363] ReadFile (in: hFile=0x178, lpBuffer=0x2a1c654, nNumberOfBytesToRead=0x2490, lpNumberOfBytesRead=0x31e7a4, lpOverlapped=0x0 | out: lpBuffer=0x2a1c654*, lpNumberOfBytesRead=0x31e7a4*=0x2490, lpOverlapped=0x0) returned 1 [0121.364] CreateFileW (lpFileName="C:\\MSOCache\\All Users\\{90140000-0115-0409-1000-0000000FF1CE}-C\\Setup.xml" (normalized: "c:\\msocache\\all users\\{90140000-0115-0409-1000-0000000ff1ce}-c\\setup.xml"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x178 [0121.364] GetFileType (hFile=0x178) returned 0x1 [0121.364] GetFileType (hFile=0x178) returned 0x1 [0121.364] WriteFile (in: hFile=0x178, lpBuffer=0x2a1eef8*, nNumberOfBytesToWrite=0x2490, lpNumberOfBytesWritten=0x31e798, lpOverlapped=0x0 | out: lpBuffer=0x2a1eef8*, lpNumberOfBytesWritten=0x31e798*=0x2490, lpOverlapped=0x0) returned 1 [0121.365] MoveFileW (lpExistingFileName="C:\\MSOCache\\All Users\\{90140000-0115-0409-1000-0000000FF1CE}-C\\Setup.xml" (normalized: "c:\\msocache\\all users\\{90140000-0115-0409-1000-0000000ff1ce}-c\\setup.xml"), lpNewFileName="C:\\MSOCache\\All Users\\{90140000-0115-0409-1000-0000000FF1CE}-C\\Setup.xml.[neftet@tutanota.com].boom" (normalized: "c:\\msocache\\all users\\{90140000-0115-0409-1000-0000000ff1ce}-c\\setup.xml.[neftet@tutanota.com].boom")) returned 1 [0121.367] FindNextFileW (in: hFindFile=0x381cc0, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe8691090, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xe8691090, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xe8691090, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0121.367] FindNextFileW (in: hFindFile=0x381cc0, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x6a35700, ftCreationTime.dwHighDateTime=0x1cac9d7, ftLastAccessTime.dwLowDateTime=0x6a35700, ftLastAccessTime.dwHighDateTime=0x1cac9d7, ftLastWriteTime.dwLowDateTime=0xe8691090, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x1a588, dwReserved0=0x0, dwReserved1=0x0, cFileName="dwintl20.dll", cAlternateFileName="")) returned 1 [0121.367] FindNextFileW (in: hFindFile=0x381cc0, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0121.367] FindNextFileW (in: hFindFile=0x381cc0, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe8691090, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xe8691090, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xe8691090, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0121.367] FindNextFileW (in: hFindFile=0x381cc0, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x6a35700, ftCreationTime.dwHighDateTime=0x1cac9d7, ftLastAccessTime.dwLowDateTime=0x6a35700, ftLastAccessTime.dwHighDateTime=0x1cac9d7, ftLastWriteTime.dwLowDateTime=0xe8691090, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x1a588, dwReserved0=0x0, dwReserved1=0x0, cFileName="dwintl20.dll", cAlternateFileName="")) returned 1 [0121.367] FindNextFileW (in: hFindFile=0x381cc0, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x6a35700, ftCreationTime.dwHighDateTime=0x1cac9d7, ftLastAccessTime.dwLowDateTime=0x6a35700, ftLastAccessTime.dwHighDateTime=0x1cac9d7, ftLastWriteTime.dwLowDateTime=0xe8691090, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x1a588, dwReserved0=0x0, dwReserved1=0x0, cFileName="dwintl20.dll", cAlternateFileName="")) returned 0 [0121.367] FindNextFileW (in: hFindFile=0x381cc0, lpFindFileData=0x31e56c | out: lpFindFileData=0x31e56c*(dwFileAttributes=0x2011, ftCreationTime.dwLowDateTime=0xfa13c510, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xfc112b50, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xfc112b50, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0121.367] FindNextFileW (in: hFindFile=0x381cc0, lpFindFileData=0x31e56c | out: lpFindFileData=0x31e56c*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xfa2b92d0, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xfc0c6890, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xfc0c6890, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Access.en-us", cAlternateFileName="ACCESS~1.EN-")) returned 1 [0121.367] FindNextFileW (in: hFindFile=0x381cc0, lpFindFileData=0x31e56c | out: lpFindFileData=0x31e56c*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x3f33d800, ftCreationTime.dwHighDateTime=0x1cad04a, ftLastAccessTime.dwLowDateTime=0x3f33d800, ftLastAccessTime.dwHighDateTime=0x1cad04a, ftLastWriteTime.dwLowDateTime=0xfa160f00, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0xd4200, dwReserved0=0x0, dwReserved1=0x0, cFileName="AccessMUISet.msi", cAlternateFileName="ACCESS~1.MSI")) returned 1 [0121.367] FindNextFileW (in: hFindFile=0x381cc0, lpFindFileData=0x31e56c | out: lpFindFileData=0x31e56c*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x4529b900, ftCreationTime.dwHighDateTime=0x1cad04a, ftLastAccessTime.dwLowDateTime=0x4529b900, ftLastAccessTime.dwHighDateTime=0x1cad04a, ftLastWriteTime.dwLowDateTime=0xf75640c0, ftLastWriteTime.dwHighDateTime=0x1d6eb7e, nFileSizeHigh=0x0, nFileSizeLow=0x340, dwReserved0=0x0, dwReserved1=0x0, cFileName="AccessMUISet.xml", cAlternateFileName="ACCESS~1.XML")) returned 1 [0121.367] FindNextFileW (in: hFindFile=0x381cc0, lpFindFileData=0x31e56c | out: lpFindFileData=0x31e56c*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x43f88c00, ftCreationTime.dwHighDateTime=0x1cad04a, ftLastAccessTime.dwLowDateTime=0x43f88c00, ftLastAccessTime.dwHighDateTime=0x1cad04a, ftLastWriteTime.dwLowDateTime=0xf758a220, ftLastWriteTime.dwHighDateTime=0x1d6eb7e, nFileSizeHigh=0x0, nFileSizeLow=0xa50, dwReserved0=0x0, dwReserved1=0x0, cFileName="Setup.xml", cAlternateFileName="")) returned 1 [0121.367] FindNextFileW (in: hFindFile=0x381cc0, lpFindFileData=0x31e56c | out: lpFindFileData=0x31e56c*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0121.367] FindNextFileW (in: hFindFile=0x381cc0, lpFindFileData=0x31e56c | out: lpFindFileData=0x31e56c*(dwFileAttributes=0x2011, ftCreationTime.dwLowDateTime=0xfa13c510, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xfc112b50, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xfc112b50, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0121.367] FindNextFileW (in: hFindFile=0x381cc0, lpFindFileData=0x31e56c | out: lpFindFileData=0x31e56c*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xfa2b92d0, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xfc0c6890, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xfc0c6890, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Access.en-us", cAlternateFileName="ACCESS~1.EN-")) returned 1 [0121.368] FindNextFileW (in: hFindFile=0x381cc0, lpFindFileData=0x31e56c | out: lpFindFileData=0x31e56c*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x3f33d800, ftCreationTime.dwHighDateTime=0x1cad04a, ftLastAccessTime.dwLowDateTime=0x3f33d800, ftLastAccessTime.dwHighDateTime=0x1cad04a, ftLastWriteTime.dwLowDateTime=0xfa160f00, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0xd4200, dwReserved0=0x0, dwReserved1=0x0, cFileName="AccessMUISet.msi", cAlternateFileName="ACCESS~1.MSI")) returned 1 [0121.368] FindNextFileW (in: hFindFile=0x381cc0, lpFindFileData=0x31e56c | out: lpFindFileData=0x31e56c*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x4529b900, ftCreationTime.dwHighDateTime=0x1cad04a, ftLastAccessTime.dwLowDateTime=0x4529b900, ftLastAccessTime.dwHighDateTime=0x1cad04a, ftLastWriteTime.dwLowDateTime=0xf75640c0, ftLastWriteTime.dwHighDateTime=0x1d6eb7e, nFileSizeHigh=0x0, nFileSizeLow=0x340, dwReserved0=0x0, dwReserved1=0x0, cFileName="AccessMUISet.xml", cAlternateFileName="ACCESS~1.XML")) returned 1 [0121.368] FindNextFileW (in: hFindFile=0x381cc0, lpFindFileData=0x31e56c | out: lpFindFileData=0x31e56c*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x43f88c00, ftCreationTime.dwHighDateTime=0x1cad04a, ftLastAccessTime.dwLowDateTime=0x43f88c00, ftLastAccessTime.dwHighDateTime=0x1cad04a, ftLastWriteTime.dwLowDateTime=0xf758a220, ftLastWriteTime.dwHighDateTime=0x1d6eb7e, nFileSizeHigh=0x0, nFileSizeLow=0xa50, dwReserved0=0x0, dwReserved1=0x0, cFileName="Setup.xml", cAlternateFileName="")) returned 1 [0121.368] FindNextFileW (in: hFindFile=0x381cc0, lpFindFileData=0x31e56c | out: lpFindFileData=0x31e56c*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x43f88c00, ftCreationTime.dwHighDateTime=0x1cad04a, ftLastAccessTime.dwLowDateTime=0x43f88c00, ftLastAccessTime.dwHighDateTime=0x1cad04a, ftLastWriteTime.dwLowDateTime=0xf758a220, ftLastWriteTime.dwHighDateTime=0x1d6eb7e, nFileSizeHigh=0x0, nFileSizeLow=0xa50, dwReserved0=0x0, dwReserved1=0x0, cFileName="Setup.xml", cAlternateFileName="")) returned 0 [0121.368] CreateFileW (lpFileName="C:\\MSOCache\\All Users\\{90140000-0117-0409-1000-0000000FF1CE}-C\\AccessMUISet.xml" (normalized: "c:\\msocache\\all users\\{90140000-0117-0409-1000-0000000ff1ce}-c\\accessmuiset.xml"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x178 [0121.368] GetFileType (hFile=0x178) returned 0x1 [0121.368] GetFileType (hFile=0x178) returned 0x1 [0121.368] GetFileSize (in: hFile=0x178, lpFileSizeHigh=0x31e7f8 | out: lpFileSizeHigh=0x31e7f8*=0x0) returned 0x340 [0121.368] ReadFile (in: hFile=0x178, lpBuffer=0x2a26918, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x31e7a4, lpOverlapped=0x0 | out: lpBuffer=0x2a26918*, lpNumberOfBytesRead=0x31e7a4*=0x340, lpOverlapped=0x0) returned 1 [0121.369] CreateFileW (lpFileName="C:\\MSOCache\\All Users\\{90140000-0117-0409-1000-0000000FF1CE}-C\\AccessMUISet.xml" (normalized: "c:\\msocache\\all users\\{90140000-0117-0409-1000-0000000ff1ce}-c\\accessmuiset.xml"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x178 [0121.370] GetFileType (hFile=0x178) returned 0x1 [0121.370] GetFileType (hFile=0x178) returned 0x1 [0121.371] MoveFileW (lpExistingFileName="C:\\MSOCache\\All Users\\{90140000-0117-0409-1000-0000000FF1CE}-C\\AccessMUISet.xml" (normalized: "c:\\msocache\\all users\\{90140000-0117-0409-1000-0000000ff1ce}-c\\accessmuiset.xml"), lpNewFileName="C:\\MSOCache\\All Users\\{90140000-0117-0409-1000-0000000FF1CE}-C\\AccessMUISet.xml.[neftet@tutanota.com].boom" (normalized: "c:\\msocache\\all users\\{90140000-0117-0409-1000-0000000ff1ce}-c\\accessmuiset.xml.[neftet@tutanota.com].boom")) returned 1 [0121.371] CreateFileW (lpFileName="C:\\MSOCache\\All Users\\{90140000-0117-0409-1000-0000000FF1CE}-C\\Setup.xml" (normalized: "c:\\msocache\\all users\\{90140000-0117-0409-1000-0000000ff1ce}-c\\setup.xml"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x178 [0121.372] GetFileType (hFile=0x178) returned 0x1 [0121.372] GetFileType (hFile=0x178) returned 0x1 [0121.372] GetFileSize (in: hFile=0x178, lpFileSizeHigh=0x31e7f8 | out: lpFileSizeHigh=0x31e7f8*=0x0) returned 0xa50 [0121.372] ReadFile (in: hFile=0x178, lpBuffer=0x2a2b148, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x31e7a4, lpOverlapped=0x0 | out: lpBuffer=0x2a2b148*, lpNumberOfBytesRead=0x31e7a4*=0xa50, lpOverlapped=0x0) returned 1 [0121.373] CreateFileW (lpFileName="C:\\MSOCache\\All Users\\{90140000-0117-0409-1000-0000000FF1CE}-C\\Setup.xml" (normalized: "c:\\msocache\\all users\\{90140000-0117-0409-1000-0000000ff1ce}-c\\setup.xml"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x178 [0121.373] GetFileType (hFile=0x178) returned 0x1 [0121.373] GetFileType (hFile=0x178) returned 0x1 [0121.374] WriteFile (in: hFile=0x178, lpBuffer=0x2a2e0ec*, nNumberOfBytesToWrite=0xa50, lpNumberOfBytesWritten=0x31e76c, lpOverlapped=0x0 | out: lpBuffer=0x2a2e0ec*, lpNumberOfBytesWritten=0x31e76c*=0xa50, lpOverlapped=0x0) returned 1 [0121.374] MoveFileW (lpExistingFileName="C:\\MSOCache\\All Users\\{90140000-0117-0409-1000-0000000FF1CE}-C\\Setup.xml" (normalized: "c:\\msocache\\all users\\{90140000-0117-0409-1000-0000000ff1ce}-c\\setup.xml"), lpNewFileName="C:\\MSOCache\\All Users\\{90140000-0117-0409-1000-0000000FF1CE}-C\\Setup.xml.[neftet@tutanota.com].boom" (normalized: "c:\\msocache\\all users\\{90140000-0117-0409-1000-0000000ff1ce}-c\\setup.xml.[neftet@tutanota.com].boom")) returned 1 [0121.375] FindNextFileW (in: hFindFile=0x381cc0, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xfa2b92d0, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xfc0c6890, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xfc0c6890, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0121.375] FindNextFileW (in: hFindFile=0x381cc0, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x3e02ab00, ftCreationTime.dwHighDateTime=0x1cad04a, ftLastAccessTime.dwLowDateTime=0x3e02ab00, ftLastAccessTime.dwHighDateTime=0x1cad04a, ftLastWriteTime.dwLowDateTime=0xfa623330, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x266a00, dwReserved0=0x0, dwReserved1=0x0, cFileName="AccessMUI.msi", cAlternateFileName="ACCESS~1.MSI")) returned 1 [0121.375] FindNextFileW (in: hFindFile=0x381cc0, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x4529b900, ftCreationTime.dwHighDateTime=0x1cad04a, ftLastAccessTime.dwLowDateTime=0x4529b900, ftLastAccessTime.dwHighDateTime=0x1cad04a, ftLastWriteTime.dwLowDateTime=0xf75d64e0, ftLastWriteTime.dwHighDateTime=0x1d6eb7e, nFileSizeHigh=0x0, nFileSizeLow=0x550, dwReserved0=0x0, dwReserved1=0x0, cFileName="AccessMUI.xml", cAlternateFileName="ACCESS~1.XML")) returned 1 [0121.375] FindNextFileW (in: hFindFile=0x381cc0, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x3216e900, ftCreationTime.dwHighDateTime=0x1cad04a, ftLastAccessTime.dwLowDateTime=0x3216e900, ftLastAccessTime.dwHighDateTime=0x1cad04a, ftLastWriteTime.dwLowDateTime=0xfa64a430, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x1ab7e94, dwReserved0=0x0, dwReserved1=0x0, cFileName="AccLR.cab", cAlternateFileName="")) returned 1 [0121.375] FindNextFileW (in: hFindFile=0x381cc0, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x11e8ef00, ftCreationTime.dwHighDateTime=0x1cacdea, ftLastAccessTime.dwLowDateTime=0x11e8ef00, ftLastAccessTime.dwHighDateTime=0x1cacdea, ftLastWriteTime.dwLowDateTime=0xf7694bc0, ftLastWriteTime.dwHighDateTime=0x1d6eb7e, nFileSizeHigh=0x0, nFileSizeLow=0x91980, dwReserved0=0x0, dwReserved1=0x0, cFileName="branding.xml", cAlternateFileName="")) returned 1 [0121.375] FindNextFileW (in: hFindFile=0x381cc0, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0121.375] FindNextFileW (in: hFindFile=0x381cc0, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xfa2b92d0, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xfc0c6890, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xfc0c6890, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0121.375] FindNextFileW (in: hFindFile=0x381cc0, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x3e02ab00, ftCreationTime.dwHighDateTime=0x1cad04a, ftLastAccessTime.dwLowDateTime=0x3e02ab00, ftLastAccessTime.dwHighDateTime=0x1cad04a, ftLastWriteTime.dwLowDateTime=0xfa623330, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x266a00, dwReserved0=0x0, dwReserved1=0x0, cFileName="AccessMUI.msi", cAlternateFileName="ACCESS~1.MSI")) returned 1 [0121.376] FindNextFileW (in: hFindFile=0x381cc0, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x4529b900, ftCreationTime.dwHighDateTime=0x1cad04a, ftLastAccessTime.dwLowDateTime=0x4529b900, ftLastAccessTime.dwHighDateTime=0x1cad04a, ftLastWriteTime.dwLowDateTime=0xf75d64e0, ftLastWriteTime.dwHighDateTime=0x1d6eb7e, nFileSizeHigh=0x0, nFileSizeLow=0x550, dwReserved0=0x0, dwReserved1=0x0, cFileName="AccessMUI.xml", cAlternateFileName="ACCESS~1.XML")) returned 1 [0121.376] FindNextFileW (in: hFindFile=0x381cc0, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x3216e900, ftCreationTime.dwHighDateTime=0x1cad04a, ftLastAccessTime.dwLowDateTime=0x3216e900, ftLastAccessTime.dwHighDateTime=0x1cad04a, ftLastWriteTime.dwLowDateTime=0xfa64a430, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x1ab7e94, dwReserved0=0x0, dwReserved1=0x0, cFileName="AccLR.cab", cAlternateFileName="")) returned 1 [0121.376] FindNextFileW (in: hFindFile=0x381cc0, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x11e8ef00, ftCreationTime.dwHighDateTime=0x1cacdea, ftLastAccessTime.dwLowDateTime=0x11e8ef00, ftLastAccessTime.dwHighDateTime=0x1cacdea, ftLastWriteTime.dwLowDateTime=0xf7694bc0, ftLastWriteTime.dwHighDateTime=0x1d6eb7e, nFileSizeHigh=0x0, nFileSizeLow=0x91980, dwReserved0=0x0, dwReserved1=0x0, cFileName="branding.xml", cAlternateFileName="")) returned 1 [0121.376] FindNextFileW (in: hFindFile=0x381cc0, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x11e8ef00, ftCreationTime.dwHighDateTime=0x1cacdea, ftLastAccessTime.dwLowDateTime=0x11e8ef00, ftLastAccessTime.dwHighDateTime=0x1cacdea, ftLastWriteTime.dwLowDateTime=0xf7694bc0, ftLastWriteTime.dwHighDateTime=0x1d6eb7e, nFileSizeHigh=0x0, nFileSizeLow=0x91980, dwReserved0=0x0, dwReserved1=0x0, cFileName="branding.xml", cAlternateFileName="")) returned 0 [0121.376] CreateFileW (lpFileName="C:\\MSOCache\\All Users\\{90140000-0117-0409-1000-0000000FF1CE}-C\\Access.en-us\\AccessMUI.xml" (normalized: "c:\\msocache\\all users\\{90140000-0117-0409-1000-0000000ff1ce}-c\\access.en-us\\accessmui.xml"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x178 [0121.376] GetFileType (hFile=0x178) returned 0x1 [0121.376] GetFileType (hFile=0x178) returned 0x1 [0121.376] GetFileSize (in: hFile=0x178, lpFileSizeHigh=0x31e780 | out: lpFileSizeHigh=0x31e780*=0x0) returned 0x550 [0121.376] ReadFile (in: hFile=0x178, lpBuffer=0x2a321d4, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x31e72c, lpOverlapped=0x0 | out: lpBuffer=0x2a321d4*, lpNumberOfBytesRead=0x31e72c*=0x550, lpOverlapped=0x0) returned 1 [0121.377] CreateFileW (lpFileName="C:\\MSOCache\\All Users\\{90140000-0117-0409-1000-0000000FF1CE}-C\\Access.en-us\\AccessMUI.xml" (normalized: "c:\\msocache\\all users\\{90140000-0117-0409-1000-0000000ff1ce}-c\\access.en-us\\accessmui.xml"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x178 [0121.378] GetFileType (hFile=0x178) returned 0x1 [0121.378] GetFileType (hFile=0x178) returned 0x1 [0121.378] MoveFileW (lpExistingFileName="C:\\MSOCache\\All Users\\{90140000-0117-0409-1000-0000000FF1CE}-C\\Access.en-us\\AccessMUI.xml" (normalized: "c:\\msocache\\all users\\{90140000-0117-0409-1000-0000000ff1ce}-c\\access.en-us\\accessmui.xml"), lpNewFileName="C:\\MSOCache\\All Users\\{90140000-0117-0409-1000-0000000FF1CE}-C\\Access.en-us\\AccessMUI.xml.[neftet@tutanota.com].boom" (normalized: "c:\\msocache\\all users\\{90140000-0117-0409-1000-0000000ff1ce}-c\\access.en-us\\accessmui.xml.[neftet@tutanota.com].boom")) returned 1 [0121.379] CreateFileW (lpFileName="C:\\MSOCache\\All Users\\{90140000-0117-0409-1000-0000000FF1CE}-C\\Access.en-us\\branding.xml" (normalized: "c:\\msocache\\all users\\{90140000-0117-0409-1000-0000000ff1ce}-c\\access.en-us\\branding.xml"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x178 [0121.379] GetFileType (hFile=0x178) returned 0x1 [0121.379] GetFileType (hFile=0x178) returned 0x1 [0121.379] GetFileSize (in: hFile=0x178, lpFileSizeHigh=0x31e780 | out: lpFileSizeHigh=0x31e780*=0x0) returned 0x91980 [0121.379] ReadFile (in: hFile=0x178, lpBuffer=0x373c7f0, nNumberOfBytesToRead=0x91980, lpNumberOfBytesRead=0x31e72c, lpOverlapped=0x0 | out: lpBuffer=0x373c7f0*, lpNumberOfBytesRead=0x31e72c*=0x91980, lpOverlapped=0x0) returned 1 [0121.408] CreateFileW (lpFileName="C:\\MSOCache\\All Users\\{90140000-0117-0409-1000-0000000FF1CE}-C\\Access.en-us\\branding.xml" (normalized: "c:\\msocache\\all users\\{90140000-0117-0409-1000-0000000ff1ce}-c\\access.en-us\\branding.xml"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x178 [0121.413] GetFileType (hFile=0x178) returned 0x1 [0121.413] GetFileType (hFile=0x178) returned 0x1 [0121.413] WriteFile (in: hFile=0x178, lpBuffer=0x37ce190*, nNumberOfBytesToWrite=0x91980, lpNumberOfBytesWritten=0x31e720, lpOverlapped=0x0 | out: lpBuffer=0x37ce190*, lpNumberOfBytesWritten=0x31e720*=0x91980, lpOverlapped=0x0) returned 1 [0121.422] MoveFileW (lpExistingFileName="C:\\MSOCache\\All Users\\{90140000-0117-0409-1000-0000000FF1CE}-C\\Access.en-us\\branding.xml" (normalized: "c:\\msocache\\all users\\{90140000-0117-0409-1000-0000000ff1ce}-c\\access.en-us\\branding.xml"), lpNewFileName="C:\\MSOCache\\All Users\\{90140000-0117-0409-1000-0000000FF1CE}-C\\Access.en-us\\branding.xml.[neftet@tutanota.com].boom" (normalized: "c:\\msocache\\all users\\{90140000-0117-0409-1000-0000000ff1ce}-c\\access.en-us\\branding.xml.[neftet@tutanota.com].boom")) returned 1 [0121.423] FindNextFileW (in: hFindFile=0x381cc0, lpFindFileData=0x31e56c | out: lpFindFileData=0x31e56c*(dwFileAttributes=0x2011, ftCreationTime.dwLowDateTime=0xfe09ced0, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0x18179b90, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x18179b90, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0121.423] FindNextFileW (in: hFindFile=0x381cc0, lpFindFileData=0x31e56c | out: lpFindFileData=0x31e56c*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x34ae1a00, ftCreationTime.dwHighDateTime=0x1cad01b, ftLastAccessTime.dwLowDateTime=0x34ae1a00, ftLastAccessTime.dwHighDateTime=0x1cad01b, ftLastWriteTime.dwLowDateTime=0xfe0c2860, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x1e6600, dwReserved0=0x0, dwReserved1=0x0, cFileName="Office32WW.msi", cAlternateFileName="OFFICE~1.MSI")) returned 1 [0121.423] FindNextFileW (in: hFindFile=0x381cc0, lpFindFileData=0x31e56c | out: lpFindFileData=0x31e56c*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x940c2a00, ftCreationTime.dwHighDateTime=0x1cad01b, ftLastAccessTime.dwLowDateTime=0x940c2a00, ftLastAccessTime.dwHighDateTime=0x1cad01b, ftLastWriteTime.dwLowDateTime=0xf7706fe0, ftLastWriteTime.dwHighDateTime=0x1d6eb7e, nFileSizeHigh=0x0, nFileSizeLow=0x10c0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Office32WW.xml", cAlternateFileName="OFFICE~1.XML")) returned 1 [0121.423] FindNextFileW (in: hFindFile=0x381cc0, lpFindFileData=0x31e56c | out: lpFindFileData=0x31e56c*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xf885a000, ftCreationTime.dwHighDateTime=0x1cac4d7, ftLastAccessTime.dwLowDateTime=0xf885a000, ftLastAccessTime.dwHighDateTime=0x1cac4d7, ftLastWriteTime.dwLowDateTime=0x17c42c30, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x2a968, dwReserved0=0x0, dwReserved1=0x0, cFileName="ose.exe", cAlternateFileName="")) returned 1 [0121.423] FindNextFileW (in: hFindFile=0x381cc0, lpFindFileData=0x31e56c | out: lpFindFileData=0x31e56c*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xbd900f00, ftCreationTime.dwHighDateTime=0x1cac15b, ftLastAccessTime.dwLowDateTime=0xbd900f00, ftLastAccessTime.dwHighDateTime=0x1cac15b, ftLastWriteTime.dwLowDateTime=0x16854390, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x709768, dwReserved0=0x0, dwReserved1=0x0, cFileName="osetup.dll", cAlternateFileName="")) returned 1 [0121.423] FindNextFileW (in: hFindFile=0x381cc0, lpFindFileData=0x31e56c | out: lpFindFileData=0x31e56c*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x147e5b00, ftCreationTime.dwHighDateTime=0x1cad01b, ftLastAccessTime.dwLowDateTime=0x147e5b00, ftLastAccessTime.dwHighDateTime=0x1cad01b, ftLastWriteTime.dwLowDateTime=0xff654fc0, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x228df5c, dwReserved0=0x0, dwReserved1=0x0, cFileName="OWOW32WW.cab", cAlternateFileName="")) returned 1 [0121.423] FindNextFileW (in: hFindFile=0x381cc0, lpFindFileData=0x31e56c | out: lpFindFileData=0x31e56c*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xe3a02e00, ftCreationTime.dwHighDateTime=0x1cac5f7, ftLastAccessTime.dwLowDateTime=0xe3a02e00, ftLastAccessTime.dwHighDateTime=0x1cac5f7, ftLastWriteTime.dwLowDateTime=0x17e0dbf0, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x165510, dwReserved0=0x0, dwReserved1=0x0, cFileName="PidGenX.dll", cAlternateFileName="")) returned 1 [0121.423] FindNextFileW (in: hFindFile=0x381cc0, lpFindFileData=0x31e56c | out: lpFindFileData=0x31e56c*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xe06a9500, ftCreationTime.dwHighDateTime=0x1cac7e5, ftLastAccessTime.dwLowDateTime=0xe06a9500, ftLastAccessTime.dwHighDateTime=0x1cac7e5, ftLastWriteTime.dwLowDateTime=0x17c42c30, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0xaec3a, dwReserved0=0x0, dwReserved1=0x0, cFileName="pkeyconfig-office.xrm-ms", cAlternateFileName="PKEYCO~1.XRM")) returned 1 [0121.423] FindNextFileW (in: hFindFile=0x381cc0, lpFindFileData=0x31e56c | out: lpFindFileData=0x31e56c*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xbb2e2000, ftCreationTime.dwHighDateTime=0x1cad04a, ftLastAccessTime.dwLowDateTime=0xbb2e2000, ftLastAccessTime.dwHighDateTime=0x1cad04a, ftLastWriteTime.dwLowDateTime=0x170fe40, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x1a41c00, dwReserved0=0x0, dwReserved1=0x0, cFileName="ProPlusrWW.msi", cAlternateFileName="PROPLU~1.MSI")) returned 1 [0121.423] FindNextFileW (in: hFindFile=0x381cc0, lpFindFileData=0x31e56c | out: lpFindFileData=0x31e56c*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xbd907a00, ftCreationTime.dwHighDateTime=0x1cad04a, ftLastAccessTime.dwLowDateTime=0xbd907a00, ftLastAccessTime.dwHighDateTime=0x1cad04a, ftLastWriteTime.dwLowDateTime=0xf77532a0, ftLastWriteTime.dwHighDateTime=0x1d6eb7e, nFileSizeHigh=0x0, nFileSizeLow=0x41e0, dwReserved0=0x0, dwReserved1=0x0, cFileName="ProPlusrWW.xml", cAlternateFileName="PROPLU~1.XML")) returned 1 [0121.423] FindNextFileW (in: hFindFile=0x381cc0, lpFindFileData=0x31e56c | out: lpFindFileData=0x31e56c*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x262b2700, ftCreationTime.dwHighDateTime=0x1cad04a, ftLastAccessTime.dwLowDateTime=0x262b2700, ftLastAccessTime.dwHighDateTime=0x1cad04a, ftLastWriteTime.dwLowDateTime=0x1ffd0c0, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0xa97cbdb, dwReserved0=0x0, dwReserved1=0x0, cFileName="ProPrWW.cab", cAlternateFileName="")) returned 1 [0121.423] FindNextFileW (in: hFindFile=0x381cc0, lpFindFileData=0x31e56c | out: lpFindFileData=0x31e56c*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xbf14900, ftCreationTime.dwHighDateTime=0x1cad04a, ftLastAccessTime.dwLowDateTime=0xbf14900, ftLastAccessTime.dwHighDateTime=0x1cad04a, ftLastWriteTime.dwLowDateTime=0xc96ff40, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0xd49ee31, dwReserved0=0x0, dwReserved1=0x0, cFileName="ProPrWW2.cab", cAlternateFileName="")) returned 1 [0121.423] FindNextFileW (in: hFindFile=0x381cc0, lpFindFileData=0x31e56c | out: lpFindFileData=0x31e56c*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xbec13c00, ftCreationTime.dwHighDateTime=0x1cac15b, ftLastAccessTime.dwLowDateTime=0xbec13c00, ftLastAccessTime.dwHighDateTime=0x1cac15b, ftLastWriteTime.dwLowDateTime=0x1682d290, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x150578, dwReserved0=0x0, dwReserved1=0x0, cFileName="setup.exe", cAlternateFileName="")) returned 1 [0121.423] FindNextFileW (in: hFindFile=0x381cc0, lpFindFileData=0x31e56c | out: lpFindFileData=0x31e56c*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xbd907a00, ftCreationTime.dwHighDateTime=0x1cad04a, ftLastAccessTime.dwLowDateTime=0xbd907a00, ftLastAccessTime.dwHighDateTime=0x1cad04a, ftLastWriteTime.dwLowDateTime=0xf779f560, ftLastWriteTime.dwHighDateTime=0x1d6eb7e, nFileSizeHigh=0x0, nFileSizeLow=0x7980, dwReserved0=0x0, dwReserved1=0x0, cFileName="Setup.xml", cAlternateFileName="")) returned 1 [0121.423] FindNextFileW (in: hFindFile=0x381cc0, lpFindFileData=0x31e56c | out: lpFindFileData=0x31e56c*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0121.424] CreateFileW (lpFileName="C:\\MSOCache\\All Users\\{91140000-0011-0000-1000-0000000FF1CE}-C\\Office32WW.xml" (normalized: "c:\\msocache\\all users\\{91140000-0011-0000-1000-0000000ff1ce}-c\\office32ww.xml"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x178 [0121.424] GetFileType (hFile=0x178) returned 0x1 [0121.424] GetFileType (hFile=0x178) returned 0x1 [0121.424] GetFileSize (in: hFile=0x178, lpFileSizeHigh=0x31e7f8 | out: lpFileSizeHigh=0x31e7f8*=0x0) returned 0x10c0 [0121.424] ReadFile (in: hFile=0x178, lpBuffer=0x2a3be88, nNumberOfBytesToRead=0x10c0, lpNumberOfBytesRead=0x31e7a4, lpOverlapped=0x0 | out: lpBuffer=0x2a3be88*, lpNumberOfBytesRead=0x31e7a4*=0x10c0, lpOverlapped=0x0) returned 1 [0121.425] CreateFileW (lpFileName="C:\\MSOCache\\All Users\\{91140000-0011-0000-1000-0000000FF1CE}-C\\Office32WW.xml" (normalized: "c:\\msocache\\all users\\{91140000-0011-0000-1000-0000000ff1ce}-c\\office32ww.xml"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x178 [0121.425] GetFileType (hFile=0x178) returned 0x1 [0121.425] GetFileType (hFile=0x178) returned 0x1 [0121.425] WriteFile (in: hFile=0x178, lpBuffer=0x2a3d35c*, nNumberOfBytesToWrite=0x10c0, lpNumberOfBytesWritten=0x31e798, lpOverlapped=0x0 | out: lpBuffer=0x2a3d35c*, lpNumberOfBytesWritten=0x31e798*=0x10c0, lpOverlapped=0x0) returned 1 [0121.426] MoveFileW (lpExistingFileName="C:\\MSOCache\\All Users\\{91140000-0011-0000-1000-0000000FF1CE}-C\\Office32WW.xml" (normalized: "c:\\msocache\\all users\\{91140000-0011-0000-1000-0000000ff1ce}-c\\office32ww.xml"), lpNewFileName="C:\\MSOCache\\All Users\\{91140000-0011-0000-1000-0000000FF1CE}-C\\Office32WW.xml.[neftet@tutanota.com].boom" (normalized: "c:\\msocache\\all users\\{91140000-0011-0000-1000-0000000ff1ce}-c\\office32ww.xml.[neftet@tutanota.com].boom")) returned 1 [0121.427] CreateFileW (lpFileName="C:\\MSOCache\\All Users\\{91140000-0011-0000-1000-0000000FF1CE}-C\\ProPlusrWW.xml" (normalized: "c:\\msocache\\all users\\{91140000-0011-0000-1000-0000000ff1ce}-c\\proplusrww.xml"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x178 [0121.427] GetFileType (hFile=0x178) returned 0x1 [0121.427] GetFileType (hFile=0x178) returned 0x1 [0121.427] GetFileSize (in: hFile=0x178, lpFileSizeHigh=0x31e7f8 | out: lpFileSizeHigh=0x31e7f8*=0x0) returned 0x41e0 [0121.427] ReadFile (in: hFile=0x178, lpBuffer=0x2a3fb24, nNumberOfBytesToRead=0x41e0, lpNumberOfBytesRead=0x31e7a4, lpOverlapped=0x0 | out: lpBuffer=0x2a3fb24*, lpNumberOfBytesRead=0x31e7a4*=0x41e0, lpOverlapped=0x0) returned 1 [0121.428] CreateFileW (lpFileName="C:\\MSOCache\\All Users\\{91140000-0011-0000-1000-0000000FF1CE}-C\\ProPlusrWW.xml" (normalized: "c:\\msocache\\all users\\{91140000-0011-0000-1000-0000000ff1ce}-c\\proplusrww.xml"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x178 [0121.429] GetFileType (hFile=0x178) returned 0x1 [0121.429] GetFileType (hFile=0x178) returned 0x1 [0121.429] WriteFile (in: hFile=0x178, lpBuffer=0x2a44118*, nNumberOfBytesToWrite=0x41e0, lpNumberOfBytesWritten=0x31e798, lpOverlapped=0x0 | out: lpBuffer=0x2a44118*, lpNumberOfBytesWritten=0x31e798*=0x41e0, lpOverlapped=0x0) returned 1 [0121.430] MoveFileW (lpExistingFileName="C:\\MSOCache\\All Users\\{91140000-0011-0000-1000-0000000FF1CE}-C\\ProPlusrWW.xml" (normalized: "c:\\msocache\\all users\\{91140000-0011-0000-1000-0000000ff1ce}-c\\proplusrww.xml"), lpNewFileName="C:\\MSOCache\\All Users\\{91140000-0011-0000-1000-0000000FF1CE}-C\\ProPlusrWW.xml.[neftet@tutanota.com].boom" (normalized: "c:\\msocache\\all users\\{91140000-0011-0000-1000-0000000ff1ce}-c\\proplusrww.xml.[neftet@tutanota.com].boom")) returned 1 [0121.431] CreateFileW (lpFileName="C:\\MSOCache\\All Users\\{91140000-0011-0000-1000-0000000FF1CE}-C\\Setup.xml" (normalized: "c:\\msocache\\all users\\{91140000-0011-0000-1000-0000000ff1ce}-c\\setup.xml"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x178 [0121.431] GetFileType (hFile=0x178) returned 0x1 [0121.431] GetFileType (hFile=0x178) returned 0x1 [0121.431] GetFileSize (in: hFile=0x178, lpFileSizeHigh=0x31e7f8 | out: lpFileSizeHigh=0x31e7f8*=0x0) returned 0x7980 [0121.431] ReadFile (in: hFile=0x178, lpBuffer=0x2a499a0, nNumberOfBytesToRead=0x7980, lpNumberOfBytesRead=0x31e7a4, lpOverlapped=0x0 | out: lpBuffer=0x2a499a0*, lpNumberOfBytesRead=0x31e7a4*=0x7980, lpOverlapped=0x0) returned 1 [0121.433] CreateFileW (lpFileName="C:\\MSOCache\\All Users\\{91140000-0011-0000-1000-0000000FF1CE}-C\\Setup.xml" (normalized: "c:\\msocache\\all users\\{91140000-0011-0000-1000-0000000ff1ce}-c\\setup.xml"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x178 [0121.434] GetFileType (hFile=0x178) returned 0x1 [0121.434] GetFileType (hFile=0x178) returned 0x1 [0121.434] WriteFile (in: hFile=0x178, lpBuffer=0x2a51734*, nNumberOfBytesToWrite=0x7980, lpNumberOfBytesWritten=0x31e798, lpOverlapped=0x0 | out: lpBuffer=0x2a51734*, lpNumberOfBytesWritten=0x31e798*=0x7980, lpOverlapped=0x0) returned 1 [0121.435] MoveFileW (lpExistingFileName="C:\\MSOCache\\All Users\\{91140000-0011-0000-1000-0000000FF1CE}-C\\Setup.xml" (normalized: "c:\\msocache\\all users\\{91140000-0011-0000-1000-0000000ff1ce}-c\\setup.xml"), lpNewFileName="C:\\MSOCache\\All Users\\{91140000-0011-0000-1000-0000000FF1CE}-C\\Setup.xml.[neftet@tutanota.com].boom" (normalized: "c:\\msocache\\all users\\{91140000-0011-0000-1000-0000000ff1ce}-c\\setup.xml.[neftet@tutanota.com].boom")) returned 1 [0121.436] CreateFileW (lpFileName="C:\\MSOCache\\All Users\\{91140000-003B-0000-1000-0000000FF1CE}-C\\Office32WW.xml" (normalized: "c:\\msocache\\all users\\{91140000-003b-0000-1000-0000000ff1ce}-c\\office32ww.xml"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x178 [0121.436] GetFileType (hFile=0x178) returned 0x1 [0121.436] GetFileType (hFile=0x178) returned 0x1 [0121.436] GetFileSize (in: hFile=0x178, lpFileSizeHigh=0x31e7f8 | out: lpFileSizeHigh=0x31e7f8*=0x0) returned 0x10c0 [0121.436] ReadFile (in: hFile=0x178, lpBuffer=0x2a5e528, nNumberOfBytesToRead=0x10c0, lpNumberOfBytesRead=0x31e7a4, lpOverlapped=0x0 | out: lpBuffer=0x2a5e528*, lpNumberOfBytesRead=0x31e7a4*=0x10c0, lpOverlapped=0x0) returned 1 [0121.437] CreateFileW (lpFileName="C:\\MSOCache\\All Users\\{91140000-003B-0000-1000-0000000FF1CE}-C\\Office32WW.xml" (normalized: "c:\\msocache\\all users\\{91140000-003b-0000-1000-0000000ff1ce}-c\\office32ww.xml"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x178 [0121.438] GetFileType (hFile=0x178) returned 0x1 [0121.438] GetFileType (hFile=0x178) returned 0x1 [0121.438] WriteFile (in: hFile=0x178, lpBuffer=0x2a5f9fc*, nNumberOfBytesToWrite=0x10c0, lpNumberOfBytesWritten=0x31e798, lpOverlapped=0x0 | out: lpBuffer=0x2a5f9fc*, lpNumberOfBytesWritten=0x31e798*=0x10c0, lpOverlapped=0x0) returned 1 [0121.439] MoveFileW (lpExistingFileName="C:\\MSOCache\\All Users\\{91140000-003B-0000-1000-0000000FF1CE}-C\\Office32WW.xml" (normalized: "c:\\msocache\\all users\\{91140000-003b-0000-1000-0000000ff1ce}-c\\office32ww.xml"), lpNewFileName="C:\\MSOCache\\All Users\\{91140000-003B-0000-1000-0000000FF1CE}-C\\Office32WW.xml.[neftet@tutanota.com].boom" (normalized: "c:\\msocache\\all users\\{91140000-003b-0000-1000-0000000ff1ce}-c\\office32ww.xml.[neftet@tutanota.com].boom")) returned 1 [0121.439] CreateFileW (lpFileName="C:\\MSOCache\\All Users\\{91140000-003B-0000-1000-0000000FF1CE}-C\\PrjProrWW.xml" (normalized: "c:\\msocache\\all users\\{91140000-003b-0000-1000-0000000ff1ce}-c\\prjprorww.xml"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x178 [0121.439] GetFileType (hFile=0x178) returned 0x1 [0121.439] GetFileType (hFile=0x178) returned 0x1 [0121.439] GetFileSize (in: hFile=0x178, lpFileSizeHigh=0x31e7f8 | out: lpFileSizeHigh=0x31e7f8*=0x0) returned 0x1920 [0121.439] ReadFile (in: hFile=0x178, lpBuffer=0x2a621c0, nNumberOfBytesToRead=0x1920, lpNumberOfBytesRead=0x31e7a4, lpOverlapped=0x0 | out: lpBuffer=0x2a621c0*, lpNumberOfBytesRead=0x31e7a4*=0x1920, lpOverlapped=0x0) returned 1 [0121.440] CreateFileW (lpFileName="C:\\MSOCache\\All Users\\{91140000-003B-0000-1000-0000000FF1CE}-C\\PrjProrWW.xml" (normalized: "c:\\msocache\\all users\\{91140000-003b-0000-1000-0000000ff1ce}-c\\prjprorww.xml"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x178 [0121.441] GetFileType (hFile=0x178) returned 0x1 [0121.441] GetFileType (hFile=0x178) returned 0x1 [0121.441] WriteFile (in: hFile=0x178, lpBuffer=0x2a63ef4*, nNumberOfBytesToWrite=0x1920, lpNumberOfBytesWritten=0x31e798, lpOverlapped=0x0 | out: lpBuffer=0x2a63ef4*, lpNumberOfBytesWritten=0x31e798*=0x1920, lpOverlapped=0x0) returned 1 [0121.442] MoveFileW (lpExistingFileName="C:\\MSOCache\\All Users\\{91140000-003B-0000-1000-0000000FF1CE}-C\\PrjProrWW.xml" (normalized: "c:\\msocache\\all users\\{91140000-003b-0000-1000-0000000ff1ce}-c\\prjprorww.xml"), lpNewFileName="C:\\MSOCache\\All Users\\{91140000-003B-0000-1000-0000000FF1CE}-C\\PrjProrWW.xml.[neftet@tutanota.com].boom" (normalized: "c:\\msocache\\all users\\{91140000-003b-0000-1000-0000000ff1ce}-c\\prjprorww.xml.[neftet@tutanota.com].boom")) returned 1 [0121.443] CreateFileW (lpFileName="C:\\MSOCache\\All Users\\{91140000-003B-0000-1000-0000000FF1CE}-C\\Setup.xml" (normalized: "c:\\msocache\\all users\\{91140000-003b-0000-1000-0000000ff1ce}-c\\setup.xml"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x178 [0121.443] GetFileType (hFile=0x178) returned 0x1 [0121.443] GetFileType (hFile=0x178) returned 0x1 [0121.443] GetFileSize (in: hFile=0x178, lpFileSizeHigh=0x31e7f8 | out: lpFileSizeHigh=0x31e7f8*=0x0) returned 0x4130 [0121.443] ReadFile (in: hFile=0x178, lpBuffer=0x2a66e98, nNumberOfBytesToRead=0x4130, lpNumberOfBytesRead=0x31e7a4, lpOverlapped=0x0 | out: lpBuffer=0x2a66e98*, lpNumberOfBytesRead=0x31e7a4*=0x4130, lpOverlapped=0x0) returned 1 [0121.444] CreateFileW (lpFileName="C:\\MSOCache\\All Users\\{91140000-003B-0000-1000-0000000FF1CE}-C\\Setup.xml" (normalized: "c:\\msocache\\all users\\{91140000-003b-0000-1000-0000000ff1ce}-c\\setup.xml"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x178 [0121.445] GetFileType (hFile=0x178) returned 0x1 [0121.445] GetFileType (hFile=0x178) returned 0x1 [0121.445] WriteFile (in: hFile=0x178, lpBuffer=0x2a6b3dc*, nNumberOfBytesToWrite=0x4130, lpNumberOfBytesWritten=0x31e798, lpOverlapped=0x0 | out: lpBuffer=0x2a6b3dc*, lpNumberOfBytesWritten=0x31e798*=0x4130, lpOverlapped=0x0) returned 1 [0121.446] MoveFileW (lpExistingFileName="C:\\MSOCache\\All Users\\{91140000-003B-0000-1000-0000000FF1CE}-C\\Setup.xml" (normalized: "c:\\msocache\\all users\\{91140000-003b-0000-1000-0000000ff1ce}-c\\setup.xml"), lpNewFileName="C:\\MSOCache\\All Users\\{91140000-003B-0000-1000-0000000FF1CE}-C\\Setup.xml.[neftet@tutanota.com].boom" (normalized: "c:\\msocache\\all users\\{91140000-003b-0000-1000-0000000ff1ce}-c\\setup.xml.[neftet@tutanota.com].boom")) returned 1 [0121.447] CreateFileW (lpFileName="C:\\MSOCache\\All Users\\{91140000-0057-0000-1000-0000000FF1CE}-C\\Office32WW.xml" (normalized: "c:\\msocache\\all users\\{91140000-0057-0000-1000-0000000ff1ce}-c\\office32ww.xml"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x178 [0121.447] GetFileType (hFile=0x178) returned 0x1 [0121.447] GetFileType (hFile=0x178) returned 0x1 [0121.447] GetFileSize (in: hFile=0x178, lpFileSizeHigh=0x31e7f8 | out: lpFileSizeHigh=0x31e7f8*=0x0) returned 0x10c0 [0121.447] ReadFile (in: hFile=0x178, lpBuffer=0x2a748c8, nNumberOfBytesToRead=0x10c0, lpNumberOfBytesRead=0x31e7a4, lpOverlapped=0x0 | out: lpBuffer=0x2a748c8*, lpNumberOfBytesRead=0x31e7a4*=0x10c0, lpOverlapped=0x0) returned 1 [0121.448] CreateFileW (lpFileName="C:\\MSOCache\\All Users\\{91140000-0057-0000-1000-0000000FF1CE}-C\\Office32WW.xml" (normalized: "c:\\msocache\\all users\\{91140000-0057-0000-1000-0000000ff1ce}-c\\office32ww.xml"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x178 [0121.449] GetFileType (hFile=0x178) returned 0x1 [0121.449] GetFileType (hFile=0x178) returned 0x1 [0121.449] WriteFile (in: hFile=0x178, lpBuffer=0x2a75d9c*, nNumberOfBytesToWrite=0x10c0, lpNumberOfBytesWritten=0x31e798, lpOverlapped=0x0 | out: lpBuffer=0x2a75d9c*, lpNumberOfBytesWritten=0x31e798*=0x10c0, lpOverlapped=0x0) returned 1 [0121.450] MoveFileW (lpExistingFileName="C:\\MSOCache\\All Users\\{91140000-0057-0000-1000-0000000FF1CE}-C\\Office32WW.xml" (normalized: "c:\\msocache\\all users\\{91140000-0057-0000-1000-0000000ff1ce}-c\\office32ww.xml"), lpNewFileName="C:\\MSOCache\\All Users\\{91140000-0057-0000-1000-0000000FF1CE}-C\\Office32WW.xml.[neftet@tutanota.com].boom" (normalized: "c:\\msocache\\all users\\{91140000-0057-0000-1000-0000000ff1ce}-c\\office32ww.xml.[neftet@tutanota.com].boom")) returned 1 [0121.451] CreateFileW (lpFileName="C:\\MSOCache\\All Users\\{91140000-0057-0000-1000-0000000FF1CE}-C\\Setup.xml" (normalized: "c:\\msocache\\all users\\{91140000-0057-0000-1000-0000000ff1ce}-c\\setup.xml"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x178 [0121.451] GetFileType (hFile=0x178) returned 0x1 [0121.451] GetFileType (hFile=0x178) returned 0x1 [0121.451] GetFileSize (in: hFile=0x178, lpFileSizeHigh=0x31e7f8 | out: lpFileSizeHigh=0x31e7f8*=0x0) returned 0x5070 [0121.451] ReadFile (in: hFile=0x178, lpBuffer=0x2a78550, nNumberOfBytesToRead=0x5070, lpNumberOfBytesRead=0x31e7a4, lpOverlapped=0x0 | out: lpBuffer=0x2a78550*, lpNumberOfBytesRead=0x31e7a4*=0x5070, lpOverlapped=0x0) returned 1 [0121.452] CreateFileW (lpFileName="C:\\MSOCache\\All Users\\{91140000-0057-0000-1000-0000000FF1CE}-C\\Setup.xml" (normalized: "c:\\msocache\\all users\\{91140000-0057-0000-1000-0000000ff1ce}-c\\setup.xml"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x178 [0121.453] GetFileType (hFile=0x178) returned 0x1 [0121.453] GetFileType (hFile=0x178) returned 0x1 [0121.453] WriteFile (in: hFile=0x178, lpBuffer=0x2a7d9d4*, nNumberOfBytesToWrite=0x5070, lpNumberOfBytesWritten=0x31e798, lpOverlapped=0x0 | out: lpBuffer=0x2a7d9d4*, lpNumberOfBytesWritten=0x31e798*=0x5070, lpOverlapped=0x0) returned 1 [0121.454] MoveFileW (lpExistingFileName="C:\\MSOCache\\All Users\\{91140000-0057-0000-1000-0000000FF1CE}-C\\Setup.xml" (normalized: "c:\\msocache\\all users\\{91140000-0057-0000-1000-0000000ff1ce}-c\\setup.xml"), lpNewFileName="C:\\MSOCache\\All Users\\{91140000-0057-0000-1000-0000000FF1CE}-C\\Setup.xml.[neftet@tutanota.com].boom" (normalized: "c:\\msocache\\all users\\{91140000-0057-0000-1000-0000000ff1ce}-c\\setup.xml.[neftet@tutanota.com].boom")) returned 1 [0121.455] CreateFileW (lpFileName="C:\\MSOCache\\All Users\\{91140000-0057-0000-1000-0000000FF1CE}-C\\VisiorWW.xml" (normalized: "c:\\msocache\\all users\\{91140000-0057-0000-1000-0000000ff1ce}-c\\visiorww.xml"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x178 [0121.455] GetFileType (hFile=0x178) returned 0x1 [0121.455] GetFileType (hFile=0x178) returned 0x1 [0121.455] GetFileSize (in: hFile=0x178, lpFileSizeHigh=0x31e7f8 | out: lpFileSizeHigh=0x31e7f8*=0x0) returned 0x2220 [0121.455] ReadFile (in: hFile=0x178, lpBuffer=0x2a840ac, nNumberOfBytesToRead=0x2220, lpNumberOfBytesRead=0x31e7a4, lpOverlapped=0x0 | out: lpBuffer=0x2a840ac*, lpNumberOfBytesRead=0x31e7a4*=0x2220, lpOverlapped=0x0) returned 1 [0121.456] CreateFileW (lpFileName="C:\\MSOCache\\All Users\\{91140000-0057-0000-1000-0000000FF1CE}-C\\VisiorWW.xml" (normalized: "c:\\msocache\\all users\\{91140000-0057-0000-1000-0000000ff1ce}-c\\visiorww.xml"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x178 [0121.457] GetFileType (hFile=0x178) returned 0x1 [0121.457] GetFileType (hFile=0x178) returned 0x1 [0121.457] WriteFile (in: hFile=0x178, lpBuffer=0x2a866e0*, nNumberOfBytesToWrite=0x2220, lpNumberOfBytesWritten=0x31e798, lpOverlapped=0x0 | out: lpBuffer=0x2a866e0*, lpNumberOfBytesWritten=0x31e798*=0x2220, lpOverlapped=0x0) returned 1 [0121.458] MoveFileW (lpExistingFileName="C:\\MSOCache\\All Users\\{91140000-0057-0000-1000-0000000FF1CE}-C\\VisiorWW.xml" (normalized: "c:\\msocache\\all users\\{91140000-0057-0000-1000-0000000ff1ce}-c\\visiorww.xml"), lpNewFileName="C:\\MSOCache\\All Users\\{91140000-0057-0000-1000-0000000FF1CE}-C\\VisiorWW.xml.[neftet@tutanota.com].boom" (normalized: "c:\\msocache\\all users\\{91140000-0057-0000-1000-0000000ff1ce}-c\\visiorww.xml.[neftet@tutanota.com].boom")) returned 1 [0121.464] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\Alphabet.xml" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\alphabet.xml"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x178 [0121.464] GetFileType (hFile=0x178) returned 0x1 [0121.464] GetFileType (hFile=0x178) returned 0x1 [0121.464] GetFileSize (in: hFile=0x178, lpFileSizeHigh=0x31e780 | out: lpFileSizeHigh=0x31e780*=0x0) returned 0xc1486 [0121.464] ReadFile (in: hFile=0x178, lpBuffer=0x385fb30, nNumberOfBytesToRead=0xc1486, lpNumberOfBytesRead=0x31e72c, lpOverlapped=0x0 | out: lpBuffer=0x385fb30*, lpNumberOfBytesRead=0x31e72c*=0xc1486, lpOverlapped=0x0) returned 1 [0121.496] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\ink\\Alphabet.xml" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\alphabet.xml"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0xffffffff [0121.516] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\Stationery\\Bears.htm" (normalized: "c:\\program files\\common files\\microsoft shared\\stationery\\bears.htm"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x178 [0121.517] GetFileType (hFile=0x178) returned 0x1 [0121.517] GetFileType (hFile=0x178) returned 0x1 [0121.517] GetFileSize (in: hFile=0x178, lpFileSizeHigh=0x31e780 | out: lpFileSizeHigh=0x31e780*=0x0) returned 0xff [0121.517] ReadFile (in: hFile=0x178, lpBuffer=0x269a4e0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x31e72c, lpOverlapped=0x0 | out: lpBuffer=0x269a4e0*, lpNumberOfBytesRead=0x31e72c*=0xff, lpOverlapped=0x0) returned 1 [0121.518] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\Stationery\\Bears.htm" (normalized: "c:\\program files\\common files\\microsoft shared\\stationery\\bears.htm"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0xffffffff [0121.665] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\Services\\verisign.bmp" (normalized: "c:\\program files\\common files\\services\\verisign.bmp"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x178 [0121.665] GetFileType (hFile=0x178) returned 0x1 [0121.665] GetFileType (hFile=0x178) returned 0x1 [0121.665] GetFileSize (in: hFile=0x178, lpFileSizeHigh=0x31e7f8 | out: lpFileSizeHigh=0x31e7f8*=0x0) returned 0xa8e [0121.665] ReadFile (in: hFile=0x178, lpBuffer=0x27381e8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x31e7a4, lpOverlapped=0x0 | out: lpBuffer=0x27381e8*, lpNumberOfBytesRead=0x31e7a4*=0xa8e, lpOverlapped=0x0) returned 1 [0121.666] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\Services\\verisign.bmp" (normalized: "c:\\program files\\common files\\services\\verisign.bmp"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0xffffffff [0121.678] CreateFileW (lpFileName="C:\\Program Files\\DVD Maker\\Shared\\DissolveAnother.png" (normalized: "c:\\program files\\dvd maker\\shared\\dissolveanother.png"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x178 [0121.678] GetFileType (hFile=0x178) returned 0x1 [0121.678] GetFileType (hFile=0x178) returned 0x1 [0121.678] GetFileSize (in: hFile=0x178, lpFileSizeHigh=0x31e7f8 | out: lpFileSizeHigh=0x31e7f8*=0x0) returned 0x6d1f [0121.678] ReadFile (in: hFile=0x178, lpBuffer=0x2761f30, nNumberOfBytesToRead=0x6d1f, lpNumberOfBytesRead=0x31e7a4, lpOverlapped=0x0 | out: lpBuffer=0x2761f30*, lpNumberOfBytesRead=0x31e7a4*=0x6d1f, lpOverlapped=0x0) returned 1 [0121.680] CreateFileW (lpFileName="C:\\Program Files\\DVD Maker\\Shared\\DissolveAnother.png" (normalized: "c:\\program files\\dvd maker\\shared\\dissolveanother.png"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0xffffffff [0121.708] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Colors\\Adjacency.xml" (normalized: "c:\\program files\\microsoft office\\document themes 14\\theme colors\\adjacency.xml"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x178 [0121.709] GetFileType (hFile=0x178) returned 0x1 [0121.709] GetFileType (hFile=0x178) returned 0x1 [0121.709] GetFileSize (in: hFile=0x178, lpFileSizeHigh=0x31e780 | out: lpFileSizeHigh=0x31e780*=0x0) returned 0x3b0 [0121.709] ReadFile (in: hFile=0x178, lpBuffer=0x28e24a4, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x31e72c, lpOverlapped=0x0 | out: lpBuffer=0x28e24a4*, lpNumberOfBytesRead=0x31e72c*=0x3b0, lpOverlapped=0x0) returned 1 [0121.709] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Colors\\Adjacency.xml" (normalized: "c:\\program files\\microsoft office\\document themes 14\\theme colors\\adjacency.xml"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x178 [0121.711] GetFileType (hFile=0x178) returned 0x1 [0121.711] GetFileType (hFile=0x178) returned 0x1 [0121.711] WriteFile (in: hFile=0x178, lpBuffer=0x28e4dbc*, nNumberOfBytesToWrite=0x3b0, lpNumberOfBytesWritten=0x31e6f4, lpOverlapped=0x0 | out: lpBuffer=0x28e4dbc*, lpNumberOfBytesWritten=0x31e6f4*=0x3b0, lpOverlapped=0x0) returned 1 [0121.712] MoveFileW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Colors\\Adjacency.xml" (normalized: "c:\\program files\\microsoft office\\document themes 14\\theme colors\\adjacency.xml"), lpNewFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Colors\\Adjacency.xml.[neftet@tutanota.com].boom" (normalized: "c:\\program files\\microsoft office\\document themes 14\\theme colors\\adjacency.xml.[neftet@tutanota.com].boom")) returned 1 [0121.713] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Colors\\Angles.xml" (normalized: "c:\\program files\\microsoft office\\document themes 14\\theme colors\\angles.xml"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x178 [0121.713] GetFileType (hFile=0x178) returned 0x1 [0121.713] GetFileType (hFile=0x178) returned 0x1 [0121.713] GetFileSize (in: hFile=0x178, lpFileSizeHigh=0x31e780 | out: lpFileSizeHigh=0x31e780*=0x0) returned 0x3a0 [0121.713] ReadFile (in: hFile=0x178, lpBuffer=0x28e6698, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x31e72c, lpOverlapped=0x0 | out: lpBuffer=0x28e6698*, lpNumberOfBytesRead=0x31e72c*=0x3a0, lpOverlapped=0x0) returned 1 [0121.714] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Colors\\Angles.xml" (normalized: "c:\\program files\\microsoft office\\document themes 14\\theme colors\\angles.xml"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x178 [0121.715] GetFileType (hFile=0x178) returned 0x1 [0121.715] GetFileType (hFile=0x178) returned 0x1 [0121.715] WriteFile (in: hFile=0x178, lpBuffer=0x28e8f98*, nNumberOfBytesToWrite=0x3a0, lpNumberOfBytesWritten=0x31e6f4, lpOverlapped=0x0 | out: lpBuffer=0x28e8f98*, lpNumberOfBytesWritten=0x31e6f4*=0x3a0, lpOverlapped=0x0) returned 1 [0121.716] MoveFileW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Colors\\Angles.xml" (normalized: "c:\\program files\\microsoft office\\document themes 14\\theme colors\\angles.xml"), lpNewFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Colors\\Angles.xml.[neftet@tutanota.com].boom" (normalized: "c:\\program files\\microsoft office\\document themes 14\\theme colors\\angles.xml.[neftet@tutanota.com].boom")) returned 1 [0121.717] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Colors\\Apex.xml" (normalized: "c:\\program files\\microsoft office\\document themes 14\\theme colors\\apex.xml"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x178 [0121.717] GetFileType (hFile=0x178) returned 0x1 [0121.717] GetFileType (hFile=0x178) returned 0x1 [0121.717] GetFileSize (in: hFile=0x178, lpFileSizeHigh=0x31e780 | out: lpFileSizeHigh=0x31e780*=0x0) returned 0x3c0 [0121.717] ReadFile (in: hFile=0x178, lpBuffer=0x28ea878, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x31e72c, lpOverlapped=0x0 | out: lpBuffer=0x28ea878*, lpNumberOfBytesRead=0x31e72c*=0x3c0, lpOverlapped=0x0) returned 1 [0121.717] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Colors\\Apex.xml" (normalized: "c:\\program files\\microsoft office\\document themes 14\\theme colors\\apex.xml"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x178 [0121.718] GetFileType (hFile=0x178) returned 0x1 [0121.718] GetFileType (hFile=0x178) returned 0x1 [0121.718] WriteFile (in: hFile=0x178, lpBuffer=0x28ed190*, nNumberOfBytesToWrite=0x3c0, lpNumberOfBytesWritten=0x31e6f4, lpOverlapped=0x0 | out: lpBuffer=0x28ed190*, lpNumberOfBytesWritten=0x31e6f4*=0x3c0, lpOverlapped=0x0) returned 1 [0121.719] MoveFileW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Colors\\Apex.xml" (normalized: "c:\\program files\\microsoft office\\document themes 14\\theme colors\\apex.xml"), lpNewFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Colors\\Apex.xml.[neftet@tutanota.com].boom" (normalized: "c:\\program files\\microsoft office\\document themes 14\\theme colors\\apex.xml.[neftet@tutanota.com].boom")) returned 1 [0121.721] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Colors\\Apothecary.xml" (normalized: "c:\\program files\\microsoft office\\document themes 14\\theme colors\\apothecary.xml"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x178 [0121.721] GetFileType (hFile=0x178) returned 0x1 [0121.721] GetFileType (hFile=0x178) returned 0x1 [0121.721] GetFileSize (in: hFile=0x178, lpFileSizeHigh=0x31e780 | out: lpFileSizeHigh=0x31e780*=0x0) returned 0x3d0 [0121.721] ReadFile (in: hFile=0x178, lpBuffer=0x28eea8c, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x31e72c, lpOverlapped=0x0 | out: lpBuffer=0x28eea8c*, lpNumberOfBytesRead=0x31e72c*=0x3d0, lpOverlapped=0x0) returned 1 [0121.722] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Colors\\Apothecary.xml" (normalized: "c:\\program files\\microsoft office\\document themes 14\\theme colors\\apothecary.xml"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x178 [0121.722] GetFileType (hFile=0x178) returned 0x1 [0121.722] GetFileType (hFile=0x178) returned 0x1 [0121.723] MoveFileW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Colors\\Apothecary.xml" (normalized: "c:\\program files\\microsoft office\\document themes 14\\theme colors\\apothecary.xml"), lpNewFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Colors\\Apothecary.xml.[neftet@tutanota.com].boom" (normalized: "c:\\program files\\microsoft office\\document themes 14\\theme colors\\apothecary.xml.[neftet@tutanota.com].boom")) returned 1 [0121.724] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Colors\\Aspect.xml" (normalized: "c:\\program files\\microsoft office\\document themes 14\\theme colors\\aspect.xml"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x178 [0121.724] GetFileType (hFile=0x178) returned 0x1 [0121.724] GetFileType (hFile=0x178) returned 0x1 [0121.724] GetFileSize (in: hFile=0x178, lpFileSizeHigh=0x31e780 | out: lpFileSizeHigh=0x31e780*=0x0) returned 0x3d0 [0121.724] ReadFile (in: hFile=0x178, lpBuffer=0x28f2cdc, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x31e72c, lpOverlapped=0x0 | out: lpBuffer=0x28f2cdc*, lpNumberOfBytesRead=0x31e72c*=0x3d0, lpOverlapped=0x0) returned 1 [0121.725] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Colors\\Aspect.xml" (normalized: "c:\\program files\\microsoft office\\document themes 14\\theme colors\\aspect.xml"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x178 [0121.726] GetFileType (hFile=0x178) returned 0x1 [0121.726] GetFileType (hFile=0x178) returned 0x1 [0121.727] MoveFileW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Colors\\Aspect.xml" (normalized: "c:\\program files\\microsoft office\\document themes 14\\theme colors\\aspect.xml"), lpNewFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Colors\\Aspect.xml.[neftet@tutanota.com].boom" (normalized: "c:\\program files\\microsoft office\\document themes 14\\theme colors\\aspect.xml.[neftet@tutanota.com].boom")) returned 1 [0121.727] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Colors\\Austin.xml" (normalized: "c:\\program files\\microsoft office\\document themes 14\\theme colors\\austin.xml"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x178 [0121.727] GetFileType (hFile=0x178) returned 0x1 [0121.728] GetFileType (hFile=0x178) returned 0x1 [0121.728] GetFileSize (in: hFile=0x178, lpFileSizeHigh=0x31e780 | out: lpFileSizeHigh=0x31e780*=0x0) returned 0x3d0 [0121.728] ReadFile (in: hFile=0x178, lpBuffer=0x28f6f04, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x31e72c, lpOverlapped=0x0 | out: lpBuffer=0x28f6f04*, lpNumberOfBytesRead=0x31e72c*=0x3d0, lpOverlapped=0x0) returned 1 [0121.728] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Colors\\Austin.xml" (normalized: "c:\\program files\\microsoft office\\document themes 14\\theme colors\\austin.xml"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x178 [0121.736] GetFileType (hFile=0x178) returned 0x1 [0121.736] GetFileType (hFile=0x178) returned 0x1 [0121.737] MoveFileW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Colors\\Austin.xml" (normalized: "c:\\program files\\microsoft office\\document themes 14\\theme colors\\austin.xml"), lpNewFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Colors\\Austin.xml.[neftet@tutanota.com].boom" (normalized: "c:\\program files\\microsoft office\\document themes 14\\theme colors\\austin.xml.[neftet@tutanota.com].boom")) returned 1 [0121.738] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Colors\\Black Tie.xml" (normalized: "c:\\program files\\microsoft office\\document themes 14\\theme colors\\black tie.xml"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x178 [0121.738] GetFileType (hFile=0x178) returned 0x1 [0121.738] GetFileType (hFile=0x178) returned 0x1 [0121.738] GetFileSize (in: hFile=0x178, lpFileSizeHigh=0x31e780 | out: lpFileSizeHigh=0x31e780*=0x0) returned 0x3a0 [0121.738] ReadFile (in: hFile=0x178, lpBuffer=0x28fb104, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x31e72c, lpOverlapped=0x0 | out: lpBuffer=0x28fb104*, lpNumberOfBytesRead=0x31e72c*=0x3a0, lpOverlapped=0x0) returned 1 [0121.739] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Colors\\Black Tie.xml" (normalized: "c:\\program files\\microsoft office\\document themes 14\\theme colors\\black tie.xml"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x178 [0121.740] GetFileType (hFile=0x178) returned 0x1 [0121.740] GetFileType (hFile=0x178) returned 0x1 [0121.740] MoveFileW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Colors\\Black Tie.xml" (normalized: "c:\\program files\\microsoft office\\document themes 14\\theme colors\\black tie.xml"), lpNewFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Colors\\Black Tie.xml.[neftet@tutanota.com].boom" (normalized: "c:\\program files\\microsoft office\\document themes 14\\theme colors\\black tie.xml.[neftet@tutanota.com].boom")) returned 1 [0121.741] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Colors\\Civic.xml" (normalized: "c:\\program files\\microsoft office\\document themes 14\\theme colors\\civic.xml"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x178 [0121.741] GetFileType (hFile=0x178) returned 0x1 [0121.741] GetFileType (hFile=0x178) returned 0x1 [0121.741] GetFileSize (in: hFile=0x178, lpFileSizeHigh=0x31e780 | out: lpFileSizeHigh=0x31e780*=0x0) returned 0x3d0 [0121.741] ReadFile (in: hFile=0x178, lpBuffer=0x28ff310, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x31e72c, lpOverlapped=0x0 | out: lpBuffer=0x28ff310*, lpNumberOfBytesRead=0x31e72c*=0x3d0, lpOverlapped=0x0) returned 1 [0121.742] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Colors\\Civic.xml" (normalized: "c:\\program files\\microsoft office\\document themes 14\\theme colors\\civic.xml"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x178 [0121.744] GetFileType (hFile=0x178) returned 0x1 [0121.744] GetFileType (hFile=0x178) returned 0x1 [0121.745] MoveFileW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Colors\\Civic.xml" (normalized: "c:\\program files\\microsoft office\\document themes 14\\theme colors\\civic.xml"), lpNewFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Colors\\Civic.xml.[neftet@tutanota.com].boom" (normalized: "c:\\program files\\microsoft office\\document themes 14\\theme colors\\civic.xml.[neftet@tutanota.com].boom")) returned 1 [0121.746] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Colors\\Clarity.xml" (normalized: "c:\\program files\\microsoft office\\document themes 14\\theme colors\\clarity.xml"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x178 [0121.746] GetFileType (hFile=0x178) returned 0x1 [0121.746] GetFileType (hFile=0x178) returned 0x1 [0121.746] GetFileSize (in: hFile=0x178, lpFileSizeHigh=0x31e780 | out: lpFileSizeHigh=0x31e780*=0x0) returned 0x3a0 [0121.746] ReadFile (in: hFile=0x178, lpBuffer=0x29034fc, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x31e72c, lpOverlapped=0x0 | out: lpBuffer=0x29034fc*, lpNumberOfBytesRead=0x31e72c*=0x3a0, lpOverlapped=0x0) returned 1 [0121.747] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Colors\\Clarity.xml" (normalized: "c:\\program files\\microsoft office\\document themes 14\\theme colors\\clarity.xml"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x178 [0121.747] GetFileType (hFile=0x178) returned 0x1 [0121.748] GetFileType (hFile=0x178) returned 0x1 [0121.748] MoveFileW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Colors\\Clarity.xml" (normalized: "c:\\program files\\microsoft office\\document themes 14\\theme colors\\clarity.xml"), lpNewFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Colors\\Clarity.xml.[neftet@tutanota.com].boom" (normalized: "c:\\program files\\microsoft office\\document themes 14\\theme colors\\clarity.xml.[neftet@tutanota.com].boom")) returned 1 [0121.749] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Colors\\Composite.xml" (normalized: "c:\\program files\\microsoft office\\document themes 14\\theme colors\\composite.xml"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x178 [0121.749] GetFileType (hFile=0x178) returned 0x1 [0121.749] GetFileType (hFile=0x178) returned 0x1 [0121.749] GetFileSize (in: hFile=0x178, lpFileSizeHigh=0x31e780 | out: lpFileSizeHigh=0x31e780*=0x0) returned 0x3d0 [0121.749] ReadFile (in: hFile=0x178, lpBuffer=0x2907704, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x31e72c, lpOverlapped=0x0 | out: lpBuffer=0x2907704*, lpNumberOfBytesRead=0x31e72c*=0x3d0, lpOverlapped=0x0) returned 1 [0121.750] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Colors\\Composite.xml" (normalized: "c:\\program files\\microsoft office\\document themes 14\\theme colors\\composite.xml"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x178 [0121.751] GetFileType (hFile=0x178) returned 0x1 [0121.751] GetFileType (hFile=0x178) returned 0x1 [0121.752] MoveFileW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Colors\\Composite.xml" (normalized: "c:\\program files\\microsoft office\\document themes 14\\theme colors\\composite.xml"), lpNewFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Colors\\Composite.xml.[neftet@tutanota.com].boom" (normalized: "c:\\program files\\microsoft office\\document themes 14\\theme colors\\composite.xml.[neftet@tutanota.com].boom")) returned 1 [0121.753] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Colors\\Concourse.xml" (normalized: "c:\\program files\\microsoft office\\document themes 14\\theme colors\\concourse.xml"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x178 [0121.753] GetFileType (hFile=0x178) returned 0x1 [0121.753] GetFileType (hFile=0x178) returned 0x1 [0121.753] GetFileSize (in: hFile=0x178, lpFileSizeHigh=0x31e780 | out: lpFileSizeHigh=0x31e780*=0x0) returned 0x3d0 [0121.753] ReadFile (in: hFile=0x178, lpBuffer=0x290b950, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x31e72c, lpOverlapped=0x0 | out: lpBuffer=0x290b950*, lpNumberOfBytesRead=0x31e72c*=0x3d0, lpOverlapped=0x0) returned 1 [0121.754] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Colors\\Concourse.xml" (normalized: "c:\\program files\\microsoft office\\document themes 14\\theme colors\\concourse.xml"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x178 [0121.754] GetFileType (hFile=0x178) returned 0x1 [0121.754] GetFileType (hFile=0x178) returned 0x1 [0121.754] WriteFile (in: hFile=0x178, lpBuffer=0x290e288*, nNumberOfBytesToWrite=0x3d0, lpNumberOfBytesWritten=0x31e6f4, lpOverlapped=0x0 | out: lpBuffer=0x290e288*, lpNumberOfBytesWritten=0x31e6f4*=0x3d0, lpOverlapped=0x0) returned 1 [0121.755] MoveFileW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Colors\\Concourse.xml" (normalized: "c:\\program files\\microsoft office\\document themes 14\\theme colors\\concourse.xml"), lpNewFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Colors\\Concourse.xml.[neftet@tutanota.com].boom" (normalized: "c:\\program files\\microsoft office\\document themes 14\\theme colors\\concourse.xml.[neftet@tutanota.com].boom")) returned 1 [0121.756] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Colors\\Couture.xml" (normalized: "c:\\program files\\microsoft office\\document themes 14\\theme colors\\couture.xml"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x178 [0121.756] GetFileType (hFile=0x178) returned 0x1 [0121.756] GetFileType (hFile=0x178) returned 0x1 [0121.756] GetFileSize (in: hFile=0x178, lpFileSizeHigh=0x31e780 | out: lpFileSizeHigh=0x31e780*=0x0) returned 0x3d0 [0121.756] ReadFile (in: hFile=0x178, lpBuffer=0x290fb94, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x31e72c, lpOverlapped=0x0 | out: lpBuffer=0x290fb94*, lpNumberOfBytesRead=0x31e72c*=0x3d0, lpOverlapped=0x0) returned 1 [0121.757] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Colors\\Couture.xml" (normalized: "c:\\program files\\microsoft office\\document themes 14\\theme colors\\couture.xml"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x178 [0121.758] GetFileType (hFile=0x178) returned 0x1 [0121.758] GetFileType (hFile=0x178) returned 0x1 [0121.758] WriteFile (in: hFile=0x178, lpBuffer=0x29124c4*, nNumberOfBytesToWrite=0x3d0, lpNumberOfBytesWritten=0x31e6f4, lpOverlapped=0x0 | out: lpBuffer=0x29124c4*, lpNumberOfBytesWritten=0x31e6f4*=0x3d0, lpOverlapped=0x0) returned 1 [0121.759] MoveFileW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Colors\\Couture.xml" (normalized: "c:\\program files\\microsoft office\\document themes 14\\theme colors\\couture.xml"), lpNewFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Colors\\Couture.xml.[neftet@tutanota.com].boom" (normalized: "c:\\program files\\microsoft office\\document themes 14\\theme colors\\couture.xml.[neftet@tutanota.com].boom")) returned 1 [0121.760] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Colors\\Elemental.xml" (normalized: "c:\\program files\\microsoft office\\document themes 14\\theme colors\\elemental.xml"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x178 [0121.760] GetFileType (hFile=0x178) returned 0x1 [0121.760] GetFileType (hFile=0x178) returned 0x1 [0121.760] GetFileSize (in: hFile=0x178, lpFileSizeHigh=0x31e780 | out: lpFileSizeHigh=0x31e780*=0x0) returned 0x3d0 [0121.760] ReadFile (in: hFile=0x178, lpBuffer=0x2913dcc, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x31e72c, lpOverlapped=0x0 | out: lpBuffer=0x2913dcc*, lpNumberOfBytesRead=0x31e72c*=0x3d0, lpOverlapped=0x0) returned 1 [0121.761] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Colors\\Elemental.xml" (normalized: "c:\\program files\\microsoft office\\document themes 14\\theme colors\\elemental.xml"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x178 [0121.762] GetFileType (hFile=0x178) returned 0x1 [0121.762] GetFileType (hFile=0x178) returned 0x1 [0121.762] WriteFile (in: hFile=0x178, lpBuffer=0x2916704*, nNumberOfBytesToWrite=0x3d0, lpNumberOfBytesWritten=0x31e6f4, lpOverlapped=0x0 | out: lpBuffer=0x2916704*, lpNumberOfBytesWritten=0x31e6f4*=0x3d0, lpOverlapped=0x0) returned 1 [0121.763] MoveFileW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Colors\\Elemental.xml" (normalized: "c:\\program files\\microsoft office\\document themes 14\\theme colors\\elemental.xml"), lpNewFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Colors\\Elemental.xml.[neftet@tutanota.com].boom" (normalized: "c:\\program files\\microsoft office\\document themes 14\\theme colors\\elemental.xml.[neftet@tutanota.com].boom")) returned 1 [0121.763] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Colors\\Equity.xml" (normalized: "c:\\program files\\microsoft office\\document themes 14\\theme colors\\equity.xml"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x178 [0121.763] GetFileType (hFile=0x178) returned 0x1 [0121.763] GetFileType (hFile=0x178) returned 0x1 [0121.763] GetFileSize (in: hFile=0x178, lpFileSizeHigh=0x31e780 | out: lpFileSizeHigh=0x31e780*=0x0) returned 0x3d0 [0121.763] ReadFile (in: hFile=0x178, lpBuffer=0x2918010, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x31e72c, lpOverlapped=0x0 | out: lpBuffer=0x2918010*, lpNumberOfBytesRead=0x31e72c*=0x3d0, lpOverlapped=0x0) returned 1 [0121.764] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Colors\\Equity.xml" (normalized: "c:\\program files\\microsoft office\\document themes 14\\theme colors\\equity.xml"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x178 [0121.765] GetFileType (hFile=0x178) returned 0x1 [0121.765] GetFileType (hFile=0x178) returned 0x1 [0121.765] WriteFile (in: hFile=0x178, lpBuffer=0x291a940*, nNumberOfBytesToWrite=0x3d0, lpNumberOfBytesWritten=0x31e6f4, lpOverlapped=0x0 | out: lpBuffer=0x291a940*, lpNumberOfBytesWritten=0x31e6f4*=0x3d0, lpOverlapped=0x0) returned 1 [0121.766] MoveFileW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Colors\\Equity.xml" (normalized: "c:\\program files\\microsoft office\\document themes 14\\theme colors\\equity.xml"), lpNewFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Colors\\Equity.xml.[neftet@tutanota.com].boom" (normalized: "c:\\program files\\microsoft office\\document themes 14\\theme colors\\equity.xml.[neftet@tutanota.com].boom")) returned 1 [0121.767] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Colors\\Essential.xml" (normalized: "c:\\program files\\microsoft office\\document themes 14\\theme colors\\essential.xml"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x178 [0121.767] GetFileType (hFile=0x178) returned 0x1 [0121.767] GetFileType (hFile=0x178) returned 0x1 [0121.768] GetFileSize (in: hFile=0x178, lpFileSizeHigh=0x31e780 | out: lpFileSizeHigh=0x31e780*=0x0) returned 0x3b0 [0121.768] ReadFile (in: hFile=0x178, lpBuffer=0x291c220, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x31e72c, lpOverlapped=0x0 | out: lpBuffer=0x291c220*, lpNumberOfBytesRead=0x31e72c*=0x3b0, lpOverlapped=0x0) returned 1 [0121.768] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Colors\\Essential.xml" (normalized: "c:\\program files\\microsoft office\\document themes 14\\theme colors\\essential.xml"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x178 [0121.769] GetFileType (hFile=0x178) returned 0x1 [0121.769] GetFileType (hFile=0x178) returned 0x1 [0121.769] WriteFile (in: hFile=0x178, lpBuffer=0x291eb38*, nNumberOfBytesToWrite=0x3b0, lpNumberOfBytesWritten=0x31e6f4, lpOverlapped=0x0 | out: lpBuffer=0x291eb38*, lpNumberOfBytesWritten=0x31e6f4*=0x3b0, lpOverlapped=0x0) returned 1 [0121.770] MoveFileW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Colors\\Essential.xml" (normalized: "c:\\program files\\microsoft office\\document themes 14\\theme colors\\essential.xml"), lpNewFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Colors\\Essential.xml.[neftet@tutanota.com].boom" (normalized: "c:\\program files\\microsoft office\\document themes 14\\theme colors\\essential.xml.[neftet@tutanota.com].boom")) returned 1 [0121.771] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Colors\\Executive.xml" (normalized: "c:\\program files\\microsoft office\\document themes 14\\theme colors\\executive.xml"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x178 [0121.771] GetFileType (hFile=0x178) returned 0x1 [0121.771] GetFileType (hFile=0x178) returned 0x1 [0121.771] GetFileSize (in: hFile=0x178, lpFileSizeHigh=0x31e780 | out: lpFileSizeHigh=0x31e780*=0x0) returned 0x3d0 [0121.771] ReadFile (in: hFile=0x178, lpBuffer=0x292044c, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x31e72c, lpOverlapped=0x0 | out: lpBuffer=0x292044c*, lpNumberOfBytesRead=0x31e72c*=0x3d0, lpOverlapped=0x0) returned 1 [0121.772] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Colors\\Executive.xml" (normalized: "c:\\program files\\microsoft office\\document themes 14\\theme colors\\executive.xml"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x178 [0121.773] GetFileType (hFile=0x178) returned 0x1 [0121.773] GetFileType (hFile=0x178) returned 0x1 [0121.773] WriteFile (in: hFile=0x178, lpBuffer=0x2922d84*, nNumberOfBytesToWrite=0x3d0, lpNumberOfBytesWritten=0x31e6f4, lpOverlapped=0x0 | out: lpBuffer=0x2922d84*, lpNumberOfBytesWritten=0x31e6f4*=0x3d0, lpOverlapped=0x0) returned 1 [0121.774] MoveFileW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Colors\\Executive.xml" (normalized: "c:\\program files\\microsoft office\\document themes 14\\theme colors\\executive.xml"), lpNewFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Colors\\Executive.xml.[neftet@tutanota.com].boom" (normalized: "c:\\program files\\microsoft office\\document themes 14\\theme colors\\executive.xml.[neftet@tutanota.com].boom")) returned 1 [0121.775] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Colors\\Flow.xml" (normalized: "c:\\program files\\microsoft office\\document themes 14\\theme colors\\flow.xml"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x178 [0121.775] GetFileType (hFile=0x178) returned 0x1 [0121.777] MoveFileW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Colors\\Flow.xml" (normalized: "c:\\program files\\microsoft office\\document themes 14\\theme colors\\flow.xml"), lpNewFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Colors\\Flow.xml.[neftet@tutanota.com].boom" (normalized: "c:\\program files\\microsoft office\\document themes 14\\theme colors\\flow.xml.[neftet@tutanota.com].boom")) returned 1 [0121.780] MoveFileW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Colors\\Foundry.xml" (normalized: "c:\\program files\\microsoft office\\document themes 14\\theme colors\\foundry.xml"), lpNewFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Colors\\Foundry.xml.[neftet@tutanota.com].boom" (normalized: "c:\\program files\\microsoft office\\document themes 14\\theme colors\\foundry.xml.[neftet@tutanota.com].boom")) returned 1 [0121.783] MoveFileW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Colors\\Grayscale.xml" (normalized: "c:\\program files\\microsoft office\\document themes 14\\theme colors\\grayscale.xml"), lpNewFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Colors\\Grayscale.xml.[neftet@tutanota.com].boom" (normalized: "c:\\program files\\microsoft office\\document themes 14\\theme colors\\grayscale.xml.[neftet@tutanota.com].boom")) returned 1 [0121.785] MoveFileW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Colors\\Grid.xml" (normalized: "c:\\program files\\microsoft office\\document themes 14\\theme colors\\grid.xml"), lpNewFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Colors\\Grid.xml.[neftet@tutanota.com].boom" (normalized: "c:\\program files\\microsoft office\\document themes 14\\theme colors\\grid.xml.[neftet@tutanota.com].boom")) returned 1 [0121.788] MoveFileW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Colors\\Hardcover.xml" (normalized: "c:\\program files\\microsoft office\\document themes 14\\theme colors\\hardcover.xml"), lpNewFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Colors\\Hardcover.xml.[neftet@tutanota.com].boom" (normalized: "c:\\program files\\microsoft office\\document themes 14\\theme colors\\hardcover.xml.[neftet@tutanota.com].boom")) returned 1 [0121.791] MoveFileW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Colors\\Horizon.xml" (normalized: "c:\\program files\\microsoft office\\document themes 14\\theme colors\\horizon.xml"), lpNewFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Colors\\Horizon.xml.[neftet@tutanota.com].boom" (normalized: "c:\\program files\\microsoft office\\document themes 14\\theme colors\\horizon.xml.[neftet@tutanota.com].boom")) returned 1 [0121.794] MoveFileW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Colors\\Median.xml" (normalized: "c:\\program files\\microsoft office\\document themes 14\\theme colors\\median.xml"), lpNewFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Colors\\Median.xml.[neftet@tutanota.com].boom" (normalized: "c:\\program files\\microsoft office\\document themes 14\\theme colors\\median.xml.[neftet@tutanota.com].boom")) returned 1 [0121.797] MoveFileW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Colors\\Metro.xml" (normalized: "c:\\program files\\microsoft office\\document themes 14\\theme colors\\metro.xml"), lpNewFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Colors\\Metro.xml.[neftet@tutanota.com].boom" (normalized: "c:\\program files\\microsoft office\\document themes 14\\theme colors\\metro.xml.[neftet@tutanota.com].boom")) returned 1 [0121.799] MoveFileW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Colors\\Module.xml" (normalized: "c:\\program files\\microsoft office\\document themes 14\\theme colors\\module.xml"), lpNewFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Colors\\Module.xml.[neftet@tutanota.com].boom" (normalized: "c:\\program files\\microsoft office\\document themes 14\\theme colors\\module.xml.[neftet@tutanota.com].boom")) returned 1 [0121.802] MoveFileW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Colors\\Newsprint.xml" (normalized: "c:\\program files\\microsoft office\\document themes 14\\theme colors\\newsprint.xml"), lpNewFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Colors\\Newsprint.xml.[neftet@tutanota.com].boom" (normalized: "c:\\program files\\microsoft office\\document themes 14\\theme colors\\newsprint.xml.[neftet@tutanota.com].boom")) returned 1 [0121.806] MoveFileW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Colors\\Opulent.xml" (normalized: "c:\\program files\\microsoft office\\document themes 14\\theme colors\\opulent.xml"), lpNewFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Colors\\Opulent.xml.[neftet@tutanota.com].boom" (normalized: "c:\\program files\\microsoft office\\document themes 14\\theme colors\\opulent.xml.[neftet@tutanota.com].boom")) returned 1 [0121.811] MoveFileW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Colors\\Oriel.xml" (normalized: "c:\\program files\\microsoft office\\document themes 14\\theme colors\\oriel.xml"), lpNewFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Colors\\Oriel.xml.[neftet@tutanota.com].boom" (normalized: "c:\\program files\\microsoft office\\document themes 14\\theme colors\\oriel.xml.[neftet@tutanota.com].boom")) returned 1 [0121.823] MoveFileW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Colors\\Origin.xml" (normalized: "c:\\program files\\microsoft office\\document themes 14\\theme colors\\origin.xml"), lpNewFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Colors\\Origin.xml.[neftet@tutanota.com].boom" (normalized: "c:\\program files\\microsoft office\\document themes 14\\theme colors\\origin.xml.[neftet@tutanota.com].boom")) returned 1 [0121.826] MoveFileW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Colors\\Paper.xml" (normalized: "c:\\program files\\microsoft office\\document themes 14\\theme colors\\paper.xml"), lpNewFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Colors\\Paper.xml.[neftet@tutanota.com].boom" (normalized: "c:\\program files\\microsoft office\\document themes 14\\theme colors\\paper.xml.[neftet@tutanota.com].boom")) returned 1 [0121.829] MoveFileW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Colors\\Perspective.xml" (normalized: "c:\\program files\\microsoft office\\document themes 14\\theme colors\\perspective.xml"), lpNewFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Colors\\Perspective.xml.[neftet@tutanota.com].boom" (normalized: "c:\\program files\\microsoft office\\document themes 14\\theme colors\\perspective.xml.[neftet@tutanota.com].boom")) returned 1 [0121.832] MoveFileW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Colors\\Pushpin.xml" (normalized: "c:\\program files\\microsoft office\\document themes 14\\theme colors\\pushpin.xml"), lpNewFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Colors\\Pushpin.xml.[neftet@tutanota.com].boom" (normalized: "c:\\program files\\microsoft office\\document themes 14\\theme colors\\pushpin.xml.[neftet@tutanota.com].boom")) returned 1 [0121.834] MoveFileW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Colors\\Slipstream.xml" (normalized: "c:\\program files\\microsoft office\\document themes 14\\theme colors\\slipstream.xml"), lpNewFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Colors\\Slipstream.xml.[neftet@tutanota.com].boom" (normalized: "c:\\program files\\microsoft office\\document themes 14\\theme colors\\slipstream.xml.[neftet@tutanota.com].boom")) returned 1 [0121.837] MoveFileW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Colors\\Solstice.xml" (normalized: "c:\\program files\\microsoft office\\document themes 14\\theme colors\\solstice.xml"), lpNewFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Colors\\Solstice.xml.[neftet@tutanota.com].boom" (normalized: "c:\\program files\\microsoft office\\document themes 14\\theme colors\\solstice.xml.[neftet@tutanota.com].boom")) returned 1 [0121.840] MoveFileW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Colors\\Technic.xml" (normalized: "c:\\program files\\microsoft office\\document themes 14\\theme colors\\technic.xml"), lpNewFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Colors\\Technic.xml.[neftet@tutanota.com].boom" (normalized: "c:\\program files\\microsoft office\\document themes 14\\theme colors\\technic.xml.[neftet@tutanota.com].boom")) returned 1 [0121.843] MoveFileW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Colors\\Thatch.xml" (normalized: "c:\\program files\\microsoft office\\document themes 14\\theme colors\\thatch.xml"), lpNewFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Colors\\Thatch.xml.[neftet@tutanota.com].boom" (normalized: "c:\\program files\\microsoft office\\document themes 14\\theme colors\\thatch.xml.[neftet@tutanota.com].boom")) returned 1 [0121.849] MoveFileW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Colors\\Trek.xml" (normalized: "c:\\program files\\microsoft office\\document themes 14\\theme colors\\trek.xml"), lpNewFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Colors\\Trek.xml.[neftet@tutanota.com].boom" (normalized: "c:\\program files\\microsoft office\\document themes 14\\theme colors\\trek.xml.[neftet@tutanota.com].boom")) returned 1 [0121.851] MoveFileW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Colors\\Urban.xml" (normalized: "c:\\program files\\microsoft office\\document themes 14\\theme colors\\urban.xml"), lpNewFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Colors\\Urban.xml.[neftet@tutanota.com].boom" (normalized: "c:\\program files\\microsoft office\\document themes 14\\theme colors\\urban.xml.[neftet@tutanota.com].boom")) returned 1 [0121.855] MoveFileW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Colors\\Verve.xml" (normalized: "c:\\program files\\microsoft office\\document themes 14\\theme colors\\verve.xml"), lpNewFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Colors\\Verve.xml.[neftet@tutanota.com].boom" (normalized: "c:\\program files\\microsoft office\\document themes 14\\theme colors\\verve.xml.[neftet@tutanota.com].boom")) returned 1 [0121.858] MoveFileW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Colors\\Waveform.xml" (normalized: "c:\\program files\\microsoft office\\document themes 14\\theme colors\\waveform.xml"), lpNewFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Colors\\Waveform.xml.[neftet@tutanota.com].boom" (normalized: "c:\\program files\\microsoft office\\document themes 14\\theme colors\\waveform.xml.[neftet@tutanota.com].boom")) returned 1 [0121.864] MoveFileW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Fonts\\Adjacency.xml" (normalized: "c:\\program files\\microsoft office\\document themes 14\\theme fonts\\adjacency.xml"), lpNewFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Fonts\\Adjacency.xml.[neftet@tutanota.com].boom" (normalized: "c:\\program files\\microsoft office\\document themes 14\\theme fonts\\adjacency.xml.[neftet@tutanota.com].boom")) returned 1 [0121.866] MoveFileW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Fonts\\Angles.xml" (normalized: "c:\\program files\\microsoft office\\document themes 14\\theme fonts\\angles.xml"), lpNewFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Fonts\\Angles.xml.[neftet@tutanota.com].boom" (normalized: "c:\\program files\\microsoft office\\document themes 14\\theme fonts\\angles.xml.[neftet@tutanota.com].boom")) returned 1 [0121.871] MoveFileW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Fonts\\Apex.xml" (normalized: "c:\\program files\\microsoft office\\document themes 14\\theme fonts\\apex.xml"), lpNewFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Fonts\\Apex.xml.[neftet@tutanota.com].boom" (normalized: "c:\\program files\\microsoft office\\document themes 14\\theme fonts\\apex.xml.[neftet@tutanota.com].boom")) returned 1 [0121.874] MoveFileW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Fonts\\Apothecary.xml" (normalized: "c:\\program files\\microsoft office\\document themes 14\\theme fonts\\apothecary.xml"), lpNewFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Fonts\\Apothecary.xml.[neftet@tutanota.com].boom" (normalized: "c:\\program files\\microsoft office\\document themes 14\\theme fonts\\apothecary.xml.[neftet@tutanota.com].boom")) returned 1 [0121.877] MoveFileW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Fonts\\Aspect.xml" (normalized: "c:\\program files\\microsoft office\\document themes 14\\theme fonts\\aspect.xml"), lpNewFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Fonts\\Aspect.xml.[neftet@tutanota.com].boom" (normalized: "c:\\program files\\microsoft office\\document themes 14\\theme fonts\\aspect.xml.[neftet@tutanota.com].boom")) returned 1 [0121.880] MoveFileW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Fonts\\Austin.xml" (normalized: "c:\\program files\\microsoft office\\document themes 14\\theme fonts\\austin.xml"), lpNewFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Fonts\\Austin.xml.[neftet@tutanota.com].boom" (normalized: "c:\\program files\\microsoft office\\document themes 14\\theme fonts\\austin.xml.[neftet@tutanota.com].boom")) returned 1 [0121.882] MoveFileW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Fonts\\Black Tie.xml" (normalized: "c:\\program files\\microsoft office\\document themes 14\\theme fonts\\black tie.xml"), lpNewFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Fonts\\Black Tie.xml.[neftet@tutanota.com].boom" (normalized: "c:\\program files\\microsoft office\\document themes 14\\theme fonts\\black tie.xml.[neftet@tutanota.com].boom")) returned 1 [0121.885] MoveFileW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Fonts\\Civic.xml" (normalized: "c:\\program files\\microsoft office\\document themes 14\\theme fonts\\civic.xml"), lpNewFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Fonts\\Civic.xml.[neftet@tutanota.com].boom" (normalized: "c:\\program files\\microsoft office\\document themes 14\\theme fonts\\civic.xml.[neftet@tutanota.com].boom")) returned 1 [0121.889] MoveFileW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Fonts\\Clarity.xml" (normalized: "c:\\program files\\microsoft office\\document themes 14\\theme fonts\\clarity.xml"), lpNewFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Fonts\\Clarity.xml.[neftet@tutanota.com].boom" (normalized: "c:\\program files\\microsoft office\\document themes 14\\theme fonts\\clarity.xml.[neftet@tutanota.com].boom")) returned 1 [0121.892] MoveFileW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Fonts\\Composite.xml" (normalized: "c:\\program files\\microsoft office\\document themes 14\\theme fonts\\composite.xml"), lpNewFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Fonts\\Composite.xml.[neftet@tutanota.com].boom" (normalized: "c:\\program files\\microsoft office\\document themes 14\\theme fonts\\composite.xml.[neftet@tutanota.com].boom")) returned 1 [0121.895] MoveFileW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Fonts\\Concourse.xml" (normalized: "c:\\program files\\microsoft office\\document themes 14\\theme fonts\\concourse.xml"), lpNewFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Fonts\\Concourse.xml.[neftet@tutanota.com].boom" (normalized: "c:\\program files\\microsoft office\\document themes 14\\theme fonts\\concourse.xml.[neftet@tutanota.com].boom")) returned 1 [0121.898] MoveFileW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Fonts\\Couture.xml" (normalized: "c:\\program files\\microsoft office\\document themes 14\\theme fonts\\couture.xml"), lpNewFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Fonts\\Couture.xml.[neftet@tutanota.com].boom" (normalized: "c:\\program files\\microsoft office\\document themes 14\\theme fonts\\couture.xml.[neftet@tutanota.com].boom")) returned 1 [0121.901] MoveFileW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Fonts\\Elemental.xml" (normalized: "c:\\program files\\microsoft office\\document themes 14\\theme fonts\\elemental.xml"), lpNewFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Fonts\\Elemental.xml.[neftet@tutanota.com].boom" (normalized: "c:\\program files\\microsoft office\\document themes 14\\theme fonts\\elemental.xml.[neftet@tutanota.com].boom")) returned 1 [0121.904] MoveFileW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Fonts\\Equity.xml" (normalized: "c:\\program files\\microsoft office\\document themes 14\\theme fonts\\equity.xml"), lpNewFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Fonts\\Equity.xml.[neftet@tutanota.com].boom" (normalized: "c:\\program files\\microsoft office\\document themes 14\\theme fonts\\equity.xml.[neftet@tutanota.com].boom")) returned 1 [0121.907] MoveFileW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Fonts\\Essential.xml" (normalized: "c:\\program files\\microsoft office\\document themes 14\\theme fonts\\essential.xml"), lpNewFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Fonts\\Essential.xml.[neftet@tutanota.com].boom" (normalized: "c:\\program files\\microsoft office\\document themes 14\\theme fonts\\essential.xml.[neftet@tutanota.com].boom")) returned 1 [0121.910] MoveFileW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Fonts\\Executive.xml" (normalized: "c:\\program files\\microsoft office\\document themes 14\\theme fonts\\executive.xml"), lpNewFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Fonts\\Executive.xml.[neftet@tutanota.com].boom" (normalized: "c:\\program files\\microsoft office\\document themes 14\\theme fonts\\executive.xml.[neftet@tutanota.com].boom")) returned 1 [0121.913] MoveFileW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Fonts\\Flow.xml" (normalized: "c:\\program files\\microsoft office\\document themes 14\\theme fonts\\flow.xml"), lpNewFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Fonts\\Flow.xml.[neftet@tutanota.com].boom" (normalized: "c:\\program files\\microsoft office\\document themes 14\\theme fonts\\flow.xml.[neftet@tutanota.com].boom")) returned 1 [0121.915] MoveFileW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Fonts\\Foundry.xml" (normalized: "c:\\program files\\microsoft office\\document themes 14\\theme fonts\\foundry.xml"), lpNewFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Fonts\\Foundry.xml.[neftet@tutanota.com].boom" (normalized: "c:\\program files\\microsoft office\\document themes 14\\theme fonts\\foundry.xml.[neftet@tutanota.com].boom")) returned 1 [0121.919] MoveFileW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Fonts\\Grid.xml" (normalized: "c:\\program files\\microsoft office\\document themes 14\\theme fonts\\grid.xml"), lpNewFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Fonts\\Grid.xml.[neftet@tutanota.com].boom" (normalized: "c:\\program files\\microsoft office\\document themes 14\\theme fonts\\grid.xml.[neftet@tutanota.com].boom")) returned 1 [0121.921] MoveFileW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Fonts\\Hardcover.xml" (normalized: "c:\\program files\\microsoft office\\document themes 14\\theme fonts\\hardcover.xml"), lpNewFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Fonts\\Hardcover.xml.[neftet@tutanota.com].boom" (normalized: "c:\\program files\\microsoft office\\document themes 14\\theme fonts\\hardcover.xml.[neftet@tutanota.com].boom")) returned 1 [0121.924] MoveFileW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Fonts\\Horizon.xml" (normalized: "c:\\program files\\microsoft office\\document themes 14\\theme fonts\\horizon.xml"), lpNewFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Fonts\\Horizon.xml.[neftet@tutanota.com].boom" (normalized: "c:\\program files\\microsoft office\\document themes 14\\theme fonts\\horizon.xml.[neftet@tutanota.com].boom")) returned 1 [0121.927] MoveFileW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Fonts\\Median.xml" (normalized: "c:\\program files\\microsoft office\\document themes 14\\theme fonts\\median.xml"), lpNewFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Fonts\\Median.xml.[neftet@tutanota.com].boom" (normalized: "c:\\program files\\microsoft office\\document themes 14\\theme fonts\\median.xml.[neftet@tutanota.com].boom")) returned 1 [0121.930] MoveFileW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Fonts\\Metro.xml" (normalized: "c:\\program files\\microsoft office\\document themes 14\\theme fonts\\metro.xml"), lpNewFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Fonts\\Metro.xml.[neftet@tutanota.com].boom" (normalized: "c:\\program files\\microsoft office\\document themes 14\\theme fonts\\metro.xml.[neftet@tutanota.com].boom")) returned 1 [0121.933] MoveFileW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Fonts\\Module.xml" (normalized: "c:\\program files\\microsoft office\\document themes 14\\theme fonts\\module.xml"), lpNewFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Fonts\\Module.xml.[neftet@tutanota.com].boom" (normalized: "c:\\program files\\microsoft office\\document themes 14\\theme fonts\\module.xml.[neftet@tutanota.com].boom")) returned 1 [0121.935] MoveFileW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Fonts\\Newsprint.xml" (normalized: "c:\\program files\\microsoft office\\document themes 14\\theme fonts\\newsprint.xml"), lpNewFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Fonts\\Newsprint.xml.[neftet@tutanota.com].boom" (normalized: "c:\\program files\\microsoft office\\document themes 14\\theme fonts\\newsprint.xml.[neftet@tutanota.com].boom")) returned 1 [0121.940] MoveFileW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Fonts\\Office 2.xml" (normalized: "c:\\program files\\microsoft office\\document themes 14\\theme fonts\\office 2.xml"), lpNewFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Fonts\\Office 2.xml.[neftet@tutanota.com].boom" (normalized: "c:\\program files\\microsoft office\\document themes 14\\theme fonts\\office 2.xml.[neftet@tutanota.com].boom")) returned 1 [0121.942] MoveFileW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Fonts\\Office Classic 2.xml" (normalized: "c:\\program files\\microsoft office\\document themes 14\\theme fonts\\office classic 2.xml"), lpNewFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Fonts\\Office Classic 2.xml.[neftet@tutanota.com].boom" (normalized: "c:\\program files\\microsoft office\\document themes 14\\theme fonts\\office classic 2.xml.[neftet@tutanota.com].boom")) returned 1 [0121.949] MoveFileW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Fonts\\Office Classic.xml" (normalized: "c:\\program files\\microsoft office\\document themes 14\\theme fonts\\office classic.xml"), lpNewFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Fonts\\Office Classic.xml.[neftet@tutanota.com].boom" (normalized: "c:\\program files\\microsoft office\\document themes 14\\theme fonts\\office classic.xml.[neftet@tutanota.com].boom")) returned 1 [0121.959] MoveFileW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Fonts\\Opulent.xml" (normalized: "c:\\program files\\microsoft office\\document themes 14\\theme fonts\\opulent.xml"), lpNewFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Fonts\\Opulent.xml.[neftet@tutanota.com].boom" (normalized: "c:\\program files\\microsoft office\\document themes 14\\theme fonts\\opulent.xml.[neftet@tutanota.com].boom")) returned 1 [0121.963] MoveFileW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Fonts\\Oriel.xml" (normalized: "c:\\program files\\microsoft office\\document themes 14\\theme fonts\\oriel.xml"), lpNewFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Fonts\\Oriel.xml.[neftet@tutanota.com].boom" (normalized: "c:\\program files\\microsoft office\\document themes 14\\theme fonts\\oriel.xml.[neftet@tutanota.com].boom")) returned 1 [0121.965] MoveFileW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Fonts\\Origin.xml" (normalized: "c:\\program files\\microsoft office\\document themes 14\\theme fonts\\origin.xml"), lpNewFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Fonts\\Origin.xml.[neftet@tutanota.com].boom" (normalized: "c:\\program files\\microsoft office\\document themes 14\\theme fonts\\origin.xml.[neftet@tutanota.com].boom")) returned 1 [0121.968] MoveFileW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Fonts\\Paper.xml" (normalized: "c:\\program files\\microsoft office\\document themes 14\\theme fonts\\paper.xml"), lpNewFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Fonts\\Paper.xml.[neftet@tutanota.com].boom" (normalized: "c:\\program files\\microsoft office\\document themes 14\\theme fonts\\paper.xml.[neftet@tutanota.com].boom")) returned 1 [0121.971] MoveFileW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Fonts\\Perspective.xml" (normalized: "c:\\program files\\microsoft office\\document themes 14\\theme fonts\\perspective.xml"), lpNewFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Fonts\\Perspective.xml.[neftet@tutanota.com].boom" (normalized: "c:\\program files\\microsoft office\\document themes 14\\theme fonts\\perspective.xml.[neftet@tutanota.com].boom")) returned 1 [0121.974] MoveFileW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Fonts\\Pushpin.xml" (normalized: "c:\\program files\\microsoft office\\document themes 14\\theme fonts\\pushpin.xml"), lpNewFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Fonts\\Pushpin.xml.[neftet@tutanota.com].boom" (normalized: "c:\\program files\\microsoft office\\document themes 14\\theme fonts\\pushpin.xml.[neftet@tutanota.com].boom")) returned 1 [0121.977] MoveFileW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Fonts\\Slipstream.xml" (normalized: "c:\\program files\\microsoft office\\document themes 14\\theme fonts\\slipstream.xml"), lpNewFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Fonts\\Slipstream.xml.[neftet@tutanota.com].boom" (normalized: "c:\\program files\\microsoft office\\document themes 14\\theme fonts\\slipstream.xml.[neftet@tutanota.com].boom")) returned 1 [0121.980] MoveFileW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Fonts\\Solstice.xml" (normalized: "c:\\program files\\microsoft office\\document themes 14\\theme fonts\\solstice.xml"), lpNewFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Fonts\\Solstice.xml.[neftet@tutanota.com].boom" (normalized: "c:\\program files\\microsoft office\\document themes 14\\theme fonts\\solstice.xml.[neftet@tutanota.com].boom")) returned 1 [0121.983] MoveFileW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Fonts\\Technic.xml" (normalized: "c:\\program files\\microsoft office\\document themes 14\\theme fonts\\technic.xml"), lpNewFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Fonts\\Technic.xml.[neftet@tutanota.com].boom" (normalized: "c:\\program files\\microsoft office\\document themes 14\\theme fonts\\technic.xml.[neftet@tutanota.com].boom")) returned 1 [0121.985] MoveFileW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Fonts\\Thatch.xml" (normalized: "c:\\program files\\microsoft office\\document themes 14\\theme fonts\\thatch.xml"), lpNewFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Fonts\\Thatch.xml.[neftet@tutanota.com].boom" (normalized: "c:\\program files\\microsoft office\\document themes 14\\theme fonts\\thatch.xml.[neftet@tutanota.com].boom")) returned 1 [0121.988] MoveFileW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Fonts\\Trek.xml" (normalized: "c:\\program files\\microsoft office\\document themes 14\\theme fonts\\trek.xml"), lpNewFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Fonts\\Trek.xml.[neftet@tutanota.com].boom" (normalized: "c:\\program files\\microsoft office\\document themes 14\\theme fonts\\trek.xml.[neftet@tutanota.com].boom")) returned 1 [0121.991] MoveFileW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Fonts\\Urban.xml" (normalized: "c:\\program files\\microsoft office\\document themes 14\\theme fonts\\urban.xml"), lpNewFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Fonts\\Urban.xml.[neftet@tutanota.com].boom" (normalized: "c:\\program files\\microsoft office\\document themes 14\\theme fonts\\urban.xml.[neftet@tutanota.com].boom")) returned 1 [0121.994] MoveFileW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Fonts\\Verve.xml" (normalized: "c:\\program files\\microsoft office\\document themes 14\\theme fonts\\verve.xml"), lpNewFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Fonts\\Verve.xml.[neftet@tutanota.com].boom" (normalized: "c:\\program files\\microsoft office\\document themes 14\\theme fonts\\verve.xml.[neftet@tutanota.com].boom")) returned 1 [0121.997] MoveFileW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Fonts\\Waveform.xml" (normalized: "c:\\program files\\microsoft office\\document themes 14\\theme fonts\\waveform.xml"), lpNewFileName="C:\\Program Files\\Microsoft Office\\Document Themes 14\\Theme Fonts\\Waveform.xml.[neftet@tutanota.com].boom" (normalized: "c:\\program files\\microsoft office\\document themes 14\\theme fonts\\waveform.xml.[neftet@tutanota.com].boom")) returned 1 [0122.037] MoveFileW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\Office14\\Microsoft.BusinessData.xml" (normalized: "c:\\program files\\microsoft office\\office14\\microsoft.businessdata.xml"), lpNewFileName="C:\\Program Files\\Microsoft Office\\Office14\\Microsoft.BusinessData.xml.[neftet@tutanota.com].boom" (normalized: "c:\\program files\\microsoft office\\office14\\microsoft.businessdata.xml.[neftet@tutanota.com].boom")) returned 1 [0122.041] MoveFileW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\Office14\\Microsoft.Office.BusinessApplications.Runtime.xml" (normalized: "c:\\program files\\microsoft office\\office14\\microsoft.office.businessapplications.runtime.xml"), lpNewFileName="C:\\Program Files\\Microsoft Office\\Office14\\Microsoft.Office.BusinessApplications.Runtime.xml.[neftet@tutanota.com].boom" (normalized: "c:\\program files\\microsoft office\\office14\\microsoft.office.businessapplications.runtime.xml.[neftet@tutanota.com].boom")) returned 1 [0122.044] MoveFileW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\Office14\\Microsoft.Office.BusinessApplications.RuntimeUi.xml" (normalized: "c:\\program files\\microsoft office\\office14\\microsoft.office.businessapplications.runtimeui.xml"), lpNewFileName="C:\\Program Files\\Microsoft Office\\Office14\\Microsoft.Office.BusinessApplications.RuntimeUi.xml.[neftet@tutanota.com].boom" (normalized: "c:\\program files\\microsoft office\\office14\\microsoft.office.businessapplications.runtimeui.xml.[neftet@tutanota.com].boom")) returned 1 [0122.056] MoveFileW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\Office14\\Microsoft.Office.BusinessData.xml" (normalized: "c:\\program files\\microsoft office\\office14\\microsoft.office.businessdata.xml"), lpNewFileName="C:\\Program Files\\Microsoft Office\\Office14\\Microsoft.Office.BusinessData.xml.[neftet@tutanota.com].boom" (normalized: "c:\\program files\\microsoft office\\office14\\microsoft.office.businessdata.xml.[neftet@tutanota.com].boom")) returned 1 [0122.124] MoveFileW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\Office14\\Microsoft.Office.Interop.InfoPath.SemiTrust.xml" (normalized: "c:\\program files\\microsoft office\\office14\\microsoft.office.interop.infopath.semitrust.xml"), lpNewFileName="C:\\Program Files\\Microsoft Office\\Office14\\Microsoft.Office.Interop.InfoPath.SemiTrust.xml.[neftet@tutanota.com].boom" (normalized: "c:\\program files\\microsoft office\\office14\\microsoft.office.interop.infopath.semitrust.xml.[neftet@tutanota.com].boom")) returned 1 [0122.131] ReadFile (in: hFile=0x178, lpBuffer=0x36194b0, nNumberOfBytesToRead=0x837e0, lpNumberOfBytesRead=0x31e7a4, lpOverlapped=0x0 | out: lpBuffer=0x36194b0*, lpNumberOfBytesRead=0x31e7a4*=0x837e0, lpOverlapped=0x0) returned 1 [0122.158] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e6dc) returned 1 [0122.163] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e6d8) returned 1 [0122.179] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e77c) returned 1 [0122.179] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e778) returned 1 [0122.179] MoveFileW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\Office14\\Microsoft.Office.Interop.InfoPath.Xml.xml" (normalized: "c:\\program files\\microsoft office\\office14\\microsoft.office.interop.infopath.xml.xml"), lpNewFileName="C:\\Program Files\\Microsoft Office\\Office14\\Microsoft.Office.Interop.InfoPath.Xml.xml.[neftet@tutanota.com].boom" (normalized: "c:\\program files\\microsoft office\\office14\\microsoft.office.interop.infopath.xml.xml.[neftet@tutanota.com].boom")) returned 1 [0122.180] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e6f0) returned 1 [0122.180] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e6ec) returned 1 [0122.190] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e6dc) returned 1 [0122.192] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e6d8) returned 1 [0122.195] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e77c) returned 1 [0122.195] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e778) returned 1 [0122.195] MoveFileW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\Office14\\Microsoft.SharePoint.BusinessData.Administration.Client.xml" (normalized: "c:\\program files\\microsoft office\\office14\\microsoft.sharepoint.businessdata.administration.client.xml"), lpNewFileName="C:\\Program Files\\Microsoft Office\\Office14\\Microsoft.SharePoint.BusinessData.Administration.Client.xml.[neftet@tutanota.com].boom" (normalized: "c:\\program files\\microsoft office\\office14\\microsoft.sharepoint.businessdata.administration.client.xml.[neftet@tutanota.com].boom")) returned 1 [0122.197] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e6f0) returned 1 [0122.197] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e6ec) returned 1 [0122.197] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e6dc) returned 1 [0122.198] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e6d8) returned 1 [0122.199] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e77c) returned 1 [0122.199] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e778) returned 1 [0122.199] MoveFileW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\Office14\\SketchPadTestSchema.xml" (normalized: "c:\\program files\\microsoft office\\office14\\sketchpadtestschema.xml"), lpNewFileName="C:\\Program Files\\Microsoft Office\\Office14\\SketchPadTestSchema.xml.[neftet@tutanota.com].boom" (normalized: "c:\\program files\\microsoft office\\office14\\sketchpadtestschema.xml.[neftet@tutanota.com].boom")) returned 1 [0122.200] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e6f0) returned 1 [0122.200] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e6ec) returned 1 [0122.205] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e6dc) returned 1 [0122.206] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e6d8) returned 1 [0122.208] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e77c) returned 1 [0122.208] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e778) returned 1 [0122.208] MoveFileW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\Office14\\SplashScreen.bmp" (normalized: "c:\\program files\\microsoft office\\office14\\splashscreen.bmp"), lpNewFileName="C:\\Program Files\\Microsoft Office\\Office14\\SplashScreen.bmp.[neftet@tutanota.com].boom" (normalized: "c:\\program files\\microsoft office\\office14\\splashscreen.bmp.[neftet@tutanota.com].boom")) returned 1 [0122.209] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e7bc) returned 1 [0122.211] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e77c) returned 1 [0122.211] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e788) returned 1 [0122.211] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e7bc) returned 1 [0122.212] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e77c) returned 1 [0122.212] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e788) returned 1 [0122.212] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e744) returned 1 [0122.213] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e704) returned 1 [0122.213] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e710) returned 1 [0122.213] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e744) returned 1 [0122.213] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e704) returned 1 [0122.213] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e710) returned 1 [0122.213] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e744) returned 1 [0122.214] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e704) returned 1 [0122.214] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e710) returned 1 [0122.214] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e744) returned 1 [0122.216] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e704) returned 1 [0122.216] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e710) returned 1 [0122.216] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e744) returned 1 [0122.216] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e704) returned 1 [0122.216] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e710) returned 1 [0122.216] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e744) returned 1 [0122.216] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e704) returned 1 [0122.216] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e710) returned 1 [0122.216] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e6cc) returned 1 [0122.216] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e68c) returned 1 [0122.216] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e698) returned 1 [0122.217] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e6cc) returned 1 [0122.217] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e68c) returned 1 [0122.217] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e698) returned 1 [0122.217] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e588) returned 1 [0122.217] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e584) returned 1 [0122.218] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e574) returned 1 [0122.218] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e570) returned 1 [0122.220] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e614) returned 1 [0122.220] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e610) returned 1 [0122.220] MoveFileW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\Adobe.css" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\grooveforms5\\formsstyles\\adobe.css"), lpNewFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\Adobe.css.[neftet@tutanota.com].boom" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\grooveforms5\\formsstyles\\adobe.css.[neftet@tutanota.com].boom")) returned 1 [0122.221] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e588) returned 1 [0122.221] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e584) returned 1 [0122.222] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e574) returned 1 [0122.223] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e570) returned 1 [0122.224] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e614) returned 1 [0122.224] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e610) returned 1 [0122.224] MoveFileW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\Americana.css" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\grooveforms5\\formsstyles\\americana.css"), lpNewFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\Americana.css.[neftet@tutanota.com].boom" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\grooveforms5\\formsstyles\\americana.css.[neftet@tutanota.com].boom")) returned 1 [0122.225] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e588) returned 1 [0122.225] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e584) returned 1 [0122.226] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e574) returned 1 [0122.227] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e570) returned 1 [0122.227] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e614) returned 1 [0122.227] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e610) returned 1 [0122.227] MoveFileW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\BabyBlue.css" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\grooveforms5\\formsstyles\\babyblue.css"), lpNewFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\BabyBlue.css.[neftet@tutanota.com].boom" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\grooveforms5\\formsstyles\\babyblue.css.[neftet@tutanota.com].boom")) returned 1 [0122.228] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e588) returned 1 [0122.228] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e584) returned 1 [0122.229] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e574) returned 1 [0122.230] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e570) returned 1 [0122.231] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e614) returned 1 [0122.231] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e610) returned 1 [0122.231] MoveFileW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\Beige.css" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\grooveforms5\\formsstyles\\beige.css"), lpNewFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\Beige.css.[neftet@tutanota.com].boom" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\grooveforms5\\formsstyles\\beige.css.[neftet@tutanota.com].boom")) returned 1 [0122.232] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e588) returned 1 [0122.232] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e584) returned 1 [0122.233] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e574) returned 1 [0122.233] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e570) returned 1 [0122.236] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e614) returned 1 [0122.236] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e610) returned 1 [0122.236] MoveFileW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\Biscay.css" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\grooveforms5\\formsstyles\\biscay.css"), lpNewFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\Biscay.css.[neftet@tutanota.com].boom" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\grooveforms5\\formsstyles\\biscay.css.[neftet@tutanota.com].boom")) returned 1 [0122.237] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e588) returned 1 [0122.237] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e584) returned 1 [0122.238] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e574) returned 1 [0122.239] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e570) returned 1 [0122.240] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e614) returned 1 [0122.240] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e610) returned 1 [0122.240] MoveFileW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\BrightOrange.css" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\grooveforms5\\formsstyles\\brightorange.css"), lpNewFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\BrightOrange.css.[neftet@tutanota.com].boom" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\grooveforms5\\formsstyles\\brightorange.css.[neftet@tutanota.com].boom")) returned 1 [0122.244] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e588) returned 1 [0122.244] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e584) returned 1 [0122.245] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e574) returned 1 [0122.245] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e570) returned 1 [0122.246] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e614) returned 1 [0122.246] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e610) returned 1 [0122.246] MoveFileW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\BrightYellow.css" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\grooveforms5\\formsstyles\\brightyellow.css"), lpNewFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\BrightYellow.css.[neftet@tutanota.com].boom" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\grooveforms5\\formsstyles\\brightyellow.css.[neftet@tutanota.com].boom")) returned 1 [0122.247] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e588) returned 1 [0122.247] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e584) returned 1 [0122.248] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e574) returned 1 [0122.249] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e570) returned 1 [0122.249] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e614) returned 1 [0122.249] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e610) returned 1 [0122.249] MoveFileW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\Casual.css" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\grooveforms5\\formsstyles\\casual.css"), lpNewFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\Casual.css.[neftet@tutanota.com].boom" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\grooveforms5\\formsstyles\\casual.css.[neftet@tutanota.com].boom")) returned 1 [0122.250] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e588) returned 1 [0122.250] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e584) returned 1 [0122.251] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e574) returned 1 [0122.252] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e570) returned 1 [0122.252] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e614) returned 1 [0122.252] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e610) returned 1 [0122.252] MoveFileW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\Desert.css" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\grooveforms5\\formsstyles\\desert.css"), lpNewFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\Desert.css.[neftet@tutanota.com].boom" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\grooveforms5\\formsstyles\\desert.css.[neftet@tutanota.com].boom")) returned 1 [0122.253] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e588) returned 1 [0122.253] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e584) returned 1 [0122.254] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e574) returned 1 [0122.255] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e570) returned 1 [0122.255] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e614) returned 1 [0122.255] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e610) returned 1 [0122.256] MoveFileW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\Discussion.css" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\grooveforms5\\formsstyles\\discussion.css"), lpNewFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\Discussion.css.[neftet@tutanota.com].boom" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\grooveforms5\\formsstyles\\discussion.css.[neftet@tutanota.com].boom")) returned 1 [0122.256] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e588) returned 1 [0122.256] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e584) returned 1 [0122.257] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e574) returned 1 [0122.258] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e570) returned 1 [0122.259] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e614) returned 1 [0122.259] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e610) returned 1 [0122.259] MoveFileW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\Earthy.css" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\grooveforms5\\formsstyles\\earthy.css"), lpNewFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\Earthy.css.[neftet@tutanota.com].boom" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\grooveforms5\\formsstyles\\earthy.css.[neftet@tutanota.com].boom")) returned 1 [0122.260] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e588) returned 1 [0122.260] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e584) returned 1 [0122.261] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e574) returned 1 [0122.261] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e570) returned 1 [0122.262] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e614) returned 1 [0122.262] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e610) returned 1 [0122.262] MoveFileW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\GrayCheck.css" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\grooveforms5\\formsstyles\\graycheck.css"), lpNewFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\GrayCheck.css.[neftet@tutanota.com].boom" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\grooveforms5\\formsstyles\\graycheck.css.[neftet@tutanota.com].boom")) returned 1 [0122.263] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e588) returned 1 [0122.263] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e584) returned 1 [0122.264] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e574) returned 1 [0122.265] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e570) returned 1 [0122.266] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e614) returned 1 [0122.266] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e610) returned 1 [0122.266] MoveFileW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\GreenTea.css" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\grooveforms5\\formsstyles\\greentea.css"), lpNewFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\GreenTea.css.[neftet@tutanota.com].boom" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\grooveforms5\\formsstyles\\greentea.css.[neftet@tutanota.com].boom")) returned 1 [0122.267] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e588) returned 1 [0122.267] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e584) returned 1 [0122.268] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e574) returned 1 [0122.269] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e570) returned 1 [0122.269] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e614) returned 1 [0122.269] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e610) returned 1 [0122.269] MoveFileW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\LightSpirit.css" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\grooveforms5\\formsstyles\\lightspirit.css"), lpNewFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\LightSpirit.css.[neftet@tutanota.com].boom" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\grooveforms5\\formsstyles\\lightspirit.css.[neftet@tutanota.com].boom")) returned 1 [0122.270] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e588) returned 1 [0122.270] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e584) returned 1 [0122.271] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e574) returned 1 [0122.272] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e570) returned 1 [0122.272] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e614) returned 1 [0122.272] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e610) returned 1 [0122.272] MoveFileW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\Lime.css" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\grooveforms5\\formsstyles\\lime.css"), lpNewFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\Lime.css.[neftet@tutanota.com].boom" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\grooveforms5\\formsstyles\\lime.css.[neftet@tutanota.com].boom")) returned 1 [0122.280] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e588) returned 1 [0122.281] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e584) returned 1 [0122.281] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e574) returned 1 [0122.282] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e570) returned 1 [0122.283] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e614) returned 1 [0122.283] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e610) returned 1 [0122.283] MoveFileW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\Maroon.css" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\grooveforms5\\formsstyles\\maroon.css"), lpNewFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\Maroon.css.[neftet@tutanota.com].boom" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\grooveforms5\\formsstyles\\maroon.css.[neftet@tutanota.com].boom")) returned 1 [0122.283] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e588) returned 1 [0122.284] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e584) returned 1 [0122.284] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e574) returned 1 [0122.285] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e570) returned 1 [0122.286] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e614) returned 1 [0122.286] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e610) returned 1 [0122.286] MoveFileW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\Oasis.css" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\grooveforms5\\formsstyles\\oasis.css"), lpNewFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\Oasis.css.[neftet@tutanota.com].boom" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\grooveforms5\\formsstyles\\oasis.css.[neftet@tutanota.com].boom")) returned 1 [0122.287] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e588) returned 1 [0122.287] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e584) returned 1 [0122.287] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e574) returned 1 [0122.288] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e570) returned 1 [0122.289] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e614) returned 1 [0122.289] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e610) returned 1 [0122.289] MoveFileW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\OliveGreen.css" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\grooveforms5\\formsstyles\\olivegreen.css"), lpNewFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\OliveGreen.css.[neftet@tutanota.com].boom" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\grooveforms5\\formsstyles\\olivegreen.css.[neftet@tutanota.com].boom")) returned 1 [0122.290] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e588) returned 1 [0122.290] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e584) returned 1 [0122.291] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e574) returned 1 [0122.292] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e570) returned 1 [0122.292] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e614) returned 1 [0122.292] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e610) returned 1 [0122.292] MoveFileW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\Premium.css" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\grooveforms5\\formsstyles\\premium.css"), lpNewFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\Premium.css.[neftet@tutanota.com].boom" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\grooveforms5\\formsstyles\\premium.css.[neftet@tutanota.com].boom")) returned 1 [0122.293] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e588) returned 1 [0122.293] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e584) returned 1 [0122.294] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e574) returned 1 [0122.295] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e570) returned 1 [0122.295] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e614) returned 1 [0122.295] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e610) returned 1 [0122.296] MoveFileW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\Slate.css" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\grooveforms5\\formsstyles\\slate.css"), lpNewFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\Slate.css.[neftet@tutanota.com].boom" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\grooveforms5\\formsstyles\\slate.css.[neftet@tutanota.com].boom")) returned 1 [0122.296] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e588) returned 1 [0122.296] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e584) returned 1 [0122.297] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e574) returned 1 [0122.298] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e570) returned 1 [0122.299] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e614) returned 1 [0122.299] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e610) returned 1 [0122.299] MoveFileW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\SlateBlue.css" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\grooveforms5\\formsstyles\\slateblue.css"), lpNewFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\SlateBlue.css.[neftet@tutanota.com].boom" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\grooveforms5\\formsstyles\\slateblue.css.[neftet@tutanota.com].boom")) returned 1 [0122.300] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e588) returned 1 [0122.300] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e584) returned 1 [0122.301] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e574) returned 1 [0122.301] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e570) returned 1 [0122.302] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e614) returned 1 [0122.302] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e610) returned 1 [0122.302] MoveFileW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\SoftBlue.css" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\grooveforms5\\formsstyles\\softblue.css"), lpNewFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\SoftBlue.css.[neftet@tutanota.com].boom" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\grooveforms5\\formsstyles\\softblue.css.[neftet@tutanota.com].boom")) returned 1 [0122.303] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e588) returned 1 [0122.303] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e584) returned 1 [0122.304] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e574) returned 1 [0122.304] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e570) returned 1 [0122.305] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e614) returned 1 [0122.305] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e610) returned 1 [0122.305] MoveFileW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\Solutions.css" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\grooveforms5\\formsstyles\\solutions.css"), lpNewFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\Solutions.css.[neftet@tutanota.com].boom" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\grooveforms5\\formsstyles\\solutions.css.[neftet@tutanota.com].boom")) returned 1 [0122.306] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e588) returned 1 [0122.306] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e584) returned 1 [0122.307] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e574) returned 1 [0122.307] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e570) returned 1 [0122.308] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e614) returned 1 [0122.308] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e610) returned 1 [0122.308] MoveFileW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\Solutions_Doc.css" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\grooveforms5\\formsstyles\\solutions_doc.css"), lpNewFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\Solutions_Doc.css.[neftet@tutanota.com].boom" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\grooveforms5\\formsstyles\\solutions_doc.css.[neftet@tutanota.com].boom")) returned 1 [0122.309] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e588) returned 1 [0122.309] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e584) returned 1 [0122.310] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e574) returned 1 [0122.310] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e570) returned 1 [0122.311] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e614) returned 1 [0122.311] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e610) returned 1 [0122.311] MoveFileW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\Solutions_Generic.css" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\grooveforms5\\formsstyles\\solutions_generic.css"), lpNewFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\Solutions_Generic.css.[neftet@tutanota.com].boom" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\grooveforms5\\formsstyles\\solutions_generic.css.[neftet@tutanota.com].boom")) returned 1 [0122.312] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e588) returned 1 [0122.312] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e584) returned 1 [0122.313] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e574) returned 1 [0122.314] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e570) returned 1 [0122.314] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e614) returned 1 [0122.315] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e610) returned 1 [0122.315] MoveFileW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\Solutions_Person.css" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\grooveforms5\\formsstyles\\solutions_person.css"), lpNewFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\Solutions_Person.css.[neftet@tutanota.com].boom" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\grooveforms5\\formsstyles\\solutions_person.css.[neftet@tutanota.com].boom")) returned 1 [0122.315] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e588) returned 1 [0122.315] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e584) returned 1 [0122.316] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e574) returned 1 [0122.317] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e570) returned 1 [0122.317] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e614) returned 1 [0122.317] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e610) returned 1 [0122.317] MoveFileW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\Solutions_Response.css" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\grooveforms5\\formsstyles\\solutions_response.css"), lpNewFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\Solutions_Response.css.[neftet@tutanota.com].boom" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\grooveforms5\\formsstyles\\solutions_response.css.[neftet@tutanota.com].boom")) returned 1 [0122.318] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e588) returned 1 [0122.318] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e584) returned 1 [0122.319] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e574) returned 1 [0122.320] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e570) returned 1 [0122.321] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e614) returned 1 [0122.321] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e610) returned 1 [0122.321] MoveFileW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\SpringGreen.css" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\grooveforms5\\formsstyles\\springgreen.css"), lpNewFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\SpringGreen.css.[neftet@tutanota.com].boom" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\grooveforms5\\formsstyles\\springgreen.css.[neftet@tutanota.com].boom")) returned 1 [0122.321] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e588) returned 1 [0122.322] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e584) returned 1 [0122.323] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e574) returned 1 [0122.323] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e570) returned 1 [0122.324] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e614) returned 1 [0122.324] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e610) returned 1 [0122.324] MoveFileW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\Sts.css" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\grooveforms5\\formsstyles\\sts.css"), lpNewFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\Sts.css.[neftet@tutanota.com].boom" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\grooveforms5\\formsstyles\\sts.css.[neftet@tutanota.com].boom")) returned 1 [0122.325] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e588) returned 1 [0122.325] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e584) returned 1 [0122.326] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e574) returned 1 [0122.326] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e570) returned 1 [0122.327] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e614) returned 1 [0122.327] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e610) returned 1 [0122.327] MoveFileW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\Sts2.css" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\grooveforms5\\formsstyles\\sts2.css"), lpNewFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\Sts2.css.[neftet@tutanota.com].boom" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\grooveforms5\\formsstyles\\sts2.css.[neftet@tutanota.com].boom")) returned 1 [0122.328] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e588) returned 1 [0122.328] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e584) returned 1 [0122.329] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e574) returned 1 [0122.329] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e570) returned 1 [0122.330] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e614) returned 1 [0122.330] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e610) returned 1 [0122.330] MoveFileW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\Swirl.css" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\grooveforms5\\formsstyles\\swirl.css"), lpNewFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\Swirl.css.[neftet@tutanota.com].boom" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\grooveforms5\\formsstyles\\swirl.css.[neftet@tutanota.com].boom")) returned 1 [0122.331] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e588) returned 1 [0122.331] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e584) returned 1 [0122.332] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e574) returned 1 [0122.333] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e570) returned 1 [0122.333] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e614) returned 1 [0122.333] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e610) returned 1 [0122.333] MoveFileW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\Teal.css" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\grooveforms5\\formsstyles\\teal.css"), lpNewFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\Teal.css.[neftet@tutanota.com].boom" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\grooveforms5\\formsstyles\\teal.css.[neftet@tutanota.com].boom")) returned 1 [0122.334] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e588) returned 1 [0122.334] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e584) returned 1 [0122.335] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e574) returned 1 [0122.336] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e570) returned 1 [0122.337] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e614) returned 1 [0122.337] MoveFileW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\TexturedBlue.css" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\grooveforms5\\formsstyles\\texturedblue.css"), lpNewFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\TexturedBlue.css.[neftet@tutanota.com].boom" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\grooveforms5\\formsstyles\\texturedblue.css.[neftet@tutanota.com].boom")) returned 1 [0122.340] MoveFileW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\VelvetRose.css" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\grooveforms5\\formsstyles\\velvetrose.css"), lpNewFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\VelvetRose.css.[neftet@tutanota.com].boom" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\grooveforms5\\formsstyles\\velvetrose.css.[neftet@tutanota.com].boom")) returned 1 [0122.344] MoveFileW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\Solutions\\arrow.png" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\grooveforms5\\formsstyles\\solutions\\arrow.png"), lpNewFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\Solutions\\arrow.png.[neftet@tutanota.com].boom" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\grooveforms5\\formsstyles\\solutions\\arrow.png.[neftet@tutanota.com].boom")) returned 1 [0122.347] MoveFileW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\Solutions\\gradient.png" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\grooveforms5\\formsstyles\\solutions\\gradient.png"), lpNewFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\Solutions\\gradient.png.[neftet@tutanota.com].boom" (normalized: "c:\\program files\\microsoft office\\office14\\1033\\grooveforms5\\formsstyles\\solutions\\gradient.png.[neftet@tutanota.com].boom")) returned 1 [0122.365] FindClose (in: hFindFile=0x381b80 | out: hFindFile=0x381b80) returned 1 [0122.367] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR", nBufferLength=0x105, lpBuffer=0x31e24c, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR", lpFilePart=0x0) returned 0x38 [0122.367] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\", nBufferLength=0x105, lpBuffer=0x31e220, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\", lpFilePart=0x0) returned 0x39 [0122.367] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\*", lpFindFileData=0x31e46c | out: lpFindFileData=0x31e46c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1ba9ab90, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x1bde09d0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x1bde09d0, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x381b80 [0122.383] FindClose (in: hFindFile=0x381b80 | out: hFindFile=0x381b80) returned 1 [0122.384] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\QuickStyles", nBufferLength=0x105, lpBuffer=0x31e24c, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\Office14\\1033\\QuickStyles", lpFilePart=0x0) returned 0x3b [0122.384] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\QuickStyles\\", nBufferLength=0x105, lpBuffer=0x31e220, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\Office14\\1033\\QuickStyles\\", lpFilePart=0x0) returned 0x3c [0122.384] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\QuickStyles\\*", lpFindFileData=0x31e46c | out: lpFindFileData=0x31e46c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1e3382f0, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x1e5274d0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x1e5274d0, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x381b80 [0122.385] FindClose (in: hFindFile=0x381b80 | out: hFindFile=0x381b80) returned 1 [0122.386] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\QuickStyles", nBufferLength=0x105, lpBuffer=0x31e24c, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\Office14\\1033\\QuickStyles", lpFilePart=0x0) returned 0x3b [0122.386] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\QuickStyles\\", nBufferLength=0x105, lpBuffer=0x31e220, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\Office14\\1033\\QuickStyles\\", lpFilePart=0x0) returned 0x3c [0122.386] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\QuickStyles\\*", lpFindFileData=0x31e46c | out: lpFindFileData=0x31e46c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1e3382f0, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x1e5274d0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x1e5274d0, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x381b80 [0122.387] FindClose (in: hFindFile=0x381b80 | out: hFindFile=0x381b80) returned 1 [0122.388] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\Vsdir", nBufferLength=0x105, lpBuffer=0x31e24c, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\Office14\\1033\\Vsdir", lpFilePart=0x0) returned 0x35 [0122.388] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\Vsdir\\", nBufferLength=0x105, lpBuffer=0x31e220, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\Office14\\1033\\Vsdir\\", lpFilePart=0x0) returned 0x36 [0122.388] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\Vsdir\\*", lpFindFileData=0x31e46c | out: lpFindFileData=0x31e46c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x504da6a0, ftCreationTime.dwHighDateTime=0x1d305eb, ftLastAccessTime.dwLowDateTime=0x50f6a840, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0x50f6a840, ftLastWriteTime.dwHighDateTime=0x1d305eb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x381b80 [0122.388] FindClose (in: hFindFile=0x381b80 | out: hFindFile=0x381b80) returned 1 [0122.388] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\Vsdir", nBufferLength=0x105, lpBuffer=0x31e24c, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\Office14\\1033\\Vsdir", lpFilePart=0x0) returned 0x35 [0122.388] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\Vsdir\\", nBufferLength=0x105, lpBuffer=0x31e220, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\Office14\\1033\\Vsdir\\", lpFilePart=0x0) returned 0x36 [0122.388] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1033\\Vsdir\\*", lpFindFileData=0x31e46c | out: lpFindFileData=0x31e46c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x504da6a0, ftCreationTime.dwHighDateTime=0x1d305eb, ftLastAccessTime.dwLowDateTime=0x50f6a840, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0x50f6a840, ftLastWriteTime.dwHighDateTime=0x1d305eb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x381b80 [0122.388] FindClose (in: hFindFile=0x381b80 | out: hFindFile=0x381b80) returned 1 [0122.388] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1036", nBufferLength=0x105, lpBuffer=0x31e2c4, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\Office14\\1036", lpFilePart=0x0) returned 0x2f [0122.389] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1036\\", nBufferLength=0x105, lpBuffer=0x31e298, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\Office14\\1036\\", lpFilePart=0x0) returned 0x30 [0122.389] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1036\\*", lpFindFileData=0x31e4e4 | out: lpFindFileData=0x31e4e4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x779e270, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x779e270, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x779e270, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x381b80 [0122.389] FindClose (in: hFindFile=0x381b80 | out: hFindFile=0x381b80) returned 1 [0122.389] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1036", nBufferLength=0x105, lpBuffer=0x31e2c4, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\Office14\\1036", lpFilePart=0x0) returned 0x2f [0122.389] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1036\\", nBufferLength=0x105, lpBuffer=0x31e298, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\Office14\\1036\\", lpFilePart=0x0) returned 0x30 [0122.389] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\1036\\*", lpFindFileData=0x31e4e4 | out: lpFindFileData=0x31e4e4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x779e270, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x779e270, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x779e270, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x381b80 [0122.389] FindClose (in: hFindFile=0x381b80 | out: hFindFile=0x381b80) returned 1 [0122.389] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\3082", nBufferLength=0x105, lpBuffer=0x31e2c4, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\Office14\\3082", lpFilePart=0x0) returned 0x2f [0122.389] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\3082\\", nBufferLength=0x105, lpBuffer=0x31e298, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\Office14\\3082\\", lpFilePart=0x0) returned 0x30 [0122.389] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\3082\\*", lpFindFileData=0x31e4e4 | out: lpFindFileData=0x31e4e4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5a4f390, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x5a4f390, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x5a4f390, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x381b80 [0122.390] FindClose (in: hFindFile=0x381b80 | out: hFindFile=0x381b80) returned 1 [0122.390] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\3082", nBufferLength=0x105, lpBuffer=0x31e2c4, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\Office14\\3082", lpFilePart=0x0) returned 0x2f [0122.390] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\3082\\", nBufferLength=0x105, lpBuffer=0x31e298, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\Office14\\3082\\", lpFilePart=0x0) returned 0x30 [0122.390] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\3082\\*", lpFindFileData=0x31e4e4 | out: lpFindFileData=0x31e4e4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5a4f390, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x5a4f390, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x5a4f390, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x381b80 [0122.390] FindClose (in: hFindFile=0x381b80 | out: hFindFile=0x381b80) returned 1 [0122.390] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\AccessWeb", nBufferLength=0x105, lpBuffer=0x31e2c4, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\Office14\\AccessWeb", lpFilePart=0x0) returned 0x34 [0122.390] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\AccessWeb\\", nBufferLength=0x105, lpBuffer=0x31e298, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\Office14\\AccessWeb\\", lpFilePart=0x0) returned 0x35 [0122.390] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\AccessWeb\\*", lpFindFileData=0x31e4e4 | out: lpFindFileData=0x31e4e4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x50e7acd0, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x603a86d0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x603a86d0, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x381b80 [0122.390] FindClose (in: hFindFile=0x381b80 | out: hFindFile=0x381b80) returned 1 [0122.390] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\AccessWeb", nBufferLength=0x105, lpBuffer=0x31e2c4, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\Office14\\AccessWeb", lpFilePart=0x0) returned 0x34 [0122.390] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\AccessWeb\\", nBufferLength=0x105, lpBuffer=0x31e298, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\Office14\\AccessWeb\\", lpFilePart=0x0) returned 0x35 [0122.390] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\AccessWeb\\*", lpFindFileData=0x31e4e4 | out: lpFindFileData=0x31e4e4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x50e7acd0, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x603a86d0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x603a86d0, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x381b80 [0122.391] FindClose (in: hFindFile=0x381b80 | out: hFindFile=0x381b80) returned 1 [0122.391] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\ACCWIZ", nBufferLength=0x105, lpBuffer=0x31e2c4, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\Office14\\ACCWIZ", lpFilePart=0x0) returned 0x31 [0122.391] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\ACCWIZ\\", nBufferLength=0x105, lpBuffer=0x31e298, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\Office14\\ACCWIZ\\", lpFilePart=0x0) returned 0x32 [0122.391] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\ACCWIZ\\*", lpFindFileData=0x31e4e4 | out: lpFindFileData=0x31e4e4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x51174850, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x5ead0130, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x5ead0130, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x381b80 [0122.392] FindClose (in: hFindFile=0x381b80 | out: hFindFile=0x381b80) returned 1 [0122.392] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\ACCWIZ", nBufferLength=0x105, lpBuffer=0x31e2c4, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\Office14\\ACCWIZ", lpFilePart=0x0) returned 0x31 [0122.392] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\ACCWIZ\\", nBufferLength=0x105, lpBuffer=0x31e298, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\Office14\\ACCWIZ\\", lpFilePart=0x0) returned 0x32 [0122.392] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\ACCWIZ\\*", lpFindFileData=0x31e4e4 | out: lpFindFileData=0x31e4e4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x51174850, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x5ead0130, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x5ead0130, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x381b80 [0122.393] FindClose (in: hFindFile=0x381b80 | out: hFindFile=0x381b80) returned 1 [0122.394] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\ADDINS", nBufferLength=0x105, lpBuffer=0x31e2c4, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\Office14\\ADDINS", lpFilePart=0x0) returned 0x31 [0122.394] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\ADDINS\\", nBufferLength=0x105, lpBuffer=0x31e298, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\Office14\\ADDINS\\", lpFilePart=0x0) returned 0x32 [0122.394] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\ADDINS\\*", lpFindFileData=0x31e4e4 | out: lpFindFileData=0x31e4e4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfff68b70, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0x695e6e70, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x695e6e70, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x381b80 [0122.395] FindClose (in: hFindFile=0x381b80 | out: hFindFile=0x381b80) returned 1 [0122.396] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\ADDINS", nBufferLength=0x105, lpBuffer=0x31e2c4, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\Office14\\ADDINS", lpFilePart=0x0) returned 0x31 [0122.396] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\ADDINS\\", nBufferLength=0x105, lpBuffer=0x31e298, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\Office14\\ADDINS\\", lpFilePart=0x0) returned 0x32 [0122.396] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\ADDINS\\*", lpFindFileData=0x31e4e4 | out: lpFindFileData=0x31e4e4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfff68b70, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0x695e6e70, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x695e6e70, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x381b80 [0122.397] FindClose (in: hFindFile=0x381b80 | out: hFindFile=0x381b80) returned 1 [0122.398] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Bibliography", nBufferLength=0x105, lpBuffer=0x31e2c4, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\Office14\\Bibliography", lpFilePart=0x0) returned 0x37 [0122.398] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Bibliography\\", nBufferLength=0x105, lpBuffer=0x31e298, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\Office14\\Bibliography\\", lpFilePart=0x0) returned 0x38 [0122.398] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Bibliography\\*", lpFindFileData=0x31e4e4 | out: lpFindFileData=0x31e4e4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x51422110, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x5f409670, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x5f409670, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x381b80 [0122.398] FindClose (in: hFindFile=0x381b80 | out: hFindFile=0x381b80) returned 1 [0122.398] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Bibliography", nBufferLength=0x105, lpBuffer=0x31e2c4, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\Office14\\Bibliography", lpFilePart=0x0) returned 0x37 [0122.398] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Bibliography\\", nBufferLength=0x105, lpBuffer=0x31e298, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\Office14\\Bibliography\\", lpFilePart=0x0) returned 0x38 [0122.398] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Bibliography\\*", lpFindFileData=0x31e4e4 | out: lpFindFileData=0x31e4e4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x51422110, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x5f409670, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x5f409670, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x381b80 [0122.398] FindClose (in: hFindFile=0x381b80 | out: hFindFile=0x381b80) returned 1 [0122.398] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Bibliography\\Sort", nBufferLength=0x105, lpBuffer=0x31e24c, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\Office14\\Bibliography\\Sort", lpFilePart=0x0) returned 0x3c [0122.398] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Bibliography\\Sort\\", nBufferLength=0x105, lpBuffer=0x31e220, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\Office14\\Bibliography\\Sort\\", lpFilePart=0x0) returned 0x3d [0122.398] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Bibliography\\Sort\\*", lpFindFileData=0x31e46c | out: lpFindFileData=0x31e46c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x51767f50, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x70c9f7b0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x70c9f7b0, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x381b80 [0122.399] FindClose (in: hFindFile=0x381b80 | out: hFindFile=0x381b80) returned 1 [0122.399] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Bibliography\\Sort", nBufferLength=0x105, lpBuffer=0x31e24c, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\Office14\\Bibliography\\Sort", lpFilePart=0x0) returned 0x3c [0122.399] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Bibliography\\Sort\\", nBufferLength=0x105, lpBuffer=0x31e220, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\Office14\\Bibliography\\Sort\\", lpFilePart=0x0) returned 0x3d [0122.399] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Bibliography\\Sort\\*", lpFindFileData=0x31e46c | out: lpFindFileData=0x31e46c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x51767f50, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x70c9f7b0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x70c9f7b0, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x381b80 [0122.399] FindClose (in: hFindFile=0x381b80 | out: hFindFile=0x381b80) returned 1 [0122.399] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Bibliography\\Style", nBufferLength=0x105, lpBuffer=0x31e24c, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\Office14\\Bibliography\\Style", lpFilePart=0x0) returned 0x3d [0122.399] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Bibliography\\Style\\", nBufferLength=0x105, lpBuffer=0x31e220, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\Office14\\Bibliography\\Style\\", lpFilePart=0x0) returned 0x3e [0122.399] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Bibliography\\Style\\*", lpFindFileData=0x31e46c | out: lpFindFileData=0x31e46c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x51422110, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x69c4c990, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x69c4c990, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x381b80 [0122.400] FindClose (in: hFindFile=0x381b80 | out: hFindFile=0x381b80) returned 1 [0122.401] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Bibliography\\Style", nBufferLength=0x105, lpBuffer=0x31e24c, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\Office14\\Bibliography\\Style", lpFilePart=0x0) returned 0x3d [0122.401] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Bibliography\\Style\\", nBufferLength=0x105, lpBuffer=0x31e220, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\Office14\\Bibliography\\Style\\", lpFilePart=0x0) returned 0x3e [0122.401] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Bibliography\\Style\\*", lpFindFileData=0x31e46c | out: lpFindFileData=0x31e46c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x51422110, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x69c4c990, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x69c4c990, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x381b80 [0122.402] FindClose (in: hFindFile=0x381b80 | out: hFindFile=0x381b80) returned 1 [0122.402] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\BORDERS", nBufferLength=0x105, lpBuffer=0x31e2c4, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\Office14\\BORDERS", lpFilePart=0x0) returned 0x32 [0122.403] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\BORDERS\\", nBufferLength=0x105, lpBuffer=0x31e298, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\Office14\\BORDERS\\", lpFilePart=0x0) returned 0x33 [0122.403] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\BORDERS\\*", lpFindFileData=0x31e4e4 | out: lpFindFileData=0x31e4e4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x58b4ce70, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x69dc9750, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x69dc9750, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x381b80 [0122.404] FindClose (in: hFindFile=0x381b80 | out: hFindFile=0x381b80) returned 1 [0122.404] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\BORDERS", nBufferLength=0x105, lpBuffer=0x31e2c4, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\Office14\\BORDERS", lpFilePart=0x0) returned 0x32 [0122.404] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\BORDERS\\", nBufferLength=0x105, lpBuffer=0x31e298, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\Office14\\BORDERS\\", lpFilePart=0x0) returned 0x33 [0122.404] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\BORDERS\\*", lpFindFileData=0x31e4e4 | out: lpFindFileData=0x31e4e4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x58b4ce70, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x69dc9750, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x69dc9750, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x381b80 [0122.405] FindClose (in: hFindFile=0x381b80 | out: hFindFile=0x381b80) returned 1 [0122.406] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\CONVERT", nBufferLength=0x105, lpBuffer=0x31e2c4, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\Office14\\CONVERT", lpFilePart=0x0) returned 0x32 [0122.406] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\CONVERT\\", nBufferLength=0x105, lpBuffer=0x31e298, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\Office14\\CONVERT\\", lpFilePart=0x0) returned 0x33 [0122.406] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\CONVERT\\*", lpFindFileData=0x31e4e4 | out: lpFindFileData=0x31e4e4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfff68b70, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0x6d547830, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x6d547830, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x381b80 [0122.406] FindClose (in: hFindFile=0x381b80 | out: hFindFile=0x381b80) returned 1 [0122.406] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\CONVERT", nBufferLength=0x105, lpBuffer=0x31e2c4, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\Office14\\CONVERT", lpFilePart=0x0) returned 0x32 [0122.406] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\CONVERT\\", nBufferLength=0x105, lpBuffer=0x31e298, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\Office14\\CONVERT\\", lpFilePart=0x0) returned 0x33 [0122.406] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\CONVERT\\*", lpFindFileData=0x31e4e4 | out: lpFindFileData=0x31e4e4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfff68b70, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0x6d547830, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x6d547830, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x381b80 [0122.406] FindClose (in: hFindFile=0x381b80 | out: hFindFile=0x381b80) returned 1 [0122.407] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\CONVERT\\1033", nBufferLength=0x105, lpBuffer=0x31e24c, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\Office14\\CONVERT\\1033", lpFilePart=0x0) returned 0x37 [0122.407] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\CONVERT\\1033\\", nBufferLength=0x105, lpBuffer=0x31e220, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\Office14\\CONVERT\\1033\\", lpFilePart=0x0) returned 0x38 [0122.407] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\CONVERT\\1033\\*", lpFindFileData=0x31e46c | out: lpFindFileData=0x31e46c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xbe7ef0, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x21c6910, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x21c6910, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x381b80 [0122.408] FindClose (in: hFindFile=0x381b80 | out: hFindFile=0x381b80) returned 1 [0122.408] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\CONVERT\\1033", nBufferLength=0x105, lpBuffer=0x31e24c, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\Office14\\CONVERT\\1033", lpFilePart=0x0) returned 0x37 [0122.408] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\CONVERT\\1033\\", nBufferLength=0x105, lpBuffer=0x31e220, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\Office14\\CONVERT\\1033\\", lpFilePart=0x0) returned 0x38 [0122.408] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\CONVERT\\1033\\*", lpFindFileData=0x31e46c | out: lpFindFileData=0x31e46c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xbe7ef0, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x21c6910, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x21c6910, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x381b80 [0122.409] FindClose (in: hFindFile=0x381b80 | out: hFindFile=0x381b80) returned 1 [0122.410] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Document Parts", nBufferLength=0x105, lpBuffer=0x31e2c4, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\Office14\\Document Parts", lpFilePart=0x0) returned 0x39 [0122.410] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Document Parts\\", nBufferLength=0x105, lpBuffer=0x31e298, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\Office14\\Document Parts\\", lpFilePart=0x0) returned 0x3a [0122.410] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Document Parts\\*", lpFindFileData=0x31e4e4 | out: lpFindFileData=0x31e4e4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1e3382f0, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x1e3382f0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x1e3382f0, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x381b80 [0122.410] FindClose (in: hFindFile=0x381b80 | out: hFindFile=0x381b80) returned 1 [0122.410] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Document Parts", nBufferLength=0x105, lpBuffer=0x31e2c4, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\Office14\\Document Parts", lpFilePart=0x0) returned 0x39 [0122.411] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Document Parts\\", nBufferLength=0x105, lpBuffer=0x31e298, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\Office14\\Document Parts\\", lpFilePart=0x0) returned 0x3a [0122.411] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Document Parts\\*", lpFindFileData=0x31e4e4 | out: lpFindFileData=0x31e4e4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1e3382f0, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x1e3382f0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x1e3382f0, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x381b80 [0122.411] FindClose (in: hFindFile=0x381b80 | out: hFindFile=0x381b80) returned 1 [0122.411] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Document Parts\\1033", nBufferLength=0x105, lpBuffer=0x31e24c, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\Office14\\Document Parts\\1033", lpFilePart=0x0) returned 0x3e [0122.411] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Document Parts\\1033\\", nBufferLength=0x105, lpBuffer=0x31e220, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\Office14\\Document Parts\\1033\\", lpFilePart=0x0) returned 0x3f [0122.411] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Document Parts\\1033\\*", lpFindFileData=0x31e46c | out: lpFindFileData=0x31e46c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1e3382f0, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x1e3382f0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x1e3382f0, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x381b80 [0122.411] FindClose (in: hFindFile=0x381b80 | out: hFindFile=0x381b80) returned 1 [0122.411] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Document Parts\\1033", nBufferLength=0x105, lpBuffer=0x31e24c, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\Office14\\Document Parts\\1033", lpFilePart=0x0) returned 0x3e [0122.411] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Document Parts\\1033\\", nBufferLength=0x105, lpBuffer=0x31e220, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\Office14\\Document Parts\\1033\\", lpFilePart=0x0) returned 0x3f [0122.411] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Document Parts\\1033\\*", lpFindFileData=0x31e46c | out: lpFindFileData=0x31e46c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1e3382f0, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x1e3382f0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x1e3382f0, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x381b80 [0122.411] FindClose (in: hFindFile=0x381b80 | out: hFindFile=0x381b80) returned 1 [0122.411] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Document Parts\\1033\\14", nBufferLength=0x105, lpBuffer=0x31e1d4, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\Office14\\Document Parts\\1033\\14", lpFilePart=0x0) returned 0x41 [0122.411] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Document Parts\\1033\\14\\", nBufferLength=0x105, lpBuffer=0x31e1a8, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\Office14\\Document Parts\\1033\\14\\", lpFilePart=0x0) returned 0x42 [0122.411] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Document Parts\\1033\\14\\*", lpFindFileData=0x31e3f4 | out: lpFindFileData=0x31e3f4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1e3382f0, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x1e3382f0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x1e3382f0, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x381b80 [0122.412] FindClose (in: hFindFile=0x381b80 | out: hFindFile=0x381b80) returned 1 [0122.412] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Document Parts\\1033\\14", nBufferLength=0x105, lpBuffer=0x31e1d4, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\Office14\\Document Parts\\1033\\14", lpFilePart=0x0) returned 0x41 [0122.412] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Document Parts\\1033\\14\\", nBufferLength=0x105, lpBuffer=0x31e1a8, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\Office14\\Document Parts\\1033\\14\\", lpFilePart=0x0) returned 0x42 [0122.412] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Document Parts\\1033\\14\\*", lpFindFileData=0x31e3f4 | out: lpFindFileData=0x31e3f4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1e3382f0, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x1e3382f0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x1e3382f0, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x381b80 [0122.412] FindClose (in: hFindFile=0x381b80 | out: hFindFile=0x381b80) returned 1 [0122.412] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\FORMS", nBufferLength=0x105, lpBuffer=0x31e2c4, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\Office14\\FORMS", lpFilePart=0x0) returned 0x30 [0122.412] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\FORMS\\", nBufferLength=0x105, lpBuffer=0x31e298, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\Office14\\FORMS\\", lpFilePart=0x0) returned 0x31 [0122.412] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\FORMS\\*", lpFindFileData=0x31e4e4 | out: lpFindFileData=0x31e4e4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xccc730, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0xccc730, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xccc730, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x381b80 [0122.412] FindClose (in: hFindFile=0x381b80 | out: hFindFile=0x381b80) returned 1 [0122.412] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\FORMS", nBufferLength=0x105, lpBuffer=0x31e2c4, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\Office14\\FORMS", lpFilePart=0x0) returned 0x30 [0122.412] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\FORMS\\", nBufferLength=0x105, lpBuffer=0x31e298, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\Office14\\FORMS\\", lpFilePart=0x0) returned 0x31 [0122.412] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\FORMS\\*", lpFindFileData=0x31e4e4 | out: lpFindFileData=0x31e4e4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xccc730, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0xccc730, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xccc730, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x381b80 [0122.412] FindClose (in: hFindFile=0x381b80 | out: hFindFile=0x381b80) returned 1 [0122.413] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\FORMS\\1033", nBufferLength=0x105, lpBuffer=0x31e24c, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\Office14\\FORMS\\1033", lpFilePart=0x0) returned 0x35 [0122.413] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\FORMS\\1033\\", nBufferLength=0x105, lpBuffer=0x31e220, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\Office14\\FORMS\\1033\\", lpFilePart=0x0) returned 0x36 [0122.413] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\FORMS\\1033\\*", lpFindFileData=0x31e46c | out: lpFindFileData=0x31e46c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xccc730, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x21c6910, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x21c6910, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x381b80 [0122.414] FindClose (in: hFindFile=0x381b80 | out: hFindFile=0x381b80) returned 1 [0122.415] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\FORMS\\1033", nBufferLength=0x105, lpBuffer=0x31e24c, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\Office14\\FORMS\\1033", lpFilePart=0x0) returned 0x35 [0122.415] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\FORMS\\1033\\", nBufferLength=0x105, lpBuffer=0x31e220, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\Office14\\FORMS\\1033\\", lpFilePart=0x0) returned 0x36 [0122.415] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\FORMS\\1033\\*", lpFindFileData=0x31e46c | out: lpFindFileData=0x31e46c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xccc730, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x21c6910, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x21c6910, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x381b80 [0122.416] FindClose (in: hFindFile=0x381b80 | out: hFindFile=0x381b80) returned 1 [0122.417] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove", nBufferLength=0x105, lpBuffer=0x31e2c4, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\Office14\\Groove", lpFilePart=0x0) returned 0x31 [0122.417] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\", nBufferLength=0x105, lpBuffer=0x31e298, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\", lpFilePart=0x0) returned 0x32 [0122.417] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\*", lpFindFileData=0x31e4e4 | out: lpFindFileData=0x31e4e4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x50e7acd0, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x582abeb0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x582abeb0, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x381b80 [0122.417] FindClose (in: hFindFile=0x381b80 | out: hFindFile=0x381b80) returned 1 [0122.417] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove", nBufferLength=0x105, lpBuffer=0x31e2c4, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\Office14\\Groove", lpFilePart=0x0) returned 0x31 [0122.417] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\", nBufferLength=0x105, lpBuffer=0x31e298, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\", lpFilePart=0x0) returned 0x32 [0122.417] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\*", lpFindFileData=0x31e4e4 | out: lpFindFileData=0x31e4e4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x50e7acd0, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x582abeb0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x582abeb0, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x381b80 [0122.418] FindClose (in: hFindFile=0x381b80 | out: hFindFile=0x381b80) returned 1 [0122.418] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\Certificates", nBufferLength=0x105, lpBuffer=0x31e24c, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\Certificates", lpFilePart=0x0) returned 0x3e [0122.418] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\Certificates\\", nBufferLength=0x105, lpBuffer=0x31e220, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\Certificates\\", lpFilePart=0x0) returned 0x3f [0122.418] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\Certificates\\*", lpFindFileData=0x31e46c | out: lpFindFileData=0x31e46c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x582abeb0, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x5e490770, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x5e490770, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x381b80 [0122.418] FindClose (in: hFindFile=0x381b80 | out: hFindFile=0x381b80) returned 1 [0122.418] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\Certificates", nBufferLength=0x105, lpBuffer=0x31e24c, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\Certificates", lpFilePart=0x0) returned 0x3e [0122.418] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\Certificates\\", nBufferLength=0x105, lpBuffer=0x31e220, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\Certificates\\", lpFilePart=0x0) returned 0x3f [0122.418] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\Certificates\\*", lpFindFileData=0x31e46c | out: lpFindFileData=0x31e46c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x582abeb0, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x5e490770, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x5e490770, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x381b80 [0122.418] FindClose (in: hFindFile=0x381b80 | out: hFindFile=0x381b80) returned 1 [0122.418] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\Certificates\\groove.net", nBufferLength=0x105, lpBuffer=0x31e1d4, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\Certificates\\groove.net", lpFilePart=0x0) returned 0x49 [0122.418] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\Certificates\\groove.net\\", nBufferLength=0x105, lpBuffer=0x31e1a8, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\Certificates\\groove.net\\", lpFilePart=0x0) returned 0x4a [0122.418] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\Certificates\\groove.net\\*", lpFindFileData=0x31e3f4 | out: lpFindFileData=0x31e3f4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x582abeb0, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x6d2c00d0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x6d2c00d0, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x381b80 [0122.419] FindClose (in: hFindFile=0x381b80 | out: hFindFile=0x381b80) returned 1 [0122.419] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\Certificates\\groove.net", nBufferLength=0x105, lpBuffer=0x31e1d4, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\Certificates\\groove.net", lpFilePart=0x0) returned 0x49 [0122.419] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\Certificates\\groove.net\\", nBufferLength=0x105, lpBuffer=0x31e1a8, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\Certificates\\groove.net\\", lpFilePart=0x0) returned 0x4a [0122.419] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\Certificates\\groove.net\\*", lpFindFileData=0x31e3f4 | out: lpFindFileData=0x31e3f4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x582abeb0, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x6d2c00d0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x6d2c00d0, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x381b80 [0122.419] FindClose (in: hFindFile=0x381b80 | out: hFindFile=0x381b80) returned 1 [0122.419] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\Certificates\\groove.net\\Components", nBufferLength=0x105, lpBuffer=0x31e15c, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\Certificates\\groove.net\\Components", lpFilePart=0x0) returned 0x54 [0122.419] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\Certificates\\groove.net\\Components\\", nBufferLength=0x105, lpBuffer=0x31e130, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\Certificates\\groove.net\\Components\\", lpFilePart=0x0) returned 0x55 [0122.419] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\Certificates\\groove.net\\Components\\*", lpFindFileData=0x31e37c | out: lpFindFileData=0x31e37c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x6d2c00d0, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x6d2c00d0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x6d2c00d0, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x381b80 [0122.419] FindClose (in: hFindFile=0x381b80 | out: hFindFile=0x381b80) returned 1 [0122.419] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\Certificates\\groove.net\\Components", nBufferLength=0x105, lpBuffer=0x31e15c, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\Certificates\\groove.net\\Components", lpFilePart=0x0) returned 0x54 [0122.419] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\Certificates\\groove.net\\Components\\", nBufferLength=0x105, lpBuffer=0x31e130, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\Certificates\\groove.net\\Components\\", lpFilePart=0x0) returned 0x55 [0122.419] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\Certificates\\groove.net\\Components\\*", lpFindFileData=0x31e37c | out: lpFindFileData=0x31e37c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x6d2c00d0, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x6d2c00d0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x6d2c00d0, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x381b80 [0122.419] FindClose (in: hFindFile=0x381b80 | out: hFindFile=0x381b80) returned 1 [0122.420] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\Certificates\\groove.net\\ManagedObjects", nBufferLength=0x105, lpBuffer=0x31e15c, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\Certificates\\groove.net\\ManagedObjects", lpFilePart=0x0) returned 0x58 [0122.420] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\Certificates\\groove.net\\ManagedObjects\\", nBufferLength=0x105, lpBuffer=0x31e130, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\Certificates\\groove.net\\ManagedObjects\\", lpFilePart=0x0) returned 0x59 [0122.420] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\Certificates\\groove.net\\ManagedObjects\\*", lpFindFileData=0x31e37c | out: lpFindFileData=0x31e37c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5a95a430, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x5a95a430, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x5a95a430, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x381b80 [0122.420] FindClose (in: hFindFile=0x381b80 | out: hFindFile=0x381b80) returned 1 [0122.420] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\Certificates\\groove.net\\ManagedObjects", nBufferLength=0x105, lpBuffer=0x31e15c, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\Certificates\\groove.net\\ManagedObjects", lpFilePart=0x0) returned 0x58 [0122.420] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\Certificates\\groove.net\\ManagedObjects\\", nBufferLength=0x105, lpBuffer=0x31e130, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\Certificates\\groove.net\\ManagedObjects\\", lpFilePart=0x0) returned 0x59 [0122.420] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\Certificates\\groove.net\\ManagedObjects\\*", lpFindFileData=0x31e37c | out: lpFindFileData=0x31e37c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5a95a430, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x5a95a430, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x5a95a430, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x381b80 [0122.420] FindClose (in: hFindFile=0x381b80 | out: hFindFile=0x381b80) returned 1 [0122.420] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\Certificates\\groove.net\\Servers", nBufferLength=0x105, lpBuffer=0x31e15c, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\Certificates\\groove.net\\Servers", lpFilePart=0x0) returned 0x51 [0122.420] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\Certificates\\groove.net\\Servers\\", nBufferLength=0x105, lpBuffer=0x31e130, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\Certificates\\groove.net\\Servers\\", lpFilePart=0x0) returned 0x52 [0122.420] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\Certificates\\groove.net\\Servers\\*", lpFindFileData=0x31e37c | out: lpFindFileData=0x31e37c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x582abeb0, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x6d169470, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x6d169470, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x381b80 [0122.420] FindClose (in: hFindFile=0x381b80 | out: hFindFile=0x381b80) returned 1 [0122.421] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\Certificates\\groove.net\\Servers", nBufferLength=0x105, lpBuffer=0x31e15c, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\Certificates\\groove.net\\Servers", lpFilePart=0x0) returned 0x51 [0122.421] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\Certificates\\groove.net\\Servers\\", nBufferLength=0x105, lpBuffer=0x31e130, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\Certificates\\groove.net\\Servers\\", lpFilePart=0x0) returned 0x52 [0122.421] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\Certificates\\groove.net\\Servers\\*", lpFindFileData=0x31e37c | out: lpFindFileData=0x31e37c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x582abeb0, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x6d169470, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x6d169470, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x381b80 [0122.421] FindClose (in: hFindFile=0x381b80 | out: hFindFile=0x381b80) returned 1 [0122.421] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\Certificates\\Verisign", nBufferLength=0x105, lpBuffer=0x31e1d4, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\Certificates\\Verisign", lpFilePart=0x0) returned 0x47 [0122.421] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\Certificates\\Verisign\\", nBufferLength=0x105, lpBuffer=0x31e1a8, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\Certificates\\Verisign\\", lpFilePart=0x0) returned 0x48 [0122.421] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\Certificates\\Verisign\\*", lpFindFileData=0x31e3f4 | out: lpFindFileData=0x31e3f4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5e490770, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x5e490770, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x5e490770, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x381b80 [0122.421] FindClose (in: hFindFile=0x381b80 | out: hFindFile=0x381b80) returned 1 [0122.421] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\Certificates\\Verisign", nBufferLength=0x105, lpBuffer=0x31e1d4, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\Certificates\\Verisign", lpFilePart=0x0) returned 0x47 [0122.421] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\Certificates\\Verisign\\", nBufferLength=0x105, lpBuffer=0x31e1a8, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\Certificates\\Verisign\\", lpFilePart=0x0) returned 0x48 [0122.421] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\Certificates\\Verisign\\*", lpFindFileData=0x31e3f4 | out: lpFindFileData=0x31e3f4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5e490770, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x5e490770, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x5e490770, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x381b80 [0122.421] FindClose (in: hFindFile=0x381b80 | out: hFindFile=0x381b80) returned 1 [0122.421] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\Certificates\\Verisign\\Components", nBufferLength=0x105, lpBuffer=0x31e15c, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\Certificates\\Verisign\\Components", lpFilePart=0x0) returned 0x52 [0122.421] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\Certificates\\Verisign\\Components\\", nBufferLength=0x105, lpBuffer=0x31e130, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\Certificates\\Verisign\\Components\\", lpFilePart=0x0) returned 0x53 [0122.421] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\Certificates\\Verisign\\Components\\*", lpFindFileData=0x31e37c | out: lpFindFileData=0x31e37c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5e490770, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x70744630, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x70744630, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x381b80 [0122.422] FindClose (in: hFindFile=0x381b80 | out: hFindFile=0x381b80) returned 1 [0122.423] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\Certificates\\Verisign\\Components", nBufferLength=0x105, lpBuffer=0x31e15c, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\Certificates\\Verisign\\Components", lpFilePart=0x0) returned 0x52 [0122.423] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\Certificates\\Verisign\\Components\\", nBufferLength=0x105, lpBuffer=0x31e130, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\Certificates\\Verisign\\Components\\", lpFilePart=0x0) returned 0x53 [0122.423] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\Certificates\\Verisign\\Components\\*", lpFindFileData=0x31e37c | out: lpFindFileData=0x31e37c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5e490770, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x70744630, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x70744630, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x381b80 [0122.424] FindClose (in: hFindFile=0x381b80 | out: hFindFile=0x381b80) returned 1 [0122.425] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\Sounds", nBufferLength=0x105, lpBuffer=0x31e24c, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\Sounds", lpFilePart=0x0) returned 0x38 [0122.425] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\Sounds\\", nBufferLength=0x105, lpBuffer=0x31e220, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\Sounds\\", lpFilePart=0x0) returned 0x39 [0122.425] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\Sounds\\*", lpFindFileData=0x31e46c | out: lpFindFileData=0x31e46c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x51b925d0, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x52a72f50, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x52a72f50, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x381b80 [0122.425] FindClose (in: hFindFile=0x381b80 | out: hFindFile=0x381b80) returned 1 [0122.425] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\Sounds", nBufferLength=0x105, lpBuffer=0x31e24c, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\Sounds", lpFilePart=0x0) returned 0x38 [0122.425] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\Sounds\\", nBufferLength=0x105, lpBuffer=0x31e220, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\Sounds\\", lpFilePart=0x0) returned 0x39 [0122.425] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\Sounds\\*", lpFindFileData=0x31e46c | out: lpFindFileData=0x31e46c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x51b925d0, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x52a72f50, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x52a72f50, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x381b80 [0122.425] FindClose (in: hFindFile=0x381b80 | out: hFindFile=0x381b80) returned 1 [0122.425] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\Sounds\\People", nBufferLength=0x105, lpBuffer=0x31e1d4, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\Sounds\\People", lpFilePart=0x0) returned 0x3f [0122.425] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\Sounds\\People\\", nBufferLength=0x105, lpBuffer=0x31e1a8, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\Sounds\\People\\", lpFilePart=0x0) returned 0x40 [0122.426] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\Sounds\\People\\*", lpFindFileData=0x31e3f4 | out: lpFindFileData=0x31e3f4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x52a72f50, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x708e7550, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x708e7550, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x381b80 [0122.426] FindClose (in: hFindFile=0x381b80 | out: hFindFile=0x381b80) returned 1 [0122.426] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\Sounds\\People", nBufferLength=0x105, lpBuffer=0x31e1d4, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\Sounds\\People", lpFilePart=0x0) returned 0x3f [0122.426] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\Sounds\\People\\", nBufferLength=0x105, lpBuffer=0x31e1a8, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\Sounds\\People\\", lpFilePart=0x0) returned 0x40 [0122.426] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\Sounds\\People\\*", lpFindFileData=0x31e3f4 | out: lpFindFileData=0x31e3f4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x52a72f50, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x708e7550, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x708e7550, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x381b80 [0122.426] FindClose (in: hFindFile=0x381b80 | out: hFindFile=0x381b80) returned 1 [0122.426] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\Sounds\\People\\Whistling.wav", nBufferLength=0x105, lpBuffer=0x31e094, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\Sounds\\People\\Whistling.wav", lpFilePart=0x0) returned 0x4d [0122.429] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\Sounds\\People\\Whistling.wav", nBufferLength=0x105, lpBuffer=0x31e080, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\Sounds\\People\\Whistling.wav", lpFilePart=0x0) returned 0x4d [0122.432] MoveFileW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\Sounds\\People\\Whistling.wav" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\sounds\\people\\whistling.wav"), lpNewFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\Sounds\\People\\Whistling.wav.[neftet@tutanota.com].boom" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\sounds\\people\\whistling.wav.[neftet@tutanota.com].boom")) returned 1 [0122.445] MoveFileW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolBMPs\\CalendarToolIconImages.jpg" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\toolbmps\\calendartooliconimages.jpg"), lpNewFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolBMPs\\CalendarToolIconImages.jpg.[neftet@tutanota.com].boom" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\toolbmps\\calendartooliconimages.jpg.[neftet@tutanota.com].boom")) returned 1 [0122.448] MoveFileW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolBMPs\\CalendarToolIconImagesMask.bmp" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\toolbmps\\calendartooliconimagesmask.bmp"), lpNewFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolBMPs\\CalendarToolIconImagesMask.bmp.[neftet@tutanota.com].boom" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\toolbmps\\calendartooliconimagesmask.bmp.[neftet@tutanota.com].boom")) returned 1 [0122.451] MoveFileW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolBMPs\\ChessIconImages.bmp" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\toolbmps\\chessiconimages.bmp"), lpNewFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolBMPs\\ChessIconImages.bmp.[neftet@tutanota.com].boom" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\toolbmps\\chessiconimages.bmp.[neftet@tutanota.com].boom")) returned 1 [0122.454] MoveFileW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolBMPs\\ChessIconImagesMask.bmp" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\toolbmps\\chessiconimagesmask.bmp"), lpNewFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolBMPs\\ChessIconImagesMask.bmp.[neftet@tutanota.com].boom" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\toolbmps\\chessiconimagesmask.bmp.[neftet@tutanota.com].boom")) returned 1 [0122.457] MoveFileW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolBMPs\\CreateSpaceImage.jpg" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\toolbmps\\createspaceimage.jpg"), lpNewFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolBMPs\\CreateSpaceImage.jpg.[neftet@tutanota.com].boom" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\toolbmps\\createspaceimage.jpg.[neftet@tutanota.com].boom")) returned 1 [0122.461] MoveFileW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolBMPs\\CreateSpaceImageMask.bmp" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\toolbmps\\createspaceimagemask.bmp"), lpNewFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolBMPs\\CreateSpaceImageMask.bmp.[neftet@tutanota.com].boom" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\toolbmps\\createspaceimagemask.bmp.[neftet@tutanota.com].boom")) returned 1 [0122.464] MoveFileW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolBMPs\\DataListIconImages.jpg" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\toolbmps\\datalisticonimages.jpg"), lpNewFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolBMPs\\DataListIconImages.jpg.[neftet@tutanota.com].boom" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\toolbmps\\datalisticonimages.jpg.[neftet@tutanota.com].boom")) returned 1 [0122.467] MoveFileW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolBMPs\\DataListIconImagesMask.bmp" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\toolbmps\\datalisticonimagesmask.bmp"), lpNewFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolBMPs\\DataListIconImagesMask.bmp.[neftet@tutanota.com].boom" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\toolbmps\\datalisticonimagesmask.bmp.[neftet@tutanota.com].boom")) returned 1 [0122.470] MoveFileW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolBMPs\\DataViewIconImages.jpg" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\toolbmps\\dataviewiconimages.jpg"), lpNewFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolBMPs\\DataViewIconImages.jpg.[neftet@tutanota.com].boom" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\toolbmps\\dataviewiconimages.jpg.[neftet@tutanota.com].boom")) returned 1 [0122.473] MoveFileW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolBMPs\\DataViewIconImagesMask.bmp" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\toolbmps\\dataviewiconimagesmask.bmp"), lpNewFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolBMPs\\DataViewIconImagesMask.bmp.[neftet@tutanota.com].boom" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\toolbmps\\dataviewiconimagesmask.bmp.[neftet@tutanota.com].boom")) returned 1 [0122.477] MoveFileW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolBMPs\\DiscussionToolIconImages.jpg" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\toolbmps\\discussiontooliconimages.jpg"), lpNewFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolBMPs\\DiscussionToolIconImages.jpg.[neftet@tutanota.com].boom" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\toolbmps\\discussiontooliconimages.jpg.[neftet@tutanota.com].boom")) returned 1 [0122.480] MoveFileW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolBMPs\\DiscussionToolIconImagesMask.bmp" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\toolbmps\\discussiontooliconimagesmask.bmp"), lpNewFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolBMPs\\DiscussionToolIconImagesMask.bmp.[neftet@tutanota.com].boom" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\toolbmps\\discussiontooliconimagesmask.bmp.[neftet@tutanota.com].boom")) returned 1 [0122.484] MoveFileW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolBMPs\\Form_StatusImage.jpg" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\toolbmps\\form_statusimage.jpg"), lpNewFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolBMPs\\Form_StatusImage.jpg.[neftet@tutanota.com].boom" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\toolbmps\\form_statusimage.jpg.[neftet@tutanota.com].boom")) returned 1 [0122.487] MoveFileW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolBMPs\\Form_StatusImageMask.bmp" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\toolbmps\\form_statusimagemask.bmp"), lpNewFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolBMPs\\Form_StatusImageMask.bmp.[neftet@tutanota.com].boom" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\toolbmps\\form_statusimagemask.bmp.[neftet@tutanota.com].boom")) returned 1 [0122.490] MoveFileW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolBMPs\\InformationIcon.jpg" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\toolbmps\\informationicon.jpg"), lpNewFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolBMPs\\InformationIcon.jpg.[neftet@tutanota.com].boom" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\toolbmps\\informationicon.jpg.[neftet@tutanota.com].boom")) returned 1 [0122.494] MoveFileW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolBMPs\\InformationIconMask.bmp" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\toolbmps\\informationiconmask.bmp"), lpNewFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolBMPs\\InformationIconMask.bmp.[neftet@tutanota.com].boom" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\toolbmps\\informationiconmask.bmp.[neftet@tutanota.com].boom")) returned 1 [0122.499] MoveFileW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolBMPs\\LoginDialogBackground.jpg" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\toolbmps\\logindialogbackground.jpg"), lpNewFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolBMPs\\LoginDialogBackground.jpg.[neftet@tutanota.com].boom" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\toolbmps\\logindialogbackground.jpg.[neftet@tutanota.com].boom")) returned 1 [0122.502] MoveFileW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolBMPs\\LoginTool24x24Images.jpg" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\toolbmps\\logintool24x24images.jpg"), lpNewFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolBMPs\\LoginTool24x24Images.jpg.[neftet@tutanota.com].boom" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\toolbmps\\logintool24x24images.jpg.[neftet@tutanota.com].boom")) returned 1 [0122.505] MoveFileW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolBMPs\\LoginTool24x24ImagesMask.bmp" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\toolbmps\\logintool24x24imagesmask.bmp"), lpNewFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolBMPs\\LoginTool24x24ImagesMask.bmp.[neftet@tutanota.com].boom" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\toolbmps\\logintool24x24imagesmask.bmp.[neftet@tutanota.com].boom")) returned 1 [0122.508] MoveFileW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolBMPs\\MessageAttachmentIconImages.jpg" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\toolbmps\\messageattachmenticonimages.jpg"), lpNewFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolBMPs\\MessageAttachmentIconImages.jpg.[neftet@tutanota.com].boom" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\toolbmps\\messageattachmenticonimages.jpg.[neftet@tutanota.com].boom")) returned 1 [0122.511] MoveFileW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolBMPs\\MessageAttachmentIconImagesMask.bmp" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\toolbmps\\messageattachmenticonimagesmask.bmp"), lpNewFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolBMPs\\MessageAttachmentIconImagesMask.bmp.[neftet@tutanota.com].boom" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\toolbmps\\messageattachmenticonimagesmask.bmp.[neftet@tutanota.com].boom")) returned 1 [0122.515] MoveFileW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolBMPs\\MessageHistoryIconImages.jpg" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\toolbmps\\messagehistoryiconimages.jpg"), lpNewFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolBMPs\\MessageHistoryIconImages.jpg.[neftet@tutanota.com].boom" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\toolbmps\\messagehistoryiconimages.jpg.[neftet@tutanota.com].boom")) returned 1 [0122.518] MoveFileW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolBMPs\\MessageHistoryIconImagesMask.bmp" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\toolbmps\\messagehistoryiconimagesmask.bmp"), lpNewFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolBMPs\\MessageHistoryIconImagesMask.bmp.[neftet@tutanota.com].boom" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\toolbmps\\messagehistoryiconimagesmask.bmp.[neftet@tutanota.com].boom")) returned 1 [0122.521] MoveFileW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolBMPs\\NotifierBackground.jpg" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\toolbmps\\notifierbackground.jpg"), lpNewFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolBMPs\\NotifierBackground.jpg.[neftet@tutanota.com].boom" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\toolbmps\\notifierbackground.jpg.[neftet@tutanota.com].boom")) returned 1 [0122.525] MoveFileW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolBMPs\\NotifierBackgroundRTL.jpg" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\toolbmps\\notifierbackgroundrtl.jpg"), lpNewFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolBMPs\\NotifierBackgroundRTL.jpg.[neftet@tutanota.com].boom" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\toolbmps\\notifierbackgroundrtl.jpg.[neftet@tutanota.com].boom")) returned 1 [0122.528] MoveFileW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolBMPs\\NotifierCloseButton.jpg" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\toolbmps\\notifierclosebutton.jpg"), lpNewFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolBMPs\\NotifierCloseButton.jpg.[neftet@tutanota.com].boom" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\toolbmps\\notifierclosebutton.jpg.[neftet@tutanota.com].boom")) returned 1 [0122.531] MoveFileW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolBMPs\\NotifierDisableDownArrow.jpg" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\toolbmps\\notifierdisabledownarrow.jpg"), lpNewFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolBMPs\\NotifierDisableDownArrow.jpg.[neftet@tutanota.com].boom" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\toolbmps\\notifierdisabledownarrow.jpg.[neftet@tutanota.com].boom")) returned 1 [0122.534] MoveFileW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolBMPs\\NotifierDisableUpArrow.jpg" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\toolbmps\\notifierdisableuparrow.jpg"), lpNewFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolBMPs\\NotifierDisableUpArrow.jpg.[neftet@tutanota.com].boom" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\toolbmps\\notifierdisableuparrow.jpg.[neftet@tutanota.com].boom")) returned 1 [0122.537] MoveFileW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolBMPs\\NotifierDownArrow.jpg" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\toolbmps\\notifierdownarrow.jpg"), lpNewFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolBMPs\\NotifierDownArrow.jpg.[neftet@tutanota.com].boom" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\toolbmps\\notifierdownarrow.jpg.[neftet@tutanota.com].boom")) returned 1 [0122.540] MoveFileW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolBMPs\\NotifierUpArrow.jpg" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\toolbmps\\notifieruparrow.jpg"), lpNewFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolBMPs\\NotifierUpArrow.jpg.[neftet@tutanota.com].boom" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\toolbmps\\notifieruparrow.jpg.[neftet@tutanota.com].boom")) returned 1 [0122.547] MoveFileW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolBMPs\\NotifierWindowMask.bmp" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\toolbmps\\notifierwindowmask.bmp"), lpNewFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolBMPs\\NotifierWindowMask.bmp.[neftet@tutanota.com].boom" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\toolbmps\\notifierwindowmask.bmp.[neftet@tutanota.com].boom")) returned 1 [0122.550] MoveFileW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolBMPs\\NotifierWindowMaskRTL.bmp" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\toolbmps\\notifierwindowmaskrtl.bmp"), lpNewFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolBMPs\\NotifierWindowMaskRTL.bmp.[neftet@tutanota.com].boom" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\toolbmps\\notifierwindowmaskrtl.bmp.[neftet@tutanota.com].boom")) returned 1 [0122.553] MoveFileW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolBMPs\\OutlineToolIconImages.jpg" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\toolbmps\\outlinetooliconimages.jpg"), lpNewFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolBMPs\\OutlineToolIconImages.jpg.[neftet@tutanota.com].boom" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\toolbmps\\outlinetooliconimages.jpg.[neftet@tutanota.com].boom")) returned 1 [0122.556] MoveFileW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolBMPs\\OutlineToolIconImagesMask.bmp" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\toolbmps\\outlinetooliconimagesmask.bmp"), lpNewFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolBMPs\\OutlineToolIconImagesMask.bmp.[neftet@tutanota.com].boom" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\toolbmps\\outlinetooliconimagesmask.bmp.[neftet@tutanota.com].boom")) returned 1 [0122.559] MoveFileW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolBMPs\\OutofSyncIconImages.jpg" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\toolbmps\\outofsynciconimages.jpg"), lpNewFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolBMPs\\OutofSyncIconImages.jpg.[neftet@tutanota.com].boom" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\toolbmps\\outofsynciconimages.jpg.[neftet@tutanota.com].boom")) returned 1 [0122.562] MoveFileW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolBMPs\\OutofSyncIconImagesMask.bmp" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\toolbmps\\outofsynciconimagesmask.bmp"), lpNewFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolBMPs\\OutofSyncIconImagesMask.bmp.[neftet@tutanota.com].boom" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\toolbmps\\outofsynciconimagesmask.bmp.[neftet@tutanota.com].boom")) returned 1 [0122.566] MoveFileW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolBMPs\\PicturesToolIconImages.jpg" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\toolbmps\\picturestooliconimages.jpg"), lpNewFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolBMPs\\PicturesToolIconImages.jpg.[neftet@tutanota.com].boom" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\toolbmps\\picturestooliconimages.jpg.[neftet@tutanota.com].boom")) returned 1 [0122.570] MoveFileW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolBMPs\\PicturesToolIconImagesMask.bmp" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\toolbmps\\picturestooliconimagesmask.bmp"), lpNewFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolBMPs\\PicturesToolIconImagesMask.bmp.[neftet@tutanota.com].boom" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\toolbmps\\picturestooliconimagesmask.bmp.[neftet@tutanota.com].boom")) returned 1 [0122.573] MoveFileW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolBMPs\\QuestionIcon.jpg" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\toolbmps\\questionicon.jpg"), lpNewFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolBMPs\\QuestionIcon.jpg.[neftet@tutanota.com].boom" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\toolbmps\\questionicon.jpg.[neftet@tutanota.com].boom")) returned 1 [0122.575] MoveFileW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolBMPs\\QuestionIconMask.bmp" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\toolbmps\\questioniconmask.bmp"), lpNewFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolBMPs\\QuestionIconMask.bmp.[neftet@tutanota.com].boom" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\toolbmps\\questioniconmask.bmp.[neftet@tutanota.com].boom")) returned 1 [0122.580] MoveFileW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolBMPs\\Shared16x16Images.jpg" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\toolbmps\\shared16x16images.jpg"), lpNewFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolBMPs\\Shared16x16Images.jpg.[neftet@tutanota.com].boom" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\toolbmps\\shared16x16images.jpg.[neftet@tutanota.com].boom")) returned 1 [0122.583] MoveFileW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolBMPs\\Shared16x16ImagesMask.bmp" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\toolbmps\\shared16x16imagesmask.bmp"), lpNewFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolBMPs\\Shared16x16ImagesMask.bmp.[neftet@tutanota.com].boom" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\toolbmps\\shared16x16imagesmask.bmp.[neftet@tutanota.com].boom")) returned 1 [0122.586] MoveFileW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolBMPs\\Shared24x24Images.jpg" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\toolbmps\\shared24x24images.jpg"), lpNewFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolBMPs\\Shared24x24Images.jpg.[neftet@tutanota.com].boom" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\toolbmps\\shared24x24images.jpg.[neftet@tutanota.com].boom")) returned 1 [0122.589] MoveFileW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolBMPs\\Shared24x24ImagesMask.bmp" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\toolbmps\\shared24x24imagesmask.bmp"), lpNewFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolBMPs\\Shared24x24ImagesMask.bmp.[neftet@tutanota.com].boom" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\toolbmps\\shared24x24imagesmask.bmp.[neftet@tutanota.com].boom")) returned 1 [0122.593] MoveFileW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolBMPs\\SketchIconImages.bmp" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\toolbmps\\sketchiconimages.bmp"), lpNewFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolBMPs\\SketchIconImages.bmp.[neftet@tutanota.com].boom" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\toolbmps\\sketchiconimages.bmp.[neftet@tutanota.com].boom")) returned 1 [0122.596] MoveFileW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolBMPs\\spacebackupicons.jpg" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\toolbmps\\spacebackupicons.jpg"), lpNewFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolBMPs\\spacebackupicons.jpg.[neftet@tutanota.com].boom" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\toolbmps\\spacebackupicons.jpg.[neftet@tutanota.com].boom")) returned 1 [0122.599] MoveFileW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolBMPs\\spacebackupiconsmask.bmp" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\toolbmps\\spacebackupiconsmask.bmp"), lpNewFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolBMPs\\spacebackupiconsmask.bmp.[neftet@tutanota.com].boom" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\toolbmps\\spacebackupiconsmask.bmp.[neftet@tutanota.com].boom")) returned 1 [0122.602] MoveFileW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolBMPs\\StopIconMask.bmp" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\toolbmps\\stopiconmask.bmp"), lpNewFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolBMPs\\StopIconMask.bmp.[neftet@tutanota.com].boom" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\toolbmps\\stopiconmask.bmp.[neftet@tutanota.com].boom")) returned 1 [0122.605] MoveFileW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolBMPs\\TaskbarIconImages256Colors.bmp" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\toolbmps\\taskbariconimages256colors.bmp"), lpNewFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolBMPs\\TaskbarIconImages256Colors.bmp.[neftet@tutanota.com].boom" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\toolbmps\\taskbariconimages256colors.bmp.[neftet@tutanota.com].boom")) returned 1 [0122.608] MoveFileW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolBMPs\\TaskbarIconImagesMask256Colors.bmp" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\toolbmps\\taskbariconimagesmask256colors.bmp"), lpNewFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolBMPs\\TaskbarIconImagesMask256Colors.bmp.[neftet@tutanota.com].boom" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\toolbmps\\taskbariconimagesmask256colors.bmp.[neftet@tutanota.com].boom")) returned 1 [0122.611] MoveFileW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolBMPs\\TipsImage.jpg" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\toolbmps\\tipsimage.jpg"), lpNewFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolBMPs\\TipsImage.jpg.[neftet@tutanota.com].boom" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\toolbmps\\tipsimage.jpg.[neftet@tutanota.com].boom")) returned 1 [0122.614] MoveFileW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolBMPs\\TipsImageMask.bmp" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\toolbmps\\tipsimagemask.bmp"), lpNewFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolBMPs\\TipsImageMask.bmp.[neftet@tutanota.com].boom" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\toolbmps\\tipsimagemask.bmp.[neftet@tutanota.com].boom")) returned 1 [0122.617] MoveFileW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolBMPs\\VeriSignLogo.jpg" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\toolbmps\\verisignlogo.jpg"), lpNewFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolBMPs\\VeriSignLogo.jpg.[neftet@tutanota.com].boom" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\toolbmps\\verisignlogo.jpg.[neftet@tutanota.com].boom")) returned 1 [0122.621] MoveFileW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolBMPs\\WebToolIconImages.jpg" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\toolbmps\\webtooliconimages.jpg"), lpNewFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolBMPs\\WebToolIconImages.jpg.[neftet@tutanota.com].boom" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\toolbmps\\webtooliconimages.jpg.[neftet@tutanota.com].boom")) returned 1 [0122.625] MoveFileW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolBMPs\\WebToolIconImagesMask.bmp" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\toolbmps\\webtooliconimagesmask.bmp"), lpNewFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolBMPs\\WebToolIconImagesMask.bmp.[neftet@tutanota.com].boom" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\toolbmps\\webtooliconimagesmask.bmp.[neftet@tutanota.com].boom")) returned 1 [0122.628] MoveFileW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolBMPs\\WebToolImages16x16.jpg" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\toolbmps\\webtoolimages16x16.jpg"), lpNewFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolBMPs\\WebToolImages16x16.jpg.[neftet@tutanota.com].boom" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\toolbmps\\webtoolimages16x16.jpg.[neftet@tutanota.com].boom")) returned 1 [0122.630] MoveFileW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolBMPs\\WebToolImagesMask16x16.bmp" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\toolbmps\\webtoolimagesmask16x16.bmp"), lpNewFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolBMPs\\WebToolImagesMask16x16.bmp.[neftet@tutanota.com].boom" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\toolbmps\\webtoolimagesmask16x16.bmp.[neftet@tutanota.com].boom")) returned 1 [0122.635] MoveFileW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolBMPs\\WSSFilesToolIconImages.jpg" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\toolbmps\\wssfilestooliconimages.jpg"), lpNewFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolBMPs\\WSSFilesToolIconImages.jpg.[neftet@tutanota.com].boom" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\toolbmps\\wssfilestooliconimages.jpg.[neftet@tutanota.com].boom")) returned 1 [0122.638] MoveFileW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolBMPs\\WSSFilesToolIconImagesMask.bmp" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\toolbmps\\wssfilestooliconimagesmask.bmp"), lpNewFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolBMPs\\WSSFilesToolIconImagesMask.bmp.[neftet@tutanota.com].boom" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\toolbmps\\wssfilestooliconimagesmask.bmp.[neftet@tutanota.com].boom")) returned 1 [0122.641] MoveFileW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\Calendar\\CalendarToolIconImages.jpg" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\calendar\\calendartooliconimages.jpg"), lpNewFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\Calendar\\CalendarToolIconImages.jpg.[neftet@tutanota.com].boom" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\calendar\\calendartooliconimages.jpg.[neftet@tutanota.com].boom")) returned 1 [0122.648] MoveFileW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\Calendar\\CalendarToolIconImagesMask.bmp" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\calendar\\calendartooliconimagesmask.bmp"), lpNewFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\Calendar\\CalendarToolIconImagesMask.bmp.[neftet@tutanota.com].boom" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\calendar\\calendartooliconimagesmask.bmp.[neftet@tutanota.com].boom")) returned 1 [0122.652] MoveFileW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\Calendar\\CalendarViewButtonImages.jpg" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\calendar\\calendarviewbuttonimages.jpg"), lpNewFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\Calendar\\CalendarViewButtonImages.jpg.[neftet@tutanota.com].boom" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\calendar\\calendarviewbuttonimages.jpg.[neftet@tutanota.com].boom")) returned 1 [0122.656] MoveFileW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\Calendar\\GlobeButtonImage.jpg" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\calendar\\globebuttonimage.jpg"), lpNewFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\Calendar\\GlobeButtonImage.jpg.[neftet@tutanota.com].boom" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\calendar\\globebuttonimage.jpg.[neftet@tutanota.com].boom")) returned 1 [0122.659] MoveFileW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\Calendar\\GlobeButtonImageMask.bmp" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\calendar\\globebuttonimagemask.bmp"), lpNewFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\Calendar\\GlobeButtonImageMask.bmp.[neftet@tutanota.com].boom" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\calendar\\globebuttonimagemask.bmp.[neftet@tutanota.com].boom")) returned 1 [0122.663] MoveFileW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\CommonData\\AlertImage_Auto.jpg" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\commondata\\alertimage_auto.jpg"), lpNewFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\CommonData\\AlertImage_Auto.jpg.[neftet@tutanota.com].boom" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\commondata\\alertimage_auto.jpg.[neftet@tutanota.com].boom")) returned 1 [0122.666] MoveFileW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\CommonData\\AlertImage_AutoMask.bmp" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\commondata\\alertimage_automask.bmp"), lpNewFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\CommonData\\AlertImage_AutoMask.bmp.[neftet@tutanota.com].boom" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\commondata\\alertimage_automask.bmp.[neftet@tutanota.com].boom")) returned 1 [0122.673] MoveFileW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\CommonData\\AlertImage_ContactHigh.jpg" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\commondata\\alertimage_contacthigh.jpg"), lpNewFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\CommonData\\AlertImage_ContactHigh.jpg.[neftet@tutanota.com].boom" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\commondata\\alertimage_contacthigh.jpg.[neftet@tutanota.com].boom")) returned 1 [0122.676] MoveFileW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\CommonData\\AlertImage_ContactHighMask.bmp" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\commondata\\alertimage_contacthighmask.bmp"), lpNewFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\CommonData\\AlertImage_ContactHighMask.bmp.[neftet@tutanota.com].boom" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\commondata\\alertimage_contacthighmask.bmp.[neftet@tutanota.com].boom")) returned 1 [0122.680] MoveFileW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\CommonData\\AlertImage_ContactLow.jpg" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\commondata\\alertimage_contactlow.jpg"), lpNewFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\CommonData\\AlertImage_ContactLow.jpg.[neftet@tutanota.com].boom" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\commondata\\alertimage_contactlow.jpg.[neftet@tutanota.com].boom")) returned 1 [0122.683] MoveFileW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\CommonData\\AlertImage_ContactLowMask.bmp" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\commondata\\alertimage_contactlowmask.bmp"), lpNewFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\CommonData\\AlertImage_ContactLowMask.bmp.[neftet@tutanota.com].boom" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\commondata\\alertimage_contactlowmask.bmp.[neftet@tutanota.com].boom")) returned 1 [0122.687] MoveFileW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\CommonData\\AlertImage_FileHigh.jpg" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\commondata\\alertimage_filehigh.jpg"), lpNewFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\CommonData\\AlertImage_FileHigh.jpg.[neftet@tutanota.com].boom" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\commondata\\alertimage_filehigh.jpg.[neftet@tutanota.com].boom")) returned 1 [0122.690] MoveFileW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\CommonData\\AlertImage_FileHighMask.bmp" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\commondata\\alertimage_filehighmask.bmp"), lpNewFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\CommonData\\AlertImage_FileHighMask.bmp.[neftet@tutanota.com].boom" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\commondata\\alertimage_filehighmask.bmp.[neftet@tutanota.com].boom")) returned 1 [0122.693] MoveFileW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\CommonData\\AlertImage_FileOff.jpg" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\commondata\\alertimage_fileoff.jpg"), lpNewFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\CommonData\\AlertImage_FileOff.jpg.[neftet@tutanota.com].boom" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\commondata\\alertimage_fileoff.jpg.[neftet@tutanota.com].boom")) returned 1 [0122.697] MoveFileW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\CommonData\\AlertImage_FileOffMask.bmp" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\commondata\\alertimage_fileoffmask.bmp"), lpNewFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\CommonData\\AlertImage_FileOffMask.bmp.[neftet@tutanota.com].boom" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\commondata\\alertimage_fileoffmask.bmp.[neftet@tutanota.com].boom")) returned 1 [0122.700] MoveFileW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\CommonData\\AlertImage_High.jpg" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\commondata\\alertimage_high.jpg"), lpNewFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\CommonData\\AlertImage_High.jpg.[neftet@tutanota.com].boom" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\commondata\\alertimage_high.jpg.[neftet@tutanota.com].boom")) returned 1 [0122.703] MoveFileW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\CommonData\\AlertImage_HighMask.bmp" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\commondata\\alertimage_highmask.bmp"), lpNewFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\CommonData\\AlertImage_HighMask.bmp.[neftet@tutanota.com].boom" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\commondata\\alertimage_highmask.bmp.[neftet@tutanota.com].boom")) returned 1 [0122.707] MoveFileW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\CommonData\\AlertImage_Medium.jpg" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\commondata\\alertimage_medium.jpg"), lpNewFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\CommonData\\AlertImage_Medium.jpg.[neftet@tutanota.com].boom" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\commondata\\alertimage_medium.jpg.[neftet@tutanota.com].boom")) returned 1 [0122.720] MoveFileW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\CommonData\\AlertImage_MediumMAsk.bmp" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\commondata\\alertimage_mediummask.bmp"), lpNewFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\CommonData\\AlertImage_MediumMAsk.bmp.[neftet@tutanota.com].boom" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\commondata\\alertimage_mediummask.bmp.[neftet@tutanota.com].boom")) returned 1 [0122.724] MoveFileW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\CommonData\\AlertImage_Off.jpg" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\commondata\\alertimage_off.jpg"), lpNewFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\CommonData\\AlertImage_Off.jpg.[neftet@tutanota.com].boom" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\commondata\\alertimage_off.jpg.[neftet@tutanota.com].boom")) returned 1 [0122.727] MoveFileW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\CommonData\\AlertImage_OffMask.bmp" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\commondata\\alertimage_offmask.bmp"), lpNewFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\CommonData\\AlertImage_OffMask.bmp.[neftet@tutanota.com].boom" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\commondata\\alertimage_offmask.bmp.[neftet@tutanota.com].boom")) returned 1 [0122.730] MoveFileW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\CommonData\\CommsIncomingImage.jpg" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\commondata\\commsincomingimage.jpg"), lpNewFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\CommonData\\CommsIncomingImage.jpg.[neftet@tutanota.com].boom" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\commondata\\commsincomingimage.jpg.[neftet@tutanota.com].boom")) returned 1 [0122.733] MoveFileW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\CommonData\\CommsIncomingImageMask.bmp" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\commondata\\commsincomingimagemask.bmp"), lpNewFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\CommonData\\CommsIncomingImageMask.bmp.[neftet@tutanota.com].boom" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\commondata\\commsincomingimagemask.bmp.[neftet@tutanota.com].boom")) returned 1 [0122.735] MoveFileW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\CommonData\\CommsIncomingImageMaskSmall.bmp" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\commondata\\commsincomingimagemasksmall.bmp"), lpNewFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\CommonData\\CommsIncomingImageMaskSmall.bmp.[neftet@tutanota.com].boom" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\commondata\\commsincomingimagemasksmall.bmp.[neftet@tutanota.com].boom")) returned 1 [0122.765] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\CommonData\\CommsIncomingImageSmall.jpg", nBufferLength=0x105, lpBuffer=0x31e01c, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\CommonData\\CommsIncomingImageSmall.jpg", lpFilePart=0x0) returned 0x6c [0122.765] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\CommonData\\CommsIncomingImageSmall.jpg" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\commondata\\commsincomingimagesmall.jpg"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x178 [0122.767] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\CommonData\\CommsIncomingImageSmall.jpg", nBufferLength=0x105, lpBuffer=0x31e008, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\CommonData\\CommsIncomingImageSmall.jpg", lpFilePart=0x0) returned 0x6c [0122.770] MoveFileW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\CommonData\\CommsIncomingImageSmall.jpg" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\commondata\\commsincomingimagesmall.jpg"), lpNewFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\CommonData\\CommsIncomingImageSmall.jpg.[neftet@tutanota.com].boom" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\commondata\\commsincomingimagesmall.jpg.[neftet@tutanota.com].boom")) returned 1 [0122.773] MoveFileW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\CommonData\\CommsOutgoingImage.jpg" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\commondata\\commsoutgoingimage.jpg"), lpNewFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\CommonData\\CommsOutgoingImage.jpg.[neftet@tutanota.com].boom" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\commondata\\commsoutgoingimage.jpg.[neftet@tutanota.com].boom")) returned 1 [0122.777] MoveFileW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\CommonData\\CommsOutgoingImageMask.bmp" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\commondata\\commsoutgoingimagemask.bmp"), lpNewFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\CommonData\\CommsOutgoingImageMask.bmp.[neftet@tutanota.com].boom" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\commondata\\commsoutgoingimagemask.bmp.[neftet@tutanota.com].boom")) returned 1 [0122.780] MoveFileW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\CommonData\\CommsOutgoingImageMaskSmall.bmp" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\commondata\\commsoutgoingimagemasksmall.bmp"), lpNewFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\CommonData\\CommsOutgoingImageMaskSmall.bmp.[neftet@tutanota.com].boom" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\commondata\\commsoutgoingimagemasksmall.bmp.[neftet@tutanota.com].boom")) returned 1 [0122.783] MoveFileW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\CommonData\\CommsOutgoingImageSmall.jpg" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\commondata\\commsoutgoingimagesmall.jpg"), lpNewFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\CommonData\\CommsOutgoingImageSmall.jpg.[neftet@tutanota.com].boom" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\commondata\\commsoutgoingimagesmall.jpg.[neftet@tutanota.com].boom")) returned 1 [0122.789] MoveFileW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\CommonData\\MessageBoxIconImages.jpg" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\commondata\\messageboxiconimages.jpg"), lpNewFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\CommonData\\MessageBoxIconImages.jpg.[neftet@tutanota.com].boom" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\commondata\\messageboxiconimages.jpg.[neftet@tutanota.com].boom")) returned 1 [0122.794] MoveFileW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\CommonData\\MessageBoxIconImagesMask.bmp" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\commondata\\messageboxiconimagesmask.bmp"), lpNewFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\CommonData\\MessageBoxIconImagesMask.bmp.[neftet@tutanota.com].boom" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\commondata\\messageboxiconimagesmask.bmp.[neftet@tutanota.com].boom")) returned 1 [0122.797] MoveFileW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\CommonData\\UnreadIcon.jpg" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\commondata\\unreadicon.jpg"), lpNewFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\CommonData\\UnreadIcon.jpg.[neftet@tutanota.com].boom" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\commondata\\unreadicon.jpg.[neftet@tutanota.com].boom")) returned 1 [0122.800] MoveFileW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\CommonData\\UnreadIconImages.jpg" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\commondata\\unreadiconimages.jpg"), lpNewFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\CommonData\\UnreadIconImages.jpg.[neftet@tutanota.com].boom" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\commondata\\unreadiconimages.jpg.[neftet@tutanota.com].boom")) returned 1 [0122.804] MoveFileW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\CommonData\\UnreadIconImagesMask.bmp" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\commondata\\unreadiconimagesmask.bmp"), lpNewFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\CommonData\\UnreadIconImagesMask.bmp.[neftet@tutanota.com].boom" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\commondata\\unreadiconimagesmask.bmp.[neftet@tutanota.com].boom")) returned 1 [0122.805] FindNextFileW (in: hFindFile=0x381b80, lpFindFileData=0x31e38c | out: lpFindFileData=0x31e38c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x51cc30d0, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x60440c50, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x60440c50, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0122.805] FindNextFileW (in: hFindFile=0x381b80, lpFindFileData=0x31e38c | out: lpFindFileData=0x31e38c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x80130d00, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0x60440c50, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xfbca7360, ftLastWriteTime.dwHighDateTime=0x1d6eb7e, nFileSizeHigh=0x0, nFileSizeLow=0xe20, dwReserved0=0x0, dwReserved1=0x0, cFileName="computericon.jpg", cAlternateFileName="COMPUT~1.JPG")) returned 1 [0122.805] FindNextFileW (in: hFindFile=0x381b80, lpFindFileData=0x31e38c | out: lpFindFileData=0x31e38c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x80130d00, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0x51cc30d0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xfbccd4c0, ftLastWriteTime.dwHighDateTime=0x1d6eb7e, nFileSizeHigh=0x0, nFileSizeLow=0x840, dwReserved0=0x0, dwReserved1=0x0, cFileName="computericonMask.bmp", cAlternateFileName="COMPUT~1.BMP")) returned 1 [0122.805] FindNextFileW (in: hFindFile=0x381b80, lpFindFileData=0x31e38c | out: lpFindFileData=0x31e38c*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0122.805] FindNextFileW (in: hFindFile=0x381b80, lpFindFileData=0x31e38c | out: lpFindFileData=0x31e38c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x51cc30d0, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x60440c50, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x60440c50, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0122.805] FindNextFileW (in: hFindFile=0x381b80, lpFindFileData=0x31e38c | out: lpFindFileData=0x31e38c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x80130d00, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0x60440c50, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xfbca7360, ftLastWriteTime.dwHighDateTime=0x1d6eb7e, nFileSizeHigh=0x0, nFileSizeLow=0xe20, dwReserved0=0x0, dwReserved1=0x0, cFileName="computericon.jpg", cAlternateFileName="COMPUT~1.JPG")) returned 1 [0122.805] FindNextFileW (in: hFindFile=0x381b80, lpFindFileData=0x31e38c | out: lpFindFileData=0x31e38c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x80130d00, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0x51cc30d0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xfbccd4c0, ftLastWriteTime.dwHighDateTime=0x1d6eb7e, nFileSizeHigh=0x0, nFileSizeLow=0x840, dwReserved0=0x0, dwReserved1=0x0, cFileName="computericonMask.bmp", cAlternateFileName="COMPUT~1.BMP")) returned 1 [0122.805] FindNextFileW (in: hFindFile=0x381b80, lpFindFileData=0x31e38c | out: lpFindFileData=0x31e38c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x80130d00, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0x51cc30d0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xfbccd4c0, ftLastWriteTime.dwHighDateTime=0x1d6eb7e, nFileSizeHigh=0x0, nFileSizeLow=0x840, dwReserved0=0x0, dwReserved1=0x0, cFileName="computericonMask.bmp", cAlternateFileName="COMPUT~1.BMP")) returned 0 [0122.808] MoveFileW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\Computers\\computericon.jpg" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\computers\\computericon.jpg"), lpNewFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\Computers\\computericon.jpg.[neftet@tutanota.com].boom" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\computers\\computericon.jpg.[neftet@tutanota.com].boom")) returned 1 [0122.811] MoveFileW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\Computers\\computericonMask.bmp" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\computers\\computericonmask.bmp"), lpNewFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\Computers\\computericonMask.bmp.[neftet@tutanota.com].boom" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\computers\\computericonmask.bmp.[neftet@tutanota.com].boom")) returned 1 [0122.813] FindNextFileW (in: hFindFile=0x381b80, lpFindFileData=0x31e38c | out: lpFindFileData=0x31e38c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x51e19d30, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x607d2d50, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x607d2d50, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0122.813] FindNextFileW (in: hFindFile=0x381b80, lpFindFileData=0x31e38c | out: lpFindFileData=0x31e38c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb0009600, ftCreationTime.dwHighDateTime=0x1ca0588, ftLastAccessTime.dwLowDateTime=0x51e19d30, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xfbcf3620, ftLastWriteTime.dwHighDateTime=0x1d6eb7e, nFileSizeHigh=0x0, nFileSizeLow=0x3940, dwReserved0=0x0, dwReserved1=0x0, cFileName="DiscussionToolIconImages.jpg", cAlternateFileName="DISCUS~1.JPG")) returned 1 [0122.813] FindNextFileW (in: hFindFile=0x381b80, lpFindFileData=0x31e38c | out: lpFindFileData=0x31e38c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc9ac9e00, ftCreationTime.dwHighDateTime=0x1ca033a, ftLastAccessTime.dwLowDateTime=0x607d2d50, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xfbd3f8e0, ftLastWriteTime.dwHighDateTime=0x1d6eb7e, nFileSizeHigh=0x0, nFileSizeLow=0x1740, dwReserved0=0x0, dwReserved1=0x0, cFileName="DiscussionToolIconImagesMask.bmp", cAlternateFileName="DISCUS~1.BMP")) returned 1 [0122.813] FindNextFileW (in: hFindFile=0x381b80, lpFindFileData=0x31e38c | out: lpFindFileData=0x31e38c*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0122.813] FindNextFileW (in: hFindFile=0x381b80, lpFindFileData=0x31e38c | out: lpFindFileData=0x31e38c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x51e19d30, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x607d2d50, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x607d2d50, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0122.813] FindNextFileW (in: hFindFile=0x381b80, lpFindFileData=0x31e38c | out: lpFindFileData=0x31e38c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb0009600, ftCreationTime.dwHighDateTime=0x1ca0588, ftLastAccessTime.dwLowDateTime=0x51e19d30, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xfbcf3620, ftLastWriteTime.dwHighDateTime=0x1d6eb7e, nFileSizeHigh=0x0, nFileSizeLow=0x3940, dwReserved0=0x0, dwReserved1=0x0, cFileName="DiscussionToolIconImages.jpg", cAlternateFileName="DISCUS~1.JPG")) returned 1 [0122.813] FindNextFileW (in: hFindFile=0x381b80, lpFindFileData=0x31e38c | out: lpFindFileData=0x31e38c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc9ac9e00, ftCreationTime.dwHighDateTime=0x1ca033a, ftLastAccessTime.dwLowDateTime=0x607d2d50, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xfbd3f8e0, ftLastWriteTime.dwHighDateTime=0x1d6eb7e, nFileSizeHigh=0x0, nFileSizeLow=0x1740, dwReserved0=0x0, dwReserved1=0x0, cFileName="DiscussionToolIconImagesMask.bmp", cAlternateFileName="DISCUS~1.BMP")) returned 1 [0122.813] FindNextFileW (in: hFindFile=0x381b80, lpFindFileData=0x31e38c | out: lpFindFileData=0x31e38c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc9ac9e00, ftCreationTime.dwHighDateTime=0x1ca033a, ftLastAccessTime.dwLowDateTime=0x607d2d50, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xfbd3f8e0, ftLastWriteTime.dwHighDateTime=0x1d6eb7e, nFileSizeHigh=0x0, nFileSizeLow=0x1740, dwReserved0=0x0, dwReserved1=0x0, cFileName="DiscussionToolIconImagesMask.bmp", cAlternateFileName="DISCUS~1.BMP")) returned 0 [0122.816] MoveFileW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\Discussion\\DiscussionToolIconImages.jpg" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\discussion\\discussiontooliconimages.jpg"), lpNewFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\Discussion\\DiscussionToolIconImages.jpg.[neftet@tutanota.com].boom" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\discussion\\discussiontooliconimages.jpg.[neftet@tutanota.com].boom")) returned 1 [0122.821] MoveFileW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\Discussion\\DiscussionToolIconImagesMask.bmp" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\discussion\\discussiontooliconimagesmask.bmp"), lpNewFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\Discussion\\DiscussionToolIconImagesMask.bmp.[neftet@tutanota.com].boom" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\discussion\\discussiontooliconimagesmask.bmp.[neftet@tutanota.com].boom")) returned 1 [0122.821] FindNextFileW (in: hFindFile=0x381b80, lpFindFileData=0x31e38c | out: lpFindFileData=0x31e38c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x709f1ef0, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x709f1ef0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x709f1ef0, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0122.821] FindNextFileW (in: hFindFile=0x381b80, lpFindFileData=0x31e38c | out: lpFindFileData=0x31e38c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x81443a00, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0x709f1ef0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xfbd65a40, ftLastWriteTime.dwHighDateTime=0x1d6eb7e, nFileSizeHigh=0x0, nFileSizeLow=0xab20, dwReserved0=0x0, dwReserved1=0x0, cFileName="WSSFilesToolHomePageBackground.jpg", cAlternateFileName="WSSFIL~1.JPG")) returned 1 [0122.821] FindNextFileW (in: hFindFile=0x381b80, lpFindFileData=0x31e38c | out: lpFindFileData=0x31e38c*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0122.822] FindNextFileW (in: hFindFile=0x381b80, lpFindFileData=0x31e38c | out: lpFindFileData=0x31e38c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x709f1ef0, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x709f1ef0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x709f1ef0, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0122.822] FindNextFileW (in: hFindFile=0x381b80, lpFindFileData=0x31e38c | out: lpFindFileData=0x31e38c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x81443a00, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0x709f1ef0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xfbd65a40, ftLastWriteTime.dwHighDateTime=0x1d6eb7e, nFileSizeHigh=0x0, nFileSizeLow=0xab20, dwReserved0=0x0, dwReserved1=0x0, cFileName="WSSFilesToolHomePageBackground.jpg", cAlternateFileName="WSSFIL~1.JPG")) returned 1 [0122.822] FindNextFileW (in: hFindFile=0x381b80, lpFindFileData=0x31e38c | out: lpFindFileData=0x31e38c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x81443a00, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0x709f1ef0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xfbd65a40, ftLastWriteTime.dwHighDateTime=0x1d6eb7e, nFileSizeHigh=0x0, nFileSizeLow=0xab20, dwReserved0=0x0, dwReserved1=0x0, cFileName="WSSFilesToolHomePageBackground.jpg", cAlternateFileName="WSSFIL~1.JPG")) returned 0 [0122.826] MoveFileW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\DocumentShare\\WSSFilesToolHomePageBackground.jpg" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\documentshare\\wssfilestoolhomepagebackground.jpg"), lpNewFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\DocumentShare\\WSSFilesToolHomePageBackground.jpg.[neftet@tutanota.com].boom" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\documentshare\\wssfilestoolhomepagebackground.jpg.[neftet@tutanota.com].boom")) returned 1 [0122.827] FindNextFileW (in: hFindFile=0x381b80, lpFindFileData=0x31e38c | out: lpFindFileData=0x31e38c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x51174850, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x696f1810, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x696f1810, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0122.827] FindNextFileW (in: hFindFile=0x381b80, lpFindFileData=0x31e38c | out: lpFindFileData=0x31e38c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x81443a00, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0x51174850, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xfbdb1d00, ftLastWriteTime.dwHighDateTime=0x1d6eb7e, nFileSizeHigh=0x0, nFileSizeLow=0x2520, dwReserved0=0x0, dwReserved1=0x0, cFileName="ActiveTabImage.jpg", cAlternateFileName="ACTIVE~1.JPG")) returned 1 [0122.827] FindNextFileW (in: hFindFile=0x381b80, lpFindFileData=0x31e38c | out: lpFindFileData=0x31e38c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x81443a00, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0x5e9eb8f0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xfbdd7e60, ftLastWriteTime.dwHighDateTime=0x1d6eb7e, nFileSizeHigh=0x0, nFileSizeLow=0xcb0, dwReserved0=0x0, dwReserved1=0x0, cFileName="ActiveTabImageMask.bmp", cAlternateFileName="ACTIVE~1.BMP")) returned 1 [0122.827] FindNextFileW (in: hFindFile=0x381b80, lpFindFileData=0x31e38c | out: lpFindFileData=0x31e38c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x82756700, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0x51a15810, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xfbe24120, ftLastWriteTime.dwHighDateTime=0x1d6eb7e, nFileSizeHigh=0x0, nFileSizeLow=0x9c0, dwReserved0=0x0, dwReserved1=0x0, cFileName="BodyPaneBackground.jpg", cAlternateFileName="BODYPA~1.JPG")) returned 1 [0122.827] FindNextFileW (in: hFindFile=0x381b80, lpFindFileData=0x31e38c | out: lpFindFileData=0x31e38c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x82756700, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0x5392d770, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xfbe4a280, ftLastWriteTime.dwHighDateTime=0x1d6eb7e, nFileSizeHigh=0x0, nFileSizeLow=0x24f0, dwReserved0=0x0, dwReserved1=0x0, cFileName="InactiveTabImage.jpg", cAlternateFileName="INACTI~1.JPG")) returned 1 [0122.827] FindNextFileW (in: hFindFile=0x381b80, lpFindFileData=0x31e38c | out: lpFindFileData=0x31e38c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x82756700, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0x61cf3090, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xfbe703e0, ftLastWriteTime.dwHighDateTime=0x1d6eb7e, nFileSizeHigh=0x0, nFileSizeLow=0xcb0, dwReserved0=0x0, dwReserved1=0x0, cFileName="InactiveTabImageMask.bmp", cAlternateFileName="INACTI~1.BMP")) returned 1 [0122.827] FindNextFileW (in: hFindFile=0x381b80, lpFindFileData=0x31e38c | out: lpFindFileData=0x31e38c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x82756700, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0x696f1810, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xfbebc6a0, ftLastWriteTime.dwHighDateTime=0x1d6eb7e, nFileSizeHigh=0x0, nFileSizeLow=0x990, dwReserved0=0x0, dwReserved1=0x0, cFileName="MarkupIconImages.jpg", cAlternateFileName="MARKUP~1.JPG")) returned 1 [0122.827] FindNextFileW (in: hFindFile=0x381b80, lpFindFileData=0x31e38c | out: lpFindFileData=0x31e38c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x82756700, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0x582d2010, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xfbee2800, ftLastWriteTime.dwHighDateTime=0x1d6eb7e, nFileSizeHigh=0x0, nFileSizeLow=0x80, dwReserved0=0x0, dwReserved1=0x0, cFileName="MarkupIconImagesMask.bmp", cAlternateFileName="MARKUP~1.BMP")) returned 1 [0122.827] FindNextFileW (in: hFindFile=0x381b80, lpFindFileData=0x31e38c | out: lpFindFileData=0x31e38c*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0122.827] FindNextFileW (in: hFindFile=0x381b80, lpFindFileData=0x31e38c | out: lpFindFileData=0x31e38c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x51174850, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x696f1810, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x696f1810, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0122.827] FindNextFileW (in: hFindFile=0x381b80, lpFindFileData=0x31e38c | out: lpFindFileData=0x31e38c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x81443a00, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0x51174850, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xfbdb1d00, ftLastWriteTime.dwHighDateTime=0x1d6eb7e, nFileSizeHigh=0x0, nFileSizeLow=0x2520, dwReserved0=0x0, dwReserved1=0x0, cFileName="ActiveTabImage.jpg", cAlternateFileName="ACTIVE~1.JPG")) returned 1 [0122.827] FindNextFileW (in: hFindFile=0x381b80, lpFindFileData=0x31e38c | out: lpFindFileData=0x31e38c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x81443a00, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0x5e9eb8f0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xfbdd7e60, ftLastWriteTime.dwHighDateTime=0x1d6eb7e, nFileSizeHigh=0x0, nFileSizeLow=0xcb0, dwReserved0=0x0, dwReserved1=0x0, cFileName="ActiveTabImageMask.bmp", cAlternateFileName="ACTIVE~1.BMP")) returned 1 [0122.827] FindNextFileW (in: hFindFile=0x381b80, lpFindFileData=0x31e38c | out: lpFindFileData=0x31e38c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x82756700, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0x51a15810, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xfbe24120, ftLastWriteTime.dwHighDateTime=0x1d6eb7e, nFileSizeHigh=0x0, nFileSizeLow=0x9c0, dwReserved0=0x0, dwReserved1=0x0, cFileName="BodyPaneBackground.jpg", cAlternateFileName="BODYPA~1.JPG")) returned 1 [0122.827] FindNextFileW (in: hFindFile=0x381b80, lpFindFileData=0x31e38c | out: lpFindFileData=0x31e38c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x82756700, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0x5392d770, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xfbe4a280, ftLastWriteTime.dwHighDateTime=0x1d6eb7e, nFileSizeHigh=0x0, nFileSizeLow=0x24f0, dwReserved0=0x0, dwReserved1=0x0, cFileName="InactiveTabImage.jpg", cAlternateFileName="INACTI~1.JPG")) returned 1 [0122.827] FindNextFileW (in: hFindFile=0x381b80, lpFindFileData=0x31e38c | out: lpFindFileData=0x31e38c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x82756700, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0x61cf3090, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xfbe703e0, ftLastWriteTime.dwHighDateTime=0x1d6eb7e, nFileSizeHigh=0x0, nFileSizeLow=0xcb0, dwReserved0=0x0, dwReserved1=0x0, cFileName="InactiveTabImageMask.bmp", cAlternateFileName="INACTI~1.BMP")) returned 1 [0122.827] FindNextFileW (in: hFindFile=0x381b80, lpFindFileData=0x31e38c | out: lpFindFileData=0x31e38c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x82756700, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0x696f1810, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xfbebc6a0, ftLastWriteTime.dwHighDateTime=0x1d6eb7e, nFileSizeHigh=0x0, nFileSizeLow=0x990, dwReserved0=0x0, dwReserved1=0x0, cFileName="MarkupIconImages.jpg", cAlternateFileName="MARKUP~1.JPG")) returned 1 [0122.827] FindNextFileW (in: hFindFile=0x381b80, lpFindFileData=0x31e38c | out: lpFindFileData=0x31e38c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x82756700, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0x582d2010, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xfbee2800, ftLastWriteTime.dwHighDateTime=0x1d6eb7e, nFileSizeHigh=0x0, nFileSizeLow=0x80, dwReserved0=0x0, dwReserved1=0x0, cFileName="MarkupIconImagesMask.bmp", cAlternateFileName="MARKUP~1.BMP")) returned 1 [0122.827] FindNextFileW (in: hFindFile=0x381b80, lpFindFileData=0x31e38c | out: lpFindFileData=0x31e38c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x82756700, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0x582d2010, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xfbee2800, ftLastWriteTime.dwHighDateTime=0x1d6eb7e, nFileSizeHigh=0x0, nFileSizeLow=0x80, dwReserved0=0x0, dwReserved1=0x0, cFileName="MarkupIconImagesMask.bmp", cAlternateFileName="MARKUP~1.BMP")) returned 0 [0122.830] MoveFileW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveDocumentReview\\ActiveTabImage.jpg" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\groovedocumentreview\\activetabimage.jpg"), lpNewFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveDocumentReview\\ActiveTabImage.jpg.[neftet@tutanota.com].boom" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\groovedocumentreview\\activetabimage.jpg.[neftet@tutanota.com].boom")) returned 1 [0122.833] MoveFileW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveDocumentReview\\ActiveTabImageMask.bmp" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\groovedocumentreview\\activetabimagemask.bmp"), lpNewFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveDocumentReview\\ActiveTabImageMask.bmp.[neftet@tutanota.com].boom" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\groovedocumentreview\\activetabimagemask.bmp.[neftet@tutanota.com].boom")) returned 1 [0122.836] MoveFileW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveDocumentReview\\BodyPaneBackground.jpg" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\groovedocumentreview\\bodypanebackground.jpg"), lpNewFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveDocumentReview\\BodyPaneBackground.jpg.[neftet@tutanota.com].boom" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\groovedocumentreview\\bodypanebackground.jpg.[neftet@tutanota.com].boom")) returned 1 [0122.840] MoveFileW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveDocumentReview\\InactiveTabImage.jpg" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\groovedocumentreview\\inactivetabimage.jpg"), lpNewFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveDocumentReview\\InactiveTabImage.jpg.[neftet@tutanota.com].boom" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\groovedocumentreview\\inactivetabimage.jpg.[neftet@tutanota.com].boom")) returned 1 [0122.842] MoveFileW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveDocumentReview\\InactiveTabImageMask.bmp" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\groovedocumentreview\\inactivetabimagemask.bmp"), lpNewFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveDocumentReview\\InactiveTabImageMask.bmp.[neftet@tutanota.com].boom" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\groovedocumentreview\\inactivetabimagemask.bmp.[neftet@tutanota.com].boom")) returned 1 [0122.845] MoveFileW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveDocumentReview\\MarkupIconImages.jpg" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\groovedocumentreview\\markupiconimages.jpg"), lpNewFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveDocumentReview\\MarkupIconImages.jpg.[neftet@tutanota.com].boom" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\groovedocumentreview\\markupiconimages.jpg.[neftet@tutanota.com].boom")) returned 1 [0122.848] MoveFileW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveDocumentReview\\MarkupIconImagesMask.bmp" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\groovedocumentreview\\markupiconimagesmask.bmp"), lpNewFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveDocumentReview\\MarkupIconImagesMask.bmp.[neftet@tutanota.com].boom" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\groovedocumentreview\\markupiconimagesmask.bmp.[neftet@tutanota.com].boom")) returned 1 [0122.849] FindNextFileW (in: hFindFile=0x381b80, lpFindFileData=0x31e38c | out: lpFindFileData=0x31e38c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5127f1f0, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x706f8370, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x706f8370, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0122.849] FindNextFileW (in: hFindFile=0x381b80, lpFindFileData=0x31e38c | out: lpFindFileData=0x31e38c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x82756700, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0x5127f1f0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xfbf2eac0, ftLastWriteTime.dwHighDateTime=0x1d6eb7e, nFileSizeHigh=0x0, nFileSizeLow=0xbf0, dwReserved0=0x0, dwReserved1=0x0, cFileName="AddToViewArrow.jpg", cAlternateFileName="ADDTOV~1.JPG")) returned 1 [0122.849] FindNextFileW (in: hFindFile=0x381b80, lpFindFileData=0x31e38c | out: lpFindFileData=0x31e38c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x83a69400, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0x5127f1f0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xfbf54c20, ftLastWriteTime.dwHighDateTime=0x1d6eb7e, nFileSizeHigh=0x0, nFileSizeLow=0x930, dwReserved0=0x0, dwReserved1=0x0, cFileName="AddToViewArrowMask.bmp", cAlternateFileName="ADDTOV~1.BMP")) returned 1 [0122.849] FindNextFileW (in: hFindFile=0x381b80, lpFindFileData=0x31e38c | out: lpFindFileData=0x31e38c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x83a69400, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0x5f409670, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x83a69400, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0xae8, dwReserved0=0x0, dwReserved1=0x0, cFileName="attention.gif", cAlternateFileName="ATTENT~1.GIF")) returned 1 [0122.849] FindNextFileW (in: hFindFile=0x381b80, lpFindFileData=0x31e38c | out: lpFindFileData=0x31e38c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x83a69400, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0x5f61e9b0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x83a69400, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0x614e, dwReserved0=0x0, dwReserved1=0x0, cFileName="BG_ADOBE.GIF", cAlternateFileName="")) returned 1 [0122.849] FindNextFileW (in: hFindFile=0x381b80, lpFindFileData=0x31e38c | out: lpFindFileData=0x31e38c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x83a69400, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0x5f61e9b0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x83a69400, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0x161d, dwReserved0=0x0, dwReserved1=0x0, cFileName="bg_Casual.gif", cAlternateFileName="BG_CAS~1.GIF")) returned 1 [0122.849] FindNextFileW (in: hFindFile=0x381b80, lpFindFileData=0x31e38c | out: lpFindFileData=0x31e38c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x83a69400, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0x5f644b10, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x83a69400, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0x7dd3, dwReserved0=0x0, dwReserved1=0x0, cFileName="bg_Country.gif", cAlternateFileName="BG_COU~1.GIF")) returned 1 [0122.849] FindNextFileW (in: hFindFile=0x381b80, lpFindFileData=0x31e38c | out: lpFindFileData=0x31e38c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x83a69400, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0x519a33f0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x83a69400, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0x132a, dwReserved0=0x0, dwReserved1=0x0, cFileName="bg_Earthy.gif", cAlternateFileName="BG_EAR~1.GIF")) returned 1 [0122.849] FindNextFileW (in: hFindFile=0x381b80, lpFindFileData=0x31e38c | out: lpFindFileData=0x31e38c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x83a69400, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0x5f644b10, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x83a69400, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0xb9b8, dwReserved0=0x0, dwReserved1=0x0, cFileName="bg_FormsHomePage.gif", cAlternateFileName="BG_FOR~1.GIF")) returned 1 [0122.849] FindNextFileW (in: hFindFile=0x381b80, lpFindFileData=0x31e38c | out: lpFindFileData=0x31e38c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x83a69400, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0x5f644b10, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x83a69400, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0x4ebb, dwReserved0=0x0, dwReserved1=0x0, cFileName="bg_FormsHomePageBlank.gif", cAlternateFileName="BG_FOR~2.GIF")) returned 1 [0122.850] FindNextFileW (in: hFindFile=0x381b80, lpFindFileData=0x31e38c | out: lpFindFileData=0x31e38c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x83a69400, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0x5f644b10, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x83a69400, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0x5690, dwReserved0=0x0, dwReserved1=0x0, cFileName="bg_GreenTea.gif", cAlternateFileName="BG_GRE~1.GIF")) returned 1 [0122.850] FindNextFileW (in: hFindFile=0x381b80, lpFindFileData=0x31e38c | out: lpFindFileData=0x31e38c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x83a69400, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0x519a33f0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x83a69400, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0x6a, dwReserved0=0x0, dwReserved1=0x0, cFileName="bg_Groove.gif", cAlternateFileName="BG_GRO~1.GIF")) returned 1 [0122.850] FindNextFileW (in: hFindFile=0x381b80, lpFindFileData=0x31e38c | out: lpFindFileData=0x31e38c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x83a69400, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0x519a33f0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x83a69400, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0x21a6, dwReserved0=0x0, dwReserved1=0x0, cFileName="bg_LightSpirit.gif", cAlternateFileName="BG_LIG~1.GIF")) returned 1 [0122.850] FindNextFileW (in: hFindFile=0x381b80, lpFindFileData=0x31e38c | out: lpFindFileData=0x31e38c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x84d7c100, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0x5f66ac70, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x84d7c100, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0x3d57, dwReserved0=0x0, dwReserved1=0x0, cFileName="bg_OliveGreen.gif", cAlternateFileName="BG_OLI~1.GIF")) returned 1 [0122.850] FindNextFileW (in: hFindFile=0x381b80, lpFindFileData=0x31e38c | out: lpFindFileData=0x31e38c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x84d7c100, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0x5f66ac70, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x84d7c100, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0x1845, dwReserved0=0x0, dwReserved1=0x0, cFileName="bg_Premium.gif", cAlternateFileName="BG_PRE~1.GIF")) returned 1 [0122.850] FindNextFileW (in: hFindFile=0x381b80, lpFindFileData=0x31e38c | out: lpFindFileData=0x31e38c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x84d7c100, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0x5f66ac70, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x84d7c100, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0x5141, dwReserved0=0x0, dwReserved1=0x0, cFileName="bg_SlateBlue.gif", cAlternateFileName="BG_SLA~1.GIF")) returned 1 [0122.850] FindNextFileW (in: hFindFile=0x381b80, lpFindFileData=0x31e38c | out: lpFindFileData=0x31e38c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x84d7c100, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0x519a33f0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x84d7c100, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0x193c, dwReserved0=0x0, dwReserved1=0x0, cFileName="bg_TexturedBlue.gif", cAlternateFileName="BG_TEX~1.GIF")) returned 1 [0122.850] FindNextFileW (in: hFindFile=0x381b80, lpFindFileData=0x31e38c | out: lpFindFileData=0x31e38c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x84d7c100, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0x519a33f0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x84d7c100, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0x3c64, dwReserved0=0x0, dwReserved1=0x0, cFileName="bg_VelvetRose.gif", cAlternateFileName="BG_VEL~1.GIF")) returned 1 [0122.850] FindNextFileW (in: hFindFile=0x381b80, lpFindFileData=0x31e38c | out: lpFindFileData=0x31e38c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x84d7c100, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0x51b6c470, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x84d7c100, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0x276, dwReserved0=0x0, dwReserved1=0x0, cFileName="button_left.gif", cAlternateFileName="BUTTON~1.GIF")) returned 1 [0122.850] FindNextFileW (in: hFindFile=0x381b80, lpFindFileData=0x31e38c | out: lpFindFileData=0x31e38c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x84d7c100, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0x51b6c470, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x84d7c100, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0xe6, dwReserved0=0x0, dwReserved1=0x0, cFileName="button_left_disable.gif", cAlternateFileName="BUTTON~2.GIF")) returned 1 [0122.850] FindNextFileW (in: hFindFile=0x381b80, lpFindFileData=0x31e38c | out: lpFindFileData=0x31e38c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x84d7c100, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0x600aeb50, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x84d7c100, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0x41b, dwReserved0=0x0, dwReserved1=0x0, cFileName="button_left_over.gif", cAlternateFileName="BUAC31~1.GIF")) returned 1 [0122.850] FindNextFileW (in: hFindFile=0x381b80, lpFindFileData=0x31e38c | out: lpFindFileData=0x31e38c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x84d7c100, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0x51b6c470, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x84d7c100, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0xb9, dwReserved0=0x0, dwReserved1=0x0, cFileName="button_mid.gif", cAlternateFileName="BUTTON~3.GIF")) returned 1 [0122.850] FindNextFileW (in: hFindFile=0x381b80, lpFindFileData=0x31e38c | out: lpFindFileData=0x31e38c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x84d7c100, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0x600aeb50, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x84d7c100, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0x35, dwReserved0=0x0, dwReserved1=0x0, cFileName="button_mid_disable.gif", cAlternateFileName="BUABE1~1.GIF")) returned 1 [0122.850] FindNextFileW (in: hFindFile=0x381b80, lpFindFileData=0x31e38c | out: lpFindFileData=0x31e38c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x84d7c100, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0x600aeb50, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x84d7c100, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0xbb, dwReserved0=0x0, dwReserved1=0x0, cFileName="button_mid_over.gif", cAlternateFileName="BU1E84~1.GIF")) returned 1 [0122.850] FindNextFileW (in: hFindFile=0x381b80, lpFindFileData=0x31e38c | out: lpFindFileData=0x31e38c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x84d7c100, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0x60120f70, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x84d7c100, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0x26e, dwReserved0=0x0, dwReserved1=0x0, cFileName="button_right.gif", cAlternateFileName="BU7DFA~1.GIF")) returned 1 [0122.850] FindNextFileW (in: hFindFile=0x381b80, lpFindFileData=0x31e38c | out: lpFindFileData=0x31e38c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x84d7c100, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0x60120f70, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x84d7c100, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0xe1, dwReserved0=0x0, dwReserved1=0x0, cFileName="button_right_disable.gif", cAlternateFileName="BUC143~1.GIF")) returned 1 [0122.850] FindNextFileW (in: hFindFile=0x381b80, lpFindFileData=0x31e38c | out: lpFindFileData=0x31e38c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8608ee00, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0x51b925d0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x8608ee00, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0x41b, dwReserved0=0x0, dwReserved1=0x0, cFileName="button_right_over.gif", cAlternateFileName="BUTTON~4.GIF")) returned 1 [0122.850] FindNextFileW (in: hFindFile=0x381b80, lpFindFileData=0x31e38c | out: lpFindFileData=0x31e38c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x51741df0, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x6d462ff0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x6d462ff0, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="FieldTypePreview", cAlternateFileName="FIELDT~1")) returned 1 [0122.851] FindNextFileW (in: hFindFile=0x381b80, lpFindFileData=0x31e38c | out: lpFindFileData=0x31e38c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x886b4800, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0x528d0030, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x886b4800, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0x13e, dwReserved0=0x0, dwReserved1=0x0, cFileName="FORM.ICO", cAlternateFileName="")) returned 1 [0122.851] FindNextFileW (in: hFindFile=0x381b80, lpFindFileData=0x31e38c | out: lpFindFileData=0x31e38c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x886b4800, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0x5291c2f0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xfbf7ad80, ftLastWriteTime.dwHighDateTime=0x1d6eb7e, nFileSizeHigh=0x0, nFileSizeLow=0x4c0, dwReserved0=0x0, dwReserved1=0x0, cFileName="FormsBlankPage.html", cAlternateFileName="FORMSB~1.HTM")) returned 1 [0122.851] FindNextFileW (in: hFindFile=0x381b80, lpFindFileData=0x31e38c | out: lpFindFileData=0x31e38c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x886b4800, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0x5291c2f0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xfbfa0ee0, ftLastWriteTime.dwHighDateTime=0x1d6eb7e, nFileSizeHigh=0x0, nFileSizeLow=0x7b0, dwReserved0=0x0, dwReserved1=0x0, cFileName="FormsBrowserUpgrade.html", cAlternateFileName="FORMSB~2.HTM")) returned 1 [0122.851] FindNextFileW (in: hFindFile=0x381b80, lpFindFileData=0x31e38c | out: lpFindFileData=0x31e38c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x886b4800, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0x618c8a10, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xfbfc7040, ftLastWriteTime.dwHighDateTime=0x1d6eb7e, nFileSizeHigh=0x0, nFileSizeLow=0x810, dwReserved0=0x0, dwReserved1=0x0, cFileName="FormsDoNotTrust.html", cAlternateFileName="FORMSD~1.HTM")) returned 1 [0122.851] FindNextFileW (in: hFindFile=0x381b80, lpFindFileData=0x31e38c | out: lpFindFileData=0x31e38c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x886b4800, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0x5291c2f0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xfbfed1a0, ftLastWriteTime.dwHighDateTime=0x1d6eb7e, nFileSizeHigh=0x0, nFileSizeLow=0xca0, dwReserved0=0x0, dwReserved1=0x0, cFileName="FormsHomePage.html", cAlternateFileName="FORMSH~1.HTM")) returned 1 [0122.851] FindNextFileW (in: hFindFile=0x381b80, lpFindFileData=0x31e38c | out: lpFindFileData=0x31e38c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x886b4800, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0x618c8a10, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x886b4800, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0x15fc, dwReserved0=0x0, dwReserved1=0x0, cFileName="FormsHomePageScript.js", cAlternateFileName="FORMSH~1.JS")) returned 1 [0122.851] FindNextFileW (in: hFindFile=0x381b80, lpFindFileData=0x31e38c | out: lpFindFileData=0x31e38c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x886b4800, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0x5291c2f0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xfc039460, ftLastWriteTime.dwHighDateTime=0x1d6eb7e, nFileSizeHigh=0x0, nFileSizeLow=0x410, dwReserved0=0x0, dwReserved1=0x0, cFileName="FormsHomePageStyle.css", cAlternateFileName="FORMSH~1.CSS")) returned 1 [0122.851] FindNextFileW (in: hFindFile=0x381b80, lpFindFileData=0x31e38c | out: lpFindFileData=0x31e38c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x886b4800, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0x618eeb70, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xfc05f5c0, ftLastWriteTime.dwHighDateTime=0x1d6eb7e, nFileSizeHigh=0x0, nFileSizeLow=0x3b0, dwReserved0=0x0, dwReserved1=0x0, cFileName="FormsPreviewTemplate.html", cAlternateFileName="FORMSP~2.HTM")) returned 1 [0122.851] FindNextFileW (in: hFindFile=0x381b80, lpFindFileData=0x31e38c | out: lpFindFileData=0x31e38c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x886b4800, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0x5298e710, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xfc085720, ftLastWriteTime.dwHighDateTime=0x1d6eb7e, nFileSizeHigh=0x0, nFileSizeLow=0x270, dwReserved0=0x0, dwReserved1=0x0, cFileName="FormsPrintTemplate.html", cAlternateFileName="FORMSP~1.HTM")) returned 1 [0122.851] FindNextFileW (in: hFindFile=0x381b80, lpFindFileData=0x31e38c | out: lpFindFileData=0x31e38c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x51d354f0, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x6d547830, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x6d547830, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="FormsTemplates", cAlternateFileName="FORMST~1")) returned 1 [0122.851] FindNextFileW (in: hFindFile=0x381b80, lpFindFileData=0x31e38c | out: lpFindFileData=0x31e38c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x899c7500, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0x618eeb70, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x899c7500, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0x6fc, dwReserved0=0x0, dwReserved1=0x0, cFileName="FormsVersion1Warning.htm", cAlternateFileName="FORMSV~1.HTM")) returned 1 [0122.851] FindNextFileW (in: hFindFile=0x381b80, lpFindFileData=0x31e38c | out: lpFindFileData=0x31e38c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x899c7500, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0x618eeb70, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xfc0d19e0, ftLastWriteTime.dwHighDateTime=0x1d6eb7e, nFileSizeHigh=0x0, nFileSizeLow=0x14a0, dwReserved0=0x0, dwReserved1=0x0, cFileName="FormsViewAttachmentIcons.jpg", cAlternateFileName="FORMSV~1.JPG")) returned 1 [0122.851] FindNextFileW (in: hFindFile=0x381b80, lpFindFileData=0x31e38c | out: lpFindFileData=0x31e38c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x899c7500, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0x5298e710, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xfc0f7b40, ftLastWriteTime.dwHighDateTime=0x1d6eb7e, nFileSizeHigh=0x0, nFileSizeLow=0x640, dwReserved0=0x0, dwReserved1=0x0, cFileName="FormsViewAttachmentIconsMask.bmp", cAlternateFileName="FORMSV~1.BMP")) returned 1 [0122.851] FindNextFileW (in: hFindFile=0x381b80, lpFindFileData=0x31e38c | out: lpFindFileData=0x31e38c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x899c7500, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0x618eeb70, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xfc11dca0, ftLastWriteTime.dwHighDateTime=0x1d6eb7e, nFileSizeHigh=0x0, nFileSizeLow=0xfb0, dwReserved0=0x0, dwReserved1=0x0, cFileName="FormsViewFrame.html", cAlternateFileName="FORMSV~2.HTM")) returned 1 [0122.851] FindNextFileW (in: hFindFile=0x381b80, lpFindFileData=0x31e38c | out: lpFindFileData=0x31e38c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x899c7500, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0x529b4870, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xfc143e00, ftLastWriteTime.dwHighDateTime=0x1d6eb7e, nFileSizeHigh=0x0, nFileSizeLow=0x1c00, dwReserved0=0x0, dwReserved1=0x0, cFileName="FormToolImages.jpg", cAlternateFileName="FORMTO~1.JPG")) returned 1 [0122.851] FindNextFileW (in: hFindFile=0x381b80, lpFindFileData=0x31e38c | out: lpFindFileData=0x31e38c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x899c7500, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0x61c80c70, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xfc1900c0, ftLastWriteTime.dwHighDateTime=0x1d6eb7e, nFileSizeHigh=0x0, nFileSizeLow=0x167e0, dwReserved0=0x0, dwReserved1=0x0, cFileName="GrooveFormsMetaData.xml", cAlternateFileName="GROOVE~1.XML")) returned 1 [0122.851] FindNextFileW (in: hFindFile=0x381b80, lpFindFileData=0x31e38c | out: lpFindFileData=0x31e38c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8acda200, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0x583906f0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x8acda200, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0xca6, dwReserved0=0x0, dwReserved1=0x0, cFileName="MENUS.JS", cAlternateFileName="")) returned 1 [0122.851] FindNextFileW (in: hFindFile=0x381b80, lpFindFileData=0x31e38c | out: lpFindFileData=0x31e38c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x899c7500, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0x5836a590, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x899c7500, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0x33a, dwReserved0=0x0, dwReserved1=0x0, cFileName="menu_arrow.gif", cAlternateFileName="MENU_A~1.GIF")) returned 1 [0122.851] FindNextFileW (in: hFindFile=0x381b80, lpFindFileData=0x31e38c | out: lpFindFileData=0x31e38c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8acda200, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0x6d273e10, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x8acda200, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0x4af, dwReserved0=0x0, dwReserved1=0x0, cFileName="SEARCH.GIF", cAlternateFileName="")) returned 1 [0122.851] FindNextFileW (in: hFindFile=0x381b80, lpFindFileData=0x31e38c | out: lpFindFileData=0x31e38c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8acda200, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0x6d3a4910, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x8acda200, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0x31, dwReserved0=0x0, dwReserved1=0x0, cFileName="SPACER.GIF", cAlternateFileName="")) returned 1 [0122.851] FindNextFileW (in: hFindFile=0x381b80, lpFindFileData=0x31e38c | out: lpFindFileData=0x31e38c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8acda200, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0x5ac7a110, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x8acda200, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0xc118, dwReserved0=0x0, dwReserved1=0x0, cFileName="SUBMIT.JS", cAlternateFileName="")) returned 1 [0122.851] FindNextFileW (in: hFindFile=0x381b80, lpFindFileData=0x31e38c | out: lpFindFileData=0x31e38c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8acda200, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0x5e41e350, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x8acda200, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0x103f, dwReserved0=0x0, dwReserved1=0x0, cFileName="utilityfunctions.js", cAlternateFileName="UTILIT~1.JS")) returned 1 [0122.852] FindNextFileW (in: hFindFile=0x381b80, lpFindFileData=0x31e38c | out: lpFindFileData=0x31e38c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8acda200, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0x70685f50, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x8acda200, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0x35d6, dwReserved0=0x0, dwReserved1=0x0, cFileName="validation.js", cAlternateFileName="VALIDA~1.JS")) returned 1 [0122.852] FindNextFileW (in: hFindFile=0x381b80, lpFindFileData=0x31e38c | out: lpFindFileData=0x31e38c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8acda200, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0x706f8370, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x8acda200, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0x295, dwReserved0=0x0, dwReserved1=0x0, cFileName="VIEW.CSS", cAlternateFileName="")) returned 1 [0122.852] FindNextFileW (in: hFindFile=0x381b80, lpFindFileData=0x31e38c | out: lpFindFileData=0x31e38c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8acda200, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0x5e490770, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x8acda200, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0x13e, dwReserved0=0x0, dwReserved1=0x0, cFileName="VIEW.ICO", cAlternateFileName="")) returned 1 [0122.852] FindNextFileW (in: hFindFile=0x381b80, lpFindFileData=0x31e38c | out: lpFindFileData=0x31e38c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8acda200, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0x5e490770, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x8acda200, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0x505b, dwReserved0=0x0, dwReserved1=0x0, cFileName="VIEW.JS", cAlternateFileName="")) returned 1 [0122.852] FindNextFileW (in: hFindFile=0x381b80, lpFindFileData=0x31e38c | out: lpFindFileData=0x31e38c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8acda200, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0x5e490770, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x8acda200, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0x207, dwReserved0=0x0, dwReserved1=0x0, cFileName="VIEWBY.GIF", cAlternateFileName="")) returned 1 [0122.852] FindNextFileW (in: hFindFile=0x381b80, lpFindFileData=0x31e38c | out: lpFindFileData=0x31e38c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8acda200, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0x5e490770, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x8acda200, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0x54, dwReserved0=0x0, dwReserved1=0x0, cFileName="viewDblClick.js", cAlternateFileName="VIEWDB~1.JS")) returned 1 [0122.852] FindNextFileW (in: hFindFile=0x381b80, lpFindFileData=0x31e38c | out: lpFindFileData=0x31e38c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8acda200, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0x706f8370, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xfc1b6220, ftLastWriteTime.dwHighDateTime=0x1d6eb7e, nFileSizeHigh=0x0, nFileSizeLow=0xd80, dwReserved0=0x0, dwReserved1=0x0, cFileName="ViewHeaderPreview.jpg", cAlternateFileName="VIEWHE~1.JPG")) returned 1 [0122.852] FindNextFileW (in: hFindFile=0x381b80, lpFindFileData=0x31e38c | out: lpFindFileData=0x31e38c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8bfecf00, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0x5e490770, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x8bfecf00, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0xce, dwReserved0=0x0, dwReserved1=0x0, cFileName="viewSelectionChanged.js", cAlternateFileName="VIEWSE~1.JS")) returned 1 [0122.852] FindNextFileW (in: hFindFile=0x381b80, lpFindFileData=0x31e38c | out: lpFindFileData=0x31e38c*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0122.852] FindNextFileW (in: hFindFile=0x381b80, lpFindFileData=0x31e38c | out: lpFindFileData=0x31e38c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5127f1f0, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x706f8370, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x706f8370, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0122.852] FindNextFileW (in: hFindFile=0x381b80, lpFindFileData=0x31e38c | out: lpFindFileData=0x31e38c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x82756700, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0x5127f1f0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xfbf2eac0, ftLastWriteTime.dwHighDateTime=0x1d6eb7e, nFileSizeHigh=0x0, nFileSizeLow=0xbf0, dwReserved0=0x0, dwReserved1=0x0, cFileName="AddToViewArrow.jpg", cAlternateFileName="ADDTOV~1.JPG")) returned 1 [0122.852] FindNextFileW (in: hFindFile=0x381b80, lpFindFileData=0x31e38c | out: lpFindFileData=0x31e38c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x83a69400, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0x5127f1f0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xfbf54c20, ftLastWriteTime.dwHighDateTime=0x1d6eb7e, nFileSizeHigh=0x0, nFileSizeLow=0x930, dwReserved0=0x0, dwReserved1=0x0, cFileName="AddToViewArrowMask.bmp", cAlternateFileName="ADDTOV~1.BMP")) returned 1 [0122.852] FindNextFileW (in: hFindFile=0x381b80, lpFindFileData=0x31e38c | out: lpFindFileData=0x31e38c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x83a69400, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0x5f409670, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x83a69400, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0xae8, dwReserved0=0x0, dwReserved1=0x0, cFileName="attention.gif", cAlternateFileName="ATTENT~1.GIF")) returned 1 [0122.852] FindNextFileW (in: hFindFile=0x381b80, lpFindFileData=0x31e38c | out: lpFindFileData=0x31e38c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x83a69400, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0x5f61e9b0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x83a69400, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0x614e, dwReserved0=0x0, dwReserved1=0x0, cFileName="BG_ADOBE.GIF", cAlternateFileName="")) returned 1 [0122.852] FindNextFileW (in: hFindFile=0x381b80, lpFindFileData=0x31e38c | out: lpFindFileData=0x31e38c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x83a69400, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0x5f61e9b0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x83a69400, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0x161d, dwReserved0=0x0, dwReserved1=0x0, cFileName="bg_Casual.gif", cAlternateFileName="BG_CAS~1.GIF")) returned 1 [0122.852] FindNextFileW (in: hFindFile=0x381b80, lpFindFileData=0x31e38c | out: lpFindFileData=0x31e38c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x83a69400, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0x5f644b10, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x83a69400, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0x7dd3, dwReserved0=0x0, dwReserved1=0x0, cFileName="bg_Country.gif", cAlternateFileName="BG_COU~1.GIF")) returned 1 [0122.852] FindNextFileW (in: hFindFile=0x381b80, lpFindFileData=0x31e38c | out: lpFindFileData=0x31e38c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x83a69400, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0x519a33f0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x83a69400, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0x132a, dwReserved0=0x0, dwReserved1=0x0, cFileName="bg_Earthy.gif", cAlternateFileName="BG_EAR~1.GIF")) returned 1 [0122.852] FindNextFileW (in: hFindFile=0x381b80, lpFindFileData=0x31e38c | out: lpFindFileData=0x31e38c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x83a69400, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0x5f644b10, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x83a69400, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0xb9b8, dwReserved0=0x0, dwReserved1=0x0, cFileName="bg_FormsHomePage.gif", cAlternateFileName="BG_FOR~1.GIF")) returned 1 [0122.852] FindNextFileW (in: hFindFile=0x381b80, lpFindFileData=0x31e38c | out: lpFindFileData=0x31e38c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x83a69400, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0x5f644b10, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x83a69400, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0x4ebb, dwReserved0=0x0, dwReserved1=0x0, cFileName="bg_FormsHomePageBlank.gif", cAlternateFileName="BG_FOR~2.GIF")) returned 1 [0122.852] FindNextFileW (in: hFindFile=0x381b80, lpFindFileData=0x31e38c | out: lpFindFileData=0x31e38c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x83a69400, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0x5f644b10, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x83a69400, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0x5690, dwReserved0=0x0, dwReserved1=0x0, cFileName="bg_GreenTea.gif", cAlternateFileName="BG_GRE~1.GIF")) returned 1 [0122.853] FindNextFileW (in: hFindFile=0x381b80, lpFindFileData=0x31e38c | out: lpFindFileData=0x31e38c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x83a69400, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0x519a33f0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x83a69400, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0x6a, dwReserved0=0x0, dwReserved1=0x0, cFileName="bg_Groove.gif", cAlternateFileName="BG_GRO~1.GIF")) returned 1 [0122.853] FindNextFileW (in: hFindFile=0x381b80, lpFindFileData=0x31e38c | out: lpFindFileData=0x31e38c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x83a69400, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0x519a33f0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x83a69400, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0x21a6, dwReserved0=0x0, dwReserved1=0x0, cFileName="bg_LightSpirit.gif", cAlternateFileName="BG_LIG~1.GIF")) returned 1 [0122.853] FindNextFileW (in: hFindFile=0x381b80, lpFindFileData=0x31e38c | out: lpFindFileData=0x31e38c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x84d7c100, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0x5f66ac70, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x84d7c100, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0x3d57, dwReserved0=0x0, dwReserved1=0x0, cFileName="bg_OliveGreen.gif", cAlternateFileName="BG_OLI~1.GIF")) returned 1 [0122.853] FindNextFileW (in: hFindFile=0x381b80, lpFindFileData=0x31e38c | out: lpFindFileData=0x31e38c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x84d7c100, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0x5f66ac70, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x84d7c100, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0x1845, dwReserved0=0x0, dwReserved1=0x0, cFileName="bg_Premium.gif", cAlternateFileName="BG_PRE~1.GIF")) returned 1 [0122.853] FindNextFileW (in: hFindFile=0x381b80, lpFindFileData=0x31e38c | out: lpFindFileData=0x31e38c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x84d7c100, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0x5f66ac70, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x84d7c100, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0x5141, dwReserved0=0x0, dwReserved1=0x0, cFileName="bg_SlateBlue.gif", cAlternateFileName="BG_SLA~1.GIF")) returned 1 [0122.853] FindNextFileW (in: hFindFile=0x381b80, lpFindFileData=0x31e38c | out: lpFindFileData=0x31e38c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x84d7c100, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0x519a33f0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x84d7c100, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0x193c, dwReserved0=0x0, dwReserved1=0x0, cFileName="bg_TexturedBlue.gif", cAlternateFileName="BG_TEX~1.GIF")) returned 1 [0122.853] FindNextFileW (in: hFindFile=0x381b80, lpFindFileData=0x31e38c | out: lpFindFileData=0x31e38c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x84d7c100, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0x519a33f0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x84d7c100, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0x3c64, dwReserved0=0x0, dwReserved1=0x0, cFileName="bg_VelvetRose.gif", cAlternateFileName="BG_VEL~1.GIF")) returned 1 [0122.853] FindNextFileW (in: hFindFile=0x381b80, lpFindFileData=0x31e38c | out: lpFindFileData=0x31e38c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x84d7c100, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0x51b6c470, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x84d7c100, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0x276, dwReserved0=0x0, dwReserved1=0x0, cFileName="button_left.gif", cAlternateFileName="BUTTON~1.GIF")) returned 1 [0122.853] FindNextFileW (in: hFindFile=0x381b80, lpFindFileData=0x31e38c | out: lpFindFileData=0x31e38c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x84d7c100, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0x51b6c470, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x84d7c100, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0xe6, dwReserved0=0x0, dwReserved1=0x0, cFileName="button_left_disable.gif", cAlternateFileName="BUTTON~2.GIF")) returned 1 [0122.853] FindNextFileW (in: hFindFile=0x381b80, lpFindFileData=0x31e38c | out: lpFindFileData=0x31e38c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x84d7c100, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0x600aeb50, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x84d7c100, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0x41b, dwReserved0=0x0, dwReserved1=0x0, cFileName="button_left_over.gif", cAlternateFileName="BUAC31~1.GIF")) returned 1 [0122.853] FindNextFileW (in: hFindFile=0x381b80, lpFindFileData=0x31e38c | out: lpFindFileData=0x31e38c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x84d7c100, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0x51b6c470, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x84d7c100, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0xb9, dwReserved0=0x0, dwReserved1=0x0, cFileName="button_mid.gif", cAlternateFileName="BUTTON~3.GIF")) returned 1 [0122.853] FindNextFileW (in: hFindFile=0x381b80, lpFindFileData=0x31e38c | out: lpFindFileData=0x31e38c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x84d7c100, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0x600aeb50, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x84d7c100, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0x35, dwReserved0=0x0, dwReserved1=0x0, cFileName="button_mid_disable.gif", cAlternateFileName="BUABE1~1.GIF")) returned 1 [0122.853] FindNextFileW (in: hFindFile=0x381b80, lpFindFileData=0x31e38c | out: lpFindFileData=0x31e38c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x84d7c100, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0x600aeb50, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x84d7c100, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0xbb, dwReserved0=0x0, dwReserved1=0x0, cFileName="button_mid_over.gif", cAlternateFileName="BU1E84~1.GIF")) returned 1 [0122.853] FindNextFileW (in: hFindFile=0x381b80, lpFindFileData=0x31e38c | out: lpFindFileData=0x31e38c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x84d7c100, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0x60120f70, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x84d7c100, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0x26e, dwReserved0=0x0, dwReserved1=0x0, cFileName="button_right.gif", cAlternateFileName="BU7DFA~1.GIF")) returned 1 [0122.853] FindNextFileW (in: hFindFile=0x381b80, lpFindFileData=0x31e38c | out: lpFindFileData=0x31e38c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x84d7c100, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0x60120f70, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x84d7c100, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0xe1, dwReserved0=0x0, dwReserved1=0x0, cFileName="button_right_disable.gif", cAlternateFileName="BUC143~1.GIF")) returned 1 [0122.853] FindNextFileW (in: hFindFile=0x381b80, lpFindFileData=0x31e38c | out: lpFindFileData=0x31e38c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8608ee00, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0x51b925d0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x8608ee00, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0x41b, dwReserved0=0x0, dwReserved1=0x0, cFileName="button_right_over.gif", cAlternateFileName="BUTTON~4.GIF")) returned 1 [0122.853] FindNextFileW (in: hFindFile=0x381b80, lpFindFileData=0x31e38c | out: lpFindFileData=0x31e38c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x51741df0, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x6d462ff0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x6d462ff0, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="FieldTypePreview", cAlternateFileName="FIELDT~1")) returned 1 [0122.853] FindNextFileW (in: hFindFile=0x381b80, lpFindFileData=0x31e38c | out: lpFindFileData=0x31e38c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x886b4800, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0x528d0030, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x886b4800, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0x13e, dwReserved0=0x0, dwReserved1=0x0, cFileName="FORM.ICO", cAlternateFileName="")) returned 1 [0122.853] FindNextFileW (in: hFindFile=0x381b80, lpFindFileData=0x31e38c | out: lpFindFileData=0x31e38c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x886b4800, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0x5291c2f0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xfbf7ad80, ftLastWriteTime.dwHighDateTime=0x1d6eb7e, nFileSizeHigh=0x0, nFileSizeLow=0x4c0, dwReserved0=0x0, dwReserved1=0x0, cFileName="FormsBlankPage.html", cAlternateFileName="FORMSB~1.HTM")) returned 1 [0122.853] FindNextFileW (in: hFindFile=0x381b80, lpFindFileData=0x31e38c | out: lpFindFileData=0x31e38c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x886b4800, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0x5291c2f0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xfbfa0ee0, ftLastWriteTime.dwHighDateTime=0x1d6eb7e, nFileSizeHigh=0x0, nFileSizeLow=0x7b0, dwReserved0=0x0, dwReserved1=0x0, cFileName="FormsBrowserUpgrade.html", cAlternateFileName="FORMSB~2.HTM")) returned 1 [0122.853] FindNextFileW (in: hFindFile=0x381b80, lpFindFileData=0x31e38c | out: lpFindFileData=0x31e38c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x886b4800, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0x618c8a10, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xfbfc7040, ftLastWriteTime.dwHighDateTime=0x1d6eb7e, nFileSizeHigh=0x0, nFileSizeLow=0x810, dwReserved0=0x0, dwReserved1=0x0, cFileName="FormsDoNotTrust.html", cAlternateFileName="FORMSD~1.HTM")) returned 1 [0122.853] FindNextFileW (in: hFindFile=0x381b80, lpFindFileData=0x31e38c | out: lpFindFileData=0x31e38c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x886b4800, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0x5291c2f0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xfbfed1a0, ftLastWriteTime.dwHighDateTime=0x1d6eb7e, nFileSizeHigh=0x0, nFileSizeLow=0xca0, dwReserved0=0x0, dwReserved1=0x0, cFileName="FormsHomePage.html", cAlternateFileName="FORMSH~1.HTM")) returned 1 [0122.853] FindNextFileW (in: hFindFile=0x381b80, lpFindFileData=0x31e38c | out: lpFindFileData=0x31e38c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x886b4800, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0x618c8a10, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x886b4800, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0x15fc, dwReserved0=0x0, dwReserved1=0x0, cFileName="FormsHomePageScript.js", cAlternateFileName="FORMSH~1.JS")) returned 1 [0122.854] FindNextFileW (in: hFindFile=0x381b80, lpFindFileData=0x31e38c | out: lpFindFileData=0x31e38c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x886b4800, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0x5291c2f0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xfc039460, ftLastWriteTime.dwHighDateTime=0x1d6eb7e, nFileSizeHigh=0x0, nFileSizeLow=0x410, dwReserved0=0x0, dwReserved1=0x0, cFileName="FormsHomePageStyle.css", cAlternateFileName="FORMSH~1.CSS")) returned 1 [0122.854] FindNextFileW (in: hFindFile=0x381b80, lpFindFileData=0x31e38c | out: lpFindFileData=0x31e38c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x886b4800, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0x618eeb70, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xfc05f5c0, ftLastWriteTime.dwHighDateTime=0x1d6eb7e, nFileSizeHigh=0x0, nFileSizeLow=0x3b0, dwReserved0=0x0, dwReserved1=0x0, cFileName="FormsPreviewTemplate.html", cAlternateFileName="FORMSP~2.HTM")) returned 1 [0122.854] FindNextFileW (in: hFindFile=0x381b80, lpFindFileData=0x31e38c | out: lpFindFileData=0x31e38c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x886b4800, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0x5298e710, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xfc085720, ftLastWriteTime.dwHighDateTime=0x1d6eb7e, nFileSizeHigh=0x0, nFileSizeLow=0x270, dwReserved0=0x0, dwReserved1=0x0, cFileName="FormsPrintTemplate.html", cAlternateFileName="FORMSP~1.HTM")) returned 1 [0122.854] FindNextFileW (in: hFindFile=0x381b80, lpFindFileData=0x31e38c | out: lpFindFileData=0x31e38c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x51d354f0, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x6d547830, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x6d547830, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="FormsTemplates", cAlternateFileName="FORMST~1")) returned 1 [0122.854] FindNextFileW (in: hFindFile=0x381b80, lpFindFileData=0x31e38c | out: lpFindFileData=0x31e38c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x899c7500, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0x618eeb70, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x899c7500, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0x6fc, dwReserved0=0x0, dwReserved1=0x0, cFileName="FormsVersion1Warning.htm", cAlternateFileName="FORMSV~1.HTM")) returned 1 [0122.854] FindNextFileW (in: hFindFile=0x381b80, lpFindFileData=0x31e38c | out: lpFindFileData=0x31e38c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x899c7500, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0x618eeb70, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xfc0d19e0, ftLastWriteTime.dwHighDateTime=0x1d6eb7e, nFileSizeHigh=0x0, nFileSizeLow=0x14a0, dwReserved0=0x0, dwReserved1=0x0, cFileName="FormsViewAttachmentIcons.jpg", cAlternateFileName="FORMSV~1.JPG")) returned 1 [0122.854] FindNextFileW (in: hFindFile=0x381b80, lpFindFileData=0x31e38c | out: lpFindFileData=0x31e38c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x899c7500, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0x5298e710, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xfc0f7b40, ftLastWriteTime.dwHighDateTime=0x1d6eb7e, nFileSizeHigh=0x0, nFileSizeLow=0x640, dwReserved0=0x0, dwReserved1=0x0, cFileName="FormsViewAttachmentIconsMask.bmp", cAlternateFileName="FORMSV~1.BMP")) returned 1 [0122.854] FindNextFileW (in: hFindFile=0x381b80, lpFindFileData=0x31e38c | out: lpFindFileData=0x31e38c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x899c7500, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0x618eeb70, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xfc11dca0, ftLastWriteTime.dwHighDateTime=0x1d6eb7e, nFileSizeHigh=0x0, nFileSizeLow=0xfb0, dwReserved0=0x0, dwReserved1=0x0, cFileName="FormsViewFrame.html", cAlternateFileName="FORMSV~2.HTM")) returned 1 [0122.854] FindNextFileW (in: hFindFile=0x381b80, lpFindFileData=0x31e38c | out: lpFindFileData=0x31e38c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x899c7500, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0x529b4870, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xfc143e00, ftLastWriteTime.dwHighDateTime=0x1d6eb7e, nFileSizeHigh=0x0, nFileSizeLow=0x1c00, dwReserved0=0x0, dwReserved1=0x0, cFileName="FormToolImages.jpg", cAlternateFileName="FORMTO~1.JPG")) returned 1 [0122.854] FindNextFileW (in: hFindFile=0x381b80, lpFindFileData=0x31e38c | out: lpFindFileData=0x31e38c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x899c7500, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0x61c80c70, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xfc1900c0, ftLastWriteTime.dwHighDateTime=0x1d6eb7e, nFileSizeHigh=0x0, nFileSizeLow=0x167e0, dwReserved0=0x0, dwReserved1=0x0, cFileName="GrooveFormsMetaData.xml", cAlternateFileName="GROOVE~1.XML")) returned 1 [0122.854] FindNextFileW (in: hFindFile=0x381b80, lpFindFileData=0x31e38c | out: lpFindFileData=0x31e38c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8acda200, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0x583906f0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x8acda200, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0xca6, dwReserved0=0x0, dwReserved1=0x0, cFileName="MENUS.JS", cAlternateFileName="")) returned 1 [0122.854] FindNextFileW (in: hFindFile=0x381b80, lpFindFileData=0x31e38c | out: lpFindFileData=0x31e38c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x899c7500, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0x5836a590, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x899c7500, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0x33a, dwReserved0=0x0, dwReserved1=0x0, cFileName="menu_arrow.gif", cAlternateFileName="MENU_A~1.GIF")) returned 1 [0122.854] FindNextFileW (in: hFindFile=0x381b80, lpFindFileData=0x31e38c | out: lpFindFileData=0x31e38c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8acda200, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0x6d273e10, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x8acda200, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0x4af, dwReserved0=0x0, dwReserved1=0x0, cFileName="SEARCH.GIF", cAlternateFileName="")) returned 1 [0122.854] FindNextFileW (in: hFindFile=0x381b80, lpFindFileData=0x31e38c | out: lpFindFileData=0x31e38c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8acda200, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0x6d3a4910, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x8acda200, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0x31, dwReserved0=0x0, dwReserved1=0x0, cFileName="SPACER.GIF", cAlternateFileName="")) returned 1 [0122.854] FindNextFileW (in: hFindFile=0x381b80, lpFindFileData=0x31e38c | out: lpFindFileData=0x31e38c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8acda200, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0x5ac7a110, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x8acda200, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0xc118, dwReserved0=0x0, dwReserved1=0x0, cFileName="SUBMIT.JS", cAlternateFileName="")) returned 1 [0122.854] FindNextFileW (in: hFindFile=0x381b80, lpFindFileData=0x31e38c | out: lpFindFileData=0x31e38c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8acda200, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0x5e41e350, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x8acda200, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0x103f, dwReserved0=0x0, dwReserved1=0x0, cFileName="utilityfunctions.js", cAlternateFileName="UTILIT~1.JS")) returned 1 [0122.854] FindNextFileW (in: hFindFile=0x381b80, lpFindFileData=0x31e38c | out: lpFindFileData=0x31e38c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8acda200, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0x70685f50, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x8acda200, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0x35d6, dwReserved0=0x0, dwReserved1=0x0, cFileName="validation.js", cAlternateFileName="VALIDA~1.JS")) returned 1 [0122.854] FindNextFileW (in: hFindFile=0x381b80, lpFindFileData=0x31e38c | out: lpFindFileData=0x31e38c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8acda200, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0x706f8370, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x8acda200, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0x295, dwReserved0=0x0, dwReserved1=0x0, cFileName="VIEW.CSS", cAlternateFileName="")) returned 1 [0122.854] FindNextFileW (in: hFindFile=0x381b80, lpFindFileData=0x31e38c | out: lpFindFileData=0x31e38c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8acda200, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0x5e490770, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x8acda200, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0x13e, dwReserved0=0x0, dwReserved1=0x0, cFileName="VIEW.ICO", cAlternateFileName="")) returned 1 [0122.854] FindNextFileW (in: hFindFile=0x381b80, lpFindFileData=0x31e38c | out: lpFindFileData=0x31e38c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8acda200, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0x5e490770, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x8acda200, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0x505b, dwReserved0=0x0, dwReserved1=0x0, cFileName="VIEW.JS", cAlternateFileName="")) returned 1 [0122.854] FindNextFileW (in: hFindFile=0x381b80, lpFindFileData=0x31e38c | out: lpFindFileData=0x31e38c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8acda200, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0x5e490770, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x8acda200, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0x207, dwReserved0=0x0, dwReserved1=0x0, cFileName="VIEWBY.GIF", cAlternateFileName="")) returned 1 [0122.854] FindNextFileW (in: hFindFile=0x381b80, lpFindFileData=0x31e38c | out: lpFindFileData=0x31e38c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8acda200, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0x5e490770, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x8acda200, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0x54, dwReserved0=0x0, dwReserved1=0x0, cFileName="viewDblClick.js", cAlternateFileName="VIEWDB~1.JS")) returned 1 [0122.854] FindNextFileW (in: hFindFile=0x381b80, lpFindFileData=0x31e38c | out: lpFindFileData=0x31e38c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8acda200, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0x706f8370, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xfc1b6220, ftLastWriteTime.dwHighDateTime=0x1d6eb7e, nFileSizeHigh=0x0, nFileSizeLow=0xd80, dwReserved0=0x0, dwReserved1=0x0, cFileName="ViewHeaderPreview.jpg", cAlternateFileName="VIEWHE~1.JPG")) returned 1 [0122.855] FindNextFileW (in: hFindFile=0x381b80, lpFindFileData=0x31e38c | out: lpFindFileData=0x31e38c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8bfecf00, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0x5e490770, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x8bfecf00, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0xce, dwReserved0=0x0, dwReserved1=0x0, cFileName="viewSelectionChanged.js", cAlternateFileName="VIEWSE~1.JS")) returned 1 [0122.855] FindNextFileW (in: hFindFile=0x381b80, lpFindFileData=0x31e38c | out: lpFindFileData=0x31e38c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8bfecf00, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0x5e490770, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x8bfecf00, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0xce, dwReserved0=0x0, dwReserved1=0x0, cFileName="viewSelectionChanged.js", cAlternateFileName="VIEWSE~1.JS")) returned 0 [0122.857] MoveFileW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\AddToViewArrow.jpg" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms\\addtoviewarrow.jpg"), lpNewFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\AddToViewArrow.jpg.[neftet@tutanota.com].boom" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms\\addtoviewarrow.jpg.[neftet@tutanota.com].boom")) returned 1 [0122.860] MoveFileW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\AddToViewArrowMask.bmp" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms\\addtoviewarrowmask.bmp"), lpNewFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\AddToViewArrowMask.bmp.[neftet@tutanota.com].boom" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms\\addtoviewarrowmask.bmp.[neftet@tutanota.com].boom")) returned 1 [0122.863] MoveFileW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\FormsBlankPage.html" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms\\formsblankpage.html"), lpNewFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\FormsBlankPage.html.[neftet@tutanota.com].boom" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms\\formsblankpage.html.[neftet@tutanota.com].boom")) returned 1 [0122.867] MoveFileW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\FormsBrowserUpgrade.html" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms\\formsbrowserupgrade.html"), lpNewFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\FormsBrowserUpgrade.html.[neftet@tutanota.com].boom" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms\\formsbrowserupgrade.html.[neftet@tutanota.com].boom")) returned 1 [0122.870] MoveFileW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\FormsDoNotTrust.html" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms\\formsdonottrust.html"), lpNewFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\FormsDoNotTrust.html.[neftet@tutanota.com].boom" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms\\formsdonottrust.html.[neftet@tutanota.com].boom")) returned 1 [0122.872] MoveFileW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\FormsHomePage.html" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms\\formshomepage.html"), lpNewFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\FormsHomePage.html.[neftet@tutanota.com].boom" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms\\formshomepage.html.[neftet@tutanota.com].boom")) returned 1 [0122.875] MoveFileW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\FormsHomePageStyle.css" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms\\formshomepagestyle.css"), lpNewFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\FormsHomePageStyle.css.[neftet@tutanota.com].boom" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms\\formshomepagestyle.css.[neftet@tutanota.com].boom")) returned 1 [0122.878] MoveFileW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\FormsPreviewTemplate.html" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms\\formspreviewtemplate.html"), lpNewFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\FormsPreviewTemplate.html.[neftet@tutanota.com].boom" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms\\formspreviewtemplate.html.[neftet@tutanota.com].boom")) returned 1 [0122.881] MoveFileW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\FormsPrintTemplate.html" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms\\formsprinttemplate.html"), lpNewFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\FormsPrintTemplate.html.[neftet@tutanota.com].boom" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms\\formsprinttemplate.html.[neftet@tutanota.com].boom")) returned 1 [0123.014] MoveFileW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\FormsVersion1Warning.htm" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms\\formsversion1warning.htm"), lpNewFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\FormsVersion1Warning.htm.[neftet@tutanota.com].boom" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms\\formsversion1warning.htm.[neftet@tutanota.com].boom")) returned 1 [0123.018] MoveFileW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\FormsViewAttachmentIcons.jpg" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms\\formsviewattachmenticons.jpg"), lpNewFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\FormsViewAttachmentIcons.jpg.[neftet@tutanota.com].boom" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms\\formsviewattachmenticons.jpg.[neftet@tutanota.com].boom")) returned 1 [0123.021] MoveFileW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\FormsViewAttachmentIconsMask.bmp" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms\\formsviewattachmenticonsmask.bmp"), lpNewFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\FormsViewAttachmentIconsMask.bmp.[neftet@tutanota.com].boom" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms\\formsviewattachmenticonsmask.bmp.[neftet@tutanota.com].boom")) returned 1 [0123.024] MoveFileW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\FormsViewFrame.html" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms\\formsviewframe.html"), lpNewFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\FormsViewFrame.html.[neftet@tutanota.com].boom" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms\\formsviewframe.html.[neftet@tutanota.com].boom")) returned 1 [0123.027] MoveFileW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\FormToolImages.jpg" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms\\formtoolimages.jpg"), lpNewFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\FormToolImages.jpg.[neftet@tutanota.com].boom" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms\\formtoolimages.jpg.[neftet@tutanota.com].boom")) returned 1 [0123.035] MoveFileW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\GrooveFormsMetaData.xml" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms\\grooveformsmetadata.xml"), lpNewFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\GrooveFormsMetaData.xml.[neftet@tutanota.com].boom" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms\\grooveformsmetadata.xml.[neftet@tutanota.com].boom")) returned 1 [0123.040] MoveFileW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\ViewHeaderPreview.jpg" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms\\viewheaderpreview.jpg"), lpNewFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\ViewHeaderPreview.jpg.[neftet@tutanota.com].boom" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms\\viewheaderpreview.jpg.[neftet@tutanota.com].boom")) returned 1 [0123.041] FindNextFileW (in: hFindFile=0x381b80, lpFindFileData=0x31e314 | out: lpFindFileData=0x31e314*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x51741df0, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x6d462ff0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x6d462ff0, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0123.041] FindNextFileW (in: hFindFile=0x381b80, lpFindFileData=0x31e314 | out: lpFindFileData=0x31e314*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8608ee00, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0x51767f50, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xfc1dc380, ftLastWriteTime.dwHighDateTime=0x1d6eb7e, nFileSizeHigh=0x0, nFileSizeLow=0x3690, dwReserved0=0x0, dwReserved1=0x0, cFileName="Attachments.jpg", cAlternateFileName="ATTACH~1.JPG")) returned 1 [0123.041] FindNextFileW (in: hFindFile=0x381b80, lpFindFileData=0x31e314 | out: lpFindFileData=0x31e314*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8608ee00, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0x6003c730, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x8608ee00, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0x3a68, dwReserved0=0x0, dwReserved1=0x0, cFileName="BREAK.JPG", cAlternateFileName="")) returned 1 [0123.041] FindNextFileW (in: hFindFile=0x381b80, lpFindFileData=0x31e314 | out: lpFindFileData=0x31e314*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8608ee00, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0x51b6c470, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x8608ee00, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0x3004, dwReserved0=0x0, dwReserved1=0x0, cFileName="BUTTON.JPG", cAlternateFileName="")) returned 1 [0123.041] FindNextFileW (in: hFindFile=0x381b80, lpFindFileData=0x31e314 | out: lpFindFileData=0x31e314*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8608ee00, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0x60382570, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x8608ee00, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0x33d6, dwReserved0=0x0, dwReserved1=0x0, cFileName="CHECKBOX.JPG", cAlternateFileName="")) returned 1 [0123.041] FindNextFileW (in: hFindFile=0x381b80, lpFindFileData=0x31e314 | out: lpFindFileData=0x31e314*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8608ee00, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0x51cc30d0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x8608ee00, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0x43a3, dwReserved0=0x0, dwReserved1=0x0, cFileName="COMBOBOX.JPG", cAlternateFileName="")) returned 1 [0123.041] FindNextFileW (in: hFindFile=0x381b80, lpFindFileData=0x31e314 | out: lpFindFileData=0x31e314*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8608ee00, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0x6048cf10, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x8608ee00, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0x36bd, dwReserved0=0x0, dwReserved1=0x0, cFileName="CONTACT.JPG", cAlternateFileName="")) returned 1 [0123.041] FindNextFileW (in: hFindFile=0x381b80, lpFindFileData=0x31e314 | out: lpFindFileData=0x31e314*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8608ee00, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0x606ee510, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x8608ee00, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0x3d22, dwReserved0=0x0, dwReserved1=0x0, cFileName="CURRENCY.JPG", cAlternateFileName="")) returned 1 [0123.041] FindNextFileW (in: hFindFile=0x381b80, lpFindFileData=0x31e314 | out: lpFindFileData=0x31e314*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8608ee00, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0x606ee510, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x8608ee00, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0x42af, dwReserved0=0x0, dwReserved1=0x0, cFileName="DATE.JPG", cAlternateFileName="")) returned 1 [0123.042] FindNextFileW (in: hFindFile=0x381b80, lpFindFileData=0x31e314 | out: lpFindFileData=0x31e314*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8608ee00, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0x606ee510, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x8608ee00, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0x4139, dwReserved0=0x0, dwReserved1=0x0, cFileName="DATETIME.JPG", cAlternateFileName="")) returned 1 [0123.042] FindNextFileW (in: hFindFile=0x381b80, lpFindFileData=0x31e314 | out: lpFindFileData=0x31e314*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8608ee00, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0x607d2d50, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xfc228640, ftLastWriteTime.dwHighDateTime=0x1d6eb7e, nFileSizeHigh=0x0, nFileSizeLow=0x3e10, dwReserved0=0x0, dwReserved1=0x0, cFileName="DigitalInk.jpg", cAlternateFileName="DIGITA~1.JPG")) returned 1 [0123.042] FindNextFileW (in: hFindFile=0x381b80, lpFindFileData=0x31e314 | out: lpFindFileData=0x31e314*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8608ee00, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0x51f96af0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xfc24e7a0, ftLastWriteTime.dwHighDateTime=0x1d6eb7e, nFileSizeHigh=0x0, nFileSizeLow=0x20f0, dwReserved0=0x0, dwReserved1=0x0, cFileName="EmbeddedView.jpg", cAlternateFileName="EMBEDD~1.JPG")) returned 1 [0123.042] FindNextFileW (in: hFindFile=0x381b80, lpFindFileData=0x31e314 | out: lpFindFileData=0x31e314*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x873a1b00, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0x5386f090, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x873a1b00, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0x3e72, dwReserved0=0x0, dwReserved1=0x0, cFileName="HEADING.JPG", cAlternateFileName="")) returned 1 [0123.042] FindNextFileW (in: hFindFile=0x381b80, lpFindFileData=0x31e314 | out: lpFindFileData=0x31e314*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x873a1b00, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0x5392d770, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x873a1b00, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0x139a, dwReserved0=0x0, dwReserved1=0x0, cFileName="IMAGE.JPG", cAlternateFileName="")) returned 1 [0123.042] FindNextFileW (in: hFindFile=0x381b80, lpFindFileData=0x31e314 | out: lpFindFileData=0x31e314*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x873a1b00, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0x568309f0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x873a1b00, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0xe65, dwReserved0=0x0, dwReserved1=0x0, cFileName="LINE.JPG", cAlternateFileName="")) returned 1 [0123.042] FindNextFileW (in: hFindFile=0x381b80, lpFindFileData=0x31e314 | out: lpFindFileData=0x31e314*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x873a1b00, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0x66293410, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x873a1b00, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0x3b3f, dwReserved0=0x0, dwReserved1=0x0, cFileName="LISTBOX.JPG", cAlternateFileName="")) returned 1 [0123.042] FindNextFileW (in: hFindFile=0x381b80, lpFindFileData=0x31e314 | out: lpFindFileData=0x31e314*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x873a1b00, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0x6a87fa50, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x873a1b00, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0x443a, dwReserved0=0x0, dwReserved1=0x0, cFileName="NUMERIC.JPG", cAlternateFileName="")) returned 1 [0123.042] FindNextFileW (in: hFindFile=0x381b80, lpFindFileData=0x31e314 | out: lpFindFileData=0x31e314*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x873a1b00, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0x6cd8b0b0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x873a1b00, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0x12f5, dwReserved0=0x0, dwReserved1=0x0, cFileName="PASSWORD.JPG", cAlternateFileName="")) returned 1 [0123.042] FindNextFileW (in: hFindFile=0x381b80, lpFindFileData=0x31e314 | out: lpFindFileData=0x31e314*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x873a1b00, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0x5a829930, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x873a1b00, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0x43c8, dwReserved0=0x0, dwReserved1=0x0, cFileName="RADIO.JPG", cAlternateFileName="")) returned 1 [0123.042] FindNextFileW (in: hFindFile=0x381b80, lpFindFileData=0x31e314 | out: lpFindFileData=0x31e314*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x873a1b00, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0x5a9342d0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xfc274900, ftLastWriteTime.dwHighDateTime=0x1d6eb7e, nFileSizeHigh=0x0, nFileSizeLow=0x3ae0, dwReserved0=0x0, dwReserved1=0x0, cFileName="SectionHeading.jpg", cAlternateFileName="SECTIO~1.JPG")) returned 1 [0123.042] FindNextFileW (in: hFindFile=0x381b80, lpFindFileData=0x31e314 | out: lpFindFileData=0x31e314*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x873a1b00, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0x5abe1b90, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xfc2c0bc0, ftLastWriteTime.dwHighDateTime=0x1d6eb7e, nFileSizeHigh=0x0, nFileSizeLow=0x37b0, dwReserved0=0x0, dwReserved1=0x0, cFileName="StaticText.jpg", cAlternateFileName="STATIC~1.JPG")) returned 1 [0123.042] FindNextFileW (in: hFindFile=0x381b80, lpFindFileData=0x31e314 | out: lpFindFileData=0x31e314*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x873a1b00, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0x6d462ff0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x873a1b00, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0x3983, dwReserved0=0x0, dwReserved1=0x0, cFileName="TEXTAREA.JPG", cAlternateFileName="")) returned 1 [0123.042] FindNextFileW (in: hFindFile=0x381b80, lpFindFileData=0x31e314 | out: lpFindFileData=0x31e314*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x873a1b00, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0x5ad12690, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x873a1b00, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0x3a97, dwReserved0=0x0, dwReserved1=0x0, cFileName="TEXTBOX.JPG", cAlternateFileName="")) returned 1 [0123.042] FindNextFileW (in: hFindFile=0x381b80, lpFindFileData=0x31e314 | out: lpFindFileData=0x31e314*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x886b4800, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0x6d462ff0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x886b4800, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0x42fa, dwReserved0=0x0, dwReserved1=0x0, cFileName="TEXTVIEW.JPG", cAlternateFileName="")) returned 1 [0123.042] FindNextFileW (in: hFindFile=0x381b80, lpFindFileData=0x31e314 | out: lpFindFileData=0x31e314*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x886b4800, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0x5e3d2090, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xfc2e6d20, ftLastWriteTime.dwHighDateTime=0x1d6eb7e, nFileSizeHigh=0x0, nFileSizeLow=0x4130, dwReserved0=0x0, dwReserved1=0x0, cFileName="UnformattedNumeric.jpg", cAlternateFileName="UNFORM~1.JPG")) returned 1 [0123.042] FindNextFileW (in: hFindFile=0x381b80, lpFindFileData=0x31e314 | out: lpFindFileData=0x31e314*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0123.042] FindNextFileW (in: hFindFile=0x381b80, lpFindFileData=0x31e314 | out: lpFindFileData=0x31e314*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x51741df0, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x6d462ff0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x6d462ff0, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0123.043] FindNextFileW (in: hFindFile=0x381b80, lpFindFileData=0x31e314 | out: lpFindFileData=0x31e314*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8608ee00, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0x51767f50, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xfc1dc380, ftLastWriteTime.dwHighDateTime=0x1d6eb7e, nFileSizeHigh=0x0, nFileSizeLow=0x3690, dwReserved0=0x0, dwReserved1=0x0, cFileName="Attachments.jpg", cAlternateFileName="ATTACH~1.JPG")) returned 1 [0123.043] FindNextFileW (in: hFindFile=0x381b80, lpFindFileData=0x31e314 | out: lpFindFileData=0x31e314*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8608ee00, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0x6003c730, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x8608ee00, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0x3a68, dwReserved0=0x0, dwReserved1=0x0, cFileName="BREAK.JPG", cAlternateFileName="")) returned 1 [0123.043] FindNextFileW (in: hFindFile=0x381b80, lpFindFileData=0x31e314 | out: lpFindFileData=0x31e314*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8608ee00, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0x51b6c470, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x8608ee00, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0x3004, dwReserved0=0x0, dwReserved1=0x0, cFileName="BUTTON.JPG", cAlternateFileName="")) returned 1 [0123.043] FindNextFileW (in: hFindFile=0x381b80, lpFindFileData=0x31e314 | out: lpFindFileData=0x31e314*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8608ee00, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0x60382570, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x8608ee00, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0x33d6, dwReserved0=0x0, dwReserved1=0x0, cFileName="CHECKBOX.JPG", cAlternateFileName="")) returned 1 [0123.043] FindNextFileW (in: hFindFile=0x381b80, lpFindFileData=0x31e314 | out: lpFindFileData=0x31e314*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8608ee00, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0x51cc30d0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x8608ee00, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0x43a3, dwReserved0=0x0, dwReserved1=0x0, cFileName="COMBOBOX.JPG", cAlternateFileName="")) returned 1 [0123.043] FindNextFileW (in: hFindFile=0x381b80, lpFindFileData=0x31e314 | out: lpFindFileData=0x31e314*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8608ee00, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0x6048cf10, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x8608ee00, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0x36bd, dwReserved0=0x0, dwReserved1=0x0, cFileName="CONTACT.JPG", cAlternateFileName="")) returned 1 [0123.043] FindNextFileW (in: hFindFile=0x381b80, lpFindFileData=0x31e314 | out: lpFindFileData=0x31e314*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8608ee00, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0x606ee510, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x8608ee00, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0x3d22, dwReserved0=0x0, dwReserved1=0x0, cFileName="CURRENCY.JPG", cAlternateFileName="")) returned 1 [0123.043] FindNextFileW (in: hFindFile=0x381b80, lpFindFileData=0x31e314 | out: lpFindFileData=0x31e314*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8608ee00, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0x606ee510, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x8608ee00, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0x42af, dwReserved0=0x0, dwReserved1=0x0, cFileName="DATE.JPG", cAlternateFileName="")) returned 1 [0123.043] FindNextFileW (in: hFindFile=0x381b80, lpFindFileData=0x31e314 | out: lpFindFileData=0x31e314*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8608ee00, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0x606ee510, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x8608ee00, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0x4139, dwReserved0=0x0, dwReserved1=0x0, cFileName="DATETIME.JPG", cAlternateFileName="")) returned 1 [0123.043] FindNextFileW (in: hFindFile=0x381b80, lpFindFileData=0x31e314 | out: lpFindFileData=0x31e314*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8608ee00, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0x607d2d50, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xfc228640, ftLastWriteTime.dwHighDateTime=0x1d6eb7e, nFileSizeHigh=0x0, nFileSizeLow=0x3e10, dwReserved0=0x0, dwReserved1=0x0, cFileName="DigitalInk.jpg", cAlternateFileName="DIGITA~1.JPG")) returned 1 [0123.043] FindNextFileW (in: hFindFile=0x381b80, lpFindFileData=0x31e314 | out: lpFindFileData=0x31e314*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8608ee00, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0x51f96af0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xfc24e7a0, ftLastWriteTime.dwHighDateTime=0x1d6eb7e, nFileSizeHigh=0x0, nFileSizeLow=0x20f0, dwReserved0=0x0, dwReserved1=0x0, cFileName="EmbeddedView.jpg", cAlternateFileName="EMBEDD~1.JPG")) returned 1 [0123.043] FindNextFileW (in: hFindFile=0x381b80, lpFindFileData=0x31e314 | out: lpFindFileData=0x31e314*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x873a1b00, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0x5386f090, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x873a1b00, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0x3e72, dwReserved0=0x0, dwReserved1=0x0, cFileName="HEADING.JPG", cAlternateFileName="")) returned 1 [0123.043] FindNextFileW (in: hFindFile=0x381b80, lpFindFileData=0x31e314 | out: lpFindFileData=0x31e314*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x873a1b00, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0x5392d770, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x873a1b00, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0x139a, dwReserved0=0x0, dwReserved1=0x0, cFileName="IMAGE.JPG", cAlternateFileName="")) returned 1 [0123.043] FindNextFileW (in: hFindFile=0x381b80, lpFindFileData=0x31e314 | out: lpFindFileData=0x31e314*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x873a1b00, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0x568309f0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x873a1b00, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0xe65, dwReserved0=0x0, dwReserved1=0x0, cFileName="LINE.JPG", cAlternateFileName="")) returned 1 [0123.043] FindNextFileW (in: hFindFile=0x381b80, lpFindFileData=0x31e314 | out: lpFindFileData=0x31e314*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x873a1b00, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0x66293410, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x873a1b00, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0x3b3f, dwReserved0=0x0, dwReserved1=0x0, cFileName="LISTBOX.JPG", cAlternateFileName="")) returned 1 [0123.043] FindNextFileW (in: hFindFile=0x381b80, lpFindFileData=0x31e314 | out: lpFindFileData=0x31e314*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x873a1b00, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0x6a87fa50, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x873a1b00, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0x443a, dwReserved0=0x0, dwReserved1=0x0, cFileName="NUMERIC.JPG", cAlternateFileName="")) returned 1 [0123.043] FindNextFileW (in: hFindFile=0x381b80, lpFindFileData=0x31e314 | out: lpFindFileData=0x31e314*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x873a1b00, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0x6cd8b0b0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x873a1b00, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0x12f5, dwReserved0=0x0, dwReserved1=0x0, cFileName="PASSWORD.JPG", cAlternateFileName="")) returned 1 [0123.043] FindNextFileW (in: hFindFile=0x381b80, lpFindFileData=0x31e314 | out: lpFindFileData=0x31e314*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x873a1b00, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0x5a829930, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x873a1b00, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0x43c8, dwReserved0=0x0, dwReserved1=0x0, cFileName="RADIO.JPG", cAlternateFileName="")) returned 1 [0123.043] FindNextFileW (in: hFindFile=0x381b80, lpFindFileData=0x31e314 | out: lpFindFileData=0x31e314*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x873a1b00, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0x5a9342d0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xfc274900, ftLastWriteTime.dwHighDateTime=0x1d6eb7e, nFileSizeHigh=0x0, nFileSizeLow=0x3ae0, dwReserved0=0x0, dwReserved1=0x0, cFileName="SectionHeading.jpg", cAlternateFileName="SECTIO~1.JPG")) returned 1 [0123.043] FindNextFileW (in: hFindFile=0x381b80, lpFindFileData=0x31e314 | out: lpFindFileData=0x31e314*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x873a1b00, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0x5abe1b90, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xfc2c0bc0, ftLastWriteTime.dwHighDateTime=0x1d6eb7e, nFileSizeHigh=0x0, nFileSizeLow=0x37b0, dwReserved0=0x0, dwReserved1=0x0, cFileName="StaticText.jpg", cAlternateFileName="STATIC~1.JPG")) returned 1 [0123.043] FindNextFileW (in: hFindFile=0x381b80, lpFindFileData=0x31e314 | out: lpFindFileData=0x31e314*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x873a1b00, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0x6d462ff0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x873a1b00, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0x3983, dwReserved0=0x0, dwReserved1=0x0, cFileName="TEXTAREA.JPG", cAlternateFileName="")) returned 1 [0123.044] FindNextFileW (in: hFindFile=0x381b80, lpFindFileData=0x31e314 | out: lpFindFileData=0x31e314*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x873a1b00, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0x5ad12690, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x873a1b00, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0x3a97, dwReserved0=0x0, dwReserved1=0x0, cFileName="TEXTBOX.JPG", cAlternateFileName="")) returned 1 [0123.044] FindNextFileW (in: hFindFile=0x381b80, lpFindFileData=0x31e314 | out: lpFindFileData=0x31e314*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x886b4800, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0x6d462ff0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x886b4800, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0x42fa, dwReserved0=0x0, dwReserved1=0x0, cFileName="TEXTVIEW.JPG", cAlternateFileName="")) returned 1 [0123.044] FindNextFileW (in: hFindFile=0x381b80, lpFindFileData=0x31e314 | out: lpFindFileData=0x31e314*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x886b4800, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0x5e3d2090, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xfc2e6d20, ftLastWriteTime.dwHighDateTime=0x1d6eb7e, nFileSizeHigh=0x0, nFileSizeLow=0x4130, dwReserved0=0x0, dwReserved1=0x0, cFileName="UnformattedNumeric.jpg", cAlternateFileName="UNFORM~1.JPG")) returned 1 [0123.044] FindNextFileW (in: hFindFile=0x381b80, lpFindFileData=0x31e314 | out: lpFindFileData=0x31e314*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x886b4800, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0x5e3d2090, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xfc2e6d20, ftLastWriteTime.dwHighDateTime=0x1d6eb7e, nFileSizeHigh=0x0, nFileSizeLow=0x4130, dwReserved0=0x0, dwReserved1=0x0, cFileName="UnformattedNumeric.jpg", cAlternateFileName="UNFORM~1.JPG")) returned 0 [0123.046] MoveFileW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\FieldTypePreview\\Attachments.jpg" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms\\fieldtypepreview\\attachments.jpg"), lpNewFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\FieldTypePreview\\Attachments.jpg.[neftet@tutanota.com].boom" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms\\fieldtypepreview\\attachments.jpg.[neftet@tutanota.com].boom")) returned 1 [0123.050] MoveFileW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\FieldTypePreview\\DigitalInk.jpg" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms\\fieldtypepreview\\digitalink.jpg"), lpNewFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\FieldTypePreview\\DigitalInk.jpg.[neftet@tutanota.com].boom" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms\\fieldtypepreview\\digitalink.jpg.[neftet@tutanota.com].boom")) returned 1 [0123.053] MoveFileW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\FieldTypePreview\\EmbeddedView.jpg" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms\\fieldtypepreview\\embeddedview.jpg"), lpNewFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\FieldTypePreview\\EmbeddedView.jpg.[neftet@tutanota.com].boom" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms\\fieldtypepreview\\embeddedview.jpg.[neftet@tutanota.com].boom")) returned 1 [0123.057] MoveFileW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\FieldTypePreview\\SectionHeading.jpg" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms\\fieldtypepreview\\sectionheading.jpg"), lpNewFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\FieldTypePreview\\SectionHeading.jpg.[neftet@tutanota.com].boom" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms\\fieldtypepreview\\sectionheading.jpg.[neftet@tutanota.com].boom")) returned 1 [0123.060] MoveFileW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\FieldTypePreview\\StaticText.jpg" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms\\fieldtypepreview\\statictext.jpg"), lpNewFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\FieldTypePreview\\StaticText.jpg.[neftet@tutanota.com].boom" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms\\fieldtypepreview\\statictext.jpg.[neftet@tutanota.com].boom")) returned 1 [0123.064] MoveFileW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\FieldTypePreview\\UnformattedNumeric.jpg" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms\\fieldtypepreview\\unformattednumeric.jpg"), lpNewFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\FieldTypePreview\\UnformattedNumeric.jpg.[neftet@tutanota.com].boom" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms\\fieldtypepreview\\unformattednumeric.jpg.[neftet@tutanota.com].boom")) returned 1 [0123.066] FindNextFileW (in: hFindFile=0x381b80, lpFindFileData=0x31e314 | out: lpFindFileData=0x31e314*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x51d354f0, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x6d547830, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x6d547830, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0123.066] FindNextFileW (in: hFindFile=0x381b80, lpFindFileData=0x31e314 | out: lpFindFileData=0x31e314*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x886b4800, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0x51d354f0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x886b4800, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0x2021e, dwReserved0=0x0, dwReserved1=0x0, cFileName="Customer Support.fdt", cAlternateFileName="CUSTOM~1.FDT")) returned 1 [0123.066] FindNextFileW (in: hFindFile=0x381b80, lpFindFileData=0x31e314 | out: lpFindFileData=0x31e314*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x886b4800, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0x61c80c70, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x886b4800, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0x20b43, dwReserved0=0x0, dwReserved1=0x0, cFileName="Hardware Tracker.fdt", cAlternateFileName="HARDWA~1.FDT")) returned 1 [0123.066] FindNextFileW (in: hFindFile=0x381b80, lpFindFileData=0x31e314 | out: lpFindFileData=0x31e314*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x899c7500, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0x61cccf30, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x899c7500, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0x24051, dwReserved0=0x0, dwReserved1=0x0, cFileName="Hiring Requisition - Customized.fdt", cAlternateFileName="HIRING~2.FDT")) returned 1 [0123.066] FindNextFileW (in: hFindFile=0x381b80, lpFindFileData=0x31e314 | out: lpFindFileData=0x31e314*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x899c7500, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0x538bb350, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x899c7500, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0x248db, dwReserved0=0x0, dwReserved1=0x0, cFileName="Hiring Requisition.fdt", cAlternateFileName="HIRING~1.FDT")) returned 1 [0123.066] FindNextFileW (in: hFindFile=0x381b80, lpFindFileData=0x31e314 | out: lpFindFileData=0x31e314*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x899c7500, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0x5a52fdb0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x899c7500, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0x17d6d, dwReserved0=0x0, dwReserved1=0x0, cFileName="POLICIES.FDT", cAlternateFileName="")) returned 1 [0123.066] FindNextFileW (in: hFindFile=0x381b80, lpFindFileData=0x31e314 | out: lpFindFileData=0x31e314*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x899c7500, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0x6d084c30, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x899c7500, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0x16b33, dwReserved0=0x0, dwReserved1=0x0, cFileName="Process Library.fdt", cAlternateFileName="PROCES~1.FDT")) returned 1 [0123.066] FindNextFileW (in: hFindFile=0x381b80, lpFindFileData=0x31e314 | out: lpFindFileData=0x31e314*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x899c7500, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0x5abe1b90, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x899c7500, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0x18ead, dwReserved0=0x0, dwReserved1=0x0, cFileName="Status Report.fdt", cAlternateFileName="STATUS~1.FDT")) returned 1 [0123.066] FindNextFileW (in: hFindFile=0x381b80, lpFindFileData=0x31e314 | out: lpFindFileData=0x31e314*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x899c7500, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0x6d547830, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x899c7500, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0x1e666, dwReserved0=0x0, dwReserved1=0x0, cFileName="Track Issues.fdt", cAlternateFileName="TRACKI~1.FDT")) returned 1 [0123.066] FindNextFileW (in: hFindFile=0x381b80, lpFindFileData=0x31e314 | out: lpFindFileData=0x31e314*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0123.068] FindNextFileW (in: hFindFile=0x381b80, lpFindFileData=0x31e314 | out: lpFindFileData=0x31e314*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x51d354f0, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x6d547830, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x6d547830, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0123.068] FindNextFileW (in: hFindFile=0x381b80, lpFindFileData=0x31e314 | out: lpFindFileData=0x31e314*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x886b4800, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0x51d354f0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x886b4800, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0x2021e, dwReserved0=0x0, dwReserved1=0x0, cFileName="Customer Support.fdt", cAlternateFileName="CUSTOM~1.FDT")) returned 1 [0123.068] FindNextFileW (in: hFindFile=0x381b80, lpFindFileData=0x31e314 | out: lpFindFileData=0x31e314*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x886b4800, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0x61c80c70, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x886b4800, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0x20b43, dwReserved0=0x0, dwReserved1=0x0, cFileName="Hardware Tracker.fdt", cAlternateFileName="HARDWA~1.FDT")) returned 1 [0123.068] FindNextFileW (in: hFindFile=0x381b80, lpFindFileData=0x31e314 | out: lpFindFileData=0x31e314*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x899c7500, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0x61cccf30, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x899c7500, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0x24051, dwReserved0=0x0, dwReserved1=0x0, cFileName="Hiring Requisition - Customized.fdt", cAlternateFileName="HIRING~2.FDT")) returned 1 [0123.068] FindNextFileW (in: hFindFile=0x381b80, lpFindFileData=0x31e314 | out: lpFindFileData=0x31e314*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x899c7500, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0x538bb350, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x899c7500, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0x248db, dwReserved0=0x0, dwReserved1=0x0, cFileName="Hiring Requisition.fdt", cAlternateFileName="HIRING~1.FDT")) returned 1 [0123.068] FindNextFileW (in: hFindFile=0x381b80, lpFindFileData=0x31e314 | out: lpFindFileData=0x31e314*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x899c7500, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0x5a52fdb0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x899c7500, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0x17d6d, dwReserved0=0x0, dwReserved1=0x0, cFileName="POLICIES.FDT", cAlternateFileName="")) returned 1 [0123.068] FindNextFileW (in: hFindFile=0x381b80, lpFindFileData=0x31e314 | out: lpFindFileData=0x31e314*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x899c7500, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0x6d084c30, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x899c7500, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0x16b33, dwReserved0=0x0, dwReserved1=0x0, cFileName="Process Library.fdt", cAlternateFileName="PROCES~1.FDT")) returned 1 [0123.068] FindNextFileW (in: hFindFile=0x381b80, lpFindFileData=0x31e314 | out: lpFindFileData=0x31e314*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x899c7500, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0x5abe1b90, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x899c7500, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0x18ead, dwReserved0=0x0, dwReserved1=0x0, cFileName="Status Report.fdt", cAlternateFileName="STATUS~1.FDT")) returned 1 [0123.068] FindNextFileW (in: hFindFile=0x381b80, lpFindFileData=0x31e314 | out: lpFindFileData=0x31e314*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x899c7500, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0x6d547830, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x899c7500, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0x1e666, dwReserved0=0x0, dwReserved1=0x0, cFileName="Track Issues.fdt", cAlternateFileName="TRACKI~1.FDT")) returned 1 [0123.068] FindNextFileW (in: hFindFile=0x381b80, lpFindFileData=0x31e314 | out: lpFindFileData=0x31e314*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x899c7500, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0x6d547830, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x899c7500, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0x1e666, dwReserved0=0x0, dwReserved1=0x0, cFileName="Track Issues.fdt", cAlternateFileName="TRACKI~1.FDT")) returned 0 [0123.069] FindNextFileW (in: hFindFile=0x381b80, lpFindFileData=0x31e38c | out: lpFindFileData=0x31e38c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5127f1f0, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x706f8370, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x706f8370, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0123.069] FindNextFileW (in: hFindFile=0x381b80, lpFindFileData=0x31e38c | out: lpFindFileData=0x31e38c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8bfecf00, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0x5eaf6290, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x8bfecf00, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0x244, dwReserved0=0x0, dwReserved1=0x0, cFileName="ADD.GIF", cAlternateFileName="")) returned 1 [0123.069] FindNextFileW (in: hFindFile=0x381b80, lpFindFileData=0x31e38c | out: lpFindFileData=0x31e38c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8bfecf00, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0x5eaf6290, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xfc359140, ftLastWriteTime.dwHighDateTime=0x1d6eb7e, nFileSizeHigh=0x0, nFileSizeLow=0xbf0, dwReserved0=0x0, dwReserved1=0x0, cFileName="AddToViewArrow.jpg", cAlternateFileName="ADDTOV~1.JPG")) returned 1 [0123.069] FindNextFileW (in: hFindFile=0x381b80, lpFindFileData=0x31e38c | out: lpFindFileData=0x31e38c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8bfecf00, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0x5127f1f0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xfc37f2a0, ftLastWriteTime.dwHighDateTime=0x1d6eb7e, nFileSizeHigh=0x0, nFileSizeLow=0x930, dwReserved0=0x0, dwReserved1=0x0, cFileName="AddToViewArrowMask.bmp", cAlternateFileName="ADDTOV~1.BMP")) returned 1 [0123.069] FindNextFileW (in: hFindFile=0x381b80, lpFindFileData=0x31e38c | out: lpFindFileData=0x31e38c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8bfecf00, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0x5f409670, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x8bfecf00, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0xae8, dwReserved0=0x0, dwReserved1=0x0, cFileName="attention.gif", cAlternateFileName="ATTENT~1.GIF")) returned 1 [0123.069] FindNextFileW (in: hFindFile=0x381b80, lpFindFileData=0x31e38c | out: lpFindFileData=0x31e38c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8bfecf00, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0x5f61e9b0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x8bfecf00, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0x614e, dwReserved0=0x0, dwReserved1=0x0, cFileName="BG_ADOBE.GIF", cAlternateFileName="")) returned 1 [0123.069] FindNextFileW (in: hFindFile=0x381b80, lpFindFileData=0x31e38c | out: lpFindFileData=0x31e38c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8bfecf00, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0x5f61e9b0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x8bfecf00, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0x161d, dwReserved0=0x0, dwReserved1=0x0, cFileName="bg_Casual.gif", cAlternateFileName="BG_CAS~1.GIF")) returned 1 [0123.069] FindNextFileW (in: hFindFile=0x381b80, lpFindFileData=0x31e38c | out: lpFindFileData=0x31e38c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8bfecf00, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0x5f644b10, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x8bfecf00, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0x7dd3, dwReserved0=0x0, dwReserved1=0x0, cFileName="bg_Country.gif", cAlternateFileName="BG_COU~1.GIF")) returned 1 [0123.069] FindNextFileW (in: hFindFile=0x381b80, lpFindFileData=0x31e38c | out: lpFindFileData=0x31e38c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8bfecf00, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0x5f644b10, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x8bfecf00, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0x132a, dwReserved0=0x0, dwReserved1=0x0, cFileName="bg_Earthy.gif", cAlternateFileName="BG_EAR~1.GIF")) returned 1 [0123.069] FindNextFileW (in: hFindFile=0x381b80, lpFindFileData=0x31e38c | out: lpFindFileData=0x31e38c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8bfecf00, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0x5f644b10, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x8bfecf00, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0x167bd, dwReserved0=0x0, dwReserved1=0x0, cFileName="bg_FormsHomePage.gif", cAlternateFileName="BG_FOR~2.GIF")) returned 1 [0123.069] FindNextFileW (in: hFindFile=0x381b80, lpFindFileData=0x31e38c | out: lpFindFileData=0x31e38c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8bfecf00, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0x519a33f0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x8bfecf00, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0x4ebb, dwReserved0=0x0, dwReserved1=0x0, cFileName="bg_FormsHomePageBlank.gif", cAlternateFileName="BG_FOR~1.GIF")) returned 1 [0123.070] FindNextFileW (in: hFindFile=0x381b80, lpFindFileData=0x31e38c | out: lpFindFileData=0x31e38c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8bfecf00, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0x5f644b10, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x8bfecf00, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0x40f, dwReserved0=0x0, dwReserved1=0x0, cFileName="bg_FormsHomePageSlice.gif", cAlternateFileName="BG_FOR~3.GIF")) returned 1 [0123.070] FindNextFileW (in: hFindFile=0x381b80, lpFindFileData=0x31e38c | out: lpFindFileData=0x31e38c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8bfecf00, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0x519a33f0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x8bfecf00, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0x5690, dwReserved0=0x0, dwReserved1=0x0, cFileName="bg_GreenTea.gif", cAlternateFileName="BG_GRE~1.GIF")) returned 1 [0123.070] FindNextFileW (in: hFindFile=0x381b80, lpFindFileData=0x31e38c | out: lpFindFileData=0x31e38c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8bfecf00, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0x519a33f0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x8bfecf00, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0x6a, dwReserved0=0x0, dwReserved1=0x0, cFileName="bg_Groove.gif", cAlternateFileName="BG_GRO~1.GIF")) returned 1 [0123.070] FindNextFileW (in: hFindFile=0x381b80, lpFindFileData=0x31e38c | out: lpFindFileData=0x31e38c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8d2ffc00, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0x5f644b10, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x8d2ffc00, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0x21a6, dwReserved0=0x0, dwReserved1=0x0, cFileName="bg_LightSpirit.gif", cAlternateFileName="BG_LIG~1.GIF")) returned 1 [0123.070] FindNextFileW (in: hFindFile=0x381b80, lpFindFileData=0x31e38c | out: lpFindFileData=0x31e38c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8d2ffc00, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0x5f66ac70, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x8d2ffc00, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0x3d57, dwReserved0=0x0, dwReserved1=0x0, cFileName="bg_OliveGreen.gif", cAlternateFileName="BG_OLI~1.GIF")) returned 1 [0123.070] FindNextFileW (in: hFindFile=0x381b80, lpFindFileData=0x31e38c | out: lpFindFileData=0x31e38c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8d2ffc00, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0x5f66ac70, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x8d2ffc00, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0x1845, dwReserved0=0x0, dwReserved1=0x0, cFileName="bg_Premium.gif", cAlternateFileName="BG_PRE~1.GIF")) returned 1 [0123.070] FindNextFileW (in: hFindFile=0x381b80, lpFindFileData=0x31e38c | out: lpFindFileData=0x31e38c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8d2ffc00, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0x5f66ac70, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x8d2ffc00, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0x5141, dwReserved0=0x0, dwReserved1=0x0, cFileName="bg_SlateBlue.gif", cAlternateFileName="BG_SLA~1.GIF")) returned 1 [0123.070] FindNextFileW (in: hFindFile=0x381b80, lpFindFileData=0x31e38c | out: lpFindFileData=0x31e38c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8d2ffc00, ftCreationTime.dwHighDateTime=0x1c747ea, ftLastAccessTime.dwLowDateTime=0x519a33f0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x8d2ffc00, ftLastWriteTime.dwHighDateTime=0x1c747ea, nFileSizeHigh=0x0, nFileSizeLow=0x193c, dwReserved0=0x0, dwReserved1=0x0, cFileName="bg_TexturedBlue.gif", cAlternateFileName="BG_TEX~1.GIF")) returned 1 [0123.073] MoveFileW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\AddToViewArrow.jpg" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms3\\addtoviewarrow.jpg"), lpNewFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\AddToViewArrow.jpg.[neftet@tutanota.com].boom" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms3\\addtoviewarrow.jpg.[neftet@tutanota.com].boom")) returned 1 [0123.076] MoveFileW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\AddToViewArrowMask.bmp" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms3\\addtoviewarrowmask.bmp"), lpNewFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\AddToViewArrowMask.bmp.[neftet@tutanota.com].boom" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms3\\addtoviewarrowmask.bmp.[neftet@tutanota.com].boom")) returned 1 [0123.079] MoveFileW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsBlankPage.html" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms3\\formsblankpage.html"), lpNewFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsBlankPage.html.[neftet@tutanota.com].boom" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms3\\formsblankpage.html.[neftet@tutanota.com].boom")) returned 1 [0123.082] MoveFileW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsBrowserUpgrade.html" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms3\\formsbrowserupgrade.html"), lpNewFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsBrowserUpgrade.html.[neftet@tutanota.com].boom" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms3\\formsbrowserupgrade.html.[neftet@tutanota.com].boom")) returned 1 [0123.085] MoveFileW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsColorChart.html" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms3\\formscolorchart.html"), lpNewFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsColorChart.html.[neftet@tutanota.com].boom" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms3\\formscolorchart.html.[neftet@tutanota.com].boom")) returned 1 [0123.088] MoveFileW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsFormTemplate.html" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms3\\formsformtemplate.html"), lpNewFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsFormTemplate.html.[neftet@tutanota.com].boom" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms3\\formsformtemplate.html.[neftet@tutanota.com].boom")) returned 1 [0123.091] MoveFileW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsHomePage.html" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms3\\formshomepage.html"), lpNewFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsHomePage.html.[neftet@tutanota.com].boom" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms3\\formshomepage.html.[neftet@tutanota.com].boom")) returned 1 [0123.095] MoveFileW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsHomePageStyle.css" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms3\\formshomepagestyle.css"), lpNewFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsHomePageStyle.css.[neftet@tutanota.com].boom" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms3\\formshomepagestyle.css.[neftet@tutanota.com].boom")) returned 1 [0123.098] MoveFileW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsImageTemplate.html" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms3\\formsimagetemplate.html"), lpNewFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsImageTemplate.html.[neftet@tutanota.com].boom" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms3\\formsimagetemplate.html.[neftet@tutanota.com].boom")) returned 1 [0123.101] MoveFileW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsMacroTemplate.html" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms3\\formsmacrotemplate.html"), lpNewFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsMacroTemplate.html.[neftet@tutanota.com].boom" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms3\\formsmacrotemplate.html.[neftet@tutanota.com].boom")) returned 1 [0123.105] MoveFileW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsPreviewTemplate.html" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms3\\formspreviewtemplate.html"), lpNewFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsPreviewTemplate.html.[neftet@tutanota.com].boom" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms3\\formspreviewtemplate.html.[neftet@tutanota.com].boom")) returned 1 [0123.108] MoveFileW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsPrintTemplate.html" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms3\\formsprinttemplate.html"), lpNewFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsPrintTemplate.html.[neftet@tutanota.com].boom" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms3\\formsprinttemplate.html.[neftet@tutanota.com].boom")) returned 1 [0123.112] MoveFileW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsVersion1Warning.htm" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms3\\formsversion1warning.htm"), lpNewFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsVersion1Warning.htm.[neftet@tutanota.com].boom" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms3\\formsversion1warning.htm.[neftet@tutanota.com].boom")) returned 1 [0123.118] MoveFileW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsViewAttachmentIcons.jpg" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms3\\formsviewattachmenticons.jpg"), lpNewFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsViewAttachmentIcons.jpg.[neftet@tutanota.com].boom" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms3\\formsviewattachmenticons.jpg.[neftet@tutanota.com].boom")) returned 1 [0123.122] MoveFileW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsViewAttachmentIconsMask.bmp" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms3\\formsviewattachmenticonsmask.bmp"), lpNewFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsViewAttachmentIconsMask.bmp.[neftet@tutanota.com].boom" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms3\\formsviewattachmenticonsmask.bmp.[neftet@tutanota.com].boom")) returned 1 [0123.125] MoveFileW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsViewFrame.html" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms3\\formsviewframe.html"), lpNewFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsViewFrame.html.[neftet@tutanota.com].boom" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms3\\formsviewframe.html.[neftet@tutanota.com].boom")) returned 1 [0123.128] MoveFileW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsViewTemplate.html" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms3\\formsviewtemplate.html"), lpNewFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsViewTemplate.html.[neftet@tutanota.com].boom" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms3\\formsviewtemplate.html.[neftet@tutanota.com].boom")) returned 1 [0123.132] MoveFileW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormToolImages.jpg" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms3\\formtoolimages.jpg"), lpNewFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormToolImages.jpg.[neftet@tutanota.com].boom" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms3\\formtoolimages.jpg.[neftet@tutanota.com].boom")) returned 1 [0123.136] MoveFileW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\ViewHeaderPreview.jpg" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms3\\viewheaderpreview.jpg"), lpNewFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\ViewHeaderPreview.jpg.[neftet@tutanota.com].boom" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms3\\viewheaderpreview.jpg.[neftet@tutanota.com].boom")) returned 1 [0123.141] MoveFileW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\Adobe.css" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms3\\formsstyles\\adobe.css"), lpNewFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\Adobe.css.[neftet@tutanota.com].boom" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms3\\formsstyles\\adobe.css.[neftet@tutanota.com].boom")) returned 1 [0123.144] MoveFileW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\Americana.css" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms3\\formsstyles\\americana.css"), lpNewFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\Americana.css.[neftet@tutanota.com].boom" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms3\\formsstyles\\americana.css.[neftet@tutanota.com].boom")) returned 1 [0123.147] MoveFileW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\BabyBlue.css" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms3\\formsstyles\\babyblue.css"), lpNewFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\BabyBlue.css.[neftet@tutanota.com].boom" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms3\\formsstyles\\babyblue.css.[neftet@tutanota.com].boom")) returned 1 [0123.150] MoveFileW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\Biscay.css" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms3\\formsstyles\\biscay.css"), lpNewFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\Biscay.css.[neftet@tutanota.com].boom" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms3\\formsstyles\\biscay.css.[neftet@tutanota.com].boom")) returned 1 [0123.153] MoveFileW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\BrightOrange.css" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms3\\formsstyles\\brightorange.css"), lpNewFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\BrightOrange.css.[neftet@tutanota.com].boom" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms3\\formsstyles\\brightorange.css.[neftet@tutanota.com].boom")) returned 1 [0123.156] MoveFileW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\BrightYellow.css" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms3\\formsstyles\\brightyellow.css"), lpNewFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\BrightYellow.css.[neftet@tutanota.com].boom" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms3\\formsstyles\\brightyellow.css.[neftet@tutanota.com].boom")) returned 1 [0123.159] MoveFileW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\Casual.css" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms3\\formsstyles\\casual.css"), lpNewFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\Casual.css.[neftet@tutanota.com].boom" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms3\\formsstyles\\casual.css.[neftet@tutanota.com].boom")) returned 1 [0123.161] MoveFileW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\Country.css" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms3\\formsstyles\\country.css"), lpNewFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\Country.css.[neftet@tutanota.com].boom" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms3\\formsstyles\\country.css.[neftet@tutanota.com].boom")) returned 1 [0123.165] MoveFileW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\Desert.css" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms3\\formsstyles\\desert.css"), lpNewFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\Desert.css.[neftet@tutanota.com].boom" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms3\\formsstyles\\desert.css.[neftet@tutanota.com].boom")) returned 1 [0123.168] MoveFileW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\Earthy.css" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms3\\formsstyles\\earthy.css"), lpNewFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\Earthy.css.[neftet@tutanota.com].boom" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms3\\formsstyles\\earthy.css.[neftet@tutanota.com].boom")) returned 1 [0123.171] MoveFileW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\GrayCheck.css" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms3\\formsstyles\\graycheck.css"), lpNewFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\GrayCheck.css.[neftet@tutanota.com].boom" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms3\\formsstyles\\graycheck.css.[neftet@tutanota.com].boom")) returned 1 [0123.174] MoveFileW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\GreenTea.css" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms3\\formsstyles\\greentea.css"), lpNewFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\GreenTea.css.[neftet@tutanota.com].boom" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms3\\formsstyles\\greentea.css.[neftet@tutanota.com].boom")) returned 1 [0123.177] MoveFileW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\LightSpirit.css" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms3\\formsstyles\\lightspirit.css"), lpNewFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\LightSpirit.css.[neftet@tutanota.com].boom" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms3\\formsstyles\\lightspirit.css.[neftet@tutanota.com].boom")) returned 1 [0123.180] MoveFileW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\Lime.css" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms3\\formsstyles\\lime.css"), lpNewFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\Lime.css.[neftet@tutanota.com].boom" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms3\\formsstyles\\lime.css.[neftet@tutanota.com].boom")) returned 1 [0123.183] MoveFileW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\Maroon.css" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms3\\formsstyles\\maroon.css"), lpNewFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\Maroon.css.[neftet@tutanota.com].boom" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms3\\formsstyles\\maroon.css.[neftet@tutanota.com].boom")) returned 1 [0123.186] MoveFileW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\Oasis.css" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms3\\formsstyles\\oasis.css"), lpNewFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\Oasis.css.[neftet@tutanota.com].boom" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms3\\formsstyles\\oasis.css.[neftet@tutanota.com].boom")) returned 1 [0123.190] MoveFileW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\OliveGreen.css" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms3\\formsstyles\\olivegreen.css"), lpNewFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\OliveGreen.css.[neftet@tutanota.com].boom" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms3\\formsstyles\\olivegreen.css.[neftet@tutanota.com].boom")) returned 1 [0123.194] MoveFileW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\Premium.css" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms3\\formsstyles\\premium.css"), lpNewFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\Premium.css.[neftet@tutanota.com].boom" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms3\\formsstyles\\premium.css.[neftet@tutanota.com].boom")) returned 1 [0123.197] MoveFileW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\Slate.css" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms3\\formsstyles\\slate.css"), lpNewFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\Slate.css.[neftet@tutanota.com].boom" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms3\\formsstyles\\slate.css.[neftet@tutanota.com].boom")) returned 1 [0123.200] MoveFileW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\SlateBlue.css" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms3\\formsstyles\\slateblue.css"), lpNewFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\SlateBlue.css.[neftet@tutanota.com].boom" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms3\\formsstyles\\slateblue.css.[neftet@tutanota.com].boom")) returned 1 [0123.203] MoveFileW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\SoftBlue.css" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms3\\formsstyles\\softblue.css"), lpNewFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\SoftBlue.css.[neftet@tutanota.com].boom" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms3\\formsstyles\\softblue.css.[neftet@tutanota.com].boom")) returned 1 [0123.205] MoveFileW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\SpringGreen.css" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms3\\formsstyles\\springgreen.css"), lpNewFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\SpringGreen.css.[neftet@tutanota.com].boom" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms3\\formsstyles\\springgreen.css.[neftet@tutanota.com].boom")) returned 1 [0123.208] MoveFileW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\Sts.css" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms3\\formsstyles\\sts.css"), lpNewFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\Sts.css.[neftet@tutanota.com].boom" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms3\\formsstyles\\sts.css.[neftet@tutanota.com].boom")) returned 1 [0123.212] MoveFileW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\Sts2.css" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms3\\formsstyles\\sts2.css"), lpNewFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\Sts2.css.[neftet@tutanota.com].boom" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms3\\formsstyles\\sts2.css.[neftet@tutanota.com].boom")) returned 1 [0123.216] MoveFileW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\Swirl.css" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms3\\formsstyles\\swirl.css"), lpNewFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\Swirl.css.[neftet@tutanota.com].boom" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms3\\formsstyles\\swirl.css.[neftet@tutanota.com].boom")) returned 1 [0123.225] MoveFileW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\Teal.css" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms3\\formsstyles\\teal.css"), lpNewFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\Teal.css.[neftet@tutanota.com].boom" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms3\\formsstyles\\teal.css.[neftet@tutanota.com].boom")) returned 1 [0123.229] MoveFileW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\TexturedBlue.css" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms3\\formsstyles\\texturedblue.css"), lpNewFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\TexturedBlue.css.[neftet@tutanota.com].boom" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms3\\formsstyles\\texturedblue.css.[neftet@tutanota.com].boom")) returned 1 [0123.232] MoveFileW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\VelvetRose.css" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms3\\formsstyles\\velvetrose.css"), lpNewFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\VelvetRose.css.[neftet@tutanota.com].boom" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms3\\formsstyles\\velvetrose.css.[neftet@tutanota.com].boom")) returned 1 [0123.239] MoveFileW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\AddToViewArrow.jpg" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms4\\addtoviewarrow.jpg"), lpNewFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\AddToViewArrow.jpg.[neftet@tutanota.com].boom" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms4\\addtoviewarrow.jpg.[neftet@tutanota.com].boom")) returned 1 [0123.242] MoveFileW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\AddToViewArrowMask.bmp" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms4\\addtoviewarrowmask.bmp"), lpNewFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\AddToViewArrowMask.bmp.[neftet@tutanota.com].boom" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms4\\addtoviewarrowmask.bmp.[neftet@tutanota.com].boom")) returned 1 [0123.246] MoveFileW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsBlankPage.html" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms4\\formsblankpage.html"), lpNewFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsBlankPage.html.[neftet@tutanota.com].boom" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms4\\formsblankpage.html.[neftet@tutanota.com].boom")) returned 1 [0123.249] MoveFileW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsBrowserUpgrade.html" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms4\\formsbrowserupgrade.html"), lpNewFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsBrowserUpgrade.html.[neftet@tutanota.com].boom" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms4\\formsbrowserupgrade.html.[neftet@tutanota.com].boom")) returned 1 [0123.252] MoveFileW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsColorChart.html" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms4\\formscolorchart.html"), lpNewFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsColorChart.html.[neftet@tutanota.com].boom" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms4\\formscolorchart.html.[neftet@tutanota.com].boom")) returned 1 [0123.256] MoveFileW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsFormTemplate.html" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms4\\formsformtemplate.html"), lpNewFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsFormTemplate.html.[neftet@tutanota.com].boom" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms4\\formsformtemplate.html.[neftet@tutanota.com].boom")) returned 1 [0123.260] MoveFileW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsHomePage.html" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms4\\formshomepage.html"), lpNewFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsHomePage.html.[neftet@tutanota.com].boom" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms4\\formshomepage.html.[neftet@tutanota.com].boom")) returned 1 [0123.264] MoveFileW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsHomePageStyle.css" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms4\\formshomepagestyle.css"), lpNewFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsHomePageStyle.css.[neftet@tutanota.com].boom" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms4\\formshomepagestyle.css.[neftet@tutanota.com].boom")) returned 1 [0123.268] MoveFileW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsImageTemplate.html" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms4\\formsimagetemplate.html"), lpNewFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsImageTemplate.html.[neftet@tutanota.com].boom" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms4\\formsimagetemplate.html.[neftet@tutanota.com].boom")) returned 1 [0123.280] MoveFileW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsMacroTemplate.html" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms4\\formsmacrotemplate.html"), lpNewFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsMacroTemplate.html.[neftet@tutanota.com].boom" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms4\\formsmacrotemplate.html.[neftet@tutanota.com].boom")) returned 1 [0123.284] MoveFileW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsPreviewTemplate.html" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms4\\formspreviewtemplate.html"), lpNewFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsPreviewTemplate.html.[neftet@tutanota.com].boom" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms4\\formspreviewtemplate.html.[neftet@tutanota.com].boom")) returned 1 [0123.288] MoveFileW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsPrintTemplate.html" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms4\\formsprinttemplate.html"), lpNewFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsPrintTemplate.html.[neftet@tutanota.com].boom" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms4\\formsprinttemplate.html.[neftet@tutanota.com].boom")) returned 1 [0123.292] MoveFileW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsVersion1Warning.htm" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms4\\formsversion1warning.htm"), lpNewFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsVersion1Warning.htm.[neftet@tutanota.com].boom" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms4\\formsversion1warning.htm.[neftet@tutanota.com].boom")) returned 1 [0123.296] MoveFileW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsViewAttachmentIcons.jpg" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms4\\formsviewattachmenticons.jpg"), lpNewFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsViewAttachmentIcons.jpg.[neftet@tutanota.com].boom" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms4\\formsviewattachmenticons.jpg.[neftet@tutanota.com].boom")) returned 1 [0123.299] MoveFileW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsViewAttachmentIconsMask.bmp" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms4\\formsviewattachmenticonsmask.bmp"), lpNewFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsViewAttachmentIconsMask.bmp.[neftet@tutanota.com].boom" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms4\\formsviewattachmenticonsmask.bmp.[neftet@tutanota.com].boom")) returned 1 [0123.302] MoveFileW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsViewFrame.html" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms4\\formsviewframe.html"), lpNewFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsViewFrame.html.[neftet@tutanota.com].boom" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms4\\formsviewframe.html.[neftet@tutanota.com].boom")) returned 1 [0123.305] MoveFileW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsViewTemplate.html" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms4\\formsviewtemplate.html"), lpNewFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsViewTemplate.html.[neftet@tutanota.com].boom" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms4\\formsviewtemplate.html.[neftet@tutanota.com].boom")) returned 1 [0123.308] MoveFileW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormToolImages.jpg" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms4\\formtoolimages.jpg"), lpNewFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormToolImages.jpg.[neftet@tutanota.com].boom" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms4\\formtoolimages.jpg.[neftet@tutanota.com].boom")) returned 1 [0123.311] MoveFileW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\ViewHeaderPreview.jpg" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms4\\viewheaderpreview.jpg"), lpNewFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\ViewHeaderPreview.jpg.[neftet@tutanota.com].boom" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms4\\viewheaderpreview.jpg.[neftet@tutanota.com].boom")) returned 1 [0123.314] MoveFileW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\Adobe.css" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms4\\formsstyles\\adobe.css"), lpNewFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\Adobe.css.[neftet@tutanota.com].boom" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms4\\formsstyles\\adobe.css.[neftet@tutanota.com].boom")) returned 1 [0123.317] MoveFileW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\Americana.css" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms4\\formsstyles\\americana.css"), lpNewFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\Americana.css.[neftet@tutanota.com].boom" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms4\\formsstyles\\americana.css.[neftet@tutanota.com].boom")) returned 1 [0123.321] MoveFileW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\BabyBlue.css" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms4\\formsstyles\\babyblue.css"), lpNewFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\BabyBlue.css.[neftet@tutanota.com].boom" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms4\\formsstyles\\babyblue.css.[neftet@tutanota.com].boom")) returned 1 [0123.329] MoveFileW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\Biscay.css" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms4\\formsstyles\\biscay.css"), lpNewFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\Biscay.css.[neftet@tutanota.com].boom" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms4\\formsstyles\\biscay.css.[neftet@tutanota.com].boom")) returned 1 [0123.332] MoveFileW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\BrightOrange.css" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms4\\formsstyles\\brightorange.css"), lpNewFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\BrightOrange.css.[neftet@tutanota.com].boom" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms4\\formsstyles\\brightorange.css.[neftet@tutanota.com].boom")) returned 1 [0123.335] MoveFileW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\BrightYellow.css" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms4\\formsstyles\\brightyellow.css"), lpNewFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\BrightYellow.css.[neftet@tutanota.com].boom" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms4\\formsstyles\\brightyellow.css.[neftet@tutanota.com].boom")) returned 1 [0123.338] MoveFileW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\Casual.css" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms4\\formsstyles\\casual.css"), lpNewFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\Casual.css.[neftet@tutanota.com].boom" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms4\\formsstyles\\casual.css.[neftet@tutanota.com].boom")) returned 1 [0123.341] MoveFileW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\Country.css" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms4\\formsstyles\\country.css"), lpNewFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\Country.css.[neftet@tutanota.com].boom" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms4\\formsstyles\\country.css.[neftet@tutanota.com].boom")) returned 1 [0123.349] MoveFileW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\Desert.css" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms4\\formsstyles\\desert.css"), lpNewFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\Desert.css.[neftet@tutanota.com].boom" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms4\\formsstyles\\desert.css.[neftet@tutanota.com].boom")) returned 1 [0123.352] MoveFileW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\Earthy.css" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms4\\formsstyles\\earthy.css"), lpNewFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\Earthy.css.[neftet@tutanota.com].boom" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms4\\formsstyles\\earthy.css.[neftet@tutanota.com].boom")) returned 1 [0123.355] MoveFileW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\GrayCheck.css" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms4\\formsstyles\\graycheck.css"), lpNewFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\GrayCheck.css.[neftet@tutanota.com].boom" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms4\\formsstyles\\graycheck.css.[neftet@tutanota.com].boom")) returned 1 [0123.358] MoveFileW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\GreenTea.css" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms4\\formsstyles\\greentea.css"), lpNewFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\GreenTea.css.[neftet@tutanota.com].boom" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms4\\formsstyles\\greentea.css.[neftet@tutanota.com].boom")) returned 1 [0123.361] MoveFileW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\LightSpirit.css" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms4\\formsstyles\\lightspirit.css"), lpNewFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\LightSpirit.css.[neftet@tutanota.com].boom" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms4\\formsstyles\\lightspirit.css.[neftet@tutanota.com].boom")) returned 1 [0123.364] MoveFileW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\Lime.css" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms4\\formsstyles\\lime.css"), lpNewFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\Lime.css.[neftet@tutanota.com].boom" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms4\\formsstyles\\lime.css.[neftet@tutanota.com].boom")) returned 1 [0123.369] MoveFileW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\Maroon.css" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms4\\formsstyles\\maroon.css"), lpNewFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\Maroon.css.[neftet@tutanota.com].boom" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms4\\formsstyles\\maroon.css.[neftet@tutanota.com].boom")) returned 1 [0123.373] MoveFileW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\Oasis.css" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms4\\formsstyles\\oasis.css"), lpNewFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\Oasis.css.[neftet@tutanota.com].boom" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms4\\formsstyles\\oasis.css.[neftet@tutanota.com].boom")) returned 1 [0123.376] MoveFileW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\OliveGreen.css" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms4\\formsstyles\\olivegreen.css"), lpNewFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\OliveGreen.css.[neftet@tutanota.com].boom" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms4\\formsstyles\\olivegreen.css.[neftet@tutanota.com].boom")) returned 1 [0123.380] MoveFileW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\Premium.css" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms4\\formsstyles\\premium.css"), lpNewFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\Premium.css.[neftet@tutanota.com].boom" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms4\\formsstyles\\premium.css.[neftet@tutanota.com].boom")) returned 1 [0123.384] MoveFileW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\Slate.css" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms4\\formsstyles\\slate.css"), lpNewFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\Slate.css.[neftet@tutanota.com].boom" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms4\\formsstyles\\slate.css.[neftet@tutanota.com].boom")) returned 1 [0123.387] MoveFileW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\SlateBlue.css" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms4\\formsstyles\\slateblue.css"), lpNewFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\SlateBlue.css.[neftet@tutanota.com].boom" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms4\\formsstyles\\slateblue.css.[neftet@tutanota.com].boom")) returned 1 [0123.390] MoveFileW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\SoftBlue.css" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms4\\formsstyles\\softblue.css"), lpNewFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\SoftBlue.css.[neftet@tutanota.com].boom" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms4\\formsstyles\\softblue.css.[neftet@tutanota.com].boom")) returned 1 [0123.394] MoveFileW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\SpringGreen.css" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms4\\formsstyles\\springgreen.css"), lpNewFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\SpringGreen.css.[neftet@tutanota.com].boom" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms4\\formsstyles\\springgreen.css.[neftet@tutanota.com].boom")) returned 1 [0123.397] MoveFileW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\Sts.css" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms4\\formsstyles\\sts.css"), lpNewFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\Sts.css.[neftet@tutanota.com].boom" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms4\\formsstyles\\sts.css.[neftet@tutanota.com].boom")) returned 1 [0123.401] MoveFileW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\Sts2.css" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms4\\formsstyles\\sts2.css"), lpNewFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\Sts2.css.[neftet@tutanota.com].boom" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms4\\formsstyles\\sts2.css.[neftet@tutanota.com].boom")) returned 1 [0123.404] MoveFileW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\Swirl.css" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms4\\formsstyles\\swirl.css"), lpNewFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\Swirl.css.[neftet@tutanota.com].boom" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms4\\formsstyles\\swirl.css.[neftet@tutanota.com].boom")) returned 1 [0123.408] MoveFileW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\Teal.css" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms4\\formsstyles\\teal.css"), lpNewFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\Teal.css.[neftet@tutanota.com].boom" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms4\\formsstyles\\teal.css.[neftet@tutanota.com].boom")) returned 1 [0123.411] MoveFileW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\TexturedBlue.css" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms4\\formsstyles\\texturedblue.css"), lpNewFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\TexturedBlue.css.[neftet@tutanota.com].boom" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms4\\formsstyles\\texturedblue.css.[neftet@tutanota.com].boom")) returned 1 [0123.415] MoveFileW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\VelvetRose.css" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms4\\formsstyles\\velvetrose.css"), lpNewFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\VelvetRose.css.[neftet@tutanota.com].boom" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms4\\formsstyles\\velvetrose.css.[neftet@tutanota.com].boom")) returned 1 [0123.424] MoveFileW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms5\\FormsBlankPage.html" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms5\\formsblankpage.html"), lpNewFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms5\\FormsBlankPage.html.[neftet@tutanota.com].boom" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms5\\formsblankpage.html.[neftet@tutanota.com].boom")) returned 1 [0123.427] MoveFileW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms5\\FormsBrowserUpgrade.html" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms5\\formsbrowserupgrade.html"), lpNewFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms5\\FormsBrowserUpgrade.html.[neftet@tutanota.com].boom" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms5\\formsbrowserupgrade.html.[neftet@tutanota.com].boom")) returned 1 [0123.430] MoveFileW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms5\\FormsColorChart.html" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms5\\formscolorchart.html"), lpNewFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms5\\FormsColorChart.html.[neftet@tutanota.com].boom" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms5\\formscolorchart.html.[neftet@tutanota.com].boom")) returned 1 [0123.434] MoveFileW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms5\\FormsFormTemplate.html" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms5\\formsformtemplate.html"), lpNewFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms5\\FormsFormTemplate.html.[neftet@tutanota.com].boom" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms5\\formsformtemplate.html.[neftet@tutanota.com].boom")) returned 1 [0123.437] MoveFileW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms5\\FormsFormTemplateRTL.html" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms5\\formsformtemplatertl.html"), lpNewFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms5\\FormsFormTemplateRTL.html.[neftet@tutanota.com].boom" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms5\\formsformtemplatertl.html.[neftet@tutanota.com].boom")) returned 1 [0123.441] MoveFileW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms5\\FormsImageTemplate.html" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms5\\formsimagetemplate.html"), lpNewFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms5\\FormsImageTemplate.html.[neftet@tutanota.com].boom" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms5\\formsimagetemplate.html.[neftet@tutanota.com].boom")) returned 1 [0123.444] MoveFileW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms5\\FormsMacroTemplate.html" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms5\\formsmacrotemplate.html"), lpNewFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms5\\FormsMacroTemplate.html.[neftet@tutanota.com].boom" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms5\\formsmacrotemplate.html.[neftet@tutanota.com].boom")) returned 1 [0123.448] MoveFileW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms5\\FormsPreviewTemplate.html" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms5\\formspreviewtemplate.html"), lpNewFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms5\\FormsPreviewTemplate.html.[neftet@tutanota.com].boom" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms5\\formspreviewtemplate.html.[neftet@tutanota.com].boom")) returned 1 [0123.452] MoveFileW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms5\\FormsPreviewTemplateRTL.html" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms5\\formspreviewtemplatertl.html"), lpNewFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms5\\FormsPreviewTemplateRTL.html.[neftet@tutanota.com].boom" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms5\\formspreviewtemplatertl.html.[neftet@tutanota.com].boom")) returned 1 [0123.456] MoveFileW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms5\\FormsPrintTemplate.html" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms5\\formsprinttemplate.html"), lpNewFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms5\\FormsPrintTemplate.html.[neftet@tutanota.com].boom" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms5\\formsprinttemplate.html.[neftet@tutanota.com].boom")) returned 1 [0123.464] MoveFileW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms5\\FormsPrintTemplateRTL.html" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms5\\formsprinttemplatertl.html"), lpNewFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms5\\FormsPrintTemplateRTL.html.[neftet@tutanota.com].boom" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms5\\formsprinttemplatertl.html.[neftet@tutanota.com].boom")) returned 1 [0123.467] MoveFileW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms5\\FormsViewAttachmentIcons.jpg" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms5\\formsviewattachmenticons.jpg"), lpNewFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms5\\FormsViewAttachmentIcons.jpg.[neftet@tutanota.com].boom" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms5\\formsviewattachmenticons.jpg.[neftet@tutanota.com].boom")) returned 1 [0123.471] MoveFileW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms5\\FormsViewAttachmentIconsMask.bmp" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms5\\formsviewattachmenticonsmask.bmp"), lpNewFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms5\\FormsViewAttachmentIconsMask.bmp.[neftet@tutanota.com].boom" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms5\\formsviewattachmenticonsmask.bmp.[neftet@tutanota.com].boom")) returned 1 [0123.478] MoveFileW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms5\\InfoPathWelcomeImage.jpg" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms5\\infopathwelcomeimage.jpg"), lpNewFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms5\\InfoPathWelcomeImage.jpg.[neftet@tutanota.com].boom" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveforms5\\infopathwelcomeimage.jpg.[neftet@tutanota.com].boom")) returned 1 [0123.482] MoveFileW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveProjectToolset\\BriefcaseIcon.jpg" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveprojecttoolset\\briefcaseicon.jpg"), lpNewFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveProjectToolset\\BriefcaseIcon.jpg.[neftet@tutanota.com].boom" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveprojecttoolset\\briefcaseicon.jpg.[neftet@tutanota.com].boom")) returned 1 [0123.485] MoveFileW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveProjectToolset\\BriefcaseIconMask.bmp" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveprojecttoolset\\briefcaseiconmask.bmp"), lpNewFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveProjectToolset\\BriefcaseIconMask.bmp.[neftet@tutanota.com].boom" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveprojecttoolset\\briefcaseiconmask.bmp.[neftet@tutanota.com].boom")) returned 1 [0123.490] MoveFileW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveProjectToolset\\CircleIcons.jpg" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveprojecttoolset\\circleicons.jpg"), lpNewFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveProjectToolset\\CircleIcons.jpg.[neftet@tutanota.com].boom" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveprojecttoolset\\circleicons.jpg.[neftet@tutanota.com].boom")) returned 1 [0123.493] MoveFileW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveProjectToolset\\CircleIconsMask.bmp" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveprojecttoolset\\circleiconsmask.bmp"), lpNewFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveProjectToolset\\CircleIconsMask.bmp.[neftet@tutanota.com].boom" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveprojecttoolset\\circleiconsmask.bmp.[neftet@tutanota.com].boom")) returned 1 [0123.497] MoveFileW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveProjectToolset\\MeetingIcon.jpg" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveprojecttoolset\\meetingicon.jpg"), lpNewFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveProjectToolset\\MeetingIcon.jpg.[neftet@tutanota.com].boom" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveprojecttoolset\\meetingicon.jpg.[neftet@tutanota.com].boom")) returned 1 [0123.500] MoveFileW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveProjectToolset\\MeetingIconMask.bmp" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveprojecttoolset\\meetingiconmask.bmp"), lpNewFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveProjectToolset\\MeetingIconMask.bmp.[neftet@tutanota.com].boom" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveprojecttoolset\\meetingiconmask.bmp.[neftet@tutanota.com].boom")) returned 1 [0123.505] MoveFileW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveProjectToolset\\ProjectStatusIcons.jpg" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveprojecttoolset\\projectstatusicons.jpg"), lpNewFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveProjectToolset\\ProjectStatusIcons.jpg.[neftet@tutanota.com].boom" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveprojecttoolset\\projectstatusicons.jpg.[neftet@tutanota.com].boom")) returned 1 [0123.508] MoveFileW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveProjectToolset\\ProjectStatusIconsMask.bmp" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveprojecttoolset\\projectstatusiconsmask.bmp"), lpNewFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveProjectToolset\\ProjectStatusIconsMask.bmp.[neftet@tutanota.com].boom" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveprojecttoolset\\projectstatusiconsmask.bmp.[neftet@tutanota.com].boom")) returned 1 [0123.512] MoveFileW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveProjectToolset\\ProjectTaskIcon.jpg" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveprojecttoolset\\projecttaskicon.jpg"), lpNewFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveProjectToolset\\ProjectTaskIcon.jpg.[neftet@tutanota.com].boom" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveprojecttoolset\\projecttaskicon.jpg.[neftet@tutanota.com].boom")) returned 1 [0123.515] MoveFileW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveProjectToolset\\ProjectTaskIconMask.bmp" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveprojecttoolset\\projecttaskiconmask.bmp"), lpNewFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveProjectToolset\\ProjectTaskIconMask.bmp.[neftet@tutanota.com].boom" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveprojecttoolset\\projecttaskiconmask.bmp.[neftet@tutanota.com].boom")) returned 1 [0123.519] MoveFileW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveProjectToolset\\ProjectToolsetIconImages.jpg" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveprojecttoolset\\projecttoolseticonimages.jpg"), lpNewFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveProjectToolset\\ProjectToolsetIconImages.jpg.[neftet@tutanota.com].boom" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveprojecttoolset\\projecttoolseticonimages.jpg.[neftet@tutanota.com].boom")) returned 1 [0123.523] MoveFileW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveProjectToolset\\ProjectToolsetIconImagesMask.bmp" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveprojecttoolset\\projecttoolseticonimagesmask.bmp"), lpNewFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveProjectToolset\\ProjectToolsetIconImagesMask.bmp.[neftet@tutanota.com].boom" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveprojecttoolset\\projecttoolseticonimagesmask.bmp.[neftet@tutanota.com].boom")) returned 1 [0123.527] MoveFileW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveProjectToolset\\SplashImage.jpg" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveprojecttoolset\\splashimage.jpg"), lpNewFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveProjectToolset\\SplashImage.jpg.[neftet@tutanota.com].boom" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveprojecttoolset\\splashimage.jpg.[neftet@tutanota.com].boom")) returned 1 [0123.534] MoveFileW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveProjectToolset\\SplashImageMask.bmp" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveprojecttoolset\\splashimagemask.bmp"), lpNewFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveProjectToolset\\SplashImageMask.bmp.[neftet@tutanota.com].boom" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveprojecttoolset\\splashimagemask.bmp.[neftet@tutanota.com].boom")) returned 1 [0123.539] MoveFileW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveProjectToolset\\WhiteboxMask.bmp" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveprojecttoolset\\whiteboxmask.bmp"), lpNewFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveProjectToolset\\WhiteboxMask.bmp.[neftet@tutanota.com].boom" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveprojecttoolset\\whiteboxmask.bmp.[neftet@tutanota.com].boom")) returned 1 [0123.543] MoveFileW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveProjectToolset\\ZoomIcons.jpg" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveprojecttoolset\\zoomicons.jpg"), lpNewFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveProjectToolset\\ZoomIcons.jpg.[neftet@tutanota.com].boom" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveprojecttoolset\\zoomicons.jpg.[neftet@tutanota.com].boom")) returned 1 [0123.546] MoveFileW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveProjectToolset\\ZoomIconsMask.bmp" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveprojecttoolset\\zoomiconsmask.bmp"), lpNewFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveProjectToolset\\ZoomIconsMask.bmp.[neftet@tutanota.com].boom" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\grooveprojecttoolset\\zoomiconsmask.bmp.[neftet@tutanota.com].boom")) returned 1 [0123.553] MoveFileW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\Welcome Tool\\IconImages.jpg" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\welcome tool\\iconimages.jpg"), lpNewFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\Welcome Tool\\IconImages.jpg.[neftet@tutanota.com].boom" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\welcome tool\\iconimages.jpg.[neftet@tutanota.com].boom")) returned 1 [0123.556] MoveFileW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\Welcome Tool\\IconImagesMask.bmp" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\welcome tool\\iconimagesmask.bmp"), lpNewFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\Welcome Tool\\IconImagesMask.bmp.[neftet@tutanota.com].boom" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\tooldata\\groove.net\\welcome tool\\iconimagesmask.bmp.[neftet@tutanota.com].boom")) returned 1 [0123.565] MoveFileW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\XML Files\\Messenger.xml" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\xml files\\messenger.xml"), lpNewFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\XML Files\\Messenger.xml.[neftet@tutanota.com].boom" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\xml files\\messenger.xml.[neftet@tutanota.com].boom")) returned 1 [0123.576] MoveFileW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\XML Files\\StarterApplicationDescriptors.xml" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\xml files\\starterapplicationdescriptors.xml"), lpNewFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\XML Files\\StarterApplicationDescriptors.xml.[neftet@tutanota.com].boom" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\xml files\\starterapplicationdescriptors.xml.[neftet@tutanota.com].boom")) returned 1 [0123.588] MoveFileW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\XML Files\\StarterNotificationDescriptors.xml" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\xml files\\starternotificationdescriptors.xml"), lpNewFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\XML Files\\StarterNotificationDescriptors.xml.[neftet@tutanota.com].boom" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\xml files\\starternotificationdescriptors.xml.[neftet@tutanota.com].boom")) returned 1 [0123.599] MoveFileW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\XML Files\\StarterToolTemplates.xml" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\xml files\\startertooltemplates.xml"), lpNewFileName="C:\\Program Files\\Microsoft Office\\Office14\\Groove\\XML Files\\StarterToolTemplates.xml.[neftet@tutanota.com].boom" (normalized: "c:\\program files\\microsoft office\\office14\\groove\\xml files\\startertooltemplates.xml.[neftet@tutanota.com].boom")) returned 1 [0123.620] MoveFileW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\Office14\\InfoPathOM\\Microsoft.Office.InfoPath.xml" (normalized: "c:\\program files\\microsoft office\\office14\\infopathom\\microsoft.office.infopath.xml"), lpNewFileName="C:\\Program Files\\Microsoft Office\\Office14\\InfoPathOM\\Microsoft.Office.InfoPath.xml.[neftet@tutanota.com].boom" (normalized: "c:\\program files\\microsoft office\\office14\\infopathom\\microsoft.office.infopath.xml.[neftet@tutanota.com].boom")) returned 1 [0123.644] MoveFileW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\Office14\\InfoPathOM\\InfoPathOMFormServices\\Microsoft.Office.InfoPath.xml" (normalized: "c:\\program files\\microsoft office\\office14\\infopathom\\infopathomformservices\\microsoft.office.infopath.xml"), lpNewFileName="C:\\Program Files\\Microsoft Office\\Office14\\InfoPathOM\\InfoPathOMFormServices\\Microsoft.Office.InfoPath.xml.[neftet@tutanota.com].boom" (normalized: "c:\\program files\\microsoft office\\office14\\infopathom\\infopathomformservices\\microsoft.office.infopath.xml.[neftet@tutanota.com].boom")) returned 1 [0123.665] MoveFileW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\Office14\\InfoPathOM\\InfoPathOMFormServices\\InfoPathOMFormServicesV12\\Microsoft.Office.InfoPath.xml" (normalized: "c:\\program files\\microsoft office\\office14\\infopathom\\infopathomformservices\\infopathomformservicesv12\\microsoft.office.infopath.xml"), lpNewFileName="C:\\Program Files\\Microsoft Office\\Office14\\InfoPathOM\\InfoPathOMFormServices\\InfoPathOMFormServicesV12\\Microsoft.Office.InfoPath.xml.[neftet@tutanota.com].boom" (normalized: "c:\\program files\\microsoft office\\office14\\infopathom\\infopathomformservices\\infopathomformservicesv12\\microsoft.office.infopath.xml.[neftet@tutanota.com].boom")) returned 1 [0123.739] MoveFileW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\Office14\\InfoPathOM\\InfoPathOMV12\\Microsoft.Office.InfoPath.xml" (normalized: "c:\\program files\\microsoft office\\office14\\infopathom\\infopathomv12\\microsoft.office.infopath.xml"), lpNewFileName="C:\\Program Files\\Microsoft Office\\Office14\\InfoPathOM\\InfoPathOMV12\\Microsoft.Office.InfoPath.xml.[neftet@tutanota.com].boom" (normalized: "c:\\program files\\microsoft office\\office14\\infopathom\\infopathomv12\\microsoft.office.infopath.xml.[neftet@tutanota.com].boom")) returned 1 [0123.749] MoveFileW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\Office14\\OneNote\\SendToOneNote-PipelineConfig.xml" (normalized: "c:\\program files\\microsoft office\\office14\\onenote\\sendtoonenote-pipelineconfig.xml"), lpNewFileName="C:\\Program Files\\Microsoft Office\\Office14\\OneNote\\SendToOneNote-PipelineConfig.xml.[neftet@tutanota.com].boom" (normalized: "c:\\program files\\microsoft office\\office14\\onenote\\sendtoonenote-pipelineconfig.xml.[neftet@tutanota.com].boom")) returned 1 [0123.797] MoveFileW (lpExistingFileName="C:\\Program Files\\Microsoft Sync Framework\\v1.0\\Documentation\\1033\\License Agreements\\SynchronizationEula.rtf" (normalized: "c:\\program files\\microsoft sync framework\\v1.0\\documentation\\1033\\license agreements\\synchronizationeula.rtf"), lpNewFileName="C:\\Program Files\\Microsoft Sync Framework\\v1.0\\Documentation\\1033\\License Agreements\\SynchronizationEula.rtf.[neftet@tutanota.com].boom" (normalized: "c:\\program files\\microsoft sync framework\\v1.0\\documentation\\1033\\license agreements\\synchronizationeula.rtf.[neftet@tutanota.com].boom")) returned 1 [0123.807] MoveFileW (lpExistingFileName="C:\\Program Files\\Reference Assemblies\\Microsoft\\Framework\\v3.0\\WinFXList.xml" (normalized: "c:\\program files\\reference assemblies\\microsoft\\framework\\v3.0\\winfxlist.xml"), lpNewFileName="C:\\Program Files\\Reference Assemblies\\Microsoft\\Framework\\v3.0\\WinFXList.xml.[neftet@tutanota.com].boom" (normalized: "c:\\program files\\reference assemblies\\microsoft\\framework\\v3.0\\winfxlist.xml.[neftet@tutanota.com].boom")) returned 1 [0123.812] MoveFileW (lpExistingFileName="C:\\Program Files\\Reference Assemblies\\Microsoft\\Framework\\v3.0\\RedistList\\FrameworkList.xml" (normalized: "c:\\program files\\reference assemblies\\microsoft\\framework\\v3.0\\redistlist\\frameworklist.xml"), lpNewFileName="C:\\Program Files\\Reference Assemblies\\Microsoft\\Framework\\v3.0\\RedistList\\FrameworkList.xml.[neftet@tutanota.com].boom" (normalized: "c:\\program files\\reference assemblies\\microsoft\\framework\\v3.0\\redistlist\\frameworklist.xml.[neftet@tutanota.com].boom")) returned 1 [0123.860] MoveFileW (lpExistingFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Benioku.htm" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\benioku.htm"), lpNewFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Benioku.htm.[neftet@tutanota.com].boom" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\benioku.htm.[neftet@tutanota.com].boom")) returned 1 [0123.866] MoveFileW (lpExistingFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Berime.htm" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\berime.htm"), lpNewFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Berime.htm.[neftet@tutanota.com].boom" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\berime.htm.[neftet@tutanota.com].boom")) returned 1 [0123.870] MoveFileW (lpExistingFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\IrakHau.htm" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\irakhau.htm"), lpNewFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\IrakHau.htm.[neftet@tutanota.com].boom" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\irakhau.htm.[neftet@tutanota.com].boom")) returned 1 [0123.875] MoveFileW (lpExistingFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Leame.htm" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\leame.htm"), lpNewFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Leame.htm.[neftet@tutanota.com].boom" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\leame.htm.[neftet@tutanota.com].boom")) returned 1 [0123.880] MoveFileW (lpExistingFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\LeesMij.htm" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\leesmij.htm"), lpNewFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\LeesMij.htm.[neftet@tutanota.com].boom" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\leesmij.htm.[neftet@tutanota.com].boom")) returned 1 [0123.885] MoveFileW (lpExistingFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Leggimi.htm" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\leggimi.htm"), lpNewFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Leggimi.htm.[neftet@tutanota.com].boom" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\leggimi.htm.[neftet@tutanota.com].boom")) returned 1 [0123.889] MoveFileW (lpExistingFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\LeiaMe.htm" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\leiame.htm"), lpNewFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\LeiaMe.htm.[neftet@tutanota.com].boom" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\leiame.htm.[neftet@tutanota.com].boom")) returned 1 [0123.894] MoveFileW (lpExistingFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Liesmich.htm" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\liesmich.htm"), lpNewFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Liesmich.htm.[neftet@tutanota.com].boom" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\liesmich.htm.[neftet@tutanota.com].boom")) returned 1 [0123.900] MoveFileW (lpExistingFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Lisezmoi.htm" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\lisezmoi.htm"), lpNewFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Lisezmoi.htm.[neftet@tutanota.com].boom" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\lisezmoi.htm.[neftet@tutanota.com].boom")) returned 1 [0123.904] MoveFileW (lpExistingFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Llegiu-me.htm" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\llegiu-me.htm"), lpNewFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Llegiu-me.htm.[neftet@tutanota.com].boom" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\llegiu-me.htm.[neftet@tutanota.com].boom")) returned 1 [0123.909] MoveFileW (lpExistingFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\LueMinut.htm" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\lueminut.htm"), lpNewFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\LueMinut.htm.[neftet@tutanota.com].boom" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\lueminut.htm.[neftet@tutanota.com].boom")) returned 1 [0123.914] MoveFileW (lpExistingFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\ReadMe.htm" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\readme.htm"), lpNewFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\ReadMe.htm.[neftet@tutanota.com].boom" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\readme.htm.[neftet@tutanota.com].boom")) returned 1 [0123.918] MoveFileW (lpExistingFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\ReadMeCS.htm" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\readmecs.htm"), lpNewFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\ReadMeCS.htm.[neftet@tutanota.com].boom" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\readmecs.htm.[neftet@tutanota.com].boom")) returned 1 [0123.922] MoveFileW (lpExistingFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\ReadMeCT.htm" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\readmect.htm"), lpNewFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\ReadMeCT.htm.[neftet@tutanota.com].boom" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\readmect.htm.[neftet@tutanota.com].boom")) returned 1 [0123.928] MoveFileW (lpExistingFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\ReadMeCZE.htm" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\readmecze.htm"), lpNewFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\ReadMeCZE.htm.[neftet@tutanota.com].boom" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\readmecze.htm.[neftet@tutanota.com].boom")) returned 1 [0123.937] MoveFileW (lpExistingFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\ReadMeHRV.htm" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\readmehrv.htm"), lpNewFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\ReadMeHRV.htm.[neftet@tutanota.com].boom" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\readmehrv.htm.[neftet@tutanota.com].boom")) returned 1 [0123.941] MoveFileW (lpExistingFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\ReadMeHUN.htm" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\readmehun.htm"), lpNewFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\ReadMeHUN.htm.[neftet@tutanota.com].boom" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\readmehun.htm.[neftet@tutanota.com].boom")) returned 1 [0123.946] MoveFileW (lpExistingFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\ReadMeJ.htm" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\readmej.htm"), lpNewFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\ReadMeJ.htm.[neftet@tutanota.com].boom" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\readmej.htm.[neftet@tutanota.com].boom")) returned 1 [0123.951] MoveFileW (lpExistingFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\ReadMeK.htm" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\readmek.htm"), lpNewFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\ReadMeK.htm.[neftet@tutanota.com].boom" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\readmek.htm.[neftet@tutanota.com].boom")) returned 1 [0123.963] MoveFileW (lpExistingFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\ReadMePOL.htm" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\readmepol.htm"), lpNewFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\ReadMePOL.htm.[neftet@tutanota.com].boom" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\readmepol.htm.[neftet@tutanota.com].boom")) returned 1 [0123.968] MoveFileW (lpExistingFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\ReadMeRUM.htm" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\readmerum.htm"), lpNewFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\ReadMeRUM.htm.[neftet@tutanota.com].boom" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\readmerum.htm.[neftet@tutanota.com].boom")) returned 1 [0123.972] MoveFileW (lpExistingFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\ReadMeRUS.htm" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\readmerus.htm"), lpNewFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\ReadMeRUS.htm.[neftet@tutanota.com].boom" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\readmerus.htm.[neftet@tutanota.com].boom")) returned 1 [0123.977] MoveFileW (lpExistingFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\ReadMeSKY.htm" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\readmesky.htm"), lpNewFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\ReadMeSKY.htm.[neftet@tutanota.com].boom" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\readmesky.htm.[neftet@tutanota.com].boom")) returned 1 [0123.982] MoveFileW (lpExistingFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\ReadMeUKR.htm" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\readmeukr.htm"), lpNewFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\ReadMeUKR.htm.[neftet@tutanota.com].boom" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\readmeukr.htm.[neftet@tutanota.com].boom")) returned 1 [0123.987] MoveFileW (lpExistingFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Vigtigt.htm" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\vigtigt.htm"), lpNewFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Vigtigt.htm.[neftet@tutanota.com].boom" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\vigtigt.htm.[neftet@tutanota.com].boom")) returned 1 [0123.991] MoveFileW (lpExistingFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Viktig.htm" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\viktig.htm"), lpNewFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Viktig.htm.[neftet@tutanota.com].boom" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\viktig.htm.[neftet@tutanota.com].boom")) returned 1 [0123.997] MoveFileW (lpExistingFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Viktigt.htm" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\viktigt.htm"), lpNewFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Viktigt.htm.[neftet@tutanota.com].boom" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\viktigt.htm.[neftet@tutanota.com].boom")) returned 1 [0124.021] MoveFileW (lpExistingFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\PDFSigQFormalRep.pdf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\pdfsigqformalrep.pdf"), lpNewFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\PDFSigQFormalRep.pdf.[neftet@tutanota.com].boom" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\pdfsigqformalrep.pdf.[neftet@tutanota.com].boom")) returned 1 [0124.032] MoveFileW (lpExistingFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\CAT\\AdobeID.pdf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\idtemplates\\cat\\adobeid.pdf"), lpNewFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\CAT\\AdobeID.pdf.[neftet@tutanota.com].boom" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\idtemplates\\cat\\adobeid.pdf.[neftet@tutanota.com].boom")) returned 1 [0124.038] MoveFileW (lpExistingFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\CAT\\DefaultID.pdf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\idtemplates\\cat\\defaultid.pdf"), lpNewFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\CAT\\DefaultID.pdf.[neftet@tutanota.com].boom" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\idtemplates\\cat\\defaultid.pdf.[neftet@tutanota.com].boom")) returned 1 [0124.047] MoveFileW (lpExistingFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\CHS\\AdobeID.pdf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\idtemplates\\chs\\adobeid.pdf"), lpNewFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\CHS\\AdobeID.pdf.[neftet@tutanota.com].boom" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\idtemplates\\chs\\adobeid.pdf.[neftet@tutanota.com].boom")) returned 1 [0124.055] MoveFileW (lpExistingFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\CHS\\DefaultID.pdf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\idtemplates\\chs\\defaultid.pdf"), lpNewFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\CHS\\DefaultID.pdf.[neftet@tutanota.com].boom" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\idtemplates\\chs\\defaultid.pdf.[neftet@tutanota.com].boom")) returned 1 [0124.059] MoveFileW (lpExistingFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\CHT\\AdobeID.pdf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\idtemplates\\cht\\adobeid.pdf"), lpNewFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\CHT\\AdobeID.pdf.[neftet@tutanota.com].boom" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\idtemplates\\cht\\adobeid.pdf.[neftet@tutanota.com].boom")) returned 1 [0124.063] MoveFileW (lpExistingFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\CHT\\DefaultID.pdf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\idtemplates\\cht\\defaultid.pdf"), lpNewFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\CHT\\DefaultID.pdf.[neftet@tutanota.com].boom" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\idtemplates\\cht\\defaultid.pdf.[neftet@tutanota.com].boom")) returned 1 [0124.072] MoveFileW (lpExistingFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\CZE\\AdobeID.pdf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\idtemplates\\cze\\adobeid.pdf"), lpNewFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\CZE\\AdobeID.pdf.[neftet@tutanota.com].boom" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\idtemplates\\cze\\adobeid.pdf.[neftet@tutanota.com].boom")) returned 1 [0124.081] MoveFileW (lpExistingFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\CZE\\DefaultID.pdf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\idtemplates\\cze\\defaultid.pdf"), lpNewFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\CZE\\DefaultID.pdf.[neftet@tutanota.com].boom" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\idtemplates\\cze\\defaultid.pdf.[neftet@tutanota.com].boom")) returned 1 [0124.087] MoveFileW (lpExistingFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\DAN\\AdobeID.pdf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\idtemplates\\dan\\adobeid.pdf"), lpNewFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\DAN\\AdobeID.pdf.[neftet@tutanota.com].boom" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\idtemplates\\dan\\adobeid.pdf.[neftet@tutanota.com].boom")) returned 1 [0124.092] MoveFileW (lpExistingFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\DAN\\DefaultID.pdf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\idtemplates\\dan\\defaultid.pdf"), lpNewFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\DAN\\DefaultID.pdf.[neftet@tutanota.com].boom" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\idtemplates\\dan\\defaultid.pdf.[neftet@tutanota.com].boom")) returned 1 [0124.098] MoveFileW (lpExistingFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\DEU\\AdobeID.pdf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\idtemplates\\deu\\adobeid.pdf"), lpNewFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\DEU\\AdobeID.pdf.[neftet@tutanota.com].boom" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\idtemplates\\deu\\adobeid.pdf.[neftet@tutanota.com].boom")) returned 1 [0124.104] MoveFileW (lpExistingFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\DEU\\DefaultID.pdf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\idtemplates\\deu\\defaultid.pdf"), lpNewFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\DEU\\DefaultID.pdf.[neftet@tutanota.com].boom" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\idtemplates\\deu\\defaultid.pdf.[neftet@tutanota.com].boom")) returned 1 [0124.111] MoveFileW (lpExistingFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\ENU\\AdobeID.pdf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\idtemplates\\enu\\adobeid.pdf"), lpNewFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\ENU\\AdobeID.pdf.[neftet@tutanota.com].boom" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\idtemplates\\enu\\adobeid.pdf.[neftet@tutanota.com].boom")) returned 1 [0124.117] MoveFileW (lpExistingFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\ENU\\DefaultID.pdf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\idtemplates\\enu\\defaultid.pdf"), lpNewFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\ENU\\DefaultID.pdf.[neftet@tutanota.com].boom" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\idtemplates\\enu\\defaultid.pdf.[neftet@tutanota.com].boom")) returned 1 [0124.123] MoveFileW (lpExistingFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\ESP\\AdobeID.pdf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\idtemplates\\esp\\adobeid.pdf"), lpNewFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\ESP\\AdobeID.pdf.[neftet@tutanota.com].boom" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\idtemplates\\esp\\adobeid.pdf.[neftet@tutanota.com].boom")) returned 1 [0124.128] MoveFileW (lpExistingFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\ESP\\DefaultID.pdf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\idtemplates\\esp\\defaultid.pdf"), lpNewFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\ESP\\DefaultID.pdf.[neftet@tutanota.com].boom" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\idtemplates\\esp\\defaultid.pdf.[neftet@tutanota.com].boom")) returned 1 [0124.134] MoveFileW (lpExistingFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\FRA\\AdobeID.pdf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\idtemplates\\fra\\adobeid.pdf"), lpNewFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\FRA\\AdobeID.pdf.[neftet@tutanota.com].boom" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\idtemplates\\fra\\adobeid.pdf.[neftet@tutanota.com].boom")) returned 1 [0124.139] MoveFileW (lpExistingFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\FRA\\DefaultID.pdf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\idtemplates\\fra\\defaultid.pdf"), lpNewFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\FRA\\DefaultID.pdf.[neftet@tutanota.com].boom" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\idtemplates\\fra\\defaultid.pdf.[neftet@tutanota.com].boom")) returned 1 [0124.148] MoveFileW (lpExistingFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\HRV\\AdobeID.pdf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\idtemplates\\hrv\\adobeid.pdf"), lpNewFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\HRV\\AdobeID.pdf.[neftet@tutanota.com].boom" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\idtemplates\\hrv\\adobeid.pdf.[neftet@tutanota.com].boom")) returned 1 [0124.152] MoveFileW (lpExistingFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\HRV\\DefaultID.pdf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\idtemplates\\hrv\\defaultid.pdf"), lpNewFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\HRV\\DefaultID.pdf.[neftet@tutanota.com].boom" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\idtemplates\\hrv\\defaultid.pdf.[neftet@tutanota.com].boom")) returned 1 [0124.159] MoveFileW (lpExistingFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\HUN\\AdobeID.pdf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\idtemplates\\hun\\adobeid.pdf"), lpNewFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\HUN\\AdobeID.pdf.[neftet@tutanota.com].boom" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\idtemplates\\hun\\adobeid.pdf.[neftet@tutanota.com].boom")) returned 1 [0124.165] MoveFileW (lpExistingFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\HUN\\DefaultID.pdf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\idtemplates\\hun\\defaultid.pdf"), lpNewFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\HUN\\DefaultID.pdf.[neftet@tutanota.com].boom" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\idtemplates\\hun\\defaultid.pdf.[neftet@tutanota.com].boom")) returned 1 [0124.170] MoveFileW (lpExistingFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\ITA\\AdobeID.pdf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\idtemplates\\ita\\adobeid.pdf"), lpNewFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\ITA\\AdobeID.pdf.[neftet@tutanota.com].boom" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\idtemplates\\ita\\adobeid.pdf.[neftet@tutanota.com].boom")) returned 1 [0124.176] MoveFileW (lpExistingFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\ITA\\DefaultID.pdf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\idtemplates\\ita\\defaultid.pdf"), lpNewFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\ITA\\DefaultID.pdf.[neftet@tutanota.com].boom" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\idtemplates\\ita\\defaultid.pdf.[neftet@tutanota.com].boom")) returned 1 [0124.180] MoveFileW (lpExistingFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\JPN\\AdobeID.pdf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\idtemplates\\jpn\\adobeid.pdf"), lpNewFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\JPN\\AdobeID.pdf.[neftet@tutanota.com].boom" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\idtemplates\\jpn\\adobeid.pdf.[neftet@tutanota.com].boom")) returned 1 [0124.183] MoveFileW (lpExistingFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\JPN\\DefaultID.pdf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\idtemplates\\jpn\\defaultid.pdf"), lpNewFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\JPN\\DefaultID.pdf.[neftet@tutanota.com].boom" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\idtemplates\\jpn\\defaultid.pdf.[neftet@tutanota.com].boom")) returned 1 [0124.187] MoveFileW (lpExistingFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\KOR\\AdobeID.pdf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\idtemplates\\kor\\adobeid.pdf"), lpNewFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\KOR\\AdobeID.pdf.[neftet@tutanota.com].boom" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\idtemplates\\kor\\adobeid.pdf.[neftet@tutanota.com].boom")) returned 1 [0124.192] MoveFileW (lpExistingFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\KOR\\DefaultID.pdf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\idtemplates\\kor\\defaultid.pdf"), lpNewFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\KOR\\DefaultID.pdf.[neftet@tutanota.com].boom" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\idtemplates\\kor\\defaultid.pdf.[neftet@tutanota.com].boom")) returned 1 [0124.198] MoveFileW (lpExistingFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\NLD\\AdobeID.pdf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\idtemplates\\nld\\adobeid.pdf"), lpNewFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\NLD\\AdobeID.pdf.[neftet@tutanota.com].boom" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\idtemplates\\nld\\adobeid.pdf.[neftet@tutanota.com].boom")) returned 1 [0124.203] MoveFileW (lpExistingFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\NLD\\DefaultID.pdf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\idtemplates\\nld\\defaultid.pdf"), lpNewFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\NLD\\DefaultID.pdf.[neftet@tutanota.com].boom" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\idtemplates\\nld\\defaultid.pdf.[neftet@tutanota.com].boom")) returned 1 [0124.209] MoveFileW (lpExistingFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\NOR\\AdobeID.pdf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\idtemplates\\nor\\adobeid.pdf"), lpNewFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\NOR\\AdobeID.pdf.[neftet@tutanota.com].boom" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\idtemplates\\nor\\adobeid.pdf.[neftet@tutanota.com].boom")) returned 1 [0124.214] MoveFileW (lpExistingFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\NOR\\DefaultID.pdf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\idtemplates\\nor\\defaultid.pdf"), lpNewFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\NOR\\DefaultID.pdf.[neftet@tutanota.com].boom" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\idtemplates\\nor\\defaultid.pdf.[neftet@tutanota.com].boom")) returned 1 [0124.224] MoveFileW (lpExistingFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\POL\\AdobeID.pdf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\idtemplates\\pol\\adobeid.pdf"), lpNewFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\POL\\AdobeID.pdf.[neftet@tutanota.com].boom" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\idtemplates\\pol\\adobeid.pdf.[neftet@tutanota.com].boom")) returned 1 [0124.234] MoveFileW (lpExistingFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\POL\\DefaultID.pdf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\idtemplates\\pol\\defaultid.pdf"), lpNewFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\POL\\DefaultID.pdf.[neftet@tutanota.com].boom" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\idtemplates\\pol\\defaultid.pdf.[neftet@tutanota.com].boom")) returned 1 [0124.240] MoveFileW (lpExistingFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\PTB\\AdobeID.pdf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\idtemplates\\ptb\\adobeid.pdf"), lpNewFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\PTB\\AdobeID.pdf.[neftet@tutanota.com].boom" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\idtemplates\\ptb\\adobeid.pdf.[neftet@tutanota.com].boom")) returned 1 [0124.245] MoveFileW (lpExistingFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\PTB\\DefaultID.pdf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\idtemplates\\ptb\\defaultid.pdf"), lpNewFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\PTB\\DefaultID.pdf.[neftet@tutanota.com].boom" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\idtemplates\\ptb\\defaultid.pdf.[neftet@tutanota.com].boom")) returned 1 [0124.250] MoveFileW (lpExistingFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\RUM\\AdobeID.pdf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\idtemplates\\rum\\adobeid.pdf"), lpNewFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\RUM\\AdobeID.pdf.[neftet@tutanota.com].boom" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\idtemplates\\rum\\adobeid.pdf.[neftet@tutanota.com].boom")) returned 1 [0124.253] MoveFileW (lpExistingFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\RUM\\DefaultID.pdf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\idtemplates\\rum\\defaultid.pdf"), lpNewFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\RUM\\DefaultID.pdf.[neftet@tutanota.com].boom" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\idtemplates\\rum\\defaultid.pdf.[neftet@tutanota.com].boom")) returned 1 [0124.261] MoveFileW (lpExistingFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\RUS\\AdobeID.pdf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\idtemplates\\rus\\adobeid.pdf"), lpNewFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\RUS\\AdobeID.pdf.[neftet@tutanota.com].boom" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\idtemplates\\rus\\adobeid.pdf.[neftet@tutanota.com].boom")) returned 1 [0124.269] MoveFileW (lpExistingFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\RUS\\DefaultID.pdf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\idtemplates\\rus\\defaultid.pdf"), lpNewFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\RUS\\DefaultID.pdf.[neftet@tutanota.com].boom" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\idtemplates\\rus\\defaultid.pdf.[neftet@tutanota.com].boom")) returned 1 [0124.283] MoveFileW (lpExistingFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\SKY\\AdobeID.pdf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\idtemplates\\sky\\adobeid.pdf"), lpNewFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\SKY\\AdobeID.pdf.[neftet@tutanota.com].boom" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\idtemplates\\sky\\adobeid.pdf.[neftet@tutanota.com].boom")) returned 1 [0124.290] MoveFileW (lpExistingFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\SKY\\DefaultID.pdf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\idtemplates\\sky\\defaultid.pdf"), lpNewFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\SKY\\DefaultID.pdf.[neftet@tutanota.com].boom" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\idtemplates\\sky\\defaultid.pdf.[neftet@tutanota.com].boom")) returned 1 [0124.294] MoveFileW (lpExistingFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\SLV\\AdobeID.pdf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\idtemplates\\slv\\adobeid.pdf"), lpNewFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\SLV\\AdobeID.pdf.[neftet@tutanota.com].boom" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\idtemplates\\slv\\adobeid.pdf.[neftet@tutanota.com].boom")) returned 1 [0124.298] MoveFileW (lpExistingFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\SLV\\DefaultID.pdf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\idtemplates\\slv\\defaultid.pdf"), lpNewFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\SLV\\DefaultID.pdf.[neftet@tutanota.com].boom" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\idtemplates\\slv\\defaultid.pdf.[neftet@tutanota.com].boom")) returned 1 [0124.304] MoveFileW (lpExistingFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\SUO\\AdobeID.pdf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\idtemplates\\suo\\adobeid.pdf"), lpNewFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\SUO\\AdobeID.pdf.[neftet@tutanota.com].boom" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\idtemplates\\suo\\adobeid.pdf.[neftet@tutanota.com].boom")) returned 1 [0124.309] MoveFileW (lpExistingFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\SUO\\DefaultID.pdf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\idtemplates\\suo\\defaultid.pdf"), lpNewFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\SUO\\DefaultID.pdf.[neftet@tutanota.com].boom" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\idtemplates\\suo\\defaultid.pdf.[neftet@tutanota.com].boom")) returned 1 [0124.317] MoveFileW (lpExistingFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\SVE\\AdobeID.pdf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\idtemplates\\sve\\adobeid.pdf"), lpNewFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\SVE\\AdobeID.pdf.[neftet@tutanota.com].boom" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\idtemplates\\sve\\adobeid.pdf.[neftet@tutanota.com].boom")) returned 1 [0124.323] MoveFileW (lpExistingFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\SVE\\DefaultID.pdf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\idtemplates\\sve\\defaultid.pdf"), lpNewFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\SVE\\DefaultID.pdf.[neftet@tutanota.com].boom" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\idtemplates\\sve\\defaultid.pdf.[neftet@tutanota.com].boom")) returned 1 [0124.341] MoveFileW (lpExistingFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\TUR\\AdobeID.pdf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\idtemplates\\tur\\adobeid.pdf"), lpNewFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\TUR\\AdobeID.pdf.[neftet@tutanota.com].boom" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\idtemplates\\tur\\adobeid.pdf.[neftet@tutanota.com].boom")) returned 1 [0124.359] MoveFileW (lpExistingFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\TUR\\DefaultID.pdf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\idtemplates\\tur\\defaultid.pdf"), lpNewFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\TUR\\DefaultID.pdf.[neftet@tutanota.com].boom" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\idtemplates\\tur\\defaultid.pdf.[neftet@tutanota.com].boom")) returned 1 [0124.376] MoveFileW (lpExistingFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\UKR\\AdobeID.pdf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\idtemplates\\ukr\\adobeid.pdf"), lpNewFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\UKR\\AdobeID.pdf.[neftet@tutanota.com].boom" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\idtemplates\\ukr\\adobeid.pdf.[neftet@tutanota.com].boom")) returned 1 [0124.398] MoveFileW (lpExistingFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\UKR\\DefaultID.pdf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\idtemplates\\ukr\\defaultid.pdf"), lpNewFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\IDTemplates\\UKR\\DefaultID.pdf.[neftet@tutanota.com].boom" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\idtemplates\\ukr\\defaultid.pdf.[neftet@tutanota.com].boom")) returned 1 [0124.404] MoveFileW (lpExistingFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Legal\\CAT\\license.html" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\legal\\cat\\license.html"), lpNewFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Legal\\CAT\\license.html.[neftet@tutanota.com].boom" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\legal\\cat\\license.html.[neftet@tutanota.com].boom")) returned 1 [0124.411] MoveFileW (lpExistingFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Legal\\CHS\\license.html" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\legal\\chs\\license.html"), lpNewFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Legal\\CHS\\license.html.[neftet@tutanota.com].boom" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\legal\\chs\\license.html.[neftet@tutanota.com].boom")) returned 1 [0124.418] MoveFileW (lpExistingFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Legal\\CHT\\license.html" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\legal\\cht\\license.html"), lpNewFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Legal\\CHT\\license.html.[neftet@tutanota.com].boom" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\legal\\cht\\license.html.[neftet@tutanota.com].boom")) returned 1 [0124.424] MoveFileW (lpExistingFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Legal\\CZE\\license.html" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\legal\\cze\\license.html"), lpNewFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Legal\\CZE\\license.html.[neftet@tutanota.com].boom" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\legal\\cze\\license.html.[neftet@tutanota.com].boom")) returned 1 [0124.429] MoveFileW (lpExistingFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Legal\\DAN\\license.html" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\legal\\dan\\license.html"), lpNewFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Legal\\DAN\\license.html.[neftet@tutanota.com].boom" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\legal\\dan\\license.html.[neftet@tutanota.com].boom")) returned 1 [0124.437] MoveFileW (lpExistingFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Legal\\DEU\\license.html" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\legal\\deu\\license.html"), lpNewFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Legal\\DEU\\license.html.[neftet@tutanota.com].boom" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\legal\\deu\\license.html.[neftet@tutanota.com].boom")) returned 1 [0124.442] MoveFileW (lpExistingFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Legal\\ENU\\license.html" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\legal\\enu\\license.html"), lpNewFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Legal\\ENU\\license.html.[neftet@tutanota.com].boom" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\legal\\enu\\license.html.[neftet@tutanota.com].boom")) returned 1 [0124.447] MoveFileW (lpExistingFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Legal\\ESP\\license.html" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\legal\\esp\\license.html"), lpNewFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Legal\\ESP\\license.html.[neftet@tutanota.com].boom" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\legal\\esp\\license.html.[neftet@tutanota.com].boom")) returned 1 [0124.451] MoveFileW (lpExistingFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Legal\\EUQ\\license.html" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\legal\\euq\\license.html"), lpNewFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Legal\\EUQ\\license.html.[neftet@tutanota.com].boom" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\legal\\euq\\license.html.[neftet@tutanota.com].boom")) returned 1 [0124.458] MoveFileW (lpExistingFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Legal\\FRA\\license.html" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\legal\\fra\\license.html"), lpNewFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Legal\\FRA\\license.html.[neftet@tutanota.com].boom" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\legal\\fra\\license.html.[neftet@tutanota.com].boom")) returned 1 [0124.463] MoveFileW (lpExistingFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Legal\\HRV\\license.html" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\legal\\hrv\\license.html"), lpNewFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Legal\\HRV\\license.html.[neftet@tutanota.com].boom" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\legal\\hrv\\license.html.[neftet@tutanota.com].boom")) returned 1 [0124.469] MoveFileW (lpExistingFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Legal\\HUN\\license.html" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\legal\\hun\\license.html"), lpNewFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Legal\\HUN\\license.html.[neftet@tutanota.com].boom" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\legal\\hun\\license.html.[neftet@tutanota.com].boom")) returned 1 [0124.474] MoveFileW (lpExistingFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Legal\\ITA\\license.html" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\legal\\ita\\license.html"), lpNewFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Legal\\ITA\\license.html.[neftet@tutanota.com].boom" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\legal\\ita\\license.html.[neftet@tutanota.com].boom")) returned 1 [0124.486] MoveFileW (lpExistingFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Legal\\JPN\\license.html" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\legal\\jpn\\license.html"), lpNewFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Legal\\JPN\\license.html.[neftet@tutanota.com].boom" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\legal\\jpn\\license.html.[neftet@tutanota.com].boom")) returned 1 [0124.495] MoveFileW (lpExistingFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Legal\\KOR\\license.html" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\legal\\kor\\license.html"), lpNewFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Legal\\KOR\\license.html.[neftet@tutanota.com].boom" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\legal\\kor\\license.html.[neftet@tutanota.com].boom")) returned 1 [0124.500] MoveFileW (lpExistingFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Legal\\NLD\\license.html" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\legal\\nld\\license.html"), lpNewFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Legal\\NLD\\license.html.[neftet@tutanota.com].boom" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\legal\\nld\\license.html.[neftet@tutanota.com].boom")) returned 1 [0124.505] MoveFileW (lpExistingFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Legal\\NOR\\license.html" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\legal\\nor\\license.html"), lpNewFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Legal\\NOR\\license.html.[neftet@tutanota.com].boom" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\legal\\nor\\license.html.[neftet@tutanota.com].boom")) returned 1 [0124.511] MoveFileW (lpExistingFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Legal\\POL\\license.html" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\legal\\pol\\license.html"), lpNewFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Legal\\POL\\license.html.[neftet@tutanota.com].boom" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\legal\\pol\\license.html.[neftet@tutanota.com].boom")) returned 1 [0124.516] MoveFileW (lpExistingFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Legal\\PTB\\license.html" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\legal\\ptb\\license.html"), lpNewFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Legal\\PTB\\license.html.[neftet@tutanota.com].boom" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\legal\\ptb\\license.html.[neftet@tutanota.com].boom")) returned 1 [0124.522] MoveFileW (lpExistingFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Legal\\RUM\\license.html" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\legal\\rum\\license.html"), lpNewFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Legal\\RUM\\license.html.[neftet@tutanota.com].boom" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\legal\\rum\\license.html.[neftet@tutanota.com].boom")) returned 1 [0124.539] MoveFileW (lpExistingFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Legal\\RUS\\license.html" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\legal\\rus\\license.html"), lpNewFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Legal\\RUS\\license.html.[neftet@tutanota.com].boom" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\legal\\rus\\license.html.[neftet@tutanota.com].boom")) returned 1 [0124.545] MoveFileW (lpExistingFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Legal\\SKY\\license.html" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\legal\\sky\\license.html"), lpNewFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Legal\\SKY\\license.html.[neftet@tutanota.com].boom" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\legal\\sky\\license.html.[neftet@tutanota.com].boom")) returned 1 [0124.551] MoveFileW (lpExistingFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Legal\\SLV\\license.html" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\legal\\slv\\license.html"), lpNewFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Legal\\SLV\\license.html.[neftet@tutanota.com].boom" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\legal\\slv\\license.html.[neftet@tutanota.com].boom")) returned 1 [0124.557] MoveFileW (lpExistingFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Legal\\SUO\\license.html" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\legal\\suo\\license.html"), lpNewFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Legal\\SUO\\license.html.[neftet@tutanota.com].boom" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\legal\\suo\\license.html.[neftet@tutanota.com].boom")) returned 1 [0124.562] MoveFileW (lpExistingFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Legal\\SVE\\license.html" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\legal\\sve\\license.html"), lpNewFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Legal\\SVE\\license.html.[neftet@tutanota.com].boom" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\legal\\sve\\license.html.[neftet@tutanota.com].boom")) returned 1 [0124.567] MoveFileW (lpExistingFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Legal\\TUR\\license.html" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\legal\\tur\\license.html"), lpNewFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Legal\\TUR\\license.html.[neftet@tutanota.com].boom" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\legal\\tur\\license.html.[neftet@tutanota.com].boom")) returned 1 [0124.584] MoveFileW (lpExistingFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Legal\\UKR\\license.html" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\legal\\ukr\\license.html"), lpNewFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Legal\\UKR\\license.html.[neftet@tutanota.com].boom" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\legal\\ukr\\license.html.[neftet@tutanota.com].boom")) returned 1 [0124.682] MoveFileW (lpExistingFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\Words.pdf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\words.pdf"), lpNewFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\Words.pdf.[neftet@tutanota.com].boom" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\words.pdf.[neftet@tutanota.com].boom")) returned 1 [0124.692] MoveFileW (lpExistingFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\CAT\\Dynamic.pdf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\cat\\dynamic.pdf"), lpNewFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\CAT\\Dynamic.pdf.[neftet@tutanota.com].boom" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\cat\\dynamic.pdf.[neftet@tutanota.com].boom")) returned 1 [0124.696] MoveFileW (lpExistingFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\CAT\\Faces.pdf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\cat\\faces.pdf"), lpNewFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\CAT\\Faces.pdf.[neftet@tutanota.com].boom" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\cat\\faces.pdf.[neftet@tutanota.com].boom")) returned 1 [0124.701] MoveFileW (lpExistingFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\CAT\\Pointers.pdf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\cat\\pointers.pdf"), lpNewFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\CAT\\Pointers.pdf.[neftet@tutanota.com].boom" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\cat\\pointers.pdf.[neftet@tutanota.com].boom")) returned 1 [0124.707] MoveFileW (lpExistingFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\CAT\\SignHere.pdf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\cat\\signhere.pdf"), lpNewFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\CAT\\SignHere.pdf.[neftet@tutanota.com].boom" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\cat\\signhere.pdf.[neftet@tutanota.com].boom")) returned 1 [0124.721] MoveFileW (lpExistingFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\CAT\\Standard.pdf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\cat\\standard.pdf"), lpNewFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\CAT\\Standard.pdf.[neftet@tutanota.com].boom" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\cat\\standard.pdf.[neftet@tutanota.com].boom")) returned 1 [0124.763] MoveFileW (lpExistingFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\CAT\\StandardBusiness.pdf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\cat\\standardbusiness.pdf"), lpNewFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\CAT\\StandardBusiness.pdf.[neftet@tutanota.com].boom" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\cat\\standardbusiness.pdf.[neftet@tutanota.com].boom")) returned 1 [0124.770] MoveFileW (lpExistingFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\CHS\\Dynamic.pdf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\chs\\dynamic.pdf"), lpNewFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\CHS\\Dynamic.pdf.[neftet@tutanota.com].boom" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\chs\\dynamic.pdf.[neftet@tutanota.com].boom")) returned 1 [0124.776] MoveFileW (lpExistingFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\CHS\\Hanko.pdf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\chs\\hanko.pdf"), lpNewFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\CHS\\Hanko.pdf.[neftet@tutanota.com].boom" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\chs\\hanko.pdf.[neftet@tutanota.com].boom")) returned 1 [0124.780] MoveFileW (lpExistingFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\CHS\\SignHere.pdf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\chs\\signhere.pdf"), lpNewFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\CHS\\SignHere.pdf.[neftet@tutanota.com].boom" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\chs\\signhere.pdf.[neftet@tutanota.com].boom")) returned 1 [0124.789] MoveFileW (lpExistingFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\CHS\\StandardBusiness.pdf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\chs\\standardbusiness.pdf"), lpNewFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\CHS\\StandardBusiness.pdf.[neftet@tutanota.com].boom" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\chs\\standardbusiness.pdf.[neftet@tutanota.com].boom")) returned 1 [0124.795] MoveFileW (lpExistingFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\CHT\\Dynamic.pdf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\cht\\dynamic.pdf"), lpNewFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\CHT\\Dynamic.pdf.[neftet@tutanota.com].boom" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\cht\\dynamic.pdf.[neftet@tutanota.com].boom")) returned 1 [0124.802] MoveFileW (lpExistingFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\CHT\\Hanko.pdf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\cht\\hanko.pdf"), lpNewFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\CHT\\Hanko.pdf.[neftet@tutanota.com].boom" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\cht\\hanko.pdf.[neftet@tutanota.com].boom")) returned 1 [0124.809] MoveFileW (lpExistingFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\CHT\\SignHere.pdf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\cht\\signhere.pdf"), lpNewFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\CHT\\SignHere.pdf.[neftet@tutanota.com].boom" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\cht\\signhere.pdf.[neftet@tutanota.com].boom")) returned 1 [0124.820] MoveFileW (lpExistingFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\CHT\\StandardBusiness.pdf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\cht\\standardbusiness.pdf"), lpNewFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\CHT\\StandardBusiness.pdf.[neftet@tutanota.com].boom" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\cht\\standardbusiness.pdf.[neftet@tutanota.com].boom")) returned 1 [0124.824] MoveFileW (lpExistingFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\CZE\\Dynamic.pdf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\cze\\dynamic.pdf"), lpNewFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\CZE\\Dynamic.pdf.[neftet@tutanota.com].boom" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\cze\\dynamic.pdf.[neftet@tutanota.com].boom")) returned 1 [0124.828] MoveFileW (lpExistingFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\CZE\\Faces.pdf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\cze\\faces.pdf"), lpNewFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\CZE\\Faces.pdf.[neftet@tutanota.com].boom" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\cze\\faces.pdf.[neftet@tutanota.com].boom")) returned 1 [0124.833] MoveFileW (lpExistingFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\CZE\\Pointers.pdf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\cze\\pointers.pdf"), lpNewFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\CZE\\Pointers.pdf.[neftet@tutanota.com].boom" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\cze\\pointers.pdf.[neftet@tutanota.com].boom")) returned 1 [0124.852] MoveFileW (lpExistingFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\CZE\\SignHere.pdf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\cze\\signhere.pdf"), lpNewFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\CZE\\SignHere.pdf.[neftet@tutanota.com].boom" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\cze\\signhere.pdf.[neftet@tutanota.com].boom")) returned 1 [0124.862] MoveFileW (lpExistingFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\CZE\\Standard.pdf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\cze\\standard.pdf"), lpNewFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\CZE\\Standard.pdf.[neftet@tutanota.com].boom" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\cze\\standard.pdf.[neftet@tutanota.com].boom")) returned 1 [0124.869] MoveFileW (lpExistingFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\CZE\\StandardBusiness.pdf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\cze\\standardbusiness.pdf"), lpNewFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\CZE\\StandardBusiness.pdf.[neftet@tutanota.com].boom" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\cze\\standardbusiness.pdf.[neftet@tutanota.com].boom")) returned 1 [0124.874] MoveFileW (lpExistingFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\DAN\\Dynamic.pdf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\dan\\dynamic.pdf"), lpNewFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\DAN\\Dynamic.pdf.[neftet@tutanota.com].boom" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\dan\\dynamic.pdf.[neftet@tutanota.com].boom")) returned 1 [0124.879] MoveFileW (lpExistingFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\DAN\\SignHere.pdf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\dan\\signhere.pdf"), lpNewFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\DAN\\SignHere.pdf.[neftet@tutanota.com].boom" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\dan\\signhere.pdf.[neftet@tutanota.com].boom")) returned 1 [0125.020] MoveFileW (lpExistingFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\DAN\\StandardBusiness.pdf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\dan\\standardbusiness.pdf"), lpNewFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\DAN\\StandardBusiness.pdf.[neftet@tutanota.com].boom" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\dan\\standardbusiness.pdf.[neftet@tutanota.com].boom")) returned 1 [0125.025] MoveFileW (lpExistingFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\DEU\\Dynamic.pdf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\deu\\dynamic.pdf"), lpNewFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\DEU\\Dynamic.pdf.[neftet@tutanota.com].boom" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\deu\\dynamic.pdf.[neftet@tutanota.com].boom")) returned 1 [0125.031] MoveFileW (lpExistingFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\DEU\\SignHere.pdf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\deu\\signhere.pdf"), lpNewFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\DEU\\SignHere.pdf.[neftet@tutanota.com].boom" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\deu\\signhere.pdf.[neftet@tutanota.com].boom")) returned 1 [0125.042] MoveFileW (lpExistingFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\DEU\\StandardBusiness.pdf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\deu\\standardbusiness.pdf"), lpNewFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\DEU\\StandardBusiness.pdf.[neftet@tutanota.com].boom" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\deu\\standardbusiness.pdf.[neftet@tutanota.com].boom")) returned 1 [0125.047] MoveFileW (lpExistingFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\ENU\\Dynamic.pdf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\enu\\dynamic.pdf"), lpNewFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\ENU\\Dynamic.pdf.[neftet@tutanota.com].boom" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\enu\\dynamic.pdf.[neftet@tutanota.com].boom")) returned 1 [0125.052] MoveFileW (lpExistingFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\ENU\\SignHere.pdf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\enu\\signhere.pdf"), lpNewFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\ENU\\SignHere.pdf.[neftet@tutanota.com].boom" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\enu\\signhere.pdf.[neftet@tutanota.com].boom")) returned 1 [0125.064] MoveFileW (lpExistingFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\ENU\\StandardBusiness.pdf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\enu\\standardbusiness.pdf"), lpNewFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\ENU\\StandardBusiness.pdf.[neftet@tutanota.com].boom" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\enu\\standardbusiness.pdf.[neftet@tutanota.com].boom")) returned 1 [0125.074] MoveFileW (lpExistingFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\ESP\\Dynamic.pdf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\esp\\dynamic.pdf"), lpNewFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\ESP\\Dynamic.pdf.[neftet@tutanota.com].boom" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\esp\\dynamic.pdf.[neftet@tutanota.com].boom")) returned 1 [0125.078] MoveFileW (lpExistingFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\ESP\\SignHere.pdf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\esp\\signhere.pdf"), lpNewFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\ESP\\SignHere.pdf.[neftet@tutanota.com].boom" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\esp\\signhere.pdf.[neftet@tutanota.com].boom")) returned 1 [0125.135] MoveFileW (lpExistingFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\ESP\\StandardBusiness.pdf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\esp\\standardbusiness.pdf"), lpNewFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\ESP\\StandardBusiness.pdf.[neftet@tutanota.com].boom" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\esp\\standardbusiness.pdf.[neftet@tutanota.com].boom")) returned 1 [0125.140] MoveFileW (lpExistingFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\EUQ\\Dynamic.pdf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\euq\\dynamic.pdf"), lpNewFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\EUQ\\Dynamic.pdf.[neftet@tutanota.com].boom" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\euq\\dynamic.pdf.[neftet@tutanota.com].boom")) returned 1 [0125.144] MoveFileW (lpExistingFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\EUQ\\Faces.pdf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\euq\\faces.pdf"), lpNewFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\EUQ\\Faces.pdf.[neftet@tutanota.com].boom" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\euq\\faces.pdf.[neftet@tutanota.com].boom")) returned 1 [0125.149] MoveFileW (lpExistingFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\EUQ\\Pointers.pdf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\euq\\pointers.pdf"), lpNewFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\EUQ\\Pointers.pdf.[neftet@tutanota.com].boom" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\euq\\pointers.pdf.[neftet@tutanota.com].boom")) returned 1 [0125.153] MoveFileW (lpExistingFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\EUQ\\SignHere.pdf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\euq\\signhere.pdf"), lpNewFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\EUQ\\SignHere.pdf.[neftet@tutanota.com].boom" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\euq\\signhere.pdf.[neftet@tutanota.com].boom")) returned 1 [0125.172] MoveFileW (lpExistingFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\EUQ\\Standard.pdf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\euq\\standard.pdf"), lpNewFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\EUQ\\Standard.pdf.[neftet@tutanota.com].boom" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\euq\\standard.pdf.[neftet@tutanota.com].boom")) returned 1 [0125.219] MoveFileW (lpExistingFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\EUQ\\StandardBusiness.pdf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\euq\\standardbusiness.pdf"), lpNewFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\EUQ\\StandardBusiness.pdf.[neftet@tutanota.com].boom" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\euq\\standardbusiness.pdf.[neftet@tutanota.com].boom")) returned 1 [0125.230] MoveFileW (lpExistingFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\FRA\\Dynamic.pdf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\fra\\dynamic.pdf"), lpNewFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\FRA\\Dynamic.pdf.[neftet@tutanota.com].boom" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\fra\\dynamic.pdf.[neftet@tutanota.com].boom")) returned 1 [0125.235] MoveFileW (lpExistingFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\FRA\\SignHere.pdf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\fra\\signhere.pdf"), lpNewFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\FRA\\SignHere.pdf.[neftet@tutanota.com].boom" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\fra\\signhere.pdf.[neftet@tutanota.com].boom")) returned 1 [0125.255] MoveFileW (lpExistingFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\FRA\\StandardBusiness.pdf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\fra\\standardbusiness.pdf"), lpNewFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\FRA\\StandardBusiness.pdf.[neftet@tutanota.com].boom" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\fra\\standardbusiness.pdf.[neftet@tutanota.com].boom")) returned 1 [0125.266] MoveFileW (lpExistingFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\HRV\\Dynamic.pdf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\hrv\\dynamic.pdf"), lpNewFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\HRV\\Dynamic.pdf.[neftet@tutanota.com].boom" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\hrv\\dynamic.pdf.[neftet@tutanota.com].boom")) returned 1 [0125.279] MoveFileW (lpExistingFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\HRV\\Faces.pdf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\hrv\\faces.pdf"), lpNewFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\HRV\\Faces.pdf.[neftet@tutanota.com].boom" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\hrv\\faces.pdf.[neftet@tutanota.com].boom")) returned 1 [0125.284] MoveFileW (lpExistingFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\HRV\\Pointers.pdf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\hrv\\pointers.pdf"), lpNewFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\HRV\\Pointers.pdf.[neftet@tutanota.com].boom" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\hrv\\pointers.pdf.[neftet@tutanota.com].boom")) returned 1 [0125.288] MoveFileW (lpExistingFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\HRV\\SignHere.pdf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\hrv\\signhere.pdf"), lpNewFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\HRV\\SignHere.pdf.[neftet@tutanota.com].boom" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\hrv\\signhere.pdf.[neftet@tutanota.com].boom")) returned 1 [0125.296] MoveFileW (lpExistingFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\HRV\\Standard.pdf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\hrv\\standard.pdf"), lpNewFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\HRV\\Standard.pdf.[neftet@tutanota.com].boom" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\hrv\\standard.pdf.[neftet@tutanota.com].boom")) returned 1 [0125.303] MoveFileW (lpExistingFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\HRV\\StandardBusiness.pdf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\hrv\\standardbusiness.pdf"), lpNewFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\HRV\\StandardBusiness.pdf.[neftet@tutanota.com].boom" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\hrv\\standardbusiness.pdf.[neftet@tutanota.com].boom")) returned 1 [0125.308] MoveFileW (lpExistingFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\HUN\\Dynamic.pdf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\hun\\dynamic.pdf"), lpNewFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\HUN\\Dynamic.pdf.[neftet@tutanota.com].boom" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\hun\\dynamic.pdf.[neftet@tutanota.com].boom")) returned 1 [0125.312] MoveFileW (lpExistingFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\HUN\\Faces.pdf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\hun\\faces.pdf"), lpNewFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\HUN\\Faces.pdf.[neftet@tutanota.com].boom" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\hun\\faces.pdf.[neftet@tutanota.com].boom")) returned 1 [0125.317] MoveFileW (lpExistingFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\HUN\\Pointers.pdf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\hun\\pointers.pdf"), lpNewFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\HUN\\Pointers.pdf.[neftet@tutanota.com].boom" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\hun\\pointers.pdf.[neftet@tutanota.com].boom")) returned 1 [0125.322] MoveFileW (lpExistingFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\HUN\\SignHere.pdf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\hun\\signhere.pdf"), lpNewFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\HUN\\SignHere.pdf.[neftet@tutanota.com].boom" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\hun\\signhere.pdf.[neftet@tutanota.com].boom")) returned 1 [0125.330] MoveFileW (lpExistingFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\HUN\\Standard.pdf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\hun\\standard.pdf"), lpNewFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\HUN\\Standard.pdf.[neftet@tutanota.com].boom" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\hun\\standard.pdf.[neftet@tutanota.com].boom")) returned 1 [0125.337] MoveFileW (lpExistingFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\HUN\\StandardBusiness.pdf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\hun\\standardbusiness.pdf"), lpNewFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\HUN\\StandardBusiness.pdf.[neftet@tutanota.com].boom" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\hun\\standardbusiness.pdf.[neftet@tutanota.com].boom")) returned 1 [0125.341] MoveFileW (lpExistingFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\ITA\\Dynamic.pdf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\ita\\dynamic.pdf"), lpNewFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\ITA\\Dynamic.pdf.[neftet@tutanota.com].boom" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\ita\\dynamic.pdf.[neftet@tutanota.com].boom")) returned 1 [0125.345] MoveFileW (lpExistingFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\ITA\\SignHere.pdf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\ita\\signhere.pdf"), lpNewFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\ITA\\SignHere.pdf.[neftet@tutanota.com].boom" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\ita\\signhere.pdf.[neftet@tutanota.com].boom")) returned 1 [0125.354] MoveFileW (lpExistingFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\ITA\\StandardBusiness.pdf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\ita\\standardbusiness.pdf"), lpNewFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\ITA\\StandardBusiness.pdf.[neftet@tutanota.com].boom" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\ita\\standardbusiness.pdf.[neftet@tutanota.com].boom")) returned 1 [0125.359] MoveFileW (lpExistingFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\JPN\\Dynamic.pdf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\jpn\\dynamic.pdf"), lpNewFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\JPN\\Dynamic.pdf.[neftet@tutanota.com].boom" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\jpn\\dynamic.pdf.[neftet@tutanota.com].boom")) returned 1 [0125.368] MoveFileW (lpExistingFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\JPN\\Hanko.pdf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\jpn\\hanko.pdf"), lpNewFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\JPN\\Hanko.pdf.[neftet@tutanota.com].boom" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\jpn\\hanko.pdf.[neftet@tutanota.com].boom")) returned 1 [0125.372] MoveFileW (lpExistingFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\JPN\\SignHere.pdf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\jpn\\signhere.pdf"), lpNewFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\JPN\\SignHere.pdf.[neftet@tutanota.com].boom" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\jpn\\signhere.pdf.[neftet@tutanota.com].boom")) returned 1 [0125.380] MoveFileW (lpExistingFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\JPN\\StandardBusiness.pdf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\jpn\\standardbusiness.pdf"), lpNewFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\JPN\\StandardBusiness.pdf.[neftet@tutanota.com].boom" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\jpn\\standardbusiness.pdf.[neftet@tutanota.com].boom")) returned 1 [0125.386] MoveFileW (lpExistingFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\KOR\\Dynamic.pdf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\kor\\dynamic.pdf"), lpNewFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\KOR\\Dynamic.pdf.[neftet@tutanota.com].boom" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\kor\\dynamic.pdf.[neftet@tutanota.com].boom")) returned 1 [0125.398] MoveFileW (lpExistingFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\KOR\\Hanko.pdf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\kor\\hanko.pdf"), lpNewFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\KOR\\Hanko.pdf.[neftet@tutanota.com].boom" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\kor\\hanko.pdf.[neftet@tutanota.com].boom")) returned 1 [0125.403] MoveFileW (lpExistingFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\KOR\\SignHere.pdf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\kor\\signhere.pdf"), lpNewFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\KOR\\SignHere.pdf.[neftet@tutanota.com].boom" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\kor\\signhere.pdf.[neftet@tutanota.com].boom")) returned 1 [0125.415] MoveFileW (lpExistingFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\KOR\\StandardBusiness.pdf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\kor\\standardbusiness.pdf"), lpNewFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\KOR\\StandardBusiness.pdf.[neftet@tutanota.com].boom" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\kor\\standardbusiness.pdf.[neftet@tutanota.com].boom")) returned 1 [0125.420] MoveFileW (lpExistingFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\NLD\\Dynamic.pdf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\nld\\dynamic.pdf"), lpNewFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\NLD\\Dynamic.pdf.[neftet@tutanota.com].boom" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\nld\\dynamic.pdf.[neftet@tutanota.com].boom")) returned 1 [0125.425] MoveFileW (lpExistingFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\NLD\\SignHere.pdf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\nld\\signhere.pdf"), lpNewFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\NLD\\SignHere.pdf.[neftet@tutanota.com].boom" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\nld\\signhere.pdf.[neftet@tutanota.com].boom")) returned 1 [0125.434] MoveFileW (lpExistingFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\NLD\\StandardBusiness.pdf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\nld\\standardbusiness.pdf"), lpNewFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\NLD\\StandardBusiness.pdf.[neftet@tutanota.com].boom" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\nld\\standardbusiness.pdf.[neftet@tutanota.com].boom")) returned 1 [0125.440] MoveFileW (lpExistingFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\NOR\\Dynamic.pdf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\nor\\dynamic.pdf"), lpNewFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\NOR\\Dynamic.pdf.[neftet@tutanota.com].boom" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\nor\\dynamic.pdf.[neftet@tutanota.com].boom")) returned 1 [0125.445] MoveFileW (lpExistingFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\NOR\\SignHere.pdf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\nor\\signhere.pdf"), lpNewFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\NOR\\SignHere.pdf.[neftet@tutanota.com].boom" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\nor\\signhere.pdf.[neftet@tutanota.com].boom")) returned 1 [0125.459] MoveFileW (lpExistingFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\NOR\\StandardBusiness.pdf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\nor\\standardbusiness.pdf"), lpNewFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\NOR\\StandardBusiness.pdf.[neftet@tutanota.com].boom" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\nor\\standardbusiness.pdf.[neftet@tutanota.com].boom")) returned 1 [0125.463] MoveFileW (lpExistingFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\POL\\Dynamic.pdf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\pol\\dynamic.pdf"), lpNewFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\POL\\Dynamic.pdf.[neftet@tutanota.com].boom" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\pol\\dynamic.pdf.[neftet@tutanota.com].boom")) returned 1 [0125.468] MoveFileW (lpExistingFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\POL\\Faces.pdf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\pol\\faces.pdf"), lpNewFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\POL\\Faces.pdf.[neftet@tutanota.com].boom" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\pol\\faces.pdf.[neftet@tutanota.com].boom")) returned 1 [0125.473] MoveFileW (lpExistingFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\POL\\Pointers.pdf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\pol\\pointers.pdf"), lpNewFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\POL\\Pointers.pdf.[neftet@tutanota.com].boom" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\pol\\pointers.pdf.[neftet@tutanota.com].boom")) returned 1 [0125.491] MoveFileW (lpExistingFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\POL\\SignHere.pdf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\pol\\signhere.pdf"), lpNewFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\POL\\SignHere.pdf.[neftet@tutanota.com].boom" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\pol\\signhere.pdf.[neftet@tutanota.com].boom")) returned 1 [0125.499] MoveFileW (lpExistingFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\POL\\Standard.pdf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\pol\\standard.pdf"), lpNewFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\POL\\Standard.pdf.[neftet@tutanota.com].boom" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\pol\\standard.pdf.[neftet@tutanota.com].boom")) returned 1 [0125.504] MoveFileW (lpExistingFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\POL\\StandardBusiness.pdf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\pol\\standardbusiness.pdf"), lpNewFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\POL\\StandardBusiness.pdf.[neftet@tutanota.com].boom" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\pol\\standardbusiness.pdf.[neftet@tutanota.com].boom")) returned 1 [0125.510] MoveFileW (lpExistingFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\PTB\\Dynamic.pdf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\ptb\\dynamic.pdf"), lpNewFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\PTB\\Dynamic.pdf.[neftet@tutanota.com].boom" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\ptb\\dynamic.pdf.[neftet@tutanota.com].boom")) returned 1 [0125.514] MoveFileW (lpExistingFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\PTB\\SignHere.pdf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\ptb\\signhere.pdf"), lpNewFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\PTB\\SignHere.pdf.[neftet@tutanota.com].boom" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\ptb\\signhere.pdf.[neftet@tutanota.com].boom")) returned 1 [0125.522] MoveFileW (lpExistingFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\PTB\\StandardBusiness.pdf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\ptb\\standardbusiness.pdf"), lpNewFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\PTB\\StandardBusiness.pdf.[neftet@tutanota.com].boom" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\ptb\\standardbusiness.pdf.[neftet@tutanota.com].boom")) returned 1 [0125.529] MoveFileW (lpExistingFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\RUM\\Dynamic.pdf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\rum\\dynamic.pdf"), lpNewFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\RUM\\Dynamic.pdf.[neftet@tutanota.com].boom" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\rum\\dynamic.pdf.[neftet@tutanota.com].boom")) returned 1 [0125.534] MoveFileW (lpExistingFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\RUM\\Faces.pdf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\rum\\faces.pdf"), lpNewFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\RUM\\Faces.pdf.[neftet@tutanota.com].boom" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\rum\\faces.pdf.[neftet@tutanota.com].boom")) returned 1 [0125.538] MoveFileW (lpExistingFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\RUM\\Pointers.pdf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\rum\\pointers.pdf"), lpNewFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\RUM\\Pointers.pdf.[neftet@tutanota.com].boom" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\rum\\pointers.pdf.[neftet@tutanota.com].boom")) returned 1 [0125.543] MoveFileW (lpExistingFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\RUM\\SignHere.pdf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\rum\\signhere.pdf"), lpNewFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\RUM\\SignHere.pdf.[neftet@tutanota.com].boom" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\rum\\signhere.pdf.[neftet@tutanota.com].boom")) returned 1 [0125.552] MoveFileW (lpExistingFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\RUM\\Standard.pdf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\rum\\standard.pdf"), lpNewFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\RUM\\Standard.pdf.[neftet@tutanota.com].boom" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\rum\\standard.pdf.[neftet@tutanota.com].boom")) returned 1 [0125.563] MoveFileW (lpExistingFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\RUM\\StandardBusiness.pdf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\rum\\standardbusiness.pdf"), lpNewFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\RUM\\StandardBusiness.pdf.[neftet@tutanota.com].boom" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\rum\\standardbusiness.pdf.[neftet@tutanota.com].boom")) returned 1 [0125.568] MoveFileW (lpExistingFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\RUS\\Dynamic.pdf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\rus\\dynamic.pdf"), lpNewFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\RUS\\Dynamic.pdf.[neftet@tutanota.com].boom" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\rus\\dynamic.pdf.[neftet@tutanota.com].boom")) returned 1 [0125.572] MoveFileW (lpExistingFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\RUS\\Faces.pdf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\rus\\faces.pdf"), lpNewFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\RUS\\Faces.pdf.[neftet@tutanota.com].boom" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\rus\\faces.pdf.[neftet@tutanota.com].boom")) returned 1 [0125.577] MoveFileW (lpExistingFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\RUS\\Pointers.pdf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\rus\\pointers.pdf"), lpNewFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\RUS\\Pointers.pdf.[neftet@tutanota.com].boom" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\rus\\pointers.pdf.[neftet@tutanota.com].boom")) returned 1 [0125.582] MoveFileW (lpExistingFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\RUS\\SignHere.pdf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\rus\\signhere.pdf"), lpNewFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\RUS\\SignHere.pdf.[neftet@tutanota.com].boom" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\rus\\signhere.pdf.[neftet@tutanota.com].boom")) returned 1 [0125.589] MoveFileW (lpExistingFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\RUS\\Standard.pdf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\rus\\standard.pdf"), lpNewFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\RUS\\Standard.pdf.[neftet@tutanota.com].boom" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\rus\\standard.pdf.[neftet@tutanota.com].boom")) returned 1 [0125.597] MoveFileW (lpExistingFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\RUS\\StandardBusiness.pdf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\rus\\standardbusiness.pdf"), lpNewFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\RUS\\StandardBusiness.pdf.[neftet@tutanota.com].boom" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\rus\\standardbusiness.pdf.[neftet@tutanota.com].boom")) returned 1 [0125.603] MoveFileW (lpExistingFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\SKY\\Dynamic.pdf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\sky\\dynamic.pdf"), lpNewFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\SKY\\Dynamic.pdf.[neftet@tutanota.com].boom" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\sky\\dynamic.pdf.[neftet@tutanota.com].boom")) returned 1 [0125.609] MoveFileW (lpExistingFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\SKY\\Faces.pdf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\sky\\faces.pdf"), lpNewFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\SKY\\Faces.pdf.[neftet@tutanota.com].boom" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\sky\\faces.pdf.[neftet@tutanota.com].boom")) returned 1 [0125.614] MoveFileW (lpExistingFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\SKY\\Pointers.pdf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\sky\\pointers.pdf"), lpNewFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\SKY\\Pointers.pdf.[neftet@tutanota.com].boom" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\sky\\pointers.pdf.[neftet@tutanota.com].boom")) returned 1 [0125.619] MoveFileW (lpExistingFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\SKY\\SignHere.pdf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\sky\\signhere.pdf"), lpNewFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\SKY\\SignHere.pdf.[neftet@tutanota.com].boom" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\sky\\signhere.pdf.[neftet@tutanota.com].boom")) returned 1 [0125.626] MoveFileW (lpExistingFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\SKY\\Standard.pdf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\sky\\standard.pdf"), lpNewFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\SKY\\Standard.pdf.[neftet@tutanota.com].boom" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\sky\\standard.pdf.[neftet@tutanota.com].boom")) returned 1 [0125.633] MoveFileW (lpExistingFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\SKY\\StandardBusiness.pdf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\sky\\standardbusiness.pdf"), lpNewFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\SKY\\StandardBusiness.pdf.[neftet@tutanota.com].boom" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\sky\\standardbusiness.pdf.[neftet@tutanota.com].boom")) returned 1 [0125.642] MoveFileW (lpExistingFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\SLV\\Dynamic.pdf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\slv\\dynamic.pdf"), lpNewFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\SLV\\Dynamic.pdf.[neftet@tutanota.com].boom" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\slv\\dynamic.pdf.[neftet@tutanota.com].boom")) returned 1 [0125.646] MoveFileW (lpExistingFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\SLV\\Faces.pdf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\slv\\faces.pdf"), lpNewFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\SLV\\Faces.pdf.[neftet@tutanota.com].boom" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\slv\\faces.pdf.[neftet@tutanota.com].boom")) returned 1 [0125.651] MoveFileW (lpExistingFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\SLV\\Pointers.pdf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\slv\\pointers.pdf"), lpNewFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\SLV\\Pointers.pdf.[neftet@tutanota.com].boom" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\slv\\pointers.pdf.[neftet@tutanota.com].boom")) returned 1 [0125.659] MoveFileW (lpExistingFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\SLV\\SignHere.pdf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\slv\\signhere.pdf"), lpNewFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\SLV\\SignHere.pdf.[neftet@tutanota.com].boom" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\slv\\signhere.pdf.[neftet@tutanota.com].boom")) returned 1 [0125.667] MoveFileW (lpExistingFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\SLV\\Standard.pdf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\slv\\standard.pdf"), lpNewFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\SLV\\Standard.pdf.[neftet@tutanota.com].boom" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\slv\\standard.pdf.[neftet@tutanota.com].boom")) returned 1 [0125.680] MoveFileW (lpExistingFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\SLV\\StandardBusiness.pdf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\slv\\standardbusiness.pdf"), lpNewFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\SLV\\StandardBusiness.pdf.[neftet@tutanota.com].boom" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\slv\\standardbusiness.pdf.[neftet@tutanota.com].boom")) returned 1 [0125.686] MoveFileW (lpExistingFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\SUO\\Dynamic.pdf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\suo\\dynamic.pdf"), lpNewFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\SUO\\Dynamic.pdf.[neftet@tutanota.com].boom" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\suo\\dynamic.pdf.[neftet@tutanota.com].boom")) returned 1 [0125.692] MoveFileW (lpExistingFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\SUO\\SignHere.pdf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\suo\\signhere.pdf"), lpNewFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\SUO\\SignHere.pdf.[neftet@tutanota.com].boom" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\suo\\signhere.pdf.[neftet@tutanota.com].boom")) returned 1 [0125.702] MoveFileW (lpExistingFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\SUO\\StandardBusiness.pdf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\suo\\standardbusiness.pdf"), lpNewFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\SUO\\StandardBusiness.pdf.[neftet@tutanota.com].boom" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\suo\\standardbusiness.pdf.[neftet@tutanota.com].boom")) returned 1 [0125.708] MoveFileW (lpExistingFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\SVE\\Dynamic.pdf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\sve\\dynamic.pdf"), lpNewFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\SVE\\Dynamic.pdf.[neftet@tutanota.com].boom" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\sve\\dynamic.pdf.[neftet@tutanota.com].boom")) returned 1 [0125.712] MoveFileW (lpExistingFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\SVE\\SignHere.pdf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\sve\\signhere.pdf"), lpNewFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\SVE\\SignHere.pdf.[neftet@tutanota.com].boom" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\sve\\signhere.pdf.[neftet@tutanota.com].boom")) returned 1 [0125.723] MoveFileW (lpExistingFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\SVE\\StandardBusiness.pdf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\sve\\standardbusiness.pdf"), lpNewFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\SVE\\StandardBusiness.pdf.[neftet@tutanota.com].boom" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\sve\\standardbusiness.pdf.[neftet@tutanota.com].boom")) returned 1 [0125.728] MoveFileW (lpExistingFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\TUR\\Dynamic.pdf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\tur\\dynamic.pdf"), lpNewFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\TUR\\Dynamic.pdf.[neftet@tutanota.com].boom" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\tur\\dynamic.pdf.[neftet@tutanota.com].boom")) returned 1 [0125.734] MoveFileW (lpExistingFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\TUR\\Faces.pdf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\tur\\faces.pdf"), lpNewFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\TUR\\Faces.pdf.[neftet@tutanota.com].boom" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\tur\\faces.pdf.[neftet@tutanota.com].boom")) returned 1 [0125.740] MoveFileW (lpExistingFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\TUR\\Pointers.pdf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\tur\\pointers.pdf"), lpNewFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\TUR\\Pointers.pdf.[neftet@tutanota.com].boom" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\tur\\pointers.pdf.[neftet@tutanota.com].boom")) returned 1 [0125.746] MoveFileW (lpExistingFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\TUR\\SignHere.pdf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\tur\\signhere.pdf"), lpNewFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\TUR\\SignHere.pdf.[neftet@tutanota.com].boom" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\tur\\signhere.pdf.[neftet@tutanota.com].boom")) returned 1 [0125.756] MoveFileW (lpExistingFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\TUR\\Standard.pdf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\tur\\standard.pdf"), lpNewFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\TUR\\Standard.pdf.[neftet@tutanota.com].boom" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\tur\\standard.pdf.[neftet@tutanota.com].boom")) returned 1 [0125.765] MoveFileW (lpExistingFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\TUR\\StandardBusiness.pdf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\tur\\standardbusiness.pdf"), lpNewFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\TUR\\StandardBusiness.pdf.[neftet@tutanota.com].boom" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\tur\\standardbusiness.pdf.[neftet@tutanota.com].boom")) returned 1 [0125.774] MoveFileW (lpExistingFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\UKR\\Dynamic.pdf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\ukr\\dynamic.pdf"), lpNewFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\UKR\\Dynamic.pdf.[neftet@tutanota.com].boom" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\ukr\\dynamic.pdf.[neftet@tutanota.com].boom")) returned 1 [0125.778] MoveFileW (lpExistingFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\UKR\\Faces.pdf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\ukr\\faces.pdf"), lpNewFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\UKR\\Faces.pdf.[neftet@tutanota.com].boom" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\ukr\\faces.pdf.[neftet@tutanota.com].boom")) returned 1 [0125.783] MoveFileW (lpExistingFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\UKR\\Pointers.pdf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\ukr\\pointers.pdf"), lpNewFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\UKR\\Pointers.pdf.[neftet@tutanota.com].boom" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\ukr\\pointers.pdf.[neftet@tutanota.com].boom")) returned 1 [0125.789] MoveFileW (lpExistingFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\UKR\\SignHere.pdf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\ukr\\signhere.pdf"), lpNewFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\UKR\\SignHere.pdf.[neftet@tutanota.com].boom" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\ukr\\signhere.pdf.[neftet@tutanota.com].boom")) returned 1 [0125.799] MoveFileW (lpExistingFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\UKR\\Standard.pdf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\ukr\\standard.pdf"), lpNewFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\UKR\\Standard.pdf.[neftet@tutanota.com].boom" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\ukr\\standard.pdf.[neftet@tutanota.com].boom")) returned 1 [0125.824] MoveFileW (lpExistingFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\UKR\\StandardBusiness.pdf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\ukr\\standardbusiness.pdf"), lpNewFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\plug_ins\\Annotations\\Stamps\\UKR\\StandardBusiness.pdf.[neftet@tutanota.com].boom" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\plug_ins\\annotations\\stamps\\ukr\\standardbusiness.pdf.[neftet@tutanota.com].boom")) returned 1 [0125.837] MoveFileW (lpExistingFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Tracker\\main.css" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\tracker\\main.css"), lpNewFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Tracker\\main.css.[neftet@tutanota.com].boom" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\reader\\tracker\\main.css.[neftet@tutanota.com].boom")) returned 1 [0125.840] MoveFileW (lpExistingFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\ENUtxt.pdf" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\enutxt.pdf"), lpNewFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\ENUtxt.pdf.[neftet@tutanota.com].boom" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\enutxt.pdf.[neftet@tutanota.com].boom")) returned 1 [0125.857] MoveFileW (lpExistingFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.ar.txt" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.ar.txt"), lpNewFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.ar.txt.[neftet@tutanota.com].boom" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.ar.txt.[neftet@tutanota.com].boom")) returned 1 [0125.864] MoveFileW (lpExistingFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.ar_AE.txt" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.ar_ae.txt"), lpNewFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.ar_AE.txt.[neftet@tutanota.com].boom" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.ar_ae.txt.[neftet@tutanota.com].boom")) returned 1 [0125.868] MoveFileW (lpExistingFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.ar_BH.txt" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.ar_bh.txt"), lpNewFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.ar_BH.txt.[neftet@tutanota.com].boom" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.ar_bh.txt.[neftet@tutanota.com].boom")) returned 1 [0125.872] MoveFileW (lpExistingFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.ar_DZ.txt" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.ar_dz.txt"), lpNewFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.ar_DZ.txt.[neftet@tutanota.com].boom" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.ar_dz.txt.[neftet@tutanota.com].boom")) returned 1 [0125.877] MoveFileW (lpExistingFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.ar_EG.txt" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.ar_eg.txt"), lpNewFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.ar_EG.txt.[neftet@tutanota.com].boom" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.ar_eg.txt.[neftet@tutanota.com].boom")) returned 1 [0125.883] MoveFileW (lpExistingFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.ar_IN.txt" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.ar_in.txt"), lpNewFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.ar_IN.txt.[neftet@tutanota.com].boom" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.ar_in.txt.[neftet@tutanota.com].boom")) returned 1 [0125.887] MoveFileW (lpExistingFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.ar_IQ.txt" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.ar_iq.txt"), lpNewFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.ar_IQ.txt.[neftet@tutanota.com].boom" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.ar_iq.txt.[neftet@tutanota.com].boom")) returned 1 [0125.893] MoveFileW (lpExistingFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.ar_JO.txt" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.ar_jo.txt"), lpNewFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.ar_JO.txt.[neftet@tutanota.com].boom" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.ar_jo.txt.[neftet@tutanota.com].boom")) returned 1 [0125.897] MoveFileW (lpExistingFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.ar_KW.txt" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.ar_kw.txt"), lpNewFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.ar_KW.txt.[neftet@tutanota.com].boom" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.ar_kw.txt.[neftet@tutanota.com].boom")) returned 1 [0125.901] MoveFileW (lpExistingFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.ar_LB.txt" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.ar_lb.txt"), lpNewFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.ar_LB.txt.[neftet@tutanota.com].boom" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.ar_lb.txt.[neftet@tutanota.com].boom")) returned 1 [0125.905] MoveFileW (lpExistingFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.ar_LY.txt" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.ar_ly.txt"), lpNewFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.ar_LY.txt.[neftet@tutanota.com].boom" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.ar_ly.txt.[neftet@tutanota.com].boom")) returned 1 [0125.908] MoveFileW (lpExistingFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.ar_MA.txt" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.ar_ma.txt"), lpNewFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.ar_MA.txt.[neftet@tutanota.com].boom" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.ar_ma.txt.[neftet@tutanota.com].boom")) returned 1 [0125.912] MoveFileW (lpExistingFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.ar_OM.txt" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.ar_om.txt"), lpNewFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.ar_OM.txt.[neftet@tutanota.com].boom" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.ar_om.txt.[neftet@tutanota.com].boom")) returned 1 [0125.916] MoveFileW (lpExistingFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.ar_QA.txt" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.ar_qa.txt"), lpNewFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.ar_QA.txt.[neftet@tutanota.com].boom" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.ar_qa.txt.[neftet@tutanota.com].boom")) returned 1 [0125.920] MoveFileW (lpExistingFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.ar_SA.txt" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.ar_sa.txt"), lpNewFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.ar_SA.txt.[neftet@tutanota.com].boom" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.ar_sa.txt.[neftet@tutanota.com].boom")) returned 1 [0125.924] MoveFileW (lpExistingFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.ar_SD.txt" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.ar_sd.txt"), lpNewFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.ar_SD.txt.[neftet@tutanota.com].boom" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.ar_sd.txt.[neftet@tutanota.com].boom")) returned 1 [0125.929] MoveFileW (lpExistingFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.ar_SY.txt" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.ar_sy.txt"), lpNewFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.ar_SY.txt.[neftet@tutanota.com].boom" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.ar_sy.txt.[neftet@tutanota.com].boom")) returned 1 [0125.932] MoveFileW (lpExistingFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.ar_TN.txt" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.ar_tn.txt"), lpNewFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.ar_TN.txt.[neftet@tutanota.com].boom" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.ar_tn.txt.[neftet@tutanota.com].boom")) returned 1 [0125.936] MoveFileW (lpExistingFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.ar_YE.txt" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.ar_ye.txt"), lpNewFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.ar_YE.txt.[neftet@tutanota.com].boom" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.ar_ye.txt.[neftet@tutanota.com].boom")) returned 1 [0125.940] MoveFileW (lpExistingFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.bg.txt" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.bg.txt"), lpNewFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.bg.txt.[neftet@tutanota.com].boom" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.bg.txt.[neftet@tutanota.com].boom")) returned 1 [0125.944] MoveFileW (lpExistingFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.bg_BG.txt" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.bg_bg.txt"), lpNewFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.bg_BG.txt.[neftet@tutanota.com].boom" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.bg_bg.txt.[neftet@tutanota.com].boom")) returned 1 [0125.948] MoveFileW (lpExistingFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.ca.txt" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.ca.txt"), lpNewFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.ca.txt.[neftet@tutanota.com].boom" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.ca.txt.[neftet@tutanota.com].boom")) returned 1 [0125.951] MoveFileW (lpExistingFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.ca_ES.txt" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.ca_es.txt"), lpNewFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.ca_ES.txt.[neftet@tutanota.com].boom" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.ca_es.txt.[neftet@tutanota.com].boom")) returned 1 [0125.955] MoveFileW (lpExistingFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.ca_ES_PREEURO.txt" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.ca_es_preeuro.txt"), lpNewFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.ca_ES_PREEURO.txt.[neftet@tutanota.com].boom" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.ca_es_preeuro.txt.[neftet@tutanota.com].boom")) returned 1 [0125.967] MoveFileW (lpExistingFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.cs.txt" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.cs.txt"), lpNewFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.cs.txt.[neftet@tutanota.com].boom" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.cs.txt.[neftet@tutanota.com].boom")) returned 1 [0125.971] MoveFileW (lpExistingFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.cs_CZ.txt" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.cs_cz.txt"), lpNewFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.cs_CZ.txt.[neftet@tutanota.com].boom" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.cs_cz.txt.[neftet@tutanota.com].boom")) returned 1 [0125.975] MoveFileW (lpExistingFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.da.txt" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.da.txt"), lpNewFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.da.txt.[neftet@tutanota.com].boom" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.da.txt.[neftet@tutanota.com].boom")) returned 1 [0125.979] MoveFileW (lpExistingFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.da_DK.txt" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.da_dk.txt"), lpNewFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.da_DK.txt.[neftet@tutanota.com].boom" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.da_dk.txt.[neftet@tutanota.com].boom")) returned 1 [0125.985] MoveFileW (lpExistingFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.de_CH.txt" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.de_ch.txt"), lpNewFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.de_CH.txt.[neftet@tutanota.com].boom" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.de_ch.txt.[neftet@tutanota.com].boom")) returned 1 [0125.989] MoveFileW (lpExistingFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.de_DE.txt" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.de_de.txt"), lpNewFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.de_DE.txt.[neftet@tutanota.com].boom" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.de_de.txt.[neftet@tutanota.com].boom")) returned 1 [0125.994] MoveFileW (lpExistingFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.de_DE_PREEURO.txt" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.de_de_preeuro.txt"), lpNewFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.de_DE_PREEURO.txt.[neftet@tutanota.com].boom" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.de_de_preeuro.txt.[neftet@tutanota.com].boom")) returned 1 [0125.998] MoveFileW (lpExistingFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.el.txt" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.el.txt"), lpNewFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.el.txt.[neftet@tutanota.com].boom" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.el.txt.[neftet@tutanota.com].boom")) returned 1 [0126.002] MoveFileW (lpExistingFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.el_GR.txt" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.el_gr.txt"), lpNewFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.el_GR.txt.[neftet@tutanota.com].boom" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.el_gr.txt.[neftet@tutanota.com].boom")) returned 1 [0126.007] MoveFileW (lpExistingFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.el_GR_PREEURO.txt" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.el_gr_preeuro.txt"), lpNewFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.el_GR_PREEURO.txt.[neftet@tutanota.com].boom" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.el_gr_preeuro.txt.[neftet@tutanota.com].boom")) returned 1 [0126.011] MoveFileW (lpExistingFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.en_CA.txt" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.en_ca.txt"), lpNewFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.en_CA.txt.[neftet@tutanota.com].boom" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.en_ca.txt.[neftet@tutanota.com].boom")) returned 1 [0126.015] MoveFileW (lpExistingFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.en_GB.txt" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.en_gb.txt"), lpNewFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.en_GB.txt.[neftet@tutanota.com].boom" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.en_gb.txt.[neftet@tutanota.com].boom")) returned 1 [0126.020] MoveFileW (lpExistingFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.en_GB_EURO.txt" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.en_gb_euro.txt"), lpNewFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.en_GB_EURO.txt.[neftet@tutanota.com].boom" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.en_gb_euro.txt.[neftet@tutanota.com].boom")) returned 1 [0126.024] MoveFileW (lpExistingFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.en_US.txt" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.en_us.txt"), lpNewFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.en_US.txt.[neftet@tutanota.com].boom" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.en_us.txt.[neftet@tutanota.com].boom")) returned 1 [0126.028] MoveFileW (lpExistingFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.en_US_POSIX.txt" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.en_us_posix.txt"), lpNewFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.en_US_POSIX.txt.[neftet@tutanota.com].boom" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.en_us_posix.txt.[neftet@tutanota.com].boom")) returned 1 [0126.032] MoveFileW (lpExistingFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.es.txt" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.es.txt"), lpNewFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.es.txt.[neftet@tutanota.com].boom" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.es.txt.[neftet@tutanota.com].boom")) returned 1 [0126.036] MoveFileW (lpExistingFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.es_AR.txt" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.es_ar.txt"), lpNewFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.es_AR.txt.[neftet@tutanota.com].boom" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.es_ar.txt.[neftet@tutanota.com].boom")) returned 1 [0126.040] MoveFileW (lpExistingFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.es_BO.txt" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.es_bo.txt"), lpNewFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.es_BO.txt.[neftet@tutanota.com].boom" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.es_bo.txt.[neftet@tutanota.com].boom")) returned 1 [0126.044] MoveFileW (lpExistingFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.es_CL.txt" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.es_cl.txt"), lpNewFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.es_CL.txt.[neftet@tutanota.com].boom" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.es_cl.txt.[neftet@tutanota.com].boom")) returned 1 [0126.048] MoveFileW (lpExistingFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.es_CO.txt" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.es_co.txt"), lpNewFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.es_CO.txt.[neftet@tutanota.com].boom" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.es_co.txt.[neftet@tutanota.com].boom")) returned 1 [0126.052] MoveFileW (lpExistingFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.es_CR.txt" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.es_cr.txt"), lpNewFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.es_CR.txt.[neftet@tutanota.com].boom" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.es_cr.txt.[neftet@tutanota.com].boom")) returned 1 [0126.055] MoveFileW (lpExistingFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.es_DO.txt" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.es_do.txt"), lpNewFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.es_DO.txt.[neftet@tutanota.com].boom" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.es_do.txt.[neftet@tutanota.com].boom")) returned 1 [0126.059] MoveFileW (lpExistingFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.es_EC.txt" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.es_ec.txt"), lpNewFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.es_EC.txt.[neftet@tutanota.com].boom" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.es_ec.txt.[neftet@tutanota.com].boom")) returned 1 [0126.064] MoveFileW (lpExistingFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.es_ES.txt" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.es_es.txt"), lpNewFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.es_ES.txt.[neftet@tutanota.com].boom" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.es_es.txt.[neftet@tutanota.com].boom")) returned 1 [0126.068] MoveFileW (lpExistingFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.es_ES_PREEURO.txt" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.es_es_preeuro.txt"), lpNewFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.es_ES_PREEURO.txt.[neftet@tutanota.com].boom" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.es_es_preeuro.txt.[neftet@tutanota.com].boom")) returned 1 [0126.072] MoveFileW (lpExistingFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.es_GT.txt" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.es_gt.txt"), lpNewFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.es_GT.txt.[neftet@tutanota.com].boom" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.es_gt.txt.[neftet@tutanota.com].boom")) returned 1 [0126.075] MoveFileW (lpExistingFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.es_HN.txt" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.es_hn.txt"), lpNewFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.es_HN.txt.[neftet@tutanota.com].boom" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.es_hn.txt.[neftet@tutanota.com].boom")) returned 1 [0126.079] MoveFileW (lpExistingFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.es_MX.txt" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.es_mx.txt"), lpNewFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.es_MX.txt.[neftet@tutanota.com].boom" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.es_mx.txt.[neftet@tutanota.com].boom")) returned 1 [0126.083] MoveFileW (lpExistingFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.es_NI.txt" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.es_ni.txt"), lpNewFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.es_NI.txt.[neftet@tutanota.com].boom" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.es_ni.txt.[neftet@tutanota.com].boom")) returned 1 [0126.087] MoveFileW (lpExistingFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.es_PA.txt" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.es_pa.txt"), lpNewFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.es_PA.txt.[neftet@tutanota.com].boom" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.es_pa.txt.[neftet@tutanota.com].boom")) returned 1 [0126.091] MoveFileW (lpExistingFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.es_PE.txt" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.es_pe.txt"), lpNewFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.es_PE.txt.[neftet@tutanota.com].boom" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.es_pe.txt.[neftet@tutanota.com].boom")) returned 1 [0126.095] MoveFileW (lpExistingFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.es_PR.txt" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.es_pr.txt"), lpNewFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.es_PR.txt.[neftet@tutanota.com].boom" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.es_pr.txt.[neftet@tutanota.com].boom")) returned 1 [0126.099] MoveFileW (lpExistingFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.es_PY.txt" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.es_py.txt"), lpNewFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.es_PY.txt.[neftet@tutanota.com].boom" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.es_py.txt.[neftet@tutanota.com].boom")) returned 1 [0126.106] MoveFileW (lpExistingFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.es_SV.txt" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.es_sv.txt"), lpNewFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.es_SV.txt.[neftet@tutanota.com].boom" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.es_sv.txt.[neftet@tutanota.com].boom")) returned 1 [0126.110] MoveFileW (lpExistingFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.es_US.txt" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.es_us.txt"), lpNewFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.es_US.txt.[neftet@tutanota.com].boom" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.es_us.txt.[neftet@tutanota.com].boom")) returned 1 [0126.114] MoveFileW (lpExistingFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.es_UY.txt" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.es_uy.txt"), lpNewFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.es_UY.txt.[neftet@tutanota.com].boom" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.es_uy.txt.[neftet@tutanota.com].boom")) returned 1 [0126.117] MoveFileW (lpExistingFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.es_VE.txt" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.es_ve.txt"), lpNewFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.es_VE.txt.[neftet@tutanota.com].boom" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.es_ve.txt.[neftet@tutanota.com].boom")) returned 1 [0126.121] MoveFileW (lpExistingFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.es__TRADITIONAL.txt" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.es__traditional.txt"), lpNewFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.es__TRADITIONAL.txt.[neftet@tutanota.com].boom" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.es__traditional.txt.[neftet@tutanota.com].boom")) returned 1 [0126.127] MoveFileW (lpExistingFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.et.txt" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.et.txt"), lpNewFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.et.txt.[neftet@tutanota.com].boom" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.et.txt.[neftet@tutanota.com].boom")) returned 1 [0126.130] MoveFileW (lpExistingFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.et_EE.txt" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.et_ee.txt"), lpNewFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.et_EE.txt.[neftet@tutanota.com].boom" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.et_ee.txt.[neftet@tutanota.com].boom")) returned 1 [0126.134] MoveFileW (lpExistingFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.fi.txt" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.fi.txt"), lpNewFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.fi.txt.[neftet@tutanota.com].boom" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.fi.txt.[neftet@tutanota.com].boom")) returned 1 [0126.138] MoveFileW (lpExistingFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.fi_FI.txt" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.fi_fi.txt"), lpNewFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.fi_FI.txt.[neftet@tutanota.com].boom" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.fi_fi.txt.[neftet@tutanota.com].boom")) returned 1 [0126.142] MoveFileW (lpExistingFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.fi_FI_PREEURO.txt" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.fi_fi_preeuro.txt"), lpNewFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.fi_FI_PREEURO.txt.[neftet@tutanota.com].boom" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.fi_fi_preeuro.txt.[neftet@tutanota.com].boom")) returned 1 [0126.146] MoveFileW (lpExistingFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.fr_CA.txt" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.fr_ca.txt"), lpNewFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.fr_CA.txt.[neftet@tutanota.com].boom" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.fr_ca.txt.[neftet@tutanota.com].boom")) returned 1 [0126.151] MoveFileW (lpExistingFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.fr_FR.txt" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.fr_fr.txt"), lpNewFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.fr_FR.txt.[neftet@tutanota.com].boom" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.fr_fr.txt.[neftet@tutanota.com].boom")) returned 1 [0126.155] MoveFileW (lpExistingFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.fr_FR_PREEURO.txt" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.fr_fr_preeuro.txt"), lpNewFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.fr_FR_PREEURO.txt.[neftet@tutanota.com].boom" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.fr_fr_preeuro.txt.[neftet@tutanota.com].boom")) returned 1 [0126.160] MoveFileW (lpExistingFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.he.txt" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.he.txt"), lpNewFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.he.txt.[neftet@tutanota.com].boom" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.he.txt.[neftet@tutanota.com].boom")) returned 1 [0126.164] MoveFileW (lpExistingFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.he_IL.txt" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.he_il.txt"), lpNewFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.he_IL.txt.[neftet@tutanota.com].boom" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.he_il.txt.[neftet@tutanota.com].boom")) returned 1 [0126.167] MoveFileW (lpExistingFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.hr.txt" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.hr.txt"), lpNewFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.hr.txt.[neftet@tutanota.com].boom" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.hr.txt.[neftet@tutanota.com].boom")) returned 1 [0126.171] MoveFileW (lpExistingFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.hr_HR.txt" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.hr_hr.txt"), lpNewFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.hr_HR.txt.[neftet@tutanota.com].boom" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.hr_hr.txt.[neftet@tutanota.com].boom")) returned 1 [0126.175] MoveFileW (lpExistingFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.hu.txt" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.hu.txt"), lpNewFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.hu.txt.[neftet@tutanota.com].boom" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.hu.txt.[neftet@tutanota.com].boom")) returned 1 [0126.179] MoveFileW (lpExistingFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.hu_HU.txt" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.hu_hu.txt"), lpNewFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.hu_HU.txt.[neftet@tutanota.com].boom" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.hu_hu.txt.[neftet@tutanota.com].boom")) returned 1 [0126.183] MoveFileW (lpExistingFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.it.txt" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.it.txt"), lpNewFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.it.txt.[neftet@tutanota.com].boom" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.it.txt.[neftet@tutanota.com].boom")) returned 1 [0126.187] MoveFileW (lpExistingFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.it_CH.txt" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.it_ch.txt"), lpNewFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.it_CH.txt.[neftet@tutanota.com].boom" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.it_ch.txt.[neftet@tutanota.com].boom")) returned 1 [0126.191] MoveFileW (lpExistingFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.it_IT.txt" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.it_it.txt"), lpNewFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.it_IT.txt.[neftet@tutanota.com].boom" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.it_it.txt.[neftet@tutanota.com].boom")) returned 1 [0126.195] MoveFileW (lpExistingFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.it_IT_PREEURO.txt" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.it_it_preeuro.txt"), lpNewFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.it_IT_PREEURO.txt.[neftet@tutanota.com].boom" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.it_it_preeuro.txt.[neftet@tutanota.com].boom")) returned 1 [0126.199] MoveFileW (lpExistingFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.ja.txt" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.ja.txt"), lpNewFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.ja.txt.[neftet@tutanota.com].boom" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.ja.txt.[neftet@tutanota.com].boom")) returned 1 [0126.203] MoveFileW (lpExistingFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.ja_JP.txt" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.ja_jp.txt"), lpNewFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.ja_JP.txt.[neftet@tutanota.com].boom" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.ja_jp.txt.[neftet@tutanota.com].boom")) returned 1 [0126.207] MoveFileW (lpExistingFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.ja_JP_TRADITIONAL.txt" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.ja_jp_traditional.txt"), lpNewFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.ja_JP_TRADITIONAL.txt.[neftet@tutanota.com].boom" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.ja_jp_traditional.txt.[neftet@tutanota.com].boom")) returned 1 [0126.211] MoveFileW (lpExistingFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.ko.txt" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.ko.txt"), lpNewFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.ko.txt.[neftet@tutanota.com].boom" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.ko.txt.[neftet@tutanota.com].boom")) returned 1 [0126.217] MoveFileW (lpExistingFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.ko_KR.txt" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.ko_kr.txt"), lpNewFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.ko_KR.txt.[neftet@tutanota.com].boom" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.ko_kr.txt.[neftet@tutanota.com].boom")) returned 1 [0126.222] MoveFileW (lpExistingFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.lt.txt" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.lt.txt"), lpNewFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.lt.txt.[neftet@tutanota.com].boom" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.lt.txt.[neftet@tutanota.com].boom")) returned 1 [0126.226] MoveFileW (lpExistingFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.lt_LT.txt" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.lt_lt.txt"), lpNewFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.lt_LT.txt.[neftet@tutanota.com].boom" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.lt_lt.txt.[neftet@tutanota.com].boom")) returned 1 [0126.230] MoveFileW (lpExistingFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.lv.txt" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.lv.txt"), lpNewFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.lv.txt.[neftet@tutanota.com].boom" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.lv.txt.[neftet@tutanota.com].boom")) returned 1 [0126.234] MoveFileW (lpExistingFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.lv_LV.txt" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.lv_lv.txt"), lpNewFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.lv_LV.txt.[neftet@tutanota.com].boom" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.lv_lv.txt.[neftet@tutanota.com].boom")) returned 1 [0126.238] MoveFileW (lpExistingFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.nb.txt" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.nb.txt"), lpNewFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.nb.txt.[neftet@tutanota.com].boom" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.nb.txt.[neftet@tutanota.com].boom")) returned 1 [0126.243] MoveFileW (lpExistingFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.nb_NO.txt" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.nb_no.txt"), lpNewFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.nb_NO.txt.[neftet@tutanota.com].boom" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.nb_no.txt.[neftet@tutanota.com].boom")) returned 1 [0126.247] MoveFileW (lpExistingFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.nl.txt" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.nl.txt"), lpNewFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.nl.txt.[neftet@tutanota.com].boom" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.nl.txt.[neftet@tutanota.com].boom")) returned 1 [0126.251] MoveFileW (lpExistingFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.nl_BE.txt" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.nl_be.txt"), lpNewFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.nl_BE.txt.[neftet@tutanota.com].boom" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.nl_be.txt.[neftet@tutanota.com].boom")) returned 1 [0126.256] MoveFileW (lpExistingFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.nl_BE_PREEURO.txt" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.nl_be_preeuro.txt"), lpNewFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.nl_BE_PREEURO.txt.[neftet@tutanota.com].boom" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.nl_be_preeuro.txt.[neftet@tutanota.com].boom")) returned 1 [0126.260] MoveFileW (lpExistingFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.nl_NL.txt" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.nl_nl.txt"), lpNewFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.nl_NL.txt.[neftet@tutanota.com].boom" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.nl_nl.txt.[neftet@tutanota.com].boom")) returned 1 [0126.264] MoveFileW (lpExistingFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.nl_NL_PREEURO.txt" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.nl_nl_preeuro.txt"), lpNewFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.nl_NL_PREEURO.txt.[neftet@tutanota.com].boom" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.nl_nl_preeuro.txt.[neftet@tutanota.com].boom")) returned 1 [0126.333] MoveFileW (lpExistingFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.nn_NO.txt" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.nn_no.txt"), lpNewFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.nn_NO.txt.[neftet@tutanota.com].boom" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.nn_no.txt.[neftet@tutanota.com].boom")) returned 1 [0126.337] MoveFileW (lpExistingFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.pl.txt" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.pl.txt"), lpNewFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.pl.txt.[neftet@tutanota.com].boom" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.pl.txt.[neftet@tutanota.com].boom")) returned 1 [0126.341] MoveFileW (lpExistingFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.pl_PL.txt" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.pl_pl.txt"), lpNewFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.pl_PL.txt.[neftet@tutanota.com].boom" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.pl_pl.txt.[neftet@tutanota.com].boom")) returned 1 [0126.345] MoveFileW (lpExistingFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.pt_BR.txt" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.pt_br.txt"), lpNewFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.pt_BR.txt.[neftet@tutanota.com].boom" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.pt_br.txt.[neftet@tutanota.com].boom")) returned 1 [0126.349] MoveFileW (lpExistingFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.pt_PT.txt" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.pt_pt.txt"), lpNewFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.pt_PT.txt.[neftet@tutanota.com].boom" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.pt_pt.txt.[neftet@tutanota.com].boom")) returned 1 [0126.354] MoveFileW (lpExistingFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.pt_PT_PREEURO.txt" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.pt_pt_preeuro.txt"), lpNewFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.pt_PT_PREEURO.txt.[neftet@tutanota.com].boom" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.pt_pt_preeuro.txt.[neftet@tutanota.com].boom")) returned 1 [0126.358] MoveFileW (lpExistingFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.ro.txt" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.ro.txt"), lpNewFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.ro.txt.[neftet@tutanota.com].boom" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.ro.txt.[neftet@tutanota.com].boom")) returned 1 [0126.368] MoveFileW (lpExistingFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.ro_RO.txt" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.ro_ro.txt"), lpNewFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.ro_RO.txt.[neftet@tutanota.com].boom" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.ro_ro.txt.[neftet@tutanota.com].boom")) returned 1 [0126.383] MoveFileW (lpExistingFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.ru.txt" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.ru.txt"), lpNewFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.ru.txt.[neftet@tutanota.com].boom" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.ru.txt.[neftet@tutanota.com].boom")) returned 1 [0126.406] MoveFileW (lpExistingFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.ru_RU.txt" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.ru_ru.txt"), lpNewFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.ru_RU.txt.[neftet@tutanota.com].boom" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.ru_ru.txt.[neftet@tutanota.com].boom")) returned 1 [0126.411] MoveFileW (lpExistingFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.ru_UA.txt" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.ru_ua.txt"), lpNewFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.ru_UA.txt.[neftet@tutanota.com].boom" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.ru_ua.txt.[neftet@tutanota.com].boom")) returned 1 [0126.416] MoveFileW (lpExistingFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.sk.txt" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.sk.txt"), lpNewFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.sk.txt.[neftet@tutanota.com].boom" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.sk.txt.[neftet@tutanota.com].boom")) returned 1 [0126.420] MoveFileW (lpExistingFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.sk_SK.txt" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.sk_sk.txt"), lpNewFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.sk_SK.txt.[neftet@tutanota.com].boom" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.sk_sk.txt.[neftet@tutanota.com].boom")) returned 1 [0126.424] MoveFileW (lpExistingFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.sl.txt" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.sl.txt"), lpNewFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.sl.txt.[neftet@tutanota.com].boom" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.sl.txt.[neftet@tutanota.com].boom")) returned 1 [0126.428] MoveFileW (lpExistingFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.sl_SI.txt" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.sl_si.txt"), lpNewFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.sl_SI.txt.[neftet@tutanota.com].boom" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.sl_si.txt.[neftet@tutanota.com].boom")) returned 1 [0126.432] MoveFileW (lpExistingFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.sv.txt" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.sv.txt"), lpNewFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.sv.txt.[neftet@tutanota.com].boom" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.sv.txt.[neftet@tutanota.com].boom")) returned 1 [0126.436] MoveFileW (lpExistingFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.sv_FI.txt" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.sv_fi.txt"), lpNewFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.sv_FI.txt.[neftet@tutanota.com].boom" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.sv_fi.txt.[neftet@tutanota.com].boom")) returned 1 [0126.512] MoveFileW (lpExistingFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.sv_SE.txt" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.sv_se.txt"), lpNewFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.sv_SE.txt.[neftet@tutanota.com].boom" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.sv_se.txt.[neftet@tutanota.com].boom")) returned 1 [0126.517] MoveFileW (lpExistingFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.tr.txt" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.tr.txt"), lpNewFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.tr.txt.[neftet@tutanota.com].boom" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.tr.txt.[neftet@tutanota.com].boom")) returned 1 [0126.521] MoveFileW (lpExistingFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.tr_TR.txt" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.tr_tr.txt"), lpNewFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.tr_TR.txt.[neftet@tutanota.com].boom" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.tr_tr.txt.[neftet@tutanota.com].boom")) returned 1 [0126.525] MoveFileW (lpExistingFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.uk.txt" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.uk.txt"), lpNewFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.uk.txt.[neftet@tutanota.com].boom" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.uk.txt.[neftet@tutanota.com].boom")) returned 1 [0126.530] MoveFileW (lpExistingFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.uk_UA.txt" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.uk_ua.txt"), lpNewFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.uk_UA.txt.[neftet@tutanota.com].boom" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.uk_ua.txt.[neftet@tutanota.com].boom")) returned 1 [0126.534] MoveFileW (lpExistingFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.zh_CN.txt" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.zh_cn.txt"), lpNewFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.zh_CN.txt.[neftet@tutanota.com].boom" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.zh_cn.txt.[neftet@tutanota.com].boom")) returned 1 [0126.538] MoveFileW (lpExistingFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.zh_TW.txt" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.zh_tw.txt"), lpNewFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.zh_TW.txt.[neftet@tutanota.com].boom" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.zh_tw.txt.[neftet@tutanota.com].boom")) returned 1 [0126.542] MoveFileW (lpExistingFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.zh_TW_STROKE.txt" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.zh_tw_stroke.txt"), lpNewFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\Linguistics\\LanguageNames2\\DisplayLanguageNames.zh_TW_STROKE.txt.[neftet@tutanota.com].boom" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\linguistics\\languagenames2\\displaylanguagenames.zh_tw_stroke.txt.[neftet@tutanota.com].boom")) returned 1 [0126.593] MoveFileW (lpExistingFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\TypeSupport\\Unicode\\Mappings\\Adobe\\HKSCS.txt" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\typesupport\\unicode\\mappings\\adobe\\hkscs.txt"), lpNewFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\TypeSupport\\Unicode\\Mappings\\Adobe\\HKSCS.txt.[neftet@tutanota.com].boom" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\typesupport\\unicode\\mappings\\adobe\\hkscs.txt.[neftet@tutanota.com].boom")) returned 1 [0126.608] MoveFileW (lpExistingFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\TypeSupport\\Unicode\\Mappings\\Adobe\\Japanese83pv.txt" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\typesupport\\unicode\\mappings\\adobe\\japanese83pv.txt"), lpNewFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\TypeSupport\\Unicode\\Mappings\\Adobe\\Japanese83pv.txt.[neftet@tutanota.com].boom" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\typesupport\\unicode\\mappings\\adobe\\japanese83pv.txt.[neftet@tutanota.com].boom")) returned 1 [0126.616] MoveFileW (lpExistingFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\TypeSupport\\Unicode\\Mappings\\Adobe\\JISX0208.txt" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\typesupport\\unicode\\mappings\\adobe\\jisx0208.txt"), lpNewFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\TypeSupport\\Unicode\\Mappings\\Adobe\\JISX0208.txt.[neftet@tutanota.com].boom" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\typesupport\\unicode\\mappings\\adobe\\jisx0208.txt.[neftet@tutanota.com].boom")) returned 1 [0126.627] MoveFileW (lpExistingFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\TypeSupport\\Unicode\\Mappings\\Adobe\\JISX0213.txt" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\typesupport\\unicode\\mappings\\adobe\\jisx0213.txt"), lpNewFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\TypeSupport\\Unicode\\Mappings\\Adobe\\JISX0213.txt.[neftet@tutanota.com].boom" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\typesupport\\unicode\\mappings\\adobe\\jisx0213.txt.[neftet@tutanota.com].boom")) returned 1 [0126.630] MoveFileW (lpExistingFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\TypeSupport\\Unicode\\Mappings\\Adobe\\symbol.txt" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\typesupport\\unicode\\mappings\\adobe\\symbol.txt"), lpNewFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\TypeSupport\\Unicode\\Mappings\\Adobe\\symbol.txt.[neftet@tutanota.com].boom" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\typesupport\\unicode\\mappings\\adobe\\symbol.txt.[neftet@tutanota.com].boom")) returned 1 [0126.633] MoveFileW (lpExistingFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\TypeSupport\\Unicode\\Mappings\\Adobe\\zdingbat.txt" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\typesupport\\unicode\\mappings\\adobe\\zdingbat.txt"), lpNewFileName="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Resource\\TypeSupport\\Unicode\\Mappings\\Adobe\\zdingbat.txt.[neftet@tutanota.com].boom" (normalized: "c:\\program files (x86)\\adobe\\reader 10.0\\resource\\typesupport\\unicode\\mappings\\adobe\\zdingbat.txt.[neftet@tutanota.com].boom")) returned 1 [0126.657] MoveFileW (lpExistingFileName="C:\\Program Files (x86)\\Common Files\\Java\\Java Update\\task.xml" (normalized: "c:\\program files (x86)\\common files\\java\\java update\\task.xml"), lpNewFileName="C:\\Program Files (x86)\\Common Files\\Java\\Java Update\\task.xml.[neftet@tutanota.com].boom" (normalized: "c:\\program files (x86)\\common files\\java\\java update\\task.xml.[neftet@tutanota.com].boom")) returned 1 [0126.662] MoveFileW (lpExistingFileName="C:\\Program Files (x86)\\Common Files\\Java\\Java Update\\task64.xml" (normalized: "c:\\program files (x86)\\common files\\java\\java update\\task64.xml"), lpNewFileName="C:\\Program Files (x86)\\Common Files\\Java\\Java Update\\task64.xml.[neftet@tutanota.com].boom" (normalized: "c:\\program files (x86)\\common files\\java\\java update\\task64.xml.[neftet@tutanota.com].boom")) returned 1 [0126.712] MoveFileW (lpExistingFileName="C:\\Program Files (x86)\\Google\\Chrome\\Application\\chrome.VisualElementsManifest.xml" (normalized: "c:\\program files (x86)\\google\\chrome\\application\\chrome.visualelementsmanifest.xml"), lpNewFileName="C:\\Program Files (x86)\\Google\\Chrome\\Application\\chrome.VisualElementsManifest.xml.[neftet@tutanota.com].boom" (normalized: "c:\\program files (x86)\\google\\chrome\\application\\chrome.visualelementsmanifest.xml.[neftet@tutanota.com].boom")) returned 1 [0126.725] MoveFileW (lpExistingFileName="C:\\Program Files (x86)\\Google\\Chrome\\Application\\58.0.3029.110\\VisualElements\\logo.png" (normalized: "c:\\program files (x86)\\google\\chrome\\application\\58.0.3029.110\\visualelements\\logo.png"), lpNewFileName="C:\\Program Files (x86)\\Google\\Chrome\\Application\\58.0.3029.110\\VisualElements\\logo.png.[neftet@tutanota.com].boom" (normalized: "c:\\program files (x86)\\google\\chrome\\application\\58.0.3029.110\\visualelements\\logo.png.[neftet@tutanota.com].boom")) returned 1 [0126.729] MoveFileW (lpExistingFileName="C:\\Program Files (x86)\\Google\\Chrome\\Application\\58.0.3029.110\\VisualElements\\logocanary.png" (normalized: "c:\\program files (x86)\\google\\chrome\\application\\58.0.3029.110\\visualelements\\logocanary.png"), lpNewFileName="C:\\Program Files (x86)\\Google\\Chrome\\Application\\58.0.3029.110\\VisualElements\\logocanary.png.[neftet@tutanota.com].boom" (normalized: "c:\\program files (x86)\\google\\chrome\\application\\58.0.3029.110\\visualelements\\logocanary.png.[neftet@tutanota.com].boom")) returned 1 [0126.732] MoveFileW (lpExistingFileName="C:\\Program Files (x86)\\Google\\Chrome\\Application\\58.0.3029.110\\VisualElements\\smalllogo.png" (normalized: "c:\\program files (x86)\\google\\chrome\\application\\58.0.3029.110\\visualelements\\smalllogo.png"), lpNewFileName="C:\\Program Files (x86)\\Google\\Chrome\\Application\\58.0.3029.110\\VisualElements\\smalllogo.png.[neftet@tutanota.com].boom" (normalized: "c:\\program files (x86)\\google\\chrome\\application\\58.0.3029.110\\visualelements\\smalllogo.png.[neftet@tutanota.com].boom")) returned 1 [0126.735] MoveFileW (lpExistingFileName="C:\\Program Files (x86)\\Google\\Chrome\\Application\\58.0.3029.110\\VisualElements\\smalllogocanary.png" (normalized: "c:\\program files (x86)\\google\\chrome\\application\\58.0.3029.110\\visualelements\\smalllogocanary.png"), lpNewFileName="C:\\Program Files (x86)\\Google\\Chrome\\Application\\58.0.3029.110\\VisualElements\\smalllogocanary.png.[neftet@tutanota.com].boom" (normalized: "c:\\program files (x86)\\google\\chrome\\application\\58.0.3029.110\\visualelements\\smalllogocanary.png.[neftet@tutanota.com].boom")) returned 1 [0126.741] MoveFileW (lpExistingFileName="C:\\Program Files (x86)\\Java\\jre7\\README.txt" (normalized: "c:\\program files (x86)\\java\\jre7\\readme.txt"), lpNewFileName="C:\\Program Files (x86)\\Java\\jre7\\README.txt.[neftet@tutanota.com].boom" (normalized: "c:\\program files (x86)\\java\\jre7\\readme.txt.[neftet@tutanota.com].boom")) returned 1 [0126.749] MoveFileW (lpExistingFileName="C:\\Program Files (x86)\\Java\\jre7\\THIRDPARTYLICENSEREADME-JAVAFX.txt" (normalized: "c:\\program files (x86)\\java\\jre7\\thirdpartylicensereadme-javafx.txt"), lpNewFileName="C:\\Program Files (x86)\\Java\\jre7\\THIRDPARTYLICENSEREADME-JAVAFX.txt.[neftet@tutanota.com].boom" (normalized: "c:\\program files (x86)\\java\\jre7\\thirdpartylicensereadme-javafx.txt.[neftet@tutanota.com].boom")) returned 1 [0126.759] MoveFileW (lpExistingFileName="C:\\Program Files (x86)\\Java\\jre7\\THIRDPARTYLICENSEREADME.txt" (normalized: "c:\\program files (x86)\\java\\jre7\\thirdpartylicensereadme.txt"), lpNewFileName="C:\\Program Files (x86)\\Java\\jre7\\THIRDPARTYLICENSEREADME.txt.[neftet@tutanota.com].boom" (normalized: "c:\\program files (x86)\\java\\jre7\\thirdpartylicensereadme.txt.[neftet@tutanota.com].boom")) returned 1 [0126.762] MoveFileW (lpExistingFileName="C:\\Program Files (x86)\\Java\\jre7\\Welcome.html" (normalized: "c:\\program files (x86)\\java\\jre7\\welcome.html"), lpNewFileName="C:\\Program Files (x86)\\Java\\jre7\\Welcome.html.[neftet@tutanota.com].boom" (normalized: "c:\\program files (x86)\\java\\jre7\\welcome.html.[neftet@tutanota.com].boom")) returned 1 [0126.765] MoveFileW (lpExistingFileName="C:\\Program Files (x86)\\Java\\jre7\\bin\\client\\Xusage.txt" (normalized: "c:\\program files (x86)\\java\\jre7\\bin\\client\\xusage.txt"), lpNewFileName="C:\\Program Files (x86)\\Java\\jre7\\bin\\client\\Xusage.txt.[neftet@tutanota.com].boom" (normalized: "c:\\program files (x86)\\java\\jre7\\bin\\client\\xusage.txt.[neftet@tutanota.com].boom")) returned 1 [0126.769] MoveFileW (lpExistingFileName="C:\\Program Files (x86)\\Java\\jre7\\lib\\jvm.hprof.txt" (normalized: "c:\\program files (x86)\\java\\jre7\\lib\\jvm.hprof.txt"), lpNewFileName="C:\\Program Files (x86)\\Java\\jre7\\lib\\jvm.hprof.txt.[neftet@tutanota.com].boom" (normalized: "c:\\program files (x86)\\java\\jre7\\lib\\jvm.hprof.txt.[neftet@tutanota.com].boom")) returned 1 [0126.773] MoveFileW (lpExistingFileName="C:\\Program Files (x86)\\Java\\jre7\\lib\\deploy\\ffjcext.zip" (normalized: "c:\\program files (x86)\\java\\jre7\\lib\\deploy\\ffjcext.zip"), lpNewFileName="C:\\Program Files (x86)\\Java\\jre7\\lib\\deploy\\ffjcext.zip.[neftet@tutanota.com].boom" (normalized: "c:\\program files (x86)\\java\\jre7\\lib\\deploy\\ffjcext.zip.[neftet@tutanota.com].boom")) returned 1 [0126.830] MoveFileW (lpExistingFileName="C:\\Program Files (x86)\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates\\CSharp\\1033\\AboutBox.zip" (normalized: "c:\\program files (x86)\\microsoft visual studio 8\\common7\\ide\\vsta\\itemtemplates\\csharp\\1033\\aboutbox.zip"), lpNewFileName="C:\\Program Files (x86)\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates\\CSharp\\1033\\AboutBox.zip.[neftet@tutanota.com].boom" (normalized: "c:\\program files (x86)\\microsoft visual studio 8\\common7\\ide\\vsta\\itemtemplates\\csharp\\1033\\aboutbox.zip.[neftet@tutanota.com].boom")) returned 1 [0126.833] MoveFileW (lpExistingFileName="C:\\Program Files (x86)\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates\\CSharp\\1033\\AppConfig.zip" (normalized: "c:\\program files (x86)\\microsoft visual studio 8\\common7\\ide\\vsta\\itemtemplates\\csharp\\1033\\appconfig.zip"), lpNewFileName="C:\\Program Files (x86)\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates\\CSharp\\1033\\AppConfig.zip.[neftet@tutanota.com].boom" (normalized: "c:\\program files (x86)\\microsoft visual studio 8\\common7\\ide\\vsta\\itemtemplates\\csharp\\1033\\appconfig.zip.[neftet@tutanota.com].boom")) returned 1 [0126.841] MoveFileW (lpExistingFileName="C:\\Program Files (x86)\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates\\CSharp\\1033\\AppConfigInternal.zip" (normalized: "c:\\program files (x86)\\microsoft visual studio 8\\common7\\ide\\vsta\\itemtemplates\\csharp\\1033\\appconfiginternal.zip"), lpNewFileName="C:\\Program Files (x86)\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates\\CSharp\\1033\\AppConfigInternal.zip.[neftet@tutanota.com].boom" (normalized: "c:\\program files (x86)\\microsoft visual studio 8\\common7\\ide\\vsta\\itemtemplates\\csharp\\1033\\appconfiginternal.zip.[neftet@tutanota.com].boom")) returned 1 [0126.844] MoveFileW (lpExistingFileName="C:\\Program Files (x86)\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates\\CSharp\\1033\\AssemblyInfo.zip" (normalized: "c:\\program files (x86)\\microsoft visual studio 8\\common7\\ide\\vsta\\itemtemplates\\csharp\\1033\\assemblyinfo.zip"), lpNewFileName="C:\\Program Files (x86)\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates\\CSharp\\1033\\AssemblyInfo.zip.[neftet@tutanota.com].boom" (normalized: "c:\\program files (x86)\\microsoft visual studio 8\\common7\\ide\\vsta\\itemtemplates\\csharp\\1033\\assemblyinfo.zip.[neftet@tutanota.com].boom")) returned 1 [0126.847] MoveFileW (lpExistingFileName="C:\\Program Files (x86)\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates\\CSharp\\1033\\AssemblyInfoInternal.zip" (normalized: "c:\\program files (x86)\\microsoft visual studio 8\\common7\\ide\\vsta\\itemtemplates\\csharp\\1033\\assemblyinfointernal.zip"), lpNewFileName="C:\\Program Files (x86)\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates\\CSharp\\1033\\AssemblyInfoInternal.zip.[neftet@tutanota.com].boom" (normalized: "c:\\program files (x86)\\microsoft visual studio 8\\common7\\ide\\vsta\\itemtemplates\\csharp\\1033\\assemblyinfointernal.zip.[neftet@tutanota.com].boom")) returned 1 [0126.849] MoveFileW (lpExistingFileName="C:\\Program Files (x86)\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates\\CSharp\\1033\\Class.zip" (normalized: "c:\\program files (x86)\\microsoft visual studio 8\\common7\\ide\\vsta\\itemtemplates\\csharp\\1033\\class.zip"), lpNewFileName="C:\\Program Files (x86)\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates\\CSharp\\1033\\Class.zip.[neftet@tutanota.com].boom" (normalized: "c:\\program files (x86)\\microsoft visual studio 8\\common7\\ide\\vsta\\itemtemplates\\csharp\\1033\\class.zip.[neftet@tutanota.com].boom")) returned 1 [0126.853] MoveFileW (lpExistingFileName="C:\\Program Files (x86)\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates\\CSharp\\1033\\CodeFile.zip" (normalized: "c:\\program files (x86)\\microsoft visual studio 8\\common7\\ide\\vsta\\itemtemplates\\csharp\\1033\\codefile.zip"), lpNewFileName="C:\\Program Files (x86)\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates\\CSharp\\1033\\CodeFile.zip.[neftet@tutanota.com].boom" (normalized: "c:\\program files (x86)\\microsoft visual studio 8\\common7\\ide\\vsta\\itemtemplates\\csharp\\1033\\codefile.zip.[neftet@tutanota.com].boom")) returned 1 [0126.857] MoveFileW (lpExistingFileName="C:\\Program Files (x86)\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates\\CSharp\\1033\\DataSet.zip" (normalized: "c:\\program files (x86)\\microsoft visual studio 8\\common7\\ide\\vsta\\itemtemplates\\csharp\\1033\\dataset.zip"), lpNewFileName="C:\\Program Files (x86)\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates\\CSharp\\1033\\DataSet.zip.[neftet@tutanota.com].boom" (normalized: "c:\\program files (x86)\\microsoft visual studio 8\\common7\\ide\\vsta\\itemtemplates\\csharp\\1033\\dataset.zip.[neftet@tutanota.com].boom")) returned 1 [0126.860] MoveFileW (lpExistingFileName="C:\\Program Files (x86)\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates\\CSharp\\1033\\EmptyDatabase.zip" (normalized: "c:\\program files (x86)\\microsoft visual studio 8\\common7\\ide\\vsta\\itemtemplates\\csharp\\1033\\emptydatabase.zip"), lpNewFileName="C:\\Program Files (x86)\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates\\CSharp\\1033\\EmptyDatabase.zip.[neftet@tutanota.com].boom" (normalized: "c:\\program files (x86)\\microsoft visual studio 8\\common7\\ide\\vsta\\itemtemplates\\csharp\\1033\\emptydatabase.zip.[neftet@tutanota.com].boom")) returned 1 [0126.863] MoveFileW (lpExistingFileName="C:\\Program Files (x86)\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates\\CSharp\\1033\\Form.zip" (normalized: "c:\\program files (x86)\\microsoft visual studio 8\\common7\\ide\\vsta\\itemtemplates\\csharp\\1033\\form.zip"), lpNewFileName="C:\\Program Files (x86)\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates\\CSharp\\1033\\Form.zip.[neftet@tutanota.com].boom" (normalized: "c:\\program files (x86)\\microsoft visual studio 8\\common7\\ide\\vsta\\itemtemplates\\csharp\\1033\\form.zip.[neftet@tutanota.com].boom")) returned 1 [0126.866] MoveFileW (lpExistingFileName="C:\\Program Files (x86)\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates\\CSharp\\1033\\Interface.zip" (normalized: "c:\\program files (x86)\\microsoft visual studio 8\\common7\\ide\\vsta\\itemtemplates\\csharp\\1033\\interface.zip"), lpNewFileName="C:\\Program Files (x86)\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates\\CSharp\\1033\\Interface.zip.[neftet@tutanota.com].boom" (normalized: "c:\\program files (x86)\\microsoft visual studio 8\\common7\\ide\\vsta\\itemtemplates\\csharp\\1033\\interface.zip.[neftet@tutanota.com].boom")) returned 1 [0126.870] MoveFileW (lpExistingFileName="C:\\Program Files (x86)\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates\\CSharp\\1033\\MDIParent.zip" (normalized: "c:\\program files (x86)\\microsoft visual studio 8\\common7\\ide\\vsta\\itemtemplates\\csharp\\1033\\mdiparent.zip"), lpNewFileName="C:\\Program Files (x86)\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates\\CSharp\\1033\\MDIParent.zip.[neftet@tutanota.com].boom" (normalized: "c:\\program files (x86)\\microsoft visual studio 8\\common7\\ide\\vsta\\itemtemplates\\csharp\\1033\\mdiparent.zip.[neftet@tutanota.com].boom")) returned 1 [0126.874] MoveFileW (lpExistingFileName="C:\\Program Files (x86)\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates\\CSharp\\1033\\Resource.zip" (normalized: "c:\\program files (x86)\\microsoft visual studio 8\\common7\\ide\\vsta\\itemtemplates\\csharp\\1033\\resource.zip"), lpNewFileName="C:\\Program Files (x86)\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates\\CSharp\\1033\\Resource.zip.[neftet@tutanota.com].boom" (normalized: "c:\\program files (x86)\\microsoft visual studio 8\\common7\\ide\\vsta\\itemtemplates\\csharp\\1033\\resource.zip.[neftet@tutanota.com].boom")) returned 1 [0127.147] MoveFileW (lpExistingFileName="C:\\Program Files (x86)\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates\\CSharp\\1033\\ResourceInternal.zip" (normalized: "c:\\program files (x86)\\microsoft visual studio 8\\common7\\ide\\vsta\\itemtemplates\\csharp\\1033\\resourceinternal.zip"), lpNewFileName="C:\\Program Files (x86)\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates\\CSharp\\1033\\ResourceInternal.zip.[neftet@tutanota.com].boom" (normalized: "c:\\program files (x86)\\microsoft visual studio 8\\common7\\ide\\vsta\\itemtemplates\\csharp\\1033\\resourceinternal.zip.[neftet@tutanota.com].boom")) returned 1 [0127.150] MoveFileW (lpExistingFileName="C:\\Program Files (x86)\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates\\CSharp\\1033\\Settings.zip" (normalized: "c:\\program files (x86)\\microsoft visual studio 8\\common7\\ide\\vsta\\itemtemplates\\csharp\\1033\\settings.zip"), lpNewFileName="C:\\Program Files (x86)\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates\\CSharp\\1033\\Settings.zip.[neftet@tutanota.com].boom" (normalized: "c:\\program files (x86)\\microsoft visual studio 8\\common7\\ide\\vsta\\itemtemplates\\csharp\\1033\\settings.zip.[neftet@tutanota.com].boom")) returned 1 [0127.153] MoveFileW (lpExistingFileName="C:\\Program Files (x86)\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates\\CSharp\\1033\\SettingsInternal.zip" (normalized: "c:\\program files (x86)\\microsoft visual studio 8\\common7\\ide\\vsta\\itemtemplates\\csharp\\1033\\settingsinternal.zip"), lpNewFileName="C:\\Program Files (x86)\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates\\CSharp\\1033\\SettingsInternal.zip.[neftet@tutanota.com].boom" (normalized: "c:\\program files (x86)\\microsoft visual studio 8\\common7\\ide\\vsta\\itemtemplates\\csharp\\1033\\settingsinternal.zip.[neftet@tutanota.com].boom")) returned 1 [0127.156] MoveFileW (lpExistingFileName="C:\\Program Files (x86)\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates\\CSharp\\1033\\TextFile.zip" (normalized: "c:\\program files (x86)\\microsoft visual studio 8\\common7\\ide\\vsta\\itemtemplates\\csharp\\1033\\textfile.zip"), lpNewFileName="C:\\Program Files (x86)\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates\\CSharp\\1033\\TextFile.zip.[neftet@tutanota.com].boom" (normalized: "c:\\program files (x86)\\microsoft visual studio 8\\common7\\ide\\vsta\\itemtemplates\\csharp\\1033\\textfile.zip.[neftet@tutanota.com].boom")) returned 1 [0127.161] MoveFileW (lpExistingFileName="C:\\Program Files (x86)\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates\\CSharp\\1033\\UserControl.zip" (normalized: "c:\\program files (x86)\\microsoft visual studio 8\\common7\\ide\\vsta\\itemtemplates\\csharp\\1033\\usercontrol.zip"), lpNewFileName="C:\\Program Files (x86)\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates\\CSharp\\1033\\UserControl.zip.[neftet@tutanota.com].boom" (normalized: "c:\\program files (x86)\\microsoft visual studio 8\\common7\\ide\\vsta\\itemtemplates\\csharp\\1033\\usercontrol.zip.[neftet@tutanota.com].boom")) returned 1 [0127.164] MoveFileW (lpExistingFileName="C:\\Program Files (x86)\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates\\CSharp\\1033\\Visualizer.zip" (normalized: "c:\\program files (x86)\\microsoft visual studio 8\\common7\\ide\\vsta\\itemtemplates\\csharp\\1033\\visualizer.zip"), lpNewFileName="C:\\Program Files (x86)\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates\\CSharp\\1033\\Visualizer.zip.[neftet@tutanota.com].boom" (normalized: "c:\\program files (x86)\\microsoft visual studio 8\\common7\\ide\\vsta\\itemtemplates\\csharp\\1033\\visualizer.zip.[neftet@tutanota.com].boom")) returned 1 [0127.166] MoveFileW (lpExistingFileName="C:\\Program Files (x86)\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates\\CSharp\\1033\\XmlFile.zip" (normalized: "c:\\program files (x86)\\microsoft visual studio 8\\common7\\ide\\vsta\\itemtemplates\\csharp\\1033\\xmlfile.zip"), lpNewFileName="C:\\Program Files (x86)\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates\\CSharp\\1033\\XmlFile.zip.[neftet@tutanota.com].boom" (normalized: "c:\\program files (x86)\\microsoft visual studio 8\\common7\\ide\\vsta\\itemtemplates\\csharp\\1033\\xmlfile.zip.[neftet@tutanota.com].boom")) returned 1 [0127.172] MoveFileW (lpExistingFileName="C:\\Program Files (x86)\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates\\VisualBasic\\1033\\AppConfigurationInternal.zip" (normalized: "c:\\program files (x86)\\microsoft visual studio 8\\common7\\ide\\vsta\\itemtemplates\\visualbasic\\1033\\appconfigurationinternal.zip"), lpNewFileName="C:\\Program Files (x86)\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates\\VisualBasic\\1033\\AppConfigurationInternal.zip.[neftet@tutanota.com].boom" (normalized: "c:\\program files (x86)\\microsoft visual studio 8\\common7\\ide\\vsta\\itemtemplates\\visualbasic\\1033\\appconfigurationinternal.zip.[neftet@tutanota.com].boom")) returned 1 [0127.175] MoveFileW (lpExistingFileName="C:\\Program Files (x86)\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates\\VisualBasic\\1033\\AssemblyInfoInternal.zip" (normalized: "c:\\program files (x86)\\microsoft visual studio 8\\common7\\ide\\vsta\\itemtemplates\\visualbasic\\1033\\assemblyinfointernal.zip"), lpNewFileName="C:\\Program Files (x86)\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates\\VisualBasic\\1033\\AssemblyInfoInternal.zip.[neftet@tutanota.com].boom" (normalized: "c:\\program files (x86)\\microsoft visual studio 8\\common7\\ide\\vsta\\itemtemplates\\visualbasic\\1033\\assemblyinfointernal.zip.[neftet@tutanota.com].boom")) returned 1 [0127.178] MoveFileW (lpExistingFileName="C:\\Program Files (x86)\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates\\VisualBasic\\1033\\Class.zip" (normalized: "c:\\program files (x86)\\microsoft visual studio 8\\common7\\ide\\vsta\\itemtemplates\\visualbasic\\1033\\class.zip"), lpNewFileName="C:\\Program Files (x86)\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates\\VisualBasic\\1033\\Class.zip.[neftet@tutanota.com].boom" (normalized: "c:\\program files (x86)\\microsoft visual studio 8\\common7\\ide\\vsta\\itemtemplates\\visualbasic\\1033\\class.zip.[neftet@tutanota.com].boom")) returned 1 [0127.185] MoveFileW (lpExistingFileName="C:\\Program Files (x86)\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates\\VisualBasic\\1033\\Dataset.zip" (normalized: "c:\\program files (x86)\\microsoft visual studio 8\\common7\\ide\\vsta\\itemtemplates\\visualbasic\\1033\\dataset.zip"), lpNewFileName="C:\\Program Files (x86)\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates\\VisualBasic\\1033\\Dataset.zip.[neftet@tutanota.com].boom" (normalized: "c:\\program files (x86)\\microsoft visual studio 8\\common7\\ide\\vsta\\itemtemplates\\visualbasic\\1033\\dataset.zip.[neftet@tutanota.com].boom")) returned 1 [0127.193] MoveFileW (lpExistingFileName="C:\\Program Files (x86)\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates\\VisualBasic\\1033\\Dialog.zip" (normalized: "c:\\program files (x86)\\microsoft visual studio 8\\common7\\ide\\vsta\\itemtemplates\\visualbasic\\1033\\dialog.zip"), lpNewFileName="C:\\Program Files (x86)\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates\\VisualBasic\\1033\\Dialog.zip.[neftet@tutanota.com].boom" (normalized: "c:\\program files (x86)\\microsoft visual studio 8\\common7\\ide\\vsta\\itemtemplates\\visualbasic\\1033\\dialog.zip.[neftet@tutanota.com].boom")) returned 1 [0127.206] MoveFileW (lpExistingFileName="C:\\Program Files (x86)\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates\\VisualBasic\\1033\\EmptyDatabase.zip" (normalized: "c:\\program files (x86)\\microsoft visual studio 8\\common7\\ide\\vsta\\itemtemplates\\visualbasic\\1033\\emptydatabase.zip"), lpNewFileName="C:\\Program Files (x86)\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates\\VisualBasic\\1033\\EmptyDatabase.zip.[neftet@tutanota.com].boom" (normalized: "c:\\program files (x86)\\microsoft visual studio 8\\common7\\ide\\vsta\\itemtemplates\\visualbasic\\1033\\emptydatabase.zip.[neftet@tutanota.com].boom")) returned 1 [0127.209] MoveFileW (lpExistingFileName="C:\\Program Files (x86)\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates\\VisualBasic\\1033\\Explorer.zip" (normalized: "c:\\program files (x86)\\microsoft visual studio 8\\common7\\ide\\vsta\\itemtemplates\\visualbasic\\1033\\explorer.zip"), lpNewFileName="C:\\Program Files (x86)\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates\\VisualBasic\\1033\\Explorer.zip.[neftet@tutanota.com].boom" (normalized: "c:\\program files (x86)\\microsoft visual studio 8\\common7\\ide\\vsta\\itemtemplates\\visualbasic\\1033\\explorer.zip.[neftet@tutanota.com].boom")) returned 1 [0127.212] MoveFileW (lpExistingFileName="C:\\Program Files (x86)\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates\\VisualBasic\\1033\\Form.zip" (normalized: "c:\\program files (x86)\\microsoft visual studio 8\\common7\\ide\\vsta\\itemtemplates\\visualbasic\\1033\\form.zip"), lpNewFileName="C:\\Program Files (x86)\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates\\VisualBasic\\1033\\Form.zip.[neftet@tutanota.com].boom" (normalized: "c:\\program files (x86)\\microsoft visual studio 8\\common7\\ide\\vsta\\itemtemplates\\visualbasic\\1033\\form.zip.[neftet@tutanota.com].boom")) returned 1 [0127.221] MoveFileW (lpExistingFileName="C:\\Program Files (x86)\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates\\VisualBasic\\1033\\LoginForm.zip" (normalized: "c:\\program files (x86)\\microsoft visual studio 8\\common7\\ide\\vsta\\itemtemplates\\visualbasic\\1033\\loginform.zip"), lpNewFileName="C:\\Program Files (x86)\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates\\VisualBasic\\1033\\LoginForm.zip.[neftet@tutanota.com].boom" (normalized: "c:\\program files (x86)\\microsoft visual studio 8\\common7\\ide\\vsta\\itemtemplates\\visualbasic\\1033\\loginform.zip.[neftet@tutanota.com].boom")) returned 1 [0127.224] MoveFileW (lpExistingFileName="C:\\Program Files (x86)\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates\\VisualBasic\\1033\\MDIParent.zip" (normalized: "c:\\program files (x86)\\microsoft visual studio 8\\common7\\ide\\vsta\\itemtemplates\\visualbasic\\1033\\mdiparent.zip"), lpNewFileName="C:\\Program Files (x86)\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates\\VisualBasic\\1033\\MDIParent.zip.[neftet@tutanota.com].boom" (normalized: "c:\\program files (x86)\\microsoft visual studio 8\\common7\\ide\\vsta\\itemtemplates\\visualbasic\\1033\\mdiparent.zip.[neftet@tutanota.com].boom")) returned 1 [0127.227] MoveFileW (lpExistingFileName="C:\\Program Files (x86)\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates\\VisualBasic\\1033\\Module.zip" (normalized: "c:\\program files (x86)\\microsoft visual studio 8\\common7\\ide\\vsta\\itemtemplates\\visualbasic\\1033\\module.zip"), lpNewFileName="C:\\Program Files (x86)\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates\\VisualBasic\\1033\\Module.zip.[neftet@tutanota.com].boom" (normalized: "c:\\program files (x86)\\microsoft visual studio 8\\common7\\ide\\vsta\\itemtemplates\\visualbasic\\1033\\module.zip.[neftet@tutanota.com].boom")) returned 1 [0127.233] MoveFileW (lpExistingFileName="C:\\Program Files (x86)\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates\\VisualBasic\\1033\\ResourceInternal.zip" (normalized: "c:\\program files (x86)\\microsoft visual studio 8\\common7\\ide\\vsta\\itemtemplates\\visualbasic\\1033\\resourceinternal.zip"), lpNewFileName="C:\\Program Files (x86)\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates\\VisualBasic\\1033\\ResourceInternal.zip.[neftet@tutanota.com].boom" (normalized: "c:\\program files (x86)\\microsoft visual studio 8\\common7\\ide\\vsta\\itemtemplates\\visualbasic\\1033\\resourceinternal.zip.[neftet@tutanota.com].boom")) returned 1 [0127.236] MoveFileW (lpExistingFileName="C:\\Program Files (x86)\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates\\VisualBasic\\1033\\SettingsInternal.zip" (normalized: "c:\\program files (x86)\\microsoft visual studio 8\\common7\\ide\\vsta\\itemtemplates\\visualbasic\\1033\\settingsinternal.zip"), lpNewFileName="C:\\Program Files (x86)\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates\\VisualBasic\\1033\\SettingsInternal.zip.[neftet@tutanota.com].boom" (normalized: "c:\\program files (x86)\\microsoft visual studio 8\\common7\\ide\\vsta\\itemtemplates\\visualbasic\\1033\\settingsinternal.zip.[neftet@tutanota.com].boom")) returned 1 [0127.241] MoveFileW (lpExistingFileName="C:\\Program Files (x86)\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates\\VisualBasic\\1033\\SplashScreen.zip" (normalized: "c:\\program files (x86)\\microsoft visual studio 8\\common7\\ide\\vsta\\itemtemplates\\visualbasic\\1033\\splashscreen.zip"), lpNewFileName="C:\\Program Files (x86)\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates\\VisualBasic\\1033\\SplashScreen.zip.[neftet@tutanota.com].boom" (normalized: "c:\\program files (x86)\\microsoft visual studio 8\\common7\\ide\\vsta\\itemtemplates\\visualbasic\\1033\\splashscreen.zip.[neftet@tutanota.com].boom")) returned 1 [0127.244] MoveFileW (lpExistingFileName="C:\\Program Files (x86)\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates\\VisualBasic\\1033\\Text.zip" (normalized: "c:\\program files (x86)\\microsoft visual studio 8\\common7\\ide\\vsta\\itemtemplates\\visualbasic\\1033\\text.zip"), lpNewFileName="C:\\Program Files (x86)\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates\\VisualBasic\\1033\\Text.zip.[neftet@tutanota.com].boom" (normalized: "c:\\program files (x86)\\microsoft visual studio 8\\common7\\ide\\vsta\\itemtemplates\\visualbasic\\1033\\text.zip.[neftet@tutanota.com].boom")) returned 1 [0127.247] MoveFileW (lpExistingFileName="C:\\Program Files (x86)\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates\\VisualBasic\\1033\\UserControl.zip" (normalized: "c:\\program files (x86)\\microsoft visual studio 8\\common7\\ide\\vsta\\itemtemplates\\visualbasic\\1033\\usercontrol.zip"), lpNewFileName="C:\\Program Files (x86)\\Microsoft Visual Studio 8\\Common7\\IDE\\VSTA\\ItemTemplates\\VisualBasic\\1033\\UserControl.zip.[neftet@tutanota.com].boom" (normalized: "c:\\program files (x86)\\microsoft visual studio 8\\common7\\ide\\vsta\\itemtemplates\\visualbasic\\1033\\usercontrol.zip.[neftet@tutanota.com].boom")) returned 1 [0127.264] MoveFileW (lpExistingFileName="C:\\Program Files (x86)\\Microsoft.NET\\RedistList\\AssemblyList_4_client.xml" (normalized: "c:\\program files (x86)\\microsoft.net\\redistlist\\assemblylist_4_client.xml"), lpNewFileName="C:\\Program Files (x86)\\Microsoft.NET\\RedistList\\AssemblyList_4_client.xml.[neftet@tutanota.com].boom" (normalized: "c:\\program files (x86)\\microsoft.net\\redistlist\\assemblylist_4_client.xml.[neftet@tutanota.com].boom")) returned 1 [0127.277] MoveFileW (lpExistingFileName="C:\\Program Files (x86)\\Microsoft.NET\\RedistList\\AssemblyList_4_extended.xml" (normalized: "c:\\program files (x86)\\microsoft.net\\redistlist\\assemblylist_4_extended.xml"), lpNewFileName="C:\\Program Files (x86)\\Microsoft.NET\\RedistList\\AssemblyList_4_extended.xml.[neftet@tutanota.com].boom" (normalized: "c:\\program files (x86)\\microsoft.net\\redistlist\\assemblylist_4_extended.xml.[neftet@tutanota.com].boom")) returned 1 [0127.287] MoveFileW (lpExistingFileName="C:\\Program Files (x86)\\Mozilla Firefox\\browser\\blocklist.xml" (normalized: "c:\\program files (x86)\\mozilla firefox\\browser\\blocklist.xml"), lpNewFileName="C:\\Program Files (x86)\\Mozilla Firefox\\browser\\blocklist.xml.[neftet@tutanota.com].boom" (normalized: "c:\\program files (x86)\\mozilla firefox\\browser\\blocklist.xml.[neftet@tutanota.com].boom")) returned 1 [0127.290] MoveFileW (lpExistingFileName="C:\\Program Files (x86)\\Mozilla Firefox\\browser\\extensions\\{972ce4c6-7e08-4474-a285-3208198ce6fd}\\icon.png" (normalized: "c:\\program files (x86)\\mozilla firefox\\browser\\extensions\\{972ce4c6-7e08-4474-a285-3208198ce6fd}\\icon.png"), lpNewFileName="C:\\Program Files (x86)\\Mozilla Firefox\\browser\\extensions\\{972ce4c6-7e08-4474-a285-3208198ce6fd}\\icon.png.[neftet@tutanota.com].boom" (normalized: "c:\\program files (x86)\\mozilla firefox\\browser\\extensions\\{972ce4c6-7e08-4474-a285-3208198ce6fd}\\icon.png.[neftet@tutanota.com].boom")) returned 1 [0127.293] MoveFileW (lpExistingFileName="C:\\Program Files (x86)\\Mozilla Firefox\\browser\\searchplugins\\amazondotcom.xml" (normalized: "c:\\program files (x86)\\mozilla firefox\\browser\\searchplugins\\amazondotcom.xml"), lpNewFileName="C:\\Program Files (x86)\\Mozilla Firefox\\browser\\searchplugins\\amazondotcom.xml.[neftet@tutanota.com].boom" (normalized: "c:\\program files (x86)\\mozilla firefox\\browser\\searchplugins\\amazondotcom.xml.[neftet@tutanota.com].boom")) returned 1 [0127.296] MoveFileW (lpExistingFileName="C:\\Program Files (x86)\\Mozilla Firefox\\browser\\searchplugins\\bing.xml" (normalized: "c:\\program files (x86)\\mozilla firefox\\browser\\searchplugins\\bing.xml"), lpNewFileName="C:\\Program Files (x86)\\Mozilla Firefox\\browser\\searchplugins\\bing.xml.[neftet@tutanota.com].boom" (normalized: "c:\\program files (x86)\\mozilla firefox\\browser\\searchplugins\\bing.xml.[neftet@tutanota.com].boom")) returned 1 [0127.299] MoveFileW (lpExistingFileName="C:\\Program Files (x86)\\Mozilla Firefox\\browser\\searchplugins\\eBay.xml" (normalized: "c:\\program files (x86)\\mozilla firefox\\browser\\searchplugins\\ebay.xml"), lpNewFileName="C:\\Program Files (x86)\\Mozilla Firefox\\browser\\searchplugins\\eBay.xml.[neftet@tutanota.com].boom" (normalized: "c:\\program files (x86)\\mozilla firefox\\browser\\searchplugins\\ebay.xml.[neftet@tutanota.com].boom")) returned 1 [0127.301] MoveFileW (lpExistingFileName="C:\\Program Files (x86)\\Mozilla Firefox\\browser\\searchplugins\\google.xml" (normalized: "c:\\program files (x86)\\mozilla firefox\\browser\\searchplugins\\google.xml"), lpNewFileName="C:\\Program Files (x86)\\Mozilla Firefox\\browser\\searchplugins\\google.xml.[neftet@tutanota.com].boom" (normalized: "c:\\program files (x86)\\mozilla firefox\\browser\\searchplugins\\google.xml.[neftet@tutanota.com].boom")) returned 1 [0127.304] MoveFileW (lpExistingFileName="C:\\Program Files (x86)\\Mozilla Firefox\\browser\\searchplugins\\twitter.xml" (normalized: "c:\\program files (x86)\\mozilla firefox\\browser\\searchplugins\\twitter.xml"), lpNewFileName="C:\\Program Files (x86)\\Mozilla Firefox\\browser\\searchplugins\\twitter.xml.[neftet@tutanota.com].boom" (normalized: "c:\\program files (x86)\\mozilla firefox\\browser\\searchplugins\\twitter.xml.[neftet@tutanota.com].boom")) returned 1 [0127.307] MoveFileW (lpExistingFileName="C:\\Program Files (x86)\\Mozilla Firefox\\browser\\searchplugins\\wikipedia.xml" (normalized: "c:\\program files (x86)\\mozilla firefox\\browser\\searchplugins\\wikipedia.xml"), lpNewFileName="C:\\Program Files (x86)\\Mozilla Firefox\\browser\\searchplugins\\wikipedia.xml.[neftet@tutanota.com].boom" (normalized: "c:\\program files (x86)\\mozilla firefox\\browser\\searchplugins\\wikipedia.xml.[neftet@tutanota.com].boom")) returned 1 [0127.309] MoveFileW (lpExistingFileName="C:\\Program Files (x86)\\Mozilla Firefox\\browser\\searchplugins\\yahoo.xml" (normalized: "c:\\program files (x86)\\mozilla firefox\\browser\\searchplugins\\yahoo.xml"), lpNewFileName="C:\\Program Files (x86)\\Mozilla Firefox\\browser\\searchplugins\\yahoo.xml.[neftet@tutanota.com].boom" (normalized: "c:\\program files (x86)\\mozilla firefox\\browser\\searchplugins\\yahoo.xml.[neftet@tutanota.com].boom")) returned 1 [0127.317] MoveFileW (lpExistingFileName="C:\\Program Files (x86)\\Reference Assemblies\\Microsoft\\Framework\\v3.0\\WinFXList.xml" (normalized: "c:\\program files (x86)\\reference assemblies\\microsoft\\framework\\v3.0\\winfxlist.xml"), lpNewFileName="C:\\Program Files (x86)\\Reference Assemblies\\Microsoft\\Framework\\v3.0\\WinFXList.xml.[neftet@tutanota.com].boom" (normalized: "c:\\program files (x86)\\reference assemblies\\microsoft\\framework\\v3.0\\winfxlist.xml.[neftet@tutanota.com].boom")) returned 1 [0127.320] MoveFileW (lpExistingFileName="C:\\Program Files (x86)\\Reference Assemblies\\Microsoft\\Framework\\v3.0\\RedistList\\FrameworkList.xml" (normalized: "c:\\program files (x86)\\reference assemblies\\microsoft\\framework\\v3.0\\redistlist\\frameworklist.xml"), lpNewFileName="C:\\Program Files (x86)\\Reference Assemblies\\Microsoft\\Framework\\v3.0\\RedistList\\FrameworkList.xml.[neftet@tutanota.com].boom" (normalized: "c:\\program files (x86)\\reference assemblies\\microsoft\\framework\\v3.0\\redistlist\\frameworklist.xml.[neftet@tutanota.com].boom")) returned 1 [0127.397] MoveFileW (lpExistingFileName="C:\\ProgramData\\Microsoft\\User Account Pictures\\guest.bmp" (normalized: "c:\\programdata\\microsoft\\user account pictures\\guest.bmp"), lpNewFileName="C:\\ProgramData\\Microsoft\\User Account Pictures\\guest.bmp.[neftet@tutanota.com].boom" (normalized: "c:\\programdata\\microsoft\\user account pictures\\guest.bmp.[neftet@tutanota.com].boom")) returned 1 [0127.401] MoveFileW (lpExistingFileName="C:\\ProgramData\\Microsoft\\User Account Pictures\\user.bmp" (normalized: "c:\\programdata\\microsoft\\user account pictures\\user.bmp"), lpNewFileName="C:\\ProgramData\\Microsoft\\User Account Pictures\\user.bmp.[neftet@tutanota.com].boom" (normalized: "c:\\programdata\\microsoft\\user account pictures\\user.bmp.[neftet@tutanota.com].boom")) returned 1 [0127.414] MoveFileW (lpExistingFileName="C:\\ProgramData\\Microsoft\\Windows\\Power Efficiency Diagnostics\\energy-report-2017-07-12.xml" (normalized: "c:\\programdata\\microsoft\\windows\\power efficiency diagnostics\\energy-report-2017-07-12.xml"), lpNewFileName="C:\\ProgramData\\Microsoft\\Windows\\Power Efficiency Diagnostics\\energy-report-2017-07-12.xml.[neftet@tutanota.com].boom" (normalized: "c:\\programdata\\microsoft\\windows\\power efficiency diagnostics\\energy-report-2017-07-12.xml.[neftet@tutanota.com].boom")) returned 1 [0127.418] MoveFileW (lpExistingFileName="C:\\ProgramData\\Microsoft\\Windows\\Power Efficiency Diagnostics\\energy-report-2017-07-26.xml" (normalized: "c:\\programdata\\microsoft\\windows\\power efficiency diagnostics\\energy-report-2017-07-26.xml"), lpNewFileName="C:\\ProgramData\\Microsoft\\Windows\\Power Efficiency Diagnostics\\energy-report-2017-07-26.xml.[neftet@tutanota.com].boom" (normalized: "c:\\programdata\\microsoft\\windows\\power efficiency diagnostics\\energy-report-2017-07-26.xml.[neftet@tutanota.com].boom")) returned 1 [0127.422] MoveFileW (lpExistingFileName="C:\\ProgramData\\Microsoft\\Windows\\Power Efficiency Diagnostics\\energy-report-latest.xml" (normalized: "c:\\programdata\\microsoft\\windows\\power efficiency diagnostics\\energy-report-latest.xml"), lpNewFileName="C:\\ProgramData\\Microsoft\\Windows\\Power Efficiency Diagnostics\\energy-report-latest.xml.[neftet@tutanota.com].boom" (normalized: "c:\\programdata\\microsoft\\windows\\power efficiency diagnostics\\energy-report-latest.xml.[neftet@tutanota.com].boom")) returned 1 [0127.425] MoveFileW (lpExistingFileName="C:\\ProgramData\\Microsoft\\Windows\\Power Efficiency Diagnostics\\energy-report.html" (normalized: "c:\\programdata\\microsoft\\windows\\power efficiency diagnostics\\energy-report.html"), lpNewFileName="C:\\ProgramData\\Microsoft\\Windows\\Power Efficiency Diagnostics\\energy-report.html.[neftet@tutanota.com].boom" (normalized: "c:\\programdata\\microsoft\\windows\\power efficiency diagnostics\\energy-report.html.[neftet@tutanota.com].boom")) returned 1 [0127.436] MoveFileW (lpExistingFileName="C:\\ProgramData\\Microsoft\\Windows\\Ringtones\\Ringtone 01.wma" (normalized: "c:\\programdata\\microsoft\\windows\\ringtones\\ringtone 01.wma"), lpNewFileName="C:\\ProgramData\\Microsoft\\Windows\\Ringtones\\Ringtone 01.wma.[neftet@tutanota.com].boom" (normalized: "c:\\programdata\\microsoft\\windows\\ringtones\\ringtone 01.wma.[neftet@tutanota.com].boom")) returned 1 [0127.445] MoveFileW (lpExistingFileName="C:\\ProgramData\\Microsoft\\Windows\\Ringtones\\Ringtone 02.wma" (normalized: "c:\\programdata\\microsoft\\windows\\ringtones\\ringtone 02.wma"), lpNewFileName="C:\\ProgramData\\Microsoft\\Windows\\Ringtones\\Ringtone 02.wma.[neftet@tutanota.com].boom" (normalized: "c:\\programdata\\microsoft\\windows\\ringtones\\ringtone 02.wma.[neftet@tutanota.com].boom")) returned 1 [0127.454] MoveFileW (lpExistingFileName="C:\\ProgramData\\Microsoft\\Windows\\Ringtones\\Ringtone 03.wma" (normalized: "c:\\programdata\\microsoft\\windows\\ringtones\\ringtone 03.wma"), lpNewFileName="C:\\ProgramData\\Microsoft\\Windows\\Ringtones\\Ringtone 03.wma.[neftet@tutanota.com].boom" (normalized: "c:\\programdata\\microsoft\\windows\\ringtones\\ringtone 03.wma.[neftet@tutanota.com].boom")) returned 1 [0127.476] MoveFileW (lpExistingFileName="C:\\ProgramData\\Microsoft\\Windows\\Ringtones\\Ringtone 04.wma" (normalized: "c:\\programdata\\microsoft\\windows\\ringtones\\ringtone 04.wma"), lpNewFileName="C:\\ProgramData\\Microsoft\\Windows\\Ringtones\\Ringtone 04.wma.[neftet@tutanota.com].boom" (normalized: "c:\\programdata\\microsoft\\windows\\ringtones\\ringtone 04.wma.[neftet@tutanota.com].boom")) returned 1 [0127.489] MoveFileW (lpExistingFileName="C:\\ProgramData\\Microsoft\\Windows\\Ringtones\\Ringtone 05.wma" (normalized: "c:\\programdata\\microsoft\\windows\\ringtones\\ringtone 05.wma"), lpNewFileName="C:\\ProgramData\\Microsoft\\Windows\\Ringtones\\Ringtone 05.wma.[neftet@tutanota.com].boom" (normalized: "c:\\programdata\\microsoft\\windows\\ringtones\\ringtone 05.wma.[neftet@tutanota.com].boom")) returned 1 [0127.497] MoveFileW (lpExistingFileName="C:\\ProgramData\\Microsoft\\Windows\\Ringtones\\Ringtone 06.wma" (normalized: "c:\\programdata\\microsoft\\windows\\ringtones\\ringtone 06.wma"), lpNewFileName="C:\\ProgramData\\Microsoft\\Windows\\Ringtones\\Ringtone 06.wma.[neftet@tutanota.com].boom" (normalized: "c:\\programdata\\microsoft\\windows\\ringtones\\ringtone 06.wma.[neftet@tutanota.com].boom")) returned 1 [0127.505] MoveFileW (lpExistingFileName="C:\\ProgramData\\Microsoft\\Windows\\Ringtones\\Ringtone 07.wma" (normalized: "c:\\programdata\\microsoft\\windows\\ringtones\\ringtone 07.wma"), lpNewFileName="C:\\ProgramData\\Microsoft\\Windows\\Ringtones\\Ringtone 07.wma.[neftet@tutanota.com].boom" (normalized: "c:\\programdata\\microsoft\\windows\\ringtones\\ringtone 07.wma.[neftet@tutanota.com].boom")) returned 1 [0127.516] MoveFileW (lpExistingFileName="C:\\ProgramData\\Microsoft\\Windows\\Ringtones\\Ringtone 08.wma" (normalized: "c:\\programdata\\microsoft\\windows\\ringtones\\ringtone 08.wma"), lpNewFileName="C:\\ProgramData\\Microsoft\\Windows\\Ringtones\\Ringtone 08.wma.[neftet@tutanota.com].boom" (normalized: "c:\\programdata\\microsoft\\windows\\ringtones\\ringtone 08.wma.[neftet@tutanota.com].boom")) returned 1 [0127.525] MoveFileW (lpExistingFileName="C:\\ProgramData\\Microsoft\\Windows\\Ringtones\\Ringtone 09.wma" (normalized: "c:\\programdata\\microsoft\\windows\\ringtones\\ringtone 09.wma"), lpNewFileName="C:\\ProgramData\\Microsoft\\Windows\\Ringtones\\Ringtone 09.wma.[neftet@tutanota.com].boom" (normalized: "c:\\programdata\\microsoft\\windows\\ringtones\\ringtone 09.wma.[neftet@tutanota.com].boom")) returned 1 [0127.533] MoveFileW (lpExistingFileName="C:\\ProgramData\\Microsoft\\Windows\\Ringtones\\Ringtone 10.wma" (normalized: "c:\\programdata\\microsoft\\windows\\ringtones\\ringtone 10.wma"), lpNewFileName="C:\\ProgramData\\Microsoft\\Windows\\Ringtones\\Ringtone 10.wma.[neftet@tutanota.com].boom" (normalized: "c:\\programdata\\microsoft\\windows\\ringtones\\ringtone 10.wma.[neftet@tutanota.com].boom")) returned 1 [0127.537] MoveFileW (lpExistingFileName="C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Default Programs.lnk" (normalized: "c:\\programdata\\microsoft\\windows\\start menu\\default programs.lnk"), lpNewFileName="C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Default Programs.lnk.[neftet@tutanota.com].boom" (normalized: "c:\\programdata\\microsoft\\windows\\start menu\\default programs.lnk.[neftet@tutanota.com].boom")) returned 1 [0127.543] MoveFileW (lpExistingFileName="C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Windows Update.lnk" (normalized: "c:\\programdata\\microsoft\\windows\\start menu\\windows update.lnk"), lpNewFileName="C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Windows Update.lnk.[neftet@tutanota.com].boom" (normalized: "c:\\programdata\\microsoft\\windows\\start menu\\windows update.lnk.[neftet@tutanota.com].boom")) returned 1 [0127.547] MoveFileW (lpExistingFileName="C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Adobe Reader X.lnk" (normalized: "c:\\programdata\\microsoft\\windows\\start menu\\programs\\adobe reader x.lnk"), lpNewFileName="C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Adobe Reader X.lnk.[neftet@tutanota.com].boom" (normalized: "c:\\programdata\\microsoft\\windows\\start menu\\programs\\adobe reader x.lnk.[neftet@tutanota.com].boom")) returned 1 [0127.552] MoveFileW (lpExistingFileName="C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Google Chrome.lnk" (normalized: "c:\\programdata\\microsoft\\windows\\start menu\\programs\\google chrome.lnk"), lpNewFileName="C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Google Chrome.lnk.[neftet@tutanota.com].boom" (normalized: "c:\\programdata\\microsoft\\windows\\start menu\\programs\\google chrome.lnk.[neftet@tutanota.com].boom")) returned 1 [0127.555] MoveFileW (lpExistingFileName="C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Media Center.lnk" (normalized: "c:\\programdata\\microsoft\\windows\\start menu\\programs\\media center.lnk"), lpNewFileName="C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Media Center.lnk.[neftet@tutanota.com].boom" (normalized: "c:\\programdata\\microsoft\\windows\\start menu\\programs\\media center.lnk.[neftet@tutanota.com].boom")) returned 1 [0127.560] MoveFileW (lpExistingFileName="C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Mozilla Firefox.lnk" (normalized: "c:\\programdata\\microsoft\\windows\\start menu\\programs\\mozilla firefox.lnk"), lpNewFileName="C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Mozilla Firefox.lnk.[neftet@tutanota.com].boom" (normalized: "c:\\programdata\\microsoft\\windows\\start menu\\programs\\mozilla firefox.lnk.[neftet@tutanota.com].boom")) returned 1 [0127.564] MoveFileW (lpExistingFileName="C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Sidebar.lnk" (normalized: "c:\\programdata\\microsoft\\windows\\start menu\\programs\\sidebar.lnk"), lpNewFileName="C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Sidebar.lnk.[neftet@tutanota.com].boom" (normalized: "c:\\programdata\\microsoft\\windows\\start menu\\programs\\sidebar.lnk.[neftet@tutanota.com].boom")) returned 1 [0127.569] MoveFileW (lpExistingFileName="C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Windows Anytime Upgrade.lnk" (normalized: "c:\\programdata\\microsoft\\windows\\start menu\\programs\\windows anytime upgrade.lnk"), lpNewFileName="C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Windows Anytime Upgrade.lnk.[neftet@tutanota.com].boom" (normalized: "c:\\programdata\\microsoft\\windows\\start menu\\programs\\windows anytime upgrade.lnk.[neftet@tutanota.com].boom")) returned 1 [0127.574] MoveFileW (lpExistingFileName="C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Windows DVD Maker.lnk" (normalized: "c:\\programdata\\microsoft\\windows\\start menu\\programs\\windows dvd maker.lnk"), lpNewFileName="C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Windows DVD Maker.lnk.[neftet@tutanota.com].boom" (normalized: "c:\\programdata\\microsoft\\windows\\start menu\\programs\\windows dvd maker.lnk.[neftet@tutanota.com].boom")) returned 1 [0127.578] MoveFileW (lpExistingFileName="C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Windows Fax and Scan.lnk" (normalized: "c:\\programdata\\microsoft\\windows\\start menu\\programs\\windows fax and scan.lnk"), lpNewFileName="C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Windows Fax and Scan.lnk.[neftet@tutanota.com].boom" (normalized: "c:\\programdata\\microsoft\\windows\\start menu\\programs\\windows fax and scan.lnk.[neftet@tutanota.com].boom")) returned 1 [0127.582] MoveFileW (lpExistingFileName="C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Windows Media Player.lnk" (normalized: "c:\\programdata\\microsoft\\windows\\start menu\\programs\\windows media player.lnk"), lpNewFileName="C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Windows Media Player.lnk.[neftet@tutanota.com].boom" (normalized: "c:\\programdata\\microsoft\\windows\\start menu\\programs\\windows media player.lnk.[neftet@tutanota.com].boom")) returned 1 [0127.586] MoveFileW (lpExistingFileName="C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\XPS Viewer.lnk" (normalized: "c:\\programdata\\microsoft\\windows\\start menu\\programs\\xps viewer.lnk"), lpNewFileName="C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\XPS Viewer.lnk.[neftet@tutanota.com].boom" (normalized: "c:\\programdata\\microsoft\\windows\\start menu\\programs\\xps viewer.lnk.[neftet@tutanota.com].boom")) returned 1 [0127.590] MoveFileW (lpExistingFileName="C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Accessories\\Calculator.lnk" (normalized: "c:\\programdata\\microsoft\\windows\\start menu\\programs\\accessories\\calculator.lnk"), lpNewFileName="C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Accessories\\Calculator.lnk.[neftet@tutanota.com].boom" (normalized: "c:\\programdata\\microsoft\\windows\\start menu\\programs\\accessories\\calculator.lnk.[neftet@tutanota.com].boom")) returned 1 [0127.594] MoveFileW (lpExistingFileName="C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Accessories\\displayswitch.lnk" (normalized: "c:\\programdata\\microsoft\\windows\\start menu\\programs\\accessories\\displayswitch.lnk"), lpNewFileName="C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Accessories\\displayswitch.lnk.[neftet@tutanota.com].boom" (normalized: "c:\\programdata\\microsoft\\windows\\start menu\\programs\\accessories\\displayswitch.lnk.[neftet@tutanota.com].boom")) returned 1 [0127.598] MoveFileW (lpExistingFileName="C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Accessories\\Math Input Panel.lnk" (normalized: "c:\\programdata\\microsoft\\windows\\start menu\\programs\\accessories\\math input panel.lnk"), lpNewFileName="C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Accessories\\Math Input Panel.lnk.[neftet@tutanota.com].boom" (normalized: "c:\\programdata\\microsoft\\windows\\start menu\\programs\\accessories\\math input panel.lnk.[neftet@tutanota.com].boom")) returned 1 [0127.602] MoveFileW (lpExistingFileName="C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Accessories\\Mobility Center.lnk" (normalized: "c:\\programdata\\microsoft\\windows\\start menu\\programs\\accessories\\mobility center.lnk"), lpNewFileName="C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Accessories\\Mobility Center.lnk.[neftet@tutanota.com].boom" (normalized: "c:\\programdata\\microsoft\\windows\\start menu\\programs\\accessories\\mobility center.lnk.[neftet@tutanota.com].boom")) returned 1 [0127.606] MoveFileW (lpExistingFileName="C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Accessories\\NetworkProjection.lnk" (normalized: "c:\\programdata\\microsoft\\windows\\start menu\\programs\\accessories\\networkprojection.lnk"), lpNewFileName="C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Accessories\\NetworkProjection.lnk.[neftet@tutanota.com].boom" (normalized: "c:\\programdata\\microsoft\\windows\\start menu\\programs\\accessories\\networkprojection.lnk.[neftet@tutanota.com].boom")) returned 1 [0127.612] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Accessories\\Paint.lnk", nBufferLength=0x105, lpBuffer=0x31e094, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Accessories\\Paint.lnk", lpFilePart=0x0) returned 0x4a [0127.612] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Accessories\\Paint.lnk" (normalized: "c:\\programdata\\microsoft\\windows\\start menu\\programs\\accessories\\paint.lnk"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x274 [0127.613] GetFileType (hFile=0x274) returned 0x1 [0127.613] GetFileType (hFile=0x274) returned 0x1 [0127.613] GetFileSize (in: hFile=0x274, lpFileSizeHigh=0x31e690 | out: lpFileSizeHigh=0x31e690*=0x0) returned 0x4f0 [0127.613] ReadFile (in: hFile=0x274, lpBuffer=0x2691a74, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x31e63c, lpOverlapped=0x0 | out: lpBuffer=0x2691a74*, lpNumberOfBytesRead=0x31e63c*=0x4f0, lpOverlapped=0x0) returned 1 [0127.615] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Accessories\\Paint.lnk", nBufferLength=0x105, lpBuffer=0x31e080, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Accessories\\Paint.lnk", lpFilePart=0x0) returned 0x4a [0127.615] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Accessories\\Paint.lnk" (normalized: "c:\\programdata\\microsoft\\windows\\start menu\\programs\\accessories\\paint.lnk"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x274 [0127.617] GetFileType (hFile=0x274) returned 0x1 [0127.617] GetFileType (hFile=0x274) returned 0x1 [0127.617] WriteFile (in: hFile=0x274, lpBuffer=0x26944bc*, nNumberOfBytesToWrite=0x4f0, lpNumberOfBytesWritten=0x31e604, lpOverlapped=0x0 | out: lpBuffer=0x26944bc*, lpNumberOfBytesWritten=0x31e604*=0x4f0, lpOverlapped=0x0) returned 1 [0127.618] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Accessories\\Paint.lnk", nBufferLength=0x105, lpBuffer=0x31e1b4, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Accessories\\Paint.lnk", lpFilePart=0x0) returned 0x4a [0127.618] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Accessories\\Paint.lnk.[neftet@tutanota.com].boom", nBufferLength=0x105, lpBuffer=0x31e1b4, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Accessories\\Paint.lnk.[neftet@tutanota.com].boom", lpFilePart=0x0) returned 0x65 [0127.619] GetFileAttributesExW (in: lpFileName="C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Accessories\\Paint.lnk" (normalized: "c:\\programdata\\microsoft\\windows\\start menu\\programs\\accessories\\paint.lnk"), fInfoLevelId=0x0, lpFileInformation=0x31e690 | out: lpFileInformation=0x31e690*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2d8b74ec, ftCreationTime.dwHighDateTime=0x1ca043f, ftLastAccessTime.dwLowDateTime=0x2d8b74ec, ftLastAccessTime.dwHighDateTime=0x1ca043f, ftLastWriteTime.dwLowDateTime=0x2f7fb1c0, ftLastWriteTime.dwHighDateTime=0x1d6eb7f, nFileSizeHigh=0x0, nFileSizeLow=0x4f0)) returned 1 [0127.619] MoveFileW (lpExistingFileName="C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Accessories\\Paint.lnk" (normalized: "c:\\programdata\\microsoft\\windows\\start menu\\programs\\accessories\\paint.lnk"), lpNewFileName="C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Accessories\\Paint.lnk.[neftet@tutanota.com].boom" (normalized: "c:\\programdata\\microsoft\\windows\\start menu\\programs\\accessories\\paint.lnk.[neftet@tutanota.com].boom")) returned 1 [0127.620] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Accessories\\Remote Desktop Connection.lnk", nBufferLength=0x105, lpBuffer=0x31e094, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Accessories\\Remote Desktop Connection.lnk", lpFilePart=0x0) returned 0x5e [0127.620] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Accessories\\Remote Desktop Connection.lnk" (normalized: "c:\\programdata\\microsoft\\windows\\start menu\\programs\\accessories\\remote desktop connection.lnk"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x274 [0127.620] GetFileType (hFile=0x274) returned 0x1 [0127.620] GetFileType (hFile=0x274) returned 0x1 [0127.620] GetFileSize (in: hFile=0x274, lpFileSizeHigh=0x31e690 | out: lpFileSizeHigh=0x31e690*=0x0) returned 0x570 [0127.620] ReadFile (in: hFile=0x274, lpBuffer=0x2695f90, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x31e63c, lpOverlapped=0x0 | out: lpBuffer=0x2695f90*, lpNumberOfBytesRead=0x31e63c*=0x570, lpOverlapped=0x0) returned 1 [0127.623] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Accessories\\Remote Desktop Connection.lnk", nBufferLength=0x105, lpBuffer=0x31e080, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Accessories\\Remote Desktop Connection.lnk", lpFilePart=0x0) returned 0x5e [0127.623] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Accessories\\Remote Desktop Connection.lnk" (normalized: "c:\\programdata\\microsoft\\windows\\start menu\\programs\\accessories\\remote desktop connection.lnk"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x274 [0127.624] GetFileType (hFile=0x274) returned 0x1 [0127.624] GetFileType (hFile=0x274) returned 0x1 [0127.624] WriteFile (in: hFile=0x274, lpBuffer=0x2698aa8*, nNumberOfBytesToWrite=0x570, lpNumberOfBytesWritten=0x31e604, lpOverlapped=0x0 | out: lpBuffer=0x2698aa8*, lpNumberOfBytesWritten=0x31e604*=0x570, lpOverlapped=0x0) returned 1 [0127.625] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Accessories\\Remote Desktop Connection.lnk", nBufferLength=0x105, lpBuffer=0x31e1b4, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Accessories\\Remote Desktop Connection.lnk", lpFilePart=0x0) returned 0x5e [0127.625] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Accessories\\Remote Desktop Connection.lnk.[neftet@tutanota.com].boom", nBufferLength=0x105, lpBuffer=0x31e1b4, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Accessories\\Remote Desktop Connection.lnk.[neftet@tutanota.com].boom", lpFilePart=0x0) returned 0x79 [0127.625] GetFileAttributesExW (in: lpFileName="C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Accessories\\Remote Desktop Connection.lnk" (normalized: "c:\\programdata\\microsoft\\windows\\start menu\\programs\\accessories\\remote desktop connection.lnk"), fInfoLevelId=0x0, lpFileInformation=0x31e690 | out: lpFileInformation=0x31e690*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x173a8e5b, ftCreationTime.dwHighDateTime=0x1ca043f, ftLastAccessTime.dwLowDateTime=0x173a8e5b, ftLastAccessTime.dwHighDateTime=0x1ca043f, ftLastWriteTime.dwLowDateTime=0x2f821320, ftLastWriteTime.dwHighDateTime=0x1d6eb7f, nFileSizeHigh=0x0, nFileSizeLow=0x570)) returned 1 [0127.625] MoveFileW (lpExistingFileName="C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Accessories\\Remote Desktop Connection.lnk" (normalized: "c:\\programdata\\microsoft\\windows\\start menu\\programs\\accessories\\remote desktop connection.lnk"), lpNewFileName="C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Accessories\\Remote Desktop Connection.lnk.[neftet@tutanota.com].boom" (normalized: "c:\\programdata\\microsoft\\windows\\start menu\\programs\\accessories\\remote desktop connection.lnk.[neftet@tutanota.com].boom")) returned 1 [0127.627] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Accessories\\Snipping Tool.lnk", nBufferLength=0x105, lpBuffer=0x31e094, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Accessories\\Snipping Tool.lnk", lpFilePart=0x0) returned 0x52 [0127.627] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Accessories\\Snipping Tool.lnk" (normalized: "c:\\programdata\\microsoft\\windows\\start menu\\programs\\accessories\\snipping tool.lnk"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x274 [0127.627] GetFileType (hFile=0x274) returned 0x1 [0127.627] GetFileType (hFile=0x274) returned 0x1 [0127.627] GetFileSize (in: hFile=0x274, lpFileSizeHigh=0x31e690 | out: lpFileSizeHigh=0x31e690*=0x0) returned 0x510 [0127.627] ReadFile (in: hFile=0x274, lpBuffer=0x269a564, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x31e63c, lpOverlapped=0x0 | out: lpBuffer=0x269a564*, lpNumberOfBytesRead=0x31e63c*=0x510, lpOverlapped=0x0) returned 1 [0127.628] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Accessories\\Snipping Tool.lnk", nBufferLength=0x105, lpBuffer=0x31e080, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Accessories\\Snipping Tool.lnk", lpFilePart=0x0) returned 0x52 [0127.628] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Accessories\\Snipping Tool.lnk" (normalized: "c:\\programdata\\microsoft\\windows\\start menu\\programs\\accessories\\snipping tool.lnk"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x274 [0127.629] GetFileType (hFile=0x274) returned 0x1 [0127.629] GetFileType (hFile=0x274) returned 0x1 [0127.629] WriteFile (in: hFile=0x274, lpBuffer=0x269cfec*, nNumberOfBytesToWrite=0x510, lpNumberOfBytesWritten=0x31e604, lpOverlapped=0x0 | out: lpBuffer=0x269cfec*, lpNumberOfBytesWritten=0x31e604*=0x510, lpOverlapped=0x0) returned 1 [0127.631] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Accessories\\Snipping Tool.lnk", nBufferLength=0x105, lpBuffer=0x31e1b4, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Accessories\\Snipping Tool.lnk", lpFilePart=0x0) returned 0x52 [0127.631] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Accessories\\Snipping Tool.lnk.[neftet@tutanota.com].boom", nBufferLength=0x105, lpBuffer=0x31e1b4, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Accessories\\Snipping Tool.lnk.[neftet@tutanota.com].boom", lpFilePart=0x0) returned 0x6d [0127.631] GetFileAttributesExW (in: lpFileName="C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Accessories\\Snipping Tool.lnk" (normalized: "c:\\programdata\\microsoft\\windows\\start menu\\programs\\accessories\\snipping tool.lnk"), fInfoLevelId=0x0, lpFileInformation=0x31e690 | out: lpFileInformation=0x31e690*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x81caf400, ftCreationTime.dwHighDateTime=0x1d2de2a, ftLastAccessTime.dwLowDateTime=0x81caf400, ftLastAccessTime.dwHighDateTime=0x1d2de2a, ftLastWriteTime.dwLowDateTime=0x2f821320, ftLastWriteTime.dwHighDateTime=0x1d6eb7f, nFileSizeHigh=0x0, nFileSizeLow=0x510)) returned 1 [0127.631] MoveFileW (lpExistingFileName="C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Accessories\\Snipping Tool.lnk" (normalized: "c:\\programdata\\microsoft\\windows\\start menu\\programs\\accessories\\snipping tool.lnk"), lpNewFileName="C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Accessories\\Snipping Tool.lnk.[neftet@tutanota.com].boom" (normalized: "c:\\programdata\\microsoft\\windows\\start menu\\programs\\accessories\\snipping tool.lnk.[neftet@tutanota.com].boom")) returned 1 [0127.632] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Accessories\\Sound Recorder.lnk", nBufferLength=0x105, lpBuffer=0x31e094, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Accessories\\Sound Recorder.lnk", lpFilePart=0x0) returned 0x53 [0127.632] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Accessories\\Sound Recorder.lnk" (normalized: "c:\\programdata\\microsoft\\windows\\start menu\\programs\\accessories\\sound recorder.lnk"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x274 [0127.632] GetFileType (hFile=0x274) returned 0x1 [0127.632] GetFileType (hFile=0x274) returned 0x1 [0127.632] GetFileSize (in: hFile=0x274, lpFileSizeHigh=0x31e690 | out: lpFileSizeHigh=0x31e690*=0x0) returned 0x550 [0127.632] ReadFile (in: hFile=0x274, lpBuffer=0x269eaa4, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x31e63c, lpOverlapped=0x0 | out: lpBuffer=0x269eaa4*, lpNumberOfBytesRead=0x31e63c*=0x550, lpOverlapped=0x0) returned 1 [0127.633] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Accessories\\Sound Recorder.lnk", nBufferLength=0x105, lpBuffer=0x31e080, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Accessories\\Sound Recorder.lnk", lpFilePart=0x0) returned 0x53 [0127.633] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Accessories\\Sound Recorder.lnk" (normalized: "c:\\programdata\\microsoft\\windows\\start menu\\programs\\accessories\\sound recorder.lnk"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x274 [0127.635] GetFileType (hFile=0x274) returned 0x1 [0127.635] GetFileType (hFile=0x274) returned 0x1 [0127.636] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Accessories\\Sound Recorder.lnk", nBufferLength=0x105, lpBuffer=0x31e1b4, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Accessories\\Sound Recorder.lnk", lpFilePart=0x0) returned 0x53 [0127.636] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Accessories\\Sound Recorder.lnk.[neftet@tutanota.com].boom", nBufferLength=0x105, lpBuffer=0x31e1b4, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Accessories\\Sound Recorder.lnk.[neftet@tutanota.com].boom", lpFilePart=0x0) returned 0x6e [0127.636] GetFileAttributesExW (in: lpFileName="C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Accessories\\Sound Recorder.lnk" (normalized: "c:\\programdata\\microsoft\\windows\\start menu\\programs\\accessories\\sound recorder.lnk"), fInfoLevelId=0x0, lpFileInformation=0x31e690 | out: lpFileInformation=0x31e690*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8aad4ba5, ftCreationTime.dwHighDateTime=0x1ca043f, ftLastAccessTime.dwLowDateTime=0x8aad4ba5, ftLastAccessTime.dwHighDateTime=0x1ca043f, ftLastWriteTime.dwLowDateTime=0x2f821320, ftLastWriteTime.dwHighDateTime=0x1d6eb7f, nFileSizeHigh=0x0, nFileSizeLow=0x550)) returned 1 [0127.636] MoveFileW (lpExistingFileName="C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Accessories\\Sound Recorder.lnk" (normalized: "c:\\programdata\\microsoft\\windows\\start menu\\programs\\accessories\\sound recorder.lnk"), lpNewFileName="C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Accessories\\Sound Recorder.lnk.[neftet@tutanota.com].boom" (normalized: "c:\\programdata\\microsoft\\windows\\start menu\\programs\\accessories\\sound recorder.lnk.[neftet@tutanota.com].boom")) returned 1 [0127.638] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Accessories\\Sticky Notes.lnk", nBufferLength=0x105, lpBuffer=0x31e094, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Accessories\\Sticky Notes.lnk", lpFilePart=0x0) returned 0x51 [0127.638] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Accessories\\Sticky Notes.lnk" (normalized: "c:\\programdata\\microsoft\\windows\\start menu\\programs\\accessories\\sticky notes.lnk"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x274 [0127.638] GetFileType (hFile=0x274) returned 0x1 [0127.638] GetFileType (hFile=0x274) returned 0x1 [0127.638] GetFileSize (in: hFile=0x274, lpFileSizeHigh=0x31e690 | out: lpFileSizeHigh=0x31e690*=0x0) returned 0x560 [0127.638] ReadFile (in: hFile=0x274, lpBuffer=0x26a3038, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x31e63c, lpOverlapped=0x0 | out: lpBuffer=0x26a3038*, lpNumberOfBytesRead=0x31e63c*=0x560, lpOverlapped=0x0) returned 1 [0127.639] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Accessories\\Sticky Notes.lnk", nBufferLength=0x105, lpBuffer=0x31e080, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Accessories\\Sticky Notes.lnk", lpFilePart=0x0) returned 0x51 [0127.639] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Accessories\\Sticky Notes.lnk" (normalized: "c:\\programdata\\microsoft\\windows\\start menu\\programs\\accessories\\sticky notes.lnk"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x274 [0127.641] GetFileType (hFile=0x274) returned 0x1 [0127.641] GetFileType (hFile=0x274) returned 0x1 [0127.642] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Accessories\\Sticky Notes.lnk", nBufferLength=0x105, lpBuffer=0x31e1b4, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Accessories\\Sticky Notes.lnk", lpFilePart=0x0) returned 0x51 [0127.642] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Accessories\\Sticky Notes.lnk.[neftet@tutanota.com].boom", nBufferLength=0x105, lpBuffer=0x31e1b4, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Accessories\\Sticky Notes.lnk.[neftet@tutanota.com].boom", lpFilePart=0x0) returned 0x6c [0127.642] GetFileAttributesExW (in: lpFileName="C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Accessories\\Sticky Notes.lnk" (normalized: "c:\\programdata\\microsoft\\windows\\start menu\\programs\\accessories\\sticky notes.lnk"), fInfoLevelId=0x0, lpFileInformation=0x31e690 | out: lpFileInformation=0x31e690*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x80cc40e0, ftCreationTime.dwHighDateTime=0x1d2de2a, ftLastAccessTime.dwLowDateTime=0x80cc40e0, ftLastAccessTime.dwHighDateTime=0x1d2de2a, ftLastWriteTime.dwLowDateTime=0x2f847480, ftLastWriteTime.dwHighDateTime=0x1d6eb7f, nFileSizeHigh=0x0, nFileSizeLow=0x560)) returned 1 [0127.642] MoveFileW (lpExistingFileName="C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Accessories\\Sticky Notes.lnk" (normalized: "c:\\programdata\\microsoft\\windows\\start menu\\programs\\accessories\\sticky notes.lnk"), lpNewFileName="C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Accessories\\Sticky Notes.lnk.[neftet@tutanota.com].boom" (normalized: "c:\\programdata\\microsoft\\windows\\start menu\\programs\\accessories\\sticky notes.lnk.[neftet@tutanota.com].boom")) returned 1 [0127.646] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Accessories\\Sync Center.lnk", nBufferLength=0x105, lpBuffer=0x31e094, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Accessories\\Sync Center.lnk", lpFilePart=0x0) returned 0x50 [0127.647] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Accessories\\Sync Center.lnk" (normalized: "c:\\programdata\\microsoft\\windows\\start menu\\programs\\accessories\\sync center.lnk"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x274 [0127.647] GetFileType (hFile=0x274) returned 0x1 [0127.647] GetFileType (hFile=0x274) returned 0x1 [0127.647] GetFileSize (in: hFile=0x274, lpFileSizeHigh=0x31e690 | out: lpFileSizeHigh=0x31e690*=0x0) returned 0x500 [0127.647] ReadFile (in: hFile=0x274, lpBuffer=0x26a7564, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x31e63c, lpOverlapped=0x0 | out: lpBuffer=0x26a7564*, lpNumberOfBytesRead=0x31e63c*=0x500, lpOverlapped=0x0) returned 1 [0127.647] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Accessories\\Sync Center.lnk", nBufferLength=0x105, lpBuffer=0x31e080, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Accessories\\Sync Center.lnk", lpFilePart=0x0) returned 0x50 [0127.648] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Accessories\\Sync Center.lnk" (normalized: "c:\\programdata\\microsoft\\windows\\start menu\\programs\\accessories\\sync center.lnk"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x274 [0127.649] GetFileType (hFile=0x274) returned 0x1 [0127.649] GetFileType (hFile=0x274) returned 0x1 [0127.650] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Accessories\\Sync Center.lnk", nBufferLength=0x105, lpBuffer=0x31e1b4, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Accessories\\Sync Center.lnk", lpFilePart=0x0) returned 0x50 [0127.650] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Accessories\\Sync Center.lnk.[neftet@tutanota.com].boom", nBufferLength=0x105, lpBuffer=0x31e1b4, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Accessories\\Sync Center.lnk.[neftet@tutanota.com].boom", lpFilePart=0x0) returned 0x6b [0127.650] GetFileAttributesExW (in: lpFileName="C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Accessories\\Sync Center.lnk" (normalized: "c:\\programdata\\microsoft\\windows\\start menu\\programs\\accessories\\sync center.lnk"), fInfoLevelId=0x0, lpFileInformation=0x31e690 | out: lpFileInformation=0x31e690*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3c9baa28, ftCreationTime.dwHighDateTime=0x1ca043f, ftLastAccessTime.dwLowDateTime=0x3c9baa28, ftLastAccessTime.dwHighDateTime=0x1ca043f, ftLastWriteTime.dwLowDateTime=0x2f847480, ftLastWriteTime.dwHighDateTime=0x1d6eb7f, nFileSizeHigh=0x0, nFileSizeLow=0x500)) returned 1 [0127.650] MoveFileW (lpExistingFileName="C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Accessories\\Sync Center.lnk" (normalized: "c:\\programdata\\microsoft\\windows\\start menu\\programs\\accessories\\sync center.lnk"), lpNewFileName="C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Accessories\\Sync Center.lnk.[neftet@tutanota.com].boom" (normalized: "c:\\programdata\\microsoft\\windows\\start menu\\programs\\accessories\\sync center.lnk.[neftet@tutanota.com].boom")) returned 1 [0127.651] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Accessories\\Welcome Center.lnk", nBufferLength=0x105, lpBuffer=0x31e094, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Accessories\\Welcome Center.lnk", lpFilePart=0x0) returned 0x53 [0127.651] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Accessories\\Welcome Center.lnk" (normalized: "c:\\programdata\\microsoft\\windows\\start menu\\programs\\accessories\\welcome center.lnk"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x274 [0127.651] GetFileType (hFile=0x274) returned 0x1 [0127.651] GetFileType (hFile=0x274) returned 0x1 [0127.651] GetFileSize (in: hFile=0x274, lpFileSizeHigh=0x31e690 | out: lpFileSizeHigh=0x31e690*=0x0) returned 0x640 [0127.652] ReadFile (in: hFile=0x274, lpBuffer=0x26abb70, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x31e63c, lpOverlapped=0x0 | out: lpBuffer=0x26abb70*, lpNumberOfBytesRead=0x31e63c*=0x640, lpOverlapped=0x0) returned 1 [0127.652] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Accessories\\Welcome Center.lnk", nBufferLength=0x105, lpBuffer=0x31e080, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Accessories\\Welcome Center.lnk", lpFilePart=0x0) returned 0x53 [0127.652] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Accessories\\Welcome Center.lnk" (normalized: "c:\\programdata\\microsoft\\windows\\start menu\\programs\\accessories\\welcome center.lnk"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x274 [0127.653] GetFileType (hFile=0x274) returned 0x1 [0127.653] GetFileType (hFile=0x274) returned 0x1 [0127.653] WriteFile (in: hFile=0x274, lpBuffer=0x26ae72c*, nNumberOfBytesToWrite=0x640, lpNumberOfBytesWritten=0x31e604, lpOverlapped=0x0 | out: lpBuffer=0x26ae72c*, lpNumberOfBytesWritten=0x31e604*=0x640, lpOverlapped=0x0) returned 1 [0127.655] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Accessories\\Welcome Center.lnk", nBufferLength=0x105, lpBuffer=0x31e1b4, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Accessories\\Welcome Center.lnk", lpFilePart=0x0) returned 0x53 [0127.655] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Accessories\\Welcome Center.lnk.[neftet@tutanota.com].boom", nBufferLength=0x105, lpBuffer=0x31e1b4, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Accessories\\Welcome Center.lnk.[neftet@tutanota.com].boom", lpFilePart=0x0) returned 0x6e [0127.658] GetFileAttributesExW (in: lpFileName="C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Accessories\\Welcome Center.lnk" (normalized: "c:\\programdata\\microsoft\\windows\\start menu\\programs\\accessories\\welcome center.lnk"), fInfoLevelId=0x0, lpFileInformation=0x31e690 | out: lpFileInformation=0x31e690*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8b13a6d0, ftCreationTime.dwHighDateTime=0x1ca043f, ftLastAccessTime.dwLowDateTime=0x8b13a6d0, ftLastAccessTime.dwHighDateTime=0x1ca043f, ftLastWriteTime.dwLowDateTime=0x2f847480, ftLastWriteTime.dwHighDateTime=0x1d6eb7f, nFileSizeHigh=0x0, nFileSizeLow=0x640)) returned 1 [0127.658] MoveFileW (lpExistingFileName="C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Accessories\\Welcome Center.lnk" (normalized: "c:\\programdata\\microsoft\\windows\\start menu\\programs\\accessories\\welcome center.lnk"), lpNewFileName="C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Accessories\\Welcome Center.lnk.[neftet@tutanota.com].boom" (normalized: "c:\\programdata\\microsoft\\windows\\start menu\\programs\\accessories\\welcome center.lnk.[neftet@tutanota.com].boom")) returned 1 [0127.659] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Accessories\\Wordpad.lnk", nBufferLength=0x105, lpBuffer=0x31e094, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Accessories\\Wordpad.lnk", lpFilePart=0x0) returned 0x4c [0127.659] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Accessories\\Wordpad.lnk" (normalized: "c:\\programdata\\microsoft\\windows\\start menu\\programs\\accessories\\wordpad.lnk"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x274 [0127.660] GetFileType (hFile=0x274) returned 0x1 [0127.660] GetFileType (hFile=0x274) returned 0x1 [0127.660] GetFileSize (in: hFile=0x274, lpFileSizeHigh=0x31e690 | out: lpFileSizeHigh=0x31e690*=0x0) returned 0x540 [0127.660] ReadFile (in: hFile=0x274, lpBuffer=0x26b01c0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x31e63c, lpOverlapped=0x0 | out: lpBuffer=0x26b01c0*, lpNumberOfBytesRead=0x31e63c*=0x540, lpOverlapped=0x0) returned 1 [0127.660] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Accessories\\Wordpad.lnk", nBufferLength=0x105, lpBuffer=0x31e080, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Accessories\\Wordpad.lnk", lpFilePart=0x0) returned 0x4c [0127.661] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Accessories\\Wordpad.lnk" (normalized: "c:\\programdata\\microsoft\\windows\\start menu\\programs\\accessories\\wordpad.lnk"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x274 [0127.662] GetFileType (hFile=0x274) returned 0x1 [0127.662] GetFileType (hFile=0x274) returned 0x1 [0127.662] WriteFile (in: hFile=0x274, lpBuffer=0x26b2c60*, nNumberOfBytesToWrite=0x540, lpNumberOfBytesWritten=0x31e604, lpOverlapped=0x0 | out: lpBuffer=0x26b2c60*, lpNumberOfBytesWritten=0x31e604*=0x540, lpOverlapped=0x0) returned 1 [0127.663] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Accessories\\Wordpad.lnk", nBufferLength=0x105, lpBuffer=0x31e1b4, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Accessories\\Wordpad.lnk", lpFilePart=0x0) returned 0x4c [0127.663] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Accessories\\Wordpad.lnk.[neftet@tutanota.com].boom", nBufferLength=0x105, lpBuffer=0x31e1b4, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Accessories\\Wordpad.lnk.[neftet@tutanota.com].boom", lpFilePart=0x0) returned 0x67 [0127.663] GetFileAttributesExW (in: lpFileName="C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Accessories\\Wordpad.lnk" (normalized: "c:\\programdata\\microsoft\\windows\\start menu\\programs\\accessories\\wordpad.lnk"), fInfoLevelId=0x0, lpFileInformation=0x31e690 | out: lpFileInformation=0x31e690*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3d25b9f8, ftCreationTime.dwHighDateTime=0x1ca043f, ftLastAccessTime.dwLowDateTime=0x3d25b9f8, ftLastAccessTime.dwHighDateTime=0x1ca043f, ftLastWriteTime.dwLowDateTime=0x2f86d5e0, ftLastWriteTime.dwHighDateTime=0x1d6eb7f, nFileSizeHigh=0x0, nFileSizeLow=0x540)) returned 1 [0127.663] MoveFileW (lpExistingFileName="C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Accessories\\Wordpad.lnk" (normalized: "c:\\programdata\\microsoft\\windows\\start menu\\programs\\accessories\\wordpad.lnk"), lpNewFileName="C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Accessories\\Wordpad.lnk.[neftet@tutanota.com].boom" (normalized: "c:\\programdata\\microsoft\\windows\\start menu\\programs\\accessories\\wordpad.lnk.[neftet@tutanota.com].boom")) returned 1 [0127.665] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Accessories\\Accessibility", nBufferLength=0x105, lpBuffer=0x31e15c, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Accessories\\Accessibility", lpFilePart=0x0) returned 0x4e [0127.665] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Accessories\\Accessibility\\", nBufferLength=0x105, lpBuffer=0x31e130, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Accessories\\Accessibility\\", lpFilePart=0x0) returned 0x4f [0127.665] FindFirstFileW (in: lpFileName="C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Accessories\\Accessibility\\*", lpFindFileData=0x31e37c | out: lpFindFileData=0x31e37c*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0xfd9dbcac, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x89bce0a9, ftLastAccessTime.dwHighDateTime=0x1ca043f, ftLastWriteTime.dwLowDateTime=0x89bf4209, ftLastWriteTime.dwHighDateTime=0x1ca043f, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x381b80 [0127.665] FindClose (in: hFindFile=0x381b80 | out: hFindFile=0x381b80) returned 1 [0127.665] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Accessories\\Accessibility", nBufferLength=0x105, lpBuffer=0x31e15c, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Accessories\\Accessibility", lpFilePart=0x0) returned 0x4e [0127.665] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Accessories\\Accessibility\\", nBufferLength=0x105, lpBuffer=0x31e130, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Accessories\\Accessibility\\", lpFilePart=0x0) returned 0x4f [0127.665] FindFirstFileW (in: lpFileName="C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Accessories\\Accessibility\\*", lpFindFileData=0x31e37c | out: lpFindFileData=0x31e37c*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0xfd9dbcac, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x89bce0a9, ftLastAccessTime.dwHighDateTime=0x1ca043f, ftLastWriteTime.dwLowDateTime=0x89bf4209, ftLastWriteTime.dwHighDateTime=0x1ca043f, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x381b80 [0127.665] FindClose (in: hFindFile=0x381b80 | out: hFindFile=0x381b80) returned 1 [0127.665] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Accessories\\Accessibility\\Speech Recognition.lnk", nBufferLength=0x105, lpBuffer=0x31e01c, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Accessories\\Accessibility\\Speech Recognition.lnk", lpFilePart=0x0) returned 0x65 [0127.665] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Accessories\\Accessibility\\Speech Recognition.lnk" (normalized: "c:\\programdata\\microsoft\\windows\\start menu\\programs\\accessories\\accessibility\\speech recognition.lnk"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x274 [0127.666] GetFileType (hFile=0x274) returned 0x1 [0127.666] GetFileType (hFile=0x274) returned 0x1 [0127.666] GetFileSize (in: hFile=0x274, lpFileSizeHigh=0x31e618 | out: lpFileSizeHigh=0x31e618*=0x0) returned 0x580 [0127.666] ReadFile (in: hFile=0x274, lpBuffer=0x26b67a8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x31e5c4, lpOverlapped=0x0 | out: lpBuffer=0x26b67a8*, lpNumberOfBytesRead=0x31e5c4*=0x580, lpOverlapped=0x0) returned 1 [0127.666] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Accessories\\Accessibility\\Speech Recognition.lnk", nBufferLength=0x105, lpBuffer=0x31e008, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Accessories\\Accessibility\\Speech Recognition.lnk", lpFilePart=0x0) returned 0x65 [0127.667] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Accessories\\Accessibility\\Speech Recognition.lnk" (normalized: "c:\\programdata\\microsoft\\windows\\start menu\\programs\\accessories\\accessibility\\speech recognition.lnk"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x274 [0127.668] GetFileType (hFile=0x274) returned 0x1 [0127.668] GetFileType (hFile=0x274) returned 0x1 [0127.669] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Accessories\\Accessibility\\Speech Recognition.lnk", nBufferLength=0x105, lpBuffer=0x31e13c, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Accessories\\Accessibility\\Speech Recognition.lnk", lpFilePart=0x0) returned 0x65 [0127.669] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Accessories\\Accessibility\\Speech Recognition.lnk.[neftet@tutanota.com].boom", nBufferLength=0x105, lpBuffer=0x31e13c, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Accessories\\Accessibility\\Speech Recognition.lnk.[neftet@tutanota.com].boom", lpFilePart=0x0) returned 0x80 [0127.669] GetFileAttributesExW (in: lpFileName="C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Accessories\\Accessibility\\Speech Recognition.lnk" (normalized: "c:\\programdata\\microsoft\\windows\\start menu\\programs\\accessories\\accessibility\\speech recognition.lnk"), fInfoLevelId=0x0, lpFileInformation=0x31e618 | out: lpFileInformation=0x31e618*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x89bce0a9, ftCreationTime.dwHighDateTime=0x1ca043f, ftLastAccessTime.dwLowDateTime=0x89bce0a9, ftLastAccessTime.dwHighDateTime=0x1ca043f, ftLastWriteTime.dwLowDateTime=0x2f86d5e0, ftLastWriteTime.dwHighDateTime=0x1d6eb7f, nFileSizeHigh=0x0, nFileSizeLow=0x580)) returned 1 [0127.669] MoveFileW (lpExistingFileName="C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Accessories\\Accessibility\\Speech Recognition.lnk" (normalized: "c:\\programdata\\microsoft\\windows\\start menu\\programs\\accessories\\accessibility\\speech recognition.lnk"), lpNewFileName="C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Accessories\\Accessibility\\Speech Recognition.lnk.[neftet@tutanota.com].boom" (normalized: "c:\\programdata\\microsoft\\windows\\start menu\\programs\\accessories\\accessibility\\speech recognition.lnk.[neftet@tutanota.com].boom")) returned 1 [0127.671] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Accessories\\System Tools", nBufferLength=0x105, lpBuffer=0x31e15c, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Accessories\\System Tools", lpFilePart=0x0) returned 0x4d [0127.671] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Accessories\\System Tools\\", nBufferLength=0x105, lpBuffer=0x31e130, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Accessories\\System Tools\\", lpFilePart=0x0) returned 0x4e [0127.671] FindFirstFileW (in: lpFileName="C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Accessories\\System Tools\\*", lpFindFileData=0x31e37c | out: lpFindFileData=0x31e37c*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0xfd9dbcac, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x8ace9ee9, ftLastAccessTime.dwHighDateTime=0x1ca043f, ftLastWriteTime.dwLowDateTime=0x8ace9ee9, ftLastWriteTime.dwHighDateTime=0x1ca043f, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x381b80 [0127.671] FindClose (in: hFindFile=0x381b80 | out: hFindFile=0x381b80) returned 1 [0127.671] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Accessories\\System Tools", nBufferLength=0x105, lpBuffer=0x31e15c, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Accessories\\System Tools", lpFilePart=0x0) returned 0x4d [0127.671] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Accessories\\System Tools\\", nBufferLength=0x105, lpBuffer=0x31e130, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Accessories\\System Tools\\", lpFilePart=0x0) returned 0x4e [0127.671] FindFirstFileW (in: lpFileName="C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Accessories\\System Tools\\*", lpFindFileData=0x31e37c | out: lpFindFileData=0x31e37c*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0xfd9dbcac, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x8ace9ee9, ftLastAccessTime.dwHighDateTime=0x1ca043f, ftLastWriteTime.dwLowDateTime=0x8ace9ee9, ftLastWriteTime.dwHighDateTime=0x1ca043f, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x381b80 [0127.671] FindClose (in: hFindFile=0x381b80 | out: hFindFile=0x381b80) returned 1 [0127.671] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Accessories\\System Tools\\Character Map.lnk", nBufferLength=0x105, lpBuffer=0x31e01c, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Accessories\\System Tools\\Character Map.lnk", lpFilePart=0x0) returned 0x5f [0127.671] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Accessories\\System Tools\\Character Map.lnk" (normalized: "c:\\programdata\\microsoft\\windows\\start menu\\programs\\accessories\\system tools\\character map.lnk"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x274 [0127.672] GetFileType (hFile=0x274) returned 0x1 [0127.672] GetFileType (hFile=0x274) returned 0x1 [0127.672] GetFileSize (in: hFile=0x274, lpFileSizeHigh=0x31e618 | out: lpFileSizeHigh=0x31e618*=0x0) returned 0x500 [0127.672] ReadFile (in: hFile=0x274, lpBuffer=0x26bf14c, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x31e5c4, lpOverlapped=0x0 | out: lpBuffer=0x26bf14c*, lpNumberOfBytesRead=0x31e5c4*=0x500, lpOverlapped=0x0) returned 1 [0127.672] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Accessories\\System Tools\\Character Map.lnk", nBufferLength=0x105, lpBuffer=0x31e008, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Accessories\\System Tools\\Character Map.lnk", lpFilePart=0x0) returned 0x5f [0127.672] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Accessories\\System Tools\\Character Map.lnk" (normalized: "c:\\programdata\\microsoft\\windows\\start menu\\programs\\accessories\\system tools\\character map.lnk"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x274 [0127.674] GetFileType (hFile=0x274) returned 0x1 [0127.674] GetFileType (hFile=0x274) returned 0x1 [0127.675] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Accessories\\System Tools\\Character Map.lnk", nBufferLength=0x105, lpBuffer=0x31e13c, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Accessories\\System Tools\\Character Map.lnk", lpFilePart=0x0) returned 0x5f [0127.675] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Accessories\\System Tools\\Character Map.lnk.[neftet@tutanota.com].boom", nBufferLength=0x105, lpBuffer=0x31e13c, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Accessories\\System Tools\\Character Map.lnk.[neftet@tutanota.com].boom", lpFilePart=0x0) returned 0x7a [0127.675] GetFileAttributesExW (in: lpFileName="C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Accessories\\System Tools\\Character Map.lnk" (normalized: "c:\\programdata\\microsoft\\windows\\start menu\\programs\\accessories\\system tools\\character map.lnk"), fInfoLevelId=0x0, lpFileInformation=0x31e618 | out: lpFileInformation=0x31e618*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3e4ce49a, ftCreationTime.dwHighDateTime=0x1ca043f, ftLastAccessTime.dwLowDateTime=0x3e4ce49a, ftLastAccessTime.dwHighDateTime=0x1ca043f, ftLastWriteTime.dwLowDateTime=0x2f893740, ftLastWriteTime.dwHighDateTime=0x1d6eb7f, nFileSizeHigh=0x0, nFileSizeLow=0x500)) returned 1 [0127.675] MoveFileW (lpExistingFileName="C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Accessories\\System Tools\\Character Map.lnk" (normalized: "c:\\programdata\\microsoft\\windows\\start menu\\programs\\accessories\\system tools\\character map.lnk"), lpNewFileName="C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Accessories\\System Tools\\Character Map.lnk.[neftet@tutanota.com].boom" (normalized: "c:\\programdata\\microsoft\\windows\\start menu\\programs\\accessories\\system tools\\character map.lnk.[neftet@tutanota.com].boom")) returned 1 [0127.676] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Accessories\\System Tools\\dfrgui.lnk", nBufferLength=0x105, lpBuffer=0x31e01c, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Accessories\\System Tools\\dfrgui.lnk", lpFilePart=0x0) returned 0x58 [0127.676] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Accessories\\System Tools\\dfrgui.lnk" (normalized: "c:\\programdata\\microsoft\\windows\\start menu\\programs\\accessories\\system tools\\dfrgui.lnk"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x274 [0127.676] GetFileType (hFile=0x274) returned 0x1 [0127.677] GetFileType (hFile=0x274) returned 0x1 [0127.677] GetFileSize (in: hFile=0x274, lpFileSizeHigh=0x31e618 | out: lpFileSizeHigh=0x31e618*=0x0) returned 0x520 [0127.677] ReadFile (in: hFile=0x274, lpBuffer=0x26c36c8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x31e5c4, lpOverlapped=0x0 | out: lpBuffer=0x26c36c8*, lpNumberOfBytesRead=0x31e5c4*=0x520, lpOverlapped=0x0) returned 1 [0127.677] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Accessories\\System Tools\\dfrgui.lnk", nBufferLength=0x105, lpBuffer=0x31e008, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Accessories\\System Tools\\dfrgui.lnk", lpFilePart=0x0) returned 0x58 [0127.677] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Accessories\\System Tools\\dfrgui.lnk" (normalized: "c:\\programdata\\microsoft\\windows\\start menu\\programs\\accessories\\system tools\\dfrgui.lnk"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x274 [0127.678] GetFileType (hFile=0x274) returned 0x1 [0127.679] GetFileType (hFile=0x274) returned 0x1 [0127.679] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Accessories\\System Tools\\dfrgui.lnk", nBufferLength=0x105, lpBuffer=0x31e13c, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Accessories\\System Tools\\dfrgui.lnk", lpFilePart=0x0) returned 0x58 [0127.680] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Accessories\\System Tools\\dfrgui.lnk.[neftet@tutanota.com].boom", nBufferLength=0x105, lpBuffer=0x31e13c, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Accessories\\System Tools\\dfrgui.lnk.[neftet@tutanota.com].boom", lpFilePart=0x0) returned 0x73 [0127.680] GetFileAttributesExW (in: lpFileName="C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Accessories\\System Tools\\dfrgui.lnk" (normalized: "c:\\programdata\\microsoft\\windows\\start menu\\programs\\accessories\\system tools\\dfrgui.lnk"), fInfoLevelId=0x0, lpFileInformation=0x31e618 | out: lpFileInformation=0x31e618*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x297b3b95, ftCreationTime.dwHighDateTime=0x1ca043f, ftLastAccessTime.dwLowDateTime=0x297b3b95, ftLastAccessTime.dwHighDateTime=0x1ca043f, ftLastWriteTime.dwLowDateTime=0x2f893740, ftLastWriteTime.dwHighDateTime=0x1d6eb7f, nFileSizeHigh=0x0, nFileSizeLow=0x520)) returned 1 [0127.680] MoveFileW (lpExistingFileName="C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Accessories\\System Tools\\dfrgui.lnk" (normalized: "c:\\programdata\\microsoft\\windows\\start menu\\programs\\accessories\\system tools\\dfrgui.lnk"), lpNewFileName="C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Accessories\\System Tools\\dfrgui.lnk.[neftet@tutanota.com].boom" (normalized: "c:\\programdata\\microsoft\\windows\\start menu\\programs\\accessories\\system tools\\dfrgui.lnk.[neftet@tutanota.com].boom")) returned 1 [0127.681] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Accessories\\System Tools\\Disk Cleanup.lnk", nBufferLength=0x105, lpBuffer=0x31e01c, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Accessories\\System Tools\\Disk Cleanup.lnk", lpFilePart=0x0) returned 0x5e [0127.681] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Accessories\\System Tools\\Disk Cleanup.lnk" (normalized: "c:\\programdata\\microsoft\\windows\\start menu\\programs\\accessories\\system tools\\disk cleanup.lnk"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x274 [0127.681] GetFileType (hFile=0x274) returned 0x1 [0127.681] GetFileType (hFile=0x274) returned 0x1 [0127.681] GetFileSize (in: hFile=0x274, lpFileSizeHigh=0x31e618 | out: lpFileSizeHigh=0x31e618*=0x0) returned 0x500 [0127.681] ReadFile (in: hFile=0x274, lpBuffer=0x26c7c00, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x31e5c4, lpOverlapped=0x0 | out: lpBuffer=0x26c7c00*, lpNumberOfBytesRead=0x31e5c4*=0x500, lpOverlapped=0x0) returned 1 [0127.682] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Accessories\\System Tools\\Disk Cleanup.lnk", nBufferLength=0x105, lpBuffer=0x31e008, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Accessories\\System Tools\\Disk Cleanup.lnk", lpFilePart=0x0) returned 0x5e [0127.682] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Accessories\\System Tools\\Disk Cleanup.lnk" (normalized: "c:\\programdata\\microsoft\\windows\\start menu\\programs\\accessories\\system tools\\disk cleanup.lnk"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x274 [0127.683] GetFileType (hFile=0x274) returned 0x1 [0127.683] GetFileType (hFile=0x274) returned 0x1 [0127.683] WriteFile (in: hFile=0x274, lpBuffer=0x26ca690*, nNumberOfBytesToWrite=0x500, lpNumberOfBytesWritten=0x31e58c, lpOverlapped=0x0 | out: lpBuffer=0x26ca690*, lpNumberOfBytesWritten=0x31e58c*=0x500, lpOverlapped=0x0) returned 1 [0127.684] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Accessories\\System Tools\\Disk Cleanup.lnk", nBufferLength=0x105, lpBuffer=0x31e13c, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Accessories\\System Tools\\Disk Cleanup.lnk", lpFilePart=0x0) returned 0x5e [0127.684] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Accessories\\System Tools\\Disk Cleanup.lnk.[neftet@tutanota.com].boom", nBufferLength=0x105, lpBuffer=0x31e13c, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Accessories\\System Tools\\Disk Cleanup.lnk.[neftet@tutanota.com].boom", lpFilePart=0x0) returned 0x79 [0127.684] GetFileAttributesExW (in: lpFileName="C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Accessories\\System Tools\\Disk Cleanup.lnk" (normalized: "c:\\programdata\\microsoft\\windows\\start menu\\programs\\accessories\\system tools\\disk cleanup.lnk"), fInfoLevelId=0x0, lpFileInformation=0x31e618 | out: lpFileInformation=0x31e618*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3d31a0d9, ftCreationTime.dwHighDateTime=0x1ca043f, ftLastAccessTime.dwLowDateTime=0x3d31a0d9, ftLastAccessTime.dwHighDateTime=0x1ca043f, ftLastWriteTime.dwLowDateTime=0x2f893740, ftLastWriteTime.dwHighDateTime=0x1d6eb7f, nFileSizeHigh=0x0, nFileSizeLow=0x500)) returned 1 [0127.684] MoveFileW (lpExistingFileName="C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Accessories\\System Tools\\Disk Cleanup.lnk" (normalized: "c:\\programdata\\microsoft\\windows\\start menu\\programs\\accessories\\system tools\\disk cleanup.lnk"), lpNewFileName="C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Accessories\\System Tools\\Disk Cleanup.lnk.[neftet@tutanota.com].boom" (normalized: "c:\\programdata\\microsoft\\windows\\start menu\\programs\\accessories\\system tools\\disk cleanup.lnk.[neftet@tutanota.com].boom")) returned 1 [0127.686] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Accessories\\System Tools\\Resource Monitor.lnk", nBufferLength=0x105, lpBuffer=0x31e01c, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Accessories\\System Tools\\Resource Monitor.lnk", lpFilePart=0x0) returned 0x62 [0127.686] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Accessories\\System Tools\\Resource Monitor.lnk" (normalized: "c:\\programdata\\microsoft\\windows\\start menu\\programs\\accessories\\system tools\\resource monitor.lnk"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x274 [0127.686] GetFileType (hFile=0x274) returned 0x1 [0127.686] GetFileType (hFile=0x274) returned 0x1 [0127.686] GetFileSize (in: hFile=0x274, lpFileSizeHigh=0x31e618 | out: lpFileSizeHigh=0x31e618*=0x0) returned 0x4f0 [0127.686] ReadFile (in: hFile=0x274, lpBuffer=0x26cc154, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x31e5c4, lpOverlapped=0x0 | out: lpBuffer=0x26cc154*, lpNumberOfBytesRead=0x31e5c4*=0x4f0, lpOverlapped=0x0) returned 1 [0127.687] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Accessories\\System Tools\\Resource Monitor.lnk", nBufferLength=0x105, lpBuffer=0x31e008, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Accessories\\System Tools\\Resource Monitor.lnk", lpFilePart=0x0) returned 0x62 [0127.687] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Accessories\\System Tools\\Resource Monitor.lnk" (normalized: "c:\\programdata\\microsoft\\windows\\start menu\\programs\\accessories\\system tools\\resource monitor.lnk"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x274 [0127.688] GetFileType (hFile=0x274) returned 0x1 [0127.688] GetFileType (hFile=0x274) returned 0x1 [0127.688] WriteFile (in: hFile=0x274, lpBuffer=0x26cebe4*, nNumberOfBytesToWrite=0x4f0, lpNumberOfBytesWritten=0x31e58c, lpOverlapped=0x0 | out: lpBuffer=0x26cebe4*, lpNumberOfBytesWritten=0x31e58c*=0x4f0, lpOverlapped=0x0) returned 1 [0127.689] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Accessories\\System Tools\\Resource Monitor.lnk", nBufferLength=0x105, lpBuffer=0x31e13c, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Accessories\\System Tools\\Resource Monitor.lnk", lpFilePart=0x0) returned 0x62 [0127.689] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Accessories\\System Tools\\Resource Monitor.lnk.[neftet@tutanota.com].boom", nBufferLength=0x105, lpBuffer=0x31e13c, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Accessories\\System Tools\\Resource Monitor.lnk.[neftet@tutanota.com].boom", lpFilePart=0x0) returned 0x7d [0127.690] GetFileAttributesExW (in: lpFileName="C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Accessories\\System Tools\\Resource Monitor.lnk" (normalized: "c:\\programdata\\microsoft\\windows\\start menu\\programs\\accessories\\system tools\\resource monitor.lnk"), fInfoLevelId=0x0, lpFileInformation=0x31e618 | out: lpFileInformation=0x31e618*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x141abfff, ftCreationTime.dwHighDateTime=0x1ca043f, ftLastAccessTime.dwLowDateTime=0x141abfff, ftLastAccessTime.dwHighDateTime=0x1ca043f, ftLastWriteTime.dwLowDateTime=0x2f8b98a0, ftLastWriteTime.dwHighDateTime=0x1d6eb7f, nFileSizeHigh=0x0, nFileSizeLow=0x4f0)) returned 1 [0127.690] MoveFileW (lpExistingFileName="C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Accessories\\System Tools\\Resource Monitor.lnk" (normalized: "c:\\programdata\\microsoft\\windows\\start menu\\programs\\accessories\\system tools\\resource monitor.lnk"), lpNewFileName="C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Accessories\\System Tools\\Resource Monitor.lnk.[neftet@tutanota.com].boom" (normalized: "c:\\programdata\\microsoft\\windows\\start menu\\programs\\accessories\\system tools\\resource monitor.lnk.[neftet@tutanota.com].boom")) returned 1 [0127.691] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Accessories\\System Tools\\System Information.lnk", nBufferLength=0x105, lpBuffer=0x31e01c, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Accessories\\System Tools\\System Information.lnk", lpFilePart=0x0) returned 0x64 [0127.691] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Accessories\\System Tools\\System Information.lnk" (normalized: "c:\\programdata\\microsoft\\windows\\start menu\\programs\\accessories\\system tools\\system information.lnk"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x274 [0127.691] GetFileType (hFile=0x274) returned 0x1 [0127.691] GetFileType (hFile=0x274) returned 0x1 [0127.691] GetFileSize (in: hFile=0x274, lpFileSizeHigh=0x31e618 | out: lpFileSizeHigh=0x31e618*=0x0) returned 0x500 [0127.691] ReadFile (in: hFile=0x274, lpBuffer=0x26d06d8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x31e5c4, lpOverlapped=0x0 | out: lpBuffer=0x26d06d8*, lpNumberOfBytesRead=0x31e5c4*=0x500, lpOverlapped=0x0) returned 1 [0127.692] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Accessories\\System Tools\\System Information.lnk", nBufferLength=0x105, lpBuffer=0x31e008, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Accessories\\System Tools\\System Information.lnk", lpFilePart=0x0) returned 0x64 [0127.692] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Accessories\\System Tools\\System Information.lnk" (normalized: "c:\\programdata\\microsoft\\windows\\start menu\\programs\\accessories\\system tools\\system information.lnk"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x274 [0127.693] GetFileType (hFile=0x274) returned 0x1 [0127.693] GetFileType (hFile=0x274) returned 0x1 [0127.694] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Accessories\\System Tools\\System Information.lnk", nBufferLength=0x105, lpBuffer=0x31e13c, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Accessories\\System Tools\\System Information.lnk", lpFilePart=0x0) returned 0x64 [0127.694] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Accessories\\System Tools\\System Information.lnk.[neftet@tutanota.com].boom", nBufferLength=0x105, lpBuffer=0x31e13c, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Accessories\\System Tools\\System Information.lnk.[neftet@tutanota.com].boom", lpFilePart=0x0) returned 0x7f [0127.694] GetFileAttributesExW (in: lpFileName="C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Accessories\\System Tools\\System Information.lnk" (normalized: "c:\\programdata\\microsoft\\windows\\start menu\\programs\\accessories\\system tools\\system information.lnk"), fInfoLevelId=0x0, lpFileInformation=0x31e618 | out: lpFileInformation=0x31e618*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa5e7f40, ftCreationTime.dwHighDateTime=0x1ca043f, ftLastAccessTime.dwLowDateTime=0xa5e7f40, ftLastAccessTime.dwHighDateTime=0x1ca043f, ftLastWriteTime.dwLowDateTime=0x2f8b98a0, ftLastWriteTime.dwHighDateTime=0x1d6eb7f, nFileSizeHigh=0x0, nFileSizeLow=0x500)) returned 1 [0127.694] MoveFileW (lpExistingFileName="C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Accessories\\System Tools\\System Information.lnk" (normalized: "c:\\programdata\\microsoft\\windows\\start menu\\programs\\accessories\\system tools\\system information.lnk"), lpNewFileName="C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Accessories\\System Tools\\System Information.lnk.[neftet@tutanota.com].boom" (normalized: "c:\\programdata\\microsoft\\windows\\start menu\\programs\\accessories\\system tools\\system information.lnk.[neftet@tutanota.com].boom")) returned 1 [0127.697] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Accessories\\System Tools\\System Restore.lnk", nBufferLength=0x105, lpBuffer=0x31e01c, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Accessories\\System Tools\\System Restore.lnk", lpFilePart=0x0) returned 0x60 [0127.697] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Accessories\\System Tools\\System Restore.lnk" (normalized: "c:\\programdata\\microsoft\\windows\\start menu\\programs\\accessories\\system tools\\system restore.lnk"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x274 [0127.697] GetFileType (hFile=0x274) returned 0x1 [0127.697] GetFileType (hFile=0x274) returned 0x1 [0127.697] GetFileSize (in: hFile=0x274, lpFileSizeHigh=0x31e618 | out: lpFileSizeHigh=0x31e618*=0x0) returned 0x4f0 [0127.697] ReadFile (in: hFile=0x274, lpBuffer=0x26d4c60, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x31e5c4, lpOverlapped=0x0 | out: lpBuffer=0x26d4c60*, lpNumberOfBytesRead=0x31e5c4*=0x4f0, lpOverlapped=0x0) returned 1 [0127.698] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Accessories\\System Tools\\System Restore.lnk", nBufferLength=0x105, lpBuffer=0x31e008, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Accessories\\System Tools\\System Restore.lnk", lpFilePart=0x0) returned 0x60 [0127.698] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Accessories\\System Tools\\System Restore.lnk" (normalized: "c:\\programdata\\microsoft\\windows\\start menu\\programs\\accessories\\system tools\\system restore.lnk"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x274 [0127.699] GetFileType (hFile=0x274) returned 0x1 [0127.699] GetFileType (hFile=0x274) returned 0x1 [0127.700] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Accessories\\System Tools\\System Restore.lnk", nBufferLength=0x105, lpBuffer=0x31e13c, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Accessories\\System Tools\\System Restore.lnk", lpFilePart=0x0) returned 0x60 [0127.700] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Accessories\\System Tools\\System Restore.lnk.[neftet@tutanota.com].boom", nBufferLength=0x105, lpBuffer=0x31e13c, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Accessories\\System Tools\\System Restore.lnk.[neftet@tutanota.com].boom", lpFilePart=0x0) returned 0x7b [0127.700] GetFileAttributesExW (in: lpFileName="C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Accessories\\System Tools\\System Restore.lnk" (normalized: "c:\\programdata\\microsoft\\windows\\start menu\\programs\\accessories\\system tools\\system restore.lnk"), fInfoLevelId=0x0, lpFileInformation=0x31e618 | out: lpFileInformation=0x31e618*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3c8d61e7, ftCreationTime.dwHighDateTime=0x1ca043f, ftLastAccessTime.dwLowDateTime=0x3c8d61e7, ftLastAccessTime.dwHighDateTime=0x1ca043f, ftLastWriteTime.dwLowDateTime=0x2f8b98a0, ftLastWriteTime.dwHighDateTime=0x1d6eb7f, nFileSizeHigh=0x0, nFileSizeLow=0x4f0)) returned 1 [0127.700] MoveFileW (lpExistingFileName="C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Accessories\\System Tools\\System Restore.lnk" (normalized: "c:\\programdata\\microsoft\\windows\\start menu\\programs\\accessories\\system tools\\system restore.lnk"), lpNewFileName="C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Accessories\\System Tools\\System Restore.lnk.[neftet@tutanota.com].boom" (normalized: "c:\\programdata\\microsoft\\windows\\start menu\\programs\\accessories\\system tools\\system restore.lnk.[neftet@tutanota.com].boom")) returned 1 [0127.702] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Accessories\\System Tools\\Task Scheduler.lnk", nBufferLength=0x105, lpBuffer=0x31e01c, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Accessories\\System Tools\\Task Scheduler.lnk", lpFilePart=0x0) returned 0x60 [0127.702] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Accessories\\System Tools\\Task Scheduler.lnk" (normalized: "c:\\programdata\\microsoft\\windows\\start menu\\programs\\accessories\\system tools\\task scheduler.lnk"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x274 [0127.702] GetFileType (hFile=0x274) returned 0x1 [0127.702] GetFileType (hFile=0x274) returned 0x1 [0127.702] GetFileSize (in: hFile=0x274, lpFileSizeHigh=0x31e618 | out: lpFileSizeHigh=0x31e618*=0x0) returned 0x510 [0127.702] ReadFile (in: hFile=0x274, lpBuffer=0x26d91d0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x31e5c4, lpOverlapped=0x0 | out: lpBuffer=0x26d91d0*, lpNumberOfBytesRead=0x31e5c4*=0x510, lpOverlapped=0x0) returned 1 [0127.703] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Accessories\\System Tools\\Task Scheduler.lnk", nBufferLength=0x105, lpBuffer=0x31e008, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Accessories\\System Tools\\Task Scheduler.lnk", lpFilePart=0x0) returned 0x60 [0127.703] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Accessories\\System Tools\\Task Scheduler.lnk" (normalized: "c:\\programdata\\microsoft\\windows\\start menu\\programs\\accessories\\system tools\\task scheduler.lnk"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x274 [0127.704] GetFileType (hFile=0x274) returned 0x1 [0127.704] GetFileType (hFile=0x274) returned 0x1 [0127.705] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Accessories\\System Tools\\Task Scheduler.lnk", nBufferLength=0x105, lpBuffer=0x31e13c, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Accessories\\System Tools\\Task Scheduler.lnk", lpFilePart=0x0) returned 0x60 [0127.705] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Accessories\\System Tools\\Task Scheduler.lnk.[neftet@tutanota.com].boom", nBufferLength=0x105, lpBuffer=0x31e13c, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Accessories\\System Tools\\Task Scheduler.lnk.[neftet@tutanota.com].boom", lpFilePart=0x0) returned 0x7b [0127.705] GetFileAttributesExW (in: lpFileName="C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Accessories\\System Tools\\Task Scheduler.lnk" (normalized: "c:\\programdata\\microsoft\\windows\\start menu\\programs\\accessories\\system tools\\task scheduler.lnk"), fInfoLevelId=0x0, lpFileInformation=0x31e618 | out: lpFileInformation=0x31e618*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2b9eb814, ftCreationTime.dwHighDateTime=0x1ca043f, ftLastAccessTime.dwLowDateTime=0x2b9eb814, ftLastAccessTime.dwHighDateTime=0x1ca043f, ftLastWriteTime.dwLowDateTime=0x2f8dfa00, ftLastWriteTime.dwHighDateTime=0x1d6eb7f, nFileSizeHigh=0x0, nFileSizeLow=0x510)) returned 1 [0127.705] MoveFileW (lpExistingFileName="C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Accessories\\System Tools\\Task Scheduler.lnk" (normalized: "c:\\programdata\\microsoft\\windows\\start menu\\programs\\accessories\\system tools\\task scheduler.lnk"), lpNewFileName="C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Accessories\\System Tools\\Task Scheduler.lnk.[neftet@tutanota.com].boom" (normalized: "c:\\programdata\\microsoft\\windows\\start menu\\programs\\accessories\\system tools\\task scheduler.lnk.[neftet@tutanota.com].boom")) returned 1 [0127.707] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Accessories\\System Tools\\Windows Easy Transfer Reports.lnk", nBufferLength=0x105, lpBuffer=0x31e01c, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Accessories\\System Tools\\Windows Easy Transfer Reports.lnk", lpFilePart=0x0) returned 0x6f [0127.707] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Accessories\\System Tools\\Windows Easy Transfer Reports.lnk" (normalized: "c:\\programdata\\microsoft\\windows\\start menu\\programs\\accessories\\system tools\\windows easy transfer reports.lnk"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x274 [0127.707] GetFileType (hFile=0x274) returned 0x1 [0127.707] GetFileType (hFile=0x274) returned 0x1 [0127.707] GetFileSize (in: hFile=0x274, lpFileSizeHigh=0x31e618 | out: lpFileSizeHigh=0x31e618*=0x0) returned 0x540 [0127.707] ReadFile (in: hFile=0x274, lpBuffer=0x26dd7c8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x31e5c4, lpOverlapped=0x0 | out: lpBuffer=0x26dd7c8*, lpNumberOfBytesRead=0x31e5c4*=0x540, lpOverlapped=0x0) returned 1 [0127.708] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Accessories\\System Tools\\Windows Easy Transfer Reports.lnk", nBufferLength=0x105, lpBuffer=0x31e008, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Accessories\\System Tools\\Windows Easy Transfer Reports.lnk", lpFilePart=0x0) returned 0x6f [0127.708] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Accessories\\System Tools\\Windows Easy Transfer Reports.lnk" (normalized: "c:\\programdata\\microsoft\\windows\\start menu\\programs\\accessories\\system tools\\windows easy transfer reports.lnk"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x274 [0127.709] GetFileType (hFile=0x274) returned 0x1 [0127.709] GetFileType (hFile=0x274) returned 0x1 [0127.709] WriteFile (in: hFile=0x274, lpBuffer=0x26e02d8*, nNumberOfBytesToWrite=0x540, lpNumberOfBytesWritten=0x31e58c, lpOverlapped=0x0 | out: lpBuffer=0x26e02d8*, lpNumberOfBytesWritten=0x31e58c*=0x540, lpOverlapped=0x0) returned 1 [0127.710] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Accessories\\System Tools\\Windows Easy Transfer Reports.lnk", nBufferLength=0x105, lpBuffer=0x31e13c, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Accessories\\System Tools\\Windows Easy Transfer Reports.lnk", lpFilePart=0x0) returned 0x6f [0127.710] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Accessories\\System Tools\\Windows Easy Transfer Reports.lnk.[neftet@tutanota.com].boom", nBufferLength=0x105, lpBuffer=0x31e13c, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Accessories\\System Tools\\Windows Easy Transfer Reports.lnk.[neftet@tutanota.com].boom", lpFilePart=0x0) returned 0x8a [0127.711] GetFileAttributesExW (in: lpFileName="C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Accessories\\System Tools\\Windows Easy Transfer Reports.lnk" (normalized: "c:\\programdata\\microsoft\\windows\\start menu\\programs\\accessories\\system tools\\windows easy transfer reports.lnk"), fInfoLevelId=0x0, lpFileInformation=0x31e618 | out: lpFileInformation=0x31e618*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8ace9ee9, ftCreationTime.dwHighDateTime=0x1ca043f, ftLastAccessTime.dwLowDateTime=0x8ace9ee9, ftLastAccessTime.dwHighDateTime=0x1ca043f, ftLastWriteTime.dwLowDateTime=0x2f8dfa00, ftLastWriteTime.dwHighDateTime=0x1d6eb7f, nFileSizeHigh=0x0, nFileSizeLow=0x540)) returned 1 [0127.711] MoveFileW (lpExistingFileName="C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Accessories\\System Tools\\Windows Easy Transfer Reports.lnk" (normalized: "c:\\programdata\\microsoft\\windows\\start menu\\programs\\accessories\\system tools\\windows easy transfer reports.lnk"), lpNewFileName="C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Accessories\\System Tools\\Windows Easy Transfer Reports.lnk.[neftet@tutanota.com].boom" (normalized: "c:\\programdata\\microsoft\\windows\\start menu\\programs\\accessories\\system tools\\windows easy transfer reports.lnk.[neftet@tutanota.com].boom")) returned 1 [0127.712] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Accessories\\System Tools\\Windows Easy Transfer.lnk", nBufferLength=0x105, lpBuffer=0x31e01c, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Accessories\\System Tools\\Windows Easy Transfer.lnk", lpFilePart=0x0) returned 0x67 [0127.712] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Accessories\\System Tools\\Windows Easy Transfer.lnk" (normalized: "c:\\programdata\\microsoft\\windows\\start menu\\programs\\accessories\\system tools\\windows easy transfer.lnk"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x274 [0127.712] GetFileType (hFile=0x274) returned 0x1 [0127.712] GetFileType (hFile=0x274) returned 0x1 [0127.712] GetFileSize (in: hFile=0x274, lpFileSizeHigh=0x31e618 | out: lpFileSizeHigh=0x31e618*=0x0) returned 0x540 [0127.712] ReadFile (in: hFile=0x274, lpBuffer=0x26e1e64, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x31e5c4, lpOverlapped=0x0 | out: lpBuffer=0x26e1e64*, lpNumberOfBytesRead=0x31e5c4*=0x540, lpOverlapped=0x0) returned 1 [0127.713] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Accessories\\System Tools\\Windows Easy Transfer.lnk", nBufferLength=0x105, lpBuffer=0x31e008, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Accessories\\System Tools\\Windows Easy Transfer.lnk", lpFilePart=0x0) returned 0x67 [0127.713] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Accessories\\System Tools\\Windows Easy Transfer.lnk" (normalized: "c:\\programdata\\microsoft\\windows\\start menu\\programs\\accessories\\system tools\\windows easy transfer.lnk"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x274 [0127.714] GetFileType (hFile=0x274) returned 0x1 [0127.714] GetFileType (hFile=0x274) returned 0x1 [0127.714] WriteFile (in: hFile=0x274, lpBuffer=0x26e4954*, nNumberOfBytesToWrite=0x540, lpNumberOfBytesWritten=0x31e58c, lpOverlapped=0x0 | out: lpBuffer=0x26e4954*, lpNumberOfBytesWritten=0x31e58c*=0x540, lpOverlapped=0x0) returned 1 [0127.715] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Accessories\\System Tools\\Windows Easy Transfer.lnk", nBufferLength=0x105, lpBuffer=0x31e13c, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Accessories\\System Tools\\Windows Easy Transfer.lnk", lpFilePart=0x0) returned 0x67 [0127.715] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Accessories\\System Tools\\Windows Easy Transfer.lnk.[neftet@tutanota.com].boom", nBufferLength=0x105, lpBuffer=0x31e13c, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Accessories\\System Tools\\Windows Easy Transfer.lnk.[neftet@tutanota.com].boom", lpFilePart=0x0) returned 0x82 [0127.715] GetFileAttributesExW (in: lpFileName="C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Accessories\\System Tools\\Windows Easy Transfer.lnk" (normalized: "c:\\programdata\\microsoft\\windows\\start menu\\programs\\accessories\\system tools\\windows easy transfer.lnk"), fInfoLevelId=0x0, lpFileInformation=0x31e618 | out: lpFileInformation=0x31e618*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8ac9dc28, ftCreationTime.dwHighDateTime=0x1ca043f, ftLastAccessTime.dwLowDateTime=0x8ac9dc28, ftLastAccessTime.dwHighDateTime=0x1ca043f, ftLastWriteTime.dwLowDateTime=0x2f8dfa00, ftLastWriteTime.dwHighDateTime=0x1d6eb7f, nFileSizeHigh=0x0, nFileSizeLow=0x540)) returned 1 [0127.716] MoveFileW (lpExistingFileName="C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Accessories\\System Tools\\Windows Easy Transfer.lnk" (normalized: "c:\\programdata\\microsoft\\windows\\start menu\\programs\\accessories\\system tools\\windows easy transfer.lnk"), lpNewFileName="C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Accessories\\System Tools\\Windows Easy Transfer.lnk.[neftet@tutanota.com].boom" (normalized: "c:\\programdata\\microsoft\\windows\\start menu\\programs\\accessories\\system tools\\windows easy transfer.lnk.[neftet@tutanota.com].boom")) returned 1 [0127.717] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Accessories\\Tablet PC", nBufferLength=0x105, lpBuffer=0x31e15c, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Accessories\\Tablet PC", lpFilePart=0x0) returned 0x4a [0127.717] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Accessories\\Tablet PC\\", nBufferLength=0x105, lpBuffer=0x31e130, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Accessories\\Tablet PC\\", lpFilePart=0x0) returned 0x4b [0127.717] FindFirstFileW (in: lpFileName="C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Accessories\\Tablet PC\\*", lpFindFileData=0x31e37c | out: lpFindFileData=0x31e37c*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x9182055d, ftCreationTime.dwHighDateTime=0x1cbf8eb, ftLastAccessTime.dwLowDateTime=0x8126b520, ftLastAccessTime.dwHighDateTime=0x1d2de2a, ftLastWriteTime.dwLowDateTime=0x81291680, ftLastWriteTime.dwHighDateTime=0x1d2de2a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x381b80 [0127.718] FindClose (in: hFindFile=0x381b80 | out: hFindFile=0x381b80) returned 1 [0127.718] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Accessories\\Tablet PC", nBufferLength=0x105, lpBuffer=0x31e15c, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Accessories\\Tablet PC", lpFilePart=0x0) returned 0x4a [0127.718] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Accessories\\Tablet PC\\", nBufferLength=0x105, lpBuffer=0x31e130, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Accessories\\Tablet PC\\", lpFilePart=0x0) returned 0x4b [0127.718] FindFirstFileW (in: lpFileName="C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Accessories\\Tablet PC\\*", lpFindFileData=0x31e37c | out: lpFindFileData=0x31e37c*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x9182055d, ftCreationTime.dwHighDateTime=0x1cbf8eb, ftLastAccessTime.dwLowDateTime=0x8126b520, ftLastAccessTime.dwHighDateTime=0x1d2de2a, ftLastWriteTime.dwLowDateTime=0x81291680, ftLastWriteTime.dwHighDateTime=0x1d2de2a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x381b80 [0127.718] FindClose (in: hFindFile=0x381b80 | out: hFindFile=0x381b80) returned 1 [0127.718] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Accessories\\Tablet PC\\ShapeCollector.lnk", nBufferLength=0x105, lpBuffer=0x31e01c, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Accessories\\Tablet PC\\ShapeCollector.lnk", lpFilePart=0x0) returned 0x5d [0127.718] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Accessories\\Tablet PC\\ShapeCollector.lnk" (normalized: "c:\\programdata\\microsoft\\windows\\start menu\\programs\\accessories\\tablet pc\\shapecollector.lnk"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x274 [0127.718] GetFileType (hFile=0x274) returned 0x1 [0127.718] GetFileType (hFile=0x274) returned 0x1 [0127.719] GetFileSize (in: hFile=0x274, lpFileSizeHigh=0x31e618 | out: lpFileSizeHigh=0x31e618*=0x0) returned 0x5b0 [0127.719] ReadFile (in: hFile=0x274, lpBuffer=0x26e8bf0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x31e5c4, lpOverlapped=0x0 | out: lpBuffer=0x26e8bf0*, lpNumberOfBytesRead=0x31e5c4*=0x5b0, lpOverlapped=0x0) returned 1 [0127.719] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Accessories\\Tablet PC\\ShapeCollector.lnk", nBufferLength=0x105, lpBuffer=0x31e008, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Accessories\\Tablet PC\\ShapeCollector.lnk", lpFilePart=0x0) returned 0x5d [0127.719] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Accessories\\Tablet PC\\ShapeCollector.lnk" (normalized: "c:\\programdata\\microsoft\\windows\\start menu\\programs\\accessories\\tablet pc\\shapecollector.lnk"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x274 [0127.720] GetFileType (hFile=0x274) returned 0x1 [0127.720] GetFileType (hFile=0x274) returned 0x1 [0127.721] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Accessories\\Tablet PC\\ShapeCollector.lnk", nBufferLength=0x105, lpBuffer=0x31e13c, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Accessories\\Tablet PC\\ShapeCollector.lnk", lpFilePart=0x0) returned 0x5d [0127.721] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Accessories\\Tablet PC\\ShapeCollector.lnk.[neftet@tutanota.com].boom", nBufferLength=0x105, lpBuffer=0x31e13c, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Accessories\\Tablet PC\\ShapeCollector.lnk.[neftet@tutanota.com].boom", lpFilePart=0x0) returned 0x78 [0127.722] GetFileAttributesExW (in: lpFileName="C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Accessories\\Tablet PC\\ShapeCollector.lnk" (normalized: "c:\\programdata\\microsoft\\windows\\start menu\\programs\\accessories\\tablet pc\\shapecollector.lnk"), fInfoLevelId=0x0, lpFileInformation=0x31e618 | out: lpFileInformation=0x31e618*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x811d2fa0, ftCreationTime.dwHighDateTime=0x1d2de2a, ftLastAccessTime.dwLowDateTime=0x811d2fa0, ftLastAccessTime.dwHighDateTime=0x1d2de2a, ftLastWriteTime.dwLowDateTime=0x2f905b60, ftLastWriteTime.dwHighDateTime=0x1d6eb7f, nFileSizeHigh=0x0, nFileSizeLow=0x5b0)) returned 1 [0127.722] MoveFileW (lpExistingFileName="C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Accessories\\Tablet PC\\ShapeCollector.lnk" (normalized: "c:\\programdata\\microsoft\\windows\\start menu\\programs\\accessories\\tablet pc\\shapecollector.lnk"), lpNewFileName="C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Accessories\\Tablet PC\\ShapeCollector.lnk.[neftet@tutanota.com].boom" (normalized: "c:\\programdata\\microsoft\\windows\\start menu\\programs\\accessories\\tablet pc\\shapecollector.lnk.[neftet@tutanota.com].boom")) returned 1 [0127.723] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Accessories\\Tablet PC\\TabTip.lnk", nBufferLength=0x105, lpBuffer=0x31e01c, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Accessories\\Tablet PC\\TabTip.lnk", lpFilePart=0x0) returned 0x55 [0127.723] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Accessories\\Tablet PC\\TabTip.lnk" (normalized: "c:\\programdata\\microsoft\\windows\\start menu\\programs\\accessories\\tablet pc\\tabtip.lnk"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x274 [0127.723] GetFileType (hFile=0x274) returned 0x1 [0127.723] GetFileType (hFile=0x274) returned 0x1 [0127.723] GetFileSize (in: hFile=0x274, lpFileSizeHigh=0x31e618 | out: lpFileSizeHigh=0x31e618*=0x0) returned 0x580 [0127.723] ReadFile (in: hFile=0x274, lpBuffer=0x26ed250, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x31e5c4, lpOverlapped=0x0 | out: lpBuffer=0x26ed250*, lpNumberOfBytesRead=0x31e5c4*=0x580, lpOverlapped=0x0) returned 1 [0127.724] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Accessories\\Tablet PC\\TabTip.lnk", nBufferLength=0x105, lpBuffer=0x31e008, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Accessories\\Tablet PC\\TabTip.lnk", lpFilePart=0x0) returned 0x55 [0127.724] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Accessories\\Tablet PC\\TabTip.lnk" (normalized: "c:\\programdata\\microsoft\\windows\\start menu\\programs\\accessories\\tablet pc\\tabtip.lnk"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x274 [0127.725] GetFileType (hFile=0x274) returned 0x1 [0127.725] GetFileType (hFile=0x274) returned 0x1 [0127.726] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Accessories\\Tablet PC\\TabTip.lnk", nBufferLength=0x105, lpBuffer=0x31e13c, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Accessories\\Tablet PC\\TabTip.lnk", lpFilePart=0x0) returned 0x55 [0127.726] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Accessories\\Tablet PC\\TabTip.lnk.[neftet@tutanota.com].boom", nBufferLength=0x105, lpBuffer=0x31e13c, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Accessories\\Tablet PC\\TabTip.lnk.[neftet@tutanota.com].boom", lpFilePart=0x0) returned 0x70 [0127.726] GetFileAttributesExW (in: lpFileName="C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Accessories\\Tablet PC\\TabTip.lnk" (normalized: "c:\\programdata\\microsoft\\windows\\start menu\\programs\\accessories\\tablet pc\\tabtip.lnk"), fInfoLevelId=0x0, lpFileInformation=0x31e618 | out: lpFileInformation=0x31e618*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8126b520, ftCreationTime.dwHighDateTime=0x1d2de2a, ftLastAccessTime.dwLowDateTime=0x8126b520, ftLastAccessTime.dwHighDateTime=0x1d2de2a, ftLastWriteTime.dwLowDateTime=0x2f905b60, ftLastWriteTime.dwHighDateTime=0x1d6eb7f, nFileSizeHigh=0x0, nFileSizeLow=0x580)) returned 1 [0127.726] MoveFileW (lpExistingFileName="C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Accessories\\Tablet PC\\TabTip.lnk" (normalized: "c:\\programdata\\microsoft\\windows\\start menu\\programs\\accessories\\tablet pc\\tabtip.lnk"), lpNewFileName="C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Accessories\\Tablet PC\\TabTip.lnk.[neftet@tutanota.com].boom" (normalized: "c:\\programdata\\microsoft\\windows\\start menu\\programs\\accessories\\tablet pc\\tabtip.lnk.[neftet@tutanota.com].boom")) returned 1 [0127.728] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Accessories\\Tablet PC\\Windows Journal.lnk", nBufferLength=0x105, lpBuffer=0x31e01c, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Accessories\\Tablet PC\\Windows Journal.lnk", lpFilePart=0x0) returned 0x5e [0127.728] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Accessories\\Tablet PC\\Windows Journal.lnk" (normalized: "c:\\programdata\\microsoft\\windows\\start menu\\programs\\accessories\\tablet pc\\windows journal.lnk"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x274 [0127.728] GetFileType (hFile=0x274) returned 0x1 [0127.728] GetFileType (hFile=0x274) returned 0x1 [0127.728] GetFileSize (in: hFile=0x274, lpFileSizeHigh=0x31e618 | out: lpFileSizeHigh=0x31e618*=0x0) returned 0x540 [0127.728] ReadFile (in: hFile=0x274, lpBuffer=0x26f1814, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x31e5c4, lpOverlapped=0x0 | out: lpBuffer=0x26f1814*, lpNumberOfBytesRead=0x31e5c4*=0x540, lpOverlapped=0x0) returned 1 [0127.729] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Accessories\\Tablet PC\\Windows Journal.lnk", nBufferLength=0x105, lpBuffer=0x31e008, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Accessories\\Tablet PC\\Windows Journal.lnk", lpFilePart=0x0) returned 0x5e [0127.729] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Accessories\\Tablet PC\\Windows Journal.lnk" (normalized: "c:\\programdata\\microsoft\\windows\\start menu\\programs\\accessories\\tablet pc\\windows journal.lnk"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x274 [0127.730] GetFileType (hFile=0x274) returned 0x1 [0127.730] GetFileType (hFile=0x274) returned 0x1 [0127.730] WriteFile (in: hFile=0x274, lpBuffer=0x26f42e8*, nNumberOfBytesToWrite=0x540, lpNumberOfBytesWritten=0x31e58c, lpOverlapped=0x0 | out: lpBuffer=0x26f42e8*, lpNumberOfBytesWritten=0x31e58c*=0x540, lpOverlapped=0x0) returned 1 [0127.731] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Accessories\\Tablet PC\\Windows Journal.lnk", nBufferLength=0x105, lpBuffer=0x31e13c, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Accessories\\Tablet PC\\Windows Journal.lnk", lpFilePart=0x0) returned 0x5e [0127.731] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Accessories\\Tablet PC\\Windows Journal.lnk.[neftet@tutanota.com].boom", nBufferLength=0x105, lpBuffer=0x31e13c, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Accessories\\Tablet PC\\Windows Journal.lnk.[neftet@tutanota.com].boom", lpFilePart=0x0) returned 0x79 [0127.731] GetFileAttributesExW (in: lpFileName="C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Accessories\\Tablet PC\\Windows Journal.lnk" (normalized: "c:\\programdata\\microsoft\\windows\\start menu\\programs\\accessories\\tablet pc\\windows journal.lnk"), fInfoLevelId=0x0, lpFileInformation=0x31e618 | out: lpFileInformation=0x31e618*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x80d103a0, ftCreationTime.dwHighDateTime=0x1d2de2a, ftLastAccessTime.dwLowDateTime=0x80d103a0, ftLastAccessTime.dwHighDateTime=0x1d2de2a, ftLastWriteTime.dwLowDateTime=0x2f905b60, ftLastWriteTime.dwHighDateTime=0x1d6eb7f, nFileSizeHigh=0x0, nFileSizeLow=0x540)) returned 1 [0127.731] MoveFileW (lpExistingFileName="C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Accessories\\Tablet PC\\Windows Journal.lnk" (normalized: "c:\\programdata\\microsoft\\windows\\start menu\\programs\\accessories\\tablet pc\\windows journal.lnk"), lpNewFileName="C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Accessories\\Tablet PC\\Windows Journal.lnk.[neftet@tutanota.com].boom" (normalized: "c:\\programdata\\microsoft\\windows\\start menu\\programs\\accessories\\tablet pc\\windows journal.lnk.[neftet@tutanota.com].boom")) returned 1 [0127.733] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Accessories\\Windows PowerShell", nBufferLength=0x105, lpBuffer=0x31e15c, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Accessories\\Windows PowerShell", lpFilePart=0x0) returned 0x53 [0127.733] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Accessories\\Windows PowerShell\\", nBufferLength=0x105, lpBuffer=0x31e130, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Accessories\\Windows PowerShell\\", lpFilePart=0x0) returned 0x54 [0127.733] FindFirstFileW (in: lpFileName="C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Accessories\\Windows PowerShell\\*", lpFindFileData=0x31e37c | out: lpFindFileData=0x31e37c*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x80020c30, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x8d79c9d7, ftLastAccessTime.dwHighDateTime=0x1ca043f, ftLastWriteTime.dwLowDateTime=0x8d7c2b37, ftLastWriteTime.dwHighDateTime=0x1ca043f, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x381b80 [0127.733] FindClose (in: hFindFile=0x381b80 | out: hFindFile=0x381b80) returned 1 [0127.733] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Accessories\\Windows PowerShell", nBufferLength=0x105, lpBuffer=0x31e15c, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Accessories\\Windows PowerShell", lpFilePart=0x0) returned 0x53 [0127.733] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Accessories\\Windows PowerShell\\", nBufferLength=0x105, lpBuffer=0x31e130, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Accessories\\Windows PowerShell\\", lpFilePart=0x0) returned 0x54 [0127.733] FindFirstFileW (in: lpFileName="C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Accessories\\Windows PowerShell\\*", lpFindFileData=0x31e37c | out: lpFindFileData=0x31e37c*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x80020c30, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x8d79c9d7, ftLastAccessTime.dwHighDateTime=0x1ca043f, ftLastWriteTime.dwLowDateTime=0x8d7c2b37, ftLastWriteTime.dwHighDateTime=0x1ca043f, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x381b80 [0127.734] FindClose (in: hFindFile=0x381b80 | out: hFindFile=0x381b80) returned 1 [0127.734] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Accessories\\Windows PowerShell\\Windows PowerShell (x86).lnk", nBufferLength=0x105, lpBuffer=0x31e01c, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Accessories\\Windows PowerShell\\Windows PowerShell (x86).lnk", lpFilePart=0x0) returned 0x70 [0127.734] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Accessories\\Windows PowerShell\\Windows PowerShell (x86).lnk" (normalized: "c:\\programdata\\microsoft\\windows\\start menu\\programs\\accessories\\windows powershell\\windows powershell (x86).lnk"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x274 [0127.734] GetFileType (hFile=0x274) returned 0x1 [0127.734] GetFileType (hFile=0x274) returned 0x1 [0127.734] GetFileSize (in: hFile=0x274, lpFileSizeHigh=0x31e618 | out: lpFileSizeHigh=0x31e618*=0x0) returned 0x7e0 [0127.734] ReadFile (in: hFile=0x274, lpBuffer=0x26f91bc, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x31e5c4, lpOverlapped=0x0 | out: lpBuffer=0x26f91bc*, lpNumberOfBytesRead=0x31e5c4*=0x7e0, lpOverlapped=0x0) returned 1 [0127.735] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Accessories\\Windows PowerShell\\Windows PowerShell (x86).lnk", nBufferLength=0x105, lpBuffer=0x31e008, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Accessories\\Windows PowerShell\\Windows PowerShell (x86).lnk", lpFilePart=0x0) returned 0x70 [0127.735] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Accessories\\Windows PowerShell\\Windows PowerShell (x86).lnk" (normalized: "c:\\programdata\\microsoft\\windows\\start menu\\programs\\accessories\\windows powershell\\windows powershell (x86).lnk"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x274 [0127.736] GetFileType (hFile=0x274) returned 0x1 [0127.736] GetFileType (hFile=0x274) returned 0x1 [0127.737] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Accessories\\Windows PowerShell\\Windows PowerShell (x86).lnk", nBufferLength=0x105, lpBuffer=0x31e13c, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Accessories\\Windows PowerShell\\Windows PowerShell (x86).lnk", lpFilePart=0x0) returned 0x70 [0127.737] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Accessories\\Windows PowerShell\\Windows PowerShell (x86).lnk.[neftet@tutanota.com].boom", nBufferLength=0x105, lpBuffer=0x31e13c, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Accessories\\Windows PowerShell\\Windows PowerShell (x86).lnk.[neftet@tutanota.com].boom", lpFilePart=0x0) returned 0x8b [0127.737] GetFileAttributesExW (in: lpFileName="C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Accessories\\Windows PowerShell\\Windows PowerShell (x86).lnk" (normalized: "c:\\programdata\\microsoft\\windows\\start menu\\programs\\accessories\\windows powershell\\windows powershell (x86).lnk"), fInfoLevelId=0x0, lpFileInformation=0x31e618 | out: lpFileInformation=0x31e618*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8038cbd7, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x7bef7178, ftLastAccessTime.dwHighDateTime=0x1ca0444, ftLastWriteTime.dwLowDateTime=0x2f92bcc0, ftLastWriteTime.dwHighDateTime=0x1d6eb7f, nFileSizeHigh=0x0, nFileSizeLow=0x7e0)) returned 1 [0127.737] MoveFileW (lpExistingFileName="C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Accessories\\Windows PowerShell\\Windows PowerShell (x86).lnk" (normalized: "c:\\programdata\\microsoft\\windows\\start menu\\programs\\accessories\\windows powershell\\windows powershell (x86).lnk"), lpNewFileName="C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Accessories\\Windows PowerShell\\Windows PowerShell (x86).lnk.[neftet@tutanota.com].boom" (normalized: "c:\\programdata\\microsoft\\windows\\start menu\\programs\\accessories\\windows powershell\\windows powershell (x86).lnk.[neftet@tutanota.com].boom")) returned 1 [0127.740] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Accessories\\Windows PowerShell\\Windows PowerShell ISE (x86).lnk", nBufferLength=0x105, lpBuffer=0x31e01c, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Accessories\\Windows PowerShell\\Windows PowerShell ISE (x86).lnk", lpFilePart=0x0) returned 0x74 [0127.740] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Accessories\\Windows PowerShell\\Windows PowerShell ISE (x86).lnk" (normalized: "c:\\programdata\\microsoft\\windows\\start menu\\programs\\accessories\\windows powershell\\windows powershell ise (x86).lnk"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x274 [0127.740] GetFileType (hFile=0x274) returned 0x1 [0127.740] GetFileType (hFile=0x274) returned 0x1 [0127.740] GetFileSize (in: hFile=0x274, lpFileSizeHigh=0x31e618 | out: lpFileSizeHigh=0x31e618*=0x0) returned 0x5d0 [0127.740] ReadFile (in: hFile=0x274, lpBuffer=0x26fdbb4, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x31e5c4, lpOverlapped=0x0 | out: lpBuffer=0x26fdbb4*, lpNumberOfBytesRead=0x31e5c4*=0x5d0, lpOverlapped=0x0) returned 1 [0127.741] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Accessories\\Windows PowerShell\\Windows PowerShell ISE (x86).lnk", nBufferLength=0x105, lpBuffer=0x31e008, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Accessories\\Windows PowerShell\\Windows PowerShell ISE (x86).lnk", lpFilePart=0x0) returned 0x74 [0127.741] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Accessories\\Windows PowerShell\\Windows PowerShell ISE (x86).lnk" (normalized: "c:\\programdata\\microsoft\\windows\\start menu\\programs\\accessories\\windows powershell\\windows powershell ise (x86).lnk"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x274 [0127.742] GetFileType (hFile=0x274) returned 0x1 [0127.742] GetFileType (hFile=0x274) returned 0x1 [0127.742] WriteFile (in: hFile=0x274, lpBuffer=0x2700760*, nNumberOfBytesToWrite=0x5d0, lpNumberOfBytesWritten=0x31e58c, lpOverlapped=0x0 | out: lpBuffer=0x2700760*, lpNumberOfBytesWritten=0x31e58c*=0x5d0, lpOverlapped=0x0) returned 1 [0127.743] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Accessories\\Windows PowerShell\\Windows PowerShell ISE (x86).lnk", nBufferLength=0x105, lpBuffer=0x31e13c, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Accessories\\Windows PowerShell\\Windows PowerShell ISE (x86).lnk", lpFilePart=0x0) returned 0x74 [0127.743] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Accessories\\Windows PowerShell\\Windows PowerShell ISE (x86).lnk.[neftet@tutanota.com].boom", nBufferLength=0x105, lpBuffer=0x31e13c, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Accessories\\Windows PowerShell\\Windows PowerShell ISE (x86).lnk.[neftet@tutanota.com].boom", lpFilePart=0x0) returned 0x8f [0127.743] GetFileAttributesExW (in: lpFileName="C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Accessories\\Windows PowerShell\\Windows PowerShell ISE (x86).lnk" (normalized: "c:\\programdata\\microsoft\\windows\\start menu\\programs\\accessories\\windows powershell\\windows powershell ise (x86).lnk"), fInfoLevelId=0x0, lpFileInformation=0x31e618 | out: lpFileInformation=0x31e618*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8d79c9d7, ftCreationTime.dwHighDateTime=0x1ca043f, ftLastAccessTime.dwLowDateTime=0x8d79c9d7, ftLastAccessTime.dwHighDateTime=0x1ca043f, ftLastWriteTime.dwLowDateTime=0x2f92bcc0, ftLastWriteTime.dwHighDateTime=0x1d6eb7f, nFileSizeHigh=0x0, nFileSizeLow=0x5d0)) returned 1 [0127.743] MoveFileW (lpExistingFileName="C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Accessories\\Windows PowerShell\\Windows PowerShell ISE (x86).lnk" (normalized: "c:\\programdata\\microsoft\\windows\\start menu\\programs\\accessories\\windows powershell\\windows powershell ise (x86).lnk"), lpNewFileName="C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Accessories\\Windows PowerShell\\Windows PowerShell ISE (x86).lnk.[neftet@tutanota.com].boom" (normalized: "c:\\programdata\\microsoft\\windows\\start menu\\programs\\accessories\\windows powershell\\windows powershell ise (x86).lnk.[neftet@tutanota.com].boom")) returned 1 [0127.745] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Accessories\\Windows PowerShell\\Windows PowerShell ISE.lnk", nBufferLength=0x105, lpBuffer=0x31e01c, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Accessories\\Windows PowerShell\\Windows PowerShell ISE.lnk", lpFilePart=0x0) returned 0x6e [0127.745] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Accessories\\Windows PowerShell\\Windows PowerShell ISE.lnk" (normalized: "c:\\programdata\\microsoft\\windows\\start menu\\programs\\accessories\\windows powershell\\windows powershell ise.lnk"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x274 [0127.745] GetFileType (hFile=0x274) returned 0x1 [0127.745] GetFileType (hFile=0x274) returned 0x1 [0127.745] GetFileSize (in: hFile=0x274, lpFileSizeHigh=0x31e618 | out: lpFileSizeHigh=0x31e618*=0x0) returned 0x5d0 [0127.745] ReadFile (in: hFile=0x274, lpBuffer=0x27023ac, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x31e5c4, lpOverlapped=0x0 | out: lpBuffer=0x27023ac*, lpNumberOfBytesRead=0x31e5c4*=0x5d0, lpOverlapped=0x0) returned 1 [0127.746] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Accessories\\Windows PowerShell\\Windows PowerShell ISE.lnk", nBufferLength=0x105, lpBuffer=0x31e008, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Accessories\\Windows PowerShell\\Windows PowerShell ISE.lnk", lpFilePart=0x0) returned 0x6e [0127.746] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Accessories\\Windows PowerShell\\Windows PowerShell ISE.lnk" (normalized: "c:\\programdata\\microsoft\\windows\\start menu\\programs\\accessories\\windows powershell\\windows powershell ise.lnk"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x274 [0127.747] GetFileType (hFile=0x274) returned 0x1 [0127.747] GetFileType (hFile=0x274) returned 0x1 [0127.747] WriteFile (in: hFile=0x274, lpBuffer=0x2704f40*, nNumberOfBytesToWrite=0x5d0, lpNumberOfBytesWritten=0x31e58c, lpOverlapped=0x0 | out: lpBuffer=0x2704f40*, lpNumberOfBytesWritten=0x31e58c*=0x5d0, lpOverlapped=0x0) returned 1 [0127.748] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Accessories\\Windows PowerShell\\Windows PowerShell ISE.lnk", nBufferLength=0x105, lpBuffer=0x31e13c, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Accessories\\Windows PowerShell\\Windows PowerShell ISE.lnk", lpFilePart=0x0) returned 0x6e [0127.748] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Accessories\\Windows PowerShell\\Windows PowerShell ISE.lnk.[neftet@tutanota.com].boom", nBufferLength=0x105, lpBuffer=0x31e13c, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Accessories\\Windows PowerShell\\Windows PowerShell ISE.lnk.[neftet@tutanota.com].boom", lpFilePart=0x0) returned 0x89 [0127.748] GetFileAttributesExW (in: lpFileName="C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Accessories\\Windows PowerShell\\Windows PowerShell ISE.lnk" (normalized: "c:\\programdata\\microsoft\\windows\\start menu\\programs\\accessories\\windows powershell\\windows powershell ise.lnk"), fInfoLevelId=0x0, lpFileInformation=0x31e618 | out: lpFileInformation=0x31e618*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8d750717, ftCreationTime.dwHighDateTime=0x1ca043f, ftLastAccessTime.dwLowDateTime=0x8d750717, ftLastAccessTime.dwHighDateTime=0x1ca043f, ftLastWriteTime.dwLowDateTime=0x2f92bcc0, ftLastWriteTime.dwHighDateTime=0x1d6eb7f, nFileSizeHigh=0x0, nFileSizeLow=0x5d0)) returned 1 [0127.748] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e598) returned 1 [0127.749] MoveFileW (lpExistingFileName="C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Accessories\\Windows PowerShell\\Windows PowerShell ISE.lnk" (normalized: "c:\\programdata\\microsoft\\windows\\start menu\\programs\\accessories\\windows powershell\\windows powershell ise.lnk"), lpNewFileName="C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Accessories\\Windows PowerShell\\Windows PowerShell ISE.lnk.[neftet@tutanota.com].boom" (normalized: "c:\\programdata\\microsoft\\windows\\start menu\\programs\\accessories\\windows powershell\\windows powershell ise.lnk.[neftet@tutanota.com].boom")) returned 1 [0127.751] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Accessories\\Windows PowerShell\\Windows PowerShell.lnk", nBufferLength=0x105, lpBuffer=0x31e01c, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Accessories\\Windows PowerShell\\Windows PowerShell.lnk", lpFilePart=0x0) returned 0x6a [0127.751] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e510) returned 1 [0127.751] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Accessories\\Windows PowerShell\\Windows PowerShell.lnk" (normalized: "c:\\programdata\\microsoft\\windows\\start menu\\programs\\accessories\\windows powershell\\windows powershell.lnk"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x274 [0127.751] GetFileType (hFile=0x274) returned 0x1 [0127.751] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e50c) returned 1 [0127.751] GetFileType (hFile=0x274) returned 0x1 [0127.751] GetFileSize (in: hFile=0x274, lpFileSizeHigh=0x31e618 | out: lpFileSizeHigh=0x31e618*=0x0) returned 0x780 [0127.751] ReadFile (in: hFile=0x274, lpBuffer=0x2706d08, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x31e5c4, lpOverlapped=0x0 | out: lpBuffer=0x2706d08*, lpNumberOfBytesRead=0x31e5c4*=0x780, lpOverlapped=0x0) returned 1 [0127.752] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Accessories\\Windows PowerShell\\Windows PowerShell.lnk", nBufferLength=0x105, lpBuffer=0x31e008, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Accessories\\Windows PowerShell\\Windows PowerShell.lnk", lpFilePart=0x0) returned 0x6a [0127.752] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e4fc) returned 1 [0127.752] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Accessories\\Windows PowerShell\\Windows PowerShell.lnk" (normalized: "c:\\programdata\\microsoft\\windows\\start menu\\programs\\accessories\\windows powershell\\windows powershell.lnk"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x274 [0127.753] GetFileType (hFile=0x274) returned 0x1 [0127.753] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e4f8) returned 1 [0127.753] GetFileType (hFile=0x274) returned 0x1 [0127.754] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Accessories\\Windows PowerShell\\Windows PowerShell.lnk", nBufferLength=0x105, lpBuffer=0x31e13c, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Accessories\\Windows PowerShell\\Windows PowerShell.lnk", lpFilePart=0x0) returned 0x6a [0127.754] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Accessories\\Windows PowerShell\\Windows PowerShell.lnk.[neftet@tutanota.com].boom", nBufferLength=0x105, lpBuffer=0x31e13c, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Accessories\\Windows PowerShell\\Windows PowerShell.lnk.[neftet@tutanota.com].boom", lpFilePart=0x0) returned 0x85 [0127.754] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e59c) returned 1 [0127.755] GetFileAttributesExW (in: lpFileName="C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Accessories\\Windows PowerShell\\Windows PowerShell.lnk" (normalized: "c:\\programdata\\microsoft\\windows\\start menu\\programs\\accessories\\windows powershell\\windows powershell.lnk"), fInfoLevelId=0x0, lpFileInformation=0x31e618 | out: lpFileInformation=0x31e618*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8038cbd7, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x7bef7178, ftLastAccessTime.dwHighDateTime=0x1ca0444, ftLastWriteTime.dwLowDateTime=0x2f951e20, ftLastWriteTime.dwHighDateTime=0x1d6eb7f, nFileSizeHigh=0x0, nFileSizeLow=0x780)) returned 1 [0127.755] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e598) returned 1 [0127.755] MoveFileW (lpExistingFileName="C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Accessories\\Windows PowerShell\\Windows PowerShell.lnk" (normalized: "c:\\programdata\\microsoft\\windows\\start menu\\programs\\accessories\\windows powershell\\windows powershell.lnk"), lpNewFileName="C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Accessories\\Windows PowerShell\\Windows PowerShell.lnk.[neftet@tutanota.com].boom" (normalized: "c:\\programdata\\microsoft\\windows\\start menu\\programs\\accessories\\windows powershell\\windows powershell.lnk.[neftet@tutanota.com].boom")) returned 1 [0127.756] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e6cc) returned 1 [0127.756] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Administrative Tools", nBufferLength=0x105, lpBuffer=0x31e1d4, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Administrative Tools", lpFilePart=0x0) returned 0x49 [0127.756] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Administrative Tools\\", nBufferLength=0x105, lpBuffer=0x31e1a8, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Administrative Tools\\", lpFilePart=0x0) returned 0x4a [0127.756] FindFirstFileW (in: lpFileName="C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Administrative Tools\\*", lpFindFileData=0x31e3f4 | out: lpFindFileData=0x31e3f4*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x7fffaad0, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x81c3cfe0, ftLastAccessTime.dwHighDateTime=0x1d2de2a, ftLastWriteTime.dwLowDateTime=0x81c3cfe0, ftLastWriteTime.dwHighDateTime=0x1d2de2a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x381b80 [0127.756] FindClose (in: hFindFile=0x381b80 | out: hFindFile=0x381b80) returned 1 [0127.757] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e68c) returned 1 [0127.757] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e698) returned 1 [0127.757] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e6cc) returned 1 [0127.757] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Administrative Tools", nBufferLength=0x105, lpBuffer=0x31e1d4, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Administrative Tools", lpFilePart=0x0) returned 0x49 [0127.757] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Administrative Tools\\", nBufferLength=0x105, lpBuffer=0x31e1a8, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Administrative Tools\\", lpFilePart=0x0) returned 0x4a [0127.757] FindFirstFileW (in: lpFileName="C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Administrative Tools\\*", lpFindFileData=0x31e3f4 | out: lpFindFileData=0x31e3f4*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x7fffaad0, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x81c3cfe0, ftLastAccessTime.dwHighDateTime=0x1d2de2a, ftLastWriteTime.dwLowDateTime=0x81c3cfe0, ftLastWriteTime.dwHighDateTime=0x1d2de2a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x381b80 [0127.757] FindClose (in: hFindFile=0x381b80 | out: hFindFile=0x381b80) returned 1 [0127.757] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e68c) returned 1 [0127.757] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e698) returned 1 [0127.757] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Administrative Tools\\Component Services.lnk", nBufferLength=0x105, lpBuffer=0x31e094, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Administrative Tools\\Component Services.lnk", lpFilePart=0x0) returned 0x60 [0127.757] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e588) returned 1 [0127.757] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Administrative Tools\\Component Services.lnk" (normalized: "c:\\programdata\\microsoft\\windows\\start menu\\programs\\administrative tools\\component services.lnk"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x274 [0127.757] GetFileType (hFile=0x274) returned 0x1 [0127.757] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e584) returned 1 [0127.757] GetFileType (hFile=0x274) returned 0x1 [0127.757] GetFileSize (in: hFile=0x274, lpFileSizeHigh=0x31e690 | out: lpFileSizeHigh=0x31e690*=0x0) returned 0x4f0 [0127.757] ReadFile (in: hFile=0x274, lpBuffer=0x2710f10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x31e63c, lpOverlapped=0x0 | out: lpBuffer=0x2710f10*, lpNumberOfBytesRead=0x31e63c*=0x4f0, lpOverlapped=0x0) returned 1 [0127.758] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Administrative Tools\\Component Services.lnk", nBufferLength=0x105, lpBuffer=0x31e080, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Administrative Tools\\Component Services.lnk", lpFilePart=0x0) returned 0x60 [0127.758] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e574) returned 1 [0127.758] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Administrative Tools\\Component Services.lnk" (normalized: "c:\\programdata\\microsoft\\windows\\start menu\\programs\\administrative tools\\component services.lnk"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x274 [0127.759] GetFileType (hFile=0x274) returned 0x1 [0127.759] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e570) returned 1 [0127.759] GetFileType (hFile=0x274) returned 0x1 [0127.760] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Administrative Tools\\Component Services.lnk", nBufferLength=0x105, lpBuffer=0x31e1b4, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Administrative Tools\\Component Services.lnk", lpFilePart=0x0) returned 0x60 [0127.760] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Administrative Tools\\Component Services.lnk.[neftet@tutanota.com].boom", nBufferLength=0x105, lpBuffer=0x31e1b4, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Administrative Tools\\Component Services.lnk.[neftet@tutanota.com].boom", lpFilePart=0x0) returned 0x7b [0127.760] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e614) returned 1 [0127.760] GetFileAttributesExW (in: lpFileName="C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Administrative Tools\\Component Services.lnk" (normalized: "c:\\programdata\\microsoft\\windows\\start menu\\programs\\administrative tools\\component services.lnk"), fInfoLevelId=0x0, lpFileInformation=0x31e690 | out: lpFileInformation=0x31e690*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x898d4524, ftCreationTime.dwHighDateTime=0x1ca043f, ftLastAccessTime.dwLowDateTime=0x898d4524, ftLastAccessTime.dwHighDateTime=0x1ca043f, ftLastWriteTime.dwLowDateTime=0x2f951e20, ftLastWriteTime.dwHighDateTime=0x1d6eb7f, nFileSizeHigh=0x0, nFileSizeLow=0x4f0)) returned 1 [0127.760] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e610) returned 1 [0127.760] MoveFileW (lpExistingFileName="C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Administrative Tools\\Component Services.lnk" (normalized: "c:\\programdata\\microsoft\\windows\\start menu\\programs\\administrative tools\\component services.lnk"), lpNewFileName="C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Administrative Tools\\Component Services.lnk.[neftet@tutanota.com].boom" (normalized: "c:\\programdata\\microsoft\\windows\\start menu\\programs\\administrative tools\\component services.lnk.[neftet@tutanota.com].boom")) returned 1 [0127.763] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Administrative Tools\\Computer Management.lnk", nBufferLength=0x105, lpBuffer=0x31e094, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Administrative Tools\\Computer Management.lnk", lpFilePart=0x0) returned 0x61 [0127.763] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e588) returned 1 [0127.763] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Administrative Tools\\Computer Management.lnk" (normalized: "c:\\programdata\\microsoft\\windows\\start menu\\programs\\administrative tools\\computer management.lnk"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x274 [0127.763] GetFileType (hFile=0x274) returned 0x1 [0127.763] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e584) returned 1 [0127.763] GetFileType (hFile=0x274) returned 0x1 [0127.763] GetFileSize (in: hFile=0x274, lpFileSizeHigh=0x31e690 | out: lpFileSizeHigh=0x31e690*=0x0) returned 0x520 [0127.763] ReadFile (in: hFile=0x274, lpBuffer=0x27154a0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x31e63c, lpOverlapped=0x0 | out: lpBuffer=0x27154a0*, lpNumberOfBytesRead=0x31e63c*=0x520, lpOverlapped=0x0) returned 1 [0127.765] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Administrative Tools\\Computer Management.lnk", nBufferLength=0x105, lpBuffer=0x31e080, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Administrative Tools\\Computer Management.lnk", lpFilePart=0x0) returned 0x61 [0127.765] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e574) returned 1 [0127.765] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Administrative Tools\\Computer Management.lnk" (normalized: "c:\\programdata\\microsoft\\windows\\start menu\\programs\\administrative tools\\computer management.lnk"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x274 [0127.766] GetFileType (hFile=0x274) returned 0x1 [0127.766] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e570) returned 1 [0127.767] GetFileType (hFile=0x274) returned 0x1 [0127.767] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Administrative Tools\\Computer Management.lnk", nBufferLength=0x105, lpBuffer=0x31e1b4, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Administrative Tools\\Computer Management.lnk", lpFilePart=0x0) returned 0x61 [0127.768] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Administrative Tools\\Computer Management.lnk.[neftet@tutanota.com].boom", nBufferLength=0x105, lpBuffer=0x31e1b4, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Administrative Tools\\Computer Management.lnk.[neftet@tutanota.com].boom", lpFilePart=0x0) returned 0x7c [0127.768] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e614) returned 1 [0127.768] GetFileAttributesExW (in: lpFileName="C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Administrative Tools\\Computer Management.lnk" (normalized: "c:\\programdata\\microsoft\\windows\\start menu\\programs\\administrative tools\\computer management.lnk"), fInfoLevelId=0x0, lpFileInformation=0x31e690 | out: lpFileInformation=0x31e690*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x26ea3fc9, ftCreationTime.dwHighDateTime=0x1ca043f, ftLastAccessTime.dwLowDateTime=0x26ea3fc9, ftLastAccessTime.dwHighDateTime=0x1ca043f, ftLastWriteTime.dwLowDateTime=0x2f977f80, ftLastWriteTime.dwHighDateTime=0x1d6eb7f, nFileSizeHigh=0x0, nFileSizeLow=0x520)) returned 1 [0127.768] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e610) returned 1 [0127.768] MoveFileW (lpExistingFileName="C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Administrative Tools\\Computer Management.lnk" (normalized: "c:\\programdata\\microsoft\\windows\\start menu\\programs\\administrative tools\\computer management.lnk"), lpNewFileName="C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Administrative Tools\\Computer Management.lnk.[neftet@tutanota.com].boom" (normalized: "c:\\programdata\\microsoft\\windows\\start menu\\programs\\administrative tools\\computer management.lnk.[neftet@tutanota.com].boom")) returned 1 [0127.769] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Administrative Tools\\Data Sources (ODBC).lnk", nBufferLength=0x105, lpBuffer=0x31e094, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Administrative Tools\\Data Sources (ODBC).lnk", lpFilePart=0x0) returned 0x61 [0127.769] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e588) returned 1 [0127.769] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Administrative Tools\\Data Sources (ODBC).lnk" (normalized: "c:\\programdata\\microsoft\\windows\\start menu\\programs\\administrative tools\\data sources (odbc).lnk"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x274 [0127.770] GetFileType (hFile=0x274) returned 0x1 [0127.770] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e584) returned 1 [0127.770] GetFileType (hFile=0x274) returned 0x1 [0127.770] GetFileSize (in: hFile=0x274, lpFileSizeHigh=0x31e690 | out: lpFileSizeHigh=0x31e690*=0x0) returned 0x510 [0127.770] ReadFile (in: hFile=0x274, lpBuffer=0x2719a58, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x31e63c, lpOverlapped=0x0 | out: lpBuffer=0x2719a58*, lpNumberOfBytesRead=0x31e63c*=0x510, lpOverlapped=0x0) returned 1 [0127.770] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Administrative Tools\\Data Sources (ODBC).lnk", nBufferLength=0x105, lpBuffer=0x31e080, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Administrative Tools\\Data Sources (ODBC).lnk", lpFilePart=0x0) returned 0x61 [0127.771] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e574) returned 1 [0127.771] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Administrative Tools\\Data Sources (ODBC).lnk" (normalized: "c:\\programdata\\microsoft\\windows\\start menu\\programs\\administrative tools\\data sources (odbc).lnk"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x274 [0127.772] GetFileType (hFile=0x274) returned 0x1 [0127.772] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e570) returned 1 [0127.772] GetFileType (hFile=0x274) returned 0x1 [0127.772] WriteFile (in: hFile=0x274, lpBuffer=0x271c508*, nNumberOfBytesToWrite=0x510, lpNumberOfBytesWritten=0x31e604, lpOverlapped=0x0 | out: lpBuffer=0x271c508*, lpNumberOfBytesWritten=0x31e604*=0x510, lpOverlapped=0x0) returned 1 [0127.772] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Administrative Tools\\Data Sources (ODBC).lnk", nBufferLength=0x105, lpBuffer=0x31e1b4, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Administrative Tools\\Data Sources (ODBC).lnk", lpFilePart=0x0) returned 0x61 [0127.773] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Administrative Tools\\Data Sources (ODBC).lnk.[neftet@tutanota.com].boom", nBufferLength=0x105, lpBuffer=0x31e1b4, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Administrative Tools\\Data Sources (ODBC).lnk.[neftet@tutanota.com].boom", lpFilePart=0x0) returned 0x7c [0127.773] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e614) returned 1 [0127.773] GetFileAttributesExW (in: lpFileName="C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Administrative Tools\\Data Sources (ODBC).lnk" (normalized: "c:\\programdata\\microsoft\\windows\\start menu\\programs\\administrative tools\\data sources (odbc).lnk"), fInfoLevelId=0x0, lpFileInformation=0x31e690 | out: lpFileInformation=0x31e690*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x15444c01, ftCreationTime.dwHighDateTime=0x1ca043f, ftLastAccessTime.dwLowDateTime=0x15444c01, ftLastAccessTime.dwHighDateTime=0x1ca043f, ftLastWriteTime.dwLowDateTime=0x2f977f80, ftLastWriteTime.dwHighDateTime=0x1d6eb7f, nFileSizeHigh=0x0, nFileSizeLow=0x510)) returned 1 [0127.773] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e610) returned 1 [0127.773] MoveFileW (lpExistingFileName="C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Administrative Tools\\Data Sources (ODBC).lnk" (normalized: "c:\\programdata\\microsoft\\windows\\start menu\\programs\\administrative tools\\data sources (odbc).lnk"), lpNewFileName="C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Administrative Tools\\Data Sources (ODBC).lnk.[neftet@tutanota.com].boom" (normalized: "c:\\programdata\\microsoft\\windows\\start menu\\programs\\administrative tools\\data sources (odbc).lnk.[neftet@tutanota.com].boom")) returned 1 [0127.773] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Administrative Tools\\Event Viewer.lnk", nBufferLength=0x105, lpBuffer=0x31e094, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Administrative Tools\\Event Viewer.lnk", lpFilePart=0x0) returned 0x5a [0127.774] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e588) returned 1 [0127.774] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Administrative Tools\\Event Viewer.lnk" (normalized: "c:\\programdata\\microsoft\\windows\\start menu\\programs\\administrative tools\\event viewer.lnk"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x274 [0127.774] GetFileType (hFile=0x274) returned 0x1 [0127.774] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e584) returned 1 [0127.774] GetFileType (hFile=0x274) returned 0x1 [0127.774] GetFileSize (in: hFile=0x274, lpFileSizeHigh=0x31e690 | out: lpFileSizeHigh=0x31e690*=0x0) returned 0x530 [0127.774] ReadFile (in: hFile=0x274, lpBuffer=0x271e020, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x31e63c, lpOverlapped=0x0 | out: lpBuffer=0x271e020*, lpNumberOfBytesRead=0x31e63c*=0x530, lpOverlapped=0x0) returned 1 [0127.775] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Administrative Tools\\Event Viewer.lnk", nBufferLength=0x105, lpBuffer=0x31e080, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Administrative Tools\\Event Viewer.lnk", lpFilePart=0x0) returned 0x5a [0127.775] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e574) returned 1 [0127.775] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Administrative Tools\\Event Viewer.lnk" (normalized: "c:\\programdata\\microsoft\\windows\\start menu\\programs\\administrative tools\\event viewer.lnk"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x274 [0127.775] GetFileType (hFile=0x274) returned 0x1 [0127.775] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e570) returned 1 [0127.775] GetFileType (hFile=0x274) returned 0x1 [0127.775] WriteFile (in: hFile=0x274, lpBuffer=0x2720ad8*, nNumberOfBytesToWrite=0x530, lpNumberOfBytesWritten=0x31e604, lpOverlapped=0x0 | out: lpBuffer=0x2720ad8*, lpNumberOfBytesWritten=0x31e604*=0x530, lpOverlapped=0x0) returned 1 [0127.776] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Administrative Tools\\Event Viewer.lnk", nBufferLength=0x105, lpBuffer=0x31e1b4, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Administrative Tools\\Event Viewer.lnk", lpFilePart=0x0) returned 0x5a [0127.776] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Administrative Tools\\Event Viewer.lnk.[neftet@tutanota.com].boom", nBufferLength=0x105, lpBuffer=0x31e1b4, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Administrative Tools\\Event Viewer.lnk.[neftet@tutanota.com].boom", lpFilePart=0x0) returned 0x75 [0127.776] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e614) returned 1 [0127.776] GetFileAttributesExW (in: lpFileName="C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Administrative Tools\\Event Viewer.lnk" (normalized: "c:\\programdata\\microsoft\\windows\\start menu\\programs\\administrative tools\\event viewer.lnk"), fInfoLevelId=0x0, lpFileInformation=0x31e690 | out: lpFileInformation=0x31e690*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2b8e0e72, ftCreationTime.dwHighDateTime=0x1ca043f, ftLastAccessTime.dwLowDateTime=0x2b8e0e72, ftLastAccessTime.dwHighDateTime=0x1ca043f, ftLastWriteTime.dwLowDateTime=0x2f977f80, ftLastWriteTime.dwHighDateTime=0x1d6eb7f, nFileSizeHigh=0x0, nFileSizeLow=0x530)) returned 1 [0127.776] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e610) returned 1 [0127.777] MoveFileW (lpExistingFileName="C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Administrative Tools\\Event Viewer.lnk" (normalized: "c:\\programdata\\microsoft\\windows\\start menu\\programs\\administrative tools\\event viewer.lnk"), lpNewFileName="C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Administrative Tools\\Event Viewer.lnk.[neftet@tutanota.com].boom" (normalized: "c:\\programdata\\microsoft\\windows\\start menu\\programs\\administrative tools\\event viewer.lnk.[neftet@tutanota.com].boom")) returned 1 [0127.777] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Administrative Tools\\iSCSI Initiator.lnk", nBufferLength=0x105, lpBuffer=0x31e094, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Administrative Tools\\iSCSI Initiator.lnk", lpFilePart=0x0) returned 0x5d [0127.777] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e588) returned 1 [0127.777] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Administrative Tools\\iSCSI Initiator.lnk" (normalized: "c:\\programdata\\microsoft\\windows\\start menu\\programs\\administrative tools\\iscsi initiator.lnk"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x274 [0127.777] GetFileType (hFile=0x274) returned 0x1 [0127.777] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e584) returned 1 [0127.777] GetFileType (hFile=0x274) returned 0x1 [0127.778] GetFileSize (in: hFile=0x274, lpFileSizeHigh=0x31e690 | out: lpFileSizeHigh=0x31e690*=0x0) returned 0x510 [0127.778] ReadFile (in: hFile=0x274, lpBuffer=0x2722594, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x31e63c, lpOverlapped=0x0 | out: lpBuffer=0x2722594*, lpNumberOfBytesRead=0x31e63c*=0x510, lpOverlapped=0x0) returned 1 [0127.778] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Administrative Tools\\iSCSI Initiator.lnk", nBufferLength=0x105, lpBuffer=0x31e080, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Administrative Tools\\iSCSI Initiator.lnk", lpFilePart=0x0) returned 0x5d [0127.778] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e574) returned 1 [0127.778] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Administrative Tools\\iSCSI Initiator.lnk" (normalized: "c:\\programdata\\microsoft\\windows\\start menu\\programs\\administrative tools\\iscsi initiator.lnk"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x274 [0127.779] GetFileType (hFile=0x274) returned 0x1 [0127.779] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e570) returned 1 [0127.779] GetFileType (hFile=0x274) returned 0x1 [0127.779] WriteFile (in: hFile=0x274, lpBuffer=0x2725034*, nNumberOfBytesToWrite=0x510, lpNumberOfBytesWritten=0x31e604, lpOverlapped=0x0 | out: lpBuffer=0x2725034*, lpNumberOfBytesWritten=0x31e604*=0x510, lpOverlapped=0x0) returned 1 [0127.782] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Administrative Tools\\iSCSI Initiator.lnk", nBufferLength=0x105, lpBuffer=0x31e1b4, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Administrative Tools\\iSCSI Initiator.lnk", lpFilePart=0x0) returned 0x5d [0127.782] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Administrative Tools\\iSCSI Initiator.lnk.[neftet@tutanota.com].boom", nBufferLength=0x105, lpBuffer=0x31e1b4, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Administrative Tools\\iSCSI Initiator.lnk.[neftet@tutanota.com].boom", lpFilePart=0x0) returned 0x78 [0127.782] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e614) returned 1 [0127.782] GetFileAttributesExW (in: lpFileName="C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Administrative Tools\\iSCSI Initiator.lnk" (normalized: "c:\\programdata\\microsoft\\windows\\start menu\\programs\\administrative tools\\iscsi initiator.lnk"), fInfoLevelId=0x0, lpFileInformation=0x31e690 | out: lpFileInformation=0x31e690*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2725c230, ftCreationTime.dwHighDateTime=0x1ca043f, ftLastAccessTime.dwLowDateTime=0x2725c230, ftLastAccessTime.dwHighDateTime=0x1ca043f, ftLastWriteTime.dwLowDateTime=0x2f99e0e0, ftLastWriteTime.dwHighDateTime=0x1d6eb7f, nFileSizeHigh=0x0, nFileSizeLow=0x510)) returned 1 [0127.782] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e610) returned 1 [0127.782] MoveFileW (lpExistingFileName="C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Administrative Tools\\iSCSI Initiator.lnk" (normalized: "c:\\programdata\\microsoft\\windows\\start menu\\programs\\administrative tools\\iscsi initiator.lnk"), lpNewFileName="C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Administrative Tools\\iSCSI Initiator.lnk.[neftet@tutanota.com].boom" (normalized: "c:\\programdata\\microsoft\\windows\\start menu\\programs\\administrative tools\\iscsi initiator.lnk.[neftet@tutanota.com].boom")) returned 1 [0127.785] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Administrative Tools\\Memory Diagnostics Tool.lnk", nBufferLength=0x105, lpBuffer=0x31e094, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Administrative Tools\\Memory Diagnostics Tool.lnk", lpFilePart=0x0) returned 0x65 [0127.785] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e588) returned 1 [0127.785] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Administrative Tools\\Memory Diagnostics Tool.lnk" (normalized: "c:\\programdata\\microsoft\\windows\\start menu\\programs\\administrative tools\\memory diagnostics tool.lnk"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x274 [0127.785] GetFileType (hFile=0x274) returned 0x1 [0127.785] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e584) returned 1 [0127.785] GetFileType (hFile=0x274) returned 0x1 [0127.785] GetFileSize (in: hFile=0x274, lpFileSizeHigh=0x31e690 | out: lpFileSizeHigh=0x31e690*=0x0) returned 0x510 [0127.785] ReadFile (in: hFile=0x274, lpBuffer=0x2726b24, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x31e63c, lpOverlapped=0x0 | out: lpBuffer=0x2726b24*, lpNumberOfBytesRead=0x31e63c*=0x510, lpOverlapped=0x0) returned 1 [0127.786] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Administrative Tools\\Memory Diagnostics Tool.lnk", nBufferLength=0x105, lpBuffer=0x31e080, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Administrative Tools\\Memory Diagnostics Tool.lnk", lpFilePart=0x0) returned 0x65 [0127.786] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e574) returned 1 [0127.786] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Administrative Tools\\Memory Diagnostics Tool.lnk" (normalized: "c:\\programdata\\microsoft\\windows\\start menu\\programs\\administrative tools\\memory diagnostics tool.lnk"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x274 [0127.787] GetFileType (hFile=0x274) returned 0x1 [0127.787] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e570) returned 1 [0127.787] GetFileType (hFile=0x274) returned 0x1 [0127.788] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Administrative Tools\\Memory Diagnostics Tool.lnk", nBufferLength=0x105, lpBuffer=0x31e1b4, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Administrative Tools\\Memory Diagnostics Tool.lnk", lpFilePart=0x0) returned 0x65 [0127.788] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Administrative Tools\\Memory Diagnostics Tool.lnk.[neftet@tutanota.com].boom", nBufferLength=0x105, lpBuffer=0x31e1b4, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Administrative Tools\\Memory Diagnostics Tool.lnk.[neftet@tutanota.com].boom", lpFilePart=0x0) returned 0x80 [0127.788] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e614) returned 1 [0127.788] GetFileAttributesExW (in: lpFileName="C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Administrative Tools\\Memory Diagnostics Tool.lnk" (normalized: "c:\\programdata\\microsoft\\windows\\start menu\\programs\\administrative tools\\memory diagnostics tool.lnk"), fInfoLevelId=0x0, lpFileInformation=0x31e690 | out: lpFileInformation=0x31e690*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa38693b, ftCreationTime.dwHighDateTime=0x1ca043f, ftLastAccessTime.dwLowDateTime=0xa38693b, ftLastAccessTime.dwHighDateTime=0x1ca043f, ftLastWriteTime.dwLowDateTime=0x2f99e0e0, ftLastWriteTime.dwHighDateTime=0x1d6eb7f, nFileSizeHigh=0x0, nFileSizeLow=0x510)) returned 1 [0127.788] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e610) returned 1 [0127.788] MoveFileW (lpExistingFileName="C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Administrative Tools\\Memory Diagnostics Tool.lnk" (normalized: "c:\\programdata\\microsoft\\windows\\start menu\\programs\\administrative tools\\memory diagnostics tool.lnk"), lpNewFileName="C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Administrative Tools\\Memory Diagnostics Tool.lnk.[neftet@tutanota.com].boom" (normalized: "c:\\programdata\\microsoft\\windows\\start menu\\programs\\administrative tools\\memory diagnostics tool.lnk.[neftet@tutanota.com].boom")) returned 1 [0127.789] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Administrative Tools\\Performance Monitor.lnk", nBufferLength=0x105, lpBuffer=0x31e094, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Administrative Tools\\Performance Monitor.lnk", lpFilePart=0x0) returned 0x61 [0127.789] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e588) returned 1 [0127.789] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Administrative Tools\\Performance Monitor.lnk" (normalized: "c:\\programdata\\microsoft\\windows\\start menu\\programs\\administrative tools\\performance monitor.lnk"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x274 [0127.790] GetFileType (hFile=0x274) returned 0x1 [0127.790] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e584) returned 1 [0127.790] GetFileType (hFile=0x274) returned 0x1 [0127.790] GetFileSize (in: hFile=0x274, lpFileSizeHigh=0x31e690 | out: lpFileSizeHigh=0x31e690*=0x0) returned 0x4f0 [0127.790] ReadFile (in: hFile=0x274, lpBuffer=0x272b0d4, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x31e63c, lpOverlapped=0x0 | out: lpBuffer=0x272b0d4*, lpNumberOfBytesRead=0x31e63c*=0x4f0, lpOverlapped=0x0) returned 1 [0127.790] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Administrative Tools\\Performance Monitor.lnk", nBufferLength=0x105, lpBuffer=0x31e080, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Administrative Tools\\Performance Monitor.lnk", lpFilePart=0x0) returned 0x61 [0127.791] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e574) returned 1 [0127.791] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Administrative Tools\\Performance Monitor.lnk" (normalized: "c:\\programdata\\microsoft\\windows\\start menu\\programs\\administrative tools\\performance monitor.lnk"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x274 [0127.792] GetFileType (hFile=0x274) returned 0x1 [0127.792] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e570) returned 1 [0127.792] GetFileType (hFile=0x274) returned 0x1 [0127.793] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Administrative Tools\\Performance Monitor.lnk", nBufferLength=0x105, lpBuffer=0x31e1b4, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Administrative Tools\\Performance Monitor.lnk", lpFilePart=0x0) returned 0x61 [0127.793] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Administrative Tools\\Performance Monitor.lnk.[neftet@tutanota.com].boom", nBufferLength=0x105, lpBuffer=0x31e1b4, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Administrative Tools\\Performance Monitor.lnk.[neftet@tutanota.com].boom", lpFilePart=0x0) returned 0x7c [0127.793] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e614) returned 1 [0127.793] GetFileAttributesExW (in: lpFileName="C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Administrative Tools\\Performance Monitor.lnk" (normalized: "c:\\programdata\\microsoft\\windows\\start menu\\programs\\administrative tools\\performance monitor.lnk"), fInfoLevelId=0x0, lpFileInformation=0x31e690 | out: lpFileInformation=0x31e690*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x14139bde, ftCreationTime.dwHighDateTime=0x1ca043f, ftLastAccessTime.dwLowDateTime=0x14139bde, ftLastAccessTime.dwHighDateTime=0x1ca043f, ftLastWriteTime.dwLowDateTime=0x2f99e0e0, ftLastWriteTime.dwHighDateTime=0x1d6eb7f, nFileSizeHigh=0x0, nFileSizeLow=0x4f0)) returned 1 [0127.793] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e610) returned 1 [0127.793] MoveFileW (lpExistingFileName="C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Administrative Tools\\Performance Monitor.lnk" (normalized: "c:\\programdata\\microsoft\\windows\\start menu\\programs\\administrative tools\\performance monitor.lnk"), lpNewFileName="C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Administrative Tools\\Performance Monitor.lnk.[neftet@tutanota.com].boom" (normalized: "c:\\programdata\\microsoft\\windows\\start menu\\programs\\administrative tools\\performance monitor.lnk.[neftet@tutanota.com].boom")) returned 1 [0127.794] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Administrative Tools\\Print Management.lnk", nBufferLength=0x105, lpBuffer=0x31e094, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Administrative Tools\\Print Management.lnk", lpFilePart=0x0) returned 0x5e [0127.794] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e588) returned 1 [0127.794] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Administrative Tools\\Print Management.lnk" (normalized: "c:\\programdata\\microsoft\\windows\\start menu\\programs\\administrative tools\\print management.lnk"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x274 [0127.795] GetFileType (hFile=0x274) returned 0x1 [0127.795] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e584) returned 1 [0127.795] GetFileType (hFile=0x274) returned 0x1 [0127.795] GetFileSize (in: hFile=0x274, lpFileSizeHigh=0x31e690 | out: lpFileSizeHigh=0x31e690*=0x0) returned 0x500 [0127.795] ReadFile (in: hFile=0x274, lpBuffer=0x272f644, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x31e63c, lpOverlapped=0x0 | out: lpBuffer=0x272f644*, lpNumberOfBytesRead=0x31e63c*=0x500, lpOverlapped=0x0) returned 1 [0127.796] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Administrative Tools\\Print Management.lnk", nBufferLength=0x105, lpBuffer=0x31e080, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Administrative Tools\\Print Management.lnk", lpFilePart=0x0) returned 0x5e [0127.796] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e574) returned 1 [0127.796] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Administrative Tools\\Print Management.lnk" (normalized: "c:\\programdata\\microsoft\\windows\\start menu\\programs\\administrative tools\\print management.lnk"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x274 [0127.797] GetFileType (hFile=0x274) returned 0x1 [0127.797] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e570) returned 1 [0127.797] GetFileType (hFile=0x274) returned 0x1 [0127.798] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Administrative Tools\\Print Management.lnk", nBufferLength=0x105, lpBuffer=0x31e1b4, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Administrative Tools\\Print Management.lnk", lpFilePart=0x0) returned 0x5e [0127.798] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Administrative Tools\\Print Management.lnk.[neftet@tutanota.com].boom", nBufferLength=0x105, lpBuffer=0x31e1b4, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Administrative Tools\\Print Management.lnk.[neftet@tutanota.com].boom", lpFilePart=0x0) returned 0x79 [0127.798] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e614) returned 1 [0127.798] GetFileAttributesExW (in: lpFileName="C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Administrative Tools\\Print Management.lnk" (normalized: "c:\\programdata\\microsoft\\windows\\start menu\\programs\\administrative tools\\print management.lnk"), fInfoLevelId=0x0, lpFileInformation=0x31e690 | out: lpFileInformation=0x31e690*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x806d09e0, ftCreationTime.dwHighDateTime=0x1d2de2a, ftLastAccessTime.dwLowDateTime=0x806d09e0, ftLastAccessTime.dwHighDateTime=0x1d2de2a, ftLastWriteTime.dwLowDateTime=0x2f9c4240, ftLastWriteTime.dwHighDateTime=0x1d6eb7f, nFileSizeHigh=0x0, nFileSizeLow=0x500)) returned 1 [0127.798] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e610) returned 1 [0127.798] MoveFileW (lpExistingFileName="C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Administrative Tools\\Print Management.lnk" (normalized: "c:\\programdata\\microsoft\\windows\\start menu\\programs\\administrative tools\\print management.lnk"), lpNewFileName="C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Administrative Tools\\Print Management.lnk.[neftet@tutanota.com].boom" (normalized: "c:\\programdata\\microsoft\\windows\\start menu\\programs\\administrative tools\\print management.lnk.[neftet@tutanota.com].boom")) returned 1 [0127.800] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Administrative Tools\\Security Configuration Management.lnk", nBufferLength=0x105, lpBuffer=0x31e094, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Administrative Tools\\Security Configuration Management.lnk", lpFilePart=0x0) returned 0x6f [0127.800] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e588) returned 1 [0127.800] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Administrative Tools\\Security Configuration Management.lnk" (normalized: "c:\\programdata\\microsoft\\windows\\start menu\\programs\\administrative tools\\security configuration management.lnk"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x274 [0127.800] GetFileType (hFile=0x274) returned 0x1 [0127.800] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e584) returned 1 [0127.800] GetFileType (hFile=0x274) returned 0x1 [0127.800] GetFileSize (in: hFile=0x274, lpFileSizeHigh=0x31e690 | out: lpFileSizeHigh=0x31e690*=0x0) returned 0x500 [0127.800] ReadFile (in: hFile=0x274, lpBuffer=0x2733be8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x31e63c, lpOverlapped=0x0 | out: lpBuffer=0x2733be8*, lpNumberOfBytesRead=0x31e63c*=0x500, lpOverlapped=0x0) returned 1 [0127.801] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Administrative Tools\\Security Configuration Management.lnk", nBufferLength=0x105, lpBuffer=0x31e080, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Administrative Tools\\Security Configuration Management.lnk", lpFilePart=0x0) returned 0x6f [0127.801] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e574) returned 1 [0127.801] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Administrative Tools\\Security Configuration Management.lnk" (normalized: "c:\\programdata\\microsoft\\windows\\start menu\\programs\\administrative tools\\security configuration management.lnk"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x274 [0127.802] GetFileType (hFile=0x274) returned 0x1 [0127.802] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e570) returned 1 [0127.802] GetFileType (hFile=0x274) returned 0x1 [0127.802] WriteFile (in: hFile=0x274, lpBuffer=0x27366c0*, nNumberOfBytesToWrite=0x500, lpNumberOfBytesWritten=0x31e604, lpOverlapped=0x0 | out: lpBuffer=0x27366c0*, lpNumberOfBytesWritten=0x31e604*=0x500, lpOverlapped=0x0) returned 1 [0127.803] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Administrative Tools\\Security Configuration Management.lnk", nBufferLength=0x105, lpBuffer=0x31e1b4, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Administrative Tools\\Security Configuration Management.lnk", lpFilePart=0x0) returned 0x6f [0127.803] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Administrative Tools\\Security Configuration Management.lnk.[neftet@tutanota.com].boom", nBufferLength=0x105, lpBuffer=0x31e1b4, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Administrative Tools\\Security Configuration Management.lnk.[neftet@tutanota.com].boom", lpFilePart=0x0) returned 0x8a [0127.803] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e614) returned 1 [0127.803] GetFileAttributesExW (in: lpFileName="C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Administrative Tools\\Security Configuration Management.lnk" (normalized: "c:\\programdata\\microsoft\\windows\\start menu\\programs\\administrative tools\\security configuration management.lnk"), fInfoLevelId=0x0, lpFileInformation=0x31e690 | out: lpFileInformation=0x31e690*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x81c3cfe0, ftCreationTime.dwHighDateTime=0x1d2de2a, ftLastAccessTime.dwLowDateTime=0x81c3cfe0, ftLastAccessTime.dwHighDateTime=0x1d2de2a, ftLastWriteTime.dwLowDateTime=0x2f9c4240, ftLastWriteTime.dwHighDateTime=0x1d6eb7f, nFileSizeHigh=0x0, nFileSizeLow=0x500)) returned 1 [0127.803] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e610) returned 1 [0127.803] MoveFileW (lpExistingFileName="C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Administrative Tools\\Security Configuration Management.lnk" (normalized: "c:\\programdata\\microsoft\\windows\\start menu\\programs\\administrative tools\\security configuration management.lnk"), lpNewFileName="C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Administrative Tools\\Security Configuration Management.lnk.[neftet@tutanota.com].boom" (normalized: "c:\\programdata\\microsoft\\windows\\start menu\\programs\\administrative tools\\security configuration management.lnk.[neftet@tutanota.com].boom")) returned 1 [0127.805] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Administrative Tools\\services.lnk", nBufferLength=0x105, lpBuffer=0x31e094, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Administrative Tools\\services.lnk", lpFilePart=0x0) returned 0x56 [0127.805] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e588) returned 1 [0127.805] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Administrative Tools\\services.lnk" (normalized: "c:\\programdata\\microsoft\\windows\\start menu\\programs\\administrative tools\\services.lnk"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x274 [0127.805] GetFileType (hFile=0x274) returned 0x1 [0127.805] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e584) returned 1 [0127.805] GetFileType (hFile=0x274) returned 0x1 [0127.805] GetFileSize (in: hFile=0x274, lpFileSizeHigh=0x31e690 | out: lpFileSizeHigh=0x31e690*=0x0) returned 0x520 [0127.805] ReadFile (in: hFile=0x274, lpBuffer=0x27381f4, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x31e63c, lpOverlapped=0x0 | out: lpBuffer=0x27381f4*, lpNumberOfBytesRead=0x31e63c*=0x520, lpOverlapped=0x0) returned 1 [0127.806] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Administrative Tools\\services.lnk", nBufferLength=0x105, lpBuffer=0x31e080, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Administrative Tools\\services.lnk", lpFilePart=0x0) returned 0x56 [0127.806] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e574) returned 1 [0127.806] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Administrative Tools\\services.lnk" (normalized: "c:\\programdata\\microsoft\\windows\\start menu\\programs\\administrative tools\\services.lnk"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x274 [0127.807] GetFileType (hFile=0x274) returned 0x1 [0127.807] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e570) returned 1 [0127.807] GetFileType (hFile=0x274) returned 0x1 [0127.807] WriteFile (in: hFile=0x274, lpBuffer=0x273ac8c*, nNumberOfBytesToWrite=0x520, lpNumberOfBytesWritten=0x31e604, lpOverlapped=0x0 | out: lpBuffer=0x273ac8c*, lpNumberOfBytesWritten=0x31e604*=0x520, lpOverlapped=0x0) returned 1 [0127.808] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Administrative Tools\\services.lnk", nBufferLength=0x105, lpBuffer=0x31e1b4, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Administrative Tools\\services.lnk", lpFilePart=0x0) returned 0x56 [0127.808] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Administrative Tools\\services.lnk.[neftet@tutanota.com].boom", nBufferLength=0x105, lpBuffer=0x31e1b4, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Administrative Tools\\services.lnk.[neftet@tutanota.com].boom", lpFilePart=0x0) returned 0x71 [0127.808] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e614) returned 1 [0127.808] GetFileAttributesExW (in: lpFileName="C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Administrative Tools\\services.lnk" (normalized: "c:\\programdata\\microsoft\\windows\\start menu\\programs\\administrative tools\\services.lnk"), fInfoLevelId=0x0, lpFileInformation=0x31e690 | out: lpFileInformation=0x31e690*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1d7306f2, ftCreationTime.dwHighDateTime=0x1ca043f, ftLastAccessTime.dwLowDateTime=0x1d7306f2, ftLastAccessTime.dwHighDateTime=0x1ca043f, ftLastWriteTime.dwLowDateTime=0x2f9c4240, ftLastWriteTime.dwHighDateTime=0x1d6eb7f, nFileSizeHigh=0x0, nFileSizeLow=0x520)) returned 1 [0127.808] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e610) returned 1 [0127.808] MoveFileW (lpExistingFileName="C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Administrative Tools\\services.lnk" (normalized: "c:\\programdata\\microsoft\\windows\\start menu\\programs\\administrative tools\\services.lnk"), lpNewFileName="C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Administrative Tools\\services.lnk.[neftet@tutanota.com].boom" (normalized: "c:\\programdata\\microsoft\\windows\\start menu\\programs\\administrative tools\\services.lnk.[neftet@tutanota.com].boom")) returned 1 [0127.813] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Administrative Tools\\System Configuration.lnk", nBufferLength=0x105, lpBuffer=0x31e094, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Administrative Tools\\System Configuration.lnk", lpFilePart=0x0) returned 0x62 [0127.813] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e588) returned 1 [0127.813] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Administrative Tools\\System Configuration.lnk" (normalized: "c:\\programdata\\microsoft\\windows\\start menu\\programs\\administrative tools\\system configuration.lnk"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x274 [0127.813] GetFileType (hFile=0x274) returned 0x1 [0127.813] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e584) returned 1 [0127.813] GetFileType (hFile=0x274) returned 0x1 [0127.813] GetFileSize (in: hFile=0x274, lpFileSizeHigh=0x31e690 | out: lpFileSizeHigh=0x31e690*=0x0) returned 0x4f0 [0127.813] ReadFile (in: hFile=0x274, lpBuffer=0x273c728, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x31e63c, lpOverlapped=0x0 | out: lpBuffer=0x273c728*, lpNumberOfBytesRead=0x31e63c*=0x4f0, lpOverlapped=0x0) returned 1 [0127.814] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Administrative Tools\\System Configuration.lnk", nBufferLength=0x105, lpBuffer=0x31e080, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Administrative Tools\\System Configuration.lnk", lpFilePart=0x0) returned 0x62 [0127.814] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e574) returned 1 [0127.814] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Administrative Tools\\System Configuration.lnk" (normalized: "c:\\programdata\\microsoft\\windows\\start menu\\programs\\administrative tools\\system configuration.lnk"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x274 [0127.815] GetFileType (hFile=0x274) returned 0x1 [0127.815] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e570) returned 1 [0127.815] GetFileType (hFile=0x274) returned 0x1 [0127.816] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Administrative Tools\\System Configuration.lnk", nBufferLength=0x105, lpBuffer=0x31e1b4, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Administrative Tools\\System Configuration.lnk", lpFilePart=0x0) returned 0x62 [0127.816] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Administrative Tools\\System Configuration.lnk.[neftet@tutanota.com].boom", nBufferLength=0x105, lpBuffer=0x31e1b4, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Administrative Tools\\System Configuration.lnk.[neftet@tutanota.com].boom", lpFilePart=0x0) returned 0x7d [0127.816] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e614) returned 1 [0127.816] GetFileAttributesExW (in: lpFileName="C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Administrative Tools\\System Configuration.lnk" (normalized: "c:\\programdata\\microsoft\\windows\\start menu\\programs\\administrative tools\\system configuration.lnk"), fInfoLevelId=0x0, lpFileInformation=0x31e690 | out: lpFileInformation=0x31e690*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa575b1f, ftCreationTime.dwHighDateTime=0x1ca043f, ftLastAccessTime.dwLowDateTime=0xa575b1f, ftLastAccessTime.dwHighDateTime=0x1ca043f, ftLastWriteTime.dwLowDateTime=0x2f9ea3a0, ftLastWriteTime.dwHighDateTime=0x1d6eb7f, nFileSizeHigh=0x0, nFileSizeLow=0x4f0)) returned 1 [0127.816] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e610) returned 1 [0127.816] MoveFileW (lpExistingFileName="C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Administrative Tools\\System Configuration.lnk" (normalized: "c:\\programdata\\microsoft\\windows\\start menu\\programs\\administrative tools\\system configuration.lnk"), lpNewFileName="C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Administrative Tools\\System Configuration.lnk.[neftet@tutanota.com].boom" (normalized: "c:\\programdata\\microsoft\\windows\\start menu\\programs\\administrative tools\\system configuration.lnk.[neftet@tutanota.com].boom")) returned 1 [0127.819] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Administrative Tools\\Task Scheduler.lnk", nBufferLength=0x105, lpBuffer=0x31e094, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Administrative Tools\\Task Scheduler.lnk", lpFilePart=0x0) returned 0x5c [0127.819] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e588) returned 1 [0127.819] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Administrative Tools\\Task Scheduler.lnk" (normalized: "c:\\programdata\\microsoft\\windows\\start menu\\programs\\administrative tools\\task scheduler.lnk"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x274 [0127.819] GetFileType (hFile=0x274) returned 0x1 [0127.819] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e584) returned 1 [0127.819] GetFileType (hFile=0x274) returned 0x1 [0127.819] GetFileSize (in: hFile=0x274, lpFileSizeHigh=0x31e690 | out: lpFileSizeHigh=0x31e690*=0x0) returned 0x500 [0127.819] ReadFile (in: hFile=0x274, lpBuffer=0x2740c9c, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x31e63c, lpOverlapped=0x0 | out: lpBuffer=0x2740c9c*, lpNumberOfBytesRead=0x31e63c*=0x500, lpOverlapped=0x0) returned 1 [0127.820] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Administrative Tools\\Task Scheduler.lnk", nBufferLength=0x105, lpBuffer=0x31e080, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Administrative Tools\\Task Scheduler.lnk", lpFilePart=0x0) returned 0x5c [0127.820] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e574) returned 1 [0127.820] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Administrative Tools\\Task Scheduler.lnk" (normalized: "c:\\programdata\\microsoft\\windows\\start menu\\programs\\administrative tools\\task scheduler.lnk"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x274 [0127.821] GetFileType (hFile=0x274) returned 0x1 [0127.821] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e570) returned 1 [0127.821] GetFileType (hFile=0x274) returned 0x1 [0127.823] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Administrative Tools\\Task Scheduler.lnk", nBufferLength=0x105, lpBuffer=0x31e1b4, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Administrative Tools\\Task Scheduler.lnk", lpFilePart=0x0) returned 0x5c [0127.823] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Administrative Tools\\Task Scheduler.lnk.[neftet@tutanota.com].boom", nBufferLength=0x105, lpBuffer=0x31e1b4, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Administrative Tools\\Task Scheduler.lnk.[neftet@tutanota.com].boom", lpFilePart=0x0) returned 0x77 [0127.823] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e614) returned 1 [0127.823] GetFileAttributesExW (in: lpFileName="C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Administrative Tools\\Task Scheduler.lnk" (normalized: "c:\\programdata\\microsoft\\windows\\start menu\\programs\\administrative tools\\task scheduler.lnk"), fInfoLevelId=0x0, lpFileInformation=0x31e690 | out: lpFileInformation=0x31e690*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2b99f553, ftCreationTime.dwHighDateTime=0x1ca043f, ftLastAccessTime.dwLowDateTime=0x2b99f553, ftLastAccessTime.dwHighDateTime=0x1ca043f, ftLastWriteTime.dwLowDateTime=0x2f9ea3a0, ftLastWriteTime.dwHighDateTime=0x1d6eb7f, nFileSizeHigh=0x0, nFileSizeLow=0x500)) returned 1 [0127.823] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e610) returned 1 [0127.823] MoveFileW (lpExistingFileName="C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Administrative Tools\\Task Scheduler.lnk" (normalized: "c:\\programdata\\microsoft\\windows\\start menu\\programs\\administrative tools\\task scheduler.lnk"), lpNewFileName="C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Administrative Tools\\Task Scheduler.lnk.[neftet@tutanota.com].boom" (normalized: "c:\\programdata\\microsoft\\windows\\start menu\\programs\\administrative tools\\task scheduler.lnk.[neftet@tutanota.com].boom")) returned 1 [0127.825] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Administrative Tools\\Windows Firewall with Advanced Security.lnk", nBufferLength=0x105, lpBuffer=0x31e094, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Administrative Tools\\Windows Firewall with Advanced Security.lnk", lpFilePart=0x0) returned 0x75 [0127.825] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e588) returned 1 [0127.825] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Administrative Tools\\Windows Firewall with Advanced Security.lnk" (normalized: "c:\\programdata\\microsoft\\windows\\start menu\\programs\\administrative tools\\windows firewall with advanced security.lnk"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x274 [0127.825] GetFileType (hFile=0x274) returned 0x1 [0127.825] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e584) returned 1 [0127.825] GetFileType (hFile=0x274) returned 0x1 [0127.825] GetFileSize (in: hFile=0x274, lpFileSizeHigh=0x31e690 | out: lpFileSizeHigh=0x31e690*=0x0) returned 0x510 [0127.825] ReadFile (in: hFile=0x274, lpBuffer=0x2745254, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x31e63c, lpOverlapped=0x0 | out: lpBuffer=0x2745254*, lpNumberOfBytesRead=0x31e63c*=0x510, lpOverlapped=0x0) returned 1 [0127.826] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Administrative Tools\\Windows Firewall with Advanced Security.lnk", nBufferLength=0x105, lpBuffer=0x31e080, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Administrative Tools\\Windows Firewall with Advanced Security.lnk", lpFilePart=0x0) returned 0x75 [0127.826] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e574) returned 1 [0127.826] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Administrative Tools\\Windows Firewall with Advanced Security.lnk" (normalized: "c:\\programdata\\microsoft\\windows\\start menu\\programs\\administrative tools\\windows firewall with advanced security.lnk"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x274 [0127.827] GetFileType (hFile=0x274) returned 0x1 [0127.827] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e570) returned 1 [0127.827] GetFileType (hFile=0x274) returned 0x1 [0127.828] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Administrative Tools\\Windows Firewall with Advanced Security.lnk", nBufferLength=0x105, lpBuffer=0x31e1b4, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Administrative Tools\\Windows Firewall with Advanced Security.lnk", lpFilePart=0x0) returned 0x75 [0127.828] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Administrative Tools\\Windows Firewall with Advanced Security.lnk.[neftet@tutanota.com].boom", nBufferLength=0x105, lpBuffer=0x31e1b4, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Administrative Tools\\Windows Firewall with Advanced Security.lnk.[neftet@tutanota.com].boom", lpFilePart=0x0) returned 0x90 [0127.828] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e614) returned 1 [0127.828] GetFileAttributesExW (in: lpFileName="C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Administrative Tools\\Windows Firewall with Advanced Security.lnk" (normalized: "c:\\programdata\\microsoft\\windows\\start menu\\programs\\administrative tools\\windows firewall with advanced security.lnk"), fInfoLevelId=0x0, lpFileInformation=0x31e690 | out: lpFileInformation=0x31e690*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x191902f2, ftCreationTime.dwHighDateTime=0x1ca043f, ftLastAccessTime.dwLowDateTime=0x191902f2, ftLastAccessTime.dwHighDateTime=0x1ca043f, ftLastWriteTime.dwLowDateTime=0x2fa10500, ftLastWriteTime.dwHighDateTime=0x1d6eb7f, nFileSizeHigh=0x0, nFileSizeLow=0x510)) returned 1 [0127.828] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e610) returned 1 [0127.828] MoveFileW (lpExistingFileName="C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Administrative Tools\\Windows Firewall with Advanced Security.lnk" (normalized: "c:\\programdata\\microsoft\\windows\\start menu\\programs\\administrative tools\\windows firewall with advanced security.lnk"), lpNewFileName="C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Administrative Tools\\Windows Firewall with Advanced Security.lnk.[neftet@tutanota.com].boom" (normalized: "c:\\programdata\\microsoft\\windows\\start menu\\programs\\administrative tools\\windows firewall with advanced security.lnk.[neftet@tutanota.com].boom")) returned 1 [0127.830] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Administrative Tools\\Windows PowerShell Modules.lnk", nBufferLength=0x105, lpBuffer=0x31e094, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Administrative Tools\\Windows PowerShell Modules.lnk", lpFilePart=0x0) returned 0x68 [0127.830] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e588) returned 1 [0127.830] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Administrative Tools\\Windows PowerShell Modules.lnk" (normalized: "c:\\programdata\\microsoft\\windows\\start menu\\programs\\administrative tools\\windows powershell modules.lnk"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x274 [0127.830] GetFileType (hFile=0x274) returned 0x1 [0127.830] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e584) returned 1 [0127.830] GetFileType (hFile=0x274) returned 0x1 [0127.830] GetFileSize (in: hFile=0x274, lpFileSizeHigh=0x31e690 | out: lpFileSizeHigh=0x31e690*=0x0) returned 0xad0 [0127.830] ReadFile (in: hFile=0x274, lpBuffer=0x2749ea4, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x31e63c, lpOverlapped=0x0 | out: lpBuffer=0x2749ea4*, lpNumberOfBytesRead=0x31e63c*=0xad0, lpOverlapped=0x0) returned 1 [0127.831] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Administrative Tools\\Windows PowerShell Modules.lnk", nBufferLength=0x105, lpBuffer=0x31e080, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Administrative Tools\\Windows PowerShell Modules.lnk", lpFilePart=0x0) returned 0x68 [0127.831] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e574) returned 1 [0127.831] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Administrative Tools\\Windows PowerShell Modules.lnk" (normalized: "c:\\programdata\\microsoft\\windows\\start menu\\programs\\administrative tools\\windows powershell modules.lnk"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x274 [0127.832] GetFileType (hFile=0x274) returned 0x1 [0127.832] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e570) returned 1 [0127.832] GetFileType (hFile=0x274) returned 0x1 [0127.832] WriteFile (in: hFile=0x274, lpBuffer=0x274cf34*, nNumberOfBytesToWrite=0xad0, lpNumberOfBytesWritten=0x31e604, lpOverlapped=0x0 | out: lpBuffer=0x274cf34*, lpNumberOfBytesWritten=0x31e604*=0xad0, lpOverlapped=0x0) returned 1 [0127.833] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Administrative Tools\\Windows PowerShell Modules.lnk", nBufferLength=0x105, lpBuffer=0x31e1b4, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Administrative Tools\\Windows PowerShell Modules.lnk", lpFilePart=0x0) returned 0x68 [0127.833] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Administrative Tools\\Windows PowerShell Modules.lnk.[neftet@tutanota.com].boom", nBufferLength=0x105, lpBuffer=0x31e1b4, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Administrative Tools\\Windows PowerShell Modules.lnk.[neftet@tutanota.com].boom", lpFilePart=0x0) returned 0x83 [0127.833] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e614) returned 1 [0127.833] GetFileAttributesExW (in: lpFileName="C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Administrative Tools\\Windows PowerShell Modules.lnk" (normalized: "c:\\programdata\\microsoft\\windows\\start menu\\programs\\administrative tools\\windows powershell modules.lnk"), fInfoLevelId=0x0, lpFileInformation=0x31e690 | out: lpFileInformation=0x31e690*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8038cbd7, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x7bed1018, ftLastAccessTime.dwHighDateTime=0x1ca0444, ftLastWriteTime.dwLowDateTime=0x2fa10500, ftLastWriteTime.dwHighDateTime=0x1d6eb7f, nFileSizeHigh=0x0, nFileSizeLow=0xad0)) returned 1 [0127.833] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e610) returned 1 [0127.834] MoveFileW (lpExistingFileName="C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Administrative Tools\\Windows PowerShell Modules.lnk" (normalized: "c:\\programdata\\microsoft\\windows\\start menu\\programs\\administrative tools\\windows powershell modules.lnk"), lpNewFileName="C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Administrative Tools\\Windows PowerShell Modules.lnk.[neftet@tutanota.com].boom" (normalized: "c:\\programdata\\microsoft\\windows\\start menu\\programs\\administrative tools\\windows powershell modules.lnk.[neftet@tutanota.com].boom")) returned 1 [0127.835] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e6cc) returned 1 [0127.835] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Games", nBufferLength=0x105, lpBuffer=0x31e1d4, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Games", lpFilePart=0x0) returned 0x3a [0127.835] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Games\\", nBufferLength=0x105, lpBuffer=0x31e1a8, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Games\\", lpFilePart=0x0) returned 0x3b [0127.835] FindFirstFileW (in: lpFileName="C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Games\\*", lpFindFileData=0x31e3f4 | out: lpFindFileData=0x31e3f4*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x80020c30, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0xa224bfc3, ftLastAccessTime.dwHighDateTime=0x1cbf8eb, ftLastWriteTime.dwLowDateTime=0xa224bfc3, ftLastWriteTime.dwHighDateTime=0x1cbf8eb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x381b80 [0127.835] FindClose (in: hFindFile=0x381b80 | out: hFindFile=0x381b80) returned 1 [0127.835] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e68c) returned 1 [0127.835] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e698) returned 1 [0127.835] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e6cc) returned 1 [0127.835] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Games", nBufferLength=0x105, lpBuffer=0x31e1d4, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Games", lpFilePart=0x0) returned 0x3a [0127.835] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Games\\", nBufferLength=0x105, lpBuffer=0x31e1a8, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Games\\", lpFilePart=0x0) returned 0x3b [0127.836] FindFirstFileW (in: lpFileName="C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Games\\*", lpFindFileData=0x31e3f4 | out: lpFindFileData=0x31e3f4*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x80020c30, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0xa224bfc3, ftLastAccessTime.dwHighDateTime=0x1cbf8eb, ftLastWriteTime.dwLowDateTime=0xa224bfc3, ftLastWriteTime.dwHighDateTime=0x1cbf8eb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x381b80 [0127.836] FindClose (in: hFindFile=0x381b80 | out: hFindFile=0x381b80) returned 1 [0127.836] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e68c) returned 1 [0127.836] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e698) returned 1 [0127.836] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Games\\GameExplorer.lnk", nBufferLength=0x105, lpBuffer=0x31e094, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Games\\GameExplorer.lnk", lpFilePart=0x0) returned 0x4b [0127.836] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e588) returned 1 [0127.836] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Games\\GameExplorer.lnk" (normalized: "c:\\programdata\\microsoft\\windows\\start menu\\programs\\games\\gameexplorer.lnk"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x274 [0127.836] GetFileType (hFile=0x274) returned 0x1 [0127.836] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e584) returned 1 [0127.836] GetFileType (hFile=0x274) returned 0x1 [0127.836] GetFileSize (in: hFile=0x274, lpFileSizeHigh=0x31e690 | out: lpFileSizeHigh=0x31e690*=0x0) returned 0x120 [0127.836] ReadFile (in: hFile=0x274, lpBuffer=0x27500e0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x31e63c, lpOverlapped=0x0 | out: lpBuffer=0x27500e0*, lpNumberOfBytesRead=0x31e63c*=0x120, lpOverlapped=0x0) returned 1 [0127.837] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Games\\GameExplorer.lnk", nBufferLength=0x105, lpBuffer=0x31e080, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Games\\GameExplorer.lnk", lpFilePart=0x0) returned 0x4b [0127.837] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e574) returned 1 [0127.837] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Games\\GameExplorer.lnk" (normalized: "c:\\programdata\\microsoft\\windows\\start menu\\programs\\games\\gameexplorer.lnk"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x274 [0127.838] GetFileType (hFile=0x274) returned 0x1 [0127.838] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e570) returned 1 [0127.838] GetFileType (hFile=0x274) returned 0x1 [0127.838] WriteFile (in: hFile=0x274, lpBuffer=0x2752768*, nNumberOfBytesToWrite=0x120, lpNumberOfBytesWritten=0x31e604, lpOverlapped=0x0 | out: lpBuffer=0x2752768*, lpNumberOfBytesWritten=0x31e604*=0x120, lpOverlapped=0x0) returned 1 [0127.839] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Games\\GameExplorer.lnk", nBufferLength=0x105, lpBuffer=0x31e1b4, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Games\\GameExplorer.lnk", lpFilePart=0x0) returned 0x4b [0127.839] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Games\\GameExplorer.lnk.[neftet@tutanota.com].boom", nBufferLength=0x105, lpBuffer=0x31e1b4, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Games\\GameExplorer.lnk.[neftet@tutanota.com].boom", lpFilePart=0x0) returned 0x66 [0127.839] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e614) returned 1 [0127.839] GetFileAttributesExW (in: lpFileName="C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Games\\GameExplorer.lnk" (normalized: "c:\\programdata\\microsoft\\windows\\start menu\\programs\\games\\gameexplorer.lnk"), fInfoLevelId=0x0, lpFileInformation=0x31e690 | out: lpFileInformation=0x31e690*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3db22b28, ftCreationTime.dwHighDateTime=0x1ca043f, ftLastAccessTime.dwLowDateTime=0x3db22b28, ftLastAccessTime.dwHighDateTime=0x1ca043f, ftLastWriteTime.dwLowDateTime=0x2fa10500, ftLastWriteTime.dwHighDateTime=0x1d6eb7f, nFileSizeHigh=0x0, nFileSizeLow=0x120)) returned 1 [0127.839] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e610) returned 1 [0127.839] MoveFileW (lpExistingFileName="C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Games\\GameExplorer.lnk" (normalized: "c:\\programdata\\microsoft\\windows\\start menu\\programs\\games\\gameexplorer.lnk"), lpNewFileName="C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Games\\GameExplorer.lnk.[neftet@tutanota.com].boom" (normalized: "c:\\programdata\\microsoft\\windows\\start menu\\programs\\games\\gameexplorer.lnk.[neftet@tutanota.com].boom")) returned 1 [0127.842] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e6cc) returned 1 [0127.842] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Java", nBufferLength=0x105, lpBuffer=0x31e1d4, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Java", lpFilePart=0x0) returned 0x39 [0127.842] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Java\\", nBufferLength=0x105, lpBuffer=0x31e1a8, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Java\\", lpFilePart=0x0) returned 0x3a [0127.842] FindFirstFileW (in: lpFileName="C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Java\\*", lpFindFileData=0x31e3f4 | out: lpFindFileData=0x31e3f4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7577bc60, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x762ca4e0, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x762ca4e0, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x381b80 [0127.842] FindClose (in: hFindFile=0x381b80 | out: hFindFile=0x381b80) returned 1 [0127.843] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e68c) returned 1 [0127.843] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e698) returned 1 [0127.843] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e6cc) returned 1 [0127.843] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Java", nBufferLength=0x105, lpBuffer=0x31e1d4, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Java", lpFilePart=0x0) returned 0x39 [0127.843] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Java\\", nBufferLength=0x105, lpBuffer=0x31e1a8, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Java\\", lpFilePart=0x0) returned 0x3a [0127.843] FindFirstFileW (in: lpFileName="C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Java\\*", lpFindFileData=0x31e3f4 | out: lpFindFileData=0x31e3f4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7577bc60, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x762ca4e0, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x762ca4e0, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x381b80 [0127.843] FindClose (in: hFindFile=0x381b80 | out: hFindFile=0x381b80) returned 1 [0127.843] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e68c) returned 1 [0127.843] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e698) returned 1 [0127.843] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Java\\About Java.lnk", nBufferLength=0x105, lpBuffer=0x31e094, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Java\\About Java.lnk", lpFilePart=0x0) returned 0x48 [0127.843] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e588) returned 1 [0127.843] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Java\\About Java.lnk" (normalized: "c:\\programdata\\microsoft\\windows\\start menu\\programs\\java\\about java.lnk"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x274 [0127.843] GetFileType (hFile=0x274) returned 0x1 [0127.843] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e584) returned 1 [0127.843] GetFileType (hFile=0x274) returned 0x1 [0127.843] GetFileSize (in: hFile=0x274, lpFileSizeHigh=0x31e690 | out: lpFileSizeHigh=0x31e690*=0x0) returned 0x7e0 [0127.843] ReadFile (in: hFile=0x274, lpBuffer=0x2756a88, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x31e63c, lpOverlapped=0x0 | out: lpBuffer=0x2756a88*, lpNumberOfBytesRead=0x31e63c*=0x7e0, lpOverlapped=0x0) returned 1 [0127.844] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Java\\About Java.lnk", nBufferLength=0x105, lpBuffer=0x31e080, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Java\\About Java.lnk", lpFilePart=0x0) returned 0x48 [0127.844] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e574) returned 1 [0127.844] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Java\\About Java.lnk" (normalized: "c:\\programdata\\microsoft\\windows\\start menu\\programs\\java\\about java.lnk"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x274 [0127.845] GetFileType (hFile=0x274) returned 0x1 [0127.845] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e570) returned 1 [0127.845] GetFileType (hFile=0x274) returned 0x1 [0127.846] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Java\\About Java.lnk", nBufferLength=0x105, lpBuffer=0x31e1b4, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Java\\About Java.lnk", lpFilePart=0x0) returned 0x48 [0127.846] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Java\\About Java.lnk.[neftet@tutanota.com].boom", nBufferLength=0x105, lpBuffer=0x31e1b4, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Java\\About Java.lnk.[neftet@tutanota.com].boom", lpFilePart=0x0) returned 0x63 [0127.846] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e614) returned 1 [0127.846] GetFileAttributesExW (in: lpFileName="C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Java\\About Java.lnk" (normalized: "c:\\programdata\\microsoft\\windows\\start menu\\programs\\java\\about java.lnk"), fInfoLevelId=0x0, lpFileInformation=0x31e690 | out: lpFileInformation=0x31e690*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x762ca4e0, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x762ca4e0, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x2fa36660, ftLastWriteTime.dwHighDateTime=0x1d6eb7f, nFileSizeHigh=0x0, nFileSizeLow=0x7e0)) returned 1 [0127.846] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e610) returned 1 [0127.846] MoveFileW (lpExistingFileName="C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Java\\About Java.lnk" (normalized: "c:\\programdata\\microsoft\\windows\\start menu\\programs\\java\\about java.lnk"), lpNewFileName="C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Java\\About Java.lnk.[neftet@tutanota.com].boom" (normalized: "c:\\programdata\\microsoft\\windows\\start menu\\programs\\java\\about java.lnk.[neftet@tutanota.com].boom")) returned 1 [0127.848] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Java\\Check For Updates.lnk", nBufferLength=0x105, lpBuffer=0x31e094, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Java\\Check For Updates.lnk", lpFilePart=0x0) returned 0x4f [0127.848] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e588) returned 1 [0127.848] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Java\\Check For Updates.lnk" (normalized: "c:\\programdata\\microsoft\\windows\\start menu\\programs\\java\\check for updates.lnk"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x274 [0127.848] GetFileType (hFile=0x274) returned 0x1 [0127.848] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e584) returned 1 [0127.848] GetFileType (hFile=0x274) returned 0x1 [0127.848] GetFileSize (in: hFile=0x274, lpFileSizeHigh=0x31e690 | out: lpFileSizeHigh=0x31e690*=0x0) returned 0x800 [0127.848] ReadFile (in: hFile=0x274, lpBuffer=0x275b4f0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x31e63c, lpOverlapped=0x0 | out: lpBuffer=0x275b4f0*, lpNumberOfBytesRead=0x31e63c*=0x800, lpOverlapped=0x0) returned 1 [0127.849] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Java\\Check For Updates.lnk", nBufferLength=0x105, lpBuffer=0x31e080, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Java\\Check For Updates.lnk", lpFilePart=0x0) returned 0x4f [0127.849] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e574) returned 1 [0127.849] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Java\\Check For Updates.lnk" (normalized: "c:\\programdata\\microsoft\\windows\\start menu\\programs\\java\\check for updates.lnk"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x274 [0127.850] GetFileType (hFile=0x274) returned 0x1 [0127.850] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e570) returned 1 [0127.850] GetFileType (hFile=0x274) returned 0x1 [0127.850] WriteFile (in: hFile=0x274, lpBuffer=0x275e268*, nNumberOfBytesToWrite=0x800, lpNumberOfBytesWritten=0x31e604, lpOverlapped=0x0 | out: lpBuffer=0x275e268*, lpNumberOfBytesWritten=0x31e604*=0x800, lpOverlapped=0x0) returned 1 [0127.851] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Java\\Check For Updates.lnk", nBufferLength=0x105, lpBuffer=0x31e1b4, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Java\\Check For Updates.lnk", lpFilePart=0x0) returned 0x4f [0127.851] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Java\\Check For Updates.lnk.[neftet@tutanota.com].boom", nBufferLength=0x105, lpBuffer=0x31e1b4, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Java\\Check For Updates.lnk.[neftet@tutanota.com].boom", lpFilePart=0x0) returned 0x6a [0127.851] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e614) returned 1 [0127.851] GetFileAttributesExW (in: lpFileName="C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Java\\Check For Updates.lnk" (normalized: "c:\\programdata\\microsoft\\windows\\start menu\\programs\\java\\check for updates.lnk"), fInfoLevelId=0x0, lpFileInformation=0x31e690 | out: lpFileInformation=0x31e690*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x762ca4e0, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x762ca4e0, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x2fa36660, ftLastWriteTime.dwHighDateTime=0x1d6eb7f, nFileSizeHigh=0x0, nFileSizeLow=0x800)) returned 1 [0127.851] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e610) returned 1 [0127.852] MoveFileW (lpExistingFileName="C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Java\\Check For Updates.lnk" (normalized: "c:\\programdata\\microsoft\\windows\\start menu\\programs\\java\\check for updates.lnk"), lpNewFileName="C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Java\\Check For Updates.lnk.[neftet@tutanota.com].boom" (normalized: "c:\\programdata\\microsoft\\windows\\start menu\\programs\\java\\check for updates.lnk.[neftet@tutanota.com].boom")) returned 1 [0127.853] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Java\\Configure Java.lnk", nBufferLength=0x105, lpBuffer=0x31e094, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Java\\Configure Java.lnk", lpFilePart=0x0) returned 0x4c [0127.853] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e588) returned 1 [0127.853] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Java\\Configure Java.lnk" (normalized: "c:\\programdata\\microsoft\\windows\\start menu\\programs\\java\\configure java.lnk"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x274 [0127.853] GetFileType (hFile=0x274) returned 0x1 [0127.853] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e584) returned 1 [0127.853] GetFileType (hFile=0x274) returned 0x1 [0127.853] GetFileSize (in: hFile=0x274, lpFileSizeHigh=0x31e690 | out: lpFileSizeHigh=0x31e690*=0x0) returned 0x7d0 [0127.853] ReadFile (in: hFile=0x274, lpBuffer=0x275ff84, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x31e63c, lpOverlapped=0x0 | out: lpBuffer=0x275ff84*, lpNumberOfBytesRead=0x31e63c*=0x7d0, lpOverlapped=0x0) returned 1 [0127.854] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Java\\Configure Java.lnk", nBufferLength=0x105, lpBuffer=0x31e080, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Java\\Configure Java.lnk", lpFilePart=0x0) returned 0x4c [0127.854] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e574) returned 1 [0127.854] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Java\\Configure Java.lnk" (normalized: "c:\\programdata\\microsoft\\windows\\start menu\\programs\\java\\configure java.lnk"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x274 [0127.855] GetFileType (hFile=0x274) returned 0x1 [0127.855] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e570) returned 1 [0127.855] GetFileType (hFile=0x274) returned 0x1 [0127.855] WriteFile (in: hFile=0x274, lpBuffer=0x2762cc4*, nNumberOfBytesToWrite=0x7d0, lpNumberOfBytesWritten=0x31e604, lpOverlapped=0x0 | out: lpBuffer=0x2762cc4*, lpNumberOfBytesWritten=0x31e604*=0x7d0, lpOverlapped=0x0) returned 1 [0127.856] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Java\\Configure Java.lnk", nBufferLength=0x105, lpBuffer=0x31e1b4, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Java\\Configure Java.lnk", lpFilePart=0x0) returned 0x4c [0127.856] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Java\\Configure Java.lnk.[neftet@tutanota.com].boom", nBufferLength=0x105, lpBuffer=0x31e1b4, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Java\\Configure Java.lnk.[neftet@tutanota.com].boom", lpFilePart=0x0) returned 0x67 [0127.856] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e614) returned 1 [0127.857] GetFileAttributesExW (in: lpFileName="C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Java\\Configure Java.lnk" (normalized: "c:\\programdata\\microsoft\\windows\\start menu\\programs\\java\\configure java.lnk"), fInfoLevelId=0x0, lpFileInformation=0x31e690 | out: lpFileInformation=0x31e690*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x762a4380, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x762a4380, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x2fa36660, ftLastWriteTime.dwHighDateTime=0x1d6eb7f, nFileSizeHigh=0x0, nFileSizeLow=0x7d0)) returned 1 [0127.857] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e610) returned 1 [0127.857] MoveFileW (lpExistingFileName="C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Java\\Configure Java.lnk" (normalized: "c:\\programdata\\microsoft\\windows\\start menu\\programs\\java\\configure java.lnk"), lpNewFileName="C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Java\\Configure Java.lnk.[neftet@tutanota.com].boom" (normalized: "c:\\programdata\\microsoft\\windows\\start menu\\programs\\java\\configure java.lnk.[neftet@tutanota.com].boom")) returned 1 [0127.859] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Java\\Get Help.lnk", nBufferLength=0x105, lpBuffer=0x31e094, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Java\\Get Help.lnk", lpFilePart=0x0) returned 0x46 [0127.859] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e588) returned 1 [0127.859] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Java\\Get Help.lnk" (normalized: "c:\\programdata\\microsoft\\windows\\start menu\\programs\\java\\get help.lnk"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x274 [0127.859] GetFileType (hFile=0x274) returned 0x1 [0127.859] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e584) returned 1 [0127.859] GetFileType (hFile=0x274) returned 0x1 [0127.859] GetFileSize (in: hFile=0x274, lpFileSizeHigh=0x31e690 | out: lpFileSizeHigh=0x31e690*=0x0) returned 0x4d0 [0127.859] ReadFile (in: hFile=0x274, lpBuffer=0x27646b4, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x31e63c, lpOverlapped=0x0 | out: lpBuffer=0x27646b4*, lpNumberOfBytesRead=0x31e63c*=0x4d0, lpOverlapped=0x0) returned 1 [0127.860] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Java\\Get Help.lnk", nBufferLength=0x105, lpBuffer=0x31e080, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Java\\Get Help.lnk", lpFilePart=0x0) returned 0x46 [0127.860] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e574) returned 1 [0127.860] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Java\\Get Help.lnk" (normalized: "c:\\programdata\\microsoft\\windows\\start menu\\programs\\java\\get help.lnk"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x274 [0127.861] GetFileType (hFile=0x274) returned 0x1 [0127.861] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e570) returned 1 [0127.861] GetFileType (hFile=0x274) returned 0x1 [0127.861] WriteFile (in: hFile=0x274, lpBuffer=0x27670dc*, nNumberOfBytesToWrite=0x4d0, lpNumberOfBytesWritten=0x31e604, lpOverlapped=0x0 | out: lpBuffer=0x27670dc*, lpNumberOfBytesWritten=0x31e604*=0x4d0, lpOverlapped=0x0) returned 1 [0127.862] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Java\\Get Help.lnk", nBufferLength=0x105, lpBuffer=0x31e1b4, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Java\\Get Help.lnk", lpFilePart=0x0) returned 0x46 [0127.862] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Java\\Get Help.lnk.[neftet@tutanota.com].boom", nBufferLength=0x105, lpBuffer=0x31e1b4, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Java\\Get Help.lnk.[neftet@tutanota.com].boom", lpFilePart=0x0) returned 0x61 [0127.862] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e614) returned 1 [0127.862] GetFileAttributesExW (in: lpFileName="C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Java\\Get Help.lnk" (normalized: "c:\\programdata\\microsoft\\windows\\start menu\\programs\\java\\get help.lnk"), fInfoLevelId=0x0, lpFileInformation=0x31e690 | out: lpFileInformation=0x31e690*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7591eb80, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x7591eb80, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x2fa5c7c0, ftLastWriteTime.dwHighDateTime=0x1d6eb7f, nFileSizeHigh=0x0, nFileSizeLow=0x4d0)) returned 1 [0127.862] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e610) returned 1 [0127.862] MoveFileW (lpExistingFileName="C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Java\\Get Help.lnk" (normalized: "c:\\programdata\\microsoft\\windows\\start menu\\programs\\java\\get help.lnk"), lpNewFileName="C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Java\\Get Help.lnk.[neftet@tutanota.com].boom" (normalized: "c:\\programdata\\microsoft\\windows\\start menu\\programs\\java\\get help.lnk.[neftet@tutanota.com].boom")) returned 1 [0127.864] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Java\\Visit Java.com.lnk", nBufferLength=0x105, lpBuffer=0x31e094, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Java\\Visit Java.com.lnk", lpFilePart=0x0) returned 0x4c [0127.864] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e588) returned 1 [0127.864] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Java\\Visit Java.com.lnk" (normalized: "c:\\programdata\\microsoft\\windows\\start menu\\programs\\java\\visit java.com.lnk"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x274 [0127.864] GetFileType (hFile=0x274) returned 0x1 [0127.864] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e584) returned 1 [0127.864] GetFileType (hFile=0x274) returned 0x1 [0127.864] GetFileSize (in: hFile=0x274, lpFileSizeHigh=0x31e690 | out: lpFileSizeHigh=0x31e690*=0x0) returned 0x470 [0127.864] ReadFile (in: hFile=0x274, lpBuffer=0x2768a60, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x31e63c, lpOverlapped=0x0 | out: lpBuffer=0x2768a60*, lpNumberOfBytesRead=0x31e63c*=0x470, lpOverlapped=0x0) returned 1 [0127.865] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Java\\Visit Java.com.lnk", nBufferLength=0x105, lpBuffer=0x31e080, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Java\\Visit Java.com.lnk", lpFilePart=0x0) returned 0x4c [0127.865] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e574) returned 1 [0127.865] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Java\\Visit Java.com.lnk" (normalized: "c:\\programdata\\microsoft\\windows\\start menu\\programs\\java\\visit java.com.lnk"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x274 [0127.866] GetFileType (hFile=0x274) returned 0x1 [0127.866] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e570) returned 1 [0127.866] GetFileType (hFile=0x274) returned 0x1 [0127.867] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Java\\Visit Java.com.lnk", nBufferLength=0x105, lpBuffer=0x31e1b4, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Java\\Visit Java.com.lnk", lpFilePart=0x0) returned 0x4c [0127.867] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Java\\Visit Java.com.lnk.[neftet@tutanota.com].boom", nBufferLength=0x105, lpBuffer=0x31e1b4, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Java\\Visit Java.com.lnk.[neftet@tutanota.com].boom", lpFilePart=0x0) returned 0x67 [0127.867] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e614) returned 1 [0127.867] GetFileAttributesExW (in: lpFileName="C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Java\\Visit Java.com.lnk" (normalized: "c:\\programdata\\microsoft\\windows\\start menu\\programs\\java\\visit java.com.lnk"), fInfoLevelId=0x0, lpFileInformation=0x31e690 | out: lpFileInformation=0x31e690*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x758f8a20, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x758f8a20, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x2fa5c7c0, ftLastWriteTime.dwHighDateTime=0x1d6eb7f, nFileSizeHigh=0x0, nFileSizeLow=0x470)) returned 1 [0127.867] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e610) returned 1 [0127.867] MoveFileW (lpExistingFileName="C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Java\\Visit Java.com.lnk" (normalized: "c:\\programdata\\microsoft\\windows\\start menu\\programs\\java\\visit java.com.lnk"), lpNewFileName="C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Java\\Visit Java.com.lnk.[neftet@tutanota.com].boom" (normalized: "c:\\programdata\\microsoft\\windows\\start menu\\programs\\java\\visit java.com.lnk.[neftet@tutanota.com].boom")) returned 1 [0127.868] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e6cc) returned 1 [0127.868] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Maintenance", nBufferLength=0x105, lpBuffer=0x31e1d4, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Maintenance", lpFilePart=0x0) returned 0x40 [0127.869] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Maintenance\\", nBufferLength=0x105, lpBuffer=0x31e1a8, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Maintenance\\", lpFilePart=0x0) returned 0x41 [0127.869] FindFirstFileW (in: lpFileName="C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Maintenance\\*", lpFindFileData=0x31e3f4 | out: lpFindFileData=0x31e3f4*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0xfd9dbcac, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x8ab46fc5, ftLastAccessTime.dwHighDateTime=0x1ca043f, ftLastWriteTime.dwLowDateTime=0x8ab6d126, ftLastWriteTime.dwHighDateTime=0x1ca043f, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x381b80 [0127.869] FindClose (in: hFindFile=0x381b80 | out: hFindFile=0x381b80) returned 1 [0127.869] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e68c) returned 1 [0127.869] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e698) returned 1 [0127.869] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e6cc) returned 1 [0127.869] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Maintenance", nBufferLength=0x105, lpBuffer=0x31e1d4, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Maintenance", lpFilePart=0x0) returned 0x40 [0127.869] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Maintenance\\", nBufferLength=0x105, lpBuffer=0x31e1a8, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Maintenance\\", lpFilePart=0x0) returned 0x41 [0127.869] FindFirstFileW (in: lpFileName="C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Maintenance\\*", lpFindFileData=0x31e3f4 | out: lpFindFileData=0x31e3f4*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0xfd9dbcac, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x8ab46fc5, ftLastAccessTime.dwHighDateTime=0x1ca043f, ftLastWriteTime.dwLowDateTime=0x8ab6d126, ftLastWriteTime.dwHighDateTime=0x1ca043f, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x381b80 [0127.869] FindClose (in: hFindFile=0x381b80 | out: hFindFile=0x381b80) returned 1 [0127.869] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e68c) returned 1 [0127.869] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e698) returned 1 [0127.869] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Maintenance\\Backup and Restore Center.lnk", nBufferLength=0x105, lpBuffer=0x31e094, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Maintenance\\Backup and Restore Center.lnk", lpFilePart=0x0) returned 0x5e [0127.869] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e588) returned 1 [0127.869] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Maintenance\\Backup and Restore Center.lnk" (normalized: "c:\\programdata\\microsoft\\windows\\start menu\\programs\\maintenance\\backup and restore center.lnk"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x274 [0127.869] GetFileType (hFile=0x274) returned 0x1 [0127.869] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e584) returned 1 [0127.869] GetFileType (hFile=0x274) returned 0x1 [0127.869] GetFileSize (in: hFile=0x274, lpFileSizeHigh=0x31e690 | out: lpFileSizeHigh=0x31e690*=0x0) returned 0x530 [0127.869] ReadFile (in: hFile=0x274, lpBuffer=0x276f40c, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x31e63c, lpOverlapped=0x0 | out: lpBuffer=0x276f40c*, lpNumberOfBytesRead=0x31e63c*=0x530, lpOverlapped=0x0) returned 1 [0127.870] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Maintenance\\Backup and Restore Center.lnk", nBufferLength=0x105, lpBuffer=0x31e080, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Maintenance\\Backup and Restore Center.lnk", lpFilePart=0x0) returned 0x5e [0127.870] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e574) returned 1 [0127.870] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Maintenance\\Backup and Restore Center.lnk" (normalized: "c:\\programdata\\microsoft\\windows\\start menu\\programs\\maintenance\\backup and restore center.lnk"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x274 [0127.871] GetFileType (hFile=0x274) returned 0x1 [0127.871] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e570) returned 1 [0127.871] GetFileType (hFile=0x274) returned 0x1 [0127.872] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Maintenance\\Backup and Restore Center.lnk", nBufferLength=0x105, lpBuffer=0x31e1b4, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Maintenance\\Backup and Restore Center.lnk", lpFilePart=0x0) returned 0x5e [0127.872] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Maintenance\\Backup and Restore Center.lnk.[neftet@tutanota.com].boom", nBufferLength=0x105, lpBuffer=0x31e1b4, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Maintenance\\Backup and Restore Center.lnk.[neftet@tutanota.com].boom", lpFilePart=0x0) returned 0x79 [0127.872] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e614) returned 1 [0127.872] GetFileAttributesExW (in: lpFileName="C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Maintenance\\Backup and Restore Center.lnk" (normalized: "c:\\programdata\\microsoft\\windows\\start menu\\programs\\maintenance\\backup and restore center.lnk"), fInfoLevelId=0x0, lpFileInformation=0x31e690 | out: lpFileInformation=0x31e690*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8a1030d3, ftCreationTime.dwHighDateTime=0x1ca043f, ftLastAccessTime.dwLowDateTime=0x8a1030d3, ftLastAccessTime.dwHighDateTime=0x1ca043f, ftLastWriteTime.dwLowDateTime=0x2fa5c7c0, ftLastWriteTime.dwHighDateTime=0x1d6eb7f, nFileSizeHigh=0x0, nFileSizeLow=0x530)) returned 1 [0127.872] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e610) returned 1 [0127.872] MoveFileW (lpExistingFileName="C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Maintenance\\Backup and Restore Center.lnk" (normalized: "c:\\programdata\\microsoft\\windows\\start menu\\programs\\maintenance\\backup and restore center.lnk"), lpNewFileName="C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Maintenance\\Backup and Restore Center.lnk.[neftet@tutanota.com].boom" (normalized: "c:\\programdata\\microsoft\\windows\\start menu\\programs\\maintenance\\backup and restore center.lnk.[neftet@tutanota.com].boom")) returned 1 [0127.874] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Maintenance\\Create Recovery Disc.lnk", nBufferLength=0x105, lpBuffer=0x31e094, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Maintenance\\Create Recovery Disc.lnk", lpFilePart=0x0) returned 0x59 [0127.874] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e588) returned 1 [0127.874] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Maintenance\\Create Recovery Disc.lnk" (normalized: "c:\\programdata\\microsoft\\windows\\start menu\\programs\\maintenance\\create recovery disc.lnk"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x274 [0127.875] GetFileType (hFile=0x274) returned 0x1 [0127.875] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e584) returned 1 [0127.875] GetFileType (hFile=0x274) returned 0x1 [0127.875] GetFileSize (in: hFile=0x274, lpFileSizeHigh=0x31e690 | out: lpFileSizeHigh=0x31e690*=0x0) returned 0x500 [0127.875] ReadFile (in: hFile=0x274, lpBuffer=0x27739ac, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x31e63c, lpOverlapped=0x0 | out: lpBuffer=0x27739ac*, lpNumberOfBytesRead=0x31e63c*=0x500, lpOverlapped=0x0) returned 1 [0127.875] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Maintenance\\Create Recovery Disc.lnk", nBufferLength=0x105, lpBuffer=0x31e080, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Maintenance\\Create Recovery Disc.lnk", lpFilePart=0x0) returned 0x59 [0127.875] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e574) returned 1 [0127.876] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Maintenance\\Create Recovery Disc.lnk" (normalized: "c:\\programdata\\microsoft\\windows\\start menu\\programs\\maintenance\\create recovery disc.lnk"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x274 [0127.876] GetFileType (hFile=0x274) returned 0x1 [0127.877] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e570) returned 1 [0127.877] GetFileType (hFile=0x274) returned 0x1 [0127.877] WriteFile (in: hFile=0x274, lpBuffer=0x2776440*, nNumberOfBytesToWrite=0x500, lpNumberOfBytesWritten=0x31e604, lpOverlapped=0x0 | out: lpBuffer=0x2776440*, lpNumberOfBytesWritten=0x31e604*=0x500, lpOverlapped=0x0) returned 1 [0127.878] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Maintenance\\Create Recovery Disc.lnk", nBufferLength=0x105, lpBuffer=0x31e1b4, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Maintenance\\Create Recovery Disc.lnk", lpFilePart=0x0) returned 0x59 [0127.878] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Maintenance\\Create Recovery Disc.lnk.[neftet@tutanota.com].boom", nBufferLength=0x105, lpBuffer=0x31e1b4, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Maintenance\\Create Recovery Disc.lnk.[neftet@tutanota.com].boom", lpFilePart=0x0) returned 0x74 [0127.878] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e614) returned 1 [0127.878] GetFileAttributesExW (in: lpFileName="C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Maintenance\\Create Recovery Disc.lnk" (normalized: "c:\\programdata\\microsoft\\windows\\start menu\\programs\\maintenance\\create recovery disc.lnk"), fInfoLevelId=0x0, lpFileInformation=0x31e690 | out: lpFileInformation=0x31e690*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x89a77447, ftCreationTime.dwHighDateTime=0x1ca043f, ftLastAccessTime.dwLowDateTime=0x89a77447, ftLastAccessTime.dwHighDateTime=0x1ca043f, ftLastWriteTime.dwLowDateTime=0x2fa82920, ftLastWriteTime.dwHighDateTime=0x1d6eb7f, nFileSizeHigh=0x0, nFileSizeLow=0x500)) returned 1 [0127.878] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e610) returned 1 [0127.878] MoveFileW (lpExistingFileName="C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Maintenance\\Create Recovery Disc.lnk" (normalized: "c:\\programdata\\microsoft\\windows\\start menu\\programs\\maintenance\\create recovery disc.lnk"), lpNewFileName="C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Maintenance\\Create Recovery Disc.lnk.[neftet@tutanota.com].boom" (normalized: "c:\\programdata\\microsoft\\windows\\start menu\\programs\\maintenance\\create recovery disc.lnk.[neftet@tutanota.com].boom")) returned 1 [0127.879] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Maintenance\\Remote Assistance.lnk", nBufferLength=0x105, lpBuffer=0x31e094, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Maintenance\\Remote Assistance.lnk", lpFilePart=0x0) returned 0x56 [0127.879] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e588) returned 1 [0127.880] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Maintenance\\Remote Assistance.lnk" (normalized: "c:\\programdata\\microsoft\\windows\\start menu\\programs\\maintenance\\remote assistance.lnk"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x274 [0127.880] GetFileType (hFile=0x274) returned 0x1 [0127.880] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e584) returned 1 [0127.880] GetFileType (hFile=0x274) returned 0x1 [0127.880] GetFileSize (in: hFile=0x274, lpFileSizeHigh=0x31e690 | out: lpFileSizeHigh=0x31e690*=0x0) returned 0x4d0 [0127.880] ReadFile (in: hFile=0x274, lpBuffer=0x2777ec8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x31e63c, lpOverlapped=0x0 | out: lpBuffer=0x2777ec8*, lpNumberOfBytesRead=0x31e63c*=0x4d0, lpOverlapped=0x0) returned 1 [0127.880] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Maintenance\\Remote Assistance.lnk", nBufferLength=0x105, lpBuffer=0x31e080, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Maintenance\\Remote Assistance.lnk", lpFilePart=0x0) returned 0x56 [0127.881] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e574) returned 1 [0127.881] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Maintenance\\Remote Assistance.lnk" (normalized: "c:\\programdata\\microsoft\\windows\\start menu\\programs\\maintenance\\remote assistance.lnk"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x274 [0127.881] GetFileType (hFile=0x274) returned 0x1 [0127.881] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e570) returned 1 [0127.882] GetFileType (hFile=0x274) returned 0x1 [0127.882] WriteFile (in: hFile=0x274, lpBuffer=0x277a920*, nNumberOfBytesToWrite=0x4d0, lpNumberOfBytesWritten=0x31e604, lpOverlapped=0x0 | out: lpBuffer=0x277a920*, lpNumberOfBytesWritten=0x31e604*=0x4d0, lpOverlapped=0x0) returned 1 [0127.883] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Maintenance\\Remote Assistance.lnk", nBufferLength=0x105, lpBuffer=0x31e1b4, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Maintenance\\Remote Assistance.lnk", lpFilePart=0x0) returned 0x56 [0127.883] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Maintenance\\Remote Assistance.lnk.[neftet@tutanota.com].boom", nBufferLength=0x105, lpBuffer=0x31e1b4, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Maintenance\\Remote Assistance.lnk.[neftet@tutanota.com].boom", lpFilePart=0x0) returned 0x71 [0127.883] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e614) returned 1 [0127.883] GetFileAttributesExW (in: lpFileName="C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Maintenance\\Remote Assistance.lnk" (normalized: "c:\\programdata\\microsoft\\windows\\start menu\\programs\\maintenance\\remote assistance.lnk"), fInfoLevelId=0x0, lpFileInformation=0x31e690 | out: lpFileInformation=0x31e690*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8ab46fc5, ftCreationTime.dwHighDateTime=0x1ca043f, ftLastAccessTime.dwLowDateTime=0x8ab46fc5, ftLastAccessTime.dwHighDateTime=0x1ca043f, ftLastWriteTime.dwLowDateTime=0x2fa82920, ftLastWriteTime.dwHighDateTime=0x1d6eb7f, nFileSizeHigh=0x0, nFileSizeLow=0x4d0)) returned 1 [0127.883] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e610) returned 1 [0127.883] MoveFileW (lpExistingFileName="C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Maintenance\\Remote Assistance.lnk" (normalized: "c:\\programdata\\microsoft\\windows\\start menu\\programs\\maintenance\\remote assistance.lnk"), lpNewFileName="C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Maintenance\\Remote Assistance.lnk.[neftet@tutanota.com].boom" (normalized: "c:\\programdata\\microsoft\\windows\\start menu\\programs\\maintenance\\remote assistance.lnk.[neftet@tutanota.com].boom")) returned 1 [0127.884] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e6cc) returned 1 [0127.885] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Microsoft Office", nBufferLength=0x105, lpBuffer=0x31e1d4, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Microsoft Office", lpFilePart=0x0) returned 0x45 [0127.885] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Microsoft Office\\", nBufferLength=0x105, lpBuffer=0x31e1a8, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Microsoft Office\\", lpFilePart=0x0) returned 0x46 [0127.885] FindFirstFileW (in: lpFileName="C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Microsoft Office\\*", lpFindFileData=0x31e3f4 | out: lpFindFileData=0x31e3f4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x77f53bd0, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0xc11c60a0, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0xc11c60a0, ftLastWriteTime.dwHighDateTime=0x1d305f1, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x381b80 [0127.885] FindClose (in: hFindFile=0x381b80 | out: hFindFile=0x381b80) returned 1 [0127.885] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e68c) returned 1 [0127.885] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e698) returned 1 [0127.885] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e6cc) returned 1 [0127.885] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Microsoft Office", nBufferLength=0x105, lpBuffer=0x31e1d4, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Microsoft Office", lpFilePart=0x0) returned 0x45 [0127.885] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Microsoft Office\\", nBufferLength=0x105, lpBuffer=0x31e1a8, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Microsoft Office\\", lpFilePart=0x0) returned 0x46 [0127.885] FindFirstFileW (in: lpFileName="C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Microsoft Office\\*", lpFindFileData=0x31e3f4 | out: lpFindFileData=0x31e3f4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x77f53bd0, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0xc11c60a0, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0xc11c60a0, ftLastWriteTime.dwHighDateTime=0x1d305f1, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x381b80 [0127.885] FindClose (in: hFindFile=0x381b80 | out: hFindFile=0x381b80) returned 1 [0127.885] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e68c) returned 1 [0127.885] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e698) returned 1 [0127.885] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Microsoft Office\\Microsoft Access 2010.lnk", nBufferLength=0x105, lpBuffer=0x31e094, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Microsoft Office\\Microsoft Access 2010.lnk", lpFilePart=0x0) returned 0x5f [0127.885] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e588) returned 1 [0127.885] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Microsoft Office\\Microsoft Access 2010.lnk" (normalized: "c:\\programdata\\microsoft\\windows\\start menu\\programs\\microsoft office\\microsoft access 2010.lnk"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x274 [0127.885] GetFileType (hFile=0x274) returned 0x1 [0127.886] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e584) returned 1 [0127.886] GetFileType (hFile=0x274) returned 0x1 [0127.886] GetFileSize (in: hFile=0x274, lpFileSizeHigh=0x31e690 | out: lpFileSizeHigh=0x31e690*=0x0) returned 0xb80 [0127.886] ReadFile (in: hFile=0x274, lpBuffer=0x2781c70, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x31e63c, lpOverlapped=0x0 | out: lpBuffer=0x2781c70*, lpNumberOfBytesRead=0x31e63c*=0xb80, lpOverlapped=0x0) returned 1 [0127.886] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Microsoft Office\\Microsoft Access 2010.lnk", nBufferLength=0x105, lpBuffer=0x31e080, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Microsoft Office\\Microsoft Access 2010.lnk", lpFilePart=0x0) returned 0x5f [0127.886] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e574) returned 1 [0127.887] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Microsoft Office\\Microsoft Access 2010.lnk" (normalized: "c:\\programdata\\microsoft\\windows\\start menu\\programs\\microsoft office\\microsoft access 2010.lnk"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x274 [0127.887] GetFileType (hFile=0x274) returned 0x1 [0127.888] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e570) returned 1 [0127.888] GetFileType (hFile=0x274) returned 0x1 [0127.888] WriteFile (in: hFile=0x274, lpBuffer=0x2784d90*, nNumberOfBytesToWrite=0xb80, lpNumberOfBytesWritten=0x31e604, lpOverlapped=0x0 | out: lpBuffer=0x2784d90*, lpNumberOfBytesWritten=0x31e604*=0xb80, lpOverlapped=0x0) returned 1 [0127.889] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Microsoft Office\\Microsoft Access 2010.lnk", nBufferLength=0x105, lpBuffer=0x31e1b4, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Microsoft Office\\Microsoft Access 2010.lnk", lpFilePart=0x0) returned 0x5f [0127.889] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Microsoft Office\\Microsoft Access 2010.lnk.[neftet@tutanota.com].boom", nBufferLength=0x105, lpBuffer=0x31e1b4, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Microsoft Office\\Microsoft Access 2010.lnk.[neftet@tutanota.com].boom", lpFilePart=0x0) returned 0x7a [0127.889] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e614) returned 1 [0127.889] GetFileAttributesExW (in: lpFileName="C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Microsoft Office\\Microsoft Access 2010.lnk" (normalized: "c:\\programdata\\microsoft\\windows\\start menu\\programs\\microsoft office\\microsoft access 2010.lnk"), fInfoLevelId=0x0, lpFileInformation=0x31e690 | out: lpFileInformation=0x31e690*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x780122b0, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x780122b0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x2fa82920, ftLastWriteTime.dwHighDateTime=0x1d6eb7f, nFileSizeHigh=0x0, nFileSizeLow=0xb80)) returned 1 [0127.889] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e610) returned 1 [0127.889] MoveFileW (lpExistingFileName="C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Microsoft Office\\Microsoft Access 2010.lnk" (normalized: "c:\\programdata\\microsoft\\windows\\start menu\\programs\\microsoft office\\microsoft access 2010.lnk"), lpNewFileName="C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Microsoft Office\\Microsoft Access 2010.lnk.[neftet@tutanota.com].boom" (normalized: "c:\\programdata\\microsoft\\windows\\start menu\\programs\\microsoft office\\microsoft access 2010.lnk.[neftet@tutanota.com].boom")) returned 1 [0127.890] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Microsoft Office\\Microsoft Excel 2010.lnk", nBufferLength=0x105, lpBuffer=0x31e094, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Microsoft Office\\Microsoft Excel 2010.lnk", lpFilePart=0x0) returned 0x5e [0127.891] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e588) returned 1 [0127.891] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Microsoft Office\\Microsoft Excel 2010.lnk" (normalized: "c:\\programdata\\microsoft\\windows\\start menu\\programs\\microsoft office\\microsoft excel 2010.lnk"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x274 [0127.891] GetFileType (hFile=0x274) returned 0x1 [0127.891] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e584) returned 1 [0127.891] GetFileType (hFile=0x274) returned 0x1 [0127.891] GetFileSize (in: hFile=0x274, lpFileSizeHigh=0x31e690 | out: lpFileSizeHigh=0x31e690*=0x0) returned 0xba0 [0127.891] ReadFile (in: hFile=0x274, lpBuffer=0x2786f0c, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x31e63c, lpOverlapped=0x0 | out: lpBuffer=0x2786f0c*, lpNumberOfBytesRead=0x31e63c*=0xba0, lpOverlapped=0x0) returned 1 [0127.892] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Microsoft Office\\Microsoft Excel 2010.lnk", nBufferLength=0x105, lpBuffer=0x31e080, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Microsoft Office\\Microsoft Excel 2010.lnk", lpFilePart=0x0) returned 0x5e [0127.892] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e574) returned 1 [0127.892] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Microsoft Office\\Microsoft Excel 2010.lnk" (normalized: "c:\\programdata\\microsoft\\windows\\start menu\\programs\\microsoft office\\microsoft excel 2010.lnk"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x274 [0127.893] GetFileType (hFile=0x274) returned 0x1 [0127.893] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e570) returned 1 [0127.893] GetFileType (hFile=0x274) returned 0x1 [0127.894] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Microsoft Office\\Microsoft Excel 2010.lnk", nBufferLength=0x105, lpBuffer=0x31e1b4, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Microsoft Office\\Microsoft Excel 2010.lnk", lpFilePart=0x0) returned 0x5e [0127.894] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Microsoft Office\\Microsoft Excel 2010.lnk.[neftet@tutanota.com].boom", nBufferLength=0x105, lpBuffer=0x31e1b4, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Microsoft Office\\Microsoft Excel 2010.lnk.[neftet@tutanota.com].boom", lpFilePart=0x0) returned 0x79 [0127.894] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e614) returned 1 [0127.894] GetFileAttributesExW (in: lpFileName="C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Microsoft Office\\Microsoft Excel 2010.lnk" (normalized: "c:\\programdata\\microsoft\\windows\\start menu\\programs\\microsoft office\\microsoft excel 2010.lnk"), fInfoLevelId=0x0, lpFileInformation=0x31e690 | out: lpFileInformation=0x31e690*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x78038410, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x78038410, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x2faa8a80, ftLastWriteTime.dwHighDateTime=0x1d6eb7f, nFileSizeHigh=0x0, nFileSizeLow=0xba0)) returned 1 [0127.894] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e610) returned 1 [0127.894] MoveFileW (lpExistingFileName="C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Microsoft Office\\Microsoft Excel 2010.lnk" (normalized: "c:\\programdata\\microsoft\\windows\\start menu\\programs\\microsoft office\\microsoft excel 2010.lnk"), lpNewFileName="C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Microsoft Office\\Microsoft Excel 2010.lnk.[neftet@tutanota.com].boom" (normalized: "c:\\programdata\\microsoft\\windows\\start menu\\programs\\microsoft office\\microsoft excel 2010.lnk.[neftet@tutanota.com].boom")) returned 1 [0127.895] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Microsoft Office\\Microsoft InfoPath Designer 2010.lnk", nBufferLength=0x105, lpBuffer=0x31e094, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Microsoft Office\\Microsoft InfoPath Designer 2010.lnk", lpFilePart=0x0) returned 0x6a [0127.895] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e588) returned 1 [0127.895] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Microsoft Office\\Microsoft InfoPath Designer 2010.lnk" (normalized: "c:\\programdata\\microsoft\\windows\\start menu\\programs\\microsoft office\\microsoft infopath designer 2010.lnk"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x274 [0127.895] GetFileType (hFile=0x274) returned 0x1 [0127.895] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e584) returned 1 [0127.895] GetFileType (hFile=0x274) returned 0x1 [0127.895] GetFileSize (in: hFile=0x274, lpFileSizeHigh=0x31e690 | out: lpFileSizeHigh=0x31e690*=0x0) returned 0xc00 [0127.896] ReadFile (in: hFile=0x274, lpBuffer=0x278c250, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x31e63c, lpOverlapped=0x0 | out: lpBuffer=0x278c250*, lpNumberOfBytesRead=0x31e63c*=0xc00, lpOverlapped=0x0) returned 1 [0127.896] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Microsoft Office\\Microsoft InfoPath Designer 2010.lnk", nBufferLength=0x105, lpBuffer=0x31e080, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Microsoft Office\\Microsoft InfoPath Designer 2010.lnk", lpFilePart=0x0) returned 0x6a [0127.896] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e574) returned 1 [0127.896] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Microsoft Office\\Microsoft InfoPath Designer 2010.lnk" (normalized: "c:\\programdata\\microsoft\\windows\\start menu\\programs\\microsoft office\\microsoft infopath designer 2010.lnk"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x274 [0127.897] GetFileType (hFile=0x274) returned 0x1 [0127.897] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e570) returned 1 [0127.897] GetFileType (hFile=0x274) returned 0x1 [0127.898] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Microsoft Office\\Microsoft InfoPath Designer 2010.lnk", nBufferLength=0x105, lpBuffer=0x31e1b4, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Microsoft Office\\Microsoft InfoPath Designer 2010.lnk", lpFilePart=0x0) returned 0x6a [0127.899] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Microsoft Office\\Microsoft InfoPath Designer 2010.lnk.[neftet@tutanota.com].boom", nBufferLength=0x105, lpBuffer=0x31e1b4, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Microsoft Office\\Microsoft InfoPath Designer 2010.lnk.[neftet@tutanota.com].boom", lpFilePart=0x0) returned 0x85 [0127.899] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e614) returned 1 [0127.899] GetFileAttributesExW (in: lpFileName="C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Microsoft Office\\Microsoft InfoPath Designer 2010.lnk" (normalized: "c:\\programdata\\microsoft\\windows\\start menu\\programs\\microsoft office\\microsoft infopath designer 2010.lnk"), fInfoLevelId=0x0, lpFileInformation=0x31e690 | out: lpFileInformation=0x31e690*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7805e570, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x7805e570, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x2faa8a80, ftLastWriteTime.dwHighDateTime=0x1d6eb7f, nFileSizeHigh=0x0, nFileSizeLow=0xc00)) returned 1 [0127.899] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e610) returned 1 [0127.899] MoveFileW (lpExistingFileName="C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Microsoft Office\\Microsoft InfoPath Designer 2010.lnk" (normalized: "c:\\programdata\\microsoft\\windows\\start menu\\programs\\microsoft office\\microsoft infopath designer 2010.lnk"), lpNewFileName="C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Microsoft Office\\Microsoft InfoPath Designer 2010.lnk.[neftet@tutanota.com].boom" (normalized: "c:\\programdata\\microsoft\\windows\\start menu\\programs\\microsoft office\\microsoft infopath designer 2010.lnk.[neftet@tutanota.com].boom")) returned 1 [0127.900] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Microsoft Office\\Microsoft InfoPath Filler 2010.lnk", nBufferLength=0x105, lpBuffer=0x31e094, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Microsoft Office\\Microsoft InfoPath Filler 2010.lnk", lpFilePart=0x0) returned 0x68 [0127.900] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e588) returned 1 [0127.900] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Microsoft Office\\Microsoft InfoPath Filler 2010.lnk" (normalized: "c:\\programdata\\microsoft\\windows\\start menu\\programs\\microsoft office\\microsoft infopath filler 2010.lnk"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x274 [0127.900] GetFileType (hFile=0x274) returned 0x1 [0127.900] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e584) returned 1 [0127.900] GetFileType (hFile=0x274) returned 0x1 [0127.900] GetFileSize (in: hFile=0x274, lpFileSizeHigh=0x31e690 | out: lpFileSizeHigh=0x31e690*=0x0) returned 0xbf0 [0127.900] ReadFile (in: hFile=0x274, lpBuffer=0x2791654, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x31e63c, lpOverlapped=0x0 | out: lpBuffer=0x2791654*, lpNumberOfBytesRead=0x31e63c*=0xbf0, lpOverlapped=0x0) returned 1 [0127.901] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Microsoft Office\\Microsoft InfoPath Filler 2010.lnk", nBufferLength=0x105, lpBuffer=0x31e080, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Microsoft Office\\Microsoft InfoPath Filler 2010.lnk", lpFilePart=0x0) returned 0x68 [0127.901] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e574) returned 1 [0127.901] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Microsoft Office\\Microsoft InfoPath Filler 2010.lnk" (normalized: "c:\\programdata\\microsoft\\windows\\start menu\\programs\\microsoft office\\microsoft infopath filler 2010.lnk"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x274 [0127.902] GetFileType (hFile=0x274) returned 0x1 [0127.902] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e570) returned 1 [0127.902] GetFileType (hFile=0x274) returned 0x1 [0127.902] WriteFile (in: hFile=0x274, lpBuffer=0x279480c*, nNumberOfBytesToWrite=0xbf0, lpNumberOfBytesWritten=0x31e604, lpOverlapped=0x0 | out: lpBuffer=0x279480c*, lpNumberOfBytesWritten=0x31e604*=0xbf0, lpOverlapped=0x0) returned 1 [0127.903] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Microsoft Office\\Microsoft InfoPath Filler 2010.lnk", nBufferLength=0x105, lpBuffer=0x31e1b4, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Microsoft Office\\Microsoft InfoPath Filler 2010.lnk", lpFilePart=0x0) returned 0x68 [0127.903] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Microsoft Office\\Microsoft InfoPath Filler 2010.lnk.[neftet@tutanota.com].boom", nBufferLength=0x105, lpBuffer=0x31e1b4, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Microsoft Office\\Microsoft InfoPath Filler 2010.lnk.[neftet@tutanota.com].boom", lpFilePart=0x0) returned 0x83 [0127.903] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e614) returned 1 [0127.903] GetFileAttributesExW (in: lpFileName="C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Microsoft Office\\Microsoft InfoPath Filler 2010.lnk" (normalized: "c:\\programdata\\microsoft\\windows\\start menu\\programs\\microsoft office\\microsoft infopath filler 2010.lnk"), fInfoLevelId=0x0, lpFileInformation=0x31e690 | out: lpFileInformation=0x31e690*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7805e570, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x7805e570, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x2faa8a80, ftLastWriteTime.dwHighDateTime=0x1d6eb7f, nFileSizeHigh=0x0, nFileSizeLow=0xbf0)) returned 1 [0127.904] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e610) returned 1 [0127.904] MoveFileW (lpExistingFileName="C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Microsoft Office\\Microsoft InfoPath Filler 2010.lnk" (normalized: "c:\\programdata\\microsoft\\windows\\start menu\\programs\\microsoft office\\microsoft infopath filler 2010.lnk"), lpNewFileName="C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Microsoft Office\\Microsoft InfoPath Filler 2010.lnk.[neftet@tutanota.com].boom" (normalized: "c:\\programdata\\microsoft\\windows\\start menu\\programs\\microsoft office\\microsoft infopath filler 2010.lnk.[neftet@tutanota.com].boom")) returned 1 [0127.905] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Microsoft Office\\Microsoft OneNote 2010.lnk", nBufferLength=0x105, lpBuffer=0x31e094, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Microsoft Office\\Microsoft OneNote 2010.lnk", lpFilePart=0x0) returned 0x60 [0127.905] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e588) returned 1 [0127.905] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Microsoft Office\\Microsoft OneNote 2010.lnk" (normalized: "c:\\programdata\\microsoft\\windows\\start menu\\programs\\microsoft office\\microsoft onenote 2010.lnk"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x274 [0127.905] GetFileType (hFile=0x274) returned 0x1 [0127.905] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e584) returned 1 [0127.905] GetFileType (hFile=0x274) returned 0x1 [0127.905] GetFileSize (in: hFile=0x274, lpFileSizeHigh=0x31e690 | out: lpFileSizeHigh=0x31e690*=0x0) returned 0xb50 [0127.905] ReadFile (in: hFile=0x274, lpBuffer=0x2796974, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x31e63c, lpOverlapped=0x0 | out: lpBuffer=0x2796974*, lpNumberOfBytesRead=0x31e63c*=0xb50, lpOverlapped=0x0) returned 1 [0127.906] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Microsoft Office\\Microsoft OneNote 2010.lnk", nBufferLength=0x105, lpBuffer=0x31e080, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Microsoft Office\\Microsoft OneNote 2010.lnk", lpFilePart=0x0) returned 0x60 [0127.906] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e574) returned 1 [0127.906] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Microsoft Office\\Microsoft OneNote 2010.lnk" (normalized: "c:\\programdata\\microsoft\\windows\\start menu\\programs\\microsoft office\\microsoft onenote 2010.lnk"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x274 [0127.907] GetFileType (hFile=0x274) returned 0x1 [0127.908] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e570) returned 1 [0127.908] GetFileType (hFile=0x274) returned 0x1 [0127.916] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Microsoft Office\\Microsoft OneNote 2010.lnk", nBufferLength=0x105, lpBuffer=0x31e1b4, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Microsoft Office\\Microsoft OneNote 2010.lnk", lpFilePart=0x0) returned 0x60 [0127.916] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Microsoft Office\\Microsoft OneNote 2010.lnk.[neftet@tutanota.com].boom", nBufferLength=0x105, lpBuffer=0x31e1b4, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Microsoft Office\\Microsoft OneNote 2010.lnk.[neftet@tutanota.com].boom", lpFilePart=0x0) returned 0x7b [0127.916] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e614) returned 1 [0127.916] GetFileAttributesExW (in: lpFileName="C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Microsoft Office\\Microsoft OneNote 2010.lnk" (normalized: "c:\\programdata\\microsoft\\windows\\start menu\\programs\\microsoft office\\microsoft onenote 2010.lnk"), fInfoLevelId=0x0, lpFileInformation=0x31e690 | out: lpFileInformation=0x31e690*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7805e570, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x780846d0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x2facebe0, ftLastWriteTime.dwHighDateTime=0x1d6eb7f, nFileSizeHigh=0x0, nFileSizeLow=0xb50)) returned 1 [0127.916] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e610) returned 1 [0127.916] MoveFileW (lpExistingFileName="C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Microsoft Office\\Microsoft OneNote 2010.lnk" (normalized: "c:\\programdata\\microsoft\\windows\\start menu\\programs\\microsoft office\\microsoft onenote 2010.lnk"), lpNewFileName="C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Microsoft Office\\Microsoft OneNote 2010.lnk.[neftet@tutanota.com].boom" (normalized: "c:\\programdata\\microsoft\\windows\\start menu\\programs\\microsoft office\\microsoft onenote 2010.lnk.[neftet@tutanota.com].boom")) returned 1 [0127.917] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Microsoft Office\\Microsoft Outlook 2010.lnk", nBufferLength=0x105, lpBuffer=0x31e094, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Microsoft Office\\Microsoft Outlook 2010.lnk", lpFilePart=0x0) returned 0x60 [0127.917] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e588) returned 1 [0127.918] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Microsoft Office\\Microsoft Outlook 2010.lnk" (normalized: "c:\\programdata\\microsoft\\windows\\start menu\\programs\\microsoft office\\microsoft outlook 2010.lnk"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x274 [0127.918] GetFileType (hFile=0x274) returned 0x1 [0127.918] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e584) returned 1 [0127.918] GetFileType (hFile=0x274) returned 0x1 [0127.918] GetFileSize (in: hFile=0x274, lpFileSizeHigh=0x31e690 | out: lpFileSizeHigh=0x31e690*=0x0) returned 0xbf0 [0127.918] ReadFile (in: hFile=0x274, lpBuffer=0x279bc44, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x31e63c, lpOverlapped=0x0 | out: lpBuffer=0x279bc44*, lpNumberOfBytesRead=0x31e63c*=0xbf0, lpOverlapped=0x0) returned 1 [0127.919] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e574) returned 1 [0127.919] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Microsoft Office\\Microsoft Outlook 2010.lnk" (normalized: "c:\\programdata\\microsoft\\windows\\start menu\\programs\\microsoft office\\microsoft outlook 2010.lnk"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x274 [0127.920] GetFileType (hFile=0x274) returned 0x1 [0127.920] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e570) returned 1 [0127.920] GetFileType (hFile=0x274) returned 0x1 [0127.920] WriteFile (in: hFile=0x274, lpBuffer=0x279eddc*, nNumberOfBytesToWrite=0xbf0, lpNumberOfBytesWritten=0x31e604, lpOverlapped=0x0 | out: lpBuffer=0x279eddc*, lpNumberOfBytesWritten=0x31e604*=0xbf0, lpOverlapped=0x0) returned 1 [0127.928] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e614) returned 1 [0127.938] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e610) returned 1 [0127.939] MoveFileW (lpExistingFileName="C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Microsoft Office\\Microsoft Outlook 2010.lnk" (normalized: "c:\\programdata\\microsoft\\windows\\start menu\\programs\\microsoft office\\microsoft outlook 2010.lnk"), lpNewFileName="C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Microsoft Office\\Microsoft Outlook 2010.lnk.[neftet@tutanota.com].boom" (normalized: "c:\\programdata\\microsoft\\windows\\start menu\\programs\\microsoft office\\microsoft outlook 2010.lnk.[neftet@tutanota.com].boom")) returned 1 [0127.949] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e588) returned 1 [0127.949] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Microsoft Office\\Microsoft PowerPoint 2010.lnk" (normalized: "c:\\programdata\\microsoft\\windows\\start menu\\programs\\microsoft office\\microsoft powerpoint 2010.lnk"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x274 [0127.951] GetFileType (hFile=0x274) returned 0x1 [0127.953] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e584) returned 1 [0127.955] GetFileType (hFile=0x274) returned 0x1 [0127.955] GetFileSize (in: hFile=0x274, lpFileSizeHigh=0x31e690 | out: lpFileSizeHigh=0x31e690*=0x0) returned 0xb90 [0127.963] ReadFile (in: hFile=0x274, lpBuffer=0x27a0f5c, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x31e63c, lpOverlapped=0x0 | out: lpBuffer=0x27a0f5c*, lpNumberOfBytesRead=0x31e63c*=0xb90, lpOverlapped=0x0) returned 1 [0127.970] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e574) returned 1 [0127.970] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Microsoft Office\\Microsoft PowerPoint 2010.lnk" (normalized: "c:\\programdata\\microsoft\\windows\\start menu\\programs\\microsoft office\\microsoft powerpoint 2010.lnk"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x274 [0127.980] GetFileType (hFile=0x274) returned 0x1 [0127.980] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e570) returned 1 [0127.980] GetFileType (hFile=0x274) returned 0x1 [0127.981] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e614) returned 1 [0127.981] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e610) returned 1 [0127.981] MoveFileW (lpExistingFileName="C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Microsoft Office\\Microsoft PowerPoint 2010.lnk" (normalized: "c:\\programdata\\microsoft\\windows\\start menu\\programs\\microsoft office\\microsoft powerpoint 2010.lnk"), lpNewFileName="C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Microsoft Office\\Microsoft PowerPoint 2010.lnk.[neftet@tutanota.com].boom" (normalized: "c:\\programdata\\microsoft\\windows\\start menu\\programs\\microsoft office\\microsoft powerpoint 2010.lnk.[neftet@tutanota.com].boom")) returned 1 [0127.983] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e588) returned 1 [0127.983] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Microsoft Office\\Microsoft Project 2010.lnk" (normalized: "c:\\programdata\\microsoft\\windows\\start menu\\programs\\microsoft office\\microsoft project 2010.lnk"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x274 [0127.983] GetFileType (hFile=0x274) returned 0x1 [0127.983] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e584) returned 1 [0127.983] GetFileType (hFile=0x274) returned 0x1 [0127.983] GetFileSize (in: hFile=0x274, lpFileSizeHigh=0x31e690 | out: lpFileSizeHigh=0x31e690*=0x0) returned 0xb90 [0127.983] ReadFile (in: hFile=0x274, lpBuffer=0x27a6228, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x31e63c, lpOverlapped=0x0 | out: lpBuffer=0x27a6228*, lpNumberOfBytesRead=0x31e63c*=0xb90, lpOverlapped=0x0) returned 1 [0127.984] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e574) returned 1 [0127.984] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Microsoft Office\\Microsoft Project 2010.lnk" (normalized: "c:\\programdata\\microsoft\\windows\\start menu\\programs\\microsoft office\\microsoft project 2010.lnk"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x274 [0127.985] GetFileType (hFile=0x274) returned 0x1 [0127.985] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e570) returned 1 [0127.985] GetFileType (hFile=0x274) returned 0x1 [0127.986] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e614) returned 1 [0127.986] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e610) returned 1 [0127.986] MoveFileW (lpExistingFileName="C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Microsoft Office\\Microsoft Project 2010.lnk" (normalized: "c:\\programdata\\microsoft\\windows\\start menu\\programs\\microsoft office\\microsoft project 2010.lnk"), lpNewFileName="C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Microsoft Office\\Microsoft Project 2010.lnk.[neftet@tutanota.com].boom" (normalized: "c:\\programdata\\microsoft\\windows\\start menu\\programs\\microsoft office\\microsoft project 2010.lnk.[neftet@tutanota.com].boom")) returned 1 [0127.988] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e588) returned 1 [0127.988] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Microsoft Office\\Microsoft Publisher 2010.lnk" (normalized: "c:\\programdata\\microsoft\\windows\\start menu\\programs\\microsoft office\\microsoft publisher 2010.lnk"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x274 [0127.988] GetFileType (hFile=0x274) returned 0x1 [0127.988] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e584) returned 1 [0127.988] GetFileType (hFile=0x274) returned 0x1 [0127.988] GetFileSize (in: hFile=0x274, lpFileSizeHigh=0x31e690 | out: lpFileSizeHigh=0x31e690*=0x0) returned 0xc00 [0127.988] ReadFile (in: hFile=0x274, lpBuffer=0x27ab550, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x31e63c, lpOverlapped=0x0 | out: lpBuffer=0x27ab550*, lpNumberOfBytesRead=0x31e63c*=0xc00, lpOverlapped=0x0) returned 1 [0127.989] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e574) returned 1 [0127.989] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Microsoft Office\\Microsoft Publisher 2010.lnk" (normalized: "c:\\programdata\\microsoft\\windows\\start menu\\programs\\microsoft office\\microsoft publisher 2010.lnk"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x274 [0127.990] GetFileType (hFile=0x274) returned 0x1 [0127.990] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e570) returned 1 [0127.990] GetFileType (hFile=0x274) returned 0x1 [0127.990] WriteFile (in: hFile=0x274, lpBuffer=0x27ae700*, nNumberOfBytesToWrite=0xc00, lpNumberOfBytesWritten=0x31e604, lpOverlapped=0x0 | out: lpBuffer=0x27ae700*, lpNumberOfBytesWritten=0x31e604*=0xc00, lpOverlapped=0x0) returned 1 [0127.991] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e614) returned 1 [0127.991] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e610) returned 1 [0127.991] MoveFileW (lpExistingFileName="C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Microsoft Office\\Microsoft Publisher 2010.lnk" (normalized: "c:\\programdata\\microsoft\\windows\\start menu\\programs\\microsoft office\\microsoft publisher 2010.lnk"), lpNewFileName="C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Microsoft Office\\Microsoft Publisher 2010.lnk.[neftet@tutanota.com].boom" (normalized: "c:\\programdata\\microsoft\\windows\\start menu\\programs\\microsoft office\\microsoft publisher 2010.lnk.[neftet@tutanota.com].boom")) returned 1 [0127.993] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e588) returned 1 [0127.993] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Microsoft Office\\Microsoft SharePoint Workspace 2010.lnk" (normalized: "c:\\programdata\\microsoft\\windows\\start menu\\programs\\microsoft office\\microsoft sharepoint workspace 2010.lnk"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x274 [0127.993] GetFileType (hFile=0x274) returned 0x1 [0127.993] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e584) returned 1 [0127.993] GetFileType (hFile=0x274) returned 0x1 [0127.993] GetFileSize (in: hFile=0x274, lpFileSizeHigh=0x31e690 | out: lpFileSizeHigh=0x31e690*=0x0) returned 0xc00 [0127.993] ReadFile (in: hFile=0x274, lpBuffer=0x27b0924, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x31e63c, lpOverlapped=0x0 | out: lpBuffer=0x27b0924*, lpNumberOfBytesRead=0x31e63c*=0xc00, lpOverlapped=0x0) returned 1 [0127.994] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e574) returned 1 [0127.994] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Microsoft Office\\Microsoft SharePoint Workspace 2010.lnk" (normalized: "c:\\programdata\\microsoft\\windows\\start menu\\programs\\microsoft office\\microsoft sharepoint workspace 2010.lnk"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x274 [0127.995] GetFileType (hFile=0x274) returned 0x1 [0127.995] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e570) returned 1 [0127.995] GetFileType (hFile=0x274) returned 0x1 [0127.996] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e614) returned 1 [0127.996] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e610) returned 1 [0127.996] MoveFileW (lpExistingFileName="C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Microsoft Office\\Microsoft SharePoint Workspace 2010.lnk" (normalized: "c:\\programdata\\microsoft\\windows\\start menu\\programs\\microsoft office\\microsoft sharepoint workspace 2010.lnk"), lpNewFileName="C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Microsoft Office\\Microsoft SharePoint Workspace 2010.lnk.[neftet@tutanota.com].boom" (normalized: "c:\\programdata\\microsoft\\windows\\start menu\\programs\\microsoft office\\microsoft sharepoint workspace 2010.lnk.[neftet@tutanota.com].boom")) returned 1 [0127.997] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e588) returned 1 [0127.998] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Microsoft Office\\Microsoft Visio 2010.lnk" (normalized: "c:\\programdata\\microsoft\\windows\\start menu\\programs\\microsoft office\\microsoft visio 2010.lnk"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x274 [0127.998] GetFileType (hFile=0x274) returned 0x1 [0127.998] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e584) returned 1 [0127.998] GetFileType (hFile=0x274) returned 0x1 [0127.998] GetFileSize (in: hFile=0x274, lpFileSizeHigh=0x31e690 | out: lpFileSizeHigh=0x31e690*=0x0) returned 0xae0 [0127.998] ReadFile (in: hFile=0x274, lpBuffer=0x27b5c0c, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x31e63c, lpOverlapped=0x0 | out: lpBuffer=0x27b5c0c*, lpNumberOfBytesRead=0x31e63c*=0xae0, lpOverlapped=0x0) returned 1 [0127.999] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e574) returned 1 [0127.999] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Microsoft Office\\Microsoft Visio 2010.lnk" (normalized: "c:\\programdata\\microsoft\\windows\\start menu\\programs\\microsoft office\\microsoft visio 2010.lnk"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x274 [0128.000] GetFileType (hFile=0x274) returned 0x1 [0128.000] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e570) returned 1 [0128.000] GetFileType (hFile=0x274) returned 0x1 [0128.000] WriteFile (in: hFile=0x274, lpBuffer=0x27b8c8c*, nNumberOfBytesToWrite=0xae0, lpNumberOfBytesWritten=0x31e604, lpOverlapped=0x0 | out: lpBuffer=0x27b8c8c*, lpNumberOfBytesWritten=0x31e604*=0xae0, lpOverlapped=0x0) returned 1 [0128.001] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e614) returned 1 [0128.001] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e610) returned 1 [0128.001] MoveFileW (lpExistingFileName="C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Microsoft Office\\Microsoft Visio 2010.lnk" (normalized: "c:\\programdata\\microsoft\\windows\\start menu\\programs\\microsoft office\\microsoft visio 2010.lnk"), lpNewFileName="C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Microsoft Office\\Microsoft Visio 2010.lnk.[neftet@tutanota.com].boom" (normalized: "c:\\programdata\\microsoft\\windows\\start menu\\programs\\microsoft office\\microsoft visio 2010.lnk.[neftet@tutanota.com].boom")) returned 1 [0128.002] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e588) returned 1 [0128.002] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Microsoft Office\\Microsoft Word 2010.lnk" (normalized: "c:\\programdata\\microsoft\\windows\\start menu\\programs\\microsoft office\\microsoft word 2010.lnk"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x274 [0128.002] GetFileType (hFile=0x274) returned 0x1 [0128.002] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e584) returned 1 [0128.003] GetFileType (hFile=0x274) returned 0x1 [0128.003] GetFileSize (in: hFile=0x274, lpFileSizeHigh=0x31e690 | out: lpFileSizeHigh=0x31e690*=0x0) returned 0xbe0 [0128.003] ReadFile (in: hFile=0x274, lpBuffer=0x27bae38, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x31e63c, lpOverlapped=0x0 | out: lpBuffer=0x27bae38*, lpNumberOfBytesRead=0x31e63c*=0xbe0, lpOverlapped=0x0) returned 1 [0128.003] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e574) returned 1 [0128.003] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Microsoft Office\\Microsoft Word 2010.lnk" (normalized: "c:\\programdata\\microsoft\\windows\\start menu\\programs\\microsoft office\\microsoft word 2010.lnk"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x274 [0128.004] GetFileType (hFile=0x274) returned 0x1 [0128.004] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e570) returned 1 [0128.004] GetFileType (hFile=0x274) returned 0x1 [0128.005] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e614) returned 1 [0128.005] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e610) returned 1 [0128.005] MoveFileW (lpExistingFileName="C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Microsoft Office\\Microsoft Word 2010.lnk" (normalized: "c:\\programdata\\microsoft\\windows\\start menu\\programs\\microsoft office\\microsoft word 2010.lnk"), lpNewFileName="C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Microsoft Office\\Microsoft Word 2010.lnk.[neftet@tutanota.com].boom" (normalized: "c:\\programdata\\microsoft\\windows\\start menu\\programs\\microsoft office\\microsoft word 2010.lnk.[neftet@tutanota.com].boom")) returned 1 [0128.007] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e654) returned 1 [0128.007] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e614) returned 1 [0128.007] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Microsoft Office\\Microsoft Office 2010 Tools\\Digital Certificate for VBA Projects.lnk" (normalized: "c:\\programdata\\microsoft\\windows\\start menu\\programs\\microsoft office\\microsoft office 2010 tools\\digital certificate for vba projects.lnk"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x274 [0128.007] GetFileType (hFile=0x274) returned 0x1 [0128.007] GetFileType (hFile=0x274) returned 0x1 [0128.007] GetFileSize (in: hFile=0x274, lpFileSizeHigh=0x31e618 | out: lpFileSizeHigh=0x31e618*=0x0) returned 0xbc0 [0128.007] ReadFile (in: hFile=0x274, lpBuffer=0x27c417c, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x31e5c4, lpOverlapped=0x0 | out: lpBuffer=0x27c417c*, lpNumberOfBytesRead=0x31e5c4*=0xbc0, lpOverlapped=0x0) returned 1 [0128.008] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Microsoft Office\\Microsoft Office 2010 Tools\\Digital Certificate for VBA Projects.lnk" (normalized: "c:\\programdata\\microsoft\\windows\\start menu\\programs\\microsoft office\\microsoft office 2010 tools\\digital certificate for vba projects.lnk"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x274 [0128.009] GetFileType (hFile=0x274) returned 0x1 [0128.009] GetFileType (hFile=0x274) returned 0x1 [0128.010] MoveFileW (lpExistingFileName="C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Microsoft Office\\Microsoft Office 2010 Tools\\Digital Certificate for VBA Projects.lnk" (normalized: "c:\\programdata\\microsoft\\windows\\start menu\\programs\\microsoft office\\microsoft office 2010 tools\\digital certificate for vba projects.lnk"), lpNewFileName="C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Microsoft Office\\Microsoft Office 2010 Tools\\Digital Certificate for VBA Projects.lnk.[neftet@tutanota.com].boom" (normalized: "c:\\programdata\\microsoft\\windows\\start menu\\programs\\microsoft office\\microsoft office 2010 tools\\digital certificate for vba projects.lnk.[neftet@tutanota.com].boom")) returned 1 [0128.012] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Microsoft Office\\Microsoft Office 2010 Tools\\Microsoft Clip Organizer.lnk" (normalized: "c:\\programdata\\microsoft\\windows\\start menu\\programs\\microsoft office\\microsoft office 2010 tools\\microsoft clip organizer.lnk"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x274 [0128.012] GetFileType (hFile=0x274) returned 0x1 [0128.012] GetFileType (hFile=0x274) returned 0x1 [0128.012] GetFileSize (in: hFile=0x274, lpFileSizeHigh=0x31e618 | out: lpFileSizeHigh=0x31e618*=0x0) returned 0xb80 [0128.012] ReadFile (in: hFile=0x274, lpBuffer=0x27c95f8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x31e5c4, lpOverlapped=0x0 | out: lpBuffer=0x27c95f8*, lpNumberOfBytesRead=0x31e5c4*=0xb80, lpOverlapped=0x0) returned 1 [0128.013] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Microsoft Office\\Microsoft Office 2010 Tools\\Microsoft Clip Organizer.lnk" (normalized: "c:\\programdata\\microsoft\\windows\\start menu\\programs\\microsoft office\\microsoft office 2010 tools\\microsoft clip organizer.lnk"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x274 [0128.014] GetFileType (hFile=0x274) returned 0x1 [0128.014] GetFileType (hFile=0x274) returned 0x1 [0128.014] WriteFile (in: hFile=0x274, lpBuffer=0x27cc760*, nNumberOfBytesToWrite=0xb80, lpNumberOfBytesWritten=0x31e58c, lpOverlapped=0x0 | out: lpBuffer=0x27cc760*, lpNumberOfBytesWritten=0x31e58c*=0xb80, lpOverlapped=0x0) returned 1 [0128.015] MoveFileW (lpExistingFileName="C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Microsoft Office\\Microsoft Office 2010 Tools\\Microsoft Clip Organizer.lnk" (normalized: "c:\\programdata\\microsoft\\windows\\start menu\\programs\\microsoft office\\microsoft office 2010 tools\\microsoft clip organizer.lnk"), lpNewFileName="C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Microsoft Office\\Microsoft Office 2010 Tools\\Microsoft Clip Organizer.lnk.[neftet@tutanota.com].boom" (normalized: "c:\\programdata\\microsoft\\windows\\start menu\\programs\\microsoft office\\microsoft office 2010 tools\\microsoft clip organizer.lnk.[neftet@tutanota.com].boom")) returned 1 [0128.016] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Microsoft Office\\Microsoft Office 2010 Tools\\Microsoft Office 2010 Language Preferences.lnk" (normalized: "c:\\programdata\\microsoft\\windows\\start menu\\programs\\microsoft office\\microsoft office 2010 tools\\microsoft office 2010 language preferences.lnk"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x274 [0128.017] GetFileType (hFile=0x274) returned 0x1 [0128.019] MoveFileW (lpExistingFileName="C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Microsoft Office\\Microsoft Office 2010 Tools\\Microsoft Office 2010 Language Preferences.lnk" (normalized: "c:\\programdata\\microsoft\\windows\\start menu\\programs\\microsoft office\\microsoft office 2010 tools\\microsoft office 2010 language preferences.lnk"), lpNewFileName="C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Microsoft Office\\Microsoft Office 2010 Tools\\Microsoft Office 2010 Language Preferences.lnk.[neftet@tutanota.com].boom" (normalized: "c:\\programdata\\microsoft\\windows\\start menu\\programs\\microsoft office\\microsoft office 2010 tools\\microsoft office 2010 language preferences.lnk.[neftet@tutanota.com].boom")) returned 1 [0128.028] MoveFileW (lpExistingFileName="C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Microsoft Office\\Microsoft Office 2010 Tools\\Microsoft Office 2010 Upload Center.lnk" (normalized: "c:\\programdata\\microsoft\\windows\\start menu\\programs\\microsoft office\\microsoft office 2010 tools\\microsoft office 2010 upload center.lnk"), lpNewFileName="C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Microsoft Office\\Microsoft Office 2010 Tools\\Microsoft Office 2010 Upload Center.lnk.[neftet@tutanota.com].boom" (normalized: "c:\\programdata\\microsoft\\windows\\start menu\\programs\\microsoft office\\microsoft office 2010 tools\\microsoft office 2010 upload center.lnk.[neftet@tutanota.com].boom")) returned 1 [0128.032] MoveFileW (lpExistingFileName="C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Microsoft Office\\Microsoft Office 2010 Tools\\Microsoft Office Picture Manager.lnk" (normalized: "c:\\programdata\\microsoft\\windows\\start menu\\programs\\microsoft office\\microsoft office 2010 tools\\microsoft office picture manager.lnk"), lpNewFileName="C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Microsoft Office\\Microsoft Office 2010 Tools\\Microsoft Office Picture Manager.lnk.[neftet@tutanota.com].boom" (normalized: "c:\\programdata\\microsoft\\windows\\start menu\\programs\\microsoft office\\microsoft office 2010 tools\\microsoft office picture manager.lnk.[neftet@tutanota.com].boom")) returned 1 [0128.036] MoveFileW (lpExistingFileName="C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Microsoft Office\\Microsoft Office 2010 Tools\\Microsoft Project Server 2010 Accounts.lnk" (normalized: "c:\\programdata\\microsoft\\windows\\start menu\\programs\\microsoft office\\microsoft office 2010 tools\\microsoft project server 2010 accounts.lnk"), lpNewFileName="C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Microsoft Office\\Microsoft Office 2010 Tools\\Microsoft Project Server 2010 Accounts.lnk.[neftet@tutanota.com].boom" (normalized: "c:\\programdata\\microsoft\\windows\\start menu\\programs\\microsoft office\\microsoft office 2010 tools\\microsoft project server 2010 accounts.lnk.[neftet@tutanota.com].boom")) returned 1 [0128.039] MoveFileW (lpExistingFileName="C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\SharePoint\\Microsoft SharePoint Workspace 2010.lnk" (normalized: "c:\\programdata\\microsoft\\windows\\start menu\\programs\\sharepoint\\microsoft sharepoint workspace 2010.lnk"), lpNewFileName="C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\SharePoint\\Microsoft SharePoint Workspace 2010.lnk.[neftet@tutanota.com].boom" (normalized: "c:\\programdata\\microsoft\\windows\\start menu\\programs\\sharepoint\\microsoft sharepoint workspace 2010.lnk.[neftet@tutanota.com].boom")) returned 1 [0128.098] MoveFileW (lpExistingFileName="C:\\ProgramData\\Sun\\Java\\Java Update\\jaureglist.xml" (normalized: "c:\\programdata\\sun\\java\\java update\\jaureglist.xml"), lpNewFileName="C:\\ProgramData\\Sun\\Java\\Java Update\\jaureglist.xml.[neftet@tutanota.com].boom" (normalized: "c:\\programdata\\sun\\java\\java update\\jaureglist.xml.[neftet@tutanota.com].boom")) returned 1 [0128.124] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\icon_128.png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\icon_128.png"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\icon_128.png.[neftet@tutanota.com].boom" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\icon_128.png.[neftet@tutanota.com].boom")) returned 1 [0128.126] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\icon_16.png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\icon_16.png"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\icon_16.png.[neftet@tutanota.com].boom" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\icon_16.png.[neftet@tutanota.com].boom")) returned 1 [0128.129] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\main.html" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\main.html"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\main.html.[neftet@tutanota.com].boom" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\main.html.[neftet@tutanota.com].boom")) returned 1 [0128.142] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\icon_128.png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\icon_128.png"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\icon_128.png.[neftet@tutanota.com].boom" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\icon_128.png.[neftet@tutanota.com].boom")) returned 1 [0128.145] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\icon_16.png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\icon_16.png"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\icon_16.png.[neftet@tutanota.com].boom" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\icon_16.png.[neftet@tutanota.com].boom")) returned 1 [0128.147] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\main.html" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\main.html"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\main.html.[neftet@tutanota.com].boom" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\main.html.[neftet@tutanota.com].boom")) returned 1 [0128.161] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\128.png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\128.png"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\128.png.[neftet@tutanota.com].boom" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\128.png.[neftet@tutanota.com].boom")) returned 1 [0128.174] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\128.png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\128.png"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\128.png.[neftet@tutanota.com].boom" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\128.png.[neftet@tutanota.com].boom")) returned 1 [0128.188] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\icon_128.png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\icon_128.png"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\icon_128.png.[neftet@tutanota.com].boom" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\icon_128.png.[neftet@tutanota.com].boom")) returned 1 [0128.191] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\icon_16.png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\icon_16.png"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\icon_16.png.[neftet@tutanota.com].boom" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\icon_16.png.[neftet@tutanota.com].boom")) returned 1 [0128.193] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\main.html" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\main.html"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\main.html.[neftet@tutanota.com].boom" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\main.html.[neftet@tutanota.com].boom")) returned 1 [0128.208] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\128.png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\128.png"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\128.png.[neftet@tutanota.com].boom" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\128.png.[neftet@tutanota.com].boom")) returned 1 [0128.230] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\css\\craw_window.css" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\css\\craw_window.css"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\css\\craw_window.css.[neftet@tutanota.com].boom" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\css\\craw_window.css.[neftet@tutanota.com].boom")) returned 1 [0128.233] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\html\\craw_window.html" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\html\\craw_window.html"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\html\\craw_window.html.[neftet@tutanota.com].boom" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\html\\craw_window.html.[neftet@tutanota.com].boom")) returned 1 [0128.236] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\images\\icon_128.png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\images\\icon_128.png"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\images\\icon_128.png.[neftet@tutanota.com].boom" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\images\\icon_128.png.[neftet@tutanota.com].boom")) returned 1 [0128.239] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\images\\icon_16.png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\images\\icon_16.png"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\images\\icon_16.png.[neftet@tutanota.com].boom" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\images\\icon_16.png.[neftet@tutanota.com].boom")) returned 1 [0128.242] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\images\\topbar_floating_button.png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\images\\topbar_floating_button.png"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\images\\topbar_floating_button.png.[neftet@tutanota.com].boom" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\images\\topbar_floating_button.png.[neftet@tutanota.com].boom")) returned 1 [0128.245] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\images\\topbar_floating_button_close.png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\images\\topbar_floating_button_close.png"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\images\\topbar_floating_button_close.png.[neftet@tutanota.com].boom" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\images\\topbar_floating_button_close.png.[neftet@tutanota.com].boom")) returned 1 [0128.248] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\images\\topbar_floating_button_hover.png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\images\\topbar_floating_button_hover.png"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\images\\topbar_floating_button_hover.png.[neftet@tutanota.com].boom" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\images\\topbar_floating_button_hover.png.[neftet@tutanota.com].boom")) returned 1 [0128.251] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\images\\topbar_floating_button_maximize.png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\images\\topbar_floating_button_maximize.png"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\images\\topbar_floating_button_maximize.png.[neftet@tutanota.com].boom" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\images\\topbar_floating_button_maximize.png.[neftet@tutanota.com].boom")) returned 1 [0128.253] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\images\\topbar_floating_button_pressed.png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\images\\topbar_floating_button_pressed.png"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\images\\topbar_floating_button_pressed.png.[neftet@tutanota.com].boom" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\images\\topbar_floating_button_pressed.png.[neftet@tutanota.com].boom")) returned 1 [0128.268] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\128.png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\128.png"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\128.png.[neftet@tutanota.com].boom" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\128.png.[neftet@tutanota.com].boom")) returned 1 [0128.289] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\cast_route_details.html" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\cast_route_details.html"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\cast_route_details.html.[neftet@tutanota.com].boom" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\cast_route_details.html.[neftet@tutanota.com].boom")) returned 1 [0128.292] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\feedback.css" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\feedback.css"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\feedback.css.[neftet@tutanota.com].boom" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\feedback.css.[neftet@tutanota.com].boom")) returned 1 [0128.295] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\feedback.html" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\feedback.html"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\feedback.html.[neftet@tutanota.com].boom" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\feedback.html.[neftet@tutanota.com].boom")) returned 1 [0128.320] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\material_css_min.css" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\material_css_min.css"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\material_css_min.css.[neftet@tutanota.com].boom" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\material_css_min.css.[neftet@tutanota.com].boom")) returned 1 [0128.327] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\cast_setup\\cast_app.css" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\cast_setup\\cast_app.css"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\cast_setup\\cast_app.css.[neftet@tutanota.com].boom" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\cast_setup\\cast_app.css.[neftet@tutanota.com].boom")) returned 1 [0128.330] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\cast_setup\\chromecast_logo_grey.png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\cast_setup\\chromecast_logo_grey.png"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\cast_setup\\chromecast_logo_grey.png.[neftet@tutanota.com].boom" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\cast_setup\\chromecast_logo_grey.png.[neftet@tutanota.com].boom")) returned 1 [0128.333] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\cast_setup\\devices.html" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\cast_setup\\devices.html"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\cast_setup\\devices.html.[neftet@tutanota.com].boom" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\cast_setup\\devices.html.[neftet@tutanota.com].boom")) returned 1 [0128.336] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\cast_setup\\index.html" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\cast_setup\\index.html"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\cast_setup\\index.html.[neftet@tutanota.com].boom" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\cast_setup\\index.html.[neftet@tutanota.com].boom")) returned 1 [0128.340] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\cast_setup\\offers.html" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\cast_setup\\offers.html"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\cast_setup\\offers.html.[neftet@tutanota.com].boom" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\cast_setup\\offers.html.[neftet@tutanota.com].boom")) returned 1 [0128.344] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\cast_setup\\setup.html" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\cast_setup\\setup.html"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\cast_setup\\setup.html.[neftet@tutanota.com].boom" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\cast_setup\\setup.html.[neftet@tutanota.com].boom")) returned 1 [0128.347] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\cloud_route_details\\view.html" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\cloud_route_details\\view.html"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\cloud_route_details\\view.html.[neftet@tutanota.com].boom" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\cloud_route_details\\view.html.[neftet@tutanota.com].boom")) returned 1 [0128.370] GetLongPathNameW (in: lpszShortPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Feeds\\Microsoft Feeds~", lpszLongPath=0x31e148, cchBuffer=0x104 | out: lpszLongPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Feeds\\Microsoft Feeds~") returned 0x4c [0128.370] GetLongPathNameW (in: lpszShortPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Feeds\\Microsoft Feeds~", lpszLongPath=0x31e148, cchBuffer=0x104 | out: lpszLongPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Feeds\\Microsoft Feeds~") returned 0x4c [0128.371] GetLongPathNameW (in: lpszShortPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Feeds\\Microsoft Feeds~\\", lpszLongPath=0x31e128, cchBuffer=0x104 | out: lpszLongPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Feeds\\Microsoft Feeds~\\") returned 0x4d [0128.371] GetLongPathNameW (in: lpszShortPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Feeds\\Microsoft Feeds~\\", lpszLongPath=0x31e11c, cchBuffer=0x104 | out: lpszLongPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Feeds\\Microsoft Feeds~\\") returned 0x4d [0128.372] GetLongPathNameW (in: lpszShortPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Feeds\\Microsoft Feeds~\\", lpszLongPath=0x31e11c, cchBuffer=0x104 | out: lpszLongPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Feeds\\Microsoft Feeds~\\") returned 0x4d [0128.375] FindNextFileW (in: hFindFile=0x381b80, lpFindFileData=0x31e38c | out: lpFindFileData=0x31e38c*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x28f14980, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28f14980, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xfeaa2466, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x7000, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft at Home~.feed-ms", cAlternateFileName="MICROS~2.FEE")) returned 1 [0128.375] FindNextFileW (in: hFindFile=0x381b80, lpFindFileData=0x31e38c | out: lpFindFileData=0x31e38c*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x28f14980, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28f14980, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xfedc214c, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x7000, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft at Work~.feed-ms", cAlternateFileName="MICROS~1.FEE")) returned 1 [0128.375] FindNextFileW (in: hFindFile=0x381b80, lpFindFileData=0x31e38c | out: lpFindFileData=0x31e38c*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x28f14980, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28f14980, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xfee8082e, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x7000, dwReserved0=0x0, dwReserved1=0x0, cFileName="MSNBC News~.feed-ms", cAlternateFileName="MSNBCN~1.FEE")) returned 1 [0128.375] FindNextFileW (in: hFindFile=0x381b80, lpFindFileData=0x31e38c | out: lpFindFileData=0x31e38c*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0128.375] FindClose (in: hFindFile=0x381b80 | out: hFindFile=0x381b80) returned 1 [0128.376] GetLongPathNameW (in: lpszShortPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Feeds\\Microsoft Feeds~", lpszLongPath=0x31e148, cchBuffer=0x104 | out: lpszLongPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Feeds\\Microsoft Feeds~") returned 0x4c [0128.376] GetLongPathNameW (in: lpszShortPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Feeds\\Microsoft Feeds~", lpszLongPath=0x31e148, cchBuffer=0x104 | out: lpszLongPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Feeds\\Microsoft Feeds~") returned 0x4c [0128.377] GetLongPathNameW (in: lpszShortPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Feeds\\Microsoft Feeds~\\", lpszLongPath=0x31e128, cchBuffer=0x104 | out: lpszLongPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Feeds\\Microsoft Feeds~\\") returned 0x4d [0128.377] GetLongPathNameW (in: lpszShortPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Feeds\\Microsoft Feeds~\\", lpszLongPath=0x31e11c, cchBuffer=0x104 | out: lpszLongPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Feeds\\Microsoft Feeds~\\") returned 0x4d [0128.378] GetLongPathNameW (in: lpszShortPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Feeds\\Microsoft Feeds~\\", lpszLongPath=0x31e11c, cchBuffer=0x104 | out: lpszLongPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Feeds\\Microsoft Feeds~\\") returned 0x4d [0128.379] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Feeds\\Microsoft Feeds~\\*", lpFindFileData=0x31e37c | out: lpFindFileData=0x31e37c*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x28d257a0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28f14980, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xfee3456d, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x381b80 [0128.380] FindNextFileW (in: hFindFile=0x381b80, lpFindFileData=0x31e38c | out: lpFindFileData=0x31e38c*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x28d257a0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28f14980, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xfee3456d, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0128.380] FindNextFileW (in: hFindFile=0x381b80, lpFindFileData=0x31e38c | out: lpFindFileData=0x31e38c*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x28f14980, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28f14980, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xfeaa2466, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x7000, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft at Home~.feed-ms", cAlternateFileName="MICROS~2.FEE")) returned 1 [0128.380] FindNextFileW (in: hFindFile=0x381b80, lpFindFileData=0x31e38c | out: lpFindFileData=0x31e38c*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x28f14980, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28f14980, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xfedc214c, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x7000, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft at Work~.feed-ms", cAlternateFileName="MICROS~1.FEE")) returned 1 [0128.380] FindNextFileW (in: hFindFile=0x381b80, lpFindFileData=0x31e38c | out: lpFindFileData=0x31e38c*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x28f14980, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28f14980, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xfee8082e, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x7000, dwReserved0=0x0, dwReserved1=0x0, cFileName="MSNBC News~.feed-ms", cAlternateFileName="MSNBCN~1.FEE")) returned 1 [0128.380] FindNextFileW (in: hFindFile=0x381b80, lpFindFileData=0x31e38c | out: lpFindFileData=0x31e38c*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x28f14980, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28f14980, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xfee8082e, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x7000, dwReserved0=0x0, dwReserved1=0x0, cFileName="MSNBC News~.feed-ms", cAlternateFileName="MSNBCN~1.FEE")) returned 0 [0128.380] FindClose (in: hFindFile=0x381b80 | out: hFindFile=0x381b80) returned 1 [0128.381] GetLongPathNameW (in: lpszShortPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Feeds\\{5588ACFD-6436-411B-A5CE-666AE6A92D3D}~", lpszLongPath=0x31e148, cchBuffer=0x104 | out: lpszLongPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Feeds\\{5588ACFD-6436-411B-A5CE-666AE6A92D3D}~") returned 0x63 [0128.382] GetLongPathNameW (in: lpszShortPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Feeds\\{5588ACFD-6436-411B-A5CE-666AE6A92D3D}~", lpszLongPath=0x31e148, cchBuffer=0x104 | out: lpszLongPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Feeds\\{5588ACFD-6436-411B-A5CE-666AE6A92D3D}~") returned 0x63 [0128.382] GetLongPathNameW (in: lpszShortPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Feeds\\{5588ACFD-6436-411B-A5CE-666AE6A92D3D}~\\", lpszLongPath=0x31e128, cchBuffer=0x104 | out: lpszLongPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Feeds\\{5588ACFD-6436-411B-A5CE-666AE6A92D3D}~\\") returned 0x64 [0128.382] GetLongPathNameW (in: lpszShortPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Feeds\\{5588ACFD-6436-411B-A5CE-666AE6A92D3D}~\\", lpszLongPath=0x31e11c, cchBuffer=0x104 | out: lpszLongPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Feeds\\{5588ACFD-6436-411B-A5CE-666AE6A92D3D}~\\") returned 0x64 [0128.383] GetLongPathNameW (in: lpszShortPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Feeds\\{5588ACFD-6436-411B-A5CE-666AE6A92D3D}~\\", lpszLongPath=0x31e11c, cchBuffer=0x104 | out: lpszLongPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Feeds\\{5588ACFD-6436-411B-A5CE-666AE6A92D3D}~\\") returned 0x64 [0128.384] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Feeds\\{5588ACFD-6436-411B-A5CE-666AE6A92D3D}~\\*", lpFindFileData=0x31e37c | out: lpFindFileData=0x31e37c*(dwFileAttributes=0x2012, ftCreationTime.dwLowDateTime=0x28d257a0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28d257a0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xff0498b1, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x381b80 [0128.384] FindNextFileW (in: hFindFile=0x381b80, lpFindFileData=0x31e38c | out: lpFindFileData=0x31e38c*(dwFileAttributes=0x2012, ftCreationTime.dwLowDateTime=0x28d257a0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28d257a0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xff0498b1, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0128.384] FindNextFileW (in: hFindFile=0x381b80, lpFindFileData=0x31e38c | out: lpFindFileData=0x31e38c*(dwFileAttributes=0x2012, ftCreationTime.dwLowDateTime=0x28d257a0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x52d69eb0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x52d69eb0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="WebSlices~", cAlternateFileName="WEBSLI~1")) returned 1 [0128.385] FindNextFileW (in: hFindFile=0x381b80, lpFindFileData=0x31e38c | out: lpFindFileData=0x31e38c*(dwFileAttributes=0x2012, ftCreationTime.dwLowDateTime=0x28d257a0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x52d69eb0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x52d69eb0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="WebSlices~", cAlternateFileName="WEBSLI~1")) returned 0 [0128.385] FindClose (in: hFindFile=0x381b80 | out: hFindFile=0x381b80) returned 1 [0128.385] GetLongPathNameW (in: lpszShortPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Feeds\\{5588ACFD-6436-411B-A5CE-666AE6A92D3D}~", lpszLongPath=0x31e148, cchBuffer=0x104 | out: lpszLongPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Feeds\\{5588ACFD-6436-411B-A5CE-666AE6A92D3D}~") returned 0x63 [0128.385] GetLongPathNameW (in: lpszShortPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Feeds\\{5588ACFD-6436-411B-A5CE-666AE6A92D3D}~", lpszLongPath=0x31e148, cchBuffer=0x104 | out: lpszLongPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Feeds\\{5588ACFD-6436-411B-A5CE-666AE6A92D3D}~") returned 0x63 [0128.386] GetLongPathNameW (in: lpszShortPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Feeds\\{5588ACFD-6436-411B-A5CE-666AE6A92D3D}~\\", lpszLongPath=0x31e128, cchBuffer=0x104 | out: lpszLongPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Feeds\\{5588ACFD-6436-411B-A5CE-666AE6A92D3D}~\\") returned 0x64 [0128.386] GetLongPathNameW (in: lpszShortPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Feeds\\{5588ACFD-6436-411B-A5CE-666AE6A92D3D}~\\", lpszLongPath=0x31e11c, cchBuffer=0x104 | out: lpszLongPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Feeds\\{5588ACFD-6436-411B-A5CE-666AE6A92D3D}~\\") returned 0x64 [0128.387] GetLongPathNameW (in: lpszShortPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Feeds\\{5588ACFD-6436-411B-A5CE-666AE6A92D3D}~\\", lpszLongPath=0x31e11c, cchBuffer=0x104 | out: lpszLongPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Feeds\\{5588ACFD-6436-411B-A5CE-666AE6A92D3D}~\\") returned 0x64 [0128.388] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Feeds\\{5588ACFD-6436-411B-A5CE-666AE6A92D3D}~\\*", lpFindFileData=0x31e37c | out: lpFindFileData=0x31e37c*(dwFileAttributes=0x2012, ftCreationTime.dwLowDateTime=0x28d257a0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28d257a0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xff0498b1, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x381b80 [0128.389] FindNextFileW (in: hFindFile=0x381b80, lpFindFileData=0x31e38c | out: lpFindFileData=0x31e38c*(dwFileAttributes=0x2012, ftCreationTime.dwLowDateTime=0x28d257a0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28d257a0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xff0498b1, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0128.389] FindNextFileW (in: hFindFile=0x381b80, lpFindFileData=0x31e38c | out: lpFindFileData=0x31e38c*(dwFileAttributes=0x2012, ftCreationTime.dwLowDateTime=0x28d257a0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x52d69eb0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x52d69eb0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="WebSlices~", cAlternateFileName="WEBSLI~1")) returned 1 [0128.389] FindNextFileW (in: hFindFile=0x381b80, lpFindFileData=0x31e38c | out: lpFindFileData=0x31e38c*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0128.389] FindClose (in: hFindFile=0x381b80 | out: hFindFile=0x381b80) returned 1 [0128.389] GetLongPathNameW (in: lpszShortPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Feeds\\{5588ACFD-6436-411B-A5CE-666AE6A92D3D}~\\", lpszLongPath=0x31e0d0, cchBuffer=0x104 | out: lpszLongPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Feeds\\{5588ACFD-6436-411B-A5CE-666AE6A92D3D}~\\") returned 0x64 [0128.390] GetLongPathNameW (in: lpszShortPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Feeds\\{5588ACFD-6436-411B-A5CE-666AE6A92D3D}~\\WebSlices~", lpszLongPath=0x31e0d0, cchBuffer=0x104 | out: lpszLongPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Feeds\\{5588ACFD-6436-411B-A5CE-666AE6A92D3D}~\\WebSlices~") returned 0x6e [0128.390] GetLongPathNameW (in: lpszShortPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Feeds\\{5588ACFD-6436-411B-A5CE-666AE6A92D3D}~\\WebSlices~", lpszLongPath=0x31e0d0, cchBuffer=0x104 | out: lpszLongPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Feeds\\{5588ACFD-6436-411B-A5CE-666AE6A92D3D}~\\WebSlices~") returned 0x6e [0128.391] GetLongPathNameW (in: lpszShortPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Feeds\\{5588ACFD-6436-411B-A5CE-666AE6A92D3D}~\\", lpszLongPath=0x31e0b0, cchBuffer=0x104 | out: lpszLongPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Feeds\\{5588ACFD-6436-411B-A5CE-666AE6A92D3D}~\\") returned 0x64 [0128.391] GetLongPathNameW (in: lpszShortPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Feeds\\{5588ACFD-6436-411B-A5CE-666AE6A92D3D}~\\WebSlices~\\", lpszLongPath=0x31e0b0, cchBuffer=0x104 | out: lpszLongPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Feeds\\{5588ACFD-6436-411B-A5CE-666AE6A92D3D}~\\WebSlices~\\") returned 0x6f [0128.391] GetLongPathNameW (in: lpszShortPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Feeds\\{5588ACFD-6436-411B-A5CE-666AE6A92D3D}~\\", lpszLongPath=0x31e0a4, cchBuffer=0x104 | out: lpszLongPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Feeds\\{5588ACFD-6436-411B-A5CE-666AE6A92D3D}~\\") returned 0x64 [0128.392] GetLongPathNameW (in: lpszShortPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Feeds\\{5588ACFD-6436-411B-A5CE-666AE6A92D3D}~\\WebSlices~\\", lpszLongPath=0x31e0a4, cchBuffer=0x104 | out: lpszLongPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Feeds\\{5588ACFD-6436-411B-A5CE-666AE6A92D3D}~\\WebSlices~\\") returned 0x6f [0128.392] GetLongPathNameW (in: lpszShortPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Feeds\\{5588ACFD-6436-411B-A5CE-666AE6A92D3D}~\\WebSlices~\\", lpszLongPath=0x31e0a4, cchBuffer=0x104 | out: lpszLongPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Feeds\\{5588ACFD-6436-411B-A5CE-666AE6A92D3D}~\\WebSlices~\\") returned 0x6f [0128.393] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Feeds\\{5588ACFD-6436-411B-A5CE-666AE6A92D3D}~\\WebSlices~\\*", lpFindFileData=0x31e304 | out: lpFindFileData=0x31e304*(dwFileAttributes=0x2012, ftCreationTime.dwLowDateTime=0x28d257a0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x52d69eb0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x52d69eb0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x381b80 [0128.394] FindNextFileW (in: hFindFile=0x381b80, lpFindFileData=0x31e314 | out: lpFindFileData=0x31e314*(dwFileAttributes=0x2012, ftCreationTime.dwLowDateTime=0x28d257a0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x52d69eb0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x52d69eb0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0128.394] FindNextFileW (in: hFindFile=0x381b80, lpFindFileData=0x31e314 | out: lpFindFileData=0x31e314*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x52d69eb0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x52d69eb0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x6e0227e0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x8000, dwReserved0=0x0, dwReserved1=0x0, cFileName="Suggested Sites~.feed-ms", cAlternateFileName="SUGGES~1.FEE")) returned 1 [0128.394] FindNextFileW (in: hFindFile=0x381b80, lpFindFileData=0x31e314 | out: lpFindFileData=0x31e314*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x28f14980, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28f14980, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xff06fa11, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x7000, dwReserved0=0x0, dwReserved1=0x0, cFileName="Web Slice Gallery~.feed-ms", cAlternateFileName="WEBSLI~1.FEE")) returned 1 [0128.394] FindNextFileW (in: hFindFile=0x381b80, lpFindFileData=0x31e314 | out: lpFindFileData=0x31e314*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0128.394] FindClose (in: hFindFile=0x381b80 | out: hFindFile=0x381b80) returned 1 [0128.394] GetLongPathNameW (in: lpszShortPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Feeds\\{5588ACFD-6436-411B-A5CE-666AE6A92D3D}~\\", lpszLongPath=0x31e0d0, cchBuffer=0x104 | out: lpszLongPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Feeds\\{5588ACFD-6436-411B-A5CE-666AE6A92D3D}~\\") returned 0x64 [0128.395] GetLongPathNameW (in: lpszShortPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Feeds\\{5588ACFD-6436-411B-A5CE-666AE6A92D3D}~\\WebSlices~", lpszLongPath=0x31e0d0, cchBuffer=0x104 | out: lpszLongPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Feeds\\{5588ACFD-6436-411B-A5CE-666AE6A92D3D}~\\WebSlices~") returned 0x6e [0128.395] GetLongPathNameW (in: lpszShortPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Feeds\\{5588ACFD-6436-411B-A5CE-666AE6A92D3D}~\\WebSlices~", lpszLongPath=0x31e0d0, cchBuffer=0x104 | out: lpszLongPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Feeds\\{5588ACFD-6436-411B-A5CE-666AE6A92D3D}~\\WebSlices~") returned 0x6e [0128.396] GetLongPathNameW (in: lpszShortPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Feeds\\{5588ACFD-6436-411B-A5CE-666AE6A92D3D}~\\", lpszLongPath=0x31e0b0, cchBuffer=0x104 | out: lpszLongPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Feeds\\{5588ACFD-6436-411B-A5CE-666AE6A92D3D}~\\") returned 0x64 [0128.396] GetLongPathNameW (in: lpszShortPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Feeds\\{5588ACFD-6436-411B-A5CE-666AE6A92D3D}~\\WebSlices~\\", lpszLongPath=0x31e0b0, cchBuffer=0x104 | out: lpszLongPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Feeds\\{5588ACFD-6436-411B-A5CE-666AE6A92D3D}~\\WebSlices~\\") returned 0x6f [0128.396] GetLongPathNameW (in: lpszShortPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Feeds\\{5588ACFD-6436-411B-A5CE-666AE6A92D3D}~\\", lpszLongPath=0x31e0a4, cchBuffer=0x104 | out: lpszLongPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Feeds\\{5588ACFD-6436-411B-A5CE-666AE6A92D3D}~\\") returned 0x64 [0128.397] GetLongPathNameW (in: lpszShortPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Feeds\\{5588ACFD-6436-411B-A5CE-666AE6A92D3D}~\\WebSlices~\\", lpszLongPath=0x31e0a4, cchBuffer=0x104 | out: lpszLongPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Feeds\\{5588ACFD-6436-411B-A5CE-666AE6A92D3D}~\\WebSlices~\\") returned 0x6f [0128.397] GetLongPathNameW (in: lpszShortPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Feeds\\{5588ACFD-6436-411B-A5CE-666AE6A92D3D}~\\WebSlices~\\", lpszLongPath=0x31e0a4, cchBuffer=0x104 | out: lpszLongPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Feeds\\{5588ACFD-6436-411B-A5CE-666AE6A92D3D}~\\WebSlices~\\") returned 0x6f [0128.399] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Feeds\\{5588ACFD-6436-411B-A5CE-666AE6A92D3D}~\\WebSlices~\\*", lpFindFileData=0x31e304 | out: lpFindFileData=0x31e304*(dwFileAttributes=0x2012, ftCreationTime.dwLowDateTime=0x28d257a0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x52d69eb0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x52d69eb0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x381b80 [0128.399] FindNextFileW (in: hFindFile=0x381b80, lpFindFileData=0x31e314 | out: lpFindFileData=0x31e314*(dwFileAttributes=0x2012, ftCreationTime.dwLowDateTime=0x28d257a0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x52d69eb0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x52d69eb0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0128.399] FindNextFileW (in: hFindFile=0x381b80, lpFindFileData=0x31e314 | out: lpFindFileData=0x31e314*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x52d69eb0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x52d69eb0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x6e0227e0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x8000, dwReserved0=0x0, dwReserved1=0x0, cFileName="Suggested Sites~.feed-ms", cAlternateFileName="SUGGES~1.FEE")) returned 1 [0128.399] FindNextFileW (in: hFindFile=0x381b80, lpFindFileData=0x31e314 | out: lpFindFileData=0x31e314*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x28f14980, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28f14980, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xff06fa11, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x7000, dwReserved0=0x0, dwReserved1=0x0, cFileName="Web Slice Gallery~.feed-ms", cAlternateFileName="WEBSLI~1.FEE")) returned 1 [0128.399] FindNextFileW (in: hFindFile=0x381b80, lpFindFileData=0x31e314 | out: lpFindFileData=0x31e314*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x28f14980, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28f14980, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xff06fa11, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x7000, dwReserved0=0x0, dwReserved1=0x0, cFileName="Web Slice Gallery~.feed-ms", cAlternateFileName="WEBSLI~1.FEE")) returned 0 [0128.399] FindClose (in: hFindFile=0x381b80 | out: hFindFile=0x381b80) returned 1 [0128.399] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Feeds Cache\\*", lpFindFileData=0x31e3f4 | out: lpFindFileData=0x31e3f4*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0x28d257a0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28f3aae0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xfea09ee5, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x381b80 [0128.400] FindNextFileW (in: hFindFile=0x381b80, lpFindFileData=0x31e404 | out: lpFindFileData=0x31e404*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0x28d257a0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28f3aae0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xfea09ee5, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0128.400] FindNextFileW (in: hFindFile=0x381b80, lpFindFileData=0x31e404 | out: lpFindFileData=0x31e404*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0x28d257a0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28f14980, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xfedc214c, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="1NBUR4HR", cAlternateFileName="")) returned 1 [0128.400] FindNextFileW (in: hFindFile=0x381b80, lpFindFileData=0x31e404 | out: lpFindFileData=0x31e404*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0x28d257a0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28f14980, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xfee8082e, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="6ASVN7J7", cAlternateFileName="")) returned 1 [0128.401] FindNextFileW (in: hFindFile=0x381b80, lpFindFileData=0x31e404 | out: lpFindFileData=0x31e404*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0x28d257a0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28f14980, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xff06fa11, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="D68G7BIJ", cAlternateFileName="")) returned 1 [0128.401] FindNextFileW (in: hFindFile=0x381b80, lpFindFileData=0x31e404 | out: lpFindFileData=0x31e404*(dwFileAttributes=0x2026, ftCreationTime.dwLowDateTime=0x28f14980, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28f14980, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xfe9e3d85, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x43, dwReserved0=0x0, dwReserved1=0x0, cFileName="desktop.ini", cAlternateFileName="")) returned 1 [0128.401] FindNextFileW (in: hFindFile=0x381b80, lpFindFileData=0x31e404 | out: lpFindFileData=0x31e404*(dwFileAttributes=0x2026, ftCreationTime.dwLowDateTime=0x28f14980, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28f14980, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x2bc126f0, ftLastWriteTime.dwHighDateTime=0x1d35d06, nFileSizeHigh=0x0, nFileSizeLow=0x8000, dwReserved0=0x0, dwReserved1=0x0, cFileName="index.dat", cAlternateFileName="")) returned 1 [0128.401] FindNextFileW (in: hFindFile=0x381b80, lpFindFileData=0x31e404 | out: lpFindFileData=0x31e404*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0x28d257a0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x52d90010, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x52d90010, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="KQMHSVKD", cAlternateFileName="")) returned 1 [0128.401] FindNextFileW (in: hFindFile=0x381b80, lpFindFileData=0x31e404 | out: lpFindFileData=0x31e404*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0x28d257a0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x52d90010, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x52d90010, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="KQMHSVKD", cAlternateFileName="")) returned 0 [0128.401] FindClose (in: hFindFile=0x381b80 | out: hFindFile=0x381b80) returned 1 [0128.402] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Feeds Cache\\*", lpFindFileData=0x31e3f4 | out: lpFindFileData=0x31e3f4*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0x28d257a0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28f3aae0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xfea09ee5, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x381b80 [0128.403] FindNextFileW (in: hFindFile=0x381b80, lpFindFileData=0x31e404 | out: lpFindFileData=0x31e404*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0x28d257a0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28f3aae0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xfea09ee5, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0128.403] FindNextFileW (in: hFindFile=0x381b80, lpFindFileData=0x31e404 | out: lpFindFileData=0x31e404*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0x28d257a0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28f14980, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xfedc214c, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="1NBUR4HR", cAlternateFileName="")) returned 1 [0128.403] FindNextFileW (in: hFindFile=0x381b80, lpFindFileData=0x31e404 | out: lpFindFileData=0x31e404*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0x28d257a0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28f14980, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xfee8082e, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="6ASVN7J7", cAlternateFileName="")) returned 1 [0128.403] FindNextFileW (in: hFindFile=0x381b80, lpFindFileData=0x31e404 | out: lpFindFileData=0x31e404*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0x28d257a0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28f14980, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xff06fa11, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="D68G7BIJ", cAlternateFileName="")) returned 1 [0128.403] FindNextFileW (in: hFindFile=0x381b80, lpFindFileData=0x31e404 | out: lpFindFileData=0x31e404*(dwFileAttributes=0x2026, ftCreationTime.dwLowDateTime=0x28f14980, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28f14980, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xfe9e3d85, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x43, dwReserved0=0x0, dwReserved1=0x0, cFileName="desktop.ini", cAlternateFileName="")) returned 1 [0128.403] FindNextFileW (in: hFindFile=0x381b80, lpFindFileData=0x31e404 | out: lpFindFileData=0x31e404*(dwFileAttributes=0x2026, ftCreationTime.dwLowDateTime=0x28f14980, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28f14980, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x2bc126f0, ftLastWriteTime.dwHighDateTime=0x1d35d06, nFileSizeHigh=0x0, nFileSizeLow=0x8000, dwReserved0=0x0, dwReserved1=0x0, cFileName="index.dat", cAlternateFileName="")) returned 1 [0128.403] FindNextFileW (in: hFindFile=0x381b80, lpFindFileData=0x31e404 | out: lpFindFileData=0x31e404*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0x28d257a0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x52d90010, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x52d90010, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="KQMHSVKD", cAlternateFileName="")) returned 1 [0128.403] FindNextFileW (in: hFindFile=0x381b80, lpFindFileData=0x31e404 | out: lpFindFileData=0x31e404*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0128.404] FindClose (in: hFindFile=0x381b80 | out: hFindFile=0x381b80) returned 1 [0128.404] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Feeds Cache\\1NBUR4HR\\*", lpFindFileData=0x31e37c | out: lpFindFileData=0x31e37c*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0x28d257a0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28f14980, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xfedc214c, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x381b80 [0128.405] FindNextFileW (in: hFindFile=0x381b80, lpFindFileData=0x31e38c | out: lpFindFileData=0x31e38c*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0x28d257a0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28f14980, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xfedc214c, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0128.405] FindNextFileW (in: hFindFile=0x381b80, lpFindFileData=0x31e38c | out: lpFindFileData=0x31e38c*(dwFileAttributes=0x2026, ftCreationTime.dwLowDateTime=0x28f14980, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28f14980, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xfea09ee5, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x43, dwReserved0=0x0, dwReserved1=0x0, cFileName="desktop.ini", cAlternateFileName="")) returned 1 [0128.405] FindNextFileW (in: hFindFile=0x381b80, lpFindFileData=0x31e38c | out: lpFindFileData=0x31e38c*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x28f14980, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28f14980, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xfedc214c, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="fwlink[1]", cAlternateFileName="FWLINK~1")) returned 1 [0128.406] FindNextFileW (in: hFindFile=0x381b80, lpFindFileData=0x31e38c | out: lpFindFileData=0x31e38c*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0128.406] FindClose (in: hFindFile=0x381b80 | out: hFindFile=0x381b80) returned 1 [0128.406] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Feeds Cache\\1NBUR4HR\\*", lpFindFileData=0x31e37c | out: lpFindFileData=0x31e37c*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0x28d257a0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28f14980, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xfedc214c, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x381b80 [0128.406] FindNextFileW (in: hFindFile=0x381b80, lpFindFileData=0x31e38c | out: lpFindFileData=0x31e38c*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0x28d257a0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28f14980, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xfedc214c, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0128.406] FindNextFileW (in: hFindFile=0x381b80, lpFindFileData=0x31e38c | out: lpFindFileData=0x31e38c*(dwFileAttributes=0x2026, ftCreationTime.dwLowDateTime=0x28f14980, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28f14980, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xfea09ee5, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x43, dwReserved0=0x0, dwReserved1=0x0, cFileName="desktop.ini", cAlternateFileName="")) returned 1 [0128.406] FindNextFileW (in: hFindFile=0x381b80, lpFindFileData=0x31e38c | out: lpFindFileData=0x31e38c*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x28f14980, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28f14980, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xfedc214c, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="fwlink[1]", cAlternateFileName="FWLINK~1")) returned 1 [0128.406] FindNextFileW (in: hFindFile=0x381b80, lpFindFileData=0x31e38c | out: lpFindFileData=0x31e38c*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x28f14980, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28f14980, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xfedc214c, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="fwlink[1]", cAlternateFileName="FWLINK~1")) returned 0 [0128.407] FindClose (in: hFindFile=0x381b80 | out: hFindFile=0x381b80) returned 1 [0128.407] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Feeds Cache\\6ASVN7J7\\*", lpFindFileData=0x31e37c | out: lpFindFileData=0x31e37c*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0x28d257a0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28f14980, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xfee8082e, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x381b80 [0128.407] FindNextFileW (in: hFindFile=0x381b80, lpFindFileData=0x31e38c | out: lpFindFileData=0x31e38c*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0x28d257a0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28f14980, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xfee8082e, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0128.407] FindNextFileW (in: hFindFile=0x381b80, lpFindFileData=0x31e38c | out: lpFindFileData=0x31e38c*(dwFileAttributes=0x2026, ftCreationTime.dwLowDateTime=0x28f14980, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28f14980, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xfea09ee5, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x43, dwReserved0=0x0, dwReserved1=0x0, cFileName="desktop.ini", cAlternateFileName="")) returned 1 [0128.407] FindNextFileW (in: hFindFile=0x381b80, lpFindFileData=0x31e38c | out: lpFindFileData=0x31e38c*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x28f14980, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28f14980, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xfee8082e, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="fwlink[1]", cAlternateFileName="FWLINK~1")) returned 1 [0128.407] FindNextFileW (in: hFindFile=0x381b80, lpFindFileData=0x31e38c | out: lpFindFileData=0x31e38c*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0128.407] FindClose (in: hFindFile=0x381b80 | out: hFindFile=0x381b80) returned 1 [0128.408] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Feeds Cache\\6ASVN7J7\\*", lpFindFileData=0x31e37c | out: lpFindFileData=0x31e37c*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0x28d257a0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28f14980, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xfee8082e, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x381b80 [0128.408] FindNextFileW (in: hFindFile=0x381b80, lpFindFileData=0x31e38c | out: lpFindFileData=0x31e38c*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0x28d257a0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28f14980, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xfee8082e, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0128.408] FindNextFileW (in: hFindFile=0x381b80, lpFindFileData=0x31e38c | out: lpFindFileData=0x31e38c*(dwFileAttributes=0x2026, ftCreationTime.dwLowDateTime=0x28f14980, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28f14980, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xfea09ee5, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x43, dwReserved0=0x0, dwReserved1=0x0, cFileName="desktop.ini", cAlternateFileName="")) returned 1 [0128.408] FindNextFileW (in: hFindFile=0x381b80, lpFindFileData=0x31e38c | out: lpFindFileData=0x31e38c*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x28f14980, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28f14980, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xfee8082e, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="fwlink[1]", cAlternateFileName="FWLINK~1")) returned 1 [0128.408] FindNextFileW (in: hFindFile=0x381b80, lpFindFileData=0x31e38c | out: lpFindFileData=0x31e38c*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x28f14980, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28f14980, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xfee8082e, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="fwlink[1]", cAlternateFileName="FWLINK~1")) returned 0 [0128.408] FindClose (in: hFindFile=0x381b80 | out: hFindFile=0x381b80) returned 1 [0128.408] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Feeds Cache\\D68G7BIJ\\*", lpFindFileData=0x31e37c | out: lpFindFileData=0x31e37c*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0x28d257a0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28f14980, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xff06fa11, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x381b80 [0128.409] FindNextFileW (in: hFindFile=0x381b80, lpFindFileData=0x31e38c | out: lpFindFileData=0x31e38c*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0x28d257a0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28f14980, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xff06fa11, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0128.409] FindNextFileW (in: hFindFile=0x381b80, lpFindFileData=0x31e38c | out: lpFindFileData=0x31e38c*(dwFileAttributes=0x2026, ftCreationTime.dwLowDateTime=0x28f14980, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28f14980, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xfea09ee5, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x43, dwReserved0=0x0, dwReserved1=0x0, cFileName="desktop.ini", cAlternateFileName="")) returned 1 [0128.409] FindNextFileW (in: hFindFile=0x381b80, lpFindFileData=0x31e38c | out: lpFindFileData=0x31e38c*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x28f14980, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28f14980, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xff06fa11, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="fwlink[1]", cAlternateFileName="FWLINK~1")) returned 1 [0128.409] FindNextFileW (in: hFindFile=0x381b80, lpFindFileData=0x31e38c | out: lpFindFileData=0x31e38c*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0128.409] FindClose (in: hFindFile=0x381b80 | out: hFindFile=0x381b80) returned 1 [0128.409] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Feeds Cache\\D68G7BIJ\\*", lpFindFileData=0x31e37c | out: lpFindFileData=0x31e37c*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0x28d257a0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28f14980, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xff06fa11, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x381b80 [0128.409] FindNextFileW (in: hFindFile=0x381b80, lpFindFileData=0x31e38c | out: lpFindFileData=0x31e38c*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0x28d257a0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28f14980, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xff06fa11, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0128.410] FindNextFileW (in: hFindFile=0x381b80, lpFindFileData=0x31e38c | out: lpFindFileData=0x31e38c*(dwFileAttributes=0x2026, ftCreationTime.dwLowDateTime=0x28f14980, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28f14980, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xfea09ee5, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x43, dwReserved0=0x0, dwReserved1=0x0, cFileName="desktop.ini", cAlternateFileName="")) returned 1 [0128.410] FindNextFileW (in: hFindFile=0x381b80, lpFindFileData=0x31e38c | out: lpFindFileData=0x31e38c*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x28f14980, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28f14980, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xff06fa11, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="fwlink[1]", cAlternateFileName="FWLINK~1")) returned 1 [0128.410] FindNextFileW (in: hFindFile=0x381b80, lpFindFileData=0x31e38c | out: lpFindFileData=0x31e38c*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x28f14980, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28f14980, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xff06fa11, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="fwlink[1]", cAlternateFileName="FWLINK~1")) returned 0 [0128.410] FindClose (in: hFindFile=0x381b80 | out: hFindFile=0x381b80) returned 1 [0128.410] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Feeds Cache\\KQMHSVKD\\*", lpFindFileData=0x31e37c | out: lpFindFileData=0x31e37c*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0x28d257a0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x52d90010, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x52d90010, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x381b80 [0128.410] FindNextFileW (in: hFindFile=0x381b80, lpFindFileData=0x31e38c | out: lpFindFileData=0x31e38c*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0x28d257a0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x52d90010, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x52d90010, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0128.411] FindNextFileW (in: hFindFile=0x381b80, lpFindFileData=0x31e38c | out: lpFindFileData=0x31e38c*(dwFileAttributes=0x2026, ftCreationTime.dwLowDateTime=0x28f14980, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28f14980, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xfe9e3d85, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x43, dwReserved0=0x0, dwReserved1=0x0, cFileName="desktop.ini", cAlternateFileName="")) returned 1 [0128.411] FindNextFileW (in: hFindFile=0x381b80, lpFindFileData=0x31e38c | out: lpFindFileData=0x31e38c*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x28f14980, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28f14980, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xfed03a6b, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="fwlink[1]", cAlternateFileName="FWLINK~1")) returned 1 [0128.411] FindNextFileW (in: hFindFile=0x381b80, lpFindFileData=0x31e38c | out: lpFindFileData=0x31e38c*(dwFileAttributes=0x2000, ftCreationTime.dwLowDateTime=0x52d90010, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x52d90010, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x52d90010, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="ieonline.microsoft[1]", cAlternateFileName="IEONLI~1.MIC")) returned 1 [0128.411] FindNextFileW (in: hFindFile=0x381b80, lpFindFileData=0x31e38c | out: lpFindFileData=0x31e38c*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0128.411] FindClose (in: hFindFile=0x381b80 | out: hFindFile=0x381b80) returned 1 [0128.411] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Feeds Cache\\KQMHSVKD\\*", lpFindFileData=0x31e37c | out: lpFindFileData=0x31e37c*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0x28d257a0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x52d90010, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x52d90010, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x381b80 [0128.411] FindNextFileW (in: hFindFile=0x381b80, lpFindFileData=0x31e38c | out: lpFindFileData=0x31e38c*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0x28d257a0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x52d90010, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x52d90010, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0128.411] FindNextFileW (in: hFindFile=0x381b80, lpFindFileData=0x31e38c | out: lpFindFileData=0x31e38c*(dwFileAttributes=0x2026, ftCreationTime.dwLowDateTime=0x28f14980, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28f14980, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xfe9e3d85, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x43, dwReserved0=0x0, dwReserved1=0x0, cFileName="desktop.ini", cAlternateFileName="")) returned 1 [0128.412] FindNextFileW (in: hFindFile=0x381b80, lpFindFileData=0x31e38c | out: lpFindFileData=0x31e38c*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x28f14980, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28f14980, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xfed03a6b, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="fwlink[1]", cAlternateFileName="FWLINK~1")) returned 1 [0128.412] FindNextFileW (in: hFindFile=0x381b80, lpFindFileData=0x31e38c | out: lpFindFileData=0x31e38c*(dwFileAttributes=0x2000, ftCreationTime.dwLowDateTime=0x52d90010, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x52d90010, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x52d90010, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="ieonline.microsoft[1]", cAlternateFileName="IEONLI~1.MIC")) returned 1 [0128.412] FindNextFileW (in: hFindFile=0x381b80, lpFindFileData=0x31e38c | out: lpFindFileData=0x31e38c*(dwFileAttributes=0x2000, ftCreationTime.dwLowDateTime=0x52d90010, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x52d90010, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x52d90010, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="ieonline.microsoft[1]", cAlternateFileName="IEONLI~1.MIC")) returned 0 [0128.412] FindClose (in: hFindFile=0x381b80 | out: hFindFile=0x381b80) returned 1 [0128.412] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\FORMS\\*", lpFindFileData=0x31e3f4 | out: lpFindFileData=0x31e3f4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x3d1d6940, ftCreationTime.dwHighDateTime=0x1d2fad7, ftLastAccessTime.dwLowDateTime=0x3d1d6940, ftLastAccessTime.dwHighDateTime=0x1d2fad7, ftLastWriteTime.dwLowDateTime=0x3d1d6940, ftLastWriteTime.dwHighDateTime=0x1d2fad7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x381b80 [0128.413] FindNextFileW (in: hFindFile=0x381b80, lpFindFileData=0x31e404 | out: lpFindFileData=0x31e404*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x3d1d6940, ftCreationTime.dwHighDateTime=0x1d2fad7, ftLastAccessTime.dwLowDateTime=0x3d1d6940, ftLastAccessTime.dwHighDateTime=0x1d2fad7, ftLastWriteTime.dwLowDateTime=0x3d1d6940, ftLastWriteTime.dwHighDateTime=0x1d2fad7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0128.413] FindNextFileW (in: hFindFile=0x381b80, lpFindFileData=0x31e404 | out: lpFindFileData=0x31e404*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x3d1d6940, ftCreationTime.dwHighDateTime=0x1d2fad7, ftLastAccessTime.dwLowDateTime=0x3d1d6940, ftLastAccessTime.dwHighDateTime=0x1d2fad7, ftLastWriteTime.dwLowDateTime=0x3d757c20, ftLastWriteTime.dwHighDateTime=0x1d2fad7, nFileSizeHigh=0x0, nFileSizeLow=0x3c0dc, dwReserved0=0x0, dwReserved1=0x0, cFileName="FRMCACHE.DAT", cAlternateFileName="")) returned 1 [0128.413] FindNextFileW (in: hFindFile=0x381b80, lpFindFileData=0x31e404 | out: lpFindFileData=0x31e404*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0128.413] FindClose (in: hFindFile=0x381b80 | out: hFindFile=0x381b80) returned 1 [0128.413] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\FORMS\\*", lpFindFileData=0x31e3f4 | out: lpFindFileData=0x31e3f4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x3d1d6940, ftCreationTime.dwHighDateTime=0x1d2fad7, ftLastAccessTime.dwLowDateTime=0x3d1d6940, ftLastAccessTime.dwHighDateTime=0x1d2fad7, ftLastWriteTime.dwLowDateTime=0x3d1d6940, ftLastWriteTime.dwHighDateTime=0x1d2fad7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x381b80 [0128.413] FindNextFileW (in: hFindFile=0x381b80, lpFindFileData=0x31e404 | out: lpFindFileData=0x31e404*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x3d1d6940, ftCreationTime.dwHighDateTime=0x1d2fad7, ftLastAccessTime.dwLowDateTime=0x3d1d6940, ftLastAccessTime.dwHighDateTime=0x1d2fad7, ftLastWriteTime.dwLowDateTime=0x3d1d6940, ftLastWriteTime.dwHighDateTime=0x1d2fad7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0128.413] FindNextFileW (in: hFindFile=0x381b80, lpFindFileData=0x31e404 | out: lpFindFileData=0x31e404*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x3d1d6940, ftCreationTime.dwHighDateTime=0x1d2fad7, ftLastAccessTime.dwLowDateTime=0x3d1d6940, ftLastAccessTime.dwHighDateTime=0x1d2fad7, ftLastWriteTime.dwLowDateTime=0x3d757c20, ftLastWriteTime.dwHighDateTime=0x1d2fad7, nFileSizeHigh=0x0, nFileSizeLow=0x3c0dc, dwReserved0=0x0, dwReserved1=0x0, cFileName="FRMCACHE.DAT", cAlternateFileName="")) returned 1 [0128.413] FindNextFileW (in: hFindFile=0x381b80, lpFindFileData=0x31e404 | out: lpFindFileData=0x31e404*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x3d1d6940, ftCreationTime.dwHighDateTime=0x1d2fad7, ftLastAccessTime.dwLowDateTime=0x3d1d6940, ftLastAccessTime.dwHighDateTime=0x1d2fad7, ftLastWriteTime.dwLowDateTime=0x3d757c20, ftLastWriteTime.dwHighDateTime=0x1d2fad7, nFileSizeHigh=0x0, nFileSizeLow=0x3c0dc, dwReserved0=0x0, dwReserved1=0x0, cFileName="FRMCACHE.DAT", cAlternateFileName="")) returned 0 [0128.414] FindClose (in: hFindFile=0x381b80 | out: hFindFile=0x381b80) returned 1 [0128.414] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\IME12\\*", lpFindFileData=0x31e3f4 | out: lpFindFileData=0x31e3f4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xcd754c00, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0xcd754c00, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0xcd754c00, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x381b80 [0128.414] FindNextFileW (in: hFindFile=0x381b80, lpFindFileData=0x31e404 | out: lpFindFileData=0x31e404*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xcd754c00, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0xcd754c00, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0xcd754c00, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0128.414] FindNextFileW (in: hFindFile=0x381b80, lpFindFileData=0x31e404 | out: lpFindFileData=0x31e404*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xcd754c00, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0xcd754c00, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0xcd754c00, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 0 [0128.414] FindClose (in: hFindFile=0x381b80 | out: hFindFile=0x381b80) returned 1 [0128.415] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\IME12\\*", lpFindFileData=0x31e3f4 | out: lpFindFileData=0x31e3f4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xcd754c00, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0xcd754c00, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0xcd754c00, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x381b80 [0128.415] FindNextFileW (in: hFindFile=0x381b80, lpFindFileData=0x31e404 | out: lpFindFileData=0x31e404*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xcd754c00, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0xcd754c00, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0xcd754c00, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0128.415] FindNextFileW (in: hFindFile=0x381b80, lpFindFileData=0x31e404 | out: lpFindFileData=0x31e404*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xcd754c00, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0xcd754c00, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0xcd754c00, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 0 [0128.415] FindClose (in: hFindFile=0x381b80 | out: hFindFile=0x381b80) returned 1 [0128.415] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\IMJP12\\*", lpFindFileData=0x31e3f4 | out: lpFindFileData=0x31e3f4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xcd72eaa0, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0xcd72eaa0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0xcd72eaa0, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x381b80 [0128.416] FindNextFileW (in: hFindFile=0x381b80, lpFindFileData=0x31e404 | out: lpFindFileData=0x31e404*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xcd72eaa0, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0xcd72eaa0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0xcd72eaa0, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0128.416] FindNextFileW (in: hFindFile=0x381b80, lpFindFileData=0x31e404 | out: lpFindFileData=0x31e404*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xcd72eaa0, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0xcd72eaa0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0xcd72eaa0, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 0 [0128.416] FindClose (in: hFindFile=0x381b80 | out: hFindFile=0x381b80) returned 1 [0128.416] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\IMJP12\\*", lpFindFileData=0x31e3f4 | out: lpFindFileData=0x31e3f4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xcd72eaa0, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0xcd72eaa0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0xcd72eaa0, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x381b80 [0128.416] FindNextFileW (in: hFindFile=0x381b80, lpFindFileData=0x31e404 | out: lpFindFileData=0x31e404*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xcd72eaa0, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0xcd72eaa0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0xcd72eaa0, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0128.416] FindNextFileW (in: hFindFile=0x381b80, lpFindFileData=0x31e404 | out: lpFindFileData=0x31e404*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xcd72eaa0, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0xcd72eaa0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0xcd72eaa0, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 0 [0128.416] FindClose (in: hFindFile=0x381b80 | out: hFindFile=0x381b80) returned 1 [0128.417] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\IMJP8_1\\*", lpFindFileData=0x31e3f4 | out: lpFindFileData=0x31e3f4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xcd72eaa0, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0xcd72eaa0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0xcd72eaa0, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x381b80 [0128.417] FindNextFileW (in: hFindFile=0x381b80, lpFindFileData=0x31e404 | out: lpFindFileData=0x31e404*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xcd72eaa0, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0xcd72eaa0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0xcd72eaa0, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0128.417] FindNextFileW (in: hFindFile=0x381b80, lpFindFileData=0x31e404 | out: lpFindFileData=0x31e404*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xcd72eaa0, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0xcd72eaa0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0xcd72eaa0, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 0 [0128.417] FindClose (in: hFindFile=0x381b80 | out: hFindFile=0x381b80) returned 1 [0128.417] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\IMJP8_1\\*", lpFindFileData=0x31e3f4 | out: lpFindFileData=0x31e3f4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xcd72eaa0, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0xcd72eaa0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0xcd72eaa0, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x381b80 [0128.418] FindNextFileW (in: hFindFile=0x381b80, lpFindFileData=0x31e404 | out: lpFindFileData=0x31e404*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xcd72eaa0, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0xcd72eaa0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0xcd72eaa0, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0128.418] FindNextFileW (in: hFindFile=0x381b80, lpFindFileData=0x31e404 | out: lpFindFileData=0x31e404*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xcd72eaa0, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0xcd72eaa0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0xcd72eaa0, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 0 [0128.418] FindClose (in: hFindFile=0x381b80 | out: hFindFile=0x381b80) returned 1 [0128.418] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\IMJP9_0\\*", lpFindFileData=0x31e3f4 | out: lpFindFileData=0x31e3f4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xcd72eaa0, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0xcd72eaa0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0xcd72eaa0, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x381b80 [0128.418] FindNextFileW (in: hFindFile=0x381b80, lpFindFileData=0x31e404 | out: lpFindFileData=0x31e404*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xcd72eaa0, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0xcd72eaa0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0xcd72eaa0, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0128.419] FindNextFileW (in: hFindFile=0x381b80, lpFindFileData=0x31e404 | out: lpFindFileData=0x31e404*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xcd72eaa0, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0xcd72eaa0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0xcd72eaa0, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 0 [0128.419] FindClose (in: hFindFile=0x381b80 | out: hFindFile=0x381b80) returned 1 [0128.419] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\IMJP9_0\\*", lpFindFileData=0x31e3f4 | out: lpFindFileData=0x31e3f4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xcd72eaa0, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0xcd72eaa0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0xcd72eaa0, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x381b80 [0128.419] FindNextFileW (in: hFindFile=0x381b80, lpFindFileData=0x31e404 | out: lpFindFileData=0x31e404*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xcd72eaa0, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0xcd72eaa0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0xcd72eaa0, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0128.419] FindNextFileW (in: hFindFile=0x381b80, lpFindFileData=0x31e404 | out: lpFindFileData=0x31e404*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xcd72eaa0, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0xcd72eaa0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0xcd72eaa0, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 0 [0128.419] FindClose (in: hFindFile=0x381b80 | out: hFindFile=0x381b80) returned 1 [0128.419] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Internet Explorer\\*", lpFindFileData=0x31e3f4 | out: lpFindFileData=0x31e3f4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x28d257a0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x1d705b70, ftLastAccessTime.dwHighDateTime=0x1d35d06, ftLastWriteTime.dwLowDateTime=0x1d705b70, ftLastWriteTime.dwHighDateTime=0x1d35d06, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x381b80 [0128.420] FindNextFileW (in: hFindFile=0x381b80, lpFindFileData=0x31e404 | out: lpFindFileData=0x31e404*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x28d257a0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x1d705b70, ftLastAccessTime.dwHighDateTime=0x1d35d06, ftLastWriteTime.dwLowDateTime=0x1d705b70, ftLastWriteTime.dwHighDateTime=0x1d35d06, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0128.420] FindNextFileW (in: hFindFile=0x381b80, lpFindFileData=0x31e404 | out: lpFindFileData=0x31e404*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x28f14980, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28f14980, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xb371c2, ftLastWriteTime.dwHighDateTime=0x1cb8927, nFileSizeHigh=0x0, nFileSizeLow=0x2fa9, dwReserved0=0x0, dwReserved1=0x0, cFileName="brndlog.bak", cAlternateFileName="")) returned 1 [0128.420] FindNextFileW (in: hFindFile=0x381b80, lpFindFileData=0x31e404 | out: lpFindFileData=0x31e404*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x28f14980, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28f14980, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xb8f8f60, ftLastWriteTime.dwHighDateTime=0x1d6eb7f, nFileSizeHigh=0x0, nFileSizeLow=0x2fc0, dwReserved0=0x0, dwReserved1=0x0, cFileName="brndlog.txt", cAlternateFileName="")) returned 1 [0128.420] FindNextFileW (in: hFindFile=0x381b80, lpFindFileData=0x31e404 | out: lpFindFileData=0x31e404*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0x1d705b70, ftCreationTime.dwHighDateTime=0x1d35d06, ftLastAccessTime.dwLowDateTime=0x1d705b70, ftLastAccessTime.dwHighDateTime=0x1d35d06, ftLastWriteTime.dwLowDateTime=0x1d705b70, ftLastWriteTime.dwHighDateTime=0x1d35d06, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="DOMStore", cAlternateFileName="")) returned 1 [0128.420] FindNextFileW (in: hFindFile=0x381b80, lpFindFileData=0x31e404 | out: lpFindFileData=0x31e404*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x65d58120, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x65d58120, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x65d58120, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x23f4, dwReserved0=0x0, dwReserved1=0x0, cFileName="frameiconcache.dat", cAlternateFileName="FRAMEI~1.DAT")) returned 1 [0128.420] FindNextFileW (in: hFindFile=0x381b80, lpFindFileData=0x31e404 | out: lpFindFileData=0x31e404*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x95014270, ftCreationTime.dwHighDateTime=0x1d2fab5, ftLastAccessTime.dwLowDateTime=0x95014270, ftLastAccessTime.dwHighDateTime=0x1d2fab5, ftLastWriteTime.dwLowDateTime=0x95014270, ftLastWriteTime.dwHighDateTime=0x1d2fab5, nFileSizeHigh=0x0, nFileSizeLow=0x4000, dwReserved0=0x0, dwReserved1=0x0, cFileName="MSIMGSIZ.DAT", cAlternateFileName="")) returned 1 [0128.420] FindNextFileW (in: hFindFile=0x381b80, lpFindFileData=0x31e404 | out: lpFindFileData=0x31e404*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x4ed4ae10, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x6db5fbe0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x6db5fbe0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Recovery", cAlternateFileName="")) returned 1 [0128.420] FindNextFileW (in: hFindFile=0x381b80, lpFindFileData=0x31e404 | out: lpFindFileData=0x31e404*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x4ed4ae10, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x6db5fbe0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x6db5fbe0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Recovery", cAlternateFileName="")) returned 0 [0128.421] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Internet Explorer\\*", lpFindFileData=0x31e3f4 | out: lpFindFileData=0x31e3f4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x28d257a0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x1d705b70, ftLastAccessTime.dwHighDateTime=0x1d35d06, ftLastWriteTime.dwLowDateTime=0x1d705b70, ftLastWriteTime.dwHighDateTime=0x1d35d06, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x381b80 [0128.421] FindNextFileW (in: hFindFile=0x381b80, lpFindFileData=0x31e404 | out: lpFindFileData=0x31e404*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x28d257a0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x1d705b70, ftLastAccessTime.dwHighDateTime=0x1d35d06, ftLastWriteTime.dwLowDateTime=0x1d705b70, ftLastWriteTime.dwHighDateTime=0x1d35d06, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0128.421] FindNextFileW (in: hFindFile=0x381b80, lpFindFileData=0x31e404 | out: lpFindFileData=0x31e404*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x28f14980, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28f14980, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xb371c2, ftLastWriteTime.dwHighDateTime=0x1cb8927, nFileSizeHigh=0x0, nFileSizeLow=0x2fa9, dwReserved0=0x0, dwReserved1=0x0, cFileName="brndlog.bak", cAlternateFileName="")) returned 1 [0128.421] FindNextFileW (in: hFindFile=0x381b80, lpFindFileData=0x31e404 | out: lpFindFileData=0x31e404*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x28f14980, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28f14980, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xb8f8f60, ftLastWriteTime.dwHighDateTime=0x1d6eb7f, nFileSizeHigh=0x0, nFileSizeLow=0x2fc0, dwReserved0=0x0, dwReserved1=0x0, cFileName="brndlog.txt", cAlternateFileName="")) returned 1 [0128.421] FindNextFileW (in: hFindFile=0x381b80, lpFindFileData=0x31e404 | out: lpFindFileData=0x31e404*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0x1d705b70, ftCreationTime.dwHighDateTime=0x1d35d06, ftLastAccessTime.dwLowDateTime=0x1d705b70, ftLastAccessTime.dwHighDateTime=0x1d35d06, ftLastWriteTime.dwLowDateTime=0x1d705b70, ftLastWriteTime.dwHighDateTime=0x1d35d06, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="DOMStore", cAlternateFileName="")) returned 1 [0128.422] FindNextFileW (in: hFindFile=0x381b80, lpFindFileData=0x31e404 | out: lpFindFileData=0x31e404*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x65d58120, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x65d58120, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x65d58120, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x23f4, dwReserved0=0x0, dwReserved1=0x0, cFileName="frameiconcache.dat", cAlternateFileName="FRAMEI~1.DAT")) returned 1 [0128.422] FindNextFileW (in: hFindFile=0x381b80, lpFindFileData=0x31e404 | out: lpFindFileData=0x31e404*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x95014270, ftCreationTime.dwHighDateTime=0x1d2fab5, ftLastAccessTime.dwLowDateTime=0x95014270, ftLastAccessTime.dwHighDateTime=0x1d2fab5, ftLastWriteTime.dwLowDateTime=0x95014270, ftLastWriteTime.dwHighDateTime=0x1d2fab5, nFileSizeHigh=0x0, nFileSizeLow=0x4000, dwReserved0=0x0, dwReserved1=0x0, cFileName="MSIMGSIZ.DAT", cAlternateFileName="")) returned 1 [0128.422] FindNextFileW (in: hFindFile=0x381b80, lpFindFileData=0x31e404 | out: lpFindFileData=0x31e404*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x4ed4ae10, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x6db5fbe0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x6db5fbe0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Recovery", cAlternateFileName="")) returned 1 [0128.422] FindNextFileW (in: hFindFile=0x381b80, lpFindFileData=0x31e404 | out: lpFindFileData=0x31e404*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0128.423] ReadFile (in: hFile=0x274, lpBuffer=0x27432f0, nNumberOfBytesToRead=0x2fc0, lpNumberOfBytesRead=0x31e63c, lpOverlapped=0x0 | out: lpBuffer=0x27432f0*, lpNumberOfBytesRead=0x31e63c*=0x2fc0, lpOverlapped=0x0) returned 1 [0128.426] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Internet Explorer\\brndlog.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\internet explorer\\brndlog.txt"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Internet Explorer\\brndlog.txt.[neftet@tutanota.com].boom" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\internet explorer\\brndlog.txt.[neftet@tutanota.com].boom")) returned 1 [0128.427] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Internet Explorer\\DOMStore\\*", lpFindFileData=0x31e37c | out: lpFindFileData=0x31e37c*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0x1d705b70, ftCreationTime.dwHighDateTime=0x1d35d06, ftLastAccessTime.dwLowDateTime=0x1d705b70, ftLastAccessTime.dwHighDateTime=0x1d35d06, ftLastWriteTime.dwLowDateTime=0x1d705b70, ftLastWriteTime.dwHighDateTime=0x1d35d06, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x381b80 [0128.427] FindNextFileW (in: hFindFile=0x381b80, lpFindFileData=0x31e38c | out: lpFindFileData=0x31e38c*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0x1d705b70, ftCreationTime.dwHighDateTime=0x1d35d06, ftLastAccessTime.dwLowDateTime=0x1d705b70, ftLastAccessTime.dwHighDateTime=0x1d35d06, ftLastWriteTime.dwLowDateTime=0x1d705b70, ftLastWriteTime.dwHighDateTime=0x1d35d06, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0128.427] FindNextFileW (in: hFindFile=0x381b80, lpFindFileData=0x31e38c | out: lpFindFileData=0x31e38c*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0x1d705b70, ftCreationTime.dwHighDateTime=0x1d35d06, ftLastAccessTime.dwLowDateTime=0x1d705b70, ftLastAccessTime.dwHighDateTime=0x1d35d06, ftLastWriteTime.dwLowDateTime=0x1d705b70, ftLastWriteTime.dwHighDateTime=0x1d35d06, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="3LKBQZJ3", cAlternateFileName="")) returned 1 [0128.427] FindNextFileW (in: hFindFile=0x381b80, lpFindFileData=0x31e38c | out: lpFindFileData=0x31e38c*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0x1d705b70, ftCreationTime.dwHighDateTime=0x1d35d06, ftLastAccessTime.dwLowDateTime=0x1d705b70, ftLastAccessTime.dwHighDateTime=0x1d35d06, ftLastWriteTime.dwLowDateTime=0x1d705b70, ftLastWriteTime.dwHighDateTime=0x1d35d06, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="8NES5H33", cAlternateFileName="")) returned 1 [0128.428] FindNextFileW (in: hFindFile=0x381b80, lpFindFileData=0x31e38c | out: lpFindFileData=0x31e38c*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0x1d705b70, ftCreationTime.dwHighDateTime=0x1d35d06, ftLastAccessTime.dwLowDateTime=0x1d705b70, ftLastAccessTime.dwHighDateTime=0x1d35d06, ftLastWriteTime.dwLowDateTime=0x1d705b70, ftLastWriteTime.dwHighDateTime=0x1d35d06, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="FKLUIDU0", cAlternateFileName="")) returned 1 [0128.428] FindNextFileW (in: hFindFile=0x381b80, lpFindFileData=0x31e38c | out: lpFindFileData=0x31e38c*(dwFileAttributes=0x2026, ftCreationTime.dwLowDateTime=0x1d705b70, ftCreationTime.dwHighDateTime=0x1d35d06, ftLastAccessTime.dwLowDateTime=0x1d705b70, ftLastAccessTime.dwHighDateTime=0x1d35d06, ftLastWriteTime.dwLowDateTime=0x125db390, ftLastWriteTime.dwHighDateTime=0x1d35d06, nFileSizeHigh=0x0, nFileSizeLow=0x8000, dwReserved0=0x0, dwReserved1=0x0, cFileName="index.dat", cAlternateFileName="")) returned 1 [0128.428] FindNextFileW (in: hFindFile=0x381b80, lpFindFileData=0x31e38c | out: lpFindFileData=0x31e38c*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0x1d705b70, ftCreationTime.dwHighDateTime=0x1d35d06, ftLastAccessTime.dwLowDateTime=0x1d705b70, ftLastAccessTime.dwHighDateTime=0x1d35d06, ftLastWriteTime.dwLowDateTime=0x1d705b70, ftLastWriteTime.dwHighDateTime=0x1d35d06, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="OWLVMZRC", cAlternateFileName="")) returned 1 [0128.428] FindNextFileW (in: hFindFile=0x381b80, lpFindFileData=0x31e38c | out: lpFindFileData=0x31e38c*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0x1d705b70, ftCreationTime.dwHighDateTime=0x1d35d06, ftLastAccessTime.dwLowDateTime=0x1d705b70, ftLastAccessTime.dwHighDateTime=0x1d35d06, ftLastWriteTime.dwLowDateTime=0x1d705b70, ftLastWriteTime.dwHighDateTime=0x1d35d06, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="OWLVMZRC", cAlternateFileName="")) returned 0 [0128.428] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Internet Explorer\\DOMStore\\*", lpFindFileData=0x31e37c | out: lpFindFileData=0x31e37c*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0x1d705b70, ftCreationTime.dwHighDateTime=0x1d35d06, ftLastAccessTime.dwLowDateTime=0x1d705b70, ftLastAccessTime.dwHighDateTime=0x1d35d06, ftLastWriteTime.dwLowDateTime=0x1d705b70, ftLastWriteTime.dwHighDateTime=0x1d35d06, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x381b80 [0128.428] FindNextFileW (in: hFindFile=0x381b80, lpFindFileData=0x31e38c | out: lpFindFileData=0x31e38c*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0x1d705b70, ftCreationTime.dwHighDateTime=0x1d35d06, ftLastAccessTime.dwLowDateTime=0x1d705b70, ftLastAccessTime.dwHighDateTime=0x1d35d06, ftLastWriteTime.dwLowDateTime=0x1d705b70, ftLastWriteTime.dwHighDateTime=0x1d35d06, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0128.428] FindNextFileW (in: hFindFile=0x381b80, lpFindFileData=0x31e38c | out: lpFindFileData=0x31e38c*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0x1d705b70, ftCreationTime.dwHighDateTime=0x1d35d06, ftLastAccessTime.dwLowDateTime=0x1d705b70, ftLastAccessTime.dwHighDateTime=0x1d35d06, ftLastWriteTime.dwLowDateTime=0x1d705b70, ftLastWriteTime.dwHighDateTime=0x1d35d06, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="3LKBQZJ3", cAlternateFileName="")) returned 1 [0128.428] FindNextFileW (in: hFindFile=0x381b80, lpFindFileData=0x31e38c | out: lpFindFileData=0x31e38c*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0x1d705b70, ftCreationTime.dwHighDateTime=0x1d35d06, ftLastAccessTime.dwLowDateTime=0x1d705b70, ftLastAccessTime.dwHighDateTime=0x1d35d06, ftLastWriteTime.dwLowDateTime=0x1d705b70, ftLastWriteTime.dwHighDateTime=0x1d35d06, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="8NES5H33", cAlternateFileName="")) returned 1 [0128.428] FindNextFileW (in: hFindFile=0x381b80, lpFindFileData=0x31e38c | out: lpFindFileData=0x31e38c*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0x1d705b70, ftCreationTime.dwHighDateTime=0x1d35d06, ftLastAccessTime.dwLowDateTime=0x1d705b70, ftLastAccessTime.dwHighDateTime=0x1d35d06, ftLastWriteTime.dwLowDateTime=0x1d705b70, ftLastWriteTime.dwHighDateTime=0x1d35d06, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="FKLUIDU0", cAlternateFileName="")) returned 1 [0128.428] FindNextFileW (in: hFindFile=0x381b80, lpFindFileData=0x31e38c | out: lpFindFileData=0x31e38c*(dwFileAttributes=0x2026, ftCreationTime.dwLowDateTime=0x1d705b70, ftCreationTime.dwHighDateTime=0x1d35d06, ftLastAccessTime.dwLowDateTime=0x1d705b70, ftLastAccessTime.dwHighDateTime=0x1d35d06, ftLastWriteTime.dwLowDateTime=0x125db390, ftLastWriteTime.dwHighDateTime=0x1d35d06, nFileSizeHigh=0x0, nFileSizeLow=0x8000, dwReserved0=0x0, dwReserved1=0x0, cFileName="index.dat", cAlternateFileName="")) returned 1 [0128.429] FindNextFileW (in: hFindFile=0x381b80, lpFindFileData=0x31e38c | out: lpFindFileData=0x31e38c*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0x1d705b70, ftCreationTime.dwHighDateTime=0x1d35d06, ftLastAccessTime.dwLowDateTime=0x1d705b70, ftLastAccessTime.dwHighDateTime=0x1d35d06, ftLastWriteTime.dwLowDateTime=0x1d705b70, ftLastWriteTime.dwHighDateTime=0x1d35d06, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="OWLVMZRC", cAlternateFileName="")) returned 1 [0128.429] FindNextFileW (in: hFindFile=0x381b80, lpFindFileData=0x31e38c | out: lpFindFileData=0x31e38c*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0128.429] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Internet Explorer\\DOMStore\\3LKBQZJ3\\*", lpFindFileData=0x31e304 | out: lpFindFileData=0x31e304*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0x1d705b70, ftCreationTime.dwHighDateTime=0x1d35d06, ftLastAccessTime.dwLowDateTime=0x1d705b70, ftLastAccessTime.dwHighDateTime=0x1d35d06, ftLastWriteTime.dwLowDateTime=0x1d705b70, ftLastWriteTime.dwHighDateTime=0x1d35d06, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x381b80 [0128.429] FindNextFileW (in: hFindFile=0x381b80, lpFindFileData=0x31e314 | out: lpFindFileData=0x31e314*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0x1d705b70, ftCreationTime.dwHighDateTime=0x1d35d06, ftLastAccessTime.dwLowDateTime=0x1d705b70, ftLastAccessTime.dwHighDateTime=0x1d35d06, ftLastWriteTime.dwLowDateTime=0x1d705b70, ftLastWriteTime.dwHighDateTime=0x1d35d06, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0128.429] FindNextFileW (in: hFindFile=0x381b80, lpFindFileData=0x31e314 | out: lpFindFileData=0x31e314*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0x1d705b70, ftCreationTime.dwHighDateTime=0x1d35d06, ftLastAccessTime.dwLowDateTime=0x1d705b70, ftLastAccessTime.dwHighDateTime=0x1d35d06, ftLastWriteTime.dwLowDateTime=0x1d705b70, ftLastWriteTime.dwHighDateTime=0x1d35d06, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 0 [0128.430] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Internet Explorer\\DOMStore\\3LKBQZJ3\\*", lpFindFileData=0x31e304 | out: lpFindFileData=0x31e304*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0x1d705b70, ftCreationTime.dwHighDateTime=0x1d35d06, ftLastAccessTime.dwLowDateTime=0x1d705b70, ftLastAccessTime.dwHighDateTime=0x1d35d06, ftLastWriteTime.dwLowDateTime=0x1d705b70, ftLastWriteTime.dwHighDateTime=0x1d35d06, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x381b80 [0128.430] FindNextFileW (in: hFindFile=0x381b80, lpFindFileData=0x31e314 | out: lpFindFileData=0x31e314*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0x1d705b70, ftCreationTime.dwHighDateTime=0x1d35d06, ftLastAccessTime.dwLowDateTime=0x1d705b70, ftLastAccessTime.dwHighDateTime=0x1d35d06, ftLastWriteTime.dwLowDateTime=0x1d705b70, ftLastWriteTime.dwHighDateTime=0x1d35d06, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0128.431] FindNextFileW (in: hFindFile=0x381b80, lpFindFileData=0x31e314 | out: lpFindFileData=0x31e314*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0x1d705b70, ftCreationTime.dwHighDateTime=0x1d35d06, ftLastAccessTime.dwLowDateTime=0x1d705b70, ftLastAccessTime.dwHighDateTime=0x1d35d06, ftLastWriteTime.dwLowDateTime=0x1d705b70, ftLastWriteTime.dwHighDateTime=0x1d35d06, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 0 [0128.431] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Internet Explorer\\DOMStore\\8NES5H33\\*", lpFindFileData=0x31e304 | out: lpFindFileData=0x31e304*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0x1d705b70, ftCreationTime.dwHighDateTime=0x1d35d06, ftLastAccessTime.dwLowDateTime=0x1d705b70, ftLastAccessTime.dwHighDateTime=0x1d35d06, ftLastWriteTime.dwLowDateTime=0x1d705b70, ftLastWriteTime.dwHighDateTime=0x1d35d06, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x381b80 [0128.431] FindNextFileW (in: hFindFile=0x381b80, lpFindFileData=0x31e314 | out: lpFindFileData=0x31e314*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0x1d705b70, ftCreationTime.dwHighDateTime=0x1d35d06, ftLastAccessTime.dwLowDateTime=0x1d705b70, ftLastAccessTime.dwHighDateTime=0x1d35d06, ftLastWriteTime.dwLowDateTime=0x1d705b70, ftLastWriteTime.dwHighDateTime=0x1d35d06, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0128.431] FindNextFileW (in: hFindFile=0x381b80, lpFindFileData=0x31e314 | out: lpFindFileData=0x31e314*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x1d705b70, ftCreationTime.dwHighDateTime=0x1d35d06, ftLastAccessTime.dwLowDateTime=0x1d705b70, ftLastAccessTime.dwHighDateTime=0x1d35d06, ftLastWriteTime.dwLowDateTime=0xb96b380, ftLastWriteTime.dwHighDateTime=0x1d6eb7f, nFileSizeHigh=0x0, nFileSizeLow=0x10, dwReserved0=0x0, dwReserved1=0x0, cFileName="get.adobe[1].xml", cAlternateFileName="GETADO~1.XML")) returned 1 [0128.431] FindNextFileW (in: hFindFile=0x381b80, lpFindFileData=0x31e314 | out: lpFindFileData=0x31e314*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0128.431] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Internet Explorer\\DOMStore\\8NES5H33\\*", lpFindFileData=0x31e304 | out: lpFindFileData=0x31e304*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0x1d705b70, ftCreationTime.dwHighDateTime=0x1d35d06, ftLastAccessTime.dwLowDateTime=0x1d705b70, ftLastAccessTime.dwHighDateTime=0x1d35d06, ftLastWriteTime.dwLowDateTime=0x1d705b70, ftLastWriteTime.dwHighDateTime=0x1d35d06, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x381b80 [0128.431] FindNextFileW (in: hFindFile=0x381b80, lpFindFileData=0x31e314 | out: lpFindFileData=0x31e314*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0x1d705b70, ftCreationTime.dwHighDateTime=0x1d35d06, ftLastAccessTime.dwLowDateTime=0x1d705b70, ftLastAccessTime.dwHighDateTime=0x1d35d06, ftLastWriteTime.dwLowDateTime=0x1d705b70, ftLastWriteTime.dwHighDateTime=0x1d35d06, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0128.431] FindNextFileW (in: hFindFile=0x381b80, lpFindFileData=0x31e314 | out: lpFindFileData=0x31e314*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x1d705b70, ftCreationTime.dwHighDateTime=0x1d35d06, ftLastAccessTime.dwLowDateTime=0x1d705b70, ftLastAccessTime.dwHighDateTime=0x1d35d06, ftLastWriteTime.dwLowDateTime=0xb96b380, ftLastWriteTime.dwHighDateTime=0x1d6eb7f, nFileSizeHigh=0x0, nFileSizeLow=0x10, dwReserved0=0x0, dwReserved1=0x0, cFileName="get.adobe[1].xml", cAlternateFileName="GETADO~1.XML")) returned 1 [0128.432] FindNextFileW (in: hFindFile=0x381b80, lpFindFileData=0x31e314 | out: lpFindFileData=0x31e314*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x1d705b70, ftCreationTime.dwHighDateTime=0x1d35d06, ftLastAccessTime.dwLowDateTime=0x1d705b70, ftLastAccessTime.dwHighDateTime=0x1d35d06, ftLastWriteTime.dwLowDateTime=0xb96b380, ftLastWriteTime.dwHighDateTime=0x1d6eb7f, nFileSizeHigh=0x0, nFileSizeLow=0x10, dwReserved0=0x0, dwReserved1=0x0, cFileName="get.adobe[1].xml", cAlternateFileName="GETADO~1.XML")) returned 0 [0128.432] FindClose (in: hFindFile=0x381b80 | out: hFindFile=0x381b80) returned 1 [0128.432] CloseHandle (hObject=0x274) returned 1 [0128.433] WriteFile (in: hFile=0x274, lpBuffer=0x2753678*, nNumberOfBytesToWrite=0x10, lpNumberOfBytesWritten=0x31e514, lpOverlapped=0x0 | out: lpBuffer=0x2753678*, lpNumberOfBytesWritten=0x31e514*=0x10, lpOverlapped=0x0) returned 1 [0128.434] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Internet Explorer\\DOMStore\\8NES5H33\\get.adobe[1].xml" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\internet explorer\\domstore\\8nes5h33\\get.adobe[1].xml"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Internet Explorer\\DOMStore\\8NES5H33\\get.adobe[1].xml.[neftet@tutanota.com].boom" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\internet explorer\\domstore\\8nes5h33\\get.adobe[1].xml.[neftet@tutanota.com].boom")) returned 1 [0128.435] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Internet Explorer\\DOMStore\\FKLUIDU0\\*", lpFindFileData=0x31e304 | out: lpFindFileData=0x31e304*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0x1d705b70, ftCreationTime.dwHighDateTime=0x1d35d06, ftLastAccessTime.dwLowDateTime=0x1d705b70, ftLastAccessTime.dwHighDateTime=0x1d35d06, ftLastWriteTime.dwLowDateTime=0x1d705b70, ftLastWriteTime.dwHighDateTime=0x1d35d06, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x381b80 [0128.435] FindNextFileW (in: hFindFile=0x381b80, lpFindFileData=0x31e314 | out: lpFindFileData=0x31e314*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0x1d705b70, ftCreationTime.dwHighDateTime=0x1d35d06, ftLastAccessTime.dwLowDateTime=0x1d705b70, ftLastAccessTime.dwHighDateTime=0x1d35d06, ftLastWriteTime.dwLowDateTime=0x1d705b70, ftLastWriteTime.dwHighDateTime=0x1d35d06, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0128.435] FindNextFileW (in: hFindFile=0x381b80, lpFindFileData=0x31e314 | out: lpFindFileData=0x31e314*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0x1d705b70, ftCreationTime.dwHighDateTime=0x1d35d06, ftLastAccessTime.dwLowDateTime=0x1d705b70, ftLastAccessTime.dwHighDateTime=0x1d35d06, ftLastWriteTime.dwLowDateTime=0x1d705b70, ftLastWriteTime.dwHighDateTime=0x1d35d06, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 0 [0128.436] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Internet Explorer\\DOMStore\\FKLUIDU0\\*", lpFindFileData=0x31e304 | out: lpFindFileData=0x31e304*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0x1d705b70, ftCreationTime.dwHighDateTime=0x1d35d06, ftLastAccessTime.dwLowDateTime=0x1d705b70, ftLastAccessTime.dwHighDateTime=0x1d35d06, ftLastWriteTime.dwLowDateTime=0x1d705b70, ftLastWriteTime.dwHighDateTime=0x1d35d06, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x381b80 [0128.436] FindNextFileW (in: hFindFile=0x381b80, lpFindFileData=0x31e314 | out: lpFindFileData=0x31e314*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0x1d705b70, ftCreationTime.dwHighDateTime=0x1d35d06, ftLastAccessTime.dwLowDateTime=0x1d705b70, ftLastAccessTime.dwHighDateTime=0x1d35d06, ftLastWriteTime.dwLowDateTime=0x1d705b70, ftLastWriteTime.dwHighDateTime=0x1d35d06, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0128.436] FindNextFileW (in: hFindFile=0x381b80, lpFindFileData=0x31e314 | out: lpFindFileData=0x31e314*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0x1d705b70, ftCreationTime.dwHighDateTime=0x1d35d06, ftLastAccessTime.dwLowDateTime=0x1d705b70, ftLastAccessTime.dwHighDateTime=0x1d35d06, ftLastWriteTime.dwLowDateTime=0x1d705b70, ftLastWriteTime.dwHighDateTime=0x1d35d06, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 0 [0128.436] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Internet Explorer\\DOMStore\\OWLVMZRC\\*", lpFindFileData=0x31e304 | out: lpFindFileData=0x31e304*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0x1d705b70, ftCreationTime.dwHighDateTime=0x1d35d06, ftLastAccessTime.dwLowDateTime=0x1d705b70, ftLastAccessTime.dwHighDateTime=0x1d35d06, ftLastWriteTime.dwLowDateTime=0x1d705b70, ftLastWriteTime.dwHighDateTime=0x1d35d06, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x381b80 [0128.436] FindNextFileW (in: hFindFile=0x381b80, lpFindFileData=0x31e314 | out: lpFindFileData=0x31e314*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0x1d705b70, ftCreationTime.dwHighDateTime=0x1d35d06, ftLastAccessTime.dwLowDateTime=0x1d705b70, ftLastAccessTime.dwHighDateTime=0x1d35d06, ftLastWriteTime.dwLowDateTime=0x1d705b70, ftLastWriteTime.dwHighDateTime=0x1d35d06, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0128.436] FindNextFileW (in: hFindFile=0x381b80, lpFindFileData=0x31e314 | out: lpFindFileData=0x31e314*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0x1d705b70, ftCreationTime.dwHighDateTime=0x1d35d06, ftLastAccessTime.dwLowDateTime=0x1d705b70, ftLastAccessTime.dwHighDateTime=0x1d35d06, ftLastWriteTime.dwLowDateTime=0x1d705b70, ftLastWriteTime.dwHighDateTime=0x1d35d06, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 0 [0128.436] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Internet Explorer\\DOMStore\\OWLVMZRC\\*", lpFindFileData=0x31e304 | out: lpFindFileData=0x31e304*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0x1d705b70, ftCreationTime.dwHighDateTime=0x1d35d06, ftLastAccessTime.dwLowDateTime=0x1d705b70, ftLastAccessTime.dwHighDateTime=0x1d35d06, ftLastWriteTime.dwLowDateTime=0x1d705b70, ftLastWriteTime.dwHighDateTime=0x1d35d06, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x381b80 [0128.437] FindNextFileW (in: hFindFile=0x381b80, lpFindFileData=0x31e314 | out: lpFindFileData=0x31e314*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0x1d705b70, ftCreationTime.dwHighDateTime=0x1d35d06, ftLastAccessTime.dwLowDateTime=0x1d705b70, ftLastAccessTime.dwHighDateTime=0x1d35d06, ftLastWriteTime.dwLowDateTime=0x1d705b70, ftLastWriteTime.dwHighDateTime=0x1d35d06, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0128.437] FindNextFileW (in: hFindFile=0x381b80, lpFindFileData=0x31e314 | out: lpFindFileData=0x31e314*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0x1d705b70, ftCreationTime.dwHighDateTime=0x1d35d06, ftLastAccessTime.dwLowDateTime=0x1d705b70, ftLastAccessTime.dwHighDateTime=0x1d35d06, ftLastWriteTime.dwLowDateTime=0x1d705b70, ftLastWriteTime.dwHighDateTime=0x1d35d06, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 0 [0128.437] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Internet Explorer\\Recovery\\*", lpFindFileData=0x31e37c | out: lpFindFileData=0x31e37c*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x4ed4ae10, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x6db5fbe0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x6db5fbe0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x381b80 [0128.437] FindNextFileW (in: hFindFile=0x381b80, lpFindFileData=0x31e38c | out: lpFindFileData=0x31e38c*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x4ed4ae10, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x6db5fbe0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x6db5fbe0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0128.437] FindNextFileW (in: hFindFile=0x381b80, lpFindFileData=0x31e38c | out: lpFindFileData=0x31e38c*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x4ed70f70, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x2bc84b10, ftLastAccessTime.dwHighDateTime=0x1d35d06, ftLastWriteTime.dwLowDateTime=0x2bc84b10, ftLastWriteTime.dwHighDateTime=0x1d35d06, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Active", cAlternateFileName="")) returned 1 [0128.437] FindNextFileW (in: hFindFile=0x381b80, lpFindFileData=0x31e38c | out: lpFindFileData=0x31e38c*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x6db5fbe0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x30603250, ftLastAccessTime.dwHighDateTime=0x1d35d06, ftLastWriteTime.dwLowDateTime=0x30603250, ftLastWriteTime.dwHighDateTime=0x1d35d06, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Last Active", cAlternateFileName="LASTAC~1")) returned 1 [0128.437] FindNextFileW (in: hFindFile=0x381b80, lpFindFileData=0x31e38c | out: lpFindFileData=0x31e38c*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x6db5fbe0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x30603250, ftLastAccessTime.dwHighDateTime=0x1d35d06, ftLastWriteTime.dwLowDateTime=0x30603250, ftLastWriteTime.dwHighDateTime=0x1d35d06, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Last Active", cAlternateFileName="LASTAC~1")) returned 0 [0128.437] FindClose (in: hFindFile=0x381b80 | out: hFindFile=0x381b80) returned 1 [0128.437] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Internet Explorer\\Recovery\\*", lpFindFileData=0x31e37c | out: lpFindFileData=0x31e37c*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x4ed4ae10, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x6db5fbe0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x6db5fbe0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x381b80 [0128.438] FindNextFileW (in: hFindFile=0x381b80, lpFindFileData=0x31e38c | out: lpFindFileData=0x31e38c*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x4ed4ae10, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x6db5fbe0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x6db5fbe0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0128.438] FindNextFileW (in: hFindFile=0x381b80, lpFindFileData=0x31e38c | out: lpFindFileData=0x31e38c*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x4ed70f70, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x2bc84b10, ftLastAccessTime.dwHighDateTime=0x1d35d06, ftLastWriteTime.dwLowDateTime=0x2bc84b10, ftLastWriteTime.dwHighDateTime=0x1d35d06, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Active", cAlternateFileName="")) returned 1 [0128.438] FindNextFileW (in: hFindFile=0x381b80, lpFindFileData=0x31e38c | out: lpFindFileData=0x31e38c*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x6db5fbe0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x30603250, ftLastAccessTime.dwHighDateTime=0x1d35d06, ftLastWriteTime.dwLowDateTime=0x30603250, ftLastWriteTime.dwHighDateTime=0x1d35d06, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Last Active", cAlternateFileName="LASTAC~1")) returned 1 [0128.438] FindNextFileW (in: hFindFile=0x381b80, lpFindFileData=0x31e38c | out: lpFindFileData=0x31e38c*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0128.438] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Internet Explorer\\Recovery\\Active\\*", lpFindFileData=0x31e304 | out: lpFindFileData=0x31e304*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x4ed70f70, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x2bc84b10, ftLastAccessTime.dwHighDateTime=0x1d35d06, ftLastWriteTime.dwLowDateTime=0x2bc84b10, ftLastWriteTime.dwHighDateTime=0x1d35d06, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x381b80 [0128.438] FindNextFileW (in: hFindFile=0x381b80, lpFindFileData=0x31e314 | out: lpFindFileData=0x31e314*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x4ed70f70, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x2bc84b10, ftLastAccessTime.dwHighDateTime=0x1d35d06, ftLastWriteTime.dwLowDateTime=0x2bc84b10, ftLastWriteTime.dwHighDateTime=0x1d35d06, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0128.438] FindNextFileW (in: hFindFile=0x381b80, lpFindFileData=0x31e314 | out: lpFindFileData=0x31e314*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x4ed70f70, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x2bc84b10, ftLastAccessTime.dwHighDateTime=0x1d35d06, ftLastWriteTime.dwLowDateTime=0x2bc84b10, ftLastWriteTime.dwHighDateTime=0x1d35d06, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 0 [0128.439] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Internet Explorer\\Recovery\\Active\\*", lpFindFileData=0x31e304 | out: lpFindFileData=0x31e304*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x4ed70f70, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x2bc84b10, ftLastAccessTime.dwHighDateTime=0x1d35d06, ftLastWriteTime.dwLowDateTime=0x2bc84b10, ftLastWriteTime.dwHighDateTime=0x1d35d06, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x381b80 [0128.439] FindNextFileW (in: hFindFile=0x381b80, lpFindFileData=0x31e314 | out: lpFindFileData=0x31e314*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x4ed70f70, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x2bc84b10, ftLastAccessTime.dwHighDateTime=0x1d35d06, ftLastWriteTime.dwLowDateTime=0x2bc84b10, ftLastWriteTime.dwHighDateTime=0x1d35d06, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0128.439] FindNextFileW (in: hFindFile=0x381b80, lpFindFileData=0x31e314 | out: lpFindFileData=0x31e314*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x4ed70f70, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x2bc84b10, ftLastAccessTime.dwHighDateTime=0x1d35d06, ftLastWriteTime.dwLowDateTime=0x2bc84b10, ftLastWriteTime.dwHighDateTime=0x1d35d06, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 0 [0128.439] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Internet Explorer\\Recovery\\Last Active\\*", lpFindFileData=0x31e304 | out: lpFindFileData=0x31e304*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x6db5fbe0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x30603250, ftLastAccessTime.dwHighDateTime=0x1d35d06, ftLastWriteTime.dwLowDateTime=0x30603250, ftLastWriteTime.dwHighDateTime=0x1d35d06, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x381b80 [0128.440] FindNextFileW (in: hFindFile=0x381b80, lpFindFileData=0x31e314 | out: lpFindFileData=0x31e314*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x6db5fbe0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x30603250, ftLastAccessTime.dwHighDateTime=0x1d35d06, ftLastWriteTime.dwLowDateTime=0x30603250, ftLastWriteTime.dwHighDateTime=0x1d35d06, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0128.440] FindNextFileW (in: hFindFile=0x381b80, lpFindFileData=0x31e314 | out: lpFindFileData=0x31e314*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xe35acf0, ftCreationTime.dwHighDateTime=0x1d35d06, ftLastAccessTime.dwLowDateTime=0xe35acf0, ftLastAccessTime.dwHighDateTime=0x1d35d06, ftLastWriteTime.dwLowDateTime=0x306293b0, ftLastWriteTime.dwHighDateTime=0x1d35d06, nFileSizeHigh=0x0, nFileSizeLow=0xe00, dwReserved0=0x0, dwReserved1=0x0, cFileName="RecoveryStore.{4BD650F1-C8F9-11E7-B5BF-C43DC7584A00}.dat", cAlternateFileName="RECOVE~2.DAT")) returned 1 [0128.440] FindNextFileW (in: hFindFile=0x381b80, lpFindFileData=0x31e314 | out: lpFindFileData=0x31e314*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x6dd28c60, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x6dd28c60, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0xe35acf0, ftLastWriteTime.dwHighDateTime=0x1d35d06, nFileSizeHigh=0x0, nFileSizeLow=0x1200, dwReserved0=0x0, dwReserved1=0x0, cFileName="RecoveryStore.{AAE6BF5C-4991-11E7-8E2B-C43DC7584A00}.dat", cAlternateFileName="RECOVE~1.DAT")) returned 1 [0128.440] FindNextFileW (in: hFindFile=0x381b80, lpFindFileData=0x31e314 | out: lpFindFileData=0x31e314*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xe35acf0, ftCreationTime.dwHighDateTime=0x1d35d06, ftLastAccessTime.dwLowDateTime=0xe35acf0, ftLastAccessTime.dwHighDateTime=0x1d35d06, ftLastWriteTime.dwLowDateTime=0xe35acf0, ftLastWriteTime.dwHighDateTime=0x1d35d06, nFileSizeHigh=0x0, nFileSizeLow=0x1200, dwReserved0=0x0, dwReserved1=0x0, cFileName="{4BD650F0-C8F9-11E7-B5BF-C43DC7584A00}.dat", cAlternateFileName="{4BD65~1.DAT")) returned 1 [0128.440] FindNextFileW (in: hFindFile=0x381b80, lpFindFileData=0x31e314 | out: lpFindFileData=0x31e314*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x30603250, ftCreationTime.dwHighDateTime=0x1d35d06, ftLastAccessTime.dwLowDateTime=0x30603250, ftLastAccessTime.dwHighDateTime=0x1d35d06, ftLastWriteTime.dwLowDateTime=0x306293b0, ftLastWriteTime.dwHighDateTime=0x1d35d06, nFileSizeHigh=0x0, nFileSizeLow=0x1200, dwReserved0=0x0, dwReserved1=0x0, cFileName="{69512155-C8F9-11E7-B5BF-C43DC7584A00}.dat", cAlternateFileName="{69512~1.DAT")) returned 1 [0128.440] FindNextFileW (in: hFindFile=0x381b80, lpFindFileData=0x31e314 | out: lpFindFileData=0x31e314*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0128.441] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Internet Explorer\\Recovery\\Last Active\\*", lpFindFileData=0x31e304 | out: lpFindFileData=0x31e304*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x6db5fbe0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x30603250, ftLastAccessTime.dwHighDateTime=0x1d35d06, ftLastWriteTime.dwLowDateTime=0x30603250, ftLastWriteTime.dwHighDateTime=0x1d35d06, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x381b80 [0128.442] FindNextFileW (in: hFindFile=0x381b80, lpFindFileData=0x31e314 | out: lpFindFileData=0x31e314*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x6db5fbe0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x30603250, ftLastAccessTime.dwHighDateTime=0x1d35d06, ftLastWriteTime.dwLowDateTime=0x30603250, ftLastWriteTime.dwHighDateTime=0x1d35d06, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0128.442] FindNextFileW (in: hFindFile=0x381b80, lpFindFileData=0x31e314 | out: lpFindFileData=0x31e314*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xe35acf0, ftCreationTime.dwHighDateTime=0x1d35d06, ftLastAccessTime.dwLowDateTime=0xe35acf0, ftLastAccessTime.dwHighDateTime=0x1d35d06, ftLastWriteTime.dwLowDateTime=0x306293b0, ftLastWriteTime.dwHighDateTime=0x1d35d06, nFileSizeHigh=0x0, nFileSizeLow=0xe00, dwReserved0=0x0, dwReserved1=0x0, cFileName="RecoveryStore.{4BD650F1-C8F9-11E7-B5BF-C43DC7584A00}.dat", cAlternateFileName="RECOVE~2.DAT")) returned 1 [0128.442] FindNextFileW (in: hFindFile=0x381b80, lpFindFileData=0x31e314 | out: lpFindFileData=0x31e314*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x6dd28c60, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x6dd28c60, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0xe35acf0, ftLastWriteTime.dwHighDateTime=0x1d35d06, nFileSizeHigh=0x0, nFileSizeLow=0x1200, dwReserved0=0x0, dwReserved1=0x0, cFileName="RecoveryStore.{AAE6BF5C-4991-11E7-8E2B-C43DC7584A00}.dat", cAlternateFileName="RECOVE~1.DAT")) returned 1 [0128.442] FindNextFileW (in: hFindFile=0x381b80, lpFindFileData=0x31e314 | out: lpFindFileData=0x31e314*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xe35acf0, ftCreationTime.dwHighDateTime=0x1d35d06, ftLastAccessTime.dwLowDateTime=0xe35acf0, ftLastAccessTime.dwHighDateTime=0x1d35d06, ftLastWriteTime.dwLowDateTime=0xe35acf0, ftLastWriteTime.dwHighDateTime=0x1d35d06, nFileSizeHigh=0x0, nFileSizeLow=0x1200, dwReserved0=0x0, dwReserved1=0x0, cFileName="{4BD650F0-C8F9-11E7-B5BF-C43DC7584A00}.dat", cAlternateFileName="{4BD65~1.DAT")) returned 1 [0128.442] FindNextFileW (in: hFindFile=0x381b80, lpFindFileData=0x31e314 | out: lpFindFileData=0x31e314*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x30603250, ftCreationTime.dwHighDateTime=0x1d35d06, ftLastAccessTime.dwLowDateTime=0x30603250, ftLastAccessTime.dwHighDateTime=0x1d35d06, ftLastWriteTime.dwLowDateTime=0x306293b0, ftLastWriteTime.dwHighDateTime=0x1d35d06, nFileSizeHigh=0x0, nFileSizeLow=0x1200, dwReserved0=0x0, dwReserved1=0x0, cFileName="{69512155-C8F9-11E7-B5BF-C43DC7584A00}.dat", cAlternateFileName="{69512~1.DAT")) returned 1 [0128.442] FindNextFileW (in: hFindFile=0x381b80, lpFindFileData=0x31e314 | out: lpFindFileData=0x31e314*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x30603250, ftCreationTime.dwHighDateTime=0x1d35d06, ftLastAccessTime.dwLowDateTime=0x30603250, ftLastAccessTime.dwHighDateTime=0x1d35d06, ftLastWriteTime.dwLowDateTime=0x306293b0, ftLastWriteTime.dwHighDateTime=0x1d35d06, nFileSizeHigh=0x0, nFileSizeLow=0x1200, dwReserved0=0x0, dwReserved1=0x0, cFileName="{69512155-C8F9-11E7-B5BF-C43DC7584A00}.dat", cAlternateFileName="{69512~1.DAT")) returned 0 [0128.442] FindClose (in: hFindFile=0x381b80 | out: hFindFile=0x381b80) returned 1 [0128.443] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Media Player\\*", lpFindFileData=0x31e3f4 | out: lpFindFileData=0x31e3f4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x28d257a0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0xf7f22040, ftLastAccessTime.dwHighDateTime=0x1d3373f, ftLastWriteTime.dwLowDateTime=0xf7f22040, ftLastWriteTime.dwHighDateTime=0x1d3373f, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x381b80 [0128.443] FindNextFileW (in: hFindFile=0x381b80, lpFindFileData=0x31e404 | out: lpFindFileData=0x31e404*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x28d257a0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0xf7f22040, ftLastAccessTime.dwHighDateTime=0x1d3373f, ftLastWriteTime.dwLowDateTime=0xf7f22040, ftLastWriteTime.dwHighDateTime=0x1d3373f, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0128.443] FindNextFileW (in: hFindFile=0x381b80, lpFindFileData=0x31e404 | out: lpFindFileData=0x31e404*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x28eee820, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28eee820, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x2cf59b80, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x105000, dwReserved0=0x0, dwReserved1=0x0, cFileName="CurrentDatabase_372.wmdb", cAlternateFileName="CURREN~1.WMD")) returned 1 [0128.443] FindNextFileW (in: hFindFile=0x381b80, lpFindFileData=0x31e404 | out: lpFindFileData=0x31e404*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x28eee820, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x2cf33a20, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x2cf33a20, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x1106c, dwReserved0=0x0, dwReserved1=0x0, cFileName="LocalMLS_3.wmdb", cAlternateFileName="LOCALM~1.WMD")) returned 1 [0128.443] FindNextFileW (in: hFindFile=0x381b80, lpFindFileData=0x31e404 | out: lpFindFileData=0x31e404*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x28d257a0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28d257a0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xf73e9a4c, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Sync Playlists", cAlternateFileName="SYNCPL~1")) returned 1 [0128.443] FindNextFileW (in: hFindFile=0x381b80, lpFindFileData=0x31e404 | out: lpFindFileData=0x31e404*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xf7f22040, ftCreationTime.dwHighDateTime=0x1d3373f, ftLastAccessTime.dwLowDateTime=0xf7f22040, ftLastAccessTime.dwHighDateTime=0x1d3373f, ftLastWriteTime.dwLowDateTime=0xf7f22040, ftLastWriteTime.dwHighDateTime=0x1d3373f, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Transcoded Files Cache", cAlternateFileName="TRANSC~1")) returned 1 [0128.444] FindNextFileW (in: hFindFile=0x381b80, lpFindFileData=0x31e404 | out: lpFindFileData=0x31e404*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xf7f22040, ftCreationTime.dwHighDateTime=0x1d3373f, ftLastAccessTime.dwLowDateTime=0xf7f22040, ftLastAccessTime.dwHighDateTime=0x1d3373f, ftLastWriteTime.dwLowDateTime=0xf7f22040, ftLastWriteTime.dwHighDateTime=0x1d3373f, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Transcoded Files Cache", cAlternateFileName="TRANSC~1")) returned 0 [0128.444] FindNextFileW (in: hFindFile=0x381b80, lpFindFileData=0x31e404 | out: lpFindFileData=0x31e404*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x28d257a0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0xf7f22040, ftLastAccessTime.dwHighDateTime=0x1d3373f, ftLastWriteTime.dwLowDateTime=0xf7f22040, ftLastWriteTime.dwHighDateTime=0x1d3373f, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0128.444] FindNextFileW (in: hFindFile=0x381b80, lpFindFileData=0x31e404 | out: lpFindFileData=0x31e404*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x28eee820, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28eee820, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x2cf59b80, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x105000, dwReserved0=0x0, dwReserved1=0x0, cFileName="CurrentDatabase_372.wmdb", cAlternateFileName="CURREN~1.WMD")) returned 1 [0128.444] FindNextFileW (in: hFindFile=0x381b80, lpFindFileData=0x31e404 | out: lpFindFileData=0x31e404*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x28eee820, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x2cf33a20, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x2cf33a20, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x1106c, dwReserved0=0x0, dwReserved1=0x0, cFileName="LocalMLS_3.wmdb", cAlternateFileName="LOCALM~1.WMD")) returned 1 [0128.444] FindNextFileW (in: hFindFile=0x381b80, lpFindFileData=0x31e404 | out: lpFindFileData=0x31e404*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x28d257a0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28d257a0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xf73e9a4c, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Sync Playlists", cAlternateFileName="SYNCPL~1")) returned 1 [0128.444] FindNextFileW (in: hFindFile=0x381b80, lpFindFileData=0x31e404 | out: lpFindFileData=0x31e404*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xf7f22040, ftCreationTime.dwHighDateTime=0x1d3373f, ftLastAccessTime.dwLowDateTime=0xf7f22040, ftLastAccessTime.dwHighDateTime=0x1d3373f, ftLastWriteTime.dwLowDateTime=0xf7f22040, ftLastWriteTime.dwHighDateTime=0x1d3373f, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Transcoded Files Cache", cAlternateFileName="TRANSC~1")) returned 1 [0128.444] FindNextFileW (in: hFindFile=0x381b80, lpFindFileData=0x31e404 | out: lpFindFileData=0x31e404*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0128.444] FindNextFileW (in: hFindFile=0x381b80, lpFindFileData=0x31e38c | out: lpFindFileData=0x31e38c*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x28d257a0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28d257a0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xf73e9a4c, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0128.444] FindNextFileW (in: hFindFile=0x381b80, lpFindFileData=0x31e38c | out: lpFindFileData=0x31e38c*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x28d257a0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x2ca96f80, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x2ca96f80, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="en-US", cAlternateFileName="")) returned 1 [0128.444] FindNextFileW (in: hFindFile=0x381b80, lpFindFileData=0x31e38c | out: lpFindFileData=0x31e38c*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x28d257a0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x2ca96f80, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x2ca96f80, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="en-US", cAlternateFileName="")) returned 0 [0128.444] FindNextFileW (in: hFindFile=0x381b80, lpFindFileData=0x31e38c | out: lpFindFileData=0x31e38c*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x28d257a0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28d257a0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xf73e9a4c, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0128.444] FindNextFileW (in: hFindFile=0x381b80, lpFindFileData=0x31e38c | out: lpFindFileData=0x31e38c*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x28d257a0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x2ca96f80, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x2ca96f80, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="en-US", cAlternateFileName="")) returned 1 [0128.445] FindNextFileW (in: hFindFile=0x381b80, lpFindFileData=0x31e38c | out: lpFindFileData=0x31e38c*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0128.445] FindNextFileW (in: hFindFile=0x381b80, lpFindFileData=0x31e314 | out: lpFindFileData=0x31e314*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x28d257a0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x2ca96f80, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x2ca96f80, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0128.445] FindNextFileW (in: hFindFile=0x381b80, lpFindFileData=0x31e314 | out: lpFindFileData=0x31e314*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x2ca96f80, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x2ca96f80, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x2ca96f80, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="0000E713", cAlternateFileName="")) returned 1 [0128.445] FindNextFileW (in: hFindFile=0x381b80, lpFindFileData=0x31e314 | out: lpFindFileData=0x31e314*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x28d257a0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28f14980, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xf740fbac, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="00010C6E", cAlternateFileName="")) returned 1 [0128.445] FindNextFileW (in: hFindFile=0x381b80, lpFindFileData=0x31e314 | out: lpFindFileData=0x31e314*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x28d257a0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28f14980, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xf740fbac, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="00010C6E", cAlternateFileName="")) returned 0 [0128.445] FindNextFileW (in: hFindFile=0x381b80, lpFindFileData=0x31e314 | out: lpFindFileData=0x31e314*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x28d257a0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x2ca96f80, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x2ca96f80, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0128.445] FindNextFileW (in: hFindFile=0x381b80, lpFindFileData=0x31e314 | out: lpFindFileData=0x31e314*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x2ca96f80, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x2ca96f80, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x2ca96f80, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="0000E713", cAlternateFileName="")) returned 1 [0128.445] FindNextFileW (in: hFindFile=0x381b80, lpFindFileData=0x31e314 | out: lpFindFileData=0x31e314*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x28d257a0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28f14980, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xf740fbac, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="00010C6E", cAlternateFileName="")) returned 1 [0128.445] FindNextFileW (in: hFindFile=0x381b80, lpFindFileData=0x31e314 | out: lpFindFileData=0x31e314*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0128.446] FindNextFileW (in: hFindFile=0x381b80, lpFindFileData=0x31e29c | out: lpFindFileData=0x31e29c*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x2ca96f80, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x2ca96f80, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x2ca96f80, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0128.446] FindNextFileW (in: hFindFile=0x381b80, lpFindFileData=0x31e29c | out: lpFindFileData=0x31e29c*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x2ca96f80, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x2ca96f80, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x2ca96f80, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x414, dwReserved0=0x0, dwReserved1=0x0, cFileName="01_Music_auto_rated_at_5_stars.wpl", cAlternateFileName="01_MUS~1.WPL")) returned 1 [0128.446] FindNextFileW (in: hFindFile=0x381b80, lpFindFileData=0x31e29c | out: lpFindFileData=0x31e29c*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x2ca96f80, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x2ca96f80, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x2ca96f80, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x4ff, dwReserved0=0x0, dwReserved1=0x0, cFileName="02_Music_added_in_the_last_month.wpl", cAlternateFileName="02_MUS~1.WPL")) returned 1 [0128.446] FindNextFileW (in: hFindFile=0x381b80, lpFindFileData=0x31e29c | out: lpFindFileData=0x31e29c*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x2ca96f80, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x2ca96f80, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x2ca96f80, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x4f3, dwReserved0=0x0, dwReserved1=0x0, cFileName="03_Music_rated_at_4_or_5_stars.wpl", cAlternateFileName="03_MUS~1.WPL")) returned 1 [0128.446] FindNextFileW (in: hFindFile=0x381b80, lpFindFileData=0x31e29c | out: lpFindFileData=0x31e29c*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x2ca96f80, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x2ca96f80, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x2ca96f80, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x504, dwReserved0=0x0, dwReserved1=0x0, cFileName="04_Music_played_in_the_last_month.wpl", cAlternateFileName="04_MUS~1.WPL")) returned 1 [0128.446] FindNextFileW (in: hFindFile=0x381b80, lpFindFileData=0x31e29c | out: lpFindFileData=0x31e29c*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x2ca96f80, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x2ca96f80, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x2ca96f80, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x31d, dwReserved0=0x0, dwReserved1=0x0, cFileName="05_Pictures_taken_in_the_last_month.wpl", cAlternateFileName="05_PIC~1.WPL")) returned 1 [0128.446] FindNextFileW (in: hFindFile=0x381b80, lpFindFileData=0x31e29c | out: lpFindFileData=0x31e29c*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x2ca96f80, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x2ca96f80, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x2ca96f80, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x311, dwReserved0=0x0, dwReserved1=0x0, cFileName="06_Pictures_rated_4_or_5_stars.wpl", cAlternateFileName="06_PIC~1.WPL")) returned 1 [0128.446] FindNextFileW (in: hFindFile=0x381b80, lpFindFileData=0x31e29c | out: lpFindFileData=0x31e29c*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x2ca96f80, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x2ca96f80, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x2ca96f80, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x410, dwReserved0=0x0, dwReserved1=0x0, cFileName="07_TV_recorded_in_the_last_week.wpl", cAlternateFileName="07_TV_~1.WPL")) returned 1 [0128.446] FindNextFileW (in: hFindFile=0x381b80, lpFindFileData=0x31e29c | out: lpFindFileData=0x31e29c*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x2ca96f80, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x2ca96f80, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x2ca96f80, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x3fc, dwReserved0=0x0, dwReserved1=0x0, cFileName="08_Video_rated_at_4_or_5_stars.wpl", cAlternateFileName="08_VID~1.WPL")) returned 1 [0128.446] FindNextFileW (in: hFindFile=0x381b80, lpFindFileData=0x31e29c | out: lpFindFileData=0x31e29c*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x2ca96f80, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x2ca96f80, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x2ca96f80, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x401, dwReserved0=0x0, dwReserved1=0x0, cFileName="09_Music_played_the_most.wpl", cAlternateFileName="09_MUS~1.WPL")) returned 1 [0128.446] FindNextFileW (in: hFindFile=0x381b80, lpFindFileData=0x31e29c | out: lpFindFileData=0x31e29c*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x2ca96f80, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x2ca96f80, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x2ca96f80, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x427, dwReserved0=0x0, dwReserved1=0x0, cFileName="10_All_Music.wpl", cAlternateFileName="10_ALL~1.WPL")) returned 1 [0128.446] FindNextFileW (in: hFindFile=0x381b80, lpFindFileData=0x31e29c | out: lpFindFileData=0x31e29c*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x2ca96f80, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x2ca96f80, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x2ca96f80, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x249, dwReserved0=0x0, dwReserved1=0x0, cFileName="11_All_Pictures.wpl", cAlternateFileName="11_ALL~1.WPL")) returned 1 [0128.446] FindNextFileW (in: hFindFile=0x381b80, lpFindFileData=0x31e29c | out: lpFindFileData=0x31e29c*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x2ca96f80, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x2ca96f80, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x2ca96f80, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x437, dwReserved0=0x0, dwReserved1=0x0, cFileName="12_All_Video.wpl", cAlternateFileName="12_ALL~1.WPL")) returned 1 [0128.446] FindNextFileW (in: hFindFile=0x381b80, lpFindFileData=0x31e29c | out: lpFindFileData=0x31e29c*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0128.448] FindNextFileW (in: hFindFile=0x381b80, lpFindFileData=0x31e29c | out: lpFindFileData=0x31e29c*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x2ca96f80, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x2ca96f80, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x2ca96f80, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0128.448] FindNextFileW (in: hFindFile=0x381b80, lpFindFileData=0x31e29c | out: lpFindFileData=0x31e29c*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x2ca96f80, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x2ca96f80, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x2ca96f80, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x414, dwReserved0=0x0, dwReserved1=0x0, cFileName="01_Music_auto_rated_at_5_stars.wpl", cAlternateFileName="01_MUS~1.WPL")) returned 1 [0128.448] FindNextFileW (in: hFindFile=0x381b80, lpFindFileData=0x31e29c | out: lpFindFileData=0x31e29c*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x2ca96f80, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x2ca96f80, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x2ca96f80, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x4ff, dwReserved0=0x0, dwReserved1=0x0, cFileName="02_Music_added_in_the_last_month.wpl", cAlternateFileName="02_MUS~1.WPL")) returned 1 [0128.448] FindNextFileW (in: hFindFile=0x381b80, lpFindFileData=0x31e29c | out: lpFindFileData=0x31e29c*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x2ca96f80, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x2ca96f80, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x2ca96f80, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x4f3, dwReserved0=0x0, dwReserved1=0x0, cFileName="03_Music_rated_at_4_or_5_stars.wpl", cAlternateFileName="03_MUS~1.WPL")) returned 1 [0128.448] FindNextFileW (in: hFindFile=0x381b80, lpFindFileData=0x31e29c | out: lpFindFileData=0x31e29c*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x2ca96f80, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x2ca96f80, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x2ca96f80, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x504, dwReserved0=0x0, dwReserved1=0x0, cFileName="04_Music_played_in_the_last_month.wpl", cAlternateFileName="04_MUS~1.WPL")) returned 1 [0128.448] FindNextFileW (in: hFindFile=0x381b80, lpFindFileData=0x31e29c | out: lpFindFileData=0x31e29c*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x2ca96f80, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x2ca96f80, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x2ca96f80, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x31d, dwReserved0=0x0, dwReserved1=0x0, cFileName="05_Pictures_taken_in_the_last_month.wpl", cAlternateFileName="05_PIC~1.WPL")) returned 1 [0128.448] FindNextFileW (in: hFindFile=0x381b80, lpFindFileData=0x31e29c | out: lpFindFileData=0x31e29c*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x2ca96f80, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x2ca96f80, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x2ca96f80, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x311, dwReserved0=0x0, dwReserved1=0x0, cFileName="06_Pictures_rated_4_or_5_stars.wpl", cAlternateFileName="06_PIC~1.WPL")) returned 1 [0128.448] FindNextFileW (in: hFindFile=0x381b80, lpFindFileData=0x31e29c | out: lpFindFileData=0x31e29c*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x2ca96f80, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x2ca96f80, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x2ca96f80, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x410, dwReserved0=0x0, dwReserved1=0x0, cFileName="07_TV_recorded_in_the_last_week.wpl", cAlternateFileName="07_TV_~1.WPL")) returned 1 [0128.448] FindNextFileW (in: hFindFile=0x381b80, lpFindFileData=0x31e29c | out: lpFindFileData=0x31e29c*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x2ca96f80, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x2ca96f80, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x2ca96f80, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x3fc, dwReserved0=0x0, dwReserved1=0x0, cFileName="08_Video_rated_at_4_or_5_stars.wpl", cAlternateFileName="08_VID~1.WPL")) returned 1 [0128.448] FindNextFileW (in: hFindFile=0x381b80, lpFindFileData=0x31e29c | out: lpFindFileData=0x31e29c*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x2ca96f80, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x2ca96f80, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x2ca96f80, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x401, dwReserved0=0x0, dwReserved1=0x0, cFileName="09_Music_played_the_most.wpl", cAlternateFileName="09_MUS~1.WPL")) returned 1 [0128.448] FindNextFileW (in: hFindFile=0x381b80, lpFindFileData=0x31e29c | out: lpFindFileData=0x31e29c*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x2ca96f80, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x2ca96f80, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x2ca96f80, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x427, dwReserved0=0x0, dwReserved1=0x0, cFileName="10_All_Music.wpl", cAlternateFileName="10_ALL~1.WPL")) returned 1 [0128.448] FindNextFileW (in: hFindFile=0x381b80, lpFindFileData=0x31e29c | out: lpFindFileData=0x31e29c*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x2ca96f80, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x2ca96f80, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x2ca96f80, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x249, dwReserved0=0x0, dwReserved1=0x0, cFileName="11_All_Pictures.wpl", cAlternateFileName="11_ALL~1.WPL")) returned 1 [0128.448] FindNextFileW (in: hFindFile=0x381b80, lpFindFileData=0x31e29c | out: lpFindFileData=0x31e29c*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x2ca96f80, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x2ca96f80, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x2ca96f80, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x437, dwReserved0=0x0, dwReserved1=0x0, cFileName="12_All_Video.wpl", cAlternateFileName="12_ALL~1.WPL")) returned 1 [0128.448] FindNextFileW (in: hFindFile=0x381b80, lpFindFileData=0x31e29c | out: lpFindFileData=0x31e29c*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x2ca96f80, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x2ca96f80, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x2ca96f80, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x437, dwReserved0=0x0, dwReserved1=0x0, cFileName="12_All_Video.wpl", cAlternateFileName="12_ALL~1.WPL")) returned 0 [0128.449] FindNextFileW (in: hFindFile=0x381b80, lpFindFileData=0x31e29c | out: lpFindFileData=0x31e29c*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x28d257a0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28f14980, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xf740fbac, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0128.450] FindNextFileW (in: hFindFile=0x381b80, lpFindFileData=0x31e29c | out: lpFindFileData=0x31e29c*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x28eee820, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28eee820, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xf73e9a4c, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x414, dwReserved0=0x0, dwReserved1=0x0, cFileName="01_Music_auto_rated_at_5_stars.wpl", cAlternateFileName="01_MUS~1.WPL")) returned 1 [0128.450] FindNextFileW (in: hFindFile=0x381b80, lpFindFileData=0x31e29c | out: lpFindFileData=0x31e29c*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x28eee820, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28eee820, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xf73e9a4c, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x4ff, dwReserved0=0x0, dwReserved1=0x0, cFileName="02_Music_added_in_the_last_month.wpl", cAlternateFileName="02_MUS~1.WPL")) returned 1 [0128.450] FindNextFileW (in: hFindFile=0x381b80, lpFindFileData=0x31e29c | out: lpFindFileData=0x31e29c*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x28eee820, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28eee820, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xf73e9a4c, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x4f3, dwReserved0=0x0, dwReserved1=0x0, cFileName="03_Music_rated_at_4_or_5_stars.wpl", cAlternateFileName="03_MUS~1.WPL")) returned 1 [0128.450] FindNextFileW (in: hFindFile=0x381b80, lpFindFileData=0x31e29c | out: lpFindFileData=0x31e29c*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x28eee820, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28eee820, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xf73e9a4c, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x504, dwReserved0=0x0, dwReserved1=0x0, cFileName="04_Music_played_in_the_last_month.wpl", cAlternateFileName="04_MUS~1.WPL")) returned 1 [0128.450] FindNextFileW (in: hFindFile=0x381b80, lpFindFileData=0x31e29c | out: lpFindFileData=0x31e29c*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x28eee820, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28eee820, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xf73e9a4c, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x31d, dwReserved0=0x0, dwReserved1=0x0, cFileName="05_Pictures_taken_in_the_last_month.wpl", cAlternateFileName="05_PIC~1.WPL")) returned 1 [0128.450] FindNextFileW (in: hFindFile=0x381b80, lpFindFileData=0x31e29c | out: lpFindFileData=0x31e29c*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x28eee820, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28eee820, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xf73e9a4c, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x311, dwReserved0=0x0, dwReserved1=0x0, cFileName="06_Pictures_rated_4_or_5_stars.wpl", cAlternateFileName="06_PIC~1.WPL")) returned 1 [0128.450] FindNextFileW (in: hFindFile=0x381b80, lpFindFileData=0x31e29c | out: lpFindFileData=0x31e29c*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x28eee820, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28eee820, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xf73e9a4c, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x410, dwReserved0=0x0, dwReserved1=0x0, cFileName="07_TV_recorded_in_the_last_week.wpl", cAlternateFileName="07_TV_~1.WPL")) returned 1 [0128.450] FindNextFileW (in: hFindFile=0x381b80, lpFindFileData=0x31e29c | out: lpFindFileData=0x31e29c*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x28eee820, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28eee820, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xf740fbac, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x3fc, dwReserved0=0x0, dwReserved1=0x0, cFileName="08_Video_rated_at_4_or_5_stars.wpl", cAlternateFileName="08_VID~1.WPL")) returned 1 [0128.450] FindNextFileW (in: hFindFile=0x381b80, lpFindFileData=0x31e29c | out: lpFindFileData=0x31e29c*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x28eee820, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28eee820, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xf740fbac, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x401, dwReserved0=0x0, dwReserved1=0x0, cFileName="09_Music_played_the_most.wpl", cAlternateFileName="09_MUS~1.WPL")) returned 1 [0128.450] FindNextFileW (in: hFindFile=0x381b80, lpFindFileData=0x31e29c | out: lpFindFileData=0x31e29c*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x28ec86c0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28ec86c0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xf740fbac, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x427, dwReserved0=0x0, dwReserved1=0x0, cFileName="10_All_Music.wpl", cAlternateFileName="10_ALL~1.WPL")) returned 1 [0128.450] FindNextFileW (in: hFindFile=0x381b80, lpFindFileData=0x31e29c | out: lpFindFileData=0x31e29c*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x28ec86c0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28ec86c0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xf740fbac, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x249, dwReserved0=0x0, dwReserved1=0x0, cFileName="11_All_Pictures.wpl", cAlternateFileName="11_ALL~1.WPL")) returned 1 [0128.450] FindNextFileW (in: hFindFile=0x381b80, lpFindFileData=0x31e29c | out: lpFindFileData=0x31e29c*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x28ec86c0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28ec86c0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xf740fbac, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x437, dwReserved0=0x0, dwReserved1=0x0, cFileName="12_All_Video.wpl", cAlternateFileName="12_ALL~1.WPL")) returned 1 [0128.450] FindNextFileW (in: hFindFile=0x381b80, lpFindFileData=0x31e29c | out: lpFindFileData=0x31e29c*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0128.452] FindNextFileW (in: hFindFile=0x381b80, lpFindFileData=0x31e29c | out: lpFindFileData=0x31e29c*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x28d257a0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28f14980, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xf740fbac, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0128.452] FindNextFileW (in: hFindFile=0x381b80, lpFindFileData=0x31e29c | out: lpFindFileData=0x31e29c*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x28eee820, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28eee820, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xf73e9a4c, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x414, dwReserved0=0x0, dwReserved1=0x0, cFileName="01_Music_auto_rated_at_5_stars.wpl", cAlternateFileName="01_MUS~1.WPL")) returned 1 [0128.452] FindNextFileW (in: hFindFile=0x381b80, lpFindFileData=0x31e29c | out: lpFindFileData=0x31e29c*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x28eee820, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28eee820, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xf73e9a4c, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x4ff, dwReserved0=0x0, dwReserved1=0x0, cFileName="02_Music_added_in_the_last_month.wpl", cAlternateFileName="02_MUS~1.WPL")) returned 1 [0128.452] FindNextFileW (in: hFindFile=0x381b80, lpFindFileData=0x31e29c | out: lpFindFileData=0x31e29c*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x28eee820, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28eee820, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xf73e9a4c, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x4f3, dwReserved0=0x0, dwReserved1=0x0, cFileName="03_Music_rated_at_4_or_5_stars.wpl", cAlternateFileName="03_MUS~1.WPL")) returned 1 [0128.452] FindNextFileW (in: hFindFile=0x381b80, lpFindFileData=0x31e29c | out: lpFindFileData=0x31e29c*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x28eee820, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28eee820, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xf73e9a4c, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x504, dwReserved0=0x0, dwReserved1=0x0, cFileName="04_Music_played_in_the_last_month.wpl", cAlternateFileName="04_MUS~1.WPL")) returned 1 [0128.452] FindNextFileW (in: hFindFile=0x381b80, lpFindFileData=0x31e29c | out: lpFindFileData=0x31e29c*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x28eee820, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28eee820, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xf73e9a4c, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x31d, dwReserved0=0x0, dwReserved1=0x0, cFileName="05_Pictures_taken_in_the_last_month.wpl", cAlternateFileName="05_PIC~1.WPL")) returned 1 [0128.452] FindNextFileW (in: hFindFile=0x381b80, lpFindFileData=0x31e29c | out: lpFindFileData=0x31e29c*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x28eee820, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28eee820, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xf73e9a4c, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x311, dwReserved0=0x0, dwReserved1=0x0, cFileName="06_Pictures_rated_4_or_5_stars.wpl", cAlternateFileName="06_PIC~1.WPL")) returned 1 [0128.452] FindNextFileW (in: hFindFile=0x381b80, lpFindFileData=0x31e29c | out: lpFindFileData=0x31e29c*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x28eee820, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28eee820, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xf73e9a4c, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x410, dwReserved0=0x0, dwReserved1=0x0, cFileName="07_TV_recorded_in_the_last_week.wpl", cAlternateFileName="07_TV_~1.WPL")) returned 1 [0128.452] FindNextFileW (in: hFindFile=0x381b80, lpFindFileData=0x31e29c | out: lpFindFileData=0x31e29c*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x28eee820, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28eee820, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xf740fbac, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x3fc, dwReserved0=0x0, dwReserved1=0x0, cFileName="08_Video_rated_at_4_or_5_stars.wpl", cAlternateFileName="08_VID~1.WPL")) returned 1 [0128.452] FindNextFileW (in: hFindFile=0x381b80, lpFindFileData=0x31e29c | out: lpFindFileData=0x31e29c*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x28eee820, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28eee820, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xf740fbac, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x401, dwReserved0=0x0, dwReserved1=0x0, cFileName="09_Music_played_the_most.wpl", cAlternateFileName="09_MUS~1.WPL")) returned 1 [0128.452] FindNextFileW (in: hFindFile=0x381b80, lpFindFileData=0x31e29c | out: lpFindFileData=0x31e29c*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x28ec86c0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28ec86c0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xf740fbac, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x427, dwReserved0=0x0, dwReserved1=0x0, cFileName="10_All_Music.wpl", cAlternateFileName="10_ALL~1.WPL")) returned 1 [0128.452] FindNextFileW (in: hFindFile=0x381b80, lpFindFileData=0x31e29c | out: lpFindFileData=0x31e29c*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x28ec86c0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28ec86c0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xf740fbac, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x249, dwReserved0=0x0, dwReserved1=0x0, cFileName="11_All_Pictures.wpl", cAlternateFileName="11_ALL~1.WPL")) returned 1 [0128.452] FindNextFileW (in: hFindFile=0x381b80, lpFindFileData=0x31e29c | out: lpFindFileData=0x31e29c*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x28ec86c0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28ec86c0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xf740fbac, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x437, dwReserved0=0x0, dwReserved1=0x0, cFileName="12_All_Video.wpl", cAlternateFileName="12_ALL~1.WPL")) returned 1 [0128.452] FindNextFileW (in: hFindFile=0x381b80, lpFindFileData=0x31e29c | out: lpFindFileData=0x31e29c*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x28ec86c0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28ec86c0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xf740fbac, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x437, dwReserved0=0x0, dwReserved1=0x0, cFileName="12_All_Video.wpl", cAlternateFileName="12_ALL~1.WPL")) returned 0 [0128.460] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Office\\ONetConfig\\350db95df4cbd94b2a1c300510e12e11.xml" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\office\\onetconfig\\350db95df4cbd94b2a1c300510e12e11.xml"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Office\\ONetConfig\\350db95df4cbd94b2a1c300510e12e11.xml.[neftet@tutanota.com].boom" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\office\\onetconfig\\350db95df4cbd94b2a1c300510e12e11.xml.[neftet@tutanota.com].boom")) returned 1 [0128.488] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\9QH4S0GZ\\AA3e3XC[2].png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\9qh4s0gz\\aa3e3xc[2].png"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\9QH4S0GZ\\AA3e3XC[2].png.[neftet@tutanota.com].boom" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\9qh4s0gz\\aa3e3xc[2].png.[neftet@tutanota.com].boom")) returned 1 [0128.492] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\9QH4S0GZ\\AA3vOVA[1].png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\9qh4s0gz\\aa3vova[1].png"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\9QH4S0GZ\\AA3vOVA[1].png.[neftet@tutanota.com].boom" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\9qh4s0gz\\aa3vova[1].png.[neftet@tutanota.com].boom")) returned 1 [0128.495] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\9QH4S0GZ\\AA42EP9[1].png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\9qh4s0gz\\aa42ep9[1].png"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\9QH4S0GZ\\AA42EP9[1].png.[neftet@tutanota.com].boom" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\9qh4s0gz\\aa42ep9[1].png.[neftet@tutanota.com].boom")) returned 1 [0128.498] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\9QH4S0GZ\\AA54rQj[1].png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\9qh4s0gz\\aa54rqj[1].png"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\9QH4S0GZ\\AA54rQj[1].png.[neftet@tutanota.com].boom" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\9qh4s0gz\\aa54rqj[1].png.[neftet@tutanota.com].boom")) returned 1 [0128.504] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\9QH4S0GZ\\AA61yi9[1].png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\9qh4s0gz\\aa61yi9[1].png"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\9QH4S0GZ\\AA61yi9[1].png.[neftet@tutanota.com].boom" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\9qh4s0gz\\aa61yi9[1].png.[neftet@tutanota.com].boom")) returned 1 [0128.507] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\9QH4S0GZ\\AA8uCo4[1].png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\9qh4s0gz\\aa8uco4[1].png"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\9QH4S0GZ\\AA8uCo4[1].png.[neftet@tutanota.com].boom" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\9qh4s0gz\\aa8uco4[1].png.[neftet@tutanota.com].boom")) returned 1 [0128.510] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\9QH4S0GZ\\AAdAVrM[1].png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\9qh4s0gz\\aadavrm[1].png"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\9QH4S0GZ\\AAdAVrM[1].png.[neftet@tutanota.com].boom" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\9qh4s0gz\\aadavrm[1].png.[neftet@tutanota.com].boom")) returned 1 [0128.515] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\9QH4S0GZ\\adServer[1].htm" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\9qh4s0gz\\adserver[1].htm"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\9QH4S0GZ\\adServer[1].htm.[neftet@tutanota.com].boom" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\9qh4s0gz\\adserver[1].htm.[neftet@tutanota.com].boom")) returned 1 [0128.518] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\9QH4S0GZ\\BB1CcOi[1].png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\9qh4s0gz\\bb1ccoi[1].png"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\9QH4S0GZ\\BB1CcOi[1].png.[neftet@tutanota.com].boom" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\9qh4s0gz\\bb1ccoi[1].png.[neftet@tutanota.com].boom")) returned 1 [0128.521] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\9QH4S0GZ\\BB46JmN[1].png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\9qh4s0gz\\bb46jmn[1].png"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\9QH4S0GZ\\BB46JmN[1].png.[neftet@tutanota.com].boom" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\9qh4s0gz\\bb46jmn[1].png.[neftet@tutanota.com].boom")) returned 1 [0128.524] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\9QH4S0GZ\\BB5kJAC[1].png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\9qh4s0gz\\bb5kjac[1].png"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\9QH4S0GZ\\BB5kJAC[1].png.[neftet@tutanota.com].boom" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\9qh4s0gz\\bb5kjac[1].png.[neftet@tutanota.com].boom")) returned 1 [0128.527] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\9QH4S0GZ\\BB5kTiV[1].png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\9qh4s0gz\\bb5ktiv[1].png"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\9QH4S0GZ\\BB5kTiV[1].png.[neftet@tutanota.com].boom" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\9qh4s0gz\\bb5ktiv[1].png.[neftet@tutanota.com].boom")) returned 1 [0128.530] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\9QH4S0GZ\\BB6Ma4a[1].png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\9qh4s0gz\\bb6ma4a[1].png"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\9QH4S0GZ\\BB6Ma4a[1].png.[neftet@tutanota.com].boom" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\9qh4s0gz\\bb6ma4a[1].png.[neftet@tutanota.com].boom")) returned 1 [0128.533] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\9QH4S0GZ\\BB74fLs[1].png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\9qh4s0gz\\bb74fls[1].png"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\9QH4S0GZ\\BB74fLs[1].png.[neftet@tutanota.com].boom" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\9qh4s0gz\\bb74fls[1].png.[neftet@tutanota.com].boom")) returned 1 [0128.536] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\9QH4S0GZ\\BBBIqq8[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\9qh4s0gz\\bbbiqq8[1].jpg"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\9QH4S0GZ\\BBBIqq8[1].jpg.[neftet@tutanota.com].boom" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\9qh4s0gz\\bbbiqq8[1].jpg.[neftet@tutanota.com].boom")) returned 1 [0128.539] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\9QH4S0GZ\\BBBL0ij[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\9qh4s0gz\\bbbl0ij[1].jpg"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\9QH4S0GZ\\BBBL0ij[1].jpg.[neftet@tutanota.com].boom" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\9qh4s0gz\\bbbl0ij[1].jpg.[neftet@tutanota.com].boom")) returned 1 [0128.543] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\9QH4S0GZ\\BBBLhZX[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\9qh4s0gz\\bbblhzx[1].jpg"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\9QH4S0GZ\\BBBLhZX[1].jpg.[neftet@tutanota.com].boom" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\9qh4s0gz\\bbblhzx[1].jpg.[neftet@tutanota.com].boom")) returned 1 [0128.554] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\9QH4S0GZ\\BBBNiEo[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\9qh4s0gz\\bbbnieo[1].jpg"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\9QH4S0GZ\\BBBNiEo[1].jpg.[neftet@tutanota.com].boom" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\9qh4s0gz\\bbbnieo[1].jpg.[neftet@tutanota.com].boom")) returned 1 [0128.557] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\9QH4S0GZ\\BBBO1mQ[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\9qh4s0gz\\bbbo1mq[1].jpg"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\9QH4S0GZ\\BBBO1mQ[1].jpg.[neftet@tutanota.com].boom" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\9qh4s0gz\\bbbo1mq[1].jpg.[neftet@tutanota.com].boom")) returned 1 [0128.562] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\9QH4S0GZ\\BBBO3tl[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\9qh4s0gz\\bbbo3tl[1].jpg"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\9QH4S0GZ\\BBBO3tl[1].jpg.[neftet@tutanota.com].boom" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\9qh4s0gz\\bbbo3tl[1].jpg.[neftet@tutanota.com].boom")) returned 1 [0128.569] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\9QH4S0GZ\\BBBO8dQ[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\9qh4s0gz\\bbbo8dq[1].jpg"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\9QH4S0GZ\\BBBO8dQ[1].jpg.[neftet@tutanota.com].boom" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\9qh4s0gz\\bbbo8dq[1].jpg.[neftet@tutanota.com].boom")) returned 1 [0128.572] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\9QH4S0GZ\\BBBOe7C[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\9qh4s0gz\\bbboe7c[1].jpg"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\9QH4S0GZ\\BBBOe7C[1].jpg.[neftet@tutanota.com].boom" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\9qh4s0gz\\bbboe7c[1].jpg.[neftet@tutanota.com].boom")) returned 1 [0128.575] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\9QH4S0GZ\\BBBPThN[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\9qh4s0gz\\bbbpthn[1].jpg"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\9QH4S0GZ\\BBBPThN[1].jpg.[neftet@tutanota.com].boom" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\9qh4s0gz\\bbbpthn[1].jpg.[neftet@tutanota.com].boom")) returned 1 [0128.578] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\9QH4S0GZ\\BBBPUFJ[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\9qh4s0gz\\bbbpufj[1].jpg"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\9QH4S0GZ\\BBBPUFJ[1].jpg.[neftet@tutanota.com].boom" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\9qh4s0gz\\bbbpufj[1].jpg.[neftet@tutanota.com].boom")) returned 1 [0128.581] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\9QH4S0GZ\\BBBQxzx[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\9qh4s0gz\\bbbqxzx[1].jpg"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\9QH4S0GZ\\BBBQxzx[1].jpg.[neftet@tutanota.com].boom" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\9qh4s0gz\\bbbqxzx[1].jpg.[neftet@tutanota.com].boom")) returned 1 [0128.585] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\9QH4S0GZ\\BBBseMP[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\9qh4s0gz\\bbbsemp[1].jpg"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\9QH4S0GZ\\BBBseMP[1].jpg.[neftet@tutanota.com].boom" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\9qh4s0gz\\bbbsemp[1].jpg.[neftet@tutanota.com].boom")) returned 1 [0128.588] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\9QH4S0GZ\\BBBsqNL[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\9qh4s0gz\\bbbsqnl[1].jpg"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\9QH4S0GZ\\BBBsqNL[1].jpg.[neftet@tutanota.com].boom" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\9qh4s0gz\\bbbsqnl[1].jpg.[neftet@tutanota.com].boom")) returned 1 [0128.591] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\9QH4S0GZ\\BBBTpvW[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\9qh4s0gz\\bbbtpvw[1].jpg"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\9QH4S0GZ\\BBBTpvW[1].jpg.[neftet@tutanota.com].boom" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\9qh4s0gz\\bbbtpvw[1].jpg.[neftet@tutanota.com].boom")) returned 1 [0128.594] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\9QH4S0GZ\\BBBVEOW[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\9qh4s0gz\\bbbveow[1].jpg"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\9QH4S0GZ\\BBBVEOW[1].jpg.[neftet@tutanota.com].boom" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\9qh4s0gz\\bbbveow[1].jpg.[neftet@tutanota.com].boom")) returned 1 [0128.598] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\9QH4S0GZ\\BBBVGsM[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\9qh4s0gz\\bbbvgsm[1].jpg"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\9QH4S0GZ\\BBBVGsM[1].jpg.[neftet@tutanota.com].boom" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\9qh4s0gz\\bbbvgsm[1].jpg.[neftet@tutanota.com].boom")) returned 1 [0128.600] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\9QH4S0GZ\\BBBVIzI[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\9qh4s0gz\\bbbvizi[1].jpg"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\9QH4S0GZ\\BBBVIzI[1].jpg.[neftet@tutanota.com].boom" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\9qh4s0gz\\bbbvizi[1].jpg.[neftet@tutanota.com].boom")) returned 1 [0128.604] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\9QH4S0GZ\\BBBVJ4r[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\9qh4s0gz\\bbbvj4r[1].jpg"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\9QH4S0GZ\\BBBVJ4r[1].jpg.[neftet@tutanota.com].boom" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\9qh4s0gz\\bbbvj4r[1].jpg.[neftet@tutanota.com].boom")) returned 1 [0128.607] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\9QH4S0GZ\\BBBVxM8[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\9qh4s0gz\\bbbvxm8[1].jpg"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\9QH4S0GZ\\BBBVxM8[1].jpg.[neftet@tutanota.com].boom" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\9qh4s0gz\\bbbvxm8[1].jpg.[neftet@tutanota.com].boom")) returned 1 [0128.610] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\9QH4S0GZ\\BBBz9wz[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\9qh4s0gz\\bbbz9wz[1].jpg"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\9QH4S0GZ\\BBBz9wz[1].jpg.[neftet@tutanota.com].boom" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\9qh4s0gz\\bbbz9wz[1].jpg.[neftet@tutanota.com].boom")) returned 1 [0128.613] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\9QH4S0GZ\\BBBzxW1[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\9qh4s0gz\\bbbzxw1[1].jpg"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\9QH4S0GZ\\BBBzxW1[1].jpg.[neftet@tutanota.com].boom" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\9qh4s0gz\\bbbzxw1[1].jpg.[neftet@tutanota.com].boom")) returned 1 [0128.617] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\9QH4S0GZ\\BBC06Ub[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\9qh4s0gz\\bbc06ub[1].jpg"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\9QH4S0GZ\\BBC06Ub[1].jpg.[neftet@tutanota.com].boom" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\9qh4s0gz\\bbc06ub[1].jpg.[neftet@tutanota.com].boom")) returned 1 [0128.620] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\9QH4S0GZ\\BBC095c[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\9qh4s0gz\\bbc095c[1].jpg"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\9QH4S0GZ\\BBC095c[1].jpg.[neftet@tutanota.com].boom" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\9qh4s0gz\\bbc095c[1].jpg.[neftet@tutanota.com].boom")) returned 1 [0128.623] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\9QH4S0GZ\\BBC0ALC[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\9qh4s0gz\\bbc0alc[1].jpg"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\9QH4S0GZ\\BBC0ALC[1].jpg.[neftet@tutanota.com].boom" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\9qh4s0gz\\bbc0alc[1].jpg.[neftet@tutanota.com].boom")) returned 1 [0128.627] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\9QH4S0GZ\\BBC0lYn[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\9qh4s0gz\\bbc0lyn[1].jpg"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\9QH4S0GZ\\BBC0lYn[1].jpg.[neftet@tutanota.com].boom" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\9qh4s0gz\\bbc0lyn[1].jpg.[neftet@tutanota.com].boom")) returned 1 [0128.629] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\9QH4S0GZ\\BBC0mlu[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\9qh4s0gz\\bbc0mlu[1].jpg"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\9QH4S0GZ\\BBC0mlu[1].jpg.[neftet@tutanota.com].boom" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\9qh4s0gz\\bbc0mlu[1].jpg.[neftet@tutanota.com].boom")) returned 1 [0128.632] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\9QH4S0GZ\\BBC0rDa[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\9qh4s0gz\\bbc0rda[1].jpg"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\9QH4S0GZ\\BBC0rDa[1].jpg.[neftet@tutanota.com].boom" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\9qh4s0gz\\bbc0rda[1].jpg.[neftet@tutanota.com].boom")) returned 1 [0128.636] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\9QH4S0GZ\\BBC0rDa[2].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\9qh4s0gz\\bbc0rda[2].jpg"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\9QH4S0GZ\\BBC0rDa[2].jpg.[neftet@tutanota.com].boom" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\9qh4s0gz\\bbc0rda[2].jpg.[neftet@tutanota.com].boom")) returned 1 [0128.640] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\9QH4S0GZ\\BBC0tCi[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\9qh4s0gz\\bbc0tci[1].jpg"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\9QH4S0GZ\\BBC0tCi[1].jpg.[neftet@tutanota.com].boom" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\9qh4s0gz\\bbc0tci[1].jpg.[neftet@tutanota.com].boom")) returned 1 [0128.643] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\9QH4S0GZ\\BBDK7Yy[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\9qh4s0gz\\bbdk7yy[1].jpg"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\9QH4S0GZ\\BBDK7Yy[1].jpg.[neftet@tutanota.com].boom" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\9qh4s0gz\\bbdk7yy[1].jpg.[neftet@tutanota.com].boom")) returned 1 [0128.646] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\9QH4S0GZ\\BBDRbsH[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\9qh4s0gz\\bbdrbsh[1].jpg"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\9QH4S0GZ\\BBDRbsH[1].jpg.[neftet@tutanota.com].boom" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\9qh4s0gz\\bbdrbsh[1].jpg.[neftet@tutanota.com].boom")) returned 1 [0128.648] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\9QH4S0GZ\\BBDZoZR[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\9qh4s0gz\\bbdzozr[1].jpg"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\9QH4S0GZ\\BBDZoZR[1].jpg.[neftet@tutanota.com].boom" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\9qh4s0gz\\bbdzozr[1].jpg.[neftet@tutanota.com].boom")) returned 1 [0128.651] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\9QH4S0GZ\\BBE97O8[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\9qh4s0gz\\bbe97o8[1].jpg"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\9QH4S0GZ\\BBE97O8[1].jpg.[neftet@tutanota.com].boom" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\9qh4s0gz\\bbe97o8[1].jpg.[neftet@tutanota.com].boom")) returned 1 [0128.654] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\9QH4S0GZ\\BBE9wSt[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\9qh4s0gz\\bbe9wst[1].jpg"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\9QH4S0GZ\\BBE9wSt[1].jpg.[neftet@tutanota.com].boom" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\9qh4s0gz\\bbe9wst[1].jpg.[neftet@tutanota.com].boom")) returned 1 [0128.659] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\9QH4S0GZ\\BBEcHle[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\9qh4s0gz\\bbechle[1].jpg"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\9QH4S0GZ\\BBEcHle[1].jpg.[neftet@tutanota.com].boom" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\9qh4s0gz\\bbechle[1].jpg.[neftet@tutanota.com].boom")) returned 1 [0128.663] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\9QH4S0GZ\\BBEdE0f[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\9qh4s0gz\\bbede0f[1].jpg"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\9QH4S0GZ\\BBEdE0f[1].jpg.[neftet@tutanota.com].boom" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\9qh4s0gz\\bbede0f[1].jpg.[neftet@tutanota.com].boom")) returned 1 [0128.670] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\9QH4S0GZ\\BBEdoQv[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\9qh4s0gz\\bbedoqv[1].jpg"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\9QH4S0GZ\\BBEdoQv[1].jpg.[neftet@tutanota.com].boom" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\9qh4s0gz\\bbedoqv[1].jpg.[neftet@tutanota.com].boom")) returned 1 [0128.672] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\9QH4S0GZ\\BBEdqEy[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\9qh4s0gz\\bbedqey[1].jpg"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\9QH4S0GZ\\BBEdqEy[1].jpg.[neftet@tutanota.com].boom" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\9qh4s0gz\\bbedqey[1].jpg.[neftet@tutanota.com].boom")) returned 1 [0128.675] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\9QH4S0GZ\\BBEdtWw[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\9qh4s0gz\\bbedtww[1].jpg"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\9QH4S0GZ\\BBEdtWw[1].jpg.[neftet@tutanota.com].boom" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\9qh4s0gz\\bbedtww[1].jpg.[neftet@tutanota.com].boom")) returned 1 [0128.678] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\9QH4S0GZ\\BBEdXJj[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\9qh4s0gz\\bbedxjj[1].jpg"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\9QH4S0GZ\\BBEdXJj[1].jpg.[neftet@tutanota.com].boom" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\9qh4s0gz\\bbedxjj[1].jpg.[neftet@tutanota.com].boom")) returned 1 [0128.681] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\9QH4S0GZ\\BBEeP0k[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\9qh4s0gz\\bbeep0k[1].jpg"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\9QH4S0GZ\\BBEeP0k[1].jpg.[neftet@tutanota.com].boom" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\9qh4s0gz\\bbeep0k[1].jpg.[neftet@tutanota.com].boom")) returned 1 [0128.685] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\9QH4S0GZ\\BBEeTuf[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\9qh4s0gz\\bbeetuf[1].jpg"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\9QH4S0GZ\\BBEeTuf[1].jpg.[neftet@tutanota.com].boom" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\9qh4s0gz\\bbeetuf[1].jpg.[neftet@tutanota.com].boom")) returned 1 [0128.688] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\9QH4S0GZ\\BBEfE6e[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\9qh4s0gz\\bbefe6e[1].jpg"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\9QH4S0GZ\\BBEfE6e[1].jpg.[neftet@tutanota.com].boom" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\9qh4s0gz\\bbefe6e[1].jpg.[neftet@tutanota.com].boom")) returned 1 [0128.692] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\9QH4S0GZ\\BBEfjuT[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\9qh4s0gz\\bbefjut[1].jpg"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\9QH4S0GZ\\BBEfjuT[1].jpg.[neftet@tutanota.com].boom" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\9qh4s0gz\\bbefjut[1].jpg.[neftet@tutanota.com].boom")) returned 1 [0128.695] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\9QH4S0GZ\\BBEg9QV[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\9qh4s0gz\\bbeg9qv[1].jpg"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\9QH4S0GZ\\BBEg9QV[1].jpg.[neftet@tutanota.com].boom" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\9qh4s0gz\\bbeg9qv[1].jpg.[neftet@tutanota.com].boom")) returned 1 [0128.697] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\9QH4S0GZ\\BBEgGSl[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\9qh4s0gz\\bbeggsl[1].jpg"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\9QH4S0GZ\\BBEgGSl[1].jpg.[neftet@tutanota.com].boom" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\9qh4s0gz\\bbeggsl[1].jpg.[neftet@tutanota.com].boom")) returned 1 [0128.701] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\9QH4S0GZ\\BBEgiYw[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\9qh4s0gz\\bbegiyw[1].jpg"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\9QH4S0GZ\\BBEgiYw[1].jpg.[neftet@tutanota.com].boom" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\9qh4s0gz\\bbegiyw[1].jpg.[neftet@tutanota.com].boom")) returned 1 [0128.704] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\9QH4S0GZ\\BBEgJfz[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\9qh4s0gz\\bbegjfz[1].jpg"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\9QH4S0GZ\\BBEgJfz[1].jpg.[neftet@tutanota.com].boom" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\9qh4s0gz\\bbegjfz[1].jpg.[neftet@tutanota.com].boom")) returned 1 [0128.707] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\9QH4S0GZ\\BBEgqtY[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\9qh4s0gz\\bbegqty[1].jpg"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\9QH4S0GZ\\BBEgqtY[1].jpg.[neftet@tutanota.com].boom" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\9qh4s0gz\\bbegqty[1].jpg.[neftet@tutanota.com].boom")) returned 1 [0128.710] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\9QH4S0GZ\\BBEgsz3[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\9qh4s0gz\\bbegsz3[1].jpg"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\9QH4S0GZ\\BBEgsz3[1].jpg.[neftet@tutanota.com].boom" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\9qh4s0gz\\bbegsz3[1].jpg.[neftet@tutanota.com].boom")) returned 1 [0128.714] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\9QH4S0GZ\\BBEgtcS[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\9qh4s0gz\\bbegtcs[1].jpg"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\9QH4S0GZ\\BBEgtcS[1].jpg.[neftet@tutanota.com].boom" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\9qh4s0gz\\bbegtcs[1].jpg.[neftet@tutanota.com].boom")) returned 1 [0128.717] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\9QH4S0GZ\\BBEgtcS[2].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\9qh4s0gz\\bbegtcs[2].jpg"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\9QH4S0GZ\\BBEgtcS[2].jpg.[neftet@tutanota.com].boom" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\9qh4s0gz\\bbegtcs[2].jpg.[neftet@tutanota.com].boom")) returned 1 [0128.720] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\9QH4S0GZ\\BBEgx5f[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\9qh4s0gz\\bbegx5f[1].jpg"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\9QH4S0GZ\\BBEgx5f[1].jpg.[neftet@tutanota.com].boom" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\9qh4s0gz\\bbegx5f[1].jpg.[neftet@tutanota.com].boom")) returned 1 [0128.722] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\9QH4S0GZ\\BBEgx5f[2].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\9qh4s0gz\\bbegx5f[2].jpg"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\9QH4S0GZ\\BBEgx5f[2].jpg.[neftet@tutanota.com].boom" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\9qh4s0gz\\bbegx5f[2].jpg.[neftet@tutanota.com].boom")) returned 1 [0128.726] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\9QH4S0GZ\\BBEgyIm[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\9qh4s0gz\\bbegyim[1].jpg"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\9QH4S0GZ\\BBEgyIm[1].jpg.[neftet@tutanota.com].boom" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\9qh4s0gz\\bbegyim[1].jpg.[neftet@tutanota.com].boom")) returned 1 [0128.728] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\9QH4S0GZ\\BBg3ODX[2].png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\9qh4s0gz\\bbg3odx[2].png"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\9QH4S0GZ\\BBg3ODX[2].png.[neftet@tutanota.com].boom" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\9qh4s0gz\\bbg3odx[2].png.[neftet@tutanota.com].boom")) returned 1 [0128.731] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\9QH4S0GZ\\BBiyCq[1].png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\9qh4s0gz\\bbiycq[1].png"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\9QH4S0GZ\\BBiyCq[1].png.[neftet@tutanota.com].boom" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\9qh4s0gz\\bbiycq[1].png.[neftet@tutanota.com].boom")) returned 1 [0128.734] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\9QH4S0GZ\\BBn4lUU[1].png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\9qh4s0gz\\bbn4luu[1].png"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\9QH4S0GZ\\BBn4lUU[1].png.[neftet@tutanota.com].boom" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\9qh4s0gz\\bbn4luu[1].png.[neftet@tutanota.com].boom")) returned 1 [0128.737] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\9QH4S0GZ\\BBnMKeN[1].png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\9qh4s0gz\\bbnmken[1].png"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\9QH4S0GZ\\BBnMKeN[1].png.[neftet@tutanota.com].boom" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\9qh4s0gz\\bbnmken[1].png.[neftet@tutanota.com].boom")) returned 1 [0128.740] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\9QH4S0GZ\\BBwGan9[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\9qh4s0gz\\bbwgan9[1].jpg"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\9QH4S0GZ\\BBwGan9[1].jpg.[neftet@tutanota.com].boom" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\9qh4s0gz\\bbwgan9[1].jpg.[neftet@tutanota.com].boom")) returned 1 [0128.743] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\9QH4S0GZ\\BBz3ebk[1].png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\9qh4s0gz\\bbz3ebk[1].png"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\9QH4S0GZ\\BBz3ebk[1].png.[neftet@tutanota.com].boom" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\9qh4s0gz\\bbz3ebk[1].png.[neftet@tutanota.com].boom")) returned 1 [0128.746] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\9QH4S0GZ\\benefits-5-mobile[1].png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\9qh4s0gz\\benefits-5-mobile[1].png"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\9QH4S0GZ\\benefits-5-mobile[1].png.[neftet@tutanota.com].boom" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\9qh4s0gz\\benefits-5-mobile[1].png.[neftet@tutanota.com].boom")) returned 1 [0128.752] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\9QH4S0GZ\\chrome-new[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\9qh4s0gz\\chrome-new[1].jpg"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\9QH4S0GZ\\chrome-new[1].jpg.[neftet@tutanota.com].boom" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\9qh4s0gz\\chrome-new[1].jpg.[neftet@tutanota.com].boom")) returned 1 [0128.756] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\9QH4S0GZ\\css[2].txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\9qh4s0gz\\css[2].txt"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\9QH4S0GZ\\css[2].txt.[neftet@tutanota.com].boom" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\9qh4s0gz\\css[2].txt.[neftet@tutanota.com].boom")) returned 1 [0128.760] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\9QH4S0GZ\\fallback_728x90[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\9qh4s0gz\\fallback_728x90[1].jpg"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\9QH4S0GZ\\fallback_728x90[1].jpg.[neftet@tutanota.com].boom" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\9qh4s0gz\\fallback_728x90[1].jpg.[neftet@tutanota.com].boom")) returned 1 [0128.768] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\9QH4S0GZ\\ie8[1].txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\9qh4s0gz\\ie8[1].txt"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\9QH4S0GZ\\ie8[1].txt.[neftet@tutanota.com].boom" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\9qh4s0gz\\ie8[1].txt.[neftet@tutanota.com].boom")) returned 1 [0128.769] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\9QH4S0GZ\\only[1].htm" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\9qh4s0gz\\only[1].htm"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\9QH4S0GZ\\only[1].htm.[neftet@tutanota.com].boom" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\9qh4s0gz\\only[1].htm.[neftet@tutanota.com].boom")) returned 1 [0128.773] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\9QH4S0GZ\\Passport[1].htm" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\9qh4s0gz\\passport[1].htm"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\9QH4S0GZ\\Passport[1].htm.[neftet@tutanota.com].boom" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\9qh4s0gz\\passport[1].htm.[neftet@tutanota.com].boom")) returned 1 [0128.776] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\9QH4S0GZ\\postmessageRelay[1].htm" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\9qh4s0gz\\postmessagerelay[1].htm"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\9QH4S0GZ\\postmessageRelay[1].htm.[neftet@tutanota.com].boom" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\9qh4s0gz\\postmessagerelay[1].htm.[neftet@tutanota.com].boom")) returned 1 [0128.787] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\9QH4S0GZ\\search[1].htm" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\9qh4s0gz\\search[1].htm"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\9QH4S0GZ\\search[1].htm.[neftet@tutanota.com].boom" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\9qh4s0gz\\search[1].htm.[neftet@tutanota.com].boom")) returned 1 [0128.797] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\9QH4S0GZ\\uhf-west-european-default.min[1].css" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\9qh4s0gz\\uhf-west-european-default.min[1].css"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\9QH4S0GZ\\uhf-west-european-default.min[1].css.[neftet@tutanota.com].boom" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\9qh4s0gz\\uhf-west-european-default.min[1].css.[neftet@tutanota.com].boom")) returned 1 [0128.800] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\9QH4S0GZ\\WebCore.4.19.0.ltr.light.min[1].css" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\9qh4s0gz\\webcore.4.19.0.ltr.light.min[1].css"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\9QH4S0GZ\\WebCore.4.19.0.ltr.light.min[1].css.[neftet@tutanota.com].boom" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\9qh4s0gz\\webcore.4.19.0.ltr.light.min[1].css.[neftet@tutanota.com].boom")) returned 1 [0128.805] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\ABV8L7MY\\AA3e1oO[1].png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\abv8l7my\\aa3e1oo[1].png"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\ABV8L7MY\\AA3e1oO[1].png.[neftet@tutanota.com].boom" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\abv8l7my\\aa3e1oo[1].png.[neftet@tutanota.com].boom")) returned 1 [0128.811] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\ABV8L7MY\\AA429NP[1].png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\abv8l7my\\aa429np[1].png"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\ABV8L7MY\\AA429NP[1].png.[neftet@tutanota.com].boom" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\abv8l7my\\aa429np[1].png.[neftet@tutanota.com].boom")) returned 1 [0128.814] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\ABV8L7MY\\AA42pjY[1].png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\abv8l7my\\aa42pjy[1].png"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\ABV8L7MY\\AA42pjY[1].png.[neftet@tutanota.com].boom" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\abv8l7my\\aa42pjy[1].png.[neftet@tutanota.com].boom")) returned 1 [0128.816] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\ABV8L7MY\\AA61AKN[2].png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\abv8l7my\\aa61akn[2].png"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\ABV8L7MY\\AA61AKN[2].png.[neftet@tutanota.com].boom" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\abv8l7my\\aa61akn[2].png.[neftet@tutanota.com].boom")) returned 1 [0128.819] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\ABV8L7MY\\AA6KizP[2].png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\abv8l7my\\aa6kizp[2].png"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\ABV8L7MY\\AA6KizP[2].png.[neftet@tutanota.com].boom" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\abv8l7my\\aa6kizp[2].png.[neftet@tutanota.com].boom")) returned 1 [0128.822] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\ABV8L7MY\\AA7XCQ3[1].png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\abv8l7my\\aa7xcq3[1].png"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\ABV8L7MY\\AA7XCQ3[1].png.[neftet@tutanota.com].boom" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\abv8l7my\\aa7xcq3[1].png.[neftet@tutanota.com].boom")) returned 1 [0128.824] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\ABV8L7MY\\AA8Tave[1].png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\abv8l7my\\aa8tave[1].png"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\ABV8L7MY\\AA8Tave[1].png.[neftet@tutanota.com].boom" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\abv8l7my\\aa8tave[1].png.[neftet@tutanota.com].boom")) returned 1 [0128.827] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\ABV8L7MY\\AAfOIDq[1].png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\abv8l7my\\aafoidq[1].png"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\ABV8L7MY\\AAfOIDq[1].png.[neftet@tutanota.com].boom" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\abv8l7my\\aafoidq[1].png.[neftet@tutanota.com].boom")) returned 1 [0128.830] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\ABV8L7MY\\AAkhMz9[2].png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\abv8l7my\\aakhmz9[2].png"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\ABV8L7MY\\AAkhMz9[2].png.[neftet@tutanota.com].boom" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\abv8l7my\\aakhmz9[2].png.[neftet@tutanota.com].boom")) returned 1 [0128.833] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\ABV8L7MY\\AAmRY2Q[1].png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\abv8l7my\\aamry2q[1].png"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\ABV8L7MY\\AAmRY2Q[1].png.[neftet@tutanota.com].boom" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\abv8l7my\\aamry2q[1].png.[neftet@tutanota.com].boom")) returned 1 [0128.836] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\ABV8L7MY\\AAni8qk[1].png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\abv8l7my\\aani8qk[1].png"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\ABV8L7MY\\AAni8qk[1].png.[neftet@tutanota.com].boom" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\abv8l7my\\aani8qk[1].png.[neftet@tutanota.com].boom")) returned 1 [0128.841] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\ABV8L7MY\\async_usersync[1].htm" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\abv8l7my\\async_usersync[1].htm"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\ABV8L7MY\\async_usersync[1].htm.[neftet@tutanota.com].boom" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\abv8l7my\\async_usersync[1].htm.[neftet@tutanota.com].boom")) returned 1 [0128.844] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\ABV8L7MY\\b367c075-d98a-457d-b37d-3d9e8ab53e8b[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\abv8l7my\\b367c075-d98a-457d-b37d-3d9e8ab53e8b[1].jpg"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\ABV8L7MY\\b367c075-d98a-457d-b37d-3d9e8ab53e8b[1].jpg.[neftet@tutanota.com].boom" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\abv8l7my\\b367c075-d98a-457d-b37d-3d9e8ab53e8b[1].jpg.[neftet@tutanota.com].boom")) returned 1 [0128.847] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\ABV8L7MY\\BB8jcOr[2].png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\abv8l7my\\bb8jcor[2].png"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\ABV8L7MY\\BB8jcOr[2].png.[neftet@tutanota.com].boom" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\abv8l7my\\bb8jcor[2].png.[neftet@tutanota.com].boom")) returned 1 [0128.850] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\ABV8L7MY\\BBB8ZbM[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\abv8l7my\\bbb8zbm[1].jpg"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\ABV8L7MY\\BBB8ZbM[1].jpg.[neftet@tutanota.com].boom" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\abv8l7my\\bbb8zbm[1].jpg.[neftet@tutanota.com].boom")) returned 1 [0128.853] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\ABV8L7MY\\BBB9wH0[1].png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\abv8l7my\\bbb9wh0[1].png"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\ABV8L7MY\\BBB9wH0[1].png.[neftet@tutanota.com].boom" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\abv8l7my\\bbb9wh0[1].png.[neftet@tutanota.com].boom")) returned 1 [0128.856] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\ABV8L7MY\\BBBCFjo[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\abv8l7my\\bbbcfjo[1].jpg"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\ABV8L7MY\\BBBCFjo[1].jpg.[neftet@tutanota.com].boom" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\abv8l7my\\bbbcfjo[1].jpg.[neftet@tutanota.com].boom")) returned 1 [0128.859] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\ABV8L7MY\\BBBDtcM[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\abv8l7my\\bbbdtcm[1].jpg"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\ABV8L7MY\\BBBDtcM[1].jpg.[neftet@tutanota.com].boom" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\abv8l7my\\bbbdtcm[1].jpg.[neftet@tutanota.com].boom")) returned 1 [0128.863] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\ABV8L7MY\\BBBIeNJ[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\abv8l7my\\bbbienj[1].jpg"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\ABV8L7MY\\BBBIeNJ[1].jpg.[neftet@tutanota.com].boom" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\abv8l7my\\bbbienj[1].jpg.[neftet@tutanota.com].boom")) returned 1 [0128.866] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\ABV8L7MY\\BBBImKX[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\abv8l7my\\bbbimkx[1].jpg"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\ABV8L7MY\\BBBImKX[1].jpg.[neftet@tutanota.com].boom" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\abv8l7my\\bbbimkx[1].jpg.[neftet@tutanota.com].boom")) returned 1 [0128.869] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\ABV8L7MY\\BBBL4R9[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\abv8l7my\\bbbl4r9[1].jpg"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\ABV8L7MY\\BBBL4R9[1].jpg.[neftet@tutanota.com].boom" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\abv8l7my\\bbbl4r9[1].jpg.[neftet@tutanota.com].boom")) returned 1 [0128.872] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\ABV8L7MY\\BBBLhTZ[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\abv8l7my\\bbblhtz[1].jpg"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\ABV8L7MY\\BBBLhTZ[1].jpg.[neftet@tutanota.com].boom" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\abv8l7my\\bbblhtz[1].jpg.[neftet@tutanota.com].boom")) returned 1 [0128.920] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\ABV8L7MY\\BBBnhZY[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\abv8l7my\\bbbnhzy[1].jpg"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\ABV8L7MY\\BBBnhZY[1].jpg.[neftet@tutanota.com].boom" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\abv8l7my\\bbbnhzy[1].jpg.[neftet@tutanota.com].boom")) returned 1 [0128.931] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\ABV8L7MY\\BBBPhAr[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\abv8l7my\\bbbphar[1].jpg"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\ABV8L7MY\\BBBPhAr[1].jpg.[neftet@tutanota.com].boom" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\abv8l7my\\bbbphar[1].jpg.[neftet@tutanota.com].boom")) returned 1 [0128.934] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\ABV8L7MY\\BBBPiby[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\abv8l7my\\bbbpiby[1].jpg"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\ABV8L7MY\\BBBPiby[1].jpg.[neftet@tutanota.com].boom" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\abv8l7my\\bbbpiby[1].jpg.[neftet@tutanota.com].boom")) returned 1 [0128.937] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\ABV8L7MY\\BBBPmXJ[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\abv8l7my\\bbbpmxj[1].jpg"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\ABV8L7MY\\BBBPmXJ[1].jpg.[neftet@tutanota.com].boom" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\abv8l7my\\bbbpmxj[1].jpg.[neftet@tutanota.com].boom")) returned 1 [0128.945] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\ABV8L7MY\\BBBPS37[1].png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\abv8l7my\\bbbps37[1].png"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\ABV8L7MY\\BBBPS37[1].png.[neftet@tutanota.com].boom" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\abv8l7my\\bbbps37[1].png.[neftet@tutanota.com].boom")) returned 1 [0128.948] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\ABV8L7MY\\BBBQiBF[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\abv8l7my\\bbbqibf[1].jpg"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\ABV8L7MY\\BBBQiBF[1].jpg.[neftet@tutanota.com].boom" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\abv8l7my\\bbbqibf[1].jpg.[neftet@tutanota.com].boom")) returned 1 [0129.318] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\ABV8L7MY\\BBBty8h[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\abv8l7my\\bbbty8h[1].jpg"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\ABV8L7MY\\BBBty8h[1].jpg.[neftet@tutanota.com].boom" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\abv8l7my\\bbbty8h[1].jpg.[neftet@tutanota.com].boom")) returned 1 [0129.322] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\ABV8L7MY\\BBBVACL[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\abv8l7my\\bbbvacl[1].jpg"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\ABV8L7MY\\BBBVACL[1].jpg.[neftet@tutanota.com].boom" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\abv8l7my\\bbbvacl[1].jpg.[neftet@tutanota.com].boom")) returned 1 [0129.325] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\ABV8L7MY\\BBBVGyR[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\abv8l7my\\bbbvgyr[1].jpg"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\ABV8L7MY\\BBBVGyR[1].jpg.[neftet@tutanota.com].boom" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\abv8l7my\\bbbvgyr[1].jpg.[neftet@tutanota.com].boom")) returned 1 [0129.328] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\ABV8L7MY\\BBBVMtX[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\abv8l7my\\bbbvmtx[1].jpg"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\ABV8L7MY\\BBBVMtX[1].jpg.[neftet@tutanota.com].boom" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\abv8l7my\\bbbvmtx[1].jpg.[neftet@tutanota.com].boom")) returned 1 [0129.331] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\ABV8L7MY\\BBBVYsu[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\abv8l7my\\bbbvysu[1].jpg"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\ABV8L7MY\\BBBVYsu[1].jpg.[neftet@tutanota.com].boom" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\abv8l7my\\bbbvysu[1].jpg.[neftet@tutanota.com].boom")) returned 1 [0129.334] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\ABV8L7MY\\BBBWLtW[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\abv8l7my\\bbbwltw[1].jpg"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\ABV8L7MY\\BBBWLtW[1].jpg.[neftet@tutanota.com].boom" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\abv8l7my\\bbbwltw[1].jpg.[neftet@tutanota.com].boom")) returned 1 [0129.337] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\ABV8L7MY\\BBBX3xB[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\abv8l7my\\bbbx3xb[1].jpg"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\ABV8L7MY\\BBBX3xB[1].jpg.[neftet@tutanota.com].boom" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\abv8l7my\\bbbx3xb[1].jpg.[neftet@tutanota.com].boom")) returned 1 [0129.340] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\ABV8L7MY\\BBBY98e[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\abv8l7my\\bbby98e[1].jpg"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\ABV8L7MY\\BBBY98e[1].jpg.[neftet@tutanota.com].boom" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\abv8l7my\\bbby98e[1].jpg.[neftet@tutanota.com].boom")) returned 1 [0129.343] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\ABV8L7MY\\BBBZYVP[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\abv8l7my\\bbbzyvp[1].jpg"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\ABV8L7MY\\BBBZYVP[1].jpg.[neftet@tutanota.com].boom" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\abv8l7my\\bbbzyvp[1].jpg.[neftet@tutanota.com].boom")) returned 1 [0129.346] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\ABV8L7MY\\BBC04o2[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\abv8l7my\\bbc04o2[1].jpg"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\ABV8L7MY\\BBC04o2[1].jpg.[neftet@tutanota.com].boom" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\abv8l7my\\bbc04o2[1].jpg.[neftet@tutanota.com].boom")) returned 1 [0129.349] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\ABV8L7MY\\BBC04ok[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\abv8l7my\\bbc04ok[1].jpg"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\ABV8L7MY\\BBC04ok[1].jpg.[neftet@tutanota.com].boom" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\abv8l7my\\bbc04ok[1].jpg.[neftet@tutanota.com].boom")) returned 1 [0129.352] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\ABV8L7MY\\BBC04we[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\abv8l7my\\bbc04we[1].jpg"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\ABV8L7MY\\BBC04we[1].jpg.[neftet@tutanota.com].boom" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\abv8l7my\\bbc04we[1].jpg.[neftet@tutanota.com].boom")) returned 1 [0129.355] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\ABV8L7MY\\BBC05rl[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\abv8l7my\\bbc05rl[1].jpg"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\ABV8L7MY\\BBC05rl[1].jpg.[neftet@tutanota.com].boom" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\abv8l7my\\bbc05rl[1].jpg.[neftet@tutanota.com].boom")) returned 1 [0129.383] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\ABV8L7MY\\BBC05rl[2].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\abv8l7my\\bbc05rl[2].jpg"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\ABV8L7MY\\BBC05rl[2].jpg.[neftet@tutanota.com].boom" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\abv8l7my\\bbc05rl[2].jpg.[neftet@tutanota.com].boom")) returned 1 [0129.386] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\ABV8L7MY\\BBC0ATj[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\abv8l7my\\bbc0atj[1].jpg"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\ABV8L7MY\\BBC0ATj[1].jpg.[neftet@tutanota.com].boom" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\abv8l7my\\bbc0atj[1].jpg.[neftet@tutanota.com].boom")) returned 1 [0129.388] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\ABV8L7MY\\BBC0D8i[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\abv8l7my\\bbc0d8i[1].jpg"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\ABV8L7MY\\BBC0D8i[1].jpg.[neftet@tutanota.com].boom" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\abv8l7my\\bbc0d8i[1].jpg.[neftet@tutanota.com].boom")) returned 1 [0129.391] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\ABV8L7MY\\BBC0g7a[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\abv8l7my\\bbc0g7a[1].jpg"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\ABV8L7MY\\BBC0g7a[1].jpg.[neftet@tutanota.com].boom" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\abv8l7my\\bbc0g7a[1].jpg.[neftet@tutanota.com].boom")) returned 1 [0129.394] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\ABV8L7MY\\BBC0w1b[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\abv8l7my\\bbc0w1b[1].jpg"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\ABV8L7MY\\BBC0w1b[1].jpg.[neftet@tutanota.com].boom" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\abv8l7my\\bbc0w1b[1].jpg.[neftet@tutanota.com].boom")) returned 1 [0129.402] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\ABV8L7MY\\BBC0xLt[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\abv8l7my\\bbc0xlt[1].jpg"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\ABV8L7MY\\BBC0xLt[1].jpg.[neftet@tutanota.com].boom" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\abv8l7my\\bbc0xlt[1].jpg.[neftet@tutanota.com].boom")) returned 1 [0129.405] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\ABV8L7MY\\BBDWA22[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\abv8l7my\\bbdwa22[1].jpg"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\ABV8L7MY\\BBDWA22[1].jpg.[neftet@tutanota.com].boom" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\abv8l7my\\bbdwa22[1].jpg.[neftet@tutanota.com].boom")) returned 1 [0129.408] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\ABV8L7MY\\BBE7d3b[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\abv8l7my\\bbe7d3b[1].jpg"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\ABV8L7MY\\BBE7d3b[1].jpg.[neftet@tutanota.com].boom" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\abv8l7my\\bbe7d3b[1].jpg.[neftet@tutanota.com].boom")) returned 1 [0129.411] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\ABV8L7MY\\BBE85ld[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\abv8l7my\\bbe85ld[1].jpg"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\ABV8L7MY\\BBE85ld[1].jpg.[neftet@tutanota.com].boom" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\abv8l7my\\bbe85ld[1].jpg.[neftet@tutanota.com].boom")) returned 1 [0129.414] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\ABV8L7MY\\BBEdckp[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\abv8l7my\\bbedckp[1].jpg"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\ABV8L7MY\\BBEdckp[1].jpg.[neftet@tutanota.com].boom" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\abv8l7my\\bbedckp[1].jpg.[neftet@tutanota.com].boom")) returned 1 [0129.417] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\ABV8L7MY\\BBEdMci[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\abv8l7my\\bbedmci[1].jpg"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\ABV8L7MY\\BBEdMci[1].jpg.[neftet@tutanota.com].boom" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\abv8l7my\\bbedmci[1].jpg.[neftet@tutanota.com].boom")) returned 1 [0129.421] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\ABV8L7MY\\BBEdSLV[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\abv8l7my\\bbedslv[1].jpg"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\ABV8L7MY\\BBEdSLV[1].jpg.[neftet@tutanota.com].boom" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\abv8l7my\\bbedslv[1].jpg.[neftet@tutanota.com].boom")) returned 1 [0129.423] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\ABV8L7MY\\BBEe2Pd[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\abv8l7my\\bbee2pd[1].jpg"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\ABV8L7MY\\BBEe2Pd[1].jpg.[neftet@tutanota.com].boom" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\abv8l7my\\bbee2pd[1].jpg.[neftet@tutanota.com].boom")) returned 1 [0129.427] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\ABV8L7MY\\BBEe4Oo[1].png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\abv8l7my\\bbee4oo[1].png"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\ABV8L7MY\\BBEe4Oo[1].png.[neftet@tutanota.com].boom" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\abv8l7my\\bbee4oo[1].png.[neftet@tutanota.com].boom")) returned 1 [0129.429] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\ABV8L7MY\\BBEe6Ew[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\abv8l7my\\bbee6ew[1].jpg"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\ABV8L7MY\\BBEe6Ew[1].jpg.[neftet@tutanota.com].boom" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\abv8l7my\\bbee6ew[1].jpg.[neftet@tutanota.com].boom")) returned 1 [0129.432] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\ABV8L7MY\\BBEeFp3[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\abv8l7my\\bbeefp3[1].jpg"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\ABV8L7MY\\BBEeFp3[1].jpg.[neftet@tutanota.com].boom" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\abv8l7my\\bbeefp3[1].jpg.[neftet@tutanota.com].boom")) returned 1 [0129.435] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\ABV8L7MY\\BBEeGwU[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\abv8l7my\\bbeegwu[1].jpg"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\ABV8L7MY\\BBEeGwU[1].jpg.[neftet@tutanota.com].boom" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\abv8l7my\\bbeegwu[1].jpg.[neftet@tutanota.com].boom")) returned 1 [0129.438] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\ABV8L7MY\\BBEeUg0[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\abv8l7my\\bbeeug0[1].jpg"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\ABV8L7MY\\BBEeUg0[1].jpg.[neftet@tutanota.com].boom" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\abv8l7my\\bbeeug0[1].jpg.[neftet@tutanota.com].boom")) returned 1 [0129.441] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\ABV8L7MY\\BBEeZnr[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\abv8l7my\\bbeeznr[1].jpg"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\ABV8L7MY\\BBEeZnr[1].jpg.[neftet@tutanota.com].boom" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\abv8l7my\\bbeeznr[1].jpg.[neftet@tutanota.com].boom")) returned 1 [0129.444] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\ABV8L7MY\\BBEf5Lq[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\abv8l7my\\bbef5lq[1].jpg"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\ABV8L7MY\\BBEf5Lq[1].jpg.[neftet@tutanota.com].boom" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\abv8l7my\\bbef5lq[1].jpg.[neftet@tutanota.com].boom")) returned 1 [0129.447] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\ABV8L7MY\\BBEfwtU[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\abv8l7my\\bbefwtu[1].jpg"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\ABV8L7MY\\BBEfwtU[1].jpg.[neftet@tutanota.com].boom" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\abv8l7my\\bbefwtu[1].jpg.[neftet@tutanota.com].boom")) returned 1 [0129.450] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\ABV8L7MY\\BBEfzSd[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\abv8l7my\\bbefzsd[1].jpg"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\ABV8L7MY\\BBEfzSd[1].jpg.[neftet@tutanota.com].boom" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\abv8l7my\\bbefzsd[1].jpg.[neftet@tutanota.com].boom")) returned 1 [0129.453] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\ABV8L7MY\\BBEgCuQ[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\abv8l7my\\bbegcuq[1].jpg"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\ABV8L7MY\\BBEgCuQ[1].jpg.[neftet@tutanota.com].boom" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\abv8l7my\\bbegcuq[1].jpg.[neftet@tutanota.com].boom")) returned 1 [0129.456] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\ABV8L7MY\\BBEgHzB[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\abv8l7my\\bbeghzb[1].jpg"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\ABV8L7MY\\BBEgHzB[1].jpg.[neftet@tutanota.com].boom" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\abv8l7my\\bbeghzb[1].jpg.[neftet@tutanota.com].boom")) returned 1 [0129.460] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\ABV8L7MY\\BBEgIl2[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\abv8l7my\\bbegil2[1].jpg"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\ABV8L7MY\\BBEgIl2[1].jpg.[neftet@tutanota.com].boom" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\abv8l7my\\bbegil2[1].jpg.[neftet@tutanota.com].boom")) returned 1 [0129.463] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\ABV8L7MY\\BBEgIl2[2].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\abv8l7my\\bbegil2[2].jpg"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\ABV8L7MY\\BBEgIl2[2].jpg.[neftet@tutanota.com].boom" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\abv8l7my\\bbegil2[2].jpg.[neftet@tutanota.com].boom")) returned 1 [0129.467] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\ABV8L7MY\\BBEgIyL[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\abv8l7my\\bbegiyl[1].jpg"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\ABV8L7MY\\BBEgIyL[1].jpg.[neftet@tutanota.com].boom" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\abv8l7my\\bbegiyl[1].jpg.[neftet@tutanota.com].boom")) returned 1 [0129.470] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\ABV8L7MY\\BBEgkY6[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\abv8l7my\\bbegky6[1].jpg"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\ABV8L7MY\\BBEgkY6[1].jpg.[neftet@tutanota.com].boom" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\abv8l7my\\bbegky6[1].jpg.[neftet@tutanota.com].boom")) returned 1 [0129.473] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\ABV8L7MY\\BBEgLzV[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\abv8l7my\\bbeglzv[1].jpg"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\ABV8L7MY\\BBEgLzV[1].jpg.[neftet@tutanota.com].boom" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\abv8l7my\\bbeglzv[1].jpg.[neftet@tutanota.com].boom")) returned 1 [0129.476] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\ABV8L7MY\\BBEgUri[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\abv8l7my\\bbeguri[1].jpg"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\ABV8L7MY\\BBEgUri[1].jpg.[neftet@tutanota.com].boom" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\abv8l7my\\bbeguri[1].jpg.[neftet@tutanota.com].boom")) returned 1 [0129.479] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\ABV8L7MY\\BBEgXBv[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\abv8l7my\\bbegxbv[1].jpg"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\ABV8L7MY\\BBEgXBv[1].jpg.[neftet@tutanota.com].boom" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\abv8l7my\\bbegxbv[1].jpg.[neftet@tutanota.com].boom")) returned 1 [0129.482] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\ABV8L7MY\\BBEgZME[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\abv8l7my\\bbegzme[1].jpg"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\ABV8L7MY\\BBEgZME[1].jpg.[neftet@tutanota.com].boom" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\abv8l7my\\bbegzme[1].jpg.[neftet@tutanota.com].boom")) returned 1 [0129.485] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\ABV8L7MY\\BBghfVy[1].png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\abv8l7my\\bbghfvy[1].png"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\ABV8L7MY\\BBghfVy[1].png.[neftet@tutanota.com].boom" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\abv8l7my\\bbghfvy[1].png.[neftet@tutanota.com].boom")) returned 1 [0129.487] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\ABV8L7MY\\BBkwUr[1].png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\abv8l7my\\bbkwur[1].png"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\ABV8L7MY\\BBkwUr[1].png.[neftet@tutanota.com].boom" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\abv8l7my\\bbkwur[1].png.[neftet@tutanota.com].boom")) returned 1 [0129.490] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\ABV8L7MY\\BBlBV0U[1].png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\abv8l7my\\bblbv0u[1].png"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\ABV8L7MY\\BBlBV0U[1].png.[neftet@tutanota.com].boom" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\abv8l7my\\bblbv0u[1].png.[neftet@tutanota.com].boom")) returned 1 [0129.498] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\ABV8L7MY\\BBzhWWE[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\abv8l7my\\bbzhwwe[1].jpg"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\ABV8L7MY\\BBzhWWE[1].jpg.[neftet@tutanota.com].boom" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\abv8l7my\\bbzhwwe[1].jpg.[neftet@tutanota.com].boom")) returned 1 [0129.504] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\ABV8L7MY\\benefits-2[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\abv8l7my\\benefits-2[1].jpg"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\ABV8L7MY\\benefits-2[1].jpg.[neftet@tutanota.com].boom" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\abv8l7my\\benefits-2[1].jpg.[neftet@tutanota.com].boom")) returned 1 [0129.511] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\ABV8L7MY\\benefits-4[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\abv8l7my\\benefits-4[1].jpg"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\ABV8L7MY\\benefits-4[1].jpg.[neftet@tutanota.com].boom" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\abv8l7my\\benefits-4[1].jpg.[neftet@tutanota.com].boom")) returned 1 [0129.515] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\ABV8L7MY\\browser[1].htm" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\abv8l7my\\browser[1].htm"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\ABV8L7MY\\browser[1].htm.[neftet@tutanota.com].boom" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\abv8l7my\\browser[1].htm.[neftet@tutanota.com].boom")) returned 1 [0129.518] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\ABV8L7MY\\bs-jsdep[1].css" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\abv8l7my\\bs-jsdep[1].css"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\ABV8L7MY\\bs-jsdep[1].css.[neftet@tutanota.com].boom" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\abv8l7my\\bs-jsdep[1].css.[neftet@tutanota.com].boom")) returned 1 [0129.529] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\ABV8L7MY\\core[1].css" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\abv8l7my\\core[1].css"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\ABV8L7MY\\core[1].css.[neftet@tutanota.com].boom" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\abv8l7my\\core[1].css.[neftet@tutanota.com].boom")) returned 1 [0129.538] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\ABV8L7MY\\e4-190963-91cdfbc1[1].txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\abv8l7my\\e4-190963-91cdfbc1[1].txt"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\ABV8L7MY\\e4-190963-91cdfbc1[1].txt.[neftet@tutanota.com].boom" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\abv8l7my\\e4-190963-91cdfbc1[1].txt.[neftet@tutanota.com].boom")) returned 1 [0129.674] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\ABV8L7MY\\eula_text[1].htm" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\abv8l7my\\eula_text[1].htm"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\ABV8L7MY\\eula_text[1].htm.[neftet@tutanota.com].boom" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\abv8l7my\\eula_text[1].htm.[neftet@tutanota.com].boom")) returned 1 [0129.678] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\ABV8L7MY\\f[1].txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\abv8l7my\\f[1].txt"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\ABV8L7MY\\f[1].txt.[neftet@tutanota.com].boom" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\abv8l7my\\f[1].txt.[neftet@tutanota.com].boom")) returned 1 [0129.680] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\ABV8L7MY\\google_plus_16dp[1].png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\abv8l7my\\google_plus_16dp[1].png"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\ABV8L7MY\\google_plus_16dp[1].png.[neftet@tutanota.com].boom" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\abv8l7my\\google_plus_16dp[1].png.[neftet@tutanota.com].boom")) returned 1 [0129.687] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\ABV8L7MY\\index[1].htm" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\abv8l7my\\index[1].htm"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\ABV8L7MY\\index[1].htm.[neftet@tutanota.com].boom" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\abv8l7my\\index[1].htm.[neftet@tutanota.com].boom")) returned 1 [0129.689] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\ABV8L7MY\\print[1].txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\abv8l7my\\print[1].txt"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\ABV8L7MY\\print[1].txt.[neftet@tutanota.com].boom" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\abv8l7my\\print[1].txt.[neftet@tutanota.com].boom")) returned 1 [0129.692] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\ABV8L7MY\\tecjslog[1].png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\abv8l7my\\tecjslog[1].png"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\ABV8L7MY\\tecjslog[1].png.[neftet@tutanota.com].boom" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\abv8l7my\\tecjslog[1].png.[neftet@tutanota.com].boom")) returned 1 [0129.696] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\IKQEEPZR\\AA3DGHW[1].png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\ikqeepzr\\aa3dghw[1].png"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\IKQEEPZR\\AA3DGHW[1].png.[neftet@tutanota.com].boom" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\ikqeepzr\\aa3dghw[1].png.[neftet@tutanota.com].boom")) returned 1 [0129.699] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\IKQEEPZR\\AA3e1pt[2].png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\ikqeepzr\\aa3e1pt[2].png"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\IKQEEPZR\\AA3e1pt[2].png.[neftet@tutanota.com].boom" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\ikqeepzr\\aa3e1pt[2].png.[neftet@tutanota.com].boom")) returned 1 [0129.701] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\IKQEEPZR\\AA42ckd[1].png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\ikqeepzr\\aa42ckd[1].png"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\IKQEEPZR\\AA42ckd[1].png.[neftet@tutanota.com].boom" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\ikqeepzr\\aa42ckd[1].png.[neftet@tutanota.com].boom")) returned 1 [0129.704] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\IKQEEPZR\\AA42eYr[1].png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\ikqeepzr\\aa42eyr[1].png"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\IKQEEPZR\\AA42eYr[1].png.[neftet@tutanota.com].boom" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\ikqeepzr\\aa42eyr[1].png.[neftet@tutanota.com].boom")) returned 1 [0129.707] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\IKQEEPZR\\AA61ILp[2].png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\ikqeepzr\\aa61ilp[2].png"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\IKQEEPZR\\AA61ILp[2].png.[neftet@tutanota.com].boom" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\ikqeepzr\\aa61ilp[2].png.[neftet@tutanota.com].boom")) returned 1 [0129.710] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\IKQEEPZR\\AA6SNZ6[1].png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\ikqeepzr\\aa6snz6[1].png"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\IKQEEPZR\\AA6SNZ6[1].png.[neftet@tutanota.com].boom" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\ikqeepzr\\aa6snz6[1].png.[neftet@tutanota.com].boom")) returned 1 [0129.712] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\IKQEEPZR\\AAbyinC[1].png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\ikqeepzr\\aabyinc[1].png"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\IKQEEPZR\\AAbyinC[1].png.[neftet@tutanota.com].boom" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\ikqeepzr\\aabyinc[1].png.[neftet@tutanota.com].boom")) returned 1 [0129.716] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\IKQEEPZR\\AAicW5W[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\ikqeepzr\\aaicw5w[1].jpg"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\IKQEEPZR\\AAicW5W[1].jpg.[neftet@tutanota.com].boom" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\ikqeepzr\\aaicw5w[1].jpg.[neftet@tutanota.com].boom")) returned 1 [0129.719] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\IKQEEPZR\\AAj0doQ[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\ikqeepzr\\aaj0doq[1].jpg"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\IKQEEPZR\\AAj0doQ[1].jpg.[neftet@tutanota.com].boom" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\ikqeepzr\\aaj0doq[1].jpg.[neftet@tutanota.com].boom")) returned 1 [0129.722] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\IKQEEPZR\\AAkqhIf[1].png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\ikqeepzr\\aakqhif[1].png"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\IKQEEPZR\\AAkqhIf[1].png.[neftet@tutanota.com].boom" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\ikqeepzr\\aakqhif[1].png.[neftet@tutanota.com].boom")) returned 1 [0129.725] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\IKQEEPZR\\AAmo09p[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\ikqeepzr\\aamo09p[1].jpg"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\IKQEEPZR\\AAmo09p[1].jpg.[neftet@tutanota.com].boom" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\ikqeepzr\\aamo09p[1].jpg.[neftet@tutanota.com].boom")) returned 1 [0129.728] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\IKQEEPZR\\AAmUyV2[1].png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\ikqeepzr\\aamuyv2[1].png"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\IKQEEPZR\\AAmUyV2[1].png.[neftet@tutanota.com].boom" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\ikqeepzr\\aamuyv2[1].png.[neftet@tutanota.com].boom")) returned 1 [0129.730] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\IKQEEPZR\\AAn7gKR[1].png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\ikqeepzr\\aan7gkr[1].png"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\IKQEEPZR\\AAn7gKR[1].png.[neftet@tutanota.com].boom" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\ikqeepzr\\aan7gkr[1].png.[neftet@tutanota.com].boom")) returned 1 [0129.797] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\IKQEEPZR\\activityi;src=2542116;type=clien612;cat=chrom0;ord=1;num=7814394060213[1].htm" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\ikqeepzr\\activityi;src=2542116;type=clien612;cat=chrom0;ord=1;num=7814394060213[1].htm"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\IKQEEPZR\\activityi;src=2542116;type=clien612;cat=chrom0;ord=1;num=7814394060213[1].htm.[neftet@tutanota.com].boom" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\ikqeepzr\\activityi;src=2542116;type=clien612;cat=chrom0;ord=1;num=7814394060213[1].htm.[neftet@tutanota.com].boom")) returned 1 [0129.800] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\IKQEEPZR\\BB5zDwX[1].png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\ikqeepzr\\bb5zdwx[1].png"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\IKQEEPZR\\BB5zDwX[1].png.[neftet@tutanota.com].boom" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\ikqeepzr\\bb5zdwx[1].png.[neftet@tutanota.com].boom")) returned 1 [0129.803] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\IKQEEPZR\\BBaK3Nm[1].png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\ikqeepzr\\bbak3nm[1].png"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\IKQEEPZR\\BBaK3Nm[1].png.[neftet@tutanota.com].boom" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\ikqeepzr\\bbak3nm[1].png.[neftet@tutanota.com].boom")) returned 1 [0129.811] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\IKQEEPZR\\BBBLcCz[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\ikqeepzr\\bbblccz[1].jpg"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\IKQEEPZR\\BBBLcCz[1].jpg.[neftet@tutanota.com].boom" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\ikqeepzr\\bbblccz[1].jpg.[neftet@tutanota.com].boom")) returned 1 [0129.813] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\IKQEEPZR\\BBBLdzQ[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\ikqeepzr\\bbbldzq[1].jpg"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\IKQEEPZR\\BBBLdzQ[1].jpg.[neftet@tutanota.com].boom" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\ikqeepzr\\bbbldzq[1].jpg.[neftet@tutanota.com].boom")) returned 1 [0129.816] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\IKQEEPZR\\BBBO1mQ[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\ikqeepzr\\bbbo1mq[1].jpg"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\IKQEEPZR\\BBBO1mQ[1].jpg.[neftet@tutanota.com].boom" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\ikqeepzr\\bbbo1mq[1].jpg.[neftet@tutanota.com].boom")) returned 1 [0129.819] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\IKQEEPZR\\BBBO1qB[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\ikqeepzr\\bbbo1qb[1].jpg"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\IKQEEPZR\\BBBO1qB[1].jpg.[neftet@tutanota.com].boom" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\ikqeepzr\\bbbo1qb[1].jpg.[neftet@tutanota.com].boom")) returned 1 [0129.822] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\IKQEEPZR\\BBBOIAt[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\ikqeepzr\\bbboiat[1].jpg"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\IKQEEPZR\\BBBOIAt[1].jpg.[neftet@tutanota.com].boom" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\ikqeepzr\\bbboiat[1].jpg.[neftet@tutanota.com].boom")) returned 1 [0129.825] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\IKQEEPZR\\BBBOmuh[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\ikqeepzr\\bbbomuh[1].jpg"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\IKQEEPZR\\BBBOmuh[1].jpg.[neftet@tutanota.com].boom" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\ikqeepzr\\bbbomuh[1].jpg.[neftet@tutanota.com].boom")) returned 1 [0129.828] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\IKQEEPZR\\BBBPK5J[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\ikqeepzr\\bbbpk5j[1].jpg"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\IKQEEPZR\\BBBPK5J[1].jpg.[neftet@tutanota.com].boom" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\ikqeepzr\\bbbpk5j[1].jpg.[neftet@tutanota.com].boom")) returned 1 [0129.831] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\IKQEEPZR\\BBBPMvJ[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\ikqeepzr\\bbbpmvj[1].jpg"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\IKQEEPZR\\BBBPMvJ[1].jpg.[neftet@tutanota.com].boom" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\ikqeepzr\\bbbpmvj[1].jpg.[neftet@tutanota.com].boom")) returned 1 [0129.834] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\IKQEEPZR\\BBBUL3E[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\ikqeepzr\\bbbul3e[1].jpg"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\IKQEEPZR\\BBBUL3E[1].jpg.[neftet@tutanota.com].boom" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\ikqeepzr\\bbbul3e[1].jpg.[neftet@tutanota.com].boom")) returned 1 [0129.837] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\IKQEEPZR\\BBBUqkT[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\ikqeepzr\\bbbuqkt[1].jpg"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\IKQEEPZR\\BBBUqkT[1].jpg.[neftet@tutanota.com].boom" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\ikqeepzr\\bbbuqkt[1].jpg.[neftet@tutanota.com].boom")) returned 1 [0129.840] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\IKQEEPZR\\BBBUqkT[2].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\ikqeepzr\\bbbuqkt[2].jpg"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\IKQEEPZR\\BBBUqkT[2].jpg.[neftet@tutanota.com].boom" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\ikqeepzr\\bbbuqkt[2].jpg.[neftet@tutanota.com].boom")) returned 1 [0129.843] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\IKQEEPZR\\BBBX3z0[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\ikqeepzr\\bbbx3z0[1].jpg"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\IKQEEPZR\\BBBX3z0[1].jpg.[neftet@tutanota.com].boom" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\ikqeepzr\\bbbx3z0[1].jpg.[neftet@tutanota.com].boom")) returned 1 [0129.846] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\IKQEEPZR\\BBBYEW1[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\ikqeepzr\\bbbyew1[1].jpg"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\IKQEEPZR\\BBBYEW1[1].jpg.[neftet@tutanota.com].boom" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\ikqeepzr\\bbbyew1[1].jpg.[neftet@tutanota.com].boom")) returned 1 [0129.851] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\IKQEEPZR\\BBBYfEH[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\ikqeepzr\\bbbyfeh[1].jpg"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\IKQEEPZR\\BBBYfEH[1].jpg.[neftet@tutanota.com].boom" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\ikqeepzr\\bbbyfeh[1].jpg.[neftet@tutanota.com].boom")) returned 1 [0129.854] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\IKQEEPZR\\BBBZ20W[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\ikqeepzr\\bbbz20w[1].jpg"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\IKQEEPZR\\BBBZ20W[1].jpg.[neftet@tutanota.com].boom" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\ikqeepzr\\bbbz20w[1].jpg.[neftet@tutanota.com].boom")) returned 1 [0129.858] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\IKQEEPZR\\BBBzaxY[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\ikqeepzr\\bbbzaxy[1].jpg"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\IKQEEPZR\\BBBzaxY[1].jpg.[neftet@tutanota.com].boom" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\ikqeepzr\\bbbzaxy[1].jpg.[neftet@tutanota.com].boom")) returned 1 [0129.861] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\IKQEEPZR\\BBBZzuz[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\ikqeepzr\\bbbzzuz[1].jpg"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\IKQEEPZR\\BBBZzuz[1].jpg.[neftet@tutanota.com].boom" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\ikqeepzr\\bbbzzuz[1].jpg.[neftet@tutanota.com].boom")) returned 1 [0129.864] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\IKQEEPZR\\BBC03B1[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\ikqeepzr\\bbc03b1[1].jpg"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\IKQEEPZR\\BBC03B1[1].jpg.[neftet@tutanota.com].boom" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\ikqeepzr\\bbc03b1[1].jpg.[neftet@tutanota.com].boom")) returned 1 [0129.867] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\IKQEEPZR\\BBC04o2[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\ikqeepzr\\bbc04o2[1].jpg"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\IKQEEPZR\\BBC04o2[1].jpg.[neftet@tutanota.com].boom" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\ikqeepzr\\bbc04o2[1].jpg.[neftet@tutanota.com].boom")) returned 1 [0129.872] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\IKQEEPZR\\BBC06ZQ[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\ikqeepzr\\bbc06zq[1].jpg"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\IKQEEPZR\\BBC06ZQ[1].jpg.[neftet@tutanota.com].boom" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\ikqeepzr\\bbc06zq[1].jpg.[neftet@tutanota.com].boom")) returned 1 [0129.876] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\IKQEEPZR\\BBC0ALC[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\ikqeepzr\\bbc0alc[1].jpg"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\IKQEEPZR\\BBC0ALC[1].jpg.[neftet@tutanota.com].boom" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\ikqeepzr\\bbc0alc[1].jpg.[neftet@tutanota.com].boom")) returned 1 [0129.879] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\IKQEEPZR\\BBC0BiZ[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\ikqeepzr\\bbc0biz[1].jpg"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\IKQEEPZR\\BBC0BiZ[1].jpg.[neftet@tutanota.com].boom" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\ikqeepzr\\bbc0biz[1].jpg.[neftet@tutanota.com].boom")) returned 1 [0129.882] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\IKQEEPZR\\BBC0FXU[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\ikqeepzr\\bbc0fxu[1].jpg"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\IKQEEPZR\\BBC0FXU[1].jpg.[neftet@tutanota.com].boom" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\ikqeepzr\\bbc0fxu[1].jpg.[neftet@tutanota.com].boom")) returned 1 [0129.885] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\IKQEEPZR\\BBC0FXU[2].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\ikqeepzr\\bbc0fxu[2].jpg"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\IKQEEPZR\\BBC0FXU[2].jpg.[neftet@tutanota.com].boom" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\ikqeepzr\\bbc0fxu[2].jpg.[neftet@tutanota.com].boom")) returned 1 [0129.889] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\IKQEEPZR\\BBC0mkg[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\ikqeepzr\\bbc0mkg[1].jpg"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\IKQEEPZR\\BBC0mkg[1].jpg.[neftet@tutanota.com].boom" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\ikqeepzr\\bbc0mkg[1].jpg.[neftet@tutanota.com].boom")) returned 1 [0129.892] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\IKQEEPZR\\BBC0mkg[2].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\ikqeepzr\\bbc0mkg[2].jpg"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\IKQEEPZR\\BBC0mkg[2].jpg.[neftet@tutanota.com].boom" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\ikqeepzr\\bbc0mkg[2].jpg.[neftet@tutanota.com].boom")) returned 1 [0129.895] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\IKQEEPZR\\BBC0oQi[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\ikqeepzr\\bbc0oqi[1].jpg"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\IKQEEPZR\\BBC0oQi[1].jpg.[neftet@tutanota.com].boom" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\ikqeepzr\\bbc0oqi[1].jpg.[neftet@tutanota.com].boom")) returned 1 [0129.898] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\IKQEEPZR\\BBC0tCi[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\ikqeepzr\\bbc0tci[1].jpg"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\IKQEEPZR\\BBC0tCi[1].jpg.[neftet@tutanota.com].boom" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\ikqeepzr\\bbc0tci[1].jpg.[neftet@tutanota.com].boom")) returned 1 [0129.901] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\IKQEEPZR\\BBCM2U2[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\ikqeepzr\\bbcm2u2[1].jpg"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\IKQEEPZR\\BBCM2U2[1].jpg.[neftet@tutanota.com].boom" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\ikqeepzr\\bbcm2u2[1].jpg.[neftet@tutanota.com].boom")) returned 1 [0129.904] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\IKQEEPZR\\BBDGTbx[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\ikqeepzr\\bbdgtbx[1].jpg"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\IKQEEPZR\\BBDGTbx[1].jpg.[neftet@tutanota.com].boom" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\ikqeepzr\\bbdgtbx[1].jpg.[neftet@tutanota.com].boom")) returned 1 [0129.911] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\IKQEEPZR\\BBDk44m[1].png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\ikqeepzr\\bbdk44m[1].png"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\IKQEEPZR\\BBDk44m[1].png.[neftet@tutanota.com].boom" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\ikqeepzr\\bbdk44m[1].png.[neftet@tutanota.com].boom")) returned 1 [0129.914] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\IKQEEPZR\\BBDWXoC[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\ikqeepzr\\bbdwxoc[1].jpg"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\IKQEEPZR\\BBDWXoC[1].jpg.[neftet@tutanota.com].boom" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\ikqeepzr\\bbdwxoc[1].jpg.[neftet@tutanota.com].boom")) returned 1 [0129.917] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\IKQEEPZR\\BBE3NcH[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\ikqeepzr\\bbe3nch[1].jpg"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\IKQEEPZR\\BBE3NcH[1].jpg.[neftet@tutanota.com].boom" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\ikqeepzr\\bbe3nch[1].jpg.[neftet@tutanota.com].boom")) returned 1 [0129.920] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\IKQEEPZR\\BBE7GLE[1].png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\ikqeepzr\\bbe7gle[1].png"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\IKQEEPZR\\BBE7GLE[1].png.[neftet@tutanota.com].boom" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\ikqeepzr\\bbe7gle[1].png.[neftet@tutanota.com].boom")) returned 1 [0129.923] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\IKQEEPZR\\BBE8aLO[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\ikqeepzr\\bbe8alo[1].jpg"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\IKQEEPZR\\BBE8aLO[1].jpg.[neftet@tutanota.com].boom" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\ikqeepzr\\bbe8alo[1].jpg.[neftet@tutanota.com].boom")) returned 1 [0129.926] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\IKQEEPZR\\BBEd5bF[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\ikqeepzr\\bbed5bf[1].jpg"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\IKQEEPZR\\BBEd5bF[1].jpg.[neftet@tutanota.com].boom" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\ikqeepzr\\bbed5bf[1].jpg.[neftet@tutanota.com].boom")) returned 1 [0129.931] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\IKQEEPZR\\BBEdDNm[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\ikqeepzr\\bbeddnm[1].jpg"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\IKQEEPZR\\BBEdDNm[1].jpg.[neftet@tutanota.com].boom" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\ikqeepzr\\bbeddnm[1].jpg.[neftet@tutanota.com].boom")) returned 1 [0129.934] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\IKQEEPZR\\BBEdpyr[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\ikqeepzr\\bbedpyr[1].jpg"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\IKQEEPZR\\BBEdpyr[1].jpg.[neftet@tutanota.com].boom" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\ikqeepzr\\bbedpyr[1].jpg.[neftet@tutanota.com].boom")) returned 1 [0129.937] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\IKQEEPZR\\BBEdQdv[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\ikqeepzr\\bbedqdv[1].jpg"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\IKQEEPZR\\BBEdQdv[1].jpg.[neftet@tutanota.com].boom" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\ikqeepzr\\bbedqdv[1].jpg.[neftet@tutanota.com].boom")) returned 1 [0129.939] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\IKQEEPZR\\BBEe62t[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\ikqeepzr\\bbee62t[1].jpg"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\IKQEEPZR\\BBEe62t[1].jpg.[neftet@tutanota.com].boom" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\ikqeepzr\\bbee62t[1].jpg.[neftet@tutanota.com].boom")) returned 1 [0129.942] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\IKQEEPZR\\BBEedPR[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\ikqeepzr\\bbeedpr[1].jpg"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\IKQEEPZR\\BBEedPR[1].jpg.[neftet@tutanota.com].boom" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\ikqeepzr\\bbeedpr[1].jpg.[neftet@tutanota.com].boom")) returned 1 [0129.945] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\IKQEEPZR\\BBEeTpB[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\ikqeepzr\\bbeetpb[1].jpg"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\IKQEEPZR\\BBEeTpB[1].jpg.[neftet@tutanota.com].boom" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\ikqeepzr\\bbeetpb[1].jpg.[neftet@tutanota.com].boom")) returned 1 [0129.948] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\IKQEEPZR\\BBEeTuf[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\ikqeepzr\\bbeetuf[1].jpg"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\IKQEEPZR\\BBEeTuf[1].jpg.[neftet@tutanota.com].boom" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\ikqeepzr\\bbeetuf[1].jpg.[neftet@tutanota.com].boom")) returned 1 [0129.951] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\IKQEEPZR\\BBEeU5U[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\ikqeepzr\\bbeeu5u[1].jpg"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\IKQEEPZR\\BBEeU5U[1].jpg.[neftet@tutanota.com].boom" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\ikqeepzr\\bbeeu5u[1].jpg.[neftet@tutanota.com].boom")) returned 1 [0129.954] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\IKQEEPZR\\BBEf306[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\ikqeepzr\\bbef306[1].jpg"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\IKQEEPZR\\BBEf306[1].jpg.[neftet@tutanota.com].boom" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\ikqeepzr\\bbef306[1].jpg.[neftet@tutanota.com].boom")) returned 1 [0129.957] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\IKQEEPZR\\BBEf54R[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\ikqeepzr\\bbef54r[1].jpg"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\IKQEEPZR\\BBEf54R[1].jpg.[neftet@tutanota.com].boom" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\ikqeepzr\\bbef54r[1].jpg.[neftet@tutanota.com].boom")) returned 1 [0129.960] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\IKQEEPZR\\BBEfBbH[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\ikqeepzr\\bbefbbh[1].jpg"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\IKQEEPZR\\BBEfBbH[1].jpg.[neftet@tutanota.com].boom" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\ikqeepzr\\bbefbbh[1].jpg.[neftet@tutanota.com].boom")) returned 1 [0129.963] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\IKQEEPZR\\BBEfBq0[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\ikqeepzr\\bbefbq0[1].jpg"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\IKQEEPZR\\BBEfBq0[1].jpg.[neftet@tutanota.com].boom" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\ikqeepzr\\bbefbq0[1].jpg.[neftet@tutanota.com].boom")) returned 1 [0129.966] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\IKQEEPZR\\BBEfBrz[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\ikqeepzr\\bbefbrz[1].jpg"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\IKQEEPZR\\BBEfBrz[1].jpg.[neftet@tutanota.com].boom" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\ikqeepzr\\bbefbrz[1].jpg.[neftet@tutanota.com].boom")) returned 1 [0129.976] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\IKQEEPZR\\BBEfXl6[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\ikqeepzr\\bbefxl6[1].jpg"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\IKQEEPZR\\BBEfXl6[1].jpg.[neftet@tutanota.com].boom" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\ikqeepzr\\bbefxl6[1].jpg.[neftet@tutanota.com].boom")) returned 1 [0129.980] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\IKQEEPZR\\BBEgEH3[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\ikqeepzr\\bbegeh3[1].jpg"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\IKQEEPZR\\BBEgEH3[1].jpg.[neftet@tutanota.com].boom" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\ikqeepzr\\bbegeh3[1].jpg.[neftet@tutanota.com].boom")) returned 1 [0129.982] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\IKQEEPZR\\BBEgsz3[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\ikqeepzr\\bbegsz3[1].jpg"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\IKQEEPZR\\BBEgsz3[1].jpg.[neftet@tutanota.com].boom" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\ikqeepzr\\bbegsz3[1].jpg.[neftet@tutanota.com].boom")) returned 1 [0129.985] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\IKQEEPZR\\BBEgTxB[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\ikqeepzr\\bbegtxb[1].jpg"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\IKQEEPZR\\BBEgTxB[1].jpg.[neftet@tutanota.com].boom" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\ikqeepzr\\bbegtxb[1].jpg.[neftet@tutanota.com].boom")) returned 1 [0129.988] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\IKQEEPZR\\BBo1lFJ[2].png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\ikqeepzr\\bbo1lfj[2].png"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\IKQEEPZR\\BBo1lFJ[2].png.[neftet@tutanota.com].boom" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\ikqeepzr\\bbo1lfj[2].png.[neftet@tutanota.com].boom")) returned 1 [0129.991] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\IKQEEPZR\\BBs47TE[1].png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\ikqeepzr\\bbs47te[1].png"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\IKQEEPZR\\BBs47TE[1].png.[neftet@tutanota.com].boom" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\ikqeepzr\\bbs47te[1].png.[neftet@tutanota.com].boom")) returned 1 [0129.994] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\IKQEEPZR\\BBu9sWQ[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\ikqeepzr\\bbu9swq[1].jpg"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\IKQEEPZR\\BBu9sWQ[1].jpg.[neftet@tutanota.com].boom" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\ikqeepzr\\bbu9swq[1].jpg.[neftet@tutanota.com].boom")) returned 1 [0129.998] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\IKQEEPZR\\BByazif[2].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\ikqeepzr\\bbyazif[2].jpg"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\IKQEEPZR\\BByazif[2].jpg.[neftet@tutanota.com].boom" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\ikqeepzr\\bbyazif[2].jpg.[neftet@tutanota.com].boom")) returned 1 [0130.002] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\IKQEEPZR\\bs-components[1].css" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\ikqeepzr\\bs-components[1].css"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\IKQEEPZR\\bs-components[1].css.[neftet@tutanota.com].boom" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\ikqeepzr\\bs-components[1].css.[neftet@tutanota.com].boom")) returned 1 [0130.005] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\IKQEEPZR\\bs-util[1].css" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\ikqeepzr\\bs-util[1].css"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\IKQEEPZR\\bs-util[1].css.[neftet@tutanota.com].boom" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\ikqeepzr\\bs-util[1].css.[neftet@tutanota.com].boom")) returned 1 [0130.014] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\IKQEEPZR\\c7-bdbd0d-91cdfbc1[1].txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\ikqeepzr\\c7-bdbd0d-91cdfbc1[1].txt"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\IKQEEPZR\\c7-bdbd0d-91cdfbc1[1].txt.[neftet@tutanota.com].boom" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\ikqeepzr\\c7-bdbd0d-91cdfbc1[1].txt.[neftet@tutanota.com].boom")) returned 1 [0130.028] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\IKQEEPZR\\chrome.min[1].css" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\ikqeepzr\\chrome.min[1].css"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\IKQEEPZR\\chrome.min[1].css.[neftet@tutanota.com].boom" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\ikqeepzr\\chrome.min[1].css.[neftet@tutanota.com].boom")) returned 1 [0130.032] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\IKQEEPZR\\eula-mac[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\ikqeepzr\\eula-mac[1].jpg"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\IKQEEPZR\\eula-mac[1].jpg.[neftet@tutanota.com].boom" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\ikqeepzr\\eula-mac[1].jpg.[neftet@tutanota.com].boom")) returned 1 [0130.033] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\IKQEEPZR\\only[1].htm" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\ikqeepzr\\only[1].htm"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\IKQEEPZR\\only[1].htm.[neftet@tutanota.com].boom" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\ikqeepzr\\only[1].htm.[neftet@tutanota.com].boom")) returned 1 [0130.035] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\IKQEEPZR\\tecjslog[1].png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\ikqeepzr\\tecjslog[1].png"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\IKQEEPZR\\tecjslog[1].png.[neftet@tutanota.com].boom" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\ikqeepzr\\tecjslog[1].png.[neftet@tutanota.com].boom")) returned 1 [0130.041] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\IKQEEPZR\\thankyou[1].htm" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\ikqeepzr\\thankyou[1].htm"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\IKQEEPZR\\thankyou[1].htm.[neftet@tutanota.com].boom" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\ikqeepzr\\thankyou[1].htm.[neftet@tutanota.com].boom")) returned 1 [0130.044] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\IKQEEPZR\\th[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\ikqeepzr\\th[1].jpg"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\IKQEEPZR\\th[1].jpg.[neftet@tutanota.com].boom" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\ikqeepzr\\th[1].jpg.[neftet@tutanota.com].boom")) returned 1 [0130.049] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\YG1R61Z8\\0ff92924-f857-491e-a2ee-c0fe20f0d064[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\yg1r61z8\\0ff92924-f857-491e-a2ee-c0fe20f0d064[1].jpg"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\YG1R61Z8\\0ff92924-f857-491e-a2ee-c0fe20f0d064[1].jpg.[neftet@tutanota.com].boom" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\yg1r61z8\\0ff92924-f857-491e-a2ee-c0fe20f0d064[1].jpg.[neftet@tutanota.com].boom")) returned 1 [0130.061] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\YG1R61Z8\\26158[1].png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\yg1r61z8\\26158[1].png"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\YG1R61Z8\\26158[1].png.[neftet@tutanota.com].boom" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\yg1r61z8\\26158[1].png.[neftet@tutanota.com].boom")) returned 1 [0130.064] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\YG1R61Z8\\AA42x3V[1].png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\yg1r61z8\\aa42x3v[1].png"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\YG1R61Z8\\AA42x3V[1].png.[neftet@tutanota.com].boom" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\yg1r61z8\\aa42x3v[1].png.[neftet@tutanota.com].boom")) returned 1 [0130.066] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\YG1R61Z8\\AA58NQj[1].png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\yg1r61z8\\aa58nqj[1].png"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\YG1R61Z8\\AA58NQj[1].png.[neftet@tutanota.com].boom" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\yg1r61z8\\aa58nqj[1].png.[neftet@tutanota.com].boom")) returned 1 [0130.069] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\YG1R61Z8\\AA61Ofl[1].png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\yg1r61z8\\aa61ofl[1].png"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\YG1R61Z8\\AA61Ofl[1].png.[neftet@tutanota.com].boom" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\yg1r61z8\\aa61ofl[1].png.[neftet@tutanota.com].boom")) returned 1 [0130.072] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\YG1R61Z8\\AA6SFRQ[2].png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\yg1r61z8\\aa6sfrq[2].png"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\YG1R61Z8\\AA6SFRQ[2].png.[neftet@tutanota.com].boom" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\yg1r61z8\\aa6sfrq[2].png.[neftet@tutanota.com].boom")) returned 1 [0130.075] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\YG1R61Z8\\AAa1vhm[1].png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\yg1r61z8\\aaa1vhm[1].png"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\YG1R61Z8\\AAa1vhm[1].png.[neftet@tutanota.com].boom" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\yg1r61z8\\aaa1vhm[1].png.[neftet@tutanota.com].boom")) returned 1 [0130.077] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\YG1R61Z8\\AAa1xJF[1].png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\yg1r61z8\\aaa1xjf[1].png"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\YG1R61Z8\\AAa1xJF[1].png.[neftet@tutanota.com].boom" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\yg1r61z8\\aaa1xjf[1].png.[neftet@tutanota.com].boom")) returned 1 [0130.080] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\YG1R61Z8\\AAlG41q[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\yg1r61z8\\aalg41q[1].jpg"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\YG1R61Z8\\AAlG41q[1].jpg.[neftet@tutanota.com].boom" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\yg1r61z8\\aalg41q[1].jpg.[neftet@tutanota.com].boom")) returned 1 [0130.083] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\YG1R61Z8\\AAmin0Z[1].png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\yg1r61z8\\aamin0z[1].png"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\YG1R61Z8\\AAmin0Z[1].png.[neftet@tutanota.com].boom" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\yg1r61z8\\aamin0z[1].png.[neftet@tutanota.com].boom")) returned 1 [0130.086] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\YG1R61Z8\\AAnhRyj[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\yg1r61z8\\aanhryj[1].jpg"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\YG1R61Z8\\AAnhRyj[1].jpg.[neftet@tutanota.com].boom" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\yg1r61z8\\aanhryj[1].jpg.[neftet@tutanota.com].boom")) returned 1 [0130.090] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\YG1R61Z8\\activityi;src=2542116;cat=Chrom00;type=clien612;ord=2366422437621[1].htm" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\yg1r61z8\\activityi;src=2542116;cat=chrom00;type=clien612;ord=2366422437621[1].htm"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\YG1R61Z8\\activityi;src=2542116;cat=Chrom00;type=clien612;ord=2366422437621[1].htm.[neftet@tutanota.com].boom" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\yg1r61z8\\activityi;src=2542116;cat=chrom00;type=clien612;ord=2366422437621[1].htm.[neftet@tutanota.com].boom")) returned 1 [0130.095] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\YG1R61Z8\\ae8e984b-1820-4a8d-93dc-392ed6563fb6[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\yg1r61z8\\ae8e984b-1820-4a8d-93dc-392ed6563fb6[1].jpg"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\YG1R61Z8\\ae8e984b-1820-4a8d-93dc-392ed6563fb6[1].jpg.[neftet@tutanota.com].boom" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\yg1r61z8\\ae8e984b-1820-4a8d-93dc-392ed6563fb6[1].jpg.[neftet@tutanota.com].boom")) returned 1 [0130.098] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\YG1R61Z8\\BB56XTo[1].png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\yg1r61z8\\bb56xto[1].png"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\YG1R61Z8\\BB56XTo[1].png.[neftet@tutanota.com].boom" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\yg1r61z8\\bb56xto[1].png.[neftet@tutanota.com].boom")) returned 1 [0130.101] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\YG1R61Z8\\BB5vO0g[1].png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\yg1r61z8\\bb5vo0g[1].png"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\YG1R61Z8\\BB5vO0g[1].png.[neftet@tutanota.com].boom" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\yg1r61z8\\bb5vo0g[1].png.[neftet@tutanota.com].boom")) returned 1 [0130.103] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\YG1R61Z8\\BB8AdqN[1].png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\yg1r61z8\\bb8adqn[1].png"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\YG1R61Z8\\BB8AdqN[1].png.[neftet@tutanota.com].boom" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\yg1r61z8\\bb8adqn[1].png.[neftet@tutanota.com].boom")) returned 1 [0130.107] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\YG1R61Z8\\BBALZyp[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\yg1r61z8\\bbalzyp[1].jpg"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\YG1R61Z8\\BBALZyp[1].jpg.[neftet@tutanota.com].boom" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\yg1r61z8\\bbalzyp[1].jpg.[neftet@tutanota.com].boom")) returned 1 [0130.109] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\YG1R61Z8\\BBBImKp[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\yg1r61z8\\bbbimkp[1].jpg"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\YG1R61Z8\\BBBImKp[1].jpg.[neftet@tutanota.com].boom" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\yg1r61z8\\bbbimkp[1].jpg.[neftet@tutanota.com].boom")) returned 1 [0130.113] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\YG1R61Z8\\BBBMGJo[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\yg1r61z8\\bbbmgjo[1].jpg"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\YG1R61Z8\\BBBMGJo[1].jpg.[neftet@tutanota.com].boom" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\yg1r61z8\\bbbmgjo[1].jpg.[neftet@tutanota.com].boom")) returned 1 [0130.115] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\YG1R61Z8\\BBBMKDF[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\yg1r61z8\\bbbmkdf[1].jpg"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\YG1R61Z8\\BBBMKDF[1].jpg.[neftet@tutanota.com].boom" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\yg1r61z8\\bbbmkdf[1].jpg.[neftet@tutanota.com].boom")) returned 1 [0130.118] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\YG1R61Z8\\BBBMQch[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\yg1r61z8\\bbbmqch[1].jpg"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\YG1R61Z8\\BBBMQch[1].jpg.[neftet@tutanota.com].boom" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\yg1r61z8\\bbbmqch[1].jpg.[neftet@tutanota.com].boom")) returned 1 [0130.122] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\YG1R61Z8\\BBBMyVh[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\yg1r61z8\\bbbmyvh[1].jpg"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\YG1R61Z8\\BBBMyVh[1].jpg.[neftet@tutanota.com].boom" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\yg1r61z8\\bbbmyvh[1].jpg.[neftet@tutanota.com].boom")) returned 1 [0130.125] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\YG1R61Z8\\BBBNAf7[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\yg1r61z8\\bbbnaf7[1].jpg"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\YG1R61Z8\\BBBNAf7[1].jpg.[neftet@tutanota.com].boom" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\yg1r61z8\\bbbnaf7[1].jpg.[neftet@tutanota.com].boom")) returned 1 [0130.127] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\YG1R61Z8\\BBBNnTF[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\yg1r61z8\\bbbnntf[1].jpg"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\YG1R61Z8\\BBBNnTF[1].jpg.[neftet@tutanota.com].boom" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\yg1r61z8\\bbbnntf[1].jpg.[neftet@tutanota.com].boom")) returned 1 [0130.130] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\YG1R61Z8\\BBBO4dZ[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\yg1r61z8\\bbbo4dz[1].jpg"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\YG1R61Z8\\BBBO4dZ[1].jpg.[neftet@tutanota.com].boom" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\yg1r61z8\\bbbo4dz[1].jpg.[neftet@tutanota.com].boom")) returned 1 [0130.138] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\YG1R61Z8\\BBBO8ow[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\yg1r61z8\\bbbo8ow[1].jpg"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\YG1R61Z8\\BBBO8ow[1].jpg.[neftet@tutanota.com].boom" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\yg1r61z8\\bbbo8ow[1].jpg.[neftet@tutanota.com].boom")) returned 1 [0130.141] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\YG1R61Z8\\BBBOaeS[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\yg1r61z8\\bbboaes[1].jpg"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\YG1R61Z8\\BBBOaeS[1].jpg.[neftet@tutanota.com].boom" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\yg1r61z8\\bbboaes[1].jpg.[neftet@tutanota.com].boom")) returned 1 [0130.144] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\YG1R61Z8\\BBBOcIb[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\yg1r61z8\\bbbocib[1].jpg"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\YG1R61Z8\\BBBOcIb[1].jpg.[neftet@tutanota.com].boom" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\yg1r61z8\\bbbocib[1].jpg.[neftet@tutanota.com].boom")) returned 1 [0130.147] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\YG1R61Z8\\BBBOddp[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\yg1r61z8\\bbboddp[1].jpg"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\YG1R61Z8\\BBBOddp[1].jpg.[neftet@tutanota.com].boom" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\yg1r61z8\\bbboddp[1].jpg.[neftet@tutanota.com].boom")) returned 1 [0130.155] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\YG1R61Z8\\BBBOmar[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\yg1r61z8\\bbbomar[1].jpg"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\YG1R61Z8\\BBBOmar[1].jpg.[neftet@tutanota.com].boom" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\yg1r61z8\\bbbomar[1].jpg.[neftet@tutanota.com].boom")) returned 1 [0130.158] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\YG1R61Z8\\BBBR4yQ[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\yg1r61z8\\bbbr4yq[1].jpg"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\YG1R61Z8\\BBBR4yQ[1].jpg.[neftet@tutanota.com].boom" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\yg1r61z8\\bbbr4yq[1].jpg.[neftet@tutanota.com].boom")) returned 1 [0130.161] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\YG1R61Z8\\BBBUPaj[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\yg1r61z8\\bbbupaj[1].jpg"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\YG1R61Z8\\BBBUPaj[1].jpg.[neftet@tutanota.com].boom" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\yg1r61z8\\bbbupaj[1].jpg.[neftet@tutanota.com].boom")) returned 1 [0130.164] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\YG1R61Z8\\BBBVEOW[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\yg1r61z8\\bbbveow[1].jpg"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\YG1R61Z8\\BBBVEOW[1].jpg.[neftet@tutanota.com].boom" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\yg1r61z8\\bbbveow[1].jpg.[neftet@tutanota.com].boom")) returned 1 [0130.167] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\YG1R61Z8\\BBBVLcG[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\yg1r61z8\\bbbvlcg[1].jpg"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\YG1R61Z8\\BBBVLcG[1].jpg.[neftet@tutanota.com].boom" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\yg1r61z8\\bbbvlcg[1].jpg.[neftet@tutanota.com].boom")) returned 1 [0130.170] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\YG1R61Z8\\BBBVSkP[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\yg1r61z8\\bbbvskp[1].jpg"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\YG1R61Z8\\BBBVSkP[1].jpg.[neftet@tutanota.com].boom" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\yg1r61z8\\bbbvskp[1].jpg.[neftet@tutanota.com].boom")) returned 1 [0130.173] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\YG1R61Z8\\BBBYfEH[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\yg1r61z8\\bbbyfeh[1].jpg"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\YG1R61Z8\\BBBYfEH[1].jpg.[neftet@tutanota.com].boom" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\yg1r61z8\\bbbyfeh[1].jpg.[neftet@tutanota.com].boom")) returned 1 [0130.176] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\YG1R61Z8\\BBBZ5vT[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\yg1r61z8\\bbbz5vt[1].jpg"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\YG1R61Z8\\BBBZ5vT[1].jpg.[neftet@tutanota.com].boom" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\yg1r61z8\\bbbz5vt[1].jpg.[neftet@tutanota.com].boom")) returned 1 [0130.178] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\YG1R61Z8\\BBC02Gr[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\yg1r61z8\\bbc02gr[1].jpg"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\YG1R61Z8\\BBC02Gr[1].jpg.[neftet@tutanota.com].boom" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\yg1r61z8\\bbc02gr[1].jpg.[neftet@tutanota.com].boom")) returned 1 [0130.181] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\YG1R61Z8\\BBC02Gr[2].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\yg1r61z8\\bbc02gr[2].jpg"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\YG1R61Z8\\BBC02Gr[2].jpg.[neftet@tutanota.com].boom" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\yg1r61z8\\bbc02gr[2].jpg.[neftet@tutanota.com].boom")) returned 1 [0130.185] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\YG1R61Z8\\BBC03B1[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\yg1r61z8\\bbc03b1[1].jpg"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\YG1R61Z8\\BBC03B1[1].jpg.[neftet@tutanota.com].boom" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\yg1r61z8\\bbc03b1[1].jpg.[neftet@tutanota.com].boom")) returned 1 [0130.187] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\YG1R61Z8\\BBC06Ub[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\yg1r61z8\\bbc06ub[1].jpg"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\YG1R61Z8\\BBC06Ub[1].jpg.[neftet@tutanota.com].boom" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\yg1r61z8\\bbc06ub[1].jpg.[neftet@tutanota.com].boom")) returned 1 [0130.190] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\YG1R61Z8\\BBC0Djg[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\yg1r61z8\\bbc0djg[1].jpg"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\YG1R61Z8\\BBC0Djg[1].jpg.[neftet@tutanota.com].boom" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\yg1r61z8\\bbc0djg[1].jpg.[neftet@tutanota.com].boom")) returned 1 [0130.193] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\YG1R61Z8\\BBC0g7a[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\yg1r61z8\\bbc0g7a[1].jpg"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\YG1R61Z8\\BBC0g7a[1].jpg.[neftet@tutanota.com].boom" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\yg1r61z8\\bbc0g7a[1].jpg.[neftet@tutanota.com].boom")) returned 1 [0130.196] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\YG1R61Z8\\BBC0lf2[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\yg1r61z8\\bbc0lf2[1].jpg"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\YG1R61Z8\\BBC0lf2[1].jpg.[neftet@tutanota.com].boom" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\yg1r61z8\\bbc0lf2[1].jpg.[neftet@tutanota.com].boom")) returned 1 [0130.200] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\YG1R61Z8\\BBC0mK1[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\yg1r61z8\\bbc0mk1[1].jpg"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\YG1R61Z8\\BBC0mK1[1].jpg.[neftet@tutanota.com].boom" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\yg1r61z8\\bbc0mk1[1].jpg.[neftet@tutanota.com].boom")) returned 1 [0130.203] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\YG1R61Z8\\BBC0qlB[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\yg1r61z8\\bbc0qlb[1].jpg"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\YG1R61Z8\\BBC0qlB[1].jpg.[neftet@tutanota.com].boom" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\yg1r61z8\\bbc0qlb[1].jpg.[neftet@tutanota.com].boom")) returned 1 [0130.206] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\YG1R61Z8\\BBE7KPZ[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\yg1r61z8\\bbe7kpz[1].jpg"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\YG1R61Z8\\BBE7KPZ[1].jpg.[neftet@tutanota.com].boom" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\yg1r61z8\\bbe7kpz[1].jpg.[neftet@tutanota.com].boom")) returned 1 [0130.209] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\YG1R61Z8\\BBE8IlA[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\yg1r61z8\\bbe8ila[1].jpg"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\YG1R61Z8\\BBE8IlA[1].jpg.[neftet@tutanota.com].boom" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\yg1r61z8\\bbe8ila[1].jpg.[neftet@tutanota.com].boom")) returned 1 [0130.212] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\YG1R61Z8\\BBE972F[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\yg1r61z8\\bbe972f[1].jpg"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\YG1R61Z8\\BBE972F[1].jpg.[neftet@tutanota.com].boom" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\yg1r61z8\\bbe972f[1].jpg.[neftet@tutanota.com].boom")) returned 1 [0130.216] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\YG1R61Z8\\BBE9tdx[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\yg1r61z8\\bbe9tdx[1].jpg"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\YG1R61Z8\\BBE9tdx[1].jpg.[neftet@tutanota.com].boom" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\yg1r61z8\\bbe9tdx[1].jpg.[neftet@tutanota.com].boom")) returned 1 [0130.219] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\YG1R61Z8\\BBEdrqt[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\yg1r61z8\\bbedrqt[1].jpg"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\YG1R61Z8\\BBEdrqt[1].jpg.[neftet@tutanota.com].boom" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\yg1r61z8\\bbedrqt[1].jpg.[neftet@tutanota.com].boom")) returned 1 [0130.222] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\YG1R61Z8\\BBEeEwt[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\yg1r61z8\\bbeeewt[1].jpg"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\YG1R61Z8\\BBEeEwt[1].jpg.[neftet@tutanota.com].boom" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\yg1r61z8\\bbeeewt[1].jpg.[neftet@tutanota.com].boom")) returned 1 [0130.225] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\YG1R61Z8\\BBEeis3[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\yg1r61z8\\bbeeis3[1].jpg"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\YG1R61Z8\\BBEeis3[1].jpg.[neftet@tutanota.com].boom" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\yg1r61z8\\bbeeis3[1].jpg.[neftet@tutanota.com].boom")) returned 1 [0130.228] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\YG1R61Z8\\BBEeKvV[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\yg1r61z8\\bbeekvv[1].jpg"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\YG1R61Z8\\BBEeKvV[1].jpg.[neftet@tutanota.com].boom" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\yg1r61z8\\bbeekvv[1].jpg.[neftet@tutanota.com].boom")) returned 1 [0130.234] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\YG1R61Z8\\BBEeNd8[1].png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\yg1r61z8\\bbeend8[1].png"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\YG1R61Z8\\BBEeNd8[1].png.[neftet@tutanota.com].boom" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\yg1r61z8\\bbeend8[1].png.[neftet@tutanota.com].boom")) returned 1 [0130.243] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\YG1R61Z8\\BBEewZB[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\yg1r61z8\\bbeewzb[1].jpg"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\YG1R61Z8\\BBEewZB[1].jpg.[neftet@tutanota.com].boom" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\yg1r61z8\\bbeewzb[1].jpg.[neftet@tutanota.com].boom")) returned 1 [0130.246] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\YG1R61Z8\\BBEeZ0k[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\yg1r61z8\\bbeez0k[1].jpg"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\YG1R61Z8\\BBEeZ0k[1].jpg.[neftet@tutanota.com].boom" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\yg1r61z8\\bbeez0k[1].jpg.[neftet@tutanota.com].boom")) returned 1 [0130.250] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\YG1R61Z8\\BBEf6s4[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\yg1r61z8\\bbef6s4[1].jpg"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\YG1R61Z8\\BBEf6s4[1].jpg.[neftet@tutanota.com].boom" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\yg1r61z8\\bbef6s4[1].jpg.[neftet@tutanota.com].boom")) returned 1 [0130.253] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\YG1R61Z8\\BBEfAc5[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\yg1r61z8\\bbefac5[1].jpg"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\YG1R61Z8\\BBEfAc5[1].jpg.[neftet@tutanota.com].boom" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\yg1r61z8\\bbefac5[1].jpg.[neftet@tutanota.com].boom")) returned 1 [0130.256] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\YG1R61Z8\\BBEfgDi[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\yg1r61z8\\bbefgdi[1].jpg"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\YG1R61Z8\\BBEfgDi[1].jpg.[neftet@tutanota.com].boom" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\yg1r61z8\\bbefgdi[1].jpg.[neftet@tutanota.com].boom")) returned 1 [0130.259] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\YG1R61Z8\\BBEfjuT[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\yg1r61z8\\bbefjut[1].jpg"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\YG1R61Z8\\BBEfjuT[1].jpg.[neftet@tutanota.com].boom" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\yg1r61z8\\bbefjut[1].jpg.[neftet@tutanota.com].boom")) returned 1 [0130.263] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\YG1R61Z8\\BBEfkgi[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\yg1r61z8\\bbefkgi[1].jpg"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\YG1R61Z8\\BBEfkgi[1].jpg.[neftet@tutanota.com].boom" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\yg1r61z8\\bbefkgi[1].jpg.[neftet@tutanota.com].boom")) returned 1 [0130.266] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\YG1R61Z8\\BBEfRKA[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\yg1r61z8\\bbefrka[1].jpg"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\YG1R61Z8\\BBEfRKA[1].jpg.[neftet@tutanota.com].boom" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\yg1r61z8\\bbefrka[1].jpg.[neftet@tutanota.com].boom")) returned 1 [0130.270] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\YG1R61Z8\\BBEfRwv[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\yg1r61z8\\bbefrwv[1].jpg"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\YG1R61Z8\\BBEfRwv[1].jpg.[neftet@tutanota.com].boom" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\yg1r61z8\\bbefrwv[1].jpg.[neftet@tutanota.com].boom")) returned 1 [0130.273] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\YG1R61Z8\\BBEfwtU[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\yg1r61z8\\bbefwtu[1].jpg"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\YG1R61Z8\\BBEfwtU[1].jpg.[neftet@tutanota.com].boom" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\yg1r61z8\\bbefwtu[1].jpg.[neftet@tutanota.com].boom")) returned 1 [0130.282] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\YG1R61Z8\\BBEfY4X[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\yg1r61z8\\bbefy4x[1].jpg"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\YG1R61Z8\\BBEfY4X[1].jpg.[neftet@tutanota.com].boom" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\yg1r61z8\\bbefy4x[1].jpg.[neftet@tutanota.com].boom")) returned 1 [0130.286] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\YG1R61Z8\\BBEgD9f[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\yg1r61z8\\bbegd9f[1].jpg"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\YG1R61Z8\\BBEgD9f[1].jpg.[neftet@tutanota.com].boom" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\yg1r61z8\\bbegd9f[1].jpg.[neftet@tutanota.com].boom")) returned 1 [0130.288] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\YG1R61Z8\\BBEgJfz[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\yg1r61z8\\bbegjfz[1].jpg"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\YG1R61Z8\\BBEgJfz[1].jpg.[neftet@tutanota.com].boom" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\yg1r61z8\\bbegjfz[1].jpg.[neftet@tutanota.com].boom")) returned 1 [0130.291] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\YG1R61Z8\\BBEgsWA[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\yg1r61z8\\bbegswa[1].jpg"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\YG1R61Z8\\BBEgsWA[1].jpg.[neftet@tutanota.com].boom" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\yg1r61z8\\bbegswa[1].jpg.[neftet@tutanota.com].boom")) returned 1 [0130.294] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\YG1R61Z8\\BBEgX5G[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\yg1r61z8\\bbegx5g[1].jpg"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\YG1R61Z8\\BBEgX5G[1].jpg.[neftet@tutanota.com].boom" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\yg1r61z8\\bbegx5g[1].jpg.[neftet@tutanota.com].boom")) returned 1 [0130.297] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\YG1R61Z8\\BBih5H[1].png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\yg1r61z8\\bbih5h[1].png"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\YG1R61Z8\\BBih5H[1].png.[neftet@tutanota.com].boom" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\yg1r61z8\\bbih5h[1].png.[neftet@tutanota.com].boom")) returned 1 [0130.300] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\YG1R61Z8\\BBmUxRK[1].png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\yg1r61z8\\bbmuxrk[1].png"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\YG1R61Z8\\BBmUxRK[1].png.[neftet@tutanota.com].boom" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\yg1r61z8\\bbmuxrk[1].png.[neftet@tutanota.com].boom")) returned 1 [0130.303] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\YG1R61Z8\\BBndhJA[1].png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\yg1r61z8\\bbndhja[1].png"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\YG1R61Z8\\BBndhJA[1].png.[neftet@tutanota.com].boom" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\yg1r61z8\\bbndhja[1].png.[neftet@tutanota.com].boom")) returned 1 [0130.306] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\YG1R61Z8\\BBoqF0J[1].png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\yg1r61z8\\bboqf0j[1].png"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\YG1R61Z8\\BBoqF0J[1].png.[neftet@tutanota.com].boom" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\yg1r61z8\\bboqf0j[1].png.[neftet@tutanota.com].boom")) returned 1 [0130.309] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\YG1R61Z8\\BBzjV9E[1].png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\yg1r61z8\\bbzjv9e[1].png"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\YG1R61Z8\\BBzjV9E[1].png.[neftet@tutanota.com].boom" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\yg1r61z8\\bbzjv9e[1].png.[neftet@tutanota.com].boom")) returned 1 [0130.317] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\YG1R61Z8\\benefits-1[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\yg1r61z8\\benefits-1[1].jpg"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\YG1R61Z8\\benefits-1[1].jpg.[neftet@tutanota.com].boom" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\yg1r61z8\\benefits-1[1].jpg.[neftet@tutanota.com].boom")) returned 1 [0130.320] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\YG1R61Z8\\chrome_logo_2x[1].png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\yg1r61z8\\chrome_logo_2x[1].png"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\YG1R61Z8\\chrome_logo_2x[1].png.[neftet@tutanota.com].boom" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\yg1r61z8\\chrome_logo_2x[1].png.[neftet@tutanota.com].boom")) returned 1 [0130.323] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\YG1R61Z8\\close-icon[1].png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\yg1r61z8\\close-icon[1].png"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\YG1R61Z8\\close-icon[1].png.[neftet@tutanota.com].boom" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\yg1r61z8\\close-icon[1].png.[neftet@tutanota.com].boom")) returned 1 [0130.333] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\YG1R61Z8\\css[1].txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\yg1r61z8\\css[1].txt"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\YG1R61Z8\\css[1].txt.[neftet@tutanota.com].boom" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\yg1r61z8\\css[1].txt.[neftet@tutanota.com].boom")) returned 1 [0130.338] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\YG1R61Z8\\eula-win[1].jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\yg1r61z8\\eula-win[1].jpg"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\YG1R61Z8\\eula-win[1].jpg.[neftet@tutanota.com].boom" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\yg1r61z8\\eula-win[1].jpg.[neftet@tutanota.com].boom")) returned 1 [0130.342] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\YG1R61Z8\\msn[1].htm" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\yg1r61z8\\msn[1].htm"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\YG1R61Z8\\msn[1].htm.[neftet@tutanota.com].boom" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\yg1r61z8\\msn[1].htm.[neftet@tutanota.com].boom")) returned 1 [0130.346] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\YG1R61Z8\\uid[1].htm" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\yg1r61z8\\uid[1].htm"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\YG1R61Z8\\uid[1].htm.[neftet@tutanota.com].boom" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\yg1r61z8\\uid[1].htm.[neftet@tutanota.com].boom")) returned 1 [0130.355] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\YG1R61Z8\\wc-addons[1].css" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\yg1r61z8\\wc-addons[1].css"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\YG1R61Z8\\wc-addons[1].css.[neftet@tutanota.com].boom" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\yg1r61z8\\wc-addons[1].css.[neftet@tutanota.com].boom")) returned 1 [0130.361] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows Mail\\oeold.xml" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows mail\\oeold.xml"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows Mail\\oeold.xml.[neftet@tutanota.com].boom" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows mail\\oeold.xml.[neftet@tutanota.com].boom")) returned 1 [0130.367] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows Mail\\Stationery\\Bears.htm" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows mail\\stationery\\bears.htm"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows Mail\\Stationery\\Bears.htm.[neftet@tutanota.com].boom" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows mail\\stationery\\bears.htm.[neftet@tutanota.com].boom")) returned 1 [0130.375] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows Mail\\Stationery\\Bears.jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows mail\\stationery\\bears.jpg"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows Mail\\Stationery\\Bears.jpg.[neftet@tutanota.com].boom" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows mail\\stationery\\bears.jpg.[neftet@tutanota.com].boom")) returned 1 [0130.379] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows Mail\\Stationery\\Garden.htm" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows mail\\stationery\\garden.htm"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows Mail\\Stationery\\Garden.htm.[neftet@tutanota.com].boom" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows mail\\stationery\\garden.htm.[neftet@tutanota.com].boom")) returned 1 [0130.383] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows Mail\\Stationery\\Garden.jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows mail\\stationery\\garden.jpg"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows Mail\\Stationery\\Garden.jpg.[neftet@tutanota.com].boom" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows mail\\stationery\\garden.jpg.[neftet@tutanota.com].boom")) returned 1 [0130.386] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows Mail\\Stationery\\Green Bubbles.htm" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows mail\\stationery\\green bubbles.htm"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows Mail\\Stationery\\Green Bubbles.htm.[neftet@tutanota.com].boom" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows mail\\stationery\\green bubbles.htm.[neftet@tutanota.com].boom")) returned 1 [0130.390] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows Mail\\Stationery\\GreenBubbles.jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows mail\\stationery\\greenbubbles.jpg"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows Mail\\Stationery\\GreenBubbles.jpg.[neftet@tutanota.com].boom" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows mail\\stationery\\greenbubbles.jpg.[neftet@tutanota.com].boom")) returned 1 [0130.393] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows Mail\\Stationery\\Hand Prints.htm" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows mail\\stationery\\hand prints.htm"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows Mail\\Stationery\\Hand Prints.htm.[neftet@tutanota.com].boom" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows mail\\stationery\\hand prints.htm.[neftet@tutanota.com].boom")) returned 1 [0130.400] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows Mail\\Stationery\\HandPrints.jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows mail\\stationery\\handprints.jpg"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows Mail\\Stationery\\HandPrints.jpg.[neftet@tutanota.com].boom" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows mail\\stationery\\handprints.jpg.[neftet@tutanota.com].boom")) returned 1 [0130.403] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows Mail\\Stationery\\Orange Circles.htm" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows mail\\stationery\\orange circles.htm"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows Mail\\Stationery\\Orange Circles.htm.[neftet@tutanota.com].boom" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows mail\\stationery\\orange circles.htm.[neftet@tutanota.com].boom")) returned 1 [0130.406] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows Mail\\Stationery\\OrangeCircles.jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows mail\\stationery\\orangecircles.jpg"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows Mail\\Stationery\\OrangeCircles.jpg.[neftet@tutanota.com].boom" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows mail\\stationery\\orangecircles.jpg.[neftet@tutanota.com].boom")) returned 1 [0130.410] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows Mail\\Stationery\\Peacock.htm" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows mail\\stationery\\peacock.htm"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows Mail\\Stationery\\Peacock.htm.[neftet@tutanota.com].boom" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows mail\\stationery\\peacock.htm.[neftet@tutanota.com].boom")) returned 1 [0130.413] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows Mail\\Stationery\\Peacock.jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows mail\\stationery\\peacock.jpg"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows Mail\\Stationery\\Peacock.jpg.[neftet@tutanota.com].boom" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows mail\\stationery\\peacock.jpg.[neftet@tutanota.com].boom")) returned 1 [0130.416] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows Mail\\Stationery\\Roses.htm" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows mail\\stationery\\roses.htm"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows Mail\\Stationery\\Roses.htm.[neftet@tutanota.com].boom" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows mail\\stationery\\roses.htm.[neftet@tutanota.com].boom")) returned 1 [0130.419] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows Mail\\Stationery\\Roses.jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows mail\\stationery\\roses.jpg"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows Mail\\Stationery\\Roses.jpg.[neftet@tutanota.com].boom" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows mail\\stationery\\roses.jpg.[neftet@tutanota.com].boom")) returned 1 [0130.422] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows Mail\\Stationery\\Shades of Blue.htm" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows mail\\stationery\\shades of blue.htm"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows Mail\\Stationery\\Shades of Blue.htm.[neftet@tutanota.com].boom" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows mail\\stationery\\shades of blue.htm.[neftet@tutanota.com].boom")) returned 1 [0130.425] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows Mail\\Stationery\\ShadesOfBlue.jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows mail\\stationery\\shadesofblue.jpg"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows Mail\\Stationery\\ShadesOfBlue.jpg.[neftet@tutanota.com].boom" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows mail\\stationery\\shadesofblue.jpg.[neftet@tutanota.com].boom")) returned 1 [0130.428] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows Mail\\Stationery\\Soft Blue.htm" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows mail\\stationery\\soft blue.htm"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows Mail\\Stationery\\Soft Blue.htm.[neftet@tutanota.com].boom" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows mail\\stationery\\soft blue.htm.[neftet@tutanota.com].boom")) returned 1 [0130.432] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows Mail\\Stationery\\SoftBlue.jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows mail\\stationery\\softblue.jpg"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows Mail\\Stationery\\SoftBlue.jpg.[neftet@tutanota.com].boom" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows mail\\stationery\\softblue.jpg.[neftet@tutanota.com].boom")) returned 1 [0130.436] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows Mail\\Stationery\\Stars.htm" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows mail\\stationery\\stars.htm"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows Mail\\Stationery\\Stars.htm.[neftet@tutanota.com].boom" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows mail\\stationery\\stars.htm.[neftet@tutanota.com].boom")) returned 1 [0130.439] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows Mail\\Stationery\\Stars.jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows mail\\stationery\\stars.jpg"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows Mail\\Stationery\\Stars.jpg.[neftet@tutanota.com].boom" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows mail\\stationery\\stars.jpg.[neftet@tutanota.com].boom")) returned 1 [0130.455] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\thumbnails\\4cc87c1409819bf06f42b782d4902b2f.png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\mozilla\\firefox\\profiles\\silmbjec.default\\thumbnails\\4cc87c1409819bf06f42b782d4902b2f.png"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\thumbnails\\4cc87c1409819bf06f42b782d4902b2f.png.[neftet@tutanota.com].boom" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\mozilla\\firefox\\profiles\\silmbjec.default\\thumbnails\\4cc87c1409819bf06f42b782d4902b2f.png.[neftet@tutanota.com].boom")) returned 1 [0130.458] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\thumbnails\\ba182bcd131f1f3c6b6fbbb1ba078341.png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\mozilla\\firefox\\profiles\\silmbjec.default\\thumbnails\\ba182bcd131f1f3c6b6fbbb1ba078341.png"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\thumbnails\\ba182bcd131f1f3c6b6fbbb1ba078341.png.[neftet@tutanota.com].boom" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\mozilla\\firefox\\profiles\\silmbjec.default\\thumbnails\\ba182bcd131f1f3c6b6fbbb1ba078341.png.[neftet@tutanota.com].boom")) returned 1 [0130.467] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\thumbnails\\ce8c0453589216a67cddb50284fbfe8d.png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\mozilla\\firefox\\profiles\\silmbjec.default\\thumbnails\\ce8c0453589216a67cddb50284fbfe8d.png"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\thumbnails\\ce8c0453589216a67cddb50284fbfe8d.png.[neftet@tutanota.com].boom" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\mozilla\\firefox\\profiles\\silmbjec.default\\thumbnails\\ce8c0453589216a67cddb50284fbfe8d.png.[neftet@tutanota.com].boom")) returned 1 [0130.470] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\updates\\E7CF176E110C211B\\active-update.xml" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\mozilla\\updates\\e7cf176e110c211b\\active-update.xml"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\updates\\E7CF176E110C211B\\active-update.xml.[neftet@tutanota.com].boom" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\mozilla\\updates\\e7cf176e110c211b\\active-update.xml.[neftet@tutanota.com].boom")) returned 1 [0130.473] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\updates\\E7CF176E110C211B\\updates.xml" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\mozilla\\updates\\e7cf176e110c211b\\updates.xml"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\updates\\E7CF176E110C211B\\updates.xml.[neftet@tutanota.com].boom" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\mozilla\\updates\\e7cf176e110c211b\\updates.xml.[neftet@tutanota.com].boom")) returned 1 [0130.478] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Temp\\0glQt3J-nqfaaH.wav" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\temp\\0glqt3j-nqfaah.wav"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Temp\\0glQt3J-nqfaaH.wav.[neftet@tutanota.com].boom" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\temp\\0glqt3j-nqfaah.wav.[neftet@tutanota.com].boom")) returned 1 [0130.483] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Temp\\1SzAFaI_6MhwTCJk.wav" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\temp\\1szafai_6mhwtcjk.wav"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Temp\\1SzAFaI_6MhwTCJk.wav.[neftet@tutanota.com].boom" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\temp\\1szafai_6mhwtcjk.wav.[neftet@tutanota.com].boom")) returned 1 [0130.490] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Temp\\7bImiLz8j_.doc" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\temp\\7bimilz8j_.doc"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Temp\\7bImiLz8j_.doc.[neftet@tutanota.com].boom" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\temp\\7bimilz8j_.doc.[neftet@tutanota.com].boom")) returned 1 [0130.496] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Temp\\8cpGFmlxd7k-KSL6RQQR.wav" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\temp\\8cpgfmlxd7k-ksl6rqqr.wav"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Temp\\8cpGFmlxd7k-KSL6RQQR.wav.[neftet@tutanota.com].boom" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\temp\\8cpgfmlxd7k-ksl6rqqr.wav.[neftet@tutanota.com].boom")) returned 1 [0130.504] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Adobe\\Acrobat\\10.0\\rdrmessage.zip" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\locallow\\adobe\\acrobat\\10.0\\rdrmessage.zip"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Adobe\\Acrobat\\10.0\\rdrmessage.zip.[neftet@tutanota.com].boom" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\locallow\\adobe\\acrobat\\10.0\\rdrmessage.zip.[neftet@tutanota.com].boom")) returned 1 [0130.546] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Microsoft\\Internet Explorer\\DOMStore\\36USA68T\\imagesrv.adition[1].xml" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\locallow\\microsoft\\internet explorer\\domstore\\36usa68t\\imagesrv.adition[1].xml"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Microsoft\\Internet Explorer\\DOMStore\\36USA68T\\imagesrv.adition[1].xml.[neftet@tutanota.com].boom" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\locallow\\microsoft\\internet explorer\\domstore\\36usa68t\\imagesrv.adition[1].xml.[neftet@tutanota.com].boom")) returned 1 [0130.554] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Microsoft\\Internet Explorer\\DOMStore\\3O75JDME\\www.google[1].xml" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\locallow\\microsoft\\internet explorer\\domstore\\3o75jdme\\www.google[1].xml"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Microsoft\\Internet Explorer\\DOMStore\\3O75JDME\\www.google[1].xml.[neftet@tutanota.com].boom" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\locallow\\microsoft\\internet explorer\\domstore\\3o75jdme\\www.google[1].xml.[neftet@tutanota.com].boom")) returned 1 [0130.558] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Microsoft\\Internet Explorer\\DOMStore\\VGMTOI09\\www.msn[1].xml" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\locallow\\microsoft\\internet explorer\\domstore\\vgmtoi09\\www.msn[1].xml"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Microsoft\\Internet Explorer\\DOMStore\\VGMTOI09\\www.msn[1].xml.[neftet@tutanota.com].boom" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\locallow\\microsoft\\internet explorer\\domstore\\vgmtoi09\\www.msn[1].xml.[neftet@tutanota.com].boom")) returned 1 [0130.567] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\9YRyg0lQ.mp3" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\9yryg0lq.mp3"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\9YRyg0lQ.mp3.[neftet@tutanota.com].boom" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\9yryg0lq.mp3.[neftet@tutanota.com].boom")) returned 1 [0130.571] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\C3gHw-4vc.png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\c3ghw-4vc.png"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\C3gHw-4vc.png.[neftet@tutanota.com].boom" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\c3ghw-4vc.png.[neftet@tutanota.com].boom")) returned 1 [0130.575] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\eAjIaLktjKk9CG.avi" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\eajialktjkk9cg.avi"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\eAjIaLktjKk9CG.avi.[neftet@tutanota.com].boom" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\eajialktjkk9cg.avi.[neftet@tutanota.com].boom")) returned 1 [0130.580] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\fXOvruHfa48CytY.png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\fxovruhfa48cyty.png"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\fXOvruHfa48CytY.png.[neftet@tutanota.com].boom" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\fxovruhfa48cyty.png.[neftet@tutanota.com].boom")) returned 1 [0130.590] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\hpjuUpDN.mp4" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\hpjuupdn.mp4"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\hpjuUpDN.mp4.[neftet@tutanota.com].boom" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\hpjuupdn.mp4.[neftet@tutanota.com].boom")) returned 1 [0130.594] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\hWh63kLsYx1.mp3" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\hwh63klsyx1.mp3"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\hWh63kLsYx1.mp3.[neftet@tutanota.com].boom" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\hwh63klsyx1.mp3.[neftet@tutanota.com].boom")) returned 1 [0130.601] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\ndCB1X58M9HM9H.mp4" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\ndcb1x58m9hm9h.mp4"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\ndCB1X58M9HM9H.mp4.[neftet@tutanota.com].boom" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\ndcb1x58m9hm9h.mp4.[neftet@tutanota.com].boom")) returned 1 [0130.605] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\qVjfxVr.mkv" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\qvjfxvr.mkv"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\qVjfxVr.mkv.[neftet@tutanota.com].boom" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\qvjfxvr.mkv.[neftet@tutanota.com].boom")) returned 1 [0130.608] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\UjUJtBCLIKM-5dz9N.mkv" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\ujujtbclikm-5dz9n.mkv"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\UjUJtBCLIKM-5dz9N.mkv.[neftet@tutanota.com].boom" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\ujujtbclikm-5dz9n.mkv.[neftet@tutanota.com].boom")) returned 1 [0130.613] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\uZhRJalfyk_WN.jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\uzhrjalfyk_wn.jpg"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\uZhRJalfyk_WN.jpg.[neftet@tutanota.com].boom" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\uzhrjalfyk_wn.jpg.[neftet@tutanota.com].boom")) returned 1 [0130.620] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\V7vkSt.bmp" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\v7vkst.bmp"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\V7vkSt.bmp.[neftet@tutanota.com].boom" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\v7vkst.bmp.[neftet@tutanota.com].boom")) returned 1 [0130.626] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\WpAlC1uR.xls" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\wpalc1ur.xls"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\WpAlC1uR.xls.[neftet@tutanota.com].boom" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\wpalc1ur.xls.[neftet@tutanota.com].boom")) returned 1 [0130.632] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Xjiv7PmC.pdf" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\xjiv7pmc.pdf"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Xjiv7PmC.pdf.[neftet@tutanota.com].boom" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\xjiv7pmc.pdf.[neftet@tutanota.com].boom")) returned 1 [0130.638] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\yis5j.mkv" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\yis5j.mkv"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\yis5j.mkv.[neftet@tutanota.com].boom" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\yis5j.mkv.[neftet@tutanota.com].boom")) returned 1 [0130.646] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\YZ7eP Q.png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\yz7ep q.png"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\YZ7eP Q.png.[neftet@tutanota.com].boom" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\yz7ep q.png.[neftet@tutanota.com].boom")) returned 1 [0130.705] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Internet Explorer\\Quick Launch\\Google Chrome.lnk" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\internet explorer\\quick launch\\google chrome.lnk"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Internet Explorer\\Quick Launch\\Google Chrome.lnk.[neftet@tutanota.com].boom" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\internet explorer\\quick launch\\google chrome.lnk.[neftet@tutanota.com].boom")) returned 1 [0130.709] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Internet Explorer\\Quick Launch\\Launch Internet Explorer Browser.lnk" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\internet explorer\\quick launch\\launch internet explorer browser.lnk"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Internet Explorer\\Quick Launch\\Launch Internet Explorer Browser.lnk.[neftet@tutanota.com].boom" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\internet explorer\\quick launch\\launch internet explorer browser.lnk.[neftet@tutanota.com].boom")) returned 1 [0130.712] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Internet Explorer\\Quick Launch\\Shows Desktop.lnk" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\internet explorer\\quick launch\\shows desktop.lnk"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Internet Explorer\\Quick Launch\\Shows Desktop.lnk.[neftet@tutanota.com].boom" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\internet explorer\\quick launch\\shows desktop.lnk.[neftet@tutanota.com].boom")) returned 1 [0130.716] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Internet Explorer\\Quick Launch\\Window Switcher.lnk" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\internet explorer\\quick launch\\window switcher.lnk"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Internet Explorer\\Quick Launch\\Window Switcher.lnk.[neftet@tutanota.com].boom" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\internet explorer\\quick launch\\window switcher.lnk.[neftet@tutanota.com].boom")) returned 1 [0130.721] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Internet Explorer\\Quick Launch\\User Pinned\\TaskBar\\Google Chrome.lnk" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\internet explorer\\quick launch\\user pinned\\taskbar\\google chrome.lnk"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Internet Explorer\\Quick Launch\\User Pinned\\TaskBar\\Google Chrome.lnk.[neftet@tutanota.com].boom" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\internet explorer\\quick launch\\user pinned\\taskbar\\google chrome.lnk.[neftet@tutanota.com].boom")) returned 1 [0130.725] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Internet Explorer\\Quick Launch\\User Pinned\\TaskBar\\Internet Explorer (2).lnk" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\internet explorer\\quick launch\\user pinned\\taskbar\\internet explorer (2).lnk"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Internet Explorer\\Quick Launch\\User Pinned\\TaskBar\\Internet Explorer (2).lnk.[neftet@tutanota.com].boom" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\internet explorer\\quick launch\\user pinned\\taskbar\\internet explorer (2).lnk.[neftet@tutanota.com].boom")) returned 1 [0130.729] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Internet Explorer\\Quick Launch\\User Pinned\\TaskBar\\Internet Explorer.lnk" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\internet explorer\\quick launch\\user pinned\\taskbar\\internet explorer.lnk"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Internet Explorer\\Quick Launch\\User Pinned\\TaskBar\\Internet Explorer.lnk.[neftet@tutanota.com].boom" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\internet explorer\\quick launch\\user pinned\\taskbar\\internet explorer.lnk.[neftet@tutanota.com].boom")) returned 1 [0130.734] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Internet Explorer\\Quick Launch\\User Pinned\\TaskBar\\Mozilla Firefox.lnk" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\internet explorer\\quick launch\\user pinned\\taskbar\\mozilla firefox.lnk"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Internet Explorer\\Quick Launch\\User Pinned\\TaskBar\\Mozilla Firefox.lnk.[neftet@tutanota.com].boom" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\internet explorer\\quick launch\\user pinned\\taskbar\\mozilla firefox.lnk.[neftet@tutanota.com].boom")) returned 1 [0130.738] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Internet Explorer\\Quick Launch\\User Pinned\\TaskBar\\Windows Explorer (2).lnk" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\internet explorer\\quick launch\\user pinned\\taskbar\\windows explorer (2).lnk"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Internet Explorer\\Quick Launch\\User Pinned\\TaskBar\\Windows Explorer (2).lnk.[neftet@tutanota.com].boom" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\internet explorer\\quick launch\\user pinned\\taskbar\\windows explorer (2).lnk.[neftet@tutanota.com].boom")) returned 1 [0130.742] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Internet Explorer\\Quick Launch\\User Pinned\\TaskBar\\Windows Explorer.lnk" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\internet explorer\\quick launch\\user pinned\\taskbar\\windows explorer.lnk"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Internet Explorer\\Quick Launch\\User Pinned\\TaskBar\\Windows Explorer.lnk.[neftet@tutanota.com].boom" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\internet explorer\\quick launch\\user pinned\\taskbar\\windows explorer.lnk.[neftet@tutanota.com].boom")) returned 1 [0130.747] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Internet Explorer\\Quick Launch\\User Pinned\\TaskBar\\Windows Media Player (2).lnk" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\internet explorer\\quick launch\\user pinned\\taskbar\\windows media player (2).lnk"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Internet Explorer\\Quick Launch\\User Pinned\\TaskBar\\Windows Media Player (2).lnk.[neftet@tutanota.com].boom" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\internet explorer\\quick launch\\user pinned\\taskbar\\windows media player (2).lnk.[neftet@tutanota.com].boom")) returned 1 [0130.751] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Internet Explorer\\Quick Launch\\User Pinned\\TaskBar\\Windows Media Player.lnk" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\internet explorer\\quick launch\\user pinned\\taskbar\\windows media player.lnk"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Internet Explorer\\Quick Launch\\User Pinned\\TaskBar\\Windows Media Player.lnk.[neftet@tutanota.com].boom" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\internet explorer\\quick launch\\user pinned\\taskbar\\windows media player.lnk.[neftet@tutanota.com].boom")) returned 1 [0130.767] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Outlook\\Outlook.xml" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\outlook\\outlook.xml"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Outlook\\Outlook.xml.[neftet@tutanota.com].boom" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\outlook\\outlook.xml.[neftet@tutanota.com].boom")) returned 1 [0130.775] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Publisher Building Blocks\\ContentStore.xml" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\publisher building blocks\\contentstore.xml"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Publisher Building Blocks\\ContentStore.xml.[neftet@tutanota.com].boom" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\publisher building blocks\\contentstore.xml.[neftet@tutanota.com].boom")) returned 1 [0130.786] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Cookies\\5p5nrgjn0js_halpmcxz@adobe[1].txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\windows\\cookies\\5p5nrgjn0js_halpmcxz@adobe[1].txt"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Cookies\\5p5nrgjn0js_halpmcxz@adobe[1].txt.[neftet@tutanota.com].boom" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\windows\\cookies\\5p5nrgjn0js_halpmcxz@adobe[1].txt.[neftet@tutanota.com].boom")) returned 1 [0130.790] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Cookies\\5p5nrgjn0js_halpmcxz@adobe[3].txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\windows\\cookies\\5p5nrgjn0js_halpmcxz@adobe[3].txt"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Cookies\\5p5nrgjn0js_halpmcxz@adobe[3].txt.[neftet@tutanota.com].boom" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\windows\\cookies\\5p5nrgjn0js_halpmcxz@adobe[3].txt.[neftet@tutanota.com].boom")) returned 1 [0130.796] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Cookies\\5p5nrgjn0js_halpmcxz@demdex[1].txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\windows\\cookies\\5p5nrgjn0js_halpmcxz@demdex[1].txt"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Cookies\\5p5nrgjn0js_halpmcxz@demdex[1].txt.[neftet@tutanota.com].boom" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\windows\\cookies\\5p5nrgjn0js_halpmcxz@demdex[1].txt.[neftet@tutanota.com].boom")) returned 1 [0130.799] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Cookies\\5p5nrgjn0js_halpmcxz@dpm.demdex[2].txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\windows\\cookies\\5p5nrgjn0js_halpmcxz@dpm.demdex[2].txt"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Cookies\\5p5nrgjn0js_halpmcxz@dpm.demdex[2].txt.[neftet@tutanota.com].boom" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\windows\\cookies\\5p5nrgjn0js_halpmcxz@dpm.demdex[2].txt.[neftet@tutanota.com].boom")) returned 1 [0130.802] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Cookies\\5p5nrgjn0js_halpmcxz@everesttech[1].txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\windows\\cookies\\5p5nrgjn0js_halpmcxz@everesttech[1].txt"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Cookies\\5p5nrgjn0js_halpmcxz@everesttech[1].txt.[neftet@tutanota.com].boom" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\windows\\cookies\\5p5nrgjn0js_halpmcxz@everesttech[1].txt.[neftet@tutanota.com].boom")) returned 1 [0130.806] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Cookies\\5p5nrgjn0js_halpmcxz@google[2].txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\windows\\cookies\\5p5nrgjn0js_halpmcxz@google[2].txt"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Cookies\\5p5nrgjn0js_halpmcxz@google[2].txt.[neftet@tutanota.com].boom" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\windows\\cookies\\5p5nrgjn0js_halpmcxz@google[2].txt.[neftet@tutanota.com].boom")) returned 1 [0130.809] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Cookies\\5p5nrgjn0js_halpmcxz@ml314[1].txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\windows\\cookies\\5p5nrgjn0js_halpmcxz@ml314[1].txt"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Cookies\\5p5nrgjn0js_halpmcxz@ml314[1].txt.[neftet@tutanota.com].boom" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\windows\\cookies\\5p5nrgjn0js_halpmcxz@ml314[1].txt.[neftet@tutanota.com].boom")) returned 1 [0130.812] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Cookies\\5p5nrgjn0js_halpmcxz@rlcdn[2].txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\windows\\cookies\\5p5nrgjn0js_halpmcxz@rlcdn[2].txt"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Cookies\\5p5nrgjn0js_halpmcxz@rlcdn[2].txt.[neftet@tutanota.com].boom" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\windows\\cookies\\5p5nrgjn0js_halpmcxz@rlcdn[2].txt.[neftet@tutanota.com].boom")) returned 1 [0130.816] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Cookies\\Low\\5p5nrgjn0js_halpmcxz@ad13.adfarm1.adition[1].txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\windows\\cookies\\low\\5p5nrgjn0js_halpmcxz@ad13.adfarm1.adition[1].txt"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Cookies\\Low\\5p5nrgjn0js_halpmcxz@ad13.adfarm1.adition[1].txt.[neftet@tutanota.com].boom" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\windows\\cookies\\low\\5p5nrgjn0js_halpmcxz@ad13.adfarm1.adition[1].txt.[neftet@tutanota.com].boom")) returned 1 [0130.819] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Cookies\\Low\\5p5nrgjn0js_halpmcxz@adfarm1.adition[2].txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\windows\\cookies\\low\\5p5nrgjn0js_halpmcxz@adfarm1.adition[2].txt"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Cookies\\Low\\5p5nrgjn0js_halpmcxz@adfarm1.adition[2].txt.[neftet@tutanota.com].boom" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\windows\\cookies\\low\\5p5nrgjn0js_halpmcxz@adfarm1.adition[2].txt.[neftet@tutanota.com].boom")) returned 1 [0130.822] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Cookies\\Low\\5p5nrgjn0js_halpmcxz@adformdsp[1].txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\windows\\cookies\\low\\5p5nrgjn0js_halpmcxz@adformdsp[1].txt"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Cookies\\Low\\5p5nrgjn0js_halpmcxz@adformdsp[1].txt.[neftet@tutanota.com].boom" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\windows\\cookies\\low\\5p5nrgjn0js_halpmcxz@adformdsp[1].txt.[neftet@tutanota.com].boom")) returned 1 [0130.826] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Cookies\\Low\\5p5nrgjn0js_halpmcxz@adform[1].txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\windows\\cookies\\low\\5p5nrgjn0js_halpmcxz@adform[1].txt"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Cookies\\Low\\5p5nrgjn0js_halpmcxz@adform[1].txt.[neftet@tutanota.com].boom" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\windows\\cookies\\low\\5p5nrgjn0js_halpmcxz@adform[1].txt.[neftet@tutanota.com].boom")) returned 1 [0130.829] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Cookies\\Low\\5p5nrgjn0js_halpmcxz@adnxs[1].txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\windows\\cookies\\low\\5p5nrgjn0js_halpmcxz@adnxs[1].txt"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Cookies\\Low\\5p5nrgjn0js_halpmcxz@adnxs[1].txt.[neftet@tutanota.com].boom" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\windows\\cookies\\low\\5p5nrgjn0js_halpmcxz@adnxs[1].txt.[neftet@tutanota.com].boom")) returned 1 [0130.832] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Cookies\\Low\\5p5nrgjn0js_halpmcxz@adtech[2].txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\windows\\cookies\\low\\5p5nrgjn0js_halpmcxz@adtech[2].txt"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Cookies\\Low\\5p5nrgjn0js_halpmcxz@adtech[2].txt.[neftet@tutanota.com].boom" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\windows\\cookies\\low\\5p5nrgjn0js_halpmcxz@adtech[2].txt.[neftet@tutanota.com].boom")) returned 1 [0130.835] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Cookies\\Low\\5p5nrgjn0js_halpmcxz@adtr02[1].txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\windows\\cookies\\low\\5p5nrgjn0js_halpmcxz@adtr02[1].txt"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Cookies\\Low\\5p5nrgjn0js_halpmcxz@adtr02[1].txt.[neftet@tutanota.com].boom" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\windows\\cookies\\low\\5p5nrgjn0js_halpmcxz@adtr02[1].txt.[neftet@tutanota.com].boom")) returned 1 [0130.838] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Cookies\\Low\\5p5nrgjn0js_halpmcxz@advertising[1].txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\windows\\cookies\\low\\5p5nrgjn0js_halpmcxz@advertising[1].txt"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Cookies\\Low\\5p5nrgjn0js_halpmcxz@advertising[1].txt.[neftet@tutanota.com].boom" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\windows\\cookies\\low\\5p5nrgjn0js_halpmcxz@advertising[1].txt.[neftet@tutanota.com].boom")) returned 1 [0130.841] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Cookies\\Low\\5p5nrgjn0js_halpmcxz@api.bing[2].txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\windows\\cookies\\low\\5p5nrgjn0js_halpmcxz@api.bing[2].txt"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Cookies\\Low\\5p5nrgjn0js_halpmcxz@api.bing[2].txt.[neftet@tutanota.com].boom" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\windows\\cookies\\low\\5p5nrgjn0js_halpmcxz@api.bing[2].txt.[neftet@tutanota.com].boom")) returned 1 [0130.844] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Cookies\\Low\\5p5nrgjn0js_halpmcxz@at.atwola[1].txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\windows\\cookies\\low\\5p5nrgjn0js_halpmcxz@at.atwola[1].txt"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Cookies\\Low\\5p5nrgjn0js_halpmcxz@at.atwola[1].txt.[neftet@tutanota.com].boom" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\windows\\cookies\\low\\5p5nrgjn0js_halpmcxz@at.atwola[1].txt.[neftet@tutanota.com].boom")) returned 1 [0130.848] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Cookies\\Low\\5p5nrgjn0js_halpmcxz@bing[1].txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\windows\\cookies\\low\\5p5nrgjn0js_halpmcxz@bing[1].txt"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Cookies\\Low\\5p5nrgjn0js_halpmcxz@bing[1].txt.[neftet@tutanota.com].boom" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\windows\\cookies\\low\\5p5nrgjn0js_halpmcxz@bing[1].txt.[neftet@tutanota.com].boom")) returned 1 [0130.850] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Cookies\\Low\\5p5nrgjn0js_halpmcxz@c.bing[1].txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\windows\\cookies\\low\\5p5nrgjn0js_halpmcxz@c.bing[1].txt"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Cookies\\Low\\5p5nrgjn0js_halpmcxz@c.bing[1].txt.[neftet@tutanota.com].boom" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\windows\\cookies\\low\\5p5nrgjn0js_halpmcxz@c.bing[1].txt.[neftet@tutanota.com].boom")) returned 1 [0130.853] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Cookies\\Low\\5p5nrgjn0js_halpmcxz@c.msn[1].txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\windows\\cookies\\low\\5p5nrgjn0js_halpmcxz@c.msn[1].txt"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Cookies\\Low\\5p5nrgjn0js_halpmcxz@c.msn[1].txt.[neftet@tutanota.com].boom" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\windows\\cookies\\low\\5p5nrgjn0js_halpmcxz@c.msn[1].txt.[neftet@tutanota.com].boom")) returned 1 [0130.856] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Cookies\\Low\\5p5nrgjn0js_halpmcxz@doubleclick[2].txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\windows\\cookies\\low\\5p5nrgjn0js_halpmcxz@doubleclick[2].txt"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Cookies\\Low\\5p5nrgjn0js_halpmcxz@doubleclick[2].txt.[neftet@tutanota.com].boom" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\windows\\cookies\\low\\5p5nrgjn0js_halpmcxz@doubleclick[2].txt.[neftet@tutanota.com].boom")) returned 1 [0130.859] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Cookies\\Low\\5p5nrgjn0js_halpmcxz@google[1].txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\windows\\cookies\\low\\5p5nrgjn0js_halpmcxz@google[1].txt"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Cookies\\Low\\5p5nrgjn0js_halpmcxz@google[1].txt.[neftet@tutanota.com].boom" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\windows\\cookies\\low\\5p5nrgjn0js_halpmcxz@google[1].txt.[neftet@tutanota.com].boom")) returned 1 [0130.862] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Cookies\\Low\\5p5nrgjn0js_halpmcxz@google[3].txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\windows\\cookies\\low\\5p5nrgjn0js_halpmcxz@google[3].txt"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Cookies\\Low\\5p5nrgjn0js_halpmcxz@google[3].txt.[neftet@tutanota.com].boom" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\windows\\cookies\\low\\5p5nrgjn0js_halpmcxz@google[3].txt.[neftet@tutanota.com].boom")) returned 1 [0130.865] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Cookies\\Low\\5p5nrgjn0js_halpmcxz@google[4].txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\windows\\cookies\\low\\5p5nrgjn0js_halpmcxz@google[4].txt"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Cookies\\Low\\5p5nrgjn0js_halpmcxz@google[4].txt.[neftet@tutanota.com].boom" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\windows\\cookies\\low\\5p5nrgjn0js_halpmcxz@google[4].txt.[neftet@tutanota.com].boom")) returned 1 [0130.873] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Cookies\\Low\\5p5nrgjn0js_halpmcxz@linkedin[1].txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\windows\\cookies\\low\\5p5nrgjn0js_halpmcxz@linkedin[1].txt"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Cookies\\Low\\5p5nrgjn0js_halpmcxz@linkedin[1].txt.[neftet@tutanota.com].boom" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\windows\\cookies\\low\\5p5nrgjn0js_halpmcxz@linkedin[1].txt.[neftet@tutanota.com].boom")) returned 1 [0130.876] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Cookies\\Low\\5p5nrgjn0js_halpmcxz@m.exactag[1].txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\windows\\cookies\\low\\5p5nrgjn0js_halpmcxz@m.exactag[1].txt"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Cookies\\Low\\5p5nrgjn0js_halpmcxz@m.exactag[1].txt.[neftet@tutanota.com].boom" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\windows\\cookies\\low\\5p5nrgjn0js_halpmcxz@m.exactag[1].txt.[neftet@tutanota.com].boom")) returned 1 [0130.879] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Cookies\\Low\\5p5nrgjn0js_halpmcxz@msn[1].txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\windows\\cookies\\low\\5p5nrgjn0js_halpmcxz@msn[1].txt"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Cookies\\Low\\5p5nrgjn0js_halpmcxz@msn[1].txt.[neftet@tutanota.com].boom" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\windows\\cookies\\low\\5p5nrgjn0js_halpmcxz@msn[1].txt.[neftet@tutanota.com].boom")) returned 1 [0130.985] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Cookies\\Low\\5p5nrgjn0js_halpmcxz@scorecardresearch[2].txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\windows\\cookies\\low\\5p5nrgjn0js_halpmcxz@scorecardresearch[2].txt"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Cookies\\Low\\5p5nrgjn0js_halpmcxz@scorecardresearch[2].txt.[neftet@tutanota.com].boom" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\windows\\cookies\\low\\5p5nrgjn0js_halpmcxz@scorecardresearch[2].txt.[neftet@tutanota.com].boom")) returned 1 [0130.989] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Cookies\\Low\\5p5nrgjn0js_halpmcxz@server.adformdsp[1].txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\windows\\cookies\\low\\5p5nrgjn0js_halpmcxz@server.adformdsp[1].txt"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Cookies\\Low\\5p5nrgjn0js_halpmcxz@server.adformdsp[1].txt.[neftet@tutanota.com].boom" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\windows\\cookies\\low\\5p5nrgjn0js_halpmcxz@server.adformdsp[1].txt.[neftet@tutanota.com].boom")) returned 1 [0130.992] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Cookies\\Low\\5p5nrgjn0js_halpmcxz@skadtec[1].txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\windows\\cookies\\low\\5p5nrgjn0js_halpmcxz@skadtec[1].txt"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Cookies\\Low\\5p5nrgjn0js_halpmcxz@skadtec[1].txt.[neftet@tutanota.com].boom" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\windows\\cookies\\low\\5p5nrgjn0js_halpmcxz@skadtec[1].txt.[neftet@tutanota.com].boom")) returned 1 [0130.995] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Cookies\\Low\\5p5nrgjn0js_halpmcxz@track.adform[2].txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\windows\\cookies\\low\\5p5nrgjn0js_halpmcxz@track.adform[2].txt"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Cookies\\Low\\5p5nrgjn0js_halpmcxz@track.adform[2].txt.[neftet@tutanota.com].boom" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\windows\\cookies\\low\\5p5nrgjn0js_halpmcxz@track.adform[2].txt.[neftet@tutanota.com].boom")) returned 1 [0130.998] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Cookies\\Low\\5p5nrgjn0js_halpmcxz@www.bing[2].txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\windows\\cookies\\low\\5p5nrgjn0js_halpmcxz@www.bing[2].txt"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Cookies\\Low\\5p5nrgjn0js_halpmcxz@www.bing[2].txt.[neftet@tutanota.com].boom" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\windows\\cookies\\low\\5p5nrgjn0js_halpmcxz@www.bing[2].txt.[neftet@tutanota.com].boom")) returned 1 [0131.001] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Cookies\\Low\\5p5nrgjn0js_halpmcxz@www.linkedin[1].txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\windows\\cookies\\low\\5p5nrgjn0js_halpmcxz@www.linkedin[1].txt"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Cookies\\Low\\5p5nrgjn0js_halpmcxz@www.linkedin[1].txt.[neftet@tutanota.com].boom" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\windows\\cookies\\low\\5p5nrgjn0js_halpmcxz@www.linkedin[1].txt.[neftet@tutanota.com].boom")) returned 1 [0131.004] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Cookies\\Low\\5p5nrgjn0js_halpmcxz@www.msn[2].txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\windows\\cookies\\low\\5p5nrgjn0js_halpmcxz@www.msn[2].txt"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Cookies\\Low\\5p5nrgjn0js_halpmcxz@www.msn[2].txt.[neftet@tutanota.com].boom" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\windows\\cookies\\low\\5p5nrgjn0js_halpmcxz@www.msn[2].txt.[neftet@tutanota.com].boom")) returned 1 [0131.010] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\-5 rgXAKNVWpqoUUHt.lnk" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\windows\\recent\\-5 rgxaknvwpqouuht.lnk"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\-5 rgXAKNVWpqoUUHt.lnk.[neftet@tutanota.com].boom" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\windows\\recent\\-5 rgxaknvwpqouuht.lnk.[neftet@tutanota.com].boom")) returned 1 [0131.013] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\-C9Sja0mJwrJKSu90.lnk" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\windows\\recent\\-c9sja0mjwrjksu90.lnk"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\-C9Sja0mJwrJKSu90.lnk.[neftet@tutanota.com].boom" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\windows\\recent\\-c9sja0mjwrjksu90.lnk.[neftet@tutanota.com].boom")) returned 1 [0131.016] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\-XBhFw3KRNIiI.lnk" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\windows\\recent\\-xbhfw3krniii.lnk"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\-XBhFw3KRNIiI.lnk.[neftet@tutanota.com].boom" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\windows\\recent\\-xbhfw3krniii.lnk.[neftet@tutanota.com].boom")) returned 1 [0131.020] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\02uI45CVA0UfWQJTSx6.lnk" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\windows\\recent\\02ui45cva0ufwqjtsx6.lnk"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\02uI45CVA0UfWQJTSx6.lnk.[neftet@tutanota.com].boom" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\windows\\recent\\02ui45cva0ufwqjtsx6.lnk.[neftet@tutanota.com].boom")) returned 1 [0131.023] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\0fonx3QbySjHW9kekT.flv.lnk" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\windows\\recent\\0fonx3qbysjhw9kekt.flv.lnk"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\0fonx3QbySjHW9kekT.flv.lnk.[neftet@tutanota.com].boom" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\windows\\recent\\0fonx3qbysjhw9kekt.flv.lnk.[neftet@tutanota.com].boom")) returned 1 [0131.027] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\0QpBHVtt5vUmfNi.lnk" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\windows\\recent\\0qpbhvtt5vumfni.lnk"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\0QpBHVtt5vUmfNi.lnk.[neftet@tutanota.com].boom" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\windows\\recent\\0qpbhvtt5vumfni.lnk.[neftet@tutanota.com].boom")) returned 1 [0131.030] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\1GMPKC9.lnk" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\windows\\recent\\1gmpkc9.lnk"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\1GMPKC9.lnk.[neftet@tutanota.com].boom" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\windows\\recent\\1gmpkc9.lnk.[neftet@tutanota.com].boom")) returned 1 [0131.033] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\1iogfuz_21wpdknL.lnk" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\windows\\recent\\1iogfuz_21wpdknl.lnk"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\1iogfuz_21wpdknL.lnk.[neftet@tutanota.com].boom" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\windows\\recent\\1iogfuz_21wpdknl.lnk.[neftet@tutanota.com].boom")) returned 1 [0131.036] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\1MlIv-7ANr-ec.lnk" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\windows\\recent\\1mliv-7anr-ec.lnk"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\1MlIv-7ANr-ec.lnk.[neftet@tutanota.com].boom" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\windows\\recent\\1mliv-7anr-ec.lnk.[neftet@tutanota.com].boom")) returned 1 [0131.039] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\2iM6el404FPP9.lnk" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\windows\\recent\\2im6el404fpp9.lnk"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\2iM6el404FPP9.lnk.[neftet@tutanota.com].boom" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\windows\\recent\\2im6el404fpp9.lnk.[neftet@tutanota.com].boom")) returned 1 [0131.043] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\2LKK31mn8fmrauO.lnk" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\windows\\recent\\2lkk31mn8fmrauo.lnk"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\2LKK31mn8fmrauO.lnk.[neftet@tutanota.com].boom" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\windows\\recent\\2lkk31mn8fmrauo.lnk.[neftet@tutanota.com].boom")) returned 1 [0131.047] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\2pGy8blaGINSTsQu.lnk" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\windows\\recent\\2pgy8blaginstsqu.lnk"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\2pGy8blaGINSTsQu.lnk.[neftet@tutanota.com].boom" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\windows\\recent\\2pgy8blaginstsqu.lnk.[neftet@tutanota.com].boom")) returned 1 [0131.050] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\35bcBrdvj.lnk" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\windows\\recent\\35bcbrdvj.lnk"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\35bcBrdvj.lnk.[neftet@tutanota.com].boom" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\windows\\recent\\35bcbrdvj.lnk.[neftet@tutanota.com].boom")) returned 1 [0131.053] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\3fmT5WPHA39l3f9.lnk" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\windows\\recent\\3fmt5wpha39l3f9.lnk"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\3fmT5WPHA39l3f9.lnk.[neftet@tutanota.com].boom" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\windows\\recent\\3fmt5wpha39l3f9.lnk.[neftet@tutanota.com].boom")) returned 1 [0131.057] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\3g 7kD u8yPvSBKq.lnk" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\windows\\recent\\3g 7kd u8ypvsbkq.lnk"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\3g 7kD u8yPvSBKq.lnk.[neftet@tutanota.com].boom" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\windows\\recent\\3g 7kd u8ypvsbkq.lnk.[neftet@tutanota.com].boom")) returned 1 [0131.060] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\3Sx06XnyBNN.lnk" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\windows\\recent\\3sx06xnybnn.lnk"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\3Sx06XnyBNN.lnk.[neftet@tutanota.com].boom" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\windows\\recent\\3sx06xnybnn.lnk.[neftet@tutanota.com].boom")) returned 1 [0131.063] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\3YAya5eDcy-F-cb-1Rdx.lnk" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\windows\\recent\\3yaya5edcy-f-cb-1rdx.lnk"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\3YAya5eDcy-F-cb-1Rdx.lnk.[neftet@tutanota.com].boom" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\windows\\recent\\3yaya5edcy-f-cb-1rdx.lnk.[neftet@tutanota.com].boom")) returned 1 [0131.067] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\405ySziuaxMlV m5JO.lnk" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\windows\\recent\\405ysziuaxmlv m5jo.lnk"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\405ySziuaxMlV m5JO.lnk.[neftet@tutanota.com].boom" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\windows\\recent\\405ysziuaxmlv m5jo.lnk.[neftet@tutanota.com].boom")) returned 1 [0131.070] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\5mEc8mcZ9jfK.lnk" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\windows\\recent\\5mec8mcz9jfk.lnk"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\5mEc8mcZ9jfK.lnk.[neftet@tutanota.com].boom" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\windows\\recent\\5mec8mcz9jfk.lnk.[neftet@tutanota.com].boom")) returned 1 [0131.074] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\5QUm8R.lnk" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\windows\\recent\\5qum8r.lnk"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\5QUm8R.lnk.[neftet@tutanota.com].boom" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\windows\\recent\\5qum8r.lnk.[neftet@tutanota.com].boom")) returned 1 [0131.077] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\6b4NNrp5 bh.lnk" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\windows\\recent\\6b4nnrp5 bh.lnk"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\6b4NNrp5 bh.lnk.[neftet@tutanota.com].boom" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\windows\\recent\\6b4nnrp5 bh.lnk.[neftet@tutanota.com].boom")) returned 1 [0131.084] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\6PH LQIJcfFOT3.lnk" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\windows\\recent\\6ph lqijcffot3.lnk"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\6PH LQIJcfFOT3.lnk.[neftet@tutanota.com].boom" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\windows\\recent\\6ph lqijcffot3.lnk.[neftet@tutanota.com].boom")) returned 1 [0131.087] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\6wgIYQzJ1lqH2MW.lnk" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\windows\\recent\\6wgiyqzj1lqh2mw.lnk"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\6wgIYQzJ1lqH2MW.lnk.[neftet@tutanota.com].boom" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\windows\\recent\\6wgiyqzj1lqh2mw.lnk.[neftet@tutanota.com].boom")) returned 1 [0131.091] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\6ygdYcRuO9.lnk" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\windows\\recent\\6ygdycruo9.lnk"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\6ygdYcRuO9.lnk.[neftet@tutanota.com].boom" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\windows\\recent\\6ygdycruo9.lnk.[neftet@tutanota.com].boom")) returned 1 [0131.094] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\81Hibdy.lnk" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\windows\\recent\\81hibdy.lnk"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\81Hibdy.lnk.[neftet@tutanota.com].boom" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\windows\\recent\\81hibdy.lnk.[neftet@tutanota.com].boom")) returned 1 [0131.099] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\84yfCS6st5K5-66QqbH.flv.lnk" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\windows\\recent\\84yfcs6st5k5-66qqbh.flv.lnk"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\84yfCS6st5K5-66QqbH.flv.lnk.[neftet@tutanota.com].boom" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\windows\\recent\\84yfcs6st5k5-66qqbh.flv.lnk.[neftet@tutanota.com].boom")) returned 1 [0131.102] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\8mSM9XyQ3XQ6.lnk" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\windows\\recent\\8msm9xyq3xq6.lnk"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\8mSM9XyQ3XQ6.lnk.[neftet@tutanota.com].boom" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\windows\\recent\\8msm9xyq3xq6.lnk.[neftet@tutanota.com].boom")) returned 1 [0131.105] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\8y 4TOn5NPzM-8ECXs7.lnk" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\windows\\recent\\8y 4ton5npzm-8ecxs7.lnk"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\8y 4TOn5NPzM-8ECXs7.lnk.[neftet@tutanota.com].boom" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\windows\\recent\\8y 4ton5npzm-8ecxs7.lnk.[neftet@tutanota.com].boom")) returned 1 [0131.108] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\aAze.lnk" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\windows\\recent\\aaze.lnk"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\aAze.lnk.[neftet@tutanota.com].boom" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\windows\\recent\\aaze.lnk.[neftet@tutanota.com].boom")) returned 1 [0131.112] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\Ab6fh6TA.lnk" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\windows\\recent\\ab6fh6ta.lnk"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\Ab6fh6TA.lnk.[neftet@tutanota.com].boom" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\windows\\recent\\ab6fh6ta.lnk.[neftet@tutanota.com].boom")) returned 1 [0131.115] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\aF BVNmJ_Atzx_a.lnk" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\windows\\recent\\af bvnmj_atzx_a.lnk"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\aF BVNmJ_Atzx_a.lnk.[neftet@tutanota.com].boom" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\windows\\recent\\af bvnmj_atzx_a.lnk.[neftet@tutanota.com].boom")) returned 1 [0131.118] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\atwN3-g8oPk6T3g.lnk" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\windows\\recent\\atwn3-g8opk6t3g.lnk"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\atwN3-g8oPk6T3g.lnk.[neftet@tutanota.com].boom" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\windows\\recent\\atwn3-g8opk6t3g.lnk.[neftet@tutanota.com].boom")) returned 1 [0131.121] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\avs0VLVQy.mkv.lnk" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\windows\\recent\\avs0vlvqy.mkv.lnk"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\avs0VLVQy.mkv.lnk.[neftet@tutanota.com].boom" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\windows\\recent\\avs0vlvqy.mkv.lnk.[neftet@tutanota.com].boom")) returned 1 [0131.126] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\awnCnvVOwwTZEf.lnk" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\windows\\recent\\awncnvvowwtzef.lnk"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\awnCnvVOwwTZEf.lnk.[neftet@tutanota.com].boom" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\windows\\recent\\awncnvvowwtzef.lnk.[neftet@tutanota.com].boom")) returned 1 [0131.129] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\BbAIdQK9.lnk" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\windows\\recent\\bbaidqk9.lnk"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\BbAIdQK9.lnk.[neftet@tutanota.com].boom" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\windows\\recent\\bbaidqk9.lnk.[neftet@tutanota.com].boom")) returned 1 [0131.132] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\bErvzuwNUg.lnk" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\windows\\recent\\bervzuwnug.lnk"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\bErvzuwNUg.lnk.[neftet@tutanota.com].boom" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\windows\\recent\\bervzuwnug.lnk.[neftet@tutanota.com].boom")) returned 1 [0131.135] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\C3gHw-4vc.lnk" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\windows\\recent\\c3ghw-4vc.lnk"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\C3gHw-4vc.lnk.[neftet@tutanota.com].boom" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\windows\\recent\\c3ghw-4vc.lnk.[neftet@tutanota.com].boom")) returned 1 [0131.138] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\cBq3YiZO5mBKpb7HK3.lnk" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\windows\\recent\\cbq3yizo5mbkpb7hk3.lnk"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\cBq3YiZO5mBKpb7HK3.lnk.[neftet@tutanota.com].boom" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\windows\\recent\\cbq3yizo5mbkpb7hk3.lnk.[neftet@tutanota.com].boom")) returned 1 [0131.142] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\CUcIWhXZcN.lnk" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\windows\\recent\\cuciwhxzcn.lnk"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\CUcIWhXZcN.lnk.[neftet@tutanota.com].boom" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\windows\\recent\\cuciwhxzcn.lnk.[neftet@tutanota.com].boom")) returned 1 [0131.145] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\d6 dLC jkU9.lnk" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\windows\\recent\\d6 dlc jku9.lnk"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\d6 dLC jkU9.lnk.[neftet@tutanota.com].boom" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\windows\\recent\\d6 dlc jku9.lnk.[neftet@tutanota.com].boom")) returned 1 [0131.149] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\dF-VG_t_vGxzSuUsEnW3.lnk" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\windows\\recent\\df-vg_t_vgxzsuusenw3.lnk"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\dF-VG_t_vGxzSuUsEnW3.lnk.[neftet@tutanota.com].boom" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\windows\\recent\\df-vg_t_vgxzsuusenw3.lnk.[neftet@tutanota.com].boom")) returned 1 [0131.153] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\DfXgi8mluBJ.lnk" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\windows\\recent\\dfxgi8mlubj.lnk"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\DfXgi8mluBJ.lnk.[neftet@tutanota.com].boom" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\windows\\recent\\dfxgi8mlubj.lnk.[neftet@tutanota.com].boom")) returned 1 [0131.157] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\E5yqHX_c 22spYoHS.lnk" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\windows\\recent\\e5yqhx_c 22spyohs.lnk"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\E5yqHX_c 22spYoHS.lnk.[neftet@tutanota.com].boom" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\windows\\recent\\e5yqhx_c 22spyohs.lnk.[neftet@tutanota.com].boom")) returned 1 [0131.160] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\eEZ0I5zK3ZKi8gNeQ.lnk" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\windows\\recent\\eez0i5zk3zki8gneq.lnk"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\eEZ0I5zK3ZKi8gNeQ.lnk.[neftet@tutanota.com].boom" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\windows\\recent\\eez0i5zk3zki8gneq.lnk.[neftet@tutanota.com].boom")) returned 1 [0131.163] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\EfftTM9vyjFXlwqKsjF.lnk" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\windows\\recent\\effttm9vyjfxlwqksjf.lnk"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\EfftTM9vyjFXlwqKsjF.lnk.[neftet@tutanota.com].boom" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\windows\\recent\\effttm9vyjfxlwqksjf.lnk.[neftet@tutanota.com].boom")) returned 1 [0131.167] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\egNz9w_.lnk" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\windows\\recent\\egnz9w_.lnk"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\egNz9w_.lnk.[neftet@tutanota.com].boom" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\windows\\recent\\egnz9w_.lnk.[neftet@tutanota.com].boom")) returned 1 [0131.170] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\eStdF.lnk" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\windows\\recent\\estdf.lnk"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\eStdF.lnk.[neftet@tutanota.com].boom" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\windows\\recent\\estdf.lnk.[neftet@tutanota.com].boom")) returned 1 [0131.173] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\ewcSZPE2Uke_ysh8Kk.lnk" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\windows\\recent\\ewcszpe2uke_ysh8kk.lnk"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\ewcSZPE2Uke_ysh8Kk.lnk.[neftet@tutanota.com].boom" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\windows\\recent\\ewcszpe2uke_ysh8kk.lnk.[neftet@tutanota.com].boom")) returned 1 [0131.177] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\EYB4.lnk" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\windows\\recent\\eyb4.lnk"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\EYB4.lnk.[neftet@tutanota.com].boom" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\windows\\recent\\eyb4.lnk.[neftet@tutanota.com].boom")) returned 1 [0131.181] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\F3qq-TdX0v1.lnk" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\windows\\recent\\f3qq-tdx0v1.lnk"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\F3qq-TdX0v1.lnk.[neftet@tutanota.com].boom" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\windows\\recent\\f3qq-tdx0v1.lnk.[neftet@tutanota.com].boom")) returned 1 [0131.184] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\FG2Vgd.flv.lnk" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\windows\\recent\\fg2vgd.flv.lnk"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\FG2Vgd.flv.lnk.[neftet@tutanota.com].boom" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\windows\\recent\\fg2vgd.flv.lnk.[neftet@tutanota.com].boom")) returned 1 [0131.187] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\FlnuIIzR61ZMgS.lnk" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\windows\\recent\\flnuiizr61zmgs.lnk"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\FlnuIIzR61ZMgS.lnk.[neftet@tutanota.com].boom" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\windows\\recent\\flnuiizr61zmgs.lnk.[neftet@tutanota.com].boom")) returned 1 [0131.193] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\fo7DC8R1OiqEuI ix.lnk" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\windows\\recent\\fo7dc8r1oiqeui ix.lnk"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\fo7DC8R1OiqEuI ix.lnk.[neftet@tutanota.com].boom" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\windows\\recent\\fo7dc8r1oiqeui ix.lnk.[neftet@tutanota.com].boom")) returned 1 [0131.197] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\fs6ZyJDVW7MWb.lnk" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\windows\\recent\\fs6zyjdvw7mwb.lnk"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\fs6ZyJDVW7MWb.lnk.[neftet@tutanota.com].boom" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\windows\\recent\\fs6zyjdvw7mwb.lnk.[neftet@tutanota.com].boom")) returned 1 [0131.200] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\fWvZmodXByr bYeQQ7Y.lnk" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\windows\\recent\\fwvzmodxbyr byeqq7y.lnk"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\fWvZmodXByr bYeQQ7Y.lnk.[neftet@tutanota.com].boom" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\windows\\recent\\fwvzmodxbyr byeqq7y.lnk.[neftet@tutanota.com].boom")) returned 1 [0131.204] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\Fz1uxg4uH8FGJTt.lnk" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\windows\\recent\\fz1uxg4uh8fgjtt.lnk"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\Fz1uxg4uH8FGJTt.lnk.[neftet@tutanota.com].boom" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\windows\\recent\\fz1uxg4uh8fgjtt.lnk.[neftet@tutanota.com].boom")) returned 1 [0131.207] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\GibSj0Oqv_.lnk" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\windows\\recent\\gibsj0oqv_.lnk"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\GibSj0Oqv_.lnk.[neftet@tutanota.com].boom" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\windows\\recent\\gibsj0oqv_.lnk.[neftet@tutanota.com].boom")) returned 1 [0131.211] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\HiHn1FTQ027Hcj vP6d8.lnk" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\windows\\recent\\hihn1ftq027hcj vp6d8.lnk"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\HiHn1FTQ027Hcj vP6d8.lnk.[neftet@tutanota.com].boom" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\windows\\recent\\hihn1ftq027hcj vp6d8.lnk.[neftet@tutanota.com].boom")) returned 1 [0131.214] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\HS_jtO INeCAdLtO.lnk" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\windows\\recent\\hs_jto inecadlto.lnk"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\HS_jtO INeCAdLtO.lnk.[neftet@tutanota.com].boom" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\windows\\recent\\hs_jto inecadlto.lnk.[neftet@tutanota.com].boom")) returned 1 [0131.218] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\i8FtK.lnk" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\windows\\recent\\i8ftk.lnk"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\i8FtK.lnk.[neftet@tutanota.com].boom" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\windows\\recent\\i8ftk.lnk.[neftet@tutanota.com].boom")) returned 1 [0131.221] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\IU5aJXql.lnk" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\windows\\recent\\iu5ajxql.lnk"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\IU5aJXql.lnk.[neftet@tutanota.com].boom" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\windows\\recent\\iu5ajxql.lnk.[neftet@tutanota.com].boom")) returned 1 [0131.224] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\iv9kxoY1h.lnk" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\windows\\recent\\iv9kxoy1h.lnk"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\iv9kxoY1h.lnk.[neftet@tutanota.com].boom" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\windows\\recent\\iv9kxoy1h.lnk.[neftet@tutanota.com].boom")) returned 1 [0131.227] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\j rWKaz2b-64YTGN.lnk" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\windows\\recent\\j rwkaz2b-64ytgn.lnk"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\j rWKaz2b-64YTGN.lnk.[neftet@tutanota.com].boom" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\windows\\recent\\j rwkaz2b-64ytgn.lnk.[neftet@tutanota.com].boom")) returned 1 [0131.231] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\j_g3ZRLUMjKwy4 0Ihg.lnk" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\windows\\recent\\j_g3zrlumjkwy4 0ihg.lnk"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\j_g3ZRLUMjKwy4 0Ihg.lnk.[neftet@tutanota.com].boom" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\windows\\recent\\j_g3zrlumjkwy4 0ihg.lnk.[neftet@tutanota.com].boom")) returned 1 [0131.234] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\k0j at2.flv.lnk" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\windows\\recent\\k0j at2.flv.lnk"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\k0j at2.flv.lnk.[neftet@tutanota.com].boom" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\windows\\recent\\k0j at2.flv.lnk.[neftet@tutanota.com].boom")) returned 1 [0131.238] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\KaunNs4TVi5V7PIurI.ots.lnk" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\windows\\recent\\kaunns4tvi5v7piuri.ots.lnk"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\KaunNs4TVi5V7PIurI.ots.lnk.[neftet@tutanota.com].boom" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\windows\\recent\\kaunns4tvi5v7piuri.ots.lnk.[neftet@tutanota.com].boom")) returned 1 [0131.241] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\kpbUV nhoxZNIL.lnk" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\windows\\recent\\kpbuv nhoxznil.lnk"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\kpbUV nhoxZNIL.lnk.[neftet@tutanota.com].boom" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\windows\\recent\\kpbuv nhoxznil.lnk.[neftet@tutanota.com].boom")) returned 1 [0131.244] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\LajwuWOfmL7z35P7ILh_.lnk" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\windows\\recent\\lajwuwofml7z35p7ilh_.lnk"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\LajwuWOfmL7z35P7ILh_.lnk.[neftet@tutanota.com].boom" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\windows\\recent\\lajwuwofml7z35p7ilh_.lnk.[neftet@tutanota.com].boom")) returned 1 [0131.247] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\lCnlTJ-G.lnk" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\windows\\recent\\lcnltj-g.lnk"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\lCnlTJ-G.lnk.[neftet@tutanota.com].boom" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\windows\\recent\\lcnltj-g.lnk.[neftet@tutanota.com].boom")) returned 1 [0131.251] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\mcdNsT5RVFSVyld.lnk" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\windows\\recent\\mcdnst5rvfsvyld.lnk"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\mcdNsT5RVFSVyld.lnk.[neftet@tutanota.com].boom" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\windows\\recent\\mcdnst5rvfsvyld.lnk.[neftet@tutanota.com].boom")) returned 1 [0131.254] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\McRkdzYB9JBSM2hjqEG.flv.lnk" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\windows\\recent\\mcrkdzyb9jbsm2hjqeg.flv.lnk"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\McRkdzYB9JBSM2hjqEG.flv.lnk.[neftet@tutanota.com].boom" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\windows\\recent\\mcrkdzyb9jbsm2hjqeg.flv.lnk.[neftet@tutanota.com].boom")) returned 1 [0131.257] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\MqHlcYZXc1ykd8m-7zLx.lnk" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\windows\\recent\\mqhlcyzxc1ykd8m-7zlx.lnk"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\MqHlcYZXc1ykd8m-7zLx.lnk.[neftet@tutanota.com].boom" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\windows\\recent\\mqhlcyzxc1ykd8m-7zlx.lnk.[neftet@tutanota.com].boom")) returned 1 [0131.261] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\MVUshvijtjHU.lnk" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\windows\\recent\\mvushvijtjhu.lnk"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\MVUshvijtjHU.lnk.[neftet@tutanota.com].boom" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\windows\\recent\\mvushvijtjhu.lnk.[neftet@tutanota.com].boom")) returned 1 [0131.264] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\My Music.lnk" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\windows\\recent\\my music.lnk"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\My Music.lnk.[neftet@tutanota.com].boom" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\windows\\recent\\my music.lnk.[neftet@tutanota.com].boom")) returned 1 [0131.267] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\My Pictures.lnk" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\windows\\recent\\my pictures.lnk"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\My Pictures.lnk.[neftet@tutanota.com].boom" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\windows\\recent\\my pictures.lnk.[neftet@tutanota.com].boom")) returned 1 [0131.270] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\My Videos.lnk" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\windows\\recent\\my videos.lnk"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\My Videos.lnk.[neftet@tutanota.com].boom" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\windows\\recent\\my videos.lnk.[neftet@tutanota.com].boom")) returned 1 [0131.274] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\Otujad-E.lnk" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\windows\\recent\\otujad-e.lnk"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\Otujad-E.lnk.[neftet@tutanota.com].boom" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\windows\\recent\\otujad-e.lnk.[neftet@tutanota.com].boom")) returned 1 [0131.284] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\Oxgbwq.lnk" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\windows\\recent\\oxgbwq.lnk"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\Oxgbwq.lnk.[neftet@tutanota.com].boom" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\windows\\recent\\oxgbwq.lnk.[neftet@tutanota.com].boom")) returned 1 [0131.287] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\phtzJp3.lnk" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\windows\\recent\\phtzjp3.lnk"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\phtzJp3.lnk.[neftet@tutanota.com].boom" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\windows\\recent\\phtzjp3.lnk.[neftet@tutanota.com].boom")) returned 1 [0131.291] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\PlzXFM1.lnk" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\windows\\recent\\plzxfm1.lnk"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\PlzXFM1.lnk.[neftet@tutanota.com].boom" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\windows\\recent\\plzxfm1.lnk.[neftet@tutanota.com].boom")) returned 1 [0131.296] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\PVyCWCHH.mkv.lnk" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\windows\\recent\\pvycwchh.mkv.lnk"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\PVyCWCHH.mkv.lnk.[neftet@tutanota.com].boom" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\windows\\recent\\pvycwchh.mkv.lnk.[neftet@tutanota.com].boom")) returned 1 [0131.299] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\q-7-UiG.flv.lnk" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\windows\\recent\\q-7-uig.flv.lnk"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\q-7-UiG.flv.lnk.[neftet@tutanota.com].boom" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\windows\\recent\\q-7-uig.flv.lnk.[neftet@tutanota.com].boom")) returned 1 [0131.305] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\qAXggmD1LKlgDc4Js.lnk" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\windows\\recent\\qaxggmd1lklgdc4js.lnk"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\qAXggmD1LKlgDc4Js.lnk.[neftet@tutanota.com].boom" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\windows\\recent\\qaxggmd1lklgdc4js.lnk.[neftet@tutanota.com].boom")) returned 1 [0131.309] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\QIviB1J8S42yLfp.lnk" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\windows\\recent\\qivib1j8s42ylfp.lnk"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\QIviB1J8S42yLfp.lnk.[neftet@tutanota.com].boom" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\windows\\recent\\qivib1j8s42ylfp.lnk.[neftet@tutanota.com].boom")) returned 1 [0131.312] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\QKe_6XpG.lnk" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\windows\\recent\\qke_6xpg.lnk"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\QKe_6XpG.lnk.[neftet@tutanota.com].boom" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\windows\\recent\\qke_6xpg.lnk.[neftet@tutanota.com].boom")) returned 1 [0131.316] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\Qq6wMGqMzL.lnk" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\windows\\recent\\qq6wmgqmzl.lnk"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\Qq6wMGqMzL.lnk.[neftet@tutanota.com].boom" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\windows\\recent\\qq6wmgqmzl.lnk.[neftet@tutanota.com].boom")) returned 1 [0131.321] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\qqLhydztItrIGc3q_E.lnk" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\windows\\recent\\qqlhydztitrigc3q_e.lnk"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\qqLhydztItrIGc3q_E.lnk.[neftet@tutanota.com].boom" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\windows\\recent\\qqlhydztitrigc3q_e.lnk.[neftet@tutanota.com].boom")) returned 1 [0131.324] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\qVjfxVr.mkv.lnk" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\windows\\recent\\qvjfxvr.mkv.lnk"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\qVjfxVr.mkv.lnk.[neftet@tutanota.com].boom" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\windows\\recent\\qvjfxvr.mkv.lnk.[neftet@tutanota.com].boom")) returned 1 [0131.327] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\qXc5CfQ1VI 7A-Et3.lnk" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\windows\\recent\\qxc5cfq1vi 7a-et3.lnk"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\qXc5CfQ1VI 7A-Et3.lnk.[neftet@tutanota.com].boom" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\windows\\recent\\qxc5cfq1vi 7a-et3.lnk.[neftet@tutanota.com].boom")) returned 1 [0131.330] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\qZqQJke.lnk" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\windows\\recent\\qzqqjke.lnk"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\qZqQJke.lnk.[neftet@tutanota.com].boom" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\windows\\recent\\qzqqjke.lnk.[neftet@tutanota.com].boom")) returned 1 [0131.334] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\r M9y9TQ8L-H.lnk" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\windows\\recent\\r m9y9tq8l-h.lnk"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\r M9y9TQ8L-H.lnk.[neftet@tutanota.com].boom" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\windows\\recent\\r m9y9tq8l-h.lnk.[neftet@tutanota.com].boom")) returned 1 [0131.338] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\r7hjDl5.lnk" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\windows\\recent\\r7hjdl5.lnk"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\r7hjDl5.lnk.[neftet@tutanota.com].boom" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\windows\\recent\\r7hjdl5.lnk.[neftet@tutanota.com].boom")) returned 1 [0131.342] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\r8aQr.lnk" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\windows\\recent\\r8aqr.lnk"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\r8aQr.lnk.[neftet@tutanota.com].boom" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\windows\\recent\\r8aqr.lnk.[neftet@tutanota.com].boom")) returned 1 [0131.345] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\R9y47OQ.mkv.lnk" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\windows\\recent\\r9y47oq.mkv.lnk"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\R9y47OQ.mkv.lnk.[neftet@tutanota.com].boom" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\windows\\recent\\r9y47oq.mkv.lnk.[neftet@tutanota.com].boom")) returned 1 [0131.349] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\Roaming.lnk" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\windows\\recent\\roaming.lnk"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\Roaming.lnk.[neftet@tutanota.com].boom" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\windows\\recent\\roaming.lnk.[neftet@tutanota.com].boom")) returned 1 [0131.352] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\rQ40SPQ.lnk" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\windows\\recent\\rq40spq.lnk"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\rQ40SPQ.lnk.[neftet@tutanota.com].boom" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\windows\\recent\\rq40spq.lnk.[neftet@tutanota.com].boom")) returned 1 [0131.355] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\RQIFP0AFaRZryGtQ.mkv.lnk" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\windows\\recent\\rqifp0afarzrygtq.mkv.lnk"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\RQIFP0AFaRZryGtQ.mkv.lnk.[neftet@tutanota.com].boom" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\windows\\recent\\rqifp0afarzrygtq.mkv.lnk.[neftet@tutanota.com].boom")) returned 1 [0131.358] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\ShYapy659.lnk" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\windows\\recent\\shyapy659.lnk"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\ShYapy659.lnk.[neftet@tutanota.com].boom" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\windows\\recent\\shyapy659.lnk.[neftet@tutanota.com].boom")) returned 1 [0131.362] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\SRp8.lnk" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\windows\\recent\\srp8.lnk"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\SRp8.lnk.[neftet@tutanota.com].boom" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\windows\\recent\\srp8.lnk.[neftet@tutanota.com].boom")) returned 1 [0131.365] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\ste8yr_-iA.ots.lnk" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\windows\\recent\\ste8yr_-ia.ots.lnk"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\ste8yr_-iA.ots.lnk.[neftet@tutanota.com].boom" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\windows\\recent\\ste8yr_-ia.ots.lnk.[neftet@tutanota.com].boom")) returned 1 [0131.368] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\sXaTFSe1U.lnk" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\windows\\recent\\sxatfse1u.lnk"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\sXaTFSe1U.lnk.[neftet@tutanota.com].boom" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\windows\\recent\\sxatfse1u.lnk.[neftet@tutanota.com].boom")) returned 1 [0131.373] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\sxtRyYUIDz-oVBFJk2R_.lnk" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\windows\\recent\\sxtryyuidz-ovbfjk2r_.lnk"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\sxtRyYUIDz-oVBFJk2R_.lnk.[neftet@tutanota.com].boom" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\windows\\recent\\sxtryyuidz-ovbfjk2r_.lnk.[neftet@tutanota.com].boom")) returned 1 [0131.376] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\sylRmbaPWvbAwXpKH.lnk" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\windows\\recent\\sylrmbapwvbawxpkh.lnk"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\sylRmbaPWvbAwXpKH.lnk.[neftet@tutanota.com].boom" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\windows\\recent\\sylrmbapwvbawxpkh.lnk.[neftet@tutanota.com].boom")) returned 1 [0131.380] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\T9 LZd.lnk" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\windows\\recent\\t9 lzd.lnk"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\T9 LZd.lnk.[neftet@tutanota.com].boom" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\windows\\recent\\t9 lzd.lnk.[neftet@tutanota.com].boom")) returned 1 [0131.383] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\tDKPWNeB04vfmhzT6s.lnk" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\windows\\recent\\tdkpwneb04vfmhzt6s.lnk"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\tDKPWNeB04vfmhzT6s.lnk.[neftet@tutanota.com].boom" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\windows\\recent\\tdkpwneb04vfmhzt6s.lnk.[neftet@tutanota.com].boom")) returned 1 [0131.386] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\TKmol_O0z8oXNmmMF.lnk" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\windows\\recent\\tkmol_o0z8oxnmmmf.lnk"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\TKmol_O0z8oXNmmMF.lnk.[neftet@tutanota.com].boom" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\windows\\recent\\tkmol_o0z8oxnmmmf.lnk.[neftet@tutanota.com].boom")) returned 1 [0131.389] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\Tub7RsstsPF5bhl.lnk" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\windows\\recent\\tub7rsstspf5bhl.lnk"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\Tub7RsstsPF5bhl.lnk.[neftet@tutanota.com].boom" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\windows\\recent\\tub7rsstspf5bhl.lnk.[neftet@tutanota.com].boom")) returned 1 [0131.393] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\TuLuB1aKsHS-_cYIE.lnk" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\windows\\recent\\tulub1akshs-_cyie.lnk"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\TuLuB1aKsHS-_cYIE.lnk.[neftet@tutanota.com].boom" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\windows\\recent\\tulub1akshs-_cyie.lnk.[neftet@tutanota.com].boom")) returned 1 [0131.396] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\tZ02_j2HoUAEzAXcbrvF.lnk" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\windows\\recent\\tz02_j2houaezaxcbrvf.lnk"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\tZ02_j2HoUAEzAXcbrvF.lnk.[neftet@tutanota.com].boom" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\windows\\recent\\tz02_j2houaezaxcbrvf.lnk.[neftet@tutanota.com].boom")) returned 1 [0131.400] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\UI0YnTvRe3FtpToWZZU.mkv.lnk" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\windows\\recent\\ui0yntvre3ftptowzzu.mkv.lnk"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\UI0YnTvRe3FtpToWZZU.mkv.lnk.[neftet@tutanota.com].boom" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\windows\\recent\\ui0yntvre3ftptowzzu.mkv.lnk.[neftet@tutanota.com].boom")) returned 1 [0131.403] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\UjUJtBCLIKM-5dz9N.mkv.lnk" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\windows\\recent\\ujujtbclikm-5dz9n.mkv.lnk"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\UjUJtBCLIKM-5dz9N.mkv.lnk.[neftet@tutanota.com].boom" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\windows\\recent\\ujujtbclikm-5dz9n.mkv.lnk.[neftet@tutanota.com].boom")) returned 1 [0131.409] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\ur1m5T0qt.lnk" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\windows\\recent\\ur1m5t0qt.lnk"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\ur1m5T0qt.lnk.[neftet@tutanota.com].boom" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\windows\\recent\\ur1m5t0qt.lnk.[neftet@tutanota.com].boom")) returned 1 [0131.413] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\utBP6.lnk" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\windows\\recent\\utbp6.lnk"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\utBP6.lnk.[neftet@tutanota.com].boom" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\windows\\recent\\utbp6.lnk.[neftet@tutanota.com].boom")) returned 1 [0131.417] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\Uv _kLMMgs1_MElw.flv.lnk" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\windows\\recent\\uv _klmmgs1_melw.flv.lnk"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\Uv _kLMMgs1_MElw.flv.lnk.[neftet@tutanota.com].boom" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\windows\\recent\\uv _klmmgs1_melw.flv.lnk.[neftet@tutanota.com].boom")) returned 1 [0131.420] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\Uvon-ej5Wh.lnk" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\windows\\recent\\uvon-ej5wh.lnk"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\Uvon-ej5Wh.lnk.[neftet@tutanota.com].boom" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\windows\\recent\\uvon-ej5wh.lnk.[neftet@tutanota.com].boom")) returned 1 [0131.423] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\UVT6TQK.lnk" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\windows\\recent\\uvt6tqk.lnk"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\UVT6TQK.lnk.[neftet@tutanota.com].boom" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\windows\\recent\\uvt6tqk.lnk.[neftet@tutanota.com].boom")) returned 1 [0131.427] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\UXStKO.lnk" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\windows\\recent\\uxstko.lnk"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\UXStKO.lnk.[neftet@tutanota.com].boom" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\windows\\recent\\uxstko.lnk.[neftet@tutanota.com].boom")) returned 1 [0131.432] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\uZhRJalfyk_WN.lnk" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\windows\\recent\\uzhrjalfyk_wn.lnk"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\uZhRJalfyk_WN.lnk.[neftet@tutanota.com].boom" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\windows\\recent\\uzhrjalfyk_wn.lnk.[neftet@tutanota.com].boom")) returned 1 [0131.436] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\v62Jp.lnk" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\windows\\recent\\v62jp.lnk"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\v62Jp.lnk.[neftet@tutanota.com].boom" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\windows\\recent\\v62jp.lnk.[neftet@tutanota.com].boom")) returned 1 [0131.439] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\V7vkSt.lnk" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\windows\\recent\\v7vkst.lnk"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\V7vkSt.lnk.[neftet@tutanota.com].boom" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\windows\\recent\\v7vkst.lnk.[neftet@tutanota.com].boom")) returned 1 [0131.442] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\VPUJVJbaoT0AA1L.lnk" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\windows\\recent\\vpujvjbaot0aa1l.lnk"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\VPUJVJbaoT0AA1L.lnk.[neftet@tutanota.com].boom" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\windows\\recent\\vpujvjbaot0aa1l.lnk.[neftet@tutanota.com].boom")) returned 1 [0131.445] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\VRQcjXR.flv.lnk" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\windows\\recent\\vrqcjxr.flv.lnk"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\VRQcjXR.flv.lnk.[neftet@tutanota.com].boom" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\windows\\recent\\vrqcjxr.flv.lnk.[neftet@tutanota.com].boom")) returned 1 [0131.448] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\vZhdjERKcp.lnk" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\windows\\recent\\vzhdjerkcp.lnk"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\vZhdjERKcp.lnk.[neftet@tutanota.com].boom" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\windows\\recent\\vzhdjerkcp.lnk.[neftet@tutanota.com].boom")) returned 1 [0131.451] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\vzk6K51PQW9jyiRf.lnk" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\windows\\recent\\vzk6k51pqw9jyirf.lnk"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\vzk6K51PQW9jyiRf.lnk.[neftet@tutanota.com].boom" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\windows\\recent\\vzk6k51pqw9jyirf.lnk.[neftet@tutanota.com].boom")) returned 1 [0131.455] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\W2JtfG_38gA.lnk" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\windows\\recent\\w2jtfg_38ga.lnk"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\W2JtfG_38gA.lnk.[neftet@tutanota.com].boom" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\windows\\recent\\w2jtfg_38ga.lnk.[neftet@tutanota.com].boom")) returned 1 [0131.459] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\WAwfTxwVF7xfXscX.lnk" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\windows\\recent\\wawftxwvf7xfxscx.lnk"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\WAwfTxwVF7xfXscX.lnk.[neftet@tutanota.com].boom" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\windows\\recent\\wawftxwvf7xfxscx.lnk.[neftet@tutanota.com].boom")) returned 1 [0131.462] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\WHE1DQO_Ps0NUHD5IUA.lnk" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\windows\\recent\\whe1dqo_ps0nuhd5iua.lnk"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\WHE1DQO_Ps0NUHD5IUA.lnk.[neftet@tutanota.com].boom" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\windows\\recent\\whe1dqo_ps0nuhd5iua.lnk.[neftet@tutanota.com].boom")) returned 1 [0131.465] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\wmGhH6LXjHSc.lnk" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\windows\\recent\\wmghh6lxjhsc.lnk"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\wmGhH6LXjHSc.lnk.[neftet@tutanota.com].boom" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\windows\\recent\\wmghh6lxjhsc.lnk.[neftet@tutanota.com].boom")) returned 1 [0131.469] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\woIAzWgoxq8m n.lnk" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\windows\\recent\\woiazwgoxq8m n.lnk"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\woIAzWgoxq8m n.lnk.[neftet@tutanota.com].boom" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\windows\\recent\\woiazwgoxq8m n.lnk.[neftet@tutanota.com].boom")) returned 1 [0131.472] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\WpAlC1uR.lnk" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\windows\\recent\\wpalc1ur.lnk"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\WpAlC1uR.lnk.[neftet@tutanota.com].boom" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\windows\\recent\\wpalc1ur.lnk.[neftet@tutanota.com].boom")) returned 1 [0131.475] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\WUwVH33W.lnk" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\windows\\recent\\wuwvh33w.lnk"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\WUwVH33W.lnk.[neftet@tutanota.com].boom" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\windows\\recent\\wuwvh33w.lnk.[neftet@tutanota.com].boom")) returned 1 [0131.478] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\x-WU9.flv.lnk" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\windows\\recent\\x-wu9.flv.lnk"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\x-WU9.flv.lnk.[neftet@tutanota.com].boom" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\windows\\recent\\x-wu9.flv.lnk.[neftet@tutanota.com].boom")) returned 1 [0131.481] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\xhxot_kWSkhA9P.lnk" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\windows\\recent\\xhxot_kwskha9p.lnk"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\xhxot_kWSkhA9P.lnk.[neftet@tutanota.com].boom" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\windows\\recent\\xhxot_kwskha9p.lnk.[neftet@tutanota.com].boom")) returned 1 [0131.485] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\xi26C-f e26K1XH.lnk" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\windows\\recent\\xi26c-f e26k1xh.lnk"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\xi26C-f e26K1XH.lnk.[neftet@tutanota.com].boom" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\windows\\recent\\xi26c-f e26k1xh.lnk.[neftet@tutanota.com].boom")) returned 1 [0131.488] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\Xjiv7PmC.lnk" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\windows\\recent\\xjiv7pmc.lnk"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\Xjiv7PmC.lnk.[neftet@tutanota.com].boom" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\windows\\recent\\xjiv7pmc.lnk.[neftet@tutanota.com].boom")) returned 1 [0131.492] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\XQv9HAJ4krDS5PoLDZN.ots.lnk" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\windows\\recent\\xqv9haj4krds5poldzn.ots.lnk"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\XQv9HAJ4krDS5PoLDZN.ots.lnk.[neftet@tutanota.com].boom" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\windows\\recent\\xqv9haj4krds5poldzn.ots.lnk.[neftet@tutanota.com].boom")) returned 1 [0131.495] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\xXD95e7i 9JIiSYfn.lnk" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\windows\\recent\\xxd95e7i 9jiisyfn.lnk"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\xXD95e7i 9JIiSYfn.lnk.[neftet@tutanota.com].boom" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\windows\\recent\\xxd95e7i 9jiisyfn.lnk.[neftet@tutanota.com].boom")) returned 1 [0131.498] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\Xzz-K fFe.lnk" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\windows\\recent\\xzz-k ffe.lnk"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\Xzz-K fFe.lnk.[neftet@tutanota.com].boom" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\windows\\recent\\xzz-k ffe.lnk.[neftet@tutanota.com].boom")) returned 1 [0131.501] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\YCXGBLVtV61m.ots.lnk" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\windows\\recent\\ycxgblvtv61m.ots.lnk"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\YCXGBLVtV61m.ots.lnk.[neftet@tutanota.com].boom" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\windows\\recent\\ycxgblvtv61m.ots.lnk.[neftet@tutanota.com].boom")) returned 1 [0131.505] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\YFAmrd4RrOq5.lnk" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\windows\\recent\\yfamrd4rroq5.lnk"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\YFAmrd4RrOq5.lnk.[neftet@tutanota.com].boom" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\windows\\recent\\yfamrd4rroq5.lnk.[neftet@tutanota.com].boom")) returned 1 [0131.508] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\yis5j.mkv.lnk" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\windows\\recent\\yis5j.mkv.lnk"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\yis5j.mkv.lnk.[neftet@tutanota.com].boom" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\windows\\recent\\yis5j.mkv.lnk.[neftet@tutanota.com].boom")) returned 1 [0131.515] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\ylM2mu-V6E1bfaho.lnk" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\windows\\recent\\ylm2mu-v6e1bfaho.lnk"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\ylM2mu-V6E1bfaho.lnk.[neftet@tutanota.com].boom" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\windows\\recent\\ylm2mu-v6e1bfaho.lnk.[neftet@tutanota.com].boom")) returned 1 [0131.519] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\ypQAwj_1Xn8LoFy0UjN.lnk" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\windows\\recent\\ypqawj_1xn8lofy0ujn.lnk"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\ypQAwj_1Xn8LoFy0UjN.lnk.[neftet@tutanota.com].boom" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\windows\\recent\\ypqawj_1xn8lofy0ujn.lnk.[neftet@tutanota.com].boom")) returned 1 [0131.522] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\Ytscf.lnk" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\windows\\recent\\ytscf.lnk"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\Ytscf.lnk.[neftet@tutanota.com].boom" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\windows\\recent\\ytscf.lnk.[neftet@tutanota.com].boom")) returned 1 [0131.525] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\YZ7eP Q.lnk" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\windows\\recent\\yz7ep q.lnk"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\YZ7eP Q.lnk.[neftet@tutanota.com].boom" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\windows\\recent\\yz7ep q.lnk.[neftet@tutanota.com].boom")) returned 1 [0131.529] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\ZbKUnKkgcHGbWFlacj.mkv.lnk" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\windows\\recent\\zbkunkkgchgbwflacj.mkv.lnk"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\ZbKUnKkgcHGbWFlacj.mkv.lnk.[neftet@tutanota.com].boom" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\windows\\recent\\zbkunkkgchgbwflacj.mkv.lnk.[neftet@tutanota.com].boom")) returned 1 [0131.532] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\Ze4qx331n4oC1.ots.lnk" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\windows\\recent\\ze4qx331n4oc1.ots.lnk"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\Ze4qx331n4oC1.ots.lnk.[neftet@tutanota.com].boom" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\windows\\recent\\ze4qx331n4oc1.ots.lnk.[neftet@tutanota.com].boom")) returned 1 [0131.536] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\ZTDDJr-2j.lnk" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\windows\\recent\\ztddjr-2j.lnk"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\ZTDDJr-2j.lnk.[neftet@tutanota.com].boom" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\windows\\recent\\ztddjr-2j.lnk.[neftet@tutanota.com].boom")) returned 1 [0131.540] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\zXdq.lnk" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\windows\\recent\\zxdq.lnk"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\zXdq.lnk.[neftet@tutanota.com].boom" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\windows\\recent\\zxdq.lnk.[neftet@tutanota.com].boom")) returned 1 [0131.546] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\SendTo\\Fax Recipient.lnk" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\windows\\sendto\\fax recipient.lnk"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\SendTo\\Fax Recipient.lnk.[neftet@tutanota.com].boom" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\windows\\sendto\\fax recipient.lnk.[neftet@tutanota.com].boom")) returned 1 [0131.550] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Start Menu\\Programs\\Internet Explorer (64-bit).lnk" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\windows\\start menu\\programs\\internet explorer (64-bit).lnk"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Start Menu\\Programs\\Internet Explorer (64-bit).lnk.[neftet@tutanota.com].boom" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\windows\\start menu\\programs\\internet explorer (64-bit).lnk.[neftet@tutanota.com].boom")) returned 1 [0131.554] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Start Menu\\Programs\\Internet Explorer.lnk" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\windows\\start menu\\programs\\internet explorer.lnk"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Start Menu\\Programs\\Internet Explorer.lnk.[neftet@tutanota.com].boom" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\windows\\start menu\\programs\\internet explorer.lnk.[neftet@tutanota.com].boom")) returned 1 [0131.559] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Start Menu\\Programs\\Accessories\\Command Prompt.lnk" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\windows\\start menu\\programs\\accessories\\command prompt.lnk"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Start Menu\\Programs\\Accessories\\Command Prompt.lnk.[neftet@tutanota.com].boom" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\windows\\start menu\\programs\\accessories\\command prompt.lnk.[neftet@tutanota.com].boom")) returned 1 [0131.563] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Start Menu\\Programs\\Accessories\\Notepad.lnk" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\windows\\start menu\\programs\\accessories\\notepad.lnk"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Start Menu\\Programs\\Accessories\\Notepad.lnk.[neftet@tutanota.com].boom" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\windows\\start menu\\programs\\accessories\\notepad.lnk.[neftet@tutanota.com].boom")) returned 1 [0131.568] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Start Menu\\Programs\\Accessories\\Run.lnk" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\windows\\start menu\\programs\\accessories\\run.lnk"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Start Menu\\Programs\\Accessories\\Run.lnk.[neftet@tutanota.com].boom" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\windows\\start menu\\programs\\accessories\\run.lnk.[neftet@tutanota.com].boom")) returned 1 [0131.572] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Start Menu\\Programs\\Accessories\\Windows Explorer.lnk" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\windows\\start menu\\programs\\accessories\\windows explorer.lnk"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Start Menu\\Programs\\Accessories\\Windows Explorer.lnk.[neftet@tutanota.com].boom" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\windows\\start menu\\programs\\accessories\\windows explorer.lnk.[neftet@tutanota.com].boom")) returned 1 [0131.577] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Start Menu\\Programs\\Accessories\\Accessibility\\Ease of Access.lnk" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\windows\\start menu\\programs\\accessories\\accessibility\\ease of access.lnk"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Start Menu\\Programs\\Accessories\\Accessibility\\Ease of Access.lnk.[neftet@tutanota.com].boom" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\windows\\start menu\\programs\\accessories\\accessibility\\ease of access.lnk.[neftet@tutanota.com].boom")) returned 1 [0131.581] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Start Menu\\Programs\\Accessories\\Accessibility\\Magnify.lnk" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\windows\\start menu\\programs\\accessories\\accessibility\\magnify.lnk"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Start Menu\\Programs\\Accessories\\Accessibility\\Magnify.lnk.[neftet@tutanota.com].boom" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\windows\\start menu\\programs\\accessories\\accessibility\\magnify.lnk.[neftet@tutanota.com].boom")) returned 1 [0131.586] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Start Menu\\Programs\\Accessories\\Accessibility\\Narrator.lnk" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\windows\\start menu\\programs\\accessories\\accessibility\\narrator.lnk"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Start Menu\\Programs\\Accessories\\Accessibility\\Narrator.lnk.[neftet@tutanota.com].boom" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\windows\\start menu\\programs\\accessories\\accessibility\\narrator.lnk.[neftet@tutanota.com].boom")) returned 1 [0131.591] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Start Menu\\Programs\\Accessories\\Accessibility\\On-Screen Keyboard.lnk" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\windows\\start menu\\programs\\accessories\\accessibility\\on-screen keyboard.lnk"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Start Menu\\Programs\\Accessories\\Accessibility\\On-Screen Keyboard.lnk.[neftet@tutanota.com].boom" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\windows\\start menu\\programs\\accessories\\accessibility\\on-screen keyboard.lnk.[neftet@tutanota.com].boom")) returned 1 [0131.595] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Start Menu\\Programs\\Accessories\\System Tools\\computer.lnk" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\windows\\start menu\\programs\\accessories\\system tools\\computer.lnk"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Start Menu\\Programs\\Accessories\\System Tools\\computer.lnk.[neftet@tutanota.com].boom" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\windows\\start menu\\programs\\accessories\\system tools\\computer.lnk.[neftet@tutanota.com].boom")) returned 1 [0131.600] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Start Menu\\Programs\\Accessories\\System Tools\\Control Panel.lnk" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\windows\\start menu\\programs\\accessories\\system tools\\control panel.lnk"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Start Menu\\Programs\\Accessories\\System Tools\\Control Panel.lnk.[neftet@tutanota.com].boom" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\windows\\start menu\\programs\\accessories\\system tools\\control panel.lnk.[neftet@tutanota.com].boom")) returned 1 [0131.604] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Start Menu\\Programs\\Accessories\\System Tools\\Internet Explorer (No Add-ons).lnk" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\windows\\start menu\\programs\\accessories\\system tools\\internet explorer (no add-ons).lnk"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Start Menu\\Programs\\Accessories\\System Tools\\Internet Explorer (No Add-ons).lnk.[neftet@tutanota.com].boom" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\windows\\start menu\\programs\\accessories\\system tools\\internet explorer (no add-ons).lnk.[neftet@tutanota.com].boom")) returned 1 [0131.609] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Start Menu\\Programs\\Accessories\\System Tools\\Private Character Editor.lnk" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\windows\\start menu\\programs\\accessories\\system tools\\private character editor.lnk"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Start Menu\\Programs\\Accessories\\System Tools\\Private Character Editor.lnk.[neftet@tutanota.com].boom" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\windows\\start menu\\programs\\accessories\\system tools\\private character editor.lnk.[neftet@tutanota.com].boom")) returned 1 [0131.614] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Start Menu\\Programs\\Maintenance\\Help.lnk" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\windows\\start menu\\programs\\maintenance\\help.lnk"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Start Menu\\Programs\\Maintenance\\Help.lnk.[neftet@tutanota.com].boom" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\windows\\start menu\\programs\\maintenance\\help.lnk.[neftet@tutanota.com].boom")) returned 1 [0131.662] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Themes\\TranscodedWallpaper.jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\windows\\themes\\transcodedwallpaper.jpg"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Themes\\TranscodedWallpaper.jpg.[neftet@tutanota.com].boom" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\windows\\themes\\transcodedwallpaper.jpg.[neftet@tutanota.com].boom")) returned 1 [0131.677] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\6b4NNrp5 bh.pdf" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\6b4nnrp5 bh.pdf"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\6b4NNrp5 bh.pdf.[neftet@tutanota.com].boom" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\6b4nnrp5 bh.pdf.[neftet@tutanota.com].boom")) returned 1 [0131.682] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\99MhsqKE-rdB-aBVWt9F.mp4" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\99mhsqke-rdb-abvwt9f.mp4"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\99MhsqKE-rdB-aBVWt9F.mp4.[neftet@tutanota.com].boom" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\99mhsqke-rdb-abvwt9f.mp4.[neftet@tutanota.com].boom")) returned 1 [0131.687] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\dVMHP12YJw.avi" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\dvmhp12yjw.avi"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\dVMHP12YJw.avi.[neftet@tutanota.com].boom" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\dvmhp12yjw.avi.[neftet@tutanota.com].boom")) returned 1 [0131.698] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\HhqZlj.wav" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\hhqzlj.wav"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\HhqZlj.wav.[neftet@tutanota.com].boom" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\hhqzlj.wav.[neftet@tutanota.com].boom")) returned 1 [0131.703] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\HtDElibU1DDUUobGb2we.avi" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\htdelibu1dduuobgb2we.avi"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\HtDElibU1DDUUobGb2we.avi.[neftet@tutanota.com].boom" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\htdelibu1dduuobgb2we.avi.[neftet@tutanota.com].boom")) returned 1 [0131.707] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\Huq3uXdk.mp4" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\huq3uxdk.mp4"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\Huq3uXdk.mp4.[neftet@tutanota.com].boom" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\huq3uxdk.mp4.[neftet@tutanota.com].boom")) returned 1 [0131.719] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\jJnNyz.mp3" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\jjnnyz.mp3"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\jJnNyz.mp3.[neftet@tutanota.com].boom" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\jjnnyz.mp3.[neftet@tutanota.com].boom")) returned 1 [0131.723] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\j_g3ZRLUMjKwy4 0Ihg.xlsx" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\j_g3zrlumjkwy4 0ihg.xlsx"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\j_g3ZRLUMjKwy4 0Ihg.xlsx.[neftet@tutanota.com].boom" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\j_g3zrlumjkwy4 0ihg.xlsx.[neftet@tutanota.com].boom")) returned 1 [0131.740] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\kr6eFTD-N.wav" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\kr6eftd-n.wav"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\kr6eFTD-N.wav.[neftet@tutanota.com].boom" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\kr6eftd-n.wav.[neftet@tutanota.com].boom")) returned 1 [0131.747] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\LajwuWOfmL7z35P7ILh_.doc" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\lajwuwofml7z35p7ilh_.doc"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\LajwuWOfmL7z35P7ILh_.doc.[neftet@tutanota.com].boom" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\lajwuwofml7z35p7ilh_.doc.[neftet@tutanota.com].boom")) returned 1 [0131.756] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\ogh55mhoOIV0q8Di8.mp3" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\ogh55mhooiv0q8di8.mp3"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\ogh55mhoOIV0q8Di8.mp3.[neftet@tutanota.com].boom" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\ogh55mhooiv0q8di8.mp3.[neftet@tutanota.com].boom")) returned 1 [0131.761] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\PlzXFM1.pdf" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\plzxfm1.pdf"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\PlzXFM1.pdf.[neftet@tutanota.com].boom" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\plzxfm1.pdf.[neftet@tutanota.com].boom")) returned 1 [0131.764] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\Qq6wMGqMzL.docx" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\qq6wmgqmzl.docx"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\Qq6wMGqMzL.docx.[neftet@tutanota.com].boom" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\qq6wmgqmzl.docx.[neftet@tutanota.com].boom")) returned 1 [0131.768] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\R4pxWKI.wav" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\r4pxwki.wav"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\R4pxWKI.wav.[neftet@tutanota.com].boom" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\r4pxwki.wav.[neftet@tutanota.com].boom")) returned 1 [0131.774] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\t3GW ZMnrl.avi" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\t3gw zmnrl.avi"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\t3GW ZMnrl.avi.[neftet@tutanota.com].boom" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\t3gw zmnrl.avi.[neftet@tutanota.com].boom")) returned 1 [0131.779] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\TCjWHCEXor.avi" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\tcjwhcexor.avi"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\TCjWHCEXor.avi.[neftet@tutanota.com].boom" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\tcjwhcexor.avi.[neftet@tutanota.com].boom")) returned 1 [0131.785] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\TuLuB1aKsHS-_cYIE.csv" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\tulub1akshs-_cyie.csv"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\TuLuB1aKsHS-_cYIE.csv.[neftet@tutanota.com].boom" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\tulub1akshs-_cyie.csv.[neftet@tutanota.com].boom")) returned 1 [0131.792] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\UvlrnJnT_l t.png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\uvlrnjnt_l t.png"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\UvlrnJnT_l t.png.[neftet@tutanota.com].boom" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\uvlrnjnt_l t.png.[neftet@tutanota.com].boom")) returned 1 [0131.795] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\UVT6TQK.png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\uvt6tqk.png"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\UVT6TQK.png.[neftet@tutanota.com].boom" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\uvt6tqk.png.[neftet@tutanota.com].boom")) returned 1 [0131.799] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\wzR1a01KM.avi" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\wzr1a01km.avi"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\wzR1a01KM.avi.[neftet@tutanota.com].boom" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\wzr1a01km.avi.[neftet@tutanota.com].boom")) returned 1 [0131.808] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\xi26C-f e26K1XH.ppt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\xi26c-f e26k1xh.ppt"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\xi26C-f e26K1XH.ppt.[neftet@tutanota.com].boom" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\xi26c-f e26k1xh.ppt.[neftet@tutanota.com].boom")) returned 1 [0131.814] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\fo7DC8R1OiqEuI ix\\1iogfuz_21wpdknL.docx" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\fo7dc8r1oiqeui ix\\1iogfuz_21wpdknl.docx"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\fo7DC8R1OiqEuI ix\\1iogfuz_21wpdknL.docx.[neftet@tutanota.com].boom" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\fo7dc8r1oiqeui ix\\1iogfuz_21wpdknl.docx.[neftet@tutanota.com].boom")) returned 1 [0131.818] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\fo7DC8R1OiqEuI ix\\bErvzuwNUg.png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\fo7dc8r1oiqeui ix\\bervzuwnug.png"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\fo7DC8R1OiqEuI ix\\bErvzuwNUg.png.[neftet@tutanota.com].boom" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\fo7dc8r1oiqeui ix\\bervzuwnug.png.[neftet@tutanota.com].boom")) returned 1 [0131.822] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\lCnlTJ-G\\sxtRyYUIDz-oVBFJk2R_.pptx" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\lcnltj-g\\sxtryyuidz-ovbfjk2r_.pptx"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\lCnlTJ-G\\sxtRyYUIDz-oVBFJk2R_.pptx.[neftet@tutanota.com].boom" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\lcnltj-g\\sxtryyuidz-ovbfjk2r_.pptx.[neftet@tutanota.com].boom")) returned 1 [0131.828] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\lCnlTJ-G\\vZhdjERKcp.pdf" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\lcnltj-g\\vzhdjerkcp.pdf"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\lCnlTJ-G\\vZhdjERKcp.pdf.[neftet@tutanota.com].boom" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\lcnltj-g\\vzhdjerkcp.pdf.[neftet@tutanota.com].boom")) returned 1 [0131.833] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\W2JtfG_38gA\\aAze.png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\w2jtfg_38ga\\aaze.png"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\W2JtfG_38gA\\aAze.png.[neftet@tutanota.com].boom" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\w2jtfg_38ga\\aaze.png.[neftet@tutanota.com].boom")) returned 1 [0131.839] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\W2JtfG_38gA\\Fz1uxg4uH8FGJTt.bmp" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\w2jtfg_38ga\\fz1uxg4uh8fgjtt.bmp"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\W2JtfG_38gA\\Fz1uxg4uH8FGJTt.bmp.[neftet@tutanota.com].boom" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\w2jtfg_38ga\\fz1uxg4uh8fgjtt.bmp.[neftet@tutanota.com].boom")) returned 1 [0131.847] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\W2JtfG_38gA\\r7hjDl5.png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\w2jtfg_38ga\\r7hjdl5.png"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\W2JtfG_38gA\\r7hjDl5.png.[neftet@tutanota.com].boom" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\w2jtfg_38ga\\r7hjdl5.png.[neftet@tutanota.com].boom")) returned 1 [0131.851] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\W2JtfG_38gA\\woIAzWgoxq8m n.bmp" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\w2jtfg_38ga\\woiazwgoxq8m n.bmp"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\W2JtfG_38gA\\woIAzWgoxq8m n.bmp.[neftet@tutanota.com].boom" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\w2jtfg_38ga\\woiazwgoxq8m n.bmp.[neftet@tutanota.com].boom")) returned 1 [0131.855] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\xhxot_kWSkhA9P\\atwN3-g8oPk6T3g.jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\xhxot_kwskha9p\\atwn3-g8opk6t3g.jpg"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\xhxot_kWSkhA9P\\atwN3-g8oPk6T3g.jpg.[neftet@tutanota.com].boom" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\xhxot_kwskha9p\\atwn3-g8opk6t3g.jpg.[neftet@tutanota.com].boom")) returned 1 [0131.861] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\xhxot_kWSkhA9P\\cmYxylv 6W.bmp" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\xhxot_kwskha9p\\cmyxylv 6w.bmp"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\xhxot_kWSkhA9P\\cmYxylv 6W.bmp.[neftet@tutanota.com].boom" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\xhxot_kwskha9p\\cmyxylv 6w.bmp.[neftet@tutanota.com].boom")) returned 1 [0131.871] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\-XBhFw3KRNIiI.docx" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\-xbhfw3krniii.docx"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\-XBhFw3KRNIiI.docx.[neftet@tutanota.com].boom" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\-xbhfw3krniii.docx.[neftet@tutanota.com].boom")) returned 1 [0131.875] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\1GMPKC9.xlsx" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\1gmpkc9.xlsx"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\1GMPKC9.xlsx.[neftet@tutanota.com].boom" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\1gmpkc9.xlsx.[neftet@tutanota.com].boom")) returned 1 [0131.882] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\3g 7kD u8yPvSBKq.pptx" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\3g 7kd u8ypvsbkq.pptx"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\3g 7kD u8yPvSBKq.pptx.[neftet@tutanota.com].boom" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\3g 7kd u8ypvsbkq.pptx.[neftet@tutanota.com].boom")) returned 1 [0131.885] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\3YAya5eDcy-F-cb-1Rdx.docx" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\3yaya5edcy-f-cb-1rdx.docx"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\3YAya5eDcy-F-cb-1Rdx.docx.[neftet@tutanota.com].boom" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\3yaya5edcy-f-cb-1rdx.docx.[neftet@tutanota.com].boom")) returned 1 [0131.894] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\AP4ujLNzybJF J.rtf" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\ap4ujlnzybjf j.rtf"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\AP4ujLNzybJF J.rtf.[neftet@tutanota.com].boom" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\ap4ujlnzybjf j.rtf.[neftet@tutanota.com].boom")) returned 1 [0131.903] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\ewcSZPE2Uke_ysh8Kk.xlsx" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\ewcszpe2uke_ysh8kk.xlsx"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\ewcSZPE2Uke_ysh8Kk.xlsx.[neftet@tutanota.com].boom" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\ewcszpe2uke_ysh8kk.xlsx.[neftet@tutanota.com].boom")) returned 1 [0131.910] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\F3qq-TdX0v1.xlsx" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\f3qq-tdx0v1.xlsx"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\F3qq-TdX0v1.xlsx.[neftet@tutanota.com].boom" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\f3qq-tdx0v1.xlsx.[neftet@tutanota.com].boom")) returned 1 [0131.916] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\HiHn1FTQ027Hcj vP6d8.docx" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\hihn1ftq027hcj vp6d8.docx"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\HiHn1FTQ027Hcj vP6d8.docx.[neftet@tutanota.com].boom" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\hihn1ftq027hcj vp6d8.docx.[neftet@tutanota.com].boom")) returned 1 [0131.922] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\HS_jtO INeCAdLtO.xlsx" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\hs_jto inecadlto.xlsx"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\HS_jtO INeCAdLtO.xlsx.[neftet@tutanota.com].boom" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\hs_jto inecadlto.xlsx.[neftet@tutanota.com].boom")) returned 1 [0131.927] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\MVUshvijtjHU.pptx" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\mvushvijtjhu.pptx"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\MVUshvijtjHU.pptx.[neftet@tutanota.com].boom" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\mvushvijtjhu.pptx.[neftet@tutanota.com].boom")) returned 1 [0131.938] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\phtzJp3.doc" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\phtzjp3.doc"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\phtzJp3.doc.[neftet@tutanota.com].boom" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\phtzjp3.doc.[neftet@tutanota.com].boom")) returned 1 [0131.941] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\ShYapy659.docx" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\shyapy659.docx"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\ShYapy659.docx.[neftet@tutanota.com].boom" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\shyapy659.docx.[neftet@tutanota.com].boom")) returned 1 [0131.950] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\sylRmbaPWvbAwXpKH.pptx" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\sylrmbapwvbawxpkh.pptx"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\sylRmbaPWvbAwXpKH.pptx.[neftet@tutanota.com].boom" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\sylrmbapwvbawxpkh.pptx.[neftet@tutanota.com].boom")) returned 1 [0131.955] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\Tub7RsstsPF5bhl.docx" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\tub7rsstspf5bhl.docx"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\Tub7RsstsPF5bhl.docx.[neftet@tutanota.com].boom" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\tub7rsstspf5bhl.docx.[neftet@tutanota.com].boom")) returned 1 [0131.960] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\v62Jp.xlsx" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\v62jp.xlsx"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\v62Jp.xlsx.[neftet@tutanota.com].boom" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\v62jp.xlsx.[neftet@tutanota.com].boom")) returned 1 [0131.970] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\WHE1DQO_Ps0NUHD5IUA.docx" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\whe1dqo_ps0nuhd5iua.docx"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\WHE1DQO_Ps0NUHD5IUA.docx.[neftet@tutanota.com].boom" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\whe1dqo_ps0nuhd5iua.docx.[neftet@tutanota.com].boom")) returned 1 [0131.976] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\xXD95e7i 9JIiSYfn.pptx" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\xxd95e7i 9jiisyfn.pptx"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\xXD95e7i 9JIiSYfn.pptx.[neftet@tutanota.com].boom" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\xxd95e7i 9jiisyfn.pptx.[neftet@tutanota.com].boom")) returned 1 [0131.986] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\Ytscf.pptx" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\ytscf.pptx"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\Ytscf.pptx.[neftet@tutanota.com].boom" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\ytscf.pptx.[neftet@tutanota.com].boom")) returned 1 [0131.993] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\mcdNsT5RVFSVyld\\tDKPWNeB04vfmhzT6s.doc" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\mcdnst5rvfsvyld\\tdkpwneb04vfmhzt6s.doc"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\mcdNsT5RVFSVyld\\tDKPWNeB04vfmhzT6s.doc.[neftet@tutanota.com].boom" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\mcdnst5rvfsvyld\\tdkpwneb04vfmhzt6s.doc.[neftet@tutanota.com].boom")) returned 1 [0131.996] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\mcdNsT5RVFSVyld\\ur1m5T0qt.pptx" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\mcdnst5rvfsvyld\\ur1m5t0qt.pptx"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\mcdNsT5RVFSVyld\\ur1m5T0qt.pptx.[neftet@tutanota.com].boom" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\mcdnst5rvfsvyld\\ur1m5t0qt.pptx.[neftet@tutanota.com].boom")) returned 1 [0132.006] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\mcdNsT5RVFSVyld\\qZqQJke\\IU5aJXql.pptx" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\mcdnst5rvfsvyld\\qzqqjke\\iu5ajxql.pptx"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\mcdNsT5RVFSVyld\\qZqQJke\\IU5aJXql.pptx.[neftet@tutanota.com].boom" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\mcdnst5rvfsvyld\\qzqqjke\\iu5ajxql.pptx.[neftet@tutanota.com].boom")) returned 1 [0132.018] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\mcdNsT5RVFSVyld\\qZqQJke\\j rWKaz2b-64YTGN.ppt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\mcdnst5rvfsvyld\\qzqqjke\\j rwkaz2b-64ytgn.ppt"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\mcdNsT5RVFSVyld\\qZqQJke\\j rWKaz2b-64YTGN.ppt.[neftet@tutanota.com].boom" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\mcdnst5rvfsvyld\\qzqqjke\\j rwkaz2b-64ytgn.ppt.[neftet@tutanota.com].boom")) returned 1 [0132.021] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\mcdNsT5RVFSVyld\\qZqQJke\\YFAmrd4RrOq5.pptx" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\mcdnst5rvfsvyld\\qzqqjke\\yfamrd4rroq5.pptx"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\mcdNsT5RVFSVyld\\qZqQJke\\YFAmrd4RrOq5.pptx.[neftet@tutanota.com].boom" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\mcdnst5rvfsvyld\\qzqqjke\\yfamrd4rroq5.pptx.[neftet@tutanota.com].boom")) returned 1 [0132.025] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\mcdNsT5RVFSVyld\\qZqQJke\\5mEc8mcZ9jfK\\jUr6h7f7IjsQGe6JnswI.csv" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\mcdnst5rvfsvyld\\qzqqjke\\5mec8mcz9jfk\\jur6h7f7ijsqge6jnswi.csv"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\mcdNsT5RVFSVyld\\qZqQJke\\5mEc8mcZ9jfK\\jUr6h7f7IjsQGe6JnswI.csv.[neftet@tutanota.com].boom" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\mcdnst5rvfsvyld\\qzqqjke\\5mec8mcz9jfk\\jur6h7f7ijsqge6jnswi.csv.[neftet@tutanota.com].boom")) returned 1 [0132.030] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\mcdNsT5RVFSVyld\\qZqQJke\\5mEc8mcZ9jfK\\r8aQr.csv" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\mcdnst5rvfsvyld\\qzqqjke\\5mec8mcz9jfk\\r8aqr.csv"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\mcdNsT5RVFSVyld\\qZqQJke\\5mEc8mcZ9jfK\\r8aQr.csv.[neftet@tutanota.com].boom" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\mcdnst5rvfsvyld\\qzqqjke\\5mec8mcz9jfk\\r8aqr.csv.[neftet@tutanota.com].boom")) returned 1 [0132.035] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\mcdNsT5RVFSVyld\\qZqQJke\\5mEc8mcZ9jfK\\ZTDDJr-2j.pptx" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\mcdnst5rvfsvyld\\qzqqjke\\5mec8mcz9jfk\\ztddjr-2j.pptx"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\mcdNsT5RVFSVyld\\qZqQJke\\5mEc8mcZ9jfK\\ZTDDJr-2j.pptx.[neftet@tutanota.com].boom" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\mcdnst5rvfsvyld\\qzqqjke\\5mec8mcz9jfk\\ztddjr-2j.pptx.[neftet@tutanota.com].boom")) returned 1 [0132.041] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\mcdNsT5RVFSVyld\\qZqQJke\\E5yqHX_c 22spYoHS\\1MlIv-7ANr-ec.rtf" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\mcdnst5rvfsvyld\\qzqqjke\\e5yqhx_c 22spyohs\\1mliv-7anr-ec.rtf"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\mcdNsT5RVFSVyld\\qZqQJke\\E5yqHX_c 22spYoHS\\1MlIv-7ANr-ec.rtf.[neftet@tutanota.com].boom" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\mcdnst5rvfsvyld\\qzqqjke\\e5yqhx_c 22spyohs\\1mliv-7anr-ec.rtf.[neftet@tutanota.com].boom")) returned 1 [0132.044] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\mcdNsT5RVFSVyld\\qZqQJke\\E5yqHX_c 22spYoHS\\fWvZmodXByr bYeQQ7Y.xls" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\mcdnst5rvfsvyld\\qzqqjke\\e5yqhx_c 22spyohs\\fwvzmodxbyr byeqq7y.xls"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\mcdNsT5RVFSVyld\\qZqQJke\\E5yqHX_c 22spYoHS\\fWvZmodXByr bYeQQ7Y.xls.[neftet@tutanota.com].boom" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\mcdnst5rvfsvyld\\qzqqjke\\e5yqhx_c 22spyohs\\fwvzmodxbyr byeqq7y.xls.[neftet@tutanota.com].boom")) returned 1 [0132.054] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\mcdNsT5RVFSVyld\\qZqQJke\\E5yqHX_c 22spYoHS\\SRp8.xls" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\mcdnst5rvfsvyld\\qzqqjke\\e5yqhx_c 22spyohs\\srp8.xls"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\mcdNsT5RVFSVyld\\qZqQJke\\E5yqHX_c 22spYoHS\\SRp8.xls.[neftet@tutanota.com].boom" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\mcdnst5rvfsvyld\\qzqqjke\\e5yqhx_c 22spyohs\\srp8.xls.[neftet@tutanota.com].boom")) returned 1 [0132.062] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\pC9__AmTieaQ3iZVw9R8\\Xzz-K fFe.odt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\pc9__amtieaq3izvw9r8\\xzz-k ffe.odt"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\pC9__AmTieaQ3iZVw9R8\\Xzz-K fFe.odt.[neftet@tutanota.com].boom" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\pc9__amtieaq3izvw9r8\\xzz-k ffe.odt.[neftet@tutanota.com].boom")) returned 1 [0132.066] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\pC9__AmTieaQ3iZVw9R8\\QIviB1J8S42yLfp\\GibSj0Oqv_.rtf" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\pc9__amtieaq3izvw9r8\\qivib1j8s42ylfp\\gibsj0oqv_.rtf"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\pC9__AmTieaQ3iZVw9R8\\QIviB1J8S42yLfp\\GibSj0Oqv_.rtf.[neftet@tutanota.com].boom" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\pc9__amtieaq3izvw9r8\\qivib1j8s42ylfp\\gibsj0oqv_.rtf.[neftet@tutanota.com].boom")) returned 1 [0132.073] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\pC9__AmTieaQ3iZVw9R8\\QIviB1J8S42yLfp\\6ygdYcRuO9\\d6 dLC jkU9.doc" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\pc9__amtieaq3izvw9r8\\qivib1j8s42ylfp\\6ygdycruo9\\d6 dlc jku9.doc"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\pC9__AmTieaQ3iZVw9R8\\QIviB1J8S42yLfp\\6ygdYcRuO9\\d6 dLC jkU9.doc.[neftet@tutanota.com].boom" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\pc9__amtieaq3izvw9r8\\qivib1j8s42ylfp\\6ygdycruo9\\d6 dlc jku9.doc.[neftet@tutanota.com].boom")) returned 1 [0132.076] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\pC9__AmTieaQ3iZVw9R8\\QIviB1J8S42yLfp\\6ygdYcRuO9\\DfXgi8mluBJ.doc" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\pc9__amtieaq3izvw9r8\\qivib1j8s42ylfp\\6ygdycruo9\\dfxgi8mlubj.doc"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\pC9__AmTieaQ3iZVw9R8\\QIviB1J8S42yLfp\\6ygdYcRuO9\\DfXgi8mluBJ.doc.[neftet@tutanota.com].boom" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\pc9__amtieaq3izvw9r8\\qivib1j8s42ylfp\\6ygdycruo9\\dfxgi8mlubj.doc.[neftet@tutanota.com].boom")) returned 1 [0132.082] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\pC9__AmTieaQ3iZVw9R8\\QIviB1J8S42yLfp\\6ygdYcRuO9\\eEZ0I5zK3ZKi8gNeQ.xls" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\pc9__amtieaq3izvw9r8\\qivib1j8s42ylfp\\6ygdycruo9\\eez0i5zk3zki8gneq.xls"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\pC9__AmTieaQ3iZVw9R8\\QIviB1J8S42yLfp\\6ygdYcRuO9\\eEZ0I5zK3ZKi8gNeQ.xls.[neftet@tutanota.com].boom" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\pc9__amtieaq3izvw9r8\\qivib1j8s42ylfp\\6ygdycruo9\\eez0i5zk3zki8gneq.xls.[neftet@tutanota.com].boom")) returned 1 [0132.091] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\pC9__AmTieaQ3iZVw9R8\\QIviB1J8S42yLfp\\6ygdYcRuO9\\Otujad-E.csv" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\pc9__amtieaq3izvw9r8\\qivib1j8s42ylfp\\6ygdycruo9\\otujad-e.csv"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\pC9__AmTieaQ3iZVw9R8\\QIviB1J8S42yLfp\\6ygdYcRuO9\\Otujad-E.csv.[neftet@tutanota.com].boom" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\pc9__amtieaq3izvw9r8\\qivib1j8s42ylfp\\6ygdycruo9\\otujad-e.csv.[neftet@tutanota.com].boom")) returned 1 [0132.103] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\pC9__AmTieaQ3iZVw9R8\\QIviB1J8S42yLfp\\6ygdYcRuO9\\r M9y9TQ8L-H\\6PH LQIJcfFOT3.ppt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\pc9__amtieaq3izvw9r8\\qivib1j8s42ylfp\\6ygdycruo9\\r m9y9tq8l-h\\6ph lqijcffot3.ppt"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\pC9__AmTieaQ3iZVw9R8\\QIviB1J8S42yLfp\\6ygdYcRuO9\\r M9y9TQ8L-H\\6PH LQIJcfFOT3.ppt.[neftet@tutanota.com].boom" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\pc9__amtieaq3izvw9r8\\qivib1j8s42ylfp\\6ygdycruo9\\r m9y9tq8l-h\\6ph lqijcffot3.ppt.[neftet@tutanota.com].boom")) returned 1 [0132.108] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\pC9__AmTieaQ3iZVw9R8\\QIviB1J8S42yLfp\\ylM2mu-V6E1bfaho\\dkDwWWi6Y8y Q.docx" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\pc9__amtieaq3izvw9r8\\qivib1j8s42ylfp\\ylm2mu-v6e1bfaho\\dkdwwwi6y8y q.docx"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\pC9__AmTieaQ3iZVw9R8\\QIviB1J8S42yLfp\\ylM2mu-V6E1bfaho\\dkDwWWi6Y8y Q.docx.[neftet@tutanota.com].boom" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\pc9__amtieaq3izvw9r8\\qivib1j8s42ylfp\\ylm2mu-v6e1bfaho\\dkdwwwi6y8y q.docx.[neftet@tutanota.com].boom")) returned 1 [0132.114] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\pC9__AmTieaQ3iZVw9R8\\QIviB1J8S42yLfp\\ylM2mu-V6E1bfaho\\kpbUV nhoxZNIL.csv" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\pc9__amtieaq3izvw9r8\\qivib1j8s42ylfp\\ylm2mu-v6e1bfaho\\kpbuv nhoxznil.csv"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\pC9__AmTieaQ3iZVw9R8\\QIviB1J8S42yLfp\\ylM2mu-V6E1bfaho\\kpbUV nhoxZNIL.csv.[neftet@tutanota.com].boom" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\pc9__amtieaq3izvw9r8\\qivib1j8s42ylfp\\ylm2mu-v6e1bfaho\\kpbuv nhoxznil.csv.[neftet@tutanota.com].boom")) returned 1 [0132.120] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\pC9__AmTieaQ3iZVw9R8\\QIviB1J8S42yLfp\\ylM2mu-V6E1bfaho\\TgDrcLYi-\\zXdq.odt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\pc9__amtieaq3izvw9r8\\qivib1j8s42ylfp\\ylm2mu-v6e1bfaho\\tgdrclyi-\\zxdq.odt"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\pC9__AmTieaQ3iZVw9R8\\QIviB1J8S42yLfp\\ylM2mu-V6E1bfaho\\TgDrcLYi-\\zXdq.odt.[neftet@tutanota.com].boom" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\pc9__amtieaq3izvw9r8\\qivib1j8s42ylfp\\ylm2mu-v6e1bfaho\\tgdrclyi-\\zxdq.odt.[neftet@tutanota.com].boom")) returned 1 [0132.131] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Links\\Desktop.lnk" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\links\\desktop.lnk"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Links\\Desktop.lnk.[neftet@tutanota.com].boom" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\links\\desktop.lnk.[neftet@tutanota.com].boom")) returned 1 [0132.134] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Links\\Downloads.lnk" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\links\\downloads.lnk"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Links\\Downloads.lnk.[neftet@tutanota.com].boom" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\links\\downloads.lnk.[neftet@tutanota.com].boom")) returned 1 [0132.139] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Links\\RecentPlaces.lnk" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\links\\recentplaces.lnk"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Links\\RecentPlaces.lnk.[neftet@tutanota.com].boom" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\links\\recentplaces.lnk.[neftet@tutanota.com].boom")) returned 1 [0132.144] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\KAABaMGRIc.wav" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\music\\kaabamgric.wav"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\KAABaMGRIc.wav.[neftet@tutanota.com].boom" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\music\\kaabamgric.wav.[neftet@tutanota.com].boom")) returned 1 [0132.150] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\5QUm8R\\7pnJroq6TA8sDt0s.wav" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\music\\5qum8r\\7pnjroq6ta8sdt0s.wav"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\5QUm8R\\7pnJroq6TA8sDt0s.wav.[neftet@tutanota.com].boom" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\music\\5qum8r\\7pnjroq6ta8sdt0s.wav.[neftet@tutanota.com].boom")) returned 1 [0132.154] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\5QUm8R\\7pnWDtzdw9HyFDwihW.mp3" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\music\\5qum8r\\7pnwdtzdw9hyfdwihw.mp3"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\5QUm8R\\7pnWDtzdw9HyFDwihW.mp3.[neftet@tutanota.com].boom" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\music\\5qum8r\\7pnwdtzdw9hyfdwihw.mp3.[neftet@tutanota.com].boom")) returned 1 [0132.158] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\5QUm8R\\wCfIWq.wav" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\music\\5qum8r\\wcfiwq.wav"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\5QUm8R\\wCfIWq.wav.[neftet@tutanota.com].boom" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\music\\5qum8r\\wcfiwq.wav.[neftet@tutanota.com].boom")) returned 1 [0132.163] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\5QUm8R\\WAwfTxwVF7xfXscX\\E-G1X D.mp3" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\music\\5qum8r\\wawftxwvf7xfxscx\\e-g1x d.mp3"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\5QUm8R\\WAwfTxwVF7xfXscX\\E-G1X D.mp3.[neftet@tutanota.com].boom" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\music\\5qum8r\\wawftxwvf7xfxscx\\e-g1x d.mp3.[neftet@tutanota.com].boom")) returned 1 [0132.167] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\5QUm8R\\WAwfTxwVF7xfXscX\\Gmi8b9JWT.wav" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\music\\5qum8r\\wawftxwvf7xfxscx\\gmi8b9jwt.wav"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\5QUm8R\\WAwfTxwVF7xfXscX\\Gmi8b9JWT.wav.[neftet@tutanota.com].boom" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\music\\5qum8r\\wawftxwvf7xfxscx\\gmi8b9jwt.wav.[neftet@tutanota.com].boom")) returned 1 [0132.171] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\5QUm8R\\WAwfTxwVF7xfXscX\\IwC0hLT.mp3" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\music\\5qum8r\\wawftxwvf7xfxscx\\iwc0hlt.mp3"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\5QUm8R\\WAwfTxwVF7xfXscX\\IwC0hLT.mp3.[neftet@tutanota.com].boom" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\music\\5qum8r\\wawftxwvf7xfxscx\\iwc0hlt.mp3.[neftet@tutanota.com].boom")) returned 1 [0132.178] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\5QUm8R\\WAwfTxwVF7xfXscX\\p9JY5Z93.mp3" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\music\\5qum8r\\wawftxwvf7xfxscx\\p9jy5z93.mp3"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\5QUm8R\\WAwfTxwVF7xfXscX\\p9JY5Z93.mp3.[neftet@tutanota.com].boom" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\music\\5qum8r\\wawftxwvf7xfxscx\\p9jy5z93.mp3.[neftet@tutanota.com].boom")) returned 1 [0132.183] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\5QUm8R\\WAwfTxwVF7xfXscX\\UMTlLE37InoqB6DI.mp3" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\music\\5qum8r\\wawftxwvf7xfxscx\\umtlle37inoqb6di.mp3"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\5QUm8R\\WAwfTxwVF7xfXscX\\UMTlLE37InoqB6DI.mp3.[neftet@tutanota.com].boom" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\music\\5qum8r\\wawftxwvf7xfxscx\\umtlle37inoqb6di.mp3.[neftet@tutanota.com].boom")) returned 1 [0132.189] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\5QUm8R\\ypQAwj_1Xn8LoFy0UjN\\aVE0z.wav" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\music\\5qum8r\\ypqawj_1xn8lofy0ujn\\ave0z.wav"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\5QUm8R\\ypQAwj_1Xn8LoFy0UjN\\aVE0z.wav.[neftet@tutanota.com].boom" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\music\\5qum8r\\ypqawj_1xn8lofy0ujn\\ave0z.wav.[neftet@tutanota.com].boom")) returned 1 [0132.195] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\5QUm8R\\ypQAwj_1Xn8LoFy0UjN\\DbBPhnI2aFBZMIH.wav" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\music\\5qum8r\\ypqawj_1xn8lofy0ujn\\dbbphni2afbzmih.wav"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\5QUm8R\\ypQAwj_1Xn8LoFy0UjN\\DbBPhnI2aFBZMIH.wav.[neftet@tutanota.com].boom" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\music\\5qum8r\\ypqawj_1xn8lofy0ujn\\dbbphni2afbzmih.wav.[neftet@tutanota.com].boom")) returned 1 [0132.201] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\5QUm8R\\ypQAwj_1Xn8LoFy0UjN\\sYwQHdC.mp3" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\music\\5qum8r\\ypqawj_1xn8lofy0ujn\\sywqhdc.mp3"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\5QUm8R\\ypQAwj_1Xn8LoFy0UjN\\sYwQHdC.mp3.[neftet@tutanota.com].boom" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\music\\5qum8r\\ypqawj_1xn8lofy0ujn\\sywqhdc.mp3.[neftet@tutanota.com].boom")) returned 1 [0132.206] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\5QUm8R\\ypQAwj_1Xn8LoFy0UjN\\W_f1m7J4h3C3NsPy_e.mp3" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\music\\5qum8r\\ypqawj_1xn8lofy0ujn\\w_f1m7j4h3c3nspy_e.mp3"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\5QUm8R\\ypQAwj_1Xn8LoFy0UjN\\W_f1m7J4h3C3NsPy_e.mp3.[neftet@tutanota.com].boom" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\music\\5qum8r\\ypqawj_1xn8lofy0ujn\\w_f1m7j4h3c3nspy_e.mp3.[neftet@tutanota.com].boom")) returned 1 [0132.209] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\5QUm8R\\ypQAwj_1Xn8LoFy0UjN\\zYNpE5.wav" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\music\\5qum8r\\ypqawj_1xn8lofy0ujn\\zynpe5.wav"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\5QUm8R\\ypQAwj_1Xn8LoFy0UjN\\zYNpE5.wav.[neftet@tutanota.com].boom" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\music\\5qum8r\\ypqawj_1xn8lofy0ujn\\zynpe5.wav.[neftet@tutanota.com].boom")) returned 1 [0132.218] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\5QUm8R\\ypQAwj_1Xn8LoFy0UjN\\405ySziuaxMlV m5JO\\88Ps5GB6IumfGDhwdL-8.mp3" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\music\\5qum8r\\ypqawj_1xn8lofy0ujn\\405ysziuaxmlv m5jo\\88ps5gb6iumfgdhwdl-8.mp3"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\5QUm8R\\ypQAwj_1Xn8LoFy0UjN\\405ySziuaxMlV m5JO\\88Ps5GB6IumfGDhwdL-8.mp3.[neftet@tutanota.com].boom" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\music\\5qum8r\\ypqawj_1xn8lofy0ujn\\405ysziuaxmlv m5jo\\88ps5gb6iumfgdhwdl-8.mp3.[neftet@tutanota.com].boom")) returned 1 [0132.224] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\5QUm8R\\ypQAwj_1Xn8LoFy0UjN\\405ySziuaxMlV m5JO\\Ey4qjyzwE0gytixDsd.mp3" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\music\\5qum8r\\ypqawj_1xn8lofy0ujn\\405ysziuaxmlv m5jo\\ey4qjyzwe0gytixdsd.mp3"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\5QUm8R\\ypQAwj_1Xn8LoFy0UjN\\405ySziuaxMlV m5JO\\Ey4qjyzwE0gytixDsd.mp3.[neftet@tutanota.com].boom" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\music\\5qum8r\\ypqawj_1xn8lofy0ujn\\405ysziuaxmlv m5jo\\ey4qjyzwe0gytixdsd.mp3.[neftet@tutanota.com].boom")) returned 1 [0132.230] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\5QUm8R\\ypQAwj_1Xn8LoFy0UjN\\405ySziuaxMlV m5JO\\LqiFq2NdlL8e-JIAznFc.mp3" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\music\\5qum8r\\ypqawj_1xn8lofy0ujn\\405ysziuaxmlv m5jo\\lqifq2ndll8e-jiaznfc.mp3"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\5QUm8R\\ypQAwj_1Xn8LoFy0UjN\\405ySziuaxMlV m5JO\\LqiFq2NdlL8e-JIAznFc.mp3.[neftet@tutanota.com].boom" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\music\\5qum8r\\ypqawj_1xn8lofy0ujn\\405ysziuaxmlv m5jo\\lqifq2ndll8e-jiaznfc.mp3.[neftet@tutanota.com].boom")) returned 1 [0132.235] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\5QUm8R\\ypQAwj_1Xn8LoFy0UjN\\405ySziuaxMlV m5JO\\P7xPMlJYc.wav" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\music\\5qum8r\\ypqawj_1xn8lofy0ujn\\405ysziuaxmlv m5jo\\p7xpmljyc.wav"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\5QUm8R\\ypQAwj_1Xn8LoFy0UjN\\405ySziuaxMlV m5JO\\P7xPMlJYc.wav.[neftet@tutanota.com].boom" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\music\\5qum8r\\ypqawj_1xn8lofy0ujn\\405ysziuaxmlv m5jo\\p7xpmljyc.wav.[neftet@tutanota.com].boom")) returned 1 [0132.239] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\MSpnEVxlBuedaCUP1\\HgxX\\xFKVV Nfb3iN4.mp3" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\music\\mspnevxlbuedacup1\\hgxx\\xfkvv nfb3in4.mp3"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\MSpnEVxlBuedaCUP1\\HgxX\\xFKVV Nfb3iN4.mp3.[neftet@tutanota.com].boom" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\music\\mspnevxlbuedacup1\\hgxx\\xfkvv nfb3in4.mp3.[neftet@tutanota.com].boom")) returned 1 [0132.455] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\MSpnEVxlBuedaCUP1\\qAXggmD1LKlgDc4Js\\NO5a_3qtgF.mp3" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\music\\mspnevxlbuedacup1\\qaxggmd1lklgdc4js\\no5a_3qtgf.mp3"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\MSpnEVxlBuedaCUP1\\qAXggmD1LKlgDc4Js\\NO5a_3qtgF.mp3.[neftet@tutanota.com].boom" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\music\\mspnevxlbuedacup1\\qaxggmd1lklgdc4js\\no5a_3qtgf.mp3.[neftet@tutanota.com].boom")) returned 1 [0132.461] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\MSpnEVxlBuedaCUP1\\qAXggmD1LKlgDc4Js\\wDR9noxj8BATjUKZ.wav" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\music\\mspnevxlbuedacup1\\qaxggmd1lklgdc4js\\wdr9noxj8batjukz.wav"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\MSpnEVxlBuedaCUP1\\qAXggmD1LKlgDc4Js\\wDR9noxj8BATjUKZ.wav.[neftet@tutanota.com].boom" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\music\\mspnevxlbuedacup1\\qaxggmd1lklgdc4js\\wdr9noxj8batjukz.wav.[neftet@tutanota.com].boom")) returned 1 [0132.469] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\MSpnEVxlBuedaCUP1\\qqLhydztItrIGc3q_E\\8VbKTOf.wav" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\music\\mspnevxlbuedacup1\\qqlhydztitrigc3q_e\\8vbktof.wav"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\MSpnEVxlBuedaCUP1\\qqLhydztItrIGc3q_E\\8VbKTOf.wav.[neftet@tutanota.com].boom" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\music\\mspnevxlbuedacup1\\qqlhydztitrigc3q_e\\8vbktof.wav.[neftet@tutanota.com].boom")) returned 1 [0132.491] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\MSpnEVxlBuedaCUP1\\qqLhydztItrIGc3q_E\\hEJbXZluidY8yrqM.mp3" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\music\\mspnevxlbuedacup1\\qqlhydztitrigc3q_e\\hejbxzluidy8yrqm.mp3"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\MSpnEVxlBuedaCUP1\\qqLhydztItrIGc3q_E\\hEJbXZluidY8yrqM.mp3.[neftet@tutanota.com].boom" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\music\\mspnevxlbuedacup1\\qqlhydztitrigc3q_e\\hejbxzluidy8yrqm.mp3.[neftet@tutanota.com].boom")) returned 1 [0132.501] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\MSpnEVxlBuedaCUP1\\qqLhydztItrIGc3q_E\\X7wFZ9Z_DnDH_onTLsq.mp3" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\music\\mspnevxlbuedacup1\\qqlhydztitrigc3q_e\\x7wfz9z_dndh_ontlsq.mp3"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\MSpnEVxlBuedaCUP1\\qqLhydztItrIGc3q_E\\X7wFZ9Z_DnDH_onTLsq.mp3.[neftet@tutanota.com].boom" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\music\\mspnevxlbuedacup1\\qqlhydztitrigc3q_e\\x7wfz9z_dndh_ontlsq.mp3.[neftet@tutanota.com].boom")) returned 1 [0132.506] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\VPUJVJbaoT0AA1L\\BN0t.mp3" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\music\\vpujvjbaot0aa1l\\bn0t.mp3"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\VPUJVJbaoT0AA1L\\BN0t.mp3.[neftet@tutanota.com].boom" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\music\\vpujvjbaot0aa1l\\bn0t.mp3.[neftet@tutanota.com].boom")) returned 1 [0132.514] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\VPUJVJbaoT0AA1L\\Yhgp87w8M7AIinfzM.wav" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\music\\vpujvjbaot0aa1l\\yhgp87w8m7aiinfzm.wav"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\VPUJVJbaoT0AA1L\\Yhgp87w8M7AIinfzM.wav.[neftet@tutanota.com].boom" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\music\\vpujvjbaot0aa1l\\yhgp87w8m7aiinfzm.wav.[neftet@tutanota.com].boom")) returned 1 [0132.529] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\2iM6el404FPP9.jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\pictures\\2im6el404fpp9.jpg"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\2iM6el404FPP9.jpg.[neftet@tutanota.com].boom" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\pictures\\2im6el404fpp9.jpg.[neftet@tutanota.com].boom")) returned 1 [0132.534] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\3Sx06XnyBNN.jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\pictures\\3sx06xnybnn.jpg"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\3Sx06XnyBNN.jpg.[neftet@tutanota.com].boom" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\pictures\\3sx06xnybnn.jpg.[neftet@tutanota.com].boom")) returned 1 [0132.539] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\8y 4TOn5NPzM-8ECXs7.bmp" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\pictures\\8y 4ton5npzm-8ecxs7.bmp"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\8y 4TOn5NPzM-8ECXs7.bmp.[neftet@tutanota.com].boom" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\pictures\\8y 4ton5npzm-8ecxs7.bmp.[neftet@tutanota.com].boom")) returned 1 [0132.542] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\qXc5CfQ1VI 7A-Et3.jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\pictures\\qxc5cfq1vi 7a-et3.jpg"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\qXc5CfQ1VI 7A-Et3.jpg.[neftet@tutanota.com].boom" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\pictures\\qxc5cfq1vi 7a-et3.jpg.[neftet@tutanota.com].boom")) returned 1 [0132.546] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\wSTY9VZBSCTH9J0CtOr.png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\pictures\\wsty9vzbscth9j0ctor.png"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\wSTY9VZBSCTH9J0CtOr.png.[neftet@tutanota.com].boom" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\pictures\\wsty9vzbscth9j0ctor.png.[neftet@tutanota.com].boom")) returned 1 [0132.551] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\tZ02_j2HoUAEzAXcbrvF\\Ab6fh6TA.bmp" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\pictures\\tz02_j2houaezaxcbrvf\\ab6fh6ta.bmp"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\tZ02_j2HoUAEzAXcbrvF\\Ab6fh6TA.bmp.[neftet@tutanota.com].boom" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\pictures\\tz02_j2houaezaxcbrvf\\ab6fh6ta.bmp.[neftet@tutanota.com].boom")) returned 1 [0132.558] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\tZ02_j2HoUAEzAXcbrvF\\EfftTM9vyjFXlwqKsjF.bmp" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\pictures\\tz02_j2houaezaxcbrvf\\effttm9vyjfxlwqksjf.bmp"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\tZ02_j2HoUAEzAXcbrvF\\EfftTM9vyjFXlwqKsjF.bmp.[neftet@tutanota.com].boom" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\pictures\\tz02_j2houaezaxcbrvf\\effttm9vyjfxlwqksjf.bmp.[neftet@tutanota.com].boom")) returned 1 [0132.563] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\tZ02_j2HoUAEzAXcbrvF\\rQ40SPQ.bmp" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\pictures\\tz02_j2houaezaxcbrvf\\rq40spq.bmp"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\tZ02_j2HoUAEzAXcbrvF\\rQ40SPQ.bmp.[neftet@tutanota.com].boom" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\pictures\\tz02_j2houaezaxcbrvf\\rq40spq.bmp.[neftet@tutanota.com].boom")) returned 1 [0132.568] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\tZ02_j2HoUAEzAXcbrvF\\Uvon-ej5Wh.png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\pictures\\tz02_j2houaezaxcbrvf\\uvon-ej5wh.png"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\tZ02_j2HoUAEzAXcbrvF\\Uvon-ej5Wh.png.[neftet@tutanota.com].boom" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\pictures\\tz02_j2houaezaxcbrvf\\uvon-ej5wh.png.[neftet@tutanota.com].boom")) returned 1 [0132.582] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\tZ02_j2HoUAEzAXcbrvF\\VQlz_RRY6WR.png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\pictures\\tz02_j2houaezaxcbrvf\\vqlz_rry6wr.png"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\tZ02_j2HoUAEzAXcbrvF\\VQlz_RRY6WR.png.[neftet@tutanota.com].boom" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\pictures\\tz02_j2houaezaxcbrvf\\vqlz_rry6wr.png.[neftet@tutanota.com].boom")) returned 1 [0132.586] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\tZ02_j2HoUAEzAXcbrvF\\MqHlcYZXc1ykd8m-7zLx\\-C9Sja0mJwrJKSu90.jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\pictures\\tz02_j2houaezaxcbrvf\\mqhlcyzxc1ykd8m-7zlx\\-c9sja0mjwrjksu90.jpg"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\tZ02_j2HoUAEzAXcbrvF\\MqHlcYZXc1ykd8m-7zLx\\-C9Sja0mJwrJKSu90.jpg.[neftet@tutanota.com].boom" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\pictures\\tz02_j2houaezaxcbrvf\\mqhlcyzxc1ykd8m-7zlx\\-c9sja0mjwrjksu90.jpg.[neftet@tutanota.com].boom")) returned 1 [0132.594] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\tZ02_j2HoUAEzAXcbrvF\\MqHlcYZXc1ykd8m-7zLx\\6rxb4QwV9CI1MR.jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\pictures\\tz02_j2houaezaxcbrvf\\mqhlcyzxc1ykd8m-7zlx\\6rxb4qwv9ci1mr.jpg"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\tZ02_j2HoUAEzAXcbrvF\\MqHlcYZXc1ykd8m-7zLx\\6rxb4QwV9CI1MR.jpg.[neftet@tutanota.com].boom" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\pictures\\tz02_j2houaezaxcbrvf\\mqhlcyzxc1ykd8m-7zlx\\6rxb4qwv9ci1mr.jpg.[neftet@tutanota.com].boom")) returned 1 [0132.602] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\tZ02_j2HoUAEzAXcbrvF\\MqHlcYZXc1ykd8m-7zLx\\awnCnvVOwwTZEf.png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\pictures\\tz02_j2houaezaxcbrvf\\mqhlcyzxc1ykd8m-7zlx\\awncnvvowwtzef.png"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\tZ02_j2HoUAEzAXcbrvF\\MqHlcYZXc1ykd8m-7zLx\\awnCnvVOwwTZEf.png.[neftet@tutanota.com].boom" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\pictures\\tz02_j2houaezaxcbrvf\\mqhlcyzxc1ykd8m-7zlx\\awncnvvowwtzef.png.[neftet@tutanota.com].boom")) returned 1 [0132.608] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\tZ02_j2HoUAEzAXcbrvF\\MqHlcYZXc1ykd8m-7zLx\\dF-VG_t_vGxzSuUsEnW3.jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\pictures\\tz02_j2houaezaxcbrvf\\mqhlcyzxc1ykd8m-7zlx\\df-vg_t_vgxzsuusenw3.jpg"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\tZ02_j2HoUAEzAXcbrvF\\MqHlcYZXc1ykd8m-7zLx\\dF-VG_t_vGxzSuUsEnW3.jpg.[neftet@tutanota.com].boom" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\pictures\\tz02_j2houaezaxcbrvf\\mqhlcyzxc1ykd8m-7zlx\\df-vg_t_vgxzsuusenw3.jpg.[neftet@tutanota.com].boom")) returned 1 [0132.612] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\tZ02_j2HoUAEzAXcbrvF\\MqHlcYZXc1ykd8m-7zLx\\egNz9w_.jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\pictures\\tz02_j2houaezaxcbrvf\\mqhlcyzxc1ykd8m-7zlx\\egnz9w_.jpg"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\tZ02_j2HoUAEzAXcbrvF\\MqHlcYZXc1ykd8m-7zLx\\egNz9w_.jpg.[neftet@tutanota.com].boom" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\pictures\\tz02_j2houaezaxcbrvf\\mqhlcyzxc1ykd8m-7zlx\\egnz9w_.jpg.[neftet@tutanota.com].boom")) returned 1 [0132.623] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\tZ02_j2HoUAEzAXcbrvF\\MqHlcYZXc1ykd8m-7zLx\\jQ4M83F3MGD67ytT.png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\pictures\\tz02_j2houaezaxcbrvf\\mqhlcyzxc1ykd8m-7zlx\\jq4m83f3mgd67ytt.png"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\tZ02_j2HoUAEzAXcbrvF\\MqHlcYZXc1ykd8m-7zLx\\jQ4M83F3MGD67ytT.png.[neftet@tutanota.com].boom" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\pictures\\tz02_j2houaezaxcbrvf\\mqhlcyzxc1ykd8m-7zlx\\jq4m83f3mgd67ytt.png.[neftet@tutanota.com].boom")) returned 1 [0132.633] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\tZ02_j2HoUAEzAXcbrvF\\MqHlcYZXc1ykd8m-7zLx\\So0XvzJy8QKL.bmp" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\pictures\\tz02_j2houaezaxcbrvf\\mqhlcyzxc1ykd8m-7zlx\\so0xvzjy8qkl.bmp"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\tZ02_j2HoUAEzAXcbrvF\\MqHlcYZXc1ykd8m-7zLx\\So0XvzJy8QKL.bmp.[neftet@tutanota.com].boom" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\pictures\\tz02_j2houaezaxcbrvf\\mqhlcyzxc1ykd8m-7zlx\\so0xvzjy8qkl.bmp.[neftet@tutanota.com].boom")) returned 1 [0132.639] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\tZ02_j2HoUAEzAXcbrvF\\MqHlcYZXc1ykd8m-7zLx\\T9 LZd.png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\pictures\\tz02_j2houaezaxcbrvf\\mqhlcyzxc1ykd8m-7zlx\\t9 lzd.png"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\tZ02_j2HoUAEzAXcbrvF\\MqHlcYZXc1ykd8m-7zLx\\T9 LZd.png.[neftet@tutanota.com].boom" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\pictures\\tz02_j2houaezaxcbrvf\\mqhlcyzxc1ykd8m-7zlx\\t9 lzd.png.[neftet@tutanota.com].boom")) returned 1 [0132.643] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\tZ02_j2HoUAEzAXcbrvF\\MqHlcYZXc1ykd8m-7zLx\\wmGhH6LXjHSc.bmp" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\pictures\\tz02_j2houaezaxcbrvf\\mqhlcyzxc1ykd8m-7zlx\\wmghh6lxjhsc.bmp"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\tZ02_j2HoUAEzAXcbrvF\\MqHlcYZXc1ykd8m-7zLx\\wmGhH6LXjHSc.bmp.[neftet@tutanota.com].boom" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\pictures\\tz02_j2houaezaxcbrvf\\mqhlcyzxc1ykd8m-7zlx\\wmghh6lxjhsc.bmp.[neftet@tutanota.com].boom")) returned 1 [0132.646] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\tZ02_j2HoUAEzAXcbrvF\\MqHlcYZXc1ykd8m-7zLx\\WUwVH33W.png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\pictures\\tz02_j2houaezaxcbrvf\\mqhlcyzxc1ykd8m-7zlx\\wuwvh33w.png"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\tZ02_j2HoUAEzAXcbrvF\\MqHlcYZXc1ykd8m-7zLx\\WUwVH33W.png.[neftet@tutanota.com].boom" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\pictures\\tz02_j2houaezaxcbrvf\\mqhlcyzxc1ykd8m-7zlx\\wuwvh33w.png.[neftet@tutanota.com].boom")) returned 1 [0132.651] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\tZ02_j2HoUAEzAXcbrvF\\MqHlcYZXc1ykd8m-7zLx\\fs6ZyJDVW7MWb\\-5 rgXAKNVWpqoUUHt.bmp" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\pictures\\tz02_j2houaezaxcbrvf\\mqhlcyzxc1ykd8m-7zlx\\fs6zyjdvw7mwb\\-5 rgxaknvwpqouuht.bmp"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\tZ02_j2HoUAEzAXcbrvF\\MqHlcYZXc1ykd8m-7zLx\\fs6ZyJDVW7MWb\\-5 rgXAKNVWpqoUUHt.bmp.[neftet@tutanota.com].boom" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\pictures\\tz02_j2houaezaxcbrvf\\mqhlcyzxc1ykd8m-7zlx\\fs6zyjdvw7mwb\\-5 rgxaknvwpqouuht.bmp.[neftet@tutanota.com].boom")) returned 1 [0132.654] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\tZ02_j2HoUAEzAXcbrvF\\MqHlcYZXc1ykd8m-7zLx\\fs6ZyJDVW7MWb\\0QpBHVtt5vUmfNi.jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\pictures\\tz02_j2houaezaxcbrvf\\mqhlcyzxc1ykd8m-7zlx\\fs6zyjdvw7mwb\\0qpbhvtt5vumfni.jpg"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\tZ02_j2HoUAEzAXcbrvF\\MqHlcYZXc1ykd8m-7zLx\\fs6ZyJDVW7MWb\\0QpBHVtt5vUmfNi.jpg.[neftet@tutanota.com].boom" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\pictures\\tz02_j2houaezaxcbrvf\\mqhlcyzxc1ykd8m-7zlx\\fs6zyjdvw7mwb\\0qpbhvtt5vumfni.jpg.[neftet@tutanota.com].boom")) returned 1 [0132.662] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\tZ02_j2HoUAEzAXcbrvF\\MqHlcYZXc1ykd8m-7zLx\\fs6ZyJDVW7MWb\\EYB4.bmp" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\pictures\\tz02_j2houaezaxcbrvf\\mqhlcyzxc1ykd8m-7zlx\\fs6zyjdvw7mwb\\eyb4.bmp"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\tZ02_j2HoUAEzAXcbrvF\\MqHlcYZXc1ykd8m-7zLx\\fs6ZyJDVW7MWb\\EYB4.bmp.[neftet@tutanota.com].boom" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\pictures\\tz02_j2houaezaxcbrvf\\mqhlcyzxc1ykd8m-7zlx\\fs6zyjdvw7mwb\\eyb4.bmp.[neftet@tutanota.com].boom")) returned 1 [0132.676] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\tZ02_j2HoUAEzAXcbrvF\\MqHlcYZXc1ykd8m-7zLx\\fs6ZyJDVW7MWb\\Oxgbwq.jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\pictures\\tz02_j2houaezaxcbrvf\\mqhlcyzxc1ykd8m-7zlx\\fs6zyjdvw7mwb\\oxgbwq.jpg"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\tZ02_j2HoUAEzAXcbrvF\\MqHlcYZXc1ykd8m-7zLx\\fs6ZyJDVW7MWb\\Oxgbwq.jpg.[neftet@tutanota.com].boom" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\pictures\\tz02_j2houaezaxcbrvf\\mqhlcyzxc1ykd8m-7zlx\\fs6zyjdvw7mwb\\oxgbwq.jpg.[neftet@tutanota.com].boom")) returned 1 [0132.681] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\tZ02_j2HoUAEzAXcbrvF\\MqHlcYZXc1ykd8m-7zLx\\fs6ZyJDVW7MWb\\wEMrbUbF-Mv87fszk-.bmp" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\pictures\\tz02_j2houaezaxcbrvf\\mqhlcyzxc1ykd8m-7zlx\\fs6zyjdvw7mwb\\wemrbubf-mv87fszk-.bmp"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\tZ02_j2HoUAEzAXcbrvF\\MqHlcYZXc1ykd8m-7zLx\\fs6ZyJDVW7MWb\\wEMrbUbF-Mv87fszk-.bmp.[neftet@tutanota.com].boom" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\pictures\\tz02_j2houaezaxcbrvf\\mqhlcyzxc1ykd8m-7zlx\\fs6zyjdvw7mwb\\wemrbubf-mv87fszk-.bmp.[neftet@tutanota.com].boom")) returned 1 [0132.694] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\56VC_W.mkv" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\videos\\56vc_w.mkv"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\56VC_W.mkv.[neftet@tutanota.com].boom" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\videos\\56vc_w.mkv.[neftet@tutanota.com].boom")) returned 1 [0132.699] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\KWFBnXM-ANv oaw_q191.mp4" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\videos\\kwfbnxm-anv oaw_q191.mp4"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\KWFBnXM-ANv oaw_q191.mp4.[neftet@tutanota.com].boom" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\videos\\kwfbnxm-anv oaw_q191.mp4.[neftet@tutanota.com].boom")) returned 1 [0132.708] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\LQtj-lRCWNvjz.avi" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\videos\\lqtj-lrcwnvjz.avi"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\LQtj-lRCWNvjz.avi.[neftet@tutanota.com].boom" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\videos\\lqtj-lrcwnvjz.avi.[neftet@tutanota.com].boom")) returned 1 [0132.725] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\oEOIae9ppu.avi" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\videos\\oeoiae9ppu.avi"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\oEOIae9ppu.avi.[neftet@tutanota.com].boom" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\videos\\oeoiae9ppu.avi.[neftet@tutanota.com].boom")) returned 1 [0132.734] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\3fmT5WPHA39l3f9\\WelTZuyMFRD.mp4" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\videos\\3fmt5wpha39l3f9\\weltzuymfrd.mp4"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\3fmT5WPHA39l3f9\\WelTZuyMFRD.mp4.[neftet@tutanota.com].boom" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\videos\\3fmt5wpha39l3f9\\weltzuymfrd.mp4.[neftet@tutanota.com].boom")) returned 1 [0132.742] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\8mSM9XyQ3XQ6\\E5D-hegZXII.mp4" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\videos\\8msm9xyq3xq6\\e5d-hegzxii.mp4"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\8mSM9XyQ3XQ6\\E5D-hegZXII.mp4.[neftet@tutanota.com].boom" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\videos\\8msm9xyq3xq6\\e5d-hegzxii.mp4.[neftet@tutanota.com].boom")) returned 1 [0132.747] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\8mSM9XyQ3XQ6\\PVyCWCHH.mkv" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\videos\\8msm9xyq3xq6\\pvycwchh.mkv"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\8mSM9XyQ3XQ6\\PVyCWCHH.mkv.[neftet@tutanota.com].boom" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\videos\\8msm9xyq3xq6\\pvycwchh.mkv.[neftet@tutanota.com].boom")) returned 1 [0132.752] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\8mSM9XyQ3XQ6\\UI0YnTvRe3FtpToWZZU.mkv" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\videos\\8msm9xyq3xq6\\ui0yntvre3ftptowzzu.mkv"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\8mSM9XyQ3XQ6\\UI0YnTvRe3FtpToWZZU.mkv.[neftet@tutanota.com].boom" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\videos\\8msm9xyq3xq6\\ui0yntvre3ftptowzzu.mkv.[neftet@tutanota.com].boom")) returned 1 [0132.763] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\MRfMb1EbDbFqINXp-b\\M5Akdkq9KjqxEu1WGM.avi" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\videos\\mrfmb1ebdbfqinxp-b\\m5akdkq9kjqxeu1wgm.avi"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\MRfMb1EbDbFqINXp-b\\M5Akdkq9KjqxEu1WGM.avi.[neftet@tutanota.com].boom" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\videos\\mrfmb1ebdbfqinxp-b\\m5akdkq9kjqxeu1wgm.avi.[neftet@tutanota.com].boom")) returned 1 [0132.773] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\MRfMb1EbDbFqINXp-b\\eStdF\\I_6vs OEkcms 9.avi" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\videos\\mrfmb1ebdbfqinxp-b\\estdf\\i_6vs oekcms 9.avi"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\MRfMb1EbDbFqINXp-b\\eStdF\\I_6vs OEkcms 9.avi.[neftet@tutanota.com].boom" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\videos\\mrfmb1ebdbfqinxp-b\\estdf\\i_6vs oekcms 9.avi.[neftet@tutanota.com].boom")) returned 1 [0132.778] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\MRfMb1EbDbFqINXp-b\\eStdF\\oqnnsV1y3L.avi" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\videos\\mrfmb1ebdbfqinxp-b\\estdf\\oqnnsv1y3l.avi"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\MRfMb1EbDbFqINXp-b\\eStdF\\oqnnsV1y3L.avi.[neftet@tutanota.com].boom" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\videos\\mrfmb1ebdbfqinxp-b\\estdf\\oqnnsv1y3l.avi.[neftet@tutanota.com].boom")) returned 1 [0132.788] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\MRfMb1EbDbFqINXp-b\\eStdF\\Yq_52sjx1uoh.mp4" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\videos\\mrfmb1ebdbfqinxp-b\\estdf\\yq_52sjx1uoh.mp4"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\MRfMb1EbDbFqINXp-b\\eStdF\\Yq_52sjx1uoh.mp4.[neftet@tutanota.com].boom" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\videos\\mrfmb1ebdbfqinxp-b\\estdf\\yq_52sjx1uoh.mp4.[neftet@tutanota.com].boom")) returned 1 [0132.797] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\vzk6K51PQW9jyiRf\\avs0VLVQy.mkv" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\videos\\vzk6k51pqw9jyirf\\avs0vlvqy.mkv"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\vzk6K51PQW9jyiRf\\avs0VLVQy.mkv.[neftet@tutanota.com].boom" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\videos\\vzk6k51pqw9jyirf\\avs0vlvqy.mkv.[neftet@tutanota.com].boom")) returned 1 [0132.801] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\vzk6K51PQW9jyiRf\\R9y47OQ.mkv" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\videos\\vzk6k51pqw9jyirf\\r9y47oq.mkv"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\vzk6K51PQW9jyiRf\\R9y47OQ.mkv.[neftet@tutanota.com].boom" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\videos\\vzk6k51pqw9jyirf\\r9y47oq.mkv.[neftet@tutanota.com].boom")) returned 1 [0132.815] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\vzk6K51PQW9jyiRf\\RQIFP0AFaRZryGtQ.mkv" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\videos\\vzk6k51pqw9jyirf\\rqifp0afarzrygtq.mkv"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\vzk6K51PQW9jyiRf\\RQIFP0AFaRZryGtQ.mkv.[neftet@tutanota.com].boom" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\videos\\vzk6k51pqw9jyirf\\rqifp0afarzrygtq.mkv.[neftet@tutanota.com].boom")) returned 1 [0132.820] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\vzk6K51PQW9jyiRf\\ZbKUnKkgcHGbWFlacj.mkv" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\videos\\vzk6k51pqw9jyirf\\zbkunkkgchgbwflacj.mkv"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\vzk6K51PQW9jyiRf\\ZbKUnKkgcHGbWFlacj.mkv.[neftet@tutanota.com].boom" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\videos\\vzk6k51pqw9jyirf\\zbkunkkgchgbwflacj.mkv.[neftet@tutanota.com].boom")) returned 1 [0132.832] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\vzk6K51PQW9jyiRf\\ZnIuVbheGUKnztXYh7.avi" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\videos\\vzk6k51pqw9jyirf\\zniuvbheguknztxyh7.avi"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\vzk6K51PQW9jyiRf\\ZnIuVbheGUKnztXYh7.avi.[neftet@tutanota.com].boom" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\videos\\vzk6k51pqw9jyirf\\zniuvbheguknztxyh7.avi.[neftet@tutanota.com].boom")) returned 1 [0133.010] GetLongPathNameW (in: lpszShortPath="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Feeds\\Microsoft Feeds~", lpszLongPath=0x31e148, cchBuffer=0x104 | out: lpszLongPath="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Feeds\\Microsoft Feeds~") returned 0x3f [0133.010] GetLongPathNameW (in: lpszShortPath="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Feeds\\Microsoft Feeds~", lpszLongPath=0x31e148, cchBuffer=0x104 | out: lpszLongPath="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Feeds\\Microsoft Feeds~") returned 0x3f [0133.011] GetLongPathNameW (in: lpszShortPath="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Feeds\\Microsoft Feeds~\\", lpszLongPath=0x31e128, cchBuffer=0x104 | out: lpszLongPath="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Feeds\\Microsoft Feeds~\\") returned 0x40 [0133.011] GetLongPathNameW (in: lpszShortPath="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Feeds\\Microsoft Feeds~\\", lpszLongPath=0x31e11c, cchBuffer=0x104 | out: lpszLongPath="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Feeds\\Microsoft Feeds~\\") returned 0x40 [0133.012] GetLongPathNameW (in: lpszShortPath="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Feeds\\Microsoft Feeds~\\", lpszLongPath=0x31e11c, cchBuffer=0x104 | out: lpszLongPath="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Feeds\\Microsoft Feeds~\\") returned 0x40 [0133.014] GetLongPathNameW (in: lpszShortPath="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Feeds\\Microsoft Feeds~", lpszLongPath=0x31e148, cchBuffer=0x104 | out: lpszLongPath="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Feeds\\Microsoft Feeds~") returned 0x3f [0133.015] GetLongPathNameW (in: lpszShortPath="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Feeds\\Microsoft Feeds~", lpszLongPath=0x31e148, cchBuffer=0x104 | out: lpszLongPath="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Feeds\\Microsoft Feeds~") returned 0x3f [0133.015] GetLongPathNameW (in: lpszShortPath="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Feeds\\Microsoft Feeds~\\", lpszLongPath=0x31e128, cchBuffer=0x104 | out: lpszLongPath="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Feeds\\Microsoft Feeds~\\") returned 0x40 [0133.016] GetLongPathNameW (in: lpszShortPath="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Feeds\\Microsoft Feeds~\\", lpszLongPath=0x31e11c, cchBuffer=0x104 | out: lpszLongPath="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Feeds\\Microsoft Feeds~\\") returned 0x40 [0133.016] GetLongPathNameW (in: lpszShortPath="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Feeds\\Microsoft Feeds~\\", lpszLongPath=0x31e11c, cchBuffer=0x104 | out: lpszLongPath="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Feeds\\Microsoft Feeds~\\") returned 0x40 [0133.019] GetLongPathNameW (in: lpszShortPath="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Feeds\\{5588ACFD-6436-411B-A5CE-666AE6A92D3D}~", lpszLongPath=0x31e148, cchBuffer=0x104 | out: lpszLongPath="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Feeds\\{5588ACFD-6436-411B-A5CE-666AE6A92D3D}~") returned 0x56 [0133.020] GetLongPathNameW (in: lpszShortPath="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Feeds\\{5588ACFD-6436-411B-A5CE-666AE6A92D3D}~", lpszLongPath=0x31e148, cchBuffer=0x104 | out: lpszLongPath="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Feeds\\{5588ACFD-6436-411B-A5CE-666AE6A92D3D}~") returned 0x56 [0133.020] GetLongPathNameW (in: lpszShortPath="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Feeds\\{5588ACFD-6436-411B-A5CE-666AE6A92D3D}~\\", lpszLongPath=0x31e128, cchBuffer=0x104 | out: lpszLongPath="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Feeds\\{5588ACFD-6436-411B-A5CE-666AE6A92D3D}~\\") returned 0x57 [0133.021] GetLongPathNameW (in: lpszShortPath="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Feeds\\{5588ACFD-6436-411B-A5CE-666AE6A92D3D}~\\", lpszLongPath=0x31e11c, cchBuffer=0x104 | out: lpszLongPath="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Feeds\\{5588ACFD-6436-411B-A5CE-666AE6A92D3D}~\\") returned 0x57 [0133.021] GetLongPathNameW (in: lpszShortPath="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Feeds\\{5588ACFD-6436-411B-A5CE-666AE6A92D3D}~\\", lpszLongPath=0x31e11c, cchBuffer=0x104 | out: lpszLongPath="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Feeds\\{5588ACFD-6436-411B-A5CE-666AE6A92D3D}~\\") returned 0x57 [0133.023] GetLongPathNameW (in: lpszShortPath="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Feeds\\{5588ACFD-6436-411B-A5CE-666AE6A92D3D}~", lpszLongPath=0x31e148, cchBuffer=0x104 | out: lpszLongPath="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Feeds\\{5588ACFD-6436-411B-A5CE-666AE6A92D3D}~") returned 0x56 [0133.024] GetLongPathNameW (in: lpszShortPath="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Feeds\\{5588ACFD-6436-411B-A5CE-666AE6A92D3D}~", lpszLongPath=0x31e148, cchBuffer=0x104 | out: lpszLongPath="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Feeds\\{5588ACFD-6436-411B-A5CE-666AE6A92D3D}~") returned 0x56 [0133.024] GetLongPathNameW (in: lpszShortPath="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Feeds\\{5588ACFD-6436-411B-A5CE-666AE6A92D3D}~\\", lpszLongPath=0x31e128, cchBuffer=0x104 | out: lpszLongPath="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Feeds\\{5588ACFD-6436-411B-A5CE-666AE6A92D3D}~\\") returned 0x57 [0133.025] GetLongPathNameW (in: lpszShortPath="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Feeds\\{5588ACFD-6436-411B-A5CE-666AE6A92D3D}~\\", lpszLongPath=0x31e11c, cchBuffer=0x104 | out: lpszLongPath="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Feeds\\{5588ACFD-6436-411B-A5CE-666AE6A92D3D}~\\") returned 0x57 [0133.025] GetLongPathNameW (in: lpszShortPath="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Feeds\\{5588ACFD-6436-411B-A5CE-666AE6A92D3D}~\\", lpszLongPath=0x31e11c, cchBuffer=0x104 | out: lpszLongPath="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Feeds\\{5588ACFD-6436-411B-A5CE-666AE6A92D3D}~\\") returned 0x57 [0133.027] GetLongPathNameW (in: lpszShortPath="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Feeds\\{5588ACFD-6436-411B-A5CE-666AE6A92D3D}~\\", lpszLongPath=0x31e0d0, cchBuffer=0x104 | out: lpszLongPath="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Feeds\\{5588ACFD-6436-411B-A5CE-666AE6A92D3D}~\\") returned 0x57 [0133.027] GetLongPathNameW (in: lpszShortPath="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Feeds\\{5588ACFD-6436-411B-A5CE-666AE6A92D3D}~\\WebSlices~", lpszLongPath=0x31e0d0, cchBuffer=0x104 | out: lpszLongPath="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Feeds\\{5588ACFD-6436-411B-A5CE-666AE6A92D3D}~\\WebSlices~") returned 0x61 [0133.028] GetLongPathNameW (in: lpszShortPath="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Feeds\\{5588ACFD-6436-411B-A5CE-666AE6A92D3D}~\\WebSlices~", lpszLongPath=0x31e0d0, cchBuffer=0x104 | out: lpszLongPath="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Feeds\\{5588ACFD-6436-411B-A5CE-666AE6A92D3D}~\\WebSlices~") returned 0x61 [0133.028] GetLongPathNameW (in: lpszShortPath="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Feeds\\{5588ACFD-6436-411B-A5CE-666AE6A92D3D}~\\", lpszLongPath=0x31e0b0, cchBuffer=0x104 | out: lpszLongPath="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Feeds\\{5588ACFD-6436-411B-A5CE-666AE6A92D3D}~\\") returned 0x57 [0133.029] GetLongPathNameW (in: lpszShortPath="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Feeds\\{5588ACFD-6436-411B-A5CE-666AE6A92D3D}~\\WebSlices~\\", lpszLongPath=0x31e0b0, cchBuffer=0x104 | out: lpszLongPath="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Feeds\\{5588ACFD-6436-411B-A5CE-666AE6A92D3D}~\\WebSlices~\\") returned 0x62 [0133.029] GetLongPathNameW (in: lpszShortPath="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Feeds\\{5588ACFD-6436-411B-A5CE-666AE6A92D3D}~\\", lpszLongPath=0x31e0a4, cchBuffer=0x104 | out: lpszLongPath="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Feeds\\{5588ACFD-6436-411B-A5CE-666AE6A92D3D}~\\") returned 0x57 [0133.030] GetLongPathNameW (in: lpszShortPath="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Feeds\\{5588ACFD-6436-411B-A5CE-666AE6A92D3D}~\\WebSlices~\\", lpszLongPath=0x31e0a4, cchBuffer=0x104 | out: lpszLongPath="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Feeds\\{5588ACFD-6436-411B-A5CE-666AE6A92D3D}~\\WebSlices~\\") returned 0x62 [0133.030] GetLongPathNameW (in: lpszShortPath="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Feeds\\{5588ACFD-6436-411B-A5CE-666AE6A92D3D}~\\WebSlices~\\", lpszLongPath=0x31e0a4, cchBuffer=0x104 | out: lpszLongPath="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Feeds\\{5588ACFD-6436-411B-A5CE-666AE6A92D3D}~\\WebSlices~\\") returned 0x62 [0133.032] GetLongPathNameW (in: lpszShortPath="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Feeds\\{5588ACFD-6436-411B-A5CE-666AE6A92D3D}~\\", lpszLongPath=0x31e0d0, cchBuffer=0x104 | out: lpszLongPath="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Feeds\\{5588ACFD-6436-411B-A5CE-666AE6A92D3D}~\\") returned 0x57 [0133.032] GetLongPathNameW (in: lpszShortPath="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Feeds\\{5588ACFD-6436-411B-A5CE-666AE6A92D3D}~\\WebSlices~", lpszLongPath=0x31e0d0, cchBuffer=0x104 | out: lpszLongPath="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Feeds\\{5588ACFD-6436-411B-A5CE-666AE6A92D3D}~\\WebSlices~") returned 0x61 [0133.033] GetLongPathNameW (in: lpszShortPath="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Feeds\\{5588ACFD-6436-411B-A5CE-666AE6A92D3D}~\\WebSlices~", lpszLongPath=0x31e0d0, cchBuffer=0x104 | out: lpszLongPath="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Feeds\\{5588ACFD-6436-411B-A5CE-666AE6A92D3D}~\\WebSlices~") returned 0x61 [0133.033] GetLongPathNameW (in: lpszShortPath="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Feeds\\{5588ACFD-6436-411B-A5CE-666AE6A92D3D}~\\", lpszLongPath=0x31e0b0, cchBuffer=0x104 | out: lpszLongPath="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Feeds\\{5588ACFD-6436-411B-A5CE-666AE6A92D3D}~\\") returned 0x57 [0133.034] GetLongPathNameW (in: lpszShortPath="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Feeds\\{5588ACFD-6436-411B-A5CE-666AE6A92D3D}~\\WebSlices~\\", lpszLongPath=0x31e0b0, cchBuffer=0x104 | out: lpszLongPath="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Feeds\\{5588ACFD-6436-411B-A5CE-666AE6A92D3D}~\\WebSlices~\\") returned 0x62 [0133.034] GetLongPathNameW (in: lpszShortPath="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Feeds\\{5588ACFD-6436-411B-A5CE-666AE6A92D3D}~\\", lpszLongPath=0x31e0a4, cchBuffer=0x104 | out: lpszLongPath="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Feeds\\{5588ACFD-6436-411B-A5CE-666AE6A92D3D}~\\") returned 0x57 [0133.035] GetLongPathNameW (in: lpszShortPath="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Feeds\\{5588ACFD-6436-411B-A5CE-666AE6A92D3D}~\\WebSlices~\\", lpszLongPath=0x31e0a4, cchBuffer=0x104 | out: lpszLongPath="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Feeds\\{5588ACFD-6436-411B-A5CE-666AE6A92D3D}~\\WebSlices~\\") returned 0x62 [0133.035] GetLongPathNameW (in: lpszShortPath="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Feeds\\{5588ACFD-6436-411B-A5CE-666AE6A92D3D}~\\WebSlices~\\", lpszLongPath=0x31e0a4, cchBuffer=0x104 | out: lpszLongPath="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Feeds\\{5588ACFD-6436-411B-A5CE-666AE6A92D3D}~\\WebSlices~\\") returned 0x62 [0133.045] MoveFileW (lpExistingFileName="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Internet Explorer\\brndlog.txt" (normalized: "c:\\users\\default\\appdata\\local\\microsoft\\internet explorer\\brndlog.txt"), lpNewFileName="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Internet Explorer\\brndlog.txt.[neftet@tutanota.com].boom" (normalized: "c:\\users\\default\\appdata\\local\\microsoft\\internet explorer\\brndlog.txt.[neftet@tutanota.com].boom")) returned 1 [0133.060] MoveFileW (lpExistingFileName="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Windows Mail\\oeold.xml" (normalized: "c:\\users\\default\\appdata\\local\\microsoft\\windows mail\\oeold.xml"), lpNewFileName="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Windows Mail\\oeold.xml.[neftet@tutanota.com].boom" (normalized: "c:\\users\\default\\appdata\\local\\microsoft\\windows mail\\oeold.xml.[neftet@tutanota.com].boom")) returned 1 [0133.065] MoveFileW (lpExistingFileName="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Windows Mail\\Stationery\\Bears.htm" (normalized: "c:\\users\\default\\appdata\\local\\microsoft\\windows mail\\stationery\\bears.htm"), lpNewFileName="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Windows Mail\\Stationery\\Bears.htm.[neftet@tutanota.com].boom" (normalized: "c:\\users\\default\\appdata\\local\\microsoft\\windows mail\\stationery\\bears.htm.[neftet@tutanota.com].boom")) returned 1 [0133.068] MoveFileW (lpExistingFileName="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Windows Mail\\Stationery\\Bears.jpg" (normalized: "c:\\users\\default\\appdata\\local\\microsoft\\windows mail\\stationery\\bears.jpg"), lpNewFileName="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Windows Mail\\Stationery\\Bears.jpg.[neftet@tutanota.com].boom" (normalized: "c:\\users\\default\\appdata\\local\\microsoft\\windows mail\\stationery\\bears.jpg.[neftet@tutanota.com].boom")) returned 1 [0133.071] MoveFileW (lpExistingFileName="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Windows Mail\\Stationery\\Garden.htm" (normalized: "c:\\users\\default\\appdata\\local\\microsoft\\windows mail\\stationery\\garden.htm"), lpNewFileName="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Windows Mail\\Stationery\\Garden.htm.[neftet@tutanota.com].boom" (normalized: "c:\\users\\default\\appdata\\local\\microsoft\\windows mail\\stationery\\garden.htm.[neftet@tutanota.com].boom")) returned 1 [0133.074] MoveFileW (lpExistingFileName="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Windows Mail\\Stationery\\Garden.jpg" (normalized: "c:\\users\\default\\appdata\\local\\microsoft\\windows mail\\stationery\\garden.jpg"), lpNewFileName="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Windows Mail\\Stationery\\Garden.jpg.[neftet@tutanota.com].boom" (normalized: "c:\\users\\default\\appdata\\local\\microsoft\\windows mail\\stationery\\garden.jpg.[neftet@tutanota.com].boom")) returned 1 [0133.091] MoveFileW (lpExistingFileName="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Windows Mail\\Stationery\\Green Bubbles.htm" (normalized: "c:\\users\\default\\appdata\\local\\microsoft\\windows mail\\stationery\\green bubbles.htm"), lpNewFileName="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Windows Mail\\Stationery\\Green Bubbles.htm.[neftet@tutanota.com].boom" (normalized: "c:\\users\\default\\appdata\\local\\microsoft\\windows mail\\stationery\\green bubbles.htm.[neftet@tutanota.com].boom")) returned 1 [0133.095] MoveFileW (lpExistingFileName="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Windows Mail\\Stationery\\GreenBubbles.jpg" (normalized: "c:\\users\\default\\appdata\\local\\microsoft\\windows mail\\stationery\\greenbubbles.jpg"), lpNewFileName="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Windows Mail\\Stationery\\GreenBubbles.jpg.[neftet@tutanota.com].boom" (normalized: "c:\\users\\default\\appdata\\local\\microsoft\\windows mail\\stationery\\greenbubbles.jpg.[neftet@tutanota.com].boom")) returned 1 [0133.098] MoveFileW (lpExistingFileName="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Windows Mail\\Stationery\\Hand Prints.htm" (normalized: "c:\\users\\default\\appdata\\local\\microsoft\\windows mail\\stationery\\hand prints.htm"), lpNewFileName="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Windows Mail\\Stationery\\Hand Prints.htm.[neftet@tutanota.com].boom" (normalized: "c:\\users\\default\\appdata\\local\\microsoft\\windows mail\\stationery\\hand prints.htm.[neftet@tutanota.com].boom")) returned 1 [0133.101] MoveFileW (lpExistingFileName="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Windows Mail\\Stationery\\HandPrints.jpg" (normalized: "c:\\users\\default\\appdata\\local\\microsoft\\windows mail\\stationery\\handprints.jpg"), lpNewFileName="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Windows Mail\\Stationery\\HandPrints.jpg.[neftet@tutanota.com].boom" (normalized: "c:\\users\\default\\appdata\\local\\microsoft\\windows mail\\stationery\\handprints.jpg.[neftet@tutanota.com].boom")) returned 1 [0133.104] MoveFileW (lpExistingFileName="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Windows Mail\\Stationery\\Orange Circles.htm" (normalized: "c:\\users\\default\\appdata\\local\\microsoft\\windows mail\\stationery\\orange circles.htm"), lpNewFileName="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Windows Mail\\Stationery\\Orange Circles.htm.[neftet@tutanota.com].boom" (normalized: "c:\\users\\default\\appdata\\local\\microsoft\\windows mail\\stationery\\orange circles.htm.[neftet@tutanota.com].boom")) returned 1 [0133.107] MoveFileW (lpExistingFileName="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Windows Mail\\Stationery\\OrangeCircles.jpg" (normalized: "c:\\users\\default\\appdata\\local\\microsoft\\windows mail\\stationery\\orangecircles.jpg"), lpNewFileName="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Windows Mail\\Stationery\\OrangeCircles.jpg.[neftet@tutanota.com].boom" (normalized: "c:\\users\\default\\appdata\\local\\microsoft\\windows mail\\stationery\\orangecircles.jpg.[neftet@tutanota.com].boom")) returned 1 [0133.110] MoveFileW (lpExistingFileName="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Windows Mail\\Stationery\\Peacock.htm" (normalized: "c:\\users\\default\\appdata\\local\\microsoft\\windows mail\\stationery\\peacock.htm"), lpNewFileName="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Windows Mail\\Stationery\\Peacock.htm.[neftet@tutanota.com].boom" (normalized: "c:\\users\\default\\appdata\\local\\microsoft\\windows mail\\stationery\\peacock.htm.[neftet@tutanota.com].boom")) returned 1 [0133.113] MoveFileW (lpExistingFileName="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Windows Mail\\Stationery\\Peacock.jpg" (normalized: "c:\\users\\default\\appdata\\local\\microsoft\\windows mail\\stationery\\peacock.jpg"), lpNewFileName="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Windows Mail\\Stationery\\Peacock.jpg.[neftet@tutanota.com].boom" (normalized: "c:\\users\\default\\appdata\\local\\microsoft\\windows mail\\stationery\\peacock.jpg.[neftet@tutanota.com].boom")) returned 1 [0133.120] MoveFileW (lpExistingFileName="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Windows Mail\\Stationery\\Roses.htm" (normalized: "c:\\users\\default\\appdata\\local\\microsoft\\windows mail\\stationery\\roses.htm"), lpNewFileName="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Windows Mail\\Stationery\\Roses.htm.[neftet@tutanota.com].boom" (normalized: "c:\\users\\default\\appdata\\local\\microsoft\\windows mail\\stationery\\roses.htm.[neftet@tutanota.com].boom")) returned 1 [0133.123] MoveFileW (lpExistingFileName="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Windows Mail\\Stationery\\Roses.jpg" (normalized: "c:\\users\\default\\appdata\\local\\microsoft\\windows mail\\stationery\\roses.jpg"), lpNewFileName="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Windows Mail\\Stationery\\Roses.jpg.[neftet@tutanota.com].boom" (normalized: "c:\\users\\default\\appdata\\local\\microsoft\\windows mail\\stationery\\roses.jpg.[neftet@tutanota.com].boom")) returned 1 [0133.125] MoveFileW (lpExistingFileName="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Windows Mail\\Stationery\\Shades of Blue.htm" (normalized: "c:\\users\\default\\appdata\\local\\microsoft\\windows mail\\stationery\\shades of blue.htm"), lpNewFileName="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Windows Mail\\Stationery\\Shades of Blue.htm.[neftet@tutanota.com].boom" (normalized: "c:\\users\\default\\appdata\\local\\microsoft\\windows mail\\stationery\\shades of blue.htm.[neftet@tutanota.com].boom")) returned 1 [0133.128] MoveFileW (lpExistingFileName="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Windows Mail\\Stationery\\ShadesOfBlue.jpg" (normalized: "c:\\users\\default\\appdata\\local\\microsoft\\windows mail\\stationery\\shadesofblue.jpg"), lpNewFileName="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Windows Mail\\Stationery\\ShadesOfBlue.jpg.[neftet@tutanota.com].boom" (normalized: "c:\\users\\default\\appdata\\local\\microsoft\\windows mail\\stationery\\shadesofblue.jpg.[neftet@tutanota.com].boom")) returned 1 [0133.131] MoveFileW (lpExistingFileName="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Windows Mail\\Stationery\\Soft Blue.htm" (normalized: "c:\\users\\default\\appdata\\local\\microsoft\\windows mail\\stationery\\soft blue.htm"), lpNewFileName="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Windows Mail\\Stationery\\Soft Blue.htm.[neftet@tutanota.com].boom" (normalized: "c:\\users\\default\\appdata\\local\\microsoft\\windows mail\\stationery\\soft blue.htm.[neftet@tutanota.com].boom")) returned 1 [0133.135] MoveFileW (lpExistingFileName="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Windows Mail\\Stationery\\SoftBlue.jpg" (normalized: "c:\\users\\default\\appdata\\local\\microsoft\\windows mail\\stationery\\softblue.jpg"), lpNewFileName="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Windows Mail\\Stationery\\SoftBlue.jpg.[neftet@tutanota.com].boom" (normalized: "c:\\users\\default\\appdata\\local\\microsoft\\windows mail\\stationery\\softblue.jpg.[neftet@tutanota.com].boom")) returned 1 [0133.138] MoveFileW (lpExistingFileName="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Windows Mail\\Stationery\\Stars.htm" (normalized: "c:\\users\\default\\appdata\\local\\microsoft\\windows mail\\stationery\\stars.htm"), lpNewFileName="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Windows Mail\\Stationery\\Stars.htm.[neftet@tutanota.com].boom" (normalized: "c:\\users\\default\\appdata\\local\\microsoft\\windows mail\\stationery\\stars.htm.[neftet@tutanota.com].boom")) returned 1 [0133.140] MoveFileW (lpExistingFileName="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Windows Mail\\Stationery\\Stars.jpg" (normalized: "c:\\users\\default\\appdata\\local\\microsoft\\windows mail\\stationery\\stars.jpg"), lpNewFileName="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Windows Mail\\Stationery\\Stars.jpg.[neftet@tutanota.com].boom" (normalized: "c:\\users\\default\\appdata\\local\\microsoft\\windows mail\\stationery\\stars.jpg.[neftet@tutanota.com].boom")) returned 1 [0133.144] MoveFileW (lpExistingFileName="C:\\Users\\Default\\AppData\\Local\\Temp\\FXSAPIDebugLogFile.txt" (normalized: "c:\\users\\default\\appdata\\local\\temp\\fxsapidebuglogfile.txt"), lpNewFileName="C:\\Users\\Default\\AppData\\Local\\Temp\\FXSAPIDebugLogFile.txt.[neftet@tutanota.com].boom" (normalized: "c:\\users\\default\\appdata\\local\\temp\\fxsapidebuglogfile.txt.[neftet@tutanota.com].boom")) returned 1 [0133.149] MoveFileW (lpExistingFileName="C:\\Users\\Default\\AppData\\Roaming\\Microsoft\\Internet Explorer\\Quick Launch\\Shows Desktop.lnk" (normalized: "c:\\users\\default\\appdata\\roaming\\microsoft\\internet explorer\\quick launch\\shows desktop.lnk"), lpNewFileName="C:\\Users\\Default\\AppData\\Roaming\\Microsoft\\Internet Explorer\\Quick Launch\\Shows Desktop.lnk.[neftet@tutanota.com].boom" (normalized: "c:\\users\\default\\appdata\\roaming\\microsoft\\internet explorer\\quick launch\\shows desktop.lnk.[neftet@tutanota.com].boom")) returned 1 [0133.152] MoveFileW (lpExistingFileName="C:\\Users\\Default\\AppData\\Roaming\\Microsoft\\Internet Explorer\\Quick Launch\\Window Switcher.lnk" (normalized: "c:\\users\\default\\appdata\\roaming\\microsoft\\internet explorer\\quick launch\\window switcher.lnk"), lpNewFileName="C:\\Users\\Default\\AppData\\Roaming\\Microsoft\\Internet Explorer\\Quick Launch\\Window Switcher.lnk.[neftet@tutanota.com].boom" (normalized: "c:\\users\\default\\appdata\\roaming\\microsoft\\internet explorer\\quick launch\\window switcher.lnk.[neftet@tutanota.com].boom")) returned 1 [0133.155] MoveFileW (lpExistingFileName="C:\\Users\\Default\\AppData\\Roaming\\Microsoft\\Internet Explorer\\Quick Launch\\User Pinned\\TaskBar\\Internet Explorer.lnk" (normalized: "c:\\users\\default\\appdata\\roaming\\microsoft\\internet explorer\\quick launch\\user pinned\\taskbar\\internet explorer.lnk"), lpNewFileName="C:\\Users\\Default\\AppData\\Roaming\\Microsoft\\Internet Explorer\\Quick Launch\\User Pinned\\TaskBar\\Internet Explorer.lnk.[neftet@tutanota.com].boom" (normalized: "c:\\users\\default\\appdata\\roaming\\microsoft\\internet explorer\\quick launch\\user pinned\\taskbar\\internet explorer.lnk.[neftet@tutanota.com].boom")) returned 1 [0133.157] MoveFileW (lpExistingFileName="C:\\Users\\Default\\AppData\\Roaming\\Microsoft\\Internet Explorer\\Quick Launch\\User Pinned\\TaskBar\\Windows Explorer.lnk" (normalized: "c:\\users\\default\\appdata\\roaming\\microsoft\\internet explorer\\quick launch\\user pinned\\taskbar\\windows explorer.lnk"), lpNewFileName="C:\\Users\\Default\\AppData\\Roaming\\Microsoft\\Internet Explorer\\Quick Launch\\User Pinned\\TaskBar\\Windows Explorer.lnk.[neftet@tutanota.com].boom" (normalized: "c:\\users\\default\\appdata\\roaming\\microsoft\\internet explorer\\quick launch\\user pinned\\taskbar\\windows explorer.lnk.[neftet@tutanota.com].boom")) returned 1 [0133.160] MoveFileW (lpExistingFileName="C:\\Users\\Default\\AppData\\Roaming\\Microsoft\\Internet Explorer\\Quick Launch\\User Pinned\\TaskBar\\Windows Media Player.lnk" (normalized: "c:\\users\\default\\appdata\\roaming\\microsoft\\internet explorer\\quick launch\\user pinned\\taskbar\\windows media player.lnk"), lpNewFileName="C:\\Users\\Default\\AppData\\Roaming\\Microsoft\\Internet Explorer\\Quick Launch\\User Pinned\\TaskBar\\Windows Media Player.lnk.[neftet@tutanota.com].boom" (normalized: "c:\\users\\default\\appdata\\roaming\\microsoft\\internet explorer\\quick launch\\user pinned\\taskbar\\windows media player.lnk.[neftet@tutanota.com].boom")) returned 1 [0133.176] MoveFileW (lpExistingFileName="C:\\Users\\Default\\AppData\\Roaming\\Microsoft\\Windows\\SendTo\\Fax Recipient.lnk" (normalized: "c:\\users\\default\\appdata\\roaming\\microsoft\\windows\\sendto\\fax recipient.lnk"), lpNewFileName="C:\\Users\\Default\\AppData\\Roaming\\Microsoft\\Windows\\SendTo\\Fax Recipient.lnk.[neftet@tutanota.com].boom" (normalized: "c:\\users\\default\\appdata\\roaming\\microsoft\\windows\\sendto\\fax recipient.lnk.[neftet@tutanota.com].boom")) returned 1 [0133.179] MoveFileW (lpExistingFileName="C:\\Users\\Default\\AppData\\Roaming\\Microsoft\\Windows\\Start Menu\\Programs\\Internet Explorer (64-bit).lnk" (normalized: "c:\\users\\default\\appdata\\roaming\\microsoft\\windows\\start menu\\programs\\internet explorer (64-bit).lnk"), lpNewFileName="C:\\Users\\Default\\AppData\\Roaming\\Microsoft\\Windows\\Start Menu\\Programs\\Internet Explorer (64-bit).lnk.[neftet@tutanota.com].boom" (normalized: "c:\\users\\default\\appdata\\roaming\\microsoft\\windows\\start menu\\programs\\internet explorer (64-bit).lnk.[neftet@tutanota.com].boom")) returned 1 [0133.182] MoveFileW (lpExistingFileName="C:\\Users\\Default\\AppData\\Roaming\\Microsoft\\Windows\\Start Menu\\Programs\\Internet Explorer.lnk" (normalized: "c:\\users\\default\\appdata\\roaming\\microsoft\\windows\\start menu\\programs\\internet explorer.lnk"), lpNewFileName="C:\\Users\\Default\\AppData\\Roaming\\Microsoft\\Windows\\Start Menu\\Programs\\Internet Explorer.lnk.[neftet@tutanota.com].boom" (normalized: "c:\\users\\default\\appdata\\roaming\\microsoft\\windows\\start menu\\programs\\internet explorer.lnk.[neftet@tutanota.com].boom")) returned 1 [0133.184] MoveFileW (lpExistingFileName="C:\\Users\\Default\\AppData\\Roaming\\Microsoft\\Windows\\Start Menu\\Programs\\Accessories\\Command Prompt.lnk" (normalized: "c:\\users\\default\\appdata\\roaming\\microsoft\\windows\\start menu\\programs\\accessories\\command prompt.lnk"), lpNewFileName="C:\\Users\\Default\\AppData\\Roaming\\Microsoft\\Windows\\Start Menu\\Programs\\Accessories\\Command Prompt.lnk.[neftet@tutanota.com].boom" (normalized: "c:\\users\\default\\appdata\\roaming\\microsoft\\windows\\start menu\\programs\\accessories\\command prompt.lnk.[neftet@tutanota.com].boom")) returned 1 [0133.187] MoveFileW (lpExistingFileName="C:\\Users\\Default\\AppData\\Roaming\\Microsoft\\Windows\\Start Menu\\Programs\\Accessories\\Notepad.lnk" (normalized: "c:\\users\\default\\appdata\\roaming\\microsoft\\windows\\start menu\\programs\\accessories\\notepad.lnk"), lpNewFileName="C:\\Users\\Default\\AppData\\Roaming\\Microsoft\\Windows\\Start Menu\\Programs\\Accessories\\Notepad.lnk.[neftet@tutanota.com].boom" (normalized: "c:\\users\\default\\appdata\\roaming\\microsoft\\windows\\start menu\\programs\\accessories\\notepad.lnk.[neftet@tutanota.com].boom")) returned 1 [0133.189] MoveFileW (lpExistingFileName="C:\\Users\\Default\\AppData\\Roaming\\Microsoft\\Windows\\Start Menu\\Programs\\Accessories\\Run.lnk" (normalized: "c:\\users\\default\\appdata\\roaming\\microsoft\\windows\\start menu\\programs\\accessories\\run.lnk"), lpNewFileName="C:\\Users\\Default\\AppData\\Roaming\\Microsoft\\Windows\\Start Menu\\Programs\\Accessories\\Run.lnk.[neftet@tutanota.com].boom" (normalized: "c:\\users\\default\\appdata\\roaming\\microsoft\\windows\\start menu\\programs\\accessories\\run.lnk.[neftet@tutanota.com].boom")) returned 1 [0133.192] MoveFileW (lpExistingFileName="C:\\Users\\Default\\AppData\\Roaming\\Microsoft\\Windows\\Start Menu\\Programs\\Accessories\\Windows Explorer.lnk" (normalized: "c:\\users\\default\\appdata\\roaming\\microsoft\\windows\\start menu\\programs\\accessories\\windows explorer.lnk"), lpNewFileName="C:\\Users\\Default\\AppData\\Roaming\\Microsoft\\Windows\\Start Menu\\Programs\\Accessories\\Windows Explorer.lnk.[neftet@tutanota.com].boom" (normalized: "c:\\users\\default\\appdata\\roaming\\microsoft\\windows\\start menu\\programs\\accessories\\windows explorer.lnk.[neftet@tutanota.com].boom")) returned 1 [0133.195] MoveFileW (lpExistingFileName="C:\\Users\\Default\\AppData\\Roaming\\Microsoft\\Windows\\Start Menu\\Programs\\Accessories\\Accessibility\\Ease of Access.lnk" (normalized: "c:\\users\\default\\appdata\\roaming\\microsoft\\windows\\start menu\\programs\\accessories\\accessibility\\ease of access.lnk"), lpNewFileName="C:\\Users\\Default\\AppData\\Roaming\\Microsoft\\Windows\\Start Menu\\Programs\\Accessories\\Accessibility\\Ease of Access.lnk.[neftet@tutanota.com].boom" (normalized: "c:\\users\\default\\appdata\\roaming\\microsoft\\windows\\start menu\\programs\\accessories\\accessibility\\ease of access.lnk.[neftet@tutanota.com].boom")) returned 1 [0133.198] MoveFileW (lpExistingFileName="C:\\Users\\Default\\AppData\\Roaming\\Microsoft\\Windows\\Start Menu\\Programs\\Accessories\\Accessibility\\Magnify.lnk" (normalized: "c:\\users\\default\\appdata\\roaming\\microsoft\\windows\\start menu\\programs\\accessories\\accessibility\\magnify.lnk"), lpNewFileName="C:\\Users\\Default\\AppData\\Roaming\\Microsoft\\Windows\\Start Menu\\Programs\\Accessories\\Accessibility\\Magnify.lnk.[neftet@tutanota.com].boom" (normalized: "c:\\users\\default\\appdata\\roaming\\microsoft\\windows\\start menu\\programs\\accessories\\accessibility\\magnify.lnk.[neftet@tutanota.com].boom")) returned 1 [0133.201] MoveFileW (lpExistingFileName="C:\\Users\\Default\\AppData\\Roaming\\Microsoft\\Windows\\Start Menu\\Programs\\Accessories\\Accessibility\\Narrator.lnk" (normalized: "c:\\users\\default\\appdata\\roaming\\microsoft\\windows\\start menu\\programs\\accessories\\accessibility\\narrator.lnk"), lpNewFileName="C:\\Users\\Default\\AppData\\Roaming\\Microsoft\\Windows\\Start Menu\\Programs\\Accessories\\Accessibility\\Narrator.lnk.[neftet@tutanota.com].boom" (normalized: "c:\\users\\default\\appdata\\roaming\\microsoft\\windows\\start menu\\programs\\accessories\\accessibility\\narrator.lnk.[neftet@tutanota.com].boom")) returned 1 [0133.203] MoveFileW (lpExistingFileName="C:\\Users\\Default\\AppData\\Roaming\\Microsoft\\Windows\\Start Menu\\Programs\\Accessories\\Accessibility\\On-Screen Keyboard.lnk" (normalized: "c:\\users\\default\\appdata\\roaming\\microsoft\\windows\\start menu\\programs\\accessories\\accessibility\\on-screen keyboard.lnk"), lpNewFileName="C:\\Users\\Default\\AppData\\Roaming\\Microsoft\\Windows\\Start Menu\\Programs\\Accessories\\Accessibility\\On-Screen Keyboard.lnk.[neftet@tutanota.com].boom" (normalized: "c:\\users\\default\\appdata\\roaming\\microsoft\\windows\\start menu\\programs\\accessories\\accessibility\\on-screen keyboard.lnk.[neftet@tutanota.com].boom")) returned 1 [0133.206] MoveFileW (lpExistingFileName="C:\\Users\\Default\\AppData\\Roaming\\Microsoft\\Windows\\Start Menu\\Programs\\Accessories\\System Tools\\computer.lnk" (normalized: "c:\\users\\default\\appdata\\roaming\\microsoft\\windows\\start menu\\programs\\accessories\\system tools\\computer.lnk"), lpNewFileName="C:\\Users\\Default\\AppData\\Roaming\\Microsoft\\Windows\\Start Menu\\Programs\\Accessories\\System Tools\\computer.lnk.[neftet@tutanota.com].boom" (normalized: "c:\\users\\default\\appdata\\roaming\\microsoft\\windows\\start menu\\programs\\accessories\\system tools\\computer.lnk.[neftet@tutanota.com].boom")) returned 1 [0133.216] MoveFileW (lpExistingFileName="C:\\Users\\Default\\AppData\\Roaming\\Microsoft\\Windows\\Start Menu\\Programs\\Accessories\\System Tools\\Control Panel.lnk" (normalized: "c:\\users\\default\\appdata\\roaming\\microsoft\\windows\\start menu\\programs\\accessories\\system tools\\control panel.lnk"), lpNewFileName="C:\\Users\\Default\\AppData\\Roaming\\Microsoft\\Windows\\Start Menu\\Programs\\Accessories\\System Tools\\Control Panel.lnk.[neftet@tutanota.com].boom" (normalized: "c:\\users\\default\\appdata\\roaming\\microsoft\\windows\\start menu\\programs\\accessories\\system tools\\control panel.lnk.[neftet@tutanota.com].boom")) returned 1 [0133.218] MoveFileW (lpExistingFileName="C:\\Users\\Default\\AppData\\Roaming\\Microsoft\\Windows\\Start Menu\\Programs\\Accessories\\System Tools\\Internet Explorer (No Add-ons).lnk" (normalized: "c:\\users\\default\\appdata\\roaming\\microsoft\\windows\\start menu\\programs\\accessories\\system tools\\internet explorer (no add-ons).lnk"), lpNewFileName="C:\\Users\\Default\\AppData\\Roaming\\Microsoft\\Windows\\Start Menu\\Programs\\Accessories\\System Tools\\Internet Explorer (No Add-ons).lnk.[neftet@tutanota.com].boom" (normalized: "c:\\users\\default\\appdata\\roaming\\microsoft\\windows\\start menu\\programs\\accessories\\system tools\\internet explorer (no add-ons).lnk.[neftet@tutanota.com].boom")) returned 1 [0133.221] MoveFileW (lpExistingFileName="C:\\Users\\Default\\AppData\\Roaming\\Microsoft\\Windows\\Start Menu\\Programs\\Accessories\\System Tools\\Private Character Editor.lnk" (normalized: "c:\\users\\default\\appdata\\roaming\\microsoft\\windows\\start menu\\programs\\accessories\\system tools\\private character editor.lnk"), lpNewFileName="C:\\Users\\Default\\AppData\\Roaming\\Microsoft\\Windows\\Start Menu\\Programs\\Accessories\\System Tools\\Private Character Editor.lnk.[neftet@tutanota.com].boom" (normalized: "c:\\users\\default\\appdata\\roaming\\microsoft\\windows\\start menu\\programs\\accessories\\system tools\\private character editor.lnk.[neftet@tutanota.com].boom")) returned 1 [0133.224] MoveFileW (lpExistingFileName="C:\\Users\\Default\\AppData\\Roaming\\Microsoft\\Windows\\Start Menu\\Programs\\Maintenance\\Help.lnk" (normalized: "c:\\users\\default\\appdata\\roaming\\microsoft\\windows\\start menu\\programs\\maintenance\\help.lnk"), lpNewFileName="C:\\Users\\Default\\AppData\\Roaming\\Microsoft\\Windows\\Start Menu\\Programs\\Maintenance\\Help.lnk.[neftet@tutanota.com].boom" (normalized: "c:\\users\\default\\appdata\\roaming\\microsoft\\windows\\start menu\\programs\\maintenance\\help.lnk.[neftet@tutanota.com].boom")) returned 1 [0133.286] MoveFileW (lpExistingFileName="C:\\Users\\Default\\AppData\\Roaming\\Microsoft\\Windows\\Themes\\TranscodedWallpaper.jpg" (normalized: "c:\\users\\default\\appdata\\roaming\\microsoft\\windows\\themes\\transcodedwallpaper.jpg"), lpNewFileName="C:\\Users\\Default\\AppData\\Roaming\\Microsoft\\Windows\\Themes\\TranscodedWallpaper.jpg.[neftet@tutanota.com].boom" (normalized: "c:\\users\\default\\appdata\\roaming\\microsoft\\windows\\themes\\transcodedwallpaper.jpg.[neftet@tutanota.com].boom")) returned 1 [0133.324] MoveFileW (lpExistingFileName="C:\\Users\\Default\\Links\\Desktop.lnk" (normalized: "c:\\users\\default\\links\\desktop.lnk"), lpNewFileName="C:\\Users\\Default\\Links\\Desktop.lnk.[neftet@tutanota.com].boom" (normalized: "c:\\users\\default\\links\\desktop.lnk.[neftet@tutanota.com].boom")) returned 1 [0133.327] MoveFileW (lpExistingFileName="C:\\Users\\Default\\Links\\Downloads.lnk" (normalized: "c:\\users\\default\\links\\downloads.lnk"), lpNewFileName="C:\\Users\\Default\\Links\\Downloads.lnk.[neftet@tutanota.com].boom" (normalized: "c:\\users\\default\\links\\downloads.lnk.[neftet@tutanota.com].boom")) returned 1 [0133.330] MoveFileW (lpExistingFileName="C:\\Users\\Default\\Links\\RecentPlaces.lnk" (normalized: "c:\\users\\default\\links\\recentplaces.lnk"), lpNewFileName="C:\\Users\\Default\\Links\\RecentPlaces.lnk.[neftet@tutanota.com].boom" (normalized: "c:\\users\\default\\links\\recentplaces.lnk.[neftet@tutanota.com].boom")) returned 1 [0133.347] MoveFileW (lpExistingFileName="C:\\Users\\Public\\Desktop\\Adobe Reader X.lnk" (normalized: "c:\\users\\public\\desktop\\adobe reader x.lnk"), lpNewFileName="C:\\Users\\Public\\Desktop\\Adobe Reader X.lnk.[neftet@tutanota.com].boom" (normalized: "c:\\users\\public\\desktop\\adobe reader x.lnk.[neftet@tutanota.com].boom")) returned 1 [0133.351] MoveFileW (lpExistingFileName="C:\\Users\\Public\\Desktop\\Google Chrome.lnk" (normalized: "c:\\users\\public\\desktop\\google chrome.lnk"), lpNewFileName="C:\\Users\\Public\\Desktop\\Google Chrome.lnk.[neftet@tutanota.com].boom" (normalized: "c:\\users\\public\\desktop\\google chrome.lnk.[neftet@tutanota.com].boom")) returned 1 [0133.354] MoveFileW (lpExistingFileName="C:\\Users\\Public\\Desktop\\Mozilla Firefox.lnk" (normalized: "c:\\users\\public\\desktop\\mozilla firefox.lnk"), lpNewFileName="C:\\Users\\Public\\Desktop\\Mozilla Firefox.lnk.[neftet@tutanota.com].boom" (normalized: "c:\\users\\public\\desktop\\mozilla firefox.lnk.[neftet@tutanota.com].boom")) returned 1 [0133.930] GetFullPathNameW (in: lpFileName="C:\\Users\\Public\\Music\\Sample Music\\Kalimba.mp3", nBufferLength=0x105, lpBuffer=0x31e170, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\Public\\Music\\Sample Music\\Kalimba.mp3", lpFilePart=0x0) returned 0x2e [0133.930] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e664) returned 1 [0133.930] CreateFileW (lpFileName="C:\\Users\\Public\\Music\\Sample Music\\Kalimba.mp3" (normalized: "c:\\users\\public\\music\\sample music\\kalimba.mp3"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x274 [0133.932] GetFileType (hFile=0x274) returned 0x1 [0133.932] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e660) returned 1 [0133.932] GetFileType (hFile=0x274) returned 0x1 [0133.932] WriteFile (in: hFile=0x274, lpBuffer=0x6b91018*, nNumberOfBytesToWrite=0x806500, lpNumberOfBytesWritten=0x31e720, lpOverlapped=0x0 | out: lpBuffer=0x6b91018*, lpNumberOfBytesWritten=0x31e720*=0x806500, lpOverlapped=0x0) returned 1 [0134.172] CloseHandle (hObject=0x274) returned 1 [0134.173] GetFullPathNameW (in: lpFileName="C:\\Users\\Public\\Music\\Sample Music\\Kalimba.mp3", nBufferLength=0x105, lpBuffer=0x31e2a4, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\Public\\Music\\Sample Music\\Kalimba.mp3", lpFilePart=0x0) returned 0x2e [0134.173] GetFullPathNameW (in: lpFileName="C:\\Users\\Public\\Music\\Sample Music\\Kalimba.mp3.[neftet@tutanota.com].boom", nBufferLength=0x105, lpBuffer=0x31e2a4, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\Public\\Music\\Sample Music\\Kalimba.mp3.[neftet@tutanota.com].boom", lpFilePart=0x0) returned 0x49 [0134.173] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e704) returned 1 [0134.173] GetFileAttributesExW (in: lpFileName="C:\\Users\\Public\\Music\\Sample Music\\Kalimba.mp3" (normalized: "c:\\users\\public\\music\\sample music\\kalimba.mp3"), fInfoLevelId=0x0, lpFileInformation=0x31e780 | out: lpFileInformation=0x31e780*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8031a7b6, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x7be5ebf7, ftLastAccessTime.dwHighDateTime=0x1ca0444, ftLastWriteTime.dwLowDateTime=0x33677340, ftLastWriteTime.dwHighDateTime=0x1d6eb7f, nFileSizeHigh=0x0, nFileSizeLow=0x806500)) returned 1 [0134.173] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e700) returned 1 [0134.173] MoveFileW (lpExistingFileName="C:\\Users\\Public\\Music\\Sample Music\\Kalimba.mp3" (normalized: "c:\\users\\public\\music\\sample music\\kalimba.mp3"), lpNewFileName="C:\\Users\\Public\\Music\\Sample Music\\Kalimba.mp3.[neftet@tutanota.com].boom" (normalized: "c:\\users\\public\\music\\sample music\\kalimba.mp3.[neftet@tutanota.com].boom")) returned 1 [0134.174] GetFullPathNameW (in: lpFileName="C:\\Users\\Public\\Music\\Sample Music\\Maid with the Flaxen Hair.mp3", nBufferLength=0x105, lpBuffer=0x31e184, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\Public\\Music\\Sample Music\\Maid with the Flaxen Hair.mp3", lpFilePart=0x0) returned 0x40 [0134.174] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e678) returned 1 [0134.174] CreateFileW (lpFileName="C:\\Users\\Public\\Music\\Sample Music\\Maid with the Flaxen Hair.mp3" (normalized: "c:\\users\\public\\music\\sample music\\maid with the flaxen hair.mp3"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x274 [0134.174] GetFileType (hFile=0x274) returned 0x1 [0134.174] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e674) returned 1 [0134.174] GetFileType (hFile=0x274) returned 0x1 [0134.174] GetFileSize (in: hFile=0x274, lpFileSizeHigh=0x31e780 | out: lpFileSizeHigh=0x31e780*=0x0) returned 0x3ec5e0 [0134.175] ReadFile (in: hFile=0x274, lpBuffer=0x3e1f9d0, nNumberOfBytesToRead=0x3ec5e0, lpNumberOfBytesRead=0x31e72c, lpOverlapped=0x0 | out: lpBuffer=0x3e1f9d0*, lpNumberOfBytesRead=0x31e72c*=0x3ec5e0, lpOverlapped=0x0) returned 1 [0134.424] CloseHandle (hObject=0x274) returned 1 [0134.616] GetFullPathNameW (in: lpFileName="C:\\Users\\Public\\Music\\Sample Music\\Maid with the Flaxen Hair.mp3", nBufferLength=0x105, lpBuffer=0x31e170, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\Public\\Music\\Sample Music\\Maid with the Flaxen Hair.mp3", lpFilePart=0x0) returned 0x40 [0134.616] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e664) returned 1 [0134.616] CreateFileW (lpFileName="C:\\Users\\Public\\Music\\Sample Music\\Maid with the Flaxen Hair.mp3" (normalized: "c:\\users\\public\\music\\sample music\\maid with the flaxen hair.mp3"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x274 [0134.623] GetFileType (hFile=0x274) returned 0x1 [0134.623] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e660) returned 1 [0134.623] GetFileType (hFile=0x274) returned 0x1 [0134.623] WriteFile (in: hFile=0x274, lpBuffer=0x420bfd0*, nNumberOfBytesToWrite=0x3ec5e0, lpNumberOfBytesWritten=0x31e720, lpOverlapped=0x0 | out: lpBuffer=0x420bfd0*, lpNumberOfBytesWritten=0x31e720*=0x3ec5e0, lpOverlapped=0x0) returned 1 [0134.733] CloseHandle (hObject=0x274) returned 1 [0134.733] GetFullPathNameW (in: lpFileName="C:\\Users\\Public\\Music\\Sample Music\\Maid with the Flaxen Hair.mp3", nBufferLength=0x105, lpBuffer=0x31e2a4, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\Public\\Music\\Sample Music\\Maid with the Flaxen Hair.mp3", lpFilePart=0x0) returned 0x40 [0134.733] GetFullPathNameW (in: lpFileName="C:\\Users\\Public\\Music\\Sample Music\\Maid with the Flaxen Hair.mp3.[neftet@tutanota.com].boom", nBufferLength=0x105, lpBuffer=0x31e2a4, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\Public\\Music\\Sample Music\\Maid with the Flaxen Hair.mp3.[neftet@tutanota.com].boom", lpFilePart=0x0) returned 0x5b [0134.734] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e704) returned 1 [0134.734] GetFileAttributesExW (in: lpFileName="C:\\Users\\Public\\Music\\Sample Music\\Maid with the Flaxen Hair.mp3" (normalized: "c:\\users\\public\\music\\sample music\\maid with the flaxen hair.mp3"), fInfoLevelId=0x0, lpFileInformation=0x31e780 | out: lpFileInformation=0x31e780*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8031a7b6, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x7be38a97, ftLastAccessTime.dwHighDateTime=0x1ca0444, ftLastWriteTime.dwLowDateTime=0x33bd24c0, ftLastWriteTime.dwHighDateTime=0x1d6eb7f, nFileSizeHigh=0x0, nFileSizeLow=0x3ec5e0)) returned 1 [0134.734] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e700) returned 1 [0134.734] MoveFileW (lpExistingFileName="C:\\Users\\Public\\Music\\Sample Music\\Maid with the Flaxen Hair.mp3" (normalized: "c:\\users\\public\\music\\sample music\\maid with the flaxen hair.mp3"), lpNewFileName="C:\\Users\\Public\\Music\\Sample Music\\Maid with the Flaxen Hair.mp3.[neftet@tutanota.com].boom" (normalized: "c:\\users\\public\\music\\sample music\\maid with the flaxen hair.mp3.[neftet@tutanota.com].boom")) returned 1 [0134.735] GetFullPathNameW (in: lpFileName="C:\\Users\\Public\\Music\\Sample Music\\Sleep Away.mp3", nBufferLength=0x105, lpBuffer=0x31e184, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\Public\\Music\\Sample Music\\Sleep Away.mp3", lpFilePart=0x0) returned 0x31 [0134.735] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e678) returned 1 [0134.735] CreateFileW (lpFileName="C:\\Users\\Public\\Music\\Sample Music\\Sleep Away.mp3" (normalized: "c:\\users\\public\\music\\sample music\\sleep away.mp3"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x274 [0134.735] GetFileType (hFile=0x274) returned 0x1 [0134.735] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e674) returned 1 [0134.735] GetFileType (hFile=0x274) returned 0x1 [0134.735] GetFileSize (in: hFile=0x274, lpFileSizeHigh=0x31e780 | out: lpFileSizeHigh=0x31e780*=0x0) returned 0x49e460 [0134.745] ReadFile (in: hFile=0x274, lpBuffer=0x7397538, nNumberOfBytesToRead=0x49e460, lpNumberOfBytesRead=0x31e72c, lpOverlapped=0x0 | out: lpBuffer=0x7397538*, lpNumberOfBytesRead=0x31e72c*=0x49e460, lpOverlapped=0x0) returned 1 [0135.028] CloseHandle (hObject=0x274) returned 1 [0135.232] GetFullPathNameW (in: lpFileName="C:\\Users\\Public\\Music\\Sample Music\\Sleep Away.mp3", nBufferLength=0x105, lpBuffer=0x31e170, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\Public\\Music\\Sample Music\\Sleep Away.mp3", lpFilePart=0x0) returned 0x31 [0135.232] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e664) returned 1 [0135.232] CreateFileW (lpFileName="C:\\Users\\Public\\Music\\Sample Music\\Sleep Away.mp3" (normalized: "c:\\users\\public\\music\\sample music\\sleep away.mp3"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x274 [0135.238] GetFileType (hFile=0x274) returned 0x1 [0135.238] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e660) returned 1 [0135.238] GetFileType (hFile=0x274) returned 0x1 [0135.238] WriteFile (in: hFile=0x274, lpBuffer=0x7b91018*, nNumberOfBytesToWrite=0x49e460, lpNumberOfBytesWritten=0x31e720, lpOverlapped=0x0 | out: lpBuffer=0x7b91018*, lpNumberOfBytesWritten=0x31e720*=0x49e460, lpOverlapped=0x0) returned 1 [0135.449] CloseHandle (hObject=0x274) returned 1 [0135.449] GetFullPathNameW (in: lpFileName="C:\\Users\\Public\\Music\\Sample Music\\Sleep Away.mp3", nBufferLength=0x105, lpBuffer=0x31e2a4, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\Public\\Music\\Sample Music\\Sleep Away.mp3", lpFilePart=0x0) returned 0x31 [0135.449] GetFullPathNameW (in: lpFileName="C:\\Users\\Public\\Music\\Sample Music\\Sleep Away.mp3.[neftet@tutanota.com].boom", nBufferLength=0x105, lpBuffer=0x31e2a4, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\Public\\Music\\Sample Music\\Sleep Away.mp3.[neftet@tutanota.com].boom", lpFilePart=0x0) returned 0x4c [0135.449] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e704) returned 1 [0135.449] GetFileAttributesExW (in: lpFileName="C:\\Users\\Public\\Music\\Sample Music\\Sleep Away.mp3" (normalized: "c:\\users\\public\\music\\sample music\\sleep away.mp3"), fInfoLevelId=0x0, lpFileInformation=0x31e780 | out: lpFileInformation=0x31e780*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x802f4656, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x7be38a97, ftLastAccessTime.dwHighDateTime=0x1ca0444, ftLastWriteTime.dwLowDateTime=0x342aa400, ftLastWriteTime.dwHighDateTime=0x1d6eb7f, nFileSizeHigh=0x0, nFileSizeLow=0x49e460)) returned 1 [0135.449] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e700) returned 1 [0135.449] MoveFileW (lpExistingFileName="C:\\Users\\Public\\Music\\Sample Music\\Sleep Away.mp3" (normalized: "c:\\users\\public\\music\\sample music\\sleep away.mp3"), lpNewFileName="C:\\Users\\Public\\Music\\Sample Music\\Sleep Away.mp3.[neftet@tutanota.com].boom" (normalized: "c:\\users\\public\\music\\sample music\\sleep away.mp3.[neftet@tutanota.com].boom")) returned 1 [0135.450] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e834) returned 1 [0135.450] GetFullPathNameW (in: lpFileName="C:\\Users\\Public\\Pictures", nBufferLength=0x105, lpBuffer=0x31e33c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\Public\\Pictures", lpFilePart=0x0) returned 0x18 [0135.450] GetFullPathNameW (in: lpFileName="C:\\Users\\Public\\Pictures\\", nBufferLength=0x105, lpBuffer=0x31e310, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\Public\\Pictures\\", lpFilePart=0x0) returned 0x19 [0135.450] FindFirstFileW (in: lpFileName="C:\\Users\\Public\\Pictures\\*", lpFindFileData=0x31e55c | out: lpFindFileData=0x31e55c*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0xfdb0c77c, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x282dfaee, ftLastAccessTime.dwHighDateTime=0x1ca043f, ftLastWriteTime.dwLowDateTime=0x288ad099, ftLastWriteTime.dwHighDateTime=0x1ca043f, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x381b80 [0135.450] FindNextFileW (in: hFindFile=0x381b80, lpFindFileData=0x31e56c | out: lpFindFileData=0x31e56c*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0xfdb0c77c, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x282dfaee, ftLastAccessTime.dwHighDateTime=0x1ca043f, ftLastWriteTime.dwLowDateTime=0x288ad099, ftLastWriteTime.dwHighDateTime=0x1ca043f, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0135.451] FindNextFileW (in: hFindFile=0x381b80, lpFindFileData=0x31e56c | out: lpFindFileData=0x31e56c*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0x282dfaee, ftCreationTime.dwHighDateTime=0x1ca043f, ftLastAccessTime.dwLowDateTime=0x282dfaee, ftLastAccessTime.dwHighDateTime=0x1ca043f, ftLastWriteTime.dwLowDateTime=0x288ad099, ftLastWriteTime.dwHighDateTime=0x1ca043f, nFileSizeHigh=0x0, nFileSizeLow=0x17c, dwReserved0=0x0, dwReserved1=0x0, cFileName="desktop.ini", cAlternateFileName="")) returned 1 [0135.451] FindNextFileW (in: hFindFile=0x381b80, lpFindFileData=0x31e56c | out: lpFindFileData=0x31e56c*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x7fffaad0, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x80340916, ftLastAccessTime.dwHighDateTime=0x1ca0444, ftLastWriteTime.dwLowDateTime=0x288d31f9, ftLastWriteTime.dwHighDateTime=0x1ca043f, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Sample Pictures", cAlternateFileName="SAMPLE~1")) returned 1 [0135.451] FindNextFileW (in: hFindFile=0x381b80, lpFindFileData=0x31e56c | out: lpFindFileData=0x31e56c*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x7fffaad0, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x80340916, ftLastAccessTime.dwHighDateTime=0x1ca0444, ftLastWriteTime.dwLowDateTime=0x288d31f9, ftLastWriteTime.dwHighDateTime=0x1ca043f, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Sample Pictures", cAlternateFileName="SAMPLE~1")) returned 0 [0135.451] FindClose (in: hFindFile=0x381b80 | out: hFindFile=0x381b80) returned 1 [0135.451] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e7f4) returned 1 [0135.451] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e800) returned 1 [0135.451] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e834) returned 1 [0135.451] GetFullPathNameW (in: lpFileName="C:\\Users\\Public\\Pictures", nBufferLength=0x105, lpBuffer=0x31e33c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\Public\\Pictures", lpFilePart=0x0) returned 0x18 [0135.451] GetFullPathNameW (in: lpFileName="C:\\Users\\Public\\Pictures\\", nBufferLength=0x105, lpBuffer=0x31e310, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\Public\\Pictures\\", lpFilePart=0x0) returned 0x19 [0135.451] FindFirstFileW (in: lpFileName="C:\\Users\\Public\\Pictures\\*", lpFindFileData=0x31e55c | out: lpFindFileData=0x31e55c*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0xfdb0c77c, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x282dfaee, ftLastAccessTime.dwHighDateTime=0x1ca043f, ftLastWriteTime.dwLowDateTime=0x288ad099, ftLastWriteTime.dwHighDateTime=0x1ca043f, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x381b80 [0135.451] FindNextFileW (in: hFindFile=0x381b80, lpFindFileData=0x31e56c | out: lpFindFileData=0x31e56c*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0xfdb0c77c, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x282dfaee, ftLastAccessTime.dwHighDateTime=0x1ca043f, ftLastWriteTime.dwLowDateTime=0x288ad099, ftLastWriteTime.dwHighDateTime=0x1ca043f, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0135.451] FindNextFileW (in: hFindFile=0x381b80, lpFindFileData=0x31e56c | out: lpFindFileData=0x31e56c*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0x282dfaee, ftCreationTime.dwHighDateTime=0x1ca043f, ftLastAccessTime.dwLowDateTime=0x282dfaee, ftLastAccessTime.dwHighDateTime=0x1ca043f, ftLastWriteTime.dwLowDateTime=0x288ad099, ftLastWriteTime.dwHighDateTime=0x1ca043f, nFileSizeHigh=0x0, nFileSizeLow=0x17c, dwReserved0=0x0, dwReserved1=0x0, cFileName="desktop.ini", cAlternateFileName="")) returned 1 [0135.452] FindNextFileW (in: hFindFile=0x381b80, lpFindFileData=0x31e56c | out: lpFindFileData=0x31e56c*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x7fffaad0, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x80340916, ftLastAccessTime.dwHighDateTime=0x1ca0444, ftLastWriteTime.dwLowDateTime=0x288d31f9, ftLastWriteTime.dwHighDateTime=0x1ca043f, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Sample Pictures", cAlternateFileName="SAMPLE~1")) returned 1 [0135.452] FindNextFileW (in: hFindFile=0x381b80, lpFindFileData=0x31e56c | out: lpFindFileData=0x31e56c*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0135.452] FindClose (in: hFindFile=0x381b80 | out: hFindFile=0x381b80) returned 1 [0135.452] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e7f4) returned 1 [0135.452] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e800) returned 1 [0135.452] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e7bc) returned 1 [0135.452] GetFullPathNameW (in: lpFileName="C:\\Users\\Public\\Pictures\\Sample Pictures", nBufferLength=0x105, lpBuffer=0x31e2c4, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\Public\\Pictures\\Sample Pictures", lpFilePart=0x0) returned 0x28 [0135.452] GetFullPathNameW (in: lpFileName="C:\\Users\\Public\\Pictures\\Sample Pictures\\", nBufferLength=0x105, lpBuffer=0x31e298, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\Public\\Pictures\\Sample Pictures\\", lpFilePart=0x0) returned 0x29 [0135.452] FindFirstFileW (in: lpFileName="C:\\Users\\Public\\Pictures\\Sample Pictures\\*", lpFindFileData=0x31e4e4 | out: lpFindFileData=0x31e4e4*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x7fffaad0, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x80340916, ftLastAccessTime.dwHighDateTime=0x1ca0444, ftLastWriteTime.dwLowDateTime=0x288d31f9, ftLastWriteTime.dwHighDateTime=0x1ca043f, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x381b80 [0135.452] FindNextFileW (in: hFindFile=0x381b80, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x7fffaad0, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x80340916, ftLastAccessTime.dwHighDateTime=0x1ca0444, ftLastWriteTime.dwLowDateTime=0x288d31f9, ftLastWriteTime.dwHighDateTime=0x1ca043f, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0135.452] FindNextFileW (in: hFindFile=0x381b80, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x80340916, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x7beaaeb8, ftLastAccessTime.dwHighDateTime=0x1ca0444, ftLastWriteTime.dwLowDateTime=0x1daa2480, ftLastWriteTime.dwHighDateTime=0x1d6eb7f, nFileSizeHigh=0x0, nFileSizeLow=0xd6b30, dwReserved0=0x0, dwReserved1=0x0, cFileName="Chrysanthemum.jpg", cAlternateFileName="CHRYSA~1.JPG")) returned 1 [0135.453] FindNextFileW (in: hFindFile=0x381b80, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8031a7b6, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x7be84d57, ftLastAccessTime.dwHighDateTime=0x1ca0444, ftLastWriteTime.dwLowDateTime=0x1dbace20, ftLastWriteTime.dwHighDateTime=0x1d6eb7f, nFileSizeHigh=0x0, nFileSizeLow=0xce880, dwReserved0=0x0, dwReserved1=0x0, cFileName="Desert.jpg", cAlternateFileName="")) returned 1 [0135.453] FindNextFileW (in: hFindFile=0x381b80, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0x80340916, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x7beaaeb8, ftLastAccessTime.dwHighDateTime=0x1ca0444, ftLastWriteTime.dwLowDateTime=0x288d31f9, ftLastWriteTime.dwHighDateTime=0x1ca043f, nFileSizeHigh=0x0, nFileSizeLow=0x460, dwReserved0=0x0, dwReserved1=0x0, cFileName="desktop.ini", cAlternateFileName="")) returned 1 [0135.453] FindNextFileW (in: hFindFile=0x381b80, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8031a7b6, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x7be84d57, ftLastAccessTime.dwHighDateTime=0x1ca0444, ftLastWriteTime.dwLowDateTime=0x1dc6b500, ftLastWriteTime.dwHighDateTime=0x1d6eb7f, nFileSizeHigh=0x0, nFileSizeLow=0x91560, dwReserved0=0x0, dwReserved1=0x0, cFileName="Hydrangeas.jpg", cAlternateFileName="HYDRAN~1.JPG")) returned 1 [0135.453] FindNextFileW (in: hFindFile=0x381b80, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8031a7b6, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x7beaaeb8, ftLastAccessTime.dwHighDateTime=0x1ca0444, ftLastWriteTime.dwLowDateTime=0x1dd29be0, ftLastWriteTime.dwHighDateTime=0x1d6eb7f, nFileSizeHigh=0x0, nFileSizeLow=0xbd620, dwReserved0=0x0, dwReserved1=0x0, cFileName="Jellyfish.jpg", cAlternateFileName="JELLYF~1.JPG")) returned 1 [0135.453] FindNextFileW (in: hFindFile=0x381b80, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8031a7b6, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x7be84d57, ftLastAccessTime.dwHighDateTime=0x1ca0444, ftLastWriteTime.dwLowDateTime=0x1de34580, ftLastWriteTime.dwHighDateTime=0x1d6eb7f, nFileSizeHigh=0x0, nFileSizeLow=0xbea20, dwReserved0=0x0, dwReserved1=0x0, cFileName="Koala.jpg", cAlternateFileName="")) returned 1 [0135.453] FindNextFileW (in: hFindFile=0x381b80, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x80340916, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x7beaaeb8, ftLastAccessTime.dwHighDateTime=0x1ca0444, ftLastWriteTime.dwLowDateTime=0x1df18dc0, ftLastWriteTime.dwHighDateTime=0x1d6eb7f, nFileSizeHigh=0x0, nFileSizeLow=0x89080, dwReserved0=0x0, dwReserved1=0x0, cFileName="Lighthouse.jpg", cAlternateFileName="LIGHTH~1.JPG")) returned 1 [0135.453] FindNextFileW (in: hFindFile=0x381b80, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8031a7b6, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x7be84d57, ftLastAccessTime.dwHighDateTime=0x1ca0444, ftLastWriteTime.dwLowDateTime=0x1e023760, ftLastWriteTime.dwHighDateTime=0x1d6eb7f, nFileSizeHigh=0x0, nFileSizeLow=0xbde70, dwReserved0=0x0, dwReserved1=0x0, cFileName="Penguins.jpg", cAlternateFileName="")) returned 1 [0135.453] FindNextFileW (in: hFindFile=0x381b80, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x80340916, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x7beaaeb8, ftLastAccessTime.dwHighDateTime=0x1ca0444, ftLastWriteTime.dwLowDateTime=0x1e107fa0, ftLastWriteTime.dwHighDateTime=0x1d6eb7f, nFileSizeHigh=0x0, nFileSizeLow=0x97960, dwReserved0=0x0, dwReserved1=0x0, cFileName="Tulips.jpg", cAlternateFileName="")) returned 1 [0135.453] FindNextFileW (in: hFindFile=0x381b80, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0135.453] FindClose (in: hFindFile=0x381b80 | out: hFindFile=0x381b80) returned 1 [0135.453] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e77c) returned 1 [0135.453] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e788) returned 1 [0135.454] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e7bc) returned 1 [0135.454] GetFullPathNameW (in: lpFileName="C:\\Users\\Public\\Pictures\\Sample Pictures", nBufferLength=0x105, lpBuffer=0x31e2c4, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\Public\\Pictures\\Sample Pictures", lpFilePart=0x0) returned 0x28 [0135.454] GetFullPathNameW (in: lpFileName="C:\\Users\\Public\\Pictures\\Sample Pictures\\", nBufferLength=0x105, lpBuffer=0x31e298, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\Public\\Pictures\\Sample Pictures\\", lpFilePart=0x0) returned 0x29 [0135.454] FindFirstFileW (in: lpFileName="C:\\Users\\Public\\Pictures\\Sample Pictures\\*", lpFindFileData=0x31e4e4 | out: lpFindFileData=0x31e4e4*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x7fffaad0, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x80340916, ftLastAccessTime.dwHighDateTime=0x1ca0444, ftLastWriteTime.dwLowDateTime=0x288d31f9, ftLastWriteTime.dwHighDateTime=0x1ca043f, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x381b80 [0135.454] FindNextFileW (in: hFindFile=0x381b80, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x7fffaad0, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x80340916, ftLastAccessTime.dwHighDateTime=0x1ca0444, ftLastWriteTime.dwLowDateTime=0x288d31f9, ftLastWriteTime.dwHighDateTime=0x1ca043f, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0135.454] FindNextFileW (in: hFindFile=0x381b80, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x80340916, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x7beaaeb8, ftLastAccessTime.dwHighDateTime=0x1ca0444, ftLastWriteTime.dwLowDateTime=0x1daa2480, ftLastWriteTime.dwHighDateTime=0x1d6eb7f, nFileSizeHigh=0x0, nFileSizeLow=0xd6b30, dwReserved0=0x0, dwReserved1=0x0, cFileName="Chrysanthemum.jpg", cAlternateFileName="CHRYSA~1.JPG")) returned 1 [0135.454] FindNextFileW (in: hFindFile=0x381b80, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8031a7b6, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x7be84d57, ftLastAccessTime.dwHighDateTime=0x1ca0444, ftLastWriteTime.dwLowDateTime=0x1dbace20, ftLastWriteTime.dwHighDateTime=0x1d6eb7f, nFileSizeHigh=0x0, nFileSizeLow=0xce880, dwReserved0=0x0, dwReserved1=0x0, cFileName="Desert.jpg", cAlternateFileName="")) returned 1 [0135.454] FindNextFileW (in: hFindFile=0x381b80, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0x80340916, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x7beaaeb8, ftLastAccessTime.dwHighDateTime=0x1ca0444, ftLastWriteTime.dwLowDateTime=0x288d31f9, ftLastWriteTime.dwHighDateTime=0x1ca043f, nFileSizeHigh=0x0, nFileSizeLow=0x460, dwReserved0=0x0, dwReserved1=0x0, cFileName="desktop.ini", cAlternateFileName="")) returned 1 [0135.454] FindNextFileW (in: hFindFile=0x381b80, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8031a7b6, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x7be84d57, ftLastAccessTime.dwHighDateTime=0x1ca0444, ftLastWriteTime.dwLowDateTime=0x1dc6b500, ftLastWriteTime.dwHighDateTime=0x1d6eb7f, nFileSizeHigh=0x0, nFileSizeLow=0x91560, dwReserved0=0x0, dwReserved1=0x0, cFileName="Hydrangeas.jpg", cAlternateFileName="HYDRAN~1.JPG")) returned 1 [0135.455] FindNextFileW (in: hFindFile=0x381b80, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8031a7b6, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x7beaaeb8, ftLastAccessTime.dwHighDateTime=0x1ca0444, ftLastWriteTime.dwLowDateTime=0x1dd29be0, ftLastWriteTime.dwHighDateTime=0x1d6eb7f, nFileSizeHigh=0x0, nFileSizeLow=0xbd620, dwReserved0=0x0, dwReserved1=0x0, cFileName="Jellyfish.jpg", cAlternateFileName="JELLYF~1.JPG")) returned 1 [0135.455] FindNextFileW (in: hFindFile=0x381b80, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8031a7b6, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x7be84d57, ftLastAccessTime.dwHighDateTime=0x1ca0444, ftLastWriteTime.dwLowDateTime=0x1de34580, ftLastWriteTime.dwHighDateTime=0x1d6eb7f, nFileSizeHigh=0x0, nFileSizeLow=0xbea20, dwReserved0=0x0, dwReserved1=0x0, cFileName="Koala.jpg", cAlternateFileName="")) returned 1 [0135.456] FindNextFileW (in: hFindFile=0x381b80, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x80340916, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x7beaaeb8, ftLastAccessTime.dwHighDateTime=0x1ca0444, ftLastWriteTime.dwLowDateTime=0x1df18dc0, ftLastWriteTime.dwHighDateTime=0x1d6eb7f, nFileSizeHigh=0x0, nFileSizeLow=0x89080, dwReserved0=0x0, dwReserved1=0x0, cFileName="Lighthouse.jpg", cAlternateFileName="LIGHTH~1.JPG")) returned 1 [0135.456] FindNextFileW (in: hFindFile=0x381b80, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8031a7b6, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x7be84d57, ftLastAccessTime.dwHighDateTime=0x1ca0444, ftLastWriteTime.dwLowDateTime=0x1e023760, ftLastWriteTime.dwHighDateTime=0x1d6eb7f, nFileSizeHigh=0x0, nFileSizeLow=0xbde70, dwReserved0=0x0, dwReserved1=0x0, cFileName="Penguins.jpg", cAlternateFileName="")) returned 1 [0135.456] FindNextFileW (in: hFindFile=0x381b80, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x80340916, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x7beaaeb8, ftLastAccessTime.dwHighDateTime=0x1ca0444, ftLastWriteTime.dwLowDateTime=0x1e107fa0, ftLastWriteTime.dwHighDateTime=0x1d6eb7f, nFileSizeHigh=0x0, nFileSizeLow=0x97960, dwReserved0=0x0, dwReserved1=0x0, cFileName="Tulips.jpg", cAlternateFileName="")) returned 1 [0135.456] FindNextFileW (in: hFindFile=0x381b80, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x80340916, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x7beaaeb8, ftLastAccessTime.dwHighDateTime=0x1ca0444, ftLastWriteTime.dwLowDateTime=0x1e107fa0, ftLastWriteTime.dwHighDateTime=0x1d6eb7f, nFileSizeHigh=0x0, nFileSizeLow=0x97960, dwReserved0=0x0, dwReserved1=0x0, cFileName="Tulips.jpg", cAlternateFileName="")) returned 0 [0135.456] FindClose (in: hFindFile=0x381b80 | out: hFindFile=0x381b80) returned 1 [0135.456] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e77c) returned 1 [0135.456] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e788) returned 1 [0135.457] GetFullPathNameW (in: lpFileName="C:\\Users\\Public\\Pictures\\Sample Pictures\\Chrysanthemum.jpg", nBufferLength=0x105, lpBuffer=0x31e184, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\Public\\Pictures\\Sample Pictures\\Chrysanthemum.jpg", lpFilePart=0x0) returned 0x3a [0135.457] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e678) returned 1 [0135.457] CreateFileW (lpFileName="C:\\Users\\Public\\Pictures\\Sample Pictures\\Chrysanthemum.jpg" (normalized: "c:\\users\\public\\pictures\\sample pictures\\chrysanthemum.jpg"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x274 [0135.457] GetFileType (hFile=0x274) returned 0x1 [0135.457] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e674) returned 1 [0135.457] GetFileType (hFile=0x274) returned 0x1 [0135.457] GetFileSize (in: hFile=0x274, lpFileSizeHigh=0x31e780 | out: lpFileSizeHigh=0x31e780*=0x0) returned 0xd6b30 [0135.459] ReadFile (in: hFile=0x274, lpBuffer=0x78359b8, nNumberOfBytesToRead=0xd6b30, lpNumberOfBytesRead=0x31e72c, lpOverlapped=0x0 | out: lpBuffer=0x78359b8*, lpNumberOfBytesRead=0x31e72c*=0xd6b30, lpOverlapped=0x0) returned 1 [0135.477] CloseHandle (hObject=0x274) returned 1 [0135.513] GetFullPathNameW (in: lpFileName="C:\\Users\\Public\\Pictures\\Sample Pictures\\Chrysanthemum.jpg", nBufferLength=0x105, lpBuffer=0x31e170, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\Public\\Pictures\\Sample Pictures\\Chrysanthemum.jpg", lpFilePart=0x0) returned 0x3a [0135.513] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e664) returned 1 [0135.513] CreateFileW (lpFileName="C:\\Users\\Public\\Pictures\\Sample Pictures\\Chrysanthemum.jpg" (normalized: "c:\\users\\public\\pictures\\sample pictures\\chrysanthemum.jpg"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x274 [0135.520] GetFileType (hFile=0x274) returned 0x1 [0135.520] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e660) returned 1 [0135.520] GetFileType (hFile=0x274) returned 0x1 [0135.520] WriteFile (in: hFile=0x274, lpBuffer=0x790c508*, nNumberOfBytesToWrite=0xd6b30, lpNumberOfBytesWritten=0x31e720, lpOverlapped=0x0 | out: lpBuffer=0x790c508*, lpNumberOfBytesWritten=0x31e720*=0xd6b30, lpOverlapped=0x0) returned 1 [0135.532] CloseHandle (hObject=0x274) returned 1 [0135.532] GetFullPathNameW (in: lpFileName="C:\\Users\\Public\\Pictures\\Sample Pictures\\Chrysanthemum.jpg", nBufferLength=0x105, lpBuffer=0x31e2a4, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\Public\\Pictures\\Sample Pictures\\Chrysanthemum.jpg", lpFilePart=0x0) returned 0x3a [0135.532] GetFullPathNameW (in: lpFileName="C:\\Users\\Public\\Pictures\\Sample Pictures\\Chrysanthemum.jpg.[neftet@tutanota.com].boom", nBufferLength=0x105, lpBuffer=0x31e2a4, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\Public\\Pictures\\Sample Pictures\\Chrysanthemum.jpg.[neftet@tutanota.com].boom", lpFilePart=0x0) returned 0x55 [0135.532] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e704) returned 1 [0135.532] GetFileAttributesExW (in: lpFileName="C:\\Users\\Public\\Pictures\\Sample Pictures\\Chrysanthemum.jpg" (normalized: "c:\\users\\public\\pictures\\sample pictures\\chrysanthemum.jpg"), fInfoLevelId=0x0, lpFileInformation=0x31e780 | out: lpFileInformation=0x31e780*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x80340916, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x7beaaeb8, ftLastAccessTime.dwHighDateTime=0x1ca0444, ftLastWriteTime.dwLowDateTime=0x34368ae0, ftLastWriteTime.dwHighDateTime=0x1d6eb7f, nFileSizeHigh=0x0, nFileSizeLow=0xd6b30)) returned 1 [0135.532] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e700) returned 1 [0135.532] MoveFileW (lpExistingFileName="C:\\Users\\Public\\Pictures\\Sample Pictures\\Chrysanthemum.jpg" (normalized: "c:\\users\\public\\pictures\\sample pictures\\chrysanthemum.jpg"), lpNewFileName="C:\\Users\\Public\\Pictures\\Sample Pictures\\Chrysanthemum.jpg.[neftet@tutanota.com].boom" (normalized: "c:\\users\\public\\pictures\\sample pictures\\chrysanthemum.jpg.[neftet@tutanota.com].boom")) returned 1 [0135.535] GetFullPathNameW (in: lpFileName="C:\\Users\\Public\\Pictures\\Sample Pictures\\Desert.jpg", nBufferLength=0x105, lpBuffer=0x31e184, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\Public\\Pictures\\Sample Pictures\\Desert.jpg", lpFilePart=0x0) returned 0x33 [0135.535] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e678) returned 1 [0135.535] CreateFileW (lpFileName="C:\\Users\\Public\\Pictures\\Sample Pictures\\Desert.jpg" (normalized: "c:\\users\\public\\pictures\\sample pictures\\desert.jpg"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x274 [0135.535] GetFileType (hFile=0x274) returned 0x1 [0135.535] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e674) returned 1 [0135.535] GetFileType (hFile=0x274) returned 0x1 [0135.535] GetFileSize (in: hFile=0x274, lpFileSizeHigh=0x31e780 | out: lpFileSizeHigh=0x31e780*=0x0) returned 0xce880 [0135.537] ReadFile (in: hFile=0x274, lpBuffer=0x79e3058, nNumberOfBytesToRead=0xce880, lpNumberOfBytesRead=0x31e72c, lpOverlapped=0x0 | out: lpBuffer=0x79e3058*, lpNumberOfBytesRead=0x31e72c*=0xce880, lpOverlapped=0x0) returned 1 [0135.568] CloseHandle (hObject=0x274) returned 1 [0135.611] GetFullPathNameW (in: lpFileName="C:\\Users\\Public\\Pictures\\Sample Pictures\\Desert.jpg", nBufferLength=0x105, lpBuffer=0x31e170, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\Public\\Pictures\\Sample Pictures\\Desert.jpg", lpFilePart=0x0) returned 0x33 [0135.611] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e664) returned 1 [0135.611] CreateFileW (lpFileName="C:\\Users\\Public\\Pictures\\Sample Pictures\\Desert.jpg" (normalized: "c:\\users\\public\\pictures\\sample pictures\\desert.jpg"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x274 [0135.618] GetFileType (hFile=0x274) returned 0x1 [0135.618] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e660) returned 1 [0135.618] GetFileType (hFile=0x274) returned 0x1 [0135.618] WriteFile (in: hFile=0x274, lpBuffer=0x7ab18f8*, nNumberOfBytesToWrite=0xce880, lpNumberOfBytesWritten=0x31e720, lpOverlapped=0x0 | out: lpBuffer=0x7ab18f8*, lpNumberOfBytesWritten=0x31e720*=0xce880, lpOverlapped=0x0) returned 1 [0135.631] CloseHandle (hObject=0x274) returned 1 [0135.631] GetFullPathNameW (in: lpFileName="C:\\Users\\Public\\Pictures\\Sample Pictures\\Desert.jpg", nBufferLength=0x105, lpBuffer=0x31e2a4, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\Public\\Pictures\\Sample Pictures\\Desert.jpg", lpFilePart=0x0) returned 0x33 [0135.631] GetFullPathNameW (in: lpFileName="C:\\Users\\Public\\Pictures\\Sample Pictures\\Desert.jpg.[neftet@tutanota.com].boom", nBufferLength=0x105, lpBuffer=0x31e2a4, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\Public\\Pictures\\Sample Pictures\\Desert.jpg.[neftet@tutanota.com].boom", lpFilePart=0x0) returned 0x4e [0135.632] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e704) returned 1 [0135.632] GetFileAttributesExW (in: lpFileName="C:\\Users\\Public\\Pictures\\Sample Pictures\\Desert.jpg" (normalized: "c:\\users\\public\\pictures\\sample pictures\\desert.jpg"), fInfoLevelId=0x0, lpFileInformation=0x31e780 | out: lpFileInformation=0x31e780*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8031a7b6, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x7be84d57, ftLastAccessTime.dwHighDateTime=0x1ca0444, ftLastWriteTime.dwLowDateTime=0x34473480, ftLastWriteTime.dwHighDateTime=0x1d6eb7f, nFileSizeHigh=0x0, nFileSizeLow=0xce880)) returned 1 [0135.632] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e700) returned 1 [0135.632] MoveFileW (lpExistingFileName="C:\\Users\\Public\\Pictures\\Sample Pictures\\Desert.jpg" (normalized: "c:\\users\\public\\pictures\\sample pictures\\desert.jpg"), lpNewFileName="C:\\Users\\Public\\Pictures\\Sample Pictures\\Desert.jpg.[neftet@tutanota.com].boom" (normalized: "c:\\users\\public\\pictures\\sample pictures\\desert.jpg.[neftet@tutanota.com].boom")) returned 1 [0135.632] GetFullPathNameW (in: lpFileName="C:\\Users\\Public\\Pictures\\Sample Pictures\\Hydrangeas.jpg", nBufferLength=0x105, lpBuffer=0x31e184, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\Public\\Pictures\\Sample Pictures\\Hydrangeas.jpg", lpFilePart=0x0) returned 0x37 [0135.632] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e678) returned 1 [0135.633] CreateFileW (lpFileName="C:\\Users\\Public\\Pictures\\Sample Pictures\\Hydrangeas.jpg" (normalized: "c:\\users\\public\\pictures\\sample pictures\\hydrangeas.jpg"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x274 [0135.633] GetFileType (hFile=0x274) returned 0x1 [0135.633] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e674) returned 1 [0135.633] GetFileType (hFile=0x274) returned 0x1 [0135.633] GetFileSize (in: hFile=0x274, lpFileSizeHigh=0x31e780 | out: lpFileSizeHigh=0x31e780*=0x0) returned 0x91560 [0135.847] ReadFile (in: hFile=0x274, lpBuffer=0x36194b0, nNumberOfBytesToRead=0x91560, lpNumberOfBytesRead=0x31e72c, lpOverlapped=0x0 | out: lpBuffer=0x36194b0*, lpNumberOfBytesRead=0x31e72c*=0x91560, lpOverlapped=0x0) returned 1 [0135.854] CloseHandle (hObject=0x274) returned 1 [0135.887] GetFullPathNameW (in: lpFileName="C:\\Users\\Public\\Pictures\\Sample Pictures\\Hydrangeas.jpg", nBufferLength=0x105, lpBuffer=0x31e170, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\Public\\Pictures\\Sample Pictures\\Hydrangeas.jpg", lpFilePart=0x0) returned 0x37 [0135.887] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e664) returned 1 [0135.887] CreateFileW (lpFileName="C:\\Users\\Public\\Pictures\\Sample Pictures\\Hydrangeas.jpg" (normalized: "c:\\users\\public\\pictures\\sample pictures\\hydrangeas.jpg"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x274 [0135.893] GetFileType (hFile=0x274) returned 0x1 [0135.893] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e660) returned 1 [0135.893] GetFileType (hFile=0x274) returned 0x1 [0135.893] WriteFile (in: hFile=0x274, lpBuffer=0x36aaa30*, nNumberOfBytesToWrite=0x91560, lpNumberOfBytesWritten=0x31e720, lpOverlapped=0x0 | out: lpBuffer=0x36aaa30*, lpNumberOfBytesWritten=0x31e720*=0x91560, lpOverlapped=0x0) returned 1 [0135.902] CloseHandle (hObject=0x274) returned 1 [0135.902] GetFullPathNameW (in: lpFileName="C:\\Users\\Public\\Pictures\\Sample Pictures\\Hydrangeas.jpg", nBufferLength=0x105, lpBuffer=0x31e2a4, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\Public\\Pictures\\Sample Pictures\\Hydrangeas.jpg", lpFilePart=0x0) returned 0x37 [0135.902] GetFullPathNameW (in: lpFileName="C:\\Users\\Public\\Pictures\\Sample Pictures\\Hydrangeas.jpg.[neftet@tutanota.com].boom", nBufferLength=0x105, lpBuffer=0x31e2a4, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\Public\\Pictures\\Sample Pictures\\Hydrangeas.jpg.[neftet@tutanota.com].boom", lpFilePart=0x0) returned 0x52 [0135.902] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e704) returned 1 [0135.902] GetFileAttributesExW (in: lpFileName="C:\\Users\\Public\\Pictures\\Sample Pictures\\Hydrangeas.jpg" (normalized: "c:\\users\\public\\pictures\\sample pictures\\hydrangeas.jpg"), fInfoLevelId=0x0, lpFileInformation=0x31e780 | out: lpFileInformation=0x31e780*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8031a7b6, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x7be84d57, ftLastAccessTime.dwHighDateTime=0x1ca0444, ftLastWriteTime.dwLowDateTime=0x346fabe0, ftLastWriteTime.dwHighDateTime=0x1d6eb7f, nFileSizeHigh=0x0, nFileSizeLow=0x91560)) returned 1 [0135.902] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e700) returned 1 [0135.902] MoveFileW (lpExistingFileName="C:\\Users\\Public\\Pictures\\Sample Pictures\\Hydrangeas.jpg" (normalized: "c:\\users\\public\\pictures\\sample pictures\\hydrangeas.jpg"), lpNewFileName="C:\\Users\\Public\\Pictures\\Sample Pictures\\Hydrangeas.jpg.[neftet@tutanota.com].boom" (normalized: "c:\\users\\public\\pictures\\sample pictures\\hydrangeas.jpg.[neftet@tutanota.com].boom")) returned 1 [0135.903] GetFullPathNameW (in: lpFileName="C:\\Users\\Public\\Pictures\\Sample Pictures\\Jellyfish.jpg", nBufferLength=0x105, lpBuffer=0x31e184, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\Public\\Pictures\\Sample Pictures\\Jellyfish.jpg", lpFilePart=0x0) returned 0x36 [0135.903] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e678) returned 1 [0135.903] CreateFileW (lpFileName="C:\\Users\\Public\\Pictures\\Sample Pictures\\Jellyfish.jpg" (normalized: "c:\\users\\public\\pictures\\sample pictures\\jellyfish.jpg"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x274 [0135.903] GetFileType (hFile=0x274) returned 0x1 [0135.903] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e674) returned 1 [0135.903] GetFileType (hFile=0x274) returned 0x1 [0135.903] GetFileSize (in: hFile=0x274, lpFileSizeHigh=0x31e780 | out: lpFileSizeHigh=0x31e780*=0x0) returned 0xbd620 [0135.903] ReadFile (in: hFile=0x274, lpBuffer=0x373bfb0, nNumberOfBytesToRead=0xbd620, lpNumberOfBytesRead=0x31e72c, lpOverlapped=0x0 | out: lpBuffer=0x373bfb0*, lpNumberOfBytesRead=0x31e72c*=0xbd620, lpOverlapped=0x0) returned 1 [0135.913] CloseHandle (hObject=0x274) returned 1 [0135.945] GetFullPathNameW (in: lpFileName="C:\\Users\\Public\\Pictures\\Sample Pictures\\Jellyfish.jpg", nBufferLength=0x105, lpBuffer=0x31e170, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\Public\\Pictures\\Sample Pictures\\Jellyfish.jpg", lpFilePart=0x0) returned 0x36 [0135.945] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e664) returned 1 [0135.945] CreateFileW (lpFileName="C:\\Users\\Public\\Pictures\\Sample Pictures\\Jellyfish.jpg" (normalized: "c:\\users\\public\\pictures\\sample pictures\\jellyfish.jpg"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x274 [0135.952] GetFileType (hFile=0x274) returned 0x1 [0135.952] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e660) returned 1 [0135.952] GetFileType (hFile=0x274) returned 0x1 [0135.952] WriteFile (in: hFile=0x274, lpBuffer=0x37f95f0*, nNumberOfBytesToWrite=0xbd620, lpNumberOfBytesWritten=0x31e720, lpOverlapped=0x0 | out: lpBuffer=0x37f95f0*, lpNumberOfBytesWritten=0x31e720*=0xbd620, lpOverlapped=0x0) returned 1 [0135.963] CloseHandle (hObject=0x274) returned 1 [0135.963] GetFullPathNameW (in: lpFileName="C:\\Users\\Public\\Pictures\\Sample Pictures\\Jellyfish.jpg", nBufferLength=0x105, lpBuffer=0x31e2a4, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\Public\\Pictures\\Sample Pictures\\Jellyfish.jpg", lpFilePart=0x0) returned 0x36 [0135.963] GetFullPathNameW (in: lpFileName="C:\\Users\\Public\\Pictures\\Sample Pictures\\Jellyfish.jpg.[neftet@tutanota.com].boom", nBufferLength=0x105, lpBuffer=0x31e2a4, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\Public\\Pictures\\Sample Pictures\\Jellyfish.jpg.[neftet@tutanota.com].boom", lpFilePart=0x0) returned 0x51 [0135.963] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e704) returned 1 [0135.963] GetFileAttributesExW (in: lpFileName="C:\\Users\\Public\\Pictures\\Sample Pictures\\Jellyfish.jpg" (normalized: "c:\\users\\public\\pictures\\sample pictures\\jellyfish.jpg"), fInfoLevelId=0x0, lpFileInformation=0x31e780 | out: lpFileInformation=0x31e780*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8031a7b6, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x7beaaeb8, ftLastAccessTime.dwHighDateTime=0x1ca0444, ftLastWriteTime.dwLowDateTime=0x34793160, ftLastWriteTime.dwHighDateTime=0x1d6eb7f, nFileSizeHigh=0x0, nFileSizeLow=0xbd620)) returned 1 [0135.964] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e700) returned 1 [0135.964] MoveFileW (lpExistingFileName="C:\\Users\\Public\\Pictures\\Sample Pictures\\Jellyfish.jpg" (normalized: "c:\\users\\public\\pictures\\sample pictures\\jellyfish.jpg"), lpNewFileName="C:\\Users\\Public\\Pictures\\Sample Pictures\\Jellyfish.jpg.[neftet@tutanota.com].boom" (normalized: "c:\\users\\public\\pictures\\sample pictures\\jellyfish.jpg.[neftet@tutanota.com].boom")) returned 1 [0135.964] GetFullPathNameW (in: lpFileName="C:\\Users\\Public\\Pictures\\Sample Pictures\\Koala.jpg", nBufferLength=0x105, lpBuffer=0x31e184, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\Public\\Pictures\\Sample Pictures\\Koala.jpg", lpFilePart=0x0) returned 0x32 [0135.964] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e678) returned 1 [0135.964] CreateFileW (lpFileName="C:\\Users\\Public\\Pictures\\Sample Pictures\\Koala.jpg" (normalized: "c:\\users\\public\\pictures\\sample pictures\\koala.jpg"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x274 [0135.965] GetFileType (hFile=0x274) returned 0x1 [0135.965] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e674) returned 1 [0135.965] GetFileType (hFile=0x274) returned 0x1 [0135.965] GetFileSize (in: hFile=0x274, lpFileSizeHigh=0x31e780 | out: lpFileSizeHigh=0x31e780*=0x0) returned 0xbea20 [0135.965] ReadFile (in: hFile=0x274, lpBuffer=0x38b6c30, nNumberOfBytesToRead=0xbea20, lpNumberOfBytesRead=0x31e72c, lpOverlapped=0x0 | out: lpBuffer=0x38b6c30*, lpNumberOfBytesRead=0x31e72c*=0xbea20, lpOverlapped=0x0) returned 1 [0135.977] CloseHandle (hObject=0x274) returned 1 [0136.050] GetFullPathNameW (in: lpFileName="C:\\Users\\Public\\Pictures\\Sample Pictures\\Koala.jpg", nBufferLength=0x105, lpBuffer=0x31e170, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\Public\\Pictures\\Sample Pictures\\Koala.jpg", lpFilePart=0x0) returned 0x32 [0136.050] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e664) returned 1 [0136.050] CreateFileW (lpFileName="C:\\Users\\Public\\Pictures\\Sample Pictures\\Koala.jpg" (normalized: "c:\\users\\public\\pictures\\sample pictures\\koala.jpg"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x274 [0136.056] GetFileType (hFile=0x274) returned 0x1 [0136.057] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e660) returned 1 [0136.057] GetFileType (hFile=0x274) returned 0x1 [0136.057] WriteFile (in: hFile=0x274, lpBuffer=0x36194b0*, nNumberOfBytesToWrite=0xbea20, lpNumberOfBytesWritten=0x31e720, lpOverlapped=0x0 | out: lpBuffer=0x36194b0*, lpNumberOfBytesWritten=0x31e720*=0xbea20, lpOverlapped=0x0) returned 1 [0136.069] CloseHandle (hObject=0x274) returned 1 [0136.069] GetFullPathNameW (in: lpFileName="C:\\Users\\Public\\Pictures\\Sample Pictures\\Koala.jpg", nBufferLength=0x105, lpBuffer=0x31e2a4, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\Public\\Pictures\\Sample Pictures\\Koala.jpg", lpFilePart=0x0) returned 0x32 [0136.069] GetFullPathNameW (in: lpFileName="C:\\Users\\Public\\Pictures\\Sample Pictures\\Koala.jpg.[neftet@tutanota.com].boom", nBufferLength=0x105, lpBuffer=0x31e2a4, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\Public\\Pictures\\Sample Pictures\\Koala.jpg.[neftet@tutanota.com].boom", lpFilePart=0x0) returned 0x4d [0136.069] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e704) returned 1 [0136.070] GetFileAttributesExW (in: lpFileName="C:\\Users\\Public\\Pictures\\Sample Pictures\\Koala.jpg" (normalized: "c:\\users\\public\\pictures\\sample pictures\\koala.jpg"), fInfoLevelId=0x0, lpFileInformation=0x31e780 | out: lpFileInformation=0x31e780*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8031a7b6, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x7be84d57, ftLastAccessTime.dwHighDateTime=0x1ca0444, ftLastWriteTime.dwLowDateTime=0x3489db00, ftLastWriteTime.dwHighDateTime=0x1d6eb7f, nFileSizeHigh=0x0, nFileSizeLow=0xbea20)) returned 1 [0136.070] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e700) returned 1 [0136.070] MoveFileW (lpExistingFileName="C:\\Users\\Public\\Pictures\\Sample Pictures\\Koala.jpg" (normalized: "c:\\users\\public\\pictures\\sample pictures\\koala.jpg"), lpNewFileName="C:\\Users\\Public\\Pictures\\Sample Pictures\\Koala.jpg.[neftet@tutanota.com].boom" (normalized: "c:\\users\\public\\pictures\\sample pictures\\koala.jpg.[neftet@tutanota.com].boom")) returned 1 [0136.070] GetFullPathNameW (in: lpFileName="C:\\Users\\Public\\Pictures\\Sample Pictures\\Lighthouse.jpg", nBufferLength=0x105, lpBuffer=0x31e184, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\Public\\Pictures\\Sample Pictures\\Lighthouse.jpg", lpFilePart=0x0) returned 0x37 [0136.071] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e678) returned 1 [0136.071] CreateFileW (lpFileName="C:\\Users\\Public\\Pictures\\Sample Pictures\\Lighthouse.jpg" (normalized: "c:\\users\\public\\pictures\\sample pictures\\lighthouse.jpg"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x274 [0136.071] GetFileType (hFile=0x274) returned 0x1 [0136.071] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e674) returned 1 [0136.071] GetFileType (hFile=0x274) returned 0x1 [0136.071] GetFileSize (in: hFile=0x274, lpFileSizeHigh=0x31e780 | out: lpFileSizeHigh=0x31e780*=0x0) returned 0x89080 [0136.071] ReadFile (in: hFile=0x274, lpBuffer=0x36d7ef0, nNumberOfBytesToRead=0x89080, lpNumberOfBytesRead=0x31e72c, lpOverlapped=0x0 | out: lpBuffer=0x36d7ef0*, lpNumberOfBytesRead=0x31e72c*=0x89080, lpOverlapped=0x0) returned 1 [0136.075] CloseHandle (hObject=0x274) returned 1 [0136.088] GetFullPathNameW (in: lpFileName="C:\\Users\\Public\\Pictures\\Sample Pictures\\Lighthouse.jpg", nBufferLength=0x105, lpBuffer=0x31e170, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\Public\\Pictures\\Sample Pictures\\Lighthouse.jpg", lpFilePart=0x0) returned 0x37 [0136.088] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e664) returned 1 [0136.088] CreateFileW (lpFileName="C:\\Users\\Public\\Pictures\\Sample Pictures\\Lighthouse.jpg" (normalized: "c:\\users\\public\\pictures\\sample pictures\\lighthouse.jpg"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x274 [0136.093] GetFileType (hFile=0x274) returned 0x1 [0136.093] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e660) returned 1 [0136.093] GetFileType (hFile=0x274) returned 0x1 [0136.093] WriteFile (in: hFile=0x274, lpBuffer=0x3760f90*, nNumberOfBytesToWrite=0x89080, lpNumberOfBytesWritten=0x31e720, lpOverlapped=0x0 | out: lpBuffer=0x3760f90*, lpNumberOfBytesWritten=0x31e720*=0x89080, lpOverlapped=0x0) returned 1 [0136.126] CloseHandle (hObject=0x274) returned 1 [0136.127] GetFullPathNameW (in: lpFileName="C:\\Users\\Public\\Pictures\\Sample Pictures\\Lighthouse.jpg", nBufferLength=0x105, lpBuffer=0x31e2a4, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\Public\\Pictures\\Sample Pictures\\Lighthouse.jpg", lpFilePart=0x0) returned 0x37 [0136.127] GetFullPathNameW (in: lpFileName="C:\\Users\\Public\\Pictures\\Sample Pictures\\Lighthouse.jpg.[neftet@tutanota.com].boom", nBufferLength=0x105, lpBuffer=0x31e2a4, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\Public\\Pictures\\Sample Pictures\\Lighthouse.jpg.[neftet@tutanota.com].boom", lpFilePart=0x0) returned 0x52 [0136.127] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e704) returned 1 [0136.127] GetFileAttributesExW (in: lpFileName="C:\\Users\\Public\\Pictures\\Sample Pictures\\Lighthouse.jpg" (normalized: "c:\\users\\public\\pictures\\sample pictures\\lighthouse.jpg"), fInfoLevelId=0x0, lpFileInformation=0x31e780 | out: lpFileInformation=0x31e780*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x80340916, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x7beaaeb8, ftLastAccessTime.dwHighDateTime=0x1ca0444, ftLastWriteTime.dwLowDateTime=0x34936080, ftLastWriteTime.dwHighDateTime=0x1d6eb7f, nFileSizeHigh=0x0, nFileSizeLow=0x89080)) returned 1 [0136.127] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e700) returned 1 [0136.127] MoveFileW (lpExistingFileName="C:\\Users\\Public\\Pictures\\Sample Pictures\\Lighthouse.jpg" (normalized: "c:\\users\\public\\pictures\\sample pictures\\lighthouse.jpg"), lpNewFileName="C:\\Users\\Public\\Pictures\\Sample Pictures\\Lighthouse.jpg.[neftet@tutanota.com].boom" (normalized: "c:\\users\\public\\pictures\\sample pictures\\lighthouse.jpg.[neftet@tutanota.com].boom")) returned 1 [0136.193] GetFullPathNameW (in: lpFileName="C:\\Users\\Public\\Pictures\\Sample Pictures\\Penguins.jpg", nBufferLength=0x105, lpBuffer=0x31e184, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\Public\\Pictures\\Sample Pictures\\Penguins.jpg", lpFilePart=0x0) returned 0x35 [0136.193] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e678) returned 1 [0136.193] CreateFileW (lpFileName="C:\\Users\\Public\\Pictures\\Sample Pictures\\Penguins.jpg" (normalized: "c:\\users\\public\\pictures\\sample pictures\\penguins.jpg"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x274 [0136.193] GetFileType (hFile=0x274) returned 0x1 [0136.193] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e674) returned 1 [0136.193] GetFileType (hFile=0x274) returned 0x1 [0136.193] GetFileSize (in: hFile=0x274, lpFileSizeHigh=0x31e780 | out: lpFileSizeHigh=0x31e780*=0x0) returned 0xbde70 [0136.194] ReadFile (in: hFile=0x274, lpBuffer=0x37ea030, nNumberOfBytesToRead=0xbde70, lpNumberOfBytesRead=0x31e72c, lpOverlapped=0x0 | out: lpBuffer=0x37ea030*, lpNumberOfBytesRead=0x31e72c*=0xbde70, lpOverlapped=0x0) returned 1 [0136.198] CloseHandle (hObject=0x274) returned 1 [0136.226] GetFullPathNameW (in: lpFileName="C:\\Users\\Public\\Pictures\\Sample Pictures\\Penguins.jpg", nBufferLength=0x105, lpBuffer=0x31e170, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\Public\\Pictures\\Sample Pictures\\Penguins.jpg", lpFilePart=0x0) returned 0x35 [0136.226] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e664) returned 1 [0136.226] CreateFileW (lpFileName="C:\\Users\\Public\\Pictures\\Sample Pictures\\Penguins.jpg" (normalized: "c:\\users\\public\\pictures\\sample pictures\\penguins.jpg"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x274 [0136.232] GetFileType (hFile=0x274) returned 0x1 [0136.232] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e660) returned 1 [0136.232] GetFileType (hFile=0x274) returned 0x1 [0136.232] WriteFile (in: hFile=0x274, lpBuffer=0x3975670*, nNumberOfBytesToWrite=0xbde70, lpNumberOfBytesWritten=0x31e720, lpOverlapped=0x0 | out: lpBuffer=0x3975670*, lpNumberOfBytesWritten=0x31e720*=0xbde70, lpOverlapped=0x0) returned 1 [0136.243] CloseHandle (hObject=0x274) returned 1 [0136.243] GetFullPathNameW (in: lpFileName="C:\\Users\\Public\\Pictures\\Sample Pictures\\Penguins.jpg", nBufferLength=0x105, lpBuffer=0x31e2a4, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\Public\\Pictures\\Sample Pictures\\Penguins.jpg", lpFilePart=0x0) returned 0x35 [0136.244] GetFullPathNameW (in: lpFileName="C:\\Users\\Public\\Pictures\\Sample Pictures\\Penguins.jpg.[neftet@tutanota.com].boom", nBufferLength=0x105, lpBuffer=0x31e2a4, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\Public\\Pictures\\Sample Pictures\\Penguins.jpg.[neftet@tutanota.com].boom", lpFilePart=0x0) returned 0x50 [0136.244] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e704) returned 1 [0136.244] GetFileAttributesExW (in: lpFileName="C:\\Users\\Public\\Pictures\\Sample Pictures\\Penguins.jpg" (normalized: "c:\\users\\public\\pictures\\sample pictures\\penguins.jpg"), fInfoLevelId=0x0, lpFileInformation=0x31e780 | out: lpFileInformation=0x31e780*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8031a7b6, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x7be84d57, ftLastAccessTime.dwHighDateTime=0x1ca0444, ftLastWriteTime.dwLowDateTime=0x34a40a20, ftLastWriteTime.dwHighDateTime=0x1d6eb7f, nFileSizeHigh=0x0, nFileSizeLow=0xbde70)) returned 1 [0136.244] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e700) returned 1 [0136.244] MoveFileW (lpExistingFileName="C:\\Users\\Public\\Pictures\\Sample Pictures\\Penguins.jpg" (normalized: "c:\\users\\public\\pictures\\sample pictures\\penguins.jpg"), lpNewFileName="C:\\Users\\Public\\Pictures\\Sample Pictures\\Penguins.jpg.[neftet@tutanota.com].boom" (normalized: "c:\\users\\public\\pictures\\sample pictures\\penguins.jpg.[neftet@tutanota.com].boom")) returned 1 [0136.244] GetFullPathNameW (in: lpFileName="C:\\Users\\Public\\Pictures\\Sample Pictures\\Tulips.jpg", nBufferLength=0x105, lpBuffer=0x31e184, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\Public\\Pictures\\Sample Pictures\\Tulips.jpg", lpFilePart=0x0) returned 0x33 [0136.244] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e678) returned 1 [0136.245] CreateFileW (lpFileName="C:\\Users\\Public\\Pictures\\Sample Pictures\\Tulips.jpg" (normalized: "c:\\users\\public\\pictures\\sample pictures\\tulips.jpg"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x274 [0136.245] GetFileType (hFile=0x274) returned 0x1 [0136.245] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e674) returned 1 [0136.245] GetFileType (hFile=0x274) returned 0x1 [0136.245] GetFileSize (in: hFile=0x274, lpFileSizeHigh=0x31e780 | out: lpFileSizeHigh=0x31e780*=0x0) returned 0x97960 [0136.246] ReadFile (in: hFile=0x274, lpBuffer=0x3a33500, nNumberOfBytesToRead=0x97960, lpNumberOfBytesRead=0x31e72c, lpOverlapped=0x0 | out: lpBuffer=0x3a33500*, lpNumberOfBytesRead=0x31e72c*=0x97960, lpOverlapped=0x0) returned 1 [0136.254] CloseHandle (hObject=0x274) returned 1 [0136.286] GetFullPathNameW (in: lpFileName="C:\\Users\\Public\\Pictures\\Sample Pictures\\Tulips.jpg", nBufferLength=0x105, lpBuffer=0x31e170, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\Public\\Pictures\\Sample Pictures\\Tulips.jpg", lpFilePart=0x0) returned 0x33 [0136.286] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e664) returned 1 [0136.286] CreateFileW (lpFileName="C:\\Users\\Public\\Pictures\\Sample Pictures\\Tulips.jpg" (normalized: "c:\\users\\public\\pictures\\sample pictures\\tulips.jpg"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x274 [0136.291] GetFileType (hFile=0x274) returned 0x1 [0136.291] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e660) returned 1 [0136.291] GetFileType (hFile=0x274) returned 0x1 [0136.291] WriteFile (in: hFile=0x274, lpBuffer=0x3acae80*, nNumberOfBytesToWrite=0x97960, lpNumberOfBytesWritten=0x31e720, lpOverlapped=0x0 | out: lpBuffer=0x3acae80*, lpNumberOfBytesWritten=0x31e720*=0x97960, lpOverlapped=0x0) returned 1 [0136.301] CloseHandle (hObject=0x274) returned 1 [0136.301] GetFullPathNameW (in: lpFileName="C:\\Users\\Public\\Pictures\\Sample Pictures\\Tulips.jpg", nBufferLength=0x105, lpBuffer=0x31e2a4, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\Public\\Pictures\\Sample Pictures\\Tulips.jpg", lpFilePart=0x0) returned 0x33 [0136.301] GetFullPathNameW (in: lpFileName="C:\\Users\\Public\\Pictures\\Sample Pictures\\Tulips.jpg.[neftet@tutanota.com].boom", nBufferLength=0x105, lpBuffer=0x31e2a4, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\Public\\Pictures\\Sample Pictures\\Tulips.jpg.[neftet@tutanota.com].boom", lpFilePart=0x0) returned 0x4e [0136.301] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e704) returned 1 [0136.301] GetFileAttributesExW (in: lpFileName="C:\\Users\\Public\\Pictures\\Sample Pictures\\Tulips.jpg" (normalized: "c:\\users\\public\\pictures\\sample pictures\\tulips.jpg"), fInfoLevelId=0x0, lpFileInformation=0x31e780 | out: lpFileInformation=0x31e780*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x80340916, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x7beaaeb8, ftLastAccessTime.dwHighDateTime=0x1ca0444, ftLastWriteTime.dwLowDateTime=0x34ad8fa0, ftLastWriteTime.dwHighDateTime=0x1d6eb7f, nFileSizeHigh=0x0, nFileSizeLow=0x97960)) returned 1 [0136.301] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e700) returned 1 [0136.301] MoveFileW (lpExistingFileName="C:\\Users\\Public\\Pictures\\Sample Pictures\\Tulips.jpg" (normalized: "c:\\users\\public\\pictures\\sample pictures\\tulips.jpg"), lpNewFileName="C:\\Users\\Public\\Pictures\\Sample Pictures\\Tulips.jpg.[neftet@tutanota.com].boom" (normalized: "c:\\users\\public\\pictures\\sample pictures\\tulips.jpg.[neftet@tutanota.com].boom")) returned 1 [0136.302] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e834) returned 1 [0136.302] GetFullPathNameW (in: lpFileName="C:\\Users\\Public\\Recorded TV", nBufferLength=0x105, lpBuffer=0x31e33c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\Public\\Recorded TV", lpFilePart=0x0) returned 0x1b [0136.302] GetFullPathNameW (in: lpFileName="C:\\Users\\Public\\Recorded TV\\", nBufferLength=0x105, lpBuffer=0x31e310, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\Public\\Recorded TV\\", lpFilePart=0x0) returned 0x1c [0136.302] FindFirstFileW (in: lpFileName="C:\\Users\\Public\\Recorded TV\\*", lpFindFileData=0x31e55c | out: lpFindFileData=0x31e55c*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x917fa2ee, ftCreationTime.dwHighDateTime=0x1cbf8eb, ftLastAccessTime.dwLowDateTime=0xaa597fc2, ftLastAccessTime.dwHighDateTime=0x1cbf8eb, ftLastWriteTime.dwLowDateTime=0x917fa2ee, ftLastWriteTime.dwHighDateTime=0x1cbf8eb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x381b80 [0136.303] FindNextFileW (in: hFindFile=0x381b80, lpFindFileData=0x31e56c | out: lpFindFileData=0x31e56c*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x917fa2ee, ftCreationTime.dwHighDateTime=0x1cbf8eb, ftLastAccessTime.dwLowDateTime=0xaa597fc2, ftLastAccessTime.dwHighDateTime=0x1cbf8eb, ftLastWriteTime.dwLowDateTime=0x917fa2ee, ftLastWriteTime.dwHighDateTime=0x1cbf8eb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0136.303] FindNextFileW (in: hFindFile=0x381b80, lpFindFileData=0x31e56c | out: lpFindFileData=0x31e56c*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0x917fa2ee, ftCreationTime.dwHighDateTime=0x1cbf8eb, ftLastAccessTime.dwLowDateTime=0x89e5e11e, ftLastAccessTime.dwHighDateTime=0x1cbf8eb, ftLastWriteTime.dwLowDateTime=0x89e5e11e, ftLastWriteTime.dwHighDateTime=0x1cbf8eb, nFileSizeHigh=0x0, nFileSizeLow=0x50, dwReserved0=0x0, dwReserved1=0x0, cFileName="desktop.ini", cAlternateFileName="")) returned 1 [0136.303] FindNextFileW (in: hFindFile=0x381b80, lpFindFileData=0x31e56c | out: lpFindFileData=0x31e56c*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x917fa2ee, ftCreationTime.dwHighDateTime=0x1cbf8eb, ftLastAccessTime.dwLowDateTime=0xaa597fc2, ftLastAccessTime.dwHighDateTime=0x1cbf8eb, ftLastWriteTime.dwLowDateTime=0x917fa2ee, ftLastWriteTime.dwHighDateTime=0x1cbf8eb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Sample Media", cAlternateFileName="SAMPLE~1")) returned 1 [0136.303] FindNextFileW (in: hFindFile=0x381b80, lpFindFileData=0x31e56c | out: lpFindFileData=0x31e56c*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x917fa2ee, ftCreationTime.dwHighDateTime=0x1cbf8eb, ftLastAccessTime.dwLowDateTime=0xaa597fc2, ftLastAccessTime.dwHighDateTime=0x1cbf8eb, ftLastWriteTime.dwLowDateTime=0x917fa2ee, ftLastWriteTime.dwHighDateTime=0x1cbf8eb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Sample Media", cAlternateFileName="SAMPLE~1")) returned 0 [0136.303] FindClose (in: hFindFile=0x381b80 | out: hFindFile=0x381b80) returned 1 [0136.303] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e7f4) returned 1 [0136.303] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e800) returned 1 [0136.303] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e834) returned 1 [0136.303] GetFullPathNameW (in: lpFileName="C:\\Users\\Public\\Recorded TV", nBufferLength=0x105, lpBuffer=0x31e33c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\Public\\Recorded TV", lpFilePart=0x0) returned 0x1b [0136.303] GetFullPathNameW (in: lpFileName="C:\\Users\\Public\\Recorded TV\\", nBufferLength=0x105, lpBuffer=0x31e310, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\Public\\Recorded TV\\", lpFilePart=0x0) returned 0x1c [0136.303] FindFirstFileW (in: lpFileName="C:\\Users\\Public\\Recorded TV\\*", lpFindFileData=0x31e55c | out: lpFindFileData=0x31e55c*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x917fa2ee, ftCreationTime.dwHighDateTime=0x1cbf8eb, ftLastAccessTime.dwLowDateTime=0xaa597fc2, ftLastAccessTime.dwHighDateTime=0x1cbf8eb, ftLastWriteTime.dwLowDateTime=0x917fa2ee, ftLastWriteTime.dwHighDateTime=0x1cbf8eb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x381b80 [0136.304] FindNextFileW (in: hFindFile=0x381b80, lpFindFileData=0x31e56c | out: lpFindFileData=0x31e56c*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x917fa2ee, ftCreationTime.dwHighDateTime=0x1cbf8eb, ftLastAccessTime.dwLowDateTime=0xaa597fc2, ftLastAccessTime.dwHighDateTime=0x1cbf8eb, ftLastWriteTime.dwLowDateTime=0x917fa2ee, ftLastWriteTime.dwHighDateTime=0x1cbf8eb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0136.304] FindNextFileW (in: hFindFile=0x381b80, lpFindFileData=0x31e56c | out: lpFindFileData=0x31e56c*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0x917fa2ee, ftCreationTime.dwHighDateTime=0x1cbf8eb, ftLastAccessTime.dwLowDateTime=0x89e5e11e, ftLastAccessTime.dwHighDateTime=0x1cbf8eb, ftLastWriteTime.dwLowDateTime=0x89e5e11e, ftLastWriteTime.dwHighDateTime=0x1cbf8eb, nFileSizeHigh=0x0, nFileSizeLow=0x50, dwReserved0=0x0, dwReserved1=0x0, cFileName="desktop.ini", cAlternateFileName="")) returned 1 [0136.304] FindNextFileW (in: hFindFile=0x381b80, lpFindFileData=0x31e56c | out: lpFindFileData=0x31e56c*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x917fa2ee, ftCreationTime.dwHighDateTime=0x1cbf8eb, ftLastAccessTime.dwLowDateTime=0xaa597fc2, ftLastAccessTime.dwHighDateTime=0x1cbf8eb, ftLastWriteTime.dwLowDateTime=0x917fa2ee, ftLastWriteTime.dwHighDateTime=0x1cbf8eb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Sample Media", cAlternateFileName="SAMPLE~1")) returned 1 [0136.304] FindNextFileW (in: hFindFile=0x381b80, lpFindFileData=0x31e56c | out: lpFindFileData=0x31e56c*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0136.304] FindClose (in: hFindFile=0x381b80 | out: hFindFile=0x381b80) returned 1 [0136.304] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e7f4) returned 1 [0136.304] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e800) returned 1 [0136.304] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e7bc) returned 1 [0136.304] GetFullPathNameW (in: lpFileName="C:\\Users\\Public\\Recorded TV\\Sample Media", nBufferLength=0x105, lpBuffer=0x31e2c4, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\Public\\Recorded TV\\Sample Media", lpFilePart=0x0) returned 0x28 [0136.304] GetFullPathNameW (in: lpFileName="C:\\Users\\Public\\Recorded TV\\Sample Media\\", nBufferLength=0x105, lpBuffer=0x31e298, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\Public\\Recorded TV\\Sample Media\\", lpFilePart=0x0) returned 0x29 [0136.304] FindFirstFileW (in: lpFileName="C:\\Users\\Public\\Recorded TV\\Sample Media\\*", lpFindFileData=0x31e4e4 | out: lpFindFileData=0x31e4e4*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x917fa2ee, ftCreationTime.dwHighDateTime=0x1cbf8eb, ftLastAccessTime.dwLowDateTime=0xaa597fc2, ftLastAccessTime.dwHighDateTime=0x1cbf8eb, ftLastWriteTime.dwLowDateTime=0x917fa2ee, ftLastWriteTime.dwHighDateTime=0x1cbf8eb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x381b80 [0136.305] FindNextFileW (in: hFindFile=0x381b80, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x917fa2ee, ftCreationTime.dwHighDateTime=0x1cbf8eb, ftLastAccessTime.dwLowDateTime=0xaa597fc2, ftLastAccessTime.dwHighDateTime=0x1cbf8eb, ftLastWriteTime.dwLowDateTime=0x917fa2ee, ftLastWriteTime.dwHighDateTime=0x1cbf8eb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0136.305] FindNextFileW (in: hFindFile=0x381b80, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0x917fa2ee, ftCreationTime.dwHighDateTime=0x1cbf8eb, ftLastAccessTime.dwLowDateTime=0x8a1f1b86, ftLastAccessTime.dwHighDateTime=0x1cbf8eb, ftLastWriteTime.dwLowDateTime=0x8a1f1b86, ftLastWriteTime.dwHighDateTime=0x1cbf8eb, nFileSizeHigh=0x0, nFileSizeLow=0xab, dwReserved0=0x0, dwReserved1=0x0, cFileName="desktop.ini", cAlternateFileName="")) returned 1 [0136.305] FindNextFileW (in: hFindFile=0x381b80, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x917fa2ee, ftCreationTime.dwHighDateTime=0x1cbf8eb, ftLastAccessTime.dwLowDateTime=0x8a1f1b86, ftLastAccessTime.dwHighDateTime=0x1cbf8eb, ftLastWriteTime.dwLowDateTime=0x8a1f1b86, ftLastWriteTime.dwHighDateTime=0x1cbf8eb, nFileSizeHigh=0x0, nFileSizeLow=0x940000, dwReserved0=0x0, dwReserved1=0x0, cFileName="win7_scenic-demoshort_raw.wtv", cAlternateFileName="WIN7_S~1.WTV")) returned 1 [0136.305] FindNextFileW (in: hFindFile=0x381b80, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0136.305] FindClose (in: hFindFile=0x381b80 | out: hFindFile=0x381b80) returned 1 [0136.305] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e77c) returned 1 [0136.305] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e788) returned 1 [0136.305] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e7bc) returned 1 [0136.305] GetFullPathNameW (in: lpFileName="C:\\Users\\Public\\Recorded TV\\Sample Media", nBufferLength=0x105, lpBuffer=0x31e2c4, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\Public\\Recorded TV\\Sample Media", lpFilePart=0x0) returned 0x28 [0136.305] GetFullPathNameW (in: lpFileName="C:\\Users\\Public\\Recorded TV\\Sample Media\\", nBufferLength=0x105, lpBuffer=0x31e298, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\Public\\Recorded TV\\Sample Media\\", lpFilePart=0x0) returned 0x29 [0136.305] FindFirstFileW (in: lpFileName="C:\\Users\\Public\\Recorded TV\\Sample Media\\*", lpFindFileData=0x31e4e4 | out: lpFindFileData=0x31e4e4*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x917fa2ee, ftCreationTime.dwHighDateTime=0x1cbf8eb, ftLastAccessTime.dwLowDateTime=0xaa597fc2, ftLastAccessTime.dwHighDateTime=0x1cbf8eb, ftLastWriteTime.dwLowDateTime=0x917fa2ee, ftLastWriteTime.dwHighDateTime=0x1cbf8eb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x381b80 [0136.305] FindNextFileW (in: hFindFile=0x381b80, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x917fa2ee, ftCreationTime.dwHighDateTime=0x1cbf8eb, ftLastAccessTime.dwLowDateTime=0xaa597fc2, ftLastAccessTime.dwHighDateTime=0x1cbf8eb, ftLastWriteTime.dwLowDateTime=0x917fa2ee, ftLastWriteTime.dwHighDateTime=0x1cbf8eb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0136.306] FindNextFileW (in: hFindFile=0x381b80, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0x917fa2ee, ftCreationTime.dwHighDateTime=0x1cbf8eb, ftLastAccessTime.dwLowDateTime=0x8a1f1b86, ftLastAccessTime.dwHighDateTime=0x1cbf8eb, ftLastWriteTime.dwLowDateTime=0x8a1f1b86, ftLastWriteTime.dwHighDateTime=0x1cbf8eb, nFileSizeHigh=0x0, nFileSizeLow=0xab, dwReserved0=0x0, dwReserved1=0x0, cFileName="desktop.ini", cAlternateFileName="")) returned 1 [0136.306] FindNextFileW (in: hFindFile=0x381b80, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x917fa2ee, ftCreationTime.dwHighDateTime=0x1cbf8eb, ftLastAccessTime.dwLowDateTime=0x8a1f1b86, ftLastAccessTime.dwHighDateTime=0x1cbf8eb, ftLastWriteTime.dwLowDateTime=0x8a1f1b86, ftLastWriteTime.dwHighDateTime=0x1cbf8eb, nFileSizeHigh=0x0, nFileSizeLow=0x940000, dwReserved0=0x0, dwReserved1=0x0, cFileName="win7_scenic-demoshort_raw.wtv", cAlternateFileName="WIN7_S~1.WTV")) returned 1 [0136.306] FindNextFileW (in: hFindFile=0x381b80, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x917fa2ee, ftCreationTime.dwHighDateTime=0x1cbf8eb, ftLastAccessTime.dwLowDateTime=0x8a1f1b86, ftLastAccessTime.dwHighDateTime=0x1cbf8eb, ftLastWriteTime.dwLowDateTime=0x8a1f1b86, ftLastWriteTime.dwHighDateTime=0x1cbf8eb, nFileSizeHigh=0x0, nFileSizeLow=0x940000, dwReserved0=0x0, dwReserved1=0x0, cFileName="win7_scenic-demoshort_raw.wtv", cAlternateFileName="WIN7_S~1.WTV")) returned 0 [0136.306] FindClose (in: hFindFile=0x381b80 | out: hFindFile=0x381b80) returned 1 [0136.306] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e77c) returned 1 [0136.306] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e788) returned 1 [0136.306] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e834) returned 1 [0136.306] GetFullPathNameW (in: lpFileName="C:\\Users\\Public\\Videos", nBufferLength=0x105, lpBuffer=0x31e33c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\Public\\Videos", lpFilePart=0x0) returned 0x16 [0136.306] GetFullPathNameW (in: lpFileName="C:\\Users\\Public\\Videos\\", nBufferLength=0x105, lpBuffer=0x31e310, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\Public\\Videos\\", lpFilePart=0x0) returned 0x17 [0136.306] FindFirstFileW (in: lpFileName="C:\\Users\\Public\\Videos\\*", lpFindFileData=0x31e55c | out: lpFindFileData=0x31e55c*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0xfdb0c77c, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x282dfaee, ftLastAccessTime.dwHighDateTime=0x1ca043f, ftLastWriteTime.dwLowDateTime=0x28886f39, ftLastWriteTime.dwHighDateTime=0x1ca043f, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x381b80 [0136.306] FindNextFileW (in: hFindFile=0x381b80, lpFindFileData=0x31e56c | out: lpFindFileData=0x31e56c*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0xfdb0c77c, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x282dfaee, ftLastAccessTime.dwHighDateTime=0x1ca043f, ftLastWriteTime.dwLowDateTime=0x28886f39, ftLastWriteTime.dwHighDateTime=0x1ca043f, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0136.307] FindNextFileW (in: hFindFile=0x381b80, lpFindFileData=0x31e56c | out: lpFindFileData=0x31e56c*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0x282dfaee, ftCreationTime.dwHighDateTime=0x1ca043f, ftLastAccessTime.dwLowDateTime=0x282dfaee, ftLastAccessTime.dwHighDateTime=0x1ca043f, ftLastWriteTime.dwLowDateTime=0x28886f39, ftLastWriteTime.dwHighDateTime=0x1ca043f, nFileSizeHigh=0x0, nFileSizeLow=0x17c, dwReserved0=0x0, dwReserved1=0x0, cFileName="desktop.ini", cAlternateFileName="")) returned 1 [0136.307] FindNextFileW (in: hFindFile=0x381b80, lpFindFileData=0x31e56c | out: lpFindFileData=0x31e56c*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x7fffaad0, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x802f4656, ftLastAccessTime.dwHighDateTime=0x1ca0444, ftLastWriteTime.dwLowDateTime=0x288d31f9, ftLastWriteTime.dwHighDateTime=0x1ca043f, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Sample Videos", cAlternateFileName="SAMPLE~1")) returned 1 [0136.307] FindNextFileW (in: hFindFile=0x381b80, lpFindFileData=0x31e56c | out: lpFindFileData=0x31e56c*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x7fffaad0, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x802f4656, ftLastAccessTime.dwHighDateTime=0x1ca0444, ftLastWriteTime.dwLowDateTime=0x288d31f9, ftLastWriteTime.dwHighDateTime=0x1ca043f, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Sample Videos", cAlternateFileName="SAMPLE~1")) returned 0 [0136.307] FindClose (in: hFindFile=0x381b80 | out: hFindFile=0x381b80) returned 1 [0136.307] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e7f4) returned 1 [0136.307] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e800) returned 1 [0136.307] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e834) returned 1 [0136.307] GetFullPathNameW (in: lpFileName="C:\\Users\\Public\\Videos", nBufferLength=0x105, lpBuffer=0x31e33c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\Public\\Videos", lpFilePart=0x0) returned 0x16 [0136.307] GetFullPathNameW (in: lpFileName="C:\\Users\\Public\\Videos\\", nBufferLength=0x105, lpBuffer=0x31e310, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\Public\\Videos\\", lpFilePart=0x0) returned 0x17 [0136.307] FindFirstFileW (in: lpFileName="C:\\Users\\Public\\Videos\\*", lpFindFileData=0x31e55c | out: lpFindFileData=0x31e55c*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0xfdb0c77c, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x282dfaee, ftLastAccessTime.dwHighDateTime=0x1ca043f, ftLastWriteTime.dwLowDateTime=0x28886f39, ftLastWriteTime.dwHighDateTime=0x1ca043f, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x381b80 [0136.307] FindNextFileW (in: hFindFile=0x381b80, lpFindFileData=0x31e56c | out: lpFindFileData=0x31e56c*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0xfdb0c77c, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x282dfaee, ftLastAccessTime.dwHighDateTime=0x1ca043f, ftLastWriteTime.dwLowDateTime=0x28886f39, ftLastWriteTime.dwHighDateTime=0x1ca043f, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0136.308] FindNextFileW (in: hFindFile=0x381b80, lpFindFileData=0x31e56c | out: lpFindFileData=0x31e56c*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0x282dfaee, ftCreationTime.dwHighDateTime=0x1ca043f, ftLastAccessTime.dwLowDateTime=0x282dfaee, ftLastAccessTime.dwHighDateTime=0x1ca043f, ftLastWriteTime.dwLowDateTime=0x28886f39, ftLastWriteTime.dwHighDateTime=0x1ca043f, nFileSizeHigh=0x0, nFileSizeLow=0x17c, dwReserved0=0x0, dwReserved1=0x0, cFileName="desktop.ini", cAlternateFileName="")) returned 1 [0136.308] FindNextFileW (in: hFindFile=0x381b80, lpFindFileData=0x31e56c | out: lpFindFileData=0x31e56c*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x7fffaad0, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x802f4656, ftLastAccessTime.dwHighDateTime=0x1ca0444, ftLastWriteTime.dwLowDateTime=0x288d31f9, ftLastWriteTime.dwHighDateTime=0x1ca043f, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Sample Videos", cAlternateFileName="SAMPLE~1")) returned 1 [0136.308] FindNextFileW (in: hFindFile=0x381b80, lpFindFileData=0x31e56c | out: lpFindFileData=0x31e56c*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0136.308] FindClose (in: hFindFile=0x381b80 | out: hFindFile=0x381b80) returned 1 [0136.308] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e7f4) returned 1 [0136.308] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e800) returned 1 [0136.308] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e7bc) returned 1 [0136.308] GetFullPathNameW (in: lpFileName="C:\\Users\\Public\\Videos\\Sample Videos", nBufferLength=0x105, lpBuffer=0x31e2c4, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\Public\\Videos\\Sample Videos", lpFilePart=0x0) returned 0x24 [0136.308] GetFullPathNameW (in: lpFileName="C:\\Users\\Public\\Videos\\Sample Videos\\", nBufferLength=0x105, lpBuffer=0x31e298, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\Public\\Videos\\Sample Videos\\", lpFilePart=0x0) returned 0x25 [0136.308] FindFirstFileW (in: lpFileName="C:\\Users\\Public\\Videos\\Sample Videos\\*", lpFindFileData=0x31e4e4 | out: lpFindFileData=0x31e4e4*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x7fffaad0, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x802f4656, ftLastAccessTime.dwHighDateTime=0x1ca0444, ftLastWriteTime.dwLowDateTime=0x288d31f9, ftLastWriteTime.dwHighDateTime=0x1ca043f, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x381b80 [0136.308] FindNextFileW (in: hFindFile=0x381b80, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x7fffaad0, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x802f4656, ftLastAccessTime.dwHighDateTime=0x1ca0444, ftLastWriteTime.dwLowDateTime=0x288d31f9, ftLastWriteTime.dwHighDateTime=0x1ca043f, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0136.308] FindNextFileW (in: hFindFile=0x381b80, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0x802f4656, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x7be12937, ftLastAccessTime.dwHighDateTime=0x1ca0444, ftLastWriteTime.dwLowDateTime=0x288d31f9, ftLastWriteTime.dwHighDateTime=0x1ca043f, nFileSizeHigh=0x0, nFileSizeLow=0x146, dwReserved0=0x0, dwReserved1=0x0, cFileName="desktop.ini", cAlternateFileName="")) returned 1 [0136.309] FindNextFileW (in: hFindFile=0x381b80, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x80282235, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x7bda0516, ftLastAccessTime.dwHighDateTime=0x1ca0444, ftLastWriteTime.dwLowDateTime=0x1f7cb200, ftLastWriteTime.dwHighDateTime=0x1d6eb7f, nFileSizeHigh=0x0, nFileSizeLow=0x1907b90, dwReserved0=0x0, dwReserved1=0x0, cFileName="Wildlife.wmv", cAlternateFileName="")) returned 1 [0136.309] FindNextFileW (in: hFindFile=0x381b80, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0136.309] FindClose (in: hFindFile=0x381b80 | out: hFindFile=0x381b80) returned 1 [0136.309] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e77c) returned 1 [0136.309] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e788) returned 1 [0136.309] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e7bc) returned 1 [0136.309] GetFullPathNameW (in: lpFileName="C:\\Users\\Public\\Videos\\Sample Videos", nBufferLength=0x105, lpBuffer=0x31e2c4, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\Public\\Videos\\Sample Videos", lpFilePart=0x0) returned 0x24 [0136.309] GetFullPathNameW (in: lpFileName="C:\\Users\\Public\\Videos\\Sample Videos\\", nBufferLength=0x105, lpBuffer=0x31e298, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\Public\\Videos\\Sample Videos\\", lpFilePart=0x0) returned 0x25 [0136.309] FindFirstFileW (in: lpFileName="C:\\Users\\Public\\Videos\\Sample Videos\\*", lpFindFileData=0x31e4e4 | out: lpFindFileData=0x31e4e4*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x7fffaad0, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x802f4656, ftLastAccessTime.dwHighDateTime=0x1ca0444, ftLastWriteTime.dwLowDateTime=0x288d31f9, ftLastWriteTime.dwHighDateTime=0x1ca043f, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x381b80 [0136.309] FindNextFileW (in: hFindFile=0x381b80, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x7fffaad0, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x802f4656, ftLastAccessTime.dwHighDateTime=0x1ca0444, ftLastWriteTime.dwLowDateTime=0x288d31f9, ftLastWriteTime.dwHighDateTime=0x1ca043f, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0136.309] FindNextFileW (in: hFindFile=0x381b80, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0x802f4656, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x7be12937, ftLastAccessTime.dwHighDateTime=0x1ca0444, ftLastWriteTime.dwLowDateTime=0x288d31f9, ftLastWriteTime.dwHighDateTime=0x1ca043f, nFileSizeHigh=0x0, nFileSizeLow=0x146, dwReserved0=0x0, dwReserved1=0x0, cFileName="desktop.ini", cAlternateFileName="")) returned 1 [0136.309] FindNextFileW (in: hFindFile=0x381b80, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x80282235, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x7bda0516, ftLastAccessTime.dwHighDateTime=0x1ca0444, ftLastWriteTime.dwLowDateTime=0x1f7cb200, ftLastWriteTime.dwHighDateTime=0x1d6eb7f, nFileSizeHigh=0x0, nFileSizeLow=0x1907b90, dwReserved0=0x0, dwReserved1=0x0, cFileName="Wildlife.wmv", cAlternateFileName="")) returned 1 [0136.310] FindNextFileW (in: hFindFile=0x381b80, lpFindFileData=0x31e4f4 | out: lpFindFileData=0x31e4f4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x80282235, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x7bda0516, ftLastAccessTime.dwHighDateTime=0x1ca0444, ftLastWriteTime.dwLowDateTime=0x1f7cb200, ftLastWriteTime.dwHighDateTime=0x1d6eb7f, nFileSizeHigh=0x0, nFileSizeLow=0x1907b90, dwReserved0=0x0, dwReserved1=0x0, cFileName="Wildlife.wmv", cAlternateFileName="")) returned 0 [0136.310] FindClose (in: hFindFile=0x381b80 | out: hFindFile=0x381b80) returned 1 [0136.310] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e77c) returned 1 [0136.310] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e788) returned 1 [0136.310] GetFullPathNameW (in: lpFileName="C:\\Users\\Public\\Videos\\Sample Videos\\Wildlife.wmv", nBufferLength=0x105, lpBuffer=0x31e184, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\Public\\Videos\\Sample Videos\\Wildlife.wmv", lpFilePart=0x0) returned 0x31 [0136.310] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e678) returned 1 [0136.310] CreateFileW (lpFileName="C:\\Users\\Public\\Videos\\Sample Videos\\Wildlife.wmv" (normalized: "c:\\users\\public\\videos\\sample videos\\wildlife.wmv"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x274 [0136.310] GetFileType (hFile=0x274) returned 0x1 [0136.310] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e674) returned 1 [0136.310] GetFileType (hFile=0x274) returned 0x1 [0136.310] GetFileSize (in: hFile=0x274, lpFileSizeHigh=0x31e780 | out: lpFileSizeHigh=0x31e780*=0x0) returned 0x1907b90 [0136.376] ReadFile (in: hFile=0x274, lpBuffer=0x6b91018, nNumberOfBytesToRead=0x1907b90, lpNumberOfBytesRead=0x31e72c, lpOverlapped=0x0 | out: lpBuffer=0x6b91018*, lpNumberOfBytesRead=0x31e72c*=0x1907b90, lpOverlapped=0x0) returned 1 [0137.553] CloseHandle (hObject=0x274) returned 1 [0138.732] GetFullPathNameW (in: lpFileName="C:\\Users\\Public\\Videos\\Sample Videos\\Wildlife.wmv", nBufferLength=0x105, lpBuffer=0x31e170, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\Public\\Videos\\Sample Videos\\Wildlife.wmv", lpFilePart=0x0) returned 0x31 [0138.732] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e664) returned 1 [0138.732] CreateFileW (lpFileName="C:\\Users\\Public\\Videos\\Sample Videos\\Wildlife.wmv" (normalized: "c:\\users\\public\\videos\\sample videos\\wildlife.wmv"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x274 [0138.735] GetFileType (hFile=0x274) returned 0x1 [0138.735] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e660) returned 1 [0138.735] GetFileType (hFile=0x274) returned 0x1 [0138.735] WriteFile (in: hFile=0x274, lpBuffer=0x8b91018*, nNumberOfBytesToWrite=0x1907b90, lpNumberOfBytesWritten=0x31e720, lpOverlapped=0x0 | out: lpBuffer=0x8b91018*, lpNumberOfBytesWritten=0x31e720*=0x1907b90, lpOverlapped=0x0) returned 1 [0139.895] CloseHandle (hObject=0x274) returned 1 [0139.896] GetFullPathNameW (in: lpFileName="C:\\Users\\Public\\Videos\\Sample Videos\\Wildlife.wmv", nBufferLength=0x105, lpBuffer=0x31e2a4, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\Public\\Videos\\Sample Videos\\Wildlife.wmv", lpFilePart=0x0) returned 0x31 [0139.896] GetFullPathNameW (in: lpFileName="C:\\Users\\Public\\Videos\\Sample Videos\\Wildlife.wmv.[neftet@tutanota.com].boom", nBufferLength=0x105, lpBuffer=0x31e2a4, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\Public\\Videos\\Sample Videos\\Wildlife.wmv.[neftet@tutanota.com].boom", lpFilePart=0x0) returned 0x4c [0139.896] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e704) returned 1 [0139.896] GetFileAttributesExW (in: lpFileName="C:\\Users\\Public\\Videos\\Sample Videos\\Wildlife.wmv" (normalized: "c:\\users\\public\\videos\\sample videos\\wildlife.wmv"), fInfoLevelId=0x0, lpFileInformation=0x31e780 | out: lpFileInformation=0x31e780*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x80282235, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x7bda0516, ftLastAccessTime.dwHighDateTime=0x1ca0444, ftLastWriteTime.dwLowDateTime=0x36d10be0, ftLastWriteTime.dwHighDateTime=0x1d6eb7f, nFileSizeHigh=0x0, nFileSizeLow=0x1907b90)) returned 1 [0139.896] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e700) returned 1 [0139.896] MoveFileW (lpExistingFileName="C:\\Users\\Public\\Videos\\Sample Videos\\Wildlife.wmv" (normalized: "c:\\users\\public\\videos\\sample videos\\wildlife.wmv"), lpNewFileName="C:\\Users\\Public\\Videos\\Sample Videos\\Wildlife.wmv.[neftet@tutanota.com].boom" (normalized: "c:\\users\\public\\videos\\sample videos\\wildlife.wmv.[neftet@tutanota.com].boom")) returned 1 [0139.897] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e924) returned 1 [0139.897] GetFullPathNameW (in: lpFileName="C:\\Windows", nBufferLength=0x105, lpBuffer=0x31e42c, lpFilePart=0x0 | out: lpBuffer="C:\\Windows", lpFilePart=0x0) returned 0xa [0139.897] GetFullPathNameW (in: lpFileName="C:\\Windows\\", nBufferLength=0x105, lpBuffer=0x31e400, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\", lpFilePart=0x0) returned 0xb [0139.897] FindFirstFileW (in: lpFileName="C:\\Windows\\*", lpFindFileData=0x31e64c | out: lpFindFileData=0x31e64c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfdb0c77c, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x2fb4a840, ftLastAccessTime.dwHighDateTime=0x1d4d57d, ftLastWriteTime.dwLowDateTime=0x2fb4a840, ftLastWriteTime.dwHighDateTime=0x1d4d57d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x381b80 [0139.897] FindNextFileW (in: hFindFile=0x381b80, lpFindFileData=0x31e65c | out: lpFindFileData=0x31e65c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfdb0c77c, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x2fb4a840, ftLastAccessTime.dwHighDateTime=0x1d4d57d, ftLastWriteTime.dwLowDateTime=0x2fb4a840, ftLastWriteTime.dwHighDateTime=0x1d4d57d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0139.898] FindNextFileW (in: hFindFile=0x381b80, lpFindFileData=0x31e65c | out: lpFindFileData=0x31e65c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x800b91b1, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x80b6f4c5, ftLastAccessTime.dwHighDateTime=0x1ca0444, ftLastWriteTime.dwLowDateTime=0x80b6f4c5, ftLastWriteTime.dwHighDateTime=0x1ca0444, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="addins", cAlternateFileName="")) returned 1 [0139.898] FindNextFileW (in: hFindFile=0x381b80, lpFindFileData=0x31e65c | out: lpFindFileData=0x31e65c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfdb0c77c, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfdb0c77c, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xfdb0c77c, ftLastWriteTime.dwHighDateTime=0x1ca0431, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="AppCompat", cAlternateFileName="APPCOM~1")) returned 1 [0139.898] FindNextFileW (in: hFindFile=0x381b80, lpFindFileData=0x31e65c | out: lpFindFileData=0x31e65c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfdb328d6, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x57087b83, ftLastAccessTime.dwHighDateTime=0x1cb892c, ftLastWriteTime.dwLowDateTime=0x57087b83, ftLastWriteTime.dwHighDateTime=0x1cb892c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="AppPatch", cAlternateFileName="")) returned 1 [0139.898] FindNextFileW (in: hFindFile=0x381b80, lpFindFileData=0x31e65c | out: lpFindFileData=0x31e65c*(dwFileAttributes=0x15, ftCreationTime.dwLowDateTime=0xfdb58a30, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xe968e7e0, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0xe968e7e0, ftLastWriteTime.dwHighDateTime=0x1d305f1, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="assembly", cAlternateFileName="")) returned 1 [0139.898] FindNextFileW (in: hFindFile=0x381b80, lpFindFileData=0x31e65c | out: lpFindFileData=0x31e65c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x97675415, ftCreationTime.dwHighDateTime=0x1cb892b, ftLastAccessTime.dwLowDateTime=0x97675415, ftLastAccessTime.dwHighDateTime=0x1cb892b, ftLastWriteTime.dwLowDateTime=0x977f21d7, ftLastWriteTime.dwHighDateTime=0x1cb892b, nFileSizeHigh=0x0, nFileSizeLow=0x11600, dwReserved0=0x0, dwReserved1=0x0, cFileName="bfsvc.exe", cAlternateFileName="")) returned 1 [0139.898] FindNextFileW (in: hFindFile=0x381b80, lpFindFileData=0x31e65c | out: lpFindFileData=0x31e65c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfde52538, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x80105472, ftLastAccessTime.dwHighDateTime=0x1ca0444, ftLastWriteTime.dwLowDateTime=0x80105472, ftLastWriteTime.dwHighDateTime=0x1ca0444, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Boot", cAlternateFileName="")) returned 1 [0139.898] FindNextFileW (in: hFindFile=0x381b80, lpFindFileData=0x31e65c | out: lpFindFileData=0x31e65c*(dwFileAttributes=0x24, ftCreationTime.dwLowDateTime=0x5562e640, ftCreationTime.dwHighDateTime=0x1ca0445, ftLastAccessTime.dwLowDateTime=0x5562e640, ftLastAccessTime.dwHighDateTime=0x1ca0445, ftLastWriteTime.dwLowDateTime=0xafd68640, ftLastWriteTime.dwHighDateTime=0x1d5e82a, nFileSizeHigh=0x0, nFileSizeLow=0x10800, dwReserved0=0x0, dwReserved1=0x0, cFileName="bootstat.dat", cAlternateFileName="")) returned 1 [0139.898] FindNextFileW (in: hFindFile=0x381b80, lpFindFileData=0x31e65c | out: lpFindFileData=0x31e65c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfe36132c, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x80105472, ftLastAccessTime.dwHighDateTime=0x1ca0444, ftLastWriteTime.dwLowDateTime=0x80105472, ftLastWriteTime.dwHighDateTime=0x1ca0444, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Branding", cAlternateFileName="")) returned 1 [0139.899] FindNextFileW (in: hFindFile=0x381b80, lpFindFileData=0x31e65c | out: lpFindFileData=0x31e65c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x98abb4cc, ftCreationTime.dwHighDateTime=0x1cbf8eb, ftLastAccessTime.dwLowDateTime=0x61766720, ftLastAccessTime.dwHighDateTime=0x1d2de2a, ftLastWriteTime.dwLowDateTime=0x61766720, ftLastWriteTime.dwHighDateTime=0x1d2de2a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="CSC", cAlternateFileName="")) returned 1 [0139.899] FindNextFileW (in: hFindFile=0x381b80, lpFindFileData=0x31e65c | out: lpFindFileData=0x31e65c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfe36132c, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x806ac8bc, ftLastAccessTime.dwHighDateTime=0x1ca0444, ftLastWriteTime.dwLowDateTime=0x806ac8bc, ftLastWriteTime.dwHighDateTime=0x1ca0444, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Cursors", cAlternateFileName="")) returned 1 [0139.899] FindNextFileW (in: hFindFile=0x381b80, lpFindFileData=0x31e65c | out: lpFindFileData=0x31e65c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf8a36d94, ftCreationTime.dwHighDateTime=0x1ca043d, ftLastAccessTime.dwLowDateTime=0x181cd0c0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x181cd0c0, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="debug", cAlternateFileName="")) returned 1 [0139.899] FindNextFileW (in: hFindFile=0x381b80, lpFindFileData=0x31e65c | out: lpFindFileData=0x31e65c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x800b91b1, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x800b91b1, ftLastAccessTime.dwHighDateTime=0x1ca0444, ftLastWriteTime.dwLowDateTime=0x800b91b1, ftLastWriteTime.dwHighDateTime=0x1ca0444, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="diagnostics", cAlternateFileName="DIAGNO~1")) returned 1 [0139.899] FindNextFileW (in: hFindFile=0x381b80, lpFindFileData=0x31e65c | out: lpFindFileData=0x31e65c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x3763cf0c, ftCreationTime.dwHighDateTime=0x1ca0445, ftLastAccessTime.dwLowDateTime=0xa9eeab22, ftLastAccessTime.dwHighDateTime=0x1cbf8e9, ftLastWriteTime.dwLowDateTime=0x3763cf0c, ftLastWriteTime.dwHighDateTime=0x1ca0445, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="DigitalLocker", cAlternateFileName="DIGITA~1")) returned 1 [0139.899] FindNextFileW (in: hFindFile=0x381b80, lpFindFileData=0x31e65c | out: lpFindFileData=0x31e65c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x80046d91, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x806ac8bc, ftLastAccessTime.dwHighDateTime=0x1ca0444, ftLastWriteTime.dwLowDateTime=0x806ac8bc, ftLastWriteTime.dwHighDateTime=0x1ca0444, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Downloaded Program Files", cAlternateFileName="DOWNLO~1")) returned 1 [0139.899] FindNextFileW (in: hFindFile=0x381b80, lpFindFileData=0x31e65c | out: lpFindFileData=0x31e65c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xffb94625, ftCreationTime.dwHighDateTime=0x1ca043d, ftLastAccessTime.dwLowDateTime=0xffb94625, ftLastAccessTime.dwHighDateTime=0x1ca043d, ftLastWriteTime.dwLowDateTime=0x7a349200, ftLastWriteTime.dwHighDateTime=0x1d2de2a, nFileSizeHigh=0x0, nFileSizeLow=0xae6, dwReserved0=0x0, dwReserved1=0x0, cFileName="DtcInstall.log", cAlternateFileName="DTCINS~1.LOG")) returned 1 [0139.900] FindNextFileW (in: hFindFile=0x381b80, lpFindFileData=0x31e65c | out: lpFindFileData=0x31e65c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x996cd9eb, ftCreationTime.dwHighDateTime=0x1cbf8eb, ftLastAccessTime.dwLowDateTime=0xa9fa1e6a, ftLastAccessTime.dwHighDateTime=0x1cbf8eb, ftLastWriteTime.dwLowDateTime=0x9cf49440, ftLastWriteTime.dwHighDateTime=0x1cbf8eb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="ehome", cAlternateFileName="")) returned 1 [0139.900] FindNextFileW (in: hFindFile=0x381b80, lpFindFileData=0x31e65c | out: lpFindFileData=0x31e65c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x3757e82b, ftCreationTime.dwHighDateTime=0x1ca0445, ftLastAccessTime.dwLowDateTime=0x23fb0799, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x1e423fe3, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="en-US", cAlternateFileName="")) returned 1 [0139.900] FindNextFileW (in: hFindFile=0x381b80, lpFindFileData=0x31e65c | out: lpFindFileData=0x31e65c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x90cd4312, ftCreationTime.dwHighDateTime=0x1cb892b, ftLastAccessTime.dwLowDateTime=0x90cd4312, ftLastAccessTime.dwHighDateTime=0x1cb892b, ftLastWriteTime.dwLowDateTime=0x90d6c893, ftLastWriteTime.dwHighDateTime=0x1cb892b, nFileSizeHigh=0x0, nFileSizeLow=0x2bd400, dwReserved0=0x0, dwReserved1=0x0, cFileName="explorer.exe", cAlternateFileName="")) returned 1 [0139.900] FindNextFileW (in: hFindFile=0x381b80, lpFindFileData=0x31e65c | out: lpFindFileData=0x31e65c*(dwFileAttributes=0x15, ftCreationTime.dwLowDateTime=0xfe387486, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x6d0f7050, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x6d0f7050, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Fonts", cAlternateFileName="")) returned 1 [0139.900] FindNextFileW (in: hFindFile=0x381b80, lpFindFileData=0x31e65c | out: lpFindFileData=0x31e65c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc0a7e9b0, ftCreationTime.dwHighDateTime=0x1ca0410, ftLastAccessTime.dwLowDateTime=0xc0a7e9b0, ftLastAccessTime.dwHighDateTime=0x1ca0410, ftLastWriteTime.dwLowDateTime=0xe2da8a60, ftLastWriteTime.dwHighDateTime=0x1ca0423, nFileSizeHigh=0x0, nFileSizeLow=0x3c00, dwReserved0=0x0, dwReserved1=0x0, cFileName="fveupdate.exe", cAlternateFileName="")) returned 1 [0139.900] FindNextFileW (in: hFindFile=0x381b80, lpFindFileData=0x31e65c | out: lpFindFileData=0x31e65c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfe387486, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xe9340f25, ftLastAccessTime.dwHighDateTime=0x1cbf8eb, ftLastWriteTime.dwLowDateTime=0xe9340f25, ftLastWriteTime.dwHighDateTime=0x1cbf8eb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Globalization", cAlternateFileName="GLOBAL~1")) returned 1 [0139.900] FindNextFileW (in: hFindFile=0x381b80, lpFindFileData=0x31e65c | out: lpFindFileData=0x31e65c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfe3f9894, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x1d967bdb, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x1d967bdb, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Help", cAlternateFileName="")) returned 1 [0139.900] FindNextFileW (in: hFindFile=0x381b80, lpFindFileData=0x31e65c | out: lpFindFileData=0x31e65c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x34a5a972, ftCreationTime.dwHighDateTime=0x1ca041a, ftLastAccessTime.dwLowDateTime=0x34a5a972, ftLastAccessTime.dwHighDateTime=0x1ca041a, ftLastWriteTime.dwLowDateTime=0xe391cc70, ftLastWriteTime.dwHighDateTime=0x1ca0423, nFileSizeHigh=0x0, nFileSizeLow=0xb3200, dwReserved0=0x0, dwReserved1=0x0, cFileName="HelpPane.exe", cAlternateFileName="")) returned 1 [0139.900] FindNextFileW (in: hFindFile=0x381b80, lpFindFileData=0x31e65c | out: lpFindFileData=0x31e65c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x16ca6ff3, ftCreationTime.dwHighDateTime=0x1ca041a, ftLastAccessTime.dwLowDateTime=0x16ca6ff3, ftLastAccessTime.dwHighDateTime=0x1ca041a, ftLastWriteTime.dwLowDateTime=0xe391cc70, ftLastWriteTime.dwHighDateTime=0x1ca0423, nFileSizeHigh=0x0, nFileSizeLow=0x4200, dwReserved0=0x0, dwReserved1=0x0, cFileName="hh.exe", cAlternateFileName="")) returned 1 [0139.901] FindNextFileW (in: hFindFile=0x381b80, lpFindFileData=0x31e65c | out: lpFindFileData=0x31e65c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfe445b48, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x3763cf0c, ftLastAccessTime.dwHighDateTime=0x1ca0445, ftLastWriteTime.dwLowDateTime=0x3763cf0c, ftLastWriteTime.dwHighDateTime=0x1ca0445, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="IME", cAlternateFileName="")) returned 1 [0139.901] FindNextFileW (in: hFindFile=0x381b80, lpFindFileData=0x31e65c | out: lpFindFileData=0x31e65c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfe50420a, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xefd5fc00, ftLastAccessTime.dwHighDateTime=0x1d4d596, ftLastWriteTime.dwLowDateTime=0xefd5fc00, ftLastWriteTime.dwHighDateTime=0x1d4d596, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="inf", cAlternateFileName="")) returned 1 [0139.901] FindNextFileW (in: hFindFile=0x381b80, lpFindFileData=0x31e65c | out: lpFindFileData=0x31e65c*(dwFileAttributes=0x16, ftCreationTime.dwLowDateTime=0x72a697c0, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0xeda8bc40, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0xeda8bc40, ftLastWriteTime.dwHighDateTime=0x1d305f1, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Installer", cAlternateFileName="INSTAL~1")) returned 1 [0139.901] FindNextFileW (in: hFindFile=0x381b80, lpFindFileData=0x31e65c | out: lpFindFileData=0x31e65c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfe60eb80, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x80b6f4c5, ftLastAccessTime.dwHighDateTime=0x1ca0444, ftLastWriteTime.dwLowDateTime=0x80b6f4c5, ftLastWriteTime.dwHighDateTime=0x1ca0444, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="L2Schemas", cAlternateFileName="L2SCHE~1")) returned 1 [0139.901] FindNextFileW (in: hFindFile=0x381b80, lpFindFileData=0x31e65c | out: lpFindFileData=0x31e65c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfe60eb80, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfe60eb80, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0x9a0a5fd1, ftLastWriteTime.dwHighDateTime=0x1ca042b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="LiveKernelReports", cAlternateFileName="LIVEKE~1")) returned 1 [0139.901] FindNextFileW (in: hFindFile=0x381b80, lpFindFileData=0x31e65c | out: lpFindFileData=0x31e65c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfe60eb80, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x6938ae40, ftLastAccessTime.dwHighDateTime=0x1d2fafa, ftLastWriteTime.dwLowDateTime=0x6938ae40, ftLastWriteTime.dwHighDateTime=0x1d2fafa, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Logs", cAlternateFileName="")) returned 1 [0139.901] FindNextFileW (in: hFindFile=0x381b80, lpFindFileData=0x31e65c | out: lpFindFileData=0x31e65c*(dwFileAttributes=0x15, ftCreationTime.dwLowDateTime=0xfe60eb80, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x8105822e, ftLastAccessTime.dwHighDateTime=0x1ca0444, ftLastWriteTime.dwLowDateTime=0x8105822e, ftLastWriteTime.dwHighDateTime=0x1ca0444, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Media", cAlternateFileName="")) returned 1 [0139.902] FindNextFileW (in: hFindFile=0x381b80, lpFindFileData=0x31e65c | out: lpFindFileData=0x31e65c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7f29dbd7, ftCreationTime.dwHighDateTime=0x1ca0417, ftLastAccessTime.dwLowDateTime=0x7f29dbd7, ftLastAccessTime.dwHighDateTime=0x1ca0417, ftLastWriteTime.dwLowDateTime=0x9d4aec0c, ftLastWriteTime.dwHighDateTime=0x1ca040e, nFileSizeHigh=0x0, nFileSizeLow=0xa87b, dwReserved0=0x0, dwReserved1=0x0, cFileName="mib.bin", cAlternateFileName="")) returned 1 [0139.902] FindNextFileW (in: hFindFile=0x381b80, lpFindFileData=0x31e65c | out: lpFindFileData=0x31e65c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfe6f339c, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xd0be0600, ftLastAccessTime.dwHighDateTime=0x1d4d596, ftLastWriteTime.dwLowDateTime=0xd0be0600, ftLastWriteTime.dwHighDateTime=0x1d4d596, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.NET", cAlternateFileName="MICROS~1.NET")) returned 1 [0139.902] FindNextFileW (in: hFindFile=0x381b80, lpFindFileData=0x31e65c | out: lpFindFileData=0x31e65c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x56a9ce00, ftCreationTime.dwHighDateTime=0x1d2e676, ftLastAccessTime.dwLowDateTime=0x56a9ce00, ftLastAccessTime.dwHighDateTime=0x1d2e676, ftLastWriteTime.dwLowDateTime=0x56a9ce00, ftLastWriteTime.dwHighDateTime=0x1d2e676, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Migration", cAlternateFileName="MIGRAT~1")) returned 1 [0139.902] FindNextFileW (in: hFindFile=0x381b80, lpFindFileData=0x31e65c | out: lpFindFileData=0x31e65c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfea5f2b2, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfea5f2b2, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0x9fcbcbb0, ftLastWriteTime.dwHighDateTime=0x1ca042b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="ModemLogs", cAlternateFileName="MODEML~1")) returned 1 [0139.902] FindNextFileW (in: hFindFile=0x381b80, lpFindFileData=0x31e65c | out: lpFindFileData=0x31e65c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc82fedc8, ftCreationTime.dwHighDateTime=0x1ca042b, ftLastAccessTime.dwLowDateTime=0xc82fedc8, ftLastAccessTime.dwHighDateTime=0x1ca042b, ftLastWriteTime.dwLowDateTime=0x2d6b0bf3, ftLastWriteTime.dwHighDateTime=0x1c9ea0b, nFileSizeHigh=0x0, nFileSizeLow=0x57d, dwReserved0=0x0, dwReserved1=0x0, cFileName="msdfmap.ini", cAlternateFileName="")) returned 1 [0139.902] FindNextFileW (in: hFindFile=0x381b80, lpFindFileData=0x31e65c | out: lpFindFileData=0x31e65c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8eb2c4cd, ftCreationTime.dwHighDateTime=0x1ca0415, ftLastAccessTime.dwLowDateTime=0x8eb2c4cd, ftLastAccessTime.dwHighDateTime=0x1ca0415, ftLastWriteTime.dwLowDateTime=0xeb804920, ftLastWriteTime.dwHighDateTime=0x1ca0423, nFileSizeHigh=0x0, nFileSizeLow=0x2f400, dwReserved0=0x0, dwReserved1=0x0, cFileName="notepad.exe", cAlternateFileName="")) returned 1 [0139.902] FindNextFileW (in: hFindFile=0x381b80, lpFindFileData=0x31e65c | out: lpFindFileData=0x31e65c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x800df312, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x810320ce, ftLastAccessTime.dwHighDateTime=0x1ca0444, ftLastWriteTime.dwLowDateTime=0x810320ce, ftLastWriteTime.dwHighDateTime=0x1ca0444, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Offline Web Pages", cAlternateFileName="OFFLIN~1")) returned 1 [0139.903] FindNextFileW (in: hFindFile=0x381b80, lpFindFileData=0x31e65c | out: lpFindFileData=0x31e65c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xb3172800, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0x281b0dc0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x281b0dc0, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Panther", cAlternateFileName="")) returned 1 [0139.903] FindNextFileW (in: hFindFile=0x381b80, lpFindFileData=0x31e65c | out: lpFindFileData=0x31e65c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x50ea0e30, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x50ea0e30, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x50ea0e30, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="PCHEALTH", cAlternateFileName="")) returned 1 [0139.903] FindNextFileW (in: hFindFile=0x381b80, lpFindFileData=0x31e65c | out: lpFindFileData=0x31e65c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x80046d91, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x80046d91, ftLastAccessTime.dwHighDateTime=0x1ca0444, ftLastWriteTime.dwLowDateTime=0x80046d91, ftLastWriteTime.dwHighDateTime=0x1ca0444, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Performance", cAlternateFileName="PERFOR~1")) returned 1 [0139.903] FindNextFileW (in: hFindFile=0x381b80, lpFindFileData=0x31e65c | out: lpFindFileData=0x31e65c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc4e1cc01, ftCreationTime.dwHighDateTime=0x1cb892e, ftLastAccessTime.dwLowDateTime=0xc4e1cc01, ftLastAccessTime.dwHighDateTime=0x1cb892e, ftLastWriteTime.dwLowDateTime=0x78374e00, ftLastWriteTime.dwHighDateTime=0x1d30596, nFileSizeHigh=0x0, nFileSizeLow=0x69ea, dwReserved0=0x0, dwReserved1=0x0, cFileName="PFRO.log", cAlternateFileName="")) returned 1 [0139.903] FindNextFileW (in: hFindFile=0x381b80, lpFindFileData=0x31e65c | out: lpFindFileData=0x31e65c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfea8540c, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfeaf781a, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xfeaf781a, ftLastWriteTime.dwHighDateTime=0x1ca0431, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="PLA", cAlternateFileName="")) returned 1 [0139.903] FindNextFileW (in: hFindFile=0x381b80, lpFindFileData=0x31e65c | out: lpFindFileData=0x31e65c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfeb1d974, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x94d2e7b9, ftLastAccessTime.dwHighDateTime=0x1cbf8eb, ftLastWriteTime.dwLowDateTime=0x94d2e7b9, ftLastWriteTime.dwHighDateTime=0x1cbf8eb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="PolicyDefinitions", cAlternateFileName="POLICY~1")) returned 1 [0139.903] FindNextFileW (in: hFindFile=0x381b80, lpFindFileData=0x31e65c | out: lpFindFileData=0x31e65c*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x6240bc00, ftCreationTime.dwHighDateTime=0x1d2de2a, ftLastAccessTime.dwLowDateTime=0xef82e560, ftLastAccessTime.dwHighDateTime=0x1d6eb7e, ftLastWriteTime.dwLowDateTime=0xef82e560, ftLastWriteTime.dwHighDateTime=0x1d6eb7e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Prefetch", cAlternateFileName="")) returned 1 [0139.903] FindNextFileW (in: hFindFile=0x381b80, lpFindFileData=0x31e65c | out: lpFindFileData=0x31e65c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xaf9a5c4e, ftCreationTime.dwHighDateTime=0x1cbf8eb, ftLastAccessTime.dwLowDateTime=0xaf9cbebd, ftLastAccessTime.dwHighDateTime=0x1cbf8eb, ftLastWriteTime.dwLowDateTime=0x1f863780, ftLastWriteTime.dwHighDateTime=0x1d6eb7f, nFileSizeHigh=0x0, nFileSizeLow=0xd130, dwReserved0=0x0, dwReserved1=0x0, cFileName="Professional.xml", cAlternateFileName="PROFES~1.XML")) returned 1 [0139.904] FindNextFileW (in: hFindFile=0x381b80, lpFindFileData=0x31e65c | out: lpFindFileData=0x31e65c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x71a7c91c, ftCreationTime.dwHighDateTime=0x1ca0411, ftLastAccessTime.dwLowDateTime=0x71a7c91c, ftLastAccessTime.dwHighDateTime=0x1ca0411, ftLastWriteTime.dwLowDateTime=0xedf95f70, ftLastWriteTime.dwHighDateTime=0x1ca0423, nFileSizeHigh=0x0, nFileSizeLow=0x68400, dwReserved0=0x0, dwReserved1=0x0, cFileName="regedit.exe", cAlternateFileName="")) returned 1 [0139.904] FindNextFileW (in: hFindFile=0x381b80, lpFindFileData=0x31e65c | out: lpFindFileData=0x31e65c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfeb43ace, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xff1f57a0, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xff1f57a0, ftLastWriteTime.dwHighDateTime=0x1ca0431, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Registration", cAlternateFileName="REGIST~1")) returned 1 [0139.904] FindNextFileW (in: hFindFile=0x381b80, lpFindFileData=0x31e65c | out: lpFindFileData=0x31e65c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfeb69c28, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x2b041c20, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x2b041c20, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="rescache", cAlternateFileName="")) returned 1 [0139.904] FindNextFileW (in: hFindFile=0x381b80, lpFindFileData=0x31e65c | out: lpFindFileData=0x31e65c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfeb8fd82, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x80046d91, ftLastAccessTime.dwHighDateTime=0x1ca0444, ftLastWriteTime.dwLowDateTime=0x80046d91, ftLastWriteTime.dwHighDateTime=0x1ca0444, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Resources", cAlternateFileName="RESOUR~1")) returned 1 [0139.904] FindNextFileW (in: hFindFile=0x381b80, lpFindFileData=0x31e65c | out: lpFindFileData=0x31e65c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfebb5edc, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfebb5edc, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xcb547a92, ftLastWriteTime.dwHighDateTime=0x1ca042b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="SchCache", cAlternateFileName="")) returned 1 [0139.904] FindNextFileW (in: hFindFile=0x381b80, lpFindFileData=0x31e65c | out: lpFindFileData=0x31e65c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfebdc036, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x80046d91, ftLastAccessTime.dwHighDateTime=0x1ca0444, ftLastWriteTime.dwLowDateTime=0x80046d91, ftLastWriteTime.dwHighDateTime=0x1ca0444, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="schemas", cAlternateFileName="")) returned 1 [0139.904] FindNextFileW (in: hFindFile=0x381b80, lpFindFileData=0x31e65c | out: lpFindFileData=0x31e65c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfec02190, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x98abb4cc, ftLastAccessTime.dwHighDateTime=0x1cbf8eb, ftLastWriteTime.dwLowDateTime=0x98abb4cc, ftLastWriteTime.dwHighDateTime=0x1cbf8eb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="security", cAlternateFileName="")) returned 1 [0139.905] FindNextFileW (in: hFindFile=0x381b80, lpFindFileData=0x31e65c | out: lpFindFileData=0x31e65c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf484ebfa, ftCreationTime.dwHighDateTime=0x1ca043d, ftLastAccessTime.dwLowDateTime=0xf4be0d01, ftLastAccessTime.dwHighDateTime=0x1ca043d, ftLastWriteTime.dwLowDateTime=0xf4be0d01, ftLastWriteTime.dwHighDateTime=0x1ca043d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="ServiceProfiles", cAlternateFileName="SERVIC~2")) returned 1 [0139.905] FindNextFileW (in: hFindFile=0x381b80, lpFindFileData=0x31e65c | out: lpFindFileData=0x31e65c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfec4e444, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x1ea1accb, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x1ea1accb, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="servicing", cAlternateFileName="SERVIC~1")) returned 1 [0139.905] FindNextFileW (in: hFindFile=0x381b80, lpFindFileData=0x31e65c | out: lpFindFileData=0x31e65c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf627de2b, ftCreationTime.dwHighDateTime=0x1ca043d, ftLastAccessTime.dwLowDateTime=0xf62a3f8b, ftLastAccessTime.dwHighDateTime=0x1ca043d, ftLastWriteTime.dwLowDateTime=0xf62a3f8b, ftLastWriteTime.dwHighDateTime=0x1ca043d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Setup", cAlternateFileName="")) returned 1 [0139.905] FindNextFileW (in: hFindFile=0x381b80, lpFindFileData=0x31e65c | out: lpFindFileData=0x31e65c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2fb4a840, ftCreationTime.dwHighDateTime=0x1d4d57d, ftLastAccessTime.dwLowDateTime=0x2fb4a840, ftLastAccessTime.dwHighDateTime=0x1d4d57d, ftLastWriteTime.dwLowDateTime=0xb0760260, ftLastWriteTime.dwHighDateTime=0x1d5e82a, nFileSizeHigh=0x0, nFileSizeLow=0x102, dwReserved0=0x0, dwReserved1=0x0, cFileName="setupact.log", cAlternateFileName="")) returned 1 [0139.905] FindNextFileW (in: hFindFile=0x381b80, lpFindFileData=0x31e65c | out: lpFindFileData=0x31e65c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2fb4a840, ftCreationTime.dwHighDateTime=0x1d4d57d, ftLastAccessTime.dwLowDateTime=0x2fb4a840, ftLastAccessTime.dwHighDateTime=0x1d4d57d, ftLastWriteTime.dwLowDateTime=0x2fb4a840, ftLastWriteTime.dwHighDateTime=0x1d4d57d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="setuperr.log", cAlternateFileName="")) returned 1 [0139.905] FindNextFileW (in: hFindFile=0x381b80, lpFindFileData=0x31e65c | out: lpFindFileData=0x31e65c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x9968150d, ftCreationTime.dwHighDateTime=0x1cbf8eb, ftLastAccessTime.dwLowDateTime=0xaf52ba40, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0xaf52ba40, ftLastWriteTime.dwHighDateTime=0x1d305f1, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="ShellNew", cAlternateFileName="")) returned 1 [0139.905] FindNextFileW (in: hFindFile=0x381b80, lpFindFileData=0x31e65c | out: lpFindFileData=0x31e65c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x145b2540, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x2cafb6a0, ftLastAccessTime.dwHighDateTime=0x1d2e621, ftLastWriteTime.dwLowDateTime=0x2cafb6a0, ftLastWriteTime.dwHighDateTime=0x1d2e621, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="SoftwareDistribution", cAlternateFileName="SOFTWA~1")) returned 1 [0139.905] FindNextFileW (in: hFindFile=0x381b80, lpFindFileData=0x31e65c | out: lpFindFileData=0x31e65c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfec7459e, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x1d9da406, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x1d9da406, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Speech", cAlternateFileName="")) returned 1 [0139.906] FindNextFileW (in: hFindFile=0x381b80, lpFindFileData=0x31e65c | out: lpFindFileData=0x31e65c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x936ee880, ftCreationTime.dwHighDateTime=0x1cb892b, ftLastAccessTime.dwLowDateTime=0x936ee880, ftLastAccessTime.dwHighDateTime=0x1cb892b, ftLastWriteTime.dwLowDateTime=0x936ee880, ftLastWriteTime.dwHighDateTime=0x1cb892b, nFileSizeHigh=0x0, nFileSizeLow=0x10600, dwReserved0=0x0, dwReserved1=0x0, cFileName="splwow64.exe", cAlternateFileName="")) returned 1 [0139.906] FindNextFileW (in: hFindFile=0x381b80, lpFindFileData=0x31e65c | out: lpFindFileData=0x31e65c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf0aa2eb0, ftCreationTime.dwHighDateTime=0x1ca0443, ftLastAccessTime.dwLowDateTime=0xf0aa2eb0, ftLastAccessTime.dwHighDateTime=0x1ca0443, ftLastWriteTime.dwLowDateTime=0x1f921e60, ftLastWriteTime.dwHighDateTime=0x1d6eb7f, nFileSizeHigh=0x0, nFileSizeLow=0xbc50, dwReserved0=0x0, dwReserved1=0x0, cFileName="Starter.xml", cAlternateFileName="")) returned 1 [0139.906] FindNextFileW (in: hFindFile=0x381b80, lpFindFileData=0x31e65c | out: lpFindFileData=0x31e65c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfec7459e, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfec7459e, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xf404c84a, ftLastWriteTime.dwHighDateTime=0x1ca042b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="system", cAlternateFileName="")) returned 1 [0139.906] FindNextFileW (in: hFindFile=0x381b80, lpFindFileData=0x31e65c | out: lpFindFileData=0x31e65c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xadc7ce10, ftCreationTime.dwHighDateTime=0x1ca042b, ftLastAccessTime.dwLowDateTime=0xadc7ce10, ftLastAccessTime.dwHighDateTime=0x1ca042b, ftLastWriteTime.dwLowDateTime=0x8bb1d8db, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0xdb, dwReserved0=0x0, dwReserved1=0x0, cFileName="system.ini", cAlternateFileName="")) returned 1 [0139.906] FindNextFileW (in: hFindFile=0x381b80, lpFindFileData=0x31e65c | out: lpFindFileData=0x31e65c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfec9a6f8, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xefd85d60, ftLastAccessTime.dwHighDateTime=0x1d4d596, ftLastWriteTime.dwLowDateTime=0xefd85d60, ftLastWriteTime.dwHighDateTime=0x1d4d596, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="System32", cAlternateFileName="")) returned 1 [0139.906] FindNextFileW (in: hFindFile=0x381b80, lpFindFileData=0x31e65c | out: lpFindFileData=0x31e65c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xe13712, ftCreationTime.dwHighDateTime=0x1ca0432, ftLastAccessTime.dwLowDateTime=0xc893570, ftLastAccessTime.dwHighDateTime=0x1d35d06, ftLastWriteTime.dwLowDateTime=0xc893570, ftLastWriteTime.dwHighDateTime=0x1d35d06, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="SysWOW64", cAlternateFileName="")) returned 1 [0139.906] FindNextFileW (in: hFindFile=0x381b80, lpFindFileData=0x31e65c | out: lpFindFileData=0x31e65c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x12b00f8, ftCreationTime.dwHighDateTime=0x1ca0432, ftLastAccessTime.dwLowDateTime=0x8d561533, ftLastAccessTime.dwHighDateTime=0x1ca043f, ftLastWriteTime.dwLowDateTime=0x8d561533, ftLastWriteTime.dwHighDateTime=0x1ca043f, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="TAPI", cAlternateFileName="")) returned 1 [0139.906] FindNextFileW (in: hFindFile=0x381b80, lpFindFileData=0x31e65c | out: lpFindFileData=0x31e65c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x12b00f8, ftCreationTime.dwHighDateTime=0x1ca0432, ftLastAccessTime.dwLowDateTime=0xe3cd110, ftLastAccessTime.dwHighDateTime=0x1d35d06, ftLastWriteTime.dwLowDateTime=0xe3cd110, ftLastWriteTime.dwHighDateTime=0x1d35d06, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Tasks", cAlternateFileName="")) returned 1 [0139.907] FindNextFileW (in: hFindFile=0x381b80, lpFindFileData=0x31e65c | out: lpFindFileData=0x31e65c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x12d6252, ftCreationTime.dwHighDateTime=0x1ca0432, ftLastAccessTime.dwLowDateTime=0xd7782780, ftLastAccessTime.dwHighDateTime=0x1d5e82a, ftLastWriteTime.dwLowDateTime=0xd7782780, ftLastWriteTime.dwHighDateTime=0x1d5e82a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Temp", cAlternateFileName="")) returned 1 [0139.907] FindNextFileW (in: hFindFile=0x381b80, lpFindFileData=0x31e65c | out: lpFindFileData=0x31e65c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x12d6252, ftCreationTime.dwHighDateTime=0x1ca0432, ftLastAccessTime.dwLowDateTime=0x12d6252, ftLastAccessTime.dwHighDateTime=0x1ca0432, ftLastWriteTime.dwLowDateTime=0x9f16e414, ftLastWriteTime.dwHighDateTime=0x1ca042b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="tracing", cAlternateFileName="")) returned 1 [0139.907] FindNextFileW (in: hFindFile=0x381b80, lpFindFileData=0x31e65c | out: lpFindFileData=0x31e65c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7986cda0, ftCreationTime.dwHighDateTime=0x1d2de2a, ftLastAccessTime.dwLowDateTime=0x7986cda0, ftLastAccessTime.dwHighDateTime=0x1d2de2a, ftLastWriteTime.dwLowDateTime=0x7986cda0, ftLastWriteTime.dwHighDateTime=0x1d2de2a, nFileSizeHigh=0x0, nFileSizeLow=0x54b, dwReserved0=0x0, dwReserved1=0x0, cFileName="TSSysprep.log", cAlternateFileName="TSSYSP~1.LOG")) returned 1 [0139.907] FindNextFileW (in: hFindFile=0x381b80, lpFindFileData=0x31e65c | out: lpFindFileData=0x31e65c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2f64321c, ftCreationTime.dwHighDateTime=0x1c9ea14, ftLastAccessTime.dwLowDateTime=0x2f64321c, ftLastAccessTime.dwHighDateTime=0x1c9ea14, ftLastWriteTime.dwLowDateTime=0x2f64321c, ftLastWriteTime.dwHighDateTime=0x1c9ea14, nFileSizeHigh=0x0, nFileSizeLow=0x17240, dwReserved0=0x0, dwReserved1=0x0, cFileName="twain.dll", cAlternateFileName="")) returned 1 [0139.907] FindNextFileW (in: hFindFile=0x381b80, lpFindFileData=0x31e65c | out: lpFindFileData=0x31e65c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x800b91b1, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x80cc6128, ftLastAccessTime.dwHighDateTime=0x1ca0444, ftLastWriteTime.dwLowDateTime=0x80cc6128, ftLastWriteTime.dwHighDateTime=0x1ca0444, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="twain_32", cAlternateFileName="")) returned 1 [0139.907] FindNextFileW (in: hFindFile=0x381b80, lpFindFileData=0x31e65c | out: lpFindFileData=0x31e65c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb3bc54f7, ftCreationTime.dwHighDateTime=0x1cb892b, ftLastAccessTime.dwLowDateTime=0xb3bc54f7, ftLastAccessTime.dwHighDateTime=0x1cb892b, ftLastWriteTime.dwLowDateTime=0xb3bc54f7, ftLastWriteTime.dwHighDateTime=0x1cb892b, nFileSizeHigh=0x0, nFileSizeLow=0xc800, dwReserved0=0x0, dwReserved1=0x0, cFileName="twain_32.dll", cAlternateFileName="")) returned 1 [0139.907] FindNextFileW (in: hFindFile=0x381b80, lpFindFileData=0x31e65c | out: lpFindFileData=0x31e65c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe5193c78, ftCreationTime.dwHighDateTime=0x1ca040b, ftLastAccessTime.dwLowDateTime=0xe5193c78, ftLastAccessTime.dwHighDateTime=0x1ca040b, ftLastWriteTime.dwLowDateTime=0x2f66937c, ftLastWriteTime.dwHighDateTime=0x1c9ea14, nFileSizeHigh=0x0, nFileSizeLow=0xc210, dwReserved0=0x0, dwReserved1=0x0, cFileName="twunk_16.exe", cAlternateFileName="")) returned 1 [0139.907] FindNextFileW (in: hFindFile=0x381b80, lpFindFileData=0x31e65c | out: lpFindFileData=0x31e65c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x149c5632, ftCreationTime.dwHighDateTime=0x1ca0418, ftLastAccessTime.dwLowDateTime=0x149c5632, ftLastAccessTime.dwHighDateTime=0x1ca0418, ftLastWriteTime.dwLowDateTime=0x77d4a690, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x7a00, dwReserved0=0x0, dwReserved1=0x0, cFileName="twunk_32.exe", cAlternateFileName="")) returned 1 [0139.907] FindNextFileW (in: hFindFile=0x381b80, lpFindFileData=0x31e65c | out: lpFindFileData=0x31e65c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x89a56640, ftCreationTime.dwHighDateTime=0x1d305eb, ftLastAccessTime.dwLowDateTime=0x89a56640, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0xf1490400, ftLastWriteTime.dwHighDateTime=0x1d305eb, nFileSizeHigh=0x0, nFileSizeLow=0x27, dwReserved0=0x0, dwReserved1=0x0, cFileName="vbaddin.ini", cAlternateFileName="")) returned 1 [0139.908] FindNextFileW (in: hFindFile=0x381b80, lpFindFileData=0x31e65c | out: lpFindFileData=0x31e65c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x12d6252, ftCreationTime.dwHighDateTime=0x1ca0432, ftLastAccessTime.dwLowDateTime=0x12d6252, ftLastAccessTime.dwHighDateTime=0x1ca0432, ftLastWriteTime.dwLowDateTime=0x12d6252, ftLastWriteTime.dwHighDateTime=0x1ca0432, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Vss", cAlternateFileName="")) returned 1 [0139.908] FindNextFileW (in: hFindFile=0x381b80, lpFindFileData=0x31e65c | out: lpFindFileData=0x31e65c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x12fc3ac, ftCreationTime.dwHighDateTime=0x1ca0432, ftLastAccessTime.dwLowDateTime=0x80046d91, ftLastAccessTime.dwHighDateTime=0x1ca0444, ftLastWriteTime.dwLowDateTime=0x80046d91, ftLastWriteTime.dwHighDateTime=0x1ca0444, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Web", cAlternateFileName="")) returned 1 [0139.908] FindNextFileW (in: hFindFile=0x381b80, lpFindFileData=0x31e65c | out: lpFindFileData=0x31e65c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xadc7ce10, ftCreationTime.dwHighDateTime=0x1ca042b, ftLastAccessTime.dwLowDateTime=0xadc7ce10, ftLastAccessTime.dwHighDateTime=0x1ca042b, ftLastWriteTime.dwLowDateTime=0x249a330, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x1de, dwReserved0=0x0, dwReserved1=0x0, cFileName="win.ini", cAlternateFileName="")) returned 1 [0139.908] FindNextFileW (in: hFindFile=0x381b80, lpFindFileData=0x31e65c | out: lpFindFileData=0x31e65c*(dwFileAttributes=0x23, ftCreationTime.dwLowDateTime=0x2870a176, ftCreationTime.dwHighDateTime=0x1ca043f, ftLastAccessTime.dwLowDateTime=0x2870a176, ftLastAccessTime.dwHighDateTime=0x1ca043f, ftLastWriteTime.dwLowDateTime=0x28b347fe, ftLastWriteTime.dwHighDateTime=0x1ca043f, nFileSizeHigh=0x0, nFileSizeLow=0x2ed, dwReserved0=0x0, dwReserved1=0x0, cFileName="WindowsShell.Manifest", cAlternateFileName="WINDOW~1.MAN")) returned 1 [0139.908] FindNextFileW (in: hFindFile=0x381b80, lpFindFileData=0x31e65c | out: lpFindFileData=0x31e65c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x14519fc0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x14519fc0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x2c655760, ftLastWriteTime.dwHighDateTime=0x1d4d597, nFileSizeHigh=0x0, nFileSizeLow=0x1e51f, dwReserved0=0x0, dwReserved1=0x0, cFileName="WindowsUpdate.log", cAlternateFileName="WINDOW~1.LOG")) returned 1 [0139.908] FindNextFileW (in: hFindFile=0x381b80, lpFindFileData=0x31e65c | out: lpFindFileData=0x31e65c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc68ade7e, ftCreationTime.dwHighDateTime=0x1ca0417, ftLastAccessTime.dwLowDateTime=0xc68ade7e, ftLastAccessTime.dwHighDateTime=0x1ca0417, ftLastWriteTime.dwLowDateTime=0x795b1f80, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x2600, dwReserved0=0x0, dwReserved1=0x0, cFileName="winhlp32.exe", cAlternateFileName="")) returned 1 [0139.908] FindNextFileW (in: hFindFile=0x381b80, lpFindFileData=0x31e65c | out: lpFindFileData=0x31e65c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x12fc3ac, ftCreationTime.dwHighDateTime=0x1ca0432, ftLastAccessTime.dwLowDateTime=0xbbbe9b70, ftLastAccessTime.dwHighDateTime=0x1d2fab4, ftLastWriteTime.dwLowDateTime=0xbbbe9b70, ftLastWriteTime.dwHighDateTime=0x1d2fab4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="winsxs", cAlternateFileName="")) returned 1 [0139.908] FindNextFileW (in: hFindFile=0x381b80, lpFindFileData=0x31e65c | out: lpFindFileData=0x31e65c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x67827cf3, ftCreationTime.dwHighDateTime=0x1c9ea0d, ftLastAccessTime.dwLowDateTime=0x67827cf3, ftLastAccessTime.dwHighDateTime=0x1c9ea0d, ftLastWriteTime.dwLowDateTime=0x6784de51, ftLastWriteTime.dwHighDateTime=0x1c9ea0d, nFileSizeHigh=0x0, nFileSizeLow=0x4d4e0, dwReserved0=0x0, dwReserved1=0x0, cFileName="WMSysPr9.prx", cAlternateFileName="")) returned 1 [0139.908] FindNextFileW (in: hFindFile=0x381b80, lpFindFileData=0x31e65c | out: lpFindFileData=0x31e65c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x89802aba, ftCreationTime.dwHighDateTime=0x1ca0415, ftLastAccessTime.dwLowDateTime=0x89802aba, ftLastAccessTime.dwHighDateTime=0x1ca0415, ftLastWriteTime.dwLowDateTime=0xfeb14f80, ftLastWriteTime.dwHighDateTime=0x1ca0423, nFileSizeHigh=0x0, nFileSizeLow=0x2800, dwReserved0=0x0, dwReserved1=0x0, cFileName="write.exe", cAlternateFileName="")) returned 1 [0139.909] FindNextFileW (in: hFindFile=0x381b80, lpFindFileData=0x31e65c | out: lpFindFileData=0x31e65c*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0139.909] FindClose (in: hFindFile=0x381b80 | out: hFindFile=0x381b80) returned 1 [0139.909] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e8e4) returned 1 [0139.909] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e8f0) returned 1 [0139.909] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e924) returned 1 [0139.909] GetFullPathNameW (in: lpFileName="C:\\Windows", nBufferLength=0x105, lpBuffer=0x31e42c, lpFilePart=0x0 | out: lpBuffer="C:\\Windows", lpFilePart=0x0) returned 0xa [0139.909] GetFullPathNameW (in: lpFileName="C:\\Windows\\", nBufferLength=0x105, lpBuffer=0x31e400, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\", lpFilePart=0x0) returned 0xb [0139.909] FindFirstFileW (in: lpFileName="C:\\Windows\\*", lpFindFileData=0x31e64c | out: lpFindFileData=0x31e64c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfdb0c77c, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x2fb4a840, ftLastAccessTime.dwHighDateTime=0x1d4d57d, ftLastWriteTime.dwLowDateTime=0x2fb4a840, ftLastWriteTime.dwHighDateTime=0x1d4d57d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x381b80 [0139.909] FindNextFileW (in: hFindFile=0x381b80, lpFindFileData=0x31e65c | out: lpFindFileData=0x31e65c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfdb0c77c, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x2fb4a840, ftLastAccessTime.dwHighDateTime=0x1d4d57d, ftLastWriteTime.dwLowDateTime=0x2fb4a840, ftLastWriteTime.dwHighDateTime=0x1d4d57d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0139.909] FindNextFileW (in: hFindFile=0x381b80, lpFindFileData=0x31e65c | out: lpFindFileData=0x31e65c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x800b91b1, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x80b6f4c5, ftLastAccessTime.dwHighDateTime=0x1ca0444, ftLastWriteTime.dwLowDateTime=0x80b6f4c5, ftLastWriteTime.dwHighDateTime=0x1ca0444, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="addins", cAlternateFileName="")) returned 1 [0139.909] FindNextFileW (in: hFindFile=0x381b80, lpFindFileData=0x31e65c | out: lpFindFileData=0x31e65c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfdb0c77c, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfdb0c77c, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xfdb0c77c, ftLastWriteTime.dwHighDateTime=0x1ca0431, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="AppCompat", cAlternateFileName="APPCOM~1")) returned 1 [0139.909] FindNextFileW (in: hFindFile=0x381b80, lpFindFileData=0x31e65c | out: lpFindFileData=0x31e65c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfdb328d6, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x57087b83, ftLastAccessTime.dwHighDateTime=0x1cb892c, ftLastWriteTime.dwLowDateTime=0x57087b83, ftLastWriteTime.dwHighDateTime=0x1cb892c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="AppPatch", cAlternateFileName="")) returned 1 [0139.910] FindNextFileW (in: hFindFile=0x381b80, lpFindFileData=0x31e65c | out: lpFindFileData=0x31e65c*(dwFileAttributes=0x15, ftCreationTime.dwLowDateTime=0xfdb58a30, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xe968e7e0, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0xe968e7e0, ftLastWriteTime.dwHighDateTime=0x1d305f1, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="assembly", cAlternateFileName="")) returned 1 [0139.910] FindNextFileW (in: hFindFile=0x381b80, lpFindFileData=0x31e65c | out: lpFindFileData=0x31e65c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x97675415, ftCreationTime.dwHighDateTime=0x1cb892b, ftLastAccessTime.dwLowDateTime=0x97675415, ftLastAccessTime.dwHighDateTime=0x1cb892b, ftLastWriteTime.dwLowDateTime=0x977f21d7, ftLastWriteTime.dwHighDateTime=0x1cb892b, nFileSizeHigh=0x0, nFileSizeLow=0x11600, dwReserved0=0x0, dwReserved1=0x0, cFileName="bfsvc.exe", cAlternateFileName="")) returned 1 [0139.910] FindNextFileW (in: hFindFile=0x381b80, lpFindFileData=0x31e65c | out: lpFindFileData=0x31e65c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfde52538, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x80105472, ftLastAccessTime.dwHighDateTime=0x1ca0444, ftLastWriteTime.dwLowDateTime=0x80105472, ftLastWriteTime.dwHighDateTime=0x1ca0444, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Boot", cAlternateFileName="")) returned 1 [0139.910] FindNextFileW (in: hFindFile=0x381b80, lpFindFileData=0x31e65c | out: lpFindFileData=0x31e65c*(dwFileAttributes=0x24, ftCreationTime.dwLowDateTime=0x5562e640, ftCreationTime.dwHighDateTime=0x1ca0445, ftLastAccessTime.dwLowDateTime=0x5562e640, ftLastAccessTime.dwHighDateTime=0x1ca0445, ftLastWriteTime.dwLowDateTime=0xafd68640, ftLastWriteTime.dwHighDateTime=0x1d5e82a, nFileSizeHigh=0x0, nFileSizeLow=0x10800, dwReserved0=0x0, dwReserved1=0x0, cFileName="bootstat.dat", cAlternateFileName="")) returned 1 [0139.910] FindNextFileW (in: hFindFile=0x381b80, lpFindFileData=0x31e65c | out: lpFindFileData=0x31e65c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfe36132c, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x80105472, ftLastAccessTime.dwHighDateTime=0x1ca0444, ftLastWriteTime.dwLowDateTime=0x80105472, ftLastWriteTime.dwHighDateTime=0x1ca0444, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Branding", cAlternateFileName="")) returned 1 [0139.910] FindNextFileW (in: hFindFile=0x381b80, lpFindFileData=0x31e65c | out: lpFindFileData=0x31e65c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x98abb4cc, ftCreationTime.dwHighDateTime=0x1cbf8eb, ftLastAccessTime.dwLowDateTime=0x61766720, ftLastAccessTime.dwHighDateTime=0x1d2de2a, ftLastWriteTime.dwLowDateTime=0x61766720, ftLastWriteTime.dwHighDateTime=0x1d2de2a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="CSC", cAlternateFileName="")) returned 1 [0139.910] FindNextFileW (in: hFindFile=0x381b80, lpFindFileData=0x31e65c | out: lpFindFileData=0x31e65c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfe36132c, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x806ac8bc, ftLastAccessTime.dwHighDateTime=0x1ca0444, ftLastWriteTime.dwLowDateTime=0x806ac8bc, ftLastWriteTime.dwHighDateTime=0x1ca0444, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Cursors", cAlternateFileName="")) returned 1 [0139.910] FindNextFileW (in: hFindFile=0x381b80, lpFindFileData=0x31e65c | out: lpFindFileData=0x31e65c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf8a36d94, ftCreationTime.dwHighDateTime=0x1ca043d, ftLastAccessTime.dwLowDateTime=0x181cd0c0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x181cd0c0, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="debug", cAlternateFileName="")) returned 1 [0139.910] FindNextFileW (in: hFindFile=0x381b80, lpFindFileData=0x31e65c | out: lpFindFileData=0x31e65c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x800b91b1, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x800b91b1, ftLastAccessTime.dwHighDateTime=0x1ca0444, ftLastWriteTime.dwLowDateTime=0x800b91b1, ftLastWriteTime.dwHighDateTime=0x1ca0444, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="diagnostics", cAlternateFileName="DIAGNO~1")) returned 1 [0139.910] FindNextFileW (in: hFindFile=0x381b80, lpFindFileData=0x31e65c | out: lpFindFileData=0x31e65c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x3763cf0c, ftCreationTime.dwHighDateTime=0x1ca0445, ftLastAccessTime.dwLowDateTime=0xa9eeab22, ftLastAccessTime.dwHighDateTime=0x1cbf8e9, ftLastWriteTime.dwLowDateTime=0x3763cf0c, ftLastWriteTime.dwHighDateTime=0x1ca0445, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="DigitalLocker", cAlternateFileName="DIGITA~1")) returned 1 [0139.911] FindNextFileW (in: hFindFile=0x381b80, lpFindFileData=0x31e65c | out: lpFindFileData=0x31e65c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x80046d91, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x806ac8bc, ftLastAccessTime.dwHighDateTime=0x1ca0444, ftLastWriteTime.dwLowDateTime=0x806ac8bc, ftLastWriteTime.dwHighDateTime=0x1ca0444, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Downloaded Program Files", cAlternateFileName="DOWNLO~1")) returned 1 [0139.911] FindNextFileW (in: hFindFile=0x381b80, lpFindFileData=0x31e65c | out: lpFindFileData=0x31e65c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xffb94625, ftCreationTime.dwHighDateTime=0x1ca043d, ftLastAccessTime.dwLowDateTime=0xffb94625, ftLastAccessTime.dwHighDateTime=0x1ca043d, ftLastWriteTime.dwLowDateTime=0x7a349200, ftLastWriteTime.dwHighDateTime=0x1d2de2a, nFileSizeHigh=0x0, nFileSizeLow=0xae6, dwReserved0=0x0, dwReserved1=0x0, cFileName="DtcInstall.log", cAlternateFileName="DTCINS~1.LOG")) returned 1 [0139.911] FindNextFileW (in: hFindFile=0x381b80, lpFindFileData=0x31e65c | out: lpFindFileData=0x31e65c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x996cd9eb, ftCreationTime.dwHighDateTime=0x1cbf8eb, ftLastAccessTime.dwLowDateTime=0xa9fa1e6a, ftLastAccessTime.dwHighDateTime=0x1cbf8eb, ftLastWriteTime.dwLowDateTime=0x9cf49440, ftLastWriteTime.dwHighDateTime=0x1cbf8eb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="ehome", cAlternateFileName="")) returned 1 [0139.911] FindNextFileW (in: hFindFile=0x381b80, lpFindFileData=0x31e65c | out: lpFindFileData=0x31e65c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x3757e82b, ftCreationTime.dwHighDateTime=0x1ca0445, ftLastAccessTime.dwLowDateTime=0x23fb0799, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x1e423fe3, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="en-US", cAlternateFileName="")) returned 1 [0139.911] FindNextFileW (in: hFindFile=0x381b80, lpFindFileData=0x31e65c | out: lpFindFileData=0x31e65c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x90cd4312, ftCreationTime.dwHighDateTime=0x1cb892b, ftLastAccessTime.dwLowDateTime=0x90cd4312, ftLastAccessTime.dwHighDateTime=0x1cb892b, ftLastWriteTime.dwLowDateTime=0x90d6c893, ftLastWriteTime.dwHighDateTime=0x1cb892b, nFileSizeHigh=0x0, nFileSizeLow=0x2bd400, dwReserved0=0x0, dwReserved1=0x0, cFileName="explorer.exe", cAlternateFileName="")) returned 1 [0139.911] FindNextFileW (in: hFindFile=0x381b80, lpFindFileData=0x31e65c | out: lpFindFileData=0x31e65c*(dwFileAttributes=0x15, ftCreationTime.dwLowDateTime=0xfe387486, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x6d0f7050, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x6d0f7050, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Fonts", cAlternateFileName="")) returned 1 [0139.911] FindNextFileW (in: hFindFile=0x381b80, lpFindFileData=0x31e65c | out: lpFindFileData=0x31e65c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc0a7e9b0, ftCreationTime.dwHighDateTime=0x1ca0410, ftLastAccessTime.dwLowDateTime=0xc0a7e9b0, ftLastAccessTime.dwHighDateTime=0x1ca0410, ftLastWriteTime.dwLowDateTime=0xe2da8a60, ftLastWriteTime.dwHighDateTime=0x1ca0423, nFileSizeHigh=0x0, nFileSizeLow=0x3c00, dwReserved0=0x0, dwReserved1=0x0, cFileName="fveupdate.exe", cAlternateFileName="")) returned 1 [0139.911] FindNextFileW (in: hFindFile=0x381b80, lpFindFileData=0x31e65c | out: lpFindFileData=0x31e65c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfe387486, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xe9340f25, ftLastAccessTime.dwHighDateTime=0x1cbf8eb, ftLastWriteTime.dwLowDateTime=0xe9340f25, ftLastWriteTime.dwHighDateTime=0x1cbf8eb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Globalization", cAlternateFileName="GLOBAL~1")) returned 1 [0139.911] FindNextFileW (in: hFindFile=0x381b80, lpFindFileData=0x31e65c | out: lpFindFileData=0x31e65c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfe3f9894, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x1d967bdb, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x1d967bdb, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Help", cAlternateFileName="")) returned 1 [0139.912] FindNextFileW (in: hFindFile=0x381b80, lpFindFileData=0x31e65c | out: lpFindFileData=0x31e65c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x34a5a972, ftCreationTime.dwHighDateTime=0x1ca041a, ftLastAccessTime.dwLowDateTime=0x34a5a972, ftLastAccessTime.dwHighDateTime=0x1ca041a, ftLastWriteTime.dwLowDateTime=0xe391cc70, ftLastWriteTime.dwHighDateTime=0x1ca0423, nFileSizeHigh=0x0, nFileSizeLow=0xb3200, dwReserved0=0x0, dwReserved1=0x0, cFileName="HelpPane.exe", cAlternateFileName="")) returned 1 [0139.912] FindNextFileW (in: hFindFile=0x381b80, lpFindFileData=0x31e65c | out: lpFindFileData=0x31e65c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x16ca6ff3, ftCreationTime.dwHighDateTime=0x1ca041a, ftLastAccessTime.dwLowDateTime=0x16ca6ff3, ftLastAccessTime.dwHighDateTime=0x1ca041a, ftLastWriteTime.dwLowDateTime=0xe391cc70, ftLastWriteTime.dwHighDateTime=0x1ca0423, nFileSizeHigh=0x0, nFileSizeLow=0x4200, dwReserved0=0x0, dwReserved1=0x0, cFileName="hh.exe", cAlternateFileName="")) returned 1 [0139.912] FindNextFileW (in: hFindFile=0x381b80, lpFindFileData=0x31e65c | out: lpFindFileData=0x31e65c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfe445b48, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x3763cf0c, ftLastAccessTime.dwHighDateTime=0x1ca0445, ftLastWriteTime.dwLowDateTime=0x3763cf0c, ftLastWriteTime.dwHighDateTime=0x1ca0445, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="IME", cAlternateFileName="")) returned 1 [0139.912] FindNextFileW (in: hFindFile=0x381b80, lpFindFileData=0x31e65c | out: lpFindFileData=0x31e65c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfe50420a, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xefd5fc00, ftLastAccessTime.dwHighDateTime=0x1d4d596, ftLastWriteTime.dwLowDateTime=0xefd5fc00, ftLastWriteTime.dwHighDateTime=0x1d4d596, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="inf", cAlternateFileName="")) returned 1 [0139.912] FindNextFileW (in: hFindFile=0x381b80, lpFindFileData=0x31e65c | out: lpFindFileData=0x31e65c*(dwFileAttributes=0x16, ftCreationTime.dwLowDateTime=0x72a697c0, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0xeda8bc40, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0xeda8bc40, ftLastWriteTime.dwHighDateTime=0x1d305f1, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Installer", cAlternateFileName="INSTAL~1")) returned 1 [0139.912] FindNextFileW (in: hFindFile=0x381b80, lpFindFileData=0x31e65c | out: lpFindFileData=0x31e65c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfe60eb80, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x80b6f4c5, ftLastAccessTime.dwHighDateTime=0x1ca0444, ftLastWriteTime.dwLowDateTime=0x80b6f4c5, ftLastWriteTime.dwHighDateTime=0x1ca0444, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="L2Schemas", cAlternateFileName="L2SCHE~1")) returned 1 [0139.912] FindNextFileW (in: hFindFile=0x381b80, lpFindFileData=0x31e65c | out: lpFindFileData=0x31e65c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfe60eb80, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfe60eb80, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0x9a0a5fd1, ftLastWriteTime.dwHighDateTime=0x1ca042b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="LiveKernelReports", cAlternateFileName="LIVEKE~1")) returned 1 [0139.912] FindNextFileW (in: hFindFile=0x381b80, lpFindFileData=0x31e65c | out: lpFindFileData=0x31e65c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfe60eb80, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x6938ae40, ftLastAccessTime.dwHighDateTime=0x1d2fafa, ftLastWriteTime.dwLowDateTime=0x6938ae40, ftLastWriteTime.dwHighDateTime=0x1d2fafa, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Logs", cAlternateFileName="")) returned 1 [0139.912] FindNextFileW (in: hFindFile=0x381b80, lpFindFileData=0x31e65c | out: lpFindFileData=0x31e65c*(dwFileAttributes=0x15, ftCreationTime.dwLowDateTime=0xfe60eb80, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x8105822e, ftLastAccessTime.dwHighDateTime=0x1ca0444, ftLastWriteTime.dwLowDateTime=0x8105822e, ftLastWriteTime.dwHighDateTime=0x1ca0444, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Media", cAlternateFileName="")) returned 1 [0139.913] FindNextFileW (in: hFindFile=0x381b80, lpFindFileData=0x31e65c | out: lpFindFileData=0x31e65c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7f29dbd7, ftCreationTime.dwHighDateTime=0x1ca0417, ftLastAccessTime.dwLowDateTime=0x7f29dbd7, ftLastAccessTime.dwHighDateTime=0x1ca0417, ftLastWriteTime.dwLowDateTime=0x9d4aec0c, ftLastWriteTime.dwHighDateTime=0x1ca040e, nFileSizeHigh=0x0, nFileSizeLow=0xa87b, dwReserved0=0x0, dwReserved1=0x0, cFileName="mib.bin", cAlternateFileName="")) returned 1 [0139.913] FindNextFileW (in: hFindFile=0x381b80, lpFindFileData=0x31e65c | out: lpFindFileData=0x31e65c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfe6f339c, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xd0be0600, ftLastAccessTime.dwHighDateTime=0x1d4d596, ftLastWriteTime.dwLowDateTime=0xd0be0600, ftLastWriteTime.dwHighDateTime=0x1d4d596, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.NET", cAlternateFileName="MICROS~1.NET")) returned 1 [0139.913] FindNextFileW (in: hFindFile=0x381b80, lpFindFileData=0x31e65c | out: lpFindFileData=0x31e65c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x56a9ce00, ftCreationTime.dwHighDateTime=0x1d2e676, ftLastAccessTime.dwLowDateTime=0x56a9ce00, ftLastAccessTime.dwHighDateTime=0x1d2e676, ftLastWriteTime.dwLowDateTime=0x56a9ce00, ftLastWriteTime.dwHighDateTime=0x1d2e676, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Migration", cAlternateFileName="MIGRAT~1")) returned 1 [0139.913] FindNextFileW (in: hFindFile=0x381b80, lpFindFileData=0x31e65c | out: lpFindFileData=0x31e65c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfea5f2b2, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfea5f2b2, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0x9fcbcbb0, ftLastWriteTime.dwHighDateTime=0x1ca042b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="ModemLogs", cAlternateFileName="MODEML~1")) returned 1 [0139.913] FindNextFileW (in: hFindFile=0x381b80, lpFindFileData=0x31e65c | out: lpFindFileData=0x31e65c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc82fedc8, ftCreationTime.dwHighDateTime=0x1ca042b, ftLastAccessTime.dwLowDateTime=0xc82fedc8, ftLastAccessTime.dwHighDateTime=0x1ca042b, ftLastWriteTime.dwLowDateTime=0x2d6b0bf3, ftLastWriteTime.dwHighDateTime=0x1c9ea0b, nFileSizeHigh=0x0, nFileSizeLow=0x57d, dwReserved0=0x0, dwReserved1=0x0, cFileName="msdfmap.ini", cAlternateFileName="")) returned 1 [0139.913] FindNextFileW (in: hFindFile=0x381b80, lpFindFileData=0x31e65c | out: lpFindFileData=0x31e65c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8eb2c4cd, ftCreationTime.dwHighDateTime=0x1ca0415, ftLastAccessTime.dwLowDateTime=0x8eb2c4cd, ftLastAccessTime.dwHighDateTime=0x1ca0415, ftLastWriteTime.dwLowDateTime=0xeb804920, ftLastWriteTime.dwHighDateTime=0x1ca0423, nFileSizeHigh=0x0, nFileSizeLow=0x2f400, dwReserved0=0x0, dwReserved1=0x0, cFileName="notepad.exe", cAlternateFileName="")) returned 1 [0139.913] FindNextFileW (in: hFindFile=0x381b80, lpFindFileData=0x31e65c | out: lpFindFileData=0x31e65c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x800df312, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x810320ce, ftLastAccessTime.dwHighDateTime=0x1ca0444, ftLastWriteTime.dwLowDateTime=0x810320ce, ftLastWriteTime.dwHighDateTime=0x1ca0444, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Offline Web Pages", cAlternateFileName="OFFLIN~1")) returned 1 [0139.913] FindNextFileW (in: hFindFile=0x381b80, lpFindFileData=0x31e65c | out: lpFindFileData=0x31e65c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xb3172800, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0x281b0dc0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x281b0dc0, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Panther", cAlternateFileName="")) returned 1 [0139.913] FindNextFileW (in: hFindFile=0x381b80, lpFindFileData=0x31e65c | out: lpFindFileData=0x31e65c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x50ea0e30, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x50ea0e30, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x50ea0e30, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="PCHEALTH", cAlternateFileName="")) returned 1 [0139.914] FindNextFileW (in: hFindFile=0x381b80, lpFindFileData=0x31e65c | out: lpFindFileData=0x31e65c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x80046d91, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x80046d91, ftLastAccessTime.dwHighDateTime=0x1ca0444, ftLastWriteTime.dwLowDateTime=0x80046d91, ftLastWriteTime.dwHighDateTime=0x1ca0444, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Performance", cAlternateFileName="PERFOR~1")) returned 1 [0139.914] FindNextFileW (in: hFindFile=0x381b80, lpFindFileData=0x31e65c | out: lpFindFileData=0x31e65c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc4e1cc01, ftCreationTime.dwHighDateTime=0x1cb892e, ftLastAccessTime.dwLowDateTime=0xc4e1cc01, ftLastAccessTime.dwHighDateTime=0x1cb892e, ftLastWriteTime.dwLowDateTime=0x78374e00, ftLastWriteTime.dwHighDateTime=0x1d30596, nFileSizeHigh=0x0, nFileSizeLow=0x69ea, dwReserved0=0x0, dwReserved1=0x0, cFileName="PFRO.log", cAlternateFileName="")) returned 1 [0139.914] FindNextFileW (in: hFindFile=0x381b80, lpFindFileData=0x31e65c | out: lpFindFileData=0x31e65c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfea8540c, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfeaf781a, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xfeaf781a, ftLastWriteTime.dwHighDateTime=0x1ca0431, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="PLA", cAlternateFileName="")) returned 1 [0139.914] FindNextFileW (in: hFindFile=0x381b80, lpFindFileData=0x31e65c | out: lpFindFileData=0x31e65c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfeb1d974, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x94d2e7b9, ftLastAccessTime.dwHighDateTime=0x1cbf8eb, ftLastWriteTime.dwLowDateTime=0x94d2e7b9, ftLastWriteTime.dwHighDateTime=0x1cbf8eb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="PolicyDefinitions", cAlternateFileName="POLICY~1")) returned 1 [0139.914] FindNextFileW (in: hFindFile=0x381b80, lpFindFileData=0x31e65c | out: lpFindFileData=0x31e65c*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x6240bc00, ftCreationTime.dwHighDateTime=0x1d2de2a, ftLastAccessTime.dwLowDateTime=0xef82e560, ftLastAccessTime.dwHighDateTime=0x1d6eb7e, ftLastWriteTime.dwLowDateTime=0xef82e560, ftLastWriteTime.dwHighDateTime=0x1d6eb7e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Prefetch", cAlternateFileName="")) returned 1 [0139.914] FindNextFileW (in: hFindFile=0x381b80, lpFindFileData=0x31e65c | out: lpFindFileData=0x31e65c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xaf9a5c4e, ftCreationTime.dwHighDateTime=0x1cbf8eb, ftLastAccessTime.dwLowDateTime=0xaf9cbebd, ftLastAccessTime.dwHighDateTime=0x1cbf8eb, ftLastWriteTime.dwLowDateTime=0x1f863780, ftLastWriteTime.dwHighDateTime=0x1d6eb7f, nFileSizeHigh=0x0, nFileSizeLow=0xd130, dwReserved0=0x0, dwReserved1=0x0, cFileName="Professional.xml", cAlternateFileName="PROFES~1.XML")) returned 1 [0139.914] FindNextFileW (in: hFindFile=0x381b80, lpFindFileData=0x31e65c | out: lpFindFileData=0x31e65c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x71a7c91c, ftCreationTime.dwHighDateTime=0x1ca0411, ftLastAccessTime.dwLowDateTime=0x71a7c91c, ftLastAccessTime.dwHighDateTime=0x1ca0411, ftLastWriteTime.dwLowDateTime=0xedf95f70, ftLastWriteTime.dwHighDateTime=0x1ca0423, nFileSizeHigh=0x0, nFileSizeLow=0x68400, dwReserved0=0x0, dwReserved1=0x0, cFileName="regedit.exe", cAlternateFileName="")) returned 1 [0139.914] FindNextFileW (in: hFindFile=0x381b80, lpFindFileData=0x31e65c | out: lpFindFileData=0x31e65c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfeb43ace, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xff1f57a0, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xff1f57a0, ftLastWriteTime.dwHighDateTime=0x1ca0431, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Registration", cAlternateFileName="REGIST~1")) returned 1 [0139.914] FindNextFileW (in: hFindFile=0x381b80, lpFindFileData=0x31e65c | out: lpFindFileData=0x31e65c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfeb69c28, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x2b041c20, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x2b041c20, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="rescache", cAlternateFileName="")) returned 1 [0139.915] FindNextFileW (in: hFindFile=0x381b80, lpFindFileData=0x31e65c | out: lpFindFileData=0x31e65c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfeb8fd82, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x80046d91, ftLastAccessTime.dwHighDateTime=0x1ca0444, ftLastWriteTime.dwLowDateTime=0x80046d91, ftLastWriteTime.dwHighDateTime=0x1ca0444, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Resources", cAlternateFileName="RESOUR~1")) returned 1 [0139.915] FindNextFileW (in: hFindFile=0x381b80, lpFindFileData=0x31e65c | out: lpFindFileData=0x31e65c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfebb5edc, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfebb5edc, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xcb547a92, ftLastWriteTime.dwHighDateTime=0x1ca042b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="SchCache", cAlternateFileName="")) returned 1 [0139.915] FindNextFileW (in: hFindFile=0x381b80, lpFindFileData=0x31e65c | out: lpFindFileData=0x31e65c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfebdc036, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x80046d91, ftLastAccessTime.dwHighDateTime=0x1ca0444, ftLastWriteTime.dwLowDateTime=0x80046d91, ftLastWriteTime.dwHighDateTime=0x1ca0444, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="schemas", cAlternateFileName="")) returned 1 [0139.915] FindNextFileW (in: hFindFile=0x381b80, lpFindFileData=0x31e65c | out: lpFindFileData=0x31e65c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfec02190, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x98abb4cc, ftLastAccessTime.dwHighDateTime=0x1cbf8eb, ftLastWriteTime.dwLowDateTime=0x98abb4cc, ftLastWriteTime.dwHighDateTime=0x1cbf8eb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="security", cAlternateFileName="")) returned 1 [0139.915] FindNextFileW (in: hFindFile=0x381b80, lpFindFileData=0x31e65c | out: lpFindFileData=0x31e65c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf484ebfa, ftCreationTime.dwHighDateTime=0x1ca043d, ftLastAccessTime.dwLowDateTime=0xf4be0d01, ftLastAccessTime.dwHighDateTime=0x1ca043d, ftLastWriteTime.dwLowDateTime=0xf4be0d01, ftLastWriteTime.dwHighDateTime=0x1ca043d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="ServiceProfiles", cAlternateFileName="SERVIC~2")) returned 1 [0139.915] FindNextFileW (in: hFindFile=0x381b80, lpFindFileData=0x31e65c | out: lpFindFileData=0x31e65c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfec4e444, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x1ea1accb, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x1ea1accb, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="servicing", cAlternateFileName="SERVIC~1")) returned 1 [0139.915] FindNextFileW (in: hFindFile=0x381b80, lpFindFileData=0x31e65c | out: lpFindFileData=0x31e65c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf627de2b, ftCreationTime.dwHighDateTime=0x1ca043d, ftLastAccessTime.dwLowDateTime=0xf62a3f8b, ftLastAccessTime.dwHighDateTime=0x1ca043d, ftLastWriteTime.dwLowDateTime=0xf62a3f8b, ftLastWriteTime.dwHighDateTime=0x1ca043d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Setup", cAlternateFileName="")) returned 1 [0139.915] FindNextFileW (in: hFindFile=0x381b80, lpFindFileData=0x31e65c | out: lpFindFileData=0x31e65c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2fb4a840, ftCreationTime.dwHighDateTime=0x1d4d57d, ftLastAccessTime.dwLowDateTime=0x2fb4a840, ftLastAccessTime.dwHighDateTime=0x1d4d57d, ftLastWriteTime.dwLowDateTime=0xb0760260, ftLastWriteTime.dwHighDateTime=0x1d5e82a, nFileSizeHigh=0x0, nFileSizeLow=0x102, dwReserved0=0x0, dwReserved1=0x0, cFileName="setupact.log", cAlternateFileName="")) returned 1 [0139.915] FindNextFileW (in: hFindFile=0x381b80, lpFindFileData=0x31e65c | out: lpFindFileData=0x31e65c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2fb4a840, ftCreationTime.dwHighDateTime=0x1d4d57d, ftLastAccessTime.dwLowDateTime=0x2fb4a840, ftLastAccessTime.dwHighDateTime=0x1d4d57d, ftLastWriteTime.dwLowDateTime=0x2fb4a840, ftLastWriteTime.dwHighDateTime=0x1d4d57d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="setuperr.log", cAlternateFileName="")) returned 1 [0139.915] FindNextFileW (in: hFindFile=0x381b80, lpFindFileData=0x31e65c | out: lpFindFileData=0x31e65c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x9968150d, ftCreationTime.dwHighDateTime=0x1cbf8eb, ftLastAccessTime.dwLowDateTime=0xaf52ba40, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0xaf52ba40, ftLastWriteTime.dwHighDateTime=0x1d305f1, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="ShellNew", cAlternateFileName="")) returned 1 [0139.915] FindNextFileW (in: hFindFile=0x381b80, lpFindFileData=0x31e65c | out: lpFindFileData=0x31e65c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x145b2540, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x2cafb6a0, ftLastAccessTime.dwHighDateTime=0x1d2e621, ftLastWriteTime.dwLowDateTime=0x2cafb6a0, ftLastWriteTime.dwHighDateTime=0x1d2e621, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="SoftwareDistribution", cAlternateFileName="SOFTWA~1")) returned 1 [0139.916] FindNextFileW (in: hFindFile=0x381b80, lpFindFileData=0x31e65c | out: lpFindFileData=0x31e65c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfec7459e, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x1d9da406, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x1d9da406, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Speech", cAlternateFileName="")) returned 1 [0139.916] FindNextFileW (in: hFindFile=0x381b80, lpFindFileData=0x31e65c | out: lpFindFileData=0x31e65c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x936ee880, ftCreationTime.dwHighDateTime=0x1cb892b, ftLastAccessTime.dwLowDateTime=0x936ee880, ftLastAccessTime.dwHighDateTime=0x1cb892b, ftLastWriteTime.dwLowDateTime=0x936ee880, ftLastWriteTime.dwHighDateTime=0x1cb892b, nFileSizeHigh=0x0, nFileSizeLow=0x10600, dwReserved0=0x0, dwReserved1=0x0, cFileName="splwow64.exe", cAlternateFileName="")) returned 1 [0139.916] FindNextFileW (in: hFindFile=0x381b80, lpFindFileData=0x31e65c | out: lpFindFileData=0x31e65c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf0aa2eb0, ftCreationTime.dwHighDateTime=0x1ca0443, ftLastAccessTime.dwLowDateTime=0xf0aa2eb0, ftLastAccessTime.dwHighDateTime=0x1ca0443, ftLastWriteTime.dwLowDateTime=0x1f921e60, ftLastWriteTime.dwHighDateTime=0x1d6eb7f, nFileSizeHigh=0x0, nFileSizeLow=0xbc50, dwReserved0=0x0, dwReserved1=0x0, cFileName="Starter.xml", cAlternateFileName="")) returned 1 [0139.916] FindNextFileW (in: hFindFile=0x381b80, lpFindFileData=0x31e65c | out: lpFindFileData=0x31e65c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfec7459e, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfec7459e, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xf404c84a, ftLastWriteTime.dwHighDateTime=0x1ca042b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="system", cAlternateFileName="")) returned 1 [0139.916] FindNextFileW (in: hFindFile=0x381b80, lpFindFileData=0x31e65c | out: lpFindFileData=0x31e65c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xadc7ce10, ftCreationTime.dwHighDateTime=0x1ca042b, ftLastAccessTime.dwLowDateTime=0xadc7ce10, ftLastAccessTime.dwHighDateTime=0x1ca042b, ftLastWriteTime.dwLowDateTime=0x8bb1d8db, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0xdb, dwReserved0=0x0, dwReserved1=0x0, cFileName="system.ini", cAlternateFileName="")) returned 1 [0139.916] FindNextFileW (in: hFindFile=0x381b80, lpFindFileData=0x31e65c | out: lpFindFileData=0x31e65c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfec9a6f8, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xefd85d60, ftLastAccessTime.dwHighDateTime=0x1d4d596, ftLastWriteTime.dwLowDateTime=0xefd85d60, ftLastWriteTime.dwHighDateTime=0x1d4d596, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="System32", cAlternateFileName="")) returned 1 [0139.916] FindNextFileW (in: hFindFile=0x381b80, lpFindFileData=0x31e65c | out: lpFindFileData=0x31e65c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xe13712, ftCreationTime.dwHighDateTime=0x1ca0432, ftLastAccessTime.dwLowDateTime=0xc893570, ftLastAccessTime.dwHighDateTime=0x1d35d06, ftLastWriteTime.dwLowDateTime=0xc893570, ftLastWriteTime.dwHighDateTime=0x1d35d06, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="SysWOW64", cAlternateFileName="")) returned 1 [0139.916] FindNextFileW (in: hFindFile=0x381b80, lpFindFileData=0x31e65c | out: lpFindFileData=0x31e65c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x12b00f8, ftCreationTime.dwHighDateTime=0x1ca0432, ftLastAccessTime.dwLowDateTime=0x8d561533, ftLastAccessTime.dwHighDateTime=0x1ca043f, ftLastWriteTime.dwLowDateTime=0x8d561533, ftLastWriteTime.dwHighDateTime=0x1ca043f, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="TAPI", cAlternateFileName="")) returned 1 [0139.917] FindNextFileW (in: hFindFile=0x381b80, lpFindFileData=0x31e65c | out: lpFindFileData=0x31e65c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x12b00f8, ftCreationTime.dwHighDateTime=0x1ca0432, ftLastAccessTime.dwLowDateTime=0xe3cd110, ftLastAccessTime.dwHighDateTime=0x1d35d06, ftLastWriteTime.dwLowDateTime=0xe3cd110, ftLastWriteTime.dwHighDateTime=0x1d35d06, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Tasks", cAlternateFileName="")) returned 1 [0139.917] FindNextFileW (in: hFindFile=0x381b80, lpFindFileData=0x31e65c | out: lpFindFileData=0x31e65c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x12d6252, ftCreationTime.dwHighDateTime=0x1ca0432, ftLastAccessTime.dwLowDateTime=0xd7782780, ftLastAccessTime.dwHighDateTime=0x1d5e82a, ftLastWriteTime.dwLowDateTime=0xd7782780, ftLastWriteTime.dwHighDateTime=0x1d5e82a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Temp", cAlternateFileName="")) returned 1 [0139.917] FindNextFileW (in: hFindFile=0x381b80, lpFindFileData=0x31e65c | out: lpFindFileData=0x31e65c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x12d6252, ftCreationTime.dwHighDateTime=0x1ca0432, ftLastAccessTime.dwLowDateTime=0x12d6252, ftLastAccessTime.dwHighDateTime=0x1ca0432, ftLastWriteTime.dwLowDateTime=0x9f16e414, ftLastWriteTime.dwHighDateTime=0x1ca042b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="tracing", cAlternateFileName="")) returned 1 [0139.917] FindNextFileW (in: hFindFile=0x381b80, lpFindFileData=0x31e65c | out: lpFindFileData=0x31e65c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7986cda0, ftCreationTime.dwHighDateTime=0x1d2de2a, ftLastAccessTime.dwLowDateTime=0x7986cda0, ftLastAccessTime.dwHighDateTime=0x1d2de2a, ftLastWriteTime.dwLowDateTime=0x7986cda0, ftLastWriteTime.dwHighDateTime=0x1d2de2a, nFileSizeHigh=0x0, nFileSizeLow=0x54b, dwReserved0=0x0, dwReserved1=0x0, cFileName="TSSysprep.log", cAlternateFileName="TSSYSP~1.LOG")) returned 1 [0139.917] FindNextFileW (in: hFindFile=0x381b80, lpFindFileData=0x31e65c | out: lpFindFileData=0x31e65c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2f64321c, ftCreationTime.dwHighDateTime=0x1c9ea14, ftLastAccessTime.dwLowDateTime=0x2f64321c, ftLastAccessTime.dwHighDateTime=0x1c9ea14, ftLastWriteTime.dwLowDateTime=0x2f64321c, ftLastWriteTime.dwHighDateTime=0x1c9ea14, nFileSizeHigh=0x0, nFileSizeLow=0x17240, dwReserved0=0x0, dwReserved1=0x0, cFileName="twain.dll", cAlternateFileName="")) returned 1 [0139.917] FindNextFileW (in: hFindFile=0x381b80, lpFindFileData=0x31e65c | out: lpFindFileData=0x31e65c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x800b91b1, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x80cc6128, ftLastAccessTime.dwHighDateTime=0x1ca0444, ftLastWriteTime.dwLowDateTime=0x80cc6128, ftLastWriteTime.dwHighDateTime=0x1ca0444, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="twain_32", cAlternateFileName="")) returned 1 [0139.917] FindNextFileW (in: hFindFile=0x381b80, lpFindFileData=0x31e65c | out: lpFindFileData=0x31e65c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb3bc54f7, ftCreationTime.dwHighDateTime=0x1cb892b, ftLastAccessTime.dwLowDateTime=0xb3bc54f7, ftLastAccessTime.dwHighDateTime=0x1cb892b, ftLastWriteTime.dwLowDateTime=0xb3bc54f7, ftLastWriteTime.dwHighDateTime=0x1cb892b, nFileSizeHigh=0x0, nFileSizeLow=0xc800, dwReserved0=0x0, dwReserved1=0x0, cFileName="twain_32.dll", cAlternateFileName="")) returned 1 [0139.917] FindNextFileW (in: hFindFile=0x381b80, lpFindFileData=0x31e65c | out: lpFindFileData=0x31e65c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe5193c78, ftCreationTime.dwHighDateTime=0x1ca040b, ftLastAccessTime.dwLowDateTime=0xe5193c78, ftLastAccessTime.dwHighDateTime=0x1ca040b, ftLastWriteTime.dwLowDateTime=0x2f66937c, ftLastWriteTime.dwHighDateTime=0x1c9ea14, nFileSizeHigh=0x0, nFileSizeLow=0xc210, dwReserved0=0x0, dwReserved1=0x0, cFileName="twunk_16.exe", cAlternateFileName="")) returned 1 [0139.917] FindNextFileW (in: hFindFile=0x381b80, lpFindFileData=0x31e65c | out: lpFindFileData=0x31e65c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x149c5632, ftCreationTime.dwHighDateTime=0x1ca0418, ftLastAccessTime.dwLowDateTime=0x149c5632, ftLastAccessTime.dwHighDateTime=0x1ca0418, ftLastWriteTime.dwLowDateTime=0x77d4a690, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x7a00, dwReserved0=0x0, dwReserved1=0x0, cFileName="twunk_32.exe", cAlternateFileName="")) returned 1 [0139.918] FindNextFileW (in: hFindFile=0x381b80, lpFindFileData=0x31e65c | out: lpFindFileData=0x31e65c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x89a56640, ftCreationTime.dwHighDateTime=0x1d305eb, ftLastAccessTime.dwLowDateTime=0x89a56640, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0xf1490400, ftLastWriteTime.dwHighDateTime=0x1d305eb, nFileSizeHigh=0x0, nFileSizeLow=0x27, dwReserved0=0x0, dwReserved1=0x0, cFileName="vbaddin.ini", cAlternateFileName="")) returned 1 [0139.918] FindNextFileW (in: hFindFile=0x381b80, lpFindFileData=0x31e65c | out: lpFindFileData=0x31e65c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x12d6252, ftCreationTime.dwHighDateTime=0x1ca0432, ftLastAccessTime.dwLowDateTime=0x12d6252, ftLastAccessTime.dwHighDateTime=0x1ca0432, ftLastWriteTime.dwLowDateTime=0x12d6252, ftLastWriteTime.dwHighDateTime=0x1ca0432, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Vss", cAlternateFileName="")) returned 1 [0139.918] FindNextFileW (in: hFindFile=0x381b80, lpFindFileData=0x31e65c | out: lpFindFileData=0x31e65c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x12fc3ac, ftCreationTime.dwHighDateTime=0x1ca0432, ftLastAccessTime.dwLowDateTime=0x80046d91, ftLastAccessTime.dwHighDateTime=0x1ca0444, ftLastWriteTime.dwLowDateTime=0x80046d91, ftLastWriteTime.dwHighDateTime=0x1ca0444, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Web", cAlternateFileName="")) returned 1 [0139.918] FindNextFileW (in: hFindFile=0x381b80, lpFindFileData=0x31e65c | out: lpFindFileData=0x31e65c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xadc7ce10, ftCreationTime.dwHighDateTime=0x1ca042b, ftLastAccessTime.dwLowDateTime=0xadc7ce10, ftLastAccessTime.dwHighDateTime=0x1ca042b, ftLastWriteTime.dwLowDateTime=0x249a330, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x1de, dwReserved0=0x0, dwReserved1=0x0, cFileName="win.ini", cAlternateFileName="")) returned 1 [0139.918] FindNextFileW (in: hFindFile=0x381b80, lpFindFileData=0x31e65c | out: lpFindFileData=0x31e65c*(dwFileAttributes=0x23, ftCreationTime.dwLowDateTime=0x2870a176, ftCreationTime.dwHighDateTime=0x1ca043f, ftLastAccessTime.dwLowDateTime=0x2870a176, ftLastAccessTime.dwHighDateTime=0x1ca043f, ftLastWriteTime.dwLowDateTime=0x28b347fe, ftLastWriteTime.dwHighDateTime=0x1ca043f, nFileSizeHigh=0x0, nFileSizeLow=0x2ed, dwReserved0=0x0, dwReserved1=0x0, cFileName="WindowsShell.Manifest", cAlternateFileName="WINDOW~1.MAN")) returned 1 [0139.918] FindNextFileW (in: hFindFile=0x381b80, lpFindFileData=0x31e65c | out: lpFindFileData=0x31e65c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x14519fc0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x14519fc0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x2c655760, ftLastWriteTime.dwHighDateTime=0x1d4d597, nFileSizeHigh=0x0, nFileSizeLow=0x1e51f, dwReserved0=0x0, dwReserved1=0x0, cFileName="WindowsUpdate.log", cAlternateFileName="WINDOW~1.LOG")) returned 1 [0139.918] FindNextFileW (in: hFindFile=0x381b80, lpFindFileData=0x31e65c | out: lpFindFileData=0x31e65c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc68ade7e, ftCreationTime.dwHighDateTime=0x1ca0417, ftLastAccessTime.dwLowDateTime=0xc68ade7e, ftLastAccessTime.dwHighDateTime=0x1ca0417, ftLastWriteTime.dwLowDateTime=0x795b1f80, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x2600, dwReserved0=0x0, dwReserved1=0x0, cFileName="winhlp32.exe", cAlternateFileName="")) returned 1 [0139.918] FindNextFileW (in: hFindFile=0x381b80, lpFindFileData=0x31e65c | out: lpFindFileData=0x31e65c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x12fc3ac, ftCreationTime.dwHighDateTime=0x1ca0432, ftLastAccessTime.dwLowDateTime=0xbbbe9b70, ftLastAccessTime.dwHighDateTime=0x1d2fab4, ftLastWriteTime.dwLowDateTime=0xbbbe9b70, ftLastWriteTime.dwHighDateTime=0x1d2fab4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="winsxs", cAlternateFileName="")) returned 1 [0139.918] FindNextFileW (in: hFindFile=0x381b80, lpFindFileData=0x31e65c | out: lpFindFileData=0x31e65c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x67827cf3, ftCreationTime.dwHighDateTime=0x1c9ea0d, ftLastAccessTime.dwLowDateTime=0x67827cf3, ftLastAccessTime.dwHighDateTime=0x1c9ea0d, ftLastWriteTime.dwLowDateTime=0x6784de51, ftLastWriteTime.dwHighDateTime=0x1c9ea0d, nFileSizeHigh=0x0, nFileSizeLow=0x4d4e0, dwReserved0=0x0, dwReserved1=0x0, cFileName="WMSysPr9.prx", cAlternateFileName="")) returned 1 [0139.919] FindNextFileW (in: hFindFile=0x381b80, lpFindFileData=0x31e65c | out: lpFindFileData=0x31e65c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x89802aba, ftCreationTime.dwHighDateTime=0x1ca0415, ftLastAccessTime.dwLowDateTime=0x89802aba, ftLastAccessTime.dwHighDateTime=0x1ca0415, ftLastWriteTime.dwLowDateTime=0xfeb14f80, ftLastWriteTime.dwHighDateTime=0x1ca0423, nFileSizeHigh=0x0, nFileSizeLow=0x2800, dwReserved0=0x0, dwReserved1=0x0, cFileName="write.exe", cAlternateFileName="")) returned 1 [0139.919] FindNextFileW (in: hFindFile=0x381b80, lpFindFileData=0x31e65c | out: lpFindFileData=0x31e65c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x89802aba, ftCreationTime.dwHighDateTime=0x1ca0415, ftLastAccessTime.dwLowDateTime=0x89802aba, ftLastAccessTime.dwHighDateTime=0x1ca0415, ftLastWriteTime.dwLowDateTime=0xfeb14f80, ftLastWriteTime.dwHighDateTime=0x1ca0423, nFileSizeHigh=0x0, nFileSizeLow=0x2800, dwReserved0=0x0, dwReserved1=0x0, cFileName="write.exe", cAlternateFileName="")) returned 0 [0139.919] FindClose (in: hFindFile=0x381b80 | out: hFindFile=0x381b80) returned 1 [0139.919] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e8e4) returned 1 [0139.919] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e8f0) returned 1 [0139.919] GetFullPathNameW (in: lpFileName="C:\\Windows\\Professional.xml", nBufferLength=0x105, lpBuffer=0x31e2ec, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\Professional.xml", lpFilePart=0x0) returned 0x1b [0139.919] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e7e0) returned 1 [0139.919] CreateFileW (lpFileName="C:\\Windows\\Professional.xml" (normalized: "c:\\windows\\professional.xml"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x274 [0139.919] GetFileType (hFile=0x274) returned 0x1 [0139.919] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e7dc) returned 1 [0139.919] GetFileType (hFile=0x274) returned 0x1 [0139.919] GetFileSize (in: hFile=0x274, lpFileSizeHigh=0x31e8e8 | out: lpFileSizeHigh=0x31e8e8*=0x0) returned 0xd130 [0139.919] ReadFile (in: hFile=0x274, lpBuffer=0x2649130, nNumberOfBytesToRead=0xd130, lpNumberOfBytesRead=0x31e894, lpOverlapped=0x0 | out: lpBuffer=0x2649130*, lpNumberOfBytesRead=0x31e894*=0xd130, lpOverlapped=0x0) returned 1 [0139.920] CloseHandle (hObject=0x274) returned 1 [0139.921] GetFullPathNameW (in: lpFileName="C:\\Windows\\Professional.xml", nBufferLength=0x105, lpBuffer=0x31e2d8, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\Professional.xml", lpFilePart=0x0) returned 0x1b [0139.921] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e7cc) returned 1 [0139.922] CreateFileW (lpFileName="C:\\Windows\\Professional.xml" (normalized: "c:\\windows\\professional.xml"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x274 [0139.923] GetFileType (hFile=0x274) returned 0x1 [0139.923] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e7c8) returned 1 [0139.923] GetFileType (hFile=0x274) returned 0x1 [0139.923] WriteFile (in: hFile=0x274, lpBuffer=0x26567d0*, nNumberOfBytesToWrite=0xd130, lpNumberOfBytesWritten=0x31e888, lpOverlapped=0x0 | out: lpBuffer=0x26567d0*, lpNumberOfBytesWritten=0x31e888*=0xd130, lpOverlapped=0x0) returned 1 [0139.924] CloseHandle (hObject=0x274) returned 1 [0139.924] GetFullPathNameW (in: lpFileName="C:\\Windows\\Professional.xml", nBufferLength=0x105, lpBuffer=0x31e40c, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\Professional.xml", lpFilePart=0x0) returned 0x1b [0139.924] GetFullPathNameW (in: lpFileName="C:\\Windows\\Professional.xml.[neftet@tutanota.com].boom", nBufferLength=0x105, lpBuffer=0x31e40c, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\Professional.xml.[neftet@tutanota.com].boom", lpFilePart=0x0) returned 0x36 [0139.924] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e86c) returned 1 [0139.924] GetFileAttributesExW (in: lpFileName="C:\\Windows\\Professional.xml" (normalized: "c:\\windows\\professional.xml"), fInfoLevelId=0x0, lpFileInformation=0x31e8e8 | out: lpFileInformation=0x31e8e8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xaf9a5c4e, ftCreationTime.dwHighDateTime=0x1cbf8eb, ftLastAccessTime.dwLowDateTime=0xaf9cbebd, ftLastAccessTime.dwHighDateTime=0x1cbf8eb, ftLastWriteTime.dwLowDateTime=0x36d5cea0, ftLastWriteTime.dwHighDateTime=0x1d6eb7f, nFileSizeHigh=0x0, nFileSizeLow=0xd130)) returned 1 [0139.925] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e868) returned 1 [0139.925] MoveFileW (lpExistingFileName="C:\\Windows\\Professional.xml" (normalized: "c:\\windows\\professional.xml"), lpNewFileName="C:\\Windows\\Professional.xml.[neftet@tutanota.com].boom" (normalized: "c:\\windows\\professional.xml.[neftet@tutanota.com].boom")) returned 1 [0139.925] GetFullPathNameW (in: lpFileName="C:\\Windows\\Starter.xml", nBufferLength=0x105, lpBuffer=0x31e2ec, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\Starter.xml", lpFilePart=0x0) returned 0x16 [0139.925] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e7e0) returned 1 [0139.925] CreateFileW (lpFileName="C:\\Windows\\Starter.xml" (normalized: "c:\\windows\\starter.xml"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x274 [0139.926] GetFileType (hFile=0x274) returned 0x1 [0139.926] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e7dc) returned 1 [0139.926] GetFileType (hFile=0x274) returned 0x1 [0139.926] GetFileSize (in: hFile=0x274, lpFileSizeHigh=0x31e8e8 | out: lpFileSizeHigh=0x31e8e8*=0x0) returned 0xbc50 [0139.926] ReadFile (in: hFile=0x274, lpBuffer=0x2664dd4, nNumberOfBytesToRead=0xbc50, lpNumberOfBytesRead=0x31e894, lpOverlapped=0x0 | out: lpBuffer=0x2664dd4*, lpNumberOfBytesRead=0x31e894*=0xbc50, lpOverlapped=0x0) returned 1 [0139.926] CloseHandle (hObject=0x274) returned 1 [0139.928] GetFullPathNameW (in: lpFileName="C:\\Windows\\Starter.xml", nBufferLength=0x105, lpBuffer=0x31e2d8, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\Starter.xml", lpFilePart=0x0) returned 0x16 [0139.928] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e7cc) returned 1 [0139.928] CreateFileW (lpFileName="C:\\Windows\\Starter.xml" (normalized: "c:\\windows\\starter.xml"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x274 [0139.929] GetFileType (hFile=0x274) returned 0x1 [0139.929] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e7c8) returned 1 [0139.929] GetFileType (hFile=0x274) returned 0x1 [0139.929] WriteFile (in: hFile=0x274, lpBuffer=0x2670e38*, nNumberOfBytesToWrite=0xbc50, lpNumberOfBytesWritten=0x31e888, lpOverlapped=0x0 | out: lpBuffer=0x2670e38*, lpNumberOfBytesWritten=0x31e888*=0xbc50, lpOverlapped=0x0) returned 1 [0139.930] CloseHandle (hObject=0x274) returned 1 [0139.930] GetFullPathNameW (in: lpFileName="C:\\Windows\\Starter.xml", nBufferLength=0x105, lpBuffer=0x31e40c, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\Starter.xml", lpFilePart=0x0) returned 0x16 [0139.931] GetFullPathNameW (in: lpFileName="C:\\Windows\\Starter.xml.[neftet@tutanota.com].boom", nBufferLength=0x105, lpBuffer=0x31e40c, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\Starter.xml.[neftet@tutanota.com].boom", lpFilePart=0x0) returned 0x31 [0139.931] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e86c) returned 1 [0139.931] GetFileAttributesExW (in: lpFileName="C:\\Windows\\Starter.xml" (normalized: "c:\\windows\\starter.xml"), fInfoLevelId=0x0, lpFileInformation=0x31e8e8 | out: lpFileInformation=0x31e8e8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf0aa2eb0, ftCreationTime.dwHighDateTime=0x1ca0443, ftLastAccessTime.dwLowDateTime=0xf0aa2eb0, ftLastAccessTime.dwHighDateTime=0x1ca0443, ftLastWriteTime.dwLowDateTime=0x36d5cea0, ftLastWriteTime.dwHighDateTime=0x1d6eb7f, nFileSizeHigh=0x0, nFileSizeLow=0xbc50)) returned 1 [0139.931] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e868) returned 1 [0139.931] MoveFileW (lpExistingFileName="C:\\Windows\\Starter.xml" (normalized: "c:\\windows\\starter.xml"), lpNewFileName="C:\\Windows\\Starter.xml.[neftet@tutanota.com].boom" (normalized: "c:\\windows\\starter.xml.[neftet@tutanota.com].boom")) returned 1 [0139.931] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e8ac) returned 1 [0139.931] GetFullPathNameW (in: lpFileName="C:\\Windows\\addins", nBufferLength=0x105, lpBuffer=0x31e3b4, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\addins", lpFilePart=0x0) returned 0x11 [0139.931] GetFullPathNameW (in: lpFileName="C:\\Windows\\addins\\", nBufferLength=0x105, lpBuffer=0x31e388, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\addins\\", lpFilePart=0x0) returned 0x12 [0139.932] FindFirstFileW (in: lpFileName="C:\\Windows\\addins\\*", lpFindFileData=0x31e5d4 | out: lpFindFileData=0x31e5d4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x800b91b1, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x80b6f4c5, ftLastAccessTime.dwHighDateTime=0x1ca0444, ftLastWriteTime.dwLowDateTime=0x80b6f4c5, ftLastWriteTime.dwHighDateTime=0x1ca0444, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x381b80 [0139.932] FindNextFileW (in: hFindFile=0x381b80, lpFindFileData=0x31e5e4 | out: lpFindFileData=0x31e5e4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x800b91b1, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x80b6f4c5, ftLastAccessTime.dwHighDateTime=0x1ca0444, ftLastWriteTime.dwLowDateTime=0x80b6f4c5, ftLastWriteTime.dwHighDateTime=0x1ca0444, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0139.932] FindNextFileW (in: hFindFile=0x381b80, lpFindFileData=0x31e5e4 | out: lpFindFileData=0x31e5e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x38a84b7c, ftCreationTime.dwHighDateTime=0x1c9ea11, ftLastAccessTime.dwLowDateTime=0x38a84b7c, ftLastAccessTime.dwHighDateTime=0x1c9ea11, ftLastWriteTime.dwLowDateTime=0x38a84b7c, ftLastWriteTime.dwHighDateTime=0x1c9ea11, nFileSizeHigh=0x0, nFileSizeLow=0x322, dwReserved0=0x0, dwReserved1=0x0, cFileName="FXSEXT.ecf", cAlternateFileName="")) returned 1 [0139.932] FindNextFileW (in: hFindFile=0x381b80, lpFindFileData=0x31e5e4 | out: lpFindFileData=0x31e5e4*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0139.932] FindClose (in: hFindFile=0x381b80 | out: hFindFile=0x381b80) returned 1 [0139.932] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e86c) returned 1 [0139.933] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e878) returned 1 [0139.933] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e8ac) returned 1 [0139.933] GetFullPathNameW (in: lpFileName="C:\\Windows\\addins", nBufferLength=0x105, lpBuffer=0x31e3b4, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\addins", lpFilePart=0x0) returned 0x11 [0139.933] GetFullPathNameW (in: lpFileName="C:\\Windows\\addins\\", nBufferLength=0x105, lpBuffer=0x31e388, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\addins\\", lpFilePart=0x0) returned 0x12 [0139.933] FindFirstFileW (in: lpFileName="C:\\Windows\\addins\\*", lpFindFileData=0x31e5d4 | out: lpFindFileData=0x31e5d4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x800b91b1, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x80b6f4c5, ftLastAccessTime.dwHighDateTime=0x1ca0444, ftLastWriteTime.dwLowDateTime=0x80b6f4c5, ftLastWriteTime.dwHighDateTime=0x1ca0444, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x381b80 [0139.933] FindNextFileW (in: hFindFile=0x381b80, lpFindFileData=0x31e5e4 | out: lpFindFileData=0x31e5e4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x800b91b1, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x80b6f4c5, ftLastAccessTime.dwHighDateTime=0x1ca0444, ftLastWriteTime.dwLowDateTime=0x80b6f4c5, ftLastWriteTime.dwHighDateTime=0x1ca0444, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0139.933] FindNextFileW (in: hFindFile=0x381b80, lpFindFileData=0x31e5e4 | out: lpFindFileData=0x31e5e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x38a84b7c, ftCreationTime.dwHighDateTime=0x1c9ea11, ftLastAccessTime.dwLowDateTime=0x38a84b7c, ftLastAccessTime.dwHighDateTime=0x1c9ea11, ftLastWriteTime.dwLowDateTime=0x38a84b7c, ftLastWriteTime.dwHighDateTime=0x1c9ea11, nFileSizeHigh=0x0, nFileSizeLow=0x322, dwReserved0=0x0, dwReserved1=0x0, cFileName="FXSEXT.ecf", cAlternateFileName="")) returned 1 [0139.933] FindNextFileW (in: hFindFile=0x381b80, lpFindFileData=0x31e5e4 | out: lpFindFileData=0x31e5e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x38a84b7c, ftCreationTime.dwHighDateTime=0x1c9ea11, ftLastAccessTime.dwLowDateTime=0x38a84b7c, ftLastAccessTime.dwHighDateTime=0x1c9ea11, ftLastWriteTime.dwLowDateTime=0x38a84b7c, ftLastWriteTime.dwHighDateTime=0x1c9ea11, nFileSizeHigh=0x0, nFileSizeLow=0x322, dwReserved0=0x0, dwReserved1=0x0, cFileName="FXSEXT.ecf", cAlternateFileName="")) returned 0 [0139.933] FindClose (in: hFindFile=0x381b80 | out: hFindFile=0x381b80) returned 1 [0139.933] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e86c) returned 1 [0139.933] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e878) returned 1 [0139.933] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e8ac) returned 1 [0139.933] GetFullPathNameW (in: lpFileName="C:\\Windows\\AppCompat", nBufferLength=0x105, lpBuffer=0x31e3b4, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\AppCompat", lpFilePart=0x0) returned 0x14 [0139.933] GetFullPathNameW (in: lpFileName="C:\\Windows\\AppCompat\\", nBufferLength=0x105, lpBuffer=0x31e388, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\AppCompat\\", lpFilePart=0x0) returned 0x15 [0139.933] FindFirstFileW (in: lpFileName="C:\\Windows\\AppCompat\\*", lpFindFileData=0x31e5d4 | out: lpFindFileData=0x31e5d4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfdb0c77c, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfdb0c77c, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xfdb0c77c, ftLastWriteTime.dwHighDateTime=0x1ca0431, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x381b80 [0139.934] FindNextFileW (in: hFindFile=0x381b80, lpFindFileData=0x31e5e4 | out: lpFindFileData=0x31e5e4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfdb0c77c, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfdb0c77c, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xfdb0c77c, ftLastWriteTime.dwHighDateTime=0x1ca0431, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0139.934] FindNextFileW (in: hFindFile=0x381b80, lpFindFileData=0x31e5e4 | out: lpFindFileData=0x31e5e4*(dwFileAttributes=0x14, ftCreationTime.dwLowDateTime=0xfdb0c77c, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x2e3283f0, ftLastAccessTime.dwHighDateTime=0x1ca0441, ftLastWriteTime.dwLowDateTime=0x2e3283f0, ftLastWriteTime.dwHighDateTime=0x1ca0441, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Programs", cAlternateFileName="")) returned 1 [0139.934] FindNextFileW (in: hFindFile=0x381b80, lpFindFileData=0x31e5e4 | out: lpFindFileData=0x31e5e4*(dwFileAttributes=0x14, ftCreationTime.dwLowDateTime=0xfdb0c77c, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x2e3283f0, ftLastAccessTime.dwHighDateTime=0x1ca0441, ftLastWriteTime.dwLowDateTime=0x2e3283f0, ftLastWriteTime.dwHighDateTime=0x1ca0441, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Programs", cAlternateFileName="")) returned 0 [0139.934] FindClose (in: hFindFile=0x381b80 | out: hFindFile=0x381b80) returned 1 [0139.934] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e86c) returned 1 [0139.934] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e878) returned 1 [0139.934] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e8ac) returned 1 [0139.934] GetFullPathNameW (in: lpFileName="C:\\Windows\\AppCompat", nBufferLength=0x105, lpBuffer=0x31e3b4, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\AppCompat", lpFilePart=0x0) returned 0x14 [0139.934] GetFullPathNameW (in: lpFileName="C:\\Windows\\AppCompat\\", nBufferLength=0x105, lpBuffer=0x31e388, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\AppCompat\\", lpFilePart=0x0) returned 0x15 [0139.934] FindFirstFileW (in: lpFileName="C:\\Windows\\AppCompat\\*", lpFindFileData=0x31e5d4 | out: lpFindFileData=0x31e5d4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfdb0c77c, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfdb0c77c, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xfdb0c77c, ftLastWriteTime.dwHighDateTime=0x1ca0431, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x381b80 [0139.934] FindNextFileW (in: hFindFile=0x381b80, lpFindFileData=0x31e5e4 | out: lpFindFileData=0x31e5e4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfdb0c77c, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfdb0c77c, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xfdb0c77c, ftLastWriteTime.dwHighDateTime=0x1ca0431, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0139.934] FindNextFileW (in: hFindFile=0x381b80, lpFindFileData=0x31e5e4 | out: lpFindFileData=0x31e5e4*(dwFileAttributes=0x14, ftCreationTime.dwLowDateTime=0xfdb0c77c, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x2e3283f0, ftLastAccessTime.dwHighDateTime=0x1ca0441, ftLastWriteTime.dwLowDateTime=0x2e3283f0, ftLastWriteTime.dwHighDateTime=0x1ca0441, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Programs", cAlternateFileName="")) returned 1 [0139.935] FindNextFileW (in: hFindFile=0x381b80, lpFindFileData=0x31e5e4 | out: lpFindFileData=0x31e5e4*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0139.935] FindClose (in: hFindFile=0x381b80 | out: hFindFile=0x381b80) returned 1 [0139.935] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e86c) returned 1 [0139.935] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e878) returned 1 [0139.935] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e834) returned 1 [0139.935] GetFullPathNameW (in: lpFileName="C:\\Windows\\AppCompat\\Programs", nBufferLength=0x105, lpBuffer=0x31e33c, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\AppCompat\\Programs", lpFilePart=0x0) returned 0x1d [0139.935] GetFullPathNameW (in: lpFileName="C:\\Windows\\AppCompat\\Programs\\", nBufferLength=0x105, lpBuffer=0x31e310, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\AppCompat\\Programs\\", lpFilePart=0x0) returned 0x1e [0139.935] FindFirstFileW (in: lpFileName="C:\\Windows\\AppCompat\\Programs\\*", lpFindFileData=0x31e55c | out: lpFindFileData=0x31e55c*(dwFileAttributes=0x14, ftCreationTime.dwLowDateTime=0xfdb0c77c, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x2e3283f0, ftLastAccessTime.dwHighDateTime=0x1ca0441, ftLastWriteTime.dwLowDateTime=0x2e3283f0, ftLastWriteTime.dwHighDateTime=0x1ca0441, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x381b80 [0139.935] FindNextFileW (in: hFindFile=0x381b80, lpFindFileData=0x31e56c | out: lpFindFileData=0x31e56c*(dwFileAttributes=0x14, ftCreationTime.dwLowDateTime=0xfdb0c77c, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x2e3283f0, ftLastAccessTime.dwHighDateTime=0x1ca0441, ftLastWriteTime.dwLowDateTime=0x2e3283f0, ftLastWriteTime.dwHighDateTime=0x1ca0441, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0139.935] FindNextFileW (in: hFindFile=0x381b80, lpFindFileData=0x31e56c | out: lpFindFileData=0x31e56c*(dwFileAttributes=0x24, ftCreationTime.dwLowDateTime=0x2e3283f0, ftCreationTime.dwHighDateTime=0x1ca0441, ftLastAccessTime.dwLowDateTime=0x2e3283f0, ftLastAccessTime.dwHighDateTime=0x1ca0441, ftLastWriteTime.dwLowDateTime=0x3d9f7230, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x336a, dwReserved0=0x0, dwReserved1=0x0, cFileName="RecentFileCache.bcf", cAlternateFileName="RECENT~1.BCF")) returned 1 [0139.935] FindNextFileW (in: hFindFile=0x381b80, lpFindFileData=0x31e56c | out: lpFindFileData=0x31e56c*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0139.935] FindClose (in: hFindFile=0x381b80 | out: hFindFile=0x381b80) returned 1 [0139.935] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e7f4) returned 1 [0139.935] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e800) returned 1 [0139.935] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e834) returned 1 [0139.935] GetFullPathNameW (in: lpFileName="C:\\Windows\\AppCompat\\Programs", nBufferLength=0x105, lpBuffer=0x31e33c, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\AppCompat\\Programs", lpFilePart=0x0) returned 0x1d [0139.935] GetFullPathNameW (in: lpFileName="C:\\Windows\\AppCompat\\Programs\\", nBufferLength=0x105, lpBuffer=0x31e310, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\AppCompat\\Programs\\", lpFilePart=0x0) returned 0x1e [0139.936] FindFirstFileW (in: lpFileName="C:\\Windows\\AppCompat\\Programs\\*", lpFindFileData=0x31e55c | out: lpFindFileData=0x31e55c*(dwFileAttributes=0x14, ftCreationTime.dwLowDateTime=0xfdb0c77c, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x2e3283f0, ftLastAccessTime.dwHighDateTime=0x1ca0441, ftLastWriteTime.dwLowDateTime=0x2e3283f0, ftLastWriteTime.dwHighDateTime=0x1ca0441, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x381b80 [0139.936] FindNextFileW (in: hFindFile=0x381b80, lpFindFileData=0x31e56c | out: lpFindFileData=0x31e56c*(dwFileAttributes=0x14, ftCreationTime.dwLowDateTime=0xfdb0c77c, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x2e3283f0, ftLastAccessTime.dwHighDateTime=0x1ca0441, ftLastWriteTime.dwLowDateTime=0x2e3283f0, ftLastWriteTime.dwHighDateTime=0x1ca0441, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0139.936] FindNextFileW (in: hFindFile=0x381b80, lpFindFileData=0x31e56c | out: lpFindFileData=0x31e56c*(dwFileAttributes=0x24, ftCreationTime.dwLowDateTime=0x2e3283f0, ftCreationTime.dwHighDateTime=0x1ca0441, ftLastAccessTime.dwLowDateTime=0x2e3283f0, ftLastAccessTime.dwHighDateTime=0x1ca0441, ftLastWriteTime.dwLowDateTime=0x3d9f7230, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x336a, dwReserved0=0x0, dwReserved1=0x0, cFileName="RecentFileCache.bcf", cAlternateFileName="RECENT~1.BCF")) returned 1 [0139.936] FindNextFileW (in: hFindFile=0x381b80, lpFindFileData=0x31e56c | out: lpFindFileData=0x31e56c*(dwFileAttributes=0x24, ftCreationTime.dwLowDateTime=0x2e3283f0, ftCreationTime.dwHighDateTime=0x1ca0441, ftLastAccessTime.dwLowDateTime=0x2e3283f0, ftLastAccessTime.dwHighDateTime=0x1ca0441, ftLastWriteTime.dwLowDateTime=0x3d9f7230, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x336a, dwReserved0=0x0, dwReserved1=0x0, cFileName="RecentFileCache.bcf", cAlternateFileName="RECENT~1.BCF")) returned 0 [0139.936] FindClose (in: hFindFile=0x381b80 | out: hFindFile=0x381b80) returned 1 [0139.936] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e7f4) returned 1 [0139.936] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e800) returned 1 [0139.936] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e8ac) returned 1 [0139.936] GetFullPathNameW (in: lpFileName="C:\\Windows\\AppPatch", nBufferLength=0x105, lpBuffer=0x31e3b4, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\AppPatch", lpFilePart=0x0) returned 0x13 [0139.936] GetFullPathNameW (in: lpFileName="C:\\Windows\\AppPatch\\", nBufferLength=0x105, lpBuffer=0x31e388, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\AppPatch\\", lpFilePart=0x0) returned 0x14 [0139.936] FindFirstFileW (in: lpFileName="C:\\Windows\\AppPatch\\*", lpFindFileData=0x31e5d4 | out: lpFindFileData=0x31e5d4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfdb328d6, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x57087b83, ftLastAccessTime.dwHighDateTime=0x1cb892c, ftLastWriteTime.dwLowDateTime=0x57087b83, ftLastWriteTime.dwHighDateTime=0x1cb892c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x381b80 [0139.936] FindNextFileW (in: hFindFile=0x381b80, lpFindFileData=0x31e5e4 | out: lpFindFileData=0x31e5e4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfdb328d6, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x57087b83, ftLastAccessTime.dwHighDateTime=0x1cb892c, ftLastWriteTime.dwLowDateTime=0x57087b83, ftLastWriteTime.dwHighDateTime=0x1cb892c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0139.936] FindNextFileW (in: hFindFile=0x381b80, lpFindFileData=0x31e5e4 | out: lpFindFileData=0x31e5e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8ab3bc5e, ftCreationTime.dwHighDateTime=0x1cb892b, ftLastAccessTime.dwLowDateTime=0x8ab3bc5e, ftLastAccessTime.dwHighDateTime=0x1cb892b, ftLastWriteTime.dwLowDateTime=0x8ab87f1f, ftLastWriteTime.dwHighDateTime=0x1cb892b, nFileSizeHigh=0x0, nFileSizeLow=0x213200, dwReserved0=0x0, dwReserved1=0x0, cFileName="AcGenral.dll", cAlternateFileName="")) returned 1 [0139.936] FindNextFileW (in: hFindFile=0x381b80, lpFindFileData=0x31e5e4 | out: lpFindFileData=0x31e5e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x89ebc8c7, ftCreationTime.dwHighDateTime=0x1cb892b, ftLastAccessTime.dwLowDateTime=0x89ebc8c7, ftLastAccessTime.dwHighDateTime=0x1cb892b, ftLastWriteTime.dwLowDateTime=0x89f08b88, ftLastWriteTime.dwHighDateTime=0x1cb892b, nFileSizeHigh=0x0, nFileSizeLow=0x89400, dwReserved0=0x0, dwReserved1=0x0, cFileName="AcLayers.dll", cAlternateFileName="")) returned 1 [0139.937] FindNextFileW (in: hFindFile=0x381b80, lpFindFileData=0x31e5e4 | out: lpFindFileData=0x31e5e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x66f511ee, ftCreationTime.dwHighDateTime=0x1ca0411, ftLastAccessTime.dwLowDateTime=0x66f511ee, ftLastAccessTime.dwHighDateTime=0x1ca0411, ftLastWriteTime.dwLowDateTime=0xf11e1150, ftLastWriteTime.dwHighDateTime=0x1ca041e, nFileSizeHigh=0x0, nFileSizeLow=0xa00, dwReserved0=0x0, dwReserved1=0x0, cFileName="AcRes.dll", cAlternateFileName="")) returned 1 [0139.937] FindNextFileW (in: hFindFile=0x381b80, lpFindFileData=0x31e5e4 | out: lpFindFileData=0x31e5e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x761d0cd0, ftCreationTime.dwHighDateTime=0x1ca0411, ftLastAccessTime.dwLowDateTime=0x761d0cd0, ftLastAccessTime.dwHighDateTime=0x1ca0411, ftLastWriteTime.dwLowDateTime=0x7d3bb510, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x73c00, dwReserved0=0x0, dwReserved1=0x0, cFileName="AcSpecfc.dll", cAlternateFileName="")) returned 1 [0139.937] FindNextFileW (in: hFindFile=0x381b80, lpFindFileData=0x31e5e4 | out: lpFindFileData=0x31e5e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe234c5df, ftCreationTime.dwHighDateTime=0x1ca040f, ftLastAccessTime.dwLowDateTime=0xe234c5df, ftLastAccessTime.dwHighDateTime=0x1ca040f, ftLastWriteTime.dwLowDateTime=0x7d5cf8b0, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0xac00, dwReserved0=0x0, dwReserved1=0x0, cFileName="acwow64.dll", cAlternateFileName="")) returned 1 [0139.937] FindNextFileW (in: hFindFile=0x381b80, lpFindFileData=0x31e5e4 | out: lpFindFileData=0x31e5e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x678fcb0d, ftCreationTime.dwHighDateTime=0x1ca0411, ftLastAccessTime.dwLowDateTime=0x678fcb0d, ftLastAccessTime.dwHighDateTime=0x1ca0411, ftLastWriteTime.dwLowDateTime=0x7d6424a0, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x33c00, dwReserved0=0x0, dwReserved1=0x0, cFileName="AcXtrnal.dll", cAlternateFileName="")) returned 1 [0139.937] FindNextFileW (in: hFindFile=0x381b80, lpFindFileData=0x31e5e4 | out: lpFindFileData=0x31e5e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7828c580, ftCreationTime.dwHighDateTime=0x1ca0410, ftLastAccessTime.dwLowDateTime=0x7828c580, ftLastAccessTime.dwHighDateTime=0x1ca0410, ftLastWriteTime.dwLowDateTime=0x7e595a10, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0xa400, dwReserved0=0x0, dwReserved1=0x0, cFileName="apihex86.dll", cAlternateFileName="")) returned 1 [0139.937] FindNextFileW (in: hFindFile=0x381b80, lpFindFileData=0x31e5e4 | out: lpFindFileData=0x31e5e4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfdb328d6, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x571de7e6, ftLastAccessTime.dwHighDateTime=0x1cb892c, ftLastWriteTime.dwLowDateTime=0x571de7e6, ftLastWriteTime.dwHighDateTime=0x1cb892c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="AppPatch64", cAlternateFileName="APPPAT~1")) returned 1 [0139.937] FindNextFileW (in: hFindFile=0x381b80, lpFindFileData=0x31e5e4 | out: lpFindFileData=0x31e5e4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfdb58a30, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfdb58a30, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xfdb58a30, ftLastWriteTime.dwHighDateTime=0x1ca0431, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Custom", cAlternateFileName="")) returned 1 [0139.937] FindNextFileW (in: hFindFile=0x381b80, lpFindFileData=0x31e5e4 | out: lpFindFileData=0x31e5e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x89f08b88, ftCreationTime.dwHighDateTime=0x1cb892b, ftLastAccessTime.dwLowDateTime=0x89f08b88, ftLastAccessTime.dwHighDateTime=0x1cb892b, ftLastWriteTime.dwLowDateTime=0x89f2ece8, ftLastWriteTime.dwHighDateTime=0x1cb892b, nFileSizeHigh=0x0, nFileSizeLow=0x2504e, dwReserved0=0x0, dwReserved1=0x0, cFileName="drvmain.sdb", cAlternateFileName="")) returned 1 [0139.937] FindNextFileW (in: hFindFile=0x381b80, lpFindFileData=0x31e5e4 | out: lpFindFileData=0x31e5e4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x368b31d3, ftCreationTime.dwHighDateTime=0x1ca0445, ftLastAccessTime.dwLowDateTime=0x23fb0799, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x1d91b669, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="en-US", cAlternateFileName="")) returned 1 [0139.937] FindNextFileW (in: hFindFile=0x381b80, lpFindFileData=0x31e5e4 | out: lpFindFileData=0x31e5e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x89f2ece8, ftCreationTime.dwHighDateTime=0x1cb892b, ftLastAccessTime.dwLowDateTime=0x89f2ece8, ftLastAccessTime.dwHighDateTime=0x1cb892b, ftLastWriteTime.dwLowDateTime=0x8a11decc, ftLastWriteTime.dwHighDateTime=0x1cb892b, nFileSizeHigh=0x0, nFileSizeLow=0x1aeae2, dwReserved0=0x0, dwReserved1=0x0, cFileName="msimain.sdb", cAlternateFileName="")) returned 1 [0139.937] FindNextFileW (in: hFindFile=0x381b80, lpFindFileData=0x31e5e4 | out: lpFindFileData=0x31e5e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa7339606, ftCreationTime.dwHighDateTime=0x1cb892b, ftLastAccessTime.dwLowDateTime=0xa7339606, ftLastAccessTime.dwHighDateTime=0x1cb892b, ftLastWriteTime.dwLowDateTime=0xa7339606, ftLastWriteTime.dwHighDateTime=0x1cb892b, nFileSizeHigh=0x0, nFileSizeLow=0xaf82, dwReserved0=0x0, dwReserved1=0x0, cFileName="pcamain.sdb", cAlternateFileName="")) returned 1 [0139.937] FindNextFileW (in: hFindFile=0x381b80, lpFindFileData=0x31e5e4 | out: lpFindFileData=0x31e5e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8a11decc, ftCreationTime.dwHighDateTime=0x1cb892b, ftLastAccessTime.dwLowDateTime=0x8a11decc, ftLastAccessTime.dwHighDateTime=0x1cb892b, ftLastWriteTime.dwLowDateTime=0x8a1dc5ad, ftLastWriteTime.dwHighDateTime=0x1cb892b, nFileSizeHigh=0x0, nFileSizeLow=0x3e2f48, dwReserved0=0x0, dwReserved1=0x0, cFileName="sysmain.sdb", cAlternateFileName="")) returned 1 [0139.937] FindNextFileW (in: hFindFile=0x381b80, lpFindFileData=0x31e5e4 | out: lpFindFileData=0x31e5e4*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0139.937] FindClose (in: hFindFile=0x381b80 | out: hFindFile=0x381b80) returned 1 [0139.937] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e86c) returned 1 [0139.937] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e878) returned 1 [0139.937] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e8ac) returned 1 [0139.938] GetFullPathNameW (in: lpFileName="C:\\Windows\\AppPatch", nBufferLength=0x105, lpBuffer=0x31e3b4, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\AppPatch", lpFilePart=0x0) returned 0x13 [0139.938] GetFullPathNameW (in: lpFileName="C:\\Windows\\AppPatch\\", nBufferLength=0x105, lpBuffer=0x31e388, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\AppPatch\\", lpFilePart=0x0) returned 0x14 [0139.938] FindFirstFileW (in: lpFileName="C:\\Windows\\AppPatch\\*", lpFindFileData=0x31e5d4 | out: lpFindFileData=0x31e5d4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfdb328d6, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x57087b83, ftLastAccessTime.dwHighDateTime=0x1cb892c, ftLastWriteTime.dwLowDateTime=0x57087b83, ftLastWriteTime.dwHighDateTime=0x1cb892c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x381b80 [0139.938] FindNextFileW (in: hFindFile=0x381b80, lpFindFileData=0x31e5e4 | out: lpFindFileData=0x31e5e4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfdb328d6, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x57087b83, ftLastAccessTime.dwHighDateTime=0x1cb892c, ftLastWriteTime.dwLowDateTime=0x57087b83, ftLastWriteTime.dwHighDateTime=0x1cb892c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0139.938] FindNextFileW (in: hFindFile=0x381b80, lpFindFileData=0x31e5e4 | out: lpFindFileData=0x31e5e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8ab3bc5e, ftCreationTime.dwHighDateTime=0x1cb892b, ftLastAccessTime.dwLowDateTime=0x8ab3bc5e, ftLastAccessTime.dwHighDateTime=0x1cb892b, ftLastWriteTime.dwLowDateTime=0x8ab87f1f, ftLastWriteTime.dwHighDateTime=0x1cb892b, nFileSizeHigh=0x0, nFileSizeLow=0x213200, dwReserved0=0x0, dwReserved1=0x0, cFileName="AcGenral.dll", cAlternateFileName="")) returned 1 [0139.938] FindNextFileW (in: hFindFile=0x381b80, lpFindFileData=0x31e5e4 | out: lpFindFileData=0x31e5e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x89ebc8c7, ftCreationTime.dwHighDateTime=0x1cb892b, ftLastAccessTime.dwLowDateTime=0x89ebc8c7, ftLastAccessTime.dwHighDateTime=0x1cb892b, ftLastWriteTime.dwLowDateTime=0x89f08b88, ftLastWriteTime.dwHighDateTime=0x1cb892b, nFileSizeHigh=0x0, nFileSizeLow=0x89400, dwReserved0=0x0, dwReserved1=0x0, cFileName="AcLayers.dll", cAlternateFileName="")) returned 1 [0139.938] FindNextFileW (in: hFindFile=0x381b80, lpFindFileData=0x31e5e4 | out: lpFindFileData=0x31e5e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x66f511ee, ftCreationTime.dwHighDateTime=0x1ca0411, ftLastAccessTime.dwLowDateTime=0x66f511ee, ftLastAccessTime.dwHighDateTime=0x1ca0411, ftLastWriteTime.dwLowDateTime=0xf11e1150, ftLastWriteTime.dwHighDateTime=0x1ca041e, nFileSizeHigh=0x0, nFileSizeLow=0xa00, dwReserved0=0x0, dwReserved1=0x0, cFileName="AcRes.dll", cAlternateFileName="")) returned 1 [0139.938] FindNextFileW (in: hFindFile=0x381b80, lpFindFileData=0x31e5e4 | out: lpFindFileData=0x31e5e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x761d0cd0, ftCreationTime.dwHighDateTime=0x1ca0411, ftLastAccessTime.dwLowDateTime=0x761d0cd0, ftLastAccessTime.dwHighDateTime=0x1ca0411, ftLastWriteTime.dwLowDateTime=0x7d3bb510, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x73c00, dwReserved0=0x0, dwReserved1=0x0, cFileName="AcSpecfc.dll", cAlternateFileName="")) returned 1 [0139.938] FindNextFileW (in: hFindFile=0x381b80, lpFindFileData=0x31e5e4 | out: lpFindFileData=0x31e5e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe234c5df, ftCreationTime.dwHighDateTime=0x1ca040f, ftLastAccessTime.dwLowDateTime=0xe234c5df, ftLastAccessTime.dwHighDateTime=0x1ca040f, ftLastWriteTime.dwLowDateTime=0x7d5cf8b0, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0xac00, dwReserved0=0x0, dwReserved1=0x0, cFileName="acwow64.dll", cAlternateFileName="")) returned 1 [0139.938] FindNextFileW (in: hFindFile=0x381b80, lpFindFileData=0x31e5e4 | out: lpFindFileData=0x31e5e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x678fcb0d, ftCreationTime.dwHighDateTime=0x1ca0411, ftLastAccessTime.dwLowDateTime=0x678fcb0d, ftLastAccessTime.dwHighDateTime=0x1ca0411, ftLastWriteTime.dwLowDateTime=0x7d6424a0, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x33c00, dwReserved0=0x0, dwReserved1=0x0, cFileName="AcXtrnal.dll", cAlternateFileName="")) returned 1 [0139.938] FindNextFileW (in: hFindFile=0x381b80, lpFindFileData=0x31e5e4 | out: lpFindFileData=0x31e5e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7828c580, ftCreationTime.dwHighDateTime=0x1ca0410, ftLastAccessTime.dwLowDateTime=0x7828c580, ftLastAccessTime.dwHighDateTime=0x1ca0410, ftLastWriteTime.dwLowDateTime=0x7e595a10, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0xa400, dwReserved0=0x0, dwReserved1=0x0, cFileName="apihex86.dll", cAlternateFileName="")) returned 1 [0139.938] FindNextFileW (in: hFindFile=0x381b80, lpFindFileData=0x31e5e4 | out: lpFindFileData=0x31e5e4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfdb328d6, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x571de7e6, ftLastAccessTime.dwHighDateTime=0x1cb892c, ftLastWriteTime.dwLowDateTime=0x571de7e6, ftLastWriteTime.dwHighDateTime=0x1cb892c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="AppPatch64", cAlternateFileName="APPPAT~1")) returned 1 [0139.938] FindNextFileW (in: hFindFile=0x381b80, lpFindFileData=0x31e5e4 | out: lpFindFileData=0x31e5e4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfdb58a30, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfdb58a30, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xfdb58a30, ftLastWriteTime.dwHighDateTime=0x1ca0431, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Custom", cAlternateFileName="")) returned 1 [0139.939] FindNextFileW (in: hFindFile=0x381b80, lpFindFileData=0x31e5e4 | out: lpFindFileData=0x31e5e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x89f08b88, ftCreationTime.dwHighDateTime=0x1cb892b, ftLastAccessTime.dwLowDateTime=0x89f08b88, ftLastAccessTime.dwHighDateTime=0x1cb892b, ftLastWriteTime.dwLowDateTime=0x89f2ece8, ftLastWriteTime.dwHighDateTime=0x1cb892b, nFileSizeHigh=0x0, nFileSizeLow=0x2504e, dwReserved0=0x0, dwReserved1=0x0, cFileName="drvmain.sdb", cAlternateFileName="")) returned 1 [0139.939] FindNextFileW (in: hFindFile=0x381b80, lpFindFileData=0x31e5e4 | out: lpFindFileData=0x31e5e4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x368b31d3, ftCreationTime.dwHighDateTime=0x1ca0445, ftLastAccessTime.dwLowDateTime=0x23fb0799, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x1d91b669, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="en-US", cAlternateFileName="")) returned 1 [0139.939] FindNextFileW (in: hFindFile=0x381b80, lpFindFileData=0x31e5e4 | out: lpFindFileData=0x31e5e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x89f2ece8, ftCreationTime.dwHighDateTime=0x1cb892b, ftLastAccessTime.dwLowDateTime=0x89f2ece8, ftLastAccessTime.dwHighDateTime=0x1cb892b, ftLastWriteTime.dwLowDateTime=0x8a11decc, ftLastWriteTime.dwHighDateTime=0x1cb892b, nFileSizeHigh=0x0, nFileSizeLow=0x1aeae2, dwReserved0=0x0, dwReserved1=0x0, cFileName="msimain.sdb", cAlternateFileName="")) returned 1 [0139.939] FindNextFileW (in: hFindFile=0x381b80, lpFindFileData=0x31e5e4 | out: lpFindFileData=0x31e5e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa7339606, ftCreationTime.dwHighDateTime=0x1cb892b, ftLastAccessTime.dwLowDateTime=0xa7339606, ftLastAccessTime.dwHighDateTime=0x1cb892b, ftLastWriteTime.dwLowDateTime=0xa7339606, ftLastWriteTime.dwHighDateTime=0x1cb892b, nFileSizeHigh=0x0, nFileSizeLow=0xaf82, dwReserved0=0x0, dwReserved1=0x0, cFileName="pcamain.sdb", cAlternateFileName="")) returned 1 [0139.939] FindNextFileW (in: hFindFile=0x381b80, lpFindFileData=0x31e5e4 | out: lpFindFileData=0x31e5e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8a11decc, ftCreationTime.dwHighDateTime=0x1cb892b, ftLastAccessTime.dwLowDateTime=0x8a11decc, ftLastAccessTime.dwHighDateTime=0x1cb892b, ftLastWriteTime.dwLowDateTime=0x8a1dc5ad, ftLastWriteTime.dwHighDateTime=0x1cb892b, nFileSizeHigh=0x0, nFileSizeLow=0x3e2f48, dwReserved0=0x0, dwReserved1=0x0, cFileName="sysmain.sdb", cAlternateFileName="")) returned 1 [0139.939] FindNextFileW (in: hFindFile=0x381b80, lpFindFileData=0x31e5e4 | out: lpFindFileData=0x31e5e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8a11decc, ftCreationTime.dwHighDateTime=0x1cb892b, ftLastAccessTime.dwLowDateTime=0x8a11decc, ftLastAccessTime.dwHighDateTime=0x1cb892b, ftLastWriteTime.dwLowDateTime=0x8a1dc5ad, ftLastWriteTime.dwHighDateTime=0x1cb892b, nFileSizeHigh=0x0, nFileSizeLow=0x3e2f48, dwReserved0=0x0, dwReserved1=0x0, cFileName="sysmain.sdb", cAlternateFileName="")) returned 0 [0139.939] FindClose (in: hFindFile=0x381b80 | out: hFindFile=0x381b80) returned 1 [0139.939] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e86c) returned 1 [0139.939] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e878) returned 1 [0139.939] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e834) returned 1 [0139.939] GetFullPathNameW (in: lpFileName="C:\\Windows\\AppPatch\\AppPatch64", nBufferLength=0x105, lpBuffer=0x31e33c, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\AppPatch\\AppPatch64", lpFilePart=0x0) returned 0x1e [0139.939] GetFullPathNameW (in: lpFileName="C:\\Windows\\AppPatch\\AppPatch64\\", nBufferLength=0x105, lpBuffer=0x31e310, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\AppPatch\\AppPatch64\\", lpFilePart=0x0) returned 0x1f [0139.939] FindFirstFileW (in: lpFileName="C:\\Windows\\AppPatch\\AppPatch64\\*", lpFindFileData=0x31e55c | out: lpFindFileData=0x31e55c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfdb328d6, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x571de7e6, ftLastAccessTime.dwHighDateTime=0x1cb892c, ftLastWriteTime.dwLowDateTime=0x571de7e6, ftLastWriteTime.dwHighDateTime=0x1cb892c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x381b80 [0139.940] FindNextFileW (in: hFindFile=0x381b80, lpFindFileData=0x31e56c | out: lpFindFileData=0x31e56c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfdb328d6, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x571de7e6, ftLastAccessTime.dwHighDateTime=0x1cb892c, ftLastWriteTime.dwLowDateTime=0x571de7e6, ftLastWriteTime.dwHighDateTime=0x1cb892c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0139.940] FindNextFileW (in: hFindFile=0x381b80, lpFindFileData=0x31e56c | out: lpFindFileData=0x31e56c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4733d573, ftCreationTime.dwHighDateTime=0x1ca0413, ftLastAccessTime.dwLowDateTime=0x4733d573, ftLastAccessTime.dwHighDateTime=0x1ca0413, ftLastWriteTime.dwLowDateTime=0x2244a0, ftLastWriteTime.dwHighDateTime=0x1ca0424, nFileSizeHigh=0x0, nFileSizeLow=0x4b800, dwReserved0=0x0, dwReserved1=0x0, cFileName="AcGenral.dll", cAlternateFileName="")) returned 1 [0139.940] FindNextFileW (in: hFindFile=0x381b80, lpFindFileData=0x31e56c | out: lpFindFileData=0x31e56c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x83410e23, ftCreationTime.dwHighDateTime=0x1cb892b, ftLastAccessTime.dwLowDateTime=0x83410e23, ftLastAccessTime.dwHighDateTime=0x1cb892b, ftLastWriteTime.dwLowDateTime=0x83436f83, ftLastWriteTime.dwHighDateTime=0x1cb892b, nFileSizeHigh=0x0, nFileSizeLow=0x55800, dwReserved0=0x0, dwReserved1=0x0, cFileName="AcLayers.dll", cAlternateFileName="")) returned 1 [0139.940] FindNextFileW (in: hFindFile=0x381b80, lpFindFileData=0x31e56c | out: lpFindFileData=0x31e56c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x42a57971, ftCreationTime.dwHighDateTime=0x1ca0413, ftLastAccessTime.dwLowDateTime=0x42a57971, ftLastAccessTime.dwHighDateTime=0x1ca0413, ftLastWriteTime.dwLowDateTime=0x353060, ftLastWriteTime.dwHighDateTime=0x1ca0424, nFileSizeHigh=0x0, nFileSizeLow=0x1b200, dwReserved0=0x0, dwReserved1=0x0, cFileName="acspecfc.dll", cAlternateFileName="")) returned 1 [0139.940] FindNextFileW (in: hFindFile=0x381b80, lpFindFileData=0x31e56c | out: lpFindFileData=0x31e56c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x424fc85d, ftCreationTime.dwHighDateTime=0x1ca0413, ftLastAccessTime.dwLowDateTime=0x424fc85d, ftLastAccessTime.dwHighDateTime=0x1ca0413, ftLastWriteTime.dwLowDateTime=0x5dc700, ftLastWriteTime.dwHighDateTime=0x1ca0424, nFileSizeHigh=0x0, nFileSizeLow=0x21000, dwReserved0=0x0, dwReserved1=0x0, cFileName="AcXtrnal.dll", cAlternateFileName="")) returned 1 [0139.940] FindNextFileW (in: hFindFile=0x381b80, lpFindFileData=0x31e56c | out: lpFindFileData=0x31e56c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x23e69f36, ftCreationTime.dwHighDateTime=0x1ca0412, ftLastAccessTime.dwLowDateTime=0x23e69f36, ftLastAccessTime.dwHighDateTime=0x1ca0412, ftLastWriteTime.dwLowDateTime=0xf60f60, ftLastWriteTime.dwHighDateTime=0x1ca0424, nFileSizeHigh=0x0, nFileSizeLow=0xce00, dwReserved0=0x0, dwReserved1=0x0, cFileName="apihex64.dll", cAlternateFileName="")) returned 1 [0139.940] FindNextFileW (in: hFindFile=0x381b80, lpFindFileData=0x31e56c | out: lpFindFileData=0x31e56c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x83436f83, ftCreationTime.dwHighDateTime=0x1cb892b, ftLastAccessTime.dwLowDateTime=0x83436f83, ftLastAccessTime.dwHighDateTime=0x1cb892b, ftLastWriteTime.dwLowDateTime=0x83436f83, ftLastWriteTime.dwHighDateTime=0x1cb892b, nFileSizeHigh=0x0, nFileSizeLow=0x1e706, dwReserved0=0x0, dwReserved1=0x0, cFileName="sysmain.sdb", cAlternateFileName="")) returned 1 [0139.940] FindNextFileW (in: hFindFile=0x381b80, lpFindFileData=0x31e56c | out: lpFindFileData=0x31e56c*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0139.940] FindClose (in: hFindFile=0x381b80 | out: hFindFile=0x381b80) returned 1 [0139.941] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e7f4) returned 1 [0139.941] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e800) returned 1 [0139.941] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e834) returned 1 [0139.941] GetFullPathNameW (in: lpFileName="C:\\Windows\\AppPatch\\AppPatch64", nBufferLength=0x105, lpBuffer=0x31e33c, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\AppPatch\\AppPatch64", lpFilePart=0x0) returned 0x1e [0139.941] GetFullPathNameW (in: lpFileName="C:\\Windows\\AppPatch\\AppPatch64\\", nBufferLength=0x105, lpBuffer=0x31e310, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\AppPatch\\AppPatch64\\", lpFilePart=0x0) returned 0x1f [0139.941] FindFirstFileW (in: lpFileName="C:\\Windows\\AppPatch\\AppPatch64\\*", lpFindFileData=0x31e55c | out: lpFindFileData=0x31e55c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfdb328d6, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x571de7e6, ftLastAccessTime.dwHighDateTime=0x1cb892c, ftLastWriteTime.dwLowDateTime=0x571de7e6, ftLastWriteTime.dwHighDateTime=0x1cb892c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x381b80 [0139.942] FindNextFileW (in: hFindFile=0x381b80, lpFindFileData=0x31e56c | out: lpFindFileData=0x31e56c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfdb328d6, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x571de7e6, ftLastAccessTime.dwHighDateTime=0x1cb892c, ftLastWriteTime.dwLowDateTime=0x571de7e6, ftLastWriteTime.dwHighDateTime=0x1cb892c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0139.942] FindNextFileW (in: hFindFile=0x381b80, lpFindFileData=0x31e56c | out: lpFindFileData=0x31e56c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4733d573, ftCreationTime.dwHighDateTime=0x1ca0413, ftLastAccessTime.dwLowDateTime=0x4733d573, ftLastAccessTime.dwHighDateTime=0x1ca0413, ftLastWriteTime.dwLowDateTime=0x2244a0, ftLastWriteTime.dwHighDateTime=0x1ca0424, nFileSizeHigh=0x0, nFileSizeLow=0x4b800, dwReserved0=0x0, dwReserved1=0x0, cFileName="AcGenral.dll", cAlternateFileName="")) returned 1 [0139.942] FindNextFileW (in: hFindFile=0x381b80, lpFindFileData=0x31e56c | out: lpFindFileData=0x31e56c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x83410e23, ftCreationTime.dwHighDateTime=0x1cb892b, ftLastAccessTime.dwLowDateTime=0x83410e23, ftLastAccessTime.dwHighDateTime=0x1cb892b, ftLastWriteTime.dwLowDateTime=0x83436f83, ftLastWriteTime.dwHighDateTime=0x1cb892b, nFileSizeHigh=0x0, nFileSizeLow=0x55800, dwReserved0=0x0, dwReserved1=0x0, cFileName="AcLayers.dll", cAlternateFileName="")) returned 1 [0139.942] FindNextFileW (in: hFindFile=0x381b80, lpFindFileData=0x31e56c | out: lpFindFileData=0x31e56c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x42a57971, ftCreationTime.dwHighDateTime=0x1ca0413, ftLastAccessTime.dwLowDateTime=0x42a57971, ftLastAccessTime.dwHighDateTime=0x1ca0413, ftLastWriteTime.dwLowDateTime=0x353060, ftLastWriteTime.dwHighDateTime=0x1ca0424, nFileSizeHigh=0x0, nFileSizeLow=0x1b200, dwReserved0=0x0, dwReserved1=0x0, cFileName="acspecfc.dll", cAlternateFileName="")) returned 1 [0139.942] FindNextFileW (in: hFindFile=0x381b80, lpFindFileData=0x31e56c | out: lpFindFileData=0x31e56c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x424fc85d, ftCreationTime.dwHighDateTime=0x1ca0413, ftLastAccessTime.dwLowDateTime=0x424fc85d, ftLastAccessTime.dwHighDateTime=0x1ca0413, ftLastWriteTime.dwLowDateTime=0x5dc700, ftLastWriteTime.dwHighDateTime=0x1ca0424, nFileSizeHigh=0x0, nFileSizeLow=0x21000, dwReserved0=0x0, dwReserved1=0x0, cFileName="AcXtrnal.dll", cAlternateFileName="")) returned 1 [0139.942] FindNextFileW (in: hFindFile=0x381b80, lpFindFileData=0x31e56c | out: lpFindFileData=0x31e56c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x23e69f36, ftCreationTime.dwHighDateTime=0x1ca0412, ftLastAccessTime.dwLowDateTime=0x23e69f36, ftLastAccessTime.dwHighDateTime=0x1ca0412, ftLastWriteTime.dwLowDateTime=0xf60f60, ftLastWriteTime.dwHighDateTime=0x1ca0424, nFileSizeHigh=0x0, nFileSizeLow=0xce00, dwReserved0=0x0, dwReserved1=0x0, cFileName="apihex64.dll", cAlternateFileName="")) returned 1 [0139.942] FindNextFileW (in: hFindFile=0x381b80, lpFindFileData=0x31e56c | out: lpFindFileData=0x31e56c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x83436f83, ftCreationTime.dwHighDateTime=0x1cb892b, ftLastAccessTime.dwLowDateTime=0x83436f83, ftLastAccessTime.dwHighDateTime=0x1cb892b, ftLastWriteTime.dwLowDateTime=0x83436f83, ftLastWriteTime.dwHighDateTime=0x1cb892b, nFileSizeHigh=0x0, nFileSizeLow=0x1e706, dwReserved0=0x0, dwReserved1=0x0, cFileName="sysmain.sdb", cAlternateFileName="")) returned 1 [0139.942] FindNextFileW (in: hFindFile=0x381b80, lpFindFileData=0x31e56c | out: lpFindFileData=0x31e56c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x83436f83, ftCreationTime.dwHighDateTime=0x1cb892b, ftLastAccessTime.dwLowDateTime=0x83436f83, ftLastAccessTime.dwHighDateTime=0x1cb892b, ftLastWriteTime.dwLowDateTime=0x83436f83, ftLastWriteTime.dwHighDateTime=0x1cb892b, nFileSizeHigh=0x0, nFileSizeLow=0x1e706, dwReserved0=0x0, dwReserved1=0x0, cFileName="sysmain.sdb", cAlternateFileName="")) returned 0 [0139.942] FindClose (in: hFindFile=0x381b80 | out: hFindFile=0x381b80) returned 1 [0139.943] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e7f4) returned 1 [0139.943] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e800) returned 1 [0139.943] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e834) returned 1 [0139.943] GetFullPathNameW (in: lpFileName="C:\\Windows\\AppPatch\\Custom", nBufferLength=0x105, lpBuffer=0x31e33c, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\AppPatch\\Custom", lpFilePart=0x0) returned 0x1a [0139.943] GetFullPathNameW (in: lpFileName="C:\\Windows\\AppPatch\\Custom\\", nBufferLength=0x105, lpBuffer=0x31e310, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\AppPatch\\Custom\\", lpFilePart=0x0) returned 0x1b [0139.943] FindFirstFileW (in: lpFileName="C:\\Windows\\AppPatch\\Custom\\*", lpFindFileData=0x31e55c | out: lpFindFileData=0x31e55c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfdb58a30, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfdb58a30, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xfdb58a30, ftLastWriteTime.dwHighDateTime=0x1ca0431, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x381b80 [0139.943] FindNextFileW (in: hFindFile=0x381b80, lpFindFileData=0x31e56c | out: lpFindFileData=0x31e56c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfdb58a30, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfdb58a30, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xfdb58a30, ftLastWriteTime.dwHighDateTime=0x1ca0431, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0139.943] FindNextFileW (in: hFindFile=0x381b80, lpFindFileData=0x31e56c | out: lpFindFileData=0x31e56c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfdb58a30, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfdb58a30, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0x987a7ac9, ftLastWriteTime.dwHighDateTime=0x1ca042b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Custom64", cAlternateFileName="")) returned 1 [0139.943] FindNextFileW (in: hFindFile=0x381b80, lpFindFileData=0x31e56c | out: lpFindFileData=0x31e56c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfdb58a30, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfdb58a30, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0x987a7ac9, ftLastWriteTime.dwHighDateTime=0x1ca042b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Custom64", cAlternateFileName="")) returned 0 [0139.943] FindClose (in: hFindFile=0x381b80 | out: hFindFile=0x381b80) returned 1 [0139.943] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e7f4) returned 1 [0139.943] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e800) returned 1 [0139.943] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e834) returned 1 [0139.943] GetFullPathNameW (in: lpFileName="C:\\Windows\\AppPatch\\Custom", nBufferLength=0x105, lpBuffer=0x31e33c, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\AppPatch\\Custom", lpFilePart=0x0) returned 0x1a [0139.943] GetFullPathNameW (in: lpFileName="C:\\Windows\\AppPatch\\Custom\\", nBufferLength=0x105, lpBuffer=0x31e310, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\AppPatch\\Custom\\", lpFilePart=0x0) returned 0x1b [0139.943] FindFirstFileW (in: lpFileName="C:\\Windows\\AppPatch\\Custom\\*", lpFindFileData=0x31e55c | out: lpFindFileData=0x31e55c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfdb58a30, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfdb58a30, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xfdb58a30, ftLastWriteTime.dwHighDateTime=0x1ca0431, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x381b80 [0139.944] FindNextFileW (in: hFindFile=0x381b80, lpFindFileData=0x31e56c | out: lpFindFileData=0x31e56c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfdb58a30, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfdb58a30, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xfdb58a30, ftLastWriteTime.dwHighDateTime=0x1ca0431, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0139.944] FindNextFileW (in: hFindFile=0x381b80, lpFindFileData=0x31e56c | out: lpFindFileData=0x31e56c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfdb58a30, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfdb58a30, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0x987a7ac9, ftLastWriteTime.dwHighDateTime=0x1ca042b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Custom64", cAlternateFileName="")) returned 1 [0139.944] FindClose (in: hFindFile=0x381b80 | out: hFindFile=0x381b80) returned 1 [0139.944] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e7f4) returned 1 [0139.944] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e800) returned 1 [0139.944] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e7bc) returned 1 [0139.944] GetFullPathNameW (in: lpFileName="C:\\Windows\\AppPatch\\Custom\\Custom64", nBufferLength=0x105, lpBuffer=0x31e2c4, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\AppPatch\\Custom\\Custom64", lpFilePart=0x0) returned 0x23 [0139.944] GetFullPathNameW (in: lpFileName="C:\\Windows\\AppPatch\\Custom\\Custom64\\", nBufferLength=0x105, lpBuffer=0x31e298, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\AppPatch\\Custom\\Custom64\\", lpFilePart=0x0) returned 0x24 [0139.944] FindFirstFileW (in: lpFileName="C:\\Windows\\AppPatch\\Custom\\Custom64\\*", lpFindFileData=0x31e4e4 | out: lpFindFileData=0x31e4e4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfdb58a30, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfdb58a30, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0x987a7ac9, ftLastWriteTime.dwHighDateTime=0x1ca042b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x381b80 [0139.945] FindClose (in: hFindFile=0x381b80 | out: hFindFile=0x381b80) returned 1 [0139.945] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e77c) returned 1 [0139.945] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e788) returned 1 [0139.945] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e7bc) returned 1 [0139.945] GetFullPathNameW (in: lpFileName="C:\\Windows\\AppPatch\\Custom\\Custom64", nBufferLength=0x105, lpBuffer=0x31e2c4, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\AppPatch\\Custom\\Custom64", lpFilePart=0x0) returned 0x23 [0139.945] GetFullPathNameW (in: lpFileName="C:\\Windows\\AppPatch\\Custom\\Custom64\\", nBufferLength=0x105, lpBuffer=0x31e298, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\AppPatch\\Custom\\Custom64\\", lpFilePart=0x0) returned 0x24 [0139.945] FindFirstFileW (in: lpFileName="C:\\Windows\\AppPatch\\Custom\\Custom64\\*", lpFindFileData=0x31e4e4 | out: lpFindFileData=0x31e4e4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfdb58a30, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfdb58a30, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0x987a7ac9, ftLastWriteTime.dwHighDateTime=0x1ca042b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x381b80 [0139.945] FindClose (in: hFindFile=0x381b80 | out: hFindFile=0x381b80) returned 1 [0139.945] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e77c) returned 1 [0139.945] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e788) returned 1 [0139.945] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e834) returned 1 [0139.945] GetFullPathNameW (in: lpFileName="C:\\Windows\\AppPatch\\en-US", nBufferLength=0x105, lpBuffer=0x31e33c, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\AppPatch\\en-US", lpFilePart=0x0) returned 0x19 [0139.945] GetFullPathNameW (in: lpFileName="C:\\Windows\\AppPatch\\en-US\\", nBufferLength=0x105, lpBuffer=0x31e310, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\AppPatch\\en-US\\", lpFilePart=0x0) returned 0x1a [0139.945] FindFirstFileW (in: lpFileName="C:\\Windows\\AppPatch\\en-US\\*", lpFindFileData=0x31e55c | out: lpFindFileData=0x31e55c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x368b31d3, ftCreationTime.dwHighDateTime=0x1ca0445, ftLastAccessTime.dwLowDateTime=0x23fb0799, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x1d91b669, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x381b80 [0139.946] FindClose (in: hFindFile=0x381b80 | out: hFindFile=0x381b80) returned 1 [0139.946] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e7f4) returned 1 [0139.946] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e800) returned 1 [0139.946] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e834) returned 1 [0139.946] GetFullPathNameW (in: lpFileName="C:\\Windows\\AppPatch\\en-US", nBufferLength=0x105, lpBuffer=0x31e33c, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\AppPatch\\en-US", lpFilePart=0x0) returned 0x19 [0139.946] GetFullPathNameW (in: lpFileName="C:\\Windows\\AppPatch\\en-US\\", nBufferLength=0x105, lpBuffer=0x31e310, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\AppPatch\\en-US\\", lpFilePart=0x0) returned 0x1a [0139.946] FindFirstFileW (in: lpFileName="C:\\Windows\\AppPatch\\en-US\\*", lpFindFileData=0x31e55c | out: lpFindFileData=0x31e55c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x368b31d3, ftCreationTime.dwHighDateTime=0x1ca0445, ftLastAccessTime.dwLowDateTime=0x23fb0799, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x1d91b669, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x381b80 [0139.946] FindClose (in: hFindFile=0x381b80 | out: hFindFile=0x381b80) returned 1 [0139.946] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e7f4) returned 1 [0139.946] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e800) returned 1 [0139.946] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e8ac) returned 1 [0139.946] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly", nBufferLength=0x105, lpBuffer=0x31e3b4, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly", lpFilePart=0x0) returned 0x13 [0139.946] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\", nBufferLength=0x105, lpBuffer=0x31e388, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\", lpFilePart=0x0) returned 0x14 [0139.946] FindFirstFileW (in: lpFileName="C:\\Windows\\assembly\\*", lpFindFileData=0x31e5d4 | out: lpFindFileData=0x31e5d4*(dwFileAttributes=0x15, ftCreationTime.dwLowDateTime=0xfdb58a30, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xe968e7e0, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0xe968e7e0, ftLastWriteTime.dwHighDateTime=0x1d305f1, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x381b80 [0139.946] FindClose (in: hFindFile=0x381b80 | out: hFindFile=0x381b80) returned 1 [0139.946] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e86c) returned 1 [0139.946] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e878) returned 1 [0139.946] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e8ac) returned 1 [0139.946] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly", nBufferLength=0x105, lpBuffer=0x31e3b4, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly", lpFilePart=0x0) returned 0x13 [0139.946] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\", nBufferLength=0x105, lpBuffer=0x31e388, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\", lpFilePart=0x0) returned 0x14 [0139.947] FindFirstFileW (in: lpFileName="C:\\Windows\\assembly\\*", lpFindFileData=0x31e5d4 | out: lpFindFileData=0x31e5d4*(dwFileAttributes=0x15, ftCreationTime.dwLowDateTime=0xfdb58a30, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xe968e7e0, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0xe968e7e0, ftLastWriteTime.dwHighDateTime=0x1d305f1, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x381b80 [0139.947] FindClose (in: hFindFile=0x381b80 | out: hFindFile=0x381b80) returned 1 [0139.947] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e86c) returned 1 [0139.947] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e878) returned 1 [0139.947] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e834) returned 1 [0139.947] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC", nBufferLength=0x105, lpBuffer=0x31e33c, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC", lpFilePart=0x0) returned 0x17 [0139.947] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC\\", nBufferLength=0x105, lpBuffer=0x31e310, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC\\", lpFilePart=0x0) returned 0x18 [0139.947] FindFirstFileW (in: lpFileName="C:\\Windows\\assembly\\GAC\\*", lpFindFileData=0x31e55c | out: lpFindFileData=0x31e55c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x409ffc9f, ftCreationTime.dwHighDateTime=0x1ca043f, ftLastAccessTime.dwLowDateTime=0xa6699150, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xa6699150, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x381b80 [0139.948] FindClose (in: hFindFile=0x381b80 | out: hFindFile=0x381b80) returned 1 [0139.948] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e7f4) returned 1 [0139.948] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e800) returned 1 [0139.948] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e834) returned 1 [0139.948] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC", nBufferLength=0x105, lpBuffer=0x31e33c, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC", lpFilePart=0x0) returned 0x17 [0139.949] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC\\", nBufferLength=0x105, lpBuffer=0x31e310, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC\\", lpFilePart=0x0) returned 0x18 [0139.949] FindFirstFileW (in: lpFileName="C:\\Windows\\assembly\\GAC\\*", lpFindFileData=0x31e55c | out: lpFindFileData=0x31e55c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x409ffc9f, ftCreationTime.dwHighDateTime=0x1ca043f, ftLastAccessTime.dwLowDateTime=0xa6699150, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xa6699150, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x381b80 [0139.949] FindClose (in: hFindFile=0x381b80 | out: hFindFile=0x381b80) returned 1 [0139.950] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e7f4) returned 1 [0139.950] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e800) returned 1 [0139.950] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e7bc) returned 1 [0139.950] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC\\ADODB", nBufferLength=0x105, lpBuffer=0x31e2c4, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC\\ADODB", lpFilePart=0x0) returned 0x1d [0139.950] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC\\ADODB\\", nBufferLength=0x105, lpBuffer=0x31e298, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC\\ADODB\\", lpFilePart=0x0) returned 0x1e [0139.950] FindFirstFileW (in: lpFileName="C:\\Windows\\assembly\\GAC\\ADODB\\*", lpFindFileData=0x31e4e4 | out: lpFindFileData=0x31e4e4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa60f1d10, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0xa60f1d10, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xa60f1d10, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x381b80 [0139.951] FindClose (in: hFindFile=0x381b80 | out: hFindFile=0x381b80) returned 1 [0139.951] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e77c) returned 1 [0139.951] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e788) returned 1 [0139.951] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e7bc) returned 1 [0139.951] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC\\ADODB", nBufferLength=0x105, lpBuffer=0x31e2c4, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC\\ADODB", lpFilePart=0x0) returned 0x1d [0139.951] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC\\ADODB\\", nBufferLength=0x105, lpBuffer=0x31e298, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC\\ADODB\\", lpFilePart=0x0) returned 0x1e [0139.951] FindFirstFileW (in: lpFileName="C:\\Windows\\assembly\\GAC\\ADODB\\*", lpFindFileData=0x31e4e4 | out: lpFindFileData=0x31e4e4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa60f1d10, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0xa60f1d10, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xa60f1d10, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x381b80 [0139.951] FindClose (in: hFindFile=0x381b80 | out: hFindFile=0x381b80) returned 1 [0139.951] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e77c) returned 1 [0139.951] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e788) returned 1 [0139.951] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e744) returned 1 [0139.951] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC\\ADODB\\7.0.3300.0__b03f5f7f11d50a3a", nBufferLength=0x105, lpBuffer=0x31e24c, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC\\ADODB\\7.0.3300.0__b03f5f7f11d50a3a", lpFilePart=0x0) returned 0x3a [0139.951] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC\\ADODB\\7.0.3300.0__b03f5f7f11d50a3a\\", nBufferLength=0x105, lpBuffer=0x31e220, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC\\ADODB\\7.0.3300.0__b03f5f7f11d50a3a\\", lpFilePart=0x0) returned 0x3b [0139.952] FindFirstFileW (in: lpFileName="C:\\Windows\\assembly\\GAC\\ADODB\\7.0.3300.0__b03f5f7f11d50a3a\\*", lpFindFileData=0x31e46c | out: lpFindFileData=0x31e46c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5eaf6290, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0xa60f1d10, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xa60f1d10, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x381b80 [0139.952] FindClose (in: hFindFile=0x381b80 | out: hFindFile=0x381b80) returned 1 [0139.952] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e704) returned 1 [0139.952] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e710) returned 1 [0139.952] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e744) returned 1 [0139.952] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC\\ADODB\\7.0.3300.0__b03f5f7f11d50a3a", nBufferLength=0x105, lpBuffer=0x31e24c, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC\\ADODB\\7.0.3300.0__b03f5f7f11d50a3a", lpFilePart=0x0) returned 0x3a [0139.952] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC\\ADODB\\7.0.3300.0__b03f5f7f11d50a3a\\", nBufferLength=0x105, lpBuffer=0x31e220, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC\\ADODB\\7.0.3300.0__b03f5f7f11d50a3a\\", lpFilePart=0x0) returned 0x3b [0139.952] FindFirstFileW (in: lpFileName="C:\\Windows\\assembly\\GAC\\ADODB\\7.0.3300.0__b03f5f7f11d50a3a\\*", lpFindFileData=0x31e46c | out: lpFindFileData=0x31e46c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5eaf6290, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0xa60f1d10, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xa60f1d10, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x381b80 [0139.952] FindClose (in: hFindFile=0x381b80 | out: hFindFile=0x381b80) returned 1 [0139.952] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e704) returned 1 [0139.952] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e710) returned 1 [0139.952] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e7bc) returned 1 [0139.952] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC\\Extensibility", nBufferLength=0x105, lpBuffer=0x31e2c4, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC\\Extensibility", lpFilePart=0x0) returned 0x25 [0139.952] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC\\Extensibility\\", nBufferLength=0x105, lpBuffer=0x31e298, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC\\Extensibility\\", lpFilePart=0x0) returned 0x26 [0139.952] FindFirstFileW (in: lpFileName="C:\\Windows\\assembly\\GAC\\Extensibility\\*", lpFindFileData=0x31e4e4 | out: lpFindFileData=0x31e4e4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa6699150, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0xa6699150, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xa6699150, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x381b80 [0139.952] FindClose (in: hFindFile=0x381b80 | out: hFindFile=0x381b80) returned 1 [0139.953] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e77c) returned 1 [0139.953] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e788) returned 1 [0139.953] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e7bc) returned 1 [0139.953] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC\\Extensibility", nBufferLength=0x105, lpBuffer=0x31e2c4, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC\\Extensibility", lpFilePart=0x0) returned 0x25 [0139.953] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC\\Extensibility\\", nBufferLength=0x105, lpBuffer=0x31e298, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC\\Extensibility\\", lpFilePart=0x0) returned 0x26 [0139.953] FindFirstFileW (in: lpFileName="C:\\Windows\\assembly\\GAC\\Extensibility\\*", lpFindFileData=0x31e4e4 | out: lpFindFileData=0x31e4e4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa6699150, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0xa6699150, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xa6699150, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x381b80 [0139.953] FindClose (in: hFindFile=0x381b80 | out: hFindFile=0x381b80) returned 1 [0139.953] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e77c) returned 1 [0139.953] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e788) returned 1 [0139.953] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e744) returned 1 [0139.953] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC\\Extensibility\\7.0.3300.0__b03f5f7f11d50a3a", nBufferLength=0x105, lpBuffer=0x31e24c, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC\\Extensibility\\7.0.3300.0__b03f5f7f11d50a3a", lpFilePart=0x0) returned 0x42 [0139.953] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC\\Extensibility\\7.0.3300.0__b03f5f7f11d50a3a\\", nBufferLength=0x105, lpBuffer=0x31e220, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC\\Extensibility\\7.0.3300.0__b03f5f7f11d50a3a\\", lpFilePart=0x0) returned 0x43 [0139.953] FindFirstFileW (in: lpFileName="C:\\Windows\\assembly\\GAC\\Extensibility\\7.0.3300.0__b03f5f7f11d50a3a\\*", lpFindFileData=0x31e46c | out: lpFindFileData=0x31e46c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x60b18b90, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0xa6699150, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xa6699150, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x381b80 [0139.953] FindClose (in: hFindFile=0x381b80 | out: hFindFile=0x381b80) returned 1 [0139.953] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e704) returned 1 [0139.953] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e710) returned 1 [0139.953] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e744) returned 1 [0139.953] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC\\Extensibility\\7.0.3300.0__b03f5f7f11d50a3a", nBufferLength=0x105, lpBuffer=0x31e24c, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC\\Extensibility\\7.0.3300.0__b03f5f7f11d50a3a", lpFilePart=0x0) returned 0x42 [0139.953] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC\\Extensibility\\7.0.3300.0__b03f5f7f11d50a3a\\", nBufferLength=0x105, lpBuffer=0x31e220, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC\\Extensibility\\7.0.3300.0__b03f5f7f11d50a3a\\", lpFilePart=0x0) returned 0x43 [0139.953] FindFirstFileW (in: lpFileName="C:\\Windows\\assembly\\GAC\\Extensibility\\7.0.3300.0__b03f5f7f11d50a3a\\*", lpFindFileData=0x31e46c | out: lpFindFileData=0x31e46c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x60b18b90, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0xa6699150, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xa6699150, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x381b80 [0139.954] FindClose (in: hFindFile=0x381b80 | out: hFindFile=0x381b80) returned 1 [0139.954] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e704) returned 1 [0139.954] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e710) returned 1 [0139.954] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e7bc) returned 1 [0139.954] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC\\Microsoft.Ink", nBufferLength=0x105, lpBuffer=0x31e2c4, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC\\Microsoft.Ink", lpFilePart=0x0) returned 0x25 [0139.954] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC\\Microsoft.Ink\\", nBufferLength=0x105, lpBuffer=0x31e298, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC\\Microsoft.Ink\\", lpFilePart=0x0) returned 0x26 [0139.954] FindFirstFileW (in: lpFileName="C:\\Windows\\assembly\\GAC\\Microsoft.Ink\\*", lpFindFileData=0x31e4e4 | out: lpFindFileData=0x31e4e4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x409ffc9f, ftCreationTime.dwHighDateTime=0x1ca043f, ftLastAccessTime.dwLowDateTime=0x40a98220, ftLastAccessTime.dwHighDateTime=0x1ca043f, ftLastWriteTime.dwLowDateTime=0x40a98220, ftLastWriteTime.dwHighDateTime=0x1ca043f, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x381b80 [0139.954] FindClose (in: hFindFile=0x381b80 | out: hFindFile=0x381b80) returned 1 [0139.954] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e77c) returned 1 [0139.954] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e788) returned 1 [0139.954] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e7bc) returned 1 [0139.954] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC\\Microsoft.Ink", nBufferLength=0x105, lpBuffer=0x31e2c4, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC\\Microsoft.Ink", lpFilePart=0x0) returned 0x25 [0139.954] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC\\Microsoft.Ink\\", nBufferLength=0x105, lpBuffer=0x31e298, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC\\Microsoft.Ink\\", lpFilePart=0x0) returned 0x26 [0139.954] FindFirstFileW (in: lpFileName="C:\\Windows\\assembly\\GAC\\Microsoft.Ink\\*", lpFindFileData=0x31e4e4 | out: lpFindFileData=0x31e4e4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x409ffc9f, ftCreationTime.dwHighDateTime=0x1ca043f, ftLastAccessTime.dwLowDateTime=0x40a98220, ftLastAccessTime.dwHighDateTime=0x1ca043f, ftLastWriteTime.dwLowDateTime=0x40a98220, ftLastWriteTime.dwHighDateTime=0x1ca043f, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x381b80 [0139.954] FindClose (in: hFindFile=0x381b80 | out: hFindFile=0x381b80) returned 1 [0139.954] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e77c) returned 1 [0139.955] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e788) returned 1 [0139.955] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e744) returned 1 [0139.955] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC\\Microsoft.Ink\\1.0.2201.0__31bf3856ad364e35", nBufferLength=0x105, lpBuffer=0x31e24c, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC\\Microsoft.Ink\\1.0.2201.0__31bf3856ad364e35", lpFilePart=0x0) returned 0x42 [0139.955] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC\\Microsoft.Ink\\1.0.2201.0__31bf3856ad364e35\\", nBufferLength=0x105, lpBuffer=0x31e220, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC\\Microsoft.Ink\\1.0.2201.0__31bf3856ad364e35\\", lpFilePart=0x0) returned 0x43 [0139.955] FindFirstFileW (in: lpFileName="C:\\Windows\\assembly\\GAC\\Microsoft.Ink\\1.0.2201.0__31bf3856ad364e35\\*", lpFindFileData=0x31e46c | out: lpFindFileData=0x31e46c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x409415bd, ftCreationTime.dwHighDateTime=0x1ca043f, ftLastAccessTime.dwLowDateTime=0x409415bd, ftLastAccessTime.dwHighDateTime=0x1ca043f, ftLastWriteTime.dwLowDateTime=0x409415bd, ftLastWriteTime.dwHighDateTime=0x1ca043f, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x381b80 [0139.955] FindClose (in: hFindFile=0x381b80 | out: hFindFile=0x381b80) returned 1 [0139.955] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e704) returned 1 [0139.955] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e710) returned 1 [0139.955] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e744) returned 1 [0139.955] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC\\Microsoft.Ink\\1.0.2201.0__31bf3856ad364e35", nBufferLength=0x105, lpBuffer=0x31e24c, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC\\Microsoft.Ink\\1.0.2201.0__31bf3856ad364e35", lpFilePart=0x0) returned 0x42 [0139.955] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC\\Microsoft.Ink\\1.0.2201.0__31bf3856ad364e35\\", nBufferLength=0x105, lpBuffer=0x31e220, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC\\Microsoft.Ink\\1.0.2201.0__31bf3856ad364e35\\", lpFilePart=0x0) returned 0x43 [0139.955] FindFirstFileW (in: lpFileName="C:\\Windows\\assembly\\GAC\\Microsoft.Ink\\1.0.2201.0__31bf3856ad364e35\\*", lpFindFileData=0x31e46c | out: lpFindFileData=0x31e46c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x409415bd, ftCreationTime.dwHighDateTime=0x1ca043f, ftLastAccessTime.dwLowDateTime=0x409415bd, ftLastAccessTime.dwHighDateTime=0x1ca043f, ftLastWriteTime.dwLowDateTime=0x409415bd, ftLastWriteTime.dwHighDateTime=0x1ca043f, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x381b80 [0139.955] FindClose (in: hFindFile=0x381b80 | out: hFindFile=0x381b80) returned 1 [0139.955] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e704) returned 1 [0139.955] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e710) returned 1 [0139.955] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e744) returned 1 [0139.955] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC\\Microsoft.Ink\\1.7.2600.2180__31bf3856ad364e35", nBufferLength=0x105, lpBuffer=0x31e24c, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC\\Microsoft.Ink\\1.7.2600.2180__31bf3856ad364e35", lpFilePart=0x0) returned 0x45 [0139.955] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC\\Microsoft.Ink\\1.7.2600.2180__31bf3856ad364e35\\", nBufferLength=0x105, lpBuffer=0x31e220, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC\\Microsoft.Ink\\1.7.2600.2180__31bf3856ad364e35\\", lpFilePart=0x0) returned 0x46 [0139.955] FindFirstFileW (in: lpFileName="C:\\Windows\\assembly\\GAC\\Microsoft.Ink\\1.7.2600.2180__31bf3856ad364e35\\*", lpFindFileData=0x31e46c | out: lpFindFileData=0x31e46c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x40a720bf, ftCreationTime.dwHighDateTime=0x1ca043f, ftLastAccessTime.dwLowDateTime=0x40a98220, ftLastAccessTime.dwHighDateTime=0x1ca043f, ftLastWriteTime.dwLowDateTime=0x40a98220, ftLastWriteTime.dwHighDateTime=0x1ca043f, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x381b80 [0139.956] FindClose (in: hFindFile=0x381b80 | out: hFindFile=0x381b80) returned 1 [0139.956] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e704) returned 1 [0139.956] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e710) returned 1 [0139.956] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e744) returned 1 [0139.956] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC\\Microsoft.Ink\\1.7.2600.2180__31bf3856ad364e35", nBufferLength=0x105, lpBuffer=0x31e24c, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC\\Microsoft.Ink\\1.7.2600.2180__31bf3856ad364e35", lpFilePart=0x0) returned 0x45 [0139.956] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC\\Microsoft.Ink\\1.7.2600.2180__31bf3856ad364e35\\", nBufferLength=0x105, lpBuffer=0x31e220, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC\\Microsoft.Ink\\1.7.2600.2180__31bf3856ad364e35\\", lpFilePart=0x0) returned 0x46 [0139.956] FindFirstFileW (in: lpFileName="C:\\Windows\\assembly\\GAC\\Microsoft.Ink\\1.7.2600.2180__31bf3856ad364e35\\*", lpFindFileData=0x31e46c | out: lpFindFileData=0x31e46c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x40a720bf, ftCreationTime.dwHighDateTime=0x1ca043f, ftLastAccessTime.dwLowDateTime=0x40a98220, ftLastAccessTime.dwHighDateTime=0x1ca043f, ftLastWriteTime.dwLowDateTime=0x40a98220, ftLastWriteTime.dwHighDateTime=0x1ca043f, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x381b80 [0139.956] FindClose (in: hFindFile=0x381b80 | out: hFindFile=0x381b80) returned 1 [0139.956] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e704) returned 1 [0139.956] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e710) returned 1 [0139.956] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e7bc) returned 1 [0139.956] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC\\Microsoft.mshtml", nBufferLength=0x105, lpBuffer=0x31e2c4, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC\\Microsoft.mshtml", lpFilePart=0x0) returned 0x28 [0139.956] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC\\Microsoft.mshtml\\", nBufferLength=0x105, lpBuffer=0x31e298, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC\\Microsoft.mshtml\\", lpFilePart=0x0) returned 0x29 [0139.956] FindFirstFileW (in: lpFileName="C:\\Windows\\assembly\\GAC\\Microsoft.mshtml\\*", lpFindFileData=0x31e4e4 | out: lpFindFileData=0x31e4e4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa60cbbb0, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0xa60cbbb0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xa60cbbb0, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x381b80 [0139.956] FindClose (in: hFindFile=0x381b80 | out: hFindFile=0x381b80) returned 1 [0139.956] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e77c) returned 1 [0139.957] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e788) returned 1 [0139.957] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e7bc) returned 1 [0139.957] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC\\Microsoft.mshtml", nBufferLength=0x105, lpBuffer=0x31e2c4, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC\\Microsoft.mshtml", lpFilePart=0x0) returned 0x28 [0139.957] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC\\Microsoft.mshtml\\", nBufferLength=0x105, lpBuffer=0x31e298, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC\\Microsoft.mshtml\\", lpFilePart=0x0) returned 0x29 [0139.957] FindFirstFileW (in: lpFileName="C:\\Windows\\assembly\\GAC\\Microsoft.mshtml\\*", lpFindFileData=0x31e4e4 | out: lpFindFileData=0x31e4e4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa60cbbb0, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0xa60cbbb0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xa60cbbb0, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x381b80 [0139.957] FindClose (in: hFindFile=0x381b80 | out: hFindFile=0x381b80) returned 1 [0139.957] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e77c) returned 1 [0139.957] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e788) returned 1 [0139.957] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e744) returned 1 [0139.957] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC\\Microsoft.mshtml\\7.0.3300.0__b03f5f7f11d50a3a", nBufferLength=0x105, lpBuffer=0x31e24c, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC\\Microsoft.mshtml\\7.0.3300.0__b03f5f7f11d50a3a", lpFilePart=0x0) returned 0x45 [0139.957] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC\\Microsoft.mshtml\\7.0.3300.0__b03f5f7f11d50a3a\\", nBufferLength=0x105, lpBuffer=0x31e220, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC\\Microsoft.mshtml\\7.0.3300.0__b03f5f7f11d50a3a\\", lpFilePart=0x0) returned 0x46 [0139.957] FindFirstFileW (in: lpFileName="C:\\Windows\\assembly\\GAC\\Microsoft.mshtml\\7.0.3300.0__b03f5f7f11d50a3a\\*", lpFindFileData=0x31e46c | out: lpFindFileData=0x31e46c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x69b68150, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0xa60cbbb0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xa60cbbb0, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x381b80 [0139.957] FindClose (in: hFindFile=0x381b80 | out: hFindFile=0x381b80) returned 1 [0139.958] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e704) returned 1 [0139.958] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e710) returned 1 [0139.958] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e744) returned 1 [0139.958] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC\\Microsoft.mshtml\\7.0.3300.0__b03f5f7f11d50a3a", nBufferLength=0x105, lpBuffer=0x31e24c, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC\\Microsoft.mshtml\\7.0.3300.0__b03f5f7f11d50a3a", lpFilePart=0x0) returned 0x45 [0139.958] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC\\Microsoft.mshtml\\7.0.3300.0__b03f5f7f11d50a3a\\", nBufferLength=0x105, lpBuffer=0x31e220, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC\\Microsoft.mshtml\\7.0.3300.0__b03f5f7f11d50a3a\\", lpFilePart=0x0) returned 0x46 [0139.959] FindFirstFileW (in: lpFileName="C:\\Windows\\assembly\\GAC\\Microsoft.mshtml\\7.0.3300.0__b03f5f7f11d50a3a\\*", lpFindFileData=0x31e46c | out: lpFindFileData=0x31e46c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x69b68150, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0xa60cbbb0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xa60cbbb0, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x381b80 [0139.959] FindClose (in: hFindFile=0x381b80 | out: hFindFile=0x381b80) returned 1 [0139.959] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e704) returned 1 [0139.959] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e710) returned 1 [0139.959] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e7bc) returned 1 [0139.959] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC\\Microsoft.StdFormat", nBufferLength=0x105, lpBuffer=0x31e2c4, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC\\Microsoft.StdFormat", lpFilePart=0x0) returned 0x2b [0139.959] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC\\Microsoft.StdFormat\\", nBufferLength=0x105, lpBuffer=0x31e298, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC\\Microsoft.StdFormat\\", lpFilePart=0x0) returned 0x2c [0139.959] FindFirstFileW (in: lpFileName="C:\\Windows\\assembly\\GAC\\Microsoft.StdFormat\\*", lpFindFileData=0x31e4e4 | out: lpFindFileData=0x31e4e4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa5fc1210, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0xa5fc1210, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xa5fc1210, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x381b80 [0139.959] FindClose (in: hFindFile=0x381b80 | out: hFindFile=0x381b80) returned 1 [0139.959] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e77c) returned 1 [0139.959] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e788) returned 1 [0139.959] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e7bc) returned 1 [0139.959] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC\\Microsoft.StdFormat", nBufferLength=0x105, lpBuffer=0x31e2c4, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC\\Microsoft.StdFormat", lpFilePart=0x0) returned 0x2b [0139.959] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC\\Microsoft.StdFormat\\", nBufferLength=0x105, lpBuffer=0x31e298, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC\\Microsoft.StdFormat\\", lpFilePart=0x0) returned 0x2c [0139.959] FindFirstFileW (in: lpFileName="C:\\Windows\\assembly\\GAC\\Microsoft.StdFormat\\*", lpFindFileData=0x31e4e4 | out: lpFindFileData=0x31e4e4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa5fc1210, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0xa5fc1210, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xa5fc1210, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x381b80 [0139.959] FindClose (in: hFindFile=0x381b80 | out: hFindFile=0x381b80) returned 1 [0139.960] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e77c) returned 1 [0139.960] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e788) returned 1 [0139.960] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e744) returned 1 [0139.960] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC\\Microsoft.StdFormat\\7.0.3300.0__b03f5f7f11d50a3a", nBufferLength=0x105, lpBuffer=0x31e24c, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC\\Microsoft.StdFormat\\7.0.3300.0__b03f5f7f11d50a3a", lpFilePart=0x0) returned 0x48 [0139.960] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC\\Microsoft.StdFormat\\7.0.3300.0__b03f5f7f11d50a3a\\", nBufferLength=0x105, lpBuffer=0x31e220, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC\\Microsoft.StdFormat\\7.0.3300.0__b03f5f7f11d50a3a\\", lpFilePart=0x0) returned 0x49 [0139.960] FindFirstFileW (in: lpFileName="C:\\Windows\\assembly\\GAC\\Microsoft.StdFormat\\7.0.3300.0__b03f5f7f11d50a3a\\*", lpFindFileData=0x31e46c | out: lpFindFileData=0x31e46c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x69c006d0, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0xa5f9b0b0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xa5f9b0b0, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x381b80 [0139.960] FindClose (in: hFindFile=0x381b80 | out: hFindFile=0x381b80) returned 1 [0139.960] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e704) returned 1 [0139.960] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e710) returned 1 [0139.960] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e744) returned 1 [0139.960] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC\\Microsoft.StdFormat\\7.0.3300.0__b03f5f7f11d50a3a", nBufferLength=0x105, lpBuffer=0x31e24c, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC\\Microsoft.StdFormat\\7.0.3300.0__b03f5f7f11d50a3a", lpFilePart=0x0) returned 0x48 [0139.960] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC\\Microsoft.StdFormat\\7.0.3300.0__b03f5f7f11d50a3a\\", nBufferLength=0x105, lpBuffer=0x31e220, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC\\Microsoft.StdFormat\\7.0.3300.0__b03f5f7f11d50a3a\\", lpFilePart=0x0) returned 0x49 [0139.960] FindFirstFileW (in: lpFileName="C:\\Windows\\assembly\\GAC\\Microsoft.StdFormat\\7.0.3300.0__b03f5f7f11d50a3a\\*", lpFindFileData=0x31e46c | out: lpFindFileData=0x31e46c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x69c006d0, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0xa5f9b0b0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xa5f9b0b0, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x381b80 [0139.960] FindClose (in: hFindFile=0x381b80 | out: hFindFile=0x381b80) returned 1 [0139.960] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e704) returned 1 [0139.960] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e710) returned 1 [0139.960] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e7bc) returned 1 [0139.960] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC\\MSDATASRC", nBufferLength=0x105, lpBuffer=0x31e2c4, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC\\MSDATASRC", lpFilePart=0x0) returned 0x21 [0139.960] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC\\MSDATASRC\\", nBufferLength=0x105, lpBuffer=0x31e298, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC\\MSDATASRC\\", lpFilePart=0x0) returned 0x22 [0139.961] FindFirstFileW (in: lpFileName="C:\\Windows\\assembly\\GAC\\MSDATASRC\\*", lpFindFileData=0x31e4e4 | out: lpFindFileData=0x31e4e4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa60cbbb0, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0xa60cbbb0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xa60cbbb0, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x381b80 [0139.961] FindClose (in: hFindFile=0x381b80 | out: hFindFile=0x381b80) returned 1 [0139.961] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e77c) returned 1 [0139.961] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e788) returned 1 [0139.961] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e7bc) returned 1 [0139.961] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC\\MSDATASRC", nBufferLength=0x105, lpBuffer=0x31e2c4, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC\\MSDATASRC", lpFilePart=0x0) returned 0x21 [0139.961] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC\\MSDATASRC\\", nBufferLength=0x105, lpBuffer=0x31e298, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC\\MSDATASRC\\", lpFilePart=0x0) returned 0x22 [0139.961] FindFirstFileW (in: lpFileName="C:\\Windows\\assembly\\GAC\\MSDATASRC\\*", lpFindFileData=0x31e4e4 | out: lpFindFileData=0x31e4e4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa60cbbb0, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0xa60cbbb0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xa60cbbb0, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x381b80 [0139.961] FindClose (in: hFindFile=0x381b80 | out: hFindFile=0x381b80) returned 1 [0139.961] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e77c) returned 1 [0139.961] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e788) returned 1 [0139.961] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e744) returned 1 [0139.961] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC\\MSDATASRC\\7.0.3300.0__b03f5f7f11d50a3a", nBufferLength=0x105, lpBuffer=0x31e24c, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC\\MSDATASRC\\7.0.3300.0__b03f5f7f11d50a3a", lpFilePart=0x0) returned 0x3e [0139.961] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC\\MSDATASRC\\7.0.3300.0__b03f5f7f11d50a3a\\", nBufferLength=0x105, lpBuffer=0x31e220, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC\\MSDATASRC\\7.0.3300.0__b03f5f7f11d50a3a\\", lpFilePart=0x0) returned 0x3f [0139.961] FindFirstFileW (in: lpFileName="C:\\Windows\\assembly\\GAC\\MSDATASRC\\7.0.3300.0__b03f5f7f11d50a3a\\*", lpFindFileData=0x31e46c | out: lpFindFileData=0x31e46c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x69dc9750, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0xa60cbbb0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xa60cbbb0, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x381b80 [0139.961] FindClose (in: hFindFile=0x381b80 | out: hFindFile=0x381b80) returned 1 [0139.961] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e704) returned 1 [0139.962] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e710) returned 1 [0139.962] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e744) returned 1 [0139.962] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC\\MSDATASRC\\7.0.3300.0__b03f5f7f11d50a3a", nBufferLength=0x105, lpBuffer=0x31e24c, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC\\MSDATASRC\\7.0.3300.0__b03f5f7f11d50a3a", lpFilePart=0x0) returned 0x3e [0139.962] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC\\MSDATASRC\\7.0.3300.0__b03f5f7f11d50a3a\\", nBufferLength=0x105, lpBuffer=0x31e220, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC\\MSDATASRC\\7.0.3300.0__b03f5f7f11d50a3a\\", lpFilePart=0x0) returned 0x3f [0139.962] FindFirstFileW (in: lpFileName="C:\\Windows\\assembly\\GAC\\MSDATASRC\\7.0.3300.0__b03f5f7f11d50a3a\\*", lpFindFileData=0x31e46c | out: lpFindFileData=0x31e46c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x69dc9750, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0xa60cbbb0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xa60cbbb0, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x381b80 [0139.962] FindClose (in: hFindFile=0x381b80 | out: hFindFile=0x381b80) returned 1 [0139.962] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e704) returned 1 [0139.962] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e710) returned 1 [0139.962] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e7bc) returned 1 [0139.962] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC\\stdole", nBufferLength=0x105, lpBuffer=0x31e2c4, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC\\stdole", lpFilePart=0x0) returned 0x1e [0139.962] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC\\stdole\\", nBufferLength=0x105, lpBuffer=0x31e298, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC\\stdole\\", lpFilePart=0x0) returned 0x1f [0139.962] FindFirstFileW (in: lpFileName="C:\\Windows\\assembly\\GAC\\stdole\\*", lpFindFileData=0x31e4e4 | out: lpFindFileData=0x31e4e4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa60f1d10, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0xa60f1d10, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xa60f1d10, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x381b80 [0139.962] FindClose (in: hFindFile=0x381b80 | out: hFindFile=0x381b80) returned 1 [0139.962] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e77c) returned 1 [0139.962] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e788) returned 1 [0139.962] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e7bc) returned 1 [0139.962] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC\\stdole", nBufferLength=0x105, lpBuffer=0x31e2c4, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC\\stdole", lpFilePart=0x0) returned 0x1e [0139.962] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC\\stdole\\", nBufferLength=0x105, lpBuffer=0x31e298, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC\\stdole\\", lpFilePart=0x0) returned 0x1f [0139.962] FindFirstFileW (in: lpFileName="C:\\Windows\\assembly\\GAC\\stdole\\*", lpFindFileData=0x31e4e4 | out: lpFindFileData=0x31e4e4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa60f1d10, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0xa60f1d10, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xa60f1d10, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x381b80 [0139.963] FindClose (in: hFindFile=0x381b80 | out: hFindFile=0x381b80) returned 1 [0139.963] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e77c) returned 1 [0139.963] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e788) returned 1 [0139.963] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e744) returned 1 [0139.963] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC\\stdole\\7.0.3300.0__b03f5f7f11d50a3a", nBufferLength=0x105, lpBuffer=0x31e24c, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC\\stdole\\7.0.3300.0__b03f5f7f11d50a3a", lpFilePart=0x0) returned 0x3b [0139.963] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC\\stdole\\7.0.3300.0__b03f5f7f11d50a3a\\", nBufferLength=0x105, lpBuffer=0x31e220, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC\\stdole\\7.0.3300.0__b03f5f7f11d50a3a\\", lpFilePart=0x0) returned 0x3c [0139.963] FindFirstFileW (in: lpFileName="C:\\Windows\\assembly\\GAC\\stdole\\7.0.3300.0__b03f5f7f11d50a3a\\*", lpFindFileData=0x31e46c | out: lpFindFileData=0x31e46c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x6d3caa70, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0xa60f1d10, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xa60f1d10, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x381b80 [0139.963] FindClose (in: hFindFile=0x381b80 | out: hFindFile=0x381b80) returned 1 [0139.963] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e704) returned 1 [0139.963] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e710) returned 1 [0139.963] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e744) returned 1 [0139.963] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC\\stdole\\7.0.3300.0__b03f5f7f11d50a3a", nBufferLength=0x105, lpBuffer=0x31e24c, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC\\stdole\\7.0.3300.0__b03f5f7f11d50a3a", lpFilePart=0x0) returned 0x3b [0139.963] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC\\stdole\\7.0.3300.0__b03f5f7f11d50a3a\\", nBufferLength=0x105, lpBuffer=0x31e220, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC\\stdole\\7.0.3300.0__b03f5f7f11d50a3a\\", lpFilePart=0x0) returned 0x3c [0139.963] FindFirstFileW (in: lpFileName="C:\\Windows\\assembly\\GAC\\stdole\\7.0.3300.0__b03f5f7f11d50a3a\\*", lpFindFileData=0x31e46c | out: lpFindFileData=0x31e46c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x6d3caa70, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0xa60f1d10, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xa60f1d10, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x381b80 [0139.963] FindClose (in: hFindFile=0x381b80 | out: hFindFile=0x381b80) returned 1 [0139.963] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e704) returned 1 [0139.963] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e710) returned 1 [0139.964] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e834) returned 1 [0139.964] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_32", nBufferLength=0x105, lpBuffer=0x31e33c, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_32", lpFilePart=0x0) returned 0x1a [0139.964] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_32\\", nBufferLength=0x105, lpBuffer=0x31e310, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_32\\", lpFilePart=0x0) returned 0x1b [0139.964] FindFirstFileW (in: lpFileName="C:\\Windows\\assembly\\GAC_32\\*", lpFindFileData=0x31e55c | out: lpFindFileData=0x31e55c*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0xfdb58a30, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xa69b8e30, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xa69b8e30, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x381b80 [0139.964] FindClose (in: hFindFile=0x381b80 | out: hFindFile=0x381b80) returned 1 [0139.964] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e7f4) returned 1 [0139.964] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e800) returned 1 [0139.964] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e834) returned 1 [0139.964] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_32", nBufferLength=0x105, lpBuffer=0x31e33c, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_32", lpFilePart=0x0) returned 0x1a [0139.964] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_32\\", nBufferLength=0x105, lpBuffer=0x31e310, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_32\\", lpFilePart=0x0) returned 0x1b [0139.964] FindFirstFileW (in: lpFileName="C:\\Windows\\assembly\\GAC_32\\*", lpFindFileData=0x31e55c | out: lpFindFileData=0x31e55c*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0xfdb58a30, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xa69b8e30, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xa69b8e30, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x381b80 [0139.964] FindClose (in: hFindFile=0x381b80 | out: hFindFile=0x381b80) returned 1 [0139.964] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e7f4) returned 1 [0139.964] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e800) returned 1 [0139.964] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e7bc) returned 1 [0139.964] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_32\\AuditPolicyGPManagedStubs.Interop", nBufferLength=0x105, lpBuffer=0x31e2c4, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_32\\AuditPolicyGPManagedStubs.Interop", lpFilePart=0x0) returned 0x3c [0139.965] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_32\\AuditPolicyGPManagedStubs.Interop\\", nBufferLength=0x105, lpBuffer=0x31e298, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_32\\AuditPolicyGPManagedStubs.Interop\\", lpFilePart=0x0) returned 0x3d [0139.965] FindFirstFileW (in: lpFileName="C:\\Windows\\assembly\\GAC_32\\AuditPolicyGPManagedStubs.Interop\\*", lpFindFileData=0x31e4e4 | out: lpFindFileData=0x31e4e4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa21d9876, ftCreationTime.dwHighDateTime=0x1cbf8eb, ftLastAccessTime.dwLowDateTime=0xa21d9876, ftLastAccessTime.dwHighDateTime=0x1cbf8eb, ftLastWriteTime.dwLowDateTime=0xa21d9876, ftLastWriteTime.dwHighDateTime=0x1cbf8eb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x381b80 [0139.965] FindClose (in: hFindFile=0x381b80 | out: hFindFile=0x381b80) returned 1 [0139.965] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e77c) returned 1 [0139.965] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e788) returned 1 [0139.965] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e7bc) returned 1 [0139.965] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_32\\AuditPolicyGPManagedStubs.Interop", nBufferLength=0x105, lpBuffer=0x31e2c4, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_32\\AuditPolicyGPManagedStubs.Interop", lpFilePart=0x0) returned 0x3c [0139.965] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_32\\AuditPolicyGPManagedStubs.Interop\\", nBufferLength=0x105, lpBuffer=0x31e298, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_32\\AuditPolicyGPManagedStubs.Interop\\", lpFilePart=0x0) returned 0x3d [0139.965] FindFirstFileW (in: lpFileName="C:\\Windows\\assembly\\GAC_32\\AuditPolicyGPManagedStubs.Interop\\*", lpFindFileData=0x31e4e4 | out: lpFindFileData=0x31e4e4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa21d9876, ftCreationTime.dwHighDateTime=0x1cbf8eb, ftLastAccessTime.dwLowDateTime=0xa21d9876, ftLastAccessTime.dwHighDateTime=0x1cbf8eb, ftLastWriteTime.dwLowDateTime=0xa21d9876, ftLastWriteTime.dwHighDateTime=0x1cbf8eb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x381b80 [0139.965] FindClose (in: hFindFile=0x381b80 | out: hFindFile=0x381b80) returned 1 [0139.965] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e77c) returned 1 [0139.965] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e788) returned 1 [0139.965] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e744) returned 1 [0139.965] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_32\\AuditPolicyGPManagedStubs.Interop\\6.1.0.0__31bf3856ad364e35", nBufferLength=0x105, lpBuffer=0x31e24c, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_32\\AuditPolicyGPManagedStubs.Interop\\6.1.0.0__31bf3856ad364e35", lpFilePart=0x0) returned 0x56 [0139.965] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_32\\AuditPolicyGPManagedStubs.Interop\\6.1.0.0__31bf3856ad364e35\\", nBufferLength=0x105, lpBuffer=0x31e220, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_32\\AuditPolicyGPManagedStubs.Interop\\6.1.0.0__31bf3856ad364e35\\", lpFilePart=0x0) returned 0x57 [0139.966] FindFirstFileW (in: lpFileName="C:\\Windows\\assembly\\GAC_32\\AuditPolicyGPManagedStubs.Interop\\6.1.0.0__31bf3856ad364e35\\*", lpFindFileData=0x31e46c | out: lpFindFileData=0x31e46c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa21d9876, ftCreationTime.dwHighDateTime=0x1cbf8eb, ftLastAccessTime.dwLowDateTime=0xa21d9876, ftLastAccessTime.dwHighDateTime=0x1cbf8eb, ftLastWriteTime.dwLowDateTime=0xa21d9876, ftLastWriteTime.dwHighDateTime=0x1cbf8eb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x381b80 [0139.966] FindClose (in: hFindFile=0x381b80 | out: hFindFile=0x381b80) returned 1 [0139.966] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e704) returned 1 [0139.966] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e710) returned 1 [0139.966] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e744) returned 1 [0139.966] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_32\\AuditPolicyGPManagedStubs.Interop\\6.1.0.0__31bf3856ad364e35", nBufferLength=0x105, lpBuffer=0x31e24c, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_32\\AuditPolicyGPManagedStubs.Interop\\6.1.0.0__31bf3856ad364e35", lpFilePart=0x0) returned 0x56 [0139.966] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_32\\AuditPolicyGPManagedStubs.Interop\\6.1.0.0__31bf3856ad364e35\\", nBufferLength=0x105, lpBuffer=0x31e220, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_32\\AuditPolicyGPManagedStubs.Interop\\6.1.0.0__31bf3856ad364e35\\", lpFilePart=0x0) returned 0x57 [0139.966] FindFirstFileW (in: lpFileName="C:\\Windows\\assembly\\GAC_32\\AuditPolicyGPManagedStubs.Interop\\6.1.0.0__31bf3856ad364e35\\*", lpFindFileData=0x31e46c | out: lpFindFileData=0x31e46c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa21d9876, ftCreationTime.dwHighDateTime=0x1cbf8eb, ftLastAccessTime.dwLowDateTime=0xa21d9876, ftLastAccessTime.dwHighDateTime=0x1cbf8eb, ftLastWriteTime.dwLowDateTime=0xa21d9876, ftLastWriteTime.dwHighDateTime=0x1cbf8eb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x381b80 [0139.966] FindClose (in: hFindFile=0x381b80 | out: hFindFile=0x381b80) returned 1 [0139.966] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e704) returned 1 [0139.966] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e710) returned 1 [0139.966] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e7bc) returned 1 [0139.966] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_32\\BDATunePIA", nBufferLength=0x105, lpBuffer=0x31e2c4, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_32\\BDATunePIA", lpFilePart=0x0) returned 0x25 [0139.966] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_32\\BDATunePIA\\", nBufferLength=0x105, lpBuffer=0x31e298, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_32\\BDATunePIA\\", lpFilePart=0x0) returned 0x26 [0139.966] FindFirstFileW (in: lpFileName="C:\\Windows\\assembly\\GAC_32\\BDATunePIA\\*", lpFindFileData=0x31e4e4 | out: lpFindFileData=0x31e4e4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa21d9876, ftCreationTime.dwHighDateTime=0x1cbf8eb, ftLastAccessTime.dwLowDateTime=0xa21d9876, ftLastAccessTime.dwHighDateTime=0x1cbf8eb, ftLastWriteTime.dwLowDateTime=0xa21d9876, ftLastWriteTime.dwHighDateTime=0x1cbf8eb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x381b80 [0139.967] FindClose (in: hFindFile=0x381b80 | out: hFindFile=0x381b80) returned 1 [0139.967] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e77c) returned 1 [0139.967] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e788) returned 1 [0139.967] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e7bc) returned 1 [0139.967] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_32\\BDATunePIA", nBufferLength=0x105, lpBuffer=0x31e2c4, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_32\\BDATunePIA", lpFilePart=0x0) returned 0x25 [0139.967] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_32\\BDATunePIA\\", nBufferLength=0x105, lpBuffer=0x31e298, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_32\\BDATunePIA\\", lpFilePart=0x0) returned 0x26 [0139.967] FindFirstFileW (in: lpFileName="C:\\Windows\\assembly\\GAC_32\\BDATunePIA\\*", lpFindFileData=0x31e4e4 | out: lpFindFileData=0x31e4e4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa21d9876, ftCreationTime.dwHighDateTime=0x1cbf8eb, ftLastAccessTime.dwLowDateTime=0xa21d9876, ftLastAccessTime.dwHighDateTime=0x1cbf8eb, ftLastWriteTime.dwLowDateTime=0xa21d9876, ftLastWriteTime.dwHighDateTime=0x1cbf8eb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x381b80 [0139.967] FindClose (in: hFindFile=0x381b80 | out: hFindFile=0x381b80) returned 1 [0139.967] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e77c) returned 1 [0139.967] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e788) returned 1 [0139.967] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e744) returned 1 [0139.967] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_32\\BDATunePIA\\6.1.0.0__31bf3856ad364e35", nBufferLength=0x105, lpBuffer=0x31e24c, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_32\\BDATunePIA\\6.1.0.0__31bf3856ad364e35", lpFilePart=0x0) returned 0x3f [0139.967] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_32\\BDATunePIA\\6.1.0.0__31bf3856ad364e35\\", nBufferLength=0x105, lpBuffer=0x31e220, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_32\\BDATunePIA\\6.1.0.0__31bf3856ad364e35\\", lpFilePart=0x0) returned 0x40 [0139.967] FindFirstFileW (in: lpFileName="C:\\Windows\\assembly\\GAC_32\\BDATunePIA\\6.1.0.0__31bf3856ad364e35\\*", lpFindFileData=0x31e46c | out: lpFindFileData=0x31e46c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa21d9876, ftCreationTime.dwHighDateTime=0x1cbf8eb, ftLastAccessTime.dwLowDateTime=0xa21d9876, ftLastAccessTime.dwHighDateTime=0x1cbf8eb, ftLastWriteTime.dwLowDateTime=0xa21d9876, ftLastWriteTime.dwHighDateTime=0x1cbf8eb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x381b80 [0139.967] FindClose (in: hFindFile=0x381b80 | out: hFindFile=0x381b80) returned 1 [0139.967] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e704) returned 1 [0139.968] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e710) returned 1 [0139.968] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e744) returned 1 [0139.968] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_32\\BDATunePIA\\6.1.0.0__31bf3856ad364e35", nBufferLength=0x105, lpBuffer=0x31e24c, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_32\\BDATunePIA\\6.1.0.0__31bf3856ad364e35", lpFilePart=0x0) returned 0x3f [0139.968] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_32\\BDATunePIA\\6.1.0.0__31bf3856ad364e35\\", nBufferLength=0x105, lpBuffer=0x31e220, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_32\\BDATunePIA\\6.1.0.0__31bf3856ad364e35\\", lpFilePart=0x0) returned 0x40 [0139.968] FindFirstFileW (in: lpFileName="C:\\Windows\\assembly\\GAC_32\\BDATunePIA\\6.1.0.0__31bf3856ad364e35\\*", lpFindFileData=0x31e46c | out: lpFindFileData=0x31e46c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa21d9876, ftCreationTime.dwHighDateTime=0x1cbf8eb, ftLastAccessTime.dwLowDateTime=0xa21d9876, ftLastAccessTime.dwHighDateTime=0x1cbf8eb, ftLastWriteTime.dwLowDateTime=0xa21d9876, ftLastWriteTime.dwHighDateTime=0x1cbf8eb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x381b80 [0139.968] FindClose (in: hFindFile=0x381b80 | out: hFindFile=0x381b80) returned 1 [0139.968] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e704) returned 1 [0139.968] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e710) returned 1 [0139.968] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e7bc) returned 1 [0139.968] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_32\\CustomMarshalers", nBufferLength=0x105, lpBuffer=0x31e2c4, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_32\\CustomMarshalers", lpFilePart=0x0) returned 0x2b [0139.968] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_32\\CustomMarshalers\\", nBufferLength=0x105, lpBuffer=0x31e298, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_32\\CustomMarshalers\\", lpFilePart=0x0) returned 0x2c [0139.968] FindFirstFileW (in: lpFileName="C:\\Windows\\assembly\\GAC_32\\CustomMarshalers\\*", lpFindFileData=0x31e4e4 | out: lpFindFileData=0x31e4e4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfdb58a30, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfdb58a30, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xfdb58a30, ftLastWriteTime.dwHighDateTime=0x1ca0431, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x381b80 [0139.968] FindClose (in: hFindFile=0x381b80 | out: hFindFile=0x381b80) returned 1 [0139.968] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e77c) returned 1 [0139.968] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e788) returned 1 [0139.968] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e7bc) returned 1 [0139.968] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_32\\CustomMarshalers", nBufferLength=0x105, lpBuffer=0x31e2c4, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_32\\CustomMarshalers", lpFilePart=0x0) returned 0x2b [0139.969] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_32\\CustomMarshalers\\", nBufferLength=0x105, lpBuffer=0x31e298, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_32\\CustomMarshalers\\", lpFilePart=0x0) returned 0x2c [0139.969] FindFirstFileW (in: lpFileName="C:\\Windows\\assembly\\GAC_32\\CustomMarshalers\\*", lpFindFileData=0x31e4e4 | out: lpFindFileData=0x31e4e4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfdb58a30, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfdb58a30, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xfdb58a30, ftLastWriteTime.dwHighDateTime=0x1ca0431, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x381b80 [0139.969] FindClose (in: hFindFile=0x381b80 | out: hFindFile=0x381b80) returned 1 [0139.969] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e77c) returned 1 [0139.969] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e788) returned 1 [0139.969] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e744) returned 1 [0139.969] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_32\\CustomMarshalers\\2.0.0.0__b03f5f7f11d50a3a", nBufferLength=0x105, lpBuffer=0x31e24c, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_32\\CustomMarshalers\\2.0.0.0__b03f5f7f11d50a3a", lpFilePart=0x0) returned 0x45 [0139.969] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_32\\CustomMarshalers\\2.0.0.0__b03f5f7f11d50a3a\\", nBufferLength=0x105, lpBuffer=0x31e220, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_32\\CustomMarshalers\\2.0.0.0__b03f5f7f11d50a3a\\", lpFilePart=0x0) returned 0x46 [0139.969] FindFirstFileW (in: lpFileName="C:\\Windows\\assembly\\GAC_32\\CustomMarshalers\\2.0.0.0__b03f5f7f11d50a3a\\*", lpFindFileData=0x31e46c | out: lpFindFileData=0x31e46c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfdb58a30, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xbf7418c8, ftLastAccessTime.dwHighDateTime=0x1cb892c, ftLastWriteTime.dwLowDateTime=0xbf7418c8, ftLastWriteTime.dwHighDateTime=0x1cb892c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x381b80 [0139.969] FindClose (in: hFindFile=0x381b80 | out: hFindFile=0x381b80) returned 1 [0139.969] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e704) returned 1 [0139.969] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e710) returned 1 [0139.969] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e744) returned 1 [0139.969] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_32\\CustomMarshalers\\2.0.0.0__b03f5f7f11d50a3a", nBufferLength=0x105, lpBuffer=0x31e24c, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_32\\CustomMarshalers\\2.0.0.0__b03f5f7f11d50a3a", lpFilePart=0x0) returned 0x45 [0139.969] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_32\\CustomMarshalers\\2.0.0.0__b03f5f7f11d50a3a\\", nBufferLength=0x105, lpBuffer=0x31e220, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_32\\CustomMarshalers\\2.0.0.0__b03f5f7f11d50a3a\\", lpFilePart=0x0) returned 0x46 [0139.969] FindFirstFileW (in: lpFileName="C:\\Windows\\assembly\\GAC_32\\CustomMarshalers\\2.0.0.0__b03f5f7f11d50a3a\\*", lpFindFileData=0x31e46c | out: lpFindFileData=0x31e46c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfdb58a30, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xbf7418c8, ftLastAccessTime.dwHighDateTime=0x1cb892c, ftLastWriteTime.dwLowDateTime=0xbf7418c8, ftLastWriteTime.dwHighDateTime=0x1cb892c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x381b80 [0139.969] FindClose (in: hFindFile=0x381b80 | out: hFindFile=0x381b80) returned 1 [0139.970] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e704) returned 1 [0139.970] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e710) returned 1 [0139.970] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e7bc) returned 1 [0139.970] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_32\\ehexthost32", nBufferLength=0x105, lpBuffer=0x31e2c4, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_32\\ehexthost32", lpFilePart=0x0) returned 0x26 [0139.970] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_32\\ehexthost32\\", nBufferLength=0x105, lpBuffer=0x31e298, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_32\\ehexthost32\\", lpFilePart=0x0) returned 0x27 [0139.970] FindFirstFileW (in: lpFileName="C:\\Windows\\assembly\\GAC_32\\ehexthost32\\*", lpFindFileData=0x31e4e4 | out: lpFindFileData=0x31e4e4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa21ffae5, ftCreationTime.dwHighDateTime=0x1cbf8eb, ftLastAccessTime.dwLowDateTime=0xa21ffae5, ftLastAccessTime.dwHighDateTime=0x1cbf8eb, ftLastWriteTime.dwLowDateTime=0xa21ffae5, ftLastWriteTime.dwHighDateTime=0x1cbf8eb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x381b80 [0139.970] FindClose (in: hFindFile=0x381b80 | out: hFindFile=0x381b80) returned 1 [0139.970] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e77c) returned 1 [0139.970] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e788) returned 1 [0139.970] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e7bc) returned 1 [0139.970] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_32\\ehexthost32", nBufferLength=0x105, lpBuffer=0x31e2c4, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_32\\ehexthost32", lpFilePart=0x0) returned 0x26 [0139.970] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_32\\ehexthost32\\", nBufferLength=0x105, lpBuffer=0x31e298, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_32\\ehexthost32\\", lpFilePart=0x0) returned 0x27 [0139.970] FindFirstFileW (in: lpFileName="C:\\Windows\\assembly\\GAC_32\\ehexthost32\\*", lpFindFileData=0x31e4e4 | out: lpFindFileData=0x31e4e4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa21ffae5, ftCreationTime.dwHighDateTime=0x1cbf8eb, ftLastAccessTime.dwLowDateTime=0xa21ffae5, ftLastAccessTime.dwHighDateTime=0x1cbf8eb, ftLastWriteTime.dwLowDateTime=0xa21ffae5, ftLastWriteTime.dwHighDateTime=0x1cbf8eb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x381b80 [0139.970] FindClose (in: hFindFile=0x381b80 | out: hFindFile=0x381b80) returned 1 [0139.970] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e77c) returned 1 [0139.970] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e788) returned 1 [0139.971] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e744) returned 1 [0139.971] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_32\\ehexthost32\\6.1.0.0__31bf3856ad364e35", nBufferLength=0x105, lpBuffer=0x31e24c, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_32\\ehexthost32\\6.1.0.0__31bf3856ad364e35", lpFilePart=0x0) returned 0x40 [0139.971] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_32\\ehexthost32\\6.1.0.0__31bf3856ad364e35\\", nBufferLength=0x105, lpBuffer=0x31e220, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_32\\ehexthost32\\6.1.0.0__31bf3856ad364e35\\", lpFilePart=0x0) returned 0x41 [0139.971] FindFirstFileW (in: lpFileName="C:\\Windows\\assembly\\GAC_32\\ehexthost32\\6.1.0.0__31bf3856ad364e35\\*", lpFindFileData=0x31e46c | out: lpFindFileData=0x31e46c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa21ffae5, ftCreationTime.dwHighDateTime=0x1cbf8eb, ftLastAccessTime.dwLowDateTime=0xa21ffae5, ftLastAccessTime.dwHighDateTime=0x1cbf8eb, ftLastWriteTime.dwLowDateTime=0xa21ffae5, ftLastWriteTime.dwHighDateTime=0x1cbf8eb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x381b80 [0139.971] FindClose (in: hFindFile=0x381b80 | out: hFindFile=0x381b80) returned 1 [0139.971] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e704) returned 1 [0139.971] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e710) returned 1 [0139.971] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e744) returned 1 [0139.971] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_32\\ehexthost32\\6.1.0.0__31bf3856ad364e35", nBufferLength=0x105, lpBuffer=0x31e24c, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_32\\ehexthost32\\6.1.0.0__31bf3856ad364e35", lpFilePart=0x0) returned 0x40 [0139.971] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_32\\ehexthost32\\6.1.0.0__31bf3856ad364e35\\", nBufferLength=0x105, lpBuffer=0x31e220, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_32\\ehexthost32\\6.1.0.0__31bf3856ad364e35\\", lpFilePart=0x0) returned 0x41 [0139.971] FindFirstFileW (in: lpFileName="C:\\Windows\\assembly\\GAC_32\\ehexthost32\\6.1.0.0__31bf3856ad364e35\\*", lpFindFileData=0x31e46c | out: lpFindFileData=0x31e46c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa21ffae5, ftCreationTime.dwHighDateTime=0x1cbf8eb, ftLastAccessTime.dwLowDateTime=0xa21ffae5, ftLastAccessTime.dwHighDateTime=0x1cbf8eb, ftLastWriteTime.dwLowDateTime=0xa21ffae5, ftLastWriteTime.dwHighDateTime=0x1cbf8eb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x381b80 [0139.971] FindClose (in: hFindFile=0x381b80 | out: hFindFile=0x381b80) returned 1 [0139.971] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e704) returned 1 [0139.971] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e710) returned 1 [0139.971] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e7bc) returned 1 [0139.971] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_32\\ISymWrapper", nBufferLength=0x105, lpBuffer=0x31e2c4, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_32\\ISymWrapper", lpFilePart=0x0) returned 0x26 [0139.971] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_32\\ISymWrapper\\", nBufferLength=0x105, lpBuffer=0x31e298, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_32\\ISymWrapper\\", lpFilePart=0x0) returned 0x27 [0139.971] FindFirstFileW (in: lpFileName="C:\\Windows\\assembly\\GAC_32\\ISymWrapper\\*", lpFindFileData=0x31e4e4 | out: lpFindFileData=0x31e4e4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfdb58a30, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfdb7eb8a, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xfdb7eb8a, ftLastWriteTime.dwHighDateTime=0x1ca0431, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x381b80 [0139.972] FindClose (in: hFindFile=0x381b80 | out: hFindFile=0x381b80) returned 1 [0139.972] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e77c) returned 1 [0139.972] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e788) returned 1 [0139.972] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e7bc) returned 1 [0139.972] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_32\\ISymWrapper", nBufferLength=0x105, lpBuffer=0x31e2c4, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_32\\ISymWrapper", lpFilePart=0x0) returned 0x26 [0139.972] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_32\\ISymWrapper\\", nBufferLength=0x105, lpBuffer=0x31e298, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_32\\ISymWrapper\\", lpFilePart=0x0) returned 0x27 [0139.972] FindFirstFileW (in: lpFileName="C:\\Windows\\assembly\\GAC_32\\ISymWrapper\\*", lpFindFileData=0x31e4e4 | out: lpFindFileData=0x31e4e4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfdb58a30, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfdb7eb8a, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xfdb7eb8a, ftLastWriteTime.dwHighDateTime=0x1ca0431, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x381b80 [0139.972] FindClose (in: hFindFile=0x381b80 | out: hFindFile=0x381b80) returned 1 [0139.972] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e77c) returned 1 [0139.972] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e788) returned 1 [0139.972] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e744) returned 1 [0139.972] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_32\\ISymWrapper\\2.0.0.0__b03f5f7f11d50a3a", nBufferLength=0x105, lpBuffer=0x31e24c, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_32\\ISymWrapper\\2.0.0.0__b03f5f7f11d50a3a", lpFilePart=0x0) returned 0x40 [0139.972] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_32\\ISymWrapper\\2.0.0.0__b03f5f7f11d50a3a\\", nBufferLength=0x105, lpBuffer=0x31e220, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_32\\ISymWrapper\\2.0.0.0__b03f5f7f11d50a3a\\", lpFilePart=0x0) returned 0x41 [0139.972] FindFirstFileW (in: lpFileName="C:\\Windows\\assembly\\GAC_32\\ISymWrapper\\2.0.0.0__b03f5f7f11d50a3a\\*", lpFindFileData=0x31e46c | out: lpFindFileData=0x31e46c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfdb7eb8a, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xc13d20fd, ftLastAccessTime.dwHighDateTime=0x1cb892c, ftLastWriteTime.dwLowDateTime=0xc13d20fd, ftLastWriteTime.dwHighDateTime=0x1cb892c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x381b80 [0139.972] FindClose (in: hFindFile=0x381b80 | out: hFindFile=0x381b80) returned 1 [0139.973] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e704) returned 1 [0139.973] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e710) returned 1 [0139.973] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e744) returned 1 [0139.973] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_32\\ISymWrapper\\2.0.0.0__b03f5f7f11d50a3a", nBufferLength=0x105, lpBuffer=0x31e24c, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_32\\ISymWrapper\\2.0.0.0__b03f5f7f11d50a3a", lpFilePart=0x0) returned 0x40 [0139.973] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_32\\ISymWrapper\\2.0.0.0__b03f5f7f11d50a3a\\", nBufferLength=0x105, lpBuffer=0x31e220, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_32\\ISymWrapper\\2.0.0.0__b03f5f7f11d50a3a\\", lpFilePart=0x0) returned 0x41 [0139.973] FindFirstFileW (in: lpFileName="C:\\Windows\\assembly\\GAC_32\\ISymWrapper\\2.0.0.0__b03f5f7f11d50a3a\\*", lpFindFileData=0x31e46c | out: lpFindFileData=0x31e46c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfdb7eb8a, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xc13d20fd, ftLastAccessTime.dwHighDateTime=0x1cb892c, ftLastWriteTime.dwLowDateTime=0xc13d20fd, ftLastWriteTime.dwHighDateTime=0x1cb892c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x381b80 [0139.973] FindClose (in: hFindFile=0x381b80 | out: hFindFile=0x381b80) returned 1 [0139.973] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e704) returned 1 [0139.973] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e710) returned 1 [0139.973] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e7bc) returned 1 [0139.973] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_32\\mcstoredb", nBufferLength=0x105, lpBuffer=0x31e2c4, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_32\\mcstoredb", lpFilePart=0x0) returned 0x24 [0139.973] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_32\\mcstoredb\\", nBufferLength=0x105, lpBuffer=0x31e298, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_32\\mcstoredb\\", lpFilePart=0x0) returned 0x25 [0139.973] FindFirstFileW (in: lpFileName="C:\\Windows\\assembly\\GAC_32\\mcstoredb\\*", lpFindFileData=0x31e4e4 | out: lpFindFileData=0x31e4e4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa21ffae5, ftCreationTime.dwHighDateTime=0x1cbf8eb, ftLastAccessTime.dwLowDateTime=0xa21ffae5, ftLastAccessTime.dwHighDateTime=0x1cbf8eb, ftLastWriteTime.dwLowDateTime=0xa21ffae5, ftLastWriteTime.dwHighDateTime=0x1cbf8eb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x381b80 [0139.973] FindClose (in: hFindFile=0x381b80 | out: hFindFile=0x381b80) returned 1 [0139.973] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e77c) returned 1 [0139.973] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e788) returned 1 [0139.973] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e7bc) returned 1 [0139.974] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_32\\mcstoredb", nBufferLength=0x105, lpBuffer=0x31e2c4, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_32\\mcstoredb", lpFilePart=0x0) returned 0x24 [0139.974] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_32\\mcstoredb\\", nBufferLength=0x105, lpBuffer=0x31e298, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_32\\mcstoredb\\", lpFilePart=0x0) returned 0x25 [0139.974] FindFirstFileW (in: lpFileName="C:\\Windows\\assembly\\GAC_32\\mcstoredb\\*", lpFindFileData=0x31e4e4 | out: lpFindFileData=0x31e4e4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa21ffae5, ftCreationTime.dwHighDateTime=0x1cbf8eb, ftLastAccessTime.dwLowDateTime=0xa21ffae5, ftLastAccessTime.dwHighDateTime=0x1cbf8eb, ftLastWriteTime.dwLowDateTime=0xa21ffae5, ftLastWriteTime.dwHighDateTime=0x1cbf8eb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x381b80 [0139.974] FindClose (in: hFindFile=0x381b80 | out: hFindFile=0x381b80) returned 1 [0139.974] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e77c) returned 1 [0139.974] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e788) returned 1 [0139.974] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e744) returned 1 [0139.974] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_32\\mcstoredb\\6.1.0.0__31bf3856ad364e35", nBufferLength=0x105, lpBuffer=0x31e24c, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_32\\mcstoredb\\6.1.0.0__31bf3856ad364e35", lpFilePart=0x0) returned 0x3e [0139.974] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_32\\mcstoredb\\6.1.0.0__31bf3856ad364e35\\", nBufferLength=0x105, lpBuffer=0x31e220, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_32\\mcstoredb\\6.1.0.0__31bf3856ad364e35\\", lpFilePart=0x0) returned 0x3f [0139.974] FindFirstFileW (in: lpFileName="C:\\Windows\\assembly\\GAC_32\\mcstoredb\\6.1.0.0__31bf3856ad364e35\\*", lpFindFileData=0x31e46c | out: lpFindFileData=0x31e46c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa21ffae5, ftCreationTime.dwHighDateTime=0x1cbf8eb, ftLastAccessTime.dwLowDateTime=0xa21ffae5, ftLastAccessTime.dwHighDateTime=0x1cbf8eb, ftLastWriteTime.dwLowDateTime=0xa21ffae5, ftLastWriteTime.dwHighDateTime=0x1cbf8eb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x381b80 [0139.974] FindClose (in: hFindFile=0x381b80 | out: hFindFile=0x381b80) returned 1 [0139.974] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e704) returned 1 [0139.974] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e710) returned 1 [0139.974] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e744) returned 1 [0139.974] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_32\\mcstoredb\\6.1.0.0__31bf3856ad364e35", nBufferLength=0x105, lpBuffer=0x31e24c, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_32\\mcstoredb\\6.1.0.0__31bf3856ad364e35", lpFilePart=0x0) returned 0x3e [0139.974] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_32\\mcstoredb\\6.1.0.0__31bf3856ad364e35\\", nBufferLength=0x105, lpBuffer=0x31e220, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_32\\mcstoredb\\6.1.0.0__31bf3856ad364e35\\", lpFilePart=0x0) returned 0x3f [0139.974] FindFirstFileW (in: lpFileName="C:\\Windows\\assembly\\GAC_32\\mcstoredb\\6.1.0.0__31bf3856ad364e35\\*", lpFindFileData=0x31e46c | out: lpFindFileData=0x31e46c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa21ffae5, ftCreationTime.dwHighDateTime=0x1cbf8eb, ftLastAccessTime.dwLowDateTime=0xa21ffae5, ftLastAccessTime.dwHighDateTime=0x1cbf8eb, ftLastWriteTime.dwLowDateTime=0xa21ffae5, ftLastWriteTime.dwHighDateTime=0x1cbf8eb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x381b80 [0139.975] FindClose (in: hFindFile=0x381b80 | out: hFindFile=0x381b80) returned 1 [0139.975] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e704) returned 1 [0139.975] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e710) returned 1 [0139.975] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e7bc) returned 1 [0139.975] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_32\\Microsoft.GroupPolicy.AdmTmplEditor", nBufferLength=0x105, lpBuffer=0x31e2c4, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_32\\Microsoft.GroupPolicy.AdmTmplEditor", lpFilePart=0x0) returned 0x3e [0139.975] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_32\\Microsoft.GroupPolicy.AdmTmplEditor\\", nBufferLength=0x105, lpBuffer=0x31e298, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_32\\Microsoft.GroupPolicy.AdmTmplEditor\\", lpFilePart=0x0) returned 0x3f [0139.975] FindFirstFileW (in: lpFileName="C:\\Windows\\assembly\\GAC_32\\Microsoft.GroupPolicy.AdmTmplEditor\\*", lpFindFileData=0x31e4e4 | out: lpFindFileData=0x31e4e4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa2225d54, ftCreationTime.dwHighDateTime=0x1cbf8eb, ftLastAccessTime.dwLowDateTime=0xa2225d54, ftLastAccessTime.dwHighDateTime=0x1cbf8eb, ftLastWriteTime.dwLowDateTime=0xa2225d54, ftLastWriteTime.dwHighDateTime=0x1cbf8eb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x381b80 [0139.975] FindClose (in: hFindFile=0x381b80 | out: hFindFile=0x381b80) returned 1 [0139.975] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_32\\Microsoft.GroupPolicy.AdmTmplEditor", nBufferLength=0x105, lpBuffer=0x31e2c4, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_32\\Microsoft.GroupPolicy.AdmTmplEditor", lpFilePart=0x0) returned 0x3e [0139.975] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_32\\Microsoft.GroupPolicy.AdmTmplEditor\\", nBufferLength=0x105, lpBuffer=0x31e298, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_32\\Microsoft.GroupPolicy.AdmTmplEditor\\", lpFilePart=0x0) returned 0x3f [0139.975] FindFirstFileW (in: lpFileName="C:\\Windows\\assembly\\GAC_32\\Microsoft.GroupPolicy.AdmTmplEditor\\*", lpFindFileData=0x31e4e4 | out: lpFindFileData=0x31e4e4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa2225d54, ftCreationTime.dwHighDateTime=0x1cbf8eb, ftLastAccessTime.dwLowDateTime=0xa2225d54, ftLastAccessTime.dwHighDateTime=0x1cbf8eb, ftLastWriteTime.dwLowDateTime=0xa2225d54, ftLastWriteTime.dwHighDateTime=0x1cbf8eb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x381b80 [0139.975] FindClose (in: hFindFile=0x381b80 | out: hFindFile=0x381b80) returned 1 [0139.975] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_32\\Microsoft.GroupPolicy.AdmTmplEditor\\6.1.0.0__31bf3856ad364e35", nBufferLength=0x105, lpBuffer=0x31e24c, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_32\\Microsoft.GroupPolicy.AdmTmplEditor\\6.1.0.0__31bf3856ad364e35", lpFilePart=0x0) returned 0x58 [0139.975] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_32\\Microsoft.GroupPolicy.AdmTmplEditor\\6.1.0.0__31bf3856ad364e35\\", nBufferLength=0x105, lpBuffer=0x31e220, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_32\\Microsoft.GroupPolicy.AdmTmplEditor\\6.1.0.0__31bf3856ad364e35\\", lpFilePart=0x0) returned 0x59 [0139.976] FindFirstFileW (in: lpFileName="C:\\Windows\\assembly\\GAC_32\\Microsoft.GroupPolicy.AdmTmplEditor\\6.1.0.0__31bf3856ad364e35\\*", lpFindFileData=0x31e46c | out: lpFindFileData=0x31e46c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa2225d54, ftCreationTime.dwHighDateTime=0x1cbf8eb, ftLastAccessTime.dwLowDateTime=0xa2225d54, ftLastAccessTime.dwHighDateTime=0x1cbf8eb, ftLastWriteTime.dwLowDateTime=0xa2225d54, ftLastWriteTime.dwHighDateTime=0x1cbf8eb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x381b80 [0139.976] FindClose (in: hFindFile=0x381b80 | out: hFindFile=0x381b80) returned 1 [0139.976] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_32\\Microsoft.GroupPolicy.AdmTmplEditor\\6.1.0.0__31bf3856ad364e35", nBufferLength=0x105, lpBuffer=0x31e24c, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_32\\Microsoft.GroupPolicy.AdmTmplEditor\\6.1.0.0__31bf3856ad364e35", lpFilePart=0x0) returned 0x58 [0139.976] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_32\\Microsoft.GroupPolicy.AdmTmplEditor\\6.1.0.0__31bf3856ad364e35\\", nBufferLength=0x105, lpBuffer=0x31e220, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_32\\Microsoft.GroupPolicy.AdmTmplEditor\\6.1.0.0__31bf3856ad364e35\\", lpFilePart=0x0) returned 0x59 [0139.976] FindFirstFileW (in: lpFileName="C:\\Windows\\assembly\\GAC_32\\Microsoft.GroupPolicy.AdmTmplEditor\\6.1.0.0__31bf3856ad364e35\\*", lpFindFileData=0x31e46c | out: lpFindFileData=0x31e46c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa2225d54, ftCreationTime.dwHighDateTime=0x1cbf8eb, ftLastAccessTime.dwLowDateTime=0xa2225d54, ftLastAccessTime.dwHighDateTime=0x1cbf8eb, ftLastWriteTime.dwLowDateTime=0xa2225d54, ftLastWriteTime.dwHighDateTime=0x1cbf8eb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x381b80 [0139.976] FindClose (in: hFindFile=0x381b80 | out: hFindFile=0x381b80) returned 1 [0139.976] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_32\\Microsoft.GroupPolicy.AdmTmplEditor.Resources", nBufferLength=0x105, lpBuffer=0x31e2c4, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_32\\Microsoft.GroupPolicy.AdmTmplEditor.Resources", lpFilePart=0x0) returned 0x48 [0139.976] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_32\\Microsoft.GroupPolicy.AdmTmplEditor.Resources\\", nBufferLength=0x105, lpBuffer=0x31e298, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_32\\Microsoft.GroupPolicy.AdmTmplEditor.Resources\\", lpFilePart=0x0) returned 0x49 [0139.976] FindFirstFileW (in: lpFileName="C:\\Windows\\assembly\\GAC_32\\Microsoft.GroupPolicy.AdmTmplEditor.Resources\\*", lpFindFileData=0x31e4e4 | out: lpFindFileData=0x31e4e4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa2225d54, ftCreationTime.dwHighDateTime=0x1cbf8eb, ftLastAccessTime.dwLowDateTime=0xa2225d54, ftLastAccessTime.dwHighDateTime=0x1cbf8eb, ftLastWriteTime.dwLowDateTime=0xa2225d54, ftLastWriteTime.dwHighDateTime=0x1cbf8eb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x381b80 [0139.976] FindClose (in: hFindFile=0x381b80 | out: hFindFile=0x381b80) returned 1 [0139.976] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_32\\Microsoft.GroupPolicy.AdmTmplEditor.Resources", nBufferLength=0x105, lpBuffer=0x31e2c4, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_32\\Microsoft.GroupPolicy.AdmTmplEditor.Resources", lpFilePart=0x0) returned 0x48 [0139.977] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_32\\Microsoft.GroupPolicy.AdmTmplEditor.Resources\\", nBufferLength=0x105, lpBuffer=0x31e298, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_32\\Microsoft.GroupPolicy.AdmTmplEditor.Resources\\", lpFilePart=0x0) returned 0x49 [0139.977] FindFirstFileW (in: lpFileName="C:\\Windows\\assembly\\GAC_32\\Microsoft.GroupPolicy.AdmTmplEditor.Resources\\*", lpFindFileData=0x31e4e4 | out: lpFindFileData=0x31e4e4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa2225d54, ftCreationTime.dwHighDateTime=0x1cbf8eb, ftLastAccessTime.dwLowDateTime=0xa2225d54, ftLastAccessTime.dwHighDateTime=0x1cbf8eb, ftLastWriteTime.dwLowDateTime=0xa2225d54, ftLastWriteTime.dwHighDateTime=0x1cbf8eb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x381b80 [0139.977] FindClose (in: hFindFile=0x381b80 | out: hFindFile=0x381b80) returned 1 [0139.977] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_32\\Microsoft.GroupPolicy.AdmTmplEditor.Resources\\6.1.0.0_en_31bf3856ad364e35", nBufferLength=0x105, lpBuffer=0x31e24c, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_32\\Microsoft.GroupPolicy.AdmTmplEditor.Resources\\6.1.0.0_en_31bf3856ad364e35", lpFilePart=0x0) returned 0x64 [0139.977] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_32\\Microsoft.GroupPolicy.AdmTmplEditor.Resources\\6.1.0.0_en_31bf3856ad364e35\\", nBufferLength=0x105, lpBuffer=0x31e220, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_32\\Microsoft.GroupPolicy.AdmTmplEditor.Resources\\6.1.0.0_en_31bf3856ad364e35\\", lpFilePart=0x0) returned 0x65 [0139.977] FindFirstFileW (in: lpFileName="C:\\Windows\\assembly\\GAC_32\\Microsoft.GroupPolicy.AdmTmplEditor.Resources\\6.1.0.0_en_31bf3856ad364e35\\*", lpFindFileData=0x31e46c | out: lpFindFileData=0x31e46c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa2225d54, ftCreationTime.dwHighDateTime=0x1cbf8eb, ftLastAccessTime.dwLowDateTime=0xa2225d54, ftLastAccessTime.dwHighDateTime=0x1cbf8eb, ftLastWriteTime.dwLowDateTime=0xa2225d54, ftLastWriteTime.dwHighDateTime=0x1cbf8eb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x381b80 [0139.977] FindClose (in: hFindFile=0x381b80 | out: hFindFile=0x381b80) returned 1 [0139.977] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_32\\Microsoft.GroupPolicy.AdmTmplEditor.Resources\\6.1.0.0_en_31bf3856ad364e35", nBufferLength=0x105, lpBuffer=0x31e24c, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_32\\Microsoft.GroupPolicy.AdmTmplEditor.Resources\\6.1.0.0_en_31bf3856ad364e35", lpFilePart=0x0) returned 0x64 [0139.977] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_32\\Microsoft.GroupPolicy.AdmTmplEditor.Resources\\6.1.0.0_en_31bf3856ad364e35\\", nBufferLength=0x105, lpBuffer=0x31e220, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_32\\Microsoft.GroupPolicy.AdmTmplEditor.Resources\\6.1.0.0_en_31bf3856ad364e35\\", lpFilePart=0x0) returned 0x65 [0139.977] FindFirstFileW (in: lpFileName="C:\\Windows\\assembly\\GAC_32\\Microsoft.GroupPolicy.AdmTmplEditor.Resources\\6.1.0.0_en_31bf3856ad364e35\\*", lpFindFileData=0x31e46c | out: lpFindFileData=0x31e46c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa2225d54, ftCreationTime.dwHighDateTime=0x1cbf8eb, ftLastAccessTime.dwLowDateTime=0xa2225d54, ftLastAccessTime.dwHighDateTime=0x1cbf8eb, ftLastWriteTime.dwLowDateTime=0xa2225d54, ftLastWriteTime.dwHighDateTime=0x1cbf8eb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x381b80 [0139.977] FindClose (in: hFindFile=0x381b80 | out: hFindFile=0x381b80) returned 1 [0139.977] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_32\\Microsoft.GroupPolicy.Interop", nBufferLength=0x105, lpBuffer=0x31e2c4, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_32\\Microsoft.GroupPolicy.Interop", lpFilePart=0x0) returned 0x38 [0139.977] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_32\\Microsoft.GroupPolicy.Interop\\", nBufferLength=0x105, lpBuffer=0x31e298, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_32\\Microsoft.GroupPolicy.Interop\\", lpFilePart=0x0) returned 0x39 [0139.977] FindFirstFileW (in: lpFileName="C:\\Windows\\assembly\\GAC_32\\Microsoft.GroupPolicy.Interop\\*", lpFindFileData=0x31e4e4 | out: lpFindFileData=0x31e4e4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa21ffae5, ftCreationTime.dwHighDateTime=0x1cbf8eb, ftLastAccessTime.dwLowDateTime=0xa21ffae5, ftLastAccessTime.dwHighDateTime=0x1cbf8eb, ftLastWriteTime.dwLowDateTime=0xa21ffae5, ftLastWriteTime.dwHighDateTime=0x1cbf8eb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x381b80 [0139.978] FindClose (in: hFindFile=0x381b80 | out: hFindFile=0x381b80) returned 1 [0139.978] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_32\\Microsoft.GroupPolicy.Interop", nBufferLength=0x105, lpBuffer=0x31e2c4, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_32\\Microsoft.GroupPolicy.Interop", lpFilePart=0x0) returned 0x38 [0139.978] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_32\\Microsoft.GroupPolicy.Interop\\", nBufferLength=0x105, lpBuffer=0x31e298, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_32\\Microsoft.GroupPolicy.Interop\\", lpFilePart=0x0) returned 0x39 [0139.978] FindFirstFileW (in: lpFileName="C:\\Windows\\assembly\\GAC_32\\Microsoft.GroupPolicy.Interop\\*", lpFindFileData=0x31e4e4 | out: lpFindFileData=0x31e4e4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa21ffae5, ftCreationTime.dwHighDateTime=0x1cbf8eb, ftLastAccessTime.dwLowDateTime=0xa21ffae5, ftLastAccessTime.dwHighDateTime=0x1cbf8eb, ftLastWriteTime.dwLowDateTime=0xa21ffae5, ftLastWriteTime.dwHighDateTime=0x1cbf8eb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x381b80 [0139.978] FindClose (in: hFindFile=0x381b80 | out: hFindFile=0x381b80) returned 1 [0139.978] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_32\\Microsoft.GroupPolicy.Interop\\2.0.0.0__31bf3856ad364e35", nBufferLength=0x105, lpBuffer=0x31e24c, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_32\\Microsoft.GroupPolicy.Interop\\2.0.0.0__31bf3856ad364e35", lpFilePart=0x0) returned 0x52 [0139.978] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_32\\Microsoft.GroupPolicy.Interop\\2.0.0.0__31bf3856ad364e35\\", nBufferLength=0x105, lpBuffer=0x31e220, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_32\\Microsoft.GroupPolicy.Interop\\2.0.0.0__31bf3856ad364e35\\", lpFilePart=0x0) returned 0x53 [0139.978] FindFirstFileW (in: lpFileName="C:\\Windows\\assembly\\GAC_32\\Microsoft.GroupPolicy.Interop\\2.0.0.0__31bf3856ad364e35\\*", lpFindFileData=0x31e46c | out: lpFindFileData=0x31e46c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa21ffae5, ftCreationTime.dwHighDateTime=0x1cbf8eb, ftLastAccessTime.dwLowDateTime=0xa21ffae5, ftLastAccessTime.dwHighDateTime=0x1cbf8eb, ftLastWriteTime.dwLowDateTime=0xa21ffae5, ftLastWriteTime.dwHighDateTime=0x1cbf8eb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x381b80 [0139.978] FindClose (in: hFindFile=0x381b80 | out: hFindFile=0x381b80) returned 1 [0139.978] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_32\\Microsoft.GroupPolicy.Interop\\2.0.0.0__31bf3856ad364e35", nBufferLength=0x105, lpBuffer=0x31e24c, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_32\\Microsoft.GroupPolicy.Interop\\2.0.0.0__31bf3856ad364e35", lpFilePart=0x0) returned 0x52 [0139.978] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_32\\Microsoft.GroupPolicy.Interop\\2.0.0.0__31bf3856ad364e35\\", nBufferLength=0x105, lpBuffer=0x31e220, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_32\\Microsoft.GroupPolicy.Interop\\2.0.0.0__31bf3856ad364e35\\", lpFilePart=0x0) returned 0x53 [0139.978] FindFirstFileW (in: lpFileName="C:\\Windows\\assembly\\GAC_32\\Microsoft.GroupPolicy.Interop\\2.0.0.0__31bf3856ad364e35\\*", lpFindFileData=0x31e46c | out: lpFindFileData=0x31e46c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa21ffae5, ftCreationTime.dwHighDateTime=0x1cbf8eb, ftLastAccessTime.dwLowDateTime=0xa21ffae5, ftLastAccessTime.dwHighDateTime=0x1cbf8eb, ftLastWriteTime.dwLowDateTime=0xa21ffae5, ftLastWriteTime.dwHighDateTime=0x1cbf8eb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x381b80 [0139.979] FindClose (in: hFindFile=0x381b80 | out: hFindFile=0x381b80) returned 1 [0139.979] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_32\\Microsoft.Ink", nBufferLength=0x105, lpBuffer=0x31e2c4, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_32\\Microsoft.Ink", lpFilePart=0x0) returned 0x28 [0139.979] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_32\\Microsoft.Ink\\", nBufferLength=0x105, lpBuffer=0x31e298, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_32\\Microsoft.Ink\\", lpFilePart=0x0) returned 0x29 [0139.979] FindFirstFileW (in: lpFileName="C:\\Windows\\assembly\\GAC_32\\Microsoft.Ink\\*", lpFindFileData=0x31e4e4 | out: lpFindFileData=0x31e4e4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x81a4fe61, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x81a4fe61, ftLastAccessTime.dwHighDateTime=0x1ca0444, ftLastWriteTime.dwLowDateTime=0x81a4fe61, ftLastWriteTime.dwHighDateTime=0x1ca0444, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x381b80 [0139.980] FindClose (in: hFindFile=0x381b80 | out: hFindFile=0x381b80) returned 1 [0139.980] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_32\\Microsoft.Ink", nBufferLength=0x105, lpBuffer=0x31e2c4, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_32\\Microsoft.Ink", lpFilePart=0x0) returned 0x28 [0139.980] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_32\\Microsoft.Ink\\", nBufferLength=0x105, lpBuffer=0x31e298, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_32\\Microsoft.Ink\\", lpFilePart=0x0) returned 0x29 [0139.980] FindFirstFileW (in: lpFileName="C:\\Windows\\assembly\\GAC_32\\Microsoft.Ink\\*", lpFindFileData=0x31e4e4 | out: lpFindFileData=0x31e4e4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x81a4fe61, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x81a4fe61, ftLastAccessTime.dwHighDateTime=0x1ca0444, ftLastWriteTime.dwLowDateTime=0x81a4fe61, ftLastWriteTime.dwHighDateTime=0x1ca0444, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x381b80 [0139.980] FindClose (in: hFindFile=0x381b80 | out: hFindFile=0x381b80) returned 1 [0139.980] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_32\\Microsoft.Ink\\6.1.0.0__31bf3856ad364e35", nBufferLength=0x105, lpBuffer=0x31e24c, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_32\\Microsoft.Ink\\6.1.0.0__31bf3856ad364e35", lpFilePart=0x0) returned 0x42 [0139.980] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_32\\Microsoft.Ink\\6.1.0.0__31bf3856ad364e35\\", nBufferLength=0x105, lpBuffer=0x31e220, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_32\\Microsoft.Ink\\6.1.0.0__31bf3856ad364e35\\", lpFilePart=0x0) returned 0x43 [0139.980] FindFirstFileW (in: lpFileName="C:\\Windows\\assembly\\GAC_32\\Microsoft.Ink\\6.1.0.0__31bf3856ad364e35\\*", lpFindFileData=0x31e46c | out: lpFindFileData=0x31e46c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x81a4fe61, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x81a4fe61, ftLastAccessTime.dwHighDateTime=0x1ca0444, ftLastWriteTime.dwLowDateTime=0x81a4fe61, ftLastWriteTime.dwHighDateTime=0x1ca0444, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x381b80 [0139.980] FindClose (in: hFindFile=0x381b80 | out: hFindFile=0x381b80) returned 1 [0139.980] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_32\\Microsoft.Ink\\6.1.0.0__31bf3856ad364e35", nBufferLength=0x105, lpBuffer=0x31e24c, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_32\\Microsoft.Ink\\6.1.0.0__31bf3856ad364e35", lpFilePart=0x0) returned 0x42 [0139.980] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_32\\Microsoft.Ink\\6.1.0.0__31bf3856ad364e35\\", nBufferLength=0x105, lpBuffer=0x31e220, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_32\\Microsoft.Ink\\6.1.0.0__31bf3856ad364e35\\", lpFilePart=0x0) returned 0x43 [0139.980] FindFirstFileW (in: lpFileName="C:\\Windows\\assembly\\GAC_32\\Microsoft.Ink\\6.1.0.0__31bf3856ad364e35\\*", lpFindFileData=0x31e46c | out: lpFindFileData=0x31e46c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x81a4fe61, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x81a4fe61, ftLastAccessTime.dwHighDateTime=0x1ca0444, ftLastWriteTime.dwLowDateTime=0x81a4fe61, ftLastWriteTime.dwHighDateTime=0x1ca0444, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x381b80 [0139.980] FindClose (in: hFindFile=0x381b80 | out: hFindFile=0x381b80) returned 1 [0139.981] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_32\\Microsoft.Interop.Security.AzRoles", nBufferLength=0x105, lpBuffer=0x31e2c4, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_32\\Microsoft.Interop.Security.AzRoles", lpFilePart=0x0) returned 0x3d [0139.981] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_32\\Microsoft.Interop.Security.AzRoles\\", nBufferLength=0x105, lpBuffer=0x31e298, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_32\\Microsoft.Interop.Security.AzRoles\\", lpFilePart=0x0) returned 0x3e [0139.981] FindFirstFileW (in: lpFileName="C:\\Windows\\assembly\\GAC_32\\Microsoft.Interop.Security.AzRoles\\*", lpFindFileData=0x31e4e4 | out: lpFindFileData=0x31e4e4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfdb7eb8a, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfdb7eb8a, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xfdb7eb8a, ftLastWriteTime.dwHighDateTime=0x1ca0431, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x381b80 [0139.981] FindClose (in: hFindFile=0x381b80 | out: hFindFile=0x381b80) returned 1 [0139.981] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_32\\Microsoft.Interop.Security.AzRoles", nBufferLength=0x105, lpBuffer=0x31e2c4, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_32\\Microsoft.Interop.Security.AzRoles", lpFilePart=0x0) returned 0x3d [0139.981] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_32\\Microsoft.Interop.Security.AzRoles\\", nBufferLength=0x105, lpBuffer=0x31e298, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_32\\Microsoft.Interop.Security.AzRoles\\", lpFilePart=0x0) returned 0x3e [0139.981] FindFirstFileW (in: lpFileName="C:\\Windows\\assembly\\GAC_32\\Microsoft.Interop.Security.AzRoles\\*", lpFindFileData=0x31e4e4 | out: lpFindFileData=0x31e4e4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfdb7eb8a, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfdb7eb8a, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xfdb7eb8a, ftLastWriteTime.dwHighDateTime=0x1ca0431, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x381b80 [0139.981] FindClose (in: hFindFile=0x381b80 | out: hFindFile=0x381b80) returned 1 [0139.981] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_32\\Microsoft.Interop.Security.AzRoles\\2.0.0.0__31bf3856ad364e35", nBufferLength=0x105, lpBuffer=0x31e24c, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_32\\Microsoft.Interop.Security.AzRoles\\2.0.0.0__31bf3856ad364e35", lpFilePart=0x0) returned 0x57 [0139.981] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_32\\Microsoft.Interop.Security.AzRoles\\2.0.0.0__31bf3856ad364e35\\", nBufferLength=0x105, lpBuffer=0x31e220, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_32\\Microsoft.Interop.Security.AzRoles\\2.0.0.0__31bf3856ad364e35\\", lpFilePart=0x0) returned 0x58 [0139.981] FindFirstFileW (in: lpFileName="C:\\Windows\\assembly\\GAC_32\\Microsoft.Interop.Security.AzRoles\\2.0.0.0__31bf3856ad364e35\\*", lpFindFileData=0x31e46c | out: lpFindFileData=0x31e46c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfdb7eb8a, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfdb7eb8a, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xfdb7eb8a, ftLastWriteTime.dwHighDateTime=0x1ca0431, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x381b80 [0139.982] FindClose (in: hFindFile=0x381b80 | out: hFindFile=0x381b80) returned 1 [0139.982] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_32\\Microsoft.Interop.Security.AzRoles\\2.0.0.0__31bf3856ad364e35", nBufferLength=0x105, lpBuffer=0x31e24c, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_32\\Microsoft.Interop.Security.AzRoles\\2.0.0.0__31bf3856ad364e35", lpFilePart=0x0) returned 0x57 [0139.982] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_32\\Microsoft.Interop.Security.AzRoles\\2.0.0.0__31bf3856ad364e35\\", nBufferLength=0x105, lpBuffer=0x31e220, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_32\\Microsoft.Interop.Security.AzRoles\\2.0.0.0__31bf3856ad364e35\\", lpFilePart=0x0) returned 0x58 [0139.982] FindFirstFileW (in: lpFileName="C:\\Windows\\assembly\\GAC_32\\Microsoft.Interop.Security.AzRoles\\2.0.0.0__31bf3856ad364e35\\*", lpFindFileData=0x31e46c | out: lpFindFileData=0x31e46c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfdb7eb8a, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfdb7eb8a, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xfdb7eb8a, ftLastWriteTime.dwHighDateTime=0x1ca0431, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x381b80 [0139.982] FindClose (in: hFindFile=0x381b80 | out: hFindFile=0x381b80) returned 1 [0139.982] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_32\\Microsoft.Security.ApplicationId.PolicyManagement.PolicyEngineApi.Interop", nBufferLength=0x105, lpBuffer=0x31e2c4, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_32\\Microsoft.Security.ApplicationId.PolicyManagement.PolicyEngineApi.Interop", lpFilePart=0x0) returned 0x64 [0139.982] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_32\\Microsoft.Security.ApplicationId.PolicyManagement.PolicyEngineApi.Interop\\", nBufferLength=0x105, lpBuffer=0x31e298, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_32\\Microsoft.Security.ApplicationId.PolicyManagement.PolicyEngineApi.Interop\\", lpFilePart=0x0) returned 0x65 [0139.982] FindFirstFileW (in: lpFileName="C:\\Windows\\assembly\\GAC_32\\Microsoft.Security.ApplicationId.PolicyManagement.PolicyEngineApi.Interop\\*", lpFindFileData=0x31e4e4 | out: lpFindFileData=0x31e4e4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa2225d54, ftCreationTime.dwHighDateTime=0x1cbf8eb, ftLastAccessTime.dwLowDateTime=0xa2225d54, ftLastAccessTime.dwHighDateTime=0x1cbf8eb, ftLastWriteTime.dwLowDateTime=0xa2225d54, ftLastWriteTime.dwHighDateTime=0x1cbf8eb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x381b80 [0139.982] FindClose (in: hFindFile=0x381b80 | out: hFindFile=0x381b80) returned 1 [0139.982] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_32\\Microsoft.Security.ApplicationId.PolicyManagement.PolicyEngineApi.Interop", nBufferLength=0x105, lpBuffer=0x31e2c4, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_32\\Microsoft.Security.ApplicationId.PolicyManagement.PolicyEngineApi.Interop", lpFilePart=0x0) returned 0x64 [0139.982] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_32\\Microsoft.Security.ApplicationId.PolicyManagement.PolicyEngineApi.Interop\\", nBufferLength=0x105, lpBuffer=0x31e298, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_32\\Microsoft.Security.ApplicationId.PolicyManagement.PolicyEngineApi.Interop\\", lpFilePart=0x0) returned 0x65 [0139.982] FindFirstFileW (in: lpFileName="C:\\Windows\\assembly\\GAC_32\\Microsoft.Security.ApplicationId.PolicyManagement.PolicyEngineApi.Interop\\*", lpFindFileData=0x31e4e4 | out: lpFindFileData=0x31e4e4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa2225d54, ftCreationTime.dwHighDateTime=0x1cbf8eb, ftLastAccessTime.dwLowDateTime=0xa2225d54, ftLastAccessTime.dwHighDateTime=0x1cbf8eb, ftLastWriteTime.dwLowDateTime=0xa2225d54, ftLastWriteTime.dwHighDateTime=0x1cbf8eb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x381b80 [0139.983] FindClose (in: hFindFile=0x381b80 | out: hFindFile=0x381b80) returned 1 [0139.983] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_32\\Microsoft.Security.ApplicationId.PolicyManagement.PolicyEngineApi.Interop\\6.1.0.0__31bf3856ad364e35", nBufferLength=0x105, lpBuffer=0x31e24c, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_32\\Microsoft.Security.ApplicationId.PolicyManagement.PolicyEngineApi.Interop\\6.1.0.0__31bf3856ad364e35", lpFilePart=0x0) returned 0x7e [0139.983] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_32\\Microsoft.Security.ApplicationId.PolicyManagement.PolicyEngineApi.Interop\\6.1.0.0__31bf3856ad364e35\\", nBufferLength=0x105, lpBuffer=0x31e220, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_32\\Microsoft.Security.ApplicationId.PolicyManagement.PolicyEngineApi.Interop\\6.1.0.0__31bf3856ad364e35\\", lpFilePart=0x0) returned 0x7f [0139.983] FindFirstFileW (in: lpFileName="C:\\Windows\\assembly\\GAC_32\\Microsoft.Security.ApplicationId.PolicyManagement.PolicyEngineApi.Interop\\6.1.0.0__31bf3856ad364e35\\*", lpFindFileData=0x31e46c | out: lpFindFileData=0x31e46c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa2225d54, ftCreationTime.dwHighDateTime=0x1cbf8eb, ftLastAccessTime.dwLowDateTime=0xa2225d54, ftLastAccessTime.dwHighDateTime=0x1cbf8eb, ftLastWriteTime.dwLowDateTime=0xa2225d54, ftLastWriteTime.dwHighDateTime=0x1cbf8eb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x381b80 [0139.983] FindClose (in: hFindFile=0x381b80 | out: hFindFile=0x381b80) returned 1 [0139.983] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_32\\Microsoft.Security.ApplicationId.PolicyManagement.PolicyEngineApi.Interop\\6.1.0.0__31bf3856ad364e35", nBufferLength=0x105, lpBuffer=0x31e24c, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_32\\Microsoft.Security.ApplicationId.PolicyManagement.PolicyEngineApi.Interop\\6.1.0.0__31bf3856ad364e35", lpFilePart=0x0) returned 0x7e [0139.983] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_32\\Microsoft.Security.ApplicationId.PolicyManagement.PolicyEngineApi.Interop\\6.1.0.0__31bf3856ad364e35\\", nBufferLength=0x105, lpBuffer=0x31e220, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_32\\Microsoft.Security.ApplicationId.PolicyManagement.PolicyEngineApi.Interop\\6.1.0.0__31bf3856ad364e35\\", lpFilePart=0x0) returned 0x7f [0139.983] FindFirstFileW (in: lpFileName="C:\\Windows\\assembly\\GAC_32\\Microsoft.Security.ApplicationId.PolicyManagement.PolicyEngineApi.Interop\\6.1.0.0__31bf3856ad364e35\\*", lpFindFileData=0x31e46c | out: lpFindFileData=0x31e46c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa2225d54, ftCreationTime.dwHighDateTime=0x1cbf8eb, ftLastAccessTime.dwLowDateTime=0xa2225d54, ftLastAccessTime.dwHighDateTime=0x1cbf8eb, ftLastWriteTime.dwLowDateTime=0xa2225d54, ftLastWriteTime.dwHighDateTime=0x1cbf8eb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x381b80 [0139.983] FindClose (in: hFindFile=0x381b80 | out: hFindFile=0x381b80) returned 1 [0139.983] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_32\\Microsoft.Transactions.Bridge.Dtc", nBufferLength=0x105, lpBuffer=0x31e2c4, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_32\\Microsoft.Transactions.Bridge.Dtc", lpFilePart=0x0) returned 0x3c [0139.983] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_32\\Microsoft.Transactions.Bridge.Dtc\\", nBufferLength=0x105, lpBuffer=0x31e298, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_32\\Microsoft.Transactions.Bridge.Dtc\\", lpFilePart=0x0) returned 0x3d [0139.983] FindFirstFileW (in: lpFileName="C:\\Windows\\assembly\\GAC_32\\Microsoft.Transactions.Bridge.Dtc\\*", lpFindFileData=0x31e4e4 | out: lpFindFileData=0x31e4e4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x819dda40, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x819dda40, ftLastAccessTime.dwHighDateTime=0x1ca0444, ftLastWriteTime.dwLowDateTime=0x819dda40, ftLastWriteTime.dwHighDateTime=0x1ca0444, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x381b80 [0139.984] FindClose (in: hFindFile=0x381b80 | out: hFindFile=0x381b80) returned 1 [0139.984] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_32\\Microsoft.Transactions.Bridge.Dtc", nBufferLength=0x105, lpBuffer=0x31e2c4, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_32\\Microsoft.Transactions.Bridge.Dtc", lpFilePart=0x0) returned 0x3c [0139.984] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_32\\Microsoft.Transactions.Bridge.Dtc\\", nBufferLength=0x105, lpBuffer=0x31e298, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_32\\Microsoft.Transactions.Bridge.Dtc\\", lpFilePart=0x0) returned 0x3d [0139.984] FindFirstFileW (in: lpFileName="C:\\Windows\\assembly\\GAC_32\\Microsoft.Transactions.Bridge.Dtc\\*", lpFindFileData=0x31e4e4 | out: lpFindFileData=0x31e4e4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x819dda40, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x819dda40, ftLastAccessTime.dwHighDateTime=0x1ca0444, ftLastWriteTime.dwLowDateTime=0x819dda40, ftLastWriteTime.dwHighDateTime=0x1ca0444, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x381b80 [0139.984] FindClose (in: hFindFile=0x381b80 | out: hFindFile=0x381b80) returned 1 [0139.984] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_32\\Microsoft.Transactions.Bridge.Dtc\\3.0.0.0__b03f5f7f11d50a3a", nBufferLength=0x105, lpBuffer=0x31e24c, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_32\\Microsoft.Transactions.Bridge.Dtc\\3.0.0.0__b03f5f7f11d50a3a", lpFilePart=0x0) returned 0x56 [0139.984] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_32\\Microsoft.Transactions.Bridge.Dtc\\3.0.0.0__b03f5f7f11d50a3a\\", nBufferLength=0x105, lpBuffer=0x31e220, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_32\\Microsoft.Transactions.Bridge.Dtc\\3.0.0.0__b03f5f7f11d50a3a\\", lpFilePart=0x0) returned 0x57 [0139.984] FindFirstFileW (in: lpFileName="C:\\Windows\\assembly\\GAC_32\\Microsoft.Transactions.Bridge.Dtc\\3.0.0.0__b03f5f7f11d50a3a\\*", lpFindFileData=0x31e46c | out: lpFindFileData=0x31e46c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x819dda40, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0xc091bde9, ftLastAccessTime.dwHighDateTime=0x1cb892c, ftLastWriteTime.dwLowDateTime=0xc091bde9, ftLastWriteTime.dwHighDateTime=0x1cb892c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x381b80 [0139.984] FindClose (in: hFindFile=0x381b80 | out: hFindFile=0x381b80) returned 1 [0139.984] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_32\\Microsoft.Transactions.Bridge.Dtc\\3.0.0.0__b03f5f7f11d50a3a", nBufferLength=0x105, lpBuffer=0x31e24c, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_32\\Microsoft.Transactions.Bridge.Dtc\\3.0.0.0__b03f5f7f11d50a3a", lpFilePart=0x0) returned 0x56 [0139.984] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_32\\Microsoft.Transactions.Bridge.Dtc\\3.0.0.0__b03f5f7f11d50a3a\\", nBufferLength=0x105, lpBuffer=0x31e220, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_32\\Microsoft.Transactions.Bridge.Dtc\\3.0.0.0__b03f5f7f11d50a3a\\", lpFilePart=0x0) returned 0x57 [0139.984] FindFirstFileW (in: lpFileName="C:\\Windows\\assembly\\GAC_32\\Microsoft.Transactions.Bridge.Dtc\\3.0.0.0__b03f5f7f11d50a3a\\*", lpFindFileData=0x31e46c | out: lpFindFileData=0x31e46c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x819dda40, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0xc091bde9, ftLastAccessTime.dwHighDateTime=0x1cb892c, ftLastWriteTime.dwLowDateTime=0xc091bde9, ftLastWriteTime.dwHighDateTime=0x1cb892c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x381b80 [0139.984] FindClose (in: hFindFile=0x381b80 | out: hFindFile=0x381b80) returned 1 [0139.985] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_32\\Microsoft.VisualStudio.Tools.Applications.InteropAdapter", nBufferLength=0x105, lpBuffer=0x31e2c4, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_32\\Microsoft.VisualStudio.Tools.Applications.InteropAdapter", lpFilePart=0x0) returned 0x53 [0139.985] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_32\\Microsoft.VisualStudio.Tools.Applications.InteropAdapter\\", nBufferLength=0x105, lpBuffer=0x31e298, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_32\\Microsoft.VisualStudio.Tools.Applications.InteropAdapter\\", lpFilePart=0x0) returned 0x54 [0139.985] FindFirstFileW (in: lpFileName="C:\\Windows\\assembly\\GAC_32\\Microsoft.VisualStudio.Tools.Applications.InteropAdapter\\*", lpFindFileData=0x31e4e4 | out: lpFindFileData=0x31e4e4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa69b8e30, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0xa69b8e30, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xa69b8e30, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x381b80 [0139.985] FindClose (in: hFindFile=0x381b80 | out: hFindFile=0x381b80) returned 1 [0139.985] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_32\\Microsoft.VisualStudio.Tools.Applications.InteropAdapter", nBufferLength=0x105, lpBuffer=0x31e2c4, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_32\\Microsoft.VisualStudio.Tools.Applications.InteropAdapter", lpFilePart=0x0) returned 0x53 [0139.985] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_32\\Microsoft.VisualStudio.Tools.Applications.InteropAdapter\\", nBufferLength=0x105, lpBuffer=0x31e298, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_32\\Microsoft.VisualStudio.Tools.Applications.InteropAdapter\\", lpFilePart=0x0) returned 0x54 [0139.985] FindFirstFileW (in: lpFileName="C:\\Windows\\assembly\\GAC_32\\Microsoft.VisualStudio.Tools.Applications.InteropAdapter\\*", lpFindFileData=0x31e4e4 | out: lpFindFileData=0x31e4e4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa69b8e30, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0xa69b8e30, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xa69b8e30, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x381b80 [0139.985] FindClose (in: hFindFile=0x381b80 | out: hFindFile=0x381b80) returned 1 [0139.985] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_32\\Microsoft.VisualStudio.Tools.Applications.InteropAdapter\\8.0.0.0__b03f5f7f11d50a3a", nBufferLength=0x105, lpBuffer=0x31e24c, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_32\\Microsoft.VisualStudio.Tools.Applications.InteropAdapter\\8.0.0.0__b03f5f7f11d50a3a", lpFilePart=0x0) returned 0x6d [0139.985] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_32\\Microsoft.VisualStudio.Tools.Applications.InteropAdapter\\8.0.0.0__b03f5f7f11d50a3a\\", nBufferLength=0x105, lpBuffer=0x31e220, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_32\\Microsoft.VisualStudio.Tools.Applications.InteropAdapter\\8.0.0.0__b03f5f7f11d50a3a\\", lpFilePart=0x0) returned 0x6e [0139.985] FindFirstFileW (in: lpFileName="C:\\Windows\\assembly\\GAC_32\\Microsoft.VisualStudio.Tools.Applications.InteropAdapter\\8.0.0.0__b03f5f7f11d50a3a\\*", lpFindFileData=0x31e46c | out: lpFindFileData=0x31e46c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5266ea30, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x5266ea30, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x5266ea30, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x381b80 [0139.986] FindClose (in: hFindFile=0x381b80 | out: hFindFile=0x381b80) returned 1 [0139.986] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_32\\Microsoft.VisualStudio.Tools.Applications.InteropAdapter\\8.0.0.0__b03f5f7f11d50a3a", nBufferLength=0x105, lpBuffer=0x31e24c, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_32\\Microsoft.VisualStudio.Tools.Applications.InteropAdapter\\8.0.0.0__b03f5f7f11d50a3a", lpFilePart=0x0) returned 0x6d [0139.986] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_32\\Microsoft.VisualStudio.Tools.Applications.InteropAdapter\\8.0.0.0__b03f5f7f11d50a3a\\", nBufferLength=0x105, lpBuffer=0x31e220, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_32\\Microsoft.VisualStudio.Tools.Applications.InteropAdapter\\8.0.0.0__b03f5f7f11d50a3a\\", lpFilePart=0x0) returned 0x6e [0139.986] FindFirstFileW (in: lpFileName="C:\\Windows\\assembly\\GAC_32\\Microsoft.VisualStudio.Tools.Applications.InteropAdapter\\8.0.0.0__b03f5f7f11d50a3a\\*", lpFindFileData=0x31e46c | out: lpFindFileData=0x31e46c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5266ea30, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x5266ea30, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x5266ea30, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x381b80 [0139.986] FindClose (in: hFindFile=0x381b80 | out: hFindFile=0x381b80) returned 1 [0139.986] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_32\\Microsoft.Windows.Diagnosis.SDEngine", nBufferLength=0x105, lpBuffer=0x31e2c4, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_32\\Microsoft.Windows.Diagnosis.SDEngine", lpFilePart=0x0) returned 0x3f [0139.986] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_32\\Microsoft.Windows.Diagnosis.SDEngine\\", nBufferLength=0x105, lpBuffer=0x31e298, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_32\\Microsoft.Windows.Diagnosis.SDEngine\\", lpFilePart=0x0) returned 0x40 [0139.986] FindFirstFileW (in: lpFileName="C:\\Windows\\assembly\\GAC_32\\Microsoft.Windows.Diagnosis.SDEngine\\*", lpFindFileData=0x31e4e4 | out: lpFindFileData=0x31e4e4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x819b78df, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x819b78df, ftLastAccessTime.dwHighDateTime=0x1ca0444, ftLastWriteTime.dwLowDateTime=0x819b78df, ftLastWriteTime.dwHighDateTime=0x1ca0444, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x381b80 [0139.986] FindClose (in: hFindFile=0x381b80 | out: hFindFile=0x381b80) returned 1 [0139.986] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_32\\Microsoft.Windows.Diagnosis.SDEngine", nBufferLength=0x105, lpBuffer=0x31e2c4, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_32\\Microsoft.Windows.Diagnosis.SDEngine", lpFilePart=0x0) returned 0x3f [0139.986] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_32\\Microsoft.Windows.Diagnosis.SDEngine\\", nBufferLength=0x105, lpBuffer=0x31e298, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_32\\Microsoft.Windows.Diagnosis.SDEngine\\", lpFilePart=0x0) returned 0x40 [0139.986] FindFirstFileW (in: lpFileName="C:\\Windows\\assembly\\GAC_32\\Microsoft.Windows.Diagnosis.SDEngine\\*", lpFindFileData=0x31e4e4 | out: lpFindFileData=0x31e4e4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x819b78df, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x819b78df, ftLastAccessTime.dwHighDateTime=0x1ca0444, ftLastWriteTime.dwLowDateTime=0x819b78df, ftLastWriteTime.dwHighDateTime=0x1ca0444, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x381b80 [0139.987] FindClose (in: hFindFile=0x381b80 | out: hFindFile=0x381b80) returned 1 [0139.987] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_32\\Microsoft.Windows.Diagnosis.SDEngine\\6.1.0.0__31bf3856ad364e35", nBufferLength=0x105, lpBuffer=0x31e24c, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_32\\Microsoft.Windows.Diagnosis.SDEngine\\6.1.0.0__31bf3856ad364e35", lpFilePart=0x0) returned 0x59 [0139.987] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_32\\Microsoft.Windows.Diagnosis.SDEngine\\6.1.0.0__31bf3856ad364e35\\", nBufferLength=0x105, lpBuffer=0x31e220, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_32\\Microsoft.Windows.Diagnosis.SDEngine\\6.1.0.0__31bf3856ad364e35\\", lpFilePart=0x0) returned 0x5a [0139.987] FindFirstFileW (in: lpFileName="C:\\Windows\\assembly\\GAC_32\\Microsoft.Windows.Diagnosis.SDEngine\\6.1.0.0__31bf3856ad364e35\\*", lpFindFileData=0x31e46c | out: lpFindFileData=0x31e46c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x819b78df, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x819b78df, ftLastAccessTime.dwHighDateTime=0x1ca0444, ftLastWriteTime.dwLowDateTime=0x819b78df, ftLastWriteTime.dwHighDateTime=0x1ca0444, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x381b80 [0139.987] FindClose (in: hFindFile=0x381b80 | out: hFindFile=0x381b80) returned 1 [0139.987] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_32\\Microsoft.Windows.Diagnosis.SDEngine\\6.1.0.0__31bf3856ad364e35", nBufferLength=0x105, lpBuffer=0x31e24c, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_32\\Microsoft.Windows.Diagnosis.SDEngine\\6.1.0.0__31bf3856ad364e35", lpFilePart=0x0) returned 0x59 [0139.987] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_32\\Microsoft.Windows.Diagnosis.SDEngine\\6.1.0.0__31bf3856ad364e35\\", nBufferLength=0x105, lpBuffer=0x31e220, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_32\\Microsoft.Windows.Diagnosis.SDEngine\\6.1.0.0__31bf3856ad364e35\\", lpFilePart=0x0) returned 0x5a [0139.987] FindFirstFileW (in: lpFileName="C:\\Windows\\assembly\\GAC_32\\Microsoft.Windows.Diagnosis.SDEngine\\6.1.0.0__31bf3856ad364e35\\*", lpFindFileData=0x31e46c | out: lpFindFileData=0x31e46c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x819b78df, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x819b78df, ftLastAccessTime.dwHighDateTime=0x1ca0444, ftLastWriteTime.dwLowDateTime=0x819b78df, ftLastWriteTime.dwHighDateTime=0x1ca0444, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x381b80 [0139.987] FindClose (in: hFindFile=0x381b80 | out: hFindFile=0x381b80) returned 1 [0139.987] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_32\\MSBuild", nBufferLength=0x105, lpBuffer=0x31e2c4, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_32\\MSBuild", lpFilePart=0x0) returned 0x22 [0139.987] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_32\\MSBuild\\", nBufferLength=0x105, lpBuffer=0x31e298, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_32\\MSBuild\\", lpFilePart=0x0) returned 0x23 [0139.987] FindFirstFileW (in: lpFileName="C:\\Windows\\assembly\\GAC_32\\MSBuild\\*", lpFindFileData=0x31e4e4 | out: lpFindFileData=0x31e4e4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x81a29d00, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x81a29d00, ftLastAccessTime.dwHighDateTime=0x1ca0444, ftLastWriteTime.dwLowDateTime=0x81a29d00, ftLastWriteTime.dwHighDateTime=0x1ca0444, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x381b80 [0139.988] FindClose (in: hFindFile=0x381b80 | out: hFindFile=0x381b80) returned 1 [0139.988] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_32\\MSBuild", nBufferLength=0x105, lpBuffer=0x31e2c4, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_32\\MSBuild", lpFilePart=0x0) returned 0x22 [0139.988] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_32\\MSBuild\\", nBufferLength=0x105, lpBuffer=0x31e298, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_32\\MSBuild\\", lpFilePart=0x0) returned 0x23 [0139.988] FindFirstFileW (in: lpFileName="C:\\Windows\\assembly\\GAC_32\\MSBuild\\*", lpFindFileData=0x31e4e4 | out: lpFindFileData=0x31e4e4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x81a29d00, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x81a29d00, ftLastAccessTime.dwHighDateTime=0x1ca0444, ftLastWriteTime.dwLowDateTime=0x81a29d00, ftLastWriteTime.dwHighDateTime=0x1ca0444, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x381b80 [0139.988] FindClose (in: hFindFile=0x381b80 | out: hFindFile=0x381b80) returned 1 [0139.988] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_32\\MSBuild\\3.5.0.0__b03f5f7f11d50a3a", nBufferLength=0x105, lpBuffer=0x31e24c, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_32\\MSBuild\\3.5.0.0__b03f5f7f11d50a3a", lpFilePart=0x0) returned 0x3c [0139.988] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_32\\MSBuild\\3.5.0.0__b03f5f7f11d50a3a\\", nBufferLength=0x105, lpBuffer=0x31e220, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_32\\MSBuild\\3.5.0.0__b03f5f7f11d50a3a\\", lpFilePart=0x0) returned 0x3d [0139.988] FindFirstFileW (in: lpFileName="C:\\Windows\\assembly\\GAC_32\\MSBuild\\3.5.0.0__b03f5f7f11d50a3a\\*", lpFindFileData=0x31e46c | out: lpFindFileData=0x31e46c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x81a29d00, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x81a29d00, ftLastAccessTime.dwHighDateTime=0x1ca0444, ftLastWriteTime.dwLowDateTime=0x81a29d00, ftLastWriteTime.dwHighDateTime=0x1ca0444, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x381b80 [0139.988] FindClose (in: hFindFile=0x381b80 | out: hFindFile=0x381b80) returned 1 [0139.988] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_32\\MSBuild\\3.5.0.0__b03f5f7f11d50a3a", nBufferLength=0x105, lpBuffer=0x31e24c, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_32\\MSBuild\\3.5.0.0__b03f5f7f11d50a3a", lpFilePart=0x0) returned 0x3c [0139.988] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_32\\MSBuild\\3.5.0.0__b03f5f7f11d50a3a\\", nBufferLength=0x105, lpBuffer=0x31e220, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_32\\MSBuild\\3.5.0.0__b03f5f7f11d50a3a\\", lpFilePart=0x0) returned 0x3d [0139.988] FindFirstFileW (in: lpFileName="C:\\Windows\\assembly\\GAC_32\\MSBuild\\3.5.0.0__b03f5f7f11d50a3a\\*", lpFindFileData=0x31e46c | out: lpFindFileData=0x31e46c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x81a29d00, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x81a29d00, ftLastAccessTime.dwHighDateTime=0x1ca0444, ftLastWriteTime.dwLowDateTime=0x81a29d00, ftLastWriteTime.dwHighDateTime=0x1ca0444, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x381b80 [0139.988] FindClose (in: hFindFile=0x381b80 | out: hFindFile=0x381b80) returned 1 [0139.989] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_32\\mscorlib", nBufferLength=0x105, lpBuffer=0x31e2c4, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_32\\mscorlib", lpFilePart=0x0) returned 0x23 [0139.989] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_32\\mscorlib\\", nBufferLength=0x105, lpBuffer=0x31e298, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_32\\mscorlib\\", lpFilePart=0x0) returned 0x24 [0139.989] FindFirstFileW (in: lpFileName="C:\\Windows\\assembly\\GAC_32\\mscorlib\\*", lpFindFileData=0x31e4e4 | out: lpFindFileData=0x31e4e4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfdb7eb8a, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfdb7eb8a, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xfdb7eb8a, ftLastWriteTime.dwHighDateTime=0x1ca0431, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x381b80 [0139.989] FindClose (in: hFindFile=0x381b80 | out: hFindFile=0x381b80) returned 1 [0139.989] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_32\\mscorlib", nBufferLength=0x105, lpBuffer=0x31e2c4, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_32\\mscorlib", lpFilePart=0x0) returned 0x23 [0140.113] CreateFileW (lpFileName="C:\\Windows\\assembly\\GAC_MSIL\\Microsoft.Security.ApplicationId.PolicyManagement.Cmdlets.Resources\\6.1.0.0_en_31bf3856ad364e35\\Microsoft.Security.ApplicationId.PolicyManagement.Cmdlets.dll-Help.xml" (normalized: "c:\\windows\\assembly\\gac_msil\\microsoft.security.applicationid.policymanagement.cmdlets.resources\\6.1.0.0_en_31bf3856ad364e35\\microsoft.security.applicationid.policymanagement.cmdlets.dll-help.xml"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x274 [0140.113] GetFileType (hFile=0x274) returned 0x1 [0140.113] GetFileType (hFile=0x274) returned 0x1 [0140.113] GetFileSize (in: hFile=0x274, lpFileSizeHigh=0x31e708 | out: lpFileSizeHigh=0x31e708*=0x0) returned 0x1405b [0140.113] ReadFile (in: hFile=0x274, lpBuffer=0x278a270, nNumberOfBytesToRead=0x1405b, lpNumberOfBytesRead=0x31e6b4, lpOverlapped=0x0 | out: lpBuffer=0x278a270*, lpNumberOfBytesRead=0x31e6b4*=0x1405b, lpOverlapped=0x0) returned 1 [0140.117] CreateFileW (lpFileName="C:\\Windows\\assembly\\GAC_MSIL\\Microsoft.Security.ApplicationId.PolicyManagement.Cmdlets.Resources\\6.1.0.0_en_31bf3856ad364e35\\Microsoft.Security.ApplicationId.PolicyManagement.Cmdlets.dll-Help.xml" (normalized: "c:\\windows\\assembly\\gac_msil\\microsoft.security.applicationid.policymanagement.cmdlets.resources\\6.1.0.0_en_31bf3856ad364e35\\microsoft.security.applicationid.policymanagement.cmdlets.dll-help.xml"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0xffffffff [0141.979] CreateFileW (lpFileName="C:\\Windows\\diagnostics\\index\\AeroDiagnostic.xml" (normalized: "c:\\windows\\diagnostics\\index\\aerodiagnostic.xml"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x274 [0141.980] GetFileType (hFile=0x274) returned 0x1 [0141.980] GetFileType (hFile=0x274) returned 0x1 [0141.980] GetFileSize (in: hFile=0x274, lpFileSizeHigh=0x31e7f8 | out: lpFileSizeHigh=0x31e7f8*=0x0) returned 0x7a7 [0141.980] ReadFile (in: hFile=0x274, lpBuffer=0x2860aec, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x31e7a4, lpOverlapped=0x0 | out: lpBuffer=0x2860aec*, lpNumberOfBytesRead=0x31e7a4*=0x7a7, lpOverlapped=0x0) returned 1 [0141.981] CreateFileW (lpFileName="C:\\Windows\\diagnostics\\index\\AeroDiagnostic.xml" (normalized: "c:\\windows\\diagnostics\\index\\aerodiagnostic.xml"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0xffffffff [0142.035] CreateFileW (lpFileName="C:\\Windows\\ehome\\mcetuningoverrides.xml" (normalized: "c:\\windows\\ehome\\mcetuningoverrides.xml"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x274 [0142.035] GetFileType (hFile=0x274) returned 0x1 [0142.035] GetFileType (hFile=0x274) returned 0x1 [0142.035] GetFileSize (in: hFile=0x274, lpFileSizeHigh=0x31e870 | out: lpFileSizeHigh=0x31e870*=0x0) returned 0x478ff [0142.036] ReadFile (in: hFile=0x274, lpBuffer=0x36194b0, nNumberOfBytesToRead=0x478ff, lpNumberOfBytesRead=0x31e81c, lpOverlapped=0x0 | out: lpBuffer=0x36194b0*, lpNumberOfBytesRead=0x31e81c*=0x478ff, lpOverlapped=0x0) returned 1 [0142.048] CreateFileW (lpFileName="C:\\Windows\\ehome\\mcetuningoverrides.xml" (normalized: "c:\\windows\\ehome\\mcetuningoverrides.xml"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0xffffffff [0142.054] CreateFileW (lpFileName="C:\\Windows\\Fonts\\fms_metadata.xml" (normalized: "c:\\windows\\fonts\\fms_metadata.xml"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x274 [0142.054] GetFileType (hFile=0x274) returned 0x1 [0142.054] GetFileType (hFile=0x274) returned 0x1 [0142.054] GetFileSize (in: hFile=0x274, lpFileSizeHigh=0x31e870 | out: lpFileSizeHigh=0x31e870*=0x0) returned 0x11c20 [0142.054] ReadFile (in: hFile=0x274, lpBuffer=0x2729fd4, nNumberOfBytesToRead=0x11c20, lpNumberOfBytesRead=0x31e81c, lpOverlapped=0x0 | out: lpBuffer=0x2729fd4*, lpNumberOfBytesRead=0x31e81c*=0x11c20, lpOverlapped=0x0) returned 1 [0142.058] CreateFileW (lpFileName="C:\\Windows\\Fonts\\fms_metadata.xml" (normalized: "c:\\windows\\fonts\\fms_metadata.xml"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0xffffffff [0142.064] CreateFileW (lpFileName="C:\\Windows\\Globalization\\MCT\\MCT-AU\\Wallpaper\\AU-wp1.jpg" (normalized: "c:\\windows\\globalization\\mct\\mct-au\\wallpaper\\au-wp1.jpg"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x274 [0142.064] GetFileType (hFile=0x274) returned 0x1 [0142.064] GetFileType (hFile=0x274) returned 0x1 [0142.065] GetFileSize (in: hFile=0x274, lpFileSizeHigh=0x31e708 | out: lpFileSizeHigh=0x31e708*=0x0) returned 0xc1f01 [0142.065] ReadFile (in: hFile=0x274, lpBuffer=0x36a86f0, nNumberOfBytesToRead=0xc1f01, lpNumberOfBytesRead=0x31e6b4, lpOverlapped=0x0 | out: lpBuffer=0x36a86f0*, lpNumberOfBytesRead=0x31e6b4*=0xc1f01, lpOverlapped=0x0) returned 1 [0142.103] CreateFileW (lpFileName="C:\\Windows\\Globalization\\MCT\\MCT-AU\\Wallpaper\\AU-wp1.jpg" (normalized: "c:\\windows\\globalization\\mct\\mct-au\\wallpaper\\au-wp1.jpg"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0xffffffff [0142.107] CreateFileW (lpFileName="C:\\Windows\\Globalization\\MCT\\MCT-CA\\Wallpaper\\CA-wp1.jpg" (normalized: "c:\\windows\\globalization\\mct\\mct-ca\\wallpaper\\ca-wp1.jpg"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x274 [0142.107] GetFileType (hFile=0x274) returned 0x1 [0142.107] GetFileType (hFile=0x274) returned 0x1 [0142.108] GetFileSize (in: hFile=0x274, lpFileSizeHigh=0x31e708 | out: lpFileSizeHigh=0x31e708*=0x0) returned 0xcdba6 [0142.108] ReadFile (in: hFile=0x274, lpBuffer=0x382c530, nNumberOfBytesToRead=0xcdba6, lpNumberOfBytesRead=0x31e6b4, lpOverlapped=0x0 | out: lpBuffer=0x382c530*, lpNumberOfBytesRead=0x31e6b4*=0xcdba6, lpOverlapped=0x0) returned 1 [0142.143] CreateFileW (lpFileName="C:\\Windows\\Globalization\\MCT\\MCT-CA\\Wallpaper\\CA-wp1.jpg" (normalized: "c:\\windows\\globalization\\mct\\mct-ca\\wallpaper\\ca-wp1.jpg"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0xffffffff [0142.147] CreateFileW (lpFileName="C:\\Windows\\Globalization\\MCT\\MCT-GB\\Wallpaper\\GB-wp1.jpg" (normalized: "c:\\windows\\globalization\\mct\\mct-gb\\wallpaper\\gb-wp1.jpg"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x274 [0142.148] GetFileType (hFile=0x274) returned 0x1 [0142.148] GetFileType (hFile=0x274) returned 0x1 [0142.148] GetFileSize (in: hFile=0x274, lpFileSizeHigh=0x31e708 | out: lpFileSizeHigh=0x31e708*=0x0) returned 0x5a67b [0142.157] ReadFile (in: hFile=0x274, lpBuffer=0x36194b0, nNumberOfBytesToRead=0x5a67b, lpNumberOfBytesRead=0x31e6b4, lpOverlapped=0x0 | out: lpBuffer=0x36194b0*, lpNumberOfBytesRead=0x31e6b4*=0x5a67b, lpOverlapped=0x0) returned 1 [0142.173] CreateFileW (lpFileName="C:\\Windows\\Globalization\\MCT\\MCT-GB\\Wallpaper\\GB-wp1.jpg" (normalized: "c:\\windows\\globalization\\mct\\mct-gb\\wallpaper\\gb-wp1.jpg"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0xffffffff [0142.177] CreateFileW (lpFileName="C:\\Windows\\Globalization\\MCT\\MCT-US\\Wallpaper\\US-wp1.jpg" (normalized: "c:\\windows\\globalization\\mct\\mct-us\\wallpaper\\us-wp1.jpg"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x274 [0142.177] GetFileType (hFile=0x274) returned 0x1 [0142.177] GetFileType (hFile=0x274) returned 0x1 [0142.177] GetFileSize (in: hFile=0x274, lpFileSizeHigh=0x31e708 | out: lpFileSizeHigh=0x31e708*=0x0) returned 0xab683 [0142.178] ReadFile (in: hFile=0x274, lpBuffer=0x36ce1e0, nNumberOfBytesToRead=0xab683, lpNumberOfBytesRead=0x31e6b4, lpOverlapped=0x0 | out: lpBuffer=0x36ce1e0*, lpNumberOfBytesRead=0x31e6b4*=0xab683, lpOverlapped=0x0) returned 1 [0142.208] CreateFileW (lpFileName="C:\\Windows\\Globalization\\MCT\\MCT-US\\Wallpaper\\US-wp1.jpg" (normalized: "c:\\windows\\globalization\\mct\\mct-us\\wallpaper\\us-wp1.jpg"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0xffffffff [0142.212] CreateFileW (lpFileName="C:\\Windows\\Globalization\\MCT\\MCT-ZA\\Wallpaper\\ZA-wp1.jpg" (normalized: "c:\\windows\\globalization\\mct\\mct-za\\wallpaper\\za-wp1.jpg"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x274 [0142.213] GetFileType (hFile=0x274) returned 0x1 [0142.213] GetFileType (hFile=0x274) returned 0x1 [0142.213] GetFileSize (in: hFile=0x274, lpFileSizeHigh=0x31e708 | out: lpFileSizeHigh=0x31e708*=0x0) returned 0x9e2ec [0142.213] ReadFile (in: hFile=0x274, lpBuffer=0x3824f20, nNumberOfBytesToRead=0x9e2ec, lpNumberOfBytesRead=0x31e6b4, lpOverlapped=0x0 | out: lpBuffer=0x3824f20*, lpNumberOfBytesRead=0x31e6b4*=0x9e2ec, lpOverlapped=0x0) returned 1 [0142.257] CreateFileW (lpFileName="C:\\Windows\\Globalization\\MCT\\MCT-ZA\\Wallpaper\\ZA-wp1.jpg" (normalized: "c:\\windows\\globalization\\mct\\mct-za\\wallpaper\\za-wp1.jpg"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0xffffffff [0142.466] CreateFileW (lpFileName="C:\\Windows\\Installer\\$PatchCache$\\Managed\\00004109340000000100000000F01FEC\\CacheSize.txt" (normalized: "c:\\windows\\installer\\$patchcache$\\managed\\00004109340000000100000000f01fec\\cachesize.txt"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x274 [0142.466] GetFileType (hFile=0x274) returned 0x1 [0142.466] GetFileType (hFile=0x274) returned 0x1 [0142.466] GetFileSize (in: hFile=0x274, lpFileSizeHigh=0x31e708 | out: lpFileSizeHigh=0x31e708*=0x0) returned 0x7 [0142.466] ReadFile (in: hFile=0x274, lpBuffer=0x2679a44, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x31e6b4, lpOverlapped=0x0 | out: lpBuffer=0x2679a44*, lpNumberOfBytesRead=0x31e6b4*=0x7, lpOverlapped=0x0) returned 1 [0142.467] CreateFileW (lpFileName="C:\\Windows\\Installer\\$PatchCache$\\Managed\\00004109340000000100000000F01FEC\\CacheSize.txt" (normalized: "c:\\windows\\installer\\$patchcache$\\managed\\00004109340000000100000000f01fec\\cachesize.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0xffffffff [0142.469] CreateFileW (lpFileName="C:\\Windows\\Installer\\$PatchCache$\\Managed\\00004109340090400100000000F01FEC\\CacheSize.txt" (normalized: "c:\\windows\\installer\\$patchcache$\\managed\\00004109340090400100000000f01fec\\cachesize.txt"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x274 [0142.469] GetFileType (hFile=0x274) returned 0x1 [0142.469] GetFileType (hFile=0x274) returned 0x1 [0142.469] GetFileSize (in: hFile=0x274, lpFileSizeHigh=0x31e708 | out: lpFileSizeHigh=0x31e708*=0x0) returned 0x6 [0142.469] ReadFile (in: hFile=0x274, lpBuffer=0x267e6b0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x31e6b4, lpOverlapped=0x0 | out: lpBuffer=0x267e6b0*, lpNumberOfBytesRead=0x31e6b4*=0x6, lpOverlapped=0x0) returned 1 [0142.470] CreateFileW (lpFileName="C:\\Windows\\Installer\\$PatchCache$\\Managed\\00004109340090400100000000F01FEC\\CacheSize.txt" (normalized: "c:\\windows\\installer\\$patchcache$\\managed\\00004109340090400100000000f01fec\\cachesize.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0xffffffff [0142.471] CreateFileW (lpFileName="C:\\Windows\\Installer\\$PatchCache$\\Managed\\000041094B0090400100000000F01FEC\\CacheSize.txt" (normalized: "c:\\windows\\installer\\$patchcache$\\managed\\000041094b0090400100000000f01fec\\cachesize.txt"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x274 [0142.471] GetFileType (hFile=0x274) returned 0x1 [0142.471] GetFileType (hFile=0x274) returned 0x1 [0142.471] GetFileSize (in: hFile=0x274, lpFileSizeHigh=0x31e708 | out: lpFileSizeHigh=0x31e708*=0x0) returned 0x6 [0142.471] ReadFile (in: hFile=0x274, lpBuffer=0x2686554, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x31e6b4, lpOverlapped=0x0 | out: lpBuffer=0x2686554*, lpNumberOfBytesRead=0x31e6b4*=0x6, lpOverlapped=0x0) returned 1 [0142.472] CreateFileW (lpFileName="C:\\Windows\\Installer\\$PatchCache$\\Managed\\000041094B0090400100000000F01FEC\\CacheSize.txt" (normalized: "c:\\windows\\installer\\$patchcache$\\managed\\000041094b0090400100000000f01fec\\cachesize.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0xffffffff [0142.476] CreateFileW (lpFileName="C:\\Windows\\Installer\\$PatchCache$\\Managed\\00004109E60090400100000000F01FEC\\CacheSize.txt" (normalized: "c:\\windows\\installer\\$patchcache$\\managed\\00004109e60090400100000000f01fec\\cachesize.txt"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x274 [0142.476] GetFileType (hFile=0x274) returned 0x1 [0142.476] GetFileType (hFile=0x274) returned 0x1 [0142.476] GetFileSize (in: hFile=0x274, lpFileSizeHigh=0x31e708 | out: lpFileSizeHigh=0x31e708*=0x0) returned 0x6 [0142.476] ReadFile (in: hFile=0x274, lpBuffer=0x269c68c, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x31e6b4, lpOverlapped=0x0 | out: lpBuffer=0x269c68c*, lpNumberOfBytesRead=0x31e6b4*=0x6, lpOverlapped=0x0) returned 1 [0142.477] CreateFileW (lpFileName="C:\\Windows\\Installer\\$PatchCache$\\Managed\\00004109E60090400100000000F01FEC\\CacheSize.txt" (normalized: "c:\\windows\\installer\\$patchcache$\\managed\\00004109e60090400100000000f01fec\\cachesize.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0xffffffff [0142.478] CreateFileW (lpFileName="C:\\Windows\\Installer\\$PatchCache$\\Managed\\00004109F10090400100000000F01FEC\\CacheSize.txt" (normalized: "c:\\windows\\installer\\$patchcache$\\managed\\00004109f10090400100000000f01fec\\cachesize.txt"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x274 [0142.478] GetFileType (hFile=0x274) returned 0x1 [0142.478] GetFileType (hFile=0x274) returned 0x1 [0142.478] GetFileSize (in: hFile=0x274, lpFileSizeHigh=0x31e708 | out: lpFileSizeHigh=0x31e708*=0x0) returned 0x6 [0142.479] ReadFile (in: hFile=0x274, lpBuffer=0x26a119c, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x31e6b4, lpOverlapped=0x0 | out: lpBuffer=0x26a119c*, lpNumberOfBytesRead=0x31e6b4*=0x6, lpOverlapped=0x0) returned 1 [0142.479] CreateFileW (lpFileName="C:\\Windows\\Installer\\$PatchCache$\\Managed\\00004109F10090400100000000F01FEC\\CacheSize.txt" (normalized: "c:\\windows\\installer\\$patchcache$\\managed\\00004109f10090400100000000f01fec\\cachesize.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0xffffffff [0142.480] CreateFileW (lpFileName="C:\\Windows\\Installer\\$PatchCache$\\Managed\\00004109F100A0C00100000000F01FEC\\CacheSize.txt" (normalized: "c:\\windows\\installer\\$patchcache$\\managed\\00004109f100a0c00100000000f01fec\\cachesize.txt"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x274 [0142.481] GetFileType (hFile=0x274) returned 0x1 [0142.481] GetFileType (hFile=0x274) returned 0x1 [0142.481] GetFileSize (in: hFile=0x274, lpFileSizeHigh=0x31e708 | out: lpFileSizeHigh=0x31e708*=0x0) returned 0x6 [0142.481] ReadFile (in: hFile=0x274, lpBuffer=0x26a5cac, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x31e6b4, lpOverlapped=0x0 | out: lpBuffer=0x26a5cac*, lpNumberOfBytesRead=0x31e6b4*=0x6, lpOverlapped=0x0) returned 1 [0142.482] CreateFileW (lpFileName="C:\\Windows\\Installer\\$PatchCache$\\Managed\\00004109F100A0C00100000000F01FEC\\CacheSize.txt" (normalized: "c:\\windows\\installer\\$patchcache$\\managed\\00004109f100a0c00100000000f01fec\\cachesize.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0xffffffff [0142.483] CreateFileW (lpFileName="C:\\Windows\\Installer\\$PatchCache$\\Managed\\00004109F100C0400100000000F01FEC\\CacheSize.txt" (normalized: "c:\\windows\\installer\\$patchcache$\\managed\\00004109f100c0400100000000f01fec\\cachesize.txt"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x274 [0142.483] GetFileType (hFile=0x274) returned 0x1 [0142.483] GetFileType (hFile=0x274) returned 0x1 [0142.483] GetFileSize (in: hFile=0x274, lpFileSizeHigh=0x31e708 | out: lpFileSizeHigh=0x31e708*=0x0) returned 0x6 [0142.483] ReadFile (in: hFile=0x274, lpBuffer=0x26aa7bc, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x31e6b4, lpOverlapped=0x0 | out: lpBuffer=0x26aa7bc*, lpNumberOfBytesRead=0x31e6b4*=0x6, lpOverlapped=0x0) returned 1 [0142.484] CreateFileW (lpFileName="C:\\Windows\\Installer\\$PatchCache$\\Managed\\00004109F100C0400100000000F01FEC\\CacheSize.txt" (normalized: "c:\\windows\\installer\\$patchcache$\\managed\\00004109f100c0400100000000f01fec\\cachesize.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0xffffffff [0142.489] CreateFileW (lpFileName="C:\\Windows\\Installer\\$PatchCache$\\Managed\\00004119750000000100000000F01FEC\\CacheSize.txt" (normalized: "c:\\windows\\installer\\$patchcache$\\managed\\00004119750000000100000000f01fec\\cachesize.txt"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x274 [0142.489] GetFileType (hFile=0x274) returned 0x1 [0142.489] GetFileType (hFile=0x274) returned 0x1 [0142.489] GetFileSize (in: hFile=0x274, lpFileSizeHigh=0x31e708 | out: lpFileSizeHigh=0x31e708*=0x0) returned 0x7 [0142.489] ReadFile (in: hFile=0x274, lpBuffer=0x26dd214, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x31e6b4, lpOverlapped=0x0 | out: lpBuffer=0x26dd214*, lpNumberOfBytesRead=0x31e6b4*=0x7, lpOverlapped=0x0) returned 1 [0142.490] CreateFileW (lpFileName="C:\\Windows\\Installer\\$PatchCache$\\Managed\\00004119750000000100000000F01FEC\\CacheSize.txt" (normalized: "c:\\windows\\installer\\$patchcache$\\managed\\00004119750000000100000000f01fec\\cachesize.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0xffffffff [0142.491] CreateFileW (lpFileName="C:\\Windows\\Installer\\$PatchCache$\\Managed\\00004119B30000000100000000F01FEC\\CacheSize.txt" (normalized: "c:\\windows\\installer\\$patchcache$\\managed\\00004119b30000000100000000f01fec\\cachesize.txt"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x274 [0142.491] GetFileType (hFile=0x274) returned 0x1 [0142.491] GetFileType (hFile=0x274) returned 0x1 [0142.491] GetFileSize (in: hFile=0x274, lpFileSizeHigh=0x31e708 | out: lpFileSizeHigh=0x31e708*=0x0) returned 0x7 [0142.491] ReadFile (in: hFile=0x274, lpBuffer=0x26e1d24, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x31e6b4, lpOverlapped=0x0 | out: lpBuffer=0x26e1d24*, lpNumberOfBytesRead=0x31e6b4*=0x7, lpOverlapped=0x0) returned 1 [0142.492] CreateFileW (lpFileName="C:\\Windows\\Installer\\$PatchCache$\\Managed\\00004119B30000000100000000F01FEC\\CacheSize.txt" (normalized: "c:\\windows\\installer\\$patchcache$\\managed\\00004119b30000000100000000f01fec\\cachesize.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0xffffffff [0142.508] CreateFileW (lpFileName="C:\\Windows\\Media\\chimes.wav" (normalized: "c:\\windows\\media\\chimes.wav"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x274 [0142.508] GetFileType (hFile=0x274) returned 0x1 [0142.508] GetFileType (hFile=0x274) returned 0x1 [0142.508] GetFileSize (in: hFile=0x274, lpFileSizeHigh=0x31e870 | out: lpFileSizeHigh=0x31e870*=0x0) returned 0x34d2c [0142.508] ReadFile (in: hFile=0x274, lpBuffer=0x36194b0, nNumberOfBytesToRead=0x34d2c, lpNumberOfBytesRead=0x31e81c, lpOverlapped=0x0 | out: lpBuffer=0x36194b0*, lpNumberOfBytesRead=0x31e81c*=0x34d2c, lpOverlapped=0x0) returned 1 [0142.517] CreateFileW (lpFileName="C:\\Windows\\Media\\chimes.wav" (normalized: "c:\\windows\\media\\chimes.wav"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0xffffffff [0142.607] CreateFileW (lpFileName="C:\\Windows\\Microsoft.NET\\Framework\\v2.0.50727\\InstallCommon.sql" (normalized: "c:\\windows\\microsoft.net\\framework\\v2.0.50727\\installcommon.sql"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x274 [0142.607] GetFileType (hFile=0x274) returned 0x1 [0142.607] GetFileType (hFile=0x274) returned 0x1 [0142.607] GetFileSize (in: hFile=0x274, lpFileSizeHigh=0x31e780 | out: lpFileSizeHigh=0x31e780*=0x0) returned 0x6020 [0142.607] ReadFile (in: hFile=0x274, lpBuffer=0x2700a38, nNumberOfBytesToRead=0x6020, lpNumberOfBytesRead=0x31e72c, lpOverlapped=0x0 | out: lpBuffer=0x2700a38*, lpNumberOfBytesRead=0x31e72c*=0x6020, lpOverlapped=0x0) returned 1 [0142.608] CreateFileW (lpFileName="C:\\Windows\\Microsoft.NET\\Framework\\v2.0.50727\\InstallCommon.sql" (normalized: "c:\\windows\\microsoft.net\\framework\\v2.0.50727\\installcommon.sql"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x274 [0142.609] GetFileType (hFile=0x274) returned 0x1 [0142.609] GetFileType (hFile=0x274) returned 0x1 [0142.609] WriteFile (in: hFile=0x274, lpBuffer=0x2706fc8*, nNumberOfBytesToWrite=0x6020, lpNumberOfBytesWritten=0x31e720, lpOverlapped=0x0 | out: lpBuffer=0x2706fc8*, lpNumberOfBytesWritten=0x31e720*=0x6020, lpOverlapped=0x0) returned 1 [0142.611] MoveFileW (lpExistingFileName="C:\\Windows\\Microsoft.NET\\Framework\\v2.0.50727\\InstallCommon.sql" (normalized: "c:\\windows\\microsoft.net\\framework\\v2.0.50727\\installcommon.sql"), lpNewFileName="C:\\Windows\\Microsoft.NET\\Framework\\v2.0.50727\\InstallCommon.sql.[neftet@tutanota.com].boom" (normalized: "c:\\windows\\microsoft.net\\framework\\v2.0.50727\\installcommon.sql.[neftet@tutanota.com].boom")) returned 1 [0142.612] CreateFileW (lpFileName="C:\\Windows\\Microsoft.NET\\Framework\\v2.0.50727\\InstallMembership.sql" (normalized: "c:\\windows\\microsoft.net\\framework\\v2.0.50727\\installmembership.sql"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x274 [0142.613] GetFileType (hFile=0x274) returned 0x1 [0142.613] GetFileType (hFile=0x274) returned 0x1 [0142.613] GetFileSize (in: hFile=0x274, lpFileSizeHigh=0x31e780 | out: lpFileSizeHigh=0x31e780*=0x0) returned 0xdb10 [0142.613] ReadFile (in: hFile=0x274, lpBuffer=0x270e5e8, nNumberOfBytesToRead=0xdb10, lpNumberOfBytesRead=0x31e72c, lpOverlapped=0x0 | out: lpBuffer=0x270e5e8*, lpNumberOfBytesRead=0x31e72c*=0xdb10, lpOverlapped=0x0) returned 1 [0142.615] CreateFileW (lpFileName="C:\\Windows\\Microsoft.NET\\Framework\\v2.0.50727\\InstallMembership.sql" (normalized: "c:\\windows\\microsoft.net\\framework\\v2.0.50727\\installmembership.sql"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x274 [0142.616] GetFileType (hFile=0x274) returned 0x1 [0142.616] GetFileType (hFile=0x274) returned 0x1 [0142.616] WriteFile (in: hFile=0x274, lpBuffer=0x271c50c*, nNumberOfBytesToWrite=0xdb10, lpNumberOfBytesWritten=0x31e720, lpOverlapped=0x0 | out: lpBuffer=0x271c50c*, lpNumberOfBytesWritten=0x31e720*=0xdb10, lpOverlapped=0x0) returned 1 [0142.618] MoveFileW (lpExistingFileName="C:\\Windows\\Microsoft.NET\\Framework\\v2.0.50727\\InstallMembership.sql" (normalized: "c:\\windows\\microsoft.net\\framework\\v2.0.50727\\installmembership.sql"), lpNewFileName="C:\\Windows\\Microsoft.NET\\Framework\\v2.0.50727\\InstallMembership.sql.[neftet@tutanota.com].boom" (normalized: "c:\\windows\\microsoft.net\\framework\\v2.0.50727\\installmembership.sql.[neftet@tutanota.com].boom")) returned 1 [0142.619] CreateFileW (lpFileName="C:\\Windows\\Microsoft.NET\\Framework\\v2.0.50727\\InstallPersistSqlState.sql" (normalized: "c:\\windows\\microsoft.net\\framework\\v2.0.50727\\installpersistsqlstate.sql"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x274 [0142.619] GetFileType (hFile=0x274) returned 0x1 [0142.619] GetFileType (hFile=0x274) returned 0x1 [0142.619] GetFileSize (in: hFile=0x274, lpFileSizeHigh=0x31e780 | out: lpFileSizeHigh=0x31e780*=0x0) returned 0xcc80 [0142.619] ReadFile (in: hFile=0x274, lpBuffer=0x272b65c, nNumberOfBytesToRead=0xcc80, lpNumberOfBytesRead=0x31e72c, lpOverlapped=0x0 | out: lpBuffer=0x272b65c*, lpNumberOfBytesRead=0x31e72c*=0xcc80, lpOverlapped=0x0) returned 1 [0142.621] CreateFileW (lpFileName="C:\\Windows\\Microsoft.NET\\Framework\\v2.0.50727\\InstallPersistSqlState.sql" (normalized: "c:\\windows\\microsoft.net\\framework\\v2.0.50727\\installpersistsqlstate.sql"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x274 [0142.622] GetFileType (hFile=0x274) returned 0x1 [0142.622] GetFileType (hFile=0x274) returned 0x1 [0142.622] WriteFile (in: hFile=0x274, lpBuffer=0x27386f0*, nNumberOfBytesToWrite=0xcc80, lpNumberOfBytesWritten=0x31e720, lpOverlapped=0x0 | out: lpBuffer=0x27386f0*, lpNumberOfBytesWritten=0x31e720*=0xcc80, lpOverlapped=0x0) returned 1 [0142.623] MoveFileW (lpExistingFileName="C:\\Windows\\Microsoft.NET\\Framework\\v2.0.50727\\InstallPersistSqlState.sql" (normalized: "c:\\windows\\microsoft.net\\framework\\v2.0.50727\\installpersistsqlstate.sql"), lpNewFileName="C:\\Windows\\Microsoft.NET\\Framework\\v2.0.50727\\InstallPersistSqlState.sql.[neftet@tutanota.com].boom" (normalized: "c:\\windows\\microsoft.net\\framework\\v2.0.50727\\installpersistsqlstate.sql.[neftet@tutanota.com].boom")) returned 1 [0142.624] CreateFileW (lpFileName="C:\\Windows\\Microsoft.NET\\Framework\\v2.0.50727\\InstallPersonalization.sql" (normalized: "c:\\windows\\microsoft.net\\framework\\v2.0.50727\\installpersonalization.sql"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x274 [0142.624] GetFileType (hFile=0x274) returned 0x1 [0142.624] GetFileType (hFile=0x274) returned 0x1 [0142.624] GetFileSize (in: hFile=0x274, lpFileSizeHigh=0x31e780 | out: lpFileSizeHigh=0x31e780*=0x0) returned 0x8890 [0142.624] ReadFile (in: hFile=0x274, lpBuffer=0x27469e4, nNumberOfBytesToRead=0x8890, lpNumberOfBytesRead=0x31e72c, lpOverlapped=0x0 | out: lpBuffer=0x27469e4*, lpNumberOfBytesRead=0x31e72c*=0x8890, lpOverlapped=0x0) returned 1 [0142.626] CreateFileW (lpFileName="C:\\Windows\\Microsoft.NET\\Framework\\v2.0.50727\\InstallPersonalization.sql" (normalized: "c:\\windows\\microsoft.net\\framework\\v2.0.50727\\installpersonalization.sql"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x274 [0142.627] GetFileType (hFile=0x274) returned 0x1 [0142.627] GetFileType (hFile=0x274) returned 0x1 [0142.627] WriteFile (in: hFile=0x274, lpBuffer=0x274f688*, nNumberOfBytesToWrite=0x8890, lpNumberOfBytesWritten=0x31e720, lpOverlapped=0x0 | out: lpBuffer=0x274f688*, lpNumberOfBytesWritten=0x31e720*=0x8890, lpOverlapped=0x0) returned 1 [0142.628] MoveFileW (lpExistingFileName="C:\\Windows\\Microsoft.NET\\Framework\\v2.0.50727\\InstallPersonalization.sql" (normalized: "c:\\windows\\microsoft.net\\framework\\v2.0.50727\\installpersonalization.sql"), lpNewFileName="C:\\Windows\\Microsoft.NET\\Framework\\v2.0.50727\\InstallPersonalization.sql.[neftet@tutanota.com].boom" (normalized: "c:\\windows\\microsoft.net\\framework\\v2.0.50727\\installpersonalization.sql.[neftet@tutanota.com].boom")) returned 1 [0142.629] CreateFileW (lpFileName="C:\\Windows\\Microsoft.NET\\Framework\\v2.0.50727\\InstallRoles.sql" (normalized: "c:\\windows\\microsoft.net\\framework\\v2.0.50727\\installroles.sql"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x274 [0142.629] GetFileType (hFile=0x274) returned 0x1 [0142.629] GetFileType (hFile=0x274) returned 0x1 [0142.629] GetFileSize (in: hFile=0x274, lpFileSizeHigh=0x31e780 | out: lpFileSizeHigh=0x31e780*=0x0) returned 0x85e0 [0142.629] ReadFile (in: hFile=0x274, lpBuffer=0x275957c, nNumberOfBytesToRead=0x85e0, lpNumberOfBytesRead=0x31e72c, lpOverlapped=0x0 | out: lpBuffer=0x275957c*, lpNumberOfBytesRead=0x31e72c*=0x85e0, lpOverlapped=0x0) returned 1 [0142.631] CreateFileW (lpFileName="C:\\Windows\\Microsoft.NET\\Framework\\v2.0.50727\\InstallRoles.sql" (normalized: "c:\\windows\\microsoft.net\\framework\\v2.0.50727\\installroles.sql"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x274 [0142.635] GetFileType (hFile=0x274) returned 0x1 [0142.635] GetFileType (hFile=0x274) returned 0x1 [0142.635] WriteFile (in: hFile=0x274, lpBuffer=0x2761f70*, nNumberOfBytesToWrite=0x85e0, lpNumberOfBytesWritten=0x31e720, lpOverlapped=0x0 | out: lpBuffer=0x2761f70*, lpNumberOfBytesWritten=0x31e720*=0x85e0, lpOverlapped=0x0) returned 1 [0142.636] MoveFileW (lpExistingFileName="C:\\Windows\\Microsoft.NET\\Framework\\v2.0.50727\\InstallRoles.sql" (normalized: "c:\\windows\\microsoft.net\\framework\\v2.0.50727\\installroles.sql"), lpNewFileName="C:\\Windows\\Microsoft.NET\\Framework\\v2.0.50727\\InstallRoles.sql.[neftet@tutanota.com].boom" (normalized: "c:\\windows\\microsoft.net\\framework\\v2.0.50727\\installroles.sql.[neftet@tutanota.com].boom")) returned 1 [0142.637] CreateFileW (lpFileName="C:\\Windows\\Microsoft.NET\\Framework\\v2.0.50727\\InstallSqlState.sql" (normalized: "c:\\windows\\microsoft.net\\framework\\v2.0.50727\\installsqlstate.sql"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x274 [0142.637] GetFileType (hFile=0x274) returned 0x1 [0142.637] GetFileType (hFile=0x274) returned 0x1 [0142.637] GetFileSize (in: hFile=0x274, lpFileSizeHigh=0x31e780 | out: lpFileSizeHigh=0x31e780*=0x0) returned 0xcbb0 [0142.637] ReadFile (in: hFile=0x274, lpBuffer=0x276bb40, nNumberOfBytesToRead=0xcbb0, lpNumberOfBytesRead=0x31e72c, lpOverlapped=0x0 | out: lpBuffer=0x276bb40*, lpNumberOfBytesRead=0x31e72c*=0xcbb0, lpOverlapped=0x0) returned 1 [0142.639] CreateFileW (lpFileName="C:\\Windows\\Microsoft.NET\\Framework\\v2.0.50727\\InstallSqlState.sql" (normalized: "c:\\windows\\microsoft.net\\framework\\v2.0.50727\\installsqlstate.sql"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x274 [0142.640] GetFileType (hFile=0x274) returned 0x1 [0142.640] GetFileType (hFile=0x274) returned 0x1 [0142.640] WriteFile (in: hFile=0x274, lpBuffer=0x2778b04*, nNumberOfBytesToWrite=0xcbb0, lpNumberOfBytesWritten=0x31e720, lpOverlapped=0x0 | out: lpBuffer=0x2778b04*, lpNumberOfBytesWritten=0x31e720*=0xcbb0, lpOverlapped=0x0) returned 1 [0142.642] MoveFileW (lpExistingFileName="C:\\Windows\\Microsoft.NET\\Framework\\v2.0.50727\\InstallSqlState.sql" (normalized: "c:\\windows\\microsoft.net\\framework\\v2.0.50727\\installsqlstate.sql"), lpNewFileName="C:\\Windows\\Microsoft.NET\\Framework\\v2.0.50727\\InstallSqlState.sql.[neftet@tutanota.com].boom" (normalized: "c:\\windows\\microsoft.net\\framework\\v2.0.50727\\installsqlstate.sql.[neftet@tutanota.com].boom")) returned 1 [0142.642] CreateFileW (lpFileName="C:\\Windows\\Microsoft.NET\\Framework\\v2.0.50727\\InstallSqlStateTemplate.sql" (normalized: "c:\\windows\\microsoft.net\\framework\\v2.0.50727\\installsqlstatetemplate.sql"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x274 [0142.642] GetFileType (hFile=0x274) returned 0x1 [0142.642] GetFileType (hFile=0x274) returned 0x1 [0142.643] GetFileSize (in: hFile=0x274, lpFileSizeHigh=0x31e780 | out: lpFileSizeHigh=0x31e780*=0x0) returned 0xd290 [0142.643] ReadFile (in: hFile=0x274, lpBuffer=0x2786ce0, nNumberOfBytesToRead=0xd290, lpNumberOfBytesRead=0x31e72c, lpOverlapped=0x0 | out: lpBuffer=0x2786ce0*, lpNumberOfBytesRead=0x31e72c*=0xd290, lpOverlapped=0x0) returned 1 [0142.645] CreateFileW (lpFileName="C:\\Windows\\Microsoft.NET\\Framework\\v2.0.50727\\InstallSqlStateTemplate.sql" (normalized: "c:\\windows\\microsoft.net\\framework\\v2.0.50727\\installsqlstatetemplate.sql"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x274 [0142.646] GetFileType (hFile=0x274) returned 0x1 [0142.646] GetFileType (hFile=0x274) returned 0x1 [0142.646] WriteFile (in: hFile=0x274, lpBuffer=0x2794384*, nNumberOfBytesToWrite=0xd290, lpNumberOfBytesWritten=0x31e720, lpOverlapped=0x0 | out: lpBuffer=0x2794384*, lpNumberOfBytesWritten=0x31e720*=0xd290, lpOverlapped=0x0) returned 1 [0142.647] MoveFileW (lpExistingFileName="C:\\Windows\\Microsoft.NET\\Framework\\v2.0.50727\\InstallSqlStateTemplate.sql" (normalized: "c:\\windows\\microsoft.net\\framework\\v2.0.50727\\installsqlstatetemplate.sql"), lpNewFileName="C:\\Windows\\Microsoft.NET\\Framework\\v2.0.50727\\InstallSqlStateTemplate.sql.[neftet@tutanota.com].boom" (normalized: "c:\\windows\\microsoft.net\\framework\\v2.0.50727\\installsqlstatetemplate.sql.[neftet@tutanota.com].boom")) returned 1 [0142.648] CreateFileW (lpFileName="C:\\Windows\\Microsoft.NET\\Framework\\v2.0.50727\\InstallWebEventSqlProvider.sql" (normalized: "c:\\windows\\microsoft.net\\framework\\v2.0.50727\\installwebeventsqlprovider.sql"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x274 [0142.648] GetFileType (hFile=0x274) returned 0x1 [0142.648] GetFileType (hFile=0x274) returned 0x1 [0142.648] GetFileSize (in: hFile=0x274, lpFileSizeHigh=0x31e780 | out: lpFileSizeHigh=0x31e780*=0x0) returned 0x1940 [0142.648] ReadFile (in: hFile=0x274, lpBuffer=0x27a2cd0, nNumberOfBytesToRead=0x1940, lpNumberOfBytesRead=0x31e72c, lpOverlapped=0x0 | out: lpBuffer=0x27a2cd0*, lpNumberOfBytesRead=0x31e72c*=0x1940, lpOverlapped=0x0) returned 1 [0142.649] CreateFileW (lpFileName="C:\\Windows\\Microsoft.NET\\Framework\\v2.0.50727\\InstallWebEventSqlProvider.sql" (normalized: "c:\\windows\\microsoft.net\\framework\\v2.0.50727\\installwebeventsqlprovider.sql"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x274 [0142.650] GetFileType (hFile=0x274) returned 0x1 [0142.650] GetFileType (hFile=0x274) returned 0x1 [0142.650] WriteFile (in: hFile=0x274, lpBuffer=0x27a4a24*, nNumberOfBytesToWrite=0x1940, lpNumberOfBytesWritten=0x31e720, lpOverlapped=0x0 | out: lpBuffer=0x27a4a24*, lpNumberOfBytesWritten=0x31e720*=0x1940, lpOverlapped=0x0) returned 1 [0142.651] MoveFileW (lpExistingFileName="C:\\Windows\\Microsoft.NET\\Framework\\v2.0.50727\\InstallWebEventSqlProvider.sql" (normalized: "c:\\windows\\microsoft.net\\framework\\v2.0.50727\\installwebeventsqlprovider.sql"), lpNewFileName="C:\\Windows\\Microsoft.NET\\Framework\\v2.0.50727\\InstallWebEventSqlProvider.sql.[neftet@tutanota.com].boom" (normalized: "c:\\windows\\microsoft.net\\framework\\v2.0.50727\\installwebeventsqlprovider.sql.[neftet@tutanota.com].boom")) returned 1 [0142.652] CreateFileW (lpFileName="C:\\Windows\\Microsoft.NET\\Framework\\v2.0.50727\\UninstallCommon.sql" (normalized: "c:\\windows\\microsoft.net\\framework\\v2.0.50727\\uninstallcommon.sql"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x274 [0142.652] GetFileType (hFile=0x274) returned 0x1 [0142.652] GetFileType (hFile=0x274) returned 0x1 [0142.652] GetFileSize (in: hFile=0x274, lpFileSizeHigh=0x31e780 | out: lpFileSizeHigh=0x31e780*=0x0) returned 0xf40 [0142.652] ReadFile (in: hFile=0x274, lpBuffer=0x27a9350, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x31e72c, lpOverlapped=0x0 | out: lpBuffer=0x27a9350*, lpNumberOfBytesRead=0x31e72c*=0xf40, lpOverlapped=0x0) returned 1 [0142.653] CreateFileW (lpFileName="C:\\Windows\\Microsoft.NET\\Framework\\v2.0.50727\\UninstallCommon.sql" (normalized: "c:\\windows\\microsoft.net\\framework\\v2.0.50727\\uninstallcommon.sql"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x274 [0142.653] GetFileType (hFile=0x274) returned 0x1 [0142.654] GetFileType (hFile=0x274) returned 0x1 [0142.654] WriteFile (in: hFile=0x274, lpBuffer=0x27ac7e8*, nNumberOfBytesToWrite=0xf40, lpNumberOfBytesWritten=0x31e6f4, lpOverlapped=0x0 | out: lpBuffer=0x27ac7e8*, lpNumberOfBytesWritten=0x31e6f4*=0xf40, lpOverlapped=0x0) returned 1 [0142.654] MoveFileW (lpExistingFileName="C:\\Windows\\Microsoft.NET\\Framework\\v2.0.50727\\UninstallCommon.sql" (normalized: "c:\\windows\\microsoft.net\\framework\\v2.0.50727\\uninstallcommon.sql"), lpNewFileName="C:\\Windows\\Microsoft.NET\\Framework\\v2.0.50727\\UninstallCommon.sql.[neftet@tutanota.com].boom" (normalized: "c:\\windows\\microsoft.net\\framework\\v2.0.50727\\uninstallcommon.sql.[neftet@tutanota.com].boom")) returned 1 [0142.656] CreateFileW (lpFileName="C:\\Windows\\Microsoft.NET\\Framework\\v2.0.50727\\UninstallMembership.sql" (normalized: "c:\\windows\\microsoft.net\\framework\\v2.0.50727\\uninstallmembership.sql"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x274 [0142.656] GetFileType (hFile=0x274) returned 0x1 [0142.656] GetFileType (hFile=0x274) returned 0x1 [0142.657] GetFileSize (in: hFile=0x274, lpFileSizeHigh=0x31e780 | out: lpFileSizeHigh=0x31e780*=0x0) returned 0x1b00 [0142.657] ReadFile (in: hFile=0x274, lpBuffer=0x27adccc, nNumberOfBytesToRead=0x1b00, lpNumberOfBytesRead=0x31e72c, lpOverlapped=0x0 | out: lpBuffer=0x27adccc*, lpNumberOfBytesRead=0x31e72c*=0x1b00, lpOverlapped=0x0) returned 1 [0142.658] CreateFileW (lpFileName="C:\\Windows\\Microsoft.NET\\Framework\\v2.0.50727\\UninstallMembership.sql" (normalized: "c:\\windows\\microsoft.net\\framework\\v2.0.50727\\uninstallmembership.sql"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x274 [0142.658] GetFileType (hFile=0x274) returned 0x1 [0142.658] GetFileType (hFile=0x274) returned 0x1 [0142.658] WriteFile (in: hFile=0x274, lpBuffer=0x27afbe0*, nNumberOfBytesToWrite=0x1b00, lpNumberOfBytesWritten=0x31e720, lpOverlapped=0x0 | out: lpBuffer=0x27afbe0*, lpNumberOfBytesWritten=0x31e720*=0x1b00, lpOverlapped=0x0) returned 1 [0142.660] MoveFileW (lpExistingFileName="C:\\Windows\\Microsoft.NET\\Framework\\v2.0.50727\\UninstallMembership.sql" (normalized: "c:\\windows\\microsoft.net\\framework\\v2.0.50727\\uninstallmembership.sql"), lpNewFileName="C:\\Windows\\Microsoft.NET\\Framework\\v2.0.50727\\UninstallMembership.sql.[neftet@tutanota.com].boom" (normalized: "c:\\windows\\microsoft.net\\framework\\v2.0.50727\\uninstallmembership.sql.[neftet@tutanota.com].boom")) returned 1 [0142.661] CreateFileW (lpFileName="C:\\Windows\\Microsoft.NET\\Framework\\v2.0.50727\\UninstallPersistSqlState.sql" (normalized: "c:\\windows\\microsoft.net\\framework\\v2.0.50727\\uninstallpersistsqlstate.sql"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x274 [0142.661] GetFileType (hFile=0x274) returned 0x1 [0142.661] GetFileType (hFile=0x274) returned 0x1 [0142.661] GetFileSize (in: hFile=0x274, lpFileSizeHigh=0x31e780 | out: lpFileSizeHigh=0x31e780*=0x0) returned 0x27e0 [0142.661] ReadFile (in: hFile=0x274, lpBuffer=0x27b2d3c, nNumberOfBytesToRead=0x27e0, lpNumberOfBytesRead=0x31e72c, lpOverlapped=0x0 | out: lpBuffer=0x27b2d3c*, lpNumberOfBytesRead=0x31e72c*=0x27e0, lpOverlapped=0x0) returned 1 [0142.662] CreateFileW (lpFileName="C:\\Windows\\Microsoft.NET\\Framework\\v2.0.50727\\UninstallPersistSqlState.sql" (normalized: "c:\\windows\\microsoft.net\\framework\\v2.0.50727\\uninstallpersistsqlstate.sql"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x274 [0142.663] GetFileType (hFile=0x274) returned 0x1 [0142.663] GetFileType (hFile=0x274) returned 0x1 [0142.663] WriteFile (in: hFile=0x274, lpBuffer=0x27b5930*, nNumberOfBytesToWrite=0x27e0, lpNumberOfBytesWritten=0x31e720, lpOverlapped=0x0 | out: lpBuffer=0x27b5930*, lpNumberOfBytesWritten=0x31e720*=0x27e0, lpOverlapped=0x0) returned 1 [0142.664] MoveFileW (lpExistingFileName="C:\\Windows\\Microsoft.NET\\Framework\\v2.0.50727\\UninstallPersistSqlState.sql" (normalized: "c:\\windows\\microsoft.net\\framework\\v2.0.50727\\uninstallpersistsqlstate.sql"), lpNewFileName="C:\\Windows\\Microsoft.NET\\Framework\\v2.0.50727\\UninstallPersistSqlState.sql.[neftet@tutanota.com].boom" (normalized: "c:\\windows\\microsoft.net\\framework\\v2.0.50727\\uninstallpersistsqlstate.sql.[neftet@tutanota.com].boom")) returned 1 [0142.665] CreateFileW (lpFileName="C:\\Windows\\Microsoft.NET\\Framework\\v2.0.50727\\UninstallPersonalization.sql" (normalized: "c:\\windows\\microsoft.net\\framework\\v2.0.50727\\uninstallpersonalization.sql"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x274 [0142.665] GetFileType (hFile=0x274) returned 0x1 [0142.665] GetFileType (hFile=0x274) returned 0x1 [0142.665] GetFileSize (in: hFile=0x274, lpFileSizeHigh=0x31e780 | out: lpFileSizeHigh=0x31e780*=0x0) returned 0x1d50 [0142.665] ReadFile (in: hFile=0x274, lpBuffer=0x27b97a0, nNumberOfBytesToRead=0x1d50, lpNumberOfBytesRead=0x31e72c, lpOverlapped=0x0 | out: lpBuffer=0x27b97a0*, lpNumberOfBytesRead=0x31e72c*=0x1d50, lpOverlapped=0x0) returned 1 [0142.666] CreateFileW (lpFileName="C:\\Windows\\Microsoft.NET\\Framework\\v2.0.50727\\UninstallPersonalization.sql" (normalized: "c:\\windows\\microsoft.net\\framework\\v2.0.50727\\uninstallpersonalization.sql"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x274 [0142.667] GetFileType (hFile=0x274) returned 0x1 [0142.667] GetFileType (hFile=0x274) returned 0x1 [0142.667] WriteFile (in: hFile=0x274, lpBuffer=0x27bb904*, nNumberOfBytesToWrite=0x1d50, lpNumberOfBytesWritten=0x31e720, lpOverlapped=0x0 | out: lpBuffer=0x27bb904*, lpNumberOfBytesWritten=0x31e720*=0x1d50, lpOverlapped=0x0) returned 1 [0142.668] MoveFileW (lpExistingFileName="C:\\Windows\\Microsoft.NET\\Framework\\v2.0.50727\\UninstallPersonalization.sql" (normalized: "c:\\windows\\microsoft.net\\framework\\v2.0.50727\\uninstallpersonalization.sql"), lpNewFileName="C:\\Windows\\Microsoft.NET\\Framework\\v2.0.50727\\UninstallPersonalization.sql.[neftet@tutanota.com].boom" (normalized: "c:\\windows\\microsoft.net\\framework\\v2.0.50727\\uninstallpersonalization.sql.[neftet@tutanota.com].boom")) returned 1 [0142.669] CreateFileW (lpFileName="C:\\Windows\\Microsoft.NET\\Framework\\v2.0.50727\\UninstallRoles.sql" (normalized: "c:\\windows\\microsoft.net\\framework\\v2.0.50727\\uninstallroles.sql"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x274 [0142.669] GetFileType (hFile=0x274) returned 0x1 [0142.669] GetFileType (hFile=0x274) returned 0x1 [0142.669] GetFileSize (in: hFile=0x274, lpFileSizeHigh=0x31e780 | out: lpFileSizeHigh=0x31e780*=0x0) returned 0x16f0 [0142.669] ReadFile (in: hFile=0x274, lpBuffer=0x27becd4, nNumberOfBytesToRead=0x16f0, lpNumberOfBytesRead=0x31e72c, lpOverlapped=0x0 | out: lpBuffer=0x27becd4*, lpNumberOfBytesRead=0x31e72c*=0x16f0, lpOverlapped=0x0) returned 1 [0142.670] CreateFileW (lpFileName="C:\\Windows\\Microsoft.NET\\Framework\\v2.0.50727\\UninstallRoles.sql" (normalized: "c:\\windows\\microsoft.net\\framework\\v2.0.50727\\uninstallroles.sql"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x274 [0142.671] GetFileType (hFile=0x274) returned 0x1 [0142.671] GetFileType (hFile=0x274) returned 0x1 [0142.671] WriteFile (in: hFile=0x274, lpBuffer=0x27c07d8*, nNumberOfBytesToWrite=0x16f0, lpNumberOfBytesWritten=0x31e720, lpOverlapped=0x0 | out: lpBuffer=0x27c07d8*, lpNumberOfBytesWritten=0x31e720*=0x16f0, lpOverlapped=0x0) returned 1 [0142.672] MoveFileW (lpExistingFileName="C:\\Windows\\Microsoft.NET\\Framework\\v2.0.50727\\UninstallRoles.sql" (normalized: "c:\\windows\\microsoft.net\\framework\\v2.0.50727\\uninstallroles.sql"), lpNewFileName="C:\\Windows\\Microsoft.NET\\Framework\\v2.0.50727\\UninstallRoles.sql.[neftet@tutanota.com].boom" (normalized: "c:\\windows\\microsoft.net\\framework\\v2.0.50727\\uninstallroles.sql.[neftet@tutanota.com].boom")) returned 1 [0142.672] CreateFileW (lpFileName="C:\\Windows\\Microsoft.NET\\Framework\\v2.0.50727\\UninstallSqlState.sql" (normalized: "c:\\windows\\microsoft.net\\framework\\v2.0.50727\\uninstallsqlstate.sql"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x274 [0142.672] GetFileType (hFile=0x274) returned 0x1 [0142.672] GetFileType (hFile=0x274) returned 0x1 [0142.673] GetFileSize (in: hFile=0x274, lpFileSizeHigh=0x31e780 | out: lpFileSizeHigh=0x31e780*=0x0) returned 0x25e0 [0142.673] ReadFile (in: hFile=0x274, lpBuffer=0x27c34d4, nNumberOfBytesToRead=0x25e0, lpNumberOfBytesRead=0x31e72c, lpOverlapped=0x0 | out: lpBuffer=0x27c34d4*, lpNumberOfBytesRead=0x31e72c*=0x25e0, lpOverlapped=0x0) returned 1 [0142.674] CreateFileW (lpFileName="C:\\Windows\\Microsoft.NET\\Framework\\v2.0.50727\\UninstallSqlState.sql" (normalized: "c:\\windows\\microsoft.net\\framework\\v2.0.50727\\uninstallsqlstate.sql"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x274 [0142.674] GetFileType (hFile=0x274) returned 0x1 [0142.674] GetFileType (hFile=0x274) returned 0x1 [0142.674] WriteFile (in: hFile=0x274, lpBuffer=0x27c5ec8*, nNumberOfBytesToWrite=0x25e0, lpNumberOfBytesWritten=0x31e720, lpOverlapped=0x0 | out: lpBuffer=0x27c5ec8*, lpNumberOfBytesWritten=0x31e720*=0x25e0, lpOverlapped=0x0) returned 1 [0142.675] MoveFileW (lpExistingFileName="C:\\Windows\\Microsoft.NET\\Framework\\v2.0.50727\\UninstallSqlState.sql" (normalized: "c:\\windows\\microsoft.net\\framework\\v2.0.50727\\uninstallsqlstate.sql"), lpNewFileName="C:\\Windows\\Microsoft.NET\\Framework\\v2.0.50727\\UninstallSqlState.sql.[neftet@tutanota.com].boom" (normalized: "c:\\windows\\microsoft.net\\framework\\v2.0.50727\\uninstallsqlstate.sql.[neftet@tutanota.com].boom")) returned 1 [0142.676] CreateFileW (lpFileName="C:\\Windows\\Microsoft.NET\\Framework\\v2.0.50727\\UninstallSqlStateTemplate.sql" (normalized: "c:\\windows\\microsoft.net\\framework\\v2.0.50727\\uninstallsqlstatetemplate.sql"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x274 [0142.676] GetFileType (hFile=0x274) returned 0x1 [0142.676] GetFileType (hFile=0x274) returned 0x1 [0142.676] GetFileSize (in: hFile=0x274, lpFileSizeHigh=0x31e780 | out: lpFileSizeHigh=0x31e780*=0x0) returned 0x2e20 [0142.676] ReadFile (in: hFile=0x274, lpBuffer=0x27c9af0, nNumberOfBytesToRead=0x2e20, lpNumberOfBytesRead=0x31e72c, lpOverlapped=0x0 | out: lpBuffer=0x27c9af0*, lpNumberOfBytesRead=0x31e72c*=0x2e20, lpOverlapped=0x0) returned 1 [0142.677] CreateFileW (lpFileName="C:\\Windows\\Microsoft.NET\\Framework\\v2.0.50727\\UninstallSqlStateTemplate.sql" (normalized: "c:\\windows\\microsoft.net\\framework\\v2.0.50727\\uninstallsqlstatetemplate.sql"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x274 [0142.679] GetFileType (hFile=0x274) returned 0x1 [0142.679] GetFileType (hFile=0x274) returned 0x1 [0142.679] WriteFile (in: hFile=0x274, lpBuffer=0x27ccd24*, nNumberOfBytesToWrite=0x2e20, lpNumberOfBytesWritten=0x31e720, lpOverlapped=0x0 | out: lpBuffer=0x27ccd24*, lpNumberOfBytesWritten=0x31e720*=0x2e20, lpOverlapped=0x0) returned 1 [0142.680] MoveFileW (lpExistingFileName="C:\\Windows\\Microsoft.NET\\Framework\\v2.0.50727\\UninstallSqlStateTemplate.sql" (normalized: "c:\\windows\\microsoft.net\\framework\\v2.0.50727\\uninstallsqlstatetemplate.sql"), lpNewFileName="C:\\Windows\\Microsoft.NET\\Framework\\v2.0.50727\\UninstallSqlStateTemplate.sql.[neftet@tutanota.com].boom" (normalized: "c:\\windows\\microsoft.net\\framework\\v2.0.50727\\uninstallsqlstatetemplate.sql.[neftet@tutanota.com].boom")) returned 1 [0142.680] CreateFileW (lpFileName="C:\\Windows\\Microsoft.NET\\Framework\\v2.0.50727\\UninstallWebEventSqlProvider.sql" (normalized: "c:\\windows\\microsoft.net\\framework\\v2.0.50727\\uninstallwebeventsqlprovider.sql"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x274 [0142.680] GetFileType (hFile=0x274) returned 0x1 [0142.680] GetFileType (hFile=0x274) returned 0x1 [0142.681] GetFileSize (in: hFile=0x274, lpFileSizeHigh=0x31e780 | out: lpFileSizeHigh=0x31e780*=0x0) returned 0xbc0 [0142.681] ReadFile (in: hFile=0x274, lpBuffer=0x27d1db8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x31e72c, lpOverlapped=0x0 | out: lpBuffer=0x27d1db8*, lpNumberOfBytesRead=0x31e72c*=0xbc0, lpOverlapped=0x0) returned 1 [0142.681] CreateFileW (lpFileName="C:\\Windows\\Microsoft.NET\\Framework\\v2.0.50727\\UninstallWebEventSqlProvider.sql" (normalized: "c:\\windows\\microsoft.net\\framework\\v2.0.50727\\uninstallwebeventsqlprovider.sql"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x274 [0142.682] GetFileType (hFile=0x274) returned 0x1 [0142.682] GetFileType (hFile=0x274) returned 0x1 [0142.683] MoveFileW (lpExistingFileName="C:\\Windows\\Microsoft.NET\\Framework\\v2.0.50727\\UninstallWebEventSqlProvider.sql" (normalized: "c:\\windows\\microsoft.net\\framework\\v2.0.50727\\uninstallwebeventsqlprovider.sql"), lpNewFileName="C:\\Windows\\Microsoft.NET\\Framework\\v2.0.50727\\UninstallWebEventSqlProvider.sql.[neftet@tutanota.com].boom" (normalized: "c:\\windows\\microsoft.net\\framework\\v2.0.50727\\uninstallwebeventsqlprovider.sql.[neftet@tutanota.com].boom")) returned 1 [0142.684] CreateFileW (lpFileName="C:\\Windows\\Microsoft.NET\\Framework\\v2.0.50727\\ASP.NETWebAdminFiles\\WebAdminHelp.aspx" (normalized: "c:\\windows\\microsoft.net\\framework\\v2.0.50727\\asp.netwebadminfiles\\webadminhelp.aspx"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x274 [0142.684] GetFileType (hFile=0x274) returned 0x1 [0142.685] GetFileType (hFile=0x274) returned 0x1 [0142.685] GetFileSize (in: hFile=0x274, lpFileSizeHigh=0x31e708 | out: lpFileSizeHigh=0x31e708*=0x0) returned 0x1a60 [0142.685] ReadFile (in: hFile=0x274, lpBuffer=0x27dc440, nNumberOfBytesToRead=0x1a60, lpNumberOfBytesRead=0x31e6b4, lpOverlapped=0x0 | out: lpBuffer=0x27dc440*, lpNumberOfBytesRead=0x31e6b4*=0x1a60, lpOverlapped=0x0) returned 1 [0142.686] CreateFileW (lpFileName="C:\\Windows\\Microsoft.NET\\Framework\\v2.0.50727\\ASP.NETWebAdminFiles\\WebAdminHelp.aspx" (normalized: "c:\\windows\\microsoft.net\\framework\\v2.0.50727\\asp.netwebadminfiles\\webadminhelp.aspx"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x274 [0142.686] GetFileType (hFile=0x274) returned 0x1 [0142.686] GetFileType (hFile=0x274) returned 0x1 [0142.686] WriteFile (in: hFile=0x274, lpBuffer=0x27de2b4*, nNumberOfBytesToWrite=0x1a60, lpNumberOfBytesWritten=0x31e6a8, lpOverlapped=0x0 | out: lpBuffer=0x27de2b4*, lpNumberOfBytesWritten=0x31e6a8*=0x1a60, lpOverlapped=0x0) returned 1 [0142.687] MoveFileW (lpExistingFileName="C:\\Windows\\Microsoft.NET\\Framework\\v2.0.50727\\ASP.NETWebAdminFiles\\WebAdminHelp.aspx" (normalized: "c:\\windows\\microsoft.net\\framework\\v2.0.50727\\asp.netwebadminfiles\\webadminhelp.aspx"), lpNewFileName="C:\\Windows\\Microsoft.NET\\Framework\\v2.0.50727\\ASP.NETWebAdminFiles\\WebAdminHelp.aspx.[neftet@tutanota.com].boom" (normalized: "c:\\windows\\microsoft.net\\framework\\v2.0.50727\\asp.netwebadminfiles\\webadminhelp.aspx.[neftet@tutanota.com].boom")) returned 1 [0142.688] CreateFileW (lpFileName="C:\\Windows\\Microsoft.NET\\Framework\\v2.0.50727\\ASP.NETWebAdminFiles\\WebAdminHelp_Application.aspx" (normalized: "c:\\windows\\microsoft.net\\framework\\v2.0.50727\\asp.netwebadminfiles\\webadminhelp_application.aspx"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x274 [0142.688] GetFileType (hFile=0x274) returned 0x1 [0142.688] GetFileType (hFile=0x274) returned 0x1 [0142.688] GetFileSize (in: hFile=0x274, lpFileSizeHigh=0x31e708 | out: lpFileSizeHigh=0x31e708*=0x0) returned 0x3510 [0142.688] ReadFile (in: hFile=0x274, lpBuffer=0x27e1408, nNumberOfBytesToRead=0x3510, lpNumberOfBytesRead=0x31e6b4, lpOverlapped=0x0 | out: lpBuffer=0x27e1408*, lpNumberOfBytesRead=0x31e6b4*=0x3510, lpOverlapped=0x0) returned 1 [0142.689] CreateFileW (lpFileName="C:\\Windows\\Microsoft.NET\\Framework\\v2.0.50727\\ASP.NETWebAdminFiles\\WebAdminHelp_Application.aspx" (normalized: "c:\\windows\\microsoft.net\\framework\\v2.0.50727\\asp.netwebadminfiles\\webadminhelp_application.aspx"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x274 [0142.690] GetFileType (hFile=0x274) returned 0x1 [0142.690] GetFileType (hFile=0x274) returned 0x1 [0142.690] WriteFile (in: hFile=0x274, lpBuffer=0x27e4d2c*, nNumberOfBytesToWrite=0x3510, lpNumberOfBytesWritten=0x31e6a8, lpOverlapped=0x0 | out: lpBuffer=0x27e4d2c*, lpNumberOfBytesWritten=0x31e6a8*=0x3510, lpOverlapped=0x0) returned 1 [0142.691] MoveFileW (lpExistingFileName="C:\\Windows\\Microsoft.NET\\Framework\\v2.0.50727\\ASP.NETWebAdminFiles\\WebAdminHelp_Application.aspx" (normalized: "c:\\windows\\microsoft.net\\framework\\v2.0.50727\\asp.netwebadminfiles\\webadminhelp_application.aspx"), lpNewFileName="C:\\Windows\\Microsoft.NET\\Framework\\v2.0.50727\\ASP.NETWebAdminFiles\\WebAdminHelp_Application.aspx.[neftet@tutanota.com].boom" (normalized: "c:\\windows\\microsoft.net\\framework\\v2.0.50727\\asp.netwebadminfiles\\webadminhelp_application.aspx.[neftet@tutanota.com].boom")) returned 1 [0142.692] CreateFileW (lpFileName="C:\\Windows\\Microsoft.NET\\Framework\\v2.0.50727\\ASP.NETWebAdminFiles\\WebAdminHelp_Internals.aspx" (normalized: "c:\\windows\\microsoft.net\\framework\\v2.0.50727\\asp.netwebadminfiles\\webadminhelp_internals.aspx"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x274 [0142.692] GetFileType (hFile=0x274) returned 0x1 [0142.692] GetFileType (hFile=0x274) returned 0x1 [0142.692] GetFileSize (in: hFile=0x274, lpFileSizeHigh=0x31e708 | out: lpFileSizeHigh=0x31e708*=0x0) returned 0xff0 [0142.692] ReadFile (in: hFile=0x274, lpBuffer=0x27ea99c, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x31e6b4, lpOverlapped=0x0 | out: lpBuffer=0x27ea99c*, lpNumberOfBytesRead=0x31e6b4*=0xff0, lpOverlapped=0x0) returned 1 [0142.693] CreateFileW (lpFileName="C:\\Windows\\Microsoft.NET\\Framework\\v2.0.50727\\ASP.NETWebAdminFiles\\WebAdminHelp_Internals.aspx" (normalized: "c:\\windows\\microsoft.net\\framework\\v2.0.50727\\asp.netwebadminfiles\\webadminhelp_internals.aspx"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x274 [0142.694] GetFileType (hFile=0x274) returned 0x1 [0142.694] GetFileType (hFile=0x274) returned 0x1 [0142.695] MoveFileW (lpExistingFileName="C:\\Windows\\Microsoft.NET\\Framework\\v2.0.50727\\ASP.NETWebAdminFiles\\WebAdminHelp_Internals.aspx" (normalized: "c:\\windows\\microsoft.net\\framework\\v2.0.50727\\asp.netwebadminfiles\\webadminhelp_internals.aspx"), lpNewFileName="C:\\Windows\\Microsoft.NET\\Framework\\v2.0.50727\\ASP.NETWebAdminFiles\\WebAdminHelp_Internals.aspx.[neftet@tutanota.com].boom" (normalized: "c:\\windows\\microsoft.net\\framework\\v2.0.50727\\asp.netwebadminfiles\\webadminhelp_internals.aspx.[neftet@tutanota.com].boom")) returned 1 [0142.695] CreateFileW (lpFileName="C:\\Windows\\Microsoft.NET\\Framework\\v2.0.50727\\ASP.NETWebAdminFiles\\WebAdminHelp_Provider.aspx" (normalized: "c:\\windows\\microsoft.net\\framework\\v2.0.50727\\asp.netwebadminfiles\\webadminhelp_provider.aspx"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x274 [0142.695] GetFileType (hFile=0x274) returned 0x1 [0142.695] GetFileType (hFile=0x274) returned 0x1 [0142.695] GetFileSize (in: hFile=0x274, lpFileSizeHigh=0x31e708 | out: lpFileSizeHigh=0x31e708*=0x0) returned 0x1a30 [0142.696] ReadFile (in: hFile=0x274, lpBuffer=0x27ef4f8, nNumberOfBytesToRead=0x1a30, lpNumberOfBytesRead=0x31e6b4, lpOverlapped=0x0 | out: lpBuffer=0x27ef4f8*, lpNumberOfBytesRead=0x31e6b4*=0x1a30, lpOverlapped=0x0) returned 1 [0142.696] CreateFileW (lpFileName="C:\\Windows\\Microsoft.NET\\Framework\\v2.0.50727\\ASP.NETWebAdminFiles\\WebAdminHelp_Provider.aspx" (normalized: "c:\\windows\\microsoft.net\\framework\\v2.0.50727\\asp.netwebadminfiles\\webadminhelp_provider.aspx"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x274 [0142.697] GetFileType (hFile=0x274) returned 0x1 [0142.697] GetFileType (hFile=0x274) returned 0x1 [0142.697] WriteFile (in: hFile=0x274, lpBuffer=0x27f133c*, nNumberOfBytesToWrite=0x1a30, lpNumberOfBytesWritten=0x31e6a8, lpOverlapped=0x0 | out: lpBuffer=0x27f133c*, lpNumberOfBytesWritten=0x31e6a8*=0x1a30, lpOverlapped=0x0) returned 1 [0142.698] MoveFileW (lpExistingFileName="C:\\Windows\\Microsoft.NET\\Framework\\v2.0.50727\\ASP.NETWebAdminFiles\\WebAdminHelp_Provider.aspx" (normalized: "c:\\windows\\microsoft.net\\framework\\v2.0.50727\\asp.netwebadminfiles\\webadminhelp_provider.aspx"), lpNewFileName="C:\\Windows\\Microsoft.NET\\Framework\\v2.0.50727\\ASP.NETWebAdminFiles\\WebAdminHelp_Provider.aspx.[neftet@tutanota.com].boom" (normalized: "c:\\windows\\microsoft.net\\framework\\v2.0.50727\\asp.netwebadminfiles\\webadminhelp_provider.aspx.[neftet@tutanota.com].boom")) returned 1 [0142.699] CreateFileW (lpFileName="C:\\Windows\\Microsoft.NET\\Framework\\v2.0.50727\\ASP.NETWebAdminFiles\\WebAdminHelp_Security.aspx" (normalized: "c:\\windows\\microsoft.net\\framework\\v2.0.50727\\asp.netwebadminfiles\\webadminhelp_security.aspx"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x274 [0142.699] GetFileType (hFile=0x274) returned 0x1 [0142.699] GetFileType (hFile=0x274) returned 0x1 [0142.699] GetFileSize (in: hFile=0x274, lpFileSizeHigh=0x31e708 | out: lpFileSizeHigh=0x31e708*=0x0) returned 0x2950 [0142.699] ReadFile (in: hFile=0x274, lpBuffer=0x27f44b0, nNumberOfBytesToRead=0x2950, lpNumberOfBytesRead=0x31e6b4, lpOverlapped=0x0 | out: lpBuffer=0x27f44b0*, lpNumberOfBytesRead=0x31e6b4*=0x2950, lpOverlapped=0x0) returned 1 [0142.700] CreateFileW (lpFileName="C:\\Windows\\Microsoft.NET\\Framework\\v2.0.50727\\ASP.NETWebAdminFiles\\WebAdminHelp_Security.aspx" (normalized: "c:\\windows\\microsoft.net\\framework\\v2.0.50727\\asp.netwebadminfiles\\webadminhelp_security.aspx"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x274 [0142.701] GetFileType (hFile=0x274) returned 0x1 [0142.701] GetFileType (hFile=0x274) returned 0x1 [0142.701] WriteFile (in: hFile=0x274, lpBuffer=0x27f7214*, nNumberOfBytesToWrite=0x2950, lpNumberOfBytesWritten=0x31e6a8, lpOverlapped=0x0 | out: lpBuffer=0x27f7214*, lpNumberOfBytesWritten=0x31e6a8*=0x2950, lpOverlapped=0x0) returned 1 [0142.702] MoveFileW (lpExistingFileName="C:\\Windows\\Microsoft.NET\\Framework\\v2.0.50727\\ASP.NETWebAdminFiles\\WebAdminHelp_Security.aspx" (normalized: "c:\\windows\\microsoft.net\\framework\\v2.0.50727\\asp.netwebadminfiles\\webadminhelp_security.aspx"), lpNewFileName="C:\\Windows\\Microsoft.NET\\Framework\\v2.0.50727\\ASP.NETWebAdminFiles\\WebAdminHelp_Security.aspx.[neftet@tutanota.com].boom" (normalized: "c:\\windows\\microsoft.net\\framework\\v2.0.50727\\asp.netwebadminfiles\\webadminhelp_security.aspx.[neftet@tutanota.com].boom")) returned 1 [0142.718] CreateFileW (lpFileName="C:\\Windows\\Microsoft.NET\\Framework\\v2.0.50727\\CONFIG\\DefaultWsdlHelpGenerator.aspx" (normalized: "c:\\windows\\microsoft.net\\framework\\v2.0.50727\\config\\defaultwsdlhelpgenerator.aspx"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x274 [0142.718] GetFileType (hFile=0x274) returned 0x1 [0142.718] GetFileType (hFile=0x274) returned 0x1 [0142.718] GetFileSize (in: hFile=0x274, lpFileSizeHigh=0x31e708 | out: lpFileSizeHigh=0x31e708*=0x0) returned 0x11330 [0142.719] ReadFile (in: hFile=0x274, lpBuffer=0x282ba14, nNumberOfBytesToRead=0x11330, lpNumberOfBytesRead=0x31e6b4, lpOverlapped=0x0 | out: lpBuffer=0x282ba14*, lpNumberOfBytesRead=0x31e6b4*=0x11330, lpOverlapped=0x0) returned 1 [0142.721] CreateFileW (lpFileName="C:\\Windows\\Microsoft.NET\\Framework\\v2.0.50727\\CONFIG\\DefaultWsdlHelpGenerator.aspx" (normalized: "c:\\windows\\microsoft.net\\framework\\v2.0.50727\\config\\defaultwsdlhelpgenerator.aspx"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x274 [0142.722] GetFileType (hFile=0x274) returned 0x1 [0142.722] GetFileType (hFile=0x274) returned 0x1 [0142.722] WriteFile (in: hFile=0x274, lpBuffer=0x283d158*, nNumberOfBytesToWrite=0x11330, lpNumberOfBytesWritten=0x31e6a8, lpOverlapped=0x0 | out: lpBuffer=0x283d158*, lpNumberOfBytesWritten=0x31e6a8*=0x11330, lpOverlapped=0x0) returned 1 [0142.724] MoveFileW (lpExistingFileName="C:\\Windows\\Microsoft.NET\\Framework\\v2.0.50727\\CONFIG\\DefaultWsdlHelpGenerator.aspx" (normalized: "c:\\windows\\microsoft.net\\framework\\v2.0.50727\\config\\defaultwsdlhelpgenerator.aspx"), lpNewFileName="C:\\Windows\\Microsoft.NET\\Framework\\v2.0.50727\\CONFIG\\DefaultWsdlHelpGenerator.aspx.[neftet@tutanota.com].boom" (normalized: "c:\\windows\\microsoft.net\\framework\\v2.0.50727\\config\\defaultwsdlhelpgenerator.aspx.[neftet@tutanota.com].boom")) returned 1 [0142.731] CreateFileW (lpFileName="C:\\Windows\\Microsoft.NET\\Framework\\v2.0.50727\\RedistList\\FrameworkList.xml" (normalized: "c:\\windows\\microsoft.net\\framework\\v2.0.50727\\redistlist\\frameworklist.xml"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x274 [0142.731] GetFileType (hFile=0x274) returned 0x1 [0142.731] GetFileType (hFile=0x274) returned 0x1 [0142.731] GetFileSize (in: hFile=0x274, lpFileSizeHigh=0x31e708 | out: lpFileSizeHigh=0x31e708*=0x0) returned 0x2b87 [0142.731] ReadFile (in: hFile=0x274, lpBuffer=0x2660894, nNumberOfBytesToRead=0x2b87, lpNumberOfBytesRead=0x31e6b4, lpOverlapped=0x0 | out: lpBuffer=0x2660894*, lpNumberOfBytesRead=0x31e6b4*=0x2b87, lpOverlapped=0x0) returned 1 [0142.733] CreateFileW (lpFileName="C:\\Windows\\Microsoft.NET\\Framework\\v2.0.50727\\RedistList\\FrameworkList.xml" (normalized: "c:\\windows\\microsoft.net\\framework\\v2.0.50727\\redistlist\\frameworklist.xml"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0xffffffff [0142.734] CreateFileW (lpFileName="C:\\Windows\\Microsoft.NET\\Framework\\v2.0.50727\\SubsetList\\Client.xml" (normalized: "c:\\windows\\microsoft.net\\framework\\v2.0.50727\\subsetlist\\client.xml"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x274 [0142.734] GetFileType (hFile=0x274) returned 0x1 [0142.734] GetFileType (hFile=0x274) returned 0x1 [0142.734] GetFileSize (in: hFile=0x274, lpFileSizeHigh=0x31e708 | out: lpFileSizeHigh=0x31e708*=0x0) returned 0x1219 [0142.734] ReadFile (in: hFile=0x274, lpBuffer=0x26692d4, nNumberOfBytesToRead=0x1219, lpNumberOfBytesRead=0x31e6b4, lpOverlapped=0x0 | out: lpBuffer=0x26692d4*, lpNumberOfBytesRead=0x31e6b4*=0x1219, lpOverlapped=0x0) returned 1 [0142.736] CreateFileW (lpFileName="C:\\Windows\\Microsoft.NET\\Framework\\v2.0.50727\\SubsetList\\Client.xml" (normalized: "c:\\windows\\microsoft.net\\framework\\v2.0.50727\\subsetlist\\client.xml"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0xffffffff [0142.741] CreateFileW (lpFileName="C:\\Windows\\Microsoft.NET\\Framework\\v3.0\\Windows Workflow Foundation\\SQL\\en\\SqlPersistenceService_Logic.sql" (normalized: "c:\\windows\\microsoft.net\\framework\\v3.0\\windows workflow foundation\\sql\\en\\sqlpersistenceservice_logic.sql"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x274 [0142.741] GetFileType (hFile=0x274) returned 0x1 [0142.741] GetFileType (hFile=0x274) returned 0x1 [0142.741] GetFileSize (in: hFile=0x274, lpFileSizeHigh=0x31e618 | out: lpFileSizeHigh=0x31e618*=0x0) returned 0x5d60 [0142.741] ReadFile (in: hFile=0x274, lpBuffer=0x267fc34, nNumberOfBytesToRead=0x5d60, lpNumberOfBytesRead=0x31e5c4, lpOverlapped=0x0 | out: lpBuffer=0x267fc34*, lpNumberOfBytesRead=0x31e5c4*=0x5d60, lpOverlapped=0x0) returned 1 [0142.742] CreateFileW (lpFileName="C:\\Windows\\Microsoft.NET\\Framework\\v3.0\\Windows Workflow Foundation\\SQL\\en\\SqlPersistenceService_Logic.sql" (normalized: "c:\\windows\\microsoft.net\\framework\\v3.0\\windows workflow foundation\\sql\\en\\sqlpersistenceservice_logic.sql"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x274 [0142.743] GetFileType (hFile=0x274) returned 0x1 [0142.743] GetFileType (hFile=0x274) returned 0x1 [0142.743] WriteFile (in: hFile=0x274, lpBuffer=0x2685da8*, nNumberOfBytesToWrite=0x5d60, lpNumberOfBytesWritten=0x31e5b8, lpOverlapped=0x0 | out: lpBuffer=0x2685da8*, lpNumberOfBytesWritten=0x31e5b8*=0x5d60, lpOverlapped=0x0) returned 1 [0142.744] MoveFileW (lpExistingFileName="C:\\Windows\\Microsoft.NET\\Framework\\v3.0\\Windows Workflow Foundation\\SQL\\en\\SqlPersistenceService_Logic.sql" (normalized: "c:\\windows\\microsoft.net\\framework\\v3.0\\windows workflow foundation\\sql\\en\\sqlpersistenceservice_logic.sql"), lpNewFileName="C:\\Windows\\Microsoft.NET\\Framework\\v3.0\\Windows Workflow Foundation\\SQL\\en\\SqlPersistenceService_Logic.sql.[neftet@tutanota.com].boom" (normalized: "c:\\windows\\microsoft.net\\framework\\v3.0\\windows workflow foundation\\sql\\en\\sqlpersistenceservice_logic.sql.[neftet@tutanota.com].boom")) returned 1 [0142.745] CreateFileW (lpFileName="C:\\Windows\\Microsoft.NET\\Framework\\v3.0\\Windows Workflow Foundation\\SQL\\en\\SqlPersistenceService_Schema.sql" (normalized: "c:\\windows\\microsoft.net\\framework\\v3.0\\windows workflow foundation\\sql\\en\\sqlpersistenceservice_schema.sql"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x274 [0142.745] GetFileType (hFile=0x274) returned 0x1 [0142.745] GetFileType (hFile=0x274) returned 0x1 [0142.745] GetFileSize (in: hFile=0x274, lpFileSizeHigh=0x31e618 | out: lpFileSizeHigh=0x31e618*=0x0) returned 0x10d0 [0142.745] ReadFile (in: hFile=0x274, lpBuffer=0x268d2e4, nNumberOfBytesToRead=0x10d0, lpNumberOfBytesRead=0x31e5c4, lpOverlapped=0x0 | out: lpBuffer=0x268d2e4*, lpNumberOfBytesRead=0x31e5c4*=0x10d0, lpOverlapped=0x0) returned 1 [0142.746] CreateFileW (lpFileName="C:\\Windows\\Microsoft.NET\\Framework\\v3.0\\Windows Workflow Foundation\\SQL\\en\\SqlPersistenceService_Schema.sql" (normalized: "c:\\windows\\microsoft.net\\framework\\v3.0\\windows workflow foundation\\sql\\en\\sqlpersistenceservice_schema.sql"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x274 [0142.747] GetFileType (hFile=0x274) returned 0x1 [0142.747] GetFileType (hFile=0x274) returned 0x1 [0142.747] WriteFile (in: hFile=0x274, lpBuffer=0x268e7c8*, nNumberOfBytesToWrite=0x10d0, lpNumberOfBytesWritten=0x31e5b8, lpOverlapped=0x0 | out: lpBuffer=0x268e7c8*, lpNumberOfBytesWritten=0x31e5b8*=0x10d0, lpOverlapped=0x0) returned 1 [0142.748] MoveFileW (lpExistingFileName="C:\\Windows\\Microsoft.NET\\Framework\\v3.0\\Windows Workflow Foundation\\SQL\\en\\SqlPersistenceService_Schema.sql" (normalized: "c:\\windows\\microsoft.net\\framework\\v3.0\\windows workflow foundation\\sql\\en\\sqlpersistenceservice_schema.sql"), lpNewFileName="C:\\Windows\\Microsoft.NET\\Framework\\v3.0\\Windows Workflow Foundation\\SQL\\en\\SqlPersistenceService_Schema.sql.[neftet@tutanota.com].boom" (normalized: "c:\\windows\\microsoft.net\\framework\\v3.0\\windows workflow foundation\\sql\\en\\sqlpersistenceservice_schema.sql.[neftet@tutanota.com].boom")) returned 1 [0142.749] CreateFileW (lpFileName="C:\\Windows\\Microsoft.NET\\Framework\\v3.0\\Windows Workflow Foundation\\SQL\\en\\Tracking_Logic.sql" (normalized: "c:\\windows\\microsoft.net\\framework\\v3.0\\windows workflow foundation\\sql\\en\\tracking_logic.sql"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x274 [0142.749] GetFileType (hFile=0x274) returned 0x1 [0142.749] GetFileType (hFile=0x274) returned 0x1 [0142.749] GetFileSize (in: hFile=0x274, lpFileSizeHigh=0x31e618 | out: lpFileSizeHigh=0x31e618*=0x0) returned 0x5d2b0 [0142.749] ReadFile (in: hFile=0x274, lpBuffer=0x3682f40, nNumberOfBytesToRead=0x5d2b0, lpNumberOfBytesRead=0x31e5c4, lpOverlapped=0x0 | out: lpBuffer=0x3682f40*, lpNumberOfBytesRead=0x31e5c4*=0x5d2b0, lpOverlapped=0x0) returned 1 [0142.766] CreateFileW (lpFileName="C:\\Windows\\Microsoft.NET\\Framework\\v3.0\\Windows Workflow Foundation\\SQL\\en\\Tracking_Logic.sql" (normalized: "c:\\windows\\microsoft.net\\framework\\v3.0\\windows workflow foundation\\sql\\en\\tracking_logic.sql"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x274 [0142.769] GetFileType (hFile=0x274) returned 0x1 [0142.769] GetFileType (hFile=0x274) returned 0x1 [0142.769] WriteFile (in: hFile=0x274, lpBuffer=0x36e0210*, nNumberOfBytesToWrite=0x5d2b0, lpNumberOfBytesWritten=0x31e5b8, lpOverlapped=0x0 | out: lpBuffer=0x36e0210*, lpNumberOfBytesWritten=0x31e5b8*=0x5d2b0, lpOverlapped=0x0) returned 1 [0142.776] MoveFileW (lpExistingFileName="C:\\Windows\\Microsoft.NET\\Framework\\v3.0\\Windows Workflow Foundation\\SQL\\en\\Tracking_Logic.sql" (normalized: "c:\\windows\\microsoft.net\\framework\\v3.0\\windows workflow foundation\\sql\\en\\tracking_logic.sql"), lpNewFileName="C:\\Windows\\Microsoft.NET\\Framework\\v3.0\\Windows Workflow Foundation\\SQL\\en\\Tracking_Logic.sql.[neftet@tutanota.com].boom" (normalized: "c:\\windows\\microsoft.net\\framework\\v3.0\\windows workflow foundation\\sql\\en\\tracking_logic.sql.[neftet@tutanota.com].boom")) returned 1 [0142.776] CreateFileW (lpFileName="C:\\Windows\\Microsoft.NET\\Framework\\v3.0\\Windows Workflow Foundation\\SQL\\en\\Tracking_Schema.sql" (normalized: "c:\\windows\\microsoft.net\\framework\\v3.0\\windows workflow foundation\\sql\\en\\tracking_schema.sql"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x274 [0142.776] GetFileType (hFile=0x274) returned 0x1 [0142.776] GetFileType (hFile=0x274) returned 0x1 [0142.776] GetFileSize (in: hFile=0x274, lpFileSizeHigh=0x31e618 | out: lpFileSizeHigh=0x31e618*=0x0) returned 0xc670 [0142.776] ReadFile (in: hFile=0x274, lpBuffer=0x2692b6c, nNumberOfBytesToRead=0xc670, lpNumberOfBytesRead=0x31e5c4, lpOverlapped=0x0 | out: lpBuffer=0x2692b6c*, lpNumberOfBytesRead=0x31e5c4*=0xc670, lpOverlapped=0x0) returned 1 [0142.778] CreateFileW (lpFileName="C:\\Windows\\Microsoft.NET\\Framework\\v3.0\\Windows Workflow Foundation\\SQL\\en\\Tracking_Schema.sql" (normalized: "c:\\windows\\microsoft.net\\framework\\v3.0\\windows workflow foundation\\sql\\en\\tracking_schema.sql"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x274 [0142.780] GetFileType (hFile=0x274) returned 0x1 [0142.780] GetFileType (hFile=0x274) returned 0x1 [0142.780] WriteFile (in: hFile=0x274, lpBuffer=0x269f5f0*, nNumberOfBytesToWrite=0xc670, lpNumberOfBytesWritten=0x31e5b8, lpOverlapped=0x0 | out: lpBuffer=0x269f5f0*, lpNumberOfBytesWritten=0x31e5b8*=0xc670, lpOverlapped=0x0) returned 1 [0142.781] MoveFileW (lpExistingFileName="C:\\Windows\\Microsoft.NET\\Framework\\v3.0\\Windows Workflow Foundation\\SQL\\en\\Tracking_Schema.sql" (normalized: "c:\\windows\\microsoft.net\\framework\\v3.0\\windows workflow foundation\\sql\\en\\tracking_schema.sql"), lpNewFileName="C:\\Windows\\Microsoft.NET\\Framework\\v3.0\\Windows Workflow Foundation\\SQL\\en\\Tracking_Schema.sql.[neftet@tutanota.com].boom" (normalized: "c:\\windows\\microsoft.net\\framework\\v3.0\\windows workflow foundation\\sql\\en\\tracking_schema.sql.[neftet@tutanota.com].boom")) returned 1 [0142.790] CreateFileW (lpFileName="C:\\Windows\\Microsoft.NET\\Framework\\v3.5\\SQL\\EN\\DropSqlPersistenceProviderLogic.sql" (normalized: "c:\\windows\\microsoft.net\\framework\\v3.5\\sql\\en\\dropsqlpersistenceproviderlogic.sql"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x274 [0142.790] GetFileType (hFile=0x274) returned 0x1 [0142.790] GetFileType (hFile=0x274) returned 0x1 [0142.790] GetFileSize (in: hFile=0x274, lpFileSizeHigh=0x31e690 | out: lpFileSizeHigh=0x31e690*=0x0) returned 0x960 [0142.790] ReadFile (in: hFile=0x274, lpBuffer=0x26c1d00, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x31e63c, lpOverlapped=0x0 | out: lpBuffer=0x26c1d00*, lpNumberOfBytesRead=0x31e63c*=0x960, lpOverlapped=0x0) returned 1 [0142.793] CreateFileW (lpFileName="C:\\Windows\\Microsoft.NET\\Framework\\v3.5\\SQL\\EN\\DropSqlPersistenceProviderLogic.sql" (normalized: "c:\\windows\\microsoft.net\\framework\\v3.5\\sql\\en\\dropsqlpersistenceproviderlogic.sql"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0xffffffff [0142.797] CreateFileW (lpFileName="C:\\Windows\\Microsoft.NET\\Framework\\v4.0.30319\\InstallCommon.sql" (normalized: "c:\\windows\\microsoft.net\\framework\\v4.0.30319\\installcommon.sql"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x274 [0142.797] GetFileType (hFile=0x274) returned 0x1 [0142.797] GetFileType (hFile=0x274) returned 0x1 [0142.797] GetFileSize (in: hFile=0x274, lpFileSizeHigh=0x31e780 | out: lpFileSizeHigh=0x31e780*=0x0) returned 0x6020 [0142.797] ReadFile (in: hFile=0x274, lpBuffer=0x271c1c8, nNumberOfBytesToRead=0x6020, lpNumberOfBytesRead=0x31e72c, lpOverlapped=0x0 | out: lpBuffer=0x271c1c8*, lpNumberOfBytesRead=0x31e72c*=0x6020, lpOverlapped=0x0) returned 1 [0142.799] CreateFileW (lpFileName="C:\\Windows\\Microsoft.NET\\Framework\\v4.0.30319\\InstallCommon.sql" (normalized: "c:\\windows\\microsoft.net\\framework\\v4.0.30319\\installcommon.sql"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x274 [0142.800] GetFileType (hFile=0x274) returned 0x1 [0142.800] GetFileType (hFile=0x274) returned 0x1 [0142.800] WriteFile (in: hFile=0x274, lpBuffer=0x27225fc*, nNumberOfBytesToWrite=0x6020, lpNumberOfBytesWritten=0x31e720, lpOverlapped=0x0 | out: lpBuffer=0x27225fc*, lpNumberOfBytesWritten=0x31e720*=0x6020, lpOverlapped=0x0) returned 1 [0142.801] MoveFileW (lpExistingFileName="C:\\Windows\\Microsoft.NET\\Framework\\v4.0.30319\\InstallCommon.sql" (normalized: "c:\\windows\\microsoft.net\\framework\\v4.0.30319\\installcommon.sql"), lpNewFileName="C:\\Windows\\Microsoft.NET\\Framework\\v4.0.30319\\InstallCommon.sql.[neftet@tutanota.com].boom" (normalized: "c:\\windows\\microsoft.net\\framework\\v4.0.30319\\installcommon.sql.[neftet@tutanota.com].boom")) returned 1 [0142.802] CreateFileW (lpFileName="C:\\Windows\\Microsoft.NET\\Framework\\v4.0.30319\\InstallMembership.sql" (normalized: "c:\\windows\\microsoft.net\\framework\\v4.0.30319\\installmembership.sql"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x274 [0142.802] GetFileType (hFile=0x274) returned 0x1 [0142.802] GetFileType (hFile=0x274) returned 0x1 [0142.802] GetFileSize (in: hFile=0x274, lpFileSizeHigh=0x31e780 | out: lpFileSizeHigh=0x31e780*=0x0) returned 0xdbc0 [0142.802] ReadFile (in: hFile=0x274, lpBuffer=0x2729c1c, nNumberOfBytesToRead=0xdbc0, lpNumberOfBytesRead=0x31e72c, lpOverlapped=0x0 | out: lpBuffer=0x2729c1c*, lpNumberOfBytesRead=0x31e72c*=0xdbc0, lpOverlapped=0x0) returned 1 [0142.804] CreateFileW (lpFileName="C:\\Windows\\Microsoft.NET\\Framework\\v4.0.30319\\InstallMembership.sql" (normalized: "c:\\windows\\microsoft.net\\framework\\v4.0.30319\\installmembership.sql"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x274 [0142.805] GetFileType (hFile=0x274) returned 0x1 [0142.805] GetFileType (hFile=0x274) returned 0x1 [0142.805] WriteFile (in: hFile=0x274, lpBuffer=0x2737bf0*, nNumberOfBytesToWrite=0xdbc0, lpNumberOfBytesWritten=0x31e720, lpOverlapped=0x0 | out: lpBuffer=0x2737bf0*, lpNumberOfBytesWritten=0x31e720*=0xdbc0, lpOverlapped=0x0) returned 1 [0142.807] MoveFileW (lpExistingFileName="C:\\Windows\\Microsoft.NET\\Framework\\v4.0.30319\\InstallMembership.sql" (normalized: "c:\\windows\\microsoft.net\\framework\\v4.0.30319\\installmembership.sql"), lpNewFileName="C:\\Windows\\Microsoft.NET\\Framework\\v4.0.30319\\InstallMembership.sql.[neftet@tutanota.com].boom" (normalized: "c:\\windows\\microsoft.net\\framework\\v4.0.30319\\installmembership.sql.[neftet@tutanota.com].boom")) returned 1 [0142.808] CreateFileW (lpFileName="C:\\Windows\\Microsoft.NET\\Framework\\v4.0.30319\\InstallPersistSqlState.sql" (normalized: "c:\\windows\\microsoft.net\\framework\\v4.0.30319\\installpersistsqlstate.sql"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x274 [0142.808] GetFileType (hFile=0x274) returned 0x1 [0142.808] GetFileType (hFile=0x274) returned 0x1 [0142.808] GetFileSize (in: hFile=0x274, lpFileSizeHigh=0x31e780 | out: lpFileSizeHigh=0x31e780*=0x0) returned 0xd580 [0142.808] ReadFile (in: hFile=0x274, lpBuffer=0x2746df0, nNumberOfBytesToRead=0xd580, lpNumberOfBytesRead=0x31e72c, lpOverlapped=0x0 | out: lpBuffer=0x2746df0*, lpNumberOfBytesRead=0x31e72c*=0xd580, lpOverlapped=0x0) returned 1 [0142.810] CreateFileW (lpFileName="C:\\Windows\\Microsoft.NET\\Framework\\v4.0.30319\\InstallPersistSqlState.sql" (normalized: "c:\\windows\\microsoft.net\\framework\\v4.0.30319\\installpersistsqlstate.sql"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x274 [0142.811] GetFileType (hFile=0x274) returned 0x1 [0142.811] GetFileType (hFile=0x274) returned 0x1 [0142.811] WriteFile (in: hFile=0x274, lpBuffer=0x2754784*, nNumberOfBytesToWrite=0xd580, lpNumberOfBytesWritten=0x31e720, lpOverlapped=0x0 | out: lpBuffer=0x2754784*, lpNumberOfBytesWritten=0x31e720*=0xd580, lpOverlapped=0x0) returned 1 [0142.813] MoveFileW (lpExistingFileName="C:\\Windows\\Microsoft.NET\\Framework\\v4.0.30319\\InstallPersistSqlState.sql" (normalized: "c:\\windows\\microsoft.net\\framework\\v4.0.30319\\installpersistsqlstate.sql"), lpNewFileName="C:\\Windows\\Microsoft.NET\\Framework\\v4.0.30319\\InstallPersistSqlState.sql.[neftet@tutanota.com].boom" (normalized: "c:\\windows\\microsoft.net\\framework\\v4.0.30319\\installpersistsqlstate.sql.[neftet@tutanota.com].boom")) returned 1 [0142.814] CreateFileW (lpFileName="C:\\Windows\\Microsoft.NET\\Framework\\v4.0.30319\\InstallPersonalization.sql" (normalized: "c:\\windows\\microsoft.net\\framework\\v4.0.30319\\installpersonalization.sql"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x274 [0142.814] GetFileType (hFile=0x274) returned 0x1 [0142.814] GetFileType (hFile=0x274) returned 0x1 [0142.814] GetFileSize (in: hFile=0x274, lpFileSizeHigh=0x31e780 | out: lpFileSizeHigh=0x31e780*=0x0) returned 0x8890 [0142.814] ReadFile (in: hFile=0x274, lpBuffer=0x2763378, nNumberOfBytesToRead=0x8890, lpNumberOfBytesRead=0x31e72c, lpOverlapped=0x0 | out: lpBuffer=0x2763378*, lpNumberOfBytesRead=0x31e72c*=0x8890, lpOverlapped=0x0) returned 1 [0142.815] CreateFileW (lpFileName="C:\\Windows\\Microsoft.NET\\Framework\\v4.0.30319\\InstallPersonalization.sql" (normalized: "c:\\windows\\microsoft.net\\framework\\v4.0.30319\\installpersonalization.sql"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x274 [0142.816] GetFileType (hFile=0x274) returned 0x1 [0142.816] GetFileType (hFile=0x274) returned 0x1 [0142.817] WriteFile (in: hFile=0x274, lpBuffer=0x276c01c*, nNumberOfBytesToWrite=0x8890, lpNumberOfBytesWritten=0x31e720, lpOverlapped=0x0 | out: lpBuffer=0x276c01c*, lpNumberOfBytesWritten=0x31e720*=0x8890, lpOverlapped=0x0) returned 1 [0142.818] MoveFileW (lpExistingFileName="C:\\Windows\\Microsoft.NET\\Framework\\v4.0.30319\\InstallPersonalization.sql" (normalized: "c:\\windows\\microsoft.net\\framework\\v4.0.30319\\installpersonalization.sql"), lpNewFileName="C:\\Windows\\Microsoft.NET\\Framework\\v4.0.30319\\InstallPersonalization.sql.[neftet@tutanota.com].boom" (normalized: "c:\\windows\\microsoft.net\\framework\\v4.0.30319\\installpersonalization.sql.[neftet@tutanota.com].boom")) returned 1 [0142.819] CreateFileW (lpFileName="C:\\Windows\\Microsoft.NET\\Framework\\v4.0.30319\\InstallRoles.sql" (normalized: "c:\\windows\\microsoft.net\\framework\\v4.0.30319\\installroles.sql"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x274 [0142.819] GetFileType (hFile=0x274) returned 0x1 [0142.819] GetFileType (hFile=0x274) returned 0x1 [0142.819] GetFileSize (in: hFile=0x274, lpFileSizeHigh=0x31e780 | out: lpFileSizeHigh=0x31e780*=0x0) returned 0x85e0 [0142.819] ReadFile (in: hFile=0x274, lpBuffer=0x2775f10, nNumberOfBytesToRead=0x85e0, lpNumberOfBytesRead=0x31e72c, lpOverlapped=0x0 | out: lpBuffer=0x2775f10*, lpNumberOfBytesRead=0x31e72c*=0x85e0, lpOverlapped=0x0) returned 1 [0142.821] CreateFileW (lpFileName="C:\\Windows\\Microsoft.NET\\Framework\\v4.0.30319\\InstallRoles.sql" (normalized: "c:\\windows\\microsoft.net\\framework\\v4.0.30319\\installroles.sql"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x274 [0142.822] GetFileType (hFile=0x274) returned 0x1 [0142.822] GetFileType (hFile=0x274) returned 0x1 [0142.822] WriteFile (in: hFile=0x274, lpBuffer=0x277e904*, nNumberOfBytesToWrite=0x85e0, lpNumberOfBytesWritten=0x31e720, lpOverlapped=0x0 | out: lpBuffer=0x277e904*, lpNumberOfBytesWritten=0x31e720*=0x85e0, lpOverlapped=0x0) returned 1 [0142.823] MoveFileW (lpExistingFileName="C:\\Windows\\Microsoft.NET\\Framework\\v4.0.30319\\InstallRoles.sql" (normalized: "c:\\windows\\microsoft.net\\framework\\v4.0.30319\\installroles.sql"), lpNewFileName="C:\\Windows\\Microsoft.NET\\Framework\\v4.0.30319\\InstallRoles.sql.[neftet@tutanota.com].boom" (normalized: "c:\\windows\\microsoft.net\\framework\\v4.0.30319\\installroles.sql.[neftet@tutanota.com].boom")) returned 1 [0142.824] CreateFileW (lpFileName="C:\\Windows\\Microsoft.NET\\Framework\\v4.0.30319\\InstallSqlState.sql" (normalized: "c:\\windows\\microsoft.net\\framework\\v4.0.30319\\installsqlstate.sql"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x274 [0142.824] GetFileType (hFile=0x274) returned 0x1 [0142.824] GetFileType (hFile=0x274) returned 0x1 [0142.824] GetFileSize (in: hFile=0x274, lpFileSizeHigh=0x31e780 | out: lpFileSizeHigh=0x31e780*=0x0) returned 0xd4a0 [0142.825] ReadFile (in: hFile=0x274, lpBuffer=0x27884d4, nNumberOfBytesToRead=0xd4a0, lpNumberOfBytesRead=0x31e72c, lpOverlapped=0x0 | out: lpBuffer=0x27884d4*, lpNumberOfBytesRead=0x31e72c*=0xd4a0, lpOverlapped=0x0) returned 1 [0142.827] CreateFileW (lpFileName="C:\\Windows\\Microsoft.NET\\Framework\\v4.0.30319\\InstallSqlState.sql" (normalized: "c:\\windows\\microsoft.net\\framework\\v4.0.30319\\installsqlstate.sql"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x274 [0142.828] GetFileType (hFile=0x274) returned 0x1 [0142.828] GetFileType (hFile=0x274) returned 0x1 [0142.828] WriteFile (in: hFile=0x274, lpBuffer=0x2795d88*, nNumberOfBytesToWrite=0xd4a0, lpNumberOfBytesWritten=0x31e720, lpOverlapped=0x0 | out: lpBuffer=0x2795d88*, lpNumberOfBytesWritten=0x31e720*=0xd4a0, lpOverlapped=0x0) returned 1 [0142.829] MoveFileW (lpExistingFileName="C:\\Windows\\Microsoft.NET\\Framework\\v4.0.30319\\InstallSqlState.sql" (normalized: "c:\\windows\\microsoft.net\\framework\\v4.0.30319\\installsqlstate.sql"), lpNewFileName="C:\\Windows\\Microsoft.NET\\Framework\\v4.0.30319\\InstallSqlState.sql.[neftet@tutanota.com].boom" (normalized: "c:\\windows\\microsoft.net\\framework\\v4.0.30319\\installsqlstate.sql.[neftet@tutanota.com].boom")) returned 1 [0142.830] CreateFileW (lpFileName="C:\\Windows\\Microsoft.NET\\Framework\\v4.0.30319\\InstallSqlStateTemplate.sql" (normalized: "c:\\windows\\microsoft.net\\framework\\v4.0.30319\\installsqlstatetemplate.sql"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x274 [0142.830] GetFileType (hFile=0x274) returned 0x1 [0142.830] GetFileType (hFile=0x274) returned 0x1 [0142.830] GetFileSize (in: hFile=0x274, lpFileSizeHigh=0x31e780 | out: lpFileSizeHigh=0x31e780*=0x0) returned 0xdbb0 [0142.830] ReadFile (in: hFile=0x274, lpBuffer=0x27a4854, nNumberOfBytesToRead=0xdbb0, lpNumberOfBytesRead=0x31e72c, lpOverlapped=0x0 | out: lpBuffer=0x27a4854*, lpNumberOfBytesRead=0x31e72c*=0xdbb0, lpOverlapped=0x0) returned 1 [0142.833] CreateFileW (lpFileName="C:\\Windows\\Microsoft.NET\\Framework\\v4.0.30319\\InstallSqlStateTemplate.sql" (normalized: "c:\\windows\\microsoft.net\\framework\\v4.0.30319\\installsqlstatetemplate.sql"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x274 [0142.834] GetFileType (hFile=0x274) returned 0x1 [0142.834] GetFileType (hFile=0x274) returned 0x1 [0142.834] WriteFile (in: hFile=0x274, lpBuffer=0x27b2818*, nNumberOfBytesToWrite=0xdbb0, lpNumberOfBytesWritten=0x31e720, lpOverlapped=0x0 | out: lpBuffer=0x27b2818*, lpNumberOfBytesWritten=0x31e720*=0xdbb0, lpOverlapped=0x0) returned 1 [0142.835] MoveFileW (lpExistingFileName="C:\\Windows\\Microsoft.NET\\Framework\\v4.0.30319\\InstallSqlStateTemplate.sql" (normalized: "c:\\windows\\microsoft.net\\framework\\v4.0.30319\\installsqlstatetemplate.sql"), lpNewFileName="C:\\Windows\\Microsoft.NET\\Framework\\v4.0.30319\\InstallSqlStateTemplate.sql.[neftet@tutanota.com].boom" (normalized: "c:\\windows\\microsoft.net\\framework\\v4.0.30319\\installsqlstatetemplate.sql.[neftet@tutanota.com].boom")) returned 1 [0142.836] CreateFileW (lpFileName="C:\\Windows\\Microsoft.NET\\Framework\\v4.0.30319\\InstallWebEventSqlProvider.sql" (normalized: "c:\\windows\\microsoft.net\\framework\\v4.0.30319\\installwebeventsqlprovider.sql"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x274 [0142.836] GetFileType (hFile=0x274) returned 0x1 [0142.836] GetFileType (hFile=0x274) returned 0x1 [0142.836] GetFileSize (in: hFile=0x274, lpFileSizeHigh=0x31e780 | out: lpFileSizeHigh=0x31e780*=0x0) returned 0x1940 [0142.836] ReadFile (in: hFile=0x274, lpBuffer=0x27c1aa0, nNumberOfBytesToRead=0x1940, lpNumberOfBytesRead=0x31e72c, lpOverlapped=0x0 | out: lpBuffer=0x27c1aa0*, lpNumberOfBytesRead=0x31e72c*=0x1940, lpOverlapped=0x0) returned 1 [0142.837] CreateFileW (lpFileName="C:\\Windows\\Microsoft.NET\\Framework\\v4.0.30319\\InstallWebEventSqlProvider.sql" (normalized: "c:\\windows\\microsoft.net\\framework\\v4.0.30319\\installwebeventsqlprovider.sql"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x274 [0142.841] GetFileType (hFile=0x274) returned 0x1 [0142.841] GetFileType (hFile=0x274) returned 0x1 [0142.841] WriteFile (in: hFile=0x274, lpBuffer=0x27c37f4*, nNumberOfBytesToWrite=0x1940, lpNumberOfBytesWritten=0x31e720, lpOverlapped=0x0 | out: lpBuffer=0x27c37f4*, lpNumberOfBytesWritten=0x31e720*=0x1940, lpOverlapped=0x0) returned 1 [0142.842] MoveFileW (lpExistingFileName="C:\\Windows\\Microsoft.NET\\Framework\\v4.0.30319\\InstallWebEventSqlProvider.sql" (normalized: "c:\\windows\\microsoft.net\\framework\\v4.0.30319\\installwebeventsqlprovider.sql"), lpNewFileName="C:\\Windows\\Microsoft.NET\\Framework\\v4.0.30319\\InstallWebEventSqlProvider.sql.[neftet@tutanota.com].boom" (normalized: "c:\\windows\\microsoft.net\\framework\\v4.0.30319\\installwebeventsqlprovider.sql.[neftet@tutanota.com].boom")) returned 1 [0142.843] CreateFileW (lpFileName="C:\\Windows\\Microsoft.NET\\Framework\\v4.0.30319\\ThirdPartyNotices.txt" (normalized: "c:\\windows\\microsoft.net\\framework\\v4.0.30319\\thirdpartynotices.txt"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x274 [0142.843] GetFileType (hFile=0x274) returned 0x1 [0142.843] GetFileType (hFile=0x274) returned 0x1 [0142.843] GetFileSize (in: hFile=0x274, lpFileSizeHigh=0x31e780 | out: lpFileSizeHigh=0x31e780*=0x0) returned 0x4ea0 [0142.843] ReadFile (in: hFile=0x274, lpBuffer=0x27c7fb4, nNumberOfBytesToRead=0x4ea0, lpNumberOfBytesRead=0x31e72c, lpOverlapped=0x0 | out: lpBuffer=0x27c7fb4*, lpNumberOfBytesRead=0x31e72c*=0x4ea0, lpOverlapped=0x0) returned 1 [0142.845] CreateFileW (lpFileName="C:\\Windows\\Microsoft.NET\\Framework\\v4.0.30319\\ThirdPartyNotices.txt" (normalized: "c:\\windows\\microsoft.net\\framework\\v4.0.30319\\thirdpartynotices.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x274 [0142.845] GetFileType (hFile=0x274) returned 0x1 [0142.845] GetFileType (hFile=0x274) returned 0x1 [0142.845] WriteFile (in: hFile=0x274, lpBuffer=0x27cd268*, nNumberOfBytesToWrite=0x4ea0, lpNumberOfBytesWritten=0x31e720, lpOverlapped=0x0 | out: lpBuffer=0x27cd268*, lpNumberOfBytesWritten=0x31e720*=0x4ea0, lpOverlapped=0x0) returned 1 [0142.847] MoveFileW (lpExistingFileName="C:\\Windows\\Microsoft.NET\\Framework\\v4.0.30319\\ThirdPartyNotices.txt" (normalized: "c:\\windows\\microsoft.net\\framework\\v4.0.30319\\thirdpartynotices.txt"), lpNewFileName="C:\\Windows\\Microsoft.NET\\Framework\\v4.0.30319\\ThirdPartyNotices.txt.[neftet@tutanota.com].boom" (normalized: "c:\\windows\\microsoft.net\\framework\\v4.0.30319\\thirdpartynotices.txt.[neftet@tutanota.com].boom")) returned 1 [0142.847] CreateFileW (lpFileName="C:\\Windows\\Microsoft.NET\\Framework\\v4.0.30319\\UninstallCommon.sql" (normalized: "c:\\windows\\microsoft.net\\framework\\v4.0.30319\\uninstallcommon.sql"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x274 [0142.848] GetFileType (hFile=0x274) returned 0x1 [0142.848] GetFileType (hFile=0x274) returned 0x1 [0142.848] GetFileSize (in: hFile=0x274, lpFileSizeHigh=0x31e780 | out: lpFileSizeHigh=0x31e780*=0x0) returned 0xf40 [0142.848] ReadFile (in: hFile=0x274, lpBuffer=0x27d468c, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x31e72c, lpOverlapped=0x0 | out: lpBuffer=0x27d468c*, lpNumberOfBytesRead=0x31e72c*=0xf40, lpOverlapped=0x0) returned 1 [0142.849] CreateFileW (lpFileName="C:\\Windows\\Microsoft.NET\\Framework\\v4.0.30319\\UninstallCommon.sql" (normalized: "c:\\windows\\microsoft.net\\framework\\v4.0.30319\\uninstallcommon.sql"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x274 [0142.850] GetFileType (hFile=0x274) returned 0x1 [0142.850] GetFileType (hFile=0x274) returned 0x1 [0142.850] WriteFile (in: hFile=0x274, lpBuffer=0x27d7b24*, nNumberOfBytesToWrite=0xf40, lpNumberOfBytesWritten=0x31e6f4, lpOverlapped=0x0 | out: lpBuffer=0x27d7b24*, lpNumberOfBytesWritten=0x31e6f4*=0xf40, lpOverlapped=0x0) returned 1 [0142.851] MoveFileW (lpExistingFileName="C:\\Windows\\Microsoft.NET\\Framework\\v4.0.30319\\UninstallCommon.sql" (normalized: "c:\\windows\\microsoft.net\\framework\\v4.0.30319\\uninstallcommon.sql"), lpNewFileName="C:\\Windows\\Microsoft.NET\\Framework\\v4.0.30319\\UninstallCommon.sql.[neftet@tutanota.com].boom" (normalized: "c:\\windows\\microsoft.net\\framework\\v4.0.30319\\uninstallcommon.sql.[neftet@tutanota.com].boom")) returned 1 [0142.851] CreateFileW (lpFileName="C:\\Windows\\Microsoft.NET\\Framework\\v4.0.30319\\UninstallMembership.sql" (normalized: "c:\\windows\\microsoft.net\\framework\\v4.0.30319\\uninstallmembership.sql"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x274 [0142.851] GetFileType (hFile=0x274) returned 0x1 [0142.852] GetFileType (hFile=0x274) returned 0x1 [0142.852] GetFileSize (in: hFile=0x274, lpFileSizeHigh=0x31e780 | out: lpFileSizeHigh=0x31e780*=0x0) returned 0x1b00 [0142.852] ReadFile (in: hFile=0x274, lpBuffer=0x27d9008, nNumberOfBytesToRead=0x1b00, lpNumberOfBytesRead=0x31e72c, lpOverlapped=0x0 | out: lpBuffer=0x27d9008*, lpNumberOfBytesRead=0x31e72c*=0x1b00, lpOverlapped=0x0) returned 1 [0142.853] CreateFileW (lpFileName="C:\\Windows\\Microsoft.NET\\Framework\\v4.0.30319\\UninstallMembership.sql" (normalized: "c:\\windows\\microsoft.net\\framework\\v4.0.30319\\uninstallmembership.sql"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x274 [0142.853] GetFileType (hFile=0x274) returned 0x1 [0142.853] GetFileType (hFile=0x274) returned 0x1 [0142.853] WriteFile (in: hFile=0x274, lpBuffer=0x27daf1c*, nNumberOfBytesToWrite=0x1b00, lpNumberOfBytesWritten=0x31e720, lpOverlapped=0x0 | out: lpBuffer=0x27daf1c*, lpNumberOfBytesWritten=0x31e720*=0x1b00, lpOverlapped=0x0) returned 1 [0142.855] MoveFileW (lpExistingFileName="C:\\Windows\\Microsoft.NET\\Framework\\v4.0.30319\\UninstallMembership.sql" (normalized: "c:\\windows\\microsoft.net\\framework\\v4.0.30319\\uninstallmembership.sql"), lpNewFileName="C:\\Windows\\Microsoft.NET\\Framework\\v4.0.30319\\UninstallMembership.sql.[neftet@tutanota.com].boom" (normalized: "c:\\windows\\microsoft.net\\framework\\v4.0.30319\\uninstallmembership.sql.[neftet@tutanota.com].boom")) returned 1 [0142.855] CreateFileW (lpFileName="C:\\Windows\\Microsoft.NET\\Framework\\v4.0.30319\\UninstallPersistSqlState.sql" (normalized: "c:\\windows\\microsoft.net\\framework\\v4.0.30319\\uninstallpersistsqlstate.sql"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x274 [0142.855] GetFileType (hFile=0x274) returned 0x1 [0142.855] GetFileType (hFile=0x274) returned 0x1 [0142.855] GetFileSize (in: hFile=0x274, lpFileSizeHigh=0x31e780 | out: lpFileSizeHigh=0x31e780*=0x0) returned 0x27e0 [0142.856] ReadFile (in: hFile=0x274, lpBuffer=0x27de078, nNumberOfBytesToRead=0x27e0, lpNumberOfBytesRead=0x31e72c, lpOverlapped=0x0 | out: lpBuffer=0x27de078*, lpNumberOfBytesRead=0x31e72c*=0x27e0, lpOverlapped=0x0) returned 1 [0142.857] CreateFileW (lpFileName="C:\\Windows\\Microsoft.NET\\Framework\\v4.0.30319\\UninstallPersistSqlState.sql" (normalized: "c:\\windows\\microsoft.net\\framework\\v4.0.30319\\uninstallpersistsqlstate.sql"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x274 [0142.857] GetFileType (hFile=0x274) returned 0x1 [0142.857] GetFileType (hFile=0x274) returned 0x1 [0142.857] WriteFile (in: hFile=0x274, lpBuffer=0x27e0c6c*, nNumberOfBytesToWrite=0x27e0, lpNumberOfBytesWritten=0x31e720, lpOverlapped=0x0 | out: lpBuffer=0x27e0c6c*, lpNumberOfBytesWritten=0x31e720*=0x27e0, lpOverlapped=0x0) returned 1 [0142.858] MoveFileW (lpExistingFileName="C:\\Windows\\Microsoft.NET\\Framework\\v4.0.30319\\UninstallPersistSqlState.sql" (normalized: "c:\\windows\\microsoft.net\\framework\\v4.0.30319\\uninstallpersistsqlstate.sql"), lpNewFileName="C:\\Windows\\Microsoft.NET\\Framework\\v4.0.30319\\UninstallPersistSqlState.sql.[neftet@tutanota.com].boom" (normalized: "c:\\windows\\microsoft.net\\framework\\v4.0.30319\\uninstallpersistsqlstate.sql.[neftet@tutanota.com].boom")) returned 1 [0142.859] CreateFileW (lpFileName="C:\\Windows\\Microsoft.NET\\Framework\\v4.0.30319\\UninstallPersonalization.sql" (normalized: "c:\\windows\\microsoft.net\\framework\\v4.0.30319\\uninstallpersonalization.sql"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x274 [0142.859] GetFileType (hFile=0x274) returned 0x1 [0142.859] GetFileType (hFile=0x274) returned 0x1 [0142.859] GetFileSize (in: hFile=0x274, lpFileSizeHigh=0x31e780 | out: lpFileSizeHigh=0x31e780*=0x0) returned 0x1d50 [0142.859] ReadFile (in: hFile=0x274, lpBuffer=0x27e4adc, nNumberOfBytesToRead=0x1d50, lpNumberOfBytesRead=0x31e72c, lpOverlapped=0x0 | out: lpBuffer=0x27e4adc*, lpNumberOfBytesRead=0x31e72c*=0x1d50, lpOverlapped=0x0) returned 1 [0142.860] CreateFileW (lpFileName="C:\\Windows\\Microsoft.NET\\Framework\\v4.0.30319\\UninstallPersonalization.sql" (normalized: "c:\\windows\\microsoft.net\\framework\\v4.0.30319\\uninstallpersonalization.sql"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x274 [0142.861] GetFileType (hFile=0x274) returned 0x1 [0142.861] GetFileType (hFile=0x274) returned 0x1 [0142.861] WriteFile (in: hFile=0x274, lpBuffer=0x27e6c40*, nNumberOfBytesToWrite=0x1d50, lpNumberOfBytesWritten=0x31e720, lpOverlapped=0x0 | out: lpBuffer=0x27e6c40*, lpNumberOfBytesWritten=0x31e720*=0x1d50, lpOverlapped=0x0) returned 1 [0142.862] MoveFileW (lpExistingFileName="C:\\Windows\\Microsoft.NET\\Framework\\v4.0.30319\\UninstallPersonalization.sql" (normalized: "c:\\windows\\microsoft.net\\framework\\v4.0.30319\\uninstallpersonalization.sql"), lpNewFileName="C:\\Windows\\Microsoft.NET\\Framework\\v4.0.30319\\UninstallPersonalization.sql.[neftet@tutanota.com].boom" (normalized: "c:\\windows\\microsoft.net\\framework\\v4.0.30319\\uninstallpersonalization.sql.[neftet@tutanota.com].boom")) returned 1 [0142.863] CreateFileW (lpFileName="C:\\Windows\\Microsoft.NET\\Framework\\v4.0.30319\\UninstallRoles.sql" (normalized: "c:\\windows\\microsoft.net\\framework\\v4.0.30319\\uninstallroles.sql"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x274 [0142.863] GetFileType (hFile=0x274) returned 0x1 [0142.863] GetFileType (hFile=0x274) returned 0x1 [0142.863] GetFileSize (in: hFile=0x274, lpFileSizeHigh=0x31e780 | out: lpFileSizeHigh=0x31e780*=0x0) returned 0x16f0 [0142.863] ReadFile (in: hFile=0x274, lpBuffer=0x27ea010, nNumberOfBytesToRead=0x16f0, lpNumberOfBytesRead=0x31e72c, lpOverlapped=0x0 | out: lpBuffer=0x27ea010*, lpNumberOfBytesRead=0x31e72c*=0x16f0, lpOverlapped=0x0) returned 1 [0142.864] CreateFileW (lpFileName="C:\\Windows\\Microsoft.NET\\Framework\\v4.0.30319\\UninstallRoles.sql" (normalized: "c:\\windows\\microsoft.net\\framework\\v4.0.30319\\uninstallroles.sql"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x274 [0143.044] GetFileType (hFile=0x274) returned 0x1 [0143.045] GetFileType (hFile=0x274) returned 0x1 [0143.045] WriteFile (in: hFile=0x274, lpBuffer=0x27ebb14*, nNumberOfBytesToWrite=0x16f0, lpNumberOfBytesWritten=0x31e720, lpOverlapped=0x0 | out: lpBuffer=0x27ebb14*, lpNumberOfBytesWritten=0x31e720*=0x16f0, lpOverlapped=0x0) returned 1 [0143.046] MoveFileW (lpExistingFileName="C:\\Windows\\Microsoft.NET\\Framework\\v4.0.30319\\UninstallRoles.sql" (normalized: "c:\\windows\\microsoft.net\\framework\\v4.0.30319\\uninstallroles.sql"), lpNewFileName="C:\\Windows\\Microsoft.NET\\Framework\\v4.0.30319\\UninstallRoles.sql.[neftet@tutanota.com].boom" (normalized: "c:\\windows\\microsoft.net\\framework\\v4.0.30319\\uninstallroles.sql.[neftet@tutanota.com].boom")) returned 1 [0143.047] CreateFileW (lpFileName="C:\\Windows\\Microsoft.NET\\Framework\\v4.0.30319\\UninstallSqlState.sql" (normalized: "c:\\windows\\microsoft.net\\framework\\v4.0.30319\\uninstallsqlstate.sql"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x274 [0143.047] GetFileType (hFile=0x274) returned 0x1 [0143.047] GetFileType (hFile=0x274) returned 0x1 [0143.047] GetFileSize (in: hFile=0x274, lpFileSizeHigh=0x31e780 | out: lpFileSizeHigh=0x31e780*=0x0) returned 0x25e0 [0143.047] ReadFile (in: hFile=0x274, lpBuffer=0x27ee810, nNumberOfBytesToRead=0x25e0, lpNumberOfBytesRead=0x31e72c, lpOverlapped=0x0 | out: lpBuffer=0x27ee810*, lpNumberOfBytesRead=0x31e72c*=0x25e0, lpOverlapped=0x0) returned 1 [0143.048] CreateFileW (lpFileName="C:\\Windows\\Microsoft.NET\\Framework\\v4.0.30319\\UninstallSqlState.sql" (normalized: "c:\\windows\\microsoft.net\\framework\\v4.0.30319\\uninstallsqlstate.sql"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x274 [0143.049] GetFileType (hFile=0x274) returned 0x1 [0143.049] GetFileType (hFile=0x274) returned 0x1 [0143.049] WriteFile (in: hFile=0x274, lpBuffer=0x27f1204*, nNumberOfBytesToWrite=0x25e0, lpNumberOfBytesWritten=0x31e720, lpOverlapped=0x0 | out: lpBuffer=0x27f1204*, lpNumberOfBytesWritten=0x31e720*=0x25e0, lpOverlapped=0x0) returned 1 [0143.050] MoveFileW (lpExistingFileName="C:\\Windows\\Microsoft.NET\\Framework\\v4.0.30319\\UninstallSqlState.sql" (normalized: "c:\\windows\\microsoft.net\\framework\\v4.0.30319\\uninstallsqlstate.sql"), lpNewFileName="C:\\Windows\\Microsoft.NET\\Framework\\v4.0.30319\\UninstallSqlState.sql.[neftet@tutanota.com].boom" (normalized: "c:\\windows\\microsoft.net\\framework\\v4.0.30319\\uninstallsqlstate.sql.[neftet@tutanota.com].boom")) returned 1 [0143.051] CreateFileW (lpFileName="C:\\Windows\\Microsoft.NET\\Framework\\v4.0.30319\\UninstallSqlStateTemplate.sql" (normalized: "c:\\windows\\microsoft.net\\framework\\v4.0.30319\\uninstallsqlstatetemplate.sql"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x274 [0143.051] GetFileType (hFile=0x274) returned 0x1 [0143.051] GetFileType (hFile=0x274) returned 0x1 [0143.051] GetFileSize (in: hFile=0x274, lpFileSizeHigh=0x31e780 | out: lpFileSizeHigh=0x31e780*=0x0) returned 0x2e20 [0143.051] ReadFile (in: hFile=0x274, lpBuffer=0x27f4e2c, nNumberOfBytesToRead=0x2e20, lpNumberOfBytesRead=0x31e72c, lpOverlapped=0x0 | out: lpBuffer=0x27f4e2c*, lpNumberOfBytesRead=0x31e72c*=0x2e20, lpOverlapped=0x0) returned 1 [0143.052] CreateFileW (lpFileName="C:\\Windows\\Microsoft.NET\\Framework\\v4.0.30319\\UninstallSqlStateTemplate.sql" (normalized: "c:\\windows\\microsoft.net\\framework\\v4.0.30319\\uninstallsqlstatetemplate.sql"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x274 [0143.053] GetFileType (hFile=0x274) returned 0x1 [0143.053] GetFileType (hFile=0x274) returned 0x1 [0143.053] WriteFile (in: hFile=0x274, lpBuffer=0x27f8060*, nNumberOfBytesToWrite=0x2e20, lpNumberOfBytesWritten=0x31e720, lpOverlapped=0x0 | out: lpBuffer=0x27f8060*, lpNumberOfBytesWritten=0x31e720*=0x2e20, lpOverlapped=0x0) returned 1 [0143.054] MoveFileW (lpExistingFileName="C:\\Windows\\Microsoft.NET\\Framework\\v4.0.30319\\UninstallSqlStateTemplate.sql" (normalized: "c:\\windows\\microsoft.net\\framework\\v4.0.30319\\uninstallsqlstatetemplate.sql"), lpNewFileName="C:\\Windows\\Microsoft.NET\\Framework\\v4.0.30319\\UninstallSqlStateTemplate.sql.[neftet@tutanota.com].boom" (normalized: "c:\\windows\\microsoft.net\\framework\\v4.0.30319\\uninstallsqlstatetemplate.sql.[neftet@tutanota.com].boom")) returned 1 [0143.055] CreateFileW (lpFileName="C:\\Windows\\Microsoft.NET\\Framework\\v4.0.30319\\UninstallWebEventSqlProvider.sql" (normalized: "c:\\windows\\microsoft.net\\framework\\v4.0.30319\\uninstallwebeventsqlprovider.sql"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x274 [0143.055] GetFileType (hFile=0x274) returned 0x1 [0143.055] GetFileType (hFile=0x274) returned 0x1 [0143.055] GetFileSize (in: hFile=0x274, lpFileSizeHigh=0x31e780 | out: lpFileSizeHigh=0x31e780*=0x0) returned 0xbc0 [0143.055] ReadFile (in: hFile=0x274, lpBuffer=0x27fd0f4, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x31e72c, lpOverlapped=0x0 | out: lpBuffer=0x27fd0f4*, lpNumberOfBytesRead=0x31e72c*=0xbc0, lpOverlapped=0x0) returned 1 [0143.056] CreateFileW (lpFileName="C:\\Windows\\Microsoft.NET\\Framework\\v4.0.30319\\UninstallWebEventSqlProvider.sql" (normalized: "c:\\windows\\microsoft.net\\framework\\v4.0.30319\\uninstallwebeventsqlprovider.sql"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x274 [0143.057] GetFileType (hFile=0x274) returned 0x1 [0143.057] GetFileType (hFile=0x274) returned 0x1 [0143.057] MoveFileW (lpExistingFileName="C:\\Windows\\Microsoft.NET\\Framework\\v4.0.30319\\UninstallWebEventSqlProvider.sql" (normalized: "c:\\windows\\microsoft.net\\framework\\v4.0.30319\\uninstallwebeventsqlprovider.sql"), lpNewFileName="C:\\Windows\\Microsoft.NET\\Framework\\v4.0.30319\\UninstallWebEventSqlProvider.sql.[neftet@tutanota.com].boom" (normalized: "c:\\windows\\microsoft.net\\framework\\v4.0.30319\\uninstallwebeventsqlprovider.sql.[neftet@tutanota.com].boom")) returned 1 [0143.061] CreateFileW (lpFileName="C:\\Windows\\Microsoft.NET\\Framework\\v4.0.30319\\ASP.NETWebAdminFiles\\default.aspx" (normalized: "c:\\windows\\microsoft.net\\framework\\v4.0.30319\\asp.netwebadminfiles\\default.aspx"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x274 [0143.061] GetFileType (hFile=0x274) returned 0x1 [0143.061] GetFileType (hFile=0x274) returned 0x1 [0143.061] GetFileSize (in: hFile=0x274, lpFileSizeHigh=0x31e708 | out: lpFileSizeHigh=0x31e708*=0x0) returned 0x1100 [0143.061] ReadFile (in: hFile=0x274, lpBuffer=0x280c124, nNumberOfBytesToRead=0x1100, lpNumberOfBytesRead=0x31e6b4, lpOverlapped=0x0 | out: lpBuffer=0x280c124*, lpNumberOfBytesRead=0x31e6b4*=0x1100, lpOverlapped=0x0) returned 1 [0143.062] CreateFileW (lpFileName="C:\\Windows\\Microsoft.NET\\Framework\\v4.0.30319\\ASP.NETWebAdminFiles\\default.aspx" (normalized: "c:\\windows\\microsoft.net\\framework\\v4.0.30319\\asp.netwebadminfiles\\default.aspx"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x274 [0143.063] GetFileType (hFile=0x274) returned 0x1 [0143.063] GetFileType (hFile=0x274) returned 0x1 [0143.063] WriteFile (in: hFile=0x274, lpBuffer=0x280d638*, nNumberOfBytesToWrite=0x1100, lpNumberOfBytesWritten=0x31e6a8, lpOverlapped=0x0 | out: lpBuffer=0x280d638*, lpNumberOfBytesWritten=0x31e6a8*=0x1100, lpOverlapped=0x0) returned 1 [0143.064] MoveFileW (lpExistingFileName="C:\\Windows\\Microsoft.NET\\Framework\\v4.0.30319\\ASP.NETWebAdminFiles\\default.aspx" (normalized: "c:\\windows\\microsoft.net\\framework\\v4.0.30319\\asp.netwebadminfiles\\default.aspx"), lpNewFileName="C:\\Windows\\Microsoft.NET\\Framework\\v4.0.30319\\ASP.NETWebAdminFiles\\default.aspx.[neftet@tutanota.com].boom" (normalized: "c:\\windows\\microsoft.net\\framework\\v4.0.30319\\asp.netwebadminfiles\\default.aspx.[neftet@tutanota.com].boom")) returned 1 [0143.064] CreateFileW (lpFileName="C:\\Windows\\Microsoft.NET\\Framework\\v4.0.30319\\ASP.NETWebAdminFiles\\error.aspx" (normalized: "c:\\windows\\microsoft.net\\framework\\v4.0.30319\\asp.netwebadminfiles\\error.aspx"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x274 [0143.064] GetFileType (hFile=0x274) returned 0x1 [0143.064] GetFileType (hFile=0x274) returned 0x1 [0143.064] GetFileSize (in: hFile=0x274, lpFileSizeHigh=0x31e708 | out: lpFileSizeHigh=0x31e708*=0x0) returned 0x1aa0 [0143.065] ReadFile (in: hFile=0x274, lpBuffer=0x280fdb0, nNumberOfBytesToRead=0x1aa0, lpNumberOfBytesRead=0x31e6b4, lpOverlapped=0x0 | out: lpBuffer=0x280fdb0*, lpNumberOfBytesRead=0x31e6b4*=0x1aa0, lpOverlapped=0x0) returned 1 [0143.065] CreateFileW (lpFileName="C:\\Windows\\Microsoft.NET\\Framework\\v4.0.30319\\ASP.NETWebAdminFiles\\error.aspx" (normalized: "c:\\windows\\microsoft.net\\framework\\v4.0.30319\\asp.netwebadminfiles\\error.aspx"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x274 [0143.066] GetFileType (hFile=0x274) returned 0x1 [0143.066] GetFileType (hFile=0x274) returned 0x1 [0143.066] WriteFile (in: hFile=0x274, lpBuffer=0x2811c64*, nNumberOfBytesToWrite=0x1aa0, lpNumberOfBytesWritten=0x31e6a8, lpOverlapped=0x0 | out: lpBuffer=0x2811c64*, lpNumberOfBytesWritten=0x31e6a8*=0x1aa0, lpOverlapped=0x0) returned 1 [0143.067] MoveFileW (lpExistingFileName="C:\\Windows\\Microsoft.NET\\Framework\\v4.0.30319\\ASP.NETWebAdminFiles\\error.aspx" (normalized: "c:\\windows\\microsoft.net\\framework\\v4.0.30319\\asp.netwebadminfiles\\error.aspx"), lpNewFileName="C:\\Windows\\Microsoft.NET\\Framework\\v4.0.30319\\ASP.NETWebAdminFiles\\error.aspx.[neftet@tutanota.com].boom" (normalized: "c:\\windows\\microsoft.net\\framework\\v4.0.30319\\asp.netwebadminfiles\\error.aspx.[neftet@tutanota.com].boom")) returned 1 [0143.068] CreateFileW (lpFileName="C:\\Windows\\Microsoft.NET\\Framework\\v4.0.30319\\ASP.NETWebAdminFiles\\home0.aspx" (normalized: "c:\\windows\\microsoft.net\\framework\\v4.0.30319\\asp.netwebadminfiles\\home0.aspx"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x274 [0143.068] GetFileType (hFile=0x274) returned 0x1 [0143.068] GetFileType (hFile=0x274) returned 0x1 [0143.068] GetFileSize (in: hFile=0x274, lpFileSizeHigh=0x31e708 | out: lpFileSizeHigh=0x31e708*=0x0) returned 0x560 [0143.068] ReadFile (in: hFile=0x274, lpBuffer=0x28152d4, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x31e6b4, lpOverlapped=0x0 | out: lpBuffer=0x28152d4*, lpNumberOfBytesRead=0x31e6b4*=0x560, lpOverlapped=0x0) returned 1 [0143.069] CreateFileW (lpFileName="C:\\Windows\\Microsoft.NET\\Framework\\v4.0.30319\\ASP.NETWebAdminFiles\\home0.aspx" (normalized: "c:\\windows\\microsoft.net\\framework\\v4.0.30319\\asp.netwebadminfiles\\home0.aspx"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x274 [0143.070] GetFileType (hFile=0x274) returned 0x1 [0143.070] GetFileType (hFile=0x274) returned 0x1 [0143.070] MoveFileW (lpExistingFileName="C:\\Windows\\Microsoft.NET\\Framework\\v4.0.30319\\ASP.NETWebAdminFiles\\home0.aspx" (normalized: "c:\\windows\\microsoft.net\\framework\\v4.0.30319\\asp.netwebadminfiles\\home0.aspx"), lpNewFileName="C:\\Windows\\Microsoft.NET\\Framework\\v4.0.30319\\ASP.NETWebAdminFiles\\home0.aspx.[neftet@tutanota.com].boom" (normalized: "c:\\windows\\microsoft.net\\framework\\v4.0.30319\\asp.netwebadminfiles\\home0.aspx.[neftet@tutanota.com].boom")) returned 1 [0143.071] CreateFileW (lpFileName="C:\\Windows\\Microsoft.NET\\Framework\\v4.0.30319\\ASP.NETWebAdminFiles\\home1.aspx" (normalized: "c:\\windows\\microsoft.net\\framework\\v4.0.30319\\asp.netwebadminfiles\\home1.aspx"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x274 [0143.071] GetFileType (hFile=0x274) returned 0x1 [0143.071] GetFileType (hFile=0x274) returned 0x1 [0143.071] GetFileSize (in: hFile=0x274, lpFileSizeHigh=0x31e708 | out: lpFileSizeHigh=0x31e708*=0x0) returned 0x2f0 [0143.071] ReadFile (in: hFile=0x274, lpBuffer=0x28195b4, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x31e6b4, lpOverlapped=0x0 | out: lpBuffer=0x28195b4*, lpNumberOfBytesRead=0x31e6b4*=0x2f0, lpOverlapped=0x0) returned 1 [0143.072] CreateFileW (lpFileName="C:\\Windows\\Microsoft.NET\\Framework\\v4.0.30319\\ASP.NETWebAdminFiles\\home1.aspx" (normalized: "c:\\windows\\microsoft.net\\framework\\v4.0.30319\\asp.netwebadminfiles\\home1.aspx"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x274 [0143.073] GetFileType (hFile=0x274) returned 0x1 [0143.073] GetFileType (hFile=0x274) returned 0x1 [0143.074] MoveFileW (lpExistingFileName="C:\\Windows\\Microsoft.NET\\Framework\\v4.0.30319\\ASP.NETWebAdminFiles\\home1.aspx" (normalized: "c:\\windows\\microsoft.net\\framework\\v4.0.30319\\asp.netwebadminfiles\\home1.aspx"), lpNewFileName="C:\\Windows\\Microsoft.NET\\Framework\\v4.0.30319\\ASP.NETWebAdminFiles\\home1.aspx.[neftet@tutanota.com].boom" (normalized: "c:\\windows\\microsoft.net\\framework\\v4.0.30319\\asp.netwebadminfiles\\home1.aspx.[neftet@tutanota.com].boom")) returned 1 [0143.074] CreateFileW (lpFileName="C:\\Windows\\Microsoft.NET\\Framework\\v4.0.30319\\ASP.NETWebAdminFiles\\home2.aspx" (normalized: "c:\\windows\\microsoft.net\\framework\\v4.0.30319\\asp.netwebadminfiles\\home2.aspx"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x274 [0143.074] GetFileType (hFile=0x274) returned 0x1 [0143.074] GetFileType (hFile=0x274) returned 0x1 [0143.074] GetFileSize (in: hFile=0x274, lpFileSizeHigh=0x31e708 | out: lpFileSizeHigh=0x31e708*=0x0) returned 0x420 [0143.074] ReadFile (in: hFile=0x274, lpBuffer=0x281d754, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x31e6b4, lpOverlapped=0x0 | out: lpBuffer=0x281d754*, lpNumberOfBytesRead=0x31e6b4*=0x420, lpOverlapped=0x0) returned 1 [0143.075] CreateFileW (lpFileName="C:\\Windows\\Microsoft.NET\\Framework\\v4.0.30319\\ASP.NETWebAdminFiles\\home2.aspx" (normalized: "c:\\windows\\microsoft.net\\framework\\v4.0.30319\\asp.netwebadminfiles\\home2.aspx"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x274 [0143.076] GetFileType (hFile=0x274) returned 0x1 [0143.076] GetFileType (hFile=0x274) returned 0x1 [0143.077] MoveFileW (lpExistingFileName="C:\\Windows\\Microsoft.NET\\Framework\\v4.0.30319\\ASP.NETWebAdminFiles\\home2.aspx" (normalized: "c:\\windows\\microsoft.net\\framework\\v4.0.30319\\asp.netwebadminfiles\\home2.aspx"), lpNewFileName="C:\\Windows\\Microsoft.NET\\Framework\\v4.0.30319\\ASP.NETWebAdminFiles\\home2.aspx.[neftet@tutanota.com].boom" (normalized: "c:\\windows\\microsoft.net\\framework\\v4.0.30319\\asp.netwebadminfiles\\home2.aspx.[neftet@tutanota.com].boom")) returned 1 [0143.078] CreateFileW (lpFileName="C:\\Windows\\Microsoft.NET\\Framework\\v4.0.30319\\ASP.NETWebAdminFiles\\WebAdminHelp.aspx" (normalized: "c:\\windows\\microsoft.net\\framework\\v4.0.30319\\asp.netwebadminfiles\\webadminhelp.aspx"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x274 [0143.078] GetFileType (hFile=0x274) returned 0x1 [0143.078] GetFileType (hFile=0x274) returned 0x1 [0143.078] GetFileSize (in: hFile=0x274, lpFileSizeHigh=0x31e708 | out: lpFileSizeHigh=0x31e708*=0x0) returned 0x1a60 [0143.078] ReadFile (in: hFile=0x274, lpBuffer=0x2821680, nNumberOfBytesToRead=0x1a60, lpNumberOfBytesRead=0x31e6b4, lpOverlapped=0x0 | out: lpBuffer=0x2821680*, lpNumberOfBytesRead=0x31e6b4*=0x1a60, lpOverlapped=0x0) returned 1 [0143.079] CreateFileW (lpFileName="C:\\Windows\\Microsoft.NET\\Framework\\v4.0.30319\\ASP.NETWebAdminFiles\\WebAdminHelp.aspx" (normalized: "c:\\windows\\microsoft.net\\framework\\v4.0.30319\\asp.netwebadminfiles\\webadminhelp.aspx"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x274 [0143.080] GetFileType (hFile=0x274) returned 0x1 [0143.080] GetFileType (hFile=0x274) returned 0x1 [0143.080] WriteFile (in: hFile=0x274, lpBuffer=0x28234f4*, nNumberOfBytesToWrite=0x1a60, lpNumberOfBytesWritten=0x31e6a8, lpOverlapped=0x0 | out: lpBuffer=0x28234f4*, lpNumberOfBytesWritten=0x31e6a8*=0x1a60, lpOverlapped=0x0) returned 1 [0143.081] MoveFileW (lpExistingFileName="C:\\Windows\\Microsoft.NET\\Framework\\v4.0.30319\\ASP.NETWebAdminFiles\\WebAdminHelp.aspx" (normalized: "c:\\windows\\microsoft.net\\framework\\v4.0.30319\\asp.netwebadminfiles\\webadminhelp.aspx"), lpNewFileName="C:\\Windows\\Microsoft.NET\\Framework\\v4.0.30319\\ASP.NETWebAdminFiles\\WebAdminHelp.aspx.[neftet@tutanota.com].boom" (normalized: "c:\\windows\\microsoft.net\\framework\\v4.0.30319\\asp.netwebadminfiles\\webadminhelp.aspx.[neftet@tutanota.com].boom")) returned 1 [0143.082] CreateFileW (lpFileName="C:\\Windows\\Microsoft.NET\\Framework\\v4.0.30319\\ASP.NETWebAdminFiles\\WebAdminHelp_Application.aspx" (normalized: "c:\\windows\\microsoft.net\\framework\\v4.0.30319\\asp.netwebadminfiles\\webadminhelp_application.aspx"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x274 [0143.082] GetFileType (hFile=0x274) returned 0x1 [0143.082] GetFileType (hFile=0x274) returned 0x1 [0143.082] GetFileSize (in: hFile=0x274, lpFileSizeHigh=0x31e708 | out: lpFileSizeHigh=0x31e708*=0x0) returned 0x3510 [0143.082] ReadFile (in: hFile=0x274, lpBuffer=0x2826648, nNumberOfBytesToRead=0x3510, lpNumberOfBytesRead=0x31e6b4, lpOverlapped=0x0 | out: lpBuffer=0x2826648*, lpNumberOfBytesRead=0x31e6b4*=0x3510, lpOverlapped=0x0) returned 1 [0143.083] CreateFileW (lpFileName="C:\\Windows\\Microsoft.NET\\Framework\\v4.0.30319\\ASP.NETWebAdminFiles\\WebAdminHelp_Application.aspx" (normalized: "c:\\windows\\microsoft.net\\framework\\v4.0.30319\\asp.netwebadminfiles\\webadminhelp_application.aspx"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x274 [0143.084] GetFileType (hFile=0x274) returned 0x1 [0143.084] GetFileType (hFile=0x274) returned 0x1 [0143.084] WriteFile (in: hFile=0x274, lpBuffer=0x2829f6c*, nNumberOfBytesToWrite=0x3510, lpNumberOfBytesWritten=0x31e6a8, lpOverlapped=0x0 | out: lpBuffer=0x2829f6c*, lpNumberOfBytesWritten=0x31e6a8*=0x3510, lpOverlapped=0x0) returned 1 [0143.085] MoveFileW (lpExistingFileName="C:\\Windows\\Microsoft.NET\\Framework\\v4.0.30319\\ASP.NETWebAdminFiles\\WebAdminHelp_Application.aspx" (normalized: "c:\\windows\\microsoft.net\\framework\\v4.0.30319\\asp.netwebadminfiles\\webadminhelp_application.aspx"), lpNewFileName="C:\\Windows\\Microsoft.NET\\Framework\\v4.0.30319\\ASP.NETWebAdminFiles\\WebAdminHelp_Application.aspx.[neftet@tutanota.com].boom" (normalized: "c:\\windows\\microsoft.net\\framework\\v4.0.30319\\asp.netwebadminfiles\\webadminhelp_application.aspx.[neftet@tutanota.com].boom")) returned 1 [0143.086] CreateFileW (lpFileName="C:\\Windows\\Microsoft.NET\\Framework\\v4.0.30319\\ASP.NETWebAdminFiles\\WebAdminHelp_Internals.aspx" (normalized: "c:\\windows\\microsoft.net\\framework\\v4.0.30319\\asp.netwebadminfiles\\webadminhelp_internals.aspx"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x274 [0143.086] GetFileType (hFile=0x274) returned 0x1 [0143.086] GetFileType (hFile=0x274) returned 0x1 [0143.086] GetFileSize (in: hFile=0x274, lpFileSizeHigh=0x31e708 | out: lpFileSizeHigh=0x31e708*=0x0) returned 0xff0 [0143.086] ReadFile (in: hFile=0x274, lpBuffer=0x282fbdc, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x31e6b4, lpOverlapped=0x0 | out: lpBuffer=0x282fbdc*, lpNumberOfBytesRead=0x31e6b4*=0xff0, lpOverlapped=0x0) returned 1 [0143.087] CreateFileW (lpFileName="C:\\Windows\\Microsoft.NET\\Framework\\v4.0.30319\\ASP.NETWebAdminFiles\\WebAdminHelp_Internals.aspx" (normalized: "c:\\windows\\microsoft.net\\framework\\v4.0.30319\\asp.netwebadminfiles\\webadminhelp_internals.aspx"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x274 [0143.088] GetFileType (hFile=0x274) returned 0x1 [0143.088] GetFileType (hFile=0x274) returned 0x1 [0143.089] MoveFileW (lpExistingFileName="C:\\Windows\\Microsoft.NET\\Framework\\v4.0.30319\\ASP.NETWebAdminFiles\\WebAdminHelp_Internals.aspx" (normalized: "c:\\windows\\microsoft.net\\framework\\v4.0.30319\\asp.netwebadminfiles\\webadminhelp_internals.aspx"), lpNewFileName="C:\\Windows\\Microsoft.NET\\Framework\\v4.0.30319\\ASP.NETWebAdminFiles\\WebAdminHelp_Internals.aspx.[neftet@tutanota.com].boom" (normalized: "c:\\windows\\microsoft.net\\framework\\v4.0.30319\\asp.netwebadminfiles\\webadminhelp_internals.aspx.[neftet@tutanota.com].boom")) returned 1 [0143.089] CreateFileW (lpFileName="C:\\Windows\\Microsoft.NET\\Framework\\v4.0.30319\\ASP.NETWebAdminFiles\\WebAdminHelp_Provider.aspx" (normalized: "c:\\windows\\microsoft.net\\framework\\v4.0.30319\\asp.netwebadminfiles\\webadminhelp_provider.aspx"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x274 [0143.090] GetFileType (hFile=0x274) returned 0x1 [0143.090] GetFileType (hFile=0x274) returned 0x1 [0143.090] GetFileSize (in: hFile=0x274, lpFileSizeHigh=0x31e708 | out: lpFileSizeHigh=0x31e708*=0x0) returned 0x1a30 [0143.090] ReadFile (in: hFile=0x274, lpBuffer=0x2834738, nNumberOfBytesToRead=0x1a30, lpNumberOfBytesRead=0x31e6b4, lpOverlapped=0x0 | out: lpBuffer=0x2834738*, lpNumberOfBytesRead=0x31e6b4*=0x1a30, lpOverlapped=0x0) returned 1 [0143.091] CreateFileW (lpFileName="C:\\Windows\\Microsoft.NET\\Framework\\v4.0.30319\\ASP.NETWebAdminFiles\\WebAdminHelp_Provider.aspx" (normalized: "c:\\windows\\microsoft.net\\framework\\v4.0.30319\\asp.netwebadminfiles\\webadminhelp_provider.aspx"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x274 [0143.091] GetFileType (hFile=0x274) returned 0x1 [0143.092] GetFileType (hFile=0x274) returned 0x1 [0143.092] WriteFile (in: hFile=0x274, lpBuffer=0x283657c*, nNumberOfBytesToWrite=0x1a30, lpNumberOfBytesWritten=0x31e6a8, lpOverlapped=0x0 | out: lpBuffer=0x283657c*, lpNumberOfBytesWritten=0x31e6a8*=0x1a30, lpOverlapped=0x0) returned 1 [0143.093] MoveFileW (lpExistingFileName="C:\\Windows\\Microsoft.NET\\Framework\\v4.0.30319\\ASP.NETWebAdminFiles\\WebAdminHelp_Provider.aspx" (normalized: "c:\\windows\\microsoft.net\\framework\\v4.0.30319\\asp.netwebadminfiles\\webadminhelp_provider.aspx"), lpNewFileName="C:\\Windows\\Microsoft.NET\\Framework\\v4.0.30319\\ASP.NETWebAdminFiles\\WebAdminHelp_Provider.aspx.[neftet@tutanota.com].boom" (normalized: "c:\\windows\\microsoft.net\\framework\\v4.0.30319\\asp.netwebadminfiles\\webadminhelp_provider.aspx.[neftet@tutanota.com].boom")) returned 1 [0143.093] CreateFileW (lpFileName="C:\\Windows\\Microsoft.NET\\Framework\\v4.0.30319\\ASP.NETWebAdminFiles\\WebAdminHelp_Security.aspx" (normalized: "c:\\windows\\microsoft.net\\framework\\v4.0.30319\\asp.netwebadminfiles\\webadminhelp_security.aspx"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x274 [0143.093] GetFileType (hFile=0x274) returned 0x1 [0143.093] GetFileType (hFile=0x274) returned 0x1 [0143.093] GetFileSize (in: hFile=0x274, lpFileSizeHigh=0x31e708 | out: lpFileSizeHigh=0x31e708*=0x0) returned 0x2950 [0143.093] ReadFile (in: hFile=0x274, lpBuffer=0x28396f0, nNumberOfBytesToRead=0x2950, lpNumberOfBytesRead=0x31e6b4, lpOverlapped=0x0 | out: lpBuffer=0x28396f0*, lpNumberOfBytesRead=0x31e6b4*=0x2950, lpOverlapped=0x0) returned 1 [0143.094] CreateFileW (lpFileName="C:\\Windows\\Microsoft.NET\\Framework\\v4.0.30319\\ASP.NETWebAdminFiles\\WebAdminHelp_Security.aspx" (normalized: "c:\\windows\\microsoft.net\\framework\\v4.0.30319\\asp.netwebadminfiles\\webadminhelp_security.aspx"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x274 [0143.095] GetFileType (hFile=0x274) returned 0x1 [0143.095] GetFileType (hFile=0x274) returned 0x1 [0143.095] WriteFile (in: hFile=0x274, lpBuffer=0x283c454*, nNumberOfBytesToWrite=0x2950, lpNumberOfBytesWritten=0x31e6a8, lpOverlapped=0x0 | out: lpBuffer=0x283c454*, lpNumberOfBytesWritten=0x31e6a8*=0x2950, lpOverlapped=0x0) returned 1 [0143.096] MoveFileW (lpExistingFileName="C:\\Windows\\Microsoft.NET\\Framework\\v4.0.30319\\ASP.NETWebAdminFiles\\WebAdminHelp_Security.aspx" (normalized: "c:\\windows\\microsoft.net\\framework\\v4.0.30319\\asp.netwebadminfiles\\webadminhelp_security.aspx"), lpNewFileName="C:\\Windows\\Microsoft.NET\\Framework\\v4.0.30319\\ASP.NETWebAdminFiles\\WebAdminHelp_Security.aspx.[neftet@tutanota.com].boom" (normalized: "c:\\windows\\microsoft.net\\framework\\v4.0.30319\\asp.netwebadminfiles\\webadminhelp_security.aspx.[neftet@tutanota.com].boom")) returned 1 [0143.097] CreateFileW (lpFileName="C:\\Windows\\Microsoft.NET\\Framework\\v4.0.30319\\ASP.NETWebAdminFiles\\WebAdminStyles.css" (normalized: "c:\\windows\\microsoft.net\\framework\\v4.0.30319\\asp.netwebadminfiles\\webadminstyles.css"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x274 [0143.097] GetFileType (hFile=0x274) returned 0x1 [0143.097] GetFileType (hFile=0x274) returned 0x1 [0143.097] GetFileSize (in: hFile=0x274, lpFileSizeHigh=0x31e708 | out: lpFileSizeHigh=0x31e708*=0x0) returned 0x3440 [0143.097] ReadFile (in: hFile=0x274, lpBuffer=0x2840500, nNumberOfBytesToRead=0x3440, lpNumberOfBytesRead=0x31e6b4, lpOverlapped=0x0 | out: lpBuffer=0x2840500*, lpNumberOfBytesRead=0x31e6b4*=0x3440, lpOverlapped=0x0) returned 1 [0143.099] CreateFileW (lpFileName="C:\\Windows\\Microsoft.NET\\Framework\\v4.0.30319\\ASP.NETWebAdminFiles\\WebAdminStyles.css" (normalized: "c:\\windows\\microsoft.net\\framework\\v4.0.30319\\asp.netwebadminfiles\\webadminstyles.css"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x274 [0143.100] GetFileType (hFile=0x274) returned 0x1 [0143.100] GetFileType (hFile=0x274) returned 0x1 [0143.100] WriteFile (in: hFile=0x274, lpBuffer=0x2843d54*, nNumberOfBytesToWrite=0x3440, lpNumberOfBytesWritten=0x31e6a8, lpOverlapped=0x0 | out: lpBuffer=0x2843d54*, lpNumberOfBytesWritten=0x31e6a8*=0x3440, lpOverlapped=0x0) returned 1 [0143.101] MoveFileW (lpExistingFileName="C:\\Windows\\Microsoft.NET\\Framework\\v4.0.30319\\ASP.NETWebAdminFiles\\WebAdminStyles.css" (normalized: "c:\\windows\\microsoft.net\\framework\\v4.0.30319\\asp.netwebadminfiles\\webadminstyles.css"), lpNewFileName="C:\\Windows\\Microsoft.NET\\Framework\\v4.0.30319\\ASP.NETWebAdminFiles\\WebAdminStyles.css.[neftet@tutanota.com].boom" (normalized: "c:\\windows\\microsoft.net\\framework\\v4.0.30319\\asp.netwebadminfiles\\webadminstyles.css.[neftet@tutanota.com].boom")) returned 1 [0143.102] CreateFileW (lpFileName="C:\\Windows\\Microsoft.NET\\Framework\\v4.0.30319\\ASP.NETWebAdminFiles\\AppConfig\\AppConfigHome.aspx" (normalized: "c:\\windows\\microsoft.net\\framework\\v4.0.30319\\asp.netwebadminfiles\\appconfig\\appconfighome.aspx"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x274 [0143.102] GetFileType (hFile=0x274) returned 0x1 [0143.102] GetFileType (hFile=0x274) returned 0x1 [0143.102] GetFileSize (in: hFile=0x274, lpFileSizeHigh=0x31e690 | out: lpFileSizeHigh=0x31e690*=0x0) returned 0x2150 [0143.102] ReadFile (in: hFile=0x274, lpBuffer=0x284c790, nNumberOfBytesToRead=0x2150, lpNumberOfBytesRead=0x31e63c, lpOverlapped=0x0 | out: lpBuffer=0x284c790*, lpNumberOfBytesRead=0x31e63c*=0x2150, lpOverlapped=0x0) returned 1 [0143.103] CreateFileW (lpFileName="C:\\Windows\\Microsoft.NET\\Framework\\v4.0.30319\\ASP.NETWebAdminFiles\\AppConfig\\AppConfigHome.aspx" (normalized: "c:\\windows\\microsoft.net\\framework\\v4.0.30319\\asp.netwebadminfiles\\appconfig\\appconfighome.aspx"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x274 [0143.104] GetFileType (hFile=0x274) returned 0x1 [0143.104] GetFileType (hFile=0x274) returned 0x1 [0143.104] WriteFile (in: hFile=0x274, lpBuffer=0x284ecf4*, nNumberOfBytesToWrite=0x2150, lpNumberOfBytesWritten=0x31e630, lpOverlapped=0x0 | out: lpBuffer=0x284ecf4*, lpNumberOfBytesWritten=0x31e630*=0x2150, lpOverlapped=0x0) returned 1 [0143.105] MoveFileW (lpExistingFileName="C:\\Windows\\Microsoft.NET\\Framework\\v4.0.30319\\ASP.NETWebAdminFiles\\AppConfig\\AppConfigHome.aspx" (normalized: "c:\\windows\\microsoft.net\\framework\\v4.0.30319\\asp.netwebadminfiles\\appconfig\\appconfighome.aspx"), lpNewFileName="C:\\Windows\\Microsoft.NET\\Framework\\v4.0.30319\\ASP.NETWebAdminFiles\\AppConfig\\AppConfigHome.aspx.[neftet@tutanota.com].boom" (normalized: "c:\\windows\\microsoft.net\\framework\\v4.0.30319\\asp.netwebadminfiles\\appconfig\\appconfighome.aspx.[neftet@tutanota.com].boom")) returned 1 [0143.106] CreateFileW (lpFileName="C:\\Windows\\Microsoft.NET\\Framework\\v4.0.30319\\ASP.NETWebAdminFiles\\AppConfig\\CreateAppSetting.aspx" (normalized: "c:\\windows\\microsoft.net\\framework\\v4.0.30319\\asp.netwebadminfiles\\appconfig\\createappsetting.aspx"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x274 [0143.106] GetFileType (hFile=0x274) returned 0x1 [0143.106] GetFileType (hFile=0x274) returned 0x1 [0143.106] GetFileSize (in: hFile=0x274, lpFileSizeHigh=0x31e690 | out: lpFileSizeHigh=0x31e690*=0x0) returned 0xe60 [0143.106] ReadFile (in: hFile=0x274, lpBuffer=0x285340c, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x31e63c, lpOverlapped=0x0 | out: lpBuffer=0x285340c*, lpNumberOfBytesRead=0x31e63c*=0xe60, lpOverlapped=0x0) returned 1 [0143.108] CreateFileW (lpFileName="C:\\Windows\\Microsoft.NET\\Framework\\v4.0.30319\\ASP.NETWebAdminFiles\\AppConfig\\CreateAppSetting.aspx" (normalized: "c:\\windows\\microsoft.net\\framework\\v4.0.30319\\asp.netwebadminfiles\\appconfig\\createappsetting.aspx"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x274 [0143.109] GetFileType (hFile=0x274) returned 0x1 [0143.109] GetFileType (hFile=0x274) returned 0x1 [0143.109] WriteFile (in: hFile=0x274, lpBuffer=0x265f848*, nNumberOfBytesToWrite=0xe60, lpNumberOfBytesWritten=0x31e604, lpOverlapped=0x0 | out: lpBuffer=0x265f848*, lpNumberOfBytesWritten=0x31e604*=0xe60, lpOverlapped=0x0) returned 1 [0143.110] MoveFileW (lpExistingFileName="C:\\Windows\\Microsoft.NET\\Framework\\v4.0.30319\\ASP.NETWebAdminFiles\\AppConfig\\CreateAppSetting.aspx" (normalized: "c:\\windows\\microsoft.net\\framework\\v4.0.30319\\asp.netwebadminfiles\\appconfig\\createappsetting.aspx"), lpNewFileName="C:\\Windows\\Microsoft.NET\\Framework\\v4.0.30319\\ASP.NETWebAdminFiles\\AppConfig\\CreateAppSetting.aspx.[neftet@tutanota.com].boom" (normalized: "c:\\windows\\microsoft.net\\framework\\v4.0.30319\\asp.netwebadminfiles\\appconfig\\createappsetting.aspx.[neftet@tutanota.com].boom")) returned 1 [0143.111] CreateFileW (lpFileName="C:\\Windows\\Microsoft.NET\\Framework\\v4.0.30319\\ASP.NETWebAdminFiles\\AppConfig\\DebugAndTrace.aspx" (normalized: "c:\\windows\\microsoft.net\\framework\\v4.0.30319\\asp.netwebadminfiles\\appconfig\\debugandtrace.aspx"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x274 [0143.111] GetFileType (hFile=0x274) returned 0x1 [0143.111] GetFileType (hFile=0x274) returned 0x1 [0143.111] GetFileSize (in: hFile=0x274, lpFileSizeHigh=0x31e690 | out: lpFileSizeHigh=0x31e690*=0x0) returned 0x33c0 [0143.111] ReadFile (in: hFile=0x274, lpBuffer=0x2660e1c, nNumberOfBytesToRead=0x33c0, lpNumberOfBytesRead=0x31e63c, lpOverlapped=0x0 | out: lpBuffer=0x2660e1c*, lpNumberOfBytesRead=0x31e63c*=0x33c0, lpOverlapped=0x0) returned 1 [0143.112] CreateFileW (lpFileName="C:\\Windows\\Microsoft.NET\\Framework\\v4.0.30319\\ASP.NETWebAdminFiles\\AppConfig\\DebugAndTrace.aspx" (normalized: "c:\\windows\\microsoft.net\\framework\\v4.0.30319\\asp.netwebadminfiles\\appconfig\\debugandtrace.aspx"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x274 [0143.113] GetFileType (hFile=0x274) returned 0x1 [0143.113] GetFileType (hFile=0x274) returned 0x1 [0143.113] WriteFile (in: hFile=0x274, lpBuffer=0x26645f0*, nNumberOfBytesToWrite=0x33c0, lpNumberOfBytesWritten=0x31e630, lpOverlapped=0x0 | out: lpBuffer=0x26645f0*, lpNumberOfBytesWritten=0x31e630*=0x33c0, lpOverlapped=0x0) returned 1 [0143.114] MoveFileW (lpExistingFileName="C:\\Windows\\Microsoft.NET\\Framework\\v4.0.30319\\ASP.NETWebAdminFiles\\AppConfig\\DebugAndTrace.aspx" (normalized: "c:\\windows\\microsoft.net\\framework\\v4.0.30319\\asp.netwebadminfiles\\appconfig\\debugandtrace.aspx"), lpNewFileName="C:\\Windows\\Microsoft.NET\\Framework\\v4.0.30319\\ASP.NETWebAdminFiles\\AppConfig\\DebugAndTrace.aspx.[neftet@tutanota.com].boom" (normalized: "c:\\windows\\microsoft.net\\framework\\v4.0.30319\\asp.netwebadminfiles\\appconfig\\debugandtrace.aspx.[neftet@tutanota.com].boom")) returned 1 [0143.115] CreateFileW (lpFileName="C:\\Windows\\Microsoft.NET\\Framework\\v4.0.30319\\ASP.NETWebAdminFiles\\AppConfig\\DefineErrorPage.aspx" (normalized: "c:\\windows\\microsoft.net\\framework\\v4.0.30319\\asp.netwebadminfiles\\appconfig\\defineerrorpage.aspx"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x274 [0143.115] GetFileType (hFile=0x274) returned 0x1 [0143.115] GetFileType (hFile=0x274) returned 0x1 [0143.115] GetFileSize (in: hFile=0x274, lpFileSizeHigh=0x31e690 | out: lpFileSizeHigh=0x31e690*=0x0) returned 0x4910 [0143.115] ReadFile (in: hFile=0x274, lpBuffer=0x26690f0, nNumberOfBytesToRead=0x4910, lpNumberOfBytesRead=0x31e63c, lpOverlapped=0x0 | out: lpBuffer=0x26690f0*, lpNumberOfBytesRead=0x31e63c*=0x4910, lpOverlapped=0x0) returned 1 [0143.116] CreateFileW (lpFileName="C:\\Windows\\Microsoft.NET\\Framework\\v4.0.30319\\ASP.NETWebAdminFiles\\AppConfig\\DefineErrorPage.aspx" (normalized: "c:\\windows\\microsoft.net\\framework\\v4.0.30319\\asp.netwebadminfiles\\appconfig\\defineerrorpage.aspx"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x274 [0143.118] GetFileType (hFile=0x274) returned 0x1 [0143.118] GetFileType (hFile=0x274) returned 0x1 [0143.118] WriteFile (in: hFile=0x274, lpBuffer=0x266de14*, nNumberOfBytesToWrite=0x4910, lpNumberOfBytesWritten=0x31e630, lpOverlapped=0x0 | out: lpBuffer=0x266de14*, lpNumberOfBytesWritten=0x31e630*=0x4910, lpOverlapped=0x0) returned 1 [0143.119] MoveFileW (lpExistingFileName="C:\\Windows\\Microsoft.NET\\Framework\\v4.0.30319\\ASP.NETWebAdminFiles\\AppConfig\\DefineErrorPage.aspx" (normalized: "c:\\windows\\microsoft.net\\framework\\v4.0.30319\\asp.netwebadminfiles\\appconfig\\defineerrorpage.aspx"), lpNewFileName="C:\\Windows\\Microsoft.NET\\Framework\\v4.0.30319\\ASP.NETWebAdminFiles\\AppConfig\\DefineErrorPage.aspx.[neftet@tutanota.com].boom" (normalized: "c:\\windows\\microsoft.net\\framework\\v4.0.30319\\asp.netwebadminfiles\\appconfig\\defineerrorpage.aspx.[neftet@tutanota.com].boom")) returned 1 [0143.120] CreateFileW (lpFileName="C:\\Windows\\Microsoft.NET\\Framework\\v4.0.30319\\ASP.NETWebAdminFiles\\AppConfig\\EditAppSetting.aspx" (normalized: "c:\\windows\\microsoft.net\\framework\\v4.0.30319\\asp.netwebadminfiles\\appconfig\\editappsetting.aspx"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x274 [0143.120] GetFileType (hFile=0x274) returned 0x1 [0143.120] GetFileType (hFile=0x274) returned 0x1 [0143.120] GetFileSize (in: hFile=0x274, lpFileSizeHigh=0x31e690 | out: lpFileSizeHigh=0x31e690*=0x0) returned 0x910 [0143.120] ReadFile (in: hFile=0x274, lpBuffer=0x2674790, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x31e63c, lpOverlapped=0x0 | out: lpBuffer=0x2674790*, lpNumberOfBytesRead=0x31e63c*=0x910, lpOverlapped=0x0) returned 1 [0143.121] CreateFileW (lpFileName="C:\\Windows\\Microsoft.NET\\Framework\\v4.0.30319\\ASP.NETWebAdminFiles\\AppConfig\\EditAppSetting.aspx" (normalized: "c:\\windows\\microsoft.net\\framework\\v4.0.30319\\asp.netwebadminfiles\\appconfig\\editappsetting.aspx"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x274 [0143.125] GetFileType (hFile=0x274) returned 0x1 [0143.125] GetFileType (hFile=0x274) returned 0x1 [0143.125] WriteFile (in: hFile=0x274, lpBuffer=0x2677638*, nNumberOfBytesToWrite=0x910, lpNumberOfBytesWritten=0x31e604, lpOverlapped=0x0 | out: lpBuffer=0x2677638*, lpNumberOfBytesWritten=0x31e604*=0x910, lpOverlapped=0x0) returned 1 [0143.126] MoveFileW (lpExistingFileName="C:\\Windows\\Microsoft.NET\\Framework\\v4.0.30319\\ASP.NETWebAdminFiles\\AppConfig\\EditAppSetting.aspx" (normalized: "c:\\windows\\microsoft.net\\framework\\v4.0.30319\\asp.netwebadminfiles\\appconfig\\editappsetting.aspx"), lpNewFileName="C:\\Windows\\Microsoft.NET\\Framework\\v4.0.30319\\ASP.NETWebAdminFiles\\AppConfig\\EditAppSetting.aspx.[neftet@tutanota.com].boom" (normalized: "c:\\windows\\microsoft.net\\framework\\v4.0.30319\\asp.netwebadminfiles\\appconfig\\editappsetting.aspx.[neftet@tutanota.com].boom")) returned 1 [0143.127] CreateFileW (lpFileName="C:\\Windows\\Microsoft.NET\\Framework\\v4.0.30319\\ASP.NETWebAdminFiles\\AppConfig\\ManageAppSettings.aspx" (normalized: "c:\\windows\\microsoft.net\\framework\\v4.0.30319\\asp.netwebadminfiles\\appconfig\\manageappsettings.aspx"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x274 [0143.127] GetFileType (hFile=0x274) returned 0x1 [0143.127] GetFileType (hFile=0x274) returned 0x1 [0143.127] GetFileSize (in: hFile=0x274, lpFileSizeHigh=0x31e690 | out: lpFileSizeHigh=0x31e690*=0x0) returned 0x3b60 [0143.127] ReadFile (in: hFile=0x274, lpBuffer=0x2678c10, nNumberOfBytesToRead=0x3b60, lpNumberOfBytesRead=0x31e63c, lpOverlapped=0x0 | out: lpBuffer=0x2678c10*, lpNumberOfBytesRead=0x31e63c*=0x3b60, lpOverlapped=0x0) returned 1 [0143.128] CreateFileW (lpFileName="C:\\Windows\\Microsoft.NET\\Framework\\v4.0.30319\\ASP.NETWebAdminFiles\\AppConfig\\ManageAppSettings.aspx" (normalized: "c:\\windows\\microsoft.net\\framework\\v4.0.30319\\asp.netwebadminfiles\\appconfig\\manageappsettings.aspx"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x274 [0143.129] GetFileType (hFile=0x274) returned 0x1 [0143.129] GetFileType (hFile=0x274) returned 0x1 [0143.129] WriteFile (in: hFile=0x274, lpBuffer=0x267cb84*, nNumberOfBytesToWrite=0x3b60, lpNumberOfBytesWritten=0x31e630, lpOverlapped=0x0 | out: lpBuffer=0x267cb84*, lpNumberOfBytesWritten=0x31e630*=0x3b60, lpOverlapped=0x0) returned 1 [0143.130] MoveFileW (lpExistingFileName="C:\\Windows\\Microsoft.NET\\Framework\\v4.0.30319\\ASP.NETWebAdminFiles\\AppConfig\\ManageAppSettings.aspx" (normalized: "c:\\windows\\microsoft.net\\framework\\v4.0.30319\\asp.netwebadminfiles\\appconfig\\manageappsettings.aspx"), lpNewFileName="C:\\Windows\\Microsoft.NET\\Framework\\v4.0.30319\\ASP.NETWebAdminFiles\\AppConfig\\ManageAppSettings.aspx.[neftet@tutanota.com].boom" (normalized: "c:\\windows\\microsoft.net\\framework\\v4.0.30319\\asp.netwebadminfiles\\appconfig\\manageappsettings.aspx.[neftet@tutanota.com].boom")) returned 1 [0143.131] CreateFileW (lpFileName="C:\\Windows\\Microsoft.NET\\Framework\\v4.0.30319\\ASP.NETWebAdminFiles\\AppConfig\\SmtpSettings.aspx" (normalized: "c:\\windows\\microsoft.net\\framework\\v4.0.30319\\asp.netwebadminfiles\\appconfig\\smtpsettings.aspx"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x274 [0143.131] GetFileType (hFile=0x274) returned 0x1 [0143.131] GetFileType (hFile=0x274) returned 0x1 [0143.131] GetFileSize (in: hFile=0x274, lpFileSizeHigh=0x31e690 | out: lpFileSizeHigh=0x31e690*=0x0) returned 0x47a0 [0143.131] ReadFile (in: hFile=0x274, lpBuffer=0x2681e40, nNumberOfBytesToRead=0x47a0, lpNumberOfBytesRead=0x31e63c, lpOverlapped=0x0 | out: lpBuffer=0x2681e40*, lpNumberOfBytesRead=0x31e63c*=0x47a0, lpOverlapped=0x0) returned 1 [0143.132] CreateFileW (lpFileName="C:\\Windows\\Microsoft.NET\\Framework\\v4.0.30319\\ASP.NETWebAdminFiles\\AppConfig\\SmtpSettings.aspx" (normalized: "c:\\windows\\microsoft.net\\framework\\v4.0.30319\\asp.netwebadminfiles\\appconfig\\smtpsettings.aspx"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x274 [0143.133] GetFileType (hFile=0x274) returned 0x1 [0143.133] GetFileType (hFile=0x274) returned 0x1 [0143.133] WriteFile (in: hFile=0x274, lpBuffer=0x26869f4*, nNumberOfBytesToWrite=0x47a0, lpNumberOfBytesWritten=0x31e630, lpOverlapped=0x0 | out: lpBuffer=0x26869f4*, lpNumberOfBytesWritten=0x31e630*=0x47a0, lpOverlapped=0x0) returned 1 [0143.134] MoveFileW (lpExistingFileName="C:\\Windows\\Microsoft.NET\\Framework\\v4.0.30319\\ASP.NETWebAdminFiles\\AppConfig\\SmtpSettings.aspx" (normalized: "c:\\windows\\microsoft.net\\framework\\v4.0.30319\\asp.netwebadminfiles\\appconfig\\smtpsettings.aspx"), lpNewFileName="C:\\Windows\\Microsoft.NET\\Framework\\v4.0.30319\\ASP.NETWebAdminFiles\\AppConfig\\SmtpSettings.aspx.[neftet@tutanota.com].boom" (normalized: "c:\\windows\\microsoft.net\\framework\\v4.0.30319\\asp.netwebadminfiles\\appconfig\\smtpsettings.aspx.[neftet@tutanota.com].boom")) returned 1 [0143.140] CreateFileW (lpFileName="C:\\Windows\\Microsoft.NET\\Framework\\v4.0.30319\\ASP.NETWebAdminFiles\\App_Data\\GroupedProviders.xml" (normalized: "c:\\windows\\microsoft.net\\framework\\v4.0.30319\\asp.netwebadminfiles\\app_data\\groupedproviders.xml"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x274 [0143.140] GetFileType (hFile=0x274) returned 0x1 [0143.140] GetFileType (hFile=0x274) returned 0x1 [0143.140] GetFileSize (in: hFile=0x274, lpFileSizeHigh=0x31e690 | out: lpFileSizeHigh=0x31e690*=0x0) returned 0x140 [0143.140] ReadFile (in: hFile=0x274, lpBuffer=0x269612c, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x31e63c, lpOverlapped=0x0 | out: lpBuffer=0x269612c*, lpNumberOfBytesRead=0x31e63c*=0x140, lpOverlapped=0x0) returned 1 [0143.141] CreateFileW (lpFileName="C:\\Windows\\Microsoft.NET\\Framework\\v4.0.30319\\ASP.NETWebAdminFiles\\App_Data\\GroupedProviders.xml" (normalized: "c:\\windows\\microsoft.net\\framework\\v4.0.30319\\asp.netwebadminfiles\\app_data\\groupedproviders.xml"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x274 [0143.141] GetFileType (hFile=0x274) returned 0x1 [0143.141] GetFileType (hFile=0x274) returned 0x1 [0143.142] MoveFileW (lpExistingFileName="C:\\Windows\\Microsoft.NET\\Framework\\v4.0.30319\\ASP.NETWebAdminFiles\\App_Data\\GroupedProviders.xml" (normalized: "c:\\windows\\microsoft.net\\framework\\v4.0.30319\\asp.netwebadminfiles\\app_data\\groupedproviders.xml"), lpNewFileName="C:\\Windows\\Microsoft.NET\\Framework\\v4.0.30319\\ASP.NETWebAdminFiles\\App_Data\\GroupedProviders.xml.[neftet@tutanota.com].boom" (normalized: "c:\\windows\\microsoft.net\\framework\\v4.0.30319\\asp.netwebadminfiles\\app_data\\groupedproviders.xml.[neftet@tutanota.com].boom")) returned 1 [0143.146] CreateFileW (lpFileName="C:\\Windows\\Microsoft.NET\\Framework\\v4.0.30319\\ASP.NETWebAdminFiles\\Images\\ASPdotNET_logo.jpg" (normalized: "c:\\windows\\microsoft.net\\framework\\v4.0.30319\\asp.netwebadminfiles\\images\\aspdotnet_logo.jpg"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x274 [0143.146] GetFileType (hFile=0x274) returned 0x1 [0143.146] GetFileType (hFile=0x274) returned 0x1 [0143.146] GetFileSize (in: hFile=0x274, lpFileSizeHigh=0x31e690 | out: lpFileSizeHigh=0x31e690*=0x0) returned 0x57f0 [0143.146] ReadFile (in: hFile=0x274, lpBuffer=0x26a88e0, nNumberOfBytesToRead=0x57f0, lpNumberOfBytesRead=0x31e63c, lpOverlapped=0x0 | out: lpBuffer=0x26a88e0*, lpNumberOfBytesRead=0x31e63c*=0x57f0, lpOverlapped=0x0) returned 1 [0143.147] CreateFileW (lpFileName="C:\\Windows\\Microsoft.NET\\Framework\\v4.0.30319\\ASP.NETWebAdminFiles\\Images\\ASPdotNET_logo.jpg" (normalized: "c:\\windows\\microsoft.net\\framework\\v4.0.30319\\asp.netwebadminfiles\\images\\aspdotnet_logo.jpg"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x274 [0143.148] GetFileType (hFile=0x274) returned 0x1 [0143.148] GetFileType (hFile=0x274) returned 0x1 [0143.148] WriteFile (in: hFile=0x274, lpBuffer=0x26ae4e4*, nNumberOfBytesToWrite=0x57f0, lpNumberOfBytesWritten=0x31e630, lpOverlapped=0x0 | out: lpBuffer=0x26ae4e4*, lpNumberOfBytesWritten=0x31e630*=0x57f0, lpOverlapped=0x0) returned 1 [0143.149] MoveFileW (lpExistingFileName="C:\\Windows\\Microsoft.NET\\Framework\\v4.0.30319\\ASP.NETWebAdminFiles\\Images\\ASPdotNET_logo.jpg" (normalized: "c:\\windows\\microsoft.net\\framework\\v4.0.30319\\asp.netwebadminfiles\\images\\aspdotnet_logo.jpg"), lpNewFileName="C:\\Windows\\Microsoft.NET\\Framework\\v4.0.30319\\ASP.NETWebAdminFiles\\Images\\ASPdotNET_logo.jpg.[neftet@tutanota.com].boom" (normalized: "c:\\windows\\microsoft.net\\framework\\v4.0.30319\\asp.netwebadminfiles\\images\\aspdotnet_logo.jpg.[neftet@tutanota.com].boom")) returned 1 [0143.150] CreateFileW (lpFileName="C:\\Windows\\Microsoft.NET\\Framework\\v4.0.30319\\ASP.NETWebAdminFiles\\Images\\darkBlue_GRAD.jpg" (normalized: "c:\\windows\\microsoft.net\\framework\\v4.0.30319\\asp.netwebadminfiles\\images\\darkblue_grad.jpg"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x274 [0143.150] GetFileType (hFile=0x274) returned 0x1 [0143.150] GetFileType (hFile=0x274) returned 0x1 [0143.150] GetFileSize (in: hFile=0x274, lpFileSizeHigh=0x31e690 | out: lpFileSizeHigh=0x31e690*=0x0) returned 0x2050 [0143.150] ReadFile (in: hFile=0x274, lpBuffer=0x26b5418, nNumberOfBytesToRead=0x2050, lpNumberOfBytesRead=0x31e63c, lpOverlapped=0x0 | out: lpBuffer=0x26b5418*, lpNumberOfBytesRead=0x31e63c*=0x2050, lpOverlapped=0x0) returned 1 [0143.151] CreateFileW (lpFileName="C:\\Windows\\Microsoft.NET\\Framework\\v4.0.30319\\ASP.NETWebAdminFiles\\Images\\darkBlue_GRAD.jpg" (normalized: "c:\\windows\\microsoft.net\\framework\\v4.0.30319\\asp.netwebadminfiles\\images\\darkblue_grad.jpg"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x274 [0143.152] GetFileType (hFile=0x274) returned 0x1 [0143.152] GetFileType (hFile=0x274) returned 0x1 [0143.152] WriteFile (in: hFile=0x274, lpBuffer=0x26b787c*, nNumberOfBytesToWrite=0x2050, lpNumberOfBytesWritten=0x31e630, lpOverlapped=0x0 | out: lpBuffer=0x26b787c*, lpNumberOfBytesWritten=0x31e630*=0x2050, lpOverlapped=0x0) returned 1 [0143.153] MoveFileW (lpExistingFileName="C:\\Windows\\Microsoft.NET\\Framework\\v4.0.30319\\ASP.NETWebAdminFiles\\Images\\darkBlue_GRAD.jpg" (normalized: "c:\\windows\\microsoft.net\\framework\\v4.0.30319\\asp.netwebadminfiles\\images\\darkblue_grad.jpg"), lpNewFileName="C:\\Windows\\Microsoft.NET\\Framework\\v4.0.30319\\ASP.NETWebAdminFiles\\Images\\darkBlue_GRAD.jpg.[neftet@tutanota.com].boom" (normalized: "c:\\windows\\microsoft.net\\framework\\v4.0.30319\\asp.netwebadminfiles\\images\\darkblue_grad.jpg.[neftet@tutanota.com].boom")) returned 1 [0143.154] CreateFileW (lpFileName="C:\\Windows\\Microsoft.NET\\Framework\\v4.0.30319\\ASP.NETWebAdminFiles\\Images\\help.jpg" (normalized: "c:\\windows\\microsoft.net\\framework\\v4.0.30319\\asp.netwebadminfiles\\images\\help.jpg"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x274 [0143.154] GetFileType (hFile=0x274) returned 0x1 [0143.154] GetFileType (hFile=0x274) returned 0x1 [0143.154] GetFileSize (in: hFile=0x274, lpFileSizeHigh=0x31e690 | out: lpFileSizeHigh=0x31e690*=0x0) returned 0x590 [0143.154] ReadFile (in: hFile=0x274, lpBuffer=0x26bb5c8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x31e63c, lpOverlapped=0x0 | out: lpBuffer=0x26bb5c8*, lpNumberOfBytesRead=0x31e63c*=0x590, lpOverlapped=0x0) returned 1 [0143.155] CreateFileW (lpFileName="C:\\Windows\\Microsoft.NET\\Framework\\v4.0.30319\\ASP.NETWebAdminFiles\\Images\\help.jpg" (normalized: "c:\\windows\\microsoft.net\\framework\\v4.0.30319\\asp.netwebadminfiles\\images\\help.jpg"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x274 [0143.164] GetFileType (hFile=0x274) returned 0x1 [0143.164] GetFileType (hFile=0x274) returned 0x1 [0143.164] MoveFileW (lpExistingFileName="C:\\Windows\\Microsoft.NET\\Framework\\v4.0.30319\\ASP.NETWebAdminFiles\\Images\\help.jpg" (normalized: "c:\\windows\\microsoft.net\\framework\\v4.0.30319\\asp.netwebadminfiles\\images\\help.jpg"), lpNewFileName="C:\\Windows\\Microsoft.NET\\Framework\\v4.0.30319\\ASP.NETWebAdminFiles\\Images\\help.jpg.[neftet@tutanota.com].boom" (normalized: "c:\\windows\\microsoft.net\\framework\\v4.0.30319\\asp.netwebadminfiles\\images\\help.jpg.[neftet@tutanota.com].boom")) returned 1 [0143.165] CreateFileW (lpFileName="C:\\Windows\\Microsoft.NET\\Framework\\v4.0.30319\\ASP.NETWebAdminFiles\\Images\\security_watermark.jpg" (normalized: "c:\\windows\\microsoft.net\\framework\\v4.0.30319\\asp.netwebadminfiles\\images\\security_watermark.jpg"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x274 [0143.165] GetFileType (hFile=0x274) returned 0x1 [0143.165] GetFileType (hFile=0x274) returned 0x1 [0143.165] GetFileSize (in: hFile=0x274, lpFileSizeHigh=0x31e690 | out: lpFileSizeHigh=0x31e690*=0x0) returned 0x40 [0143.165] ReadFile (in: hFile=0x274, lpBuffer=0x26bf6ec, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x31e63c, lpOverlapped=0x0 | out: lpBuffer=0x26bf6ec*, lpNumberOfBytesRead=0x31e63c*=0x40, lpOverlapped=0x0) returned 1 [0143.166] CreateFileW (lpFileName="C:\\Windows\\Microsoft.NET\\Framework\\v4.0.30319\\ASP.NETWebAdminFiles\\Images\\security_watermark.jpg" (normalized: "c:\\windows\\microsoft.net\\framework\\v4.0.30319\\asp.netwebadminfiles\\images\\security_watermark.jpg"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x274 [0143.167] GetFileType (hFile=0x274) returned 0x1 [0143.167] GetFileType (hFile=0x274) returned 0x1 [0143.168] MoveFileW (lpExistingFileName="C:\\Windows\\Microsoft.NET\\Framework\\v4.0.30319\\ASP.NETWebAdminFiles\\Images\\security_watermark.jpg" (normalized: "c:\\windows\\microsoft.net\\framework\\v4.0.30319\\asp.netwebadminfiles\\images\\security_watermark.jpg"), lpNewFileName="C:\\Windows\\Microsoft.NET\\Framework\\v4.0.30319\\ASP.NETWebAdminFiles\\Images\\security_watermark.jpg.[neftet@tutanota.com].boom" (normalized: "c:\\windows\\microsoft.net\\framework\\v4.0.30319\\asp.netwebadminfiles\\images\\security_watermark.jpg.[neftet@tutanota.com].boom")) returned 1 [0143.168] CreateFileW (lpFileName="C:\\Windows\\Microsoft.NET\\Framework\\v4.0.30319\\ASP.NETWebAdminFiles\\Images\\topGradRepeat.jpg" (normalized: "c:\\windows\\microsoft.net\\framework\\v4.0.30319\\asp.netwebadminfiles\\images\\topgradrepeat.jpg"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x274 [0143.169] GetFileType (hFile=0x274) returned 0x1 [0143.169] GetFileType (hFile=0x274) returned 0x1 [0143.169] GetFileSize (in: hFile=0x274, lpFileSizeHigh=0x31e690 | out: lpFileSizeHigh=0x31e690*=0x0) returned 0x21f0 [0143.169] ReadFile (in: hFile=0x274, lpBuffer=0x26c32d0, nNumberOfBytesToRead=0x21f0, lpNumberOfBytesRead=0x31e63c, lpOverlapped=0x0 | out: lpBuffer=0x26c32d0*, lpNumberOfBytesRead=0x31e63c*=0x21f0, lpOverlapped=0x0) returned 1 [0143.170] CreateFileW (lpFileName="C:\\Windows\\Microsoft.NET\\Framework\\v4.0.30319\\ASP.NETWebAdminFiles\\Images\\topGradRepeat.jpg" (normalized: "c:\\windows\\microsoft.net\\framework\\v4.0.30319\\asp.netwebadminfiles\\images\\topgradrepeat.jpg"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x274 [0143.170] GetFileType (hFile=0x274) returned 0x1 [0143.171] GetFileType (hFile=0x274) returned 0x1 [0143.171] WriteFile (in: hFile=0x274, lpBuffer=0x26c58d4*, nNumberOfBytesToWrite=0x21f0, lpNumberOfBytesWritten=0x31e630, lpOverlapped=0x0 | out: lpBuffer=0x26c58d4*, lpNumberOfBytesWritten=0x31e630*=0x21f0, lpOverlapped=0x0) returned 1 [0143.172] MoveFileW (lpExistingFileName="C:\\Windows\\Microsoft.NET\\Framework\\v4.0.30319\\ASP.NETWebAdminFiles\\Images\\topGradRepeat.jpg" (normalized: "c:\\windows\\microsoft.net\\framework\\v4.0.30319\\asp.netwebadminfiles\\images\\topgradrepeat.jpg"), lpNewFileName="C:\\Windows\\Microsoft.NET\\Framework\\v4.0.30319\\ASP.NETWebAdminFiles\\Images\\topGradRepeat.jpg.[neftet@tutanota.com].boom" (normalized: "c:\\windows\\microsoft.net\\framework\\v4.0.30319\\asp.netwebadminfiles\\images\\topgradrepeat.jpg.[neftet@tutanota.com].boom")) returned 1 [0143.172] CreateFileW (lpFileName="C:\\Windows\\Microsoft.NET\\Framework\\v4.0.30319\\ASP.NETWebAdminFiles\\Providers\\chooseProviderManagement.aspx" (normalized: "c:\\windows\\microsoft.net\\framework\\v4.0.30319\\asp.netwebadminfiles\\providers\\chooseprovidermanagement.aspx"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x274 [0143.172] GetFileType (hFile=0x274) returned 0x1 [0143.172] GetFileType (hFile=0x274) returned 0x1 [0143.172] GetFileSize (in: hFile=0x274, lpFileSizeHigh=0x31e690 | out: lpFileSizeHigh=0x31e690*=0x0) returned 0x9a0 [0143.173] ReadFile (in: hFile=0x274, lpBuffer=0x26cca50, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x31e63c, lpOverlapped=0x0 | out: lpBuffer=0x26cca50*, lpNumberOfBytesRead=0x31e63c*=0x9a0, lpOverlapped=0x0) returned 1 [0143.173] CreateFileW (lpFileName="C:\\Windows\\Microsoft.NET\\Framework\\v4.0.30319\\ASP.NETWebAdminFiles\\Providers\\chooseProviderManagement.aspx" (normalized: "c:\\windows\\microsoft.net\\framework\\v4.0.30319\\asp.netwebadminfiles\\providers\\chooseprovidermanagement.aspx"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x274 [0143.174] GetFileType (hFile=0x274) returned 0x1 [0143.174] GetFileType (hFile=0x274) returned 0x1 [0143.174] WriteFile (in: hFile=0x274, lpBuffer=0x26cf9b0*, nNumberOfBytesToWrite=0x9a0, lpNumberOfBytesWritten=0x31e604, lpOverlapped=0x0 | out: lpBuffer=0x26cf9b0*, lpNumberOfBytesWritten=0x31e604*=0x9a0, lpOverlapped=0x0) returned 1 [0143.175] MoveFileW (lpExistingFileName="C:\\Windows\\Microsoft.NET\\Framework\\v4.0.30319\\ASP.NETWebAdminFiles\\Providers\\chooseProviderManagement.aspx" (normalized: "c:\\windows\\microsoft.net\\framework\\v4.0.30319\\asp.netwebadminfiles\\providers\\chooseprovidermanagement.aspx"), lpNewFileName="C:\\Windows\\Microsoft.NET\\Framework\\v4.0.30319\\ASP.NETWebAdminFiles\\Providers\\chooseProviderManagement.aspx.[neftet@tutanota.com].boom" (normalized: "c:\\windows\\microsoft.net\\framework\\v4.0.30319\\asp.netwebadminfiles\\providers\\chooseprovidermanagement.aspx.[neftet@tutanota.com].boom")) returned 1 [0143.176] CreateFileW (lpFileName="C:\\Windows\\Microsoft.NET\\Framework\\v4.0.30319\\ASP.NETWebAdminFiles\\Providers\\ManageConsolidatedProviders.aspx" (normalized: "c:\\windows\\microsoft.net\\framework\\v4.0.30319\\asp.netwebadminfiles\\providers\\manageconsolidatedproviders.aspx"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x274 [0143.176] GetFileType (hFile=0x274) returned 0x1 [0143.176] GetFileType (hFile=0x274) returned 0x1 [0143.176] GetFileSize (in: hFile=0x274, lpFileSizeHigh=0x31e690 | out: lpFileSizeHigh=0x31e690*=0x0) returned 0x3140 [0143.176] ReadFile (in: hFile=0x274, lpBuffer=0x26d0fec, nNumberOfBytesToRead=0x3140, lpNumberOfBytesRead=0x31e63c, lpOverlapped=0x0 | out: lpBuffer=0x26d0fec*, lpNumberOfBytesRead=0x31e63c*=0x3140, lpOverlapped=0x0) returned 1 [0143.177] CreateFileW (lpFileName="C:\\Windows\\Microsoft.NET\\Framework\\v4.0.30319\\ASP.NETWebAdminFiles\\Providers\\ManageConsolidatedProviders.aspx" (normalized: "c:\\windows\\microsoft.net\\framework\\v4.0.30319\\asp.netwebadminfiles\\providers\\manageconsolidatedproviders.aspx"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x274 [0143.178] GetFileType (hFile=0x274) returned 0x1 [0143.178] GetFileType (hFile=0x274) returned 0x1 [0143.178] WriteFile (in: hFile=0x274, lpBuffer=0x26d4540*, nNumberOfBytesToWrite=0x3140, lpNumberOfBytesWritten=0x31e630, lpOverlapped=0x0 | out: lpBuffer=0x26d4540*, lpNumberOfBytesWritten=0x31e630*=0x3140, lpOverlapped=0x0) returned 1 [0143.179] MoveFileW (lpExistingFileName="C:\\Windows\\Microsoft.NET\\Framework\\v4.0.30319\\ASP.NETWebAdminFiles\\Providers\\ManageConsolidatedProviders.aspx" (normalized: "c:\\windows\\microsoft.net\\framework\\v4.0.30319\\asp.netwebadminfiles\\providers\\manageconsolidatedproviders.aspx"), lpNewFileName="C:\\Windows\\Microsoft.NET\\Framework\\v4.0.30319\\ASP.NETWebAdminFiles\\Providers\\ManageConsolidatedProviders.aspx.[neftet@tutanota.com].boom" (normalized: "c:\\windows\\microsoft.net\\framework\\v4.0.30319\\asp.netwebadminfiles\\providers\\manageconsolidatedproviders.aspx.[neftet@tutanota.com].boom")) returned 1 [0143.180] CreateFileW (lpFileName="C:\\Windows\\Microsoft.NET\\Framework\\v4.0.30319\\ASP.NETWebAdminFiles\\Providers\\ManageProviders.aspx" (normalized: "c:\\windows\\microsoft.net\\framework\\v4.0.30319\\asp.netwebadminfiles\\providers\\manageproviders.aspx"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x274 [0143.180] GetFileType (hFile=0x274) returned 0x1 [0143.180] GetFileType (hFile=0x274) returned 0x1 [0143.180] GetFileSize (in: hFile=0x274, lpFileSizeHigh=0x31e690 | out: lpFileSizeHigh=0x31e690*=0x0) returned 0x2600 [0143.180] ReadFile (in: hFile=0x274, lpBuffer=0x26d8e4c, nNumberOfBytesToRead=0x2600, lpNumberOfBytesRead=0x31e63c, lpOverlapped=0x0 | out: lpBuffer=0x26d8e4c*, lpNumberOfBytesRead=0x31e63c*=0x2600, lpOverlapped=0x0) returned 1 [0143.181] CreateFileW (lpFileName="C:\\Windows\\Microsoft.NET\\Framework\\v4.0.30319\\ASP.NETWebAdminFiles\\Providers\\ManageProviders.aspx" (normalized: "c:\\windows\\microsoft.net\\framework\\v4.0.30319\\asp.netwebadminfiles\\providers\\manageproviders.aspx"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x274 [0143.182] GetFileType (hFile=0x274) returned 0x1 [0143.182] GetFileType (hFile=0x274) returned 0x1 [0143.182] WriteFile (in: hFile=0x274, lpBuffer=0x26db860*, nNumberOfBytesToWrite=0x2600, lpNumberOfBytesWritten=0x31e630, lpOverlapped=0x0 | out: lpBuffer=0x26db860*, lpNumberOfBytesWritten=0x31e630*=0x2600, lpOverlapped=0x0) returned 1 [0143.183] MoveFileW (lpExistingFileName="C:\\Windows\\Microsoft.NET\\Framework\\v4.0.30319\\ASP.NETWebAdminFiles\\Providers\\ManageProviders.aspx" (normalized: "c:\\windows\\microsoft.net\\framework\\v4.0.30319\\asp.netwebadminfiles\\providers\\manageproviders.aspx"), lpNewFileName="C:\\Windows\\Microsoft.NET\\Framework\\v4.0.30319\\ASP.NETWebAdminFiles\\Providers\\ManageProviders.aspx.[neftet@tutanota.com].boom" (normalized: "c:\\windows\\microsoft.net\\framework\\v4.0.30319\\asp.netwebadminfiles\\providers\\manageproviders.aspx.[neftet@tutanota.com].boom")) returned 1 [0143.187] CreateFileW (lpFileName="C:\\Windows\\Microsoft.NET\\Framework\\v4.0.30319\\ASP.NETWebAdminFiles\\Security\\security.aspx" (normalized: "c:\\windows\\microsoft.net\\framework\\v4.0.30319\\asp.netwebadminfiles\\security\\security.aspx"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x274 [0143.187] GetFileType (hFile=0x274) returned 0x1 [0143.187] GetFileType (hFile=0x274) returned 0x1 [0143.187] GetFileSize (in: hFile=0x274, lpFileSizeHigh=0x31e690 | out: lpFileSizeHigh=0x31e690*=0x0) returned 0x27e0 [0143.187] ReadFile (in: hFile=0x274, lpBuffer=0x26e5d6c, nNumberOfBytesToRead=0x27e0, lpNumberOfBytesRead=0x31e63c, lpOverlapped=0x0 | out: lpBuffer=0x26e5d6c*, lpNumberOfBytesRead=0x31e63c*=0x27e0, lpOverlapped=0x0) returned 1 [0143.188] CreateFileW (lpFileName="C:\\Windows\\Microsoft.NET\\Framework\\v4.0.30319\\ASP.NETWebAdminFiles\\Security\\security.aspx" (normalized: "c:\\windows\\microsoft.net\\framework\\v4.0.30319\\asp.netwebadminfiles\\security\\security.aspx"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x274 [0143.189] GetFileType (hFile=0x274) returned 0x1 [0143.189] GetFileType (hFile=0x274) returned 0x1 [0143.189] WriteFile (in: hFile=0x274, lpBuffer=0x26e8960*, nNumberOfBytesToWrite=0x27e0, lpNumberOfBytesWritten=0x31e630, lpOverlapped=0x0 | out: lpBuffer=0x26e8960*, lpNumberOfBytesWritten=0x31e630*=0x27e0, lpOverlapped=0x0) returned 1 [0143.190] MoveFileW (lpExistingFileName="C:\\Windows\\Microsoft.NET\\Framework\\v4.0.30319\\ASP.NETWebAdminFiles\\Security\\security.aspx" (normalized: "c:\\windows\\microsoft.net\\framework\\v4.0.30319\\asp.netwebadminfiles\\security\\security.aspx"), lpNewFileName="C:\\Windows\\Microsoft.NET\\Framework\\v4.0.30319\\ASP.NETWebAdminFiles\\Security\\security.aspx.[neftet@tutanota.com].boom" (normalized: "c:\\windows\\microsoft.net\\framework\\v4.0.30319\\asp.netwebadminfiles\\security\\security.aspx.[neftet@tutanota.com].boom")) returned 1 [0143.191] CreateFileW (lpFileName="C:\\Windows\\Microsoft.NET\\Framework\\v4.0.30319\\ASP.NETWebAdminFiles\\Security\\security0.aspx" (normalized: "c:\\windows\\microsoft.net\\framework\\v4.0.30319\\asp.netwebadminfiles\\security\\security0.aspx"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x274 [0143.191] GetFileType (hFile=0x274) returned 0x1 [0143.191] GetFileType (hFile=0x274) returned 0x1 [0143.191] GetFileSize (in: hFile=0x274, lpFileSizeHigh=0x31e690 | out: lpFileSizeHigh=0x31e690*=0x0) returned 0x5b0 [0143.191] ReadFile (in: hFile=0x274, lpBuffer=0x26ecde8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x31e63c, lpOverlapped=0x0 | out: lpBuffer=0x26ecde8*, lpNumberOfBytesRead=0x31e63c*=0x5b0, lpOverlapped=0x0) returned 1 [0143.192] CreateFileW (lpFileName="C:\\Windows\\Microsoft.NET\\Framework\\v4.0.30319\\ASP.NETWebAdminFiles\\Security\\security0.aspx" (normalized: "c:\\windows\\microsoft.net\\framework\\v4.0.30319\\asp.netwebadminfiles\\security\\security0.aspx"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x274 [0143.193] GetFileType (hFile=0x274) returned 0x1 [0143.193] GetFileType (hFile=0x274) returned 0x1 [0143.193] WriteFile (in: hFile=0x274, lpBuffer=0x26ef91c*, nNumberOfBytesToWrite=0x5b0, lpNumberOfBytesWritten=0x31e604, lpOverlapped=0x0 | out: lpBuffer=0x26ef91c*, lpNumberOfBytesWritten=0x31e604*=0x5b0, lpOverlapped=0x0) returned 1 [0143.194] MoveFileW (lpExistingFileName="C:\\Windows\\Microsoft.NET\\Framework\\v4.0.30319\\ASP.NETWebAdminFiles\\Security\\security0.aspx" (normalized: "c:\\windows\\microsoft.net\\framework\\v4.0.30319\\asp.netwebadminfiles\\security\\security0.aspx"), lpNewFileName="C:\\Windows\\Microsoft.NET\\Framework\\v4.0.30319\\ASP.NETWebAdminFiles\\Security\\security0.aspx.[neftet@tutanota.com].boom" (normalized: "c:\\windows\\microsoft.net\\framework\\v4.0.30319\\asp.netwebadminfiles\\security\\security0.aspx.[neftet@tutanota.com].boom")) returned 1 [0143.195] CreateFileW (lpFileName="C:\\Windows\\Microsoft.NET\\Framework\\v4.0.30319\\ASP.NETWebAdminFiles\\Security\\setUpAuthentication.aspx" (normalized: "c:\\windows\\microsoft.net\\framework\\v4.0.30319\\asp.netwebadminfiles\\security\\setupauthentication.aspx"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x274 [0143.195] GetFileType (hFile=0x274) returned 0x1 [0143.195] GetFileType (hFile=0x274) returned 0x1 [0143.195] GetFileSize (in: hFile=0x274, lpFileSizeHigh=0x31e690 | out: lpFileSizeHigh=0x31e690*=0x0) returned 0xa10 [0143.195] ReadFile (in: hFile=0x274, lpBuffer=0x26f18f4, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x31e63c, lpOverlapped=0x0 | out: lpBuffer=0x26f18f4*, lpNumberOfBytesRead=0x31e63c*=0xa10, lpOverlapped=0x0) returned 1 [0143.196] CreateFileW (lpFileName="C:\\Windows\\Microsoft.NET\\Framework\\v4.0.30319\\ASP.NETWebAdminFiles\\Security\\setUpAuthentication.aspx" (normalized: "c:\\windows\\microsoft.net\\framework\\v4.0.30319\\asp.netwebadminfiles\\security\\setupauthentication.aspx"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x274 [0143.196] GetFileType (hFile=0x274) returned 0x1 [0143.196] GetFileType (hFile=0x274) returned 0x1 [0143.197] MoveFileW (lpExistingFileName="C:\\Windows\\Microsoft.NET\\Framework\\v4.0.30319\\ASP.NETWebAdminFiles\\Security\\setUpAuthentication.aspx" (normalized: "c:\\windows\\microsoft.net\\framework\\v4.0.30319\\asp.netwebadminfiles\\security\\setupauthentication.aspx"), lpNewFileName="C:\\Windows\\Microsoft.NET\\Framework\\v4.0.30319\\ASP.NETWebAdminFiles\\Security\\setUpAuthentication.aspx.[neftet@tutanota.com].boom" (normalized: "c:\\windows\\microsoft.net\\framework\\v4.0.30319\\asp.netwebadminfiles\\security\\setupauthentication.aspx.[neftet@tutanota.com].boom")) returned 1 [0143.200] CreateFileW (lpFileName="C:\\Windows\\Microsoft.NET\\Framework\\v4.0.30319\\ASP.NETWebAdminFiles\\Security\\Permissions\\createPermission.aspx" (normalized: "c:\\windows\\microsoft.net\\framework\\v4.0.30319\\asp.netwebadminfiles\\security\\permissions\\createpermission.aspx"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x274 [0143.200] GetFileType (hFile=0x274) returned 0x1 [0143.200] GetFileType (hFile=0x274) returned 0x1 [0143.200] GetFileSize (in: hFile=0x274, lpFileSizeHigh=0x31e618 | out: lpFileSizeHigh=0x31e618*=0x0) returned 0x2ba0 [0143.200] ReadFile (in: hFile=0x274, lpBuffer=0x26fb180, nNumberOfBytesToRead=0x2ba0, lpNumberOfBytesRead=0x31e5c4, lpOverlapped=0x0 | out: lpBuffer=0x26fb180*, lpNumberOfBytesRead=0x31e5c4*=0x2ba0, lpOverlapped=0x0) returned 1 [0143.201] CreateFileW (lpFileName="C:\\Windows\\Microsoft.NET\\Framework\\v4.0.30319\\ASP.NETWebAdminFiles\\Security\\Permissions\\createPermission.aspx" (normalized: "c:\\windows\\microsoft.net\\framework\\v4.0.30319\\asp.netwebadminfiles\\security\\permissions\\createpermission.aspx"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x274 [0143.202] GetFileType (hFile=0x274) returned 0x1 [0143.202] GetFileType (hFile=0x274) returned 0x1 [0143.202] WriteFile (in: hFile=0x274, lpBuffer=0x26fe134*, nNumberOfBytesToWrite=0x2ba0, lpNumberOfBytesWritten=0x31e5b8, lpOverlapped=0x0 | out: lpBuffer=0x26fe134*, lpNumberOfBytesWritten=0x31e5b8*=0x2ba0, lpOverlapped=0x0) returned 1 [0143.203] MoveFileW (lpExistingFileName="C:\\Windows\\Microsoft.NET\\Framework\\v4.0.30319\\ASP.NETWebAdminFiles\\Security\\Permissions\\createPermission.aspx" (normalized: "c:\\windows\\microsoft.net\\framework\\v4.0.30319\\asp.netwebadminfiles\\security\\permissions\\createpermission.aspx"), lpNewFileName="C:\\Windows\\Microsoft.NET\\Framework\\v4.0.30319\\ASP.NETWebAdminFiles\\Security\\Permissions\\createPermission.aspx.[neftet@tutanota.com].boom" (normalized: "c:\\windows\\microsoft.net\\framework\\v4.0.30319\\asp.netwebadminfiles\\security\\permissions\\createpermission.aspx.[neftet@tutanota.com].boom")) returned 1 [0143.204] CreateFileW (lpFileName="C:\\Windows\\Microsoft.NET\\Framework\\v4.0.30319\\ASP.NETWebAdminFiles\\Security\\Permissions\\managePermissions.aspx" (normalized: "c:\\windows\\microsoft.net\\framework\\v4.0.30319\\asp.netwebadminfiles\\security\\permissions\\managepermissions.aspx"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x274 [0143.204] GetFileType (hFile=0x274) returned 0x1 [0143.204] GetFileType (hFile=0x274) returned 0x1 [0143.204] GetFileSize (in: hFile=0x274, lpFileSizeHigh=0x31e618 | out: lpFileSizeHigh=0x31e618*=0x0) returned 0x54b0 [0143.204] ReadFile (in: hFile=0x274, lpBuffer=0x27024a8, nNumberOfBytesToRead=0x54b0, lpNumberOfBytesRead=0x31e5c4, lpOverlapped=0x0 | out: lpBuffer=0x27024a8*, lpNumberOfBytesRead=0x31e5c4*=0x54b0, lpOverlapped=0x0) returned 1 [0143.206] CreateFileW (lpFileName="C:\\Windows\\Microsoft.NET\\Framework\\v4.0.30319\\ASP.NETWebAdminFiles\\Security\\Permissions\\managePermissions.aspx" (normalized: "c:\\windows\\microsoft.net\\framework\\v4.0.30319\\asp.netwebadminfiles\\security\\permissions\\managepermissions.aspx"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x274 [0143.206] GetFileType (hFile=0x274) returned 0x1 [0143.206] GetFileType (hFile=0x274) returned 0x1 [0143.207] WriteFile (in: hFile=0x274, lpBuffer=0x2707d6c*, nNumberOfBytesToWrite=0x54b0, lpNumberOfBytesWritten=0x31e5b8, lpOverlapped=0x0 | out: lpBuffer=0x2707d6c*, lpNumberOfBytesWritten=0x31e5b8*=0x54b0, lpOverlapped=0x0) returned 1 [0143.208] MoveFileW (lpExistingFileName="C:\\Windows\\Microsoft.NET\\Framework\\v4.0.30319\\ASP.NETWebAdminFiles\\Security\\Permissions\\managePermissions.aspx" (normalized: "c:\\windows\\microsoft.net\\framework\\v4.0.30319\\asp.netwebadminfiles\\security\\permissions\\managepermissions.aspx"), lpNewFileName="C:\\Windows\\Microsoft.NET\\Framework\\v4.0.30319\\ASP.NETWebAdminFiles\\Security\\Permissions\\managePermissions.aspx.[neftet@tutanota.com].boom" (normalized: "c:\\windows\\microsoft.net\\framework\\v4.0.30319\\asp.netwebadminfiles\\security\\permissions\\managepermissions.aspx.[neftet@tutanota.com].boom")) returned 1 [0143.209] CreateFileW (lpFileName="C:\\Windows\\Microsoft.NET\\Framework\\v4.0.30319\\ASP.NETWebAdminFiles\\Security\\Roles\\manageAllRoles.aspx" (normalized: "c:\\windows\\microsoft.net\\framework\\v4.0.30319\\asp.netwebadminfiles\\security\\roles\\manageallroles.aspx"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x274 [0143.209] GetFileType (hFile=0x274) returned 0x1 [0143.209] GetFileType (hFile=0x274) returned 0x1 [0143.209] GetFileSize (in: hFile=0x274, lpFileSizeHigh=0x31e618 | out: lpFileSizeHigh=0x31e618*=0x0) returned 0x1c70 [0143.209] ReadFile (in: hFile=0x274, lpBuffer=0x2713920, nNumberOfBytesToRead=0x1c70, lpNumberOfBytesRead=0x31e5c4, lpOverlapped=0x0 | out: lpBuffer=0x2713920*, lpNumberOfBytesRead=0x31e5c4*=0x1c70, lpOverlapped=0x0) returned 1 [0143.210] CreateFileW (lpFileName="C:\\Windows\\Microsoft.NET\\Framework\\v4.0.30319\\ASP.NETWebAdminFiles\\Security\\Roles\\manageAllRoles.aspx" (normalized: "c:\\windows\\microsoft.net\\framework\\v4.0.30319\\asp.netwebadminfiles\\security\\roles\\manageallroles.aspx"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x274 [0143.211] GetFileType (hFile=0x274) returned 0x1 [0143.211] GetFileType (hFile=0x274) returned 0x1 [0143.211] WriteFile (in: hFile=0x274, lpBuffer=0x27159a4*, nNumberOfBytesToWrite=0x1c70, lpNumberOfBytesWritten=0x31e5b8, lpOverlapped=0x0 | out: lpBuffer=0x27159a4*, lpNumberOfBytesWritten=0x31e5b8*=0x1c70, lpOverlapped=0x0) returned 1 [0143.212] MoveFileW (lpExistingFileName="C:\\Windows\\Microsoft.NET\\Framework\\v4.0.30319\\ASP.NETWebAdminFiles\\Security\\Roles\\manageAllRoles.aspx" (normalized: "c:\\windows\\microsoft.net\\framework\\v4.0.30319\\asp.netwebadminfiles\\security\\roles\\manageallroles.aspx"), lpNewFileName="C:\\Windows\\Microsoft.NET\\Framework\\v4.0.30319\\ASP.NETWebAdminFiles\\Security\\Roles\\manageAllRoles.aspx.[neftet@tutanota.com].boom" (normalized: "c:\\windows\\microsoft.net\\framework\\v4.0.30319\\asp.netwebadminfiles\\security\\roles\\manageallroles.aspx.[neftet@tutanota.com].boom")) returned 1 [0143.212] CreateFileW (lpFileName="C:\\Windows\\Microsoft.NET\\Framework\\v4.0.30319\\ASP.NETWebAdminFiles\\Security\\Roles\\manageSingleRole.aspx" (normalized: "c:\\windows\\microsoft.net\\framework\\v4.0.30319\\asp.netwebadminfiles\\security\\roles\\managesinglerole.aspx"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x274 [0143.212] GetFileType (hFile=0x274) returned 0x1 [0143.213] GetFileType (hFile=0x274) returned 0x1 [0143.213] GetFileSize (in: hFile=0x274, lpFileSizeHigh=0x31e618 | out: lpFileSizeHigh=0x31e618*=0x0) returned 0x2740 [0143.213] ReadFile (in: hFile=0x274, lpBuffer=0x2718d90, nNumberOfBytesToRead=0x2740, lpNumberOfBytesRead=0x31e5c4, lpOverlapped=0x0 | out: lpBuffer=0x2718d90*, lpNumberOfBytesRead=0x31e5c4*=0x2740, lpOverlapped=0x0) returned 1 [0143.214] CreateFileW (lpFileName="C:\\Windows\\Microsoft.NET\\Framework\\v4.0.30319\\ASP.NETWebAdminFiles\\Security\\Roles\\manageSingleRole.aspx" (normalized: "c:\\windows\\microsoft.net\\framework\\v4.0.30319\\asp.netwebadminfiles\\security\\roles\\managesinglerole.aspx"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x274 [0143.214] GetFileType (hFile=0x274) returned 0x1 [0143.214] GetFileType (hFile=0x274) returned 0x1 [0143.214] WriteFile (in: hFile=0x274, lpBuffer=0x271b8e4*, nNumberOfBytesToWrite=0x2740, lpNumberOfBytesWritten=0x31e5b8, lpOverlapped=0x0 | out: lpBuffer=0x271b8e4*, lpNumberOfBytesWritten=0x31e5b8*=0x2740, lpOverlapped=0x0) returned 1 [0143.215] MoveFileW (lpExistingFileName="C:\\Windows\\Microsoft.NET\\Framework\\v4.0.30319\\ASP.NETWebAdminFiles\\Security\\Roles\\manageSingleRole.aspx" (normalized: "c:\\windows\\microsoft.net\\framework\\v4.0.30319\\asp.netwebadminfiles\\security\\roles\\managesinglerole.aspx"), lpNewFileName="C:\\Windows\\Microsoft.NET\\Framework\\v4.0.30319\\ASP.NETWebAdminFiles\\Security\\Roles\\manageSingleRole.aspx.[neftet@tutanota.com].boom" (normalized: "c:\\windows\\microsoft.net\\framework\\v4.0.30319\\asp.netwebadminfiles\\security\\roles\\managesinglerole.aspx.[neftet@tutanota.com].boom")) returned 1 [0143.216] CreateFileW (lpFileName="C:\\Windows\\Microsoft.NET\\Framework\\v4.0.30319\\ASP.NETWebAdminFiles\\Security\\Users\\addUser.aspx" (normalized: "c:\\windows\\microsoft.net\\framework\\v4.0.30319\\asp.netwebadminfiles\\security\\users\\adduser.aspx"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x274 [0143.216] GetFileType (hFile=0x274) returned 0x1 [0143.217] GetFileType (hFile=0x274) returned 0x1 [0143.217] GetFileSize (in: hFile=0x274, lpFileSizeHigh=0x31e618 | out: lpFileSizeHigh=0x31e618*=0x0) returned 0x1510 [0143.217] ReadFile (in: hFile=0x274, lpBuffer=0x2724d1c, nNumberOfBytesToRead=0x1510, lpNumberOfBytesRead=0x31e5c4, lpOverlapped=0x0 | out: lpBuffer=0x2724d1c*, lpNumberOfBytesRead=0x31e5c4*=0x1510, lpOverlapped=0x0) returned 1 [0143.217] CreateFileW (lpFileName="C:\\Windows\\Microsoft.NET\\Framework\\v4.0.30319\\ASP.NETWebAdminFiles\\Security\\Users\\addUser.aspx" (normalized: "c:\\windows\\microsoft.net\\framework\\v4.0.30319\\asp.netwebadminfiles\\security\\users\\adduser.aspx"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x274 [0143.218] GetFileType (hFile=0x274) returned 0x1 [0143.218] GetFileType (hFile=0x274) returned 0x1 [0143.218] WriteFile (in: hFile=0x274, lpBuffer=0x2726640*, nNumberOfBytesToWrite=0x1510, lpNumberOfBytesWritten=0x31e5b8, lpOverlapped=0x0 | out: lpBuffer=0x2726640*, lpNumberOfBytesWritten=0x31e5b8*=0x1510, lpOverlapped=0x0) returned 1 [0143.219] MoveFileW (lpExistingFileName="C:\\Windows\\Microsoft.NET\\Framework\\v4.0.30319\\ASP.NETWebAdminFiles\\Security\\Users\\addUser.aspx" (normalized: "c:\\windows\\microsoft.net\\framework\\v4.0.30319\\asp.netwebadminfiles\\security\\users\\adduser.aspx"), lpNewFileName="C:\\Windows\\Microsoft.NET\\Framework\\v4.0.30319\\ASP.NETWebAdminFiles\\Security\\Users\\addUser.aspx.[neftet@tutanota.com].boom" (normalized: "c:\\windows\\microsoft.net\\framework\\v4.0.30319\\asp.netwebadminfiles\\security\\users\\adduser.aspx.[neftet@tutanota.com].boom")) returned 1 [0143.220] CreateFileW (lpFileName="C:\\Windows\\Microsoft.NET\\Framework\\v4.0.30319\\ASP.NETWebAdminFiles\\Security\\Users\\editUser.aspx" (normalized: "c:\\windows\\microsoft.net\\framework\\v4.0.30319\\asp.netwebadminfiles\\security\\users\\edituser.aspx"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x274 [0143.220] GetFileType (hFile=0x274) returned 0x1 [0143.220] GetFileType (hFile=0x274) returned 0x1 [0143.220] GetFileSize (in: hFile=0x274, lpFileSizeHigh=0x31e618 | out: lpFileSizeHigh=0x31e618*=0x0) returned 0x2f50 [0143.220] ReadFile (in: hFile=0x274, lpBuffer=0x2729268, nNumberOfBytesToRead=0x2f50, lpNumberOfBytesRead=0x31e5c4, lpOverlapped=0x0 | out: lpBuffer=0x2729268*, lpNumberOfBytesRead=0x31e5c4*=0x2f50, lpOverlapped=0x0) returned 1 [0143.221] CreateFileW (lpFileName="C:\\Windows\\Microsoft.NET\\Framework\\v4.0.30319\\ASP.NETWebAdminFiles\\Security\\Users\\editUser.aspx" (normalized: "c:\\windows\\microsoft.net\\framework\\v4.0.30319\\asp.netwebadminfiles\\security\\users\\edituser.aspx"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x274 [0143.222] GetFileType (hFile=0x274) returned 0x1 [0143.222] GetFileType (hFile=0x274) returned 0x1 [0143.222] WriteFile (in: hFile=0x274, lpBuffer=0x272c5cc*, nNumberOfBytesToWrite=0x2f50, lpNumberOfBytesWritten=0x31e5b8, lpOverlapped=0x0 | out: lpBuffer=0x272c5cc*, lpNumberOfBytesWritten=0x31e5b8*=0x2f50, lpOverlapped=0x0) returned 1 [0143.223] MoveFileW (lpExistingFileName="C:\\Windows\\Microsoft.NET\\Framework\\v4.0.30319\\ASP.NETWebAdminFiles\\Security\\Users\\editUser.aspx" (normalized: "c:\\windows\\microsoft.net\\framework\\v4.0.30319\\asp.netwebadminfiles\\security\\users\\edituser.aspx"), lpNewFileName="C:\\Windows\\Microsoft.NET\\Framework\\v4.0.30319\\ASP.NETWebAdminFiles\\Security\\Users\\editUser.aspx.[neftet@tutanota.com].boom" (normalized: "c:\\windows\\microsoft.net\\framework\\v4.0.30319\\asp.netwebadminfiles\\security\\users\\edituser.aspx.[neftet@tutanota.com].boom")) returned 1 [0143.224] CreateFileW (lpFileName="C:\\Windows\\Microsoft.NET\\Framework\\v4.0.30319\\ASP.NETWebAdminFiles\\Security\\Users\\findUsers.aspx" (normalized: "c:\\windows\\microsoft.net\\framework\\v4.0.30319\\asp.netwebadminfiles\\security\\users\\findusers.aspx"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x274 [0143.224] GetFileType (hFile=0x274) returned 0x1 [0143.224] GetFileType (hFile=0x274) returned 0x1 [0143.224] GetFileSize (in: hFile=0x274, lpFileSizeHigh=0x31e618 | out: lpFileSizeHigh=0x31e618*=0x0) returned 0x20c0 [0143.224] ReadFile (in: hFile=0x274, lpBuffer=0x2730c44, nNumberOfBytesToRead=0x20c0, lpNumberOfBytesRead=0x31e5c4, lpOverlapped=0x0 | out: lpBuffer=0x2730c44*, lpNumberOfBytesRead=0x31e5c4*=0x20c0, lpOverlapped=0x0) returned 1 [0143.225] CreateFileW (lpFileName="C:\\Windows\\Microsoft.NET\\Framework\\v4.0.30319\\ASP.NETWebAdminFiles\\Security\\Users\\findUsers.aspx" (normalized: "c:\\windows\\microsoft.net\\framework\\v4.0.30319\\asp.netwebadminfiles\\security\\users\\findusers.aspx"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x274 [0143.226] GetFileType (hFile=0x274) returned 0x1 [0143.226] GetFileType (hFile=0x274) returned 0x1 [0143.226] WriteFile (in: hFile=0x274, lpBuffer=0x2733118*, nNumberOfBytesToWrite=0x20c0, lpNumberOfBytesWritten=0x31e5b8, lpOverlapped=0x0 | out: lpBuffer=0x2733118*, lpNumberOfBytesWritten=0x31e5b8*=0x20c0, lpOverlapped=0x0) returned 1 [0143.227] MoveFileW (lpExistingFileName="C:\\Windows\\Microsoft.NET\\Framework\\v4.0.30319\\ASP.NETWebAdminFiles\\Security\\Users\\findUsers.aspx" (normalized: "c:\\windows\\microsoft.net\\framework\\v4.0.30319\\asp.netwebadminfiles\\security\\users\\findusers.aspx"), lpNewFileName="C:\\Windows\\Microsoft.NET\\Framework\\v4.0.30319\\ASP.NETWebAdminFiles\\Security\\Users\\findUsers.aspx.[neftet@tutanota.com].boom" (normalized: "c:\\windows\\microsoft.net\\framework\\v4.0.30319\\asp.netwebadminfiles\\security\\users\\findusers.aspx.[neftet@tutanota.com].boom")) returned 1 [0143.228] CreateFileW (lpFileName="C:\\Windows\\Microsoft.NET\\Framework\\v4.0.30319\\ASP.NETWebAdminFiles\\Security\\Users\\manageUsers.aspx" (normalized: "c:\\windows\\microsoft.net\\framework\\v4.0.30319\\asp.netwebadminfiles\\security\\users\\manageusers.aspx"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x274 [0143.228] GetFileType (hFile=0x274) returned 0x1 [0143.228] GetFileType (hFile=0x274) returned 0x1 [0143.228] GetFileSize (in: hFile=0x274, lpFileSizeHigh=0x31e618 | out: lpFileSizeHigh=0x31e618*=0x0) returned 0x3db0 [0143.228] ReadFile (in: hFile=0x274, lpBuffer=0x2736914, nNumberOfBytesToRead=0x3db0, lpNumberOfBytesRead=0x31e5c4, lpOverlapped=0x0 | out: lpBuffer=0x2736914*, lpNumberOfBytesRead=0x31e5c4*=0x3db0, lpOverlapped=0x0) returned 1 [0143.229] CreateFileW (lpFileName="C:\\Windows\\Microsoft.NET\\Framework\\v4.0.30319\\ASP.NETWebAdminFiles\\Security\\Users\\manageUsers.aspx" (normalized: "c:\\windows\\microsoft.net\\framework\\v4.0.30319\\asp.netwebadminfiles\\security\\users\\manageusers.aspx"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x274 [0143.230] GetFileType (hFile=0x274) returned 0x1 [0143.230] GetFileType (hFile=0x274) returned 0x1 [0143.230] WriteFile (in: hFile=0x274, lpBuffer=0x273aad8*, nNumberOfBytesToWrite=0x3db0, lpNumberOfBytesWritten=0x31e5b8, lpOverlapped=0x0 | out: lpBuffer=0x273aad8*, lpNumberOfBytesWritten=0x31e5b8*=0x3db0, lpOverlapped=0x0) returned 1 [0143.232] MoveFileW (lpExistingFileName="C:\\Windows\\Microsoft.NET\\Framework\\v4.0.30319\\ASP.NETWebAdminFiles\\Security\\Users\\manageUsers.aspx" (normalized: "c:\\windows\\microsoft.net\\framework\\v4.0.30319\\asp.netwebadminfiles\\security\\users\\manageusers.aspx"), lpNewFileName="C:\\Windows\\Microsoft.NET\\Framework\\v4.0.30319\\ASP.NETWebAdminFiles\\Security\\Users\\manageUsers.aspx.[neftet@tutanota.com].boom" (normalized: "c:\\windows\\microsoft.net\\framework\\v4.0.30319\\asp.netwebadminfiles\\security\\users\\manageusers.aspx.[neftet@tutanota.com].boom")) returned 1 [0143.235] CreateFileW (lpFileName="C:\\Windows\\Microsoft.NET\\Framework\\v4.0.30319\\ASP.NETWebAdminFiles\\Security\\Wizard\\wizard.aspx" (normalized: "c:\\windows\\microsoft.net\\framework\\v4.0.30319\\asp.netwebadminfiles\\security\\wizard\\wizard.aspx"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x274 [0143.235] GetFileType (hFile=0x274) returned 0x1 [0143.235] GetFileType (hFile=0x274) returned 0x1 [0143.235] GetFileSize (in: hFile=0x274, lpFileSizeHigh=0x31e618 | out: lpFileSizeHigh=0x31e618*=0x0) returned 0x2af0 [0143.235] ReadFile (in: hFile=0x274, lpBuffer=0x27477c4, nNumberOfBytesToRead=0x2af0, lpNumberOfBytesRead=0x31e5c4, lpOverlapped=0x0 | out: lpBuffer=0x27477c4*, lpNumberOfBytesRead=0x31e5c4*=0x2af0, lpOverlapped=0x0) returned 1 [0143.236] CreateFileW (lpFileName="C:\\Windows\\Microsoft.NET\\Framework\\v4.0.30319\\ASP.NETWebAdminFiles\\Security\\Wizard\\wizard.aspx" (normalized: "c:\\windows\\microsoft.net\\framework\\v4.0.30319\\asp.netwebadminfiles\\security\\wizard\\wizard.aspx"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x274 [0143.237] GetFileType (hFile=0x274) returned 0x1 [0143.237] GetFileType (hFile=0x274) returned 0x1 [0143.237] WriteFile (in: hFile=0x274, lpBuffer=0x274a6c8*, nNumberOfBytesToWrite=0x2af0, lpNumberOfBytesWritten=0x31e5b8, lpOverlapped=0x0 | out: lpBuffer=0x274a6c8*, lpNumberOfBytesWritten=0x31e5b8*=0x2af0, lpOverlapped=0x0) returned 1 [0143.238] MoveFileW (lpExistingFileName="C:\\Windows\\Microsoft.NET\\Framework\\v4.0.30319\\ASP.NETWebAdminFiles\\Security\\Wizard\\wizard.aspx" (normalized: "c:\\windows\\microsoft.net\\framework\\v4.0.30319\\asp.netwebadminfiles\\security\\wizard\\wizard.aspx"), lpNewFileName="C:\\Windows\\Microsoft.NET\\Framework\\v4.0.30319\\ASP.NETWebAdminFiles\\Security\\Wizard\\wizard.aspx.[neftet@tutanota.com].boom" (normalized: "c:\\windows\\microsoft.net\\framework\\v4.0.30319\\asp.netwebadminfiles\\security\\wizard\\wizard.aspx.[neftet@tutanota.com].boom")) returned 1 [0143.241] CreateFileW (lpFileName="C:\\Windows\\Microsoft.NET\\Framework\\v4.0.30319\\Config\\DefaultWsdlHelpGenerator.aspx" (normalized: "c:\\windows\\microsoft.net\\framework\\v4.0.30319\\config\\defaultwsdlhelpgenerator.aspx"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x274 [0143.241] GetFileType (hFile=0x274) returned 0x1 [0143.241] GetFileType (hFile=0x274) returned 0x1 [0143.242] GetFileSize (in: hFile=0x274, lpFileSizeHigh=0x31e708 | out: lpFileSizeHigh=0x31e708*=0x0) returned 0x11320 [0143.242] ReadFile (in: hFile=0x274, lpBuffer=0x275b100, nNumberOfBytesToRead=0x11320, lpNumberOfBytesRead=0x31e6b4, lpOverlapped=0x0 | out: lpBuffer=0x275b100*, lpNumberOfBytesRead=0x31e6b4*=0x11320, lpOverlapped=0x0) returned 1 [0143.244] CreateFileW (lpFileName="C:\\Windows\\Microsoft.NET\\Framework\\v4.0.30319\\Config\\DefaultWsdlHelpGenerator.aspx" (normalized: "c:\\windows\\microsoft.net\\framework\\v4.0.30319\\config\\defaultwsdlhelpgenerator.aspx"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x274 [0143.245] GetFileType (hFile=0x274) returned 0x1 [0143.245] GetFileType (hFile=0x274) returned 0x1 [0143.245] WriteFile (in: hFile=0x274, lpBuffer=0x276c834*, nNumberOfBytesToWrite=0x11320, lpNumberOfBytesWritten=0x31e6a8, lpOverlapped=0x0 | out: lpBuffer=0x276c834*, lpNumberOfBytesWritten=0x31e6a8*=0x11320, lpOverlapped=0x0) returned 1 [0143.247] MoveFileW (lpExistingFileName="C:\\Windows\\Microsoft.NET\\Framework\\v4.0.30319\\Config\\DefaultWsdlHelpGenerator.aspx" (normalized: "c:\\windows\\microsoft.net\\framework\\v4.0.30319\\config\\defaultwsdlhelpgenerator.aspx"), lpNewFileName="C:\\Windows\\Microsoft.NET\\Framework\\v4.0.30319\\Config\\DefaultWsdlHelpGenerator.aspx.[neftet@tutanota.com].boom" (normalized: "c:\\windows\\microsoft.net\\framework\\v4.0.30319\\config\\defaultwsdlhelpgenerator.aspx.[neftet@tutanota.com].boom")) returned 1 [0143.248] CreateFileW (lpFileName="C:\\Windows\\Microsoft.NET\\Framework\\v4.0.30319\\Config\\NetFx40_IIS_schema_update.xml" (normalized: "c:\\windows\\microsoft.net\\framework\\v4.0.30319\\config\\netfx40_iis_schema_update.xml"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x274 [0143.248] GetFileType (hFile=0x274) returned 0x1 [0143.248] GetFileType (hFile=0x274) returned 0x1 [0143.248] GetFileSize (in: hFile=0x274, lpFileSizeHigh=0x31e708 | out: lpFileSizeHigh=0x31e708*=0x0) returned 0xd80 [0143.248] ReadFile (in: hFile=0x274, lpBuffer=0x278010c, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x31e6b4, lpOverlapped=0x0 | out: lpBuffer=0x278010c*, lpNumberOfBytesRead=0x31e6b4*=0xd80, lpOverlapped=0x0) returned 1 [0143.249] CreateFileW (lpFileName="C:\\Windows\\Microsoft.NET\\Framework\\v4.0.30319\\Config\\NetFx40_IIS_schema_update.xml" (normalized: "c:\\windows\\microsoft.net\\framework\\v4.0.30319\\config\\netfx40_iis_schema_update.xml"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x274 [0143.250] GetFileType (hFile=0x274) returned 0x1 [0143.250] GetFileType (hFile=0x274) returned 0x1 [0143.250] WriteFile (in: hFile=0x274, lpBuffer=0x278341c*, nNumberOfBytesToWrite=0xd80, lpNumberOfBytesWritten=0x31e67c, lpOverlapped=0x0 | out: lpBuffer=0x278341c*, lpNumberOfBytesWritten=0x31e67c*=0xd80, lpOverlapped=0x0) returned 1 [0143.251] MoveFileW (lpExistingFileName="C:\\Windows\\Microsoft.NET\\Framework\\v4.0.30319\\Config\\NetFx40_IIS_schema_update.xml" (normalized: "c:\\windows\\microsoft.net\\framework\\v4.0.30319\\config\\netfx40_iis_schema_update.xml"), lpNewFileName="C:\\Windows\\Microsoft.NET\\Framework\\v4.0.30319\\Config\\NetFx40_IIS_schema_update.xml.[neftet@tutanota.com].boom" (normalized: "c:\\windows\\microsoft.net\\framework\\v4.0.30319\\config\\netfx40_iis_schema_update.xml.[neftet@tutanota.com].boom")) returned 1 [0143.251] CreateFileW (lpFileName="C:\\Windows\\Microsoft.NET\\Framework\\v4.0.30319\\Config\\NetFx45_IIS_schema_update.xml" (normalized: "c:\\windows\\microsoft.net\\framework\\v4.0.30319\\config\\netfx45_iis_schema_update.xml"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x274 [0143.251] GetFileType (hFile=0x274) returned 0x1 [0143.252] GetFileType (hFile=0x274) returned 0x1 [0143.252] GetFileSize (in: hFile=0x274, lpFileSizeHigh=0x31e708 | out: lpFileSizeHigh=0x31e708*=0x0) returned 0x820 [0143.252] ReadFile (in: hFile=0x274, lpBuffer=0x27851b8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x31e6b4, lpOverlapped=0x0 | out: lpBuffer=0x27851b8*, lpNumberOfBytesRead=0x31e6b4*=0x820, lpOverlapped=0x0) returned 1 [0143.252] CreateFileW (lpFileName="C:\\Windows\\Microsoft.NET\\Framework\\v4.0.30319\\Config\\NetFx45_IIS_schema_update.xml" (normalized: "c:\\windows\\microsoft.net\\framework\\v4.0.30319\\config\\netfx45_iis_schema_update.xml"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x274 [0143.253] GetFileType (hFile=0x274) returned 0x1 [0143.253] GetFileType (hFile=0x274) returned 0x1 [0143.253] WriteFile (in: hFile=0x274, lpBuffer=0x2787f68*, nNumberOfBytesToWrite=0x820, lpNumberOfBytesWritten=0x31e67c, lpOverlapped=0x0 | out: lpBuffer=0x2787f68*, lpNumberOfBytesWritten=0x31e67c*=0x820, lpOverlapped=0x0) returned 1 [0143.254] MoveFileW (lpExistingFileName="C:\\Windows\\Microsoft.NET\\Framework\\v4.0.30319\\Config\\NetFx45_IIS_schema_update.xml" (normalized: "c:\\windows\\microsoft.net\\framework\\v4.0.30319\\config\\netfx45_iis_schema_update.xml"), lpNewFileName="C:\\Windows\\Microsoft.NET\\Framework\\v4.0.30319\\Config\\NetFx45_IIS_schema_update.xml.[neftet@tutanota.com].boom" (normalized: "c:\\windows\\microsoft.net\\framework\\v4.0.30319\\config\\netfx45_iis_schema_update.xml.[neftet@tutanota.com].boom")) returned 1 [0143.263] CreateFileW (lpFileName="C:\\Windows\\Microsoft.NET\\Framework\\v4.0.30319\\SQL\\en\\DropSqlPersistenceProviderLogic.sql" (normalized: "c:\\windows\\microsoft.net\\framework\\v4.0.30319\\sql\\en\\dropsqlpersistenceproviderlogic.sql"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x274 [0143.263] GetFileType (hFile=0x274) returned 0x1 [0143.263] GetFileType (hFile=0x274) returned 0x1 [0143.263] GetFileSize (in: hFile=0x274, lpFileSizeHigh=0x31e690 | out: lpFileSizeHigh=0x31e690*=0x0) returned 0x4b0 [0143.264] ReadFile (in: hFile=0x274, lpBuffer=0x279d0a0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x31e63c, lpOverlapped=0x0 | out: lpBuffer=0x279d0a0*, lpNumberOfBytesRead=0x31e63c*=0x4b0, lpOverlapped=0x0) returned 1 [0143.264] CreateFileW (lpFileName="C:\\Windows\\Microsoft.NET\\Framework\\v4.0.30319\\SQL\\en\\DropSqlPersistenceProviderLogic.sql" (normalized: "c:\\windows\\microsoft.net\\framework\\v4.0.30319\\sql\\en\\dropsqlpersistenceproviderlogic.sql"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x274 [0143.265] GetFileType (hFile=0x274) returned 0x1 [0143.265] GetFileType (hFile=0x274) returned 0x1 [0143.265] WriteFile (in: hFile=0x274, lpBuffer=0x279faf8*, nNumberOfBytesToWrite=0x4b0, lpNumberOfBytesWritten=0x31e604, lpOverlapped=0x0 | out: lpBuffer=0x279faf8*, lpNumberOfBytesWritten=0x31e604*=0x4b0, lpOverlapped=0x0) returned 1 [0143.266] MoveFileW (lpExistingFileName="C:\\Windows\\Microsoft.NET\\Framework\\v4.0.30319\\SQL\\en\\DropSqlPersistenceProviderLogic.sql" (normalized: "c:\\windows\\microsoft.net\\framework\\v4.0.30319\\sql\\en\\dropsqlpersistenceproviderlogic.sql"), lpNewFileName="C:\\Windows\\Microsoft.NET\\Framework\\v4.0.30319\\SQL\\en\\DropSqlPersistenceProviderLogic.sql.[neftet@tutanota.com].boom" (normalized: "c:\\windows\\microsoft.net\\framework\\v4.0.30319\\sql\\en\\dropsqlpersistenceproviderlogic.sql.[neftet@tutanota.com].boom")) returned 1 [0143.267] CreateFileW (lpFileName="C:\\Windows\\Microsoft.NET\\Framework\\v4.0.30319\\SQL\\en\\DropSqlPersistenceProviderSchema.sql" (normalized: "c:\\windows\\microsoft.net\\framework\\v4.0.30319\\sql\\en\\dropsqlpersistenceproviderschema.sql"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x274 [0143.267] GetFileType (hFile=0x274) returned 0x1 [0143.267] GetFileType (hFile=0x274) returned 0x1 [0143.267] GetFileSize (in: hFile=0x274, lpFileSizeHigh=0x31e690 | out: lpFileSizeHigh=0x31e690*=0x0) returned 0x530 [0143.267] ReadFile (in: hFile=0x274, lpBuffer=0x27a15e4, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x31e63c, lpOverlapped=0x0 | out: lpBuffer=0x27a15e4*, lpNumberOfBytesRead=0x31e63c*=0x530, lpOverlapped=0x0) returned 1 [0143.268] CreateFileW (lpFileName="C:\\Windows\\Microsoft.NET\\Framework\\v4.0.30319\\SQL\\en\\DropSqlPersistenceProviderSchema.sql" (normalized: "c:\\windows\\microsoft.net\\framework\\v4.0.30319\\sql\\en\\dropsqlpersistenceproviderschema.sql"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x274 [0143.269] GetFileType (hFile=0x274) returned 0x1 [0143.269] GetFileType (hFile=0x274) returned 0x1 [0143.269] WriteFile (in: hFile=0x274, lpBuffer=0x27a40c0*, nNumberOfBytesToWrite=0x530, lpNumberOfBytesWritten=0x31e604, lpOverlapped=0x0 | out: lpBuffer=0x27a40c0*, lpNumberOfBytesWritten=0x31e604*=0x530, lpOverlapped=0x0) returned 1 [0143.270] MoveFileW (lpExistingFileName="C:\\Windows\\Microsoft.NET\\Framework\\v4.0.30319\\SQL\\en\\DropSqlPersistenceProviderSchema.sql" (normalized: "c:\\windows\\microsoft.net\\framework\\v4.0.30319\\sql\\en\\dropsqlpersistenceproviderschema.sql"), lpNewFileName="C:\\Windows\\Microsoft.NET\\Framework\\v4.0.30319\\SQL\\en\\DropSqlPersistenceProviderSchema.sql.[neftet@tutanota.com].boom" (normalized: "c:\\windows\\microsoft.net\\framework\\v4.0.30319\\sql\\en\\dropsqlpersistenceproviderschema.sql.[neftet@tutanota.com].boom")) returned 1 [0143.278] CreateFileW (lpFileName="C:\\Windows\\Microsoft.NET\\Framework\\v4.0.30319\\SQL\\en\\DropSqlWorkflowInstanceStoreLogic.sql" (normalized: "c:\\windows\\microsoft.net\\framework\\v4.0.30319\\sql\\en\\dropsqlworkflowinstancestorelogic.sql"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x274 [0143.278] GetFileType (hFile=0x274) returned 0x1 [0143.278] GetFileType (hFile=0x274) returned 0x1 [0143.278] GetFileSize (in: hFile=0x274, lpFileSizeHigh=0x31e690 | out: lpFileSizeHigh=0x31e690*=0x0) returned 0x17c0 [0143.278] ReadFile (in: hFile=0x274, lpBuffer=0x27a567c, nNumberOfBytesToRead=0x17c0, lpNumberOfBytesRead=0x31e63c, lpOverlapped=0x0 | out: lpBuffer=0x27a567c*, lpNumberOfBytesRead=0x31e63c*=0x17c0, lpOverlapped=0x0) returned 1 [0143.279] CreateFileW (lpFileName="C:\\Windows\\Microsoft.NET\\Framework\\v4.0.30319\\SQL\\en\\DropSqlWorkflowInstanceStoreLogic.sql" (normalized: "c:\\windows\\microsoft.net\\framework\\v4.0.30319\\sql\\en\\dropsqlworkflowinstancestorelogic.sql"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x274 [0143.280] GetFileType (hFile=0x274) returned 0x1 [0143.280] GetFileType (hFile=0x274) returned 0x1 [0143.280] WriteFile (in: hFile=0x274, lpBuffer=0x27a7250*, nNumberOfBytesToWrite=0x17c0, lpNumberOfBytesWritten=0x31e630, lpOverlapped=0x0 | out: lpBuffer=0x27a7250*, lpNumberOfBytesWritten=0x31e630*=0x17c0, lpOverlapped=0x0) returned 1 [0143.281] MoveFileW (lpExistingFileName="C:\\Windows\\Microsoft.NET\\Framework\\v4.0.30319\\SQL\\en\\DropSqlWorkflowInstanceStoreLogic.sql" (normalized: "c:\\windows\\microsoft.net\\framework\\v4.0.30319\\sql\\en\\dropsqlworkflowinstancestorelogic.sql"), lpNewFileName="C:\\Windows\\Microsoft.NET\\Framework\\v4.0.30319\\SQL\\en\\DropSqlWorkflowInstanceStoreLogic.sql.[neftet@tutanota.com].boom" (normalized: "c:\\windows\\microsoft.net\\framework\\v4.0.30319\\sql\\en\\dropsqlworkflowinstancestorelogic.sql.[neftet@tutanota.com].boom")) returned 1 [0143.284] CreateFileW (lpFileName="C:\\Windows\\Microsoft.NET\\Framework\\v4.0.30319\\SQL\\en\\DropSqlWorkflowInstanceStoreSchema.sql" (normalized: "c:\\windows\\microsoft.net\\framework\\v4.0.30319\\sql\\en\\dropsqlworkflowinstancestoreschema.sql"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x274 [0143.284] GetFileType (hFile=0x274) returned 0x1 [0143.284] GetFileType (hFile=0x274) returned 0x1 [0143.284] GetFileSize (in: hFile=0x274, lpFileSizeHigh=0x31e690 | out: lpFileSizeHigh=0x31e690*=0x0) returned 0xef0 [0143.285] ReadFile (in: hFile=0x274, lpBuffer=0x27ab060, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x31e63c, lpOverlapped=0x0 | out: lpBuffer=0x27ab060*, lpNumberOfBytesRead=0x31e63c*=0xef0, lpOverlapped=0x0) returned 1 [0143.285] CreateFileW (lpFileName="C:\\Windows\\Microsoft.NET\\Framework\\v4.0.30319\\SQL\\en\\DropSqlWorkflowInstanceStoreSchema.sql" (normalized: "c:\\windows\\microsoft.net\\framework\\v4.0.30319\\sql\\en\\dropsqlworkflowinstancestoreschema.sql"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x274 [0143.287] GetFileType (hFile=0x274) returned 0x1 [0143.287] GetFileType (hFile=0x274) returned 0x1 [0143.288] MoveFileW (lpExistingFileName="C:\\Windows\\Microsoft.NET\\Framework\\v4.0.30319\\SQL\\en\\DropSqlWorkflowInstanceStoreSchema.sql" (normalized: "c:\\windows\\microsoft.net\\framework\\v4.0.30319\\sql\\en\\dropsqlworkflowinstancestoreschema.sql"), lpNewFileName="C:\\Windows\\Microsoft.NET\\Framework\\v4.0.30319\\SQL\\en\\DropSqlWorkflowInstanceStoreSchema.sql.[neftet@tutanota.com].boom" (normalized: "c:\\windows\\microsoft.net\\framework\\v4.0.30319\\sql\\en\\dropsqlworkflowinstancestoreschema.sql.[neftet@tutanota.com].boom")) returned 1 [0143.288] CreateFileW (lpFileName="C:\\Windows\\Microsoft.NET\\Framework\\v4.0.30319\\SQL\\en\\SqlPersistenceProviderLogic.sql" (normalized: "c:\\windows\\microsoft.net\\framework\\v4.0.30319\\sql\\en\\sqlpersistenceproviderlogic.sql"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x274 [0143.288] GetFileType (hFile=0x274) returned 0x1 [0143.288] GetFileType (hFile=0x274) returned 0x1 [0143.288] GetFileSize (in: hFile=0x274, lpFileSizeHigh=0x31e690 | out: lpFileSizeHigh=0x31e690*=0x0) returned 0x1a60 [0143.288] ReadFile (in: hFile=0x274, lpBuffer=0x27afab4, nNumberOfBytesToRead=0x1a60, lpNumberOfBytesRead=0x31e63c, lpOverlapped=0x0 | out: lpBuffer=0x27afab4*, lpNumberOfBytesRead=0x31e63c*=0x1a60, lpOverlapped=0x0) returned 1 [0143.289] CreateFileW (lpFileName="C:\\Windows\\Microsoft.NET\\Framework\\v4.0.30319\\SQL\\en\\SqlPersistenceProviderLogic.sql" (normalized: "c:\\windows\\microsoft.net\\framework\\v4.0.30319\\sql\\en\\sqlpersistenceproviderlogic.sql"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x274 [0143.290] GetFileType (hFile=0x274) returned 0x1 [0143.290] GetFileType (hFile=0x274) returned 0x1 [0143.290] WriteFile (in: hFile=0x274, lpBuffer=0x27b1928*, nNumberOfBytesToWrite=0x1a60, lpNumberOfBytesWritten=0x31e630, lpOverlapped=0x0 | out: lpBuffer=0x27b1928*, lpNumberOfBytesWritten=0x31e630*=0x1a60, lpOverlapped=0x0) returned 1 [0143.291] MoveFileW (lpExistingFileName="C:\\Windows\\Microsoft.NET\\Framework\\v4.0.30319\\SQL\\en\\SqlPersistenceProviderLogic.sql" (normalized: "c:\\windows\\microsoft.net\\framework\\v4.0.30319\\sql\\en\\sqlpersistenceproviderlogic.sql"), lpNewFileName="C:\\Windows\\Microsoft.NET\\Framework\\v4.0.30319\\SQL\\en\\SqlPersistenceProviderLogic.sql.[neftet@tutanota.com].boom" (normalized: "c:\\windows\\microsoft.net\\framework\\v4.0.30319\\sql\\en\\sqlpersistenceproviderlogic.sql.[neftet@tutanota.com].boom")) returned 1 [0143.292] CreateFileW (lpFileName="C:\\Windows\\Microsoft.NET\\Framework\\v4.0.30319\\SQL\\en\\SqlPersistenceProviderSchema.sql" (normalized: "c:\\windows\\microsoft.net\\framework\\v4.0.30319\\sql\\en\\sqlpersistenceproviderschema.sql"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x274 [0143.292] GetFileType (hFile=0x274) returned 0x1 [0143.292] GetFileType (hFile=0x274) returned 0x1 [0143.292] GetFileSize (in: hFile=0x274, lpFileSizeHigh=0x31e690 | out: lpFileSizeHigh=0x31e690*=0x0) returned 0x870 [0143.292] ReadFile (in: hFile=0x274, lpBuffer=0x27b5304, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x31e63c, lpOverlapped=0x0 | out: lpBuffer=0x27b5304*, lpNumberOfBytesRead=0x31e63c*=0x870, lpOverlapped=0x0) returned 1 [0143.293] CreateFileW (lpFileName="C:\\Windows\\Microsoft.NET\\Framework\\v4.0.30319\\SQL\\en\\SqlPersistenceProviderSchema.sql" (normalized: "c:\\windows\\microsoft.net\\framework\\v4.0.30319\\sql\\en\\sqlpersistenceproviderschema.sql"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x274 [0143.294] GetFileType (hFile=0x274) returned 0x1 [0143.294] GetFileType (hFile=0x274) returned 0x1 [0143.294] WriteFile (in: hFile=0x274, lpBuffer=0x27b8110*, nNumberOfBytesToWrite=0x870, lpNumberOfBytesWritten=0x31e604, lpOverlapped=0x0 | out: lpBuffer=0x27b8110*, lpNumberOfBytesWritten=0x31e604*=0x870, lpOverlapped=0x0) returned 1 [0143.295] MoveFileW (lpExistingFileName="C:\\Windows\\Microsoft.NET\\Framework\\v4.0.30319\\SQL\\en\\SqlPersistenceProviderSchema.sql" (normalized: "c:\\windows\\microsoft.net\\framework\\v4.0.30319\\sql\\en\\sqlpersistenceproviderschema.sql"), lpNewFileName="C:\\Windows\\Microsoft.NET\\Framework\\v4.0.30319\\SQL\\en\\SqlPersistenceProviderSchema.sql.[neftet@tutanota.com].boom" (normalized: "c:\\windows\\microsoft.net\\framework\\v4.0.30319\\sql\\en\\sqlpersistenceproviderschema.sql.[neftet@tutanota.com].boom")) returned 1 [0143.295] CreateFileW (lpFileName="C:\\Windows\\Microsoft.NET\\Framework\\v4.0.30319\\SQL\\en\\SqlPersistenceService_Logic.sql" (normalized: "c:\\windows\\microsoft.net\\framework\\v4.0.30319\\sql\\en\\sqlpersistenceservice_logic.sql"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x274 [0143.296] GetFileType (hFile=0x274) returned 0x1 [0143.296] GetFileType (hFile=0x274) returned 0x1 [0143.296] GetFileSize (in: hFile=0x274, lpFileSizeHigh=0x31e690 | out: lpFileSizeHigh=0x31e690*=0x0) returned 0x5d60 [0143.296] ReadFile (in: hFile=0x274, lpBuffer=0x27b969c, nNumberOfBytesToRead=0x5d60, lpNumberOfBytesRead=0x31e63c, lpOverlapped=0x0 | out: lpBuffer=0x27b969c*, lpNumberOfBytesRead=0x31e63c*=0x5d60, lpOverlapped=0x0) returned 1 [0143.297] CreateFileW (lpFileName="C:\\Windows\\Microsoft.NET\\Framework\\v4.0.30319\\SQL\\en\\SqlPersistenceService_Logic.sql" (normalized: "c:\\windows\\microsoft.net\\framework\\v4.0.30319\\sql\\en\\sqlpersistenceservice_logic.sql"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x274 [0143.298] GetFileType (hFile=0x274) returned 0x1 [0143.298] GetFileType (hFile=0x274) returned 0x1 [0143.298] WriteFile (in: hFile=0x274, lpBuffer=0x27bf810*, nNumberOfBytesToWrite=0x5d60, lpNumberOfBytesWritten=0x31e630, lpOverlapped=0x0 | out: lpBuffer=0x27bf810*, lpNumberOfBytesWritten=0x31e630*=0x5d60, lpOverlapped=0x0) returned 1 [0143.299] MoveFileW (lpExistingFileName="C:\\Windows\\Microsoft.NET\\Framework\\v4.0.30319\\SQL\\en\\SqlPersistenceService_Logic.sql" (normalized: "c:\\windows\\microsoft.net\\framework\\v4.0.30319\\sql\\en\\sqlpersistenceservice_logic.sql"), lpNewFileName="C:\\Windows\\Microsoft.NET\\Framework\\v4.0.30319\\SQL\\en\\SqlPersistenceService_Logic.sql.[neftet@tutanota.com].boom" (normalized: "c:\\windows\\microsoft.net\\framework\\v4.0.30319\\sql\\en\\sqlpersistenceservice_logic.sql.[neftet@tutanota.com].boom")) returned 1 [0143.300] CreateFileW (lpFileName="C:\\Windows\\Microsoft.NET\\Framework\\v4.0.30319\\SQL\\en\\SqlPersistenceService_Schema.sql" (normalized: "c:\\windows\\microsoft.net\\framework\\v4.0.30319\\sql\\en\\sqlpersistenceservice_schema.sql"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x274 [0143.300] GetFileType (hFile=0x274) returned 0x1 [0143.300] GetFileType (hFile=0x274) returned 0x1 [0143.300] GetFileSize (in: hFile=0x274, lpFileSizeHigh=0x31e690 | out: lpFileSizeHigh=0x31e690*=0x0) returned 0x10d0 [0143.300] ReadFile (in: hFile=0x274, lpBuffer=0x27c6c70, nNumberOfBytesToRead=0x10d0, lpNumberOfBytesRead=0x31e63c, lpOverlapped=0x0 | out: lpBuffer=0x27c6c70*, lpNumberOfBytesRead=0x31e63c*=0x10d0, lpOverlapped=0x0) returned 1 [0143.301] CreateFileW (lpFileName="C:\\Windows\\Microsoft.NET\\Framework\\v4.0.30319\\SQL\\en\\SqlPersistenceService_Schema.sql" (normalized: "c:\\windows\\microsoft.net\\framework\\v4.0.30319\\sql\\en\\sqlpersistenceservice_schema.sql"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x274 [0143.302] GetFileType (hFile=0x274) returned 0x1 [0143.302] GetFileType (hFile=0x274) returned 0x1 [0143.302] WriteFile (in: hFile=0x274, lpBuffer=0x27c8154*, nNumberOfBytesToWrite=0x10d0, lpNumberOfBytesWritten=0x31e630, lpOverlapped=0x0 | out: lpBuffer=0x27c8154*, lpNumberOfBytesWritten=0x31e630*=0x10d0, lpOverlapped=0x0) returned 1 [0143.303] MoveFileW (lpExistingFileName="C:\\Windows\\Microsoft.NET\\Framework\\v4.0.30319\\SQL\\en\\SqlPersistenceService_Schema.sql" (normalized: "c:\\windows\\microsoft.net\\framework\\v4.0.30319\\sql\\en\\sqlpersistenceservice_schema.sql"), lpNewFileName="C:\\Windows\\Microsoft.NET\\Framework\\v4.0.30319\\SQL\\en\\SqlPersistenceService_Schema.sql.[neftet@tutanota.com].boom" (normalized: "c:\\windows\\microsoft.net\\framework\\v4.0.30319\\sql\\en\\sqlpersistenceservice_schema.sql.[neftet@tutanota.com].boom")) returned 1 [0143.303] CreateFileW (lpFileName="C:\\Windows\\Microsoft.NET\\Framework\\v4.0.30319\\SQL\\en\\SqlWorkflowInstanceStoreLogic.sql" (normalized: "c:\\windows\\microsoft.net\\framework\\v4.0.30319\\sql\\en\\sqlworkflowinstancestorelogic.sql"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x274 [0143.304] GetFileType (hFile=0x274) returned 0x1 [0143.304] GetFileType (hFile=0x274) returned 0x1 [0143.304] GetFileSize (in: hFile=0x274, lpFileSizeHigh=0x31e690 | out: lpFileSizeHigh=0x31e690*=0x0) returned 0xf8a0 [0143.304] ReadFile (in: hFile=0x274, lpBuffer=0x27ca934, nNumberOfBytesToRead=0xf8a0, lpNumberOfBytesRead=0x31e63c, lpOverlapped=0x0 | out: lpBuffer=0x27ca934*, lpNumberOfBytesRead=0x31e63c*=0xf8a0, lpOverlapped=0x0) returned 1 [0143.306] CreateFileW (lpFileName="C:\\Windows\\Microsoft.NET\\Framework\\v4.0.30319\\SQL\\en\\SqlWorkflowInstanceStoreLogic.sql" (normalized: "c:\\windows\\microsoft.net\\framework\\v4.0.30319\\sql\\en\\sqlworkflowinstancestorelogic.sql"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x274 [0143.307] GetFileType (hFile=0x274) returned 0x1 [0143.307] GetFileType (hFile=0x274) returned 0x1 [0143.307] WriteFile (in: hFile=0x274, lpBuffer=0x27da5e8*, nNumberOfBytesToWrite=0xf8a0, lpNumberOfBytesWritten=0x31e630, lpOverlapped=0x0 | out: lpBuffer=0x27da5e8*, lpNumberOfBytesWritten=0x31e630*=0xf8a0, lpOverlapped=0x0) returned 1 [0143.309] MoveFileW (lpExistingFileName="C:\\Windows\\Microsoft.NET\\Framework\\v4.0.30319\\SQL\\en\\SqlWorkflowInstanceStoreLogic.sql" (normalized: "c:\\windows\\microsoft.net\\framework\\v4.0.30319\\sql\\en\\sqlworkflowinstancestorelogic.sql"), lpNewFileName="C:\\Windows\\Microsoft.NET\\Framework\\v4.0.30319\\SQL\\en\\SqlWorkflowInstanceStoreLogic.sql.[neftet@tutanota.com].boom" (normalized: "c:\\windows\\microsoft.net\\framework\\v4.0.30319\\sql\\en\\sqlworkflowinstancestorelogic.sql.[neftet@tutanota.com].boom")) returned 1 [0143.309] CreateFileW (lpFileName="C:\\Windows\\Microsoft.NET\\Framework\\v4.0.30319\\SQL\\en\\SqlWorkflowInstanceStoreSchema.sql" (normalized: "c:\\windows\\microsoft.net\\framework\\v4.0.30319\\sql\\en\\sqlworkflowinstancestoreschema.sql"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x274 [0143.309] GetFileType (hFile=0x274) returned 0x1 [0143.309] GetFileType (hFile=0x274) returned 0x1 [0143.309] GetFileSize (in: hFile=0x274, lpFileSizeHigh=0x31e690 | out: lpFileSizeHigh=0x31e690*=0x0) returned 0x7090 [0143.309] ReadFile (in: hFile=0x274, lpBuffer=0x27eb5a4, nNumberOfBytesToRead=0x7090, lpNumberOfBytesRead=0x31e63c, lpOverlapped=0x0 | out: lpBuffer=0x27eb5a4*, lpNumberOfBytesRead=0x31e63c*=0x7090, lpOverlapped=0x0) returned 1 [0143.311] CreateFileW (lpFileName="C:\\Windows\\Microsoft.NET\\Framework\\v4.0.30319\\SQL\\en\\SqlWorkflowInstanceStoreSchema.sql" (normalized: "c:\\windows\\microsoft.net\\framework\\v4.0.30319\\sql\\en\\sqlworkflowinstancestoreschema.sql"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x274 [0143.312] GetFileType (hFile=0x274) returned 0x1 [0143.312] GetFileType (hFile=0x274) returned 0x1 [0143.312] WriteFile (in: hFile=0x274, lpBuffer=0x27f2a48*, nNumberOfBytesToWrite=0x7090, lpNumberOfBytesWritten=0x31e630, lpOverlapped=0x0 | out: lpBuffer=0x27f2a48*, lpNumberOfBytesWritten=0x31e630*=0x7090, lpOverlapped=0x0) returned 1 [0143.313] MoveFileW (lpExistingFileName="C:\\Windows\\Microsoft.NET\\Framework\\v4.0.30319\\SQL\\en\\SqlWorkflowInstanceStoreSchema.sql" (normalized: "c:\\windows\\microsoft.net\\framework\\v4.0.30319\\sql\\en\\sqlworkflowinstancestoreschema.sql"), lpNewFileName="C:\\Windows\\Microsoft.NET\\Framework\\v4.0.30319\\SQL\\en\\SqlWorkflowInstanceStoreSchema.sql.[neftet@tutanota.com].boom" (normalized: "c:\\windows\\microsoft.net\\framework\\v4.0.30319\\sql\\en\\sqlworkflowinstancestoreschema.sql.[neftet@tutanota.com].boom")) returned 1 [0143.314] CreateFileW (lpFileName="C:\\Windows\\Microsoft.NET\\Framework\\v4.0.30319\\SQL\\en\\SqlWorkflowInstanceStoreSchemaUpgrade.sql" (normalized: "c:\\windows\\microsoft.net\\framework\\v4.0.30319\\sql\\en\\sqlworkflowinstancestoreschemaupgrade.sql"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x274 [0143.314] GetFileType (hFile=0x274) returned 0x1 [0143.314] GetFileType (hFile=0x274) returned 0x1 [0143.314] GetFileSize (in: hFile=0x274, lpFileSizeHigh=0x31e690 | out: lpFileSizeHigh=0x31e690*=0x0) returned 0x137c0 [0143.314] ReadFile (in: hFile=0x274, lpBuffer=0x27fb21c, nNumberOfBytesToRead=0x137c0, lpNumberOfBytesRead=0x31e63c, lpOverlapped=0x0 | out: lpBuffer=0x27fb21c*, lpNumberOfBytesRead=0x31e63c*=0x137c0, lpOverlapped=0x0) returned 1 [0143.317] CreateFileW (lpFileName="C:\\Windows\\Microsoft.NET\\Framework\\v4.0.30319\\SQL\\en\\SqlWorkflowInstanceStoreSchemaUpgrade.sql" (normalized: "c:\\windows\\microsoft.net\\framework\\v4.0.30319\\sql\\en\\sqlworkflowinstancestoreschemaupgrade.sql"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x274 [0143.318] GetFileType (hFile=0x274) returned 0x1 [0143.318] GetFileType (hFile=0x274) returned 0x1 [0143.318] WriteFile (in: hFile=0x274, lpBuffer=0x280edf0*, nNumberOfBytesToWrite=0x137c0, lpNumberOfBytesWritten=0x31e630, lpOverlapped=0x0 | out: lpBuffer=0x280edf0*, lpNumberOfBytesWritten=0x31e630*=0x137c0, lpOverlapped=0x0) returned 1 [0143.320] MoveFileW (lpExistingFileName="C:\\Windows\\Microsoft.NET\\Framework\\v4.0.30319\\SQL\\en\\SqlWorkflowInstanceStoreSchemaUpgrade.sql" (normalized: "c:\\windows\\microsoft.net\\framework\\v4.0.30319\\sql\\en\\sqlworkflowinstancestoreschemaupgrade.sql"), lpNewFileName="C:\\Windows\\Microsoft.NET\\Framework\\v4.0.30319\\SQL\\en\\SqlWorkflowInstanceStoreSchemaUpgrade.sql.[neftet@tutanota.com].boom" (normalized: "c:\\windows\\microsoft.net\\framework\\v4.0.30319\\sql\\en\\sqlworkflowinstancestoreschemaupgrade.sql.[neftet@tutanota.com].boom")) returned 1 [0143.320] CreateFileW (lpFileName="C:\\Windows\\Microsoft.NET\\Framework\\v4.0.30319\\SQL\\en\\Tracking_Logic.sql" (normalized: "c:\\windows\\microsoft.net\\framework\\v4.0.30319\\sql\\en\\tracking_logic.sql"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x274 [0143.321] GetFileType (hFile=0x274) returned 0x1 [0143.321] GetFileType (hFile=0x274) returned 0x1 [0143.321] GetFileSize (in: hFile=0x274, lpFileSizeHigh=0x31e690 | out: lpFileSizeHigh=0x31e690*=0x0) returned 0x5d2b0 [0143.321] ReadFile (in: hFile=0x274, lpBuffer=0x373d4e0, nNumberOfBytesToRead=0x5d2b0, lpNumberOfBytesRead=0x31e63c, lpOverlapped=0x0 | out: lpBuffer=0x373d4e0*, lpNumberOfBytesRead=0x31e63c*=0x5d2b0, lpOverlapped=0x0) returned 1 [0143.337] CreateFileW (lpFileName="C:\\Windows\\Microsoft.NET\\Framework\\v4.0.30319\\SQL\\en\\Tracking_Logic.sql" (normalized: "c:\\windows\\microsoft.net\\framework\\v4.0.30319\\sql\\en\\tracking_logic.sql"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x274 [0143.340] GetFileType (hFile=0x274) returned 0x1 [0143.340] GetFileType (hFile=0x274) returned 0x1 [0143.340] WriteFile (in: hFile=0x274, lpBuffer=0x379a7b0*, nNumberOfBytesToWrite=0x5d2b0, lpNumberOfBytesWritten=0x31e630, lpOverlapped=0x0 | out: lpBuffer=0x379a7b0*, lpNumberOfBytesWritten=0x31e630*=0x5d2b0, lpOverlapped=0x0) returned 1 [0143.346] MoveFileW (lpExistingFileName="C:\\Windows\\Microsoft.NET\\Framework\\v4.0.30319\\SQL\\en\\Tracking_Logic.sql" (normalized: "c:\\windows\\microsoft.net\\framework\\v4.0.30319\\sql\\en\\tracking_logic.sql"), lpNewFileName="C:\\Windows\\Microsoft.NET\\Framework\\v4.0.30319\\SQL\\en\\Tracking_Logic.sql.[neftet@tutanota.com].boom" (normalized: "c:\\windows\\microsoft.net\\framework\\v4.0.30319\\sql\\en\\tracking_logic.sql.[neftet@tutanota.com].boom")) returned 1 [0143.347] CreateFileW (lpFileName="C:\\Windows\\Microsoft.NET\\Framework\\v4.0.30319\\SQL\\en\\Tracking_Schema.sql" (normalized: "c:\\windows\\microsoft.net\\framework\\v4.0.30319\\sql\\en\\tracking_schema.sql"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x274 [0143.347] GetFileType (hFile=0x274) returned 0x1 [0143.347] GetFileType (hFile=0x274) returned 0x1 [0143.347] GetFileSize (in: hFile=0x274, lpFileSizeHigh=0x31e690 | out: lpFileSizeHigh=0x31e690*=0x0) returned 0xc670 [0143.347] ReadFile (in: hFile=0x274, lpBuffer=0x2825724, nNumberOfBytesToRead=0xc670, lpNumberOfBytesRead=0x31e63c, lpOverlapped=0x0 | out: lpBuffer=0x2825724*, lpNumberOfBytesRead=0x31e63c*=0xc670, lpOverlapped=0x0) returned 1 [0143.350] CreateFileW (lpFileName="C:\\Windows\\Microsoft.NET\\Framework\\v4.0.30319\\SQL\\en\\Tracking_Schema.sql" (normalized: "c:\\windows\\microsoft.net\\framework\\v4.0.30319\\sql\\en\\tracking_schema.sql"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x274 [0143.351] GetFileType (hFile=0x274) returned 0x1 [0143.351] GetFileType (hFile=0x274) returned 0x1 [0143.351] WriteFile (in: hFile=0x274, lpBuffer=0x28321a8*, nNumberOfBytesToWrite=0xc670, lpNumberOfBytesWritten=0x31e630, lpOverlapped=0x0 | out: lpBuffer=0x28321a8*, lpNumberOfBytesWritten=0x31e630*=0xc670, lpOverlapped=0x0) returned 1 [0143.352] MoveFileW (lpExistingFileName="C:\\Windows\\Microsoft.NET\\Framework\\v4.0.30319\\SQL\\en\\Tracking_Schema.sql" (normalized: "c:\\windows\\microsoft.net\\framework\\v4.0.30319\\sql\\en\\tracking_schema.sql"), lpNewFileName="C:\\Windows\\Microsoft.NET\\Framework\\v4.0.30319\\SQL\\en\\Tracking_Schema.sql.[neftet@tutanota.com].boom" (normalized: "c:\\windows\\microsoft.net\\framework\\v4.0.30319\\sql\\en\\tracking_schema.sql.[neftet@tutanota.com].boom")) returned 1 [0143.358] CreateFileW (lpFileName="C:\\Windows\\Microsoft.NET\\Framework64\\v2.0.50727\\InstallCommon.sql" (normalized: "c:\\windows\\microsoft.net\\framework64\\v2.0.50727\\installcommon.sql"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x274 [0143.358] GetFileType (hFile=0x274) returned 0x1 [0143.358] GetFileType (hFile=0x274) returned 0x1 [0143.358] GetFileSize (in: hFile=0x274, lpFileSizeHigh=0x31e780 | out: lpFileSizeHigh=0x31e780*=0x0) returned 0x6020 [0143.358] ReadFile (in: hFile=0x274, lpBuffer=0x26693e8, nNumberOfBytesToRead=0x6020, lpNumberOfBytesRead=0x31e72c, lpOverlapped=0x0 | out: lpBuffer=0x26693e8*, lpNumberOfBytesRead=0x31e72c*=0x6020, lpOverlapped=0x0) returned 1 [0143.359] CreateFileW (lpFileName="C:\\Windows\\Microsoft.NET\\Framework64\\v2.0.50727\\InstallCommon.sql" (normalized: "c:\\windows\\microsoft.net\\framework64\\v2.0.50727\\installcommon.sql"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x274 [0143.360] GetFileType (hFile=0x274) returned 0x1 [0143.360] GetFileType (hFile=0x274) returned 0x1 [0143.360] WriteFile (in: hFile=0x274, lpBuffer=0x266f978*, nNumberOfBytesToWrite=0x6020, lpNumberOfBytesWritten=0x31e720, lpOverlapped=0x0 | out: lpBuffer=0x266f978*, lpNumberOfBytesWritten=0x31e720*=0x6020, lpOverlapped=0x0) returned 1 [0143.361] MoveFileW (lpExistingFileName="C:\\Windows\\Microsoft.NET\\Framework64\\v2.0.50727\\InstallCommon.sql" (normalized: "c:\\windows\\microsoft.net\\framework64\\v2.0.50727\\installcommon.sql"), lpNewFileName="C:\\Windows\\Microsoft.NET\\Framework64\\v2.0.50727\\InstallCommon.sql.[neftet@tutanota.com].boom" (normalized: "c:\\windows\\microsoft.net\\framework64\\v2.0.50727\\installcommon.sql.[neftet@tutanota.com].boom")) returned 1 [0143.362] CreateFileW (lpFileName="C:\\Windows\\Microsoft.NET\\Framework64\\v2.0.50727\\InstallMembership.sql" (normalized: "c:\\windows\\microsoft.net\\framework64\\v2.0.50727\\installmembership.sql"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x274 [0143.362] GetFileType (hFile=0x274) returned 0x1 [0143.362] GetFileType (hFile=0x274) returned 0x1 [0143.362] GetFileSize (in: hFile=0x274, lpFileSizeHigh=0x31e780 | out: lpFileSizeHigh=0x31e780*=0x0) returned 0xdb10 [0143.362] ReadFile (in: hFile=0x274, lpBuffer=0x2676fac, nNumberOfBytesToRead=0xdb10, lpNumberOfBytesRead=0x31e72c, lpOverlapped=0x0 | out: lpBuffer=0x2676fac*, lpNumberOfBytesRead=0x31e72c*=0xdb10, lpOverlapped=0x0) returned 1 [0143.365] CreateFileW (lpFileName="C:\\Windows\\Microsoft.NET\\Framework64\\v2.0.50727\\InstallMembership.sql" (normalized: "c:\\windows\\microsoft.net\\framework64\\v2.0.50727\\installmembership.sql"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x274 [0143.366] GetFileType (hFile=0x274) returned 0x1 [0143.366] GetFileType (hFile=0x274) returned 0x1 [0143.366] WriteFile (in: hFile=0x274, lpBuffer=0x2684ed0*, nNumberOfBytesToWrite=0xdb10, lpNumberOfBytesWritten=0x31e720, lpOverlapped=0x0 | out: lpBuffer=0x2684ed0*, lpNumberOfBytesWritten=0x31e720*=0xdb10, lpOverlapped=0x0) returned 1 [0143.367] MoveFileW (lpExistingFileName="C:\\Windows\\Microsoft.NET\\Framework64\\v2.0.50727\\InstallMembership.sql" (normalized: "c:\\windows\\microsoft.net\\framework64\\v2.0.50727\\installmembership.sql"), lpNewFileName="C:\\Windows\\Microsoft.NET\\Framework64\\v2.0.50727\\InstallMembership.sql.[neftet@tutanota.com].boom" (normalized: "c:\\windows\\microsoft.net\\framework64\\v2.0.50727\\installmembership.sql.[neftet@tutanota.com].boom")) returned 1 [0143.368] CreateFileW (lpFileName="C:\\Windows\\Microsoft.NET\\Framework64\\v2.0.50727\\InstallPersistSqlState.sql" (normalized: "c:\\windows\\microsoft.net\\framework64\\v2.0.50727\\installpersistsqlstate.sql"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x274 [0143.368] GetFileType (hFile=0x274) returned 0x1 [0143.368] GetFileType (hFile=0x274) returned 0x1 [0143.368] GetFileSize (in: hFile=0x274, lpFileSizeHigh=0x31e780 | out: lpFileSizeHigh=0x31e780*=0x0) returned 0xcc80 [0143.368] ReadFile (in: hFile=0x274, lpBuffer=0x2694034, nNumberOfBytesToRead=0xcc80, lpNumberOfBytesRead=0x31e72c, lpOverlapped=0x0 | out: lpBuffer=0x2694034*, lpNumberOfBytesRead=0x31e72c*=0xcc80, lpOverlapped=0x0) returned 1 [0143.370] CreateFileW (lpFileName="C:\\Windows\\Microsoft.NET\\Framework64\\v2.0.50727\\InstallPersistSqlState.sql" (normalized: "c:\\windows\\microsoft.net\\framework64\\v2.0.50727\\installpersistsqlstate.sql"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x274 [0143.371] GetFileType (hFile=0x274) returned 0x1 [0143.372] GetFileType (hFile=0x274) returned 0x1 [0143.372] WriteFile (in: hFile=0x274, lpBuffer=0x26a10c8*, nNumberOfBytesToWrite=0xcc80, lpNumberOfBytesWritten=0x31e720, lpOverlapped=0x0 | out: lpBuffer=0x26a10c8*, lpNumberOfBytesWritten=0x31e720*=0xcc80, lpOverlapped=0x0) returned 1 [0143.373] MoveFileW (lpExistingFileName="C:\\Windows\\Microsoft.NET\\Framework64\\v2.0.50727\\InstallPersistSqlState.sql" (normalized: "c:\\windows\\microsoft.net\\framework64\\v2.0.50727\\installpersistsqlstate.sql"), lpNewFileName="C:\\Windows\\Microsoft.NET\\Framework64\\v2.0.50727\\InstallPersistSqlState.sql.[neftet@tutanota.com].boom" (normalized: "c:\\windows\\microsoft.net\\framework64\\v2.0.50727\\installpersistsqlstate.sql.[neftet@tutanota.com].boom")) returned 1 [0143.374] CreateFileW (lpFileName="C:\\Windows\\Microsoft.NET\\Framework64\\v2.0.50727\\InstallPersonalization.sql" (normalized: "c:\\windows\\microsoft.net\\framework64\\v2.0.50727\\installpersonalization.sql"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x274 [0143.374] GetFileType (hFile=0x274) returned 0x1 [0143.374] GetFileType (hFile=0x274) returned 0x1 [0143.374] GetFileSize (in: hFile=0x274, lpFileSizeHigh=0x31e780 | out: lpFileSizeHigh=0x31e780*=0x0) returned 0x8890 [0143.374] ReadFile (in: hFile=0x274, lpBuffer=0x26af3d0, nNumberOfBytesToRead=0x8890, lpNumberOfBytesRead=0x31e72c, lpOverlapped=0x0 | out: lpBuffer=0x26af3d0*, lpNumberOfBytesRead=0x31e72c*=0x8890, lpOverlapped=0x0) returned 1 [0143.376] CreateFileW (lpFileName="C:\\Windows\\Microsoft.NET\\Framework64\\v2.0.50727\\InstallPersonalization.sql" (normalized: "c:\\windows\\microsoft.net\\framework64\\v2.0.50727\\installpersonalization.sql"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x274 [0143.377] GetFileType (hFile=0x274) returned 0x1 [0143.378] MoveFileW (lpExistingFileName="C:\\Windows\\Microsoft.NET\\Framework64\\v2.0.50727\\InstallPersonalization.sql" (normalized: "c:\\windows\\microsoft.net\\framework64\\v2.0.50727\\installpersonalization.sql"), lpNewFileName="C:\\Windows\\Microsoft.NET\\Framework64\\v2.0.50727\\InstallPersonalization.sql.[neftet@tutanota.com].boom" (normalized: "c:\\windows\\microsoft.net\\framework64\\v2.0.50727\\installpersonalization.sql.[neftet@tutanota.com].boom")) returned 1 [0143.383] MoveFileW (lpExistingFileName="C:\\Windows\\Microsoft.NET\\Framework64\\v2.0.50727\\InstallRoles.sql" (normalized: "c:\\windows\\microsoft.net\\framework64\\v2.0.50727\\installroles.sql"), lpNewFileName="C:\\Windows\\Microsoft.NET\\Framework64\\v2.0.50727\\InstallRoles.sql.[neftet@tutanota.com].boom" (normalized: "c:\\windows\\microsoft.net\\framework64\\v2.0.50727\\installroles.sql.[neftet@tutanota.com].boom")) returned 1 [0143.388] MoveFileW (lpExistingFileName="C:\\Windows\\Microsoft.NET\\Framework64\\v2.0.50727\\InstallSqlState.sql" (normalized: "c:\\windows\\microsoft.net\\framework64\\v2.0.50727\\installsqlstate.sql"), lpNewFileName="C:\\Windows\\Microsoft.NET\\Framework64\\v2.0.50727\\InstallSqlState.sql.[neftet@tutanota.com].boom" (normalized: "c:\\windows\\microsoft.net\\framework64\\v2.0.50727\\installsqlstate.sql.[neftet@tutanota.com].boom")) returned 1 [0143.393] MoveFileW (lpExistingFileName="C:\\Windows\\Microsoft.NET\\Framework64\\v2.0.50727\\InstallSqlStateTemplate.sql" (normalized: "c:\\windows\\microsoft.net\\framework64\\v2.0.50727\\installsqlstatetemplate.sql"), lpNewFileName="C:\\Windows\\Microsoft.NET\\Framework64\\v2.0.50727\\InstallSqlStateTemplate.sql.[neftet@tutanota.com].boom" (normalized: "c:\\windows\\microsoft.net\\framework64\\v2.0.50727\\installsqlstatetemplate.sql.[neftet@tutanota.com].boom")) returned 1 [0143.396] MoveFileW (lpExistingFileName="C:\\Windows\\Microsoft.NET\\Framework64\\v2.0.50727\\InstallWebEventSqlProvider.sql" (normalized: "c:\\windows\\microsoft.net\\framework64\\v2.0.50727\\installwebeventsqlprovider.sql"), lpNewFileName="C:\\Windows\\Microsoft.NET\\Framework64\\v2.0.50727\\InstallWebEventSqlProvider.sql.[neftet@tutanota.com].boom" (normalized: "c:\\windows\\microsoft.net\\framework64\\v2.0.50727\\installwebeventsqlprovider.sql.[neftet@tutanota.com].boom")) returned 1 [0143.399] MoveFileW (lpExistingFileName="C:\\Windows\\Microsoft.NET\\Framework64\\v2.0.50727\\UninstallCommon.sql" (normalized: "c:\\windows\\microsoft.net\\framework64\\v2.0.50727\\uninstallcommon.sql"), lpNewFileName="C:\\Windows\\Microsoft.NET\\Framework64\\v2.0.50727\\UninstallCommon.sql.[neftet@tutanota.com].boom" (normalized: "c:\\windows\\microsoft.net\\framework64\\v2.0.50727\\uninstallcommon.sql.[neftet@tutanota.com].boom")) returned 1 [0143.402] MoveFileW (lpExistingFileName="C:\\Windows\\Microsoft.NET\\Framework64\\v2.0.50727\\UninstallMembership.sql" (normalized: "c:\\windows\\microsoft.net\\framework64\\v2.0.50727\\uninstallmembership.sql"), lpNewFileName="C:\\Windows\\Microsoft.NET\\Framework64\\v2.0.50727\\UninstallMembership.sql.[neftet@tutanota.com].boom" (normalized: "c:\\windows\\microsoft.net\\framework64\\v2.0.50727\\uninstallmembership.sql.[neftet@tutanota.com].boom")) returned 1 [0143.405] MoveFileW (lpExistingFileName="C:\\Windows\\Microsoft.NET\\Framework64\\v2.0.50727\\UninstallPersistSqlState.sql" (normalized: "c:\\windows\\microsoft.net\\framework64\\v2.0.50727\\uninstallpersistsqlstate.sql"), lpNewFileName="C:\\Windows\\Microsoft.NET\\Framework64\\v2.0.50727\\UninstallPersistSqlState.sql.[neftet@tutanota.com].boom" (normalized: "c:\\windows\\microsoft.net\\framework64\\v2.0.50727\\uninstallpersistsqlstate.sql.[neftet@tutanota.com].boom")) returned 1 [0143.408] MoveFileW (lpExistingFileName="C:\\Windows\\Microsoft.NET\\Framework64\\v2.0.50727\\UninstallPersonalization.sql" (normalized: "c:\\windows\\microsoft.net\\framework64\\v2.0.50727\\uninstallpersonalization.sql"), lpNewFileName="C:\\Windows\\Microsoft.NET\\Framework64\\v2.0.50727\\UninstallPersonalization.sql.[neftet@tutanota.com].boom" (normalized: "c:\\windows\\microsoft.net\\framework64\\v2.0.50727\\uninstallpersonalization.sql.[neftet@tutanota.com].boom")) returned 1 [0143.412] MoveFileW (lpExistingFileName="C:\\Windows\\Microsoft.NET\\Framework64\\v2.0.50727\\UninstallRoles.sql" (normalized: "c:\\windows\\microsoft.net\\framework64\\v2.0.50727\\uninstallroles.sql"), lpNewFileName="C:\\Windows\\Microsoft.NET\\Framework64\\v2.0.50727\\UninstallRoles.sql.[neftet@tutanota.com].boom" (normalized: "c:\\windows\\microsoft.net\\framework64\\v2.0.50727\\uninstallroles.sql.[neftet@tutanota.com].boom")) returned 1 [0143.415] MoveFileW (lpExistingFileName="C:\\Windows\\Microsoft.NET\\Framework64\\v2.0.50727\\UninstallSqlState.sql" (normalized: "c:\\windows\\microsoft.net\\framework64\\v2.0.50727\\uninstallsqlstate.sql"), lpNewFileName="C:\\Windows\\Microsoft.NET\\Framework64\\v2.0.50727\\UninstallSqlState.sql.[neftet@tutanota.com].boom" (normalized: "c:\\windows\\microsoft.net\\framework64\\v2.0.50727\\uninstallsqlstate.sql.[neftet@tutanota.com].boom")) returned 1 [0143.418] MoveFileW (lpExistingFileName="C:\\Windows\\Microsoft.NET\\Framework64\\v2.0.50727\\UninstallSqlStateTemplate.sql" (normalized: "c:\\windows\\microsoft.net\\framework64\\v2.0.50727\\uninstallsqlstatetemplate.sql"), lpNewFileName="C:\\Windows\\Microsoft.NET\\Framework64\\v2.0.50727\\UninstallSqlStateTemplate.sql.[neftet@tutanota.com].boom" (normalized: "c:\\windows\\microsoft.net\\framework64\\v2.0.50727\\uninstallsqlstatetemplate.sql.[neftet@tutanota.com].boom")) returned 1 [0143.421] MoveFileW (lpExistingFileName="C:\\Windows\\Microsoft.NET\\Framework64\\v2.0.50727\\UninstallWebEventSqlProvider.sql" (normalized: "c:\\windows\\microsoft.net\\framework64\\v2.0.50727\\uninstallwebeventsqlprovider.sql"), lpNewFileName="C:\\Windows\\Microsoft.NET\\Framework64\\v2.0.50727\\UninstallWebEventSqlProvider.sql.[neftet@tutanota.com].boom" (normalized: "c:\\windows\\microsoft.net\\framework64\\v2.0.50727\\uninstallwebeventsqlprovider.sql.[neftet@tutanota.com].boom")) returned 1 [0143.424] MoveFileW (lpExistingFileName="C:\\Windows\\Microsoft.NET\\Framework64\\v2.0.50727\\ASP.NETWebAdminFiles\\default.aspx" (normalized: "c:\\windows\\microsoft.net\\framework64\\v2.0.50727\\asp.netwebadminfiles\\default.aspx"), lpNewFileName="C:\\Windows\\Microsoft.NET\\Framework64\\v2.0.50727\\ASP.NETWebAdminFiles\\default.aspx.[neftet@tutanota.com].boom" (normalized: "c:\\windows\\microsoft.net\\framework64\\v2.0.50727\\asp.netwebadminfiles\\default.aspx.[neftet@tutanota.com].boom")) returned 1 [0143.427] MoveFileW (lpExistingFileName="C:\\Windows\\Microsoft.NET\\Framework64\\v2.0.50727\\ASP.NETWebAdminFiles\\error.aspx" (normalized: "c:\\windows\\microsoft.net\\framework64\\v2.0.50727\\asp.netwebadminfiles\\error.aspx"), lpNewFileName="C:\\Windows\\Microsoft.NET\\Framework64\\v2.0.50727\\ASP.NETWebAdminFiles\\error.aspx.[neftet@tutanota.com].boom" (normalized: "c:\\windows\\microsoft.net\\framework64\\v2.0.50727\\asp.netwebadminfiles\\error.aspx.[neftet@tutanota.com].boom")) returned 1 [0143.433] MoveFileW (lpExistingFileName="C:\\Windows\\Microsoft.NET\\Framework64\\v2.0.50727\\ASP.NETWebAdminFiles\\home0.aspx" (normalized: "c:\\windows\\microsoft.net\\framework64\\v2.0.50727\\asp.netwebadminfiles\\home0.aspx"), lpNewFileName="C:\\Windows\\Microsoft.NET\\Framework64\\v2.0.50727\\ASP.NETWebAdminFiles\\home0.aspx.[neftet@tutanota.com].boom" (normalized: "c:\\windows\\microsoft.net\\framework64\\v2.0.50727\\asp.netwebadminfiles\\home0.aspx.[neftet@tutanota.com].boom")) returned 1 [0143.435] MoveFileW (lpExistingFileName="C:\\Windows\\Microsoft.NET\\Framework64\\v2.0.50727\\ASP.NETWebAdminFiles\\home1.aspx" (normalized: "c:\\windows\\microsoft.net\\framework64\\v2.0.50727\\asp.netwebadminfiles\\home1.aspx"), lpNewFileName="C:\\Windows\\Microsoft.NET\\Framework64\\v2.0.50727\\ASP.NETWebAdminFiles\\home1.aspx.[neftet@tutanota.com].boom" (normalized: "c:\\windows\\microsoft.net\\framework64\\v2.0.50727\\asp.netwebadminfiles\\home1.aspx.[neftet@tutanota.com].boom")) returned 1 [0143.438] MoveFileW (lpExistingFileName="C:\\Windows\\Microsoft.NET\\Framework64\\v2.0.50727\\ASP.NETWebAdminFiles\\home2.aspx" (normalized: "c:\\windows\\microsoft.net\\framework64\\v2.0.50727\\asp.netwebadminfiles\\home2.aspx"), lpNewFileName="C:\\Windows\\Microsoft.NET\\Framework64\\v2.0.50727\\ASP.NETWebAdminFiles\\home2.aspx.[neftet@tutanota.com].boom" (normalized: "c:\\windows\\microsoft.net\\framework64\\v2.0.50727\\asp.netwebadminfiles\\home2.aspx.[neftet@tutanota.com].boom")) returned 1 [0143.441] MoveFileW (lpExistingFileName="C:\\Windows\\Microsoft.NET\\Framework64\\v2.0.50727\\ASP.NETWebAdminFiles\\WebAdminHelp.aspx" (normalized: "c:\\windows\\microsoft.net\\framework64\\v2.0.50727\\asp.netwebadminfiles\\webadminhelp.aspx"), lpNewFileName="C:\\Windows\\Microsoft.NET\\Framework64\\v2.0.50727\\ASP.NETWebAdminFiles\\WebAdminHelp.aspx.[neftet@tutanota.com].boom" (normalized: "c:\\windows\\microsoft.net\\framework64\\v2.0.50727\\asp.netwebadminfiles\\webadminhelp.aspx.[neftet@tutanota.com].boom")) returned 1 [0143.444] MoveFileW (lpExistingFileName="C:\\Windows\\Microsoft.NET\\Framework64\\v2.0.50727\\ASP.NETWebAdminFiles\\WebAdminHelp_Application.aspx" (normalized: "c:\\windows\\microsoft.net\\framework64\\v2.0.50727\\asp.netwebadminfiles\\webadminhelp_application.aspx"), lpNewFileName="C:\\Windows\\Microsoft.NET\\Framework64\\v2.0.50727\\ASP.NETWebAdminFiles\\WebAdminHelp_Application.aspx.[neftet@tutanota.com].boom" (normalized: "c:\\windows\\microsoft.net\\framework64\\v2.0.50727\\asp.netwebadminfiles\\webadminhelp_application.aspx.[neftet@tutanota.com].boom")) returned 1 [0143.447] MoveFileW (lpExistingFileName="C:\\Windows\\Microsoft.NET\\Framework64\\v2.0.50727\\ASP.NETWebAdminFiles\\WebAdminHelp_Internals.aspx" (normalized: "c:\\windows\\microsoft.net\\framework64\\v2.0.50727\\asp.netwebadminfiles\\webadminhelp_internals.aspx"), lpNewFileName="C:\\Windows\\Microsoft.NET\\Framework64\\v2.0.50727\\ASP.NETWebAdminFiles\\WebAdminHelp_Internals.aspx.[neftet@tutanota.com].boom" (normalized: "c:\\windows\\microsoft.net\\framework64\\v2.0.50727\\asp.netwebadminfiles\\webadminhelp_internals.aspx.[neftet@tutanota.com].boom")) returned 1 [0143.450] MoveFileW (lpExistingFileName="C:\\Windows\\Microsoft.NET\\Framework64\\v2.0.50727\\ASP.NETWebAdminFiles\\WebAdminHelp_Provider.aspx" (normalized: "c:\\windows\\microsoft.net\\framework64\\v2.0.50727\\asp.netwebadminfiles\\webadminhelp_provider.aspx"), lpNewFileName="C:\\Windows\\Microsoft.NET\\Framework64\\v2.0.50727\\ASP.NETWebAdminFiles\\WebAdminHelp_Provider.aspx.[neftet@tutanota.com].boom" (normalized: "c:\\windows\\microsoft.net\\framework64\\v2.0.50727\\asp.netwebadminfiles\\webadminhelp_provider.aspx.[neftet@tutanota.com].boom")) returned 1 [0143.453] MoveFileW (lpExistingFileName="C:\\Windows\\Microsoft.NET\\Framework64\\v2.0.50727\\ASP.NETWebAdminFiles\\WebAdminHelp_Security.aspx" (normalized: "c:\\windows\\microsoft.net\\framework64\\v2.0.50727\\asp.netwebadminfiles\\webadminhelp_security.aspx"), lpNewFileName="C:\\Windows\\Microsoft.NET\\Framework64\\v2.0.50727\\ASP.NETWebAdminFiles\\WebAdminHelp_Security.aspx.[neftet@tutanota.com].boom" (normalized: "c:\\windows\\microsoft.net\\framework64\\v2.0.50727\\asp.netwebadminfiles\\webadminhelp_security.aspx.[neftet@tutanota.com].boom")) returned 1 [0143.456] MoveFileW (lpExistingFileName="C:\\Windows\\Microsoft.NET\\Framework64\\v2.0.50727\\ASP.NETWebAdminFiles\\WebAdminStyles.css" (normalized: "c:\\windows\\microsoft.net\\framework64\\v2.0.50727\\asp.netwebadminfiles\\webadminstyles.css"), lpNewFileName="C:\\Windows\\Microsoft.NET\\Framework64\\v2.0.50727\\ASP.NETWebAdminFiles\\WebAdminStyles.css.[neftet@tutanota.com].boom" (normalized: "c:\\windows\\microsoft.net\\framework64\\v2.0.50727\\asp.netwebadminfiles\\webadminstyles.css.[neftet@tutanota.com].boom")) returned 1 [0143.460] MoveFileW (lpExistingFileName="C:\\Windows\\Microsoft.NET\\Framework64\\v2.0.50727\\ASP.NETWebAdminFiles\\AppConfig\\AppConfigHome.aspx" (normalized: "c:\\windows\\microsoft.net\\framework64\\v2.0.50727\\asp.netwebadminfiles\\appconfig\\appconfighome.aspx"), lpNewFileName="C:\\Windows\\Microsoft.NET\\Framework64\\v2.0.50727\\ASP.NETWebAdminFiles\\AppConfig\\AppConfigHome.aspx.[neftet@tutanota.com].boom" (normalized: "c:\\windows\\microsoft.net\\framework64\\v2.0.50727\\asp.netwebadminfiles\\appconfig\\appconfighome.aspx.[neftet@tutanota.com].boom")) returned 1 [0143.462] MoveFileW (lpExistingFileName="C:\\Windows\\Microsoft.NET\\Framework64\\v2.0.50727\\ASP.NETWebAdminFiles\\AppConfig\\CreateAppSetting.aspx" (normalized: "c:\\windows\\microsoft.net\\framework64\\v2.0.50727\\asp.netwebadminfiles\\appconfig\\createappsetting.aspx"), lpNewFileName="C:\\Windows\\Microsoft.NET\\Framework64\\v2.0.50727\\ASP.NETWebAdminFiles\\AppConfig\\CreateAppSetting.aspx.[neftet@tutanota.com].boom" (normalized: "c:\\windows\\microsoft.net\\framework64\\v2.0.50727\\asp.netwebadminfiles\\appconfig\\createappsetting.aspx.[neftet@tutanota.com].boom")) returned 1 [0143.465] MoveFileW (lpExistingFileName="C:\\Windows\\Microsoft.NET\\Framework64\\v2.0.50727\\ASP.NETWebAdminFiles\\AppConfig\\DebugAndTrace.aspx" (normalized: "c:\\windows\\microsoft.net\\framework64\\v2.0.50727\\asp.netwebadminfiles\\appconfig\\debugandtrace.aspx"), lpNewFileName="C:\\Windows\\Microsoft.NET\\Framework64\\v2.0.50727\\ASP.NETWebAdminFiles\\AppConfig\\DebugAndTrace.aspx.[neftet@tutanota.com].boom" (normalized: "c:\\windows\\microsoft.net\\framework64\\v2.0.50727\\asp.netwebadminfiles\\appconfig\\debugandtrace.aspx.[neftet@tutanota.com].boom")) returned 1 [0143.469] MoveFileW (lpExistingFileName="C:\\Windows\\Microsoft.NET\\Framework64\\v2.0.50727\\ASP.NETWebAdminFiles\\AppConfig\\DefineErrorPage.aspx" (normalized: "c:\\windows\\microsoft.net\\framework64\\v2.0.50727\\asp.netwebadminfiles\\appconfig\\defineerrorpage.aspx"), lpNewFileName="C:\\Windows\\Microsoft.NET\\Framework64\\v2.0.50727\\ASP.NETWebAdminFiles\\AppConfig\\DefineErrorPage.aspx.[neftet@tutanota.com].boom" (normalized: "c:\\windows\\microsoft.net\\framework64\\v2.0.50727\\asp.netwebadminfiles\\appconfig\\defineerrorpage.aspx.[neftet@tutanota.com].boom")) returned 1 [0143.471] MoveFileW (lpExistingFileName="C:\\Windows\\Microsoft.NET\\Framework64\\v2.0.50727\\ASP.NETWebAdminFiles\\AppConfig\\EditAppSetting.aspx" (normalized: "c:\\windows\\microsoft.net\\framework64\\v2.0.50727\\asp.netwebadminfiles\\appconfig\\editappsetting.aspx"), lpNewFileName="C:\\Windows\\Microsoft.NET\\Framework64\\v2.0.50727\\ASP.NETWebAdminFiles\\AppConfig\\EditAppSetting.aspx.[neftet@tutanota.com].boom" (normalized: "c:\\windows\\microsoft.net\\framework64\\v2.0.50727\\asp.netwebadminfiles\\appconfig\\editappsetting.aspx.[neftet@tutanota.com].boom")) returned 1 [0143.475] MoveFileW (lpExistingFileName="C:\\Windows\\Microsoft.NET\\Framework64\\v2.0.50727\\ASP.NETWebAdminFiles\\AppConfig\\ManageAppSettings.aspx" (normalized: "c:\\windows\\microsoft.net\\framework64\\v2.0.50727\\asp.netwebadminfiles\\appconfig\\manageappsettings.aspx"), lpNewFileName="C:\\Windows\\Microsoft.NET\\Framework64\\v2.0.50727\\ASP.NETWebAdminFiles\\AppConfig\\ManageAppSettings.aspx.[neftet@tutanota.com].boom" (normalized: "c:\\windows\\microsoft.net\\framework64\\v2.0.50727\\asp.netwebadminfiles\\appconfig\\manageappsettings.aspx.[neftet@tutanota.com].boom")) returned 1 [0143.478] MoveFileW (lpExistingFileName="C:\\Windows\\Microsoft.NET\\Framework64\\v2.0.50727\\ASP.NETWebAdminFiles\\AppConfig\\SmtpSettings.aspx" (normalized: "c:\\windows\\microsoft.net\\framework64\\v2.0.50727\\asp.netwebadminfiles\\appconfig\\smtpsettings.aspx"), lpNewFileName="C:\\Windows\\Microsoft.NET\\Framework64\\v2.0.50727\\ASP.NETWebAdminFiles\\AppConfig\\SmtpSettings.aspx.[neftet@tutanota.com].boom" (normalized: "c:\\windows\\microsoft.net\\framework64\\v2.0.50727\\asp.netwebadminfiles\\appconfig\\smtpsettings.aspx.[neftet@tutanota.com].boom")) returned 1 [0143.485] MoveFileW (lpExistingFileName="C:\\Windows\\Microsoft.NET\\Framework64\\v2.0.50727\\ASP.NETWebAdminFiles\\App_Data\\GroupedProviders.xml" (normalized: "c:\\windows\\microsoft.net\\framework64\\v2.0.50727\\asp.netwebadminfiles\\app_data\\groupedproviders.xml"), lpNewFileName="C:\\Windows\\Microsoft.NET\\Framework64\\v2.0.50727\\ASP.NETWebAdminFiles\\App_Data\\GroupedProviders.xml.[neftet@tutanota.com].boom" (normalized: "c:\\windows\\microsoft.net\\framework64\\v2.0.50727\\asp.netwebadminfiles\\app_data\\groupedproviders.xml.[neftet@tutanota.com].boom")) returned 1 [0143.492] MoveFileW (lpExistingFileName="C:\\Windows\\Microsoft.NET\\Framework64\\v2.0.50727\\ASP.NETWebAdminFiles\\Images\\ASPdotNET_logo.jpg" (normalized: "c:\\windows\\microsoft.net\\framework64\\v2.0.50727\\asp.netwebadminfiles\\images\\aspdotnet_logo.jpg"), lpNewFileName="C:\\Windows\\Microsoft.NET\\Framework64\\v2.0.50727\\ASP.NETWebAdminFiles\\Images\\ASPdotNET_logo.jpg.[neftet@tutanota.com].boom" (normalized: "c:\\windows\\microsoft.net\\framework64\\v2.0.50727\\asp.netwebadminfiles\\images\\aspdotnet_logo.jpg.[neftet@tutanota.com].boom")) returned 1 [0143.495] MoveFileW (lpExistingFileName="C:\\Windows\\Microsoft.NET\\Framework64\\v2.0.50727\\ASP.NETWebAdminFiles\\Images\\darkBlue_GRAD.jpg" (normalized: "c:\\windows\\microsoft.net\\framework64\\v2.0.50727\\asp.netwebadminfiles\\images\\darkblue_grad.jpg"), lpNewFileName="C:\\Windows\\Microsoft.NET\\Framework64\\v2.0.50727\\ASP.NETWebAdminFiles\\Images\\darkBlue_GRAD.jpg.[neftet@tutanota.com].boom" (normalized: "c:\\windows\\microsoft.net\\framework64\\v2.0.50727\\asp.netwebadminfiles\\images\\darkblue_grad.jpg.[neftet@tutanota.com].boom")) returned 1 [0143.498] MoveFileW (lpExistingFileName="C:\\Windows\\Microsoft.NET\\Framework64\\v2.0.50727\\ASP.NETWebAdminFiles\\Images\\help.jpg" (normalized: "c:\\windows\\microsoft.net\\framework64\\v2.0.50727\\asp.netwebadminfiles\\images\\help.jpg"), lpNewFileName="C:\\Windows\\Microsoft.NET\\Framework64\\v2.0.50727\\ASP.NETWebAdminFiles\\Images\\help.jpg.[neftet@tutanota.com].boom" (normalized: "c:\\windows\\microsoft.net\\framework64\\v2.0.50727\\asp.netwebadminfiles\\images\\help.jpg.[neftet@tutanota.com].boom")) returned 1 [0143.500] MoveFileW (lpExistingFileName="C:\\Windows\\Microsoft.NET\\Framework64\\v2.0.50727\\ASP.NETWebAdminFiles\\Images\\security_watermark.jpg" (normalized: "c:\\windows\\microsoft.net\\framework64\\v2.0.50727\\asp.netwebadminfiles\\images\\security_watermark.jpg"), lpNewFileName="C:\\Windows\\Microsoft.NET\\Framework64\\v2.0.50727\\ASP.NETWebAdminFiles\\Images\\security_watermark.jpg.[neftet@tutanota.com].boom" (normalized: "c:\\windows\\microsoft.net\\framework64\\v2.0.50727\\asp.netwebadminfiles\\images\\security_watermark.jpg.[neftet@tutanota.com].boom")) returned 1 [0143.503] MoveFileW (lpExistingFileName="C:\\Windows\\Microsoft.NET\\Framework64\\v2.0.50727\\ASP.NETWebAdminFiles\\Images\\topGradRepeat.jpg" (normalized: "c:\\windows\\microsoft.net\\framework64\\v2.0.50727\\asp.netwebadminfiles\\images\\topgradrepeat.jpg"), lpNewFileName="C:\\Windows\\Microsoft.NET\\Framework64\\v2.0.50727\\ASP.NETWebAdminFiles\\Images\\topGradRepeat.jpg.[neftet@tutanota.com].boom" (normalized: "c:\\windows\\microsoft.net\\framework64\\v2.0.50727\\asp.netwebadminfiles\\images\\topgradrepeat.jpg.[neftet@tutanota.com].boom")) returned 1 [0143.506] MoveFileW (lpExistingFileName="C:\\Windows\\Microsoft.NET\\Framework64\\v2.0.50727\\ASP.NETWebAdminFiles\\Providers\\chooseProviderManagement.aspx" (normalized: "c:\\windows\\microsoft.net\\framework64\\v2.0.50727\\asp.netwebadminfiles\\providers\\chooseprovidermanagement.aspx"), lpNewFileName="C:\\Windows\\Microsoft.NET\\Framework64\\v2.0.50727\\ASP.NETWebAdminFiles\\Providers\\chooseProviderManagement.aspx.[neftet@tutanota.com].boom" (normalized: "c:\\windows\\microsoft.net\\framework64\\v2.0.50727\\asp.netwebadminfiles\\providers\\chooseprovidermanagement.aspx.[neftet@tutanota.com].boom")) returned 1 [0143.513] MoveFileW (lpExistingFileName="C:\\Windows\\Microsoft.NET\\Framework64\\v2.0.50727\\ASP.NETWebAdminFiles\\Providers\\ManageConsolidatedProviders.aspx" (normalized: "c:\\windows\\microsoft.net\\framework64\\v2.0.50727\\asp.netwebadminfiles\\providers\\manageconsolidatedproviders.aspx"), lpNewFileName="C:\\Windows\\Microsoft.NET\\Framework64\\v2.0.50727\\ASP.NETWebAdminFiles\\Providers\\ManageConsolidatedProviders.aspx.[neftet@tutanota.com].boom" (normalized: "c:\\windows\\microsoft.net\\framework64\\v2.0.50727\\asp.netwebadminfiles\\providers\\manageconsolidatedproviders.aspx.[neftet@tutanota.com].boom")) returned 1 [0143.516] MoveFileW (lpExistingFileName="C:\\Windows\\Microsoft.NET\\Framework64\\v2.0.50727\\ASP.NETWebAdminFiles\\Providers\\ManageProviders.aspx" (normalized: "c:\\windows\\microsoft.net\\framework64\\v2.0.50727\\asp.netwebadminfiles\\providers\\manageproviders.aspx"), lpNewFileName="C:\\Windows\\Microsoft.NET\\Framework64\\v2.0.50727\\ASP.NETWebAdminFiles\\Providers\\ManageProviders.aspx.[neftet@tutanota.com].boom" (normalized: "c:\\windows\\microsoft.net\\framework64\\v2.0.50727\\asp.netwebadminfiles\\providers\\manageproviders.aspx.[neftet@tutanota.com].boom")) returned 1 [0143.521] MoveFileW (lpExistingFileName="C:\\Windows\\Microsoft.NET\\Framework64\\v2.0.50727\\ASP.NETWebAdminFiles\\Security\\security.aspx" (normalized: "c:\\windows\\microsoft.net\\framework64\\v2.0.50727\\asp.netwebadminfiles\\security\\security.aspx"), lpNewFileName="C:\\Windows\\Microsoft.NET\\Framework64\\v2.0.50727\\ASP.NETWebAdminFiles\\Security\\security.aspx.[neftet@tutanota.com].boom" (normalized: "c:\\windows\\microsoft.net\\framework64\\v2.0.50727\\asp.netwebadminfiles\\security\\security.aspx.[neftet@tutanota.com].boom")) returned 1 [0143.524] MoveFileW (lpExistingFileName="C:\\Windows\\Microsoft.NET\\Framework64\\v2.0.50727\\ASP.NETWebAdminFiles\\Security\\security0.aspx" (normalized: "c:\\windows\\microsoft.net\\framework64\\v2.0.50727\\asp.netwebadminfiles\\security\\security0.aspx"), lpNewFileName="C:\\Windows\\Microsoft.NET\\Framework64\\v2.0.50727\\ASP.NETWebAdminFiles\\Security\\security0.aspx.[neftet@tutanota.com].boom" (normalized: "c:\\windows\\microsoft.net\\framework64\\v2.0.50727\\asp.netwebadminfiles\\security\\security0.aspx.[neftet@tutanota.com].boom")) returned 1 [0143.526] MoveFileW (lpExistingFileName="C:\\Windows\\Microsoft.NET\\Framework64\\v2.0.50727\\ASP.NETWebAdminFiles\\Security\\setUpAuthentication.aspx" (normalized: "c:\\windows\\microsoft.net\\framework64\\v2.0.50727\\asp.netwebadminfiles\\security\\setupauthentication.aspx"), lpNewFileName="C:\\Windows\\Microsoft.NET\\Framework64\\v2.0.50727\\ASP.NETWebAdminFiles\\Security\\setUpAuthentication.aspx.[neftet@tutanota.com].boom" (normalized: "c:\\windows\\microsoft.net\\framework64\\v2.0.50727\\asp.netwebadminfiles\\security\\setupauthentication.aspx.[neftet@tutanota.com].boom")) returned 1 [0143.532] MoveFileW (lpExistingFileName="C:\\Windows\\Microsoft.NET\\Framework64\\v2.0.50727\\ASP.NETWebAdminFiles\\Security\\Permissions\\createPermission.aspx" (normalized: "c:\\windows\\microsoft.net\\framework64\\v2.0.50727\\asp.netwebadminfiles\\security\\permissions\\createpermission.aspx"), lpNewFileName="C:\\Windows\\Microsoft.NET\\Framework64\\v2.0.50727\\ASP.NETWebAdminFiles\\Security\\Permissions\\createPermission.aspx.[neftet@tutanota.com].boom" (normalized: "c:\\windows\\microsoft.net\\framework64\\v2.0.50727\\asp.netwebadminfiles\\security\\permissions\\createpermission.aspx.[neftet@tutanota.com].boom")) returned 1 [0143.535] MoveFileW (lpExistingFileName="C:\\Windows\\Microsoft.NET\\Framework64\\v2.0.50727\\ASP.NETWebAdminFiles\\Security\\Permissions\\managePermissions.aspx" (normalized: "c:\\windows\\microsoft.net\\framework64\\v2.0.50727\\asp.netwebadminfiles\\security\\permissions\\managepermissions.aspx"), lpNewFileName="C:\\Windows\\Microsoft.NET\\Framework64\\v2.0.50727\\ASP.NETWebAdminFiles\\Security\\Permissions\\managePermissions.aspx.[neftet@tutanota.com].boom" (normalized: "c:\\windows\\microsoft.net\\framework64\\v2.0.50727\\asp.netwebadminfiles\\security\\permissions\\managepermissions.aspx.[neftet@tutanota.com].boom")) returned 1 [0143.543] MoveFileW (lpExistingFileName="C:\\Windows\\Microsoft.NET\\Framework64\\v2.0.50727\\ASP.NETWebAdminFiles\\Security\\Roles\\manageAllRoles.aspx" (normalized: "c:\\windows\\microsoft.net\\framework64\\v2.0.50727\\asp.netwebadminfiles\\security\\roles\\manageallroles.aspx"), lpNewFileName="C:\\Windows\\Microsoft.NET\\Framework64\\v2.0.50727\\ASP.NETWebAdminFiles\\Security\\Roles\\manageAllRoles.aspx.[neftet@tutanota.com].boom" (normalized: "c:\\windows\\microsoft.net\\framework64\\v2.0.50727\\asp.netwebadminfiles\\security\\roles\\manageallroles.aspx.[neftet@tutanota.com].boom")) returned 1 [0143.546] MoveFileW (lpExistingFileName="C:\\Windows\\Microsoft.NET\\Framework64\\v2.0.50727\\ASP.NETWebAdminFiles\\Security\\Roles\\manageSingleRole.aspx" (normalized: "c:\\windows\\microsoft.net\\framework64\\v2.0.50727\\asp.netwebadminfiles\\security\\roles\\managesinglerole.aspx"), lpNewFileName="C:\\Windows\\Microsoft.NET\\Framework64\\v2.0.50727\\ASP.NETWebAdminFiles\\Security\\Roles\\manageSingleRole.aspx.[neftet@tutanota.com].boom" (normalized: "c:\\windows\\microsoft.net\\framework64\\v2.0.50727\\asp.netwebadminfiles\\security\\roles\\managesinglerole.aspx.[neftet@tutanota.com].boom")) returned 1 [0143.549] MoveFileW (lpExistingFileName="C:\\Windows\\Microsoft.NET\\Framework64\\v2.0.50727\\ASP.NETWebAdminFiles\\Security\\Users\\addUser.aspx" (normalized: "c:\\windows\\microsoft.net\\framework64\\v2.0.50727\\asp.netwebadminfiles\\security\\users\\adduser.aspx"), lpNewFileName="C:\\Windows\\Microsoft.NET\\Framework64\\v2.0.50727\\ASP.NETWebAdminFiles\\Security\\Users\\addUser.aspx.[neftet@tutanota.com].boom" (normalized: "c:\\windows\\microsoft.net\\framework64\\v2.0.50727\\asp.netwebadminfiles\\security\\users\\adduser.aspx.[neftet@tutanota.com].boom")) returned 1 [0143.552] MoveFileW (lpExistingFileName="C:\\Windows\\Microsoft.NET\\Framework64\\v2.0.50727\\ASP.NETWebAdminFiles\\Security\\Users\\editUser.aspx" (normalized: "c:\\windows\\microsoft.net\\framework64\\v2.0.50727\\asp.netwebadminfiles\\security\\users\\edituser.aspx"), lpNewFileName="C:\\Windows\\Microsoft.NET\\Framework64\\v2.0.50727\\ASP.NETWebAdminFiles\\Security\\Users\\editUser.aspx.[neftet@tutanota.com].boom" (normalized: "c:\\windows\\microsoft.net\\framework64\\v2.0.50727\\asp.netwebadminfiles\\security\\users\\edituser.aspx.[neftet@tutanota.com].boom")) returned 1 [0143.555] MoveFileW (lpExistingFileName="C:\\Windows\\Microsoft.NET\\Framework64\\v2.0.50727\\ASP.NETWebAdminFiles\\Security\\Users\\findUsers.aspx" (normalized: "c:\\windows\\microsoft.net\\framework64\\v2.0.50727\\asp.netwebadminfiles\\security\\users\\findusers.aspx"), lpNewFileName="C:\\Windows\\Microsoft.NET\\Framework64\\v2.0.50727\\ASP.NETWebAdminFiles\\Security\\Users\\findUsers.aspx.[neftet@tutanota.com].boom" (normalized: "c:\\windows\\microsoft.net\\framework64\\v2.0.50727\\asp.netwebadminfiles\\security\\users\\findusers.aspx.[neftet@tutanota.com].boom")) returned 1 [0143.558] MoveFileW (lpExistingFileName="C:\\Windows\\Microsoft.NET\\Framework64\\v2.0.50727\\ASP.NETWebAdminFiles\\Security\\Users\\manageUsers.aspx" (normalized: "c:\\windows\\microsoft.net\\framework64\\v2.0.50727\\asp.netwebadminfiles\\security\\users\\manageusers.aspx"), lpNewFileName="C:\\Windows\\Microsoft.NET\\Framework64\\v2.0.50727\\ASP.NETWebAdminFiles\\Security\\Users\\manageUsers.aspx.[neftet@tutanota.com].boom" (normalized: "c:\\windows\\microsoft.net\\framework64\\v2.0.50727\\asp.netwebadminfiles\\security\\users\\manageusers.aspx.[neftet@tutanota.com].boom")) returned 1 [0143.564] MoveFileW (lpExistingFileName="C:\\Windows\\Microsoft.NET\\Framework64\\v2.0.50727\\ASP.NETWebAdminFiles\\Security\\Wizard\\wizard.aspx" (normalized: "c:\\windows\\microsoft.net\\framework64\\v2.0.50727\\asp.netwebadminfiles\\security\\wizard\\wizard.aspx"), lpNewFileName="C:\\Windows\\Microsoft.NET\\Framework64\\v2.0.50727\\ASP.NETWebAdminFiles\\Security\\Wizard\\wizard.aspx.[neftet@tutanota.com].boom" (normalized: "c:\\windows\\microsoft.net\\framework64\\v2.0.50727\\asp.netwebadminfiles\\security\\wizard\\wizard.aspx.[neftet@tutanota.com].boom")) returned 1 [0143.572] MoveFileW (lpExistingFileName="C:\\Windows\\Microsoft.NET\\Framework64\\v2.0.50727\\CONFIG\\DefaultWsdlHelpGenerator.aspx" (normalized: "c:\\windows\\microsoft.net\\framework64\\v2.0.50727\\config\\defaultwsdlhelpgenerator.aspx"), lpNewFileName="C:\\Windows\\Microsoft.NET\\Framework64\\v2.0.50727\\CONFIG\\DefaultWsdlHelpGenerator.aspx.[neftet@tutanota.com].boom" (normalized: "c:\\windows\\microsoft.net\\framework64\\v2.0.50727\\config\\defaultwsdlhelpgenerator.aspx.[neftet@tutanota.com].boom")) returned 1 [0143.597] MoveFileW (lpExistingFileName="C:\\Windows\\Microsoft.NET\\Framework64\\v4.0.30319\\InstallCommon.sql" (normalized: "c:\\windows\\microsoft.net\\framework64\\v4.0.30319\\installcommon.sql"), lpNewFileName="C:\\Windows\\Microsoft.NET\\Framework64\\v4.0.30319\\InstallCommon.sql.[neftet@tutanota.com].boom" (normalized: "c:\\windows\\microsoft.net\\framework64\\v4.0.30319\\installcommon.sql.[neftet@tutanota.com].boom")) returned 1 [0143.602] MoveFileW (lpExistingFileName="C:\\Windows\\Microsoft.NET\\Framework64\\v4.0.30319\\InstallMembership.sql" (normalized: "c:\\windows\\microsoft.net\\framework64\\v4.0.30319\\installmembership.sql"), lpNewFileName="C:\\Windows\\Microsoft.NET\\Framework64\\v4.0.30319\\InstallMembership.sql.[neftet@tutanota.com].boom" (normalized: "c:\\windows\\microsoft.net\\framework64\\v4.0.30319\\installmembership.sql.[neftet@tutanota.com].boom")) returned 1 [0143.607] MoveFileW (lpExistingFileName="C:\\Windows\\Microsoft.NET\\Framework64\\v4.0.30319\\InstallPersistSqlState.sql" (normalized: "c:\\windows\\microsoft.net\\framework64\\v4.0.30319\\installpersistsqlstate.sql"), lpNewFileName="C:\\Windows\\Microsoft.NET\\Framework64\\v4.0.30319\\InstallPersistSqlState.sql.[neftet@tutanota.com].boom" (normalized: "c:\\windows\\microsoft.net\\framework64\\v4.0.30319\\installpersistsqlstate.sql.[neftet@tutanota.com].boom")) returned 1 [0143.611] MoveFileW (lpExistingFileName="C:\\Windows\\Microsoft.NET\\Framework64\\v4.0.30319\\InstallPersonalization.sql" (normalized: "c:\\windows\\microsoft.net\\framework64\\v4.0.30319\\installpersonalization.sql"), lpNewFileName="C:\\Windows\\Microsoft.NET\\Framework64\\v4.0.30319\\InstallPersonalization.sql.[neftet@tutanota.com].boom" (normalized: "c:\\windows\\microsoft.net\\framework64\\v4.0.30319\\installpersonalization.sql.[neftet@tutanota.com].boom")) returned 1 [0143.615] MoveFileW (lpExistingFileName="C:\\Windows\\Microsoft.NET\\Framework64\\v4.0.30319\\InstallRoles.sql" (normalized: "c:\\windows\\microsoft.net\\framework64\\v4.0.30319\\installroles.sql"), lpNewFileName="C:\\Windows\\Microsoft.NET\\Framework64\\v4.0.30319\\InstallRoles.sql.[neftet@tutanota.com].boom" (normalized: "c:\\windows\\microsoft.net\\framework64\\v4.0.30319\\installroles.sql.[neftet@tutanota.com].boom")) returned 1 [0143.620] MoveFileW (lpExistingFileName="C:\\Windows\\Microsoft.NET\\Framework64\\v4.0.30319\\InstallSqlState.sql" (normalized: "c:\\windows\\microsoft.net\\framework64\\v4.0.30319\\installsqlstate.sql"), lpNewFileName="C:\\Windows\\Microsoft.NET\\Framework64\\v4.0.30319\\InstallSqlState.sql.[neftet@tutanota.com].boom" (normalized: "c:\\windows\\microsoft.net\\framework64\\v4.0.30319\\installsqlstate.sql.[neftet@tutanota.com].boom")) returned 1 [0143.625] MoveFileW (lpExistingFileName="C:\\Windows\\Microsoft.NET\\Framework64\\v4.0.30319\\InstallSqlStateTemplate.sql" (normalized: "c:\\windows\\microsoft.net\\framework64\\v4.0.30319\\installsqlstatetemplate.sql"), lpNewFileName="C:\\Windows\\Microsoft.NET\\Framework64\\v4.0.30319\\InstallSqlStateTemplate.sql.[neftet@tutanota.com].boom" (normalized: "c:\\windows\\microsoft.net\\framework64\\v4.0.30319\\installsqlstatetemplate.sql.[neftet@tutanota.com].boom")) returned 1 [0143.628] MoveFileW (lpExistingFileName="C:\\Windows\\Microsoft.NET\\Framework64\\v4.0.30319\\InstallWebEventSqlProvider.sql" (normalized: "c:\\windows\\microsoft.net\\framework64\\v4.0.30319\\installwebeventsqlprovider.sql"), lpNewFileName="C:\\Windows\\Microsoft.NET\\Framework64\\v4.0.30319\\InstallWebEventSqlProvider.sql.[neftet@tutanota.com].boom" (normalized: "c:\\windows\\microsoft.net\\framework64\\v4.0.30319\\installwebeventsqlprovider.sql.[neftet@tutanota.com].boom")) returned 1 [0143.632] MoveFileW (lpExistingFileName="C:\\Windows\\Microsoft.NET\\Framework64\\v4.0.30319\\ThirdPartyNotices.txt" (normalized: "c:\\windows\\microsoft.net\\framework64\\v4.0.30319\\thirdpartynotices.txt"), lpNewFileName="C:\\Windows\\Microsoft.NET\\Framework64\\v4.0.30319\\ThirdPartyNotices.txt.[neftet@tutanota.com].boom" (normalized: "c:\\windows\\microsoft.net\\framework64\\v4.0.30319\\thirdpartynotices.txt.[neftet@tutanota.com].boom")) returned 1 [0143.635] MoveFileW (lpExistingFileName="C:\\Windows\\Microsoft.NET\\Framework64\\v4.0.30319\\UninstallCommon.sql" (normalized: "c:\\windows\\microsoft.net\\framework64\\v4.0.30319\\uninstallcommon.sql"), lpNewFileName="C:\\Windows\\Microsoft.NET\\Framework64\\v4.0.30319\\UninstallCommon.sql.[neftet@tutanota.com].boom" (normalized: "c:\\windows\\microsoft.net\\framework64\\v4.0.30319\\uninstallcommon.sql.[neftet@tutanota.com].boom")) returned 1 [0143.638] MoveFileW (lpExistingFileName="C:\\Windows\\Microsoft.NET\\Framework64\\v4.0.30319\\UninstallMembership.sql" (normalized: "c:\\windows\\microsoft.net\\framework64\\v4.0.30319\\uninstallmembership.sql"), lpNewFileName="C:\\Windows\\Microsoft.NET\\Framework64\\v4.0.30319\\UninstallMembership.sql.[neftet@tutanota.com].boom" (normalized: "c:\\windows\\microsoft.net\\framework64\\v4.0.30319\\uninstallmembership.sql.[neftet@tutanota.com].boom")) returned 1 [0143.641] MoveFileW (lpExistingFileName="C:\\Windows\\Microsoft.NET\\Framework64\\v4.0.30319\\UninstallPersistSqlState.sql" (normalized: "c:\\windows\\microsoft.net\\framework64\\v4.0.30319\\uninstallpersistsqlstate.sql"), lpNewFileName="C:\\Windows\\Microsoft.NET\\Framework64\\v4.0.30319\\UninstallPersistSqlState.sql.[neftet@tutanota.com].boom" (normalized: "c:\\windows\\microsoft.net\\framework64\\v4.0.30319\\uninstallpersistsqlstate.sql.[neftet@tutanota.com].boom")) returned 1 [0143.644] MoveFileW (lpExistingFileName="C:\\Windows\\Microsoft.NET\\Framework64\\v4.0.30319\\UninstallPersonalization.sql" (normalized: "c:\\windows\\microsoft.net\\framework64\\v4.0.30319\\uninstallpersonalization.sql"), lpNewFileName="C:\\Windows\\Microsoft.NET\\Framework64\\v4.0.30319\\UninstallPersonalization.sql.[neftet@tutanota.com].boom" (normalized: "c:\\windows\\microsoft.net\\framework64\\v4.0.30319\\uninstallpersonalization.sql.[neftet@tutanota.com].boom")) returned 1 [0143.647] MoveFileW (lpExistingFileName="C:\\Windows\\Microsoft.NET\\Framework64\\v4.0.30319\\UninstallRoles.sql" (normalized: "c:\\windows\\microsoft.net\\framework64\\v4.0.30319\\uninstallroles.sql"), lpNewFileName="C:\\Windows\\Microsoft.NET\\Framework64\\v4.0.30319\\UninstallRoles.sql.[neftet@tutanota.com].boom" (normalized: "c:\\windows\\microsoft.net\\framework64\\v4.0.30319\\uninstallroles.sql.[neftet@tutanota.com].boom")) returned 1 [0143.650] MoveFileW (lpExistingFileName="C:\\Windows\\Microsoft.NET\\Framework64\\v4.0.30319\\UninstallSqlState.sql" (normalized: "c:\\windows\\microsoft.net\\framework64\\v4.0.30319\\uninstallsqlstate.sql"), lpNewFileName="C:\\Windows\\Microsoft.NET\\Framework64\\v4.0.30319\\UninstallSqlState.sql.[neftet@tutanota.com].boom" (normalized: "c:\\windows\\microsoft.net\\framework64\\v4.0.30319\\uninstallsqlstate.sql.[neftet@tutanota.com].boom")) returned 1 [0143.653] MoveFileW (lpExistingFileName="C:\\Windows\\Microsoft.NET\\Framework64\\v4.0.30319\\UninstallSqlStateTemplate.sql" (normalized: "c:\\windows\\microsoft.net\\framework64\\v4.0.30319\\uninstallsqlstatetemplate.sql"), lpNewFileName="C:\\Windows\\Microsoft.NET\\Framework64\\v4.0.30319\\UninstallSqlStateTemplate.sql.[neftet@tutanota.com].boom" (normalized: "c:\\windows\\microsoft.net\\framework64\\v4.0.30319\\uninstallsqlstatetemplate.sql.[neftet@tutanota.com].boom")) returned 1 [0143.657] MoveFileW (lpExistingFileName="C:\\Windows\\Microsoft.NET\\Framework64\\v4.0.30319\\UninstallWebEventSqlProvider.sql" (normalized: "c:\\windows\\microsoft.net\\framework64\\v4.0.30319\\uninstallwebeventsqlprovider.sql"), lpNewFileName="C:\\Windows\\Microsoft.NET\\Framework64\\v4.0.30319\\UninstallWebEventSqlProvider.sql.[neftet@tutanota.com].boom" (normalized: "c:\\windows\\microsoft.net\\framework64\\v4.0.30319\\uninstallwebeventsqlprovider.sql.[neftet@tutanota.com].boom")) returned 1 [0143.663] MoveFileW (lpExistingFileName="C:\\Windows\\Microsoft.NET\\Framework64\\v4.0.30319\\ASP.NETWebAdminFiles\\default.aspx" (normalized: "c:\\windows\\microsoft.net\\framework64\\v4.0.30319\\asp.netwebadminfiles\\default.aspx"), lpNewFileName="C:\\Windows\\Microsoft.NET\\Framework64\\v4.0.30319\\ASP.NETWebAdminFiles\\default.aspx.[neftet@tutanota.com].boom" (normalized: "c:\\windows\\microsoft.net\\framework64\\v4.0.30319\\asp.netwebadminfiles\\default.aspx.[neftet@tutanota.com].boom")) returned 1 [0143.677] MoveFileW (lpExistingFileName="C:\\Windows\\Microsoft.NET\\Framework64\\v4.0.30319\\ASP.NETWebAdminFiles\\error.aspx" (normalized: "c:\\windows\\microsoft.net\\framework64\\v4.0.30319\\asp.netwebadminfiles\\error.aspx"), lpNewFileName="C:\\Windows\\Microsoft.NET\\Framework64\\v4.0.30319\\ASP.NETWebAdminFiles\\error.aspx.[neftet@tutanota.com].boom" (normalized: "c:\\windows\\microsoft.net\\framework64\\v4.0.30319\\asp.netwebadminfiles\\error.aspx.[neftet@tutanota.com].boom")) returned 1 [0143.681] MoveFileW (lpExistingFileName="C:\\Windows\\Microsoft.NET\\Framework64\\v4.0.30319\\ASP.NETWebAdminFiles\\home0.aspx" (normalized: "c:\\windows\\microsoft.net\\framework64\\v4.0.30319\\asp.netwebadminfiles\\home0.aspx"), lpNewFileName="C:\\Windows\\Microsoft.NET\\Framework64\\v4.0.30319\\ASP.NETWebAdminFiles\\home0.aspx.[neftet@tutanota.com].boom" (normalized: "c:\\windows\\microsoft.net\\framework64\\v4.0.30319\\asp.netwebadminfiles\\home0.aspx.[neftet@tutanota.com].boom")) returned 1 [0143.687] MoveFileW (lpExistingFileName="C:\\Windows\\Microsoft.NET\\Framework64\\v4.0.30319\\ASP.NETWebAdminFiles\\home1.aspx" (normalized: "c:\\windows\\microsoft.net\\framework64\\v4.0.30319\\asp.netwebadminfiles\\home1.aspx"), lpNewFileName="C:\\Windows\\Microsoft.NET\\Framework64\\v4.0.30319\\ASP.NETWebAdminFiles\\home1.aspx.[neftet@tutanota.com].boom" (normalized: "c:\\windows\\microsoft.net\\framework64\\v4.0.30319\\asp.netwebadminfiles\\home1.aspx.[neftet@tutanota.com].boom")) returned 1 [0143.690] MoveFileW (lpExistingFileName="C:\\Windows\\Microsoft.NET\\Framework64\\v4.0.30319\\ASP.NETWebAdminFiles\\home2.aspx" (normalized: "c:\\windows\\microsoft.net\\framework64\\v4.0.30319\\asp.netwebadminfiles\\home2.aspx"), lpNewFileName="C:\\Windows\\Microsoft.NET\\Framework64\\v4.0.30319\\ASP.NETWebAdminFiles\\home2.aspx.[neftet@tutanota.com].boom" (normalized: "c:\\windows\\microsoft.net\\framework64\\v4.0.30319\\asp.netwebadminfiles\\home2.aspx.[neftet@tutanota.com].boom")) returned 1 [0143.695] MoveFileW (lpExistingFileName="C:\\Windows\\Microsoft.NET\\Framework64\\v4.0.30319\\ASP.NETWebAdminFiles\\WebAdminHelp.aspx" (normalized: "c:\\windows\\microsoft.net\\framework64\\v4.0.30319\\asp.netwebadminfiles\\webadminhelp.aspx"), lpNewFileName="C:\\Windows\\Microsoft.NET\\Framework64\\v4.0.30319\\ASP.NETWebAdminFiles\\WebAdminHelp.aspx.[neftet@tutanota.com].boom" (normalized: "c:\\windows\\microsoft.net\\framework64\\v4.0.30319\\asp.netwebadminfiles\\webadminhelp.aspx.[neftet@tutanota.com].boom")) returned 1 [0143.700] MoveFileW (lpExistingFileName="C:\\Windows\\Microsoft.NET\\Framework64\\v4.0.30319\\ASP.NETWebAdminFiles\\WebAdminHelp_Application.aspx" (normalized: "c:\\windows\\microsoft.net\\framework64\\v4.0.30319\\asp.netwebadminfiles\\webadminhelp_application.aspx"), lpNewFileName="C:\\Windows\\Microsoft.NET\\Framework64\\v4.0.30319\\ASP.NETWebAdminFiles\\WebAdminHelp_Application.aspx.[neftet@tutanota.com].boom" (normalized: "c:\\windows\\microsoft.net\\framework64\\v4.0.30319\\asp.netwebadminfiles\\webadminhelp_application.aspx.[neftet@tutanota.com].boom")) returned 1 [0143.703] MoveFileW (lpExistingFileName="C:\\Windows\\Microsoft.NET\\Framework64\\v4.0.30319\\ASP.NETWebAdminFiles\\WebAdminHelp_Internals.aspx" (normalized: "c:\\windows\\microsoft.net\\framework64\\v4.0.30319\\asp.netwebadminfiles\\webadminhelp_internals.aspx"), lpNewFileName="C:\\Windows\\Microsoft.NET\\Framework64\\v4.0.30319\\ASP.NETWebAdminFiles\\WebAdminHelp_Internals.aspx.[neftet@tutanota.com].boom" (normalized: "c:\\windows\\microsoft.net\\framework64\\v4.0.30319\\asp.netwebadminfiles\\webadminhelp_internals.aspx.[neftet@tutanota.com].boom")) returned 1 [0143.706] MoveFileW (lpExistingFileName="C:\\Windows\\Microsoft.NET\\Framework64\\v4.0.30319\\ASP.NETWebAdminFiles\\WebAdminHelp_Provider.aspx" (normalized: "c:\\windows\\microsoft.net\\framework64\\v4.0.30319\\asp.netwebadminfiles\\webadminhelp_provider.aspx"), lpNewFileName="C:\\Windows\\Microsoft.NET\\Framework64\\v4.0.30319\\ASP.NETWebAdminFiles\\WebAdminHelp_Provider.aspx.[neftet@tutanota.com].boom" (normalized: "c:\\windows\\microsoft.net\\framework64\\v4.0.30319\\asp.netwebadminfiles\\webadminhelp_provider.aspx.[neftet@tutanota.com].boom")) returned 1 [0143.709] MoveFileW (lpExistingFileName="C:\\Windows\\Microsoft.NET\\Framework64\\v4.0.30319\\ASP.NETWebAdminFiles\\WebAdminHelp_Security.aspx" (normalized: "c:\\windows\\microsoft.net\\framework64\\v4.0.30319\\asp.netwebadminfiles\\webadminhelp_security.aspx"), lpNewFileName="C:\\Windows\\Microsoft.NET\\Framework64\\v4.0.30319\\ASP.NETWebAdminFiles\\WebAdminHelp_Security.aspx.[neftet@tutanota.com].boom" (normalized: "c:\\windows\\microsoft.net\\framework64\\v4.0.30319\\asp.netwebadminfiles\\webadminhelp_security.aspx.[neftet@tutanota.com].boom")) returned 1 [0143.713] MoveFileW (lpExistingFileName="C:\\Windows\\Microsoft.NET\\Framework64\\v4.0.30319\\ASP.NETWebAdminFiles\\WebAdminStyles.css" (normalized: "c:\\windows\\microsoft.net\\framework64\\v4.0.30319\\asp.netwebadminfiles\\webadminstyles.css"), lpNewFileName="C:\\Windows\\Microsoft.NET\\Framework64\\v4.0.30319\\ASP.NETWebAdminFiles\\WebAdminStyles.css.[neftet@tutanota.com].boom" (normalized: "c:\\windows\\microsoft.net\\framework64\\v4.0.30319\\asp.netwebadminfiles\\webadminstyles.css.[neftet@tutanota.com].boom")) returned 1 [0143.718] MoveFileW (lpExistingFileName="C:\\Windows\\Microsoft.NET\\Framework64\\v4.0.30319\\ASP.NETWebAdminFiles\\AppConfig\\AppConfigHome.aspx" (normalized: "c:\\windows\\microsoft.net\\framework64\\v4.0.30319\\asp.netwebadminfiles\\appconfig\\appconfighome.aspx"), lpNewFileName="C:\\Windows\\Microsoft.NET\\Framework64\\v4.0.30319\\ASP.NETWebAdminFiles\\AppConfig\\AppConfigHome.aspx.[neftet@tutanota.com].boom" (normalized: "c:\\windows\\microsoft.net\\framework64\\v4.0.30319\\asp.netwebadminfiles\\appconfig\\appconfighome.aspx.[neftet@tutanota.com].boom")) returned 1 [0143.720] MoveFileW (lpExistingFileName="C:\\Windows\\Microsoft.NET\\Framework64\\v4.0.30319\\ASP.NETWebAdminFiles\\AppConfig\\CreateAppSetting.aspx" (normalized: "c:\\windows\\microsoft.net\\framework64\\v4.0.30319\\asp.netwebadminfiles\\appconfig\\createappsetting.aspx"), lpNewFileName="C:\\Windows\\Microsoft.NET\\Framework64\\v4.0.30319\\ASP.NETWebAdminFiles\\AppConfig\\CreateAppSetting.aspx.[neftet@tutanota.com].boom" (normalized: "c:\\windows\\microsoft.net\\framework64\\v4.0.30319\\asp.netwebadminfiles\\appconfig\\createappsetting.aspx.[neftet@tutanota.com].boom")) returned 1 [0143.725] MoveFileW (lpExistingFileName="C:\\Windows\\Microsoft.NET\\Framework64\\v4.0.30319\\ASP.NETWebAdminFiles\\AppConfig\\DebugAndTrace.aspx" (normalized: "c:\\windows\\microsoft.net\\framework64\\v4.0.30319\\asp.netwebadminfiles\\appconfig\\debugandtrace.aspx"), lpNewFileName="C:\\Windows\\Microsoft.NET\\Framework64\\v4.0.30319\\ASP.NETWebAdminFiles\\AppConfig\\DebugAndTrace.aspx.[neftet@tutanota.com].boom" (normalized: "c:\\windows\\microsoft.net\\framework64\\v4.0.30319\\asp.netwebadminfiles\\appconfig\\debugandtrace.aspx.[neftet@tutanota.com].boom")) returned 1 [0143.729] MoveFileW (lpExistingFileName="C:\\Windows\\Microsoft.NET\\Framework64\\v4.0.30319\\ASP.NETWebAdminFiles\\AppConfig\\DefineErrorPage.aspx" (normalized: "c:\\windows\\microsoft.net\\framework64\\v4.0.30319\\asp.netwebadminfiles\\appconfig\\defineerrorpage.aspx"), lpNewFileName="C:\\Windows\\Microsoft.NET\\Framework64\\v4.0.30319\\ASP.NETWebAdminFiles\\AppConfig\\DefineErrorPage.aspx.[neftet@tutanota.com].boom" (normalized: "c:\\windows\\microsoft.net\\framework64\\v4.0.30319\\asp.netwebadminfiles\\appconfig\\defineerrorpage.aspx.[neftet@tutanota.com].boom")) returned 1 [0143.731] MoveFileW (lpExistingFileName="C:\\Windows\\Microsoft.NET\\Framework64\\v4.0.30319\\ASP.NETWebAdminFiles\\AppConfig\\EditAppSetting.aspx" (normalized: "c:\\windows\\microsoft.net\\framework64\\v4.0.30319\\asp.netwebadminfiles\\appconfig\\editappsetting.aspx"), lpNewFileName="C:\\Windows\\Microsoft.NET\\Framework64\\v4.0.30319\\ASP.NETWebAdminFiles\\AppConfig\\EditAppSetting.aspx.[neftet@tutanota.com].boom" (normalized: "c:\\windows\\microsoft.net\\framework64\\v4.0.30319\\asp.netwebadminfiles\\appconfig\\editappsetting.aspx.[neftet@tutanota.com].boom")) returned 1 [0143.735] MoveFileW (lpExistingFileName="C:\\Windows\\Microsoft.NET\\Framework64\\v4.0.30319\\ASP.NETWebAdminFiles\\AppConfig\\ManageAppSettings.aspx" (normalized: "c:\\windows\\microsoft.net\\framework64\\v4.0.30319\\asp.netwebadminfiles\\appconfig\\manageappsettings.aspx"), lpNewFileName="C:\\Windows\\Microsoft.NET\\Framework64\\v4.0.30319\\ASP.NETWebAdminFiles\\AppConfig\\ManageAppSettings.aspx.[neftet@tutanota.com].boom" (normalized: "c:\\windows\\microsoft.net\\framework64\\v4.0.30319\\asp.netwebadminfiles\\appconfig\\manageappsettings.aspx.[neftet@tutanota.com].boom")) returned 1 [0143.738] MoveFileW (lpExistingFileName="C:\\Windows\\Microsoft.NET\\Framework64\\v4.0.30319\\ASP.NETWebAdminFiles\\AppConfig\\SmtpSettings.aspx" (normalized: "c:\\windows\\microsoft.net\\framework64\\v4.0.30319\\asp.netwebadminfiles\\appconfig\\smtpsettings.aspx"), lpNewFileName="C:\\Windows\\Microsoft.NET\\Framework64\\v4.0.30319\\ASP.NETWebAdminFiles\\AppConfig\\SmtpSettings.aspx.[neftet@tutanota.com].boom" (normalized: "c:\\windows\\microsoft.net\\framework64\\v4.0.30319\\asp.netwebadminfiles\\appconfig\\smtpsettings.aspx.[neftet@tutanota.com].boom")) returned 1 [0143.746] MoveFileW (lpExistingFileName="C:\\Windows\\Microsoft.NET\\Framework64\\v4.0.30319\\ASP.NETWebAdminFiles\\App_Data\\GroupedProviders.xml" (normalized: "c:\\windows\\microsoft.net\\framework64\\v4.0.30319\\asp.netwebadminfiles\\app_data\\groupedproviders.xml"), lpNewFileName="C:\\Windows\\Microsoft.NET\\Framework64\\v4.0.30319\\ASP.NETWebAdminFiles\\App_Data\\GroupedProviders.xml.[neftet@tutanota.com].boom" (normalized: "c:\\windows\\microsoft.net\\framework64\\v4.0.30319\\asp.netwebadminfiles\\app_data\\groupedproviders.xml.[neftet@tutanota.com].boom")) returned 1 [0143.754] MoveFileW (lpExistingFileName="C:\\Windows\\Microsoft.NET\\Framework64\\v4.0.30319\\ASP.NETWebAdminFiles\\Images\\ASPdotNET_logo.jpg" (normalized: "c:\\windows\\microsoft.net\\framework64\\v4.0.30319\\asp.netwebadminfiles\\images\\aspdotnet_logo.jpg"), lpNewFileName="C:\\Windows\\Microsoft.NET\\Framework64\\v4.0.30319\\ASP.NETWebAdminFiles\\Images\\ASPdotNET_logo.jpg.[neftet@tutanota.com].boom" (normalized: "c:\\windows\\microsoft.net\\framework64\\v4.0.30319\\asp.netwebadminfiles\\images\\aspdotnet_logo.jpg.[neftet@tutanota.com].boom")) returned 1 [0143.757] MoveFileW (lpExistingFileName="C:\\Windows\\Microsoft.NET\\Framework64\\v4.0.30319\\ASP.NETWebAdminFiles\\Images\\darkBlue_GRAD.jpg" (normalized: "c:\\windows\\microsoft.net\\framework64\\v4.0.30319\\asp.netwebadminfiles\\images\\darkblue_grad.jpg"), lpNewFileName="C:\\Windows\\Microsoft.NET\\Framework64\\v4.0.30319\\ASP.NETWebAdminFiles\\Images\\darkBlue_GRAD.jpg.[neftet@tutanota.com].boom" (normalized: "c:\\windows\\microsoft.net\\framework64\\v4.0.30319\\asp.netwebadminfiles\\images\\darkblue_grad.jpg.[neftet@tutanota.com].boom")) returned 1 [0143.760] MoveFileW (lpExistingFileName="C:\\Windows\\Microsoft.NET\\Framework64\\v4.0.30319\\ASP.NETWebAdminFiles\\Images\\help.jpg" (normalized: "c:\\windows\\microsoft.net\\framework64\\v4.0.30319\\asp.netwebadminfiles\\images\\help.jpg"), lpNewFileName="C:\\Windows\\Microsoft.NET\\Framework64\\v4.0.30319\\ASP.NETWebAdminFiles\\Images\\help.jpg.[neftet@tutanota.com].boom" (normalized: "c:\\windows\\microsoft.net\\framework64\\v4.0.30319\\asp.netwebadminfiles\\images\\help.jpg.[neftet@tutanota.com].boom")) returned 1 [0143.763] MoveFileW (lpExistingFileName="C:\\Windows\\Microsoft.NET\\Framework64\\v4.0.30319\\ASP.NETWebAdminFiles\\Images\\security_watermark.jpg" (normalized: "c:\\windows\\microsoft.net\\framework64\\v4.0.30319\\asp.netwebadminfiles\\images\\security_watermark.jpg"), lpNewFileName="C:\\Windows\\Microsoft.NET\\Framework64\\v4.0.30319\\ASP.NETWebAdminFiles\\Images\\security_watermark.jpg.[neftet@tutanota.com].boom" (normalized: "c:\\windows\\microsoft.net\\framework64\\v4.0.30319\\asp.netwebadminfiles\\images\\security_watermark.jpg.[neftet@tutanota.com].boom")) returned 1 [0143.766] MoveFileW (lpExistingFileName="C:\\Windows\\Microsoft.NET\\Framework64\\v4.0.30319\\ASP.NETWebAdminFiles\\Images\\topGradRepeat.jpg" (normalized: "c:\\windows\\microsoft.net\\framework64\\v4.0.30319\\asp.netwebadminfiles\\images\\topgradrepeat.jpg"), lpNewFileName="C:\\Windows\\Microsoft.NET\\Framework64\\v4.0.30319\\ASP.NETWebAdminFiles\\Images\\topGradRepeat.jpg.[neftet@tutanota.com].boom" (normalized: "c:\\windows\\microsoft.net\\framework64\\v4.0.30319\\asp.netwebadminfiles\\images\\topgradrepeat.jpg.[neftet@tutanota.com].boom")) returned 1 [0143.769] MoveFileW (lpExistingFileName="C:\\Windows\\Microsoft.NET\\Framework64\\v4.0.30319\\ASP.NETWebAdminFiles\\Providers\\chooseProviderManagement.aspx" (normalized: "c:\\windows\\microsoft.net\\framework64\\v4.0.30319\\asp.netwebadminfiles\\providers\\chooseprovidermanagement.aspx"), lpNewFileName="C:\\Windows\\Microsoft.NET\\Framework64\\v4.0.30319\\ASP.NETWebAdminFiles\\Providers\\chooseProviderManagement.aspx.[neftet@tutanota.com].boom" (normalized: "c:\\windows\\microsoft.net\\framework64\\v4.0.30319\\asp.netwebadminfiles\\providers\\chooseprovidermanagement.aspx.[neftet@tutanota.com].boom")) returned 1 [0143.772] MoveFileW (lpExistingFileName="C:\\Windows\\Microsoft.NET\\Framework64\\v4.0.30319\\ASP.NETWebAdminFiles\\Providers\\ManageConsolidatedProviders.aspx" (normalized: "c:\\windows\\microsoft.net\\framework64\\v4.0.30319\\asp.netwebadminfiles\\providers\\manageconsolidatedproviders.aspx"), lpNewFileName="C:\\Windows\\Microsoft.NET\\Framework64\\v4.0.30319\\ASP.NETWebAdminFiles\\Providers\\ManageConsolidatedProviders.aspx.[neftet@tutanota.com].boom" (normalized: "c:\\windows\\microsoft.net\\framework64\\v4.0.30319\\asp.netwebadminfiles\\providers\\manageconsolidatedproviders.aspx.[neftet@tutanota.com].boom")) returned 1 [0143.776] MoveFileW (lpExistingFileName="C:\\Windows\\Microsoft.NET\\Framework64\\v4.0.30319\\ASP.NETWebAdminFiles\\Providers\\ManageProviders.aspx" (normalized: "c:\\windows\\microsoft.net\\framework64\\v4.0.30319\\asp.netwebadminfiles\\providers\\manageproviders.aspx"), lpNewFileName="C:\\Windows\\Microsoft.NET\\Framework64\\v4.0.30319\\ASP.NETWebAdminFiles\\Providers\\ManageProviders.aspx.[neftet@tutanota.com].boom" (normalized: "c:\\windows\\microsoft.net\\framework64\\v4.0.30319\\asp.netwebadminfiles\\providers\\manageproviders.aspx.[neftet@tutanota.com].boom")) returned 1 [0143.781] MoveFileW (lpExistingFileName="C:\\Windows\\Microsoft.NET\\Framework64\\v4.0.30319\\ASP.NETWebAdminFiles\\Security\\security.aspx" (normalized: "c:\\windows\\microsoft.net\\framework64\\v4.0.30319\\asp.netwebadminfiles\\security\\security.aspx"), lpNewFileName="C:\\Windows\\Microsoft.NET\\Framework64\\v4.0.30319\\ASP.NETWebAdminFiles\\Security\\security.aspx.[neftet@tutanota.com].boom" (normalized: "c:\\windows\\microsoft.net\\framework64\\v4.0.30319\\asp.netwebadminfiles\\security\\security.aspx.[neftet@tutanota.com].boom")) returned 1 [0143.784] MoveFileW (lpExistingFileName="C:\\Windows\\Microsoft.NET\\Framework64\\v4.0.30319\\ASP.NETWebAdminFiles\\Security\\security0.aspx" (normalized: "c:\\windows\\microsoft.net\\framework64\\v4.0.30319\\asp.netwebadminfiles\\security\\security0.aspx"), lpNewFileName="C:\\Windows\\Microsoft.NET\\Framework64\\v4.0.30319\\ASP.NETWebAdminFiles\\Security\\security0.aspx.[neftet@tutanota.com].boom" (normalized: "c:\\windows\\microsoft.net\\framework64\\v4.0.30319\\asp.netwebadminfiles\\security\\security0.aspx.[neftet@tutanota.com].boom")) returned 1 [0143.790] MoveFileW (lpExistingFileName="C:\\Windows\\Microsoft.NET\\Framework64\\v4.0.30319\\ASP.NETWebAdminFiles\\Security\\setUpAuthentication.aspx" (normalized: "c:\\windows\\microsoft.net\\framework64\\v4.0.30319\\asp.netwebadminfiles\\security\\setupauthentication.aspx"), lpNewFileName="C:\\Windows\\Microsoft.NET\\Framework64\\v4.0.30319\\ASP.NETWebAdminFiles\\Security\\setUpAuthentication.aspx.[neftet@tutanota.com].boom" (normalized: "c:\\windows\\microsoft.net\\framework64\\v4.0.30319\\asp.netwebadminfiles\\security\\setupauthentication.aspx.[neftet@tutanota.com].boom")) returned 1 [0143.796] MoveFileW (lpExistingFileName="C:\\Windows\\Microsoft.NET\\Framework64\\v4.0.30319\\ASP.NETWebAdminFiles\\Security\\Permissions\\createPermission.aspx" (normalized: "c:\\windows\\microsoft.net\\framework64\\v4.0.30319\\asp.netwebadminfiles\\security\\permissions\\createpermission.aspx"), lpNewFileName="C:\\Windows\\Microsoft.NET\\Framework64\\v4.0.30319\\ASP.NETWebAdminFiles\\Security\\Permissions\\createPermission.aspx.[neftet@tutanota.com].boom" (normalized: "c:\\windows\\microsoft.net\\framework64\\v4.0.30319\\asp.netwebadminfiles\\security\\permissions\\createpermission.aspx.[neftet@tutanota.com].boom")) returned 1 [0143.800] MoveFileW (lpExistingFileName="C:\\Windows\\Microsoft.NET\\Framework64\\v4.0.30319\\ASP.NETWebAdminFiles\\Security\\Permissions\\managePermissions.aspx" (normalized: "c:\\windows\\microsoft.net\\framework64\\v4.0.30319\\asp.netwebadminfiles\\security\\permissions\\managepermissions.aspx"), lpNewFileName="C:\\Windows\\Microsoft.NET\\Framework64\\v4.0.30319\\ASP.NETWebAdminFiles\\Security\\Permissions\\managePermissions.aspx.[neftet@tutanota.com].boom" (normalized: "c:\\windows\\microsoft.net\\framework64\\v4.0.30319\\asp.netwebadminfiles\\security\\permissions\\managepermissions.aspx.[neftet@tutanota.com].boom")) returned 1 [0143.803] MoveFileW (lpExistingFileName="C:\\Windows\\Microsoft.NET\\Framework64\\v4.0.30319\\ASP.NETWebAdminFiles\\Security\\Roles\\manageAllRoles.aspx" (normalized: "c:\\windows\\microsoft.net\\framework64\\v4.0.30319\\asp.netwebadminfiles\\security\\roles\\manageallroles.aspx"), lpNewFileName="C:\\Windows\\Microsoft.NET\\Framework64\\v4.0.30319\\ASP.NETWebAdminFiles\\Security\\Roles\\manageAllRoles.aspx.[neftet@tutanota.com].boom" (normalized: "c:\\windows\\microsoft.net\\framework64\\v4.0.30319\\asp.netwebadminfiles\\security\\roles\\manageallroles.aspx.[neftet@tutanota.com].boom")) returned 1 [0143.809] MoveFileW (lpExistingFileName="C:\\Windows\\Microsoft.NET\\Framework64\\v4.0.30319\\ASP.NETWebAdminFiles\\Security\\Roles\\manageSingleRole.aspx" (normalized: "c:\\windows\\microsoft.net\\framework64\\v4.0.30319\\asp.netwebadminfiles\\security\\roles\\managesinglerole.aspx"), lpNewFileName="C:\\Windows\\Microsoft.NET\\Framework64\\v4.0.30319\\ASP.NETWebAdminFiles\\Security\\Roles\\manageSingleRole.aspx.[neftet@tutanota.com].boom" (normalized: "c:\\windows\\microsoft.net\\framework64\\v4.0.30319\\asp.netwebadminfiles\\security\\roles\\managesinglerole.aspx.[neftet@tutanota.com].boom")) returned 1 [0143.813] MoveFileW (lpExistingFileName="C:\\Windows\\Microsoft.NET\\Framework64\\v4.0.30319\\ASP.NETWebAdminFiles\\Security\\Users\\addUser.aspx" (normalized: "c:\\windows\\microsoft.net\\framework64\\v4.0.30319\\asp.netwebadminfiles\\security\\users\\adduser.aspx"), lpNewFileName="C:\\Windows\\Microsoft.NET\\Framework64\\v4.0.30319\\ASP.NETWebAdminFiles\\Security\\Users\\addUser.aspx.[neftet@tutanota.com].boom" (normalized: "c:\\windows\\microsoft.net\\framework64\\v4.0.30319\\asp.netwebadminfiles\\security\\users\\adduser.aspx.[neftet@tutanota.com].boom")) returned 1 [0143.816] MoveFileW (lpExistingFileName="C:\\Windows\\Microsoft.NET\\Framework64\\v4.0.30319\\ASP.NETWebAdminFiles\\Security\\Users\\editUser.aspx" (normalized: "c:\\windows\\microsoft.net\\framework64\\v4.0.30319\\asp.netwebadminfiles\\security\\users\\edituser.aspx"), lpNewFileName="C:\\Windows\\Microsoft.NET\\Framework64\\v4.0.30319\\ASP.NETWebAdminFiles\\Security\\Users\\editUser.aspx.[neftet@tutanota.com].boom" (normalized: "c:\\windows\\microsoft.net\\framework64\\v4.0.30319\\asp.netwebadminfiles\\security\\users\\edituser.aspx.[neftet@tutanota.com].boom")) returned 1 [0143.821] MoveFileW (lpExistingFileName="C:\\Windows\\Microsoft.NET\\Framework64\\v4.0.30319\\ASP.NETWebAdminFiles\\Security\\Users\\findUsers.aspx" (normalized: "c:\\windows\\microsoft.net\\framework64\\v4.0.30319\\asp.netwebadminfiles\\security\\users\\findusers.aspx"), lpNewFileName="C:\\Windows\\Microsoft.NET\\Framework64\\v4.0.30319\\ASP.NETWebAdminFiles\\Security\\Users\\findUsers.aspx.[neftet@tutanota.com].boom" (normalized: "c:\\windows\\microsoft.net\\framework64\\v4.0.30319\\asp.netwebadminfiles\\security\\users\\findusers.aspx.[neftet@tutanota.com].boom")) returned 1 [0143.824] MoveFileW (lpExistingFileName="C:\\Windows\\Microsoft.NET\\Framework64\\v4.0.30319\\ASP.NETWebAdminFiles\\Security\\Users\\manageUsers.aspx" (normalized: "c:\\windows\\microsoft.net\\framework64\\v4.0.30319\\asp.netwebadminfiles\\security\\users\\manageusers.aspx"), lpNewFileName="C:\\Windows\\Microsoft.NET\\Framework64\\v4.0.30319\\ASP.NETWebAdminFiles\\Security\\Users\\manageUsers.aspx.[neftet@tutanota.com].boom" (normalized: "c:\\windows\\microsoft.net\\framework64\\v4.0.30319\\asp.netwebadminfiles\\security\\users\\manageusers.aspx.[neftet@tutanota.com].boom")) returned 1 [0143.830] MoveFileW (lpExistingFileName="C:\\Windows\\Microsoft.NET\\Framework64\\v4.0.30319\\ASP.NETWebAdminFiles\\Security\\Wizard\\wizard.aspx" (normalized: "c:\\windows\\microsoft.net\\framework64\\v4.0.30319\\asp.netwebadminfiles\\security\\wizard\\wizard.aspx"), lpNewFileName="C:\\Windows\\Microsoft.NET\\Framework64\\v4.0.30319\\ASP.NETWebAdminFiles\\Security\\Wizard\\wizard.aspx.[neftet@tutanota.com].boom" (normalized: "c:\\windows\\microsoft.net\\framework64\\v4.0.30319\\asp.netwebadminfiles\\security\\wizard\\wizard.aspx.[neftet@tutanota.com].boom")) returned 1 [0143.838] MoveFileW (lpExistingFileName="C:\\Windows\\Microsoft.NET\\Framework64\\v4.0.30319\\Config\\DefaultWsdlHelpGenerator.aspx" (normalized: "c:\\windows\\microsoft.net\\framework64\\v4.0.30319\\config\\defaultwsdlhelpgenerator.aspx"), lpNewFileName="C:\\Windows\\Microsoft.NET\\Framework64\\v4.0.30319\\Config\\DefaultWsdlHelpGenerator.aspx.[neftet@tutanota.com].boom" (normalized: "c:\\windows\\microsoft.net\\framework64\\v4.0.30319\\config\\defaultwsdlhelpgenerator.aspx.[neftet@tutanota.com].boom")) returned 1 [0143.841] MoveFileW (lpExistingFileName="C:\\Windows\\Microsoft.NET\\Framework64\\v4.0.30319\\Config\\NetFx40_IIS_schema_update.xml" (normalized: "c:\\windows\\microsoft.net\\framework64\\v4.0.30319\\config\\netfx40_iis_schema_update.xml"), lpNewFileName="C:\\Windows\\Microsoft.NET\\Framework64\\v4.0.30319\\Config\\NetFx40_IIS_schema_update.xml.[neftet@tutanota.com].boom" (normalized: "c:\\windows\\microsoft.net\\framework64\\v4.0.30319\\config\\netfx40_iis_schema_update.xml.[neftet@tutanota.com].boom")) returned 1 [0143.844] MoveFileW (lpExistingFileName="C:\\Windows\\Microsoft.NET\\Framework64\\v4.0.30319\\Config\\NetFx45_IIS_schema_update.xml" (normalized: "c:\\windows\\microsoft.net\\framework64\\v4.0.30319\\config\\netfx45_iis_schema_update.xml"), lpNewFileName="C:\\Windows\\Microsoft.NET\\Framework64\\v4.0.30319\\Config\\NetFx45_IIS_schema_update.xml.[neftet@tutanota.com].boom" (normalized: "c:\\windows\\microsoft.net\\framework64\\v4.0.30319\\config\\netfx45_iis_schema_update.xml.[neftet@tutanota.com].boom")) returned 1 [0143.854] MoveFileW (lpExistingFileName="C:\\Windows\\Microsoft.NET\\Framework64\\v4.0.30319\\SetupCache\\v4.6.00081\\DHtmlHeader.html" (normalized: "c:\\windows\\microsoft.net\\framework64\\v4.0.30319\\setupcache\\v4.6.00081\\dhtmlheader.html"), lpNewFileName="C:\\Windows\\Microsoft.NET\\Framework64\\v4.0.30319\\SetupCache\\v4.6.00081\\DHtmlHeader.html.[neftet@tutanota.com].boom" (normalized: "c:\\windows\\microsoft.net\\framework64\\v4.0.30319\\setupcache\\v4.6.00081\\dhtmlheader.html.[neftet@tutanota.com].boom")) returned 1 [0143.858] MoveFileW (lpExistingFileName="C:\\Windows\\Microsoft.NET\\Framework64\\v4.0.30319\\SetupCache\\v4.6.00081\\header.bmp" (normalized: "c:\\windows\\microsoft.net\\framework64\\v4.0.30319\\setupcache\\v4.6.00081\\header.bmp"), lpNewFileName="C:\\Windows\\Microsoft.NET\\Framework64\\v4.0.30319\\SetupCache\\v4.6.00081\\header.bmp.[neftet@tutanota.com].boom" (normalized: "c:\\windows\\microsoft.net\\framework64\\v4.0.30319\\setupcache\\v4.6.00081\\header.bmp.[neftet@tutanota.com].boom")) returned 1 [0143.945] MoveFileW (lpExistingFileName="C:\\Windows\\Microsoft.NET\\Framework64\\v4.0.30319\\SetupCache\\v4.6.00081\\ParameterInfo.xml" (normalized: "c:\\windows\\microsoft.net\\framework64\\v4.0.30319\\setupcache\\v4.6.00081\\parameterinfo.xml"), lpNewFileName="C:\\Windows\\Microsoft.NET\\Framework64\\v4.0.30319\\SetupCache\\v4.6.00081\\ParameterInfo.xml.[neftet@tutanota.com].boom" (normalized: "c:\\windows\\microsoft.net\\framework64\\v4.0.30319\\setupcache\\v4.6.00081\\parameterinfo.xml.[neftet@tutanota.com].boom")) returned 1 [0143.953] MoveFileW (lpExistingFileName="C:\\Windows\\Microsoft.NET\\Framework64\\v4.0.30319\\SetupCache\\v4.6.00081\\SplashScreen.bmp" (normalized: "c:\\windows\\microsoft.net\\framework64\\v4.0.30319\\setupcache\\v4.6.00081\\splashscreen.bmp"), lpNewFileName="C:\\Windows\\Microsoft.NET\\Framework64\\v4.0.30319\\SetupCache\\v4.6.00081\\SplashScreen.bmp.[neftet@tutanota.com].boom" (normalized: "c:\\windows\\microsoft.net\\framework64\\v4.0.30319\\setupcache\\v4.6.00081\\splashscreen.bmp.[neftet@tutanota.com].boom")) returned 1 [0143.956] MoveFileW (lpExistingFileName="C:\\Windows\\Microsoft.NET\\Framework64\\v4.0.30319\\SetupCache\\v4.6.00081\\Strings.xml" (normalized: "c:\\windows\\microsoft.net\\framework64\\v4.0.30319\\setupcache\\v4.6.00081\\strings.xml"), lpNewFileName="C:\\Windows\\Microsoft.NET\\Framework64\\v4.0.30319\\SetupCache\\v4.6.00081\\Strings.xml.[neftet@tutanota.com].boom" (normalized: "c:\\windows\\microsoft.net\\framework64\\v4.0.30319\\setupcache\\v4.6.00081\\strings.xml.[neftet@tutanota.com].boom")) returned 1 [0143.962] MoveFileW (lpExistingFileName="C:\\Windows\\Microsoft.NET\\Framework64\\v4.0.30319\\SetupCache\\v4.6.00081\\UiInfo.xml" (normalized: "c:\\windows\\microsoft.net\\framework64\\v4.0.30319\\setupcache\\v4.6.00081\\uiinfo.xml"), lpNewFileName="C:\\Windows\\Microsoft.NET\\Framework64\\v4.0.30319\\SetupCache\\v4.6.00081\\UiInfo.xml.[neftet@tutanota.com].boom" (normalized: "c:\\windows\\microsoft.net\\framework64\\v4.0.30319\\setupcache\\v4.6.00081\\uiinfo.xml.[neftet@tutanota.com].boom")) returned 1 [0143.970] MoveFileW (lpExistingFileName="C:\\Windows\\Microsoft.NET\\Framework64\\v4.0.30319\\SetupCache\\v4.6.00081\\watermark.bmp" (normalized: "c:\\windows\\microsoft.net\\framework64\\v4.0.30319\\setupcache\\v4.6.00081\\watermark.bmp"), lpNewFileName="C:\\Windows\\Microsoft.NET\\Framework64\\v4.0.30319\\SetupCache\\v4.6.00081\\watermark.bmp.[neftet@tutanota.com].boom" (normalized: "c:\\windows\\microsoft.net\\framework64\\v4.0.30319\\setupcache\\v4.6.00081\\watermark.bmp.[neftet@tutanota.com].boom")) returned 1 [0143.978] MoveFileW (lpExistingFileName="C:\\Windows\\Microsoft.NET\\Framework64\\v4.0.30319\\SetupCache\\v4.6.00081\\1025\\eula.rtf" (normalized: "c:\\windows\\microsoft.net\\framework64\\v4.0.30319\\setupcache\\v4.6.00081\\1025\\eula.rtf"), lpNewFileName="C:\\Windows\\Microsoft.NET\\Framework64\\v4.0.30319\\SetupCache\\v4.6.00081\\1025\\eula.rtf.[neftet@tutanota.com].boom" (normalized: "c:\\windows\\microsoft.net\\framework64\\v4.0.30319\\setupcache\\v4.6.00081\\1025\\eula.rtf.[neftet@tutanota.com].boom")) returned 1 [0143.985] MoveFileW (lpExistingFileName="C:\\Windows\\Microsoft.NET\\Framework64\\v4.0.30319\\SetupCache\\v4.6.00081\\1025\\LocalizedData.xml" (normalized: "c:\\windows\\microsoft.net\\framework64\\v4.0.30319\\setupcache\\v4.6.00081\\1025\\localizeddata.xml"), lpNewFileName="C:\\Windows\\Microsoft.NET\\Framework64\\v4.0.30319\\SetupCache\\v4.6.00081\\1025\\LocalizedData.xml.[neftet@tutanota.com].boom" (normalized: "c:\\windows\\microsoft.net\\framework64\\v4.0.30319\\setupcache\\v4.6.00081\\1025\\localizeddata.xml.[neftet@tutanota.com].boom")) returned 1 [0143.997] MoveFileW (lpExistingFileName="C:\\Windows\\Microsoft.NET\\Framework64\\v4.0.30319\\SetupCache\\v4.6.00081\\1028\\eula.rtf" (normalized: "c:\\windows\\microsoft.net\\framework64\\v4.0.30319\\setupcache\\v4.6.00081\\1028\\eula.rtf"), lpNewFileName="C:\\Windows\\Microsoft.NET\\Framework64\\v4.0.30319\\SetupCache\\v4.6.00081\\1028\\eula.rtf.[neftet@tutanota.com].boom" (normalized: "c:\\windows\\microsoft.net\\framework64\\v4.0.30319\\setupcache\\v4.6.00081\\1028\\eula.rtf.[neftet@tutanota.com].boom")) returned 1 [0144.004] MoveFileW (lpExistingFileName="C:\\Windows\\Microsoft.NET\\Framework64\\v4.0.30319\\SetupCache\\v4.6.00081\\1028\\LocalizedData.xml" (normalized: "c:\\windows\\microsoft.net\\framework64\\v4.0.30319\\setupcache\\v4.6.00081\\1028\\localizeddata.xml"), lpNewFileName="C:\\Windows\\Microsoft.NET\\Framework64\\v4.0.30319\\SetupCache\\v4.6.00081\\1028\\LocalizedData.xml.[neftet@tutanota.com].boom" (normalized: "c:\\windows\\microsoft.net\\framework64\\v4.0.30319\\setupcache\\v4.6.00081\\1028\\localizeddata.xml.[neftet@tutanota.com].boom")) returned 1 [0144.014] MoveFileW (lpExistingFileName="C:\\Windows\\Microsoft.NET\\Framework64\\v4.0.30319\\SetupCache\\v4.6.00081\\1029\\eula.rtf" (normalized: "c:\\windows\\microsoft.net\\framework64\\v4.0.30319\\setupcache\\v4.6.00081\\1029\\eula.rtf"), lpNewFileName="C:\\Windows\\Microsoft.NET\\Framework64\\v4.0.30319\\SetupCache\\v4.6.00081\\1029\\eula.rtf.[neftet@tutanota.com].boom" (normalized: "c:\\windows\\microsoft.net\\framework64\\v4.0.30319\\setupcache\\v4.6.00081\\1029\\eula.rtf.[neftet@tutanota.com].boom")) returned 1 [0144.022] MoveFileW (lpExistingFileName="C:\\Windows\\Microsoft.NET\\Framework64\\v4.0.30319\\SetupCache\\v4.6.00081\\1029\\LocalizedData.xml" (normalized: "c:\\windows\\microsoft.net\\framework64\\v4.0.30319\\setupcache\\v4.6.00081\\1029\\localizeddata.xml"), lpNewFileName="C:\\Windows\\Microsoft.NET\\Framework64\\v4.0.30319\\SetupCache\\v4.6.00081\\1029\\LocalizedData.xml.[neftet@tutanota.com].boom" (normalized: "c:\\windows\\microsoft.net\\framework64\\v4.0.30319\\setupcache\\v4.6.00081\\1029\\localizeddata.xml.[neftet@tutanota.com].boom")) returned 1 [0144.031] MoveFileW (lpExistingFileName="C:\\Windows\\Microsoft.NET\\Framework64\\v4.0.30319\\SetupCache\\v4.6.00081\\1030\\eula.rtf" (normalized: "c:\\windows\\microsoft.net\\framework64\\v4.0.30319\\setupcache\\v4.6.00081\\1030\\eula.rtf"), lpNewFileName="C:\\Windows\\Microsoft.NET\\Framework64\\v4.0.30319\\SetupCache\\v4.6.00081\\1030\\eula.rtf.[neftet@tutanota.com].boom" (normalized: "c:\\windows\\microsoft.net\\framework64\\v4.0.30319\\setupcache\\v4.6.00081\\1030\\eula.rtf.[neftet@tutanota.com].boom")) returned 1 [0144.039] MoveFileW (lpExistingFileName="C:\\Windows\\Microsoft.NET\\Framework64\\v4.0.30319\\SetupCache\\v4.6.00081\\1030\\LocalizedData.xml" (normalized: "c:\\windows\\microsoft.net\\framework64\\v4.0.30319\\setupcache\\v4.6.00081\\1030\\localizeddata.xml"), lpNewFileName="C:\\Windows\\Microsoft.NET\\Framework64\\v4.0.30319\\SetupCache\\v4.6.00081\\1030\\LocalizedData.xml.[neftet@tutanota.com].boom" (normalized: "c:\\windows\\microsoft.net\\framework64\\v4.0.30319\\setupcache\\v4.6.00081\\1030\\localizeddata.xml.[neftet@tutanota.com].boom")) returned 1 [0144.048] MoveFileW (lpExistingFileName="C:\\Windows\\Microsoft.NET\\Framework64\\v4.0.30319\\SetupCache\\v4.6.00081\\1031\\eula.rtf" (normalized: "c:\\windows\\microsoft.net\\framework64\\v4.0.30319\\setupcache\\v4.6.00081\\1031\\eula.rtf"), lpNewFileName="C:\\Windows\\Microsoft.NET\\Framework64\\v4.0.30319\\SetupCache\\v4.6.00081\\1031\\eula.rtf.[neftet@tutanota.com].boom" (normalized: "c:\\windows\\microsoft.net\\framework64\\v4.0.30319\\setupcache\\v4.6.00081\\1031\\eula.rtf.[neftet@tutanota.com].boom")) returned 1 [0144.056] MoveFileW (lpExistingFileName="C:\\Windows\\Microsoft.NET\\Framework64\\v4.0.30319\\SetupCache\\v4.6.00081\\1031\\LocalizedData.xml" (normalized: "c:\\windows\\microsoft.net\\framework64\\v4.0.30319\\setupcache\\v4.6.00081\\1031\\localizeddata.xml"), lpNewFileName="C:\\Windows\\Microsoft.NET\\Framework64\\v4.0.30319\\SetupCache\\v4.6.00081\\1031\\LocalizedData.xml.[neftet@tutanota.com].boom" (normalized: "c:\\windows\\microsoft.net\\framework64\\v4.0.30319\\setupcache\\v4.6.00081\\1031\\localizeddata.xml.[neftet@tutanota.com].boom")) returned 1 [0144.068] MoveFileW (lpExistingFileName="C:\\Windows\\Microsoft.NET\\Framework64\\v4.0.30319\\SetupCache\\v4.6.00081\\1032\\eula.rtf" (normalized: "c:\\windows\\microsoft.net\\framework64\\v4.0.30319\\setupcache\\v4.6.00081\\1032\\eula.rtf"), lpNewFileName="C:\\Windows\\Microsoft.NET\\Framework64\\v4.0.30319\\SetupCache\\v4.6.00081\\1032\\eula.rtf.[neftet@tutanota.com].boom" (normalized: "c:\\windows\\microsoft.net\\framework64\\v4.0.30319\\setupcache\\v4.6.00081\\1032\\eula.rtf.[neftet@tutanota.com].boom")) returned 1 [0144.078] MoveFileW (lpExistingFileName="C:\\Windows\\Microsoft.NET\\Framework64\\v4.0.30319\\SetupCache\\v4.6.00081\\1032\\LocalizedData.xml" (normalized: "c:\\windows\\microsoft.net\\framework64\\v4.0.30319\\setupcache\\v4.6.00081\\1032\\localizeddata.xml"), lpNewFileName="C:\\Windows\\Microsoft.NET\\Framework64\\v4.0.30319\\SetupCache\\v4.6.00081\\1032\\LocalizedData.xml.[neftet@tutanota.com].boom" (normalized: "c:\\windows\\microsoft.net\\framework64\\v4.0.30319\\setupcache\\v4.6.00081\\1032\\localizeddata.xml.[neftet@tutanota.com].boom")) returned 1 [0144.095] MoveFileW (lpExistingFileName="C:\\Windows\\Microsoft.NET\\Framework64\\v4.0.30319\\SetupCache\\v4.6.00081\\1033\\eula.rtf" (normalized: "c:\\windows\\microsoft.net\\framework64\\v4.0.30319\\setupcache\\v4.6.00081\\1033\\eula.rtf"), lpNewFileName="C:\\Windows\\Microsoft.NET\\Framework64\\v4.0.30319\\SetupCache\\v4.6.00081\\1033\\eula.rtf.[neftet@tutanota.com].boom" (normalized: "c:\\windows\\microsoft.net\\framework64\\v4.0.30319\\setupcache\\v4.6.00081\\1033\\eula.rtf.[neftet@tutanota.com].boom")) returned 1 [0144.102] MoveFileW (lpExistingFileName="C:\\Windows\\Microsoft.NET\\Framework64\\v4.0.30319\\SetupCache\\v4.6.00081\\1033\\LocalizedData.xml" (normalized: "c:\\windows\\microsoft.net\\framework64\\v4.0.30319\\setupcache\\v4.6.00081\\1033\\localizeddata.xml"), lpNewFileName="C:\\Windows\\Microsoft.NET\\Framework64\\v4.0.30319\\SetupCache\\v4.6.00081\\1033\\LocalizedData.xml.[neftet@tutanota.com].boom" (normalized: "c:\\windows\\microsoft.net\\framework64\\v4.0.30319\\setupcache\\v4.6.00081\\1033\\localizeddata.xml.[neftet@tutanota.com].boom")) returned 1 [0144.103] FindClose (in: hFindFile=0x381b80 | out: hFindFile=0x381b80) returned 1 [0144.111] MoveFileW (lpExistingFileName="C:\\Windows\\Microsoft.NET\\Framework64\\v4.0.30319\\SetupCache\\v4.6.00081\\1035\\eula.rtf" (normalized: "c:\\windows\\microsoft.net\\framework64\\v4.0.30319\\setupcache\\v4.6.00081\\1035\\eula.rtf"), lpNewFileName="C:\\Windows\\Microsoft.NET\\Framework64\\v4.0.30319\\SetupCache\\v4.6.00081\\1035\\eula.rtf.[neftet@tutanota.com].boom" (normalized: "c:\\windows\\microsoft.net\\framework64\\v4.0.30319\\setupcache\\v4.6.00081\\1035\\eula.rtf.[neftet@tutanota.com].boom")) returned 1 [0144.118] MoveFileW (lpExistingFileName="C:\\Windows\\Microsoft.NET\\Framework64\\v4.0.30319\\SetupCache\\v4.6.00081\\1035\\LocalizedData.xml" (normalized: "c:\\windows\\microsoft.net\\framework64\\v4.0.30319\\setupcache\\v4.6.00081\\1035\\localizeddata.xml"), lpNewFileName="C:\\Windows\\Microsoft.NET\\Framework64\\v4.0.30319\\SetupCache\\v4.6.00081\\1035\\LocalizedData.xml.[neftet@tutanota.com].boom" (normalized: "c:\\windows\\microsoft.net\\framework64\\v4.0.30319\\setupcache\\v4.6.00081\\1035\\localizeddata.xml.[neftet@tutanota.com].boom")) returned 1 [0144.119] FindClose (in: hFindFile=0x381b80 | out: hFindFile=0x381b80) returned 1 [0144.128] MoveFileW (lpExistingFileName="C:\\Windows\\Microsoft.NET\\Framework64\\v4.0.30319\\SetupCache\\v4.6.00081\\1036\\eula.rtf" (normalized: "c:\\windows\\microsoft.net\\framework64\\v4.0.30319\\setupcache\\v4.6.00081\\1036\\eula.rtf"), lpNewFileName="C:\\Windows\\Microsoft.NET\\Framework64\\v4.0.30319\\SetupCache\\v4.6.00081\\1036\\eula.rtf.[neftet@tutanota.com].boom" (normalized: "c:\\windows\\microsoft.net\\framework64\\v4.0.30319\\setupcache\\v4.6.00081\\1036\\eula.rtf.[neftet@tutanota.com].boom")) returned 1 [0144.136] MoveFileW (lpExistingFileName="C:\\Windows\\Microsoft.NET\\Framework64\\v4.0.30319\\SetupCache\\v4.6.00081\\1036\\LocalizedData.xml" (normalized: "c:\\windows\\microsoft.net\\framework64\\v4.0.30319\\setupcache\\v4.6.00081\\1036\\localizeddata.xml"), lpNewFileName="C:\\Windows\\Microsoft.NET\\Framework64\\v4.0.30319\\SetupCache\\v4.6.00081\\1036\\LocalizedData.xml.[neftet@tutanota.com].boom" (normalized: "c:\\windows\\microsoft.net\\framework64\\v4.0.30319\\setupcache\\v4.6.00081\\1036\\localizeddata.xml.[neftet@tutanota.com].boom")) returned 1 [0144.137] FindClose (in: hFindFile=0x381b80 | out: hFindFile=0x381b80) returned 1 [0144.145] MoveFileW (lpExistingFileName="C:\\Windows\\Microsoft.NET\\Framework64\\v4.0.30319\\SetupCache\\v4.6.00081\\1037\\eula.rtf" (normalized: "c:\\windows\\microsoft.net\\framework64\\v4.0.30319\\setupcache\\v4.6.00081\\1037\\eula.rtf"), lpNewFileName="C:\\Windows\\Microsoft.NET\\Framework64\\v4.0.30319\\SetupCache\\v4.6.00081\\1037\\eula.rtf.[neftet@tutanota.com].boom" (normalized: "c:\\windows\\microsoft.net\\framework64\\v4.0.30319\\setupcache\\v4.6.00081\\1037\\eula.rtf.[neftet@tutanota.com].boom")) returned 1 [0144.152] MoveFileW (lpExistingFileName="C:\\Windows\\Microsoft.NET\\Framework64\\v4.0.30319\\SetupCache\\v4.6.00081\\1037\\LocalizedData.xml" (normalized: "c:\\windows\\microsoft.net\\framework64\\v4.0.30319\\setupcache\\v4.6.00081\\1037\\localizeddata.xml"), lpNewFileName="C:\\Windows\\Microsoft.NET\\Framework64\\v4.0.30319\\SetupCache\\v4.6.00081\\1037\\LocalizedData.xml.[neftet@tutanota.com].boom" (normalized: "c:\\windows\\microsoft.net\\framework64\\v4.0.30319\\setupcache\\v4.6.00081\\1037\\localizeddata.xml.[neftet@tutanota.com].boom")) returned 1 [0144.154] FindClose (in: hFindFile=0x381b80 | out: hFindFile=0x381b80) returned 1 [0144.163] MoveFileW (lpExistingFileName="C:\\Windows\\Microsoft.NET\\Framework64\\v4.0.30319\\SetupCache\\v4.6.00081\\1038\\eula.rtf" (normalized: "c:\\windows\\microsoft.net\\framework64\\v4.0.30319\\setupcache\\v4.6.00081\\1038\\eula.rtf"), lpNewFileName="C:\\Windows\\Microsoft.NET\\Framework64\\v4.0.30319\\SetupCache\\v4.6.00081\\1038\\eula.rtf.[neftet@tutanota.com].boom" (normalized: "c:\\windows\\microsoft.net\\framework64\\v4.0.30319\\setupcache\\v4.6.00081\\1038\\eula.rtf.[neftet@tutanota.com].boom")) returned 1 [0144.179] MoveFileW (lpExistingFileName="C:\\Windows\\Microsoft.NET\\Framework64\\v4.0.30319\\SetupCache\\v4.6.00081\\1038\\LocalizedData.xml" (normalized: "c:\\windows\\microsoft.net\\framework64\\v4.0.30319\\setupcache\\v4.6.00081\\1038\\localizeddata.xml"), lpNewFileName="C:\\Windows\\Microsoft.NET\\Framework64\\v4.0.30319\\SetupCache\\v4.6.00081\\1038\\LocalizedData.xml.[neftet@tutanota.com].boom" (normalized: "c:\\windows\\microsoft.net\\framework64\\v4.0.30319\\setupcache\\v4.6.00081\\1038\\localizeddata.xml.[neftet@tutanota.com].boom")) returned 1 [0144.180] FindClose (in: hFindFile=0x381b80 | out: hFindFile=0x381b80) returned 1 [0144.188] MoveFileW (lpExistingFileName="C:\\Windows\\Microsoft.NET\\Framework64\\v4.0.30319\\SetupCache\\v4.6.00081\\1040\\eula.rtf" (normalized: "c:\\windows\\microsoft.net\\framework64\\v4.0.30319\\setupcache\\v4.6.00081\\1040\\eula.rtf"), lpNewFileName="C:\\Windows\\Microsoft.NET\\Framework64\\v4.0.30319\\SetupCache\\v4.6.00081\\1040\\eula.rtf.[neftet@tutanota.com].boom" (normalized: "c:\\windows\\microsoft.net\\framework64\\v4.0.30319\\setupcache\\v4.6.00081\\1040\\eula.rtf.[neftet@tutanota.com].boom")) returned 1 [0144.196] MoveFileW (lpExistingFileName="C:\\Windows\\Microsoft.NET\\Framework64\\v4.0.30319\\SetupCache\\v4.6.00081\\1040\\LocalizedData.xml" (normalized: "c:\\windows\\microsoft.net\\framework64\\v4.0.30319\\setupcache\\v4.6.00081\\1040\\localizeddata.xml"), lpNewFileName="C:\\Windows\\Microsoft.NET\\Framework64\\v4.0.30319\\SetupCache\\v4.6.00081\\1040\\LocalizedData.xml.[neftet@tutanota.com].boom" (normalized: "c:\\windows\\microsoft.net\\framework64\\v4.0.30319\\setupcache\\v4.6.00081\\1040\\localizeddata.xml.[neftet@tutanota.com].boom")) returned 1 [0144.197] FindClose (in: hFindFile=0x381b80 | out: hFindFile=0x381b80) returned 1 [0144.206] MoveFileW (lpExistingFileName="C:\\Windows\\Microsoft.NET\\Framework64\\v4.0.30319\\SetupCache\\v4.6.00081\\1041\\eula.rtf" (normalized: "c:\\windows\\microsoft.net\\framework64\\v4.0.30319\\setupcache\\v4.6.00081\\1041\\eula.rtf"), lpNewFileName="C:\\Windows\\Microsoft.NET\\Framework64\\v4.0.30319\\SetupCache\\v4.6.00081\\1041\\eula.rtf.[neftet@tutanota.com].boom" (normalized: "c:\\windows\\microsoft.net\\framework64\\v4.0.30319\\setupcache\\v4.6.00081\\1041\\eula.rtf.[neftet@tutanota.com].boom")) returned 1 [0144.212] MoveFileW (lpExistingFileName="C:\\Windows\\Microsoft.NET\\Framework64\\v4.0.30319\\SetupCache\\v4.6.00081\\1041\\LocalizedData.xml" (normalized: "c:\\windows\\microsoft.net\\framework64\\v4.0.30319\\setupcache\\v4.6.00081\\1041\\localizeddata.xml"), lpNewFileName="C:\\Windows\\Microsoft.NET\\Framework64\\v4.0.30319\\SetupCache\\v4.6.00081\\1041\\LocalizedData.xml.[neftet@tutanota.com].boom" (normalized: "c:\\windows\\microsoft.net\\framework64\\v4.0.30319\\setupcache\\v4.6.00081\\1041\\localizeddata.xml.[neftet@tutanota.com].boom")) returned 1 [0144.213] FindClose (in: hFindFile=0x381b80 | out: hFindFile=0x381b80) returned 1 [0144.227] MoveFileW (lpExistingFileName="C:\\Windows\\Microsoft.NET\\Framework64\\v4.0.30319\\SetupCache\\v4.6.00081\\1042\\eula.rtf" (normalized: "c:\\windows\\microsoft.net\\framework64\\v4.0.30319\\setupcache\\v4.6.00081\\1042\\eula.rtf"), lpNewFileName="C:\\Windows\\Microsoft.NET\\Framework64\\v4.0.30319\\SetupCache\\v4.6.00081\\1042\\eula.rtf.[neftet@tutanota.com].boom" (normalized: "c:\\windows\\microsoft.net\\framework64\\v4.0.30319\\setupcache\\v4.6.00081\\1042\\eula.rtf.[neftet@tutanota.com].boom")) returned 1 [0144.233] MoveFileW (lpExistingFileName="C:\\Windows\\Microsoft.NET\\Framework64\\v4.0.30319\\SetupCache\\v4.6.00081\\1042\\LocalizedData.xml" (normalized: "c:\\windows\\microsoft.net\\framework64\\v4.0.30319\\setupcache\\v4.6.00081\\1042\\localizeddata.xml"), lpNewFileName="C:\\Windows\\Microsoft.NET\\Framework64\\v4.0.30319\\SetupCache\\v4.6.00081\\1042\\LocalizedData.xml.[neftet@tutanota.com].boom" (normalized: "c:\\windows\\microsoft.net\\framework64\\v4.0.30319\\setupcache\\v4.6.00081\\1042\\localizeddata.xml.[neftet@tutanota.com].boom")) returned 1 [0144.235] FindClose (in: hFindFile=0x381b80 | out: hFindFile=0x381b80) returned 1 [0144.243] MoveFileW (lpExistingFileName="C:\\Windows\\Microsoft.NET\\Framework64\\v4.0.30319\\SetupCache\\v4.6.00081\\1043\\eula.rtf" (normalized: "c:\\windows\\microsoft.net\\framework64\\v4.0.30319\\setupcache\\v4.6.00081\\1043\\eula.rtf"), lpNewFileName="C:\\Windows\\Microsoft.NET\\Framework64\\v4.0.30319\\SetupCache\\v4.6.00081\\1043\\eula.rtf.[neftet@tutanota.com].boom" (normalized: "c:\\windows\\microsoft.net\\framework64\\v4.0.30319\\setupcache\\v4.6.00081\\1043\\eula.rtf.[neftet@tutanota.com].boom")) returned 1 [0144.251] MoveFileW (lpExistingFileName="C:\\Windows\\Microsoft.NET\\Framework64\\v4.0.30319\\SetupCache\\v4.6.00081\\1043\\LocalizedData.xml" (normalized: "c:\\windows\\microsoft.net\\framework64\\v4.0.30319\\setupcache\\v4.6.00081\\1043\\localizeddata.xml"), lpNewFileName="C:\\Windows\\Microsoft.NET\\Framework64\\v4.0.30319\\SetupCache\\v4.6.00081\\1043\\LocalizedData.xml.[neftet@tutanota.com].boom" (normalized: "c:\\windows\\microsoft.net\\framework64\\v4.0.30319\\setupcache\\v4.6.00081\\1043\\localizeddata.xml.[neftet@tutanota.com].boom")) returned 1 [0144.252] FindClose (in: hFindFile=0x381b80 | out: hFindFile=0x381b80) returned 1 [0144.261] MoveFileW (lpExistingFileName="C:\\Windows\\Microsoft.NET\\Framework64\\v4.0.30319\\SetupCache\\v4.6.00081\\1044\\eula.rtf" (normalized: "c:\\windows\\microsoft.net\\framework64\\v4.0.30319\\setupcache\\v4.6.00081\\1044\\eula.rtf"), lpNewFileName="C:\\Windows\\Microsoft.NET\\Framework64\\v4.0.30319\\SetupCache\\v4.6.00081\\1044\\eula.rtf.[neftet@tutanota.com].boom" (normalized: "c:\\windows\\microsoft.net\\framework64\\v4.0.30319\\setupcache\\v4.6.00081\\1044\\eula.rtf.[neftet@tutanota.com].boom")) returned 1 [0144.269] MoveFileW (lpExistingFileName="C:\\Windows\\Microsoft.NET\\Framework64\\v4.0.30319\\SetupCache\\v4.6.00081\\1044\\LocalizedData.xml" (normalized: "c:\\windows\\microsoft.net\\framework64\\v4.0.30319\\setupcache\\v4.6.00081\\1044\\localizeddata.xml"), lpNewFileName="C:\\Windows\\Microsoft.NET\\Framework64\\v4.0.30319\\SetupCache\\v4.6.00081\\1044\\LocalizedData.xml.[neftet@tutanota.com].boom" (normalized: "c:\\windows\\microsoft.net\\framework64\\v4.0.30319\\setupcache\\v4.6.00081\\1044\\localizeddata.xml.[neftet@tutanota.com].boom")) returned 1 [0144.293] FindClose (in: hFindFile=0x381b80 | out: hFindFile=0x381b80) returned 1 [0144.304] MoveFileW (lpExistingFileName="C:\\Windows\\Microsoft.NET\\Framework64\\v4.0.30319\\SetupCache\\v4.6.00081\\1045\\eula.rtf" (normalized: "c:\\windows\\microsoft.net\\framework64\\v4.0.30319\\setupcache\\v4.6.00081\\1045\\eula.rtf"), lpNewFileName="C:\\Windows\\Microsoft.NET\\Framework64\\v4.0.30319\\SetupCache\\v4.6.00081\\1045\\eula.rtf.[neftet@tutanota.com].boom" (normalized: "c:\\windows\\microsoft.net\\framework64\\v4.0.30319\\setupcache\\v4.6.00081\\1045\\eula.rtf.[neftet@tutanota.com].boom")) returned 1 [0144.312] MoveFileW (lpExistingFileName="C:\\Windows\\Microsoft.NET\\Framework64\\v4.0.30319\\SetupCache\\v4.6.00081\\1045\\LocalizedData.xml" (normalized: "c:\\windows\\microsoft.net\\framework64\\v4.0.30319\\setupcache\\v4.6.00081\\1045\\localizeddata.xml"), lpNewFileName="C:\\Windows\\Microsoft.NET\\Framework64\\v4.0.30319\\SetupCache\\v4.6.00081\\1045\\LocalizedData.xml.[neftet@tutanota.com].boom" (normalized: "c:\\windows\\microsoft.net\\framework64\\v4.0.30319\\setupcache\\v4.6.00081\\1045\\localizeddata.xml.[neftet@tutanota.com].boom")) returned 1 [0144.322] MoveFileW (lpExistingFileName="C:\\Windows\\Microsoft.NET\\Framework64\\v4.0.30319\\SetupCache\\v4.6.00081\\1046\\eula.rtf" (normalized: "c:\\windows\\microsoft.net\\framework64\\v4.0.30319\\setupcache\\v4.6.00081\\1046\\eula.rtf"), lpNewFileName="C:\\Windows\\Microsoft.NET\\Framework64\\v4.0.30319\\SetupCache\\v4.6.00081\\1046\\eula.rtf.[neftet@tutanota.com].boom" (normalized: "c:\\windows\\microsoft.net\\framework64\\v4.0.30319\\setupcache\\v4.6.00081\\1046\\eula.rtf.[neftet@tutanota.com].boom")) returned 1 [0144.329] MoveFileW (lpExistingFileName="C:\\Windows\\Microsoft.NET\\Framework64\\v4.0.30319\\SetupCache\\v4.6.00081\\1046\\LocalizedData.xml" (normalized: "c:\\windows\\microsoft.net\\framework64\\v4.0.30319\\setupcache\\v4.6.00081\\1046\\localizeddata.xml"), lpNewFileName="C:\\Windows\\Microsoft.NET\\Framework64\\v4.0.30319\\SetupCache\\v4.6.00081\\1046\\LocalizedData.xml.[neftet@tutanota.com].boom" (normalized: "c:\\windows\\microsoft.net\\framework64\\v4.0.30319\\setupcache\\v4.6.00081\\1046\\localizeddata.xml.[neftet@tutanota.com].boom")) returned 1 [0144.340] MoveFileW (lpExistingFileName="C:\\Windows\\Microsoft.NET\\Framework64\\v4.0.30319\\SetupCache\\v4.6.00081\\1049\\eula.rtf" (normalized: "c:\\windows\\microsoft.net\\framework64\\v4.0.30319\\setupcache\\v4.6.00081\\1049\\eula.rtf"), lpNewFileName="C:\\Windows\\Microsoft.NET\\Framework64\\v4.0.30319\\SetupCache\\v4.6.00081\\1049\\eula.rtf.[neftet@tutanota.com].boom" (normalized: "c:\\windows\\microsoft.net\\framework64\\v4.0.30319\\setupcache\\v4.6.00081\\1049\\eula.rtf.[neftet@tutanota.com].boom")) returned 1 [0144.347] MoveFileW (lpExistingFileName="C:\\Windows\\Microsoft.NET\\Framework64\\v4.0.30319\\SetupCache\\v4.6.00081\\1049\\LocalizedData.xml" (normalized: "c:\\windows\\microsoft.net\\framework64\\v4.0.30319\\setupcache\\v4.6.00081\\1049\\localizeddata.xml"), lpNewFileName="C:\\Windows\\Microsoft.NET\\Framework64\\v4.0.30319\\SetupCache\\v4.6.00081\\1049\\LocalizedData.xml.[neftet@tutanota.com].boom" (normalized: "c:\\windows\\microsoft.net\\framework64\\v4.0.30319\\setupcache\\v4.6.00081\\1049\\localizeddata.xml.[neftet@tutanota.com].boom")) returned 1 [0144.356] MoveFileW (lpExistingFileName="C:\\Windows\\Microsoft.NET\\Framework64\\v4.0.30319\\SetupCache\\v4.6.00081\\1053\\eula.rtf" (normalized: "c:\\windows\\microsoft.net\\framework64\\v4.0.30319\\setupcache\\v4.6.00081\\1053\\eula.rtf"), lpNewFileName="C:\\Windows\\Microsoft.NET\\Framework64\\v4.0.30319\\SetupCache\\v4.6.00081\\1053\\eula.rtf.[neftet@tutanota.com].boom" (normalized: "c:\\windows\\microsoft.net\\framework64\\v4.0.30319\\setupcache\\v4.6.00081\\1053\\eula.rtf.[neftet@tutanota.com].boom")) returned 1 [0144.367] MoveFileW (lpExistingFileName="C:\\Windows\\Microsoft.NET\\Framework64\\v4.0.30319\\SetupCache\\v4.6.00081\\1053\\LocalizedData.xml" (normalized: "c:\\windows\\microsoft.net\\framework64\\v4.0.30319\\setupcache\\v4.6.00081\\1053\\localizeddata.xml"), lpNewFileName="C:\\Windows\\Microsoft.NET\\Framework64\\v4.0.30319\\SetupCache\\v4.6.00081\\1053\\LocalizedData.xml.[neftet@tutanota.com].boom" (normalized: "c:\\windows\\microsoft.net\\framework64\\v4.0.30319\\setupcache\\v4.6.00081\\1053\\localizeddata.xml.[neftet@tutanota.com].boom")) returned 1 [0144.377] MoveFileW (lpExistingFileName="C:\\Windows\\Microsoft.NET\\Framework64\\v4.0.30319\\SetupCache\\v4.6.00081\\1055\\eula.rtf" (normalized: "c:\\windows\\microsoft.net\\framework64\\v4.0.30319\\setupcache\\v4.6.00081\\1055\\eula.rtf"), lpNewFileName="C:\\Windows\\Microsoft.NET\\Framework64\\v4.0.30319\\SetupCache\\v4.6.00081\\1055\\eula.rtf.[neftet@tutanota.com].boom" (normalized: "c:\\windows\\microsoft.net\\framework64\\v4.0.30319\\setupcache\\v4.6.00081\\1055\\eula.rtf.[neftet@tutanota.com].boom")) returned 1 [0144.426] MoveFileW (lpExistingFileName="C:\\Windows\\Microsoft.NET\\Framework64\\v4.0.30319\\SetupCache\\v4.6.00081\\1055\\LocalizedData.xml" (normalized: "c:\\windows\\microsoft.net\\framework64\\v4.0.30319\\setupcache\\v4.6.00081\\1055\\localizeddata.xml"), lpNewFileName="C:\\Windows\\Microsoft.NET\\Framework64\\v4.0.30319\\SetupCache\\v4.6.00081\\1055\\LocalizedData.xml.[neftet@tutanota.com].boom" (normalized: "c:\\windows\\microsoft.net\\framework64\\v4.0.30319\\setupcache\\v4.6.00081\\1055\\localizeddata.xml.[neftet@tutanota.com].boom")) returned 1 [0144.435] MoveFileW (lpExistingFileName="C:\\Windows\\Microsoft.NET\\Framework64\\v4.0.30319\\SetupCache\\v4.6.00081\\2052\\eula.rtf" (normalized: "c:\\windows\\microsoft.net\\framework64\\v4.0.30319\\setupcache\\v4.6.00081\\2052\\eula.rtf"), lpNewFileName="C:\\Windows\\Microsoft.NET\\Framework64\\v4.0.30319\\SetupCache\\v4.6.00081\\2052\\eula.rtf.[neftet@tutanota.com].boom" (normalized: "c:\\windows\\microsoft.net\\framework64\\v4.0.30319\\setupcache\\v4.6.00081\\2052\\eula.rtf.[neftet@tutanota.com].boom")) returned 1 [0144.442] MoveFileW (lpExistingFileName="C:\\Windows\\Microsoft.NET\\Framework64\\v4.0.30319\\SetupCache\\v4.6.00081\\2052\\LocalizedData.xml" (normalized: "c:\\windows\\microsoft.net\\framework64\\v4.0.30319\\setupcache\\v4.6.00081\\2052\\localizeddata.xml"), lpNewFileName="C:\\Windows\\Microsoft.NET\\Framework64\\v4.0.30319\\SetupCache\\v4.6.00081\\2052\\LocalizedData.xml.[neftet@tutanota.com].boom" (normalized: "c:\\windows\\microsoft.net\\framework64\\v4.0.30319\\setupcache\\v4.6.00081\\2052\\localizeddata.xml.[neftet@tutanota.com].boom")) returned 1 [0144.451] MoveFileW (lpExistingFileName="C:\\Windows\\Microsoft.NET\\Framework64\\v4.0.30319\\SetupCache\\v4.6.00081\\2070\\eula.rtf" (normalized: "c:\\windows\\microsoft.net\\framework64\\v4.0.30319\\setupcache\\v4.6.00081\\2070\\eula.rtf"), lpNewFileName="C:\\Windows\\Microsoft.NET\\Framework64\\v4.0.30319\\SetupCache\\v4.6.00081\\2070\\eula.rtf.[neftet@tutanota.com].boom" (normalized: "c:\\windows\\microsoft.net\\framework64\\v4.0.30319\\setupcache\\v4.6.00081\\2070\\eula.rtf.[neftet@tutanota.com].boom")) returned 1 [0144.458] MoveFileW (lpExistingFileName="C:\\Windows\\Microsoft.NET\\Framework64\\v4.0.30319\\SetupCache\\v4.6.00081\\2070\\LocalizedData.xml" (normalized: "c:\\windows\\microsoft.net\\framework64\\v4.0.30319\\setupcache\\v4.6.00081\\2070\\localizeddata.xml"), lpNewFileName="C:\\Windows\\Microsoft.NET\\Framework64\\v4.0.30319\\SetupCache\\v4.6.00081\\2070\\LocalizedData.xml.[neftet@tutanota.com].boom" (normalized: "c:\\windows\\microsoft.net\\framework64\\v4.0.30319\\setupcache\\v4.6.00081\\2070\\localizeddata.xml.[neftet@tutanota.com].boom")) returned 1 [0144.466] MoveFileW (lpExistingFileName="C:\\Windows\\Microsoft.NET\\Framework64\\v4.0.30319\\SetupCache\\v4.6.00081\\3082\\eula.rtf" (normalized: "c:\\windows\\microsoft.net\\framework64\\v4.0.30319\\setupcache\\v4.6.00081\\3082\\eula.rtf"), lpNewFileName="C:\\Windows\\Microsoft.NET\\Framework64\\v4.0.30319\\SetupCache\\v4.6.00081\\3082\\eula.rtf.[neftet@tutanota.com].boom" (normalized: "c:\\windows\\microsoft.net\\framework64\\v4.0.30319\\setupcache\\v4.6.00081\\3082\\eula.rtf.[neftet@tutanota.com].boom")) returned 1 [0144.474] MoveFileW (lpExistingFileName="C:\\Windows\\Microsoft.NET\\Framework64\\v4.0.30319\\SetupCache\\v4.6.00081\\3082\\LocalizedData.xml" (normalized: "c:\\windows\\microsoft.net\\framework64\\v4.0.30319\\setupcache\\v4.6.00081\\3082\\localizeddata.xml"), lpNewFileName="C:\\Windows\\Microsoft.NET\\Framework64\\v4.0.30319\\SetupCache\\v4.6.00081\\3082\\LocalizedData.xml.[neftet@tutanota.com].boom" (normalized: "c:\\windows\\microsoft.net\\framework64\\v4.0.30319\\setupcache\\v4.6.00081\\3082\\localizeddata.xml.[neftet@tutanota.com].boom")) returned 1 [0144.479] MoveFileW (lpExistingFileName="C:\\Windows\\Microsoft.NET\\Framework64\\v4.0.30319\\SQL\\en\\DropSqlPersistenceProviderLogic.sql" (normalized: "c:\\windows\\microsoft.net\\framework64\\v4.0.30319\\sql\\en\\dropsqlpersistenceproviderlogic.sql"), lpNewFileName="C:\\Windows\\Microsoft.NET\\Framework64\\v4.0.30319\\SQL\\en\\DropSqlPersistenceProviderLogic.sql.[neftet@tutanota.com].boom" (normalized: "c:\\windows\\microsoft.net\\framework64\\v4.0.30319\\sql\\en\\dropsqlpersistenceproviderlogic.sql.[neftet@tutanota.com].boom")) returned 1 [0144.482] MoveFileW (lpExistingFileName="C:\\Windows\\Microsoft.NET\\Framework64\\v4.0.30319\\SQL\\en\\DropSqlPersistenceProviderSchema.sql" (normalized: "c:\\windows\\microsoft.net\\framework64\\v4.0.30319\\sql\\en\\dropsqlpersistenceproviderschema.sql"), lpNewFileName="C:\\Windows\\Microsoft.NET\\Framework64\\v4.0.30319\\SQL\\en\\DropSqlPersistenceProviderSchema.sql.[neftet@tutanota.com].boom" (normalized: "c:\\windows\\microsoft.net\\framework64\\v4.0.30319\\sql\\en\\dropsqlpersistenceproviderschema.sql.[neftet@tutanota.com].boom")) returned 1 [0144.485] MoveFileW (lpExistingFileName="C:\\Windows\\Microsoft.NET\\Framework64\\v4.0.30319\\SQL\\en\\DropSqlWorkflowInstanceStoreLogic.sql" (normalized: "c:\\windows\\microsoft.net\\framework64\\v4.0.30319\\sql\\en\\dropsqlworkflowinstancestorelogic.sql"), lpNewFileName="C:\\Windows\\Microsoft.NET\\Framework64\\v4.0.30319\\SQL\\en\\DropSqlWorkflowInstanceStoreLogic.sql.[neftet@tutanota.com].boom" (normalized: "c:\\windows\\microsoft.net\\framework64\\v4.0.30319\\sql\\en\\dropsqlworkflowinstancestorelogic.sql.[neftet@tutanota.com].boom")) returned 1 [0144.488] MoveFileW (lpExistingFileName="C:\\Windows\\Microsoft.NET\\Framework64\\v4.0.30319\\SQL\\en\\DropSqlWorkflowInstanceStoreSchema.sql" (normalized: "c:\\windows\\microsoft.net\\framework64\\v4.0.30319\\sql\\en\\dropsqlworkflowinstancestoreschema.sql"), lpNewFileName="C:\\Windows\\Microsoft.NET\\Framework64\\v4.0.30319\\SQL\\en\\DropSqlWorkflowInstanceStoreSchema.sql.[neftet@tutanota.com].boom" (normalized: "c:\\windows\\microsoft.net\\framework64\\v4.0.30319\\sql\\en\\dropsqlworkflowinstancestoreschema.sql.[neftet@tutanota.com].boom")) returned 1 [0144.492] MoveFileW (lpExistingFileName="C:\\Windows\\Microsoft.NET\\Framework64\\v4.0.30319\\SQL\\en\\SqlPersistenceProviderLogic.sql" (normalized: "c:\\windows\\microsoft.net\\framework64\\v4.0.30319\\sql\\en\\sqlpersistenceproviderlogic.sql"), lpNewFileName="C:\\Windows\\Microsoft.NET\\Framework64\\v4.0.30319\\SQL\\en\\SqlPersistenceProviderLogic.sql.[neftet@tutanota.com].boom" (normalized: "c:\\windows\\microsoft.net\\framework64\\v4.0.30319\\sql\\en\\sqlpersistenceproviderlogic.sql.[neftet@tutanota.com].boom")) returned 1 [0144.494] MoveFileW (lpExistingFileName="C:\\Windows\\Microsoft.NET\\Framework64\\v4.0.30319\\SQL\\en\\SqlPersistenceProviderSchema.sql" (normalized: "c:\\windows\\microsoft.net\\framework64\\v4.0.30319\\sql\\en\\sqlpersistenceproviderschema.sql"), lpNewFileName="C:\\Windows\\Microsoft.NET\\Framework64\\v4.0.30319\\SQL\\en\\SqlPersistenceProviderSchema.sql.[neftet@tutanota.com].boom" (normalized: "c:\\windows\\microsoft.net\\framework64\\v4.0.30319\\sql\\en\\sqlpersistenceproviderschema.sql.[neftet@tutanota.com].boom")) returned 1 [0144.498] MoveFileW (lpExistingFileName="C:\\Windows\\Microsoft.NET\\Framework64\\v4.0.30319\\SQL\\en\\SqlPersistenceService_Logic.sql" (normalized: "c:\\windows\\microsoft.net\\framework64\\v4.0.30319\\sql\\en\\sqlpersistenceservice_logic.sql"), lpNewFileName="C:\\Windows\\Microsoft.NET\\Framework64\\v4.0.30319\\SQL\\en\\SqlPersistenceService_Logic.sql.[neftet@tutanota.com].boom" (normalized: "c:\\windows\\microsoft.net\\framework64\\v4.0.30319\\sql\\en\\sqlpersistenceservice_logic.sql.[neftet@tutanota.com].boom")) returned 1 [0144.501] MoveFileW (lpExistingFileName="C:\\Windows\\Microsoft.NET\\Framework64\\v4.0.30319\\SQL\\en\\SqlPersistenceService_Schema.sql" (normalized: "c:\\windows\\microsoft.net\\framework64\\v4.0.30319\\sql\\en\\sqlpersistenceservice_schema.sql"), lpNewFileName="C:\\Windows\\Microsoft.NET\\Framework64\\v4.0.30319\\SQL\\en\\SqlPersistenceService_Schema.sql.[neftet@tutanota.com].boom" (normalized: "c:\\windows\\microsoft.net\\framework64\\v4.0.30319\\sql\\en\\sqlpersistenceservice_schema.sql.[neftet@tutanota.com].boom")) returned 1 [0144.506] MoveFileW (lpExistingFileName="C:\\Windows\\Microsoft.NET\\Framework64\\v4.0.30319\\SQL\\en\\SqlWorkflowInstanceStoreLogic.sql" (normalized: "c:\\windows\\microsoft.net\\framework64\\v4.0.30319\\sql\\en\\sqlworkflowinstancestorelogic.sql"), lpNewFileName="C:\\Windows\\Microsoft.NET\\Framework64\\v4.0.30319\\SQL\\en\\SqlWorkflowInstanceStoreLogic.sql.[neftet@tutanota.com].boom" (normalized: "c:\\windows\\microsoft.net\\framework64\\v4.0.30319\\sql\\en\\sqlworkflowinstancestorelogic.sql.[neftet@tutanota.com].boom")) returned 1 [0144.510] MoveFileW (lpExistingFileName="C:\\Windows\\Microsoft.NET\\Framework64\\v4.0.30319\\SQL\\en\\SqlWorkflowInstanceStoreSchema.sql" (normalized: "c:\\windows\\microsoft.net\\framework64\\v4.0.30319\\sql\\en\\sqlworkflowinstancestoreschema.sql"), lpNewFileName="C:\\Windows\\Microsoft.NET\\Framework64\\v4.0.30319\\SQL\\en\\SqlWorkflowInstanceStoreSchema.sql.[neftet@tutanota.com].boom" (normalized: "c:\\windows\\microsoft.net\\framework64\\v4.0.30319\\sql\\en\\sqlworkflowinstancestoreschema.sql.[neftet@tutanota.com].boom")) returned 1 [0144.516] MoveFileW (lpExistingFileName="C:\\Windows\\Microsoft.NET\\Framework64\\v4.0.30319\\SQL\\en\\SqlWorkflowInstanceStoreSchemaUpgrade.sql" (normalized: "c:\\windows\\microsoft.net\\framework64\\v4.0.30319\\sql\\en\\sqlworkflowinstancestoreschemaupgrade.sql"), lpNewFileName="C:\\Windows\\Microsoft.NET\\Framework64\\v4.0.30319\\SQL\\en\\SqlWorkflowInstanceStoreSchemaUpgrade.sql.[neftet@tutanota.com].boom" (normalized: "c:\\windows\\microsoft.net\\framework64\\v4.0.30319\\sql\\en\\sqlworkflowinstancestoreschemaupgrade.sql.[neftet@tutanota.com].boom")) returned 1 [0144.537] MoveFileW (lpExistingFileName="C:\\Windows\\Microsoft.NET\\Framework64\\v4.0.30319\\SQL\\en\\Tracking_Logic.sql" (normalized: "c:\\windows\\microsoft.net\\framework64\\v4.0.30319\\sql\\en\\tracking_logic.sql"), lpNewFileName="C:\\Windows\\Microsoft.NET\\Framework64\\v4.0.30319\\SQL\\en\\Tracking_Logic.sql.[neftet@tutanota.com].boom" (normalized: "c:\\windows\\microsoft.net\\framework64\\v4.0.30319\\sql\\en\\tracking_logic.sql.[neftet@tutanota.com].boom")) returned 1 [0144.546] MoveFileW (lpExistingFileName="C:\\Windows\\Microsoft.NET\\Framework64\\v4.0.30319\\SQL\\en\\Tracking_Schema.sql" (normalized: "c:\\windows\\microsoft.net\\framework64\\v4.0.30319\\sql\\en\\tracking_schema.sql"), lpNewFileName="C:\\Windows\\Microsoft.NET\\Framework64\\v4.0.30319\\SQL\\en\\Tracking_Schema.sql.[neftet@tutanota.com].boom" (normalized: "c:\\windows\\microsoft.net\\framework64\\v4.0.30319\\sql\\en\\tracking_schema.sql.[neftet@tutanota.com].boom")) returned 1 [0144.554] MoveFileW (lpExistingFileName="C:\\Windows\\Panther\\diagerr.xml" (normalized: "c:\\windows\\panther\\diagerr.xml"), lpNewFileName="C:\\Windows\\Panther\\diagerr.xml.[neftet@tutanota.com].boom" (normalized: "c:\\windows\\panther\\diagerr.xml.[neftet@tutanota.com].boom")) returned 1 [0144.558] MoveFileW (lpExistingFileName="C:\\Windows\\Panther\\diagwrn.xml" (normalized: "c:\\windows\\panther\\diagwrn.xml"), lpNewFileName="C:\\Windows\\Panther\\diagwrn.xml.[neftet@tutanota.com].boom" (normalized: "c:\\windows\\panther\\diagwrn.xml.[neftet@tutanota.com].boom")) returned 1 [0144.561] MoveFileW (lpExistingFileName="C:\\Windows\\Panther\\unattend.xml" (normalized: "c:\\windows\\panther\\unattend.xml"), lpNewFileName="C:\\Windows\\Panther\\unattend.xml.[neftet@tutanota.com].boom" (normalized: "c:\\windows\\panther\\unattend.xml.[neftet@tutanota.com].boom")) returned 1 [0144.565] MoveFileW (lpExistingFileName="C:\\Windows\\Panther\\UnattendGC\\diagerr.xml" (normalized: "c:\\windows\\panther\\unattendgc\\diagerr.xml"), lpNewFileName="C:\\Windows\\Panther\\UnattendGC\\diagerr.xml.[neftet@tutanota.com].boom" (normalized: "c:\\windows\\panther\\unattendgc\\diagerr.xml.[neftet@tutanota.com].boom")) returned 1 [0144.569] MoveFileW (lpExistingFileName="C:\\Windows\\Panther\\UnattendGC\\diagwrn.xml" (normalized: "c:\\windows\\panther\\unattendgc\\diagwrn.xml"), lpNewFileName="C:\\Windows\\Panther\\UnattendGC\\diagwrn.xml.[neftet@tutanota.com].boom" (normalized: "c:\\windows\\panther\\unattendgc\\diagwrn.xml.[neftet@tutanota.com].boom")) returned 1 [0145.094] MoveFileW (lpExistingFileName="C:\\Windows\\System32\\license.rtf" (normalized: "c:\\windows\\system32\\license.rtf"), lpNewFileName="C:\\Windows\\System32\\license.rtf.[neftet@tutanota.com].boom" (normalized: "c:\\windows\\system32\\license.rtf.[neftet@tutanota.com].boom")) returned 1 [0145.115] MoveFileW (lpExistingFileName="C:\\Windows\\Vss\\Writers\\System\\0bada1de-01a9-4625-8278-69e735f39dd2.xml" (normalized: "c:\\windows\\vss\\writers\\system\\0bada1de-01a9-4625-8278-69e735f39dd2.xml"), lpNewFileName="C:\\Windows\\Vss\\Writers\\System\\0bada1de-01a9-4625-8278-69e735f39dd2.xml.[neftet@tutanota.com].boom" (normalized: "c:\\windows\\vss\\writers\\system\\0bada1de-01a9-4625-8278-69e735f39dd2.xml.[neftet@tutanota.com].boom")) returned 1 [0145.119] MoveFileW (lpExistingFileName="C:\\Windows\\Vss\\Writers\\System\\75DFB225-E2E4-4d39-9AC9-FFAFF65DDF06.xml" (normalized: "c:\\windows\\vss\\writers\\system\\75dfb225-e2e4-4d39-9ac9-ffaff65ddf06.xml"), lpNewFileName="C:\\Windows\\Vss\\Writers\\System\\75DFB225-E2E4-4d39-9AC9-FFAFF65DDF06.xml.[neftet@tutanota.com].boom" (normalized: "c:\\windows\\vss\\writers\\system\\75dfb225-e2e4-4d39-9ac9-ffaff65ddf06.xml.[neftet@tutanota.com].boom")) returned 1 [0145.122] MoveFileW (lpExistingFileName="C:\\Windows\\Vss\\Writers\\System\\D61D61C8-D73A-4EEE-8CDD-F6F9786B7124.xml" (normalized: "c:\\windows\\vss\\writers\\system\\d61d61c8-d73a-4eee-8cdd-f6f9786b7124.xml"), lpNewFileName="C:\\Windows\\Vss\\Writers\\System\\D61D61C8-D73A-4EEE-8CDD-F6F9786B7124.xml.[neftet@tutanota.com].boom" (normalized: "c:\\windows\\vss\\writers\\system\\d61d61c8-d73a-4eee-8cdd-f6f9786b7124.xml.[neftet@tutanota.com].boom")) returned 1 [0146.013] GetCurrentProcessId () returned 0xab4 [0146.018] LookupPrivilegeValueW (in: lpSystemName=0x0, lpName="SeDebugPrivilege", lpLuid=0x31e2a4 | out: lpLuid=0x31e2a4*(LowPart=0x14, HighPart=0)) returned 1 [0146.020] GetCurrentProcess () returned 0xffffffff [0146.020] OpenProcessToken (in: ProcessHandle=0xffffffff, DesiredAccess=0x20, TokenHandle=0x31e2a0 | out: TokenHandle=0x31e2a0*=0x27c) returned 1 [0146.020] AdjustTokenPrivileges (in: TokenHandle=0x27c, DisableAllPrivileges=0, NewState=0x2c75d1c*(PrivilegesCount=0x1, Privileges=((Luid.LowPart=0x14, Luid.HighPart=0, Attributes=0x2))), BufferLength=0x0, PreviousState=0x0, ReturnLength=0x0 | out: PreviousState=0x0, ReturnLength=0x0) returned 1 [0146.020] CloseHandle (hObject=0x27c) returned 1 [0146.021] OpenProcess (dwDesiredAccess=0x500, bInheritHandle=0, dwProcessId=0xab4) returned 0x27c [0146.021] GetExitCodeProcess (in: hProcess=0x27c, lpExitCode=0x2c75c9c | out: lpExitCode=0x2c75c9c*=0x103) returned 1 [0146.029] GetProcessWorkingSetSize (in: hProcess=0x27c, lpMinimumWorkingSetSize=0x31ea00, lpMaximumWorkingSetSize=0x31e9fc | out: lpMinimumWorkingSetSize=0x31ea00, lpMaximumWorkingSetSize=0x31e9fc) returned 1 [0146.030] SetProcessWorkingSetSize (hProcess=0x27c, dwMinimumWorkingSetSize=0x493e0, dwMaximumWorkingSetSize=0x159000) returned 1 [0146.079] GetProcessWorkingSetSize (in: hProcess=0x27c, lpMinimumWorkingSetSize=0x31ea00, lpMaximumWorkingSetSize=0x31e9fc | out: lpMinimumWorkingSetSize=0x31ea00, lpMaximumWorkingSetSize=0x31e9fc) returned 1 [0146.079] CloseHandle (hObject=0x27c) returned 1 [0146.229] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\B221.exe.config", nBufferLength=0x105, lpBuffer=0x31e270, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\B221.exe.config", lpFilePart=0x0) returned 0x35 [0146.404] GetCurrentProcess () returned 0xffffffff [0146.404] OpenProcessToken (in: ProcessHandle=0xffffffff, DesiredAccess=0x2000000, TokenHandle=0x31e618 | out: TokenHandle=0x31e618*=0x284) returned 1 [0146.407] GetFullPathNameW (in: lpFileName="C:\\Windows\\Microsoft.NET\\Framework\\v4.0.30319\\", nBufferLength=0x105, lpBuffer=0x31e0f8, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\Microsoft.NET\\Framework\\v4.0.30319\\", lpFilePart=0x0) returned 0x2e [0146.409] GetFileAttributesExW (in: lpFileName="C:\\Windows\\Microsoft.NET\\Framework\\v4.0.30319\\Config\\machine.config" (normalized: "c:\\windows\\microsoft.net\\framework\\v4.0.30319\\config\\machine.config"), fInfoLevelId=0x0, lpFileInformation=0x31e618 | out: lpFileInformation=0x31e618*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc0cc4300, ftCreationTime.dwHighDateTime=0x1cd5cf4, ftLastAccessTime.dwLowDateTime=0xcf7ee640, ftLastAccessTime.dwHighDateTime=0x1d2e675, ftLastWriteTime.dwLowDateTime=0xc0cc4300, ftLastWriteTime.dwHighDateTime=0x1cd5cf4, nFileSizeHigh=0x0, nFileSizeLow=0x8c8f)) returned 1 [0146.410] GetFullPathNameW (in: lpFileName="C:\\Windows\\Microsoft.NET\\Framework\\v4.0.30319\\Config\\machine.config", nBufferLength=0x105, lpBuffer=0x31e0c4, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\Microsoft.NET\\Framework\\v4.0.30319\\Config\\machine.config", lpFilePart=0x0) returned 0x43 [0146.410] GetFileAttributesExW (in: lpFileName="C:\\Windows\\Microsoft.NET\\Framework\\v4.0.30319\\Config\\machine.config" (normalized: "c:\\windows\\microsoft.net\\framework\\v4.0.30319\\config\\machine.config"), fInfoLevelId=0x0, lpFileInformation=0x31e618 | out: lpFileInformation=0x31e618*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc0cc4300, ftCreationTime.dwHighDateTime=0x1cd5cf4, ftLastAccessTime.dwLowDateTime=0xcf7ee640, ftLastAccessTime.dwHighDateTime=0x1d2e675, ftLastWriteTime.dwLowDateTime=0xc0cc4300, ftLastWriteTime.dwHighDateTime=0x1cd5cf4, nFileSizeHigh=0x0, nFileSizeLow=0x8c8f)) returned 1 [0146.410] GetFullPathNameW (in: lpFileName="C:\\Windows\\Microsoft.NET\\Framework\\v4.0.30319\\Config\\machine.config", nBufferLength=0x105, lpBuffer=0x31e050, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\Microsoft.NET\\Framework\\v4.0.30319\\Config\\machine.config", lpFilePart=0x0) returned 0x43 [0146.410] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e544) returned 1 [0146.410] CreateFileW (lpFileName="C:\\Windows\\Microsoft.NET\\Framework\\v4.0.30319\\Config\\machine.config" (normalized: "c:\\windows\\microsoft.net\\framework\\v4.0.30319\\config\\machine.config"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x280 [0146.411] GetFileType (hFile=0x280) returned 0x1 [0146.411] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e540) returned 1 [0146.411] GetFileType (hFile=0x280) returned 0x1 [0146.434] RegOpenKeyExW (in: hKey=0x80000002, lpSubKey="SOFTWARE\\Microsoft\\.NETFramework\\XML", ulOptions=0x0, samDesired=0x20019, phkResult=0x31e59c | out: phkResult=0x31e59c*=0x0) returned 0x2 [0146.435] RegOpenKeyExW (in: hKey=0x80000001, lpSubKey="SOFTWARE\\Microsoft\\.NETFramework\\XML", ulOptions=0x0, samDesired=0x20019, phkResult=0x31e59c | out: phkResult=0x31e59c*=0x0) returned 0x2 [0146.437] GetFileSize (in: hFile=0x280, lpFileSizeHigh=0x31e60c | out: lpFileSizeHigh=0x31e60c*=0x0) returned 0x8c8f [0146.437] ReadFile (in: hFile=0x280, lpBuffer=0x2c78ffc, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x31e5c8, lpOverlapped=0x0 | out: lpBuffer=0x2c78ffc*, lpNumberOfBytesRead=0x31e5c8*=0x1000, lpOverlapped=0x0) returned 1 [0146.447] ReadFile (in: hFile=0x280, lpBuffer=0x2c78ffc, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x31e464, lpOverlapped=0x0 | out: lpBuffer=0x2c78ffc*, lpNumberOfBytesRead=0x31e464*=0x1000, lpOverlapped=0x0) returned 1 [0146.451] ReadFile (in: hFile=0x280, lpBuffer=0x2c78ffc, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x31e318, lpOverlapped=0x0 | out: lpBuffer=0x2c78ffc*, lpNumberOfBytesRead=0x31e318*=0x1000, lpOverlapped=0x0) returned 1 [0146.451] ReadFile (in: hFile=0x280, lpBuffer=0x2c78ffc, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x31e318, lpOverlapped=0x0 | out: lpBuffer=0x2c78ffc*, lpNumberOfBytesRead=0x31e318*=0x1000, lpOverlapped=0x0) returned 1 [0146.452] ReadFile (in: hFile=0x280, lpBuffer=0x2c78ffc, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x31e318, lpOverlapped=0x0 | out: lpBuffer=0x2c78ffc*, lpNumberOfBytesRead=0x31e318*=0x1000, lpOverlapped=0x0) returned 1 [0146.452] ReadFile (in: hFile=0x280, lpBuffer=0x2c78ffc, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x31e250, lpOverlapped=0x0 | out: lpBuffer=0x2c78ffc*, lpNumberOfBytesRead=0x31e250*=0x1000, lpOverlapped=0x0) returned 1 [0146.455] ReadFile (in: hFile=0x280, lpBuffer=0x2c78ffc, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x31e3cc, lpOverlapped=0x0 | out: lpBuffer=0x2c78ffc*, lpNumberOfBytesRead=0x31e3cc*=0x1000, lpOverlapped=0x0) returned 1 [0146.456] ReadFile (in: hFile=0x280, lpBuffer=0x2c78ffc, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x31e2e0, lpOverlapped=0x0 | out: lpBuffer=0x2c78ffc*, lpNumberOfBytesRead=0x31e2e0*=0x1000, lpOverlapped=0x0) returned 1 [0146.456] ReadFile (in: hFile=0x280, lpBuffer=0x2c78ffc, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x31e2e0, lpOverlapped=0x0 | out: lpBuffer=0x2c78ffc*, lpNumberOfBytesRead=0x31e2e0*=0xc8f, lpOverlapped=0x0) returned 1 [0146.456] ReadFile (in: hFile=0x280, lpBuffer=0x2c78ffc, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x31e3a0, lpOverlapped=0x0 | out: lpBuffer=0x2c78ffc*, lpNumberOfBytesRead=0x31e3a0*=0x0, lpOverlapped=0x0) returned 1 [0146.456] CloseHandle (hObject=0x280) returned 1 [0146.457] GetCurrentProcess () returned 0xffffffff [0146.457] OpenProcessToken (in: ProcessHandle=0xffffffff, DesiredAccess=0x2000000, TokenHandle=0x31e74c | out: TokenHandle=0x31e74c*=0x280) returned 1 [0146.457] GetCurrentProcess () returned 0xffffffff [0146.457] OpenProcessToken (in: ProcessHandle=0xffffffff, DesiredAccess=0x2000000, TokenHandle=0x31e74c | out: TokenHandle=0x31e74c*=0x288) returned 1 [0146.457] GetCurrentProcess () returned 0xffffffff [0146.458] OpenProcessToken (in: ProcessHandle=0xffffffff, DesiredAccess=0x2000000, TokenHandle=0x31e618 | out: TokenHandle=0x31e618*=0x28c) returned 1 [0146.458] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\B221.exe.config" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\b221.exe.config"), fInfoLevelId=0x0, lpFileInformation=0x31e618 | out: lpFileInformation=0x31e618*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0 [0146.458] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\B221.exe.config", nBufferLength=0x105, lpBuffer=0x31e0c4, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\B221.exe.config", lpFilePart=0x0) returned 0x35 [0146.459] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\B221.exe.config" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\b221.exe.config"), fInfoLevelId=0x0, lpFileInformation=0x31e618 | out: lpFileInformation=0x31e618*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0 [0146.459] GetCurrentProcess () returned 0xffffffff [0146.459] OpenProcessToken (in: ProcessHandle=0xffffffff, DesiredAccess=0x2000000, TokenHandle=0x31e74c | out: TokenHandle=0x31e74c*=0x290) returned 1 [0146.459] GetCurrentProcess () returned 0xffffffff [0146.459] OpenProcessToken (in: ProcessHandle=0xffffffff, DesiredAccess=0x2000000, TokenHandle=0x31e74c | out: TokenHandle=0x31e74c*=0x294) returned 1 [0146.469] GetCurrentProcess () returned 0xffffffff [0146.469] OpenProcessToken (in: ProcessHandle=0xffffffff, DesiredAccess=0x2000000, TokenHandle=0x31e514 | out: TokenHandle=0x31e514*=0x298) returned 1 [0146.484] GetCurrentProcess () returned 0xffffffff [0146.484] OpenProcessToken (in: ProcessHandle=0xffffffff, DesiredAccess=0x2000000, TokenHandle=0x31e524 | out: TokenHandle=0x31e524*=0x29c) returned 1 [0146.490] CreateEventW (lpEventAttributes=0x0, bManualReset=0, bInitialState=0, lpName=0x0) returned 0x2a0 [0146.490] CreateEventW (lpEventAttributes=0x0, bManualReset=1, bInitialState=0, lpName=0x0) returned 0x2a4 [0146.494] GetCurrentProcess () returned 0xffffffff [0146.494] OpenProcessToken (in: ProcessHandle=0xffffffff, DesiredAccess=0x2000000, TokenHandle=0x31e50c | out: TokenHandle=0x31e50c*=0x2a8) returned 1 [0146.496] GetCurrentProcess () returned 0xffffffff [0146.496] OpenProcessToken (in: ProcessHandle=0xffffffff, DesiredAccess=0x2000000, TokenHandle=0x31e51c | out: TokenHandle=0x31e51c*=0x2ac) returned 1 [0146.498] QueryPerformanceFrequency (in: lpFrequency=0x125a28 | out: lpFrequency=0x125a28*=100000000) returned 1 [0146.498] QueryPerformanceCounter (in: lpPerformanceCount=0x31e920 | out: lpPerformanceCount=0x31e920*=26732100511) returned 1 [0146.502] GetCurrentProcess () returned 0xffffffff [0146.502] OpenProcessToken (in: ProcessHandle=0xffffffff, DesiredAccess=0x2000000, TokenHandle=0x31e4d8 | out: TokenHandle=0x31e4d8*=0x2b0) returned 1 [0146.505] GetCurrentProcess () returned 0xffffffff [0146.505] OpenProcessToken (in: ProcessHandle=0xffffffff, DesiredAccess=0x2000000, TokenHandle=0x31e4e8 | out: TokenHandle=0x31e4e8*=0x2b4) returned 1 [0146.514] GetCurrentProcess () returned 0xffffffff [0146.514] OpenProcessToken (in: ProcessHandle=0xffffffff, DesiredAccess=0x2000000, TokenHandle=0x31e4ec | out: TokenHandle=0x31e4ec*=0x2b8) returned 1 [0146.515] GetCurrentProcess () returned 0xffffffff [0146.515] OpenProcessToken (in: ProcessHandle=0xffffffff, DesiredAccess=0x2000000, TokenHandle=0x31e4fc | out: TokenHandle=0x31e4fc*=0x2bc) returned 1 [0146.520] GetCurrentProcess () returned 0xffffffff [0146.520] OpenProcessToken (in: ProcessHandle=0xffffffff, DesiredAccess=0x2000000, TokenHandle=0x31e808 | out: TokenHandle=0x31e808*=0x2c0) returned 1 [0146.522] RegOpenKeyExW (in: hKey=0x80000002, lpSubKey="Software\\Microsoft\\Windows NT\\CurrentVersion", ulOptions=0x0, samDesired=0x20019, phkResult=0x31d954 | out: phkResult=0x31d954*=0x2c4) returned 0x0 [0146.523] RegQueryValueExW (in: hKey=0x2c4, lpValueName="InstallationType", lpReserved=0x0, lpType=0x31d974, lpData=0x0, lpcbData=0x31d970*=0x0 | out: lpType=0x31d974*=0x1, lpData=0x0, lpcbData=0x31d970*=0xe) returned 0x0 [0146.523] RegQueryValueExW (in: hKey=0x2c4, lpValueName="InstallationType", lpReserved=0x0, lpType=0x31d974, lpData=0x2c9ace0, lpcbData=0x31d970*=0xe | out: lpType=0x31d974*=0x1, lpData="Client", lpcbData=0x31d970*=0xe) returned 0x0 [0146.523] RegCloseKey (hKey=0x2c4) returned 0x0 [0147.006] CoTaskMemAlloc (cb=0xcc0) returned 0x418700 [0147.006] RasEnumConnectionsW (in: param_1=0x418700, param_2=0x31e818, param_3=0x31e81c | out: param_1=0x418700, param_2=0x31e818, param_3=0x31e81c) returned 0x0 [0147.101] CoTaskMemFree (pv=0x418700) [0147.106] WSAStartup (in: wVersionRequired=0x202, lpWSAData=0x31e600 | out: lpWSAData=0x31e600) returned 0 [0147.113] WSASocketW (af=2, type=2, protocol=0, lpProtocolInfo=0x0, g=0x0, dwFlags=0x0) returned 0x304 [0147.327] setsockopt (s=0x304, level=65535, optname=128, optval="\x01", optlen=4) returned -1 [0147.327] closesocket (s=0x304) returned 0 [0147.327] WSASocketW (af=23, type=2, protocol=0, lpProtocolInfo=0x0, g=0x0, dwFlags=0x0) returned 0x304 [0147.348] setsockopt (s=0x304, level=65535, optname=128, optval="\x01", optlen=4) returned -1 [0147.348] closesocket (s=0x304) returned 0 [0147.348] WSASocketW (af=2, type=2, protocol=0, lpProtocolInfo=0x0, g=0x0, dwFlags=0x1) returned 0x304 [0147.348] CreateEventW (lpEventAttributes=0x0, bManualReset=0, bInitialState=0, lpName=0x0) returned 0x308 [0147.349] ioctlsocket (in: s=0x304, cmd=-2147195266, argp=0x31e820 | out: argp=0x31e820) returned 0 [0147.349] WSASocketW (af=23, type=2, protocol=0, lpProtocolInfo=0x0, g=0x0, dwFlags=0x1) returned 0x30c [0147.349] CreateEventW (lpEventAttributes=0x0, bManualReset=0, bInitialState=0, lpName=0x0) returned 0x310 [0147.349] ioctlsocket (in: s=0x30c, cmd=-2147195266, argp=0x31e820 | out: argp=0x31e820) returned 0 [0147.350] WSAIoctl (in: s=0x304, dwIoControlCode=0x28000017, lpvInBuffer=0x0, cbInBuffer=0x0, lpvOutBuffer=0x0, cbOutBuffer=0x0, lpcbBytesReturned=0x31e808, lpOverlapped=0x0, lpCompletionRoutine=0x0 | out: lpvOutBuffer=0x0, lpcbBytesReturned=0x31e808, lpOverlapped=0x0) returned -1 [0147.351] FormatMessageW (in: dwFlags=0x3200, lpSource=0x0, dwMessageId=0x2733, dwLanguageId=0x0, lpBuffer=0x31e538, nSize=0x101, Arguments=0x0 | out: lpBuffer="A non-blocking socket operation could not be completed immediately.\r\n") returned 0x45 [0147.355] WSAEventSelect (s=0x304, hEventObject=0x308, lNetworkEvents=512) returned 0 [0147.355] WSAIoctl (in: s=0x30c, dwIoControlCode=0x28000017, lpvInBuffer=0x0, cbInBuffer=0x0, lpvOutBuffer=0x0, cbOutBuffer=0x0, lpcbBytesReturned=0x31e808, lpOverlapped=0x0, lpCompletionRoutine=0x0 | out: lpvOutBuffer=0x0, lpcbBytesReturned=0x31e808, lpOverlapped=0x0) returned -1 [0147.355] FormatMessageW (in: dwFlags=0x3200, lpSource=0x0, dwMessageId=0x2733, dwLanguageId=0x0, lpBuffer=0x31e538, nSize=0x101, Arguments=0x0 | out: lpBuffer="A non-blocking socket operation could not be completed immediately.\r\n") returned 0x45 [0147.355] WSAEventSelect (s=0x30c, hEventObject=0x310, lNetworkEvents=512) returned 0 [0147.355] CreateEventW (lpEventAttributes=0x0, bManualReset=1, bInitialState=0, lpName=0x0) returned 0x318 [0147.356] RasConnectionNotificationW (param_1=0xffffffff, param_2=0x318, param_3=0x3) returned 0x0 [0147.360] RegOpenCurrentUser (in: samDesired=0x20019, phkResult=0x31e834 | out: phkResult=0x31e834*=0x330) returned 0x0 [0147.360] RegOpenKeyExW (in: hKey=0x330, lpSubKey="SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Internet Settings\\Connections", ulOptions=0x0, samDesired=0x20019, phkResult=0x31e7e4 | out: phkResult=0x31e7e4*=0x334) returned 0x0 [0147.360] CreateEventW (lpEventAttributes=0x0, bManualReset=0, bInitialState=0, lpName=0x0) returned 0x338 [0147.360] RegNotifyChangeKeyValue (hKey=0x334, bWatchSubtree=1, dwNotifyFilter=0x4, hEvent=0x338, fAsynchronous=1) returned 0x0 [0147.361] RegOpenKeyExW (in: hKey=0x80000002, lpSubKey="SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Internet Settings\\Connections", ulOptions=0x0, samDesired=0x20019, phkResult=0x31e7e8 | out: phkResult=0x31e7e8*=0x33c) returned 0x0 [0147.361] CreateEventW (lpEventAttributes=0x0, bManualReset=0, bInitialState=0, lpName=0x0) returned 0x340 [0147.361] RegNotifyChangeKeyValue (hKey=0x33c, bWatchSubtree=1, dwNotifyFilter=0x4, hEvent=0x340, fAsynchronous=1) returned 0x0 [0147.361] RegOpenKeyExW (in: hKey=0x80000002, lpSubKey="SOFTWARE\\Policies\\Microsoft\\Windows\\CurrentVersion\\Internet Settings", ulOptions=0x0, samDesired=0x20019, phkResult=0x31e7e8 | out: phkResult=0x31e7e8*=0x344) returned 0x0 [0147.361] CreateEventW (lpEventAttributes=0x0, bManualReset=0, bInitialState=0, lpName=0x0) returned 0x348 [0147.361] RegNotifyChangeKeyValue (hKey=0x344, bWatchSubtree=1, dwNotifyFilter=0x4, hEvent=0x348, fAsynchronous=1) returned 0x0 [0147.362] GetCurrentProcess () returned 0xffffffff [0147.362] OpenProcessToken (in: ProcessHandle=0xffffffff, DesiredAccess=0x2000000, TokenHandle=0x31e7dc | out: TokenHandle=0x31e7dc*=0x34c) returned 1 [0147.365] RegOpenKeyExW (in: hKey=0x80000002, lpSubKey="SOFTWARE\\Microsoft\\.NETFramework", ulOptions=0x0, samDesired=0x20019, phkResult=0x31e0e8 | out: phkResult=0x31e0e8*=0x350) returned 0x0 [0147.365] RegQueryValueExW (in: hKey=0x350, lpValueName="LegacyWPADSupport", lpReserved=0x0, lpType=0x31e104, lpData=0x0, lpcbData=0x31e100*=0x0 | out: lpType=0x31e104*=0x0, lpData=0x0, lpcbData=0x31e100*=0x0) returned 0x2 [0147.365] RegCloseKey (hKey=0x350) returned 0x0 [0147.645] WinHttpOpen (pszAgentW=0x0, dwAccessType=0x1, pszProxyW=0x0, pszProxyBypassW=0x0, dwFlags=0x0) returned 0x41bef8 [0147.705] WinHttpSetTimeouts (hInternet=0x41bef8, nResolveTimeout=60000, nConnectTimeout=60000, nSendTimeout=60000, nReceiveTimeout=60000) returned 1 [0147.705] WinHttpGetIEProxyConfigForCurrentUser (in: pProxyConfig=0x31e7e8 | out: pProxyConfig=0x31e7e8) returned 1 [0148.208] GetEnvironmentVariableW (in: lpName="PinnableBufferCache_System.Net.HttpWebRequest_Disabled", lpBuffer=0x31df78, nSize=0xf4 | out: lpBuffer="㈩璢") returned 0x0 [0148.208] GetEnvironmentVariableW (in: lpName="PinnableBufferCache_System.Net.HttpWebRequest_MinCount", lpBuffer=0x31df78, nSize=0xf4 | out: lpBuffer="㈩璢") returned 0x0 [0148.212] EtwEventRegister () returned 0x0 [0148.238] GetCurrentProcess () returned 0xffffffff [0148.238] OpenProcessToken (in: ProcessHandle=0xffffffff, DesiredAccess=0x2000000, TokenHandle=0x31e4b4 | out: TokenHandle=0x31e4b4*=0x3a0) returned 1 [0148.239] GetCurrentProcess () returned 0xffffffff [0148.239] OpenProcessToken (in: ProcessHandle=0xffffffff, DesiredAccess=0x2000000, TokenHandle=0x31e4c4 | out: TokenHandle=0x31e4c4*=0x39c) returned 1 [0148.243] SetEvent (hEvent=0x2a0) returned 1 [0148.250] CoWaitForMultipleHandles (in: dwFlags=0x2, dwTimeout=0x0, cHandles=0x1, pHandles=0x31e734*=0x318, lpdwindex=0x31e554 | out: lpdwindex=0x31e554) returned 0x80010115 [0148.370] CallWindowProcW (lpPrevWndFunc=0x77c725dd, hWnd=0x3015c, Msg=0x219, wParam=0x7, lParam=0x0) returned 0x1 [0148.370] CallWindowProcW (lpPrevWndFunc=0x77c725dd, hWnd=0x30162, Msg=0x219, wParam=0x7, lParam=0x0) returned 0x1 [0148.372] NtdllDefWindowProc_W () returned 0x1 [0148.373] CoWaitForMultipleHandles (in: dwFlags=0x2, dwTimeout=0x0, cHandles=0x1, pHandles=0x31e714*=0x308, lpdwindex=0x31e534 | out: lpdwindex=0x31e534) returned 0x80010115 [0148.374] CoWaitForMultipleHandles (in: dwFlags=0x2, dwTimeout=0x0, cHandles=0x1, pHandles=0x31e714*=0x310, lpdwindex=0x31e534 | out: lpdwindex=0x31e534) returned 0x80010115 [0148.374] CoWaitForMultipleHandles (in: dwFlags=0x2, dwTimeout=0x0, cHandles=0x1, pHandles=0x31e768*=0x338, lpdwindex=0x31e584 | out: lpdwindex=0x31e584) returned 0x80010115 [0148.374] CoWaitForMultipleHandles (in: dwFlags=0x2, dwTimeout=0x0, cHandles=0x1, pHandles=0x31e768*=0x340, lpdwindex=0x31e584 | out: lpdwindex=0x31e584) returned 0x80010115 [0148.374] CoWaitForMultipleHandles (in: dwFlags=0x2, dwTimeout=0x0, cHandles=0x1, pHandles=0x31e768*=0x348, lpdwindex=0x31e584 | out: lpdwindex=0x31e584) returned 0x80010115 [0148.375] WinHttpGetProxyForUrl (in: hSession=0x41bef8, lpcwszUrl="https://cdn.discordapp.com/attachments/599226424695455755/798932401216552974/READ_ME.hta", pAutoProxyOptions=0x31e6f8, pProxyInfo=0x31e768 | out: pProxyInfo=0x31e768) returned 0 [0157.813] GetCurrentProcess () returned 0xffffffff [0157.813] OpenProcessToken (in: ProcessHandle=0xffffffff, DesiredAccess=0x2000000, TokenHandle=0x31e40c | out: TokenHandle=0x31e40c*=0x3dc) returned 1 [0157.814] GetCurrentProcess () returned 0xffffffff [0157.814] OpenProcessToken (in: ProcessHandle=0xffffffff, DesiredAccess=0x2000000, TokenHandle=0x31e41c | out: TokenHandle=0x31e41c*=0x3e4) returned 1 [0157.815] GetTimeZoneInformation (in: lpTimeZoneInformation=0x31e61c | out: lpTimeZoneInformation=0x31e61c) returned 0x2 [0157.817] GetDynamicTimeZoneInformation (in: pTimeZoneInformation=0x31e470 | out: pTimeZoneInformation=0x31e470) returned 0x2 [0157.817] RegOpenKeyExW (in: hKey=0x80000002, lpSubKey="SOFTWARE\\Microsoft\\Windows NT\\CurrentVersion\\Time Zones\\AUS Eastern Standard Time", ulOptions=0x0, samDesired=0x20019, phkResult=0x31e554 | out: phkResult=0x31e554*=0x3e8) returned 0x0 [0157.818] RegQueryValueExW (in: hKey=0x3e8, lpValueName="TZI", lpReserved=0x0, lpType=0x31e570, lpData=0x0, lpcbData=0x31e56c*=0x0 | out: lpType=0x31e570*=0x3, lpData=0x0, lpcbData=0x31e56c*=0x2c) returned 0x0 [0157.818] RegQueryValueExW (in: hKey=0x3e8, lpValueName="TZI", lpReserved=0x0, lpType=0x31e570, lpData=0x2ca0e40, lpcbData=0x31e56c*=0x2c | out: lpType=0x31e570*=0x3, lpData=0x2ca0e40*, lpcbData=0x31e56c*=0x2c) returned 0x0 [0157.818] RegOpenKeyExW (in: hKey=0x80000002, lpSubKey="SOFTWARE\\Microsoft\\Windows NT\\CurrentVersion\\Time Zones\\AUS Eastern Standard Time\\Dynamic DST", ulOptions=0x0, samDesired=0x20019, phkResult=0x31e3a8 | out: phkResult=0x31e3a8*=0x3ec) returned 0x0 [0157.818] RegQueryValueExW (in: hKey=0x3ec, lpValueName="FirstEntry", lpReserved=0x0, lpType=0x31e3c4, lpData=0x0, lpcbData=0x31e3c0*=0x0 | out: lpType=0x31e3c4*=0x4, lpData=0x0, lpcbData=0x31e3c0*=0x4) returned 0x0 [0157.818] RegQueryValueExW (in: hKey=0x3ec, lpValueName="FirstEntry", lpReserved=0x0, lpType=0x31e3c4, lpData=0x31e3b0, lpcbData=0x31e3c0*=0x4 | out: lpType=0x31e3c4*=0x4, lpData=0x31e3b0*=0x7d7, lpcbData=0x31e3c0*=0x4) returned 0x0 [0157.818] RegQueryValueExW (in: hKey=0x3ec, lpValueName="LastEntry", lpReserved=0x0, lpType=0x31e3c4, lpData=0x0, lpcbData=0x31e3c0*=0x0 | out: lpType=0x31e3c4*=0x4, lpData=0x0, lpcbData=0x31e3c0*=0x4) returned 0x0 [0157.818] RegQueryValueExW (in: hKey=0x3ec, lpValueName="LastEntry", lpReserved=0x0, lpType=0x31e3c4, lpData=0x31e3b0, lpcbData=0x31e3c0*=0x4 | out: lpType=0x31e3c4*=0x4, lpData=0x31e3b0*=0x7d8, lpcbData=0x31e3c0*=0x4) returned 0x0 [0157.819] RegQueryValueExW (in: hKey=0x3ec, lpValueName="2007", lpReserved=0x0, lpType=0x31e3c4, lpData=0x0, lpcbData=0x31e3c0*=0x0 | out: lpType=0x31e3c4*=0x3, lpData=0x0, lpcbData=0x31e3c0*=0x2c) returned 0x0 [0157.819] RegQueryValueExW (in: hKey=0x3ec, lpValueName="2007", lpReserved=0x0, lpType=0x31e3c4, lpData=0x2ca12d4, lpcbData=0x31e3c0*=0x2c | out: lpType=0x31e3c4*=0x3, lpData=0x2ca12d4*, lpcbData=0x31e3c0*=0x2c) returned 0x0 [0157.819] RegQueryValueExW (in: hKey=0x3ec, lpValueName="2008", lpReserved=0x0, lpType=0x31e3c4, lpData=0x0, lpcbData=0x31e3c0*=0x0 | out: lpType=0x31e3c4*=0x3, lpData=0x0, lpcbData=0x31e3c0*=0x2c) returned 0x0 [0157.819] RegQueryValueExW (in: hKey=0x3ec, lpValueName="2008", lpReserved=0x0, lpType=0x31e3c4, lpData=0x2ca1394, lpcbData=0x31e3c0*=0x2c | out: lpType=0x31e3c4*=0x3, lpData=0x2ca1394*, lpcbData=0x31e3c0*=0x2c) returned 0x0 [0157.819] RegCloseKey (hKey=0x3ec) returned 0x0 [0157.819] RegQueryValueExW (in: hKey=0x3e8, lpValueName="MUI_Display", lpReserved=0x0, lpType=0x31e548, lpData=0x0, lpcbData=0x31e544*=0x0 | out: lpType=0x31e548*=0x1, lpData=0x0, lpcbData=0x31e544*=0x20) returned 0x0 [0157.819] RegQueryValueExW (in: hKey=0x3e8, lpValueName="MUI_Display", lpReserved=0x0, lpType=0x31e548, lpData=0x2ca14dc, lpcbData=0x31e544*=0x20 | out: lpType=0x31e548*=0x1, lpData="@tzres.dll,-670", lpcbData=0x31e544*=0x20) returned 0x0 [0157.819] RegQueryValueExW (in: hKey=0x3e8, lpValueName="MUI_Std", lpReserved=0x0, lpType=0x31e548, lpData=0x0, lpcbData=0x31e544*=0x0 | out: lpType=0x31e548*=0x1, lpData=0x0, lpcbData=0x31e544*=0x20) returned 0x0 [0157.820] RegQueryValueExW (in: hKey=0x3e8, lpValueName="MUI_Std", lpReserved=0x0, lpType=0x31e548, lpData=0x2ca1534, lpcbData=0x31e544*=0x20 | out: lpType=0x31e548*=0x1, lpData="@tzres.dll,-672", lpcbData=0x31e544*=0x20) returned 0x0 [0157.820] RegQueryValueExW (in: hKey=0x3e8, lpValueName="MUI_Dlt", lpReserved=0x0, lpType=0x31e548, lpData=0x0, lpcbData=0x31e544*=0x0 | out: lpType=0x31e548*=0x1, lpData=0x0, lpcbData=0x31e544*=0x20) returned 0x0 [0157.820] RegQueryValueExW (in: hKey=0x3e8, lpValueName="MUI_Dlt", lpReserved=0x0, lpType=0x31e548, lpData=0x2ca158c, lpcbData=0x31e544*=0x20 | out: lpType=0x31e548*=0x1, lpData="@tzres.dll,-671", lpcbData=0x31e544*=0x20) returned 0x0 [0157.826] CoTaskMemAlloc (cb=0x20c) returned 0x5101c30 [0157.826] SHGetFolderPathW (in: hwnd=0x0, csidl=37, hToken=0x0, dwFlags=0x0, pszPath=0x5101c30 | out: pszPath="C:\\Windows\\system32") returned 0x0 [0157.827] CoTaskMemFree (pv=0x5101c30) [0157.827] CoTaskMemAlloc (cb=0x20c) returned 0x5101c30 [0157.827] GetFileMUIPath (in: dwFlags=0x10, pcwszFilePath="C:\\Windows\\system32\\tzres.dll", pwszLanguage=0x0, pcchLanguage=0x31e564, pwszFileMUIPath=0x5101c30, pcchFileMUIPath=0x31e568, pululEnumerator=0x31e55c | out: pwszLanguage=0x0, pcchLanguage=0x31e564, pwszFileMUIPath="C:\\Windows\\system32\\en-US\\tzres.dll.mui", pcchFileMUIPath=0x31e568, pululEnumerator=0x31e55c) returned 1 [0157.831] CoTaskMemFree (pv=0x0) [0157.831] CoTaskMemFree (pv=0x5101c30) [0157.831] LoadLibraryExW (lpLibFileName="C:\\Windows\\system32\\en-US\\tzres.dll.mui", hFile=0x0, dwFlags=0x2) returned 0x6f0001 [0157.835] CoTaskMemAlloc (cb=0x3ec) returned 0x5103810 [0157.835] LoadStringW (in: hInstance=0x6f0001, uID=0x29e, lpBuffer=0x5103810, cchBufferMax=500 | out: lpBuffer="(UTC+10:00) Canberra, Melbourne, Sydney") returned 0x27 [0157.835] CoTaskMemFree (pv=0x5103810) [0157.835] FreeLibrary (hLibModule=0x6f0001) returned 1 [0157.836] CoTaskMemAlloc (cb=0x20c) returned 0x5101c30 [0157.836] SHGetFolderPathW (in: hwnd=0x0, csidl=37, hToken=0x0, dwFlags=0x0, pszPath=0x5101c30 | out: pszPath="C:\\Windows\\system32") returned 0x0 [0157.836] CoTaskMemFree (pv=0x5101c30) [0157.836] CoTaskMemAlloc (cb=0x20c) returned 0x5101c30 [0157.836] GetFileMUIPath (in: dwFlags=0x10, pcwszFilePath="C:\\Windows\\system32\\tzres.dll", pwszLanguage=0x0, pcchLanguage=0x31e564, pwszFileMUIPath=0x5101c30, pcchFileMUIPath=0x31e568, pululEnumerator=0x31e55c | out: pwszLanguage=0x0, pcchLanguage=0x31e564, pwszFileMUIPath="C:\\Windows\\system32\\en-US\\tzres.dll.mui", pcchFileMUIPath=0x31e568, pululEnumerator=0x31e55c) returned 1 [0157.836] CoTaskMemFree (pv=0x0) [0157.836] CoTaskMemFree (pv=0x5101c30) [0157.836] LoadLibraryExW (lpLibFileName="C:\\Windows\\system32\\en-US\\tzres.dll.mui", hFile=0x0, dwFlags=0x2) returned 0x6f0001 [0157.837] CoTaskMemAlloc (cb=0x3ec) returned 0x5103810 [0157.837] LoadStringW (in: hInstance=0x6f0001, uID=0x2a0, lpBuffer=0x5103810, cchBufferMax=500 | out: lpBuffer="AUS Eastern Standard Time") returned 0x19 [0157.837] CoTaskMemFree (pv=0x5103810) [0157.837] FreeLibrary (hLibModule=0x6f0001) returned 1 [0157.837] CoTaskMemAlloc (cb=0x20c) returned 0x5101c30 [0157.837] SHGetFolderPathW (in: hwnd=0x0, csidl=37, hToken=0x0, dwFlags=0x0, pszPath=0x5101c30 | out: pszPath="C:\\Windows\\system32") returned 0x0 [0157.837] CoTaskMemFree (pv=0x5101c30) [0157.837] CoTaskMemAlloc (cb=0x20c) returned 0x5101c30 [0157.837] GetFileMUIPath (in: dwFlags=0x10, pcwszFilePath="C:\\Windows\\system32\\tzres.dll", pwszLanguage=0x0, pcchLanguage=0x31e564, pwszFileMUIPath=0x5101c30, pcchFileMUIPath=0x31e568, pululEnumerator=0x31e55c | out: pwszLanguage=0x0, pcchLanguage=0x31e564, pwszFileMUIPath="C:\\Windows\\system32\\en-US\\tzres.dll.mui", pcchFileMUIPath=0x31e568, pululEnumerator=0x31e55c) returned 1 [0157.838] CoTaskMemFree (pv=0x0) [0157.838] CoTaskMemFree (pv=0x5101c30) [0157.838] LoadLibraryExW (lpLibFileName="C:\\Windows\\system32\\en-US\\tzres.dll.mui", hFile=0x0, dwFlags=0x2) returned 0x6f0001 [0157.838] CoTaskMemAlloc (cb=0x3ec) returned 0x5103810 [0157.838] LoadStringW (in: hInstance=0x6f0001, uID=0x29f, lpBuffer=0x5103810, cchBufferMax=500 | out: lpBuffer="AUS Eastern Daylight Time") returned 0x19 [0157.838] CoTaskMemFree (pv=0x5103810) [0157.838] FreeLibrary (hLibModule=0x6f0001) returned 1 [0157.839] RegCloseKey (hKey=0x3e8) returned 0x0 [0157.839] SetEvent (hEvent=0x2a0) returned 1 [0157.848] GetNetworkParams (in: pFixedInfo=0x0, pOutBufLen=0x31e778 | out: pFixedInfo=0x0, pOutBufLen=0x31e778) returned 0x6f [0158.551] LocalAlloc (uFlags=0x0, uBytes=0x248) returned 0x41bfe8 [0158.551] GetNetworkParams (in: pFixedInfo=0x41bfe8, pOutBufLen=0x31e778 | out: pFixedInfo=0x41bfe8, pOutBufLen=0x31e778) returned 0x0 [0158.613] LocalFree (hMem=0x41bfe8) returned 0x0 [0158.613] CoTaskMemAlloc (cb=0x20c) returned 0x5101c30 [0158.613] GetEnvironmentVariableW (in: lpName="PinnableBufferCache_System.Net.Connection_Disabled", lpBuffer=0x5101c30, nSize=0x104 | out: lpBuffer="뿨Aᓐ9က") returned 0x0 [0158.614] CoTaskMemFree (pv=0x5101c30) [0158.614] CoTaskMemAlloc (cb=0x20c) returned 0x5101c30 [0158.614] GetEnvironmentVariableW (in: lpName="PinnableBufferCache_System.Net.Connection_MinCount", lpBuffer=0x5101c30, nSize=0x104 | out: lpBuffer="뿨Aᓐ9က") returned 0x0 [0158.614] CoTaskMemFree (pv=0x5101c30) [0158.616] WSASocketW (af=2, type=1, protocol=6, lpProtocolInfo=0x0, g=0x0, dwFlags=0x1) returned 0x3fc [0158.618] WSASocketW (af=23, type=1, protocol=6, lpProtocolInfo=0x0, g=0x0, dwFlags=0x1) returned 0x3f8 [0158.619] GetAddrInfoW (in: pNodeName="cdn.discordapp.com", pServiceName=0x0, pHints=0x31e668*(ai_flags=2, ai_family=0, ai_socktype=0, ai_protocol=0, ai_addrlen=0x0, ai_canonname=0x0, ai_addr=0x0, ai_next=0x0), ppResult=0x31e610 | out: ppResult=0x31e610*=0x64a4990*(ai_flags=0, ai_family=2, ai_socktype=0, ai_protocol=0, ai_addrlen=0x10, ai_canonname="cdn.discordapp.com", ai_addr=0x64a4a80*(sa_family=2, sin_port=0x0, sin_addr="162.159.135.233"), ai_next=0x64a49b8*(ai_flags=0, ai_family=2, ai_socktype=0, ai_protocol=0, ai_addrlen=0x10, ai_canonname=0x0, ai_addr=0x64a49e0*(sa_family=2, sin_port=0x0, sin_addr="162.159.134.233"), ai_next=0x64a49f8*(ai_flags=0, ai_family=2, ai_socktype=0, ai_protocol=0, ai_addrlen=0x10, ai_canonname=0x0, ai_addr=0x64a4b90*(sa_family=2, sin_port=0x0, sin_addr="162.159.129.233"), ai_next=0x64a4ba8*(ai_flags=0, ai_family=2, ai_socktype=0, ai_protocol=0, ai_addrlen=0x10, ai_canonname=0x0, ai_addr=0x64a4bd0*(sa_family=2, sin_port=0x0, sin_addr="162.159.130.233"), ai_next=0x64a4be8*(ai_flags=0, ai_family=2, ai_socktype=0, ai_protocol=0, ai_addrlen=0x10, ai_canonname=0x0, ai_addr=0x64a4c10*(sa_family=2, sin_port=0x0, sin_addr="162.159.133.233"), ai_next=0x0)))))) returned 0 [0159.000] FreeAddrInfoW (pAddrInfo=0x64a4990*(ai_flags=0, ai_family=2, ai_socktype=0, ai_protocol=0, ai_addrlen=0x10, ai_canonname="cdn.discordapp.com", ai_addr=0x64a4a80*(sa_family=2, sin_port=0x0, sin_addr="162.159.135.233"), ai_next=0x64a49b8*(ai_flags=0, ai_family=2, ai_socktype=0, ai_protocol=0, ai_addrlen=0x10, ai_canonname=0x0, ai_addr=0x64a49e0*(sa_family=2, sin_port=0x0, sin_addr="162.159.134.233"), ai_next=0x64a49f8*(ai_flags=0, ai_family=2, ai_socktype=0, ai_protocol=0, ai_addrlen=0x10, ai_canonname=0x0, ai_addr=0x64a4b90*(sa_family=2, sin_port=0x0, sin_addr="162.159.129.233"), ai_next=0x64a4ba8*(ai_flags=0, ai_family=2, ai_socktype=0, ai_protocol=0, ai_addrlen=0x10, ai_canonname=0x0, ai_addr=0x64a4bd0*(sa_family=2, sin_port=0x0, sin_addr="162.159.130.233"), ai_next=0x64a4be8*(ai_flags=0, ai_family=2, ai_socktype=0, ai_protocol=0, ai_addrlen=0x10, ai_canonname=0x0, ai_addr=0x64a4c10*(sa_family=2, sin_port=0x0, sin_addr="162.159.133.233"), ai_next=0x0)))))) [0159.003] WSASocketW (af=2, type=2, protocol=0, lpProtocolInfo=0x0, g=0x0, dwFlags=0x1) returned 0x408 [0159.003] CreateEventW (lpEventAttributes=0x0, bManualReset=0, bInitialState=0, lpName=0x0) returned 0x410 [0159.003] ioctlsocket (in: s=0x408, cmd=-2147195266, argp=0x31e640 | out: argp=0x31e640) returned 0 [0159.003] WSASocketW (af=23, type=2, protocol=0, lpProtocolInfo=0x0, g=0x0, dwFlags=0x1) returned 0x414 [0159.003] CreateEventW (lpEventAttributes=0x0, bManualReset=0, bInitialState=0, lpName=0x0) returned 0x418 [0159.003] ioctlsocket (in: s=0x414, cmd=-2147195266, argp=0x31e640 | out: argp=0x31e640) returned 0 [0159.003] WSAIoctl (in: s=0x408, dwIoControlCode=0x28000017, lpvInBuffer=0x0, cbInBuffer=0x0, lpvOutBuffer=0x0, cbOutBuffer=0x0, lpcbBytesReturned=0x31e628, lpOverlapped=0x0, lpCompletionRoutine=0x0 | out: lpvOutBuffer=0x0, lpcbBytesReturned=0x31e628, lpOverlapped=0x0) returned -1 [0159.004] FormatMessageW (in: dwFlags=0x3200, lpSource=0x0, dwMessageId=0x2733, dwLanguageId=0x0, lpBuffer=0x31e358, nSize=0x101, Arguments=0x0 | out: lpBuffer="A non-blocking socket operation could not be completed immediately.\r\n") returned 0x45 [0159.004] WSAEventSelect (s=0x408, hEventObject=0x410, lNetworkEvents=512) returned 0 [0159.004] WSAIoctl (in: s=0x414, dwIoControlCode=0x28000017, lpvInBuffer=0x0, cbInBuffer=0x0, lpvOutBuffer=0x0, cbOutBuffer=0x0, lpcbBytesReturned=0x31e628, lpOverlapped=0x0, lpCompletionRoutine=0x0 | out: lpvOutBuffer=0x0, lpcbBytesReturned=0x31e628, lpOverlapped=0x0) returned -1 [0159.004] FormatMessageW (in: dwFlags=0x3200, lpSource=0x0, dwMessageId=0x2733, dwLanguageId=0x0, lpBuffer=0x31e358, nSize=0x101, Arguments=0x0 | out: lpBuffer="A non-blocking socket operation could not be completed immediately.\r\n") returned 0x45 [0159.004] WSAEventSelect (s=0x414, hEventObject=0x418, lNetworkEvents=512) returned 0 [0159.004] GetAdaptersAddresses (in: Family=0x0, Flags=0x2e, Reserved=0x0, AdapterAddresses=0x0, SizePointer=0x31e624*=0x0 | out: AdapterAddresses=0x0, SizePointer=0x31e624*=0xa5c) returned 0x6f [0159.009] LocalAlloc (uFlags=0x0, uBytes=0xa5c) returned 0x41cdf8 [0159.009] GetAdaptersAddresses (in: Family=0x0, Flags=0x2e, Reserved=0x0, AdapterAddresses=0x41cdf8, SizePointer=0x31e624*=0xa5c | out: AdapterAddresses=0x41cdf8*(Alignment=0xe00000178, Length=0x178, IfIndex=0xe, Next=0x41d0bc, AdapterName="{208C2C2F-ECA0-4B34-8C2D-83B1FBC25E0D}", FirstUnicastAddress=0x41d030, FirstAnycastAddress=0x0, FirstMulticastAddress=0x0, FirstDnsServerAddress=0x0, DnsSuffix="", Description="Intel(R) PRO/1000 MT Network Connection #2", FriendlyName="Local Area Connection 2", PhysicalAddress=([0]=0x0, [1]=0x21, [2]=0x42, [3]=0xa, [4]=0xcb, [5]=0x7c, [6]=0x0, [7]=0x0), PhysicalAddressLength=0x6, Flags=0x3e5, DdnsEnabled=0x3e5, RegisterAdapterSuffix=0x3e5, Dhcpv4Enabled=0x3e5, ReceiveOnly=0x3e5, NoMulticast=0x3e5, Ipv6OtherStatefulConfig=0x3e5, NetbiosOverTcpipEnabled=0x3e5, Ipv4Enabled=0x3e5, Ipv6Enabled=0x3e5, Ipv6ManagedAddressConfigurationSupported=0x3e5, Mtu=0x5dc, IfType=0x6, OperStatus=0x1, Ipv6IfIndex=0xe, ZoneIndices=([0]=0xe, [1]=0xe, [2]=0xe, [3]=0xe, [4]=0x1, [5]=0x1, [6]=0x1, [7]=0x1, [8]=0x1, [9]=0x1, [10]=0x1, [11]=0x1, [12]=0x1, [13]=0x1, [14]=0x0, [15]=0x1), FirstPrefix=0x0, TransmitLinkSpeed=0x3b9aca00, ReceiveLinkSpeed=0x3b9aca00, FirstWinsServerAddress=0x0, FirstGatewayAddress=0x0, Ipv4Metric=0xa, Ipv6Metric=0xa, Luid=0x6000007000000, Dhcpv4Server.lpSockaddr=0x41cf70*(sa_family=2, sin_port=0x0, sin_addr="192.168.0.1"), Dhcpv4Server.iSockaddrLength=16, CompartmentId=0x1, NetworkGuid=0x11de7039846ee341, ConnectionType=0x1, TunnelType=0x0, Dhcpv6Server.lpSockaddr=0x0, Dhcpv6Server.iSockaddrLength=0, Dhcpv6ClientDuid=([0]=0x0, [1]=0x1, [2]=0x0, [3]=0x1, [4]=0x20, [5]=0xc7, [6]=0x5c, [7]=0xa7, [8]=0xc4, [9]=0x3d, [10]=0xc7, [11]=0x58, [12]=0x4a, [13]=0x0, [14]=0x0, [15]=0x0, [16]=0x0, [17]=0x0, [18]=0x0, [19]=0x0, [20]=0x0, [21]=0x0, [22]=0x0, [23]=0x0, [24]=0x0, [25]=0x0, [26]=0x0, [27]=0x0, [28]=0x0, [29]=0x0, [30]=0x0, [31]=0x0, [32]=0x0, [33]=0x0, [34]=0x0, [35]=0x0, [36]=0x0, [37]=0x0, [38]=0x0, [39]=0x0, [40]=0x0, [41]=0x0, [42]=0x0, [43]=0x0, [44]=0x0, [45]=0x0, [46]=0x0, [47]=0x0, [48]=0x0, [49]=0x0, [50]=0x0, [51]=0x0, [52]=0x0, [53]=0x0, [54]=0x0, [55]=0x0, [56]=0x0, [57]=0x0, [58]=0x0, [59]=0x0, [60]=0x0, [61]=0x0, [62]=0x0, [63]=0x0, [64]=0x0, [65]=0x0, [66]=0x0, [67]=0x0, [68]=0x0, [69]=0x0, [70]=0x0, [71]=0x0, [72]=0x0, [73]=0x0, [74]=0x0, [75]=0x0, [76]=0x0, [77]=0x0, [78]=0x0, [79]=0x0, [80]=0x0, [81]=0x0, [82]=0x0, [83]=0x0, [84]=0x0, [85]=0x0, [86]=0x0, [87]=0x0, [88]=0x0, [89]=0x0, [90]=0x0, [91]=0x0, [92]=0x0, [93]=0x0, [94]=0x0, [95]=0x0, [96]=0x0, [97]=0x0, [98]=0x0, [99]=0x0, [100]=0x0, [101]=0x0, [102]=0x0, [103]=0x0, [104]=0x0, [105]=0x0, [106]=0x0, [107]=0x0, [108]=0x0, [109]=0x0, [110]=0x0, [111]=0x0, [112]=0x0, [113]=0x0, [114]=0x0, [115]=0x0, [116]=0x0, [117]=0x0, [118]=0x0, [119]=0x0, [120]=0x0, [121]=0x0, [122]=0x0, [123]=0x0, [124]=0x0, [125]=0x0, [126]=0x0, [127]=0x0, [128]=0x0, [129]=0x0), Dhcpv6ClientDuidLength=0xe, Dhcpv6Iaid=0x11c43dc7, FirstDnsSuffix=0x0), SizePointer=0x31e624*=0xa5c) returned 0x0 [0159.018] LocalFree (hMem=0x41cdf8) returned 0x0 [0159.020] RegOpenKeyExW (in: hKey=0x80000002, lpSubKey="SOFTWARE\\Microsoft\\.NETFramework\\v4.0.30319", ulOptions=0x0, samDesired=0x20019, phkResult=0x31e638 | out: phkResult=0x31e638*=0x41c) returned 0x0 [0159.021] RegQueryValueExW (in: hKey=0x41c, lpValueName="HWRPortReuseOnSocketBind", lpReserved=0x0, lpType=0x31e654, lpData=0x0, lpcbData=0x31e650*=0x0 | out: lpType=0x31e654*=0x0, lpData=0x0, lpcbData=0x31e650*=0x0) returned 0x2 [0159.021] RegCloseKey (hKey=0x41c) returned 0x0 [0159.022] WSAConnect (in: s=0x3fc, name=0x2cadb70*(sa_family=2, sin_port=0x1bb, sin_addr="162.159.135.233"), namelen=16, lpCallerData=0x0, lpCalleeData=0x0, lpSQOS=0x0, lpGQOS=0x0 | out: lpCalleeData=0x0) returned 0 [0159.050] closesocket (s=0x3f8) returned 0 [0159.069] RegOpenKeyExW (in: hKey=0x80000002, lpSubKey="SOFTWARE\\Microsoft\\.NETFramework\\AppContext", ulOptions=0x0, samDesired=0x20019, phkResult=0x31d790 | out: phkResult=0x31d790*=0x0) returned 0x2 [0159.071] RegOpenKeyExW (in: hKey=0x80000002, lpSubKey="SOFTWARE\\Microsoft\\.NETFramework\\v4.0.30319", ulOptions=0x0, samDesired=0x20019, phkResult=0x31e5ac | out: phkResult=0x31e5ac*=0x3f8) returned 0x0 [0159.071] RegQueryValueExW (in: hKey=0x3f8, lpValueName="SchUseStrongCrypto", lpReserved=0x0, lpType=0x31e5c8, lpData=0x0, lpcbData=0x31e5c4*=0x0 | out: lpType=0x31e5c8*=0x0, lpData=0x0, lpcbData=0x31e5c4*=0x0) returned 0x2 [0159.072] RegCloseKey (hKey=0x3f8) returned 0x0 [0159.074] GetCurrentProcessId () returned 0xab4 [0159.075] OpenProcess (dwDesiredAccess=0x410, bInheritHandle=0, dwProcessId=0xab4) returned 0x3f8 [0159.083] EnumProcessModules (in: hProcess=0x3f8, lphModule=0x2cb08c4, cb=0x100, lpcbNeeded=0x31e5b4 | out: lphModule=0x2cb08c4, lpcbNeeded=0x31e5b4) returned 1 [0159.084] GetModuleInformation (in: hProcess=0x3f8, hModule=0x1200000, lpmodinfo=0x2cb0a04, cb=0xc | out: lpmodinfo=0x2cb0a04*(lpBaseOfDll=0x1200000, SizeOfImage=0xc000, EntryPoint=0x120630a)) returned 1 [0159.085] CoTaskMemAlloc (cb=0x804) returned 0x5103810 [0159.085] GetModuleBaseNameW (in: hProcess=0x3f8, hModule=0x1200000, lpBaseName=0x5103810, nSize=0x800 | out: lpBaseName="B221.exe") returned 0x8 [0159.085] CoTaskMemFree (pv=0x5103810) [0159.085] CoTaskMemAlloc (cb=0x804) returned 0x5103810 [0159.085] GetModuleFileNameExW (in: hProcess=0x3f8, hModule=0x1200000, lpFilename=0x5103810, nSize=0x800 | out: lpFilename="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\B221.exe" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\b221.exe")) returned 0x2e [0159.085] CoTaskMemFree (pv=0x5103810) [0159.086] CloseHandle (hObject=0x3f8) returned 1 [0159.086] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\B221.exe", nBufferLength=0x105, lpBuffer=0x31e104, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\B221.exe", lpFilePart=0x0) returned 0x2e [0159.086] RegOpenKeyExW (in: hKey=0x80000002, lpSubKey="SOFTWARE\\Microsoft\\.NETFramework\\v4.0.30319\\System.Net.ServicePointManager.SecurityProtocol", ulOptions=0x0, samDesired=0x20019, phkResult=0x31e5ac | out: phkResult=0x31e5ac*=0x0) returned 0x2 [0159.143] EnumerateSecurityPackagesW (in: pcPackages=0x31e5b8, ppPackageInfo=0x31e54c | out: pcPackages=0x31e5b8, ppPackageInfo=0x31e54c) returned 0x0 [0159.147] FreeContextBuffer (in: pvContextBuffer=0x41c3b8 | out: pvContextBuffer=0x41c3b8) returned 0x0 [0159.152] GetCurrentProcess () returned 0xffffffff [0159.152] OpenProcessToken (in: ProcessHandle=0xffffffff, DesiredAccess=0x2000000, TokenHandle=0x31e398 | out: TokenHandle=0x31e398*=0x3f8) returned 1 [0159.153] AcquireCredentialsHandleW (in: pPrincipal=0x0, pPackage=0x2cb300c, fCredentialUse=0x2, pvLogonId=0x0, pAuthData=0x31e3ec, pGetKeyFn=0x0, pvGetKeyArgument=0x0, phCredential=0x2cb4598, ptsExpiry=0x31e370 | out: phCredential=0x2cb4598, ptsExpiry=0x31e370) returned 0x0 [0159.645] InitializeSecurityContextW (in: phCredential=0x31e3b0, phContext=0x0, pTargetName=0x2cadc6c, fContextReq=0x8011c, Reserved1=0x0, TargetDataRep=0x10, pInput=0x0, Reserved2=0x0, phNewContext=0x2cb479c, pOutput=0x2cb4734, pfContextAttr=0x2cb2fe0, ptsExpiry=0x31e3a8 | out: phNewContext=0x2cb479c, pOutput=0x2cb4734, pfContextAttr=0x2cb2fe0, ptsExpiry=0x31e3a8) returned 0x90312 [0159.647] FreeContextBuffer (in: pvContextBuffer=0x41c580 | out: pvContextBuffer=0x41c580) returned 0x0 [0159.648] send (s=0x3fc, buf=0x2cb47b0*, len=160, flags=0) returned 160 [0159.650] recv (in: s=0x3fc, buf=0x2cb47b0, len=5, flags=0 | out: buf=0x2cb47b0*) returned 5 [0159.677] recv (in: s=0x3fc, buf=0x2cb47b5, len=91, flags=0 | out: buf=0x2cb47b5*) returned 91 [0159.678] InitializeSecurityContextW (in: phCredential=0x31e314, phContext=0x31e3a0, pTargetName=0x2cadc6c, fContextReq=0x8011c, Reserved1=0x0, TargetDataRep=0x10, pInput=0x2cb4a10, Reserved2=0x0, phNewContext=0x2cb479c, pOutput=0x2cb4a24, pfContextAttr=0x2cb2fe0, ptsExpiry=0x31e30c | out: phNewContext=0x2cb479c, pOutput=0x2cb4a24, pfContextAttr=0x2cb2fe0, ptsExpiry=0x31e30c) returned 0x90312 [0159.681] recv (in: s=0x3fc, buf=0x2cb4ab4, len=5, flags=0 | out: buf=0x2cb4ab4*) returned 5 [0159.681] recv (in: s=0x3fc, buf=0x2cb4acd, len=3141, flags=0 | out: buf=0x2cb4acd*) returned 3141 [0159.681] InitializeSecurityContextW (in: phCredential=0x31e27c, phContext=0x31e308, pTargetName=0x2cadc6c, fContextReq=0x8011c, Reserved1=0x0, TargetDataRep=0x10, pInput=0x2cb5784, Reserved2=0x0, phNewContext=0x2cb479c, pOutput=0x2cb5798, pfContextAttr=0x2cb2fe0, ptsExpiry=0x31e274 | out: phNewContext=0x2cb479c, pOutput=0x2cb5798, pfContextAttr=0x2cb2fe0, ptsExpiry=0x31e274) returned 0x90312 [0159.685] recv (in: s=0x3fc, buf=0x2cb5828, len=5, flags=0 | out: buf=0x2cb5828*) returned 5 [0159.685] recv (in: s=0x3fc, buf=0x2cb5841, len=149, flags=0 | out: buf=0x2cb5841*) returned 149 [0159.685] InitializeSecurityContextW (in: phCredential=0x31e1e4, phContext=0x31e270, pTargetName=0x2cadc6c, fContextReq=0x8011c, Reserved1=0x0, TargetDataRep=0x10, pInput=0x2cb5948, Reserved2=0x0, phNewContext=0x2cb479c, pOutput=0x2cb595c, pfContextAttr=0x2cb2fe0, ptsExpiry=0x31e1dc | out: phNewContext=0x2cb479c, pOutput=0x2cb595c, pfContextAttr=0x2cb2fe0, ptsExpiry=0x31e1dc) returned 0x90312 [0159.686] recv (in: s=0x3fc, buf=0x2cb59ec, len=5, flags=0 | out: buf=0x2cb59ec*) returned 5 [0159.686] recv (in: s=0x3fc, buf=0x2cb5a05, len=4, flags=0 | out: buf=0x2cb5a05*) returned 4 [0159.686] InitializeSecurityContextW (in: phCredential=0x31e14c, phContext=0x31e1d8, pTargetName=0x2cadc6c, fContextReq=0x8011c, Reserved1=0x0, TargetDataRep=0x10, pInput=0x2cb5a7c, Reserved2=0x0, phNewContext=0x2cb479c, pOutput=0x2cb5a90, pfContextAttr=0x2cb2fe0, ptsExpiry=0x31e144 | out: phNewContext=0x2cb479c, pOutput=0x2cb5a90, pfContextAttr=0x2cb2fe0, ptsExpiry=0x31e144) returned 0x90312 [0159.708] FreeContextBuffer (in: pvContextBuffer=0x392d40 | out: pvContextBuffer=0x392d40) returned 0x0 [0159.708] send (s=0x3fc, buf=0x2cb5b0c*, len=126, flags=0) returned 126 [0159.708] recv (in: s=0x3fc, buf=0x2cb5b0c, len=5, flags=0 | out: buf=0x2cb5b0c*) returned 5 [0159.733] recv (in: s=0x3fc, buf=0x2cb5b11, len=1, flags=0 | out: buf=0x2cb5b11*) returned 1 [0159.733] InitializeSecurityContextW (in: phCredential=0x31e0b4, phContext=0x31e140, pTargetName=0x2cadc6c, fContextReq=0x8011c, Reserved1=0x0, TargetDataRep=0x10, pInput=0x2cb5c10, Reserved2=0x0, phNewContext=0x2cb479c, pOutput=0x2cb5c24, pfContextAttr=0x2cb2fe0, ptsExpiry=0x31e0ac | out: phNewContext=0x2cb479c, pOutput=0x2cb5c24, pfContextAttr=0x2cb2fe0, ptsExpiry=0x31e0ac) returned 0x90312 [0159.733] recv (in: s=0x3fc, buf=0x2cb5cb4, len=5, flags=0 | out: buf=0x2cb5cb4*) returned 5 [0159.733] recv (in: s=0x3fc, buf=0x2cb5ccd, len=40, flags=0 | out: buf=0x2cb5ccd*) returned 40 [0159.733] InitializeSecurityContextW (in: phCredential=0x31e01c, phContext=0x31e0a8, pTargetName=0x2cadc6c, fContextReq=0x8011c, Reserved1=0x0, TargetDataRep=0x10, pInput=0x2cb5d68, Reserved2=0x0, phNewContext=0x2cb479c, pOutput=0x2cb5d7c, pfContextAttr=0x2cb2fe0, ptsExpiry=0x31e014 | out: phNewContext=0x2cb479c, pOutput=0x2cb5d7c, pfContextAttr=0x2cb2fe0, ptsExpiry=0x31e014) returned 0x0 [0159.954] QueryContextAttributesW (in: phContext=0x2cb479c, ulAttribute=0x4, pBuffer=0x2cb5e28 | out: pBuffer=0x2cb5e28) returned 0x0 [0159.956] QueryContextAttributesW (in: phContext=0x2cb479c, ulAttribute=0x5a, pBuffer=0x2cb5e80 | out: pBuffer=0x2cb5e80) returned 0x0 [0159.962] QueryContextAttributesW (in: phContext=0x2cb479c, ulAttribute=0x53, pBuffer=0x2cb6134 | out: pBuffer=0x2cb6134) returned 0x0 [0159.979] CertDuplicateCRLContext (pCrlContext=0x50fd328) returned 0x50fd328 [0159.980] CertDuplicateStore (hCertStore=0x5107810) returned 0x5107810 [0159.980] CertEnumCertificatesInStore (hCertStore=0x5107810, pPrevCertContext=0x0) returned 0x50fd3c8 [0159.980] CertDuplicateCRLContext (pCrlContext=0x50fd3c8) returned 0x50fd3c8 [0159.980] CertEnumCertificatesInStore (hCertStore=0x5107810, pPrevCertContext=0x50fd3c8) returned 0x50fd378 [0159.980] CertDuplicateCRLContext (pCrlContext=0x50fd378) returned 0x50fd378 [0159.980] CertEnumCertificatesInStore (hCertStore=0x5107810, pPrevCertContext=0x50fd378) returned 0x50fd328 [0159.980] CertDuplicateCRLContext (pCrlContext=0x50fd328) returned 0x50fd328 [0159.981] CertEnumCertificatesInStore (hCertStore=0x5107810, pPrevCertContext=0x50fd328) returned 0x0 [0159.981] CertCloseStore (hCertStore=0x5107810, dwFlags=0x0) returned 1 [0159.981] CertFreeCRLContext (pCrlContext=0x50fd328) returned 1 [0159.989] CertOpenStore (lpszStoreProvider=0x2, dwEncodingType=0x10001, hCryptProv=0x0, dwFlags=0x2204, pvPara=0x0) returned 0x50fd588 [0160.049] CertAddCRLLinkToStore (in: hCertStore=0x50fd588, pCrlContext=0x50fd3c8, dwAddDisposition=0x4, ppStoreContext=0x0 | out: ppStoreContext=0x0) returned 1 [0160.050] CertAddCRLLinkToStore (in: hCertStore=0x50fd588, pCrlContext=0x50fd378, dwAddDisposition=0x4, ppStoreContext=0x0 | out: ppStoreContext=0x0) returned 1 [0160.050] CertAddCRLLinkToStore (in: hCertStore=0x50fd588, pCrlContext=0x50fd328, dwAddDisposition=0x4, ppStoreContext=0x0 | out: ppStoreContext=0x0) returned 1 [0160.053] CertGetCertificateChain (in: hChainEngine=0x0, pCertContext=0x50fd328, pTime=0x31e028, hAdditionalStore=0x50fd588, pChainPara=0x31df68, dwFlags=0x0, pvReserved=0x0, ppChainContext=0x31df5c | out: ppChainContext=0x31df5c) returned 1 [0163.636] CertDuplicateCertificateChain (pChainContext=0x5135218) returned 0x5135218 [0163.637] CertDuplicateCRLContext (pCrlContext=0x50fd328) returned 0x50fd328 [0163.637] CertDuplicateCRLContext (pCrlContext=0x75bd360) returned 0x75bd360 [0163.637] CertDuplicateCRLContext (pCrlContext=0x75bd3b0) returned 0x75bd3b0 [0163.637] CertFreeCertificateChain (pChainContext=0x5135218) [0163.637] CertVerifyCertificateChainPolicy (in: pszPolicyOID=0x1, pChainContext=0x5135218, pPolicyPara=0x31e108, pPolicyStatus=0x31e0f4 | out: pPolicyStatus=0x31e0f4) returned 1 [0163.638] SetLastError (dwErrCode=0x0) [0163.640] CertVerifyCertificateChainPolicy (in: pszPolicyOID=0x4, pChainContext=0x5135218, pPolicyPara=0x31e174, pPolicyStatus=0x31e11c | out: pPolicyStatus=0x31e11c) returned 1 [0163.642] CertFreeCertificateChain (pChainContext=0x5135218) [0163.643] CertFreeCRLContext (pCrlContext=0x50fd328) returned 1 [0163.646] CoTaskMemAlloc (cb=0x20c) returned 0x51d4b78 [0163.646] GetEnvironmentVariableW (in: lpName="PinnableBufferCache_System.Net.SslStream_Disabled", lpBuffer=0x51d4b78, nSize=0x104 | out: lpBuffer="蠐ݝ핐ԑ烗錱쵄阆瞿貰뙺爀ఆ襗틨瞒畈鿤宐烗錱쵄阆瞿貰뙺爀ఆ襗틨") returned 0x0 [0163.646] CoTaskMemFree (pv=0x51d4b78) [0163.646] CoTaskMemAlloc (cb=0x20c) returned 0x51d4b78 [0163.646] GetEnvironmentVariableW (in: lpName="PinnableBufferCache_System.Net.SslStream_MinCount", lpBuffer=0x51d4b78, nSize=0x104 | out: lpBuffer="蠐ݝ핐ԑ烗錱쵄阆瞿貰뙺爀ఆ襗틨瞒畈鿤宐烗錱쵄阆瞿貰뙺爀ఆ襗틨") returned 0x0 [0163.646] CoTaskMemFree (pv=0x51d4b78) [0163.646] CoTaskMemAlloc (cb=0x20c) returned 0x51d4b78 [0163.646] GetEnvironmentVariableW (in: lpName="PinnableBufferCache_System.Net.SslStream_Disabled", lpBuffer=0x51d4b78, nSize=0x104 | out: lpBuffer="蠐ݝ핐ԑ烗錱쵄阆瞿貰뙺爀ఆ襗틨瞒畈鿤宐烗錱쵄阆瞿貰뙺爀ఆ襗틨") returned 0x0 [0163.646] CoTaskMemFree (pv=0x51d4b78) [0163.646] CoTaskMemAlloc (cb=0x20c) returned 0x51d4b78 [0163.646] GetEnvironmentVariableW (in: lpName="PinnableBufferCache_System.Net.SslStream_MinCount", lpBuffer=0x51d4b78, nSize=0x104 | out: lpBuffer="蠐ݝ핐ԑ烗錱쵄阆瞿貰뙺爀ఆ襗틨瞒畈鿤宐烗錱쵄阆瞿貰뙺爀ఆ襗틨") returned 0x0 [0163.647] CoTaskMemFree (pv=0x51d4b78) [0163.648] EncryptMessage (in: phContext=0x2cb479c, fQOP=0x0, pMessage=0x2cbe274, MessageSeqNo=0x0 | out: pMessage=0x2cbe274) returned 0x0 [0163.650] send (s=0x3fc, buf=0x2cbcd4c*, len=158, flags=0) returned 158 [0163.651] setsockopt (s=0x3fc, level=65535, optname=4102, optval=" \x86\x01", optlen=4) returned 0 [0163.652] recv (in: s=0x3fc, buf=0x2cca584, len=5, flags=0 | out: buf=0x2cca584*) returned 5 [0163.704] recv (in: s=0x3fc, buf=0x2cca589, len=1393, flags=0 | out: buf=0x2cca589*) returned 1393 [0163.705] DecryptMessage (in: phContext=0x2cb479c, pMessage=0x2cce644, MessageSeqNo=0x0, pfQOP=0x0 | out: pMessage=0x2cce644, pfQOP=0x0) returned 0x0 [0163.711] recv (in: s=0x3fc, buf=0x2cca584, len=5, flags=0 | out: buf=0x2cca584*) returned 5 [0163.711] recv (in: s=0x3fc, buf=0x2cca589, len=1393, flags=0 | out: buf=0x2cca589*) returned 1393 [0163.711] DecryptMessage (in: phContext=0x2cb479c, pMessage=0x2cd0e1c, MessageSeqNo=0x0, pfQOP=0x0 | out: pMessage=0x2cd0e1c, pfQOP=0x0) returned 0x0 [0163.717] setsockopt (s=0x3fc, level=65535, optname=4102, optval="à\x93\x04", optlen=4) returned 0 [0163.718] recv (in: s=0x3fc, buf=0x2cca584, len=5, flags=0 | out: buf=0x2cca584*) returned 5 [0163.718] recv (in: s=0x3fc, buf=0x2cca589, len=1393, flags=0 | out: buf=0x2cca589*) returned 1393 [0163.718] DecryptMessage (in: phContext=0x2cb479c, pMessage=0x2cd37a4, MessageSeqNo=0x0, pfQOP=0x0 | out: pMessage=0x2cd37a4, pfQOP=0x0) returned 0x0 [0163.718] recv (in: s=0x3fc, buf=0x2cca584, len=5, flags=0 | out: buf=0x2cca584*) returned 5 [0163.718] recv (in: s=0x3fc, buf=0x2cca589, len=1067, flags=0 | out: buf=0x2cca589*) returned 1067 [0163.718] DecryptMessage (in: phContext=0x2cb479c, pMessage=0x2cd38b8, MessageSeqNo=0x0, pfQOP=0x0 | out: pMessage=0x2cd38b8, pfQOP=0x0) returned 0x0 [0163.718] SetEvent (hEvent=0x2a0) returned 1 [0163.723] GetFullPathNameW (in: lpFileName="Startup\\READ_ME.hta", nBufferLength=0x105, lpBuffer=0x31e500, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\Startup\\READ_ME.hta", lpFilePart=0x0) returned 0x39 [0163.723] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e960) returned 1 [0163.723] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\Startup\\READ_ME.hta" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\startup\\read_me.hta"), fInfoLevelId=0x0, lpFileInformation=0x31e9dc | out: lpFileInformation=0x31e9dc*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0 [0163.724] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e95c) returned 1 [0163.724] CoTaskMemAlloc (cb=0x20c) returned 0x51d4b78 [0163.724] SHGetFolderPathW (in: hwnd=0x0, csidl=7, hToken=0x0, dwFlags=0x0, pszPath=0x51d4b78 | out: pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Start Menu\\Programs\\Startup") returned 0x0 [0163.725] CoTaskMemFree (pv=0x51d4b78) [0163.725] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Start Menu\\Programs\\Startup", nBufferLength=0x105, lpBuffer=0x31e46c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Start Menu\\Programs\\Startup", lpFilePart=0x0) returned 0x5b [0163.734] GetCurrentProcessId () returned 0xab4 [0163.734] OpenProcess (dwDesiredAccess=0x410, bInheritHandle=0, dwProcessId=0xab4) returned 0x5e8 [0163.734] EnumProcessModules (in: hProcess=0x5e8, lphModule=0x2cd5d00, cb=0x100, lpcbNeeded=0x31e96c | out: lphModule=0x2cd5d00, lpcbNeeded=0x31e96c) returned 1 [0163.735] EnumProcessModules (in: hProcess=0x5e8, lphModule=0x2cd5e0c, cb=0x200, lpcbNeeded=0x31e96c | out: lphModule=0x2cd5e0c, lpcbNeeded=0x31e96c) returned 1 [0163.737] GetModuleInformation (in: hProcess=0x5e8, hModule=0x1200000, lpmodinfo=0x2cd604c, cb=0xc | out: lpmodinfo=0x2cd604c*(lpBaseOfDll=0x1200000, SizeOfImage=0xc000, EntryPoint=0x120630a)) returned 1 [0163.737] CoTaskMemAlloc (cb=0x804) returned 0x51da658 [0163.737] GetModuleBaseNameW (in: hProcess=0x5e8, hModule=0x1200000, lpBaseName=0x51da658, nSize=0x800 | out: lpBaseName="B221.exe") returned 0x8 [0163.737] CoTaskMemFree (pv=0x51da658) [0163.737] CoTaskMemAlloc (cb=0x804) returned 0x51da658 [0163.737] GetModuleFileNameExW (in: hProcess=0x5e8, hModule=0x1200000, lpFilename=0x51da658, nSize=0x800 | out: lpFilename="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\B221.exe" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\b221.exe")) returned 0x2e [0163.739] CoTaskMemFree (pv=0x51da658) [0163.739] CloseHandle (hObject=0x5e8) returned 1 [0163.740] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Start Menu\\Programs\\Startup\\READ_ME.hta", nBufferLength=0x105, lpBuffer=0x31e4a4, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Start Menu\\Programs\\Startup\\READ_ME.hta", lpFilePart=0x0) returned 0x67 [0163.740] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e904) returned 1 [0163.740] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Start Menu\\Programs\\Startup\\READ_ME.hta" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\windows\\start menu\\programs\\startup\\read_me.hta"), fInfoLevelId=0x0, lpFileInformation=0x31e980 | out: lpFileInformation=0x31e980*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0 [0163.740] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e900) returned 1 [0163.741] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Start Menu\\Programs\\Startup\\READ_ME.hta", nBufferLength=0x105, lpBuffer=0x31e3b8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Start Menu\\Programs\\Startup\\READ_ME.hta", lpFilePart=0x0) returned 0x67 [0163.741] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e8ac) returned 1 [0163.741] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Start Menu\\Programs\\Startup\\READ_ME.hta" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\windows\\start menu\\programs\\startup\\read_me.hta"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x5e8 [0163.744] GetFileType (hFile=0x5e8) returned 0x1 [0163.744] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e8a8) returned 1 [0163.744] GetFileType (hFile=0x5e8) returned 0x1 [0163.744] WriteFile (in: hFile=0x5e8, lpBuffer=0x2cd83d0*, nNumberOfBytesToWrite=0xe34, lpNumberOfBytesWritten=0x31e94c, lpOverlapped=0x0 | out: lpBuffer=0x2cd83d0*, lpNumberOfBytesWritten=0x31e94c*=0xe34, lpOverlapped=0x0) returned 1 [0163.745] CloseHandle (hObject=0x5e8) returned 1 [0163.745] GetFullPathNameW (in: lpFileName="Desktop\\READ_ME.hta", nBufferLength=0x105, lpBuffer=0x31e500, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\Desktop\\READ_ME.hta", lpFilePart=0x0) returned 0x39 [0163.745] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e960) returned 1 [0163.745] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\Desktop\\READ_ME.hta" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\desktop\\read_me.hta"), fInfoLevelId=0x0, lpFileInformation=0x31e9dc | out: lpFileInformation=0x31e9dc*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0 [0163.745] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e95c) returned 1 [0163.745] CoTaskMemAlloc (cb=0x20c) returned 0x51d4b78 [0163.746] SHGetFolderPathW (in: hwnd=0x0, csidl=0, hToken=0x0, dwFlags=0x0, pszPath=0x51d4b78 | out: pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop") returned 0x0 [0163.747] CoTaskMemFree (pv=0x51d4b78) [0163.747] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop", nBufferLength=0x105, lpBuffer=0x31e46c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop", lpFilePart=0x0) returned 0x25 [0163.752] GetCurrentProcessId () returned 0xab4 [0163.752] OpenProcess (dwDesiredAccess=0x410, bInheritHandle=0, dwProcessId=0xab4) returned 0x5f0 [0163.752] EnumProcessModules (in: hProcess=0x5f0, lphModule=0x2cd9c08, cb=0x100, lpcbNeeded=0x31e968 | out: lphModule=0x2cd9c08, lpcbNeeded=0x31e968) returned 1 [0163.753] EnumProcessModules (in: hProcess=0x5f0, lphModule=0x2cd9d14, cb=0x200, lpcbNeeded=0x31e968 | out: lphModule=0x2cd9d14, lpcbNeeded=0x31e968) returned 1 [0163.754] GetModuleInformation (in: hProcess=0x5f0, hModule=0x1200000, lpmodinfo=0x2cd9f54, cb=0xc | out: lpmodinfo=0x2cd9f54*(lpBaseOfDll=0x1200000, SizeOfImage=0xc000, EntryPoint=0x120630a)) returned 1 [0163.755] CoTaskMemAlloc (cb=0x804) returned 0x51da658 [0163.755] GetModuleBaseNameW (in: hProcess=0x5f0, hModule=0x1200000, lpBaseName=0x51da658, nSize=0x800 | out: lpBaseName="B221.exe") returned 0x8 [0163.755] CoTaskMemFree (pv=0x51da658) [0163.755] CoTaskMemAlloc (cb=0x804) returned 0x51da658 [0163.755] GetModuleFileNameExW (in: hProcess=0x5f0, hModule=0x1200000, lpFilename=0x51da658, nSize=0x800 | out: lpFilename="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\B221.exe" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\b221.exe")) returned 0x2e [0163.755] CoTaskMemFree (pv=0x51da658) [0163.755] CloseHandle (hObject=0x5f0) returned 1 [0163.755] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\READ_ME.hta", nBufferLength=0x105, lpBuffer=0x31e4a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\READ_ME.hta", lpFilePart=0x0) returned 0x31 [0163.755] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e900) returned 1 [0163.755] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\READ_ME.hta" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\read_me.hta"), fInfoLevelId=0x0, lpFileInformation=0x31e97c | out: lpFileInformation=0x31e97c*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0 [0163.755] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e8fc) returned 1 [0163.755] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\READ_ME.hta", nBufferLength=0x105, lpBuffer=0x31e3b4, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\READ_ME.hta", lpFilePart=0x0) returned 0x31 [0163.755] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x31e8a8) returned 1 [0163.756] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\READ_ME.hta" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\read_me.hta"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x5f0 [0163.757] GetFileType (hFile=0x5f0) returned 0x1 [0163.757] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x31e8a4) returned 1 [0163.757] GetFileType (hFile=0x5f0) returned 0x1 [0163.757] WriteFile (in: hFile=0x5f0, lpBuffer=0x2cdc1ec*, nNumberOfBytesToWrite=0xe34, lpNumberOfBytesWritten=0x31e948, lpOverlapped=0x0 | out: lpBuffer=0x2cdc1ec*, lpNumberOfBytesWritten=0x31e948*=0xe34, lpOverlapped=0x0) returned 1 [0163.758] CloseHandle (hObject=0x5f0) returned 1 [0163.760] ShellExecuteExW (in: pExecInfo=0x2cdd2e0*(cbSize=0x3c, fMask=0x540, hwnd=0x0, lpVerb=0x0, lpFile="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\READ_ME.hta", lpParameters=0x0, lpDirectory=0x0, nShow=1, hInstApp=0x0, lpIDList=0x0, lpClass=0x0, hkeyClass=0x0, dwHotKey=0x0, hIcon=0x0, hMonitor=0x0, hProcess=0x0) | out: pExecInfo=0x2cdd2e0*(cbSize=0x3c, fMask=0x540, hwnd=0x0, lpVerb=0x0, lpFile="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\READ_ME.hta", lpParameters=0x0, lpDirectory=0x0, nShow=1, hInstApp=0x2a, lpIDList=0x0, lpClass=0x0, hkeyClass=0x0, dwHotKey=0x0, hIcon=0x0, hMonitor=0x0, hProcess=0x6f4)) returned 1 [0163.766] CallWindowProcW (lpPrevWndFunc=0x77c725dd, hWnd=0x3015c, Msg=0x219, wParam=0x7, lParam=0x0) returned 0x1 [0163.766] CallWindowProcW (lpPrevWndFunc=0x77c725dd, hWnd=0x30162, Msg=0x219, wParam=0x7, lParam=0x0) returned 0x1 [0163.766] NtdllDefWindowProc_W () returned 0x1 [0163.767] BeginPaint (in: hWnd=0x30162, lpPaint=0x31e3d4 | out: lpPaint=0x31e3d4) returned 0x50109f2 [0163.768] GetWindowPlacement (in: hWnd=0x30162, lpwndpl=0x31e130 | out: lpwndpl=0x31e130) returned 1 [0163.768] GetClientRect (in: hWnd=0x30162, lpRect=0x31e0dc | out: lpRect=0x31e0dc) returned 1 [0163.769] GetWindowTextLengthW (hWnd=0x30162) returned 11 [0163.769] CallWindowProcW (lpPrevWndFunc=0x77c725dd, hWnd=0x30162, Msg=0xe, wParam=0x0, lParam=0x0) returned 0xb [0163.769] GetSystemMetrics (nIndex=42) returned 0 [0163.769] GetWindowTextW (in: hWnd=0x30162, lpString=0x31df9c, nMaxCount=12 | out: lpString="notepad.exe") returned 11 [0163.769] CallWindowProcW (lpPrevWndFunc=0x77c725dd, hWnd=0x30162, Msg=0xd, wParam=0xc, lParam=0x31df9c) returned 0xb [0163.769] GetClientRect (in: hWnd=0x30162, lpRect=0x31dfe4 | out: lpRect=0x31dfe4) returned 1 [0163.769] GetCurrentObject (hdc=0x50109f2, type=0x1) returned 0x1b00017 [0163.770] GetCurrentObject (hdc=0x50109f2, type=0x2) returned 0x1900010 [0163.770] GetCurrentObject (hdc=0x50109f2, type=0x7) returned 0x705086c [0163.770] GetCurrentObject (hdc=0x50109f2, type=0x6) returned 0x18a002e [0163.770] SaveDC (hdc=0x50109f2) returned 1 [0163.770] GetNearestColor (hdc=0x50109f2, color=0xf0f0f0) returned 0xf0f0f0 [0163.770] CreateSolidBrush (color=0xf0f0f0) returned 0x2d1001b3 [0163.770] FillRect (hDC=0x50109f2, lprc=0x31de84, hbr=0x2d1001b3) returned 1 [0163.770] DeleteObject (ho=0x2d1001b3) returned 1 [0163.771] RestoreDC (hdc=0x50109f2, nSavedDC=-1) returned 1 [0163.774] GdipCreateHalftonePalette () returned 0xffffffffd008008e [0163.775] SelectPalette (hdc=0x50109f2, hPal=0xd008008e, bForceBkgd=1) returned 0x188000b [0163.775] GetWindowTextLengthW (hWnd=0x30162) returned 11 [0163.775] CallWindowProcW (lpPrevWndFunc=0x77c725dd, hWnd=0x30162, Msg=0xe, wParam=0x0, lParam=0x0) returned 0xb [0163.775] GetSystemMetrics (nIndex=42) returned 0 [0163.775] GetWindowTextW (in: hWnd=0x30162, lpString=0x31e364, nMaxCount=12 | out: lpString="notepad.exe") returned 11 [0163.775] CallWindowProcW (lpPrevWndFunc=0x77c725dd, hWnd=0x30162, Msg=0xd, wParam=0xc, lParam=0x31e364) returned 0xb [0163.775] SelectPalette (hdc=0x50109f2, hPal=0x188000b, bForceBkgd=0) returned 0xd008008e [0163.775] EndPaint (hWnd=0x30162, lpPaint=0x31e3d0) returned 1 [0163.949] LocalFree (hMem=0x515ec50) returned 0x0 [0163.949] GetCurrentProcessId () returned 0xab4 [0163.949] OpenProcess (dwDesiredAccess=0x500, bInheritHandle=0, dwProcessId=0xab4) returned 0x5f0 [0163.949] GetExitCodeProcess (in: hProcess=0x5f0, lpExitCode=0x2cdd7dc | out: lpExitCode=0x2cdd7dc*=0x103) returned 1 [0163.949] GetProcessWorkingSetSize (in: hProcess=0x5f0, lpMinimumWorkingSetSize=0x31ea1c, lpMaximumWorkingSetSize=0x31ea18 | out: lpMinimumWorkingSetSize=0x31ea1c, lpMaximumWorkingSetSize=0x31ea18) returned 1 [0163.949] SetProcessWorkingSetSize (hProcess=0x5f0, dwMinimumWorkingSetSize=0x493e0, dwMaximumWorkingSetSize=0x159000) returned 1 [0164.068] GetProcessWorkingSetSize (in: hProcess=0x5f0, lpMinimumWorkingSetSize=0x31ea1c, lpMaximumWorkingSetSize=0x31ea18 | out: lpMinimumWorkingSetSize=0x31ea1c, lpMaximumWorkingSetSize=0x31ea18) returned 1 [0164.069] CloseHandle (hObject=0x5f0) returned 1 [0164.167] GetCurrentProcessId () returned 0xab4 [0164.167] OpenProcess (dwDesiredAccess=0x500, bInheritHandle=0, dwProcessId=0xab4) returned 0x5f0 [0164.167] GetExitCodeProcess (in: hProcess=0x5f0, lpExitCode=0x2cdd8f0 | out: lpExitCode=0x2cdd8f0*=0x103) returned 1 [0164.167] GetProcessWorkingSetSize (in: hProcess=0x5f0, lpMinimumWorkingSetSize=0x31ea28, lpMaximumWorkingSetSize=0x31ea24 | out: lpMinimumWorkingSetSize=0x31ea28, lpMaximumWorkingSetSize=0x31ea24) returned 1 [0164.167] SetProcessWorkingSetSize (hProcess=0x5f0, dwMinimumWorkingSetSize=0x493e0, dwMaximumWorkingSetSize=0x159000) returned 1 [0164.176] GetProcessWorkingSetSize (in: hProcess=0x5f0, lpMinimumWorkingSetSize=0x31ea28, lpMaximumWorkingSetSize=0x31ea24 | out: lpMinimumWorkingSetSize=0x31ea28, lpMaximumWorkingSetSize=0x31ea24) returned 1 [0164.177] CloseHandle (hObject=0x5f0) returned 1 [0164.179] GetWindowThreadProcessId (in: hWnd=0x30162, lpdwProcessId=0x31ea3c | out: lpdwProcessId=0x31ea3c) returned 0xaa4 [0164.179] GetCurrentThreadId () returned 0xaa4 [0164.180] RegisterClipboardFormatW (lpszFormat="WindowsForms12_ThreadCallbackMessage") returned 0xc122 [0164.180] PostMessageW (hWnd=0x30162, Msg=0xc122, wParam=0x0, lParam=0x0) returned 1 [0164.180] GetWindowTextLengthW (hWnd=0x30162) returned 11 [0164.181] CallWindowProcW (lpPrevWndFunc=0x77c725dd, hWnd=0x30162, Msg=0xe, wParam=0x0, lParam=0x0) returned 0xb [0164.181] GetSystemMetrics (nIndex=42) returned 0 [0164.181] GetWindowTextW (in: hWnd=0x30162, lpString=0x31e9b0, nMaxCount=12 | out: lpString="notepad.exe") returned 11 [0164.181] CallWindowProcW (lpPrevWndFunc=0x77c725dd, hWnd=0x30162, Msg=0xd, wParam=0xc, lParam=0x31e9b0) returned 0xb [0164.183] OleInitialize (pvReserved=0x0) returned 0x0 [0164.183] CoRegisterMessageFilter (in: lpMessageFilter=0x0, lplpMessageFilter=0x31eeec | out: lplpMessageFilter=0x31eeec*=0x0) returned 0x0 [0164.184] PeekMessageW (in: lpMsg=0x31eec0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x31eec0) returned 1 [0164.184] GetMessageA (in: lpMsg=0x31eec0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x31eec0) returned 0 [0164.192] DestroyCursor (hCursor=0x202af) returned 1 [0164.193] GetWindowLongW (hWnd=0x30162, nIndex=-20) returned 590080 [0164.193] DestroyWindow (hWnd=0x30162) returned 1 [0164.194] CallWindowProcW (lpPrevWndFunc=0x77c725dd, hWnd=0x30162, Msg=0x90, wParam=0x0, lParam=0x0) returned 0x0 [0164.194] CallWindowProcW (lpPrevWndFunc=0x77c725dd, hWnd=0x30162, Msg=0x46, wParam=0x0, lParam=0x31ec7c) returned 0x0 [0164.202] GetWindowPlacement (in: hWnd=0x30162, lpwndpl=0x31ea2c | out: lpwndpl=0x31ea2c) returned 1 [0164.202] CallWindowProcW (lpPrevWndFunc=0x77c725dd, hWnd=0x30162, Msg=0x47, wParam=0x0, lParam=0x31ec7c) returned 0x0 [0164.202] GetClientRect (in: hWnd=0x30162, lpRect=0x31e9dc | out: lpRect=0x31e9dc) returned 1 [0164.202] GetWindowRect (in: hWnd=0x30162, lpRect=0x31e9dc | out: lpRect=0x31e9dc) returned 1 [0164.203] PostThreadMessageW (idThread=0xaa4, Msg=0x12, wParam=0x0, lParam=0x0) returned 1 [0164.218] CallWindowProcW (lpPrevWndFunc=0x77c725dd, hWnd=0x30162, Msg=0x2, wParam=0x0, lParam=0x0) returned 0x0 [0164.218] CallWindowProcW (lpPrevWndFunc=0x77c725dd, hWnd=0x30162, Msg=0x82, wParam=0x0, lParam=0x0) returned 0x0 [0164.218] DestroyWindow (hWnd=0x3015c) returned 1 [0164.218] CallWindowProcW (lpPrevWndFunc=0x77c725dd, hWnd=0x3015c, Msg=0x90, wParam=0x0, lParam=0x0) returned 0x0 [0164.218] CallWindowProcW (lpPrevWndFunc=0x77c725dd, hWnd=0x3015c, Msg=0x2, wParam=0x0, lParam=0x0) returned 0x0 [0164.219] CallWindowProcW (lpPrevWndFunc=0x77c725dd, hWnd=0x3015c, Msg=0x82, wParam=0x0, lParam=0x0) returned 0x0 [0164.254] GetCurrentThreadId () returned 0xaa4 [0164.254] EnumThreadWindows (dwThreadId=0xaa4, lpfn=0x10908ae, lParam=0x0) returned 1 [0164.254] IsWindowVisible (hWnd=0x301e6) returned 0 [0164.254] IsWindowVisible (hWnd=0x50114) returned 0 [0164.255] GetCurrentThreadId () returned 0xaa4 [0164.255] GetCurrentThreadId () returned 0xaa4 [0164.255] EnumThreadWindows (dwThreadId=0xaa4, lpfn=0x109094e, lParam=0x0) returned 1 [0164.255] IsWindowVisible (hWnd=0x301e6) returned 0 [0164.255] IsWindowVisible (hWnd=0x50114) returned 0 [0164.947] OleUninitialize () [0164.948] CloseHandle (hObject=0x1e8) returned 1 [0164.948] DeactivateActCtx (dwFlags=0x0, ulCookie=0x1f7b0002) returned 1 [0164.949] CoGetContextToken (in: pToken=0x31f878 | out: pToken=0x31f878) returned 0x0 [0164.949] CObjectContext::QueryInterface () returned 0x0 [0164.949] CObjectContext::GetCurrentThreadType () returned 0x0 [0164.949] Release () returned 0x0 [0164.950] CoWaitForMultipleHandles (in: dwFlags=0x2, dwTimeout=0x13880, cHandles=0x1, pHandles=0x35b1d0*=0xa8, lpdwindex=0x31f71c | out: lpdwindex=0x31f71c) returned 0x0 Thread: id = 2 os_tid = 0xaa0 Thread: id = 3 os_tid = 0x4fc [0026.585] CoGetContextToken (in: pToken=0xe0f9ac | out: pToken=0xe0f9ac) returned 0x800401f0 [0026.585] CoInitializeEx (pvReserved=0x0, dwCoInit=0x0) returned 0x0 [0032.388] RegCloseKey (hKey=0x224) returned 0x0 [0164.954] SetWindowLongW (hWnd=0x6011c, nIndex=-4, dwNewLong=2009540061) returned 17369102 [0164.954] SetClassLongW (hWnd=0x6011c, nIndex=-24, dwNewLong=2009540061) returned 0x10907e6 [0164.955] PostMessageW (hWnd=0x6011c, Msg=0x10, wParam=0x0, lParam=0x0) returned 1 [0164.955] GetModuleHandleW (lpModuleName=0x0) returned 0x1200000 [0164.955] UnregisterClassW (lpClassName="WindowsForms10.Window.0.app.0.141b42a_r14_ad1", hInstance=0x1200000) returned 1 [0164.956] GetModuleHandleW (lpModuleName=0x0) returned 0x1200000 [0164.956] UnregisterClassW (lpClassName="WindowsForms10.Window.8.app.0.141b42a_r14_ad1", hInstance=0x1200000) returned 0 [0164.958] IsWindow (hWnd=0x301e6) returned 1 [0164.959] GetModuleHandleW (lpModuleName="user32.dll") returned 0x77130000 [0164.959] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x400, lpWideCharStr="DefWindowProcW", cchWideChar=14, lpMultiByteStr=0xe0f74c, cbMultiByte=16, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="DefWindowProcW|r¾\x19\x9b\x92\x94 tÈùà", lpUsedDefaultChar=0x0) returned 14 [0164.959] GetProcAddress (hModule=0x77130000, lpProcName="DefWindowProcW") returned 0x77c725dd [0164.960] SetWindowLongW (hWnd=0x301e6, nIndex=-4, dwNewLong=2009540061) returned 17369222 [0164.960] SetClassLongW (hWnd=0x301e6, nIndex=-24, dwNewLong=2009540061) returned 0x1090886 [0164.960] IsWindow (hWnd=0x301e6) returned 1 [0164.960] DestroyWindow (hWnd=0x301e6) returned 0 [0164.960] PostMessageW (hWnd=0x301e6, Msg=0x10, wParam=0x0, lParam=0x0) returned 1 [0164.960] SetConsoleCtrlHandler (HandlerRoutine=0x109085e, Add=0) returned 1 [0164.961] EtwEventUnregister () returned 0x0 [0164.961] EtwEventUnregister () returned 0x0 [0164.961] DeleteObject (ho=0xd008008e) returned 1 [0164.970] DestroyCursor (hCursor=0x8016b) returned 1 [0164.971] GdipDeleteFont (font=0x4c72940) returned 0x0 [0164.971] DeleteObject (ho=0x2d0a025c) returned 1 [0164.972] DeleteSecurityContext (phContext=0x2cb479c) returned 0x0 [0164.972] CloseHandle (hObject=0x3f8) returned 1 [0164.973] CloseHandle (hObject=0x6f4) returned 1 [0164.974] setsockopt (s=0x414, level=65535, optname=128, optval="\x01", optlen=4) returned -1 [0164.974] closesocket (s=0x414) returned 0 [0164.975] CloseHandle (hObject=0x418) returned 1 [0164.975] setsockopt (s=0x408, level=65535, optname=128, optval="\x01", optlen=4) returned -1 [0164.975] closesocket (s=0x408) returned 0 [0164.975] CloseHandle (hObject=0x410) returned 1 [0164.975] setsockopt (s=0x3fc, level=65535, optname=128, optval="\x01", optlen=4) returned 0 [0164.976] closesocket (s=0x3fc) returned 0 [0164.977] CloseHandle (hObject=0x3e4) returned 1 [0164.977] CloseHandle (hObject=0x3dc) returned 1 [0164.977] CloseHandle (hObject=0x39c) returned 1 [0164.978] CloseHandle (hObject=0x3a0) returned 1 [0164.978] CertFreeCRLContext (pCrlContext=0x75bd3b0) returned 1 [0164.978] WinHttpCloseHandle (hInternet=0x41bef8) returned 1 [0164.979] CloseHandle (hObject=0x34c) returned 1 [0164.979] CloseHandle (hObject=0x348) returned 1 [0164.979] RegCloseKey (hKey=0x344) returned 0x0 [0164.979] CloseHandle (hObject=0x340) returned 1 [0164.979] RegCloseKey (hKey=0x33c) returned 0x0 [0164.980] CloseHandle (hObject=0x338) returned 1 [0164.980] RegCloseKey (hKey=0x334) returned 0x0 [0164.980] RegCloseKey (hKey=0x330) returned 0x0 [0164.980] CloseHandle (hObject=0x318) returned 1 [0164.981] setsockopt (s=0x30c, level=65535, optname=128, optval="\x01", optlen=4) returned -1 [0164.981] closesocket (s=0x30c) returned 0 [0164.981] CloseHandle (hObject=0x310) returned 1 [0164.981] setsockopt (s=0x304, level=65535, optname=128, optval="\x01", optlen=4) returned -1 [0164.981] closesocket (s=0x304) returned 0 [0164.982] CloseHandle (hObject=0x308) returned 1 [0164.982] CloseHandle (hObject=0x2c0) returned 1 [0164.982] CloseHandle (hObject=0x2bc) returned 1 [0164.982] CloseHandle (hObject=0x2b8) returned 1 [0164.982] CloseHandle (hObject=0x2b4) returned 1 [0164.983] CloseHandle (hObject=0x2b0) returned 1 [0164.983] CloseHandle (hObject=0x2ac) returned 1 [0164.983] CloseHandle (hObject=0x2a8) returned 1 [0164.983] CertFreeCRLContext (pCrlContext=0x75bd360) returned 1 [0164.984] CertFreeCRLContext (pCrlContext=0x50fd328) returned 1 [0164.984] CloseHandle (hObject=0x29c) returned 1 [0164.984] CloseHandle (hObject=0x298) returned 1 [0164.984] CloseHandle (hObject=0x294) returned 1 [0164.985] CloseHandle (hObject=0x290) returned 1 [0164.985] CloseHandle (hObject=0x28c) returned 1 [0164.985] CloseHandle (hObject=0x288) returned 1 [0164.985] CloseHandle (hObject=0x280) returned 1 [0164.986] CloseHandle (hObject=0x284) returned 1 [0164.986] CertCloseStore (hCertStore=0x50fd588, dwFlags=0x0) returned 1 [0164.986] CloseHandle (hObject=0x27c) returned 1 [0164.987] UnmapViewOfFile (lpBaseAddress=0x530000) returned 1 [0164.987] CertFreeCRLContext (pCrlContext=0x50fd328) returned 1 [0164.988] CertFreeCRLContext (pCrlContext=0x50fd378) returned 1 [0164.988] CertFreeCRLContext (pCrlContext=0x50fd3c8) returned 1 [0164.989] RegCloseKey (hKey=0x80000004) returned 0x0 [0164.989] FreeCredentialsHandle (phCredential=0x2cb4598) returned 0x0 [0164.991] SleepEx (dwMilliseconds=0xffffffff, bAlertable=0) Thread: id = 4 os_tid = 0x31c Thread: id = 5 os_tid = 0x518 Thread: id = 6 os_tid = 0xb3c Thread: id = 7 os_tid = 0x15c [0072.680] CoGetContextToken (in: pToken=0x62cf99c | out: pToken=0x62cf99c) returned 0x0 [0072.681] CObjectContext::QueryInterface () returned 0x0 [0072.681] CObjectContext::GetCurrentThreadType () returned 0x0 [0072.681] Release () returned 0x0 Thread: id = 8 os_tid = 0x814 Thread: id = 9 os_tid = 0x82c Thread: id = 10 os_tid = 0x9e8 [0112.934] SleepEx (dwMilliseconds=0x1, bAlertable=0) returned 0x0 Thread: id = 11 os_tid = 0x6c0 Thread: id = 12 os_tid = 0x6a8 Thread: id = 13 os_tid = 0xb40 Thread: id = 14 os_tid = 0x124 [0148.247] CoInitializeEx (pvReserved=0x0, dwCoInit=0x0) returned 0x0 [0148.251] ResetEvent (hEvent=0x2a0) returned 1 Thread: id = 15 os_tid = 0x754 Thread: id = 16 os_tid = 0x284 Thread: id = 50 os_tid = 0x708 Thread: id = 52 os_tid = 0x4d0 Thread: id = 53 os_tid = 0x4dc [0164.992] SleepEx (dwMilliseconds=0x14, bAlertable=0) Process: id = "2" image_name = "svchost.exe" filename = "c:\\windows\\system32\\svchost.exe" page_root = "0x971d000" os_pid = "0x370" os_integrity_level = "0x4000" os_privileges = "0xe60b1e890" monitor_reason = "rpc_server" parent_id = "1" os_parent_pid = "0x1d8" cmd_line = "C:\\Windows\\system32\\svchost.exe -k netsvcs" cur_dir = "C:\\Windows\\system32\\" os_username = "NT AUTHORITY\\SYSTEM" bitness = "32" os_groups = "Everyone" [0x7], "BUILTIN\\Users" [0x7], "NT AUTHORITY\\SERVICE" [0x7], "CONSOLE LOGON" [0x7], "NT AUTHORITY\\Authenticated Users" [0x7], "NT AUTHORITY\\This Organization" [0x7], "NT SERVICE\\BDESVC" [0xa], "NT SERVICE\\BITS" [0xa], "NT SERVICE\\CertPropSvc" [0xa], "NT SERVICE\\EapHost" [0xa], "NT SERVICE\\hkmsvc" [0xa], "NT SERVICE\\IKEEXT" [0xa], "NT SERVICE\\iphlpsvc" [0xa], "NT SERVICE\\LanmanServer" [0xa], "NT SERVICE\\MMCSS" [0xe], "NT SERVICE\\MSiSCSI" [0xa], "NT SERVICE\\RasAuto" [0xa], "NT SERVICE\\RasMan" [0xa], "NT SERVICE\\RemoteAccess" [0xa], "NT SERVICE\\Schedule" [0xa], "NT SERVICE\\SCPolicySvc" [0xa], "NT SERVICE\\SENS" [0xa], "NT SERVICE\\SessionEnv" [0xa], "NT SERVICE\\SharedAccess" [0xa], "NT SERVICE\\ShellHWDetection" [0xa], "NT SERVICE\\wercplsupport" [0xa], "NT SERVICE\\Winmgmt" [0xa], "NT SERVICE\\wuauserv" [0xa], "NT AUTHORITY\\Logon Session 00000000:0000d057" [0xc0000007], "LOCAL" [0x7], "BUILTIN\\Administrators" [0xe] Thread: id = 17 os_tid = 0xba0 Thread: id = 18 os_tid = 0xabc Thread: id = 19 os_tid = 0x25c Thread: id = 20 os_tid = 0x9cc Thread: id = 21 os_tid = 0x540 Thread: id = 22 os_tid = 0x804 Thread: id = 23 os_tid = 0x780 Thread: id = 24 os_tid = 0x7a0 Thread: id = 25 os_tid = 0x57c Thread: id = 26 os_tid = 0x42c Thread: id = 27 os_tid = 0x1e4 Thread: id = 28 os_tid = 0x6d0 Thread: id = 29 os_tid = 0x6bc Thread: id = 30 os_tid = 0x6b0 Thread: id = 31 os_tid = 0x69c Thread: id = 32 os_tid = 0x698 Thread: id = 33 os_tid = 0x684 Thread: id = 34 os_tid = 0x678 Thread: id = 35 os_tid = 0x4a8 Thread: id = 36 os_tid = 0x46c Thread: id = 37 os_tid = 0x44c Thread: id = 38 os_tid = 0x424 Thread: id = 39 os_tid = 0x41c Thread: id = 40 os_tid = 0x404 Thread: id = 41 os_tid = 0x14c Thread: id = 42 os_tid = 0x3fc Thread: id = 43 os_tid = 0x3f4 Thread: id = 44 os_tid = 0x3e8 Thread: id = 45 os_tid = 0x39c Thread: id = 46 os_tid = 0x390 Thread: id = 47 os_tid = 0x38c Thread: id = 48 os_tid = 0x37c Thread: id = 49 os_tid = 0x374 Thread: id = 65 os_tid = 0xa48 Thread: id = 66 os_tid = 0xa58 Thread: id = 67 os_tid = 0x9f8 Thread: id = 68 os_tid = 0x4e0 Thread: id = 77 os_tid = 0x868 Thread: id = 78 os_tid = 0x700 Process: id = "3" image_name = "mshta.exe" filename = "c:\\windows\\syswow64\\mshta.exe" page_root = "0x4cf5f000" os_pid = "0x24c" os_integrity_level = "0x3000" os_privileges = "0x60800000" monitor_reason = "child_process" parent_id = "1" os_parent_pid = "0xab4" cmd_line = "\"C:\\Windows\\SysWOW64\\mshta.exe\" \"C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\READ_ME.hta\" " cur_dir = "C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\" os_username = "XDUWTFONO\\5p5NrGJn0jS HALPmcxz" bitness = "32" os_groups = "XDUWTFONO\\Domain Users" [0x7], "Everyone" [0x7], "BUILTIN\\Administrators" [0xf], "BUILTIN\\Users" [0x7], "NT AUTHORITY\\INTERACTIVE" [0x7], "CONSOLE LOGON" [0x7], "NT AUTHORITY\\Authenticated Users" [0x7], "NT AUTHORITY\\This Organization" [0x7], "NT AUTHORITY\\Logon Session 00000000:0000eb41" [0xc0000007], "LOCAL" [0x7], "NT AUTHORITY\\NTLM Authentication" [0x7] Thread: id = 51 os_tid = 0x220 [0164.103] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x26fd54 | out: lpSystemTimeAsFileTime=0x26fd54*(dwLowDateTime=0x4213ad00, dwHighDateTime=0x1d6eb7f)) [0164.103] GetCurrentProcessId () returned 0x24c [0164.103] GetCurrentThreadId () returned 0x220 [0164.103] GetTickCount () returned 0x11622bd [0164.103] QueryPerformanceCounter (in: lpPerformanceCount=0x26fd4c | out: lpPerformanceCount=0x26fd4c*=28492556962) returned 1 [0164.103] GetModuleHandleA (lpModuleName=0x0) returned 0xb40000 [0164.103] GetStartupInfoA (in: lpStartupInfo=0x26fc60 | out: lpStartupInfo=0x26fc60*(cb=0x44, lpReserved="", lpDesktop="WinSta0\\Default", lpTitle="C:\\Windows\\SysWOW64\\mshta.exe", dwX=0x0, dwY=0x0, dwXSize=0x0, dwYSize=0x0, dwXCountChars=0x0, dwYCountChars=0x0, dwFillAttribute=0x0, dwFlags=0x1, wShowWindow=0x1, cbReserved2=0x0, lpReserved2=0x0, hStdInput=0xffffffff, hStdOutput=0xffffffff, hStdError=0xffffffff)) [0164.103] GetVersionExA (in: lpVersionInformation=0x26fcb0*(dwOSVersionInfoSize=0x94, dwMajorVersion=0x0, dwMinorVersion=0x0, dwBuildNumber=0x0, dwPlatformId=0x0, szCSDVersion="") | out: lpVersionInformation=0x26fcb0*(dwOSVersionInfoSize=0x94, dwMajorVersion=0x6, dwMinorVersion=0x1, dwBuildNumber=0x1db1, dwPlatformId=0x2, szCSDVersion="Service Pack 1")) returned 1 [0164.103] HeapCreate (flOptions=0x0, dwInitialSize=0x1000, dwMaximumSize=0x0) returned 0x680000 [0164.104] GetModuleHandleW (lpModuleName="KERNEL32.DLL") returned 0x76d30000 [0164.104] GetProcAddress (hModule=0x76d30000, lpProcName="FlsAlloc") returned 0x76d44f2b [0164.104] GetProcAddress (hModule=0x76d30000, lpProcName="FlsGetValue") returned 0x76d41252 [0164.104] GetProcAddress (hModule=0x76d30000, lpProcName="FlsSetValue") returned 0x76d44208 [0164.104] GetProcAddress (hModule=0x76d30000, lpProcName="FlsFree") returned 0x76d4359f [0164.104] GetModuleHandleW (lpModuleName="KERNELBASE.DLL") returned 0x76c10000 [0164.104] GetProcAddress (hModule=0x76c10000, lpProcName="EncodePointer") returned 0x77c80fcb [0164.104] GetModuleHandleW (lpModuleName="KERNELBASE.DLL") returned 0x76c10000 [0164.104] GetProcAddress (hModule=0x76c10000, lpProcName="EncodePointer") returned 0x77c80fcb [0164.105] GetModuleHandleW (lpModuleName="KERNELBASE.DLL") returned 0x76c10000 [0164.105] GetProcAddress (hModule=0x76c10000, lpProcName="EncodePointer") returned 0x77c80fcb [0164.105] GetModuleHandleW (lpModuleName="KERNELBASE.DLL") returned 0x76c10000 [0164.105] GetProcAddress (hModule=0x76c10000, lpProcName="EncodePointer") returned 0x77c80fcb [0164.105] GetModuleHandleW (lpModuleName="KERNELBASE.DLL") returned 0x76c10000 [0164.105] GetProcAddress (hModule=0x76c10000, lpProcName="EncodePointer") returned 0x77c80fcb [0164.105] GetModuleHandleW (lpModuleName="KERNELBASE.DLL") returned 0x76c10000 [0164.105] GetProcAddress (hModule=0x76c10000, lpProcName="EncodePointer") returned 0x77c80fcb [0164.105] GetModuleHandleW (lpModuleName="KERNELBASE.DLL") returned 0x76c10000 [0164.105] GetProcAddress (hModule=0x76c10000, lpProcName="EncodePointer") returned 0x77c80fcb [0164.105] GetModuleHandleW (lpModuleName="KERNELBASE.DLL") returned 0x76c10000 [0164.105] GetProcAddress (hModule=0x76c10000, lpProcName="DecodePointer") returned 0x77c79d35 [0164.106] GetModuleHandleW (lpModuleName="kernelbase.dll") returned 0x76c10000 [0164.106] GetProcAddress (hModule=0x76c10000, lpProcName="InitializeCriticalSectionAndSpinCount") returned 0x76c2004f [0164.106] GetModuleHandleW (lpModuleName="KERNELBASE.DLL") returned 0x76c10000 [0164.106] GetProcAddress (hModule=0x76c10000, lpProcName="EncodePointer") returned 0x77c80fcb [0164.106] GetModuleHandleW (lpModuleName="KERNELBASE.DLL") returned 0x76c10000 [0164.106] GetProcAddress (hModule=0x76c10000, lpProcName="DecodePointer") returned 0x77c79d35 [0164.106] GetModuleHandleW (lpModuleName="KERNELBASE.DLL") returned 0x76c10000 [0164.106] GetProcAddress (hModule=0x76c10000, lpProcName="DecodePointer") returned 0x77c79d35 [0164.106] GetModuleHandleW (lpModuleName="KERNELBASE.DLL") returned 0x76c10000 [0164.106] GetProcAddress (hModule=0x76c10000, lpProcName="DecodePointer") returned 0x77c79d35 [0164.106] GetModuleHandleW (lpModuleName="KERNELBASE.DLL") returned 0x76c10000 [0164.106] GetProcAddress (hModule=0x76c10000, lpProcName="DecodePointer") returned 0x77c79d35 [0164.107] GetModuleHandleW (lpModuleName="KERNELBASE.DLL") returned 0x76c10000 [0164.107] GetProcAddress (hModule=0x76c10000, lpProcName="DecodePointer") returned 0x77c79d35 [0164.107] GetModuleHandleW (lpModuleName="KERNELBASE.DLL") returned 0x76c10000 [0164.107] GetProcAddress (hModule=0x76c10000, lpProcName="DecodePointer") returned 0x77c79d35 [0164.107] GetModuleHandleW (lpModuleName="KERNELBASE.DLL") returned 0x76c10000 [0164.107] GetProcAddress (hModule=0x76c10000, lpProcName="DecodePointer") returned 0x77c79d35 [0164.107] GetModuleHandleW (lpModuleName="KERNELBASE.DLL") returned 0x76c10000 [0164.107] GetProcAddress (hModule=0x76c10000, lpProcName="DecodePointer") returned 0x77c79d35 [0164.107] GetModuleHandleW (lpModuleName="KERNELBASE.DLL") returned 0x76c10000 [0164.107] GetProcAddress (hModule=0x76c10000, lpProcName="DecodePointer") returned 0x77c79d35 [0164.108] GetModuleHandleW (lpModuleName="KERNELBASE.DLL") returned 0x76c10000 [0164.108] GetProcAddress (hModule=0x76c10000, lpProcName="DecodePointer") returned 0x77c79d35 [0164.108] GetModuleHandleW (lpModuleName="KERNELBASE.DLL") returned 0x76c10000 [0164.108] GetProcAddress (hModule=0x76c10000, lpProcName="DecodePointer") returned 0x77c79d35 [0164.108] GetModuleHandleW (lpModuleName="KERNELBASE.DLL") returned 0x76c10000 [0164.108] GetProcAddress (hModule=0x76c10000, lpProcName="DecodePointer") returned 0x77c79d35 [0164.108] GetModuleHandleW (lpModuleName="KERNELBASE.DLL") returned 0x76c10000 [0164.108] GetProcAddress (hModule=0x76c10000, lpProcName="DecodePointer") returned 0x77c79d35 [0164.108] GetModuleHandleW (lpModuleName="KERNELBASE.DLL") returned 0x76c10000 [0164.108] GetProcAddress (hModule=0x76c10000, lpProcName="DecodePointer") returned 0x77c79d35 [0164.108] RtlAllocateHeap (HeapHandle=0x680000, Flags=0x8, Size=0x214) returned 0x6807d0 [0164.109] GetModuleHandleW (lpModuleName="KERNELBASE.DLL") returned 0x76c10000 [0164.109] GetProcAddress (hModule=0x76c10000, lpProcName="DecodePointer") returned 0x77c79d35 [0164.109] GetModuleHandleW (lpModuleName="KERNELBASE.DLL") returned 0x76c10000 [0164.109] GetProcAddress (hModule=0x76c10000, lpProcName="EncodePointer") returned 0x77c80fcb [0164.109] GetProcAddress (hModule=0x76c10000, lpProcName="DecodePointer") returned 0x77c79d35 [0164.109] GetStartupInfoA (in: lpStartupInfo=0x26fbe4 | out: lpStartupInfo=0x26fbe4*(cb=0x44, lpReserved="", lpDesktop="WinSta0\\Default", lpTitle="C:\\Windows\\SysWOW64\\mshta.exe", dwX=0x0, dwY=0x0, dwXSize=0x0, dwYSize=0x0, dwXCountChars=0x0, dwYCountChars=0x0, dwFillAttribute=0x0, dwFlags=0x1, wShowWindow=0x1, cbReserved2=0x0, lpReserved2=0x0, hStdInput=0xffffffff, hStdOutput=0xffffffff, hStdError=0xffffffff)) [0164.109] RtlAllocateHeap (HeapHandle=0x680000, Flags=0x8, Size=0x480) returned 0x6809f0 [0164.109] GetStdHandle (nStdHandle=0xfffffff6) returned 0x0 [0164.109] GetStdHandle (nStdHandle=0xfffffff5) returned 0x0 [0164.109] GetStdHandle (nStdHandle=0xfffffff4) returned 0x0 [0164.109] SetHandleCount (uNumber=0x20) returned 0x20 [0164.109] GetCommandLineA () returned="\"C:\\Windows\\SysWOW64\\mshta.exe\" \"C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\READ_ME.hta\" " [0164.109] GetEnvironmentStringsW () returned 0x480198* [0164.109] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="ALLUSERSPROFILE=C:\\ProgramData", cchWideChar=1381, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 1381 [0164.109] RtlAllocateHeap (HeapHandle=0x680000, Flags=0x0, Size=0x565) returned 0x680e78 [0164.109] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="ALLUSERSPROFILE=C:\\ProgramData", cchWideChar=1381, lpMultiByteStr=0x680e78, cbMultiByte=1381, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="ALLUSERSPROFILE=C:\\ProgramData", lpUsedDefaultChar=0x0) returned 1381 [0164.109] FreeEnvironmentStringsW (penv=0x480198) returned 1 [0164.110] GetLastError () returned 0x0 [0164.110] SetLastError (dwErrCode=0x0) [0164.110] GetLastError () returned 0x0 [0164.110] SetLastError (dwErrCode=0x0) [0164.110] GetLastError () returned 0x0 [0164.110] SetLastError (dwErrCode=0x0) [0164.110] GetACP () returned 0x4e4 [0164.110] RtlAllocateHeap (HeapHandle=0x680000, Flags=0x0, Size=0x220) returned 0x6813e8 [0164.110] GetLastError () returned 0x0 [0164.110] SetLastError (dwErrCode=0x0) [0164.110] GetCPInfo (in: CodePage=0x4e4, lpCPInfo=0x26fbbc | out: lpCPInfo=0x26fbbc) returned 1 [0164.110] GetCPInfo (in: CodePage=0x4e4, lpCPInfo=0x26f688 | out: lpCPInfo=0x26f688) returned 1 [0164.110] GetLastError () returned 0x0 [0164.110] SetLastError (dwErrCode=0x0) [0164.110] GetStringTypeW (in: dwInfoType=0x1, lpSrcStr="", cchSrc=1, lpCharType=0x26f618 | out: lpCharType=0x26f618) returned 1 [0164.110] MultiByteToWideChar (in: CodePage=0x4e4, dwFlags=0x1, lpMultiByteStr=0x26fa9c, cbMultiByte=256, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 256 [0164.110] MultiByteToWideChar (in: CodePage=0x4e4, dwFlags=0x1, lpMultiByteStr=0x26fa9c, cbMultiByte=256, lpWideCharStr=0x26f408, cchWideChar=256 | out: lpWideCharStr=" \x01\x02\x03\x04\x05\x06\x07\x08\x09\n\x0b\x0c\r\x0e\x0f\x10\x11\x12\x13\x14\x15\x16\x17\x18\x19\x1a\x1b\x1c\x1d\x1e\x1f !\"#$%&'()*+,-./0123456789:;<=>?@ABCDEFGHIJKLMNOPQRSTUVWXYZ[\\]^_`abcdefghijklmnopqrstuvwxyz{|}~\x7f€\x81‚ƒ„…†‡ˆ‰Š‹Œ\x8dŽ\x8f\x90‘’“”•–—˜™š›œ\x9džŸ ¡¢£¤¥¦§¨©ª«¬­®¯°±²³´µ¶·¸¹º»¼½¾¿ÀÁÂÃÄÅÆÇÈÉÊËÌÍÎÏÐÑÒÓÔÕÖ×ØÙÚÛÜÝÞßàáâãäåæçèéêëìíîïðñòóôõö÷øùúûüýþÿ獏´Ā") returned 256 [0164.110] GetStringTypeW (in: dwInfoType=0x1, lpSrcStr=" \x01\x02\x03\x04\x05\x06\x07\x08\x09\n\x0b\x0c\r\x0e\x0f\x10\x11\x12\x13\x14\x15\x16\x17\x18\x19\x1a\x1b\x1c\x1d\x1e\x1f !\"#$%&'()*+,-./0123456789:;<=>?@ABCDEFGHIJKLMNOPQRSTUVWXYZ[\\]^_`abcdefghijklmnopqrstuvwxyz{|}~\x7f€\x81‚ƒ„…†‡ˆ‰Š‹Œ\x8dŽ\x8f\x90‘’“”•–—˜™š›œ\x9džŸ ¡¢£¤¥¦§¨©ª«¬­®¯°±²³´µ¶·¸¹º»¼½¾¿ÀÁÂÃÄÅÆÇÈÉÊËÌÍÎÏÐÑÒÓÔÕÖ×ØÙÚÛÜÝÞßàáâãäåæçèéêëìíîïðñòóôõö÷øùúûüýþÿ獏´Ā", cchSrc=256, lpCharType=0x26f69c | out: lpCharType=0x26f69c) returned 1 [0164.110] GetLastError () returned 0x0 [0164.110] SetLastError (dwErrCode=0x0) [0164.110] LCMapStringW (in: Locale=0x0, dwMapFlags=0x100, lpSrcStr="", cchSrc=1, lpDestStr=0x0, cchDest=0 | out: lpDestStr=0x0) returned 1 [0164.110] MultiByteToWideChar (in: CodePage=0x4e4, dwFlags=0x1, lpMultiByteStr=0x26fa9c, cbMultiByte=256, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 256 [0164.110] MultiByteToWideChar (in: CodePage=0x4e4, dwFlags=0x1, lpMultiByteStr=0x26fa9c, cbMultiByte=256, lpWideCharStr=0x26f3a8, cchWideChar=256 | out: lpWideCharStr=" \x01\x02\x03\x04\x05\x06\x07\x08\x09\n\x0b\x0c\r\x0e\x0f\x10\x11\x12\x13\x14\x15\x16\x17\x18\x19\x1a\x1b\x1c\x1d\x1e\x1f !\"#$%&'()*+,-./0123456789:;<=>?@ABCDEFGHIJKLMNOPQRSTUVWXYZ[\\]^_`abcdefghijklmnopqrstuvwxyz{|}~\x7f€\x81‚ƒ„…†‡ˆ‰Š‹Œ\x8dŽ\x8f\x90‘’“”•–—˜™š›œ\x9džŸ ¡¢£¤¥¦§¨©ª«¬­®¯°±²³´µ¶·¸¹º»¼½¾¿ÀÁÂÃÄÅÆÇÈÉÊËÌÍÎÏÐÑÒÓÔÕÖ×ØÙÚÛÜÝÞßàáâãäåæçèéêëìíîïðñòóôõö÷øùúûüýþÿ篾Ā") returned 256 [0164.110] LCMapStringW (in: Locale=0x0, dwMapFlags=0x100, lpSrcStr=" \x01\x02\x03\x04\x05\x06\x07\x08\x09\n\x0b\x0c\r\x0e\x0f\x10\x11\x12\x13\x14\x15\x16\x17\x18\x19\x1a\x1b\x1c\x1d\x1e\x1f !\"#$%&'()*+,-./0123456789:;<=>?@ABCDEFGHIJKLMNOPQRSTUVWXYZ[\\]^_`abcdefghijklmnopqrstuvwxyz{|}~\x7f€\x81‚ƒ„…†‡ˆ‰Š‹Œ\x8dŽ\x8f\x90‘’“”•–—˜™š›œ\x9džŸ ¡¢£¤¥¦§¨©ª«¬­®¯°±²³´µ¶·¸¹º»¼½¾¿ÀÁÂÃÄÅÆÇÈÉÊËÌÍÎÏÐÑÒÓÔÕÖ×ØÙÚÛÜÝÞßàáâãäåæçèéêëìíîïðñòóôõö÷øùúûüýþÿ篾Ā", cchSrc=256, lpDestStr=0x0, cchDest=0 | out: lpDestStr=0x0) returned 256 [0164.110] LCMapStringW (in: Locale=0x0, dwMapFlags=0x100, lpSrcStr=" \x01\x02\x03\x04\x05\x06\x07\x08\x09\n\x0b\x0c\r\x0e\x0f\x10\x11\x12\x13\x14\x15\x16\x17\x18\x19\x1a\x1b\x1c\x1d\x1e\x1f !\"#$%&'()*+,-./0123456789:;<=>?@ABCDEFGHIJKLMNOPQRSTUVWXYZ[\\]^_`abcdefghijklmnopqrstuvwxyz{|}~\x7f€\x81‚ƒ„…†‡ˆ‰Š‹Œ\x8dŽ\x8f\x90‘’“”•–—˜™š›œ\x9džŸ ¡¢£¤¥¦§¨©ª«¬­®¯°±²³´µ¶·¸¹º»¼½¾¿ÀÁÂÃÄÅÆÇÈÉÊËÌÍÎÏÐÑÒÓÔÕÖ×ØÙÚÛÜÝÞßàáâãäåæçèéêëìíîïðñòóôõö÷øùúûüýþÿ篾Ā", cchSrc=256, lpDestStr=0x26f198, cchDest=256 | out: lpDestStr=" \x01\x02\x03\x04\x05\x06\x07\x08\x09\n\x0b\x0c\r\x0e\x0f\x10\x11\x12\x13\x14\x15\x16\x17\x18\x19\x1a\x1b\x1c\x1d\x1e\x1f !\"#$%&'()*+,-./0123456789:;<=>?@abcdefghijklmnopqrstuvwxyz[\\]^_`abcdefghijklmnopqrstuvwxyz{|}~\x7f€\x81‚ƒ„…†‡ˆ‰š‹œ\x8dž\x8f\x90‘’“”•–—˜™š›œ\x9džÿ ¡¢£¤¥¦§¨©ª«¬­®¯°±²³´µ¶·¸¹º»¼½¾¿àáâãäåæçèéêëìíîïðñòóôõö×øùúûüýþßàáâãäåæçèéêëìíîïðñòóôõö÷øùúûüýþÿЀ") returned 256 [0164.111] WideCharToMultiByte (in: CodePage=0x4e4, dwFlags=0x0, lpWideCharStr=" \x01\x02\x03\x04\x05\x06\x07\x08\x09\n\x0b\x0c\r\x0e\x0f\x10\x11\x12\x13\x14\x15\x16\x17\x18\x19\x1a\x1b\x1c\x1d\x1e\x1f !\"#$%&'()*+,-./0123456789:;<=>?@abcdefghijklmnopqrstuvwxyz[\\]^_`abcdefghijklmnopqrstuvwxyz{|}~\x7f€\x81‚ƒ„…†‡ˆ‰š‹œ\x8dž\x8f\x90‘’“”•–—˜™š›œ\x9džÿ ¡¢£¤¥¦§¨©ª«¬­®¯°±²³´µ¶·¸¹º»¼½¾¿àáâãäåæçèéêëìíîïðñòóôõö×øùúûüýþßàáâãäåæçèéêëìíîïðñòóôõö÷øùúûüýþÿЀ", cchWideChar=256, lpMultiByteStr=0x26f99c, cbMultiByte=256, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=" \x01\x02\x03\x04\x05\x06\x07\x08\x09\n\x0b\x0c\r\x0e\x0f\x10\x11\x12\x13\x14\x15\x16\x17\x18\x19\x1a\x1b\x1c\x1d\x1e\x1f !\"#$%&'()*+,-./0123456789:;<=>?@abcdefghijklmnopqrstuvwxyz[\\]^_`abcdefghijklmnopqrstuvwxyz{|}~\x7f\x80\x81\x82\x83\x84…\x86\x87\x88\x89\x9a\x8b\x9c\x8d\x9e\x8f\x90\x91\x92\x93\x94\x95\x96\x97\x98\x99\x9a\x9b\x9c\x9d\x9eÿ ¡¢£¤¥¦§¨©ª«¬­®¯°±²³´µ¶·¸¹º»¼½¾¿àáâãäåæçèéêëìíîïðñòóôõö×øùúûüýþßàáâãäåæçèéêëìíîïðñòóôõö÷øùúûüýþÿ \x01\x02\x03\x04\x05\x06\x07\x08\x09\n\x0b\x0c\r\x0e\x0f\x10\x11\x12\x13\x14\x15\x16\x17\x18\x19\x1a\x1b\x1c\x1d\x1e\x1f !\"#$%&'()*+,-./0123456789:;<=>?@ABCDEFGHIJKLMNOPQRSTUVWXYZ[\\]^_`abcdefghijklmnopqrstuvwxyz{|}~\x7f\x80\x81\x82\x83\x84…\x86\x87\x88\x89\x8a\x8b\x8c\x8d\x8e\x8f\x90\x91\x92\x93\x94\x95\x96\x97\x98\x99\x9a\x9b\x9c\x9d\x9e\x9f ¡¢£¤¥¦§¨©ª«¬­®¯°±²³´µ¶·¸¹º»¼½¾¿ÀÁÂÃÄÅÆÇÈÉÊËÌÍÎÏÐÑÒÓÔÕÖ×ØÙÚÛÜÝÞßàáâãäåæçèéêëìíîïðñòóôõö÷øùúûüýþÿªu¼àÔû&", lpUsedDefaultChar=0x0) returned 256 [0164.111] GetLastError () returned 0x0 [0164.111] SetLastError (dwErrCode=0x0) [0164.111] MultiByteToWideChar (in: CodePage=0x4e4, dwFlags=0x1, lpMultiByteStr=0x26fa9c, cbMultiByte=256, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 256 [0164.111] MultiByteToWideChar (in: CodePage=0x4e4, dwFlags=0x1, lpMultiByteStr=0x26fa9c, cbMultiByte=256, lpWideCharStr=0x26f3c8, cchWideChar=256 | out: lpWideCharStr=" \x01\x02\x03\x04\x05\x06\x07\x08\x09\n\x0b\x0c\r\x0e\x0f\x10\x11\x12\x13\x14\x15\x16\x17\x18\x19\x1a\x1b\x1c\x1d\x1e\x1f !\"#$%&'()*+,-./0123456789:;<=>?@ABCDEFGHIJKLMNOPQRSTUVWXYZ[\\]^_`abcdefghijklmnopqrstuvwxyz{|}~\x7f€\x81‚ƒ„…†‡ˆ‰Š‹Œ\x8dŽ\x8f\x90‘’“”•–—˜™š›œ\x9džŸ ¡¢£¤¥¦§¨©ª«¬­®¯°±²³´µ¶·¸¹º»¼½¾¿ÀÁÂÃÄÅÆÇÈÉÊËÌÍÎÏÐÑÒÓÔÕÖ×ØÙÚÛÜÝÞßàáâãäåæçèéêëìíîïðñòóôõö÷øùúûüýþÿ砞Ā") returned 256 [0164.111] LCMapStringW (in: Locale=0x0, dwMapFlags=0x200, lpSrcStr=" \x01\x02\x03\x04\x05\x06\x07\x08\x09\n\x0b\x0c\r\x0e\x0f\x10\x11\x12\x13\x14\x15\x16\x17\x18\x19\x1a\x1b\x1c\x1d\x1e\x1f !\"#$%&'()*+,-./0123456789:;<=>?@ABCDEFGHIJKLMNOPQRSTUVWXYZ[\\]^_`abcdefghijklmnopqrstuvwxyz{|}~\x7f€\x81‚ƒ„…†‡ˆ‰Š‹Œ\x8dŽ\x8f\x90‘’“”•–—˜™š›œ\x9džŸ ¡¢£¤¥¦§¨©ª«¬­®¯°±²³´µ¶·¸¹º»¼½¾¿ÀÁÂÃÄÅÆÇÈÉÊËÌÍÎÏÐÑÒÓÔÕÖ×ØÙÚÛÜÝÞßàáâãäåæçèéêëìíîïðñòóôõö÷øùúûüýþÿ砞Ā", cchSrc=256, lpDestStr=0x0, cchDest=0 | out: lpDestStr=0x0) returned 256 [0164.111] LCMapStringW (in: Locale=0x0, dwMapFlags=0x200, lpSrcStr=" \x01\x02\x03\x04\x05\x06\x07\x08\x09\n\x0b\x0c\r\x0e\x0f\x10\x11\x12\x13\x14\x15\x16\x17\x18\x19\x1a\x1b\x1c\x1d\x1e\x1f !\"#$%&'()*+,-./0123456789:;<=>?@ABCDEFGHIJKLMNOPQRSTUVWXYZ[\\]^_`abcdefghijklmnopqrstuvwxyz{|}~\x7f€\x81‚ƒ„…†‡ˆ‰Š‹Œ\x8dŽ\x8f\x90‘’“”•–—˜™š›œ\x9džŸ ¡¢£¤¥¦§¨©ª«¬­®¯°±²³´µ¶·¸¹º»¼½¾¿ÀÁÂÃÄÅÆÇÈÉÊËÌÍÎÏÐÑÒÓÔÕÖ×ØÙÚÛÜÝÞßàáâãäåæçèéêëìíîïðñòóôõö÷øùúûüýþÿ砞Ā", cchSrc=256, lpDestStr=0x26f1b8, cchDest=256 | out: lpDestStr=" \x01\x02\x03\x04\x05\x06\x07\x08\x09\n\x0b\x0c\r\x0e\x0f\x10\x11\x12\x13\x14\x15\x16\x17\x18\x19\x1a\x1b\x1c\x1d\x1e\x1f !\"#$%&'()*+,-./0123456789:;<=>?@ABCDEFGHIJKLMNOPQRSTUVWXYZ[\\]^_`ABCDEFGHIJKLMNOPQRSTUVWXYZ{|}~\x7f€\x81‚Ƒ„…†‡ˆ‰Š‹Œ\x8dŽ\x8f\x90‘’“”•–—˜™Š›Œ\x9dŽŸ ¡¢£¤¥¦§¨©ª«¬­®¯°±²³´µ¶·¸¹º»¼½¾¿ÀÁÂÃÄÅÆÇÈÉÊËÌÍÎÏÐÑÒÓÔÕÖ×ØÙÚÛÜÝÞßÀÁÂÃÄÅÆÇÈÉÊËÌÍÎÏÐÑÒÓÔÕÖ÷ØÙÚÛÜÝÞŸЀ") returned 256 [0164.111] WideCharToMultiByte (in: CodePage=0x4e4, dwFlags=0x0, lpWideCharStr=" \x01\x02\x03\x04\x05\x06\x07\x08\x09\n\x0b\x0c\r\x0e\x0f\x10\x11\x12\x13\x14\x15\x16\x17\x18\x19\x1a\x1b\x1c\x1d\x1e\x1f !\"#$%&'()*+,-./0123456789:;<=>?@ABCDEFGHIJKLMNOPQRSTUVWXYZ[\\]^_`ABCDEFGHIJKLMNOPQRSTUVWXYZ{|}~\x7f€\x81‚Ƒ„…†‡ˆ‰Š‹Œ\x8dŽ\x8f\x90‘’“”•–—˜™Š›Œ\x9dŽŸ ¡¢£¤¥¦§¨©ª«¬­®¯°±²³´µ¶·¸¹º»¼½¾¿ÀÁÂÃÄÅÆÇÈÉÊËÌÍÎÏÐÑÒÓÔÕÖ×ØÙÚÛÜÝÞßÀÁÂÃÄÅÆÇÈÉÊËÌÍÎÏÐÑÒÓÔÕÖ÷ØÙÚÛÜÝÞŸЀ", cchWideChar=256, lpMultiByteStr=0x26f89c, cbMultiByte=256, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=" \x01\x02\x03\x04\x05\x06\x07\x08\x09\n\x0b\x0c\r\x0e\x0f\x10\x11\x12\x13\x14\x15\x16\x17\x18\x19\x1a\x1b\x1c\x1d\x1e\x1f !\"#$%&'()*+,-./0123456789:;<=>?@ABCDEFGHIJKLMNOPQRSTUVWXYZ[\\]^_`ABCDEFGHIJKLMNOPQRSTUVWXYZ{|}~\x7f\x80\x81\x82\x83\x84…\x86\x87\x88\x89\x8a\x8b\x8c\x8d\x8e\x8f\x90\x91\x92\x93\x94\x95\x96\x97\x98\x99\x8a\x9b\x8c\x9d\x8e\x9f ¡¢£¤¥¦§¨©ª«¬­®¯°±²³´µ¶·¸¹º»¼½¾¿ÀÁÂÃÄÅÆÇÈÉÊËÌÍÎÏÐÑÒÓÔÕÖ×ØÙÚÛÜÝÞßÀÁÂÃÄÅÆÇÈÉÊËÌÍÎÏÐÑÒÓÔÕÖ÷ØÙÚÛÜÝÞ\x9f \x01\x02\x03\x04\x05\x06\x07\x08\x09\n\x0b\x0c\r\x0e\x0f\x10\x11\x12\x13\x14\x15\x16\x17\x18\x19\x1a\x1b\x1c\x1d\x1e\x1f !\"#$%&'()*+,-./0123456789:;<=>?@abcdefghijklmnopqrstuvwxyz[\\]^_`abcdefghijklmnopqrstuvwxyz{|}~\x7f\x80\x81\x82\x83\x84…\x86\x87\x88\x89\x9a\x8b\x9c\x8d\x9e\x8f\x90\x91\x92\x93\x94\x95\x96\x97\x98\x99\x9a\x9b\x9c\x9d\x9eÿ ¡¢£¤¥¦§¨©ª«¬­®¯°±²³´µ¶·¸¹º»¼½¾¿àáâãäåæçèéêëìíîïðñòóôõö×øùúûüýþßàáâãäåæçèéêëìíîïðñòóôõö÷øùúûüýþÿ \x01\x02\x03\x04\x05\x06\x07\x08\x09\n\x0b\x0c\r\x0e\x0f\x10\x11\x12\x13\x14\x15\x16\x17\x18\x19\x1a\x1b\x1c\x1d\x1e\x1f !\"#$%&'()*+,-./0123456789:;<=>?@ABCDEFGHIJKLMNOPQRSTUVWXYZ[\\]^_`abcdefghijklmnopqrstuvwxyz{|}~\x7f\x80\x81\x82\x83\x84…\x86\x87\x88\x89\x8a\x8b\x8c\x8d\x8e\x8f\x90\x91\x92\x93\x94\x95\x96\x97\x98\x99\x9a\x9b\x9c\x9d\x9e\x9f ¡¢£¤¥¦§¨©ª«¬­®¯°±²³´µ¶·¸¹º»¼½¾¿ÀÁÂÃÄÅÆÇÈÉÊËÌÍÎÏÐÑÒÓÔÕÖ×ØÙÚÛÜÝÞßàáâãäåæçèéêëìíîïðñòóôõö÷øùúûüýþÿªu¼àÔû&", lpUsedDefaultChar=0x0) returned 256 [0164.111] GetModuleFileNameA (in: hModule=0x0, lpFilename=0xb4b0f0, nSize=0x104 | out: lpFilename="C:\\Windows\\SysWOW64\\mshta.exe" (normalized: "c:\\windows\\syswow64\\mshta.exe")) returned 0x1d [0164.111] GetLastError () returned 0x0 [0164.111] SetLastError (dwErrCode=0x0) [0164.111] GetLastError () returned 0x0 [0164.111] SetLastError (dwErrCode=0x0) [0164.111] GetLastError () returned 0x0 [0164.111] SetLastError (dwErrCode=0x0) [0164.111] GetLastError () returned 0x0 [0164.111] SetLastError (dwErrCode=0x0) [0164.111] GetLastError () returned 0x0 [0164.111] SetLastError (dwErrCode=0x0) [0164.111] GetLastError () returned 0x0 [0164.111] SetLastError (dwErrCode=0x0) [0164.111] GetLastError () returned 0x0 [0164.111] SetLastError (dwErrCode=0x0) [0164.112] GetLastError () returned 0x0 [0164.112] SetLastError (dwErrCode=0x0) [0164.112] GetLastError () returned 0x0 [0164.112] SetLastError (dwErrCode=0x0) [0164.112] GetLastError () returned 0x0 [0164.112] SetLastError (dwErrCode=0x0) [0164.112] GetLastError () returned 0x0 [0164.112] SetLastError (dwErrCode=0x0) [0164.112] GetLastError () returned 0x0 [0164.117] SetLastError (dwErrCode=0x0) [0164.117] GetLastError () returned 0x0 [0164.117] SetLastError (dwErrCode=0x0) [0164.117] GetLastError () returned 0x0 [0164.117] SetLastError (dwErrCode=0x0) [0164.117] GetLastError () returned 0x0 [0164.118] SetLastError (dwErrCode=0x0) [0164.118] GetLastError () returned 0x0 [0164.118] SetLastError (dwErrCode=0x0) [0164.118] GetLastError () returned 0x0 [0164.118] SetLastError (dwErrCode=0x0) [0164.118] GetLastError () returned 0x0 [0164.118] SetLastError (dwErrCode=0x0) [0164.118] GetLastError () returned 0x0 [0164.118] SetLastError (dwErrCode=0x0) [0164.118] GetLastError () returned 0x0 [0164.118] SetLastError (dwErrCode=0x0) [0164.118] GetLastError () returned 0x0 [0164.118] SetLastError (dwErrCode=0x0) [0164.118] GetLastError () returned 0x0 [0164.118] SetLastError (dwErrCode=0x0) [0164.118] GetLastError () returned 0x0 [0164.118] SetLastError (dwErrCode=0x0) [0164.118] GetLastError () returned 0x0 [0164.118] SetLastError (dwErrCode=0x0) [0164.118] GetLastError () returned 0x0 [0164.118] SetLastError (dwErrCode=0x0) [0164.119] GetLastError () returned 0x0 [0164.119] SetLastError (dwErrCode=0x0) [0164.119] GetLastError () returned 0x0 [0164.119] SetLastError (dwErrCode=0x0) [0164.119] GetLastError () returned 0x0 [0164.119] SetLastError (dwErrCode=0x0) [0164.119] GetLastError () returned 0x0 [0164.119] SetLastError (dwErrCode=0x0) [0164.119] GetLastError () returned 0x0 [0164.119] SetLastError (dwErrCode=0x0) [0164.119] GetLastError () returned 0x0 [0164.119] SetLastError (dwErrCode=0x0) [0164.119] GetLastError () returned 0x0 [0164.119] SetLastError (dwErrCode=0x0) [0164.119] GetLastError () returned 0x0 [0164.119] SetLastError (dwErrCode=0x0) [0164.119] GetLastError () returned 0x0 [0164.119] SetLastError (dwErrCode=0x0) [0164.119] GetLastError () returned 0x0 [0164.119] SetLastError (dwErrCode=0x0) [0164.119] GetLastError () returned 0x0 [0164.120] SetLastError (dwErrCode=0x0) [0164.120] GetLastError () returned 0x0 [0164.120] SetLastError (dwErrCode=0x0) [0164.120] GetLastError () returned 0x0 [0164.120] SetLastError (dwErrCode=0x0) [0164.120] GetLastError () returned 0x0 [0164.120] SetLastError (dwErrCode=0x0) [0164.120] GetLastError () returned 0x0 [0164.120] SetLastError (dwErrCode=0x0) [0164.120] GetLastError () returned 0x0 [0164.120] SetLastError (dwErrCode=0x0) [0164.120] GetLastError () returned 0x0 [0164.120] SetLastError (dwErrCode=0x0) [0164.120] GetLastError () returned 0x0 [0164.120] SetLastError (dwErrCode=0x0) [0164.120] GetLastError () returned 0x0 [0164.120] SetLastError (dwErrCode=0x0) [0164.120] GetLastError () returned 0x0 [0164.120] SetLastError (dwErrCode=0x0) [0164.120] GetLastError () returned 0x0 [0164.120] SetLastError (dwErrCode=0x0) [0164.120] GetLastError () returned 0x0 [0164.121] SetLastError (dwErrCode=0x0) [0164.121] GetLastError () returned 0x0 [0164.121] SetLastError (dwErrCode=0x0) [0164.121] GetLastError () returned 0x0 [0164.121] SetLastError (dwErrCode=0x0) [0164.121] GetLastError () returned 0x0 [0164.121] SetLastError (dwErrCode=0x0) [0164.121] GetLastError () returned 0x0 [0164.121] SetLastError (dwErrCode=0x0) [0164.121] GetLastError () returned 0x0 [0164.121] SetLastError (dwErrCode=0x0) [0164.121] GetLastError () returned 0x0 [0164.121] SetLastError (dwErrCode=0x0) [0164.121] GetLastError () returned 0x0 [0164.121] SetLastError (dwErrCode=0x0) [0164.121] GetLastError () returned 0x0 [0164.121] SetLastError (dwErrCode=0x0) [0164.121] GetLastError () returned 0x0 [0164.121] SetLastError (dwErrCode=0x0) [0164.121] GetLastError () returned 0x0 [0164.121] SetLastError (dwErrCode=0x0) [0164.121] GetLastError () returned 0x0 [0164.122] SetLastError (dwErrCode=0x0) [0164.122] GetLastError () returned 0x0 [0164.122] SetLastError (dwErrCode=0x0) [0164.122] GetLastError () returned 0x0 [0164.122] SetLastError (dwErrCode=0x0) [0164.122] GetLastError () returned 0x0 [0164.122] SetLastError (dwErrCode=0x0) [0164.122] GetLastError () returned 0x0 [0164.122] SetLastError (dwErrCode=0x0) [0164.122] GetLastError () returned 0x0 [0164.122] SetLastError (dwErrCode=0x0) [0164.122] GetLastError () returned 0x0 [0164.122] SetLastError (dwErrCode=0x0) [0164.122] GetLastError () returned 0x0 [0164.122] SetLastError (dwErrCode=0x0) [0164.122] GetLastError () returned 0x0 [0164.122] SetLastError (dwErrCode=0x0) [0164.122] GetLastError () returned 0x0 [0164.122] SetLastError (dwErrCode=0x0) [0164.122] GetLastError () returned 0x0 [0164.122] SetLastError (dwErrCode=0x0) [0164.123] GetLastError () returned 0x0 [0164.123] SetLastError (dwErrCode=0x0) [0164.123] GetLastError () returned 0x0 [0164.123] SetLastError (dwErrCode=0x0) [0164.123] GetLastError () returned 0x0 [0164.123] SetLastError (dwErrCode=0x0) [0164.123] GetLastError () returned 0x0 [0164.123] SetLastError (dwErrCode=0x0) [0164.123] GetLastError () returned 0x0 [0164.123] SetLastError (dwErrCode=0x0) [0164.123] GetLastError () returned 0x0 [0164.123] SetLastError (dwErrCode=0x0) [0164.123] GetLastError () returned 0x0 [0164.123] SetLastError (dwErrCode=0x0) [0164.123] RtlAllocateHeap (HeapHandle=0x680000, Flags=0x0, Size=0x14c) returned 0x681610 [0164.123] GetLastError () returned 0x0 [0164.123] SetLastError (dwErrCode=0x0) [0164.123] GetLastError () returned 0x0 [0164.123] SetLastError (dwErrCode=0x0) [0164.123] GetLastError () returned 0x0 [0164.123] SetLastError (dwErrCode=0x0) [0164.123] GetLastError () returned 0x0 [0164.124] SetLastError (dwErrCode=0x0) [0164.124] GetLastError () returned 0x0 [0164.124] SetLastError (dwErrCode=0x0) [0164.124] GetLastError () returned 0x0 [0164.124] SetLastError (dwErrCode=0x0) [0164.124] GetLastError () returned 0x0 [0164.124] SetLastError (dwErrCode=0x0) [0164.124] GetLastError () returned 0x0 [0164.124] SetLastError (dwErrCode=0x0) [0164.124] GetLastError () returned 0x0 [0164.124] SetLastError (dwErrCode=0x0) [0164.124] GetLastError () returned 0x0 [0164.124] SetLastError (dwErrCode=0x0) [0164.124] GetLastError () returned 0x0 [0164.124] SetLastError (dwErrCode=0x0) [0164.124] GetLastError () returned 0x0 [0164.124] SetLastError (dwErrCode=0x0) [0164.124] GetLastError () returned 0x0 [0164.124] SetLastError (dwErrCode=0x0) [0164.124] GetLastError () returned 0x0 [0164.124] SetLastError (dwErrCode=0x0) [0164.124] GetLastError () returned 0x0 [0164.125] SetLastError (dwErrCode=0x0) [0164.125] GetLastError () returned 0x0 [0164.125] SetLastError (dwErrCode=0x0) [0164.125] GetLastError () returned 0x0 [0164.125] SetLastError (dwErrCode=0x0) [0164.125] GetLastError () returned 0x0 [0164.125] SetLastError (dwErrCode=0x0) [0164.125] GetLastError () returned 0x0 [0164.125] SetLastError (dwErrCode=0x0) [0164.125] GetLastError () returned 0x0 [0164.125] SetLastError (dwErrCode=0x0) [0164.125] GetLastError () returned 0x0 [0164.125] SetLastError (dwErrCode=0x0) [0164.125] GetLastError () returned 0x0 [0164.125] SetLastError (dwErrCode=0x0) [0164.125] GetLastError () returned 0x0 [0164.125] SetLastError (dwErrCode=0x0) [0164.125] GetLastError () returned 0x0 [0164.125] SetLastError (dwErrCode=0x0) [0164.125] GetLastError () returned 0x0 [0164.125] SetLastError (dwErrCode=0x0) [0164.125] GetLastError () returned 0x0 [0164.126] SetLastError (dwErrCode=0x0) [0164.126] GetLastError () returned 0x0 [0164.126] SetLastError (dwErrCode=0x0) [0164.126] GetLastError () returned 0x0 [0164.126] SetLastError (dwErrCode=0x0) [0164.126] GetLastError () returned 0x0 [0164.126] SetLastError (dwErrCode=0x0) [0164.126] GetLastError () returned 0x0 [0164.126] SetLastError (dwErrCode=0x0) [0164.126] GetLastError () returned 0x0 [0164.126] SetLastError (dwErrCode=0x0) [0164.126] GetLastError () returned 0x0 [0164.126] SetLastError (dwErrCode=0x0) [0164.126] GetLastError () returned 0x0 [0164.126] SetLastError (dwErrCode=0x0) [0164.126] GetLastError () returned 0x0 [0164.126] SetLastError (dwErrCode=0x0) [0164.126] GetLastError () returned 0x0 [0164.126] SetLastError (dwErrCode=0x0) [0164.126] GetLastError () returned 0x0 [0164.126] SetLastError (dwErrCode=0x0) [0164.127] GetLastError () returned 0x0 [0164.127] SetLastError (dwErrCode=0x0) [0164.127] GetLastError () returned 0x0 [0164.127] SetLastError (dwErrCode=0x0) [0164.127] GetLastError () returned 0x0 [0164.127] SetLastError (dwErrCode=0x0) [0164.127] GetLastError () returned 0x0 [0164.127] SetLastError (dwErrCode=0x0) [0164.127] GetLastError () returned 0x0 [0164.127] SetLastError (dwErrCode=0x0) [0164.127] GetLastError () returned 0x0 [0164.127] SetLastError (dwErrCode=0x0) [0164.127] GetLastError () returned 0x0 [0164.127] SetLastError (dwErrCode=0x0) [0164.127] GetLastError () returned 0x0 [0164.127] SetLastError (dwErrCode=0x0) [0164.127] GetLastError () returned 0x0 [0164.127] SetLastError (dwErrCode=0x0) [0164.127] GetLastError () returned 0x0 [0164.127] SetLastError (dwErrCode=0x0) [0164.127] GetLastError () returned 0x0 [0164.127] SetLastError (dwErrCode=0x0) [0164.128] GetLastError () returned 0x0 [0164.128] SetLastError (dwErrCode=0x0) [0164.128] GetLastError () returned 0x0 [0164.128] SetLastError (dwErrCode=0x0) [0164.128] GetLastError () returned 0x0 [0164.128] SetLastError (dwErrCode=0x0) [0164.128] GetLastError () returned 0x0 [0164.128] SetLastError (dwErrCode=0x0) [0164.128] GetLastError () returned 0x0 [0164.128] SetLastError (dwErrCode=0x0) [0164.128] GetLastError () returned 0x0 [0164.128] SetLastError (dwErrCode=0x0) [0164.128] GetLastError () returned 0x0 [0164.128] SetLastError (dwErrCode=0x0) [0164.128] GetLastError () returned 0x0 [0164.128] SetLastError (dwErrCode=0x0) [0164.128] GetLastError () returned 0x0 [0164.129] SetLastError (dwErrCode=0x0) [0164.129] GetLastError () returned 0x0 [0164.129] SetLastError (dwErrCode=0x0) [0164.129] GetLastError () returned 0x0 [0164.129] SetLastError (dwErrCode=0x0) [0164.129] GetLastError () returned 0x0 [0164.129] SetLastError (dwErrCode=0x0) [0164.129] GetLastError () returned 0x0 [0164.129] SetLastError (dwErrCode=0x0) [0164.129] GetLastError () returned 0x0 [0164.129] SetLastError (dwErrCode=0x0) [0164.129] GetLastError () returned 0x0 [0164.129] SetLastError (dwErrCode=0x0) [0164.129] GetLastError () returned 0x0 [0164.129] SetLastError (dwErrCode=0x0) [0164.129] GetLastError () returned 0x0 [0164.129] SetLastError (dwErrCode=0x0) [0164.129] GetLastError () returned 0x0 [0164.129] SetLastError (dwErrCode=0x0) [0164.129] GetLastError () returned 0x0 [0164.129] SetLastError (dwErrCode=0x0) [0164.129] GetLastError () returned 0x0 [0164.130] SetLastError (dwErrCode=0x0) [0164.130] GetLastError () returned 0x0 [0164.130] SetLastError (dwErrCode=0x0) [0164.130] GetLastError () returned 0x0 [0164.130] SetLastError (dwErrCode=0x0) [0164.130] GetLastError () returned 0x0 [0164.130] SetLastError (dwErrCode=0x0) [0164.130] GetLastError () returned 0x0 [0164.130] SetLastError (dwErrCode=0x0) [0164.130] GetLastError () returned 0x0 [0164.130] SetLastError (dwErrCode=0x0) [0164.130] GetLastError () returned 0x0 [0164.130] SetLastError (dwErrCode=0x0) [0164.130] GetLastError () returned 0x0 [0164.130] SetLastError (dwErrCode=0x0) [0164.130] GetLastError () returned 0x0 [0164.130] SetLastError (dwErrCode=0x0) [0164.130] RtlAllocateHeap (HeapHandle=0x680000, Flags=0x8, Size=0x5fc) returned 0x681768 [0164.130] HeapFree (in: hHeap=0x680000, dwFlags=0x0, lpMem=0x680e78 | out: hHeap=0x680000) returned 1 [0164.131] SetUnhandledExceptionFilter (lpTopLevelExceptionFilter=0xb42aef) returned 0x0 [0164.132] GetLastError () returned 0x0 [0164.132] SetLastError (dwErrCode=0x0) [0164.132] GetLastError () returned 0x0 [0164.132] SetLastError (dwErrCode=0x0) [0164.132] GetLastError () returned 0x0 [0164.132] SetLastError (dwErrCode=0x0) [0164.132] GetLastError () returned 0x0 [0164.132] SetLastError (dwErrCode=0x0) [0164.132] GetLastError () returned 0x0 [0164.132] SetLastError (dwErrCode=0x0) [0164.132] GetLastError () returned 0x0 [0164.132] SetLastError (dwErrCode=0x0) [0164.132] GetLastError () returned 0x0 [0164.132] SetLastError (dwErrCode=0x0) [0164.132] GetLastError () returned 0x0 [0164.132] SetLastError (dwErrCode=0x0) [0164.132] GetLastError () returned 0x0 [0164.132] SetLastError (dwErrCode=0x0) [0164.132] GetLastError () returned 0x0 [0164.133] SetLastError (dwErrCode=0x0) [0164.133] GetLastError () returned 0x0 [0164.133] SetLastError (dwErrCode=0x0) [0164.133] GetLastError () returned 0x0 [0164.133] SetLastError (dwErrCode=0x0) [0164.133] GetLastError () returned 0x0 [0164.133] SetLastError (dwErrCode=0x0) [0164.133] GetLastError () returned 0x0 [0164.133] SetLastError (dwErrCode=0x0) [0164.133] GetLastError () returned 0x0 [0164.133] SetLastError (dwErrCode=0x0) [0164.133] GetLastError () returned 0x0 [0164.133] SetLastError (dwErrCode=0x0) [0164.133] GetLastError () returned 0x0 [0164.133] SetLastError (dwErrCode=0x0) [0164.133] GetLastError () returned 0x0 [0164.133] SetLastError (dwErrCode=0x0) [0164.133] GetLastError () returned 0x0 [0164.133] SetLastError (dwErrCode=0x0) [0164.133] GetLastError () returned 0x0 [0164.133] SetLastError (dwErrCode=0x0) [0164.133] GetLastError () returned 0x0 [0164.134] SetLastError (dwErrCode=0x0) [0164.134] GetLastError () returned 0x0 [0164.134] SetLastError (dwErrCode=0x0) [0164.134] GetLastError () returned 0x0 [0164.134] SetLastError (dwErrCode=0x0) [0164.134] GetLastError () returned 0x0 [0164.134] SetLastError (dwErrCode=0x0) [0164.134] GetLastError () returned 0x0 [0164.134] SetLastError (dwErrCode=0x0) [0164.134] GetLastError () returned 0x0 [0164.134] SetLastError (dwErrCode=0x0) [0164.134] GetLastError () returned 0x0 [0164.134] SetLastError (dwErrCode=0x0) [0164.134] GetLastError () returned 0x0 [0164.134] SetLastError (dwErrCode=0x0) [0164.134] GetLastError () returned 0x0 [0164.134] SetLastError (dwErrCode=0x0) [0164.134] GetLastError () returned 0x0 [0164.134] SetLastError (dwErrCode=0x0) [0164.134] GetLastError () returned 0x0 [0164.134] SetLastError (dwErrCode=0x0) [0164.134] GetVersion () returned 0x1db10106 [0164.135] GetModuleHandleW (lpModuleName="Kernel32.dll") returned 0x76d30000 [0164.135] GetProcAddress (hModule=0x76d30000, lpProcName="HeapSetInformation") returned 0x76d45651 [0164.135] HeapSetInformation (HeapHandle=0x0, HeapInformationClass=0x1, HeapInformation=0x0, HeapInformationLength=0x0) returned 1 [0164.135] RtlAllocateHeap (HeapHandle=0x680000, Flags=0x0, Size=0x105) returned 0x681d70 [0164.135] RtlAllocateHeap (HeapHandle=0x680000, Flags=0x0, Size=0x105) returned 0x681e80 [0164.135] RegOpenKeyExA (in: hKey=0x80000000, lpSubKey="clsid\\{25336920-03f9-11cf-8fd0-00aa00686f13}\\InProcServer32", ulOptions=0x0, samDesired=0x1, phkResult=0x26fc34 | out: phkResult=0x26fc34*=0x42) returned 0x0 [0164.135] RegQueryValueExA (in: hKey=0x42, lpValueName=0x0, lpReserved=0x0, lpType=0x26fc2c, lpData=0x681d70, lpcbData=0x26fc28*=0x105 | out: lpType=0x26fc2c*=0x1, lpData="C:\\Windows\\SysWOW64\\mshtml.dll", lpcbData=0x26fc28*=0x1f) returned 0x0 [0164.135] LoadLibraryA (lpLibFileName="C:\\Windows\\SysWOW64\\mshtml.dll") returned 0x6fa30000 [0165.191] GetProcessHeap () returned 0x470000 [0165.191] GetVersion () returned 0x1db10106 [0165.191] GetModuleHandleW (lpModuleName="Kernel32.dll") returned 0x76d30000 [0165.191] GetProcAddress (hModule=0x76d30000, lpProcName="HeapSetInformation") returned 0x76d45651 [0165.191] HeapSetInformation (HeapHandle=0x470000, HeapInformationClass=0x0, HeapInformation=0x26f8c0, HeapInformationLength=0x4) returned 1 [0165.193] malloc (_Size=0x80) returned 0x32640 [0165.193] GetVersion () returned 0x1db10106 [0165.194] GetVersionExA (in: lpVersionInformation=0x26f798*(dwOSVersionInfoSize=0x94, dwMajorVersion=0x0, dwMinorVersion=0x0, dwBuildNumber=0x0, dwPlatformId=0x0, szCSDVersion="") | out: lpVersionInformation=0x26f798*(dwOSVersionInfoSize=0x94, dwMajorVersion=0x6, dwMinorVersion=0x1, dwBuildNumber=0x1db1, dwPlatformId=0x2, szCSDVersion="Service Pack 1")) returned 1 [0165.194] __dllonexit () returned 0x6fc5717c [0165.194] __dllonexit () returned 0x6fc573bd [0165.194] GetProcessHeap () returned 0x470000 [0165.194] __dllonexit () returned 0x6fc57435 [0165.194] __dllonexit () returned 0x6fc56e75 [0165.194] __dllonexit () returned 0x6fc56ff5 [0165.194] __dllonexit () returned 0x6fc571be [0165.194] __dllonexit () returned 0x6fc572e2 [0165.194] __dllonexit () returned 0x6fc57320 [0165.194] __dllonexit () returned 0x6fc57370 [0165.194] __dllonexit () returned 0x6fc56e53 [0165.195] __dllonexit () returned 0x6fc56e66 [0165.195] __dllonexit () returned 0x6fc56a3e [0165.195] __dllonexit () returned 0x6fc56a46 [0165.195] RegisterClipboardFormatW (lpszFormat="CF_RTF") returned 0xc16d [0165.195] RegisterClipboardFormatW (lpszFormat="CF_RTF") returned 0xc16d [0165.195] __dllonexit () returned 0x6fc56a60 [0165.195] __dllonexit () returned 0x6fc56a7a [0165.195] __dllonexit () returned 0x6fc56a93 [0165.195] __dllonexit () returned 0x6fc56aa7 [0165.195] __dllonexit () returned 0x6fc56ac1 [0165.195] __dllonexit () returned 0x6fc571f1 [0165.195] __dllonexit () returned 0x6fc56ad0 [0165.195] __dllonexit () returned 0x6fc56adf [0165.196] __dllonexit () returned 0x6fc56aee [0165.196] __dllonexit () returned 0x6fc56afd [0165.196] __dllonexit () returned 0x6fc56b0d [0165.196] __dllonexit () returned 0x6fc5720c [0165.196] __dllonexit () returned 0x6fc56b1c [0165.196] __dllonexit () returned 0x6fc56b2f [0165.196] __dllonexit () returned 0x6fc56b49 [0165.196] __dllonexit () returned 0x6fc56b58 [0165.196] __dllonexit () returned 0x6fc56b67 [0165.196] __dllonexit () returned 0x6fc56b76 [0165.196] __dllonexit () returned 0x6fc56b85 [0165.196] __dllonexit () returned 0x6fc56b94 [0165.196] __dllonexit () returned 0x6fc56ba3 [0165.197] __dllonexit () returned 0x6fc56bb2 [0165.197] __dllonexit () returned 0x6fc56bc1 [0165.197] __dllonexit () returned 0x6fc56bd0 [0165.197] __dllonexit () returned 0x6fc56bdf [0165.197] __dllonexit () returned 0x6fc56bee [0165.197] __dllonexit () returned 0x6fc56bfd [0165.197] __dllonexit () returned 0x6fc56c0c [0165.197] __dllonexit () returned 0x6fc56c1b [0165.197] __dllonexit () returned 0x6fc56c2a [0165.197] __dllonexit () returned 0x6fc56c3d [0165.197] __dllonexit () returned 0x6fc56c4c [0165.197] __dllonexit () returned 0x6fc56c5b [0165.197] __dllonexit () returned 0x6fc56c75 [0165.197] __dllonexit () returned 0x6fc56c8f [0165.198] __dllonexit () returned 0x6fc56ca9 [0165.198] MulDiv (nNumber=1073741823, nNumerator=384, nDenominator=1440) returned 286331153 [0165.198] MulDiv (nNumber=1073741823, nNumerator=384, nDenominator=1440) returned 286331153 [0165.198] __dllonexit () returned 0x6fc56cb1 [0165.198] __dllonexit () returned 0x6fc57294 [0165.198] __dllonexit () returned 0x6fc56ccb [0165.198] __dllonexit () returned 0x6fc56cd3 [0165.198] __dllonexit () returned 0x6fc56ce2 [0165.198] __dllonexit () returned 0x6fc56cf1 [0165.198] __dllonexit () returned 0x6fc56d00 [0165.198] __dllonexit () returned 0x6fc4f72d [0165.199] __dllonexit () returned 0x6fc56d43 [0165.199] __dllonexit () returned 0x6fc56d56 [0165.199] __dllonexit () returned 0x6fc4f095 [0165.199] __dllonexit () returned 0x6fc56d65 [0165.199] __dllonexit () returned 0x6fc56d78 [0165.199] __dllonexit () returned 0x6fc56d87 [0165.199] __dllonexit () returned 0x6fc56d9a [0165.199] __dllonexit () returned 0x6fc52256 [0165.199] __dllonexit () returned 0x6fc5679d [0165.199] __dllonexit () returned 0x6fc56dd5 [0165.199] __dllonexit () returned 0x6fc56df8 [0165.200] __dllonexit () returned 0x6fc56e07 [0165.200] __dllonexit () returned 0x6fc576cb [0165.200] __dllonexit () returned 0x6fc56e1a [0165.200] __dllonexit () returned 0x6fc572aa [0165.200] __dllonexit () returned 0x6fc572cb [0165.200] __dllonexit () returned 0x6fc56e3a [0165.200] GetCurrentThreadId () returned 0x220 [0165.200] CoCreateGuid (in: pguid=0x6ff6ad20 | out: pguid=0x6ff6ad20*(Data1=0x5539f4ef, Data2=0xb9ef, Data3=0x4eee, Data4=([0]=0x89, [1]=0x4c, [2]=0x49, [3]=0x42, [4]=0x69, [5]=0x39, [6]=0x97, [7]=0x20))) returned 0x0 [0165.202] RtlAllocateHeap (HeapHandle=0x470000, Flags=0x0, Size=0x200) returned 0x48e768 [0165.202] __dllonexit () returned 0x6fc5733d [0165.202] GetModuleFileNameW (in: hModule=0x0, lpFilename=0x26f238, nSize=0x104 | out: lpFilename="C:\\Windows\\SysWOW64\\mshta.exe" (normalized: "c:\\windows\\syswow64\\mshta.exe")) returned 0x1d [0165.202] PathFindFileNameW (pszPath="C:\\Windows\\SysWOW64\\mshta.exe") returned="mshta.exe" [0165.202] StrCmpICW (pszStr1="mshta.exe", pszStr2="iexplore.exe") returned 4 [0165.202] StrCmpICW (pszStr1="mshta.exe", pszStr2="explorer.exe") returned 8 [0165.202] LocalAlloc (uFlags=0x40, uBytes=0x14) returned 0x48e970 [0165.202] SHRegGetValueW () returned 0x2 [0165.202] RegOpenKeyExW (in: hKey=0x80000002, lpSubKey="Software\\Policies\\Microsoft\\Internet Explorer\\Main\\FeatureControl", ulOptions=0x0, samDesired=0x1, phkResult=0x26f484 | out: phkResult=0x26f484*=0x0) returned 0x2 [0165.202] RegOpenKeyExW (in: hKey=0x80000001, lpSubKey="Software\\Policies\\Microsoft\\Internet Explorer\\Main\\FeatureControl", ulOptions=0x0, samDesired=0x1, phkResult=0x26f480 | out: phkResult=0x26f480*=0x0) returned 0x2 [0165.202] RegOpenKeyExW (in: hKey=0x80000002, lpSubKey="Software\\Microsoft\\Internet Explorer\\Main\\FeatureControl", ulOptions=0x0, samDesired=0x1, phkResult=0x26f478 | out: phkResult=0x26f478*=0x94) returned 0x0 [0165.202] RegOpenKeyExW (in: hKey=0x80000001, lpSubKey="Software\\Microsoft\\Internet Explorer\\Main\\FeatureControl", ulOptions=0x0, samDesired=0x1, phkResult=0x26f47c | out: phkResult=0x26f47c*=0x98) returned 0x0 [0165.204] RegOpenKeyExW (in: hKey=0x98, lpSubKey="FEATURE_CSS_DATA_RESPECTS_XSS_ZONE_SETTING_KB912120", ulOptions=0x0, samDesired=0x1, phkResult=0x26f438 | out: phkResult=0x26f438*=0x0) returned 0x2 [0165.205] RegOpenKeyExW (in: hKey=0x94, lpSubKey="FEATURE_CSS_DATA_RESPECTS_XSS_ZONE_SETTING_KB912120", ulOptions=0x0, samDesired=0x1, phkResult=0x26f438 | out: phkResult=0x26f438*=0x0) returned 0x2 [0165.205] RegCloseKey (hKey=0x0) returned 0x6 [0165.205] RegCloseKey (hKey=0x0) returned 0x6 [0165.205] RegCloseKey (hKey=0x94) returned 0x0 [0165.205] RegCloseKey (hKey=0x98) returned 0x0 [0165.205] RegOpenKeyExW (in: hKey=0x80000002, lpSubKey="Software\\Microsoft\\Internet Explorer\\Main\\FeatureControl", ulOptions=0x0, samDesired=0x1, phkResult=0x26f478 | out: phkResult=0x26f478*=0x98) returned 0x0 [0165.205] RegOpenKeyExW (in: hKey=0x80000001, lpSubKey="Software\\Microsoft\\Internet Explorer\\Main\\FeatureControl", ulOptions=0x0, samDesired=0x1, phkResult=0x26f47c | out: phkResult=0x26f47c*=0x94) returned 0x0 [0165.205] RegOpenKeyExW (in: hKey=0x94, lpSubKey="FEATURE_EXTERNAL_STYLE_SHEET_FIX_FOR_SMARTNAVIGATION_KB926131", ulOptions=0x0, samDesired=0x1, phkResult=0x26f438 | out: phkResult=0x26f438*=0x0) returned 0x2 [0165.205] RegOpenKeyExW (in: hKey=0x98, lpSubKey="FEATURE_EXTERNAL_STYLE_SHEET_FIX_FOR_SMARTNAVIGATION_KB926131", ulOptions=0x0, samDesired=0x1, phkResult=0x26f438 | out: phkResult=0x26f438*=0x0) returned 0x2 [0165.206] RegCloseKey (hKey=0x0) returned 0x6 [0165.206] RegCloseKey (hKey=0x0) returned 0x6 [0165.206] RegCloseKey (hKey=0x98) returned 0x0 [0165.206] RegCloseKey (hKey=0x94) returned 0x0 [0165.206] RegOpenKeyExW (in: hKey=0x80000002, lpSubKey="Software\\Microsoft\\Internet Explorer\\Main\\FeatureControl", ulOptions=0x0, samDesired=0x1, phkResult=0x26f478 | out: phkResult=0x26f478*=0x94) returned 0x0 [0165.206] RegOpenKeyExW (in: hKey=0x80000001, lpSubKey="Software\\Microsoft\\Internet Explorer\\Main\\FeatureControl", ulOptions=0x0, samDesired=0x1, phkResult=0x26f47c | out: phkResult=0x26f47c*=0x98) returned 0x0 [0165.206] RegOpenKeyExW (in: hKey=0x98, lpSubKey="FEATURE_ARIA_SUPPORT", ulOptions=0x0, samDesired=0x1, phkResult=0x26f438 | out: phkResult=0x26f438*=0x0) returned 0x2 [0165.206] RegOpenKeyExW (in: hKey=0x94, lpSubKey="FEATURE_ARIA_SUPPORT", ulOptions=0x0, samDesired=0x1, phkResult=0x26f438 | out: phkResult=0x26f438*=0x0) returned 0x2 [0165.206] RegCloseKey (hKey=0x0) returned 0x6 [0165.206] RegCloseKey (hKey=0x0) returned 0x6 [0165.206] RegCloseKey (hKey=0x94) returned 0x0 [0165.206] RegCloseKey (hKey=0x98) returned 0x0 [0165.206] RegOpenKeyExW (in: hKey=0x80000002, lpSubKey="Software\\Microsoft\\Internet Explorer\\Main\\FeatureControl", ulOptions=0x0, samDesired=0x1, phkResult=0x26f478 | out: phkResult=0x26f478*=0x98) returned 0x0 [0165.206] RegOpenKeyExW (in: hKey=0x80000001, lpSubKey="Software\\Microsoft\\Internet Explorer\\Main\\FeatureControl", ulOptions=0x0, samDesired=0x1, phkResult=0x26f47c | out: phkResult=0x26f47c*=0x94) returned 0x0 [0165.206] RegOpenKeyExW (in: hKey=0x94, lpSubKey="FEATURE_LEGACY_DISPPARAMS", ulOptions=0x0, samDesired=0x1, phkResult=0x26f438 | out: phkResult=0x26f438*=0x0) returned 0x2 [0165.207] RegOpenKeyExW (in: hKey=0x98, lpSubKey="FEATURE_LEGACY_DISPPARAMS", ulOptions=0x0, samDesired=0x1, phkResult=0x26f438 | out: phkResult=0x26f438*=0x9c) returned 0x0 [0165.207] SHRegGetValueW () returned 0x2 [0165.207] SHRegGetValueW () returned 0x2 [0165.207] RegCloseKey (hKey=0x9c) returned 0x0 [0165.207] RegCloseKey (hKey=0x0) returned 0x6 [0165.207] RegCloseKey (hKey=0x0) returned 0x6 [0165.207] RegCloseKey (hKey=0x98) returned 0x0 [0165.207] RegCloseKey (hKey=0x94) returned 0x0 [0165.207] RegOpenKeyExW (in: hKey=0x80000002, lpSubKey="Software\\Microsoft\\Internet Explorer\\Main\\FeatureControl", ulOptions=0x0, samDesired=0x1, phkResult=0x26f478 | out: phkResult=0x26f478*=0x94) returned 0x0 [0165.207] RegOpenKeyExW (in: hKey=0x80000001, lpSubKey="Software\\Microsoft\\Internet Explorer\\Main\\FeatureControl", ulOptions=0x0, samDesired=0x1, phkResult=0x26f47c | out: phkResult=0x26f47c*=0x98) returned 0x0 [0165.207] RegOpenKeyExW (in: hKey=0x98, lpSubKey="FEATURE_PRIVATE_FONT_SETTING", ulOptions=0x0, samDesired=0x1, phkResult=0x26f438 | out: phkResult=0x26f438*=0x0) returned 0x2 [0165.207] RegOpenKeyExW (in: hKey=0x94, lpSubKey="FEATURE_PRIVATE_FONT_SETTING", ulOptions=0x0, samDesired=0x1, phkResult=0x26f438 | out: phkResult=0x26f438*=0x0) returned 0x2 [0165.207] RegCloseKey (hKey=0x0) returned 0x6 [0165.207] RegCloseKey (hKey=0x0) returned 0x6 [0165.207] RegCloseKey (hKey=0x94) returned 0x0 [0165.207] RegCloseKey (hKey=0x98) returned 0x0 [0165.207] RegOpenKeyExW (in: hKey=0x80000002, lpSubKey="Software\\Microsoft\\Internet Explorer\\Main\\FeatureControl", ulOptions=0x0, samDesired=0x1, phkResult=0x26f478 | out: phkResult=0x26f478*=0x98) returned 0x0 [0165.208] RegOpenKeyExW (in: hKey=0x80000001, lpSubKey="Software\\Microsoft\\Internet Explorer\\Main\\FeatureControl", ulOptions=0x0, samDesired=0x1, phkResult=0x26f47c | out: phkResult=0x26f47c*=0x94) returned 0x0 [0165.208] RegOpenKeyExW (in: hKey=0x94, lpSubKey="FEATURE_CSS_SHOW_HIDE_EVENTS", ulOptions=0x0, samDesired=0x1, phkResult=0x26f438 | out: phkResult=0x26f438*=0x0) returned 0x2 [0165.208] RegOpenKeyExW (in: hKey=0x98, lpSubKey="FEATURE_CSS_SHOW_HIDE_EVENTS", ulOptions=0x0, samDesired=0x1, phkResult=0x26f438 | out: phkResult=0x26f438*=0x0) returned 0x2 [0165.208] RegCloseKey (hKey=0x0) returned 0x6 [0165.208] RegCloseKey (hKey=0x0) returned 0x6 [0165.208] RegCloseKey (hKey=0x98) returned 0x0 [0165.208] RegCloseKey (hKey=0x94) returned 0x0 [0165.208] RegOpenKeyExW (in: hKey=0x80000002, lpSubKey="Software\\Microsoft\\Internet Explorer\\Main\\FeatureControl", ulOptions=0x0, samDesired=0x1, phkResult=0x26f478 | out: phkResult=0x26f478*=0x94) returned 0x0 [0165.208] RegOpenKeyExW (in: hKey=0x80000001, lpSubKey="Software\\Microsoft\\Internet Explorer\\Main\\FeatureControl", ulOptions=0x0, samDesired=0x1, phkResult=0x26f47c | out: phkResult=0x26f47c*=0x98) returned 0x0 [0165.208] RegOpenKeyExW (in: hKey=0x98, lpSubKey="FEATURE_DISPLAY_NODE_ADVISE_KB833311", ulOptions=0x0, samDesired=0x1, phkResult=0x26f438 | out: phkResult=0x26f438*=0x0) returned 0x2 [0165.208] RegOpenKeyExW (in: hKey=0x94, lpSubKey="FEATURE_DISPLAY_NODE_ADVISE_KB833311", ulOptions=0x0, samDesired=0x1, phkResult=0x26f438 | out: phkResult=0x26f438*=0x0) returned 0x2 [0165.208] RegCloseKey (hKey=0x0) returned 0x6 [0165.208] RegCloseKey (hKey=0x0) returned 0x6 [0165.208] RegCloseKey (hKey=0x94) returned 0x0 [0165.208] RegCloseKey (hKey=0x98) returned 0x0 [0165.208] RegOpenKeyExW (in: hKey=0x80000002, lpSubKey="Software\\Microsoft\\Internet Explorer\\Main\\FeatureControl", ulOptions=0x0, samDesired=0x1, phkResult=0x26f478 | out: phkResult=0x26f478*=0x98) returned 0x0 [0165.209] RegOpenKeyExW (in: hKey=0x80000001, lpSubKey="Software\\Microsoft\\Internet Explorer\\Main\\FeatureControl", ulOptions=0x0, samDesired=0x1, phkResult=0x26f47c | out: phkResult=0x26f47c*=0x94) returned 0x0 [0165.209] RegOpenKeyExW (in: hKey=0x94, lpSubKey="FEATURE_ALLOW_EXPANDURI_BYPASS", ulOptions=0x0, samDesired=0x1, phkResult=0x26f438 | out: phkResult=0x26f438*=0x0) returned 0x2 [0165.209] RegOpenKeyExW (in: hKey=0x98, lpSubKey="FEATURE_ALLOW_EXPANDURI_BYPASS", ulOptions=0x0, samDesired=0x1, phkResult=0x26f438 | out: phkResult=0x26f438*=0x0) returned 0x2 [0165.209] RegCloseKey (hKey=0x0) returned 0x6 [0165.209] RegCloseKey (hKey=0x0) returned 0x6 [0165.209] RegCloseKey (hKey=0x98) returned 0x0 [0165.209] RegCloseKey (hKey=0x94) returned 0x0 [0165.209] RegOpenKeyExW (in: hKey=0x80000002, lpSubKey="Software\\Microsoft\\Internet Explorer\\Main\\FeatureControl", ulOptions=0x0, samDesired=0x1, phkResult=0x26f478 | out: phkResult=0x26f478*=0x94) returned 0x0 [0165.209] RegOpenKeyExW (in: hKey=0x80000001, lpSubKey="Software\\Microsoft\\Internet Explorer\\Main\\FeatureControl", ulOptions=0x0, samDesired=0x1, phkResult=0x26f47c | out: phkResult=0x26f47c*=0x98) returned 0x0 [0165.209] RegOpenKeyExW (in: hKey=0x98, lpSubKey="FEATURE_BODY_SIZE_IN_EDITABLE_IFRAME_KB943245", ulOptions=0x0, samDesired=0x1, phkResult=0x26f438 | out: phkResult=0x26f438*=0x0) returned 0x2 [0165.209] RegOpenKeyExW (in: hKey=0x94, lpSubKey="FEATURE_BODY_SIZE_IN_EDITABLE_IFRAME_KB943245", ulOptions=0x0, samDesired=0x1, phkResult=0x26f438 | out: phkResult=0x26f438*=0x0) returned 0x2 [0165.209] RegCloseKey (hKey=0x0) returned 0x6 [0165.209] RegCloseKey (hKey=0x0) returned 0x6 [0165.209] RegCloseKey (hKey=0x94) returned 0x0 [0165.209] RegCloseKey (hKey=0x98) returned 0x0 [0165.209] RegOpenKeyExW (in: hKey=0x80000002, lpSubKey="Software\\Microsoft\\Internet Explorer\\Main\\FeatureControl", ulOptions=0x0, samDesired=0x1, phkResult=0x26f478 | out: phkResult=0x26f478*=0x98) returned 0x0 [0165.210] RegOpenKeyExW (in: hKey=0x80000001, lpSubKey="Software\\Microsoft\\Internet Explorer\\Main\\FeatureControl", ulOptions=0x0, samDesired=0x1, phkResult=0x26f47c | out: phkResult=0x26f47c*=0x94) returned 0x0 [0165.210] RegOpenKeyExW (in: hKey=0x94, lpSubKey="FEATURE_DATABINDING_SUPPORT", ulOptions=0x0, samDesired=0x1, phkResult=0x26f438 | out: phkResult=0x26f438*=0x0) returned 0x2 [0165.210] RegOpenKeyExW (in: hKey=0x98, lpSubKey="FEATURE_DATABINDING_SUPPORT", ulOptions=0x0, samDesired=0x1, phkResult=0x26f438 | out: phkResult=0x26f438*=0x0) returned 0x2 [0165.210] RegCloseKey (hKey=0x0) returned 0x6 [0165.210] RegCloseKey (hKey=0x0) returned 0x6 [0165.210] RegCloseKey (hKey=0x98) returned 0x0 [0165.210] RegCloseKey (hKey=0x94) returned 0x0 [0165.210] RegOpenKeyExW (in: hKey=0x80000002, lpSubKey="Software\\Microsoft\\Internet Explorer\\Main\\FeatureControl", ulOptions=0x0, samDesired=0x1, phkResult=0x26f478 | out: phkResult=0x26f478*=0x94) returned 0x0 [0165.210] RegOpenKeyExW (in: hKey=0x80000001, lpSubKey="Software\\Microsoft\\Internet Explorer\\Main\\FeatureControl", ulOptions=0x0, samDesired=0x1, phkResult=0x26f47c | out: phkResult=0x26f47c*=0x98) returned 0x0 [0165.210] RegOpenKeyExW (in: hKey=0x98, lpSubKey="FEATURE_ENFORCE_BSTR", ulOptions=0x0, samDesired=0x1, phkResult=0x26f438 | out: phkResult=0x26f438*=0x0) returned 0x2 [0165.210] RegOpenKeyExW (in: hKey=0x94, lpSubKey="FEATURE_ENFORCE_BSTR", ulOptions=0x0, samDesired=0x1, phkResult=0x26f438 | out: phkResult=0x26f438*=0x0) returned 0x2 [0165.210] RegCloseKey (hKey=0x0) returned 0x6 [0165.210] RegCloseKey (hKey=0x0) returned 0x6 [0165.210] RegCloseKey (hKey=0x94) returned 0x0 [0165.210] RegCloseKey (hKey=0x98) returned 0x0 [0165.211] RegOpenKeyExW (in: hKey=0x80000002, lpSubKey="Software\\Microsoft\\Internet Explorer\\Main\\FeatureControl", ulOptions=0x0, samDesired=0x1, phkResult=0x26f478 | out: phkResult=0x26f478*=0x98) returned 0x0 [0165.211] RegOpenKeyExW (in: hKey=0x80000001, lpSubKey="Software\\Microsoft\\Internet Explorer\\Main\\FeatureControl", ulOptions=0x0, samDesired=0x1, phkResult=0x26f47c | out: phkResult=0x26f47c*=0x94) returned 0x0 [0165.211] RegOpenKeyExW (in: hKey=0x94, lpSubKey="FEATURE_ENABLE_DYNAMIC_OBJECT_CACHING", ulOptions=0x0, samDesired=0x1, phkResult=0x26f438 | out: phkResult=0x26f438*=0x0) returned 0x2 [0165.211] RegOpenKeyExW (in: hKey=0x98, lpSubKey="FEATURE_ENABLE_DYNAMIC_OBJECT_CACHING", ulOptions=0x0, samDesired=0x1, phkResult=0x26f438 | out: phkResult=0x26f438*=0x0) returned 0x2 [0165.211] RegCloseKey (hKey=0x0) returned 0x6 [0165.211] RegCloseKey (hKey=0x0) returned 0x6 [0165.211] RegCloseKey (hKey=0x98) returned 0x0 [0165.211] RegCloseKey (hKey=0x94) returned 0x0 [0165.211] CoInternetIsFeatureEnabled (FeatureEntry=0x0, dwFlags=0x2) returned 0x0 [0165.212] RegOpenKeyExW (in: hKey=0x80000002, lpSubKey="Software\\Microsoft\\Internet Explorer\\Main\\FeatureControl", ulOptions=0x0, samDesired=0x1, phkResult=0x26f478 | out: phkResult=0x26f478*=0x98) returned 0x0 [0165.212] RegOpenKeyExW (in: hKey=0x80000001, lpSubKey="Software\\Microsoft\\Internet Explorer\\Main\\FeatureControl", ulOptions=0x0, samDesired=0x1, phkResult=0x26f47c | out: phkResult=0x26f47c*=0x9c) returned 0x0 [0165.212] RegOpenKeyExW (in: hKey=0x9c, lpSubKey="FEATURE_LEGACY_TOSTRING_IN_COMPATVIEW", ulOptions=0x0, samDesired=0x1, phkResult=0x26f438 | out: phkResult=0x26f438*=0x0) returned 0x2 [0165.212] RegOpenKeyExW (in: hKey=0x98, lpSubKey="FEATURE_LEGACY_TOSTRING_IN_COMPATVIEW", ulOptions=0x0, samDesired=0x1, phkResult=0x26f438 | out: phkResult=0x26f438*=0x0) returned 0x2 [0165.212] RegCloseKey (hKey=0x0) returned 0x6 [0165.212] RegCloseKey (hKey=0x0) returned 0x6 [0165.212] RegCloseKey (hKey=0x98) returned 0x0 [0165.213] RegCloseKey (hKey=0x9c) returned 0x0 [0165.213] RegOpenKeyExW (in: hKey=0x80000002, lpSubKey="Software\\Microsoft\\Internet Explorer\\Main\\FeatureControl", ulOptions=0x0, samDesired=0x1, phkResult=0x26f478 | out: phkResult=0x26f478*=0x9c) returned 0x0 [0165.213] RegOpenKeyExW (in: hKey=0x80000001, lpSubKey="Software\\Microsoft\\Internet Explorer\\Main\\FeatureControl", ulOptions=0x0, samDesired=0x1, phkResult=0x26f47c | out: phkResult=0x26f47c*=0x98) returned 0x0 [0165.213] RegOpenKeyExW (in: hKey=0x98, lpSubKey="FEATURE_ENABLE_OM_SCREEN_ORIGIN_DISPLAY_PIXELS", ulOptions=0x0, samDesired=0x1, phkResult=0x26f438 | out: phkResult=0x26f438*=0x0) returned 0x2 [0165.213] RegOpenKeyExW (in: hKey=0x9c, lpSubKey="FEATURE_ENABLE_OM_SCREEN_ORIGIN_DISPLAY_PIXELS", ulOptions=0x0, samDesired=0x1, phkResult=0x26f438 | out: phkResult=0x26f438*=0x0) returned 0x2 [0165.213] RegCloseKey (hKey=0x0) returned 0x6 [0165.213] RegCloseKey (hKey=0x0) returned 0x6 [0165.213] RegCloseKey (hKey=0x9c) returned 0x0 [0165.213] RegCloseKey (hKey=0x98) returned 0x0 [0165.213] RegOpenKeyExW (in: hKey=0x80000002, lpSubKey="Software\\Microsoft\\Internet Explorer\\Main\\FeatureControl", ulOptions=0x0, samDesired=0x1, phkResult=0x26f478 | out: phkResult=0x26f478*=0x98) returned 0x0 [0165.213] RegOpenKeyExW (in: hKey=0x80000001, lpSubKey="Software\\Microsoft\\Internet Explorer\\Main\\FeatureControl", ulOptions=0x0, samDesired=0x1, phkResult=0x26f47c | out: phkResult=0x26f47c*=0x9c) returned 0x0 [0165.213] RegOpenKeyExW (in: hKey=0x9c, lpSubKey="FEATURE_RESTRICT_CRASH_RECOVERY_SAVE_KB978454", ulOptions=0x0, samDesired=0x1, phkResult=0x26f438 | out: phkResult=0x26f438*=0x0) returned 0x2 [0165.213] RegOpenKeyExW (in: hKey=0x98, lpSubKey="FEATURE_RESTRICT_CRASH_RECOVERY_SAVE_KB978454", ulOptions=0x0, samDesired=0x1, phkResult=0x26f438 | out: phkResult=0x26f438*=0x0) returned 0x2 [0165.213] RegCloseKey (hKey=0x0) returned 0x6 [0165.213] RegCloseKey (hKey=0x0) returned 0x6 [0165.214] RegCloseKey (hKey=0x98) returned 0x0 [0165.214] RegCloseKey (hKey=0x9c) returned 0x0 [0165.214] GetSystemMetrics (nIndex=68) returned 4 [0165.214] GetSystemMetrics (nIndex=69) returned 4 [0165.214] GetProfileIntA (lpAppName="windows", lpKeyName="DragDelay", nDefault=20) returned 0x14 [0165.214] GetSystemDefaultLCID () returned 0x409 [0165.215] GetVersionExW (in: lpVersionInformation=0x26f3dc*(dwOSVersionInfoSize=0x114, dwMajorVersion=0x77c6e36c, dwMinorVersion=0x77c6e0d2, dwBuildNumber=0x6ff6afd8, dwPlatformId=0x0, szCSDVersion="") | out: lpVersionInformation=0x26f3dc*(dwOSVersionInfoSize=0x114, dwMajorVersion=0x6, dwMinorVersion=0x1, dwBuildNumber=0x1db1, dwPlatformId=0x2, szCSDVersion="Service Pack 1")) returned 1 [0165.215] GetUserDefaultUILanguage () returned 0x409 [0165.215] GetLocaleInfoW (in: Locale=0x409, LCType=0x58, lpLCData=0x26f32c, cchData=16 | out: lpLCData="\x03") returned 16 [0165.216] GetKeyboardLayoutList (in: nBuff=32, lpList=0x26f35c | out: lpList=0x26f35c) returned 1 [0165.216] GetSystemMetrics (nIndex=4096) returned 0 [0165.216] RegOpenKeyExW (in: hKey=0x80000002, lpSubKey="Software\\Microsoft\\Internet Explorer\\Main\\FeatureControl", ulOptions=0x0, samDesired=0x1, phkResult=0x26f480 | out: phkResult=0x26f480*=0x9c) returned 0x0 [0165.216] RegOpenKeyExW (in: hKey=0x80000001, lpSubKey="Software\\Microsoft\\Internet Explorer\\Main\\FeatureControl", ulOptions=0x0, samDesired=0x1, phkResult=0x26f484 | out: phkResult=0x26f484*=0x98) returned 0x0 [0165.216] RegOpenKeyExW (in: hKey=0x98, lpSubKey="FEATURE_CLEANUP_AT_FLS", ulOptions=0x0, samDesired=0x1, phkResult=0x26f440 | out: phkResult=0x26f440*=0x0) returned 0x2 [0165.216] RegOpenKeyExW (in: hKey=0x9c, lpSubKey="FEATURE_CLEANUP_AT_FLS", ulOptions=0x0, samDesired=0x1, phkResult=0x26f440 | out: phkResult=0x26f440*=0x0) returned 0x2 [0165.216] RegCloseKey (hKey=0x0) returned 0x6 [0165.216] RegCloseKey (hKey=0x0) returned 0x6 [0165.216] RegCloseKey (hKey=0x9c) returned 0x0 [0165.216] RegCloseKey (hKey=0x98) returned 0x0 [0165.216] GetModuleFileNameW (in: hModule=0x6fa30000, lpFilename=0x26f2e8, nSize=0x104 | out: lpFilename="C:\\Windows\\SysWOW64\\mshtml.dll" (normalized: "c:\\windows\\syswow64\\mshtml.dll")) returned 0x1e [0165.216] RtlAllocateHeap (HeapHandle=0x470000, Flags=0x0, Size=0x3e) returned 0x483d18 [0165.216] RegisterClipboardFormatA (lpszFormat="Embedded Object") returned 0xc00a [0165.216] RegisterClipboardFormatA (lpszFormat="Embed Source") returned 0xc00b [0165.216] RegisterClipboardFormatA (lpszFormat="Link Source") returned 0xc00d [0165.216] RegisterClipboardFormatA (lpszFormat="Link Source Descriptor") returned 0xc00f [0165.216] RegisterClipboardFormatA (lpszFormat="Object Descriptor") returned 0xc00e [0165.216] RegisterClipboardFormatA (lpszFormat="MS Forms CLSID") returned 0xc169 [0165.216] RegisterClipboardFormatA (lpszFormat="MS Forms Text") returned 0xc168 [0165.217] GetDC (hWnd=0x0) returned 0x3010a19 [0165.217] SHCreateShellPalette (hdc=0x0) returned 0xa080a0d [0165.217] GetPaletteEntries (in: hpal=0xa080a0d, iStart=0x0, cEntries=0x100, pPalEntries=0x6ff6a494 | out: pPalEntries=0x6ff6a494) returned 0x100 [0165.217] SHGetInverseCMAP (in: pbMap=0x6ff68a7c, cbMap=0x4 | out: pbMap=0x6ff68a7c) returned 0x0 [0165.217] GetDeviceCaps (hdc=0x3010a19, index=38) returned 32409 [0165.217] ReleaseDC (hWnd=0x0, hDC=0x3010a19) returned 1 [0165.217] RtlAllocateHeap (HeapHandle=0x470000, Flags=0x0, Size=0x20a) returned 0x48e9b0 [0165.217] RtlAllocateHeap (HeapHandle=0x470000, Flags=0x8, Size=0x2000) returned 0x48f3c8 [0165.218] GetCurrentProcessId () returned 0x24c [0165.218] _vsnprintf (in: _DstBuf=0x26f82c, _MaxCount=0x16, _Format="%s%08lX", _ArgList=0x26f4f4 | out: _DstBuf="#MSHTML#PERF#0000024C") returned 21 [0165.218] OpenFileMappingA (dwDesiredAccess=0x2, bInheritHandle=0, lpName="#MSHTML#PERF#0000024C") returned 0x0 [0165.218] GetVersionExW (in: lpVersionInformation=0x26f510*(dwOSVersionInfoSize=0x114, dwMajorVersion=0x473608, dwMinorVersion=0x100, dwBuildNumber=0x48dbb0, dwPlatformId=0x470000, szCSDVersion="A") | out: lpVersionInformation=0x26f510*(dwOSVersionInfoSize=0x114, dwMajorVersion=0x6, dwMinorVersion=0x1, dwBuildNumber=0x1db1, dwPlatformId=0x2, szCSDVersion="Service Pack 1")) returned 1 [0165.218] GetModuleHandleW (lpModuleName="advapi32") returned 0x77710000 [0165.218] GetProcAddress (hModule=0x77710000, lpProcName="EventWrite") returned 0x77ca0c59 [0165.218] GetProcAddress (hModule=0x77710000, lpProcName="EventRegister") returned 0x77c7f6ba [0165.218] GetProcAddress (hModule=0x77710000, lpProcName="EventUnregister") returned 0x77c99241 [0165.218] EtwEventRegister () returned 0x0 [0165.218] EtwRegisterTraceGuidsW () returned 0x0 [0165.218] EtwRegisterTraceGuidsW () returned 0x0 [0165.218] EtwEventRegister () returned 0x0 [0165.220] GetFileVersionInfoSizeW (in: lptstrFilename="C:\\Program Files\\Microsoft Office\\Office14\\outllib.dll", lpdwHandle=0x26f2dc | out: lpdwHandle=0x26f2dc) returned 0x0 [0165.220] GetModuleHandleW (lpModuleName=0x0) returned 0xb40000 [0165.220] GetModuleFileNameW (in: hModule=0xb40000, lpFilename=0x26f2e8, nSize=0x104 | out: lpFilename="C:\\Windows\\SysWOW64\\mshta.exe" (normalized: "c:\\windows\\syswow64\\mshta.exe")) returned 0x1d [0165.220] PathFindFileNameW (pszPath="C:\\Windows\\SysWOW64\\mshta.exe") returned="mshta.exe" [0165.223] GetCurrentProcessId () returned 0x24c [0165.223] GetCurrentProcessId () returned 0x24c [0165.225] CreateMutexW (lpMutexAttributes=0x0, bInitialOwner=0, lpName="Local\\!PrivacIE!SharedMemory!Mutex") returned 0xbc [0165.225] GetLastError () returned 0x0 [0165.234] CreateFileMappingW (hFile=0xffffffff, lpFileMappingAttributes=0x0, flProtect=0x4, dwMaximumSizeHigh=0x0, dwMaximumSizeLow=0x10, lpName="Local\\!PrivacIE!SharedMem!Counter") returned 0x100 [0165.234] MapViewOfFile (hFileMappingObject=0x100, dwDesiredAccess=0x2, dwFileOffsetHigh=0x0, dwFileOffsetLow=0x0, dwNumberOfBytesToMap=0x0) returned 0x120000 [0165.236] HeapFree (in: hHeap=0x680000, dwFlags=0x0, lpMem=0x681d70 | out: hHeap=0x680000) returned 1 [0165.236] HeapFree (in: hHeap=0x680000, dwFlags=0x0, lpMem=0x681e80 | out: hHeap=0x680000) returned 1 [0165.236] RegCloseKey (hKey=0x42) returned 0x0 [0165.236] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76d30000 [0165.236] GetProcAddress (hModule=0x76d30000, lpProcName="RegisterApplicationRestart") returned 0x76d6b53c [0165.236] lstrlenA (lpString="\"C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\READ_ME.hta\" ") returned 52 [0165.236] RtlAllocateHeap (HeapHandle=0x680000, Flags=0x0, Size=0x6a) returned 0x681d70 [0165.236] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x472ad0, cbMultiByte=-1, lpWideCharStr=0x681d70, cchWideChar=53 | out: lpWideCharStr="\"C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\READ_ME.hta\" ") returned 53 [0165.236] RegisterApplicationRestart (pwzCommandline="\"C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\READ_ME.hta\" ", dwFlags=0x0) returned 0x0 [0165.236] HeapFree (in: hHeap=0x680000, dwFlags=0x0, lpMem=0x681d70 | out: hHeap=0x680000) returned 1 [0165.236] GetProcAddress (hModule=0x6fa30000, lpProcName="RunHTMLApplication") returned 0x6fa8e710 [0165.240] GetCommandLineW () returned="\"C:\\Windows\\SysWOW64\\mshta.exe\" \"C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\READ_ME.hta\" " [0165.244] RtlAllocateHeap (HeapHandle=0x470000, Flags=0x0, Size=0x6e) returned 0x493df0 [0165.244] OleInitialize (pvReserved=0x0) returned 0x0 [0165.264] IsWindow (hWnd=0x0) returned 0 [0165.264] RegisterClassW (lpWndClass=0x26fb94) returned 0xc167 [0165.264] CreateWindowExW (dwExStyle=0x0, lpClassName="HTML Application Host Window Class", lpWindowName="", dwStyle=0x0, X=0, Y=0, nWidth=0, nHeight=0, hWndParent=0x0, hMenu=0x0, hInstance=0xb40000, lpParam=0x6ff69680) returned 0x50160 [0165.265] NtdllDefWindowProc_W () returned 0x0 [0165.265] NtdllDefWindowProc_W () returned 0x1 [0165.266] NtdllDefWindowProc_W () returned 0x0 [0165.268] NtdllDefWindowProc_W () returned 0x0 [0165.268] CreateWindowExW (dwExStyle=0x40000, lpClassName="HTML Application Host Window Class", lpWindowName="", dwStyle=0x2cf0000, X=-2147483648, Y=-2147483648, nWidth=-2147483648, nHeight=-2147483648, hWndParent=0x50160, hMenu=0x0, hInstance=0xb40000, lpParam=0x6ff69680) returned 0x60114 [0165.268] NtdllDefWindowProc_W () returned 0x0 [0165.269] NtdllDefWindowProc_W () returned 0x1 [0165.269] NtdllDefWindowProc_W () returned 0x0 [0165.269] NtdllDefWindowProc_W () returned 0x0 [0165.269] SetWindowLongW (hWnd=0x60114, nIndex=-16, dwNewLong=-2100363264) returned 114229248 [0165.269] NtdllDefWindowProc_W () returned 0x0 [0165.269] NtdllDefWindowProc_W () returned 0x0 [0165.270] NtdllDefWindowProc_W () returned 0x0 [0165.270] NtdllDefWindowProc_W () returned 0x0 [0165.270] NtdllDefWindowProc_W () returned 0x0 [0165.270] NtdllDefWindowProc_W () returned 0x0 [0165.270] SetWindowPos (hWnd=0x60114, hWndInsertAfter=0xfffffffe, X=0, Y=0, cx=0, cy=0, uFlags=0x37) returned 1 [0165.270] NtdllDefWindowProc_W () returned 0x0 [0165.270] NtdllDefWindowProc_W () returned 0x0 [0165.271] NtdllDefWindowProc_W () returned 0x0 [0165.271] NtdllDefWindowProc_W () returned 0x0 [0165.272] NtdllDefWindowProc_W () returned 0x0 [0165.272] SendMessageW (hWnd=0x60114, Msg=0x127, wParam=0x3, lParam=0x0) returned 0x0 [0165.272] NtdllDefWindowProc_W () returned 0x0 [0165.272] NtdllDefWindowProc_W () returned 0x0 [0165.275] RtlAllocateHeap (HeapHandle=0x470000, Flags=0x0, Size=0x6e) returned 0x49ac50 [0165.275] PathRemoveArgsW (in: pszPath="\"C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\READ_ME.hta\" " | out: pszPath="\"C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\READ_ME.hta\"") [0165.275] PathRemoveBlanksW (in: pszPath="\"C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\READ_ME.hta\"" | out: pszPath="\"C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\READ_ME.hta\"") [0165.275] PathUnquoteSpacesW (in: lpsz="\"C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\READ_ME.hta\"" | out: lpsz="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\READ_ME.hta") returned 1 [0165.277] CreateURLMonikerEx (in: pMkCtx=0x0, szURL="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\READ_ME.hta", ppmk=0x26fbf4*=0x0, dwFlags=0x1 | out: ppmk=0x26fbf4*=0x49e0d8) returned 0x0 [0165.282] HeapFree (in: hHeap=0x470000, dwFlags=0x0, lpMem=0x49ac50 | out: hHeap=0x470000) returned 1 [0165.282] RtlAllocateHeap (HeapHandle=0x470000, Flags=0x0, Size=0x10) returned 0x49b418 [0165.282] CoCreateInstance (in: rclsid=0x6fb69770*(Data1=0x3050f5c8, Data2=0x98b5, Data3=0x11cf, Data4=([0]=0xbb, [1]=0x82, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0xbd, [6]=0xce, [7]=0xb)), pUnkOuter=0x0, dwClsContext=0x1, riid=0x6fbeb75c*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppv=0x6ff696d4 | out: ppv=0x6ff696d4*=0x4a2278) returned 0x0 [0165.286] DllGetClassObject (in: rclsid=0x49f80c*(Data1=0x3050f5c8, Data2=0x98b5, Data3=0x11cf, Data4=([0]=0xbb, [1]=0x82, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0xbd, [6]=0xce, [7]=0xb)), riid=0x7666ee84*(Data1=0x1, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppv=0x26eea4 | out: ppv=0x26eea4*=0x6ff68cb0) returned 0x0 [0165.288] RtlAllocateHeap (HeapHandle=0x470000, Flags=0x8, Size=0x2a8) returned 0x4a0608 [0165.291] GetCurrentThreadId () returned 0x220 [0165.293] RegisterClassExW (param_1=0x26ed3c) returned 0xc121 [0165.293] CreateWindowExW (dwExStyle=0x0, lpClassName=0xc121, lpWindowName=0x0, dwStyle=0x80000000, X=0, Y=0, nWidth=0, nHeight=0, hWndParent=0x0, hMenu=0x0, hInstance=0x6fa30000, lpParam=0x0) returned 0x7011a [0165.294] GetWindowLongW (hWnd=0x7011a, nIndex=-20) returned 0 [0165.294] NtdllDefWindowProc_W () returned 0x1 [0165.294] NtdllDefWindowProc_W () returned 0x0 [0165.294] NtdllDefWindowProc_W () returned 0x0 [0165.294] NtdllDefWindowProc_W () returned 0x0 [0165.294] NtdllDefWindowProc_W () returned 0x0 [0165.294] RtlAllocateHeap (HeapHandle=0x470000, Flags=0x0, Size=0x10) returned 0x49b4f0 [0165.294] RtlAllocateHeap (HeapHandle=0x470000, Flags=0x0, Size=0x10) returned 0x49b508 [0165.294] CreateCompatibleDC (hdc=0x0) returned 0x13010a0a [0165.294] GetDeviceCaps (hdc=0x13010a0a, index=90) returned 96 [0165.294] GetDeviceCaps (hdc=0x13010a0a, index=88) returned 96 [0165.294] GetSystemMetrics (nIndex=68) returned 4 [0165.294] GetSystemMetrics (nIndex=69) returned 4 [0165.294] GetSystemMetrics (nIndex=2) returned 17 [0165.294] GetSystemMetrics (nIndex=3) returned 17 [0165.295] GetStockObject (i=13) returned 0x18a002e [0165.295] SelectObject (hdc=0x13010a0a, h=0x18a002e) returned 0x18a002e [0165.295] GetTextMetricsW (in: hdc=0x13010a0a, lptm=0x26edd4 | out: lptm=0x26edd4) returned 1 [0165.295] SelectObject (hdc=0x13010a0a, h=0x18a002e) returned 0x18a002e [0165.295] DeleteObject (ho=0x18a002e) returned 1 [0165.295] GetSystemDefaultLCID () returned 0x409 [0165.295] GetUserDefaultLCID () returned 0x409 [0165.295] GetACP () returned 0x4e4 [0165.295] GetLocaleInfoW (in: Locale=0x400, LCType=0x1014, lpLCData=0x26ed48, cchData=41 | out: lpLCData="1") returned 2 [0165.295] _wtoi (_String="1") returned 1 [0165.295] RegCloseKey (hKey=0x0) returned 0x6 [0165.295] GetLocaleInfoW (in: Locale=0x400, LCType=0x13, lpLCData=0x26ed9c, cchData=16 | out: lpLCData="0123456789") returned 11 [0165.295] SystemParametersInfoW (in: uiAction=0x46, uiParam=0x0, pvParam=0x6ff6b038, fWinIni=0x0 | out: pvParam=0x6ff6b038) returned 1 [0165.295] SystemParametersInfoW (in: uiAction=0x42, uiParam=0xc, pvParam=0x26ee10, fWinIni=0x0 | out: pvParam=0x26ee10) returned 1 [0165.295] RtlAllocateHeap (HeapHandle=0x470000, Flags=0x0, Size=0xc0) returned 0x4a09c0 [0165.295] RtlAllocateHeap (HeapHandle=0x470000, Flags=0x0, Size=0x10) returned 0x49b520 [0165.295] RtlAllocateHeap (HeapHandle=0x470000, Flags=0x0, Size=0xa4) returned 0x4a0a88 [0165.295] RtlAllocateHeap (HeapHandle=0x470000, Flags=0x0, Size=0x14) returned 0x493330 [0165.295] RtlAllocateHeap (HeapHandle=0x470000, Flags=0x8, Size=0x1c) returned 0x496d60 [0165.296] RtlAllocateHeap (HeapHandle=0x470000, Flags=0x0, Size=0x44) returned 0x489108 [0165.296] GetSystemWindowsDirectoryW (in: lpBuffer=0x26ec1c, uSize=0x104 | out: lpBuffer="C:\\Windows") returned 0xa [0165.296] lstrlenW (lpString="C:\\Windows") returned 10 [0165.296] lstrlenW (lpString="\\WindowsShell.manifest") returned 22 [0165.296] CreateActCtxW (pActCtx=0x26ebf8) returned 0x4a0b3c [0165.297] ActivateActCtx (in: hActCtx=0x4a0b3c, lpCookie=0x26ebc8 | out: hActCtx=0x4a0b3c, lpCookie=0x26ebc8) returned 1 [0165.297] LoadLibraryW (lpLibFileName="comctl32.dll") returned 0x75470000 [0165.303] DeactivateActCtx (dwFlags=0x0, ulCookie=0x1a2e0001) returned 1 [0165.303] GetProfileIntA (lpAppName="windows", lpKeyName="DragScrollInset", nDefault=11) returned 0xb [0165.303] GetProfileIntA (lpAppName="windows", lpKeyName="DragScrollDelay", nDefault=50) returned 0x32 [0165.304] GetProfileIntA (lpAppName="windows", lpKeyName="DragDelay", nDefault=200) returned 0xc8 [0165.304] GetProfileIntA (lpAppName="windows", lpKeyName="DragScrollInterval", nDefault=50) returned 0x32 [0165.304] GetModuleFileNameA (in: hModule=0x0, lpFilename=0x26e828, nSize=0x104 | out: lpFilename="C:\\Windows\\SysWOW64\\mshta.exe" (normalized: "c:\\windows\\syswow64\\mshta.exe")) returned 0x1d [0165.304] GetModuleFileNameW (in: hModule=0x0, lpFilename=0x26ea30, nSize=0x104 | out: lpFilename="C:\\Windows\\SysWOW64\\mshta.exe" (normalized: "c:\\windows\\syswow64\\mshta.exe")) returned 0x1d [0165.304] GetCurrentProcess () returned 0xffffffff [0165.304] GetModuleBaseNameW (in: hProcess=0xffffffff, hModule=0x0, lpBaseName=0x26ec38, nSize=0x104 | out: lpBaseName="mshta.exe") returned 0x9 [0165.304] PathFindFileNameW (pszPath="C:\\Windows\\SysWOW64\\mshta.exe") returned="mshta.exe" [0165.304] RtlAllocateHeap (HeapHandle=0x470000, Flags=0x0, Size=0x14) returned 0x493350 [0165.304] FindAtomW (lpString="TridentEnableHiRes") returned 0x0 [0165.304] SHGetValueW (in: hkey=0x80000001, pszSubKey="Software\\Microsoft\\Windows\\CurrentVersion\\Policies\\Explorer", pszValue="NoFileMenu", pdwType=0x26e814, pvData=0x26e820, pcbData=0x26e81c*=0x4 | out: pdwType=0x26e814*=0x0, pvData=0x26e820, pcbData=0x26e81c*=0x4) returned 0x2 [0165.305] RegOpenKeyExW (in: hKey=0x80000002, lpSubKey="Software\\Microsoft\\Internet Explorer\\Main\\FeatureControl", ulOptions=0x0, samDesired=0x1, phkResult=0x26e78c | out: phkResult=0x26e78c*=0x180) returned 0x0 [0165.305] RegOpenKeyExW (in: hKey=0x80000001, lpSubKey="Software\\Microsoft\\Internet Explorer\\Main\\FeatureControl", ulOptions=0x0, samDesired=0x1, phkResult=0x26e790 | out: phkResult=0x26e790*=0x17c) returned 0x0 [0165.305] RegOpenKeyExW (in: hKey=0x17c, lpSubKey="FEATURE_MANAGE_SCRIPT_CIRCULAR_REFS", ulOptions=0x0, samDesired=0x1, phkResult=0x26e74c | out: phkResult=0x26e74c*=0x0) returned 0x2 [0165.305] RegOpenKeyExW (in: hKey=0x180, lpSubKey="FEATURE_MANAGE_SCRIPT_CIRCULAR_REFS", ulOptions=0x0, samDesired=0x1, phkResult=0x26e74c | out: phkResult=0x26e74c*=0x0) returned 0x2 [0165.305] RegCloseKey (hKey=0x0) returned 0x6 [0165.305] RegCloseKey (hKey=0x0) returned 0x6 [0165.305] RegCloseKey (hKey=0x180) returned 0x0 [0165.305] RegCloseKey (hKey=0x17c) returned 0x0 [0165.305] RtlAllocateHeap (HeapHandle=0x470000, Flags=0x8, Size=0x97c) returned 0x4a2278 [0165.305] RtlAllocateHeap (HeapHandle=0x470000, Flags=0x0, Size=0x480) returned 0x4a2c00 [0165.305] MulDiv (nNumber=1073741823, nNumerator=96, nDenominator=1440) returned 71582788 [0165.305] MulDiv (nNumber=1073741823, nNumerator=96, nDenominator=1440) returned 71582788 [0165.305] MulDiv (nNumber=1073741823, nNumerator=96, nDenominator=1440) returned 71582788 [0165.305] MulDiv (nNumber=1073741823, nNumerator=96, nDenominator=1440) returned 71582788 [0165.306] RtlAllocateHeap (HeapHandle=0x470000, Flags=0x0, Size=0x50) returned 0x4a1388 [0165.306] RtlAllocateHeap (HeapHandle=0x470000, Flags=0x0, Size=0x50) returned 0x4a13e0 [0165.306] RtlAllocateHeap (HeapHandle=0x470000, Flags=0x0, Size=0x50) returned 0x4a1438 [0165.306] GetCurrentThreadId () returned 0x220 [0165.306] RtlAllocateHeap (HeapHandle=0x470000, Flags=0x0, Size=0x10) returned 0x49b5e0 [0165.306] RtlAllocateHeap (HeapHandle=0x470000, Flags=0x0, Size=0x2c) returned 0x48d6d0 [0165.306] RtlAllocateHeap (HeapHandle=0x470000, Flags=0x0, Size=0x80) returned 0x4a1490 [0165.306] RegisterClipboardFormatW (lpszFormat="WM_HTML_GETOBJECT") returned 0xc16b [0165.306] RtlAllocateHeap (HeapHandle=0x470000, Flags=0x8, Size=0x18) returned 0x493370 [0165.307] CoInternetIsFeatureEnabled (FeatureEntry=0xc, dwFlags=0x2) returned 0x1 [0165.307] CoInternetCreateSecurityManager (in: pSP=0x0, ppSM=0x6ff68cd4, dwReserved=0x0 | out: ppSM=0x6ff68cd4*=0x4a1518) returned 0x0 [0165.310] RtlAllocateHeap (HeapHandle=0x470000, Flags=0x8, Size=0x64) returned 0x4a35f0 [0165.312] RtlAllocateHeap (HeapHandle=0x470000, Flags=0x8, Size=0x4c) returned 0x4a3660 [0165.312] RtlAllocateHeap (HeapHandle=0x470000, Flags=0x8, Size=0x28) returned 0x48d028 [0165.312] RtlAllocateHeap (HeapHandle=0x470000, Flags=0x0, Size=0x14) returned 0x493390 [0165.312] RtlAllocateHeap (HeapHandle=0x470000, Flags=0x0, Size=0x44) returned 0x489158 [0165.312] RtlAllocateHeap (HeapHandle=0x470000, Flags=0x0, Size=0x44) returned 0x4891a8 [0165.312] RtlAllocateHeap (HeapHandle=0x470000, Flags=0x0, Size=0x60) returned 0x4a36b8 [0165.312] RtlAllocateHeap (HeapHandle=0x470000, Flags=0x0, Size=0x64) returned 0x4a3720 [0165.312] RtlAllocateHeap (HeapHandle=0x470000, Flags=0x0, Size=0x44) returned 0x4891f8 [0165.312] RtlAllocateHeap (HeapHandle=0x470000, Flags=0x0, Size=0x60) returned 0x4a3790 [0165.312] RtlAllocateHeap (HeapHandle=0x470000, Flags=0x0, Size=0xec) returned 0x4a39f8 [0165.313] RtlAllocateHeap (HeapHandle=0x470000, Flags=0x0, Size=0x44) returned 0x489248 [0165.313] RtlAllocateHeap (HeapHandle=0x470000, Flags=0x0, Size=0x44) returned 0x489298 [0165.313] RtlAllocateHeap (HeapHandle=0x470000, Flags=0x0, Size=0x44) returned 0x4892e8 [0165.313] RtlAllocateHeap (HeapHandle=0x470000, Flags=0x0, Size=0x60) returned 0x4a3af0 [0165.313] RtlAllocateHeap (HeapHandle=0x470000, Flags=0x0, Size=0x60) returned 0x4a3b58 [0165.313] RtlAllocateHeap (HeapHandle=0x470000, Flags=0x0, Size=0x44) returned 0x489338 [0165.313] RtlAllocateHeap (HeapHandle=0x470000, Flags=0x0, Size=0x44) returned 0x489388 [0165.313] RtlAllocateHeap (HeapHandle=0x470000, Flags=0x0, Size=0x90) returned 0x4a3bc0 [0165.313] RtlAllocateHeap (HeapHandle=0x470000, Flags=0x0, Size=0x140) returned 0x4a3c58 [0165.313] RtlAllocateHeap (HeapHandle=0x470000, Flags=0x0, Size=0x8) returned 0x49b998 [0165.313] RtlAllocateHeap (HeapHandle=0x470000, Flags=0x8, Size=0x28) returned 0x48d058 [0165.313] RtlAllocateHeap (HeapHandle=0x470000, Flags=0x8, Size=0x18) returned 0x4933b0 [0165.313] RtlAllocateHeap (HeapHandle=0x470000, Flags=0x8, Size=0xd0) returned 0x49c3d8 [0165.313] RtlAllocateHeap (HeapHandle=0x470000, Flags=0x8, Size=0x38) returned 0x4a3da0 [0165.313] RtlAllocateHeap (HeapHandle=0x470000, Flags=0x0, Size=0x128) returned 0x4a3de0 [0165.313] RtlAllocateHeap (HeapHandle=0x470000, Flags=0x8, Size=0x148) returned 0x4a3f10 [0165.314] GetCurrentThreadId () returned 0x220 [0165.314] RtlAllocateHeap (HeapHandle=0x470000, Flags=0x8, Size=0x5c) returned 0x4a4060 [0165.314] RtlAllocateHeap (HeapHandle=0x470000, Flags=0x8, Size=0x18) returned 0x4933d0 [0165.314] CreateUri (in: pwzURI="about:blank", dwFlags=0x2b80, dwReserved=0x0, ppURI=0x26eb3c | out: ppURI=0x26eb3c*=0x49bdfc) returned 0x0 [0165.314] IUri:GetPropertyDWORD (in: This=0x49bdfc, uriProp=0x11, pdwProperty=0x26eb24, dwFlags=0x0 | out: pdwProperty=0x26eb24*=0x11) returned 0x0 [0165.314] CoInternetCreateSecurityManager (in: pSP=0x0, ppSM=0x4a29ac, dwReserved=0x0 | out: ppSM=0x4a29ac*=0x4a40c8) returned 0x0 [0165.316] IInternetSecurityManager:SetSecuritySite (This=0x4a40c8, pSite=0x4a29b4) returned 0x0 [0165.316] IUnknown:AddRef (This=0x4a29b4) returned 0x28 [0165.316] IUnknown:QueryInterface (in: This=0x4a29b4, riid=0x768261d0*(Data1=0x6d5140c1, Data2=0x7436, Data3=0x11ce, Data4=([0]=0x80, [1]=0x34, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0x60, [6]=0x9, [7]=0xfa)), ppvObject=0x26eaf4 | out: ppvObject=0x26eaf4*=0x4a29b8) returned 0x0 [0165.316] IServiceProvider:QueryService (in: This=0x4a29b8, guidService=0x7682f13c*(Data1=0xf1e50292, Data2=0xa795, Data3=0x4117, Data4=([0]=0x8e, [1]=0x9, [2]=0x2b, [3]=0x56, [4]=0xa, [5]=0x72, [6]=0xac, [7]=0x60)), riid=0x7682f13c*(Data1=0xf1e50292, Data2=0xa795, Data3=0x4117, Data4=([0]=0x8e, [1]=0x9, [2]=0x2b, [3]=0x56, [4]=0xa, [5]=0x72, [6]=0xac, [7]=0x60)), ppvObject=0x4a40f0 | out: ppvObject=0x4a40f0*=0x0) returned 0x80004002 [0165.316] IServiceProvider:QueryService (in: This=0x4a29b8, guidService=0x7682f12c*(Data1=0xf164edf1, Data2=0xcc7c, Data3=0x4f0d, Data4=([0]=0x9a, [1]=0x94, [2]=0x34, [3]=0x22, [4]=0x26, [5]=0x25, [6]=0xc3, [7]=0x93)), riid=0x7682f12c*(Data1=0xf164edf1, Data2=0xcc7c, Data3=0x4f0d, Data4=([0]=0x9a, [1]=0x94, [2]=0x34, [3]=0x22, [4]=0x26, [5]=0x25, [6]=0xc3, [7]=0x93)), ppvObject=0x4a40ec | out: ppvObject=0x4a40ec*=0x0) returned 0x80004002 [0165.316] IServiceProvider:QueryService (in: This=0x4a29b8, guidService=0x7681c484*(Data1=0x79eac9ee, Data2=0xbaf9, Data3=0x11ce, Data4=([0]=0x8c, [1]=0x82, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0x4b, [6]=0xa9, [7]=0xb)), riid=0x7681c484*(Data1=0x79eac9ee, Data2=0xbaf9, Data3=0x11ce, Data4=([0]=0x8c, [1]=0x82, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0x4b, [6]=0xa9, [7]=0xb)), ppvObject=0x4a40e8 | out: ppvObject=0x4a40e8*=0x0) returned 0x80004002 [0165.316] IUnknown:Release (This=0x4a29b8) returned 0x0 [0165.316] IInternetSecurityManager:GetSecurityId (in: This=0x4a40c8, pwszUrl="about:blank", pbSecurityId=0x26eb90, pcbSecurityId=0x26eb84*=0x200, dwReserved=0x0 | out: pbSecurityId=0x26eb90*=0x61, pcbSecurityId=0x26eb84*=0xf) returned 0x0 [0165.330] DllGetClassObject (in: rclsid=0x49f840*(Data1=0x3050f406, Data2=0x98b5, Data3=0x11cf, Data4=([0]=0xbb, [1]=0x82, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0xbd, [6]=0xce, [7]=0xb)), riid=0x26e110*(Data1=0x1, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppv=0x26d7c8 | out: ppv=0x26d7c8*=0x6ff68c70) returned 0x0 [0165.330] IUnknown:AddRef (This=0x6ff68c70) returned 0x1 [0165.330] IUnknown:Release (This=0x6ff68c70) returned 0x1 [0165.330] IUnknown:QueryInterface (in: This=0x6ff68c70, riid=0x76814430*(Data1=0x1, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x26e38c | out: ppvObject=0x26e38c*=0x6ff68c70) returned 0x0 [0165.330] IUnknown:Release (This=0x6ff68c70) returned 0x1 [0165.330] IUnknown:QueryInterface (in: This=0x6ff68c70, riid=0x7683aadc*(Data1=0x79eac9ec, Data2=0xbaf9, Data3=0x11ce, Data4=([0]=0x8c, [1]=0x82, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0x4b, [6]=0xa9, [7]=0xb)), ppvObject=0x26e54c | out: ppvObject=0x26e54c*=0x6ff68c7c) returned 0x0 [0165.330] IUnknown:Release (This=0x6ff68c70) returned 0x1 [0165.330] IInternetProtocolInfo:ParseUrl (in: This=0x6ff68c7c, pwzUrl="about:blank", ParseAction=3, dwParseFlags=0x0, pwzResult=0x493490, cchResult=0xc, pcchResult=0x26e594, dwReserved=0x0 | out: pwzResult="about:blank", pcchResult=0x26e594*=0xc) returned 0x0 [0165.330] RtlAllocateHeap (HeapHandle=0x470000, Flags=0x0, Size=0x1c) returned 0x4a18f8 [0165.330] HeapFree (in: hHeap=0x470000, dwFlags=0x0, lpMem=0x0 | out: hHeap=0x470000) returned 1 [0165.330] HeapFree (in: hHeap=0x470000, dwFlags=0x0, lpMem=0x4a18f8 | out: hHeap=0x470000) returned 1 [0165.330] IUnknown:Release (This=0x6ff68c7c) returned 0x1 [0165.331] DllGetClassObject (in: rclsid=0x49f840*(Data1=0x3050f406, Data2=0x98b5, Data3=0x11cf, Data4=([0]=0xbb, [1]=0x82, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0xbd, [6]=0xce, [7]=0xb)), riid=0x76814430*(Data1=0x1, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppv=0x26e460 | out: ppv=0x26e460*=0x6ff68c70) returned 0x0 [0165.331] IUnknown:QueryInterface (in: This=0x6ff68c70, riid=0x7683aadc*(Data1=0x79eac9ec, Data2=0xbaf9, Data3=0x11ce, Data4=([0]=0x8c, [1]=0x82, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0x4b, [6]=0xa9, [7]=0xb)), ppvObject=0x26e54c | out: ppvObject=0x26e54c*=0x6ff68c7c) returned 0x0 [0165.331] IUnknown:Release (This=0x6ff68c70) returned 0x1 [0165.331] IInternetProtocolInfo:ParseUrl (in: This=0x6ff68c7c, pwzUrl="about:blank", ParseAction=17, dwParseFlags=0x0, pwzResult=0x493490, cchResult=0xc, pcchResult=0x26e5a4, dwReserved=0x0 | out: pwzResult="", pcchResult=0x26e5a4*=0x0) returned 0x800c0011 [0165.331] HeapFree (in: hHeap=0x470000, dwFlags=0x0, lpMem=0x0 | out: hHeap=0x470000) returned 1 [0165.331] IUnknown:Release (This=0x6ff68c7c) returned 0x1 [0165.331] IUnknown:Release (This=0x49bdfc) returned 0x2 [0165.331] HeapFree (in: hHeap=0x470000, dwFlags=0x0, lpMem=0x0 | out: hHeap=0x470000) returned 1 [0165.331] RtlAllocateHeap (HeapHandle=0x470000, Flags=0x0, Size=0xf) returned 0x49b640 [0165.331] RtlAllocateHeap (HeapHandle=0x470000, Flags=0x0, Size=0x10) returned 0x49b688 [0165.332] CoInternetCreateSecurityManager (in: pSP=0x0, ppSM=0x26eb64, dwReserved=0x0 | out: ppSM=0x26eb64*=0x4a4850) returned 0x0 [0165.332] RtlAllocateHeap (HeapHandle=0x470000, Flags=0x0, Size=0xf) returned 0x49b6a0 [0165.332] RtlAllocateHeap (HeapHandle=0x470000, Flags=0x0, Size=0x50) returned 0x4a4798 [0165.332] RegOpenKeyExW (in: hKey=0x80000002, lpSubKey="Software\\Microsoft\\Internet Explorer\\Main\\FeatureControl", ulOptions=0x0, samDesired=0x1, phkResult=0x26ed14 | out: phkResult=0x26ed14*=0x1c0) returned 0x0 [0165.332] RegOpenKeyExW (in: hKey=0x80000001, lpSubKey="Software\\Microsoft\\Internet Explorer\\Main\\FeatureControl", ulOptions=0x0, samDesired=0x1, phkResult=0x26ed18 | out: phkResult=0x26ed18*=0x1cc) returned 0x0 [0165.332] RegOpenKeyExW (in: hKey=0x1cc, lpSubKey="FEATURE_DOCUMENT_COMPATIBLE_MODE", ulOptions=0x0, samDesired=0x1, phkResult=0x26ecd4 | out: phkResult=0x26ecd4*=0x0) returned 0x2 [0165.332] RegOpenKeyExW (in: hKey=0x1c0, lpSubKey="FEATURE_DOCUMENT_COMPATIBLE_MODE", ulOptions=0x0, samDesired=0x1, phkResult=0x26ecd4 | out: phkResult=0x26ecd4*=0x0) returned 0x2 [0165.332] RegCloseKey (hKey=0x0) returned 0x6 [0165.332] RegCloseKey (hKey=0x0) returned 0x6 [0165.332] RegCloseKey (hKey=0x1c0) returned 0x0 [0165.332] RegCloseKey (hKey=0x1cc) returned 0x0 [0165.332] RtlAllocateHeap (HeapHandle=0x470000, Flags=0x0, Size=0x128) returned 0x4a48b8 [0165.333] RtlAllocateHeap (HeapHandle=0x470000, Flags=0x8, Size=0x4c) returned 0x4a9460 [0165.333] RtlAllocateHeap (HeapHandle=0x470000, Flags=0x0, Size=0x10) returned 0x49b6d0 [0165.333] RtlAllocateHeap (HeapHandle=0x470000, Flags=0x8, Size=0x2000) returned 0x4a94b8 [0165.333] RtlAllocateHeap (HeapHandle=0x470000, Flags=0x0, Size=0x50) returned 0x4ab4c0 [0165.333] HeapFree (in: hHeap=0x470000, dwFlags=0x0, lpMem=0x4ab4c0 | out: hHeap=0x470000) returned 1 [0165.333] HeapFree (in: hHeap=0x470000, dwFlags=0x0, lpMem=0x0 | out: hHeap=0x470000) returned 1 [0165.333] CreateUri (in: pwzURI="about:blank", dwFlags=0x2b80, dwReserved=0x0, ppURI=0x26eb58 | out: ppURI=0x26eb58*=0x49bdfc) returned 0x0 [0165.333] DllGetClassObject (in: rclsid=0x49f840*(Data1=0x3050f406, Data2=0x98b5, Data3=0x11cf, Data4=([0]=0xbb, [1]=0x82, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0xbd, [6]=0xce, [7]=0xb)), riid=0x76814430*(Data1=0x1, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppv=0x26e430 | out: ppv=0x26e430*=0x6ff68c70) returned 0x0 [0165.333] IUnknown:QueryInterface (in: This=0x6ff68c70, riid=0x7683aadc*(Data1=0x79eac9ec, Data2=0xbaf9, Data3=0x11ce, Data4=([0]=0x8c, [1]=0x82, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0x4b, [6]=0xa9, [7]=0xb)), ppvObject=0x26e51c | out: ppvObject=0x26e51c*=0x6ff68c7c) returned 0x0 [0165.333] IUnknown:Release (This=0x6ff68c70) returned 0x1 [0165.333] IInternetProtocolInfo:ParseUrl (in: This=0x6ff68c7c, pwzUrl="about:blank", ParseAction=3, dwParseFlags=0x0, pwzResult=0x493490, cchResult=0xc, pcchResult=0x26e564, dwReserved=0x0 | out: pwzResult="about:blank", pcchResult=0x26e564*=0xc) returned 0x0 [0165.334] RtlAllocateHeap (HeapHandle=0x470000, Flags=0x0, Size=0x1c) returned 0x4a18f8 [0165.334] HeapFree (in: hHeap=0x470000, dwFlags=0x0, lpMem=0x0 | out: hHeap=0x470000) returned 1 [0165.334] HeapFree (in: hHeap=0x470000, dwFlags=0x0, lpMem=0x4a18f8 | out: hHeap=0x470000) returned 1 [0165.334] IUnknown:Release (This=0x6ff68c7c) returned 0x1 [0165.334] DllGetClassObject (in: rclsid=0x49f840*(Data1=0x3050f406, Data2=0x98b5, Data3=0x11cf, Data4=([0]=0xbb, [1]=0x82, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0xbd, [6]=0xce, [7]=0xb)), riid=0x76814430*(Data1=0x1, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppv=0x26e430 | out: ppv=0x26e430*=0x6ff68c70) returned 0x0 [0165.334] IUnknown:QueryInterface (in: This=0x6ff68c70, riid=0x7683aadc*(Data1=0x79eac9ec, Data2=0xbaf9, Data3=0x11ce, Data4=([0]=0x8c, [1]=0x82, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0x4b, [6]=0xa9, [7]=0xb)), ppvObject=0x26e51c | out: ppvObject=0x26e51c*=0x6ff68c7c) returned 0x0 [0165.334] IUnknown:Release (This=0x6ff68c70) returned 0x1 [0165.334] IInternetProtocolInfo:ParseUrl (in: This=0x6ff68c7c, pwzUrl="about:blank", ParseAction=17, dwParseFlags=0x0, pwzResult=0x493490, cchResult=0xc, pcchResult=0x26e574, dwReserved=0x0 | out: pwzResult="", pcchResult=0x26e574*=0x0) returned 0x800c0011 [0165.334] HeapFree (in: hHeap=0x470000, dwFlags=0x0, lpMem=0x0 | out: hHeap=0x470000) returned 1 [0165.334] IUnknown:Release (This=0x6ff68c7c) returned 0x1 [0165.334] CoInternetIsFeatureEnabled (FeatureEntry=0x8, dwFlags=0x2) returned 0x1 [0165.334] CoInternetIsFeatureEnabled (FeatureEntry=0x8, dwFlags=0x2) returned 0x1 [0165.334] CoInternetIsFeatureEnabled (FeatureEntry=0xe, dwFlags=0x2) returned 0x1 [0165.335] IUnknown:Release (This=0x49bdfc) returned 0x2 [0165.335] RtlAllocateHeap (HeapHandle=0x470000, Flags=0x0, Size=0x2c) returned 0x48d708 [0165.335] RtlAllocateHeap (HeapHandle=0x470000, Flags=0x0, Size=0x10) returned 0x4847d8 [0165.335] RtlAllocateHeap (HeapHandle=0x470000, Flags=0x8, Size=0x5c) returned 0x4ab4c0 [0165.335] GetDC (hWnd=0x0) returned 0x70109ff [0165.335] GetDeviceCaps (hdc=0x70109ff, index=88) returned 96 [0165.335] ReleaseDC (hWnd=0x0, hDC=0x70109ff) returned 1 [0165.335] MulDiv (nNumber=100000, nNumerator=96, nDenominator=96) returned 100000 [0165.336] RegOpenKeyExW (in: hKey=0x80000002, lpSubKey="Software\\Microsoft\\Internet Explorer\\Main\\FeatureControl", ulOptions=0x0, samDesired=0x1, phkResult=0x26edb0 | out: phkResult=0x26edb0*=0x158) returned 0x0 [0165.336] RegOpenKeyExW (in: hKey=0x80000001, lpSubKey="Software\\Microsoft\\Internet Explorer\\Main\\FeatureControl", ulOptions=0x0, samDesired=0x1, phkResult=0x26edb4 | out: phkResult=0x26edb4*=0x1c0) returned 0x0 [0165.336] RegOpenKeyExW (in: hKey=0x1c0, lpSubKey="FEATURE_WEBOC_DOCUMENT_ZOOM", ulOptions=0x0, samDesired=0x1, phkResult=0x26ed70 | out: phkResult=0x26ed70*=0x0) returned 0x2 [0165.336] RegOpenKeyExW (in: hKey=0x158, lpSubKey="FEATURE_WEBOC_DOCUMENT_ZOOM", ulOptions=0x0, samDesired=0x1, phkResult=0x26ed70 | out: phkResult=0x26ed70*=0x0) returned 0x2 [0165.336] RegCloseKey (hKey=0x0) returned 0x6 [0165.336] RegCloseKey (hKey=0x0) returned 0x6 [0165.336] RegCloseKey (hKey=0x158) returned 0x0 [0165.336] RegCloseKey (hKey=0x1c0) returned 0x0 [0165.336] RtlAllocateHeap (HeapHandle=0x470000, Flags=0x0, Size=0x10) returned 0x49b358 [0165.336] RtlAllocateHeap (HeapHandle=0x470000, Flags=0x0, Size=0x44) returned 0x4893d8 [0165.336] RtlAllocateHeap (HeapHandle=0x470000, Flags=0x0, Size=0x5c) returned 0x4ab528 [0165.337] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76d30000 [0165.337] GetProcAddress (hModule=0x76d30000, lpProcName="InitializeSRWLock") returned 0x77c78456 [0165.337] GetProcAddress (hModule=0x76d30000, lpProcName="AcquireSRWLockExclusive") returned 0x77c729f1 [0165.337] GetProcAddress (hModule=0x76d30000, lpProcName="AcquireSRWLockShared") returned 0x77c72560 [0165.337] GetProcAddress (hModule=0x76d30000, lpProcName="ReleaseSRWLockExclusive") returned 0x77c729ab [0165.337] GetProcAddress (hModule=0x76d30000, lpProcName="ReleaseSRWLockShared") returned 0x77c725a9 [0165.337] RtlInitializeConditionVariable () returned 0x4ab55c [0165.337] RtlAllocateHeap (HeapHandle=0x470000, Flags=0x0, Size=0x34) returned 0x4ab590 [0165.337] RtlAllocateHeap (HeapHandle=0x470000, Flags=0x0, Size=0x34) returned 0x4ab5d0 [0165.337] RtlAllocateHeap (HeapHandle=0x470000, Flags=0x0, Size=0x14) returned 0x493490 [0165.337] IUnknown:Release (This=0x6ff68cb0) returned 0x1 [0165.338] RtlAllocateHeap (HeapHandle=0x470000, Flags=0x0, Size=0x28) returned 0x48d0b8 [0165.340] IUnknown_QueryService (in: punk=0x6ff696a4, guidService=0x6fbf880c*(Data1=0xd81f90a3, Data2=0x8156, Data3=0x44f7, Data4=([0]=0xad, [1]=0x28, [2]=0x5a, [3]=0xbb, [4]=0x87, [5]=0x0, [6]=0x32, [7]=0x74)), riid=0x6fbf880c*(Data1=0xd81f90a3, Data2=0x8156, Data3=0x44f7, Data4=([0]=0xad, [1]=0x28, [2]=0x5a, [3]=0xbb, [4]=0x87, [5]=0x0, [6]=0x32, [7]=0x74)), ppvOut=0x4a22d0 | out: ppvOut=0x4a22d0*=0x0) returned 0x80004005 [0165.340] IUnknown:QueryInterface (in: This=0x6ff696a4, riid=0x773042d8*(Data1=0x6d5140c1, Data2=0x7436, Data3=0x11ce, Data4=([0]=0x80, [1]=0x34, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0x60, [6]=0x9, [7]=0xfa)), ppvObject=0x26fb00 | out: ppvObject=0x26fb00*=0x6ff696b8) returned 0x0 [0165.340] IServiceProvider:QueryService (in: This=0x6ff696b8, guidService=0x6fbf880c*(Data1=0xd81f90a3, Data2=0x8156, Data3=0x44f7, Data4=([0]=0xad, [1]=0x28, [2]=0x5a, [3]=0xbb, [4]=0x87, [5]=0x0, [6]=0x32, [7]=0x74)), riid=0x6fbf880c*(Data1=0xd81f90a3, Data2=0x8156, Data3=0x44f7, Data4=([0]=0xad, [1]=0x28, [2]=0x5a, [3]=0xbb, [4]=0x87, [5]=0x0, [6]=0x32, [7]=0x74)), ppvObject=0x4a22d0 | out: ppvObject=0x4a22d0*=0x0) returned 0x80004005 [0165.340] IUnknown:Release (This=0x6ff696b8) returned 0x1 [0165.340] RtlAllocateHeap (HeapHandle=0x470000, Flags=0x8, Size=0x34) returned 0x4ab610 [0165.340] IInternetSecurityManager:SetSecuritySite (This=0x4a40c8, pSite=0x4a29b4) returned 0x0 [0165.340] IUnknown:Release (This=0x4a29b4) returned 0x0 [0165.340] IUnknown:AddRef (This=0x4a29b4) returned 0x28 [0165.340] IUnknown:QueryInterface (in: This=0x4a29b4, riid=0x768261d0*(Data1=0x6d5140c1, Data2=0x7436, Data3=0x11ce, Data4=([0]=0x80, [1]=0x34, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0x60, [6]=0x9, [7]=0xfa)), ppvObject=0x26fb38 | out: ppvObject=0x26fb38*=0x4a29b8) returned 0x0 [0165.340] IServiceProvider:QueryService (in: This=0x4a29b8, guidService=0x7682f13c*(Data1=0xf1e50292, Data2=0xa795, Data3=0x4117, Data4=([0]=0x8e, [1]=0x9, [2]=0x2b, [3]=0x56, [4]=0xa, [5]=0x72, [6]=0xac, [7]=0x60)), riid=0x7682f13c*(Data1=0xf1e50292, Data2=0xa795, Data3=0x4117, Data4=([0]=0x8e, [1]=0x9, [2]=0x2b, [3]=0x56, [4]=0xa, [5]=0x72, [6]=0xac, [7]=0x60)), ppvObject=0x4a40f0 | out: ppvObject=0x4a40f0*=0x0) returned 0x80004002 [0165.340] IServiceProvider:QueryService (in: This=0x4a29b8, guidService=0x7682f12c*(Data1=0xf164edf1, Data2=0xcc7c, Data3=0x4f0d, Data4=([0]=0x9a, [1]=0x94, [2]=0x34, [3]=0x22, [4]=0x26, [5]=0x25, [6]=0xc3, [7]=0x93)), riid=0x7682f12c*(Data1=0xf164edf1, Data2=0xcc7c, Data3=0x4f0d, Data4=([0]=0x9a, [1]=0x94, [2]=0x34, [3]=0x22, [4]=0x26, [5]=0x25, [6]=0xc3, [7]=0x93)), ppvObject=0x4a40ec | out: ppvObject=0x4a40ec*=0x0) returned 0x80004002 [0165.340] IServiceProvider:QueryService (in: This=0x4a29b8, guidService=0x7681c484*(Data1=0x79eac9ee, Data2=0xbaf9, Data3=0x11ce, Data4=([0]=0x8c, [1]=0x82, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0x4b, [6]=0xa9, [7]=0xb)), riid=0x7681c484*(Data1=0x79eac9ee, Data2=0xbaf9, Data3=0x11ce, Data4=([0]=0x8c, [1]=0x82, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0x4b, [6]=0xa9, [7]=0xb)), ppvObject=0x4a40e8 | out: ppvObject=0x4a40e8*=0x6ff696bc) returned 0x0 [0165.340] IUnknown:Release (This=0x4a29b8) returned 0x0 [0165.340] CoTaskMemAlloc (cb=0x6d) returned 0x4ab650 [0165.340] CoTaskMemAlloc (cb=0x9) returned 0x4ab6e0 [0165.340] RtlAllocateHeap (HeapHandle=0x470000, Flags=0x0, Size=0xc) returned 0x4ab6f8 [0165.340] RtlAllocateHeap (HeapHandle=0x470000, Flags=0x8, Size=0x4c) returned 0x4abac8 [0165.342] StrChrW (lpStart="HTA", wMatch=0x3b) returned 0x0 [0165.342] RtlAllocateHeap (HeapHandle=0x470000, Flags=0x8, Size=0x44) returned 0x489428 [0165.343] RtlAllocateHeap (HeapHandle=0x470000, Flags=0x0, Size=0xc) returned 0x4ab710 [0165.343] RtlAllocateHeap (HeapHandle=0x470000, Flags=0x0, Size=0x10) returned 0x4ab728 [0165.345] RtlAllocateHeap (HeapHandle=0x470000, Flags=0x8, Size=0x4) returned 0x49ba68 [0165.345] RtlAllocateHeap (HeapHandle=0x470000, Flags=0x0, Size=0x20) returned 0x4a1b00 [0165.345] RtlAllocateHeap (HeapHandle=0x470000, Flags=0x8, Size=0x10) returned 0x4ab740 [0165.345] RtlAllocateHeap (HeapHandle=0x470000, Flags=0x8, Size=0x94) returned 0x4abb20 [0165.345] RtlAllocateHeap (HeapHandle=0x470000, Flags=0x0, Size=0x34) returned 0x4abbc0 [0165.345] RtlAllocateHeap (HeapHandle=0x470000, Flags=0x0, Size=0x70) returned 0x4abc00 [0165.346] RtlAllocateHeap (HeapHandle=0x470000, Flags=0x0, Size=0xf8) returned 0x4abc78 [0165.346] RtlAllocateHeap (HeapHandle=0x470000, Flags=0x0, Size=0x8b4) returned 0x4abd78 [0165.346] RtlAllocateHeap (HeapHandle=0x470000, Flags=0x0, Size=0x10) returned 0x4ab758 [0165.346] HeapFree (in: hHeap=0x470000, dwFlags=0x0, lpMem=0x0 | out: hHeap=0x470000) returned 1 [0165.346] RtlAllocateHeap (HeapHandle=0x470000, Flags=0x0, Size=0x10) returned 0x4ab770 [0165.346] RtlAllocateHeap (HeapHandle=0x470000, Flags=0x0, Size=0x84) returned 0x4ac638 [0165.348] RtlAllocateHeap (HeapHandle=0x470000, Flags=0x0, Size=0x800) returned 0x4ac6c8 [0165.348] RtlAllocateHeap (HeapHandle=0x470000, Flags=0x0, Size=0x800) returned 0x4aced0 [0165.348] RtlAllocateHeap (HeapHandle=0x470000, Flags=0x0, Size=0x4c) returned 0x4ad6d8 [0165.348] RtlAllocateHeap (HeapHandle=0x470000, Flags=0x0, Size=0x800) returned 0x4ad730 [0165.348] IsCharSpaceW (wch=0x48) returned 0 [0165.348] IsCharAlphaNumericW (ch=0x5c) returned 0 [0165.348] IsCharSpaceW (wch=0x5c) returned 0 [0165.348] RtlAllocateHeap (HeapHandle=0x470000, Flags=0x0, Size=0x18) returned 0x4934b0 [0165.348] RtlAllocateHeap (HeapHandle=0x470000, Flags=0x0, Size=0x50) returned 0x4adf38 [0165.348] RtlAllocateHeap (HeapHandle=0x470000, Flags=0x0, Size=0x14) returned 0x4934d0 [0165.348] IsCharSpaceW (wch=0x41) returned 0 [0165.348] RtlAllocateHeap (HeapHandle=0x470000, Flags=0x0, Size=0xc) returned 0x4ab788 [0165.348] IsCharAlphaNumericW (ch=0x20) returned 0 [0165.348] IsCharSpaceW (wch=0x20) returned 1 [0165.348] IsCharSpaceW (wch=0x7b) returned 0 [0165.348] RtlAllocateHeap (HeapHandle=0x470000, Flags=0x0, Size=0x1c) returned 0x4a1b28 [0165.348] IsCharSpaceW (wch=0x20) returned 1 [0165.348] IsCharAlphaNumericW (ch=0x7b) returned 0 [0165.348] IsCharSpaceW (wch=0x62) returned 0 [0165.348] HeapFree (in: hHeap=0x470000, dwFlags=0x0, lpMem=0x4adf38 | out: hHeap=0x470000) returned 1 [0165.348] IsCharAlphaNumericW (ch=0x3a) returned 0 [0165.348] IsCharSpaceW (wch=0x3a) returned 0 [0165.348] RtlAllocateHeap (HeapHandle=0x470000, Flags=0x0, Size=0x1c) returned 0x4a1b50 [0165.352] IsCharAlphaNumericW (ch=0x3a) returned 0 [0165.352] IsCharSpaceW (wch=0x75) returned 0 [0165.352] IsCharAlphaNumericW (ch=0x28) returned 0 [0165.352] IsCharSpaceW (wch=0x28) returned 0 [0165.352] IsCharAlphaNumericW (ch=0x28) returned 0 [0165.352] IsCharSpaceW (wch=0x23) returned 0 [0165.352] IsCharSpaceW (wch=0x23) returned 0 [0165.352] IsCharSpaceW (wch=0x7d) returned 0 [0165.352] IsCharAlphaNumericW (ch=0x7d) returned 0 [0165.352] IsCharSpaceW (wch=0x29) returned 0 [0165.352] IsCharSpaceW (wch=0x75) returned 0 [0165.352] IsCharSpaceW (wch=0x75) returned 0 [0165.352] IsCharSpaceW (wch=0x29) returned 0 [0165.352] RtlAllocateHeap (HeapHandle=0x470000, Flags=0x0, Size=0x14) returned 0x493510 [0165.352] RtlAllocateHeap (HeapHandle=0x470000, Flags=0x0, Size=0x34) returned 0x4ae140 [0165.352] RtlAllocateHeap (HeapHandle=0x470000, Flags=0x0, Size=0x40) returned 0x4840c0 [0165.352] RtlAllocateHeap (HeapHandle=0x470000, Flags=0x0, Size=0x10) returned 0x4ab7a0 [0165.352] RtlAllocateHeap (HeapHandle=0x470000, Flags=0x0, Size=0x10) returned 0x4ab7b8 [0165.352] CoTaskMemFree (pv=0x4ab650) [0165.352] CoTaskMemFree (pv=0x4ab6e0) [0165.352] RtlAllocateHeap (HeapHandle=0x470000, Flags=0x8, Size=0x14) returned 0x493530 [0165.352] LoadLibraryA (lpLibFileName="OLEAUT32.dll") returned 0x76e40000 [0165.353] GetProcAddress (hModule=0x76e40000, lpProcName=0x6) returned 0x76e43e59 [0165.353] StrCmpCW (pszStr1="Software\\Microsoft\\Internet Explorer", pszStr2="Software\\Microsoft\\Windows Mail\\Trident") returned -14 [0165.353] RtlAllocateHeap (HeapHandle=0x470000, Flags=0x8, Size=0x340) returned 0x4ae180 [0165.353] RtlAllocateHeap (HeapHandle=0x470000, Flags=0x0, Size=0x4a) returned 0x4ae4e0 [0165.353] IsOS (dwOS=0x25) returned 1 [0165.353] GetSysColor (nIndex=26) returned 0xcc6600 [0165.353] IsOS (dwOS=0x25) returned 1 [0165.353] GetSysColor (nIndex=5) returned 0xffffff [0165.353] GetSysColor (nIndex=8) returned 0x0 [0165.353] HeapFree (in: hHeap=0x470000, dwFlags=0x0, lpMem=0x0 | out: hHeap=0x470000) returned 1 [0165.353] RtlAllocateHeap (HeapHandle=0x470000, Flags=0x0, Size=0x10) returned 0x4ab6e0 [0165.358] wcstol (in: _String="0,0,255", _EndPtr=0x26e794, _Radix=10 | out: _EndPtr=0x26e794*=",0,255") returned 0 [0165.358] wcstol (in: _String="0,255", _EndPtr=0x26e794, _Radix=10 | out: _EndPtr=0x26e794*=",255") returned 0 [0165.358] wcstol (in: _String="255", _EndPtr=0x26e794, _Radix=10 | out: _EndPtr=0x26e794*="") returned 255 [0165.358] wcstol (in: _String="128,0,128", _EndPtr=0x26e794, _Radix=10 | out: _EndPtr=0x26e794*=",0,128") returned 128 [0165.358] wcstol (in: _String="0,128", _EndPtr=0x26e794, _Radix=10 | out: _EndPtr=0x26e794*=",128") returned 0 [0165.358] wcstol (in: _String="128", _EndPtr=0x26e794, _Radix=10 | out: _EndPtr=0x26e794*="") returned 128 [0165.360] GetModuleHandleW (lpModuleName="EXPLORER.EXE") returned 0x0 [0165.360] GetModuleHandleW (lpModuleName="IEXPLORE.EXE") returned 0x0 [0165.360] RegOpenKeyExW (in: hKey=0x80000001, lpSubKey="Software\\Microsoft\\Internet Explorer\\PageSetup", ulOptions=0x0, samDesired=0x20019, phkResult=0x26f84c | out: phkResult=0x26f84c*=0xa8) returned 0x0 [0165.360] SHGetValueW (in: hkey=0xa8, pszSubKey=0x0, pszValue="Print_Background", pdwType=0x0, pvData=0x26f850, pcbData=0x26f848*=0xa | out: pdwType=0x0, pvData=0x26f850, pcbData=0x26f848*=0xa) returned 0x2 [0165.360] RegCloseKey (hKey=0xa8) returned 0x0 [0165.360] RtlAllocateHeap (HeapHandle=0x470000, Flags=0x0, Size=0x80) returned 0x4b04c8 [0165.360] RtlAllocateHeap (HeapHandle=0x470000, Flags=0x0, Size=0x10) returned 0x4847c0 [0165.361] RtlAllocateHeap (HeapHandle=0x470000, Flags=0x0, Size=0x3a) returned 0x484150 [0165.361] RtlAllocateHeap (HeapHandle=0x470000, Flags=0x0, Size=0x6a) returned 0x4b0550 [0165.362] RtlAllocateHeap (HeapHandle=0x470000, Flags=0x0, Size=0x10) returned 0x484790 [0165.362] RtlAllocateHeap (HeapHandle=0x470000, Flags=0x0, Size=0x26) returned 0x48d0e8 [0165.362] RtlAllocateHeap (HeapHandle=0x470000, Flags=0x0, Size=0x6e) returned 0x4b05c8 [0165.363] GetProcessHeap () returned 0x470000 [0165.363] HeapFree (in: hHeap=0x470000, dwFlags=0x0, lpMem=0x4ab650 | out: hHeap=0x470000) returned 1 [0165.363] GetProcessHeap () returned 0x470000 [0165.363] HeapFree (in: hHeap=0x470000, dwFlags=0x0, lpMem=0x4af4e0 | out: hHeap=0x470000) returned 1 [0165.363] GetProcessHeap () returned 0x470000 [0165.363] HeapFree (in: hHeap=0x470000, dwFlags=0x0, lpMem=0x49ba78 | out: hHeap=0x470000) returned 1 [0165.363] RtlAllocateHeap (HeapHandle=0x470000, Flags=0x0, Size=0x14) returned 0x493550 [0165.363] RtlAllocateHeap (HeapHandle=0x470000, Flags=0x0, Size=0x10) returned 0x4847f0 [0165.363] RtlAllocateHeap (HeapHandle=0x470000, Flags=0x0, Size=0x14) returned 0x493570 [0165.363] RtlAllocateHeap (HeapHandle=0x470000, Flags=0x0, Size=0x40) returned 0x484198 [0165.364] RtlAllocateHeap (HeapHandle=0x470000, Flags=0x0, Size=0x60) returned 0x4ab650 [0165.364] RtlAllocateHeap (HeapHandle=0x470000, Flags=0x0, Size=0x24) returned 0x48d118 [0165.364] RtlAllocateHeap (HeapHandle=0x470000, Flags=0x0, Size=0x1c) returned 0x4a1ba0 [0165.364] GetAcceptLanguagesW () returned 0x0 [0165.364] RtlAllocateHeap (HeapHandle=0x470000, Flags=0x0, Size=0x10) returned 0x49b310 [0165.364] GetClassNameW (in: hWnd=0x60114, lpClassName=0x26fb1c, nMaxCount=10 | out: lpClassName="HTML Appl") returned 9 [0165.364] CompareStringW (Locale=0x409, dwCmpFlags=0x0, lpString1="HTML Appl", cchCount1=9, lpString2="HH Parent", cchCount2=9) returned 3 [0165.364] GetParent (hWnd=0x60114) returned 0x50160 [0165.364] GetClassNameW (in: hWnd=0x50160, lpClassName=0x26fb1c, nMaxCount=10 | out: lpClassName="HTML Appl") returned 9 [0165.364] CompareStringW (Locale=0x409, dwCmpFlags=0x0, lpString1="HTML Appl", cchCount1=9, lpString2="HH Parent", cchCount2=9) returned 3 [0165.365] GetParent (hWnd=0x50160) returned 0x0 [0165.365] RtlAllocateHeap (HeapHandle=0x470000, Flags=0x8, Size=0x14) returned 0x493590 [0165.365] RtlAllocateHeap (HeapHandle=0x470000, Flags=0x0, Size=0x28) returned 0x48d148 [0165.365] HeapFree (in: hHeap=0x470000, dwFlags=0x0, lpMem=0x493590 | out: hHeap=0x470000) returned 1 [0165.366] RtlAllocateHeap (HeapHandle=0x470000, Flags=0x8, Size=0x4c) returned 0x4ae538 [0165.366] RtlAllocateHeap (HeapHandle=0x470000, Flags=0x8, Size=0xe) returned 0x4ab830 [0165.366] RtlAllocateHeap (HeapHandle=0x470000, Flags=0x8, Size=0x94) returned 0x4b0640 [0165.366] RtlAllocateHeap (HeapHandle=0x470000, Flags=0x8, Size=0x14) returned 0x493590 [0165.366] RtlAllocateHeap (HeapHandle=0x470000, Flags=0x8, Size=0x12) returned 0x4935b0 [0165.366] RtlAllocateHeap (HeapHandle=0x470000, Flags=0x8, Size=0x14) returned 0x4935d0 [0165.367] RtlAllocateHeap (HeapHandle=0x470000, Flags=0x8, Size=0xe) returned 0x4ab848 [0165.367] RtlAllocateHeap (HeapHandle=0x470000, Flags=0x8, Size=0x10) returned 0x4ab860 [0165.367] RtlAllocateHeap (HeapHandle=0x470000, Flags=0x8, Size=0xe) returned 0x4ab878 [0165.367] RtlAllocateHeap (HeapHandle=0x470000, Flags=0x8, Size=0x10) returned 0x4ab890 [0165.367] RtlAllocateHeap (HeapHandle=0x470000, Flags=0x0, Size=0x1c) returned 0x4a1bc8 [0165.367] RtlAllocateHeap (HeapHandle=0x470000, Flags=0x0, Size=0x1a) returned 0x4a1bf0 [0165.367] RtlAllocateHeap (HeapHandle=0x470000, Flags=0x0, Size=0x1a) returned 0x4a1c18 [0165.367] RtlAllocateHeap (HeapHandle=0x470000, Flags=0x0, Size=0x12) returned 0x4935f0 [0165.367] RtlAllocateHeap (HeapHandle=0x470000, Flags=0x0, Size=0x12) returned 0x493610 [0165.367] RtlAllocateHeap (HeapHandle=0x470000, Flags=0x0, Size=0x12) returned 0x493630 [0165.367] RtlAllocateHeap (HeapHandle=0x470000, Flags=0x0, Size=0x12) returned 0x493650 [0165.367] RtlAllocateHeap (HeapHandle=0x470000, Flags=0x8, Size=0x10) returned 0x4ab8a8 [0165.367] RtlAllocateHeap (HeapHandle=0x470000, Flags=0x0, Size=0xc) returned 0x4ab8d8 [0165.367] RtlAllocateHeap (HeapHandle=0x470000, Flags=0x8, Size=0x10) returned 0x4ab8f0 [0165.367] RtlAllocateHeap (HeapHandle=0x470000, Flags=0x0, Size=0x12) returned 0x493670 [0165.367] RtlAllocateHeap (HeapHandle=0x470000, Flags=0x8, Size=0xe) returned 0x4ab908 [0165.368] RtlAllocateHeap (HeapHandle=0x470000, Flags=0x0, Size=0xa) returned 0x4ab920 [0165.368] RtlAllocateHeap (HeapHandle=0x470000, Flags=0x8, Size=0x26) returned 0x48d178 [0165.368] GetProcessHeap () returned 0x470000 [0165.368] HeapFree (in: hHeap=0x470000, dwFlags=0x0, lpMem=0x4a1c40 | out: hHeap=0x470000) returned 1 [0165.368] GetProcessHeap () returned 0x470000 [0165.368] HeapFree (in: hHeap=0x470000, dwFlags=0x0, lpMem=0x4a1c68 | out: hHeap=0x470000) returned 1 [0165.368] GetProcessHeap () returned 0x470000 [0165.368] HeapFree (in: hHeap=0x470000, dwFlags=0x0, lpMem=0x4a1c90 | out: hHeap=0x470000) returned 1 [0165.368] GetProcessHeap () returned 0x470000 [0165.368] HeapFree (in: hHeap=0x470000, dwFlags=0x0, lpMem=0x49b340 | out: hHeap=0x470000) returned 1 [0165.368] HeapFree (in: hHeap=0x470000, dwFlags=0x0, lpMem=0x4ab8a8 | out: hHeap=0x470000) returned 1 [0165.368] IMoniker:GetDisplayName (in: This=0x49e0d8, pbc=0x0, pmkToLeft=0x0, ppszDisplayName=0x26fae0 | out: ppszDisplayName=0x26fae0*="file:///C:/Users/5p5NrGJn0jS%20HALPmcxz/Desktop/READ_ME.hta") returned 0x0 [0165.368] IUnknown:QueryInterface (in: This=0x49e0d8, riid=0x6fb672f4*(Data1=0xa158a630, Data2=0xed6f, Data3=0x45fb, Data4=([0]=0xb9, [1]=0x87, [2]=0xf6, [3]=0x86, [4]=0x76, [5]=0xf5, [6]=0x77, [7]=0x52)), ppvObject=0x26fab8 | out: ppvObject=0x26fab8*=0x49e0e4) returned 0x0 [0165.368] IUriContainer:GetIUri (in: This=0x49e0e4, ppIUri=0x26fae8 | out: ppIUri=0x26fae8*=0x49c15c) returned 0x0 [0165.368] IUnknown:Release (This=0x49e0e4) returned 0x1 [0165.368] IUnknown:AddRef (This=0x49e0d8) returned 0x2 [0165.368] IUnknown:AddRef (This=0x49c15c) returned 0x5 [0165.368] HeapFree (in: hHeap=0x470000, dwFlags=0x0, lpMem=0x0 | out: hHeap=0x470000) returned 1 [0165.368] HeapFree (in: hHeap=0x470000, dwFlags=0x0, lpMem=0x0 | out: hHeap=0x470000) returned 1 [0165.368] IMoniker:GetDisplayName (in: This=0x49e0d8, pbc=0x0, pmkToLeft=0x0, ppszDisplayName=0x26f9c0 | out: ppszDisplayName=0x26f9c0*="file:///C:/Users/5p5NrGJn0jS%20HALPmcxz/Desktop/READ_ME.hta") returned 0x0 [0165.368] UrlGetLocationW (psz1="file:///C:/Users/5p5NrGJn0jS%20HALPmcxz/Desktop/READ_ME.hta") returned 0x0 [0165.368] CreateURLMonikerEx (in: pMkCtx=0x0, szURL="file:///C:/Users/5p5NrGJn0jS%20HALPmcxz/Desktop/READ_ME.hta", ppmk=0x26f98c*=0x0, dwFlags=0x1 | out: ppmk=0x26f98c*=0x4af4e0) returned 0x0 [0165.368] CreateUri (in: pwzURI="file:///C:/Users/5p5NrGJn0jS%20HALPmcxz/Desktop/READ_ME.hta", dwFlags=0x2b84, dwReserved=0x0, ppURI=0x26f984 | out: ppURI=0x26f984*=0x49c4bc) returned 0x0 [0165.368] IUri:GetScheme (in: This=0x49c4bc, pdwScheme=0x26f91c | out: pdwScheme=0x26f91c*=0x9) returned 0x0 [0165.369] CoInternetIsFeatureEnabled (FeatureEntry=0x1, dwFlags=0x2) returned 0x1 [0165.369] HeapFree (in: hHeap=0x470000, dwFlags=0x0, lpMem=0x0 | out: hHeap=0x470000) returned 1 [0165.369] RtlAllocateHeap (HeapHandle=0x470000, Flags=0x8, Size=0x1c) returned 0x4a1c90 [0165.369] IUnknown:AddRef (This=0x49c4bc) returned 0x5 [0165.369] IUri:GetAbsoluteUri (in: This=0x49c4bc, pbstrAbsoluteUri=0x4a1c90 | out: pbstrAbsoluteUri=0x4a1c90*="file:///C:/Users/5p5NrGJn0jS%20HALPmcxz/Desktop/READ_ME.hta") returned 0x0 [0165.369] IUnknown:Release (This=0x49c4bc) returned 0x4 [0165.369] IUnknown:AddRef (This=0x4af4e0) returned 0x2 [0165.369] IUnknown:Release (This=0x4af4e0) returned 0x1 [0165.369] IUnknown:AddRef (This=0x49e0d8) returned 0x3 [0165.369] IUnknown:Release (This=0x4af4e0) returned 0x0 [0165.369] IUnknown:AddRef (This=0x49e0d8) returned 0x4 [0165.369] IUnknown:QueryInterface (in: This=0x49c15c, riid=0x6fbed6e8*(Data1=0x50295b0c, Data2=0x6b79, Data3=0x4935, Data4=([0]=0xae, [1]=0xd8, [2]=0x5, [3]=0xd8, [4]=0xe, [5]=0xc8, [6]=0x6a, [7]=0x60)), ppvObject=0x26f78c | out: ppvObject=0x26f78c*=0x49c15c) returned 0x0 [0165.369] IUnknown:Release (This=0x49c15c) returned 0x5 [0165.369] IUnknown:AddRef (This=0x49c15c) returned 0x6 [0165.369] IUnknown:QueryInterface (in: This=0x49e0d8, riid=0x6fb672f4*(Data1=0xa158a630, Data2=0xed6f, Data3=0x45fb, Data4=([0]=0xb9, [1]=0x87, [2]=0xf6, [3]=0x86, [4]=0x76, [5]=0xf5, [6]=0x77, [7]=0x52)), ppvObject=0x26f760 | out: ppvObject=0x26f760*=0x49e0e4) returned 0x0 [0165.369] IUriContainer:GetIUri (in: This=0x49e0e4, ppIUri=0x26f7b4 | out: ppIUri=0x26f7b4*=0x49c15c) returned 0x0 [0165.369] IUnknown:Release (This=0x49e0e4) returned 0x4 [0165.370] IUnknown:AddRef (This=0x49e0d8) returned 0x5 [0165.370] IUnknown:Release (This=0x49e0d8) returned 0x4 [0165.370] IUnknown:AddRef (This=0x49c15c) returned 0x8 [0165.370] IUnknown:QueryInterface (in: This=0x49c15c, riid=0x6fbed6e8*(Data1=0x50295b0c, Data2=0x6b79, Data3=0x4935, Data4=([0]=0xae, [1]=0xd8, [2]=0x5, [3]=0xd8, [4]=0xe, [5]=0xc8, [6]=0x6a, [7]=0x60)), ppvObject=0x26f78c | out: ppvObject=0x26f78c*=0x49c15c) returned 0x0 [0165.370] IUnknown:Release (This=0x49c15c) returned 0x8 [0165.370] IUnknown:AddRef (This=0x49c15c) returned 0x9 [0165.370] IUri:GetScheme (in: This=0x49c15c, pdwScheme=0x26f784 | out: pdwScheme=0x26f784*=0x9) returned 0x0 [0165.370] RtlAllocateHeap (HeapHandle=0x470000, Flags=0x8, Size=0xc8) returned 0x4b0878 [0165.370] GetCurrentProcessId () returned 0x24c [0165.370] IUnknown:QueryInterface (in: This=0x49c15c, riid=0x6fbed6e8*(Data1=0x50295b0c, Data2=0x6b79, Data3=0x4935, Data4=([0]=0xae, [1]=0xd8, [2]=0x5, [3]=0xd8, [4]=0xe, [5]=0xc8, [6]=0x6a, [7]=0x60)), ppvObject=0x26f78c | out: ppvObject=0x26f78c*=0x49c15c) returned 0x0 [0165.370] IUnknown:Release (This=0x49c15c) returned 0x9 [0165.370] IUnknown:AddRef (This=0x49c15c) returned 0xa [0165.370] IUri:GetScheme (in: This=0x49c15c, pdwScheme=0x26f75c | out: pdwScheme=0x26f75c*=0x9) returned 0x0 [0165.370] IUnknown:QueryInterface (in: This=0x49c15c, riid=0x6fbed6e8*(Data1=0x50295b0c, Data2=0x6b79, Data3=0x4935, Data4=([0]=0xae, [1]=0xd8, [2]=0x5, [3]=0xd8, [4]=0xe, [5]=0xc8, [6]=0x6a, [7]=0x60)), ppvObject=0x26f710 | out: ppvObject=0x26f710*=0x49c15c) returned 0x0 [0165.370] IUnknown:Release (This=0x49c15c) returned 0xa [0165.370] IUnknown:AddRef (This=0x49c15c) returned 0xb [0165.370] IUnknown:Release (This=0x49c15c) returned 0xa [0165.370] IUri:GetAbsoluteUri (in: This=0x49c15c, pbstrAbsoluteUri=0x26f78c | out: pbstrAbsoluteUri=0x26f78c*="file:///C:/Users/5p5NrGJn0jS%20HALPmcxz/Desktop/READ_ME.hta") returned 0x0 [0165.370] GetProcAddress (hModule=0x76e40000, lpProcName=0x7) returned 0x76e44680 [0165.370] SysStringLen (param_1="file:///C:/Users/5p5NrGJn0jS%20HALPmcxz/Desktop/READ_ME.hta") returned 0x3b [0165.370] CreateUri (in: pwzURI="file:///C:/Users/5p5NrGJn0jS%20HALPmcxz/Desktop/READ_ME.hta", dwFlags=0x2b80, dwReserved=0x0, ppURI=0x26f7a8 | out: ppURI=0x26f7a8*=0x49c66c) returned 0x0 [0165.370] IUnknown:Release (This=0x49c15c) returned 0x9 [0165.370] IUri:GetScheme (in: This=0x49c66c, pdwScheme=0x26f73c | out: pdwScheme=0x26f73c*=0x9) returned 0x0 [0165.370] IUri:IsEqual (in: This=0x49c4bc, pUri=0x49c66c, pfEqual=0x26f784 | out: pfEqual=0x26f784*=1) returned 0x0 [0165.371] IUnknown:AddRef (This=0x49c4bc) returned 0x3 [0165.371] IUri:GetPropertyDWORD (in: This=0x49c4bc, uriProp=0x11, pdwProperty=0x26f51c, dwFlags=0x0 | out: pdwProperty=0x26f51c*=0x9) returned 0x0 [0165.371] IUnknown:Release (This=0x49c4bc) returned 0x2 [0165.372] RtlAllocateHeap (HeapHandle=0x470000, Flags=0x0, Size=0x7c) returned 0x4b0a48 [0165.372] IInternetSecurityManager:GetSecurityId (in: This=0x4a40c8, pwszUrl="file:///C:/Users/5p5NrGJn0jS%20HALPmcxz/Desktop/READ_ME.hta", pbSecurityId=0x26f580, pcbSecurityId=0x26f57c*=0x200, dwReserved=0x0 | out: pbSecurityId=0x26f580*=0x66, pcbSecurityId=0x26f57c*=0x9) returned 0x0 [0165.372] IInternetSecurityManager:GetSecurityId (in: This=0x6ff696bc, pwszUrl="file:///C:/Users/5p5NrGJn0jS%20HALPmcxz/Desktop/READ_ME.hta", pbSecurityId=0x26f580, pcbSecurityId=0x26f57c*=0x200, dwReserved=0x0 | out: pbSecurityId=0x26f580*=0x0, pcbSecurityId=0x26f57c*=0x200) returned 0x800c0011 [0165.380] HeapFree (in: hHeap=0x470000, dwFlags=0x0, lpMem=0x4b0a48 | out: hHeap=0x470000) returned 1 [0165.380] HeapFree (in: hHeap=0x470000, dwFlags=0x0, lpMem=0x49b640 | out: hHeap=0x470000) returned 1 [0165.380] RtlAllocateHeap (HeapHandle=0x470000, Flags=0x0, Size=0x9) returned 0x49b640 [0165.380] HeapFree (in: hHeap=0x470000, dwFlags=0x0, lpMem=0x49b6a0 | out: hHeap=0x470000) returned 1 [0165.380] RtlAllocateHeap (HeapHandle=0x470000, Flags=0x0, Size=0x9) returned 0x49b6a0 [0165.380] ParseURLW (in: pcszURL="file:///C:/Users/5p5NrGJn0jS%20HALPmcxz/Desktop/READ_ME.hta", ppu=0x26f738 | out: ppu=0x26f738) returned 0x0 [0165.380] GetDC (hWnd=0x0) returned 0x70109ff [0165.380] CreateCompatibleBitmap (hdc=0x70109ff, cx=1, cy=1) returned 0xd050283 [0165.381] GetDIBits (in: hdc=0x70109ff, hbm=0xd050283, start=0x0, cLines=0x1, lpvBits=0x0, lpbmi=0x26f308, usage=0x0 | out: lpvBits=0x0, lpbmi=0x26f308) returned 1 [0165.381] GetDIBits (in: hdc=0x70109ff, hbm=0xd050283, start=0x0, cLines=0x1, lpvBits=0x0, lpbmi=0x26f308, usage=0x0 | out: lpvBits=0x0, lpbmi=0x26f308) returned 1 [0165.381] DeleteObject (ho=0xd050283) returned 1 [0165.381] GetSysColor (nIndex=0) returned 0xc8c8c8 [0165.381] GetSysColor (nIndex=1) returned 0x0 [0165.381] GetSysColor (nIndex=2) returned 0xd1b499 [0165.381] GetSysColor (nIndex=3) returned 0xdbcdbf [0165.381] GetSysColor (nIndex=4) returned 0xf0f0f0 [0165.381] GetSysColor (nIndex=5) returned 0xffffff [0165.381] GetSysColor (nIndex=6) returned 0x646464 [0165.381] GetSysColor (nIndex=7) returned 0x0 [0165.381] GetSysColor (nIndex=8) returned 0x0 [0165.381] GetSysColor (nIndex=9) returned 0x0 [0165.381] GetSysColor (nIndex=10) returned 0xb4b4b4 [0165.381] GetSysColor (nIndex=11) returned 0xfcf7f4 [0165.381] GetSysColor (nIndex=12) returned 0xababab [0165.381] GetSysColor (nIndex=13) returned 0xff9933 [0165.381] GetSysColor (nIndex=14) returned 0xffffff [0165.381] GetSysColor (nIndex=15) returned 0xf0f0f0 [0165.381] GetSysColor (nIndex=16) returned 0xa0a0a0 [0165.381] GetSysColor (nIndex=17) returned 0x6d6d6d [0165.381] GetSysColor (nIndex=18) returned 0x0 [0165.381] GetSysColor (nIndex=19) returned 0x544e43 [0165.381] GetSysColor (nIndex=20) returned 0xffffff [0165.381] GetSysColor (nIndex=21) returned 0x696969 [0165.381] GetSysColor (nIndex=22) returned 0xe3e3e3 [0165.381] GetSysColor (nIndex=23) returned 0x0 [0165.381] GetSysColor (nIndex=24) returned 0xe1ffff [0165.381] GetSysColor (nIndex=25) returned 0x0 [0165.381] GetSysColor (nIndex=26) returned 0xcc6600 [0165.381] GetSysColor (nIndex=27) returned 0xead1b9 [0165.381] GetSysColor (nIndex=28) returned 0xf2e4d7 [0165.381] GetSysColor (nIndex=29) returned 0xff9933 [0165.381] GetSysColor (nIndex=30) returned 0xf0f0f0 [0165.381] GetSysColor (nIndex=31) returned 0x0 [0165.381] GetSysColor (nIndex=32) returned 0x0 [0165.381] GetSysColor (nIndex=33) returned 0x0 [0165.381] GetSysColor (nIndex=34) returned 0x0 [0165.382] GetSysColor (nIndex=35) returned 0x0 [0165.382] GetSysColor (nIndex=36) returned 0x0 [0165.382] GetSysColor (nIndex=37) returned 0x0 [0165.382] GetSysColor (nIndex=38) returned 0x0 [0165.382] GetSysColor (nIndex=39) returned 0x0 [0165.382] GetSysColor (nIndex=40) returned 0x0 [0165.382] GetSysColor (nIndex=41) returned 0x0 [0165.382] GetSysColor (nIndex=42) returned 0x0 [0165.382] GetSysColor (nIndex=43) returned 0x0 [0165.382] GetSysColor (nIndex=44) returned 0x0 [0165.382] GetSysColor (nIndex=45) returned 0x0 [0165.382] GetSysColor (nIndex=46) returned 0x0 [0165.382] GetSysColor (nIndex=47) returned 0x0 [0165.382] GetSysColor (nIndex=48) returned 0x0 [0165.382] GetSysColor (nIndex=49) returned 0x0 [0165.382] GetSysColor (nIndex=50) returned 0x0 [0165.382] GetSysColor (nIndex=51) returned 0x0 [0165.382] GetSysColor (nIndex=52) returned 0x0 [0165.382] GetSysColor (nIndex=53) returned 0x0 [0165.382] GetSysColor (nIndex=54) returned 0x0 [0165.382] GetSysColor (nIndex=55) returned 0x0 [0165.382] GetSysColor (nIndex=56) returned 0x0 [0165.382] GetSysColor (nIndex=57) returned 0x0 [0165.382] GetSysColor (nIndex=58) returned 0x0 [0165.382] GetSysColor (nIndex=59) returned 0x0 [0165.382] GetSysColor (nIndex=60) returned 0x0 [0165.382] GetSysColor (nIndex=61) returned 0x0 [0165.382] GetSysColor (nIndex=62) returned 0x0 [0165.382] GetSysColor (nIndex=63) returned 0x0 [0165.382] GetDeviceCaps (hdc=0x70109ff, index=38) returned 32409 [0165.382] ReleaseDC (hWnd=0x0, hDC=0x70109ff) returned 1 [0165.382] GetCurrentThreadId () returned 0x220 [0165.382] RtlAllocateHeap (HeapHandle=0x470000, Flags=0x0, Size=0x10) returned 0x4aba70 [0165.383] RtlAllocateHeap (HeapHandle=0x470000, Flags=0x8, Size=0x50) returned 0x4ae5e8 [0165.383] RtlAllocateHeap (HeapHandle=0x470000, Flags=0x8, Size=0x30) returned 0x48d820 [0165.383] RtlAllocateHeap (HeapHandle=0x470000, Flags=0x0, Size=0x28) returned 0x4b17c0 [0165.383] GetProcAddress (hModule=0x76e40000, lpProcName=0x8) returned 0x76e43ed5 [0165.383] GetCurrentThreadId () returned 0x220 [0165.383] HeapFree (in: hHeap=0x470000, dwFlags=0x0, lpMem=0x48d820 | out: hHeap=0x470000) returned 1 [0165.383] RtlAllocateHeap (HeapHandle=0x470000, Flags=0x0, Size=0x7c) returned 0x4b0a48 [0165.383] ParseURLW (in: pcszURL="file:///C:/Users/5p5NrGJn0jS%20HALPmcxz/Desktop/READ_ME.hta", ppu=0x26f728 | out: ppu=0x26f728) returned 0x0 [0165.383] CreateUri (in: pwzURI="file:///C:/Users/5p5NrGJn0jS%20HALPmcxz/Desktop/READ_ME.hta", dwFlags=0x2b84, dwReserved=0x0, ppURI=0x26f70c | out: ppURI=0x26f70c*=0x49c4bc) returned 0x0 [0165.384] IUnknown:AddRef (This=0x49c4bc) returned 0x5 [0165.384] IInternetSecurityManager:MapUrlToZone (in: This=0x6ff696bc, pwszUrl="file:///C:/Users/5p5NrGJn0jS%20HALPmcxz/Desktop/READ_ME.hta", pdwZone=0x26f6ac, dwFlags=0x0 | out: pdwZone=0x26f6ac*=0xffffffff) returned 0x800c0011 [0165.385] CoInternetIsFeatureEnabled (FeatureEntry=0x8, dwFlags=0x2) returned 0x1 [0165.385] CoInternetIsFeatureEnabled (FeatureEntry=0x8, dwFlags=0x2) returned 0x1 [0165.385] CoInternetIsFeatureEnabled (FeatureEntry=0xe, dwFlags=0x2) returned 0x1 [0165.385] IInternetSecurityManager:ProcessUrlAction (in: This=0x6ff696bc, pwszUrl="file:///C:/Users/5p5NrGJn0jS%20HALPmcxz/Desktop/READ_ME.hta", dwAction=0x2700, pPolicy=0x26f6b0, cbPolicy=0x4, pContext=0x0, cbContext=0x0, dwFlags=0x41, dwReserved=0x0 | out: pPolicy=0x26f6b0*=0x0) returned 0x0 [0165.385] CoInternetIsFeatureEnabled (FeatureEntry=0x8, dwFlags=0x2) returned 0x1 [0165.385] IUnknown:Release (This=0x49c4bc) returned 0x4 [0165.385] IUnknown:Release (This=0x49c4bc) returned 0x3 [0165.385] IUnknown:AddRef (This=0x49c4bc) returned 0x4 [0165.385] IUri:GetPropertyDWORD (in: This=0x49c4bc, uriProp=0x11, pdwProperty=0x26f4e4, dwFlags=0x0 | out: pdwProperty=0x26f4e4*=0x9) returned 0x0 [0165.385] IUnknown:Release (This=0x49c4bc) returned 0x3 [0165.385] RtlAllocateHeap (HeapHandle=0x470000, Flags=0x0, Size=0x7c) returned 0x4b21b8 [0165.385] IInternetSecurityManager:GetSecurityId (in: This=0x4a40c8, pwszUrl="file:///C:/Users/5p5NrGJn0jS%20HALPmcxz/Desktop/READ_ME.hta", pbSecurityId=0x26f540, pcbSecurityId=0x26f53c*=0x200, dwReserved=0x0 | out: pbSecurityId=0x26f540*=0x66, pcbSecurityId=0x26f53c*=0x9) returned 0x0 [0165.386] IInternetSecurityManager:GetSecurityId (in: This=0x6ff696bc, pwszUrl="file:///C:/Users/5p5NrGJn0jS%20HALPmcxz/Desktop/READ_ME.hta", pbSecurityId=0x26f540, pcbSecurityId=0x26f53c*=0x200, dwReserved=0x0 | out: pbSecurityId=0x26f540*=0x0, pcbSecurityId=0x26f53c*=0x200) returned 0x800c0011 [0165.386] HeapFree (in: hHeap=0x470000, dwFlags=0x0, lpMem=0x4b21b8 | out: hHeap=0x470000) returned 1 [0165.386] HeapFree (in: hHeap=0x470000, dwFlags=0x0, lpMem=0x0 | out: hHeap=0x470000) returned 1 [0165.386] RtlAllocateHeap (HeapHandle=0x470000, Flags=0x0, Size=0x9) returned 0x4aba88 [0165.386] CoInternetGetSession (in: dwSessionMode=0x0, ppIInternetSession=0x26f764, dwReserved=0x0 | out: ppIInternetSession=0x26f764*=0x4a45b0) returned 0x0 [0165.386] IInternetSession:RegisterNameSpace (This=0x4a45b0, pCF=0x6ff68c50, rclsid=0x6fb69790, pwzProtocol="res", cPatterns=0x0, ppwzPatterns=0x0, dwReserved=0x0) returned 0x0 [0165.386] IUnknown:AddRef (This=0x6ff68c50) returned 0x1 [0165.386] IInternetSession:RegisterNameSpace (This=0x4a45b0, pCF=0x6ff68c70, rclsid=0x6fb69780, pwzProtocol="about", cPatterns=0x0, ppwzPatterns=0x0, dwReserved=0x0) returned 0x0 [0165.386] IUnknown:AddRef (This=0x6ff68c70) returned 0x1 [0165.386] StrCmpICW (pszStr1="file:///C:/Users/5p5NrGJn0jS%20HALPmcxz/Desktop/READ_ME.hta", pszStr2="res://ieframe.dll/PhishSite.htm") returned -12 [0165.386] IUnknown:QueryInterface (in: This=0x49c15c, riid=0x6fbed6e8*(Data1=0x50295b0c, Data2=0x6b79, Data3=0x4935, Data4=([0]=0xae, [1]=0xd8, [2]=0x5, [3]=0xd8, [4]=0xe, [5]=0xc8, [6]=0x6a, [7]=0x60)), ppvObject=0x26f6d4 | out: ppvObject=0x26f6d4*=0x49c15c) returned 0x0 [0165.386] IUnknown:Release (This=0x49c15c) returned 0x9 [0165.386] IUnknown:AddRef (This=0x49c15c) returned 0xa [0165.387] RtlAllocateHeap (HeapHandle=0x470000, Flags=0x8, Size=0x12c) returned 0x4b21b8 [0165.387] IUnknown:AddRef (This=0x49c15c) returned 0xb [0165.387] IUnknown:QueryInterface (in: This=0x49c15c, riid=0x6fbed6e8*(Data1=0x50295b0c, Data2=0x6b79, Data3=0x4935, Data4=([0]=0xae, [1]=0xd8, [2]=0x5, [3]=0xd8, [4]=0xe, [5]=0xc8, [6]=0x6a, [7]=0x60)), ppvObject=0x26f698 | out: ppvObject=0x26f698*=0x49c15c) returned 0x0 [0165.387] IUnknown:Release (This=0x49c15c) returned 0xb [0165.387] IUnknown:AddRef (This=0x49c15c) returned 0xc [0165.387] IUnknown:Release (This=0x49c15c) returned 0xb [0165.387] RtlAllocateHeap (HeapHandle=0x470000, Flags=0x8, Size=0x3c) returned 0x484228 [0165.387] RtlAllocateHeap (HeapHandle=0x470000, Flags=0x8, Size=0xb4) returned 0x4b22f0 [0165.387] RtlAllocateHeap (HeapHandle=0x470000, Flags=0x0, Size=0x30) returned 0x48d820 [0165.387] IUri:GetScheme (in: This=0x49c15c, pdwScheme=0x26f71c | out: pdwScheme=0x26f71c*=0x9) returned 0x0 [0165.387] IUri:IsEqual (in: This=0x49c4bc, pUri=0x49c15c, pfEqual=0x26f764 | out: pfEqual=0x26f764*=1) returned 0x0 [0165.387] HeapFree (in: hHeap=0x470000, dwFlags=0x0, lpMem=0x0 | out: hHeap=0x470000) returned 1 [0165.387] RtlAllocateHeap (HeapHandle=0x470000, Flags=0x8, Size=0x4c) returned 0x4ae640 [0165.387] RtlAllocateHeap (HeapHandle=0x470000, Flags=0x0, Size=0x12) returned 0x493730 [0165.387] RtlAllocateHeap (HeapHandle=0x470000, Flags=0x0, Size=0x60) returned 0x4b23b0 [0165.387] RtlAllocateHeap (HeapHandle=0x470000, Flags=0x0, Size=0x30) returned 0x48d858 [0165.387] PostMessageW (hWnd=0x7011a, Msg=0x8002, wParam=0x0, lParam=0x0) returned 1 [0165.388] RtlAllocateHeap (HeapHandle=0x470000, Flags=0x8, Size=0x12c) returned 0x4b2418 [0165.388] IUnknown:AddRef (This=0x49c15c) returned 0xc [0165.388] IUnknown:QueryInterface (in: This=0x49c15c, riid=0x6fbed6e8*(Data1=0x50295b0c, Data2=0x6b79, Data3=0x4935, Data4=([0]=0xae, [1]=0xd8, [2]=0x5, [3]=0xd8, [4]=0xe, [5]=0xc8, [6]=0x6a, [7]=0x60)), ppvObject=0x26f6b8 | out: ppvObject=0x26f6b8*=0x49c15c) returned 0x0 [0165.388] IUnknown:Release (This=0x49c15c) returned 0xc [0165.388] IUnknown:AddRef (This=0x49c15c) returned 0xd [0165.388] RtlAllocateHeap (HeapHandle=0x470000, Flags=0x8, Size=0x4c) returned 0x4ae698 [0165.388] RtlAllocateHeap (HeapHandle=0x470000, Flags=0x8, Size=0x68) returned 0x4b29a0 [0165.388] RtlAllocateHeap (HeapHandle=0x470000, Flags=0x8, Size=0x108) returned 0x4b2a10 [0165.388] RtlAllocateHeap (HeapHandle=0x470000, Flags=0x0, Size=0x10) returned 0x4b25b8 [0165.388] RtlAllocateHeap (HeapHandle=0x470000, Flags=0x8, Size=0xcc) returned 0x49cb70 [0165.388] RtlAllocateHeap (HeapHandle=0x470000, Flags=0x0, Size=0x10) returned 0x4b25d0 [0165.388] RtlAllocateHeap (HeapHandle=0x470000, Flags=0x8, Size=0x30) returned 0x48d890 [0165.388] RtlAllocateHeap (HeapHandle=0x470000, Flags=0x8, Size=0x1b0) returned 0x4b2b20 [0165.388] IUnknown:QueryInterface (in: This=0x49c15c, riid=0x6fbed6e8*(Data1=0x50295b0c, Data2=0x6b79, Data3=0x4935, Data4=([0]=0xae, [1]=0xd8, [2]=0x5, [3]=0xd8, [4]=0xe, [5]=0xc8, [6]=0x6a, [7]=0x60)), ppvObject=0x26f3bc | out: ppvObject=0x26f3bc*=0x49c15c) returned 0x0 [0165.388] IUnknown:Release (This=0x49c15c) returned 0xd [0165.388] IUnknown:AddRef (This=0x49c15c) returned 0xe [0165.388] HeapFree (in: hHeap=0x470000, dwFlags=0x0, lpMem=0x0 | out: hHeap=0x470000) returned 1 [0165.388] IUnknown:AddRef (This=0x49c15c) returned 0xf [0165.388] IUnknown:AddRef (This=0x49c15c) returned 0x10 [0165.388] IUnknown:QueryInterface (in: This=0x49c15c, riid=0x6fbed6e8*(Data1=0x50295b0c, Data2=0x6b79, Data3=0x4935, Data4=([0]=0xae, [1]=0xd8, [2]=0x5, [3]=0xd8, [4]=0xe, [5]=0xc8, [6]=0x6a, [7]=0x60)), ppvObject=0x26f3b0 | out: ppvObject=0x26f3b0*=0x49c15c) returned 0x0 [0165.388] IUnknown:Release (This=0x49c15c) returned 0x10 [0165.388] IUnknown:AddRef (This=0x49c15c) returned 0x11 [0165.388] IUri:GetScheme (in: This=0x49c15c, pdwScheme=0x4b2c28 | out: pdwScheme=0x4b2c28*=0x9) returned 0x0 [0165.389] IMoniker:IsSystemMoniker (in: This=0x49e0d8, pdwMksys=0x26f418 | out: pdwMksys=0x26f418*=0x6) returned 0x0 [0165.389] CoInternetParseIUri (in: pIUri=0x49c15c, ParseAction=0x9, dwFlags=0x0, pwzResult=0x26f428, cchResult=0x104, pcchResult=0x26f3cc, dwReserved=0x0 | out: pwzResult="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\READ_ME.hta", pcchResult=0x26f3cc) returned 0x0 [0165.389] RtlAllocateHeap (HeapHandle=0x470000, Flags=0x0, Size=0x68) returned 0x4b2cd8 [0165.389] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\READ_ME.hta", lpFindFileData=0x26f158 | out: lpFindFileData=0x26f158*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x41e672e0, ftCreationTime.dwHighDateTime=0x1d6eb7f, ftLastAccessTime.dwLowDateTime=0x41e672e0, ftLastAccessTime.dwHighDateTime=0x1d6eb7f, ftLastWriteTime.dwLowDateTime=0x41e672e0, ftLastWriteTime.dwHighDateTime=0x1d6eb7f, nFileSizeHigh=0x0, nFileSizeLow=0xe34, dwReserved0=0x5c007a, dwReserved1=0x650044, cFileName="READ_ME.hta", cAlternateFileName="")) returned 0x4af520 [0165.389] FindClose (in: hFindFile=0x4af520 | out: hFindFile=0x4af520) returned 1 [0165.389] IUnknown:QueryInterface (in: This=0x49c15c, riid=0x6fbed6e8*(Data1=0x50295b0c, Data2=0x6b79, Data3=0x4935, Data4=([0]=0xae, [1]=0xd8, [2]=0x5, [3]=0xd8, [4]=0xe, [5]=0xc8, [6]=0x6a, [7]=0x60)), ppvObject=0x26f3bc | out: ppvObject=0x26f3bc*=0x49c15c) returned 0x0 [0165.389] IUnknown:Release (This=0x49c15c) returned 0x11 [0165.389] IUnknown:AddRef (This=0x49c15c) returned 0x12 [0165.390] RtlAllocateHeap (HeapHandle=0x470000, Flags=0x8, Size=0x10) returned 0x4b25e8 [0165.390] IInternetSession:CreateBinding (in: This=0x4a45b0, pbc=0x0, szUrl="file:///C:/Users/5p5NrGJn0jS%20HALPmcxz/Desktop/READ_ME.hta", pUnkOuter=0x0, ppunk=0x0, ppOInetProt=0x4b25f0, dwOption=0x0 | out: ppunk=0x0, ppOInetProt=0x4b25f0*=0x4b3208) returned 0x0 [0165.391] IUnknown:QueryInterface (in: This=0x4b3208, riid=0x6fb86078*(Data1=0x53c84785, Data2=0x8425, Data3=0x4dc5, Data4=([0]=0x97, [1]=0x1b, [2]=0xe5, [3]=0x8d, [4]=0x9c, [5]=0x19, [6]=0xf9, [7]=0xb6)), ppvObject=0x26f340 | out: ppvObject=0x26f340*=0x0) returned 0x80004002 [0165.392] RegOpenKeyExW (in: hKey=0x80000002, lpSubKey="Software\\Microsoft\\Internet Explorer\\Main\\FeatureControl", ulOptions=0x0, samDesired=0x1, phkResult=0x26f2dc | out: phkResult=0x26f2dc*=0x1dc) returned 0x0 [0165.392] RegOpenKeyExW (in: hKey=0x80000001, lpSubKey="Software\\Microsoft\\Internet Explorer\\Main\\FeatureControl", ulOptions=0x0, samDesired=0x1, phkResult=0x26f2e0 | out: phkResult=0x26f2e0*=0x1e4) returned 0x0 [0165.392] RegOpenKeyExW (in: hKey=0x1e4, lpSubKey="FEATURE_XSSFILTER", ulOptions=0x0, samDesired=0x1, phkResult=0x26f29c | out: phkResult=0x26f29c*=0x0) returned 0x2 [0165.392] RegOpenKeyExW (in: hKey=0x1dc, lpSubKey="FEATURE_XSSFILTER", ulOptions=0x0, samDesired=0x1, phkResult=0x26f29c | out: phkResult=0x26f29c*=0x1e8) returned 0x0 [0165.392] SHRegGetValueW () returned 0x2 [0165.392] SHRegGetValueW () returned 0x2 [0165.392] RegCloseKey (hKey=0x1e8) returned 0x0 [0165.392] RegCloseKey (hKey=0x0) returned 0x6 [0165.392] RegCloseKey (hKey=0x0) returned 0x6 [0165.392] RegCloseKey (hKey=0x1dc) returned 0x0 [0165.392] RegCloseKey (hKey=0x1e4) returned 0x0 [0165.392] IUnknown:AddRef (This=0x4b3208) returned 0x2 [0165.392] IUnknown:QueryInterface (in: This=0x4b3208, riid=0x6fb86158*(Data1=0xc7a98e66, Data2=0x1010, Data3=0x492c, Data4=([0]=0xa1, [1]=0xc8, [2]=0xc8, [3]=0x9, [4]=0xe1, [5]=0xf7, [6]=0x59, [7]=0x5)), ppvObject=0x26f384 | out: ppvObject=0x26f384*=0x4b3208) returned 0x0 [0165.392] IInternetProtocolEx:StartEx (This=0x4b3208, pUri=0x49c15c, pOIProtSink=0x4b2b74, pOIBindInfo=0x4b2b3c, grfPI=0x10, dwReserved=0x0) returned 0x0 [0165.392] IUnknown:AddRef (This=0x4b2b74) returned 0x3 [0165.392] IUnknown:AddRef (This=0x4b2b3c) returned 0x4 [0165.392] IUnknown:QueryInterface (in: This=0x4b2b3c, riid=0x76826f40*(Data1=0xa3e015b7, Data2=0xa82c, Data3=0x4dcd, Data4=([0]=0xa1, [1]=0x50, [2]=0x56, [3]=0x9a, [4]=0xee, [5]=0xed, [6]=0x36, [7]=0xab)), ppvObject=0x26f32c | out: ppvObject=0x26f32c*=0x0) returned 0x80004002 [0165.393] IInternetBindInfo:GetBindInfo (in: This=0x4b2b3c, grfBINDF=0x4b3378, pbindinfo=0x4b3380 | out: grfBINDF=0x4b3378*=0x20083, pbindinfo=0x4b3380) returned 0x0 [0165.393] RegOpenKeyExW (in: hKey=0x80000002, lpSubKey="Software\\Microsoft\\Internet Explorer\\Main\\FeatureControl", ulOptions=0x0, samDesired=0x1, phkResult=0x26f288 | out: phkResult=0x26f288*=0x1e4) returned 0x0 [0165.393] RegOpenKeyExW (in: hKey=0x80000001, lpSubKey="Software\\Microsoft\\Internet Explorer\\Main\\FeatureControl", ulOptions=0x0, samDesired=0x1, phkResult=0x26f28c | out: phkResult=0x26f28c*=0x1dc) returned 0x0 [0165.393] RegOpenKeyExW (in: hKey=0x1dc, lpSubKey="FEATURE_SHOW_FAILED_CONNECT_CONTENT_KB942615", ulOptions=0x0, samDesired=0x1, phkResult=0x26f248 | out: phkResult=0x26f248*=0x0) returned 0x2 [0165.393] RegOpenKeyExW (in: hKey=0x1e4, lpSubKey="FEATURE_SHOW_FAILED_CONNECT_CONTENT_KB942615", ulOptions=0x0, samDesired=0x1, phkResult=0x26f248 | out: phkResult=0x26f248*=0x0) returned 0x2 [0165.393] RegCloseKey (hKey=0x0) returned 0x6 [0165.393] RegCloseKey (hKey=0x0) returned 0x6 [0165.393] RegCloseKey (hKey=0x1e4) returned 0x0 [0165.393] RegCloseKey (hKey=0x1dc) returned 0x0 [0165.393] IUnknown:AddRef (This=0x4b2b74) returned 0x5 [0165.394] IInternetProtocolSink:ReportProgress (This=0x4b2b74, ulStatusCode=0xb, szStatusText="") returned 0x0 [0165.395] IInternetProtocolSink:ReportProgress (This=0x4b2b74, ulStatusCode=0xe, szStatusText="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\READ_ME.hta") returned 0x0 [0165.395] GetCurrentProcessId () returned 0x24c [0165.395] IInternetProtocolSink:ReportProgress (This=0x4b2b74, ulStatusCode=0xd, szStatusText="application/hta") returned 0x0 [0165.395] RegisterClipboardFormatA (lpszFormat="text/html") returned 0xc16f [0165.395] RegisterClipboardFormatA (lpszFormat="text/plain") returned 0xc170 [0165.396] RegisterClipboardFormatA (lpszFormat="text/x-component") returned 0xc171 [0165.396] RegisterClipboardFormatA (lpszFormat="image/gif") returned 0xc172 [0165.396] RegisterClipboardFormatA (lpszFormat="image/jpeg") returned 0xc173 [0165.396] RegisterClipboardFormatA (lpszFormat="image/pjpeg") returned 0xc174 [0165.396] RegisterClipboardFormatA (lpszFormat="image/bmp") returned 0xc175 [0165.396] RegisterClipboardFormatA (lpszFormat="image/x-jg") returned 0xc176 [0165.396] RegisterClipboardFormatA (lpszFormat="image/x-art") returned 0xc177 [0165.396] RegisterClipboardFormatA (lpszFormat="image/x-wmf") returned 0xc178 [0165.396] RegisterClipboardFormatA (lpszFormat="image/x-emf") returned 0xc179 [0165.396] RegisterClipboardFormatA (lpszFormat="video/avi") returned 0xc17a [0165.396] RegisterClipboardFormatA (lpszFormat="video/x-msvideo") returned 0xc17b [0165.396] RegisterClipboardFormatA (lpszFormat="video/mpeg") returned 0xc17c [0165.396] RegisterClipboardFormatA (lpszFormat="video/quicktime") returned 0xc17d [0165.396] RegisterClipboardFormatA (lpszFormat="application/hta") returned 0xc17e [0165.396] RegisterClipboardFormatA (lpszFormat="image/x-png") returned 0xc17f [0165.396] RegisterClipboardFormatA (lpszFormat="image/png") returned 0xc180 [0165.396] RegisterClipboardFormatA (lpszFormat="image/x-icon") returned 0xc181 [0165.396] StrCmpICW (pszStr1="application/hta", pszStr2="text/xml") returned -19 [0165.396] StrCmpNICW (lpStr1="applicat", lpStr2="text/css", nChar=8) returned -19 [0165.397] IInternetProtocolSink:ReportData (This=0x4b2b74, grfBSCF=0x5, ulProgress=0xe34, ulProgressMax=0xe34) returned 0x0 [0165.397] IUnknown:QueryInterface (in: This=0x4b3208, riid=0x6fba9460*(Data1=0x79eac9d8, Data2=0xbafa, Data3=0x11ce, Data4=([0]=0x8c, [1]=0x82, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0x4b, [6]=0xa9, [7]=0xb)), ppvObject=0x26d854 | out: ppvObject=0x26d854*=0x0) returned 0x80004002 [0165.397] IUnknown:QueryInterface (in: This=0x4b3208, riid=0x6fb24588*(Data1=0x79eac9d6, Data2=0xbafa, Data3=0x11ce, Data4=([0]=0x8c, [1]=0x82, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0x4b, [6]=0xa9, [7]=0xb)), ppvObject=0x26d84c | out: ppvObject=0x26d84c*=0x0) returned 0x80004002 [0165.397] IInternetProtocolSink:ReportResult (This=0x4b2b74, hrResult=0x0, dwError=0x0, szResult=0x0) returned 0x0 [0165.397] IUnknown:Release (This=0x4b3208) returned 0x2 [0165.397] IUnknown:Release (This=0x49c15c) returned 0x13 [0165.397] IUnknown:Release (This=0x49c15c) returned 0x12 [0165.397] IUnknown:Release (This=0x49c15c) returned 0x11 [0165.397] CoTaskMemFree (pv=0x0) [0165.397] RtlAllocateHeap (HeapHandle=0x470000, Flags=0x8, Size=0x1a8) returned 0x4b2d48 [0165.397] GetCPInfo (in: CodePage=0x4e4, lpCPInfo=0x26f670 | out: lpCPInfo=0x26f670) returned 1 [0165.397] IUnknown:AddRef (This=0x4a45b0) returned 0x3 [0165.398] IUnknown:AddRef (This=0x49c15c) returned 0x12 [0165.398] IUnknown:QueryInterface (in: This=0x49c15c, riid=0x6fbed6e8*(Data1=0x50295b0c, Data2=0x6b79, Data3=0x4935, Data4=([0]=0xae, [1]=0xd8, [2]=0x5, [3]=0xd8, [4]=0xe, [5]=0xc8, [6]=0x6a, [7]=0x60)), ppvObject=0x26f678 | out: ppvObject=0x26f678*=0x49c15c) returned 0x0 [0165.398] IUnknown:Release (This=0x49c15c) returned 0x12 [0165.398] IUnknown:AddRef (This=0x49c15c) returned 0x13 [0165.398] IUri:GetScheme (in: This=0x49c15c, pdwScheme=0x26f67c | out: pdwScheme=0x26f67c*=0x9) returned 0x0 [0165.398] RtlAllocateHeap (HeapHandle=0x470000, Flags=0x8, Size=0x58) returned 0x4b2ef8 [0165.398] CreateEventW (lpEventAttributes=0x0, bManualReset=0, bInitialState=0, lpName=0x0) returned 0x1dc [0165.398] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x6fb5e718, lpParameter=0x4b2ef8, dwCreationFlags=0x0, lpThreadId=0x4b2f0c | out: lpThreadId=0x4b2f0c*=0x150) returned 0xa8 [0165.399] GetCurrentThreadId () returned 0x220 [0165.399] GetCurrentThreadId () returned 0x220 [0165.399] RtlAllocateHeap (HeapHandle=0x470000, Flags=0x0, Size=0x78) returned 0x482170 [0165.399] HeapFree (in: hHeap=0x470000, dwFlags=0x0, lpMem=0x0 | out: hHeap=0x470000) returned 1 [0165.399] MulDiv (nNumber=3636, nNumerator=4000, nDenominator=3636) returned 4000 [0165.399] RtlAllocateHeap (HeapHandle=0x470000, Flags=0x0, Size=0x7c) returned 0x4b3d08 [0165.399] RtlAllocateHeap (HeapHandle=0x470000, Flags=0x0, Size=0x128) returned 0x4b3d90 [0165.399] RtlAllocateHeap (HeapHandle=0x470000, Flags=0x0, Size=0x10) returned 0x4847a8 [0165.399] RtlAllocateHeap (HeapHandle=0x470000, Flags=0x0, Size=0x68) returned 0x4b3ec0 [0165.400] RtlAllocateHeap (HeapHandle=0x470000, Flags=0x0, Size=0x100) returned 0x4b3f30 [0165.400] IInternetProtocol:Read (in: This=0x4b3208, pv=0x4b3f3c, cb=0xc8, pcbRead=0x26f5c0 | out: pv=0x4b3f3c, pcbRead=0x26f5c0*=0xc8) returned 0x0 [0165.400] CoInternetIsFeatureEnabledForUrl (FeatureEntry=0x3, dwFlags=0x2, szURL="file:///C:/Users/5p5NrGJn0jS%20HALPmcxz/Desktop/READ_ME.hta", pSecMgr=0x0) returned 0x1 [0165.400] RegOpenKeyExW (in: hKey=0x80000002, lpSubKey="Software\\Microsoft\\Internet Explorer\\Main\\FeatureControl", ulOptions=0x0, samDesired=0x1, phkResult=0x26f548 | out: phkResult=0x26f548*=0xb0) returned 0x0 [0165.401] RegOpenKeyExW (in: hKey=0x80000001, lpSubKey="Software\\Microsoft\\Internet Explorer\\Main\\FeatureControl", ulOptions=0x0, samDesired=0x1, phkResult=0x26f54c | out: phkResult=0x26f54c*=0x1f0) returned 0x0 [0165.401] RegOpenKeyExW (in: hKey=0x1f0, lpSubKey="FEATURE_MIME_TREAT_IMAGE_AS_AUTHORITATIVE", ulOptions=0x0, samDesired=0x1, phkResult=0x26f508 | out: phkResult=0x26f508*=0x0) returned 0x2 [0165.401] RegOpenKeyExW (in: hKey=0xb0, lpSubKey="FEATURE_MIME_TREAT_IMAGE_AS_AUTHORITATIVE", ulOptions=0x0, samDesired=0x1, phkResult=0x26f508 | out: phkResult=0x26f508*=0x0) returned 0x2 [0165.401] RegCloseKey (hKey=0x0) returned 0x6 [0165.401] RegCloseKey (hKey=0x0) returned 0x6 [0165.401] RegCloseKey (hKey=0xb0) returned 0x0 [0165.401] RegCloseKey (hKey=0x1f0) returned 0x0 [0165.401] FindMimeFromData (in: pBC=0x0, pwzUrl="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\READ_ME.hta", pBuffer=0x26f5e8, cbSize=0xc8, pwzMimeProposed="text/html", dwMimeFlags=0x6, ppwzMimeOut=0x26f5a0, dwReserved=0x0 | out: ppwzMimeOut=0x26f5a0*="text/html") returned 0x0 [0165.403] CoTaskMemFree (pv=0x493790) [0165.403] CoInternetIsFeatureEnabledForUrl (FeatureEntry=0x3, dwFlags=0x2, szURL="file:///C:/Users/5p5NrGJn0jS%20HALPmcxz/Desktop/READ_ME.hta", pSecMgr=0x0) returned 0x1 [0165.403] StrCmpNIW (lpStr1="text/h", lpStr2="image/", nChar=6) returned 1 [0165.403] GetCurrentThreadId () returned 0x220 [0165.403] SetEvent (hEvent=0x1dc) returned 1 [0165.403] IUnknown:Release (This=0x49c15c) returned 0x12 [0165.403] IUnknown:Release (This=0x49c66c) returned 0x1 [0165.403] IUnknown:Release (This=0x49e0d8) returned 0x3 [0165.403] HeapFree (in: hHeap=0x470000, dwFlags=0x0, lpMem=0x0 | out: hHeap=0x470000) returned 1 [0165.403] HeapFree (in: hHeap=0x470000, dwFlags=0x0, lpMem=0x0 | out: hHeap=0x470000) returned 1 [0165.403] HeapFree (in: hHeap=0x470000, dwFlags=0x0, lpMem=0x0 | out: hHeap=0x470000) returned 1 [0165.404] IUnknown:Release (This=0x49c15c) returned 0x11 [0165.404] IUnknown:Release (This=0x49c15c) returned 0x10 [0165.404] IUnknown:Release (This=0x49c15c) returned 0xf [0165.404] IUnknown:Release (This=0x49e0d8) returned 0x2 [0165.404] IUnknown:Release (This=0x49c15c) returned 0xe [0165.404] HeapFree (in: hHeap=0x470000, dwFlags=0x0, lpMem=0x0 | out: hHeap=0x470000) returned 1 [0165.404] HeapFree (in: hHeap=0x470000, dwFlags=0x0, lpMem=0x0 | out: hHeap=0x470000) returned 1 [0165.404] CoTaskMemFree (pv=0x481b70) [0165.404] CoTaskMemFree (pv=0x0) [0165.404] HeapFree (in: hHeap=0x470000, dwFlags=0x0, lpMem=0x0 | out: hHeap=0x470000) returned 1 [0165.404] IUnknown:Release (This=0x49c15c) returned 0xd [0165.404] CoTaskMemFree (pv=0x481af0) [0165.404] GetClientRect (in: hWnd=0x60114, lpRect=0x26fb94 | out: lpRect=0x26fb94) returned 1 [0165.404] RtlAllocateHeap (HeapHandle=0x470000, Flags=0x8, Size=0x78) returned 0x481af0 [0165.404] GetClientRect (in: hWnd=0x60114, lpRect=0x481b1c | out: lpRect=0x481b1c) returned 1 [0165.404] OffsetRect (in: lprc=0x481b1c, dx=0, dy=0 | out: lprc=0x481b1c) returned 1 [0165.404] OffsetRect (in: lprc=0x481b2c, dx=0, dy=0 | out: lprc=0x481b2c) returned 1 [0165.404] RegisterClassExW (param_1=0x26f6b0) returned 0xc197 [0165.404] CoCreateInstance (in: rclsid=0x6fb7bf70*(Data1=0x50d5107a, Data2=0xd278, Data3=0x4871, Data4=([0]=0x89, [1]=0x89, [2]=0xf4, [3]=0xce, [4]=0xaa, [5]=0xf5, [6]=0x9c, [7]=0xfc)), pUnkOuter=0x0, dwClsContext=0x401, riid=0x6fb7bf60*(Data1=0x8c0e040, Data2=0x62d1, Data3=0x11d1, Data4=([0]=0x93, [1]=0x26, [2]=0x0, [3]=0x60, [4]=0xb0, [5]=0x67, [6]=0xb8, [7]=0x6e)), ppv=0x6ff6b020 | out: ppv=0x6ff6b020*=0x4b1068) returned 0x0 [0165.525] CActiveIMMAppEx_Trident:IActiveIMMApp:FilterClientWindows (This=0x4b1068, aaClassList=0x26f7a8*=0xc197, uSize=0x1) returned 0x0 [0165.525] CreateWindowExW (dwExStyle=0x0, lpClassName=0xc197, lpWindowName=0x0, dwStyle=0x46000000, X=0, Y=0, nWidth=1064, nHeight=587, hWndParent=0x60114, hMenu=0x0, hInstance=0x6fa30000, lpParam=0x4a2278) returned 0x5011e [0165.525] GetWindowLongW (hWnd=0x5011e, nIndex=-20) returned 0 [0165.525] SetWindowLongW (hWnd=0x5011e, nIndex=-21, dwNewLong=4858488) returned 0 [0165.526] CActiveIMMAppEx_Trident:IActiveIMMApp:OnDefWindowProc (in: This=0x4b1068, hWnd=0x5011e, msg=0x81, wParam=0x0, lParam=0x26f37c*=4858488, plResult=0x26f1f4 | out: plResult=0x26f1f4) returned 0x1 [0165.526] NtdllDefWindowProc_W () returned 0x1 [0165.526] GetCurrentThreadId () returned 0x220 [0165.526] GetWindowLongW (hWnd=0x5011e, nIndex=-21) returned 4858488 [0165.526] GetCurrentThreadId () returned 0x220 [0165.527] GetWindowLongW (hWnd=0x5011e, nIndex=-21) returned 4858488 [0165.527] CActiveIMMAppEx_Trident:IActiveIMMApp:OnDefWindowProc (in: This=0x4b1068, hWnd=0x5011e, msg=0x1, wParam=0x0, lParam=0x26f37c*=4858488, plResult=0x26f1f4 | out: plResult=0x26f1f4) returned 0x1 [0165.527] NtdllDefWindowProc_W () returned 0x0 [0165.527] GetCurrentThreadId () returned 0x220 [0165.527] GetWindowLongW (hWnd=0x5011e, nIndex=-21) returned 4858488 [0165.532] CActiveIMMAppEx_Trident:IActiveIMMApp:OnDefWindowProc (in: This=0x4b1068, hWnd=0x5011e, msg=0x5, wParam=0x0, lParam=0x24b0428, plResult=0x26f240 | out: plResult=0x26f240) returned 0x1 [0165.532] NtdllDefWindowProc_W () returned 0x0 [0165.532] GetCurrentThreadId () returned 0x220 [0165.532] GetWindowLongW (hWnd=0x5011e, nIndex=-21) returned 4858488 [0165.532] CActiveIMMAppEx_Trident:IActiveIMMApp:OnDefWindowProc (in: This=0x4b1068, hWnd=0x5011e, msg=0x3, wParam=0x0, lParam=0x0, plResult=0x26f240 | out: plResult=0x26f240) returned 0x1 [0165.532] NtdllDefWindowProc_W () returned 0x0 [0165.532] GetCurrentThreadId () returned 0x220 [0165.532] NtdllDefWindowProc_W () returned 0x0 [0165.533] GetClassNameW (in: hWnd=0x60114, lpClassName=0x26f7b0, nMaxCount=256 | out: lpClassName="HTML Application Host Window Class") returned 34 [0165.533] StrCmpIW (psz1="HTML Application Host Window Class", psz2="HTMLPageDesignerWndClass") returned -1 [0165.533] CActiveIMMAppEx_Trident:IActiveIMMApp:Activate (This=0x4b1068, fRestoreLayout=1) returned 0x0 [0165.533] SendMessageW (hWnd=0x5011e, Msg=0x129, wParam=0x0, lParam=0x0) returned 0x3 [0165.534] GetWindowLongW (hWnd=0x5011e, nIndex=-21) returned 4858488 [0165.534] CActiveIMMAppEx_Trident:IActiveIMMApp:OnDefWindowProc (in: This=0x4b1068, hWnd=0x5011e, msg=0x129, wParam=0x0, lParam=0x0, plResult=0x26f664 | out: plResult=0x26f664) returned 0x1 [0165.534] NtdllDefWindowProc_W () returned 0x3 [0165.534] GetCurrentThreadId () returned 0x220 [0165.535] IntersectRect (in: lprcDst=0x26f9e4, lprcSrc1=0x481b1c, lprcSrc2=0x481b2c | out: lprcDst=0x26f9e4) returned 1 [0165.535] EqualRect (lprc1=0x26f9e4, lprc2=0x481b1c) returned 1 [0165.535] InvalidateRect (hWnd=0x5011e, lpRect=0x0, bErase=1) returned 1 [0165.535] RtlAllocateHeap (HeapHandle=0x470000, Flags=0x8, Size=0xf0) returned 0x4b4348 [0165.535] RtlAllocateHeap (HeapHandle=0x470000, Flags=0x8, Size=0x150) returned 0x4c1430 [0165.535] RtlAllocateHeap (HeapHandle=0x470000, Flags=0x0, Size=0x140) returned 0x4c1588 [0165.535] IntersectRect (in: lprcDst=0x26f8d0, lprcSrc1=0x26f8d0, lprcSrc2=0x26f868 | out: lprcDst=0x26f8d0) returned 1 [0165.535] IntersectRect (in: lprcDst=0x26f8d0, lprcSrc1=0x26f8d0, lprcSrc2=0x26f868 | out: lprcDst=0x26f8d0) returned 1 [0165.535] RtlAllocateHeap (HeapHandle=0x470000, Flags=0x0, Size=0x60) returned 0x4b4440 [0165.535] RtlAllocateHeap (HeapHandle=0x470000, Flags=0x0, Size=0x30) returned 0x48d938 [0165.535] RtlAllocateHeap (HeapHandle=0x470000, Flags=0x0, Size=0xec) returned 0x4c16d0 [0165.535] HeapFree (in: hHeap=0x470000, dwFlags=0x0, lpMem=0x0 | out: hHeap=0x470000) returned 1 [0165.535] HeapFree (in: hHeap=0x470000, dwFlags=0x0, lpMem=0x0 | out: hHeap=0x470000) returned 1 [0165.535] RtlAllocateHeap (HeapHandle=0x470000, Flags=0x8, Size=0x30) returned 0x48d970 [0165.535] RtlAllocateHeap (HeapHandle=0x470000, Flags=0x0, Size=0x10) returned 0x4b2750 [0165.535] GetCurrentThreadId () returned 0x220 [0165.535] GetCurrentThreadId () returned 0x220 [0165.535] GetCurrentThreadId () returned 0x220 [0165.535] IntersectRect (in: lprcDst=0x26f70c, lprcSrc1=0x26f70c, lprcSrc2=0x26f6dc | out: lprcDst=0x26f70c) returned 1 [0165.535] IntersectRect (in: lprcDst=0x4c15e8, lprcSrc1=0x4c15e8, lprcSrc2=0x26f6fc | out: lprcDst=0x4c15e8) returned 1 [0165.535] HeapFree (in: hHeap=0x470000, dwFlags=0x0, lpMem=0x0 | out: hHeap=0x470000) returned 1 [0165.536] RtlAllocateHeap (HeapHandle=0x470000, Flags=0x0, Size=0x28) returned 0x4b1820 [0165.536] HeapFree (in: hHeap=0x470000, dwFlags=0x0, lpMem=0x4b1820 | out: hHeap=0x470000) returned 1 [0165.536] SetWindowPos (hWnd=0x5011e, hWndInsertAfter=0x0, X=0, Y=0, cx=0, cy=0, uFlags=0x5f) returned 1 [0165.536] GetWindowLongW (hWnd=0x5011e, nIndex=-21) returned 4858488 [0165.536] CActiveIMMAppEx_Trident:IActiveIMMApp:OnDefWindowProc (in: This=0x4b1068, hWnd=0x5011e, msg=0x46, wParam=0x0, lParam=0x26f9c4*=327966, plResult=0x26f860 | out: plResult=0x26f860) returned 0x1 [0165.536] NtdllDefWindowProc_W () returned 0x0 [0165.536] GetCurrentThreadId () returned 0x220 [0165.536] GetWindowLongW (hWnd=0x5011e, nIndex=-21) returned 4858488 [0165.536] CActiveIMMAppEx_Trident:IActiveIMMApp:OnDefWindowProc (in: This=0x4b1068, hWnd=0x5011e, msg=0x47, wParam=0x0, lParam=0x26f9c4*=327966, plResult=0x26f85c | out: plResult=0x26f85c) returned 0x1 [0165.536] NtdllDefWindowProc_W () returned 0x0 [0165.536] GetCurrentThreadId () returned 0x220 [0165.536] SetTimer (hWnd=0x5011e, nIDEvent=0x1000, uElapse=0x64, lpTimerFunc=0x0) returned 0x1000 [0165.536] GetFocus () returned 0x0 [0165.536] EnumChildWindows (hWndParent=0x5011e, lpEnumFunc=0x6fd50a73, lParam=0x26f8bc) returned 0 [0165.539] GetFocus () returned 0x0 [0165.539] SetFocus (hWnd=0x5011e) returned 0x0 [0165.539] NtdllDefWindowProc_W () returned 0x0 [0165.539] NtdllDefWindowProc_W () returned 0x0 [0165.540] NtdllDefWindowProc_W () returned 0x0 [0165.540] NtdllDefWindowProc_W () returned 0x0 [0165.540] NtdllDefWindowProc_W () returned 0x0 [0165.540] NtdllDefWindowProc_W () returned 0x1 [0165.540] NtdllDefWindowProc_W () returned 0x0 [0165.541] NtdllDefWindowProc_W () returned 0x0 [0165.558] GetWindowLongW (hWnd=0x5011e, nIndex=-21) returned 4858488 [0165.558] LoadLibraryA (lpLibFileName="OLEACC.DLL") returned 0x75420000 [0165.873] GetProcAddress (hModule=0x75420000, lpProcName="LresultFromObject") returned 0x75422663 [0165.873] LresultFromObject () returned 0xc155 [0165.927] RtlAllocateHeap (HeapHandle=0x470000, Flags=0x8, Size=0x14) returned 0x4c0f08 [0165.927] RtlAllocateHeap (HeapHandle=0x470000, Flags=0x0, Size=0x28) returned 0x4b1910 [0166.079] GetCurrentThreadId () returned 0x220 [0166.082] HeapFree (in: hHeap=0x470000, dwFlags=0x0, lpMem=0x4c0f08 | out: hHeap=0x470000) returned 1 [0166.084] RtlAllocateHeap (HeapHandle=0x470000, Flags=0x8, Size=0x60) returned 0x4cd7f8 [0166.084] RtlAllocateHeap (HeapHandle=0x470000, Flags=0x0, Size=0x14) returned 0x4c0f08 [0166.084] RtlAllocateHeap (HeapHandle=0x470000, Flags=0x0, Size=0x40) returned 0x4c7f00 [0166.084] HeapFree (in: hHeap=0x470000, dwFlags=0x0, lpMem=0x4cd7f8 | out: hHeap=0x470000) returned 1 [0166.084] RtlAllocateHeap (HeapHandle=0x470000, Flags=0x8, Size=0x60) returned 0x4cd7f8 [0166.084] RtlAllocateHeap (HeapHandle=0x470000, Flags=0x0, Size=0x14) returned 0x4c0f28 [0166.085] RtlAllocateHeap (HeapHandle=0x470000, Flags=0x0, Size=0x40) returned 0x4c7f48 [0166.085] HeapFree (in: hHeap=0x470000, dwFlags=0x0, lpMem=0x4cd7f8 | out: hHeap=0x470000) returned 1 [0166.085] RtlAllocateHeap (HeapHandle=0x470000, Flags=0x0, Size=0x28) returned 0x4b19a0 [0166.085] RtlAllocateHeap (HeapHandle=0x470000, Flags=0x8, Size=0x48) returned 0x4c90b0 [0166.085] GetWindowLongW (hWnd=0x5011e, nIndex=-21) returned 4858488 [0166.086] GetMessageTime () returned 0 [0166.086] GetMessagePos () returned 0x0 [0166.086] CActiveIMMAppEx_Trident:IActiveIMMApp:OnDefWindowProc (in: This=0x4b1068, hWnd=0x5011e, msg=0x281, wParam=0x1, lParam=0xc000000f, plResult=0x26f284 | out: plResult=0x26f284) returned 0x0 [0166.088] GetWindowLongW (hWnd=0x5011e, nIndex=-21) returned 4858488 [0166.088] GetMessageTime () returned 0 [0166.088] GetMessagePos () returned 0x0 [0166.088] CActiveIMMAppEx_Trident:IActiveIMMApp:OnDefWindowProc (in: This=0x4b1068, hWnd=0x5011e, msg=0x282, wParam=0x2, lParam=0x0, plResult=0x26ecb4 | out: plResult=0x26ecb4) returned 0x0 [0166.088] GetCurrentThreadId () returned 0x220 [0166.088] GetCurrentThreadId () returned 0x220 [0166.088] GetWindowLongW (hWnd=0x5011e, nIndex=-21) returned 4858488 [0166.088] GetMessageTime () returned 0 [0166.088] GetMessagePos () returned 0x0 [0166.089] ScreenToClient (in: hWnd=0x5011e, lpPoint=0x26f438 | out: lpPoint=0x26f438) returned 1 [0166.089] ScreenToClient (in: hWnd=0x5011e, lpPoint=0x26f438 | out: lpPoint=0x26f438) returned 1 [0166.089] GetCapture () returned 0x0 [0166.090] RtlAllocateHeap (HeapHandle=0x470000, Flags=0x8, Size=0x30) returned 0x4c75b8 [0166.090] RtlAllocateHeap (HeapHandle=0x470000, Flags=0x0, Size=0x28) returned 0x4b19d0 [0166.090] RtlAllocateHeap (HeapHandle=0x470000, Flags=0x0, Size=0x10) returned 0x4c7318 [0166.090] HeapFree (in: hHeap=0x470000, dwFlags=0x0, lpMem=0x4c7318 | out: hHeap=0x470000) returned 1 [0166.090] GetCurrentThreadId () returned 0x220 [0166.091] HeapFree (in: hHeap=0x470000, dwFlags=0x0, lpMem=0x4c75b8 | out: hHeap=0x470000) returned 1 [0166.091] GetCurrentThreadId () returned 0x220 [0166.091] GetCurrentThreadId () returned 0x220 [0166.091] RtlReAllocateHeap (Heap=0x470000, Flags=0x0, Ptr=0x48d858, Size=0x48) returned 0x4c9100 [0166.091] CActiveIMMAppEx_Trident:IActiveIMMApp:OnDefWindowProc (in: This=0x4b1068, hWnd=0x5011e, msg=0x7, wParam=0x0, lParam=0x0, plResult=0x26f674 | out: plResult=0x26f674) returned 0x1 [0166.091] NtdllDefWindowProc_W () returned 0x0 [0166.091] GetCurrentThreadId () returned 0x220 [0166.091] CActiveIMMAppEx_Trident:IActiveIMMApp:getContext (in: This=0x4b1068, hWnd=0x5011e, phIMC=0x26f99c | out: phIMC=0x26f99c*=0x70107) returned 0x0 [0166.091] CActiveIMMAppEx_Trident:IActiveIMMApp:AssociateContext (in: This=0x4b1068, hWnd=0x5011e, hIME=0x0, phPrev=0x26f99c | out: phPrev=0x26f99c*=0x70107) returned 0x0 [0166.091] RtlAllocateHeap (HeapHandle=0x470000, Flags=0x8, Size=0x60) returned 0x4cd7f8 [0166.091] HeapFree (in: hHeap=0x470000, dwFlags=0x0, lpMem=0x4cd7f8 | out: hHeap=0x470000) returned 1 [0166.091] RtlAllocateHeap (HeapHandle=0x470000, Flags=0x8, Size=0x60) returned 0x4cd7f8 [0166.091] HeapFree (in: hHeap=0x470000, dwFlags=0x0, lpMem=0x4cd7f8 | out: hHeap=0x470000) returned 1 [0166.092] HeapFree (in: hHeap=0x470000, dwFlags=0x0, lpMem=0x4b19d0 | out: hHeap=0x470000) returned 1 [0166.092] HeapFree (in: hHeap=0x470000, dwFlags=0x0, lpMem=0x4b19a0 | out: hHeap=0x470000) returned 1 [0166.092] GetWindowLongW (hWnd=0x5011e, nIndex=-21) returned 4858488 [0166.092] GetMessageTime () returned 0 [0166.092] GetMessagePos () returned 0x0 [0166.092] CActiveIMMAppEx_Trident:IActiveIMMApp:OnDefWindowProc (in: This=0x4b1068, hWnd=0x5011e, msg=0x281, wParam=0x0, lParam=0xc000000f, plResult=0x26f684 | out: plResult=0x26f684) returned 0x0 [0166.092] GetCurrentThreadId () returned 0x220 [0166.092] GetWindowLongW (hWnd=0x5011e, nIndex=-21) returned 4858488 [0166.092] GetMessageTime () returned 0 [0166.092] GetMessagePos () returned 0x0 [0166.092] CActiveIMMAppEx_Trident:IActiveIMMApp:OnDefWindowProc (in: This=0x4b1068, hWnd=0x5011e, msg=0x281, wParam=0x1, lParam=0xc000000f, plResult=0x26f684 | out: plResult=0x26f684) returned 0x0 [0166.093] GetCurrentThreadId () returned 0x220 [0166.093] IsOS (dwOS=0x25) returned 1 [0166.093] RegOpenKeyExW (in: hKey=0x80000002, lpSubKey="Software\\Microsoft\\Internet Explorer\\Main\\FeatureControl", ulOptions=0x0, samDesired=0x1, phkResult=0x26f890 | out: phkResult=0x26f890*=0x230) returned 0x0 [0166.093] RegOpenKeyExW (in: hKey=0x80000001, lpSubKey="Software\\Microsoft\\Internet Explorer\\Main\\FeatureControl", ulOptions=0x0, samDesired=0x1, phkResult=0x26f894 | out: phkResult=0x26f894*=0x234) returned 0x0 [0166.093] RegOpenKeyExW (in: hKey=0x234, lpSubKey="FEATURE_MSHTML_AUTOLOAD_IEFRAME", ulOptions=0x0, samDesired=0x1, phkResult=0x26f850 | out: phkResult=0x26f850*=0x0) returned 0x2 [0166.093] RegOpenKeyExW (in: hKey=0x230, lpSubKey="FEATURE_MSHTML_AUTOLOAD_IEFRAME", ulOptions=0x0, samDesired=0x1, phkResult=0x26f850 | out: phkResult=0x26f850*=0x238) returned 0x0 [0166.093] SHRegGetValueW () returned 0x0 [0166.094] RegCloseKey (hKey=0x238) returned 0x0 [0166.094] RegCloseKey (hKey=0x0) returned 0x6 [0166.094] RegCloseKey (hKey=0x0) returned 0x6 [0166.094] RegCloseKey (hKey=0x230) returned 0x0 [0166.094] RegCloseKey (hKey=0x234) returned 0x0 [0166.094] LoadLibraryW (lpLibFileName="ieframe.dll") returned 0x74650000 [0167.059] GetVersionExW (in: lpVersionInformation=0x26f39c*(dwOSVersionInfoSize=0x11c, dwMajorVersion=0x0, dwMinorVersion=0x0, dwBuildNumber=0x0, dwPlatformId=0x0, szCSDVersion="") | out: lpVersionInformation=0x26f39c*(dwOSVersionInfoSize=0x11c, dwMajorVersion=0x6, dwMinorVersion=0x1, dwBuildNumber=0x1db1, dwPlatformId=0x2, szCSDVersion="Service Pack 1")) returned 1 [0167.059] LoadLibraryExW (lpLibFileName="ieframe.dll", hFile=0x0, dwFlags=0x22) returned 0x74650000 [0167.059] LoadStringW (in: hInstance=0x74650000, uID=0xb5, lpBuffer=0x26f918, cchBufferMax=46 | out: lpBuffer="HTML Document") returned 0xd [0167.061] LoadStringW (in: hInstance=0x74650000, uID=0xb5, lpBuffer=0x26f978, cchBufferMax=46 | out: lpBuffer="HTML Document") returned 0xd [0167.061] RtlAllocateHeap (HeapHandle=0x470000, Flags=0x0, Size=0x28) returned 0x4b19a0 [0167.061] LoadStringW (in: hInstance=0x74650000, uID=0xb5, lpBuffer=0x26f964, cchBufferMax=46 | out: lpBuffer="HTML Document") returned 0xd [0167.061] ShowWindow (hWnd=0x5011e, nCmdShow=1) returned 1 [0167.062] HeapFree (in: hHeap=0x470000, dwFlags=0x0, lpMem=0x49b418 | out: hHeap=0x470000) returned 1 [0167.062] GetMessageW (in: lpMsg=0x26fbd4, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x26fbd4) returned 1 [0167.062] TranslateMessage (lpMsg=0x26fbd4) returned 0 [0167.062] DispatchMessageW (lpMsg=0x26fbd4) returned 0x0 [0167.062] CreateUri (in: pwzURI="file:///C:/Users/5p5NrGJn0jS%20HALPmcxz/Desktop/READ_ME.hta", dwFlags=0x2b85, dwReserved=0x0, ppURI=0x26e34c | out: ppURI=0x26e34c*=0x49c4bc) returned 0x0 [0167.062] IUnknown:QueryInterface (in: This=0x49c4bc, riid=0x6fbed6e8*(Data1=0x50295b0c, Data2=0x6b79, Data3=0x4935, Data4=([0]=0xae, [1]=0xd8, [2]=0x5, [3]=0xd8, [4]=0xe, [5]=0xc8, [6]=0x6a, [7]=0x60)), ppvObject=0x26e324 | out: ppvObject=0x26e324*=0x49c4bc) returned 0x0 [0167.062] IUnknown:Release (This=0x49c4bc) returned 0x4 [0167.062] IUnknown:AddRef (This=0x49c4bc) returned 0x5 [0167.063] RtlAllocateHeap (HeapHandle=0x470000, Flags=0x0, Size=0x78) returned 0x482570 [0167.063] IUnknown:Release (This=0x49c4bc) returned 0x4 [0167.063] IUnknown:Release (This=0x49c4bc) returned 0x3 [0167.063] RtlAllocateHeap (HeapHandle=0x470000, Flags=0x0, Size=0x100) returned 0x4da8d8 [0167.063] FindResourceW (hModule=0x74650000, lpName=0x1fe, lpType=0x6) returned 0x2de84d0 [0167.063] LoadResource (hModule=0x74650000, hResInfo=0x2de84d0) returned 0x2e0e53c [0167.063] LockResource (hResData=0x2e0e53c) returned 0x2e0e53c [0167.063] VirtualQuery (in: lpAddress=0x2e0e53c, lpBuffer=0x26f4f4, dwLength=0x1c | out: lpBuffer=0x26f4f4*(BaseAddress=0x2e0e000, AllocationBase=0x2b30000, AllocationProtect=0x2, RegionSize=0x115000, State=0x1000, Protect=0x2, Type=0x40000)) returned 0x1c [0167.063] SizeofResource (hModule=0x74650000, hResInfo=0x2de84d0) returned 0xe6 [0167.063] HeapFree (in: hHeap=0x470000, dwFlags=0x0, lpMem=0x482570 | out: hHeap=0x470000) returned 1 [0167.063] RtlReAllocateHeap (Heap=0x470000, Flags=0x0, Ptr=0x4da8d8, Size=0x96) returned 0x4da8d8 [0167.063] RtlAllocateHeap (HeapHandle=0x470000, Flags=0x0, Size=0x9a) returned 0x4d6898 [0167.064] ParseURLW (in: pcszURL="file:///C:/Users/5p5NrGJn0jS%20HALPmcxz/Desktop/READ_ME.hta", ppu=0x26f6b0 | out: ppu=0x26f6b0) returned 0x0 [0167.064] HeapFree (in: hHeap=0x470000, dwFlags=0x0, lpMem=0x0 | out: hHeap=0x470000) returned 1 [0167.064] HeapFree (in: hHeap=0x470000, dwFlags=0x0, lpMem=0x0 | out: hHeap=0x470000) returned 1 [0167.064] HeapFree (in: hHeap=0x470000, dwFlags=0x0, lpMem=0x0 | out: hHeap=0x470000) returned 1 [0167.064] StrCmpNICW (lpStr1="", lpSrch="DTD HTML 4.0") returned 0x0 [0167.065] StrStrIW (lpFirst="", lpSrch="DTD XHTML") returned 0x0 [0167.065] StrStrIW (lpFirst="", lpSrch="DTD HTML 4") returned 0x0 [0167.065] StrStrIW (lpFirst="", lpSrch="DTD HTML 4.") returned 0x0 [0167.065] StrStrIW (lpFirst="", lpSrch=" HTML 2") returned 0x0 [0167.065] StrStrIW (lpFirst="", lpSrch=" HTML 3") returned 0x0 [0167.065] StrStrIW (lpFirst="", lpSrch=" HTML 4") returned 0x0 [0167.065] StrStrIW (lpFirst="", lpSrch="DTD HTML//") returned 0x0 [0167.065] StrStrIW (lpFirst="", lpSrch="DTD W3 HTML//") returned 0x0 [0167.065] StrStrIW (lpFirst="", lpSrch="DTD HTML EXP") returned 0x0 [0167.065] StrStrIW (lpFirst="", lpSrch=" HTML plus") returned 0x0 [0167.065] StrStrIW (lpFirst="", lpSrch="DOCTYPE NETSC") returned 0x0 [0167.065] StrCmpNICW (lpStr1="", nChar=10) returned -30 [0167.065] StrCmpNICW (lpStr1="", lpStr2="", lpStr2="", lpSrch="DTD XHTML 1.0") returned 0x0 [0167.065] StrStrIW (lpFirst="", lpSrch="DTD HTML 4.0") returned 0x0 [0167.066] HeapFree (in: hHeap=0x470000, dwFlags=0x0, lpMem=0x4b19d0 | out: hHeap=0x470000) returned 1 [0167.066] RtlAllocateHeap (HeapHandle=0x470000, Flags=0x8, Size=0x34) returned 0x4af960 [0167.067] RtlAllocateHeap (HeapHandle=0x470000, Flags=0x0, Size=0x24) returned 0x4b19d0 [0167.067] RtlAllocateHeap (HeapHandle=0x470000, Flags=0x8, Size=0x4c) returned 0x4aea60 [0167.067] RtlAllocateHeap (HeapHandle=0x470000, Flags=0x0, Size=0x10) returned 0x49b418 [0167.067] RtlAllocateHeap (HeapHandle=0x470000, Flags=0x8, Size=0x28) returned 0x4b1a00 [0167.067] RtlAllocateHeap (HeapHandle=0x470000, Flags=0x0, Size=0x14) returned 0x4c0f88 [0167.067] RtlAllocateHeap (HeapHandle=0x470000, Flags=0x0, Size=0x6) returned 0x4c4c50 [0167.067] RtlAllocateHeap (HeapHandle=0x470000, Flags=0x0, Size=0x40) returned 0x4c7fd8 [0167.067] RtlAllocateHeap (HeapHandle=0x470000, Flags=0x8, Size=0x4c) returned 0x4aeab8 [0167.067] SetTimer (hWnd=0x5011e, nIDEvent=0x1008, uElapse=0x64, lpTimerFunc=0x0) returned 0x1008 [0167.067] HeapFree (in: hHeap=0x470000, dwFlags=0x0, lpMem=0x0 | out: hHeap=0x470000) returned 1 [0167.067] RtlAllocateHeap (HeapHandle=0x470000, Flags=0x0, Size=0x50) returned 0x4aeb10 [0167.067] HeapFree (in: hHeap=0x470000, dwFlags=0x0, lpMem=0x4aeb10 | out: hHeap=0x470000) returned 1 [0167.067] HeapFree (in: hHeap=0x470000, dwFlags=0x0, lpMem=0x0 | out: hHeap=0x470000) returned 1 [0167.067] IUnknown:AddRef (This=0x49c4bc) returned 0x4 [0167.067] IInternetSecurityManager:MapUrlToZone (in: This=0x6ff696bc, pwszUrl="file:///C:/Users/5p5NrGJn0jS%20HALPmcxz/Desktop/READ_ME.hta", pdwZone=0x26f5ec, dwFlags=0x0 | out: pdwZone=0x26f5ec*=0xffffffff) returned 0x800c0011 [0167.067] CoInternetIsFeatureEnabled (FeatureEntry=0x8, dwFlags=0x2) returned 0x1 [0167.067] CoInternetIsFeatureEnabled (FeatureEntry=0x8, dwFlags=0x2) returned 0x1 [0167.068] CoInternetIsFeatureEnabled (FeatureEntry=0xe, dwFlags=0x2) returned 0x1 [0167.068] IInternetSecurityManager:ProcessUrlAction (in: This=0x6ff696bc, pwszUrl="file:///C:/Users/5p5NrGJn0jS%20HALPmcxz/Desktop/READ_ME.hta", dwAction=0x2106, pPolicy=0x26f5f0, cbPolicy=0x4, pContext=0x0, cbContext=0x0, dwFlags=0x41, dwReserved=0x0 | out: pPolicy=0x26f5f0*=0x0) returned 0x0 [0167.068] CoInternetIsFeatureEnabled (FeatureEntry=0x8, dwFlags=0x2) returned 0x1 [0167.068] IUnknown:Release (This=0x49c4bc) returned 0x3 [0167.068] RtlAllocateHeap (HeapHandle=0x470000, Flags=0x0, Size=0x50) returned 0x4aeb10 [0167.068] HeapFree (in: hHeap=0x470000, dwFlags=0x0, lpMem=0x4aeb10 | out: hHeap=0x470000) returned 1 [0167.068] HeapFree (in: hHeap=0x470000, dwFlags=0x0, lpMem=0x0 | out: hHeap=0x470000) returned 1 [0167.068] HeapFree (in: hHeap=0x470000, dwFlags=0x0, lpMem=0x49b418 | out: hHeap=0x470000) returned 1 [0167.068] RtlAllocateHeap (HeapHandle=0x470000, Flags=0x8, Size=0x28) returned 0x4b1a30 [0167.068] RtlAllocateHeap (HeapHandle=0x470000, Flags=0x8, Size=0x4c) returned 0x4aeb10 [0167.068] RtlAllocateHeap (HeapHandle=0x470000, Flags=0x0, Size=0x10) returned 0x49b418 [0167.068] RtlAllocateHeap (HeapHandle=0x470000, Flags=0x8, Size=0x68) returned 0x4da978 [0167.068] RtlAllocateHeap (HeapHandle=0x470000, Flags=0x8, Size=0x30) returned 0x48d858 [0167.068] RtlAllocateHeap (HeapHandle=0x470000, Flags=0x8, Size=0x4c) returned 0x4aeb68 [0167.068] RtlAllocateHeap (HeapHandle=0x470000, Flags=0x8, Size=0x28) returned 0x4b1a60 [0167.068] RtlAllocateHeap (HeapHandle=0x470000, Flags=0x0, Size=0x14) returned 0x4c0fa8 [0167.068] RtlAllocateHeap (HeapHandle=0x470000, Flags=0x0, Size=0xc) returned 0x4d99a0 [0167.068] RtlAllocateHeap (HeapHandle=0x470000, Flags=0x0, Size=0x40) returned 0x4c8020 [0167.068] RtlAllocateHeap (HeapHandle=0x470000, Flags=0x8, Size=0x4c) returned 0x4aebc0 [0167.070] RtlReAllocateHeap (Heap=0x470000, Flags=0x0, Ptr=0x4c9100, Size=0x6c) returned 0x4da9e8 [0167.070] RedrawWindow (hWnd=0x5011e, lprcUpdate=0x0, hrgnUpdate=0x0, flags=0xa1) returned 1 [0167.071] HeapFree (in: hHeap=0x470000, dwFlags=0x0, lpMem=0x4da978 | out: hHeap=0x470000) returned 1 [0167.072] GetSystemDefaultLCID () returned 0x409 [0167.072] GetVersionExW (in: lpVersionInformation=0x26f628*(dwOSVersionInfoSize=0x114, dwMajorVersion=0x470000, dwMinorVersion=0x477638, dwBuildNumber=0x470000, dwPlatformId=0x4000, szCSDVersion="ꥰM&㢞矇ĸG㡺矇궖矱") | out: lpVersionInformation=0x26f628*(dwOSVersionInfoSize=0x114, dwMajorVersion=0x6, dwMinorVersion=0x1, dwBuildNumber=0x1db1, dwPlatformId=0x2, szCSDVersion="Service Pack 1")) returned 1 [0167.072] GetKeyboardLayoutList (in: nBuff=32, lpList=0x26f5a8 | out: lpList=0x26f5a8) returned 1 [0167.072] GetSystemMetrics (nIndex=4096) returned 0 [0167.072] RegisterClipboardFormatA (lpszFormat="HTML Format") returned 0xc0cd [0167.072] RegisterClipboardFormatA (lpszFormat="Rich Text Format") returned 0xc0b1 [0167.072] RegisterClipboardFormatA (lpszFormat="RTF As Text") returned 0xc0b4 [0167.072] RegisterClipboardFormatW (lpszFormat="FileGroupDescriptor") returned 0xc0c8 [0167.072] RegisterClipboardFormatW (lpszFormat="FileGroupDescriptorW") returned 0xc0c9 [0167.072] RegisterClipboardFormatW (lpszFormat="FileContents") returned 0xc0c7 [0167.072] RegisterClipboardFormatW (lpszFormat="Shell IDList Array") returned 0xc07a [0167.072] RegisterClipboardFormatW (lpszFormat="UniformResourceLocator") returned 0xc0d1 [0167.072] RtlAllocateHeap (HeapHandle=0x470000, Flags=0x8, Size=0x2c) returned 0x4c75b8 [0167.072] RtlAllocateHeap (HeapHandle=0x470000, Flags=0x8, Size=0x4c) returned 0x4aec18 [0167.072] RtlAllocateHeap (HeapHandle=0x470000, Flags=0x8, Size=0x64) returned 0x4da978 [0167.072] HeapFree (in: hHeap=0x470000, dwFlags=0x0, lpMem=0x4da978 | out: hHeap=0x470000) returned 1 [0167.073] HeapFree (in: hHeap=0x470000, dwFlags=0x0, lpMem=0x0 | out: hHeap=0x470000) returned 1 [0167.073] RtlAllocateHeap (HeapHandle=0x470000, Flags=0x0, Size=0x10) returned 0x4d99b8 [0167.073] HeapFree (in: hHeap=0x470000, dwFlags=0x0, lpMem=0x48d890 | out: hHeap=0x470000) returned 1 [0167.073] HeapFree (in: hHeap=0x470000, dwFlags=0x0, lpMem=0x4b25d0 | out: hHeap=0x470000) returned 1 [0167.073] RtlAllocateHeap (HeapHandle=0x470000, Flags=0x0, Size=0x50) returned 0x4aec70 [0167.073] HeapFree (in: hHeap=0x470000, dwFlags=0x0, lpMem=0x4aec70 | out: hHeap=0x470000) returned 1 [0167.073] HeapFree (in: hHeap=0x470000, dwFlags=0x0, lpMem=0x0 | out: hHeap=0x470000) returned 1 [0167.073] RtlAllocateHeap (HeapHandle=0x470000, Flags=0x0, Size=0x50) returned 0x4aec70 [0167.073] HeapFree (in: hHeap=0x470000, dwFlags=0x0, lpMem=0x4aec70 | out: hHeap=0x470000) returned 1 [0167.073] HeapFree (in: hHeap=0x470000, dwFlags=0x0, lpMem=0x0 | out: hHeap=0x470000) returned 1 [0167.073] RtlAllocateHeap (HeapHandle=0x470000, Flags=0x0, Size=0x50) returned 0x4aec70 [0167.073] HeapFree (in: hHeap=0x470000, dwFlags=0x0, lpMem=0x4aec70 | out: hHeap=0x470000) returned 1 [0167.073] HeapFree (in: hHeap=0x470000, dwFlags=0x0, lpMem=0x0 | out: hHeap=0x470000) returned 1 [0167.073] RtlAllocateHeap (HeapHandle=0x470000, Flags=0x0, Size=0x50) returned 0x4aec70 [0167.073] HeapFree (in: hHeap=0x470000, dwFlags=0x0, lpMem=0x4aec70 | out: hHeap=0x470000) returned 1 [0167.073] HeapFree (in: hHeap=0x470000, dwFlags=0x0, lpMem=0x0 | out: hHeap=0x470000) returned 1 [0167.073] RtlAllocateHeap (HeapHandle=0x470000, Flags=0x8, Size=0x4c) returned 0x4aec70 [0167.073] RtlAllocateHeap (HeapHandle=0x470000, Flags=0x8, Size=0x100) returned 0x4daa60 [0167.075] RtlAllocateHeap (HeapHandle=0x470000, Flags=0x0, Size=0xc) returned 0x4b25d0 [0167.075] CoInitialize (pvReserved=0x0) returned 0x1 [0167.075] CoCreateInstance (in: rclsid=0x6fb80e58*(Data1=0x275c23e2, Data2=0x3747, Data3=0x11d0, Data4=([0]=0x9f, [1]=0xea, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0x3f, [6]=0x86, [7]=0x46)), pUnkOuter=0x0, dwClsContext=0x1, riid=0x6fb80e48*(Data1=0xdccfc164, Data2=0x2b38, Data3=0x11d2, Data4=([0]=0xb7, [1]=0xec, [2]=0x0, [3]=0xc0, [4]=0x4f, [5]=0x8f, [6]=0x5d, [7]=0x9a)), ppv=0x6ff69500 | out: ppv=0x6ff69500*=0x4afa20) returned 0x0 [0167.204] IUnknown:QueryInterface (in: This=0x4afa20, riid=0x6fb81170*(Data1=0x359f3441, Data2=0xbd4a, Data3=0x11d0, Data4=([0]=0xb1, [1]=0x88, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0x38, [6]=0xc9, [7]=0x69)), ppvObject=0x6ff69504 | out: ppvObject=0x6ff69504*=0x4c9100) returned 0x0 [0167.204] IUnknown:QueryInterface (in: This=0x4afa20, riid=0x6fb81180*(Data1=0xdccfc162, Data2=0x2b38, Data3=0x11d2, Data4=([0]=0xb7, [1]=0xec, [2]=0x0, [3]=0xc0, [4]=0x4f, [5]=0x8f, [6]=0x5d, [7]=0x9a)), ppvObject=0x6ff69508 | out: ppvObject=0x6ff69508*=0x4c7628) returned 0x0 [0167.205] CoUninitialize () [0167.206] RtlAllocateHeap (HeapHandle=0x470000, Flags=0x0, Size=0x30) returned 0x4c7660 [0167.206] RtlAllocateHeap (HeapHandle=0x470000, Flags=0x0, Size=0x64) returned 0x4da978 [0167.206] RtlAllocateHeap (HeapHandle=0x470000, Flags=0x0, Size=0xec) returned 0x4dac68 [0167.207] RtlAllocateHeap (HeapHandle=0x470000, Flags=0x0, Size=0x64) returned 0x4dad60 [0167.207] RtlAllocateHeap (HeapHandle=0x470000, Flags=0x0, Size=0xec) returned 0x4dadd0 [0167.207] HeapFree (in: hHeap=0x470000, dwFlags=0x0, lpMem=0x0 | out: hHeap=0x470000) returned 1 [0167.207] HeapFree (in: hHeap=0x470000, dwFlags=0x0, lpMem=0x0 | out: hHeap=0x470000) returned 1 [0167.208] HeapFree (in: hHeap=0x470000, dwFlags=0x0, lpMem=0x0 | out: hHeap=0x470000) returned 1 [0167.209] HeapFree (in: hHeap=0x470000, dwFlags=0x0, lpMem=0x49b418 | out: hHeap=0x470000) returned 1 [0167.209] RtlReAllocateHeap (Heap=0x470000, Flags=0x0, Ptr=0x4a94b8, Size=0x1c) returned 0x4a94b8 [0167.209] HeapFree (in: hHeap=0x470000, dwFlags=0x0, lpMem=0x0 | out: hHeap=0x470000) returned 1 [0167.209] HeapFree (in: hHeap=0x470000, dwFlags=0x0, lpMem=0x49cb70 | out: hHeap=0x470000) returned 1 [0167.209] HeapFree (in: hHeap=0x470000, dwFlags=0x0, lpMem=0x4d99b8 | out: hHeap=0x470000) returned 1 [0167.209] CreateStreamOnHGlobal (in: hGlobal=0x0, fDeleteOnRelease=1, ppstm=0x26f920 | out: ppstm=0x26f920*=0x4da348) returned 0x0 [0167.210] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\READ_ME.hta" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\read_me.hta"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x250 [0167.210] RtlAllocateHeap (HeapHandle=0x470000, Flags=0x0, Size=0x10) returned 0x4d99b8 [0167.210] SetFilePointer (in: hFile=0x250, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0167.211] ReadFile (in: hFile=0x250, lpBuffer=0x26e8d8, nNumberOfBytesToRead=0xe34, lpNumberOfBytesRead=0x26e8d0, lpOverlapped=0x0 | out: lpBuffer=0x26e8d8*, lpNumberOfBytesRead=0x26e8d0*=0xe34, lpOverlapped=0x0) returned 1 [0167.211] ISequentialStream:RemoteWrite (in: This=0x4da348, pv=0x26e8d8*=0x3c, cb=0xe34, pcbWritten=0x0 | out: pcbWritten=0x0) returned 0x0 [0167.211] CloseHandle (hObject=0x250) returned 1 [0167.211] HeapFree (in: hHeap=0x470000, dwFlags=0x0, lpMem=0x4d99b8 | out: hHeap=0x470000) returned 1 [0167.211] IStream:RemoteSeek (in: This=0x4da348, dlibMove=0x0, dwOrigin=0x0, plibNewPosition=0x0 | out: plibNewPosition=0x0) returned 0x0 [0167.211] CreateStreamOnHGlobal (in: hGlobal=0x0, fDeleteOnRelease=1, ppstm=0x26f8e0 | out: ppstm=0x26f8e0*=0x4da3c0) returned 0x0 [0167.211] IUnknown:AddRef (This=0x4da3c0) returned 0x2 [0167.211] IUnknown:AddRef (This=0x49e0d8) returned 0x3 [0167.211] IsAsyncMoniker (pmk=0x49e0d8) returned 0x0 [0167.211] ISequentialStream:RemoteWrite (in: This=0x4da3c0, pv=0x26f860*=0x4, cb=0x4, pcbWritten=0x26f7c0 | out: pcbWritten=0x26f7c0*=0x4) returned 0x0 [0167.211] ISequentialStream:RemoteWrite (in: This=0x4da3c0, pv=0x26f7b4*=0x90, cb=0x4, pcbWritten=0x26f7a0 | out: pcbWritten=0x26f7a0*=0x4) returned 0x0 [0167.211] ISequentialStream:RemoteWrite (in: This=0x4da3c0, pv=0x26f7b4*=0x3b, cb=0x4, pcbWritten=0x26f7a0 | out: pcbWritten=0x26f7a0*=0x4) returned 0x0 [0167.211] ISequentialStream:RemoteWrite (in: This=0x4da3c0, pv=0x4b075c*=0x66, cb=0x76, pcbWritten=0x26f7b0 | out: pcbWritten=0x26f7b0*=0x76) returned 0x0 [0167.211] ISequentialStream:RemoteWrite (in: This=0x4da3c0, pv=0x26f880*=0xc, cb=0x4, pcbWritten=0x26f7c0 | out: pcbWritten=0x26f7c0*=0x4) returned 0x0 [0167.211] ISequentialStream:RemoteWrite (in: This=0x4da3c0, pv=0x26f7b4*=0x90, cb=0x4, pcbWritten=0x26f7a0 | out: pcbWritten=0x26f7a0*=0x4) returned 0x0 [0167.211] ISequentialStream:RemoteWrite (in: This=0x4da3c0, pv=0x26f7b4*=0x3b, cb=0x4, pcbWritten=0x26f7a0 | out: pcbWritten=0x26f7a0*=0x4) returned 0x0 [0167.211] ISequentialStream:RemoteWrite (in: This=0x4da3c0, pv=0x4b0a4c*=0x66, cb=0x76, pcbWritten=0x26f7b0 | out: pcbWritten=0x26f7b0*=0x76) returned 0x0 [0167.211] ISequentialStream:RemoteWrite (in: This=0x4da3c0, pv=0x26f880*=0xd, cb=0x4, pcbWritten=0x26f7c0 | out: pcbWritten=0x26f7c0*=0x4) returned 0x0 [0167.212] ISequentialStream:RemoteWrite (in: This=0x4da3c0, pv=0x26f848*=0xe0, cb=0x8, pcbWritten=0x26f7c0 | out: pcbWritten=0x26f7c0*=0x8) returned 0x0 [0167.212] ISequentialStream:RemoteWrite (in: This=0x4da3c0, pv=0x26f880*=0xe, cb=0x4, pcbWritten=0x26f7c0 | out: pcbWritten=0x26f7c0*=0x4) returned 0x0 [0167.212] ISequentialStream:RemoteWrite (in: This=0x4da3c0, pv=0x26f854*=0xe4, cb=0x4, pcbWritten=0x26f7c0 | out: pcbWritten=0x26f7c0*=0x4) returned 0x0 [0167.212] ISequentialStream:RemoteWrite (in: This=0x4da3c0, pv=0x26f880*=0xf, cb=0x4, pcbWritten=0x26f7c0 | out: pcbWritten=0x26f7c0*=0x4) returned 0x0 [0167.212] ISequentialStream:RemoteWrite (in: This=0x4da3c0, pv=0x26f854*=0xe4, cb=0x4, pcbWritten=0x26f7c0 | out: pcbWritten=0x26f7c0*=0x4) returned 0x0 [0167.212] ISequentialStream:RemoteWrite (in: This=0x4da3c0, pv=0x26f84c*=0x14, cb=0x4, pcbWritten=0x26f7c0 | out: pcbWritten=0x26f7c0*=0x4) returned 0x0 [0167.212] ISequentialStream:RemoteWrite (in: This=0x4da3c0, pv=0x26f858*=0x0, cb=0x4, pcbWritten=0x26f7c0 | out: pcbWritten=0x26f7c0*=0x4) returned 0x0 [0167.212] ISequentialStream:RemoteWrite (in: This=0x4da3c0, pv=0x26f858*=0x15, cb=0x4, pcbWritten=0x26f7c0 | out: pcbWritten=0x26f7c0*=0x4) returned 0x0 [0167.212] ISequentialStream:RemoteWrite (in: This=0x4da3c0, pv=0x26f838*=0x0, cb=0x2, pcbWritten=0x26f7c0 | out: pcbWritten=0x26f7c0*=0x2) returned 0x0 [0167.212] ISequentialStream:RemoteWrite (in: This=0x4da3c0, pv=0x26f858*=0x17, cb=0x4, pcbWritten=0x26f7c0 | out: pcbWritten=0x26f7c0*=0x4) returned 0x0 [0167.212] ISequentialStream:RemoteWrite (in: This=0x4da3c0, pv=0x26f858*=0xff, cb=0x4, pcbWritten=0x26f7c0 | out: pcbWritten=0x26f7c0*=0x4) returned 0x0 [0167.212] ISequentialStream:RemoteWrite (in: This=0x4da3c0, pv=0x26f858*=0x0, cb=0x4, pcbWritten=0x26f7c0 | out: pcbWritten=0x26f7c0*=0x4) returned 0x0 [0167.212] IUnknown:Release (This=0x4da3c0) returned 0x1 [0167.212] HeapFree (in: hHeap=0x470000, dwFlags=0x0, lpMem=0x0 | out: hHeap=0x470000) returned 1 [0167.212] IUnknown:Release (This=0x49e0d8) returned 0x2 [0167.212] HeapFree (in: hHeap=0x470000, dwFlags=0x0, lpMem=0x0 | out: hHeap=0x470000) returned 1 [0167.212] IStream:RemoteSeek (in: This=0x4da3c0, dlibMove=0x0, dwOrigin=0x0, plibNewPosition=0x0 | out: plibNewPosition=0x0) returned 0x0 [0167.212] GetFocus () returned 0x5011e [0167.212] ScreenToClient (in: hWnd=0x5011e, lpPoint=0x26f7e8 | out: lpPoint=0x26f7e8) returned 1 [0167.212] GetClientRect (in: hWnd=0x5011e, lpRect=0x26f7d8 | out: lpRect=0x26f7d8) returned 1 [0167.212] PostMessageW (hWnd=0x5011e, Msg=0x20, wParam=0x11e, lParam=0x1) returned 1 [0167.212] GetCurrentProcessId () returned 0x24c [0167.213] HeapFree (in: hHeap=0x470000, dwFlags=0x0, lpMem=0x4c1a50 | out: hHeap=0x470000) returned 1 [0167.213] HeapFree (in: hHeap=0x470000, dwFlags=0x0, lpMem=0x4b7810 | out: hHeap=0x470000) returned 1 [0167.213] HeapFree (in: hHeap=0x470000, dwFlags=0x0, lpMem=0x4b3f30 | out: hHeap=0x470000) returned 1 [0167.213] IUnknown:Release (This=0x49c15c) returned 0xe [0167.213] IUnknown:Release (This=0x4a45b0) returned 0x3 [0167.213] IUnknown:Release (This=0x49c15c) returned 0xd [0167.213] HeapFree (in: hHeap=0x470000, dwFlags=0x0, lpMem=0x0 | out: hHeap=0x470000) returned 1 [0167.213] HeapFree (in: hHeap=0x470000, dwFlags=0x0, lpMem=0x0 | out: hHeap=0x470000) returned 1 [0167.213] HeapFree (in: hHeap=0x470000, dwFlags=0x0, lpMem=0x4bf820 | out: hHeap=0x470000) returned 1 [0167.213] HeapFree (in: hHeap=0x470000, dwFlags=0x0, lpMem=0x4b7660 | out: hHeap=0x470000) returned 1 [0167.213] IUnknown:Release (This=0x49c15c) returned 0xc [0167.213] IUnknown:Release (This=0x4a45b0) returned 0x2 [0167.213] IUnknown:Release (This=0x49c15c) returned 0xb [0167.213] HeapFree (in: hHeap=0x470000, dwFlags=0x0, lpMem=0x0 | out: hHeap=0x470000) returned 1 [0167.213] HeapFree (in: hHeap=0x470000, dwFlags=0x0, lpMem=0x0 | out: hHeap=0x470000) returned 1 [0167.213] HeapFree (in: hHeap=0x470000, dwFlags=0x0, lpMem=0x4b48c8 | out: hHeap=0x470000) returned 1 [0167.213] HeapFree (in: hHeap=0x470000, dwFlags=0x0, lpMem=0x4b2d48 | out: hHeap=0x470000) returned 1 [0167.213] HeapFree (in: hHeap=0x470000, dwFlags=0x0, lpMem=0x0 | out: hHeap=0x470000) returned 1 [0167.213] HeapFree (in: hHeap=0x470000, dwFlags=0x0, lpMem=0x0 | out: hHeap=0x470000) returned 1 [0167.214] HeapFree (in: hHeap=0x470000, dwFlags=0x0, lpMem=0x0 | out: hHeap=0x470000) returned 1 [0167.214] RtlAllocateHeap (HeapHandle=0x470000, Flags=0x8, Size=0x28) returned 0x4b1b20 [0167.214] RtlAllocateHeap (HeapHandle=0x470000, Flags=0x8, Size=0x18) returned 0x4c0fc8 [0167.214] RtlAllocateHeap (HeapHandle=0x470000, Flags=0x8, Size=0xd0) returned 0x49cb70 [0167.214] RtlAllocateHeap (HeapHandle=0x470000, Flags=0x8, Size=0x4c) returned 0x4aecc8 [0167.214] RtlAllocateHeap (HeapHandle=0x470000, Flags=0x0, Size=0x10) returned 0x4d99b8 [0167.214] RtlAllocateHeap (HeapHandle=0x470000, Flags=0x8, Size=0x2000) returned 0x4b7660 [0167.214] RtlAllocateHeap (HeapHandle=0x470000, Flags=0x0, Size=0x50) returned 0x4aed20 [0167.214] HeapFree (in: hHeap=0x470000, dwFlags=0x0, lpMem=0x4aed20 | out: hHeap=0x470000) returned 1 [0167.214] HeapFree (in: hHeap=0x470000, dwFlags=0x0, lpMem=0x0 | out: hHeap=0x470000) returned 1 [0167.214] CreateUri (in: pwzURI="about:blank", dwFlags=0x2b80, dwReserved=0x0, ppURI=0x26f618 | out: ppURI=0x26f618*=0x49bdfc) returned 0x0 [0167.214] IInternetSecurityManager:MapUrlToZone (in: This=0x6ff696bc, pwszUrl="about:blank", pdwZone=0x26f61c, dwFlags=0x0 | out: pdwZone=0x26f61c*=0xffffffff) returned 0x800c0011 [0167.214] CoInternetIsFeatureEnabled (FeatureEntry=0x8, dwFlags=0x2) returned 0x1 [0167.214] CoInternetIsFeatureEnabled (FeatureEntry=0x8, dwFlags=0x2) returned 0x1 [0167.214] CoInternetIsFeatureEnabled (FeatureEntry=0xe, dwFlags=0x2) returned 0x1 [0167.214] IInternetSecurityManager:ProcessUrlAction (in: This=0x6ff696bc, pwszUrl="about:blank", dwAction=0x2106, pPolicy=0x26f620, cbPolicy=0x4, pContext=0x0, cbContext=0x0, dwFlags=0x41, dwReserved=0x0 | out: pPolicy=0x26f620*=0x0) returned 0x0 [0167.215] IUnknown:Release (This=0x49bdfc) returned 0x2 [0167.215] RtlAllocateHeap (HeapHandle=0x470000, Flags=0x0, Size=0x2c) returned 0x4c7698 [0167.215] IStream:Clone (in: This=0x4da3c0, ppstm=0x26f850 | out: ppstm=0x26f850*=0x4da438) returned 0x0 [0167.216] IUnknown:AddRef (This=0x4da3c0) returned 0x2 [0167.216] ISequentialStream:RemoteRead (in: This=0x4da3c0, pv=0x26f714, cb=0x4, pcbRead=0x26f6f0 | out: pv=0x26f714*=0x4, pcbRead=0x26f6f0*=0x4) returned 0x0 [0167.216] ISequentialStream:RemoteRead (in: This=0x4da3c0, pv=0x26f6e0, cb=0x4, pcbRead=0x26f6d0 | out: pv=0x26f6e0*=0x90, pcbRead=0x26f6d0*=0x4) returned 0x0 [0167.216] ISequentialStream:RemoteRead (in: This=0x4da3c0, pv=0x26f6e4, cb=0x4, pcbRead=0x26f6d0 | out: pv=0x26f6e4*=0x3b, pcbRead=0x26f6d0*=0x4) returned 0x0 [0167.216] RtlAllocateHeap (HeapHandle=0x470000, Flags=0x0, Size=0x78) returned 0x4825f0 [0167.216] ISequentialStream:RemoteRead (in: This=0x4da3c0, pv=0x4825f0, cb=0x76, pcbRead=0x26f6d0 | out: pv=0x4825f0*=0x66, pcbRead=0x26f6d0*=0x76) returned 0x0 [0167.216] ISequentialStream:RemoteRead (in: This=0x4da3c0, pv=0x26f714, cb=0x4, pcbRead=0x26f6f0 | out: pv=0x26f714*=0xc, pcbRead=0x26f6f0*=0x4) returned 0x0 [0167.216] ISequentialStream:RemoteRead (in: This=0x4da3c0, pv=0x26f6e0, cb=0x4, pcbRead=0x26f6d0 | out: pv=0x26f6e0*=0x90, pcbRead=0x26f6d0*=0x4) returned 0x0 [0167.216] ISequentialStream:RemoteRead (in: This=0x4da3c0, pv=0x26f6e4, cb=0x4, pcbRead=0x26f6d0 | out: pv=0x26f6e4*=0x3b, pcbRead=0x26f6d0*=0x4) returned 0x0 [0167.216] RtlAllocateHeap (HeapHandle=0x470000, Flags=0x0, Size=0x78) returned 0x482670 [0167.216] ISequentialStream:RemoteRead (in: This=0x4da3c0, pv=0x482670, cb=0x76, pcbRead=0x26f6d0 | out: pv=0x482670*=0x66, pcbRead=0x26f6d0*=0x76) returned 0x0 [0167.216] ISequentialStream:RemoteRead (in: This=0x4da3c0, pv=0x26f714, cb=0x4, pcbRead=0x26f6f0 | out: pv=0x26f714*=0xd, pcbRead=0x26f6f0*=0x4) returned 0x0 [0167.216] ISequentialStream:RemoteRead (in: This=0x4da3c0, pv=0x26f828, cb=0x8, pcbRead=0x26f6f0 | out: pv=0x26f828*=0xe0, pcbRead=0x26f6f0*=0x8) returned 0x0 [0167.216] ISequentialStream:RemoteRead (in: This=0x4da3c0, pv=0x26f714, cb=0x4, pcbRead=0x26f6f0 | out: pv=0x26f714*=0xe, pcbRead=0x26f6f0*=0x4) returned 0x0 [0167.216] ISequentialStream:RemoteRead (in: This=0x4da3c0, pv=0x26f728, cb=0x4, pcbRead=0x26f6f0 | out: pv=0x26f728*=0xe4, pcbRead=0x26f6f0*=0x4) returned 0x0 [0167.216] ISequentialStream:RemoteRead (in: This=0x4da3c0, pv=0x26f714, cb=0x4, pcbRead=0x26f6f0 | out: pv=0x26f714*=0xf, pcbRead=0x26f6f0*=0x4) returned 0x0 [0167.216] ISequentialStream:RemoteRead (in: This=0x4da3c0, pv=0x26f728, cb=0x4, pcbRead=0x26f6f0 | out: pv=0x26f728*=0xe4, pcbRead=0x26f6f0*=0x4) returned 0x0 [0167.216] ISequentialStream:RemoteRead (in: This=0x4da3c0, pv=0x26f714, cb=0x4, pcbRead=0x26f6f0 | out: pv=0x26f714*=0x14, pcbRead=0x26f6f0*=0x4) returned 0x0 [0167.216] ISequentialStream:RemoteRead (in: This=0x4da3c0, pv=0x26f758, cb=0x4, pcbRead=0x26f6f0 | out: pv=0x26f758*=0x0, pcbRead=0x26f6f0*=0x4) returned 0x0 [0167.216] RtlAllocateHeap (HeapHandle=0x470000, Flags=0x0, Size=0x14) returned 0x4c0fe8 [0167.216] RtlAllocateHeap (HeapHandle=0x470000, Flags=0x0, Size=0x40) returned 0x4c8140 [0167.217] ISequentialStream:RemoteRead (in: This=0x4da3c0, pv=0x26f714, cb=0x4, pcbRead=0x26f6f0 | out: pv=0x26f714*=0x15, pcbRead=0x26f6f0*=0x4) returned 0x0 [0167.217] ISequentialStream:RemoteRead (in: This=0x4da3c0, pv=0x26f864, cb=0x2, pcbRead=0x26f6f0 | out: pv=0x26f864*=0x0, pcbRead=0x26f6f0*=0x2) returned 0x0 [0167.217] ISequentialStream:RemoteRead (in: This=0x4da3c0, pv=0x26f714, cb=0x4, pcbRead=0x26f6f0 | out: pv=0x26f714*=0x17, pcbRead=0x26f6f0*=0x4) returned 0x0 [0167.217] ISequentialStream:RemoteRead (in: This=0x4da3c0, pv=0x26f758, cb=0x4, pcbRead=0x26f6f0 | out: pv=0x26f758*=0xff, pcbRead=0x26f6f0*=0x4) returned 0x0 [0167.217] ISequentialStream:RemoteRead (in: This=0x4da3c0, pv=0x26f714, cb=0x4, pcbRead=0x26f6f0 | out: pv=0x26f714*=0x0, pcbRead=0x26f6f0*=0x4) returned 0x0 [0167.217] IUnknown:Release (This=0x4da3c0) returned 0x1 [0167.217] HeapFree (in: hHeap=0x470000, dwFlags=0x0, lpMem=0x0 | out: hHeap=0x470000) returned 1 [0167.217] CreateURLMonikerEx (in: pMkCtx=0x0, szURL="file:///C:/Users/5p5NrGJn0jS%20HALPmcxz/Desktop/READ_ME.hta", ppmk=0x26f7f0*=0x0, dwFlags=0x1 | out: ppmk=0x26f7f0*=0x4af9a0) returned 0x0 [0167.217] GetFocus () returned 0x5011e [0167.217] ScreenToClient (in: hWnd=0x5011e, lpPoint=0x26f538 | out: lpPoint=0x26f538) returned 1 [0167.217] GetClientRect (in: hWnd=0x5011e, lpRect=0x26f528 | out: lpRect=0x26f528) returned 1 [0167.217] PostMessageW (hWnd=0x5011e, Msg=0x20, wParam=0x11e, lParam=0x1) returned 1 [0167.217] IUnknown:AddRef (This=0x4af9a0) returned 0x2 [0167.217] IUnknown:QueryInterface (in: This=0x4af9a0, riid=0x6fb672f4*(Data1=0xa158a630, Data2=0xed6f, Data3=0x45fb, Data4=([0]=0xb9, [1]=0x87, [2]=0xf6, [3]=0x86, [4]=0x76, [5]=0xf5, [6]=0x77, [7]=0x52)), ppvObject=0x26f568 | out: ppvObject=0x26f568*=0x4af9ac) returned 0x0 [0167.217] IUriContainer:GetIUri (in: This=0x4af9ac, ppIUri=0x26f5bc | out: ppIUri=0x26f5bc*=0x49c4bc) returned 0x0 [0167.217] IUnknown:Release (This=0x4af9ac) returned 0x2 [0167.217] RtlAllocateHeap (HeapHandle=0x470000, Flags=0x8, Size=0x1c) returned 0x4da460 [0167.217] IUnknown:AddRef (This=0x4af9a0) returned 0x3 [0167.217] IUnknown:AddRef (This=0x49c4bc) returned 0x7 [0167.217] IUnknown:QueryInterface (in: This=0x49c4bc, riid=0x6fbed6e8*(Data1=0x50295b0c, Data2=0x6b79, Data3=0x4935, Data4=([0]=0xae, [1]=0xd8, [2]=0x5, [3]=0xd8, [4]=0xe, [5]=0xc8, [6]=0x6a, [7]=0x60)), ppvObject=0x26f594 | out: ppvObject=0x26f594*=0x49c4bc) returned 0x0 [0167.217] IUnknown:Release (This=0x49c4bc) returned 0x7 [0167.217] IUnknown:AddRef (This=0x49c4bc) returned 0x8 [0167.217] IUri:GetScheme (in: This=0x49c4bc, pdwScheme=0x26f58c | out: pdwScheme=0x26f58c*=0x9) returned 0x0 [0167.217] RtlAllocateHeap (HeapHandle=0x470000, Flags=0x8, Size=0xc8) returned 0x4dbe60 [0167.217] GetCurrentProcessId () returned 0x24c [0167.217] IUnknown:QueryInterface (in: This=0x49c4bc, riid=0x6fbed6e8*(Data1=0x50295b0c, Data2=0x6b79, Data3=0x4935, Data4=([0]=0xae, [1]=0xd8, [2]=0x5, [3]=0xd8, [4]=0xe, [5]=0xc8, [6]=0x6a, [7]=0x60)), ppvObject=0x26f594 | out: ppvObject=0x26f594*=0x49c4bc) returned 0x0 [0167.218] IUnknown:Release (This=0x49c4bc) returned 0x8 [0167.218] IUnknown:AddRef (This=0x49c4bc) returned 0x9 [0167.218] IUri:GetScheme (in: This=0x49c4bc, pdwScheme=0x26f564 | out: pdwScheme=0x26f564*=0x9) returned 0x0 [0167.218] IUnknown:QueryInterface (in: This=0x49c4bc, riid=0x6fbed6e8*(Data1=0x50295b0c, Data2=0x6b79, Data3=0x4935, Data4=([0]=0xae, [1]=0xd8, [2]=0x5, [3]=0xd8, [4]=0xe, [5]=0xc8, [6]=0x6a, [7]=0x60)), ppvObject=0x26f518 | out: ppvObject=0x26f518*=0x49c4bc) returned 0x0 [0167.218] IUnknown:Release (This=0x49c4bc) returned 0x9 [0167.218] IUnknown:AddRef (This=0x49c4bc) returned 0xa [0167.218] IUnknown:Release (This=0x49c4bc) returned 0x9 [0167.218] IUri:GetAbsoluteUri (in: This=0x49c4bc, pbstrAbsoluteUri=0x26f594 | out: pbstrAbsoluteUri=0x26f594*="file:///C:/Users/5p5NrGJn0jS%20HALPmcxz/Desktop/READ_ME.hta") returned 0x0 [0167.218] SysStringLen (param_1="file:///C:/Users/5p5NrGJn0jS%20HALPmcxz/Desktop/READ_ME.hta") returned 0x3b [0167.218] CreateUri (in: pwzURI="file:///C:/Users/5p5NrGJn0jS%20HALPmcxz/Desktop/READ_ME.hta", dwFlags=0x2b80, dwReserved=0x0, ppURI=0x26f5b0 | out: ppURI=0x26f5b0*=0x49c66c) returned 0x0 [0167.218] IUnknown:Release (This=0x49c4bc) returned 0x8 [0167.218] IUri:GetScheme (in: This=0x49c66c, pdwScheme=0x26f544 | out: pdwScheme=0x26f544*=0x9) returned 0x0 [0167.218] HeapFree (in: hHeap=0x470000, dwFlags=0x0, lpMem=0x0 | out: hHeap=0x470000) returned 1 [0167.218] IUnknown:AddRef (This=0x49c66c) returned 0x3 [0167.218] IUri:GetAbsoluteUri (in: This=0x49c66c, pbstrAbsoluteUri=0x4da460 | out: pbstrAbsoluteUri=0x4da460*="file:///C:/Users/5p5NrGJn0jS%20HALPmcxz/Desktop/READ_ME.hta") returned 0x0 [0167.218] ParseURLW (in: pcszURL="file:///C:/Users/5p5NrGJn0jS%20HALPmcxz/Desktop/READ_ME.hta", ppu=0x26f540 | out: ppu=0x26f540) returned 0x0 [0167.218] RtlAllocateHeap (HeapHandle=0x470000, Flags=0x0, Size=0x14) returned 0x4c1008 [0167.219] RtlAllocateHeap (HeapHandle=0x470000, Flags=0x8, Size=0x14) returned 0x4c1a68 [0167.219] GetCurrentThreadId () returned 0x220 [0167.219] RtlAllocateHeap (HeapHandle=0x470000, Flags=0x0, Size=0x10) returned 0x4d9a48 [0167.219] RtlReAllocateHeap (Heap=0x470000, Flags=0x0, Ptr=0x4c8140, Size=0x60) returned 0x4cd7f8 [0167.219] ScreenToClient (in: hWnd=0x5011e, lpPoint=0x26f390 | out: lpPoint=0x26f390) returned 1 [0167.219] RtlAllocateHeap (HeapHandle=0x470000, Flags=0x8, Size=0x30) returned 0x4c76d0 [0167.220] GetCurrentThreadId () returned 0x220 [0167.220] HeapFree (in: hHeap=0x470000, dwFlags=0x0, lpMem=0x4c76d0 | out: hHeap=0x470000) returned 1 [0167.220] GetCurrentThreadId () returned 0x220 [0167.220] RtlAllocateHeap (HeapHandle=0x470000, Flags=0x0, Size=0x7c) returned 0x4ca628 [0167.220] ParseURLW (in: pcszURL="file:///C:/Users/5p5NrGJn0jS%20HALPmcxz/Desktop/READ_ME.hta", ppu=0x26f530 | out: ppu=0x26f530) returned 0x0 [0167.220] CreateUri (in: pwzURI="file:///C:/Users/5p5NrGJn0jS%20HALPmcxz/Desktop/READ_ME.hta", dwFlags=0x2b84, dwReserved=0x0, ppURI=0x26f514 | out: ppURI=0x26f514*=0x49c4bc) returned 0x0 [0167.220] IUnknown:AddRef (This=0x49c4bc) returned 0xa [0167.220] IInternetSecurityManager:MapUrlToZone (in: This=0x6ff696bc, pwszUrl="file:///C:/Users/5p5NrGJn0jS%20HALPmcxz/Desktop/READ_ME.hta", pdwZone=0x26f4b4, dwFlags=0x0 | out: pdwZone=0x26f4b4*=0xffffffff) returned 0x800c0011 [0167.220] CoInternetIsFeatureEnabled (FeatureEntry=0x8, dwFlags=0x2) returned 0x1 [0167.220] CoInternetIsFeatureEnabled (FeatureEntry=0x8, dwFlags=0x2) returned 0x1 [0167.220] CoInternetIsFeatureEnabled (FeatureEntry=0xe, dwFlags=0x2) returned 0x1 [0167.220] IInternetSecurityManager:ProcessUrlAction (in: This=0x6ff696bc, pwszUrl="file:///C:/Users/5p5NrGJn0jS%20HALPmcxz/Desktop/READ_ME.hta", dwAction=0x2700, pPolicy=0x26f4b8, cbPolicy=0x4, pContext=0x0, cbContext=0x0, dwFlags=0x41, dwReserved=0x0 | out: pPolicy=0x26f4b8*=0x0) returned 0x0 [0167.220] CoInternetIsFeatureEnabled (FeatureEntry=0x8, dwFlags=0x2) returned 0x1 [0167.220] IUnknown:Release (This=0x49c4bc) returned 0x9 [0167.220] IUnknown:Release (This=0x49c4bc) returned 0x8 [0167.220] IUnknown:AddRef (This=0x49c66c) returned 0x4 [0167.220] IUri:GetPropertyDWORD (in: This=0x49c66c, uriProp=0x11, pdwProperty=0x26f2ec, dwFlags=0x0 | out: pdwProperty=0x26f2ec*=0x9) returned 0x0 [0167.220] IUnknown:Release (This=0x49c66c) returned 0x3 [0167.220] RtlAllocateHeap (HeapHandle=0x470000, Flags=0x0, Size=0x7c) returned 0x4ca6b0 [0167.220] IInternetSecurityManager:GetSecurityId (in: This=0x4a40c8, pwszUrl="file:///C:/Users/5p5NrGJn0jS%20HALPmcxz/Desktop/READ_ME.hta", pbSecurityId=0x26f348, pcbSecurityId=0x26f344*=0x200, dwReserved=0x0 | out: pbSecurityId=0x26f348*=0x66, pcbSecurityId=0x26f344*=0x9) returned 0x0 [0167.220] IInternetSecurityManager:GetSecurityId (in: This=0x6ff696bc, pwszUrl="file:///C:/Users/5p5NrGJn0jS%20HALPmcxz/Desktop/READ_ME.hta", pbSecurityId=0x26f348, pcbSecurityId=0x26f344*=0x200, dwReserved=0x0 | out: pbSecurityId=0x26f348*=0x0, pcbSecurityId=0x26f344*=0x200) returned 0x800c0011 [0167.220] HeapFree (in: hHeap=0x470000, dwFlags=0x0, lpMem=0x4ca6b0 | out: hHeap=0x470000) returned 1 [0167.220] HeapFree (in: hHeap=0x470000, dwFlags=0x0, lpMem=0x0 | out: hHeap=0x470000) returned 1 [0167.221] RtlAllocateHeap (HeapHandle=0x470000, Flags=0x0, Size=0x9) returned 0x4d9a60 [0167.221] StrCmpICW (pszStr1="file:///C:/Users/5p5NrGJn0jS%20HALPmcxz/Desktop/READ_ME.hta", pszStr2="res://ieframe.dll/PhishSite.htm") returned -12 [0167.221] IUnknown:QueryInterface (in: This=0x49c4bc, riid=0x6fbed6e8*(Data1=0x50295b0c, Data2=0x6b79, Data3=0x4935, Data4=([0]=0xae, [1]=0xd8, [2]=0x5, [3]=0xd8, [4]=0xe, [5]=0xc8, [6]=0x6a, [7]=0x60)), ppvObject=0x26f4dc | out: ppvObject=0x26f4dc*=0x49c4bc) returned 0x0 [0167.221] IUnknown:Release (This=0x49c4bc) returned 0x8 [0167.221] IUnknown:AddRef (This=0x49c4bc) returned 0x9 [0167.221] RtlAllocateHeap (HeapHandle=0x470000, Flags=0x8, Size=0x12c) returned 0x4b2d48 [0167.221] IUnknown:AddRef (This=0x4da438) returned 0x2 [0167.221] IUnknown:AddRef (This=0x49c4bc) returned 0xa [0167.221] IUnknown:QueryInterface (in: This=0x49c4bc, riid=0x6fbed6e8*(Data1=0x50295b0c, Data2=0x6b79, Data3=0x4935, Data4=([0]=0xae, [1]=0xd8, [2]=0x5, [3]=0xd8, [4]=0xe, [5]=0xc8, [6]=0x6a, [7]=0x60)), ppvObject=0x26f4a0 | out: ppvObject=0x26f4a0*=0x49c4bc) returned 0x0 [0167.221] IUnknown:Release (This=0x49c4bc) returned 0xa [0167.221] IUnknown:AddRef (This=0x49c4bc) returned 0xb [0167.221] IUnknown:Release (This=0x49c4bc) returned 0xa [0167.221] RtlAllocateHeap (HeapHandle=0x470000, Flags=0x8, Size=0x3c) returned 0x4c8140 [0167.222] RtlAllocateHeap (HeapHandle=0x470000, Flags=0x8, Size=0xb4) returned 0x4b48c8 [0167.222] RtlAllocateHeap (HeapHandle=0x470000, Flags=0x0, Size=0x30) returned 0x4c76d0 [0167.222] IUri:GetScheme (in: This=0x49c4bc, pdwScheme=0x26f524 | out: pdwScheme=0x26f524*=0x9) returned 0x0 [0167.222] IUri:IsEqual (in: This=0x49c66c, pUri=0x49c4bc, pfEqual=0x26f56c | out: pfEqual=0x26f56c*=1) returned 0x0 [0167.222] HeapFree (in: hHeap=0x470000, dwFlags=0x0, lpMem=0x0 | out: hHeap=0x470000) returned 1 [0167.222] RtlAllocateHeap (HeapHandle=0x470000, Flags=0x8, Size=0x4c) returned 0x4aed20 [0167.222] RtlAllocateHeap (HeapHandle=0x470000, Flags=0x0, Size=0x12) returned 0x4c1a88 [0167.222] RtlAllocateHeap (HeapHandle=0x470000, Flags=0x8, Size=0x50) returned 0x4aed78 [0167.222] RtlAllocateHeap (HeapHandle=0x470000, Flags=0x0, Size=0x60) returned 0x4cd860 [0167.222] RtlAllocateHeap (HeapHandle=0x470000, Flags=0x8, Size=0x12c) returned 0x4b4988 [0167.222] IUnknown:AddRef (This=0x49c4bc) returned 0xb [0167.222] IUnknown:QueryInterface (in: This=0x49c4bc, riid=0x6fbed6e8*(Data1=0x50295b0c, Data2=0x6b79, Data3=0x4935, Data4=([0]=0xae, [1]=0xd8, [2]=0x5, [3]=0xd8, [4]=0xe, [5]=0xc8, [6]=0x6a, [7]=0x60)), ppvObject=0x26f4c0 | out: ppvObject=0x26f4c0*=0x49c4bc) returned 0x0 [0167.222] IUnknown:Release (This=0x49c4bc) returned 0xb [0167.223] IUnknown:AddRef (This=0x49c4bc) returned 0xc [0167.223] RtlAllocateHeap (HeapHandle=0x470000, Flags=0x8, Size=0x4c) returned 0x4aedd0 [0167.223] RtlAllocateHeap (HeapHandle=0x470000, Flags=0x8, Size=0x68) returned 0x4b3f30 [0167.223] RtlAllocateHeap (HeapHandle=0x470000, Flags=0x8, Size=0x108) returned 0x4b4ac0 [0167.223] RtlAllocateHeap (HeapHandle=0x470000, Flags=0x0, Size=0x10) returned 0x4d9a78 [0167.223] RtlAllocateHeap (HeapHandle=0x470000, Flags=0x8, Size=0xcc) returned 0x49d308 [0167.223] RtlAllocateHeap (HeapHandle=0x470000, Flags=0x0, Size=0x10) returned 0x4d9a90 [0167.223] RtlAllocateHeap (HeapHandle=0x470000, Flags=0x8, Size=0x30) returned 0x4c7708 [0167.223] CoTaskMemFree (pv=0x0) [0167.223] RtlAllocateHeap (HeapHandle=0x470000, Flags=0x8, Size=0x1a8) returned 0x4b4bd0 [0167.223] IUnknown:AddRef (This=0x4a45b0) returned 0x3 [0167.223] IUnknown:AddRef (This=0x49c4bc) returned 0xd [0167.223] IUnknown:QueryInterface (in: This=0x49c4bc, riid=0x6fbed6e8*(Data1=0x50295b0c, Data2=0x6b79, Data3=0x4935, Data4=([0]=0xae, [1]=0xd8, [2]=0x5, [3]=0xd8, [4]=0xe, [5]=0xc8, [6]=0x6a, [7]=0x60)), ppvObject=0x26f480 | out: ppvObject=0x26f480*=0x49c4bc) returned 0x0 [0167.223] IUnknown:Release (This=0x49c4bc) returned 0xd [0167.224] IUnknown:AddRef (This=0x49c4bc) returned 0xe [0167.224] IUri:GetScheme (in: This=0x49c4bc, pdwScheme=0x26f484 | out: pdwScheme=0x26f484*=0x9) returned 0x0 [0167.224] RtlAllocateHeap (HeapHandle=0x470000, Flags=0x0, Size=0x1006) returned 0x4a94e0 [0167.224] ISequentialStream:RemoteRead (in: This=0x4da348, pv=0x4a94e0, cb=0x1000, pcbRead=0x26f480 | out: pv=0x4a94e0*=0x3c, pcbRead=0x26f480*=0xe34) returned 0x0 [0167.224] RtlAllocateHeap (HeapHandle=0x470000, Flags=0x0, Size=0x1000) returned 0x4b9668 [0167.224] RtlAllocateHeap (HeapHandle=0x470000, Flags=0x0, Size=0x1c6e) returned 0x4ba670 [0167.224] ISequentialStream:RemoteRead (in: This=0x4da348, pv=0x4a94e0, cb=0x1000, pcbRead=0x26f480 | out: pv=0x4a94e0*=0x3c, pcbRead=0x26f480*=0x0) returned 0x0 [0167.224] GetCurrentThreadId () returned 0x220 [0167.224] GetCurrentThreadId () returned 0x220 [0167.224] RtlAllocateHeap (HeapHandle=0x470000, Flags=0x0, Size=0x78) returned 0x4826f0 [0167.224] HeapFree (in: hHeap=0x470000, dwFlags=0x0, lpMem=0x0 | out: hHeap=0x470000) returned 1 [0167.224] MulDiv (nNumber=3636, nNumerator=4000, nDenominator=3636) returned 4000 [0167.225] RtlAllocateHeap (HeapHandle=0x470000, Flags=0x0, Size=0x10) returned 0x4d9aa8 [0167.225] RtlAllocateHeap (HeapHandle=0x470000, Flags=0x0, Size=0x68) returned 0x4b2e80 [0167.225] GetCurrentThreadId () returned 0x220 [0167.225] SetEvent (hEvent=0x1dc) returned 1 [0167.226] GetCurrentThreadId () returned 0x220 [0167.226] SetEvent (hEvent=0x1dc) returned 1 [0167.227] IUnknown:Release (This=0x49c4bc) returned 0xd [0167.227] IUnknown:Release (This=0x49c66c) returned 0x2 [0167.227] IUnknown:Release (This=0x4af9a0) returned 0x2 [0167.227] HeapFree (in: hHeap=0x470000, dwFlags=0x0, lpMem=0x0 | out: hHeap=0x470000) returned 1 [0167.227] HeapFree (in: hHeap=0x470000, dwFlags=0x0, lpMem=0x482670 | out: hHeap=0x470000) returned 1 [0167.227] HeapFree (in: hHeap=0x470000, dwFlags=0x0, lpMem=0x0 | out: hHeap=0x470000) returned 1 [0167.227] IUnknown:Release (This=0x49c4bc) returned 0xc [0167.227] IUnknown:Release (This=0x49c4bc) returned 0xb [0167.227] IUnknown:Release (This=0x4da438) returned 0x1 [0167.227] HeapFree (in: hHeap=0x470000, dwFlags=0x0, lpMem=0x0 | out: hHeap=0x470000) returned 1 [0167.227] HeapFree (in: hHeap=0x470000, dwFlags=0x0, lpMem=0x4825f0 | out: hHeap=0x470000) returned 1 [0167.227] HeapFree (in: hHeap=0x470000, dwFlags=0x0, lpMem=0x0 | out: hHeap=0x470000) returned 1 [0167.227] HeapFree (in: hHeap=0x470000, dwFlags=0x0, lpMem=0x0 | out: hHeap=0x470000) returned 1 [0167.227] HeapFree (in: hHeap=0x470000, dwFlags=0x0, lpMem=0x0 | out: hHeap=0x470000) returned 1 [0167.227] HeapFree (in: hHeap=0x470000, dwFlags=0x0, lpMem=0x0 | out: hHeap=0x470000) returned 1 [0167.227] HeapFree (in: hHeap=0x470000, dwFlags=0x0, lpMem=0x0 | out: hHeap=0x470000) returned 1 [0167.227] HeapFree (in: hHeap=0x470000, dwFlags=0x0, lpMem=0x0 | out: hHeap=0x470000) returned 1 [0167.227] IUnknown:Release (This=0x4af9a0) returned 0x1 [0167.227] HeapFree (in: hHeap=0x470000, dwFlags=0x0, lpMem=0x0 | out: hHeap=0x470000) returned 1 [0167.227] CoTaskMemFree (pv=0x0) [0167.227] IUnknown:AddRef (This=0x49c4bc) returned 0xc [0167.228] IUri:GetPropertyDWORD (in: This=0x49c4bc, uriProp=0x11, pdwProperty=0x26f284, dwFlags=0x0 | out: pdwProperty=0x26f284*=0x9) returned 0x0 [0167.228] IUnknown:Release (This=0x49c4bc) returned 0xb [0167.228] RtlAllocateHeap (HeapHandle=0x470000, Flags=0x0, Size=0x7c) returned 0x4ca6b0 [0167.228] IInternetSecurityManager:GetSecurityId (in: This=0x4a40c8, pwszUrl="file:///C:/Users/5p5NrGJn0jS%20HALPmcxz/Desktop/READ_ME.hta", pbSecurityId=0x26f4e8, pcbSecurityId=0x26f2e0*=0x200, dwReserved=0x0 | out: pbSecurityId=0x26f4e8*=0x66, pcbSecurityId=0x26f2e0*=0x9) returned 0x0 [0167.228] IInternetSecurityManager:GetSecurityId (in: This=0x6ff696bc, pwszUrl="file:///C:/Users/5p5NrGJn0jS%20HALPmcxz/Desktop/READ_ME.hta", pbSecurityId=0x26f4e8, pcbSecurityId=0x26f2e0*=0x200, dwReserved=0x0 | out: pbSecurityId=0x26f4e8*=0x0, pcbSecurityId=0x26f2e0*=0x200) returned 0x800c0011 [0167.228] HeapFree (in: hHeap=0x470000, dwFlags=0x0, lpMem=0x4ca6b0 | out: hHeap=0x470000) returned 1 [0167.228] IUnknown:AddRef (This=0x49c66c) returned 0x3 [0167.228] IUri:GetPropertyDWORD (in: This=0x49c66c, uriProp=0x11, pdwProperty=0x26f284, dwFlags=0x0 | out: pdwProperty=0x26f284*=0x9) returned 0x0 [0167.228] IUnknown:Release (This=0x49c66c) returned 0x2 [0167.228] RtlAllocateHeap (HeapHandle=0x470000, Flags=0x0, Size=0x7c) returned 0x4ca6b0 [0167.228] IInternetSecurityManager:GetSecurityId (in: This=0x4a40c8, pwszUrl="file:///C:/Users/5p5NrGJn0jS%20HALPmcxz/Desktop/READ_ME.hta", pbSecurityId=0x26f2e8, pcbSecurityId=0x26f2e4*=0x200, dwReserved=0x0 | out: pbSecurityId=0x26f2e8*=0x66, pcbSecurityId=0x26f2e4*=0x9) returned 0x0 [0167.228] IInternetSecurityManager:GetSecurityId (in: This=0x6ff696bc, pwszUrl="file:///C:/Users/5p5NrGJn0jS%20HALPmcxz/Desktop/READ_ME.hta", pbSecurityId=0x26f2e8, pcbSecurityId=0x26f2e4*=0x200, dwReserved=0x0 | out: pbSecurityId=0x26f2e8*=0x0, pcbSecurityId=0x26f2e4*=0x200) returned 0x800c0011 [0167.228] HeapFree (in: hHeap=0x470000, dwFlags=0x0, lpMem=0x4ca6b0 | out: hHeap=0x470000) returned 1 [0167.228] HeapFree (in: hHeap=0x470000, dwFlags=0x0, lpMem=0x48d970 | out: hHeap=0x470000) returned 1 [0167.228] HeapFree (in: hHeap=0x470000, dwFlags=0x0, lpMem=0x4b2750 | out: hHeap=0x470000) returned 1 [0167.228] HeapFree (in: hHeap=0x470000, dwFlags=0x0, lpMem=0x0 | out: hHeap=0x470000) returned 1 [0167.228] HeapFree (in: hHeap=0x470000, dwFlags=0x0, lpMem=0x0 | out: hHeap=0x470000) returned 1 [0167.228] HeapFree (in: hHeap=0x470000, dwFlags=0x0, lpMem=0x0 | out: hHeap=0x470000) returned 1 [0167.228] LoadLibraryA (lpLibFileName="IEFRAME.dll") returned 0x74650000 [0167.229] GetProcAddress (hModule=0x74650000, lpProcName=0xea) returned 0x746b8ed9 [0167.230] HeapFree (in: hHeap=0x470000, dwFlags=0x0, lpMem=0x0 | out: hHeap=0x470000) returned 1 [0167.230] HeapFree (in: hHeap=0x470000, dwFlags=0x0, lpMem=0x0 | out: hHeap=0x470000) returned 1 [0167.230] IUnknown:Release (This=0x4a40c8) returned 0x0 [0167.230] IUnknown:Release (This=0x4a29b4) returned 0x0 [0167.230] IUnknown:Release (This=0x6ff696bc) returned 0x6 [0167.230] IUnknown:AddRef (This=0x49c4bc) returned 0xc [0167.230] IUri:GetPropertyDWORD (in: This=0x49c4bc, uriProp=0x11, pdwProperty=0x26f5bc, dwFlags=0x0 | out: pdwProperty=0x26f5bc*=0x9) returned 0x0 [0167.230] IUnknown:Release (This=0x49c4bc) returned 0xb [0167.230] CoInternetCreateSecurityManager (in: pSP=0x0, ppSM=0x4a29ac, dwReserved=0x0 | out: ppSM=0x4a29ac*=0x4cd8c8) returned 0x0 [0167.230] IInternetSecurityManager:SetSecuritySite (This=0x4cd8c8, pSite=0x4a29b4) returned 0x0 [0167.230] IUnknown:AddRef (This=0x4a29b4) returned 0xb8 [0167.230] IUnknown:QueryInterface (in: This=0x4a29b4, riid=0x768261d0*(Data1=0x6d5140c1, Data2=0x7436, Data3=0x11ce, Data4=([0]=0x80, [1]=0x34, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0x60, [6]=0x9, [7]=0xfa)), ppvObject=0x26d584 | out: ppvObject=0x26d584*=0x4a29b8) returned 0x0 [0167.230] IServiceProvider:QueryService (in: This=0x4a29b8, guidService=0x7682f13c*(Data1=0xf1e50292, Data2=0xa795, Data3=0x4117, Data4=([0]=0x8e, [1]=0x9, [2]=0x2b, [3]=0x56, [4]=0xa, [5]=0x72, [6]=0xac, [7]=0x60)), riid=0x7682f13c*(Data1=0xf1e50292, Data2=0xa795, Data3=0x4117, Data4=([0]=0x8e, [1]=0x9, [2]=0x2b, [3]=0x56, [4]=0xa, [5]=0x72, [6]=0xac, [7]=0x60)), ppvObject=0x4cd8f0 | out: ppvObject=0x4cd8f0*=0x0) returned 0x80004002 [0167.230] IServiceProvider:QueryService (in: This=0x4a29b8, guidService=0x7682f12c*(Data1=0xf164edf1, Data2=0xcc7c, Data3=0x4f0d, Data4=([0]=0x9a, [1]=0x94, [2]=0x34, [3]=0x22, [4]=0x26, [5]=0x25, [6]=0xc3, [7]=0x93)), riid=0x7682f12c*(Data1=0xf164edf1, Data2=0xcc7c, Data3=0x4f0d, Data4=([0]=0x9a, [1]=0x94, [2]=0x34, [3]=0x22, [4]=0x26, [5]=0x25, [6]=0xc3, [7]=0x93)), ppvObject=0x4cd8ec | out: ppvObject=0x4cd8ec*=0x0) returned 0x80004002 [0167.230] IServiceProvider:QueryService (in: This=0x4a29b8, guidService=0x7681c484*(Data1=0x79eac9ee, Data2=0xbaf9, Data3=0x11ce, Data4=([0]=0x8c, [1]=0x82, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0x4b, [6]=0xa9, [7]=0xb)), riid=0x7681c484*(Data1=0x79eac9ee, Data2=0xbaf9, Data3=0x11ce, Data4=([0]=0x8c, [1]=0x82, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0x4b, [6]=0xa9, [7]=0xb)), ppvObject=0x4cd8e8 | out: ppvObject=0x4cd8e8*=0x6ff696bc) returned 0x0 [0167.231] IUnknown:Release (This=0x4a29b8) returned 0x0 [0167.231] RtlAllocateHeap (HeapHandle=0x470000, Flags=0x0, Size=0x7c) returned 0x4ca6b0 [0167.231] IInternetSecurityManager:GetSecurityId (in: This=0x4cd8c8, pwszUrl="file:///C:/Users/5p5NrGJn0jS%20HALPmcxz/Desktop/READ_ME.hta", pbSecurityId=0x26f618, pcbSecurityId=0x26f614*=0x200, dwReserved=0x0 | out: pbSecurityId=0x26f618*=0x66, pcbSecurityId=0x26f614*=0x9) returned 0x0 [0167.231] IInternetSecurityManager:GetSecurityId (in: This=0x6ff696bc, pwszUrl="file:///C:/Users/5p5NrGJn0jS%20HALPmcxz/Desktop/READ_ME.hta", pbSecurityId=0x26f618, pcbSecurityId=0x26f614*=0x200, dwReserved=0x0 | out: pbSecurityId=0x26f618*=0x0, pcbSecurityId=0x26f614*=0x200) returned 0x800c0011 [0167.231] HeapFree (in: hHeap=0x470000, dwFlags=0x0, lpMem=0x4ca6b0 | out: hHeap=0x470000) returned 1 [0167.231] IUnknown:AddRef (This=0x49c66c) returned 0x3 [0167.231] IUri:GetPropertyDWORD (in: This=0x49c66c, uriProp=0x11, pdwProperty=0x26f38c, dwFlags=0x0 | out: pdwProperty=0x26f38c*=0x9) returned 0x0 [0167.231] IUnknown:Release (This=0x49c66c) returned 0x2 [0167.231] RtlAllocateHeap (HeapHandle=0x470000, Flags=0x0, Size=0x7c) returned 0x4ca6b0 [0167.231] IInternetSecurityManager:GetSecurityId (in: This=0x4cd8c8, pwszUrl="file:///C:/Users/5p5NrGJn0jS%20HALPmcxz/Desktop/READ_ME.hta", pbSecurityId=0x26f3e8, pcbSecurityId=0x26f3e4*=0x200, dwReserved=0x0 | out: pbSecurityId=0x26f3e8*=0x66, pcbSecurityId=0x26f3e4*=0x9) returned 0x0 [0167.231] IInternetSecurityManager:GetSecurityId (in: This=0x6ff696bc, pwszUrl="file:///C:/Users/5p5NrGJn0jS%20HALPmcxz/Desktop/READ_ME.hta", pbSecurityId=0x26f3e8, pcbSecurityId=0x26f3e4*=0x200, dwReserved=0x0 | out: pbSecurityId=0x26f3e8*=0x0, pcbSecurityId=0x26f3e4*=0x200) returned 0x800c0011 [0167.231] HeapFree (in: hHeap=0x470000, dwFlags=0x0, lpMem=0x4ca6b0 | out: hHeap=0x470000) returned 1 [0167.231] IUnknown:AddRef (This=0x49c66c) returned 0x3 [0167.231] IUri:GetPropertyDWORD (in: This=0x49c66c, uriProp=0x11, pdwProperty=0x26f5bc, dwFlags=0x0 | out: pdwProperty=0x26f5bc*=0x9) returned 0x0 [0167.231] IUnknown:Release (This=0x49c66c) returned 0x2 [0167.231] RtlAllocateHeap (HeapHandle=0x470000, Flags=0x0, Size=0x7c) returned 0x4ca6b0 [0167.231] IInternetSecurityManager:GetSecurityId (in: This=0x4cd8c8, pwszUrl="file:///C:/Users/5p5NrGJn0jS%20HALPmcxz/Desktop/READ_ME.hta", pbSecurityId=0x26f618, pcbSecurityId=0x26f614*=0x200, dwReserved=0x0 | out: pbSecurityId=0x26f618*=0x66, pcbSecurityId=0x26f614*=0x9) returned 0x0 [0167.231] IInternetSecurityManager:GetSecurityId (in: This=0x6ff696bc, pwszUrl="file:///C:/Users/5p5NrGJn0jS%20HALPmcxz/Desktop/READ_ME.hta", pbSecurityId=0x26f618, pcbSecurityId=0x26f614*=0x200, dwReserved=0x0 | out: pbSecurityId=0x26f618*=0x0, pcbSecurityId=0x26f614*=0x200) returned 0x800c0011 [0167.231] HeapFree (in: hHeap=0x470000, dwFlags=0x0, lpMem=0x4ca6b0 | out: hHeap=0x470000) returned 1 [0167.231] IUnknown:AddRef (This=0x49c4bc) returned 0xc [0167.232] IUri:GetPropertyDWORD (in: This=0x49c4bc, uriProp=0x11, pdwProperty=0x26f38c, dwFlags=0x0 | out: pdwProperty=0x26f38c*=0x9) returned 0x0 [0167.232] IUnknown:Release (This=0x49c4bc) returned 0xb [0167.232] RtlAllocateHeap (HeapHandle=0x470000, Flags=0x0, Size=0x7c) returned 0x4ca6b0 [0167.232] IInternetSecurityManager:GetSecurityId (in: This=0x4cd8c8, pwszUrl="file:///C:/Users/5p5NrGJn0jS%20HALPmcxz/Desktop/READ_ME.hta", pbSecurityId=0x26f3e8, pcbSecurityId=0x26f3e4*=0x200, dwReserved=0x0 | out: pbSecurityId=0x26f3e8*=0x66, pcbSecurityId=0x26f3e4*=0x9) returned 0x0 [0167.232] IInternetSecurityManager:GetSecurityId (in: This=0x6ff696bc, pwszUrl="file:///C:/Users/5p5NrGJn0jS%20HALPmcxz/Desktop/READ_ME.hta", pbSecurityId=0x26f3e8, pcbSecurityId=0x26f3e4*=0x200, dwReserved=0x0 | out: pbSecurityId=0x26f3e8*=0x0, pcbSecurityId=0x26f3e4*=0x200) returned 0x800c0011 [0167.232] HeapFree (in: hHeap=0x470000, dwFlags=0x0, lpMem=0x4ca6b0 | out: hHeap=0x470000) returned 1 [0167.232] GetFocus () returned 0x5011e [0167.232] ScreenToClient (in: hWnd=0x5011e, lpPoint=0x26f6c0 | out: lpPoint=0x26f6c0) returned 1 [0167.232] GetClientRect (in: hWnd=0x5011e, lpRect=0x26f6b0 | out: lpRect=0x26f6b0) returned 1 [0167.232] PostMessageW (hWnd=0x5011e, Msg=0x20, wParam=0x11e, lParam=0x1) returned 1 [0167.232] HeapFree (in: hHeap=0x470000, dwFlags=0x0, lpMem=0x0 | out: hHeap=0x470000) returned 1 [0167.233] HeapFree (in: hHeap=0x470000, dwFlags=0x0, lpMem=0x4b23b0 | out: hHeap=0x470000) returned 1 [0167.234] HeapFree (in: hHeap=0x470000, dwFlags=0x0, lpMem=0x0 | out: hHeap=0x470000) returned 1 [0167.234] HeapFree (in: hHeap=0x470000, dwFlags=0x0, lpMem=0x0 | out: hHeap=0x470000) returned 1 [0167.234] HeapFree (in: hHeap=0x470000, dwFlags=0x0, lpMem=0x0 | out: hHeap=0x470000) returned 1 [0167.234] HeapFree (in: hHeap=0x470000, dwFlags=0x0, lpMem=0x0 | out: hHeap=0x470000) returned 1 [0167.234] HeapFree (in: hHeap=0x470000, dwFlags=0x0, lpMem=0x0 | out: hHeap=0x470000) returned 1 [0167.234] HeapFree (in: hHeap=0x470000, dwFlags=0x0, lpMem=0x0 | out: hHeap=0x470000) returned 1 [0167.234] HeapFree (in: hHeap=0x470000, dwFlags=0x0, lpMem=0x4b1090 | out: hHeap=0x470000) returned 1 [0167.234] HeapFree (in: hHeap=0x470000, dwFlags=0x0, lpMem=0x49bac8 | out: hHeap=0x470000) returned 1 [0167.234] HeapFree (in: hHeap=0x470000, dwFlags=0x0, lpMem=0x0 | out: hHeap=0x470000) returned 1 [0167.234] HeapFree (in: hHeap=0x470000, dwFlags=0x0, lpMem=0x4ae6f0 | out: hHeap=0x470000) returned 1 [0167.234] HeapFree (in: hHeap=0x470000, dwFlags=0x0, lpMem=0x484228 | out: hHeap=0x470000) returned 1 [0167.234] HeapFree (in: hHeap=0x470000, dwFlags=0x0, lpMem=0x0 | out: hHeap=0x470000) returned 1 [0167.234] HeapFree (in: hHeap=0x470000, dwFlags=0x0, lpMem=0x482170 | out: hHeap=0x470000) returned 1 [0167.234] HeapFree (in: hHeap=0x470000, dwFlags=0x0, lpMem=0x4da8d8 | out: hHeap=0x470000) returned 1 [0167.234] HeapFree (in: hHeap=0x470000, dwFlags=0x0, lpMem=0x0 | out: hHeap=0x470000) returned 1 [0167.234] HeapFree (in: hHeap=0x470000, dwFlags=0x0, lpMem=0x4b22f0 | out: hHeap=0x470000) returned 1 [0167.235] HeapFree (in: hHeap=0x470000, dwFlags=0x0, lpMem=0x0 | out: hHeap=0x470000) returned 1 [0167.235] HeapFree (in: hHeap=0x470000, dwFlags=0x0, lpMem=0x0 | out: hHeap=0x470000) returned 1 [0167.235] HeapFree (in: hHeap=0x470000, dwFlags=0x0, lpMem=0x4aba88 | out: hHeap=0x470000) returned 1 [0167.235] HeapFree (in: hHeap=0x470000, dwFlags=0x0, lpMem=0x0 | out: hHeap=0x470000) returned 1 [0167.235] HeapFree (in: hHeap=0x470000, dwFlags=0x0, lpMem=0x4aba70 | out: hHeap=0x470000) returned 1 [0167.235] HeapFree (in: hHeap=0x470000, dwFlags=0x0, lpMem=0x4b0a48 | out: hHeap=0x470000) returned 1 [0167.235] HeapFree (in: hHeap=0x470000, dwFlags=0x0, lpMem=0x4b0878 | out: hHeap=0x470000) returned 1 [0167.235] HeapFree (in: hHeap=0x470000, dwFlags=0x0, lpMem=0x4a94b8 | out: hHeap=0x470000) returned 1 [0167.235] HeapFree (in: hHeap=0x470000, dwFlags=0x0, lpMem=0x49b6d0 | out: hHeap=0x470000) returned 1 [0167.235] RegOpenKeyExW (in: hKey=0x80000002, lpSubKey="Software\\Microsoft\\Internet Explorer\\Main\\FeatureControl", ulOptions=0x0, samDesired=0x1, phkResult=0x26f6fc | out: phkResult=0x26f6fc*=0x250) returned 0x0 [0167.235] RegOpenKeyExW (in: hKey=0x80000001, lpSubKey="Software\\Microsoft\\Internet Explorer\\Main\\FeatureControl", ulOptions=0x0, samDesired=0x1, phkResult=0x26f700 | out: phkResult=0x26f700*=0x254) returned 0x0 [0167.235] RegOpenKeyExW (in: hKey=0x254, lpSubKey="FEATURE_ADDITIONAL_IE8_MEMORY_CLEANUP", ulOptions=0x0, samDesired=0x1, phkResult=0x26f6bc | out: phkResult=0x26f6bc*=0x0) returned 0x2 [0167.235] RegOpenKeyExW (in: hKey=0x250, lpSubKey="FEATURE_ADDITIONAL_IE8_MEMORY_CLEANUP", ulOptions=0x0, samDesired=0x1, phkResult=0x26f6bc | out: phkResult=0x26f6bc*=0x0) returned 0x2 [0167.235] RegCloseKey (hKey=0x0) returned 0x6 [0167.235] RegCloseKey (hKey=0x0) returned 0x6 [0167.235] RegCloseKey (hKey=0x250) returned 0x0 [0167.235] RegCloseKey (hKey=0x254) returned 0x0 [0167.235] HeapFree (in: hHeap=0x470000, dwFlags=0x0, lpMem=0x4aea60 | out: hHeap=0x470000) returned 1 [0167.237] HeapFree (in: hHeap=0x470000, dwFlags=0x0, lpMem=0x4b19d0 | out: hHeap=0x470000) returned 1 [0167.237] HeapFree (in: hHeap=0x470000, dwFlags=0x0, lpMem=0x4af960 | out: hHeap=0x470000) returned 1 [0167.237] HeapFree (in: hHeap=0x470000, dwFlags=0x0, lpMem=0x4c16d0 | out: hHeap=0x470000) returned 1 [0167.237] HeapFree (in: hHeap=0x470000, dwFlags=0x0, lpMem=0x4aeb10 | out: hHeap=0x470000) returned 1 [0167.237] HeapFree (in: hHeap=0x470000, dwFlags=0x0, lpMem=0x4b1a30 | out: hHeap=0x470000) returned 1 [0167.237] HeapFree (in: hHeap=0x470000, dwFlags=0x0, lpMem=0x4aeb68 | out: hHeap=0x470000) returned 1 [0167.237] HeapFree (in: hHeap=0x470000, dwFlags=0x0, lpMem=0x48d858 | out: hHeap=0x470000) returned 1 [0167.237] HeapFree (in: hHeap=0x470000, dwFlags=0x0, lpMem=0x4aebc0 | out: hHeap=0x470000) returned 1 [0167.237] HeapFree (in: hHeap=0x470000, dwFlags=0x0, lpMem=0x0 | out: hHeap=0x470000) returned 1 [0167.237] HeapFree (in: hHeap=0x470000, dwFlags=0x0, lpMem=0x4d99a0 | out: hHeap=0x470000) returned 1 [0167.237] HeapFree (in: hHeap=0x470000, dwFlags=0x0, lpMem=0x4c8020 | out: hHeap=0x470000) returned 1 [0167.237] HeapFree (in: hHeap=0x470000, dwFlags=0x0, lpMem=0x0 | out: hHeap=0x470000) returned 1 [0167.237] HeapFree (in: hHeap=0x470000, dwFlags=0x0, lpMem=0x4c0fa8 | out: hHeap=0x470000) returned 1 [0167.237] HeapFree (in: hHeap=0x470000, dwFlags=0x0, lpMem=0x4b1a60 | out: hHeap=0x470000) returned 1 [0167.237] HeapFree (in: hHeap=0x470000, dwFlags=0x0, lpMem=0x4dad60 | out: hHeap=0x470000) returned 1 [0167.237] HeapFree (in: hHeap=0x470000, dwFlags=0x0, lpMem=0x4dadd0 | out: hHeap=0x470000) returned 1 [0167.238] HeapFree (in: hHeap=0x470000, dwFlags=0x0, lpMem=0x4aec18 | out: hHeap=0x470000) returned 1 [0167.238] HeapFree (in: hHeap=0x470000, dwFlags=0x0, lpMem=0x0 | out: hHeap=0x470000) returned 1 [0167.238] HeapFree (in: hHeap=0x470000, dwFlags=0x0, lpMem=0x4daa60 | out: hHeap=0x470000) returned 1 [0167.238] HeapFree (in: hHeap=0x470000, dwFlags=0x0, lpMem=0x4c75b8 | out: hHeap=0x470000) returned 1 [0167.238] HeapFree (in: hHeap=0x470000, dwFlags=0x0, lpMem=0x4aec70 | out: hHeap=0x470000) returned 1 [0167.238] HeapFree (in: hHeap=0x470000, dwFlags=0x0, lpMem=0x4c7660 | out: hHeap=0x470000) returned 1 [0167.238] HeapFree (in: hHeap=0x470000, dwFlags=0x0, lpMem=0x4da978 | out: hHeap=0x470000) returned 1 [0167.238] HeapFree (in: hHeap=0x470000, dwFlags=0x0, lpMem=0x4dac68 | out: hHeap=0x470000) returned 1 [0167.238] HeapFree (in: hHeap=0x470000, dwFlags=0x0, lpMem=0x4aeab8 | out: hHeap=0x470000) returned 1 [0167.238] HeapFree (in: hHeap=0x470000, dwFlags=0x0, lpMem=0x0 | out: hHeap=0x470000) returned 1 [0167.238] HeapFree (in: hHeap=0x470000, dwFlags=0x0, lpMem=0x4c4c50 | out: hHeap=0x470000) returned 1 [0167.238] HeapFree (in: hHeap=0x470000, dwFlags=0x0, lpMem=0x4c7fd8 | out: hHeap=0x470000) returned 1 [0167.238] HeapFree (in: hHeap=0x470000, dwFlags=0x0, lpMem=0x0 | out: hHeap=0x470000) returned 1 [0167.238] HeapFree (in: hHeap=0x470000, dwFlags=0x0, lpMem=0x4c0f88 | out: hHeap=0x470000) returned 1 [0167.238] HeapFree (in: hHeap=0x470000, dwFlags=0x0, lpMem=0x4b1a00 | out: hHeap=0x470000) returned 1 [0167.238] HeapFree (in: hHeap=0x470000, dwFlags=0x0, lpMem=0x493530 | out: hHeap=0x470000) returned 1 [0167.238] RtlAllocateHeap (HeapHandle=0x470000, Flags=0x8, Size=0x4c) returned 0x4aeab8 [0167.238] RtlAllocateHeap (HeapHandle=0x470000, Flags=0x0, Size=0x10) returned 0x4d99a0 [0167.238] RtlAllocateHeap (HeapHandle=0x470000, Flags=0x8, Size=0x4) returned 0x4c4c50 [0167.238] RtlAllocateHeap (HeapHandle=0x470000, Flags=0x0, Size=0x50) returned 0x4aec70 [0167.238] HeapFree (in: hHeap=0x470000, dwFlags=0x0, lpMem=0x4aec70 | out: hHeap=0x470000) returned 1 [0167.238] HeapFree (in: hHeap=0x470000, dwFlags=0x0, lpMem=0x0 | out: hHeap=0x470000) returned 1 [0167.239] HeapFree (in: hHeap=0x470000, dwFlags=0x0, lpMem=0x4b25d0 | out: hHeap=0x470000) returned 1 [0167.239] HeapFree (in: hHeap=0x470000, dwFlags=0x0, lpMem=0x0 | out: hHeap=0x470000) returned 1 [0167.239] HeapFree (in: hHeap=0x470000, dwFlags=0x0, lpMem=0x0 | out: hHeap=0x470000) returned 1 [0167.239] IUnknown:Release (This=0x49e0d8) returned 0x1 [0167.239] IUnknown:Release (This=0x49c4bc) returned 0xa [0167.239] HeapFree (in: hHeap=0x470000, dwFlags=0x0, lpMem=0x4a1c90 | out: hHeap=0x470000) returned 1 [0167.239] HeapFree (in: hHeap=0x470000, dwFlags=0x0, lpMem=0x0 | out: hHeap=0x470000) returned 1 [0167.239] HeapFree (in: hHeap=0x470000, dwFlags=0x0, lpMem=0x0 | out: hHeap=0x470000) returned 1 [0167.239] HeapFree (in: hHeap=0x470000, dwFlags=0x0, lpMem=0x0 | out: hHeap=0x470000) returned 1 [0167.239] HeapFree (in: hHeap=0x470000, dwFlags=0x0, lpMem=0x0 | out: hHeap=0x470000) returned 1 [0167.239] HeapFree (in: hHeap=0x470000, dwFlags=0x0, lpMem=0x493730 | out: hHeap=0x470000) returned 1 [0167.239] HeapFree (in: hHeap=0x470000, dwFlags=0x0, lpMem=0x4ae640 | out: hHeap=0x470000) returned 1 [0167.239] HeapFree (in: hHeap=0x470000, dwFlags=0x0, lpMem=0x4c90b0 | out: hHeap=0x470000) returned 1 [0167.239] GetCurrentThreadId () returned 0x220 [0167.239] HeapFree (in: hHeap=0x470000, dwFlags=0x0, lpMem=0x4a9460 | out: hHeap=0x470000) returned 1 [0167.239] GetCurrentThreadId () returned 0x220 [0167.239] HeapFree (in: hHeap=0x470000, dwFlags=0x0, lpMem=0x0 | out: hHeap=0x470000) returned 1 [0167.239] HeapFree (in: hHeap=0x470000, dwFlags=0x0, lpMem=0x0 | out: hHeap=0x470000) returned 1 [0167.239] HeapFree (in: hHeap=0x470000, dwFlags=0x0, lpMem=0x0 | out: hHeap=0x470000) returned 1 [0167.239] HeapFree (in: hHeap=0x470000, dwFlags=0x0, lpMem=0x0 | out: hHeap=0x470000) returned 1 [0167.239] HeapFree (in: hHeap=0x470000, dwFlags=0x0, lpMem=0x0 | out: hHeap=0x470000) returned 1 [0167.239] HeapFree (in: hHeap=0x470000, dwFlags=0x0, lpMem=0x0 | out: hHeap=0x470000) returned 1 [0167.239] HeapFree (in: hHeap=0x470000, dwFlags=0x0, lpMem=0x4ae5e8 | out: hHeap=0x470000) returned 1 [0167.239] ValidateRect (hWnd=0x5011e, lpRect=0x0) returned 1 [0167.239] RtlAllocateHeap (HeapHandle=0x470000, Flags=0x8, Size=0x5c) returned 0x4cd930 [0167.239] RtlAllocateHeap (HeapHandle=0x470000, Flags=0x8, Size=0x18) returned 0x493730 [0167.239] HeapFree (in: hHeap=0x470000, dwFlags=0x0, lpMem=0x0 | out: hHeap=0x470000) returned 1 [0167.239] RtlAllocateHeap (HeapHandle=0x470000, Flags=0x0, Size=0x9) returned 0x4b25d0 [0167.240] RtlAllocateHeap (HeapHandle=0x470000, Flags=0x0, Size=0x9) returned 0x4b2750 [0167.240] HeapFree (in: hHeap=0x470000, dwFlags=0x0, lpMem=0x4b2750 | out: hHeap=0x470000) returned 1 [0167.240] HeapFree (in: hHeap=0x470000, dwFlags=0x0, lpMem=0x4b25d0 | out: hHeap=0x470000) returned 1 [0167.240] HeapFree (in: hHeap=0x470000, dwFlags=0x0, lpMem=0x493730 | out: hHeap=0x470000) returned 1 [0167.240] HeapFree (in: hHeap=0x470000, dwFlags=0x0, lpMem=0x4cd930 | out: hHeap=0x470000) returned 1 [0167.240] HeapFree (in: hHeap=0x470000, dwFlags=0x0, lpMem=0x0 | out: hHeap=0x470000) returned 1 [0167.240] HeapFree (in: hHeap=0x470000, dwFlags=0x0, lpMem=0x0 | out: hHeap=0x470000) returned 1 [0167.240] HeapFree (in: hHeap=0x470000, dwFlags=0x0, lpMem=0x0 | out: hHeap=0x470000) returned 1 [0167.240] IUnknown:AddRef (This=0x49c66c) returned 0x3 [0167.240] IUri:GetPropertyDWORD (in: This=0x49c66c, uriProp=0x11, pdwProperty=0x26f5bc, dwFlags=0x0 | out: pdwProperty=0x26f5bc*=0x9) returned 0x0 [0167.240] IUnknown:Release (This=0x49c66c) returned 0x2 [0167.240] RtlAllocateHeap (HeapHandle=0x470000, Flags=0x0, Size=0x7c) returned 0x4ca6b0 [0167.240] IInternetSecurityManager:GetSecurityId (in: This=0x4cd8c8, pwszUrl="file:///C:/Users/5p5NrGJn0jS%20HALPmcxz/Desktop/READ_ME.hta", pbSecurityId=0x26f620, pcbSecurityId=0x26f61c*=0x200, dwReserved=0x0 | out: pbSecurityId=0x26f620*=0x66, pcbSecurityId=0x26f61c*=0x9) returned 0x0 [0167.240] IInternetSecurityManager:GetSecurityId (in: This=0x6ff696bc, pwszUrl="file:///C:/Users/5p5NrGJn0jS%20HALPmcxz/Desktop/READ_ME.hta", pbSecurityId=0x26f620, pcbSecurityId=0x26f61c*=0x200, dwReserved=0x0 | out: pbSecurityId=0x26f620*=0x0, pcbSecurityId=0x26f61c*=0x200) returned 0x800c0011 [0167.240] HeapFree (in: hHeap=0x470000, dwFlags=0x0, lpMem=0x4ca6b0 | out: hHeap=0x470000) returned 1 [0167.240] HeapFree (in: hHeap=0x470000, dwFlags=0x0, lpMem=0x49b640 | out: hHeap=0x470000) returned 1 [0167.240] RtlAllocateHeap (HeapHandle=0x470000, Flags=0x0, Size=0x9) returned 0x49b640 [0167.240] CoInternetIsFeatureEnabled (FeatureEntry=0x0, dwFlags=0x2) returned 0x0 [0167.240] HeapFree (in: hHeap=0x470000, dwFlags=0x0, lpMem=0x4d6898 | out: hHeap=0x470000) returned 1 [0167.241] HeapFree (in: hHeap=0x470000, dwFlags=0x0, lpMem=0x0 | out: hHeap=0x470000) returned 1 [0167.241] HeapFree (in: hHeap=0x470000, dwFlags=0x0, lpMem=0x0 | out: hHeap=0x470000) returned 1 [0167.241] CoTaskMemAlloc (cb=0x6d) returned 0x4a9460 [0167.241] CoTaskMemAlloc (cb=0x9) returned 0x49b6d0 [0167.241] HeapFree (in: hHeap=0x470000, dwFlags=0x0, lpMem=0x0 | out: hHeap=0x470000) returned 1 [0167.241] HeapFree (in: hHeap=0x470000, dwFlags=0x0, lpMem=0x0 | out: hHeap=0x470000) returned 1 [0167.241] HeapFree (in: hHeap=0x470000, dwFlags=0x0, lpMem=0x4a1b28 | out: hHeap=0x470000) returned 1 [0167.241] HeapFree (in: hHeap=0x470000, dwFlags=0x0, lpMem=0x4ab788 | out: hHeap=0x470000) returned 1 [0167.241] HeapFree (in: hHeap=0x470000, dwFlags=0x0, lpMem=0x4934d0 | out: hHeap=0x470000) returned 1 [0167.241] HeapFree (in: hHeap=0x470000, dwFlags=0x0, lpMem=0x4934b0 | out: hHeap=0x470000) returned 1 [0167.241] HeapFree (in: hHeap=0x470000, dwFlags=0x0, lpMem=0x4ae140 | out: hHeap=0x470000) returned 1 [0167.241] HeapFree (in: hHeap=0x470000, dwFlags=0x0, lpMem=0x4840c0 | out: hHeap=0x470000) returned 1 [0167.241] HeapFree (in: hHeap=0x470000, dwFlags=0x0, lpMem=0x0 | out: hHeap=0x470000) returned 1 [0167.241] HeapFree (in: hHeap=0x470000, dwFlags=0x0, lpMem=0x493510 | out: hHeap=0x470000) returned 1 [0167.241] HeapFree (in: hHeap=0x470000, dwFlags=0x0, lpMem=0x4a1b50 | out: hHeap=0x470000) returned 1 [0167.241] HeapFree (in: hHeap=0x470000, dwFlags=0x0, lpMem=0x4ab7a0 | out: hHeap=0x470000) returned 1 [0167.241] HeapFree (in: hHeap=0x470000, dwFlags=0x0, lpMem=0x0 | out: hHeap=0x470000) returned 1 [0167.241] HeapFree (in: hHeap=0x470000, dwFlags=0x0, lpMem=0x0 | out: hHeap=0x470000) returned 1 [0167.241] HeapFree (in: hHeap=0x470000, dwFlags=0x0, lpMem=0x0 | out: hHeap=0x470000) returned 1 [0167.241] HeapFree (in: hHeap=0x470000, dwFlags=0x0, lpMem=0x0 | out: hHeap=0x470000) returned 1 [0167.241] HeapFree (in: hHeap=0x470000, dwFlags=0x0, lpMem=0x0 | out: hHeap=0x470000) returned 1 [0167.241] HeapFree (in: hHeap=0x470000, dwFlags=0x0, lpMem=0x0 | out: hHeap=0x470000) returned 1 [0167.241] HeapFree (in: hHeap=0x470000, dwFlags=0x0, lpMem=0x0 | out: hHeap=0x470000) returned 1 [0167.241] HeapFree (in: hHeap=0x470000, dwFlags=0x0, lpMem=0x0 | out: hHeap=0x470000) returned 1 [0167.241] HeapFree (in: hHeap=0x470000, dwFlags=0x0, lpMem=0x0 | out: hHeap=0x470000) returned 1 [0167.241] HeapFree (in: hHeap=0x470000, dwFlags=0x0, lpMem=0x0 | out: hHeap=0x470000) returned 1 [0167.241] HeapFree (in: hHeap=0x470000, dwFlags=0x0, lpMem=0x0 | out: hHeap=0x470000) returned 1 [0167.241] HeapFree (in: hHeap=0x470000, dwFlags=0x0, lpMem=0x0 | out: hHeap=0x470000) returned 1 [0167.241] HeapFree (in: hHeap=0x470000, dwFlags=0x0, lpMem=0x0 | out: hHeap=0x470000) returned 1 [0167.241] HeapFree (in: hHeap=0x470000, dwFlags=0x0, lpMem=0x0 | out: hHeap=0x470000) returned 1 [0167.241] HeapFree (in: hHeap=0x470000, dwFlags=0x0, lpMem=0x0 | out: hHeap=0x470000) returned 1 [0167.241] HeapFree (in: hHeap=0x470000, dwFlags=0x0, lpMem=0x0 | out: hHeap=0x470000) returned 1 [0167.241] HeapFree (in: hHeap=0x470000, dwFlags=0x0, lpMem=0x0 | out: hHeap=0x470000) returned 1 [0167.241] HeapFree (in: hHeap=0x470000, dwFlags=0x0, lpMem=0x0 | out: hHeap=0x470000) returned 1 [0167.241] HeapFree (in: hHeap=0x470000, dwFlags=0x0, lpMem=0x0 | out: hHeap=0x470000) returned 1 [0167.242] HeapFree (in: hHeap=0x470000, dwFlags=0x0, lpMem=0x0 | out: hHeap=0x470000) returned 1 [0167.242] HeapFree (in: hHeap=0x470000, dwFlags=0x0, lpMem=0x0 | out: hHeap=0x470000) returned 1 [0167.242] HeapFree (in: hHeap=0x470000, dwFlags=0x0, lpMem=0x0 | out: hHeap=0x470000) returned 1 [0167.242] HeapFree (in: hHeap=0x470000, dwFlags=0x0, lpMem=0x0 | out: hHeap=0x470000) returned 1 [0167.242] HeapFree (in: hHeap=0x470000, dwFlags=0x0, lpMem=0x0 | out: hHeap=0x470000) returned 1 [0167.242] HeapFree (in: hHeap=0x470000, dwFlags=0x0, lpMem=0x0 | out: hHeap=0x470000) returned 1 [0167.242] HeapFree (in: hHeap=0x470000, dwFlags=0x0, lpMem=0x0 | out: hHeap=0x470000) returned 1 [0167.242] HeapFree (in: hHeap=0x470000, dwFlags=0x0, lpMem=0x0 | out: hHeap=0x470000) returned 1 [0167.242] HeapFree (in: hHeap=0x470000, dwFlags=0x0, lpMem=0x0 | out: hHeap=0x470000) returned 1 [0167.242] HeapFree (in: hHeap=0x470000, dwFlags=0x0, lpMem=0x0 | out: hHeap=0x470000) returned 1 [0167.242] HeapFree (in: hHeap=0x470000, dwFlags=0x0, lpMem=0x0 | out: hHeap=0x470000) returned 1 [0167.242] HeapFree (in: hHeap=0x470000, dwFlags=0x0, lpMem=0x0 | out: hHeap=0x470000) returned 1 [0167.242] HeapFree (in: hHeap=0x470000, dwFlags=0x0, lpMem=0x0 | out: hHeap=0x470000) returned 1 [0167.242] HeapFree (in: hHeap=0x470000, dwFlags=0x0, lpMem=0x0 | out: hHeap=0x470000) returned 1 [0167.242] HeapFree (in: hHeap=0x470000, dwFlags=0x0, lpMem=0x0 | out: hHeap=0x470000) returned 1 [0167.242] HeapFree (in: hHeap=0x470000, dwFlags=0x0, lpMem=0x0 | out: hHeap=0x470000) returned 1 [0167.242] HeapFree (in: hHeap=0x470000, dwFlags=0x0, lpMem=0x0 | out: hHeap=0x470000) returned 1 [0167.242] HeapFree (in: hHeap=0x470000, dwFlags=0x0, lpMem=0x0 | out: hHeap=0x470000) returned 1 [0167.242] HeapFree (in: hHeap=0x470000, dwFlags=0x0, lpMem=0x0 | out: hHeap=0x470000) returned 1 [0167.242] HeapFree (in: hHeap=0x470000, dwFlags=0x0, lpMem=0x0 | out: hHeap=0x470000) returned 1 [0167.242] HeapFree (in: hHeap=0x470000, dwFlags=0x0, lpMem=0x0 | out: hHeap=0x470000) returned 1 [0167.242] HeapFree (in: hHeap=0x470000, dwFlags=0x0, lpMem=0x0 | out: hHeap=0x470000) returned 1 [0167.242] HeapFree (in: hHeap=0x470000, dwFlags=0x0, lpMem=0x0 | out: hHeap=0x470000) returned 1 [0167.242] HeapFree (in: hHeap=0x470000, dwFlags=0x0, lpMem=0x0 | out: hHeap=0x470000) returned 1 [0167.242] HeapFree (in: hHeap=0x470000, dwFlags=0x0, lpMem=0x0 | out: hHeap=0x470000) returned 1 [0167.242] HeapFree (in: hHeap=0x470000, dwFlags=0x0, lpMem=0x0 | out: hHeap=0x470000) returned 1 [0167.242] HeapFree (in: hHeap=0x470000, dwFlags=0x0, lpMem=0x0 | out: hHeap=0x470000) returned 1 [0167.242] HeapFree (in: hHeap=0x470000, dwFlags=0x0, lpMem=0x0 | out: hHeap=0x470000) returned 1 [0167.242] HeapFree (in: hHeap=0x470000, dwFlags=0x0, lpMem=0x0 | out: hHeap=0x470000) returned 1 [0167.242] HeapFree (in: hHeap=0x470000, dwFlags=0x0, lpMem=0x0 | out: hHeap=0x470000) returned 1 [0167.242] HeapFree (in: hHeap=0x470000, dwFlags=0x0, lpMem=0x0 | out: hHeap=0x470000) returned 1 [0167.242] HeapFree (in: hHeap=0x470000, dwFlags=0x0, lpMem=0x0 | out: hHeap=0x470000) returned 1 [0167.242] HeapFree (in: hHeap=0x470000, dwFlags=0x0, lpMem=0x0 | out: hHeap=0x470000) returned 1 [0167.242] HeapFree (in: hHeap=0x470000, dwFlags=0x0, lpMem=0x0 | out: hHeap=0x470000) returned 1 [0167.242] HeapFree (in: hHeap=0x470000, dwFlags=0x0, lpMem=0x0 | out: hHeap=0x470000) returned 1 [0167.242] HeapFree (in: hHeap=0x470000, dwFlags=0x0, lpMem=0x0 | out: hHeap=0x470000) returned 1 [0167.242] HeapFree (in: hHeap=0x470000, dwFlags=0x0, lpMem=0x0 | out: hHeap=0x470000) returned 1 [0167.242] HeapFree (in: hHeap=0x470000, dwFlags=0x0, lpMem=0x0 | out: hHeap=0x470000) returned 1 [0167.242] HeapFree (in: hHeap=0x470000, dwFlags=0x0, lpMem=0x0 | out: hHeap=0x470000) returned 1 [0167.242] HeapFree (in: hHeap=0x470000, dwFlags=0x0, lpMem=0x0 | out: hHeap=0x470000) returned 1 [0167.242] HeapFree (in: hHeap=0x470000, dwFlags=0x0, lpMem=0x0 | out: hHeap=0x470000) returned 1 [0167.242] HeapFree (in: hHeap=0x470000, dwFlags=0x0, lpMem=0x0 | out: hHeap=0x470000) returned 1 [0167.243] HeapFree (in: hHeap=0x470000, dwFlags=0x0, lpMem=0x0 | out: hHeap=0x470000) returned 1 [0167.243] HeapFree (in: hHeap=0x470000, dwFlags=0x0, lpMem=0x0 | out: hHeap=0x470000) returned 1 [0167.243] HeapFree (in: hHeap=0x470000, dwFlags=0x0, lpMem=0x0 | out: hHeap=0x470000) returned 1 [0167.243] HeapFree (in: hHeap=0x470000, dwFlags=0x0, lpMem=0x0 | out: hHeap=0x470000) returned 1 [0167.243] HeapFree (in: hHeap=0x470000, dwFlags=0x0, lpMem=0x0 | out: hHeap=0x470000) returned 1 [0167.243] HeapFree (in: hHeap=0x470000, dwFlags=0x0, lpMem=0x0 | out: hHeap=0x470000) returned 1 [0167.243] HeapFree (in: hHeap=0x470000, dwFlags=0x0, lpMem=0x0 | out: hHeap=0x470000) returned 1 [0167.243] HeapFree (in: hHeap=0x470000, dwFlags=0x0, lpMem=0x0 | out: hHeap=0x470000) returned 1 [0167.243] HeapFree (in: hHeap=0x470000, dwFlags=0x0, lpMem=0x0 | out: hHeap=0x470000) returned 1 [0167.243] HeapFree (in: hHeap=0x470000, dwFlags=0x0, lpMem=0x0 | out: hHeap=0x470000) returned 1 [0167.243] HeapFree (in: hHeap=0x470000, dwFlags=0x0, lpMem=0x0 | out: hHeap=0x470000) returned 1 [0167.243] HeapFree (in: hHeap=0x470000, dwFlags=0x0, lpMem=0x0 | out: hHeap=0x470000) returned 1 [0167.243] HeapFree (in: hHeap=0x470000, dwFlags=0x0, lpMem=0x0 | out: hHeap=0x470000) returned 1 [0167.243] HeapFree (in: hHeap=0x470000, dwFlags=0x0, lpMem=0x0 | out: hHeap=0x470000) returned 1 [0167.243] HeapFree (in: hHeap=0x470000, dwFlags=0x0, lpMem=0x0 | out: hHeap=0x470000) returned 1 [0167.243] HeapFree (in: hHeap=0x470000, dwFlags=0x0, lpMem=0x0 | out: hHeap=0x470000) returned 1 [0167.243] HeapFree (in: hHeap=0x470000, dwFlags=0x0, lpMem=0x0 | out: hHeap=0x470000) returned 1 [0167.243] HeapFree (in: hHeap=0x470000, dwFlags=0x0, lpMem=0x0 | out: hHeap=0x470000) returned 1 [0167.243] HeapFree (in: hHeap=0x470000, dwFlags=0x0, lpMem=0x0 | out: hHeap=0x470000) returned 1 [0167.243] HeapFree (in: hHeap=0x470000, dwFlags=0x0, lpMem=0x0 | out: hHeap=0x470000) returned 1 [0167.243] HeapFree (in: hHeap=0x470000, dwFlags=0x0, lpMem=0x0 | out: hHeap=0x470000) returned 1 [0167.243] HeapFree (in: hHeap=0x470000, dwFlags=0x0, lpMem=0x0 | out: hHeap=0x470000) returned 1 [0167.243] HeapFree (in: hHeap=0x470000, dwFlags=0x0, lpMem=0x0 | out: hHeap=0x470000) returned 1 [0167.243] HeapFree (in: hHeap=0x470000, dwFlags=0x0, lpMem=0x0 | out: hHeap=0x470000) returned 1 [0167.243] HeapFree (in: hHeap=0x470000, dwFlags=0x0, lpMem=0x0 | out: hHeap=0x470000) returned 1 [0167.243] HeapFree (in: hHeap=0x470000, dwFlags=0x0, lpMem=0x0 | out: hHeap=0x470000) returned 1 [0167.243] HeapFree (in: hHeap=0x470000, dwFlags=0x0, lpMem=0x0 | out: hHeap=0x470000) returned 1 [0167.243] HeapFree (in: hHeap=0x470000, dwFlags=0x0, lpMem=0x0 | out: hHeap=0x470000) returned 1 [0167.243] HeapFree (in: hHeap=0x470000, dwFlags=0x0, lpMem=0x0 | out: hHeap=0x470000) returned 1 [0167.243] HeapFree (in: hHeap=0x470000, dwFlags=0x0, lpMem=0x0 | out: hHeap=0x470000) returned 1 [0167.243] HeapFree (in: hHeap=0x470000, dwFlags=0x0, lpMem=0x0 | out: hHeap=0x470000) returned 1 [0167.243] HeapFree (in: hHeap=0x470000, dwFlags=0x0, lpMem=0x0 | out: hHeap=0x470000) returned 1 [0167.243] HeapFree (in: hHeap=0x470000, dwFlags=0x0, lpMem=0x0 | out: hHeap=0x470000) returned 1 [0167.243] HeapFree (in: hHeap=0x470000, dwFlags=0x0, lpMem=0x0 | out: hHeap=0x470000) returned 1 [0167.243] HeapFree (in: hHeap=0x470000, dwFlags=0x0, lpMem=0x0 | out: hHeap=0x470000) returned 1 [0167.243] HeapFree (in: hHeap=0x470000, dwFlags=0x0, lpMem=0x0 | out: hHeap=0x470000) returned 1 [0167.243] HeapFree (in: hHeap=0x470000, dwFlags=0x0, lpMem=0x0 | out: hHeap=0x470000) returned 1 [0167.243] HeapFree (in: hHeap=0x470000, dwFlags=0x0, lpMem=0x0 | out: hHeap=0x470000) returned 1 [0167.243] HeapFree (in: hHeap=0x470000, dwFlags=0x0, lpMem=0x0 | out: hHeap=0x470000) returned 1 [0167.243] HeapFree (in: hHeap=0x470000, dwFlags=0x0, lpMem=0x0 | out: hHeap=0x470000) returned 1 [0167.243] HeapFree (in: hHeap=0x470000, dwFlags=0x0, lpMem=0x0 | out: hHeap=0x470000) returned 1 [0167.243] HeapFree (in: hHeap=0x470000, dwFlags=0x0, lpMem=0x0 | out: hHeap=0x470000) returned 1 [0167.243] HeapFree (in: hHeap=0x470000, dwFlags=0x0, lpMem=0x0 | out: hHeap=0x470000) returned 1 [0167.244] HeapFree (in: hHeap=0x470000, dwFlags=0x0, lpMem=0x0 | out: hHeap=0x470000) returned 1 [0167.244] HeapFree (in: hHeap=0x470000, dwFlags=0x0, lpMem=0x0 | out: hHeap=0x470000) returned 1 [0167.244] HeapFree (in: hHeap=0x470000, dwFlags=0x0, lpMem=0x0 | out: hHeap=0x470000) returned 1 [0167.244] HeapFree (in: hHeap=0x470000, dwFlags=0x0, lpMem=0x0 | out: hHeap=0x470000) returned 1 [0167.244] HeapFree (in: hHeap=0x470000, dwFlags=0x0, lpMem=0x0 | out: hHeap=0x470000) returned 1 [0167.244] HeapFree (in: hHeap=0x470000, dwFlags=0x0, lpMem=0x0 | out: hHeap=0x470000) returned 1 [0167.244] HeapFree (in: hHeap=0x470000, dwFlags=0x0, lpMem=0x0 | out: hHeap=0x470000) returned 1 [0167.244] HeapFree (in: hHeap=0x470000, dwFlags=0x0, lpMem=0x0 | out: hHeap=0x470000) returned 1 [0167.244] HeapFree (in: hHeap=0x470000, dwFlags=0x0, lpMem=0x0 | out: hHeap=0x470000) returned 1 [0167.244] HeapFree (in: hHeap=0x470000, dwFlags=0x0, lpMem=0x0 | out: hHeap=0x470000) returned 1 [0167.244] HeapFree (in: hHeap=0x470000, dwFlags=0x0, lpMem=0x0 | out: hHeap=0x470000) returned 1 [0167.244] HeapFree (in: hHeap=0x470000, dwFlags=0x0, lpMem=0x0 | out: hHeap=0x470000) returned 1 [0167.244] HeapFree (in: hHeap=0x470000, dwFlags=0x0, lpMem=0x0 | out: hHeap=0x470000) returned 1 [0167.244] HeapFree (in: hHeap=0x470000, dwFlags=0x0, lpMem=0x0 | out: hHeap=0x470000) returned 1 [0167.244] HeapFree (in: hHeap=0x470000, dwFlags=0x0, lpMem=0x0 | out: hHeap=0x470000) returned 1 [0167.244] HeapFree (in: hHeap=0x470000, dwFlags=0x0, lpMem=0x4ab7b8 | out: hHeap=0x470000) returned 1 [0167.244] HeapFree (in: hHeap=0x470000, dwFlags=0x0, lpMem=0x0 | out: hHeap=0x470000) returned 1 [0167.244] HeapFree (in: hHeap=0x470000, dwFlags=0x0, lpMem=0x0 | out: hHeap=0x470000) returned 1 [0167.244] HeapFree (in: hHeap=0x470000, dwFlags=0x0, lpMem=0x0 | out: hHeap=0x470000) returned 1 [0167.244] HeapFree (in: hHeap=0x470000, dwFlags=0x0, lpMem=0x0 | out: hHeap=0x470000) returned 1 [0167.244] HeapFree (in: hHeap=0x470000, dwFlags=0x0, lpMem=0x0 | out: hHeap=0x470000) returned 1 [0167.244] HeapFree (in: hHeap=0x470000, dwFlags=0x0, lpMem=0x0 | out: hHeap=0x470000) returned 1 [0167.244] HeapFree (in: hHeap=0x470000, dwFlags=0x0, lpMem=0x0 | out: hHeap=0x470000) returned 1 [0167.244] HeapFree (in: hHeap=0x470000, dwFlags=0x0, lpMem=0x0 | out: hHeap=0x470000) returned 1 [0167.244] HeapFree (in: hHeap=0x470000, dwFlags=0x0, lpMem=0x0 | out: hHeap=0x470000) returned 1 [0167.244] HeapFree (in: hHeap=0x470000, dwFlags=0x0, lpMem=0x0 | out: hHeap=0x470000) returned 1 [0167.244] HeapFree (in: hHeap=0x470000, dwFlags=0x0, lpMem=0x0 | out: hHeap=0x470000) returned 1 [0167.244] HeapFree (in: hHeap=0x470000, dwFlags=0x0, lpMem=0x0 | out: hHeap=0x470000) returned 1 [0167.244] HeapFree (in: hHeap=0x470000, dwFlags=0x0, lpMem=0x0 | out: hHeap=0x470000) returned 1 [0167.244] HeapFree (in: hHeap=0x470000, dwFlags=0x0, lpMem=0x0 | out: hHeap=0x470000) returned 1 [0167.244] HeapFree (in: hHeap=0x470000, dwFlags=0x0, lpMem=0x0 | out: hHeap=0x470000) returned 1 [0167.244] HeapFree (in: hHeap=0x470000, dwFlags=0x0, lpMem=0x0 | out: hHeap=0x470000) returned 1 [0167.244] HeapFree (in: hHeap=0x470000, dwFlags=0x0, lpMem=0x0 | out: hHeap=0x470000) returned 1 [0167.244] HeapFree (in: hHeap=0x470000, dwFlags=0x0, lpMem=0x0 | out: hHeap=0x470000) returned 1 [0167.244] HeapFree (in: hHeap=0x470000, dwFlags=0x0, lpMem=0x0 | out: hHeap=0x470000) returned 1 [0167.244] HeapFree (in: hHeap=0x470000, dwFlags=0x0, lpMem=0x0 | out: hHeap=0x470000) returned 1 [0167.244] HeapFree (in: hHeap=0x470000, dwFlags=0x0, lpMem=0x0 | out: hHeap=0x470000) returned 1 [0167.244] HeapFree (in: hHeap=0x470000, dwFlags=0x0, lpMem=0x0 | out: hHeap=0x470000) returned 1 [0167.244] HeapFree (in: hHeap=0x470000, dwFlags=0x0, lpMem=0x4ab758 | out: hHeap=0x470000) returned 1 [0167.244] HeapFree (in: hHeap=0x470000, dwFlags=0x0, lpMem=0x0 | out: hHeap=0x470000) returned 1 [0167.245] HeapFree (in: hHeap=0x470000, dwFlags=0x0, lpMem=0x0 | out: hHeap=0x470000) returned 1 [0167.245] HeapFree (in: hHeap=0x470000, dwFlags=0x0, lpMem=0x0 | out: hHeap=0x470000) returned 1 [0167.245] HeapFree (in: hHeap=0x470000, dwFlags=0x0, lpMem=0x0 | out: hHeap=0x470000) returned 1 [0167.245] HeapFree (in: hHeap=0x470000, dwFlags=0x0, lpMem=0x0 | out: hHeap=0x470000) returned 1 [0167.245] HeapFree (in: hHeap=0x470000, dwFlags=0x0, lpMem=0x0 | out: hHeap=0x470000) returned 1 [0167.245] HeapFree (in: hHeap=0x470000, dwFlags=0x0, lpMem=0x0 | out: hHeap=0x470000) returned 1 [0167.245] HeapFree (in: hHeap=0x470000, dwFlags=0x0, lpMem=0x0 | out: hHeap=0x470000) returned 1 [0167.245] HeapFree (in: hHeap=0x470000, dwFlags=0x0, lpMem=0x0 | out: hHeap=0x470000) returned 1 [0167.245] HeapFree (in: hHeap=0x470000, dwFlags=0x0, lpMem=0x0 | out: hHeap=0x470000) returned 1 [0167.245] HeapFree (in: hHeap=0x470000, dwFlags=0x0, lpMem=0x0 | out: hHeap=0x470000) returned 1 [0167.245] HeapFree (in: hHeap=0x470000, dwFlags=0x0, lpMem=0x0 | out: hHeap=0x470000) returned 1 [0167.245] HeapFree (in: hHeap=0x470000, dwFlags=0x0, lpMem=0x0 | out: hHeap=0x470000) returned 1 [0167.245] HeapFree (in: hHeap=0x470000, dwFlags=0x0, lpMem=0x0 | out: hHeap=0x470000) returned 1 [0167.245] HeapFree (in: hHeap=0x470000, dwFlags=0x0, lpMem=0x0 | out: hHeap=0x470000) returned 1 [0167.245] HeapFree (in: hHeap=0x470000, dwFlags=0x0, lpMem=0x0 | out: hHeap=0x470000) returned 1 [0167.245] HeapFree (in: hHeap=0x470000, dwFlags=0x0, lpMem=0x0 | out: hHeap=0x470000) returned 1 [0167.245] HeapFree (in: hHeap=0x470000, dwFlags=0x0, lpMem=0x0 | out: hHeap=0x470000) returned 1 [0167.245] HeapFree (in: hHeap=0x470000, dwFlags=0x0, lpMem=0x0 | out: hHeap=0x470000) returned 1 [0167.245] HeapFree (in: hHeap=0x470000, dwFlags=0x0, lpMem=0x0 | out: hHeap=0x470000) returned 1 [0167.245] HeapFree (in: hHeap=0x470000, dwFlags=0x0, lpMem=0x0 | out: hHeap=0x470000) returned 1 [0167.245] HeapFree (in: hHeap=0x470000, dwFlags=0x0, lpMem=0x0 | out: hHeap=0x470000) returned 1 [0167.245] HeapFree (in: hHeap=0x470000, dwFlags=0x0, lpMem=0x0 | out: hHeap=0x470000) returned 1 [0167.245] HeapFree (in: hHeap=0x470000, dwFlags=0x0, lpMem=0x0 | out: hHeap=0x470000) returned 1 [0167.245] HeapFree (in: hHeap=0x470000, dwFlags=0x0, lpMem=0x0 | out: hHeap=0x470000) returned 1 [0167.245] HeapFree (in: hHeap=0x470000, dwFlags=0x0, lpMem=0x0 | out: hHeap=0x470000) returned 1 [0167.245] HeapFree (in: hHeap=0x470000, dwFlags=0x0, lpMem=0x0 | out: hHeap=0x470000) returned 1 [0167.245] HeapFree (in: hHeap=0x470000, dwFlags=0x0, lpMem=0x0 | out: hHeap=0x470000) returned 1 [0167.245] HeapFree (in: hHeap=0x470000, dwFlags=0x0, lpMem=0x0 | out: hHeap=0x470000) returned 1 [0167.245] HeapFree (in: hHeap=0x470000, dwFlags=0x0, lpMem=0x0 | out: hHeap=0x470000) returned 1 [0167.245] HeapFree (in: hHeap=0x470000, dwFlags=0x0, lpMem=0x0 | out: hHeap=0x470000) returned 1 [0167.245] HeapFree (in: hHeap=0x470000, dwFlags=0x0, lpMem=0x0 | out: hHeap=0x470000) returned 1 [0167.245] HeapFree (in: hHeap=0x470000, dwFlags=0x0, lpMem=0x0 | out: hHeap=0x470000) returned 1 [0167.245] HeapFree (in: hHeap=0x470000, dwFlags=0x0, lpMem=0x0 | out: hHeap=0x470000) returned 1 [0167.245] HeapFree (in: hHeap=0x470000, dwFlags=0x0, lpMem=0x0 | out: hHeap=0x470000) returned 1 [0167.245] HeapFree (in: hHeap=0x470000, dwFlags=0x0, lpMem=0x0 | out: hHeap=0x470000) returned 1 [0167.245] HeapFree (in: hHeap=0x470000, dwFlags=0x0, lpMem=0x0 | out: hHeap=0x470000) returned 1 [0167.245] HeapFree (in: hHeap=0x470000, dwFlags=0x0, lpMem=0x0 | out: hHeap=0x470000) returned 1 [0167.245] HeapFree (in: hHeap=0x470000, dwFlags=0x0, lpMem=0x0 | out: hHeap=0x470000) returned 1 [0167.245] HeapFree (in: hHeap=0x470000, dwFlags=0x0, lpMem=0x0 | out: hHeap=0x470000) returned 1 [0167.245] HeapFree (in: hHeap=0x470000, dwFlags=0x0, lpMem=0x0 | out: hHeap=0x470000) returned 1 [0167.245] HeapFree (in: hHeap=0x470000, dwFlags=0x0, lpMem=0x0 | out: hHeap=0x470000) returned 1 [0167.245] HeapFree (in: hHeap=0x470000, dwFlags=0x0, lpMem=0x0 | out: hHeap=0x470000) returned 1 [0167.245] HeapFree (in: hHeap=0x470000, dwFlags=0x0, lpMem=0x0 | out: hHeap=0x470000) returned 1 [0167.245] HeapFree (in: hHeap=0x470000, dwFlags=0x0, lpMem=0x0 | out: hHeap=0x470000) returned 1 [0167.246] HeapFree (in: hHeap=0x470000, dwFlags=0x0, lpMem=0x0 | out: hHeap=0x470000) returned 1 [0167.246] HeapFree (in: hHeap=0x470000, dwFlags=0x0, lpMem=0x0 | out: hHeap=0x470000) returned 1 [0167.246] HeapFree (in: hHeap=0x470000, dwFlags=0x0, lpMem=0x0 | out: hHeap=0x470000) returned 1 [0167.246] HeapFree (in: hHeap=0x470000, dwFlags=0x0, lpMem=0x0 | out: hHeap=0x470000) returned 1 [0167.246] HeapFree (in: hHeap=0x470000, dwFlags=0x0, lpMem=0x0 | out: hHeap=0x470000) returned 1 [0167.246] HeapFree (in: hHeap=0x470000, dwFlags=0x0, lpMem=0x0 | out: hHeap=0x470000) returned 1 [0167.246] HeapFree (in: hHeap=0x470000, dwFlags=0x0, lpMem=0x0 | out: hHeap=0x470000) returned 1 [0167.246] HeapFree (in: hHeap=0x470000, dwFlags=0x0, lpMem=0x0 | out: hHeap=0x470000) returned 1 [0167.246] HeapFree (in: hHeap=0x470000, dwFlags=0x0, lpMem=0x0 | out: hHeap=0x470000) returned 1 [0167.246] HeapFree (in: hHeap=0x470000, dwFlags=0x0, lpMem=0x0 | out: hHeap=0x470000) returned 1 [0167.246] HeapFree (in: hHeap=0x470000, dwFlags=0x0, lpMem=0x0 | out: hHeap=0x470000) returned 1 [0167.246] HeapFree (in: hHeap=0x470000, dwFlags=0x0, lpMem=0x0 | out: hHeap=0x470000) returned 1 [0167.246] HeapFree (in: hHeap=0x470000, dwFlags=0x0, lpMem=0x0 | out: hHeap=0x470000) returned 1 [0167.246] HeapFree (in: hHeap=0x470000, dwFlags=0x0, lpMem=0x0 | out: hHeap=0x470000) returned 1 [0167.246] HeapFree (in: hHeap=0x470000, dwFlags=0x0, lpMem=0x0 | out: hHeap=0x470000) returned 1 [0167.246] HeapFree (in: hHeap=0x470000, dwFlags=0x0, lpMem=0x0 | out: hHeap=0x470000) returned 1 [0167.246] HeapFree (in: hHeap=0x470000, dwFlags=0x0, lpMem=0x0 | out: hHeap=0x470000) returned 1 [0167.246] HeapFree (in: hHeap=0x470000, dwFlags=0x0, lpMem=0x0 | out: hHeap=0x470000) returned 1 [0167.246] HeapFree (in: hHeap=0x470000, dwFlags=0x0, lpMem=0x0 | out: hHeap=0x470000) returned 1 [0167.246] HeapFree (in: hHeap=0x470000, dwFlags=0x0, lpMem=0x0 | out: hHeap=0x470000) returned 1 [0167.246] HeapFree (in: hHeap=0x470000, dwFlags=0x0, lpMem=0x0 | out: hHeap=0x470000) returned 1 [0167.246] HeapFree (in: hHeap=0x470000, dwFlags=0x0, lpMem=0x0 | out: hHeap=0x470000) returned 1 [0167.246] HeapFree (in: hHeap=0x470000, dwFlags=0x0, lpMem=0x0 | out: hHeap=0x470000) returned 1 [0167.246] HeapFree (in: hHeap=0x470000, dwFlags=0x0, lpMem=0x0 | out: hHeap=0x470000) returned 1 [0167.246] HeapFree (in: hHeap=0x470000, dwFlags=0x0, lpMem=0x0 | out: hHeap=0x470000) returned 1 [0167.246] HeapFree (in: hHeap=0x470000, dwFlags=0x0, lpMem=0x0 | out: hHeap=0x470000) returned 1 [0167.246] HeapFree (in: hHeap=0x470000, dwFlags=0x0, lpMem=0x0 | out: hHeap=0x470000) returned 1 [0167.246] HeapFree (in: hHeap=0x470000, dwFlags=0x0, lpMem=0x0 | out: hHeap=0x470000) returned 1 [0167.246] HeapFree (in: hHeap=0x470000, dwFlags=0x0, lpMem=0x0 | out: hHeap=0x470000) returned 1 [0167.246] HeapFree (in: hHeap=0x470000, dwFlags=0x0, lpMem=0x0 | out: hHeap=0x470000) returned 1 [0167.246] HeapFree (in: hHeap=0x470000, dwFlags=0x0, lpMem=0x0 | out: hHeap=0x470000) returned 1 [0167.246] HeapFree (in: hHeap=0x470000, dwFlags=0x0, lpMem=0x0 | out: hHeap=0x470000) returned 1 [0167.246] HeapFree (in: hHeap=0x470000, dwFlags=0x0, lpMem=0x0 | out: hHeap=0x470000) returned 1 [0167.246] HeapFree (in: hHeap=0x470000, dwFlags=0x0, lpMem=0x0 | out: hHeap=0x470000) returned 1 [0167.246] HeapFree (in: hHeap=0x470000, dwFlags=0x0, lpMem=0x0 | out: hHeap=0x470000) returned 1 [0167.246] HeapFree (in: hHeap=0x470000, dwFlags=0x0, lpMem=0x0 | out: hHeap=0x470000) returned 1 [0167.246] HeapFree (in: hHeap=0x470000, dwFlags=0x0, lpMem=0x0 | out: hHeap=0x470000) returned 1 [0167.246] HeapFree (in: hHeap=0x470000, dwFlags=0x0, lpMem=0x0 | out: hHeap=0x470000) returned 1 [0167.246] HeapFree (in: hHeap=0x470000, dwFlags=0x0, lpMem=0x0 | out: hHeap=0x470000) returned 1 [0167.246] HeapFree (in: hHeap=0x470000, dwFlags=0x0, lpMem=0x0 | out: hHeap=0x470000) returned 1 [0167.246] HeapFree (in: hHeap=0x470000, dwFlags=0x0, lpMem=0x0 | out: hHeap=0x470000) returned 1 [0167.247] HeapFree (in: hHeap=0x470000, dwFlags=0x0, lpMem=0x0 | out: hHeap=0x470000) returned 1 [0167.247] HeapFree (in: hHeap=0x470000, dwFlags=0x0, lpMem=0x0 | out: hHeap=0x470000) returned 1 [0167.247] HeapFree (in: hHeap=0x470000, dwFlags=0x0, lpMem=0x0 | out: hHeap=0x470000) returned 1 [0167.247] HeapFree (in: hHeap=0x470000, dwFlags=0x0, lpMem=0x0 | out: hHeap=0x470000) returned 1 [0167.247] HeapFree (in: hHeap=0x470000, dwFlags=0x0, lpMem=0x0 | out: hHeap=0x470000) returned 1 [0167.247] HeapFree (in: hHeap=0x470000, dwFlags=0x0, lpMem=0x0 | out: hHeap=0x470000) returned 1 [0167.247] HeapFree (in: hHeap=0x470000, dwFlags=0x0, lpMem=0x0 | out: hHeap=0x470000) returned 1 [0167.247] HeapFree (in: hHeap=0x470000, dwFlags=0x0, lpMem=0x0 | out: hHeap=0x470000) returned 1 [0167.247] HeapFree (in: hHeap=0x470000, dwFlags=0x0, lpMem=0x0 | out: hHeap=0x470000) returned 1 [0167.247] HeapFree (in: hHeap=0x470000, dwFlags=0x0, lpMem=0x0 | out: hHeap=0x470000) returned 1 [0167.247] HeapFree (in: hHeap=0x470000, dwFlags=0x0, lpMem=0x0 | out: hHeap=0x470000) returned 1 [0167.247] HeapFree (in: hHeap=0x470000, dwFlags=0x0, lpMem=0x0 | out: hHeap=0x470000) returned 1 [0167.247] HeapFree (in: hHeap=0x470000, dwFlags=0x0, lpMem=0x0 | out: hHeap=0x470000) returned 1 [0167.247] HeapFree (in: hHeap=0x470000, dwFlags=0x0, lpMem=0x0 | out: hHeap=0x470000) returned 1 [0167.247] HeapFree (in: hHeap=0x470000, dwFlags=0x0, lpMem=0x0 | out: hHeap=0x470000) returned 1 [0167.247] HeapFree (in: hHeap=0x470000, dwFlags=0x0, lpMem=0x0 | out: hHeap=0x470000) returned 1 [0167.247] HeapFree (in: hHeap=0x470000, dwFlags=0x0, lpMem=0x0 | out: hHeap=0x470000) returned 1 [0167.247] HeapFree (in: hHeap=0x470000, dwFlags=0x0, lpMem=0x0 | out: hHeap=0x470000) returned 1 [0167.247] HeapFree (in: hHeap=0x470000, dwFlags=0x0, lpMem=0x0 | out: hHeap=0x470000) returned 1 [0167.247] HeapFree (in: hHeap=0x470000, dwFlags=0x0, lpMem=0x0 | out: hHeap=0x470000) returned 1 [0167.247] HeapFree (in: hHeap=0x470000, dwFlags=0x0, lpMem=0x0 | out: hHeap=0x470000) returned 1 [0167.247] HeapFree (in: hHeap=0x470000, dwFlags=0x0, lpMem=0x0 | out: hHeap=0x470000) returned 1 [0167.247] HeapFree (in: hHeap=0x470000, dwFlags=0x0, lpMem=0x0 | out: hHeap=0x470000) returned 1 [0167.247] HeapFree (in: hHeap=0x470000, dwFlags=0x0, lpMem=0x0 | out: hHeap=0x470000) returned 1 [0167.247] HeapFree (in: hHeap=0x470000, dwFlags=0x0, lpMem=0x0 | out: hHeap=0x470000) returned 1 [0167.247] HeapFree (in: hHeap=0x470000, dwFlags=0x0, lpMem=0x0 | out: hHeap=0x470000) returned 1 [0167.247] HeapFree (in: hHeap=0x470000, dwFlags=0x0, lpMem=0x0 | out: hHeap=0x470000) returned 1 [0167.247] HeapFree (in: hHeap=0x470000, dwFlags=0x0, lpMem=0x0 | out: hHeap=0x470000) returned 1 [0167.247] HeapFree (in: hHeap=0x470000, dwFlags=0x0, lpMem=0x0 | out: hHeap=0x470000) returned 1 [0167.247] HeapFree (in: hHeap=0x470000, dwFlags=0x0, lpMem=0x0 | out: hHeap=0x470000) returned 1 [0167.247] HeapFree (in: hHeap=0x470000, dwFlags=0x0, lpMem=0x0 | out: hHeap=0x470000) returned 1 [0167.247] HeapFree (in: hHeap=0x470000, dwFlags=0x0, lpMem=0x0 | out: hHeap=0x470000) returned 1 [0167.247] HeapFree (in: hHeap=0x470000, dwFlags=0x0, lpMem=0x0 | out: hHeap=0x470000) returned 1 [0167.247] HeapFree (in: hHeap=0x470000, dwFlags=0x0, lpMem=0x0 | out: hHeap=0x470000) returned 1 [0167.247] HeapFree (in: hHeap=0x470000, dwFlags=0x0, lpMem=0x0 | out: hHeap=0x470000) returned 1 [0167.247] HeapFree (in: hHeap=0x470000, dwFlags=0x0, lpMem=0x0 | out: hHeap=0x470000) returned 1 [0167.247] HeapFree (in: hHeap=0x470000, dwFlags=0x0, lpMem=0x0 | out: hHeap=0x470000) returned 1 [0167.247] HeapFree (in: hHeap=0x470000, dwFlags=0x0, lpMem=0x0 | out: hHeap=0x470000) returned 1 [0167.247] HeapFree (in: hHeap=0x470000, dwFlags=0x0, lpMem=0x0 | out: hHeap=0x470000) returned 1 [0167.247] HeapFree (in: hHeap=0x470000, dwFlags=0x0, lpMem=0x0 | out: hHeap=0x470000) returned 1 [0167.247] HeapFree (in: hHeap=0x470000, dwFlags=0x0, lpMem=0x0 | out: hHeap=0x470000) returned 1 [0167.247] HeapFree (in: hHeap=0x470000, dwFlags=0x0, lpMem=0x0 | out: hHeap=0x470000) returned 1 [0167.248] HeapFree (in: hHeap=0x470000, dwFlags=0x0, lpMem=0x0 | out: hHeap=0x470000) returned 1 [0167.248] HeapFree (in: hHeap=0x470000, dwFlags=0x0, lpMem=0x0 | out: hHeap=0x470000) returned 1 [0167.248] HeapFree (in: hHeap=0x470000, dwFlags=0x0, lpMem=0x0 | out: hHeap=0x470000) returned 1 [0167.248] HeapFree (in: hHeap=0x470000, dwFlags=0x0, lpMem=0x0 | out: hHeap=0x470000) returned 1 [0167.248] HeapFree (in: hHeap=0x470000, dwFlags=0x0, lpMem=0x0 | out: hHeap=0x470000) returned 1 [0167.248] HeapFree (in: hHeap=0x470000, dwFlags=0x0, lpMem=0x0 | out: hHeap=0x470000) returned 1 [0167.248] HeapFree (in: hHeap=0x470000, dwFlags=0x0, lpMem=0x0 | out: hHeap=0x470000) returned 1 [0167.248] HeapFree (in: hHeap=0x470000, dwFlags=0x0, lpMem=0x0 | out: hHeap=0x470000) returned 1 [0167.248] HeapFree (in: hHeap=0x470000, dwFlags=0x0, lpMem=0x0 | out: hHeap=0x470000) returned 1 [0167.248] HeapFree (in: hHeap=0x470000, dwFlags=0x0, lpMem=0x0 | out: hHeap=0x470000) returned 1 [0167.248] HeapFree (in: hHeap=0x470000, dwFlags=0x0, lpMem=0x0 | out: hHeap=0x470000) returned 1 [0167.248] HeapFree (in: hHeap=0x470000, dwFlags=0x0, lpMem=0x4abd78 | out: hHeap=0x470000) returned 1 [0167.248] HeapFree (in: hHeap=0x470000, dwFlags=0x0, lpMem=0x0 | out: hHeap=0x470000) returned 1 [0167.248] HeapFree (in: hHeap=0x470000, dwFlags=0x0, lpMem=0x0 | out: hHeap=0x470000) returned 1 [0167.248] HeapFree (in: hHeap=0x470000, dwFlags=0x0, lpMem=0x0 | out: hHeap=0x470000) returned 1 [0167.248] HeapFree (in: hHeap=0x470000, dwFlags=0x0, lpMem=0x0 | out: hHeap=0x470000) returned 1 [0167.248] HeapFree (in: hHeap=0x470000, dwFlags=0x0, lpMem=0x0 | out: hHeap=0x470000) returned 1 [0167.248] HeapFree (in: hHeap=0x470000, dwFlags=0x0, lpMem=0x4abc78 | out: hHeap=0x470000) returned 1 [0167.248] HeapFree (in: hHeap=0x470000, dwFlags=0x0, lpMem=0x0 | out: hHeap=0x470000) returned 1 [0167.248] HeapFree (in: hHeap=0x470000, dwFlags=0x0, lpMem=0x0 | out: hHeap=0x470000) returned 1 [0167.248] HeapFree (in: hHeap=0x470000, dwFlags=0x0, lpMem=0x4abc00 | out: hHeap=0x470000) returned 1 [0167.248] HeapFree (in: hHeap=0x470000, dwFlags=0x0, lpMem=0x4ab770 | out: hHeap=0x470000) returned 1 [0167.248] HeapFree (in: hHeap=0x470000, dwFlags=0x0, lpMem=0x0 | out: hHeap=0x470000) returned 1 [0167.248] HeapFree (in: hHeap=0x470000, dwFlags=0x0, lpMem=0x4abbc0 | out: hHeap=0x470000) returned 1 [0167.248] RtlAllocateHeap (HeapHandle=0x470000, Flags=0x0, Size=0x34) returned 0x4af960 [0167.248] RtlAllocateHeap (HeapHandle=0x470000, Flags=0x0, Size=0x70) returned 0x4b0a48 [0167.248] RtlAllocateHeap (HeapHandle=0x470000, Flags=0x0, Size=0xf8) returned 0x4b22f0 [0167.249] RtlAllocateHeap (HeapHandle=0x470000, Flags=0x0, Size=0x8b4) returned 0x4abbc0 [0167.249] RtlAllocateHeap (HeapHandle=0x470000, Flags=0x0, Size=0x10) returned 0x4ab770 [0167.249] HeapFree (in: hHeap=0x470000, dwFlags=0x0, lpMem=0x0 | out: hHeap=0x470000) returned 1 [0167.249] RtlAllocateHeap (HeapHandle=0x470000, Flags=0x0, Size=0x10) returned 0x4ab758 [0167.249] IsCharSpaceW (wch=0x48) returned 0 [0167.249] IsCharAlphaNumericW (ch=0x5c) returned 0 [0167.249] IsCharSpaceW (wch=0x5c) returned 0 [0167.249] RtlAllocateHeap (HeapHandle=0x470000, Flags=0x0, Size=0x18) returned 0x493510 [0167.249] RtlAllocateHeap (HeapHandle=0x470000, Flags=0x0, Size=0x50) returned 0x4ae5e8 [0167.249] RtlAllocateHeap (HeapHandle=0x470000, Flags=0x0, Size=0x14) returned 0x4934b0 [0167.249] IsCharSpaceW (wch=0x41) returned 0 [0167.249] RtlAllocateHeap (HeapHandle=0x470000, Flags=0x0, Size=0xc) returned 0x4ab7b8 [0167.249] IsCharAlphaNumericW (ch=0x20) returned 0 [0167.249] IsCharSpaceW (wch=0x20) returned 1 [0167.249] IsCharSpaceW (wch=0x7b) returned 0 [0167.249] RtlAllocateHeap (HeapHandle=0x470000, Flags=0x0, Size=0x1c) returned 0x4a1b50 [0167.249] IsCharSpaceW (wch=0x20) returned 1 [0167.249] IsCharAlphaNumericW (ch=0x7b) returned 0 [0167.249] IsCharSpaceW (wch=0x62) returned 0 [0167.249] HeapFree (in: hHeap=0x470000, dwFlags=0x0, lpMem=0x4ae5e8 | out: hHeap=0x470000) returned 1 [0167.249] IsCharAlphaNumericW (ch=0x3a) returned 0 [0167.249] IsCharSpaceW (wch=0x3a) returned 0 [0167.249] RtlAllocateHeap (HeapHandle=0x470000, Flags=0x0, Size=0x1c) returned 0x4a1b28 [0167.249] IsCharAlphaNumericW (ch=0x3a) returned 0 [0167.249] IsCharSpaceW (wch=0x75) returned 0 [0167.249] IsCharAlphaNumericW (ch=0x28) returned 0 [0167.249] IsCharSpaceW (wch=0x28) returned 0 [0167.249] IsCharAlphaNumericW (ch=0x28) returned 0 [0167.249] IsCharSpaceW (wch=0x23) returned 0 [0167.249] IsCharSpaceW (wch=0x23) returned 0 [0167.249] IsCharSpaceW (wch=0x7d) returned 0 [0167.249] IsCharAlphaNumericW (ch=0x7d) returned 0 [0167.249] IsCharSpaceW (wch=0x29) returned 0 [0167.249] IsCharSpaceW (wch=0x75) returned 0 [0167.249] IsCharSpaceW (wch=0x75) returned 0 [0167.250] IsCharSpaceW (wch=0x29) returned 0 [0167.250] RtlAllocateHeap (HeapHandle=0x470000, Flags=0x0, Size=0x14) returned 0x4934d0 [0167.250] RtlAllocateHeap (HeapHandle=0x470000, Flags=0x0, Size=0x34) returned 0x4af9e0 [0167.250] RtlAllocateHeap (HeapHandle=0x470000, Flags=0x0, Size=0x40) returned 0x4840c0 [0167.250] RtlAllocateHeap (HeapHandle=0x470000, Flags=0x0, Size=0x10) returned 0x4ab7a0 [0167.250] RtlAllocateHeap (HeapHandle=0x470000, Flags=0x0, Size=0x10) returned 0x4ab788 [0167.250] CoTaskMemFree (pv=0x4a9460) [0167.250] CoTaskMemFree (pv=0x49b6d0) [0167.250] HeapFree (in: hHeap=0x470000, dwFlags=0x0, lpMem=0x4c4c50 | out: hHeap=0x470000) returned 1 [0167.250] HeapFree (in: hHeap=0x470000, dwFlags=0x0, lpMem=0x4d99a0 | out: hHeap=0x470000) returned 1 [0167.250] HeapFree (in: hHeap=0x470000, dwFlags=0x0, lpMem=0x0 | out: hHeap=0x470000) returned 1 [0167.250] HeapFree (in: hHeap=0x470000, dwFlags=0x0, lpMem=0x4aeab8 | out: hHeap=0x470000) returned 1 [0167.250] HeapFree (in: hHeap=0x470000, dwFlags=0x0, lpMem=0x48d058 | out: hHeap=0x470000) returned 1 [0167.251] HeapFree (in: hHeap=0x470000, dwFlags=0x0, lpMem=0x0 | out: hHeap=0x470000) returned 1 [0167.251] HeapFree (in: hHeap=0x470000, dwFlags=0x0, lpMem=0x484198 | out: hHeap=0x470000) returned 1 [0167.251] HeapFree (in: hHeap=0x470000, dwFlags=0x0, lpMem=0x0 | out: hHeap=0x470000) returned 1 [0167.251] HeapFree (in: hHeap=0x470000, dwFlags=0x0, lpMem=0x493570 | out: hHeap=0x470000) returned 1 [0167.251] IUnknown:Release (This=0x4da3c0) returned 0x0 [0167.251] IUnknown:Release (This=0x4da348) returned 0x0 [0167.251] Sleep (dwMilliseconds=0x0) [0167.263] HeapFree (in: hHeap=0x470000, dwFlags=0x0, lpMem=0x0 | out: hHeap=0x470000) returned 1 [0167.264] IUnknown:Release (This=0x49c15c) returned 0xa [0167.264] HeapFree (in: hHeap=0x470000, dwFlags=0x0, lpMem=0x0 | out: hHeap=0x470000) returned 1 [0167.264] HeapFree (in: hHeap=0x470000, dwFlags=0x0, lpMem=0x0 | out: hHeap=0x470000) returned 1 [0167.264] HeapFree (in: hHeap=0x470000, dwFlags=0x0, lpMem=0x0 | out: hHeap=0x470000) returned 1 [0167.264] HeapFree (in: hHeap=0x470000, dwFlags=0x0, lpMem=0x0 | out: hHeap=0x470000) returned 1 [0167.264] HeapFree (in: hHeap=0x470000, dwFlags=0x0, lpMem=0x0 | out: hHeap=0x470000) returned 1 [0167.264] HeapFree (in: hHeap=0x470000, dwFlags=0x0, lpMem=0x0 | out: hHeap=0x470000) returned 1 [0167.264] IUnknown:Release (This=0x49c15c) returned 0x9 [0167.264] HeapFree (in: hHeap=0x470000, dwFlags=0x0, lpMem=0x0 | out: hHeap=0x470000) returned 1 [0167.264] HeapFree (in: hHeap=0x470000, dwFlags=0x0, lpMem=0x4b3ec0 | out: hHeap=0x470000) returned 1 [0167.264] IUnknown:Release (This=0x49c15c) returned 0x8 [0167.264] HeapFree (in: hHeap=0x470000, dwFlags=0x0, lpMem=0x48d820 | out: hHeap=0x470000) returned 1 [0167.264] IUnknown:Release (This=0x49c15c) returned 0x7 [0167.264] HeapFree (in: hHeap=0x470000, dwFlags=0x0, lpMem=0x4b21b8 | out: hHeap=0x470000) returned 1 [0167.264] HeapFree (in: hHeap=0x470000, dwFlags=0x0, lpMem=0x4b2418 | out: hHeap=0x470000) returned 1 [0167.264] HeapFree (in: hHeap=0x470000, dwFlags=0x0, lpMem=0x4b7550 | out: hHeap=0x470000) returned 1 [0167.264] HeapFree (in: hHeap=0x470000, dwFlags=0x0, lpMem=0x4b58d8 | out: hHeap=0x470000) returned 1 [0167.264] HeapFree (in: hHeap=0x470000, dwFlags=0x0, lpMem=0x4b29a0 | out: hHeap=0x470000) returned 1 [0167.264] HeapFree (in: hHeap=0x470000, dwFlags=0x0, lpMem=0x48d708 | out: hHeap=0x470000) returned 1 [0167.264] HeapFree (in: hHeap=0x470000, dwFlags=0x0, lpMem=0x4933b0 | out: hHeap=0x470000) returned 1 [0167.264] HeapFree (in: hHeap=0x470000, dwFlags=0x0, lpMem=0x0 | out: hHeap=0x470000) returned 1 [0167.264] HeapFree (in: hHeap=0x470000, dwFlags=0x0, lpMem=0x49c3d8 | out: hHeap=0x470000) returned 1 [0167.264] HeapFree (in: hHeap=0x470000, dwFlags=0x0, lpMem=0x0 | out: hHeap=0x470000) returned 1 [0167.264] HeapFree (in: hHeap=0x470000, dwFlags=0x0, lpMem=0x0 | out: hHeap=0x470000) returned 1 [0167.264] HeapFree (in: hHeap=0x470000, dwFlags=0x0, lpMem=0x0 | out: hHeap=0x470000) returned 1 [0167.264] HeapFree (in: hHeap=0x470000, dwFlags=0x0, lpMem=0x0 | out: hHeap=0x470000) returned 1 [0167.264] HeapFree (in: hHeap=0x470000, dwFlags=0x0, lpMem=0x4b25b8 | out: hHeap=0x470000) returned 1 [0167.264] HeapFree (in: hHeap=0x470000, dwFlags=0x0, lpMem=0x0 | out: hHeap=0x470000) returned 1 [0167.265] HeapFree (in: hHeap=0x470000, dwFlags=0x0, lpMem=0x0 | out: hHeap=0x470000) returned 1 [0167.265] HeapFree (in: hHeap=0x470000, dwFlags=0x0, lpMem=0x4b2a10 | out: hHeap=0x470000) returned 1 [0167.265] HeapFree (in: hHeap=0x470000, dwFlags=0x0, lpMem=0x4ae698 | out: hHeap=0x470000) returned 1 [0167.265] RtlAllocateHeap (HeapHandle=0x470000, Flags=0x0, Size=0xc) returned 0x4b25b8 [0167.265] RegisterDragDrop (hwnd=0x5011e, pDropTarget=0x6ff696cc) returned 0x0 [0167.265] GetFocus () returned 0x5011e [0167.265] GetFocus () returned 0x5011e [0167.265] CreateUri (in: pwzURI="file:///C:/Users/5p5NrGJn0jS%20HALPmcxz/Desktop/READ_ME.hta", dwFlags=0x2b85, dwReserved=0x0, ppURI=0x26e34c | out: ppURI=0x26e34c*=0x49c4bc) returned 0x0 [0167.265] IUnknown:QueryInterface (in: This=0x49c4bc, riid=0x6fbed6e8*(Data1=0x50295b0c, Data2=0x6b79, Data3=0x4935, Data4=([0]=0xae, [1]=0xd8, [2]=0x5, [3]=0xd8, [4]=0xe, [5]=0xc8, [6]=0x6a, [7]=0x60)), ppvObject=0x26e324 | out: ppvObject=0x26e324*=0x49c4bc) returned 0x0 [0167.265] IUnknown:Release (This=0x49c4bc) returned 0xb [0167.265] IUnknown:AddRef (This=0x49c4bc) returned 0xc [0167.266] RtlAllocateHeap (HeapHandle=0x470000, Flags=0x0, Size=0x78) returned 0x482170 [0167.266] IUnknown:Release (This=0x49c4bc) returned 0xb [0167.266] IUnknown:Release (This=0x49c4bc) returned 0xa [0167.266] RtlAllocateHeap (HeapHandle=0x470000, Flags=0x0, Size=0x100) returned 0x4b21b8 [0167.266] FindResourceW (hModule=0x74650000, lpName=0x1fe, lpType=0x6) returned 0x2de84d0 [0167.266] LoadResource (hModule=0x74650000, hResInfo=0x2de84d0) returned 0x2e0e53c [0167.266] LockResource (hResData=0x2e0e53c) returned 0x2e0e53c [0167.266] VirtualQuery (in: lpAddress=0x2e0e53c, lpBuffer=0x26f4f4, dwLength=0x1c | out: lpBuffer=0x26f4f4*(BaseAddress=0x2e0e000, AllocationBase=0x2b30000, AllocationProtect=0x2, RegionSize=0x115000, State=0x1000, Protect=0x2, Type=0x40000)) returned 0x1c [0167.266] SizeofResource (hModule=0x74650000, hResInfo=0x2de84d0) returned 0xe6 [0167.266] HeapFree (in: hHeap=0x470000, dwFlags=0x0, lpMem=0x482170 | out: hHeap=0x470000) returned 1 [0167.266] RtlReAllocateHeap (Heap=0x470000, Flags=0x0, Ptr=0x4b21b8, Size=0x96) returned 0x4b21b8 [0167.266] RtlAllocateHeap (HeapHandle=0x470000, Flags=0x0, Size=0x9a) returned 0x4b0878 [0167.266] ParseURLW (in: pcszURL="file:///C:/Users/5p5NrGJn0jS%20HALPmcxz/Desktop/READ_ME.hta", ppu=0x26f6b0 | out: ppu=0x26f6b0) returned 0x0 [0167.266] HeapFree (in: hHeap=0x470000, dwFlags=0x0, lpMem=0x0 | out: hHeap=0x470000) returned 1 [0167.266] HeapFree (in: hHeap=0x470000, dwFlags=0x0, lpMem=0x0 | out: hHeap=0x470000) returned 1 [0167.266] HeapFree (in: hHeap=0x470000, dwFlags=0x0, lpMem=0x0 | out: hHeap=0x470000) returned 1 [0167.266] StrCmpNICW (lpStr1="", lpSrch="DTD HTML 4.0") returned 0x0 [0167.266] StrStrIW (lpFirst="", lpSrch="DTD XHTML") returned 0x0 [0167.266] StrStrIW (lpFirst="", lpSrch="DTD HTML 4") returned 0x0 [0167.267] StrStrIW (lpFirst="", lpSrch="DTD HTML 4.") returned 0x0 [0167.267] StrStrIW (lpFirst="", lpSrch=" HTML 2") returned 0x0 [0167.267] StrStrIW (lpFirst="", lpSrch=" HTML 3") returned 0x0 [0167.267] StrStrIW (lpFirst="", lpSrch=" HTML 4") returned 0x0 [0167.267] StrStrIW (lpFirst="", lpSrch="DTD HTML//") returned 0x0 [0167.267] StrStrIW (lpFirst="", lpSrch="DTD W3 HTML//") returned 0x0 [0167.267] StrStrIW (lpFirst="", lpSrch="DTD HTML EXP") returned 0x0 [0167.267] StrStrIW (lpFirst="", lpSrch=" HTML plus") returned 0x0 [0167.267] StrStrIW (lpFirst="", lpSrch="DOCTYPE NETSC") returned 0x0 [0167.267] StrCmpNICW (lpStr1="", nChar=10) returned -30 [0167.267] StrCmpNICW (lpStr1="", lpStr2="", lpStr2="", lpSrch="DTD XHTML 1.0") returned 0x0 [0167.267] StrStrIW (lpFirst="", lpSrch="DTD HTML 4.0") returned 0x0 [0167.267] HeapFree (in: hHeap=0x470000, dwFlags=0x0, lpMem=0x48d058 | out: hHeap=0x470000) returned 1 [0167.267] RtlAllocateHeap (HeapHandle=0x470000, Flags=0x8, Size=0x34) returned 0x4afaa0 [0167.267] RtlAllocateHeap (HeapHandle=0x470000, Flags=0x0, Size=0x24) returned 0x48d058 [0167.267] RtlAllocateHeap (HeapHandle=0x470000, Flags=0x8, Size=0x4c) returned 0x4ae698 [0167.267] RtlAllocateHeap (HeapHandle=0x470000, Flags=0x0, Size=0x10) returned 0x4b25d0 [0167.267] RtlAllocateHeap (HeapHandle=0x470000, Flags=0x8, Size=0x28) returned 0x4b1a00 [0167.267] RtlAllocateHeap (HeapHandle=0x470000, Flags=0x0, Size=0x14) returned 0x4933b0 [0167.267] RtlAllocateHeap (HeapHandle=0x470000, Flags=0x0, Size=0x6) returned 0x4c4c50 [0167.267] RtlAllocateHeap (HeapHandle=0x470000, Flags=0x0, Size=0x40) returned 0x484198 [0167.267] RtlAllocateHeap (HeapHandle=0x470000, Flags=0x8, Size=0x4c) returned 0x4aeab8 [0167.268] HeapFree (in: hHeap=0x470000, dwFlags=0x0, lpMem=0x0 | out: hHeap=0x470000) returned 1 [0167.268] RtlAllocateHeap (HeapHandle=0x470000, Flags=0x0, Size=0x50) returned 0x4ae5e8 [0167.268] HeapFree (in: hHeap=0x470000, dwFlags=0x0, lpMem=0x4ae5e8 | out: hHeap=0x470000) returned 1 [0167.268] HeapFree (in: hHeap=0x470000, dwFlags=0x0, lpMem=0x0 | out: hHeap=0x470000) returned 1 [0167.268] IUnknown:AddRef (This=0x49c66c) returned 0x3 [0167.268] IInternetSecurityManager:MapUrlToZone (in: This=0x6ff696bc, pwszUrl="file:///C:/Users/5p5NrGJn0jS%20HALPmcxz/Desktop/READ_ME.hta", pdwZone=0x26f5ec, dwFlags=0x0 | out: pdwZone=0x26f5ec*=0xffffffff) returned 0x800c0011 [0167.268] CoInternetIsFeatureEnabled (FeatureEntry=0x8, dwFlags=0x2) returned 0x1 [0167.268] CoInternetIsFeatureEnabled (FeatureEntry=0x8, dwFlags=0x2) returned 0x1 [0167.268] CoInternetIsFeatureEnabled (FeatureEntry=0xe, dwFlags=0x2) returned 0x1 [0167.268] IInternetSecurityManager:ProcessUrlAction (in: This=0x6ff696bc, pwszUrl="file:///C:/Users/5p5NrGJn0jS%20HALPmcxz/Desktop/READ_ME.hta", dwAction=0x2106, pPolicy=0x26f5f0, cbPolicy=0x4, pContext=0x0, cbContext=0x0, dwFlags=0x41, dwReserved=0x0 | out: pPolicy=0x26f5f0*=0x0) returned 0x0 [0167.268] CoInternetIsFeatureEnabled (FeatureEntry=0x8, dwFlags=0x2) returned 0x1 [0167.268] IUnknown:Release (This=0x49c66c) returned 0x2 [0167.268] RtlAllocateHeap (HeapHandle=0x470000, Flags=0x0, Size=0x50) returned 0x4ae5e8 [0167.268] HeapFree (in: hHeap=0x470000, dwFlags=0x0, lpMem=0x4ae5e8 | out: hHeap=0x470000) returned 1 [0167.268] HeapFree (in: hHeap=0x470000, dwFlags=0x0, lpMem=0x0 | out: hHeap=0x470000) returned 1 [0167.268] HeapFree (in: hHeap=0x470000, dwFlags=0x0, lpMem=0x4b25d0 | out: hHeap=0x470000) returned 1 [0167.268] RtlAllocateHeap (HeapHandle=0x470000, Flags=0x8, Size=0x28) returned 0x4b1a60 [0167.268] RtlAllocateHeap (HeapHandle=0x470000, Flags=0x8, Size=0x4c) returned 0x4ae5e8 [0167.268] RtlAllocateHeap (HeapHandle=0x470000, Flags=0x0, Size=0x10) returned 0x4b25d0 [0167.268] RtlAllocateHeap (HeapHandle=0x470000, Flags=0x8, Size=0x68) returned 0x4dac80 [0167.268] RtlAllocateHeap (HeapHandle=0x470000, Flags=0x8, Size=0x30) returned 0x48d708 [0167.268] RtlAllocateHeap (HeapHandle=0x470000, Flags=0x8, Size=0x4c) returned 0x4ae640 [0167.269] RtlAllocateHeap (HeapHandle=0x470000, Flags=0x8, Size=0x28) returned 0x4b1a30 [0167.269] RtlAllocateHeap (HeapHandle=0x470000, Flags=0x0, Size=0x14) returned 0x493570 [0167.269] RtlAllocateHeap (HeapHandle=0x470000, Flags=0x0, Size=0xc) returned 0x4b2750 [0167.269] RtlAllocateHeap (HeapHandle=0x470000, Flags=0x0, Size=0x40) returned 0x484228 [0167.269] RtlAllocateHeap (HeapHandle=0x470000, Flags=0x8, Size=0x4c) returned 0x4aec70 [0167.269] RtlAllocateHeap (HeapHandle=0x470000, Flags=0x8, Size=0x5c) returned 0x4cd930 [0167.269] RtlAllocateHeap (HeapHandle=0x470000, Flags=0x0, Size=0x50) returned 0x4aec18 [0167.269] RtlAllocateHeap (HeapHandle=0x470000, Flags=0x8, Size=0x6c) returned 0x4a9460 [0167.269] RtlAllocateHeap (HeapHandle=0x470000, Flags=0x8, Size=0x108) returned 0x4b23f0 [0167.269] HeapFree (in: hHeap=0x470000, dwFlags=0x0, lpMem=0x0 | out: hHeap=0x470000) returned 1 [0167.269] RtlAllocateHeap (HeapHandle=0x470000, Flags=0x0, Size=0x50) returned 0x4aebc0 [0167.269] HeapFree (in: hHeap=0x470000, dwFlags=0x0, lpMem=0x4aebc0 | out: hHeap=0x470000) returned 1 [0167.269] HeapFree (in: hHeap=0x470000, dwFlags=0x0, lpMem=0x0 | out: hHeap=0x470000) returned 1 [0167.269] RtlAllocateHeap (HeapHandle=0x470000, Flags=0x0, Size=0x50) returned 0x4aebc0 [0167.269] HeapFree (in: hHeap=0x470000, dwFlags=0x0, lpMem=0x4aebc0 | out: hHeap=0x470000) returned 1 [0167.269] HeapFree (in: hHeap=0x470000, dwFlags=0x0, lpMem=0x0 | out: hHeap=0x470000) returned 1 [0167.269] RtlAllocateHeap (HeapHandle=0x470000, Flags=0x0, Size=0x50) returned 0x4aebc0 [0167.269] HeapFree (in: hHeap=0x470000, dwFlags=0x0, lpMem=0x4aebc0 | out: hHeap=0x470000) returned 1 [0167.269] HeapFree (in: hHeap=0x470000, dwFlags=0x0, lpMem=0x0 | out: hHeap=0x470000) returned 1 [0167.269] HeapFree (in: hHeap=0x470000, dwFlags=0x0, lpMem=0x4b25d0 | out: hHeap=0x470000) returned 1 [0167.269] HeapFree (in: hHeap=0x470000, dwFlags=0x0, lpMem=0x4b23f0 | out: hHeap=0x470000) returned 1 [0167.269] HeapFree (in: hHeap=0x470000, dwFlags=0x0, lpMem=0x0 | out: hHeap=0x470000) returned 1 [0167.269] HeapFree (in: hHeap=0x470000, dwFlags=0x0, lpMem=0x4a9460 | out: hHeap=0x470000) returned 1 [0167.270] HeapFree (in: hHeap=0x470000, dwFlags=0x0, lpMem=0x0 | out: hHeap=0x470000) returned 1 [0167.270] RtlAllocateHeap (HeapHandle=0x470000, Flags=0x0, Size=0x24) returned 0x4b19d0 [0167.270] RtlAllocateHeap (HeapHandle=0x470000, Flags=0x0, Size=0x28) returned 0x4b1b50 [0167.270] ScreenToClient (in: hWnd=0x5011e, lpPoint=0x26f710 | out: lpPoint=0x26f710) returned 1 [0167.270] RtlAllocateHeap (HeapHandle=0x470000, Flags=0x8, Size=0x30) returned 0x48d820 [0167.270] GetCurrentThreadId () returned 0x220 [0167.270] HeapFree (in: hHeap=0x470000, dwFlags=0x0, lpMem=0x48d820 | out: hHeap=0x470000) returned 1 [0167.270] GetCurrentThreadId () returned 0x220 [0167.270] HeapFree (in: hHeap=0x470000, dwFlags=0x0, lpMem=0x4b19d0 | out: hHeap=0x470000) returned 1 [0167.270] HeapFree (in: hHeap=0x470000, dwFlags=0x0, lpMem=0x4aec18 | out: hHeap=0x470000) returned 1 [0167.270] HeapFree (in: hHeap=0x470000, dwFlags=0x0, lpMem=0x4cd930 | out: hHeap=0x470000) returned 1 [0167.270] HeapFree (in: hHeap=0x470000, dwFlags=0x0, lpMem=0x0 | out: hHeap=0x470000) returned 1 [0167.270] HeapFree (in: hHeap=0x470000, dwFlags=0x0, lpMem=0x4b4d80 | out: hHeap=0x470000) returned 1 [0167.273] RtlAllocateHeap (HeapHandle=0x470000, Flags=0x8, Size=0x38) returned 0x4afae0 [0167.273] StrChrW (lpStart="HTA:APPLICATION", wMatch=0x3a) returned=":APPLICATION" [0167.273] RtlAllocateHeap (HeapHandle=0x470000, Flags=0x0, Size=0xc) returned 0x4b25d0 [0167.273] RtlAllocateHeap (HeapHandle=0x470000, Flags=0x0, Size=0x1c) returned 0x4da348 [0167.273] RtlAllocateHeap (HeapHandle=0x470000, Flags=0x0, Size=0x1c) returned 0x4da370 [0167.273] RtlAllocateHeap (HeapHandle=0x470000, Flags=0x0, Size=0x14) returned 0x493730 [0167.273] RtlAllocateHeap (HeapHandle=0x470000, Flags=0x0, Size=0x6) returned 0x4c4c80 [0167.273] RtlAllocateHeap (HeapHandle=0x470000, Flags=0x0, Size=0x40) returned 0x4c7fd8 [0167.273] StrCmpNICW (lpStr1="on", lpStr2="Sy", nChar=2) returned -4 [0167.273] RtlAllocateHeap (HeapHandle=0x470000, Flags=0x0, Size=0x16) returned 0x493530 [0167.273] RtlAllocateHeap (HeapHandle=0x470000, Flags=0x0, Size=0x18) returned 0x4c1aa8 [0167.274] StrCmpNICW (lpStr1="on", lpStr2="IC", nChar=2) returned 6 [0167.274] RtlAllocateHeap (HeapHandle=0x470000, Flags=0x0, Size=0x2a) returned 0x48d820 [0167.274] RtlAllocateHeap (HeapHandle=0x470000, Flags=0x0, Size=0x8) returned 0x4c4cc0 [0167.274] StrCmpNICW (lpStr1="on", lpStr2="SI", nChar=2) returned -4 [0167.274] RtlAllocateHeap (HeapHandle=0x470000, Flags=0x0, Size=0x1a) returned 0x4da3c0 [0167.274] RtlAllocateHeap (HeapHandle=0x470000, Flags=0x0, Size=0x8) returned 0x4c4cd0 [0167.274] StrCmpNICW (lpStr1="on", lpStr2="SC", nChar=2) returned -4 [0167.274] RtlAllocateHeap (HeapHandle=0x470000, Flags=0x0, Size=0x2c) returned 0x48d858 [0167.274] RtlAllocateHeap (HeapHandle=0x470000, Flags=0x0, Size=0xe) returned 0x4d99a0 [0167.274] RtlReAllocateHeap (Heap=0x470000, Flags=0x0, Ptr=0x4c7fd8, Size=0x60) returned 0x4cd930 [0167.274] StrCmpNICW (lpStr1="on", lpStr2="AP", nChar=2) returned 14 [0167.274] StrChrW (lpStart="HTA:APPLICATION", wMatch=0x3a) returned=":APPLICATION" [0167.274] StrCmpICW (pszStr1="PUBLIC", pszStr2="HTA") returned 8 [0167.274] StrCmpICW (pszStr1="HTA", pszStr2="HTA") returned 0 [0167.274] StrCmpICW (pszStr1="APPLICATION", pszStr2="APPLICATION") returned 0 [0167.275] RtlAllocateHeap (HeapHandle=0x470000, Flags=0x8, Size=0x4c) returned 0x4aec18 [0167.275] RtlAllocateHeap (HeapHandle=0x470000, Flags=0x0, Size=0x10) returned 0x4d9ac0 [0167.276] HeapFree (in: hHeap=0x470000, dwFlags=0x0, lpMem=0x0 | out: hHeap=0x470000) returned 1 [0167.276] RtlAllocateHeap (HeapHandle=0x470000, Flags=0x0, Size=0x50) returned 0x4aebc0 [0167.276] HeapFree (in: hHeap=0x470000, dwFlags=0x0, lpMem=0x4aebc0 | out: hHeap=0x470000) returned 1 [0167.276] IsCharSpaceW (wch=0x75) returned 0 [0167.276] StrCmpNICW (lpStr1="url", lpStr2="URL", nChar=3) returned 0 [0167.276] IsCharSpaceW (wch=0x28) returned 0 [0167.276] IsCharSpaceW (wch=0x23) returned 0 [0167.276] IsCharSpaceW (wch=0x23) returned 0 [0167.276] IsCharSpaceW (wch=0x64) returned 0 [0167.276] IsCharSpaceW (wch=0x65) returned 0 [0167.276] IsCharSpaceW (wch=0x66) returned 0 [0167.276] IsCharSpaceW (wch=0x61) returned 0 [0167.276] IsCharSpaceW (wch=0x75) returned 0 [0167.276] IsCharSpaceW (wch=0x6c) returned 0 [0167.276] IsCharSpaceW (wch=0x74) returned 0 [0167.276] IsCharSpaceW (wch=0x23) returned 0 [0167.276] IsCharSpaceW (wch=0x41) returned 0 [0167.276] IsCharSpaceW (wch=0x50) returned 0 [0167.276] IsCharSpaceW (wch=0x50) returned 0 [0167.276] IsCharSpaceW (wch=0x4c) returned 0 [0167.276] IsCharSpaceW (wch=0x49) returned 0 [0167.276] IsCharSpaceW (wch=0x43) returned 0 [0167.276] IsCharSpaceW (wch=0x41) returned 0 [0167.276] IsCharSpaceW (wch=0x54) returned 0 [0167.276] IsCharSpaceW (wch=0x49) returned 0 [0167.276] IsCharSpaceW (wch=0x4f) returned 0 [0167.276] IsCharSpaceW (wch=0x4e) returned 0 [0167.276] IsCharSpaceW (wch=0x29) returned 0 [0167.276] RtlAllocateHeap (HeapHandle=0x470000, Flags=0x0, Size=0x36) returned 0x4afb20 [0167.276] RtlAllocateHeap (HeapHandle=0x470000, Flags=0x0, Size=0x10) returned 0x4d9ad8 [0167.276] IsCharSpaceW (wch=0x0) returned 0 [0167.276] HeapFree (in: hHeap=0x470000, dwFlags=0x0, lpMem=0x4afb20 | out: hHeap=0x470000) returned 1 [0167.276] HeapFree (in: hHeap=0x470000, dwFlags=0x0, lpMem=0x4d9ad8 | out: hHeap=0x470000) returned 1 [0167.276] HeapFree (in: hHeap=0x470000, dwFlags=0x0, lpMem=0x0 | out: hHeap=0x470000) returned 1 [0167.277] RtlAllocateHeap (HeapHandle=0x470000, Flags=0x8, Size=0x18) returned 0x4c1ac8 [0167.277] RtlAllocateHeap (HeapHandle=0x470000, Flags=0x8, Size=0x18) returned 0x4c1ae8 [0167.277] RtlAllocateHeap (HeapHandle=0x470000, Flags=0x0, Size=0x20) returned 0x4da500 [0167.277] HeapFree (in: hHeap=0x470000, dwFlags=0x0, lpMem=0x4d9ac0 | out: hHeap=0x470000) returned 1 [0167.277] RtlAllocateHeap (HeapHandle=0x470000, Flags=0x0, Size=0x50) returned 0x4aebc0 [0167.277] HeapFree (in: hHeap=0x470000, dwFlags=0x0, lpMem=0x4c1ac8 | out: hHeap=0x470000) returned 1 [0167.277] HeapFree (in: hHeap=0x470000, dwFlags=0x0, lpMem=0x4aebc0 | out: hHeap=0x470000) returned 1 [0167.277] IsCharSpaceW (wch=0x75) returned 0 [0167.277] StrCmpNICW (lpStr1="url", lpStr2="URL", nChar=3) returned 0 [0167.277] IsCharSpaceW (wch=0x28) returned 0 [0167.277] IsCharSpaceW (wch=0x23) returned 0 [0167.277] IsCharSpaceW (wch=0x23) returned 0 [0167.277] IsCharSpaceW (wch=0x64) returned 0 [0167.277] IsCharSpaceW (wch=0x65) returned 0 [0167.277] IsCharSpaceW (wch=0x66) returned 0 [0167.277] IsCharSpaceW (wch=0x61) returned 0 [0167.277] IsCharSpaceW (wch=0x75) returned 0 [0167.277] IsCharSpaceW (wch=0x6c) returned 0 [0167.277] IsCharSpaceW (wch=0x74) returned 0 [0167.277] IsCharSpaceW (wch=0x23) returned 0 [0167.277] IsCharSpaceW (wch=0x41) returned 0 [0167.277] IsCharSpaceW (wch=0x50) returned 0 [0167.277] IsCharSpaceW (wch=0x50) returned 0 [0167.277] IsCharSpaceW (wch=0x4c) returned 0 [0167.277] IsCharSpaceW (wch=0x49) returned 0 [0167.277] IsCharSpaceW (wch=0x43) returned 0 [0167.277] IsCharSpaceW (wch=0x41) returned 0 [0167.277] IsCharSpaceW (wch=0x54) returned 0 [0167.277] IsCharSpaceW (wch=0x49) returned 0 [0167.277] IsCharSpaceW (wch=0x4f) returned 0 [0167.277] IsCharSpaceW (wch=0x4e) returned 0 [0167.277] IsCharSpaceW (wch=0x29) returned 0 [0167.278] RtlAllocateHeap (HeapHandle=0x470000, Flags=0x0, Size=0x36) returned 0x4afb20 [0167.278] RtlAllocateHeap (HeapHandle=0x470000, Flags=0x0, Size=0x10) returned 0x4d9ac0 [0167.278] IsCharSpaceW (wch=0x0) returned 0 [0167.278] RtlAllocateHeap (HeapHandle=0x470000, Flags=0x8, Size=0x54) returned 0x4c5570 [0167.278] RtlReAllocateHeap (Heap=0x470000, Flags=0x0, Ptr=0x4cd930, Size=0x90) returned 0x4b2258 [0167.278] CoInternetIsFeatureEnabled (FeatureEntry=0x6, dwFlags=0x2) returned 0x0 [0167.279] IUnknown:AddRef (This=0x49c66c) returned 0x3 [0167.279] IInternetSecurityManager:MapUrlToZone (in: This=0x6ff696bc, pwszUrl="file:///C:/Users/5p5NrGJn0jS%20HALPmcxz/Desktop/READ_ME.hta", pdwZone=0x26d75c, dwFlags=0x0 | out: pdwZone=0x26d75c*=0xffffffff) returned 0x800c0011 [0167.279] CoInternetIsFeatureEnabled (FeatureEntry=0x8, dwFlags=0x2) returned 0x1 [0167.279] CoInternetIsFeatureEnabled (FeatureEntry=0x8, dwFlags=0x2) returned 0x1 [0167.279] CoInternetIsFeatureEnabled (FeatureEntry=0xe, dwFlags=0x2) returned 0x1 [0167.279] IInternetSecurityManager:ProcessUrlAction (in: This=0x6ff696bc, pwszUrl="file:///C:/Users/5p5NrGJn0jS%20HALPmcxz/Desktop/READ_ME.hta", dwAction=0x2000, pPolicy=0x26d760, cbPolicy=0x4, pContext=0x4afb2c*=0x23, cbContext=0x2a, dwFlags=0x40, dwReserved=0x0 | out: pPolicy=0x26d760*=0x0) returned 0x0 [0167.280] CoInternetIsFeatureEnabled (FeatureEntry=0x8, dwFlags=0x2) returned 0x1 [0167.280] IUnknown:Release (This=0x49c66c) returned 0x2 [0167.280] RtlAllocateHeap (HeapHandle=0x470000, Flags=0x8, Size=0x50) returned 0x4aebc0 [0167.280] RtlAllocateHeap (HeapHandle=0x470000, Flags=0x8, Size=0x34) returned 0x4afb60 [0167.280] StrChrW (lpStart="default#APPLICATION", wMatch=0x23) returned="#APPLICATION" [0167.280] RtlAllocateHeap (HeapHandle=0x470000, Flags=0x0, Size=0x12) returned 0x4c1ac8 [0167.280] StrChrW (lpStart="default", wMatch=0x23) returned 0x0 [0167.280] RtlAllocateHeap (HeapHandle=0x470000, Flags=0x8, Size=0xa8) returned 0x4d6898 [0167.280] StrCmpNICW (lpStr1="#default", lpStr2="#default", nChar=8) returned 0 [0167.280] RtlAllocateHeap (HeapHandle=0x470000, Flags=0x0, Size=0x16) returned 0x4c1b08 [0167.280] StrCmpNICW (lpStr1="#default", lpStr2="#default", nChar=8) returned 0 [0167.280] RtlAllocateHeap (HeapHandle=0x470000, Flags=0x8, Size=0x14) returned 0x4c1b28 [0167.280] GetCurrentThreadId () returned 0x220 [0167.280] RtlAllocateHeap (HeapHandle=0x470000, Flags=0x0, Size=0x10) returned 0x49b328 [0167.280] RtlAllocateHeap (HeapHandle=0x470000, Flags=0x8, Size=0x1a) returned 0x4da528 [0167.280] RtlAllocateHeap (HeapHandle=0x470000, Flags=0x8, Size=0x94) returned 0x4dbc68 [0167.280] HeapFree (in: hHeap=0x470000, dwFlags=0x0, lpMem=0x0 | out: hHeap=0x470000) returned 1 [0167.280] RtlAllocateHeap (HeapHandle=0x470000, Flags=0x8, Size=0xa8) returned 0x4c16d0 [0167.280] RtlAllocateHeap (HeapHandle=0x470000, Flags=0x0, Size=0x2e) returned 0x48d970 [0167.280] StrCmpNICW (lpStr1="#default", lpStr2="#default", nChar=8) returned 0 [0167.281] RtlAllocateHeap (HeapHandle=0x470000, Flags=0x8, Size=0x14) returned 0x4c1b48 [0167.281] GetCurrentThreadId () returned 0x220 [0167.281] RtlAllocateHeap (HeapHandle=0x470000, Flags=0x8, Size=0x32) returned 0x4afba0 [0167.281] HeapFree (in: hHeap=0x470000, dwFlags=0x0, lpMem=0x4c1ac8 | out: hHeap=0x470000) returned 1 [0167.281] StrChrW (lpStart="default#APPLICATION", wMatch=0x23) returned="#APPLICATION" [0167.281] GetProcAddress (hModule=0x76e40000, lpProcName=0x2) returned 0x76e44642 [0167.281] StrCmpICW (pszStr1="APPLICATION", pszStr2="Application") returned 0 [0167.281] GetCurrentThreadId () returned 0x220 [0167.281] RtlAllocateHeap (HeapHandle=0x470000, Flags=0x8, Size=0x24) returned 0x4b19d0 [0167.281] RtlAllocateHeap (HeapHandle=0x470000, Flags=0x0, Size=0x14) returned 0x4c1ac8 [0167.281] RtlAllocateHeap (HeapHandle=0x470000, Flags=0x0, Size=0x6a) returned 0x4a9460 [0167.281] RtlAllocateHeap (HeapHandle=0x470000, Flags=0x0, Size=0x40) returned 0x4c7fd8 [0167.281] GetCurrentThreadId () returned 0x220 [0167.282] CoInternetIsFeatureEnabled (FeatureEntry=0x0, dwFlags=0x2) returned 0x0 [0167.282] CoInternetIsFeatureEnabled (FeatureEntry=0x0, dwFlags=0x2) returned 0x0 [0167.282] LoadLibraryA (lpLibFileName="oleaut32.dll") returned 0x76e40000 [0167.282] GetProcAddress (hModule=0x76e40000, lpProcName="VariantClear") returned 0x76e43eae [0167.282] CoInternetIsFeatureEnabled (FeatureEntry=0x0, dwFlags=0x2) returned 0x0 [0167.282] CoInternetIsFeatureEnabled (FeatureEntry=0x0, dwFlags=0x2) returned 0x0 [0167.282] CoInternetIsFeatureEnabled (FeatureEntry=0x0, dwFlags=0x2) returned 0x0 [0167.282] CoInternetIsFeatureEnabled (FeatureEntry=0x0, dwFlags=0x2) returned 0x0 [0167.282] CoInternetIsFeatureEnabled (FeatureEntry=0x0, dwFlags=0x2) returned 0x0 [0167.282] CoInternetIsFeatureEnabled (FeatureEntry=0x0, dwFlags=0x2) returned 0x0 [0167.282] CoInternetIsFeatureEnabled (FeatureEntry=0x0, dwFlags=0x2) returned 0x0 [0167.283] CoInternetIsFeatureEnabled (FeatureEntry=0x0, dwFlags=0x2) returned 0x0 [0167.283] CoInternetIsFeatureEnabled (FeatureEntry=0x0, dwFlags=0x2) returned 0x0 [0167.283] CoInternetIsFeatureEnabled (FeatureEntry=0x0, dwFlags=0x2) returned 0x0 [0167.283] CoInternetIsFeatureEnabled (FeatureEntry=0x0, dwFlags=0x2) returned 0x0 [0167.283] CoInternetIsFeatureEnabled (FeatureEntry=0x0, dwFlags=0x2) returned 0x0 [0167.283] CoInternetIsFeatureEnabled (FeatureEntry=0x0, dwFlags=0x2) returned 0x0 [0167.283] CoInternetIsFeatureEnabled (FeatureEntry=0x0, dwFlags=0x2) returned 0x0 [0167.283] CoInternetIsFeatureEnabled (FeatureEntry=0x0, dwFlags=0x2) returned 0x0 [0167.283] CoInternetIsFeatureEnabled (FeatureEntry=0x0, dwFlags=0x2) returned 0x0 [0167.283] CoInternetIsFeatureEnabled (FeatureEntry=0x0, dwFlags=0x2) returned 0x0 [0167.283] CoInternetIsFeatureEnabled (FeatureEntry=0x0, dwFlags=0x2) returned 0x0 [0167.283] CoInternetIsFeatureEnabled (FeatureEntry=0x0, dwFlags=0x2) returned 0x0 [0167.283] GetCurrentThreadId () returned 0x220 [0167.283] RtlAllocateHeap (HeapHandle=0x470000, Flags=0x0, Size=0x28) returned 0x4b1b80 [0167.283] CoInternetIsFeatureEnabled (FeatureEntry=0x0, dwFlags=0x2) returned 0x0 [0167.284] RtlAllocateHeap (HeapHandle=0x470000, Flags=0x8, Size=0x24) returned 0x4b1bb0 [0167.285] CoInternetIsFeatureEnabled (FeatureEntry=0x0, dwFlags=0x2) returned 0x0 [0167.285] CoInternetIsFeatureEnabled (FeatureEntry=0x0, dwFlags=0x2) returned 0x0 [0167.285] CoInternetIsFeatureEnabled (FeatureEntry=0x0, dwFlags=0x2) returned 0x0 [0167.285] CoInternetIsFeatureEnabled (FeatureEntry=0x0, dwFlags=0x2) returned 0x0 [0167.285] CoInternetIsFeatureEnabled (FeatureEntry=0x0, dwFlags=0x2) returned 0x0 [0167.285] CoInternetIsFeatureEnabled (FeatureEntry=0x0, dwFlags=0x2) returned 0x0 [0167.285] GetCurrentThreadId () returned 0x220 [0167.285] CoInternetIsFeatureEnabled (FeatureEntry=0x0, dwFlags=0x2) returned 0x0 [0167.285] CoInternetIsFeatureEnabled (FeatureEntry=0x0, dwFlags=0x2) returned 0x0 [0167.285] RtlAllocateHeap (HeapHandle=0x470000, Flags=0x0, Size=0xe) returned 0x4aba70 [0167.285] CoInternetIsFeatureEnabled (FeatureEntry=0x0, dwFlags=0x2) returned 0x0 [0167.285] CoInternetIsFeatureEnabled (FeatureEntry=0x0, dwFlags=0x2) returned 0x0 [0167.285] CoInternetIsFeatureEnabled (FeatureEntry=0x0, dwFlags=0x2) returned 0x0 [0167.285] CoInternetIsFeatureEnabled (FeatureEntry=0x0, dwFlags=0x2) returned 0x0 [0167.286] CoInternetIsFeatureEnabled (FeatureEntry=0x0, dwFlags=0x2) returned 0x0 [0167.286] CoInternetIsFeatureEnabled (FeatureEntry=0x0, dwFlags=0x2) returned 0x0 [0167.286] CoInternetIsFeatureEnabled (FeatureEntry=0x0, dwFlags=0x2) returned 0x0 [0167.286] GetCurrentThreadId () returned 0x220 [0167.286] CoInternetIsFeatureEnabled (FeatureEntry=0x0, dwFlags=0x2) returned 0x0 [0167.286] CoInternetIsFeatureEnabled (FeatureEntry=0x0, dwFlags=0x2) returned 0x0 [0167.286] CoInternetIsFeatureEnabled (FeatureEntry=0x0, dwFlags=0x2) returned 0x0 [0167.286] CoInternetIsFeatureEnabled (FeatureEntry=0x0, dwFlags=0x2) returned 0x0 [0167.286] CoInternetIsFeatureEnabled (FeatureEntry=0x0, dwFlags=0x2) returned 0x0 [0167.286] CoInternetIsFeatureEnabled (FeatureEntry=0x0, dwFlags=0x2) returned 0x0 [0167.286] CoInternetIsFeatureEnabled (FeatureEntry=0x0, dwFlags=0x2) returned 0x0 [0167.286] CoInternetIsFeatureEnabled (FeatureEntry=0x0, dwFlags=0x2) returned 0x0 [0167.286] CoInternetIsFeatureEnabled (FeatureEntry=0x0, dwFlags=0x2) returned 0x0 [0167.286] GetCurrentThreadId () returned 0x220 [0167.286] CoInternetIsFeatureEnabled (FeatureEntry=0x0, dwFlags=0x2) returned 0x0 [0167.286] CoInternetIsFeatureEnabled (FeatureEntry=0x0, dwFlags=0x2) returned 0x0 [0167.286] RtlReAllocateHeap (Heap=0x470000, Flags=0x0, Ptr=0x4c7fd8, Size=0x60) returned 0x4cd930 [0167.287] CoInternetIsFeatureEnabled (FeatureEntry=0x0, dwFlags=0x2) returned 0x0 [0167.287] CoInternetIsFeatureEnabled (FeatureEntry=0x0, dwFlags=0x2) returned 0x0 [0167.287] CoInternetIsFeatureEnabled (FeatureEntry=0x0, dwFlags=0x2) returned 0x0 [0167.287] GetCurrentThreadId () returned 0x220 [0167.287] CoInternetIsFeatureEnabled (FeatureEntry=0x0, dwFlags=0x2) returned 0x0 [0167.287] CoInternetIsFeatureEnabled (FeatureEntry=0x0, dwFlags=0x2) returned 0x0 [0167.287] RtlAllocateHeap (HeapHandle=0x470000, Flags=0x0, Size=0x18) returned 0x4c1b68 [0167.287] CreateUri (in: pwzURI="msiexec.exe", dwFlags=0x2b85, dwReserved=0x0, ppURI=0x26d758 | out: ppURI=0x26d758*=0x49c3e4) returned 0x0 [0167.287] ParseURLW (in: pcszURL="file:///C:/Users/5p5NrGJn0jS%20HALPmcxz/Desktop/READ_ME.hta", ppu=0x26d5e8 | out: ppu=0x26d5e8) returned 0x0 [0167.287] CreateUri (in: pwzURI="file:///C:/Users/5p5NrGJn0jS%20HALPmcxz/Desktop/READ_ME.hta", dwFlags=0x2b85, dwReserved=0x0, ppURI=0x26d6a4 | out: ppURI=0x26d6a4*=0x49c4bc) returned 0x0 [0167.287] IUnknown:QueryInterface (in: This=0x49c4bc, riid=0x6fbed6e8*(Data1=0x50295b0c, Data2=0x6b79, Data3=0x4935, Data4=([0]=0xae, [1]=0xd8, [2]=0x5, [3]=0xd8, [4]=0xe, [5]=0xc8, [6]=0x6a, [7]=0x60)), ppvObject=0x26d66c | out: ppvObject=0x26d66c*=0x49c4bc) returned 0x0 [0167.287] IUnknown:Release (This=0x49c4bc) returned 0xb [0167.287] IUnknown:AddRef (This=0x49c4bc) returned 0xc [0167.288] CoInternetCombineIUri (in: pBaseUri=0x49c4bc, pRelativeUri=0x49c3e4, dwCombineFlags=0x6000000, ppCombinedUri=0x26d6d8, dwReserved=0x0 | out: ppCombinedUri=0x26d6d8*=0x49d3ec) returned 0x0 [0167.289] IUnknown:Release (This=0x49c4bc) returned 0xc [0167.289] IUnknown:Release (This=0x49c4bc) returned 0xb [0167.289] IUnknown:QueryInterface (in: This=0x49d3ec, riid=0x6fbed6e8*(Data1=0x50295b0c, Data2=0x6b79, Data3=0x4935, Data4=([0]=0xae, [1]=0xd8, [2]=0x5, [3]=0xd8, [4]=0xe, [5]=0xc8, [6]=0x6a, [7]=0x60)), ppvObject=0x26d62c | out: ppvObject=0x26d62c*=0x49d3ec) returned 0x0 [0167.289] IUnknown:Release (This=0x49d3ec) returned 0x2 [0167.289] IUnknown:AddRef (This=0x49d3ec) returned 0x3 [0167.289] IUri:GetAbsoluteUri (in: This=0x49d3ec, pbstrAbsoluteUri=0x26d620 | out: pbstrAbsoluteUri=0x26d620*="file:///C:/Users/5p5NrGJn0jS%20HALPmcxz/Desktop/msiexec.exe") returned 0x0 [0167.289] RtlAllocateHeap (HeapHandle=0x470000, Flags=0x8, Size=0xcc) returned 0x49d4b8 [0167.290] IUnknown:AddRef (This=0x49d3ec) returned 0x4 [0167.290] IUnknown:QueryInterface (in: This=0x49d3ec, riid=0x6fbed6e8*(Data1=0x50295b0c, Data2=0x6b79, Data3=0x4935, Data4=([0]=0xae, [1]=0xd8, [2]=0x5, [3]=0xd8, [4]=0xe, [5]=0xc8, [6]=0x6a, [7]=0x60)), ppvObject=0x26d5fc | out: ppvObject=0x26d5fc*=0x49d3ec) returned 0x0 [0167.290] IUnknown:Release (This=0x49d3ec) returned 0x4 [0167.290] IUnknown:AddRef (This=0x49d3ec) returned 0x5 [0167.290] RtlAllocateHeap (HeapHandle=0x470000, Flags=0x0, Size=0x20) returned 0x4da5a0 [0167.290] IUnknown:Release (This=0x49d3ec) returned 0x4 [0167.290] RtlAllocateHeap (HeapHandle=0x470000, Flags=0x8, Size=0x3c) returned 0x4c7fd8 [0167.290] RtlAllocateHeap (HeapHandle=0x470000, Flags=0x8, Size=0x58) returned 0x4c55d0 [0167.290] RegOpenKeyExW (in: hKey=0x80000002, lpSubKey="Software\\Microsoft\\Internet Explorer\\Main\\FeatureControl", ulOptions=0x0, samDesired=0x1, phkResult=0x26d5a8 | out: phkResult=0x26d5a8*=0x250) returned 0x0 [0167.290] RegOpenKeyExW (in: hKey=0x80000001, lpSubKey="Software\\Microsoft\\Internet Explorer\\Main\\FeatureControl", ulOptions=0x0, samDesired=0x1, phkResult=0x26d5ac | out: phkResult=0x26d5ac*=0x14c) returned 0x0 [0167.290] RegOpenKeyExW (in: hKey=0x14c, lpSubKey="FEATURE_SUBDOWNLOAD_LOCKDOWN", ulOptions=0x0, samDesired=0x1, phkResult=0x26d568 | out: phkResult=0x26d568*=0x0) returned 0x2 [0167.290] RegOpenKeyExW (in: hKey=0x250, lpSubKey="FEATURE_SUBDOWNLOAD_LOCKDOWN", ulOptions=0x0, samDesired=0x1, phkResult=0x26d568 | out: phkResult=0x26d568*=0x258) returned 0x0 [0167.290] SHRegGetValueW () returned 0x2 [0167.290] SHRegGetValueW () returned 0x2 [0167.291] RegCloseKey (hKey=0x258) returned 0x0 [0167.291] RegCloseKey (hKey=0x0) returned 0x6 [0167.291] RegCloseKey (hKey=0x0) returned 0x6 [0167.291] RegCloseKey (hKey=0x250) returned 0x0 [0167.291] RegCloseKey (hKey=0x14c) returned 0x0 [0167.291] IInternetSecurityManager:MapUrlToZone (in: This=0x4a1518, pwszUrl="file:///C:/Users/5p5NrGJn0jS%20HALPmcxz/Desktop/READ_ME.hta", pdwZone=0x26d638, dwFlags=0x0 | out: pdwZone=0x26d638*=0x0) returned 0x0 [0167.291] RtlAllocateHeap (HeapHandle=0x470000, Flags=0x8, Size=0x1b0) returned 0x4ac480 [0167.291] IUnknown:QueryInterface (in: This=0x49d3ec, riid=0x6fbed6e8*(Data1=0x50295b0c, Data2=0x6b79, Data3=0x4935, Data4=([0]=0xae, [1]=0xd8, [2]=0x5, [3]=0xd8, [4]=0xe, [5]=0xc8, [6]=0x6a, [7]=0x60)), ppvObject=0x26d334 | out: ppvObject=0x26d334*=0x49d3ec) returned 0x0 [0167.291] IUnknown:Release (This=0x49d3ec) returned 0x4 [0167.291] IUnknown:AddRef (This=0x49d3ec) returned 0x5 [0167.291] ParseURLW (in: pcszURL="file:///C:/Users/5p5NrGJn0jS%20HALPmcxz/Desktop/msiexec.exe", ppu=0x26d2f8 | out: ppu=0x26d2f8) returned 0x0 [0167.291] RtlAllocateHeap (HeapHandle=0x470000, Flags=0x0, Size=0x78) returned 0x482770 [0167.291] RtlAllocateHeap (HeapHandle=0x470000, Flags=0x0, Size=0x78) returned 0x4827f0 [0167.291] CoInternetParseUrl (in: pwzUrl="file:///C:/Users/5p5NrGJn0jS%20HALPmcxz/Desktop/msiexec.exe", ParseAction=0x13, dwFlags=0x0, pszResult=0x4827f0, cchResult=0x3c, pcchResult=0x26d304, dwReserved=0x0 | out: pszResult="file:///C:/Users/5p5NrGJn0jS HALPmcxz/Desktop/msiexec.exe", pcchResult=0x26d304) returned 0x0 [0167.291] CoInternetParseUrl (in: pwzUrl="file:///C:/Users/5p5NrGJn0jS HALPmcxz/Desktop/msiexec.exe", ParseAction=0x9, dwFlags=0x0, pszResult=0x482770, cchResult=0x3c, pcchResult=0x26d304, dwReserved=0x0 | out: pszResult="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\msiexec.exe", pcchResult=0x26d304) returned 0x0 [0167.292] HeapFree (in: hHeap=0x470000, dwFlags=0x0, lpMem=0x4827f0 | out: hHeap=0x470000) returned 1 [0167.292] HeapFree (in: hHeap=0x470000, dwFlags=0x0, lpMem=0x482770 | out: hHeap=0x470000) returned 1 [0167.292] HeapFree (in: hHeap=0x470000, dwFlags=0x0, lpMem=0x0 | out: hHeap=0x470000) returned 1 [0167.292] IUnknown:AddRef (This=0x49d3ec) returned 0x6 [0167.292] IUnknown:AddRef (This=0x49d3ec) returned 0x7 [0167.292] IUnknown:QueryInterface (in: This=0x49d3ec, riid=0x6fbed6e8*(Data1=0x50295b0c, Data2=0x6b79, Data3=0x4935, Data4=([0]=0xae, [1]=0xd8, [2]=0x5, [3]=0xd8, [4]=0xe, [5]=0xc8, [6]=0x6a, [7]=0x60)), ppvObject=0x26d328 | out: ppvObject=0x26d328*=0x49d3ec) returned 0x0 [0167.292] IUnknown:Release (This=0x49d3ec) returned 0x7 [0167.292] IUnknown:AddRef (This=0x49d3ec) returned 0x8 [0167.292] IUri:GetScheme (in: This=0x49d3ec, pdwScheme=0x4ac588 | out: pdwScheme=0x4ac588*=0x9) returned 0x0 [0167.292] CoInternetParseIUri (in: pIUri=0x49d3ec, ParseAction=0x9, dwFlags=0x0, pwzResult=0x26d3a0, cchResult=0x104, pcchResult=0x26d344, dwReserved=0x0 | out: pwzResult="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\msiexec.exe", pcchResult=0x26d344) returned 0x0 [0167.292] RtlAllocateHeap (HeapHandle=0x470000, Flags=0x0, Size=0x68) returned 0x4dacf0 [0167.292] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\msiexec.exe", lpFindFileData=0x26d0d0 | out: lpFindFileData=0x26d0d0*(dwFileAttributes=0x350070, ftCreationTime.dwLowDateTime=0x72004e, ftCreationTime.dwHighDateTime=0x4a0047, ftLastAccessTime.dwLowDateTime=0x30006e, ftLastAccessTime.dwHighDateTime=0x53006a, ftLastWriteTime.dwLowDateTime=0x480020, ftLastWriteTime.dwHighDateTime=0x4c0041, nFileSizeHigh=0x6d0050, nFileSizeLow=0x780063, dwReserved0=0x5c007a, dwReserved1=0x650044, cFileName="sktop\\msiexec.exe", cAlternateFileName="펠&1")) returned 0xffffffff [0167.292] IUnknown:QueryInterface (in: This=0x49d3ec, riid=0x6fbed6e8*(Data1=0x50295b0c, Data2=0x6b79, Data3=0x4935, Data4=([0]=0xae, [1]=0xd8, [2]=0x5, [3]=0xd8, [4]=0xe, [5]=0xc8, [6]=0x6a, [7]=0x60)), ppvObject=0x26d334 | out: ppvObject=0x26d334*=0x49d3ec) returned 0x0 [0167.292] IUnknown:Release (This=0x49d3ec) returned 0x8 [0167.292] IUnknown:AddRef (This=0x49d3ec) returned 0x9 [0167.292] RtlAllocateHeap (HeapHandle=0x470000, Flags=0x8, Size=0x10) returned 0x4d9b20 [0167.292] IInternetSession:CreateBinding (in: This=0x4a45b0, pbc=0x0, szUrl="file:///C:/Users/5p5NrGJn0jS%20HALPmcxz/Desktop/msiexec.exe", pUnkOuter=0x0, ppunk=0x0, ppOInetProt=0x4d9b28, dwOption=0x0 | out: ppunk=0x0, ppOInetProt=0x4d9b28*=0x4aa4f0) returned 0x0 [0167.292] IUnknown:QueryInterface (in: This=0x4aa4f0, riid=0x6fb86078*(Data1=0x53c84785, Data2=0x8425, Data3=0x4dc5, Data4=([0]=0x97, [1]=0x1b, [2]=0xe5, [3]=0x8d, [4]=0x9c, [5]=0x19, [6]=0xf9, [7]=0xb6)), ppvObject=0x26d2b8 | out: ppvObject=0x26d2b8*=0x0) returned 0x80004002 [0167.292] IUnknown:QueryInterface (in: This=0x4aa4f0, riid=0x6fb86068*(Data1=0x79eac9eb, Data2=0xbaf9, Data3=0x11ce, Data4=([0]=0x8c, [1]=0x82, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0x4b, [6]=0xa9, [7]=0xb)), ppvObject=0x26d2c8 | out: ppvObject=0x26d2c8*=0x4aa500) returned 0x0 [0167.292] IInternetPriority:SetPriority (This=0x4aa500, nPriority=-1) returned 0x0 [0167.292] IUnknown:Release (This=0x4aa500) returned 0x1 [0167.292] IUnknown:AddRef (This=0x4aa4f0) returned 0x2 [0167.292] IUnknown:QueryInterface (in: This=0x4aa4f0, riid=0x6fb86158*(Data1=0xc7a98e66, Data2=0x1010, Data3=0x492c, Data4=([0]=0xa1, [1]=0xc8, [2]=0xc8, [3]=0x9, [4]=0xe1, [5]=0xf7, [6]=0x59, [7]=0x5)), ppvObject=0x26d2fc | out: ppvObject=0x26d2fc*=0x4aa4f0) returned 0x0 [0167.293] IInternetProtocolEx:StartEx (This=0x4aa4f0, pUri=0x49d3ec, pOIProtSink=0x4ac4d4, pOIBindInfo=0x4ac49c, grfPI=0x10, dwReserved=0x0) returned 0x800c0005 [0167.293] IUnknown:AddRef (This=0x4ac4d4) returned 0x3 [0167.293] IUnknown:AddRef (This=0x4ac49c) returned 0x4 [0167.293] IUnknown:QueryInterface (in: This=0x4ac49c, riid=0x76826f40*(Data1=0xa3e015b7, Data2=0xa82c, Data3=0x4dcd, Data4=([0]=0xa1, [1]=0x50, [2]=0x56, [3]=0x9a, [4]=0xee, [5]=0xed, [6]=0x36, [7]=0xab)), ppvObject=0x26d2a4 | out: ppvObject=0x26d2a4*=0x0) returned 0x80004002 [0167.293] IInternetBindInfo:GetBindInfo (in: This=0x4ac49c, grfBINDF=0x4aa660, pbindinfo=0x4aa668 | out: grfBINDF=0x4aa660*=0x20083, pbindinfo=0x4aa668) returned 0x0 [0167.293] IUnknown:AddRef (This=0x4ac4d4) returned 0x5 [0167.293] IInternetProtocolSink:ReportProgress (This=0x4ac4d4, ulStatusCode=0x1e, szStatusText=0x0) returned 0x0 [0167.293] IInternetProtocolSink:ReportProgress (This=0x4ac4d4, ulStatusCode=0xb, szStatusText="") returned 0x0 [0167.293] IInternetProtocolSink:ReportResult (This=0x4ac4d4, hrResult=0x800c0005, dwError=0x2, szResult=0x0) returned 0x0 [0167.293] IInternetProtocolRoot:Terminate (This=0x4aa4f0, dwOptions=0x0) returned 0x0 [0167.293] IUnknown:Release (This=0x4ac49c) returned 0x4 [0167.293] IUnknown:Release (This=0x4ac4d4) returned 0x3 [0167.293] IUnknown:Release (This=0x4ac4d4) returned 0x2 [0167.294] IUnknown:Release (This=0x4aa4f0) returned 0x2 [0167.294] IUnknown:Release (This=0x49d3ec) returned 0xa [0167.294] IUnknown:AddRef (This=0x49c66c) returned 0x3 [0167.294] GetIUriPriv () returned 0x0 [0167.294] IUnknown:Release (This=0x49c66c) returned 0x3 [0167.294] IUnknown:Release (This=0x49c66c) returned 0x2 [0167.294] IUnknown:Release (This=0x49d3ec) returned 0x9 [0167.294] IUnknown:Release (This=0x49d3ec) returned 0x8 [0167.294] CoTaskMemFree (pv=0x0) [0167.294] GetCurrentThreadId () returned 0x220 [0167.294] IUnknown:AddRef (This=0x49c66c) returned 0x3 [0167.294] GetIUriPriv () returned 0x0 [0167.294] IUnknown:Release (This=0x49c66c) returned 0x3 [0167.294] IUnknown:Release (This=0x49c66c) returned 0x2 [0167.295] HeapFree (in: hHeap=0x470000, dwFlags=0x0, lpMem=0x0 | out: hHeap=0x470000) returned 1 [0167.295] HeapFree (in: hHeap=0x470000, dwFlags=0x0, lpMem=0x0 | out: hHeap=0x470000) returned 1 [0167.295] IUnknown:Release (This=0x49d3ec) returned 0x7 [0167.295] HeapFree (in: hHeap=0x470000, dwFlags=0x0, lpMem=0x0 | out: hHeap=0x470000) returned 1 [0167.295] IUnknown:Release (This=0x4aa4f0) returned 0x1 [0167.295] IUnknown:Release (This=0x4aa4f0) returned 0x0 [0167.295] HeapFree (in: hHeap=0x470000, dwFlags=0x0, lpMem=0x4d9b20 | out: hHeap=0x470000) returned 1 [0167.295] HeapFree (in: hHeap=0x470000, dwFlags=0x0, lpMem=0x0 | out: hHeap=0x470000) returned 1 [0167.295] HeapFree (in: hHeap=0x470000, dwFlags=0x0, lpMem=0x0 | out: hHeap=0x470000) returned 1 [0167.295] IUnknown:Release (This=0x49d3ec) returned 0x4 [0167.295] HeapFree (in: hHeap=0x470000, dwFlags=0x0, lpMem=0x4dacf0 | out: hHeap=0x470000) returned 1 [0167.295] HeapFree (in: hHeap=0x470000, dwFlags=0x0, lpMem=0x4ac480 | out: hHeap=0x470000) returned 1 [0167.295] HeapFree (in: hHeap=0x470000, dwFlags=0x0, lpMem=0x4c55d0 | out: hHeap=0x470000) returned 1 [0167.295] IUnknown:Release (This=0x49d3ec) returned 0x3 [0167.295] IUnknown:Release (This=0x49c3e4) returned 0x2 [0167.295] RtlAllocateHeap (HeapHandle=0x470000, Flags=0x0, Size=0x12) returned 0x4c1ca8 [0167.295] FindWindowW (lpClassName="HTML Application Host Window Class", lpWindowName=0x0) returned 0x60114 [0167.295] GetClassNameW (in: hWnd=0x60114, lpClassName=0x26d534, nMaxCount=260 | out: lpClassName="HTML Application Host Window Class") returned 34 [0167.295] StrCmpW (psz1="HTML Application Host Window Class", psz2="HTML Application Host Window Class") returned 0 [0167.295] GlobalFindAtomW (lpString="6zHlLA") returned 0x0 [0167.295] GetPropW (hWnd=0x60114, lpString=0x0) returned 0x0 [0167.295] GetWindow (hWnd=0x60114, uCmd=0x2) returned 0x50160 [0167.295] GetClassNameW (in: hWnd=0x50160, lpClassName=0x26d534, nMaxCount=260 | out: lpClassName="HTML Application Host Window Class") returned 34 [0167.296] StrCmpW (psz1="HTML Application Host Window Class", psz2="HTML Application Host Window Class") returned 0 [0167.296] GlobalFindAtomW (lpString="6zHlLA") returned 0x0 [0167.296] GetPropW (hWnd=0x50160, lpString=0x0) returned 0x0 [0167.296] GetWindow (hWnd=0x50160, uCmd=0x2) returned 0xa027a [0167.296] GetClassNameW (in: hWnd=0xa027a, lpClassName=0x26d534, nMaxCount=260 | out: lpClassName="COMTASKSWINDOWCLASS") returned 19 [0167.296] StrCmpW (psz1="COMTASKSWINDOWCLASS", psz2="HTML Application Host Window Class") returned -1 [0167.296] GetWindow (hWnd=0xa027a, uCmd=0x2) returned 0x3015e [0167.296] GetClassNameW (in: hWnd=0x3015e, lpClassName=0x26d534, nMaxCount=260 | out: lpClassName="IME") returned 3 [0167.296] StrCmpW (psz1="IME", psz2="HTML Application Host Window Class") returned 1 [0167.296] GetWindow (hWnd=0x3015e, uCmd=0x2) returned 0x900a6 [0167.296] GetClassNameW (in: hWnd=0x900a6, lpClassName=0x26d534, nMaxCount=260 | out: lpClassName="DV2ControlHost") returned 14 [0167.296] StrCmpW (psz1="DV2ControlHost", psz2="HTML Application Host Window Class") returned -1 [0167.296] GetWindow (hWnd=0x900a6, uCmd=0x2) returned 0x300c6 [0167.296] GetClassNameW (in: hWnd=0x300c6, lpClassName=0x26d534, nMaxCount=260 | out: lpClassName="tooltips_class32") returned 16 [0167.296] StrCmpW (psz1="tooltips_class32", psz2="HTML Application Host Window Class") returned 1 [0167.296] GetWindow (hWnd=0x300c6, uCmd=0x2) returned 0x400d0 [0167.296] GetClassNameW (in: hWnd=0x400d0, lpClassName=0x26d534, nMaxCount=260 | out: lpClassName="AUTHUI.DLL: Shutdown Choices Message Window") returned 43 [0167.296] StrCmpW (psz1="AUTHUI.DLL: Shutdown Choices Message Window", psz2="HTML Application Host Window Class") returned -1 [0167.296] GetWindow (hWnd=0x400d0, uCmd=0x2) returned 0x400f0 [0167.296] GetClassNameW (in: hWnd=0x400f0, lpClassName=0x26d534, nMaxCount=260 | out: lpClassName="_SearchEditBoxFakeWindow") returned 24 [0167.296] StrCmpW (psz1="_SearchEditBoxFakeWindow", psz2="HTML Application Host Window Class") returned -1 [0167.296] GetWindow (hWnd=0x400f0, uCmd=0x2) returned 0x300de [0167.296] GetClassNameW (in: hWnd=0x300de, lpClassName=0x26d534, nMaxCount=260 | out: lpClassName="tooltips_class32") returned 16 [0167.296] StrCmpW (psz1="tooltips_class32", psz2="HTML Application Host Window Class") returned 1 [0167.296] GetWindow (hWnd=0x300de, uCmd=0x2) returned 0x300ca [0167.296] GetClassNameW (in: hWnd=0x300ca, lpClassName=0x26d534, nMaxCount=260 | out: lpClassName="tooltips_class32") returned 16 [0167.296] StrCmpW (psz1="tooltips_class32", psz2="HTML Application Host Window Class") returned 1 [0167.296] GetWindow (hWnd=0x300ca, uCmd=0x2) returned 0x400c4 [0167.297] GetClassNameW (in: hWnd=0x400c4, lpClassName=0x26d534, nMaxCount=260 | out: lpClassName="tooltips_class32") returned 16 [0167.297] StrCmpW (psz1="tooltips_class32", psz2="HTML Application Host Window Class") returned 1 [0167.297] GetWindow (hWnd=0x400c4, uCmd=0x2) returned 0x300ac [0167.297] GetClassNameW (in: hWnd=0x300ac, lpClassName=0x26d534, nMaxCount=260 | out: lpClassName="Desktop User Picture") returned 20 [0167.297] StrCmpW (psz1="Desktop User Picture", psz2="HTML Application Host Window Class") returned -1 [0167.297] GetWindow (hWnd=0x300ac, uCmd=0x2) returned 0x10272 [0167.297] GetClassNameW (in: hWnd=0x10272, lpClassName=0x26d534, nMaxCount=260 | out: lpClassName="IME") returned 3 [0167.297] StrCmpW (psz1="IME", psz2="HTML Application Host Window Class") returned 1 [0167.297] GetWindow (hWnd=0x10272, uCmd=0x2) returned 0x10270 [0167.297] GetClassNameW (in: hWnd=0x10270, lpClassName=0x26d534, nMaxCount=260 | out: lpClassName="Chem_identification_Conditional_") returned 32 [0167.297] StrCmpW (psz1="Chem_identification_Conditional_", psz2="HTML Application Host Window Class") returned -1 [0167.297] GetWindow (hWnd=0x10270, uCmd=0x2) returned 0x1026e [0167.297] GetClassNameW (in: hWnd=0x1026e, lpClassName=0x26d534, nMaxCount=260 | out: lpClassName="IME") returned 3 [0167.297] StrCmpW (psz1="IME", psz2="HTML Application Host Window Class") returned 1 [0167.297] GetWindow (hWnd=0x1026e, uCmd=0x2) returned 0x1026c [0167.297] GetClassNameW (in: hWnd=0x1026c, lpClassName=0x26d534, nMaxCount=260 | out: lpClassName="perfect_Survive_app") returned 19 [0167.297] StrCmpW (psz1="perfect_Survive_app", psz2="HTML Application Host Window Class") returned 1 [0167.297] GetWindow (hWnd=0x1026c, uCmd=0x2) returned 0x1026a [0167.297] GetClassNameW (in: hWnd=0x1026a, lpClassName=0x26d534, nMaxCount=260 | out: lpClassName="IME") returned 3 [0167.297] StrCmpW (psz1="IME", psz2="HTML Application Host Window Class") returned 1 [0167.297] GetWindow (hWnd=0x1026a, uCmd=0x2) returned 0x10268 [0167.297] GetClassNameW (in: hWnd=0x10268, lpClassName=0x26d534, nMaxCount=260 | out: lpClassName="Cordless_successful_app") returned 23 [0167.297] StrCmpW (psz1="Cordless_successful_app", psz2="HTML Application Host Window Class") returned -1 [0167.297] GetWindow (hWnd=0x10268, uCmd=0x2) returned 0x10266 [0167.298] GetClassNameW (in: hWnd=0x10266, lpClassName=0x26d534, nMaxCount=260 | out: lpClassName="IME") returned 3 [0167.298] StrCmpW (psz1="IME", psz2="HTML Application Host Window Class") returned 1 [0167.298] GetWindow (hWnd=0x10266, uCmd=0x2) returned 0x10264 [0167.298] GetClassNameW (in: hWnd=0x10264, lpClassName=0x26d534, nMaxCount=260 | out: lpClassName="oscar_tagged_window") returned 19 [0167.298] StrCmpW (psz1="oscar_tagged_window", psz2="HTML Application Host Window Class") returned 1 [0167.298] GetWindow (hWnd=0x10264, uCmd=0x2) returned 0x10260 [0167.298] GetClassNameW (in: hWnd=0x10260, lpClassName=0x26d534, nMaxCount=260 | out: lpClassName="utg2_cls") returned 8 [0167.298] StrCmpW (psz1="utg2_cls", psz2="HTML Application Host Window Class") returned 1 [0167.298] GetWindow (hWnd=0x10260, uCmd=0x2) returned 0x10262 [0167.298] GetClassNameW (in: hWnd=0x10262, lpClassName=0x26d534, nMaxCount=260 | out: lpClassName="IME") returned 3 [0167.298] StrCmpW (psz1="IME", psz2="HTML Application Host Window Class") returned 1 [0167.298] GetWindow (hWnd=0x10262, uCmd=0x2) returned 0x1025c [0167.298] GetClassNameW (in: hWnd=0x1025c, lpClassName=0x26d534, nMaxCount=260 | out: lpClassName="spgagentservice_app") returned 19 [0167.298] StrCmpW (psz1="spgagentservice_app", psz2="HTML Application Host Window Class") returned 1 [0167.298] GetWindow (hWnd=0x1025c, uCmd=0x2) returned 0x1025e [0167.298] GetClassNameW (in: hWnd=0x1025e, lpClassName=0x26d534, nMaxCount=260 | out: lpClassName="IME") returned 3 [0167.298] StrCmpW (psz1="IME", psz2="HTML Application Host Window Class") returned 1 [0167.298] GetWindow (hWnd=0x1025e, uCmd=0x2) returned 0x10258 [0167.298] GetClassNameW (in: hWnd=0x10258, lpClassName=0x26d534, nMaxCount=260 | out: lpClassName="spcwinwin") returned 9 [0167.298] StrCmpW (psz1="spcwinwin", psz2="HTML Application Host Window Class") returned 1 [0167.298] GetWindow (hWnd=0x10258, uCmd=0x2) returned 0x1025a [0167.298] GetClassNameW (in: hWnd=0x1025a, lpClassName=0x26d534, nMaxCount=260 | out: lpClassName="IME") returned 3 [0167.298] StrCmpW (psz1="IME", psz2="HTML Application Host Window Class") returned 1 [0167.298] GetWindow (hWnd=0x1025a, uCmd=0x2) returned 0x10254 [0167.298] GetClassNameW (in: hWnd=0x10254, lpClassName=0x26d534, nMaxCount=260 | out: lpClassName="omniposcls") returned 10 [0167.298] StrCmpW (psz1="omniposcls", psz2="HTML Application Host Window Class") returned 1 [0167.298] GetWindow (hWnd=0x10254, uCmd=0x2) returned 0x10256 [0167.299] GetClassNameW (in: hWnd=0x10256, lpClassName=0x26d534, nMaxCount=260 | out: lpClassName="IME") returned 3 [0167.299] StrCmpW (psz1="IME", psz2="HTML Application Host Window Class") returned 1 [0167.299] GetWindow (hWnd=0x10256, uCmd=0x2) returned 0x10250 [0167.299] GetClassNameW (in: hWnd=0x10250, lpClassName=0x26d534, nMaxCount=260 | out: lpClassName="mxslipstreamcls") returned 15 [0167.299] StrCmpW (psz1="mxslipstreamcls", psz2="HTML Application Host Window Class") returned 1 [0167.299] GetWindow (hWnd=0x10250, uCmd=0x2) returned 0x10252 [0167.299] GetClassNameW (in: hWnd=0x10252, lpClassName=0x26d534, nMaxCount=260 | out: lpClassName="IME") returned 3 [0167.299] StrCmpW (psz1="IME", psz2="HTML Application Host Window Class") returned 1 [0167.299] GetWindow (hWnd=0x10252, uCmd=0x2) returned 0x1024c [0167.299] GetClassNameW (in: hWnd=0x1024c, lpClassName=0x26d534, nMaxCount=260 | out: lpClassName="isspos_") returned 7 [0167.299] StrCmpW (psz1="isspos_", psz2="HTML Application Host Window Class") returned 1 [0167.299] GetWindow (hWnd=0x1024c, uCmd=0x2) returned 0x1024e [0167.299] GetClassNameW (in: hWnd=0x1024e, lpClassName=0x26d534, nMaxCount=260 | out: lpClassName="IME") returned 3 [0167.299] StrCmpW (psz1="IME", psz2="HTML Application Host Window Class") returned 1 [0167.299] GetWindow (hWnd=0x1024e, uCmd=0x2) returned 0x10248 [0167.299] GetClassNameW (in: hWnd=0x10248, lpClassName=0x26d534, nMaxCount=260 | out: lpClassName="fposwindow") returned 10 [0167.299] StrCmpW (psz1="fposwindow", psz2="HTML Application Host Window Class") returned -1 [0167.299] GetWindow (hWnd=0x10248, uCmd=0x2) returned 0x1024a [0167.299] GetClassNameW (in: hWnd=0x1024a, lpClassName=0x26d534, nMaxCount=260 | out: lpClassName="IME") returned 3 [0167.299] StrCmpW (psz1="IME", psz2="HTML Application Host Window Class") returned 1 [0167.299] GetWindow (hWnd=0x1024a, uCmd=0x2) returned 0x10244 [0167.299] GetClassNameW (in: hWnd=0x10244, lpClassName=0x26d534, nMaxCount=260 | out: lpClassName="edcsvr_app") returned 10 [0167.299] StrCmpW (psz1="edcsvr_app", psz2="HTML Application Host Window Class") returned -1 [0167.299] GetWindow (hWnd=0x10244, uCmd=0x2) returned 0x10246 [0167.299] GetClassNameW (in: hWnd=0x10246, lpClassName=0x26d534, nMaxCount=260 | out: lpClassName="IME") returned 3 [0167.300] StrCmpW (psz1="IME", psz2="HTML Application Host Window Class") returned 1 [0167.300] GetWindow (hWnd=0x10246, uCmd=0x2) returned 0x10240 [0167.300] GetClassNameW (in: hWnd=0x10240, lpClassName=0x26d534, nMaxCount=260 | out: lpClassName="creditservice_app") returned 17 [0167.300] StrCmpW (psz1="creditservice_app", psz2="HTML Application Host Window Class") returned -1 [0167.300] GetWindow (hWnd=0x10240, uCmd=0x2) returned 0x10242 [0167.300] GetClassNameW (in: hWnd=0x10242, lpClassName=0x26d534, nMaxCount=260 | out: lpClassName="IME") returned 3 [0167.300] StrCmpW (psz1="IME", psz2="HTML Application Host Window Class") returned 1 [0167.300] GetWindow (hWnd=0x10242, uCmd=0x2) returned 0x1023c [0167.300] GetClassNameW (in: hWnd=0x1023c, lpClassName=0x26d534, nMaxCount=260 | out: lpClassName="centralcreditcardclass") returned 22 [0167.300] StrCmpW (psz1="centralcreditcardclass", psz2="HTML Application Host Window Class") returned -1 [0167.300] GetWindow (hWnd=0x1023c, uCmd=0x2) returned 0x1023e [0167.300] GetClassNameW (in: hWnd=0x1023e, lpClassName=0x26d534, nMaxCount=260 | out: lpClassName="IME") returned 3 [0167.300] StrCmpW (psz1="IME", psz2="HTML Application Host Window Class") returned 1 [0167.300] GetWindow (hWnd=0x1023e, uCmd=0x2) returned 0x10238 [0167.300] GetClassNameW (in: hWnd=0x10238, lpClassName=0x26d534, nMaxCount=260 | out: lpClassName="ccv_server_window") returned 17 [0167.300] StrCmpW (psz1="ccv_server_window", psz2="HTML Application Host Window Class") returned -1 [0167.300] GetWindow (hWnd=0x10238, uCmd=0x2) returned 0x1023a [0167.300] GetClassNameW (in: hWnd=0x1023a, lpClassName=0x26d534, nMaxCount=260 | out: lpClassName="IME") returned 3 [0167.300] StrCmpW (psz1="IME", psz2="HTML Application Host Window Class") returned 1 [0167.300] GetWindow (hWnd=0x1023a, uCmd=0x2) returned 0x10234 [0167.300] GetClassNameW (in: hWnd=0x10234, lpClassName=0x26d534, nMaxCount=260 | out: lpClassName="aldeloclass") returned 11 [0167.300] StrCmpW (psz1="aldeloclass", psz2="HTML Application Host Window Class") returned -1 [0167.300] GetWindow (hWnd=0x10234, uCmd=0x2) returned 0x10236 [0167.300] GetClassNameW (in: hWnd=0x10236, lpClassName=0x26d534, nMaxCount=260 | out: lpClassName="IME") returned 3 [0167.300] StrCmpW (psz1="IME", psz2="HTML Application Host Window Class") returned 1 [0167.300] GetWindow (hWnd=0x10236, uCmd=0x2) returned 0x10230 [0167.300] GetClassNameW (in: hWnd=0x10230, lpClassName=0x26d534, nMaxCount=260 | out: lpClassName="afr38wnd") returned 8 [0167.301] StrCmpW (psz1="afr38wnd", psz2="HTML Application Host Window Class") returned -1 [0167.301] GetWindow (hWnd=0x10230, uCmd=0x2) returned 0x10232 [0167.301] GetClassNameW (in: hWnd=0x10232, lpClassName=0x26d534, nMaxCount=260 | out: lpClassName="IME") returned 3 [0167.301] StrCmpW (psz1="IME", psz2="HTML Application Host Window Class") returned 1 [0167.301] GetWindow (hWnd=0x10232, uCmd=0x2) returned 0x1022c [0167.301] GetClassNameW (in: hWnd=0x1022c, lpClassName=0x26d534, nMaxCount=260 | out: lpClassName="accupos_cls") returned 11 [0167.301] StrCmpW (psz1="accupos_cls", psz2="HTML Application Host Window Class") returned -1 [0167.301] GetWindow (hWnd=0x1022c, uCmd=0x2) returned 0x1022e [0167.301] GetClassNameW (in: hWnd=0x1022e, lpClassName=0x26d534, nMaxCount=260 | out: lpClassName="IME") returned 3 [0167.301] StrCmpW (psz1="IME", psz2="HTML Application Host Window Class") returned 1 [0167.301] GetWindow (hWnd=0x1022e, uCmd=0x2) returned 0x10228 [0167.301] GetClassNameW (in: hWnd=0x10228, lpClassName=0x26d534, nMaxCount=260 | out: lpClassName="active-chargewnd") returned 16 [0167.301] StrCmpW (psz1="active-chargewnd", psz2="HTML Application Host Window Class") returned -1 [0167.301] GetWindow (hWnd=0x10228, uCmd=0x2) returned 0x1022a [0167.301] GetClassNameW (in: hWnd=0x1022a, lpClassName=0x26d534, nMaxCount=260 | out: lpClassName="IME") returned 3 [0167.301] StrCmpW (psz1="IME", psz2="HTML Application Host Window Class") returned 1 [0167.301] GetWindow (hWnd=0x1022a, uCmd=0x2) returned 0x10224 [0167.301] GetClassNameW (in: hWnd=0x10224, lpClassName=0x26d534, nMaxCount=260 | out: lpClassName="yahoomessenger_win") returned 18 [0167.301] StrCmpW (psz1="yahoomessenger_win", psz2="HTML Application Host Window Class") returned 1 [0167.301] GetWindow (hWnd=0x10224, uCmd=0x2) returned 0x10226 [0167.301] GetClassNameW (in: hWnd=0x10226, lpClassName=0x26d534, nMaxCount=260 | out: lpClassName="IME") returned 3 [0167.301] StrCmpW (psz1="IME", psz2="HTML Application Host Window Class") returned 1 [0167.301] GetWindow (hWnd=0x10226, uCmd=0x2) returned 0x10220 [0167.301] GetClassNameW (in: hWnd=0x10220, lpClassName=0x26d534, nMaxCount=260 | out: lpClassName="winscp_wnd") returned 10 [0167.301] StrCmpW (psz1="winscp_wnd", psz2="HTML Application Host Window Class") returned 1 [0167.301] GetWindow (hWnd=0x10220, uCmd=0x2) returned 0x10222 [0167.301] GetClassNameW (in: hWnd=0x10222, lpClassName=0x26d534, nMaxCount=260 | out: lpClassName="IME") returned 3 [0167.302] StrCmpW (psz1="IME", psz2="HTML Application Host Window Class") returned 1 [0167.302] GetWindow (hWnd=0x10222, uCmd=0x2) returned 0x1021c [0167.302] GetClassNameW (in: hWnd=0x1021c, lpClassName=0x26d534, nMaxCount=260 | out: lpClassName="whatsapp_class") returned 14 [0167.302] StrCmpW (psz1="whatsapp_class", psz2="HTML Application Host Window Class") returned 1 [0167.302] GetWindow (hWnd=0x1021c, uCmd=0x2) returned 0x1021e [0167.302] GetClassNameW (in: hWnd=0x1021e, lpClassName=0x26d534, nMaxCount=260 | out: lpClassName="IME") returned 3 [0167.302] StrCmpW (psz1="IME", psz2="HTML Application Host Window Class") returned 1 [0167.302] GetWindow (hWnd=0x1021e, uCmd=0x2) returned 0x10218 [0167.302] GetClassNameW (in: hWnd=0x10218, lpClassName=0x26d534, nMaxCount=260 | out: lpClassName="webdrivewnd") returned 11 [0167.302] StrCmpW (psz1="webdrivewnd", psz2="HTML Application Host Window Class") returned 1 [0167.302] GetWindow (hWnd=0x10218, uCmd=0x2) returned 0x1021a [0167.302] GetClassNameW (in: hWnd=0x1021a, lpClassName=0x26d534, nMaxCount=260 | out: lpClassName="IME") returned 3 [0167.302] StrCmpW (psz1="IME", psz2="HTML Application Host Window Class") returned 1 [0167.302] GetWindow (hWnd=0x1021a, uCmd=0x2) returned 0x10214 [0167.302] GetClassNameW (in: hWnd=0x10214, lpClassName=0x26d534, nMaxCount=260 | out: lpClassName="trillian_") returned 9 [0167.302] StrCmpW (psz1="trillian_", psz2="HTML Application Host Window Class") returned 1 [0167.302] GetWindow (hWnd=0x10214, uCmd=0x2) returned 0x10216 [0167.302] GetClassNameW (in: hWnd=0x10216, lpClassName=0x26d534, nMaxCount=260 | out: lpClassName="IME") returned 3 [0167.302] StrCmpW (psz1="IME", psz2="HTML Application Host Window Class") returned 1 [0167.302] GetWindow (hWnd=0x10216, uCmd=0x2) returned 0x10210 [0167.302] GetClassNameW (in: hWnd=0x10210, lpClassName=0x26d534, nMaxCount=260 | out: lpClassName="thunderbird_window") returned 18 [0167.302] StrCmpW (psz1="thunderbird_window", psz2="HTML Application Host Window Class") returned 1 [0167.302] GetWindow (hWnd=0x10210, uCmd=0x2) returned 0x10212 [0167.302] GetClassNameW (in: hWnd=0x10212, lpClassName=0x26d534, nMaxCount=260 | out: lpClassName="IME") returned 3 [0167.302] StrCmpW (psz1="IME", psz2="HTML Application Host Window Class") returned 1 [0167.302] GetWindow (hWnd=0x10212, uCmd=0x2) returned 0x1020c [0167.302] GetClassNameW (in: hWnd=0x1020c, lpClassName=0x26d534, nMaxCount=260 | out: lpClassName="smartftp_class") returned 14 [0167.303] StrCmpW (psz1="smartftp_class", psz2="HTML Application Host Window Class") returned 1 [0167.303] GetWindow (hWnd=0x1020c, uCmd=0x2) returned 0x1020e [0167.303] GetClassNameW (in: hWnd=0x1020e, lpClassName=0x26d534, nMaxCount=260 | out: lpClassName="IME") returned 3 [0167.303] StrCmpW (psz1="IME", psz2="HTML Application Host Window Class") returned 1 [0167.303] GetWindow (hWnd=0x1020e, uCmd=0x2) returned 0x10208 [0167.303] GetClassNameW (in: hWnd=0x10208, lpClassName=0x26d534, nMaxCount=260 | out: lpClassName="skypeclass") returned 10 [0167.303] StrCmpW (psz1="skypeclass", psz2="HTML Application Host Window Class") returned 1 [0167.303] GetWindow (hWnd=0x10208, uCmd=0x2) returned 0x1020a [0167.303] GetClassNameW (in: hWnd=0x1020a, lpClassName=0x26d534, nMaxCount=260 | out: lpClassName="IME") returned 3 [0167.303] StrCmpW (psz1="IME", psz2="HTML Application Host Window Class") returned 1 [0167.303] GetWindow (hWnd=0x1020a, uCmd=0x2) returned 0x10204 [0167.303] GetClassNameW (in: hWnd=0x10204, lpClassName=0x26d534, nMaxCount=260 | out: lpClassName="scriptftp_window") returned 16 [0167.303] StrCmpW (psz1="scriptftp_window", psz2="HTML Application Host Window Class") returned 1 [0167.303] GetWindow (hWnd=0x10204, uCmd=0x2) returned 0x10206 [0167.303] GetClassNameW (in: hWnd=0x10206, lpClassName=0x26d534, nMaxCount=260 | out: lpClassName="IME") returned 3 [0167.303] StrCmpW (psz1="IME", psz2="HTML Application Host Window Class") returned 1 [0167.303] GetWindow (hWnd=0x10206, uCmd=0x2) returned 0x10200 [0167.303] GetClassNameW (in: hWnd=0x10200, lpClassName=0x26d534, nMaxCount=260 | out: lpClassName="pidgin_wnd") returned 10 [0167.303] StrCmpW (psz1="pidgin_wnd", psz2="HTML Application Host Window Class") returned 1 [0167.303] GetWindow (hWnd=0x10200, uCmd=0x2) returned 0x10202 [0167.303] GetClassNameW (in: hWnd=0x10202, lpClassName=0x26d534, nMaxCount=260 | out: lpClassName="IME") returned 3 [0167.303] StrCmpW (psz1="IME", psz2="HTML Application Host Window Class") returned 1 [0167.303] GetWindow (hWnd=0x10202, uCmd=0x2) returned 0x101fc [0167.303] GetClassNameW (in: hWnd=0x101fc, lpClassName=0x26d534, nMaxCount=260 | out: lpClassName="outlook_app") returned 11 [0167.303] StrCmpW (psz1="outlook_app", psz2="HTML Application Host Window Class") returned 1 [0167.303] GetWindow (hWnd=0x101fc, uCmd=0x2) returned 0x101fe [0167.303] GetClassNameW (in: hWnd=0x101fe, lpClassName=0x26d534, nMaxCount=260 | out: lpClassName="IME") returned 3 [0167.303] StrCmpW (psz1="IME", psz2="HTML Application Host Window Class") returned 1 [0167.304] GetWindow (hWnd=0x101fe, uCmd=0x2) returned 0x101f8 [0167.304] GetClassNameW (in: hWnd=0x101f8, lpClassName=0x26d534, nMaxCount=260 | out: lpClassName="operamail_win") returned 13 [0167.304] StrCmpW (psz1="operamail_win", psz2="HTML Application Host Window Class") returned 1 [0167.304] GetWindow (hWnd=0x101f8, uCmd=0x2) returned 0x101fa [0167.304] GetClassNameW (in: hWnd=0x101fa, lpClassName=0x26d534, nMaxCount=260 | out: lpClassName="IME") returned 3 [0167.304] StrCmpW (psz1="IME", psz2="HTML Application Host Window Class") returned 1 [0167.304] GetWindow (hWnd=0x101fa, uCmd=0x2) returned 0x101f4 [0167.304] GetClassNameW (in: hWnd=0x101f4, lpClassName=0x26d534, nMaxCount=260 | out: lpClassName="notepadwindow") returned 13 [0167.304] StrCmpW (psz1="notepadwindow", psz2="HTML Application Host Window Class") returned 1 [0167.304] GetWindow (hWnd=0x101f4, uCmd=0x2) returned 0x101f6 [0167.304] GetClassNameW (in: hWnd=0x101f6, lpClassName=0x26d534, nMaxCount=260 | out: lpClassName="IME") returned 3 [0167.304] StrCmpW (psz1="IME", psz2="HTML Application Host Window Class") returned 1 [0167.304] GetWindow (hWnd=0x101f6, uCmd=0x2) returned 0x101f0 [0167.304] GetClassNameW (in: hWnd=0x101f0, lpClassName=0x26d534, nMaxCount=260 | out: lpClassName="ncftp_") returned 6 [0167.304] StrCmpW (psz1="ncftp_", psz2="HTML Application Host Window Class") returned 1 [0167.304] GetWindow (hWnd=0x101f0, uCmd=0x2) returned 0x101f2 [0167.304] GetClassNameW (in: hWnd=0x101f2, lpClassName=0x26d534, nMaxCount=260 | out: lpClassName="IME") returned 3 [0167.304] StrCmpW (psz1="IME", psz2="HTML Application Host Window Class") returned 1 [0167.304] GetWindow (hWnd=0x101f2, uCmd=0x2) returned 0x101ec [0167.304] GetClassNameW (in: hWnd=0x101ec, lpClassName=0x26d534, nMaxCount=260 | out: lpClassName="leechftp_wnd") returned 12 [0167.304] StrCmpW (psz1="leechftp_wnd", psz2="HTML Application Host Window Class") returned 1 [0167.304] GetWindow (hWnd=0x101ec, uCmd=0x2) returned 0x101ee [0167.304] GetClassNameW (in: hWnd=0x101ee, lpClassName=0x26d534, nMaxCount=260 | out: lpClassName="IME") returned 3 [0167.304] StrCmpW (psz1="IME", psz2="HTML Application Host Window Class") returned 1 [0167.304] GetWindow (hWnd=0x101ee, uCmd=0x2) returned 0x101e8 [0167.304] GetClassNameW (in: hWnd=0x101e8, lpClassName=0x26d534, nMaxCount=260 | out: lpClassName="icq_win") returned 7 [0167.304] StrCmpW (psz1="icq_win", psz2="HTML Application Host Window Class") returned 1 [0167.305] GetWindow (hWnd=0x101e8, uCmd=0x2) returned 0x101ea [0167.305] GetClassNameW (in: hWnd=0x101ea, lpClassName=0x26d534, nMaxCount=260 | out: lpClassName="IME") returned 3 [0167.305] StrCmpW (psz1="IME", psz2="HTML Application Host Window Class") returned 1 [0167.305] GetWindow (hWnd=0x101ea, uCmd=0x2) returned 0x101e2 [0167.305] GetClassNameW (in: hWnd=0x101e2, lpClassName=0x26d534, nMaxCount=260 | out: lpClassName="gmailnotifierproapp") returned 19 [0167.305] StrCmpW (psz1="gmailnotifierproapp", psz2="HTML Application Host Window Class") returned -1 [0167.305] GetWindow (hWnd=0x101e2, uCmd=0x2) returned 0x101e4 [0167.305] GetClassNameW (in: hWnd=0x101e4, lpClassName=0x26d534, nMaxCount=260 | out: lpClassName="IME") returned 3 [0167.305] StrCmpW (psz1="IME", psz2="HTML Application Host Window Class") returned 1 [0167.305] GetWindow (hWnd=0x101e4, uCmd=0x2) returned 0x101de [0167.305] GetClassNameW (in: hWnd=0x101de, lpClassName=0x26d534, nMaxCount=260 | out: lpClassName="foxmailincmail_") returned 15 [0167.305] StrCmpW (psz1="foxmailincmail_", psz2="HTML Application Host Window Class") returned -1 [0167.305] GetWindow (hWnd=0x101de, uCmd=0x2) returned 0x101e0 [0167.305] GetClassNameW (in: hWnd=0x101e0, lpClassName=0x26d534, nMaxCount=260 | out: lpClassName="IME") returned 3 [0167.305] StrCmpW (psz1="IME", psz2="HTML Application Host Window Class") returned 1 [0167.305] GetWindow (hWnd=0x101e0, uCmd=0x2) returned 0x101d8 [0167.305] GetClassNameW (in: hWnd=0x101d8, lpClassName=0x26d534, nMaxCount=260 | out: lpClassName="fling_app") returned 9 [0167.305] StrCmpW (psz1="fling_app", psz2="HTML Application Host Window Class") returned -1 [0167.305] GetWindow (hWnd=0x101d8, uCmd=0x2) returned 0x101dc [0167.305] GetClassNameW (in: hWnd=0x101dc, lpClassName=0x26d534, nMaxCount=260 | out: lpClassName="IME") returned 3 [0167.305] StrCmpW (psz1="IME", psz2="HTML Application Host Window Class") returned 1 [0167.305] GetWindow (hWnd=0x101dc, uCmd=0x2) returned 0x101d4 [0167.305] GetClassNameW (in: hWnd=0x101d4, lpClassName=0x26d534, nMaxCount=260 | out: lpClassName="flashfxpapp") returned 11 [0167.305] StrCmpW (psz1="flashfxpapp", psz2="HTML Application Host Window Class") returned -1 [0167.305] GetWindow (hWnd=0x101d4, uCmd=0x2) returned 0x101d6 [0167.305] GetClassNameW (in: hWnd=0x101d6, lpClassName=0x26d534, nMaxCount=260 | out: lpClassName="IME") returned 3 [0167.306] StrCmpW (psz1="IME", psz2="HTML Application Host Window Class") returned 1 [0167.306] GetWindow (hWnd=0x101d6, uCmd=0x2) returned 0x101d0 [0167.306] GetClassNameW (in: hWnd=0x101d0, lpClassName=0x26d534, nMaxCount=260 | out: lpClassName="filezilla_") returned 10 [0167.306] StrCmpW (psz1="filezilla_", psz2="HTML Application Host Window Class") returned -1 [0167.306] GetWindow (hWnd=0x101d0, uCmd=0x2) returned 0x101d2 [0167.306] GetClassNameW (in: hWnd=0x101d2, lpClassName=0x26d534, nMaxCount=260 | out: lpClassName="IME") returned 3 [0167.306] StrCmpW (psz1="IME", psz2="HTML Application Host Window Class") returned 1 [0167.306] GetWindow (hWnd=0x101d2, uCmd=0x2) returned 0x101cc [0167.306] GetClassNameW (in: hWnd=0x101cc, lpClassName=0x26d534, nMaxCount=260 | out: lpClassName="far_app") returned 7 [0167.306] StrCmpW (psz1="far_app", psz2="HTML Application Host Window Class") returned -1 [0167.306] GetWindow (hWnd=0x101cc, uCmd=0x2) returned 0x101ce [0167.306] GetClassNameW (in: hWnd=0x101ce, lpClassName=0x26d534, nMaxCount=260 | out: lpClassName="IME") returned 3 [0167.306] StrCmpW (psz1="IME", psz2="HTML Application Host Window Class") returned 1 [0167.306] GetWindow (hWnd=0x101ce, uCmd=0x2) returned 0x101c8 [0167.306] GetClassNameW (in: hWnd=0x101c8, lpClassName=0x26d534, nMaxCount=260 | out: lpClassName="coreftp_app") returned 11 [0167.306] StrCmpW (psz1="coreftp_app", psz2="HTML Application Host Window Class") returned -1 [0167.306] GetWindow (hWnd=0x101c8, uCmd=0x2) returned 0x101ca [0167.306] GetClassNameW (in: hWnd=0x101ca, lpClassName=0x26d534, nMaxCount=260 | out: lpClassName="IME") returned 3 [0167.306] StrCmpW (psz1="IME", psz2="HTML Application Host Window Class") returned 1 [0167.306] GetWindow (hWnd=0x101ca, uCmd=0x2) returned 0x101c4 [0167.306] GetClassNameW (in: hWnd=0x101c4, lpClassName=0x26d534, nMaxCount=260 | out: lpClassName="bitkinex_app") returned 12 [0167.306] StrCmpW (psz1="bitkinex_app", psz2="HTML Application Host Window Class") returned -1 [0167.306] GetWindow (hWnd=0x101c4, uCmd=0x2) returned 0x101c6 [0167.306] GetClassNameW (in: hWnd=0x101c6, lpClassName=0x26d534, nMaxCount=260 | out: lpClassName="IME") returned 3 [0167.306] StrCmpW (psz1="IME", psz2="HTML Application Host Window Class") returned 1 [0167.306] GetWindow (hWnd=0x101c6, uCmd=0x2) returned 0x2019c [0167.307] GetClassNameW (in: hWnd=0x2019c, lpClassName=0x26d534, nMaxCount=260 | out: lpClassName="barcacls") returned 8 [0167.307] StrCmpW (psz1="barcacls", psz2="HTML Application Host Window Class") returned -1 [0167.307] GetWindow (hWnd=0x2019c, uCmd=0x2) returned 0x101c2 [0167.307] GetClassNameW (in: hWnd=0x101c2, lpClassName=0x26d534, nMaxCount=260 | out: lpClassName="IME") returned 3 [0167.307] StrCmpW (psz1="IME", psz2="HTML Application Host Window Class") returned 1 [0167.307] GetWindow (hWnd=0x101c2, uCmd=0x2) returned 0x101be [0167.307] GetClassNameW (in: hWnd=0x101be, lpClassName=0x26d534, nMaxCount=260 | out: lpClassName="alftp_class") returned 11 [0167.307] StrCmpW (psz1="alftp_class", psz2="HTML Application Host Window Class") returned -1 [0167.307] GetWindow (hWnd=0x101be, uCmd=0x2) returned 0x101c0 [0167.307] GetClassNameW (in: hWnd=0x101c0, lpClassName=0x26d534, nMaxCount=260 | out: lpClassName="IME") returned 3 [0167.307] StrCmpW (psz1="IME", psz2="HTML Application Host Window Class") returned 1 [0167.307] GetWindow (hWnd=0x101c0, uCmd=0x2) returned 0x101ba [0167.307] GetClassNameW (in: hWnd=0x101ba, lpClassName=0x26d534, nMaxCount=260 | out: lpClassName="absolutetelnetcls") returned 17 [0167.307] StrCmpW (psz1="absolutetelnetcls", psz2="HTML Application Host Window Class") returned -1 [0167.307] GetWindow (hWnd=0x101ba, uCmd=0x2) returned 0x101bc [0167.307] GetClassNameW (in: hWnd=0x101bc, lpClassName=0x26d534, nMaxCount=260 | out: lpClassName="IME") returned 3 [0167.307] StrCmpW (psz1="IME", psz2="HTML Application Host Window Class") returned 1 [0167.307] GetWindow (hWnd=0x101bc, uCmd=0x2) returned 0x101b6 [0167.307] GetClassNameW (in: hWnd=0x101b6, lpClassName=0x26d534, nMaxCount=260 | out: lpClassName="3dftpapp") returned 8 [0167.307] StrCmpW (psz1="3dftpapp", psz2="HTML Application Host Window Class") returned -1 [0167.307] GetWindow (hWnd=0x101b6, uCmd=0x2) returned 0x101b8 [0167.307] GetClassNameW (in: hWnd=0x101b8, lpClassName=0x26d534, nMaxCount=260 | out: lpClassName="IME") returned 3 [0167.307] StrCmpW (psz1="IME", psz2="HTML Application Host Window Class") returned 1 [0167.307] GetWindow (hWnd=0x101b8, uCmd=0x2) returned 0x101b2 [0167.307] GetClassNameW (in: hWnd=0x101b2, lpClassName=0x26d534, nMaxCount=260 | out: lpClassName="SupplyClosesimmigrationwin") returned 26 [0167.307] StrCmpW (psz1="SupplyClosesimmigrationwin", psz2="HTML Application Host Window Class") returned 1 [0167.308] GetWindow (hWnd=0x101b2, uCmd=0x2) returned 0x101b4 [0167.308] GetClassNameW (in: hWnd=0x101b4, lpClassName=0x26d534, nMaxCount=260 | out: lpClassName="IME") returned 3 [0167.308] StrCmpW (psz1="IME", psz2="HTML Application Host Window Class") returned 1 [0167.308] GetWindow (hWnd=0x101b4, uCmd=0x2) returned 0x101ae [0167.308] GetClassNameW (in: hWnd=0x101ae, lpClassName=0x26d534, nMaxCount=260 | out: lpClassName="objectiveapp") returned 12 [0167.308] StrCmpW (psz1="objectiveapp", psz2="HTML Application Host Window Class") returned 1 [0167.308] GetWindow (hWnd=0x101ae, uCmd=0x2) returned 0x101b0 [0167.308] GetClassNameW (in: hWnd=0x101b0, lpClassName=0x26d534, nMaxCount=260 | out: lpClassName="IME") returned 3 [0167.308] StrCmpW (psz1="IME", psz2="HTML Application Host Window Class") returned 1 [0167.308] GetWindow (hWnd=0x101b0, uCmd=0x2) returned 0x101aa [0167.308] GetClassNameW (in: hWnd=0x101aa, lpClassName=0x26d534, nMaxCount=260 | out: lpClassName="Regions_win") returned 11 [0167.308] StrCmpW (psz1="Regions_win", psz2="HTML Application Host Window Class") returned 1 [0167.308] GetWindow (hWnd=0x101aa, uCmd=0x2) returned 0x101ac [0167.308] GetClassNameW (in: hWnd=0x101ac, lpClassName=0x26d534, nMaxCount=260 | out: lpClassName="IME") returned 3 [0167.308] StrCmpW (psz1="IME", psz2="HTML Application Host Window Class") returned 1 [0167.308] GetWindow (hWnd=0x101ac, uCmd=0x2) returned 0x101a6 [0167.308] GetClassNameW (in: hWnd=0x101a6, lpClassName=0x26d534, nMaxCount=260 | out: lpClassName="Holdings_Ears_titles_win") returned 24 [0167.308] StrCmpW (psz1="Holdings_Ears_titles_win", psz2="HTML Application Host Window Class") returned -1 [0167.308] GetWindow (hWnd=0x101a6, uCmd=0x2) returned 0x101a8 [0167.308] GetClassNameW (in: hWnd=0x101a8, lpClassName=0x26d534, nMaxCount=260 | out: lpClassName="IME") returned 3 [0167.308] StrCmpW (psz1="IME", psz2="HTML Application Host Window Class") returned 1 [0167.308] GetWindow (hWnd=0x101a8, uCmd=0x2) returned 0x101a2 [0167.308] GetClassNameW (in: hWnd=0x101a2, lpClassName=0x26d534, nMaxCount=260 | out: lpClassName="athletics_Champion_Steady_class") returned 31 [0167.308] StrCmpW (psz1="athletics_Champion_Steady_class", psz2="HTML Application Host Window Class") returned -1 [0167.308] GetWindow (hWnd=0x101a2, uCmd=0x2) returned 0x101a4 [0167.308] GetClassNameW (in: hWnd=0x101a4, lpClassName=0x26d534, nMaxCount=260 | out: lpClassName="IME") returned 3 [0167.308] StrCmpW (psz1="IME", psz2="HTML Application Host Window Class") returned 1 [0167.309] GetWindow (hWnd=0x101a4, uCmd=0x2) returned 0x1019e [0167.309] GetClassNameW (in: hWnd=0x1019e, lpClassName=0x26d534, nMaxCount=260 | out: lpClassName="madeapp") returned 7 [0167.309] StrCmpW (psz1="madeapp", psz2="HTML Application Host Window Class") returned 1 [0167.309] GetWindow (hWnd=0x1019e, uCmd=0x2) returned 0x101a0 [0167.309] GetClassNameW (in: hWnd=0x101a0, lpClassName=0x26d534, nMaxCount=260 | out: lpClassName="IME") returned 3 [0167.309] StrCmpW (psz1="IME", psz2="HTML Application Host Window Class") returned 1 [0167.309] GetWindow (hWnd=0x101a0, uCmd=0x2) returned 0x10198 [0167.309] GetClassNameW (in: hWnd=0x10198, lpClassName=0x26d534, nMaxCount=260 | out: lpClassName="andMbasubsidiaryapp") returned 19 [0167.309] StrCmpW (psz1="andMbasubsidiaryapp", psz2="HTML Application Host Window Class") returned -1 [0167.309] GetWindow (hWnd=0x10198, uCmd=0x2) returned 0x1019a [0167.309] GetClassNameW (in: hWnd=0x1019a, lpClassName=0x26d534, nMaxCount=260 | out: lpClassName="IME") returned 3 [0167.309] StrCmpW (psz1="IME", psz2="HTML Application Host Window Class") returned 1 [0167.309] GetWindow (hWnd=0x1019a, uCmd=0x2) returned 0x10194 [0167.309] GetClassNameW (in: hWnd=0x10194, lpClassName=0x26d534, nMaxCount=260 | out: lpClassName="Prerequisite_Enzyme_hundreds_win") returned 32 [0167.309] StrCmpW (psz1="Prerequisite_Enzyme_hundreds_win", psz2="HTML Application Host Window Class") returned 1 [0167.309] GetWindow (hWnd=0x10194, uCmd=0x2) returned 0x10196 [0167.309] GetClassNameW (in: hWnd=0x10196, lpClassName=0x26d534, nMaxCount=260 | out: lpClassName="IME") returned 3 [0167.309] StrCmpW (psz1="IME", psz2="HTML Application Host Window Class") returned 1 [0167.309] GetWindow (hWnd=0x10196, uCmd=0x2) returned 0x10190 [0167.309] GetClassNameW (in: hWnd=0x10190, lpClassName=0x26d534, nMaxCount=260 | out: lpClassName="Ge_Suffer_win") returned 13 [0167.309] StrCmpW (psz1="Ge_Suffer_win", psz2="HTML Application Host Window Class") returned -1 [0167.309] GetWindow (hWnd=0x10190, uCmd=0x2) returned 0x10192 [0167.309] GetClassNameW (in: hWnd=0x10192, lpClassName=0x26d534, nMaxCount=260 | out: lpClassName="IME") returned 3 [0167.309] StrCmpW (psz1="IME", psz2="HTML Application Host Window Class") returned 1 [0167.309] GetWindow (hWnd=0x10192, uCmd=0x2) returned 0x1018c [0167.309] GetClassNameW (in: hWnd=0x1018c, lpClassName=0x26d534, nMaxCount=260 | out: lpClassName="Img_Boxes_leisure_window") returned 24 [0167.309] StrCmpW (psz1="Img_Boxes_leisure_window", psz2="HTML Application Host Window Class") returned 1 [0167.310] GetWindow (hWnd=0x1018c, uCmd=0x2) returned 0x1018e [0167.310] GetClassNameW (in: hWnd=0x1018e, lpClassName=0x26d534, nMaxCount=260 | out: lpClassName="IME") returned 3 [0167.310] StrCmpW (psz1="IME", psz2="HTML Application Host Window Class") returned 1 [0167.310] GetWindow (hWnd=0x1018e, uCmd=0x2) returned 0x10188 [0167.310] GetClassNameW (in: hWnd=0x10188, lpClassName=0x26d534, nMaxCount=260 | out: lpClassName="isolation_oxygen_sorry_window") returned 29 [0167.310] StrCmpW (psz1="isolation_oxygen_sorry_window", psz2="HTML Application Host Window Class") returned 1 [0167.310] GetWindow (hWnd=0x10188, uCmd=0x2) returned 0x1018a [0167.310] GetClassNameW (in: hWnd=0x1018a, lpClassName=0x26d534, nMaxCount=260 | out: lpClassName="IME") returned 3 [0167.310] StrCmpW (psz1="IME", psz2="HTML Application Host Window Class") returned 1 [0167.310] GetWindow (hWnd=0x1018a, uCmd=0x2) returned 0x10184 [0167.310] GetClassNameW (in: hWnd=0x10184, lpClassName=0x26d534, nMaxCount=260 | out: lpClassName="freedom_psp_Empty_win") returned 21 [0167.310] StrCmpW (psz1="freedom_psp_Empty_win", psz2="HTML Application Host Window Class") returned -1 [0167.310] GetWindow (hWnd=0x10184, uCmd=0x2) returned 0x10186 [0167.310] GetClassNameW (in: hWnd=0x10186, lpClassName=0x26d534, nMaxCount=260 | out: lpClassName="IME") returned 3 [0167.311] StrCmpW (psz1="IME", psz2="HTML Application Host Window Class") returned 1 [0167.311] GetWindow (hWnd=0x10186, uCmd=0x2) returned 0x10180 [0167.311] GetClassNameW (in: hWnd=0x10180, lpClassName=0x26d534, nMaxCount=260 | out: lpClassName="pond_Mike_aircraft_cls") returned 22 [0167.311] StrCmpW (psz1="pond_Mike_aircraft_cls", psz2="HTML Application Host Window Class") returned 1 [0167.311] GetWindow (hWnd=0x10180, uCmd=0x2) returned 0x10182 [0167.311] GetClassNameW (in: hWnd=0x10182, lpClassName=0x26d534, nMaxCount=260 | out: lpClassName="IME") returned 3 [0167.311] StrCmpW (psz1="IME", psz2="HTML Application Host Window Class") returned 1 [0167.311] GetWindow (hWnd=0x10182, uCmd=0x2) returned 0x1017c [0167.311] GetClassNameW (in: hWnd=0x1017c, lpClassName=0x26d534, nMaxCount=260 | out: lpClassName="Excerpt_") returned 8 [0167.311] StrCmpW (psz1="Excerpt_", psz2="HTML Application Host Window Class") returned -1 [0167.311] GetWindow (hWnd=0x1017c, uCmd=0x2) returned 0x1017e [0167.311] GetClassNameW (in: hWnd=0x1017e, lpClassName=0x26d534, nMaxCount=260 | out: lpClassName="IME") returned 3 [0167.311] StrCmpW (psz1="IME", psz2="HTML Application Host Window Class") returned 1 [0167.311] GetWindow (hWnd=0x1017e, uCmd=0x2) returned 0x10178 [0167.311] GetClassNameW (in: hWnd=0x10178, lpClassName=0x26d534, nMaxCount=260 | out: lpClassName="performerultimateEssexapp") returned 25 [0167.311] StrCmpW (psz1="performerultimateEssexapp", psz2="HTML Application Host Window Class") returned 1 [0167.311] GetWindow (hWnd=0x10178, uCmd=0x2) returned 0x1017a [0167.311] GetClassNameW (in: hWnd=0x1017a, lpClassName=0x26d534, nMaxCount=260 | out: lpClassName="IME") returned 3 [0167.311] StrCmpW (psz1="IME", psz2="HTML Application Host Window Class") returned 1 [0167.311] GetWindow (hWnd=0x1017a, uCmd=0x2) returned 0x10174 [0167.311] GetClassNameW (in: hWnd=0x10174, lpClassName=0x26d534, nMaxCount=260 | out: lpClassName="unlocktribeTrainwindow") returned 22 [0167.311] StrCmpW (psz1="unlocktribeTrainwindow", psz2="HTML Application Host Window Class") returned 1 [0167.311] GetWindow (hWnd=0x10174, uCmd=0x2) returned 0x10176 [0167.311] GetClassNameW (in: hWnd=0x10176, lpClassName=0x26d534, nMaxCount=260 | out: lpClassName="IME") returned 3 [0167.311] StrCmpW (psz1="IME", psz2="HTML Application Host Window Class") returned 1 [0167.311] GetWindow (hWnd=0x10176, uCmd=0x2) returned 0x10170 [0167.312] GetClassNameW (in: hWnd=0x10170, lpClassName=0x26d534, nMaxCount=260 | out: lpClassName="colonMaximumcls") returned 15 [0167.312] StrCmpW (psz1="colonMaximumcls", psz2="HTML Application Host Window Class") returned -1 [0167.312] GetWindow (hWnd=0x10170, uCmd=0x2) returned 0x10172 [0167.312] GetClassNameW (in: hWnd=0x10172, lpClassName=0x26d534, nMaxCount=260 | out: lpClassName="IME") returned 3 [0167.312] StrCmpW (psz1="IME", psz2="HTML Application Host Window Class") returned 1 [0167.312] GetWindow (hWnd=0x10172, uCmd=0x2) returned 0x1016c [0167.312] GetClassNameW (in: hWnd=0x1016c, lpClassName=0x26d534, nMaxCount=260 | out: lpClassName="Batteries_Syntax_Compatibility_app") returned 34 [0167.312] StrCmpW (psz1="Batteries_Syntax_Compatibility_app", psz2="HTML Application Host Window Class") returned -1 [0167.312] GetWindow (hWnd=0x1016c, uCmd=0x2) returned 0x1016e [0167.312] GetClassNameW (in: hWnd=0x1016e, lpClassName=0x26d534, nMaxCount=260 | out: lpClassName="IME") returned 3 [0167.312] StrCmpW (psz1="IME", psz2="HTML Application Host Window Class") returned 1 [0167.312] GetWindow (hWnd=0x1016e, uCmd=0x2) returned 0x10168 [0167.312] GetClassNameW (in: hWnd=0x10168, lpClassName=0x26d534, nMaxCount=260 | out: lpClassName="Subsidiaries_Looks_boxed_cls") returned 28 [0167.312] StrCmpW (psz1="Subsidiaries_Looks_boxed_cls", psz2="HTML Application Host Window Class") returned 1 [0167.312] GetWindow (hWnd=0x10168, uCmd=0x2) returned 0x1016a [0167.312] GetClassNameW (in: hWnd=0x1016a, lpClassName=0x26d534, nMaxCount=260 | out: lpClassName="IME") returned 3 [0167.312] StrCmpW (psz1="IME", psz2="HTML Application Host Window Class") returned 1 [0167.312] GetWindow (hWnd=0x1016a, uCmd=0x2) returned 0x50106 [0167.312] GetClassNameW (in: hWnd=0x50106, lpClassName=0x26d534, nMaxCount=260 | out: lpClassName="zimbabwewin") returned 11 [0167.312] StrCmpW (psz1="zimbabwewin", psz2="HTML Application Host Window Class") returned 1 [0167.312] GetWindow (hWnd=0x50106, uCmd=0x2) returned 0x20164 [0167.312] GetClassNameW (in: hWnd=0x20164, lpClassName=0x26d534, nMaxCount=260 | out: lpClassName="IME") returned 3 [0167.312] StrCmpW (psz1="IME", psz2="HTML Application Host Window Class") returned 1 [0167.312] GetWindow (hWnd=0x20164, uCmd=0x2) returned 0x30158 [0167.312] GetClassNameW (in: hWnd=0x30158, lpClassName=0x26d534, nMaxCount=260 | out: lpClassName="FaxMonWinClass{3FD224BA-8556-47fb-B260-3E451BAE2793}") returned 52 [0167.312] StrCmpW (psz1="FaxMonWinClass{3FD224BA-8556-47fb-B260-3E451BAE2793}", psz2="HTML Application Host Window Class") returned -1 [0167.312] GetWindow (hWnd=0x30158, uCmd=0x2) returned 0x1014e [0167.312] GetClassNameW (in: hWnd=0x1014e, lpClassName=0x26d534, nMaxCount=260 | out: lpClassName="BluetoothNotificationAreaIconWindowClass") returned 40 [0167.313] StrCmpW (psz1="BluetoothNotificationAreaIconWindowClass", psz2="HTML Application Host Window Class") returned -1 [0167.313] GetWindow (hWnd=0x1014e, uCmd=0x2) returned 0x1014c [0167.313] GetClassNameW (in: hWnd=0x1014c, lpClassName=0x26d534, nMaxCount=260 | out: lpClassName="MS_WebcheckMonitor") returned 18 [0167.313] StrCmpW (psz1="MS_WebcheckMonitor", psz2="HTML Application Host Window Class") returned 1 [0167.313] GetWindow (hWnd=0x1014c, uCmd=0x2) returned 0x20142 [0167.313] GetClassNameW (in: hWnd=0x20142, lpClassName=0x26d534, nMaxCount=260 | out: lpClassName="PNIHiddenWnd") returned 12 [0167.313] StrCmpW (psz1="PNIHiddenWnd", psz2="HTML Application Host Window Class") returned 1 [0167.313] GetWindow (hWnd=0x20142, uCmd=0x2) returned 0x10136 [0167.313] GetClassNameW (in: hWnd=0x10136, lpClassName=0x26d534, nMaxCount=260 | out: lpClassName="Media Center SSO") returned 16 [0167.313] StrCmpW (psz1="Media Center SSO", psz2="HTML Application Host Window Class") returned 1 [0167.313] GetWindow (hWnd=0x10136, uCmd=0x2) returned 0x10138 [0167.313] GetClassNameW (in: hWnd=0x10138, lpClassName=0x26d534, nMaxCount=260 | out: lpClassName="IME") returned 3 [0167.313] StrCmpW (psz1="IME", psz2="HTML Application Host Window Class") returned 1 [0167.313] GetWindow (hWnd=0x10138, uCmd=0x2) returned 0x1012e [0167.313] GetClassNameW (in: hWnd=0x1012e, lpClassName=0x26d534, nMaxCount=260 | out: lpClassName="ATL:000007FEFBF641F0") returned 20 [0167.313] StrCmpW (psz1="ATL:000007FEFBF641F0", psz2="HTML Application Host Window Class") returned -1 [0167.313] GetWindow (hWnd=0x1012e, uCmd=0x2) returned 0x10130 [0167.313] GetClassNameW (in: hWnd=0x10130, lpClassName=0x26d534, nMaxCount=260 | out: lpClassName="IME") returned 3 [0167.313] StrCmpW (psz1="IME", psz2="HTML Application Host Window Class") returned 1 [0167.313] GetWindow (hWnd=0x10130, uCmd=0x2) returned 0x10124 [0167.313] GetClassNameW (in: hWnd=0x10124, lpClassName=0x26d534, nMaxCount=260 | out: lpClassName="SystemTray_Main") returned 15 [0167.313] StrCmpW (psz1="SystemTray_Main", psz2="HTML Application Host Window Class") returned 1 [0167.313] GetWindow (hWnd=0x10124, uCmd=0x2) returned 0x10126 [0167.313] GetClassNameW (in: hWnd=0x10126, lpClassName=0x26d534, nMaxCount=260 | out: lpClassName="IME") returned 3 [0167.313] StrCmpW (psz1="IME", psz2="HTML Application Host Window Class") returned 1 [0167.313] GetWindow (hWnd=0x10126, uCmd=0x2) returned 0x200d6 [0167.313] GetClassNameW (in: hWnd=0x200d6, lpClassName=0x26d534, nMaxCount=260 | out: lpClassName="WorkerW") returned 7 [0167.313] StrCmpW (psz1="WorkerW", psz2="HTML Application Host Window Class") returned 1 [0167.313] GetWindow (hWnd=0x200d6, uCmd=0x2) returned 0x200a8 [0167.313] GetClassNameW (in: hWnd=0x200a8, lpClassName=0x26d534, nMaxCount=260 | out: lpClassName="TASKENGINEWINDOWCLASS") returned 21 [0167.314] StrCmpW (psz1="TASKENGINEWINDOWCLASS", psz2="HTML Application Host Window Class") returned 1 [0167.314] GetWindow (hWnd=0x200a8, uCmd=0x2) returned 0x10110 [0167.314] GetClassNameW (in: hWnd=0x10110, lpClassName=0x26d534, nMaxCount=260 | out: lpClassName="IME") returned 3 [0167.314] StrCmpW (psz1="IME", psz2="HTML Application Host Window Class") returned 1 [0167.314] GetWindow (hWnd=0x10110, uCmd=0x2) returned 0x1010c [0167.314] GetClassNameW (in: hWnd=0x1010c, lpClassName=0x26d534, nMaxCount=260 | out: lpClassName="WorkerW") returned 7 [0167.314] StrCmpW (psz1="WorkerW", psz2="HTML Application Host Window Class") returned 1 [0167.314] GetWindow (hWnd=0x1010c, uCmd=0x2) returned 0x1010a [0167.314] GetClassNameW (in: hWnd=0x1010a, lpClassName=0x26d534, nMaxCount=260 | out: lpClassName="MSCTFIME UI") returned 11 [0167.314] StrCmpW (psz1="MSCTFIME UI", psz2="HTML Application Host Window Class") returned 1 [0167.314] GetWindow (hWnd=0x1010a, uCmd=0x2) returned 0x10108 [0167.314] GetClassNameW (in: hWnd=0x10108, lpClassName=0x26d534, nMaxCount=260 | out: lpClassName="WorkerW") returned 7 [0167.314] StrCmpW (psz1="WorkerW", psz2="HTML Application Host Window Class") returned 1 [0167.314] GetWindow (hWnd=0x10108, uCmd=0x2) returned 0x10102 [0167.314] GetClassNameW (in: hWnd=0x10102, lpClassName=0x26d534, nMaxCount=260 | out: lpClassName="WorkerW") returned 7 [0167.314] StrCmpW (psz1="WorkerW", psz2="HTML Application Host Window Class") returned 1 [0167.314] GetWindow (hWnd=0x10102, uCmd=0x2) returned 0x50094 [0167.314] GetClassNameW (in: hWnd=0x50094, lpClassName=0x26d534, nMaxCount=260 | out: lpClassName="DV2ControlHost") returned 14 [0167.314] StrCmpW (psz1="DV2ControlHost", psz2="HTML Application Host Window Class") returned -1 [0167.314] GetWindow (hWnd=0x50094, uCmd=0x2) returned 0x1008a [0167.314] GetClassNameW (in: hWnd=0x1008a, lpClassName=0x26d534, nMaxCount=260 | out: lpClassName="WorkerW") returned 7 [0167.314] StrCmpW (psz1="WorkerW", psz2="HTML Application Host Window Class") returned 1 [0167.314] GetWindow (hWnd=0x1008a, uCmd=0x2) returned 0x10088 [0167.314] GetClassNameW (in: hWnd=0x10088, lpClassName=0x26d534, nMaxCount=260 | out: lpClassName="WorkerW") returned 7 [0167.314] StrCmpW (psz1="WorkerW", psz2="HTML Application Host Window Class") returned 1 [0167.314] GetWindow (hWnd=0x10088, uCmd=0x2) returned 0x10084 [0167.314] GetClassNameW (in: hWnd=0x10084, lpClassName=0x26d534, nMaxCount=260 | out: lpClassName="COMTASKSWINDOWCLASS") returned 19 [0167.314] StrCmpW (psz1="COMTASKSWINDOWCLASS", psz2="HTML Application Host Window Class") returned -1 [0167.314] GetWindow (hWnd=0x10084, uCmd=0x2) returned 0x10086 [0167.314] GetClassNameW (in: hWnd=0x10086, lpClassName=0x26d534, nMaxCount=260 | out: lpClassName="IME") returned 3 [0167.315] StrCmpW (psz1="IME", psz2="HTML Application Host Window Class") returned 1 [0167.315] GetWindow (hWnd=0x10086, uCmd=0x2) returned 0x1007c [0167.315] GetClassNameW (in: hWnd=0x1007c, lpClassName=0x26d534, nMaxCount=260 | out: lpClassName="tooltips_class32") returned 16 [0167.315] StrCmpW (psz1="tooltips_class32", psz2="HTML Application Host Window Class") returned 1 [0167.315] GetWindow (hWnd=0x1007c, uCmd=0x2) returned 0x1006a [0167.315] GetClassNameW (in: hWnd=0x1006a, lpClassName=0x26d534, nMaxCount=260 | out: lpClassName="tooltips_class32") returned 16 [0167.315] StrCmpW (psz1="tooltips_class32", psz2="HTML Application Host Window Class") returned 1 [0167.315] GetWindow (hWnd=0x1006a, uCmd=0x2) returned 0x20020 [0167.315] GetClassNameW (in: hWnd=0x20020, lpClassName=0x26d534, nMaxCount=260 | out: lpClassName="#43") returned 3 [0167.315] StrCmpW (psz1="#43", psz2="HTML Application Host Window Class") returned -1 [0167.315] GetWindow (hWnd=0x20020, uCmd=0x2) returned 0x2002a [0167.315] GetClassNameW (in: hWnd=0x2002a, lpClassName=0x26d534, nMaxCount=260 | out: lpClassName="IME") returned 3 [0167.315] StrCmpW (psz1="IME", psz2="HTML Application Host Window Class") returned 1 [0167.315] GetWindow (hWnd=0x2002a, uCmd=0x2) returned 0x10066 [0167.315] GetClassNameW (in: hWnd=0x10066, lpClassName=0x26d534, nMaxCount=260 | out: lpClassName="NotifyIconOverflowWindow") returned 24 [0167.315] StrCmpW (psz1="NotifyIconOverflowWindow", psz2="HTML Application Host Window Class") returned 1 [0167.315] GetWindow (hWnd=0x10066, uCmd=0x2) returned 0x10052 [0167.315] GetClassNameW (in: hWnd=0x10052, lpClassName=0x26d534, nMaxCount=260 | out: lpClassName="OleDdeWndClass") returned 14 [0167.315] StrCmpW (psz1="OleDdeWndClass", psz2="HTML Application Host Window Class") returned 1 [0167.315] GetWindow (hWnd=0x10052, uCmd=0x2) returned 0x1004a [0167.315] GetClassNameW (in: hWnd=0x1004a, lpClassName=0x26d534, nMaxCount=260 | out: lpClassName="DDEMLEvent") returned 10 [0167.315] StrCmpW (psz1="DDEMLEvent", psz2="HTML Application Host Window Class") returned -1 [0167.315] GetWindow (hWnd=0x1004a, uCmd=0x2) returned 0x20046 [0167.315] GetClassNameW (in: hWnd=0x20046, lpClassName=0x26d534, nMaxCount=260 | out: lpClassName="DDEMLMom") returned 8 [0167.315] StrCmpW (psz1="DDEMLMom", psz2="HTML Application Host Window Class") returned -1 [0167.315] GetWindow (hWnd=0x20046, uCmd=0x2) returned 0x10048 [0167.315] GetClassNameW (in: hWnd=0x10048, lpClassName=0x26d534, nMaxCount=260 | out: lpClassName="IME") returned 3 [0167.315] StrCmpW (psz1="IME", psz2="HTML Application Host Window Class") returned 1 [0167.315] GetWindow (hWnd=0x10048, uCmd=0x2) returned 0x30044 [0167.315] GetClassNameW (in: hWnd=0x30044, lpClassName=0x26d534, nMaxCount=260 | out: lpClassName="Dwm") returned 3 [0167.316] StrCmpW (psz1="Dwm", psz2="HTML Application Host Window Class") returned -1 [0167.316] GetWindow (hWnd=0x30044, uCmd=0x2) returned 0x2001a [0167.316] GetClassNameW (in: hWnd=0x2001a, lpClassName=0x26d534, nMaxCount=260 | out: lpClassName="IME") returned 3 [0167.316] StrCmpW (psz1="IME", psz2="HTML Application Host Window Class") returned 1 [0167.316] GetWindow (hWnd=0x2001a, uCmd=0x2) returned 0x20018 [0167.316] GetClassNameW (in: hWnd=0x20018, lpClassName=0x26d534, nMaxCount=260 | out: lpClassName="CicLoaderWndClass") returned 17 [0167.316] StrCmpW (psz1="CicLoaderWndClass", psz2="HTML Application Host Window Class") returned -1 [0167.316] GetWindow (hWnd=0x20018, uCmd=0x2) returned 0x100f2 [0167.316] GetClassNameW (in: hWnd=0x100f2, lpClassName=0x26d534, nMaxCount=260 | out: lpClassName="Progman") returned 7 [0167.316] StrCmpW (psz1="Progman", psz2="HTML Application Host Window Class") returned 1 [0167.316] GetWindow (hWnd=0x100f2, uCmd=0x2) returned 0x0 [0167.316] RtlAllocateHeap (HeapHandle=0x470000, Flags=0x0, Size=0x1c) returned 0x4da5f0 [0167.316] GetWindowTextW (in: hWnd=0x60114, lpString=0x26c888, nMaxCount=512 | out: lpString="") returned 0 [0167.316] NtdllDefWindowProc_W () returned 0x0 [0167.316] SetWindowTextW (hWnd=0x60114, lpString="Epsilon encryptor") returned 1 [0167.316] NtdllDefWindowProc_W () returned 0x1 [0167.316] LoadLibraryA (lpLibFileName="SHELL32.dll") returned 0x759d0000 [0167.317] GetProcAddress (hModule=0x759d0000, lpProcName="ExtractIconW") returned 0x75addd1c [0167.317] ExtractIconW (hInst=0xb40000, lpszExeFileName="msiexec.exe", nIconIndex=0x0) returned 0xe01c7 [0167.322] SendMessageW (hWnd=0x50160, Msg=0x80, wParam=0x1, lParam=0xe01c7) returned 0x0 [0167.322] NtdllDefWindowProc_W () returned 0x0 [0167.323] NtdllDefWindowProc_W () returned 0x0 [0167.323] NtdllDefWindowProc_W () returned 0x0 [0167.323] SendMessageW (hWnd=0x60114, Msg=0x80, wParam=0x0, lParam=0xe01c7) returned 0x0 [0167.323] NtdllDefWindowProc_W () returned 0x0 [0167.324] SetWindowLongW (hWnd=0x60114, nIndex=-16, dwNewLong=13041664) returned -2033254400 [0167.324] NtdllDefWindowProc_W () returned 0x0 [0167.324] NtdllDefWindowProc_W () returned 0x0 [0167.340] SetWindowLongW (hWnd=0x60114, nIndex=-20, dwNewLong=262144) returned 262400 [0167.340] NtdllDefWindowProc_W () returned 0x0 [0167.340] NtdllDefWindowProc_W () returned 0x0 [0167.340] SetWindowPos (hWnd=0x60114, hWndInsertAfter=0xfffffffe, X=0, Y=0, cx=0, cy=0, uFlags=0x37) returned 1 [0167.340] NtdllDefWindowProc_W () returned 0x0 [0167.340] NtdllDefWindowProc_W () returned 0x0 [0167.341] NtdllDefWindowProc_W () returned 0x0 [0167.341] GlobalAddAtomW (lpString="6zHlLA") returned 0xc155 [0167.341] SetPropW (hWnd=0x50160, lpString=0xc155, hData=0x50160) returned 1 [0167.341] ShowWindow (hWnd=0x60114, nCmdShow=1) returned 0 [0167.341] NtdllDefWindowProc_W () returned 0x0 [0167.341] NtdllDefWindowProc_W () returned 0x0 [0167.342] NtdllDefWindowProc_W () returned 0x0 [0167.346] NtdllDefWindowProc_W () returned 0x0 [0167.350] NtdllDefWindowProc_W () returned 0x1 [0167.351] NtdllDefWindowProc_W () returned 0x0 [0167.351] GetClientRect (in: hWnd=0x60114, lpRect=0x26d570 | out: lpRect=0x26d570) returned 1 [0167.351] GetClientRect (in: hWnd=0x60114, lpRect=0x26d570 | out: lpRect=0x26d570) returned 1 [0167.351] NtdllDefWindowProc_W () returned 0x0 [0167.351] UpdateWindow (hWnd=0x60114) returned 1 [0167.351] NtdllDefWindowProc_W () returned 0x0 [0167.351] GetWindowLongW (hWnd=0x5011e, nIndex=-21) returned 4858488 [0167.352] RedrawWindow (hWnd=0x5011e, lprcUpdate=0x0, hrgnUpdate=0x0, flags=0xa1) returned 1 [0167.352] RtlAllocateHeap (HeapHandle=0x470000, Flags=0x8, Size=0x4c) returned 0x4aeb68 [0167.352] GetCurrentThreadId () returned 0x220 [0167.352] GetCurrentThreadId () returned 0x220 [0167.352] RtlAllocateHeap (HeapHandle=0x470000, Flags=0x0, Size=0xec) returned 0x4ac480 [0167.352] RtlAllocateHeap (HeapHandle=0x470000, Flags=0x0, Size=0xc) returned 0x4d9b20 [0167.352] RtlAllocateHeap (HeapHandle=0x470000, Flags=0x0, Size=0x30) returned 0x4c7740 [0167.352] RtlAllocateHeap (HeapHandle=0x470000, Flags=0x0, Size=0x64) returned 0x4dacf0 [0167.352] RtlAllocateHeap (HeapHandle=0x470000, Flags=0x0, Size=0xec) returned 0x4b4d80 [0167.352] HeapFree (in: hHeap=0x470000, dwFlags=0x0, lpMem=0x0 | out: hHeap=0x470000) returned 1 [0167.352] HeapFree (in: hHeap=0x470000, dwFlags=0x0, lpMem=0x0 | out: hHeap=0x470000) returned 1 [0167.353] RtlAllocateHeap (HeapHandle=0x470000, Flags=0x8, Size=0xe8) returned 0x4b4e78 [0167.353] RtlAllocateHeap (HeapHandle=0x470000, Flags=0x8, Size=0xb4) returned 0x4ac578 [0167.353] HeapFree (in: hHeap=0x470000, dwFlags=0x0, lpMem=0x0 | out: hHeap=0x470000) returned 1 [0167.353] HeapFree (in: hHeap=0x470000, dwFlags=0x0, lpMem=0x0 | out: hHeap=0x470000) returned 1 [0167.353] HeapFree (in: hHeap=0x470000, dwFlags=0x0, lpMem=0x0 | out: hHeap=0x470000) returned 1 [0167.353] IntersectRect (in: lprcDst=0x26cc64, lprcSrc1=0x26cc64, lprcSrc2=0x26cc34 | out: lprcDst=0x26cc64) returned 1 [0167.353] IntersectRect (in: lprcDst=0x4c15e8, lprcSrc1=0x4c15e8, lprcSrc2=0x26cc54 | out: lprcDst=0x4c15e8) returned 1 [0167.353] IntersectRect (in: lprcDst=0x4c15e8, lprcSrc1=0x4c15e8, lprcSrc2=0x26cc74 | out: lprcDst=0x4c15e8) returned 1 [0167.353] IntersectRect (in: lprcDst=0x26c828, lprcSrc1=0x26c828, lprcSrc2=0x26c7f8 | out: lprcDst=0x26c828) returned 1 [0167.353] IntersectRect (in: lprcDst=0x4c1670, lprcSrc1=0x4c1670, lprcSrc2=0x26c818 | out: lprcDst=0x4c1670) returned 1 [0167.353] IntersectRect (in: lprcDst=0x26c924, lprcSrc1=0x26c924, lprcSrc2=0x26c8f4 | out: lprcDst=0x26c924) returned 1 [0167.353] IntersectRect (in: lprcDst=0x4c15e8, lprcSrc1=0x4c15e8, lprcSrc2=0x26c914 | out: lprcDst=0x4c15e8) returned 1 [0167.353] HeapFree (in: hHeap=0x470000, dwFlags=0x0, lpMem=0x0 | out: hHeap=0x470000) returned 1 [0167.353] IntersectRect (in: lprcDst=0x26c838, lprcSrc1=0x26c838, lprcSrc2=0x4c15d8 | out: lprcDst=0x26c838) returned 1 [0167.353] HeapFree (in: hHeap=0x470000, dwFlags=0x0, lpMem=0x0 | out: hHeap=0x470000) returned 1 [0167.353] UnionRect (in: lprcDst=0x26ce80, lprcSrc1=0x26ce80, lprcSrc2=0x26ce2c | out: lprcDst=0x26ce80) returned 1 [0167.353] RtlAllocateHeap (HeapHandle=0x470000, Flags=0x0, Size=0x28) returned 0x4b1be0 [0167.353] HeapFree (in: hHeap=0x470000, dwFlags=0x0, lpMem=0x4b1be0 | out: hHeap=0x470000) returned 1 [0167.353] RedrawWindow (hWnd=0x5011e, lprcUpdate=0x26cf00, hrgnUpdate=0x0, flags=0x21) returned 1 [0167.353] MapWindowPoints (in: hWndFrom=0x5011e, hWndTo=0x0, lpPoints=0x26cf8c, cPoints=0x1 | out: lpPoints=0x26cf8c) returned 8519788 [0167.353] BeginPaint (in: hWnd=0x5011e, lpPaint=0x26d3c0 | out: lpPaint=0x26d3c0) returned 0x70109ff [0167.354] GetWindowLongW (hWnd=0x5011e, nIndex=-21) returned 4858488 [0167.354] GetCurrentThreadId () returned 0x220 [0167.354] GetWindowLongW (hWnd=0x5011e, nIndex=-21) returned 4858488 [0167.354] GetCurrentThreadId () returned 0x220 [0167.354] IsRectEmpty (lprc=0x26d3c8) returned 0 [0167.354] CreateRectRgnIndirect (lprect=0x6fbe7be0) returned 0x4f0409fa [0167.354] GetRandomRgn (hdc=0x70109ff, hrgn=0x4f0409fa, i=4) returned 1 [0167.354] OffsetRgn (hrgn=0x4f0409fa, x=-108, y=-130) returned 2 [0167.354] MapWindowPoints (in: hWndFrom=0x5011e, hWndTo=0x0, lpPoints=0x26cf7c, cPoints=0x1 | out: lpPoints=0x26cf7c) returned 8519788 [0167.354] GetDeviceCaps (hdc=0x13010a0a, index=38) returned 32409 [0167.354] IntersectRect (in: lprcDst=0x26d03c, lprcSrc1=0x481b2c, lprcSrc2=0x481b1c | out: lprcDst=0x26d03c) returned 1 [0167.354] IntersectRect (in: lprcDst=0x26cf18, lprcSrc1=0x481b2c, lprcSrc2=0x481b1c | out: lprcDst=0x26cf18) returned 1 [0167.354] IntersectRect (in: lprcDst=0x26d02c, lprcSrc1=0x26d02c, lprcSrc2=0x26cf18 | out: lprcDst=0x26d02c) returned 1 [0167.354] IsRectEmpty (lprc=0x26d02c) returned 0 [0167.354] RtlAllocateHeap (HeapHandle=0x470000, Flags=0x8, Size=0x50) returned 0x4aeb10 [0167.354] GetDeviceCaps (hdc=0x13010a0a, index=38) returned 32409 [0167.354] GetDeviceCaps (hdc=0x70109ff, index=14) returned 1 [0167.354] GetDeviceCaps (hdc=0x70109ff, index=12) returned 32 [0167.354] GetRegionData (in: hrgn=0x4f0409fa, nCount=0x0, lpRgnData=0x0 | out: lpRgnData=0x0) returned 0x30 [0167.354] RtlAllocateHeap (HeapHandle=0x470000, Flags=0x0, Size=0x30) returned 0x4c7778 [0167.354] GetRegionData (in: hrgn=0x4f0409fa, nCount=0x30, lpRgnData=0x4c7778 | out: lpRgnData=0x4c7778) returned 0x30 [0167.354] RtlAllocateHeap (HeapHandle=0x470000, Flags=0x0, Size=0x40) returned 0x4c8020 [0167.354] HeapFree (in: hHeap=0x470000, dwFlags=0x0, lpMem=0x4c8020 | out: hHeap=0x470000) returned 1 [0167.354] HeapFree (in: hHeap=0x470000, dwFlags=0x0, lpMem=0x4c7778 | out: hHeap=0x470000) returned 1 [0167.354] IntersectRect (in: lprcDst=0x26a664, lprcSrc1=0x26a664, lprcSrc2=0x26a634 | out: lprcDst=0x26a664) returned 1 [0167.354] IntersectRect (in: lprcDst=0x26a594, lprcSrc1=0x26a594, lprcSrc2=0x26a564 | out: lprcDst=0x26a594) returned 1 [0167.354] IntersectRect (in: lprcDst=0x26a488, lprcSrc1=0x26a488, lprcSrc2=0x26a478 | out: lprcDst=0x26a488) returned 1 [0167.355] GetObjectType (h=0x70109ff) returned 0x3 [0167.355] GetDeviceCaps (hdc=0x70109ff, index=2) returned 1 [0167.355] RtlAllocateHeap (HeapHandle=0x470000, Flags=0x0, Size=0x30) returned 0x4c7778 [0167.355] ExtCreateRegion (lpx=0x0, nCount=0x30, lpData=0x4c7778) returned 0x3a04025e [0167.355] HeapFree (in: hHeap=0x470000, dwFlags=0x0, lpMem=0x4c7778 | out: hHeap=0x470000) returned 1 [0167.355] SelectClipRgn (hdc=0x70109ff, hrgn=0x3a04025e) returned 2 [0167.355] DeleteObject (ho=0x3a04025e) returned 1 [0167.355] _CIsqrt () returned 0x3f1a027f [0167.355] _CIsqrt () returned 0x3f1a027f [0167.355] _CIatan2 () returned 0x20 [0167.355] _CIatan2 () returned 0x20 [0167.355] GetStockObject (i=8) returned 0x1b00016 [0167.355] SelectObject (hdc=0x70109ff, h=0x1b00016) returned 0x1b00017 [0167.355] GetViewportOrgEx (in: hdc=0x70109ff, lppoint=0x26a26c | out: lppoint=0x26a26c) returned 1 [0167.355] CreateSolidBrush (color=0xa0a0a0) returned 0x671001e2 [0167.355] SelectObject (hdc=0x70109ff, h=0x671001e2) returned 0x1900010 [0167.355] UnrealizeObject (h=0x671001e2) returned 1 [0167.355] SetBrushOrgEx (in: hdc=0x70109ff, x=0, y=0, lppt=0x0 | out: lppt=0x0) returned 1 [0167.355] MulDiv (nNumber=2, nNumerator=1, nDenominator=2) returned 1 [0167.355] MulDiv (nNumber=2, nNumerator=0, nDenominator=2) returned 0 [0167.355] MulDiv (nNumber=2, nNumerator=0, nDenominator=2) returned 0 [0167.355] MulDiv (nNumber=2, nNumerator=0, nDenominator=2) returned 0 [0167.355] MulDiv (nNumber=2, nNumerator=1, nDenominator=2) returned 1 [0167.355] MulDiv (nNumber=2, nNumerator=1, nDenominator=2) returned 1 [0167.355] Polygon (hdc=0x70109ff, apt=0x26a190, cpt=6) returned 1 [0167.364] CreateSolidBrush (color=0xffffff) returned 0x1d100258 [0167.364] SelectObject (hdc=0x70109ff, h=0x1d100258) returned 0x671001e2 [0167.364] UnrealizeObject (h=0x1d100258) returned 1 [0167.364] SetBrushOrgEx (in: hdc=0x70109ff, x=0, y=0, lppt=0x0 | out: lppt=0x0) returned 1 [0167.364] MulDiv (nNumber=2, nNumerator=1, nDenominator=2) returned 1 [0167.364] MulDiv (nNumber=2, nNumerator=0, nDenominator=2) returned 0 [0167.364] MulDiv (nNumber=2, nNumerator=0, nDenominator=2) returned 0 [0167.364] MulDiv (nNumber=2, nNumerator=0, nDenominator=2) returned 0 [0167.364] MulDiv (nNumber=2, nNumerator=1, nDenominator=2) returned 1 [0167.364] MulDiv (nNumber=2, nNumerator=1, nDenominator=2) returned 1 [0167.364] Polygon (hdc=0x70109ff, apt=0x26a190, cpt=8) returned 1 [0167.365] CreateSolidBrush (color=0x696969) returned 0x4b100874 [0167.365] SelectObject (hdc=0x70109ff, h=0x4b100874) returned 0x1d100258 [0167.365] UnrealizeObject (h=0x4b100874) returned 1 [0167.365] SetBrushOrgEx (in: hdc=0x70109ff, x=0, y=0, lppt=0x0 | out: lppt=0x0) returned 1 [0167.365] MulDiv (nNumber=2, nNumerator=2, nDenominator=2) returned 2 [0167.365] MulDiv (nNumber=2, nNumerator=1, nDenominator=2) returned 1 [0167.365] MulDiv (nNumber=2, nNumerator=1, nDenominator=2) returned 1 [0167.365] MulDiv (nNumber=2, nNumerator=1, nDenominator=2) returned 1 [0167.365] MulDiv (nNumber=2, nNumerator=2, nDenominator=2) returned 2 [0167.365] MulDiv (nNumber=2, nNumerator=2, nDenominator=2) returned 2 [0167.365] Polygon (hdc=0x70109ff, apt=0x26a190, cpt=6) returned 1 [0167.366] CreateSolidBrush (color=0xf0f0f0) returned 0x42100a16 [0167.366] SelectObject (hdc=0x70109ff, h=0x42100a16) returned 0x4b100874 [0167.366] UnrealizeObject (h=0x42100a16) returned 1 [0167.366] SetBrushOrgEx (in: hdc=0x70109ff, x=0, y=0, lppt=0x0 | out: lppt=0x0) returned 1 [0167.366] MulDiv (nNumber=2, nNumerator=2, nDenominator=2) returned 2 [0167.366] MulDiv (nNumber=2, nNumerator=1, nDenominator=2) returned 1 [0167.366] MulDiv (nNumber=2, nNumerator=1, nDenominator=2) returned 1 [0167.366] MulDiv (nNumber=2, nNumerator=1, nDenominator=2) returned 1 [0167.366] MulDiv (nNumber=2, nNumerator=2, nDenominator=2) returned 2 [0167.366] MulDiv (nNumber=2, nNumerator=2, nDenominator=2) returned 2 [0167.366] Polygon (hdc=0x70109ff, apt=0x26a190, cpt=8) returned 1 [0167.366] SelectObject (hdc=0x70109ff, h=0x1900010) returned 0x42100a16 [0167.366] IntersectRect (in: lprcDst=0x26a5c8, lprcSrc1=0x26a5c8, lprcSrc2=0x4c1480 | out: lprcDst=0x26a5c8) returned 1 [0167.366] RtlAllocateHeap (HeapHandle=0x470000, Flags=0x0, Size=0x30) returned 0x4c7778 [0167.366] ExtCreateRegion (lpx=0x0, nCount=0x30, lpData=0x4c7778) returned 0x3b04025e [0167.366] HeapFree (in: hHeap=0x470000, dwFlags=0x0, lpMem=0x4c7778 | out: hHeap=0x470000) returned 1 [0167.366] SelectClipRgn (hdc=0x70109ff, hrgn=0x3b04025e) returned 2 [0167.366] IntersectRect (in: lprcDst=0x26a39c, lprcSrc1=0x26a39c, lprcSrc2=0x26a36c | out: lprcDst=0x26a39c) returned 1 [0167.366] IntersectRect (in: lprcDst=0x4c1490, lprcSrc1=0x4c1490, lprcSrc2=0x26a38c | out: lprcDst=0x4c1490) returned 1 [0167.366] IntersectRect (in: lprcDst=0x26a1d8, lprcSrc1=0x26a1d8, lprcSrc2=0x4c1480 | out: lprcDst=0x26a1d8) returned 1 [0167.366] RtlAllocateHeap (HeapHandle=0x470000, Flags=0x0, Size=0x44) returned 0x4c90b0 [0167.366] HeapFree (in: hHeap=0x470000, dwFlags=0x0, lpMem=0x4c90b0 | out: hHeap=0x470000) returned 1 [0167.366] IntersectRect (in: lprcDst=0x26a3ec, lprcSrc1=0x26a3ec, lprcSrc2=0x26a3bc | out: lprcDst=0x26a3ec) returned 1 [0167.367] HeapFree (in: hHeap=0x470000, dwFlags=0x0, lpMem=0x0 | out: hHeap=0x470000) returned 1 [0167.367] IntersectRect (in: lprcDst=0x4c1490, lprcSrc1=0x4c1490, lprcSrc2=0x26a2c0 | out: lprcDst=0x4c1490) returned 1 [0167.367] IntersectRect (in: lprcDst=0x26a2c0, lprcSrc1=0x26a2c0, lprcSrc2=0x4c14a0 | out: lprcDst=0x26a2c0) returned 1 [0167.367] GetDeviceCaps (hdc=0x70109ff, index=2) returned 1 [0167.367] RtlAllocateHeap (HeapHandle=0x470000, Flags=0x0, Size=0x30) returned 0x4c7778 [0167.367] ExtCreateRegion (lpx=0x0, nCount=0x30, lpData=0x4c7778) returned 0x860407a4 [0167.367] HeapFree (in: hHeap=0x470000, dwFlags=0x0, lpMem=0x4c7778 | out: hHeap=0x470000) returned 1 [0167.367] SelectClipRgn (hdc=0x70109ff, hrgn=0x860407a4) returned 2 [0167.367] DeleteObject (ho=0x860407a4) returned 1 [0167.367] SelectObject (hdc=0x70109ff, h=0x1d100258) returned 0x1900010 [0167.367] PatBlt (hdc=0x70109ff, x=2, y=2, w=1060, h=583, rop=0xf00021) returned 1 [0167.367] SelectObject (hdc=0x70109ff, h=0x1900010) returned 0x1d100258 [0167.367] IntersectRect (in: lprcDst=0x4c1490, lprcSrc1=0x4c1490, lprcSrc2=0x26a3dc | out: lprcDst=0x4c1490) returned 1 [0167.367] IntersectRect (in: lprcDst=0x4c1490, lprcSrc1=0x4c1490, lprcSrc2=0x26a3fc | out: lprcDst=0x4c1490) returned 1 [0167.367] IntersectRect (in: lprcDst=0x269f88, lprcSrc1=0x269f88, lprcSrc2=0x269f58 | out: lprcDst=0x269f88) returned 1 [0167.367] IntersectRect (in: lprcDst=0x4c1518, lprcSrc1=0x4c1518, lprcSrc2=0x269f78 | out: lprcDst=0x4c1518) returned 1 [0167.367] IntersectRect (in: lprcDst=0x26a0b4, lprcSrc1=0x26a0b4, lprcSrc2=0x26a084 | out: lprcDst=0x26a0b4) returned 1 [0167.367] HeapFree (in: hHeap=0x470000, dwFlags=0x0, lpMem=0x0 | out: hHeap=0x470000) returned 1 [0167.367] IntersectRect (in: lprcDst=0x4c1490, lprcSrc1=0x4c1490, lprcSrc2=0x26a0a4 | out: lprcDst=0x4c1490) returned 1 [0167.367] DeleteObject (ho=0x3b04025e) returned 1 [0167.367] GetStockObject (i=15) returned 0x188000b [0167.367] SelectPalette (hdc=0x70109ff, hPal=0x188000b, bForceBkgd=1) returned 0x188000b [0167.367] EndPaint (hWnd=0x5011e, lpPaint=0x26d3c0) returned 1 [0167.367] MapWindowPoints (in: hWndFrom=0x5011e, hWndTo=0x0, lpPoints=0x26cf7c, cPoints=0x1 | out: lpPoints=0x26cf7c) returned 8519788 [0167.368] DeleteObject (ho=0x4f0409fa) returned 1 [0167.368] GetCurrentThreadId () returned 0x220 [0167.368] GetCurrentThreadId () returned 0x220 [0167.368] GetCurrentThreadId () returned 0x220 [0167.368] HeapFree (in: hHeap=0x470000, dwFlags=0x0, lpMem=0x4afb20 | out: hHeap=0x470000) returned 1 [0167.368] HeapFree (in: hHeap=0x470000, dwFlags=0x0, lpMem=0x4d9ac0 | out: hHeap=0x470000) returned 1 [0167.368] HeapFree (in: hHeap=0x470000, dwFlags=0x0, lpMem=0x0 | out: hHeap=0x470000) returned 1 [0167.368] HeapFree (in: hHeap=0x470000, dwFlags=0x0, lpMem=0x4da500 | out: hHeap=0x470000) returned 1 [0167.371] RtlAllocateHeap (HeapHandle=0x470000, Flags=0x8, Size=0x24) returned 0x4b1be0 [0167.371] RtlAllocateHeap (HeapHandle=0x470000, Flags=0x0, Size=0x8) returned 0x4c4ce0 [0167.371] RtlAllocateHeap (HeapHandle=0x470000, Flags=0x8, Size=0x68) returned 0x4dad60 [0167.371] RtlAllocateHeap (HeapHandle=0x470000, Flags=0x0, Size=0x14) returned 0x4c1cc8 [0167.371] RtlAllocateHeap (HeapHandle=0x470000, Flags=0x0, Size=0x10) returned 0x4d9ac0 [0167.371] RtlAllocateHeap (HeapHandle=0x470000, Flags=0x0, Size=0x40) returned 0x4c8020 [0167.372] RtlAllocateHeap (HeapHandle=0x470000, Flags=0x8, Size=0x4c) returned 0x4aea60 [0167.372] RtlAllocateHeap (HeapHandle=0x470000, Flags=0x0, Size=0x10) returned 0x4d9b38 [0167.372] RtlReAllocateHeap (Heap=0x470000, Flags=0x0, Ptr=0x4d9a78, Size=0x18) returned 0x4c1ce8 [0167.372] RtlAllocateHeap (HeapHandle=0x470000, Flags=0x8, Size=0x4c) returned 0x4ae6f0 [0167.372] RtlAllocateHeap (HeapHandle=0x470000, Flags=0x0, Size=0x800) returned 0x4aabb0 [0167.372] RtlAllocateHeap (HeapHandle=0x470000, Flags=0x0, Size=0xc4) returned 0x4ab3b8 [0167.372] HeapFree (in: hHeap=0x470000, dwFlags=0x0, lpMem=0x0 | out: hHeap=0x470000) returned 1 [0167.372] RtlAllocateHeap (HeapHandle=0x470000, Flags=0x0, Size=0x50) returned 0x4aee80 [0167.372] HeapFree (in: hHeap=0x470000, dwFlags=0x0, lpMem=0x4aee80 | out: hHeap=0x470000) returned 1 [0167.372] HeapFree (in: hHeap=0x470000, dwFlags=0x0, lpMem=0x0 | out: hHeap=0x470000) returned 1 [0167.372] RtlReAllocateHeap (Heap=0x470000, Flags=0x0, Ptr=0x4dbf30, Size=0xe4) returned 0x4da8d8 [0167.372] ParseURLW (in: pcszURL="file:///C:/Users/5p5NrGJn0jS%20HALPmcxz/Desktop/READ_ME.hta", ppu=0x26f7f8 | out: ppu=0x26f7f8) returned 0x0 [0167.372] IUnknown:AddRef (This=0x49c66c) returned 0x3 [0167.372] IInternetSecurityManager:MapUrlToZone (in: This=0x6ff696bc, pwszUrl="file:///C:/Users/5p5NrGJn0jS%20HALPmcxz/Desktop/READ_ME.hta", pdwZone=0x26f79c, dwFlags=0x0 | out: pdwZone=0x26f79c*=0xffffffff) returned 0x800c0011 [0167.373] CoInternetIsFeatureEnabled (FeatureEntry=0x8, dwFlags=0x2) returned 0x1 [0167.373] CoInternetIsFeatureEnabled (FeatureEntry=0x8, dwFlags=0x2) returned 0x1 [0167.373] CoInternetIsFeatureEnabled (FeatureEntry=0xe, dwFlags=0x2) returned 0x1 [0167.373] IInternetSecurityManager:ProcessUrlAction (in: This=0x6ff696bc, pwszUrl="file:///C:/Users/5p5NrGJn0jS%20HALPmcxz/Desktop/READ_ME.hta", dwAction=0x1400, pPolicy=0x26f7a0, cbPolicy=0x4, pContext=0x0, cbContext=0x0, dwFlags=0x40, dwReserved=0x0 | out: pPolicy=0x26f7a0*=0x0) returned 0x0 [0167.373] CoInternetIsFeatureEnabled (FeatureEntry=0x8, dwFlags=0x2) returned 0x1 [0167.373] IUnknown:Release (This=0x49c66c) returned 0x2 [0167.373] HeapFree (in: hHeap=0x470000, dwFlags=0x0, lpMem=0x4d9b38 | out: hHeap=0x470000) returned 1 [0167.373] ParseURLW (in: pcszURL="file:///C:/Users/5p5NrGJn0jS%20HALPmcxz/Desktop/READ_ME.hta", ppu=0x26f7b4 | out: ppu=0x26f7b4) returned 0x0 [0167.373] IUnknown:AddRef (This=0x49c66c) returned 0x3 [0167.373] IInternetSecurityManager:MapUrlToZone (in: This=0x6ff696bc, pwszUrl="file:///C:/Users/5p5NrGJn0jS%20HALPmcxz/Desktop/READ_ME.hta", pdwZone=0x26f754, dwFlags=0x0 | out: pdwZone=0x26f754*=0xffffffff) returned 0x800c0011 [0167.373] CoInternetIsFeatureEnabled (FeatureEntry=0x8, dwFlags=0x2) returned 0x1 [0167.373] CoInternetIsFeatureEnabled (FeatureEntry=0x8, dwFlags=0x2) returned 0x1 [0167.373] CoInternetIsFeatureEnabled (FeatureEntry=0xe, dwFlags=0x2) returned 0x1 [0167.374] IInternetSecurityManager:ProcessUrlAction (in: This=0x6ff696bc, pwszUrl="file:///C:/Users/5p5NrGJn0jS%20HALPmcxz/Desktop/READ_ME.hta", dwAction=0x1400, pPolicy=0x26f758, cbPolicy=0x4, pContext=0x0, cbContext=0x0, dwFlags=0x40, dwReserved=0x0 | out: pPolicy=0x26f758*=0x0) returned 0x0 [0167.374] CoInternetIsFeatureEnabled (FeatureEntry=0x8, dwFlags=0x2) returned 0x1 [0167.374] IUnknown:Release (This=0x49c66c) returned 0x2 [0167.374] ParseURLW (in: pcszURL="file:///C:/Users/5p5NrGJn0jS%20HALPmcxz/Desktop/READ_ME.hta", ppu=0x26f744 | out: ppu=0x26f744) returned 0x0 [0167.374] IUnknown:AddRef (This=0x49c66c) returned 0x3 [0167.374] IInternetSecurityManager:MapUrlToZone (in: This=0x6ff696bc, pwszUrl="file:///C:/Users/5p5NrGJn0jS%20HALPmcxz/Desktop/READ_ME.hta", pdwZone=0x26f6e4, dwFlags=0x0 | out: pdwZone=0x26f6e4*=0xffffffff) returned 0x800c0011 [0167.374] CoInternetIsFeatureEnabled (FeatureEntry=0x8, dwFlags=0x2) returned 0x1 [0167.374] CoInternetIsFeatureEnabled (FeatureEntry=0x8, dwFlags=0x2) returned 0x1 [0167.374] CoInternetIsFeatureEnabled (FeatureEntry=0xe, dwFlags=0x2) returned 0x1 [0167.374] IInternetSecurityManager:ProcessUrlAction (in: This=0x6ff696bc, pwszUrl="file:///C:/Users/5p5NrGJn0jS%20HALPmcxz/Desktop/READ_ME.hta", dwAction=0x1400, pPolicy=0x26f6e8, cbPolicy=0x4, pContext=0x0, cbContext=0x0, dwFlags=0x40, dwReserved=0x0 | out: pPolicy=0x26f6e8*=0x0) returned 0x0 [0167.374] CoInternetIsFeatureEnabled (FeatureEntry=0x8, dwFlags=0x2) returned 0x1 [0167.374] IUnknown:Release (This=0x49c66c) returned 0x2 [0167.374] CoCreateInstance (in: rclsid=0x26f734*(Data1=0xf414c260, Data2=0x6ac0, Data3=0x11cf, Data4=([0]=0xb6, [1]=0xd1, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0xbb, [6]=0xbb, [7]=0x58)), pUnkOuter=0x0, dwClsContext=0x1, riid=0x6fb895b4*(Data1=0xbb1a2ae1, Data2=0xa4f9, Data3=0x11cf, Data4=([0]=0x8f, [1]=0x20, [2]=0x0, [3]=0x80, [4]=0x5f, [5]=0x2c, [6]=0xd0, [7]=0x64)), ppv=0x26f6f0 | out: ppv=0x26f6f0*=0x25b04c8) returned 0x0 [0167.551] malloc (_Size=0x80) returned 0x3d908 [0167.551] GetVersion () returned 0x1db10106 [0167.551] __dllonexit () returned 0x75287ecf [0167.552] __dllonexit () returned 0x75287e9b [0167.552] __dllonexit () returned 0x75287eb5 [0167.552] __dllonexit () returned 0x75287f70 [0167.553] LoadLibraryExA (lpLibFileName="ADVAPI32.dll", hFile=0x0, dwFlags=0x0) returned 0x77710000 [0167.553] GetProcAddress (hModule=0x77710000, lpProcName="RegisterTraceGuidsA") returned 0x77ca848f [0167.553] EtwRegisterTraceGuidsA () returned 0x0 [0167.553] GetProcAddress (hModule=0x77710000, lpProcName="RegisterTraceGuidsA") returned 0x77ca848f [0167.553] EtwRegisterTraceGuidsA () returned 0x0 [0167.553] GetModuleFileNameA (in: hModule=0x0, lpFilename=0x26e0a4, nSize=0x104 | out: lpFilename="C:\\Windows\\SysWOW64\\mshta.exe" (normalized: "c:\\windows\\syswow64\\mshta.exe")) returned 0x1d [0167.554] GetProcAddress (hModule=0x77710000, lpProcName="RegOpenKeyExA") returned 0x77724907 [0167.554] RegOpenKeyExA (in: hKey=0x80000002, lpSubKey="SOFTWARE\\Microsoft\\Windows Script\\Features", ulOptions=0x0, samDesired=0x1, phkResult=0x26e1c8 | out: phkResult=0x26e1c8*=0x0) returned 0x2 [0167.558] GetVersion () returned 0x1db10106 [0167.560] DllGetClassObject (in: rclsid=0x49f910*(Data1=0xf414c260, Data2=0x6ac0, Data3=0x11cf, Data4=([0]=0xb6, [1]=0xd1, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0xbb, [6]=0xbb, [7]=0x58)), riid=0x7666ee84*(Data1=0x1, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppv=0x26e9b4 | out: ppv=0x26e9b4*=0x25b0488) returned 0x0 [0167.560] ??2@YAPAXI@Z () returned 0x25b0488 [0167.560] JScriptEngine5:IClassFactory:CreateInstance (in: This=0x25b0488, pUnkOuter=0x0, riid=0x26f360*(Data1=0xbb1a2ae1, Data2=0xa4f9, Data3=0x11cf, Data4=([0]=0x8f, [1]=0x20, [2]=0x0, [3]=0x80, [4]=0x5f, [5]=0x2c, [6]=0xd0, [7]=0x64)), ppvObject=0x26e9a0 | out: ppvObject=0x26e9a0*=0x25b04c8) returned 0x0 [0167.560] ??2@YAPAXI@Z () returned 0x25b04c8 [0167.560] GetUserDefaultLCID () returned 0x409 [0167.560] GetACP () returned 0x4e4 [0167.560] JScriptEngine5:IUnknown:AddRef (This=0x25b04c8) returned 0x2 [0167.560] JScriptEngine5:IUnknown:Release (This=0x25b04c8) returned 0x1 [0167.561] JScriptEngine5:IUnknown:Release (This=0x25b0488) returned 0x0 [0167.561] ??3@YAXPAX@Z () returned 0x1 [0167.561] JScriptEngine5:IUnknown:QueryInterface (in: This=0x25b04c8, riid=0x6fb895b4*(Data1=0xbb1a2ae1, Data2=0xa4f9, Data3=0x11cf, Data4=([0]=0x8f, [1]=0x20, [2]=0x0, [3]=0x80, [4]=0x5f, [5]=0x2c, [6]=0xd0, [7]=0x64)), ppvObject=0x26f694 | out: ppvObject=0x26f694*=0x25b04c8) returned 0x0 [0167.561] JScriptEngine5:IUnknown:Release (This=0x25b04c8) returned 0x1 [0167.561] IUnknown:AddRef (This=0x49c66c) returned 0x3 [0167.561] IInternetSecurityManager:MapUrlToZone (in: This=0x6ff696bc, pwszUrl="file:///C:/Users/5p5NrGJn0jS%20HALPmcxz/Desktop/READ_ME.hta", pdwZone=0x26f604, dwFlags=0x0 | out: pdwZone=0x26f604*=0xffffffff) returned 0x800c0011 [0167.561] CoInternetIsFeatureEnabled (FeatureEntry=0x8, dwFlags=0x2) returned 0x1 [0167.561] CoInternetIsFeatureEnabled (FeatureEntry=0x8, dwFlags=0x2) returned 0x1 [0167.561] CoInternetIsFeatureEnabled (FeatureEntry=0xe, dwFlags=0x2) returned 0x1 [0167.561] IInternetSecurityManager:ProcessUrlAction (in: This=0x6ff696bc, pwszUrl="file:///C:/Users/5p5NrGJn0jS%20HALPmcxz/Desktop/READ_ME.hta", dwAction=0x1401, pPolicy=0x26f608, cbPolicy=0x4, pContext=0x0, cbContext=0x0, dwFlags=0x40, dwReserved=0x0 | out: pPolicy=0x26f608*=0x0) returned 0x0 [0167.561] CoInternetIsFeatureEnabled (FeatureEntry=0x8, dwFlags=0x2) returned 0x1 [0167.561] IUnknown:Release (This=0x49c66c) returned 0x2 [0167.562] RtlAllocateHeap (HeapHandle=0x470000, Flags=0x0, Size=0x54) returned 0x4c5690 [0167.562] RtlAllocateHeap (HeapHandle=0x470000, Flags=0x0, Size=0x10) returned 0x4d9bb0 [0167.563] GetCurrentThreadId () returned 0x220 [0167.563] ??2@YAPAXI@Z () returned 0x25b0488 [0167.563] GetCurrentThreadId () returned 0x220 [0167.563] RegOpenKeyExA (in: hKey=0x80000002, lpSubKey="Software\\Microsoft\\COM3", ulOptions=0x0, samDesired=0x20019, phkResult=0x26f530 | out: phkResult=0x26f530*=0x26c) returned 0x0 [0167.563] GetProcAddress (hModule=0x77710000, lpProcName="RegQueryValueExA") returned 0x777248ef [0167.563] RegQueryValueExA (in: hKey=0x26c, lpValueName="COM+Enabled", lpReserved=0x0, lpType=0x26f524, lpData=0x26f528, lpcbData=0x26f52c*=0x4 | out: lpType=0x26f524*=0x4, lpData=0x26f528*=0x1, lpcbData=0x26f52c*=0x4) returned 0x0 [0167.563] GetProcAddress (hModule=0x77710000, lpProcName="RegCloseKey") returned 0x7772469d [0167.563] RegCloseKey (hKey=0x26c) returned 0x0 [0167.563] GetModuleHandleA (lpModuleName="ole32.dll") returned 0x76620000 [0167.563] GetProcAddress (hModule=0x76620000, lpProcName="CoGetObjectContext") returned 0x7666632b [0167.563] LoadLibraryExA (lpLibFileName="ole32.dll", hFile=0x0, dwFlags=0x0) returned 0x76620000 [0167.564] GetProcAddress (hModule=0x76620000, lpProcName="CoCreateInstance") returned 0x76669d0b [0167.564] CoCreateInstance (in: rclsid=0x752723a8*(Data1=0x323, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), pUnkOuter=0x0, dwClsContext=0x1, riid=0x752723b8*(Data1=0x146, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppv=0x26f52c | out: ppv=0x26f52c*=0x76766460) returned 0x0 [0167.564] ??2@YAPAXI@Z () returned 0x25b06e0 [0167.564] ??_U@YAPAXI@Z () returned 0x313c0 [0167.564] ??2@YAPAXI@Z () returned 0x25b0770 [0167.564] ??2@YAPAXI@Z () returned 0x25b07a8 [0167.564] ??2@YAPAXI@Z () returned 0x25b0aa0 [0167.564] GetCurrentThreadId () returned 0x220 [0167.565] IsValidLocale (Locale=0x409, dwFlags=0x1) returned 1 [0167.565] GetLocaleInfoA (in: Locale=0x409, LCType=0x1004, lpLCData=0x26f540, cchData=6 | out: lpLCData="1252") returned 5 [0167.565] IsValidCodePage (CodePage=0x4e4) returned 1 [0167.565] GetCurrentThreadId () returned 0x220 [0167.565] GetCurrentThreadId () returned 0x220 [0167.565] CoCreateInstance (in: rclsid=0x752715ec*(Data1=0x6c736db1, Data2=0xbd94, Data3=0x11d0, Data4=([0]=0x8a, [1]=0x23, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0xb5, [6]=0x8e, [7]=0x10)), pUnkOuter=0x0, dwClsContext=0x1, riid=0x752715fc*(Data1=0x6c736dc1, Data2=0xab0d, Data3=0x11d0, Data4=([0]=0xa2, [1]=0xad, [2]=0x0, [3]=0xa0, [4]=0xc9, [5]=0xf, [6]=0x27, [7]=0xe8)), ppv=0x25b06b4 | out: ppv=0x25b06b4*=0x4c8260) returned 0x0 [0167.565] IUnknown:AddRef (This=0x4c8260) returned 0x2 [0167.565] ISystemDebugEventFire:BeginSession (This=0x4c8260, guidSourceID=0x752716d4, strSessionName="JScript:00000588:00000544:00229259") returned 0x0 [0167.565] GetCurrentThreadId () returned 0x220 [0167.565] GetCurrentThreadId () returned 0x220 [0167.565] ??2@YAPAXI@Z () returned 0x25b0b08 [0167.568] GetCurrentThreadId () returned 0x220 [0167.568] StrCmpICW (pszStr1="window", pszStr2="window") returned 0 [0167.568] RtlAllocateHeap (HeapHandle=0x470000, Flags=0x8, Size=0x14) returned 0x4c1d08 [0167.568] CoGetObjectContext (in: riid=0x75270270*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppv=0x26f49c | out: ppv=0x26f49c*=0x4971d0) returned 0x0 [0167.568] ??2@YAPAXI@Z () returned 0x25b0b40 [0167.568] StdGlobalInterfaceTable:IGlobalInterfaceTable:RegisterInterfaceInGlobal (in: This=0x76766460, pUnk=0x25b0b40, riid=0x75275710*(Data1=0x20400, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), pdwCookie=0x25b0b5c | out: pdwCookie=0x25b0b5c*=0x100) returned 0x0 [0167.568] StdGlobalInterfaceTable:IUnknown:QueryInterface (in: This=0x25b0b40, riid=0x766597c4*(Data1=0x1b, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x26f420 | out: ppvObject=0x26f420*=0x0) returned 0x80004002 [0167.568] StdGlobalInterfaceTable:IUnknown:QueryInterface (in: This=0x25b0b40, riid=0x76663e0c*(Data1=0x3, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x26f410 | out: ppvObject=0x26f410*=0x0) returned 0x80004002 [0167.568] StdGlobalInterfaceTable:IUnknown:AddRef (This=0x25b0b40) returned 0x2 [0167.568] IUnknown:AddRef (This=0x4971d0) returned 0x2 [0167.569] IUnknown:Release (This=0x4971d0) returned 0x1 [0167.569] ??2@YAPAXI@Z () returned 0x25b0b68 [0167.569] ??2@YAPAXI@Z () returned 0x25b11b8 [0167.569] malloc (_Size=0x40) returned 0x25b1228 [0167.569] ??2@YAPAXI@Z () returned 0x25b1380 [0167.569] CoGetObjectContext (in: riid=0x75270270*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppv=0x26f4b8 | out: ppv=0x26f4b8*=0x4971d0) returned 0x0 [0167.569] IUnknown:Release (This=0x4971d0) returned 0x1 [0167.569] CoGetObjectContext (in: riid=0x75270270*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppv=0x26f4b8 | out: ppv=0x26f4b8*=0x4971d0) returned 0x0 [0167.569] IUnknown:Release (This=0x4971d0) returned 0x1 [0167.569] RtlAllocateHeap (HeapHandle=0x470000, Flags=0x0, Size=0x10) returned 0x4d9bc8 [0167.569] GetCurrentThreadId () returned 0x220 [0167.569] RtlAllocateHeap (HeapHandle=0x470000, Flags=0x0, Size=0x30) returned 0x4c7778 [0167.569] StrCmpIW (psz1="file:///C:/Users/5p5NrGJn0jS%20HALPmcxz/Desktop/READ_ME.hta", psz2="file:///C:/Users/5p5NrGJn0jS%20HALPmcxz/Desktop/READ_ME.hta") returned 0 [0167.569] RtlAllocateHeap (HeapHandle=0x470000, Flags=0x8, Size=0x10) returned 0x4d9be0 [0167.569] RtlAllocateHeap (HeapHandle=0x470000, Flags=0x0, Size=0x20) returned 0x4b6218 [0167.569] realloc (_Block=0x0, _Size=0xc8) returned 0x25b13a0 [0167.570] _wcsicmp (_String1="", _String2="") returned 0 [0167.570] SysStringLen (param_1="\r\n\x09\x09\x09window.moveTo(50, 50);\r\n\x09\x09\x09window.resizeTo(screen.width - 100, screen.height - 100);\r\n\x09\x09 ") returned 0x5f [0167.570] ??2@YAPAXI@Z () returned 0x25b1470 [0167.570] malloc (_Size=0x804) returned 0x25b1498 [0167.570] ??2@YAPAXI@Z () returned 0x25b1ca8 [0167.570] malloc (_Size=0x3) returned 0x313d0 [0167.570] malloc (_Size=0x104) returned 0x25b1e10 [0167.570] malloc (_Size=0x204) returned 0x25b1f20 [0167.571] ??3@YAXPAX@Z () returned 0x1 [0167.571] ??2@YAPAXI@Z () returned 0x25b1cf0 [0167.571] free (_Block=0x25b1498) [0167.571] ??3@YAXPAX@Z () returned 0x1 [0167.571] free (_Block=0x313d0) [0167.571] free (_Block=0x25b1ca8) [0167.571] free (_Block=0x25b2130) [0167.571] free (_Block=0x25b1f20) [0167.571] free (_Block=0x25b1e10) [0167.571] ??2@YAPAXI@Z () returned 0x25b27b8 [0167.571] ??2@YAPAXI@Z () returned 0x25b27f0 [0167.571] malloc (_Size=0xc) returned 0x313d0 [0167.571] ??2@YAPAXI@Z () returned 0x25b2810 [0167.572] CoGetObjectContext (in: riid=0x75270270*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppv=0x26f5d8 | out: ppv=0x26f5d8*=0x4971d0) returned 0x0 [0167.572] IUnknown:Release (This=0x4971d0) returned 0x1 [0167.572] ??2@YAPAXI@Z () returned 0x25b2858 [0167.572] CoGetObjectContext (in: riid=0x75270270*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppv=0x26f628 | out: ppv=0x26f628*=0x4971d0) returned 0x0 [0167.572] IUnknown:Release (This=0x4971d0) returned 0x1 [0167.572] ??2@YAPAXI@Z () returned 0x25b28c8 [0167.572] ISystemDebugEventFire:IsActive (This=0x4c8260) returned 0x1 [0167.572] CoGetObjectContext (in: riid=0x75270270*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppv=0x26f624 | out: ppv=0x26f624*=0x4971d0) returned 0x0 [0167.572] IUnknown:Release (This=0x4971d0) returned 0x1 [0167.573] malloc (_Size=0x658) returned 0x25b2948 [0167.574] RtlAllocateHeap (HeapHandle=0x470000, Flags=0x0, Size=0x28) returned 0x4b1c70 [0167.574] GetCurrentThreadId () returned 0x220 [0167.575] CoInternetIsFeatureEnabled (FeatureEntry=0x0, dwFlags=0x2) returned 0x0 [0167.575] CoInternetIsFeatureEnabled (FeatureEntry=0x0, dwFlags=0x2) returned 0x0 [0167.575] RtlAllocateHeap (HeapHandle=0x470000, Flags=0x0, Size=0x40) returned 0x4c82a8 [0167.575] RtlAllocateHeap (HeapHandle=0x470000, Flags=0x0, Size=0x128) returned 0x4b7430 [0167.575] ??2@YAPAXI@Z () returned 0x25b2fa8 [0167.575] CoInternetIsFeatureEnabled (FeatureEntry=0x0, dwFlags=0x2) returned 0x0 [0167.575] RtlAllocateHeap (HeapHandle=0x470000, Flags=0x0, Size=0x40) returned 0x4c82f0 [0167.575] IsWindow (hWnd=0x60114) returned 1 [0167.576] IsWindowVisible (hWnd=0x60114) returned 1 [0167.576] GetWindowRect (in: hWnd=0x60114, lpRect=0x26ef10 | out: lpRect=0x26ef10) returned 1 [0167.576] SetWindowPos (hWnd=0x60114, hWndInsertAfter=0x0, X=50, Y=50, cx=1080, cy=625, uFlags=0x44) returned 1 [0167.576] NtdllDefWindowProc_W () returned 0x0 [0167.576] NtdllDefWindowProc_W () returned 0x0 [0167.584] NtdllDefWindowProc_W () returned 0x0 [0167.584] NtdllDefWindowProc_W () returned 0x0 [0167.585] GetCurrentThreadId () returned 0x220 [0167.585] CoInternetIsFeatureEnabled (FeatureEntry=0x0, dwFlags=0x2) returned 0x0 [0167.585] CoInternetIsFeatureEnabled (FeatureEntry=0x0, dwFlags=0x2) returned 0x0 [0167.585] CoInternetIsFeatureEnabled (FeatureEntry=0x0, dwFlags=0x2) returned 0x0 [0167.586] RtlAllocateHeap (HeapHandle=0x470000, Flags=0x0, Size=0x18) returned 0x4c1d28 [0167.586] CoInternetIsFeatureEnabled (FeatureEntry=0x0, dwFlags=0x2) returned 0x0 [0167.586] RtlAllocateHeap (HeapHandle=0x470000, Flags=0x0, Size=0x40) returned 0x4c8338 [0167.586] CoInternetIsFeatureEnabled (FeatureEntry=0x0, dwFlags=0x2) returned 0x0 [0167.586] GetDeviceCaps (hdc=0x13010a0a, index=8) returned 1440 [0167.586] CoInternetIsFeatureEnabled (FeatureEntry=0x0, dwFlags=0x2) returned 0x0 [0167.586] RtlAllocateHeap (HeapHandle=0x470000, Flags=0x0, Size=0x28) returned 0x4b1cd0 [0167.586] CoInternetIsFeatureEnabled (FeatureEntry=0x0, dwFlags=0x2) returned 0x0 [0167.586] CoInternetIsFeatureEnabled (FeatureEntry=0x0, dwFlags=0x2) returned 0x0 [0167.587] GetDeviceCaps (hdc=0x13010a0a, index=10) returned 900 [0167.587] GetCurrentThreadId () returned 0x220 [0167.587] CoInternetIsFeatureEnabled (FeatureEntry=0x0, dwFlags=0x2) returned 0x0 [0167.587] CoInternetIsFeatureEnabled (FeatureEntry=0x0, dwFlags=0x2) returned 0x0 [0167.587] CoInternetIsFeatureEnabled (FeatureEntry=0x0, dwFlags=0x2) returned 0x0 [0167.587] IsWindow (hWnd=0x60114) returned 1 [0167.587] IsWindowVisible (hWnd=0x60114) returned 1 [0167.587] GetWindowRect (in: hWnd=0x60114, lpRect=0x26ef10 | out: lpRect=0x26ef10) returned 1 [0167.587] SetWindowPos (hWnd=0x60114, hWndInsertAfter=0x0, X=50, Y=50, cx=1340, cy=800, uFlags=0x44) returned 1 [0167.587] NtdllDefWindowProc_W () returned 0x0 [0167.587] NtdllDefWindowProc_W () returned 0x0 [0167.587] NtdllDefWindowProc_W () returned 0x0 [0167.588] NtdllDefWindowProc_W () returned 0x0 [0167.589] NtdllDefWindowProc_W () returned 0x1 [0167.589] NtdllDefWindowProc_W () returned 0x0 [0167.589] GetClientRect (in: hWnd=0x60114, lpRect=0x26eaf4 | out: lpRect=0x26eaf4) returned 1 [0167.589] GetClientRect (in: hWnd=0x60114, lpRect=0x26eaf4 | out: lpRect=0x26eaf4) returned 1 [0167.589] IntersectRect (in: lprcDst=0x26e950, lprcSrc1=0x26e950, lprcSrc2=0x26e8e8 | out: lprcDst=0x26e950) returned 1 [0167.589] IntersectRect (in: lprcDst=0x26e950, lprcSrc1=0x26e950, lprcSrc2=0x26e8e8 | out: lprcDst=0x26e950) returned 1 [0167.589] CopyRect (in: lprcDst=0x481b1c, lprcSrc=0x26eaf4 | out: lprcDst=0x481b1c) returned 1 [0167.589] OffsetRect (in: lprc=0x481b1c, dx=0, dy=0 | out: lprc=0x481b1c) returned 1 [0167.589] CopyRect (in: lprcDst=0x481b2c, lprcSrc=0x26eaf4 | out: lprcDst=0x481b2c) returned 1 [0167.589] OffsetRect (in: lprc=0x481b2c, dx=0, dy=0 | out: lprc=0x481b2c) returned 1 [0167.589] CopyRect (in: lprcDst=0x26ea30, lprcSrc=0x26eaf4 | out: lprcDst=0x26ea30) returned 1 [0167.589] IntersectRect (in: lprcDst=0x26ea20, lprcSrc1=0x26ea30, lprcSrc2=0x26eaf4 | out: lprcDst=0x26ea20) returned 1 [0167.589] EqualRect (lprc1=0x26ea20, lprc2=0x26ea30) returned 1 [0167.589] CreateRectRgnIndirect (lprect=0x6fbe7be0) returned 0x8a0407a4 [0167.589] GetUpdateRgn (hWnd=0x5011e, hRgn=0x8a0407a4, bErase=0) returned 1 [0167.589] DeleteObject (ho=0x8a0407a4) returned 1 [0167.589] SetWindowPos (hWnd=0x5011e, hWndInsertAfter=0x0, X=0, Y=0, cx=1324, cy=762, uFlags=0x14) returned 1 [0167.589] GetWindowLongW (hWnd=0x5011e, nIndex=-21) returned 4858488 [0167.589] CActiveIMMAppEx_Trident:IActiveIMMApp:OnDefWindowProc (in: This=0x4b1068, hWnd=0x5011e, msg=0x46, wParam=0x0, lParam=0x26e9c4*=327966, plResult=0x26e860 | out: plResult=0x26e860) returned 0x1 [0167.589] NtdllDefWindowProc_W () returned 0x0 [0167.589] GetCurrentThreadId () returned 0x220 [0167.590] GetWindowLongW (hWnd=0x5011e, nIndex=-21) returned 4858488 [0167.590] GetCurrentThreadId () returned 0x220 [0167.590] NtdllDefWindowProc_W () returned 0x1 [0167.590] GetWindowLongW (hWnd=0x5011e, nIndex=-21) returned 4858488 [0167.590] CActiveIMMAppEx_Trident:IActiveIMMApp:OnDefWindowProc (in: This=0x4b1068, hWnd=0x5011e, msg=0x47, wParam=0x0, lParam=0x26e9c4*=327966, plResult=0x26e85c | out: plResult=0x26e85c) returned 0x1 [0167.590] NtdllDefWindowProc_W () returned 0x0 [0167.590] GetWindowLongW (hWnd=0x5011e, nIndex=-21) returned 4858488 [0167.590] CActiveIMMAppEx_Trident:IActiveIMMApp:OnDefWindowProc (in: This=0x4b1068, hWnd=0x5011e, msg=0x5, wParam=0x0, lParam=0x2fa052c, plResult=0x26e498 | out: plResult=0x26e498) returned 0x1 [0167.590] NtdllDefWindowProc_W () returned 0x0 [0167.590] GetCurrentThreadId () returned 0x220 [0167.590] GetCurrentThreadId () returned 0x220 [0167.590] GetCurrentThreadId () returned 0x220 [0167.591] NtdllDefWindowProc_W () returned 0x0 [0167.591] NtdllDefWindowProc_W () returned 0x0 [0167.592] NtdllDefWindowProc_W () returned 0x1 [0167.594] GetCurrentThreadId () returned 0x220 [0167.594] GetCurrentThreadId () returned 0x220 [0167.594] ISystemDebugEventFire:IsActive (This=0x4c8260) returned 0x1 [0167.594] ??3@YAXPAX@Z () returned 0x1 [0167.594] free (_Block=0x25b13a0) [0167.594] GetCurrentThreadId () returned 0x220 [0167.594] GetCurrentThreadId () returned 0x220 [0167.594] GetCurrentThreadId () returned 0x220 [0167.594] GetCurrentThreadId () returned 0x220 [0167.594] GetCurrentThreadId () returned 0x220 [0167.594] HeapFree (in: hHeap=0x470000, dwFlags=0x0, lpMem=0x4aabb0 | out: hHeap=0x470000) returned 1 [0167.594] HeapFree (in: hHeap=0x470000, dwFlags=0x0, lpMem=0x4ae6f0 | out: hHeap=0x470000) returned 1 [0167.594] HeapFree (in: hHeap=0x470000, dwFlags=0x0, lpMem=0x0 | out: hHeap=0x470000) returned 1 [0167.595] GetCurrentThreadId () returned 0x220 [0167.595] SetEvent (hEvent=0x1dc) returned 1 [0167.596] RtlAllocateHeap (HeapHandle=0x470000, Flags=0x0, Size=0x14) returned 0x4c1d48 [0167.596] RtlAllocateHeap (HeapHandle=0x470000, Flags=0x0, Size=0x12) returned 0x4c1d68 [0167.596] RtlAllocateHeap (HeapHandle=0x470000, Flags=0x0, Size=0x40) returned 0x4c83c8 [0167.597] RtlAllocateHeap (HeapHandle=0x470000, Flags=0x8, Size=0x24) returned 0x4b1d30 [0167.597] RtlAllocateHeap (HeapHandle=0x470000, Flags=0x8, Size=0x4c) returned 0x4ae6f0 [0167.597] RtlAllocateHeap (HeapHandle=0x470000, Flags=0x0, Size=0x10) returned 0x4d9bf8 [0167.597] RtlAllocateHeap (HeapHandle=0x470000, Flags=0x8, Size=0x44) returned 0x4c9150 [0167.597] RtlAllocateHeap (HeapHandle=0x470000, Flags=0x0, Size=0x800) returned 0x4bcaf8 [0167.597] RtlReAllocateHeap (Heap=0x470000, Flags=0x0, Ptr=0x4bcaf8, Size=0x1306) returned 0x4bcaf8 [0167.597] RtlAllocateHeap (HeapHandle=0x470000, Flags=0x0, Size=0xb0c) returned 0x4bde08 [0167.597] HeapFree (in: hHeap=0x470000, dwFlags=0x0, lpMem=0x4bcaf8 | out: hHeap=0x470000) returned 1 [0167.597] HeapFree (in: hHeap=0x470000, dwFlags=0x0, lpMem=0x4c9150 | out: hHeap=0x470000) returned 1 [0167.597] RtlAllocateHeap (HeapHandle=0x470000, Flags=0x8, Size=0x24) returned 0x4b1d60 [0167.597] RtlAllocateHeap (HeapHandle=0x470000, Flags=0x0, Size=0x4) returned 0x4c4d10 [0167.597] RtlAllocateHeap (HeapHandle=0x470000, Flags=0x0, Size=0x6) returned 0x4c4d20 [0167.597] HeapFree (in: hHeap=0x470000, dwFlags=0x0, lpMem=0x4c4d10 | out: hHeap=0x470000) returned 1 [0167.597] HeapFree (in: hHeap=0x470000, dwFlags=0x0, lpMem=0x4dac80 | out: hHeap=0x470000) returned 1 [0167.597] RtlAllocateHeap (HeapHandle=0x470000, Flags=0x8, Size=0x4c) returned 0x4aee80 [0167.597] HeapFree (in: hHeap=0x470000, dwFlags=0x0, lpMem=0x0 | out: hHeap=0x470000) returned 1 [0167.597] HeapFree (in: hHeap=0x470000, dwFlags=0x0, lpMem=0x0 | out: hHeap=0x470000) returned 1 [0167.597] HeapFree (in: hHeap=0x470000, dwFlags=0x0, lpMem=0x0 | out: hHeap=0x470000) returned 1 [0167.597] HeapFree (in: hHeap=0x470000, dwFlags=0x0, lpMem=0x0 | out: hHeap=0x470000) returned 1 [0167.598] RtlAllocateHeap (HeapHandle=0x470000, Flags=0x8, Size=0x2c) returned 0x4c77b0 [0167.598] RtlAllocateHeap (HeapHandle=0x470000, Flags=0x8, Size=0x28) returned 0x4b1e80 [0167.598] RtlReAllocateHeap (Heap=0x470000, Flags=0x0, Ptr=0x4d9bf8, Size=0x18) returned 0x4c1e28 [0167.598] RtlReAllocateHeap (Heap=0x470000, Flags=0x0, Ptr=0x4c1ce8, Size=0x24) returned 0x4bcb10 [0167.598] HeapFree (in: hHeap=0x470000, dwFlags=0x0, lpMem=0x4b4f78 | out: hHeap=0x470000) returned 1 [0167.598] RtlAllocateHeap (HeapHandle=0x470000, Flags=0x8, Size=0x24) returned 0x4bcb40 [0167.598] RtlAllocateHeap (HeapHandle=0x470000, Flags=0x8, Size=0x28) returned 0x4bcb70 [0167.598] RtlAllocateHeap (HeapHandle=0x470000, Flags=0x8, Size=0x4c) returned 0x4af038 [0167.598] RtlAllocateHeap (HeapHandle=0x470000, Flags=0x8, Size=0x24) returned 0x4bcba0 [0167.598] RtlAllocateHeap (HeapHandle=0x470000, Flags=0x0, Size=0xa) returned 0x4d9bf8 [0167.598] RtlAllocateHeap (HeapHandle=0x470000, Flags=0x8, Size=0x28) returned 0x4bcbd0 [0167.598] RtlReAllocateHeap (Heap=0x470000, Flags=0x0, Ptr=0x4c1e28, Size=0x24) returned 0x4bcc00 [0167.598] RtlAllocateHeap (HeapHandle=0x470000, Flags=0x8, Size=0x24) returned 0x4bcc30 [0167.598] RtlAllocateHeap (HeapHandle=0x470000, Flags=0x8, Size=0x24) returned 0x4bcc60 [0167.598] RtlAllocateHeap (HeapHandle=0x470000, Flags=0x0, Size=0x12) returned 0x4c1e28 [0167.599] RtlAllocateHeap (HeapHandle=0x470000, Flags=0x8, Size=0x28) returned 0x4bcc90 [0167.601] RtlAllocateHeap (HeapHandle=0x470000, Flags=0x8, Size=0x24) returned 0x4bccf0 [0167.601] RtlAllocateHeap (HeapHandle=0x470000, Flags=0x8, Size=0x24) returned 0x4bcd20 [0167.601] RtlAllocateHeap (HeapHandle=0x470000, Flags=0x0, Size=0x10) returned 0x4d9c28 [0167.601] RtlAllocateHeap (HeapHandle=0x470000, Flags=0x8, Size=0x28) returned 0x4bcd50 [0167.601] RtlReAllocateHeap (Heap=0x470000, Flags=0x0, Ptr=0x4bcc00, Size=0x34) returned 0x4afb20 [0167.601] RtlAllocateHeap (HeapHandle=0x470000, Flags=0x8, Size=0x24) returned 0x4bcc00 [0167.601] RtlAllocateHeap (HeapHandle=0x470000, Flags=0x8, Size=0x24) returned 0x4bce10 [0167.601] RtlAllocateHeap (HeapHandle=0x470000, Flags=0x0, Size=0xe) returned 0x4d9c40 [0167.601] RtlAllocateHeap (HeapHandle=0x470000, Flags=0x8, Size=0x28) returned 0x4bce40 [0167.601] RtlReAllocateHeap (Heap=0x470000, Flags=0x0, Ptr=0x4afb20, Size=0x4c) returned 0x4af350 [0167.601] RtlAllocateHeap (HeapHandle=0x470000, Flags=0x8, Size=0x24) returned 0x4bcfc0 [0167.601] RtlAllocateHeap (HeapHandle=0x470000, Flags=0x8, Size=0x24) returned 0x4bcff0 [0167.601] RtlAllocateHeap (HeapHandle=0x470000, Flags=0x0, Size=0xe) returned 0x4d9ca0 [0167.601] RtlAllocateHeap (HeapHandle=0x470000, Flags=0x8, Size=0x28) returned 0x4bd020 [0167.602] RtlAllocateHeap (HeapHandle=0x470000, Flags=0x8, Size=0x4c) returned 0x4af3a8 [0167.602] RtlAllocateHeap (HeapHandle=0x470000, Flags=0x8, Size=0x24) returned 0x4bd050 [0167.602] RtlAllocateHeap (HeapHandle=0x470000, Flags=0x0, Size=0xe) returned 0x4d9cb8 [0167.602] RtlAllocateHeap (HeapHandle=0x470000, Flags=0x8, Size=0x28) returned 0x4bd080 [0167.602] RtlReAllocateHeap (Heap=0x470000, Flags=0x0, Ptr=0x4af350, Size=0x70) returned 0x4b5218 [0167.602] RtlAllocateHeap (HeapHandle=0x470000, Flags=0x8, Size=0x24) returned 0x4bd290 [0167.602] RtlAllocateHeap (HeapHandle=0x470000, Flags=0x8, Size=0x24) returned 0x4bd2c0 [0167.602] RtlAllocateHeap (HeapHandle=0x470000, Flags=0x0, Size=0xe) returned 0x4bd328 [0167.602] RtlAllocateHeap (HeapHandle=0x470000, Flags=0x8, Size=0x28) returned 0x4bf938 [0167.602] RtlReAllocateHeap (Heap=0x470000, Flags=0x0, Ptr=0x4b5218, Size=0xa8) returned 0x4dbf30 [0167.602] RtlAllocateHeap (HeapHandle=0x470000, Flags=0x8, Size=0x2c) returned 0x4c7858 [0167.602] RtlReAllocateHeap (Heap=0x470000, Flags=0x0, Ptr=0x4a48b8, Size=0x1d8) returned 0x4b4f68 [0167.602] RtlAllocateHeap (HeapHandle=0x470000, Flags=0x8, Size=0x28) returned 0x4bfcf8 [0167.602] StrCmpICW (pszStr1="text/css", pszStr2="text/css") returned 0 [0167.603] RtlAllocateHeap (HeapHandle=0x470000, Flags=0x0, Size=0x34) returned 0x4afb20 [0167.603] ParseURLW (in: pcszURL="file:///C:/Users/5p5NrGJn0jS%20HALPmcxz/Desktop/READ_ME.hta", ppu=0x26b5b8 | out: ppu=0x26b5b8) returned 0x0 [0167.603] CoInternetCombineUrl (in: pwzBaseUrl="file:///C:/Users/5p5NrGJn0jS%20HALPmcxz/Desktop/READ_ME.hta", pwzRelativeUrl="", dwCombineFlags=0x6000000, pszResult=0x26d6e8, cchResult=0x1000, pcchResult=0x26b634, dwReserved=0x0 | out: pszResult="file:///C:/Users/5p5NrGJn0jS%20HALPmcxz/Desktop/", pcchResult=0x26b634) returned 0x0 [0167.603] RtlAllocateHeap (HeapHandle=0x470000, Flags=0x0, Size=0x62) returned 0x4daeb0 [0167.603] RtlAllocateHeap (HeapHandle=0x470000, Flags=0x0, Size=0xf8) returned 0x4b7560 [0167.603] IsCharSpaceW (wch=0xd) returned 1 [0167.603] IsCharSpaceW (wch=0xa) returned 1 [0167.603] IsCharSpaceW (wch=0x9) returned 1 [0167.603] IsCharSpaceW (wch=0x61) returned 0 [0167.603] IsCharAlphaNumericW (ch=0x20) returned 0 [0167.603] IsCharSpaceW (wch=0x20) returned 1 [0167.603] IsCharSpaceW (wch=0x7b) returned 0 [0167.603] RtlAllocateHeap (HeapHandle=0x470000, Flags=0x0, Size=0x18) returned 0x4c1f68 [0167.603] RtlAllocateHeap (HeapHandle=0x470000, Flags=0x0, Size=0x50) returned 0x4bf178 [0167.603] IsCharSpaceW (wch=0x20) returned 1 [0167.603] IsCharAlphaNumericW (ch=0x7b) returned 0 [0167.603] IsCharSpaceW (wch=0xd) returned 1 [0167.604] IsCharSpaceW (wch=0xa) returned 1 [0167.604] IsCharSpaceW (wch=0x9) returned 1 [0167.604] IsCharSpaceW (wch=0x9) returned 1 [0167.604] IsCharSpaceW (wch=0x63) returned 0 [0167.604] HeapFree (in: hHeap=0x470000, dwFlags=0x0, lpMem=0x4bf178 | out: hHeap=0x470000) returned 1 [0167.604] IsCharAlphaNumericW (ch=0x3a) returned 0 [0167.604] IsCharSpaceW (wch=0x3a) returned 0 [0167.604] RtlAllocateHeap (HeapHandle=0x470000, Flags=0x0, Size=0x1c) returned 0x4b6290 [0167.604] IsCharAlphaNumericW (ch=0x3a) returned 0 [0167.604] IsCharSpaceW (wch=0x20) returned 1 [0167.604] IsCharSpaceW (wch=0x23) returned 0 [0167.604] IsCharAlphaNumericW (ch=0x23) returned 0 [0167.604] IsCharAlphaNumericW (ch=0x30) returned 1 [0167.604] IsCharAlphaNumericW (ch=0x3b) returned 0 [0167.604] IsCharSpaceW (wch=0x3b) returned 0 [0167.604] IsCharAlphaNumericW (ch=0x3b) returned 0 [0167.604] IsCharSpaceW (wch=0xd) returned 1 [0167.604] IsCharSpaceW (wch=0xa) returned 1 [0167.604] IsCharSpaceW (wch=0x9) returned 1 [0167.604] IsCharSpaceW (wch=0x9) returned 1 [0167.604] IsCharSpaceW (wch=0x74) returned 0 [0167.604] IsCharSpaceW (wch=0x61) returned 0 [0167.604] IsCharSpaceW (wch=0x23) returned 0 [0167.604] IsCharSpaceW (wch=0x23) returned 0 [0167.604] RtlAllocateHeap (HeapHandle=0x470000, Flags=0x0, Size=0x14) returned 0x4c1f88 [0167.604] RtlAllocateHeap (HeapHandle=0x470000, Flags=0x0, Size=0x40) returned 0x4c8608 [0167.604] IsCharAlphaNumericW (ch=0x3a) returned 0 [0167.604] IsCharSpaceW (wch=0x3a) returned 0 [0167.604] IsCharAlphaNumericW (ch=0x3a) returned 0 [0167.604] IsCharSpaceW (wch=0x20) returned 1 [0167.604] IsCharSpaceW (wch=0x6e) returned 0 [0167.604] IsCharAlphaNumericW (ch=0x3b) returned 0 [0167.604] IsCharSpaceW (wch=0x3b) returned 0 [0167.604] IsCharAlphaNumericW (ch=0x3b) returned 0 [0167.604] IsCharSpaceW (wch=0xd) returned 1 [0167.604] IsCharSpaceW (wch=0xa) returned 1 [0167.604] IsCharSpaceW (wch=0x9) returned 1 [0167.604] IsCharSpaceW (wch=0x7d) returned 0 [0167.604] IsCharSpaceW (wch=0x65) returned 0 [0167.605] IsCharSpaceW (wch=0x6e) returned 0 [0167.605] RtlAllocateHeap (HeapHandle=0x470000, Flags=0x0, Size=0xa) returned 0x4bd460 [0167.605] IsCharSpaceW (wch=0x6e) returned 0 [0167.605] IsCharSpaceW (wch=0x6e) returned 0 [0167.605] IsCharSpaceW (wch=0x6f) returned 0 [0167.605] IsCharSpaceW (wch=0x6e) returned 0 [0167.605] IsCharSpaceW (wch=0x65) returned 0 [0167.605] StrCmpICW (pszStr1="none", pszStr2="none") returned 0 [0167.605] HeapFree (in: hHeap=0x470000, dwFlags=0x0, lpMem=0x4bd460 | out: hHeap=0x470000) returned 1 [0167.605] IsCharAlphaNumericW (ch=0x7d) returned 0 [0167.605] IsCharSpaceW (wch=0xd) returned 1 [0167.605] IsCharSpaceW (wch=0xa) returned 1 [0167.605] IsCharSpaceW (wch=0x9) returned 1 [0167.605] IsCharSpaceW (wch=0x61) returned 0 [0167.605] RtlAllocateHeap (HeapHandle=0x470000, Flags=0x0, Size=0x10) returned 0x4bd460 [0167.605] RtlAllocateHeap (HeapHandle=0x470000, Flags=0x0, Size=0x10) returned 0x4bd478 [0167.605] IsCharAlphaNumericW (ch=0x3a) returned 0 [0167.605] IsCharSpaceW (wch=0x3a) returned 0 [0167.605] RtlAllocateHeap (HeapHandle=0x470000, Flags=0x0, Size=0x18) returned 0x4c1fa8 [0167.605] RtlAllocateHeap (HeapHandle=0x470000, Flags=0x0, Size=0x50) returned 0x4bf178 [0167.605] IsCharSpaceW (wch=0x61) returned 0 [0167.605] IsCharAlphaNumericW (ch=0x3a) returned 0 [0167.605] IsCharAlphaNumericW (ch=0x20) returned 0 [0167.605] IsCharSpaceW (wch=0x20) returned 1 [0167.605] IsCharSpaceW (wch=0x7b) returned 0 [0167.605] lstrlenW (lpString="active") returned 6 [0167.605] lstrlenW (lpString="visited") returned 7 [0167.605] lstrlenW (lpString="hover") returned 5 [0167.605] StrCmpNICW (lpStr1="hover", lpStr2="hover", nChar=5) returned 0 [0167.605] IsCharSpaceW (wch=0x20) returned 1 [0167.605] IsCharAlphaNumericW (ch=0x7b) returned 0 [0167.605] IsCharSpaceW (wch=0xd) returned 1 [0167.605] IsCharSpaceW (wch=0xa) returned 1 [0167.605] IsCharSpaceW (wch=0x9) returned 1 [0167.605] IsCharSpaceW (wch=0x9) returned 1 [0167.605] IsCharSpaceW (wch=0x74) returned 0 [0167.605] HeapFree (in: hHeap=0x470000, dwFlags=0x0, lpMem=0x4bf178 | out: hHeap=0x470000) returned 1 [0167.605] IsCharAlphaNumericW (ch=0x3a) returned 0 [0167.605] IsCharSpaceW (wch=0x3a) returned 0 [0167.605] RtlAllocateHeap (HeapHandle=0x470000, Flags=0x0, Size=0x1c) returned 0x4b62b8 [0167.606] IsCharAlphaNumericW (ch=0x3a) returned 0 [0167.606] IsCharSpaceW (wch=0x20) returned 1 [0167.606] IsCharSpaceW (wch=0x75) returned 0 [0167.606] IsCharAlphaNumericW (ch=0x3b) returned 0 [0167.606] IsCharSpaceW (wch=0x3b) returned 0 [0167.606] IsCharAlphaNumericW (ch=0x3b) returned 0 [0167.606] IsCharSpaceW (wch=0xd) returned 1 [0167.606] IsCharSpaceW (wch=0xa) returned 1 [0167.606] IsCharSpaceW (wch=0x9) returned 1 [0167.606] IsCharSpaceW (wch=0x7d) returned 0 [0167.606] IsCharSpaceW (wch=0x65) returned 0 [0167.606] IsCharSpaceW (wch=0x75) returned 0 [0167.606] RtlAllocateHeap (HeapHandle=0x470000, Flags=0x0, Size=0x14) returned 0x4c1fc8 [0167.606] IsCharSpaceW (wch=0x75) returned 0 [0167.606] IsCharSpaceW (wch=0x75) returned 0 [0167.606] IsCharSpaceW (wch=0x6e) returned 0 [0167.606] IsCharSpaceW (wch=0x64) returned 0 [0167.606] IsCharSpaceW (wch=0x65) returned 0 [0167.606] IsCharSpaceW (wch=0x72) returned 0 [0167.606] IsCharSpaceW (wch=0x6c) returned 0 [0167.606] IsCharSpaceW (wch=0x69) returned 0 [0167.606] IsCharSpaceW (wch=0x6e) returned 0 [0167.606] IsCharSpaceW (wch=0x65) returned 0 [0167.606] StrCmpICW (pszStr1="underline", pszStr2="none") returned 7 [0167.606] StrCmpICW (pszStr1="underline", pszStr2="underline") returned 0 [0167.606] RtlAllocateHeap (HeapHandle=0x470000, Flags=0x0, Size=0x14) returned 0x4c1fe8 [0167.606] RtlAllocateHeap (HeapHandle=0x470000, Flags=0x0, Size=0x40) returned 0x4c8650 [0167.606] HeapFree (in: hHeap=0x470000, dwFlags=0x0, lpMem=0x4c1fc8 | out: hHeap=0x470000) returned 1 [0167.606] IsCharAlphaNumericW (ch=0x7d) returned 0 [0167.606] IsCharSpaceW (wch=0xd) returned 1 [0167.606] IsCharSpaceW (wch=0xa) returned 1 [0167.606] IsCharSpaceW (wch=0x9) returned 1 [0167.609] IsCharSpaceW (wch=0x62) returned 0 [0167.609] IsCharAlphaNumericW (ch=0x20) returned 0 [0167.609] IsCharSpaceW (wch=0x20) returned 1 [0167.609] IsCharSpaceW (wch=0x7b) returned 0 [0167.609] RtlAllocateHeap (HeapHandle=0x470000, Flags=0x0, Size=0x18) returned 0x4c1fc8 [0167.609] RtlAllocateHeap (HeapHandle=0x470000, Flags=0x0, Size=0x50) returned 0x4bf178 [0167.609] IsCharSpaceW (wch=0x20) returned 1 [0167.609] IsCharAlphaNumericW (ch=0x7b) returned 0 [0167.609] IsCharSpaceW (wch=0xd) returned 1 [0167.609] IsCharSpaceW (wch=0xa) returned 1 [0167.609] IsCharSpaceW (wch=0x9) returned 1 [0167.609] IsCharSpaceW (wch=0x9) returned 1 [0167.609] IsCharSpaceW (wch=0x62) returned 0 [0167.609] HeapFree (in: hHeap=0x470000, dwFlags=0x0, lpMem=0x4bf178 | out: hHeap=0x470000) returned 1 [0167.609] IsCharAlphaNumericW (ch=0x3a) returned 0 [0167.609] IsCharSpaceW (wch=0x3a) returned 0 [0167.609] RtlAllocateHeap (HeapHandle=0x470000, Flags=0x0, Size=0x1c) returned 0x4b62e0 [0167.609] IsCharAlphaNumericW (ch=0x3a) returned 0 [0167.609] IsCharSpaceW (wch=0x20) returned 1 [0167.609] IsCharSpaceW (wch=0x23) returned 0 [0167.609] IsCharAlphaNumericW (ch=0x23) returned 0 [0167.609] IsCharAlphaNumericW (ch=0x3b) returned 0 [0167.609] IsCharSpaceW (wch=0x3b) returned 0 [0167.609] IsCharAlphaNumericW (ch=0x3b) returned 0 [0167.609] IsCharSpaceW (wch=0xd) returned 1 [0167.609] IsCharSpaceW (wch=0xa) returned 1 [0167.609] IsCharSpaceW (wch=0x9) returned 1 [0167.609] IsCharSpaceW (wch=0x9) returned 1 [0167.609] IsCharSpaceW (wch=0x63) returned 0 [0167.609] IsCharSpaceW (wch=0x37) returned 0 [0167.609] IsCharSpaceW (wch=0x23) returned 0 [0167.609] IsCharSpaceW (wch=0x23) returned 0 [0167.609] RtlAllocateHeap (HeapHandle=0x470000, Flags=0x0, Size=0x14) returned 0x4c2008 [0167.609] RtlAllocateHeap (HeapHandle=0x470000, Flags=0x0, Size=0x40) returned 0x4c8698 [0167.610] IsCharAlphaNumericW (ch=0x3a) returned 0 [0167.610] IsCharSpaceW (wch=0x3a) returned 0 [0167.610] IsCharAlphaNumericW (ch=0x3a) returned 0 [0167.610] IsCharSpaceW (wch=0x20) returned 1 [0167.610] IsCharSpaceW (wch=0x23) returned 0 [0167.610] IsCharAlphaNumericW (ch=0x23) returned 0 [0167.610] IsCharAlphaNumericW (ch=0x32) returned 1 [0167.610] IsCharAlphaNumericW (ch=0x3b) returned 0 [0167.610] IsCharSpaceW (wch=0x3b) returned 0 [0167.610] IsCharAlphaNumericW (ch=0x3b) returned 0 [0167.610] IsCharSpaceW (wch=0xd) returned 1 [0167.610] IsCharSpaceW (wch=0xa) returned 1 [0167.610] IsCharSpaceW (wch=0x9) returned 1 [0167.610] IsCharSpaceW (wch=0x9) returned 1 [0167.610] IsCharSpaceW (wch=0x66) returned 0 [0167.610] IsCharSpaceW (wch=0x32) returned 0 [0167.610] IsCharSpaceW (wch=0x23) returned 0 [0167.610] IsCharSpaceW (wch=0x23) returned 0 [0167.610] IsCharAlphaNumericW (ch=0x3a) returned 0 [0167.610] IsCharSpaceW (wch=0x3a) returned 0 [0167.610] IsCharAlphaNumericW (ch=0x3a) returned 0 [0167.610] IsCharSpaceW (wch=0x20) returned 1 [0167.610] IsCharSpaceW (wch=0x22) returned 0 [0167.610] IsCharAlphaNumericW (ch=0x22) returned 0 [0167.610] IsCharSpaceW (wch=0x2c) returned 0 [0167.610] IsCharAlphaNumericW (ch=0x2c) returned 0 [0167.610] IsCharSpaceW (wch=0x20) returned 1 [0167.610] IsCharSpaceW (wch=0x22) returned 0 [0167.610] IsCharAlphaNumericW (ch=0x22) returned 0 [0167.610] IsCharSpaceW (wch=0x2c) returned 0 [0167.610] IsCharAlphaNumericW (ch=0x2c) returned 0 [0167.610] IsCharSpaceW (wch=0x20) returned 1 [0167.610] IsCharSpaceW (wch=0x73) returned 0 [0167.610] IsCharAlphaNumericW (ch=0x3b) returned 0 [0167.610] IsCharSpaceW (wch=0x3b) returned 0 [0167.610] IsCharAlphaNumericW (ch=0x3b) returned 0 [0167.610] IsCharSpaceW (wch=0xd) returned 1 [0167.610] IsCharSpaceW (wch=0xa) returned 1 [0167.611] IsCharSpaceW (wch=0x9) returned 1 [0167.611] IsCharSpaceW (wch=0x9) returned 1 [0167.611] IsCharSpaceW (wch=0x66) returned 0 [0167.611] IsCharSpaceW (wch=0x66) returned 0 [0167.611] IsCharSpaceW (wch=0x22) returned 0 [0167.611] RtlAllocateHeap (HeapHandle=0x470000, Flags=0x0, Size=0x66) returned 0x4daf20 [0167.611] IsCharAlphaNumericW (ch=0x3a) returned 0 [0167.611] IsCharSpaceW (wch=0x3a) returned 0 [0167.611] IsCharAlphaNumericW (ch=0x3a) returned 0 [0167.611] IsCharSpaceW (wch=0x20) returned 1 [0167.611] IsCharSpaceW (wch=0x31) returned 0 [0167.611] IsCharAlphaNumericW (ch=0x31) returned 1 [0167.611] IsCharAlphaNumericW (ch=0x3b) returned 0 [0167.611] IsCharSpaceW (wch=0x3b) returned 0 [0167.611] IsCharAlphaNumericW (ch=0x3b) returned 0 [0167.611] IsCharSpaceW (wch=0xd) returned 1 [0167.611] IsCharSpaceW (wch=0xa) returned 1 [0167.611] IsCharSpaceW (wch=0x9) returned 1 [0167.611] IsCharSpaceW (wch=0x9) returned 1 [0167.611] IsCharSpaceW (wch=0x6c) returned 0 [0167.611] IsCharSpaceW (wch=0x74) returned 0 [0167.611] IsCharSpaceW (wch=0x31) returned 0 [0167.611] IsCharSpaceW (wch=0x31) returned 0 [0167.611] IsCharSpaceW (wch=0x70) returned 0 [0167.611] IsCharSpaceW (wch=0x70) returned 0 [0167.611] IsCharSpaceW (wch=0x74) returned 0 [0167.611] IsCharSpaceW (wch=0x0) returned 0 [0167.611] IsCharAlphaNumericW (ch=0x3a) returned 0 [0167.611] IsCharSpaceW (wch=0x3a) returned 0 [0167.611] IsCharAlphaNumericW (ch=0x3a) returned 0 [0167.611] IsCharSpaceW (wch=0x20) returned 1 [0167.611] IsCharSpaceW (wch=0x31) returned 0 [0167.611] IsCharAlphaNumericW (ch=0x31) returned 1 [0167.611] IsCharAlphaNumericW (ch=0x3b) returned 0 [0167.611] IsCharSpaceW (wch=0x3b) returned 0 [0167.611] IsCharAlphaNumericW (ch=0x3b) returned 0 [0167.611] IsCharSpaceW (wch=0xd) returned 1 [0167.611] IsCharSpaceW (wch=0xa) returned 1 [0167.612] IsCharSpaceW (wch=0x9) returned 1 [0167.612] IsCharSpaceW (wch=0x7d) returned 0 [0167.612] IsCharSpaceW (wch=0x74) returned 0 [0167.612] IsCharSpaceW (wch=0x31) returned 0 [0167.612] IsCharSpaceW (wch=0x31) returned 0 [0167.612] IsCharSpaceW (wch=0x70) returned 0 [0167.612] IsCharSpaceW (wch=0x70) returned 0 [0167.612] IsCharSpaceW (wch=0x74) returned 0 [0167.612] IsCharSpaceW (wch=0x0) returned 0 [0167.612] RtlReAllocateHeap (Heap=0x470000, Flags=0x0, Ptr=0x4c8698, Size=0x60) returned 0x4cd998 [0167.612] IsCharAlphaNumericW (ch=0x7d) returned 0 [0167.612] IsCharSpaceW (wch=0xd) returned 1 [0167.612] IsCharSpaceW (wch=0xa) returned 1 [0167.612] IsCharSpaceW (wch=0x9) returned 1 [0167.612] IsCharSpaceW (wch=0x62) returned 0 [0167.612] RtlAllocateHeap (HeapHandle=0x470000, Flags=0x0, Size=0x10) returned 0x4bd490 [0167.612] IsCharAlphaNumericW (ch=0x2c) returned 0 [0167.612] IsCharSpaceW (wch=0x2c) returned 0 [0167.612] RtlAllocateHeap (HeapHandle=0x470000, Flags=0x0, Size=0x18) returned 0x4c2028 [0167.612] RtlAllocateHeap (HeapHandle=0x470000, Flags=0x0, Size=0x50) returned 0x4bf178 [0167.612] IsCharSpaceW (wch=0x79) returned 0 [0167.612] IsCharAlphaNumericW (ch=0x2c) returned 0 [0167.612] IsCharSpaceW (wch=0x20) returned 1 [0167.612] IsCharSpaceW (wch=0x68) returned 0 [0167.612] HeapFree (in: hHeap=0x470000, dwFlags=0x0, lpMem=0x4bf178 | out: hHeap=0x470000) returned 1 [0167.612] IsCharAlphaNumericW (ch=0x20) returned 0 [0167.612] IsCharSpaceW (wch=0x20) returned 1 [0167.612] IsCharSpaceW (wch=0x7b) returned 0 [0167.612] RtlAllocateHeap (HeapHandle=0x470000, Flags=0x0, Size=0x18) returned 0x4c2048 [0167.612] RtlAllocateHeap (HeapHandle=0x470000, Flags=0x0, Size=0x50) returned 0x4bf178 [0167.612] IsCharSpaceW (wch=0x20) returned 1 [0167.612] IsCharAlphaNumericW (ch=0x7b) returned 0 [0167.612] IsCharSpaceW (wch=0xd) returned 1 [0167.612] IsCharSpaceW (wch=0xa) returned 1 [0167.612] IsCharSpaceW (wch=0x9) returned 1 [0167.612] IsCharSpaceW (wch=0x9) returned 1 [0167.612] IsCharSpaceW (wch=0x6d) returned 0 [0167.612] HeapFree (in: hHeap=0x470000, dwFlags=0x0, lpMem=0x4bf178 | out: hHeap=0x470000) returned 1 [0167.612] IsCharAlphaNumericW (ch=0x3a) returned 0 [0167.612] IsCharSpaceW (wch=0x3a) returned 0 [0167.612] RtlAllocateHeap (HeapHandle=0x470000, Flags=0x0, Size=0x1c) returned 0x4b6308 [0167.613] IsCharAlphaNumericW (ch=0x3a) returned 0 [0167.613] IsCharSpaceW (wch=0x20) returned 1 [0167.613] IsCharSpaceW (wch=0x30) returned 0 [0167.613] IsCharAlphaNumericW (ch=0x30) returned 1 [0167.613] IsCharAlphaNumericW (ch=0x3b) returned 0 [0167.613] IsCharSpaceW (wch=0x3b) returned 0 [0167.613] IsCharAlphaNumericW (ch=0x3b) returned 0 [0167.613] IsCharSpaceW (wch=0xd) returned 1 [0167.613] IsCharSpaceW (wch=0xa) returned 1 [0167.613] IsCharSpaceW (wch=0x9) returned 1 [0167.613] IsCharSpaceW (wch=0x9) returned 1 [0167.613] IsCharSpaceW (wch=0x70) returned 0 [0167.613] IsCharSpaceW (wch=0x30) returned 0 [0167.613] RtlAllocateHeap (HeapHandle=0x470000, Flags=0x0, Size=0x4) returned 0x4c4d60 [0167.613] IsCharSpaceW (wch=0x30) returned 0 [0167.613] IsCharSpaceW (wch=0x30) returned 0 [0167.613] IsCharSpaceW (wch=0x30) returned 0 [0167.613] RtlAllocateHeap (HeapHandle=0x470000, Flags=0x0, Size=0x14) returned 0x4c2068 [0167.613] RtlAllocateHeap (HeapHandle=0x470000, Flags=0x0, Size=0x40) returned 0x4c8698 [0167.613] IsCharSpaceW (wch=0x30) returned 0 [0167.613] IsCharSpaceW (wch=0x30) returned 0 [0167.613] IsCharSpaceW (wch=0x30) returned 0 [0167.613] IsCharSpaceW (wch=0x0) returned 0 [0167.613] HeapFree (in: hHeap=0x470000, dwFlags=0x0, lpMem=0x4c4d60 | out: hHeap=0x470000) returned 1 [0167.613] IsCharAlphaNumericW (ch=0x3a) returned 0 [0167.613] IsCharSpaceW (wch=0x3a) returned 0 [0167.613] IsCharAlphaNumericW (ch=0x3a) returned 0 [0167.613] IsCharSpaceW (wch=0x20) returned 1 [0167.613] IsCharSpaceW (wch=0x30) returned 0 [0167.613] IsCharAlphaNumericW (ch=0x30) returned 1 [0167.613] IsCharAlphaNumericW (ch=0x3b) returned 0 [0167.613] IsCharSpaceW (wch=0x3b) returned 0 [0167.613] IsCharAlphaNumericW (ch=0x3b) returned 0 [0167.613] IsCharSpaceW (wch=0xd) returned 1 [0167.613] IsCharSpaceW (wch=0xa) returned 1 [0167.613] IsCharSpaceW (wch=0x9) returned 1 [0167.613] IsCharSpaceW (wch=0x7d) returned 0 [0167.614] IsCharSpaceW (wch=0x30) returned 0 [0167.614] RtlAllocateHeap (HeapHandle=0x470000, Flags=0x0, Size=0x4) returned 0x4c4d60 [0167.614] IsCharSpaceW (wch=0x30) returned 0 [0167.614] IsCharSpaceW (wch=0x30) returned 0 [0167.614] IsCharSpaceW (wch=0x30) returned 0 [0167.614] RtlReAllocateHeap (Heap=0x470000, Flags=0x0, Ptr=0x4c8698, Size=0x60) returned 0x4cda00 [0167.614] IsCharSpaceW (wch=0x30) returned 0 [0167.614] IsCharSpaceW (wch=0x30) returned 0 [0167.614] RtlReAllocateHeap (Heap=0x470000, Flags=0x0, Ptr=0x4cda00, Size=0x90) returned 0x4daac8 [0167.614] IsCharSpaceW (wch=0x30) returned 0 [0167.614] IsCharSpaceW (wch=0x0) returned 0 [0167.614] HeapFree (in: hHeap=0x470000, dwFlags=0x0, lpMem=0x4c4d60 | out: hHeap=0x470000) returned 1 [0167.614] IsCharAlphaNumericW (ch=0x7d) returned 0 [0167.614] IsCharSpaceW (wch=0xd) returned 1 [0167.614] IsCharSpaceW (wch=0xa) returned 1 [0167.614] IsCharSpaceW (wch=0x9) returned 1 [0167.614] IsCharSpaceW (wch=0x68) returned 0 [0167.614] RtlAllocateHeap (HeapHandle=0x470000, Flags=0x0, Size=0x10) returned 0x4bd4a8 [0167.614] RtlAllocateHeap (HeapHandle=0x470000, Flags=0x0, Size=0x1c) returned 0x4b6330 [0167.614] RtlAllocateHeap (HeapHandle=0x470000, Flags=0x0, Size=0x14) returned 0x4c2088 [0167.614] RtlAllocateHeap (HeapHandle=0x470000, Flags=0x0, Size=0x80) returned 0x4ca738 [0167.614] RtlReAllocateHeap (Heap=0x470000, Flags=0x0, Ptr=0x4bd460, Size=0x18) returned 0x4c20a8 [0167.614] IsCharAlphaNumericW (ch=0x20) returned 0 [0167.614] IsCharSpaceW (wch=0x20) returned 1 [0167.614] IsCharSpaceW (wch=0x7b) returned 0 [0167.614] RtlAllocateHeap (HeapHandle=0x470000, Flags=0x0, Size=0x18) returned 0x4c20c8 [0167.614] RtlAllocateHeap (HeapHandle=0x470000, Flags=0x0, Size=0x50) returned 0x4bf178 [0167.614] IsCharSpaceW (wch=0x20) returned 1 [0167.614] IsCharAlphaNumericW (ch=0x7b) returned 0 [0167.614] IsCharSpaceW (wch=0xd) returned 1 [0167.614] IsCharSpaceW (wch=0xa) returned 1 [0167.614] IsCharSpaceW (wch=0x9) returned 1 [0167.614] IsCharSpaceW (wch=0x9) returned 1 [0167.615] IsCharSpaceW (wch=0x63) returned 0 [0167.615] HeapFree (in: hHeap=0x470000, dwFlags=0x0, lpMem=0x4bf178 | out: hHeap=0x470000) returned 1 [0167.615] IsCharAlphaNumericW (ch=0x3a) returned 0 [0167.615] IsCharSpaceW (wch=0x3a) returned 0 [0167.615] RtlAllocateHeap (HeapHandle=0x470000, Flags=0x0, Size=0x1c) returned 0x4b6358 [0167.615] IsCharAlphaNumericW (ch=0x3a) returned 0 [0167.615] IsCharSpaceW (wch=0x20) returned 1 [0167.615] IsCharSpaceW (wch=0x23) returned 0 [0167.615] IsCharAlphaNumericW (ch=0x23) returned 0 [0167.615] IsCharAlphaNumericW (ch=0x3b) returned 0 [0167.615] IsCharSpaceW (wch=0x3b) returned 0 [0167.615] IsCharAlphaNumericW (ch=0x3b) returned 0 [0167.615] IsCharSpaceW (wch=0xd) returned 1 [0167.615] IsCharSpaceW (wch=0xa) returned 1 [0167.615] IsCharSpaceW (wch=0x9) returned 1 [0167.615] IsCharSpaceW (wch=0x9) returned 1 [0167.615] IsCharSpaceW (wch=0x68) returned 0 [0167.615] IsCharSpaceW (wch=0x37) returned 0 [0167.615] IsCharSpaceW (wch=0x23) returned 0 [0167.615] IsCharSpaceW (wch=0x23) returned 0 [0167.615] RtlAllocateHeap (HeapHandle=0x470000, Flags=0x0, Size=0x14) returned 0x4c20e8 [0167.615] RtlAllocateHeap (HeapHandle=0x470000, Flags=0x0, Size=0x40) returned 0x4c8698 [0167.615] IsCharAlphaNumericW (ch=0x3a) returned 0 [0167.615] IsCharSpaceW (wch=0x3a) returned 0 [0167.615] IsCharAlphaNumericW (ch=0x3a) returned 0 [0167.615] IsCharSpaceW (wch=0x20) returned 1 [0167.615] IsCharSpaceW (wch=0x32) returned 0 [0167.615] IsCharAlphaNumericW (ch=0x32) returned 1 [0167.615] IsCharAlphaNumericW (ch=0x3b) returned 0 [0167.615] IsCharSpaceW (wch=0x3b) returned 0 [0167.615] IsCharAlphaNumericW (ch=0x3b) returned 0 [0167.615] IsCharSpaceW (wch=0xd) returned 1 [0167.615] IsCharSpaceW (wch=0xa) returned 1 [0167.615] IsCharSpaceW (wch=0x9) returned 1 [0167.615] IsCharSpaceW (wch=0x9) returned 1 [0167.615] IsCharSpaceW (wch=0x6d) returned 0 [0167.615] IsCharSpaceW (wch=0x74) returned 0 [0167.615] IsCharSpaceW (wch=0x32) returned 0 [0167.616] IsCharSpaceW (wch=0x32) returned 0 [0167.616] IsCharSpaceW (wch=0x70) returned 0 [0167.616] IsCharSpaceW (wch=0x70) returned 0 [0167.616] IsCharSpaceW (wch=0x74) returned 0 [0167.616] IsCharSpaceW (wch=0x0) returned 0 [0167.616] IsCharAlphaNumericW (ch=0x3a) returned 0 [0167.616] IsCharSpaceW (wch=0x3a) returned 0 [0167.616] IsCharAlphaNumericW (ch=0x3a) returned 0 [0167.616] IsCharSpaceW (wch=0x20) returned 1 [0167.616] IsCharSpaceW (wch=0x31) returned 0 [0167.616] IsCharAlphaNumericW (ch=0x31) returned 1 [0167.616] IsCharAlphaNumericW (ch=0x2e) returned 0 [0167.616] IsCharAlphaNumericW (ch=0x2e) returned 0 [0167.616] IsCharAlphaNumericW (ch=0x35) returned 1 [0167.616] IsCharAlphaNumericW (ch=0x25) returned 0 [0167.616] IsCharAlphaNumericW (ch=0x25) returned 0 [0167.616] IsCharAlphaNumericW (ch=0x3b) returned 0 [0167.616] RtlReAllocateHeap (Heap=0x470000, Flags=0x0, Ptr=0x4c8698, Size=0x60) returned 0x4cda00 [0167.616] IsCharAlphaNumericW (ch=0x7d) returned 0 [0167.616] IsCharAlphaNumericW (ch=0x20) returned 0 [0167.616] IsCharAlphaNumericW (ch=0x7b) returned 0 [0167.616] IsCharAlphaNumericW (ch=0x3a) returned 0 [0167.616] IsCharAlphaNumericW (ch=0x3a) returned 0 [0167.616] IsCharAlphaNumericW (ch=0x23) returned 0 [0167.616] IsCharAlphaNumericW (ch=0x35) returned 1 [0167.616] IsCharAlphaNumericW (ch=0x3b) returned 0 [0167.616] IsCharAlphaNumericW (ch=0x3b) returned 0 [0167.616] IsCharAlphaNumericW (ch=0x3a) returned 0 [0167.616] IsCharAlphaNumericW (ch=0x3a) returned 0 [0167.616] IsCharAlphaNumericW (ch=0x31) returned 1 [0167.616] IsCharAlphaNumericW (ch=0x3b) returned 0 [0167.616] IsCharAlphaNumericW (ch=0x3b) returned 0 [0167.616] IsCharAlphaNumericW (ch=0x7d) returned 0 [0167.617] RtlReAllocateHeap (Heap=0x470000, Flags=0x0, Ptr=0x4c20a8, Size=0x24) returned 0x4bfff8 [0167.617] IsCharAlphaNumericW (ch=0x20) returned 0 [0167.617] IsCharAlphaNumericW (ch=0x7b) returned 0 [0167.617] IsCharAlphaNumericW (ch=0x3a) returned 0 [0167.617] IsCharAlphaNumericW (ch=0x3a) returned 0 [0167.617] IsCharAlphaNumericW (ch=0x32) returned 1 [0167.617] IsCharAlphaNumericW (ch=0x2e) returned 0 [0167.617] IsCharAlphaNumericW (ch=0x2e) returned 0 [0167.617] IsCharAlphaNumericW (ch=0x35) returned 1 [0167.617] IsCharAlphaNumericW (ch=0x25) returned 0 [0167.617] IsCharAlphaNumericW (ch=0x25) returned 0 [0167.617] IsCharAlphaNumericW (ch=0x3b) returned 0 [0167.617] IsCharAlphaNumericW (ch=0x7d) returned 0 [0167.617] IsCharAlphaNumericW (ch=0x20) returned 0 [0167.617] IsCharAlphaNumericW (ch=0x20) returned 0 [0167.617] IsCharAlphaNumericW (ch=0x7b) returned 0 [0167.617] IsCharAlphaNumericW (ch=0x3a) returned 0 [0167.617] IsCharAlphaNumericW (ch=0x3a) returned 0 [0167.617] IsCharAlphaNumericW (ch=0x31) returned 1 [0167.617] IsCharAlphaNumericW (ch=0x3b) returned 0 [0167.617] IsCharAlphaNumericW (ch=0x3b) returned 0 [0167.617] IsCharAlphaNumericW (ch=0x7d) returned 0 [0167.617] IsCharAlphaNumericW (ch=0x20) returned 0 [0167.617] IsCharAlphaNumericW (ch=0x7b) returned 0 [0167.617] IsCharAlphaNumericW (ch=0x3a) returned 0 [0167.617] IsCharAlphaNumericW (ch=0x3a) returned 0 [0167.617] IsCharAlphaNumericW (ch=0x23) returned 0 [0167.617] IsCharAlphaNumericW (ch=0x35) returned 1 [0167.617] IsCharAlphaNumericW (ch=0x3b) returned 0 [0167.617] IsCharAlphaNumericW (ch=0x3b) returned 0 [0167.618] IsCharAlphaNumericW (ch=0x3a) returned 0 [0167.618] IsCharAlphaNumericW (ch=0x3a) returned 0 [0167.618] IsCharAlphaNumericW (ch=0x31) returned 1 [0167.618] IsCharAlphaNumericW (ch=0x3b) returned 0 [0167.618] IsCharAlphaNumericW (ch=0x3b) returned 0 [0167.618] IsCharAlphaNumericW (ch=0x7d) returned 0 [0167.618] RtlReAllocateHeap (Heap=0x470000, Flags=0x0, Ptr=0x4bfff8, Size=0x34) returned 0x4afbe0 [0167.618] RtlAllocateHeap (HeapHandle=0x470000, Flags=0x0, Size=0x10) returned 0x4bd4f0 [0167.618] IsCharAlphaNumericW (ch=0x20) returned 0 [0167.618] IsCharAlphaNumericW (ch=0x7b) returned 0 [0167.618] IsCharAlphaNumericW (ch=0x3a) returned 0 [0167.618] IsCharAlphaNumericW (ch=0x3a) returned 0 [0167.618] IsCharAlphaNumericW (ch=0x3b) returned 0 [0167.618] IsCharAlphaNumericW (ch=0x3b) returned 0 [0167.618] IsCharAlphaNumericW (ch=0x3a) returned 0 [0167.618] IsCharAlphaNumericW (ch=0x3a) returned 0 [0167.618] IsCharAlphaNumericW (ch=0x30) returned 1 [0167.618] IsCharAlphaNumericW (ch=0x3b) returned 0 [0167.618] IsCharAlphaNumericW (ch=0x3b) returned 0 [0167.618] RtlReAllocateHeap (Heap=0x470000, Flags=0x0, Ptr=0x4c87b8, Size=0x60) returned 0x4cda68 [0167.618] IsCharAlphaNumericW (ch=0x3a) returned 0 [0167.618] IsCharAlphaNumericW (ch=0x3a) returned 0 [0167.619] IsCharAlphaNumericW (ch=0x30) returned 1 [0167.619] IsCharAlphaNumericW (ch=0x3b) returned 0 [0167.619] IsCharAlphaNumericW (ch=0x3b) returned 0 [0167.619] RtlReAllocateHeap (Heap=0x470000, Flags=0x0, Ptr=0x4cda68, Size=0x90) returned 0x4a48b8 [0167.619] IsCharAlphaNumericW (ch=0x7d) returned 0 [0167.619] IsCharAlphaNumericW (ch=0x2e) returned 0 [0167.619] RtlAllocateHeap (HeapHandle=0x470000, Flags=0x0, Size=0x18) returned 0x4c0f88 [0167.619] RtlAllocateHeap (HeapHandle=0x470000, Flags=0x0, Size=0x50) returned 0x4bf178 [0167.619] IsCharAlphaNumericW (ch=0x7b) returned 0 [0167.619] IsCharAlphaNumericW (ch=0x7b) returned 0 [0167.619] IsCharAlphaNumericW (ch=0x3a) returned 0 [0167.619] IsCharAlphaNumericW (ch=0x3a) returned 0 [0167.619] IsCharAlphaNumericW (ch=0x23) returned 0 [0167.619] IsCharAlphaNumericW (ch=0x35) returned 1 [0167.619] IsCharAlphaNumericW (ch=0x3b) returned 0 [0167.619] IsCharAlphaNumericW (ch=0x3b) returned 0 [0167.619] IsCharAlphaNumericW (ch=0x3a) returned 0 [0167.619] IsCharAlphaNumericW (ch=0x3a) returned 0 [0167.619] IsCharAlphaNumericW (ch=0x32) returned 1 [0167.619] IsCharAlphaNumericW (ch=0x3b) returned 0 [0167.619] IsCharAlphaNumericW (ch=0x3b) returned 0 [0167.619] IsCharAlphaNumericW (ch=0x7d) returned 0 [0167.619] IsCharAlphaNumericW (ch=0x2e) returned 0 [0167.619] RtlAllocateHeap (HeapHandle=0x470000, Flags=0x0, Size=0x18) returned 0x4dc8e0 [0167.619] RtlAllocateHeap (HeapHandle=0x470000, Flags=0x0, Size=0x50) returned 0x4bf178 [0167.619] IsCharAlphaNumericW (ch=0x20) returned 0 [0167.619] IsCharAlphaNumericW (ch=0x7b) returned 0 [0167.620] IsCharAlphaNumericW (ch=0x3a) returned 0 [0167.620] IsCharAlphaNumericW (ch=0x3a) returned 0 [0167.620] IsCharAlphaNumericW (ch=0x23) returned 0 [0167.620] IsCharAlphaNumericW (ch=0x30) returned 1 [0167.620] IsCharAlphaNumericW (ch=0x3b) returned 0 [0167.620] IsCharAlphaNumericW (ch=0x3b) returned 0 [0167.620] IsCharAlphaNumericW (ch=0x3a) returned 0 [0167.620] IsCharAlphaNumericW (ch=0x3a) returned 0 [0167.620] IsCharAlphaNumericW (ch=0x3b) returned 0 [0167.620] IsCharAlphaNumericW (ch=0x3b) returned 0 [0167.620] IsCharAlphaNumericW (ch=0x7d) returned 0 [0167.620] IsCharAlphaNumericW (ch=0x2e) returned 0 [0167.620] RtlAllocateHeap (HeapHandle=0x470000, Flags=0x0, Size=0x18) returned 0x4dc920 [0167.620] RtlAllocateHeap (HeapHandle=0x470000, Flags=0x0, Size=0x50) returned 0x4bf178 [0167.620] IsCharAlphaNumericW (ch=0x3a) returned 0 [0167.620] IsCharAlphaNumericW (ch=0x3a) returned 0 [0167.620] IsCharAlphaNumericW (ch=0x20) returned 0 [0167.620] StrCmpNICW (lpStr1="hover", lpStr2="hover", nChar=5) returned 0 [0167.620] IsCharAlphaNumericW (ch=0x7b) returned 0 [0167.620] IsCharAlphaNumericW (ch=0x3a) returned 0 [0167.620] IsCharAlphaNumericW (ch=0x3a) returned 0 [0167.620] IsCharAlphaNumericW (ch=0x3b) returned 0 [0167.620] IsCharAlphaNumericW (ch=0x3b) returned 0 [0167.620] StrCmpICW (pszStr1="underline", pszStr2="none") returned 7 [0167.620] StrCmpICW (pszStr1="underline", pszStr2="underline") returned 0 [0167.620] RtlAllocateHeap (HeapHandle=0x470000, Flags=0x0, Size=0x14) returned 0x4dc960 [0167.620] RtlAllocateHeap (HeapHandle=0x470000, Flags=0x0, Size=0x40) returned 0x4c8848 [0167.620] HeapFree (in: hHeap=0x470000, dwFlags=0x0, lpMem=0x4dc940 | out: hHeap=0x470000) returned 1 [0167.620] IsCharAlphaNumericW (ch=0x7d) returned 0 [0167.620] IsCharSpaceW (wch=0xd) returned 1 [0167.620] IsCharSpaceW (wch=0xa) returned 1 [0167.621] IsCharSpaceW (wch=0x9) returned 1 [0167.621] IsCharSpaceW (wch=0x2e) returned 0 [0167.621] RtlReAllocateHeap (Heap=0x470000, Flags=0x0, Ptr=0x4afbe0, Size=0x4c) returned 0x4bf178 [0167.621] RtlReAllocateHeap (Heap=0x470000, Flags=0x0, Ptr=0x4c4d90, Size=0x10) returned 0x4bd550 [0167.621] IsCharAlphaNumericW (ch=0x2e) returned 0 [0167.621] RtlAllocateHeap (HeapHandle=0x470000, Flags=0x0, Size=0x18) returned 0x4dc940 [0167.621] RtlAllocateHeap (HeapHandle=0x470000, Flags=0x0, Size=0x50) returned 0x4bf1d0 [0167.621] IsCharAlphaNumericW (ch=0x20) returned 0 [0167.621] IsCharSpaceW (wch=0x20) returned 1 [0167.621] IsCharSpaceW (wch=0x7b) returned 0 [0167.621] RtlAllocateHeap (HeapHandle=0x470000, Flags=0x0, Size=0x8) returned 0x4c4d90 [0167.621] RtlAllocateHeap (HeapHandle=0x470000, Flags=0x0, Size=0x20) returned 0x4b64e8 [0167.621] IsCharSpaceW (wch=0x20) returned 1 [0167.621] IsCharAlphaNumericW (ch=0x7b) returned 0 [0167.621] IsCharSpaceW (wch=0xd) returned 1 [0167.621] IsCharSpaceW (wch=0xa) returned 1 [0167.621] IsCharSpaceW (wch=0x9) returned 1 [0167.621] IsCharSpaceW (wch=0x9) returned 1 [0167.621] IsCharSpaceW (wch=0x62) returned 0 [0167.621] HeapFree (in: hHeap=0x470000, dwFlags=0x0, lpMem=0x4bf1d0 | out: hHeap=0x470000) returned 1 [0167.621] IsCharAlphaNumericW (ch=0x3a) returned 0 [0167.621] IsCharSpaceW (wch=0x3a) returned 0 [0167.621] RtlAllocateHeap (HeapHandle=0x470000, Flags=0x0, Size=0x1c) returned 0x4b6510 [0167.621] IsCharAlphaNumericW (ch=0x3a) returned 0 [0167.621] IsCharSpaceW (wch=0x20) returned 1 [0167.621] IsCharSpaceW (wch=0x23) returned 0 [0167.621] IsCharAlphaNumericW (ch=0x23) returned 0 [0167.621] IsCharAlphaNumericW (ch=0x3b) returned 0 [0167.621] IsCharSpaceW (wch=0x3b) returned 0 [0167.621] IsCharAlphaNumericW (ch=0x3b) returned 0 [0167.621] IsCharSpaceW (wch=0xd) returned 1 [0167.621] IsCharSpaceW (wch=0xa) returned 1 [0167.621] IsCharSpaceW (wch=0x9) returned 1 [0167.621] IsCharSpaceW (wch=0x9) returned 1 [0167.621] IsCharSpaceW (wch=0x62) returned 0 [0167.621] IsCharSpaceW (wch=0x66) returned 0 [0167.621] IsCharSpaceW (wch=0x23) returned 0 [0167.622] IsCharSpaceW (wch=0x23) returned 0 [0167.622] RtlAllocateHeap (HeapHandle=0x470000, Flags=0x0, Size=0x14) returned 0x4dc980 [0167.622] RtlAllocateHeap (HeapHandle=0x470000, Flags=0x0, Size=0x40) returned 0x4c8890 [0167.622] IsCharAlphaNumericW (ch=0x3a) returned 0 [0167.622] IsCharSpaceW (wch=0x3a) returned 0 [0167.622] IsCharAlphaNumericW (ch=0x3a) returned 0 [0167.622] IsCharSpaceW (wch=0x20) returned 1 [0167.622] IsCharSpaceW (wch=0x32) returned 0 [0167.622] IsCharAlphaNumericW (ch=0x32) returned 1 [0167.622] IsCharAlphaNumericW (ch=0x20) returned 0 [0167.622] IsCharSpaceW (wch=0x20) returned 1 [0167.622] IsCharSpaceW (wch=0x73) returned 0 [0167.622] IsCharAlphaNumericW (ch=0x20) returned 0 [0167.622] IsCharSpaceW (wch=0x20) returned 1 [0167.622] IsCharSpaceW (wch=0x23) returned 0 [0167.622] IsCharAlphaNumericW (ch=0x23) returned 0 [0167.622] IsCharAlphaNumericW (ch=0x3b) returned 0 [0167.622] IsCharSpaceW (wch=0x3b) returned 0 [0167.622] IsCharAlphaNumericW (ch=0x3b) returned 0 [0167.622] IsCharSpaceW (wch=0xd) returned 1 [0167.622] IsCharSpaceW (wch=0xa) returned 1 [0167.622] IsCharSpaceW (wch=0x9) returned 1 [0167.622] IsCharSpaceW (wch=0x9) returned 1 [0167.622] IsCharSpaceW (wch=0x6d) returned 0 [0167.622] IsCharSpaceW (wch=0x37) returned 0 [0167.622] IsCharSpaceW (wch=0x32) returned 0 [0167.622] RtlAllocateHeap (HeapHandle=0x470000, Flags=0x0, Size=0x24) returned 0x4bfff8 [0167.622] IsCharSpaceW (wch=0x32) returned 0 [0167.622] IsCharSpaceW (wch=0x32) returned 0 [0167.622] IsCharSpaceW (wch=0x70) returned 0 [0167.622] IsCharSpaceW (wch=0x74) returned 0 [0167.622] IsCharSpaceW (wch=0x20) returned 1 [0167.622] IsCharSpaceW (wch=0x32) returned 0 [0167.622] IsCharSpaceW (wch=0x70) returned 0 [0167.622] IsCharSpaceW (wch=0x70) returned 0 [0167.623] IsCharSpaceW (wch=0x74) returned 0 [0167.623] IsCharSpaceW (wch=0x0) returned 0 [0167.623] IsCharSpaceW (wch=0x73) returned 0 [0167.623] IsCharSpaceW (wch=0x73) returned 0 [0167.623] IsCharSpaceW (wch=0x6f) returned 0 [0167.623] IsCharSpaceW (wch=0x6c) returned 0 [0167.623] IsCharSpaceW (wch=0x69) returned 0 [0167.623] IsCharSpaceW (wch=0x64) returned 0 [0167.623] IsCharSpaceW (wch=0x20) returned 1 [0167.623] IsCharSpaceW (wch=0x23) returned 0 [0167.623] IsCharSpaceW (wch=0x23) returned 0 [0167.623] IsCharSpaceW (wch=0x66) returned 0 [0167.623] IsCharSpaceW (wch=0x37) returned 0 [0167.623] IsCharSpaceW (wch=0x39) returned 0 [0167.623] IsCharSpaceW (wch=0x37) returned 0 [0167.623] IsCharSpaceW (wch=0x39) returned 0 [0167.623] IsCharSpaceW (wch=0x37) returned 0 [0167.623] IsCharSpaceW (wch=0x23) returned 0 [0167.623] IsCharSpaceW (wch=0x23) returned 0 [0167.623] IsCharSpaceW (wch=0x23) returned 0 [0167.623] HeapFree (in: hHeap=0x470000, dwFlags=0x0, lpMem=0x4bfff8 | out: hHeap=0x470000) returned 1 [0167.623] RtlAllocateHeap (HeapHandle=0x470000, Flags=0x0, Size=0x24) returned 0x4bfff8 [0167.623] IsCharSpaceW (wch=0x32) returned 0 [0167.623] IsCharSpaceW (wch=0x32) returned 0 [0167.623] IsCharSpaceW (wch=0x70) returned 0 [0167.623] IsCharSpaceW (wch=0x74) returned 0 [0167.623] IsCharSpaceW (wch=0x20) returned 1 [0167.623] IsCharSpaceW (wch=0x32) returned 0 [0167.623] IsCharSpaceW (wch=0x70) returned 0 [0167.623] IsCharSpaceW (wch=0x70) returned 0 [0167.623] IsCharSpaceW (wch=0x74) returned 0 [0167.623] IsCharSpaceW (wch=0x0) returned 0 [0167.623] RtlReAllocateHeap (Heap=0x470000, Flags=0x0, Ptr=0x4c8890, Size=0x60) returned 0x4cda68 [0167.624] IsCharSpaceW (wch=0x73) returned 0 [0167.624] IsCharSpaceW (wch=0x73) returned 0 [0167.624] IsCharSpaceW (wch=0x6f) returned 0 [0167.624] IsCharSpaceW (wch=0x6c) returned 0 [0167.624] IsCharSpaceW (wch=0x69) returned 0 [0167.624] IsCharSpaceW (wch=0x64) returned 0 [0167.624] IsCharSpaceW (wch=0x20) returned 1 [0167.624] IsCharSpaceW (wch=0x23) returned 0 [0167.624] IsCharSpaceW (wch=0x23) returned 0 [0167.624] IsCharSpaceW (wch=0x66) returned 0 [0167.624] IsCharSpaceW (wch=0x37) returned 0 [0167.624] IsCharSpaceW (wch=0x39) returned 0 [0167.624] IsCharSpaceW (wch=0x37) returned 0 [0167.624] IsCharSpaceW (wch=0x39) returned 0 [0167.624] IsCharSpaceW (wch=0x37) returned 0 [0167.624] IsCharSpaceW (wch=0x23) returned 0 [0167.624] IsCharSpaceW (wch=0x23) returned 0 [0167.624] IsCharSpaceW (wch=0x23) returned 0 [0167.624] RtlReAllocateHeap (Heap=0x470000, Flags=0x0, Ptr=0x4cda68, Size=0x90) returned 0x4a4950 [0167.624] HeapFree (in: hHeap=0x470000, dwFlags=0x0, lpMem=0x4bfff8 | out: hHeap=0x470000) returned 1 [0167.624] RtlAllocateHeap (HeapHandle=0x470000, Flags=0x0, Size=0x24) returned 0x4bfff8 [0167.624] IsCharSpaceW (wch=0x32) returned 0 [0167.624] IsCharSpaceW (wch=0x32) returned 0 [0167.624] IsCharSpaceW (wch=0x70) returned 0 [0167.624] IsCharSpaceW (wch=0x74) returned 0 [0167.624] IsCharSpaceW (wch=0x20) returned 1 [0167.624] IsCharSpaceW (wch=0x32) returned 0 [0167.624] IsCharSpaceW (wch=0x70) returned 0 [0167.624] IsCharSpaceW (wch=0x70) returned 0 [0167.624] IsCharSpaceW (wch=0x74) returned 0 [0167.624] IsCharSpaceW (wch=0x0) returned 0 [0167.624] IsCharSpaceW (wch=0x73) returned 0 [0167.624] IsCharSpaceW (wch=0x73) returned 0 [0167.624] IsCharSpaceW (wch=0x6f) returned 0 [0167.624] IsCharSpaceW (wch=0x6c) returned 0 [0167.625] IsCharSpaceW (wch=0x69) returned 0 [0167.625] IsCharSpaceW (wch=0x64) returned 0 [0167.625] IsCharSpaceW (wch=0x20) returned 1 [0167.625] IsCharSpaceW (wch=0x23) returned 0 [0167.625] IsCharSpaceW (wch=0x23) returned 0 [0167.625] IsCharSpaceW (wch=0x66) returned 0 [0167.625] IsCharSpaceW (wch=0x37) returned 0 [0167.625] IsCharSpaceW (wch=0x39) returned 0 [0167.625] IsCharSpaceW (wch=0x37) returned 0 [0167.625] IsCharSpaceW (wch=0x39) returned 0 [0167.625] IsCharSpaceW (wch=0x37) returned 0 [0167.625] IsCharSpaceW (wch=0x23) returned 0 [0167.625] IsCharSpaceW (wch=0x23) returned 0 [0167.625] IsCharSpaceW (wch=0x23) returned 0 [0167.625] RtlReAllocateHeap (Heap=0x470000, Flags=0x0, Ptr=0x4a4950, Size=0xd0) returned 0x4c0250 [0167.625] HeapFree (in: hHeap=0x470000, dwFlags=0x0, lpMem=0x4bfff8 | out: hHeap=0x470000) returned 1 [0167.625] RtlAllocateHeap (HeapHandle=0x470000, Flags=0x0, Size=0x24) returned 0x4bfff8 [0167.625] IsCharSpaceW (wch=0x32) returned 0 [0167.625] IsCharSpaceW (wch=0x32) returned 0 [0167.625] IsCharSpaceW (wch=0x70) returned 0 [0167.625] IsCharSpaceW (wch=0x74) returned 0 [0167.625] IsCharSpaceW (wch=0x20) returned 1 [0167.625] IsCharSpaceW (wch=0x32) returned 0 [0167.625] IsCharSpaceW (wch=0x70) returned 0 [0167.625] IsCharSpaceW (wch=0x70) returned 0 [0167.625] IsCharSpaceW (wch=0x74) returned 0 [0167.625] IsCharSpaceW (wch=0x0) returned 0 [0167.625] IsCharSpaceW (wch=0x73) returned 0 [0167.625] IsCharSpaceW (wch=0x73) returned 0 [0167.625] IsCharSpaceW (wch=0x6f) returned 0 [0167.625] IsCharSpaceW (wch=0x6c) returned 0 [0167.625] IsCharSpaceW (wch=0x69) returned 0 [0167.625] IsCharSpaceW (wch=0x64) returned 0 [0167.625] IsCharSpaceW (wch=0x20) returned 1 [0167.626] IsCharSpaceW (wch=0x23) returned 0 [0167.626] IsCharSpaceW (wch=0x23) returned 0 [0167.626] IsCharSpaceW (wch=0x66) returned 0 [0167.626] IsCharSpaceW (wch=0x37) returned 0 [0167.626] IsCharSpaceW (wch=0x39) returned 0 [0167.626] IsCharSpaceW (wch=0x37) returned 0 [0167.626] IsCharSpaceW (wch=0x39) returned 0 [0167.626] IsCharSpaceW (wch=0x37) returned 0 [0167.626] IsCharSpaceW (wch=0x23) returned 0 [0167.626] IsCharSpaceW (wch=0x23) returned 0 [0167.626] IsCharSpaceW (wch=0x23) returned 0 [0167.626] HeapFree (in: hHeap=0x470000, dwFlags=0x0, lpMem=0x4bfff8 | out: hHeap=0x470000) returned 1 [0167.626] IsCharAlphaNumericW (ch=0x3a) returned 0 [0167.626] IsCharSpaceW (wch=0x3a) returned 0 [0167.626] IsCharAlphaNumericW (ch=0x3a) returned 0 [0167.626] IsCharSpaceW (wch=0x20) returned 1 [0167.626] IsCharSpaceW (wch=0x35) returned 0 [0167.626] IsCharAlphaNumericW (ch=0x35) returned 1 [0167.626] IsCharAlphaNumericW (ch=0x25) returned 0 [0167.626] IsCharSpaceW (wch=0x25) returned 0 [0167.626] IsCharAlphaNumericW (ch=0x25) returned 0 [0167.626] IsCharSpaceW (wch=0x3b) returned 0 [0167.626] IsCharAlphaNumericW (ch=0x3b) returned 0 [0167.626] IsCharSpaceW (wch=0xd) returned 1 [0167.626] IsCharSpaceW (wch=0xa) returned 1 [0167.626] IsCharSpaceW (wch=0x9) returned 1 [0167.626] IsCharSpaceW (wch=0x9) returned 1 [0167.626] IsCharSpaceW (wch=0x6d) returned 0 [0167.626] IsCharSpaceW (wch=0x25) returned 0 [0167.626] IsCharSpaceW (wch=0x35) returned 0 [0167.626] RtlAllocateHeap (HeapHandle=0x470000, Flags=0x0, Size=0x6) returned 0x4c4db0 [0167.626] IsCharSpaceW (wch=0x35) returned 0 [0167.626] IsCharSpaceW (wch=0x35) returned 0 [0167.626] IsCharSpaceW (wch=0x25) returned 0 [0167.626] IsCharSpaceW (wch=0x35) returned 0 [0167.626] IsCharSpaceW (wch=0x25) returned 0 [0167.627] IsCharSpaceW (wch=0x25) returned 0 [0167.627] IsCharSpaceW (wch=0x0) returned 0 [0167.627] RtlReAllocateHeap (Heap=0x470000, Flags=0x0, Ptr=0x4c0250, Size=0x130) returned 0x4c0250 [0167.627] IsCharSpaceW (wch=0x35) returned 0 [0167.627] IsCharSpaceW (wch=0x25) returned 0 [0167.627] IsCharSpaceW (wch=0x25) returned 0 [0167.627] IsCharSpaceW (wch=0x0) returned 0 [0167.627] IsCharSpaceW (wch=0x35) returned 0 [0167.627] IsCharSpaceW (wch=0x25) returned 0 [0167.627] IsCharSpaceW (wch=0x25) returned 0 [0167.627] IsCharSpaceW (wch=0x0) returned 0 [0167.627] IsCharSpaceW (wch=0x35) returned 0 [0167.627] IsCharSpaceW (wch=0x25) returned 0 [0167.627] IsCharSpaceW (wch=0x25) returned 0 [0167.627] IsCharSpaceW (wch=0x0) returned 0 [0167.627] IsCharSpaceW (wch=0x0) returned 0 [0167.627] HeapFree (in: hHeap=0x470000, dwFlags=0x0, lpMem=0x4c4db0 | out: hHeap=0x470000) returned 1 [0167.627] IsCharAlphaNumericW (ch=0x3a) returned 0 [0167.627] IsCharSpaceW (wch=0x3a) returned 0 [0167.627] IsCharAlphaNumericW (ch=0x3a) returned 0 [0167.627] IsCharSpaceW (wch=0x20) returned 1 [0167.627] IsCharSpaceW (wch=0x38) returned 0 [0167.627] IsCharAlphaNumericW (ch=0x38) returned 1 [0167.627] IsCharAlphaNumericW (ch=0x3b) returned 0 [0167.627] IsCharSpaceW (wch=0x3b) returned 0 [0167.627] IsCharAlphaNumericW (ch=0x3b) returned 0 [0167.627] IsCharSpaceW (wch=0xd) returned 1 [0167.627] IsCharSpaceW (wch=0xa) returned 1 [0167.627] IsCharSpaceW (wch=0x9) returned 1 [0167.627] IsCharSpaceW (wch=0x9) returned 1 [0167.627] IsCharSpaceW (wch=0x70) returned 0 [0167.627] IsCharSpaceW (wch=0x78) returned 0 [0167.627] IsCharSpaceW (wch=0x38) returned 0 [0167.628] IsCharSpaceW (wch=0x38) returned 0 [0167.628] IsCharSpaceW (wch=0x70) returned 0 [0167.628] IsCharSpaceW (wch=0x70) returned 0 [0167.628] IsCharSpaceW (wch=0x78) returned 0 [0167.628] IsCharSpaceW (wch=0x0) returned 0 [0167.628] IsCharAlphaNumericW (ch=0x3a) returned 0 [0167.628] IsCharSpaceW (wch=0x3a) returned 0 [0167.628] IsCharAlphaNumericW (ch=0x3a) returned 0 [0167.628] IsCharSpaceW (wch=0x20) returned 1 [0167.628] IsCharSpaceW (wch=0x32) returned 0 [0167.628] IsCharAlphaNumericW (ch=0x32) returned 1 [0167.628] IsCharAlphaNumericW (ch=0x2e) returned 0 [0167.628] IsCharSpaceW (wch=0x2e) returned 0 [0167.628] IsCharAlphaNumericW (ch=0x2e) returned 0 [0167.628] IsCharAlphaNumericW (ch=0x35) returned 1 [0167.628] IsCharAlphaNumericW (ch=0x25) returned 0 [0167.628] IsCharSpaceW (wch=0x25) returned 0 [0167.628] IsCharAlphaNumericW (ch=0x25) returned 0 [0167.628] IsCharSpaceW (wch=0x3b) returned 0 [0167.628] IsCharAlphaNumericW (ch=0x3b) returned 0 [0167.628] IsCharSpaceW (wch=0xd) returned 1 [0167.628] IsCharSpaceW (wch=0xa) returned 1 [0167.628] IsCharSpaceW (wch=0x9) returned 1 [0167.628] IsCharSpaceW (wch=0x7d) returned 0 [0167.628] IsCharSpaceW (wch=0x25) returned 0 [0167.628] IsCharSpaceW (wch=0x32) returned 0 [0167.628] RtlAllocateHeap (HeapHandle=0x470000, Flags=0x0, Size=0xa) returned 0x4bd568 [0167.628] IsCharSpaceW (wch=0x32) returned 0 [0167.628] IsCharSpaceW (wch=0x32) returned 0 [0167.628] IsCharSpaceW (wch=0x2e) returned 0 [0167.628] IsCharSpaceW (wch=0x35) returned 0 [0167.628] IsCharSpaceW (wch=0x25) returned 0 [0167.628] IsCharSpaceW (wch=0x32) returned 0 [0167.628] IsCharSpaceW (wch=0x25) returned 0 [0167.628] IsCharSpaceW (wch=0x25) returned 0 [0167.628] IsCharSpaceW (wch=0x0) returned 0 [0167.628] IsCharSpaceW (wch=0x32) returned 0 [0167.628] IsCharSpaceW (wch=0x25) returned 0 [0167.628] IsCharSpaceW (wch=0x25) returned 0 [0167.628] IsCharSpaceW (wch=0x0) returned 0 [0167.629] RtlReAllocateHeap (Heap=0x470000, Flags=0x0, Ptr=0x4c0250, Size=0x1c0) returned 0x4c0250 [0167.629] IsCharSpaceW (wch=0x32) returned 0 [0167.629] IsCharSpaceW (wch=0x25) returned 0 [0167.629] IsCharSpaceW (wch=0x25) returned 0 [0167.629] IsCharSpaceW (wch=0x0) returned 0 [0167.629] IsCharSpaceW (wch=0x32) returned 0 [0167.629] IsCharSpaceW (wch=0x25) returned 0 [0167.629] IsCharSpaceW (wch=0x25) returned 0 [0167.629] IsCharSpaceW (wch=0x0) returned 0 [0167.629] IsCharSpaceW (wch=0x0) returned 0 [0167.629] HeapFree (in: hHeap=0x470000, dwFlags=0x0, lpMem=0x4bd568 | out: hHeap=0x470000) returned 1 [0167.629] IsCharAlphaNumericW (ch=0x7d) returned 0 [0167.629] IsCharSpaceW (wch=0xd) returned 1 [0167.629] IsCharSpaceW (wch=0xa) returned 1 [0167.629] IsCharSpaceW (wch=0x9) returned 1 [0167.629] IsCharSpaceW (wch=0x2e) returned 0 [0167.629] RtlAllocateHeap (HeapHandle=0x470000, Flags=0x0, Size=0x10) returned 0x4bd568 [0167.629] RtlAllocateHeap (HeapHandle=0x470000, Flags=0x0, Size=0x4) returned 0x4c4db0 [0167.629] IsCharAlphaNumericW (ch=0x2e) returned 0 [0167.629] RtlAllocateHeap (HeapHandle=0x470000, Flags=0x0, Size=0x18) returned 0x4dc9a0 [0167.629] RtlAllocateHeap (HeapHandle=0x470000, Flags=0x0, Size=0x50) returned 0x4bf1d0 [0167.629] IsCharAlphaNumericW (ch=0x20) returned 0 [0167.629] IsCharSpaceW (wch=0x20) returned 1 [0167.629] IsCharSpaceW (wch=0x7b) returned 0 [0167.629] RtlAllocateHeap (HeapHandle=0x470000, Flags=0x0, Size=0x8) returned 0x4c4dc0 [0167.629] IsCharSpaceW (wch=0x20) returned 1 [0167.629] IsCharAlphaNumericW (ch=0x7b) returned 0 [0167.629] IsCharSpaceW (wch=0xd) returned 1 [0167.629] IsCharSpaceW (wch=0xa) returned 1 [0167.629] IsCharSpaceW (wch=0x9) returned 1 [0167.629] IsCharSpaceW (wch=0x9) returned 1 [0167.629] IsCharSpaceW (wch=0x62) returned 0 [0167.629] HeapFree (in: hHeap=0x470000, dwFlags=0x0, lpMem=0x4bf1d0 | out: hHeap=0x470000) returned 1 [0167.629] IsCharAlphaNumericW (ch=0x3a) returned 0 [0167.629] IsCharSpaceW (wch=0x3a) returned 0 [0167.629] RtlAllocateHeap (HeapHandle=0x470000, Flags=0x0, Size=0x1c) returned 0x4b6560 [0167.630] IsCharAlphaNumericW (ch=0x3a) returned 0 [0167.630] IsCharSpaceW (wch=0x20) returned 1 [0167.630] IsCharSpaceW (wch=0x32) returned 0 [0167.630] IsCharAlphaNumericW (ch=0x32) returned 1 [0167.630] IsCharAlphaNumericW (ch=0x20) returned 0 [0167.630] IsCharSpaceW (wch=0x20) returned 1 [0167.630] IsCharAlphaNumericW (ch=0x20) returned 0 [0167.630] IsCharAlphaNumericW (ch=0x23) returned 0 [0167.630] IsCharAlphaNumericW (ch=0x3b) returned 0 [0167.630] IsCharAlphaNumericW (ch=0x3b) returned 0 [0167.630] IsCharAlphaNumericW (ch=0x3a) returned 0 [0167.630] IsCharAlphaNumericW (ch=0x3a) returned 0 [0167.630] IsCharAlphaNumericW (ch=0x32) returned 1 [0167.630] IsCharAlphaNumericW (ch=0x2e) returned 0 [0167.630] IsCharAlphaNumericW (ch=0x2e) returned 0 [0167.630] RtlReAllocateHeap (Heap=0x470000, Flags=0x0, Ptr=0x4c8890, Size=0x60) returned 0x4cda68 [0167.630] RtlReAllocateHeap (Heap=0x470000, Flags=0x0, Ptr=0x4c88d8, Size=0x60) returned 0x4cdad0 [0167.630] RtlReAllocateHeap (Heap=0x470000, Flags=0x0, Ptr=0x4cdad0, Size=0x90) returned 0x4a4950 [0167.630] RtlReAllocateHeap (Heap=0x470000, Flags=0x0, Ptr=0x4a4950, Size=0xd0) returned 0x4c0418 [0167.630] RtlReAllocateHeap (Heap=0x470000, Flags=0x0, Ptr=0x4c88d8, Size=0x60) returned 0x4cdad0 [0167.630] RtlReAllocateHeap (Heap=0x470000, Flags=0x0, Ptr=0x4cdad0, Size=0x90) returned 0x4a4950 [0167.631] RtlReAllocateHeap (Heap=0x470000, Flags=0x0, Ptr=0x4a4950, Size=0xd0) returned 0x4c04f0 [0167.631] RtlReAllocateHeap (Heap=0x470000, Flags=0x0, Ptr=0x4c04f0, Size=0x130) returned 0x4c04f0 [0167.631] RtlReAllocateHeap (Heap=0x470000, Flags=0x0, Ptr=0x4bf178, Size=0x70) returned 0x4b5290 [0167.631] RtlAllocateHeap (HeapHandle=0x470000, Flags=0x0, Size=0x10) returned 0x4bd5f8 [0167.631] RtlAllocateHeap (HeapHandle=0x470000, Flags=0x0, Size=0x128) returned 0x4c0628 [0167.631] RtlReAllocateHeap (Heap=0x470000, Flags=0x0, Ptr=0x4c4e50, Size=0x10) returned 0x4bd628 [0167.631] RtlAllocateHeap (HeapHandle=0x470000, Flags=0x0, Size=0x20) returned 0x4b6678 [0167.631] EnumFontFamiliesExW (hdc=0x13010a0a, lpLogfont=0x26ef48, lpProc=0x6fc3bbcd, lParam=0x26ef00, dwFlags=0x0) returned 0 [0167.632] MulDiv (nNumber=13000, nNumerator=20, nDenominator=1000) returned 260 [0167.632] GetSysColor (nIndex=5) returned 0xffffff [0167.632] RtlAllocateHeap (HeapHandle=0x470000, Flags=0x0, Size=0x30) returned 0x4c7970 [0167.632] RtlAllocateHeap (HeapHandle=0x470000, Flags=0x0, Size=0xec) returned 0x4bd6f8 [0167.632] HeapFree (in: hHeap=0x470000, dwFlags=0x0, lpMem=0x0 | out: hHeap=0x470000) returned 1 [0167.632] HeapFree (in: hHeap=0x470000, dwFlags=0x0, lpMem=0x0 | out: hHeap=0x470000) returned 1 [0167.633] RtlAllocateHeap (HeapHandle=0x470000, Flags=0x8, Size=0x100) returned 0x4bd7f0 [0167.633] GetSysColor (nIndex=5) returned 0xffffff [0167.633] RtlAllocateHeap (HeapHandle=0x470000, Flags=0x0, Size=0x30) returned 0x4c7970 [0167.633] RtlAllocateHeap (HeapHandle=0x470000, Flags=0x0, Size=0xec) returned 0x4ac480 [0167.633] HeapFree (in: hHeap=0x470000, dwFlags=0x0, lpMem=0x0 | out: hHeap=0x470000) returned 1 [0167.633] HeapFree (in: hHeap=0x470000, dwFlags=0x0, lpMem=0x0 | out: hHeap=0x470000) returned 1 [0167.633] HeapFree (in: hHeap=0x470000, dwFlags=0x0, lpMem=0x0 | out: hHeap=0x470000) returned 1 [0167.633] RtlAllocateHeap (HeapHandle=0x470000, Flags=0x0, Size=0x50) returned 0x4bf178 [0167.633] RtlAllocateHeap (HeapHandle=0x470000, Flags=0x0, Size=0x8) returned 0x4c4e50 [0167.634] RtlReAllocateHeap (Heap=0x470000, Flags=0x0, Ptr=0x4b4f68, Size=0x128) returned 0x4b4f68 [0167.634] RtlAllocateHeap (HeapHandle=0x470000, Flags=0x0, Size=0x50) returned 0x4bf178 [0167.634] GetSysColor (nIndex=5) returned 0xffffff [0167.637] RtlAllocateHeap (HeapHandle=0x470000, Flags=0x0, Size=0x64) returned 0x4db000 [0167.637] RtlAllocateHeap (HeapHandle=0x470000, Flags=0x0, Size=0xec) returned 0x4bd6f8 [0167.641] IsCharSpaceW (wch=0x75) returned 0 [0167.641] StrCmpNICW (lpStr1="url", lpStr2="URL", nChar=3) returned 0 [0167.641] IsCharSpaceW (wch=0x28) returned 0 [0167.641] IsCharSpaceW (wch=0x23) returned 0 [0167.641] IsCharSpaceW (wch=0x23) returned 0 [0167.641] IsCharSpaceW (wch=0x64) returned 0 [0167.641] IsCharSpaceW (wch=0x65) returned 0 [0167.641] IsCharSpaceW (wch=0x66) returned 0 [0167.641] IsCharSpaceW (wch=0x61) returned 0 [0167.641] IsCharSpaceW (wch=0x75) returned 0 [0167.641] IsCharSpaceW (wch=0x6c) returned 0 [0167.641] IsCharSpaceW (wch=0x74) returned 0 [0167.641] IsCharSpaceW (wch=0x23) returned 0 [0167.641] IsCharSpaceW (wch=0x41) returned 0 [0167.641] IsCharSpaceW (wch=0x50) returned 0 [0167.641] IsCharSpaceW (wch=0x50) returned 0 [0167.641] IsCharSpaceW (wch=0x4c) returned 0 [0167.641] IsCharSpaceW (wch=0x49) returned 0 [0167.641] IsCharSpaceW (wch=0x43) returned 0 [0167.641] IsCharSpaceW (wch=0x41) returned 0 [0167.641] IsCharSpaceW (wch=0x54) returned 0 [0167.641] IsCharSpaceW (wch=0x49) returned 0 [0167.641] IsCharSpaceW (wch=0x4f) returned 0 [0167.641] IsCharSpaceW (wch=0x4e) returned 0 [0167.641] IsCharSpaceW (wch=0x29) returned 0 [0167.641] RtlAllocateHeap (HeapHandle=0x470000, Flags=0x0, Size=0x36) returned 0x4afbe0 [0167.641] RtlAllocateHeap (HeapHandle=0x470000, Flags=0x0, Size=0x10) returned 0x4bd658 [0167.641] IsCharSpaceW (wch=0x0) returned 0 [0167.641] StrCmpICW (pszStr1="#default#APPLICATION", pszStr2="#default#APPLICATION") returned 0 [0167.641] HeapFree (in: hHeap=0x470000, dwFlags=0x0, lpMem=0x4afbe0 | out: hHeap=0x470000) returned 1 [0167.641] HeapFree (in: hHeap=0x470000, dwFlags=0x0, lpMem=0x4bd658 | out: hHeap=0x470000) returned 1 [0167.642] HeapFree (in: hHeap=0x470000, dwFlags=0x0, lpMem=0x0 | out: hHeap=0x470000) returned 1 [0167.642] RtlAllocateHeap (HeapHandle=0x470000, Flags=0x0, Size=0x50) returned 0x4bf178 [0167.642] RtlReAllocateHeap (Heap=0x470000, Flags=0x0, Ptr=0x4da8d8, Size=0x150) returned 0x4bdbf0 [0167.642] ParseURLW (in: pcszURL="file:///C:/Users/5p5NrGJn0jS%20HALPmcxz/Desktop/READ_ME.hta", ppu=0x26f9c8 | out: ppu=0x26f9c8) returned 0x0 [0167.642] IUnknown:AddRef (This=0x49c66c) returned 0x3 [0167.642] IUri:GetAbsoluteUri (in: This=0x49c66c, pbstrAbsoluteUri=0x26fa48 | out: pbstrAbsoluteUri=0x26fa48*="file:///C:/Users/5p5NrGJn0jS%20HALPmcxz/Desktop/READ_ME.hta") returned 0x0 [0167.642] IUnknown:Release (This=0x49c66c) returned 0x2 [0167.642] ShouldShowIntranetWarningSecband () returned 0x0 [0167.647] GetIUriPriv () returned 0x0 [0167.647] IUnknown:Release (This=0x49c66c) returned 0x2 [0167.647] ScreenToClient (in: hWnd=0x5011e, lpPoint=0x26f840 | out: lpPoint=0x26f840) returned 1 [0167.647] RtlAllocateHeap (HeapHandle=0x470000, Flags=0x8, Size=0x30) returned 0x4c7a18 [0167.647] GetCurrentThreadId () returned 0x220 [0167.647] HeapFree (in: hHeap=0x470000, dwFlags=0x0, lpMem=0x4c7a18 | out: hHeap=0x470000) returned 1 [0167.647] GetCurrentThreadId () returned 0x220 [0167.647] GetCurrentThreadId () returned 0x220 [0167.647] GetCurrentThreadId () returned 0x220 [0167.647] GetCurrentThreadId () returned 0x220 [0167.647] GetCurrentThreadId () returned 0x220 [0167.648] IntersectRect (in: lprcDst=0x26f410, lprcSrc1=0x26f410, lprcSrc2=0x26f498 | out: lprcDst=0x26f410) returned 1 [0167.648] IntersectRect (in: lprcDst=0x26f4a8, lprcSrc1=0x26f4a8, lprcSrc2=0x26f410 | out: lprcDst=0x26f4a8) returned 1 [0167.648] IntersectRect (in: lprcDst=0x26f500, lprcSrc1=0x26f500, lprcSrc2=0x26f498 | out: lprcDst=0x26f500) returned 1 [0167.648] RtlAllocateHeap (HeapHandle=0x470000, Flags=0x8, Size=0xc8) returned 0x4c0758 [0167.648] RtlAllocateHeap (HeapHandle=0x470000, Flags=0x8, Size=0x44) returned 0x4c9150 [0167.649] LsGetRubyLsimethods () returned 0x0 [0167.649] LsGetTatenakayokoLsimethods () returned 0x0 [0167.649] LsGetHihLsimethods () returned 0x0 [0167.649] LsGetWarichuLsimethods () returned 0x0 [0167.649] LsGetReverseLsimethods () returned 0x0 [0167.649] LsCreateContext () returned 0x0 [0167.649] RtlAllocateHeap (HeapHandle=0x470000, Flags=0x0, Size=0x670) returned 0x4dd838 [0167.649] RtlAllocateHeap (HeapHandle=0x470000, Flags=0x0, Size=0x24) returned 0x4bfff8 [0167.649] RtlAllocateHeap (HeapHandle=0x470000, Flags=0x0, Size=0x110) returned 0x4d2ad8 [0167.649] RtlAllocateHeap (HeapHandle=0x470000, Flags=0x0, Size=0x24) returned 0x4c0028 [0167.649] RtlAllocateHeap (HeapHandle=0x470000, Flags=0x0, Size=0x2e4) returned 0x4ddeb0 [0167.650] RtlAllocateHeap (HeapHandle=0x470000, Flags=0x0, Size=0x20) returned 0x4b6768 [0167.650] RtlAllocateHeap (HeapHandle=0x470000, Flags=0x0, Size=0x20) returned 0x4b66c8 [0167.650] RtlAllocateHeap (HeapHandle=0x470000, Flags=0x0, Size=0xa0) returned 0x4dbf30 [0167.650] RtlAllocateHeap (HeapHandle=0x470000, Flags=0x0, Size=0x40) returned 0x4c89b0 [0167.650] RtlAllocateHeap (HeapHandle=0x470000, Flags=0x0, Size=0x20) returned 0x4b6718 [0167.650] RtlAllocateHeap (HeapHandle=0x470000, Flags=0x0, Size=0x20) returned 0x4b6790 [0167.650] RtlAllocateHeap (HeapHandle=0x470000, Flags=0x0, Size=0x20) returned 0x4b67b8 [0167.650] RtlAllocateHeap (HeapHandle=0x470000, Flags=0x0, Size=0x20) returned 0x4b67e0 [0167.650] RtlAllocateHeap (HeapHandle=0x470000, Flags=0x0, Size=0x400) returned 0x4de1a0 [0167.650] RtlAllocateHeap (HeapHandle=0x470000, Flags=0x0, Size=0x8) returned 0x4c4eb0 [0167.650] RtlAllocateHeap (HeapHandle=0x470000, Flags=0x0, Size=0x8) returned 0x4c4ec0 [0167.650] RtlAllocateHeap (HeapHandle=0x470000, Flags=0x0, Size=0x8) returned 0x4c4ed0 [0167.650] RtlAllocateHeap (HeapHandle=0x470000, Flags=0x0, Size=0x8) returned 0x4c4ee0 [0167.650] RtlAllocateHeap (HeapHandle=0x470000, Flags=0x0, Size=0x128) returned 0x4de5a8 [0167.650] RtlAllocateHeap (HeapHandle=0x470000, Flags=0x0, Size=0x11c) returned 0x4de6d8 [0167.650] RtlAllocateHeap (HeapHandle=0x470000, Flags=0x0, Size=0x108) returned 0x4de800 [0167.650] RtlAllocateHeap (HeapHandle=0x470000, Flags=0x0, Size=0x130) returned 0x4de910 [0167.651] RtlAllocateHeap (HeapHandle=0x470000, Flags=0x0, Size=0x110) returned 0x4d2bf0 [0167.651] RtlAllocateHeap (HeapHandle=0x470000, Flags=0x0, Size=0x278) returned 0x4dea48 [0167.651] RtlAllocateHeap (HeapHandle=0x470000, Flags=0x0, Size=0xc8) returned 0x4da8d8 [0167.651] RtlAllocateHeap (HeapHandle=0x470000, Flags=0x0, Size=0x190) returned 0x4decc8 [0167.651] RtlAllocateHeap (HeapHandle=0x470000, Flags=0x0, Size=0x78) returned 0x482770 [0167.651] RtlAllocateHeap (HeapHandle=0x470000, Flags=0x0, Size=0xf0) returned 0x4dee60 [0167.651] RtlAllocateHeap (HeapHandle=0x470000, Flags=0x0, Size=0x4c) returned 0x4bf178 [0167.651] RtlAllocateHeap (HeapHandle=0x470000, Flags=0x0, Size=0x194) returned 0x4def58 [0167.651] RtlAllocateHeap (HeapHandle=0x470000, Flags=0x0, Size=0xc8) returned 0x4b5098 [0167.651] RtlAllocateHeap (HeapHandle=0x470000, Flags=0x0, Size=0x190) returned 0x4df0f8 [0167.651] RtlAllocateHeap (HeapHandle=0x470000, Flags=0x0, Size=0x108) returned 0x4df290 [0167.651] LsSetModWidthPairs () returned 0x0 [0167.651] RtlAllocateHeap (HeapHandle=0x470000, Flags=0x0, Size=0x240) returned 0x4df3a0 [0167.651] RtlAllocateHeap (HeapHandle=0x470000, Flags=0x0, Size=0x18) returned 0x4dcc00 [0167.651] RtlAllocateHeap (HeapHandle=0x470000, Flags=0x0, Size=0x20) returned 0x4b6808 [0167.657] LsSetBreaking () returned 0x0 [0167.657] RtlAllocateHeap (HeapHandle=0x470000, Flags=0x0, Size=0x271) returned 0x4dfa60 [0167.657] RtlAllocateHeap (HeapHandle=0x470000, Flags=0x0, Size=0xa) returned 0x4bd688 [0167.657] LsSetDoc () returned 0x0 [0167.657] LsCreateLine () returned 0x0 [0167.657] HeapFree (in: hHeap=0x470000, dwFlags=0x0, lpMem=0x0 | out: hHeap=0x470000) returned 1 [0167.657] RtlAllocateHeap (HeapHandle=0x470000, Flags=0x8, Size=0xb4) returned 0x4bdd48 [0167.657] RtlAllocateHeap (HeapHandle=0x470000, Flags=0x0, Size=0x18) returned 0x4dcc20 [0167.657] RtlAllocateHeap (HeapHandle=0x470000, Flags=0x0, Size=0x10) returned 0x4bd670 [0167.658] RtlAllocateHeap (HeapHandle=0x470000, Flags=0x8, Size=0x34) returned 0x4afbe0 [0167.658] LsGetRubyLsimethods () returned 0x0 [0167.658] LsGetTatenakayokoLsimethods () returned 0x0 [0167.658] LsGetHihLsimethods () returned 0x0 [0167.658] LsGetWarichuLsimethods () returned 0x0 [0167.658] LsGetReverseLsimethods () returned 0x0 [0167.658] LsCreateContext () returned 0x0 [0167.658] RtlAllocateHeap (HeapHandle=0x470000, Flags=0x0, Size=0x670) returned 0x4dff38 [0167.659] RtlAllocateHeap (HeapHandle=0x470000, Flags=0x0, Size=0x24) returned 0x4c0088 [0167.659] RtlAllocateHeap (HeapHandle=0x470000, Flags=0x0, Size=0x110) returned 0x4d2d08 [0167.659] RtlAllocateHeap (HeapHandle=0x470000, Flags=0x0, Size=0x24) returned 0x4c00b8 [0167.659] RtlAllocateHeap (HeapHandle=0x470000, Flags=0x0, Size=0x2e4) returned 0x4e05b0 [0167.659] RtlAllocateHeap (HeapHandle=0x470000, Flags=0x0, Size=0x20) returned 0x4b6830 [0167.659] RtlAllocateHeap (HeapHandle=0x470000, Flags=0x0, Size=0x20) returned 0x4b6858 [0167.659] RtlAllocateHeap (HeapHandle=0x470000, Flags=0x0, Size=0xa0) returned 0x4e08a0 [0167.659] RtlAllocateHeap (HeapHandle=0x470000, Flags=0x0, Size=0x40) returned 0x4c89f8 [0167.659] RtlAllocateHeap (HeapHandle=0x470000, Flags=0x0, Size=0x20) returned 0x4b6880 [0167.659] RtlAllocateHeap (HeapHandle=0x470000, Flags=0x0, Size=0x20) returned 0x4b68a8 [0167.659] RtlAllocateHeap (HeapHandle=0x470000, Flags=0x0, Size=0x20) returned 0x4b68d0 [0167.659] RtlAllocateHeap (HeapHandle=0x470000, Flags=0x0, Size=0x20) returned 0x4b68f8 [0167.659] RtlAllocateHeap (HeapHandle=0x470000, Flags=0x0, Size=0x400) returned 0x4e0948 [0167.659] RtlAllocateHeap (HeapHandle=0x470000, Flags=0x0, Size=0x8) returned 0x4c4ef0 [0167.659] RtlAllocateHeap (HeapHandle=0x470000, Flags=0x0, Size=0x8) returned 0x49bac8 [0167.659] RtlAllocateHeap (HeapHandle=0x470000, Flags=0x0, Size=0x8) returned 0x4e0d68 [0167.660] RtlAllocateHeap (HeapHandle=0x470000, Flags=0x0, Size=0x8) returned 0x4e0d78 [0167.660] RtlAllocateHeap (HeapHandle=0x470000, Flags=0x0, Size=0x128) returned 0x4e1150 [0167.660] RtlAllocateHeap (HeapHandle=0x470000, Flags=0x0, Size=0x11c) returned 0x4e1280 [0167.660] RtlAllocateHeap (HeapHandle=0x470000, Flags=0x0, Size=0x108) returned 0x4e13a8 [0167.660] RtlAllocateHeap (HeapHandle=0x470000, Flags=0x0, Size=0x130) returned 0x4e14b8 [0167.660] RtlAllocateHeap (HeapHandle=0x470000, Flags=0x0, Size=0x110) returned 0x4d2e20 [0167.660] RtlAllocateHeap (HeapHandle=0x470000, Flags=0x0, Size=0x278) returned 0x4e15f0 [0167.660] RtlAllocateHeap (HeapHandle=0x470000, Flags=0x0, Size=0xc8) returned 0x4e1870 [0167.660] RtlAllocateHeap (HeapHandle=0x470000, Flags=0x0, Size=0x190) returned 0x4e1940 [0167.660] RtlAllocateHeap (HeapHandle=0x470000, Flags=0x0, Size=0x78) returned 0x482870 [0167.660] RtlAllocateHeap (HeapHandle=0x470000, Flags=0x0, Size=0xf0) returned 0x4e1ad8 [0167.660] RtlAllocateHeap (HeapHandle=0x470000, Flags=0x0, Size=0x4c) returned 0x4bf1d0 [0167.660] RtlAllocateHeap (HeapHandle=0x470000, Flags=0x0, Size=0x194) returned 0x4e1bd0 [0167.660] RtlAllocateHeap (HeapHandle=0x470000, Flags=0x0, Size=0xc8) returned 0x4e1d70 [0167.660] RtlAllocateHeap (HeapHandle=0x470000, Flags=0x0, Size=0x190) returned 0x4e1e40 [0167.660] RtlAllocateHeap (HeapHandle=0x470000, Flags=0x0, Size=0x108) returned 0x4e1fd8 [0167.661] LsSetModWidthPairs () returned 0x0 [0167.661] RtlAllocateHeap (HeapHandle=0x470000, Flags=0x0, Size=0x240) returned 0x4e20e8 [0167.661] RtlAllocateHeap (HeapHandle=0x470000, Flags=0x0, Size=0x18) returned 0x4dcc40 [0167.661] LsSetBreaking () returned 0x0 [0167.661] RtlAllocateHeap (HeapHandle=0x470000, Flags=0x0, Size=0x271) returned 0x4e28a0 [0167.661] RtlAllocateHeap (HeapHandle=0x470000, Flags=0x0, Size=0xa) returned 0x4bd6b8 [0167.661] LsSetDoc () returned 0x0 [0167.661] LsCreateLine () returned 0x0 [0167.661] HeapFree (in: hHeap=0x470000, dwFlags=0x0, lpMem=0x0 | out: hHeap=0x470000) returned 1 [0167.661] RtlAllocateHeap (HeapHandle=0x470000, Flags=0x8, Size=0xb4) returned 0x4e2b20 [0167.661] EnumFontsW (hdc=0x13010a0a, lpLogfont="Lucida Sans Unicode", lpProc=0x6fb80b47, lParam=0x26d6ec) returned 1 [0167.661] CreateFontIndirectW (lplf=0x26d688) returned 0x610a086b [0167.662] SelectObject (hdc=0x13010a0a, h=0x610a086b) returned 0x18a002e [0167.662] GetTextMetricsW (in: hdc=0x13010a0a, lptm=0x26d5f0 | out: lptm=0x26d5f0) returned 1 [0167.665] GetOutlineTextMetricsW (in: hdc=0x13010a0a, cjCopy=0xd8, potm=0x26d4f0 | out: potm=0x26d4f0) returned 0xd8 [0167.665] SelectObject (hdc=0x13010a0a, h=0x18a002e) returned 0x610a086b [0167.665] SelectObject (hdc=0x13010a0a, h=0x610a086b) returned 0x18a002e [0167.665] GetTextFaceW (in: hdc=0x13010a0a, c=32, lpName=0x26d740 | out: lpName="Lucida Sans Unicode") returned 20 [0167.665] SelectObject (hdc=0x13010a0a, h=0x18a002e) returned 0x610a086b [0167.665] SelectObject (hdc=0x13010a0a, h=0x610a086b) returned 0x18a002e [0167.665] GetTextCharsetInfo (in: hdc=0x13010a0a, lpSig=0x26d6a8, dwFlags=0x0 | out: lpSig=0x26d6a8) returned 0 [0167.665] SelectObject (hdc=0x13010a0a, h=0x18a002e) returned 0x610a086b [0167.666] RtlAllocateHeap (HeapHandle=0x470000, Flags=0x8, Size=0xc) returned 0x4bd6a0 [0167.666] SelectObject (hdc=0x13010a0a, h=0x610a086b) returned 0x18a002e [0167.666] GetFontUnicodeRanges (in: hdc=0x13010a0a, lpgs=0x0 | out: lpgs=0x0) returned 0x120 [0167.666] HeapFree (in: hHeap=0x470000, dwFlags=0x0, lpMem=0x0 | out: hHeap=0x470000) returned 1 [0167.666] RtlAllocateHeap (HeapHandle=0x470000, Flags=0x0, Size=0x120) returned 0x4e3118 [0167.666] GetFontUnicodeRanges (in: hdc=0x13010a0a, lpgs=0x4e3118 | out: lpgs=0x4e3118) returned 0x120 [0167.666] SelectObject (hdc=0x13010a0a, h=0x18a002e) returned 0x610a086b [0167.666] SelectObject (hdc=0x13010a0a, h=0x610a086b) returned 0x18a002e [0167.666] GetCharWidth32W (in: hdc=0x13010a0a, iFirst=0x20, iLast=0x7e, lpBuffer=0x26d680 | out: lpBuffer=0x26d680) returned 1 [0167.668] RtlAllocateHeap (HeapHandle=0x470000, Flags=0x8, Size=0x17c) returned 0x4e3240 [0167.668] RtlAllocateHeap (HeapHandle=0x470000, Flags=0x8, Size=0x800) returned 0x4e33c8 [0167.668] SelectObject (hdc=0x13010a0a, h=0x18a002e) returned 0x610a086b [0167.668] RtlAllocateHeap (HeapHandle=0x470000, Flags=0x8, Size=0xb4) returned 0x4e3bd0 [0167.668] SelectObject (hdc=0x13010a0a, h=0x610a086b) returned 0x18a002e [0167.668] GetCharWidthW (in: hdc=0x13010a0a, iFirst=0x2052, iLast=0x2052, lpBuffer=0x26d8ec | out: lpBuffer=0x26d8ec) returned 1 [0167.686] SelectObject (hdc=0x13010a0a, h=0x18a002e) returned 0x610a086b [0167.686] LsQueryLineDup () returned 0x0 [0167.686] LsDestroyLine () returned 0x0 [0167.686] HeapFree (in: hHeap=0x470000, dwFlags=0x0, lpMem=0x0 | out: hHeap=0x470000) returned 1 [0167.686] RtlReAllocateHeap (Heap=0x470000, Flags=0x0, Ptr=0x4c00e8, Size=0x90) returned 0x4e3d50 [0167.687] LsSetDoc () returned 0x0 [0167.687] LsCreateLine () returned 0x0 [0167.687] HeapFree (in: hHeap=0x470000, dwFlags=0x0, lpMem=0x0 | out: hHeap=0x470000) returned 1 [0167.687] CreateFontIndirectW (lplf=0x26d688) returned 0x540a084d [0167.687] SelectObject (hdc=0x13010a0a, h=0x540a084d) returned 0x18a002e [0167.687] GetTextMetricsW (in: hdc=0x13010a0a, lptm=0x26d5f0 | out: lptm=0x26d5f0) returned 1 [0167.687] GetOutlineTextMetricsW (in: hdc=0x13010a0a, cjCopy=0xd8, potm=0x26d4f0 | out: potm=0x26d4f0) returned 0xd8 [0167.687] SelectObject (hdc=0x13010a0a, h=0x18a002e) returned 0x540a084d [0167.687] SelectObject (hdc=0x13010a0a, h=0x540a084d) returned 0x18a002e [0167.687] GetTextFaceW (in: hdc=0x13010a0a, c=32, lpName=0x26d740 | out: lpName="Lucida Sans Unicode") returned 20 [0167.687] SelectObject (hdc=0x13010a0a, h=0x18a002e) returned 0x540a084d [0167.688] RtlAllocateHeap (HeapHandle=0x470000, Flags=0x8, Size=0xc) returned 0x4bd658 [0167.688] SelectObject (hdc=0x13010a0a, h=0x540a084d) returned 0x18a002e [0167.688] GetFontUnicodeRanges (in: hdc=0x13010a0a, lpgs=0x0 | out: lpgs=0x0) returned 0x120 [0167.688] HeapFree (in: hHeap=0x470000, dwFlags=0x0, lpMem=0x0 | out: hHeap=0x470000) returned 1 [0167.688] RtlAllocateHeap (HeapHandle=0x470000, Flags=0x0, Size=0x120) returned 0x4e41a0 [0167.688] GetFontUnicodeRanges (in: hdc=0x13010a0a, lpgs=0x4e41a0 | out: lpgs=0x4e41a0) returned 0x120 [0167.688] SelectObject (hdc=0x13010a0a, h=0x18a002e) returned 0x540a084d [0167.688] SelectObject (hdc=0x13010a0a, h=0x540a084d) returned 0x18a002e [0167.688] GetCharWidth32W (in: hdc=0x13010a0a, iFirst=0x20, iLast=0x7e, lpBuffer=0x26d680 | out: lpBuffer=0x26d680) returned 1 [0167.690] RtlAllocateHeap (HeapHandle=0x470000, Flags=0x8, Size=0x17c) returned 0x4e42c8 [0167.690] RtlAllocateHeap (HeapHandle=0x470000, Flags=0x8, Size=0x800) returned 0x4e4450 [0167.690] SelectObject (hdc=0x13010a0a, h=0x18a002e) returned 0x540a084d [0167.690] CreateFontIndirectW (lplf=0x26d668) returned 0x4c0a025b [0167.690] SelectObject (hdc=0x13010a0a, h=0x4c0a025b) returned 0x18a002e [0167.690] GetTextMetricsW (in: hdc=0x13010a0a, lptm=0x26d5d0 | out: lptm=0x26d5d0) returned 1 [0167.690] GetOutlineTextMetricsW (in: hdc=0x13010a0a, cjCopy=0xd8, potm=0x26d4d0 | out: potm=0x26d4d0) returned 0xd8 [0167.691] SelectObject (hdc=0x13010a0a, h=0x18a002e) returned 0x4c0a025b [0167.691] SelectObject (hdc=0x13010a0a, h=0x4c0a025b) returned 0x18a002e [0167.691] GetTextFaceW (in: hdc=0x13010a0a, c=32, lpName=0x26d720 | out: lpName="Lucida Sans Unicode") returned 20 [0167.691] SelectObject (hdc=0x13010a0a, h=0x18a002e) returned 0x4c0a025b [0167.691] RtlAllocateHeap (HeapHandle=0x470000, Flags=0x8, Size=0xc) returned 0x4bd6d0 [0167.691] SelectObject (hdc=0x13010a0a, h=0x4c0a025b) returned 0x18a002e [0167.691] GetFontUnicodeRanges (in: hdc=0x13010a0a, lpgs=0x0 | out: lpgs=0x0) returned 0x120 [0167.691] HeapFree (in: hHeap=0x470000, dwFlags=0x0, lpMem=0x0 | out: hHeap=0x470000) returned 1 [0167.691] RtlAllocateHeap (HeapHandle=0x470000, Flags=0x0, Size=0x120) returned 0x4e5010 [0167.691] GetFontUnicodeRanges (in: hdc=0x13010a0a, lpgs=0x4e5010 | out: lpgs=0x4e5010) returned 0x120 [0167.691] SelectObject (hdc=0x13010a0a, h=0x18a002e) returned 0x4c0a025b [0167.691] SelectObject (hdc=0x13010a0a, h=0x4c0a025b) returned 0x18a002e [0167.691] GetCharWidth32W (in: hdc=0x13010a0a, iFirst=0x20, iLast=0x7e, lpBuffer=0x26d660 | out: lpBuffer=0x26d660) returned 1 [0167.692] SelectObject (hdc=0x13010a0a, h=0x18a002e) returned 0x4c0a025b [0167.692] RtlReAllocateHeap (Heap=0x470000, Flags=0x0, Ptr=0x4a3790, Size=0xc0) returned 0x4e5ac8 [0167.692] RtlAllocateHeap (HeapHandle=0x470000, Flags=0x0, Size=0xec) returned 0x4e5b90 [0167.692] HeapFree (in: hHeap=0x470000, dwFlags=0x0, lpMem=0x0 | out: hHeap=0x470000) returned 1 [0167.692] HeapFree (in: hHeap=0x470000, dwFlags=0x0, lpMem=0x0 | out: hHeap=0x470000) returned 1 [0167.692] RtlAllocateHeap (HeapHandle=0x470000, Flags=0x8, Size=0xb4) returned 0x4e5c88 [0167.692] LsQueryLineDup () returned 0x0 [0167.692] LsDestroyLine () returned 0x0 [0167.692] HeapFree (in: hHeap=0x470000, dwFlags=0x0, lpMem=0x0 | out: hHeap=0x470000) returned 1 [0167.692] RtlAllocateHeap (HeapHandle=0x470000, Flags=0x0, Size=0x40) returned 0x4c8a88 [0167.693] LsSetDoc () returned 0x0 [0167.693] LsCreateLine () returned 0x0 [0167.693] HeapFree (in: hHeap=0x470000, dwFlags=0x0, lpMem=0x0 | out: hHeap=0x470000) returned 1 [0168.877] RtlAllocateHeap (HeapHandle=0x470000, Flags=0x0, Size=0x48) returned 0x4c91a0 [0168.877] HeapFree (in: hHeap=0x470000, dwFlags=0x0, lpMem=0x4c91a0 | out: hHeap=0x470000) returned 1 [0168.878] HeapFree (in: hHeap=0x470000, dwFlags=0x0, lpMem=0x0 | out: hHeap=0x470000) returned 1 [0168.878] EnumFontsW (hdc=0x13010a0a, lpLogfont="Segoe UI Symbol", lpProc=0x6fb80b47, lParam=0x26d6e4) returned 1 [0168.878] CreateFontIndirectW (lplf=0x26d680) returned 0x70a0277 [0168.878] SelectObject (hdc=0x13010a0a, h=0x70a0277) returned 0x18a002e [0168.878] GetTextMetricsW (in: hdc=0x13010a0a, lptm=0x26d5e8 | out: lptm=0x26d5e8) returned 1 [0168.880] GetOutlineTextMetricsW (in: hdc=0x13010a0a, cjCopy=0xd8, potm=0x26d4e8 | out: potm=0x26d4e8) returned 0xd8 [0168.880] SelectObject (hdc=0x13010a0a, h=0x18a002e) returned 0x70a0277 [0168.880] SelectObject (hdc=0x13010a0a, h=0x70a0277) returned 0x18a002e [0168.880] GetTextFaceW (in: hdc=0x13010a0a, c=32, lpName=0x26d738 | out: lpName="Segoe UI Symbol") returned 16 [0168.880] SelectObject (hdc=0x13010a0a, h=0x18a002e) returned 0x70a0277 [0168.880] SelectObject (hdc=0x13010a0a, h=0x70a0277) returned 0x18a002e [0168.880] GetTextCharsetInfo (in: hdc=0x13010a0a, lpSig=0x26d6a0, dwFlags=0x0 | out: lpSig=0x26d6a0) returned 0 [0168.880] SelectObject (hdc=0x13010a0a, h=0x18a002e) returned 0x70a0277 [0168.880] RtlAllocateHeap (HeapHandle=0x470000, Flags=0x8, Size=0xc) returned 0x4ef478 [0168.880] SelectObject (hdc=0x13010a0a, h=0x70a0277) returned 0x18a002e [0168.880] GetFontUnicodeRanges (in: hdc=0x13010a0a, lpgs=0x0 | out: lpgs=0x0) returned 0xd8 [0168.880] HeapFree (in: hHeap=0x470000, dwFlags=0x0, lpMem=0x0 | out: hHeap=0x470000) returned 1 [0168.880] RtlAllocateHeap (HeapHandle=0x470000, Flags=0x0, Size=0xd8) returned 0x388ae88 [0168.880] GetFontUnicodeRanges (in: hdc=0x13010a0a, lpgs=0x388ae88 | out: lpgs=0x388ae88) returned 0xd8 [0168.880] SelectObject (hdc=0x13010a0a, h=0x18a002e) returned 0x70a0277 [0168.880] SelectObject (hdc=0x13010a0a, h=0x70a0277) returned 0x18a002e [0168.880] GetCharWidth32W (in: hdc=0x13010a0a, iFirst=0x20, iLast=0x7e, lpBuffer=0x26d678 | out: lpBuffer=0x26d678) returned 1 [0168.880] SelectObject (hdc=0x13010a0a, h=0x18a002e) returned 0x70a0277 [0168.882] SelectObject (hdc=0x13010a0a, h=0x70a0277) returned 0x18a002e [0168.882] GetCharWidthW (in: hdc=0x13010a0a, iFirst=0x2800, iLast=0x2800, lpBuffer=0x26d6c4 | out: lpBuffer=0x26d6c4) returned 1 [0168.882] SelectObject (hdc=0x13010a0a, h=0x18a002e) returned 0x70a0277 [0168.882] LsQueryLineDup () returned 0x0 [0168.882] LsDestroyLine () returned 0x0 [0168.882] HeapFree (in: hHeap=0x470000, dwFlags=0x0, lpMem=0x0 | out: hHeap=0x470000) returned 1 [0168.882] LsSetDoc () returned 0x0 [0168.882] LsCreateLine () returned 0x0 [0168.882] HeapFree (in: hHeap=0x470000, dwFlags=0x0, lpMem=0x0 | out: hHeap=0x470000) returned 1 [0168.883] LsQueryLineDup () returned 0x0 [0168.883] LsDestroyLine () returned 0x0 [0168.883] HeapFree (in: hHeap=0x470000, dwFlags=0x0, lpMem=0x0 | out: hHeap=0x470000) returned 1 [0168.883] RtlReAllocateHeap (Heap=0x470000, Flags=0x0, Ptr=0x4e3d50, Size=0xd8) returned 0x4e67e8 [0168.883] LsSetDoc () returned 0x0 [0168.883] LsCreateLine () returned 0x0 [0168.883] HeapFree (in: hHeap=0x470000, dwFlags=0x0, lpMem=0x0 | out: hHeap=0x470000) returned 1 [0168.883] LsQueryLineDup () returned 0x0 [0168.883] LsDestroyLine () returned 0x0 [0168.883] HeapFree (in: hHeap=0x470000, dwFlags=0x0, lpMem=0x0 | out: hHeap=0x470000) returned 1 [0168.884] LsSetDoc () returned 0x0 [0168.884] LsCreateLine () returned 0x0 [0168.884] HeapFree (in: hHeap=0x470000, dwFlags=0x0, lpMem=0x0 | out: hHeap=0x470000) returned 1 [0168.884] RtlReAllocateHeap (Heap=0x470000, Flags=0x0, Ptr=0x4e1870, Size=0x12c) returned 0x4e68c8 [0168.884] RtlReAllocateHeap (Heap=0x470000, Flags=0x0, Ptr=0x4e1d70, Size=0x12c) returned 0x4e6a00 [0168.884] RtlReAllocateHeap (Heap=0x470000, Flags=0x0, Ptr=0x4e1940, Size=0x258) returned 0x4e6b38 [0168.884] RtlReAllocateHeap (Heap=0x470000, Flags=0x0, Ptr=0x4e1e40, Size=0x258) returned 0x4e1870 [0168.884] LsQueryLineDup () returned 0x0 [0168.884] LsDestroyLine () returned 0x0 [0168.884] HeapFree (in: hHeap=0x470000, dwFlags=0x0, lpMem=0x0 | out: hHeap=0x470000) returned 1 [0168.884] GetSysColor (nIndex=5) returned 0xffffff [0168.885] RtlAllocateHeap (HeapHandle=0x470000, Flags=0x0, Size=0x64) returned 0x4db150 [0168.885] RtlAllocateHeap (HeapHandle=0x470000, Flags=0x0, Size=0xec) returned 0x4e1d70 [0168.885] HeapFree (in: hHeap=0x470000, dwFlags=0x0, lpMem=0x0 | out: hHeap=0x470000) returned 1 [0168.885] HeapFree (in: hHeap=0x470000, dwFlags=0x0, lpMem=0x0 | out: hHeap=0x470000) returned 1 [0168.885] RtlReAllocateHeap (Heap=0x470000, Flags=0x0, Ptr=0x4e67e8, Size=0x144) returned 0x4e1e68 [0168.885] LsSetDoc () returned 0x0 [0168.885] LsCreateLine () returned 0x0 [0168.885] HeapFree (in: hHeap=0x470000, dwFlags=0x0, lpMem=0x0 | out: hHeap=0x470000) returned 1 [0168.885] RtlAllocateHeap (HeapHandle=0x470000, Flags=0x0, Size=0x18) returned 0x4dcc60 [0168.886] RtlAllocateHeap (HeapHandle=0x470000, Flags=0x8, Size=0x34) returned 0x4afc20 [0168.887] LsGetRubyLsimethods () returned 0x0 [0168.887] LsGetTatenakayokoLsimethods () returned 0x0 [0168.887] LsGetHihLsimethods () returned 0x0 [0168.887] LsGetWarichuLsimethods () returned 0x0 [0168.887] LsGetReverseLsimethods () returned 0x0 [0168.887] LsCreateContext () returned 0x0 [0168.887] RtlAllocateHeap (HeapHandle=0x470000, Flags=0x0, Size=0x670) returned 0x4e70f8 [0168.887] RtlAllocateHeap (HeapHandle=0x470000, Flags=0x0, Size=0x24) returned 0x4e7788 [0168.887] RtlAllocateHeap (HeapHandle=0x470000, Flags=0x0, Size=0x110) returned 0x4d2f38 [0168.887] RtlAllocateHeap (HeapHandle=0x470000, Flags=0x0, Size=0x24) returned 0x4e77b8 [0168.887] RtlAllocateHeap (HeapHandle=0x470000, Flags=0x0, Size=0x2e4) returned 0x4e7f70 [0168.887] RtlAllocateHeap (HeapHandle=0x470000, Flags=0x0, Size=0x20) returned 0x4b6920 [0168.887] RtlAllocateHeap (HeapHandle=0x470000, Flags=0x0, Size=0x20) returned 0x4b6948 [0168.887] RtlAllocateHeap (HeapHandle=0x470000, Flags=0x0, Size=0xa0) returned 0x4e67e8 [0168.887] RtlAllocateHeap (HeapHandle=0x470000, Flags=0x0, Size=0x40) returned 0x4c8b60 [0168.887] RtlAllocateHeap (HeapHandle=0x470000, Flags=0x0, Size=0x20) returned 0x4e8278 [0168.887] RtlAllocateHeap (HeapHandle=0x470000, Flags=0x0, Size=0x20) returned 0x4e82a0 [0168.887] RtlAllocateHeap (HeapHandle=0x470000, Flags=0x0, Size=0x20) returned 0x4e82c8 [0168.887] RtlAllocateHeap (HeapHandle=0x470000, Flags=0x0, Size=0x20) returned 0x4e82f0 [0168.887] RtlAllocateHeap (HeapHandle=0x470000, Flags=0x0, Size=0x400) returned 0x4e8a60 [0168.887] RtlAllocateHeap (HeapHandle=0x470000, Flags=0x0, Size=0x8) returned 0x4e0d88 [0168.887] RtlAllocateHeap (HeapHandle=0x470000, Flags=0x0, Size=0x8) returned 0x4e0d98 [0168.887] RtlAllocateHeap (HeapHandle=0x470000, Flags=0x0, Size=0x8) returned 0x4e0da8 [0168.887] RtlAllocateHeap (HeapHandle=0x470000, Flags=0x0, Size=0x8) returned 0x4e0db8 [0168.888] RtlAllocateHeap (HeapHandle=0x470000, Flags=0x0, Size=0x128) returned 0x4e8e68 [0168.888] RtlAllocateHeap (HeapHandle=0x470000, Flags=0x0, Size=0x11c) returned 0x4e8f98 [0168.888] RtlAllocateHeap (HeapHandle=0x470000, Flags=0x0, Size=0x108) returned 0x4e90c0 [0168.888] RtlAllocateHeap (HeapHandle=0x470000, Flags=0x0, Size=0x130) returned 0x4e91d0 [0168.888] RtlAllocateHeap (HeapHandle=0x470000, Flags=0x0, Size=0x110) returned 0x4d3050 [0168.888] RtlAllocateHeap (HeapHandle=0x470000, Flags=0x0, Size=0x278) returned 0x4e9308 [0168.888] RtlAllocateHeap (HeapHandle=0x470000, Flags=0x0, Size=0xc8) returned 0x4e9588 [0168.888] RtlAllocateHeap (HeapHandle=0x470000, Flags=0x0, Size=0x190) returned 0x4e9658 [0168.888] RtlAllocateHeap (HeapHandle=0x470000, Flags=0x0, Size=0x78) returned 0x4828f0 [0168.888] RtlAllocateHeap (HeapHandle=0x470000, Flags=0x0, Size=0xf0) returned 0x4e97f0 [0168.888] RtlAllocateHeap (HeapHandle=0x470000, Flags=0x0, Size=0x4c) returned 0x4bf228 [0168.888] RtlAllocateHeap (HeapHandle=0x470000, Flags=0x0, Size=0x194) returned 0x4e98e8 [0168.888] RtlAllocateHeap (HeapHandle=0x470000, Flags=0x0, Size=0xc8) returned 0x4e9a88 [0168.888] RtlAllocateHeap (HeapHandle=0x470000, Flags=0x0, Size=0x190) returned 0x4e9b58 [0168.888] RtlAllocateHeap (HeapHandle=0x470000, Flags=0x0, Size=0x108) returned 0x4e9cf0 [0168.888] LsSetModWidthPairs () returned 0x0 [0168.888] RtlAllocateHeap (HeapHandle=0x470000, Flags=0x0, Size=0x240) returned 0x4e9e00 [0168.888] RtlAllocateHeap (HeapHandle=0x470000, Flags=0x0, Size=0x18) returned 0x4dcc80 [0168.888] LsSetBreaking () returned 0x0 [0168.888] RtlAllocateHeap (HeapHandle=0x470000, Flags=0x0, Size=0x271) returned 0x4ea4c0 [0168.889] RtlAllocateHeap (HeapHandle=0x470000, Flags=0x0, Size=0xa) returned 0x4ef490 [0168.889] LsSetDoc () returned 0x0 [0168.889] LsCreateLine () returned 0x0 [0168.889] HeapFree (in: hHeap=0x470000, dwFlags=0x0, lpMem=0x0 | out: hHeap=0x470000) returned 1 [0168.889] RtlAllocateHeap (HeapHandle=0x470000, Flags=0x8, Size=0xb4) returned 0x4ea740 [0168.889] RtlAllocateHeap (HeapHandle=0x470000, Flags=0x8, Size=0xb4) returned 0x4ea800 [0168.889] LsQueryLineDup () returned 0x0 [0168.889] LsDestroyLine () returned 0x0 [0168.889] HeapFree (in: hHeap=0x470000, dwFlags=0x0, lpMem=0x0 | out: hHeap=0x470000) returned 1 [0168.889] RtlAllocateHeap (HeapHandle=0x470000, Flags=0x0, Size=0x40) returned 0x4c8ba8 [0168.890] HeapFree (in: hHeap=0x470000, dwFlags=0x0, lpMem=0x4ea048 | out: hHeap=0x470000) returned 1 [0168.890] HeapFree (in: hHeap=0x470000, dwFlags=0x0, lpMem=0x0 | out: hHeap=0x470000) returned 1 [0168.890] HeapFree (in: hHeap=0x470000, dwFlags=0x0, lpMem=0x0 | out: hHeap=0x470000) returned 1 [0168.890] HeapFree (in: hHeap=0x470000, dwFlags=0x0, lpMem=0x0 | out: hHeap=0x470000) returned 1 [0168.890] HeapFree (in: hHeap=0x470000, dwFlags=0x0, lpMem=0x0 | out: hHeap=0x470000) returned 1 [0168.890] HeapFree (in: hHeap=0x470000, dwFlags=0x0, lpMem=0x0 | out: hHeap=0x470000) returned 1 [0168.890] HeapFree (in: hHeap=0x470000, dwFlags=0x0, lpMem=0x0 | out: hHeap=0x470000) returned 1 [0168.890] HeapFree (in: hHeap=0x470000, dwFlags=0x0, lpMem=0x0 | out: hHeap=0x470000) returned 1 [0168.890] RtlAllocateHeap (HeapHandle=0x470000, Flags=0x8, Size=0x50) returned 0x4bf280 [0168.890] LsdnFinishRegular () returned 0x0 [0168.890] LsQueryLineDup () returned 0x0 [0168.890] LsQueryLineCpPpoint () returned 0x0 [0168.891] RtlAllocateHeap (HeapHandle=0x470000, Flags=0x8, Size=0x50) returned 0x4bf2d8 [0168.891] LsDestroyLine () returned 0x0 [0168.891] HeapFree (in: hHeap=0x470000, dwFlags=0x0, lpMem=0x4dcc60 | out: hHeap=0x470000) returned 1 [0168.891] HeapFree (in: hHeap=0x470000, dwFlags=0x0, lpMem=0x0 | out: hHeap=0x470000) returned 1 [0168.891] RtlAllocateHeap (HeapHandle=0x470000, Flags=0x0, Size=0x40) returned 0x4ea998 [0168.891] LsSetDoc () returned 0x0 [0168.891] LsCreateLine () returned 0x0 [0168.891] HeapFree (in: hHeap=0x470000, dwFlags=0x0, lpMem=0x0 | out: hHeap=0x470000) returned 1 [0168.891] LsQueryLineDup () returned 0x0 [0168.891] LsDestroyLine () returned 0x0 [0168.891] HeapFree (in: hHeap=0x470000, dwFlags=0x0, lpMem=0x0 | out: hHeap=0x470000) returned 1 [0168.892] LsSetDoc () returned 0x0 [0168.892] LsCreateLine () returned 0x0 [0168.892] HeapFree (in: hHeap=0x470000, dwFlags=0x0, lpMem=0x0 | out: hHeap=0x470000) returned 1 [0168.892] RtlAllocateHeap (HeapHandle=0x470000, Flags=0x0, Size=0x18) returned 0x4dcc60 [0168.892] HeapFree (in: hHeap=0x470000, dwFlags=0x0, lpMem=0x0 | out: hHeap=0x470000) returned 1 [0168.892] RtlAllocateHeap (HeapHandle=0x470000, Flags=0x0, Size=0x10) returned 0x4ef4a8 [0168.892] LsdnFinishRegular () returned 0x0 [0168.892] LsQueryLineDup () returned 0x0 [0168.893] HeapFree (in: hHeap=0x470000, dwFlags=0x0, lpMem=0x0 | out: hHeap=0x470000) returned 1 [0168.893] RtlAllocateHeap (HeapHandle=0x470000, Flags=0x0, Size=0x10) returned 0x4ef4a8 [0168.893] LsDestroyLine () returned 0x0 [0168.893] HeapFree (in: hHeap=0x470000, dwFlags=0x0, lpMem=0x4dcc60 | out: hHeap=0x470000) returned 1 [0168.893] HeapFree (in: hHeap=0x470000, dwFlags=0x0, lpMem=0x0 | out: hHeap=0x470000) returned 1 [0168.893] RtlReAllocateHeap (Heap=0x470000, Flags=0x0, Ptr=0x4e1e68, Size=0x1d4) returned 0x4ea140 [0168.893] LsSetDoc () returned 0x0 [0168.893] LsCreateLine () returned 0x0 [0168.893] HeapFree (in: hHeap=0x470000, dwFlags=0x0, lpMem=0x0 | out: hHeap=0x470000) returned 1 [0168.893] LsQueryLineDup () returned 0x0 [0168.893] LsDestroyLine () returned 0x0 [0168.893] HeapFree (in: hHeap=0x470000, dwFlags=0x0, lpMem=0x0 | out: hHeap=0x470000) returned 1 [0168.893] GetSysColor (nIndex=5) returned 0xffffff [0168.894] HeapFree (in: hHeap=0x470000, dwFlags=0x0, lpMem=0x0 | out: hHeap=0x470000) returned 1 [0168.894] HeapFree (in: hHeap=0x470000, dwFlags=0x0, lpMem=0x0 | out: hHeap=0x470000) returned 1 [0168.894] LsSetDoc () returned 0x0 [0168.894] LsCreateLine () returned 0x0 [0168.894] HeapFree (in: hHeap=0x470000, dwFlags=0x0, lpMem=0x0 | out: hHeap=0x470000) returned 1 [0168.894] RtlAllocateHeap (HeapHandle=0x470000, Flags=0x0, Size=0x18) returned 0x4dcc60 [0168.895] RtlAllocateHeap (HeapHandle=0x470000, Flags=0x8, Size=0x34) returned 0x4afbe0 [0168.895] LsSetDoc () returned 0x0 [0168.895] LsCreateLine () returned 0x0 [0168.895] HeapFree (in: hHeap=0x470000, dwFlags=0x0, lpMem=0x0 | out: hHeap=0x470000) returned 1 [0168.897] RtlAllocateHeap (HeapHandle=0x470000, Flags=0x0, Size=0x2e4) returned 0x4ebc68 [0168.897] RtlAllocateHeap (HeapHandle=0x470000, Flags=0x0, Size=0x194) returned 0x4ebf58 [0168.898] RtlAllocateHeap (HeapHandle=0x470000, Flags=0x0, Size=0x2e4) returned 0x4ec0f8 [0168.898] LsQueryLineDup () returned 0x0 [0168.899] LsDestroyLine () returned 0x0 [0168.899] HeapFree (in: hHeap=0x470000, dwFlags=0x0, lpMem=0x0 | out: hHeap=0x470000) returned 1 [0168.899] HeapFree (in: hHeap=0x470000, dwFlags=0x0, lpMem=0x4eb980 | out: hHeap=0x470000) returned 1 [0168.899] HeapFree (in: hHeap=0x470000, dwFlags=0x0, lpMem=0x0 | out: hHeap=0x470000) returned 1 [0168.899] HeapFree (in: hHeap=0x470000, dwFlags=0x0, lpMem=0x0 | out: hHeap=0x470000) returned 1 [0168.899] HeapFree (in: hHeap=0x470000, dwFlags=0x0, lpMem=0x0 | out: hHeap=0x470000) returned 1 [0168.899] HeapFree (in: hHeap=0x470000, dwFlags=0x0, lpMem=0x0 | out: hHeap=0x470000) returned 1 [0168.899] HeapFree (in: hHeap=0x470000, dwFlags=0x0, lpMem=0x0 | out: hHeap=0x470000) returned 1 [0168.899] HeapFree (in: hHeap=0x470000, dwFlags=0x0, lpMem=0x0 | out: hHeap=0x470000) returned 1 [0168.899] HeapFree (in: hHeap=0x470000, dwFlags=0x0, lpMem=0x0 | out: hHeap=0x470000) returned 1 [0168.899] RtlAllocateHeap (HeapHandle=0x470000, Flags=0x8, Size=0x50) returned 0x4bf330 [0168.899] LsdnFinishRegular () returned 0x0 [0168.899] LsQueryLineDup () returned 0x0 [0168.900] LsQueryLineCpPpoint () returned 0x0 [0168.900] LsDestroyLine () returned 0x0 [0168.900] HeapFree (in: hHeap=0x470000, dwFlags=0x0, lpMem=0x4dcc60 | out: hHeap=0x470000) returned 1 [0168.900] HeapFree (in: hHeap=0x470000, dwFlags=0x0, lpMem=0x0 | out: hHeap=0x470000) returned 1 [0168.900] LsSetDoc () returned 0x0 [0168.900] LsCreateLine () returned 0x0 [0168.900] HeapFree (in: hHeap=0x470000, dwFlags=0x0, lpMem=0x0 | out: hHeap=0x470000) returned 1 [0168.901] LsQueryLineDup () returned 0x0 [0168.901] LsDestroyLine () returned 0x0 [0168.901] HeapFree (in: hHeap=0x470000, dwFlags=0x0, lpMem=0x0 | out: hHeap=0x470000) returned 1 [0168.901] LsSetDoc () returned 0x0 [0168.901] LsCreateLine () returned 0x0 [0168.901] HeapFree (in: hHeap=0x470000, dwFlags=0x0, lpMem=0x0 | out: hHeap=0x470000) returned 1 [0168.902] LsQueryLineDup () returned 0x0 [0168.902] LsDestroyLine () returned 0x0 [0168.902] HeapFree (in: hHeap=0x470000, dwFlags=0x0, lpMem=0x0 | out: hHeap=0x470000) returned 1 [0168.902] RtlReAllocateHeap (Heap=0x470000, Flags=0x0, Ptr=0x4ea140, Size=0x2ac) returned 0x4eb980 [0168.902] LsSetDoc () returned 0x0 [0168.902] LsCreateLine () returned 0x0 [0168.902] HeapFree (in: hHeap=0x470000, dwFlags=0x0, lpMem=0x0 | out: hHeap=0x470000) returned 1 [0168.903] LsQueryLineDup () returned 0x0 [0168.903] LsDestroyLine () returned 0x0 [0168.903] HeapFree (in: hHeap=0x470000, dwFlags=0x0, lpMem=0x0 | out: hHeap=0x470000) returned 1 [0168.903] LsSetDoc () returned 0x0 [0168.903] LsCreateLine () returned 0x0 [0168.903] HeapFree (in: hHeap=0x470000, dwFlags=0x0, lpMem=0x0 | out: hHeap=0x470000) returned 1 [0168.903] RtlAllocateHeap (HeapHandle=0x470000, Flags=0x0, Size=0x18) returned 0x4dcc60 [0168.903] HeapFree (in: hHeap=0x470000, dwFlags=0x0, lpMem=0x0 | out: hHeap=0x470000) returned 1 [0168.904] RtlAllocateHeap (HeapHandle=0x470000, Flags=0x0, Size=0x10) returned 0x4ef4a8 [0168.904] LsdnFinishRegular () returned 0x0 [0168.904] LsQueryLineDup () returned 0x0 [0168.904] HeapFree (in: hHeap=0x470000, dwFlags=0x0, lpMem=0x0 | out: hHeap=0x470000) returned 1 [0168.904] RtlAllocateHeap (HeapHandle=0x470000, Flags=0x0, Size=0x10) returned 0x4ef4a8 [0168.904] LsDestroyLine () returned 0x0 [0168.904] HeapFree (in: hHeap=0x470000, dwFlags=0x0, lpMem=0x4dcc60 | out: hHeap=0x470000) returned 1 [0168.904] HeapFree (in: hHeap=0x470000, dwFlags=0x0, lpMem=0x0 | out: hHeap=0x470000) returned 1 [0168.904] RtlReAllocateHeap (Heap=0x470000, Flags=0x0, Ptr=0x4b4440, Size=0xc0) returned 0x4ea140 [0168.904] RtlAllocateHeap (HeapHandle=0x470000, Flags=0x0, Size=0x30) returned 0x4ec438 [0168.904] RtlReAllocateHeap (Heap=0x470000, Flags=0x0, Ptr=0x4a36b8, Size=0xc0) returned 0x4ea208 [0168.904] RtlAllocateHeap (HeapHandle=0x470000, Flags=0x0, Size=0x64) returned 0x4db230 [0168.904] HeapFree (in: hHeap=0x470000, dwFlags=0x0, lpMem=0x0 | out: hHeap=0x470000) returned 1 [0168.904] HeapFree (in: hHeap=0x470000, dwFlags=0x0, lpMem=0x0 | out: hHeap=0x470000) returned 1 [0168.905] LsSetDoc () returned 0x0 [0168.905] LsCreateLine () returned 0x0 [0168.905] HeapFree (in: hHeap=0x470000, dwFlags=0x0, lpMem=0x0 | out: hHeap=0x470000) returned 1 [0168.905] CreateFontIndirectW (lplf=0x26d688) returned 0xf0a0239 [0168.905] SelectObject (hdc=0x13010a0a, h=0xf0a0239) returned 0x18a002e [0168.905] GetTextMetricsW (in: hdc=0x13010a0a, lptm=0x26d5f0 | out: lptm=0x26d5f0) returned 1 [0168.905] GetOutlineTextMetricsW (in: hdc=0x13010a0a, cjCopy=0xd8, potm=0x26d4f0 | out: potm=0x26d4f0) returned 0xd8 [0168.905] SelectObject (hdc=0x13010a0a, h=0x18a002e) returned 0xf0a0239 [0168.905] SelectObject (hdc=0x13010a0a, h=0xf0a0239) returned 0x18a002e [0168.905] GetTextFaceW (in: hdc=0x13010a0a, c=32, lpName=0x26d740 | out: lpName="Lucida Sans Unicode") returned 20 [0168.905] SelectObject (hdc=0x13010a0a, h=0x18a002e) returned 0xf0a0239 [0168.905] SelectObject (hdc=0x13010a0a, h=0xf0a0239) returned 0x18a002e [0168.905] GetTextCharsetInfo (in: hdc=0x13010a0a, lpSig=0x26d6a8, dwFlags=0x0 | out: lpSig=0x26d6a8) returned 0 [0168.905] SelectObject (hdc=0x13010a0a, h=0x18a002e) returned 0xf0a0239 [0168.905] RtlAllocateHeap (HeapHandle=0x470000, Flags=0x8, Size=0xc) returned 0x4ef4a8 [0168.905] SelectObject (hdc=0x13010a0a, h=0xf0a0239) returned 0x18a002e [0168.905] GetFontUnicodeRanges (in: hdc=0x13010a0a, lpgs=0x0 | out: lpgs=0x0) returned 0x120 [0168.905] HeapFree (in: hHeap=0x470000, dwFlags=0x0, lpMem=0x0 | out: hHeap=0x470000) returned 1 [0168.905] RtlAllocateHeap (HeapHandle=0x470000, Flags=0x0, Size=0x120) returned 0x4ecfa0 [0168.905] GetFontUnicodeRanges (in: hdc=0x13010a0a, lpgs=0x4ecfa0 | out: lpgs=0x4ecfa0) returned 0x120 [0168.905] SelectObject (hdc=0x13010a0a, h=0x18a002e) returned 0xf0a0239 [0168.905] SelectObject (hdc=0x13010a0a, h=0xf0a0239) returned 0x18a002e [0168.905] GetCharWidth32W (in: hdc=0x13010a0a, iFirst=0x20, iLast=0x7e, lpBuffer=0x26d680 | out: lpBuffer=0x26d680) returned 1 [0168.906] SelectObject (hdc=0x13010a0a, h=0x18a002e) returned 0xf0a0239 [0168.906] LsQueryLineDup () returned 0x0 [0168.906] LsDestroyLine () returned 0x0 [0168.906] HeapFree (in: hHeap=0x470000, dwFlags=0x0, lpMem=0x0 | out: hHeap=0x470000) returned 1 [0168.906] RtlReAllocateHeap (Heap=0x470000, Flags=0x0, Ptr=0x4cdb38, Size=0xc0) returned 0x4eda58 [0168.906] RtlAllocateHeap (HeapHandle=0x470000, Flags=0x0, Size=0x40) returned 0x4eaa70 [0168.907] LsSetDoc () returned 0x0 [0168.907] LsCreateLine () returned 0x0 [0168.907] HeapFree (in: hHeap=0x470000, dwFlags=0x0, lpMem=0x0 | out: hHeap=0x470000) returned 1 [0168.907] SelectObject (hdc=0x13010a0a, h=0x4c0a025b) returned 0x18a002e [0168.907] GetCharWidthW (in: hdc=0x13010a0a, iFirst=0x2052, iLast=0x2052, lpBuffer=0x26d8ec | out: lpBuffer=0x26d8ec) returned 1 [0168.907] SelectObject (hdc=0x13010a0a, h=0x18a002e) returned 0x4c0a025b [0168.907] LsQueryLineDup () returned 0x0 [0168.907] LsDestroyLine () returned 0x0 [0168.907] HeapFree (in: hHeap=0x470000, dwFlags=0x0, lpMem=0x0 | out: hHeap=0x470000) returned 1 [0168.907] LsSetDoc () returned 0x0 [0168.907] LsCreateLine () returned 0x0 [0168.908] HeapFree (in: hHeap=0x470000, dwFlags=0x0, lpMem=0x0 | out: hHeap=0x470000) returned 1 [0168.908] LsQueryLineDup () returned 0x0 [0168.908] LsDestroyLine () returned 0x0 [0168.908] HeapFree (in: hHeap=0x470000, dwFlags=0x0, lpMem=0x0 | out: hHeap=0x470000) returned 1 [0168.908] HeapFree (in: hHeap=0x470000, dwFlags=0x0, lpMem=0x0 | out: hHeap=0x470000) returned 1 [0168.908] RtlAllocateHeap (HeapHandle=0x470000, Flags=0x0, Size=0x10) returned 0x4ef4c0 [0168.908] LsSetDoc () returned 0x0 [0168.908] LsCreateLine () returned 0x0 [0168.908] HeapFree (in: hHeap=0x470000, dwFlags=0x0, lpMem=0x0 | out: hHeap=0x470000) returned 1 [0168.909] LsQueryLineDup () returned 0x0 [0168.909] LsDestroyLine () returned 0x0 [0168.909] HeapFree (in: hHeap=0x470000, dwFlags=0x0, lpMem=0x0 | out: hHeap=0x470000) returned 1 [0168.909] HeapFree (in: hHeap=0x470000, dwFlags=0x0, lpMem=0x0 | out: hHeap=0x470000) returned 1 [0168.909] RtlAllocateHeap (HeapHandle=0x470000, Flags=0x0, Size=0x10) returned 0x4ef4c0 [0168.909] RtlReAllocateHeap (Heap=0x470000, Flags=0x0, Ptr=0x4eb980, Size=0x3f0) returned 0x4edb20 [0168.909] LsSetDoc () returned 0x0 [0168.909] LsCreateLine () returned 0x0 [0168.909] HeapFree (in: hHeap=0x470000, dwFlags=0x0, lpMem=0x0 | out: hHeap=0x470000) returned 1 [0168.909] LsQueryLineDup () returned 0x0 [0168.909] LsDestroyLine () returned 0x0 [0168.909] HeapFree (in: hHeap=0x470000, dwFlags=0x0, lpMem=0x0 | out: hHeap=0x470000) returned 1 [0168.910] LsSetDoc () returned 0x0 [0168.910] LsCreateLine () returned 0x0 [0168.910] HeapFree (in: hHeap=0x470000, dwFlags=0x0, lpMem=0x0 | out: hHeap=0x470000) returned 1 [0168.911] LsQueryLineDup () returned 0x0 [0168.911] LsDestroyLine () returned 0x0 [0168.911] HeapFree (in: hHeap=0x470000, dwFlags=0x0, lpMem=0x0 | out: hHeap=0x470000) returned 1 [0168.911] LsSetDoc () returned 0x0 [0168.911] LsCreateLine () returned 0x0 [0168.912] HeapFree (in: hHeap=0x470000, dwFlags=0x0, lpMem=0x0 | out: hHeap=0x470000) returned 1 [0168.912] LsQueryLineDup () returned 0x0 [0168.912] LsDestroyLine () returned 0x0 [0168.912] HeapFree (in: hHeap=0x470000, dwFlags=0x0, lpMem=0x0 | out: hHeap=0x470000) returned 1 [0168.912] LsSetDoc () returned 0x0 [0168.912] LsCreateLine () returned 0x0 [0168.912] HeapFree (in: hHeap=0x470000, dwFlags=0x0, lpMem=0x0 | out: hHeap=0x470000) returned 1 [0168.912] LsQueryLineDup () returned 0x0 [0168.912] LsDestroyLine () returned 0x0 [0168.912] HeapFree (in: hHeap=0x470000, dwFlags=0x0, lpMem=0x0 | out: hHeap=0x470000) returned 1 [0168.913] LsSetDoc () returned 0x0 [0168.913] LsCreateLine () returned 0x0 [0168.913] HeapFree (in: hHeap=0x470000, dwFlags=0x0, lpMem=0x0 | out: hHeap=0x470000) returned 1 [0168.913] LsQueryLineDup () returned 0x0 [0168.913] LsDestroyLine () returned 0x0 [0168.913] HeapFree (in: hHeap=0x470000, dwFlags=0x0, lpMem=0x0 | out: hHeap=0x470000) returned 1 [0168.913] LsSetDoc () returned 0x0 [0168.913] LsCreateLine () returned 0x0 [0168.913] HeapFree (in: hHeap=0x470000, dwFlags=0x0, lpMem=0x0 | out: hHeap=0x470000) returned 1 [0168.914] LsQueryLineDup () returned 0x0 [0168.914] LsDestroyLine () returned 0x0 [0168.914] HeapFree (in: hHeap=0x470000, dwFlags=0x0, lpMem=0x0 | out: hHeap=0x470000) returned 1 [0168.914] LsSetDoc () returned 0x0 [0168.914] LsCreateLine () returned 0x0 [0168.914] HeapFree (in: hHeap=0x470000, dwFlags=0x0, lpMem=0x0 | out: hHeap=0x470000) returned 1 [0168.915] LsQueryLineDup () returned 0x0 [0168.915] LsDestroyLine () returned 0x0 [0168.915] HeapFree (in: hHeap=0x470000, dwFlags=0x0, lpMem=0x0 | out: hHeap=0x470000) returned 1 [0168.915] LsSetDoc () returned 0x0 [0168.915] LsCreateLine () returned 0x0 [0168.915] HeapFree (in: hHeap=0x470000, dwFlags=0x0, lpMem=0x0 | out: hHeap=0x470000) returned 1 [0168.915] LsQueryLineDup () returned 0x0 [0168.915] LsDestroyLine () returned 0x0 [0168.915] HeapFree (in: hHeap=0x470000, dwFlags=0x0, lpMem=0x0 | out: hHeap=0x470000) returned 1 [0168.915] LsSetDoc () returned 0x0 [0168.915] LsCreateLine () returned 0x0 [0168.915] HeapFree (in: hHeap=0x470000, dwFlags=0x0, lpMem=0x0 | out: hHeap=0x470000) returned 1 [0168.916] LsQueryLineDup () returned 0x0 [0168.916] LsDestroyLine () returned 0x0 [0168.916] HeapFree (in: hHeap=0x470000, dwFlags=0x0, lpMem=0x0 | out: hHeap=0x470000) returned 1 [0168.916] RtlReAllocateHeap (Heap=0x470000, Flags=0x0, Ptr=0x4edb20, Size=0x5e8) returned 0x4edb20 [0168.916] LsSetDoc () returned 0x0 [0168.916] LsCreateLine () returned 0x0 [0168.916] HeapFree (in: hHeap=0x470000, dwFlags=0x0, lpMem=0x0 | out: hHeap=0x470000) returned 1 [0168.916] LsQueryLineDup () returned 0x0 [0168.916] LsDestroyLine () returned 0x0 [0168.916] HeapFree (in: hHeap=0x470000, dwFlags=0x0, lpMem=0x0 | out: hHeap=0x470000) returned 1 [0168.916] RtlAllocateHeap (HeapHandle=0x470000, Flags=0x0, Size=0x40) returned 0x4eabd8 [0168.916] HeapFree (in: hHeap=0x470000, dwFlags=0x0, lpMem=0x4e2330 | out: hHeap=0x470000) returned 1 [0168.916] HeapFree (in: hHeap=0x470000, dwFlags=0x0, lpMem=0x0 | out: hHeap=0x470000) returned 1 [0168.916] HeapFree (in: hHeap=0x470000, dwFlags=0x0, lpMem=0x0 | out: hHeap=0x470000) returned 1 [0168.916] HeapFree (in: hHeap=0x470000, dwFlags=0x0, lpMem=0x0 | out: hHeap=0x470000) returned 1 [0168.917] HeapFree (in: hHeap=0x470000, dwFlags=0x0, lpMem=0x0 | out: hHeap=0x470000) returned 1 [0168.917] HeapFree (in: hHeap=0x470000, dwFlags=0x0, lpMem=0x0 | out: hHeap=0x470000) returned 1 [0168.917] HeapFree (in: hHeap=0x470000, dwFlags=0x0, lpMem=0x0 | out: hHeap=0x470000) returned 1 [0168.917] HeapFree (in: hHeap=0x470000, dwFlags=0x0, lpMem=0x0 | out: hHeap=0x470000) returned 1 [0168.918] HeapFree (in: hHeap=0x470000, dwFlags=0x0, lpMem=0x0 | out: hHeap=0x470000) returned 1 [0168.918] HeapFree (in: hHeap=0x470000, dwFlags=0x0, lpMem=0x0 | out: hHeap=0x470000) returned 1 [0168.918] HeapFree (in: hHeap=0x470000, dwFlags=0x0, lpMem=0x0 | out: hHeap=0x470000) returned 1 [0168.918] RtlAllocateHeap (HeapHandle=0x470000, Flags=0x8, Size=0xb4) returned 0x4e2330 [0168.918] RtlAllocateHeap (HeapHandle=0x470000, Flags=0x8, Size=0xb4) returned 0x4f1878 [0168.918] LsdnFinishRegular () returned 0x0 [0168.918] LsQueryLineDup () returned 0x0 [0168.919] LsQueryLineCpPpoint () returned 0x0 [0168.919] LsDestroyLine () returned 0x0 [0168.919] HeapFree (in: hHeap=0x470000, dwFlags=0x0, lpMem=0x4dcc20 | out: hHeap=0x470000) returned 1 [0168.919] HeapFree (in: hHeap=0x470000, dwFlags=0x0, lpMem=0x0 | out: hHeap=0x470000) returned 1 [0168.919] HeapFree (in: hHeap=0x470000, dwFlags=0x0, lpMem=0x0 | out: hHeap=0x470000) returned 1 [0168.919] RtlReAllocateHeap (Heap=0x470000, Flags=0x0, Ptr=0x4c0058, Size=0x90) returned 0x4e3d50 [0168.919] LsSetDoc () returned 0x0 [0168.919] LsCreateLine () returned 0x0 [0168.919] HeapFree (in: hHeap=0x470000, dwFlags=0x0, lpMem=0x0 | out: hHeap=0x470000) returned 1 [0168.919] LsQueryLineDup () returned 0x0 [0168.919] LsDestroyLine () returned 0x0 [0168.919] HeapFree (in: hHeap=0x470000, dwFlags=0x0, lpMem=0x0 | out: hHeap=0x470000) returned 1 [0168.919] RtlAllocateHeap (HeapHandle=0x470000, Flags=0x0, Size=0x40) returned 0x4eac68 [0168.920] HeapFree (in: hHeap=0x470000, dwFlags=0x0, lpMem=0x4df5e8 | out: hHeap=0x470000) returned 1 [0168.920] LsDestroyContext () returned 0x0 [0168.920] HeapFree (in: hHeap=0x470000, dwFlags=0x0, lpMem=0x4d2f38 | out: hHeap=0x470000) returned 1 [0168.920] HeapFree (in: hHeap=0x470000, dwFlags=0x0, lpMem=0x4e7788 | out: hHeap=0x470000) returned 1 [0168.920] HeapFree (in: hHeap=0x470000, dwFlags=0x0, lpMem=0x4e7f70 | out: hHeap=0x470000) returned 1 [0168.920] HeapFree (in: hHeap=0x470000, dwFlags=0x0, lpMem=0x4ebc68 | out: hHeap=0x470000) returned 1 [0168.920] HeapFree (in: hHeap=0x470000, dwFlags=0x0, lpMem=0x4ec0f8 | out: hHeap=0x470000) returned 1 [0168.920] HeapFree (in: hHeap=0x470000, dwFlags=0x0, lpMem=0x4e77b8 | out: hHeap=0x470000) returned 1 [0168.920] HeapFree (in: hHeap=0x470000, dwFlags=0x0, lpMem=0x4b6920 | out: hHeap=0x470000) returned 1 [0168.920] HeapFree (in: hHeap=0x470000, dwFlags=0x0, lpMem=0x4b6948 | out: hHeap=0x470000) returned 1 [0168.920] HeapFree (in: hHeap=0x470000, dwFlags=0x0, lpMem=0x4e67e8 | out: hHeap=0x470000) returned 1 [0168.920] HeapFree (in: hHeap=0x470000, dwFlags=0x0, lpMem=0x4c8b60 | out: hHeap=0x470000) returned 1 [0168.920] HeapFree (in: hHeap=0x470000, dwFlags=0x0, lpMem=0x4e82a0 | out: hHeap=0x470000) returned 1 [0168.920] HeapFree (in: hHeap=0x470000, dwFlags=0x0, lpMem=0x4e8278 | out: hHeap=0x470000) returned 1 [0168.920] HeapFree (in: hHeap=0x470000, dwFlags=0x0, lpMem=0x4e82c8 | out: hHeap=0x470000) returned 1 [0168.920] HeapFree (in: hHeap=0x470000, dwFlags=0x0, lpMem=0x4e82f0 | out: hHeap=0x470000) returned 1 [0168.920] HeapFree (in: hHeap=0x470000, dwFlags=0x0, lpMem=0x4e8a60 | out: hHeap=0x470000) returned 1 [0168.920] HeapFree (in: hHeap=0x470000, dwFlags=0x0, lpMem=0x4e0d88 | out: hHeap=0x470000) returned 1 [0168.920] HeapFree (in: hHeap=0x470000, dwFlags=0x0, lpMem=0x4e0d98 | out: hHeap=0x470000) returned 1 [0168.920] HeapFree (in: hHeap=0x470000, dwFlags=0x0, lpMem=0x4e0da8 | out: hHeap=0x470000) returned 1 [0168.920] HeapFree (in: hHeap=0x470000, dwFlags=0x0, lpMem=0x4e0db8 | out: hHeap=0x470000) returned 1 [0168.921] HeapFree (in: hHeap=0x470000, dwFlags=0x0, lpMem=0x4e8e68 | out: hHeap=0x470000) returned 1 [0168.921] HeapFree (in: hHeap=0x470000, dwFlags=0x0, lpMem=0x4e8f98 | out: hHeap=0x470000) returned 1 [0168.921] HeapFree (in: hHeap=0x470000, dwFlags=0x0, lpMem=0x4e90c0 | out: hHeap=0x470000) returned 1 [0168.921] HeapFree (in: hHeap=0x470000, dwFlags=0x0, lpMem=0x4e91d0 | out: hHeap=0x470000) returned 1 [0168.921] HeapFree (in: hHeap=0x470000, dwFlags=0x0, lpMem=0x4d3050 | out: hHeap=0x470000) returned 1 [0168.921] HeapFree (in: hHeap=0x470000, dwFlags=0x0, lpMem=0x4e9588 | out: hHeap=0x470000) returned 1 [0168.921] HeapFree (in: hHeap=0x470000, dwFlags=0x0, lpMem=0x4e9658 | out: hHeap=0x470000) returned 1 [0168.921] HeapFree (in: hHeap=0x470000, dwFlags=0x0, lpMem=0x4828f0 | out: hHeap=0x470000) returned 1 [0168.921] HeapFree (in: hHeap=0x470000, dwFlags=0x0, lpMem=0x4dcc80 | out: hHeap=0x470000) returned 1 [0168.921] HeapFree (in: hHeap=0x470000, dwFlags=0x0, lpMem=0x4e9e00 | out: hHeap=0x470000) returned 1 [0168.921] HeapFree (in: hHeap=0x470000, dwFlags=0x0, lpMem=0x4ef490 | out: hHeap=0x470000) returned 1 [0168.921] HeapFree (in: hHeap=0x470000, dwFlags=0x0, lpMem=0x4ea4c0 | out: hHeap=0x470000) returned 1 [0168.921] HeapFree (in: hHeap=0x470000, dwFlags=0x0, lpMem=0x4e98e8 | out: hHeap=0x470000) returned 1 [0168.921] HeapFree (in: hHeap=0x470000, dwFlags=0x0, lpMem=0x4ebf58 | out: hHeap=0x470000) returned 1 [0168.921] HeapFree (in: hHeap=0x470000, dwFlags=0x0, lpMem=0x4e9a88 | out: hHeap=0x470000) returned 1 [0168.921] HeapFree (in: hHeap=0x470000, dwFlags=0x0, lpMem=0x4e9b58 | out: hHeap=0x470000) returned 1 [0168.921] HeapFree (in: hHeap=0x470000, dwFlags=0x0, lpMem=0x4bf228 | out: hHeap=0x470000) returned 1 [0168.921] HeapFree (in: hHeap=0x470000, dwFlags=0x0, lpMem=0x4e97f0 | out: hHeap=0x470000) returned 1 [0168.921] HeapFree (in: hHeap=0x470000, dwFlags=0x0, lpMem=0x4e9308 | out: hHeap=0x470000) returned 1 [0168.921] HeapFree (in: hHeap=0x470000, dwFlags=0x0, lpMem=0x4e9cf0 | out: hHeap=0x470000) returned 1 [0168.921] HeapFree (in: hHeap=0x470000, dwFlags=0x0, lpMem=0x4e70f8 | out: hHeap=0x470000) returned 1 [0168.921] HeapFree (in: hHeap=0x470000, dwFlags=0x0, lpMem=0x4ea740 | out: hHeap=0x470000) returned 1 [0168.922] HeapFree (in: hHeap=0x470000, dwFlags=0x0, lpMem=0x4ea800 | out: hHeap=0x470000) returned 1 [0168.922] HeapFree (in: hHeap=0x470000, dwFlags=0x0, lpMem=0x4ea8c0 | out: hHeap=0x470000) returned 1 [0168.922] HeapFree (in: hHeap=0x470000, dwFlags=0x0, lpMem=0x4ea3f8 | out: hHeap=0x470000) returned 1 [0168.922] HeapFree (in: hHeap=0x470000, dwFlags=0x0, lpMem=0x4ea330 | out: hHeap=0x470000) returned 1 [0168.922] HeapFree (in: hHeap=0x470000, dwFlags=0x0, lpMem=0x0 | out: hHeap=0x470000) returned 1 [0168.922] HeapFree (in: hHeap=0x470000, dwFlags=0x0, lpMem=0x4e6ea0 | out: hHeap=0x470000) returned 1 [0168.922] LsDestroyContext () returned 0x0 [0168.922] HeapFree (in: hHeap=0x470000, dwFlags=0x0, lpMem=0x4d2d08 | out: hHeap=0x470000) returned 1 [0168.922] HeapFree (in: hHeap=0x470000, dwFlags=0x0, lpMem=0x4c0088 | out: hHeap=0x470000) returned 1 [0168.922] HeapFree (in: hHeap=0x470000, dwFlags=0x0, lpMem=0x4e05b0 | out: hHeap=0x470000) returned 1 [0168.922] HeapFree (in: hHeap=0x470000, dwFlags=0x0, lpMem=0x4c00b8 | out: hHeap=0x470000) returned 1 [0168.922] HeapFree (in: hHeap=0x470000, dwFlags=0x0, lpMem=0x4b6830 | out: hHeap=0x470000) returned 1 [0168.922] HeapFree (in: hHeap=0x470000, dwFlags=0x0, lpMem=0x4b6858 | out: hHeap=0x470000) returned 1 [0168.922] HeapFree (in: hHeap=0x470000, dwFlags=0x0, lpMem=0x4e08a0 | out: hHeap=0x470000) returned 1 [0168.922] HeapFree (in: hHeap=0x470000, dwFlags=0x0, lpMem=0x4c89f8 | out: hHeap=0x470000) returned 1 [0168.922] HeapFree (in: hHeap=0x470000, dwFlags=0x0, lpMem=0x4b68a8 | out: hHeap=0x470000) returned 1 [0168.922] HeapFree (in: hHeap=0x470000, dwFlags=0x0, lpMem=0x4b6880 | out: hHeap=0x470000) returned 1 [0168.922] HeapFree (in: hHeap=0x470000, dwFlags=0x0, lpMem=0x4b68d0 | out: hHeap=0x470000) returned 1 [0168.922] HeapFree (in: hHeap=0x470000, dwFlags=0x0, lpMem=0x4b68f8 | out: hHeap=0x470000) returned 1 [0168.922] HeapFree (in: hHeap=0x470000, dwFlags=0x0, lpMem=0x4e0948 | out: hHeap=0x470000) returned 1 [0168.922] HeapFree (in: hHeap=0x470000, dwFlags=0x0, lpMem=0x4c4ef0 | out: hHeap=0x470000) returned 1 [0168.922] HeapFree (in: hHeap=0x470000, dwFlags=0x0, lpMem=0x49bac8 | out: hHeap=0x470000) returned 1 [0168.922] HeapFree (in: hHeap=0x470000, dwFlags=0x0, lpMem=0x4e0d68 | out: hHeap=0x470000) returned 1 [0168.922] HeapFree (in: hHeap=0x470000, dwFlags=0x0, lpMem=0x4e0d78 | out: hHeap=0x470000) returned 1 [0168.922] HeapFree (in: hHeap=0x470000, dwFlags=0x0, lpMem=0x4e1150 | out: hHeap=0x470000) returned 1 [0168.923] HeapFree (in: hHeap=0x470000, dwFlags=0x0, lpMem=0x4e1280 | out: hHeap=0x470000) returned 1 [0168.923] HeapFree (in: hHeap=0x470000, dwFlags=0x0, lpMem=0x4e13a8 | out: hHeap=0x470000) returned 1 [0168.923] HeapFree (in: hHeap=0x470000, dwFlags=0x0, lpMem=0x4e14b8 | out: hHeap=0x470000) returned 1 [0168.923] HeapFree (in: hHeap=0x470000, dwFlags=0x0, lpMem=0x4d2e20 | out: hHeap=0x470000) returned 1 [0168.923] HeapFree (in: hHeap=0x470000, dwFlags=0x0, lpMem=0x4e68c8 | out: hHeap=0x470000) returned 1 [0168.923] HeapFree (in: hHeap=0x470000, dwFlags=0x0, lpMem=0x4e6b38 | out: hHeap=0x470000) returned 1 [0168.923] HeapFree (in: hHeap=0x470000, dwFlags=0x0, lpMem=0x482870 | out: hHeap=0x470000) returned 1 [0168.923] HeapFree (in: hHeap=0x470000, dwFlags=0x0, lpMem=0x4dcc40 | out: hHeap=0x470000) returned 1 [0168.923] HeapFree (in: hHeap=0x470000, dwFlags=0x0, lpMem=0x4e20e8 | out: hHeap=0x470000) returned 1 [0168.923] HeapFree (in: hHeap=0x470000, dwFlags=0x0, lpMem=0x4bd6b8 | out: hHeap=0x470000) returned 1 [0168.923] HeapFree (in: hHeap=0x470000, dwFlags=0x0, lpMem=0x4e28a0 | out: hHeap=0x470000) returned 1 [0168.923] HeapFree (in: hHeap=0x470000, dwFlags=0x0, lpMem=0x4e1bd0 | out: hHeap=0x470000) returned 1 [0168.923] HeapFree (in: hHeap=0x470000, dwFlags=0x0, lpMem=0x4e6a00 | out: hHeap=0x470000) returned 1 [0168.923] HeapFree (in: hHeap=0x470000, dwFlags=0x0, lpMem=0x4e1870 | out: hHeap=0x470000) returned 1 [0168.923] HeapFree (in: hHeap=0x470000, dwFlags=0x0, lpMem=0x4bf1d0 | out: hHeap=0x470000) returned 1 [0168.923] HeapFree (in: hHeap=0x470000, dwFlags=0x0, lpMem=0x4e1ad8 | out: hHeap=0x470000) returned 1 [0168.923] HeapFree (in: hHeap=0x470000, dwFlags=0x0, lpMem=0x4e15f0 | out: hHeap=0x470000) returned 1 [0168.923] HeapFree (in: hHeap=0x470000, dwFlags=0x0, lpMem=0x4e1fd8 | out: hHeap=0x470000) returned 1 [0168.923] HeapFree (in: hHeap=0x470000, dwFlags=0x0, lpMem=0x4dff38 | out: hHeap=0x470000) returned 1 [0168.923] HeapFree (in: hHeap=0x470000, dwFlags=0x0, lpMem=0x4e2b20 | out: hHeap=0x470000) returned 1 [0168.923] HeapFree (in: hHeap=0x470000, dwFlags=0x0, lpMem=0x4e2ca0 | out: hHeap=0x470000) returned 1 [0168.923] HeapFree (in: hHeap=0x470000, dwFlags=0x0, lpMem=0x4e2be0 | out: hHeap=0x470000) returned 1 [0168.924] HeapFree (in: hHeap=0x470000, dwFlags=0x0, lpMem=0x4e3bd0 | out: hHeap=0x470000) returned 1 [0168.924] HeapFree (in: hHeap=0x470000, dwFlags=0x0, lpMem=0x4e5c88 | out: hHeap=0x470000) returned 1 [0168.924] HeapFree (in: hHeap=0x470000, dwFlags=0x0, lpMem=0x4e3c90 | out: hHeap=0x470000) returned 1 [0168.924] HeapFree (in: hHeap=0x470000, dwFlags=0x0, lpMem=0x4e27d8 | out: hHeap=0x470000) returned 1 [0168.924] HeapFree (in: hHeap=0x470000, dwFlags=0x0, lpMem=0x4e2710 | out: hHeap=0x470000) returned 1 [0168.924] HeapFree (in: hHeap=0x470000, dwFlags=0x0, lpMem=0x0 | out: hHeap=0x470000) returned 1 [0168.924] HeapFree (in: hHeap=0x470000, dwFlags=0x0, lpMem=0x4dfce0 | out: hHeap=0x470000) returned 1 [0168.924] HeapFree (in: hHeap=0x470000, dwFlags=0x0, lpMem=0x0 | out: hHeap=0x470000) returned 1 [0168.924] HeapFree (in: hHeap=0x470000, dwFlags=0x0, lpMem=0x0 | out: hHeap=0x470000) returned 1 [0168.924] HeapFree (in: hHeap=0x470000, dwFlags=0x0, lpMem=0x0 | out: hHeap=0x470000) returned 1 [0168.924] HeapFree (in: hHeap=0x470000, dwFlags=0x0, lpMem=0x0 | out: hHeap=0x470000) returned 1 [0168.924] HeapFree (in: hHeap=0x470000, dwFlags=0x0, lpMem=0x0 | out: hHeap=0x470000) returned 1 [0168.924] HeapFree (in: hHeap=0x470000, dwFlags=0x0, lpMem=0x0 | out: hHeap=0x470000) returned 1 [0168.924] HeapFree (in: hHeap=0x470000, dwFlags=0x0, lpMem=0x0 | out: hHeap=0x470000) returned 1 [0168.924] HeapFree (in: hHeap=0x470000, dwFlags=0x0, lpMem=0x0 | out: hHeap=0x470000) returned 1 [0168.924] HeapFree (in: hHeap=0x470000, dwFlags=0x0, lpMem=0x0 | out: hHeap=0x470000) returned 1 [0168.924] HeapFree (in: hHeap=0x470000, dwFlags=0x0, lpMem=0x0 | out: hHeap=0x470000) returned 1 [0168.924] HeapFree (in: hHeap=0x470000, dwFlags=0x0, lpMem=0x4bd670 | out: hHeap=0x470000) returned 1 [0168.924] HeapFree (in: hHeap=0x470000, dwFlags=0x0, lpMem=0x0 | out: hHeap=0x470000) returned 1 [0168.925] HeapFree (in: hHeap=0x470000, dwFlags=0x0, lpMem=0x0 | out: hHeap=0x470000) returned 1 [0168.925] HeapFree (in: hHeap=0x470000, dwFlags=0x0, lpMem=0x0 | out: hHeap=0x470000) returned 1 [0168.925] HeapFree (in: hHeap=0x470000, dwFlags=0x0, lpMem=0x0 | out: hHeap=0x470000) returned 1 [0168.925] HeapFree (in: hHeap=0x470000, dwFlags=0x0, lpMem=0x0 | out: hHeap=0x470000) returned 1 [0168.925] HeapFree (in: hHeap=0x470000, dwFlags=0x0, lpMem=0x0 | out: hHeap=0x470000) returned 1 [0168.925] IntersectRect (in: lprcDst=0x26f734, lprcSrc1=0x26f734, lprcSrc2=0x26f704 | out: lprcDst=0x26f734) returned 1 [0168.925] IntersectRect (in: lprcDst=0x4c15e8, lprcSrc1=0x4c15e8, lprcSrc2=0x26f724 | out: lprcDst=0x4c15e8) returned 1 [0168.925] IntersectRect (in: lprcDst=0x4c15e8, lprcSrc1=0x4c15e8, lprcSrc2=0x26f744 | out: lprcDst=0x4c15e8) returned 1 [0168.925] IntersectRect (in: lprcDst=0x26f2f8, lprcSrc1=0x26f2f8, lprcSrc2=0x26f2c8 | out: lprcDst=0x26f2f8) returned 1 [0168.925] IntersectRect (in: lprcDst=0x4c1670, lprcSrc1=0x4c1670, lprcSrc2=0x26f2e8 | out: lprcDst=0x4c1670) returned 1 [0168.926] IntersectRect (in: lprcDst=0x26f3f4, lprcSrc1=0x26f3f4, lprcSrc2=0x26f3c4 | out: lprcDst=0x26f3f4) returned 1 [0168.926] IntersectRect (in: lprcDst=0x4c15e8, lprcSrc1=0x4c15e8, lprcSrc2=0x26f3e4 | out: lprcDst=0x4c15e8) returned 1 [0168.926] IntersectRect (in: lprcDst=0x4c15e8, lprcSrc1=0x4c15e8, lprcSrc2=0x26f404 | out: lprcDst=0x4c15e8) returned 1 [0168.926] IntersectRect (in: lprcDst=0x26f008, lprcSrc1=0x26f008, lprcSrc2=0x26ef98 | out: lprcDst=0x26f008) returned 1 [0168.926] IntersectRect (in: lprcDst=0x4c1670, lprcSrc1=0x4c1670, lprcSrc2=0x26f028 | out: lprcDst=0x4c1670) returned 1 [0168.926] IntersectRect (in: lprcDst=0x26f104, lprcSrc1=0x26f104, lprcSrc2=0x26f044 | out: lprcDst=0x26f104) returned 1 [0168.926] IntersectRect (in: lprcDst=0x4c15e8, lprcSrc1=0x4c15e8, lprcSrc2=0x26f124 | out: lprcDst=0x4c15e8) returned 1 [0168.926] HeapFree (in: hHeap=0x470000, dwFlags=0x0, lpMem=0x0 | out: hHeap=0x470000) returned 1 [0168.926] UnionRect (in: lprcDst=0x26f038, lprcSrc1=0x26f038, lprcSrc2=0x26f058 | out: lprcDst=0x26f038) returned 1 [0168.926] IntersectRect (in: lprcDst=0x26f104, lprcSrc1=0x26f104, lprcSrc2=0x26f044 | out: lprcDst=0x26f104) returned 1 [0168.926] IntersectRect (in: lprcDst=0x4c15e8, lprcSrc1=0x4c15e8, lprcSrc2=0x26f124 | out: lprcDst=0x4c15e8) returned 1 [0168.926] IntersectRect (in: lprcDst=0x4c15e8, lprcSrc1=0x4c15e8, lprcSrc2=0x26f144 | out: lprcDst=0x4c15e8) returned 1 [0168.926] HeapFree (in: hHeap=0x470000, dwFlags=0x0, lpMem=0x0 | out: hHeap=0x470000) returned 1 [0168.926] IntersectRect (in: lprcDst=0x26ee44, lprcSrc1=0x26ee44, lprcSrc2=0x26ed84 | out: lprcDst=0x26ee44) returned 1 [0168.926] IntersectRect (in: lprcDst=0x4c15e8, lprcSrc1=0x4c15e8, lprcSrc2=0x26ee64 | out: lprcDst=0x4c15e8) returned 1 [0168.926] IntersectRect (in: lprcDst=0x4c15e8, lprcSrc1=0x4c15e8, lprcSrc2=0x26ee84 | out: lprcDst=0x4c15e8) returned 1 [0168.926] HeapFree (in: hHeap=0x470000, dwFlags=0x0, lpMem=0x0 | out: hHeap=0x470000) returned 1 [0168.926] IntersectRect (in: lprcDst=0x26eb84, lprcSrc1=0x26eb84, lprcSrc2=0x26eac4 | out: lprcDst=0x26eb84) returned 1 [0168.926] IntersectRect (in: lprcDst=0x4c15e8, lprcSrc1=0x4c15e8, lprcSrc2=0x26eba4 | out: lprcDst=0x4c15e8) returned 1 [0168.926] IntersectRect (in: lprcDst=0x4c15e8, lprcSrc1=0x4c15e8, lprcSrc2=0x26ebc4 | out: lprcDst=0x4c15e8) returned 1 [0168.926] HeapFree (in: hHeap=0x470000, dwFlags=0x0, lpMem=0x0 | out: hHeap=0x470000) returned 1 [0168.926] HeapFree (in: hHeap=0x470000, dwFlags=0x0, lpMem=0x0 | out: hHeap=0x470000) returned 1 [0168.926] UnionRect (in: lprcDst=0x26eac8, lprcSrc1=0x26eac8, lprcSrc2=0x4c7aa0 | out: lprcDst=0x26eac8) returned 1 [0168.926] UnionRect (in: lprcDst=0x26eab8, lprcSrc1=0x26eab8, lprcSrc2=0x26ead8 | out: lprcDst=0x26eab8) returned 1 [0168.926] HeapFree (in: hHeap=0x470000, dwFlags=0x0, lpMem=0x0 | out: hHeap=0x470000) returned 1 [0168.926] IntersectRect (in: lprcDst=0x26eb84, lprcSrc1=0x26eb84, lprcSrc2=0x26eac4 | out: lprcDst=0x26eb84) returned 1 [0168.926] IntersectRect (in: lprcDst=0x4c15e8, lprcSrc1=0x4c15e8, lprcSrc2=0x26eba4 | out: lprcDst=0x4c15e8) returned 1 [0168.926] IntersectRect (in: lprcDst=0x4c15e8, lprcSrc1=0x4c15e8, lprcSrc2=0x26ebc4 | out: lprcDst=0x4c15e8) returned 1 [0168.926] HeapFree (in: hHeap=0x470000, dwFlags=0x0, lpMem=0x0 | out: hHeap=0x470000) returned 1 [0168.926] HeapFree (in: hHeap=0x470000, dwFlags=0x0, lpMem=0x0 | out: hHeap=0x470000) returned 1 [0168.926] UnionRect (in: lprcDst=0x26eac8, lprcSrc1=0x26eac8, lprcSrc2=0x4c7bb8 | out: lprcDst=0x26eac8) returned 1 [0168.926] UnionRect (in: lprcDst=0x26eab8, lprcSrc1=0x26eab8, lprcSrc2=0x26ead8 | out: lprcDst=0x26eab8) returned 1 [0168.926] HeapFree (in: hHeap=0x470000, dwFlags=0x0, lpMem=0x0 | out: hHeap=0x470000) returned 1 [0168.926] HeapFree (in: hHeap=0x470000, dwFlags=0x0, lpMem=0x0 | out: hHeap=0x470000) returned 1 [0168.926] UnionRect (in: lprcDst=0x26ed88, lprcSrc1=0x26ed88, lprcSrc2=0x4c7ad8 | out: lprcDst=0x26ed88) returned 1 [0168.926] UnionRect (in: lprcDst=0x26ed88, lprcSrc1=0x26ed88, lprcSrc2=0x4bf29c | out: lprcDst=0x26ed88) returned 1 [0168.926] UnionRect (in: lprcDst=0x26ed88, lprcSrc1=0x26ed88, lprcSrc2=0x4c7b80 | out: lprcDst=0x26ed88) returned 1 [0168.926] UnionRect (in: lprcDst=0x26ed88, lprcSrc1=0x26ed88, lprcSrc2=0x4bf34c | out: lprcDst=0x26ed88) returned 1 [0168.926] UnionRect (in: lprcDst=0x26ed88, lprcSrc1=0x26ed88, lprcSrc2=0x4ec418 | out: lprcDst=0x26ed88) returned 1 [0168.926] UnionRect (in: lprcDst=0x26ed78, lprcSrc1=0x26ed78, lprcSrc2=0x26ed98 | out: lprcDst=0x26ed78) returned 1 [0168.926] HeapFree (in: hHeap=0x470000, dwFlags=0x0, lpMem=0x0 | out: hHeap=0x470000) returned 1 [0168.926] UnionRect (in: lprcDst=0x26f048, lprcSrc1=0x26f048, lprcSrc2=0x4c917c | out: lprcDst=0x26f048) returned 1 [0168.926] UnionRect (in: lprcDst=0x26f048, lprcSrc1=0x26f048, lprcSrc2=0x4bf2f4 | out: lprcDst=0x26f048) returned 1 [0168.927] UnionRect (in: lprcDst=0x26f038, lprcSrc1=0x26f038, lprcSrc2=0x26f058 | out: lprcDst=0x26f038) returned 1 [0168.927] HeapFree (in: hHeap=0x470000, dwFlags=0x0, lpMem=0x0 | out: hHeap=0x470000) returned 1 [0168.927] IntersectRect (in: lprcDst=0x26f308, lprcSrc1=0x26f308, lprcSrc2=0x4c15d8 | out: lprcDst=0x26f308) returned 1 [0168.927] UnionRect (in: lprcDst=0x26f610, lprcSrc1=0x26f610, lprcSrc2=0x26f5bc | out: lprcDst=0x26f610) returned 1 [0168.927] UnionRect (in: lprcDst=0x26f5bc, lprcSrc1=0x26f5bc, lprcSrc2=0x26f56c | out: lprcDst=0x26f5bc) returned 1 [0168.927] UnionRect (in: lprcDst=0x26f56c, lprcSrc1=0x26f56c, lprcSrc2=0x26f51c | out: lprcDst=0x26f56c) returned 1 [0168.927] UnionRect (in: lprcDst=0x26f51c, lprcSrc1=0x26f51c, lprcSrc2=0x26f4cc | out: lprcDst=0x26f51c) returned 1 [0168.927] UnionRect (in: lprcDst=0x26f56c, lprcSrc1=0x26f56c, lprcSrc2=0x26f51c | out: lprcDst=0x26f56c) returned 1 [0168.927] UnionRect (in: lprcDst=0x26f56c, lprcSrc1=0x26f56c, lprcSrc2=0x26f51c | out: lprcDst=0x26f56c) returned 1 [0168.927] UnionRect (in: lprcDst=0x26f56c, lprcSrc1=0x26f56c, lprcSrc2=0x26f51c | out: lprcDst=0x26f56c) returned 1 [0168.927] UnionRect (in: lprcDst=0x26f51c, lprcSrc1=0x26f51c, lprcSrc2=0x26f4cc | out: lprcDst=0x26f51c) returned 1 [0168.927] UnionRect (in: lprcDst=0x26f56c, lprcSrc1=0x26f56c, lprcSrc2=0x26f51c | out: lprcDst=0x26f56c) returned 1 [0168.927] UnionRect (in: lprcDst=0x26f56c, lprcSrc1=0x26f56c, lprcSrc2=0x26f51c | out: lprcDst=0x26f56c) returned 1 [0168.927] UnionRect (in: lprcDst=0x26f56c, lprcSrc1=0x26f56c, lprcSrc2=0x26f51c | out: lprcDst=0x26f56c) returned 1 [0168.927] UnionRect (in: lprcDst=0x26f5bc, lprcSrc1=0x26f5bc, lprcSrc2=0x26f56c | out: lprcDst=0x26f5bc) returned 1 [0168.927] UnionRect (in: lprcDst=0x26f5bc, lprcSrc1=0x26f5bc, lprcSrc2=0x26f56c | out: lprcDst=0x26f5bc) returned 1 [0168.927] UnionRect (in: lprcDst=0x26f610, lprcSrc1=0x26f610, lprcSrc2=0x26f5bc | out: lprcDst=0x26f610) returned 1 [0168.927] UnionRect (in: lprcDst=0x26f610, lprcSrc1=0x26f610, lprcSrc2=0x26f5bc | out: lprcDst=0x26f610) returned 1 [0168.927] IntersectRect (in: lprcDst=0x26f5a8, lprcSrc1=0x26f5a8, lprcSrc2=0x26f540 | out: lprcDst=0x26f5a8) returned 1 [0168.927] IntersectRect (in: lprcDst=0x26f4b8, lprcSrc1=0x26f4b8, lprcSrc2=0x26f540 | out: lprcDst=0x26f4b8) returned 1 [0168.927] IntersectRect (in: lprcDst=0x26f550, lprcSrc1=0x26f550, lprcSrc2=0x26f4b8 | out: lprcDst=0x26f550) returned 1 [0168.927] IntersectRect (in: lprcDst=0x26f5a8, lprcSrc1=0x26f5a8, lprcSrc2=0x26f540 | out: lprcDst=0x26f5a8) returned 1 [0168.927] IntersectRect (in: lprcDst=0x26f5a8, lprcSrc1=0x26f5a8, lprcSrc2=0x26f540 | out: lprcDst=0x26f5a8) returned 1 [0168.927] IntersectRect (in: lprcDst=0x26f4b8, lprcSrc1=0x26f4b8, lprcSrc2=0x26f540 | out: lprcDst=0x26f4b8) returned 1 [0168.927] IntersectRect (in: lprcDst=0x26f550, lprcSrc1=0x26f550, lprcSrc2=0x26f4b8 | out: lprcDst=0x26f550) returned 1 [0168.927] IntersectRect (in: lprcDst=0x26f5a8, lprcSrc1=0x26f5a8, lprcSrc2=0x26f540 | out: lprcDst=0x26f5a8) returned 1 [0168.927] HeapFree (in: hHeap=0x470000, dwFlags=0x0, lpMem=0x0 | out: hHeap=0x470000) returned 1 [0168.927] UnionRect (in: lprcDst=0x26f950, lprcSrc1=0x26f950, lprcSrc2=0x26f8fc | out: lprcDst=0x26f950) returned 1 [0168.927] RtlAllocateHeap (HeapHandle=0x470000, Flags=0x0, Size=0x28) returned 0x4c00b8 [0168.927] HeapFree (in: hHeap=0x470000, dwFlags=0x0, lpMem=0x4c00b8 | out: hHeap=0x470000) returned 1 [0168.927] RedrawWindow (hWnd=0x5011e, lprcUpdate=0x26f9d0, hrgnUpdate=0x0, flags=0x21) returned 1 [0168.928] GetFocus () returned 0x5011e [0168.928] RtlAllocateHeap (HeapHandle=0x470000, Flags=0x0, Size=0x8) returned 0x4c4ef0 [0168.928] RtlAllocateHeap (HeapHandle=0x470000, Flags=0x0, Size=0x4) returned 0x49bac8 [0168.928] GetFocus () returned 0x5011e [0168.928] ScreenToClient (in: hWnd=0x5011e, lpPoint=0x26f678 | out: lpPoint=0x26f678) returned 1 [0168.928] GetCapture () returned 0x0 [0168.928] RtlAllocateHeap (HeapHandle=0x470000, Flags=0x0, Size=0x28) returned 0x4c00b8 [0168.928] GetCurrentThreadId () returned 0x220 [0168.928] HeapFree (in: hHeap=0x470000, dwFlags=0x0, lpMem=0x4ec470 | out: hHeap=0x470000) returned 1 [0168.928] GetCurrentThreadId () returned 0x220 [0168.928] GetCurrentThreadId () returned 0x220 [0168.928] GetFocus () returned 0x5011e [0168.928] ScreenToClient (in: hWnd=0x5011e, lpPoint=0x26f678 | out: lpPoint=0x26f678) returned 1 [0168.929] GetCurrentThreadId () returned 0x220 [0168.929] HeapFree (in: hHeap=0x470000, dwFlags=0x0, lpMem=0x4ec470 | out: hHeap=0x470000) returned 1 [0168.929] GetCurrentThreadId () returned 0x220 [0168.929] GetCurrentThreadId () returned 0x220 [0168.929] RtlAllocateHeap (HeapHandle=0x470000, Flags=0x8, Size=0x30) returned 0x4ec470 [0168.929] RtlAllocateHeap (HeapHandle=0x470000, Flags=0x0, Size=0x10) returned 0x4bd670 [0168.929] ScreenToClient (in: hWnd=0x5011e, lpPoint=0x26f678 | out: lpPoint=0x26f678) returned 1 [0168.929] GetCapture () returned 0x0 [0168.929] GetCurrentThreadId () returned 0x220 [0168.929] HeapFree (in: hHeap=0x470000, dwFlags=0x0, lpMem=0x4ec4a8 | out: hHeap=0x470000) returned 1 [0168.929] GetCurrentThreadId () returned 0x220 [0168.929] GetCurrentThreadId () returned 0x220 [0168.929] ScreenToClient (in: hWnd=0x5011e, lpPoint=0x26f678 | out: lpPoint=0x26f678) returned 1 [0168.930] GetCapture () returned 0x0 [0168.930] GetCurrentThreadId () returned 0x220 [0168.930] HeapFree (in: hHeap=0x470000, dwFlags=0x0, lpMem=0x4ec4a8 | out: hHeap=0x470000) returned 1 [0168.930] GetCurrentThreadId () returned 0x220 [0168.930] GetCurrentThreadId () returned 0x220 [0168.930] ScreenToClient (in: hWnd=0x5011e, lpPoint=0x26f678 | out: lpPoint=0x26f678) returned 1 [0168.930] GetCurrentThreadId () returned 0x220 [0168.930] HeapFree (in: hHeap=0x470000, dwFlags=0x0, lpMem=0x4ec4a8 | out: hHeap=0x470000) returned 1 [0168.930] GetCurrentThreadId () returned 0x220 [0168.930] GetCurrentThreadId () returned 0x220 [0168.931] ScreenToClient (in: hWnd=0x5011e, lpPoint=0x26f678 | out: lpPoint=0x26f678) returned 1 [0168.931] GetCurrentThreadId () returned 0x220 [0168.931] HeapFree (in: hHeap=0x470000, dwFlags=0x0, lpMem=0x4ec4a8 | out: hHeap=0x470000) returned 1 [0168.931] GetCurrentThreadId () returned 0x220 [0168.931] GetCurrentThreadId () returned 0x220 [0168.931] HeapFree (in: hHeap=0x470000, dwFlags=0x0, lpMem=0x4c0088 | out: hHeap=0x470000) returned 1 [0168.931] HeapFree (in: hHeap=0x470000, dwFlags=0x0, lpMem=0x4c4ef0 | out: hHeap=0x470000) returned 1 [0168.931] HeapFree (in: hHeap=0x470000, dwFlags=0x0, lpMem=0x4c00b8 | out: hHeap=0x470000) returned 1 [0168.931] HeapFree (in: hHeap=0x470000, dwFlags=0x0, lpMem=0x49bac8 | out: hHeap=0x470000) returned 1 [0168.931] GetCurrentThreadId () returned 0x220 [0168.931] GetFocus () returned 0x5011e [0168.931] GetFocus () returned 0x5011e [0168.931] RtlReAllocateHeap (Heap=0x470000, Flags=0x0, Ptr=0x4b7660, Size=0xa1e) returned 0x4b7660 [0168.931] HeapFree (in: hHeap=0x470000, dwFlags=0x0, lpMem=0x0 | out: hHeap=0x470000) returned 1 [0168.931] HeapFree (in: hHeap=0x470000, dwFlags=0x0, lpMem=0x49d308 | out: hHeap=0x470000) returned 1 [0168.931] HeapFree (in: hHeap=0x470000, dwFlags=0x0, lpMem=0x4bd6b8 | out: hHeap=0x470000) returned 1 [0168.932] IUnknown:Release (This=0x4da438) returned 0x0 [0168.932] HeapFree (in: hHeap=0x470000, dwFlags=0x0, lpMem=0x4cd860 | out: hHeap=0x470000) returned 1 [0168.932] IUnknown:Release (This=0x49c4bc) returned 0xb [0168.932] IUnknown:Release (This=0x4a45b0) returned 0x2 [0168.932] IUnknown:Release (This=0x49c4bc) returned 0xa [0168.932] HeapFree (in: hHeap=0x470000, dwFlags=0x0, lpMem=0x0 | out: hHeap=0x470000) returned 1 [0168.932] HeapFree (in: hHeap=0x470000, dwFlags=0x0, lpMem=0x0 | out: hHeap=0x470000) returned 1 [0168.932] HeapFree (in: hHeap=0x470000, dwFlags=0x0, lpMem=0x4a94e0 | out: hHeap=0x470000) returned 1 [0168.932] HeapFree (in: hHeap=0x470000, dwFlags=0x0, lpMem=0x4b4bd0 | out: hHeap=0x470000) returned 1 [0168.932] HeapFree (in: hHeap=0x470000, dwFlags=0x0, lpMem=0x0 | out: hHeap=0x470000) returned 1 [0168.932] HeapFree (in: hHeap=0x470000, dwFlags=0x0, lpMem=0x0 | out: hHeap=0x470000) returned 1 [0168.933] HeapFree (in: hHeap=0x470000, dwFlags=0x0, lpMem=0x0 | out: hHeap=0x470000) returned 1 [0168.933] IUnknown:Release (This=0x49c4bc) returned 0x9 [0168.933] HeapFree (in: hHeap=0x470000, dwFlags=0x0, lpMem=0x0 | out: hHeap=0x470000) returned 1 [0168.933] HeapFree (in: hHeap=0x470000, dwFlags=0x0, lpMem=0x0 | out: hHeap=0x470000) returned 1 [0168.933] HeapFree (in: hHeap=0x470000, dwFlags=0x0, lpMem=0x0 | out: hHeap=0x470000) returned 1 [0168.933] HeapFree (in: hHeap=0x470000, dwFlags=0x0, lpMem=0x0 | out: hHeap=0x470000) returned 1 [0168.933] HeapFree (in: hHeap=0x470000, dwFlags=0x0, lpMem=0x0 | out: hHeap=0x470000) returned 1 [0168.933] HeapFree (in: hHeap=0x470000, dwFlags=0x0, lpMem=0x0 | out: hHeap=0x470000) returned 1 [0168.933] IUnknown:Release (This=0x49c4bc) returned 0x8 [0168.933] HeapFree (in: hHeap=0x470000, dwFlags=0x0, lpMem=0x0 | out: hHeap=0x470000) returned 1 [0168.933] HeapFree (in: hHeap=0x470000, dwFlags=0x0, lpMem=0x0 | out: hHeap=0x470000) returned 1 [0168.933] IUnknown:Release (This=0x49c15c) returned 0x6 [0168.933] HeapFree (in: hHeap=0x470000, dwFlags=0x0, lpMem=0x0 | out: hHeap=0x470000) returned 1 [0168.933] IUnknown:Release (This=0x4b3208) returned 0x1 [0168.933] IUnknown:Release (This=0x4b3208) returned 0x0 [0168.933] HeapFree (in: hHeap=0x470000, dwFlags=0x0, lpMem=0x4b25e8 | out: hHeap=0x470000) returned 1 [0168.933] HeapFree (in: hHeap=0x470000, dwFlags=0x0, lpMem=0x0 | out: hHeap=0x470000) returned 1 [0168.933] HeapFree (in: hHeap=0x470000, dwFlags=0x0, lpMem=0x0 | out: hHeap=0x470000) returned 1 [0168.933] IUnknown:Release (This=0x49c15c) returned 0x3 [0168.933] HeapFree (in: hHeap=0x470000, dwFlags=0x0, lpMem=0x4b2cd8 | out: hHeap=0x470000) returned 1 [0168.933] HeapFree (in: hHeap=0x470000, dwFlags=0x0, lpMem=0x4b2b20 | out: hHeap=0x470000) returned 1 [0168.933] HeapFree (in: hHeap=0x470000, dwFlags=0x0, lpMem=0x4b4988 | out: hHeap=0x470000) returned 1 [0168.933] HeapFree (in: hHeap=0x470000, dwFlags=0x0, lpMem=0x4bc2e8 | out: hHeap=0x470000) returned 1 [0168.933] HeapFree (in: hHeap=0x470000, dwFlags=0x0, lpMem=0x4ba670 | out: hHeap=0x470000) returned 1 [0168.933] HeapFree (in: hHeap=0x470000, dwFlags=0x0, lpMem=0x4b3f30 | out: hHeap=0x470000) returned 1 [0168.933] HeapFree (in: hHeap=0x470000, dwFlags=0x0, lpMem=0x0 | out: hHeap=0x470000) returned 1 [0168.933] HeapFree (in: hHeap=0x470000, dwFlags=0x0, lpMem=0x0 | out: hHeap=0x470000) returned 1 [0168.934] HeapFree (in: hHeap=0x470000, dwFlags=0x0, lpMem=0x0 | out: hHeap=0x470000) returned 1 [0168.934] HeapFree (in: hHeap=0x470000, dwFlags=0x0, lpMem=0x0 | out: hHeap=0x470000) returned 1 [0168.934] HeapFree (in: hHeap=0x470000, dwFlags=0x0, lpMem=0x4bcb10 | out: hHeap=0x470000) returned 1 [0168.934] HeapFree (in: hHeap=0x470000, dwFlags=0x0, lpMem=0x0 | out: hHeap=0x470000) returned 1 [0168.934] HeapFree (in: hHeap=0x470000, dwFlags=0x0, lpMem=0x0 | out: hHeap=0x470000) returned 1 [0168.934] HeapFree (in: hHeap=0x470000, dwFlags=0x0, lpMem=0x4b4ac0 | out: hHeap=0x470000) returned 1 [0168.934] HeapFree (in: hHeap=0x470000, dwFlags=0x0, lpMem=0x4aedd0 | out: hHeap=0x470000) returned 1 [0168.934] GetCurrentThreadId () returned 0x220 [0168.934] GetCurrentThreadId () returned 0x220 [0168.934] GetCurrentThreadId () returned 0x220 [0168.934] ScreenToClient (in: hWnd=0x5011e, lpPoint=0x26f900 | out: lpPoint=0x26f900) returned 1 [0168.934] GetCurrentThreadId () returned 0x220 [0168.934] HeapFree (in: hHeap=0x470000, dwFlags=0x0, lpMem=0x4c7708 | out: hHeap=0x470000) returned 1 [0168.934] GetCurrentThreadId () returned 0x220 [0168.934] GetCurrentThreadId () returned 0x220 [0168.934] GetFocus () returned 0x5011e [0168.934] RtlAllocateHeap (HeapHandle=0x470000, Flags=0x0, Size=0xc) returned 0x4b25e8 [0168.934] NotifyWinEvent (event=0x8005, hwnd=0x5011e, idObject=1, idChild=0) [0168.935] GetCurrentThreadId () returned 0x220 [0168.935] LoadStringW (in: hInstance=0x74650000, uID=0x1fe9, lpBuffer=0x26f638, cchBufferMax=512 | out: lpBuffer="Done") returned 0x4 [0168.935] HeapFree (in: hHeap=0x470000, dwFlags=0x0, lpMem=0x4826f0 | out: hHeap=0x470000) returned 1 [0168.935] HeapFree (in: hHeap=0x470000, dwFlags=0x0, lpMem=0x4b21b8 | out: hHeap=0x470000) returned 1 [0168.935] ScreenToClient (in: hWnd=0x5011e, lpPoint=0x26f3a8 | out: lpPoint=0x26f3a8) returned 1 [0168.935] RtlAllocateHeap (HeapHandle=0x470000, Flags=0x8, Size=0x30) returned 0x4c7708 [0168.935] GetCurrentThreadId () returned 0x220 [0168.935] HeapFree (in: hHeap=0x470000, dwFlags=0x0, lpMem=0x4c7708 | out: hHeap=0x470000) returned 1 [0168.935] GetCurrentThreadId () returned 0x220 [0168.935] GetFocus () returned 0x5011e [0168.935] HeapFree (in: hHeap=0x470000, dwFlags=0x0, lpMem=0x0 | out: hHeap=0x470000) returned 1 [0168.936] ScreenToClient (in: hWnd=0x5011e, lpPoint=0x26f3d8 | out: lpPoint=0x26f3d8) returned 1 [0168.936] RtlAllocateHeap (HeapHandle=0x470000, Flags=0x8, Size=0x30) returned 0x4c7708 [0168.936] HeapFree (in: hHeap=0x470000, dwFlags=0x0, lpMem=0x4c7708 | out: hHeap=0x470000) returned 1 [0168.936] ScreenToClient (in: hWnd=0x5011e, lpPoint=0x26f3c0 | out: lpPoint=0x26f3c0) returned 1 [0168.936] RtlAllocateHeap (HeapHandle=0x470000, Flags=0x8, Size=0x30) returned 0x4c7708 [0168.936] GetCurrentThreadId () returned 0x220 [0168.936] HeapFree (in: hHeap=0x470000, dwFlags=0x0, lpMem=0x4c7708 | out: hHeap=0x470000) returned 1 [0168.936] GetCurrentThreadId () returned 0x220 [0168.936] IsWinEventHookInstalled (event=0x8005) returned 0 [0168.936] GetCurrentThreadId () returned 0x220 [0168.936] ScreenToClient (in: hWnd=0x5011e, lpPoint=0x26f8c0 | out: lpPoint=0x26f8c0) returned 1 [0168.937] RtlAllocateHeap (HeapHandle=0x470000, Flags=0x8, Size=0x30) returned 0x4c7708 [0168.937] ScreenToClient (in: hWnd=0x5011e, lpPoint=0x26f8a0 | out: lpPoint=0x26f8a0) returned 1 [0168.937] RtlAllocateHeap (HeapHandle=0x470000, Flags=0x8, Size=0x30) returned 0x4c7708 [0168.937] GetCurrentThreadId () returned 0x220 [0168.937] IsWinEventHookInstalled (event=0x8005) returned 0 [0168.937] GetCurrentThreadId () returned 0x220 [0168.937] GetMessageW (in: lpMsg=0x26fbd4, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x26fbd4) returned 1 [0168.937] NtdllDefWindowProc_W () returned 0x0 [0168.937] NtdllDefWindowProc_W () returned 0xe01c7 [0168.938] NtdllDefWindowProc_W () returned 0xe01c7 [0168.938] TranslateMessage (lpMsg=0x26fbd4) returned 0 [0168.938] DispatchMessageW (lpMsg=0x26fbd4) returned 0x0 [0168.938] GetMessageW (in: lpMsg=0x26fbd4, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x26fbd4) returned 1 [0168.938] TranslateMessage (lpMsg=0x26fbd4) returned 0 [0168.938] DispatchMessageW (lpMsg=0x26fbd4) returned 0x0 [0168.938] GetWindowLongW (hWnd=0x5011e, nIndex=-21) returned 4858488 [0168.938] ScreenToClient (in: hWnd=0x5011e, lpPoint=0x26f980 | out: lpPoint=0x26f980) returned 1 [0168.938] GetMessageTime () returned 229056 [0168.938] GetMessagePos () returned 0x15802ce [0168.938] GetCapture () returned 0x0 [0168.938] IntersectRect (in: lprcDst=0x26f370, lprcSrc1=0x26f370, lprcSrc2=0x26f400 | out: lprcDst=0x26f370) returned 1 [0168.938] IntersectRect (in: lprcDst=0x26f12c, lprcSrc1=0x26f12c, lprcSrc2=0x26f0fc | out: lprcDst=0x26f12c) returned 1 [0168.938] IntersectRect (in: lprcDst=0x26f410, lprcSrc1=0x26f410, lprcSrc2=0x26f11c | out: lprcDst=0x26f410) returned 1 [0168.938] HeapFree (in: hHeap=0x470000, dwFlags=0x0, lpMem=0x0 | out: hHeap=0x470000) returned 1 [0168.938] RtlAllocateHeap (HeapHandle=0x470000, Flags=0x0, Size=0x24) returned 0x4bcb10 [0168.938] IntersectRect (in: lprcDst=0x26f410, lprcSrc1=0x26f410, lprcSrc2=0x26f13c | out: lprcDst=0x26f410) returned 1 [0168.938] IntersectRect (in: lprcDst=0x26ef00, lprcSrc1=0x26ef00, lprcSrc2=0x26f400 | out: lprcDst=0x26ef00) returned 1 [0168.938] IntersectRect (in: lprcDst=0x26ef00, lprcSrc1=0x26ef00, lprcSrc2=0x26f400 | out: lprcDst=0x26ef00) returned 1 [0168.938] IntersectRect (in: lprcDst=0x26eb38, lprcSrc1=0x26eb38, lprcSrc2=0x26eb08 | out: lprcDst=0x26eb38) returned 1 [0168.938] IntersectRect (in: lprcDst=0x26f498, lprcSrc1=0x26f498, lprcSrc2=0x26eb28 | out: lprcDst=0x26f498) returned 1 [0168.939] IntersectRect (in: lprcDst=0x26ecbc, lprcSrc1=0x26ecbc, lprcSrc2=0x26ec8c | out: lprcDst=0x26ecbc) returned 1 [0168.939] IntersectRect (in: lprcDst=0x26f410, lprcSrc1=0x26f410, lprcSrc2=0x26ecac | out: lprcDst=0x26f410) returned 1 [0168.939] HeapFree (in: hHeap=0x470000, dwFlags=0x0, lpMem=0x0 | out: hHeap=0x470000) returned 1 [0168.939] RtlAllocateHeap (HeapHandle=0x470000, Flags=0x0, Size=0x24) returned 0x4e77b8 [0168.939] IntersectRect (in: lprcDst=0x26eaf8, lprcSrc1=0x26eaf8, lprcSrc2=0x26f400 | out: lprcDst=0x26eaf8) returned 1 [0168.939] IntersectRect (in: lprcDst=0x26f410, lprcSrc1=0x26f410, lprcSrc2=0x26eccc | out: lprcDst=0x26f410) returned 1 [0168.939] IntersectRect (in: lprcDst=0x26ea90, lprcSrc1=0x26ea90, lprcSrc2=0x26f400 | out: lprcDst=0x26ea90) returned 1 [0168.939] IntersectRect (in: lprcDst=0x26ea90, lprcSrc1=0x26ea90, lprcSrc2=0x26f400 | out: lprcDst=0x26ea90) returned 1 [0168.939] IntersectRect (in: lprcDst=0x26e81c, lprcSrc1=0x26e81c, lprcSrc2=0x26e6d4 | out: lprcDst=0x26e81c) returned 1 [0168.939] IntersectRect (in: lprcDst=0x26f410, lprcSrc1=0x26f410, lprcSrc2=0x26e83c | out: lprcDst=0x26f410) returned 1 [0168.939] HeapFree (in: hHeap=0x470000, dwFlags=0x0, lpMem=0x0 | out: hHeap=0x470000) returned 1 [0168.939] RtlAllocateHeap (HeapHandle=0x470000, Flags=0x0, Size=0x24) returned 0x4e7788 [0168.939] IntersectRect (in: lprcDst=0x26f410, lprcSrc1=0x26f410, lprcSrc2=0x26e85c | out: lprcDst=0x26f410) returned 1 [0168.939] IntersectRect (in: lprcDst=0x26e620, lprcSrc1=0x26e620, lprcSrc2=0x26f400 | out: lprcDst=0x26e620) returned 1 [0168.939] IntersectRect (in: lprcDst=0x26e620, lprcSrc1=0x26e620, lprcSrc2=0x26f400 | out: lprcDst=0x26e620) returned 1 [0168.939] IntersectRect (in: lprcDst=0x26e3ac, lprcSrc1=0x26e3ac, lprcSrc2=0x26e264 | out: lprcDst=0x26e3ac) returned 1 [0168.939] IntersectRect (in: lprcDst=0x26f410, lprcSrc1=0x26f410, lprcSrc2=0x26e3cc | out: lprcDst=0x26f410) returned 1 [0168.939] HeapFree (in: hHeap=0x470000, dwFlags=0x0, lpMem=0x0 | out: hHeap=0x470000) returned 1 [0168.939] RtlAllocateHeap (HeapHandle=0x470000, Flags=0x0, Size=0x24) returned 0x4e7848 [0168.939] IntersectRect (in: lprcDst=0x26f410, lprcSrc1=0x26f410, lprcSrc2=0x26e3ec | out: lprcDst=0x26f410) returned 1 [0168.939] IntersectRect (in: lprcDst=0x26e1b0, lprcSrc1=0x26e1b0, lprcSrc2=0x26f400 | out: lprcDst=0x26e1b0) returned 1 [0168.939] IntersectRect (in: lprcDst=0x26e1b0, lprcSrc1=0x26e1b0, lprcSrc2=0x26f400 | out: lprcDst=0x26e1b0) returned 0 [0168.939] IntersectRect (in: lprcDst=0x26e1b0, lprcSrc1=0x26e1b0, lprcSrc2=0x26f400 | out: lprcDst=0x26e1b0) returned 1 [0168.939] IntersectRect (in: lprcDst=0x26e1b0, lprcSrc1=0x26e1b0, lprcSrc2=0x26f400 | out: lprcDst=0x26e1b0) returned 1 [0168.939] IntersectRect (in: lprcDst=0x26e1b0, lprcSrc1=0x26e1b0, lprcSrc2=0x26f400 | out: lprcDst=0x26e1b0) returned 1 [0168.939] IntersectRect (in: lprcDst=0x26e1b0, lprcSrc1=0x26e1b0, lprcSrc2=0x26f400 | out: lprcDst=0x26e1b0) returned 1 [0168.939] IntersectRect (in: lprcDst=0x26dff4, lprcSrc1=0x26dff4, lprcSrc2=0x26de90 | out: lprcDst=0x26dff4) returned 1 [0168.939] HeapFree (in: hHeap=0x470000, dwFlags=0x0, lpMem=0x0 | out: hHeap=0x470000) returned 1 [0168.939] RtlAllocateHeap (HeapHandle=0x470000, Flags=0x0, Size=0x24) returned 0x4e7878 [0168.939] IntersectRect (in: lprcDst=0x26f410, lprcSrc1=0x26f410, lprcSrc2=0x26dfe4 | out: lprcDst=0x26f410) returned 1 [0168.939] IntersectRect (in: lprcDst=0x26dea0, lprcSrc1=0x26dea0, lprcSrc2=0x26f400 | out: lprcDst=0x26dea0) returned 1 [0168.939] IntersectRect (in: lprcDst=0x26f410, lprcSrc1=0x26f410, lprcSrc2=0x26e004 | out: lprcDst=0x26f410) returned 1 [0168.941] PostMessageW (hWnd=0x7011a, Msg=0x8002, wParam=0x0, lParam=0x0) returned 1 [0168.941] LsSetDoc () returned 0x0 [0168.941] LsCreateLine () returned 0x0 [0168.941] HeapFree (in: hHeap=0x470000, dwFlags=0x0, lpMem=0x0 | out: hHeap=0x470000) returned 1 [0168.942] LsDestroyLine () returned 0x0 [0168.942] HeapFree (in: hHeap=0x470000, dwFlags=0x0, lpMem=0x0 | out: hHeap=0x470000) returned 1 [0168.943] PtInRect (lprc=0x26dd44, pt=0xe6aa) returned 1 [0168.943] HeapFree (in: hHeap=0x470000, dwFlags=0x0, lpMem=0x4e7878 | out: hHeap=0x470000) returned 1 [0168.943] IntersectRect (in: lprcDst=0x26e270, lprcSrc1=0x26e270, lprcSrc2=0x26f400 | out: lprcDst=0x26e270) returned 1 [0168.943] HeapFree (in: hHeap=0x470000, dwFlags=0x0, lpMem=0x4e7848 | out: hHeap=0x470000) returned 1 [0168.943] HeapFree (in: hHeap=0x470000, dwFlags=0x0, lpMem=0x4e7788 | out: hHeap=0x470000) returned 1 [0168.943] HeapFree (in: hHeap=0x470000, dwFlags=0x0, lpMem=0x4e77b8 | out: hHeap=0x470000) returned 1 [0168.943] HeapFree (in: hHeap=0x470000, dwFlags=0x0, lpMem=0x4bcb10 | out: hHeap=0x470000) returned 1 [0168.943] HeapFree (in: hHeap=0x470000, dwFlags=0x0, lpMem=0x0 | out: hHeap=0x470000) returned 1 [0168.944] RtlAllocateHeap (HeapHandle=0x470000, Flags=0x0, Size=0x40) returned 0x4c89f8 [0168.944] SetTimer (hWnd=0x7011a, nIDEvent=0x2000, uElapse=0x12c, lpTimerFunc=0x0) returned 0x2000 [0168.944] PtInRect (lprc=0x26f5ac, pt=0xe6aa) returned 1 [0168.944] LoadCursorA (hInstance=0x0, lpCursorName=0x7f00) returned 0x10003 [0168.944] GetCursor () returned 0x10007 [0168.944] ShowCursor (bShow=0) returned -1 [0168.944] SetCursor (hCursor=0x10003) returned 0x10007 [0168.944] ShowCursor (bShow=1) returned 0 [0168.945] GetCurrentThreadId () returned 0x220 [0168.945] GetMessageW (in: lpMsg=0x26fbd4, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x26fbd4) returned 1 [0168.945] TranslateMessage (lpMsg=0x26fbd4) returned 0 [0168.945] DispatchMessageW (lpMsg=0x26fbd4) returned 0x0 [0168.945] GetWindowLongW (hWnd=0x5011e, nIndex=-21) returned 4858488 [0168.945] ScreenToClient (in: hWnd=0x5011e, lpPoint=0x26f980 | out: lpPoint=0x26f980) returned 1 [0168.945] GetMessageTime () returned 229071 [0168.945] GetMessagePos () returned 0x15802ce [0168.945] GetCapture () returned 0x0 [0168.945] GetCurrentThreadId () returned 0x220 [0168.945] GetCurrentThreadId () returned 0x220 [0168.945] GetCurrentThreadId () returned 0x220 [0168.945] IntersectRect (in: lprcDst=0x26f370, lprcSrc1=0x26f370, lprcSrc2=0x26f400 | out: lprcDst=0x26f370) returned 1 [0168.945] IntersectRect (in: lprcDst=0x26f12c, lprcSrc1=0x26f12c, lprcSrc2=0x26f0fc | out: lprcDst=0x26f12c) returned 1 [0168.945] IntersectRect (in: lprcDst=0x26f410, lprcSrc1=0x26f410, lprcSrc2=0x26f11c | out: lprcDst=0x26f410) returned 1 [0168.945] HeapFree (in: hHeap=0x470000, dwFlags=0x0, lpMem=0x0 | out: hHeap=0x470000) returned 1 [0168.945] RtlAllocateHeap (HeapHandle=0x470000, Flags=0x0, Size=0x24) returned 0x4bcb10 [0168.945] IntersectRect (in: lprcDst=0x26f410, lprcSrc1=0x26f410, lprcSrc2=0x26f13c | out: lprcDst=0x26f410) returned 1 [0168.945] IntersectRect (in: lprcDst=0x26ef00, lprcSrc1=0x26ef00, lprcSrc2=0x26f400 | out: lprcDst=0x26ef00) returned 1 [0168.946] IntersectRect (in: lprcDst=0x26ef00, lprcSrc1=0x26ef00, lprcSrc2=0x26f400 | out: lprcDst=0x26ef00) returned 1 [0168.946] IntersectRect (in: lprcDst=0x26eb38, lprcSrc1=0x26eb38, lprcSrc2=0x26eb08 | out: lprcDst=0x26eb38) returned 1 [0168.946] IntersectRect (in: lprcDst=0x26f498, lprcSrc1=0x26f498, lprcSrc2=0x26eb28 | out: lprcDst=0x26f498) returned 1 [0168.946] IntersectRect (in: lprcDst=0x26ecbc, lprcSrc1=0x26ecbc, lprcSrc2=0x26ec8c | out: lprcDst=0x26ecbc) returned 1 [0168.946] IntersectRect (in: lprcDst=0x26f410, lprcSrc1=0x26f410, lprcSrc2=0x26ecac | out: lprcDst=0x26f410) returned 1 [0168.946] HeapFree (in: hHeap=0x470000, dwFlags=0x0, lpMem=0x0 | out: hHeap=0x470000) returned 1 [0168.946] RtlAllocateHeap (HeapHandle=0x470000, Flags=0x0, Size=0x24) returned 0x4e77b8 [0168.946] IntersectRect (in: lprcDst=0x26eaf8, lprcSrc1=0x26eaf8, lprcSrc2=0x26f400 | out: lprcDst=0x26eaf8) returned 1 [0168.946] IntersectRect (in: lprcDst=0x26f410, lprcSrc1=0x26f410, lprcSrc2=0x26eccc | out: lprcDst=0x26f410) returned 1 [0168.946] IntersectRect (in: lprcDst=0x26ea90, lprcSrc1=0x26ea90, lprcSrc2=0x26f400 | out: lprcDst=0x26ea90) returned 1 [0168.946] IntersectRect (in: lprcDst=0x26ea90, lprcSrc1=0x26ea90, lprcSrc2=0x26f400 | out: lprcDst=0x26ea90) returned 1 [0168.946] IntersectRect (in: lprcDst=0x26e81c, lprcSrc1=0x26e81c, lprcSrc2=0x26e6d4 | out: lprcDst=0x26e81c) returned 1 [0168.946] IntersectRect (in: lprcDst=0x26f410, lprcSrc1=0x26f410, lprcSrc2=0x26e83c | out: lprcDst=0x26f410) returned 1 [0168.946] HeapFree (in: hHeap=0x470000, dwFlags=0x0, lpMem=0x0 | out: hHeap=0x470000) returned 1 [0168.946] RtlAllocateHeap (HeapHandle=0x470000, Flags=0x0, Size=0x24) returned 0x4e7788 [0168.946] IntersectRect (in: lprcDst=0x26f410, lprcSrc1=0x26f410, lprcSrc2=0x26e85c | out: lprcDst=0x26f410) returned 1 [0168.946] IntersectRect (in: lprcDst=0x26e620, lprcSrc1=0x26e620, lprcSrc2=0x26f400 | out: lprcDst=0x26e620) returned 1 [0168.946] IntersectRect (in: lprcDst=0x26e620, lprcSrc1=0x26e620, lprcSrc2=0x26f400 | out: lprcDst=0x26e620) returned 1 [0168.946] IntersectRect (in: lprcDst=0x26e3ac, lprcSrc1=0x26e3ac, lprcSrc2=0x26e264 | out: lprcDst=0x26e3ac) returned 1 [0168.946] IntersectRect (in: lprcDst=0x26f410, lprcSrc1=0x26f410, lprcSrc2=0x26e3cc | out: lprcDst=0x26f410) returned 1 [0168.946] HeapFree (in: hHeap=0x470000, dwFlags=0x0, lpMem=0x0 | out: hHeap=0x470000) returned 1 [0168.946] RtlAllocateHeap (HeapHandle=0x470000, Flags=0x0, Size=0x24) returned 0x4e7848 [0168.946] IntersectRect (in: lprcDst=0x26f410, lprcSrc1=0x26f410, lprcSrc2=0x26e3ec | out: lprcDst=0x26f410) returned 1 [0168.946] IntersectRect (in: lprcDst=0x26e1b0, lprcSrc1=0x26e1b0, lprcSrc2=0x26f400 | out: lprcDst=0x26e1b0) returned 1 [0168.946] IntersectRect (in: lprcDst=0x26e1b0, lprcSrc1=0x26e1b0, lprcSrc2=0x26f400 | out: lprcDst=0x26e1b0) returned 0 [0168.946] IntersectRect (in: lprcDst=0x26e1b0, lprcSrc1=0x26e1b0, lprcSrc2=0x26f400 | out: lprcDst=0x26e1b0) returned 1 [0168.946] IntersectRect (in: lprcDst=0x26e1b0, lprcSrc1=0x26e1b0, lprcSrc2=0x26f400 | out: lprcDst=0x26e1b0) returned 1 [0168.946] IntersectRect (in: lprcDst=0x26e1b0, lprcSrc1=0x26e1b0, lprcSrc2=0x26f400 | out: lprcDst=0x26e1b0) returned 1 [0168.946] IntersectRect (in: lprcDst=0x26e1b0, lprcSrc1=0x26e1b0, lprcSrc2=0x26f400 | out: lprcDst=0x26e1b0) returned 1 [0168.946] IntersectRect (in: lprcDst=0x26dff4, lprcSrc1=0x26dff4, lprcSrc2=0x26de90 | out: lprcDst=0x26dff4) returned 1 [0168.946] HeapFree (in: hHeap=0x470000, dwFlags=0x0, lpMem=0x0 | out: hHeap=0x470000) returned 1 [0168.946] RtlAllocateHeap (HeapHandle=0x470000, Flags=0x0, Size=0x24) returned 0x4e7878 [0168.946] IntersectRect (in: lprcDst=0x26f410, lprcSrc1=0x26f410, lprcSrc2=0x26dfe4 | out: lprcDst=0x26f410) returned 1 [0168.946] IntersectRect (in: lprcDst=0x26dea0, lprcSrc1=0x26dea0, lprcSrc2=0x26f400 | out: lprcDst=0x26dea0) returned 1 [0168.946] IntersectRect (in: lprcDst=0x26f410, lprcSrc1=0x26f410, lprcSrc2=0x26e004 | out: lprcDst=0x26f410) returned 1 [0168.947] LsSetDoc () returned 0x0 [0168.947] LsCreateLine () returned 0x0 [0168.947] HeapFree (in: hHeap=0x470000, dwFlags=0x0, lpMem=0x0 | out: hHeap=0x470000) returned 1 [0168.947] LsDestroyLine () returned 0x0 [0168.947] HeapFree (in: hHeap=0x470000, dwFlags=0x0, lpMem=0x0 | out: hHeap=0x470000) returned 1 [0168.947] PtInRect (lprc=0x26dd44, pt=0xe6aa) returned 1 [0168.947] HeapFree (in: hHeap=0x470000, dwFlags=0x0, lpMem=0x4e7878 | out: hHeap=0x470000) returned 1 [0168.947] IntersectRect (in: lprcDst=0x26e270, lprcSrc1=0x26e270, lprcSrc2=0x26f400 | out: lprcDst=0x26e270) returned 1 [0168.947] HeapFree (in: hHeap=0x470000, dwFlags=0x0, lpMem=0x4e7848 | out: hHeap=0x470000) returned 1 [0168.947] HeapFree (in: hHeap=0x470000, dwFlags=0x0, lpMem=0x4e7788 | out: hHeap=0x470000) returned 1 [0168.947] HeapFree (in: hHeap=0x470000, dwFlags=0x0, lpMem=0x4e77b8 | out: hHeap=0x470000) returned 1 [0168.947] HeapFree (in: hHeap=0x470000, dwFlags=0x0, lpMem=0x4bcb10 | out: hHeap=0x470000) returned 1 [0168.947] HeapFree (in: hHeap=0x470000, dwFlags=0x0, lpMem=0x0 | out: hHeap=0x470000) returned 1 [0168.948] PtInRect (lprc=0x26f5ac, pt=0xe6aa) returned 1 [0168.948] LoadCursorA (hInstance=0x0, lpCursorName=0x7f00) returned 0x10003 [0168.948] GetCursor () returned 0x10003 [0168.948] GetCurrentThreadId () returned 0x220 [0168.948] GetMessageW (in: lpMsg=0x26fbd4, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x26fbd4) returned 1 [0168.948] TranslateMessage (lpMsg=0x26fbd4) returned 0 [0168.948] DispatchMessageW (lpMsg=0x26fbd4) returned 0x0 [0168.948] GetWindowLongW (hWnd=0x5011e, nIndex=-21) returned 4858488 [0168.948] ScreenToClient (in: hWnd=0x5011e, lpPoint=0x26f980 | out: lpPoint=0x26f980) returned 1 [0168.948] GetMessageTime () returned 229087 [0168.949] GetMessagePos () returned 0x15802ce [0168.949] GetCapture () returned 0x0 [0168.949] GetCurrentThreadId () returned 0x220 [0168.949] GetCurrentThreadId () returned 0x220 [0168.949] GetCurrentThreadId () returned 0x220 [0168.949] IntersectRect (in: lprcDst=0x26f370, lprcSrc1=0x26f370, lprcSrc2=0x26f400 | out: lprcDst=0x26f370) returned 1 [0168.949] IntersectRect (in: lprcDst=0x26f12c, lprcSrc1=0x26f12c, lprcSrc2=0x26f0fc | out: lprcDst=0x26f12c) returned 1 [0168.949] IntersectRect (in: lprcDst=0x26f410, lprcSrc1=0x26f410, lprcSrc2=0x26f11c | out: lprcDst=0x26f410) returned 1 [0168.949] HeapFree (in: hHeap=0x470000, dwFlags=0x0, lpMem=0x0 | out: hHeap=0x470000) returned 1 [0168.949] RtlAllocateHeap (HeapHandle=0x470000, Flags=0x0, Size=0x24) returned 0x4bcb10 [0168.949] IntersectRect (in: lprcDst=0x26f410, lprcSrc1=0x26f410, lprcSrc2=0x26f13c | out: lprcDst=0x26f410) returned 1 [0168.949] IntersectRect (in: lprcDst=0x26ef00, lprcSrc1=0x26ef00, lprcSrc2=0x26f400 | out: lprcDst=0x26ef00) returned 1 [0168.949] IntersectRect (in: lprcDst=0x26ef00, lprcSrc1=0x26ef00, lprcSrc2=0x26f400 | out: lprcDst=0x26ef00) returned 1 [0168.949] IntersectRect (in: lprcDst=0x26eb38, lprcSrc1=0x26eb38, lprcSrc2=0x26eb08 | out: lprcDst=0x26eb38) returned 1 [0168.949] IntersectRect (in: lprcDst=0x26f498, lprcSrc1=0x26f498, lprcSrc2=0x26eb28 | out: lprcDst=0x26f498) returned 1 [0168.949] IntersectRect (in: lprcDst=0x26ecbc, lprcSrc1=0x26ecbc, lprcSrc2=0x26ec8c | out: lprcDst=0x26ecbc) returned 1 [0168.949] IntersectRect (in: lprcDst=0x26f410, lprcSrc1=0x26f410, lprcSrc2=0x26ecac | out: lprcDst=0x26f410) returned 1 [0168.949] HeapFree (in: hHeap=0x470000, dwFlags=0x0, lpMem=0x0 | out: hHeap=0x470000) returned 1 [0168.949] RtlAllocateHeap (HeapHandle=0x470000, Flags=0x0, Size=0x24) returned 0x4e77b8 [0168.949] IntersectRect (in: lprcDst=0x26eaf8, lprcSrc1=0x26eaf8, lprcSrc2=0x26f400 | out: lprcDst=0x26eaf8) returned 1 [0168.949] IntersectRect (in: lprcDst=0x26f410, lprcSrc1=0x26f410, lprcSrc2=0x26eccc | out: lprcDst=0x26f410) returned 1 [0168.949] IntersectRect (in: lprcDst=0x26ea90, lprcSrc1=0x26ea90, lprcSrc2=0x26f400 | out: lprcDst=0x26ea90) returned 1 [0168.949] IntersectRect (in: lprcDst=0x26ea90, lprcSrc1=0x26ea90, lprcSrc2=0x26f400 | out: lprcDst=0x26ea90) returned 1 [0168.949] IntersectRect (in: lprcDst=0x26e81c, lprcSrc1=0x26e81c, lprcSrc2=0x26e6d4 | out: lprcDst=0x26e81c) returned 1 [0168.949] IntersectRect (in: lprcDst=0x26f410, lprcSrc1=0x26f410, lprcSrc2=0x26e83c | out: lprcDst=0x26f410) returned 1 [0168.949] HeapFree (in: hHeap=0x470000, dwFlags=0x0, lpMem=0x0 | out: hHeap=0x470000) returned 1 [0168.949] RtlAllocateHeap (HeapHandle=0x470000, Flags=0x0, Size=0x24) returned 0x4e7788 [0168.949] IntersectRect (in: lprcDst=0x26f410, lprcSrc1=0x26f410, lprcSrc2=0x26e85c | out: lprcDst=0x26f410) returned 1 [0168.949] IntersectRect (in: lprcDst=0x26e620, lprcSrc1=0x26e620, lprcSrc2=0x26f400 | out: lprcDst=0x26e620) returned 1 [0168.949] IntersectRect (in: lprcDst=0x26e620, lprcSrc1=0x26e620, lprcSrc2=0x26f400 | out: lprcDst=0x26e620) returned 1 [0168.949] IntersectRect (in: lprcDst=0x26e3ac, lprcSrc1=0x26e3ac, lprcSrc2=0x26e264 | out: lprcDst=0x26e3ac) returned 1 [0168.949] IntersectRect (in: lprcDst=0x26f410, lprcSrc1=0x26f410, lprcSrc2=0x26e3cc | out: lprcDst=0x26f410) returned 1 [0168.949] HeapFree (in: hHeap=0x470000, dwFlags=0x0, lpMem=0x0 | out: hHeap=0x470000) returned 1 [0168.949] RtlAllocateHeap (HeapHandle=0x470000, Flags=0x0, Size=0x24) returned 0x4e7848 [0168.949] IntersectRect (in: lprcDst=0x26f410, lprcSrc1=0x26f410, lprcSrc2=0x26e3ec | out: lprcDst=0x26f410) returned 1 [0168.949] IntersectRect (in: lprcDst=0x26e1b0, lprcSrc1=0x26e1b0, lprcSrc2=0x26f400 | out: lprcDst=0x26e1b0) returned 1 [0168.949] IntersectRect (in: lprcDst=0x26e1b0, lprcSrc1=0x26e1b0, lprcSrc2=0x26f400 | out: lprcDst=0x26e1b0) returned 0 [0168.949] IntersectRect (in: lprcDst=0x26e1b0, lprcSrc1=0x26e1b0, lprcSrc2=0x26f400 | out: lprcDst=0x26e1b0) returned 1 [0168.949] IntersectRect (in: lprcDst=0x26e1b0, lprcSrc1=0x26e1b0, lprcSrc2=0x26f400 | out: lprcDst=0x26e1b0) returned 1 [0168.950] IntersectRect (in: lprcDst=0x26e1b0, lprcSrc1=0x26e1b0, lprcSrc2=0x26f400 | out: lprcDst=0x26e1b0) returned 1 [0168.950] IntersectRect (in: lprcDst=0x26e1b0, lprcSrc1=0x26e1b0, lprcSrc2=0x26f400 | out: lprcDst=0x26e1b0) returned 1 [0168.950] IntersectRect (in: lprcDst=0x26dff4, lprcSrc1=0x26dff4, lprcSrc2=0x26de90 | out: lprcDst=0x26dff4) returned 1 [0168.950] HeapFree (in: hHeap=0x470000, dwFlags=0x0, lpMem=0x0 | out: hHeap=0x470000) returned 1 [0168.950] RtlAllocateHeap (HeapHandle=0x470000, Flags=0x0, Size=0x24) returned 0x4e7878 [0168.950] IntersectRect (in: lprcDst=0x26f410, lprcSrc1=0x26f410, lprcSrc2=0x26dfe4 | out: lprcDst=0x26f410) returned 1 [0168.950] IntersectRect (in: lprcDst=0x26dea0, lprcSrc1=0x26dea0, lprcSrc2=0x26f400 | out: lprcDst=0x26dea0) returned 1 [0168.950] IntersectRect (in: lprcDst=0x26f410, lprcSrc1=0x26f410, lprcSrc2=0x26e004 | out: lprcDst=0x26f410) returned 1 [0168.950] LsSetDoc () returned 0x0 [0168.950] LsCreateLine () returned 0x0 [0168.950] HeapFree (in: hHeap=0x470000, dwFlags=0x0, lpMem=0x0 | out: hHeap=0x470000) returned 1 [0168.950] LsDestroyLine () returned 0x0 [0168.950] HeapFree (in: hHeap=0x470000, dwFlags=0x0, lpMem=0x0 | out: hHeap=0x470000) returned 1 [0168.951] PtInRect (lprc=0x26dd44, pt=0xe6aa) returned 1 [0168.951] HeapFree (in: hHeap=0x470000, dwFlags=0x0, lpMem=0x4e7878 | out: hHeap=0x470000) returned 1 [0168.951] IntersectRect (in: lprcDst=0x26e270, lprcSrc1=0x26e270, lprcSrc2=0x26f400 | out: lprcDst=0x26e270) returned 1 [0168.951] HeapFree (in: hHeap=0x470000, dwFlags=0x0, lpMem=0x4e7848 | out: hHeap=0x470000) returned 1 [0168.951] HeapFree (in: hHeap=0x470000, dwFlags=0x0, lpMem=0x4e7788 | out: hHeap=0x470000) returned 1 [0168.951] HeapFree (in: hHeap=0x470000, dwFlags=0x0, lpMem=0x4e77b8 | out: hHeap=0x470000) returned 1 [0168.951] HeapFree (in: hHeap=0x470000, dwFlags=0x0, lpMem=0x4bcb10 | out: hHeap=0x470000) returned 1 [0168.951] HeapFree (in: hHeap=0x470000, dwFlags=0x0, lpMem=0x0 | out: hHeap=0x470000) returned 1 [0168.951] PtInRect (lprc=0x26f5ac, pt=0xe6aa) returned 1 [0168.951] LoadCursorA (hInstance=0x0, lpCursorName=0x7f00) returned 0x10003 [0168.951] GetCursor () returned 0x10003 [0168.951] GetCurrentThreadId () returned 0x220 [0168.951] GetMessageW (in: lpMsg=0x26fbd4, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x26fbd4) returned 1 [0168.951] TranslateMessage (lpMsg=0x26fbd4) returned 0 [0168.951] DispatchMessageW (lpMsg=0x26fbd4) returned 0x0 [0168.952] GetCurrentThreadId () returned 0x220 [0168.952] GetCurrentThreadId () returned 0x220 [0168.952] GetCurrentThreadId () returned 0x220 [0168.952] GetMessageW (in: lpMsg=0x26fbd4, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x26fbd4) returned 1 [0168.952] GetWindowLongW (hWnd=0x5011e, nIndex=-21) returned 4858488 [0168.952] GetClientRect (in: hWnd=0x5011e, lpRect=0x26f878 | out: lpRect=0x26f878) returned 1 [0168.952] ScreenToClient (in: hWnd=0x5011e, lpPoint=0x26f888 | out: lpPoint=0x26f888) returned 1 [0168.952] PtInRect (lprc=0x26f878, pt=0x294) returned 1 [0168.952] GetCurrentThreadId () returned 0x220 [0168.952] GetWindowLongW (hWnd=0x5011e, nIndex=-21) returned 4858488 [0168.952] ScreenToClient (in: hWnd=0x5011e, lpPoint=0x26f8f8 | out: lpPoint=0x26f8f8) returned 1 [0168.952] GetMessageTime () returned 230631 [0168.952] GetMessagePos () returned 0x15802ce [0168.952] GetCapture () returned 0x0 [0168.952] IntersectRect (in: lprcDst=0x26f2e8, lprcSrc1=0x26f2e8, lprcSrc2=0x26f378 | out: lprcDst=0x26f2e8) returned 1 [0168.952] IntersectRect (in: lprcDst=0x26f0a4, lprcSrc1=0x26f0a4, lprcSrc2=0x26f074 | out: lprcDst=0x26f0a4) returned 1 [0168.952] IntersectRect (in: lprcDst=0x26f388, lprcSrc1=0x26f388, lprcSrc2=0x26f094 | out: lprcDst=0x26f388) returned 1 [0168.952] HeapFree (in: hHeap=0x470000, dwFlags=0x0, lpMem=0x0 | out: hHeap=0x470000) returned 1 [0168.952] RtlAllocateHeap (HeapHandle=0x470000, Flags=0x0, Size=0x24) returned 0x4bcb10 [0168.952] IntersectRect (in: lprcDst=0x26f388, lprcSrc1=0x26f388, lprcSrc2=0x26f0b4 | out: lprcDst=0x26f388) returned 1 [0168.952] IntersectRect (in: lprcDst=0x26ee78, lprcSrc1=0x26ee78, lprcSrc2=0x26f378 | out: lprcDst=0x26ee78) returned 1 [0168.952] IntersectRect (in: lprcDst=0x26ee78, lprcSrc1=0x26ee78, lprcSrc2=0x26f378 | out: lprcDst=0x26ee78) returned 1 [0168.952] IntersectRect (in: lprcDst=0x26eab0, lprcSrc1=0x26eab0, lprcSrc2=0x26ea80 | out: lprcDst=0x26eab0) returned 1 [0168.952] IntersectRect (in: lprcDst=0x26f410, lprcSrc1=0x26f410, lprcSrc2=0x26eaa0 | out: lprcDst=0x26f410) returned 1 [0168.952] IntersectRect (in: lprcDst=0x26ec34, lprcSrc1=0x26ec34, lprcSrc2=0x26ec04 | out: lprcDst=0x26ec34) returned 1 [0168.952] IntersectRect (in: lprcDst=0x26f388, lprcSrc1=0x26f388, lprcSrc2=0x26ec24 | out: lprcDst=0x26f388) returned 1 [0168.952] HeapFree (in: hHeap=0x470000, dwFlags=0x0, lpMem=0x0 | out: hHeap=0x470000) returned 1 [0168.952] RtlAllocateHeap (HeapHandle=0x470000, Flags=0x0, Size=0x24) returned 0x4e77b8 [0168.952] IntersectRect (in: lprcDst=0x26ea70, lprcSrc1=0x26ea70, lprcSrc2=0x26f378 | out: lprcDst=0x26ea70) returned 1 [0168.952] IntersectRect (in: lprcDst=0x26f388, lprcSrc1=0x26f388, lprcSrc2=0x26ec44 | out: lprcDst=0x26f388) returned 1 [0168.953] IntersectRect (in: lprcDst=0x26ea08, lprcSrc1=0x26ea08, lprcSrc2=0x26f378 | out: lprcDst=0x26ea08) returned 1 [0168.953] IntersectRect (in: lprcDst=0x26ea08, lprcSrc1=0x26ea08, lprcSrc2=0x26f378 | out: lprcDst=0x26ea08) returned 1 [0168.953] IntersectRect (in: lprcDst=0x26e794, lprcSrc1=0x26e794, lprcSrc2=0x26e64c | out: lprcDst=0x26e794) returned 1 [0168.953] IntersectRect (in: lprcDst=0x26f388, lprcSrc1=0x26f388, lprcSrc2=0x26e7b4 | out: lprcDst=0x26f388) returned 1 [0168.953] HeapFree (in: hHeap=0x470000, dwFlags=0x0, lpMem=0x0 | out: hHeap=0x470000) returned 1 [0168.953] RtlAllocateHeap (HeapHandle=0x470000, Flags=0x0, Size=0x24) returned 0x4e7788 [0168.953] IntersectRect (in: lprcDst=0x26f388, lprcSrc1=0x26f388, lprcSrc2=0x26e7d4 | out: lprcDst=0x26f388) returned 1 [0168.953] IntersectRect (in: lprcDst=0x26e598, lprcSrc1=0x26e598, lprcSrc2=0x26f378 | out: lprcDst=0x26e598) returned 1 [0168.953] IntersectRect (in: lprcDst=0x26e598, lprcSrc1=0x26e598, lprcSrc2=0x26f378 | out: lprcDst=0x26e598) returned 1 [0168.953] IntersectRect (in: lprcDst=0x26e324, lprcSrc1=0x26e324, lprcSrc2=0x26e1dc | out: lprcDst=0x26e324) returned 1 [0168.953] IntersectRect (in: lprcDst=0x26f388, lprcSrc1=0x26f388, lprcSrc2=0x26e344 | out: lprcDst=0x26f388) returned 1 [0168.953] HeapFree (in: hHeap=0x470000, dwFlags=0x0, lpMem=0x0 | out: hHeap=0x470000) returned 1 [0168.953] RtlAllocateHeap (HeapHandle=0x470000, Flags=0x0, Size=0x24) returned 0x4e7848 [0168.953] IntersectRect (in: lprcDst=0x26f388, lprcSrc1=0x26f388, lprcSrc2=0x26e364 | out: lprcDst=0x26f388) returned 1 [0168.953] IntersectRect (in: lprcDst=0x26e128, lprcSrc1=0x26e128, lprcSrc2=0x26f378 | out: lprcDst=0x26e128) returned 1 [0168.953] IntersectRect (in: lprcDst=0x26e128, lprcSrc1=0x26e128, lprcSrc2=0x26f378 | out: lprcDst=0x26e128) returned 0 [0168.953] IntersectRect (in: lprcDst=0x26e128, lprcSrc1=0x26e128, lprcSrc2=0x26f378 | out: lprcDst=0x26e128) returned 1 [0168.953] IntersectRect (in: lprcDst=0x26e128, lprcSrc1=0x26e128, lprcSrc2=0x26f378 | out: lprcDst=0x26e128) returned 1 [0168.953] IntersectRect (in: lprcDst=0x26e128, lprcSrc1=0x26e128, lprcSrc2=0x26f378 | out: lprcDst=0x26e128) returned 1 [0168.953] IntersectRect (in: lprcDst=0x26e128, lprcSrc1=0x26e128, lprcSrc2=0x26f378 | out: lprcDst=0x26e128) returned 1 [0168.953] IntersectRect (in: lprcDst=0x26df6c, lprcSrc1=0x26df6c, lprcSrc2=0x26de08 | out: lprcDst=0x26df6c) returned 1 [0168.953] HeapFree (in: hHeap=0x470000, dwFlags=0x0, lpMem=0x0 | out: hHeap=0x470000) returned 1 [0168.953] RtlAllocateHeap (HeapHandle=0x470000, Flags=0x0, Size=0x24) returned 0x4e7878 [0168.953] IntersectRect (in: lprcDst=0x26f388, lprcSrc1=0x26f388, lprcSrc2=0x26df5c | out: lprcDst=0x26f388) returned 1 [0168.953] IntersectRect (in: lprcDst=0x26de18, lprcSrc1=0x26de18, lprcSrc2=0x26f378 | out: lprcDst=0x26de18) returned 1 [0168.953] IntersectRect (in: lprcDst=0x26f388, lprcSrc1=0x26f388, lprcSrc2=0x26df7c | out: lprcDst=0x26f388) returned 1 [0168.953] PostMessageW (hWnd=0x7011a, Msg=0x8002, wParam=0x0, lParam=0x0) returned 1 [0168.953] LsSetDoc () returned 0x0 [0168.953] LsCreateLine () returned 0x0 [0168.953] HeapFree (in: hHeap=0x470000, dwFlags=0x0, lpMem=0x0 | out: hHeap=0x470000) returned 1 [0168.954] LsDestroyLine () returned 0x0 [0168.954] HeapFree (in: hHeap=0x470000, dwFlags=0x0, lpMem=0x0 | out: hHeap=0x470000) returned 1 [0168.954] PtInRect (lprc=0x26dcbc, pt=0xe6aa) returned 1 [0168.954] HeapFree (in: hHeap=0x470000, dwFlags=0x0, lpMem=0x4e7878 | out: hHeap=0x470000) returned 1 [0168.954] IntersectRect (in: lprcDst=0x26e1e8, lprcSrc1=0x26e1e8, lprcSrc2=0x26f378 | out: lprcDst=0x26e1e8) returned 1 [0168.954] HeapFree (in: hHeap=0x470000, dwFlags=0x0, lpMem=0x4e7848 | out: hHeap=0x470000) returned 1 [0168.954] HeapFree (in: hHeap=0x470000, dwFlags=0x0, lpMem=0x4e7788 | out: hHeap=0x470000) returned 1 [0168.954] HeapFree (in: hHeap=0x470000, dwFlags=0x0, lpMem=0x4e77b8 | out: hHeap=0x470000) returned 1 [0168.954] HeapFree (in: hHeap=0x470000, dwFlags=0x0, lpMem=0x4bcb10 | out: hHeap=0x470000) returned 1 [0168.954] HeapFree (in: hHeap=0x470000, dwFlags=0x0, lpMem=0x0 | out: hHeap=0x470000) returned 1 [0168.955] PtInRect (lprc=0x26f524, pt=0xe6aa) returned 1 [0168.955] LoadCursorA (hInstance=0x0, lpCursorName=0x7f00) returned 0x10003 [0168.955] GetCursor () returned 0x10003 [0168.955] GetCurrentThreadId () returned 0x220 [0168.955] TranslateMessage (lpMsg=0x26fbd4) returned 0 [0168.955] DispatchMessageW (lpMsg=0x26fbd4) returned 0x0 [0168.955] GetWindowLongW (hWnd=0x5011e, nIndex=-21) returned 4858488 [0168.955] GetMessageTime () returned 230647 [0168.955] GetMessagePos () returned 0x15802ce [0168.955] GetCapture () returned 0x0 [0168.955] GetCurrentThreadId () returned 0x220 [0168.955] GetCurrentThreadId () returned 0x220 [0168.955] GetCurrentThreadId () returned 0x220 [0168.955] IntersectRect (in: lprcDst=0x26f370, lprcSrc1=0x26f370, lprcSrc2=0x26f400 | out: lprcDst=0x26f370) returned 1 [0168.955] IntersectRect (in: lprcDst=0x26f12c, lprcSrc1=0x26f12c, lprcSrc2=0x26f0fc | out: lprcDst=0x26f12c) returned 1 [0168.955] IntersectRect (in: lprcDst=0x26f410, lprcSrc1=0x26f410, lprcSrc2=0x26f11c | out: lprcDst=0x26f410) returned 1 [0168.955] HeapFree (in: hHeap=0x470000, dwFlags=0x0, lpMem=0x0 | out: hHeap=0x470000) returned 1 [0168.955] RtlAllocateHeap (HeapHandle=0x470000, Flags=0x0, Size=0x24) returned 0x4bcb10 [0168.955] IntersectRect (in: lprcDst=0x26f410, lprcSrc1=0x26f410, lprcSrc2=0x26f13c | out: lprcDst=0x26f410) returned 1 [0168.955] IntersectRect (in: lprcDst=0x26ef00, lprcSrc1=0x26ef00, lprcSrc2=0x26f400 | out: lprcDst=0x26ef00) returned 1 [0168.955] IntersectRect (in: lprcDst=0x26ef00, lprcSrc1=0x26ef00, lprcSrc2=0x26f400 | out: lprcDst=0x26ef00) returned 1 [0168.955] IntersectRect (in: lprcDst=0x26eb38, lprcSrc1=0x26eb38, lprcSrc2=0x26eb08 | out: lprcDst=0x26eb38) returned 1 [0168.955] IntersectRect (in: lprcDst=0x26f498, lprcSrc1=0x26f498, lprcSrc2=0x26eb28 | out: lprcDst=0x26f498) returned 1 [0168.955] IntersectRect (in: lprcDst=0x26ecbc, lprcSrc1=0x26ecbc, lprcSrc2=0x26ec8c | out: lprcDst=0x26ecbc) returned 1 [0168.955] IntersectRect (in: lprcDst=0x26f410, lprcSrc1=0x26f410, lprcSrc2=0x26ecac | out: lprcDst=0x26f410) returned 1 [0168.955] HeapFree (in: hHeap=0x470000, dwFlags=0x0, lpMem=0x0 | out: hHeap=0x470000) returned 1 [0168.956] RtlAllocateHeap (HeapHandle=0x470000, Flags=0x0, Size=0x24) returned 0x4e77b8 [0168.956] IntersectRect (in: lprcDst=0x26eaf8, lprcSrc1=0x26eaf8, lprcSrc2=0x26f400 | out: lprcDst=0x26eaf8) returned 1 [0168.956] IntersectRect (in: lprcDst=0x26f410, lprcSrc1=0x26f410, lprcSrc2=0x26eccc | out: lprcDst=0x26f410) returned 1 [0168.956] IntersectRect (in: lprcDst=0x26ea90, lprcSrc1=0x26ea90, lprcSrc2=0x26f400 | out: lprcDst=0x26ea90) returned 1 [0168.956] IntersectRect (in: lprcDst=0x26ea90, lprcSrc1=0x26ea90, lprcSrc2=0x26f400 | out: lprcDst=0x26ea90) returned 1 [0168.956] IntersectRect (in: lprcDst=0x26e81c, lprcSrc1=0x26e81c, lprcSrc2=0x26e6d4 | out: lprcDst=0x26e81c) returned 1 [0168.956] IntersectRect (in: lprcDst=0x26f410, lprcSrc1=0x26f410, lprcSrc2=0x26e83c | out: lprcDst=0x26f410) returned 1 [0168.956] HeapFree (in: hHeap=0x470000, dwFlags=0x0, lpMem=0x0 | out: hHeap=0x470000) returned 1 [0168.956] RtlAllocateHeap (HeapHandle=0x470000, Flags=0x0, Size=0x24) returned 0x4e7788 [0168.956] IntersectRect (in: lprcDst=0x26f410, lprcSrc1=0x26f410, lprcSrc2=0x26e85c | out: lprcDst=0x26f410) returned 1 [0168.956] IntersectRect (in: lprcDst=0x26e620, lprcSrc1=0x26e620, lprcSrc2=0x26f400 | out: lprcDst=0x26e620) returned 1 [0168.956] IntersectRect (in: lprcDst=0x26e620, lprcSrc1=0x26e620, lprcSrc2=0x26f400 | out: lprcDst=0x26e620) returned 1 [0168.956] IntersectRect (in: lprcDst=0x26e3ac, lprcSrc1=0x26e3ac, lprcSrc2=0x26e264 | out: lprcDst=0x26e3ac) returned 1 [0168.956] IntersectRect (in: lprcDst=0x26f410, lprcSrc1=0x26f410, lprcSrc2=0x26e3cc | out: lprcDst=0x26f410) returned 1 [0168.956] HeapFree (in: hHeap=0x470000, dwFlags=0x0, lpMem=0x0 | out: hHeap=0x470000) returned 1 [0168.956] RtlAllocateHeap (HeapHandle=0x470000, Flags=0x0, Size=0x24) returned 0x4e7848 [0168.956] IntersectRect (in: lprcDst=0x26f410, lprcSrc1=0x26f410, lprcSrc2=0x26e3ec | out: lprcDst=0x26f410) returned 1 [0168.956] IntersectRect (in: lprcDst=0x26e1b0, lprcSrc1=0x26e1b0, lprcSrc2=0x26f400 | out: lprcDst=0x26e1b0) returned 1 [0168.956] IntersectRect (in: lprcDst=0x26e1b0, lprcSrc1=0x26e1b0, lprcSrc2=0x26f400 | out: lprcDst=0x26e1b0) returned 0 [0168.956] IntersectRect (in: lprcDst=0x26e1b0, lprcSrc1=0x26e1b0, lprcSrc2=0x26f400 | out: lprcDst=0x26e1b0) returned 1 [0168.956] IntersectRect (in: lprcDst=0x26e1b0, lprcSrc1=0x26e1b0, lprcSrc2=0x26f400 | out: lprcDst=0x26e1b0) returned 1 [0168.956] IntersectRect (in: lprcDst=0x26e1b0, lprcSrc1=0x26e1b0, lprcSrc2=0x26f400 | out: lprcDst=0x26e1b0) returned 1 [0168.956] IntersectRect (in: lprcDst=0x26e1b0, lprcSrc1=0x26e1b0, lprcSrc2=0x26f400 | out: lprcDst=0x26e1b0) returned 1 [0168.956] IntersectRect (in: lprcDst=0x26dff4, lprcSrc1=0x26dff4, lprcSrc2=0x26de90 | out: lprcDst=0x26dff4) returned 1 [0168.956] HeapFree (in: hHeap=0x470000, dwFlags=0x0, lpMem=0x0 | out: hHeap=0x470000) returned 1 [0168.956] RtlAllocateHeap (HeapHandle=0x470000, Flags=0x0, Size=0x24) returned 0x4e7878 [0168.956] IntersectRect (in: lprcDst=0x26f410, lprcSrc1=0x26f410, lprcSrc2=0x26dfe4 | out: lprcDst=0x26f410) returned 1 [0168.956] IntersectRect (in: lprcDst=0x26dea0, lprcSrc1=0x26dea0, lprcSrc2=0x26f400 | out: lprcDst=0x26dea0) returned 1 [0168.956] IntersectRect (in: lprcDst=0x26f410, lprcSrc1=0x26f410, lprcSrc2=0x26e004 | out: lprcDst=0x26f410) returned 1 [0168.956] LsSetDoc () returned 0x0 [0168.956] LsCreateLine () returned 0x0 [0168.956] HeapFree (in: hHeap=0x470000, dwFlags=0x0, lpMem=0x0 | out: hHeap=0x470000) returned 1 [0168.957] LsDestroyLine () returned 0x0 [0168.957] HeapFree (in: hHeap=0x470000, dwFlags=0x0, lpMem=0x0 | out: hHeap=0x470000) returned 1 [0168.957] PtInRect (lprc=0x26dd44, pt=0xe6aa) returned 1 [0168.957] HeapFree (in: hHeap=0x470000, dwFlags=0x0, lpMem=0x4e7878 | out: hHeap=0x470000) returned 1 [0168.957] IntersectRect (in: lprcDst=0x26e270, lprcSrc1=0x26e270, lprcSrc2=0x26f400 | out: lprcDst=0x26e270) returned 1 [0168.957] HeapFree (in: hHeap=0x470000, dwFlags=0x0, lpMem=0x4e7848 | out: hHeap=0x470000) returned 1 [0168.957] HeapFree (in: hHeap=0x470000, dwFlags=0x0, lpMem=0x4e7788 | out: hHeap=0x470000) returned 1 [0168.957] HeapFree (in: hHeap=0x470000, dwFlags=0x0, lpMem=0x4e77b8 | out: hHeap=0x470000) returned 1 [0168.957] HeapFree (in: hHeap=0x470000, dwFlags=0x0, lpMem=0x4bcb10 | out: hHeap=0x470000) returned 1 [0168.957] HeapFree (in: hHeap=0x470000, dwFlags=0x0, lpMem=0x0 | out: hHeap=0x470000) returned 1 [0168.957] ClientToScreen (in: hWnd=0x5011e, lpPoint=0x26f69c | out: lpPoint=0x26f69c) returned 1 [0168.958] RtlAllocateHeap (HeapHandle=0x470000, Flags=0x0, Size=0xf8) returned 0x4dbd10 [0168.958] GetCurrentThreadId () returned 0x220 [0168.958] CActiveIMMAppEx_Trident:IActiveIMMApp:OnDefWindowProc (in: This=0x4b1068, hWnd=0x5011e, msg=0x200, wParam=0x0, lParam=0x1080294, plResult=0x26f794 | out: plResult=0x26f794) returned 0x1 [0168.958] NtdllDefWindowProc_W () returned 0x0 [0168.958] HeapFree (in: hHeap=0x470000, dwFlags=0x0, lpMem=0x4dbd10 | out: hHeap=0x470000) returned 1 [0168.958] GetMessageTime () returned 230647 [0168.958] GetMessagePos () returned 0x15802ce [0168.958] GetCapture () returned 0x0 [0168.958] ClientToScreen (in: hWnd=0x5011e, lpPoint=0x26f69c | out: lpPoint=0x26f69c) returned 1 [0168.958] RtlAllocateHeap (HeapHandle=0x470000, Flags=0x0, Size=0xf8) returned 0x4dbd10 [0168.959] GetCurrentThreadId () returned 0x220 [0168.959] RtlReAllocateHeap (Heap=0x470000, Flags=0x0, Ptr=0x4ef490, Size=0x18) returned 0x4dcc40 [0168.959] ClientToScreen (in: hWnd=0x5011e, lpPoint=0x26f6a0 | out: lpPoint=0x26f6a0) returned 1 [0168.959] RtlAllocateHeap (HeapHandle=0x470000, Flags=0x0, Size=0xf8) returned 0x4e3bd0 [0168.959] HeapFree (in: hHeap=0x470000, dwFlags=0x0, lpMem=0x4e3bd0 | out: hHeap=0x470000) returned 1 [0168.959] ClientToScreen (in: hWnd=0x5011e, lpPoint=0x26f6a0 | out: lpPoint=0x26f6a0) returned 1 [0168.959] RtlAllocateHeap (HeapHandle=0x470000, Flags=0x0, Size=0xf8) returned 0x4f3878 [0168.959] HeapFree (in: hHeap=0x470000, dwFlags=0x0, lpMem=0x4f3878 | out: hHeap=0x470000) returned 1 [0168.959] ClientToScreen (in: hWnd=0x5011e, lpPoint=0x26f6a0 | out: lpPoint=0x26f6a0) returned 1 [0168.959] RtlAllocateHeap (HeapHandle=0x470000, Flags=0x0, Size=0xf8) returned 0x4f3878 [0168.959] HeapFree (in: hHeap=0x470000, dwFlags=0x0, lpMem=0x4f3878 | out: hHeap=0x470000) returned 1 [0168.959] ClientToScreen (in: hWnd=0x5011e, lpPoint=0x26f6a0 | out: lpPoint=0x26f6a0) returned 1 [0168.960] RtlAllocateHeap (HeapHandle=0x470000, Flags=0x0, Size=0xf8) returned 0x4f3878 [0168.960] HeapFree (in: hHeap=0x470000, dwFlags=0x0, lpMem=0x4f3878 | out: hHeap=0x470000) returned 1 [0168.960] ClientToScreen (in: hWnd=0x5011e, lpPoint=0x26f6a0 | out: lpPoint=0x26f6a0) returned 1 [0168.960] RtlAllocateHeap (HeapHandle=0x470000, Flags=0x0, Size=0xf8) returned 0x4f3878 [0168.960] HeapFree (in: hHeap=0x470000, dwFlags=0x0, lpMem=0x4f3878 | out: hHeap=0x470000) returned 1 [0168.960] ClientToScreen (in: hWnd=0x5011e, lpPoint=0x26f6a0 | out: lpPoint=0x26f6a0) returned 1 [0168.960] RtlAllocateHeap (HeapHandle=0x470000, Flags=0x0, Size=0xf8) returned 0x4f3878 [0168.960] HeapFree (in: hHeap=0x470000, dwFlags=0x0, lpMem=0x4f3878 | out: hHeap=0x470000) returned 1 [0168.960] HeapFree (in: hHeap=0x470000, dwFlags=0x0, lpMem=0x4dcc40 | out: hHeap=0x470000) returned 1 [0168.961] RtlAllocateHeap (HeapHandle=0x470000, Flags=0x0, Size=0x280) returned 0x4b2a90 [0168.961] RtlReAllocateHeap (Heap=0x470000, Flags=0x0, Ptr=0x4b2a90, Size=0x3c0) returned 0x4b4988 [0168.961] GetSysColor (nIndex=5) returned 0xffffff [0168.962] HeapFree (in: hHeap=0x470000, dwFlags=0x0, lpMem=0x0 | out: hHeap=0x470000) returned 1 [0168.962] HeapFree (in: hHeap=0x470000, dwFlags=0x0, lpMem=0x0 | out: hHeap=0x470000) returned 1 [0168.962] GetSysColor (nIndex=5) returned 0xffffff [0168.962] HeapFree (in: hHeap=0x470000, dwFlags=0x0, lpMem=0x0 | out: hHeap=0x470000) returned 1 [0168.962] HeapFree (in: hHeap=0x470000, dwFlags=0x0, lpMem=0x0 | out: hHeap=0x470000) returned 1 [0168.962] GetSysColor (nIndex=5) returned 0xffffff [0168.962] HeapFree (in: hHeap=0x470000, dwFlags=0x0, lpMem=0x0 | out: hHeap=0x470000) returned 1 [0168.962] HeapFree (in: hHeap=0x470000, dwFlags=0x0, lpMem=0x0 | out: hHeap=0x470000) returned 1 [0168.962] GetSysColor (nIndex=5) returned 0xffffff [0168.962] HeapFree (in: hHeap=0x470000, dwFlags=0x0, lpMem=0x0 | out: hHeap=0x470000) returned 1 [0168.962] HeapFree (in: hHeap=0x470000, dwFlags=0x0, lpMem=0x0 | out: hHeap=0x470000) returned 1 [0168.962] CActiveIMMAppEx_Trident:IActiveIMMApp:OnDefWindowProc (in: This=0x4b1068, hWnd=0x5011e, msg=0x8004, wParam=0x0, lParam=0x1080294, plResult=0x26f794 | out: plResult=0x26f794) returned 0x1 [0168.962] NtdllDefWindowProc_W () returned 0x0 [0168.962] HeapFree (in: hHeap=0x470000, dwFlags=0x0, lpMem=0x4dbd10 | out: hHeap=0x470000) returned 1 [0168.962] GetCurrentThreadId () returned 0x220 [0168.962] GetMessageW (in: lpMsg=0x26fbd4, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x26fbd4) returned 1 [0168.962] TranslateMessage (lpMsg=0x26fbd4) returned 0 [0168.963] DispatchMessageW (lpMsg=0x26fbd4) returned 0x0 [0168.963] GetCurrentThreadId () returned 0x220 [0168.963] GetCurrentThreadId () returned 0x220 [0168.963] GetCurrentThreadId () returned 0x220 [0168.964] HeapFree (in: hHeap=0x470000, dwFlags=0x0, lpMem=0x0 | out: hHeap=0x470000) returned 1 [0168.964] HeapFree (in: hHeap=0x470000, dwFlags=0x0, lpMem=0x0 | out: hHeap=0x470000) returned 1 [0168.964] IntersectRect (in: lprcDst=0x26f268, lprcSrc1=0x26f268, lprcSrc2=0x26f2f0 | out: lprcDst=0x26f268) returned 1 [0168.964] IntersectRect (in: lprcDst=0x26f300, lprcSrc1=0x26f300, lprcSrc2=0x26f268 | out: lprcDst=0x26f300) returned 1 [0168.964] IntersectRect (in: lprcDst=0x26f358, lprcSrc1=0x26f358, lprcSrc2=0x26f2f0 | out: lprcDst=0x26f358) returned 1 [0168.964] HeapFree (in: hHeap=0x470000, dwFlags=0x0, lpMem=0x0 | out: hHeap=0x470000) returned 1 [0168.964] HeapFree (in: hHeap=0x470000, dwFlags=0x0, lpMem=0x0 | out: hHeap=0x470000) returned 1 [0168.964] HeapFree (in: hHeap=0x470000, dwFlags=0x0, lpMem=0x0 | out: hHeap=0x470000) returned 1 [0168.964] IntersectRect (in: lprcDst=0x26f734, lprcSrc1=0x26f734, lprcSrc2=0x26f704 | out: lprcDst=0x26f734) returned 1 [0168.964] IntersectRect (in: lprcDst=0x4c15e8, lprcSrc1=0x4c15e8, lprcSrc2=0x26f724 | out: lprcDst=0x4c15e8) returned 1 [0168.964] IntersectRect (in: lprcDst=0x4c15e8, lprcSrc1=0x4c15e8, lprcSrc2=0x26f744 | out: lprcDst=0x4c15e8) returned 1 [0168.964] IntersectRect (in: lprcDst=0x26f2f8, lprcSrc1=0x26f2f8, lprcSrc2=0x26f2c8 | out: lprcDst=0x26f2f8) returned 1 [0168.964] IntersectRect (in: lprcDst=0x4c1670, lprcSrc1=0x4c1670, lprcSrc2=0x26f2e8 | out: lprcDst=0x4c1670) returned 1 [0168.964] IntersectRect (in: lprcDst=0x26f3f4, lprcSrc1=0x26f3f4, lprcSrc2=0x26f3c4 | out: lprcDst=0x26f3f4) returned 1 [0168.964] IntersectRect (in: lprcDst=0x4c15e8, lprcSrc1=0x4c15e8, lprcSrc2=0x26f3e4 | out: lprcDst=0x4c15e8) returned 1 [0168.964] IntersectRect (in: lprcDst=0x4c15e8, lprcSrc1=0x4c15e8, lprcSrc2=0x26f404 | out: lprcDst=0x4c15e8) returned 1 [0168.964] IntersectRect (in: lprcDst=0x26f008, lprcSrc1=0x26f008, lprcSrc2=0x26ef98 | out: lprcDst=0x26f008) returned 1 [0168.964] IntersectRect (in: lprcDst=0x4c1670, lprcSrc1=0x4c1670, lprcSrc2=0x26f028 | out: lprcDst=0x4c1670) returned 1 [0168.964] IntersectRect (in: lprcDst=0x26f104, lprcSrc1=0x26f104, lprcSrc2=0x26f044 | out: lprcDst=0x26f104) returned 1 [0168.964] IntersectRect (in: lprcDst=0x4c15e8, lprcSrc1=0x4c15e8, lprcSrc2=0x26f124 | out: lprcDst=0x4c15e8) returned 1 [0168.964] HeapFree (in: hHeap=0x470000, dwFlags=0x0, lpMem=0x0 | out: hHeap=0x470000) returned 1 [0168.964] UnionRect (in: lprcDst=0x26f038, lprcSrc1=0x26f038, lprcSrc2=0x26f058 | out: lprcDst=0x26f038) returned 1 [0168.965] IntersectRect (in: lprcDst=0x26f104, lprcSrc1=0x26f104, lprcSrc2=0x26f044 | out: lprcDst=0x26f104) returned 1 [0168.965] IntersectRect (in: lprcDst=0x4c15e8, lprcSrc1=0x4c15e8, lprcSrc2=0x26f124 | out: lprcDst=0x4c15e8) returned 1 [0168.965] IntersectRect (in: lprcDst=0x4c15e8, lprcSrc1=0x4c15e8, lprcSrc2=0x26f144 | out: lprcDst=0x4c15e8) returned 1 [0168.965] HeapFree (in: hHeap=0x470000, dwFlags=0x0, lpMem=0x0 | out: hHeap=0x470000) returned 1 [0168.965] IntersectRect (in: lprcDst=0x26ee44, lprcSrc1=0x26ee44, lprcSrc2=0x26ed84 | out: lprcDst=0x26ee44) returned 1 [0168.965] IntersectRect (in: lprcDst=0x4c15e8, lprcSrc1=0x4c15e8, lprcSrc2=0x26ee64 | out: lprcDst=0x4c15e8) returned 1 [0168.965] IntersectRect (in: lprcDst=0x4c15e8, lprcSrc1=0x4c15e8, lprcSrc2=0x26ee84 | out: lprcDst=0x4c15e8) returned 1 [0168.965] HeapFree (in: hHeap=0x470000, dwFlags=0x0, lpMem=0x0 | out: hHeap=0x470000) returned 1 [0168.965] IntersectRect (in: lprcDst=0x26eb84, lprcSrc1=0x26eb84, lprcSrc2=0x26eac4 | out: lprcDst=0x26eb84) returned 1 [0168.965] IntersectRect (in: lprcDst=0x4c15e8, lprcSrc1=0x4c15e8, lprcSrc2=0x26eba4 | out: lprcDst=0x4c15e8) returned 1 [0168.965] IntersectRect (in: lprcDst=0x4c15e8, lprcSrc1=0x4c15e8, lprcSrc2=0x26ebc4 | out: lprcDst=0x4c15e8) returned 1 [0168.965] HeapFree (in: hHeap=0x470000, dwFlags=0x0, lpMem=0x0 | out: hHeap=0x470000) returned 1 [0168.965] HeapFree (in: hHeap=0x470000, dwFlags=0x0, lpMem=0x0 | out: hHeap=0x470000) returned 1 [0168.965] UnionRect (in: lprcDst=0x26eac8, lprcSrc1=0x26eac8, lprcSrc2=0x4c7aa0 | out: lprcDst=0x26eac8) returned 1 [0168.965] UnionRect (in: lprcDst=0x26eab8, lprcSrc1=0x26eab8, lprcSrc2=0x26ead8 | out: lprcDst=0x26eab8) returned 1 [0168.965] HeapFree (in: hHeap=0x470000, dwFlags=0x0, lpMem=0x0 | out: hHeap=0x470000) returned 1 [0168.965] IntersectRect (in: lprcDst=0x26eb84, lprcSrc1=0x26eb84, lprcSrc2=0x26eac4 | out: lprcDst=0x26eb84) returned 1 [0168.965] IntersectRect (in: lprcDst=0x4c15e8, lprcSrc1=0x4c15e8, lprcSrc2=0x26eba4 | out: lprcDst=0x4c15e8) returned 1 [0168.965] IntersectRect (in: lprcDst=0x4c15e8, lprcSrc1=0x4c15e8, lprcSrc2=0x26ebc4 | out: lprcDst=0x4c15e8) returned 1 [0168.965] HeapFree (in: hHeap=0x470000, dwFlags=0x0, lpMem=0x0 | out: hHeap=0x470000) returned 1 [0168.965] HeapFree (in: hHeap=0x470000, dwFlags=0x0, lpMem=0x0 | out: hHeap=0x470000) returned 1 [0168.965] UnionRect (in: lprcDst=0x26eac8, lprcSrc1=0x26eac8, lprcSrc2=0x4c7bb8 | out: lprcDst=0x26eac8) returned 1 [0168.965] UnionRect (in: lprcDst=0x26eab8, lprcSrc1=0x26eab8, lprcSrc2=0x26ead8 | out: lprcDst=0x26eab8) returned 1 [0168.965] HeapFree (in: hHeap=0x470000, dwFlags=0x0, lpMem=0x0 | out: hHeap=0x470000) returned 1 [0168.965] HeapFree (in: hHeap=0x470000, dwFlags=0x0, lpMem=0x0 | out: hHeap=0x470000) returned 1 [0168.965] UnionRect (in: lprcDst=0x26ed88, lprcSrc1=0x26ed88, lprcSrc2=0x4c7ad8 | out: lprcDst=0x26ed88) returned 1 [0168.965] UnionRect (in: lprcDst=0x26ed88, lprcSrc1=0x26ed88, lprcSrc2=0x4bf29c | out: lprcDst=0x26ed88) returned 1 [0168.965] UnionRect (in: lprcDst=0x26ed88, lprcSrc1=0x26ed88, lprcSrc2=0x4c7b80 | out: lprcDst=0x26ed88) returned 1 [0168.965] UnionRect (in: lprcDst=0x26ed88, lprcSrc1=0x26ed88, lprcSrc2=0x4bf34c | out: lprcDst=0x26ed88) returned 1 [0168.965] UnionRect (in: lprcDst=0x26ed88, lprcSrc1=0x26ed88, lprcSrc2=0x4ec418 | out: lprcDst=0x26ed88) returned 1 [0168.965] UnionRect (in: lprcDst=0x26ed78, lprcSrc1=0x26ed78, lprcSrc2=0x26ed98 | out: lprcDst=0x26ed78) returned 1 [0168.965] HeapFree (in: hHeap=0x470000, dwFlags=0x0, lpMem=0x0 | out: hHeap=0x470000) returned 1 [0168.965] UnionRect (in: lprcDst=0x26f048, lprcSrc1=0x26f048, lprcSrc2=0x4c917c | out: lprcDst=0x26f048) returned 1 [0168.965] UnionRect (in: lprcDst=0x26f048, lprcSrc1=0x26f048, lprcSrc2=0x4bf2f4 | out: lprcDst=0x26f048) returned 1 [0168.965] UnionRect (in: lprcDst=0x26f038, lprcSrc1=0x26f038, lprcSrc2=0x26f058 | out: lprcDst=0x26f038) returned 1 [0168.965] HeapFree (in: hHeap=0x470000, dwFlags=0x0, lpMem=0x0 | out: hHeap=0x470000) returned 1 [0168.965] IntersectRect (in: lprcDst=0x26f308, lprcSrc1=0x26f308, lprcSrc2=0x4c15d8 | out: lprcDst=0x26f308) returned 1 [0168.965] UnionRect (in: lprcDst=0x26f610, lprcSrc1=0x26f610, lprcSrc2=0x26f5bc | out: lprcDst=0x26f610) returned 1 [0168.965] UnionRect (in: lprcDst=0x26f5bc, lprcSrc1=0x26f5bc, lprcSrc2=0x26f56c | out: lprcDst=0x26f5bc) returned 1 [0168.965] UnionRect (in: lprcDst=0x26f56c, lprcSrc1=0x26f56c, lprcSrc2=0x26f51c | out: lprcDst=0x26f56c) returned 1 [0168.965] UnionRect (in: lprcDst=0x26f51c, lprcSrc1=0x26f51c, lprcSrc2=0x26f4cc | out: lprcDst=0x26f51c) returned 1 [0168.965] UnionRect (in: lprcDst=0x26f56c, lprcSrc1=0x26f56c, lprcSrc2=0x26f51c | out: lprcDst=0x26f56c) returned 1 [0168.965] UnionRect (in: lprcDst=0x26f56c, lprcSrc1=0x26f56c, lprcSrc2=0x26f51c | out: lprcDst=0x26f56c) returned 1 [0168.966] UnionRect (in: lprcDst=0x26f56c, lprcSrc1=0x26f56c, lprcSrc2=0x26f51c | out: lprcDst=0x26f56c) returned 1 [0168.966] UnionRect (in: lprcDst=0x26f51c, lprcSrc1=0x26f51c, lprcSrc2=0x26f4cc | out: lprcDst=0x26f51c) returned 1 [0168.966] UnionRect (in: lprcDst=0x26f56c, lprcSrc1=0x26f56c, lprcSrc2=0x26f51c | out: lprcDst=0x26f56c) returned 1 [0168.966] UnionRect (in: lprcDst=0x26f56c, lprcSrc1=0x26f56c, lprcSrc2=0x26f51c | out: lprcDst=0x26f56c) returned 1 [0168.966] UnionRect (in: lprcDst=0x26f56c, lprcSrc1=0x26f56c, lprcSrc2=0x26f51c | out: lprcDst=0x26f56c) returned 1 [0168.966] UnionRect (in: lprcDst=0x26f5bc, lprcSrc1=0x26f5bc, lprcSrc2=0x26f56c | out: lprcDst=0x26f5bc) returned 1 [0168.966] UnionRect (in: lprcDst=0x26f5bc, lprcSrc1=0x26f5bc, lprcSrc2=0x26f56c | out: lprcDst=0x26f5bc) returned 1 [0168.966] UnionRect (in: lprcDst=0x26f610, lprcSrc1=0x26f610, lprcSrc2=0x26f5bc | out: lprcDst=0x26f610) returned 1 [0168.966] UnionRect (in: lprcDst=0x26f610, lprcSrc1=0x26f610, lprcSrc2=0x26f5bc | out: lprcDst=0x26f610) returned 1 [0168.966] HeapFree (in: hHeap=0x470000, dwFlags=0x0, lpMem=0x0 | out: hHeap=0x470000) returned 1 [0168.966] UnionRect (in: lprcDst=0x26f950, lprcSrc1=0x26f950, lprcSrc2=0x26f8fc | out: lprcDst=0x26f950) returned 1 [0168.966] RtlAllocateHeap (HeapHandle=0x470000, Flags=0x0, Size=0x28) returned 0x4e77b8 [0168.966] HeapFree (in: hHeap=0x470000, dwFlags=0x0, lpMem=0x4e77b8 | out: hHeap=0x470000) returned 1 [0168.966] RedrawWindow (hWnd=0x5011e, lprcUpdate=0x26f9d0, hrgnUpdate=0x0, flags=0x21) returned 1 [0168.966] GetMessageW (in: lpMsg=0x26fbd4, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x26fbd4) returned 1 [0168.966] TranslateMessage (lpMsg=0x26fbd4) returned 0 [0168.966] DispatchMessageW (lpMsg=0x26fbd4) returned 0x0 [0168.966] NtdllDefWindowProc_W () returned 0x0 [0168.966] GetMessageW (in: lpMsg=0x26fbd4, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x26fbd4) returned 1 [0168.966] TranslateMessage (lpMsg=0x26fbd4) returned 0 [0168.966] DispatchMessageW (lpMsg=0x26fbd4) returned 0x0 [0168.966] GetWindowLongW (hWnd=0x5011e, nIndex=-21) returned 4858488 [0168.966] MapWindowPoints (in: hWndFrom=0x5011e, hWndTo=0x0, lpPoints=0x26f3f4, cPoints=0x1 | out: lpPoints=0x26f3f4) returned 5242938 [0168.966] BeginPaint (in: hWnd=0x5011e, lpPaint=0x26f828 | out: lpPaint=0x26f828) returned 0x50109f2 [0168.966] GetWindowLongW (hWnd=0x5011e, nIndex=-21) returned 4858488 [0168.966] GetCurrentThreadId () returned 0x220 [0168.967] GetWindowLongW (hWnd=0x5011e, nIndex=-21) returned 4858488 [0168.967] GetCurrentThreadId () returned 0x220 [0168.967] IsRectEmpty (lprc=0x26f830) returned 0 [0168.967] CreateRectRgnIndirect (lprect=0x6fbe7be0) returned 0x220409d4 [0168.967] GetRandomRgn (hdc=0x50109f2, hrgn=0x220409d4, i=4) returned 1 [0168.967] OffsetRgn (hrgn=0x220409d4, x=-58, y=-80) returned 2 [0168.967] MapWindowPoints (in: hWndFrom=0x5011e, hWndTo=0x0, lpPoints=0x26f3e4, cPoints=0x1 | out: lpPoints=0x26f3e4) returned 5242938 [0168.967] GetDeviceCaps (hdc=0x13010a0a, index=38) returned 32409 [0168.967] IntersectRect (in: lprcDst=0x26f4a4, lprcSrc1=0x481b2c, lprcSrc2=0x481b1c | out: lprcDst=0x26f4a4) returned 1 [0168.967] IntersectRect (in: lprcDst=0x26f494, lprcSrc1=0x26f494, lprcSrc2=0x26f380 | out: lprcDst=0x26f494) returned 0 [0168.967] IsRectEmpty (lprc=0x26f494) returned 1 [0168.967] HeapFree (in: hHeap=0x470000, dwFlags=0x0, lpMem=0x4aeb10 | out: hHeap=0x470000) returned 1 [0168.967] RtlAllocateHeap (HeapHandle=0x470000, Flags=0x8, Size=0x50) returned 0x4aeb10 [0168.967] GetDeviceCaps (hdc=0x13010a0a, index=38) returned 32409 [0168.967] GetDeviceCaps (hdc=0x50109f2, index=14) returned 1 [0168.967] GetDeviceCaps (hdc=0x50109f2, index=12) returned 32 [0168.967] RtlAllocateHeap (HeapHandle=0x470000, Flags=0x8, Size=0x50) returned 0x4aedd0 [0168.967] CreateCompatibleBitmap (hdc=0x50109f2, cx=1324, cy=150) returned 0xffffffffc90509e6 [0168.968] CreateCompatibleDC (hdc=0x50109f2) returned 0x17010257 [0168.968] SelectObject (hdc=0x17010257, h=0xc90509e6) returned 0x185000f [0168.968] GetCurrentObject (hdc=0x50109f2, type=0x5) returned 0x188000b [0168.968] SelectPalette (hdc=0x17010257, hPal=0x188000b, bForceBkgd=1) returned 0x188000b [0168.968] RealizePalette (hdc=0x17010257) returned 0x0 [0168.968] GetRegionData (in: hrgn=0x220409d4, nCount=0x0, lpRgnData=0x0 | out: lpRgnData=0x0) returned 0x30 [0168.968] RtlAllocateHeap (HeapHandle=0x470000, Flags=0x0, Size=0x30) returned 0x4c7708 [0168.968] GetRegionData (in: hrgn=0x220409d4, nCount=0x30, lpRgnData=0x4c7708 | out: lpRgnData=0x4c7708) returned 0x30 [0168.968] RtlAllocateHeap (HeapHandle=0x470000, Flags=0x0, Size=0x40) returned 0x4c8b60 [0168.968] HeapFree (in: hHeap=0x470000, dwFlags=0x0, lpMem=0x4c8b60 | out: hHeap=0x470000) returned 1 [0168.968] HeapFree (in: hHeap=0x470000, dwFlags=0x0, lpMem=0x4c7708 | out: hHeap=0x470000) returned 1 [0168.968] IntersectRect (in: lprcDst=0x26cacc, lprcSrc1=0x26cacc, lprcSrc2=0x26ca9c | out: lprcDst=0x26cacc) returned 1 [0168.968] IntersectRect (in: lprcDst=0x26c9fc, lprcSrc1=0x26c9fc, lprcSrc2=0x26c9cc | out: lprcDst=0x26c9fc) returned 1 [0168.968] IntersectRect (in: lprcDst=0x26c8f0, lprcSrc1=0x26c8f0, lprcSrc2=0x26c8e0 | out: lprcDst=0x26c8f0) returned 1 [0168.968] GetObjectType (h=0x50109f2) returned 0x3 [0168.968] GetDeviceCaps (hdc=0x50109f2, index=2) returned 1 [0168.968] RtlAllocateHeap (HeapHandle=0x470000, Flags=0x0, Size=0x30) returned 0x4c7708 [0168.968] ExtCreateRegion (lpx=0x0, nCount=0x30, lpData=0x4c7708) returned 0x340401b3 [0168.968] HeapFree (in: hHeap=0x470000, dwFlags=0x0, lpMem=0x4c7708 | out: hHeap=0x470000) returned 1 [0168.968] SelectClipRgn (hdc=0x50109f2, hrgn=0x340401b3) returned 2 [0168.968] DeleteObject (ho=0x340401b3) returned 1 [0168.968] _CIsqrt () returned 0x3f1a027f [0168.968] _CIsqrt () returned 0x3f1a027f [0168.968] _CIatan2 () returned 0x20 [0168.968] _CIatan2 () returned 0x20 [0168.969] GetStockObject (i=8) returned 0x1b00016 [0168.969] SelectObject (hdc=0x50109f2, h=0x1b00016) returned 0x1b00017 [0168.969] GetViewportOrgEx (in: hdc=0x50109f2, lppoint=0x26c6d4 | out: lppoint=0x26c6d4) returned 1 [0168.969] SelectObject (hdc=0x50109f2, h=0x671001e2) returned 0x1900010 [0168.969] UnrealizeObject (h=0x671001e2) returned 1 [0168.969] SetBrushOrgEx (in: hdc=0x50109f2, x=0, y=0, lppt=0x0 | out: lppt=0x0) returned 1 [0168.969] MulDiv (nNumber=2, nNumerator=1, nDenominator=2) returned 1 [0168.969] MulDiv (nNumber=2, nNumerator=0, nDenominator=2) returned 0 [0168.969] MulDiv (nNumber=2, nNumerator=0, nDenominator=2) returned 0 [0168.969] MulDiv (nNumber=2, nNumerator=0, nDenominator=2) returned 0 [0168.969] MulDiv (nNumber=2, nNumerator=1, nDenominator=2) returned 1 [0168.969] MulDiv (nNumber=2, nNumerator=1, nDenominator=2) returned 1 [0168.969] Polygon (hdc=0x50109f2, apt=0x26c5f8, cpt=6) returned 1 [0168.969] SelectObject (hdc=0x50109f2, h=0x1d100258) returned 0x671001e2 [0168.969] UnrealizeObject (h=0x1d100258) returned 1 [0168.969] SetBrushOrgEx (in: hdc=0x50109f2, x=0, y=0, lppt=0x0 | out: lppt=0x0) returned 1 [0168.969] MulDiv (nNumber=2, nNumerator=1, nDenominator=2) returned 1 [0168.969] MulDiv (nNumber=2, nNumerator=0, nDenominator=2) returned 0 [0168.969] MulDiv (nNumber=2, nNumerator=0, nDenominator=2) returned 0 [0168.969] MulDiv (nNumber=2, nNumerator=0, nDenominator=2) returned 0 [0168.969] MulDiv (nNumber=2, nNumerator=1, nDenominator=2) returned 1 [0168.969] MulDiv (nNumber=2, nNumerator=1, nDenominator=2) returned 1 [0168.969] Polygon (hdc=0x50109f2, apt=0x26c5f8, cpt=8) returned 1 [0168.978] SelectObject (hdc=0x50109f2, h=0x4b100874) returned 0x1d100258 [0168.978] UnrealizeObject (h=0x4b100874) returned 1 [0168.978] SetBrushOrgEx (in: hdc=0x50109f2, x=0, y=0, lppt=0x0 | out: lppt=0x0) returned 1 [0168.978] MulDiv (nNumber=2, nNumerator=2, nDenominator=2) returned 2 [0168.978] MulDiv (nNumber=2, nNumerator=1, nDenominator=2) returned 1 [0168.978] MulDiv (nNumber=2, nNumerator=1, nDenominator=2) returned 1 [0168.978] MulDiv (nNumber=2, nNumerator=1, nDenominator=2) returned 1 [0168.978] MulDiv (nNumber=2, nNumerator=2, nDenominator=2) returned 2 [0168.978] MulDiv (nNumber=2, nNumerator=2, nDenominator=2) returned 2 [0168.978] Polygon (hdc=0x50109f2, apt=0x26c5f8, cpt=6) returned 1 [0168.979] SelectObject (hdc=0x50109f2, h=0x42100a16) returned 0x4b100874 [0168.979] UnrealizeObject (h=0x42100a16) returned 1 [0168.979] SetBrushOrgEx (in: hdc=0x50109f2, x=0, y=0, lppt=0x0 | out: lppt=0x0) returned 1 [0168.979] MulDiv (nNumber=2, nNumerator=2, nDenominator=2) returned 2 [0168.979] MulDiv (nNumber=2, nNumerator=1, nDenominator=2) returned 1 [0168.979] MulDiv (nNumber=2, nNumerator=1, nDenominator=2) returned 1 [0168.979] MulDiv (nNumber=2, nNumerator=1, nDenominator=2) returned 1 [0168.979] MulDiv (nNumber=2, nNumerator=2, nDenominator=2) returned 2 [0168.979] MulDiv (nNumber=2, nNumerator=2, nDenominator=2) returned 2 [0168.979] Polygon (hdc=0x50109f2, apt=0x26c5f8, cpt=8) returned 1 [0168.980] SelectObject (hdc=0x50109f2, h=0x1900010) returned 0x42100a16 [0168.980] IntersectRect (in: lprcDst=0x26c958, lprcSrc1=0x26c958, lprcSrc2=0x4c14a0 | out: lprcDst=0x26c958) returned 1 [0168.980] GetDeviceCaps (hdc=0x50109f2, index=2) returned 1 [0168.980] RtlAllocateHeap (HeapHandle=0x470000, Flags=0x8, Size=0x1c) returned 0x4da4d8 [0168.980] LoadLibraryA (lpLibFileName="UxTheme.dll") returned 0x750f0000 [0168.981] GetProcAddress (hModule=0x750f0000, lpProcName="IsAppThemed") returned 0x75117009 [0168.981] IsAppThemed () returned 0x1 [0168.981] GetProcAddress (hModule=0x750f0000, lpProcName=0x3d) returned 0x751106fe [0168.981] OpenThemeDataEx () returned 0x30002 [0168.981] GetProcAddress (hModule=0x750f0000, lpProcName="DrawThemeBackground") returned 0x7510d464 [0168.981] DrawThemeBackground () returned 0x0 [0168.981] DrawThemeBackground () returned 0x0 [0168.982] MulDiv (nNumber=32401, nNumerator=0, nDenominator=61400) returned 0 [0168.982] DrawThemeBackground () returned 0x0 [0168.982] DrawThemeBackground () returned 0x0 [0168.982] DrawThemeBackground () returned 0x0 [0168.982] IntersectRect (in: lprcDst=0x26ca30, lprcSrc1=0x26ca30, lprcSrc2=0x4c1480 | out: lprcDst=0x26ca30) returned 1 [0168.982] RtlAllocateHeap (HeapHandle=0x470000, Flags=0x0, Size=0x30) returned 0x4c7708 [0168.982] ExtCreateRegion (lpx=0x0, nCount=0x30, lpData=0x4c7708) returned 0x350401b3 [0168.982] HeapFree (in: hHeap=0x470000, dwFlags=0x0, lpMem=0x4c7708 | out: hHeap=0x470000) returned 1 [0168.982] SelectClipRgn (hdc=0x50109f2, hrgn=0x350401b3) returned 2 [0168.982] IntersectRect (in: lprcDst=0x26c804, lprcSrc1=0x26c804, lprcSrc2=0x26c7d4 | out: lprcDst=0x26c804) returned 1 [0168.982] IntersectRect (in: lprcDst=0x4c1490, lprcSrc1=0x4c1490, lprcSrc2=0x26c7f4 | out: lprcDst=0x4c1490) returned 1 [0168.982] IntersectRect (in: lprcDst=0x26c640, lprcSrc1=0x26c640, lprcSrc2=0x4c1480 | out: lprcDst=0x26c640) returned 1 [0168.982] RtlAllocateHeap (HeapHandle=0x470000, Flags=0x0, Size=0x44) returned 0x4c91a0 [0168.982] HeapFree (in: hHeap=0x470000, dwFlags=0x0, lpMem=0x4c91a0 | out: hHeap=0x470000) returned 1 [0168.982] RtlAllocateHeap (HeapHandle=0x470000, Flags=0x0, Size=0x44) returned 0x4c91a0 [0168.982] IntersectRect (in: lprcDst=0x26a194, lprcSrc1=0x26a194, lprcSrc2=0x26a164 | out: lprcDst=0x26a194) returned 1 [0168.982] HeapFree (in: hHeap=0x470000, dwFlags=0x0, lpMem=0x0 | out: hHeap=0x470000) returned 1 [0168.982] IntersectRect (in: lprcDst=0x4c1490, lprcSrc1=0x4c1490, lprcSrc2=0x26a068 | out: lprcDst=0x4c1490) returned 1 [0168.982] IntersectRect (in: lprcDst=0x26a068, lprcSrc1=0x26a068, lprcSrc2=0x4c14a0 | out: lprcDst=0x26a068) returned 1 [0168.982] GetDeviceCaps (hdc=0x17010257, index=2) returned 1 [0168.982] RtlAllocateHeap (HeapHandle=0x470000, Flags=0x0, Size=0x30) returned 0x4c7708 [0168.982] ExtCreateRegion (lpx=0x0, nCount=0x30, lpData=0x4c7708) returned 0x8d0407a4 [0168.982] HeapFree (in: hHeap=0x470000, dwFlags=0x0, lpMem=0x4c7708 | out: hHeap=0x470000) returned 1 [0168.982] SelectClipRgn (hdc=0x17010257, hrgn=0x8d0407a4) returned 2 [0168.982] DeleteObject (ho=0x8d0407a4) returned 1 [0168.982] SelectObject (hdc=0x17010257, h=0x1d100258) returned 0x1900010 [0168.982] PatBlt (hdc=0x17010257, x=2, y=0, w=1303, h=150, rop=0xf00021) returned 1 [0168.983] SelectObject (hdc=0x17010257, h=0x1900010) returned 0x1d100258 [0168.983] IntersectRect (in: lprcDst=0x4c1490, lprcSrc1=0x4c1490, lprcSrc2=0x26a184 | out: lprcDst=0x4c1490) returned 1 [0168.983] IntersectRect (in: lprcDst=0x4c1490, lprcSrc1=0x4c1490, lprcSrc2=0x26a1a4 | out: lprcDst=0x4c1490) returned 1 [0168.983] IntersectRect (in: lprcDst=0x269d30, lprcSrc1=0x269d30, lprcSrc2=0x269d00 | out: lprcDst=0x269d30) returned 1 [0168.983] IntersectRect (in: lprcDst=0x4c1518, lprcSrc1=0x4c1518, lprcSrc2=0x269d20 | out: lprcDst=0x4c1518) returned 1 [0168.983] IntersectRect (in: lprcDst=0x269e5c, lprcSrc1=0x269e5c, lprcSrc2=0x269e2c | out: lprcDst=0x269e5c) returned 1 [0168.983] HeapFree (in: hHeap=0x470000, dwFlags=0x0, lpMem=0x0 | out: hHeap=0x470000) returned 1 [0168.983] IntersectRect (in: lprcDst=0x269d40, lprcSrc1=0x269d40, lprcSrc2=0x4c14a0 | out: lprcDst=0x269d40) returned 0 [0168.983] IntersectRect (in: lprcDst=0x4c1490, lprcSrc1=0x4c1490, lprcSrc2=0x269d30 | out: lprcDst=0x4c1490) returned 1 [0168.983] IntersectRect (in: lprcDst=0x269d30, lprcSrc1=0x269d30, lprcSrc2=0x4c14a0 | out: lprcDst=0x269d30) returned 1 [0168.983] GetDeviceCaps (hdc=0x17010257, index=2) returned 1 [0168.983] IntersectRect (in: lprcDst=0x269b2c, lprcSrc1=0x26f494, lprcSrc2=0x269b2c | out: lprcDst=0x269b2c) returned 1 [0168.983] CreateSolidBrush (color=0x2e7e7e7) returned 0xffffffff80100a17 [0168.983] SelectObject (hdc=0x17010257, h=0x80100a17) returned 0x1900010 [0168.983] GetStockObject (i=8) returned 0x1b00016 [0168.983] SelectObject (hdc=0x17010257, h=0x1b00016) returned 0x1b00017 [0168.983] GetROP2 (hdc=0x17010257) returned 13 [0168.983] SetBkMode (hdc=0x17010257, mode=2) returned 2 [0168.983] Rectangle (hdc=0x17010257, left=2, top=0, right=1306, bottom=151) returned 1 [0168.983] SetBkMode (hdc=0x17010257, mode=2) returned 2 [0168.983] SelectObject (hdc=0x17010257, h=0x1b00017) returned 0x1b00016 [0168.983] SelectObject (hdc=0x17010257, h=0x1900010) returned 0x80100a17 [0168.983] IntersectRect (in: lprcDst=0x4c1490, lprcSrc1=0x4c1490, lprcSrc2=0x269e4c | out: lprcDst=0x4c1490) returned 1 [0168.983] IntersectRect (in: lprcDst=0x4c1490, lprcSrc1=0x4c1490, lprcSrc2=0x269e6c | out: lprcDst=0x4c1490) returned 1 [0168.983] IntersectRect (in: lprcDst=0x2699c8, lprcSrc1=0x2699c8, lprcSrc2=0x269958 | out: lprcDst=0x2699c8) returned 1 [0168.983] IntersectRect (in: lprcDst=0x4c1518, lprcSrc1=0x4c1518, lprcSrc2=0x2699e8 | out: lprcDst=0x4c1518) returned 1 [0168.983] IntersectRect (in: lprcDst=0x269af4, lprcSrc1=0x269af4, lprcSrc2=0x269a04 | out: lprcDst=0x269af4) returned 1 [0168.984] HeapFree (in: hHeap=0x470000, dwFlags=0x0, lpMem=0x0 | out: hHeap=0x470000) returned 1 [0168.984] IntersectRect (in: lprcDst=0x4c1490, lprcSrc1=0x4c1490, lprcSrc2=0x269b14 | out: lprcDst=0x4c1490) returned 1 [0168.984] IntersectRect (in: lprcDst=0x269af4, lprcSrc1=0x269af4, lprcSrc2=0x269a04 | out: lprcDst=0x269af4) returned 1 [0168.984] HeapFree (in: hHeap=0x470000, dwFlags=0x0, lpMem=0x0 | out: hHeap=0x470000) returned 1 [0168.984] IntersectRect (in: lprcDst=0x4c1490, lprcSrc1=0x4c1490, lprcSrc2=0x269b14 | out: lprcDst=0x4c1490) returned 1 [0168.984] IntersectRect (in: lprcDst=0x4c1490, lprcSrc1=0x4c1490, lprcSrc2=0x269b34 | out: lprcDst=0x4c1490) returned 1 [0168.984] IntersectRect (in: lprcDst=0x269634, lprcSrc1=0x269634, lprcSrc2=0x2694e8 | out: lprcDst=0x269634) returned 1 [0168.984] HeapFree (in: hHeap=0x470000, dwFlags=0x0, lpMem=0x0 | out: hHeap=0x470000) returned 1 [0168.984] IntersectRect (in: lprcDst=0x4c1490, lprcSrc1=0x4c1490, lprcSrc2=0x269634 | out: lprcDst=0x4c1490) returned 1 [0168.984] IntersectRect (in: lprcDst=0x269598, lprcSrc1=0x269598, lprcSrc2=0x4c14a0 | out: lprcDst=0x269598) returned 1 [0168.984] IntersectRect (in: lprcDst=0x4c1490, lprcSrc1=0x4c1490, lprcSrc2=0x26954c | out: lprcDst=0x4c1490) returned 1 [0168.984] GetDeviceCaps (hdc=0x17010257, index=2) returned 1 [0168.984] GetCurrentObject (hdc=0x17010257, type=0x6) returned 0x18a002e [0168.984] SetBkMode (hdc=0x17010257, mode=1) returned 2 [0168.984] SetTextAlign (hdc=0x17010257, align=0x0) returned 0x0 [0168.984] LsSetDoc () returned 0x0 [0168.984] LsCreateLine () returned 0x0 [0168.984] HeapFree (in: hHeap=0x470000, dwFlags=0x0, lpMem=0x0 | out: hHeap=0x470000) returned 1 [0168.985] RtlAllocateHeap (HeapHandle=0x470000, Flags=0x0, Size=0x18) returned 0x4dcc40 [0168.985] RtlAllocateHeap (HeapHandle=0x470000, Flags=0x0, Size=0x10) returned 0x4ef490 [0168.985] HeapFree (in: hHeap=0x470000, dwFlags=0x0, lpMem=0x0 | out: hHeap=0x470000) returned 1 [0168.985] LsdnFinishRegular () returned 0x0 [0168.985] LsDisplayLine () returned 0x0 [0168.985] LsDestroyLine () returned 0x0 [0168.985] HeapFree (in: hHeap=0x470000, dwFlags=0x0, lpMem=0x4dcc40 | out: hHeap=0x470000) returned 1 [0168.985] HeapFree (in: hHeap=0x470000, dwFlags=0x0, lpMem=0x0 | out: hHeap=0x470000) returned 1 [0168.985] SelectObject (hdc=0x17010257, h=0x18a002e) returned 0x18a002e [0168.985] HeapFree (in: hHeap=0x470000, dwFlags=0x0, lpMem=0x0 | out: hHeap=0x470000) returned 1 [0168.985] HeapFree (in: hHeap=0x470000, dwFlags=0x0, lpMem=0x4ef490 | out: hHeap=0x470000) returned 1 [0168.985] HeapFree (in: hHeap=0x470000, dwFlags=0x0, lpMem=0x0 | out: hHeap=0x470000) returned 1 [0168.985] HeapFree (in: hHeap=0x470000, dwFlags=0x0, lpMem=0x0 | out: hHeap=0x470000) returned 1 [0168.985] HeapFree (in: hHeap=0x470000, dwFlags=0x0, lpMem=0x0 | out: hHeap=0x470000) returned 1 [0168.985] HeapFree (in: hHeap=0x470000, dwFlags=0x0, lpMem=0x0 | out: hHeap=0x470000) returned 1 [0168.985] HeapFree (in: hHeap=0x470000, dwFlags=0x0, lpMem=0x0 | out: hHeap=0x470000) returned 1 [0168.985] IntersectRect (in: lprcDst=0x2697bc, lprcSrc1=0x2697bc, lprcSrc2=0x2696cc | out: lprcDst=0x2697bc) returned 1 [0168.985] HeapFree (in: hHeap=0x470000, dwFlags=0x0, lpMem=0x0 | out: hHeap=0x470000) returned 1 [0168.985] IntersectRect (in: lprcDst=0x2696d0, lprcSrc1=0x2696d0, lprcSrc2=0x2696c0 | out: lprcDst=0x2696d0) returned 1 [0168.985] GetDeviceCaps (hdc=0x17010257, index=2) returned 1 [0168.986] RtlAllocateHeap (HeapHandle=0x470000, Flags=0x0, Size=0x30) returned 0x4c7708 [0168.986] ExtCreateRegion (lpx=0x0, nCount=0x30, lpData=0x4c7708) returned 0x8e0407a4 [0168.986] HeapFree (in: hHeap=0x470000, dwFlags=0x0, lpMem=0x4c7708 | out: hHeap=0x470000) returned 1 [0168.986] SelectClipRgn (hdc=0x17010257, hrgn=0x8e0407a4) returned 2 [0168.986] DeleteObject (ho=0x8e0407a4) returned 1 [0168.986] _CIsqrt () returned 0x3f1a027f [0168.986] _CIsqrt () returned 0x3f1a027f [0168.986] _CIatan2 () returned 0x20 [0168.986] _CIatan2 () returned 0x20 [0168.986] GetStockObject (i=8) returned 0x1b00016 [0168.986] SelectObject (hdc=0x17010257, h=0x1b00016) returned 0x1b00017 [0168.986] GetViewportOrgEx (in: hdc=0x17010257, lppoint=0x2694b4 | out: lppoint=0x2694b4) returned 1 [0168.986] CreateSolidBrush (color=0x29797f7) returned 0x1e10024f [0168.986] SelectObject (hdc=0x17010257, h=0x1e10024f) returned 0x1900010 [0168.986] UnrealizeObject (h=0x1e10024f) returned 1 [0168.986] SetBrushOrgEx (in: hdc=0x17010257, x=67, y=65, lppt=0x0 | out: lppt=0x0) returned 1 [0168.986] MulDiv (nNumber=3, nNumerator=3, nDenominator=3) returned 3 [0168.986] MulDiv (nNumber=3, nNumerator=0, nDenominator=3) returned 0 [0168.986] MulDiv (nNumber=3, nNumerator=0, nDenominator=3) returned 0 [0168.986] MulDiv (nNumber=3, nNumerator=0, nDenominator=3) returned 0 [0168.986] MulDiv (nNumber=3, nNumerator=3, nDenominator=3) returned 3 [0168.986] MulDiv (nNumber=3, nNumerator=3, nDenominator=3) returned 3 [0168.986] Polygon (hdc=0x17010257, apt=0x2693d8, cpt=6) returned 1 [0168.986] MulDiv (nNumber=3, nNumerator=3, nDenominator=3) returned 3 [0168.986] MulDiv (nNumber=3, nNumerator=0, nDenominator=3) returned 0 [0168.986] MulDiv (nNumber=3, nNumerator=0, nDenominator=3) returned 0 [0168.986] MulDiv (nNumber=3, nNumerator=0, nDenominator=3) returned 0 [0168.986] MulDiv (nNumber=3, nNumerator=3, nDenominator=3) returned 3 [0168.986] MulDiv (nNumber=3, nNumerator=3, nDenominator=3) returned 3 [0168.986] Polygon (hdc=0x17010257, apt=0x2693d8, cpt=6) returned 1 [0168.986] SelectObject (hdc=0x17010257, h=0x1900010) returned 0x1e10024f [0168.986] IntersectRect (in: lprcDst=0x4c1490, lprcSrc1=0x4c1490, lprcSrc2=0x2696c0 | out: lprcDst=0x4c1490) returned 1 [0168.986] IntersectRect (in: lprcDst=0x2696c0, lprcSrc1=0x2696c0, lprcSrc2=0x4c14a0 | out: lprcDst=0x2696c0) returned 1 [0168.987] GetDeviceCaps (hdc=0x17010257, index=2) returned 1 [0168.987] IntersectRect (in: lprcDst=0x2694bc, lprcSrc1=0x26f494, lprcSrc2=0x2694bc | out: lprcDst=0x2694bc) returned 1 [0168.987] CreateSolidBrush (color=0x2ffffff) returned 0x10100276 [0168.987] SelectObject (hdc=0x17010257, h=0x10100276) returned 0x1900010 [0168.987] GetStockObject (i=8) returned 0x1b00016 [0168.987] SelectObject (hdc=0x17010257, h=0x1b00016) returned 0x1b00016 [0168.987] GetROP2 (hdc=0x17010257) returned 13 [0168.987] SetBkMode (hdc=0x17010257, mode=2) returned 1 [0168.987] Rectangle (hdc=0x17010257, left=70, top=68, right=1238, bottom=151) returned 1 [0168.987] SetBkMode (hdc=0x17010257, mode=1) returned 2 [0168.987] SelectObject (hdc=0x17010257, h=0x1b00016) returned 0x1b00016 [0168.987] SelectObject (hdc=0x17010257, h=0x1900010) returned 0x10100276 [0168.987] IntersectRect (in: lprcDst=0x4c1490, lprcSrc1=0x4c1490, lprcSrc2=0x2697dc | out: lprcDst=0x4c1490) returned 1 [0168.987] IntersectRect (in: lprcDst=0x4c1490, lprcSrc1=0x4c1490, lprcSrc2=0x2697fc | out: lprcDst=0x4c1490) returned 1 [0168.987] IntersectRect (in: lprcDst=0x2692fc, lprcSrc1=0x2692fc, lprcSrc2=0x2691b0 | out: lprcDst=0x2692fc) returned 1 [0168.987] HeapFree (in: hHeap=0x470000, dwFlags=0x0, lpMem=0x0 | out: hHeap=0x470000) returned 1 [0168.987] IntersectRect (in: lprcDst=0x4c1490, lprcSrc1=0x4c1490, lprcSrc2=0x2692fc | out: lprcDst=0x4c1490) returned 1 [0168.987] IntersectRect (in: lprcDst=0x269260, lprcSrc1=0x269260, lprcSrc2=0x4c14a0 | out: lprcDst=0x269260) returned 1 [0168.987] IntersectRect (in: lprcDst=0x4c1490, lprcSrc1=0x4c1490, lprcSrc2=0x269214 | out: lprcDst=0x4c1490) returned 1 [0168.987] GetDeviceCaps (hdc=0x17010257, index=2) returned 1 [0168.987] SetBkMode (hdc=0x17010257, mode=1) returned 1 [0168.988] SetTextAlign (hdc=0x17010257, align=0x0) returned 0x0 [0168.988] HeapFree (in: hHeap=0x470000, dwFlags=0x0, lpMem=0x0 | out: hHeap=0x470000) returned 1 [0168.988] LsSetDoc () returned 0x0 [0168.988] LsCreateLine () returned 0x0 [0168.988] HeapFree (in: hHeap=0x470000, dwFlags=0x0, lpMem=0x0 | out: hHeap=0x470000) returned 1 [0168.988] RtlAllocateHeap (HeapHandle=0x470000, Flags=0x8, Size=0xb4) returned 0x4f1938 [0168.989] LsDisplayLine () returned 0x0 [0168.989] SelectObject (hdc=0x17010257, h=0x610a086b) returned 0x18a002e [0168.989] SetTextColor (hdc=0x17010257, color=0x2555555) returned 0x0 [0168.989] SetBkMode (hdc=0x17010257, mode=1) returned 1 [0168.989] GetTextAlign (hdc=0x17010257) returned 0x0 [0168.989] SetTextAlign (hdc=0x17010257, align=0x18) returned 0x0 [0168.989] _CIatan2 () returned 0x20 [0168.989] _CIatan2 () returned 0x20 [0168.989] ExtTextOutW (hdc=0x17010257, x=103, y=124, options=0x4, lprect=0x268408, lpString="E P S I L O N em back, please contact us at our email below. ", c=0xd, lpDx=0x268440) returned 1 [0168.989] SetTextAlign (hdc=0x17010257, align=0x0) returned 0x18 [0168.989] HeapFree (in: hHeap=0x470000, dwFlags=0x0, lpMem=0x0 | out: hHeap=0x470000) returned 1 [0168.990] SelectObject (hdc=0x17010257, h=0x610a086b) returned 0x610a086b [0168.990] SetTextColor (hdc=0x17010257, color=0x2555555) returned 0x2555555 [0168.990] SetBkMode (hdc=0x17010257, mode=1) returned 1 [0168.990] GetTextAlign (hdc=0x17010257) returned 0x0 [0168.990] SetTextAlign (hdc=0x17010257, align=0x18) returned 0x0 [0168.990] _CIatan2 () returned 0x20 [0168.990] _CIatan2 () returned 0x20 [0168.990] ExtTextOutW (hdc=0x17010257, x=265, y=124, options=0x4, lprect=0x268408, lpString=" em back, please contact us at our email below. ", c=0x1, lpDx=0x268440) returned 1 [0168.990] SetTextAlign (hdc=0x17010257, align=0x0) returned 0x18 [0168.990] HeapFree (in: hHeap=0x470000, dwFlags=0x0, lpMem=0x0 | out: hHeap=0x470000) returned 1 [0168.990] LsDestroyLine () returned 0x0 [0168.990] HeapFree (in: hHeap=0x470000, dwFlags=0x0, lpMem=0x0 | out: hHeap=0x470000) returned 1 [0168.990] LsSetDoc () returned 0x0 [0168.990] LsCreateLine () returned 0x0 [0168.990] HeapFree (in: hHeap=0x470000, dwFlags=0x0, lpMem=0x0 | out: hHeap=0x470000) returned 1 [0168.991] LsDisplayLine () returned 0x0 [0168.991] SelectObject (hdc=0x17010257, h=0x540a084d) returned 0x610a086b [0168.991] SetTextColor (hdc=0x17010257, color=0x2555555) returned 0x2555555 [0168.991] SetBkMode (hdc=0x17010257, mode=1) returned 1 [0168.991] GetTextAlign (hdc=0x17010257) returned 0x0 [0168.991] SetTextAlign (hdc=0x17010257, align=0x18) returned 0x0 [0168.991] _CIatan2 () returned 0x20 [0168.991] _CIatan2 () returned 0x20 [0168.991] ExtTextOutW (hdc=0x17010257, x=103, y=145, options=0x4, lprect=0x268408, lpString="Ransomware N em back, please contact us at our email below. ", c=0xa, lpDx=0x268440) returned 1 [0168.992] SetTextAlign (hdc=0x17010257, align=0x0) returned 0x18 [0168.992] HeapFree (in: hHeap=0x470000, dwFlags=0x0, lpMem=0x0 | out: hHeap=0x470000) returned 1 [0168.992] SelectObject (hdc=0x17010257, h=0x4c0a025b) returned 0x540a084d [0168.992] SetTextColor (hdc=0x17010257, color=0x2222222) returned 0x2555555 [0168.992] SetBkMode (hdc=0x17010257, mode=1) returned 1 [0168.992] GetTextAlign (hdc=0x17010257) returned 0x0 [0168.992] SetTextAlign (hdc=0x17010257, align=0x18) returned 0x0 [0168.992] _CIatan2 () returned 0x20 [0168.992] _CIatan2 () returned 0x20 [0168.992] ExtTextOutW (hdc=0x17010257, x=195, y=145, options=0x4, lprect=0x268408, lpString=" N em back, please contact us at our email below. ", c=0x1, lpDx=0x268440) returned 1 [0168.993] SetTextAlign (hdc=0x17010257, align=0x0) returned 0x18 [0168.993] HeapFree (in: hHeap=0x470000, dwFlags=0x0, lpMem=0x0 | out: hHeap=0x470000) returned 1 [0168.993] SelectObject (hdc=0x17010257, h=0x4c0a025b) returned 0x4c0a025b [0168.993] SetTextColor (hdc=0x17010257, color=0x2222222) returned 0x2222222 [0168.993] SetBkMode (hdc=0x17010257, mode=1) returned 1 [0168.993] HeapFree (in: hHeap=0x470000, dwFlags=0x0, lpMem=0x0 | out: hHeap=0x470000) returned 1 [0168.993] LsDestroyLine () returned 0x0 [0168.993] HeapFree (in: hHeap=0x470000, dwFlags=0x0, lpMem=0x0 | out: hHeap=0x470000) returned 1 [0168.993] SelectObject (hdc=0x17010257, h=0x18a002e) returned 0x4c0a025b [0168.993] HeapFree (in: hHeap=0x470000, dwFlags=0x0, lpMem=0x0 | out: hHeap=0x470000) returned 1 [0168.993] BitBlt (hdc=0x50109f2, x=0, y=2, cx=1324, cy=150, hdcSrc=0x17010257, x1=0, y1=0, rop=0xcc0020) returned 1 [0168.993] HeapFree (in: hHeap=0x470000, dwFlags=0x0, lpMem=0x4c91a0 | out: hHeap=0x470000) returned 1 [0168.993] DeleteObject (ho=0x350401b3) returned 1 [0168.993] RtlAllocateHeap (HeapHandle=0x470000, Flags=0x0, Size=0x44) returned 0x4c91a0 [0168.993] IntersectRect (in: lprcDst=0x26a194, lprcSrc1=0x26a194, lprcSrc2=0x26a164 | out: lprcDst=0x26a194) returned 1 [0168.994] HeapFree (in: hHeap=0x470000, dwFlags=0x0, lpMem=0x0 | out: hHeap=0x470000) returned 1 [0168.994] IntersectRect (in: lprcDst=0x4c1490, lprcSrc1=0x4c1490, lprcSrc2=0x26a068 | out: lprcDst=0x4c1490) returned 1 [0168.994] IntersectRect (in: lprcDst=0x26a068, lprcSrc1=0x26a068, lprcSrc2=0x4c14a0 | out: lprcDst=0x26a068) returned 1 [0168.994] GetDeviceCaps (hdc=0x17010257, index=2) returned 1 [0168.994] RtlAllocateHeap (HeapHandle=0x470000, Flags=0x0, Size=0x30) returned 0x4c7708 [0168.994] ExtCreateRegion (lpx=0x0, nCount=0x30, lpData=0x4c7708) returned 0x8f0407a4 [0168.994] HeapFree (in: hHeap=0x470000, dwFlags=0x0, lpMem=0x4c7708 | out: hHeap=0x470000) returned 1 [0168.994] SelectClipRgn (hdc=0x17010257, hrgn=0x8f0407a4) returned 2 [0168.994] DeleteObject (ho=0x8f0407a4) returned 1 [0168.994] SelectObject (hdc=0x17010257, h=0x1d100258) returned 0x1900010 [0168.994] PatBlt (hdc=0x17010257, x=2, y=0, w=1303, h=150, rop=0xf00021) returned 1 [0168.994] SelectObject (hdc=0x17010257, h=0x1900010) returned 0x1d100258 [0168.994] IntersectRect (in: lprcDst=0x4c1490, lprcSrc1=0x4c1490, lprcSrc2=0x26a184 | out: lprcDst=0x4c1490) returned 1 [0168.994] IntersectRect (in: lprcDst=0x4c1490, lprcSrc1=0x4c1490, lprcSrc2=0x26a1a4 | out: lprcDst=0x4c1490) returned 1 [0168.994] IntersectRect (in: lprcDst=0x269d30, lprcSrc1=0x269d30, lprcSrc2=0x269d00 | out: lprcDst=0x269d30) returned 1 [0168.994] IntersectRect (in: lprcDst=0x4c1518, lprcSrc1=0x4c1518, lprcSrc2=0x269d20 | out: lprcDst=0x4c1518) returned 1 [0168.994] IntersectRect (in: lprcDst=0x269e5c, lprcSrc1=0x269e5c, lprcSrc2=0x269e2c | out: lprcDst=0x269e5c) returned 1 [0168.994] HeapFree (in: hHeap=0x470000, dwFlags=0x0, lpMem=0x0 | out: hHeap=0x470000) returned 1 [0168.994] IntersectRect (in: lprcDst=0x269d40, lprcSrc1=0x269d40, lprcSrc2=0x4c14a0 | out: lprcDst=0x269d40) returned 0 [0168.994] IntersectRect (in: lprcDst=0x4c1490, lprcSrc1=0x4c1490, lprcSrc2=0x269d30 | out: lprcDst=0x4c1490) returned 1 [0168.994] IntersectRect (in: lprcDst=0x269d30, lprcSrc1=0x269d30, lprcSrc2=0x4c14a0 | out: lprcDst=0x269d30) returned 1 [0168.994] GetDeviceCaps (hdc=0x17010257, index=2) returned 1 [0168.994] IntersectRect (in: lprcDst=0x269b2c, lprcSrc1=0x26f494, lprcSrc2=0x269b2c | out: lprcDst=0x269b2c) returned 1 [0168.994] SelectObject (hdc=0x17010257, h=0x80100a17) returned 0x1900010 [0168.994] GetStockObject (i=8) returned 0x1b00016 [0168.994] SelectObject (hdc=0x17010257, h=0x1b00016) returned 0x1b00016 [0168.994] GetROP2 (hdc=0x17010257) returned 13 [0168.994] SetBkMode (hdc=0x17010257, mode=2) returned 1 [0168.994] Rectangle (hdc=0x17010257, left=2, top=0, right=1306, bottom=151) returned 1 [0168.995] SetBkMode (hdc=0x17010257, mode=1) returned 2 [0168.995] SelectObject (hdc=0x17010257, h=0x1b00016) returned 0x1b00016 [0168.995] SelectObject (hdc=0x17010257, h=0x1900010) returned 0x80100a17 [0168.995] IntersectRect (in: lprcDst=0x4c1490, lprcSrc1=0x4c1490, lprcSrc2=0x269e4c | out: lprcDst=0x4c1490) returned 1 [0168.995] IntersectRect (in: lprcDst=0x4c1490, lprcSrc1=0x4c1490, lprcSrc2=0x269e6c | out: lprcDst=0x4c1490) returned 1 [0168.995] IntersectRect (in: lprcDst=0x2699c8, lprcSrc1=0x2699c8, lprcSrc2=0x269958 | out: lprcDst=0x2699c8) returned 1 [0168.995] IntersectRect (in: lprcDst=0x4c1518, lprcSrc1=0x4c1518, lprcSrc2=0x2699e8 | out: lprcDst=0x4c1518) returned 1 [0168.995] IntersectRect (in: lprcDst=0x269af4, lprcSrc1=0x269af4, lprcSrc2=0x269a04 | out: lprcDst=0x269af4) returned 1 [0168.995] HeapFree (in: hHeap=0x470000, dwFlags=0x0, lpMem=0x0 | out: hHeap=0x470000) returned 1 [0168.995] IntersectRect (in: lprcDst=0x4c1490, lprcSrc1=0x4c1490, lprcSrc2=0x269b14 | out: lprcDst=0x4c1490) returned 1 [0168.995] IntersectRect (in: lprcDst=0x269af4, lprcSrc1=0x269af4, lprcSrc2=0x269a04 | out: lprcDst=0x269af4) returned 1 [0168.995] HeapFree (in: hHeap=0x470000, dwFlags=0x0, lpMem=0x0 | out: hHeap=0x470000) returned 1 [0168.995] IntersectRect (in: lprcDst=0x4c1490, lprcSrc1=0x4c1490, lprcSrc2=0x269b14 | out: lprcDst=0x4c1490) returned 1 [0168.995] IntersectRect (in: lprcDst=0x4c1490, lprcSrc1=0x4c1490, lprcSrc2=0x269b34 | out: lprcDst=0x4c1490) returned 1 [0168.995] IntersectRect (in: lprcDst=0x269634, lprcSrc1=0x269634, lprcSrc2=0x2694e8 | out: lprcDst=0x269634) returned 1 [0168.995] HeapFree (in: hHeap=0x470000, dwFlags=0x0, lpMem=0x0 | out: hHeap=0x470000) returned 1 [0168.995] IntersectRect (in: lprcDst=0x4c1490, lprcSrc1=0x4c1490, lprcSrc2=0x269634 | out: lprcDst=0x4c1490) returned 1 [0168.995] IntersectRect (in: lprcDst=0x269598, lprcSrc1=0x269598, lprcSrc2=0x4c14a0 | out: lprcDst=0x269598) returned 1 [0168.995] IntersectRect (in: lprcDst=0x4c1490, lprcSrc1=0x4c1490, lprcSrc2=0x26954c | out: lprcDst=0x4c1490) returned 1 [0168.995] GetDeviceCaps (hdc=0x17010257, index=2) returned 1 [0168.995] SetBkMode (hdc=0x17010257, mode=1) returned 1 [0168.996] SetTextAlign (hdc=0x17010257, align=0x0) returned 0x0 [0168.996] LsSetDoc () returned 0x0 [0168.996] LsCreateLine () returned 0x0 [0168.996] HeapFree (in: hHeap=0x470000, dwFlags=0x0, lpMem=0x0 | out: hHeap=0x470000) returned 1 [0168.996] RtlAllocateHeap (HeapHandle=0x470000, Flags=0x0, Size=0x18) returned 0x4dcc40 [0168.996] RtlAllocateHeap (HeapHandle=0x470000, Flags=0x0, Size=0x10) returned 0x4ab950 [0168.996] HeapFree (in: hHeap=0x470000, dwFlags=0x0, lpMem=0x0 | out: hHeap=0x470000) returned 1 [0168.996] LsdnFinishRegular () returned 0x0 [0168.996] LsDisplayLine () returned 0x0 [0168.996] LsDestroyLine () returned 0x0 [0168.996] HeapFree (in: hHeap=0x470000, dwFlags=0x0, lpMem=0x4dcc40 | out: hHeap=0x470000) returned 1 [0168.997] HeapFree (in: hHeap=0x470000, dwFlags=0x0, lpMem=0x0 | out: hHeap=0x470000) returned 1 [0168.997] SelectObject (hdc=0x17010257, h=0x18a002e) returned 0x18a002e [0168.997] HeapFree (in: hHeap=0x470000, dwFlags=0x0, lpMem=0x0 | out: hHeap=0x470000) returned 1 [0168.997] HeapFree (in: hHeap=0x470000, dwFlags=0x0, lpMem=0x4ab950 | out: hHeap=0x470000) returned 1 [0168.997] HeapFree (in: hHeap=0x470000, dwFlags=0x0, lpMem=0x0 | out: hHeap=0x470000) returned 1 [0168.997] HeapFree (in: hHeap=0x470000, dwFlags=0x0, lpMem=0x0 | out: hHeap=0x470000) returned 1 [0168.997] HeapFree (in: hHeap=0x470000, dwFlags=0x0, lpMem=0x0 | out: hHeap=0x470000) returned 1 [0168.997] HeapFree (in: hHeap=0x470000, dwFlags=0x0, lpMem=0x0 | out: hHeap=0x470000) returned 1 [0168.997] HeapFree (in: hHeap=0x470000, dwFlags=0x0, lpMem=0x0 | out: hHeap=0x470000) returned 1 [0168.997] IntersectRect (in: lprcDst=0x2697bc, lprcSrc1=0x2697bc, lprcSrc2=0x2696cc | out: lprcDst=0x2697bc) returned 1 [0168.997] HeapFree (in: hHeap=0x470000, dwFlags=0x0, lpMem=0x0 | out: hHeap=0x470000) returned 1 [0168.997] IntersectRect (in: lprcDst=0x2696d0, lprcSrc1=0x2696d0, lprcSrc2=0x2696c0 | out: lprcDst=0x2696d0) returned 1 [0168.997] GetDeviceCaps (hdc=0x17010257, index=2) returned 1 [0168.997] RtlAllocateHeap (HeapHandle=0x470000, Flags=0x0, Size=0x30) returned 0x4c7708 [0168.997] ExtCreateRegion (lpx=0x0, nCount=0x30, lpData=0x4c7708) returned 0x360401b3 [0168.997] HeapFree (in: hHeap=0x470000, dwFlags=0x0, lpMem=0x4c7708 | out: hHeap=0x470000) returned 1 [0168.997] SelectClipRgn (hdc=0x17010257, hrgn=0x360401b3) returned 2 [0168.997] DeleteObject (ho=0x360401b3) returned 1 [0168.997] _CIsqrt () returned 0x3f1a027f [0168.997] _CIsqrt () returned 0x3f1a027f [0168.997] _CIatan2 () returned 0x20 [0168.997] _CIatan2 () returned 0x20 [0168.997] GetStockObject (i=8) returned 0x1b00016 [0168.997] SelectObject (hdc=0x17010257, h=0x1b00016) returned 0x1b00016 [0168.997] GetViewportOrgEx (in: hdc=0x17010257, lppoint=0x2694b4 | out: lppoint=0x2694b4) returned 1 [0168.997] SelectObject (hdc=0x17010257, h=0x1e10024f) returned 0x1900010 [0168.997] UnrealizeObject (h=0x1e10024f) returned 1 [0168.997] SetBrushOrgEx (in: hdc=0x17010257, x=67, y=-85, lppt=0x0 | out: lppt=0x0) returned 1 [0168.997] MulDiv (nNumber=3, nNumerator=3, nDenominator=3) returned 3 [0168.997] MulDiv (nNumber=3, nNumerator=0, nDenominator=3) returned 0 [0168.997] MulDiv (nNumber=3, nNumerator=0, nDenominator=3) returned 0 [0168.997] MulDiv (nNumber=3, nNumerator=0, nDenominator=3) returned 0 [0168.997] MulDiv (nNumber=3, nNumerator=3, nDenominator=3) returned 3 [0168.997] MulDiv (nNumber=3, nNumerator=3, nDenominator=3) returned 3 [0168.997] Polygon (hdc=0x17010257, apt=0x2693d8, cpt=6) returned 1 [0168.997] MulDiv (nNumber=3, nNumerator=3, nDenominator=3) returned 3 [0168.998] MulDiv (nNumber=3, nNumerator=0, nDenominator=3) returned 0 [0168.998] MulDiv (nNumber=3, nNumerator=0, nDenominator=3) returned 0 [0168.998] MulDiv (nNumber=3, nNumerator=0, nDenominator=3) returned 0 [0168.998] MulDiv (nNumber=3, nNumerator=3, nDenominator=3) returned 3 [0168.998] MulDiv (nNumber=3, nNumerator=3, nDenominator=3) returned 3 [0168.998] Polygon (hdc=0x17010257, apt=0x2693d8, cpt=6) returned 1 [0168.998] SelectObject (hdc=0x17010257, h=0x1900010) returned 0x1e10024f [0168.998] IntersectRect (in: lprcDst=0x4c1490, lprcSrc1=0x4c1490, lprcSrc2=0x2696c0 | out: lprcDst=0x4c1490) returned 1 [0168.998] IntersectRect (in: lprcDst=0x2696c0, lprcSrc1=0x2696c0, lprcSrc2=0x4c14a0 | out: lprcDst=0x2696c0) returned 1 [0168.998] GetDeviceCaps (hdc=0x17010257, index=2) returned 1 [0168.998] IntersectRect (in: lprcDst=0x2694bc, lprcSrc1=0x26f494, lprcSrc2=0x2694bc | out: lprcDst=0x2694bc) returned 1 [0168.998] SelectObject (hdc=0x17010257, h=0x10100276) returned 0x1900010 [0168.998] GetStockObject (i=8) returned 0x1b00016 [0168.998] SelectObject (hdc=0x17010257, h=0x1b00016) returned 0x1b00016 [0168.998] GetROP2 (hdc=0x17010257) returned 13 [0168.998] SetBkMode (hdc=0x17010257, mode=2) returned 1 [0168.998] Rectangle (hdc=0x17010257, left=70, top=0, right=1238, bottom=151) returned 1 [0168.998] SetBkMode (hdc=0x17010257, mode=1) returned 2 [0168.998] SelectObject (hdc=0x17010257, h=0x1b00016) returned 0x1b00016 [0168.998] SelectObject (hdc=0x17010257, h=0x1900010) returned 0x10100276 [0168.998] IntersectRect (in: lprcDst=0x4c1490, lprcSrc1=0x4c1490, lprcSrc2=0x2697dc | out: lprcDst=0x4c1490) returned 1 [0168.998] IntersectRect (in: lprcDst=0x4c1490, lprcSrc1=0x4c1490, lprcSrc2=0x2697fc | out: lprcDst=0x4c1490) returned 1 [0168.998] IntersectRect (in: lprcDst=0x2692fc, lprcSrc1=0x2692fc, lprcSrc2=0x2691b0 | out: lprcDst=0x2692fc) returned 1 [0168.998] HeapFree (in: hHeap=0x470000, dwFlags=0x0, lpMem=0x0 | out: hHeap=0x470000) returned 1 [0168.998] IntersectRect (in: lprcDst=0x4c1490, lprcSrc1=0x4c1490, lprcSrc2=0x2692fc | out: lprcDst=0x4c1490) returned 1 [0168.998] IntersectRect (in: lprcDst=0x269260, lprcSrc1=0x269260, lprcSrc2=0x4c14a0 | out: lprcDst=0x269260) returned 1 [0168.998] IntersectRect (in: lprcDst=0x4c1490, lprcSrc1=0x4c1490, lprcSrc2=0x269214 | out: lprcDst=0x4c1490) returned 1 [0168.998] GetDeviceCaps (hdc=0x17010257, index=2) returned 1 [0168.998] SetBkMode (hdc=0x17010257, mode=1) returned 1 [0168.998] SetTextAlign (hdc=0x17010257, align=0x0) returned 0x0 [0168.999] LsSetDoc () returned 0x0 [0168.999] LsCreateLine () returned 0x0 [0168.999] HeapFree (in: hHeap=0x470000, dwFlags=0x0, lpMem=0x0 | out: hHeap=0x470000) returned 1 [0168.999] LsDisplayLine () returned 0x0 [0169.000] SelectObject (hdc=0x17010257, h=0x540a084d) returned 0x18a002e [0169.000] SetTextColor (hdc=0x17010257, color=0x2555555) returned 0x2222222 [0169.000] SetBkMode (hdc=0x17010257, mode=1) returned 1 [0169.000] GetTextAlign (hdc=0x17010257) returned 0x0 [0169.000] SetTextAlign (hdc=0x17010257, align=0x18) returned 0x0 [0169.000] _CIatan2 () returned 0x20 [0169.000] _CIatan2 () returned 0x20 [0169.000] ExtTextOutW (hdc=0x17010257, x=103, y=-5, options=0x4, lprect=0x268408, lpString="Ransomware N em back, please contact us at our email below. ", c=0xa, lpDx=0x268440) returned 1 [0169.000] SetTextAlign (hdc=0x17010257, align=0x0) returned 0x18 [0169.000] HeapFree (in: hHeap=0x470000, dwFlags=0x0, lpMem=0x0 | out: hHeap=0x470000) returned 1 [0169.000] SelectObject (hdc=0x17010257, h=0x4c0a025b) returned 0x540a084d [0169.000] SetTextColor (hdc=0x17010257, color=0x2222222) returned 0x2555555 [0169.000] SetBkMode (hdc=0x17010257, mode=1) returned 1 [0169.000] GetTextAlign (hdc=0x17010257) returned 0x0 [0169.000] SetTextAlign (hdc=0x17010257, align=0x18) returned 0x0 [0169.000] _CIatan2 () returned 0x20 [0169.000] _CIatan2 () returned 0x20 [0169.000] ExtTextOutW (hdc=0x17010257, x=195, y=-5, options=0x4, lprect=0x268408, lpString=" N em back, please contact us at our email below. ", c=0x1, lpDx=0x268440) returned 1 [0169.000] SetTextAlign (hdc=0x17010257, align=0x0) returned 0x18 [0169.000] HeapFree (in: hHeap=0x470000, dwFlags=0x0, lpMem=0x0 | out: hHeap=0x470000) returned 1 [0169.000] SelectObject (hdc=0x17010257, h=0x4c0a025b) returned 0x4c0a025b [0169.000] SetTextColor (hdc=0x17010257, color=0x2222222) returned 0x2222222 [0169.000] SetBkMode (hdc=0x17010257, mode=1) returned 1 [0169.000] HeapFree (in: hHeap=0x470000, dwFlags=0x0, lpMem=0x0 | out: hHeap=0x470000) returned 1 [0169.000] LsDestroyLine () returned 0x0 [0169.000] HeapFree (in: hHeap=0x470000, dwFlags=0x0, lpMem=0x0 | out: hHeap=0x470000) returned 1 [0169.001] HeapFree (in: hHeap=0x470000, dwFlags=0x0, lpMem=0x0 | out: hHeap=0x470000) returned 1 [0169.001] LsSetDoc () returned 0x0 [0169.001] LsCreateLine () returned 0x0 [0169.001] HeapFree (in: hHeap=0x470000, dwFlags=0x0, lpMem=0x0 | out: hHeap=0x470000) returned 1 [0169.001] LsDisplayLine () returned 0x0 [0169.001] SelectObject (hdc=0x17010257, h=0x70a0277) returned 0x4c0a025b [0169.001] SetTextColor (hdc=0x17010257, color=0x2222222) returned 0x2222222 [0169.001] SetBkMode (hdc=0x17010257, mode=1) returned 1 [0169.001] GetTextAlign (hdc=0x17010257) returned 0x0 [0169.001] SetTextAlign (hdc=0x17010257, align=0x18) returned 0x0 [0169.001] _CIatan2 () returned 0x20 [0169.001] _CIatan2 () returned 0x20 [0169.002] ExtTextOutW (hdc=0x17010257, x=103, y=39, options=0x4, lprect=0x268408, lpString="⠀ nsomware N em back, please contact us at our email below. ", c=0x1, lpDx=0x268440) returned 1 [0169.011] SetTextAlign (hdc=0x17010257, align=0x0) returned 0x18 [0169.011] HeapFree (in: hHeap=0x470000, dwFlags=0x0, lpMem=0x0 | out: hHeap=0x470000) returned 1 [0169.011] SelectObject (hdc=0x17010257, h=0x4c0a025b) returned 0x70a0277 [0169.011] SetTextColor (hdc=0x17010257, color=0x2222222) returned 0x2222222 [0169.011] SetBkMode (hdc=0x17010257, mode=1) returned 1 [0169.011] GetTextAlign (hdc=0x17010257) returned 0x0 [0169.011] SetTextAlign (hdc=0x17010257, align=0x18) returned 0x0 [0169.011] _CIatan2 () returned 0x20 [0169.011] _CIatan2 () returned 0x20 [0169.011] ExtTextOutW (hdc=0x17010257, x=114, y=39, options=0x4, lprect=0x268408, lpString=" ", c=0x1, lpDx=0x268440) returned 1 [0169.011] SetTextAlign (hdc=0x17010257, align=0x0) returned 0x18 [0169.011] HeapFree (in: hHeap=0x470000, dwFlags=0x0, lpMem=0x0 | out: hHeap=0x470000) returned 1 [0169.011] LsDestroyLine () returned 0x0 [0169.011] HeapFree (in: hHeap=0x470000, dwFlags=0x0, lpMem=0x0 | out: hHeap=0x470000) returned 1 [0169.012] HeapFree (in: hHeap=0x470000, dwFlags=0x0, lpMem=0x0 | out: hHeap=0x470000) returned 1 [0169.012] LsSetDoc () returned 0x0 [0169.012] LsCreateLine () returned 0x0 [0169.012] HeapFree (in: hHeap=0x470000, dwFlags=0x0, lpMem=0x0 | out: hHeap=0x470000) returned 1 [0169.012] LsDisplayLine () returned 0x0 [0169.012] SelectObject (hdc=0x17010257, h=0x4c0a025b) returned 0x4c0a025b [0169.013] SetTextColor (hdc=0x17010257, color=0x2222222) returned 0x2222222 [0169.013] SetBkMode (hdc=0x17010257, mode=1) returned 1 [0169.013] GetTextAlign (hdc=0x17010257) returned 0x0 [0169.013] SetTextAlign (hdc=0x17010257, align=0x18) returned 0x0 [0169.013] _CIatan2 () returned 0x20 [0169.013] _CIatan2 () returned 0x20 [0169.013] ExtTextOutW (hdc=0x17010257, x=103, y=83, options=0x4, lprect=0x268408, lpString="As you can see, all your files got encrypted. Thats why your files are no longer readable. L듺K\n", c=0x5a, lpDx=0x268440) returned 1 [0169.013] SetTextAlign (hdc=0x17010257, align=0x0) returned 0x18 [0169.013] HeapFree (in: hHeap=0x470000, dwFlags=0x0, lpMem=0x0 | out: hHeap=0x470000) returned 1 [0169.013] SelectObject (hdc=0x17010257, h=0x4c0a025b) returned 0x4c0a025b [0169.013] SetTextColor (hdc=0x17010257, color=0x2222222) returned 0x2222222 [0169.013] SetBkMode (hdc=0x17010257, mode=1) returned 1 [0169.013] GetTextAlign (hdc=0x17010257) returned 0x0 [0169.013] SetTextAlign (hdc=0x17010257, align=0x18) returned 0x0 [0169.013] _CIatan2 () returned 0x20 [0169.013] _CIatan2 () returned 0x20 [0169.013] ExtTextOutW (hdc=0x17010257, x=831, y=83, options=0x4, lprect=0x268408, lpString=" ", c=0x1, lpDx=0x268440) returned 1 [0169.013] SetTextAlign (hdc=0x17010257, align=0x0) returned 0x18 [0169.013] HeapFree (in: hHeap=0x470000, dwFlags=0x0, lpMem=0x0 | out: hHeap=0x470000) returned 1 [0169.013] LsDestroyLine () returned 0x0 [0169.013] HeapFree (in: hHeap=0x470000, dwFlags=0x0, lpMem=0x0 | out: hHeap=0x470000) returned 1 [0169.013] HeapFree (in: hHeap=0x470000, dwFlags=0x0, lpMem=0x0 | out: hHeap=0x470000) returned 1 [0169.014] LsSetDoc () returned 0x0 [0169.014] LsCreateLine () returned 0x0 [0169.014] HeapFree (in: hHeap=0x470000, dwFlags=0x0, lpMem=0x0 | out: hHeap=0x470000) returned 1 [0169.014] LsDisplayLine () returned 0x0 [0169.014] SelectObject (hdc=0x17010257, h=0x4c0a025b) returned 0x4c0a025b [0169.014] SetTextColor (hdc=0x17010257, color=0x2222222) returned 0x2222222 [0169.014] SetBkMode (hdc=0x17010257, mode=1) returned 1 [0169.014] GetTextAlign (hdc=0x17010257) returned 0x0 [0169.014] SetTextAlign (hdc=0x17010257, align=0x18) returned 0x0 [0169.014] _CIatan2 () returned 0x20 [0169.014] _CIatan2 () returned 0x20 [0169.014] ExtTextOutW (hdc=0x17010257, x=103, y=127, options=0x4, lprect=0x268408, lpString="If you want them back, please contact us at our email below. files are no longer readable. L듺K\n", c=0x3c, lpDx=0x268440) returned 1 [0169.016] SetTextAlign (hdc=0x17010257, align=0x0) returned 0x18 [0169.016] HeapFree (in: hHeap=0x470000, dwFlags=0x0, lpMem=0x0 | out: hHeap=0x470000) returned 1 [0169.016] SelectObject (hdc=0x17010257, h=0x4c0a025b) returned 0x4c0a025b [0169.016] SetTextColor (hdc=0x17010257, color=0x2222222) returned 0x2222222 [0169.016] SetBkMode (hdc=0x17010257, mode=1) returned 1 [0169.016] GetTextAlign (hdc=0x17010257) returned 0x0 [0169.016] SetTextAlign (hdc=0x17010257, align=0x18) returned 0x0 [0169.016] _CIatan2 () returned 0x20 [0169.016] _CIatan2 () returned 0x20 [0169.016] ExtTextOutW (hdc=0x17010257, x=603, y=127, options=0x4, lprect=0x268408, lpString=" ", c=0x1, lpDx=0x268440) returned 1 [0169.016] SetTextAlign (hdc=0x17010257, align=0x0) returned 0x18 [0169.016] HeapFree (in: hHeap=0x470000, dwFlags=0x0, lpMem=0x0 | out: hHeap=0x470000) returned 1 [0169.016] LsDestroyLine () returned 0x0 [0169.016] HeapFree (in: hHeap=0x470000, dwFlags=0x0, lpMem=0x0 | out: hHeap=0x470000) returned 1 [0169.016] HeapFree (in: hHeap=0x470000, dwFlags=0x0, lpMem=0x0 | out: hHeap=0x470000) returned 1 [0169.017] LsSetDoc () returned 0x0 [0169.017] LsCreateLine () returned 0x0 [0169.017] HeapFree (in: hHeap=0x470000, dwFlags=0x0, lpMem=0x0 | out: hHeap=0x470000) returned 1 [0169.017] RtlReAllocateHeap (Heap=0x470000, Flags=0x0, Ptr=0x4da8d8, Size=0x12c) returned 0x4dbd10 [0169.017] RtlReAllocateHeap (Heap=0x470000, Flags=0x0, Ptr=0x4b5098, Size=0x12c) returned 0x4e3bd0 [0169.017] RtlReAllocateHeap (Heap=0x470000, Flags=0x0, Ptr=0x4decc8, Size=0x258) returned 0x4b2a90 [0169.017] RtlReAllocateHeap (Heap=0x470000, Flags=0x0, Ptr=0x4df0f8, Size=0x258) returned 0x4df5e8 [0169.017] LsDisplayLine () returned 0x0 [0169.017] SelectObject (hdc=0x17010257, h=0x4c0a025b) returned 0x4c0a025b [0169.017] SetTextColor (hdc=0x17010257, color=0x2222222) returned 0x2222222 [0169.018] SetBkMode (hdc=0x17010257, mode=1) returned 1 [0169.018] GetTextAlign (hdc=0x17010257) returned 0x0 [0169.018] SetTextAlign (hdc=0x17010257, align=0x18) returned 0x0 [0169.018] RtlAllocateHeap (HeapHandle=0x470000, Flags=0x0, Size=0x258) returned 0x4e7f70 [0169.018] _CIatan2 () returned 0x20 [0169.018] _CIatan2 () returned 0x20 [0169.018] ExtTextOutW (hdc=0x17010257, x=103, y=171, options=0x4, lprect=0x268408, lpString="You can send us a couple of files and we will return the restored ones to prove that only we can do it. ", c=0x67, lpDx=0x4e7f70) returned 1 [0169.018] HeapFree (in: hHeap=0x470000, dwFlags=0x0, lpMem=0x4e7f70 | out: hHeap=0x470000) returned 1 [0169.018] SetTextAlign (hdc=0x17010257, align=0x0) returned 0x18 [0169.018] HeapFree (in: hHeap=0x470000, dwFlags=0x0, lpMem=0x0 | out: hHeap=0x470000) returned 1 [0169.018] SelectObject (hdc=0x17010257, h=0x4c0a025b) returned 0x4c0a025b [0169.018] SetTextColor (hdc=0x17010257, color=0x2222222) returned 0x2222222 [0169.018] SetBkMode (hdc=0x17010257, mode=1) returned 1 [0169.018] GetTextAlign (hdc=0x17010257) returned 0x0 [0169.018] SetTextAlign (hdc=0x17010257, align=0x18) returned 0x0 [0169.018] _CIatan2 () returned 0x20 [0169.018] _CIatan2 () returned 0x20 [0169.018] ExtTextOutW (hdc=0x17010257, x=937, y=171, options=0x4, lprect=0x268408, lpString=" ", c=0x1, lpDx=0x268440) returned 1 [0169.018] SetTextAlign (hdc=0x17010257, align=0x0) returned 0x18 [0169.018] HeapFree (in: hHeap=0x470000, dwFlags=0x0, lpMem=0x0 | out: hHeap=0x470000) returned 1 [0169.018] LsDestroyLine () returned 0x0 [0169.018] HeapFree (in: hHeap=0x470000, dwFlags=0x0, lpMem=0x0 | out: hHeap=0x470000) returned 1 [0169.018] SelectObject (hdc=0x17010257, h=0x18a002e) returned 0x4c0a025b [0169.018] HeapFree (in: hHeap=0x470000, dwFlags=0x0, lpMem=0x0 | out: hHeap=0x470000) returned 1 [0169.018] BitBlt (hdc=0x50109f2, x=0, y=152, cx=1324, cy=150, hdcSrc=0x17010257, x1=0, y1=0, rop=0xcc0020) returned 1 [0169.019] HeapFree (in: hHeap=0x470000, dwFlags=0x0, lpMem=0x4c91a0 | out: hHeap=0x470000) returned 1 [0169.019] RtlAllocateHeap (HeapHandle=0x470000, Flags=0x0, Size=0x44) returned 0x4c91a0 [0169.019] IntersectRect (in: lprcDst=0x26a194, lprcSrc1=0x26a194, lprcSrc2=0x26a164 | out: lprcDst=0x26a194) returned 1 [0169.019] HeapFree (in: hHeap=0x470000, dwFlags=0x0, lpMem=0x0 | out: hHeap=0x470000) returned 1 [0169.019] IntersectRect (in: lprcDst=0x4c1490, lprcSrc1=0x4c1490, lprcSrc2=0x26a068 | out: lprcDst=0x4c1490) returned 1 [0169.019] IntersectRect (in: lprcDst=0x26a068, lprcSrc1=0x26a068, lprcSrc2=0x4c14a0 | out: lprcDst=0x26a068) returned 1 [0169.019] GetDeviceCaps (hdc=0x17010257, index=2) returned 1 [0169.019] RtlAllocateHeap (HeapHandle=0x470000, Flags=0x0, Size=0x30) returned 0x4c7708 [0169.019] ExtCreateRegion (lpx=0x0, nCount=0x30, lpData=0x4c7708) returned 0x370401b3 [0169.019] HeapFree (in: hHeap=0x470000, dwFlags=0x0, lpMem=0x4c7708 | out: hHeap=0x470000) returned 1 [0169.019] SelectClipRgn (hdc=0x17010257, hrgn=0x370401b3) returned 2 [0169.019] DeleteObject (ho=0x370401b3) returned 1 [0169.019] SelectObject (hdc=0x17010257, h=0x1d100258) returned 0x1900010 [0169.019] PatBlt (hdc=0x17010257, x=2, y=0, w=1303, h=150, rop=0xf00021) returned 1 [0169.019] SelectObject (hdc=0x17010257, h=0x1900010) returned 0x1d100258 [0169.019] IntersectRect (in: lprcDst=0x4c1490, lprcSrc1=0x4c1490, lprcSrc2=0x26a184 | out: lprcDst=0x4c1490) returned 1 [0169.019] IntersectRect (in: lprcDst=0x4c1490, lprcSrc1=0x4c1490, lprcSrc2=0x26a1a4 | out: lprcDst=0x4c1490) returned 1 [0169.019] IntersectRect (in: lprcDst=0x269d30, lprcSrc1=0x269d30, lprcSrc2=0x269d00 | out: lprcDst=0x269d30) returned 1 [0169.019] IntersectRect (in: lprcDst=0x4c1518, lprcSrc1=0x4c1518, lprcSrc2=0x269d20 | out: lprcDst=0x4c1518) returned 1 [0169.019] IntersectRect (in: lprcDst=0x269e5c, lprcSrc1=0x269e5c, lprcSrc2=0x269e2c | out: lprcDst=0x269e5c) returned 1 [0169.019] HeapFree (in: hHeap=0x470000, dwFlags=0x0, lpMem=0x0 | out: hHeap=0x470000) returned 1 [0169.019] IntersectRect (in: lprcDst=0x269d40, lprcSrc1=0x269d40, lprcSrc2=0x4c14a0 | out: lprcDst=0x269d40) returned 0 [0169.019] IntersectRect (in: lprcDst=0x4c1490, lprcSrc1=0x4c1490, lprcSrc2=0x269d30 | out: lprcDst=0x4c1490) returned 1 [0169.019] IntersectRect (in: lprcDst=0x269d30, lprcSrc1=0x269d30, lprcSrc2=0x4c14a0 | out: lprcDst=0x269d30) returned 1 [0169.019] GetDeviceCaps (hdc=0x17010257, index=2) returned 1 [0169.019] IntersectRect (in: lprcDst=0x269b2c, lprcSrc1=0x26f494, lprcSrc2=0x269b2c | out: lprcDst=0x269b2c) returned 1 [0169.019] SelectObject (hdc=0x17010257, h=0x80100a17) returned 0x1900010 [0169.019] GetStockObject (i=8) returned 0x1b00016 [0169.020] SelectObject (hdc=0x17010257, h=0x1b00016) returned 0x1b00016 [0169.020] GetROP2 (hdc=0x17010257) returned 13 [0169.020] SetBkMode (hdc=0x17010257, mode=2) returned 1 [0169.020] Rectangle (hdc=0x17010257, left=2, top=0, right=1306, bottom=151) returned 1 [0169.020] SetBkMode (hdc=0x17010257, mode=1) returned 2 [0169.020] SelectObject (hdc=0x17010257, h=0x1b00016) returned 0x1b00016 [0169.020] SelectObject (hdc=0x17010257, h=0x1900010) returned 0x80100a17 [0169.020] IntersectRect (in: lprcDst=0x4c1490, lprcSrc1=0x4c1490, lprcSrc2=0x269e4c | out: lprcDst=0x4c1490) returned 1 [0169.020] IntersectRect (in: lprcDst=0x4c1490, lprcSrc1=0x4c1490, lprcSrc2=0x269e6c | out: lprcDst=0x4c1490) returned 1 [0169.020] IntersectRect (in: lprcDst=0x2699c8, lprcSrc1=0x2699c8, lprcSrc2=0x269958 | out: lprcDst=0x2699c8) returned 1 [0169.020] IntersectRect (in: lprcDst=0x4c1518, lprcSrc1=0x4c1518, lprcSrc2=0x2699e8 | out: lprcDst=0x4c1518) returned 1 [0169.020] IntersectRect (in: lprcDst=0x269af4, lprcSrc1=0x269af4, lprcSrc2=0x269a04 | out: lprcDst=0x269af4) returned 1 [0169.020] HeapFree (in: hHeap=0x470000, dwFlags=0x0, lpMem=0x0 | out: hHeap=0x470000) returned 1 [0169.020] IntersectRect (in: lprcDst=0x4c1490, lprcSrc1=0x4c1490, lprcSrc2=0x269b14 | out: lprcDst=0x4c1490) returned 1 [0169.020] IntersectRect (in: lprcDst=0x269af4, lprcSrc1=0x269af4, lprcSrc2=0x269a04 | out: lprcDst=0x269af4) returned 1 [0169.020] HeapFree (in: hHeap=0x470000, dwFlags=0x0, lpMem=0x0 | out: hHeap=0x470000) returned 1 [0169.020] IntersectRect (in: lprcDst=0x4c1490, lprcSrc1=0x4c1490, lprcSrc2=0x269b14 | out: lprcDst=0x4c1490) returned 1 [0169.020] IntersectRect (in: lprcDst=0x4c1490, lprcSrc1=0x4c1490, lprcSrc2=0x269b34 | out: lprcDst=0x4c1490) returned 1 [0169.020] IntersectRect (in: lprcDst=0x269634, lprcSrc1=0x269634, lprcSrc2=0x2694e8 | out: lprcDst=0x269634) returned 1 [0169.020] HeapFree (in: hHeap=0x470000, dwFlags=0x0, lpMem=0x0 | out: hHeap=0x470000) returned 1 [0169.020] IntersectRect (in: lprcDst=0x4c1490, lprcSrc1=0x4c1490, lprcSrc2=0x269634 | out: lprcDst=0x4c1490) returned 1 [0169.020] IntersectRect (in: lprcDst=0x269598, lprcSrc1=0x269598, lprcSrc2=0x4c14a0 | out: lprcDst=0x269598) returned 1 [0169.020] IntersectRect (in: lprcDst=0x4c1490, lprcSrc1=0x4c1490, lprcSrc2=0x26954c | out: lprcDst=0x4c1490) returned 1 [0169.020] GetDeviceCaps (hdc=0x17010257, index=2) returned 1 [0169.020] SetBkMode (hdc=0x17010257, mode=1) returned 1 [0169.020] SetTextAlign (hdc=0x17010257, align=0x0) returned 0x0 [0169.021] LsSetDoc () returned 0x0 [0169.021] LsCreateLine () returned 0x0 [0169.021] HeapFree (in: hHeap=0x470000, dwFlags=0x0, lpMem=0x0 | out: hHeap=0x470000) returned 1 [0169.021] RtlAllocateHeap (HeapHandle=0x470000, Flags=0x0, Size=0x18) returned 0x4dcc40 [0169.021] RtlAllocateHeap (HeapHandle=0x470000, Flags=0x0, Size=0x10) returned 0x4ab950 [0169.021] HeapFree (in: hHeap=0x470000, dwFlags=0x0, lpMem=0x0 | out: hHeap=0x470000) returned 1 [0169.021] LsdnFinishRegular () returned 0x0 [0169.021] LsDisplayLine () returned 0x0 [0169.021] LsDestroyLine () returned 0x0 [0169.021] HeapFree (in: hHeap=0x470000, dwFlags=0x0, lpMem=0x4dcc40 | out: hHeap=0x470000) returned 1 [0169.021] HeapFree (in: hHeap=0x470000, dwFlags=0x0, lpMem=0x0 | out: hHeap=0x470000) returned 1 [0169.021] SelectObject (hdc=0x17010257, h=0x18a002e) returned 0x18a002e [0169.022] HeapFree (in: hHeap=0x470000, dwFlags=0x0, lpMem=0x0 | out: hHeap=0x470000) returned 1 [0169.022] HeapFree (in: hHeap=0x470000, dwFlags=0x0, lpMem=0x4ab950 | out: hHeap=0x470000) returned 1 [0169.022] HeapFree (in: hHeap=0x470000, dwFlags=0x0, lpMem=0x0 | out: hHeap=0x470000) returned 1 [0169.022] HeapFree (in: hHeap=0x470000, dwFlags=0x0, lpMem=0x0 | out: hHeap=0x470000) returned 1 [0169.022] HeapFree (in: hHeap=0x470000, dwFlags=0x0, lpMem=0x0 | out: hHeap=0x470000) returned 1 [0169.022] HeapFree (in: hHeap=0x470000, dwFlags=0x0, lpMem=0x0 | out: hHeap=0x470000) returned 1 [0169.022] HeapFree (in: hHeap=0x470000, dwFlags=0x0, lpMem=0x0 | out: hHeap=0x470000) returned 1 [0169.022] IntersectRect (in: lprcDst=0x2697bc, lprcSrc1=0x2697bc, lprcSrc2=0x2696cc | out: lprcDst=0x2697bc) returned 1 [0169.022] HeapFree (in: hHeap=0x470000, dwFlags=0x0, lpMem=0x0 | out: hHeap=0x470000) returned 1 [0169.022] IntersectRect (in: lprcDst=0x2696d0, lprcSrc1=0x2696d0, lprcSrc2=0x2696c0 | out: lprcDst=0x2696d0) returned 1 [0169.022] GetDeviceCaps (hdc=0x17010257, index=2) returned 1 [0169.022] RtlAllocateHeap (HeapHandle=0x470000, Flags=0x0, Size=0x30) returned 0x4c7708 [0169.022] ExtCreateRegion (lpx=0x0, nCount=0x30, lpData=0x4c7708) returned 0x380401b3 [0169.022] HeapFree (in: hHeap=0x470000, dwFlags=0x0, lpMem=0x4c7708 | out: hHeap=0x470000) returned 1 [0169.022] SelectClipRgn (hdc=0x17010257, hrgn=0x380401b3) returned 2 [0169.022] DeleteObject (ho=0x380401b3) returned 1 [0169.022] _CIsqrt () returned 0x3f1a027f [0169.022] _CIsqrt () returned 0x3f1a027f [0169.022] _CIatan2 () returned 0x20 [0169.022] _CIatan2 () returned 0x20 [0169.022] GetStockObject (i=8) returned 0x1b00016 [0169.022] SelectObject (hdc=0x17010257, h=0x1b00016) returned 0x1b00016 [0169.022] GetViewportOrgEx (in: hdc=0x17010257, lppoint=0x2694b4 | out: lppoint=0x2694b4) returned 1 [0169.022] SelectObject (hdc=0x17010257, h=0x1e10024f) returned 0x1900010 [0169.022] UnrealizeObject (h=0x1e10024f) returned 1 [0169.022] SetBrushOrgEx (in: hdc=0x17010257, x=67, y=-235, lppt=0x0 | out: lppt=0x0) returned 1 [0169.022] MulDiv (nNumber=3, nNumerator=3, nDenominator=3) returned 3 [0169.022] MulDiv (nNumber=3, nNumerator=0, nDenominator=3) returned 0 [0169.022] MulDiv (nNumber=3, nNumerator=0, nDenominator=3) returned 0 [0169.022] MulDiv (nNumber=3, nNumerator=0, nDenominator=3) returned 0 [0169.022] MulDiv (nNumber=3, nNumerator=3, nDenominator=3) returned 3 [0169.022] MulDiv (nNumber=3, nNumerator=3, nDenominator=3) returned 3 [0169.022] Polygon (hdc=0x17010257, apt=0x2693d8, cpt=6) returned 1 [0169.022] MulDiv (nNumber=3, nNumerator=3, nDenominator=3) returned 3 [0169.023] MulDiv (nNumber=3, nNumerator=0, nDenominator=3) returned 0 [0169.023] MulDiv (nNumber=3, nNumerator=0, nDenominator=3) returned 0 [0169.023] MulDiv (nNumber=3, nNumerator=0, nDenominator=3) returned 0 [0169.023] MulDiv (nNumber=3, nNumerator=3, nDenominator=3) returned 3 [0169.023] MulDiv (nNumber=3, nNumerator=3, nDenominator=3) returned 3 [0169.023] Polygon (hdc=0x17010257, apt=0x2693d8, cpt=6) returned 1 [0169.023] SelectObject (hdc=0x17010257, h=0x1900010) returned 0x1e10024f [0169.023] IntersectRect (in: lprcDst=0x4c1490, lprcSrc1=0x4c1490, lprcSrc2=0x2696c0 | out: lprcDst=0x4c1490) returned 1 [0169.023] IntersectRect (in: lprcDst=0x2696c0, lprcSrc1=0x2696c0, lprcSrc2=0x4c14a0 | out: lprcDst=0x2696c0) returned 1 [0169.023] GetDeviceCaps (hdc=0x17010257, index=2) returned 1 [0169.023] IntersectRect (in: lprcDst=0x2694bc, lprcSrc1=0x26f494, lprcSrc2=0x2694bc | out: lprcDst=0x2694bc) returned 1 [0169.023] SelectObject (hdc=0x17010257, h=0x10100276) returned 0x1900010 [0169.023] GetStockObject (i=8) returned 0x1b00016 [0169.023] SelectObject (hdc=0x17010257, h=0x1b00016) returned 0x1b00016 [0169.023] GetROP2 (hdc=0x17010257) returned 13 [0169.023] SetBkMode (hdc=0x17010257, mode=2) returned 1 [0169.023] Rectangle (hdc=0x17010257, left=70, top=0, right=1238, bottom=151) returned 1 [0169.023] SetBkMode (hdc=0x17010257, mode=1) returned 2 [0169.023] SelectObject (hdc=0x17010257, h=0x1b00016) returned 0x1b00016 [0169.023] SelectObject (hdc=0x17010257, h=0x1900010) returned 0x10100276 [0169.023] IntersectRect (in: lprcDst=0x4c1490, lprcSrc1=0x4c1490, lprcSrc2=0x2697dc | out: lprcDst=0x4c1490) returned 1 [0169.023] IntersectRect (in: lprcDst=0x4c1490, lprcSrc1=0x4c1490, lprcSrc2=0x2697fc | out: lprcDst=0x4c1490) returned 1 [0169.023] IntersectRect (in: lprcDst=0x2692fc, lprcSrc1=0x2692fc, lprcSrc2=0x2691b0 | out: lprcDst=0x2692fc) returned 1 [0169.023] HeapFree (in: hHeap=0x470000, dwFlags=0x0, lpMem=0x0 | out: hHeap=0x470000) returned 1 [0169.023] IntersectRect (in: lprcDst=0x4c1490, lprcSrc1=0x4c1490, lprcSrc2=0x2692fc | out: lprcDst=0x4c1490) returned 1 [0169.023] IntersectRect (in: lprcDst=0x269260, lprcSrc1=0x269260, lprcSrc2=0x4c14a0 | out: lprcDst=0x269260) returned 1 [0169.023] IntersectRect (in: lprcDst=0x4c1490, lprcSrc1=0x4c1490, lprcSrc2=0x269214 | out: lprcDst=0x4c1490) returned 1 [0169.023] GetDeviceCaps (hdc=0x17010257, index=2) returned 1 [0169.023] SetBkMode (hdc=0x17010257, mode=1) returned 1 [0169.023] SetTextAlign (hdc=0x17010257, align=0x0) returned 0x0 [0169.024] HeapFree (in: hHeap=0x470000, dwFlags=0x0, lpMem=0x0 | out: hHeap=0x470000) returned 1 [0169.024] LsSetDoc () returned 0x0 [0169.024] LsCreateLine () returned 0x0 [0169.024] HeapFree (in: hHeap=0x470000, dwFlags=0x0, lpMem=0x0 | out: hHeap=0x470000) returned 1 [0169.024] LsDisplayLine () returned 0x0 [0169.024] SelectObject (hdc=0x17010257, h=0x4c0a025b) returned 0x18a002e [0169.024] SetTextColor (hdc=0x17010257, color=0x2222222) returned 0x2222222 [0169.024] SetBkMode (hdc=0x17010257, mode=1) returned 1 [0169.024] GetTextAlign (hdc=0x17010257) returned 0x0 [0169.024] SetTextAlign (hdc=0x17010257, align=0x18) returned 0x0 [0169.024] RtlAllocateHeap (HeapHandle=0x470000, Flags=0x0, Size=0x258) returned 0x4e7f70 [0169.025] _CIatan2 () returned 0x20 [0169.025] _CIatan2 () returned 0x20 [0169.025] ExtTextOutW (hdc=0x17010257, x=103, y=21, options=0x4, lprect=0x268408, lpString="You can send us a couple of files and we will return the restored ones to prove that only we can do it. ", c=0x67, lpDx=0x4e7f70) returned 1 [0169.025] HeapFree (in: hHeap=0x470000, dwFlags=0x0, lpMem=0x4e7f70 | out: hHeap=0x470000) returned 1 [0169.025] SetTextAlign (hdc=0x17010257, align=0x0) returned 0x18 [0169.025] HeapFree (in: hHeap=0x470000, dwFlags=0x0, lpMem=0x0 | out: hHeap=0x470000) returned 1 [0169.025] SelectObject (hdc=0x17010257, h=0x4c0a025b) returned 0x4c0a025b [0169.025] SetTextColor (hdc=0x17010257, color=0x2222222) returned 0x2222222 [0169.025] SetBkMode (hdc=0x17010257, mode=1) returned 1 [0169.025] GetTextAlign (hdc=0x17010257) returned 0x0 [0169.025] SetTextAlign (hdc=0x17010257, align=0x18) returned 0x0 [0169.025] _CIatan2 () returned 0x20 [0169.025] _CIatan2 () returned 0x20 [0169.025] ExtTextOutW (hdc=0x17010257, x=937, y=21, options=0x4, lprect=0x268408, lpString=" ", c=0x1, lpDx=0x268440) returned 1 [0169.025] SetTextAlign (hdc=0x17010257, align=0x0) returned 0x18 [0169.025] HeapFree (in: hHeap=0x470000, dwFlags=0x0, lpMem=0x0 | out: hHeap=0x470000) returned 1 [0169.025] LsDestroyLine () returned 0x0 [0169.025] HeapFree (in: hHeap=0x470000, dwFlags=0x0, lpMem=0x0 | out: hHeap=0x470000) returned 1 [0169.025] LsSetDoc () returned 0x0 [0169.025] LsCreateLine () returned 0x0 [0169.025] HeapFree (in: hHeap=0x470000, dwFlags=0x0, lpMem=0x0 | out: hHeap=0x470000) returned 1 [0169.026] RtlAllocateHeap (HeapHandle=0x470000, Flags=0x0, Size=0x18) returned 0x4dcc40 [0169.026] RtlAllocateHeap (HeapHandle=0x470000, Flags=0x0, Size=0x10) returned 0x4ab950 [0169.026] HeapFree (in: hHeap=0x470000, dwFlags=0x0, lpMem=0x0 | out: hHeap=0x470000) returned 1 [0169.026] LsdnFinishRegular () returned 0x0 [0169.026] LsDisplayLine () returned 0x0 [0169.027] SelectObject (hdc=0x17010257, h=0x4c0a025b) returned 0x4c0a025b [0169.027] SetTextColor (hdc=0x17010257, color=0x2222222) returned 0x2222222 [0169.027] SetBkMode (hdc=0x17010257, mode=1) returned 1 [0169.027] HeapFree (in: hHeap=0x470000, dwFlags=0x0, lpMem=0x0 | out: hHeap=0x470000) returned 1 [0169.027] LsDestroyLine () returned 0x0 [0169.027] HeapFree (in: hHeap=0x470000, dwFlags=0x0, lpMem=0x4dcc40 | out: hHeap=0x470000) returned 1 [0169.027] HeapFree (in: hHeap=0x470000, dwFlags=0x0, lpMem=0x0 | out: hHeap=0x470000) returned 1 [0169.027] HeapFree (in: hHeap=0x470000, dwFlags=0x0, lpMem=0x0 | out: hHeap=0x470000) returned 1 [0169.027] LsSetDoc () returned 0x0 [0169.027] LsCreateLine () returned 0x0 [0169.027] HeapFree (in: hHeap=0x470000, dwFlags=0x0, lpMem=0x0 | out: hHeap=0x470000) returned 1 [0169.028] LsDisplayLine () returned 0x0 [0169.028] SelectObject (hdc=0x17010257, h=0x4c0a025b) returned 0x4c0a025b [0169.028] SetTextColor (hdc=0x17010257, color=0x2222222) returned 0x2222222 [0169.028] SetBkMode (hdc=0x17010257, mode=1) returned 1 [0169.028] GetTextAlign (hdc=0x17010257) returned 0x0 [0169.028] SetTextAlign (hdc=0x17010257, align=0x18) returned 0x0 [0169.028] _CIatan2 () returned 0x20 [0169.028] _CIatan2 () returned 0x20 [0169.028] ExtTextOutW (hdc=0x17010257, x=103, y=149, options=0x4, lprect=0x268408, lpString="You can get more information about encryption on Wikipedia. (RSA, AES, RC4) ove that only we can do it. ", c=0x4b, lpDx=0x268440) returned 1 [0169.028] SetTextAlign (hdc=0x17010257, align=0x0) returned 0x18 [0169.028] HeapFree (in: hHeap=0x470000, dwFlags=0x0, lpMem=0x0 | out: hHeap=0x470000) returned 1 [0169.029] SelectObject (hdc=0x17010257, h=0x4c0a025b) returned 0x4c0a025b [0169.029] SetTextColor (hdc=0x17010257, color=0x2222222) returned 0x2222222 [0169.029] SetBkMode (hdc=0x17010257, mode=1) returned 1 [0169.029] GetTextAlign (hdc=0x17010257) returned 0x0 [0169.029] SetTextAlign (hdc=0x17010257, align=0x18) returned 0x0 [0169.029] _CIatan2 () returned 0x20 [0169.029] _CIatan2 () returned 0x20 [0169.029] ExtTextOutW (hdc=0x17010257, x=749, y=149, options=0x4, lprect=0x268408, lpString=" ", c=0x1, lpDx=0x268440) returned 1 [0169.029] SetTextAlign (hdc=0x17010257, align=0x0) returned 0x18 [0169.029] HeapFree (in: hHeap=0x470000, dwFlags=0x0, lpMem=0x0 | out: hHeap=0x470000) returned 1 [0169.029] LsDestroyLine () returned 0x0 [0169.029] HeapFree (in: hHeap=0x470000, dwFlags=0x0, lpMem=0x0 | out: hHeap=0x470000) returned 1 [0169.029] SelectObject (hdc=0x17010257, h=0x18a002e) returned 0x4c0a025b [0169.029] HeapFree (in: hHeap=0x470000, dwFlags=0x0, lpMem=0x0 | out: hHeap=0x470000) returned 1 [0169.029] IntersectRect (in: lprcDst=0x269484, lprcSrc1=0x269484, lprcSrc2=0x269394 | out: lprcDst=0x269484) returned 1 [0169.029] HeapFree (in: hHeap=0x470000, dwFlags=0x0, lpMem=0x0 | out: hHeap=0x470000) returned 1 [0169.029] IntersectRect (in: lprcDst=0x269398, lprcSrc1=0x269398, lprcSrc2=0x269388 | out: lprcDst=0x269398) returned 1 [0169.029] GetDeviceCaps (hdc=0x17010257, index=2) returned 1 [0169.029] _CIsqrt () returned 0x3f1a027f [0169.029] _CIsqrt () returned 0x3f1a027f [0169.029] _CIatan2 () returned 0x20 [0169.029] _CIatan2 () returned 0x20 [0169.029] GetStockObject (i=8) returned 0x1b00016 [0169.029] SelectObject (hdc=0x17010257, h=0x1b00016) returned 0x1b00016 [0169.029] GetViewportOrgEx (in: hdc=0x17010257, lppoint=0x26917c | out: lppoint=0x26917c) returned 1 [0169.029] SelectObject (hdc=0x17010257, h=0x1e10024f) returned 0x1900010 [0169.029] UnrealizeObject (h=0x1e10024f) returned 1 [0169.029] SetBrushOrgEx (in: hdc=0x17010257, x=103, y=46, lppt=0x0 | out: lppt=0x0) returned 1 [0169.029] MulDiv (nNumber=3, nNumerator=3, nDenominator=3) returned 3 [0169.029] MulDiv (nNumber=3, nNumerator=0, nDenominator=3) returned 0 [0169.029] MulDiv (nNumber=3, nNumerator=0, nDenominator=3) returned 0 [0169.029] MulDiv (nNumber=3, nNumerator=0, nDenominator=3) returned 0 [0169.030] MulDiv (nNumber=3, nNumerator=3, nDenominator=3) returned 3 [0169.030] MulDiv (nNumber=3, nNumerator=3, nDenominator=3) returned 3 [0169.030] Polygon (hdc=0x17010257, apt=0x2690a0, cpt=6) returned 1 [0169.030] MulDiv (nNumber=3, nNumerator=3, nDenominator=3) returned 3 [0169.030] MulDiv (nNumber=3, nNumerator=0, nDenominator=3) returned 0 [0169.030] MulDiv (nNumber=3, nNumerator=0, nDenominator=3) returned 0 [0169.030] MulDiv (nNumber=3, nNumerator=0, nDenominator=3) returned 0 [0169.030] MulDiv (nNumber=3, nNumerator=3, nDenominator=3) returned 3 [0169.030] MulDiv (nNumber=3, nNumerator=3, nDenominator=3) returned 3 [0169.030] Polygon (hdc=0x17010257, apt=0x2690a0, cpt=6) returned 1 [0169.030] SelectObject (hdc=0x17010257, h=0x1900010) returned 0x1e10024f [0169.030] IntersectRect (in: lprcDst=0x4c1490, lprcSrc1=0x4c1490, lprcSrc2=0x269388 | out: lprcDst=0x4c1490) returned 1 [0169.030] IntersectRect (in: lprcDst=0x269388, lprcSrc1=0x269388, lprcSrc2=0x4c14a0 | out: lprcDst=0x269388) returned 1 [0169.030] GetDeviceCaps (hdc=0x17010257, index=2) returned 1 [0169.030] IntersectRect (in: lprcDst=0x269184, lprcSrc1=0x26f494, lprcSrc2=0x269184 | out: lprcDst=0x269184) returned 1 [0169.030] CreateSolidBrush (color=0x2f0eeff) returned 0x43100260 [0169.030] SelectObject (hdc=0x17010257, h=0x43100260) returned 0x1900010 [0169.030] GetStockObject (i=8) returned 0x1b00016 [0169.030] SelectObject (hdc=0x17010257, h=0x1b00016) returned 0x1b00016 [0169.030] GetROP2 (hdc=0x17010257) returned 13 [0169.030] SetBkMode (hdc=0x17010257, mode=2) returned 1 [0169.030] Rectangle (hdc=0x17010257, left=106, top=49, right=370, bottom=109) returned 1 [0169.030] SetBkMode (hdc=0x17010257, mode=1) returned 2 [0169.030] SelectObject (hdc=0x17010257, h=0x1b00016) returned 0x1b00016 [0169.030] SelectObject (hdc=0x17010257, h=0x1900010) returned 0x43100260 [0169.030] IntersectRect (in: lprcDst=0x4c1490, lprcSrc1=0x4c1490, lprcSrc2=0x2694a4 | out: lprcDst=0x4c1490) returned 1 [0169.030] IntersectRect (in: lprcDst=0x4c1490, lprcSrc1=0x4c1490, lprcSrc2=0x2694c4 | out: lprcDst=0x4c1490) returned 1 [0169.030] IntersectRect (in: lprcDst=0x268fc4, lprcSrc1=0x268fc4, lprcSrc2=0x268e78 | out: lprcDst=0x268fc4) returned 1 [0169.030] HeapFree (in: hHeap=0x470000, dwFlags=0x0, lpMem=0x0 | out: hHeap=0x470000) returned 1 [0169.030] IntersectRect (in: lprcDst=0x4c1490, lprcSrc1=0x4c1490, lprcSrc2=0x268fc4 | out: lprcDst=0x4c1490) returned 1 [0169.030] IntersectRect (in: lprcDst=0x268f28, lprcSrc1=0x268f28, lprcSrc2=0x4c14a0 | out: lprcDst=0x268f28) returned 1 [0169.030] IntersectRect (in: lprcDst=0x4c1490, lprcSrc1=0x4c1490, lprcSrc2=0x268edc | out: lprcDst=0x4c1490) returned 1 [0169.030] GetDeviceCaps (hdc=0x17010257, index=2) returned 1 [0169.030] SetBkMode (hdc=0x17010257, mode=1) returned 1 [0169.031] SetTextAlign (hdc=0x17010257, align=0x0) returned 0x0 [0169.031] LsSetDoc () returned 0x0 [0169.031] LsCreateLine () returned 0x0 [0169.031] HeapFree (in: hHeap=0x470000, dwFlags=0x0, lpMem=0x0 | out: hHeap=0x470000) returned 1 [0169.031] LsDisplayLine () returned 0x0 [0169.031] SelectObject (hdc=0x17010257, h=0x4c0a025b) returned 0x18a002e [0169.031] SetTextColor (hdc=0x17010257, color=0x2222222) returned 0x2222222 [0169.031] SetBkMode (hdc=0x17010257, mode=1) returned 1 [0169.031] GetTextAlign (hdc=0x17010257) returned 0x0 [0169.031] SetTextAlign (hdc=0x17010257, align=0x18) returned 0x0 [0169.031] _CIatan2 () returned 0x20 [0169.031] _CIatan2 () returned 0x20 [0169.031] ExtTextOutW (hdc=0x17010257, x=123, y=85, options=0x4, lprect=0x2680d0, lpString="EpsilonCrypt@tutanota.com on about encryption on Wikipedia. (RSA, AES, RC4) ove that only we can do it. ", c=0x19, lpDx=0x268108) returned 1 [0169.031] SetTextAlign (hdc=0x17010257, align=0x0) returned 0x18 [0169.032] HeapFree (in: hHeap=0x470000, dwFlags=0x0, lpMem=0x0 | out: hHeap=0x470000) returned 1 [0169.032] SelectObject (hdc=0x17010257, h=0x4c0a025b) returned 0x4c0a025b [0169.032] SetTextColor (hdc=0x17010257, color=0x2222222) returned 0x2222222 [0169.032] SetBkMode (hdc=0x17010257, mode=1) returned 1 [0169.032] GetTextAlign (hdc=0x17010257) returned 0x0 [0169.032] SetTextAlign (hdc=0x17010257, align=0x18) returned 0x0 [0169.032] _CIatan2 () returned 0x20 [0169.032] _CIatan2 () returned 0x20 [0169.032] ExtTextOutW (hdc=0x17010257, x=352, y=85, options=0x4, lprect=0x2680d0, lpString=" ", c=0x1, lpDx=0x268108) returned 1 [0169.032] SetTextAlign (hdc=0x17010257, align=0x0) returned 0x18 [0169.032] HeapFree (in: hHeap=0x470000, dwFlags=0x0, lpMem=0x0 | out: hHeap=0x470000) returned 1 [0169.032] LsDestroyLine () returned 0x0 [0169.032] HeapFree (in: hHeap=0x470000, dwFlags=0x0, lpMem=0x0 | out: hHeap=0x470000) returned 1 [0169.032] SelectObject (hdc=0x17010257, h=0x18a002e) returned 0x4c0a025b [0169.032] HeapFree (in: hHeap=0x470000, dwFlags=0x0, lpMem=0x0 | out: hHeap=0x470000) returned 1 [0169.032] BitBlt (hdc=0x50109f2, x=0, y=302, cx=1324, cy=150, hdcSrc=0x17010257, x1=0, y1=0, rop=0xcc0020) returned 1 [0169.032] HeapFree (in: hHeap=0x470000, dwFlags=0x0, lpMem=0x4c91a0 | out: hHeap=0x470000) returned 1 [0169.032] RtlAllocateHeap (HeapHandle=0x470000, Flags=0x0, Size=0x44) returned 0x4c91a0 [0169.032] IntersectRect (in: lprcDst=0x26a194, lprcSrc1=0x26a194, lprcSrc2=0x26a164 | out: lprcDst=0x26a194) returned 1 [0169.032] HeapFree (in: hHeap=0x470000, dwFlags=0x0, lpMem=0x0 | out: hHeap=0x470000) returned 1 [0169.032] IntersectRect (in: lprcDst=0x4c1490, lprcSrc1=0x4c1490, lprcSrc2=0x26a068 | out: lprcDst=0x4c1490) returned 1 [0169.032] IntersectRect (in: lprcDst=0x26a068, lprcSrc1=0x26a068, lprcSrc2=0x4c14a0 | out: lprcDst=0x26a068) returned 1 [0169.032] GetDeviceCaps (hdc=0x17010257, index=2) returned 1 [0169.033] RtlAllocateHeap (HeapHandle=0x470000, Flags=0x0, Size=0x30) returned 0x4c7708 [0169.033] ExtCreateRegion (lpx=0x0, nCount=0x30, lpData=0x4c7708) returned 0x390401b3 [0169.033] HeapFree (in: hHeap=0x470000, dwFlags=0x0, lpMem=0x4c7708 | out: hHeap=0x470000) returned 1 [0169.033] SelectClipRgn (hdc=0x17010257, hrgn=0x390401b3) returned 2 [0169.033] DeleteObject (ho=0x390401b3) returned 1 [0169.033] SelectObject (hdc=0x17010257, h=0x1d100258) returned 0x1900010 [0169.033] PatBlt (hdc=0x17010257, x=2, y=0, w=1303, h=150, rop=0xf00021) returned 1 [0169.033] SelectObject (hdc=0x17010257, h=0x1900010) returned 0x1d100258 [0169.033] IntersectRect (in: lprcDst=0x4c1490, lprcSrc1=0x4c1490, lprcSrc2=0x26a184 | out: lprcDst=0x4c1490) returned 1 [0169.033] IntersectRect (in: lprcDst=0x4c1490, lprcSrc1=0x4c1490, lprcSrc2=0x26a1a4 | out: lprcDst=0x4c1490) returned 1 [0169.033] IntersectRect (in: lprcDst=0x269d30, lprcSrc1=0x269d30, lprcSrc2=0x269d00 | out: lprcDst=0x269d30) returned 1 [0169.033] IntersectRect (in: lprcDst=0x4c1518, lprcSrc1=0x4c1518, lprcSrc2=0x269d20 | out: lprcDst=0x4c1518) returned 1 [0169.033] IntersectRect (in: lprcDst=0x269e5c, lprcSrc1=0x269e5c, lprcSrc2=0x269e2c | out: lprcDst=0x269e5c) returned 1 [0169.033] HeapFree (in: hHeap=0x470000, dwFlags=0x0, lpMem=0x0 | out: hHeap=0x470000) returned 1 [0169.033] IntersectRect (in: lprcDst=0x269d40, lprcSrc1=0x269d40, lprcSrc2=0x4c14a0 | out: lprcDst=0x269d40) returned 0 [0169.033] IntersectRect (in: lprcDst=0x4c1490, lprcSrc1=0x4c1490, lprcSrc2=0x269d30 | out: lprcDst=0x4c1490) returned 1 [0169.033] IntersectRect (in: lprcDst=0x269d30, lprcSrc1=0x269d30, lprcSrc2=0x4c14a0 | out: lprcDst=0x269d30) returned 1 [0169.033] GetDeviceCaps (hdc=0x17010257, index=2) returned 1 [0169.033] IntersectRect (in: lprcDst=0x269b2c, lprcSrc1=0x26f494, lprcSrc2=0x269b2c | out: lprcDst=0x269b2c) returned 1 [0169.033] SelectObject (hdc=0x17010257, h=0x80100a17) returned 0x1900010 [0169.033] GetStockObject (i=8) returned 0x1b00016 [0169.033] SelectObject (hdc=0x17010257, h=0x1b00016) returned 0x1b00016 [0169.033] GetROP2 (hdc=0x17010257) returned 13 [0169.033] SetBkMode (hdc=0x17010257, mode=2) returned 1 [0169.033] Rectangle (hdc=0x17010257, left=2, top=0, right=1306, bottom=151) returned 1 [0169.033] SetBkMode (hdc=0x17010257, mode=1) returned 2 [0169.033] SelectObject (hdc=0x17010257, h=0x1b00016) returned 0x1b00016 [0169.033] SelectObject (hdc=0x17010257, h=0x1900010) returned 0x80100a17 [0169.033] IntersectRect (in: lprcDst=0x4c1490, lprcSrc1=0x4c1490, lprcSrc2=0x269e4c | out: lprcDst=0x4c1490) returned 1 [0169.033] IntersectRect (in: lprcDst=0x4c1490, lprcSrc1=0x4c1490, lprcSrc2=0x269e6c | out: lprcDst=0x4c1490) returned 1 [0169.033] IntersectRect (in: lprcDst=0x2699c8, lprcSrc1=0x2699c8, lprcSrc2=0x269958 | out: lprcDst=0x2699c8) returned 1 [0169.034] IntersectRect (in: lprcDst=0x4c1518, lprcSrc1=0x4c1518, lprcSrc2=0x2699e8 | out: lprcDst=0x4c1518) returned 1 [0169.034] IntersectRect (in: lprcDst=0x269af4, lprcSrc1=0x269af4, lprcSrc2=0x269a04 | out: lprcDst=0x269af4) returned 1 [0169.034] HeapFree (in: hHeap=0x470000, dwFlags=0x0, lpMem=0x0 | out: hHeap=0x470000) returned 1 [0169.034] IntersectRect (in: lprcDst=0x4c1490, lprcSrc1=0x4c1490, lprcSrc2=0x269b14 | out: lprcDst=0x4c1490) returned 1 [0169.034] IntersectRect (in: lprcDst=0x269af4, lprcSrc1=0x269af4, lprcSrc2=0x269a04 | out: lprcDst=0x269af4) returned 1 [0169.034] HeapFree (in: hHeap=0x470000, dwFlags=0x0, lpMem=0x0 | out: hHeap=0x470000) returned 1 [0169.034] IntersectRect (in: lprcDst=0x4c1490, lprcSrc1=0x4c1490, lprcSrc2=0x269b14 | out: lprcDst=0x4c1490) returned 1 [0169.034] IntersectRect (in: lprcDst=0x4c1490, lprcSrc1=0x4c1490, lprcSrc2=0x269b34 | out: lprcDst=0x4c1490) returned 1 [0169.034] IntersectRect (in: lprcDst=0x269634, lprcSrc1=0x269634, lprcSrc2=0x2694e8 | out: lprcDst=0x269634) returned 1 [0169.034] HeapFree (in: hHeap=0x470000, dwFlags=0x0, lpMem=0x0 | out: hHeap=0x470000) returned 1 [0169.034] IntersectRect (in: lprcDst=0x4c1490, lprcSrc1=0x4c1490, lprcSrc2=0x269634 | out: lprcDst=0x4c1490) returned 1 [0169.034] IntersectRect (in: lprcDst=0x269598, lprcSrc1=0x269598, lprcSrc2=0x4c14a0 | out: lprcDst=0x269598) returned 1 [0169.034] IntersectRect (in: lprcDst=0x4c1490, lprcSrc1=0x4c1490, lprcSrc2=0x26954c | out: lprcDst=0x4c1490) returned 1 [0169.034] GetDeviceCaps (hdc=0x17010257, index=2) returned 1 [0169.034] SetBkMode (hdc=0x17010257, mode=1) returned 1 [0169.034] SetTextAlign (hdc=0x17010257, align=0x0) returned 0x0 [0169.034] LsSetDoc () returned 0x0 [0169.034] LsCreateLine () returned 0x0 [0169.034] HeapFree (in: hHeap=0x470000, dwFlags=0x0, lpMem=0x0 | out: hHeap=0x470000) returned 1 [0169.034] RtlAllocateHeap (HeapHandle=0x470000, Flags=0x0, Size=0x18) returned 0x4dcc40 [0169.035] RtlAllocateHeap (HeapHandle=0x470000, Flags=0x0, Size=0x10) returned 0x4ab950 [0169.035] HeapFree (in: hHeap=0x470000, dwFlags=0x0, lpMem=0x0 | out: hHeap=0x470000) returned 1 [0169.035] LsdnFinishRegular () returned 0x0 [0169.035] LsDisplayLine () returned 0x0 [0169.035] LsDestroyLine () returned 0x0 [0169.035] HeapFree (in: hHeap=0x470000, dwFlags=0x0, lpMem=0x4dcc40 | out: hHeap=0x470000) returned 1 [0169.035] HeapFree (in: hHeap=0x470000, dwFlags=0x0, lpMem=0x0 | out: hHeap=0x470000) returned 1 [0169.035] SelectObject (hdc=0x17010257, h=0x18a002e) returned 0x18a002e [0169.035] HeapFree (in: hHeap=0x470000, dwFlags=0x0, lpMem=0x0 | out: hHeap=0x470000) returned 1 [0169.035] HeapFree (in: hHeap=0x470000, dwFlags=0x0, lpMem=0x4ab950 | out: hHeap=0x470000) returned 1 [0169.035] HeapFree (in: hHeap=0x470000, dwFlags=0x0, lpMem=0x0 | out: hHeap=0x470000) returned 1 [0169.035] HeapFree (in: hHeap=0x470000, dwFlags=0x0, lpMem=0x0 | out: hHeap=0x470000) returned 1 [0169.035] HeapFree (in: hHeap=0x470000, dwFlags=0x0, lpMem=0x0 | out: hHeap=0x470000) returned 1 [0169.035] HeapFree (in: hHeap=0x470000, dwFlags=0x0, lpMem=0x0 | out: hHeap=0x470000) returned 1 [0169.035] HeapFree (in: hHeap=0x470000, dwFlags=0x0, lpMem=0x0 | out: hHeap=0x470000) returned 1 [0169.035] IntersectRect (in: lprcDst=0x2697bc, lprcSrc1=0x2697bc, lprcSrc2=0x2696cc | out: lprcDst=0x2697bc) returned 1 [0169.035] HeapFree (in: hHeap=0x470000, dwFlags=0x0, lpMem=0x0 | out: hHeap=0x470000) returned 1 [0169.035] IntersectRect (in: lprcDst=0x2696d0, lprcSrc1=0x2696d0, lprcSrc2=0x2696c0 | out: lprcDst=0x2696d0) returned 1 [0169.035] GetDeviceCaps (hdc=0x17010257, index=2) returned 1 [0169.035] RtlAllocateHeap (HeapHandle=0x470000, Flags=0x0, Size=0x30) returned 0x4c7708 [0169.035] ExtCreateRegion (lpx=0x0, nCount=0x30, lpData=0x4c7708) returned 0x3a0401b3 [0169.035] HeapFree (in: hHeap=0x470000, dwFlags=0x0, lpMem=0x4c7708 | out: hHeap=0x470000) returned 1 [0169.035] SelectClipRgn (hdc=0x17010257, hrgn=0x3a0401b3) returned 2 [0169.035] DeleteObject (ho=0x3a0401b3) returned 1 [0169.035] _CIsqrt () returned 0x3f1a027f [0169.036] _CIsqrt () returned 0x3f1a027f [0169.036] _CIatan2 () returned 0x20 [0169.036] _CIatan2 () returned 0x20 [0169.036] GetStockObject (i=8) returned 0x1b00016 [0169.036] SelectObject (hdc=0x17010257, h=0x1b00016) returned 0x1b00016 [0169.036] GetViewportOrgEx (in: hdc=0x17010257, lppoint=0x2694b4 | out: lppoint=0x2694b4) returned 1 [0169.036] SelectObject (hdc=0x17010257, h=0x1e10024f) returned 0x1900010 [0169.036] UnrealizeObject (h=0x1e10024f) returned 1 [0169.036] SetBrushOrgEx (in: hdc=0x17010257, x=67, y=-385, lppt=0x0 | out: lppt=0x0) returned 1 [0169.036] MulDiv (nNumber=3, nNumerator=3, nDenominator=3) returned 3 [0169.036] MulDiv (nNumber=3, nNumerator=0, nDenominator=3) returned 0 [0169.036] MulDiv (nNumber=3, nNumerator=0, nDenominator=3) returned 0 [0169.036] MulDiv (nNumber=3, nNumerator=0, nDenominator=3) returned 0 [0169.036] MulDiv (nNumber=3, nNumerator=3, nDenominator=3) returned 3 [0169.036] MulDiv (nNumber=3, nNumerator=3, nDenominator=3) returned 3 [0169.036] Polygon (hdc=0x17010257, apt=0x2693d8, cpt=6) returned 1 [0169.036] MulDiv (nNumber=3, nNumerator=3, nDenominator=3) returned 3 [0169.036] MulDiv (nNumber=3, nNumerator=0, nDenominator=3) returned 0 [0169.036] MulDiv (nNumber=3, nNumerator=0, nDenominator=3) returned 0 [0169.036] MulDiv (nNumber=3, nNumerator=0, nDenominator=3) returned 0 [0169.036] MulDiv (nNumber=3, nNumerator=3, nDenominator=3) returned 3 [0169.036] MulDiv (nNumber=3, nNumerator=3, nDenominator=3) returned 3 [0169.036] Polygon (hdc=0x17010257, apt=0x2693d8, cpt=6) returned 1 [0169.036] SelectObject (hdc=0x17010257, h=0x1900010) returned 0x1e10024f [0169.036] IntersectRect (in: lprcDst=0x4c1490, lprcSrc1=0x4c1490, lprcSrc2=0x2696c0 | out: lprcDst=0x4c1490) returned 1 [0169.036] IntersectRect (in: lprcDst=0x2696c0, lprcSrc1=0x2696c0, lprcSrc2=0x4c14a0 | out: lprcDst=0x2696c0) returned 1 [0169.036] GetDeviceCaps (hdc=0x17010257, index=2) returned 1 [0169.036] IntersectRect (in: lprcDst=0x2694bc, lprcSrc1=0x26f494, lprcSrc2=0x2694bc | out: lprcDst=0x2694bc) returned 1 [0169.036] SelectObject (hdc=0x17010257, h=0x10100276) returned 0x1900010 [0169.036] GetStockObject (i=8) returned 0x1b00016 [0169.036] SelectObject (hdc=0x17010257, h=0x1b00016) returned 0x1b00016 [0169.036] GetROP2 (hdc=0x17010257) returned 13 [0169.036] SetBkMode (hdc=0x17010257, mode=2) returned 1 [0169.036] Rectangle (hdc=0x17010257, left=70, top=0, right=1238, bottom=151) returned 1 [0169.036] SetBkMode (hdc=0x17010257, mode=1) returned 2 [0169.037] SelectObject (hdc=0x17010257, h=0x1b00016) returned 0x1b00016 [0169.037] SelectObject (hdc=0x17010257, h=0x1900010) returned 0x10100276 [0169.037] IntersectRect (in: lprcDst=0x4c1490, lprcSrc1=0x4c1490, lprcSrc2=0x2697dc | out: lprcDst=0x4c1490) returned 1 [0169.037] IntersectRect (in: lprcDst=0x4c1490, lprcSrc1=0x4c1490, lprcSrc2=0x2697fc | out: lprcDst=0x4c1490) returned 1 [0169.037] IntersectRect (in: lprcDst=0x2692fc, lprcSrc1=0x2692fc, lprcSrc2=0x2691b0 | out: lprcDst=0x2692fc) returned 1 [0169.037] HeapFree (in: hHeap=0x470000, dwFlags=0x0, lpMem=0x0 | out: hHeap=0x470000) returned 1 [0169.037] IntersectRect (in: lprcDst=0x4c1490, lprcSrc1=0x4c1490, lprcSrc2=0x2692fc | out: lprcDst=0x4c1490) returned 1 [0169.037] IntersectRect (in: lprcDst=0x269260, lprcSrc1=0x269260, lprcSrc2=0x4c14a0 | out: lprcDst=0x269260) returned 1 [0169.037] IntersectRect (in: lprcDst=0x4c1490, lprcSrc1=0x4c1490, lprcSrc2=0x269214 | out: lprcDst=0x4c1490) returned 1 [0169.037] GetDeviceCaps (hdc=0x17010257, index=2) returned 1 [0169.037] SetBkMode (hdc=0x17010257, mode=1) returned 1 [0169.037] SetTextAlign (hdc=0x17010257, align=0x0) returned 0x0 [0169.037] HeapFree (in: hHeap=0x470000, dwFlags=0x0, lpMem=0x0 | out: hHeap=0x470000) returned 1 [0169.037] LsSetDoc () returned 0x0 [0169.037] LsCreateLine () returned 0x0 [0169.037] HeapFree (in: hHeap=0x470000, dwFlags=0x0, lpMem=0x0 | out: hHeap=0x470000) returned 1 [0169.038] LsDisplayLine () returned 0x0 [0169.038] SelectObject (hdc=0x17010257, h=0x4c0a025b) returned 0x18a002e [0169.038] SetTextColor (hdc=0x17010257, color=0x2222222) returned 0x2222222 [0169.038] SetBkMode (hdc=0x17010257, mode=1) returned 1 [0169.038] GetTextAlign (hdc=0x17010257) returned 0x0 [0169.038] SetTextAlign (hdc=0x17010257, align=0x18) returned 0x0 [0169.038] _CIatan2 () returned 0x20 [0169.038] _CIatan2 () returned 0x20 [0169.038] ExtTextOutW (hdc=0x17010257, x=103, y=-1, options=0x4, lprect=0x268408, lpString="You can get more information about encryption on Wikipedia. (RSA, AES, RC4) ove that only we can do it. ", c=0x4b, lpDx=0x268440) returned 1 [0169.038] SetTextAlign (hdc=0x17010257, align=0x0) returned 0x18 [0169.038] HeapFree (in: hHeap=0x470000, dwFlags=0x0, lpMem=0x0 | out: hHeap=0x470000) returned 1 [0169.038] SelectObject (hdc=0x17010257, h=0x4c0a025b) returned 0x4c0a025b [0169.038] SetTextColor (hdc=0x17010257, color=0x2222222) returned 0x2222222 [0169.038] SetBkMode (hdc=0x17010257, mode=1) returned 1 [0169.038] GetTextAlign (hdc=0x17010257) returned 0x0 [0169.038] SetTextAlign (hdc=0x17010257, align=0x18) returned 0x0 [0169.038] _CIatan2 () returned 0x20 [0169.038] _CIatan2 () returned 0x20 [0169.038] ExtTextOutW (hdc=0x17010257, x=749, y=-1, options=0x4, lprect=0x268408, lpString=" ", c=0x1, lpDx=0x268440) returned 1 [0169.038] SetTextAlign (hdc=0x17010257, align=0x0) returned 0x18 [0169.038] HeapFree (in: hHeap=0x470000, dwFlags=0x0, lpMem=0x0 | out: hHeap=0x470000) returned 1 [0169.038] LsDestroyLine () returned 0x0 [0169.038] HeapFree (in: hHeap=0x470000, dwFlags=0x0, lpMem=0x0 | out: hHeap=0x470000) returned 1 [0169.039] LsSetDoc () returned 0x0 [0169.039] LsCreateLine () returned 0x0 [0169.039] HeapFree (in: hHeap=0x470000, dwFlags=0x0, lpMem=0x0 | out: hHeap=0x470000) returned 1 [0169.039] RtlAllocateHeap (HeapHandle=0x470000, Flags=0x0, Size=0x18) returned 0x4dcc40 [0169.039] RtlAllocateHeap (HeapHandle=0x470000, Flags=0x0, Size=0x10) returned 0x4ab950 [0169.039] HeapFree (in: hHeap=0x470000, dwFlags=0x0, lpMem=0x0 | out: hHeap=0x470000) returned 1 [0169.039] RtlAllocateHeap (HeapHandle=0x470000, Flags=0x0, Size=0x10) returned 0x4ef4c0 [0169.039] LsdnFinishRegular () returned 0x0 [0169.039] LsDisplayLine () returned 0x0 [0169.039] LsDestroyLine () returned 0x0 [0169.040] HeapFree (in: hHeap=0x470000, dwFlags=0x0, lpMem=0x4dcc40 | out: hHeap=0x470000) returned 1 [0169.040] HeapFree (in: hHeap=0x470000, dwFlags=0x0, lpMem=0x0 | out: hHeap=0x470000) returned 1 [0169.040] HeapFree (in: hHeap=0x470000, dwFlags=0x0, lpMem=0x0 | out: hHeap=0x470000) returned 1 [0169.040] LsSetDoc () returned 0x0 [0169.040] LsCreateLine () returned 0x0 [0169.040] HeapFree (in: hHeap=0x470000, dwFlags=0x0, lpMem=0x0 | out: hHeap=0x470000) returned 1 [0169.040] LsDisplayLine () returned 0x0 [0169.041] SelectObject (hdc=0x17010257, h=0x4c0a025b) returned 0x4c0a025b [0169.041] SetTextColor (hdc=0x17010257, color=0x2222222) returned 0x2222222 [0169.041] SetBkMode (hdc=0x17010257, mode=1) returned 1 [0169.041] GetTextAlign (hdc=0x17010257) returned 0x0 [0169.041] SetTextAlign (hdc=0x17010257, align=0x18) returned 0x0 [0169.041] _CIatan2 () returned 0x20 [0169.041] _CIatan2 () returned 0x20 [0169.041] ExtTextOutW (hdc=0x17010257, x=103, y=113, options=0x4, lprect=0x268408, lpString="Please, provide your id below in the subject of your mail. (RSA, AES, RC4) ove that only we can do it. ", c=0x3a, lpDx=0x268440) returned 1 [0169.041] SetTextAlign (hdc=0x17010257, align=0x0) returned 0x18 [0169.041] HeapFree (in: hHeap=0x470000, dwFlags=0x0, lpMem=0x0 | out: hHeap=0x470000) returned 1 [0169.041] SelectObject (hdc=0x17010257, h=0x4c0a025b) returned 0x4c0a025b [0169.041] SetTextColor (hdc=0x17010257, color=0x2222222) returned 0x2222222 [0169.041] SetBkMode (hdc=0x17010257, mode=1) returned 1 [0169.041] GetTextAlign (hdc=0x17010257) returned 0x0 [0169.041] SetTextAlign (hdc=0x17010257, align=0x18) returned 0x0 [0169.041] _CIatan2 () returned 0x20 [0169.041] _CIatan2 () returned 0x20 [0169.041] ExtTextOutW (hdc=0x17010257, x=572, y=113, options=0x4, lprect=0x268408, lpString=" ", c=0x1, lpDx=0x268440) returned 1 [0169.041] SetTextAlign (hdc=0x17010257, align=0x0) returned 0x18 [0169.041] HeapFree (in: hHeap=0x470000, dwFlags=0x0, lpMem=0x0 | out: hHeap=0x470000) returned 1 [0169.041] LsDestroyLine () returned 0x0 [0169.041] HeapFree (in: hHeap=0x470000, dwFlags=0x0, lpMem=0x0 | out: hHeap=0x470000) returned 1 [0169.043] LsSetDoc () returned 0x0 [0169.043] LsCreateLine () returned 0x0 [0169.043] HeapFree (in: hHeap=0x470000, dwFlags=0x0, lpMem=0x0 | out: hHeap=0x470000) returned 1 [0169.043] RtlAllocateHeap (HeapHandle=0x470000, Flags=0x0, Size=0x18) returned 0x4dcc40 [0169.043] HeapFree (in: hHeap=0x470000, dwFlags=0x0, lpMem=0x0 | out: hHeap=0x470000) returned 1 [0169.043] LsdnFinishRegular () returned 0x0 [0169.043] LsDisplayLine () returned 0x0 [0169.043] SelectObject (hdc=0x17010257, h=0x4c0a025b) returned 0x4c0a025b [0169.043] SetTextColor (hdc=0x17010257, color=0x2222222) returned 0x2222222 [0169.043] SetBkMode (hdc=0x17010257, mode=1) returned 1 [0169.043] HeapFree (in: hHeap=0x470000, dwFlags=0x0, lpMem=0x0 | out: hHeap=0x470000) returned 1 [0169.044] LsDestroyLine () returned 0x0 [0169.044] HeapFree (in: hHeap=0x470000, dwFlags=0x0, lpMem=0x4dcc40 | out: hHeap=0x470000) returned 1 [0169.044] HeapFree (in: hHeap=0x470000, dwFlags=0x0, lpMem=0x0 | out: hHeap=0x470000) returned 1 [0169.044] SelectObject (hdc=0x17010257, h=0x18a002e) returned 0x4c0a025b [0169.044] HeapFree (in: hHeap=0x470000, dwFlags=0x0, lpMem=0x0 | out: hHeap=0x470000) returned 1 [0169.044] IntersectRect (in: lprcDst=0x2692fc, lprcSrc1=0x2692fc, lprcSrc2=0x2691b0 | out: lprcDst=0x2692fc) returned 1 [0169.044] HeapFree (in: hHeap=0x470000, dwFlags=0x0, lpMem=0x0 | out: hHeap=0x470000) returned 1 [0169.044] IntersectRect (in: lprcDst=0x4c1490, lprcSrc1=0x4c1490, lprcSrc2=0x2692fc | out: lprcDst=0x4c1490) returned 1 [0169.044] IntersectRect (in: lprcDst=0x269260, lprcSrc1=0x269260, lprcSrc2=0x4c14a0 | out: lprcDst=0x269260) returned 1 [0169.044] IntersectRect (in: lprcDst=0x4c1490, lprcSrc1=0x4c1490, lprcSrc2=0x269214 | out: lprcDst=0x4c1490) returned 1 [0169.044] GetDeviceCaps (hdc=0x17010257, index=2) returned 1 [0169.044] CreateSolidBrush (color=0x29797f7) returned 0xe1007c3 [0169.044] SelectObject (hdc=0x17010257, h=0xe1007c3) returned 0x1900010 [0169.044] GetStockObject (i=8) returned 0x1b00016 [0169.044] SelectObject (hdc=0x17010257, h=0x1b00016) returned 0x1b00016 [0169.044] Rectangle (hdc=0x17010257, left=120, top=48, right=1188, bottom=52) returned 1 [0169.044] SelectObject (hdc=0x17010257, h=0x1900010) returned 0xe1007c3 [0169.044] SelectObject (hdc=0x17010257, h=0x1b00016) returned 0x1b00016 [0169.044] DeleteObject (ho=0xe1007c3) returned 1 [0169.044] IntersectRect (in: lprcDst=0x269484, lprcSrc1=0x269484, lprcSrc2=0x269394 | out: lprcDst=0x269484) returned 1 [0169.044] HeapFree (in: hHeap=0x470000, dwFlags=0x0, lpMem=0x0 | out: hHeap=0x470000) returned 1 [0169.044] IntersectRect (in: lprcDst=0x269398, lprcSrc1=0x269398, lprcSrc2=0x269388 | out: lprcDst=0x269398) returned 1 [0169.044] GetDeviceCaps (hdc=0x17010257, index=2) returned 1 [0169.044] _CIsqrt () returned 0x3f1a027f [0169.044] _CIsqrt () returned 0x3f1a027f [0169.045] _CIatan2 () returned 0x20 [0169.045] _CIatan2 () returned 0x20 [0169.045] GetStockObject (i=8) returned 0x1b00016 [0169.045] SelectObject (hdc=0x17010257, h=0x1b00016) returned 0x1b00016 [0169.045] GetViewportOrgEx (in: hdc=0x17010257, lppoint=0x26917c | out: lppoint=0x26917c) returned 1 [0169.045] SelectObject (hdc=0x17010257, h=0x1e10024f) returned 0x1900010 [0169.045] UnrealizeObject (h=0x1e10024f) returned 1 [0169.045] SetBrushOrgEx (in: hdc=0x17010257, x=103, y=138, lppt=0x0 | out: lppt=0x0) returned 1 [0169.045] MulDiv (nNumber=3, nNumerator=3, nDenominator=3) returned 3 [0169.045] MulDiv (nNumber=3, nNumerator=0, nDenominator=3) returned 0 [0169.045] MulDiv (nNumber=3, nNumerator=0, nDenominator=3) returned 0 [0169.045] MulDiv (nNumber=3, nNumerator=0, nDenominator=3) returned 0 [0169.045] MulDiv (nNumber=3, nNumerator=3, nDenominator=3) returned 3 [0169.045] MulDiv (nNumber=3, nNumerator=3, nDenominator=3) returned 3 [0169.045] Polygon (hdc=0x17010257, apt=0x2690a0, cpt=6) returned 1 [0169.045] MulDiv (nNumber=3, nNumerator=3, nDenominator=3) returned 3 [0169.045] MulDiv (nNumber=3, nNumerator=0, nDenominator=3) returned 0 [0169.045] MulDiv (nNumber=3, nNumerator=0, nDenominator=3) returned 0 [0169.045] MulDiv (nNumber=3, nNumerator=0, nDenominator=3) returned 0 [0169.045] MulDiv (nNumber=3, nNumerator=3, nDenominator=3) returned 3 [0169.045] MulDiv (nNumber=3, nNumerator=3, nDenominator=3) returned 3 [0169.045] Polygon (hdc=0x17010257, apt=0x2690a0, cpt=6) returned 1 [0169.045] SelectObject (hdc=0x17010257, h=0x1900010) returned 0x1e10024f [0169.045] IntersectRect (in: lprcDst=0x4c1490, lprcSrc1=0x4c1490, lprcSrc2=0x269388 | out: lprcDst=0x4c1490) returned 1 [0169.045] IntersectRect (in: lprcDst=0x269388, lprcSrc1=0x269388, lprcSrc2=0x4c14a0 | out: lprcDst=0x269388) returned 1 [0169.045] GetDeviceCaps (hdc=0x17010257, index=2) returned 1 [0169.045] IntersectRect (in: lprcDst=0x269184, lprcSrc1=0x26f494, lprcSrc2=0x269184 | out: lprcDst=0x269184) returned 1 [0169.045] SelectObject (hdc=0x17010257, h=0x43100260) returned 0x1900010 [0169.045] GetStockObject (i=8) returned 0x1b00016 [0169.045] SelectObject (hdc=0x17010257, h=0x1b00016) returned 0x1b00016 [0169.045] GetROP2 (hdc=0x17010257) returned 13 [0169.045] SetBkMode (hdc=0x17010257, mode=2) returned 1 [0169.045] Rectangle (hdc=0x17010257, left=106, top=141, right=739, bottom=151) returned 1 [0169.045] SetBkMode (hdc=0x17010257, mode=1) returned 2 [0169.045] SelectObject (hdc=0x17010257, h=0x1b00016) returned 0x1b00016 [0169.045] SelectObject (hdc=0x17010257, h=0x1900010) returned 0x43100260 [0169.045] IntersectRect (in: lprcDst=0x4c1490, lprcSrc1=0x4c1490, lprcSrc2=0x2694a4 | out: lprcDst=0x4c1490) returned 1 [0169.046] IntersectRect (in: lprcDst=0x4c1490, lprcSrc1=0x4c1490, lprcSrc2=0x2694c4 | out: lprcDst=0x4c1490) returned 1 [0169.046] IntersectRect (in: lprcDst=0x268fc4, lprcSrc1=0x268fc4, lprcSrc2=0x268e78 | out: lprcDst=0x268fc4) returned 1 [0169.046] HeapFree (in: hHeap=0x470000, dwFlags=0x0, lpMem=0x0 | out: hHeap=0x470000) returned 1 [0169.046] IntersectRect (in: lprcDst=0x4c1490, lprcSrc1=0x4c1490, lprcSrc2=0x268fc4 | out: lprcDst=0x4c1490) returned 1 [0169.046] IntersectRect (in: lprcDst=0x268f28, lprcSrc1=0x268f28, lprcSrc2=0x4c14a0 | out: lprcDst=0x268f28) returned 1 [0169.046] IntersectRect (in: lprcDst=0x4c1490, lprcSrc1=0x4c1490, lprcSrc2=0x268edc | out: lprcDst=0x4c1490) returned 1 [0169.046] GetDeviceCaps (hdc=0x17010257, index=2) returned 1 [0169.046] SetBkMode (hdc=0x17010257, mode=1) returned 1 [0169.046] SetTextAlign (hdc=0x17010257, align=0x0) returned 0x0 [0169.046] LsSetDoc () returned 0x0 [0169.046] LsCreateLine () returned 0x0 [0169.046] HeapFree (in: hHeap=0x470000, dwFlags=0x0, lpMem=0x0 | out: hHeap=0x470000) returned 1 [0169.047] RtlAllocateHeap (HeapHandle=0x470000, Flags=0x0, Size=0x2e4) returned 0x4e7f70 [0169.048] RtlAllocateHeap (HeapHandle=0x470000, Flags=0x0, Size=0x194) returned 0x4e23f0 [0169.049] RtlAllocateHeap (HeapHandle=0x470000, Flags=0x0, Size=0x2e4) returned 0x4e1f70 [0169.049] LsDisplayLine () returned 0x0 [0169.049] SelectObject (hdc=0x17010257, h=0x4c0a025b) returned 0x18a002e [0169.049] SetTextColor (hdc=0x17010257, color=0x2222222) returned 0x2222222 [0169.049] SetBkMode (hdc=0x17010257, mode=1) returned 1 [0169.049] GetTextAlign (hdc=0x17010257) returned 0x0 [0169.049] SetTextAlign (hdc=0x17010257, align=0x18) returned 0x0 [0169.049] _CIatan2 () returned 0x20 [0169.049] _CIatan2 () returned 0x20 [0169.050] ExtTextOutW (hdc=0x17010257, x=123, y=177, options=0x4, lprect=0x2680d0, lpString="ID-QE54S-FEQ6E-Q654F-654TY-3215G-TZ320-AQF44-GSRG7-HTS98 . (RSA, AES, RC4) ove that only we can do it. ", c=0x2, lpDx=0x268108) returned 1 [0169.050] SetTextAlign (hdc=0x17010257, align=0x0) returned 0x18 [0169.050] HeapFree (in: hHeap=0x470000, dwFlags=0x0, lpMem=0x0 | out: hHeap=0x470000) returned 1 [0169.050] SelectObject (hdc=0x17010257, h=0x4c0a025b) returned 0x4c0a025b [0169.050] SetTextColor (hdc=0x17010257, color=0x2222222) returned 0x2222222 [0169.050] SetBkMode (hdc=0x17010257, mode=1) returned 1 [0169.050] GetTextAlign (hdc=0x17010257) returned 0x0 [0169.050] SetTextAlign (hdc=0x17010257, align=0x18) returned 0x0 [0169.050] _CIatan2 () returned 0x20 [0169.050] _CIatan2 () returned 0x20 [0169.050] ExtTextOutW (hdc=0x17010257, x=141, y=177, options=0x4, lprect=0x2680d0, lpString="-QE54S-FEQ6E-Q654F-654TY-3215G-TZ320-AQF44-GSRG7-HTS98 . (RSA, AES, RC4) ove that only we can do it. ", c=0x1, lpDx=0x268108) returned 1 [0169.050] SetTextAlign (hdc=0x17010257, align=0x0) returned 0x18 [0169.050] HeapFree (in: hHeap=0x470000, dwFlags=0x0, lpMem=0x0 | out: hHeap=0x470000) returned 1 [0169.050] SelectObject (hdc=0x17010257, h=0x4c0a025b) returned 0x4c0a025b [0169.050] SetTextColor (hdc=0x17010257, color=0x2222222) returned 0x2222222 [0169.050] SetBkMode (hdc=0x17010257, mode=1) returned 1 [0169.050] GetTextAlign (hdc=0x17010257) returned 0x0 [0169.050] SetTextAlign (hdc=0x17010257, align=0x18) returned 0x0 [0169.050] _CIatan2 () returned 0x20 [0169.050] _CIatan2 () returned 0x20 [0169.050] ExtTextOutW (hdc=0x17010257, x=151, y=177, options=0x4, lprect=0x2680d0, lpString="QE54S-FEQ6E-Q654F-654TY-3215G-TZ320-AQF44-GSRG7-HTS98 . (RSA, AES, RC4) ove that only we can do it. ", c=0x5, lpDx=0x268108) returned 1 [0169.050] SetTextAlign (hdc=0x17010257, align=0x0) returned 0x18 [0169.050] HeapFree (in: hHeap=0x470000, dwFlags=0x0, lpMem=0x0 | out: hHeap=0x470000) returned 1 [0169.050] SelectObject (hdc=0x17010257, h=0x4c0a025b) returned 0x4c0a025b [0169.050] SetTextColor (hdc=0x17010257, color=0x2222222) returned 0x2222222 [0169.050] SetBkMode (hdc=0x17010257, mode=1) returned 1 [0169.050] GetTextAlign (hdc=0x17010257) returned 0x0 [0169.050] SetTextAlign (hdc=0x17010257, align=0x18) returned 0x0 [0169.050] _CIatan2 () returned 0x20 [0169.051] _CIatan2 () returned 0x20 [0169.051] ExtTextOutW (hdc=0x17010257, x=204, y=177, options=0x4, lprect=0x2680d0, lpString="-FEQ6E-Q654F-654TY-3215G-TZ320-AQF44-GSRG7-HTS98 . (RSA, AES, RC4) ove that only we can do it. ", c=0x1, lpDx=0x268108) returned 1 [0169.051] SetTextAlign (hdc=0x17010257, align=0x0) returned 0x18 [0169.051] HeapFree (in: hHeap=0x470000, dwFlags=0x0, lpMem=0x0 | out: hHeap=0x470000) returned 1 [0169.051] SelectObject (hdc=0x17010257, h=0x4c0a025b) returned 0x4c0a025b [0169.051] SetTextColor (hdc=0x17010257, color=0x2222222) returned 0x2222222 [0169.051] SetBkMode (hdc=0x17010257, mode=1) returned 1 [0169.051] GetTextAlign (hdc=0x17010257) returned 0x0 [0169.051] SetTextAlign (hdc=0x17010257, align=0x18) returned 0x0 [0169.051] _CIatan2 () returned 0x20 [0169.051] _CIatan2 () returned 0x20 [0169.051] ExtTextOutW (hdc=0x17010257, x=214, y=177, options=0x4, lprect=0x2680d0, lpString="FEQ6E-Q654F-654TY-3215G-TZ320-AQF44-GSRG7-HTS98 . (RSA, AES, RC4) ove that only we can do it. ", c=0x5, lpDx=0x268108) returned 1 [0169.051] SetTextAlign (hdc=0x17010257, align=0x0) returned 0x18 [0169.051] HeapFree (in: hHeap=0x470000, dwFlags=0x0, lpMem=0x0 | out: hHeap=0x470000) returned 1 [0169.051] SelectObject (hdc=0x17010257, h=0x4c0a025b) returned 0x4c0a025b [0169.051] SetTextColor (hdc=0x17010257, color=0x2222222) returned 0x2222222 [0169.051] SetBkMode (hdc=0x17010257, mode=1) returned 1 [0169.051] GetTextAlign (hdc=0x17010257) returned 0x0 [0169.051] SetTextAlign (hdc=0x17010257, align=0x18) returned 0x0 [0169.051] _CIatan2 () returned 0x20 [0169.051] _CIatan2 () returned 0x20 [0169.051] ExtTextOutW (hdc=0x17010257, x=265, y=177, options=0x4, lprect=0x2680d0, lpString="-Q654F-654TY-3215G-TZ320-AQF44-GSRG7-HTS98 . (RSA, AES, RC4) ove that only we can do it. ", c=0x1, lpDx=0x268108) returned 1 [0169.051] SetTextAlign (hdc=0x17010257, align=0x0) returned 0x18 [0169.051] HeapFree (in: hHeap=0x470000, dwFlags=0x0, lpMem=0x0 | out: hHeap=0x470000) returned 1 [0169.051] SelectObject (hdc=0x17010257, h=0x4c0a025b) returned 0x4c0a025b [0169.051] SetTextColor (hdc=0x17010257, color=0x2222222) returned 0x2222222 [0169.051] SetBkMode (hdc=0x17010257, mode=1) returned 1 [0169.051] GetTextAlign (hdc=0x17010257) returned 0x0 [0169.051] SetTextAlign (hdc=0x17010257, align=0x18) returned 0x0 [0169.051] _CIatan2 () returned 0x20 [0169.051] _CIatan2 () returned 0x20 [0169.052] ExtTextOutW (hdc=0x17010257, x=275, y=177, options=0x4, lprect=0x2680d0, lpString="Q654F-654TY-3215G-TZ320-AQF44-GSRG7-HTS98 . (RSA, AES, RC4) ove that only we can do it. ", c=0x5, lpDx=0x268108) returned 1 [0169.052] SetTextAlign (hdc=0x17010257, align=0x0) returned 0x18 [0169.052] HeapFree (in: hHeap=0x470000, dwFlags=0x0, lpMem=0x0 | out: hHeap=0x470000) returned 1 [0169.052] SelectObject (hdc=0x17010257, h=0x4c0a025b) returned 0x4c0a025b [0169.052] SetTextColor (hdc=0x17010257, color=0x2222222) returned 0x2222222 [0169.052] SetBkMode (hdc=0x17010257, mode=1) returned 1 [0169.052] GetTextAlign (hdc=0x17010257) returned 0x0 [0169.052] SetTextAlign (hdc=0x17010257, align=0x18) returned 0x0 [0169.052] _CIatan2 () returned 0x20 [0169.052] _CIatan2 () returned 0x20 [0169.052] ExtTextOutW (hdc=0x17010257, x=330, y=177, options=0x4, lprect=0x2680d0, lpString="-654TY-3215G-TZ320-AQF44-GSRG7-HTS98 . (RSA, AES, RC4) ove that only we can do it. ", c=0x1, lpDx=0x268108) returned 1 [0169.052] SetTextAlign (hdc=0x17010257, align=0x0) returned 0x18 [0169.052] HeapFree (in: hHeap=0x470000, dwFlags=0x0, lpMem=0x0 | out: hHeap=0x470000) returned 1 [0169.052] SelectObject (hdc=0x17010257, h=0x4c0a025b) returned 0x4c0a025b [0169.052] SetTextColor (hdc=0x17010257, color=0x2222222) returned 0x2222222 [0169.052] SetBkMode (hdc=0x17010257, mode=1) returned 1 [0169.052] GetTextAlign (hdc=0x17010257) returned 0x0 [0169.052] SetTextAlign (hdc=0x17010257, align=0x18) returned 0x0 [0169.052] _CIatan2 () returned 0x20 [0169.052] _CIatan2 () returned 0x20 [0169.052] ExtTextOutW (hdc=0x17010257, x=340, y=177, options=0x4, lprect=0x2680d0, lpString="654TY-3215G-TZ320-AQF44-GSRG7-HTS98 . (RSA, AES, RC4) ove that only we can do it. ", c=0x5, lpDx=0x268108) returned 1 [0169.052] SetTextAlign (hdc=0x17010257, align=0x0) returned 0x18 [0169.052] HeapFree (in: hHeap=0x470000, dwFlags=0x0, lpMem=0x0 | out: hHeap=0x470000) returned 1 [0169.052] SelectObject (hdc=0x17010257, h=0x4c0a025b) returned 0x4c0a025b [0169.052] SetTextColor (hdc=0x17010257, color=0x2222222) returned 0x2222222 [0169.052] SetBkMode (hdc=0x17010257, mode=1) returned 1 [0169.052] GetTextAlign (hdc=0x17010257) returned 0x0 [0169.052] SetTextAlign (hdc=0x17010257, align=0x18) returned 0x0 [0169.052] _CIatan2 () returned 0x20 [0169.052] _CIatan2 () returned 0x20 [0169.053] ExtTextOutW (hdc=0x17010257, x=395, y=177, options=0x4, lprect=0x2680d0, lpString="-3215G-TZ320-AQF44-GSRG7-HTS98 . (RSA, AES, RC4) ove that only we can do it. ", c=0x1, lpDx=0x268108) returned 1 [0169.053] SetTextAlign (hdc=0x17010257, align=0x0) returned 0x18 [0169.053] HeapFree (in: hHeap=0x470000, dwFlags=0x0, lpMem=0x0 | out: hHeap=0x470000) returned 1 [0169.053] SelectObject (hdc=0x17010257, h=0x4c0a025b) returned 0x4c0a025b [0169.053] SetTextColor (hdc=0x17010257, color=0x2222222) returned 0x2222222 [0169.053] SetBkMode (hdc=0x17010257, mode=1) returned 1 [0169.053] GetTextAlign (hdc=0x17010257) returned 0x0 [0169.053] SetTextAlign (hdc=0x17010257, align=0x18) returned 0x0 [0169.053] _CIatan2 () returned 0x20 [0169.053] _CIatan2 () returned 0x20 [0169.053] ExtTextOutW (hdc=0x17010257, x=405, y=177, options=0x4, lprect=0x2680d0, lpString="3215G-TZ320-AQF44-GSRG7-HTS98 . (RSA, AES, RC4) ove that only we can do it. ", c=0x5, lpDx=0x268108) returned 1 [0169.053] SetTextAlign (hdc=0x17010257, align=0x0) returned 0x18 [0169.053] HeapFree (in: hHeap=0x470000, dwFlags=0x0, lpMem=0x0 | out: hHeap=0x470000) returned 1 [0169.053] SelectObject (hdc=0x17010257, h=0x4c0a025b) returned 0x4c0a025b [0169.053] SetTextColor (hdc=0x17010257, color=0x2222222) returned 0x2222222 [0169.053] SetBkMode (hdc=0x17010257, mode=1) returned 1 [0169.053] GetTextAlign (hdc=0x17010257) returned 0x0 [0169.053] SetTextAlign (hdc=0x17010257, align=0x18) returned 0x0 [0169.053] _CIatan2 () returned 0x20 [0169.053] _CIatan2 () returned 0x20 [0169.053] ExtTextOutW (hdc=0x17010257, x=461, y=177, options=0x4, lprect=0x2680d0, lpString="-TZ320-AQF44-GSRG7-HTS98 . (RSA, AES, RC4) ove that only we can do it. ", c=0x1, lpDx=0x268108) returned 1 [0169.054] SetTextAlign (hdc=0x17010257, align=0x0) returned 0x18 [0169.054] HeapFree (in: hHeap=0x470000, dwFlags=0x0, lpMem=0x0 | out: hHeap=0x470000) returned 1 [0169.054] SelectObject (hdc=0x17010257, h=0x4c0a025b) returned 0x4c0a025b [0169.054] SetTextColor (hdc=0x17010257, color=0x2222222) returned 0x2222222 [0169.054] SetBkMode (hdc=0x17010257, mode=1) returned 1 [0169.054] GetTextAlign (hdc=0x17010257) returned 0x0 [0169.054] SetTextAlign (hdc=0x17010257, align=0x18) returned 0x0 [0169.054] _CIatan2 () returned 0x20 [0169.054] _CIatan2 () returned 0x20 [0169.054] ExtTextOutW (hdc=0x17010257, x=471, y=177, options=0x4, lprect=0x2680d0, lpString="TZ320-AQF44-GSRG7-HTS98 . (RSA, AES, RC4) ove that only we can do it. ", c=0x5, lpDx=0x268108) returned 1 [0169.054] SetTextAlign (hdc=0x17010257, align=0x0) returned 0x18 [0169.054] HeapFree (in: hHeap=0x470000, dwFlags=0x0, lpMem=0x0 | out: hHeap=0x470000) returned 1 [0169.054] SelectObject (hdc=0x17010257, h=0x4c0a025b) returned 0x4c0a025b [0169.054] SetTextColor (hdc=0x17010257, color=0x2222222) returned 0x2222222 [0169.054] SetBkMode (hdc=0x17010257, mode=1) returned 1 [0169.054] GetTextAlign (hdc=0x17010257) returned 0x0 [0169.054] SetTextAlign (hdc=0x17010257, align=0x18) returned 0x0 [0169.054] _CIatan2 () returned 0x20 [0169.054] _CIatan2 () returned 0x20 [0169.054] ExtTextOutW (hdc=0x17010257, x=525, y=177, options=0x4, lprect=0x2680d0, lpString="-AQF44-GSRG7-HTS98 . (RSA, AES, RC4) ove that only we can do it. ", c=0x1, lpDx=0x268108) returned 1 [0169.054] SetTextAlign (hdc=0x17010257, align=0x0) returned 0x18 [0169.054] HeapFree (in: hHeap=0x470000, dwFlags=0x0, lpMem=0x0 | out: hHeap=0x470000) returned 1 [0169.054] SelectObject (hdc=0x17010257, h=0x4c0a025b) returned 0x4c0a025b [0169.055] SetTextColor (hdc=0x17010257, color=0x2222222) returned 0x2222222 [0169.055] SetBkMode (hdc=0x17010257, mode=1) returned 1 [0169.055] GetTextAlign (hdc=0x17010257) returned 0x0 [0169.055] SetTextAlign (hdc=0x17010257, align=0x18) returned 0x0 [0169.055] _CIatan2 () returned 0x20 [0169.055] _CIatan2 () returned 0x20 [0169.055] ExtTextOutW (hdc=0x17010257, x=535, y=177, options=0x4, lprect=0x2680d0, lpString="AQF44-GSRG7-HTS98 . (RSA, AES, RC4) ove that only we can do it. ", c=0x5, lpDx=0x268108) returned 1 [0169.055] SetTextAlign (hdc=0x17010257, align=0x0) returned 0x18 [0169.055] HeapFree (in: hHeap=0x470000, dwFlags=0x0, lpMem=0x0 | out: hHeap=0x470000) returned 1 [0169.055] SelectObject (hdc=0x17010257, h=0x4c0a025b) returned 0x4c0a025b [0169.055] SetTextColor (hdc=0x17010257, color=0x2222222) returned 0x2222222 [0169.055] SetBkMode (hdc=0x17010257, mode=1) returned 1 [0169.055] GetTextAlign (hdc=0x17010257) returned 0x0 [0169.055] SetTextAlign (hdc=0x17010257, align=0x18) returned 0x0 [0169.055] _CIatan2 () returned 0x20 [0169.055] _CIatan2 () returned 0x20 [0169.055] ExtTextOutW (hdc=0x17010257, x=591, y=177, options=0x4, lprect=0x2680d0, lpString="-GSRG7-HTS98 . (RSA, AES, RC4) ove that only we can do it. ", c=0x1, lpDx=0x268108) returned 1 [0169.055] SetTextAlign (hdc=0x17010257, align=0x0) returned 0x18 [0169.055] HeapFree (in: hHeap=0x470000, dwFlags=0x0, lpMem=0x0 | out: hHeap=0x470000) returned 1 [0169.055] SelectObject (hdc=0x17010257, h=0x4c0a025b) returned 0x4c0a025b [0169.055] SetTextColor (hdc=0x17010257, color=0x2222222) returned 0x2222222 [0169.055] SetBkMode (hdc=0x17010257, mode=1) returned 1 [0169.055] GetTextAlign (hdc=0x17010257) returned 0x0 [0169.055] SetTextAlign (hdc=0x17010257, align=0x18) returned 0x0 [0169.055] _CIatan2 () returned 0x20 [0169.055] _CIatan2 () returned 0x20 [0169.055] ExtTextOutW (hdc=0x17010257, x=601, y=177, options=0x4, lprect=0x2680d0, lpString="GSRG7-HTS98 . (RSA, AES, RC4) ove that only we can do it. ", c=0x5, lpDx=0x268108) returned 1 [0169.055] SetTextAlign (hdc=0x17010257, align=0x0) returned 0x18 [0169.055] HeapFree (in: hHeap=0x470000, dwFlags=0x0, lpMem=0x0 | out: hHeap=0x470000) returned 1 [0169.055] SelectObject (hdc=0x17010257, h=0x4c0a025b) returned 0x4c0a025b [0169.056] SetTextColor (hdc=0x17010257, color=0x2222222) returned 0x2222222 [0169.056] SetBkMode (hdc=0x17010257, mode=1) returned 1 [0169.056] GetTextAlign (hdc=0x17010257) returned 0x0 [0169.056] SetTextAlign (hdc=0x17010257, align=0x18) returned 0x0 [0169.056] _CIatan2 () returned 0x20 [0169.056] _CIatan2 () returned 0x20 [0169.056] ExtTextOutW (hdc=0x17010257, x=656, y=177, options=0x4, lprect=0x2680d0, lpString="-HTS98 . (RSA, AES, RC4) ove that only we can do it. ", c=0x1, lpDx=0x268108) returned 1 [0169.056] SetTextAlign (hdc=0x17010257, align=0x0) returned 0x18 [0169.056] HeapFree (in: hHeap=0x470000, dwFlags=0x0, lpMem=0x0 | out: hHeap=0x470000) returned 1 [0169.056] SelectObject (hdc=0x17010257, h=0x4c0a025b) returned 0x4c0a025b [0169.056] SetTextColor (hdc=0x17010257, color=0x2222222) returned 0x2222222 [0169.056] SetBkMode (hdc=0x17010257, mode=1) returned 1 [0169.056] GetTextAlign (hdc=0x17010257) returned 0x0 [0169.056] SetTextAlign (hdc=0x17010257, align=0x18) returned 0x0 [0169.056] _CIatan2 () returned 0x20 [0169.056] _CIatan2 () returned 0x20 [0169.056] ExtTextOutW (hdc=0x17010257, x=666, y=177, options=0x4, lprect=0x2680d0, lpString="HTS98 . (RSA, AES, RC4) ove that only we can do it. ", c=0x5, lpDx=0x268108) returned 1 [0169.056] SetTextAlign (hdc=0x17010257, align=0x0) returned 0x18 [0169.056] HeapFree (in: hHeap=0x470000, dwFlags=0x0, lpMem=0x0 | out: hHeap=0x470000) returned 1 [0169.056] SelectObject (hdc=0x17010257, h=0x4c0a025b) returned 0x4c0a025b [0169.056] SetTextColor (hdc=0x17010257, color=0x2222222) returned 0x2222222 [0169.056] SetBkMode (hdc=0x17010257, mode=1) returned 1 [0169.056] GetTextAlign (hdc=0x17010257) returned 0x0 [0169.056] SetTextAlign (hdc=0x17010257, align=0x18) returned 0x0 [0169.056] _CIatan2 () returned 0x20 [0169.056] _CIatan2 () returned 0x20 [0169.056] ExtTextOutW (hdc=0x17010257, x=721, y=177, options=0x4, lprect=0x2680d0, lpString=" ", c=0x1, lpDx=0x268108) returned 1 [0169.056] SetTextAlign (hdc=0x17010257, align=0x0) returned 0x18 [0169.056] HeapFree (in: hHeap=0x470000, dwFlags=0x0, lpMem=0x0 | out: hHeap=0x470000) returned 1 [0169.056] LsDestroyLine () returned 0x0 [0169.056] HeapFree (in: hHeap=0x470000, dwFlags=0x0, lpMem=0x0 | out: hHeap=0x470000) returned 1 [0169.056] SelectObject (hdc=0x17010257, h=0x18a002e) returned 0x4c0a025b [0169.057] HeapFree (in: hHeap=0x470000, dwFlags=0x0, lpMem=0x0 | out: hHeap=0x470000) returned 1 [0169.057] BitBlt (hdc=0x50109f2, x=0, y=452, cx=1324, cy=150, hdcSrc=0x17010257, x1=0, y1=0, rop=0xcc0020) returned 1 [0169.057] HeapFree (in: hHeap=0x470000, dwFlags=0x0, lpMem=0x4c91a0 | out: hHeap=0x470000) returned 1 [0169.057] RtlAllocateHeap (HeapHandle=0x470000, Flags=0x0, Size=0x44) returned 0x4c91a0 [0169.057] IntersectRect (in: lprcDst=0x26a194, lprcSrc1=0x26a194, lprcSrc2=0x26a164 | out: lprcDst=0x26a194) returned 1 [0169.057] HeapFree (in: hHeap=0x470000, dwFlags=0x0, lpMem=0x0 | out: hHeap=0x470000) returned 1 [0169.057] IntersectRect (in: lprcDst=0x4c1490, lprcSrc1=0x4c1490, lprcSrc2=0x26a068 | out: lprcDst=0x4c1490) returned 1 [0169.071] IntersectRect (in: lprcDst=0x26a068, lprcSrc1=0x26a068, lprcSrc2=0x4c14a0 | out: lprcDst=0x26a068) returned 1 [0169.071] GetDeviceCaps (hdc=0x17010257, index=2) returned 1 [0169.071] RtlAllocateHeap (HeapHandle=0x470000, Flags=0x0, Size=0x30) returned 0x4c7708 [0169.071] ExtCreateRegion (lpx=0x0, nCount=0x30, lpData=0x4c7708) returned 0x3b0401b3 [0169.071] HeapFree (in: hHeap=0x470000, dwFlags=0x0, lpMem=0x4c7708 | out: hHeap=0x470000) returned 1 [0169.071] SelectClipRgn (hdc=0x17010257, hrgn=0x3b0401b3) returned 2 [0169.071] DeleteObject (ho=0x3b0401b3) returned 1 [0169.071] SelectObject (hdc=0x17010257, h=0x1d100258) returned 0x1900010 [0169.071] PatBlt (hdc=0x17010257, x=2, y=0, w=1303, h=150, rop=0xf00021) returned 1 [0169.072] SelectObject (hdc=0x17010257, h=0x1900010) returned 0x1d100258 [0169.072] IntersectRect (in: lprcDst=0x4c1490, lprcSrc1=0x4c1490, lprcSrc2=0x26a184 | out: lprcDst=0x4c1490) returned 1 [0169.072] IntersectRect (in: lprcDst=0x4c1490, lprcSrc1=0x4c1490, lprcSrc2=0x26a1a4 | out: lprcDst=0x4c1490) returned 1 [0169.072] IntersectRect (in: lprcDst=0x269d30, lprcSrc1=0x269d30, lprcSrc2=0x269d00 | out: lprcDst=0x269d30) returned 1 [0169.072] IntersectRect (in: lprcDst=0x4c1518, lprcSrc1=0x4c1518, lprcSrc2=0x269d20 | out: lprcDst=0x4c1518) returned 1 [0169.072] IntersectRect (in: lprcDst=0x269e5c, lprcSrc1=0x269e5c, lprcSrc2=0x269e2c | out: lprcDst=0x269e5c) returned 1 [0169.072] HeapFree (in: hHeap=0x470000, dwFlags=0x0, lpMem=0x0 | out: hHeap=0x470000) returned 1 [0169.072] IntersectRect (in: lprcDst=0x269d40, lprcSrc1=0x269d40, lprcSrc2=0x4c14a0 | out: lprcDst=0x269d40) returned 0 [0169.072] IntersectRect (in: lprcDst=0x4c1490, lprcSrc1=0x4c1490, lprcSrc2=0x269d30 | out: lprcDst=0x4c1490) returned 1 [0169.072] IntersectRect (in: lprcDst=0x269d30, lprcSrc1=0x269d30, lprcSrc2=0x4c14a0 | out: lprcDst=0x269d30) returned 1 [0169.072] GetDeviceCaps (hdc=0x17010257, index=2) returned 1 [0169.072] IntersectRect (in: lprcDst=0x269b2c, lprcSrc1=0x26f494, lprcSrc2=0x269b2c | out: lprcDst=0x269b2c) returned 1 [0169.072] SelectObject (hdc=0x17010257, h=0x80100a17) returned 0x1900010 [0169.072] GetStockObject (i=8) returned 0x1b00016 [0169.072] SelectObject (hdc=0x17010257, h=0x1b00016) returned 0x1b00016 [0169.072] GetROP2 (hdc=0x17010257) returned 13 [0169.072] SetBkMode (hdc=0x17010257, mode=2) returned 1 [0169.072] Rectangle (hdc=0x17010257, left=2, top=0, right=1306, bottom=151) returned 1 [0169.072] SetBkMode (hdc=0x17010257, mode=1) returned 2 [0169.072] SelectObject (hdc=0x17010257, h=0x1b00016) returned 0x1b00016 [0169.072] SelectObject (hdc=0x17010257, h=0x1900010) returned 0x80100a17 [0169.072] IntersectRect (in: lprcDst=0x4c1490, lprcSrc1=0x4c1490, lprcSrc2=0x269e4c | out: lprcDst=0x4c1490) returned 1 [0169.072] IntersectRect (in: lprcDst=0x4c1490, lprcSrc1=0x4c1490, lprcSrc2=0x269e6c | out: lprcDst=0x4c1490) returned 1 [0169.072] IntersectRect (in: lprcDst=0x2699c8, lprcSrc1=0x2699c8, lprcSrc2=0x269958 | out: lprcDst=0x2699c8) returned 1 [0169.072] IntersectRect (in: lprcDst=0x4c1518, lprcSrc1=0x4c1518, lprcSrc2=0x2699e8 | out: lprcDst=0x4c1518) returned 1 [0169.072] IntersectRect (in: lprcDst=0x269af4, lprcSrc1=0x269af4, lprcSrc2=0x269a04 | out: lprcDst=0x269af4) returned 1 [0169.072] HeapFree (in: hHeap=0x470000, dwFlags=0x0, lpMem=0x0 | out: hHeap=0x470000) returned 1 [0169.072] IntersectRect (in: lprcDst=0x4c1490, lprcSrc1=0x4c1490, lprcSrc2=0x269b14 | out: lprcDst=0x4c1490) returned 1 [0169.072] IntersectRect (in: lprcDst=0x269af4, lprcSrc1=0x269af4, lprcSrc2=0x269a04 | out: lprcDst=0x269af4) returned 1 [0169.073] HeapFree (in: hHeap=0x470000, dwFlags=0x0, lpMem=0x0 | out: hHeap=0x470000) returned 1 [0169.073] IntersectRect (in: lprcDst=0x4c1490, lprcSrc1=0x4c1490, lprcSrc2=0x269b14 | out: lprcDst=0x4c1490) returned 1 [0169.073] IntersectRect (in: lprcDst=0x4c1490, lprcSrc1=0x4c1490, lprcSrc2=0x269b34 | out: lprcDst=0x4c1490) returned 1 [0169.073] IntersectRect (in: lprcDst=0x269634, lprcSrc1=0x269634, lprcSrc2=0x2694e8 | out: lprcDst=0x269634) returned 1 [0169.073] HeapFree (in: hHeap=0x470000, dwFlags=0x0, lpMem=0x0 | out: hHeap=0x470000) returned 1 [0169.073] IntersectRect (in: lprcDst=0x4c1490, lprcSrc1=0x4c1490, lprcSrc2=0x269634 | out: lprcDst=0x4c1490) returned 1 [0169.073] IntersectRect (in: lprcDst=0x269598, lprcSrc1=0x269598, lprcSrc2=0x4c14a0 | out: lprcDst=0x269598) returned 1 [0169.073] IntersectRect (in: lprcDst=0x4c1490, lprcSrc1=0x4c1490, lprcSrc2=0x26954c | out: lprcDst=0x4c1490) returned 1 [0169.073] GetDeviceCaps (hdc=0x17010257, index=2) returned 1 [0169.073] SetBkMode (hdc=0x17010257, mode=1) returned 1 [0169.073] SetTextAlign (hdc=0x17010257, align=0x0) returned 0x0 [0169.073] LsSetDoc () returned 0x0 [0169.073] LsCreateLine () returned 0x0 [0169.073] HeapFree (in: hHeap=0x470000, dwFlags=0x0, lpMem=0x0 | out: hHeap=0x470000) returned 1 [0169.074] RtlAllocateHeap (HeapHandle=0x470000, Flags=0x0, Size=0x18) returned 0x4dcc40 [0169.074] RtlAllocateHeap (HeapHandle=0x470000, Flags=0x0, Size=0x10) returned 0x4ab950 [0169.074] HeapFree (in: hHeap=0x470000, dwFlags=0x0, lpMem=0x0 | out: hHeap=0x470000) returned 1 [0169.074] LsdnFinishRegular () returned 0x0 [0169.074] LsDisplayLine () returned 0x0 [0169.074] LsDestroyLine () returned 0x0 [0169.074] HeapFree (in: hHeap=0x470000, dwFlags=0x0, lpMem=0x4dcc40 | out: hHeap=0x470000) returned 1 [0169.074] HeapFree (in: hHeap=0x470000, dwFlags=0x0, lpMem=0x0 | out: hHeap=0x470000) returned 1 [0169.074] SelectObject (hdc=0x17010257, h=0x18a002e) returned 0x18a002e [0169.074] HeapFree (in: hHeap=0x470000, dwFlags=0x0, lpMem=0x0 | out: hHeap=0x470000) returned 1 [0169.074] HeapFree (in: hHeap=0x470000, dwFlags=0x0, lpMem=0x4ab950 | out: hHeap=0x470000) returned 1 [0169.074] HeapFree (in: hHeap=0x470000, dwFlags=0x0, lpMem=0x0 | out: hHeap=0x470000) returned 1 [0169.074] HeapFree (in: hHeap=0x470000, dwFlags=0x0, lpMem=0x0 | out: hHeap=0x470000) returned 1 [0169.074] HeapFree (in: hHeap=0x470000, dwFlags=0x0, lpMem=0x0 | out: hHeap=0x470000) returned 1 [0169.074] HeapFree (in: hHeap=0x470000, dwFlags=0x0, lpMem=0x0 | out: hHeap=0x470000) returned 1 [0169.075] HeapFree (in: hHeap=0x470000, dwFlags=0x0, lpMem=0x0 | out: hHeap=0x470000) returned 1 [0169.075] IntersectRect (in: lprcDst=0x2697bc, lprcSrc1=0x2697bc, lprcSrc2=0x2696cc | out: lprcDst=0x2697bc) returned 1 [0169.075] HeapFree (in: hHeap=0x470000, dwFlags=0x0, lpMem=0x0 | out: hHeap=0x470000) returned 1 [0169.075] IntersectRect (in: lprcDst=0x2696d0, lprcSrc1=0x2696d0, lprcSrc2=0x2696c0 | out: lprcDst=0x2696d0) returned 1 [0169.075] GetDeviceCaps (hdc=0x17010257, index=2) returned 1 [0169.075] RtlAllocateHeap (HeapHandle=0x470000, Flags=0x0, Size=0x30) returned 0x4c7708 [0169.075] ExtCreateRegion (lpx=0x0, nCount=0x30, lpData=0x4c7708) returned 0x3c0401b3 [0169.075] HeapFree (in: hHeap=0x470000, dwFlags=0x0, lpMem=0x4c7708 | out: hHeap=0x470000) returned 1 [0169.075] SelectClipRgn (hdc=0x17010257, hrgn=0x3c0401b3) returned 2 [0169.075] DeleteObject (ho=0x3c0401b3) returned 1 [0169.075] _CIsqrt () returned 0x3f1a027f [0169.075] _CIsqrt () returned 0x3f1a027f [0169.075] _CIatan2 () returned 0x20 [0169.075] _CIatan2 () returned 0x20 [0169.075] GetStockObject (i=8) returned 0x1b00016 [0169.075] SelectObject (hdc=0x17010257, h=0x1b00016) returned 0x1b00016 [0169.075] GetViewportOrgEx (in: hdc=0x17010257, lppoint=0x2694b4 | out: lppoint=0x2694b4) returned 1 [0169.075] SelectObject (hdc=0x17010257, h=0x1e10024f) returned 0x1900010 [0169.075] UnrealizeObject (h=0x1e10024f) returned 1 [0169.075] SetBrushOrgEx (in: hdc=0x17010257, x=67, y=-535, lppt=0x0 | out: lppt=0x0) returned 1 [0169.075] MulDiv (nNumber=3, nNumerator=3, nDenominator=3) returned 3 [0169.075] MulDiv (nNumber=3, nNumerator=0, nDenominator=3) returned 0 [0169.075] MulDiv (nNumber=3, nNumerator=0, nDenominator=3) returned 0 [0169.075] MulDiv (nNumber=3, nNumerator=0, nDenominator=3) returned 0 [0169.075] MulDiv (nNumber=3, nNumerator=3, nDenominator=3) returned 3 [0169.075] MulDiv (nNumber=3, nNumerator=3, nDenominator=3) returned 3 [0169.075] Polygon (hdc=0x17010257, apt=0x2693d8, cpt=6) returned 1 [0169.075] MulDiv (nNumber=3, nNumerator=3, nDenominator=3) returned 3 [0169.075] MulDiv (nNumber=3, nNumerator=0, nDenominator=3) returned 0 [0169.075] MulDiv (nNumber=3, nNumerator=0, nDenominator=3) returned 0 [0169.075] MulDiv (nNumber=3, nNumerator=0, nDenominator=3) returned 0 [0169.075] MulDiv (nNumber=3, nNumerator=3, nDenominator=3) returned 3 [0169.075] MulDiv (nNumber=3, nNumerator=3, nDenominator=3) returned 3 [0169.075] Polygon (hdc=0x17010257, apt=0x2693d8, cpt=6) returned 1 [0169.075] SelectObject (hdc=0x17010257, h=0x1900010) returned 0x1e10024f [0169.076] IntersectRect (in: lprcDst=0x4c1490, lprcSrc1=0x4c1490, lprcSrc2=0x2696c0 | out: lprcDst=0x4c1490) returned 1 [0169.076] IntersectRect (in: lprcDst=0x2696c0, lprcSrc1=0x2696c0, lprcSrc2=0x4c14a0 | out: lprcDst=0x2696c0) returned 1 [0169.076] GetDeviceCaps (hdc=0x17010257, index=2) returned 1 [0169.076] IntersectRect (in: lprcDst=0x2694bc, lprcSrc1=0x26f494, lprcSrc2=0x2694bc | out: lprcDst=0x2694bc) returned 1 [0169.076] SelectObject (hdc=0x17010257, h=0x10100276) returned 0x1900010 [0169.076] GetStockObject (i=8) returned 0x1b00016 [0169.076] SelectObject (hdc=0x17010257, h=0x1b00016) returned 0x1b00016 [0169.076] GetROP2 (hdc=0x17010257) returned 13 [0169.076] SetBkMode (hdc=0x17010257, mode=2) returned 1 [0169.076] Rectangle (hdc=0x17010257, left=70, top=0, right=1238, bottom=151) returned 1 [0169.076] SetBkMode (hdc=0x17010257, mode=1) returned 2 [0169.076] SelectObject (hdc=0x17010257, h=0x1b00016) returned 0x1b00016 [0169.076] SelectObject (hdc=0x17010257, h=0x1900010) returned 0x10100276 [0169.076] IntersectRect (in: lprcDst=0x4c1490, lprcSrc1=0x4c1490, lprcSrc2=0x2697dc | out: lprcDst=0x4c1490) returned 1 [0169.076] IntersectRect (in: lprcDst=0x4c1490, lprcSrc1=0x4c1490, lprcSrc2=0x2697fc | out: lprcDst=0x4c1490) returned 1 [0169.076] IntersectRect (in: lprcDst=0x2692fc, lprcSrc1=0x2692fc, lprcSrc2=0x2691b0 | out: lprcDst=0x2692fc) returned 1 [0169.076] HeapFree (in: hHeap=0x470000, dwFlags=0x0, lpMem=0x0 | out: hHeap=0x470000) returned 1 [0169.076] IntersectRect (in: lprcDst=0x4c1490, lprcSrc1=0x4c1490, lprcSrc2=0x2692fc | out: lprcDst=0x4c1490) returned 1 [0169.076] IntersectRect (in: lprcDst=0x269260, lprcSrc1=0x269260, lprcSrc2=0x4c14a0 | out: lprcDst=0x269260) returned 1 [0169.076] IntersectRect (in: lprcDst=0x4c1490, lprcSrc1=0x4c1490, lprcSrc2=0x269214 | out: lprcDst=0x4c1490) returned 1 [0169.076] GetDeviceCaps (hdc=0x17010257, index=2) returned 1 [0169.076] SetBkMode (hdc=0x17010257, mode=1) returned 1 [0169.076] SetTextAlign (hdc=0x17010257, align=0x0) returned 0x0 [0169.077] LsSetDoc () returned 0x0 [0169.077] LsCreateLine () returned 0x0 [0169.077] HeapFree (in: hHeap=0x470000, dwFlags=0x0, lpMem=0x0 | out: hHeap=0x470000) returned 1 [0169.077] RtlAllocateHeap (HeapHandle=0x470000, Flags=0x0, Size=0x18) returned 0x4dcc40 [0169.077] RtlAllocateHeap (HeapHandle=0x470000, Flags=0x0, Size=0x10) returned 0x4ab950 [0169.077] HeapFree (in: hHeap=0x470000, dwFlags=0x0, lpMem=0x0 | out: hHeap=0x470000) returned 1 [0169.077] LsdnFinishRegular () returned 0x0 [0169.077] LsDisplayLine () returned 0x0 [0169.077] SelectObject (hdc=0x17010257, h=0x4c0a025b) returned 0x18a002e [0169.077] SetTextColor (hdc=0x17010257, color=0x2222222) returned 0x2222222 [0169.077] SetBkMode (hdc=0x17010257, mode=1) returned 1 [0169.077] HeapFree (in: hHeap=0x470000, dwFlags=0x0, lpMem=0x0 | out: hHeap=0x470000) returned 1 [0169.078] LsDestroyLine () returned 0x0 [0169.078] HeapFree (in: hHeap=0x470000, dwFlags=0x0, lpMem=0x4dcc40 | out: hHeap=0x470000) returned 1 [0169.078] HeapFree (in: hHeap=0x470000, dwFlags=0x0, lpMem=0x0 | out: hHeap=0x470000) returned 1 [0169.078] HeapFree (in: hHeap=0x470000, dwFlags=0x0, lpMem=0x0 | out: hHeap=0x470000) returned 1 [0169.078] LsSetDoc () returned 0x0 [0169.078] LsCreateLine () returned 0x0 [0169.078] HeapFree (in: hHeap=0x470000, dwFlags=0x0, lpMem=0x0 | out: hHeap=0x470000) returned 1 [0169.079] LsDisplayLine () returned 0x0 [0169.079] SelectObject (hdc=0x17010257, h=0x70a0277) returned 0x4c0a025b [0169.079] SetTextColor (hdc=0x17010257, color=0x2222222) returned 0x2222222 [0169.079] SetBkMode (hdc=0x17010257, mode=1) returned 1 [0169.079] GetTextAlign (hdc=0x17010257) returned 0x0 [0169.079] SetTextAlign (hdc=0x17010257, align=0x18) returned 0x0 [0169.079] _CIatan2 () returned 0x20 [0169.079] _CIatan2 () returned 0x20 [0169.079] ExtTextOutW (hdc=0x17010257, x=103, y=91, options=0x4, lprect=0x268408, lpString="⠀ -QE54S-FEQ6E-Q654F-654TY-3215G-TZ320-AQF44-GSRG7-HTS98 . (RSA, AES, RC4) ove that only we can do it. ", c=0x1, lpDx=0x268440) returned 1 [0169.079] SetTextAlign (hdc=0x17010257, align=0x0) returned 0x18 [0169.079] HeapFree (in: hHeap=0x470000, dwFlags=0x0, lpMem=0x0 | out: hHeap=0x470000) returned 1 [0169.079] SelectObject (hdc=0x17010257, h=0x4c0a025b) returned 0x70a0277 [0169.079] SetTextColor (hdc=0x17010257, color=0x2222222) returned 0x2222222 [0169.079] SetBkMode (hdc=0x17010257, mode=1) returned 1 [0169.079] GetTextAlign (hdc=0x17010257) returned 0x0 [0169.079] SetTextAlign (hdc=0x17010257, align=0x18) returned 0x0 [0169.079] _CIatan2 () returned 0x20 [0169.079] _CIatan2 () returned 0x20 [0169.079] ExtTextOutW (hdc=0x17010257, x=114, y=91, options=0x4, lprect=0x268408, lpString=" ", c=0x1, lpDx=0x268440) returned 1 [0169.079] SetTextAlign (hdc=0x17010257, align=0x0) returned 0x18 [0169.079] HeapFree (in: hHeap=0x470000, dwFlags=0x0, lpMem=0x0 | out: hHeap=0x470000) returned 1 [0169.079] LsDestroyLine () returned 0x0 [0169.079] HeapFree (in: hHeap=0x470000, dwFlags=0x0, lpMem=0x0 | out: hHeap=0x470000) returned 1 [0169.080] HeapFree (in: hHeap=0x470000, dwFlags=0x0, lpMem=0x0 | out: hHeap=0x470000) returned 1 [0169.080] LsSetDoc () returned 0x0 [0169.080] LsCreateLine () returned 0x0 [0169.080] HeapFree (in: hHeap=0x470000, dwFlags=0x0, lpMem=0x0 | out: hHeap=0x470000) returned 1 [0169.081] LsDisplayLine () returned 0x0 [0169.081] SelectObject (hdc=0x17010257, h=0x4c0a025b) returned 0x4c0a025b [0169.081] SetTextColor (hdc=0x17010257, color=0x2222222) returned 0x2222222 [0169.081] SetBkMode (hdc=0x17010257, mode=1) returned 1 [0169.081] GetTextAlign (hdc=0x17010257) returned 0x0 [0169.081] SetTextAlign (hdc=0x17010257, align=0x18) returned 0x0 [0169.081] RtlAllocateHeap (HeapHandle=0x470000, Flags=0x0, Size=0x258) returned 0x4b4988 [0169.081] _CIatan2 () returned 0x20 [0169.081] _CIatan2 () returned 0x20 [0169.081] ExtTextOutW (hdc=0x17010257, x=103, y=135, options=0x4, lprect=0x268408, lpString="If you have already submited your payement, you will receive your private key and another decryption key with the special decryption", c=0x7a, lpDx=0x4b4988) returned 1 [0169.081] HeapFree (in: hHeap=0x470000, dwFlags=0x0, lpMem=0x4b4988 | out: hHeap=0x470000) returned 1 [0169.081] SetTextAlign (hdc=0x17010257, align=0x0) returned 0x18 [0169.081] HeapFree (in: hHeap=0x470000, dwFlags=0x0, lpMem=0x0 | out: hHeap=0x470000) returned 1 [0169.081] LsDestroyLine () returned 0x0 [0169.081] HeapFree (in: hHeap=0x470000, dwFlags=0x0, lpMem=0x0 | out: hHeap=0x470000) returned 1 [0169.081] LsSetDoc () returned 0x0 [0169.081] LsCreateLine () returned 0x0 [0169.081] HeapFree (in: hHeap=0x470000, dwFlags=0x0, lpMem=0x0 | out: hHeap=0x470000) returned 1 [0169.082] LsDisplayLine () returned 0x0 [0169.082] SelectObject (hdc=0x17010257, h=0x4c0a025b) returned 0x4c0a025b [0169.082] SetTextColor (hdc=0x17010257, color=0x2222222) returned 0x2222222 [0169.082] SetBkMode (hdc=0x17010257, mode=1) returned 1 [0169.082] GetTextAlign (hdc=0x17010257) returned 0x0 [0169.082] SetTextAlign (hdc=0x17010257, align=0x18) returned 0x0 [0169.082] _CIatan2 () returned 0x20 [0169.082] _CIatan2 () returned 0x20 [0169.082] ExtTextOutW (hdc=0x17010257, x=103, y=160, options=0x4, lprect=0x268408, lpString="decryption software submited your payement, you will receive your private key and another decryption key with the special decryption", c=0x13, lpDx=0x268440) returned 1 [0169.082] SetTextAlign (hdc=0x17010257, align=0x0) returned 0x18 [0169.082] HeapFree (in: hHeap=0x470000, dwFlags=0x0, lpMem=0x0 | out: hHeap=0x470000) returned 1 [0169.082] SelectObject (hdc=0x17010257, h=0x4c0a025b) returned 0x4c0a025b [0169.082] SetTextColor (hdc=0x17010257, color=0x2222222) returned 0x2222222 [0169.082] SetBkMode (hdc=0x17010257, mode=1) returned 1 [0169.082] GetTextAlign (hdc=0x17010257) returned 0x0 [0169.082] SetTextAlign (hdc=0x17010257, align=0x18) returned 0x0 [0169.082] _CIatan2 () returned 0x20 [0169.082] _CIatan2 () returned 0x20 [0169.082] ExtTextOutW (hdc=0x17010257, x=268, y=160, options=0x4, lprect=0x268408, lpString=" ", c=0x1, lpDx=0x268440) returned 1 [0169.083] SetTextAlign (hdc=0x17010257, align=0x0) returned 0x18 [0169.083] HeapFree (in: hHeap=0x470000, dwFlags=0x0, lpMem=0x0 | out: hHeap=0x470000) returned 1 [0169.083] LsDestroyLine () returned 0x0 [0169.083] HeapFree (in: hHeap=0x470000, dwFlags=0x0, lpMem=0x0 | out: hHeap=0x470000) returned 1 [0169.083] SelectObject (hdc=0x17010257, h=0x18a002e) returned 0x4c0a025b [0169.083] HeapFree (in: hHeap=0x470000, dwFlags=0x0, lpMem=0x0 | out: hHeap=0x470000) returned 1 [0169.083] IntersectRect (in: lprcDst=0x269484, lprcSrc1=0x269484, lprcSrc2=0x269394 | out: lprcDst=0x269484) returned 1 [0169.083] HeapFree (in: hHeap=0x470000, dwFlags=0x0, lpMem=0x0 | out: hHeap=0x470000) returned 1 [0169.083] IntersectRect (in: lprcDst=0x269398, lprcSrc1=0x269398, lprcSrc2=0x269388 | out: lprcDst=0x269398) returned 1 [0169.083] GetDeviceCaps (hdc=0x17010257, index=2) returned 1 [0169.083] _CIsqrt () returned 0x3f1a027f [0169.083] _CIsqrt () returned 0x3f1a027f [0169.083] _CIatan2 () returned 0x20 [0169.083] _CIatan2 () returned 0x20 [0169.083] GetStockObject (i=8) returned 0x1b00016 [0169.083] SelectObject (hdc=0x17010257, h=0x1b00016) returned 0x1b00016 [0169.083] GetViewportOrgEx (in: hdc=0x17010257, lppoint=0x26917c | out: lppoint=0x26917c) returned 1 [0169.083] SelectObject (hdc=0x17010257, h=0x1e10024f) returned 0x1900010 [0169.083] UnrealizeObject (h=0x1e10024f) returned 1 [0169.083] SetBrushOrgEx (in: hdc=0x17010257, x=103, y=-12, lppt=0x0 | out: lppt=0x0) returned 1 [0169.083] MulDiv (nNumber=3, nNumerator=3, nDenominator=3) returned 3 [0169.083] MulDiv (nNumber=3, nNumerator=0, nDenominator=3) returned 0 [0169.083] MulDiv (nNumber=3, nNumerator=0, nDenominator=3) returned 0 [0169.083] MulDiv (nNumber=3, nNumerator=0, nDenominator=3) returned 0 [0169.083] MulDiv (nNumber=3, nNumerator=3, nDenominator=3) returned 3 [0169.083] MulDiv (nNumber=3, nNumerator=3, nDenominator=3) returned 3 [0169.083] Polygon (hdc=0x17010257, apt=0x2690a0, cpt=6) returned 1 [0169.083] MulDiv (nNumber=3, nNumerator=3, nDenominator=3) returned 3 [0169.083] MulDiv (nNumber=3, nNumerator=0, nDenominator=3) returned 0 [0169.083] MulDiv (nNumber=3, nNumerator=0, nDenominator=3) returned 0 [0169.083] MulDiv (nNumber=3, nNumerator=0, nDenominator=3) returned 0 [0169.084] MulDiv (nNumber=3, nNumerator=3, nDenominator=3) returned 3 [0169.084] MulDiv (nNumber=3, nNumerator=3, nDenominator=3) returned 3 [0169.084] Polygon (hdc=0x17010257, apt=0x2690a0, cpt=6) returned 1 [0169.084] SelectObject (hdc=0x17010257, h=0x1900010) returned 0x1e10024f [0169.084] IntersectRect (in: lprcDst=0x4c1490, lprcSrc1=0x4c1490, lprcSrc2=0x269388 | out: lprcDst=0x4c1490) returned 1 [0169.084] IntersectRect (in: lprcDst=0x269388, lprcSrc1=0x269388, lprcSrc2=0x4c14a0 | out: lprcDst=0x269388) returned 1 [0169.084] GetDeviceCaps (hdc=0x17010257, index=2) returned 1 [0169.084] IntersectRect (in: lprcDst=0x269184, lprcSrc1=0x26f494, lprcSrc2=0x269184 | out: lprcDst=0x269184) returned 1 [0169.084] SelectObject (hdc=0x17010257, h=0x43100260) returned 0x1900010 [0169.084] GetStockObject (i=8) returned 0x1b00016 [0169.084] SelectObject (hdc=0x17010257, h=0x1b00016) returned 0x1b00016 [0169.084] GetROP2 (hdc=0x17010257) returned 13 [0169.084] SetBkMode (hdc=0x17010257, mode=2) returned 1 [0169.084] Rectangle (hdc=0x17010257, left=106, top=0, right=739, bottom=51) returned 1 [0169.084] SetBkMode (hdc=0x17010257, mode=1) returned 2 [0169.084] SelectObject (hdc=0x17010257, h=0x1b00016) returned 0x1b00016 [0169.084] SelectObject (hdc=0x17010257, h=0x1900010) returned 0x43100260 [0169.084] IntersectRect (in: lprcDst=0x4c1490, lprcSrc1=0x4c1490, lprcSrc2=0x2694a4 | out: lprcDst=0x4c1490) returned 1 [0169.084] IntersectRect (in: lprcDst=0x4c1490, lprcSrc1=0x4c1490, lprcSrc2=0x2694c4 | out: lprcDst=0x4c1490) returned 1 [0169.084] IntersectRect (in: lprcDst=0x268fc4, lprcSrc1=0x268fc4, lprcSrc2=0x268e78 | out: lprcDst=0x268fc4) returned 1 [0169.084] HeapFree (in: hHeap=0x470000, dwFlags=0x0, lpMem=0x0 | out: hHeap=0x470000) returned 1 [0169.084] IntersectRect (in: lprcDst=0x4c1490, lprcSrc1=0x4c1490, lprcSrc2=0x268fc4 | out: lprcDst=0x4c1490) returned 1 [0169.084] IntersectRect (in: lprcDst=0x268f28, lprcSrc1=0x268f28, lprcSrc2=0x4c14a0 | out: lprcDst=0x268f28) returned 1 [0169.084] IntersectRect (in: lprcDst=0x4c1490, lprcSrc1=0x4c1490, lprcSrc2=0x268edc | out: lprcDst=0x4c1490) returned 1 [0169.084] GetDeviceCaps (hdc=0x17010257, index=2) returned 1 [0169.084] SetBkMode (hdc=0x17010257, mode=1) returned 1 [0169.084] SetTextAlign (hdc=0x17010257, align=0x0) returned 0x0 [0169.084] LsSetDoc () returned 0x0 [0169.085] LsCreateLine () returned 0x0 [0169.085] HeapFree (in: hHeap=0x470000, dwFlags=0x0, lpMem=0x0 | out: hHeap=0x470000) returned 1 [0169.088] LsDisplayLine () returned 0x0 [0169.088] SelectObject (hdc=0x17010257, h=0x4c0a025b) returned 0x18a002e [0169.088] SetTextColor (hdc=0x17010257, color=0x2222222) returned 0x2222222 [0169.088] SetBkMode (hdc=0x17010257, mode=1) returned 1 [0169.088] GetTextAlign (hdc=0x17010257) returned 0x0 [0169.088] SetTextAlign (hdc=0x17010257, align=0x18) returned 0x0 [0169.088] _CIatan2 () returned 0x20 [0169.088] _CIatan2 () returned 0x20 [0169.088] ExtTextOutW (hdc=0x17010257, x=123, y=27, options=0x4, lprect=0x2680d0, lpString="ID-QE54S-FEQ6E-Q654F-654TY-3215G-TZ320-AQF44-GSRG7-HTS98 ive your private key and another decryption key with the special decryption", c=0x2, lpDx=0x268108) returned 1 [0169.088] SetTextAlign (hdc=0x17010257, align=0x0) returned 0x18 [0169.088] HeapFree (in: hHeap=0x470000, dwFlags=0x0, lpMem=0x0 | out: hHeap=0x470000) returned 1 [0169.088] SelectObject (hdc=0x17010257, h=0x4c0a025b) returned 0x4c0a025b [0169.088] SetTextColor (hdc=0x17010257, color=0x2222222) returned 0x2222222 [0169.088] SetBkMode (hdc=0x17010257, mode=1) returned 1 [0169.088] GetTextAlign (hdc=0x17010257) returned 0x0 [0169.088] SetTextAlign (hdc=0x17010257, align=0x18) returned 0x0 [0169.088] _CIatan2 () returned 0x20 [0169.088] _CIatan2 () returned 0x20 [0169.088] ExtTextOutW (hdc=0x17010257, x=141, y=27, options=0x4, lprect=0x2680d0, lpString="-QE54S-FEQ6E-Q654F-654TY-3215G-TZ320-AQF44-GSRG7-HTS98 ive your private key and another decryption key with the special decryption", c=0x1, lpDx=0x268108) returned 1 [0169.088] SetTextAlign (hdc=0x17010257, align=0x0) returned 0x18 [0169.088] HeapFree (in: hHeap=0x470000, dwFlags=0x0, lpMem=0x0 | out: hHeap=0x470000) returned 1 [0169.102] SelectObject (hdc=0x17010257, h=0x4c0a025b) returned 0x4c0a025b [0169.102] SetTextColor (hdc=0x17010257, color=0x2222222) returned 0x2222222 [0169.102] SetBkMode (hdc=0x17010257, mode=1) returned 1 [0169.102] GetTextAlign (hdc=0x17010257) returned 0x0 [0169.103] SetTextAlign (hdc=0x17010257, align=0x18) returned 0x0 [0169.103] _CIatan2 () returned 0x20 [0169.103] _CIatan2 () returned 0x20 [0169.103] ExtTextOutW (hdc=0x17010257, x=151, y=27, options=0x4, lprect=0x2680d0, lpString="QE54S-FEQ6E-Q654F-654TY-3215G-TZ320-AQF44-GSRG7-HTS98 ive your private key and another decryption key with the special decryption", c=0x5, lpDx=0x268108) returned 1 [0169.103] SetTextAlign (hdc=0x17010257, align=0x0) returned 0x18 [0169.103] HeapFree (in: hHeap=0x470000, dwFlags=0x0, lpMem=0x0 | out: hHeap=0x470000) returned 1 [0169.103] SelectObject (hdc=0x17010257, h=0x4c0a025b) returned 0x4c0a025b [0169.103] SetTextColor (hdc=0x17010257, color=0x2222222) returned 0x2222222 [0169.103] SetBkMode (hdc=0x17010257, mode=1) returned 1 [0169.103] GetTextAlign (hdc=0x17010257) returned 0x0 [0169.103] SetTextAlign (hdc=0x17010257, align=0x18) returned 0x0 [0169.103] _CIatan2 () returned 0x20 [0169.103] _CIatan2 () returned 0x20 [0169.103] ExtTextOutW (hdc=0x17010257, x=204, y=27, options=0x4, lprect=0x2680d0, lpString="-FEQ6E-Q654F-654TY-3215G-TZ320-AQF44-GSRG7-HTS98 ive your private key and another decryption key with the special decryption", c=0x1, lpDx=0x268108) returned 1 [0169.103] SetTextAlign (hdc=0x17010257, align=0x0) returned 0x18 [0169.103] HeapFree (in: hHeap=0x470000, dwFlags=0x0, lpMem=0x0 | out: hHeap=0x470000) returned 1 [0169.103] SelectObject (hdc=0x17010257, h=0x4c0a025b) returned 0x4c0a025b [0169.103] SetTextColor (hdc=0x17010257, color=0x2222222) returned 0x2222222 [0169.103] SetBkMode (hdc=0x17010257, mode=1) returned 1 [0169.103] GetTextAlign (hdc=0x17010257) returned 0x0 [0169.103] SetTextAlign (hdc=0x17010257, align=0x18) returned 0x0 [0169.103] _CIatan2 () returned 0x20 [0169.104] _CIatan2 () returned 0x20 [0169.104] ExtTextOutW (hdc=0x17010257, x=214, y=27, options=0x4, lprect=0x2680d0, lpString="FEQ6E-Q654F-654TY-3215G-TZ320-AQF44-GSRG7-HTS98 ive your private key and another decryption key with the special decryption", c=0x5, lpDx=0x268108) returned 1 [0169.104] SetTextAlign (hdc=0x17010257, align=0x0) returned 0x18 [0169.104] HeapFree (in: hHeap=0x470000, dwFlags=0x0, lpMem=0x0 | out: hHeap=0x470000) returned 1 [0169.104] SelectObject (hdc=0x17010257, h=0x4c0a025b) returned 0x4c0a025b [0169.104] SetTextColor (hdc=0x17010257, color=0x2222222) returned 0x2222222 [0169.104] SetBkMode (hdc=0x17010257, mode=1) returned 1 [0169.104] GetTextAlign (hdc=0x17010257) returned 0x0 [0169.104] SetTextAlign (hdc=0x17010257, align=0x18) returned 0x0 [0169.104] _CIatan2 () returned 0x20 [0169.104] _CIatan2 () returned 0x20 [0169.104] ExtTextOutW (hdc=0x17010257, x=265, y=27, options=0x4, lprect=0x2680d0, lpString="-Q654F-654TY-3215G-TZ320-AQF44-GSRG7-HTS98 ive your private key and another decryption key with the special decryption", c=0x1, lpDx=0x268108) returned 1 [0169.106] SetTextAlign (hdc=0x17010257, align=0x0) returned 0x18 [0169.106] HeapFree (in: hHeap=0x470000, dwFlags=0x0, lpMem=0x0 | out: hHeap=0x470000) returned 1 [0169.106] SelectObject (hdc=0x17010257, h=0x4c0a025b) returned 0x4c0a025b [0169.106] SetTextColor (hdc=0x17010257, color=0x2222222) returned 0x2222222 [0169.106] SetBkMode (hdc=0x17010257, mode=1) returned 1 [0169.106] GetTextAlign (hdc=0x17010257) returned 0x0 [0169.106] SetTextAlign (hdc=0x17010257, align=0x18) returned 0x0 [0169.106] _CIatan2 () returned 0x20 [0169.106] _CIatan2 () returned 0x20 [0169.106] ExtTextOutW (hdc=0x17010257, x=275, y=27, options=0x4, lprect=0x2680d0, lpString="Q654F-654TY-3215G-TZ320-AQF44-GSRG7-HTS98 ive your private key and another decryption key with the special decryption", c=0x5, lpDx=0x268108) returned 1 [0169.106] SetTextAlign (hdc=0x17010257, align=0x0) returned 0x18 [0169.106] HeapFree (in: hHeap=0x470000, dwFlags=0x0, lpMem=0x0 | out: hHeap=0x470000) returned 1 [0169.106] SelectObject (hdc=0x17010257, h=0x4c0a025b) returned 0x4c0a025b [0169.106] SetTextColor (hdc=0x17010257, color=0x2222222) returned 0x2222222 [0169.106] SetBkMode (hdc=0x17010257, mode=1) returned 1 [0169.107] GetTextAlign (hdc=0x17010257) returned 0x0 [0169.107] SetTextAlign (hdc=0x17010257, align=0x18) returned 0x0 [0169.107] _CIatan2 () returned 0x20 [0169.107] _CIatan2 () returned 0x20 [0169.107] ExtTextOutW (hdc=0x17010257, x=330, y=27, options=0x4, lprect=0x2680d0, lpString="-654TY-3215G-TZ320-AQF44-GSRG7-HTS98 ive your private key and another decryption key with the special decryption", c=0x1, lpDx=0x268108) returned 1 [0169.107] SetTextAlign (hdc=0x17010257, align=0x0) returned 0x18 [0169.107] HeapFree (in: hHeap=0x470000, dwFlags=0x0, lpMem=0x0 | out: hHeap=0x470000) returned 1 [0169.107] SelectObject (hdc=0x17010257, h=0x4c0a025b) returned 0x4c0a025b [0169.107] SetTextColor (hdc=0x17010257, color=0x2222222) returned 0x2222222 [0169.107] SetBkMode (hdc=0x17010257, mode=1) returned 1 [0169.107] GetTextAlign (hdc=0x17010257) returned 0x0 [0169.107] SetTextAlign (hdc=0x17010257, align=0x18) returned 0x0 [0169.107] _CIatan2 () returned 0x20 [0169.107] _CIatan2 () returned 0x20 [0169.107] ExtTextOutW (hdc=0x17010257, x=340, y=27, options=0x4, lprect=0x2680d0, lpString="654TY-3215G-TZ320-AQF44-GSRG7-HTS98 ive your private key and another decryption key with the special decryption", c=0x5, lpDx=0x268108) returned 1 [0169.107] SetTextAlign (hdc=0x17010257, align=0x0) returned 0x18 [0169.107] HeapFree (in: hHeap=0x470000, dwFlags=0x0, lpMem=0x0 | out: hHeap=0x470000) returned 1 [0169.107] SelectObject (hdc=0x17010257, h=0x4c0a025b) returned 0x4c0a025b [0169.107] SetTextColor (hdc=0x17010257, color=0x2222222) returned 0x2222222 [0169.107] SetBkMode (hdc=0x17010257, mode=1) returned 1 [0169.107] GetTextAlign (hdc=0x17010257) returned 0x0 [0169.107] SetTextAlign (hdc=0x17010257, align=0x18) returned 0x0 [0169.107] _CIatan2 () returned 0x20 [0169.107] _CIatan2 () returned 0x20 [0169.107] ExtTextOutW (hdc=0x17010257, x=395, y=27, options=0x4, lprect=0x2680d0, lpString="-3215G-TZ320-AQF44-GSRG7-HTS98 ive your private key and another decryption key with the special decryption", c=0x1, lpDx=0x268108) returned 1 [0169.107] SetTextAlign (hdc=0x17010257, align=0x0) returned 0x18 [0169.107] HeapFree (in: hHeap=0x470000, dwFlags=0x0, lpMem=0x0 | out: hHeap=0x470000) returned 1 [0169.107] SelectObject (hdc=0x17010257, h=0x4c0a025b) returned 0x4c0a025b [0169.107] SetTextColor (hdc=0x17010257, color=0x2222222) returned 0x2222222 [0169.108] SetBkMode (hdc=0x17010257, mode=1) returned 1 [0169.108] GetTextAlign (hdc=0x17010257) returned 0x0 [0169.108] SetTextAlign (hdc=0x17010257, align=0x18) returned 0x0 [0169.108] _CIatan2 () returned 0x20 [0169.108] _CIatan2 () returned 0x20 [0169.108] ExtTextOutW (hdc=0x17010257, x=405, y=27, options=0x4, lprect=0x2680d0, lpString="3215G-TZ320-AQF44-GSRG7-HTS98 ive your private key and another decryption key with the special decryption", c=0x5, lpDx=0x268108) returned 1 [0169.108] SetTextAlign (hdc=0x17010257, align=0x0) returned 0x18 [0169.108] HeapFree (in: hHeap=0x470000, dwFlags=0x0, lpMem=0x0 | out: hHeap=0x470000) returned 1 [0169.108] SelectObject (hdc=0x17010257, h=0x4c0a025b) returned 0x4c0a025b [0169.108] SetTextColor (hdc=0x17010257, color=0x2222222) returned 0x2222222 [0169.108] SetBkMode (hdc=0x17010257, mode=1) returned 1 [0169.108] GetTextAlign (hdc=0x17010257) returned 0x0 [0169.108] SetTextAlign (hdc=0x17010257, align=0x18) returned 0x0 [0169.108] _CIatan2 () returned 0x20 [0169.108] _CIatan2 () returned 0x20 [0169.108] ExtTextOutW (hdc=0x17010257, x=461, y=27, options=0x4, lprect=0x2680d0, lpString="-TZ320-AQF44-GSRG7-HTS98 ive your private key and another decryption key with the special decryption", c=0x1, lpDx=0x268108) returned 1 [0169.108] SetTextAlign (hdc=0x17010257, align=0x0) returned 0x18 [0169.108] HeapFree (in: hHeap=0x470000, dwFlags=0x0, lpMem=0x0 | out: hHeap=0x470000) returned 1 [0169.108] SelectObject (hdc=0x17010257, h=0x4c0a025b) returned 0x4c0a025b [0169.108] SetTextColor (hdc=0x17010257, color=0x2222222) returned 0x2222222 [0169.108] SetBkMode (hdc=0x17010257, mode=1) returned 1 [0169.108] GetTextAlign (hdc=0x17010257) returned 0x0 [0169.108] SetTextAlign (hdc=0x17010257, align=0x18) returned 0x0 [0169.108] _CIatan2 () returned 0x20 [0169.108] _CIatan2 () returned 0x20 [0169.108] ExtTextOutW (hdc=0x17010257, x=471, y=27, options=0x4, lprect=0x2680d0, lpString="TZ320-AQF44-GSRG7-HTS98 ive your private key and another decryption key with the special decryption", c=0x5, lpDx=0x268108) returned 1 [0169.108] SetTextAlign (hdc=0x17010257, align=0x0) returned 0x18 [0169.108] HeapFree (in: hHeap=0x470000, dwFlags=0x0, lpMem=0x0 | out: hHeap=0x470000) returned 1 [0169.109] SelectObject (hdc=0x17010257, h=0x4c0a025b) returned 0x4c0a025b [0169.109] SetTextColor (hdc=0x17010257, color=0x2222222) returned 0x2222222 [0169.109] SetBkMode (hdc=0x17010257, mode=1) returned 1 [0169.109] GetTextAlign (hdc=0x17010257) returned 0x0 [0169.109] SetTextAlign (hdc=0x17010257, align=0x18) returned 0x0 [0169.109] _CIatan2 () returned 0x20 [0169.109] _CIatan2 () returned 0x20 [0169.109] ExtTextOutW (hdc=0x17010257, x=525, y=27, options=0x4, lprect=0x2680d0, lpString="-AQF44-GSRG7-HTS98 ive your private key and another decryption key with the special decryption", c=0x1, lpDx=0x268108) returned 1 [0169.109] SetTextAlign (hdc=0x17010257, align=0x0) returned 0x18 [0169.109] HeapFree (in: hHeap=0x470000, dwFlags=0x0, lpMem=0x0 | out: hHeap=0x470000) returned 1 [0169.109] SelectObject (hdc=0x17010257, h=0x4c0a025b) returned 0x4c0a025b [0169.109] SetTextColor (hdc=0x17010257, color=0x2222222) returned 0x2222222 [0169.109] SetBkMode (hdc=0x17010257, mode=1) returned 1 [0169.109] GetTextAlign (hdc=0x17010257) returned 0x0 [0169.109] SetTextAlign (hdc=0x17010257, align=0x18) returned 0x0 [0169.109] _CIatan2 () returned 0x20 [0169.109] _CIatan2 () returned 0x20 [0169.109] ExtTextOutW (hdc=0x17010257, x=535, y=27, options=0x4, lprect=0x2680d0, lpString="AQF44-GSRG7-HTS98 ive your private key and another decryption key with the special decryption", c=0x5, lpDx=0x268108) returned 1 [0169.109] SetTextAlign (hdc=0x17010257, align=0x0) returned 0x18 [0169.109] HeapFree (in: hHeap=0x470000, dwFlags=0x0, lpMem=0x0 | out: hHeap=0x470000) returned 1 [0169.109] SelectObject (hdc=0x17010257, h=0x4c0a025b) returned 0x4c0a025b [0169.109] SetTextColor (hdc=0x17010257, color=0x2222222) returned 0x2222222 [0169.109] SetBkMode (hdc=0x17010257, mode=1) returned 1 [0169.109] GetTextAlign (hdc=0x17010257) returned 0x0 [0169.109] SetTextAlign (hdc=0x17010257, align=0x18) returned 0x0 [0169.109] _CIatan2 () returned 0x20 [0169.109] _CIatan2 () returned 0x20 [0169.109] ExtTextOutW (hdc=0x17010257, x=591, y=27, options=0x4, lprect=0x2680d0, lpString="-GSRG7-HTS98 ive your private key and another decryption key with the special decryption", c=0x1, lpDx=0x268108) returned 1 [0169.109] SetTextAlign (hdc=0x17010257, align=0x0) returned 0x18 [0169.109] HeapFree (in: hHeap=0x470000, dwFlags=0x0, lpMem=0x0 | out: hHeap=0x470000) returned 1 [0169.110] SelectObject (hdc=0x17010257, h=0x4c0a025b) returned 0x4c0a025b [0169.110] SetTextColor (hdc=0x17010257, color=0x2222222) returned 0x2222222 [0169.110] SetBkMode (hdc=0x17010257, mode=1) returned 1 [0169.110] GetTextAlign (hdc=0x17010257) returned 0x0 [0169.110] SetTextAlign (hdc=0x17010257, align=0x18) returned 0x0 [0169.110] _CIatan2 () returned 0x20 [0169.110] _CIatan2 () returned 0x20 [0169.110] ExtTextOutW (hdc=0x17010257, x=601, y=27, options=0x4, lprect=0x2680d0, lpString="GSRG7-HTS98 ive your private key and another decryption key with the special decryption", c=0x5, lpDx=0x268108) returned 1 [0169.110] SetTextAlign (hdc=0x17010257, align=0x0) returned 0x18 [0169.110] HeapFree (in: hHeap=0x470000, dwFlags=0x0, lpMem=0x0 | out: hHeap=0x470000) returned 1 [0169.110] SelectObject (hdc=0x17010257, h=0x4c0a025b) returned 0x4c0a025b [0169.110] SetTextColor (hdc=0x17010257, color=0x2222222) returned 0x2222222 [0169.110] SetBkMode (hdc=0x17010257, mode=1) returned 1 [0169.110] GetTextAlign (hdc=0x17010257) returned 0x0 [0169.110] SetTextAlign (hdc=0x17010257, align=0x18) returned 0x0 [0169.110] _CIatan2 () returned 0x20 [0169.110] _CIatan2 () returned 0x20 [0169.110] ExtTextOutW (hdc=0x17010257, x=656, y=27, options=0x4, lprect=0x2680d0, lpString="-HTS98 ive your private key and another decryption key with the special decryption", c=0x1, lpDx=0x268108) returned 1 [0169.110] SetTextAlign (hdc=0x17010257, align=0x0) returned 0x18 [0169.110] HeapFree (in: hHeap=0x470000, dwFlags=0x0, lpMem=0x0 | out: hHeap=0x470000) returned 1 [0169.110] SelectObject (hdc=0x17010257, h=0x4c0a025b) returned 0x4c0a025b [0169.110] SetTextColor (hdc=0x17010257, color=0x2222222) returned 0x2222222 [0169.110] SetBkMode (hdc=0x17010257, mode=1) returned 1 [0169.110] GetTextAlign (hdc=0x17010257) returned 0x0 [0169.110] SetTextAlign (hdc=0x17010257, align=0x18) returned 0x0 [0169.110] _CIatan2 () returned 0x20 [0169.110] _CIatan2 () returned 0x20 [0169.110] ExtTextOutW (hdc=0x17010257, x=666, y=27, options=0x4, lprect=0x2680d0, lpString="HTS98 ive your private key and another decryption key with the special decryption", c=0x5, lpDx=0x268108) returned 1 [0169.110] SetTextAlign (hdc=0x17010257, align=0x0) returned 0x18 [0169.110] HeapFree (in: hHeap=0x470000, dwFlags=0x0, lpMem=0x0 | out: hHeap=0x470000) returned 1 [0169.111] SelectObject (hdc=0x17010257, h=0x4c0a025b) returned 0x4c0a025b [0169.111] SetTextColor (hdc=0x17010257, color=0x2222222) returned 0x2222222 [0169.111] SetBkMode (hdc=0x17010257, mode=1) returned 1 [0169.111] GetTextAlign (hdc=0x17010257) returned 0x0 [0169.111] SetTextAlign (hdc=0x17010257, align=0x18) returned 0x0 [0169.111] _CIatan2 () returned 0x20 [0169.111] _CIatan2 () returned 0x20 [0169.111] ExtTextOutW (hdc=0x17010257, x=721, y=27, options=0x4, lprect=0x2680d0, lpString=" ", c=0x1, lpDx=0x268108) returned 1 [0169.111] SetTextAlign (hdc=0x17010257, align=0x0) returned 0x18 [0169.111] HeapFree (in: hHeap=0x470000, dwFlags=0x0, lpMem=0x0 | out: hHeap=0x470000) returned 1 [0169.111] LsDestroyLine () returned 0x0 [0169.111] HeapFree (in: hHeap=0x470000, dwFlags=0x0, lpMem=0x0 | out: hHeap=0x470000) returned 1 [0169.111] SelectObject (hdc=0x17010257, h=0x18a002e) returned 0x4c0a025b [0169.111] HeapFree (in: hHeap=0x470000, dwFlags=0x0, lpMem=0x0 | out: hHeap=0x470000) returned 1 [0169.111] BitBlt (hdc=0x50109f2, x=0, y=602, cx=1324, cy=150, hdcSrc=0x17010257, x1=0, y1=0, rop=0xcc0020) returned 1 [0169.111] HeapFree (in: hHeap=0x470000, dwFlags=0x0, lpMem=0x4c91a0 | out: hHeap=0x470000) returned 1 [0169.111] RtlAllocateHeap (HeapHandle=0x470000, Flags=0x0, Size=0x44) returned 0x4c91a0 [0169.111] IntersectRect (in: lprcDst=0x26a194, lprcSrc1=0x26a194, lprcSrc2=0x26a164 | out: lprcDst=0x26a194) returned 1 [0169.111] HeapFree (in: hHeap=0x470000, dwFlags=0x0, lpMem=0x0 | out: hHeap=0x470000) returned 1 [0169.111] IntersectRect (in: lprcDst=0x4c1490, lprcSrc1=0x4c1490, lprcSrc2=0x26a068 | out: lprcDst=0x4c1490) returned 1 [0169.111] IntersectRect (in: lprcDst=0x26a068, lprcSrc1=0x26a068, lprcSrc2=0x4c14a0 | out: lprcDst=0x26a068) returned 1 [0169.111] GetDeviceCaps (hdc=0x17010257, index=2) returned 1 [0169.111] RtlAllocateHeap (HeapHandle=0x470000, Flags=0x0, Size=0x30) returned 0x4c7708 [0169.111] ExtCreateRegion (lpx=0x0, nCount=0x30, lpData=0x4c7708) returned 0x3d0401b3 [0169.112] HeapFree (in: hHeap=0x470000, dwFlags=0x0, lpMem=0x4c7708 | out: hHeap=0x470000) returned 1 [0169.112] SelectClipRgn (hdc=0x17010257, hrgn=0x3d0401b3) returned 2 [0169.112] DeleteObject (ho=0x3d0401b3) returned 1 [0169.112] SelectObject (hdc=0x17010257, h=0x1d100258) returned 0x1900010 [0169.112] PatBlt (hdc=0x17010257, x=2, y=0, w=1303, h=8, rop=0xf00021) returned 1 [0169.112] SelectObject (hdc=0x17010257, h=0x1900010) returned 0x1d100258 [0169.112] IntersectRect (in: lprcDst=0x4c1490, lprcSrc1=0x4c1490, lprcSrc2=0x26a184 | out: lprcDst=0x4c1490) returned 1 [0169.112] IntersectRect (in: lprcDst=0x4c1490, lprcSrc1=0x4c1490, lprcSrc2=0x26a1a4 | out: lprcDst=0x4c1490) returned 1 [0169.112] IntersectRect (in: lprcDst=0x269d30, lprcSrc1=0x269d30, lprcSrc2=0x269d00 | out: lprcDst=0x269d30) returned 1 [0169.112] IntersectRect (in: lprcDst=0x4c1518, lprcSrc1=0x4c1518, lprcSrc2=0x269d20 | out: lprcDst=0x4c1518) returned 1 [0169.112] IntersectRect (in: lprcDst=0x269e5c, lprcSrc1=0x269e5c, lprcSrc2=0x269e2c | out: lprcDst=0x269e5c) returned 1 [0169.112] HeapFree (in: hHeap=0x470000, dwFlags=0x0, lpMem=0x0 | out: hHeap=0x470000) returned 1 [0169.112] IntersectRect (in: lprcDst=0x269d40, lprcSrc1=0x269d40, lprcSrc2=0x4c14a0 | out: lprcDst=0x269d40) returned 0 [0169.112] IntersectRect (in: lprcDst=0x4c1490, lprcSrc1=0x4c1490, lprcSrc2=0x269d30 | out: lprcDst=0x4c1490) returned 1 [0169.112] IntersectRect (in: lprcDst=0x269d30, lprcSrc1=0x269d30, lprcSrc2=0x4c14a0 | out: lprcDst=0x269d30) returned 1 [0169.112] GetDeviceCaps (hdc=0x17010257, index=2) returned 1 [0169.112] IntersectRect (in: lprcDst=0x269b2c, lprcSrc1=0x26f494, lprcSrc2=0x269b2c | out: lprcDst=0x269b2c) returned 1 [0169.112] SelectObject (hdc=0x17010257, h=0x80100a17) returned 0x1900010 [0169.112] GetStockObject (i=8) returned 0x1b00016 [0169.112] SelectObject (hdc=0x17010257, h=0x1b00016) returned 0x1b00016 [0169.112] GetROP2 (hdc=0x17010257) returned 13 [0169.112] SetBkMode (hdc=0x17010257, mode=2) returned 1 [0169.112] Rectangle (hdc=0x17010257, left=2, top=0, right=1306, bottom=9) returned 1 [0169.112] SetBkMode (hdc=0x17010257, mode=1) returned 2 [0169.112] SelectObject (hdc=0x17010257, h=0x1b00016) returned 0x1b00016 [0169.112] SelectObject (hdc=0x17010257, h=0x1900010) returned 0x80100a17 [0169.112] IntersectRect (in: lprcDst=0x4c1490, lprcSrc1=0x4c1490, lprcSrc2=0x269e4c | out: lprcDst=0x4c1490) returned 1 [0169.112] IntersectRect (in: lprcDst=0x4c1490, lprcSrc1=0x4c1490, lprcSrc2=0x269e6c | out: lprcDst=0x4c1490) returned 1 [0169.112] IntersectRect (in: lprcDst=0x2699c8, lprcSrc1=0x2699c8, lprcSrc2=0x269958 | out: lprcDst=0x2699c8) returned 1 [0169.112] IntersectRect (in: lprcDst=0x4c1518, lprcSrc1=0x4c1518, lprcSrc2=0x2699e8 | out: lprcDst=0x4c1518) returned 1 [0169.112] IntersectRect (in: lprcDst=0x269af4, lprcSrc1=0x269af4, lprcSrc2=0x269a04 | out: lprcDst=0x269af4) returned 1 [0169.112] HeapFree (in: hHeap=0x470000, dwFlags=0x0, lpMem=0x0 | out: hHeap=0x470000) returned 1 [0169.113] IntersectRect (in: lprcDst=0x4c1490, lprcSrc1=0x4c1490, lprcSrc2=0x269b14 | out: lprcDst=0x4c1490) returned 1 [0169.113] IntersectRect (in: lprcDst=0x269af4, lprcSrc1=0x269af4, lprcSrc2=0x269a04 | out: lprcDst=0x269af4) returned 1 [0169.113] HeapFree (in: hHeap=0x470000, dwFlags=0x0, lpMem=0x0 | out: hHeap=0x470000) returned 1 [0169.113] IntersectRect (in: lprcDst=0x4c1490, lprcSrc1=0x4c1490, lprcSrc2=0x269b14 | out: lprcDst=0x4c1490) returned 1 [0169.113] IntersectRect (in: lprcDst=0x4c1490, lprcSrc1=0x4c1490, lprcSrc2=0x269b34 | out: lprcDst=0x4c1490) returned 1 [0169.113] IntersectRect (in: lprcDst=0x269634, lprcSrc1=0x269634, lprcSrc2=0x2694e8 | out: lprcDst=0x269634) returned 1 [0169.113] HeapFree (in: hHeap=0x470000, dwFlags=0x0, lpMem=0x0 | out: hHeap=0x470000) returned 1 [0169.113] IntersectRect (in: lprcDst=0x4c1490, lprcSrc1=0x4c1490, lprcSrc2=0x269634 | out: lprcDst=0x4c1490) returned 1 [0169.113] IntersectRect (in: lprcDst=0x269598, lprcSrc1=0x269598, lprcSrc2=0x4c14a0 | out: lprcDst=0x269598) returned 1 [0169.113] IntersectRect (in: lprcDst=0x4c1490, lprcSrc1=0x4c1490, lprcSrc2=0x26954c | out: lprcDst=0x4c1490) returned 1 [0169.113] GetDeviceCaps (hdc=0x17010257, index=2) returned 1 [0169.113] SetBkMode (hdc=0x17010257, mode=1) returned 1 [0169.113] SetTextAlign (hdc=0x17010257, align=0x0) returned 0x0 [0169.113] LsSetDoc () returned 0x0 [0169.113] LsCreateLine () returned 0x0 [0169.113] HeapFree (in: hHeap=0x470000, dwFlags=0x0, lpMem=0x0 | out: hHeap=0x470000) returned 1 [0169.113] RtlAllocateHeap (HeapHandle=0x470000, Flags=0x0, Size=0x18) returned 0x4dcc40 [0169.113] RtlAllocateHeap (HeapHandle=0x470000, Flags=0x0, Size=0x10) returned 0x4ab950 [0169.114] HeapFree (in: hHeap=0x470000, dwFlags=0x0, lpMem=0x0 | out: hHeap=0x470000) returned 1 [0169.114] LsdnFinishRegular () returned 0x0 [0169.114] LsDisplayLine () returned 0x0 [0169.114] LsDestroyLine () returned 0x0 [0169.114] HeapFree (in: hHeap=0x470000, dwFlags=0x0, lpMem=0x4dcc40 | out: hHeap=0x470000) returned 1 [0169.114] HeapFree (in: hHeap=0x470000, dwFlags=0x0, lpMem=0x0 | out: hHeap=0x470000) returned 1 [0169.114] SelectObject (hdc=0x17010257, h=0x18a002e) returned 0x18a002e [0169.114] HeapFree (in: hHeap=0x470000, dwFlags=0x0, lpMem=0x0 | out: hHeap=0x470000) returned 1 [0169.114] HeapFree (in: hHeap=0x470000, dwFlags=0x0, lpMem=0x4ab950 | out: hHeap=0x470000) returned 1 [0169.114] HeapFree (in: hHeap=0x470000, dwFlags=0x0, lpMem=0x0 | out: hHeap=0x470000) returned 1 [0169.114] HeapFree (in: hHeap=0x470000, dwFlags=0x0, lpMem=0x0 | out: hHeap=0x470000) returned 1 [0169.114] HeapFree (in: hHeap=0x470000, dwFlags=0x0, lpMem=0x0 | out: hHeap=0x470000) returned 1 [0169.114] HeapFree (in: hHeap=0x470000, dwFlags=0x0, lpMem=0x0 | out: hHeap=0x470000) returned 1 [0169.114] HeapFree (in: hHeap=0x470000, dwFlags=0x0, lpMem=0x0 | out: hHeap=0x470000) returned 1 [0169.114] IntersectRect (in: lprcDst=0x2697bc, lprcSrc1=0x2697bc, lprcSrc2=0x2696cc | out: lprcDst=0x2697bc) returned 1 [0169.114] HeapFree (in: hHeap=0x470000, dwFlags=0x0, lpMem=0x0 | out: hHeap=0x470000) returned 1 [0169.114] IntersectRect (in: lprcDst=0x2696d0, lprcSrc1=0x2696d0, lprcSrc2=0x2696c0 | out: lprcDst=0x2696d0) returned 1 [0169.114] GetDeviceCaps (hdc=0x17010257, index=2) returned 1 [0169.114] RtlAllocateHeap (HeapHandle=0x470000, Flags=0x0, Size=0x30) returned 0x4c7708 [0169.114] ExtCreateRegion (lpx=0x0, nCount=0x30, lpData=0x4c7708) returned 0x3e0401b3 [0169.114] HeapFree (in: hHeap=0x470000, dwFlags=0x0, lpMem=0x4c7708 | out: hHeap=0x470000) returned 1 [0169.114] SelectClipRgn (hdc=0x17010257, hrgn=0x3e0401b3) returned 2 [0169.114] DeleteObject (ho=0x3e0401b3) returned 1 [0169.114] _CIsqrt () returned 0x3f1a027f [0169.115] _CIsqrt () returned 0x3f1a027f [0169.115] _CIatan2 () returned 0x20 [0169.115] _CIatan2 () returned 0x20 [0169.115] GetStockObject (i=8) returned 0x1b00016 [0169.115] SelectObject (hdc=0x17010257, h=0x1b00016) returned 0x1b00016 [0169.115] GetViewportOrgEx (in: hdc=0x17010257, lppoint=0x2694b4 | out: lppoint=0x2694b4) returned 1 [0169.115] SelectObject (hdc=0x17010257, h=0x1e10024f) returned 0x1900010 [0169.115] UnrealizeObject (h=0x1e10024f) returned 1 [0169.115] SetBrushOrgEx (in: hdc=0x17010257, x=67, y=-685, lppt=0x0 | out: lppt=0x0) returned 1 [0169.115] MulDiv (nNumber=3, nNumerator=3, nDenominator=3) returned 3 [0169.115] MulDiv (nNumber=3, nNumerator=0, nDenominator=3) returned 0 [0169.115] MulDiv (nNumber=3, nNumerator=0, nDenominator=3) returned 0 [0169.115] MulDiv (nNumber=3, nNumerator=0, nDenominator=3) returned 0 [0169.115] MulDiv (nNumber=3, nNumerator=3, nDenominator=3) returned 3 [0169.115] MulDiv (nNumber=3, nNumerator=3, nDenominator=3) returned 3 [0169.115] Polygon (hdc=0x17010257, apt=0x2693d8, cpt=6) returned 1 [0169.115] MulDiv (nNumber=3, nNumerator=3, nDenominator=3) returned 3 [0169.115] MulDiv (nNumber=3, nNumerator=0, nDenominator=3) returned 0 [0169.115] MulDiv (nNumber=3, nNumerator=0, nDenominator=3) returned 0 [0169.115] MulDiv (nNumber=3, nNumerator=0, nDenominator=3) returned 0 [0169.115] MulDiv (nNumber=3, nNumerator=3, nDenominator=3) returned 3 [0169.115] MulDiv (nNumber=3, nNumerator=3, nDenominator=3) returned 3 [0169.115] Polygon (hdc=0x17010257, apt=0x2693d8, cpt=6) returned 1 [0169.115] SelectObject (hdc=0x17010257, h=0x1900010) returned 0x1e10024f [0169.115] IntersectRect (in: lprcDst=0x4c1490, lprcSrc1=0x4c1490, lprcSrc2=0x2696c0 | out: lprcDst=0x4c1490) returned 1 [0169.115] IntersectRect (in: lprcDst=0x2696c0, lprcSrc1=0x2696c0, lprcSrc2=0x4c14a0 | out: lprcDst=0x2696c0) returned 1 [0169.115] GetDeviceCaps (hdc=0x17010257, index=2) returned 1 [0169.115] IntersectRect (in: lprcDst=0x2694bc, lprcSrc1=0x26f494, lprcSrc2=0x2694bc | out: lprcDst=0x2694bc) returned 1 [0169.115] SelectObject (hdc=0x17010257, h=0x10100276) returned 0x1900010 [0169.115] GetStockObject (i=8) returned 0x1b00016 [0169.115] SelectObject (hdc=0x17010257, h=0x1b00016) returned 0x1b00016 [0169.115] GetROP2 (hdc=0x17010257) returned 13 [0169.115] SetBkMode (hdc=0x17010257, mode=2) returned 1 [0169.115] Rectangle (hdc=0x17010257, left=70, top=0, right=1238, bottom=9) returned 1 [0169.115] SetBkMode (hdc=0x17010257, mode=1) returned 2 [0169.115] SelectObject (hdc=0x17010257, h=0x1b00016) returned 0x1b00016 [0169.116] SelectObject (hdc=0x17010257, h=0x1900010) returned 0x10100276 [0169.116] IntersectRect (in: lprcDst=0x4c1490, lprcSrc1=0x4c1490, lprcSrc2=0x2697dc | out: lprcDst=0x4c1490) returned 1 [0169.116] IntersectRect (in: lprcDst=0x4c1490, lprcSrc1=0x4c1490, lprcSrc2=0x2697fc | out: lprcDst=0x4c1490) returned 1 [0169.116] IntersectRect (in: lprcDst=0x2692fc, lprcSrc1=0x2692fc, lprcSrc2=0x2691b0 | out: lprcDst=0x2692fc) returned 1 [0169.116] HeapFree (in: hHeap=0x470000, dwFlags=0x0, lpMem=0x0 | out: hHeap=0x470000) returned 1 [0169.116] IntersectRect (in: lprcDst=0x4c1490, lprcSrc1=0x4c1490, lprcSrc2=0x2692fc | out: lprcDst=0x4c1490) returned 1 [0169.116] IntersectRect (in: lprcDst=0x269260, lprcSrc1=0x269260, lprcSrc2=0x4c14a0 | out: lprcDst=0x269260) returned 1 [0169.116] IntersectRect (in: lprcDst=0x4c1490, lprcSrc1=0x4c1490, lprcSrc2=0x269214 | out: lprcDst=0x4c1490) returned 1 [0169.116] GetDeviceCaps (hdc=0x17010257, index=2) returned 1 [0169.116] SetBkMode (hdc=0x17010257, mode=1) returned 1 [0169.116] SetTextAlign (hdc=0x17010257, align=0x0) returned 0x0 [0169.116] LsSetDoc () returned 0x0 [0169.116] LsCreateLine () returned 0x0 [0169.116] HeapFree (in: hHeap=0x470000, dwFlags=0x0, lpMem=0x0 | out: hHeap=0x470000) returned 1 [0169.117] LsDisplayLine () returned 0x0 [0169.117] SelectObject (hdc=0x17010257, h=0x4c0a025b) returned 0x18a002e [0169.117] SetTextColor (hdc=0x17010257, color=0x2222222) returned 0x2222222 [0169.117] SetBkMode (hdc=0x17010257, mode=1) returned 1 [0169.117] GetTextAlign (hdc=0x17010257) returned 0x0 [0169.117] SetTextAlign (hdc=0x17010257, align=0x18) returned 0x0 [0169.117] _CIatan2 () returned 0x20 [0169.117] _CIatan2 () returned 0x20 [0169.117] ExtTextOutW (hdc=0x17010257, x=103, y=10, options=0x4, lprect=0x268408, lpString="decryption software -654TY-3215G-TZ320-AQF44-GSRG7-HTS98 ive your private key and another decryption key with the special decryption", c=0x13, lpDx=0x268440) returned 1 [0169.117] SetTextAlign (hdc=0x17010257, align=0x0) returned 0x18 [0169.117] HeapFree (in: hHeap=0x470000, dwFlags=0x0, lpMem=0x0 | out: hHeap=0x470000) returned 1 [0169.117] SelectObject (hdc=0x17010257, h=0x4c0a025b) returned 0x4c0a025b [0169.117] SetTextColor (hdc=0x17010257, color=0x2222222) returned 0x2222222 [0169.117] SetBkMode (hdc=0x17010257, mode=1) returned 1 [0169.117] GetTextAlign (hdc=0x17010257) returned 0x0 [0169.117] SetTextAlign (hdc=0x17010257, align=0x18) returned 0x0 [0169.117] _CIatan2 () returned 0x20 [0169.117] _CIatan2 () returned 0x20 [0169.117] ExtTextOutW (hdc=0x17010257, x=268, y=10, options=0x4, lprect=0x268408, lpString=" ", c=0x1, lpDx=0x268440) returned 1 [0169.117] SetTextAlign (hdc=0x17010257, align=0x0) returned 0x18 [0169.117] HeapFree (in: hHeap=0x470000, dwFlags=0x0, lpMem=0x0 | out: hHeap=0x470000) returned 1 [0169.117] LsDestroyLine () returned 0x0 [0169.117] HeapFree (in: hHeap=0x470000, dwFlags=0x0, lpMem=0x0 | out: hHeap=0x470000) returned 1 [0169.117] SelectObject (hdc=0x17010257, h=0x18a002e) returned 0x4c0a025b [0169.117] HeapFree (in: hHeap=0x470000, dwFlags=0x0, lpMem=0x0 | out: hHeap=0x470000) returned 1 [0169.117] BitBlt (hdc=0x50109f2, x=0, y=752, cx=1324, cy=10, hdcSrc=0x17010257, x1=0, y1=0, rop=0xcc0020) returned 1 [0169.117] HeapFree (in: hHeap=0x470000, dwFlags=0x0, lpMem=0x4c91a0 | out: hHeap=0x470000) returned 1 [0169.118] GetStockObject (i=15) returned 0x188000b [0169.118] SelectPalette (hdc=0x50109f2, hPal=0x188000b, bForceBkgd=1) returned 0x188000b [0169.118] EndPaint (hWnd=0x5011e, lpPaint=0x26f828) returned 1 [0169.118] MapWindowPoints (in: hWndFrom=0x5011e, hWndTo=0x0, lpPoints=0x26f3e4, cPoints=0x1 | out: lpPoints=0x26f3e4) returned 5242938 [0169.118] DeleteObject (ho=0x220409d4) returned 1 [0169.118] GetCurrentThreadId () returned 0x220 [0169.118] GetCurrentThreadId () returned 0x220 [0169.118] GetMessageW (in: lpMsg=0x26fbd4, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x26fbd4) returned 1 [0169.118] TranslateMessage (lpMsg=0x26fbd4) returned 0 [0169.118] DispatchMessageW (lpMsg=0x26fbd4) returned 0x0 [0169.118] GetWindowLongW (hWnd=0x5011e, nIndex=-21) returned 4858488 [0169.118] KillTimer (hWnd=0x5011e, uIDEvent=0x1000) returned 1 [0169.118] GetCurrentThreadId () returned 0x220 [0169.118] GetMessageW (in: lpMsg=0x26fbd4, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x26fbd4) returned 1 [0169.118] TranslateMessage (lpMsg=0x26fbd4) returned 0 [0169.118] DispatchMessageW (lpMsg=0x26fbd4) returned 0x0 [0169.118] GetWindowLongW (hWnd=0x5011e, nIndex=-21) returned 4858488 [0169.118] SetTimer (hWnd=0x5011e, nIDEvent=0x1008, uElapse=0x64, lpTimerFunc=0x0) returned 0x1008 [0169.118] GetCurrentThreadId () returned 0x220 [0169.118] GetMessageW (in: lpMsg=0x26fbd4, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x26fbd4) returned 1 [0169.118] TranslateMessage (lpMsg=0x26fbd4) returned 0 [0169.118] DispatchMessageW (lpMsg=0x26fbd4) returned 0x0 [0169.118] GetMessageW (in: lpMsg=0x26fbd4, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x26fbd4) returned 1 [0169.213] TranslateMessage (lpMsg=0x26fbd4) returned 0 [0169.213] DispatchMessageW (lpMsg=0x26fbd4) returned 0x0 [0169.213] GetWindowLongW (hWnd=0x5011e, nIndex=-21) returned 4858488 [0169.213] KillTimer (hWnd=0x5011e, uIDEvent=0x1008) returned 1 [0169.213] GetCurrentThreadId () returned 0x220 [0169.213] GetMessageW (in: lpMsg=0x26fbd4, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x26fbd4) returned 1 [0169.245] TranslateMessage (lpMsg=0x26fbd4) returned 0 [0169.245] DispatchMessageW (lpMsg=0x26fbd4) returned 0x0 [0169.245] GetCapture () returned 0x0 [0169.245] WindowFromPoint (Point=0x2ce) returned 0x5011e [0169.245] GetWindowLongW (hWnd=0x5011e, nIndex=-21) returned 4858488 [0169.245] GetClientRect (in: hWnd=0x5011e, lpRect=0x26f698 | out: lpRect=0x26f698) returned 1 [0169.245] ScreenToClient (in: hWnd=0x5011e, lpPoint=0x26f6a8 | out: lpPoint=0x26f6a8) returned 1 [0169.245] PtInRect (lprc=0x26f698, pt=0x294) returned 1 [0169.245] GetCurrentThreadId () returned 0x220 [0169.245] GetMessageW (in: lpMsg=0x26fbd4, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x26fbd4) returned 1 [0169.557] TranslateMessage (lpMsg=0x26fbd4) returned 0 [0169.557] DispatchMessageW (lpMsg=0x26fbd4) returned 0x0 [0169.557] GetCapture () returned 0x0 [0169.557] WindowFromPoint (Point=0x2ce) returned 0x5011e [0169.557] GetWindowLongW (hWnd=0x5011e, nIndex=-21) returned 4858488 [0169.557] GetClientRect (in: hWnd=0x5011e, lpRect=0x26f698 | out: lpRect=0x26f698) returned 1 [0169.557] ScreenToClient (in: hWnd=0x5011e, lpPoint=0x26f6a8 | out: lpPoint=0x26f6a8) returned 1 [0169.557] PtInRect (lprc=0x26f698, pt=0x294) returned 1 [0169.557] GetCurrentThreadId () returned 0x220 [0169.557] GetMessageW (in: lpMsg=0x26fbd4, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x26fbd4) returned 1 [0169.868] TranslateMessage (lpMsg=0x26fbd4) returned 0 [0169.869] DispatchMessageW (lpMsg=0x26fbd4) returned 0x0 [0169.869] GetCapture () returned 0x0 [0169.869] WindowFromPoint (Point=0x2ce) returned 0x5011e [0169.869] GetWindowLongW (hWnd=0x5011e, nIndex=-21) returned 4858488 [0169.869] GetClientRect (in: hWnd=0x5011e, lpRect=0x26f698 | out: lpRect=0x26f698) returned 1 [0169.869] ScreenToClient (in: hWnd=0x5011e, lpPoint=0x26f6a8 | out: lpPoint=0x26f6a8) returned 1 [0169.869] PtInRect (lprc=0x26f698, pt=0x294) returned 1 [0169.869] GetCurrentThreadId () returned 0x220 [0169.869] GetMessageW (in: lpMsg=0x26fbd4, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x26fbd4) returned 1 [0170.180] TranslateMessage (lpMsg=0x26fbd4) returned 0 [0170.181] DispatchMessageW (lpMsg=0x26fbd4) returned 0x0 [0170.181] GetCapture () returned 0x0 [0170.181] WindowFromPoint (Point=0x2ce) returned 0x5011e [0170.181] GetWindowLongW (hWnd=0x5011e, nIndex=-21) returned 4858488 [0170.181] GetClientRect (in: hWnd=0x5011e, lpRect=0x26f698 | out: lpRect=0x26f698) returned 1 [0170.181] ScreenToClient (in: hWnd=0x5011e, lpPoint=0x26f6a8 | out: lpPoint=0x26f6a8) returned 1 [0170.181] PtInRect (lprc=0x26f698, pt=0x294) returned 1 [0170.181] GetCurrentThreadId () returned 0x220 [0170.181] GetMessageW (in: lpMsg=0x26fbd4, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x26fbd4) returned 1 [0170.493] TranslateMessage (lpMsg=0x26fbd4) returned 0 [0170.493] DispatchMessageW (lpMsg=0x26fbd4) returned 0x0 [0170.493] GetCapture () returned 0x0 [0170.493] WindowFromPoint (Point=0x2ce) returned 0x5011e [0170.493] GetWindowLongW (hWnd=0x5011e, nIndex=-21) returned 4858488 [0170.493] GetClientRect (in: hWnd=0x5011e, lpRect=0x26f698 | out: lpRect=0x26f698) returned 1 [0170.493] ScreenToClient (in: hWnd=0x5011e, lpPoint=0x26f6a8 | out: lpPoint=0x26f6a8) returned 1 [0170.493] PtInRect (lprc=0x26f698, pt=0x294) returned 1 [0170.493] GetCurrentThreadId () returned 0x220 [0170.493] GetMessageW (in: lpMsg=0x26fbd4, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x26fbd4) returned 1 [0170.805] TranslateMessage (lpMsg=0x26fbd4) returned 0 [0170.805] DispatchMessageW (lpMsg=0x26fbd4) returned 0x0 [0170.805] GetCapture () returned 0x0 [0170.805] WindowFromPoint (Point=0x2ce) returned 0x5011e [0170.805] GetWindowLongW (hWnd=0x5011e, nIndex=-21) returned 4858488 [0170.805] GetClientRect (in: hWnd=0x5011e, lpRect=0x26f698 | out: lpRect=0x26f698) returned 1 [0170.805] ScreenToClient (in: hWnd=0x5011e, lpPoint=0x26f6a8 | out: lpPoint=0x26f6a8) returned 1 [0170.805] PtInRect (lprc=0x26f698, pt=0x294) returned 1 [0170.805] GetCurrentThreadId () returned 0x220 [0170.805] GetMessageW (in: lpMsg=0x26fbd4, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x26fbd4) returned 1 [0171.117] TranslateMessage (lpMsg=0x26fbd4) returned 0 [0171.117] DispatchMessageW (lpMsg=0x26fbd4) returned 0x0 [0171.117] GetCapture () returned 0x0 [0171.117] WindowFromPoint (Point=0x2ce) returned 0x5011e [0171.117] GetWindowLongW (hWnd=0x5011e, nIndex=-21) returned 4858488 [0171.117] GetClientRect (in: hWnd=0x5011e, lpRect=0x26f698 | out: lpRect=0x26f698) returned 1 [0171.117] ScreenToClient (in: hWnd=0x5011e, lpPoint=0x26f6a8 | out: lpPoint=0x26f6a8) returned 1 [0171.117] PtInRect (lprc=0x26f698, pt=0x294) returned 1 [0171.117] GetCurrentThreadId () returned 0x220 [0171.117] GetMessageW (in: lpMsg=0x26fbd4, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x26fbd4) returned 1 [0171.429] TranslateMessage (lpMsg=0x26fbd4) returned 0 [0171.429] DispatchMessageW (lpMsg=0x26fbd4) returned 0x0 [0171.429] GetCapture () returned 0x0 [0171.429] WindowFromPoint (Point=0x2ce) returned 0x5011e [0171.429] GetWindowLongW (hWnd=0x5011e, nIndex=-21) returned 4858488 [0171.429] GetClientRect (in: hWnd=0x5011e, lpRect=0x26f698 | out: lpRect=0x26f698) returned 1 [0171.429] ScreenToClient (in: hWnd=0x5011e, lpPoint=0x26f6a8 | out: lpPoint=0x26f6a8) returned 1 [0171.429] PtInRect (lprc=0x26f698, pt=0x294) returned 1 [0171.429] GetCurrentThreadId () returned 0x220 [0171.429] GetMessageW (in: lpMsg=0x26fbd4, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x26fbd4) returned 1 [0171.740] TranslateMessage (lpMsg=0x26fbd4) returned 0 [0171.740] DispatchMessageW (lpMsg=0x26fbd4) returned 0x0 [0171.741] GetCapture () returned 0x0 [0171.741] WindowFromPoint (Point=0x2ce) returned 0x5011e [0171.741] GetWindowLongW (hWnd=0x5011e, nIndex=-21) returned 4858488 [0171.741] GetClientRect (in: hWnd=0x5011e, lpRect=0x26f698 | out: lpRect=0x26f698) returned 1 [0171.741] ScreenToClient (in: hWnd=0x5011e, lpPoint=0x26f6a8 | out: lpPoint=0x26f6a8) returned 1 [0171.741] PtInRect (lprc=0x26f698, pt=0x294) returned 1 [0171.741] GetCurrentThreadId () returned 0x220 [0171.741] GetMessageW (in: lpMsg=0x26fbd4, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x26fbd4) returned 1 [0172.053] TranslateMessage (lpMsg=0x26fbd4) returned 0 [0172.053] DispatchMessageW (lpMsg=0x26fbd4) returned 0x0 [0172.053] GetCapture () returned 0x0 [0172.053] WindowFromPoint (Point=0x2ce) returned 0x5011e [0172.053] GetWindowLongW (hWnd=0x5011e, nIndex=-21) returned 4858488 [0172.053] GetClientRect (in: hWnd=0x5011e, lpRect=0x26f698 | out: lpRect=0x26f698) returned 1 [0172.053] ScreenToClient (in: hWnd=0x5011e, lpPoint=0x26f6a8 | out: lpPoint=0x26f6a8) returned 1 [0172.053] PtInRect (lprc=0x26f698, pt=0x294) returned 1 [0172.053] GetCurrentThreadId () returned 0x220 [0172.053] GetMessageW (in: lpMsg=0x26fbd4, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x26fbd4) returned 1 [0172.413] TranslateMessage (lpMsg=0x26fbd4) returned 0 [0172.413] DispatchMessageW (lpMsg=0x26fbd4) returned 0x0 [0172.414] GetCapture () returned 0x0 [0172.415] WindowFromPoint (Point=0x2ce) returned 0x5011e [0172.415] GetWindowLongW (hWnd=0x5011e, nIndex=-21) returned 4858488 [0172.415] GetClientRect (in: hWnd=0x5011e, lpRect=0x26f698 | out: lpRect=0x26f698) returned 1 [0172.416] ScreenToClient (in: hWnd=0x5011e, lpPoint=0x26f6a8 | out: lpPoint=0x26f6a8) returned 1 [0172.417] PtInRect (lprc=0x26f698, pt=0x294) returned 1 [0172.417] GetCurrentThreadId () returned 0x220 [0172.418] GetMessageW (in: lpMsg=0x26fbd4, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x26fbd4) returned 1 [0172.701] TranslateMessage (lpMsg=0x26fbd4) returned 0 [0172.701] DispatchMessageW (lpMsg=0x26fbd4) returned 0x0 [0172.701] GetCapture () returned 0x0 [0172.701] WindowFromPoint (Point=0x2ce) returned 0x5011e [0172.701] GetWindowLongW (hWnd=0x5011e, nIndex=-21) returned 4858488 [0172.701] GetClientRect (in: hWnd=0x5011e, lpRect=0x26f698 | out: lpRect=0x26f698) returned 1 [0172.701] ScreenToClient (in: hWnd=0x5011e, lpPoint=0x26f6a8 | out: lpPoint=0x26f6a8) returned 1 [0172.701] PtInRect (lprc=0x26f698, pt=0x294) returned 1 [0172.701] GetCurrentThreadId () returned 0x220 [0172.702] GetMessageW (in: lpMsg=0x26fbd4, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x26fbd4) returned 1 [0173.004] TranslateMessage (lpMsg=0x26fbd4) returned 0 [0173.004] DispatchMessageW (lpMsg=0x26fbd4) returned 0x0 [0173.005] GetCapture () returned 0x0 [0173.005] WindowFromPoint (Point=0x2ce) returned 0x5011e [0173.005] GetWindowLongW (hWnd=0x5011e, nIndex=-21) returned 4858488 [0173.005] GetClientRect (in: hWnd=0x5011e, lpRect=0x26f698 | out: lpRect=0x26f698) returned 1 [0173.005] ScreenToClient (in: hWnd=0x5011e, lpPoint=0x26f6a8 | out: lpPoint=0x26f6a8) returned 1 [0173.005] PtInRect (lprc=0x26f698, pt=0x294) returned 1 [0173.005] GetCurrentThreadId () returned 0x220 [0173.005] GetMessageW (in: lpMsg=0x26fbd4, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x26fbd4) returned 1 [0173.316] TranslateMessage (lpMsg=0x26fbd4) returned 0 [0173.316] DispatchMessageW (lpMsg=0x26fbd4) returned 0x0 [0173.317] GetCapture () returned 0x0 [0173.317] WindowFromPoint (Point=0x2ce) returned 0x5011e [0173.317] GetWindowLongW (hWnd=0x5011e, nIndex=-21) returned 4858488 [0173.317] GetClientRect (in: hWnd=0x5011e, lpRect=0x26f698 | out: lpRect=0x26f698) returned 1 [0173.317] ScreenToClient (in: hWnd=0x5011e, lpPoint=0x26f6a8 | out: lpPoint=0x26f6a8) returned 1 [0173.317] PtInRect (lprc=0x26f698, pt=0x294) returned 1 [0173.317] GetCurrentThreadId () returned 0x220 [0173.317] GetMessageW (in: lpMsg=0x26fbd4, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x26fbd4) returned 1 [0173.628] TranslateMessage (lpMsg=0x26fbd4) returned 0 [0173.628] DispatchMessageW (lpMsg=0x26fbd4) returned 0x0 [0173.628] GetCapture () returned 0x0 [0173.628] WindowFromPoint (Point=0x2ce) returned 0x5011e [0173.628] GetWindowLongW (hWnd=0x5011e, nIndex=-21) returned 4858488 [0173.628] GetClientRect (in: hWnd=0x5011e, lpRect=0x26f698 | out: lpRect=0x26f698) returned 1 [0173.628] ScreenToClient (in: hWnd=0x5011e, lpPoint=0x26f6a8 | out: lpPoint=0x26f6a8) returned 1 [0173.629] PtInRect (lprc=0x26f698, pt=0x294) returned 1 [0173.629] GetCurrentThreadId () returned 0x220 [0173.629] GetMessageW (in: lpMsg=0x26fbd4, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x26fbd4) returned 1 [0173.726] GetWindowLongW (hWnd=0x5011e, nIndex=-21) returned 4858488 [0173.726] GetClientRect (in: hWnd=0x5011e, lpRect=0x26f878 | out: lpRect=0x26f878) returned 1 [0173.726] ScreenToClient (in: hWnd=0x5011e, lpPoint=0x26f888 | out: lpPoint=0x26f888) returned 1 [0173.726] PtInRect (lprc=0x26f878, pt=0x10f) returned 1 [0173.726] GetCurrentThreadId () returned 0x220 [0173.726] GetWindowLongW (hWnd=0x5011e, nIndex=-21) returned 4858488 [0173.726] ScreenToClient (in: hWnd=0x5011e, lpPoint=0x26f8f8 | out: lpPoint=0x26f8f8) returned 1 [0173.726] GetMessageTime () returned 235327 [0173.726] GetMessagePos () returned 0x15802ce [0173.726] GetCapture () returned 0x0 [0173.726] IntersectRect (in: lprcDst=0x26f2e8, lprcSrc1=0x26f2e8, lprcSrc2=0x26f378 | out: lprcDst=0x26f2e8) returned 1 [0173.726] IntersectRect (in: lprcDst=0x26f0a4, lprcSrc1=0x26f0a4, lprcSrc2=0x26f074 | out: lprcDst=0x26f0a4) returned 1 [0173.726] IntersectRect (in: lprcDst=0x26f388, lprcSrc1=0x26f388, lprcSrc2=0x26f094 | out: lprcDst=0x26f388) returned 1 [0173.726] HeapFree (in: hHeap=0x470000, dwFlags=0x0, lpMem=0x0 | out: hHeap=0x470000) returned 1 [0173.727] RtlAllocateHeap (HeapHandle=0x470000, Flags=0x0, Size=0x24) returned 0x4e77b8 [0173.727] IntersectRect (in: lprcDst=0x26f388, lprcSrc1=0x26f388, lprcSrc2=0x26f0b4 | out: lprcDst=0x26f388) returned 1 [0173.727] IntersectRect (in: lprcDst=0x26ee78, lprcSrc1=0x26ee78, lprcSrc2=0x26f378 | out: lprcDst=0x26ee78) returned 1 [0173.727] IntersectRect (in: lprcDst=0x26ee78, lprcSrc1=0x26ee78, lprcSrc2=0x26f378 | out: lprcDst=0x26ee78) returned 1 [0173.727] IntersectRect (in: lprcDst=0x26eab0, lprcSrc1=0x26eab0, lprcSrc2=0x26ea80 | out: lprcDst=0x26eab0) returned 1 [0173.727] IntersectRect (in: lprcDst=0x26f410, lprcSrc1=0x26f410, lprcSrc2=0x26eaa0 | out: lprcDst=0x26f410) returned 1 [0173.727] IntersectRect (in: lprcDst=0x26ec34, lprcSrc1=0x26ec34, lprcSrc2=0x26ec04 | out: lprcDst=0x26ec34) returned 1 [0173.727] IntersectRect (in: lprcDst=0x26f388, lprcSrc1=0x26f388, lprcSrc2=0x26ec24 | out: lprcDst=0x26f388) returned 1 [0173.727] HeapFree (in: hHeap=0x470000, dwFlags=0x0, lpMem=0x0 | out: hHeap=0x470000) returned 1 [0173.727] RtlAllocateHeap (HeapHandle=0x470000, Flags=0x0, Size=0x24) returned 0x4e7788 [0173.727] IntersectRect (in: lprcDst=0x26ea70, lprcSrc1=0x26ea70, lprcSrc2=0x26f378 | out: lprcDst=0x26ea70) returned 1 [0173.727] IntersectRect (in: lprcDst=0x26f388, lprcSrc1=0x26f388, lprcSrc2=0x26ec44 | out: lprcDst=0x26f388) returned 1 [0173.727] IntersectRect (in: lprcDst=0x26ea08, lprcSrc1=0x26ea08, lprcSrc2=0x26f378 | out: lprcDst=0x26ea08) returned 1 [0173.727] IntersectRect (in: lprcDst=0x26ea08, lprcSrc1=0x26ea08, lprcSrc2=0x26f378 | out: lprcDst=0x26ea08) returned 1 [0173.727] IntersectRect (in: lprcDst=0x26e794, lprcSrc1=0x26e794, lprcSrc2=0x26e64c | out: lprcDst=0x26e794) returned 1 [0173.727] IntersectRect (in: lprcDst=0x26f388, lprcSrc1=0x26f388, lprcSrc2=0x26e7b4 | out: lprcDst=0x26f388) returned 1 [0173.727] HeapFree (in: hHeap=0x470000, dwFlags=0x0, lpMem=0x0 | out: hHeap=0x470000) returned 1 [0173.727] RtlAllocateHeap (HeapHandle=0x470000, Flags=0x0, Size=0x24) returned 0x4e7848 [0173.727] IntersectRect (in: lprcDst=0x26f388, lprcSrc1=0x26f388, lprcSrc2=0x26e7d4 | out: lprcDst=0x26f388) returned 1 [0173.727] IntersectRect (in: lprcDst=0x26e598, lprcSrc1=0x26e598, lprcSrc2=0x26f378 | out: lprcDst=0x26e598) returned 1 [0173.727] IntersectRect (in: lprcDst=0x26e598, lprcSrc1=0x26e598, lprcSrc2=0x26f378 | out: lprcDst=0x26e598) returned 1 [0173.727] IntersectRect (in: lprcDst=0x26e324, lprcSrc1=0x26e324, lprcSrc2=0x26e1dc | out: lprcDst=0x26e324) returned 1 [0173.727] IntersectRect (in: lprcDst=0x26f388, lprcSrc1=0x26f388, lprcSrc2=0x26e344 | out: lprcDst=0x26f388) returned 1 [0173.727] HeapFree (in: hHeap=0x470000, dwFlags=0x0, lpMem=0x0 | out: hHeap=0x470000) returned 1 [0173.727] RtlAllocateHeap (HeapHandle=0x470000, Flags=0x0, Size=0x24) returned 0x4e7878 [0173.727] IntersectRect (in: lprcDst=0x26f388, lprcSrc1=0x26f388, lprcSrc2=0x26e364 | out: lprcDst=0x26f388) returned 1 [0173.727] IntersectRect (in: lprcDst=0x26e128, lprcSrc1=0x26e128, lprcSrc2=0x26f378 | out: lprcDst=0x26e128) returned 1 [0173.727] IntersectRect (in: lprcDst=0x26e128, lprcSrc1=0x26e128, lprcSrc2=0x26f378 | out: lprcDst=0x26e128) returned 0 [0173.727] IntersectRect (in: lprcDst=0x26e128, lprcSrc1=0x26e128, lprcSrc2=0x26f378 | out: lprcDst=0x26e128) returned 1 [0173.727] IntersectRect (in: lprcDst=0x26deb4, lprcSrc1=0x26deb4, lprcSrc2=0x26dd6c | out: lprcDst=0x26deb4) returned 1 [0173.727] IntersectRect (in: lprcDst=0x26f388, lprcSrc1=0x26f388, lprcSrc2=0x26ded4 | out: lprcDst=0x26f388) returned 1 [0173.727] HeapFree (in: hHeap=0x470000, dwFlags=0x0, lpMem=0x0 | out: hHeap=0x470000) returned 1 [0173.727] RtlAllocateHeap (HeapHandle=0x470000, Flags=0x0, Size=0x24) returned 0x4e78a8 [0173.727] IntersectRect (in: lprcDst=0x26f388, lprcSrc1=0x26f388, lprcSrc2=0x26def4 | out: lprcDst=0x26f388) returned 1 [0173.727] IntersectRect (in: lprcDst=0x26dcb8, lprcSrc1=0x26dcb8, lprcSrc2=0x26f378 | out: lprcDst=0x26dcb8) returned 1 [0173.728] IntersectRect (in: lprcDst=0x26dcb8, lprcSrc1=0x26dcb8, lprcSrc2=0x26f378 | out: lprcDst=0x26dcb8) returned 1 [0173.728] IntersectRect (in: lprcDst=0x26dafc, lprcSrc1=0x26dafc, lprcSrc2=0x26d998 | out: lprcDst=0x26dafc) returned 1 [0173.728] HeapFree (in: hHeap=0x470000, dwFlags=0x0, lpMem=0x0 | out: hHeap=0x470000) returned 1 [0173.728] RtlAllocateHeap (HeapHandle=0x470000, Flags=0x0, Size=0x24) returned 0x4e78d8 [0173.728] IntersectRect (in: lprcDst=0x26f388, lprcSrc1=0x26f388, lprcSrc2=0x26daec | out: lprcDst=0x26f388) returned 1 [0173.728] IntersectRect (in: lprcDst=0x26d9a8, lprcSrc1=0x26d9a8, lprcSrc2=0x26f378 | out: lprcDst=0x26d9a8) returned 1 [0173.728] IntersectRect (in: lprcDst=0x26f388, lprcSrc1=0x26f388, lprcSrc2=0x26db0c | out: lprcDst=0x26f388) returned 1 [0173.728] PostMessageW (hWnd=0x7011a, Msg=0x8002, wParam=0x0, lParam=0x0) returned 1 [0173.728] LsSetDoc () returned 0x0 [0173.728] LsCreateLine () returned 0x0 [0173.728] HeapFree (in: hHeap=0x470000, dwFlags=0x0, lpMem=0x0 | out: hHeap=0x470000) returned 1 [0173.735] LsQueryLinePointPcp () returned 0x0 [0173.735] LsDestroyLine () returned 0x0 [0173.735] HeapFree (in: hHeap=0x470000, dwFlags=0x0, lpMem=0x0 | out: hHeap=0x470000) returned 1 [0173.737] PtInRect (lprc=0x26f524, pt=0x40a6) returned 1 [0173.738] LoadCursorA (hInstance=0x0, lpCursorName=0x7f01) returned 0x10005 [0173.738] GetCursor () returned 0x10003 [0173.738] ShowCursor (bShow=0) returned -1 [0173.738] SetCursor (hCursor=0x10005) returned 0x10003 [0173.738] ShowCursor (bShow=1) returned 0 [0173.739] GetCurrentThreadId () returned 0x220 [0173.739] TranslateMessage (lpMsg=0x26fbd4) returned 0 [0173.739] DispatchMessageW (lpMsg=0x26fbd4) returned 0x0 [0173.739] GetWindowLongW (hWnd=0x5011e, nIndex=-21) returned 4858488 [0173.739] GetMessageTime () returned 235421 [0173.739] GetMessagePos () returned 0x2c00149 [0173.739] GetCapture () returned 0x0 [0173.739] GetCurrentThreadId () returned 0x220 [0173.739] GetCurrentThreadId () returned 0x220 [0173.739] GetCurrentThreadId () returned 0x220 [0173.739] IntersectRect (in: lprcDst=0x26f370, lprcSrc1=0x26f370, lprcSrc2=0x26f400 | out: lprcDst=0x26f370) returned 1 [0173.739] IntersectRect (in: lprcDst=0x26f12c, lprcSrc1=0x26f12c, lprcSrc2=0x26f0fc | out: lprcDst=0x26f12c) returned 1 [0173.739] IntersectRect (in: lprcDst=0x26f410, lprcSrc1=0x26f410, lprcSrc2=0x26f11c | out: lprcDst=0x26f410) returned 1 [0173.739] HeapFree (in: hHeap=0x470000, dwFlags=0x0, lpMem=0x0 | out: hHeap=0x470000) returned 1 [0173.739] RtlAllocateHeap (HeapHandle=0x470000, Flags=0x0, Size=0x24) returned 0x4e77b8 [0173.739] IntersectRect (in: lprcDst=0x26f410, lprcSrc1=0x26f410, lprcSrc2=0x26f13c | out: lprcDst=0x26f410) returned 1 [0173.739] IntersectRect (in: lprcDst=0x26ef00, lprcSrc1=0x26ef00, lprcSrc2=0x26f400 | out: lprcDst=0x26ef00) returned 1 [0173.739] IntersectRect (in: lprcDst=0x26ef00, lprcSrc1=0x26ef00, lprcSrc2=0x26f400 | out: lprcDst=0x26ef00) returned 1 [0173.739] IntersectRect (in: lprcDst=0x26eb38, lprcSrc1=0x26eb38, lprcSrc2=0x26eb08 | out: lprcDst=0x26eb38) returned 1 [0173.739] IntersectRect (in: lprcDst=0x26f498, lprcSrc1=0x26f498, lprcSrc2=0x26eb28 | out: lprcDst=0x26f498) returned 1 [0173.739] IntersectRect (in: lprcDst=0x26ecbc, lprcSrc1=0x26ecbc, lprcSrc2=0x26ec8c | out: lprcDst=0x26ecbc) returned 1 [0173.739] IntersectRect (in: lprcDst=0x26f410, lprcSrc1=0x26f410, lprcSrc2=0x26ecac | out: lprcDst=0x26f410) returned 1 [0173.739] HeapFree (in: hHeap=0x470000, dwFlags=0x0, lpMem=0x0 | out: hHeap=0x470000) returned 1 [0173.739] RtlAllocateHeap (HeapHandle=0x470000, Flags=0x0, Size=0x24) returned 0x4e7788 [0173.740] IntersectRect (in: lprcDst=0x26eaf8, lprcSrc1=0x26eaf8, lprcSrc2=0x26f400 | out: lprcDst=0x26eaf8) returned 1 [0173.740] IntersectRect (in: lprcDst=0x26f410, lprcSrc1=0x26f410, lprcSrc2=0x26eccc | out: lprcDst=0x26f410) returned 1 [0173.740] IntersectRect (in: lprcDst=0x26ea90, lprcSrc1=0x26ea90, lprcSrc2=0x26f400 | out: lprcDst=0x26ea90) returned 1 [0173.740] IntersectRect (in: lprcDst=0x26ea90, lprcSrc1=0x26ea90, lprcSrc2=0x26f400 | out: lprcDst=0x26ea90) returned 1 [0173.740] IntersectRect (in: lprcDst=0x26e81c, lprcSrc1=0x26e81c, lprcSrc2=0x26e6d4 | out: lprcDst=0x26e81c) returned 1 [0173.740] IntersectRect (in: lprcDst=0x26f410, lprcSrc1=0x26f410, lprcSrc2=0x26e83c | out: lprcDst=0x26f410) returned 1 [0173.740] HeapFree (in: hHeap=0x470000, dwFlags=0x0, lpMem=0x0 | out: hHeap=0x470000) returned 1 [0173.740] RtlAllocateHeap (HeapHandle=0x470000, Flags=0x0, Size=0x24) returned 0x4e7848 [0173.740] IntersectRect (in: lprcDst=0x26f410, lprcSrc1=0x26f410, lprcSrc2=0x26e85c | out: lprcDst=0x26f410) returned 1 [0173.740] IntersectRect (in: lprcDst=0x26e620, lprcSrc1=0x26e620, lprcSrc2=0x26f400 | out: lprcDst=0x26e620) returned 1 [0173.740] IntersectRect (in: lprcDst=0x26e620, lprcSrc1=0x26e620, lprcSrc2=0x26f400 | out: lprcDst=0x26e620) returned 1 [0173.740] IntersectRect (in: lprcDst=0x26e3ac, lprcSrc1=0x26e3ac, lprcSrc2=0x26e264 | out: lprcDst=0x26e3ac) returned 1 [0173.740] IntersectRect (in: lprcDst=0x26f410, lprcSrc1=0x26f410, lprcSrc2=0x26e3cc | out: lprcDst=0x26f410) returned 1 [0173.740] HeapFree (in: hHeap=0x470000, dwFlags=0x0, lpMem=0x0 | out: hHeap=0x470000) returned 1 [0173.740] RtlAllocateHeap (HeapHandle=0x470000, Flags=0x0, Size=0x24) returned 0x4e7878 [0173.740] IntersectRect (in: lprcDst=0x26f410, lprcSrc1=0x26f410, lprcSrc2=0x26e3ec | out: lprcDst=0x26f410) returned 1 [0173.740] IntersectRect (in: lprcDst=0x26e1b0, lprcSrc1=0x26e1b0, lprcSrc2=0x26f400 | out: lprcDst=0x26e1b0) returned 1 [0173.740] IntersectRect (in: lprcDst=0x26e1b0, lprcSrc1=0x26e1b0, lprcSrc2=0x26f400 | out: lprcDst=0x26e1b0) returned 0 [0173.740] IntersectRect (in: lprcDst=0x26e1b0, lprcSrc1=0x26e1b0, lprcSrc2=0x26f400 | out: lprcDst=0x26e1b0) returned 1 [0173.740] IntersectRect (in: lprcDst=0x26df3c, lprcSrc1=0x26df3c, lprcSrc2=0x26ddf4 | out: lprcDst=0x26df3c) returned 1 [0173.740] IntersectRect (in: lprcDst=0x26f410, lprcSrc1=0x26f410, lprcSrc2=0x26df5c | out: lprcDst=0x26f410) returned 1 [0173.740] HeapFree (in: hHeap=0x470000, dwFlags=0x0, lpMem=0x0 | out: hHeap=0x470000) returned 1 [0173.740] RtlAllocateHeap (HeapHandle=0x470000, Flags=0x0, Size=0x24) returned 0x4e78a8 [0173.740] IntersectRect (in: lprcDst=0x26f410, lprcSrc1=0x26f410, lprcSrc2=0x26df7c | out: lprcDst=0x26f410) returned 1 [0173.740] IntersectRect (in: lprcDst=0x26dd40, lprcSrc1=0x26dd40, lprcSrc2=0x26f400 | out: lprcDst=0x26dd40) returned 1 [0173.740] IntersectRect (in: lprcDst=0x26dd40, lprcSrc1=0x26dd40, lprcSrc2=0x26f400 | out: lprcDst=0x26dd40) returned 1 [0173.740] IntersectRect (in: lprcDst=0x26db84, lprcSrc1=0x26db84, lprcSrc2=0x26da20 | out: lprcDst=0x26db84) returned 1 [0173.740] HeapFree (in: hHeap=0x470000, dwFlags=0x0, lpMem=0x0 | out: hHeap=0x470000) returned 1 [0173.740] RtlAllocateHeap (HeapHandle=0x470000, Flags=0x0, Size=0x24) returned 0x4e78d8 [0173.740] IntersectRect (in: lprcDst=0x26f410, lprcSrc1=0x26f410, lprcSrc2=0x26db74 | out: lprcDst=0x26f410) returned 1 [0173.740] IntersectRect (in: lprcDst=0x26da30, lprcSrc1=0x26da30, lprcSrc2=0x26f400 | out: lprcDst=0x26da30) returned 1 [0173.740] IntersectRect (in: lprcDst=0x26f410, lprcSrc1=0x26f410, lprcSrc2=0x26db94 | out: lprcDst=0x26f410) returned 1 [0173.740] LsSetDoc () returned 0x0 [0173.740] LsCreateLine () returned 0x0 [0173.741] HeapFree (in: hHeap=0x470000, dwFlags=0x0, lpMem=0x0 | out: hHeap=0x470000) returned 1 [0173.745] LsQueryLinePointPcp () returned 0x0 [0173.745] LsDestroyLine () returned 0x0 [0173.745] HeapFree (in: hHeap=0x470000, dwFlags=0x0, lpMem=0x0 | out: hHeap=0x470000) returned 1 [0173.745] GetMessageTime () returned 235421 [0173.745] GetMessagePos () returned 0x2c00149 [0173.745] KillTimer (hWnd=0x7011a, uIDEvent=0x2000) returned 1 [0173.745] GetCapture () returned 0x0 [0173.745] ClientToScreen (in: hWnd=0x5011e, lpPoint=0x26f69c | out: lpPoint=0x26f69c) returned 1 [0173.745] RtlAllocateHeap (HeapHandle=0x470000, Flags=0x0, Size=0xf8) returned 0x4f3878 [0173.746] GetCurrentThreadId () returned 0x220 [0173.746] ClientToScreen (in: hWnd=0x5011e, lpPoint=0x26f6a0 | out: lpPoint=0x26f6a0) returned 1 [0173.746] RtlAllocateHeap (HeapHandle=0x470000, Flags=0x0, Size=0xf8) returned 0x4f3978 [0173.746] HeapFree (in: hHeap=0x470000, dwFlags=0x0, lpMem=0x4f3978 | out: hHeap=0x470000) returned 1 [0173.746] CActiveIMMAppEx_Trident:IActiveIMMApp:OnDefWindowProc (in: This=0x4b1068, hWnd=0x5011e, msg=0x2a3, wParam=0x0, lParam=0x270010f, plResult=0x26f794 | out: plResult=0x26f794) returned 0x1 [0173.746] NtdllDefWindowProc_W () returned 0x0 [0173.746] HeapFree (in: hHeap=0x470000, dwFlags=0x0, lpMem=0x4f3878 | out: hHeap=0x470000) returned 1 [0173.746] SetTimer (hWnd=0x7011a, nIDEvent=0x2001, uElapse=0x12c, lpTimerFunc=0x0) returned 0x2001 [0173.747] ClientToScreen (in: hWnd=0x5011e, lpPoint=0x26f69c | out: lpPoint=0x26f69c) returned 1 [0173.747] RtlAllocateHeap (HeapHandle=0x470000, Flags=0x0, Size=0xf8) returned 0x4f3878 [0173.747] GetCurrentThreadId () returned 0x220 [0173.748] CActiveIMMAppEx_Trident:IActiveIMMApp:OnDefWindowProc (in: This=0x4b1068, hWnd=0x5011e, msg=0x200, wParam=0x0, lParam=0x270010f, plResult=0x26f794 | out: plResult=0x26f794) returned 0x1 [0173.748] NtdllDefWindowProc_W () returned 0x0 [0173.748] HeapFree (in: hHeap=0x470000, dwFlags=0x0, lpMem=0x4f3878 | out: hHeap=0x470000) returned 1 [0173.748] GetMessageTime () returned 235421 [0173.748] GetMessagePos () returned 0x2c00149 [0173.748] GetCapture () returned 0x0 [0173.748] ClientToScreen (in: hWnd=0x5011e, lpPoint=0x26f69c | out: lpPoint=0x26f69c) returned 1 [0173.748] RtlAllocateHeap (HeapHandle=0x470000, Flags=0x0, Size=0xf8) returned 0x4f3878 [0173.748] GetCurrentThreadId () returned 0x220 [0173.748] ClientToScreen (in: hWnd=0x5011e, lpPoint=0x26f6a0 | out: lpPoint=0x26f6a0) returned 1 [0173.748] RtlAllocateHeap (HeapHandle=0x470000, Flags=0x0, Size=0xf8) returned 0x4f3978 [0173.748] HeapFree (in: hHeap=0x470000, dwFlags=0x0, lpMem=0x4f3978 | out: hHeap=0x470000) returned 1 [0173.748] ClientToScreen (in: hWnd=0x5011e, lpPoint=0x26f6a0 | out: lpPoint=0x26f6a0) returned 1 [0173.748] RtlAllocateHeap (HeapHandle=0x470000, Flags=0x0, Size=0xf8) returned 0x4f3978 [0173.748] HeapFree (in: hHeap=0x470000, dwFlags=0x0, lpMem=0x4f3978 | out: hHeap=0x470000) returned 1 [0173.749] HeapFree (in: hHeap=0x470000, dwFlags=0x0, lpMem=0x4ab950 | out: hHeap=0x470000) returned 1 [0173.749] RtlAllocateHeap (HeapHandle=0x470000, Flags=0x0, Size=0x280) returned 0x4b4988 [0173.749] GetSysColor (nIndex=5) returned 0xffffff [0173.750] HeapFree (in: hHeap=0x470000, dwFlags=0x0, lpMem=0x0 | out: hHeap=0x470000) returned 1 [0173.750] HeapFree (in: hHeap=0x470000, dwFlags=0x0, lpMem=0x0 | out: hHeap=0x470000) returned 1 [0173.750] CActiveIMMAppEx_Trident:IActiveIMMApp:OnDefWindowProc (in: This=0x4b1068, hWnd=0x5011e, msg=0x8004, wParam=0x0, lParam=0x270010f, plResult=0x26f794 | out: plResult=0x26f794) returned 0x1 [0173.750] NtdllDefWindowProc_W () returned 0x0 [0173.750] HeapFree (in: hHeap=0x470000, dwFlags=0x0, lpMem=0x4f3878 | out: hHeap=0x470000) returned 1 [0173.750] HeapFree (in: hHeap=0x470000, dwFlags=0x0, lpMem=0x4e77b8 | out: hHeap=0x470000) returned 1 [0173.750] GetCurrentThreadId () returned 0x220 [0173.750] GetMessageW (in: lpMsg=0x26fbd4, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x26fbd4) returned 1 [0173.750] TranslateMessage (lpMsg=0x26fbd4) returned 0 [0173.750] DispatchMessageW (lpMsg=0x26fbd4) returned 0x0 [0173.750] GetCurrentThreadId () returned 0x220 [0173.750] GetCurrentThreadId () returned 0x220 [0173.750] GetCurrentThreadId () returned 0x220 [0173.750] GetMessageW (in: lpMsg=0x26fbd4, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x26fbd4) returned 1 [0174.050] TranslateMessage (lpMsg=0x26fbd4) returned 0 [0174.050] DispatchMessageW (lpMsg=0x26fbd4) returned 0x0 [0174.050] GetCapture () returned 0x0 [0174.050] WindowFromPoint (Point=0x149) returned 0x5011e [0174.050] GetWindowLongW (hWnd=0x5011e, nIndex=-21) returned 4858488 [0174.050] GetClientRect (in: hWnd=0x5011e, lpRect=0x26f698 | out: lpRect=0x26f698) returned 1 [0174.050] ScreenToClient (in: hWnd=0x5011e, lpPoint=0x26f6a8 | out: lpPoint=0x26f6a8) returned 1 [0174.050] PtInRect (lprc=0x26f698, pt=0x10f) returned 1 [0174.050] GetCurrentThreadId () returned 0x220 [0174.050] GetMessageW (in: lpMsg=0x26fbd4, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x26fbd4) returned 1 [0174.361] TranslateMessage (lpMsg=0x26fbd4) returned 0 [0174.361] DispatchMessageW (lpMsg=0x26fbd4) returned 0x0 [0174.361] GetCapture () returned 0x0 [0174.362] WindowFromPoint (Point=0x149) returned 0x5011e [0174.362] GetWindowLongW (hWnd=0x5011e, nIndex=-21) returned 4858488 [0174.362] GetClientRect (in: hWnd=0x5011e, lpRect=0x26f698 | out: lpRect=0x26f698) returned 1 [0174.362] ScreenToClient (in: hWnd=0x5011e, lpPoint=0x26f6a8 | out: lpPoint=0x26f6a8) returned 1 [0174.362] PtInRect (lprc=0x26f698, pt=0x10f) returned 1 [0174.362] GetCurrentThreadId () returned 0x220 [0174.362] GetMessageW (in: lpMsg=0x26fbd4, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x26fbd4) returned 1 [0174.673] TranslateMessage (lpMsg=0x26fbd4) returned 0 [0174.673] DispatchMessageW (lpMsg=0x26fbd4) returned 0x0 [0174.673] GetCapture () returned 0x0 [0174.674] WindowFromPoint (Point=0x149) returned 0x5011e [0174.674] GetWindowLongW (hWnd=0x5011e, nIndex=-21) returned 4858488 [0174.674] GetClientRect (in: hWnd=0x5011e, lpRect=0x26f698 | out: lpRect=0x26f698) returned 1 [0174.674] ScreenToClient (in: hWnd=0x5011e, lpPoint=0x26f6a8 | out: lpPoint=0x26f6a8) returned 1 [0174.674] PtInRect (lprc=0x26f698, pt=0x10f) returned 1 [0174.674] GetCurrentThreadId () returned 0x220 [0174.674] GetMessageW (in: lpMsg=0x26fbd4, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x26fbd4) returned 1 [0174.985] TranslateMessage (lpMsg=0x26fbd4) returned 0 [0174.986] DispatchMessageW (lpMsg=0x26fbd4) returned 0x0 [0174.986] GetCapture () returned 0x0 [0174.986] WindowFromPoint (Point=0x149) returned 0x5011e [0174.986] GetWindowLongW (hWnd=0x5011e, nIndex=-21) returned 4858488 [0174.986] GetClientRect (in: hWnd=0x5011e, lpRect=0x26f698 | out: lpRect=0x26f698) returned 1 [0174.986] ScreenToClient (in: hWnd=0x5011e, lpPoint=0x26f6a8 | out: lpPoint=0x26f6a8) returned 1 [0174.986] PtInRect (lprc=0x26f698, pt=0x10f) returned 1 [0174.986] GetCurrentThreadId () returned 0x220 [0174.986] GetMessageW (in: lpMsg=0x26fbd4, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x26fbd4) returned 1 [0175.298] TranslateMessage (lpMsg=0x26fbd4) returned 0 [0175.298] DispatchMessageW (lpMsg=0x26fbd4) returned 0x0 [0175.298] GetCapture () returned 0x0 [0175.298] WindowFromPoint (Point=0x149) returned 0x5011e [0175.298] GetWindowLongW (hWnd=0x5011e, nIndex=-21) returned 4858488 [0175.298] GetClientRect (in: hWnd=0x5011e, lpRect=0x26f698 | out: lpRect=0x26f698) returned 1 [0175.298] ScreenToClient (in: hWnd=0x5011e, lpPoint=0x26f6a8 | out: lpPoint=0x26f6a8) returned 1 [0175.298] PtInRect (lprc=0x26f698, pt=0x10f) returned 1 [0175.298] GetCurrentThreadId () returned 0x220 [0175.298] GetMessageW (in: lpMsg=0x26fbd4, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x26fbd4) returned 1 [0175.609] TranslateMessage (lpMsg=0x26fbd4) returned 0 [0175.609] DispatchMessageW (lpMsg=0x26fbd4) returned 0x0 [0175.609] GetCapture () returned 0x0 [0175.610] WindowFromPoint (Point=0x149) returned 0x5011e [0175.610] GetWindowLongW (hWnd=0x5011e, nIndex=-21) returned 4858488 [0175.610] GetClientRect (in: hWnd=0x5011e, lpRect=0x26f698 | out: lpRect=0x26f698) returned 1 [0175.610] ScreenToClient (in: hWnd=0x5011e, lpPoint=0x26f6a8 | out: lpPoint=0x26f6a8) returned 1 [0175.610] PtInRect (lprc=0x26f698, pt=0x10f) returned 1 [0175.610] GetCurrentThreadId () returned 0x220 [0175.610] GetMessageW (in: lpMsg=0x26fbd4, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x26fbd4) returned 1 [0175.921] TranslateMessage (lpMsg=0x26fbd4) returned 0 [0175.921] DispatchMessageW (lpMsg=0x26fbd4) returned 0x0 [0175.922] GetCapture () returned 0x0 [0175.922] WindowFromPoint (Point=0x149) returned 0x5011e [0175.922] GetWindowLongW (hWnd=0x5011e, nIndex=-21) returned 4858488 [0175.922] GetClientRect (in: hWnd=0x5011e, lpRect=0x26f698 | out: lpRect=0x26f698) returned 1 [0175.922] ScreenToClient (in: hWnd=0x5011e, lpPoint=0x26f6a8 | out: lpPoint=0x26f6a8) returned 1 [0175.922] PtInRect (lprc=0x26f698, pt=0x10f) returned 1 [0175.922] GetCurrentThreadId () returned 0x220 [0175.922] GetMessageW (in: lpMsg=0x26fbd4, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x26fbd4) returned 1 [0176.235] TranslateMessage (lpMsg=0x26fbd4) returned 0 [0176.235] DispatchMessageW (lpMsg=0x26fbd4) returned 0x0 [0176.235] GetCapture () returned 0x0 [0176.235] WindowFromPoint (Point=0x149) returned 0x5011e [0176.235] GetWindowLongW (hWnd=0x5011e, nIndex=-21) returned 4858488 [0176.235] GetClientRect (in: hWnd=0x5011e, lpRect=0x26f698 | out: lpRect=0x26f698) returned 1 [0176.235] ScreenToClient (in: hWnd=0x5011e, lpPoint=0x26f6a8 | out: lpPoint=0x26f6a8) returned 1 [0176.235] PtInRect (lprc=0x26f698, pt=0x10f) returned 1 [0176.235] GetCurrentThreadId () returned 0x220 [0176.235] GetMessageW (in: lpMsg=0x26fbd4, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x26fbd4) returned 1 [0176.546] TranslateMessage (lpMsg=0x26fbd4) returned 0 [0176.546] DispatchMessageW (lpMsg=0x26fbd4) returned 0x0 [0176.546] GetCapture () returned 0x0 [0176.546] WindowFromPoint (Point=0x149) returned 0x5011e [0176.546] GetWindowLongW (hWnd=0x5011e, nIndex=-21) returned 4858488 [0176.546] GetClientRect (in: hWnd=0x5011e, lpRect=0x26f698 | out: lpRect=0x26f698) returned 1 [0176.546] ScreenToClient (in: hWnd=0x5011e, lpPoint=0x26f6a8 | out: lpPoint=0x26f6a8) returned 1 [0176.546] PtInRect (lprc=0x26f698, pt=0x10f) returned 1 [0176.546] GetCurrentThreadId () returned 0x220 [0176.546] GetMessageW (in: lpMsg=0x26fbd4, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x26fbd4) returned 1 [0176.857] TranslateMessage (lpMsg=0x26fbd4) returned 0 [0176.857] DispatchMessageW (lpMsg=0x26fbd4) returned 0x0 [0176.858] GetCapture () returned 0x0 [0176.858] WindowFromPoint (Point=0x149) returned 0x5011e [0176.858] GetWindowLongW (hWnd=0x5011e, nIndex=-21) returned 4858488 [0176.858] GetClientRect (in: hWnd=0x5011e, lpRect=0x26f698 | out: lpRect=0x26f698) returned 1 [0176.858] ScreenToClient (in: hWnd=0x5011e, lpPoint=0x26f6a8 | out: lpPoint=0x26f6a8) returned 1 [0176.858] PtInRect (lprc=0x26f698, pt=0x10f) returned 1 [0176.858] GetCurrentThreadId () returned 0x220 [0176.858] GetMessageW (in: lpMsg=0x26fbd4, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x26fbd4) returned 1 [0177.170] TranslateMessage (lpMsg=0x26fbd4) returned 0 [0177.170] DispatchMessageW (lpMsg=0x26fbd4) returned 0x0 [0177.170] GetCapture () returned 0x0 [0177.170] WindowFromPoint (Point=0x149) returned 0x5011e [0177.170] GetWindowLongW (hWnd=0x5011e, nIndex=-21) returned 4858488 [0177.170] GetClientRect (in: hWnd=0x5011e, lpRect=0x26f698 | out: lpRect=0x26f698) returned 1 [0177.170] ScreenToClient (in: hWnd=0x5011e, lpPoint=0x26f6a8 | out: lpPoint=0x26f6a8) returned 1 [0177.170] PtInRect (lprc=0x26f698, pt=0x10f) returned 1 [0177.170] GetCurrentThreadId () returned 0x220 [0177.170] GetMessageW (in: lpMsg=0x26fbd4, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x26fbd4) returned 1 [0177.481] TranslateMessage (lpMsg=0x26fbd4) returned 0 [0177.481] DispatchMessageW (lpMsg=0x26fbd4) returned 0x0 [0177.482] GetCapture () returned 0x0 [0177.482] WindowFromPoint (Point=0x149) returned 0x5011e [0177.482] GetWindowLongW (hWnd=0x5011e, nIndex=-21) returned 4858488 [0177.482] GetClientRect (in: hWnd=0x5011e, lpRect=0x26f698 | out: lpRect=0x26f698) returned 1 [0177.482] ScreenToClient (in: hWnd=0x5011e, lpPoint=0x26f6a8 | out: lpPoint=0x26f6a8) returned 1 [0177.482] PtInRect (lprc=0x26f698, pt=0x10f) returned 1 [0177.482] GetCurrentThreadId () returned 0x220 [0177.482] GetMessageW (in: lpMsg=0x26fbd4, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x26fbd4) returned 1 [0177.794] TranslateMessage (lpMsg=0x26fbd4) returned 0 [0177.794] DispatchMessageW (lpMsg=0x26fbd4) returned 0x0 [0177.794] GetCapture () returned 0x0 [0177.794] WindowFromPoint (Point=0x149) returned 0x5011e [0177.794] GetWindowLongW (hWnd=0x5011e, nIndex=-21) returned 4858488 [0177.794] GetClientRect (in: hWnd=0x5011e, lpRect=0x26f698 | out: lpRect=0x26f698) returned 1 [0177.794] ScreenToClient (in: hWnd=0x5011e, lpPoint=0x26f6a8 | out: lpPoint=0x26f6a8) returned 1 [0177.794] PtInRect (lprc=0x26f698, pt=0x10f) returned 1 [0177.794] GetCurrentThreadId () returned 0x220 [0177.794] GetMessageW (in: lpMsg=0x26fbd4, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x26fbd4) returned 1 [0178.105] TranslateMessage (lpMsg=0x26fbd4) returned 0 [0178.105] DispatchMessageW (lpMsg=0x26fbd4) returned 0x0 [0178.105] GetCapture () returned 0x0 [0178.106] WindowFromPoint (Point=0x149) returned 0x5011e [0178.106] GetWindowLongW (hWnd=0x5011e, nIndex=-21) returned 4858488 [0178.106] GetClientRect (in: hWnd=0x5011e, lpRect=0x26f698 | out: lpRect=0x26f698) returned 1 [0178.106] ScreenToClient (in: hWnd=0x5011e, lpPoint=0x26f6a8 | out: lpPoint=0x26f6a8) returned 1 [0178.106] PtInRect (lprc=0x26f698, pt=0x10f) returned 1 [0178.106] GetCurrentThreadId () returned 0x220 [0178.106] GetMessageW (in: lpMsg=0x26fbd4, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x26fbd4) returned 1 [0178.417] TranslateMessage (lpMsg=0x26fbd4) returned 0 [0178.417] DispatchMessageW (lpMsg=0x26fbd4) returned 0x0 [0178.418] GetCapture () returned 0x0 [0178.418] WindowFromPoint (Point=0x149) returned 0x5011e [0178.418] GetWindowLongW (hWnd=0x5011e, nIndex=-21) returned 4858488 [0178.418] GetClientRect (in: hWnd=0x5011e, lpRect=0x26f698 | out: lpRect=0x26f698) returned 1 [0178.418] ScreenToClient (in: hWnd=0x5011e, lpPoint=0x26f6a8 | out: lpPoint=0x26f6a8) returned 1 [0178.418] PtInRect (lprc=0x26f698, pt=0x10f) returned 1 [0178.418] GetCurrentThreadId () returned 0x220 [0178.418] GetMessageW (in: lpMsg=0x26fbd4, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x26fbd4) returned 1 [0178.729] TranslateMessage (lpMsg=0x26fbd4) returned 0 [0178.729] DispatchMessageW (lpMsg=0x26fbd4) returned 0x0 [0178.729] GetCapture () returned 0x0 [0178.730] WindowFromPoint (Point=0x149) returned 0x5011e [0178.730] GetWindowLongW (hWnd=0x5011e, nIndex=-21) returned 4858488 [0178.730] GetClientRect (in: hWnd=0x5011e, lpRect=0x26f698 | out: lpRect=0x26f698) returned 1 [0178.730] ScreenToClient (in: hWnd=0x5011e, lpPoint=0x26f6a8 | out: lpPoint=0x26f6a8) returned 1 [0178.730] PtInRect (lprc=0x26f698, pt=0x10f) returned 1 [0178.730] GetCurrentThreadId () returned 0x220 [0178.730] GetMessageW (in: lpMsg=0x26fbd4, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x26fbd4) returned 1 [0179.041] TranslateMessage (lpMsg=0x26fbd4) returned 0 [0179.041] DispatchMessageW (lpMsg=0x26fbd4) returned 0x0 [0179.042] GetCapture () returned 0x0 [0179.042] WindowFromPoint (Point=0x149) returned 0x5011e [0179.042] GetWindowLongW (hWnd=0x5011e, nIndex=-21) returned 4858488 [0179.042] GetClientRect (in: hWnd=0x5011e, lpRect=0x26f698 | out: lpRect=0x26f698) returned 1 [0179.042] ScreenToClient (in: hWnd=0x5011e, lpPoint=0x26f6a8 | out: lpPoint=0x26f6a8) returned 1 [0179.042] PtInRect (lprc=0x26f698, pt=0x10f) returned 1 [0179.042] GetCurrentThreadId () returned 0x220 [0179.042] GetMessageW (in: lpMsg=0x26fbd4, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x26fbd4) returned 1 [0179.353] TranslateMessage (lpMsg=0x26fbd4) returned 0 [0179.353] DispatchMessageW (lpMsg=0x26fbd4) returned 0x0 [0179.354] GetCapture () returned 0x0 [0179.354] WindowFromPoint (Point=0x149) returned 0x5011e [0179.354] GetWindowLongW (hWnd=0x5011e, nIndex=-21) returned 4858488 [0179.354] GetClientRect (in: hWnd=0x5011e, lpRect=0x26f698 | out: lpRect=0x26f698) returned 1 [0179.354] ScreenToClient (in: hWnd=0x5011e, lpPoint=0x26f6a8 | out: lpPoint=0x26f6a8) returned 1 [0179.354] PtInRect (lprc=0x26f698, pt=0x10f) returned 1 [0179.354] GetCurrentThreadId () returned 0x220 [0179.354] GetMessageW (in: lpMsg=0x26fbd4, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x26fbd4) returned 1 [0179.665] TranslateMessage (lpMsg=0x26fbd4) returned 0 [0179.665] DispatchMessageW (lpMsg=0x26fbd4) returned 0x0 [0179.666] GetCapture () returned 0x0 [0179.666] WindowFromPoint (Point=0x149) returned 0x5011e [0179.666] GetWindowLongW (hWnd=0x5011e, nIndex=-21) returned 4858488 [0179.666] GetClientRect (in: hWnd=0x5011e, lpRect=0x26f698 | out: lpRect=0x26f698) returned 1 [0179.666] ScreenToClient (in: hWnd=0x5011e, lpPoint=0x26f6a8 | out: lpPoint=0x26f6a8) returned 1 [0179.666] PtInRect (lprc=0x26f698, pt=0x10f) returned 1 [0179.666] GetCurrentThreadId () returned 0x220 [0179.666] GetMessageW (in: lpMsg=0x26fbd4, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x26fbd4) returned 1 [0179.978] TranslateMessage (lpMsg=0x26fbd4) returned 0 [0179.978] DispatchMessageW (lpMsg=0x26fbd4) returned 0x0 [0179.978] GetCapture () returned 0x0 [0179.978] WindowFromPoint (Point=0x149) returned 0x5011e [0179.978] GetWindowLongW (hWnd=0x5011e, nIndex=-21) returned 4858488 [0179.978] GetClientRect (in: hWnd=0x5011e, lpRect=0x26f698 | out: lpRect=0x26f698) returned 1 [0179.978] ScreenToClient (in: hWnd=0x5011e, lpPoint=0x26f6a8 | out: lpPoint=0x26f6a8) returned 1 [0179.978] PtInRect (lprc=0x26f698, pt=0x10f) returned 1 [0179.978] GetCurrentThreadId () returned 0x220 [0179.978] GetMessageW (in: lpMsg=0x26fbd4, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x26fbd4) returned 1 [0180.290] TranslateMessage (lpMsg=0x26fbd4) returned 0 [0180.290] DispatchMessageW (lpMsg=0x26fbd4) returned 0x0 [0180.290] GetCapture () returned 0x0 [0180.290] WindowFromPoint (Point=0x149) returned 0x5011e [0180.290] GetWindowLongW (hWnd=0x5011e, nIndex=-21) returned 4858488 [0180.290] GetClientRect (in: hWnd=0x5011e, lpRect=0x26f698 | out: lpRect=0x26f698) returned 1 [0180.290] ScreenToClient (in: hWnd=0x5011e, lpPoint=0x26f6a8 | out: lpPoint=0x26f6a8) returned 1 [0180.290] PtInRect (lprc=0x26f698, pt=0x10f) returned 1 [0180.290] GetCurrentThreadId () returned 0x220 [0180.290] GetMessageW (in: lpMsg=0x26fbd4, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x26fbd4) returned 1 [0180.601] TranslateMessage (lpMsg=0x26fbd4) returned 0 [0180.601] DispatchMessageW (lpMsg=0x26fbd4) returned 0x0 [0180.601] GetCapture () returned 0x0 [0180.601] WindowFromPoint (Point=0x149) returned 0x5011e [0180.602] GetWindowLongW (hWnd=0x5011e, nIndex=-21) returned 4858488 [0180.602] GetClientRect (in: hWnd=0x5011e, lpRect=0x26f698 | out: lpRect=0x26f698) returned 1 [0180.602] ScreenToClient (in: hWnd=0x5011e, lpPoint=0x26f6a8 | out: lpPoint=0x26f6a8) returned 1 [0180.602] PtInRect (lprc=0x26f698, pt=0x10f) returned 1 [0180.602] GetCurrentThreadId () returned 0x220 [0180.602] GetMessageW (in: lpMsg=0x26fbd4, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x26fbd4) returned 1 [0180.913] TranslateMessage (lpMsg=0x26fbd4) returned 0 [0180.913] DispatchMessageW (lpMsg=0x26fbd4) returned 0x0 [0180.913] GetCapture () returned 0x0 [0180.914] WindowFromPoint (Point=0x149) returned 0x5011e [0180.914] GetWindowLongW (hWnd=0x5011e, nIndex=-21) returned 4858488 [0180.914] GetClientRect (in: hWnd=0x5011e, lpRect=0x26f698 | out: lpRect=0x26f698) returned 1 [0180.914] ScreenToClient (in: hWnd=0x5011e, lpPoint=0x26f6a8 | out: lpPoint=0x26f6a8) returned 1 [0180.914] PtInRect (lprc=0x26f698, pt=0x10f) returned 1 [0180.914] GetCurrentThreadId () returned 0x220 [0180.914] GetMessageW (in: lpMsg=0x26fbd4, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x26fbd4) returned 1 [0181.225] TranslateMessage (lpMsg=0x26fbd4) returned 0 [0181.225] DispatchMessageW (lpMsg=0x26fbd4) returned 0x0 [0181.225] GetCapture () returned 0x0 [0181.225] WindowFromPoint (Point=0x149) returned 0x5011e [0181.225] GetWindowLongW (hWnd=0x5011e, nIndex=-21) returned 4858488 [0181.226] GetClientRect (in: hWnd=0x5011e, lpRect=0x26f698 | out: lpRect=0x26f698) returned 1 [0181.226] ScreenToClient (in: hWnd=0x5011e, lpPoint=0x26f6a8 | out: lpPoint=0x26f6a8) returned 1 [0181.226] PtInRect (lprc=0x26f698, pt=0x10f) returned 1 [0181.226] GetCurrentThreadId () returned 0x220 [0181.226] GetMessageW (in: lpMsg=0x26fbd4, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x26fbd4) returned 1 [0181.537] TranslateMessage (lpMsg=0x26fbd4) returned 0 [0181.537] DispatchMessageW (lpMsg=0x26fbd4) returned 0x0 [0181.538] GetCapture () returned 0x0 [0181.538] WindowFromPoint (Point=0x149) returned 0x5011e [0181.538] GetWindowLongW (hWnd=0x5011e, nIndex=-21) returned 4858488 [0181.538] GetClientRect (in: hWnd=0x5011e, lpRect=0x26f698 | out: lpRect=0x26f698) returned 1 [0181.538] ScreenToClient (in: hWnd=0x5011e, lpPoint=0x26f6a8 | out: lpPoint=0x26f6a8) returned 1 [0181.538] PtInRect (lprc=0x26f698, pt=0x10f) returned 1 [0181.538] GetCurrentThreadId () returned 0x220 [0181.538] GetMessageW (in: lpMsg=0x26fbd4, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x26fbd4) returned 1 [0181.849] TranslateMessage (lpMsg=0x26fbd4) returned 0 [0181.849] DispatchMessageW (lpMsg=0x26fbd4) returned 0x0 [0181.850] GetCapture () returned 0x0 [0181.850] WindowFromPoint (Point=0x149) returned 0x5011e [0181.850] GetWindowLongW (hWnd=0x5011e, nIndex=-21) returned 4858488 [0181.850] GetClientRect (in: hWnd=0x5011e, lpRect=0x26f698 | out: lpRect=0x26f698) returned 1 [0181.850] ScreenToClient (in: hWnd=0x5011e, lpPoint=0x26f6a8 | out: lpPoint=0x26f6a8) returned 1 [0181.850] PtInRect (lprc=0x26f698, pt=0x10f) returned 1 [0181.850] GetCurrentThreadId () returned 0x220 [0181.850] GetMessageW (in: lpMsg=0x26fbd4, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x26fbd4) returned 1 [0182.161] TranslateMessage (lpMsg=0x26fbd4) returned 0 [0182.161] DispatchMessageW (lpMsg=0x26fbd4) returned 0x0 [0182.161] GetCapture () returned 0x0 [0182.162] WindowFromPoint (Point=0x149) returned 0x5011e [0182.162] GetWindowLongW (hWnd=0x5011e, nIndex=-21) returned 4858488 [0182.162] GetClientRect (in: hWnd=0x5011e, lpRect=0x26f698 | out: lpRect=0x26f698) returned 1 [0182.162] ScreenToClient (in: hWnd=0x5011e, lpPoint=0x26f6a8 | out: lpPoint=0x26f6a8) returned 1 [0182.162] PtInRect (lprc=0x26f698, pt=0x10f) returned 1 [0182.162] GetCurrentThreadId () returned 0x220 [0182.162] GetMessageW (in: lpMsg=0x26fbd4, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x26fbd4) returned 1 [0182.474] TranslateMessage (lpMsg=0x26fbd4) returned 0 [0182.474] DispatchMessageW (lpMsg=0x26fbd4) returned 0x0 [0182.474] GetCapture () returned 0x0 [0182.474] WindowFromPoint (Point=0x149) returned 0x5011e [0182.474] GetWindowLongW (hWnd=0x5011e, nIndex=-21) returned 4858488 [0182.474] GetClientRect (in: hWnd=0x5011e, lpRect=0x26f698 | out: lpRect=0x26f698) returned 1 [0182.474] ScreenToClient (in: hWnd=0x5011e, lpPoint=0x26f6a8 | out: lpPoint=0x26f6a8) returned 1 [0182.474] PtInRect (lprc=0x26f698, pt=0x10f) returned 1 [0182.474] GetCurrentThreadId () returned 0x220 [0182.474] GetMessageW (in: lpMsg=0x26fbd4, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x26fbd4) returned 1 [0182.785] TranslateMessage (lpMsg=0x26fbd4) returned 0 [0182.785] DispatchMessageW (lpMsg=0x26fbd4) returned 0x0 [0182.785] GetCapture () returned 0x0 [0182.786] WindowFromPoint (Point=0x149) returned 0x5011e [0182.786] GetWindowLongW (hWnd=0x5011e, nIndex=-21) returned 4858488 [0182.786] GetClientRect (in: hWnd=0x5011e, lpRect=0x26f698 | out: lpRect=0x26f698) returned 1 [0182.786] ScreenToClient (in: hWnd=0x5011e, lpPoint=0x26f6a8 | out: lpPoint=0x26f6a8) returned 1 [0182.786] PtInRect (lprc=0x26f698, pt=0x10f) returned 1 [0182.786] GetCurrentThreadId () returned 0x220 [0182.786] GetMessageW (in: lpMsg=0x26fbd4, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x26fbd4) returned 1 [0183.097] TranslateMessage (lpMsg=0x26fbd4) returned 0 [0183.097] DispatchMessageW (lpMsg=0x26fbd4) returned 0x0 [0183.097] GetCapture () returned 0x0 [0183.098] WindowFromPoint (Point=0x149) returned 0x5011e [0183.098] GetWindowLongW (hWnd=0x5011e, nIndex=-21) returned 4858488 [0183.098] GetClientRect (in: hWnd=0x5011e, lpRect=0x26f698 | out: lpRect=0x26f698) returned 1 [0183.098] ScreenToClient (in: hWnd=0x5011e, lpPoint=0x26f6a8 | out: lpPoint=0x26f6a8) returned 1 [0183.098] PtInRect (lprc=0x26f698, pt=0x10f) returned 1 [0183.098] GetCurrentThreadId () returned 0x220 [0183.098] GetMessageW (in: lpMsg=0x26fbd4, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x26fbd4) returned 1 [0183.409] TranslateMessage (lpMsg=0x26fbd4) returned 0 [0183.409] DispatchMessageW (lpMsg=0x26fbd4) returned 0x0 [0183.409] GetCapture () returned 0x0 [0183.409] WindowFromPoint (Point=0x149) returned 0x5011e [0183.410] GetWindowLongW (hWnd=0x5011e, nIndex=-21) returned 4858488 [0183.410] GetClientRect (in: hWnd=0x5011e, lpRect=0x26f698 | out: lpRect=0x26f698) returned 1 [0183.410] ScreenToClient (in: hWnd=0x5011e, lpPoint=0x26f6a8 | out: lpPoint=0x26f6a8) returned 1 [0183.410] PtInRect (lprc=0x26f698, pt=0x10f) returned 1 [0183.410] GetCurrentThreadId () returned 0x220 [0183.410] GetMessageW (in: lpMsg=0x26fbd4, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x26fbd4) returned 1 [0183.721] TranslateMessage (lpMsg=0x26fbd4) returned 0 [0183.721] DispatchMessageW (lpMsg=0x26fbd4) returned 0x0 [0183.721] GetCapture () returned 0x0 [0183.722] WindowFromPoint (Point=0x149) returned 0x5011e [0183.722] GetWindowLongW (hWnd=0x5011e, nIndex=-21) returned 4858488 [0183.722] GetClientRect (in: hWnd=0x5011e, lpRect=0x26f698 | out: lpRect=0x26f698) returned 1 [0183.722] ScreenToClient (in: hWnd=0x5011e, lpPoint=0x26f6a8 | out: lpPoint=0x26f6a8) returned 1 [0183.722] PtInRect (lprc=0x26f698, pt=0x10f) returned 1 [0183.722] GetCurrentThreadId () returned 0x220 [0183.722] GetMessageW (in: lpMsg=0x26fbd4, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x26fbd4) returned 1 [0183.833] GetWindowLongW (hWnd=0x5011e, nIndex=-21) returned 4858488 [0183.833] GetClientRect (in: hWnd=0x5011e, lpRect=0x26f878 | out: lpRect=0x26f878) returned 1 [0183.833] ScreenToClient (in: hWnd=0x5011e, lpPoint=0x26f888 | out: lpPoint=0x26f888) returned 1 [0183.833] PtInRect (lprc=0x26f878, pt=0x1fe) returned 1 [0183.833] GetCurrentThreadId () returned 0x220 [0183.833] GetWindowLongW (hWnd=0x5011e, nIndex=-21) returned 4858488 [0183.833] ScreenToClient (in: hWnd=0x5011e, lpPoint=0x26f8f8 | out: lpPoint=0x26f8f8) returned 1 [0183.833] GetMessageTime () returned 245420 [0183.833] GetMessagePos () returned 0x2c00149 [0183.833] GetCapture () returned 0x0 [0183.833] IntersectRect (in: lprcDst=0x26f2e8, lprcSrc1=0x26f2e8, lprcSrc2=0x26f378 | out: lprcDst=0x26f2e8) returned 1 [0183.833] IntersectRect (in: lprcDst=0x26f0a4, lprcSrc1=0x26f0a4, lprcSrc2=0x26f074 | out: lprcDst=0x26f0a4) returned 1 [0183.833] IntersectRect (in: lprcDst=0x26f388, lprcSrc1=0x26f388, lprcSrc2=0x26f094 | out: lprcDst=0x26f388) returned 1 [0183.833] HeapFree (in: hHeap=0x470000, dwFlags=0x0, lpMem=0x0 | out: hHeap=0x470000) returned 1 [0183.833] RtlAllocateHeap (HeapHandle=0x470000, Flags=0x0, Size=0x24) returned 0x4e77b8 [0183.833] IntersectRect (in: lprcDst=0x26f388, lprcSrc1=0x26f388, lprcSrc2=0x26f0b4 | out: lprcDst=0x26f388) returned 1 [0183.833] IntersectRect (in: lprcDst=0x26ee78, lprcSrc1=0x26ee78, lprcSrc2=0x26f378 | out: lprcDst=0x26ee78) returned 1 [0183.833] IntersectRect (in: lprcDst=0x26ee78, lprcSrc1=0x26ee78, lprcSrc2=0x26f378 | out: lprcDst=0x26ee78) returned 1 [0183.833] IntersectRect (in: lprcDst=0x26eab0, lprcSrc1=0x26eab0, lprcSrc2=0x26ea80 | out: lprcDst=0x26eab0) returned 1 [0183.833] IntersectRect (in: lprcDst=0x26f410, lprcSrc1=0x26f410, lprcSrc2=0x26eaa0 | out: lprcDst=0x26f410) returned 1 [0183.833] IntersectRect (in: lprcDst=0x26ec34, lprcSrc1=0x26ec34, lprcSrc2=0x26ec04 | out: lprcDst=0x26ec34) returned 1 [0183.833] IntersectRect (in: lprcDst=0x26f388, lprcSrc1=0x26f388, lprcSrc2=0x26ec24 | out: lprcDst=0x26f388) returned 1 [0183.833] HeapFree (in: hHeap=0x470000, dwFlags=0x0, lpMem=0x0 | out: hHeap=0x470000) returned 1 [0183.833] RtlAllocateHeap (HeapHandle=0x470000, Flags=0x0, Size=0x24) returned 0x4e7788 [0183.834] IntersectRect (in: lprcDst=0x26ea70, lprcSrc1=0x26ea70, lprcSrc2=0x26f378 | out: lprcDst=0x26ea70) returned 1 [0183.834] IntersectRect (in: lprcDst=0x26f388, lprcSrc1=0x26f388, lprcSrc2=0x26ec44 | out: lprcDst=0x26f388) returned 1 [0183.834] IntersectRect (in: lprcDst=0x26ea08, lprcSrc1=0x26ea08, lprcSrc2=0x26f378 | out: lprcDst=0x26ea08) returned 1 [0183.834] IntersectRect (in: lprcDst=0x26ea08, lprcSrc1=0x26ea08, lprcSrc2=0x26f378 | out: lprcDst=0x26ea08) returned 1 [0183.834] IntersectRect (in: lprcDst=0x26e794, lprcSrc1=0x26e794, lprcSrc2=0x26e64c | out: lprcDst=0x26e794) returned 1 [0183.834] IntersectRect (in: lprcDst=0x26f388, lprcSrc1=0x26f388, lprcSrc2=0x26e7b4 | out: lprcDst=0x26f388) returned 1 [0183.834] HeapFree (in: hHeap=0x470000, dwFlags=0x0, lpMem=0x0 | out: hHeap=0x470000) returned 1 [0183.834] RtlAllocateHeap (HeapHandle=0x470000, Flags=0x0, Size=0x24) returned 0x4e7848 [0183.834] IntersectRect (in: lprcDst=0x26f388, lprcSrc1=0x26f388, lprcSrc2=0x26e7d4 | out: lprcDst=0x26f388) returned 1 [0183.834] IntersectRect (in: lprcDst=0x26e598, lprcSrc1=0x26e598, lprcSrc2=0x26f378 | out: lprcDst=0x26e598) returned 1 [0183.834] IntersectRect (in: lprcDst=0x26e598, lprcSrc1=0x26e598, lprcSrc2=0x26f378 | out: lprcDst=0x26e598) returned 1 [0183.834] IntersectRect (in: lprcDst=0x26e324, lprcSrc1=0x26e324, lprcSrc2=0x26e1dc | out: lprcDst=0x26e324) returned 1 [0183.834] IntersectRect (in: lprcDst=0x26f388, lprcSrc1=0x26f388, lprcSrc2=0x26e344 | out: lprcDst=0x26f388) returned 1 [0183.834] HeapFree (in: hHeap=0x470000, dwFlags=0x0, lpMem=0x0 | out: hHeap=0x470000) returned 1 [0183.834] RtlAllocateHeap (HeapHandle=0x470000, Flags=0x0, Size=0x24) returned 0x4e7878 [0183.834] IntersectRect (in: lprcDst=0x26f388, lprcSrc1=0x26f388, lprcSrc2=0x26e364 | out: lprcDst=0x26f388) returned 1 [0183.834] IntersectRect (in: lprcDst=0x26e128, lprcSrc1=0x26e128, lprcSrc2=0x26f378 | out: lprcDst=0x26e128) returned 1 [0183.834] IntersectRect (in: lprcDst=0x26e128, lprcSrc1=0x26e128, lprcSrc2=0x26f378 | out: lprcDst=0x26e128) returned 0 [0183.834] IntersectRect (in: lprcDst=0x26e128, lprcSrc1=0x26e128, lprcSrc2=0x26f378 | out: lprcDst=0x26e128) returned 1 [0183.834] IntersectRect (in: lprcDst=0x26e128, lprcSrc1=0x26e128, lprcSrc2=0x26f378 | out: lprcDst=0x26e128) returned 1 [0183.834] IntersectRect (in: lprcDst=0x26e128, lprcSrc1=0x26e128, lprcSrc2=0x26f378 | out: lprcDst=0x26e128) returned 1 [0183.834] IntersectRect (in: lprcDst=0x26e128, lprcSrc1=0x26e128, lprcSrc2=0x26f378 | out: lprcDst=0x26e128) returned 1 [0183.834] IntersectRect (in: lprcDst=0x26df6c, lprcSrc1=0x26df6c, lprcSrc2=0x26de08 | out: lprcDst=0x26df6c) returned 1 [0183.834] HeapFree (in: hHeap=0x470000, dwFlags=0x0, lpMem=0x0 | out: hHeap=0x470000) returned 1 [0183.834] RtlAllocateHeap (HeapHandle=0x470000, Flags=0x0, Size=0x24) returned 0x4e78a8 [0183.834] IntersectRect (in: lprcDst=0x26f388, lprcSrc1=0x26f388, lprcSrc2=0x26df5c | out: lprcDst=0x26f388) returned 1 [0183.834] IntersectRect (in: lprcDst=0x26de18, lprcSrc1=0x26de18, lprcSrc2=0x26f378 | out: lprcDst=0x26de18) returned 1 [0183.834] IntersectRect (in: lprcDst=0x26f388, lprcSrc1=0x26f388, lprcSrc2=0x26df7c | out: lprcDst=0x26f388) returned 1 [0183.835] PostMessageW (hWnd=0x7011a, Msg=0x8002, wParam=0x0, lParam=0x0) returned 1 [0183.835] LsSetDoc () returned 0x0 [0183.835] LsCreateLine () returned 0x0 [0183.835] HeapFree (in: hHeap=0x470000, dwFlags=0x0, lpMem=0x0 | out: hHeap=0x470000) returned 1 [0183.835] LsQueryLinePointPcp () returned 0x0 [0183.835] LsDestroyLine () returned 0x0 [0183.835] HeapFree (in: hHeap=0x470000, dwFlags=0x0, lpMem=0x0 | out: hHeap=0x470000) returned 1 [0183.835] PtInRect (lprc=0x26f524, pt=0xac12) returned 1 [0183.835] LoadCursorA (hInstance=0x0, lpCursorName=0x7f01) returned 0x10005 [0183.835] GetCursor () returned 0x10005 [0183.836] GetCurrentThreadId () returned 0x220 [0183.836] TranslateMessage (lpMsg=0x26fbd4) returned 0 [0183.836] DispatchMessageW (lpMsg=0x26fbd4) returned 0x0 [0183.836] GetWindowLongW (hWnd=0x5011e, nIndex=-21) returned 4858488 [0183.836] GetMessageTime () returned 245529 [0183.836] GetMessagePos () returned 0x2860238 [0183.836] GetCapture () returned 0x0 [0183.836] GetCurrentThreadId () returned 0x220 [0183.836] GetCurrentThreadId () returned 0x220 [0183.836] GetCurrentThreadId () returned 0x220 [0183.836] IntersectRect (in: lprcDst=0x26f370, lprcSrc1=0x26f370, lprcSrc2=0x26f400 | out: lprcDst=0x26f370) returned 1 [0183.836] IntersectRect (in: lprcDst=0x26f12c, lprcSrc1=0x26f12c, lprcSrc2=0x26f0fc | out: lprcDst=0x26f12c) returned 1 [0183.836] IntersectRect (in: lprcDst=0x26f410, lprcSrc1=0x26f410, lprcSrc2=0x26f11c | out: lprcDst=0x26f410) returned 1 [0183.836] HeapFree (in: hHeap=0x470000, dwFlags=0x0, lpMem=0x0 | out: hHeap=0x470000) returned 1 [0183.836] RtlAllocateHeap (HeapHandle=0x470000, Flags=0x0, Size=0x24) returned 0x4e77b8 [0183.836] IntersectRect (in: lprcDst=0x26f410, lprcSrc1=0x26f410, lprcSrc2=0x26f13c | out: lprcDst=0x26f410) returned 1 [0183.836] IntersectRect (in: lprcDst=0x26ef00, lprcSrc1=0x26ef00, lprcSrc2=0x26f400 | out: lprcDst=0x26ef00) returned 1 [0183.836] IntersectRect (in: lprcDst=0x26ef00, lprcSrc1=0x26ef00, lprcSrc2=0x26f400 | out: lprcDst=0x26ef00) returned 1 [0183.836] IntersectRect (in: lprcDst=0x26eb38, lprcSrc1=0x26eb38, lprcSrc2=0x26eb08 | out: lprcDst=0x26eb38) returned 1 [0183.836] IntersectRect (in: lprcDst=0x26f498, lprcSrc1=0x26f498, lprcSrc2=0x26eb28 | out: lprcDst=0x26f498) returned 1 [0183.836] IntersectRect (in: lprcDst=0x26ecbc, lprcSrc1=0x26ecbc, lprcSrc2=0x26ec8c | out: lprcDst=0x26ecbc) returned 1 [0183.836] IntersectRect (in: lprcDst=0x26f410, lprcSrc1=0x26f410, lprcSrc2=0x26ecac | out: lprcDst=0x26f410) returned 1 [0183.836] HeapFree (in: hHeap=0x470000, dwFlags=0x0, lpMem=0x0 | out: hHeap=0x470000) returned 1 [0183.836] RtlAllocateHeap (HeapHandle=0x470000, Flags=0x0, Size=0x24) returned 0x4e7788 [0183.836] IntersectRect (in: lprcDst=0x26eaf8, lprcSrc1=0x26eaf8, lprcSrc2=0x26f400 | out: lprcDst=0x26eaf8) returned 1 [0183.836] IntersectRect (in: lprcDst=0x26f410, lprcSrc1=0x26f410, lprcSrc2=0x26eccc | out: lprcDst=0x26f410) returned 1 [0183.836] IntersectRect (in: lprcDst=0x26ea90, lprcSrc1=0x26ea90, lprcSrc2=0x26f400 | out: lprcDst=0x26ea90) returned 1 [0183.836] IntersectRect (in: lprcDst=0x26ea90, lprcSrc1=0x26ea90, lprcSrc2=0x26f400 | out: lprcDst=0x26ea90) returned 1 [0183.836] IntersectRect (in: lprcDst=0x26e81c, lprcSrc1=0x26e81c, lprcSrc2=0x26e6d4 | out: lprcDst=0x26e81c) returned 1 [0183.836] IntersectRect (in: lprcDst=0x26f410, lprcSrc1=0x26f410, lprcSrc2=0x26e83c | out: lprcDst=0x26f410) returned 1 [0183.836] HeapFree (in: hHeap=0x470000, dwFlags=0x0, lpMem=0x0 | out: hHeap=0x470000) returned 1 [0183.836] RtlAllocateHeap (HeapHandle=0x470000, Flags=0x0, Size=0x24) returned 0x4e7848 [0183.836] IntersectRect (in: lprcDst=0x26f410, lprcSrc1=0x26f410, lprcSrc2=0x26e85c | out: lprcDst=0x26f410) returned 1 [0183.836] IntersectRect (in: lprcDst=0x26e620, lprcSrc1=0x26e620, lprcSrc2=0x26f400 | out: lprcDst=0x26e620) returned 1 [0183.836] IntersectRect (in: lprcDst=0x26e620, lprcSrc1=0x26e620, lprcSrc2=0x26f400 | out: lprcDst=0x26e620) returned 1 [0183.837] IntersectRect (in: lprcDst=0x26e3ac, lprcSrc1=0x26e3ac, lprcSrc2=0x26e264 | out: lprcDst=0x26e3ac) returned 1 [0183.837] IntersectRect (in: lprcDst=0x26f410, lprcSrc1=0x26f410, lprcSrc2=0x26e3cc | out: lprcDst=0x26f410) returned 1 [0183.837] HeapFree (in: hHeap=0x470000, dwFlags=0x0, lpMem=0x0 | out: hHeap=0x470000) returned 1 [0183.837] RtlAllocateHeap (HeapHandle=0x470000, Flags=0x0, Size=0x24) returned 0x4e7878 [0183.837] IntersectRect (in: lprcDst=0x26f410, lprcSrc1=0x26f410, lprcSrc2=0x26e3ec | out: lprcDst=0x26f410) returned 1 [0183.837] IntersectRect (in: lprcDst=0x26e1b0, lprcSrc1=0x26e1b0, lprcSrc2=0x26f400 | out: lprcDst=0x26e1b0) returned 1 [0183.837] IntersectRect (in: lprcDst=0x26e1b0, lprcSrc1=0x26e1b0, lprcSrc2=0x26f400 | out: lprcDst=0x26e1b0) returned 0 [0183.837] IntersectRect (in: lprcDst=0x26e1b0, lprcSrc1=0x26e1b0, lprcSrc2=0x26f400 | out: lprcDst=0x26e1b0) returned 1 [0183.837] IntersectRect (in: lprcDst=0x26e1b0, lprcSrc1=0x26e1b0, lprcSrc2=0x26f400 | out: lprcDst=0x26e1b0) returned 1 [0183.837] IntersectRect (in: lprcDst=0x26e1b0, lprcSrc1=0x26e1b0, lprcSrc2=0x26f400 | out: lprcDst=0x26e1b0) returned 1 [0183.837] IntersectRect (in: lprcDst=0x26e1b0, lprcSrc1=0x26e1b0, lprcSrc2=0x26f400 | out: lprcDst=0x26e1b0) returned 1 [0183.837] IntersectRect (in: lprcDst=0x26dff4, lprcSrc1=0x26dff4, lprcSrc2=0x26de90 | out: lprcDst=0x26dff4) returned 1 [0183.837] HeapFree (in: hHeap=0x470000, dwFlags=0x0, lpMem=0x0 | out: hHeap=0x470000) returned 1 [0183.837] RtlAllocateHeap (HeapHandle=0x470000, Flags=0x0, Size=0x24) returned 0x4e78a8 [0183.837] IntersectRect (in: lprcDst=0x26f410, lprcSrc1=0x26f410, lprcSrc2=0x26dfe4 | out: lprcDst=0x26f410) returned 1 [0183.837] IntersectRect (in: lprcDst=0x26dea0, lprcSrc1=0x26dea0, lprcSrc2=0x26f400 | out: lprcDst=0x26dea0) returned 1 [0183.837] IntersectRect (in: lprcDst=0x26f410, lprcSrc1=0x26f410, lprcSrc2=0x26e004 | out: lprcDst=0x26f410) returned 1 [0183.837] LsSetDoc () returned 0x0 [0183.837] LsCreateLine () returned 0x0 [0183.837] HeapFree (in: hHeap=0x470000, dwFlags=0x0, lpMem=0x0 | out: hHeap=0x470000) returned 1 [0183.838] LsQueryLinePointPcp () returned 0x0 [0183.838] LsDestroyLine () returned 0x0 [0183.838] HeapFree (in: hHeap=0x470000, dwFlags=0x0, lpMem=0x0 | out: hHeap=0x470000) returned 1 [0183.838] GetMessageTime () returned 245529 [0183.838] GetMessagePos () returned 0x2860238 [0183.838] KillTimer (hWnd=0x7011a, uIDEvent=0x2001) returned 1 [0183.838] GetCapture () returned 0x0 [0183.838] ClientToScreen (in: hWnd=0x5011e, lpPoint=0x26f69c | out: lpPoint=0x26f69c) returned 1 [0183.838] RtlAllocateHeap (HeapHandle=0x470000, Flags=0x0, Size=0xf8) returned 0x4f3878 [0183.838] GetCurrentThreadId () returned 0x220 [0183.838] ClientToScreen (in: hWnd=0x5011e, lpPoint=0x26f6a0 | out: lpPoint=0x26f6a0) returned 1 [0183.839] RtlAllocateHeap (HeapHandle=0x470000, Flags=0x0, Size=0xf8) returned 0x4f3978 [0183.839] HeapFree (in: hHeap=0x470000, dwFlags=0x0, lpMem=0x4f3978 | out: hHeap=0x470000) returned 1 [0183.839] ClientToScreen (in: hWnd=0x5011e, lpPoint=0x26f6a0 | out: lpPoint=0x26f6a0) returned 1 [0183.839] RtlAllocateHeap (HeapHandle=0x470000, Flags=0x0, Size=0xf8) returned 0x4f3978 [0183.839] HeapFree (in: hHeap=0x470000, dwFlags=0x0, lpMem=0x4f3978 | out: hHeap=0x470000) returned 1 [0183.839] CActiveIMMAppEx_Trident:IActiveIMMApp:OnDefWindowProc (in: This=0x4b1068, hWnd=0x5011e, msg=0x2a3, wParam=0x0, lParam=0x23601fe, plResult=0x26f794 | out: plResult=0x26f794) returned 0x1 [0183.839] NtdllDefWindowProc_W () returned 0x0 [0183.839] HeapFree (in: hHeap=0x470000, dwFlags=0x0, lpMem=0x4f3878 | out: hHeap=0x470000) returned 1 [0183.839] SetTimer (hWnd=0x7011a, nIDEvent=0x2002, uElapse=0x12c, lpTimerFunc=0x0) returned 0x2002 [0183.839] ClientToScreen (in: hWnd=0x5011e, lpPoint=0x26f69c | out: lpPoint=0x26f69c) returned 1 [0183.839] RtlAllocateHeap (HeapHandle=0x470000, Flags=0x0, Size=0xf8) returned 0x4f3878 [0183.840] GetCurrentThreadId () returned 0x220 [0183.840] CActiveIMMAppEx_Trident:IActiveIMMApp:OnDefWindowProc (in: This=0x4b1068, hWnd=0x5011e, msg=0x200, wParam=0x0, lParam=0x23601fe, plResult=0x26f794 | out: plResult=0x26f794) returned 0x1 [0183.840] NtdllDefWindowProc_W () returned 0x0 [0183.840] HeapFree (in: hHeap=0x470000, dwFlags=0x0, lpMem=0x4f3878 | out: hHeap=0x470000) returned 1 [0183.840] GetMessageTime () returned 245529 [0183.840] GetMessagePos () returned 0x2860238 [0183.840] GetCapture () returned 0x0 [0183.840] ClientToScreen (in: hWnd=0x5011e, lpPoint=0x26f69c | out: lpPoint=0x26f69c) returned 1 [0183.840] RtlAllocateHeap (HeapHandle=0x470000, Flags=0x0, Size=0xf8) returned 0x4f3878 [0183.840] GetCurrentThreadId () returned 0x220 [0183.840] ClientToScreen (in: hWnd=0x5011e, lpPoint=0x26f6a0 | out: lpPoint=0x26f6a0) returned 1 [0183.841] RtlAllocateHeap (HeapHandle=0x470000, Flags=0x0, Size=0xf8) returned 0x4f3978 [0183.841] HeapFree (in: hHeap=0x470000, dwFlags=0x0, lpMem=0x4f3978 | out: hHeap=0x470000) returned 1 [0183.841] HeapFree (in: hHeap=0x470000, dwFlags=0x0, lpMem=0x4ab950 | out: hHeap=0x470000) returned 1 [0183.841] RtlAllocateHeap (HeapHandle=0x470000, Flags=0x0, Size=0x280) returned 0x4b4988 [0183.841] GetSysColor (nIndex=5) returned 0xffffff [0183.841] HeapFree (in: hHeap=0x470000, dwFlags=0x0, lpMem=0x0 | out: hHeap=0x470000) returned 1 [0183.841] HeapFree (in: hHeap=0x470000, dwFlags=0x0, lpMem=0x0 | out: hHeap=0x470000) returned 1 [0183.841] CActiveIMMAppEx_Trident:IActiveIMMApp:OnDefWindowProc (in: This=0x4b1068, hWnd=0x5011e, msg=0x8004, wParam=0x0, lParam=0x23601fe, plResult=0x26f794 | out: plResult=0x26f794) returned 0x1 [0183.841] NtdllDefWindowProc_W () returned 0x0 [0183.841] HeapFree (in: hHeap=0x470000, dwFlags=0x0, lpMem=0x4f3878 | out: hHeap=0x470000) returned 1 [0183.841] GetMessageW (in: lpMsg=0x26fbd4, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x26fbd4) returned 1 [0183.841] TranslateMessage (lpMsg=0x26fbd4) returned 0 [0183.841] DispatchMessageW (lpMsg=0x26fbd4) returned 0x0 [0183.841] GetCurrentThreadId () returned 0x220 [0183.841] GetCurrentThreadId () returned 0x220 [0183.841] GetCurrentThreadId () returned 0x220 [0183.841] GetMessageW (in: lpMsg=0x26fbd4, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x26fbd4) returned 1 [0184.143] TranslateMessage (lpMsg=0x26fbd4) returned 0 [0184.143] DispatchMessageW (lpMsg=0x26fbd4) returned 0x0 [0184.143] GetCapture () returned 0x0 [0184.143] WindowFromPoint (Point=0x238) returned 0x5011e [0184.143] GetWindowLongW (hWnd=0x5011e, nIndex=-21) returned 4858488 [0184.143] GetClientRect (in: hWnd=0x5011e, lpRect=0x26f698 | out: lpRect=0x26f698) returned 1 [0184.143] ScreenToClient (in: hWnd=0x5011e, lpPoint=0x26f6a8 | out: lpPoint=0x26f6a8) returned 1 [0184.143] PtInRect (lprc=0x26f698, pt=0x1fe) returned 1 [0184.143] GetCurrentThreadId () returned 0x220 [0184.143] GetMessageW (in: lpMsg=0x26fbd4, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x26fbd4) returned 1 [0184.455] TranslateMessage (lpMsg=0x26fbd4) returned 0 [0184.455] DispatchMessageW (lpMsg=0x26fbd4) returned 0x0 [0184.455] GetCapture () returned 0x0 [0184.455] WindowFromPoint (Point=0x238) returned 0x5011e [0184.455] GetWindowLongW (hWnd=0x5011e, nIndex=-21) returned 4858488 [0184.455] GetClientRect (in: hWnd=0x5011e, lpRect=0x26f698 | out: lpRect=0x26f698) returned 1 [0184.455] ScreenToClient (in: hWnd=0x5011e, lpPoint=0x26f6a8 | out: lpPoint=0x26f6a8) returned 1 [0184.455] PtInRect (lprc=0x26f698, pt=0x1fe) returned 1 [0184.455] GetCurrentThreadId () returned 0x220 [0184.455] GetMessageW (in: lpMsg=0x26fbd4, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x26fbd4) returned 1 [0184.767] TranslateMessage (lpMsg=0x26fbd4) returned 0 [0184.767] DispatchMessageW (lpMsg=0x26fbd4) returned 0x0 [0184.767] GetCapture () returned 0x0 [0184.767] WindowFromPoint (Point=0x238) returned 0x5011e [0184.767] GetWindowLongW (hWnd=0x5011e, nIndex=-21) returned 4858488 [0184.767] GetClientRect (in: hWnd=0x5011e, lpRect=0x26f698 | out: lpRect=0x26f698) returned 1 [0184.767] ScreenToClient (in: hWnd=0x5011e, lpPoint=0x26f6a8 | out: lpPoint=0x26f6a8) returned 1 [0184.767] PtInRect (lprc=0x26f698, pt=0x1fe) returned 1 [0184.767] GetCurrentThreadId () returned 0x220 [0184.767] GetMessageW (in: lpMsg=0x26fbd4, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x26fbd4) returned 1 [0185.079] TranslateMessage (lpMsg=0x26fbd4) returned 0 [0185.079] DispatchMessageW (lpMsg=0x26fbd4) returned 0x0 [0185.079] GetCapture () returned 0x0 [0185.079] WindowFromPoint (Point=0x238) returned 0x5011e [0185.079] GetWindowLongW (hWnd=0x5011e, nIndex=-21) returned 4858488 [0185.079] GetClientRect (in: hWnd=0x5011e, lpRect=0x26f698 | out: lpRect=0x26f698) returned 1 [0185.079] ScreenToClient (in: hWnd=0x5011e, lpPoint=0x26f6a8 | out: lpPoint=0x26f6a8) returned 1 [0185.079] PtInRect (lprc=0x26f698, pt=0x1fe) returned 1 [0185.079] GetCurrentThreadId () returned 0x220 [0185.079] GetMessageW (in: lpMsg=0x26fbd4, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x26fbd4) returned 1 [0185.391] TranslateMessage (lpMsg=0x26fbd4) returned 0 [0185.391] DispatchMessageW (lpMsg=0x26fbd4) returned 0x0 [0185.391] GetCapture () returned 0x0 [0185.391] WindowFromPoint (Point=0x238) returned 0x5011e [0185.391] GetWindowLongW (hWnd=0x5011e, nIndex=-21) returned 4858488 [0185.391] GetClientRect (in: hWnd=0x5011e, lpRect=0x26f698 | out: lpRect=0x26f698) returned 1 [0185.391] ScreenToClient (in: hWnd=0x5011e, lpPoint=0x26f6a8 | out: lpPoint=0x26f6a8) returned 1 [0185.391] PtInRect (lprc=0x26f698, pt=0x1fe) returned 1 [0185.391] GetCurrentThreadId () returned 0x220 [0185.391] GetMessageW (in: lpMsg=0x26fbd4, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x26fbd4) returned 1 [0185.709] TranslateMessage (lpMsg=0x26fbd4) returned 0 [0185.709] DispatchMessageW (lpMsg=0x26fbd4) returned 0x0 [0185.710] GetCapture () returned 0x0 [0185.710] WindowFromPoint (Point=0x238) returned 0x5011e [0185.710] GetWindowLongW (hWnd=0x5011e, nIndex=-21) returned 4858488 [0185.710] GetClientRect (in: hWnd=0x5011e, lpRect=0x26f698 | out: lpRect=0x26f698) returned 1 [0185.710] ScreenToClient (in: hWnd=0x5011e, lpPoint=0x26f6a8 | out: lpPoint=0x26f6a8) returned 1 [0185.710] PtInRect (lprc=0x26f698, pt=0x1fe) returned 1 [0185.710] GetCurrentThreadId () returned 0x220 [0185.710] GetMessageW (in: lpMsg=0x26fbd4, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x26fbd4) returned 1 [0186.015] TranslateMessage (lpMsg=0x26fbd4) returned 0 [0186.015] DispatchMessageW (lpMsg=0x26fbd4) returned 0x0 [0186.015] GetCapture () returned 0x0 [0186.015] WindowFromPoint (Point=0x238) returned 0x5011e [0186.015] GetWindowLongW (hWnd=0x5011e, nIndex=-21) returned 4858488 [0186.015] GetClientRect (in: hWnd=0x5011e, lpRect=0x26f698 | out: lpRect=0x26f698) returned 1 [0186.015] ScreenToClient (in: hWnd=0x5011e, lpPoint=0x26f6a8 | out: lpPoint=0x26f6a8) returned 1 [0186.015] PtInRect (lprc=0x26f698, pt=0x1fe) returned 1 [0186.015] GetCurrentThreadId () returned 0x220 [0186.015] GetMessageW (in: lpMsg=0x26fbd4, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x26fbd4) returned 1 [0186.327] TranslateMessage (lpMsg=0x26fbd4) returned 0 [0186.327] DispatchMessageW (lpMsg=0x26fbd4) returned 0x0 [0186.327] GetCapture () returned 0x0 [0186.327] WindowFromPoint (Point=0x238) returned 0x5011e [0186.327] GetWindowLongW (hWnd=0x5011e, nIndex=-21) returned 4858488 [0186.327] GetClientRect (in: hWnd=0x5011e, lpRect=0x26f698 | out: lpRect=0x26f698) returned 1 [0186.327] ScreenToClient (in: hWnd=0x5011e, lpPoint=0x26f6a8 | out: lpPoint=0x26f6a8) returned 1 [0186.327] PtInRect (lprc=0x26f698, pt=0x1fe) returned 1 [0186.327] GetCurrentThreadId () returned 0x220 [0186.328] GetMessageW (in: lpMsg=0x26fbd4, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x26fbd4) returned 1 [0186.639] TranslateMessage (lpMsg=0x26fbd4) returned 0 [0186.639] DispatchMessageW (lpMsg=0x26fbd4) returned 0x0 [0186.639] GetCapture () returned 0x0 [0186.639] WindowFromPoint (Point=0x238) returned 0x5011e [0186.639] GetWindowLongW (hWnd=0x5011e, nIndex=-21) returned 4858488 [0186.639] GetClientRect (in: hWnd=0x5011e, lpRect=0x26f698 | out: lpRect=0x26f698) returned 1 [0186.639] ScreenToClient (in: hWnd=0x5011e, lpPoint=0x26f6a8 | out: lpPoint=0x26f6a8) returned 1 [0186.639] PtInRect (lprc=0x26f698, pt=0x1fe) returned 1 [0186.639] GetCurrentThreadId () returned 0x220 [0186.639] GetMessageW (in: lpMsg=0x26fbd4, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x26fbd4) returned 1 [0186.951] TranslateMessage (lpMsg=0x26fbd4) returned 0 [0186.951] DispatchMessageW (lpMsg=0x26fbd4) returned 0x0 [0186.951] GetCapture () returned 0x0 [0186.951] WindowFromPoint (Point=0x238) returned 0x5011e [0186.951] GetWindowLongW (hWnd=0x5011e, nIndex=-21) returned 4858488 [0186.951] GetClientRect (in: hWnd=0x5011e, lpRect=0x26f698 | out: lpRect=0x26f698) returned 1 [0186.951] ScreenToClient (in: hWnd=0x5011e, lpPoint=0x26f6a8 | out: lpPoint=0x26f6a8) returned 1 [0186.951] PtInRect (lprc=0x26f698, pt=0x1fe) returned 1 [0186.951] GetCurrentThreadId () returned 0x220 [0186.951] GetMessageW (in: lpMsg=0x26fbd4, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x26fbd4) returned 1 [0187.263] TranslateMessage (lpMsg=0x26fbd4) returned 0 [0187.263] DispatchMessageW (lpMsg=0x26fbd4) returned 0x0 [0187.263] GetCapture () returned 0x0 [0187.263] WindowFromPoint (Point=0x238) returned 0x5011e [0187.263] GetWindowLongW (hWnd=0x5011e, nIndex=-21) returned 4858488 [0187.263] GetClientRect (in: hWnd=0x5011e, lpRect=0x26f698 | out: lpRect=0x26f698) returned 1 [0187.263] ScreenToClient (in: hWnd=0x5011e, lpPoint=0x26f6a8 | out: lpPoint=0x26f6a8) returned 1 [0187.263] PtInRect (lprc=0x26f698, pt=0x1fe) returned 1 [0187.263] GetCurrentThreadId () returned 0x220 [0187.263] GetMessageW (in: lpMsg=0x26fbd4, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x26fbd4) returned 1 [0187.575] TranslateMessage (lpMsg=0x26fbd4) returned 0 [0187.575] DispatchMessageW (lpMsg=0x26fbd4) returned 0x0 [0187.575] GetCapture () returned 0x0 [0187.575] WindowFromPoint (Point=0x238) returned 0x5011e [0187.575] GetWindowLongW (hWnd=0x5011e, nIndex=-21) returned 4858488 [0187.575] GetClientRect (in: hWnd=0x5011e, lpRect=0x26f698 | out: lpRect=0x26f698) returned 1 [0187.575] ScreenToClient (in: hWnd=0x5011e, lpPoint=0x26f6a8 | out: lpPoint=0x26f6a8) returned 1 [0187.575] PtInRect (lprc=0x26f698, pt=0x1fe) returned 1 [0187.575] GetCurrentThreadId () returned 0x220 [0187.575] GetMessageW (in: lpMsg=0x26fbd4, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x26fbd4) returned 1 [0187.887] TranslateMessage (lpMsg=0x26fbd4) returned 0 [0187.887] DispatchMessageW (lpMsg=0x26fbd4) returned 0x0 [0187.887] GetCapture () returned 0x0 [0187.887] WindowFromPoint (Point=0x238) returned 0x5011e [0187.887] GetWindowLongW (hWnd=0x5011e, nIndex=-21) returned 4858488 [0187.887] GetClientRect (in: hWnd=0x5011e, lpRect=0x26f698 | out: lpRect=0x26f698) returned 1 [0187.887] ScreenToClient (in: hWnd=0x5011e, lpPoint=0x26f6a8 | out: lpPoint=0x26f6a8) returned 1 [0187.887] PtInRect (lprc=0x26f698, pt=0x1fe) returned 1 [0187.887] GetCurrentThreadId () returned 0x220 [0187.887] GetMessageW (in: lpMsg=0x26fbd4, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x26fbd4) returned 1 [0188.199] TranslateMessage (lpMsg=0x26fbd4) returned 0 [0188.199] DispatchMessageW (lpMsg=0x26fbd4) returned 0x0 [0188.199] GetCapture () returned 0x0 [0188.199] WindowFromPoint (Point=0x238) returned 0x5011e [0188.199] GetWindowLongW (hWnd=0x5011e, nIndex=-21) returned 4858488 [0188.199] GetClientRect (in: hWnd=0x5011e, lpRect=0x26f698 | out: lpRect=0x26f698) returned 1 [0188.199] ScreenToClient (in: hWnd=0x5011e, lpPoint=0x26f6a8 | out: lpPoint=0x26f6a8) returned 1 [0188.199] PtInRect (lprc=0x26f698, pt=0x1fe) returned 1 [0188.199] GetCurrentThreadId () returned 0x220 [0188.199] GetMessageW (in: lpMsg=0x26fbd4, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x26fbd4) returned 1 [0188.511] TranslateMessage (lpMsg=0x26fbd4) returned 0 [0188.511] DispatchMessageW (lpMsg=0x26fbd4) returned 0x0 [0188.511] GetCapture () returned 0x0 [0188.511] WindowFromPoint (Point=0x238) returned 0x5011e [0188.511] GetWindowLongW (hWnd=0x5011e, nIndex=-21) returned 4858488 [0188.511] GetClientRect (in: hWnd=0x5011e, lpRect=0x26f698 | out: lpRect=0x26f698) returned 1 [0188.511] ScreenToClient (in: hWnd=0x5011e, lpPoint=0x26f6a8 | out: lpPoint=0x26f6a8) returned 1 [0188.511] PtInRect (lprc=0x26f698, pt=0x1fe) returned 1 [0188.511] GetCurrentThreadId () returned 0x220 [0188.511] GetMessageW (in: lpMsg=0x26fbd4, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x26fbd4) returned 1 [0188.823] TranslateMessage (lpMsg=0x26fbd4) returned 0 [0188.823] DispatchMessageW (lpMsg=0x26fbd4) returned 0x0 [0188.823] GetCapture () returned 0x0 [0188.823] WindowFromPoint (Point=0x238) returned 0x5011e [0188.823] GetWindowLongW (hWnd=0x5011e, nIndex=-21) returned 4858488 [0188.823] GetClientRect (in: hWnd=0x5011e, lpRect=0x26f698 | out: lpRect=0x26f698) returned 1 [0188.823] ScreenToClient (in: hWnd=0x5011e, lpPoint=0x26f6a8 | out: lpPoint=0x26f6a8) returned 1 [0188.823] PtInRect (lprc=0x26f698, pt=0x1fe) returned 1 [0188.823] GetCurrentThreadId () returned 0x220 [0188.823] GetMessageW (in: lpMsg=0x26fbd4, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x26fbd4) returned 1 [0189.135] TranslateMessage (lpMsg=0x26fbd4) returned 0 [0189.135] DispatchMessageW (lpMsg=0x26fbd4) returned 0x0 [0189.135] GetCapture () returned 0x0 [0189.135] WindowFromPoint (Point=0x238) returned 0x5011e [0189.135] GetWindowLongW (hWnd=0x5011e, nIndex=-21) returned 4858488 [0189.135] GetClientRect (in: hWnd=0x5011e, lpRect=0x26f698 | out: lpRect=0x26f698) returned 1 [0189.135] ScreenToClient (in: hWnd=0x5011e, lpPoint=0x26f6a8 | out: lpPoint=0x26f6a8) returned 1 [0189.135] PtInRect (lprc=0x26f698, pt=0x1fe) returned 1 [0189.135] GetCurrentThreadId () returned 0x220 [0189.135] GetMessageW (in: lpMsg=0x26fbd4, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x26fbd4) returned 1 [0189.447] TranslateMessage (lpMsg=0x26fbd4) returned 0 [0189.447] DispatchMessageW (lpMsg=0x26fbd4) returned 0x0 [0189.447] GetCapture () returned 0x0 [0189.447] WindowFromPoint (Point=0x238) returned 0x5011e [0189.447] GetWindowLongW (hWnd=0x5011e, nIndex=-21) returned 4858488 [0189.447] GetClientRect (in: hWnd=0x5011e, lpRect=0x26f698 | out: lpRect=0x26f698) returned 1 [0189.447] ScreenToClient (in: hWnd=0x5011e, lpPoint=0x26f6a8 | out: lpPoint=0x26f6a8) returned 1 [0189.447] PtInRect (lprc=0x26f698, pt=0x1fe) returned 1 [0189.447] GetCurrentThreadId () returned 0x220 [0189.447] GetMessageW (in: lpMsg=0x26fbd4, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x26fbd4) returned 1 [0189.759] TranslateMessage (lpMsg=0x26fbd4) returned 0 [0189.759] DispatchMessageW (lpMsg=0x26fbd4) returned 0x0 [0189.759] GetCapture () returned 0x0 [0189.759] WindowFromPoint (Point=0x238) returned 0x5011e [0189.759] GetWindowLongW (hWnd=0x5011e, nIndex=-21) returned 4858488 [0189.759] GetClientRect (in: hWnd=0x5011e, lpRect=0x26f698 | out: lpRect=0x26f698) returned 1 [0189.759] ScreenToClient (in: hWnd=0x5011e, lpPoint=0x26f6a8 | out: lpPoint=0x26f6a8) returned 1 [0189.759] PtInRect (lprc=0x26f698, pt=0x1fe) returned 1 [0189.759] GetCurrentThreadId () returned 0x220 [0189.759] GetMessageW (in: lpMsg=0x26fbd4, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x26fbd4) returned 1 [0190.071] TranslateMessage (lpMsg=0x26fbd4) returned 0 [0190.071] DispatchMessageW (lpMsg=0x26fbd4) returned 0x0 [0190.071] GetCapture () returned 0x0 [0190.071] WindowFromPoint (Point=0x238) returned 0x5011e [0190.071] GetWindowLongW (hWnd=0x5011e, nIndex=-21) returned 4858488 [0190.071] GetClientRect (in: hWnd=0x5011e, lpRect=0x26f698 | out: lpRect=0x26f698) returned 1 [0190.071] ScreenToClient (in: hWnd=0x5011e, lpPoint=0x26f6a8 | out: lpPoint=0x26f6a8) returned 1 [0190.071] PtInRect (lprc=0x26f698, pt=0x1fe) returned 1 [0190.071] GetCurrentThreadId () returned 0x220 [0190.071] GetMessageW (in: lpMsg=0x26fbd4, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x26fbd4) returned 1 [0190.383] TranslateMessage (lpMsg=0x26fbd4) returned 0 [0190.383] DispatchMessageW (lpMsg=0x26fbd4) returned 0x0 [0190.383] GetCapture () returned 0x0 [0190.383] WindowFromPoint (Point=0x238) returned 0x5011e [0190.383] GetWindowLongW (hWnd=0x5011e, nIndex=-21) returned 4858488 [0190.383] GetClientRect (in: hWnd=0x5011e, lpRect=0x26f698 | out: lpRect=0x26f698) returned 1 [0190.383] ScreenToClient (in: hWnd=0x5011e, lpPoint=0x26f6a8 | out: lpPoint=0x26f6a8) returned 1 [0190.383] PtInRect (lprc=0x26f698, pt=0x1fe) returned 1 [0190.383] GetCurrentThreadId () returned 0x220 [0190.383] GetMessageW (in: lpMsg=0x26fbd4, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x26fbd4) returned 1 [0190.702] TranslateMessage (lpMsg=0x26fbd4) returned 0 [0190.702] DispatchMessageW (lpMsg=0x26fbd4) returned 0x0 [0190.702] GetCapture () returned 0x0 [0190.703] WindowFromPoint (Point=0x238) returned 0x5011e [0190.703] GetWindowLongW (hWnd=0x5011e, nIndex=-21) returned 4858488 [0190.703] GetClientRect (in: hWnd=0x5011e, lpRect=0x26f698 | out: lpRect=0x26f698) returned 1 [0190.703] ScreenToClient (in: hWnd=0x5011e, lpPoint=0x26f6a8 | out: lpPoint=0x26f6a8) returned 1 [0190.703] PtInRect (lprc=0x26f698, pt=0x1fe) returned 1 [0190.703] GetCurrentThreadId () returned 0x220 [0190.703] GetMessageW (in: lpMsg=0x26fbd4, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x26fbd4) returned 1 [0191.007] TranslateMessage (lpMsg=0x26fbd4) returned 0 [0191.007] DispatchMessageW (lpMsg=0x26fbd4) returned 0x0 [0191.007] GetCapture () returned 0x0 [0191.007] WindowFromPoint (Point=0x238) returned 0x5011e [0191.007] GetWindowLongW (hWnd=0x5011e, nIndex=-21) returned 4858488 [0191.007] GetClientRect (in: hWnd=0x5011e, lpRect=0x26f698 | out: lpRect=0x26f698) returned 1 [0191.007] ScreenToClient (in: hWnd=0x5011e, lpPoint=0x26f6a8 | out: lpPoint=0x26f6a8) returned 1 [0191.007] PtInRect (lprc=0x26f698, pt=0x1fe) returned 1 [0191.007] GetCurrentThreadId () returned 0x220 [0191.007] GetMessageW (in: lpMsg=0x26fbd4, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x26fbd4) returned 1 [0191.322] TranslateMessage (lpMsg=0x26fbd4) returned 0 [0191.322] DispatchMessageW (lpMsg=0x26fbd4) returned 0x0 [0191.322] GetCapture () returned 0x0 [0191.323] WindowFromPoint (Point=0x238) returned 0x5011e [0191.323] GetWindowLongW (hWnd=0x5011e, nIndex=-21) returned 4858488 [0191.323] GetClientRect (in: hWnd=0x5011e, lpRect=0x26f698 | out: lpRect=0x26f698) returned 1 [0191.323] ScreenToClient (in: hWnd=0x5011e, lpPoint=0x26f6a8 | out: lpPoint=0x26f6a8) returned 1 [0191.323] PtInRect (lprc=0x26f698, pt=0x1fe) returned 1 [0191.323] GetCurrentThreadId () returned 0x220 [0191.323] GetMessageW (in: lpMsg=0x26fbd4, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x26fbd4) returned 1 [0191.631] TranslateMessage (lpMsg=0x26fbd4) returned 0 [0191.631] DispatchMessageW (lpMsg=0x26fbd4) returned 0x0 [0191.631] GetCapture () returned 0x0 [0191.631] WindowFromPoint (Point=0x238) returned 0x5011e [0191.631] GetWindowLongW (hWnd=0x5011e, nIndex=-21) returned 4858488 [0191.631] GetClientRect (in: hWnd=0x5011e, lpRect=0x26f698 | out: lpRect=0x26f698) returned 1 [0191.631] ScreenToClient (in: hWnd=0x5011e, lpPoint=0x26f6a8 | out: lpPoint=0x26f6a8) returned 1 [0191.631] PtInRect (lprc=0x26f698, pt=0x1fe) returned 1 [0191.631] GetCurrentThreadId () returned 0x220 [0191.631] GetMessageW (in: lpMsg=0x26fbd4, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x26fbd4) returned 1 [0191.943] TranslateMessage (lpMsg=0x26fbd4) returned 0 [0191.943] DispatchMessageW (lpMsg=0x26fbd4) returned 0x0 [0191.943] GetCapture () returned 0x0 [0191.943] WindowFromPoint (Point=0x238) returned 0x5011e [0191.943] GetWindowLongW (hWnd=0x5011e, nIndex=-21) returned 4858488 [0191.943] GetClientRect (in: hWnd=0x5011e, lpRect=0x26f698 | out: lpRect=0x26f698) returned 1 [0191.943] ScreenToClient (in: hWnd=0x5011e, lpPoint=0x26f6a8 | out: lpPoint=0x26f6a8) returned 1 [0191.943] PtInRect (lprc=0x26f698, pt=0x1fe) returned 1 [0191.943] GetCurrentThreadId () returned 0x220 [0191.943] GetMessageW (in: lpMsg=0x26fbd4, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x26fbd4) returned 1 [0192.255] TranslateMessage (lpMsg=0x26fbd4) returned 0 [0192.255] DispatchMessageW (lpMsg=0x26fbd4) returned 0x0 [0192.255] GetCapture () returned 0x0 [0192.255] WindowFromPoint (Point=0x238) returned 0x5011e [0192.255] GetWindowLongW (hWnd=0x5011e, nIndex=-21) returned 4858488 [0192.255] GetClientRect (in: hWnd=0x5011e, lpRect=0x26f698 | out: lpRect=0x26f698) returned 1 [0192.255] ScreenToClient (in: hWnd=0x5011e, lpPoint=0x26f6a8 | out: lpPoint=0x26f6a8) returned 1 [0192.255] PtInRect (lprc=0x26f698, pt=0x1fe) returned 1 [0192.255] GetCurrentThreadId () returned 0x220 [0192.255] GetMessageW (in: lpMsg=0x26fbd4, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x26fbd4) returned 1 [0192.738] TranslateMessage (lpMsg=0x26fbd4) returned 0 [0192.738] DispatchMessageW (lpMsg=0x26fbd4) returned 0x0 [0192.738] GetCapture () returned 0x0 [0192.738] WindowFromPoint (Point=0x238) returned 0x5011e [0192.738] GetWindowLongW (hWnd=0x5011e, nIndex=-21) returned 4858488 [0192.738] GetClientRect (in: hWnd=0x5011e, lpRect=0x26f698 | out: lpRect=0x26f698) returned 1 [0192.738] ScreenToClient (in: hWnd=0x5011e, lpPoint=0x26f6a8 | out: lpPoint=0x26f6a8) returned 1 [0192.738] PtInRect (lprc=0x26f698, pt=0x1fe) returned 1 [0192.738] GetCurrentThreadId () returned 0x220 [0192.739] GetMessageW (in: lpMsg=0x26fbd4, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x26fbd4) returned 1 [0193.050] TranslateMessage (lpMsg=0x26fbd4) returned 0 [0193.050] DispatchMessageW (lpMsg=0x26fbd4) returned 0x0 [0193.050] GetCapture () returned 0x0 [0193.050] WindowFromPoint (Point=0x238) returned 0x5011e [0193.050] GetWindowLongW (hWnd=0x5011e, nIndex=-21) returned 4858488 [0193.050] GetClientRect (in: hWnd=0x5011e, lpRect=0x26f698 | out: lpRect=0x26f698) returned 1 [0193.050] ScreenToClient (in: hWnd=0x5011e, lpPoint=0x26f6a8 | out: lpPoint=0x26f6a8) returned 1 [0193.050] PtInRect (lprc=0x26f698, pt=0x1fe) returned 1 [0193.050] GetCurrentThreadId () returned 0x220 [0193.051] GetMessageW (in: lpMsg=0x26fbd4, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x26fbd4) returned 1 [0193.363] TranslateMessage (lpMsg=0x26fbd4) returned 0 [0193.363] DispatchMessageW (lpMsg=0x26fbd4) returned 0x0 [0193.363] GetCapture () returned 0x0 [0193.363] WindowFromPoint (Point=0x238) returned 0x5011e [0193.363] GetWindowLongW (hWnd=0x5011e, nIndex=-21) returned 4858488 [0193.363] GetClientRect (in: hWnd=0x5011e, lpRect=0x26f698 | out: lpRect=0x26f698) returned 1 [0193.363] ScreenToClient (in: hWnd=0x5011e, lpPoint=0x26f6a8 | out: lpPoint=0x26f6a8) returned 1 [0193.363] PtInRect (lprc=0x26f698, pt=0x1fe) returned 1 [0193.363] GetCurrentThreadId () returned 0x220 [0193.363] GetMessageW (in: lpMsg=0x26fbd4, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x26fbd4) returned 1 [0193.674] TranslateMessage (lpMsg=0x26fbd4) returned 0 [0193.674] DispatchMessageW (lpMsg=0x26fbd4) returned 0x0 [0193.674] GetCapture () returned 0x0 [0193.674] WindowFromPoint (Point=0x238) returned 0x5011e [0193.674] GetWindowLongW (hWnd=0x5011e, nIndex=-21) returned 4858488 [0193.674] GetClientRect (in: hWnd=0x5011e, lpRect=0x26f698 | out: lpRect=0x26f698) returned 1 [0193.675] ScreenToClient (in: hWnd=0x5011e, lpPoint=0x26f6a8 | out: lpPoint=0x26f6a8) returned 1 [0193.675] PtInRect (lprc=0x26f698, pt=0x1fe) returned 1 [0193.675] GetCurrentThreadId () returned 0x220 [0193.675] GetMessageW (in: lpMsg=0x26fbd4, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x26fbd4) returned 1 [0193.880] GetWindowLongW (hWnd=0x5011e, nIndex=-21) returned 4858488 [0193.880] GetClientRect (in: hWnd=0x5011e, lpRect=0x26f878 | out: lpRect=0x26f878) returned 1 [0193.880] ScreenToClient (in: hWnd=0x5011e, lpPoint=0x26f888 | out: lpPoint=0x26f888) returned 1 [0193.880] PtInRect (lprc=0x26f878, pt=0x39b) returned 1 [0193.880] GetCurrentThreadId () returned 0x220 [0193.880] GetWindowLongW (hWnd=0x5011e, nIndex=-21) returned 4858488 [0193.880] ScreenToClient (in: hWnd=0x5011e, lpPoint=0x26f8f8 | out: lpPoint=0x26f8f8) returned 1 [0193.880] GetMessageTime () returned 255202 [0193.880] GetMessagePos () returned 0x2860238 [0193.880] GetCapture () returned 0x0 [0193.880] IntersectRect (in: lprcDst=0x26f2e8, lprcSrc1=0x26f2e8, lprcSrc2=0x26f378 | out: lprcDst=0x26f2e8) returned 1 [0193.880] IntersectRect (in: lprcDst=0x26f0a4, lprcSrc1=0x26f0a4, lprcSrc2=0x26f074 | out: lprcDst=0x26f0a4) returned 1 [0193.880] IntersectRect (in: lprcDst=0x26f388, lprcSrc1=0x26f388, lprcSrc2=0x26f094 | out: lprcDst=0x26f388) returned 1 [0193.881] HeapFree (in: hHeap=0x470000, dwFlags=0x0, lpMem=0x0 | out: hHeap=0x470000) returned 1 [0193.881] RtlAllocateHeap (HeapHandle=0x470000, Flags=0x0, Size=0x24) returned 0x4e77b8 [0193.881] IntersectRect (in: lprcDst=0x26f388, lprcSrc1=0x26f388, lprcSrc2=0x26f0b4 | out: lprcDst=0x26f388) returned 1 [0193.881] IntersectRect (in: lprcDst=0x26ee78, lprcSrc1=0x26ee78, lprcSrc2=0x26f378 | out: lprcDst=0x26ee78) returned 1 [0193.881] IntersectRect (in: lprcDst=0x26ee78, lprcSrc1=0x26ee78, lprcSrc2=0x26f378 | out: lprcDst=0x26ee78) returned 1 [0193.881] IntersectRect (in: lprcDst=0x26eab0, lprcSrc1=0x26eab0, lprcSrc2=0x26ea80 | out: lprcDst=0x26eab0) returned 1 [0193.881] IntersectRect (in: lprcDst=0x26f410, lprcSrc1=0x26f410, lprcSrc2=0x26eaa0 | out: lprcDst=0x26f410) returned 1 [0193.881] IntersectRect (in: lprcDst=0x26ec34, lprcSrc1=0x26ec34, lprcSrc2=0x26ec04 | out: lprcDst=0x26ec34) returned 1 [0193.881] IntersectRect (in: lprcDst=0x26f388, lprcSrc1=0x26f388, lprcSrc2=0x26ec24 | out: lprcDst=0x26f388) returned 1 [0193.881] HeapFree (in: hHeap=0x470000, dwFlags=0x0, lpMem=0x0 | out: hHeap=0x470000) returned 1 [0193.881] RtlAllocateHeap (HeapHandle=0x470000, Flags=0x0, Size=0x24) returned 0x4e7788 [0193.881] IntersectRect (in: lprcDst=0x26ea70, lprcSrc1=0x26ea70, lprcSrc2=0x26f378 | out: lprcDst=0x26ea70) returned 1 [0193.881] IntersectRect (in: lprcDst=0x26f388, lprcSrc1=0x26f388, lprcSrc2=0x26ec44 | out: lprcDst=0x26f388) returned 1 [0193.881] IntersectRect (in: lprcDst=0x26ea08, lprcSrc1=0x26ea08, lprcSrc2=0x26f378 | out: lprcDst=0x26ea08) returned 1 [0193.881] IntersectRect (in: lprcDst=0x26ea08, lprcSrc1=0x26ea08, lprcSrc2=0x26f378 | out: lprcDst=0x26ea08) returned 1 [0193.881] IntersectRect (in: lprcDst=0x26e794, lprcSrc1=0x26e794, lprcSrc2=0x26e64c | out: lprcDst=0x26e794) returned 1 [0193.881] IntersectRect (in: lprcDst=0x26f388, lprcSrc1=0x26f388, lprcSrc2=0x26e7b4 | out: lprcDst=0x26f388) returned 1 [0193.881] HeapFree (in: hHeap=0x470000, dwFlags=0x0, lpMem=0x0 | out: hHeap=0x470000) returned 1 [0193.881] RtlAllocateHeap (HeapHandle=0x470000, Flags=0x0, Size=0x24) returned 0x4e7848 [0193.881] IntersectRect (in: lprcDst=0x26f388, lprcSrc1=0x26f388, lprcSrc2=0x26e7d4 | out: lprcDst=0x26f388) returned 1 [0193.881] IntersectRect (in: lprcDst=0x26e598, lprcSrc1=0x26e598, lprcSrc2=0x26f378 | out: lprcDst=0x26e598) returned 1 [0193.881] IntersectRect (in: lprcDst=0x26e598, lprcSrc1=0x26e598, lprcSrc2=0x26f378 | out: lprcDst=0x26e598) returned 1 [0193.881] IntersectRect (in: lprcDst=0x26e324, lprcSrc1=0x26e324, lprcSrc2=0x26e1dc | out: lprcDst=0x26e324) returned 1 [0193.881] IntersectRect (in: lprcDst=0x26f388, lprcSrc1=0x26f388, lprcSrc2=0x26e344 | out: lprcDst=0x26f388) returned 1 [0193.881] HeapFree (in: hHeap=0x470000, dwFlags=0x0, lpMem=0x0 | out: hHeap=0x470000) returned 1 [0193.881] RtlAllocateHeap (HeapHandle=0x470000, Flags=0x0, Size=0x24) returned 0x4e7878 [0193.881] IntersectRect (in: lprcDst=0x26f388, lprcSrc1=0x26f388, lprcSrc2=0x26e364 | out: lprcDst=0x26f388) returned 1 [0193.881] IntersectRect (in: lprcDst=0x26e128, lprcSrc1=0x26e128, lprcSrc2=0x26f378 | out: lprcDst=0x26e128) returned 1 [0193.881] IntersectRect (in: lprcDst=0x26e128, lprcSrc1=0x26e128, lprcSrc2=0x26f378 | out: lprcDst=0x26e128) returned 0 [0193.881] IntersectRect (in: lprcDst=0x26e128, lprcSrc1=0x26e128, lprcSrc2=0x26f378 | out: lprcDst=0x26e128) returned 1 [0193.881] IntersectRect (in: lprcDst=0x26e128, lprcSrc1=0x26e128, lprcSrc2=0x26f378 | out: lprcDst=0x26e128) returned 1 [0193.881] IntersectRect (in: lprcDst=0x26e128, lprcSrc1=0x26e128, lprcSrc2=0x26f378 | out: lprcDst=0x26e128) returned 1 [0193.881] IntersectRect (in: lprcDst=0x26e128, lprcSrc1=0x26e128, lprcSrc2=0x26f378 | out: lprcDst=0x26e128) returned 1 [0193.881] IntersectRect (in: lprcDst=0x26df6c, lprcSrc1=0x26df6c, lprcSrc2=0x26de08 | out: lprcDst=0x26df6c) returned 1 [0193.881] HeapFree (in: hHeap=0x470000, dwFlags=0x0, lpMem=0x0 | out: hHeap=0x470000) returned 1 [0193.881] RtlAllocateHeap (HeapHandle=0x470000, Flags=0x0, Size=0x24) returned 0x4e78a8 [0193.881] IntersectRect (in: lprcDst=0x26f388, lprcSrc1=0x26f388, lprcSrc2=0x26df5c | out: lprcDst=0x26f388) returned 1 [0193.882] IntersectRect (in: lprcDst=0x26de18, lprcSrc1=0x26de18, lprcSrc2=0x26f378 | out: lprcDst=0x26de18) returned 1 [0193.882] IntersectRect (in: lprcDst=0x26f388, lprcSrc1=0x26f388, lprcSrc2=0x26df7c | out: lprcDst=0x26f388) returned 1 [0193.882] PostMessageW (hWnd=0x7011a, Msg=0x8002, wParam=0x0, lParam=0x0) returned 1 [0193.882] LsSetDoc () returned 0x0 [0193.882] LsCreateLine () returned 0x0 [0193.882] HeapFree (in: hHeap=0x470000, dwFlags=0x0, lpMem=0x0 | out: hHeap=0x470000) returned 1 [0193.883] LsDestroyLine () returned 0x0 [0193.883] HeapFree (in: hHeap=0x470000, dwFlags=0x0, lpMem=0x0 | out: hHeap=0x470000) returned 1 [0193.883] PtInRect (lprc=0x26dcbc, pt=0x14d66) returned 1 [0193.883] HeapFree (in: hHeap=0x470000, dwFlags=0x0, lpMem=0x4e78a8 | out: hHeap=0x470000) returned 1 [0193.883] IntersectRect (in: lprcDst=0x26e1e8, lprcSrc1=0x26e1e8, lprcSrc2=0x26f378 | out: lprcDst=0x26e1e8) returned 1 [0193.883] HeapFree (in: hHeap=0x470000, dwFlags=0x0, lpMem=0x4e7878 | out: hHeap=0x470000) returned 1 [0193.883] HeapFree (in: hHeap=0x470000, dwFlags=0x0, lpMem=0x4e7848 | out: hHeap=0x470000) returned 1 [0193.883] HeapFree (in: hHeap=0x470000, dwFlags=0x0, lpMem=0x4e7788 | out: hHeap=0x470000) returned 1 [0193.883] HeapFree (in: hHeap=0x470000, dwFlags=0x0, lpMem=0x4e77b8 | out: hHeap=0x470000) returned 1 [0193.883] HeapFree (in: hHeap=0x470000, dwFlags=0x0, lpMem=0x0 | out: hHeap=0x470000) returned 1 [0193.883] PtInRect (lprc=0x26f524, pt=0x14d66) returned 1 [0193.883] LoadCursorA (hInstance=0x0, lpCursorName=0x7f00) returned 0x10003 [0193.883] GetCursor () returned 0x10005 [0193.883] ShowCursor (bShow=0) returned -1 [0193.884] SetCursor (hCursor=0x10003) returned 0x10005 [0193.884] ShowCursor (bShow=1) returned 0 [0193.884] TranslateMessage (lpMsg=0x26fbd4) returned 0 [0193.884] DispatchMessageW (lpMsg=0x26fbd4) returned 0x0 [0193.884] GetWindowLongW (hWnd=0x5011e, nIndex=-21) returned 4858488 [0193.884] GetMessageTime () returned 255404 [0193.884] GetMessagePos () returned 0x13e03d5 [0193.884] GetCapture () returned 0x0 [0193.884] GetCurrentThreadId () returned 0x220 [0193.884] GetCurrentThreadId () returned 0x220 [0193.884] GetCurrentThreadId () returned 0x220 [0193.884] IntersectRect (in: lprcDst=0x26f370, lprcSrc1=0x26f370, lprcSrc2=0x26f400 | out: lprcDst=0x26f370) returned 1 [0193.884] IntersectRect (in: lprcDst=0x26f12c, lprcSrc1=0x26f12c, lprcSrc2=0x26f0fc | out: lprcDst=0x26f12c) returned 1 [0193.884] IntersectRect (in: lprcDst=0x26f410, lprcSrc1=0x26f410, lprcSrc2=0x26f11c | out: lprcDst=0x26f410) returned 1 [0193.884] HeapFree (in: hHeap=0x470000, dwFlags=0x0, lpMem=0x0 | out: hHeap=0x470000) returned 1 [0193.885] RtlAllocateHeap (HeapHandle=0x470000, Flags=0x0, Size=0x24) returned 0x4e77b8 [0193.885] IntersectRect (in: lprcDst=0x26f410, lprcSrc1=0x26f410, lprcSrc2=0x26f13c | out: lprcDst=0x26f410) returned 1 [0193.885] IntersectRect (in: lprcDst=0x26ef00, lprcSrc1=0x26ef00, lprcSrc2=0x26f400 | out: lprcDst=0x26ef00) returned 1 [0193.885] IntersectRect (in: lprcDst=0x26ef00, lprcSrc1=0x26ef00, lprcSrc2=0x26f400 | out: lprcDst=0x26ef00) returned 1 [0193.885] IntersectRect (in: lprcDst=0x26eb38, lprcSrc1=0x26eb38, lprcSrc2=0x26eb08 | out: lprcDst=0x26eb38) returned 1 [0193.885] IntersectRect (in: lprcDst=0x26f498, lprcSrc1=0x26f498, lprcSrc2=0x26eb28 | out: lprcDst=0x26f498) returned 1 [0193.885] IntersectRect (in: lprcDst=0x26ecbc, lprcSrc1=0x26ecbc, lprcSrc2=0x26ec8c | out: lprcDst=0x26ecbc) returned 1 [0193.885] IntersectRect (in: lprcDst=0x26f410, lprcSrc1=0x26f410, lprcSrc2=0x26ecac | out: lprcDst=0x26f410) returned 1 [0193.885] HeapFree (in: hHeap=0x470000, dwFlags=0x0, lpMem=0x0 | out: hHeap=0x470000) returned 1 [0193.885] RtlAllocateHeap (HeapHandle=0x470000, Flags=0x0, Size=0x24) returned 0x4e7788 [0193.885] IntersectRect (in: lprcDst=0x26eaf8, lprcSrc1=0x26eaf8, lprcSrc2=0x26f400 | out: lprcDst=0x26eaf8) returned 1 [0193.885] IntersectRect (in: lprcDst=0x26f410, lprcSrc1=0x26f410, lprcSrc2=0x26eccc | out: lprcDst=0x26f410) returned 1 [0193.885] IntersectRect (in: lprcDst=0x26ea90, lprcSrc1=0x26ea90, lprcSrc2=0x26f400 | out: lprcDst=0x26ea90) returned 1 [0193.885] IntersectRect (in: lprcDst=0x26ea90, lprcSrc1=0x26ea90, lprcSrc2=0x26f400 | out: lprcDst=0x26ea90) returned 1 [0193.885] IntersectRect (in: lprcDst=0x26e81c, lprcSrc1=0x26e81c, lprcSrc2=0x26e6d4 | out: lprcDst=0x26e81c) returned 1 [0193.885] IntersectRect (in: lprcDst=0x26f410, lprcSrc1=0x26f410, lprcSrc2=0x26e83c | out: lprcDst=0x26f410) returned 1 [0193.885] HeapFree (in: hHeap=0x470000, dwFlags=0x0, lpMem=0x0 | out: hHeap=0x470000) returned 1 [0193.885] RtlAllocateHeap (HeapHandle=0x470000, Flags=0x0, Size=0x24) returned 0x4e7848 [0193.885] IntersectRect (in: lprcDst=0x26f410, lprcSrc1=0x26f410, lprcSrc2=0x26e85c | out: lprcDst=0x26f410) returned 1 [0193.885] IntersectRect (in: lprcDst=0x26e620, lprcSrc1=0x26e620, lprcSrc2=0x26f400 | out: lprcDst=0x26e620) returned 1 [0193.885] IntersectRect (in: lprcDst=0x26e620, lprcSrc1=0x26e620, lprcSrc2=0x26f400 | out: lprcDst=0x26e620) returned 1 [0193.885] IntersectRect (in: lprcDst=0x26e3ac, lprcSrc1=0x26e3ac, lprcSrc2=0x26e264 | out: lprcDst=0x26e3ac) returned 1 [0193.885] IntersectRect (in: lprcDst=0x26f410, lprcSrc1=0x26f410, lprcSrc2=0x26e3cc | out: lprcDst=0x26f410) returned 1 [0193.885] HeapFree (in: hHeap=0x470000, dwFlags=0x0, lpMem=0x0 | out: hHeap=0x470000) returned 1 [0193.885] RtlAllocateHeap (HeapHandle=0x470000, Flags=0x0, Size=0x24) returned 0x4e7878 [0193.885] IntersectRect (in: lprcDst=0x26f410, lprcSrc1=0x26f410, lprcSrc2=0x26e3ec | out: lprcDst=0x26f410) returned 1 [0193.885] IntersectRect (in: lprcDst=0x26e1b0, lprcSrc1=0x26e1b0, lprcSrc2=0x26f400 | out: lprcDst=0x26e1b0) returned 1 [0193.885] IntersectRect (in: lprcDst=0x26e1b0, lprcSrc1=0x26e1b0, lprcSrc2=0x26f400 | out: lprcDst=0x26e1b0) returned 0 [0193.885] IntersectRect (in: lprcDst=0x26e1b0, lprcSrc1=0x26e1b0, lprcSrc2=0x26f400 | out: lprcDst=0x26e1b0) returned 1 [0193.885] IntersectRect (in: lprcDst=0x26e1b0, lprcSrc1=0x26e1b0, lprcSrc2=0x26f400 | out: lprcDst=0x26e1b0) returned 1 [0193.885] IntersectRect (in: lprcDst=0x26e1b0, lprcSrc1=0x26e1b0, lprcSrc2=0x26f400 | out: lprcDst=0x26e1b0) returned 1 [0193.885] IntersectRect (in: lprcDst=0x26e1b0, lprcSrc1=0x26e1b0, lprcSrc2=0x26f400 | out: lprcDst=0x26e1b0) returned 1 [0193.885] IntersectRect (in: lprcDst=0x26dff4, lprcSrc1=0x26dff4, lprcSrc2=0x26de90 | out: lprcDst=0x26dff4) returned 1 [0193.885] HeapFree (in: hHeap=0x470000, dwFlags=0x0, lpMem=0x0 | out: hHeap=0x470000) returned 1 [0193.885] RtlAllocateHeap (HeapHandle=0x470000, Flags=0x0, Size=0x24) returned 0x4e78a8 [0193.885] IntersectRect (in: lprcDst=0x26f410, lprcSrc1=0x26f410, lprcSrc2=0x26dfe4 | out: lprcDst=0x26f410) returned 1 [0193.885] IntersectRect (in: lprcDst=0x26dea0, lprcSrc1=0x26dea0, lprcSrc2=0x26f400 | out: lprcDst=0x26dea0) returned 1 [0193.885] IntersectRect (in: lprcDst=0x26f410, lprcSrc1=0x26f410, lprcSrc2=0x26e004 | out: lprcDst=0x26f410) returned 1 [0193.886] LsSetDoc () returned 0x0 [0193.886] LsCreateLine () returned 0x0 [0193.886] HeapFree (in: hHeap=0x470000, dwFlags=0x0, lpMem=0x0 | out: hHeap=0x470000) returned 1 [0193.886] LsDestroyLine () returned 0x0 [0193.886] HeapFree (in: hHeap=0x470000, dwFlags=0x0, lpMem=0x0 | out: hHeap=0x470000) returned 1 [0193.886] PtInRect (lprc=0x26dd44, pt=0x14d66) returned 1 [0193.886] HeapFree (in: hHeap=0x470000, dwFlags=0x0, lpMem=0x4e78a8 | out: hHeap=0x470000) returned 1 [0193.886] IntersectRect (in: lprcDst=0x26e270, lprcSrc1=0x26e270, lprcSrc2=0x26f400 | out: lprcDst=0x26e270) returned 1 [0193.886] HeapFree (in: hHeap=0x470000, dwFlags=0x0, lpMem=0x4e7878 | out: hHeap=0x470000) returned 1 [0193.886] HeapFree (in: hHeap=0x470000, dwFlags=0x0, lpMem=0x4e7848 | out: hHeap=0x470000) returned 1 [0193.886] HeapFree (in: hHeap=0x470000, dwFlags=0x0, lpMem=0x4e7788 | out: hHeap=0x470000) returned 1 [0193.887] HeapFree (in: hHeap=0x470000, dwFlags=0x0, lpMem=0x4e77b8 | out: hHeap=0x470000) returned 1 [0193.887] HeapFree (in: hHeap=0x470000, dwFlags=0x0, lpMem=0x0 | out: hHeap=0x470000) returned 1 [0193.887] GetMessageTime () returned 255404 [0193.887] GetMessagePos () returned 0x13e03d5 [0193.887] KillTimer (hWnd=0x7011a, uIDEvent=0x2002) returned 1 [0193.887] GetCapture () returned 0x0 [0193.887] ClientToScreen (in: hWnd=0x5011e, lpPoint=0x26f69c | out: lpPoint=0x26f69c) returned 1 [0193.887] RtlAllocateHeap (HeapHandle=0x470000, Flags=0x0, Size=0xf8) returned 0x4f3878 [0193.887] GetCurrentThreadId () returned 0x220 [0193.887] ClientToScreen (in: hWnd=0x5011e, lpPoint=0x26f6a0 | out: lpPoint=0x26f6a0) returned 1 [0193.887] RtlAllocateHeap (HeapHandle=0x470000, Flags=0x0, Size=0xf8) returned 0x4f3978 [0193.887] HeapFree (in: hHeap=0x470000, dwFlags=0x0, lpMem=0x4f3978 | out: hHeap=0x470000) returned 1 [0193.887] CActiveIMMAppEx_Trident:IActiveIMMApp:OnDefWindowProc (in: This=0x4b1068, hWnd=0x5011e, msg=0x2a3, wParam=0x0, lParam=0xee039b, plResult=0x26f794 | out: plResult=0x26f794) returned 0x1 [0193.887] NtdllDefWindowProc_W () returned 0x0 [0193.887] HeapFree (in: hHeap=0x470000, dwFlags=0x0, lpMem=0x4f3878 | out: hHeap=0x470000) returned 1 [0193.888] SetTimer (hWnd=0x7011a, nIDEvent=0x2003, uElapse=0x12c, lpTimerFunc=0x0) returned 0x2003 [0193.888] ClientToScreen (in: hWnd=0x5011e, lpPoint=0x26f69c | out: lpPoint=0x26f69c) returned 1 [0193.888] RtlAllocateHeap (HeapHandle=0x470000, Flags=0x0, Size=0xf8) returned 0x4f3878 [0193.888] GetCurrentThreadId () returned 0x220 [0193.888] CActiveIMMAppEx_Trident:IActiveIMMApp:OnDefWindowProc (in: This=0x4b1068, hWnd=0x5011e, msg=0x200, wParam=0x0, lParam=0xee039b, plResult=0x26f794 | out: plResult=0x26f794) returned 0x1 [0193.888] NtdllDefWindowProc_W () returned 0x0 [0193.888] HeapFree (in: hHeap=0x470000, dwFlags=0x0, lpMem=0x4f3878 | out: hHeap=0x470000) returned 1 [0193.888] GetMessageTime () returned 255404 [0193.888] GetMessagePos () returned 0x13e03d5 [0193.888] GetCapture () returned 0x0 [0193.888] ClientToScreen (in: hWnd=0x5011e, lpPoint=0x26f69c | out: lpPoint=0x26f69c) returned 1 [0193.889] RtlAllocateHeap (HeapHandle=0x470000, Flags=0x0, Size=0xf8) returned 0x4f3878 [0193.889] GetCurrentThreadId () returned 0x220 [0193.889] ClientToScreen (in: hWnd=0x5011e, lpPoint=0x26f6a0 | out: lpPoint=0x26f6a0) returned 1 [0193.889] RtlAllocateHeap (HeapHandle=0x470000, Flags=0x0, Size=0xf8) returned 0x4f3978 [0193.889] HeapFree (in: hHeap=0x470000, dwFlags=0x0, lpMem=0x4f3978 | out: hHeap=0x470000) returned 1 [0193.889] HeapFree (in: hHeap=0x470000, dwFlags=0x0, lpMem=0x4ab950 | out: hHeap=0x470000) returned 1 [0193.889] RtlAllocateHeap (HeapHandle=0x470000, Flags=0x0, Size=0x280) returned 0x4b4988 [0193.889] CActiveIMMAppEx_Trident:IActiveIMMApp:OnDefWindowProc (in: This=0x4b1068, hWnd=0x5011e, msg=0x8004, wParam=0x0, lParam=0xee039b, plResult=0x26f794 | out: plResult=0x26f794) returned 0x1 [0193.889] NtdllDefWindowProc_W () returned 0x0 [0193.889] HeapFree (in: hHeap=0x470000, dwFlags=0x0, lpMem=0x4f3878 | out: hHeap=0x470000) returned 1 [0193.889] GetMessageW (in: lpMsg=0x26fbd4, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x26fbd4) returned 1 [0193.889] TranslateMessage (lpMsg=0x26fbd4) returned 0 [0193.889] DispatchMessageW (lpMsg=0x26fbd4) returned 0x0 [0193.889] GetCurrentThreadId () returned 0x220 [0193.889] GetCurrentThreadId () returned 0x220 [0193.889] GetCurrentThreadId () returned 0x220 [0193.889] GetMessageW (in: lpMsg=0x26fbd4, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x26fbd4) returned 1 [0194.189] TranslateMessage (lpMsg=0x26fbd4) returned 0 [0194.189] DispatchMessageW (lpMsg=0x26fbd4) returned 0x0 [0194.189] GetCapture () returned 0x0 [0194.189] WindowFromPoint (Point=0x3d5) returned 0x5011e [0194.189] GetWindowLongW (hWnd=0x5011e, nIndex=-21) returned 4858488 [0194.189] GetClientRect (in: hWnd=0x5011e, lpRect=0x26f698 | out: lpRect=0x26f698) returned 1 [0194.189] ScreenToClient (in: hWnd=0x5011e, lpPoint=0x26f6a8 | out: lpPoint=0x26f6a8) returned 1 [0194.189] PtInRect (lprc=0x26f698, pt=0x39b) returned 1 [0194.189] GetCurrentThreadId () returned 0x220 [0194.189] GetMessageW (in: lpMsg=0x26fbd4, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x26fbd4) returned 1 [0194.501] TranslateMessage (lpMsg=0x26fbd4) returned 0 [0194.501] DispatchMessageW (lpMsg=0x26fbd4) returned 0x0 [0194.501] GetCapture () returned 0x0 [0194.501] WindowFromPoint (Point=0x3d5) returned 0x5011e [0194.501] GetWindowLongW (hWnd=0x5011e, nIndex=-21) returned 4858488 [0194.501] GetClientRect (in: hWnd=0x5011e, lpRect=0x26f698 | out: lpRect=0x26f698) returned 1 [0194.501] ScreenToClient (in: hWnd=0x5011e, lpPoint=0x26f6a8 | out: lpPoint=0x26f6a8) returned 1 [0194.501] PtInRect (lprc=0x26f698, pt=0x39b) returned 1 [0194.501] GetCurrentThreadId () returned 0x220 [0194.501] GetMessageW (in: lpMsg=0x26fbd4, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x26fbd4) returned 1 [0194.813] TranslateMessage (lpMsg=0x26fbd4) returned 0 [0194.813] DispatchMessageW (lpMsg=0x26fbd4) returned 0x0 [0194.813] GetCapture () returned 0x0 [0194.813] WindowFromPoint (Point=0x3d5) returned 0x5011e [0194.813] GetWindowLongW (hWnd=0x5011e, nIndex=-21) returned 4858488 [0194.813] GetClientRect (in: hWnd=0x5011e, lpRect=0x26f698 | out: lpRect=0x26f698) returned 1 [0194.813] ScreenToClient (in: hWnd=0x5011e, lpPoint=0x26f6a8 | out: lpPoint=0x26f6a8) returned 1 [0194.813] PtInRect (lprc=0x26f698, pt=0x39b) returned 1 [0194.813] GetCurrentThreadId () returned 0x220 [0194.814] GetMessageW (in: lpMsg=0x26fbd4, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x26fbd4) returned 1 [0195.125] TranslateMessage (lpMsg=0x26fbd4) returned 0 [0195.125] DispatchMessageW (lpMsg=0x26fbd4) returned 0x0 [0195.125] GetCapture () returned 0x0 [0195.125] WindowFromPoint (Point=0x3d5) returned 0x5011e [0195.125] GetWindowLongW (hWnd=0x5011e, nIndex=-21) returned 4858488 [0195.125] GetClientRect (in: hWnd=0x5011e, lpRect=0x26f698 | out: lpRect=0x26f698) returned 1 [0195.125] ScreenToClient (in: hWnd=0x5011e, lpPoint=0x26f6a8 | out: lpPoint=0x26f6a8) returned 1 [0195.125] PtInRect (lprc=0x26f698, pt=0x39b) returned 1 [0195.125] GetCurrentThreadId () returned 0x220 [0195.125] GetMessageW (in: lpMsg=0x26fbd4, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x26fbd4) returned 1 [0195.437] TranslateMessage (lpMsg=0x26fbd4) returned 0 [0195.437] DispatchMessageW (lpMsg=0x26fbd4) returned 0x0 [0195.437] GetCapture () returned 0x0 [0195.437] WindowFromPoint (Point=0x3d5) returned 0x5011e [0195.437] GetWindowLongW (hWnd=0x5011e, nIndex=-21) returned 4858488 [0195.437] GetClientRect (in: hWnd=0x5011e, lpRect=0x26f698 | out: lpRect=0x26f698) returned 1 [0195.437] ScreenToClient (in: hWnd=0x5011e, lpPoint=0x26f6a8 | out: lpPoint=0x26f6a8) returned 1 [0195.437] PtInRect (lprc=0x26f698, pt=0x39b) returned 1 [0195.437] GetCurrentThreadId () returned 0x220 [0195.437] GetMessageW (in: lpMsg=0x26fbd4, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x26fbd4) returned 1 [0195.749] TranslateMessage (lpMsg=0x26fbd4) returned 0 [0195.749] DispatchMessageW (lpMsg=0x26fbd4) returned 0x0 [0195.749] GetCapture () returned 0x0 [0195.749] WindowFromPoint (Point=0x3d5) returned 0x5011e [0195.749] GetWindowLongW (hWnd=0x5011e, nIndex=-21) returned 4858488 [0195.749] GetClientRect (in: hWnd=0x5011e, lpRect=0x26f698 | out: lpRect=0x26f698) returned 1 [0195.749] ScreenToClient (in: hWnd=0x5011e, lpPoint=0x26f6a8 | out: lpPoint=0x26f6a8) returned 1 [0195.749] PtInRect (lprc=0x26f698, pt=0x39b) returned 1 [0195.749] GetCurrentThreadId () returned 0x220 [0195.749] GetMessageW (in: lpMsg=0x26fbd4, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x26fbd4) returned 1 [0196.062] TranslateMessage (lpMsg=0x26fbd4) returned 0 [0196.062] DispatchMessageW (lpMsg=0x26fbd4) returned 0x0 [0196.062] GetCapture () returned 0x0 [0196.062] WindowFromPoint (Point=0x3d5) returned 0x5011e [0196.062] GetWindowLongW (hWnd=0x5011e, nIndex=-21) returned 4858488 [0196.062] GetClientRect (in: hWnd=0x5011e, lpRect=0x26f698 | out: lpRect=0x26f698) returned 1 [0196.062] ScreenToClient (in: hWnd=0x5011e, lpPoint=0x26f6a8 | out: lpPoint=0x26f6a8) returned 1 [0196.062] PtInRect (lprc=0x26f698, pt=0x39b) returned 1 [0196.062] GetCurrentThreadId () returned 0x220 [0196.062] GetMessageW (in: lpMsg=0x26fbd4, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x26fbd4) returned 1 [0196.380] TranslateMessage (lpMsg=0x26fbd4) returned 0 [0196.380] DispatchMessageW (lpMsg=0x26fbd4) returned 0x0 [0196.381] GetCapture () returned 0x0 [0196.381] WindowFromPoint (Point=0x3d5) returned 0x5011e [0196.381] GetWindowLongW (hWnd=0x5011e, nIndex=-21) returned 4858488 [0196.381] GetClientRect (in: hWnd=0x5011e, lpRect=0x26f698 | out: lpRect=0x26f698) returned 1 [0196.381] ScreenToClient (in: hWnd=0x5011e, lpPoint=0x26f6a8 | out: lpPoint=0x26f6a8) returned 1 [0196.381] PtInRect (lprc=0x26f698, pt=0x39b) returned 1 [0196.381] GetCurrentThreadId () returned 0x220 [0196.381] GetMessageW (in: lpMsg=0x26fbd4, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x26fbd4) returned 1 [0196.685] TranslateMessage (lpMsg=0x26fbd4) returned 0 [0196.685] DispatchMessageW (lpMsg=0x26fbd4) returned 0x0 [0196.685] GetCapture () returned 0x0 [0196.685] WindowFromPoint (Point=0x3d5) returned 0x5011e [0196.685] GetWindowLongW (hWnd=0x5011e, nIndex=-21) returned 4858488 [0196.685] GetClientRect (in: hWnd=0x5011e, lpRect=0x26f698 | out: lpRect=0x26f698) returned 1 [0196.685] ScreenToClient (in: hWnd=0x5011e, lpPoint=0x26f6a8 | out: lpPoint=0x26f6a8) returned 1 [0196.685] PtInRect (lprc=0x26f698, pt=0x39b) returned 1 [0196.685] GetCurrentThreadId () returned 0x220 [0196.685] GetMessageW (in: lpMsg=0x26fbd4, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x26fbd4) returned 1 [0196.997] TranslateMessage (lpMsg=0x26fbd4) returned 0 [0196.997] DispatchMessageW (lpMsg=0x26fbd4) returned 0x0 [0196.997] GetCapture () returned 0x0 [0196.997] WindowFromPoint (Point=0x3d5) returned 0x5011e [0196.997] GetWindowLongW (hWnd=0x5011e, nIndex=-21) returned 4858488 [0196.997] GetClientRect (in: hWnd=0x5011e, lpRect=0x26f698 | out: lpRect=0x26f698) returned 1 [0196.997] ScreenToClient (in: hWnd=0x5011e, lpPoint=0x26f6a8 | out: lpPoint=0x26f6a8) returned 1 [0196.997] PtInRect (lprc=0x26f698, pt=0x39b) returned 1 [0196.997] GetCurrentThreadId () returned 0x220 [0196.997] GetMessageW (in: lpMsg=0x26fbd4, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x26fbd4) returned 1 [0197.309] TranslateMessage (lpMsg=0x26fbd4) returned 0 [0197.309] DispatchMessageW (lpMsg=0x26fbd4) returned 0x0 [0197.309] GetCapture () returned 0x0 [0197.309] WindowFromPoint (Point=0x3d5) returned 0x5011e [0197.309] GetWindowLongW (hWnd=0x5011e, nIndex=-21) returned 4858488 [0197.309] GetClientRect (in: hWnd=0x5011e, lpRect=0x26f698 | out: lpRect=0x26f698) returned 1 [0197.309] ScreenToClient (in: hWnd=0x5011e, lpPoint=0x26f6a8 | out: lpPoint=0x26f6a8) returned 1 [0197.309] PtInRect (lprc=0x26f698, pt=0x39b) returned 1 [0197.309] GetCurrentThreadId () returned 0x220 [0197.309] GetMessageW (in: lpMsg=0x26fbd4, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x26fbd4) returned 1 [0197.621] TranslateMessage (lpMsg=0x26fbd4) returned 0 [0197.621] DispatchMessageW (lpMsg=0x26fbd4) returned 0x0 [0197.621] GetCapture () returned 0x0 [0197.621] WindowFromPoint (Point=0x3d5) returned 0x5011e [0197.621] GetWindowLongW (hWnd=0x5011e, nIndex=-21) returned 4858488 [0197.621] GetClientRect (in: hWnd=0x5011e, lpRect=0x26f698 | out: lpRect=0x26f698) returned 1 [0197.621] ScreenToClient (in: hWnd=0x5011e, lpPoint=0x26f6a8 | out: lpPoint=0x26f6a8) returned 1 [0197.621] PtInRect (lprc=0x26f698, pt=0x39b) returned 1 [0197.621] GetCurrentThreadId () returned 0x220 [0197.621] GetMessageW (in: lpMsg=0x26fbd4, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x26fbd4) returned 1 [0197.933] TranslateMessage (lpMsg=0x26fbd4) returned 0 [0197.933] DispatchMessageW (lpMsg=0x26fbd4) returned 0x0 [0197.933] GetCapture () returned 0x0 [0197.933] WindowFromPoint (Point=0x3d5) returned 0x5011e [0197.933] GetWindowLongW (hWnd=0x5011e, nIndex=-21) returned 4858488 [0197.933] GetClientRect (in: hWnd=0x5011e, lpRect=0x26f698 | out: lpRect=0x26f698) returned 1 [0197.933] ScreenToClient (in: hWnd=0x5011e, lpPoint=0x26f6a8 | out: lpPoint=0x26f6a8) returned 1 [0197.933] PtInRect (lprc=0x26f698, pt=0x39b) returned 1 [0197.933] GetCurrentThreadId () returned 0x220 [0197.934] GetMessageW (in: lpMsg=0x26fbd4, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x26fbd4) returned 1 [0198.245] TranslateMessage (lpMsg=0x26fbd4) returned 0 [0198.245] DispatchMessageW (lpMsg=0x26fbd4) returned 0x0 [0198.245] GetCapture () returned 0x0 [0198.245] WindowFromPoint (Point=0x3d5) returned 0x5011e [0198.245] GetWindowLongW (hWnd=0x5011e, nIndex=-21) returned 4858488 [0198.245] GetClientRect (in: hWnd=0x5011e, lpRect=0x26f698 | out: lpRect=0x26f698) returned 1 [0198.245] ScreenToClient (in: hWnd=0x5011e, lpPoint=0x26f6a8 | out: lpPoint=0x26f6a8) returned 1 [0198.245] PtInRect (lprc=0x26f698, pt=0x39b) returned 1 [0198.245] GetCurrentThreadId () returned 0x220 [0198.245] GetMessageW (in: lpMsg=0x26fbd4, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x26fbd4) returned 1 [0198.557] TranslateMessage (lpMsg=0x26fbd4) returned 0 [0198.557] DispatchMessageW (lpMsg=0x26fbd4) returned 0x0 [0198.557] GetCapture () returned 0x0 [0198.557] WindowFromPoint (Point=0x3d5) returned 0x5011e [0198.557] GetWindowLongW (hWnd=0x5011e, nIndex=-21) returned 4858488 [0198.557] GetClientRect (in: hWnd=0x5011e, lpRect=0x26f698 | out: lpRect=0x26f698) returned 1 [0198.557] ScreenToClient (in: hWnd=0x5011e, lpPoint=0x26f6a8 | out: lpPoint=0x26f6a8) returned 1 [0198.557] PtInRect (lprc=0x26f698, pt=0x39b) returned 1 [0198.557] GetCurrentThreadId () returned 0x220 [0198.557] GetMessageW (in: lpMsg=0x26fbd4, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x26fbd4) returned 1 [0198.878] TranslateMessage (lpMsg=0x26fbd4) returned 0 [0198.878] DispatchMessageW (lpMsg=0x26fbd4) returned 0x0 [0198.878] GetCapture () returned 0x0 [0198.878] WindowFromPoint (Point=0x3d5) returned 0x5011e [0198.878] GetWindowLongW (hWnd=0x5011e, nIndex=-21) returned 4858488 [0198.878] GetClientRect (in: hWnd=0x5011e, lpRect=0x26f698 | out: lpRect=0x26f698) returned 1 [0198.878] ScreenToClient (in: hWnd=0x5011e, lpPoint=0x26f6a8 | out: lpPoint=0x26f6a8) returned 1 [0198.878] PtInRect (lprc=0x26f698, pt=0x39b) returned 1 [0198.878] GetCurrentThreadId () returned 0x220 [0198.878] GetMessageW (in: lpMsg=0x26fbd4, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x26fbd4) returned 1 [0199.259] TranslateMessage (lpMsg=0x26fbd4) returned 0 [0199.259] DispatchMessageW (lpMsg=0x26fbd4) returned 0x0 [0199.259] GetCapture () returned 0x0 [0199.259] WindowFromPoint (Point=0x3d5) returned 0x5011e [0199.259] GetWindowLongW (hWnd=0x5011e, nIndex=-21) returned 4858488 [0199.259] GetClientRect (in: hWnd=0x5011e, lpRect=0x26f698 | out: lpRect=0x26f698) returned 1 [0199.259] ScreenToClient (in: hWnd=0x5011e, lpPoint=0x26f6a8 | out: lpPoint=0x26f6a8) returned 1 [0199.259] PtInRect (lprc=0x26f698, pt=0x39b) returned 1 [0199.259] GetCurrentThreadId () returned 0x220 [0199.259] GetMessageW (in: lpMsg=0x26fbd4, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x26fbd4) returned 1 [0199.571] TranslateMessage (lpMsg=0x26fbd4) returned 0 [0199.571] DispatchMessageW (lpMsg=0x26fbd4) returned 0x0 [0199.571] GetCapture () returned 0x0 [0199.571] WindowFromPoint (Point=0x3d5) returned 0x5011e [0199.571] GetWindowLongW (hWnd=0x5011e, nIndex=-21) returned 4858488 [0199.571] GetClientRect (in: hWnd=0x5011e, lpRect=0x26f698 | out: lpRect=0x26f698) returned 1 [0199.571] ScreenToClient (in: hWnd=0x5011e, lpPoint=0x26f6a8 | out: lpPoint=0x26f6a8) returned 1 [0199.571] PtInRect (lprc=0x26f698, pt=0x39b) returned 1 [0199.571] GetCurrentThreadId () returned 0x220 [0199.571] GetMessageW (in: lpMsg=0x26fbd4, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x26fbd4) returned 1 [0199.883] TranslateMessage (lpMsg=0x26fbd4) returned 0 [0199.883] DispatchMessageW (lpMsg=0x26fbd4) returned 0x0 [0199.883] GetCapture () returned 0x0 [0199.883] WindowFromPoint (Point=0x3d5) returned 0x5011e [0199.884] GetWindowLongW (hWnd=0x5011e, nIndex=-21) returned 4858488 [0199.884] GetClientRect (in: hWnd=0x5011e, lpRect=0x26f698 | out: lpRect=0x26f698) returned 1 [0199.884] ScreenToClient (in: hWnd=0x5011e, lpPoint=0x26f6a8 | out: lpPoint=0x26f6a8) returned 1 [0199.884] PtInRect (lprc=0x26f698, pt=0x39b) returned 1 [0199.884] GetCurrentThreadId () returned 0x220 [0199.884] GetMessageW (in: lpMsg=0x26fbd4, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x26fbd4) returned 1 [0200.195] TranslateMessage (lpMsg=0x26fbd4) returned 0 [0200.195] DispatchMessageW (lpMsg=0x26fbd4) returned 0x0 [0200.195] GetCapture () returned 0x0 [0200.195] WindowFromPoint (Point=0x3d5) returned 0x5011e [0200.195] GetWindowLongW (hWnd=0x5011e, nIndex=-21) returned 4858488 [0200.195] GetClientRect (in: hWnd=0x5011e, lpRect=0x26f698 | out: lpRect=0x26f698) returned 1 [0200.195] ScreenToClient (in: hWnd=0x5011e, lpPoint=0x26f6a8 | out: lpPoint=0x26f6a8) returned 1 [0200.195] PtInRect (lprc=0x26f698, pt=0x39b) returned 1 [0200.195] GetCurrentThreadId () returned 0x220 [0200.195] GetMessageW (in: lpMsg=0x26fbd4, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x26fbd4) returned 1 [0200.507] TranslateMessage (lpMsg=0x26fbd4) returned 0 [0200.507] DispatchMessageW (lpMsg=0x26fbd4) returned 0x0 [0200.507] GetCapture () returned 0x0 [0200.507] WindowFromPoint (Point=0x3d5) returned 0x5011e [0200.507] GetWindowLongW (hWnd=0x5011e, nIndex=-21) returned 4858488 [0200.507] GetClientRect (in: hWnd=0x5011e, lpRect=0x26f698 | out: lpRect=0x26f698) returned 1 [0200.507] ScreenToClient (in: hWnd=0x5011e, lpPoint=0x26f6a8 | out: lpPoint=0x26f6a8) returned 1 [0200.507] PtInRect (lprc=0x26f698, pt=0x39b) returned 1 [0200.507] GetCurrentThreadId () returned 0x220 [0200.507] GetMessageW (in: lpMsg=0x26fbd4, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x26fbd4) returned 1 [0200.819] TranslateMessage (lpMsg=0x26fbd4) returned 0 [0200.819] DispatchMessageW (lpMsg=0x26fbd4) returned 0x0 [0200.819] GetCapture () returned 0x0 [0200.819] WindowFromPoint (Point=0x3d5) returned 0x5011e [0200.819] GetWindowLongW (hWnd=0x5011e, nIndex=-21) returned 4858488 [0200.819] GetClientRect (in: hWnd=0x5011e, lpRect=0x26f698 | out: lpRect=0x26f698) returned 1 [0200.819] ScreenToClient (in: hWnd=0x5011e, lpPoint=0x26f6a8 | out: lpPoint=0x26f6a8) returned 1 [0200.819] PtInRect (lprc=0x26f698, pt=0x39b) returned 1 [0200.819] GetCurrentThreadId () returned 0x220 [0200.819] GetMessageW (in: lpMsg=0x26fbd4, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x26fbd4) returned 1 [0201.131] TranslateMessage (lpMsg=0x26fbd4) returned 0 [0201.131] DispatchMessageW (lpMsg=0x26fbd4) returned 0x0 [0201.131] GetCapture () returned 0x0 [0201.131] WindowFromPoint (Point=0x3d5) returned 0x5011e [0201.131] GetWindowLongW (hWnd=0x5011e, nIndex=-21) returned 4858488 [0201.131] GetClientRect (in: hWnd=0x5011e, lpRect=0x26f698 | out: lpRect=0x26f698) returned 1 [0201.131] ScreenToClient (in: hWnd=0x5011e, lpPoint=0x26f6a8 | out: lpPoint=0x26f6a8) returned 1 [0201.131] PtInRect (lprc=0x26f698, pt=0x39b) returned 1 [0201.131] GetCurrentThreadId () returned 0x220 [0201.131] GetMessageW (in: lpMsg=0x26fbd4, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x26fbd4) returned 1 [0201.443] TranslateMessage (lpMsg=0x26fbd4) returned 0 [0201.443] DispatchMessageW (lpMsg=0x26fbd4) returned 0x0 [0201.443] GetCapture () returned 0x0 [0201.443] WindowFromPoint (Point=0x3d5) returned 0x5011e [0201.443] GetWindowLongW (hWnd=0x5011e, nIndex=-21) returned 4858488 [0201.443] GetClientRect (in: hWnd=0x5011e, lpRect=0x26f698 | out: lpRect=0x26f698) returned 1 [0201.443] ScreenToClient (in: hWnd=0x5011e, lpPoint=0x26f6a8 | out: lpPoint=0x26f6a8) returned 1 [0201.443] PtInRect (lprc=0x26f698, pt=0x39b) returned 1 [0201.443] GetCurrentThreadId () returned 0x220 [0201.443] GetMessageW (in: lpMsg=0x26fbd4, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x26fbd4) returned 1 [0201.757] TranslateMessage (lpMsg=0x26fbd4) returned 0 [0201.757] DispatchMessageW (lpMsg=0x26fbd4) returned 0x0 [0201.757] GetCapture () returned 0x0 [0201.757] WindowFromPoint (Point=0x3d5) returned 0x5011e [0201.757] GetWindowLongW (hWnd=0x5011e, nIndex=-21) returned 4858488 [0201.757] GetClientRect (in: hWnd=0x5011e, lpRect=0x26f698 | out: lpRect=0x26f698) returned 1 [0201.757] ScreenToClient (in: hWnd=0x5011e, lpPoint=0x26f6a8 | out: lpPoint=0x26f6a8) returned 1 [0201.757] PtInRect (lprc=0x26f698, pt=0x39b) returned 1 [0201.757] GetCurrentThreadId () returned 0x220 [0201.757] GetMessageW (in: lpMsg=0x26fbd4, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x26fbd4) returned 1 [0202.067] TranslateMessage (lpMsg=0x26fbd4) returned 0 [0202.067] DispatchMessageW (lpMsg=0x26fbd4) returned 0x0 [0202.067] GetCapture () returned 0x0 [0202.067] WindowFromPoint (Point=0x3d5) returned 0x5011e [0202.067] GetWindowLongW (hWnd=0x5011e, nIndex=-21) returned 4858488 [0202.067] GetClientRect (in: hWnd=0x5011e, lpRect=0x26f698 | out: lpRect=0x26f698) returned 1 [0202.067] ScreenToClient (in: hWnd=0x5011e, lpPoint=0x26f6a8 | out: lpPoint=0x26f6a8) returned 1 [0202.067] PtInRect (lprc=0x26f698, pt=0x39b) returned 1 [0202.067] GetCurrentThreadId () returned 0x220 [0202.067] GetMessageW (in: lpMsg=0x26fbd4, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x26fbd4) returned 1 [0202.379] TranslateMessage (lpMsg=0x26fbd4) returned 0 [0202.379] DispatchMessageW (lpMsg=0x26fbd4) returned 0x0 [0202.379] GetCapture () returned 0x0 [0202.379] WindowFromPoint (Point=0x3d5) returned 0x5011e [0202.379] GetWindowLongW (hWnd=0x5011e, nIndex=-21) returned 4858488 [0202.379] GetClientRect (in: hWnd=0x5011e, lpRect=0x26f698 | out: lpRect=0x26f698) returned 1 [0202.379] ScreenToClient (in: hWnd=0x5011e, lpPoint=0x26f6a8 | out: lpPoint=0x26f6a8) returned 1 [0202.379] PtInRect (lprc=0x26f698, pt=0x39b) returned 1 [0202.379] GetCurrentThreadId () returned 0x220 [0202.379] GetMessageW (in: lpMsg=0x26fbd4, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x26fbd4) returned 1 [0202.691] TranslateMessage (lpMsg=0x26fbd4) returned 0 [0202.691] DispatchMessageW (lpMsg=0x26fbd4) returned 0x0 [0202.691] GetCapture () returned 0x0 [0202.691] WindowFromPoint (Point=0x3d5) returned 0x5011e [0202.691] GetWindowLongW (hWnd=0x5011e, nIndex=-21) returned 4858488 [0202.691] GetClientRect (in: hWnd=0x5011e, lpRect=0x26f698 | out: lpRect=0x26f698) returned 1 [0202.691] ScreenToClient (in: hWnd=0x5011e, lpPoint=0x26f6a8 | out: lpPoint=0x26f6a8) returned 1 [0202.691] PtInRect (lprc=0x26f698, pt=0x39b) returned 1 [0202.691] GetCurrentThreadId () returned 0x220 [0202.691] GetMessageW (in: lpMsg=0x26fbd4, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x26fbd4) returned 1 [0203.003] TranslateMessage (lpMsg=0x26fbd4) returned 0 [0203.003] DispatchMessageW (lpMsg=0x26fbd4) returned 0x0 [0203.003] GetCapture () returned 0x0 [0203.003] WindowFromPoint (Point=0x3d5) returned 0x5011e [0203.003] GetWindowLongW (hWnd=0x5011e, nIndex=-21) returned 4858488 [0203.003] GetClientRect (in: hWnd=0x5011e, lpRect=0x26f698 | out: lpRect=0x26f698) returned 1 [0203.003] ScreenToClient (in: hWnd=0x5011e, lpPoint=0x26f6a8 | out: lpPoint=0x26f6a8) returned 1 [0203.003] PtInRect (lprc=0x26f698, pt=0x39b) returned 1 [0203.003] GetCurrentThreadId () returned 0x220 [0203.004] GetMessageW (in: lpMsg=0x26fbd4, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x26fbd4) returned 1 [0203.315] TranslateMessage (lpMsg=0x26fbd4) returned 0 [0203.315] DispatchMessageW (lpMsg=0x26fbd4) returned 0x0 [0203.315] GetCapture () returned 0x0 [0203.315] WindowFromPoint (Point=0x3d5) returned 0x5011e [0203.315] GetWindowLongW (hWnd=0x5011e, nIndex=-21) returned 4858488 [0203.315] GetClientRect (in: hWnd=0x5011e, lpRect=0x26f698 | out: lpRect=0x26f698) returned 1 [0203.315] ScreenToClient (in: hWnd=0x5011e, lpPoint=0x26f6a8 | out: lpPoint=0x26f6a8) returned 1 [0203.315] PtInRect (lprc=0x26f698, pt=0x39b) returned 1 [0203.315] GetCurrentThreadId () returned 0x220 [0203.315] GetMessageW (in: lpMsg=0x26fbd4, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x26fbd4) returned 1 [0203.627] TranslateMessage (lpMsg=0x26fbd4) returned 0 [0203.627] DispatchMessageW (lpMsg=0x26fbd4) returned 0x0 [0203.627] GetCapture () returned 0x0 [0203.627] WindowFromPoint (Point=0x3d5) returned 0x5011e [0203.627] GetWindowLongW (hWnd=0x5011e, nIndex=-21) returned 4858488 [0203.627] GetClientRect (in: hWnd=0x5011e, lpRect=0x26f698 | out: lpRect=0x26f698) returned 1 [0203.627] ScreenToClient (in: hWnd=0x5011e, lpPoint=0x26f6a8 | out: lpPoint=0x26f6a8) returned 1 [0203.627] PtInRect (lprc=0x26f698, pt=0x39b) returned 1 [0203.627] GetCurrentThreadId () returned 0x220 [0203.627] GetMessageW (in: lpMsg=0x26fbd4, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x26fbd4) returned 1 [0203.947] TranslateMessage (lpMsg=0x26fbd4) returned 0 [0203.947] DispatchMessageW (lpMsg=0x26fbd4) returned 0x0 [0203.947] GetCapture () returned 0x0 [0203.947] WindowFromPoint (Point=0x3d5) returned 0x5011e [0203.947] GetWindowLongW (hWnd=0x5011e, nIndex=-21) returned 4858488 [0203.947] GetClientRect (in: hWnd=0x5011e, lpRect=0x26f698 | out: lpRect=0x26f698) returned 1 [0203.947] ScreenToClient (in: hWnd=0x5011e, lpPoint=0x26f6a8 | out: lpPoint=0x26f6a8) returned 1 [0203.947] PtInRect (lprc=0x26f698, pt=0x39b) returned 1 [0203.947] GetCurrentThreadId () returned 0x220 [0203.947] GetMessageW (in: lpMsg=0x26fbd4, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x26fbd4) returned 1 [0203.957] GetWindowLongW (hWnd=0x5011e, nIndex=-21) returned 4858488 [0203.957] GetClientRect (in: hWnd=0x5011e, lpRect=0x26f878 | out: lpRect=0x26f878) returned 1 [0203.957] ScreenToClient (in: hWnd=0x5011e, lpPoint=0x26f888 | out: lpPoint=0x26f888) returned 1 [0203.957] PtInRect (lprc=0x26f878, pt=0x197) returned 1 [0203.957] GetCurrentThreadId () returned 0x220 [0203.957] GetWindowLongW (hWnd=0x5011e, nIndex=-21) returned 4858488 [0203.957] ScreenToClient (in: hWnd=0x5011e, lpPoint=0x26f8f8 | out: lpPoint=0x26f8f8) returned 1 [0203.958] GetMessageTime () returned 265388 [0203.958] GetMessagePos () returned 0x13e03d5 [0203.958] GetCapture () returned 0x0 [0203.958] IntersectRect (in: lprcDst=0x26f2e8, lprcSrc1=0x26f2e8, lprcSrc2=0x26f378 | out: lprcDst=0x26f2e8) returned 1 [0203.958] IntersectRect (in: lprcDst=0x26f0a4, lprcSrc1=0x26f0a4, lprcSrc2=0x26f074 | out: lprcDst=0x26f0a4) returned 1 [0203.958] IntersectRect (in: lprcDst=0x26f388, lprcSrc1=0x26f388, lprcSrc2=0x26f094 | out: lprcDst=0x26f388) returned 1 [0203.958] HeapFree (in: hHeap=0x470000, dwFlags=0x0, lpMem=0x0 | out: hHeap=0x470000) returned 1 [0203.958] RtlAllocateHeap (HeapHandle=0x470000, Flags=0x0, Size=0x24) returned 0x4e77b8 [0203.958] IntersectRect (in: lprcDst=0x26f388, lprcSrc1=0x26f388, lprcSrc2=0x26f0b4 | out: lprcDst=0x26f388) returned 1 [0203.958] IntersectRect (in: lprcDst=0x26ee78, lprcSrc1=0x26ee78, lprcSrc2=0x26f378 | out: lprcDst=0x26ee78) returned 1 [0203.958] IntersectRect (in: lprcDst=0x26ee78, lprcSrc1=0x26ee78, lprcSrc2=0x26f378 | out: lprcDst=0x26ee78) returned 1 [0203.958] IntersectRect (in: lprcDst=0x26eab0, lprcSrc1=0x26eab0, lprcSrc2=0x26ea80 | out: lprcDst=0x26eab0) returned 1 [0203.958] IntersectRect (in: lprcDst=0x26f410, lprcSrc1=0x26f410, lprcSrc2=0x26eaa0 | out: lprcDst=0x26f410) returned 1 [0203.958] IntersectRect (in: lprcDst=0x26ec34, lprcSrc1=0x26ec34, lprcSrc2=0x26ec04 | out: lprcDst=0x26ec34) returned 1 [0203.958] IntersectRect (in: lprcDst=0x26f388, lprcSrc1=0x26f388, lprcSrc2=0x26ec24 | out: lprcDst=0x26f388) returned 1 [0203.958] HeapFree (in: hHeap=0x470000, dwFlags=0x0, lpMem=0x0 | out: hHeap=0x470000) returned 1 [0203.958] RtlAllocateHeap (HeapHandle=0x470000, Flags=0x0, Size=0x24) returned 0x4e7788 [0203.958] IntersectRect (in: lprcDst=0x26ea70, lprcSrc1=0x26ea70, lprcSrc2=0x26f378 | out: lprcDst=0x26ea70) returned 1 [0203.958] IntersectRect (in: lprcDst=0x26f388, lprcSrc1=0x26f388, lprcSrc2=0x26ec44 | out: lprcDst=0x26f388) returned 1 [0203.958] IntersectRect (in: lprcDst=0x26ea08, lprcSrc1=0x26ea08, lprcSrc2=0x26f378 | out: lprcDst=0x26ea08) returned 1 [0203.958] IntersectRect (in: lprcDst=0x26ea08, lprcSrc1=0x26ea08, lprcSrc2=0x26f378 | out: lprcDst=0x26ea08) returned 1 [0203.958] IntersectRect (in: lprcDst=0x26e794, lprcSrc1=0x26e794, lprcSrc2=0x26e64c | out: lprcDst=0x26e794) returned 1 [0203.958] IntersectRect (in: lprcDst=0x26f388, lprcSrc1=0x26f388, lprcSrc2=0x26e7b4 | out: lprcDst=0x26f388) returned 1 [0203.958] HeapFree (in: hHeap=0x470000, dwFlags=0x0, lpMem=0x0 | out: hHeap=0x470000) returned 1 [0203.958] RtlAllocateHeap (HeapHandle=0x470000, Flags=0x0, Size=0x24) returned 0x4e7848 [0203.958] IntersectRect (in: lprcDst=0x26f388, lprcSrc1=0x26f388, lprcSrc2=0x26e7d4 | out: lprcDst=0x26f388) returned 1 [0203.958] IntersectRect (in: lprcDst=0x26e598, lprcSrc1=0x26e598, lprcSrc2=0x26f378 | out: lprcDst=0x26e598) returned 1 [0203.958] IntersectRect (in: lprcDst=0x26e598, lprcSrc1=0x26e598, lprcSrc2=0x26f378 | out: lprcDst=0x26e598) returned 1 [0203.958] IntersectRect (in: lprcDst=0x26e324, lprcSrc1=0x26e324, lprcSrc2=0x26e1dc | out: lprcDst=0x26e324) returned 1 [0203.958] IntersectRect (in: lprcDst=0x26f388, lprcSrc1=0x26f388, lprcSrc2=0x26e344 | out: lprcDst=0x26f388) returned 1 [0203.958] HeapFree (in: hHeap=0x470000, dwFlags=0x0, lpMem=0x0 | out: hHeap=0x470000) returned 1 [0203.958] RtlAllocateHeap (HeapHandle=0x470000, Flags=0x0, Size=0x24) returned 0x4e7878 [0203.958] IntersectRect (in: lprcDst=0x26f388, lprcSrc1=0x26f388, lprcSrc2=0x26e364 | out: lprcDst=0x26f388) returned 1 [0203.958] IntersectRect (in: lprcDst=0x26e128, lprcSrc1=0x26e128, lprcSrc2=0x26f378 | out: lprcDst=0x26e128) returned 1 [0203.958] IntersectRect (in: lprcDst=0x26e128, lprcSrc1=0x26e128, lprcSrc2=0x26f378 | out: lprcDst=0x26e128) returned 0 [0203.959] IntersectRect (in: lprcDst=0x26e128, lprcSrc1=0x26e128, lprcSrc2=0x26f378 | out: lprcDst=0x26e128) returned 1 [0203.959] IntersectRect (in: lprcDst=0x26e128, lprcSrc1=0x26e128, lprcSrc2=0x26f378 | out: lprcDst=0x26e128) returned 1 [0203.959] IntersectRect (in: lprcDst=0x26df6c, lprcSrc1=0x26df6c, lprcSrc2=0x26de08 | out: lprcDst=0x26df6c) returned 1 [0203.959] HeapFree (in: hHeap=0x470000, dwFlags=0x0, lpMem=0x0 | out: hHeap=0x470000) returned 1 [0203.959] RtlAllocateHeap (HeapHandle=0x470000, Flags=0x0, Size=0x24) returned 0x4e78a8 [0203.959] IntersectRect (in: lprcDst=0x26f388, lprcSrc1=0x26f388, lprcSrc2=0x26df5c | out: lprcDst=0x26f388) returned 1 [0203.959] IntersectRect (in: lprcDst=0x26de18, lprcSrc1=0x26de18, lprcSrc2=0x26f378 | out: lprcDst=0x26de18) returned 1 [0203.959] IntersectRect (in: lprcDst=0x26f388, lprcSrc1=0x26f388, lprcSrc2=0x26df7c | out: lprcDst=0x26f388) returned 1 [0203.959] HeapFree (in: hHeap=0x470000, dwFlags=0x0, lpMem=0x4e78a8 | out: hHeap=0x470000) returned 1 [0203.959] HeapFree (in: hHeap=0x470000, dwFlags=0x0, lpMem=0x4e7878 | out: hHeap=0x470000) returned 1 [0203.959] HeapFree (in: hHeap=0x470000, dwFlags=0x0, lpMem=0x4e7848 | out: hHeap=0x470000) returned 1 [0203.959] HeapFree (in: hHeap=0x470000, dwFlags=0x0, lpMem=0x4e7788 | out: hHeap=0x470000) returned 1 [0203.959] HeapFree (in: hHeap=0x470000, dwFlags=0x0, lpMem=0x4e77b8 | out: hHeap=0x470000) returned 1 [0203.959] HeapFree (in: hHeap=0x470000, dwFlags=0x0, lpMem=0x0 | out: hHeap=0x470000) returned 1 [0203.959] PtInRect (lprc=0x26f524, pt=0x704e) returned 1 [0203.959] LoadCursorA (hInstance=0x0, lpCursorName=0x7f00) returned 0x10003 [0203.959] GetCursor () returned 0x10003 [0203.959] TranslateMessage (lpMsg=0x26fbd4) returned 0 [0203.959] DispatchMessageW (lpMsg=0x26fbd4) returned 0x0 [0203.959] GetWindowLongW (hWnd=0x5011e, nIndex=-21) returned 4858488 [0203.959] GetMessageTime () returned 265404 [0203.959] GetMessagePos () returned 0x24401d1 [0203.959] GetCapture () returned 0x0 [0203.959] IntersectRect (in: lprcDst=0x26f370, lprcSrc1=0x26f370, lprcSrc2=0x26f400 | out: lprcDst=0x26f370) returned 1 [0203.959] IntersectRect (in: lprcDst=0x26f12c, lprcSrc1=0x26f12c, lprcSrc2=0x26f0fc | out: lprcDst=0x26f12c) returned 1 [0203.959] IntersectRect (in: lprcDst=0x26f410, lprcSrc1=0x26f410, lprcSrc2=0x26f11c | out: lprcDst=0x26f410) returned 1 [0203.959] HeapFree (in: hHeap=0x470000, dwFlags=0x0, lpMem=0x0 | out: hHeap=0x470000) returned 1 [0203.959] RtlAllocateHeap (HeapHandle=0x470000, Flags=0x0, Size=0x24) returned 0x4e77b8 [0203.960] IntersectRect (in: lprcDst=0x26f410, lprcSrc1=0x26f410, lprcSrc2=0x26f13c | out: lprcDst=0x26f410) returned 1 [0203.960] IntersectRect (in: lprcDst=0x26ef00, lprcSrc1=0x26ef00, lprcSrc2=0x26f400 | out: lprcDst=0x26ef00) returned 1 [0203.960] IntersectRect (in: lprcDst=0x26ef00, lprcSrc1=0x26ef00, lprcSrc2=0x26f400 | out: lprcDst=0x26ef00) returned 1 [0203.960] IntersectRect (in: lprcDst=0x26eb38, lprcSrc1=0x26eb38, lprcSrc2=0x26eb08 | out: lprcDst=0x26eb38) returned 1 [0203.960] IntersectRect (in: lprcDst=0x26f498, lprcSrc1=0x26f498, lprcSrc2=0x26eb28 | out: lprcDst=0x26f498) returned 1 [0203.960] IntersectRect (in: lprcDst=0x26ecbc, lprcSrc1=0x26ecbc, lprcSrc2=0x26ec8c | out: lprcDst=0x26ecbc) returned 1 [0203.960] IntersectRect (in: lprcDst=0x26f410, lprcSrc1=0x26f410, lprcSrc2=0x26ecac | out: lprcDst=0x26f410) returned 1 [0203.960] HeapFree (in: hHeap=0x470000, dwFlags=0x0, lpMem=0x0 | out: hHeap=0x470000) returned 1 [0203.960] RtlAllocateHeap (HeapHandle=0x470000, Flags=0x0, Size=0x24) returned 0x4e7788 [0203.960] IntersectRect (in: lprcDst=0x26eaf8, lprcSrc1=0x26eaf8, lprcSrc2=0x26f400 | out: lprcDst=0x26eaf8) returned 1 [0203.960] IntersectRect (in: lprcDst=0x26f410, lprcSrc1=0x26f410, lprcSrc2=0x26eccc | out: lprcDst=0x26f410) returned 1 [0203.960] IntersectRect (in: lprcDst=0x26ea90, lprcSrc1=0x26ea90, lprcSrc2=0x26f400 | out: lprcDst=0x26ea90) returned 1 [0203.960] IntersectRect (in: lprcDst=0x26ea90, lprcSrc1=0x26ea90, lprcSrc2=0x26f400 | out: lprcDst=0x26ea90) returned 1 [0203.960] IntersectRect (in: lprcDst=0x26e81c, lprcSrc1=0x26e81c, lprcSrc2=0x26e6d4 | out: lprcDst=0x26e81c) returned 1 [0203.960] IntersectRect (in: lprcDst=0x26f410, lprcSrc1=0x26f410, lprcSrc2=0x26e83c | out: lprcDst=0x26f410) returned 1 [0203.960] HeapFree (in: hHeap=0x470000, dwFlags=0x0, lpMem=0x0 | out: hHeap=0x470000) returned 1 [0203.960] RtlAllocateHeap (HeapHandle=0x470000, Flags=0x0, Size=0x24) returned 0x4e7848 [0203.960] IntersectRect (in: lprcDst=0x26f410, lprcSrc1=0x26f410, lprcSrc2=0x26e85c | out: lprcDst=0x26f410) returned 1 [0203.960] IntersectRect (in: lprcDst=0x26e620, lprcSrc1=0x26e620, lprcSrc2=0x26f400 | out: lprcDst=0x26e620) returned 1 [0203.960] IntersectRect (in: lprcDst=0x26e620, lprcSrc1=0x26e620, lprcSrc2=0x26f400 | out: lprcDst=0x26e620) returned 1 [0203.960] IntersectRect (in: lprcDst=0x26e3ac, lprcSrc1=0x26e3ac, lprcSrc2=0x26e264 | out: lprcDst=0x26e3ac) returned 1 [0203.960] IntersectRect (in: lprcDst=0x26f410, lprcSrc1=0x26f410, lprcSrc2=0x26e3cc | out: lprcDst=0x26f410) returned 1 [0203.960] HeapFree (in: hHeap=0x470000, dwFlags=0x0, lpMem=0x0 | out: hHeap=0x470000) returned 1 [0203.960] RtlAllocateHeap (HeapHandle=0x470000, Flags=0x0, Size=0x24) returned 0x4e7878 [0203.960] IntersectRect (in: lprcDst=0x26f410, lprcSrc1=0x26f410, lprcSrc2=0x26e3ec | out: lprcDst=0x26f410) returned 1 [0203.960] IntersectRect (in: lprcDst=0x26e1b0, lprcSrc1=0x26e1b0, lprcSrc2=0x26f400 | out: lprcDst=0x26e1b0) returned 1 [0203.960] IntersectRect (in: lprcDst=0x26e1b0, lprcSrc1=0x26e1b0, lprcSrc2=0x26f400 | out: lprcDst=0x26e1b0) returned 0 [0203.960] IntersectRect (in: lprcDst=0x26e1b0, lprcSrc1=0x26e1b0, lprcSrc2=0x26f400 | out: lprcDst=0x26e1b0) returned 1 [0203.960] IntersectRect (in: lprcDst=0x26e1b0, lprcSrc1=0x26e1b0, lprcSrc2=0x26f400 | out: lprcDst=0x26e1b0) returned 1 [0203.960] IntersectRect (in: lprcDst=0x26dff4, lprcSrc1=0x26dff4, lprcSrc2=0x26de90 | out: lprcDst=0x26dff4) returned 1 [0203.960] HeapFree (in: hHeap=0x470000, dwFlags=0x0, lpMem=0x0 | out: hHeap=0x470000) returned 1 [0203.960] RtlAllocateHeap (HeapHandle=0x470000, Flags=0x0, Size=0x24) returned 0x4e78a8 [0203.960] IntersectRect (in: lprcDst=0x26f410, lprcSrc1=0x26f410, lprcSrc2=0x26dfe4 | out: lprcDst=0x26f410) returned 1 [0203.960] IntersectRect (in: lprcDst=0x26dea0, lprcSrc1=0x26dea0, lprcSrc2=0x26f400 | out: lprcDst=0x26dea0) returned 1 [0203.960] IntersectRect (in: lprcDst=0x26f410, lprcSrc1=0x26f410, lprcSrc2=0x26e004 | out: lprcDst=0x26f410) returned 1 [0203.960] HeapFree (in: hHeap=0x470000, dwFlags=0x0, lpMem=0x4e78a8 | out: hHeap=0x470000) returned 1 [0203.960] HeapFree (in: hHeap=0x470000, dwFlags=0x0, lpMem=0x4e7878 | out: hHeap=0x470000) returned 1 [0203.960] HeapFree (in: hHeap=0x470000, dwFlags=0x0, lpMem=0x4e7848 | out: hHeap=0x470000) returned 1 [0203.960] HeapFree (in: hHeap=0x470000, dwFlags=0x0, lpMem=0x4e7788 | out: hHeap=0x470000) returned 1 [0203.961] HeapFree (in: hHeap=0x470000, dwFlags=0x0, lpMem=0x4e77b8 | out: hHeap=0x470000) returned 1 [0203.961] HeapFree (in: hHeap=0x470000, dwFlags=0x0, lpMem=0x0 | out: hHeap=0x470000) returned 1 [0203.961] GetMessageTime () returned 265404 [0203.961] GetMessagePos () returned 0x24401d1 [0203.961] KillTimer (hWnd=0x7011a, uIDEvent=0x2003) returned 1 [0203.961] GetCapture () returned 0x0 [0203.961] ClientToScreen (in: hWnd=0x5011e, lpPoint=0x26f69c | out: lpPoint=0x26f69c) returned 1 [0203.961] RtlAllocateHeap (HeapHandle=0x470000, Flags=0x0, Size=0xf8) returned 0x4f3878 [0203.961] GetCurrentThreadId () returned 0x220 [0203.961] ClientToScreen (in: hWnd=0x5011e, lpPoint=0x26f6a0 | out: lpPoint=0x26f6a0) returned 1 [0203.961] RtlAllocateHeap (HeapHandle=0x470000, Flags=0x0, Size=0xf8) returned 0x4f3978 [0203.961] HeapFree (in: hHeap=0x470000, dwFlags=0x0, lpMem=0x4f3978 | out: hHeap=0x470000) returned 1 [0203.961] CActiveIMMAppEx_Trident:IActiveIMMApp:OnDefWindowProc (in: This=0x4b1068, hWnd=0x5011e, msg=0x2a3, wParam=0x0, lParam=0x1f40197, plResult=0x26f794 | out: plResult=0x26f794) returned 0x1 [0203.961] NtdllDefWindowProc_W () returned 0x0 [0203.961] HeapFree (in: hHeap=0x470000, dwFlags=0x0, lpMem=0x4f3878 | out: hHeap=0x470000) returned 1 [0203.962] SetTimer (hWnd=0x7011a, nIDEvent=0x2004, uElapse=0x12c, lpTimerFunc=0x0) returned 0x2004 [0203.962] ClientToScreen (in: hWnd=0x5011e, lpPoint=0x26f69c | out: lpPoint=0x26f69c) returned 1 [0203.962] RtlAllocateHeap (HeapHandle=0x470000, Flags=0x0, Size=0xf8) returned 0x4f3878 [0203.962] GetCurrentThreadId () returned 0x220 [0203.962] CActiveIMMAppEx_Trident:IActiveIMMApp:OnDefWindowProc (in: This=0x4b1068, hWnd=0x5011e, msg=0x200, wParam=0x0, lParam=0x1f40197, plResult=0x26f794 | out: plResult=0x26f794) returned 0x1 [0203.962] NtdllDefWindowProc_W () returned 0x0 [0203.962] HeapFree (in: hHeap=0x470000, dwFlags=0x0, lpMem=0x4f3878 | out: hHeap=0x470000) returned 1 [0203.962] GetMessageTime () returned 265404 [0203.962] GetMessagePos () returned 0x24401d1 [0203.962] GetCapture () returned 0x0 [0203.962] ClientToScreen (in: hWnd=0x5011e, lpPoint=0x26f69c | out: lpPoint=0x26f69c) returned 1 [0203.962] RtlAllocateHeap (HeapHandle=0x470000, Flags=0x0, Size=0xf8) returned 0x4f3878 [0203.963] GetCurrentThreadId () returned 0x220 [0203.963] ClientToScreen (in: hWnd=0x5011e, lpPoint=0x26f6a0 | out: lpPoint=0x26f6a0) returned 1 [0203.963] RtlAllocateHeap (HeapHandle=0x470000, Flags=0x0, Size=0xf8) returned 0x4f3978 [0203.963] HeapFree (in: hHeap=0x470000, dwFlags=0x0, lpMem=0x4f3978 | out: hHeap=0x470000) returned 1 [0203.963] HeapFree (in: hHeap=0x470000, dwFlags=0x0, lpMem=0x4ab950 | out: hHeap=0x470000) returned 1 [0203.963] RtlAllocateHeap (HeapHandle=0x470000, Flags=0x0, Size=0x280) returned 0x4b4988 [0203.963] CActiveIMMAppEx_Trident:IActiveIMMApp:OnDefWindowProc (in: This=0x4b1068, hWnd=0x5011e, msg=0x8004, wParam=0x0, lParam=0x1f40197, plResult=0x26f794 | out: plResult=0x26f794) returned 0x1 [0203.963] NtdllDefWindowProc_W () returned 0x0 [0203.963] HeapFree (in: hHeap=0x470000, dwFlags=0x0, lpMem=0x4f3878 | out: hHeap=0x470000) returned 1 [0203.963] GetMessageW (in: lpMsg=0x26fbd4, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x26fbd4) returned 1 [0204.267] TranslateMessage (lpMsg=0x26fbd4) returned 0 [0204.267] DispatchMessageW (lpMsg=0x26fbd4) returned 0x0 [0204.267] GetCapture () returned 0x0 [0204.267] WindowFromPoint (Point=0x1d1) returned 0x5011e [0204.267] GetWindowLongW (hWnd=0x5011e, nIndex=-21) returned 4858488 [0204.267] GetClientRect (in: hWnd=0x5011e, lpRect=0x26f698 | out: lpRect=0x26f698) returned 1 [0204.267] ScreenToClient (in: hWnd=0x5011e, lpPoint=0x26f6a8 | out: lpPoint=0x26f6a8) returned 1 [0204.267] PtInRect (lprc=0x26f698, pt=0x197) returned 1 [0204.267] GetCurrentThreadId () returned 0x220 [0204.267] GetMessageW (in: lpMsg=0x26fbd4, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x26fbd4) returned 1 [0204.579] TranslateMessage (lpMsg=0x26fbd4) returned 0 [0204.579] DispatchMessageW (lpMsg=0x26fbd4) returned 0x0 [0204.579] GetCapture () returned 0x0 [0204.579] WindowFromPoint (Point=0x1d1) returned 0x5011e [0204.579] GetWindowLongW (hWnd=0x5011e, nIndex=-21) returned 4858488 [0204.579] GetClientRect (in: hWnd=0x5011e, lpRect=0x26f698 | out: lpRect=0x26f698) returned 1 [0204.579] ScreenToClient (in: hWnd=0x5011e, lpPoint=0x26f6a8 | out: lpPoint=0x26f6a8) returned 1 [0204.579] PtInRect (lprc=0x26f698, pt=0x197) returned 1 [0204.579] GetCurrentThreadId () returned 0x220 [0204.579] GetMessageW (in: lpMsg=0x26fbd4, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x26fbd4) returned 1 [0204.891] TranslateMessage (lpMsg=0x26fbd4) returned 0 [0204.891] DispatchMessageW (lpMsg=0x26fbd4) returned 0x0 [0204.891] GetCapture () returned 0x0 [0204.891] WindowFromPoint (Point=0x1d1) returned 0x5011e [0204.891] GetWindowLongW (hWnd=0x5011e, nIndex=-21) returned 4858488 [0204.891] GetClientRect (in: hWnd=0x5011e, lpRect=0x26f698 | out: lpRect=0x26f698) returned 1 [0204.891] ScreenToClient (in: hWnd=0x5011e, lpPoint=0x26f6a8 | out: lpPoint=0x26f6a8) returned 1 [0204.891] PtInRect (lprc=0x26f698, pt=0x197) returned 1 [0204.891] GetCurrentThreadId () returned 0x220 [0204.891] GetMessageW (in: lpMsg=0x26fbd4, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x26fbd4) returned 1 [0205.203] TranslateMessage (lpMsg=0x26fbd4) returned 0 [0205.203] DispatchMessageW (lpMsg=0x26fbd4) returned 0x0 [0205.203] GetCapture () returned 0x0 [0205.203] WindowFromPoint (Point=0x1d1) returned 0x5011e [0205.203] GetWindowLongW (hWnd=0x5011e, nIndex=-21) returned 4858488 [0205.203] GetClientRect (in: hWnd=0x5011e, lpRect=0x26f698 | out: lpRect=0x26f698) returned 1 [0205.203] ScreenToClient (in: hWnd=0x5011e, lpPoint=0x26f6a8 | out: lpPoint=0x26f6a8) returned 1 [0205.203] PtInRect (lprc=0x26f698, pt=0x197) returned 1 [0205.203] GetCurrentThreadId () returned 0x220 [0205.203] GetMessageW (in: lpMsg=0x26fbd4, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x26fbd4) returned 1 [0205.515] TranslateMessage (lpMsg=0x26fbd4) returned 0 [0205.515] DispatchMessageW (lpMsg=0x26fbd4) returned 0x0 [0205.515] GetCapture () returned 0x0 [0205.515] WindowFromPoint (Point=0x1d1) returned 0x5011e [0205.515] GetWindowLongW (hWnd=0x5011e, nIndex=-21) returned 4858488 [0205.515] GetClientRect (in: hWnd=0x5011e, lpRect=0x26f698 | out: lpRect=0x26f698) returned 1 [0205.515] ScreenToClient (in: hWnd=0x5011e, lpPoint=0x26f6a8 | out: lpPoint=0x26f6a8) returned 1 [0205.515] PtInRect (lprc=0x26f698, pt=0x197) returned 1 [0205.515] GetCurrentThreadId () returned 0x220 [0205.515] GetMessageW (in: lpMsg=0x26fbd4, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x26fbd4) returned 1 [0205.827] TranslateMessage (lpMsg=0x26fbd4) returned 0 [0205.827] DispatchMessageW (lpMsg=0x26fbd4) returned 0x0 [0205.827] GetCapture () returned 0x0 [0205.827] WindowFromPoint (Point=0x1d1) returned 0x5011e [0205.827] GetWindowLongW (hWnd=0x5011e, nIndex=-21) returned 4858488 [0205.827] GetClientRect (in: hWnd=0x5011e, lpRect=0x26f698 | out: lpRect=0x26f698) returned 1 [0205.827] ScreenToClient (in: hWnd=0x5011e, lpPoint=0x26f6a8 | out: lpPoint=0x26f6a8) returned 1 [0205.827] PtInRect (lprc=0x26f698, pt=0x197) returned 1 [0205.827] GetCurrentThreadId () returned 0x220 [0205.827] GetMessageW (in: lpMsg=0x26fbd4, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x26fbd4) returned 1 [0206.139] TranslateMessage (lpMsg=0x26fbd4) returned 0 [0206.139] DispatchMessageW (lpMsg=0x26fbd4) returned 0x0 [0206.139] GetCapture () returned 0x0 [0206.139] WindowFromPoint (Point=0x1d1) returned 0x5011e [0206.139] GetWindowLongW (hWnd=0x5011e, nIndex=-21) returned 4858488 [0206.139] GetClientRect (in: hWnd=0x5011e, lpRect=0x26f698 | out: lpRect=0x26f698) returned 1 [0206.139] ScreenToClient (in: hWnd=0x5011e, lpPoint=0x26f6a8 | out: lpPoint=0x26f6a8) returned 1 [0206.139] PtInRect (lprc=0x26f698, pt=0x197) returned 1 [0206.139] GetCurrentThreadId () returned 0x220 [0206.139] GetMessageW (in: lpMsg=0x26fbd4, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x26fbd4) returned 1 [0206.451] TranslateMessage (lpMsg=0x26fbd4) returned 0 [0206.451] DispatchMessageW (lpMsg=0x26fbd4) returned 0x0 [0206.451] GetCapture () returned 0x0 [0206.451] WindowFromPoint (Point=0x1d1) returned 0x5011e [0206.451] GetWindowLongW (hWnd=0x5011e, nIndex=-21) returned 4858488 [0206.451] GetClientRect (in: hWnd=0x5011e, lpRect=0x26f698 | out: lpRect=0x26f698) returned 1 [0206.451] ScreenToClient (in: hWnd=0x5011e, lpPoint=0x26f6a8 | out: lpPoint=0x26f6a8) returned 1 [0206.451] PtInRect (lprc=0x26f698, pt=0x197) returned 1 [0206.451] GetCurrentThreadId () returned 0x220 [0206.451] GetMessageW (in: lpMsg=0x26fbd4, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x26fbd4) returned 1 [0206.763] TranslateMessage (lpMsg=0x26fbd4) returned 0 [0206.763] DispatchMessageW (lpMsg=0x26fbd4) returned 0x0 [0206.763] GetCapture () returned 0x0 [0206.763] WindowFromPoint (Point=0x1d1) returned 0x5011e [0206.763] GetWindowLongW (hWnd=0x5011e, nIndex=-21) returned 4858488 [0206.763] GetClientRect (in: hWnd=0x5011e, lpRect=0x26f698 | out: lpRect=0x26f698) returned 1 [0206.763] ScreenToClient (in: hWnd=0x5011e, lpPoint=0x26f6a8 | out: lpPoint=0x26f6a8) returned 1 [0206.763] PtInRect (lprc=0x26f698, pt=0x197) returned 1 [0206.763] GetCurrentThreadId () returned 0x220 [0206.763] GetMessageW (in: lpMsg=0x26fbd4, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x26fbd4) returned 1 [0207.075] TranslateMessage (lpMsg=0x26fbd4) returned 0 [0207.075] DispatchMessageW (lpMsg=0x26fbd4) returned 0x0 [0207.075] GetCapture () returned 0x0 [0207.075] WindowFromPoint (Point=0x1d1) returned 0x5011e [0207.075] GetWindowLongW (hWnd=0x5011e, nIndex=-21) returned 4858488 [0207.075] GetClientRect (in: hWnd=0x5011e, lpRect=0x26f698 | out: lpRect=0x26f698) returned 1 [0207.075] ScreenToClient (in: hWnd=0x5011e, lpPoint=0x26f6a8 | out: lpPoint=0x26f6a8) returned 1 [0207.075] PtInRect (lprc=0x26f698, pt=0x197) returned 1 [0207.075] GetCurrentThreadId () returned 0x220 [0207.075] GetMessageW (in: lpMsg=0x26fbd4, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x26fbd4) returned 1 [0207.387] TranslateMessage (lpMsg=0x26fbd4) returned 0 [0207.387] DispatchMessageW (lpMsg=0x26fbd4) returned 0x0 [0207.387] GetCapture () returned 0x0 [0207.387] WindowFromPoint (Point=0x1d1) returned 0x5011e [0207.387] GetWindowLongW (hWnd=0x5011e, nIndex=-21) returned 4858488 [0207.387] GetClientRect (in: hWnd=0x5011e, lpRect=0x26f698 | out: lpRect=0x26f698) returned 1 [0207.387] ScreenToClient (in: hWnd=0x5011e, lpPoint=0x26f6a8 | out: lpPoint=0x26f6a8) returned 1 [0207.387] PtInRect (lprc=0x26f698, pt=0x197) returned 1 [0207.387] GetCurrentThreadId () returned 0x220 [0207.387] GetMessageW (in: lpMsg=0x26fbd4, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x26fbd4) returned 1 [0207.699] TranslateMessage (lpMsg=0x26fbd4) returned 0 [0207.699] DispatchMessageW (lpMsg=0x26fbd4) returned 0x0 [0207.699] GetCapture () returned 0x0 [0207.699] WindowFromPoint (Point=0x1d1) returned 0x5011e [0207.699] GetWindowLongW (hWnd=0x5011e, nIndex=-21) returned 4858488 [0207.699] GetClientRect (in: hWnd=0x5011e, lpRect=0x26f698 | out: lpRect=0x26f698) returned 1 [0207.699] ScreenToClient (in: hWnd=0x5011e, lpPoint=0x26f6a8 | out: lpPoint=0x26f6a8) returned 1 [0207.699] PtInRect (lprc=0x26f698, pt=0x197) returned 1 [0207.699] GetCurrentThreadId () returned 0x220 [0207.699] GetMessageW (in: lpMsg=0x26fbd4, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x26fbd4) returned 1 [0208.011] TranslateMessage (lpMsg=0x26fbd4) returned 0 [0208.011] DispatchMessageW (lpMsg=0x26fbd4) returned 0x0 [0208.011] GetCapture () returned 0x0 [0208.011] WindowFromPoint (Point=0x1d1) returned 0x5011e [0208.011] GetWindowLongW (hWnd=0x5011e, nIndex=-21) returned 4858488 [0208.011] GetClientRect (in: hWnd=0x5011e, lpRect=0x26f698 | out: lpRect=0x26f698) returned 1 [0208.011] ScreenToClient (in: hWnd=0x5011e, lpPoint=0x26f6a8 | out: lpPoint=0x26f6a8) returned 1 [0208.011] PtInRect (lprc=0x26f698, pt=0x197) returned 1 [0208.011] GetCurrentThreadId () returned 0x220 [0208.011] GetMessageW (in: lpMsg=0x26fbd4, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x26fbd4) returned 1 [0208.323] TranslateMessage (lpMsg=0x26fbd4) returned 0 [0208.323] DispatchMessageW (lpMsg=0x26fbd4) returned 0x0 [0208.323] GetCapture () returned 0x0 [0208.323] WindowFromPoint (Point=0x1d1) returned 0x5011e [0208.323] GetWindowLongW (hWnd=0x5011e, nIndex=-21) returned 4858488 [0208.323] GetClientRect (in: hWnd=0x5011e, lpRect=0x26f698 | out: lpRect=0x26f698) returned 1 [0208.323] ScreenToClient (in: hWnd=0x5011e, lpPoint=0x26f6a8 | out: lpPoint=0x26f6a8) returned 1 [0208.323] PtInRect (lprc=0x26f698, pt=0x197) returned 1 [0208.323] GetCurrentThreadId () returned 0x220 [0208.323] GetMessageW (in: lpMsg=0x26fbd4, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x26fbd4) returned 1 [0208.635] TranslateMessage (lpMsg=0x26fbd4) returned 0 [0208.635] DispatchMessageW (lpMsg=0x26fbd4) returned 0x0 [0208.636] GetCapture () returned 0x0 [0208.636] WindowFromPoint (Point=0x1d1) returned 0x5011e [0208.636] GetWindowLongW (hWnd=0x5011e, nIndex=-21) returned 4858488 [0208.636] GetClientRect (in: hWnd=0x5011e, lpRect=0x26f698 | out: lpRect=0x26f698) returned 1 [0208.636] ScreenToClient (in: hWnd=0x5011e, lpPoint=0x26f6a8 | out: lpPoint=0x26f6a8) returned 1 [0208.636] PtInRect (lprc=0x26f698, pt=0x197) returned 1 [0208.636] GetCurrentThreadId () returned 0x220 [0208.636] GetMessageW (in: lpMsg=0x26fbd4, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x26fbd4) returned 1 [0208.954] TranslateMessage (lpMsg=0x26fbd4) returned 0 [0208.954] DispatchMessageW (lpMsg=0x26fbd4) returned 0x0 [0208.955] GetCapture () returned 0x0 [0208.955] WindowFromPoint (Point=0x1d1) returned 0x5011e [0208.955] GetWindowLongW (hWnd=0x5011e, nIndex=-21) returned 4858488 [0208.955] GetClientRect (in: hWnd=0x5011e, lpRect=0x26f698 | out: lpRect=0x26f698) returned 1 [0208.955] ScreenToClient (in: hWnd=0x5011e, lpPoint=0x26f6a8 | out: lpPoint=0x26f6a8) returned 1 [0208.955] PtInRect (lprc=0x26f698, pt=0x197) returned 1 [0208.955] GetCurrentThreadId () returned 0x220 [0208.955] GetMessageW (in: lpMsg=0x26fbd4, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x26fbd4) returned 1 [0209.259] TranslateMessage (lpMsg=0x26fbd4) returned 0 [0209.259] DispatchMessageW (lpMsg=0x26fbd4) returned 0x0 [0209.259] GetCapture () returned 0x0 [0209.259] WindowFromPoint (Point=0x1d1) returned 0x5011e [0209.259] GetWindowLongW (hWnd=0x5011e, nIndex=-21) returned 4858488 [0209.259] GetClientRect (in: hWnd=0x5011e, lpRect=0x26f698 | out: lpRect=0x26f698) returned 1 [0209.259] ScreenToClient (in: hWnd=0x5011e, lpPoint=0x26f6a8 | out: lpPoint=0x26f6a8) returned 1 [0209.259] PtInRect (lprc=0x26f698, pt=0x197) returned 1 [0209.259] GetCurrentThreadId () returned 0x220 [0209.259] GetMessageW (in: lpMsg=0x26fbd4, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x26fbd4) returned 1 [0209.571] TranslateMessage (lpMsg=0x26fbd4) returned 0 [0209.571] DispatchMessageW (lpMsg=0x26fbd4) returned 0x0 [0209.571] GetCapture () returned 0x0 [0209.571] WindowFromPoint (Point=0x1d1) returned 0x5011e [0209.571] GetWindowLongW (hWnd=0x5011e, nIndex=-21) returned 4858488 [0209.571] GetClientRect (in: hWnd=0x5011e, lpRect=0x26f698 | out: lpRect=0x26f698) returned 1 [0209.571] ScreenToClient (in: hWnd=0x5011e, lpPoint=0x26f6a8 | out: lpPoint=0x26f6a8) returned 1 [0209.571] PtInRect (lprc=0x26f698, pt=0x197) returned 1 [0209.571] GetCurrentThreadId () returned 0x220 [0209.571] GetMessageW (in: lpMsg=0x26fbd4, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x26fbd4) returned 1 [0209.883] TranslateMessage (lpMsg=0x26fbd4) returned 0 [0209.883] DispatchMessageW (lpMsg=0x26fbd4) returned 0x0 [0209.883] GetCapture () returned 0x0 [0209.883] WindowFromPoint (Point=0x1d1) returned 0x5011e [0209.883] GetWindowLongW (hWnd=0x5011e, nIndex=-21) returned 4858488 [0209.883] GetClientRect (in: hWnd=0x5011e, lpRect=0x26f698 | out: lpRect=0x26f698) returned 1 [0209.883] ScreenToClient (in: hWnd=0x5011e, lpPoint=0x26f6a8 | out: lpPoint=0x26f6a8) returned 1 [0209.883] PtInRect (lprc=0x26f698, pt=0x197) returned 1 [0209.883] GetCurrentThreadId () returned 0x220 [0209.883] GetMessageW (in: lpMsg=0x26fbd4, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x26fbd4) returned 1 [0210.195] TranslateMessage (lpMsg=0x26fbd4) returned 0 [0210.195] DispatchMessageW (lpMsg=0x26fbd4) returned 0x0 [0210.195] GetCapture () returned 0x0 [0210.195] WindowFromPoint (Point=0x1d1) returned 0x5011e [0210.195] GetWindowLongW (hWnd=0x5011e, nIndex=-21) returned 4858488 [0210.195] GetClientRect (in: hWnd=0x5011e, lpRect=0x26f698 | out: lpRect=0x26f698) returned 1 [0210.195] ScreenToClient (in: hWnd=0x5011e, lpPoint=0x26f6a8 | out: lpPoint=0x26f6a8) returned 1 [0210.195] PtInRect (lprc=0x26f698, pt=0x197) returned 1 [0210.195] GetCurrentThreadId () returned 0x220 [0210.195] GetMessageW (in: lpMsg=0x26fbd4, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x26fbd4) returned 1 [0210.507] TranslateMessage (lpMsg=0x26fbd4) returned 0 [0210.507] DispatchMessageW (lpMsg=0x26fbd4) returned 0x0 [0210.507] GetCapture () returned 0x0 [0210.507] WindowFromPoint (Point=0x1d1) returned 0x5011e [0210.507] GetWindowLongW (hWnd=0x5011e, nIndex=-21) returned 4858488 [0210.507] GetClientRect (in: hWnd=0x5011e, lpRect=0x26f698 | out: lpRect=0x26f698) returned 1 [0210.507] ScreenToClient (in: hWnd=0x5011e, lpPoint=0x26f6a8 | out: lpPoint=0x26f6a8) returned 1 [0210.507] PtInRect (lprc=0x26f698, pt=0x197) returned 1 [0210.507] GetCurrentThreadId () returned 0x220 [0210.507] GetMessageW (in: lpMsg=0x26fbd4, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x26fbd4) returned 1 [0210.819] TranslateMessage (lpMsg=0x26fbd4) returned 0 [0210.819] DispatchMessageW (lpMsg=0x26fbd4) returned 0x0 [0210.819] GetCapture () returned 0x0 [0210.819] WindowFromPoint (Point=0x1d1) returned 0x5011e [0210.819] GetWindowLongW (hWnd=0x5011e, nIndex=-21) returned 4858488 [0210.819] GetClientRect (in: hWnd=0x5011e, lpRect=0x26f698 | out: lpRect=0x26f698) returned 1 [0210.819] ScreenToClient (in: hWnd=0x5011e, lpPoint=0x26f6a8 | out: lpPoint=0x26f6a8) returned 1 [0210.819] PtInRect (lprc=0x26f698, pt=0x197) returned 1 [0210.819] GetCurrentThreadId () returned 0x220 [0210.819] GetMessageW (in: lpMsg=0x26fbd4, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x26fbd4) returned 1 [0211.131] TranslateMessage (lpMsg=0x26fbd4) returned 0 [0211.131] DispatchMessageW (lpMsg=0x26fbd4) returned 0x0 [0211.131] GetCapture () returned 0x0 [0211.131] WindowFromPoint (Point=0x1d1) returned 0x5011e [0211.131] GetWindowLongW (hWnd=0x5011e, nIndex=-21) returned 4858488 [0211.131] GetClientRect (in: hWnd=0x5011e, lpRect=0x26f698 | out: lpRect=0x26f698) returned 1 [0211.131] ScreenToClient (in: hWnd=0x5011e, lpPoint=0x26f6a8 | out: lpPoint=0x26f6a8) returned 1 [0211.131] PtInRect (lprc=0x26f698, pt=0x197) returned 1 [0211.131] GetCurrentThreadId () returned 0x220 [0211.131] GetMessageW (in: lpMsg=0x26fbd4, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x26fbd4) returned 1 [0211.443] TranslateMessage (lpMsg=0x26fbd4) returned 0 [0211.443] DispatchMessageW (lpMsg=0x26fbd4) returned 0x0 [0211.443] GetCapture () returned 0x0 [0211.443] WindowFromPoint (Point=0x1d1) returned 0x5011e [0211.443] GetWindowLongW (hWnd=0x5011e, nIndex=-21) returned 4858488 [0211.443] GetClientRect (in: hWnd=0x5011e, lpRect=0x26f698 | out: lpRect=0x26f698) returned 1 [0211.443] ScreenToClient (in: hWnd=0x5011e, lpPoint=0x26f6a8 | out: lpPoint=0x26f6a8) returned 1 [0211.443] PtInRect (lprc=0x26f698, pt=0x197) returned 1 [0211.443] GetCurrentThreadId () returned 0x220 [0211.443] GetMessageW (in: lpMsg=0x26fbd4, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x26fbd4) returned 1 [0211.755] TranslateMessage (lpMsg=0x26fbd4) returned 0 [0211.755] DispatchMessageW (lpMsg=0x26fbd4) returned 0x0 [0211.755] GetCapture () returned 0x0 [0211.755] WindowFromPoint (Point=0x1d1) returned 0x5011e [0211.755] GetWindowLongW (hWnd=0x5011e, nIndex=-21) returned 4858488 [0211.755] GetClientRect (in: hWnd=0x5011e, lpRect=0x26f698 | out: lpRect=0x26f698) returned 1 [0211.755] ScreenToClient (in: hWnd=0x5011e, lpPoint=0x26f6a8 | out: lpPoint=0x26f6a8) returned 1 [0211.755] PtInRect (lprc=0x26f698, pt=0x197) returned 1 [0211.755] GetCurrentThreadId () returned 0x220 [0211.755] GetMessageW (in: lpMsg=0x26fbd4, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x26fbd4) returned 1 [0212.067] TranslateMessage (lpMsg=0x26fbd4) returned 0 [0212.067] DispatchMessageW (lpMsg=0x26fbd4) returned 0x0 [0212.067] GetCapture () returned 0x0 [0212.067] WindowFromPoint (Point=0x1d1) returned 0x5011e [0212.067] GetWindowLongW (hWnd=0x5011e, nIndex=-21) returned 4858488 [0212.067] GetClientRect (in: hWnd=0x5011e, lpRect=0x26f698 | out: lpRect=0x26f698) returned 1 [0212.067] ScreenToClient (in: hWnd=0x5011e, lpPoint=0x26f6a8 | out: lpPoint=0x26f6a8) returned 1 [0212.067] PtInRect (lprc=0x26f698, pt=0x197) returned 1 [0212.067] GetCurrentThreadId () returned 0x220 [0212.067] GetMessageW (in: lpMsg=0x26fbd4, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x26fbd4) returned 1 [0212.379] TranslateMessage (lpMsg=0x26fbd4) returned 0 [0212.379] DispatchMessageW (lpMsg=0x26fbd4) returned 0x0 [0212.379] GetCapture () returned 0x0 [0212.379] WindowFromPoint (Point=0x1d1) returned 0x5011e [0212.379] GetWindowLongW (hWnd=0x5011e, nIndex=-21) returned 4858488 [0212.379] GetClientRect (in: hWnd=0x5011e, lpRect=0x26f698 | out: lpRect=0x26f698) returned 1 [0212.379] ScreenToClient (in: hWnd=0x5011e, lpPoint=0x26f6a8 | out: lpPoint=0x26f6a8) returned 1 [0212.379] PtInRect (lprc=0x26f698, pt=0x197) returned 1 [0212.379] GetCurrentThreadId () returned 0x220 [0212.379] GetMessageW (in: lpMsg=0x26fbd4, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x26fbd4) returned 1 [0212.691] TranslateMessage (lpMsg=0x26fbd4) returned 0 [0212.691] DispatchMessageW (lpMsg=0x26fbd4) returned 0x0 [0212.691] GetCapture () returned 0x0 [0212.691] WindowFromPoint (Point=0x1d1) returned 0x5011e [0212.691] GetWindowLongW (hWnd=0x5011e, nIndex=-21) returned 4858488 [0212.691] GetClientRect (in: hWnd=0x5011e, lpRect=0x26f698 | out: lpRect=0x26f698) returned 1 [0212.691] ScreenToClient (in: hWnd=0x5011e, lpPoint=0x26f6a8 | out: lpPoint=0x26f6a8) returned 1 [0212.691] PtInRect (lprc=0x26f698, pt=0x197) returned 1 [0212.691] GetCurrentThreadId () returned 0x220 [0212.691] GetMessageW (in: lpMsg=0x26fbd4, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x26fbd4) returned 1 [0213.003] TranslateMessage (lpMsg=0x26fbd4) returned 0 [0213.003] DispatchMessageW (lpMsg=0x26fbd4) returned 0x0 [0213.003] GetCapture () returned 0x0 [0213.003] WindowFromPoint (Point=0x1d1) returned 0x5011e [0213.003] GetWindowLongW (hWnd=0x5011e, nIndex=-21) returned 4858488 [0213.003] GetClientRect (in: hWnd=0x5011e, lpRect=0x26f698 | out: lpRect=0x26f698) returned 1 [0213.003] ScreenToClient (in: hWnd=0x5011e, lpPoint=0x26f6a8 | out: lpPoint=0x26f6a8) returned 1 [0213.003] PtInRect (lprc=0x26f698, pt=0x197) returned 1 [0213.003] GetCurrentThreadId () returned 0x220 [0213.003] GetMessageW (in: lpMsg=0x26fbd4, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x26fbd4) returned 1 [0213.315] TranslateMessage (lpMsg=0x26fbd4) returned 0 [0213.315] DispatchMessageW (lpMsg=0x26fbd4) returned 0x0 [0213.315] GetCapture () returned 0x0 [0213.315] WindowFromPoint (Point=0x1d1) returned 0x5011e [0213.315] GetWindowLongW (hWnd=0x5011e, nIndex=-21) returned 4858488 [0213.315] GetClientRect (in: hWnd=0x5011e, lpRect=0x26f698 | out: lpRect=0x26f698) returned 1 [0213.315] ScreenToClient (in: hWnd=0x5011e, lpPoint=0x26f6a8 | out: lpPoint=0x26f6a8) returned 1 [0213.315] PtInRect (lprc=0x26f698, pt=0x197) returned 1 [0213.315] GetCurrentThreadId () returned 0x220 [0213.315] GetMessageW (in: lpMsg=0x26fbd4, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x26fbd4) returned 1 [0213.627] TranslateMessage (lpMsg=0x26fbd4) returned 0 [0213.627] DispatchMessageW (lpMsg=0x26fbd4) returned 0x0 [0213.627] GetCapture () returned 0x0 [0213.627] WindowFromPoint (Point=0x1d1) returned 0x5011e [0213.627] GetWindowLongW (hWnd=0x5011e, nIndex=-21) returned 4858488 [0213.627] GetClientRect (in: hWnd=0x5011e, lpRect=0x26f698 | out: lpRect=0x26f698) returned 1 [0213.627] ScreenToClient (in: hWnd=0x5011e, lpPoint=0x26f6a8 | out: lpPoint=0x26f6a8) returned 1 [0213.627] PtInRect (lprc=0x26f698, pt=0x197) returned 1 [0213.627] GetCurrentThreadId () returned 0x220 [0213.627] GetMessageW (in: lpMsg=0x26fbd4, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x26fbd4) returned 1 [0213.939] TranslateMessage (lpMsg=0x26fbd4) returned 0 [0213.939] DispatchMessageW (lpMsg=0x26fbd4) returned 0x0 [0213.939] GetCapture () returned 0x0 [0213.939] WindowFromPoint (Point=0x1d1) returned 0x5011e [0213.939] GetWindowLongW (hWnd=0x5011e, nIndex=-21) returned 4858488 [0213.939] GetClientRect (in: hWnd=0x5011e, lpRect=0x26f698 | out: lpRect=0x26f698) returned 1 [0213.939] ScreenToClient (in: hWnd=0x5011e, lpPoint=0x26f6a8 | out: lpPoint=0x26f6a8) returned 1 [0213.939] PtInRect (lprc=0x26f698, pt=0x197) returned 1 [0213.939] GetCurrentThreadId () returned 0x220 [0213.939] GetMessageW (in: lpMsg=0x26fbd4, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x26fbd4) returned 1 [0214.098] GetWindowLongW (hWnd=0x5011e, nIndex=-21) returned 4858488 [0214.098] GetClientRect (in: hWnd=0x5011e, lpRect=0x26f878 | out: lpRect=0x26f878) returned 1 [0214.098] ScreenToClient (in: hWnd=0x5011e, lpPoint=0x26f888 | out: lpPoint=0x26f888) returned 1 [0214.098] PtInRect (lprc=0x26f878, pt=0x46) returned 1 [0214.098] GetCurrentThreadId () returned 0x220 [0214.098] GetWindowLongW (hWnd=0x5011e, nIndex=-21) returned 4858488 [0214.098] ScreenToClient (in: hWnd=0x5011e, lpPoint=0x26f8f8 | out: lpPoint=0x26f8f8) returned 1 [0214.099] GetMessageTime () returned 275388 [0214.099] GetMessagePos () returned 0x24401d1 [0214.099] GetCapture () returned 0x0 [0214.099] IntersectRect (in: lprcDst=0x26f2e8, lprcSrc1=0x26f2e8, lprcSrc2=0x26f378 | out: lprcDst=0x26f2e8) returned 1 [0214.099] IntersectRect (in: lprcDst=0x26f0a4, lprcSrc1=0x26f0a4, lprcSrc2=0x26f074 | out: lprcDst=0x26f0a4) returned 1 [0214.099] IntersectRect (in: lprcDst=0x26f388, lprcSrc1=0x26f388, lprcSrc2=0x26f094 | out: lprcDst=0x26f388) returned 1 [0214.099] HeapFree (in: hHeap=0x470000, dwFlags=0x0, lpMem=0x0 | out: hHeap=0x470000) returned 1 [0214.099] RtlAllocateHeap (HeapHandle=0x470000, Flags=0x0, Size=0x24) returned 0x4e77b8 [0214.099] IntersectRect (in: lprcDst=0x26f388, lprcSrc1=0x26f388, lprcSrc2=0x26f0b4 | out: lprcDst=0x26f388) returned 1 [0214.099] IntersectRect (in: lprcDst=0x26ee78, lprcSrc1=0x26ee78, lprcSrc2=0x26f378 | out: lprcDst=0x26ee78) returned 1 [0214.099] IntersectRect (in: lprcDst=0x26ee78, lprcSrc1=0x26ee78, lprcSrc2=0x26f378 | out: lprcDst=0x26ee78) returned 1 [0214.099] IntersectRect (in: lprcDst=0x26eab0, lprcSrc1=0x26eab0, lprcSrc2=0x26ea80 | out: lprcDst=0x26eab0) returned 1 [0214.099] IntersectRect (in: lprcDst=0x26f410, lprcSrc1=0x26f410, lprcSrc2=0x26eaa0 | out: lprcDst=0x26f410) returned 1 [0214.099] IntersectRect (in: lprcDst=0x26ec34, lprcSrc1=0x26ec34, lprcSrc2=0x26ec04 | out: lprcDst=0x26ec34) returned 1 [0214.099] IntersectRect (in: lprcDst=0x26f388, lprcSrc1=0x26f388, lprcSrc2=0x26ec24 | out: lprcDst=0x26f388) returned 1 [0214.099] HeapFree (in: hHeap=0x470000, dwFlags=0x0, lpMem=0x0 | out: hHeap=0x470000) returned 1 [0214.099] RtlAllocateHeap (HeapHandle=0x470000, Flags=0x0, Size=0x24) returned 0x4e7788 [0214.099] IntersectRect (in: lprcDst=0x26ea70, lprcSrc1=0x26ea70, lprcSrc2=0x26f378 | out: lprcDst=0x26ea70) returned 1 [0214.099] IntersectRect (in: lprcDst=0x26f388, lprcSrc1=0x26f388, lprcSrc2=0x26ec44 | out: lprcDst=0x26f388) returned 1 [0214.099] IntersectRect (in: lprcDst=0x26ea08, lprcSrc1=0x26ea08, lprcSrc2=0x26f378 | out: lprcDst=0x26ea08) returned 1 [0214.099] IntersectRect (in: lprcDst=0x26ea08, lprcSrc1=0x26ea08, lprcSrc2=0x26f378 | out: lprcDst=0x26ea08) returned 1 [0214.099] IntersectRect (in: lprcDst=0x26e794, lprcSrc1=0x26e794, lprcSrc2=0x26e64c | out: lprcDst=0x26e794) returned 1 [0214.099] IntersectRect (in: lprcDst=0x26f388, lprcSrc1=0x26f388, lprcSrc2=0x26e7b4 | out: lprcDst=0x26f388) returned 1 [0214.099] HeapFree (in: hHeap=0x470000, dwFlags=0x0, lpMem=0x0 | out: hHeap=0x470000) returned 1 [0214.099] RtlAllocateHeap (HeapHandle=0x470000, Flags=0x0, Size=0x24) returned 0x4e7848 [0214.099] IntersectRect (in: lprcDst=0x26f388, lprcSrc1=0x26f388, lprcSrc2=0x26e7d4 | out: lprcDst=0x26f388) returned 1 [0214.099] IntersectRect (in: lprcDst=0x26e598, lprcSrc1=0x26e598, lprcSrc2=0x26f378 | out: lprcDst=0x26e598) returned 1 [0214.099] IntersectRect (in: lprcDst=0x26e598, lprcSrc1=0x26e598, lprcSrc2=0x26f378 | out: lprcDst=0x26e598) returned 1 [0214.099] IntersectRect (in: lprcDst=0x26e324, lprcSrc1=0x26e324, lprcSrc2=0x26e1dc | out: lprcDst=0x26e324) returned 1 [0214.099] IntersectRect (in: lprcDst=0x26f388, lprcSrc1=0x26f388, lprcSrc2=0x26e344 | out: lprcDst=0x26f388) returned 1 [0214.099] HeapFree (in: hHeap=0x470000, dwFlags=0x0, lpMem=0x0 | out: hHeap=0x470000) returned 1 [0214.100] RtlAllocateHeap (HeapHandle=0x470000, Flags=0x0, Size=0x24) returned 0x4e7878 [0214.100] IntersectRect (in: lprcDst=0x26f388, lprcSrc1=0x26f388, lprcSrc2=0x26e364 | out: lprcDst=0x26f388) returned 1 [0214.100] IntersectRect (in: lprcDst=0x26e128, lprcSrc1=0x26e128, lprcSrc2=0x26f378 | out: lprcDst=0x26e128) returned 1 [0214.100] IntersectRect (in: lprcDst=0x26e128, lprcSrc1=0x26e128, lprcSrc2=0x26f378 | out: lprcDst=0x26e128) returned 0 [0214.100] IntersectRect (in: lprcDst=0x26e128, lprcSrc1=0x26e128, lprcSrc2=0x26f378 | out: lprcDst=0x26e128) returned 1 [0214.100] IntersectRect (in: lprcDst=0x26e128, lprcSrc1=0x26e128, lprcSrc2=0x26f378 | out: lprcDst=0x26e128) returned 1 [0214.100] IntersectRect (in: lprcDst=0x26e128, lprcSrc1=0x26e128, lprcSrc2=0x26f378 | out: lprcDst=0x26e128) returned 1 [0214.100] IntersectRect (in: lprcDst=0x26e128, lprcSrc1=0x26e128, lprcSrc2=0x26f378 | out: lprcDst=0x26e128) returned 1 [0214.100] IntersectRect (in: lprcDst=0x26df6c, lprcSrc1=0x26df6c, lprcSrc2=0x26de08 | out: lprcDst=0x26df6c) returned 1 [0214.100] HeapFree (in: hHeap=0x470000, dwFlags=0x0, lpMem=0x0 | out: hHeap=0x470000) returned 1 [0214.100] RtlAllocateHeap (HeapHandle=0x470000, Flags=0x0, Size=0x24) returned 0x4e78a8 [0214.100] IntersectRect (in: lprcDst=0x26f388, lprcSrc1=0x26f388, lprcSrc2=0x26df5c | out: lprcDst=0x26f388) returned 1 [0214.100] IntersectRect (in: lprcDst=0x26de18, lprcSrc1=0x26de18, lprcSrc2=0x26f378 | out: lprcDst=0x26de18) returned 1 [0214.100] IntersectRect (in: lprcDst=0x26f388, lprcSrc1=0x26f388, lprcSrc2=0x26df7c | out: lprcDst=0x26f388) returned 1 [0214.100] PostMessageW (hWnd=0x7011a, Msg=0x8002, wParam=0x0, lParam=0x0) returned 1 [0214.101] PtInRect (lprc=0x26dcbc, pt=0x32) returned 0 [0214.101] PtInRect (lprc=0x26dcbc, pt=0x32) returned 0 [0214.101] HeapFree (in: hHeap=0x470000, dwFlags=0x0, lpMem=0x4e78a8 | out: hHeap=0x470000) returned 1 [0214.101] IntersectRect (in: lprcDst=0x26e1e8, lprcSrc1=0x26e1e8, lprcSrc2=0x26f378 | out: lprcDst=0x26e1e8) returned 1 [0214.101] HeapFree (in: hHeap=0x470000, dwFlags=0x0, lpMem=0x4e7878 | out: hHeap=0x470000) returned 1 [0214.101] HeapFree (in: hHeap=0x470000, dwFlags=0x0, lpMem=0x4e7848 | out: hHeap=0x470000) returned 1 [0214.101] HeapFree (in: hHeap=0x470000, dwFlags=0x0, lpMem=0x4e7788 | out: hHeap=0x470000) returned 1 [0214.101] HeapFree (in: hHeap=0x470000, dwFlags=0x0, lpMem=0x4e77b8 | out: hHeap=0x470000) returned 1 [0214.101] HeapFree (in: hHeap=0x470000, dwFlags=0x0, lpMem=0x0 | out: hHeap=0x470000) returned 1 [0214.101] PtInRect (lprc=0x26f524, pt=0x32) returned 1 [0214.101] LoadCursorA (hInstance=0x0, lpCursorName=0x7f00) returned 0x10003 [0214.101] GetCursor () returned 0x10003 [0214.101] TranslateMessage (lpMsg=0x26fbd4) returned 0 [0214.101] DispatchMessageW (lpMsg=0x26fbd4) returned 0x0 [0214.101] GetWindowLongW (hWnd=0x5011e, nIndex=-21) returned 4858488 [0214.102] GetMessageTime () returned 275544 [0214.102] GetMessagePos () returned 0x31a0080 [0214.102] GetCapture () returned 0x0 [0214.102] GetCurrentThreadId () returned 0x220 [0214.102] GetCurrentThreadId () returned 0x220 [0214.102] GetCurrentThreadId () returned 0x220 [0214.102] IntersectRect (in: lprcDst=0x26f370, lprcSrc1=0x26f370, lprcSrc2=0x26f400 | out: lprcDst=0x26f370) returned 1 [0214.102] IntersectRect (in: lprcDst=0x26f12c, lprcSrc1=0x26f12c, lprcSrc2=0x26f0fc | out: lprcDst=0x26f12c) returned 1 [0214.102] IntersectRect (in: lprcDst=0x26f410, lprcSrc1=0x26f410, lprcSrc2=0x26f11c | out: lprcDst=0x26f410) returned 1 [0214.102] HeapFree (in: hHeap=0x470000, dwFlags=0x0, lpMem=0x0 | out: hHeap=0x470000) returned 1 [0214.102] RtlAllocateHeap (HeapHandle=0x470000, Flags=0x0, Size=0x24) returned 0x4e77b8 [0214.102] IntersectRect (in: lprcDst=0x26f410, lprcSrc1=0x26f410, lprcSrc2=0x26f13c | out: lprcDst=0x26f410) returned 1 [0214.102] IntersectRect (in: lprcDst=0x26ef00, lprcSrc1=0x26ef00, lprcSrc2=0x26f400 | out: lprcDst=0x26ef00) returned 1 [0214.102] IntersectRect (in: lprcDst=0x26ef00, lprcSrc1=0x26ef00, lprcSrc2=0x26f400 | out: lprcDst=0x26ef00) returned 1 [0214.102] IntersectRect (in: lprcDst=0x26eb38, lprcSrc1=0x26eb38, lprcSrc2=0x26eb08 | out: lprcDst=0x26eb38) returned 1 [0214.102] IntersectRect (in: lprcDst=0x26f498, lprcSrc1=0x26f498, lprcSrc2=0x26eb28 | out: lprcDst=0x26f498) returned 1 [0214.102] IntersectRect (in: lprcDst=0x26ecbc, lprcSrc1=0x26ecbc, lprcSrc2=0x26ec8c | out: lprcDst=0x26ecbc) returned 1 [0214.102] IntersectRect (in: lprcDst=0x26f410, lprcSrc1=0x26f410, lprcSrc2=0x26ecac | out: lprcDst=0x26f410) returned 1 [0214.102] HeapFree (in: hHeap=0x470000, dwFlags=0x0, lpMem=0x0 | out: hHeap=0x470000) returned 1 [0214.102] RtlAllocateHeap (HeapHandle=0x470000, Flags=0x0, Size=0x24) returned 0x4e7788 [0214.102] IntersectRect (in: lprcDst=0x26eaf8, lprcSrc1=0x26eaf8, lprcSrc2=0x26f400 | out: lprcDst=0x26eaf8) returned 1 [0214.102] IntersectRect (in: lprcDst=0x26f410, lprcSrc1=0x26f410, lprcSrc2=0x26eccc | out: lprcDst=0x26f410) returned 1 [0214.102] IntersectRect (in: lprcDst=0x26ea90, lprcSrc1=0x26ea90, lprcSrc2=0x26f400 | out: lprcDst=0x26ea90) returned 1 [0214.102] IntersectRect (in: lprcDst=0x26ea90, lprcSrc1=0x26ea90, lprcSrc2=0x26f400 | out: lprcDst=0x26ea90) returned 1 [0214.102] IntersectRect (in: lprcDst=0x26e81c, lprcSrc1=0x26e81c, lprcSrc2=0x26e6d4 | out: lprcDst=0x26e81c) returned 1 [0214.102] IntersectRect (in: lprcDst=0x26f410, lprcSrc1=0x26f410, lprcSrc2=0x26e83c | out: lprcDst=0x26f410) returned 1 [0214.102] HeapFree (in: hHeap=0x470000, dwFlags=0x0, lpMem=0x0 | out: hHeap=0x470000) returned 1 [0214.102] RtlAllocateHeap (HeapHandle=0x470000, Flags=0x0, Size=0x24) returned 0x4e7848 [0214.102] IntersectRect (in: lprcDst=0x26f410, lprcSrc1=0x26f410, lprcSrc2=0x26e85c | out: lprcDst=0x26f410) returned 1 [0214.102] IntersectRect (in: lprcDst=0x26e620, lprcSrc1=0x26e620, lprcSrc2=0x26f400 | out: lprcDst=0x26e620) returned 1 [0214.102] IntersectRect (in: lprcDst=0x26e620, lprcSrc1=0x26e620, lprcSrc2=0x26f400 | out: lprcDst=0x26e620) returned 1 [0214.102] IntersectRect (in: lprcDst=0x26e3ac, lprcSrc1=0x26e3ac, lprcSrc2=0x26e264 | out: lprcDst=0x26e3ac) returned 1 [0214.102] IntersectRect (in: lprcDst=0x26f410, lprcSrc1=0x26f410, lprcSrc2=0x26e3cc | out: lprcDst=0x26f410) returned 1 [0214.102] HeapFree (in: hHeap=0x470000, dwFlags=0x0, lpMem=0x0 | out: hHeap=0x470000) returned 1 [0214.102] RtlAllocateHeap (HeapHandle=0x470000, Flags=0x0, Size=0x24) returned 0x4e7878 [0214.103] IntersectRect (in: lprcDst=0x26f410, lprcSrc1=0x26f410, lprcSrc2=0x26e3ec | out: lprcDst=0x26f410) returned 1 [0214.103] IntersectRect (in: lprcDst=0x26e1b0, lprcSrc1=0x26e1b0, lprcSrc2=0x26f400 | out: lprcDst=0x26e1b0) returned 1 [0214.103] IntersectRect (in: lprcDst=0x26e1b0, lprcSrc1=0x26e1b0, lprcSrc2=0x26f400 | out: lprcDst=0x26e1b0) returned 0 [0214.103] IntersectRect (in: lprcDst=0x26e1b0, lprcSrc1=0x26e1b0, lprcSrc2=0x26f400 | out: lprcDst=0x26e1b0) returned 1 [0214.103] IntersectRect (in: lprcDst=0x26e1b0, lprcSrc1=0x26e1b0, lprcSrc2=0x26f400 | out: lprcDst=0x26e1b0) returned 1 [0214.103] IntersectRect (in: lprcDst=0x26e1b0, lprcSrc1=0x26e1b0, lprcSrc2=0x26f400 | out: lprcDst=0x26e1b0) returned 1 [0214.103] IntersectRect (in: lprcDst=0x26e1b0, lprcSrc1=0x26e1b0, lprcSrc2=0x26f400 | out: lprcDst=0x26e1b0) returned 1 [0214.103] IntersectRect (in: lprcDst=0x26dff4, lprcSrc1=0x26dff4, lprcSrc2=0x26de90 | out: lprcDst=0x26dff4) returned 1 [0214.103] HeapFree (in: hHeap=0x470000, dwFlags=0x0, lpMem=0x0 | out: hHeap=0x470000) returned 1 [0214.103] RtlAllocateHeap (HeapHandle=0x470000, Flags=0x0, Size=0x24) returned 0x4e78a8 [0214.103] IntersectRect (in: lprcDst=0x26f410, lprcSrc1=0x26f410, lprcSrc2=0x26dfe4 | out: lprcDst=0x26f410) returned 1 [0214.103] IntersectRect (in: lprcDst=0x26dea0, lprcSrc1=0x26dea0, lprcSrc2=0x26f400 | out: lprcDst=0x26dea0) returned 1 [0214.103] IntersectRect (in: lprcDst=0x26f410, lprcSrc1=0x26f410, lprcSrc2=0x26e004 | out: lprcDst=0x26f410) returned 1 [0214.103] PtInRect (lprc=0x26dd44, pt=0x32) returned 0 [0214.103] PtInRect (lprc=0x26dd44, pt=0x32) returned 0 [0214.103] HeapFree (in: hHeap=0x470000, dwFlags=0x0, lpMem=0x4e78a8 | out: hHeap=0x470000) returned 1 [0214.103] IntersectRect (in: lprcDst=0x26e270, lprcSrc1=0x26e270, lprcSrc2=0x26f400 | out: lprcDst=0x26e270) returned 1 [0214.103] HeapFree (in: hHeap=0x470000, dwFlags=0x0, lpMem=0x4e7878 | out: hHeap=0x470000) returned 1 [0214.103] HeapFree (in: hHeap=0x470000, dwFlags=0x0, lpMem=0x4e7848 | out: hHeap=0x470000) returned 1 [0214.103] HeapFree (in: hHeap=0x470000, dwFlags=0x0, lpMem=0x4e7788 | out: hHeap=0x470000) returned 1 [0214.103] HeapFree (in: hHeap=0x470000, dwFlags=0x0, lpMem=0x4e77b8 | out: hHeap=0x470000) returned 1 [0214.103] HeapFree (in: hHeap=0x470000, dwFlags=0x0, lpMem=0x0 | out: hHeap=0x470000) returned 1 [0214.104] GetMessageTime () returned 275544 [0214.104] GetMessagePos () returned 0x31a0080 [0214.104] KillTimer (hWnd=0x7011a, uIDEvent=0x2004) returned 1 [0214.104] GetCapture () returned 0x0 [0214.104] ClientToScreen (in: hWnd=0x5011e, lpPoint=0x26f69c | out: lpPoint=0x26f69c) returned 1 [0214.104] RtlAllocateHeap (HeapHandle=0x470000, Flags=0x0, Size=0xf8) returned 0x4f3878 [0214.104] GetCurrentThreadId () returned 0x220 [0214.104] ClientToScreen (in: hWnd=0x5011e, lpPoint=0x26f6a0 | out: lpPoint=0x26f6a0) returned 1 [0214.104] RtlAllocateHeap (HeapHandle=0x470000, Flags=0x0, Size=0xf8) returned 0x4f3978 [0214.104] HeapFree (in: hHeap=0x470000, dwFlags=0x0, lpMem=0x4f3978 | out: hHeap=0x470000) returned 1 [0214.104] ClientToScreen (in: hWnd=0x5011e, lpPoint=0x26f6a0 | out: lpPoint=0x26f6a0) returned 1 [0214.104] RtlAllocateHeap (HeapHandle=0x470000, Flags=0x0, Size=0xf8) returned 0x4f3978 [0214.105] HeapFree (in: hHeap=0x470000, dwFlags=0x0, lpMem=0x4f3978 | out: hHeap=0x470000) returned 1 [0214.105] GetSysColor (nIndex=5) returned 0xffffff [0214.105] HeapFree (in: hHeap=0x470000, dwFlags=0x0, lpMem=0x0 | out: hHeap=0x470000) returned 1 [0214.105] HeapFree (in: hHeap=0x470000, dwFlags=0x0, lpMem=0x0 | out: hHeap=0x470000) returned 1 [0214.105] GetSysColor (nIndex=5) returned 0xffffff [0214.105] HeapFree (in: hHeap=0x470000, dwFlags=0x0, lpMem=0x0 | out: hHeap=0x470000) returned 1 [0214.105] HeapFree (in: hHeap=0x470000, dwFlags=0x0, lpMem=0x0 | out: hHeap=0x470000) returned 1 [0214.105] CActiveIMMAppEx_Trident:IActiveIMMApp:OnDefWindowProc (in: This=0x4b1068, hWnd=0x5011e, msg=0x2a3, wParam=0x0, lParam=0x2ca0046, plResult=0x26f794 | out: plResult=0x26f794) returned 0x1 [0214.105] NtdllDefWindowProc_W () returned 0x0 [0214.105] HeapFree (in: hHeap=0x470000, dwFlags=0x0, lpMem=0x4f3878 | out: hHeap=0x470000) returned 1 [0214.105] SetTimer (hWnd=0x7011a, nIDEvent=0x2005, uElapse=0x12c, lpTimerFunc=0x0) returned 0x2005 [0214.105] ClientToScreen (in: hWnd=0x5011e, lpPoint=0x26f69c | out: lpPoint=0x26f69c) returned 1 [0214.105] RtlAllocateHeap (HeapHandle=0x470000, Flags=0x0, Size=0xf8) returned 0x4f3878 [0214.106] GetCurrentThreadId () returned 0x220 [0214.106] CActiveIMMAppEx_Trident:IActiveIMMApp:OnDefWindowProc (in: This=0x4b1068, hWnd=0x5011e, msg=0x200, wParam=0x0, lParam=0x2ca0046, plResult=0x26f794 | out: plResult=0x26f794) returned 0x1 [0214.106] NtdllDefWindowProc_W () returned 0x0 [0214.106] HeapFree (in: hHeap=0x470000, dwFlags=0x0, lpMem=0x4f3878 | out: hHeap=0x470000) returned 1 [0214.106] GetMessageTime () returned 275544 [0214.106] GetMessagePos () returned 0x31a0080 [0214.106] GetCapture () returned 0x0 [0214.106] ClientToScreen (in: hWnd=0x5011e, lpPoint=0x26f69c | out: lpPoint=0x26f69c) returned 1 [0214.106] RtlAllocateHeap (HeapHandle=0x470000, Flags=0x0, Size=0xf8) returned 0x4f3878 [0214.106] GetCurrentThreadId () returned 0x220 [0214.106] CActiveIMMAppEx_Trident:IActiveIMMApp:OnDefWindowProc (in: This=0x4b1068, hWnd=0x5011e, msg=0x8004, wParam=0x0, lParam=0x2ca0046, plResult=0x26f794 | out: plResult=0x26f794) returned 0x1 [0214.106] NtdllDefWindowProc_W () returned 0x0 [0214.106] HeapFree (in: hHeap=0x470000, dwFlags=0x0, lpMem=0x4f3878 | out: hHeap=0x470000) returned 1 [0214.107] GetMessageW (in: lpMsg=0x26fbd4, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x26fbd4) returned 1 [0214.107] TranslateMessage (lpMsg=0x26fbd4) returned 0 [0214.107] DispatchMessageW (lpMsg=0x26fbd4) returned 0x0 [0214.107] GetCurrentThreadId () returned 0x220 [0214.107] GetCurrentThreadId () returned 0x220 [0214.107] GetCurrentThreadId () returned 0x220 [0214.107] GetMessageW (in: lpMsg=0x26fbd4, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x26fbd4) returned 1 [0214.407] TranslateMessage (lpMsg=0x26fbd4) returned 0 [0214.407] DispatchMessageW (lpMsg=0x26fbd4) returned 0x0 [0214.407] GetCapture () returned 0x0 [0214.407] WindowFromPoint (Point=0x80) returned 0x5011e [0214.407] GetWindowLongW (hWnd=0x5011e, nIndex=-21) returned 4858488 [0214.407] GetClientRect (in: hWnd=0x5011e, lpRect=0x26f698 | out: lpRect=0x26f698) returned 1 [0214.407] ScreenToClient (in: hWnd=0x5011e, lpPoint=0x26f6a8 | out: lpPoint=0x26f6a8) returned 1 [0214.407] PtInRect (lprc=0x26f698, pt=0x46) returned 1 [0214.407] GetCurrentThreadId () returned 0x220 [0214.407] GetMessageW (in: lpMsg=0x26fbd4, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x26fbd4) returned 1 [0214.719] TranslateMessage (lpMsg=0x26fbd4) returned 0 [0214.719] DispatchMessageW (lpMsg=0x26fbd4) returned 0x0 [0214.719] GetCapture () returned 0x0 [0214.719] WindowFromPoint (Point=0x80) returned 0x5011e [0214.719] GetWindowLongW (hWnd=0x5011e, nIndex=-21) returned 4858488 [0214.719] GetClientRect (in: hWnd=0x5011e, lpRect=0x26f698 | out: lpRect=0x26f698) returned 1 [0214.719] ScreenToClient (in: hWnd=0x5011e, lpPoint=0x26f6a8 | out: lpPoint=0x26f6a8) returned 1 [0214.719] PtInRect (lprc=0x26f698, pt=0x46) returned 1 [0214.719] GetCurrentThreadId () returned 0x220 [0214.719] GetMessageW (in: lpMsg=0x26fbd4, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x26fbd4) returned 1 [0215.031] TranslateMessage (lpMsg=0x26fbd4) returned 0 [0215.031] DispatchMessageW (lpMsg=0x26fbd4) returned 0x0 [0215.031] GetCapture () returned 0x0 [0215.031] WindowFromPoint (Point=0x80) returned 0x5011e [0215.031] GetWindowLongW (hWnd=0x5011e, nIndex=-21) returned 4858488 [0215.031] GetClientRect (in: hWnd=0x5011e, lpRect=0x26f698 | out: lpRect=0x26f698) returned 1 [0215.031] ScreenToClient (in: hWnd=0x5011e, lpPoint=0x26f6a8 | out: lpPoint=0x26f6a8) returned 1 [0215.031] PtInRect (lprc=0x26f698, pt=0x46) returned 1 [0215.031] GetCurrentThreadId () returned 0x220 [0215.031] GetMessageW (in: lpMsg=0x26fbd4, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x26fbd4) returned 1 [0215.343] TranslateMessage (lpMsg=0x26fbd4) returned 0 [0215.343] DispatchMessageW (lpMsg=0x26fbd4) returned 0x0 [0215.343] GetCapture () returned 0x0 [0215.343] WindowFromPoint (Point=0x80) returned 0x5011e [0215.343] GetWindowLongW (hWnd=0x5011e, nIndex=-21) returned 4858488 [0215.343] GetClientRect (in: hWnd=0x5011e, lpRect=0x26f698 | out: lpRect=0x26f698) returned 1 [0215.343] ScreenToClient (in: hWnd=0x5011e, lpPoint=0x26f6a8 | out: lpPoint=0x26f6a8) returned 1 [0215.343] PtInRect (lprc=0x26f698, pt=0x46) returned 1 [0215.343] GetCurrentThreadId () returned 0x220 [0215.343] GetMessageW (in: lpMsg=0x26fbd4, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x26fbd4) returned 1 [0215.655] TranslateMessage (lpMsg=0x26fbd4) returned 0 [0215.655] DispatchMessageW (lpMsg=0x26fbd4) returned 0x0 [0215.655] GetCapture () returned 0x0 [0215.656] WindowFromPoint (Point=0x80) returned 0x5011e [0215.656] GetWindowLongW (hWnd=0x5011e, nIndex=-21) returned 4858488 [0215.656] GetClientRect (in: hWnd=0x5011e, lpRect=0x26f698 | out: lpRect=0x26f698) returned 1 [0215.656] ScreenToClient (in: hWnd=0x5011e, lpPoint=0x26f6a8 | out: lpPoint=0x26f6a8) returned 1 [0215.656] PtInRect (lprc=0x26f698, pt=0x46) returned 1 [0215.656] GetCurrentThreadId () returned 0x220 [0215.656] GetMessageW (in: lpMsg=0x26fbd4, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x26fbd4) returned 1 [0215.967] TranslateMessage (lpMsg=0x26fbd4) returned 0 [0215.967] DispatchMessageW (lpMsg=0x26fbd4) returned 0x0 [0215.967] GetCapture () returned 0x0 [0215.967] WindowFromPoint (Point=0x80) returned 0x5011e [0215.967] GetWindowLongW (hWnd=0x5011e, nIndex=-21) returned 4858488 [0215.967] GetClientRect (in: hWnd=0x5011e, lpRect=0x26f698 | out: lpRect=0x26f698) returned 1 [0215.967] ScreenToClient (in: hWnd=0x5011e, lpPoint=0x26f6a8 | out: lpPoint=0x26f6a8) returned 1 [0215.967] PtInRect (lprc=0x26f698, pt=0x46) returned 1 [0215.967] GetCurrentThreadId () returned 0x220 [0215.967] GetMessageW (in: lpMsg=0x26fbd4, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x26fbd4) returned 1 [0216.279] TranslateMessage (lpMsg=0x26fbd4) returned 0 [0216.279] DispatchMessageW (lpMsg=0x26fbd4) returned 0x0 [0216.279] GetCapture () returned 0x0 [0216.279] WindowFromPoint (Point=0x80) returned 0x5011e [0216.279] GetWindowLongW (hWnd=0x5011e, nIndex=-21) returned 4858488 [0216.279] GetClientRect (in: hWnd=0x5011e, lpRect=0x26f698 | out: lpRect=0x26f698) returned 1 [0216.279] ScreenToClient (in: hWnd=0x5011e, lpPoint=0x26f6a8 | out: lpPoint=0x26f6a8) returned 1 [0216.279] PtInRect (lprc=0x26f698, pt=0x46) returned 1 [0216.279] GetCurrentThreadId () returned 0x220 [0216.279] GetMessageW (in: lpMsg=0x26fbd4, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x26fbd4) returned 1 [0216.591] TranslateMessage (lpMsg=0x26fbd4) returned 0 [0216.591] DispatchMessageW (lpMsg=0x26fbd4) returned 0x0 [0216.591] GetCapture () returned 0x0 [0216.591] WindowFromPoint (Point=0x80) returned 0x5011e [0216.591] GetWindowLongW (hWnd=0x5011e, nIndex=-21) returned 4858488 [0216.591] GetClientRect (in: hWnd=0x5011e, lpRect=0x26f698 | out: lpRect=0x26f698) returned 1 [0216.591] ScreenToClient (in: hWnd=0x5011e, lpPoint=0x26f6a8 | out: lpPoint=0x26f6a8) returned 1 [0216.591] PtInRect (lprc=0x26f698, pt=0x46) returned 1 [0216.591] GetCurrentThreadId () returned 0x220 [0216.591] GetMessageW (in: lpMsg=0x26fbd4, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x26fbd4) returned 1 [0216.903] TranslateMessage (lpMsg=0x26fbd4) returned 0 [0216.903] DispatchMessageW (lpMsg=0x26fbd4) returned 0x0 [0216.903] GetCapture () returned 0x0 [0216.903] WindowFromPoint (Point=0x80) returned 0x5011e [0216.903] GetWindowLongW (hWnd=0x5011e, nIndex=-21) returned 4858488 [0216.903] GetClientRect (in: hWnd=0x5011e, lpRect=0x26f698 | out: lpRect=0x26f698) returned 1 [0216.903] ScreenToClient (in: hWnd=0x5011e, lpPoint=0x26f6a8 | out: lpPoint=0x26f6a8) returned 1 [0216.903] PtInRect (lprc=0x26f698, pt=0x46) returned 1 [0216.903] GetCurrentThreadId () returned 0x220 [0216.903] GetMessageW (in: lpMsg=0x26fbd4, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x26fbd4) returned 1 [0217.215] TranslateMessage (lpMsg=0x26fbd4) returned 0 [0217.215] DispatchMessageW (lpMsg=0x26fbd4) returned 0x0 [0217.215] GetCapture () returned 0x0 [0217.215] WindowFromPoint (Point=0x80) returned 0x5011e [0217.215] GetWindowLongW (hWnd=0x5011e, nIndex=-21) returned 4858488 [0217.215] GetClientRect (in: hWnd=0x5011e, lpRect=0x26f698 | out: lpRect=0x26f698) returned 1 [0217.215] ScreenToClient (in: hWnd=0x5011e, lpPoint=0x26f6a8 | out: lpPoint=0x26f6a8) returned 1 [0217.215] PtInRect (lprc=0x26f698, pt=0x46) returned 1 [0217.215] GetCurrentThreadId () returned 0x220 [0217.215] GetMessageW (in: lpMsg=0x26fbd4, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x26fbd4) returned 1 [0217.529] TranslateMessage (lpMsg=0x26fbd4) returned 0 [0217.529] DispatchMessageW (lpMsg=0x26fbd4) returned 0x0 [0217.529] GetCapture () returned 0x0 [0217.529] WindowFromPoint (Point=0x80) returned 0x5011e [0217.529] GetWindowLongW (hWnd=0x5011e, nIndex=-21) returned 4858488 [0217.529] GetClientRect (in: hWnd=0x5011e, lpRect=0x26f698 | out: lpRect=0x26f698) returned 1 [0217.529] ScreenToClient (in: hWnd=0x5011e, lpPoint=0x26f6a8 | out: lpPoint=0x26f6a8) returned 1 [0217.529] PtInRect (lprc=0x26f698, pt=0x46) returned 1 [0217.529] GetCurrentThreadId () returned 0x220 [0217.529] GetMessageW (in: lpMsg=0x26fbd4, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x26fbd4) returned 1 [0217.839] TranslateMessage (lpMsg=0x26fbd4) returned 0 [0217.839] DispatchMessageW (lpMsg=0x26fbd4) returned 0x0 [0217.839] GetCapture () returned 0x0 [0217.839] WindowFromPoint (Point=0x80) returned 0x5011e [0217.839] GetWindowLongW (hWnd=0x5011e, nIndex=-21) returned 4858488 [0217.839] GetClientRect (in: hWnd=0x5011e, lpRect=0x26f698 | out: lpRect=0x26f698) returned 1 [0217.839] ScreenToClient (in: hWnd=0x5011e, lpPoint=0x26f6a8 | out: lpPoint=0x26f6a8) returned 1 [0217.839] PtInRect (lprc=0x26f698, pt=0x46) returned 1 [0217.839] GetCurrentThreadId () returned 0x220 [0217.839] GetMessageW (in: lpMsg=0x26fbd4, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x26fbd4) returned 1 [0218.151] TranslateMessage (lpMsg=0x26fbd4) returned 0 [0218.151] DispatchMessageW (lpMsg=0x26fbd4) returned 0x0 [0218.151] GetCapture () returned 0x0 [0218.151] WindowFromPoint (Point=0x80) returned 0x5011e [0218.151] GetWindowLongW (hWnd=0x5011e, nIndex=-21) returned 4858488 [0218.151] GetClientRect (in: hWnd=0x5011e, lpRect=0x26f698 | out: lpRect=0x26f698) returned 1 [0218.151] ScreenToClient (in: hWnd=0x5011e, lpPoint=0x26f6a8 | out: lpPoint=0x26f6a8) returned 1 [0218.151] PtInRect (lprc=0x26f698, pt=0x46) returned 1 [0218.151] GetCurrentThreadId () returned 0x220 [0218.151] GetMessageW (in: lpMsg=0x26fbd4, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x26fbd4) returned 1 [0218.463] TranslateMessage (lpMsg=0x26fbd4) returned 0 [0218.463] DispatchMessageW (lpMsg=0x26fbd4) returned 0x0 [0218.463] GetCapture () returned 0x0 [0218.463] WindowFromPoint (Point=0x80) returned 0x5011e [0218.463] GetWindowLongW (hWnd=0x5011e, nIndex=-21) returned 4858488 [0218.463] GetClientRect (in: hWnd=0x5011e, lpRect=0x26f698 | out: lpRect=0x26f698) returned 1 [0218.463] ScreenToClient (in: hWnd=0x5011e, lpPoint=0x26f6a8 | out: lpPoint=0x26f6a8) returned 1 [0218.463] PtInRect (lprc=0x26f698, pt=0x46) returned 1 [0218.463] GetCurrentThreadId () returned 0x220 [0218.463] GetMessageW (in: lpMsg=0x26fbd4, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x26fbd4) returned 1 [0218.775] TranslateMessage (lpMsg=0x26fbd4) returned 0 [0218.775] DispatchMessageW (lpMsg=0x26fbd4) returned 0x0 [0218.775] GetCapture () returned 0x0 [0218.775] WindowFromPoint (Point=0x80) returned 0x5011e [0218.775] GetWindowLongW (hWnd=0x5011e, nIndex=-21) returned 4858488 [0218.775] GetClientRect (in: hWnd=0x5011e, lpRect=0x26f698 | out: lpRect=0x26f698) returned 1 [0218.775] ScreenToClient (in: hWnd=0x5011e, lpPoint=0x26f6a8 | out: lpPoint=0x26f6a8) returned 1 [0218.775] PtInRect (lprc=0x26f698, pt=0x46) returned 1 [0218.775] GetCurrentThreadId () returned 0x220 [0218.775] GetMessageW (in: lpMsg=0x26fbd4, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x26fbd4) returned 1 [0219.087] TranslateMessage (lpMsg=0x26fbd4) returned 0 [0219.087] DispatchMessageW (lpMsg=0x26fbd4) returned 0x0 [0219.087] GetCapture () returned 0x0 [0219.087] WindowFromPoint (Point=0x80) returned 0x5011e [0219.087] GetWindowLongW (hWnd=0x5011e, nIndex=-21) returned 4858488 [0219.087] GetClientRect (in: hWnd=0x5011e, lpRect=0x26f698 | out: lpRect=0x26f698) returned 1 [0219.087] ScreenToClient (in: hWnd=0x5011e, lpPoint=0x26f6a8 | out: lpPoint=0x26f6a8) returned 1 [0219.087] PtInRect (lprc=0x26f698, pt=0x46) returned 1 [0219.087] GetCurrentThreadId () returned 0x220 [0219.087] GetMessageW (in: lpMsg=0x26fbd4, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x26fbd4) returned 1 [0219.399] TranslateMessage (lpMsg=0x26fbd4) returned 0 [0219.399] DispatchMessageW (lpMsg=0x26fbd4) returned 0x0 [0219.399] GetCapture () returned 0x0 [0219.399] WindowFromPoint (Point=0x80) returned 0x5011e [0219.399] GetWindowLongW (hWnd=0x5011e, nIndex=-21) returned 4858488 [0219.399] GetClientRect (in: hWnd=0x5011e, lpRect=0x26f698 | out: lpRect=0x26f698) returned 1 [0219.399] ScreenToClient (in: hWnd=0x5011e, lpPoint=0x26f6a8 | out: lpPoint=0x26f6a8) returned 1 [0219.399] PtInRect (lprc=0x26f698, pt=0x46) returned 1 [0219.399] GetCurrentThreadId () returned 0x220 [0219.399] GetMessageW (in: lpMsg=0x26fbd4, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x26fbd4) returned 1 [0219.711] TranslateMessage (lpMsg=0x26fbd4) returned 0 [0219.711] DispatchMessageW (lpMsg=0x26fbd4) returned 0x0 [0219.711] GetCapture () returned 0x0 [0219.711] WindowFromPoint (Point=0x80) returned 0x5011e [0219.711] GetWindowLongW (hWnd=0x5011e, nIndex=-21) returned 4858488 [0219.711] GetClientRect (in: hWnd=0x5011e, lpRect=0x26f698 | out: lpRect=0x26f698) returned 1 [0219.711] ScreenToClient (in: hWnd=0x5011e, lpPoint=0x26f6a8 | out: lpPoint=0x26f6a8) returned 1 [0219.711] PtInRect (lprc=0x26f698, pt=0x46) returned 1 [0219.711] GetCurrentThreadId () returned 0x220 [0219.711] GetMessageW (in: lpMsg=0x26fbd4, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x26fbd4) returned 1 [0220.023] TranslateMessage (lpMsg=0x26fbd4) returned 0 [0220.023] DispatchMessageW (lpMsg=0x26fbd4) returned 0x0 [0220.023] GetCapture () returned 0x0 [0220.023] WindowFromPoint (Point=0x80) returned 0x5011e [0220.023] GetWindowLongW (hWnd=0x5011e, nIndex=-21) returned 4858488 [0220.023] GetClientRect (in: hWnd=0x5011e, lpRect=0x26f698 | out: lpRect=0x26f698) returned 1 [0220.023] ScreenToClient (in: hWnd=0x5011e, lpPoint=0x26f6a8 | out: lpPoint=0x26f6a8) returned 1 [0220.023] PtInRect (lprc=0x26f698, pt=0x46) returned 1 [0220.023] GetCurrentThreadId () returned 0x220 [0220.023] GetMessageW (in: lpMsg=0x26fbd4, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x26fbd4) returned 1 [0220.335] TranslateMessage (lpMsg=0x26fbd4) returned 0 [0220.335] DispatchMessageW (lpMsg=0x26fbd4) returned 0x0 [0220.335] GetCapture () returned 0x0 [0220.335] WindowFromPoint (Point=0x80) returned 0x5011e [0220.335] GetWindowLongW (hWnd=0x5011e, nIndex=-21) returned 4858488 [0220.335] GetClientRect (in: hWnd=0x5011e, lpRect=0x26f698 | out: lpRect=0x26f698) returned 1 [0220.335] ScreenToClient (in: hWnd=0x5011e, lpPoint=0x26f6a8 | out: lpPoint=0x26f6a8) returned 1 [0220.335] PtInRect (lprc=0x26f698, pt=0x46) returned 1 [0220.335] GetCurrentThreadId () returned 0x220 [0220.335] GetMessageW (in: lpMsg=0x26fbd4, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x26fbd4) returned 1 [0220.647] TranslateMessage (lpMsg=0x26fbd4) returned 0 [0220.647] DispatchMessageW (lpMsg=0x26fbd4) returned 0x0 [0220.647] GetCapture () returned 0x0 [0220.647] WindowFromPoint (Point=0x80) returned 0x5011e [0220.647] GetWindowLongW (hWnd=0x5011e, nIndex=-21) returned 4858488 [0220.647] GetClientRect (in: hWnd=0x5011e, lpRect=0x26f698 | out: lpRect=0x26f698) returned 1 [0220.647] ScreenToClient (in: hWnd=0x5011e, lpPoint=0x26f6a8 | out: lpPoint=0x26f6a8) returned 1 [0220.647] PtInRect (lprc=0x26f698, pt=0x46) returned 1 [0220.647] GetCurrentThreadId () returned 0x220 [0220.647] GetMessageW (in: lpMsg=0x26fbd4, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x26fbd4) returned 1 [0220.959] TranslateMessage (lpMsg=0x26fbd4) returned 0 [0220.959] DispatchMessageW (lpMsg=0x26fbd4) returned 0x0 [0220.959] GetCapture () returned 0x0 [0220.959] WindowFromPoint (Point=0x80) returned 0x5011e [0220.959] GetWindowLongW (hWnd=0x5011e, nIndex=-21) returned 4858488 [0220.959] GetClientRect (in: hWnd=0x5011e, lpRect=0x26f698 | out: lpRect=0x26f698) returned 1 [0220.959] ScreenToClient (in: hWnd=0x5011e, lpPoint=0x26f6a8 | out: lpPoint=0x26f6a8) returned 1 [0220.959] PtInRect (lprc=0x26f698, pt=0x46) returned 1 [0220.959] GetCurrentThreadId () returned 0x220 [0220.959] GetMessageW (in: lpMsg=0x26fbd4, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x26fbd4) returned 1 [0221.271] TranslateMessage (lpMsg=0x26fbd4) returned 0 [0221.271] DispatchMessageW (lpMsg=0x26fbd4) returned 0x0 [0221.271] GetCapture () returned 0x0 [0221.271] WindowFromPoint (Point=0x80) returned 0x5011e [0221.271] GetWindowLongW (hWnd=0x5011e, nIndex=-21) returned 4858488 [0221.271] GetClientRect (in: hWnd=0x5011e, lpRect=0x26f698 | out: lpRect=0x26f698) returned 1 [0221.271] ScreenToClient (in: hWnd=0x5011e, lpPoint=0x26f6a8 | out: lpPoint=0x26f6a8) returned 1 [0221.271] PtInRect (lprc=0x26f698, pt=0x46) returned 1 [0221.271] GetCurrentThreadId () returned 0x220 [0221.271] GetMessageW (in: lpMsg=0x26fbd4, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x26fbd4) returned 1 [0221.583] TranslateMessage (lpMsg=0x26fbd4) returned 0 [0221.583] DispatchMessageW (lpMsg=0x26fbd4) returned 0x0 [0221.583] GetCapture () returned 0x0 [0221.583] WindowFromPoint (Point=0x80) returned 0x5011e [0221.583] GetWindowLongW (hWnd=0x5011e, nIndex=-21) returned 4858488 [0221.583] GetClientRect (in: hWnd=0x5011e, lpRect=0x26f698 | out: lpRect=0x26f698) returned 1 [0221.583] ScreenToClient (in: hWnd=0x5011e, lpPoint=0x26f6a8 | out: lpPoint=0x26f6a8) returned 1 [0221.583] PtInRect (lprc=0x26f698, pt=0x46) returned 1 [0221.583] GetCurrentThreadId () returned 0x220 [0221.583] GetMessageW (in: lpMsg=0x26fbd4, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x26fbd4) returned 1 [0221.895] TranslateMessage (lpMsg=0x26fbd4) returned 0 [0221.895] DispatchMessageW (lpMsg=0x26fbd4) returned 0x0 [0221.895] GetCapture () returned 0x0 [0221.895] WindowFromPoint (Point=0x80) returned 0x5011e [0221.895] GetWindowLongW (hWnd=0x5011e, nIndex=-21) returned 4858488 [0221.895] GetClientRect (in: hWnd=0x5011e, lpRect=0x26f698 | out: lpRect=0x26f698) returned 1 [0221.895] ScreenToClient (in: hWnd=0x5011e, lpPoint=0x26f6a8 | out: lpPoint=0x26f6a8) returned 1 [0221.895] PtInRect (lprc=0x26f698, pt=0x46) returned 1 [0221.895] GetCurrentThreadId () returned 0x220 [0221.895] GetMessageW (in: lpMsg=0x26fbd4, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x26fbd4) returned 1 [0222.207] TranslateMessage (lpMsg=0x26fbd4) returned 0 [0222.207] DispatchMessageW (lpMsg=0x26fbd4) returned 0x0 [0222.207] GetCapture () returned 0x0 [0222.207] WindowFromPoint (Point=0x80) returned 0x5011e [0222.207] GetWindowLongW (hWnd=0x5011e, nIndex=-21) returned 4858488 [0222.207] GetClientRect (in: hWnd=0x5011e, lpRect=0x26f698 | out: lpRect=0x26f698) returned 1 [0222.207] ScreenToClient (in: hWnd=0x5011e, lpPoint=0x26f6a8 | out: lpPoint=0x26f6a8) returned 1 [0222.207] PtInRect (lprc=0x26f698, pt=0x46) returned 1 [0222.207] GetCurrentThreadId () returned 0x220 [0222.207] GetMessageW (in: lpMsg=0x26fbd4, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x26fbd4) returned 1 [0222.519] TranslateMessage (lpMsg=0x26fbd4) returned 0 [0222.519] DispatchMessageW (lpMsg=0x26fbd4) returned 0x0 [0222.519] GetCapture () returned 0x0 [0222.519] WindowFromPoint (Point=0x80) returned 0x5011e [0222.519] GetWindowLongW (hWnd=0x5011e, nIndex=-21) returned 4858488 [0222.519] GetClientRect (in: hWnd=0x5011e, lpRect=0x26f698 | out: lpRect=0x26f698) returned 1 [0222.519] ScreenToClient (in: hWnd=0x5011e, lpPoint=0x26f6a8 | out: lpPoint=0x26f6a8) returned 1 [0222.519] PtInRect (lprc=0x26f698, pt=0x46) returned 1 [0222.519] GetCurrentThreadId () returned 0x220 [0222.519] GetMessageW (in: lpMsg=0x26fbd4, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x26fbd4) returned 1 [0222.831] TranslateMessage (lpMsg=0x26fbd4) returned 0 [0222.831] DispatchMessageW (lpMsg=0x26fbd4) returned 0x0 [0222.831] GetCapture () returned 0x0 [0222.831] WindowFromPoint (Point=0x80) returned 0x5011e [0222.831] GetWindowLongW (hWnd=0x5011e, nIndex=-21) returned 4858488 [0222.831] GetClientRect (in: hWnd=0x5011e, lpRect=0x26f698 | out: lpRect=0x26f698) returned 1 [0222.831] ScreenToClient (in: hWnd=0x5011e, lpPoint=0x26f6a8 | out: lpPoint=0x26f6a8) returned 1 [0222.831] PtInRect (lprc=0x26f698, pt=0x46) returned 1 [0222.831] GetCurrentThreadId () returned 0x220 [0222.831] GetMessageW (in: lpMsg=0x26fbd4, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x26fbd4) returned 1 [0223.143] TranslateMessage (lpMsg=0x26fbd4) returned 0 [0223.143] DispatchMessageW (lpMsg=0x26fbd4) returned 0x0 [0223.143] GetCapture () returned 0x0 [0223.143] WindowFromPoint (Point=0x80) returned 0x5011e [0223.143] GetWindowLongW (hWnd=0x5011e, nIndex=-21) returned 4858488 [0223.143] GetClientRect (in: hWnd=0x5011e, lpRect=0x26f698 | out: lpRect=0x26f698) returned 1 [0223.143] ScreenToClient (in: hWnd=0x5011e, lpPoint=0x26f6a8 | out: lpPoint=0x26f6a8) returned 1 [0223.143] PtInRect (lprc=0x26f698, pt=0x46) returned 1 [0223.143] GetCurrentThreadId () returned 0x220 [0223.143] GetMessageW (in: lpMsg=0x26fbd4, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x26fbd4) returned 1 [0223.455] TranslateMessage (lpMsg=0x26fbd4) returned 0 [0223.455] DispatchMessageW (lpMsg=0x26fbd4) returned 0x0 [0223.455] GetCapture () returned 0x0 [0223.455] WindowFromPoint (Point=0x80) returned 0x5011e [0223.455] GetWindowLongW (hWnd=0x5011e, nIndex=-21) returned 4858488 [0223.455] GetClientRect (in: hWnd=0x5011e, lpRect=0x26f698 | out: lpRect=0x26f698) returned 1 [0223.455] ScreenToClient (in: hWnd=0x5011e, lpPoint=0x26f6a8 | out: lpPoint=0x26f6a8) returned 1 [0223.455] PtInRect (lprc=0x26f698, pt=0x46) returned 1 [0223.455] GetCurrentThreadId () returned 0x220 [0223.455] GetMessageW (in: lpMsg=0x26fbd4, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x26fbd4) returned 1 [0223.767] TranslateMessage (lpMsg=0x26fbd4) returned 0 [0223.767] DispatchMessageW (lpMsg=0x26fbd4) returned 0x0 [0223.767] GetCapture () returned 0x0 [0223.767] WindowFromPoint (Point=0x80) returned 0x5011e [0223.767] GetWindowLongW (hWnd=0x5011e, nIndex=-21) returned 4858488 [0223.767] GetClientRect (in: hWnd=0x5011e, lpRect=0x26f698 | out: lpRect=0x26f698) returned 1 [0223.767] ScreenToClient (in: hWnd=0x5011e, lpPoint=0x26f6a8 | out: lpPoint=0x26f6a8) returned 1 [0223.767] PtInRect (lprc=0x26f698, pt=0x46) returned 1 [0223.767] GetCurrentThreadId () returned 0x220 [0223.767] GetMessageW (in: lpMsg=0x26fbd4, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x26fbd4) returned 1 [0224.079] TranslateMessage (lpMsg=0x26fbd4) returned 0 [0224.079] DispatchMessageW (lpMsg=0x26fbd4) returned 0x0 [0224.079] GetCapture () returned 0x0 [0224.079] WindowFromPoint (Point=0x80) returned 0x5011e [0224.079] GetWindowLongW (hWnd=0x5011e, nIndex=-21) returned 4858488 [0224.079] GetClientRect (in: hWnd=0x5011e, lpRect=0x26f698 | out: lpRect=0x26f698) returned 1 [0224.079] ScreenToClient (in: hWnd=0x5011e, lpPoint=0x26f6a8 | out: lpPoint=0x26f6a8) returned 1 [0224.079] PtInRect (lprc=0x26f698, pt=0x46) returned 1 [0224.079] GetCurrentThreadId () returned 0x220 [0224.079] GetMessageW (in: lpMsg=0x26fbd4, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x26fbd4) returned 1 [0224.205] GetWindowLongW (hWnd=0x5011e, nIndex=-21) returned 4858488 [0224.205] GetClientRect (in: hWnd=0x5011e, lpRect=0x26f878 | out: lpRect=0x26f878) returned 1 [0224.206] ScreenToClient (in: hWnd=0x5011e, lpPoint=0x26f888 | out: lpPoint=0x26f888) returned 1 [0224.206] PtInRect (lprc=0x26f878, pt=0x5a) returned 1 [0224.206] GetCurrentThreadId () returned 0x220 [0224.206] GetWindowLongW (hWnd=0x5011e, nIndex=-21) returned 4858488 [0224.206] ScreenToClient (in: hWnd=0x5011e, lpPoint=0x26f8f8 | out: lpPoint=0x26f8f8) returned 1 [0224.206] GetMessageTime () returned 285528 [0224.206] GetMessagePos () returned 0x31a0080 [0224.206] GetCapture () returned 0x0 [0224.206] IntersectRect (in: lprcDst=0x26f2e8, lprcSrc1=0x26f2e8, lprcSrc2=0x26f378 | out: lprcDst=0x26f2e8) returned 1 [0224.206] IntersectRect (in: lprcDst=0x26f0a4, lprcSrc1=0x26f0a4, lprcSrc2=0x26f074 | out: lprcDst=0x26f0a4) returned 1 [0224.206] IntersectRect (in: lprcDst=0x26f388, lprcSrc1=0x26f388, lprcSrc2=0x26f094 | out: lprcDst=0x26f388) returned 1 [0224.206] HeapFree (in: hHeap=0x470000, dwFlags=0x0, lpMem=0x0 | out: hHeap=0x470000) returned 1 [0224.206] RtlAllocateHeap (HeapHandle=0x470000, Flags=0x0, Size=0x24) returned 0x4e77b8 [0224.206] IntersectRect (in: lprcDst=0x26f388, lprcSrc1=0x26f388, lprcSrc2=0x26f0b4 | out: lprcDst=0x26f388) returned 1 [0224.206] IntersectRect (in: lprcDst=0x26ee78, lprcSrc1=0x26ee78, lprcSrc2=0x26f378 | out: lprcDst=0x26ee78) returned 1 [0224.206] IntersectRect (in: lprcDst=0x26ee78, lprcSrc1=0x26ee78, lprcSrc2=0x26f378 | out: lprcDst=0x26ee78) returned 1 [0224.206] IntersectRect (in: lprcDst=0x26eab0, lprcSrc1=0x26eab0, lprcSrc2=0x26ea80 | out: lprcDst=0x26eab0) returned 1 [0224.206] IntersectRect (in: lprcDst=0x26f410, lprcSrc1=0x26f410, lprcSrc2=0x26eaa0 | out: lprcDst=0x26f410) returned 1 [0224.206] IntersectRect (in: lprcDst=0x26ec34, lprcSrc1=0x26ec34, lprcSrc2=0x26ec04 | out: lprcDst=0x26ec34) returned 1 [0224.206] IntersectRect (in: lprcDst=0x26f388, lprcSrc1=0x26f388, lprcSrc2=0x26ec24 | out: lprcDst=0x26f388) returned 1 [0224.207] HeapFree (in: hHeap=0x470000, dwFlags=0x0, lpMem=0x0 | out: hHeap=0x470000) returned 1 [0224.207] RtlAllocateHeap (HeapHandle=0x470000, Flags=0x0, Size=0x24) returned 0x4e7788 [0224.207] IntersectRect (in: lprcDst=0x26ea70, lprcSrc1=0x26ea70, lprcSrc2=0x26f378 | out: lprcDst=0x26ea70) returned 1 [0224.207] IntersectRect (in: lprcDst=0x26f388, lprcSrc1=0x26f388, lprcSrc2=0x26ec44 | out: lprcDst=0x26f388) returned 1 [0224.207] IntersectRect (in: lprcDst=0x26ea08, lprcSrc1=0x26ea08, lprcSrc2=0x26f378 | out: lprcDst=0x26ea08) returned 1 [0224.207] IntersectRect (in: lprcDst=0x26ea08, lprcSrc1=0x26ea08, lprcSrc2=0x26f378 | out: lprcDst=0x26ea08) returned 1 [0224.207] IntersectRect (in: lprcDst=0x26e794, lprcSrc1=0x26e794, lprcSrc2=0x26e64c | out: lprcDst=0x26e794) returned 1 [0224.207] IntersectRect (in: lprcDst=0x26f388, lprcSrc1=0x26f388, lprcSrc2=0x26e7b4 | out: lprcDst=0x26f388) returned 1 [0224.207] HeapFree (in: hHeap=0x470000, dwFlags=0x0, lpMem=0x0 | out: hHeap=0x470000) returned 1 [0224.207] RtlAllocateHeap (HeapHandle=0x470000, Flags=0x0, Size=0x24) returned 0x4e7848 [0224.207] IntersectRect (in: lprcDst=0x26f388, lprcSrc1=0x26f388, lprcSrc2=0x26e7d4 | out: lprcDst=0x26f388) returned 1 [0224.207] IntersectRect (in: lprcDst=0x26e598, lprcSrc1=0x26e598, lprcSrc2=0x26f378 | out: lprcDst=0x26e598) returned 1 [0224.207] IntersectRect (in: lprcDst=0x26e598, lprcSrc1=0x26e598, lprcSrc2=0x26f378 | out: lprcDst=0x26e598) returned 1 [0224.207] IntersectRect (in: lprcDst=0x26e324, lprcSrc1=0x26e324, lprcSrc2=0x26e1dc | out: lprcDst=0x26e324) returned 1 [0224.207] IntersectRect (in: lprcDst=0x26f388, lprcSrc1=0x26f388, lprcSrc2=0x26e344 | out: lprcDst=0x26f388) returned 1 [0224.207] HeapFree (in: hHeap=0x470000, dwFlags=0x0, lpMem=0x0 | out: hHeap=0x470000) returned 1 [0224.207] RtlAllocateHeap (HeapHandle=0x470000, Flags=0x0, Size=0x24) returned 0x4e7878 [0224.207] IntersectRect (in: lprcDst=0x26f388, lprcSrc1=0x26f388, lprcSrc2=0x26e364 | out: lprcDst=0x26f388) returned 1 [0224.207] IntersectRect (in: lprcDst=0x26e128, lprcSrc1=0x26e128, lprcSrc2=0x26f378 | out: lprcDst=0x26e128) returned 1 [0224.207] IntersectRect (in: lprcDst=0x26e128, lprcSrc1=0x26e128, lprcSrc2=0x26f378 | out: lprcDst=0x26e128) returned 0 [0224.207] IntersectRect (in: lprcDst=0x26e128, lprcSrc1=0x26e128, lprcSrc2=0x26f378 | out: lprcDst=0x26e128) returned 1 [0224.207] IntersectRect (in: lprcDst=0x26e128, lprcSrc1=0x26e128, lprcSrc2=0x26f378 | out: lprcDst=0x26e128) returned 1 [0224.207] IntersectRect (in: lprcDst=0x26e128, lprcSrc1=0x26e128, lprcSrc2=0x26f378 | out: lprcDst=0x26e128) returned 1 [0224.207] IntersectRect (in: lprcDst=0x26e128, lprcSrc1=0x26e128, lprcSrc2=0x26f378 | out: lprcDst=0x26e128) returned 1 [0224.207] IntersectRect (in: lprcDst=0x26df6c, lprcSrc1=0x26df6c, lprcSrc2=0x26de08 | out: lprcDst=0x26df6c) returned 1 [0224.207] HeapFree (in: hHeap=0x470000, dwFlags=0x0, lpMem=0x0 | out: hHeap=0x470000) returned 1 [0224.207] RtlAllocateHeap (HeapHandle=0x470000, Flags=0x0, Size=0x24) returned 0x4e78a8 [0224.207] IntersectRect (in: lprcDst=0x26f388, lprcSrc1=0x26f388, lprcSrc2=0x26df5c | out: lprcDst=0x26f388) returned 1 [0224.207] IntersectRect (in: lprcDst=0x26de18, lprcSrc1=0x26de18, lprcSrc2=0x26f378 | out: lprcDst=0x26de18) returned 1 [0224.207] IntersectRect (in: lprcDst=0x26f388, lprcSrc1=0x26f388, lprcSrc2=0x26df7c | out: lprcDst=0x26f388) returned 1 [0224.208] PostMessageW (hWnd=0x7011a, Msg=0x8002, wParam=0x0, lParam=0x0) returned 1 [0224.208] PtInRect (lprc=0x26dcbc, pt=0x802) returned 0 [0224.208] HeapFree (in: hHeap=0x470000, dwFlags=0x0, lpMem=0x4e78a8 | out: hHeap=0x470000) returned 1 [0224.208] IntersectRect (in: lprcDst=0x26e1e8, lprcSrc1=0x26e1e8, lprcSrc2=0x26f378 | out: lprcDst=0x26e1e8) returned 1 [0224.208] HeapFree (in: hHeap=0x470000, dwFlags=0x0, lpMem=0x4e7878 | out: hHeap=0x470000) returned 1 [0224.208] HeapFree (in: hHeap=0x470000, dwFlags=0x0, lpMem=0x4e7848 | out: hHeap=0x470000) returned 1 [0224.208] HeapFree (in: hHeap=0x470000, dwFlags=0x0, lpMem=0x4e7788 | out: hHeap=0x470000) returned 1 [0224.208] HeapFree (in: hHeap=0x470000, dwFlags=0x0, lpMem=0x4e77b8 | out: hHeap=0x470000) returned 1 [0224.208] HeapFree (in: hHeap=0x470000, dwFlags=0x0, lpMem=0x0 | out: hHeap=0x470000) returned 1 [0224.208] PtInRect (lprc=0x26f524, pt=0x802) returned 1 [0224.208] LoadCursorA (hInstance=0x0, lpCursorName=0x7f00) returned 0x10003 [0224.208] GetCursor () returned 0x10003 [0224.208] GetCurrentThreadId () returned 0x220 [0224.208] TranslateMessage (lpMsg=0x26fbd4) returned 0 [0224.208] DispatchMessageW (lpMsg=0x26fbd4) returned 0x0 [0224.208] GetWindowLongW (hWnd=0x5011e, nIndex=-21) returned 4858488 [0224.209] GetMessageTime () returned 285653 [0224.209] GetMessagePos () returned 0x2570094 [0224.209] GetCapture () returned 0x0 [0224.209] GetCurrentThreadId () returned 0x220 [0224.209] GetCurrentThreadId () returned 0x220 [0224.209] GetCurrentThreadId () returned 0x220 [0224.209] IntersectRect (in: lprcDst=0x26f370, lprcSrc1=0x26f370, lprcSrc2=0x26f400 | out: lprcDst=0x26f370) returned 1 [0224.209] IntersectRect (in: lprcDst=0x26f12c, lprcSrc1=0x26f12c, lprcSrc2=0x26f0fc | out: lprcDst=0x26f12c) returned 1 [0224.209] IntersectRect (in: lprcDst=0x26f410, lprcSrc1=0x26f410, lprcSrc2=0x26f11c | out: lprcDst=0x26f410) returned 1 [0224.209] HeapFree (in: hHeap=0x470000, dwFlags=0x0, lpMem=0x0 | out: hHeap=0x470000) returned 1 [0224.209] RtlAllocateHeap (HeapHandle=0x470000, Flags=0x0, Size=0x24) returned 0x4e77b8 [0224.209] IntersectRect (in: lprcDst=0x26f410, lprcSrc1=0x26f410, lprcSrc2=0x26f13c | out: lprcDst=0x26f410) returned 1 [0224.209] IntersectRect (in: lprcDst=0x26ef00, lprcSrc1=0x26ef00, lprcSrc2=0x26f400 | out: lprcDst=0x26ef00) returned 1 [0224.209] IntersectRect (in: lprcDst=0x26ef00, lprcSrc1=0x26ef00, lprcSrc2=0x26f400 | out: lprcDst=0x26ef00) returned 1 [0224.209] IntersectRect (in: lprcDst=0x26eb38, lprcSrc1=0x26eb38, lprcSrc2=0x26eb08 | out: lprcDst=0x26eb38) returned 1 [0224.209] IntersectRect (in: lprcDst=0x26f498, lprcSrc1=0x26f498, lprcSrc2=0x26eb28 | out: lprcDst=0x26f498) returned 1 [0224.209] IntersectRect (in: lprcDst=0x26ecbc, lprcSrc1=0x26ecbc, lprcSrc2=0x26ec8c | out: lprcDst=0x26ecbc) returned 1 [0224.209] IntersectRect (in: lprcDst=0x26f410, lprcSrc1=0x26f410, lprcSrc2=0x26ecac | out: lprcDst=0x26f410) returned 1 [0224.209] HeapFree (in: hHeap=0x470000, dwFlags=0x0, lpMem=0x0 | out: hHeap=0x470000) returned 1 [0224.209] RtlAllocateHeap (HeapHandle=0x470000, Flags=0x0, Size=0x24) returned 0x4e7788 [0224.209] IntersectRect (in: lprcDst=0x26eaf8, lprcSrc1=0x26eaf8, lprcSrc2=0x26f400 | out: lprcDst=0x26eaf8) returned 1 [0224.209] IntersectRect (in: lprcDst=0x26f410, lprcSrc1=0x26f410, lprcSrc2=0x26eccc | out: lprcDst=0x26f410) returned 1 [0224.209] IntersectRect (in: lprcDst=0x26ea90, lprcSrc1=0x26ea90, lprcSrc2=0x26f400 | out: lprcDst=0x26ea90) returned 1 [0224.209] IntersectRect (in: lprcDst=0x26ea90, lprcSrc1=0x26ea90, lprcSrc2=0x26f400 | out: lprcDst=0x26ea90) returned 1 [0224.209] IntersectRect (in: lprcDst=0x26e81c, lprcSrc1=0x26e81c, lprcSrc2=0x26e6d4 | out: lprcDst=0x26e81c) returned 1 [0224.209] IntersectRect (in: lprcDst=0x26f410, lprcSrc1=0x26f410, lprcSrc2=0x26e83c | out: lprcDst=0x26f410) returned 1 [0224.209] HeapFree (in: hHeap=0x470000, dwFlags=0x0, lpMem=0x0 | out: hHeap=0x470000) returned 1 [0224.209] RtlAllocateHeap (HeapHandle=0x470000, Flags=0x0, Size=0x24) returned 0x4e7848 [0224.209] IntersectRect (in: lprcDst=0x26f410, lprcSrc1=0x26f410, lprcSrc2=0x26e85c | out: lprcDst=0x26f410) returned 1 [0224.209] IntersectRect (in: lprcDst=0x26e620, lprcSrc1=0x26e620, lprcSrc2=0x26f400 | out: lprcDst=0x26e620) returned 1 [0224.209] IntersectRect (in: lprcDst=0x26e620, lprcSrc1=0x26e620, lprcSrc2=0x26f400 | out: lprcDst=0x26e620) returned 1 [0224.209] IntersectRect (in: lprcDst=0x26e3ac, lprcSrc1=0x26e3ac, lprcSrc2=0x26e264 | out: lprcDst=0x26e3ac) returned 1 [0224.209] IntersectRect (in: lprcDst=0x26f410, lprcSrc1=0x26f410, lprcSrc2=0x26e3cc | out: lprcDst=0x26f410) returned 1 [0224.209] HeapFree (in: hHeap=0x470000, dwFlags=0x0, lpMem=0x0 | out: hHeap=0x470000) returned 1 [0224.209] RtlAllocateHeap (HeapHandle=0x470000, Flags=0x0, Size=0x24) returned 0x4e7878 [0224.210] IntersectRect (in: lprcDst=0x26f410, lprcSrc1=0x26f410, lprcSrc2=0x26e3ec | out: lprcDst=0x26f410) returned 1 [0224.210] IntersectRect (in: lprcDst=0x26e1b0, lprcSrc1=0x26e1b0, lprcSrc2=0x26f400 | out: lprcDst=0x26e1b0) returned 1 [0224.210] IntersectRect (in: lprcDst=0x26e1b0, lprcSrc1=0x26e1b0, lprcSrc2=0x26f400 | out: lprcDst=0x26e1b0) returned 0 [0224.210] IntersectRect (in: lprcDst=0x26e1b0, lprcSrc1=0x26e1b0, lprcSrc2=0x26f400 | out: lprcDst=0x26e1b0) returned 1 [0224.210] IntersectRect (in: lprcDst=0x26e1b0, lprcSrc1=0x26e1b0, lprcSrc2=0x26f400 | out: lprcDst=0x26e1b0) returned 1 [0224.210] IntersectRect (in: lprcDst=0x26e1b0, lprcSrc1=0x26e1b0, lprcSrc2=0x26f400 | out: lprcDst=0x26e1b0) returned 1 [0224.210] IntersectRect (in: lprcDst=0x26e1b0, lprcSrc1=0x26e1b0, lprcSrc2=0x26f400 | out: lprcDst=0x26e1b0) returned 1 [0224.210] IntersectRect (in: lprcDst=0x26dff4, lprcSrc1=0x26dff4, lprcSrc2=0x26de90 | out: lprcDst=0x26dff4) returned 1 [0224.210] HeapFree (in: hHeap=0x470000, dwFlags=0x0, lpMem=0x0 | out: hHeap=0x470000) returned 1 [0224.210] RtlAllocateHeap (HeapHandle=0x470000, Flags=0x0, Size=0x24) returned 0x4e78a8 [0224.210] IntersectRect (in: lprcDst=0x26f410, lprcSrc1=0x26f410, lprcSrc2=0x26dfe4 | out: lprcDst=0x26f410) returned 1 [0224.210] IntersectRect (in: lprcDst=0x26dea0, lprcSrc1=0x26dea0, lprcSrc2=0x26f400 | out: lprcDst=0x26dea0) returned 1 [0224.210] IntersectRect (in: lprcDst=0x26f410, lprcSrc1=0x26f410, lprcSrc2=0x26e004 | out: lprcDst=0x26f410) returned 1 [0224.210] PtInRect (lprc=0x26dd44, pt=0x802) returned 0 [0224.210] HeapFree (in: hHeap=0x470000, dwFlags=0x0, lpMem=0x4e78a8 | out: hHeap=0x470000) returned 1 [0224.210] IntersectRect (in: lprcDst=0x26e270, lprcSrc1=0x26e270, lprcSrc2=0x26f400 | out: lprcDst=0x26e270) returned 1 [0224.210] HeapFree (in: hHeap=0x470000, dwFlags=0x0, lpMem=0x4e7878 | out: hHeap=0x470000) returned 1 [0224.210] HeapFree (in: hHeap=0x470000, dwFlags=0x0, lpMem=0x4e7848 | out: hHeap=0x470000) returned 1 [0224.210] HeapFree (in: hHeap=0x470000, dwFlags=0x0, lpMem=0x4e7788 | out: hHeap=0x470000) returned 1 [0224.210] HeapFree (in: hHeap=0x470000, dwFlags=0x0, lpMem=0x4e77b8 | out: hHeap=0x470000) returned 1 [0224.210] HeapFree (in: hHeap=0x470000, dwFlags=0x0, lpMem=0x0 | out: hHeap=0x470000) returned 1 [0224.210] ClientToScreen (in: hWnd=0x5011e, lpPoint=0x26f69c | out: lpPoint=0x26f69c) returned 1 [0224.210] RtlAllocateHeap (HeapHandle=0x470000, Flags=0x0, Size=0xf8) returned 0x4f3878 [0224.211] GetCurrentThreadId () returned 0x220 [0224.211] CActiveIMMAppEx_Trident:IActiveIMMApp:OnDefWindowProc (in: This=0x4b1068, hWnd=0x5011e, msg=0x200, wParam=0x0, lParam=0x207005a, plResult=0x26f794 | out: plResult=0x26f794) returned 0x1 [0224.211] NtdllDefWindowProc_W () returned 0x0 [0224.211] HeapFree (in: hHeap=0x470000, dwFlags=0x0, lpMem=0x4f3878 | out: hHeap=0x470000) returned 1 [0224.211] GetCurrentThreadId () returned 0x220 [0224.211] GetMessageW (in: lpMsg=0x26fbd4, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x26fbd4) returned 1 [0224.211] TranslateMessage (lpMsg=0x26fbd4) returned 0 [0224.211] DispatchMessageW (lpMsg=0x26fbd4) returned 0x0 [0224.211] GetCurrentThreadId () returned 0x220 [0224.211] GetCurrentThreadId () returned 0x220 [0224.211] GetCurrentThreadId () returned 0x220 [0224.211] GetMessageW (in: lpMsg=0x26fbd4, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x26fbd4) returned 1 [0224.391] TranslateMessage (lpMsg=0x26fbd4) returned 0 [0224.391] DispatchMessageW (lpMsg=0x26fbd4) returned 0x0 [0224.391] GetCapture () returned 0x0 [0224.391] WindowFromPoint (Point=0x94) returned 0x5011e [0224.391] GetWindowLongW (hWnd=0x5011e, nIndex=-21) returned 4858488 [0224.391] GetClientRect (in: hWnd=0x5011e, lpRect=0x26f698 | out: lpRect=0x26f698) returned 1 [0224.391] ScreenToClient (in: hWnd=0x5011e, lpPoint=0x26f6a8 | out: lpPoint=0x26f6a8) returned 1 [0224.391] PtInRect (lprc=0x26f698, pt=0x5a) returned 1 [0224.391] GetCurrentThreadId () returned 0x220 [0224.391] GetMessageW (in: lpMsg=0x26fbd4, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x26fbd4) returned 1 [0224.703] TranslateMessage (lpMsg=0x26fbd4) returned 0 [0224.703] DispatchMessageW (lpMsg=0x26fbd4) returned 0x0 [0224.703] GetCapture () returned 0x0 [0224.703] WindowFromPoint (Point=0x94) returned 0x5011e [0224.703] GetWindowLongW (hWnd=0x5011e, nIndex=-21) returned 4858488 [0224.703] GetClientRect (in: hWnd=0x5011e, lpRect=0x26f698 | out: lpRect=0x26f698) returned 1 [0224.703] ScreenToClient (in: hWnd=0x5011e, lpPoint=0x26f6a8 | out: lpPoint=0x26f6a8) returned 1 [0224.703] PtInRect (lprc=0x26f698, pt=0x5a) returned 1 [0224.703] GetCurrentThreadId () returned 0x220 [0224.703] GetMessageW (in: lpMsg=0x26fbd4, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x26fbd4) returned 1 [0225.015] TranslateMessage (lpMsg=0x26fbd4) returned 0 [0225.015] DispatchMessageW (lpMsg=0x26fbd4) returned 0x0 [0225.015] GetCapture () returned 0x0 [0225.015] WindowFromPoint (Point=0x94) returned 0x5011e [0225.015] GetWindowLongW (hWnd=0x5011e, nIndex=-21) returned 4858488 [0225.015] GetClientRect (in: hWnd=0x5011e, lpRect=0x26f698 | out: lpRect=0x26f698) returned 1 [0225.015] ScreenToClient (in: hWnd=0x5011e, lpPoint=0x26f6a8 | out: lpPoint=0x26f6a8) returned 1 [0225.015] PtInRect (lprc=0x26f698, pt=0x5a) returned 1 [0225.015] GetCurrentThreadId () returned 0x220 [0225.015] GetMessageW (in: lpMsg=0x26fbd4, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x26fbd4) returned 1 [0225.327] TranslateMessage (lpMsg=0x26fbd4) returned 0 [0225.327] DispatchMessageW (lpMsg=0x26fbd4) returned 0x0 [0225.327] GetCapture () returned 0x0 [0225.327] WindowFromPoint (Point=0x94) returned 0x5011e [0225.327] GetWindowLongW (hWnd=0x5011e, nIndex=-21) returned 4858488 [0225.327] GetClientRect (in: hWnd=0x5011e, lpRect=0x26f698 | out: lpRect=0x26f698) returned 1 [0225.327] ScreenToClient (in: hWnd=0x5011e, lpPoint=0x26f6a8 | out: lpPoint=0x26f6a8) returned 1 [0225.327] PtInRect (lprc=0x26f698, pt=0x5a) returned 1 [0225.327] GetCurrentThreadId () returned 0x220 [0225.327] GetMessageW (in: lpMsg=0x26fbd4, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x26fbd4) returned 1 [0225.639] TranslateMessage (lpMsg=0x26fbd4) returned 0 [0225.639] DispatchMessageW (lpMsg=0x26fbd4) returned 0x0 [0225.639] GetCapture () returned 0x0 [0225.639] WindowFromPoint (Point=0x94) returned 0x5011e [0225.639] GetWindowLongW (hWnd=0x5011e, nIndex=-21) returned 4858488 [0225.639] GetClientRect (in: hWnd=0x5011e, lpRect=0x26f698 | out: lpRect=0x26f698) returned 1 [0225.639] ScreenToClient (in: hWnd=0x5011e, lpPoint=0x26f6a8 | out: lpPoint=0x26f6a8) returned 1 [0225.639] PtInRect (lprc=0x26f698, pt=0x5a) returned 1 [0225.639] GetCurrentThreadId () returned 0x220 [0225.639] GetMessageW (in: lpMsg=0x26fbd4, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x26fbd4) returned 1 [0225.958] TranslateMessage (lpMsg=0x26fbd4) returned 0 [0225.958] DispatchMessageW (lpMsg=0x26fbd4) returned 0x0 [0225.958] GetCapture () returned 0x0 [0225.958] WindowFromPoint (Point=0x94) returned 0x5011e [0225.958] GetWindowLongW (hWnd=0x5011e, nIndex=-21) returned 4858488 [0225.958] GetClientRect (in: hWnd=0x5011e, lpRect=0x26f698 | out: lpRect=0x26f698) returned 1 [0225.958] ScreenToClient (in: hWnd=0x5011e, lpPoint=0x26f6a8 | out: lpPoint=0x26f6a8) returned 1 [0225.958] PtInRect (lprc=0x26f698, pt=0x5a) returned 1 [0225.958] GetCurrentThreadId () returned 0x220 [0225.958] GetMessageW (in: lpMsg=0x26fbd4, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x26fbd4) returned 1 [0226.263] TranslateMessage (lpMsg=0x26fbd4) returned 0 [0226.263] DispatchMessageW (lpMsg=0x26fbd4) returned 0x0 [0226.263] GetCapture () returned 0x0 [0226.263] WindowFromPoint (Point=0x94) returned 0x5011e [0226.263] GetWindowLongW (hWnd=0x5011e, nIndex=-21) returned 4858488 [0226.263] GetClientRect (in: hWnd=0x5011e, lpRect=0x26f698 | out: lpRect=0x26f698) returned 1 [0226.263] ScreenToClient (in: hWnd=0x5011e, lpPoint=0x26f6a8 | out: lpPoint=0x26f6a8) returned 1 [0226.263] PtInRect (lprc=0x26f698, pt=0x5a) returned 1 [0226.263] GetCurrentThreadId () returned 0x220 [0226.263] GetMessageW (in: lpMsg=0x26fbd4, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x26fbd4) returned 1 [0226.575] TranslateMessage (lpMsg=0x26fbd4) returned 0 [0226.575] DispatchMessageW (lpMsg=0x26fbd4) returned 0x0 [0226.575] GetCapture () returned 0x0 [0226.575] WindowFromPoint (Point=0x94) returned 0x5011e [0226.575] GetWindowLongW (hWnd=0x5011e, nIndex=-21) returned 4858488 [0226.575] GetClientRect (in: hWnd=0x5011e, lpRect=0x26f698 | out: lpRect=0x26f698) returned 1 [0226.575] ScreenToClient (in: hWnd=0x5011e, lpPoint=0x26f6a8 | out: lpPoint=0x26f6a8) returned 1 [0226.575] PtInRect (lprc=0x26f698, pt=0x5a) returned 1 [0226.575] GetCurrentThreadId () returned 0x220 [0226.575] GetMessageW (in: lpMsg=0x26fbd4, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x26fbd4) returned 1 [0226.887] TranslateMessage (lpMsg=0x26fbd4) returned 0 [0226.887] DispatchMessageW (lpMsg=0x26fbd4) returned 0x0 [0226.887] GetCapture () returned 0x0 [0226.887] WindowFromPoint (Point=0x94) returned 0x5011e [0226.887] GetWindowLongW (hWnd=0x5011e, nIndex=-21) returned 4858488 [0226.887] GetClientRect (in: hWnd=0x5011e, lpRect=0x26f698 | out: lpRect=0x26f698) returned 1 [0226.887] ScreenToClient (in: hWnd=0x5011e, lpPoint=0x26f6a8 | out: lpPoint=0x26f6a8) returned 1 [0226.887] PtInRect (lprc=0x26f698, pt=0x5a) returned 1 [0226.887] GetCurrentThreadId () returned 0x220 [0226.887] GetMessageW (in: lpMsg=0x26fbd4, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x26fbd4) returned 1 [0227.199] TranslateMessage (lpMsg=0x26fbd4) returned 0 [0227.199] DispatchMessageW (lpMsg=0x26fbd4) returned 0x0 [0227.199] GetCapture () returned 0x0 [0227.199] WindowFromPoint (Point=0x94) returned 0x5011e [0227.199] GetWindowLongW (hWnd=0x5011e, nIndex=-21) returned 4858488 [0227.199] GetClientRect (in: hWnd=0x5011e, lpRect=0x26f698 | out: lpRect=0x26f698) returned 1 [0227.199] ScreenToClient (in: hWnd=0x5011e, lpPoint=0x26f6a8 | out: lpPoint=0x26f6a8) returned 1 [0227.199] PtInRect (lprc=0x26f698, pt=0x5a) returned 1 [0227.199] GetCurrentThreadId () returned 0x220 [0227.199] GetMessageW (in: lpMsg=0x26fbd4, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x26fbd4) returned 1 [0227.511] TranslateMessage (lpMsg=0x26fbd4) returned 0 [0227.511] DispatchMessageW (lpMsg=0x26fbd4) returned 0x0 [0227.511] GetCapture () returned 0x0 [0227.511] WindowFromPoint (Point=0x94) returned 0x5011e [0227.511] GetWindowLongW (hWnd=0x5011e, nIndex=-21) returned 4858488 [0227.511] GetClientRect (in: hWnd=0x5011e, lpRect=0x26f698 | out: lpRect=0x26f698) returned 1 [0227.511] ScreenToClient (in: hWnd=0x5011e, lpPoint=0x26f6a8 | out: lpPoint=0x26f6a8) returned 1 [0227.511] PtInRect (lprc=0x26f698, pt=0x5a) returned 1 [0227.511] GetCurrentThreadId () returned 0x220 [0227.511] GetMessageW (in: lpMsg=0x26fbd4, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x26fbd4) returned 1 [0227.823] TranslateMessage (lpMsg=0x26fbd4) returned 0 [0227.823] DispatchMessageW (lpMsg=0x26fbd4) returned 0x0 [0227.823] GetCapture () returned 0x0 [0227.823] WindowFromPoint (Point=0x94) returned 0x5011e [0227.823] GetWindowLongW (hWnd=0x5011e, nIndex=-21) returned 4858488 [0227.823] GetClientRect (in: hWnd=0x5011e, lpRect=0x26f698 | out: lpRect=0x26f698) returned 1 [0227.823] ScreenToClient (in: hWnd=0x5011e, lpPoint=0x26f6a8 | out: lpPoint=0x26f6a8) returned 1 [0227.823] PtInRect (lprc=0x26f698, pt=0x5a) returned 1 [0227.823] GetCurrentThreadId () returned 0x220 [0227.823] GetMessageW (in: lpMsg=0x26fbd4, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x26fbd4) returned 1 [0228.132] GetWindowLongW (hWnd=0x5011e, nIndex=-21) returned 4858488 [0228.132] GetClientRect (in: hWnd=0x5011e, lpRect=0x26f878 | out: lpRect=0x26f878) returned 1 [0228.132] ScreenToClient (in: hWnd=0x5011e, lpPoint=0x26f888 | out: lpPoint=0x26f888) returned 1 [0228.132] PtInRect (lprc=0x26f878, pt=0x5a) returned 1 [0228.132] GetCurrentThreadId () returned 0x220 [0228.132] GetWindowLongW (hWnd=0x5011e, nIndex=-21) returned 4858488 [0228.132] ScreenToClient (in: hWnd=0x5011e, lpPoint=0x26f8f8 | out: lpPoint=0x26f8f8) returned 1 [0228.132] GetMessageTime () returned 289272 [0228.132] GetMessagePos () returned 0x2570094 [0228.132] GetCapture () returned 0x0 [0228.132] IntersectRect (in: lprcDst=0x26f2e8, lprcSrc1=0x26f2e8, lprcSrc2=0x26f378 | out: lprcDst=0x26f2e8) returned 1 [0228.132] IntersectRect (in: lprcDst=0x26f0a4, lprcSrc1=0x26f0a4, lprcSrc2=0x26f074 | out: lprcDst=0x26f0a4) returned 1 [0228.132] IntersectRect (in: lprcDst=0x26f388, lprcSrc1=0x26f388, lprcSrc2=0x26f094 | out: lprcDst=0x26f388) returned 1 [0228.132] HeapFree (in: hHeap=0x470000, dwFlags=0x0, lpMem=0x0 | out: hHeap=0x470000) returned 1 [0228.132] RtlAllocateHeap (HeapHandle=0x470000, Flags=0x0, Size=0x24) returned 0x4e77b8 [0228.132] IntersectRect (in: lprcDst=0x26f388, lprcSrc1=0x26f388, lprcSrc2=0x26f0b4 | out: lprcDst=0x26f388) returned 1 [0228.132] IntersectRect (in: lprcDst=0x26ee78, lprcSrc1=0x26ee78, lprcSrc2=0x26f378 | out: lprcDst=0x26ee78) returned 1 [0228.132] IntersectRect (in: lprcDst=0x26ee78, lprcSrc1=0x26ee78, lprcSrc2=0x26f378 | out: lprcDst=0x26ee78) returned 1 [0228.132] IntersectRect (in: lprcDst=0x26eab0, lprcSrc1=0x26eab0, lprcSrc2=0x26ea80 | out: lprcDst=0x26eab0) returned 1 [0228.132] IntersectRect (in: lprcDst=0x26f410, lprcSrc1=0x26f410, lprcSrc2=0x26eaa0 | out: lprcDst=0x26f410) returned 1 [0228.132] IntersectRect (in: lprcDst=0x26ec34, lprcSrc1=0x26ec34, lprcSrc2=0x26ec04 | out: lprcDst=0x26ec34) returned 1 [0228.132] IntersectRect (in: lprcDst=0x26f388, lprcSrc1=0x26f388, lprcSrc2=0x26ec24 | out: lprcDst=0x26f388) returned 1 [0228.132] HeapFree (in: hHeap=0x470000, dwFlags=0x0, lpMem=0x0 | out: hHeap=0x470000) returned 1 [0228.132] RtlAllocateHeap (HeapHandle=0x470000, Flags=0x0, Size=0x24) returned 0x4e7788 [0228.132] IntersectRect (in: lprcDst=0x26ea70, lprcSrc1=0x26ea70, lprcSrc2=0x26f378 | out: lprcDst=0x26ea70) returned 1 [0228.132] IntersectRect (in: lprcDst=0x26f388, lprcSrc1=0x26f388, lprcSrc2=0x26ec44 | out: lprcDst=0x26f388) returned 1 [0228.132] IntersectRect (in: lprcDst=0x26ea08, lprcSrc1=0x26ea08, lprcSrc2=0x26f378 | out: lprcDst=0x26ea08) returned 1 [0228.133] IntersectRect (in: lprcDst=0x26ea08, lprcSrc1=0x26ea08, lprcSrc2=0x26f378 | out: lprcDst=0x26ea08) returned 1 [0228.133] IntersectRect (in: lprcDst=0x26e794, lprcSrc1=0x26e794, lprcSrc2=0x26e64c | out: lprcDst=0x26e794) returned 1 [0228.133] IntersectRect (in: lprcDst=0x26f388, lprcSrc1=0x26f388, lprcSrc2=0x26e7b4 | out: lprcDst=0x26f388) returned 1 [0228.133] HeapFree (in: hHeap=0x470000, dwFlags=0x0, lpMem=0x0 | out: hHeap=0x470000) returned 1 [0228.133] RtlAllocateHeap (HeapHandle=0x470000, Flags=0x0, Size=0x24) returned 0x4e7848 [0228.133] IntersectRect (in: lprcDst=0x26f388, lprcSrc1=0x26f388, lprcSrc2=0x26e7d4 | out: lprcDst=0x26f388) returned 1 [0228.133] IntersectRect (in: lprcDst=0x26e598, lprcSrc1=0x26e598, lprcSrc2=0x26f378 | out: lprcDst=0x26e598) returned 1 [0228.133] IntersectRect (in: lprcDst=0x26e598, lprcSrc1=0x26e598, lprcSrc2=0x26f378 | out: lprcDst=0x26e598) returned 1 [0228.133] IntersectRect (in: lprcDst=0x26e324, lprcSrc1=0x26e324, lprcSrc2=0x26e1dc | out: lprcDst=0x26e324) returned 1 [0228.133] IntersectRect (in: lprcDst=0x26f388, lprcSrc1=0x26f388, lprcSrc2=0x26e344 | out: lprcDst=0x26f388) returned 1 [0228.133] HeapFree (in: hHeap=0x470000, dwFlags=0x0, lpMem=0x0 | out: hHeap=0x470000) returned 1 [0228.133] RtlAllocateHeap (HeapHandle=0x470000, Flags=0x0, Size=0x24) returned 0x4e7878 [0228.133] IntersectRect (in: lprcDst=0x26f388, lprcSrc1=0x26f388, lprcSrc2=0x26e364 | out: lprcDst=0x26f388) returned 1 [0228.133] IntersectRect (in: lprcDst=0x26e128, lprcSrc1=0x26e128, lprcSrc2=0x26f378 | out: lprcDst=0x26e128) returned 1 [0228.133] IntersectRect (in: lprcDst=0x26e128, lprcSrc1=0x26e128, lprcSrc2=0x26f378 | out: lprcDst=0x26e128) returned 0 [0228.133] IntersectRect (in: lprcDst=0x26e128, lprcSrc1=0x26e128, lprcSrc2=0x26f378 | out: lprcDst=0x26e128) returned 1 [0228.133] IntersectRect (in: lprcDst=0x26e128, lprcSrc1=0x26e128, lprcSrc2=0x26f378 | out: lprcDst=0x26e128) returned 1 [0228.133] IntersectRect (in: lprcDst=0x26e128, lprcSrc1=0x26e128, lprcSrc2=0x26f378 | out: lprcDst=0x26e128) returned 1 [0228.133] IntersectRect (in: lprcDst=0x26e128, lprcSrc1=0x26e128, lprcSrc2=0x26f378 | out: lprcDst=0x26e128) returned 1 [0228.133] IntersectRect (in: lprcDst=0x26df6c, lprcSrc1=0x26df6c, lprcSrc2=0x26de08 | out: lprcDst=0x26df6c) returned 1 [0228.133] HeapFree (in: hHeap=0x470000, dwFlags=0x0, lpMem=0x0 | out: hHeap=0x470000) returned 1 [0228.133] RtlAllocateHeap (HeapHandle=0x470000, Flags=0x0, Size=0x24) returned 0x4e78a8 [0228.133] IntersectRect (in: lprcDst=0x26f388, lprcSrc1=0x26f388, lprcSrc2=0x26df5c | out: lprcDst=0x26f388) returned 1 [0228.133] IntersectRect (in: lprcDst=0x26de18, lprcSrc1=0x26de18, lprcSrc2=0x26f378 | out: lprcDst=0x26de18) returned 1 [0228.133] IntersectRect (in: lprcDst=0x26f388, lprcSrc1=0x26f388, lprcSrc2=0x26df7c | out: lprcDst=0x26f388) returned 1 [0228.133] PostMessageW (hWnd=0x7011a, Msg=0x8002, wParam=0x0, lParam=0x0) returned 1 [0228.133] PtInRect (lprc=0x26dcbc, pt=0x802) returned 0 [0228.133] HeapFree (in: hHeap=0x470000, dwFlags=0x0, lpMem=0x4e78a8 | out: hHeap=0x470000) returned 1 [0228.134] IntersectRect (in: lprcDst=0x26e1e8, lprcSrc1=0x26e1e8, lprcSrc2=0x26f378 | out: lprcDst=0x26e1e8) returned 1 [0228.134] HeapFree (in: hHeap=0x470000, dwFlags=0x0, lpMem=0x4e7878 | out: hHeap=0x470000) returned 1 [0228.134] HeapFree (in: hHeap=0x470000, dwFlags=0x0, lpMem=0x4e7848 | out: hHeap=0x470000) returned 1 [0228.134] HeapFree (in: hHeap=0x470000, dwFlags=0x0, lpMem=0x4e7788 | out: hHeap=0x470000) returned 1 [0228.134] HeapFree (in: hHeap=0x470000, dwFlags=0x0, lpMem=0x4e77b8 | out: hHeap=0x470000) returned 1 [0228.134] HeapFree (in: hHeap=0x470000, dwFlags=0x0, lpMem=0x0 | out: hHeap=0x470000) returned 1 [0228.134] PtInRect (lprc=0x26f524, pt=0x802) returned 1 [0228.134] LoadCursorA (hInstance=0x0, lpCursorName=0x7f00) returned 0x10003 [0228.134] GetCursor () returned 0x10003 [0228.134] GetCurrentThreadId () returned 0x220 [0228.134] TranslateMessage (lpMsg=0x26fbd4) returned 0 [0228.134] DispatchMessageW (lpMsg=0x26fbd4) returned 0x0 [0228.134] GetWindowLongW (hWnd=0x5011e, nIndex=-21) returned 4858488 [0228.134] GetMessageTime () returned 289569 [0228.134] GetMessagePos () returned 0x2570094 [0228.134] GetCapture () returned 0x0 [0228.134] GetCurrentThreadId () returned 0x220 [0228.134] GetCurrentThreadId () returned 0x220 [0228.134] GetCurrentThreadId () returned 0x220 [0228.134] IntersectRect (in: lprcDst=0x26f370, lprcSrc1=0x26f370, lprcSrc2=0x26f400 | out: lprcDst=0x26f370) returned 1 [0228.134] IntersectRect (in: lprcDst=0x26f12c, lprcSrc1=0x26f12c, lprcSrc2=0x26f0fc | out: lprcDst=0x26f12c) returned 1 [0228.134] IntersectRect (in: lprcDst=0x26f410, lprcSrc1=0x26f410, lprcSrc2=0x26f11c | out: lprcDst=0x26f410) returned 1 [0228.135] HeapFree (in: hHeap=0x470000, dwFlags=0x0, lpMem=0x0 | out: hHeap=0x470000) returned 1 [0228.135] RtlAllocateHeap (HeapHandle=0x470000, Flags=0x0, Size=0x24) returned 0x4e77b8 [0228.135] IntersectRect (in: lprcDst=0x26f410, lprcSrc1=0x26f410, lprcSrc2=0x26f13c | out: lprcDst=0x26f410) returned 1 [0228.135] IntersectRect (in: lprcDst=0x26ef00, lprcSrc1=0x26ef00, lprcSrc2=0x26f400 | out: lprcDst=0x26ef00) returned 1 [0228.135] IntersectRect (in: lprcDst=0x26ef00, lprcSrc1=0x26ef00, lprcSrc2=0x26f400 | out: lprcDst=0x26ef00) returned 1 [0228.135] IntersectRect (in: lprcDst=0x26eb38, lprcSrc1=0x26eb38, lprcSrc2=0x26eb08 | out: lprcDst=0x26eb38) returned 1 [0228.135] IntersectRect (in: lprcDst=0x26f498, lprcSrc1=0x26f498, lprcSrc2=0x26eb28 | out: lprcDst=0x26f498) returned 1 [0228.135] IntersectRect (in: lprcDst=0x26ecbc, lprcSrc1=0x26ecbc, lprcSrc2=0x26ec8c | out: lprcDst=0x26ecbc) returned 1 [0228.135] IntersectRect (in: lprcDst=0x26f410, lprcSrc1=0x26f410, lprcSrc2=0x26ecac | out: lprcDst=0x26f410) returned 1 [0228.135] HeapFree (in: hHeap=0x470000, dwFlags=0x0, lpMem=0x0 | out: hHeap=0x470000) returned 1 [0228.135] RtlAllocateHeap (HeapHandle=0x470000, Flags=0x0, Size=0x24) returned 0x4e7788 [0228.135] IntersectRect (in: lprcDst=0x26eaf8, lprcSrc1=0x26eaf8, lprcSrc2=0x26f400 | out: lprcDst=0x26eaf8) returned 1 [0228.135] IntersectRect (in: lprcDst=0x26f410, lprcSrc1=0x26f410, lprcSrc2=0x26eccc | out: lprcDst=0x26f410) returned 1 [0228.135] IntersectRect (in: lprcDst=0x26ea90, lprcSrc1=0x26ea90, lprcSrc2=0x26f400 | out: lprcDst=0x26ea90) returned 1 [0228.135] IntersectRect (in: lprcDst=0x26ea90, lprcSrc1=0x26ea90, lprcSrc2=0x26f400 | out: lprcDst=0x26ea90) returned 1 [0228.135] IntersectRect (in: lprcDst=0x26e81c, lprcSrc1=0x26e81c, lprcSrc2=0x26e6d4 | out: lprcDst=0x26e81c) returned 1 [0228.135] IntersectRect (in: lprcDst=0x26f410, lprcSrc1=0x26f410, lprcSrc2=0x26e83c | out: lprcDst=0x26f410) returned 1 [0228.135] HeapFree (in: hHeap=0x470000, dwFlags=0x0, lpMem=0x0 | out: hHeap=0x470000) returned 1 [0228.135] RtlAllocateHeap (HeapHandle=0x470000, Flags=0x0, Size=0x24) returned 0x4e7848 [0228.135] IntersectRect (in: lprcDst=0x26f410, lprcSrc1=0x26f410, lprcSrc2=0x26e85c | out: lprcDst=0x26f410) returned 1 [0228.135] IntersectRect (in: lprcDst=0x26e620, lprcSrc1=0x26e620, lprcSrc2=0x26f400 | out: lprcDst=0x26e620) returned 1 [0228.135] IntersectRect (in: lprcDst=0x26e620, lprcSrc1=0x26e620, lprcSrc2=0x26f400 | out: lprcDst=0x26e620) returned 1 [0228.135] IntersectRect (in: lprcDst=0x26e3ac, lprcSrc1=0x26e3ac, lprcSrc2=0x26e264 | out: lprcDst=0x26e3ac) returned 1 [0228.135] IntersectRect (in: lprcDst=0x26f410, lprcSrc1=0x26f410, lprcSrc2=0x26e3cc | out: lprcDst=0x26f410) returned 1 [0228.135] HeapFree (in: hHeap=0x470000, dwFlags=0x0, lpMem=0x0 | out: hHeap=0x470000) returned 1 [0228.135] RtlAllocateHeap (HeapHandle=0x470000, Flags=0x0, Size=0x24) returned 0x4e7878 [0228.135] IntersectRect (in: lprcDst=0x26f410, lprcSrc1=0x26f410, lprcSrc2=0x26e3ec | out: lprcDst=0x26f410) returned 1 [0228.135] IntersectRect (in: lprcDst=0x26e1b0, lprcSrc1=0x26e1b0, lprcSrc2=0x26f400 | out: lprcDst=0x26e1b0) returned 1 [0228.135] IntersectRect (in: lprcDst=0x26e1b0, lprcSrc1=0x26e1b0, lprcSrc2=0x26f400 | out: lprcDst=0x26e1b0) returned 0 [0228.135] IntersectRect (in: lprcDst=0x26e1b0, lprcSrc1=0x26e1b0, lprcSrc2=0x26f400 | out: lprcDst=0x26e1b0) returned 1 [0228.135] IntersectRect (in: lprcDst=0x26e1b0, lprcSrc1=0x26e1b0, lprcSrc2=0x26f400 | out: lprcDst=0x26e1b0) returned 1 [0228.135] IntersectRect (in: lprcDst=0x26e1b0, lprcSrc1=0x26e1b0, lprcSrc2=0x26f400 | out: lprcDst=0x26e1b0) returned 1 [0228.135] IntersectRect (in: lprcDst=0x26e1b0, lprcSrc1=0x26e1b0, lprcSrc2=0x26f400 | out: lprcDst=0x26e1b0) returned 1 [0228.135] IntersectRect (in: lprcDst=0x26dff4, lprcSrc1=0x26dff4, lprcSrc2=0x26de90 | out: lprcDst=0x26dff4) returned 1 [0228.135] HeapFree (in: hHeap=0x470000, dwFlags=0x0, lpMem=0x0 | out: hHeap=0x470000) returned 1 [0228.135] RtlAllocateHeap (HeapHandle=0x470000, Flags=0x0, Size=0x24) returned 0x4e78a8 [0228.135] IntersectRect (in: lprcDst=0x26f410, lprcSrc1=0x26f410, lprcSrc2=0x26dfe4 | out: lprcDst=0x26f410) returned 1 [0228.135] IntersectRect (in: lprcDst=0x26dea0, lprcSrc1=0x26dea0, lprcSrc2=0x26f400 | out: lprcDst=0x26dea0) returned 1 [0228.135] IntersectRect (in: lprcDst=0x26f410, lprcSrc1=0x26f410, lprcSrc2=0x26e004 | out: lprcDst=0x26f410) returned 1 [0228.136] PtInRect (lprc=0x26dd44, pt=0x802) returned 0 [0228.136] HeapFree (in: hHeap=0x470000, dwFlags=0x0, lpMem=0x4e78a8 | out: hHeap=0x470000) returned 1 [0228.136] IntersectRect (in: lprcDst=0x26e270, lprcSrc1=0x26e270, lprcSrc2=0x26f400 | out: lprcDst=0x26e270) returned 1 [0228.136] HeapFree (in: hHeap=0x470000, dwFlags=0x0, lpMem=0x4e7878 | out: hHeap=0x470000) returned 1 [0228.136] HeapFree (in: hHeap=0x470000, dwFlags=0x0, lpMem=0x4e7848 | out: hHeap=0x470000) returned 1 [0228.136] HeapFree (in: hHeap=0x470000, dwFlags=0x0, lpMem=0x4e7788 | out: hHeap=0x470000) returned 1 [0228.136] HeapFree (in: hHeap=0x470000, dwFlags=0x0, lpMem=0x4e77b8 | out: hHeap=0x470000) returned 1 [0228.136] HeapFree (in: hHeap=0x470000, dwFlags=0x0, lpMem=0x0 | out: hHeap=0x470000) returned 1 [0228.136] ClientToScreen (in: hWnd=0x5011e, lpPoint=0x26f69c | out: lpPoint=0x26f69c) returned 1 [0228.136] RtlAllocateHeap (HeapHandle=0x470000, Flags=0x0, Size=0xf8) returned 0x4f3878 [0228.136] GetCurrentThreadId () returned 0x220 [0228.137] CActiveIMMAppEx_Trident:IActiveIMMApp:OnDefWindowProc (in: This=0x4b1068, hWnd=0x5011e, msg=0x200, wParam=0x0, lParam=0x207005a, plResult=0x26f794 | out: plResult=0x26f794) returned 0x1 [0228.137] NtdllDefWindowProc_W () returned 0x0 [0228.137] HeapFree (in: hHeap=0x470000, dwFlags=0x0, lpMem=0x4f3878 | out: hHeap=0x470000) returned 1 [0228.137] GetCurrentThreadId () returned 0x220 [0228.137] GetMessageW (in: lpMsg=0x26fbd4, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x26fbd4) returned 1 [0228.137] TranslateMessage (lpMsg=0x26fbd4) returned 0 [0228.137] DispatchMessageW (lpMsg=0x26fbd4) returned 0x0 [0228.137] GetCurrentThreadId () returned 0x220 [0228.137] GetCurrentThreadId () returned 0x220 [0228.137] GetCurrentThreadId () returned 0x220 [0228.137] GetMessageW (in: lpMsg=0x26fbd4, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x26fbd4) returned 1 [0228.137] TranslateMessage (lpMsg=0x26fbd4) returned 0 [0228.137] DispatchMessageW (lpMsg=0x26fbd4) returned 0x0 [0228.137] GetCapture () returned 0x0 [0228.137] WindowFromPoint (Point=0x94) returned 0x5011e [0228.137] GetWindowLongW (hWnd=0x5011e, nIndex=-21) returned 4858488 [0228.137] GetClientRect (in: hWnd=0x5011e, lpRect=0x26f698 | out: lpRect=0x26f698) returned 1 [0228.137] ScreenToClient (in: hWnd=0x5011e, lpPoint=0x26f6a8 | out: lpPoint=0x26f6a8) returned 1 [0228.137] PtInRect (lprc=0x26f698, pt=0x5a) returned 1 [0228.137] GetCurrentThreadId () returned 0x220 [0228.137] GetMessageW (in: lpMsg=0x26fbd4, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x26fbd4) returned 1 [0228.447] TranslateMessage (lpMsg=0x26fbd4) returned 0 [0228.447] DispatchMessageW (lpMsg=0x26fbd4) returned 0x0 [0228.447] GetCapture () returned 0x0 [0228.447] WindowFromPoint (Point=0x94) returned 0x5011e [0228.447] GetWindowLongW (hWnd=0x5011e, nIndex=-21) returned 4858488 [0228.447] GetClientRect (in: hWnd=0x5011e, lpRect=0x26f698 | out: lpRect=0x26f698) returned 1 [0228.447] ScreenToClient (in: hWnd=0x5011e, lpPoint=0x26f6a8 | out: lpPoint=0x26f6a8) returned 1 [0228.447] PtInRect (lprc=0x26f698, pt=0x5a) returned 1 [0228.447] GetCurrentThreadId () returned 0x220 [0228.447] GetMessageW (in: lpMsg=0x26fbd4, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x26fbd4) returned 1 [0228.759] TranslateMessage (lpMsg=0x26fbd4) returned 0 [0228.759] DispatchMessageW (lpMsg=0x26fbd4) returned 0x0 [0228.759] GetCapture () returned 0x0 [0228.759] WindowFromPoint (Point=0x94) returned 0x5011e [0228.759] GetWindowLongW (hWnd=0x5011e, nIndex=-21) returned 4858488 [0228.759] GetClientRect (in: hWnd=0x5011e, lpRect=0x26f698 | out: lpRect=0x26f698) returned 1 [0228.759] ScreenToClient (in: hWnd=0x5011e, lpPoint=0x26f6a8 | out: lpPoint=0x26f6a8) returned 1 [0228.759] PtInRect (lprc=0x26f698, pt=0x5a) returned 1 [0228.759] GetCurrentThreadId () returned 0x220 [0228.759] GetMessageW (in: lpMsg=0x26fbd4, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x26fbd4) returned 1 [0229.070] TranslateMessage (lpMsg=0x26fbd4) returned 0 [0229.071] DispatchMessageW (lpMsg=0x26fbd4) returned 0x0 [0229.071] GetCapture () returned 0x0 [0229.071] WindowFromPoint (Point=0x94) returned 0x5011e [0229.071] GetWindowLongW (hWnd=0x5011e, nIndex=-21) returned 4858488 [0229.071] GetClientRect (in: hWnd=0x5011e, lpRect=0x26f698 | out: lpRect=0x26f698) returned 1 [0229.071] ScreenToClient (in: hWnd=0x5011e, lpPoint=0x26f6a8 | out: lpPoint=0x26f6a8) returned 1 [0229.071] PtInRect (lprc=0x26f698, pt=0x5a) returned 1 [0229.071] GetCurrentThreadId () returned 0x220 [0229.071] GetMessageW (in: lpMsg=0x26fbd4, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x26fbd4) returned 1 [0229.383] TranslateMessage (lpMsg=0x26fbd4) returned 0 [0229.383] DispatchMessageW (lpMsg=0x26fbd4) returned 0x0 [0229.383] GetCapture () returned 0x0 [0229.383] WindowFromPoint (Point=0x94) returned 0x5011e [0229.383] GetWindowLongW (hWnd=0x5011e, nIndex=-21) returned 4858488 [0229.383] GetClientRect (in: hWnd=0x5011e, lpRect=0x26f698 | out: lpRect=0x26f698) returned 1 [0229.383] ScreenToClient (in: hWnd=0x5011e, lpPoint=0x26f6a8 | out: lpPoint=0x26f6a8) returned 1 [0229.383] PtInRect (lprc=0x26f698, pt=0x5a) returned 1 [0229.383] GetCurrentThreadId () returned 0x220 [0229.383] GetMessageW (in: lpMsg=0x26fbd4, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x26fbd4) returned 1 [0229.695] TranslateMessage (lpMsg=0x26fbd4) returned 0 [0229.695] DispatchMessageW (lpMsg=0x26fbd4) returned 0x0 [0229.695] GetCapture () returned 0x0 [0229.695] WindowFromPoint (Point=0x94) returned 0x5011e [0229.695] GetWindowLongW (hWnd=0x5011e, nIndex=-21) returned 4858488 [0229.695] GetClientRect (in: hWnd=0x5011e, lpRect=0x26f698 | out: lpRect=0x26f698) returned 1 [0229.695] ScreenToClient (in: hWnd=0x5011e, lpPoint=0x26f6a8 | out: lpPoint=0x26f6a8) returned 1 [0229.695] PtInRect (lprc=0x26f698, pt=0x5a) returned 1 [0229.695] GetCurrentThreadId () returned 0x220 [0229.695] GetMessageW (in: lpMsg=0x26fbd4, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x26fbd4) returned 1 [0230.007] TranslateMessage (lpMsg=0x26fbd4) returned 0 [0230.007] DispatchMessageW (lpMsg=0x26fbd4) returned 0x0 [0230.007] GetCapture () returned 0x0 [0230.007] WindowFromPoint (Point=0x94) returned 0x5011e [0230.007] GetWindowLongW (hWnd=0x5011e, nIndex=-21) returned 4858488 [0230.007] GetClientRect (in: hWnd=0x5011e, lpRect=0x26f698 | out: lpRect=0x26f698) returned 1 [0230.007] ScreenToClient (in: hWnd=0x5011e, lpPoint=0x26f6a8 | out: lpPoint=0x26f6a8) returned 1 [0230.007] PtInRect (lprc=0x26f698, pt=0x5a) returned 1 [0230.007] GetCurrentThreadId () returned 0x220 [0230.007] GetMessageW (in: lpMsg=0x26fbd4, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x26fbd4) returned 1 [0230.319] TranslateMessage (lpMsg=0x26fbd4) returned 0 [0230.319] DispatchMessageW (lpMsg=0x26fbd4) returned 0x0 [0230.319] GetCapture () returned 0x0 [0230.319] WindowFromPoint (Point=0x94) returned 0x5011e [0230.319] GetWindowLongW (hWnd=0x5011e, nIndex=-21) returned 4858488 [0230.319] GetClientRect (in: hWnd=0x5011e, lpRect=0x26f698 | out: lpRect=0x26f698) returned 1 [0230.319] ScreenToClient (in: hWnd=0x5011e, lpPoint=0x26f6a8 | out: lpPoint=0x26f6a8) returned 1 [0230.319] PtInRect (lprc=0x26f698, pt=0x5a) returned 1 [0230.319] GetCurrentThreadId () returned 0x220 [0230.319] GetMessageW (in: lpMsg=0x26fbd4, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x26fbd4) returned 1 [0230.631] TranslateMessage (lpMsg=0x26fbd4) returned 0 [0230.631] DispatchMessageW (lpMsg=0x26fbd4) returned 0x0 [0230.631] GetCapture () returned 0x0 [0230.631] WindowFromPoint (Point=0x94) returned 0x5011e [0230.631] GetWindowLongW (hWnd=0x5011e, nIndex=-21) returned 4858488 [0230.631] GetClientRect (in: hWnd=0x5011e, lpRect=0x26f698 | out: lpRect=0x26f698) returned 1 [0230.631] ScreenToClient (in: hWnd=0x5011e, lpPoint=0x26f6a8 | out: lpPoint=0x26f6a8) returned 1 [0230.631] PtInRect (lprc=0x26f698, pt=0x5a) returned 1 [0230.631] GetCurrentThreadId () returned 0x220 [0230.631] GetMessageW (in: lpMsg=0x26fbd4, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x26fbd4) returned 1 [0230.950] TranslateMessage (lpMsg=0x26fbd4) returned 0 [0230.950] DispatchMessageW (lpMsg=0x26fbd4) returned 0x0 [0230.950] GetCapture () returned 0x0 [0230.951] WindowFromPoint (Point=0x94) returned 0x5011e [0230.951] GetWindowLongW (hWnd=0x5011e, nIndex=-21) returned 4858488 [0230.951] GetClientRect (in: hWnd=0x5011e, lpRect=0x26f698 | out: lpRect=0x26f698) returned 1 [0230.951] ScreenToClient (in: hWnd=0x5011e, lpPoint=0x26f6a8 | out: lpPoint=0x26f6a8) returned 1 [0230.951] PtInRect (lprc=0x26f698, pt=0x5a) returned 1 [0230.951] GetCurrentThreadId () returned 0x220 [0230.951] GetMessageW (in: lpMsg=0x26fbd4, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x26fbd4) returned 1 [0231.255] TranslateMessage (lpMsg=0x26fbd4) returned 0 [0231.255] DispatchMessageW (lpMsg=0x26fbd4) returned 0x0 [0231.255] GetCapture () returned 0x0 [0231.255] WindowFromPoint (Point=0x94) returned 0x5011e [0231.255] GetWindowLongW (hWnd=0x5011e, nIndex=-21) returned 4858488 [0231.255] GetClientRect (in: hWnd=0x5011e, lpRect=0x26f698 | out: lpRect=0x26f698) returned 1 [0231.255] ScreenToClient (in: hWnd=0x5011e, lpPoint=0x26f6a8 | out: lpPoint=0x26f6a8) returned 1 [0231.255] PtInRect (lprc=0x26f698, pt=0x5a) returned 1 [0231.255] GetCurrentThreadId () returned 0x220 [0231.255] GetMessageW (in: lpMsg=0x26fbd4, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x26fbd4) returned 1 [0231.567] TranslateMessage (lpMsg=0x26fbd4) returned 0 [0231.567] DispatchMessageW (lpMsg=0x26fbd4) returned 0x0 [0231.567] GetCapture () returned 0x0 [0231.567] WindowFromPoint (Point=0x94) returned 0x5011e [0231.567] GetWindowLongW (hWnd=0x5011e, nIndex=-21) returned 4858488 [0231.567] GetClientRect (in: hWnd=0x5011e, lpRect=0x26f698 | out: lpRect=0x26f698) returned 1 [0231.567] ScreenToClient (in: hWnd=0x5011e, lpPoint=0x26f6a8 | out: lpPoint=0x26f6a8) returned 1 [0231.567] PtInRect (lprc=0x26f698, pt=0x5a) returned 1 [0231.567] GetCurrentThreadId () returned 0x220 [0231.567] GetMessageW (in: lpMsg=0x26fbd4, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x26fbd4) returned 1 [0231.879] TranslateMessage (lpMsg=0x26fbd4) returned 0 [0231.879] DispatchMessageW (lpMsg=0x26fbd4) returned 0x0 [0231.879] GetCapture () returned 0x0 [0231.879] WindowFromPoint (Point=0x94) returned 0x5011e [0231.879] GetWindowLongW (hWnd=0x5011e, nIndex=-21) returned 4858488 [0231.879] GetClientRect (in: hWnd=0x5011e, lpRect=0x26f698 | out: lpRect=0x26f698) returned 1 [0231.879] ScreenToClient (in: hWnd=0x5011e, lpPoint=0x26f6a8 | out: lpPoint=0x26f6a8) returned 1 [0231.879] PtInRect (lprc=0x26f698, pt=0x5a) returned 1 [0231.879] GetCurrentThreadId () returned 0x220 [0231.879] GetMessageW (in: lpMsg=0x26fbd4, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x26fbd4) returned 1 [0232.191] TranslateMessage (lpMsg=0x26fbd4) returned 0 [0232.191] DispatchMessageW (lpMsg=0x26fbd4) returned 0x0 [0232.191] GetCapture () returned 0x0 [0232.191] WindowFromPoint (Point=0x94) returned 0x5011e [0232.191] GetWindowLongW (hWnd=0x5011e, nIndex=-21) returned 4858488 [0232.191] GetClientRect (in: hWnd=0x5011e, lpRect=0x26f698 | out: lpRect=0x26f698) returned 1 [0232.191] ScreenToClient (in: hWnd=0x5011e, lpPoint=0x26f6a8 | out: lpPoint=0x26f6a8) returned 1 [0232.191] PtInRect (lprc=0x26f698, pt=0x5a) returned 1 [0232.191] GetCurrentThreadId () returned 0x220 [0232.191] GetMessageW (in: lpMsg=0x26fbd4, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x26fbd4) returned 1 [0232.502] TranslateMessage (lpMsg=0x26fbd4) returned 0 [0232.503] DispatchMessageW (lpMsg=0x26fbd4) returned 0x0 [0232.503] GetCapture () returned 0x0 [0232.503] WindowFromPoint (Point=0x94) returned 0x5011e [0232.503] GetWindowLongW (hWnd=0x5011e, nIndex=-21) returned 4858488 [0232.503] GetClientRect (in: hWnd=0x5011e, lpRect=0x26f698 | out: lpRect=0x26f698) returned 1 [0232.503] ScreenToClient (in: hWnd=0x5011e, lpPoint=0x26f6a8 | out: lpPoint=0x26f6a8) returned 1 [0232.503] PtInRect (lprc=0x26f698, pt=0x5a) returned 1 [0232.503] GetCurrentThreadId () returned 0x220 [0232.503] GetMessageW (in: lpMsg=0x26fbd4, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x26fbd4) returned 1 [0232.815] TranslateMessage (lpMsg=0x26fbd4) returned 0 [0232.815] DispatchMessageW (lpMsg=0x26fbd4) returned 0x0 [0232.815] GetCapture () returned 0x0 [0232.815] WindowFromPoint (Point=0x94) returned 0x5011e [0232.815] GetWindowLongW (hWnd=0x5011e, nIndex=-21) returned 4858488 [0232.815] GetClientRect (in: hWnd=0x5011e, lpRect=0x26f698 | out: lpRect=0x26f698) returned 1 [0232.815] ScreenToClient (in: hWnd=0x5011e, lpPoint=0x26f6a8 | out: lpPoint=0x26f6a8) returned 1 [0232.815] PtInRect (lprc=0x26f698, pt=0x5a) returned 1 [0232.815] GetCurrentThreadId () returned 0x220 [0232.815] GetMessageW (in: lpMsg=0x26fbd4, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x26fbd4) returned 1 [0233.127] TranslateMessage (lpMsg=0x26fbd4) returned 0 [0233.127] DispatchMessageW (lpMsg=0x26fbd4) returned 0x0 [0233.127] GetCapture () returned 0x0 [0233.127] WindowFromPoint (Point=0x94) returned 0x5011e [0233.128] GetWindowLongW (hWnd=0x5011e, nIndex=-21) returned 4858488 [0233.128] GetClientRect (in: hWnd=0x5011e, lpRect=0x26f698 | out: lpRect=0x26f698) returned 1 [0233.128] ScreenToClient (in: hWnd=0x5011e, lpPoint=0x26f6a8 | out: lpPoint=0x26f6a8) returned 1 [0233.128] PtInRect (lprc=0x26f698, pt=0x5a) returned 1 [0233.128] GetCurrentThreadId () returned 0x220 [0233.128] GetMessageW (in: lpMsg=0x26fbd4, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x26fbd4) returned 1 [0233.439] TranslateMessage (lpMsg=0x26fbd4) returned 0 [0233.439] DispatchMessageW (lpMsg=0x26fbd4) returned 0x0 [0233.439] GetCapture () returned 0x0 [0233.439] WindowFromPoint (Point=0x94) returned 0x5011e [0233.439] GetWindowLongW (hWnd=0x5011e, nIndex=-21) returned 4858488 [0233.439] GetClientRect (in: hWnd=0x5011e, lpRect=0x26f698 | out: lpRect=0x26f698) returned 1 [0233.439] ScreenToClient (in: hWnd=0x5011e, lpPoint=0x26f6a8 | out: lpPoint=0x26f6a8) returned 1 [0233.439] PtInRect (lprc=0x26f698, pt=0x5a) returned 1 [0233.439] GetCurrentThreadId () returned 0x220 [0233.439] GetMessageW (in: lpMsg=0x26fbd4, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x26fbd4) returned 1 [0233.751] TranslateMessage (lpMsg=0x26fbd4) returned 0 [0233.751] DispatchMessageW (lpMsg=0x26fbd4) returned 0x0 [0233.751] GetCapture () returned 0x0 [0233.751] WindowFromPoint (Point=0x94) returned 0x5011e [0233.751] GetWindowLongW (hWnd=0x5011e, nIndex=-21) returned 4858488 [0233.751] GetClientRect (in: hWnd=0x5011e, lpRect=0x26f698 | out: lpRect=0x26f698) returned 1 [0233.751] ScreenToClient (in: hWnd=0x5011e, lpPoint=0x26f6a8 | out: lpPoint=0x26f6a8) returned 1 [0233.751] PtInRect (lprc=0x26f698, pt=0x5a) returned 1 [0233.751] GetCurrentThreadId () returned 0x220 [0233.751] GetMessageW (in: lpMsg=0x26fbd4, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x26fbd4) returned 1 [0234.063] TranslateMessage (lpMsg=0x26fbd4) returned 0 [0234.063] DispatchMessageW (lpMsg=0x26fbd4) returned 0x0 [0234.063] GetCapture () returned 0x0 [0234.063] WindowFromPoint (Point=0x94) returned 0x5011e [0234.063] GetWindowLongW (hWnd=0x5011e, nIndex=-21) returned 4858488 [0234.063] GetClientRect (in: hWnd=0x5011e, lpRect=0x26f698 | out: lpRect=0x26f698) returned 1 [0234.063] ScreenToClient (in: hWnd=0x5011e, lpPoint=0x26f6a8 | out: lpPoint=0x26f6a8) returned 1 [0234.063] PtInRect (lprc=0x26f698, pt=0x5a) returned 1 [0234.063] GetCurrentThreadId () returned 0x220 [0234.063] GetMessageW (in: lpMsg=0x26fbd4, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x26fbd4) returned 1 [0234.375] TranslateMessage (lpMsg=0x26fbd4) returned 0 [0234.375] DispatchMessageW (lpMsg=0x26fbd4) returned 0x0 [0234.375] GetCapture () returned 0x0 [0234.375] WindowFromPoint (Point=0x101) returned 0x100f8 [0234.375] IsChild (hWndParent=0x5011e, hWnd=0x100f8) returned 0 [0234.375] GetMessageTime () returned 295824 [0234.375] GetMessagePos () returned 0x1b0101 [0234.375] KillTimer (hWnd=0x7011a, uIDEvent=0x2005) returned 1 [0234.375] GetCapture () returned 0x0 [0234.375] ClientToScreen (in: hWnd=0x5011e, lpPoint=0x26f874 | out: lpPoint=0x26f874) returned 1 [0234.375] RtlAllocateHeap (HeapHandle=0x470000, Flags=0x0, Size=0xf8) returned 0x4f3878 [0234.376] GetCurrentThreadId () returned 0x220 [0234.376] ClientToScreen (in: hWnd=0x5011e, lpPoint=0x26f878 | out: lpPoint=0x26f878) returned 1 [0234.376] RtlAllocateHeap (HeapHandle=0x470000, Flags=0x0, Size=0xf8) returned 0x4f3978 [0234.376] HeapFree (in: hHeap=0x470000, dwFlags=0x0, lpMem=0x4f3978 | out: hHeap=0x470000) returned 1 [0234.376] ClientToScreen (in: hWnd=0x5011e, lpPoint=0x26f878 | out: lpPoint=0x26f878) returned 1 [0234.376] RtlAllocateHeap (HeapHandle=0x470000, Flags=0x0, Size=0xf8) returned 0x4f3978 [0234.376] HeapFree (in: hHeap=0x470000, dwFlags=0x0, lpMem=0x4f3978 | out: hHeap=0x470000) returned 1 [0234.376] ClientToScreen (in: hWnd=0x5011e, lpPoint=0x26f878 | out: lpPoint=0x26f878) returned 1 [0234.376] RtlAllocateHeap (HeapHandle=0x470000, Flags=0x0, Size=0xf8) returned 0x4f3978 [0234.376] HeapFree (in: hHeap=0x470000, dwFlags=0x0, lpMem=0x4f3978 | out: hHeap=0x470000) returned 1 [0234.376] ClientToScreen (in: hWnd=0x5011e, lpPoint=0x26f878 | out: lpPoint=0x26f878) returned 1 [0234.377] RtlAllocateHeap (HeapHandle=0x470000, Flags=0x0, Size=0xf8) returned 0x4f3978 [0234.377] HeapFree (in: hHeap=0x470000, dwFlags=0x0, lpMem=0x4f3978 | out: hHeap=0x470000) returned 1 [0234.377] RtlReAllocateHeap (Heap=0x470000, Flags=0x0, Ptr=0x4d46f8, Size=0x3c0) returned 0x4b4988 [0234.377] GetSysColor (nIndex=5) returned 0xffffff [0234.377] HeapFree (in: hHeap=0x470000, dwFlags=0x0, lpMem=0x0 | out: hHeap=0x470000) returned 1 [0234.377] HeapFree (in: hHeap=0x470000, dwFlags=0x0, lpMem=0x0 | out: hHeap=0x470000) returned 1 [0234.378] GetSysColor (nIndex=5) returned 0xffffff [0234.378] HeapFree (in: hHeap=0x470000, dwFlags=0x0, lpMem=0x0 | out: hHeap=0x470000) returned 1 [0234.378] HeapFree (in: hHeap=0x470000, dwFlags=0x0, lpMem=0x0 | out: hHeap=0x470000) returned 1 [0234.378] GetSysColor (nIndex=5) returned 0xffffff [0234.378] HeapFree (in: hHeap=0x470000, dwFlags=0x0, lpMem=0x0 | out: hHeap=0x470000) returned 1 [0234.378] HeapFree (in: hHeap=0x470000, dwFlags=0x0, lpMem=0x0 | out: hHeap=0x470000) returned 1 [0234.378] GetSysColor (nIndex=5) returned 0xffffff [0234.378] HeapFree (in: hHeap=0x470000, dwFlags=0x0, lpMem=0x0 | out: hHeap=0x470000) returned 1 [0234.378] HeapFree (in: hHeap=0x470000, dwFlags=0x0, lpMem=0x0 | out: hHeap=0x470000) returned 1 [0234.379] CActiveIMMAppEx_Trident:IActiveIMMApp:OnDefWindowProc (in: This=0x4b1068, hWnd=0x5011e, msg=0x2a3, wParam=0x0, lParam=0x0, plResult=0x26f96c | out: plResult=0x26f96c) returned 0x1 [0234.379] NtdllDefWindowProc_W () returned 0x0 [0234.379] HeapFree (in: hHeap=0x470000, dwFlags=0x0, lpMem=0x4f3878 | out: hHeap=0x470000) returned 1 [0234.379] GetMessageW (in: lpMsg=0x26fbd4, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x26fbd4) returned 1 [0244.426] GetWindowLongW (hWnd=0x5011e, nIndex=-21) returned 4858488 [0244.426] GetClientRect (in: hWnd=0x5011e, lpRect=0x26f878 | out: lpRect=0x26f878) returned 1 [0244.426] ScreenToClient (in: hWnd=0x5011e, lpPoint=0x26f888 | out: lpPoint=0x26f888) returned 1 [0244.426] PtInRect (lprc=0x26f878, pt=0x2de) returned 1 [0244.426] GetCurrentThreadId () returned 0x220 [0244.426] GetWindowLongW (hWnd=0x5011e, nIndex=-21) returned 4858488 [0244.426] ScreenToClient (in: hWnd=0x5011e, lpPoint=0x26f8f8 | out: lpPoint=0x26f8f8) returned 1 [0244.427] GetMessageTime () returned 295824 [0244.427] GetMessagePos () returned 0x1b0101 [0244.427] GetCapture () returned 0x0 [0244.427] IntersectRect (in: lprcDst=0x26f2e8, lprcSrc1=0x26f2e8, lprcSrc2=0x26f378 | out: lprcDst=0x26f2e8) returned 1 [0244.427] IntersectRect (in: lprcDst=0x26f0a4, lprcSrc1=0x26f0a4, lprcSrc2=0x26f074 | out: lprcDst=0x26f0a4) returned 1 [0244.427] IntersectRect (in: lprcDst=0x26f388, lprcSrc1=0x26f388, lprcSrc2=0x26f094 | out: lprcDst=0x26f388) returned 1 [0244.427] HeapFree (in: hHeap=0x470000, dwFlags=0x0, lpMem=0x0 | out: hHeap=0x470000) returned 1 [0244.427] RtlAllocateHeap (HeapHandle=0x470000, Flags=0x0, Size=0x24) returned 0x4bcb10 [0244.427] IntersectRect (in: lprcDst=0x26f388, lprcSrc1=0x26f388, lprcSrc2=0x26f0b4 | out: lprcDst=0x26f388) returned 1 [0244.427] IntersectRect (in: lprcDst=0x26ee78, lprcSrc1=0x26ee78, lprcSrc2=0x26f378 | out: lprcDst=0x26ee78) returned 1 [0244.427] IntersectRect (in: lprcDst=0x26ee78, lprcSrc1=0x26ee78, lprcSrc2=0x26f378 | out: lprcDst=0x26ee78) returned 1 [0244.427] IntersectRect (in: lprcDst=0x26eab0, lprcSrc1=0x26eab0, lprcSrc2=0x26ea80 | out: lprcDst=0x26eab0) returned 1 [0244.427] IntersectRect (in: lprcDst=0x26f410, lprcSrc1=0x26f410, lprcSrc2=0x26eaa0 | out: lprcDst=0x26f410) returned 1 [0244.427] IntersectRect (in: lprcDst=0x26ec34, lprcSrc1=0x26ec34, lprcSrc2=0x26ec04 | out: lprcDst=0x26ec34) returned 1 [0244.427] IntersectRect (in: lprcDst=0x26f388, lprcSrc1=0x26f388, lprcSrc2=0x26ec24 | out: lprcDst=0x26f388) returned 1 [0244.427] HeapFree (in: hHeap=0x470000, dwFlags=0x0, lpMem=0x0 | out: hHeap=0x470000) returned 1 [0244.427] RtlAllocateHeap (HeapHandle=0x470000, Flags=0x0, Size=0x24) returned 0x4e77b8 [0244.427] IntersectRect (in: lprcDst=0x26ea70, lprcSrc1=0x26ea70, lprcSrc2=0x26f378 | out: lprcDst=0x26ea70) returned 1 [0244.427] IntersectRect (in: lprcDst=0x26f388, lprcSrc1=0x26f388, lprcSrc2=0x26ec44 | out: lprcDst=0x26f388) returned 1 [0244.427] IntersectRect (in: lprcDst=0x26ea08, lprcSrc1=0x26ea08, lprcSrc2=0x26f378 | out: lprcDst=0x26ea08) returned 1 [0244.427] IntersectRect (in: lprcDst=0x26ea08, lprcSrc1=0x26ea08, lprcSrc2=0x26f378 | out: lprcDst=0x26ea08) returned 1 [0244.427] IntersectRect (in: lprcDst=0x26e794, lprcSrc1=0x26e794, lprcSrc2=0x26e64c | out: lprcDst=0x26e794) returned 1 [0244.427] IntersectRect (in: lprcDst=0x26f388, lprcSrc1=0x26f388, lprcSrc2=0x26e7b4 | out: lprcDst=0x26f388) returned 1 [0244.427] HeapFree (in: hHeap=0x470000, dwFlags=0x0, lpMem=0x0 | out: hHeap=0x470000) returned 1 [0244.427] RtlAllocateHeap (HeapHandle=0x470000, Flags=0x0, Size=0x24) returned 0x4e7788 [0244.427] IntersectRect (in: lprcDst=0x26f388, lprcSrc1=0x26f388, lprcSrc2=0x26e7d4 | out: lprcDst=0x26f388) returned 1 [0244.428] IntersectRect (in: lprcDst=0x26e598, lprcSrc1=0x26e598, lprcSrc2=0x26f378 | out: lprcDst=0x26e598) returned 1 [0244.428] IntersectRect (in: lprcDst=0x26e598, lprcSrc1=0x26e598, lprcSrc2=0x26f378 | out: lprcDst=0x26e598) returned 1 [0244.428] IntersectRect (in: lprcDst=0x26e324, lprcSrc1=0x26e324, lprcSrc2=0x26e1dc | out: lprcDst=0x26e324) returned 1 [0244.428] IntersectRect (in: lprcDst=0x26f388, lprcSrc1=0x26f388, lprcSrc2=0x26e344 | out: lprcDst=0x26f388) returned 1 [0244.428] HeapFree (in: hHeap=0x470000, dwFlags=0x0, lpMem=0x0 | out: hHeap=0x470000) returned 1 [0244.428] RtlAllocateHeap (HeapHandle=0x470000, Flags=0x0, Size=0x24) returned 0x4e7848 [0244.428] IntersectRect (in: lprcDst=0x26f388, lprcSrc1=0x26f388, lprcSrc2=0x26e364 | out: lprcDst=0x26f388) returned 1 [0244.428] IntersectRect (in: lprcDst=0x26e128, lprcSrc1=0x26e128, lprcSrc2=0x26f378 | out: lprcDst=0x26e128) returned 1 [0244.428] IntersectRect (in: lprcDst=0x26e128, lprcSrc1=0x26e128, lprcSrc2=0x26f378 | out: lprcDst=0x26e128) returned 0 [0244.428] IntersectRect (in: lprcDst=0x26e128, lprcSrc1=0x26e128, lprcSrc2=0x26f378 | out: lprcDst=0x26e128) returned 1 [0244.428] IntersectRect (in: lprcDst=0x26e128, lprcSrc1=0x26e128, lprcSrc2=0x26f378 | out: lprcDst=0x26e128) returned 1 [0244.428] IntersectRect (in: lprcDst=0x26e128, lprcSrc1=0x26e128, lprcSrc2=0x26f378 | out: lprcDst=0x26e128) returned 1 [0244.428] IntersectRect (in: lprcDst=0x26e128, lprcSrc1=0x26e128, lprcSrc2=0x26f378 | out: lprcDst=0x26e128) returned 1 [0244.428] IntersectRect (in: lprcDst=0x26df6c, lprcSrc1=0x26df6c, lprcSrc2=0x26de08 | out: lprcDst=0x26df6c) returned 1 [0244.428] HeapFree (in: hHeap=0x470000, dwFlags=0x0, lpMem=0x0 | out: hHeap=0x470000) returned 1 [0244.428] RtlAllocateHeap (HeapHandle=0x470000, Flags=0x0, Size=0x24) returned 0x4e7878 [0244.428] IntersectRect (in: lprcDst=0x26f388, lprcSrc1=0x26f388, lprcSrc2=0x26df5c | out: lprcDst=0x26f388) returned 1 [0244.428] IntersectRect (in: lprcDst=0x26de18, lprcSrc1=0x26de18, lprcSrc2=0x26f378 | out: lprcDst=0x26de18) returned 1 [0244.428] IntersectRect (in: lprcDst=0x26f388, lprcSrc1=0x26f388, lprcSrc2=0x26df7c | out: lprcDst=0x26f388) returned 1 [0244.428] PostMessageW (hWnd=0x7011a, Msg=0x8002, wParam=0x0, lParam=0x0) returned 1 [0244.428] LsSetDoc () returned 0x0 [0244.429] LsCreateLine () returned 0x0 [0244.429] HeapFree (in: hHeap=0x470000, dwFlags=0x0, lpMem=0x0 | out: hHeap=0x470000) returned 1 [0244.429] RtlAllocateHeap (HeapHandle=0x470000, Flags=0x0, Size=0x18) returned 0x4c0e88 [0244.429] RtlAllocateHeap (HeapHandle=0x470000, Flags=0x0, Size=0x10) returned 0x484850 [0244.429] HeapFree (in: hHeap=0x470000, dwFlags=0x0, lpMem=0x0 | out: hHeap=0x470000) returned 1 [0244.429] LsdnFinishRegular () returned 0x0 [0244.429] LsDestroyLine () returned 0x0 [0244.429] HeapFree (in: hHeap=0x470000, dwFlags=0x0, lpMem=0x4c0e88 | out: hHeap=0x470000) returned 1 [0244.430] HeapFree (in: hHeap=0x470000, dwFlags=0x0, lpMem=0x0 | out: hHeap=0x470000) returned 1 [0244.430] PtInRect (lprc=0x26dcbc, pt=0x10392) returned 1 [0244.430] HeapFree (in: hHeap=0x470000, dwFlags=0x0, lpMem=0x4e7878 | out: hHeap=0x470000) returned 1 [0244.430] IntersectRect (in: lprcDst=0x26e1e8, lprcSrc1=0x26e1e8, lprcSrc2=0x26f378 | out: lprcDst=0x26e1e8) returned 1 [0244.430] HeapFree (in: hHeap=0x470000, dwFlags=0x0, lpMem=0x4e7848 | out: hHeap=0x470000) returned 1 [0244.430] HeapFree (in: hHeap=0x470000, dwFlags=0x0, lpMem=0x4e7788 | out: hHeap=0x470000) returned 1 [0244.430] HeapFree (in: hHeap=0x470000, dwFlags=0x0, lpMem=0x4e77b8 | out: hHeap=0x470000) returned 1 [0244.430] HeapFree (in: hHeap=0x470000, dwFlags=0x0, lpMem=0x4bcb10 | out: hHeap=0x470000) returned 1 [0244.430] HeapFree (in: hHeap=0x470000, dwFlags=0x0, lpMem=0x0 | out: hHeap=0x470000) returned 1 [0244.430] SetTimer (hWnd=0x7011a, nIDEvent=0x2006, uElapse=0x12c, lpTimerFunc=0x0) returned 0x2006 [0244.430] PtInRect (lprc=0x26f524, pt=0x10392) returned 1 [0244.430] LoadCursorA (hInstance=0x0, lpCursorName=0x7f00) returned 0x10003 [0244.431] GetCursor () returned 0x10003 [0244.431] TranslateMessage (lpMsg=0x26fbd4) returned 0 [0244.431] DispatchMessageW (lpMsg=0x26fbd4) returned 0x0 [0244.431] GetWindowLongW (hWnd=0x5011e, nIndex=-21) returned 4858488 [0244.431] GetMessageTime () returned 305871 [0244.431] GetMessagePos () returned 0x1d80318 [0244.431] GetCapture () returned 0x0 [0244.431] GetCurrentThreadId () returned 0x220 [0244.431] GetCurrentThreadId () returned 0x220 [0244.431] GetCurrentThreadId () returned 0x220 [0244.431] IntersectRect (in: lprcDst=0x26f370, lprcSrc1=0x26f370, lprcSrc2=0x26f400 | out: lprcDst=0x26f370) returned 1 [0244.431] IntersectRect (in: lprcDst=0x26f12c, lprcSrc1=0x26f12c, lprcSrc2=0x26f0fc | out: lprcDst=0x26f12c) returned 1 [0244.431] IntersectRect (in: lprcDst=0x26f410, lprcSrc1=0x26f410, lprcSrc2=0x26f11c | out: lprcDst=0x26f410) returned 1 [0244.431] HeapFree (in: hHeap=0x470000, dwFlags=0x0, lpMem=0x0 | out: hHeap=0x470000) returned 1 [0244.431] RtlAllocateHeap (HeapHandle=0x470000, Flags=0x0, Size=0x24) returned 0x4bcb10 [0244.431] IntersectRect (in: lprcDst=0x26f410, lprcSrc1=0x26f410, lprcSrc2=0x26f13c | out: lprcDst=0x26f410) returned 1 [0244.431] IntersectRect (in: lprcDst=0x26ef00, lprcSrc1=0x26ef00, lprcSrc2=0x26f400 | out: lprcDst=0x26ef00) returned 1 [0244.431] IntersectRect (in: lprcDst=0x26ef00, lprcSrc1=0x26ef00, lprcSrc2=0x26f400 | out: lprcDst=0x26ef00) returned 1 [0244.431] IntersectRect (in: lprcDst=0x26eb38, lprcSrc1=0x26eb38, lprcSrc2=0x26eb08 | out: lprcDst=0x26eb38) returned 1 [0244.431] IntersectRect (in: lprcDst=0x26f498, lprcSrc1=0x26f498, lprcSrc2=0x26eb28 | out: lprcDst=0x26f498) returned 1 [0244.431] IntersectRect (in: lprcDst=0x26ecbc, lprcSrc1=0x26ecbc, lprcSrc2=0x26ec8c | out: lprcDst=0x26ecbc) returned 1 [0244.431] IntersectRect (in: lprcDst=0x26f410, lprcSrc1=0x26f410, lprcSrc2=0x26ecac | out: lprcDst=0x26f410) returned 1 [0244.431] HeapFree (in: hHeap=0x470000, dwFlags=0x0, lpMem=0x0 | out: hHeap=0x470000) returned 1 [0244.431] RtlAllocateHeap (HeapHandle=0x470000, Flags=0x0, Size=0x24) returned 0x4e77b8 [0244.431] IntersectRect (in: lprcDst=0x26eaf8, lprcSrc1=0x26eaf8, lprcSrc2=0x26f400 | out: lprcDst=0x26eaf8) returned 1 [0244.431] IntersectRect (in: lprcDst=0x26f410, lprcSrc1=0x26f410, lprcSrc2=0x26eccc | out: lprcDst=0x26f410) returned 1 [0244.431] IntersectRect (in: lprcDst=0x26ea90, lprcSrc1=0x26ea90, lprcSrc2=0x26f400 | out: lprcDst=0x26ea90) returned 1 [0244.431] IntersectRect (in: lprcDst=0x26ea90, lprcSrc1=0x26ea90, lprcSrc2=0x26f400 | out: lprcDst=0x26ea90) returned 1 [0244.431] IntersectRect (in: lprcDst=0x26e81c, lprcSrc1=0x26e81c, lprcSrc2=0x26e6d4 | out: lprcDst=0x26e81c) returned 1 [0244.431] IntersectRect (in: lprcDst=0x26f410, lprcSrc1=0x26f410, lprcSrc2=0x26e83c | out: lprcDst=0x26f410) returned 1 [0244.431] HeapFree (in: hHeap=0x470000, dwFlags=0x0, lpMem=0x0 | out: hHeap=0x470000) returned 1 [0244.431] RtlAllocateHeap (HeapHandle=0x470000, Flags=0x0, Size=0x24) returned 0x4e7788 [0244.432] IntersectRect (in: lprcDst=0x26f410, lprcSrc1=0x26f410, lprcSrc2=0x26e85c | out: lprcDst=0x26f410) returned 1 [0244.432] IntersectRect (in: lprcDst=0x26e620, lprcSrc1=0x26e620, lprcSrc2=0x26f400 | out: lprcDst=0x26e620) returned 1 [0244.432] IntersectRect (in: lprcDst=0x26e620, lprcSrc1=0x26e620, lprcSrc2=0x26f400 | out: lprcDst=0x26e620) returned 1 [0244.432] IntersectRect (in: lprcDst=0x26e3ac, lprcSrc1=0x26e3ac, lprcSrc2=0x26e264 | out: lprcDst=0x26e3ac) returned 1 [0244.432] IntersectRect (in: lprcDst=0x26f410, lprcSrc1=0x26f410, lprcSrc2=0x26e3cc | out: lprcDst=0x26f410) returned 1 [0244.432] HeapFree (in: hHeap=0x470000, dwFlags=0x0, lpMem=0x0 | out: hHeap=0x470000) returned 1 [0244.432] RtlAllocateHeap (HeapHandle=0x470000, Flags=0x0, Size=0x24) returned 0x4e7848 [0244.432] IntersectRect (in: lprcDst=0x26f410, lprcSrc1=0x26f410, lprcSrc2=0x26e3ec | out: lprcDst=0x26f410) returned 1 [0244.432] IntersectRect (in: lprcDst=0x26e1b0, lprcSrc1=0x26e1b0, lprcSrc2=0x26f400 | out: lprcDst=0x26e1b0) returned 1 [0244.432] IntersectRect (in: lprcDst=0x26e1b0, lprcSrc1=0x26e1b0, lprcSrc2=0x26f400 | out: lprcDst=0x26e1b0) returned 0 [0244.432] IntersectRect (in: lprcDst=0x26e1b0, lprcSrc1=0x26e1b0, lprcSrc2=0x26f400 | out: lprcDst=0x26e1b0) returned 1 [0244.432] IntersectRect (in: lprcDst=0x26e1b0, lprcSrc1=0x26e1b0, lprcSrc2=0x26f400 | out: lprcDst=0x26e1b0) returned 1 [0244.432] IntersectRect (in: lprcDst=0x26e1b0, lprcSrc1=0x26e1b0, lprcSrc2=0x26f400 | out: lprcDst=0x26e1b0) returned 1 [0244.432] IntersectRect (in: lprcDst=0x26e1b0, lprcSrc1=0x26e1b0, lprcSrc2=0x26f400 | out: lprcDst=0x26e1b0) returned 1 [0244.432] IntersectRect (in: lprcDst=0x26dff4, lprcSrc1=0x26dff4, lprcSrc2=0x26de90 | out: lprcDst=0x26dff4) returned 1 [0244.432] HeapFree (in: hHeap=0x470000, dwFlags=0x0, lpMem=0x0 | out: hHeap=0x470000) returned 1 [0244.432] RtlAllocateHeap (HeapHandle=0x470000, Flags=0x0, Size=0x24) returned 0x4e7878 [0244.432] IntersectRect (in: lprcDst=0x26f410, lprcSrc1=0x26f410, lprcSrc2=0x26dfe4 | out: lprcDst=0x26f410) returned 1 [0244.432] IntersectRect (in: lprcDst=0x26dea0, lprcSrc1=0x26dea0, lprcSrc2=0x26f400 | out: lprcDst=0x26dea0) returned 1 [0244.432] IntersectRect (in: lprcDst=0x26f410, lprcSrc1=0x26f410, lprcSrc2=0x26e004 | out: lprcDst=0x26f410) returned 1 [0244.432] LsSetDoc () returned 0x0 [0244.432] LsCreateLine () returned 0x0 [0244.432] HeapFree (in: hHeap=0x470000, dwFlags=0x0, lpMem=0x0 | out: hHeap=0x470000) returned 1 [0244.432] RtlAllocateHeap (HeapHandle=0x470000, Flags=0x0, Size=0x18) returned 0x4c0e88 [0244.433] RtlAllocateHeap (HeapHandle=0x470000, Flags=0x0, Size=0x10) returned 0x484850 [0244.433] HeapFree (in: hHeap=0x470000, dwFlags=0x0, lpMem=0x0 | out: hHeap=0x470000) returned 1 [0244.433] LsdnFinishRegular () returned 0x0 [0244.433] LsDestroyLine () returned 0x0 [0244.433] HeapFree (in: hHeap=0x470000, dwFlags=0x0, lpMem=0x4c0e88 | out: hHeap=0x470000) returned 1 [0244.433] HeapFree (in: hHeap=0x470000, dwFlags=0x0, lpMem=0x0 | out: hHeap=0x470000) returned 1 [0244.433] PtInRect (lprc=0x26dd44, pt=0x10392) returned 1 [0244.433] HeapFree (in: hHeap=0x470000, dwFlags=0x0, lpMem=0x4e7878 | out: hHeap=0x470000) returned 1 [0244.433] IntersectRect (in: lprcDst=0x26e270, lprcSrc1=0x26e270, lprcSrc2=0x26f400 | out: lprcDst=0x26e270) returned 1 [0244.433] HeapFree (in: hHeap=0x470000, dwFlags=0x0, lpMem=0x4e7848 | out: hHeap=0x470000) returned 1 [0244.433] HeapFree (in: hHeap=0x470000, dwFlags=0x0, lpMem=0x4e7788 | out: hHeap=0x470000) returned 1 [0244.433] HeapFree (in: hHeap=0x470000, dwFlags=0x0, lpMem=0x4e77b8 | out: hHeap=0x470000) returned 1 [0244.433] HeapFree (in: hHeap=0x470000, dwFlags=0x0, lpMem=0x4bcb10 | out: hHeap=0x470000) returned 1 [0244.433] HeapFree (in: hHeap=0x470000, dwFlags=0x0, lpMem=0x0 | out: hHeap=0x470000) returned 1 [0244.434] ClientToScreen (in: hWnd=0x5011e, lpPoint=0x26f69c | out: lpPoint=0x26f69c) returned 1 [0244.434] RtlAllocateHeap (HeapHandle=0x470000, Flags=0x0, Size=0xf8) returned 0x4f3878 [0244.434] GetCurrentThreadId () returned 0x220 [0244.434] CActiveIMMAppEx_Trident:IActiveIMMApp:OnDefWindowProc (in: This=0x4b1068, hWnd=0x5011e, msg=0x200, wParam=0x0, lParam=0x18802de, plResult=0x26f794 | out: plResult=0x26f794) returned 0x1 [0244.434] NtdllDefWindowProc_W () returned 0x0 [0244.434] HeapFree (in: hHeap=0x470000, dwFlags=0x0, lpMem=0x4f3878 | out: hHeap=0x470000) returned 1 [0244.434] GetMessageTime () returned 305871 [0244.434] GetMessagePos () returned 0x1d80318 [0244.434] GetCapture () returned 0x0 [0244.434] ClientToScreen (in: hWnd=0x5011e, lpPoint=0x26f69c | out: lpPoint=0x26f69c) returned 1 [0244.435] RtlAllocateHeap (HeapHandle=0x470000, Flags=0x0, Size=0xf8) returned 0x4f3878 [0244.435] GetCurrentThreadId () returned 0x220 [0244.435] RtlReAllocateHeap (Heap=0x470000, Flags=0x0, Ptr=0x484850, Size=0x18) returned 0x4c0e88 [0244.435] ClientToScreen (in: hWnd=0x5011e, lpPoint=0x26f6a0 | out: lpPoint=0x26f6a0) returned 1 [0244.435] RtlAllocateHeap (HeapHandle=0x470000, Flags=0x0, Size=0xf8) returned 0x4f3978 [0244.435] ClientToScreen (in: hWnd=0x5011e, lpPoint=0x26f6a0 | out: lpPoint=0x26f6a0) returned 1 [0244.435] RtlAllocateHeap (HeapHandle=0x470000, Flags=0x0, Size=0xf8) returned 0x4f3978 [0244.435] ClientToScreen (in: hWnd=0x5011e, lpPoint=0x26f6a0 | out: lpPoint=0x26f6a0) returned 1 [0244.435] RtlAllocateHeap (HeapHandle=0x470000, Flags=0x0, Size=0xf8) returned 0x4f3978 [0244.435] ClientToScreen (in: hWnd=0x5011e, lpPoint=0x26f6a0 | out: lpPoint=0x26f6a0) returned 1 [0244.435] RtlAllocateHeap (HeapHandle=0x470000, Flags=0x0, Size=0xf8) returned 0x4f3978 [0244.436] ClientToScreen (in: hWnd=0x5011e, lpPoint=0x26f6a0 | out: lpPoint=0x26f6a0) returned 1 [0244.436] RtlAllocateHeap (HeapHandle=0x470000, Flags=0x0, Size=0xf8) returned 0x4f3978 [0244.436] HeapFree (in: hHeap=0x470000, dwFlags=0x0, lpMem=0x4f3978 | out: hHeap=0x470000) returned 1 [0244.436] HeapFree (in: hHeap=0x470000, dwFlags=0x0, lpMem=0x4c0e88 | out: hHeap=0x470000) returned 1 [0244.436] RtlAllocateHeap (HeapHandle=0x470000, Flags=0x0, Size=0x280) returned 0x4d46f8 [0244.436] RtlReAllocateHeap (Heap=0x470000, Flags=0x0, Ptr=0x4d46f8, Size=0x3c0) returned 0x4b4988 [0244.436] GetSysColor (nIndex=5) returned 0xffffff [0244.436] HeapFree (in: hHeap=0x470000, dwFlags=0x0, lpMem=0x0 | out: hHeap=0x470000) returned 1 [0244.436] HeapFree (in: hHeap=0x470000, dwFlags=0x0, lpMem=0x0 | out: hHeap=0x470000) returned 1 [0244.436] GetSysColor (nIndex=5) returned 0xffffff [0244.437] HeapFree (in: hHeap=0x470000, dwFlags=0x0, lpMem=0x0 | out: hHeap=0x470000) returned 1 [0244.437] HeapFree (in: hHeap=0x470000, dwFlags=0x0, lpMem=0x0 | out: hHeap=0x470000) returned 1 [0244.437] GetSysColor (nIndex=5) returned 0xffffff [0244.437] HeapFree (in: hHeap=0x470000, dwFlags=0x0, lpMem=0x0 | out: hHeap=0x470000) returned 1 [0244.437] HeapFree (in: hHeap=0x470000, dwFlags=0x0, lpMem=0x0 | out: hHeap=0x470000) returned 1 [0244.437] GetSysColor (nIndex=5) returned 0xffffff [0244.437] HeapFree (in: hHeap=0x470000, dwFlags=0x0, lpMem=0x0 | out: hHeap=0x470000) returned 1 [0244.437] HeapFree (in: hHeap=0x470000, dwFlags=0x0, lpMem=0x0 | out: hHeap=0x470000) returned 1 [0244.437] CActiveIMMAppEx_Trident:IActiveIMMApp:OnDefWindowProc (in: This=0x4b1068, hWnd=0x5011e, msg=0x8004, wParam=0x0, lParam=0x18802de, plResult=0x26f794 | out: plResult=0x26f794) returned 0x1 [0244.437] NtdllDefWindowProc_W () returned 0x0 [0244.437] HeapFree (in: hHeap=0x470000, dwFlags=0x0, lpMem=0x4f3878 | out: hHeap=0x470000) returned 1 [0244.437] GetCurrentThreadId () returned 0x220 [0244.437] GetMessageW (in: lpMsg=0x26fbd4, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x26fbd4) returned 1 [0244.437] TranslateMessage (lpMsg=0x26fbd4) returned 0 [0244.437] DispatchMessageW (lpMsg=0x26fbd4) returned 0x0 [0244.437] GetCurrentThreadId () returned 0x220 [0244.437] GetCurrentThreadId () returned 0x220 [0244.437] GetCurrentThreadId () returned 0x220 [0244.438] GetMessageW (in: lpMsg=0x26fbd4, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x26fbd4) returned 1 [0244.733] TranslateMessage (lpMsg=0x26fbd4) returned 0 [0244.733] DispatchMessageW (lpMsg=0x26fbd4) returned 0x0 [0244.733] GetCapture () returned 0x0 [0244.733] WindowFromPoint (Point=0x318) returned 0x5011e [0244.733] GetWindowLongW (hWnd=0x5011e, nIndex=-21) returned 4858488 [0244.733] GetClientRect (in: hWnd=0x5011e, lpRect=0x26f698 | out: lpRect=0x26f698) returned 1 [0244.733] ScreenToClient (in: hWnd=0x5011e, lpPoint=0x26f6a8 | out: lpPoint=0x26f6a8) returned 1 [0244.733] PtInRect (lprc=0x26f698, pt=0x2de) returned 1 [0244.733] GetCurrentThreadId () returned 0x220 [0244.733] GetMessageW (in: lpMsg=0x26fbd4, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x26fbd4) returned 1 [0245.045] TranslateMessage (lpMsg=0x26fbd4) returned 0 [0245.045] DispatchMessageW (lpMsg=0x26fbd4) returned 0x0 [0245.045] GetCapture () returned 0x0 [0245.045] WindowFromPoint (Point=0x318) returned 0x5011e [0245.045] GetWindowLongW (hWnd=0x5011e, nIndex=-21) returned 4858488 [0245.045] GetClientRect (in: hWnd=0x5011e, lpRect=0x26f698 | out: lpRect=0x26f698) returned 1 [0245.045] ScreenToClient (in: hWnd=0x5011e, lpPoint=0x26f6a8 | out: lpPoint=0x26f6a8) returned 1 [0245.045] PtInRect (lprc=0x26f698, pt=0x2de) returned 1 [0245.045] GetCurrentThreadId () returned 0x220 [0245.045] GetMessageW (in: lpMsg=0x26fbd4, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x26fbd4) returned 1 [0245.357] TranslateMessage (lpMsg=0x26fbd4) returned 0 [0245.357] DispatchMessageW (lpMsg=0x26fbd4) returned 0x0 [0245.357] GetCapture () returned 0x0 [0245.357] WindowFromPoint (Point=0x318) returned 0x5011e [0245.357] GetWindowLongW (hWnd=0x5011e, nIndex=-21) returned 4858488 [0245.357] GetClientRect (in: hWnd=0x5011e, lpRect=0x26f698 | out: lpRect=0x26f698) returned 1 [0245.357] ScreenToClient (in: hWnd=0x5011e, lpPoint=0x26f6a8 | out: lpPoint=0x26f6a8) returned 1 [0245.357] PtInRect (lprc=0x26f698, pt=0x2de) returned 1 [0245.357] GetCurrentThreadId () returned 0x220 [0245.357] GetMessageW (in: lpMsg=0x26fbd4, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x26fbd4) returned 1 [0245.669] TranslateMessage (lpMsg=0x26fbd4) returned 0 [0245.669] DispatchMessageW (lpMsg=0x26fbd4) returned 0x0 [0245.669] GetCapture () returned 0x0 [0245.669] WindowFromPoint (Point=0x318) returned 0x5011e [0245.669] GetWindowLongW (hWnd=0x5011e, nIndex=-21) returned 4858488 [0245.669] GetClientRect (in: hWnd=0x5011e, lpRect=0x26f698 | out: lpRect=0x26f698) returned 1 [0245.669] ScreenToClient (in: hWnd=0x5011e, lpPoint=0x26f6a8 | out: lpPoint=0x26f6a8) returned 1 [0245.669] PtInRect (lprc=0x26f698, pt=0x2de) returned 1 [0245.669] GetCurrentThreadId () returned 0x220 [0245.669] GetMessageW (in: lpMsg=0x26fbd4, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x26fbd4) returned 1 [0245.983] TranslateMessage (lpMsg=0x26fbd4) returned 0 [0245.983] DispatchMessageW (lpMsg=0x26fbd4) returned 0x0 [0245.983] GetCapture () returned 0x0 [0245.983] WindowFromPoint (Point=0x318) returned 0x5011e [0245.983] GetWindowLongW (hWnd=0x5011e, nIndex=-21) returned 4858488 [0245.983] GetClientRect (in: hWnd=0x5011e, lpRect=0x26f698 | out: lpRect=0x26f698) returned 1 [0245.983] ScreenToClient (in: hWnd=0x5011e, lpPoint=0x26f6a8 | out: lpPoint=0x26f6a8) returned 1 [0245.983] PtInRect (lprc=0x26f698, pt=0x2de) returned 1 [0245.983] GetCurrentThreadId () returned 0x220 [0245.983] GetMessageW (in: lpMsg=0x26fbd4, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x26fbd4) returned 1 [0246.293] TranslateMessage (lpMsg=0x26fbd4) returned 0 [0246.293] DispatchMessageW (lpMsg=0x26fbd4) returned 0x0 [0246.293] GetCapture () returned 0x0 [0246.293] WindowFromPoint (Point=0x318) returned 0x5011e [0246.293] GetWindowLongW (hWnd=0x5011e, nIndex=-21) returned 4858488 [0246.293] GetClientRect (in: hWnd=0x5011e, lpRect=0x26f698 | out: lpRect=0x26f698) returned 1 [0246.293] ScreenToClient (in: hWnd=0x5011e, lpPoint=0x26f6a8 | out: lpPoint=0x26f6a8) returned 1 [0246.293] PtInRect (lprc=0x26f698, pt=0x2de) returned 1 [0246.293] GetCurrentThreadId () returned 0x220 [0246.293] GetMessageW (in: lpMsg=0x26fbd4, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x26fbd4) returned 1 [0246.605] TranslateMessage (lpMsg=0x26fbd4) returned 0 [0246.605] DispatchMessageW (lpMsg=0x26fbd4) returned 0x0 [0246.605] GetCapture () returned 0x0 [0246.605] WindowFromPoint (Point=0x318) returned 0x5011e [0246.605] GetWindowLongW (hWnd=0x5011e, nIndex=-21) returned 4858488 [0246.605] GetClientRect (in: hWnd=0x5011e, lpRect=0x26f698 | out: lpRect=0x26f698) returned 1 [0246.605] ScreenToClient (in: hWnd=0x5011e, lpPoint=0x26f6a8 | out: lpPoint=0x26f6a8) returned 1 [0246.605] PtInRect (lprc=0x26f698, pt=0x2de) returned 1 [0246.605] GetCurrentThreadId () returned 0x220 [0246.605] GetMessageW (in: lpMsg=0x26fbd4, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x26fbd4) returned 1 [0246.917] TranslateMessage (lpMsg=0x26fbd4) returned 0 [0246.917] DispatchMessageW (lpMsg=0x26fbd4) returned 0x0 [0246.917] GetCapture () returned 0x0 [0246.917] WindowFromPoint (Point=0x318) returned 0x5011e [0246.917] GetWindowLongW (hWnd=0x5011e, nIndex=-21) returned 4858488 [0246.917] GetClientRect (in: hWnd=0x5011e, lpRect=0x26f698 | out: lpRect=0x26f698) returned 1 [0246.917] ScreenToClient (in: hWnd=0x5011e, lpPoint=0x26f6a8 | out: lpPoint=0x26f6a8) returned 1 [0246.917] PtInRect (lprc=0x26f698, pt=0x2de) returned 1 [0246.917] GetCurrentThreadId () returned 0x220 [0246.917] GetMessageW (in: lpMsg=0x26fbd4, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x26fbd4) returned 1 [0247.229] TranslateMessage (lpMsg=0x26fbd4) returned 0 [0247.229] DispatchMessageW (lpMsg=0x26fbd4) returned 0x0 [0247.229] GetCapture () returned 0x0 [0247.229] WindowFromPoint (Point=0x318) returned 0x5011e [0247.229] GetWindowLongW (hWnd=0x5011e, nIndex=-21) returned 4858488 [0247.229] GetClientRect (in: hWnd=0x5011e, lpRect=0x26f698 | out: lpRect=0x26f698) returned 1 [0247.229] ScreenToClient (in: hWnd=0x5011e, lpPoint=0x26f6a8 | out: lpPoint=0x26f6a8) returned 1 [0247.229] PtInRect (lprc=0x26f698, pt=0x2de) returned 1 [0247.229] GetCurrentThreadId () returned 0x220 [0247.229] GetMessageW (in: lpMsg=0x26fbd4, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x26fbd4) returned 1 [0247.541] TranslateMessage (lpMsg=0x26fbd4) returned 0 [0247.541] DispatchMessageW (lpMsg=0x26fbd4) returned 0x0 [0247.541] GetCapture () returned 0x0 [0247.541] WindowFromPoint (Point=0x318) returned 0x5011e [0247.541] GetWindowLongW (hWnd=0x5011e, nIndex=-21) returned 4858488 [0247.541] GetClientRect (in: hWnd=0x5011e, lpRect=0x26f698 | out: lpRect=0x26f698) returned 1 [0247.541] ScreenToClient (in: hWnd=0x5011e, lpPoint=0x26f6a8 | out: lpPoint=0x26f6a8) returned 1 [0247.541] PtInRect (lprc=0x26f698, pt=0x2de) returned 1 [0247.541] GetCurrentThreadId () returned 0x220 [0247.542] GetMessageW (in: lpMsg=0x26fbd4, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x26fbd4) returned 1 [0247.853] TranslateMessage (lpMsg=0x26fbd4) returned 0 [0247.853] DispatchMessageW (lpMsg=0x26fbd4) returned 0x0 [0247.853] GetCapture () returned 0x0 [0247.853] WindowFromPoint (Point=0x318) returned 0x5011e [0247.853] GetWindowLongW (hWnd=0x5011e, nIndex=-21) returned 4858488 [0247.853] GetClientRect (in: hWnd=0x5011e, lpRect=0x26f698 | out: lpRect=0x26f698) returned 1 [0247.853] ScreenToClient (in: hWnd=0x5011e, lpPoint=0x26f6a8 | out: lpPoint=0x26f6a8) returned 1 [0247.853] PtInRect (lprc=0x26f698, pt=0x2de) returned 1 [0247.853] GetCurrentThreadId () returned 0x220 [0247.853] GetMessageW (in: lpMsg=0x26fbd4, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x26fbd4) returned 1 [0248.165] TranslateMessage (lpMsg=0x26fbd4) returned 0 [0248.165] DispatchMessageW (lpMsg=0x26fbd4) returned 0x0 [0248.165] GetCapture () returned 0x0 [0248.165] WindowFromPoint (Point=0x318) returned 0x5011e [0248.165] GetWindowLongW (hWnd=0x5011e, nIndex=-21) returned 4858488 [0248.165] GetClientRect (in: hWnd=0x5011e, lpRect=0x26f698 | out: lpRect=0x26f698) returned 1 [0248.165] ScreenToClient (in: hWnd=0x5011e, lpPoint=0x26f6a8 | out: lpPoint=0x26f6a8) returned 1 [0248.165] PtInRect (lprc=0x26f698, pt=0x2de) returned 1 [0248.165] GetCurrentThreadId () returned 0x220 [0248.165] GetMessageW (in: lpMsg=0x26fbd4, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x26fbd4) returned 1 [0248.477] TranslateMessage (lpMsg=0x26fbd4) returned 0 [0248.477] DispatchMessageW (lpMsg=0x26fbd4) returned 0x0 [0248.477] GetCapture () returned 0x0 [0248.477] WindowFromPoint (Point=0x318) returned 0x5011e [0248.477] GetWindowLongW (hWnd=0x5011e, nIndex=-21) returned 4858488 [0248.477] GetClientRect (in: hWnd=0x5011e, lpRect=0x26f698 | out: lpRect=0x26f698) returned 1 [0248.477] ScreenToClient (in: hWnd=0x5011e, lpPoint=0x26f6a8 | out: lpPoint=0x26f6a8) returned 1 [0248.477] PtInRect (lprc=0x26f698, pt=0x2de) returned 1 [0248.477] GetCurrentThreadId () returned 0x220 [0248.477] GetMessageW (in: lpMsg=0x26fbd4, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x26fbd4) returned 1 [0248.789] TranslateMessage (lpMsg=0x26fbd4) returned 0 [0248.789] DispatchMessageW (lpMsg=0x26fbd4) returned 0x0 [0248.789] GetCapture () returned 0x0 [0248.789] WindowFromPoint (Point=0x318) returned 0x5011e [0248.789] GetWindowLongW (hWnd=0x5011e, nIndex=-21) returned 4858488 [0248.789] GetClientRect (in: hWnd=0x5011e, lpRect=0x26f698 | out: lpRect=0x26f698) returned 1 [0248.789] ScreenToClient (in: hWnd=0x5011e, lpPoint=0x26f6a8 | out: lpPoint=0x26f6a8) returned 1 [0248.789] PtInRect (lprc=0x26f698, pt=0x2de) returned 1 [0248.789] GetCurrentThreadId () returned 0x220 [0248.789] GetMessageW (in: lpMsg=0x26fbd4, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x26fbd4) returned 1 [0249.101] TranslateMessage (lpMsg=0x26fbd4) returned 0 [0249.101] DispatchMessageW (lpMsg=0x26fbd4) returned 0x0 [0249.101] GetCapture () returned 0x0 [0249.101] WindowFromPoint (Point=0x318) returned 0x5011e [0249.101] GetWindowLongW (hWnd=0x5011e, nIndex=-21) returned 4858488 [0249.101] GetClientRect (in: hWnd=0x5011e, lpRect=0x26f698 | out: lpRect=0x26f698) returned 1 [0249.101] ScreenToClient (in: hWnd=0x5011e, lpPoint=0x26f6a8 | out: lpPoint=0x26f6a8) returned 1 [0249.101] PtInRect (lprc=0x26f698, pt=0x2de) returned 1 [0249.101] GetCurrentThreadId () returned 0x220 [0249.101] GetMessageW (in: lpMsg=0x26fbd4, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x26fbd4) returned 1 [0249.413] TranslateMessage (lpMsg=0x26fbd4) returned 0 [0249.413] DispatchMessageW (lpMsg=0x26fbd4) returned 0x0 [0249.413] GetCapture () returned 0x0 [0249.413] WindowFromPoint (Point=0x318) returned 0x5011e [0249.413] GetWindowLongW (hWnd=0x5011e, nIndex=-21) returned 4858488 [0249.413] GetClientRect (in: hWnd=0x5011e, lpRect=0x26f698 | out: lpRect=0x26f698) returned 1 [0249.413] ScreenToClient (in: hWnd=0x5011e, lpPoint=0x26f6a8 | out: lpPoint=0x26f6a8) returned 1 [0249.413] PtInRect (lprc=0x26f698, pt=0x2de) returned 1 [0249.413] GetCurrentThreadId () returned 0x220 [0249.413] GetMessageW (in: lpMsg=0x26fbd4, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x26fbd4) returned 1 [0249.727] TranslateMessage (lpMsg=0x26fbd4) returned 0 [0249.727] DispatchMessageW (lpMsg=0x26fbd4) returned 0x0 [0249.727] GetCapture () returned 0x0 [0249.727] WindowFromPoint (Point=0x318) returned 0x5011e [0249.727] GetWindowLongW (hWnd=0x5011e, nIndex=-21) returned 4858488 [0249.727] GetClientRect (in: hWnd=0x5011e, lpRect=0x26f698 | out: lpRect=0x26f698) returned 1 [0249.727] ScreenToClient (in: hWnd=0x5011e, lpPoint=0x26f6a8 | out: lpPoint=0x26f6a8) returned 1 [0249.727] PtInRect (lprc=0x26f698, pt=0x2de) returned 1 [0249.727] GetCurrentThreadId () returned 0x220 [0249.727] GetMessageW (in: lpMsg=0x26fbd4, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x26fbd4) returned 1 [0250.037] TranslateMessage (lpMsg=0x26fbd4) returned 0 [0250.037] DispatchMessageW (lpMsg=0x26fbd4) returned 0x0 [0250.037] GetCapture () returned 0x0 [0250.037] WindowFromPoint (Point=0x318) returned 0x5011e [0250.037] GetWindowLongW (hWnd=0x5011e, nIndex=-21) returned 4858488 [0250.037] GetClientRect (in: hWnd=0x5011e, lpRect=0x26f698 | out: lpRect=0x26f698) returned 1 [0250.037] ScreenToClient (in: hWnd=0x5011e, lpPoint=0x26f6a8 | out: lpPoint=0x26f6a8) returned 1 [0250.037] PtInRect (lprc=0x26f698, pt=0x2de) returned 1 [0250.037] GetCurrentThreadId () returned 0x220 [0250.037] GetMessageW (in: lpMsg=0x26fbd4, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x26fbd4) returned 1 [0250.349] TranslateMessage (lpMsg=0x26fbd4) returned 0 [0250.349] DispatchMessageW (lpMsg=0x26fbd4) returned 0x0 [0250.349] GetCapture () returned 0x0 [0250.349] WindowFromPoint (Point=0x318) returned 0x5011e [0250.349] GetWindowLongW (hWnd=0x5011e, nIndex=-21) returned 4858488 [0250.349] GetClientRect (in: hWnd=0x5011e, lpRect=0x26f698 | out: lpRect=0x26f698) returned 1 [0250.349] ScreenToClient (in: hWnd=0x5011e, lpPoint=0x26f6a8 | out: lpPoint=0x26f6a8) returned 1 [0250.349] PtInRect (lprc=0x26f698, pt=0x2de) returned 1 [0250.349] GetCurrentThreadId () returned 0x220 [0250.349] GetMessageW (in: lpMsg=0x26fbd4, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x26fbd4) returned 1 [0250.661] TranslateMessage (lpMsg=0x26fbd4) returned 0 [0250.661] DispatchMessageW (lpMsg=0x26fbd4) returned 0x0 [0250.661] GetCapture () returned 0x0 [0250.661] WindowFromPoint (Point=0x318) returned 0x5011e [0250.662] GetWindowLongW (hWnd=0x5011e, nIndex=-21) returned 4858488 [0250.662] GetClientRect (in: hWnd=0x5011e, lpRect=0x26f698 | out: lpRect=0x26f698) returned 1 [0250.662] ScreenToClient (in: hWnd=0x5011e, lpPoint=0x26f6a8 | out: lpPoint=0x26f6a8) returned 1 [0250.662] PtInRect (lprc=0x26f698, pt=0x2de) returned 1 [0250.662] GetCurrentThreadId () returned 0x220 [0250.662] GetMessageW (in: lpMsg=0x26fbd4, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x26fbd4) returned 1 [0250.973] TranslateMessage (lpMsg=0x26fbd4) returned 0 [0250.973] DispatchMessageW (lpMsg=0x26fbd4) returned 0x0 [0250.973] GetCapture () returned 0x0 [0250.973] WindowFromPoint (Point=0x318) returned 0x5011e [0250.973] GetWindowLongW (hWnd=0x5011e, nIndex=-21) returned 4858488 [0250.973] GetClientRect (in: hWnd=0x5011e, lpRect=0x26f698 | out: lpRect=0x26f698) returned 1 [0250.973] ScreenToClient (in: hWnd=0x5011e, lpPoint=0x26f6a8 | out: lpPoint=0x26f6a8) returned 1 [0250.973] PtInRect (lprc=0x26f698, pt=0x2de) returned 1 [0250.973] GetCurrentThreadId () returned 0x220 [0250.973] GetMessageW (in: lpMsg=0x26fbd4, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x26fbd4) returned 1 [0251.285] TranslateMessage (lpMsg=0x26fbd4) returned 0 [0251.285] DispatchMessageW (lpMsg=0x26fbd4) returned 0x0 [0251.285] GetCapture () returned 0x0 [0251.285] WindowFromPoint (Point=0x318) returned 0x5011e [0251.285] GetWindowLongW (hWnd=0x5011e, nIndex=-21) returned 4858488 [0251.285] GetClientRect (in: hWnd=0x5011e, lpRect=0x26f698 | out: lpRect=0x26f698) returned 1 [0251.285] ScreenToClient (in: hWnd=0x5011e, lpPoint=0x26f6a8 | out: lpPoint=0x26f6a8) returned 1 [0251.285] PtInRect (lprc=0x26f698, pt=0x2de) returned 1 [0251.285] GetCurrentThreadId () returned 0x220 [0251.285] GetMessageW (in: lpMsg=0x26fbd4, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x26fbd4) returned 1 [0251.597] TranslateMessage (lpMsg=0x26fbd4) returned 0 [0251.597] DispatchMessageW (lpMsg=0x26fbd4) returned 0x0 [0251.597] GetCapture () returned 0x0 [0251.597] WindowFromPoint (Point=0x318) returned 0x5011e [0251.597] GetWindowLongW (hWnd=0x5011e, nIndex=-21) returned 4858488 [0251.597] GetClientRect (in: hWnd=0x5011e, lpRect=0x26f698 | out: lpRect=0x26f698) returned 1 [0251.597] ScreenToClient (in: hWnd=0x5011e, lpPoint=0x26f6a8 | out: lpPoint=0x26f6a8) returned 1 [0251.597] PtInRect (lprc=0x26f698, pt=0x2de) returned 1 [0251.597] GetCurrentThreadId () returned 0x220 [0251.597] GetMessageW (in: lpMsg=0x26fbd4, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x26fbd4) returned 1 [0251.909] TranslateMessage (lpMsg=0x26fbd4) returned 0 [0251.909] DispatchMessageW (lpMsg=0x26fbd4) returned 0x0 [0251.909] GetCapture () returned 0x0 [0251.909] WindowFromPoint (Point=0x318) returned 0x5011e [0251.909] GetWindowLongW (hWnd=0x5011e, nIndex=-21) returned 4858488 [0251.909] GetClientRect (in: hWnd=0x5011e, lpRect=0x26f698 | out: lpRect=0x26f698) returned 1 [0251.909] ScreenToClient (in: hWnd=0x5011e, lpPoint=0x26f6a8 | out: lpPoint=0x26f6a8) returned 1 [0251.909] PtInRect (lprc=0x26f698, pt=0x2de) returned 1 [0251.909] GetCurrentThreadId () returned 0x220 [0251.910] GetMessageW (in: lpMsg=0x26fbd4, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x26fbd4) returned 1 [0252.221] TranslateMessage (lpMsg=0x26fbd4) returned 0 [0252.221] DispatchMessageW (lpMsg=0x26fbd4) returned 0x0 [0252.221] GetCapture () returned 0x0 [0252.221] WindowFromPoint (Point=0x318) returned 0x5011e [0252.221] GetWindowLongW (hWnd=0x5011e, nIndex=-21) returned 4858488 [0252.221] GetClientRect (in: hWnd=0x5011e, lpRect=0x26f698 | out: lpRect=0x26f698) returned 1 [0252.221] ScreenToClient (in: hWnd=0x5011e, lpPoint=0x26f6a8 | out: lpPoint=0x26f6a8) returned 1 [0252.221] PtInRect (lprc=0x26f698, pt=0x2de) returned 1 [0252.221] GetCurrentThreadId () returned 0x220 [0252.221] GetMessageW (in: lpMsg=0x26fbd4, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x26fbd4) returned 1 [0252.533] TranslateMessage (lpMsg=0x26fbd4) returned 0 [0252.533] DispatchMessageW (lpMsg=0x26fbd4) returned 0x0 [0252.533] GetCapture () returned 0x0 [0252.533] WindowFromPoint (Point=0x318) returned 0x5011e [0252.533] GetWindowLongW (hWnd=0x5011e, nIndex=-21) returned 4858488 [0252.533] GetClientRect (in: hWnd=0x5011e, lpRect=0x26f698 | out: lpRect=0x26f698) returned 1 [0252.533] ScreenToClient (in: hWnd=0x5011e, lpPoint=0x26f6a8 | out: lpPoint=0x26f6a8) returned 1 [0252.533] PtInRect (lprc=0x26f698, pt=0x2de) returned 1 [0252.533] GetCurrentThreadId () returned 0x220 [0252.533] GetMessageW (in: lpMsg=0x26fbd4, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x26fbd4) returned 1 [0252.845] TranslateMessage (lpMsg=0x26fbd4) returned 0 [0252.845] DispatchMessageW (lpMsg=0x26fbd4) returned 0x0 [0252.845] GetCapture () returned 0x0 [0252.845] WindowFromPoint (Point=0x318) returned 0x5011e [0252.845] GetWindowLongW (hWnd=0x5011e, nIndex=-21) returned 4858488 [0252.845] GetClientRect (in: hWnd=0x5011e, lpRect=0x26f698 | out: lpRect=0x26f698) returned 1 [0252.845] ScreenToClient (in: hWnd=0x5011e, lpPoint=0x26f6a8 | out: lpPoint=0x26f6a8) returned 1 [0252.846] PtInRect (lprc=0x26f698, pt=0x2de) returned 1 [0252.846] GetCurrentThreadId () returned 0x220 [0252.846] GetMessageW (in: lpMsg=0x26fbd4, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x26fbd4) returned 1 [0253.157] TranslateMessage (lpMsg=0x26fbd4) returned 0 [0253.157] DispatchMessageW (lpMsg=0x26fbd4) returned 0x0 [0253.157] GetCapture () returned 0x0 [0253.157] WindowFromPoint (Point=0x318) returned 0x5011e [0253.157] GetWindowLongW (hWnd=0x5011e, nIndex=-21) returned 4858488 [0253.158] GetClientRect (in: hWnd=0x5011e, lpRect=0x26f698 | out: lpRect=0x26f698) returned 1 [0253.158] ScreenToClient (in: hWnd=0x5011e, lpPoint=0x26f6a8 | out: lpPoint=0x26f6a8) returned 1 [0253.158] PtInRect (lprc=0x26f698, pt=0x2de) returned 1 [0253.158] GetCurrentThreadId () returned 0x220 [0253.158] GetMessageW (in: lpMsg=0x26fbd4, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x26fbd4) returned 1 [0253.469] TranslateMessage (lpMsg=0x26fbd4) returned 0 [0253.469] DispatchMessageW (lpMsg=0x26fbd4) returned 0x0 [0253.469] GetCapture () returned 0x0 [0253.469] WindowFromPoint (Point=0x318) returned 0x5011e [0253.469] GetWindowLongW (hWnd=0x5011e, nIndex=-21) returned 4858488 [0253.469] GetClientRect (in: hWnd=0x5011e, lpRect=0x26f698 | out: lpRect=0x26f698) returned 1 [0253.469] ScreenToClient (in: hWnd=0x5011e, lpPoint=0x26f6a8 | out: lpPoint=0x26f6a8) returned 1 [0253.469] PtInRect (lprc=0x26f698, pt=0x2de) returned 1 [0253.469] GetCurrentThreadId () returned 0x220 [0253.469] GetMessageW (in: lpMsg=0x26fbd4, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x26fbd4) returned 1 [0253.781] TranslateMessage (lpMsg=0x26fbd4) returned 0 [0253.781] DispatchMessageW (lpMsg=0x26fbd4) returned 0x0 [0253.781] GetCapture () returned 0x0 [0253.781] WindowFromPoint (Point=0x318) returned 0x5011e [0253.781] GetWindowLongW (hWnd=0x5011e, nIndex=-21) returned 4858488 [0253.781] GetClientRect (in: hWnd=0x5011e, lpRect=0x26f698 | out: lpRect=0x26f698) returned 1 [0253.781] ScreenToClient (in: hWnd=0x5011e, lpPoint=0x26f6a8 | out: lpPoint=0x26f6a8) returned 1 [0253.781] PtInRect (lprc=0x26f698, pt=0x2de) returned 1 [0253.781] GetCurrentThreadId () returned 0x220 [0253.781] GetMessageW (in: lpMsg=0x26fbd4, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x26fbd4) returned 1 [0254.093] TranslateMessage (lpMsg=0x26fbd4) returned 0 [0254.093] DispatchMessageW (lpMsg=0x26fbd4) returned 0x0 [0254.093] GetCapture () returned 0x0 [0254.093] WindowFromPoint (Point=0x318) returned 0x5011e [0254.093] GetWindowLongW (hWnd=0x5011e, nIndex=-21) returned 4858488 [0254.093] GetClientRect (in: hWnd=0x5011e, lpRect=0x26f698 | out: lpRect=0x26f698) returned 1 [0254.093] ScreenToClient (in: hWnd=0x5011e, lpPoint=0x26f6a8 | out: lpPoint=0x26f6a8) returned 1 [0254.093] PtInRect (lprc=0x26f698, pt=0x2de) returned 1 [0254.093] GetCurrentThreadId () returned 0x220 [0254.093] GetMessageW (in: lpMsg=0x26fbd4, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x26fbd4) returned 1 [0254.405] TranslateMessage (lpMsg=0x26fbd4) returned 0 [0254.405] DispatchMessageW (lpMsg=0x26fbd4) returned 0x0 [0254.405] GetCapture () returned 0x0 [0254.405] WindowFromPoint (Point=0x318) returned 0x5011e [0254.405] GetWindowLongW (hWnd=0x5011e, nIndex=-21) returned 4858488 [0254.405] GetClientRect (in: hWnd=0x5011e, lpRect=0x26f698 | out: lpRect=0x26f698) returned 1 [0254.405] ScreenToClient (in: hWnd=0x5011e, lpPoint=0x26f6a8 | out: lpPoint=0x26f6a8) returned 1 [0254.405] PtInRect (lprc=0x26f698, pt=0x2de) returned 1 [0254.405] GetCurrentThreadId () returned 0x220 [0254.405] GetMessageW (in: lpMsg=0x26fbd4, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x26fbd4) returned 1 [0254.471] GetWindowLongW (hWnd=0x5011e, nIndex=-21) returned 4858488 [0254.471] GetClientRect (in: hWnd=0x5011e, lpRect=0x26f878 | out: lpRect=0x26f878) returned 1 [0254.471] ScreenToClient (in: hWnd=0x5011e, lpPoint=0x26f888 | out: lpPoint=0x26f888) returned 1 [0254.471] PtInRect (lprc=0x26f878, pt=0x216) returned 1 [0254.471] GetCurrentThreadId () returned 0x220 [0254.471] GetWindowLongW (hWnd=0x5011e, nIndex=-21) returned 4858488 [0254.471] ScreenToClient (in: hWnd=0x5011e, lpPoint=0x26f8f8 | out: lpPoint=0x26f8f8) returned 1 [0254.471] GetMessageTime () returned 315855 [0254.471] GetMessagePos () returned 0x1d80318 [0254.471] GetCapture () returned 0x0 [0254.471] IntersectRect (in: lprcDst=0x26f2e8, lprcSrc1=0x26f2e8, lprcSrc2=0x26f378 | out: lprcDst=0x26f2e8) returned 1 [0254.472] IntersectRect (in: lprcDst=0x26f0a4, lprcSrc1=0x26f0a4, lprcSrc2=0x26f074 | out: lprcDst=0x26f0a4) returned 1 [0254.472] IntersectRect (in: lprcDst=0x26f388, lprcSrc1=0x26f388, lprcSrc2=0x26f094 | out: lprcDst=0x26f388) returned 1 [0254.472] HeapFree (in: hHeap=0x470000, dwFlags=0x0, lpMem=0x0 | out: hHeap=0x470000) returned 1 [0254.472] RtlAllocateHeap (HeapHandle=0x470000, Flags=0x0, Size=0x24) returned 0x4e77b8 [0254.472] IntersectRect (in: lprcDst=0x26f388, lprcSrc1=0x26f388, lprcSrc2=0x26f0b4 | out: lprcDst=0x26f388) returned 1 [0254.472] IntersectRect (in: lprcDst=0x26ee78, lprcSrc1=0x26ee78, lprcSrc2=0x26f378 | out: lprcDst=0x26ee78) returned 1 [0254.472] IntersectRect (in: lprcDst=0x26ee78, lprcSrc1=0x26ee78, lprcSrc2=0x26f378 | out: lprcDst=0x26ee78) returned 1 [0254.472] IntersectRect (in: lprcDst=0x26eab0, lprcSrc1=0x26eab0, lprcSrc2=0x26ea80 | out: lprcDst=0x26eab0) returned 1 [0254.472] IntersectRect (in: lprcDst=0x26f410, lprcSrc1=0x26f410, lprcSrc2=0x26eaa0 | out: lprcDst=0x26f410) returned 1 [0254.472] IntersectRect (in: lprcDst=0x26ec34, lprcSrc1=0x26ec34, lprcSrc2=0x26ec04 | out: lprcDst=0x26ec34) returned 1 [0254.472] IntersectRect (in: lprcDst=0x26f388, lprcSrc1=0x26f388, lprcSrc2=0x26ec24 | out: lprcDst=0x26f388) returned 1 [0254.472] HeapFree (in: hHeap=0x470000, dwFlags=0x0, lpMem=0x0 | out: hHeap=0x470000) returned 1 [0254.472] RtlAllocateHeap (HeapHandle=0x470000, Flags=0x0, Size=0x24) returned 0x4e7788 [0254.472] IntersectRect (in: lprcDst=0x26ea70, lprcSrc1=0x26ea70, lprcSrc2=0x26f378 | out: lprcDst=0x26ea70) returned 1 [0254.472] IntersectRect (in: lprcDst=0x26f388, lprcSrc1=0x26f388, lprcSrc2=0x26ec44 | out: lprcDst=0x26f388) returned 1 [0254.472] IntersectRect (in: lprcDst=0x26ea08, lprcSrc1=0x26ea08, lprcSrc2=0x26f378 | out: lprcDst=0x26ea08) returned 1 [0254.472] IntersectRect (in: lprcDst=0x26ea08, lprcSrc1=0x26ea08, lprcSrc2=0x26f378 | out: lprcDst=0x26ea08) returned 1 [0254.472] IntersectRect (in: lprcDst=0x26e794, lprcSrc1=0x26e794, lprcSrc2=0x26e64c | out: lprcDst=0x26e794) returned 1 [0254.472] IntersectRect (in: lprcDst=0x26f388, lprcSrc1=0x26f388, lprcSrc2=0x26e7b4 | out: lprcDst=0x26f388) returned 1 [0254.472] HeapFree (in: hHeap=0x470000, dwFlags=0x0, lpMem=0x0 | out: hHeap=0x470000) returned 1 [0254.472] RtlAllocateHeap (HeapHandle=0x470000, Flags=0x0, Size=0x24) returned 0x4e7848 [0254.472] IntersectRect (in: lprcDst=0x26f388, lprcSrc1=0x26f388, lprcSrc2=0x26e7d4 | out: lprcDst=0x26f388) returned 1 [0254.472] IntersectRect (in: lprcDst=0x26e598, lprcSrc1=0x26e598, lprcSrc2=0x26f378 | out: lprcDst=0x26e598) returned 1 [0254.472] IntersectRect (in: lprcDst=0x26e598, lprcSrc1=0x26e598, lprcSrc2=0x26f378 | out: lprcDst=0x26e598) returned 1 [0254.472] IntersectRect (in: lprcDst=0x26e324, lprcSrc1=0x26e324, lprcSrc2=0x26e1dc | out: lprcDst=0x26e324) returned 1 [0254.472] IntersectRect (in: lprcDst=0x26f388, lprcSrc1=0x26f388, lprcSrc2=0x26e344 | out: lprcDst=0x26f388) returned 1 [0254.472] HeapFree (in: hHeap=0x470000, dwFlags=0x0, lpMem=0x0 | out: hHeap=0x470000) returned 1 [0254.472] RtlAllocateHeap (HeapHandle=0x470000, Flags=0x0, Size=0x24) returned 0x4e7878 [0254.472] IntersectRect (in: lprcDst=0x26f388, lprcSrc1=0x26f388, lprcSrc2=0x26e364 | out: lprcDst=0x26f388) returned 1 [0254.472] IntersectRect (in: lprcDst=0x26e128, lprcSrc1=0x26e128, lprcSrc2=0x26f378 | out: lprcDst=0x26e128) returned 1 [0254.472] IntersectRect (in: lprcDst=0x26e128, lprcSrc1=0x26e128, lprcSrc2=0x26f378 | out: lprcDst=0x26e128) returned 0 [0254.472] IntersectRect (in: lprcDst=0x26e128, lprcSrc1=0x26e128, lprcSrc2=0x26f378 | out: lprcDst=0x26e128) returned 1 [0254.472] IntersectRect (in: lprcDst=0x26e128, lprcSrc1=0x26e128, lprcSrc2=0x26f378 | out: lprcDst=0x26e128) returned 1 [0254.472] IntersectRect (in: lprcDst=0x26e128, lprcSrc1=0x26e128, lprcSrc2=0x26f378 | out: lprcDst=0x26e128) returned 1 [0254.473] IntersectRect (in: lprcDst=0x26e128, lprcSrc1=0x26e128, lprcSrc2=0x26f378 | out: lprcDst=0x26e128) returned 1 [0254.473] IntersectRect (in: lprcDst=0x26df6c, lprcSrc1=0x26df6c, lprcSrc2=0x26de08 | out: lprcDst=0x26df6c) returned 1 [0254.473] HeapFree (in: hHeap=0x470000, dwFlags=0x0, lpMem=0x0 | out: hHeap=0x470000) returned 1 [0254.473] RtlAllocateHeap (HeapHandle=0x470000, Flags=0x0, Size=0x24) returned 0x4e78a8 [0254.473] IntersectRect (in: lprcDst=0x26f388, lprcSrc1=0x26f388, lprcSrc2=0x26df5c | out: lprcDst=0x26f388) returned 1 [0254.473] IntersectRect (in: lprcDst=0x26de18, lprcSrc1=0x26de18, lprcSrc2=0x26f378 | out: lprcDst=0x26de18) returned 1 [0254.473] IntersectRect (in: lprcDst=0x26f388, lprcSrc1=0x26f388, lprcSrc2=0x26df7c | out: lprcDst=0x26f388) returned 1 [0254.473] PostMessageW (hWnd=0x7011a, Msg=0x8002, wParam=0x0, lParam=0x0) returned 1 [0254.473] HeapFree (in: hHeap=0x470000, dwFlags=0x0, lpMem=0x0 | out: hHeap=0x470000) returned 1 [0254.474] LsSetDoc () returned 0x0 [0254.474] LsCreateLine () returned 0x0 [0254.474] HeapFree (in: hHeap=0x470000, dwFlags=0x0, lpMem=0x0 | out: hHeap=0x470000) returned 1 [0254.475] LsDestroyLine () returned 0x0 [0254.475] HeapFree (in: hHeap=0x470000, dwFlags=0x0, lpMem=0x0 | out: hHeap=0x470000) returned 1 [0254.475] PtInRect (lprc=0x26dcbc, pt=0xb572) returned 0 [0254.475] PtInRect (lprc=0x26dcbc, pt=0xb572) returned 1 [0254.475] HeapFree (in: hHeap=0x470000, dwFlags=0x0, lpMem=0x4e78a8 | out: hHeap=0x470000) returned 1 [0254.476] IntersectRect (in: lprcDst=0x26e1e8, lprcSrc1=0x26e1e8, lprcSrc2=0x26f378 | out: lprcDst=0x26e1e8) returned 1 [0254.476] HeapFree (in: hHeap=0x470000, dwFlags=0x0, lpMem=0x4e7878 | out: hHeap=0x470000) returned 1 [0254.476] HeapFree (in: hHeap=0x470000, dwFlags=0x0, lpMem=0x4e7848 | out: hHeap=0x470000) returned 1 [0254.476] HeapFree (in: hHeap=0x470000, dwFlags=0x0, lpMem=0x4e7788 | out: hHeap=0x470000) returned 1 [0254.476] HeapFree (in: hHeap=0x470000, dwFlags=0x0, lpMem=0x4e77b8 | out: hHeap=0x470000) returned 1 [0254.476] HeapFree (in: hHeap=0x470000, dwFlags=0x0, lpMem=0x0 | out: hHeap=0x470000) returned 1 [0254.476] PtInRect (lprc=0x26f524, pt=0xb572) returned 1 [0254.476] LoadCursorA (hInstance=0x0, lpCursorName=0x7f00) returned 0x10003 [0254.476] GetCursor () returned 0x10003 [0254.476] TranslateMessage (lpMsg=0x26fbd4) returned 0 [0254.476] DispatchMessageW (lpMsg=0x26fbd4) returned 0x0 [0254.476] GetWindowLongW (hWnd=0x5011e, nIndex=-21) returned 4858488 [0254.476] GetMessageTime () returned 315917 [0254.476] GetMessagePos () returned 0x2ec0250 [0254.476] GetCapture () returned 0x0 [0254.476] GetCurrentThreadId () returned 0x220 [0254.476] GetCurrentThreadId () returned 0x220 [0254.476] GetCurrentThreadId () returned 0x220 [0254.476] IntersectRect (in: lprcDst=0x26f370, lprcSrc1=0x26f370, lprcSrc2=0x26f400 | out: lprcDst=0x26f370) returned 1 [0254.476] IntersectRect (in: lprcDst=0x26f12c, lprcSrc1=0x26f12c, lprcSrc2=0x26f0fc | out: lprcDst=0x26f12c) returned 1 [0254.476] IntersectRect (in: lprcDst=0x26f410, lprcSrc1=0x26f410, lprcSrc2=0x26f11c | out: lprcDst=0x26f410) returned 1 [0254.476] HeapFree (in: hHeap=0x470000, dwFlags=0x0, lpMem=0x0 | out: hHeap=0x470000) returned 1 [0254.476] RtlAllocateHeap (HeapHandle=0x470000, Flags=0x0, Size=0x24) returned 0x4e77b8 [0254.476] IntersectRect (in: lprcDst=0x26f410, lprcSrc1=0x26f410, lprcSrc2=0x26f13c | out: lprcDst=0x26f410) returned 1 [0254.477] IntersectRect (in: lprcDst=0x26ef00, lprcSrc1=0x26ef00, lprcSrc2=0x26f400 | out: lprcDst=0x26ef00) returned 1 [0254.477] IntersectRect (in: lprcDst=0x26ef00, lprcSrc1=0x26ef00, lprcSrc2=0x26f400 | out: lprcDst=0x26ef00) returned 1 [0254.477] IntersectRect (in: lprcDst=0x26eb38, lprcSrc1=0x26eb38, lprcSrc2=0x26eb08 | out: lprcDst=0x26eb38) returned 1 [0254.477] IntersectRect (in: lprcDst=0x26f498, lprcSrc1=0x26f498, lprcSrc2=0x26eb28 | out: lprcDst=0x26f498) returned 1 [0254.477] IntersectRect (in: lprcDst=0x26ecbc, lprcSrc1=0x26ecbc, lprcSrc2=0x26ec8c | out: lprcDst=0x26ecbc) returned 1 [0254.477] IntersectRect (in: lprcDst=0x26f410, lprcSrc1=0x26f410, lprcSrc2=0x26ecac | out: lprcDst=0x26f410) returned 1 [0254.477] HeapFree (in: hHeap=0x470000, dwFlags=0x0, lpMem=0x0 | out: hHeap=0x470000) returned 1 [0254.477] RtlAllocateHeap (HeapHandle=0x470000, Flags=0x0, Size=0x24) returned 0x4e7788 [0254.477] IntersectRect (in: lprcDst=0x26eaf8, lprcSrc1=0x26eaf8, lprcSrc2=0x26f400 | out: lprcDst=0x26eaf8) returned 1 [0254.477] IntersectRect (in: lprcDst=0x26f410, lprcSrc1=0x26f410, lprcSrc2=0x26eccc | out: lprcDst=0x26f410) returned 1 [0254.477] IntersectRect (in: lprcDst=0x26ea90, lprcSrc1=0x26ea90, lprcSrc2=0x26f400 | out: lprcDst=0x26ea90) returned 1 [0254.477] IntersectRect (in: lprcDst=0x26ea90, lprcSrc1=0x26ea90, lprcSrc2=0x26f400 | out: lprcDst=0x26ea90) returned 1 [0254.477] IntersectRect (in: lprcDst=0x26e81c, lprcSrc1=0x26e81c, lprcSrc2=0x26e6d4 | out: lprcDst=0x26e81c) returned 1 [0254.477] IntersectRect (in: lprcDst=0x26f410, lprcSrc1=0x26f410, lprcSrc2=0x26e83c | out: lprcDst=0x26f410) returned 1 [0254.477] HeapFree (in: hHeap=0x470000, dwFlags=0x0, lpMem=0x0 | out: hHeap=0x470000) returned 1 [0254.477] RtlAllocateHeap (HeapHandle=0x470000, Flags=0x0, Size=0x24) returned 0x4e7848 [0254.477] IntersectRect (in: lprcDst=0x26f410, lprcSrc1=0x26f410, lprcSrc2=0x26e85c | out: lprcDst=0x26f410) returned 1 [0254.477] IntersectRect (in: lprcDst=0x26e620, lprcSrc1=0x26e620, lprcSrc2=0x26f400 | out: lprcDst=0x26e620) returned 1 [0254.477] IntersectRect (in: lprcDst=0x26e620, lprcSrc1=0x26e620, lprcSrc2=0x26f400 | out: lprcDst=0x26e620) returned 1 [0254.477] IntersectRect (in: lprcDst=0x26e3ac, lprcSrc1=0x26e3ac, lprcSrc2=0x26e264 | out: lprcDst=0x26e3ac) returned 1 [0254.477] IntersectRect (in: lprcDst=0x26f410, lprcSrc1=0x26f410, lprcSrc2=0x26e3cc | out: lprcDst=0x26f410) returned 1 [0254.477] HeapFree (in: hHeap=0x470000, dwFlags=0x0, lpMem=0x0 | out: hHeap=0x470000) returned 1 [0254.477] RtlAllocateHeap (HeapHandle=0x470000, Flags=0x0, Size=0x24) returned 0x4e7878 [0254.477] IntersectRect (in: lprcDst=0x26f410, lprcSrc1=0x26f410, lprcSrc2=0x26e3ec | out: lprcDst=0x26f410) returned 1 [0254.477] IntersectRect (in: lprcDst=0x26e1b0, lprcSrc1=0x26e1b0, lprcSrc2=0x26f400 | out: lprcDst=0x26e1b0) returned 1 [0254.477] IntersectRect (in: lprcDst=0x26e1b0, lprcSrc1=0x26e1b0, lprcSrc2=0x26f400 | out: lprcDst=0x26e1b0) returned 0 [0254.477] IntersectRect (in: lprcDst=0x26e1b0, lprcSrc1=0x26e1b0, lprcSrc2=0x26f400 | out: lprcDst=0x26e1b0) returned 1 [0254.477] IntersectRect (in: lprcDst=0x26e1b0, lprcSrc1=0x26e1b0, lprcSrc2=0x26f400 | out: lprcDst=0x26e1b0) returned 1 [0254.477] IntersectRect (in: lprcDst=0x26e1b0, lprcSrc1=0x26e1b0, lprcSrc2=0x26f400 | out: lprcDst=0x26e1b0) returned 1 [0254.477] IntersectRect (in: lprcDst=0x26e1b0, lprcSrc1=0x26e1b0, lprcSrc2=0x26f400 | out: lprcDst=0x26e1b0) returned 1 [0254.477] IntersectRect (in: lprcDst=0x26dff4, lprcSrc1=0x26dff4, lprcSrc2=0x26de90 | out: lprcDst=0x26dff4) returned 1 [0254.477] HeapFree (in: hHeap=0x470000, dwFlags=0x0, lpMem=0x0 | out: hHeap=0x470000) returned 1 [0254.477] RtlAllocateHeap (HeapHandle=0x470000, Flags=0x0, Size=0x24) returned 0x4e78a8 [0254.477] IntersectRect (in: lprcDst=0x26f410, lprcSrc1=0x26f410, lprcSrc2=0x26dfe4 | out: lprcDst=0x26f410) returned 1 [0254.477] IntersectRect (in: lprcDst=0x26dea0, lprcSrc1=0x26dea0, lprcSrc2=0x26f400 | out: lprcDst=0x26dea0) returned 1 [0254.477] IntersectRect (in: lprcDst=0x26f410, lprcSrc1=0x26f410, lprcSrc2=0x26e004 | out: lprcDst=0x26f410) returned 1 [0254.478] LsSetDoc () returned 0x0 [0254.478] LsCreateLine () returned 0x0 [0254.478] HeapFree (in: hHeap=0x470000, dwFlags=0x0, lpMem=0x0 | out: hHeap=0x470000) returned 1 [0254.479] LsDestroyLine () returned 0x0 [0254.479] HeapFree (in: hHeap=0x470000, dwFlags=0x0, lpMem=0x0 | out: hHeap=0x470000) returned 1 [0254.479] PtInRect (lprc=0x26dd44, pt=0xb572) returned 0 [0254.479] PtInRect (lprc=0x26dd44, pt=0xb572) returned 1 [0254.479] HeapFree (in: hHeap=0x470000, dwFlags=0x0, lpMem=0x4e78a8 | out: hHeap=0x470000) returned 1 [0254.479] IntersectRect (in: lprcDst=0x26e270, lprcSrc1=0x26e270, lprcSrc2=0x26f400 | out: lprcDst=0x26e270) returned 1 [0254.479] HeapFree (in: hHeap=0x470000, dwFlags=0x0, lpMem=0x4e7878 | out: hHeap=0x470000) returned 1 [0254.479] HeapFree (in: hHeap=0x470000, dwFlags=0x0, lpMem=0x4e7848 | out: hHeap=0x470000) returned 1 [0254.479] HeapFree (in: hHeap=0x470000, dwFlags=0x0, lpMem=0x4e7788 | out: hHeap=0x470000) returned 1 [0254.479] HeapFree (in: hHeap=0x470000, dwFlags=0x0, lpMem=0x4e77b8 | out: hHeap=0x470000) returned 1 [0254.479] HeapFree (in: hHeap=0x470000, dwFlags=0x0, lpMem=0x0 | out: hHeap=0x470000) returned 1 [0254.480] ClientToScreen (in: hWnd=0x5011e, lpPoint=0x26f69c | out: lpPoint=0x26f69c) returned 1 [0254.480] RtlAllocateHeap (HeapHandle=0x470000, Flags=0x0, Size=0xf8) returned 0x4f3878 [0254.480] GetCurrentThreadId () returned 0x220 [0254.480] CActiveIMMAppEx_Trident:IActiveIMMApp:OnDefWindowProc (in: This=0x4b1068, hWnd=0x5011e, msg=0x200, wParam=0x0, lParam=0x29c0216, plResult=0x26f794 | out: plResult=0x26f794) returned 0x1 [0254.480] NtdllDefWindowProc_W () returned 0x0 [0254.480] HeapFree (in: hHeap=0x470000, dwFlags=0x0, lpMem=0x4f3878 | out: hHeap=0x470000) returned 1 [0254.480] GetCurrentThreadId () returned 0x220 [0254.480] GetMessageW (in: lpMsg=0x26fbd4, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x26fbd4) returned 1 [0254.480] TranslateMessage (lpMsg=0x26fbd4) returned 0 [0254.480] DispatchMessageW (lpMsg=0x26fbd4) returned 0x0 [0254.480] GetCurrentThreadId () returned 0x220 [0254.480] GetCurrentThreadId () returned 0x220 [0254.480] GetCurrentThreadId () returned 0x220 [0254.480] GetMessageW (in: lpMsg=0x26fbd4, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x26fbd4) returned 1 [0254.717] TranslateMessage (lpMsg=0x26fbd4) returned 0 [0254.717] DispatchMessageW (lpMsg=0x26fbd4) returned 0x0 [0254.717] GetCapture () returned 0x0 [0254.717] WindowFromPoint (Point=0x250) returned 0x5011e [0254.717] GetWindowLongW (hWnd=0x5011e, nIndex=-21) returned 4858488 [0254.717] GetClientRect (in: hWnd=0x5011e, lpRect=0x26f698 | out: lpRect=0x26f698) returned 1 [0254.717] ScreenToClient (in: hWnd=0x5011e, lpPoint=0x26f6a8 | out: lpPoint=0x26f6a8) returned 1 [0254.717] PtInRect (lprc=0x26f698, pt=0x216) returned 1 [0254.717] GetCurrentThreadId () returned 0x220 [0254.717] GetMessageW (in: lpMsg=0x26fbd4, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x26fbd4) returned 1 [0255.029] TranslateMessage (lpMsg=0x26fbd4) returned 0 [0255.029] DispatchMessageW (lpMsg=0x26fbd4) returned 0x0 [0255.029] GetCapture () returned 0x0 [0255.029] WindowFromPoint (Point=0x250) returned 0x5011e [0255.029] GetWindowLongW (hWnd=0x5011e, nIndex=-21) returned 4858488 [0255.029] GetClientRect (in: hWnd=0x5011e, lpRect=0x26f698 | out: lpRect=0x26f698) returned 1 [0255.029] ScreenToClient (in: hWnd=0x5011e, lpPoint=0x26f6a8 | out: lpPoint=0x26f6a8) returned 1 [0255.029] PtInRect (lprc=0x26f698, pt=0x216) returned 1 [0255.029] GetCurrentThreadId () returned 0x220 [0255.029] GetMessageW (in: lpMsg=0x26fbd4, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x26fbd4) returned 1 [0255.341] TranslateMessage (lpMsg=0x26fbd4) returned 0 [0255.341] DispatchMessageW (lpMsg=0x26fbd4) returned 0x0 [0255.341] GetCapture () returned 0x0 [0255.341] WindowFromPoint (Point=0x250) returned 0x5011e [0255.341] GetWindowLongW (hWnd=0x5011e, nIndex=-21) returned 4858488 [0255.341] GetClientRect (in: hWnd=0x5011e, lpRect=0x26f698 | out: lpRect=0x26f698) returned 1 [0255.341] ScreenToClient (in: hWnd=0x5011e, lpPoint=0x26f6a8 | out: lpPoint=0x26f6a8) returned 1 [0255.341] PtInRect (lprc=0x26f698, pt=0x216) returned 1 [0255.341] GetCurrentThreadId () returned 0x220 [0255.341] GetMessageW (in: lpMsg=0x26fbd4, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x26fbd4) returned 1 [0255.653] TranslateMessage (lpMsg=0x26fbd4) returned 0 [0255.653] DispatchMessageW (lpMsg=0x26fbd4) returned 0x0 [0255.653] GetCapture () returned 0x0 [0255.653] WindowFromPoint (Point=0x250) returned 0x5011e [0255.653] GetWindowLongW (hWnd=0x5011e, nIndex=-21) returned 4858488 [0255.653] GetClientRect (in: hWnd=0x5011e, lpRect=0x26f698 | out: lpRect=0x26f698) returned 1 [0255.653] ScreenToClient (in: hWnd=0x5011e, lpPoint=0x26f6a8 | out: lpPoint=0x26f6a8) returned 1 [0255.653] PtInRect (lprc=0x26f698, pt=0x216) returned 1 [0255.653] GetCurrentThreadId () returned 0x220 [0255.653] GetMessageW (in: lpMsg=0x26fbd4, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x26fbd4) returned 1 [0255.966] TranslateMessage (lpMsg=0x26fbd4) returned 0 [0255.966] DispatchMessageW (lpMsg=0x26fbd4) returned 0x0 [0255.966] GetCapture () returned 0x0 [0255.966] WindowFromPoint (Point=0x250) returned 0x5011e [0255.966] GetWindowLongW (hWnd=0x5011e, nIndex=-21) returned 4858488 [0255.966] GetClientRect (in: hWnd=0x5011e, lpRect=0x26f698 | out: lpRect=0x26f698) returned 1 [0255.966] ScreenToClient (in: hWnd=0x5011e, lpPoint=0x26f6a8 | out: lpPoint=0x26f6a8) returned 1 [0255.966] PtInRect (lprc=0x26f698, pt=0x216) returned 1 [0255.966] GetCurrentThreadId () returned 0x220 [0255.967] GetMessageW (in: lpMsg=0x26fbd4, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x26fbd4) returned 1 [0256.277] TranslateMessage (lpMsg=0x26fbd4) returned 0 [0256.277] DispatchMessageW (lpMsg=0x26fbd4) returned 0x0 [0256.277] GetCapture () returned 0x0 [0256.277] WindowFromPoint (Point=0x250) returned 0x5011e [0256.277] GetWindowLongW (hWnd=0x5011e, nIndex=-21) returned 4858488 [0256.277] GetClientRect (in: hWnd=0x5011e, lpRect=0x26f698 | out: lpRect=0x26f698) returned 1 [0256.277] ScreenToClient (in: hWnd=0x5011e, lpPoint=0x26f6a8 | out: lpPoint=0x26f6a8) returned 1 [0256.277] PtInRect (lprc=0x26f698, pt=0x216) returned 1 [0256.277] GetCurrentThreadId () returned 0x220 [0256.277] GetMessageW (in: lpMsg=0x26fbd4, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x26fbd4) returned 1 [0256.589] TranslateMessage (lpMsg=0x26fbd4) returned 0 [0256.589] DispatchMessageW (lpMsg=0x26fbd4) returned 0x0 [0256.589] GetCapture () returned 0x0 [0256.589] WindowFromPoint (Point=0x250) returned 0x5011e [0256.589] GetWindowLongW (hWnd=0x5011e, nIndex=-21) returned 4858488 [0256.589] GetClientRect (in: hWnd=0x5011e, lpRect=0x26f698 | out: lpRect=0x26f698) returned 1 [0256.589] ScreenToClient (in: hWnd=0x5011e, lpPoint=0x26f6a8 | out: lpPoint=0x26f6a8) returned 1 [0256.589] PtInRect (lprc=0x26f698, pt=0x216) returned 1 [0256.589] GetCurrentThreadId () returned 0x220 [0256.589] GetMessageW (in: lpMsg=0x26fbd4, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x26fbd4) returned 1 [0256.901] TranslateMessage (lpMsg=0x26fbd4) returned 0 [0256.901] DispatchMessageW (lpMsg=0x26fbd4) returned 0x0 [0256.901] GetCapture () returned 0x0 [0256.901] WindowFromPoint (Point=0x250) returned 0x5011e [0256.901] GetWindowLongW (hWnd=0x5011e, nIndex=-21) returned 4858488 [0256.901] GetClientRect (in: hWnd=0x5011e, lpRect=0x26f698 | out: lpRect=0x26f698) returned 1 [0256.901] ScreenToClient (in: hWnd=0x5011e, lpPoint=0x26f6a8 | out: lpPoint=0x26f6a8) returned 1 [0256.901] PtInRect (lprc=0x26f698, pt=0x216) returned 1 [0256.901] GetCurrentThreadId () returned 0x220 [0256.901] GetMessageW (in: lpMsg=0x26fbd4, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x26fbd4) returned 1 [0257.213] TranslateMessage (lpMsg=0x26fbd4) returned 0 [0257.213] DispatchMessageW (lpMsg=0x26fbd4) returned 0x0 [0257.213] GetCapture () returned 0x0 [0257.213] WindowFromPoint (Point=0x250) returned 0x5011e [0257.213] GetWindowLongW (hWnd=0x5011e, nIndex=-21) returned 4858488 [0257.213] GetClientRect (in: hWnd=0x5011e, lpRect=0x26f698 | out: lpRect=0x26f698) returned 1 [0257.213] ScreenToClient (in: hWnd=0x5011e, lpPoint=0x26f6a8 | out: lpPoint=0x26f6a8) returned 1 [0257.213] PtInRect (lprc=0x26f698, pt=0x216) returned 1 [0257.213] GetCurrentThreadId () returned 0x220 [0257.213] GetMessageW (in: lpMsg=0x26fbd4, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x26fbd4) returned 1 [0257.525] TranslateMessage (lpMsg=0x26fbd4) returned 0 [0257.525] DispatchMessageW (lpMsg=0x26fbd4) returned 0x0 [0257.525] GetCapture () returned 0x0 [0257.525] WindowFromPoint (Point=0x250) returned 0x5011e [0257.525] GetWindowLongW (hWnd=0x5011e, nIndex=-21) returned 4858488 [0257.525] GetClientRect (in: hWnd=0x5011e, lpRect=0x26f698 | out: lpRect=0x26f698) returned 1 [0257.525] ScreenToClient (in: hWnd=0x5011e, lpPoint=0x26f6a8 | out: lpPoint=0x26f6a8) returned 1 [0257.525] PtInRect (lprc=0x26f698, pt=0x216) returned 1 [0257.525] GetCurrentThreadId () returned 0x220 [0257.525] GetMessageW (in: lpMsg=0x26fbd4, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x26fbd4) returned 1 [0257.837] TranslateMessage (lpMsg=0x26fbd4) returned 0 [0257.837] DispatchMessageW (lpMsg=0x26fbd4) returned 0x0 [0257.837] GetCapture () returned 0x0 [0257.837] WindowFromPoint (Point=0x250) returned 0x5011e [0257.837] GetWindowLongW (hWnd=0x5011e, nIndex=-21) returned 4858488 [0257.837] GetClientRect (in: hWnd=0x5011e, lpRect=0x26f698 | out: lpRect=0x26f698) returned 1 [0257.837] ScreenToClient (in: hWnd=0x5011e, lpPoint=0x26f6a8 | out: lpPoint=0x26f6a8) returned 1 [0257.837] PtInRect (lprc=0x26f698, pt=0x216) returned 1 [0257.837] GetCurrentThreadId () returned 0x220 [0257.837] GetMessageW (in: lpMsg=0x26fbd4, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x26fbd4) returned 1 [0258.149] TranslateMessage (lpMsg=0x26fbd4) returned 0 [0258.149] DispatchMessageW (lpMsg=0x26fbd4) returned 0x0 [0258.149] GetCapture () returned 0x0 [0258.149] WindowFromPoint (Point=0x250) returned 0x5011e [0258.149] GetWindowLongW (hWnd=0x5011e, nIndex=-21) returned 4858488 [0258.149] GetClientRect (in: hWnd=0x5011e, lpRect=0x26f698 | out: lpRect=0x26f698) returned 1 [0258.149] ScreenToClient (in: hWnd=0x5011e, lpPoint=0x26f6a8 | out: lpPoint=0x26f6a8) returned 1 [0258.149] PtInRect (lprc=0x26f698, pt=0x216) returned 1 [0258.149] GetCurrentThreadId () returned 0x220 [0258.149] GetMessageW (in: lpMsg=0x26fbd4, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x26fbd4) returned 1 [0258.461] TranslateMessage (lpMsg=0x26fbd4) returned 0 [0258.461] DispatchMessageW (lpMsg=0x26fbd4) returned 0x0 [0258.461] GetCapture () returned 0x0 [0258.461] WindowFromPoint (Point=0x250) returned 0x5011e [0258.461] GetWindowLongW (hWnd=0x5011e, nIndex=-21) returned 4858488 [0258.461] GetClientRect (in: hWnd=0x5011e, lpRect=0x26f698 | out: lpRect=0x26f698) returned 1 [0258.461] ScreenToClient (in: hWnd=0x5011e, lpPoint=0x26f6a8 | out: lpPoint=0x26f6a8) returned 1 [0258.461] PtInRect (lprc=0x26f698, pt=0x216) returned 1 [0258.461] GetCurrentThreadId () returned 0x220 [0258.461] GetMessageW (in: lpMsg=0x26fbd4, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x26fbd4) returned 1 [0258.773] TranslateMessage (lpMsg=0x26fbd4) returned 0 [0258.773] DispatchMessageW (lpMsg=0x26fbd4) returned 0x0 [0258.773] GetCapture () returned 0x0 [0258.773] WindowFromPoint (Point=0x250) returned 0x5011e [0258.773] GetWindowLongW (hWnd=0x5011e, nIndex=-21) returned 4858488 [0258.773] GetClientRect (in: hWnd=0x5011e, lpRect=0x26f698 | out: lpRect=0x26f698) returned 1 [0258.773] ScreenToClient (in: hWnd=0x5011e, lpPoint=0x26f6a8 | out: lpPoint=0x26f6a8) returned 1 [0258.773] PtInRect (lprc=0x26f698, pt=0x216) returned 1 [0258.773] GetCurrentThreadId () returned 0x220 [0258.773] GetMessageW (in: lpMsg=0x26fbd4, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x26fbd4) returned 1 [0259.085] TranslateMessage (lpMsg=0x26fbd4) returned 0 [0259.085] DispatchMessageW (lpMsg=0x26fbd4) returned 0x0 [0259.085] GetCapture () returned 0x0 [0259.085] WindowFromPoint (Point=0x250) returned 0x5011e [0259.085] GetWindowLongW (hWnd=0x5011e, nIndex=-21) returned 4858488 [0259.085] GetClientRect (in: hWnd=0x5011e, lpRect=0x26f698 | out: lpRect=0x26f698) returned 1 [0259.085] ScreenToClient (in: hWnd=0x5011e, lpPoint=0x26f6a8 | out: lpPoint=0x26f6a8) returned 1 [0259.085] PtInRect (lprc=0x26f698, pt=0x216) returned 1 [0259.085] GetCurrentThreadId () returned 0x220 [0259.085] GetMessageW (in: lpMsg=0x26fbd4, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x26fbd4) returned 1 [0259.397] TranslateMessage (lpMsg=0x26fbd4) returned 0 [0259.397] DispatchMessageW (lpMsg=0x26fbd4) returned 0x0 [0259.397] GetCapture () returned 0x0 [0259.397] WindowFromPoint (Point=0x250) returned 0x5011e [0259.397] GetWindowLongW (hWnd=0x5011e, nIndex=-21) returned 4858488 [0259.397] GetClientRect (in: hWnd=0x5011e, lpRect=0x26f698 | out: lpRect=0x26f698) returned 1 [0259.397] ScreenToClient (in: hWnd=0x5011e, lpPoint=0x26f6a8 | out: lpPoint=0x26f6a8) returned 1 [0259.397] PtInRect (lprc=0x26f698, pt=0x216) returned 1 [0259.397] GetCurrentThreadId () returned 0x220 [0259.397] GetMessageW (in: lpMsg=0x26fbd4, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x26fbd4) returned 1 [0259.709] TranslateMessage (lpMsg=0x26fbd4) returned 0 [0259.709] DispatchMessageW (lpMsg=0x26fbd4) returned 0x0 [0259.709] GetCapture () returned 0x0 [0259.709] WindowFromPoint (Point=0x250) returned 0x5011e [0259.709] GetWindowLongW (hWnd=0x5011e, nIndex=-21) returned 4858488 [0259.709] GetClientRect (in: hWnd=0x5011e, lpRect=0x26f698 | out: lpRect=0x26f698) returned 1 [0259.709] ScreenToClient (in: hWnd=0x5011e, lpPoint=0x26f6a8 | out: lpPoint=0x26f6a8) returned 1 [0259.709] PtInRect (lprc=0x26f698, pt=0x216) returned 1 [0259.709] GetCurrentThreadId () returned 0x220 [0259.709] GetMessageW (in: lpMsg=0x26fbd4, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x26fbd4) returned 1 [0260.021] TranslateMessage (lpMsg=0x26fbd4) returned 0 [0260.021] DispatchMessageW (lpMsg=0x26fbd4) returned 0x0 [0260.021] GetCapture () returned 0x0 [0260.021] WindowFromPoint (Point=0x250) returned 0x5011e [0260.021] GetWindowLongW (hWnd=0x5011e, nIndex=-21) returned 4858488 [0260.021] GetClientRect (in: hWnd=0x5011e, lpRect=0x26f698 | out: lpRect=0x26f698) returned 1 [0260.021] ScreenToClient (in: hWnd=0x5011e, lpPoint=0x26f6a8 | out: lpPoint=0x26f6a8) returned 1 [0260.021] PtInRect (lprc=0x26f698, pt=0x216) returned 1 [0260.021] GetCurrentThreadId () returned 0x220 [0260.021] GetMessageW (in: lpMsg=0x26fbd4, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x26fbd4) returned 1 [0260.333] TranslateMessage (lpMsg=0x26fbd4) returned 0 [0260.333] DispatchMessageW (lpMsg=0x26fbd4) returned 0x0 [0260.333] GetCapture () returned 0x0 [0260.333] WindowFromPoint (Point=0x250) returned 0x5011e [0260.333] GetWindowLongW (hWnd=0x5011e, nIndex=-21) returned 4858488 [0260.333] GetClientRect (in: hWnd=0x5011e, lpRect=0x26f698 | out: lpRect=0x26f698) returned 1 [0260.333] ScreenToClient (in: hWnd=0x5011e, lpPoint=0x26f6a8 | out: lpPoint=0x26f6a8) returned 1 [0260.333] PtInRect (lprc=0x26f698, pt=0x216) returned 1 [0260.333] GetCurrentThreadId () returned 0x220 [0260.333] GetMessageW (in: lpMsg=0x26fbd4, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x26fbd4) returned 1 [0260.645] TranslateMessage (lpMsg=0x26fbd4) returned 0 [0260.645] DispatchMessageW (lpMsg=0x26fbd4) returned 0x0 [0260.645] GetCapture () returned 0x0 [0260.645] WindowFromPoint (Point=0x250) returned 0x5011e [0260.645] GetWindowLongW (hWnd=0x5011e, nIndex=-21) returned 4858488 [0260.645] GetClientRect (in: hWnd=0x5011e, lpRect=0x26f698 | out: lpRect=0x26f698) returned 1 [0260.645] ScreenToClient (in: hWnd=0x5011e, lpPoint=0x26f6a8 | out: lpPoint=0x26f6a8) returned 1 [0260.645] PtInRect (lprc=0x26f698, pt=0x216) returned 1 [0260.645] GetCurrentThreadId () returned 0x220 [0260.646] GetMessageW (in: lpMsg=0x26fbd4, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x26fbd4) returned 1 [0260.957] TranslateMessage (lpMsg=0x26fbd4) returned 0 [0260.957] DispatchMessageW (lpMsg=0x26fbd4) returned 0x0 [0260.957] GetCapture () returned 0x0 [0260.957] WindowFromPoint (Point=0x250) returned 0x5011e [0260.957] GetWindowLongW (hWnd=0x5011e, nIndex=-21) returned 4858488 [0260.957] GetClientRect (in: hWnd=0x5011e, lpRect=0x26f698 | out: lpRect=0x26f698) returned 1 [0260.957] ScreenToClient (in: hWnd=0x5011e, lpPoint=0x26f6a8 | out: lpPoint=0x26f6a8) returned 1 [0260.957] PtInRect (lprc=0x26f698, pt=0x216) returned 1 [0260.957] GetCurrentThreadId () returned 0x220 [0260.957] GetMessageW (in: lpMsg=0x26fbd4, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x26fbd4) returned 1 [0261.269] TranslateMessage (lpMsg=0x26fbd4) returned 0 [0261.269] DispatchMessageW (lpMsg=0x26fbd4) returned 0x0 [0261.269] GetCapture () returned 0x0 [0261.269] WindowFromPoint (Point=0x250) returned 0x5011e [0261.269] GetWindowLongW (hWnd=0x5011e, nIndex=-21) returned 4858488 [0261.269] GetClientRect (in: hWnd=0x5011e, lpRect=0x26f698 | out: lpRect=0x26f698) returned 1 [0261.269] ScreenToClient (in: hWnd=0x5011e, lpPoint=0x26f6a8 | out: lpPoint=0x26f6a8) returned 1 [0261.269] PtInRect (lprc=0x26f698, pt=0x216) returned 1 [0261.269] GetCurrentThreadId () returned 0x220 [0261.269] GetMessageW (in: lpMsg=0x26fbd4, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x26fbd4) returned 1 [0261.581] TranslateMessage (lpMsg=0x26fbd4) returned 0 [0261.581] DispatchMessageW (lpMsg=0x26fbd4) returned 0x0 [0261.581] GetCapture () returned 0x0 [0261.581] WindowFromPoint (Point=0x250) returned 0x5011e [0261.581] GetWindowLongW (hWnd=0x5011e, nIndex=-21) returned 4858488 [0261.581] GetClientRect (in: hWnd=0x5011e, lpRect=0x26f698 | out: lpRect=0x26f698) returned 1 [0261.581] ScreenToClient (in: hWnd=0x5011e, lpPoint=0x26f6a8 | out: lpPoint=0x26f6a8) returned 1 [0261.581] PtInRect (lprc=0x26f698, pt=0x216) returned 1 [0261.581] GetCurrentThreadId () returned 0x220 [0261.581] GetMessageW (in: lpMsg=0x26fbd4, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x26fbd4) returned 1 [0261.893] TranslateMessage (lpMsg=0x26fbd4) returned 0 [0261.893] DispatchMessageW (lpMsg=0x26fbd4) returned 0x0 [0261.893] GetCapture () returned 0x0 [0261.893] WindowFromPoint (Point=0x250) returned 0x5011e [0261.893] GetWindowLongW (hWnd=0x5011e, nIndex=-21) returned 4858488 [0261.893] GetClientRect (in: hWnd=0x5011e, lpRect=0x26f698 | out: lpRect=0x26f698) returned 1 [0261.893] ScreenToClient (in: hWnd=0x5011e, lpPoint=0x26f6a8 | out: lpPoint=0x26f6a8) returned 1 [0261.893] PtInRect (lprc=0x26f698, pt=0x216) returned 1 [0261.893] GetCurrentThreadId () returned 0x220 [0261.893] GetMessageW (in: lpMsg=0x26fbd4, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x26fbd4) returned 1 [0262.205] TranslateMessage (lpMsg=0x26fbd4) returned 0 [0262.205] DispatchMessageW (lpMsg=0x26fbd4) returned 0x0 [0262.205] GetCapture () returned 0x0 [0262.205] WindowFromPoint (Point=0x250) returned 0x5011e [0262.205] GetWindowLongW (hWnd=0x5011e, nIndex=-21) returned 4858488 [0262.205] GetClientRect (in: hWnd=0x5011e, lpRect=0x26f698 | out: lpRect=0x26f698) returned 1 [0262.205] ScreenToClient (in: hWnd=0x5011e, lpPoint=0x26f6a8 | out: lpPoint=0x26f6a8) returned 1 [0262.205] PtInRect (lprc=0x26f698, pt=0x216) returned 1 [0262.205] GetCurrentThreadId () returned 0x220 [0262.205] GetMessageW (in: lpMsg=0x26fbd4, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x26fbd4) returned 1 [0262.517] TranslateMessage (lpMsg=0x26fbd4) returned 0 [0262.517] DispatchMessageW (lpMsg=0x26fbd4) returned 0x0 [0262.517] GetCapture () returned 0x0 [0262.517] WindowFromPoint (Point=0x250) returned 0x5011e [0262.517] GetWindowLongW (hWnd=0x5011e, nIndex=-21) returned 4858488 [0262.517] GetClientRect (in: hWnd=0x5011e, lpRect=0x26f698 | out: lpRect=0x26f698) returned 1 [0262.517] ScreenToClient (in: hWnd=0x5011e, lpPoint=0x26f6a8 | out: lpPoint=0x26f6a8) returned 1 [0262.517] PtInRect (lprc=0x26f698, pt=0x216) returned 1 [0262.517] GetCurrentThreadId () returned 0x220 [0262.517] GetMessageW (in: lpMsg=0x26fbd4, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x26fbd4) returned 1 [0262.829] TranslateMessage (lpMsg=0x26fbd4) returned 0 [0262.829] DispatchMessageW (lpMsg=0x26fbd4) returned 0x0 [0262.829] GetCapture () returned 0x0 [0262.829] WindowFromPoint (Point=0x250) returned 0x5011e [0262.829] GetWindowLongW (hWnd=0x5011e, nIndex=-21) returned 4858488 [0262.829] GetClientRect (in: hWnd=0x5011e, lpRect=0x26f698 | out: lpRect=0x26f698) returned 1 [0262.829] ScreenToClient (in: hWnd=0x5011e, lpPoint=0x26f6a8 | out: lpPoint=0x26f6a8) returned 1 [0262.829] PtInRect (lprc=0x26f698, pt=0x216) returned 1 [0262.829] GetCurrentThreadId () returned 0x220 [0262.829] GetMessageW (in: lpMsg=0x26fbd4, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x26fbd4) returned 1 [0263.150] TranslateMessage (lpMsg=0x26fbd4) returned 0 [0263.151] DispatchMessageW (lpMsg=0x26fbd4) returned 0x0 [0263.151] GetCapture () returned 0x0 [0263.151] WindowFromPoint (Point=0x250) returned 0x5011e [0263.151] GetWindowLongW (hWnd=0x5011e, nIndex=-21) returned 4858488 [0263.151] GetClientRect (in: hWnd=0x5011e, lpRect=0x26f698 | out: lpRect=0x26f698) returned 1 [0263.151] ScreenToClient (in: hWnd=0x5011e, lpPoint=0x26f6a8 | out: lpPoint=0x26f6a8) returned 1 [0263.151] PtInRect (lprc=0x26f698, pt=0x216) returned 1 [0263.151] GetCurrentThreadId () returned 0x220 [0263.151] GetMessageW (lpMsg=0x26fbd4, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0) Thread: id = 54 os_tid = 0x998 Thread: id = 55 os_tid = 0x150 [0165.402] GetCurrentThreadId () returned 0x150 [0165.406] LoadLibraryW (lpLibFileName="mshtml.dll") returned 0x6fa30000 [0165.520] CoInitialize (pvReserved=0x0) returned 0x0 [0165.520] RtlAllocateHeap (HeapHandle=0x470000, Flags=0x0, Size=0x1006) returned 0x4b48c8 [0165.520] HeapFree (in: hHeap=0x470000, dwFlags=0x0, lpMem=0x4b3f30 | out: hHeap=0x470000) returned 1 [0165.520] IInternetProtocol:Read (in: This=0x4b3208, pv=0x4b4990, cb=0xf38, pcbRead=0x253fb0c | out: pv=0x4b4990, pcbRead=0x253fb0c*=0xd6c) returned 0x1 [0165.521] IInternetProtocolRoot:Terminate (This=0x4b3208, dwOptions=0x0) returned 0x0 [0165.521] IUnknown:Release (This=0x4b2b3c) returned 0x4 [0165.521] IUnknown:Release (This=0x4b2b74) returned 0x3 [0165.521] IUnknown:Release (This=0x4b2b74) returned 0x2 [0165.521] GetCurrentThreadId () returned 0x150 [0165.521] RtlAllocateHeap (HeapHandle=0x470000, Flags=0x0, Size=0x1c6e) returned 0x4b58d8 [0165.521] MultiByteToWideChar (in: CodePage=0x4e4, dwFlags=0x1, lpMultiByteStr=0x4b48c8, cbMultiByte=3636, lpWideCharStr=0x4b58dc, cchWideChar=3636 | out: lpWideCharStr="\r\n\r\n\r\n\x09\r\n\x09Epsilon encryptor\r\n\x09\r\n\x09\x09\r\n\x09\r\n\r\n\r\n\x09
\r\n\x09\x09
\r\n\x09\x09\x09\r\n\x09\x09\x09E P S I L O N
\r\n\x09\x09\x09Ransomware\r\n\x09\x09\x09\r\n\x09\x09\x09

\r\n\r\n\x09\x09\x09\x09\x09

As you can see, all your files got encrypted. Thats why your files are no longer readable.

\r\n\x09\x09\x09\x09\x09\r\n\x09\x09\x09\x09\x09

If you want them back, please contact us at our email below.

\r\n\x09\x09\x09\x09\x09

You can send us a couple of files and we will return the restored ones to prove that only we can do it.

\r\n\x09\x09\x09\x09\x09

EpsilonCrypt@tutanota.com

\r\n\x09\x09\x09\x09\x09

You can get more information about encryption on Wikipedia. (RSA, AES, RC4)

\r\n\x09\x09\x09\x09\x09
\r\n\x09\x09\x09\x09\x09

Please, provide your id below in the subject of your mail.

\r\n\x09\x09\x09\x09\x09

ID-QE54S-FEQ6E-Q654F-654TY-3215G-TZ320-AQF44-GSRG7-HTS98

\r\n\x09\x09\x09\x09\x09

\r\n\x09\x09\x09\x09\x09

If you have already submited your payement, you will receive your private key and another decryption key with the special decryption software

\r\n\x09\x09\x09\x09\x09
\r\n\x09\x09\x09\x09\r\n\x09\x09\x09\x09\x09

More informations:

\r\n\x09\x09\x09\x09\x09

1. The infection was due to vulnerabilities in your software.

\r\n\x09\x09\x09\x09\x09

2. Our goal is to return your data, but if you don't contact us, we will not succeed.

\r\n\r\n\x09\x09\x09\x09\x09\r\n\x09\x09
\r\n\x09\x09\x09\x09
\r\n\x09\x09\x09\x09

IMPORTANT:

\r\n\x09\x09\x09\x09

    1. If you want to make sure that it is impossible to recover files using third-party software, do this not on all files, otherwise you may lose all data.

\r\n\x09\x09\x09\x09

    2. Only communication through our email can guarantee file recover for you. We are not responsible for the actions of third parties who promise to help you - most often they are scammers.

\r\n\x09\x09\x09\x09 \r\n\x09\x09\x09\x09

    3. Please, do not try to rename encrypted files.

\r\n\x09\x09\x09\x09
\r\n\x09\x09\x09\r\n\x09\x09
\r\n\x09\r\n\x09\r\n\x09\r\n\x09\r\n\r\n") returned 3636 [0165.521] RtlAllocateHeap (HeapHandle=0x470000, Flags=0x8, Size=0x108) returned 0x4b7550 [0165.528] RtlAllocateHeap (HeapHandle=0x470000, Flags=0x8, Size=0x68) returned 0x4b3f30 [0165.528] IUnknown:AddRef (This=0x49c15c) returned 0xe [0165.528] RtlAllocateHeap (HeapHandle=0x470000, Flags=0x8, Size=0x1a8) returned 0x4b7660 [0165.528] IUnknown:AddRef (This=0x4a45b0) returned 0x4 [0165.529] IUnknown:AddRef (This=0x49c15c) returned 0xf [0165.529] IUnknown:QueryInterface (in: This=0x49c15c, riid=0x6fbed6e8*(Data1=0x50295b0c, Data2=0x6b79, Data3=0x4935, Data4=([0]=0xae, [1]=0xd8, [2]=0x5, [3]=0xd8, [4]=0xe, [5]=0xc8, [6]=0x6a, [7]=0x60)), ppvObject=0x253fa5c | out: ppvObject=0x253fa5c*=0x49c15c) returned 0x0 [0165.529] IUnknown:Release (This=0x49c15c) returned 0xf [0165.529] IUnknown:AddRef (This=0x49c15c) returned 0x10 [0165.529] IUri:GetScheme (in: This=0x49c15c, pdwScheme=0x253fa60 | out: pdwScheme=0x253fa60*=0x9) returned 0x0 [0165.529] RtlAllocateHeap (HeapHandle=0x470000, Flags=0x0, Size=0x8006) returned 0x4b7810 [0165.529] IUnknown:Release (This=0x49c15c) returned 0xf [0165.530] RtlAllocateHeap (HeapHandle=0x470000, Flags=0x0, Size=0x1006) returned 0x4bf820 [0165.530] RtlAllocateHeap (HeapHandle=0x470000, Flags=0x0, Size=0x4000) returned 0x4c0830 [0165.530] HeapFree (in: hHeap=0x470000, dwFlags=0x0, lpMem=0x4c0830 | out: hHeap=0x470000) returned 1 [0165.530] RtlAllocateHeap (HeapHandle=0x470000, Flags=0x8, Size=0x108) returned 0x4b4348 [0165.530] StrChrW (lpStart="HTA:APPLICATION", wMatch=0x3a) returned=":APPLICATION" [0165.530] RtlAllocateHeap (HeapHandle=0x470000, Flags=0x8, Size=0x4c) returned 0x4ae6f0 [0165.530] RtlAllocateHeap (HeapHandle=0x470000, Flags=0x8, Size=0x4) returned 0x49bac8 [0165.530] RtlAllocateHeap (HeapHandle=0x470000, Flags=0x0, Size=0x20) returned 0x4b1090 [0165.531] StrCmpICW (pszStr1="PUBLIC", pszStr2="HTA") returned 8 [0165.531] StrCmpICW (pszStr1="HTA", pszStr2="HTA") returned 0 [0165.531] RtlAllocateHeap (HeapHandle=0x470000, Flags=0x8, Size=0x1c) returned 0x4b10b8 [0165.531] RtlAllocateHeap (HeapHandle=0x470000, Flags=0x0, Size=0x1c) returned 0x4b10e0 [0165.531] RtlAllocateHeap (HeapHandle=0x470000, Flags=0x0, Size=0x10) returned 0x4b2738 [0165.531] RtlAllocateHeap (HeapHandle=0x470000, Flags=0x8, Size=0x20) returned 0x4b1108 [0165.531] RtlAllocateHeap (HeapHandle=0x470000, Flags=0x0, Size=0x12) returned 0x4c0848 [0165.531] RtlAllocateHeap (HeapHandle=0x470000, Flags=0x8, Size=0x208) returned 0x4c1430 [0165.531] HeapFree (in: hHeap=0x470000, dwFlags=0x0, lpMem=0x4c0848 | out: hHeap=0x470000) returned 1 [0165.531] RtlAllocateHeap (HeapHandle=0x470000, Flags=0x0, Size=0x10) returned 0x4b2750 [0165.531] HeapFree (in: hHeap=0x470000, dwFlags=0x0, lpMem=0x4b4348 | out: hHeap=0x470000) returned 1 [0165.531] RtlAllocateHeap (HeapHandle=0x470000, Flags=0x0, Size=0x4c) returned 0x4ae748 [0165.531] RtlAllocateHeap (HeapHandle=0x470000, Flags=0x0, Size=0x800) returned 0x4c1640 [0165.531] IsCharSpaceW (wch=0xd) returned 1 [0165.531] IsCharSpaceW (wch=0xa) returned 1 [0165.531] IsCharSpaceW (wch=0x9) returned 1 [0165.531] IsCharSpaceW (wch=0x61) returned 0 [0165.531] IsCharAlphaNumericW (ch=0x20) returned 0 [0165.531] IsCharSpaceW (wch=0x20) returned 1 [0165.531] IsCharSpaceW (wch=0x7b) returned 0 [0165.531] HeapFree (in: hHeap=0x470000, dwFlags=0x0, lpMem=0x4c1640 | out: hHeap=0x470000) returned 1 [0165.531] HeapFree (in: hHeap=0x470000, dwFlags=0x0, lpMem=0x4ae748 | out: hHeap=0x470000) returned 1 [0165.531] HeapFree (in: hHeap=0x470000, dwFlags=0x0, lpMem=0x4b2750 | out: hHeap=0x470000) returned 1 [0165.533] StrToIntW (lpSrc="10240") returned 10240 [0165.533] RtlAllocateHeap (HeapHandle=0x470000, Flags=0x8, Size=0x408) returned 0x4c1640 [0165.533] HeapFree (in: hHeap=0x470000, dwFlags=0x0, lpMem=0x4c1430 | out: hHeap=0x470000) returned 1 [0165.533] StrToIntW (lpSrc="10240") returned 10240 [0165.533] RtlAllocateHeap (HeapHandle=0x470000, Flags=0x8, Size=0x808) returned 0x4c1a50 [0165.533] HeapFree (in: hHeap=0x470000, dwFlags=0x0, lpMem=0x4c1640 | out: hHeap=0x470000) returned 1 [0165.534] WaitForSingleObject (hHandle=0x1dc, dwMilliseconds=0x927c0) returned 0x0 [0165.534] WaitForSingleObject (hHandle=0x1dc, dwMilliseconds=0x927c0) returned 0x0 [0167.225] RtlAllocateHeap (HeapHandle=0x470000, Flags=0x8, Size=0x108) returned 0x4b4d80 [0167.225] StrChrW (lpStart="HTA:APPLICATION", wMatch=0x3a) returned=":APPLICATION" [0167.225] RtlAllocateHeap (HeapHandle=0x470000, Flags=0x8, Size=0x4c) returned 0x4aee28 [0167.225] RtlAllocateHeap (HeapHandle=0x470000, Flags=0x8, Size=0x4) returned 0x4c4c90 [0167.225] RtlAllocateHeap (HeapHandle=0x470000, Flags=0x0, Size=0x20) returned 0x4da4d8 [0167.225] StrCmpICW (pszStr1="PUBLIC", pszStr2="HTA") returned 8 [0167.225] StrCmpICW (pszStr1="HTA", pszStr2="HTA") returned 0 [0167.225] StrCmpICW (pszStr1="APPLICATION", pszStr2="APPLICATION") returned 0 [0167.225] RtlAllocateHeap (HeapHandle=0x470000, Flags=0x0, Size=0xde) returned 0x4b4e90 [0167.225] CompareStringW (Locale=0x409, dwCmpFlags=0x30001, lpString1="XMLNS", cchCount1=-1, lpString2="APPLICATIONNAME", cchCount2=15) returned 3 [0167.225] RtlAllocateHeap (HeapHandle=0x470000, Flags=0x8, Size=0x208) returned 0x4b4f78 [0167.226] CompareStringW (Locale=0x409, dwCmpFlags=0x30001, lpString1="XMLNS", cchCount1=-1, lpString2="SCROLL", cchCount2=6) returned 3 [0167.226] CompareStringW (Locale=0x409, dwCmpFlags=0x30001, lpString1="XMLNS", cchCount1=-1, lpString2="SINGLEINSTANCE", cchCount2=14) returned 3 [0167.226] CompareStringW (Locale=0x409, dwCmpFlags=0x30001, lpString1="XMLNS", cchCount1=-1, lpString2="ICON", cchCount2=4) returned 3 [0167.226] CompareStringW (Locale=0x409, dwCmpFlags=0x30001, lpString1="XMLNS", cchCount1=-1, lpString2="SysMenu", cchCount2=7) returned 3 [0167.226] HeapFree (in: hHeap=0x470000, dwFlags=0x0, lpMem=0x4b4e90 | out: hHeap=0x470000) returned 1 [0167.226] RtlAllocateHeap (HeapHandle=0x470000, Flags=0x0, Size=0x12) returned 0x4c1aa8 [0167.226] HeapFree (in: hHeap=0x470000, dwFlags=0x0, lpMem=0x4c1aa8 | out: hHeap=0x470000) returned 1 [0167.226] RtlReAllocateHeap (Heap=0x470000, Flags=0x0, Ptr=0x4da9e8, Size=0x9c) returned 0x4dbf30 [0167.226] WaitForSingleObject (hHandle=0x1dc, dwMilliseconds=0x927c0) returned 0x0 [0167.226] WaitForSingleObject (hHandle=0x1dc, dwMilliseconds=0x927c0) returned 0x0 [0167.595] RtlAllocateHeap (HeapHandle=0x470000, Flags=0x0, Size=0x10) returned 0x4d9bf8 [0167.595] RtlAllocateHeap (HeapHandle=0x470000, Flags=0x0, Size=0x4c) returned 0x4ae6f0 [0167.595] RtlAllocateHeap (HeapHandle=0x470000, Flags=0x0, Size=0x800) returned 0x4aabb0 [0167.595] IsCharSpaceW (wch=0xd) returned 1 [0167.595] IsCharSpaceW (wch=0xa) returned 1 [0167.595] IsCharSpaceW (wch=0x9) returned 1 [0167.595] IsCharSpaceW (wch=0x61) returned 0 [0167.595] IsCharAlphaNumericW (ch=0x20) returned 0 [0167.595] IsCharSpaceW (wch=0x20) returned 1 [0167.595] IsCharSpaceW (wch=0x7b) returned 0 [0167.595] HeapFree (in: hHeap=0x470000, dwFlags=0x0, lpMem=0x4aabb0 | out: hHeap=0x470000) returned 1 [0167.595] HeapFree (in: hHeap=0x470000, dwFlags=0x0, lpMem=0x4ae6f0 | out: hHeap=0x470000) returned 1 [0167.595] HeapFree (in: hHeap=0x470000, dwFlags=0x0, lpMem=0x4d9bf8 | out: hHeap=0x470000) returned 1 [0167.595] RtlAllocateHeap (HeapHandle=0x470000, Flags=0x8, Size=0x408) returned 0x4aabb0 [0167.595] StrToIntW (lpSrc="10240") returned 10240 [0167.595] StrToIntW (lpSrc="10240") returned 10240 [0167.595] RtlAllocateHeap (HeapHandle=0x470000, Flags=0x8, Size=0x808) returned 0x4bc2e8 [0167.595] WaitForSingleObject (hHandle=0x1dc, dwMilliseconds=0x927c0) Thread: id = 56 os_tid = 0xb90 [0165.913] GetCurrentThreadId () returned 0xb90 [0234.329] GetCurrentThreadId () returned 0xb90 Thread: id = 57 os_tid = 0x520 [0165.917] GetCurrentThreadId () returned 0x520 Thread: id = 58 os_tid = 0x49c [0165.920] GetCurrentThreadId () returned 0x49c [0257.354] GetCurrentThreadId () returned 0x49c Process: id = "4" image_name = "wmiadap.exe" filename = "c:\\windows\\system32\\wbem\\wmiadap.exe" page_root = "0x5cf25000" os_pid = "0x2dc" os_integrity_level = "0x4000" os_privileges = "0xe60b1e890" monitor_reason = "child_process" parent_id = "2" os_parent_pid = "0x370" cmd_line = "wmiadap.exe /F /T /R" cur_dir = "C:\\Windows\\system32\\" os_username = "NT AUTHORITY\\SYSTEM" bitness = "32" os_groups = "Everyone" [0x7], "BUILTIN\\Users" [0x7], "NT AUTHORITY\\SERVICE" [0x7], "CONSOLE LOGON" [0x7], "NT AUTHORITY\\Authenticated Users" [0x7], "NT AUTHORITY\\This Organization" [0x7], "NT SERVICE\\BDESVC" [0xa], "NT SERVICE\\BITS" [0xa], "NT SERVICE\\CertPropSvc" [0xa], "NT SERVICE\\EapHost" [0xa], "NT SERVICE\\hkmsvc" [0xa], "NT SERVICE\\IKEEXT" [0xa], "NT SERVICE\\iphlpsvc" [0xe], "NT SERVICE\\LanmanServer" [0xe], "NT SERVICE\\MMCSS" [0xe], "NT SERVICE\\MSiSCSI" [0xa], "NT SERVICE\\RasAuto" [0xa], "NT SERVICE\\RasMan" [0xa], "NT SERVICE\\RemoteAccess" [0xa], "NT SERVICE\\Schedule" [0xe], "NT SERVICE\\SCPolicySvc" [0xa], "NT SERVICE\\SENS" [0xe], "NT SERVICE\\SessionEnv" [0xa], "NT SERVICE\\SharedAccess" [0xa], "NT SERVICE\\ShellHWDetection" [0xe], "NT SERVICE\\wercplsupport" [0xa], "NT SERVICE\\Winmgmt" [0xe], "NT SERVICE\\wuauserv" [0xe], "NT AUTHORITY\\Logon Session 00000000:0000d057" [0xc0000007], "LOCAL" [0x7], "BUILTIN\\Administrators" [0xe] Thread: id = 59 os_tid = 0xa5c Thread: id = 60 os_tid = 0x68c Thread: id = 61 os_tid = 0xa78 Thread: id = 62 os_tid = 0xa0c Thread: id = 63 os_tid = 0xa68 Thread: id = 64 os_tid = 0xa18 Process: id = "5" image_name = "wmiprvse.exe" filename = "c:\\windows\\system32\\wbem\\wmiprvse.exe" page_root = "0x46aa4000" os_pid = "0x760" os_integrity_level = "0x4000" os_privileges = "0x60800000" monitor_reason = "rpc_server" parent_id = "2" os_parent_pid = "0x250" cmd_line = "C:\\Windows\\system32\\wbem\\wmiprvse.exe -secured -Embedding" cur_dir = "C:\\Windows\\system32\\" os_username = "NT AUTHORITY\\Network Service" bitness = "32" os_groups = "Everyone" [0x7], "BUILTIN\\Users" [0x7], "NT AUTHORITY\\SERVICE" [0x7], "CONSOLE LOGON" [0x7], "NT AUTHORITY\\Authenticated Users" [0x7], "NT AUTHORITY\\This Organization" [0x7], "WMI (Network Service)" [0xf], "NT AUTHORITY\\Logon Session 00000000:0007beda" [0xc000000f] Thread: id = 69 os_tid = 0x738 Thread: id = 70 os_tid = 0xa7c Thread: id = 71 os_tid = 0xa1c Thread: id = 72 os_tid = 0x644 Thread: id = 73 os_tid = 0x95c Thread: id = 74 os_tid = 0xa6c Thread: id = 75 os_tid = 0x6b8 Thread: id = 76 os_tid = 0x414